# Flog Txt Version 1 # Analyzer Version: 2.3.2 # Analyzer Build Date: Nov 9 2018 10:32:43 # Log Creation Date: 10.11.2018 14:37:35.453 Process: id = "1" image_name = "xyuencrypt.exe" filename = "c:\\users\\ciihmnxmn6ps\\desktop\\xyuencrypt.exe" page_root = "0x308b3000" os_pid = "0xe08" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "analysis_target" parent_id = "0" os_parent_pid = "0x0" cmd_line = "\"C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XyuEncrypt.exe\" " cur_dir = "C:\\Users\\CIiHmnxMn6Ps\\Desktop\\" os_username = "LHNIWSJ\\CIiHmnxMn6Ps" os_groups = "LHNIWSJ\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:00014ee5" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 1 start_va = 0x270000 end_va = 0x279fff entry_point = 0x270000 region_type = mapped_file name = "xyuencrypt.exe" filename = "\\Users\\CIiHmnxMn6Ps\\Desktop\\XyuEncrypt.exe" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\xyuencrypt.exe") Region: id = 2 start_va = 0x280000 end_va = 0x29ffff entry_point = 0x0 region_type = private name = "private_0x0000000000280000" filename = "" Region: id = 3 start_va = 0x2a0000 end_va = 0x2b3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000002a0000" filename = "" Region: id = 4 start_va = 0x2c0000 end_va = 0x3bffff entry_point = 0x0 region_type = private name = "private_0x00000000002c0000" filename = "" Region: id = 5 start_va = 0x3c0000 end_va = 0x3c3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003c0000" filename = "" Region: id = 6 start_va = 0x3d0000 end_va = 0x3d0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003d0000" filename = "" Region: id = 7 start_va = 0x3e0000 end_va = 0x3e1fff entry_point = 0x0 region_type = private name = "private_0x00000000003e0000" filename = "" Region: id = 8 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 9 start_va = 0x7ff5ffcd0000 end_va = 0x7ff5ffcf2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007ff5ffcd0000" filename = "" Region: id = 10 start_va = 0x7ff5ffcf8000 end_va = 0x7ff5ffcf8fff entry_point = 0x0 region_type = private name = "private_0x00007ff5ffcf8000" filename = "" Region: id = 11 start_va = 0x7ff5ffcfe000 end_va = 0x7ff5ffcfffff entry_point = 0x0 region_type = private name = "private_0x00007ff5ffcfe000" filename = "" Region: id = 12 start_va = 0x7ff8ee380000 end_va = 0x7ff8ee541fff entry_point = 0x7ff8ee380000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 152 start_va = 0x530000 end_va = 0x62ffff entry_point = 0x0 region_type = private name = "private_0x0000000000530000" filename = "" Region: id = 153 start_va = 0x7ff8d5fe0000 end_va = 0x7ff8d6047fff entry_point = 0x7ff8d5fe0000 region_type = mapped_file name = "mscoree.dll" filename = "\\Windows\\System32\\mscoree.dll" (normalized: "c:\\windows\\system32\\mscoree.dll") Region: id = 154 start_va = 0x7ff8eb870000 end_va = 0x7ff8eba4cfff entry_point = 0x7ff8eb870000 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 155 start_va = 0x7ff8ee2d0000 end_va = 0x7ff8ee37cfff entry_point = 0x7ff8ee2d0000 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 156 start_va = 0x280000 end_va = 0x28ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000280000" filename = "" Region: id = 157 start_va = 0x290000 end_va = 0x296fff entry_point = 0x0 region_type = private name = "private_0x0000000000290000" filename = "" Region: id = 158 start_va = 0x3f0000 end_va = 0x4adfff entry_point = 0x3f0000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 159 start_va = 0x790000 end_va = 0x79ffff entry_point = 0x0 region_type = private name = "private_0x0000000000790000" filename = "" Region: id = 160 start_va = 0x7ff5ffbd0000 end_va = 0x7ff5ffccffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007ff5ffbd0000" filename = "" Region: id = 161 start_va = 0x7ff8e9500000 end_va = 0x7ff8e9577fff entry_point = 0x7ff8e9500000 region_type = mapped_file name = "apphelp.dll" filename = "\\Windows\\System32\\apphelp.dll" (normalized: "c:\\windows\\system32\\apphelp.dll") Region: id = 162 start_va = 0x4b0000 end_va = 0x4b6fff entry_point = 0x0 region_type = private name = "private_0x00000000004b0000" filename = "" Region: id = 163 start_va = 0x630000 end_va = 0x72ffff entry_point = 0x0 region_type = private name = "private_0x0000000000630000" filename = "" Region: id = 164 start_va = 0x7ff5ffcfc000 end_va = 0x7ff5ffcfdfff entry_point = 0x0 region_type = private name = "private_0x00007ff5ffcfc000" filename = "" Region: id = 165 start_va = 0x7ff8ec240000 end_va = 0x7ff8ec29afff entry_point = 0x7ff8ec240000 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 166 start_va = 0x7ff8ec450000 end_va = 0x7ff8ec575fff entry_point = 0x7ff8ec450000 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 167 start_va = 0x7ff8ee0b0000 end_va = 0x7ff8ee14cfff entry_point = 0x7ff8ee0b0000 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 168 start_va = 0x7ff8ee190000 end_va = 0x7ff8ee235fff entry_point = 0x7ff8ee190000 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 169 start_va = 0x4c0000 end_va = 0x4c6fff entry_point = 0x0 region_type = private name = "private_0x00000000004c0000" filename = "" Region: id = 170 start_va = 0x8a0000 end_va = 0x8affff entry_point = 0x0 region_type = private name = "private_0x00000000008a0000" filename = "" Region: id = 171 start_va = 0x7ff8d5f40000 end_va = 0x7ff8d5fd6fff entry_point = 0x7ff8d5f40000 region_type = mapped_file name = "mscoreei.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\mscoreei.dll") Region: id = 172 start_va = 0x7ff8ebdc0000 end_va = 0x7ff8ebf0dfff entry_point = 0x7ff8ebdc0000 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 173 start_va = 0x7ff8edbc0000 end_va = 0x7ff8edd44fff entry_point = 0x7ff8edbc0000 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 174 start_va = 0x7ff8edd60000 end_va = 0x7ff8edfdbfff entry_point = 0x7ff8edd60000 region_type = mapped_file name = "combase.dll" filename = "\\Windows\\System32\\combase.dll" (normalized: "c:\\windows\\system32\\combase.dll") Region: id = 175 start_va = 0x7ff8edfe0000 end_va = 0x7ff8ee030fff entry_point = 0x7ff8edfe0000 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\System32\\shlwapi.dll" (normalized: "c:\\windows\\system32\\shlwapi.dll") Region: id = 176 start_va = 0x8b0000 end_va = 0xa37fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000008b0000" filename = "" Region: id = 177 start_va = 0x7ff8ec0c0000 end_va = 0x7ff8ec21bfff entry_point = 0x7ff8ec0c0000 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\System32\\msctf.dll" (normalized: "c:\\windows\\system32\\msctf.dll") Region: id = 178 start_va = 0x7ff8ee150000 end_va = 0x7ff8ee185fff entry_point = 0x7ff8ee150000 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 179 start_va = 0x4d0000 end_va = 0x4d0fff entry_point = 0x0 region_type = private name = "private_0x00000000004d0000" filename = "" Region: id = 180 start_va = 0x4e0000 end_va = 0x4e0fff entry_point = 0x0 region_type = private name = "private_0x00000000004e0000" filename = "" Region: id = 181 start_va = 0xa40000 end_va = 0xbc0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a40000" filename = "" Region: id = 182 start_va = 0xbd0000 end_va = 0x1fcffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000bd0000" filename = "" Region: id = 183 start_va = 0x7ff8eae20000 end_va = 0x7ff8eae2efff entry_point = 0x7ff8eae20000 region_type = mapped_file name = "kernel.appcore.dll" filename = "\\Windows\\System32\\kernel.appcore.dll" (normalized: "c:\\windows\\system32\\kernel.appcore.dll") Region: id = 184 start_va = 0x7ff8e3a50000 end_va = 0x7ff8e3a59fff entry_point = 0x7ff8e3a50000 region_type = mapped_file name = "version.dll" filename = "\\Windows\\System32\\version.dll" (normalized: "c:\\windows\\system32\\version.dll") Region: id = 185 start_va = 0x7ff8d5180000 end_va = 0x7ff8d5276fff entry_point = 0x7ff8d5180000 region_type = mapped_file name = "msvcr120_clr0400.dll" filename = "\\Windows\\System32\\msvcr120_clr0400.dll" (normalized: "c:\\windows\\system32\\msvcr120_clr0400.dll") Region: id = 186 start_va = 0x7ff8d5280000 end_va = 0x7ff8d5bd1fff entry_point = 0x7ff8d5280000 region_type = mapped_file name = "clr.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\clr.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\clr.dll") Region: id = 187 start_va = 0x4f0000 end_va = 0x4f0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000004f0000" filename = "" Region: id = 188 start_va = 0x500000 end_va = 0x50ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000500000" filename = "" Region: id = 189 start_va = 0x510000 end_va = 0x51ffff entry_point = 0x0 region_type = private name = "private_0x0000000000510000" filename = "" Region: id = 190 start_va = 0x520000 end_va = 0x520fff entry_point = 0x0 region_type = private name = "private_0x0000000000520000" filename = "" Region: id = 191 start_va = 0x730000 end_va = 0x730fff entry_point = 0x0 region_type = private name = "private_0x0000000000730000" filename = "" Region: id = 192 start_va = 0x820000 end_va = 0x82ffff entry_point = 0x0 region_type = private name = "private_0x0000000000820000" filename = "" Region: id = 193 start_va = 0x1fd0000 end_va = 0x20cffff entry_point = 0x0 region_type = private name = "private_0x0000000001fd0000" filename = "" Region: id = 194 start_va = 0x2110000 end_va = 0x211ffff entry_point = 0x0 region_type = private name = "private_0x0000000002110000" filename = "" Region: id = 195 start_va = 0x2120000 end_va = 0x1a11ffff entry_point = 0x0 region_type = private name = "private_0x0000000002120000" filename = "" Region: id = 196 start_va = 0x1a120000 end_va = 0x1a48ffff entry_point = 0x0 region_type = private name = "private_0x000000001a120000" filename = "" Region: id = 197 start_va = 0x1a490000 end_va = 0x1a59efff entry_point = 0x0 region_type = private name = "private_0x000000001a490000" filename = "" Region: id = 198 start_va = 0x1a5a0000 end_va = 0x1a69ffff entry_point = 0x0 region_type = private name = "private_0x000000001a5a0000" filename = "" Region: id = 199 start_va = 0x1a6a0000 end_va = 0x1a9d6fff entry_point = 0x1a6a0000 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 200 start_va = 0x7ff5ffcf6000 end_va = 0x7ff5ffcf7fff entry_point = 0x0 region_type = private name = "private_0x00007ff5ffcf6000" filename = "" Region: id = 201 start_va = 0x7ff5ffcfa000 end_va = 0x7ff5ffcfbfff entry_point = 0x0 region_type = private name = "private_0x00007ff5ffcfa000" filename = "" Region: id = 202 start_va = 0x7ff875af0000 end_va = 0x7ff875afffff entry_point = 0x0 region_type = private name = "private_0x00007ff875af0000" filename = "" Region: id = 203 start_va = 0x7ff875b00000 end_va = 0x7ff875b0ffff entry_point = 0x0 region_type = private name = "private_0x00007ff875b00000" filename = "" Region: id = 204 start_va = 0x7ff875b10000 end_va = 0x7ff875b9ffff entry_point = 0x0 region_type = private name = "private_0x00007ff875b10000" filename = "" Region: id = 205 start_va = 0x7ff875ba0000 end_va = 0x7ff875c0ffff entry_point = 0x0 region_type = private name = "private_0x00007ff875ba0000" filename = "" Region: id = 206 start_va = 0x7ff8d3ce0000 end_va = 0x7ff8d517afff entry_point = 0x7ff8d3ce0000 region_type = mapped_file name = "mscorlib.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_64\\mscorlib\\612274c1d31adcb16957bc45650141c8\\mscorlib.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_64\\mscorlib\\612274c1d31adcb16957bc45650141c8\\mscorlib.ni.dll") Region: id = 207 start_va = 0x7ff8ec300000 end_va = 0x7ff8ec440fff entry_point = 0x7ff8ec300000 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll") Region: id = 208 start_va = 0x1a9e0000 end_va = 0x1aab5fff entry_point = 0x1a9e0000 region_type = mapped_file name = "rpcss.dll" filename = "\\Windows\\System32\\rpcss.dll" (normalized: "c:\\windows\\system32\\rpcss.dll") Region: id = 209 start_va = 0x7ff8eac00000 end_va = 0x7ff8eac6afff entry_point = 0x7ff8eac00000 region_type = mapped_file name = "bcryptprimitives.dll" filename = "\\Windows\\System32\\bcryptprimitives.dll" (normalized: "c:\\windows\\system32\\bcryptprimitives.dll") Region: id = 210 start_va = 0x7ff8e9680000 end_va = 0x7ff8e9715fff entry_point = 0x7ff8e9680000 region_type = mapped_file name = "uxtheme.dll" filename = "\\Windows\\System32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll") Region: id = 211 start_va = 0x1a9e0000 end_va = 0x1ab1ffff entry_point = 0x0 region_type = private name = "private_0x000000001a9e0000" filename = "" Region: id = 212 start_va = 0x7ff5ffb20000 end_va = 0x7ff5ffb2ffff entry_point = 0x0 region_type = private name = "private_0x00007ff5ffb20000" filename = "" Region: id = 213 start_va = 0x7ff5ffb30000 end_va = 0x7ff5ffbcffff entry_point = 0x0 region_type = private name = "private_0x00007ff5ffb30000" filename = "" Region: id = 214 start_va = 0x7ff875c10000 end_va = 0x7ff875c4ffff entry_point = 0x0 region_type = private name = "private_0x00007ff875c10000" filename = "" Region: id = 215 start_va = 0x7ff875c50000 end_va = 0x7ff875c5ffff entry_point = 0x0 region_type = private name = "private_0x00007ff875c50000" filename = "" Region: id = 216 start_va = 0x7ff8d3bd0000 end_va = 0x7ff8d3cd0fff entry_point = 0x7ff8d3bd0000 region_type = mapped_file name = "clrjit.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\clrjit.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\clrjit.dll") Region: id = 217 start_va = 0x7ff8ebb30000 end_va = 0x7ff8ebbedfff entry_point = 0x7ff8ebb30000 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll") Region: id = 218 start_va = 0x740000 end_va = 0x74ffff entry_point = 0x0 region_type = private name = "private_0x0000000000740000" filename = "" Region: id = 219 start_va = 0x7ff8d1ee0000 end_va = 0x7ff8d2dbffff entry_point = 0x7ff8d1ee0000 region_type = mapped_file name = "system.windows.forms.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Windows.Forms\\f1ee4f985931fcaa247c6966911a210c\\System.Windows.Forms.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_64\\system.windows.forms\\f1ee4f985931fcaa247c6966911a210c\\system.windows.forms.ni.dll") Region: id = 220 start_va = 0x7ff8d2dc0000 end_va = 0x7ff8d2fa9fff entry_point = 0x7ff8d2dc0000 region_type = mapped_file name = "system.drawing.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Drawing\\8afb2a58aea8b12a8c4d565b1600ef05\\System.Drawing.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_64\\system.drawing\\8afb2a58aea8b12a8c4d565b1600ef05\\system.drawing.ni.dll") Region: id = 221 start_va = 0x7ff8d2fb0000 end_va = 0x7ff8d3bc3fff entry_point = 0x7ff8d2fb0000 region_type = mapped_file name = "system.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System\\5d38433b42c8020426ab2fef33289985\\System.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_64\\system\\5d38433b42c8020426ab2fef33289985\\system.ni.dll") Region: id = 222 start_va = 0x7ff8eadd0000 end_va = 0x7ff8eae19fff entry_point = 0x7ff8eadd0000 region_type = mapped_file name = "powrprof.dll" filename = "\\Windows\\System32\\powrprof.dll" (normalized: "c:\\windows\\system32\\powrprof.dll") Region: id = 223 start_va = 0x7ff8eae30000 end_va = 0x7ff8eae42fff entry_point = 0x7ff8eae30000 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\System32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll") Region: id = 224 start_va = 0x7ff8eb180000 end_va = 0x7ff8eb7a7fff entry_point = 0x7ff8eb180000 region_type = mapped_file name = "windows.storage.dll" filename = "\\Windows\\System32\\windows.storage.dll" (normalized: "c:\\windows\\system32\\windows.storage.dll") Region: id = 225 start_va = 0x7ff8eb7b0000 end_va = 0x7ff8eb862fff entry_point = 0x7ff8eb7b0000 region_type = mapped_file name = "shcore.dll" filename = "\\Windows\\System32\\SHCore.dll" (normalized: "c:\\windows\\system32\\shcore.dll") Region: id = 226 start_va = 0x7ff8ec580000 end_va = 0x7ff8edaa4fff entry_point = 0x7ff8ec580000 region_type = mapped_file name = "shell32.dll" filename = "\\Windows\\System32\\shell32.dll" (normalized: "c:\\windows\\system32\\shell32.dll") Region: id = 227 start_va = 0x750000 end_va = 0x750fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000750000" filename = "" Region: id = 228 start_va = 0x7ff8e79b0000 end_va = 0x7ff8e7b32fff entry_point = 0x7ff8e79b0000 region_type = mapped_file name = "propsys.dll" filename = "\\Windows\\System32\\propsys.dll" (normalized: "c:\\windows\\system32\\propsys.dll") Region: id = 229 start_va = 0x7ff8ea620000 end_va = 0x7ff8ea636fff entry_point = 0x7ff8ea620000 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\System32\\cryptsp.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll") Region: id = 230 start_va = 0x7ff8eabd0000 end_va = 0x7ff8eabf7fff entry_point = 0x7ff8eabd0000 region_type = mapped_file name = "bcrypt.dll" filename = "\\Windows\\System32\\bcrypt.dll" (normalized: "c:\\windows\\system32\\bcrypt.dll") Region: id = 231 start_va = 0x7ff8ea270000 end_va = 0x7ff8ea2a2fff entry_point = 0x7ff8ea270000 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\System32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll") Region: id = 232 start_va = 0x7ff8ea790000 end_va = 0x7ff8ea79afff entry_point = 0x7ff8ea790000 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\System32\\cryptbase.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll") Region: id = 233 start_va = 0x760000 end_va = 0x760fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000760000" filename = "" Region: id = 234 start_va = 0x1a9e0000 end_va = 0x1aadffff entry_point = 0x0 region_type = private name = "private_0x000000001a9e0000" filename = "" Region: id = 235 start_va = 0x1ab10000 end_va = 0x1ab1ffff entry_point = 0x0 region_type = private name = "private_0x000000001ab10000" filename = "" Region: id = 236 start_va = 0x1ab20000 end_va = 0x1ac1ffff entry_point = 0x0 region_type = private name = "private_0x000000001ab20000" filename = "" Region: id = 237 start_va = 0x1ac20000 end_va = 0x1ad1ffff entry_point = 0x0 region_type = private name = "private_0x000000001ac20000" filename = "" Region: id = 238 start_va = 0x7ff5ffb1c000 end_va = 0x7ff5ffb1dfff entry_point = 0x0 region_type = private name = "private_0x00007ff5ffb1c000" filename = "" Region: id = 239 start_va = 0x7ff5ffb1e000 end_va = 0x7ff5ffb1ffff entry_point = 0x0 region_type = private name = "private_0x00007ff5ffb1e000" filename = "" Region: id = 240 start_va = 0x7ff5ffcf4000 end_va = 0x7ff5ffcf5fff entry_point = 0x0 region_type = private name = "private_0x00007ff5ffcf4000" filename = "" Region: id = 241 start_va = 0x7ff8edb10000 end_va = 0x7ff8edbb4fff entry_point = 0x7ff8edb10000 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\System32\\clbcatq.dll" (normalized: "c:\\windows\\system32\\clbcatq.dll") Region: id = 242 start_va = 0x7ff8df640000 end_va = 0x7ff8dfaa9fff entry_point = 0x7ff8df640000 region_type = mapped_file name = "actxprxy.dll" filename = "\\Windows\\System32\\actxprxy.dll" (normalized: "c:\\windows\\system32\\actxprxy.dll") Region: id = 243 start_va = 0x770000 end_va = 0x770fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000770000" filename = "" Region: id = 244 start_va = 0x1ad20000 end_va = 0x1ae1ffff entry_point = 0x0 region_type = private name = "private_0x000000001ad20000" filename = "" Region: id = 245 start_va = 0x7ff5ffb1a000 end_va = 0x7ff5ffb1bfff entry_point = 0x0 region_type = private name = "private_0x00007ff5ffb1a000" filename = "" Region: id = 246 start_va = 0x780000 end_va = 0x783fff entry_point = 0x780000 region_type = mapped_file name = "cversions.2.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db") Region: id = 247 start_va = 0x7a0000 end_va = 0x7e2fff entry_point = 0x7a0000 region_type = mapped_file name = "{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x000000000000000f.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x000000000000000f.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x000000000000000f.db") Region: id = 248 start_va = 0x7f0000 end_va = 0x7f3fff entry_point = 0x7f0000 region_type = mapped_file name = "cversions.2.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db") Region: id = 249 start_va = 0x1ae20000 end_va = 0x1aeaafff entry_point = 0x1ae20000 region_type = mapped_file name = "{ddf571f2-be98-426d-8288-1a9a39c3fda2}.2.ver0x0000000000000001.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000001.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{ddf571f2-be98-426d-8288-1a9a39c3fda2}.2.ver0x0000000000000001.db") Region: id = 250 start_va = 0x800000 end_va = 0x810fff entry_point = 0x800000 region_type = mapped_file name = "propsys.dll.mui" filename = "\\Windows\\System32\\en-US\\propsys.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\propsys.dll.mui") Region: id = 251 start_va = 0x7ff8eaf60000 end_va = 0x7ff8eafa3fff entry_point = 0x7ff8eaf60000 region_type = mapped_file name = "cfgmgr32.dll" filename = "\\Windows\\System32\\cfgmgr32.dll" (normalized: "c:\\windows\\system32\\cfgmgr32.dll") Region: id = 252 start_va = 0x830000 end_va = 0x833fff entry_point = 0x830000 region_type = mapped_file name = "cversions.1.db" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\cversions.1.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\caches\\cversions.1.db") Region: id = 253 start_va = 0x840000 end_va = 0x852fff entry_point = 0x840000 region_type = mapped_file name = "{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x000000000000001c.db" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x000000000000001c.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\caches\\{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x000000000000001c.db") Region: id = 254 start_va = 0x860000 end_va = 0x860fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000860000" filename = "" Region: id = 255 start_va = 0x1aeb0000 end_va = 0x1afaffff entry_point = 0x0 region_type = private name = "private_0x000000001aeb0000" filename = "" Region: id = 256 start_va = 0x7ff5ffb18000 end_va = 0x7ff5ffb19fff entry_point = 0x0 region_type = private name = "private_0x00007ff5ffb18000" filename = "" Region: id = 257 start_va = 0x7ff8e0a60000 end_va = 0x7ff8e0bf6fff entry_point = 0x7ff8e0a60000 region_type = mapped_file name = "urlmon.dll" filename = "\\Windows\\System32\\urlmon.dll" (normalized: "c:\\windows\\system32\\urlmon.dll") Region: id = 258 start_va = 0x7ff8e3c30000 end_va = 0x7ff8e3fa5fff entry_point = 0x7ff8e3c30000 region_type = mapped_file name = "iertutil.dll" filename = "\\Windows\\System32\\iertutil.dll" (normalized: "c:\\windows\\system32\\iertutil.dll") Region: id = 259 start_va = 0x7ff8ea9d0000 end_va = 0x7ff8ea9fbfff entry_point = 0x7ff8ea9d0000 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\System32\\sspicli.dll" (normalized: "c:\\windows\\system32\\sspicli.dll") Region: id = 260 start_va = 0x830000 end_va = 0x830fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000830000" filename = "" Region: id = 745 start_va = 0x1afb0000 end_va = 0x1b0affff entry_point = 0x0 region_type = private name = "private_0x000000001afb0000" filename = "" Region: id = 746 start_va = 0x1b110000 end_va = 0x1b11ffff entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 3469 start_va = 0x1ab20000 end_va = 0x1ad1ffff entry_point = 0x0 region_type = private name = "private_0x000000001ab20000" filename = "" Region: id = 3476 start_va = 0x630000 end_va = 0x630fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000630000" filename = "" Region: id = 3477 start_va = 0x630000 end_va = 0x632fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000630000" filename = "" Region: id = 3478 start_va = 0x640000 end_va = 0x6e5fff entry_point = 0x640000 region_type = mapped_file name = "comctl32.dll" filename = "\\Windows\\WinSxS\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.10240.16384_none_0212ec7eba871e86\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.10240.16384_none_0212ec7eba871e86\\comctl32.dll") Region: id = 3479 start_va = 0x7ff8d1870000 end_va = 0x7ff8d1919fff entry_point = 0x7ff8d1870000 region_type = mapped_file name = "comctl32.dll" filename = "\\Windows\\WinSxS\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.10240.16384_none_0212ec7eba871e86\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.10240.16384_none_0212ec7eba871e86\\comctl32.dll") Region: id = 3480 start_va = 0x1b120000 end_va = 0x1b30ffff entry_point = 0x0 region_type = private name = "private_0x000000001b120000" filename = "" Region: id = 3481 start_va = 0x640000 end_va = 0x640fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000640000" filename = "" Region: id = 3482 start_va = 0x640000 end_va = 0x6f7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000640000" filename = "" Region: id = 3483 start_va = 0x700000 end_va = 0x703fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000700000" filename = "" Region: id = 3484 start_va = 0x710000 end_va = 0x716fff entry_point = 0x0 region_type = private name = "private_0x0000000000710000" filename = "" Region: id = 3485 start_va = 0x1b310000 end_va = 0x1b580fff entry_point = 0x1b310000 region_type = mapped_file name = "comctl32.dll" filename = "\\Windows\\WinSxS\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43\\comctl32.dll") Region: id = 3486 start_va = 0x7ff8e57b0000 end_va = 0x7ff8e5a23fff entry_point = 0x7ff8e57b0000 region_type = mapped_file name = "comctl32.dll" filename = "\\Windows\\WinSxS\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43\\comctl32.dll") Region: id = 3487 start_va = 0x720000 end_va = 0x720fff entry_point = 0x720000 region_type = mapped_file name = "windowsshell.manifest" filename = "\\Windows\\WindowsShell.Manifest" (normalized: "c:\\windows\\windowsshell.manifest") Region: id = 3488 start_va = 0x870000 end_va = 0x871fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000870000" filename = "" Region: id = 3489 start_va = 0x7ff8e8fb0000 end_va = 0x7ff8e8fd1fff entry_point = 0x7ff8e8fb0000 region_type = mapped_file name = "dwmapi.dll" filename = "\\Windows\\System32\\dwmapi.dll" (normalized: "c:\\windows\\system32\\dwmapi.dll") Region: id = 3490 start_va = 0x1a9e0000 end_va = 0x1aadffff entry_point = 0x0 region_type = private name = "private_0x000000001a9e0000" filename = "" Region: id = 3491 start_va = 0x7ff5ffcfc000 end_va = 0x7ff5ffcfdfff entry_point = 0x0 region_type = private name = "private_0x00007ff5ffcfc000" filename = "" Region: id = 3492 start_va = 0x7ff8d9a40000 end_va = 0x7ff8d9be8fff entry_point = 0x7ff8d9a40000 region_type = mapped_file name = "gdiplus.dll" filename = "\\Windows\\WinSxS\\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.10240.16384_none_89a94c179af51f83\\GdiPlus.dll" (normalized: "c:\\windows\\winsxs\\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.10240.16384_none_89a94c179af51f83\\gdiplus.dll") Region: id = 3493 start_va = 0x1ad20000 end_va = 0x1ae0ffff entry_point = 0x0 region_type = private name = "private_0x000000001ad20000" filename = "" Region: id = 3494 start_va = 0x1aeb0000 end_va = 0x1afaffff entry_point = 0x0 region_type = private name = "private_0x000000001aeb0000" filename = "" Region: id = 3495 start_va = 0x7ff5ffcf4000 end_va = 0x7ff5ffcf5fff entry_point = 0x0 region_type = private name = "private_0x00007ff5ffcf4000" filename = "" Region: id = 3496 start_va = 0x7ff8e37f0000 end_va = 0x7ff8e3a48fff entry_point = 0x7ff8e37f0000 region_type = mapped_file name = "dwrite.dll" filename = "\\Windows\\System32\\DWrite.dll" (normalized: "c:\\windows\\system32\\dwrite.dll") Region: id = 3497 start_va = 0x1ad20000 end_va = 0x1ad95fff entry_point = 0x1ad20000 region_type = mapped_file name = "~fontcache-system.dat" filename = "\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\FontCache\\~FontCache-System.dat" (normalized: "c:\\windows\\serviceprofiles\\localservice\\appdata\\local\\fontcache\\~fontcache-system.dat") Region: id = 3498 start_va = 0x1ae00000 end_va = 0x1ae0ffff entry_point = 0x0 region_type = private name = "private_0x000000001ae00000" filename = "" Region: id = 3499 start_va = 0x1b120000 end_va = 0x1b21ffff entry_point = 0x0 region_type = private name = "private_0x000000001b120000" filename = "" Region: id = 3500 start_va = 0x1b300000 end_va = 0x1b30ffff entry_point = 0x0 region_type = private name = "private_0x000000001b300000" filename = "" Region: id = 3501 start_va = 0x1b310000 end_va = 0x1c30ffff entry_point = 0x1b310000 region_type = mapped_file name = "~fontcache-fontface.dat" filename = "\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\FontCache\\~FontCache-FontFace.dat" (normalized: "c:\\windows\\serviceprofiles\\localservice\\appdata\\local\\fontcache\\~fontcache-fontface.dat") Region: id = 3502 start_va = 0x720000 end_va = 0x726fff entry_point = 0x0 region_type = private name = "private_0x0000000000720000" filename = "" Region: id = 3503 start_va = 0x1c310000 end_va = 0x1c40ffff entry_point = 0x0 region_type = private name = "private_0x000000001c310000" filename = "" Region: id = 3504 start_va = 0x1c410000 end_va = 0x1c901fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001c410000" filename = "" Region: id = 3505 start_va = 0x7ff875c60000 end_va = 0x7ff875c6ffff entry_point = 0x0 region_type = private name = "private_0x00007ff875c60000" filename = "" Region: id = 3506 start_va = 0x1b220000 end_va = 0x1b281fff entry_point = 0x1b220000 region_type = mapped_file name = "mscorrc.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\mscorrc.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\mscorrc.dll") Region: id = 3507 start_va = 0x1c910000 end_va = 0x1d94ffff entry_point = 0x1c910000 region_type = mapped_file name = "staticcache.dat" filename = "\\Windows\\Fonts\\StaticCache.dat" (normalized: "c:\\windows\\fonts\\staticcache.dat") Region: id = 3508 start_va = 0x880000 end_va = 0x880fff entry_point = 0x0 region_type = private name = "private_0x0000000000880000" filename = "" Region: id = 3509 start_va = 0x890000 end_va = 0x894fff entry_point = 0x890000 region_type = mapped_file name = "user32.dll.mui" filename = "\\Windows\\System32\\en-US\\user32.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\user32.dll.mui") Region: id = 3510 start_va = 0x1d950000 end_va = 0x1da4ffff entry_point = 0x0 region_type = private name = "private_0x000000001d950000" filename = "" Region: id = 3511 start_va = 0x1da50000 end_va = 0x1dd30fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001da50000" filename = "" Region: id = 3512 start_va = 0x20d0000 end_va = 0x20d0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000020d0000" filename = "" Region: id = 3513 start_va = 0x1dd40000 end_va = 0x1df6dfff entry_point = 0x0 region_type = private name = "private_0x000000001dd40000" filename = "" Thread: id = 1 os_tid = 0xe0c [0038.309] CoInitializeEx (pvReserved=0x0, dwCoInit=0x2) returned 0x0 [0038.918] RoInitialize () returned 0x1 [0038.918] RoUninitialize () returned 0x0 [0041.096] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XyuEncrypt.exe", nBufferLength=0x105, lpBuffer=0x3be410, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XyuEncrypt.exe", lpFilePart=0x0) returned 0x2c [0041.232] LookupPrivilegeValueW (in: lpSystemName=0x0, lpName="SeDebugPrivilege", lpLuid=0x3bd980 | out: lpLuid=0x3bd980*(LowPart=0x14, HighPart=0)) returned 1 [0041.233] GetCurrentProcess () returned 0xffffffffffffffff [0041.233] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x20, TokenHandle=0x3bd978 | out: TokenHandle=0x3bd978*=0x24c) returned 1 [0041.233] AdjustTokenPrivileges (in: TokenHandle=0x24c, DisableAllPrivileges=0, NewState=0x2124e70*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x14, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x0, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0041.234] CloseHandle (hObject=0x24c) returned 1 [0041.302] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12131930, Length=0x20000, ResultLength=0x3bea60 | out: SystemInformation=0x12131930, ResultLength=0x3bea60*=0x142a0) returned 0x0 [0041.493] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XyuEncrypt.exe", nBufferLength=0x105, lpBuffer=0x3be3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XyuEncrypt.exe", lpFilePart=0x0) returned 0x2c [0041.497] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XyuEncrypt.exe", nBufferLength=0x105, lpBuffer=0x3be560, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XyuEncrypt.exe", lpFilePart=0x0) returned 0x2c [0041.557] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XyuEncrypt.exe", dwFileAttributes=0x2) returned 1 [0041.559] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XyuEncrypt.exe", nBufferLength=0x105, lpBuffer=0x3be3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XyuEncrypt.exe", lpFilePart=0x0) returned 0x2c [0041.575] LocalAlloc (uFlags=0x0, uBytes=0xee) returned 0x5b9f00 [0042.524] ShellExecuteExW (in: pExecInfo=0x2152a58*(cbSize=0x70, fMask=0x540, hwnd=0x0, lpVerb=0x0, lpFile="schtasks.exe", lpParameters="/create /tn \\Windows\\Startup /tr C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XyuEncrypt.exe /st 00:00 /du 9999:59 /sc daily /ri 3 /f", lpDirectory=0x0, nShow=0, hInstApp=0x0, lpIDList=0x0, lpClass=0x0, hkeyClass=0x0, dwHotKey=0x0, hIcon=0x0, hMonitor=0x0, hProcess=0x0) | out: pExecInfo=0x2152a58*(cbSize=0x70, fMask=0x540, hwnd=0x0, lpVerb=0x0, lpFile="schtasks.exe", lpParameters="/create /tn \\Windows\\Startup /tr C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XyuEncrypt.exe /st 00:00 /du 9999:59 /sc daily /ri 3 /f", lpDirectory=0x0, nShow=0, hInstApp=0x2a, lpIDList=0x0, lpClass=0x0, hkeyClass=0x0, dwHotKey=0x0, hIcon=0x0, hMonitor=0x0, hProcess=0x434)) returned 1 [0044.517] LocalFree (hMem=0x5c8a60) returned 0x0 [0044.517] LocalFree (hMem=0x5b9f00) returned 0x0 [0044.538] GetEnvironmentVariableW (in: lpName="ProgramData", lpBuffer=0x3be8b0, nSize=0x80 | out: lpBuffer="C:\\ProgramData") returned 0xe [0044.538] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\trig", nBufferLength=0x105, lpBuffer=0x3be560, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\trig", lpFilePart=0x0) returned 0x13 [0044.539] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be9a0) returned 1 [0044.539] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\trig" (normalized: "c:\\programdata\\trig"), fInfoLevelId=0x0, lpFileInformation=0x3bea80 | out: lpFileInformation=0x3bea80*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0044.539] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be960) returned 1 [0044.606] GetLogicalDrives () returned 0x4 [0044.642] CoTaskMemAlloc (cb=0x20c) returned 0x5a4490 [0044.642] SHGetFolderPathW (in: hwnd=0x0, csidl=8, hToken=0x0, dwFlags=0x0, pszPath=0x5a4490 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent") returned 0x0 [0044.643] CoTaskMemFree (pv=0x5a4490) [0044.643] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent", nBufferLength=0x105, lpBuffer=0x3be3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent", lpFilePart=0x0) returned 0x3e [0044.643] CoTaskMemAlloc (cb=0x20c) returned 0x5a6ad0 [0044.643] SHGetFolderPathW (in: hwnd=0x0, csidl=39, hToken=0x0, dwFlags=0x0, pszPath=0x5a6ad0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Pictures") returned 0x0 [0044.643] CoTaskMemFree (pv=0x5a6ad0) [0044.643] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures", nBufferLength=0x105, lpBuffer=0x3be3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures", lpFilePart=0x0) returned 0x1e [0044.643] CoTaskMemAlloc (cb=0x20c) returned 0x5a4490 [0044.643] SHGetFolderPathW (in: hwnd=0x0, csidl=13, hToken=0x0, dwFlags=0x0, pszPath=0x5a4490 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Music") returned 0x0 [0044.644] CoTaskMemFree (pv=0x5a4490) [0044.644] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music", nBufferLength=0x105, lpBuffer=0x3be3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music", lpFilePart=0x0) returned 0x1b [0044.644] CoTaskMemAlloc (cb=0x20c) returned 0x5a6ad0 [0044.644] SHGetFolderPathW (in: hwnd=0x0, csidl=14, hToken=0x0, dwFlags=0x0, pszPath=0x5a6ad0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Videos") returned 0x0 [0044.644] CoTaskMemFree (pv=0x5a6ad0) [0044.644] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos", nBufferLength=0x105, lpBuffer=0x3be3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos", lpFilePart=0x0) returned 0x1c [0044.644] CoTaskMemAlloc (cb=0x20c) returned 0x5a4490 [0044.644] SHGetFolderPathW (in: hwnd=0x0, csidl=5, hToken=0x0, dwFlags=0x0, pszPath=0x5a4490 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Documents") returned 0x0 [0044.645] CoTaskMemFree (pv=0x5a4490) [0044.645] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents", nBufferLength=0x105, lpBuffer=0x3be3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents", lpFilePart=0x0) returned 0x1f [0044.645] CoTaskMemAlloc (cb=0x20c) returned 0x5a4490 [0044.645] SHGetFolderPathW (in: hwnd=0x0, csidl=6, hToken=0x0, dwFlags=0x0, pszPath=0x5a4490 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Favorites") returned 0x0 [0044.645] CoTaskMemFree (pv=0x5a4490) [0044.645] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Favorites", nBufferLength=0x105, lpBuffer=0x3be3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Favorites", lpFilePart=0x0) returned 0x1f [0044.645] CoTaskMemAlloc (cb=0x20c) returned 0x5a6ad0 [0044.645] SHGetFolderPathW (in: hwnd=0x0, csidl=46, hToken=0x0, dwFlags=0x0, pszPath=0x5a6ad0 | out: pszPath="C:\\Users\\Public\\Documents") returned 0x0 [0044.646] CoTaskMemFree (pv=0x5a6ad0) [0044.646] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents", nBufferLength=0x105, lpBuffer=0x3be3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents", lpFilePart=0x0) returned 0x19 [0044.646] CoTaskMemAlloc (cb=0x20c) returned 0x5a6ad0 [0044.646] SHGetFolderPathW (in: hwnd=0x0, csidl=54, hToken=0x0, dwFlags=0x0, pszPath=0x5a6ad0 | out: pszPath="C:\\Users\\Public\\Pictures") returned 0x0 [0044.646] CoTaskMemFree (pv=0x5a6ad0) [0044.646] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures", nBufferLength=0x105, lpBuffer=0x3be3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures", lpFilePart=0x0) returned 0x18 [0044.646] CoTaskMemAlloc (cb=0x20c) returned 0x5a6ad0 [0044.646] SHGetFolderPathW (in: hwnd=0x0, csidl=53, hToken=0x0, dwFlags=0x0, pszPath=0x5a6ad0 | out: pszPath="C:\\Users\\Public\\Music") returned 0x0 [0044.647] CoTaskMemFree (pv=0x5a6ad0) [0044.647] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Music", nBufferLength=0x105, lpBuffer=0x3be3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Music", lpFilePart=0x0) returned 0x15 [0044.647] CoTaskMemAlloc (cb=0x20c) returned 0x5a6ad0 [0044.647] SHGetFolderPathW (in: hwnd=0x0, csidl=55, hToken=0x0, dwFlags=0x0, pszPath=0x5a6ad0 | out: pszPath="C:\\Users\\Public\\Videos") returned 0x0 [0044.647] CoTaskMemFree (pv=0x5a6ad0) [0044.647] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Videos", nBufferLength=0x105, lpBuffer=0x3be3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Videos", lpFilePart=0x0) returned 0x16 [0044.647] CoTaskMemAlloc (cb=0x20c) returned 0x5a4490 [0044.647] SHGetFolderPathW (in: hwnd=0x0, csidl=25, hToken=0x0, dwFlags=0x0, pszPath=0x5a4490 | out: pszPath="C:\\Users\\Public\\Desktop") returned 0x0 [0044.648] CoTaskMemFree (pv=0x5a4490) [0044.648] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Desktop", nBufferLength=0x105, lpBuffer=0x3be3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Desktop", lpFilePart=0x0) returned 0x17 [0044.648] CoTaskMemAlloc (cb=0x20c) returned 0x5a6ad0 [0044.648] SHGetFolderPathW (in: hwnd=0x0, csidl=0, hToken=0x0, dwFlags=0x0, pszPath=0x5a6ad0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 0x0 [0044.648] CoTaskMemFree (pv=0x5a6ad0) [0044.648] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop", nBufferLength=0x105, lpBuffer=0x3be3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpFilePart=0x0) returned 0x1d [0044.648] GetEnvironmentVariableW (in: lpName="AppData", lpBuffer=0x3be8b0, nSize=0x80 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming") returned 0x25 [0044.648] CoTaskMemAlloc (cb=0x20c) returned 0x5a6ad0 [0044.648] SHGetFolderPathW (in: hwnd=0x0, csidl=0, hToken=0x0, dwFlags=0x0, pszPath=0x5a6ad0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 0x0 [0044.648] CoTaskMemFree (pv=0x5a6ad0) [0044.648] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop", nBufferLength=0x105, lpBuffer=0x3be3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpFilePart=0x0) returned 0x1d [0044.648] GetEnvironmentVariableW (in: lpName="LocalAppData", lpBuffer=0x3be8b0, nSize=0x80 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 0x23 [0044.821] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be950) returned 1 [0044.823] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent", nBufferLength=0x105, lpBuffer=0x3be440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent", lpFilePart=0x0) returned 0x3e [0044.877] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\", nBufferLength=0x105, lpBuffer=0x3be3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\", lpFilePart=0x0) returned 0x3f [0044.905] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\*", lpFindFileData=0x3be5f0 | out: lpFindFileData=0x3be5f0) returned 0x5d78b0 [0045.041] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.042] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.042] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.042] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.042] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.042] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.042] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.042] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.043] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.043] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.043] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.043] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.043] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.043] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.043] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.043] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.043] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.043] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.044] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.044] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.044] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.044] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.044] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.044] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.044] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.044] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.044] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.045] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.045] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.045] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.045] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.045] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.045] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.045] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.045] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.045] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.045] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.046] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.046] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.046] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.046] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.046] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.046] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.046] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.046] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.046] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.047] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.047] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.047] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.047] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.047] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.047] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.047] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.047] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.048] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.048] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.048] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.048] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.048] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.048] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.048] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.048] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.048] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.049] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.049] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.049] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.049] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.049] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.049] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.049] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.049] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.049] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.050] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.050] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.050] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.050] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.050] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.050] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.050] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.050] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.051] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.051] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.051] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.051] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.051] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.051] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.051] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.051] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.051] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.051] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.052] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.052] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.052] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.052] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.052] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.052] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.052] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.052] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.052] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.053] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.053] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.053] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.053] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.053] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.053] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.053] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.053] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.053] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.053] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.054] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.054] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.054] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.054] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.054] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.054] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.054] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.054] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.054] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.055] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.055] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.055] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.055] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.055] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.055] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.055] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.055] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.055] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.055] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.056] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.056] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.056] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.056] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.056] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.056] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.056] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.056] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.056] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.056] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.057] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.057] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.057] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.057] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.057] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.057] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.057] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.057] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.057] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.057] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.058] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.058] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.058] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.058] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.058] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.058] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.058] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.058] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.058] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.058] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.058] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.058] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 0 [0045.058] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0045.058] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0045.058] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0045.349] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be950) returned 1 [0045.349] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent", nBufferLength=0x105, lpBuffer=0x3be440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent", lpFilePart=0x0) returned 0x3e [0045.349] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\", nBufferLength=0x105, lpBuffer=0x3be3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\", lpFilePart=0x0) returned 0x3f [0045.349] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\*", lpFindFileData=0x3be5f0 | out: lpFindFileData=0x3be5f0) returned 0x5d7f10 [0045.364] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.367] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.367] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.367] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.368] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.368] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.368] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.368] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.368] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.368] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.368] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.369] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.369] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.369] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.369] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.369] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.369] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.369] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.370] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.370] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.370] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.370] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.370] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.370] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.370] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.370] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.371] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.371] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.371] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.371] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.371] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.371] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.371] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.372] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.372] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.372] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.372] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.372] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.372] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.372] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.372] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.373] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.373] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.373] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.373] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.373] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.373] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.373] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.373] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.374] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.374] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.374] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.374] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.374] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.374] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.374] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.374] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.374] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.375] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.534] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.534] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.534] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.534] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.534] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.535] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.535] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.535] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.535] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.535] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.535] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.535] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.536] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.536] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.536] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.536] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.536] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.536] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.536] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.537] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.537] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.537] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.537] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.537] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.537] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.537] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.537] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.537] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.537] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.537] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.538] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.538] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.538] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.538] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.538] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.538] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.538] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.538] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.539] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.539] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.539] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.539] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.539] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.539] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.539] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.539] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.539] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.539] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.540] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.540] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.540] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.540] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.540] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.540] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.540] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.540] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.540] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.540] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.540] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.541] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.541] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.541] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.541] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.541] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.541] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.541] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.541] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.541] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.541] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.541] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.541] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.542] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.542] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.542] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.542] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.542] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.542] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.542] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.542] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.542] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.542] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.542] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.542] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.542] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.542] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.542] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.542] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.542] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.542] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.542] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.542] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.542] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.542] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.542] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.542] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.542] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.542] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.543] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.543] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.543] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0045.543] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 0 [0045.543] FindClose (in: hFindFile=0x5d7f10 | out: hFindFile=0x5d7f10) returned 1 [0045.543] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0045.543] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0045.641] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-42tUE1gV2.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-42tUE1gV2.lnk", lpFilePart=0x0) returned 0x4d [0045.659] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0045.659] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-42tUE1gV2.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\-42tue1gv2.lnk"), fInfoLevelId=0x0, lpFileInformation=0x2186ba0 | out: lpFileInformation=0x2186ba0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf22b4501, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf574a972, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0xf574a972, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x497)) returned 1 [0045.659] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0045.661] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-42tUE1gV2.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-42tUE1gV2.lnk", lpFilePart=0x0) returned 0x4d [0045.661] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0045.661] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-42tUE1gV2.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\-42tue1gv2.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x44c [0045.661] GetFileType (hFile=0x44c) returned 0x1 [0045.661] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0045.661] GetFileType (hFile=0x44c) returned 0x1 [0045.661] GetFileSize (in: hFile=0x44c, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x497 [0045.662] ReadFile (in: hFile=0x44c, lpBuffer=0x21873c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x21873c8*, lpNumberOfBytesRead=0x3be868*=0x497, lpOverlapped=0x0) returned 1 [0045.662] CloseHandle (hObject=0x44c) returned 1 [0045.770] BCryptGetFipsAlgorithmMode (in: pfEnabled=0x3be8b0 | out: pfEnabled=0x3be8b0) returned 0x0 [0045.878] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-42tUE1gV2.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-42tUE1gV2.lnk", lpFilePart=0x0) returned 0x4d [0045.878] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0045.878] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-42tUE1gV2.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\-42tue1gv2.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0045.879] GetFileType (hFile=0x448) returned 0x1 [0045.879] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0045.879] GetFileType (hFile=0x448) returned 0x1 [0045.879] WriteFile (in: hFile=0x448, lpBuffer=0x22040a8*, nNumberOfBytesToWrite=0x4a0, lpNumberOfBytesWritten=0x3be778, lpOverlapped=0x0 | out: lpBuffer=0x22040a8*, lpNumberOfBytesWritten=0x3be778*=0x4a0, lpOverlapped=0x0) returned 1 [0045.880] CloseHandle (hObject=0x448) returned 1 [0045.882] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-42tUE1gV2.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-42tUE1gV2.lnk", lpFilePart=0x0) returned 0x4d [0045.882] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-42tUE1gV2.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-42tUE1gV2.lnk.xuy", lpFilePart=0x0) returned 0x51 [0045.882] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0045.882] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-42tUE1gV2.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\-42tue1gv2.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf22b4501, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf574a972, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0x7324e6f, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x4a0)) returned 1 [0045.882] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0045.899] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-42tUE1gV2.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\-42tue1gv2.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-42tUE1gV2.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\-42tue1gv2.lnk.xuy")) returned 1 [0045.900] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-cvcX Qn.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-cvcX Qn.lnk", lpFilePart=0x0) returned 0x4b [0045.900] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0045.900] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-cvcX Qn.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\-cvcx qn.lnk"), fInfoLevelId=0x0, lpFileInformation=0x2205340 | out: lpFileInformation=0x2205340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf629dab6, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf629dab6, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0xf629dab6, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x290)) returned 1 [0045.900] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0045.900] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-cvcX Qn.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-cvcX Qn.lnk", lpFilePart=0x0) returned 0x4b [0045.900] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0045.900] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-cvcX Qn.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\-cvcx qn.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0045.900] GetFileType (hFile=0x448) returned 0x1 [0045.900] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0045.900] GetFileType (hFile=0x448) returned 0x1 [0045.900] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x290 [0045.900] ReadFile (in: hFile=0x448, lpBuffer=0x2205888, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x2205888*, lpNumberOfBytesRead=0x3be868*=0x290, lpOverlapped=0x0) returned 1 [0045.901] CloseHandle (hObject=0x448) returned 1 [0045.947] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-cvcX Qn.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-cvcX Qn.lnk", lpFilePart=0x0) returned 0x4b [0045.947] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0045.947] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-cvcX Qn.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\-cvcx qn.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0045.948] GetFileType (hFile=0x448) returned 0x1 [0045.948] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0045.949] GetFileType (hFile=0x448) returned 0x1 [0045.949] WriteFile (in: hFile=0x448, lpBuffer=0x227d590*, nNumberOfBytesToWrite=0x2a0, lpNumberOfBytesWritten=0x3be778, lpOverlapped=0x0 | out: lpBuffer=0x227d590*, lpNumberOfBytesWritten=0x3be778*=0x2a0, lpOverlapped=0x0) returned 1 [0045.949] CloseHandle (hObject=0x448) returned 1 [0045.950] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-cvcX Qn.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-cvcX Qn.lnk", lpFilePart=0x0) returned 0x4b [0045.950] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-cvcX Qn.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-cvcX Qn.lnk.xuy", lpFilePart=0x0) returned 0x4f [0045.950] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0045.950] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-cvcX Qn.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\-cvcx qn.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf629dab6, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf629dab6, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0x73bdb3a, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2a0)) returned 1 [0045.950] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0045.951] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-cvcX Qn.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\-cvcx qn.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-cvcX Qn.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\-cvcx qn.lnk.xuy")) returned 1 [0045.951] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-e3Mp2d-PI.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-e3Mp2d-PI.lnk", lpFilePart=0x0) returned 0x4d [0045.951] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0045.951] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-e3Mp2d-PI.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\-e3mp2d-pi.lnk"), fInfoLevelId=0x0, lpFileInformation=0x227e810 | out: lpFileInformation=0x227e810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf61deec8, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf61deec8, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0xf61deec8, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x48e)) returned 1 [0045.951] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0045.951] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-e3Mp2d-PI.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-e3Mp2d-PI.lnk", lpFilePart=0x0) returned 0x4d [0045.951] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0045.951] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-e3Mp2d-PI.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\-e3mp2d-pi.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0045.952] GetFileType (hFile=0x448) returned 0x1 [0045.952] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0045.952] GetFileType (hFile=0x448) returned 0x1 [0045.952] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x48e [0045.952] ReadFile (in: hFile=0x448, lpBuffer=0x227ef68, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x227ef68*, lpNumberOfBytesRead=0x3be868*=0x48e, lpOverlapped=0x0) returned 1 [0045.952] CloseHandle (hObject=0x448) returned 1 [0046.000] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-e3Mp2d-PI.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-e3Mp2d-PI.lnk", lpFilePart=0x0) returned 0x4d [0046.000] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0046.000] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-e3Mp2d-PI.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\-e3mp2d-pi.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0046.002] GetFileType (hFile=0x448) returned 0x1 [0046.002] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0046.002] GetFileType (hFile=0x448) returned 0x1 [0046.002] WriteFile (in: hFile=0x448, lpBuffer=0x22f7620*, nNumberOfBytesToWrite=0x490, lpNumberOfBytesWritten=0x3be778, lpOverlapped=0x0 | out: lpBuffer=0x22f7620*, lpNumberOfBytesWritten=0x3be778*=0x490, lpOverlapped=0x0) returned 1 [0046.003] CloseHandle (hObject=0x448) returned 1 [0046.003] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-e3Mp2d-PI.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-e3Mp2d-PI.lnk", lpFilePart=0x0) returned 0x4d [0046.003] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-e3Mp2d-PI.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-e3Mp2d-PI.lnk.xuy", lpFilePart=0x0) returned 0x51 [0046.003] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0046.003] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-e3Mp2d-PI.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\-e3mp2d-pi.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf61deec8, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf61deec8, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0x7456046, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x490)) returned 1 [0046.003] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0046.003] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-e3Mp2d-PI.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\-e3mp2d-pi.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-e3Mp2d-PI.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\-e3mp2d-pi.lnk.xuy")) returned 1 [0046.004] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-HzS.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-HzS.lnk", lpFilePart=0x0) returned 0x47 [0046.004] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0046.004] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-HzS.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\-hzs.lnk"), fInfoLevelId=0x0, lpFileInformation=0x22f88b8 | out: lpFileInformation=0x22f88b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf39ef981, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf4c6a20a, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0xf4c6a20a, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x3f0)) returned 1 [0046.004] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0046.004] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-HzS.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-HzS.lnk", lpFilePart=0x0) returned 0x47 [0046.004] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0046.004] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-HzS.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\-hzs.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0046.004] GetFileType (hFile=0x448) returned 0x1 [0046.004] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0046.004] GetFileType (hFile=0x448) returned 0x1 [0046.004] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x3f0 [0046.005] ReadFile (in: hFile=0x448, lpBuffer=0x22f8f40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x22f8f40*, lpNumberOfBytesRead=0x3be868*=0x3f0, lpOverlapped=0x0) returned 1 [0046.005] CloseHandle (hObject=0x448) returned 1 [0046.150] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-HzS.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-HzS.lnk", lpFilePart=0x0) returned 0x47 [0046.150] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0046.150] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-HzS.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\-hzs.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x434 [0046.151] GetFileType (hFile=0x434) returned 0x1 [0046.151] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0046.151] GetFileType (hFile=0x434) returned 0x1 [0046.151] WriteFile (in: hFile=0x434, lpBuffer=0x2185998*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x3be778, lpOverlapped=0x0 | out: lpBuffer=0x2185998*, lpNumberOfBytesWritten=0x3be778*=0x400, lpOverlapped=0x0) returned 1 [0046.151] CloseHandle (hObject=0x434) returned 1 [0046.152] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-HzS.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-HzS.lnk", lpFilePart=0x0) returned 0x47 [0046.152] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-HzS.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-HzS.lnk.xuy", lpFilePart=0x0) returned 0x4b [0046.152] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0046.152] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-HzS.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\-hzs.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf39ef981, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf4c6a20a, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0x75ad76e, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x400)) returned 1 [0046.152] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0046.152] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-HzS.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\-hzs.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-HzS.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\-hzs.lnk.xuy")) returned 1 [0046.155] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-n0RC1h1KI_sm3.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-n0RC1h1KI_sm3.lnk", lpFilePart=0x0) returned 0x51 [0046.155] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0046.155] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-n0RC1h1KI_sm3.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\-n0rc1h1ki_sm3.lnk"), fInfoLevelId=0x0, lpFileInformation=0x2186c00 | out: lpFileInformation=0x2186c00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3c9e324, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf3c9e324, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0xf3c9e324, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x455)) returned 1 [0046.155] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0046.155] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-n0RC1h1KI_sm3.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-n0RC1h1KI_sm3.lnk", lpFilePart=0x0) returned 0x51 [0046.155] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0046.156] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-n0RC1h1KI_sm3.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\-n0rc1h1ki_sm3.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x434 [0046.156] GetFileType (hFile=0x434) returned 0x1 [0046.156] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0046.156] GetFileType (hFile=0x434) returned 0x1 [0046.156] GetFileSize (in: hFile=0x434, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x455 [0046.156] ReadFile (in: hFile=0x434, lpBuffer=0x2187340, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x2187340*, lpNumberOfBytesRead=0x3be868*=0x455, lpOverlapped=0x0) returned 1 [0046.156] CloseHandle (hObject=0x434) returned 1 [0046.194] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-n0RC1h1KI_sm3.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-n0RC1h1KI_sm3.lnk", lpFilePart=0x0) returned 0x51 [0046.194] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0046.194] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-n0RC1h1KI_sm3.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\-n0rc1h1ki_sm3.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x434 [0046.195] GetFileType (hFile=0x434) returned 0x1 [0046.195] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0046.195] GetFileType (hFile=0x434) returned 0x1 [0046.195] WriteFile (in: hFile=0x434, lpBuffer=0x21ff920*, nNumberOfBytesToWrite=0x460, lpNumberOfBytesWritten=0x3be778, lpOverlapped=0x0 | out: lpBuffer=0x21ff920*, lpNumberOfBytesWritten=0x3be778*=0x460, lpOverlapped=0x0) returned 1 [0046.196] CloseHandle (hObject=0x434) returned 1 [0046.196] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-n0RC1h1KI_sm3.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-n0RC1h1KI_sm3.lnk", lpFilePart=0x0) returned 0x51 [0046.197] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-n0RC1h1KI_sm3.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-n0RC1h1KI_sm3.lnk.xuy", lpFilePart=0x0) returned 0x55 [0046.197] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0046.197] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-n0RC1h1KI_sm3.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\-n0rc1h1ki_sm3.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3c9e324, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf3c9e324, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0x761fd7d, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x460)) returned 1 [0046.197] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0046.197] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-n0RC1h1KI_sm3.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\-n0rc1h1ki_sm3.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-n0RC1h1KI_sm3.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\-n0rc1h1ki_sm3.lnk.xuy")) returned 1 [0046.197] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\00p5vLt xbX.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\00p5vLt xbX.lnk", lpFilePart=0x0) returned 0x4e [0046.197] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0046.197] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\00p5vLt xbX.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\00p5vlt xbx.lnk"), fInfoLevelId=0x0, lpFileInformation=0x2200bd0 | out: lpFileInformation=0x2200bd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf47f1628, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf47f1628, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0xf47f1628, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x29f)) returned 1 [0046.197] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0046.197] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\00p5vLt xbX.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\00p5vLt xbX.lnk", lpFilePart=0x0) returned 0x4e [0046.198] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0046.198] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\00p5vLt xbX.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\00p5vlt xbx.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x434 [0046.198] GetFileType (hFile=0x434) returned 0x1 [0046.198] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0046.198] GetFileType (hFile=0x434) returned 0x1 [0046.198] GetFileSize (in: hFile=0x434, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x29f [0046.198] ReadFile (in: hFile=0x434, lpBuffer=0x2201138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x2201138*, lpNumberOfBytesRead=0x3be868*=0x29f, lpOverlapped=0x0) returned 1 [0046.198] CloseHandle (hObject=0x434) returned 1 [0046.233] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\00p5vLt xbX.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\00p5vLt xbX.lnk", lpFilePart=0x0) returned 0x4e [0046.233] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0046.233] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\00p5vLt xbX.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\00p5vlt xbx.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x434 [0046.234] GetFileType (hFile=0x434) returned 0x1 [0046.234] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0046.234] GetFileType (hFile=0x434) returned 0x1 [0046.234] WriteFile (in: hFile=0x434, lpBuffer=0x2278e40*, nNumberOfBytesToWrite=0x2a0, lpNumberOfBytesWritten=0x3be778, lpOverlapped=0x0 | out: lpBuffer=0x2278e40*, lpNumberOfBytesWritten=0x3be778*=0x2a0, lpOverlapped=0x0) returned 1 [0046.239] CloseHandle (hObject=0x434) returned 1 [0046.240] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\00p5vLt xbX.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\00p5vLt xbX.lnk", lpFilePart=0x0) returned 0x4e [0046.240] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\00p5vLt xbX.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\00p5vLt xbX.lnk.xuy", lpFilePart=0x0) returned 0x52 [0046.240] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0046.240] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\00p5vLt xbX.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\00p5vlt xbx.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf47f1628, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf47f1628, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0x7692585, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2a0)) returned 1 [0046.240] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0046.240] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\00p5vLt xbX.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\00p5vlt xbx.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\00p5vLt xbX.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\00p5vlt xbx.lnk.xuy")) returned 1 [0046.241] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\00_yfQNqHGFuHt64v1.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\00_yfQNqHGFuHt64v1.lnk", lpFilePart=0x0) returned 0x55 [0046.241] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0046.241] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\00_yfQNqHGFuHt64v1.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\00_yfqnqhgfuht64v1.lnk"), fInfoLevelId=0x0, lpFileInformation=0x227a0d8 | out: lpFileInformation=0x227a0d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf6310200, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf6310200, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0xf6310200, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x2c2)) returned 1 [0046.241] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0046.241] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\00_yfQNqHGFuHt64v1.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\00_yfQNqHGFuHt64v1.lnk", lpFilePart=0x0) returned 0x55 [0046.241] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0046.241] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\00_yfQNqHGFuHt64v1.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\00_yfqnqhgfuht64v1.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x434 [0046.241] GetFileType (hFile=0x434) returned 0x1 [0046.241] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0046.241] GetFileType (hFile=0x434) returned 0x1 [0046.241] GetFileSize (in: hFile=0x434, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x2c2 [0046.241] ReadFile (in: hFile=0x434, lpBuffer=0x227a6a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x227a6a8*, lpNumberOfBytesRead=0x3be868*=0x2c2, lpOverlapped=0x0) returned 1 [0046.241] CloseHandle (hObject=0x434) returned 1 [0046.277] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\00_yfQNqHGFuHt64v1.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\00_yfQNqHGFuHt64v1.lnk", lpFilePart=0x0) returned 0x55 [0046.277] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0046.277] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\00_yfQNqHGFuHt64v1.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\00_yfqnqhgfuht64v1.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x434 [0046.278] GetFileType (hFile=0x434) returned 0x1 [0046.278] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0046.278] GetFileType (hFile=0x434) returned 0x1 [0046.278] WriteFile (in: hFile=0x434, lpBuffer=0x22f24c8*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x3be778, lpOverlapped=0x0 | out: lpBuffer=0x22f24c8*, lpNumberOfBytesWritten=0x3be778*=0x2d0, lpOverlapped=0x0) returned 1 [0046.279] CloseHandle (hObject=0x434) returned 1 [0046.279] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\00_yfQNqHGFuHt64v1.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\00_yfQNqHGFuHt64v1.lnk", lpFilePart=0x0) returned 0x55 [0046.279] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\00_yfQNqHGFuHt64v1.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\00_yfQNqHGFuHt64v1.lnk.xuy", lpFilePart=0x0) returned 0x59 [0046.279] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0046.279] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\00_yfQNqHGFuHt64v1.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\00_yfqnqhgfuht64v1.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf6310200, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf6310200, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0x76de983, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2d0)) returned 1 [0046.280] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0046.280] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\00_yfQNqHGFuHt64v1.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\00_yfqnqhgfuht64v1.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\00_yfQNqHGFuHt64v1.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\00_yfqnqhgfuht64v1.lnk.xuy")) returned 1 [0046.280] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\08m7p4.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\08m7p4.lnk", lpFilePart=0x0) returned 0x49 [0046.280] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0046.280] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\08m7p4.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\08m7p4.lnk"), fInfoLevelId=0x0, lpFileInformation=0x22f3790 | out: lpFileInformation=0x22f3790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4e339cc, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf4e339cc, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0xf4e339cc, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x610)) returned 1 [0046.280] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0046.280] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\08m7p4.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\08m7p4.lnk", lpFilePart=0x0) returned 0x49 [0046.280] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0046.280] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\08m7p4.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\08m7p4.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x434 [0046.281] GetFileType (hFile=0x434) returned 0x1 [0046.281] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0046.281] GetFileType (hFile=0x434) returned 0x1 [0046.281] GetFileSize (in: hFile=0x434, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x610 [0046.281] ReadFile (in: hFile=0x434, lpBuffer=0x22f4048, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x22f4048*, lpNumberOfBytesRead=0x3be868*=0x610, lpOverlapped=0x0) returned 1 [0046.281] CloseHandle (hObject=0x434) returned 1 [0046.324] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\08m7p4.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\08m7p4.lnk", lpFilePart=0x0) returned 0x49 [0046.324] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0046.324] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\08m7p4.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\08m7p4.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x434 [0046.325] GetFileType (hFile=0x434) returned 0x1 [0046.325] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0046.325] GetFileType (hFile=0x434) returned 0x1 [0046.325] WriteFile (in: hFile=0x434, lpBuffer=0x216e2d0*, nNumberOfBytesToWrite=0x620, lpNumberOfBytesWritten=0x3be778, lpOverlapped=0x0 | out: lpBuffer=0x216e2d0*, lpNumberOfBytesWritten=0x3be778*=0x620, lpOverlapped=0x0) returned 1 [0046.327] CloseHandle (hObject=0x434) returned 1 [0046.327] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\08m7p4.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\08m7p4.lnk", lpFilePart=0x0) returned 0x49 [0046.327] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\08m7p4.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\08m7p4.lnk.xuy", lpFilePart=0x0) returned 0x4d [0046.327] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0046.327] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\08m7p4.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\08m7p4.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4e339cc, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf4e339cc, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0x77512d3, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x620)) returned 1 [0046.327] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0046.327] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\08m7p4.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\08m7p4.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\08m7p4.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\08m7p4.lnk.xuy")) returned 1 [0046.328] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\0RAKtw47d.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\0RAKtw47d.lnk", lpFilePart=0x0) returned 0x4c [0046.328] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0046.328] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\0RAKtw47d.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\0raktw47d.lnk"), fInfoLevelId=0x0, lpFileInformation=0x216f550 | out: lpFileInformation=0x216f550*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5a91caa, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf5a91caa, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0xf5a91caa, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x3f6)) returned 1 [0046.328] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0046.328] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\0RAKtw47d.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\0RAKtw47d.lnk", lpFilePart=0x0) returned 0x4c [0046.328] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0046.328] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\0RAKtw47d.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\0raktw47d.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x434 [0046.328] GetFileType (hFile=0x434) returned 0x1 [0046.328] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0046.328] GetFileType (hFile=0x434) returned 0x1 [0046.328] GetFileSize (in: hFile=0x434, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x3f6 [0046.329] ReadFile (in: hFile=0x434, lpBuffer=0x216fc10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x216fc10*, lpNumberOfBytesRead=0x3be868*=0x3f6, lpOverlapped=0x0) returned 1 [0046.329] CloseHandle (hObject=0x434) returned 1 [0046.364] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\0RAKtw47d.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\0RAKtw47d.lnk", lpFilePart=0x0) returned 0x4c [0046.364] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0046.364] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\0RAKtw47d.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\0raktw47d.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x434 [0046.365] GetFileType (hFile=0x434) returned 0x1 [0046.365] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0046.365] GetFileType (hFile=0x434) returned 0x1 [0046.365] WriteFile (in: hFile=0x434, lpBuffer=0x21e8000*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x3be778, lpOverlapped=0x0 | out: lpBuffer=0x21e8000*, lpNumberOfBytesWritten=0x3be778*=0x400, lpOverlapped=0x0) returned 1 [0046.367] CloseHandle (hObject=0x434) returned 1 [0046.368] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\0RAKtw47d.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\0RAKtw47d.lnk", lpFilePart=0x0) returned 0x4c [0046.368] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\0RAKtw47d.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\0RAKtw47d.lnk.xuy", lpFilePart=0x0) returned 0x50 [0046.368] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0046.368] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\0RAKtw47d.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\0raktw47d.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5a91caa, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf5a91caa, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0x77c3a2d, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x400)) returned 1 [0046.368] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0046.368] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\0RAKtw47d.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\0raktw47d.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\0RAKtw47d.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\0raktw47d.lnk.xuy")) returned 1 [0046.368] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\1E9x6o.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\1E9x6o.lnk", lpFilePart=0x0) returned 0x49 [0046.368] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0046.369] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\1E9x6o.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\1e9x6o.lnk"), fInfoLevelId=0x0, lpFileInformation=0x21e9298 | out: lpFileInformation=0x21e9298*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5ebddb6, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf5ebddb6, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0xf5ebddb6, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x3d2)) returned 1 [0046.369] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0046.369] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\1E9x6o.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\1E9x6o.lnk", lpFilePart=0x0) returned 0x49 [0046.369] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0046.369] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\1E9x6o.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\1e9x6o.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x434 [0046.369] GetFileType (hFile=0x434) returned 0x1 [0046.369] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0046.369] GetFileType (hFile=0x434) returned 0x1 [0046.369] GetFileSize (in: hFile=0x434, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x3d2 [0046.369] ReadFile (in: hFile=0x434, lpBuffer=0x21e9918, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x21e9918*, lpNumberOfBytesRead=0x3be868*=0x3d2, lpOverlapped=0x0) returned 1 [0046.369] CloseHandle (hObject=0x434) returned 1 [0046.379] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\1E9x6o.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\1E9x6o.lnk", lpFilePart=0x0) returned 0x49 [0046.379] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0046.379] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\1E9x6o.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\1e9x6o.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x434 [0046.380] GetFileType (hFile=0x434) returned 0x1 [0046.380] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0046.380] GetFileType (hFile=0x434) returned 0x1 [0046.380] WriteFile (in: hFile=0x434, lpBuffer=0x2261c58*, nNumberOfBytesToWrite=0x3e0, lpNumberOfBytesWritten=0x3be778, lpOverlapped=0x0 | out: lpBuffer=0x2261c58*, lpNumberOfBytesWritten=0x3be778*=0x3e0, lpOverlapped=0x0) returned 1 [0046.381] CloseHandle (hObject=0x434) returned 1 [0046.381] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\1E9x6o.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\1E9x6o.lnk", lpFilePart=0x0) returned 0x49 [0046.382] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\1E9x6o.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\1E9x6o.lnk.xuy", lpFilePart=0x0) returned 0x4d [0046.382] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0046.382] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\1E9x6o.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\1e9x6o.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5ebddb6, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf5ebddb6, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0x77e99c3, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x3e0)) returned 1 [0046.382] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0046.382] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\1E9x6o.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\1e9x6o.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\1E9x6o.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\1e9x6o.lnk.xuy")) returned 1 [0046.382] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\1UEZKTO5 S.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\1UEZKTO5 S.lnk", lpFilePart=0x0) returned 0x4d [0046.382] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0046.382] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\1UEZKTO5 S.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\1uezkto5 s.lnk"), fInfoLevelId=0x0, lpFileInformation=0x2262ed8 | out: lpFileInformation=0x2262ed8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf512e8ac, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf512e8ac, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0xf512e8ac, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x5c4)) returned 1 [0046.382] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0046.383] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\1UEZKTO5 S.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\1UEZKTO5 S.lnk", lpFilePart=0x0) returned 0x4d [0046.383] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0046.383] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\1UEZKTO5 S.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\1uezkto5 s.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x434 [0046.383] GetFileType (hFile=0x434) returned 0x1 [0046.383] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0046.383] GetFileType (hFile=0x434) returned 0x1 [0046.383] GetFileSize (in: hFile=0x434, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x5c4 [0046.383] ReadFile (in: hFile=0x434, lpBuffer=0x2263768, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x2263768*, lpNumberOfBytesRead=0x3be868*=0x5c4, lpOverlapped=0x0) returned 1 [0046.383] CloseHandle (hObject=0x434) returned 1 [0046.394] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\1UEZKTO5 S.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\1UEZKTO5 S.lnk", lpFilePart=0x0) returned 0x4d [0046.394] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0046.394] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\1UEZKTO5 S.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\1uezkto5 s.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x434 [0046.395] GetFileType (hFile=0x434) returned 0x1 [0046.395] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0046.395] GetFileType (hFile=0x434) returned 0x1 [0046.395] WriteFile (in: hFile=0x434, lpBuffer=0x22dc468*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x3be778, lpOverlapped=0x0 | out: lpBuffer=0x22dc468*, lpNumberOfBytesWritten=0x3be778*=0x5d0, lpOverlapped=0x0) returned 1 [0046.396] CloseHandle (hObject=0x434) returned 1 [0046.397] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\1UEZKTO5 S.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\1UEZKTO5 S.lnk", lpFilePart=0x0) returned 0x4d [0046.397] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\1UEZKTO5 S.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\1UEZKTO5 S.lnk.xuy", lpFilePart=0x0) returned 0x51 [0046.397] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0046.397] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\1UEZKTO5 S.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\1uezkto5 s.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf512e8ac, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf512e8ac, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0x780fb60, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x5d0)) returned 1 [0046.397] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0046.397] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\1UEZKTO5 S.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\1uezkto5 s.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\1UEZKTO5 S.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\1uezkto5 s.lnk.xuy")) returned 1 [0046.397] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\2FqWk.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\2FqWk.lnk", lpFilePart=0x0) returned 0x48 [0046.397] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0046.397] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\2FqWk.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\2fqwk.lnk"), fInfoLevelId=0x0, lpFileInformation=0x22dd700 | out: lpFileInformation=0x22dd700*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3f99330, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf3f99330, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0xf3f99330, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x3c4)) returned 1 [0046.398] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0046.398] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\2FqWk.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\2FqWk.lnk", lpFilePart=0x0) returned 0x48 [0046.398] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0046.398] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\2FqWk.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\2fqwk.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x434 [0046.398] GetFileType (hFile=0x434) returned 0x1 [0046.398] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0046.398] GetFileType (hFile=0x434) returned 0x1 [0046.398] GetFileSize (in: hFile=0x434, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x3c4 [0046.398] ReadFile (in: hFile=0x434, lpBuffer=0x22ddd70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x22ddd70*, lpNumberOfBytesRead=0x3be868*=0x3c4, lpOverlapped=0x0) returned 1 [0046.398] CloseHandle (hObject=0x434) returned 1 [0046.456] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\2FqWk.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\2FqWk.lnk", lpFilePart=0x0) returned 0x48 [0046.456] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0046.456] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\2FqWk.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\2fqwk.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x434 [0046.457] GetFileType (hFile=0x434) returned 0x1 [0046.457] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0046.457] GetFileType (hFile=0x434) returned 0x1 [0046.457] WriteFile (in: hFile=0x434, lpBuffer=0x21546e0*, nNumberOfBytesToWrite=0x3d0, lpNumberOfBytesWritten=0x3be778, lpOverlapped=0x0 | out: lpBuffer=0x21546e0*, lpNumberOfBytesWritten=0x3be778*=0x3d0, lpOverlapped=0x0) returned 1 [0046.458] CloseHandle (hObject=0x434) returned 1 [0046.458] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\2FqWk.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\2FqWk.lnk", lpFilePart=0x0) returned 0x48 [0046.458] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\2FqWk.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\2FqWk.lnk.xuy", lpFilePart=0x0) returned 0x4c [0046.458] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0046.458] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\2FqWk.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\2fqwk.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3f99330, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf3f99330, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0x78a8866, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x3d0)) returned 1 [0046.459] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0046.459] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\2FqWk.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\2fqwk.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\2FqWk.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\2fqwk.lnk.xuy")) returned 1 [0046.459] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\2JQ1gX.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\2JQ1gX.lnk", lpFilePart=0x0) returned 0x49 [0046.459] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0046.459] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\2JQ1gX.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\2jq1gx.lnk"), fInfoLevelId=0x0, lpFileInformation=0x2155960 | out: lpFileInformation=0x2155960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf6192a3c, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf6192a3c, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0xf6192a3c, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x3e5)) returned 1 [0046.459] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0046.459] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\2JQ1gX.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\2JQ1gX.lnk", lpFilePart=0x0) returned 0x49 [0046.459] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0046.459] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\2JQ1gX.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\2jq1gx.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x434 [0046.460] GetFileType (hFile=0x434) returned 0x1 [0046.460] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0046.460] GetFileType (hFile=0x434) returned 0x1 [0046.460] GetFileSize (in: hFile=0x434, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x3e5 [0046.460] ReadFile (in: hFile=0x434, lpBuffer=0x2155ff0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x2155ff0*, lpNumberOfBytesRead=0x3be868*=0x3e5, lpOverlapped=0x0) returned 1 [0046.460] CloseHandle (hObject=0x434) returned 1 [0046.470] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\2JQ1gX.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\2JQ1gX.lnk", lpFilePart=0x0) returned 0x49 [0046.470] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0046.470] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\2JQ1gX.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\2jq1gx.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x434 [0046.471] GetFileType (hFile=0x434) returned 0x1 [0046.471] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0046.471] GetFileType (hFile=0x434) returned 0x1 [0046.471] WriteFile (in: hFile=0x434, lpBuffer=0x21ce380*, nNumberOfBytesToWrite=0x3f0, lpNumberOfBytesWritten=0x3be778, lpOverlapped=0x0 | out: lpBuffer=0x21ce380*, lpNumberOfBytesWritten=0x3be778*=0x3f0, lpOverlapped=0x0) returned 1 [0046.472] CloseHandle (hObject=0x434) returned 1 [0046.472] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\2JQ1gX.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\2JQ1gX.lnk", lpFilePart=0x0) returned 0x49 [0046.472] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\2JQ1gX.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\2JQ1gX.lnk.xuy", lpFilePart=0x0) returned 0x4d [0046.472] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0046.472] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\2JQ1gX.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\2jq1gx.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf6192a3c, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf6192a3c, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0x78ce786, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x3f0)) returned 1 [0046.472] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0046.472] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\2JQ1gX.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\2jq1gx.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\2JQ1gX.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\2jq1gx.lnk.xuy")) returned 1 [0046.473] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\3hK fW-nhuzGhzCyF.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\3hK fW-nhuzGhzCyF.lnk", lpFilePart=0x0) returned 0x54 [0046.473] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0046.473] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\3hK fW-nhuzGhzCyF.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\3hk fw-nhuzghzcyf.lnk"), fInfoLevelId=0x0, lpFileInformation=0x21cf600 | out: lpFileInformation=0x21cf600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf506fd96, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf506fd96, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0xf506fd96, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x57b)) returned 1 [0046.473] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0046.473] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\3hK fW-nhuzGhzCyF.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\3hK fW-nhuzGhzCyF.lnk", lpFilePart=0x0) returned 0x54 [0046.473] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0046.473] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\3hK fW-nhuzGhzCyF.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\3hk fw-nhuzghzcyf.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x434 [0046.473] GetFileType (hFile=0x434) returned 0x1 [0046.473] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0046.473] GetFileType (hFile=0x434) returned 0x1 [0046.473] GetFileSize (in: hFile=0x434, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x57b [0046.473] ReadFile (in: hFile=0x434, lpBuffer=0x21cfe88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x21cfe88*, lpNumberOfBytesRead=0x3be868*=0x57b, lpOverlapped=0x0) returned 1 [0046.474] CloseHandle (hObject=0x434) returned 1 [0046.486] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\3hK fW-nhuzGhzCyF.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\3hK fW-nhuzGhzCyF.lnk", lpFilePart=0x0) returned 0x54 [0046.486] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0046.486] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\3hK fW-nhuzGhzCyF.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\3hk fw-nhuzghzcyf.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x434 [0046.487] GetFileType (hFile=0x434) returned 0x1 [0046.487] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0046.487] GetFileType (hFile=0x434) returned 0x1 [0046.487] WriteFile (in: hFile=0x434, lpBuffer=0x2248a10*, nNumberOfBytesToWrite=0x580, lpNumberOfBytesWritten=0x3be778, lpOverlapped=0x0 | out: lpBuffer=0x2248a10*, lpNumberOfBytesWritten=0x3be778*=0x580, lpOverlapped=0x0) returned 1 [0046.488] CloseHandle (hObject=0x434) returned 1 [0046.489] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\3hK fW-nhuzGhzCyF.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\3hK fW-nhuzGhzCyF.lnk", lpFilePart=0x0) returned 0x54 [0046.489] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\3hK fW-nhuzGhzCyF.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\3hK fW-nhuzGhzCyF.lnk.xuy", lpFilePart=0x0) returned 0x58 [0046.489] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0046.489] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\3hK fW-nhuzGhzCyF.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\3hk fw-nhuzghzcyf.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf506fd96, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf506fd96, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0x78f4a96, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x580)) returned 1 [0046.489] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0046.489] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\3hK fW-nhuzGhzCyF.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\3hk fw-nhuzghzcyf.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\3hK fW-nhuzGhzCyF.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\3hk fw-nhuzghzcyf.lnk.xuy")) returned 1 [0046.490] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\3zrj1.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\3zrj1.lnk", lpFilePart=0x0) returned 0x48 [0046.490] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0046.490] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\3zrj1.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\3zrj1.lnk"), fInfoLevelId=0x0, lpFileInformation=0x2249cd8 | out: lpFileInformation=0x2249cd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf56b1e89, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf56b1e89, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0xf56b1e89, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x4a9)) returned 1 [0046.490] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0046.490] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\3zrj1.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\3zrj1.lnk", lpFilePart=0x0) returned 0x48 [0046.490] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0046.490] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\3zrj1.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\3zrj1.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x434 [0046.490] GetFileType (hFile=0x434) returned 0x1 [0046.490] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0046.490] GetFileType (hFile=0x434) returned 0x1 [0046.490] GetFileSize (in: hFile=0x434, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x4a9 [0046.490] ReadFile (in: hFile=0x434, lpBuffer=0x224a430, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x224a430*, lpNumberOfBytesRead=0x3be868*=0x4a9, lpOverlapped=0x0) returned 1 [0046.490] CloseHandle (hObject=0x434) returned 1 [0046.500] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\3zrj1.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\3zrj1.lnk", lpFilePart=0x0) returned 0x48 [0046.500] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0046.500] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\3zrj1.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\3zrj1.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x434 [0046.507] GetFileType (hFile=0x434) returned 0x1 [0046.507] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0046.507] GetFileType (hFile=0x434) returned 0x1 [0046.507] WriteFile (in: hFile=0x434, lpBuffer=0x22c2b78*, nNumberOfBytesToWrite=0x4b0, lpNumberOfBytesWritten=0x3be778, lpOverlapped=0x0 | out: lpBuffer=0x22c2b78*, lpNumberOfBytesWritten=0x3be778*=0x4b0, lpOverlapped=0x0) returned 1 [0046.507] CloseHandle (hObject=0x434) returned 1 [0046.508] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\3zrj1.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\3zrj1.lnk", lpFilePart=0x0) returned 0x48 [0046.508] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\3zrj1.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\3zrj1.lnk.xuy", lpFilePart=0x0) returned 0x4c [0046.508] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0046.508] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\3zrj1.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\3zrj1.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf56b1e89, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf56b1e89, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0x791ac1b, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x4b0)) returned 1 [0046.508] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0046.508] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\3zrj1.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\3zrj1.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\3zrj1.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\3zrj1.lnk.xuy")) returned 1 [0046.510] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\4M9GNaeWOnw2HrFq.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\4M9GNaeWOnw2HrFq.lnk", lpFilePart=0x0) returned 0x53 [0046.510] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0046.510] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\4M9GNaeWOnw2HrFq.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\4m9gnaewonw2hrfq.lnk"), fInfoLevelId=0x0, lpFileInformation=0x22c3df8 | out: lpFileInformation=0x22c3df8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf62515f5, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf62515f5, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0xf62515f5, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x419)) returned 1 [0046.510] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0046.510] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\4M9GNaeWOnw2HrFq.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\4M9GNaeWOnw2HrFq.lnk", lpFilePart=0x0) returned 0x53 [0046.510] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0046.510] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\4M9GNaeWOnw2HrFq.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\4m9gnaewonw2hrfq.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x434 [0046.510] GetFileType (hFile=0x434) returned 0x1 [0046.510] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0046.510] GetFileType (hFile=0x434) returned 0x1 [0046.510] GetFileSize (in: hFile=0x434, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x419 [0046.510] ReadFile (in: hFile=0x434, lpBuffer=0x22c4510, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x22c4510*, lpNumberOfBytesRead=0x3be868*=0x419, lpOverlapped=0x0) returned 1 [0046.510] CloseHandle (hObject=0x434) returned 1 [0046.549] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\4M9GNaeWOnw2HrFq.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\4M9GNaeWOnw2HrFq.lnk", lpFilePart=0x0) returned 0x53 [0046.549] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0046.549] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\4M9GNaeWOnw2HrFq.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\4m9gnaewonw2hrfq.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x434 [0046.550] GetFileType (hFile=0x434) returned 0x1 [0046.550] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0046.550] GetFileType (hFile=0x434) returned 0x1 [0046.550] WriteFile (in: hFile=0x434, lpBuffer=0x213dbc0*, nNumberOfBytesToWrite=0x420, lpNumberOfBytesWritten=0x3be778, lpOverlapped=0x0 | out: lpBuffer=0x213dbc0*, lpNumberOfBytesWritten=0x3be778*=0x420, lpOverlapped=0x0) returned 1 [0046.551] CloseHandle (hObject=0x434) returned 1 [0046.551] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\4M9GNaeWOnw2HrFq.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\4M9GNaeWOnw2HrFq.lnk", lpFilePart=0x0) returned 0x53 [0046.551] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\4M9GNaeWOnw2HrFq.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\4M9GNaeWOnw2HrFq.lnk.xuy", lpFilePart=0x0) returned 0x57 [0046.551] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0046.551] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\4M9GNaeWOnw2HrFq.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\4m9gnaewonw2hrfq.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf62515f5, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf62515f5, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0x798d3cd, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x420)) returned 1 [0046.552] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0046.552] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\4M9GNaeWOnw2HrFq.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\4m9gnaewonw2hrfq.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\4M9GNaeWOnw2HrFq.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\4m9gnaewonw2hrfq.lnk.xuy")) returned 1 [0046.552] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\4TX0WLVzI0D.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\4TX0WLVzI0D.lnk", lpFilePart=0x0) returned 0x4e [0046.552] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0046.552] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\4TX0WLVzI0D.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\4tx0wlvzi0d.lnk"), fInfoLevelId=0x0, lpFileInformation=0x213ee70 | out: lpFileInformation=0x213ee70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5855810, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf5855810, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0xf5855810, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x400)) returned 1 [0046.552] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0046.552] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\4TX0WLVzI0D.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\4TX0WLVzI0D.lnk", lpFilePart=0x0) returned 0x4e [0046.552] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0046.552] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\4TX0WLVzI0D.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\4tx0wlvzi0d.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x434 [0046.552] GetFileType (hFile=0x434) returned 0x1 [0046.552] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0046.552] GetFileType (hFile=0x434) returned 0x1 [0046.553] GetFileSize (in: hFile=0x434, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x400 [0046.553] ReadFile (in: hFile=0x434, lpBuffer=0x213f538, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x213f538*, lpNumberOfBytesRead=0x3be868*=0x400, lpOverlapped=0x0) returned 1 [0046.553] CloseHandle (hObject=0x434) returned 1 [0046.562] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\4TX0WLVzI0D.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\4TX0WLVzI0D.lnk", lpFilePart=0x0) returned 0x4e [0046.562] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0046.563] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\4TX0WLVzI0D.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\4tx0wlvzi0d.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x434 [0046.564] GetFileType (hFile=0x434) returned 0x1 [0046.564] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0046.564] GetFileType (hFile=0x434) returned 0x1 [0046.564] WriteFile (in: hFile=0x434, lpBuffer=0x21b7978*, nNumberOfBytesToWrite=0x410, lpNumberOfBytesWritten=0x3be778, lpOverlapped=0x0 | out: lpBuffer=0x21b7978*, lpNumberOfBytesWritten=0x3be778*=0x410, lpOverlapped=0x0) returned 1 [0046.565] CloseHandle (hObject=0x434) returned 1 [0046.565] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\4TX0WLVzI0D.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\4TX0WLVzI0D.lnk", lpFilePart=0x0) returned 0x4e [0046.565] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\4TX0WLVzI0D.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\4TX0WLVzI0D.lnk.xuy", lpFilePart=0x0) returned 0x52 [0046.565] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0046.565] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\4TX0WLVzI0D.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\4tx0wlvzi0d.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5855810, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf5855810, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0x79b359c, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x410)) returned 1 [0046.565] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0046.565] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\4TX0WLVzI0D.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\4tx0wlvzi0d.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\4TX0WLVzI0D.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\4tx0wlvzi0d.lnk.xuy")) returned 1 [0046.566] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\4UQKtgpXFhDlO9QReM.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\4UQKtgpXFhDlO9QReM.lnk", lpFilePart=0x0) returned 0x55 [0046.566] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0046.566] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\4UQKtgpXFhDlO9QReM.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\4uqktgpxfhdlo9qrem.lnk"), fInfoLevelId=0x0, lpFileInformation=0x21b8c10 | out: lpFileInformation=0x21b8c10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf582f6fa, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf582f6fa, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0xf582f6fa, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x423)) returned 1 [0046.566] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0046.566] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\4UQKtgpXFhDlO9QReM.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\4UQKtgpXFhDlO9QReM.lnk", lpFilePart=0x0) returned 0x55 [0046.566] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0046.566] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\4UQKtgpXFhDlO9QReM.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\4uqktgpxfhdlo9qrem.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x434 [0046.566] GetFileType (hFile=0x434) returned 0x1 [0046.566] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0046.566] GetFileType (hFile=0x434) returned 0x1 [0046.566] GetFileSize (in: hFile=0x434, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x423 [0046.566] ReadFile (in: hFile=0x434, lpBuffer=0x21b9340, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x21b9340*, lpNumberOfBytesRead=0x3be868*=0x423, lpOverlapped=0x0) returned 1 [0046.567] CloseHandle (hObject=0x434) returned 1 [0046.576] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\4UQKtgpXFhDlO9QReM.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\4UQKtgpXFhDlO9QReM.lnk", lpFilePart=0x0) returned 0x55 [0046.576] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0046.576] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\4UQKtgpXFhDlO9QReM.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\4uqktgpxfhdlo9qrem.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x434 [0046.577] GetFileType (hFile=0x434) returned 0x1 [0046.577] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0046.577] GetFileType (hFile=0x434) returned 0x1 [0046.577] WriteFile (in: hFile=0x434, lpBuffer=0x2231840*, nNumberOfBytesToWrite=0x430, lpNumberOfBytesWritten=0x3be778, lpOverlapped=0x0 | out: lpBuffer=0x2231840*, lpNumberOfBytesWritten=0x3be778*=0x430, lpOverlapped=0x0) returned 1 [0046.578] CloseHandle (hObject=0x434) returned 1 [0046.579] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\4UQKtgpXFhDlO9QReM.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\4UQKtgpXFhDlO9QReM.lnk", lpFilePart=0x0) returned 0x55 [0046.579] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\4UQKtgpXFhDlO9QReM.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\4UQKtgpXFhDlO9QReM.lnk.xuy", lpFilePart=0x0) returned 0x59 [0046.579] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0046.579] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\4UQKtgpXFhDlO9QReM.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\4uqktgpxfhdlo9qrem.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf582f6fa, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf582f6fa, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0x79b359c, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x430)) returned 1 [0046.579] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0046.579] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\4UQKtgpXFhDlO9QReM.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\4uqktgpxfhdlo9qrem.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\4UQKtgpXFhDlO9QReM.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\4uqktgpxfhdlo9qrem.lnk.xuy")) returned 1 [0046.580] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\6nnSA.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\6nnSA.lnk", lpFilePart=0x0) returned 0x48 [0046.580] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0046.580] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\6nnSA.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\6nnsa.lnk"), fInfoLevelId=0x0, lpFileInformation=0x2232b08 | out: lpFileInformation=0x2232b08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf18924d5, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf18924d5, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0xf18924d5, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x3cb)) returned 1 [0046.580] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0046.580] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\6nnSA.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\6nnSA.lnk", lpFilePart=0x0) returned 0x48 [0046.580] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0046.580] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\6nnSA.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\6nnsa.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x434 [0046.580] GetFileType (hFile=0x434) returned 0x1 [0046.580] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0046.580] GetFileType (hFile=0x434) returned 0x1 [0046.580] GetFileSize (in: hFile=0x434, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x3cb [0046.580] ReadFile (in: hFile=0x434, lpBuffer=0x2233180, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x2233180*, lpNumberOfBytesRead=0x3be868*=0x3cb, lpOverlapped=0x0) returned 1 [0046.580] CloseHandle (hObject=0x434) returned 1 [0046.590] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\6nnSA.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\6nnSA.lnk", lpFilePart=0x0) returned 0x48 [0046.590] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0046.590] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\6nnSA.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\6nnsa.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x434 [0046.591] GetFileType (hFile=0x434) returned 0x1 [0046.591] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0046.591] GetFileType (hFile=0x434) returned 0x1 [0046.591] WriteFile (in: hFile=0x434, lpBuffer=0x22ab468*, nNumberOfBytesToWrite=0x3d0, lpNumberOfBytesWritten=0x3be778, lpOverlapped=0x0 | out: lpBuffer=0x22ab468*, lpNumberOfBytesWritten=0x3be778*=0x3d0, lpOverlapped=0x0) returned 1 [0046.592] CloseHandle (hObject=0x434) returned 1 [0046.592] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\6nnSA.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\6nnSA.lnk", lpFilePart=0x0) returned 0x48 [0046.592] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\6nnSA.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\6nnSA.lnk.xuy", lpFilePart=0x0) returned 0x4c [0046.593] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0046.593] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\6nnSA.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\6nnsa.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf18924d5, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf18924d5, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0x79d9892, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x3d0)) returned 1 [0046.593] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0046.593] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\6nnSA.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\6nnsa.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\6nnSA.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\6nnsa.lnk.xuy")) returned 1 [0046.593] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\6ukdx.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\6ukdx.lnk", lpFilePart=0x0) returned 0x48 [0046.594] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0046.594] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\6ukdx.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\6ukdx.lnk"), fInfoLevelId=0x0, lpFileInformation=0x22ac6e8 | out: lpFileInformation=0x22ac6e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3f00914, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf3f00914, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0xf3f00914, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x3de)) returned 1 [0046.594] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0046.594] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\6ukdx.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\6ukdx.lnk", lpFilePart=0x0) returned 0x48 [0046.594] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0046.594] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\6ukdx.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\6ukdx.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x434 [0046.594] GetFileType (hFile=0x434) returned 0x1 [0046.594] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0046.594] GetFileType (hFile=0x434) returned 0x1 [0046.594] GetFileSize (in: hFile=0x434, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x3de [0046.594] ReadFile (in: hFile=0x434, lpBuffer=0x22acd70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x22acd70*, lpNumberOfBytesRead=0x3be868*=0x3de, lpOverlapped=0x0) returned 1 [0046.594] CloseHandle (hObject=0x434) returned 1 [0046.605] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\6ukdx.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\6ukdx.lnk", lpFilePart=0x0) returned 0x48 [0046.605] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0046.605] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\6ukdx.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\6ukdx.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x434 [0046.606] GetFileType (hFile=0x434) returned 0x1 [0046.606] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0046.606] GetFileType (hFile=0x434) returned 0x1 [0046.606] WriteFile (in: hFile=0x434, lpBuffer=0x23250a8*, nNumberOfBytesToWrite=0x3e0, lpNumberOfBytesWritten=0x3be778, lpOverlapped=0x0 | out: lpBuffer=0x23250a8*, lpNumberOfBytesWritten=0x3be778*=0x3e0, lpOverlapped=0x0) returned 1 [0046.607] CloseHandle (hObject=0x434) returned 1 [0046.607] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\6ukdx.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\6ukdx.lnk", lpFilePart=0x0) returned 0x48 [0046.607] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\6ukdx.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\6ukdx.lnk.xuy", lpFilePart=0x0) returned 0x4c [0046.607] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0046.607] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\6ukdx.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\6ukdx.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3f00914, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf3f00914, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0x79ffd88, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x3e0)) returned 1 [0046.607] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0046.607] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\6ukdx.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\6ukdx.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\6ukdx.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\6ukdx.lnk.xuy")) returned 1 [0046.608] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\7qmJucxrSVDQh7.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\7qmJucxrSVDQh7.lnk", lpFilePart=0x0) returned 0x51 [0046.608] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0046.608] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\7qmJucxrSVDQh7.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\7qmjucxrsvdqh7.lnk"), fInfoLevelId=0x0, lpFileInformation=0x2326328 | out: lpFileInformation=0x2326328*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf45b566d, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf45b566d, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0xf45b566d, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x34a)) returned 1 [0046.608] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0046.608] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\7qmJucxrSVDQh7.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\7qmJucxrSVDQh7.lnk", lpFilePart=0x0) returned 0x51 [0046.608] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0046.608] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\7qmJucxrSVDQh7.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\7qmjucxrsvdqh7.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x434 [0046.608] GetFileType (hFile=0x434) returned 0x1 [0046.608] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0046.608] GetFileType (hFile=0x434) returned 0x1 [0046.608] GetFileSize (in: hFile=0x434, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x34a [0046.609] ReadFile (in: hFile=0x434, lpBuffer=0x2326960, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x2326960*, lpNumberOfBytesRead=0x3be868*=0x34a, lpOverlapped=0x0) returned 1 [0046.609] CloseHandle (hObject=0x434) returned 1 [0046.647] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\7qmJucxrSVDQh7.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\7qmJucxrSVDQh7.lnk", lpFilePart=0x0) returned 0x51 [0046.647] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0046.647] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\7qmJucxrSVDQh7.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\7qmjucxrsvdqh7.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x434 [0046.648] GetFileType (hFile=0x434) returned 0x1 [0046.648] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0046.649] GetFileType (hFile=0x434) returned 0x1 [0046.649] WriteFile (in: hFile=0x434, lpBuffer=0x219fba8*, nNumberOfBytesToWrite=0x350, lpNumberOfBytesWritten=0x3be778, lpOverlapped=0x0 | out: lpBuffer=0x219fba8*, lpNumberOfBytesWritten=0x3be778*=0x350, lpOverlapped=0x0) returned 1 [0046.649] CloseHandle (hObject=0x434) returned 1 [0046.650] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\7qmJucxrSVDQh7.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\7qmJucxrSVDQh7.lnk", lpFilePart=0x0) returned 0x51 [0046.650] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\7qmJucxrSVDQh7.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\7qmJucxrSVDQh7.lnk.xuy", lpFilePart=0x0) returned 0x55 [0046.650] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0046.650] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\7qmJucxrSVDQh7.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\7qmjucxrsvdqh7.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf45b566d, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf45b566d, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0x7a7219b, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x350)) returned 1 [0046.650] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0046.650] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\7qmJucxrSVDQh7.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\7qmjucxrsvdqh7.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\7qmJucxrSVDQh7.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\7qmjucxrsvdqh7.lnk.xuy")) returned 1 [0046.651] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\8JP_fHn2fAsy.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\8JP_fHn2fAsy.lnk", lpFilePart=0x0) returned 0x4f [0046.651] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0046.651] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\8JP_fHn2fAsy.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\8jp_fhn2fasy.lnk"), fInfoLevelId=0x0, lpFileInformation=0x21a0e58 | out: lpFileInformation=0x21a0e58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf397da10, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf397da10, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0xf397da10, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x585)) returned 1 [0046.651] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0046.651] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\8JP_fHn2fAsy.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\8JP_fHn2fAsy.lnk", lpFilePart=0x0) returned 0x4f [0046.651] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0046.651] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\8JP_fHn2fAsy.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\8jp_fhn2fasy.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x434 [0046.651] GetFileType (hFile=0x434) returned 0x1 [0046.651] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0046.651] GetFileType (hFile=0x434) returned 0x1 [0046.651] GetFileSize (in: hFile=0x434, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x585 [0046.651] ReadFile (in: hFile=0x434, lpBuffer=0x21a16b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x21a16b8*, lpNumberOfBytesRead=0x3be868*=0x585, lpOverlapped=0x0) returned 1 [0046.651] CloseHandle (hObject=0x434) returned 1 [0046.661] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\8JP_fHn2fAsy.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\8JP_fHn2fAsy.lnk", lpFilePart=0x0) returned 0x4f [0046.661] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0046.661] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\8JP_fHn2fAsy.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\8jp_fhn2fasy.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x434 [0046.662] GetFileType (hFile=0x434) returned 0x1 [0046.662] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0046.662] GetFileType (hFile=0x434) returned 0x1 [0046.662] WriteFile (in: hFile=0x434, lpBuffer=0x221a280*, nNumberOfBytesToWrite=0x590, lpNumberOfBytesWritten=0x3be778, lpOverlapped=0x0 | out: lpBuffer=0x221a280*, lpNumberOfBytesWritten=0x3be778*=0x590, lpOverlapped=0x0) returned 1 [0046.663] CloseHandle (hObject=0x434) returned 1 [0046.664] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\8JP_fHn2fAsy.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\8JP_fHn2fAsy.lnk", lpFilePart=0x0) returned 0x4f [0046.664] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\8JP_fHn2fAsy.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\8JP_fHn2fAsy.lnk.xuy", lpFilePart=0x0) returned 0x53 [0046.664] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0046.664] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\8JP_fHn2fAsy.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\8jp_fhn2fasy.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf397da10, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf397da10, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0x7a98534, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x590)) returned 1 [0046.664] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0046.664] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\8JP_fHn2fAsy.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\8jp_fhn2fasy.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\8JP_fHn2fAsy.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\8jp_fhn2fasy.lnk.xuy")) returned 1 [0046.664] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\8MQwAP0_D5NFG dD.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\8MQwAP0_D5NFG dD.lnk", lpFilePart=0x0) returned 0x53 [0046.665] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0046.665] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\8MQwAP0_D5NFG dD.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\8mqwap0_d5nfg dd.lnk"), fInfoLevelId=0x0, lpFileInformation=0x221b518 | out: lpFileInformation=0x221b518*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5ccdfd9, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf5ccdfd9, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0xf5ccdfd9, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x538)) returned 1 [0046.665] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0046.665] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\8MQwAP0_D5NFG dD.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\8MQwAP0_D5NFG dD.lnk", lpFilePart=0x0) returned 0x53 [0046.665] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0046.665] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\8MQwAP0_D5NFG dD.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\8mqwap0_d5nfg dd.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x434 [0046.665] GetFileType (hFile=0x434) returned 0x1 [0046.665] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0046.665] GetFileType (hFile=0x434) returned 0x1 [0046.665] GetFileSize (in: hFile=0x434, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x538 [0046.665] ReadFile (in: hFile=0x434, lpBuffer=0x221bd48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x221bd48*, lpNumberOfBytesRead=0x3be868*=0x538, lpOverlapped=0x0) returned 1 [0046.665] CloseHandle (hObject=0x434) returned 1 [0046.676] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\8MQwAP0_D5NFG dD.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\8MQwAP0_D5NFG dD.lnk", lpFilePart=0x0) returned 0x53 [0046.676] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0046.676] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\8MQwAP0_D5NFG dD.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\8mqwap0_d5nfg dd.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x434 [0046.677] GetFileType (hFile=0x434) returned 0x1 [0046.677] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0046.677] GetFileType (hFile=0x434) returned 0x1 [0046.677] WriteFile (in: hFile=0x434, lpBuffer=0x2294788*, nNumberOfBytesToWrite=0x540, lpNumberOfBytesWritten=0x3be778, lpOverlapped=0x0 | out: lpBuffer=0x2294788*, lpNumberOfBytesWritten=0x3be778*=0x540, lpOverlapped=0x0) returned 1 [0046.678] CloseHandle (hObject=0x434) returned 1 [0046.678] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\8MQwAP0_D5NFG dD.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\8MQwAP0_D5NFG dD.lnk", lpFilePart=0x0) returned 0x53 [0046.679] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\8MQwAP0_D5NFG dD.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\8MQwAP0_D5NFG dD.lnk.xuy", lpFilePart=0x0) returned 0x57 [0046.679] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0046.679] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\8MQwAP0_D5NFG dD.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\8mqwap0_d5nfg dd.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5ccdfd9, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf5ccdfd9, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0x7abeb9d, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x540)) returned 1 [0046.679] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0046.679] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\8MQwAP0_D5NFG dD.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\8mqwap0_d5nfg dd.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\8MQwAP0_D5NFG dD.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\8mqwap0_d5nfg dd.lnk.xuy")) returned 1 [0046.679] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\9m4LOZ8HMX8jF_V_h.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\9m4LOZ8HMX8jF_V_h.lnk", lpFilePart=0x0) returned 0x54 [0046.679] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0046.679] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\9m4LOZ8HMX8jF_V_h.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\9m4loz8hmx8jf_v_h.lnk"), fInfoLevelId=0x0, lpFileInformation=0x2295a38 | out: lpFileInformation=0x2295a38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf40ca772, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf40ca772, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0xf40ca772, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x5db)) returned 1 [0046.679] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0046.680] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\9m4LOZ8HMX8jF_V_h.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\9m4LOZ8HMX8jF_V_h.lnk", lpFilePart=0x0) returned 0x54 [0046.680] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0046.680] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\9m4LOZ8HMX8jF_V_h.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\9m4loz8hmx8jf_v_h.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x434 [0046.680] GetFileType (hFile=0x434) returned 0x1 [0046.680] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0046.680] GetFileType (hFile=0x434) returned 0x1 [0046.680] GetFileSize (in: hFile=0x434, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x5db [0046.680] ReadFile (in: hFile=0x434, lpBuffer=0x2296320, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x2296320*, lpNumberOfBytesRead=0x3be868*=0x5db, lpOverlapped=0x0) returned 1 [0046.680] CloseHandle (hObject=0x434) returned 1 [0046.690] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\9m4LOZ8HMX8jF_V_h.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\9m4LOZ8HMX8jF_V_h.lnk", lpFilePart=0x0) returned 0x54 [0046.690] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0046.690] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\9m4LOZ8HMX8jF_V_h.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\9m4loz8hmx8jf_v_h.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x434 [0046.691] GetFileType (hFile=0x434) returned 0x1 [0046.691] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0046.691] GetFileType (hFile=0x434) returned 0x1 [0046.691] WriteFile (in: hFile=0x434, lpBuffer=0x230f088*, nNumberOfBytesToWrite=0x5e0, lpNumberOfBytesWritten=0x3be778, lpOverlapped=0x0 | out: lpBuffer=0x230f088*, lpNumberOfBytesWritten=0x3be778*=0x5e0, lpOverlapped=0x0) returned 1 [0046.692] CloseHandle (hObject=0x434) returned 1 [0046.692] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\9m4LOZ8HMX8jF_V_h.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\9m4LOZ8HMX8jF_V_h.lnk", lpFilePart=0x0) returned 0x54 [0046.692] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\9m4LOZ8HMX8jF_V_h.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\9m4LOZ8HMX8jF_V_h.lnk.xuy", lpFilePart=0x0) returned 0x58 [0046.692] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0046.692] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\9m4LOZ8HMX8jF_V_h.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\9m4loz8hmx8jf_v_h.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf40ca772, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf40ca772, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0x7ae4aa2, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x5e0)) returned 1 [0046.693] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0046.693] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\9m4LOZ8HMX8jF_V_h.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\9m4loz8hmx8jf_v_h.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\9m4LOZ8HMX8jF_V_h.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\9m4loz8hmx8jf_v_h.lnk.xuy")) returned 1 [0046.693] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\9mRe9.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\9mRe9.lnk", lpFilePart=0x0) returned 0x48 [0046.693] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0046.693] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\9mRe9.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\9mre9.lnk"), fInfoLevelId=0x0, lpFileInformation=0x2310350 | out: lpFileInformation=0x2310350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4c6a20a, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf4c6a20a, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0xf4c6a20a, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x4f8)) returned 1 [0046.693] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0046.693] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\9mRe9.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\9mRe9.lnk", lpFilePart=0x0) returned 0x48 [0046.693] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0046.693] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\9mRe9.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\9mre9.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x434 [0046.693] GetFileType (hFile=0x434) returned 0x1 [0046.694] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0046.694] GetFileType (hFile=0x434) returned 0x1 [0046.694] GetFileSize (in: hFile=0x434, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x4f8 [0046.694] ReadFile (in: hFile=0x434, lpBuffer=0x2310af0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x2310af0*, lpNumberOfBytesRead=0x3be868*=0x4f8, lpOverlapped=0x0) returned 1 [0046.694] CloseHandle (hObject=0x434) returned 1 [0046.731] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\9mRe9.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\9mRe9.lnk", lpFilePart=0x0) returned 0x48 [0046.731] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0046.732] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\9mRe9.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\9mre9.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x434 [0046.732] GetFileType (hFile=0x434) returned 0x1 [0046.732] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0046.732] GetFileType (hFile=0x434) returned 0x1 [0046.733] WriteFile (in: hFile=0x434, lpBuffer=0x218a560*, nNumberOfBytesToWrite=0x500, lpNumberOfBytesWritten=0x3be778, lpOverlapped=0x0 | out: lpBuffer=0x218a560*, lpNumberOfBytesWritten=0x3be778*=0x500, lpOverlapped=0x0) returned 1 [0046.733] CloseHandle (hObject=0x434) returned 1 [0046.734] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\9mRe9.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\9mRe9.lnk", lpFilePart=0x0) returned 0x48 [0046.734] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\9mRe9.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\9mRe9.lnk.xuy", lpFilePart=0x0) returned 0x4c [0046.734] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0046.734] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\9mRe9.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\9mre9.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4c6a20a, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf4c6a20a, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0x7b30e59, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x500)) returned 1 [0046.734] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0046.734] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\9mRe9.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\9mre9.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\9mRe9.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\9mre9.lnk.xuy")) returned 1 [0046.735] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\A-6CfSPMROK0fG74g-Zj.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\A-6CfSPMROK0fG74g-Zj.lnk", lpFilePart=0x0) returned 0x57 [0046.735] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0046.735] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\A-6CfSPMROK0fG74g-Zj.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\a-6cfspmrok0fg74g-zj.lnk"), fInfoLevelId=0x0, lpFileInformation=0x218b7e0 | out: lpFileInformation=0x218b7e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf48fc63f, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf48fc63f, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0xf48fc63f, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x2cc)) returned 1 [0046.735] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0046.735] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\A-6CfSPMROK0fG74g-Zj.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\A-6CfSPMROK0fG74g-Zj.lnk", lpFilePart=0x0) returned 0x57 [0046.735] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0046.735] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\A-6CfSPMROK0fG74g-Zj.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\a-6cfspmrok0fg74g-zj.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x434 [0046.736] GetFileType (hFile=0x434) returned 0x1 [0046.736] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0046.736] GetFileType (hFile=0x434) returned 0x1 [0046.736] GetFileSize (in: hFile=0x434, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x2cc [0046.736] ReadFile (in: hFile=0x434, lpBuffer=0x218bdc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x218bdc8*, lpNumberOfBytesRead=0x3be868*=0x2cc, lpOverlapped=0x0) returned 1 [0046.736] CloseHandle (hObject=0x434) returned 1 [0046.745] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\A-6CfSPMROK0fG74g-Zj.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\A-6CfSPMROK0fG74g-Zj.lnk", lpFilePart=0x0) returned 0x57 [0046.746] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0046.746] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\A-6CfSPMROK0fG74g-Zj.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\a-6cfspmrok0fg74g-zj.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x434 [0046.746] GetFileType (hFile=0x434) returned 0x1 [0046.746] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0046.747] GetFileType (hFile=0x434) returned 0x1 [0046.747] WriteFile (in: hFile=0x434, lpBuffer=0x2203be8*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x3be778, lpOverlapped=0x0 | out: lpBuffer=0x2203be8*, lpNumberOfBytesWritten=0x3be778*=0x2d0, lpOverlapped=0x0) returned 1 [0046.747] CloseHandle (hObject=0x434) returned 1 [0046.748] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\A-6CfSPMROK0fG74g-Zj.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\A-6CfSPMROK0fG74g-Zj.lnk", lpFilePart=0x0) returned 0x57 [0046.748] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\A-6CfSPMROK0fG74g-Zj.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\A-6CfSPMROK0fG74g-Zj.lnk.xuy", lpFilePart=0x0) returned 0x5b [0046.748] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0046.748] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\A-6CfSPMROK0fG74g-Zj.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\a-6cfspmrok0fg74g-zj.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf48fc63f, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf48fc63f, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0x7b570ed, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2d0)) returned 1 [0046.748] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0046.748] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\A-6CfSPMROK0fG74g-Zj.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\a-6cfspmrok0fg74g-zj.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\A-6CfSPMROK0fG74g-Zj.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\a-6cfspmrok0fg74g-zj.lnk.xuy")) returned 1 [0046.749] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\a3QnHpY8WxK1ea.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\a3QnHpY8WxK1ea.lnk", lpFilePart=0x0) returned 0x51 [0046.749] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0046.749] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\a3QnHpY8WxK1ea.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\a3qnhpy8wxk1ea.lnk"), fInfoLevelId=0x0, lpFileInformation=0x2204eb0 | out: lpFileInformation=0x2204eb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf59ad03a, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf59ad03a, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0xf59ad03a, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x4a2)) returned 1 [0046.749] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0046.749] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\a3QnHpY8WxK1ea.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\a3QnHpY8WxK1ea.lnk", lpFilePart=0x0) returned 0x51 [0046.749] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0046.749] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\a3QnHpY8WxK1ea.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\a3qnhpy8wxk1ea.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x434 [0046.749] GetFileType (hFile=0x434) returned 0x1 [0046.749] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0046.749] GetFileType (hFile=0x434) returned 0x1 [0046.749] GetFileSize (in: hFile=0x434, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x4a2 [0046.749] ReadFile (in: hFile=0x434, lpBuffer=0x2205640, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x2205640*, lpNumberOfBytesRead=0x3be868*=0x4a2, lpOverlapped=0x0) returned 1 [0046.749] CloseHandle (hObject=0x434) returned 1 [0046.760] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\a3QnHpY8WxK1ea.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\a3QnHpY8WxK1ea.lnk", lpFilePart=0x0) returned 0x51 [0046.760] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0046.760] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\a3QnHpY8WxK1ea.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\a3qnhpy8wxk1ea.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x434 [0046.761] GetFileType (hFile=0x434) returned 0x1 [0046.761] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0046.761] GetFileType (hFile=0x434) returned 0x1 [0046.761] WriteFile (in: hFile=0x434, lpBuffer=0x227ddb0*, nNumberOfBytesToWrite=0x4b0, lpNumberOfBytesWritten=0x3be778, lpOverlapped=0x0 | out: lpBuffer=0x227ddb0*, lpNumberOfBytesWritten=0x3be778*=0x4b0, lpOverlapped=0x0) returned 1 [0046.761] CloseHandle (hObject=0x434) returned 1 [0046.762] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\a3QnHpY8WxK1ea.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\a3QnHpY8WxK1ea.lnk", lpFilePart=0x0) returned 0x51 [0046.762] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\a3QnHpY8WxK1ea.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\a3QnHpY8WxK1ea.lnk.xuy", lpFilePart=0x0) returned 0x55 [0046.762] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0046.762] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\a3QnHpY8WxK1ea.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\a3qnhpy8wxk1ea.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf59ad03a, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf59ad03a, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0x7b7d597, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x4b0)) returned 1 [0046.762] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0046.762] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\a3QnHpY8WxK1ea.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\a3qnhpy8wxk1ea.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\a3QnHpY8WxK1ea.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\a3qnhpy8wxk1ea.lnk.xuy")) returned 1 [0046.763] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\A4ItiusytGvu1_7.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\A4ItiusytGvu1_7.lnk", lpFilePart=0x0) returned 0x52 [0046.763] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0046.763] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\A4ItiusytGvu1_7.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\a4itiusytgvu1_7.lnk"), fInfoLevelId=0x0, lpFileInformation=0x227f060 | out: lpFileInformation=0x227f060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4fb115a, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf4fb115a, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0xf4fb115a, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x414)) returned 1 [0046.763] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0046.763] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\A4ItiusytGvu1_7.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\A4ItiusytGvu1_7.lnk", lpFilePart=0x0) returned 0x52 [0046.763] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0046.763] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\A4ItiusytGvu1_7.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\a4itiusytgvu1_7.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x434 [0046.763] GetFileType (hFile=0x434) returned 0x1 [0046.763] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0046.763] GetFileType (hFile=0x434) returned 0x1 [0046.763] GetFileSize (in: hFile=0x434, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x414 [0046.763] ReadFile (in: hFile=0x434, lpBuffer=0x227f760, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x227f760*, lpNumberOfBytesRead=0x3be868*=0x414, lpOverlapped=0x0) returned 1 [0046.763] CloseHandle (hObject=0x434) returned 1 [0046.773] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\A4ItiusytGvu1_7.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\A4ItiusytGvu1_7.lnk", lpFilePart=0x0) returned 0x52 [0046.773] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0046.774] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\A4ItiusytGvu1_7.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\a4itiusytgvu1_7.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x434 [0046.774] GetFileType (hFile=0x434) returned 0x1 [0046.774] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0046.774] GetFileType (hFile=0x434) returned 0x1 [0046.774] WriteFile (in: hFile=0x434, lpBuffer=0x22f7c00*, nNumberOfBytesToWrite=0x420, lpNumberOfBytesWritten=0x3be778, lpOverlapped=0x0 | out: lpBuffer=0x22f7c00*, lpNumberOfBytesWritten=0x3be778*=0x420, lpOverlapped=0x0) returned 1 [0046.775] CloseHandle (hObject=0x434) returned 1 [0046.776] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\A4ItiusytGvu1_7.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\A4ItiusytGvu1_7.lnk", lpFilePart=0x0) returned 0x52 [0046.776] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\A4ItiusytGvu1_7.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\A4ItiusytGvu1_7.lnk.xuy", lpFilePart=0x0) returned 0x56 [0046.776] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0046.776] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\A4ItiusytGvu1_7.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\a4itiusytgvu1_7.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4fb115a, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf4fb115a, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0x7ba342b, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x420)) returned 1 [0046.776] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0046.776] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\A4ItiusytGvu1_7.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\a4itiusytgvu1_7.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\A4ItiusytGvu1_7.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\a4itiusytgvu1_7.lnk.xuy")) returned 1 [0046.777] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\aA1x 4cIy.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\aA1x 4cIy.lnk", lpFilePart=0x0) returned 0x4c [0046.777] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0046.777] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\aA1x 4cIy.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\aa1x 4ciy.lnk"), fInfoLevelId=0x0, lpFileInformation=0x22f8eb0 | out: lpFileInformation=0x22f8eb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf50bc18a, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf50bc18a, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0xf50bc18a, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x43c)) returned 1 [0046.777] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0046.777] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\aA1x 4cIy.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\aA1x 4cIy.lnk", lpFilePart=0x0) returned 0x4c [0046.777] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0046.777] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\aA1x 4cIy.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\aa1x 4ciy.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x434 [0046.777] GetFileType (hFile=0x434) returned 0x1 [0046.777] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0046.777] GetFileType (hFile=0x434) returned 0x1 [0046.777] GetFileSize (in: hFile=0x434, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x43c [0046.777] ReadFile (in: hFile=0x434, lpBuffer=0x22f95b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x22f95b8*, lpNumberOfBytesRead=0x3be868*=0x43c, lpOverlapped=0x0) returned 1 [0046.777] CloseHandle (hObject=0x434) returned 1 [0046.815] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\aA1x 4cIy.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\aA1x 4cIy.lnk", lpFilePart=0x0) returned 0x4c [0046.815] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0046.815] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\aA1x 4cIy.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\aa1x 4ciy.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x434 [0046.816] GetFileType (hFile=0x434) returned 0x1 [0046.816] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0046.816] GetFileType (hFile=0x434) returned 0x1 [0046.816] WriteFile (in: hFile=0x434, lpBuffer=0x2172f20*, nNumberOfBytesToWrite=0x440, lpNumberOfBytesWritten=0x3be778, lpOverlapped=0x0 | out: lpBuffer=0x2172f20*, lpNumberOfBytesWritten=0x3be778*=0x440, lpOverlapped=0x0) returned 1 [0046.817] CloseHandle (hObject=0x434) returned 1 [0046.818] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\aA1x 4cIy.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\aA1x 4cIy.lnk", lpFilePart=0x0) returned 0x4c [0046.818] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\aA1x 4cIy.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\aA1x 4cIy.lnk.xuy", lpFilePart=0x0) returned 0x50 [0046.818] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0046.818] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\aA1x 4cIy.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\aa1x 4ciy.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf50bc18a, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf50bc18a, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0x7c15bc3, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x440)) returned 1 [0046.818] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0046.818] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\aA1x 4cIy.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\aa1x 4ciy.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\aA1x 4cIy.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\aa1x 4ciy.lnk.xuy")) returned 1 [0046.819] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ag70uOVMAZyHaepYdjne.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ag70uOVMAZyHaepYdjne.lnk", lpFilePart=0x0) returned 0x57 [0046.819] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0046.819] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ag70uOVMAZyHaepYdjne.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\ag70uovmazyhaepydjne.lnk"), fInfoLevelId=0x0, lpFileInformation=0x21741b8 | out: lpFileInformation=0x21741b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3f4ce8f, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf3f4ce8f, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0xf3f4ce8f, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x658)) returned 1 [0046.819] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0046.819] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ag70uOVMAZyHaepYdjne.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ag70uOVMAZyHaepYdjne.lnk", lpFilePart=0x0) returned 0x57 [0046.819] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0046.819] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ag70uOVMAZyHaepYdjne.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\ag70uovmazyhaepydjne.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x434 [0046.819] GetFileType (hFile=0x434) returned 0x1 [0046.819] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0046.819] GetFileType (hFile=0x434) returned 0x1 [0046.819] GetFileSize (in: hFile=0x434, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x658 [0046.819] ReadFile (in: hFile=0x434, lpBuffer=0x2174b28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x2174b28*, lpNumberOfBytesRead=0x3be868*=0x658, lpOverlapped=0x0) returned 1 [0046.819] CloseHandle (hObject=0x434) returned 1 [0046.830] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ag70uOVMAZyHaepYdjne.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ag70uOVMAZyHaepYdjne.lnk", lpFilePart=0x0) returned 0x57 [0046.830] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0046.830] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ag70uOVMAZyHaepYdjne.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\ag70uovmazyhaepydjne.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x434 [0046.831] GetFileType (hFile=0x434) returned 0x1 [0046.831] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0046.831] GetFileType (hFile=0x434) returned 0x1 [0046.831] WriteFile (in: hFile=0x434, lpBuffer=0x21edb18*, nNumberOfBytesToWrite=0x660, lpNumberOfBytesWritten=0x3be778, lpOverlapped=0x0 | out: lpBuffer=0x21edb18*, lpNumberOfBytesWritten=0x3be778*=0x660, lpOverlapped=0x0) returned 1 [0046.832] CloseHandle (hObject=0x434) returned 1 [0046.832] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ag70uOVMAZyHaepYdjne.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ag70uOVMAZyHaepYdjne.lnk", lpFilePart=0x0) returned 0x57 [0046.832] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ag70uOVMAZyHaepYdjne.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ag70uOVMAZyHaepYdjne.lnk.xuy", lpFilePart=0x0) returned 0x5b [0046.832] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0046.832] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ag70uOVMAZyHaepYdjne.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\ag70uovmazyhaepydjne.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3f4ce8f, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf3f4ce8f, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0x7c3beac, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x660)) returned 1 [0046.833] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0046.833] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ag70uOVMAZyHaepYdjne.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\ag70uovmazyhaepydjne.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ag70uOVMAZyHaepYdjne.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\ag70uovmazyhaepydjne.lnk.xuy")) returned 1 [0046.833] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\aWky26OAlQ8f6r.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\aWky26OAlQ8f6r.lnk", lpFilePart=0x0) returned 0x51 [0046.833] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0046.833] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\aWky26OAlQ8f6r.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\awky26oalq8f6r.lnk"), fInfoLevelId=0x0, lpFileInformation=0x21eede0 | out: lpFileInformation=0x21eede0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf59f9342, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf59f9342, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0xf59f9342, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x2ae)) returned 1 [0046.833] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0046.833] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\aWky26OAlQ8f6r.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\aWky26OAlQ8f6r.lnk", lpFilePart=0x0) returned 0x51 [0046.833] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0046.833] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\aWky26OAlQ8f6r.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\awky26oalq8f6r.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x434 [0046.834] GetFileType (hFile=0x434) returned 0x1 [0046.834] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0046.834] GetFileType (hFile=0x434) returned 0x1 [0046.834] GetFileSize (in: hFile=0x434, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x2ae [0046.834] ReadFile (in: hFile=0x434, lpBuffer=0x21ef378, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x21ef378*, lpNumberOfBytesRead=0x3be868*=0x2ae, lpOverlapped=0x0) returned 1 [0046.834] CloseHandle (hObject=0x434) returned 1 [0046.844] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\aWky26OAlQ8f6r.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\aWky26OAlQ8f6r.lnk", lpFilePart=0x0) returned 0x51 [0046.844] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0046.844] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\aWky26OAlQ8f6r.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\awky26oalq8f6r.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x434 [0046.848] GetFileType (hFile=0x434) returned 0x1 [0046.848] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0046.848] GetFileType (hFile=0x434) returned 0x1 [0046.848] WriteFile (in: hFile=0x434, lpBuffer=0x22670e0*, nNumberOfBytesToWrite=0x2b0, lpNumberOfBytesWritten=0x3be778, lpOverlapped=0x0 | out: lpBuffer=0x22670e0*, lpNumberOfBytesWritten=0x3be778*=0x2b0, lpOverlapped=0x0) returned 1 [0046.849] CloseHandle (hObject=0x434) returned 1 [0046.850] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\aWky26OAlQ8f6r.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\aWky26OAlQ8f6r.lnk", lpFilePart=0x0) returned 0x51 [0046.850] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\aWky26OAlQ8f6r.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\aWky26OAlQ8f6r.lnk.xuy", lpFilePart=0x0) returned 0x55 [0046.850] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0046.850] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\aWky26OAlQ8f6r.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\awky26oalq8f6r.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf59f9342, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf59f9342, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0x7c61ef0, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2b0)) returned 1 [0046.850] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0046.850] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\aWky26OAlQ8f6r.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\awky26oalq8f6r.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\aWky26OAlQ8f6r.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\awky26oalq8f6r.lnk.xuy")) returned 1 [0046.851] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\az88pgn.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\az88pgn.lnk", lpFilePart=0x0) returned 0x4a [0046.851] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0046.851] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\az88pgn.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\az88pgn.lnk"), fInfoLevelId=0x0, lpFileInformation=0x2268390 | out: lpFileInformation=0x2268390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf41890a3, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf41890a3, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0xf41890a3, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x289)) returned 1 [0046.851] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0046.851] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\az88pgn.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\az88pgn.lnk", lpFilePart=0x0) returned 0x4a [0046.851] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0046.851] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\az88pgn.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\az88pgn.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x434 [0046.851] GetFileType (hFile=0x434) returned 0x1 [0046.851] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0046.851] GetFileType (hFile=0x434) returned 0x1 [0046.851] GetFileSize (in: hFile=0x434, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x289 [0046.851] ReadFile (in: hFile=0x434, lpBuffer=0x22688c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x22688c8*, lpNumberOfBytesRead=0x3be868*=0x289, lpOverlapped=0x0) returned 1 [0046.851] CloseHandle (hObject=0x434) returned 1 [0046.862] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\az88pgn.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\az88pgn.lnk", lpFilePart=0x0) returned 0x4a [0046.862] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0046.862] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\az88pgn.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\az88pgn.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x434 [0046.863] GetFileType (hFile=0x434) returned 0x1 [0046.863] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0046.863] GetFileType (hFile=0x434) returned 0x1 [0046.863] WriteFile (in: hFile=0x434, lpBuffer=0x22e0570*, nNumberOfBytesToWrite=0x290, lpNumberOfBytesWritten=0x3be778, lpOverlapped=0x0 | out: lpBuffer=0x22e0570*, lpNumberOfBytesWritten=0x3be778*=0x290, lpOverlapped=0x0) returned 1 [0046.863] CloseHandle (hObject=0x434) returned 1 [0046.864] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\az88pgn.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\az88pgn.lnk", lpFilePart=0x0) returned 0x4a [0046.864] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\az88pgn.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\az88pgn.lnk.xuy", lpFilePart=0x0) returned 0x4e [0046.864] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0046.864] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\az88pgn.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\az88pgn.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf41890a3, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf41890a3, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0x7c885b8, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x290)) returned 1 [0046.864] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0046.864] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\az88pgn.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\az88pgn.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\az88pgn.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\az88pgn.lnk.xuy")) returned 1 [0046.873] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AZC2.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AZC2.lnk", lpFilePart=0x0) returned 0x47 [0046.873] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0046.873] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AZC2.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\azc2.lnk"), fInfoLevelId=0x0, lpFileInformation=0x22e17f0 | out: lpFileInformation=0x22e17f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4aa0000, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf4aa0000, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0xf4aa0000, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x3d9)) returned 1 [0046.873] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0046.873] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AZC2.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AZC2.lnk", lpFilePart=0x0) returned 0x47 [0046.873] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0046.873] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AZC2.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\azc2.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x434 [0046.873] GetFileType (hFile=0x434) returned 0x1 [0046.873] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0046.873] GetFileType (hFile=0x434) returned 0x1 [0046.873] GetFileSize (in: hFile=0x434, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x3d9 [0046.873] ReadFile (in: hFile=0x434, lpBuffer=0x22e1e68, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x22e1e68*, lpNumberOfBytesRead=0x3be868*=0x3d9, lpOverlapped=0x0) returned 1 [0046.873] CloseHandle (hObject=0x434) returned 1 [0046.908] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AZC2.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AZC2.lnk", lpFilePart=0x0) returned 0x47 [0046.908] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0046.908] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AZC2.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\azc2.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x434 [0046.909] GetFileType (hFile=0x434) returned 0x1 [0046.909] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0046.909] GetFileType (hFile=0x434) returned 0x1 [0046.909] WriteFile (in: hFile=0x434, lpBuffer=0x215b428*, nNumberOfBytesToWrite=0x3e0, lpNumberOfBytesWritten=0x3be778, lpOverlapped=0x0 | out: lpBuffer=0x215b428*, lpNumberOfBytesWritten=0x3be778*=0x3e0, lpOverlapped=0x0) returned 1 [0046.910] CloseHandle (hObject=0x434) returned 1 [0046.911] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AZC2.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AZC2.lnk", lpFilePart=0x0) returned 0x47 [0046.911] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AZC2.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AZC2.lnk.xuy", lpFilePart=0x0) returned 0x4b [0046.911] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0046.911] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AZC2.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\azc2.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4aa0000, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf4aa0000, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0x7cfed98, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x3e0)) returned 1 [0046.911] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0046.911] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AZC2.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\azc2.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AZC2.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\azc2.lnk.xuy")) returned 1 [0046.911] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\B05_T.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\B05_T.lnk", lpFilePart=0x0) returned 0x48 [0046.912] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0046.912] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\B05_T.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\b05_t.lnk"), fInfoLevelId=0x0, lpFileInformation=0x215c690 | out: lpFileInformation=0x215c690*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf26e067a, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf4e339cc, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0xf4e339cc, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x4f9)) returned 1 [0046.912] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0046.912] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\B05_T.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\B05_T.lnk", lpFilePart=0x0) returned 0x48 [0046.912] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0046.912] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\B05_T.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\b05_t.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x434 [0046.912] GetFileType (hFile=0x434) returned 0x1 [0046.912] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0046.912] GetFileType (hFile=0x434) returned 0x1 [0046.912] GetFileSize (in: hFile=0x434, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x4f9 [0046.912] ReadFile (in: hFile=0x434, lpBuffer=0x215ce38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x215ce38*, lpNumberOfBytesRead=0x3be868*=0x4f9, lpOverlapped=0x0) returned 1 [0046.912] CloseHandle (hObject=0x434) returned 1 [0046.922] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\B05_T.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\B05_T.lnk", lpFilePart=0x0) returned 0x48 [0046.922] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0046.922] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\B05_T.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\b05_t.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x434 [0046.926] GetFileType (hFile=0x434) returned 0x1 [0046.926] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0046.926] GetFileType (hFile=0x434) returned 0x1 [0046.926] WriteFile (in: hFile=0x434, lpBuffer=0x21d5710*, nNumberOfBytesToWrite=0x500, lpNumberOfBytesWritten=0x3be778, lpOverlapped=0x0 | out: lpBuffer=0x21d5710*, lpNumberOfBytesWritten=0x3be778*=0x500, lpOverlapped=0x0) returned 1 [0046.927] CloseHandle (hObject=0x434) returned 1 [0046.927] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\B05_T.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\B05_T.lnk", lpFilePart=0x0) returned 0x48 [0046.927] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\B05_T.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\B05_T.lnk.xuy", lpFilePart=0x0) returned 0x4c [0046.927] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0046.927] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\B05_T.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\b05_t.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf26e067a, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf4e339cc, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0x7d20b9f, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x500)) returned 1 [0046.928] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0046.928] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\B05_T.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\b05_t.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\B05_T.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\b05_t.lnk.xuy")) returned 1 [0046.928] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\cLzrBwI9ELH8EUl_mr.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\cLzrBwI9ELH8EUl_mr.lnk", lpFilePart=0x0) returned 0x55 [0046.928] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0046.928] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\cLzrBwI9ELH8EUl_mr.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\clzrbwi9elh8eul_mr.lnk"), fInfoLevelId=0x0, lpFileInformation=0x21d6990 | out: lpFileInformation=0x21d6990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf36abf8c, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf4bf7676, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0xf4bf7676, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x3ac)) returned 1 [0046.928] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0046.928] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\cLzrBwI9ELH8EUl_mr.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\cLzrBwI9ELH8EUl_mr.lnk", lpFilePart=0x0) returned 0x55 [0046.928] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0046.928] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\cLzrBwI9ELH8EUl_mr.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\clzrbwi9elh8eul_mr.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x434 [0046.929] GetFileType (hFile=0x434) returned 0x1 [0046.929] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0046.929] GetFileType (hFile=0x434) returned 0x1 [0046.929] GetFileSize (in: hFile=0x434, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x3ac [0046.929] ReadFile (in: hFile=0x434, lpBuffer=0x21d7048, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x21d7048*, lpNumberOfBytesRead=0x3be868*=0x3ac, lpOverlapped=0x0) returned 1 [0046.929] CloseHandle (hObject=0x434) returned 1 [0046.939] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\cLzrBwI9ELH8EUl_mr.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\cLzrBwI9ELH8EUl_mr.lnk", lpFilePart=0x0) returned 0x55 [0046.939] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0046.939] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\cLzrBwI9ELH8EUl_mr.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\clzrbwi9elh8eul_mr.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x434 [0046.941] GetFileType (hFile=0x434) returned 0x1 [0046.941] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0046.941] GetFileType (hFile=0x434) returned 0x1 [0046.941] WriteFile (in: hFile=0x434, lpBuffer=0x224f2c0*, nNumberOfBytesToWrite=0x3b0, lpNumberOfBytesWritten=0x3be778, lpOverlapped=0x0 | out: lpBuffer=0x224f2c0*, lpNumberOfBytesWritten=0x3be778*=0x3b0, lpOverlapped=0x0) returned 1 [0046.942] CloseHandle (hObject=0x434) returned 1 [0046.944] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\cLzrBwI9ELH8EUl_mr.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\cLzrBwI9ELH8EUl_mr.lnk", lpFilePart=0x0) returned 0x55 [0046.944] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\cLzrBwI9ELH8EUl_mr.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\cLzrBwI9ELH8EUl_mr.lnk.xuy", lpFilePart=0x0) returned 0x59 [0046.944] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0046.944] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\cLzrBwI9ELH8EUl_mr.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\clzrbwi9elh8eul_mr.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf36abf8c, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf4bf7676, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0x7d4732d, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x3b0)) returned 1 [0046.945] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0046.945] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\cLzrBwI9ELH8EUl_mr.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\clzrbwi9elh8eul_mr.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\cLzrBwI9ELH8EUl_mr.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\clzrbwi9elh8eul_mr.lnk.xuy")) returned 1 [0046.945] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CNfRGDwaADTpS.flv.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CNfRGDwaADTpS.flv.lnk", lpFilePart=0x0) returned 0x54 [0046.945] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0046.945] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CNfRGDwaADTpS.flv.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\cnfrgdwaadtps.flv.lnk"), fInfoLevelId=0x0, lpFileInformation=0x2250588 | out: lpFileInformation=0x2250588*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5b5500e, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf5b5500e, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0xf5b5500e, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x40a)) returned 1 [0046.945] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0046.945] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CNfRGDwaADTpS.flv.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CNfRGDwaADTpS.flv.lnk", lpFilePart=0x0) returned 0x54 [0046.945] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0046.945] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CNfRGDwaADTpS.flv.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\cnfrgdwaadtps.flv.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x434 [0046.946] GetFileType (hFile=0x434) returned 0x1 [0046.946] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0046.946] GetFileType (hFile=0x434) returned 0x1 [0046.946] GetFileSize (in: hFile=0x434, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x40a [0046.946] ReadFile (in: hFile=0x434, lpBuffer=0x2250ca0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x2250ca0*, lpNumberOfBytesRead=0x3be868*=0x40a, lpOverlapped=0x0) returned 1 [0046.946] CloseHandle (hObject=0x434) returned 1 [0046.956] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CNfRGDwaADTpS.flv.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CNfRGDwaADTpS.flv.lnk", lpFilePart=0x0) returned 0x54 [0046.956] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0046.956] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CNfRGDwaADTpS.flv.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\cnfrgdwaadtps.flv.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x434 [0046.958] GetFileType (hFile=0x434) returned 0x1 [0046.958] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0046.958] GetFileType (hFile=0x434) returned 0x1 [0046.958] WriteFile (in: hFile=0x434, lpBuffer=0x22c90f8*, nNumberOfBytesToWrite=0x410, lpNumberOfBytesWritten=0x3be778, lpOverlapped=0x0 | out: lpBuffer=0x22c90f8*, lpNumberOfBytesWritten=0x3be778*=0x410, lpOverlapped=0x0) returned 1 [0046.959] CloseHandle (hObject=0x434) returned 1 [0046.959] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CNfRGDwaADTpS.flv.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CNfRGDwaADTpS.flv.lnk", lpFilePart=0x0) returned 0x54 [0046.959] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CNfRGDwaADTpS.flv.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CNfRGDwaADTpS.flv.lnk.xuy", lpFilePart=0x0) returned 0x58 [0046.959] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0046.960] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CNfRGDwaADTpS.flv.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\cnfrgdwaadtps.flv.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5b5500e, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf5b5500e, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0x7d6d061, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x410)) returned 1 [0046.960] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0046.960] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CNfRGDwaADTpS.flv.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\cnfrgdwaadtps.flv.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CNfRGDwaADTpS.flv.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\cnfrgdwaadtps.flv.lnk.xuy")) returned 1 [0046.961] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CtG65B.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CtG65B.lnk", lpFilePart=0x0) returned 0x49 [0046.961] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0046.961] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CtG65B.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\ctg65b.lnk"), fInfoLevelId=0x0, lpFileInformation=0x22ca3c0 | out: lpFileInformation=0x22ca3c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3a62170, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf3a62170, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0xf3a62170, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x4f8)) returned 1 [0046.961] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0046.961] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CtG65B.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CtG65B.lnk", lpFilePart=0x0) returned 0x49 [0046.961] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0046.961] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CtG65B.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\ctg65b.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x434 [0046.961] GetFileType (hFile=0x434) returned 0x1 [0046.961] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0046.961] GetFileType (hFile=0x434) returned 0x1 [0046.961] GetFileSize (in: hFile=0x434, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x4f8 [0046.961] ReadFile (in: hFile=0x434, lpBuffer=0x22cab60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x22cab60*, lpNumberOfBytesRead=0x3be868*=0x4f8, lpOverlapped=0x0) returned 1 [0046.961] CloseHandle (hObject=0x434) returned 1 [0047.001] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CtG65B.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CtG65B.lnk", lpFilePart=0x0) returned 0x49 [0047.002] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0047.002] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CtG65B.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\ctg65b.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x434 [0047.003] GetFileType (hFile=0x434) returned 0x1 [0047.003] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0047.003] GetFileType (hFile=0x434) returned 0x1 [0047.003] WriteFile (in: hFile=0x434, lpBuffer=0x2144738*, nNumberOfBytesToWrite=0x500, lpNumberOfBytesWritten=0x3be778, lpOverlapped=0x0 | out: lpBuffer=0x2144738*, lpNumberOfBytesWritten=0x3be778*=0x500, lpOverlapped=0x0) returned 1 [0047.003] CloseHandle (hObject=0x434) returned 1 [0047.004] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CtG65B.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CtG65B.lnk", lpFilePart=0x0) returned 0x49 [0047.004] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CtG65B.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CtG65B.lnk.xuy", lpFilePart=0x0) returned 0x4d [0047.004] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0047.004] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CtG65B.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\ctg65b.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3a62170, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf3a62170, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0x7ddf821, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x500)) returned 1 [0047.004] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0047.004] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CtG65B.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\ctg65b.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CtG65B.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\ctg65b.lnk.xuy")) returned 1 [0047.005] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\d Y_MLHa.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\d Y_MLHa.lnk", lpFilePart=0x0) returned 0x4b [0047.005] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0047.005] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\d Y_MLHa.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\d y_mlha.lnk"), fInfoLevelId=0x0, lpFileInformation=0x21459b8 | out: lpFileInformation=0x21459b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf62ea069, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf62ea069, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0xf62ea069, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x445)) returned 1 [0047.005] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0047.005] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\d Y_MLHa.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\d Y_MLHa.lnk", lpFilePart=0x0) returned 0x4b [0047.005] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0047.005] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\d Y_MLHa.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\d y_mlha.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x434 [0047.005] GetFileType (hFile=0x434) returned 0x1 [0047.005] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0047.005] GetFileType (hFile=0x434) returned 0x1 [0047.005] GetFileSize (in: hFile=0x434, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x445 [0047.006] ReadFile (in: hFile=0x434, lpBuffer=0x21460b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x21460b8*, lpNumberOfBytesRead=0x3be868*=0x445, lpOverlapped=0x0) returned 1 [0047.006] CloseHandle (hObject=0x434) returned 1 [0047.016] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\d Y_MLHa.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\d Y_MLHa.lnk", lpFilePart=0x0) returned 0x4b [0047.016] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0047.016] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\d Y_MLHa.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\d y_mlha.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x434 [0047.017] GetFileType (hFile=0x434) returned 0x1 [0047.017] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0047.017] GetFileType (hFile=0x434) returned 0x1 [0047.017] WriteFile (in: hFile=0x434, lpBuffer=0x21be630*, nNumberOfBytesToWrite=0x450, lpNumberOfBytesWritten=0x3be778, lpOverlapped=0x0 | out: lpBuffer=0x21be630*, lpNumberOfBytesWritten=0x3be778*=0x450, lpOverlapped=0x0) returned 1 [0047.018] CloseHandle (hObject=0x434) returned 1 [0047.019] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\d Y_MLHa.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\d Y_MLHa.lnk", lpFilePart=0x0) returned 0x4b [0047.019] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\d Y_MLHa.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\d Y_MLHa.lnk.xuy", lpFilePart=0x0) returned 0x4f [0047.019] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0047.019] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\d Y_MLHa.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\d y_mlha.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf62ea069, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf62ea069, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0x7e05b61, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x450)) returned 1 [0047.019] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0047.019] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\d Y_MLHa.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\d y_mlha.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\d Y_MLHa.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\d y_mlha.lnk.xuy")) returned 1 [0047.019] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\d2H7a-tYhvZsdzV7Kw0T.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\d2H7a-tYhvZsdzV7Kw0T.lnk", lpFilePart=0x0) returned 0x57 [0047.019] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0047.019] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\d2H7a-tYhvZsdzV7Kw0T.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\d2h7a-tyhvzsdzv7kw0t.lnk"), fInfoLevelId=0x0, lpFileInformation=0x21bf8b0 | out: lpFileInformation=0x21bf8b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1e61fbe, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf5154b8e, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0xf5154b8e, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x49f)) returned 1 [0047.020] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0047.020] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\d2H7a-tYhvZsdzV7Kw0T.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\d2H7a-tYhvZsdzV7Kw0T.lnk", lpFilePart=0x0) returned 0x57 [0047.020] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0047.020] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\d2H7a-tYhvZsdzV7Kw0T.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\d2h7a-tyhvzsdzv7kw0t.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x434 [0047.020] GetFileType (hFile=0x434) returned 0x1 [0047.020] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0047.020] GetFileType (hFile=0x434) returned 0x1 [0047.020] GetFileSize (in: hFile=0x434, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x49f [0047.020] ReadFile (in: hFile=0x434, lpBuffer=0x21c0068, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x21c0068*, lpNumberOfBytesRead=0x3be868*=0x49f, lpOverlapped=0x0) returned 1 [0047.020] CloseHandle (hObject=0x434) returned 1 [0047.030] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\d2H7a-tYhvZsdzV7Kw0T.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\d2H7a-tYhvZsdzV7Kw0T.lnk", lpFilePart=0x0) returned 0x57 [0047.030] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0047.031] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\d2H7a-tYhvZsdzV7Kw0T.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\d2h7a-tyhvzsdzv7kw0t.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x434 [0047.032] GetFileType (hFile=0x434) returned 0x1 [0047.032] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0047.032] GetFileType (hFile=0x434) returned 0x1 [0047.032] WriteFile (in: hFile=0x434, lpBuffer=0x2238798*, nNumberOfBytesToWrite=0x4a0, lpNumberOfBytesWritten=0x3be778, lpOverlapped=0x0 | out: lpBuffer=0x2238798*, lpNumberOfBytesWritten=0x3be778*=0x4a0, lpOverlapped=0x0) returned 1 [0047.033] CloseHandle (hObject=0x434) returned 1 [0047.033] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\d2H7a-tYhvZsdzV7Kw0T.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\d2H7a-tYhvZsdzV7Kw0T.lnk", lpFilePart=0x0) returned 0x57 [0047.033] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\d2H7a-tYhvZsdzV7Kw0T.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\d2H7a-tYhvZsdzV7Kw0T.lnk.xuy", lpFilePart=0x0) returned 0x5b [0047.034] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0047.034] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\d2H7a-tYhvZsdzV7Kw0T.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\d2h7a-tyhvzsdzv7kw0t.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1e61fbe, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf5154b8e, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0x7e2bcb1, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x4a0)) returned 1 [0047.034] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0047.034] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\d2H7a-tYhvZsdzV7Kw0T.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\d2h7a-tyhvzsdzv7kw0t.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\d2H7a-tYhvZsdzV7Kw0T.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\d2h7a-tyhvzsdzv7kw0t.lnk.xuy")) returned 1 [0047.034] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\desktop.ini", lpFilePart=0x0) returned 0x4a [0047.034] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0047.034] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x2239a60 | out: lpFileInformation=0x2239a60*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0xae1b508e, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xae1b508e, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xae1b508e, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x1b0)) returned 1 [0047.034] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0047.035] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\desktop.ini", lpFilePart=0x0) returned 0x4a [0047.035] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0047.035] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x434 [0047.035] GetFileType (hFile=0x434) returned 0x1 [0047.035] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0047.035] GetFileType (hFile=0x434) returned 0x1 [0047.035] GetFileSize (in: hFile=0x434, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x1b0 [0047.035] ReadFile (in: hFile=0x434, lpBuffer=0x2239eb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x2239eb8*, lpNumberOfBytesRead=0x3be868*=0x1b0, lpOverlapped=0x0) returned 1 [0047.036] CloseHandle (hObject=0x434) returned 1 [0047.046] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\desktop.ini", lpFilePart=0x0) returned 0x4a [0047.046] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0047.046] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\desktop.ini"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0047.131] EtwEventRegister (in: ProviderId=0x22b4448, EnableCallback=0x1b11085c, CallbackContext=0x0, RegHandle=0x22b4428 | out: RegHandle=0x22b4428) returned 0x0 [0047.134] EtwEventSetInformation (RegHandle=0x4b000000611440, InformationClass=0x2, EventInformation=0x22b43b0, InformationLength=0x33) returned 0x0 [0047.288] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb230) returned 1 [0047.289] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3bbeb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\desktop.ini", lpFilePart=0x0) returned 0x4a [0047.289] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc350) returned 1 [0047.289] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x3bc430 | out: lpFileInformation=0x3bc430*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0xae1b508e, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xae1b508e, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xae1b508e, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x1b0)) returned 1 [0047.289] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc310) returned 1 [0047.289] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3bbed0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\desktop.ini", lpFilePart=0x0) returned 0x4a [0047.289] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc350) returned 1 [0047.289] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x22b63d8 | out: lpFileInformation=0x22b63d8*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0xae1b508e, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xae1b508e, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xae1b508e, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x1b0)) returned 1 [0047.289] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc310) returned 1 [0047.289] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3bbd30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\desktop.ini", lpFilePart=0x0) returned 0x4a [0047.289] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc210) returned 1 [0047.289] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0047.290] GetFileType (hFile=0x448) returned 0x1 [0047.290] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc180) returned 1 [0047.290] GetFileType (hFile=0x448) returned 0x1 [0047.290] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3bc3a8 | out: lpFileSizeHigh=0x3bc3a8*=0x0) returned 0x1b0 [0047.290] ReadFile (in: hFile=0x448, lpBuffer=0x22b6830, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bc2d8, lpOverlapped=0x0 | out: lpBuffer=0x22b6830*, lpNumberOfBytesRead=0x3bc2d8*=0x1b0, lpOverlapped=0x0) returned 1 [0047.290] CloseHandle (hObject=0x448) returned 1 [0047.325] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3bbd30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\desktop.ini", lpFilePart=0x0) returned 0x4a [0047.325] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc210) returned 1 [0047.326] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\desktop.ini"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0047.327] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8ca0) returned 1 [0047.328] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\dEwwga9gIHgP7bGKwR36.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\dEwwga9gIHgP7bGKwR36.lnk", lpFilePart=0x0) returned 0x57 [0047.328] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0047.328] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\dEwwga9gIHgP7bGKwR36.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\dewwga9gihgp7bgkwr36.lnk"), fInfoLevelId=0x0, lpFileInformation=0x232e890 | out: lpFileInformation=0x232e890*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3a15c25, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf3a15c25, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0xf3a15c25, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x473)) returned 1 [0047.328] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0047.328] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\dEwwga9gIHgP7bGKwR36.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\dEwwga9gIHgP7bGKwR36.lnk", lpFilePart=0x0) returned 0x57 [0047.328] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0047.328] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\dEwwga9gIHgP7bGKwR36.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\dewwga9gihgp7bgkwr36.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0047.328] GetFileType (hFile=0x448) returned 0x1 [0047.329] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0047.329] GetFileType (hFile=0x448) returned 0x1 [0047.329] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x473 [0047.329] ReadFile (in: hFile=0x448, lpBuffer=0x232f020, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x232f020*, lpNumberOfBytesRead=0x3be868*=0x473, lpOverlapped=0x0) returned 1 [0047.329] CloseHandle (hObject=0x448) returned 1 [0047.368] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\dEwwga9gIHgP7bGKwR36.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\dEwwga9gIHgP7bGKwR36.lnk", lpFilePart=0x0) returned 0x57 [0047.368] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0047.368] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\dEwwga9gIHgP7bGKwR36.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\dewwga9gihgp7bgkwr36.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0047.369] GetFileType (hFile=0x448) returned 0x1 [0047.369] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0047.369] GetFileType (hFile=0x448) returned 0x1 [0047.369] WriteFile (in: hFile=0x448, lpBuffer=0x21abcd0*, nNumberOfBytesToWrite=0x480, lpNumberOfBytesWritten=0x3be778, lpOverlapped=0x0 | out: lpBuffer=0x21abcd0*, lpNumberOfBytesWritten=0x3be778*=0x480, lpOverlapped=0x0) returned 1 [0047.370] CloseHandle (hObject=0x448) returned 1 [0047.371] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\dEwwga9gIHgP7bGKwR36.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\dEwwga9gIHgP7bGKwR36.lnk", lpFilePart=0x0) returned 0x57 [0047.371] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\dEwwga9gIHgP7bGKwR36.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\dEwwga9gIHgP7bGKwR36.lnk.xuy", lpFilePart=0x0) returned 0x5b [0047.371] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0047.371] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\dEwwga9gIHgP7bGKwR36.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\dewwga9gihgp7bgkwr36.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3a15c25, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf3a15c25, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0x814cf44, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x480)) returned 1 [0047.371] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0047.371] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\dEwwga9gIHgP7bGKwR36.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\dewwga9gihgp7bgkwr36.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\dEwwga9gIHgP7bGKwR36.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\dewwga9gihgp7bgkwr36.lnk.xuy")) returned 1 [0047.372] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Dt9dhKb.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Dt9dhKb.lnk", lpFilePart=0x0) returned 0x4a [0047.372] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0047.372] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Dt9dhKb.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\dt9dhkb.lnk"), fInfoLevelId=0x0, lpFileInformation=0x21acf98 | out: lpFileInformation=0x21acf98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5429864, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf5429864, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0xf5429864, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x3d7)) returned 1 [0047.372] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0047.372] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Dt9dhKb.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Dt9dhKb.lnk", lpFilePart=0x0) returned 0x4a [0047.372] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0047.372] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Dt9dhKb.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\dt9dhkb.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0047.372] GetFileType (hFile=0x448) returned 0x1 [0047.372] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0047.372] GetFileType (hFile=0x448) returned 0x1 [0047.372] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x3d7 [0047.372] ReadFile (in: hFile=0x448, lpBuffer=0x21ad618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x21ad618*, lpNumberOfBytesRead=0x3be868*=0x3d7, lpOverlapped=0x0) returned 1 [0047.372] CloseHandle (hObject=0x448) returned 1 [0047.405] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Dt9dhKb.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Dt9dhKb.lnk", lpFilePart=0x0) returned 0x4a [0047.405] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0047.405] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Dt9dhKb.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\dt9dhkb.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0047.406] GetFileType (hFile=0x448) returned 0x1 [0047.406] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0047.406] GetFileType (hFile=0x448) returned 0x1 [0047.406] WriteFile (in: hFile=0x448, lpBuffer=0x2225958*, nNumberOfBytesToWrite=0x3e0, lpNumberOfBytesWritten=0x3be778, lpOverlapped=0x0 | out: lpBuffer=0x2225958*, lpNumberOfBytesWritten=0x3be778*=0x3e0, lpOverlapped=0x0) returned 1 [0047.423] CloseHandle (hObject=0x448) returned 1 [0047.424] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Dt9dhKb.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Dt9dhKb.lnk", lpFilePart=0x0) returned 0x4a [0047.424] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Dt9dhKb.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Dt9dhKb.lnk.xuy", lpFilePart=0x0) returned 0x4e [0047.424] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0047.424] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Dt9dhKb.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\dt9dhkb.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5429864, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf5429864, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0x81e56a1, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x3e0)) returned 1 [0047.424] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0047.424] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Dt9dhKb.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\dt9dhkb.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Dt9dhKb.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\dt9dhkb.lnk.xuy")) returned 1 [0047.425] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\e6huRO7 BfdOE JzK.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\e6huRO7 BfdOE JzK.lnk", lpFilePart=0x0) returned 0x54 [0047.425] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0047.425] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\e6huRO7 BfdOE JzK.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\e6huro7 bfdoe jzk.lnk"), fInfoLevelId=0x0, lpFileInformation=0x2226bd8 | out: lpFileInformation=0x2226bd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5d405e6, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf5d405e6, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0xf5d66772, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x472)) returned 1 [0047.425] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0047.425] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\e6huRO7 BfdOE JzK.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\e6huRO7 BfdOE JzK.lnk", lpFilePart=0x0) returned 0x54 [0047.425] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0047.425] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\e6huRO7 BfdOE JzK.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\e6huro7 bfdoe jzk.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0047.425] GetFileType (hFile=0x448) returned 0x1 [0047.425] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0047.425] GetFileType (hFile=0x448) returned 0x1 [0047.425] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x472 [0047.425] ReadFile (in: hFile=0x448, lpBuffer=0x2227358, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x2227358*, lpNumberOfBytesRead=0x3be868*=0x472, lpOverlapped=0x0) returned 1 [0047.425] CloseHandle (hObject=0x448) returned 1 [0047.435] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\e6huRO7 BfdOE JzK.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\e6huRO7 BfdOE JzK.lnk", lpFilePart=0x0) returned 0x54 [0047.435] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0047.435] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\e6huRO7 BfdOE JzK.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\e6huro7 bfdoe jzk.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0047.436] GetFileType (hFile=0x448) returned 0x1 [0047.436] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0047.436] GetFileType (hFile=0x448) returned 0x1 [0047.436] WriteFile (in: hFile=0x448, lpBuffer=0x229f9e8*, nNumberOfBytesToWrite=0x480, lpNumberOfBytesWritten=0x3be778, lpOverlapped=0x0 | out: lpBuffer=0x229f9e8*, lpNumberOfBytesWritten=0x3be778*=0x480, lpOverlapped=0x0) returned 1 [0047.437] CloseHandle (hObject=0x448) returned 1 [0047.438] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\e6huRO7 BfdOE JzK.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\e6huRO7 BfdOE JzK.lnk", lpFilePart=0x0) returned 0x54 [0047.438] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\e6huRO7 BfdOE JzK.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\e6huRO7 BfdOE JzK.lnk.xuy", lpFilePart=0x0) returned 0x58 [0047.438] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0047.438] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\e6huRO7 BfdOE JzK.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\e6huro7 bfdoe jzk.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5d405e6, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf5d405e6, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0x81e56a1, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x480)) returned 1 [0047.438] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0047.438] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\e6huRO7 BfdOE JzK.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\e6huro7 bfdoe jzk.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\e6huRO7 BfdOE JzK.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\e6huro7 bfdoe jzk.lnk.xuy")) returned 1 [0047.439] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\E6zmnTMjp.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\E6zmnTMjp.lnk", lpFilePart=0x0) returned 0x4c [0047.439] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0047.439] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\E6zmnTMjp.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\e6zmntmjp.lnk"), fInfoLevelId=0x0, lpFileInformation=0x22a0cb0 | out: lpFileInformation=0x22a0cb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf60d3e87, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf60d3e87, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0xf60d3e87, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x295)) returned 1 [0047.439] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0047.439] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\E6zmnTMjp.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\E6zmnTMjp.lnk", lpFilePart=0x0) returned 0x4c [0047.439] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0047.439] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\E6zmnTMjp.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\e6zmntmjp.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0047.439] GetFileType (hFile=0x448) returned 0x1 [0047.439] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0047.439] GetFileType (hFile=0x448) returned 0x1 [0047.439] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x295 [0047.439] ReadFile (in: hFile=0x448, lpBuffer=0x22a1210, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x22a1210*, lpNumberOfBytesRead=0x3be868*=0x295, lpOverlapped=0x0) returned 1 [0047.439] CloseHandle (hObject=0x448) returned 1 [0047.449] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\E6zmnTMjp.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\E6zmnTMjp.lnk", lpFilePart=0x0) returned 0x4c [0047.449] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0047.449] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\E6zmnTMjp.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\e6zmntmjp.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0047.450] GetFileType (hFile=0x448) returned 0x1 [0047.450] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0047.450] GetFileType (hFile=0x448) returned 0x1 [0047.450] WriteFile (in: hFile=0x448, lpBuffer=0x2318f20*, nNumberOfBytesToWrite=0x2a0, lpNumberOfBytesWritten=0x3be778, lpOverlapped=0x0 | out: lpBuffer=0x2318f20*, lpNumberOfBytesWritten=0x3be778*=0x2a0, lpOverlapped=0x0) returned 1 [0047.451] CloseHandle (hObject=0x448) returned 1 [0047.452] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\E6zmnTMjp.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\E6zmnTMjp.lnk", lpFilePart=0x0) returned 0x4c [0047.452] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\E6zmnTMjp.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\E6zmnTMjp.lnk.xuy", lpFilePart=0x0) returned 0x50 [0047.452] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0047.452] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\E6zmnTMjp.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\e6zmntmjp.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf60d3e87, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf60d3e87, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0x820b909, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2a0)) returned 1 [0047.452] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0047.452] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\E6zmnTMjp.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\e6zmntmjp.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\E6zmnTMjp.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\e6zmntmjp.lnk.xuy")) returned 1 [0047.452] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\EH77pChgN.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\EH77pChgN.lnk", lpFilePart=0x0) returned 0x4c [0047.452] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0047.452] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\EH77pChgN.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\eh77pchgn.lnk"), fInfoLevelId=0x0, lpFileInformation=0x231a1b8 | out: lpFileInformation=0x231a1b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4247f4d, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf4247f4d, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0xf4247f4d, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x556)) returned 1 [0047.452] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0047.453] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\EH77pChgN.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\EH77pChgN.lnk", lpFilePart=0x0) returned 0x4c [0047.453] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0047.453] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\EH77pChgN.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\eh77pchgn.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0047.453] GetFileType (hFile=0x448) returned 0x1 [0047.453] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0047.453] GetFileType (hFile=0x448) returned 0x1 [0047.453] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x556 [0047.453] ReadFile (in: hFile=0x448, lpBuffer=0x231a9d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x231a9d8*, lpNumberOfBytesRead=0x3be868*=0x556, lpOverlapped=0x0) returned 1 [0047.453] CloseHandle (hObject=0x448) returned 1 [0047.492] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\EH77pChgN.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\EH77pChgN.lnk", lpFilePart=0x0) returned 0x4c [0047.492] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0047.492] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\EH77pChgN.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\eh77pchgn.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0047.493] GetFileType (hFile=0x448) returned 0x1 [0047.494] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0047.494] GetFileType (hFile=0x448) returned 0x1 [0047.494] WriteFile (in: hFile=0x448, lpBuffer=0x2194900*, nNumberOfBytesToWrite=0x560, lpNumberOfBytesWritten=0x3be778, lpOverlapped=0x0 | out: lpBuffer=0x2194900*, lpNumberOfBytesWritten=0x3be778*=0x560, lpOverlapped=0x0) returned 1 [0047.494] CloseHandle (hObject=0x448) returned 1 [0047.495] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\EH77pChgN.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\EH77pChgN.lnk", lpFilePart=0x0) returned 0x4c [0047.495] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\EH77pChgN.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\EH77pChgN.lnk.xuy", lpFilePart=0x0) returned 0x50 [0047.495] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0047.495] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\EH77pChgN.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\eh77pchgn.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4247f4d, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf4247f4d, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0x827e06e, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x560)) returned 1 [0047.495] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0047.495] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\EH77pChgN.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\eh77pchgn.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\EH77pChgN.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\eh77pchgn.lnk.xuy")) returned 1 [0047.496] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Enw1.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Enw1.lnk", lpFilePart=0x0) returned 0x47 [0047.496] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0047.496] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Enw1.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\enw1.lnk"), fInfoLevelId=0x0, lpFileInformation=0x2195b98 | out: lpFileInformation=0x2195b98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3df5883, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf3df5883, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0xf3df5883, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x278)) returned 1 [0047.496] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0047.496] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Enw1.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Enw1.lnk", lpFilePart=0x0) returned 0x47 [0047.496] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0047.496] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Enw1.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\enw1.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0047.496] GetFileType (hFile=0x448) returned 0x1 [0047.496] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0047.496] GetFileType (hFile=0x448) returned 0x1 [0047.496] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x278 [0047.496] ReadFile (in: hFile=0x448, lpBuffer=0x21960a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x21960a8*, lpNumberOfBytesRead=0x3be868*=0x278, lpOverlapped=0x0) returned 1 [0047.496] CloseHandle (hObject=0x448) returned 1 [0047.518] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Enw1.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Enw1.lnk", lpFilePart=0x0) returned 0x47 [0047.518] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0047.518] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Enw1.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\enw1.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0047.519] GetFileType (hFile=0x448) returned 0x1 [0047.519] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0047.519] GetFileType (hFile=0x448) returned 0x1 [0047.519] WriteFile (in: hFile=0x448, lpBuffer=0x220dcf8*, nNumberOfBytesToWrite=0x280, lpNumberOfBytesWritten=0x3be778, lpOverlapped=0x0 | out: lpBuffer=0x220dcf8*, lpNumberOfBytesWritten=0x3be778*=0x280, lpOverlapped=0x0) returned 1 [0047.520] CloseHandle (hObject=0x448) returned 1 [0047.521] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Enw1.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Enw1.lnk", lpFilePart=0x0) returned 0x47 [0047.521] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Enw1.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Enw1.lnk.xuy", lpFilePart=0x0) returned 0x4b [0047.521] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0047.521] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Enw1.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\enw1.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3df5883, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf3df5883, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0x82ca89f, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x280)) returned 1 [0047.521] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0047.521] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Enw1.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\enw1.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Enw1.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\enw1.lnk.xuy")) returned 1 [0047.523] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\e_d9d.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\e_d9d.lnk", lpFilePart=0x0) returned 0x48 [0047.523] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0047.523] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\e_d9d.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\e_d9d.lnk"), fInfoLevelId=0x0, lpFileInformation=0x220ef60 | out: lpFileInformation=0x220ef60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3b20c75, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf3b20c75, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0xf3b20c75, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x432)) returned 1 [0047.523] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0047.523] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\e_d9d.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\e_d9d.lnk", lpFilePart=0x0) returned 0x48 [0047.523] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0047.523] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\e_d9d.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\e_d9d.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0047.523] GetFileType (hFile=0x448) returned 0x1 [0047.523] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0047.523] GetFileType (hFile=0x448) returned 0x1 [0047.523] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x432 [0047.523] ReadFile (in: hFile=0x448, lpBuffer=0x220f640, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x220f640*, lpNumberOfBytesRead=0x3be868*=0x432, lpOverlapped=0x0) returned 1 [0047.523] CloseHandle (hObject=0x448) returned 1 [0047.534] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\e_d9d.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\e_d9d.lnk", lpFilePart=0x0) returned 0x48 [0047.534] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0047.534] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\e_d9d.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\e_d9d.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0047.535] GetFileType (hFile=0x448) returned 0x1 [0047.535] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0047.535] GetFileType (hFile=0x448) returned 0x1 [0047.535] WriteFile (in: hFile=0x448, lpBuffer=0x2287b60*, nNumberOfBytesToWrite=0x440, lpNumberOfBytesWritten=0x3be778, lpOverlapped=0x0 | out: lpBuffer=0x2287b60*, lpNumberOfBytesWritten=0x3be778*=0x440, lpOverlapped=0x0) returned 1 [0047.535] CloseHandle (hObject=0x448) returned 1 [0047.536] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\e_d9d.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\e_d9d.lnk", lpFilePart=0x0) returned 0x48 [0047.536] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\e_d9d.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\e_d9d.lnk.xuy", lpFilePart=0x0) returned 0x4c [0047.536] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0047.536] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\e_d9d.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\e_d9d.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3b20c75, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf3b20c75, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0x82f097d, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x440)) returned 1 [0047.536] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0047.536] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\e_d9d.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\e_d9d.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\e_d9d.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\e_d9d.lnk.xuy")) returned 1 [0047.537] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\F925j.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\F925j.lnk", lpFilePart=0x0) returned 0x48 [0047.537] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0047.537] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\F925j.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\f925j.lnk"), fInfoLevelId=0x0, lpFileInformation=0x2288de0 | out: lpFileInformation=0x2288de0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf445de8d, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf445de8d, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0xf445de8d, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x5a7)) returned 1 [0047.537] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0047.537] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\F925j.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\F925j.lnk", lpFilePart=0x0) returned 0x48 [0047.537] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0047.537] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\F925j.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\f925j.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0047.537] GetFileType (hFile=0x448) returned 0x1 [0047.537] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0047.537] GetFileType (hFile=0x448) returned 0x1 [0047.537] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x5a7 [0047.537] ReadFile (in: hFile=0x448, lpBuffer=0x2289630, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x2289630*, lpNumberOfBytesRead=0x3be868*=0x5a7, lpOverlapped=0x0) returned 1 [0047.538] CloseHandle (hObject=0x448) returned 1 [0047.548] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\F925j.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\F925j.lnk", lpFilePart=0x0) returned 0x48 [0047.548] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0047.548] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\F925j.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\f925j.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0047.549] GetFileType (hFile=0x448) returned 0x1 [0047.549] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0047.549] GetFileType (hFile=0x448) returned 0x1 [0047.549] WriteFile (in: hFile=0x448, lpBuffer=0x2302280*, nNumberOfBytesToWrite=0x5b0, lpNumberOfBytesWritten=0x3be778, lpOverlapped=0x0 | out: lpBuffer=0x2302280*, lpNumberOfBytesWritten=0x3be778*=0x5b0, lpOverlapped=0x0) returned 1 [0047.550] CloseHandle (hObject=0x448) returned 1 [0047.551] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\F925j.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\F925j.lnk", lpFilePart=0x0) returned 0x48 [0047.551] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\F925j.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\F925j.lnk.xuy", lpFilePart=0x0) returned 0x4c [0047.551] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0047.551] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\F925j.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\f925j.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf445de8d, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf445de8d, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0x8316b2a, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x5b0)) returned 1 [0047.551] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0047.551] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\F925j.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\f925j.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\F925j.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\f925j.lnk.xuy")) returned 1 [0047.552] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\fBwW7 r5N (2).lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\fBwW7 r5N (2).lnk", lpFilePart=0x0) returned 0x50 [0047.552] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0047.552] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\fBwW7 r5N (2).lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\fbww7 r5n (2).lnk"), fInfoLevelId=0x0, lpFileInformation=0x2303500 | out: lpFileInformation=0x2303500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3b20c75, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf5e25406, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0xf5e25406, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x36c)) returned 1 [0047.552] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0047.552] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\fBwW7 r5N (2).lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\fBwW7 r5N (2).lnk", lpFilePart=0x0) returned 0x50 [0047.552] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0047.552] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\fBwW7 r5N (2).lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\fbww7 r5n (2).lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0047.552] GetFileType (hFile=0x448) returned 0x1 [0047.552] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0047.552] GetFileType (hFile=0x448) returned 0x1 [0047.552] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x36c [0047.552] ReadFile (in: hFile=0x448, lpBuffer=0x2303b58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x2303b58*, lpNumberOfBytesRead=0x3be868*=0x36c, lpOverlapped=0x0) returned 1 [0047.552] CloseHandle (hObject=0x448) returned 1 [0047.592] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\fBwW7 r5N (2).lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\fBwW7 r5N (2).lnk", lpFilePart=0x0) returned 0x50 [0047.592] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0047.592] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\fBwW7 r5N (2).lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\fbww7 r5n (2).lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0047.593] GetFileType (hFile=0x448) returned 0x1 [0047.593] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0047.593] GetFileType (hFile=0x448) returned 0x1 [0047.593] WriteFile (in: hFile=0x448, lpBuffer=0x217d0c8*, nNumberOfBytesToWrite=0x370, lpNumberOfBytesWritten=0x3be778, lpOverlapped=0x0 | out: lpBuffer=0x217d0c8*, lpNumberOfBytesWritten=0x3be778*=0x370, lpOverlapped=0x0) returned 1 [0047.594] CloseHandle (hObject=0x448) returned 1 [0047.594] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\fBwW7 r5N (2).lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\fBwW7 r5N (2).lnk", lpFilePart=0x0) returned 0x50 [0047.594] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\fBwW7 r5N (2).lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\fBwW7 r5N (2).lnk.xuy", lpFilePart=0x0) returned 0x54 [0047.594] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0047.594] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\fBwW7 r5N (2).lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\fbww7 r5n (2).lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3b20c75, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf5e25406, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0x8362f0e, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x370)) returned 1 [0047.595] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0047.595] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\fBwW7 r5N (2).lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\fbww7 r5n (2).lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\fBwW7 r5N (2).lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\fbww7 r5n (2).lnk.xuy")) returned 1 [0047.596] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\fBwW7 r5N.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\fBwW7 r5N.lnk", lpFilePart=0x0) returned 0x4c [0047.596] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0047.596] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\fBwW7 r5N.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\fbww7 r5n.lnk"), fInfoLevelId=0x0, lpFileInformation=0x217e378 | out: lpFileInformation=0x217e378*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf27eb60d, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf2a73ea8, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0xf2a73ea8, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x36c)) returned 1 [0047.596] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0047.596] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\fBwW7 r5N.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\fBwW7 r5N.lnk", lpFilePart=0x0) returned 0x4c [0047.596] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0047.596] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\fBwW7 r5N.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\fbww7 r5n.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0047.596] GetFileType (hFile=0x448) returned 0x1 [0047.596] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0047.596] GetFileType (hFile=0x448) returned 0x1 [0047.596] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x36c [0047.596] ReadFile (in: hFile=0x448, lpBuffer=0x217e9b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x217e9b0*, lpNumberOfBytesRead=0x3be868*=0x36c, lpOverlapped=0x0) returned 1 [0047.596] CloseHandle (hObject=0x448) returned 1 [0047.606] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\fBwW7 r5N.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\fBwW7 r5N.lnk", lpFilePart=0x0) returned 0x4c [0047.606] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0047.606] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\fBwW7 r5N.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\fbww7 r5n.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0047.607] GetFileType (hFile=0x448) returned 0x1 [0047.607] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0047.607] GetFileType (hFile=0x448) returned 0x1 [0047.607] WriteFile (in: hFile=0x448, lpBuffer=0x21f6ac8*, nNumberOfBytesToWrite=0x370, lpNumberOfBytesWritten=0x3be778, lpOverlapped=0x0 | out: lpBuffer=0x21f6ac8*, lpNumberOfBytesWritten=0x3be778*=0x370, lpOverlapped=0x0) returned 1 [0047.608] CloseHandle (hObject=0x448) returned 1 [0047.608] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\fBwW7 r5N.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\fBwW7 r5N.lnk", lpFilePart=0x0) returned 0x4c [0047.608] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\fBwW7 r5N.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\fBwW7 r5N.lnk.xuy", lpFilePart=0x0) returned 0x50 [0047.608] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0047.608] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\fBwW7 r5N.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\fbww7 r5n.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf27eb60d, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf2a73ea8, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0x83890b5, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x370)) returned 1 [0047.608] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0047.609] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\fBwW7 r5N.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\fbww7 r5n.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\fBwW7 r5N.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\fbww7 r5n.lnk.xuy")) returned 1 [0047.609] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Fe7T5WvwX3mnv_7K.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Fe7T5WvwX3mnv_7K.lnk", lpFilePart=0x0) returned 0x53 [0047.609] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0047.609] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Fe7T5WvwX3mnv_7K.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\fe7t5wvwx3mnv_7k.lnk"), fInfoLevelId=0x0, lpFileInformation=0x21f7d60 | out: lpFileInformation=0x21f7d60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf469a0e5, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf469a0e5, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0xf469a0e5, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x2b8)) returned 1 [0047.609] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0047.609] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Fe7T5WvwX3mnv_7K.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Fe7T5WvwX3mnv_7K.lnk", lpFilePart=0x0) returned 0x53 [0047.609] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0047.609] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Fe7T5WvwX3mnv_7K.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\fe7t5wvwx3mnv_7k.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0047.610] GetFileType (hFile=0x448) returned 0x1 [0047.610] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0047.610] GetFileType (hFile=0x448) returned 0x1 [0047.610] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x2b8 [0047.610] ReadFile (in: hFile=0x448, lpBuffer=0x21f8310, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x21f8310*, lpNumberOfBytesRead=0x3be868*=0x2b8, lpOverlapped=0x0) returned 1 [0047.610] CloseHandle (hObject=0x448) returned 1 [0047.620] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Fe7T5WvwX3mnv_7K.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Fe7T5WvwX3mnv_7K.lnk", lpFilePart=0x0) returned 0x53 [0047.620] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0047.620] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Fe7T5WvwX3mnv_7K.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\fe7t5wvwx3mnv_7k.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0047.621] GetFileType (hFile=0x448) returned 0x1 [0047.621] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0047.621] GetFileType (hFile=0x448) returned 0x1 [0047.621] WriteFile (in: hFile=0x448, lpBuffer=0x22700d0*, nNumberOfBytesToWrite=0x2c0, lpNumberOfBytesWritten=0x3be778, lpOverlapped=0x0 | out: lpBuffer=0x22700d0*, lpNumberOfBytesWritten=0x3be778*=0x2c0, lpOverlapped=0x0) returned 1 [0047.622] CloseHandle (hObject=0x448) returned 1 [0047.622] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Fe7T5WvwX3mnv_7K.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Fe7T5WvwX3mnv_7K.lnk", lpFilePart=0x0) returned 0x53 [0047.622] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Fe7T5WvwX3mnv_7K.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Fe7T5WvwX3mnv_7K.lnk.xuy", lpFilePart=0x0) returned 0x57 [0047.622] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0047.622] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Fe7T5WvwX3mnv_7K.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\fe7t5wvwx3mnv_7k.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf469a0e5, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf469a0e5, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0x83af3a2, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2c0)) returned 1 [0047.623] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0047.623] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Fe7T5WvwX3mnv_7K.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\fe7t5wvwx3mnv_7k.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Fe7T5WvwX3mnv_7K.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\fe7t5wvwx3mnv_7k.lnk.xuy")) returned 1 [0047.623] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Fh0-0-tlk.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Fh0-0-tlk.lnk", lpFilePart=0x0) returned 0x4c [0047.623] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0047.623] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Fh0-0-tlk.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\fh0-0-tlk.lnk"), fInfoLevelId=0x0, lpFileInformation=0x2271380 | out: lpFileInformation=0x2271380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf593a6f1, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf593a6f1, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0xf593a6f1, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x3dc)) returned 1 [0047.623] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0047.623] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Fh0-0-tlk.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Fh0-0-tlk.lnk", lpFilePart=0x0) returned 0x4c [0047.623] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0047.624] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Fh0-0-tlk.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\fh0-0-tlk.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0047.624] GetFileType (hFile=0x448) returned 0x1 [0047.624] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0047.624] GetFileType (hFile=0x448) returned 0x1 [0047.624] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x3dc [0047.624] ReadFile (in: hFile=0x448, lpBuffer=0x2271a28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x2271a28*, lpNumberOfBytesRead=0x3be868*=0x3dc, lpOverlapped=0x0) returned 1 [0047.624] CloseHandle (hObject=0x448) returned 1 [0047.634] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Fh0-0-tlk.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Fh0-0-tlk.lnk", lpFilePart=0x0) returned 0x4c [0047.634] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0047.634] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Fh0-0-tlk.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\fh0-0-tlk.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0047.635] GetFileType (hFile=0x448) returned 0x1 [0047.635] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0047.635] GetFileType (hFile=0x448) returned 0x1 [0047.635] WriteFile (in: hFile=0x448, lpBuffer=0x22e9d70*, nNumberOfBytesToWrite=0x3e0, lpNumberOfBytesWritten=0x3be778, lpOverlapped=0x0 | out: lpBuffer=0x22e9d70*, lpNumberOfBytesWritten=0x3be778*=0x3e0, lpOverlapped=0x0) returned 1 [0047.636] CloseHandle (hObject=0x448) returned 1 [0047.637] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Fh0-0-tlk.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Fh0-0-tlk.lnk", lpFilePart=0x0) returned 0x4c [0047.637] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Fh0-0-tlk.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Fh0-0-tlk.lnk.xuy", lpFilePart=0x0) returned 0x50 [0047.637] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0047.637] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Fh0-0-tlk.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\fh0-0-tlk.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf593a6f1, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf593a6f1, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0x83d6143, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x3e0)) returned 1 [0047.637] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0047.637] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Fh0-0-tlk.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\fh0-0-tlk.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Fh0-0-tlk.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\fh0-0-tlk.lnk.xuy")) returned 1 [0047.638] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\FMnZT7MP3TB0L3.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\FMnZT7MP3TB0L3.lnk", lpFilePart=0x0) returned 0x51 [0047.638] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0047.638] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\FMnZT7MP3TB0L3.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\fmnzt7mp3tb0l3.lnk"), fInfoLevelId=0x0, lpFileInformation=0x22eb008 | out: lpFileInformation=0x22eb008*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf614659a, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf614659a, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0xf614659a, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x40f)) returned 1 [0047.638] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0047.638] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\FMnZT7MP3TB0L3.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\FMnZT7MP3TB0L3.lnk", lpFilePart=0x0) returned 0x51 [0047.638] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0047.638] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\FMnZT7MP3TB0L3.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\fmnzt7mp3tb0l3.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0047.638] GetFileType (hFile=0x448) returned 0x1 [0047.638] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0047.638] GetFileType (hFile=0x448) returned 0x1 [0047.638] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x40f [0047.638] ReadFile (in: hFile=0x448, lpBuffer=0x22eb700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x22eb700*, lpNumberOfBytesRead=0x3be868*=0x40f, lpOverlapped=0x0) returned 1 [0047.638] CloseHandle (hObject=0x448) returned 1 [0047.678] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\FMnZT7MP3TB0L3.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\FMnZT7MP3TB0L3.lnk", lpFilePart=0x0) returned 0x51 [0047.678] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0047.678] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\FMnZT7MP3TB0L3.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\fmnzt7mp3tb0l3.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0047.679] GetFileType (hFile=0x448) returned 0x1 [0047.679] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0047.679] GetFileType (hFile=0x448) returned 0x1 [0047.679] WriteFile (in: hFile=0x448, lpBuffer=0x2164c78*, nNumberOfBytesToWrite=0x410, lpNumberOfBytesWritten=0x3be778, lpOverlapped=0x0 | out: lpBuffer=0x2164c78*, lpNumberOfBytesWritten=0x3be778*=0x410, lpOverlapped=0x0) returned 1 [0047.680] CloseHandle (hObject=0x448) returned 1 [0047.681] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\FMnZT7MP3TB0L3.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\FMnZT7MP3TB0L3.lnk", lpFilePart=0x0) returned 0x51 [0047.681] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\FMnZT7MP3TB0L3.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\FMnZT7MP3TB0L3.lnk.xuy", lpFilePart=0x0) returned 0x55 [0047.681] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0047.681] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\FMnZT7MP3TB0L3.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\fmnzt7mp3tb0l3.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf614659a, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf614659a, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0x8447d70, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x410)) returned 1 [0047.681] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0047.681] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\FMnZT7MP3TB0L3.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\fmnzt7mp3tb0l3.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\FMnZT7MP3TB0L3.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\fmnzt7mp3tb0l3.lnk.xuy")) returned 1 [0047.682] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\fwMACd.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\fwMACd.lnk", lpFilePart=0x0) returned 0x49 [0047.682] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0047.682] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\fwMACd.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\fwmacd.lnk"), fInfoLevelId=0x0, lpFileInformation=0x2165f28 | out: lpFileInformation=0x2165f28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4ea60fc, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf4ea60fc, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0xf4ea60fc, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x550)) returned 1 [0047.682] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0047.682] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\fwMACd.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\fwMACd.lnk", lpFilePart=0x0) returned 0x49 [0047.682] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0047.682] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\fwMACd.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\fwmacd.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0047.682] GetFileType (hFile=0x448) returned 0x1 [0047.682] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0047.682] GetFileType (hFile=0x448) returned 0x1 [0047.682] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x550 [0047.682] ReadFile (in: hFile=0x448, lpBuffer=0x2166720, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x2166720*, lpNumberOfBytesRead=0x3be868*=0x550, lpOverlapped=0x0) returned 1 [0047.682] CloseHandle (hObject=0x448) returned 1 [0047.697] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\fwMACd.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\fwMACd.lnk", lpFilePart=0x0) returned 0x49 [0047.697] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0047.697] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\fwMACd.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\fwmacd.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0047.698] GetFileType (hFile=0x448) returned 0x1 [0047.698] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0047.698] GetFileType (hFile=0x448) returned 0x1 [0047.698] WriteFile (in: hFile=0x448, lpBuffer=0x21df1e0*, nNumberOfBytesToWrite=0x560, lpNumberOfBytesWritten=0x3be778, lpOverlapped=0x0 | out: lpBuffer=0x21df1e0*, lpNumberOfBytesWritten=0x3be778*=0x560, lpOverlapped=0x0) returned 1 [0047.699] CloseHandle (hObject=0x448) returned 1 [0047.699] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\fwMACd.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\fwMACd.lnk", lpFilePart=0x0) returned 0x49 [0047.699] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\fwMACd.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\fwMACd.lnk.xuy", lpFilePart=0x0) returned 0x4d [0047.699] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0047.699] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\fwMACd.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\fwmacd.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4ea60fc, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf4ea60fc, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0x846e052, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x560)) returned 1 [0047.700] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0047.700] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\fwMACd.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\fwmacd.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\fwMACd.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\fwmacd.lnk.xuy")) returned 1 [0047.700] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\G--uCJBQv6-u-.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\G--uCJBQv6-u-.lnk", lpFilePart=0x0) returned 0x50 [0047.700] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0047.700] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\G--uCJBQv6-u-.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\g--ucjbqv6-u-.lnk"), fInfoLevelId=0x0, lpFileInformation=0x21e0460 | out: lpFileInformation=0x21e0460*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf506fd96, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf62515f5, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0xf62515f5, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x43f)) returned 1 [0047.700] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0047.700] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\G--uCJBQv6-u-.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\G--uCJBQv6-u-.lnk", lpFilePart=0x0) returned 0x50 [0047.700] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0047.701] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\G--uCJBQv6-u-.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\g--ucjbqv6-u-.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0047.701] GetFileType (hFile=0x448) returned 0x1 [0047.701] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0047.701] GetFileType (hFile=0x448) returned 0x1 [0047.701] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x43f [0047.701] ReadFile (in: hFile=0x448, lpBuffer=0x21e0b88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x21e0b88*, lpNumberOfBytesRead=0x3be868*=0x43f, lpOverlapped=0x0) returned 1 [0047.701] CloseHandle (hObject=0x448) returned 1 [0047.711] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\G--uCJBQv6-u-.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\G--uCJBQv6-u-.lnk", lpFilePart=0x0) returned 0x50 [0047.711] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0047.711] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\G--uCJBQv6-u-.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\g--ucjbqv6-u-.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0047.712] GetFileType (hFile=0x448) returned 0x1 [0047.712] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0047.712] GetFileType (hFile=0x448) returned 0x1 [0047.712] WriteFile (in: hFile=0x448, lpBuffer=0x22590c0*, nNumberOfBytesToWrite=0x440, lpNumberOfBytesWritten=0x3be778, lpOverlapped=0x0 | out: lpBuffer=0x22590c0*, lpNumberOfBytesWritten=0x3be778*=0x440, lpOverlapped=0x0) returned 1 [0047.713] CloseHandle (hObject=0x448) returned 1 [0047.713] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\G--uCJBQv6-u-.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\G--uCJBQv6-u-.lnk", lpFilePart=0x0) returned 0x50 [0047.713] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\G--uCJBQv6-u-.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\G--uCJBQv6-u-.lnk.xuy", lpFilePart=0x0) returned 0x54 [0047.713] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0047.714] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\G--uCJBQv6-u-.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\g--ucjbqv6-u-.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf506fd96, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf62515f5, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0x84941f8, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x440)) returned 1 [0047.714] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0047.714] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\G--uCJBQv6-u-.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\g--ucjbqv6-u-.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\G--uCJBQv6-u-.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\g--ucjbqv6-u-.lnk.xuy")) returned 1 [0047.714] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\g5O83QgO-v7.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\g5O83QgO-v7.lnk", lpFilePart=0x0) returned 0x4e [0047.714] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0047.714] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\g5O83QgO-v7.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\g5o83qgo-v7.lnk"), fInfoLevelId=0x0, lpFileInformation=0x225a370 | out: lpFileInformation=0x225a370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3b6d0d6, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf3b6d0d6, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0xf3b6d0d6, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x5c7)) returned 1 [0047.714] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0047.714] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\g5O83QgO-v7.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\g5O83QgO-v7.lnk", lpFilePart=0x0) returned 0x4e [0047.714] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0047.715] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\g5O83QgO-v7.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\g5o83qgo-v7.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0047.715] GetFileType (hFile=0x448) returned 0x1 [0047.715] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0047.715] GetFileType (hFile=0x448) returned 0x1 [0047.715] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x5c7 [0047.715] ReadFile (in: hFile=0x448, lpBuffer=0x225ac00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x225ac00*, lpNumberOfBytesRead=0x3be868*=0x5c7, lpOverlapped=0x0) returned 1 [0047.715] CloseHandle (hObject=0x448) returned 1 [0047.725] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\g5O83QgO-v7.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\g5O83QgO-v7.lnk", lpFilePart=0x0) returned 0x4e [0047.725] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0047.725] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\g5O83QgO-v7.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\g5o83qgo-v7.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0047.726] GetFileType (hFile=0x448) returned 0x1 [0047.726] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0047.726] GetFileType (hFile=0x448) returned 0x1 [0047.726] WriteFile (in: hFile=0x448, lpBuffer=0x22d3900*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x3be778, lpOverlapped=0x0 | out: lpBuffer=0x22d3900*, lpNumberOfBytesWritten=0x3be778*=0x5d0, lpOverlapped=0x0) returned 1 [0047.727] CloseHandle (hObject=0x448) returned 1 [0047.728] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\g5O83QgO-v7.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\g5O83QgO-v7.lnk", lpFilePart=0x0) returned 0x4e [0047.728] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\g5O83QgO-v7.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\g5O83QgO-v7.lnk.xuy", lpFilePart=0x0) returned 0x52 [0047.728] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0047.728] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\g5O83QgO-v7.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\g5o83qgo-v7.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3b6d0d6, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf3b6d0d6, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0x84ba83c, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x5d0)) returned 1 [0047.728] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0047.728] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\g5O83QgO-v7.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\g5o83qgo-v7.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\g5O83QgO-v7.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\g5o83qgo-v7.lnk.xuy")) returned 1 [0047.729] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Gat4ii3taiw.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Gat4ii3taiw.lnk", lpFilePart=0x0) returned 0x4e [0047.729] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0047.729] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Gat4ii3taiw.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\gat4ii3taiw.lnk"), fInfoLevelId=0x0, lpFileInformation=0x22d4b98 | out: lpFileInformation=0x22d4b98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5c5b7fc, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf5c5b7fc, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0xf5c5b7fc, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x3eb)) returned 1 [0047.729] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0047.729] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Gat4ii3taiw.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Gat4ii3taiw.lnk", lpFilePart=0x0) returned 0x4e [0047.729] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0047.729] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Gat4ii3taiw.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\gat4ii3taiw.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0047.729] GetFileType (hFile=0x448) returned 0x1 [0047.729] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0047.729] GetFileType (hFile=0x448) returned 0x1 [0047.729] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x3eb [0047.729] ReadFile (in: hFile=0x448, lpBuffer=0x22d5250, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x22d5250*, lpNumberOfBytesRead=0x3be868*=0x3eb, lpOverlapped=0x0) returned 1 [0047.729] CloseHandle (hObject=0x448) returned 1 [0047.767] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Gat4ii3taiw.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Gat4ii3taiw.lnk", lpFilePart=0x0) returned 0x4e [0047.767] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0047.767] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Gat4ii3taiw.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\gat4ii3taiw.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0047.768] GetFileType (hFile=0x448) returned 0x1 [0047.768] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0047.768] GetFileType (hFile=0x448) returned 0x1 [0047.768] WriteFile (in: hFile=0x448, lpBuffer=0x214e858*, nNumberOfBytesToWrite=0x3f0, lpNumberOfBytesWritten=0x3be778, lpOverlapped=0x0 | out: lpBuffer=0x214e858*, lpNumberOfBytesWritten=0x3be778*=0x3f0, lpOverlapped=0x0) returned 1 [0047.769] CloseHandle (hObject=0x448) returned 1 [0047.770] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Gat4ii3taiw.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Gat4ii3taiw.lnk", lpFilePart=0x0) returned 0x4e [0047.770] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Gat4ii3taiw.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Gat4ii3taiw.lnk.xuy", lpFilePart=0x0) returned 0x52 [0047.770] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0047.770] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Gat4ii3taiw.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\gat4ii3taiw.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5c5b7fc, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf5c5b7fc, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0x852cd37, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x3f0)) returned 1 [0047.770] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0047.770] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Gat4ii3taiw.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\gat4ii3taiw.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Gat4ii3taiw.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\gat4ii3taiw.lnk.xuy")) returned 1 [0047.771] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\gf2Xpstl-3SsWOQBl (2).lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\gf2Xpstl-3SsWOQBl (2).lnk", lpFilePart=0x0) returned 0x58 [0047.771] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0047.771] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\gf2Xpstl-3SsWOQBl (2).lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\gf2xpstl-3sswoqbl (2).lnk"), fInfoLevelId=0x0, lpFileInformation=0x214faf0 | out: lpFileInformation=0x214faf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4c6a20a, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf622b3f2, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0xf622b3f2, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x40e)) returned 1 [0047.771] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0047.771] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\gf2Xpstl-3SsWOQBl (2).lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\gf2Xpstl-3SsWOQBl (2).lnk", lpFilePart=0x0) returned 0x58 [0047.771] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0047.771] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\gf2Xpstl-3SsWOQBl (2).lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\gf2xpstl-3sswoqbl (2).lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0047.771] GetFileType (hFile=0x448) returned 0x1 [0047.771] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0047.771] GetFileType (hFile=0x448) returned 0x1 [0047.771] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x40e [0047.771] ReadFile (in: hFile=0x448, lpBuffer=0x2150228, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x2150228*, lpNumberOfBytesRead=0x3be868*=0x40e, lpOverlapped=0x0) returned 1 [0047.771] CloseHandle (hObject=0x448) returned 1 [0047.781] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\gf2Xpstl-3SsWOQBl (2).lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\gf2Xpstl-3SsWOQBl (2).lnk", lpFilePart=0x0) returned 0x58 [0047.781] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0047.781] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\gf2Xpstl-3SsWOQBl (2).lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\gf2xpstl-3sswoqbl (2).lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0047.782] GetFileType (hFile=0x448) returned 0x1 [0047.782] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0047.782] GetFileType (hFile=0x448) returned 0x1 [0047.782] WriteFile (in: hFile=0x448, lpBuffer=0x21c8690*, nNumberOfBytesToWrite=0x410, lpNumberOfBytesWritten=0x3be778, lpOverlapped=0x0 | out: lpBuffer=0x21c8690*, lpNumberOfBytesWritten=0x3be778*=0x410, lpOverlapped=0x0) returned 1 [0047.783] CloseHandle (hObject=0x448) returned 1 [0047.784] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\gf2Xpstl-3SsWOQBl (2).lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\gf2Xpstl-3SsWOQBl (2).lnk", lpFilePart=0x0) returned 0x58 [0047.784] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\gf2Xpstl-3SsWOQBl (2).lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\gf2Xpstl-3SsWOQBl (2).lnk.xuy", lpFilePart=0x0) returned 0x5c [0047.784] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0047.784] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\gf2Xpstl-3SsWOQBl (2).lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\gf2xpstl-3sswoqbl (2).lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4c6a20a, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf622b3f2, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0x8552d4a, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x410)) returned 1 [0047.784] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0047.784] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\gf2Xpstl-3SsWOQBl (2).lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\gf2xpstl-3sswoqbl (2).lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\gf2Xpstl-3SsWOQBl (2).lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\gf2xpstl-3sswoqbl (2).lnk.xuy")) returned 1 [0047.785] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\gf2Xpstl-3SsWOQBl.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\gf2Xpstl-3SsWOQBl.lnk", lpFilePart=0x0) returned 0x54 [0047.785] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0047.785] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\gf2Xpstl-3SsWOQBl.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\gf2xpstl-3sswoqbl.lnk"), fInfoLevelId=0x0, lpFileInformation=0x21c9970 | out: lpFileInformation=0x21c9970*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf29b5269, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf4031d4b, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0xf4031d4b, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x40e)) returned 1 [0047.785] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0047.785] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\gf2Xpstl-3SsWOQBl.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\gf2Xpstl-3SsWOQBl.lnk", lpFilePart=0x0) returned 0x54 [0047.785] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0047.785] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\gf2Xpstl-3SsWOQBl.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\gf2xpstl-3sswoqbl.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0047.785] GetFileType (hFile=0x448) returned 0x1 [0047.785] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0047.785] GetFileType (hFile=0x448) returned 0x1 [0047.785] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x40e [0047.785] ReadFile (in: hFile=0x448, lpBuffer=0x21ca088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x21ca088*, lpNumberOfBytesRead=0x3be868*=0x40e, lpOverlapped=0x0) returned 1 [0047.785] CloseHandle (hObject=0x448) returned 1 [0047.795] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\gf2Xpstl-3SsWOQBl.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\gf2Xpstl-3SsWOQBl.lnk", lpFilePart=0x0) returned 0x54 [0047.795] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0047.795] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\gf2Xpstl-3SsWOQBl.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\gf2xpstl-3sswoqbl.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0047.796] GetFileType (hFile=0x448) returned 0x1 [0047.796] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0047.796] GetFileType (hFile=0x448) returned 0x1 [0047.796] WriteFile (in: hFile=0x448, lpBuffer=0x22424e0*, nNumberOfBytesToWrite=0x410, lpNumberOfBytesWritten=0x3be778, lpOverlapped=0x0 | out: lpBuffer=0x22424e0*, lpNumberOfBytesWritten=0x3be778*=0x410, lpOverlapped=0x0) returned 1 [0047.797] CloseHandle (hObject=0x448) returned 1 [0047.797] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\gf2Xpstl-3SsWOQBl.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\gf2Xpstl-3SsWOQBl.lnk", lpFilePart=0x0) returned 0x54 [0047.797] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\gf2Xpstl-3SsWOQBl.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\gf2Xpstl-3SsWOQBl.lnk.xuy", lpFilePart=0x0) returned 0x58 [0047.797] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0047.797] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\gf2Xpstl-3SsWOQBl.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\gf2xpstl-3sswoqbl.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf29b5269, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf4031d4b, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0x8552d4a, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x410)) returned 1 [0047.797] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0047.797] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\gf2Xpstl-3SsWOQBl.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\gf2xpstl-3sswoqbl.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\gf2Xpstl-3SsWOQBl.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\gf2xpstl-3sswoqbl.lnk.xuy")) returned 1 [0047.798] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\GHXa.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\GHXa.lnk", lpFilePart=0x0) returned 0x47 [0047.798] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0047.798] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\GHXa.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\ghxa.lnk"), fInfoLevelId=0x0, lpFileInformation=0x22437a8 | out: lpFileInformation=0x22437a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf42e05f7, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf42e05f7, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0xf42e05f7, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x278)) returned 1 [0047.798] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0047.798] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\GHXa.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\GHXa.lnk", lpFilePart=0x0) returned 0x47 [0047.798] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0047.798] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\GHXa.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\ghxa.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0047.798] GetFileType (hFile=0x448) returned 0x1 [0047.798] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0047.798] GetFileType (hFile=0x448) returned 0x1 [0047.798] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x278 [0047.798] ReadFile (in: hFile=0x448, lpBuffer=0x2243cb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x2243cb8*, lpNumberOfBytesRead=0x3be868*=0x278, lpOverlapped=0x0) returned 1 [0047.798] CloseHandle (hObject=0x448) returned 1 [0047.808] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\GHXa.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\GHXa.lnk", lpFilePart=0x0) returned 0x47 [0047.808] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0047.808] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\GHXa.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\ghxa.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0047.809] GetFileType (hFile=0x448) returned 0x1 [0047.809] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0047.809] GetFileType (hFile=0x448) returned 0x1 [0047.809] WriteFile (in: hFile=0x448, lpBuffer=0x22bb908*, nNumberOfBytesToWrite=0x280, lpNumberOfBytesWritten=0x3be778, lpOverlapped=0x0 | out: lpBuffer=0x22bb908*, lpNumberOfBytesWritten=0x3be778*=0x280, lpOverlapped=0x0) returned 1 [0047.810] CloseHandle (hObject=0x448) returned 1 [0047.810] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\GHXa.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\GHXa.lnk", lpFilePart=0x0) returned 0x47 [0047.810] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\GHXa.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\GHXa.lnk.xuy", lpFilePart=0x0) returned 0x4b [0047.811] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0047.811] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\GHXa.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\ghxa.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf42e05f7, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf42e05f7, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0x8578f6a, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x280)) returned 1 [0047.811] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0047.811] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\GHXa.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\ghxa.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\GHXa.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\ghxa.lnk.xuy")) returned 1 [0047.815] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\gHZm.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\gHZm.lnk", lpFilePart=0x0) returned 0x47 [0047.816] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0047.816] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\gHZm.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\ghzm.lnk"), fInfoLevelId=0x0, lpFileInformation=0x22bcb70 | out: lpFileInformation=0x22bcb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf6061707, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf6061707, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0xf6061707, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x278)) returned 1 [0047.816] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0047.816] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\gHZm.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\gHZm.lnk", lpFilePart=0x0) returned 0x47 [0047.816] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0047.816] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\gHZm.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\ghzm.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0047.816] GetFileType (hFile=0x448) returned 0x1 [0047.816] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0047.816] GetFileType (hFile=0x448) returned 0x1 [0047.816] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x278 [0047.816] ReadFile (in: hFile=0x448, lpBuffer=0x22bd080, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x22bd080*, lpNumberOfBytesRead=0x3be868*=0x278, lpOverlapped=0x0) returned 1 [0047.816] CloseHandle (hObject=0x448) returned 1 [0047.826] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\gHZm.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\gHZm.lnk", lpFilePart=0x0) returned 0x47 [0047.826] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0047.826] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\gHZm.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\ghzm.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0047.834] GetFileType (hFile=0x448) returned 0x1 [0047.834] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0047.834] GetFileType (hFile=0x448) returned 0x1 [0047.834] WriteFile (in: hFile=0x448, lpBuffer=0x2334cd0*, nNumberOfBytesToWrite=0x280, lpNumberOfBytesWritten=0x3be778, lpOverlapped=0x0 | out: lpBuffer=0x2334cd0*, lpNumberOfBytesWritten=0x3be778*=0x280, lpOverlapped=0x0) returned 1 [0047.835] CloseHandle (hObject=0x448) returned 1 [0047.836] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\gHZm.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\gHZm.lnk", lpFilePart=0x0) returned 0x47 [0047.836] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\gHZm.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\gHZm.lnk.xuy", lpFilePart=0x0) returned 0x4b [0047.836] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0047.836] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\gHZm.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\ghzm.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf6061707, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf6061707, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0x85c5464, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x280)) returned 1 [0047.836] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0047.836] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\gHZm.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\ghzm.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\gHZm.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\ghzm.lnk.xuy")) returned 1 [0047.839] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Gk8oY7c.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Gk8oY7c.lnk", lpFilePart=0x0) returned 0x4a [0047.839] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0047.839] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Gk8oY7c.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\gk8oy7c.lnk"), fInfoLevelId=0x0, lpFileInformation=0x2335f38 | out: lpFileInformation=0x2335f38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5f566ef, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf5f566ef, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0xf5f566ef, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x3ea)) returned 1 [0047.839] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0047.839] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Gk8oY7c.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Gk8oY7c.lnk", lpFilePart=0x0) returned 0x4a [0047.839] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0047.839] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Gk8oY7c.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\gk8oy7c.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0047.839] GetFileType (hFile=0x448) returned 0x1 [0047.839] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0047.839] GetFileType (hFile=0x448) returned 0x1 [0047.839] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x3ea [0047.839] ReadFile (in: hFile=0x448, lpBuffer=0x23365d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x23365d0*, lpNumberOfBytesRead=0x3be868*=0x3ea, lpOverlapped=0x0) returned 1 [0047.839] CloseHandle (hObject=0x448) returned 1 [0047.879] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Gk8oY7c.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Gk8oY7c.lnk", lpFilePart=0x0) returned 0x4a [0047.879] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0047.879] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Gk8oY7c.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\gk8oy7c.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0047.880] GetFileType (hFile=0x448) returned 0x1 [0047.880] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0047.880] GetFileType (hFile=0x448) returned 0x1 [0047.880] WriteFile (in: hFile=0x448, lpBuffer=0x21afb78*, nNumberOfBytesToWrite=0x3f0, lpNumberOfBytesWritten=0x3be778, lpOverlapped=0x0 | out: lpBuffer=0x21afb78*, lpNumberOfBytesWritten=0x3be778*=0x3f0, lpOverlapped=0x0) returned 1 [0047.881] CloseHandle (hObject=0x448) returned 1 [0047.881] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Gk8oY7c.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Gk8oY7c.lnk", lpFilePart=0x0) returned 0x4a [0047.881] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Gk8oY7c.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Gk8oY7c.lnk.xuy", lpFilePart=0x0) returned 0x4e [0047.881] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0047.881] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Gk8oY7c.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\gk8oy7c.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5f566ef, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf5f566ef, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0x8637df8, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x3f0)) returned 1 [0047.881] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0047.881] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Gk8oY7c.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\gk8oy7c.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Gk8oY7c.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\gk8oy7c.lnk.xuy")) returned 1 [0047.882] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Gqr Olni3uCq.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Gqr Olni3uCq.lnk", lpFilePart=0x0) returned 0x4f [0047.882] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0047.882] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Gqr Olni3uCq.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\gqr olni3ucq.lnk"), fInfoLevelId=0x0, lpFileInformation=0x21b0df8 | out: lpFileInformation=0x21b0df8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3c78270, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf3c78270, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0xf3c78270, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x3f0)) returned 1 [0047.882] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0047.882] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Gqr Olni3uCq.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Gqr Olni3uCq.lnk", lpFilePart=0x0) returned 0x4f [0047.882] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0047.882] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Gqr Olni3uCq.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\gqr olni3ucq.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0047.882] GetFileType (hFile=0x448) returned 0x1 [0047.882] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0047.882] GetFileType (hFile=0x448) returned 0x1 [0047.882] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x3f0 [0047.883] ReadFile (in: hFile=0x448, lpBuffer=0x21b14c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x21b14c0*, lpNumberOfBytesRead=0x3be868*=0x3f0, lpOverlapped=0x0) returned 1 [0047.883] CloseHandle (hObject=0x448) returned 1 [0047.893] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Gqr Olni3uCq.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Gqr Olni3uCq.lnk", lpFilePart=0x0) returned 0x4f [0047.893] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0047.893] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Gqr Olni3uCq.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\gqr olni3ucq.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0047.894] GetFileType (hFile=0x448) returned 0x1 [0047.894] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0047.894] GetFileType (hFile=0x448) returned 0x1 [0047.894] WriteFile (in: hFile=0x448, lpBuffer=0x22298b8*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x3be778, lpOverlapped=0x0 | out: lpBuffer=0x22298b8*, lpNumberOfBytesWritten=0x3be778*=0x400, lpOverlapped=0x0) returned 1 [0047.895] CloseHandle (hObject=0x448) returned 1 [0047.896] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Gqr Olni3uCq.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Gqr Olni3uCq.lnk", lpFilePart=0x0) returned 0x4f [0047.896] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Gqr Olni3uCq.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Gqr Olni3uCq.lnk.xuy", lpFilePart=0x0) returned 0x53 [0047.896] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0047.896] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Gqr Olni3uCq.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\gqr olni3ucq.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3c78270, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf3c78270, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0x865dd94, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x400)) returned 1 [0047.896] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0047.896] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Gqr Olni3uCq.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\gqr olni3ucq.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Gqr Olni3uCq.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\gqr olni3ucq.lnk.xuy")) returned 1 [0047.896] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\h5ZE6cD5v9t tme A-G.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\h5ZE6cD5v9t tme A-G.lnk", lpFilePart=0x0) returned 0x56 [0047.896] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0047.897] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\h5ZE6cD5v9t tme A-G.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\h5ze6cd5v9t tme a-g.lnk"), fInfoLevelId=0x0, lpFileInformation=0x222ab50 | out: lpFileInformation=0x222ab50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf40f0984, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf40f0984, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0xf40f0984, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x428)) returned 1 [0047.897] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0047.897] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\h5ZE6cD5v9t tme A-G.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\h5ZE6cD5v9t tme A-G.lnk", lpFilePart=0x0) returned 0x56 [0047.897] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0047.897] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\h5ZE6cD5v9t tme A-G.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\h5ze6cd5v9t tme a-g.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0047.897] GetFileType (hFile=0x448) returned 0x1 [0047.897] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0047.897] GetFileType (hFile=0x448) returned 0x1 [0047.897] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x428 [0047.897] ReadFile (in: hFile=0x448, lpBuffer=0x222b280, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x222b280*, lpNumberOfBytesRead=0x3be868*=0x428, lpOverlapped=0x0) returned 1 [0047.897] CloseHandle (hObject=0x448) returned 1 [0047.907] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\h5ZE6cD5v9t tme A-G.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\h5ZE6cD5v9t tme A-G.lnk", lpFilePart=0x0) returned 0x56 [0047.907] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0047.907] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\h5ZE6cD5v9t tme A-G.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\h5ze6cd5v9t tme a-g.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0047.908] GetFileType (hFile=0x448) returned 0x1 [0047.908] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0047.908] GetFileType (hFile=0x448) returned 0x1 [0047.908] WriteFile (in: hFile=0x448, lpBuffer=0x22a3778*, nNumberOfBytesToWrite=0x430, lpNumberOfBytesWritten=0x3be778, lpOverlapped=0x0 | out: lpBuffer=0x22a3778*, lpNumberOfBytesWritten=0x3be778*=0x430, lpOverlapped=0x0) returned 1 [0047.909] CloseHandle (hObject=0x448) returned 1 [0047.909] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\h5ZE6cD5v9t tme A-G.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\h5ZE6cD5v9t tme A-G.lnk", lpFilePart=0x0) returned 0x56 [0047.909] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\h5ZE6cD5v9t tme A-G.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\h5ZE6cD5v9t tme A-G.lnk.xuy", lpFilePart=0x0) returned 0x5a [0047.909] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0047.909] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\h5ZE6cD5v9t tme A-G.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\h5ze6cd5v9t tme a-g.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf40f0984, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf40f0984, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0x8683f91, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x430)) returned 1 [0047.910] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0047.910] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\h5ZE6cD5v9t tme A-G.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\h5ze6cd5v9t tme a-g.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\h5ZE6cD5v9t tme A-G.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\h5ze6cd5v9t tme a-g.lnk.xuy")) returned 1 [0047.910] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\HE1R.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\HE1R.lnk", lpFilePart=0x0) returned 0x47 [0047.910] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0047.910] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\HE1R.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\he1r.lnk"), fInfoLevelId=0x0, lpFileInformation=0x22a4a40 | out: lpFileInformation=0x22a4a40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf54e845b, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf54e845b, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0xf54e845b, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x4f3)) returned 1 [0047.910] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0047.910] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\HE1R.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\HE1R.lnk", lpFilePart=0x0) returned 0x47 [0047.910] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0047.910] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\HE1R.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\he1r.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0047.910] GetFileType (hFile=0x448) returned 0x1 [0047.911] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0047.911] GetFileType (hFile=0x448) returned 0x1 [0047.911] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x4f3 [0047.911] ReadFile (in: hFile=0x448, lpBuffer=0x22a51d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x22a51d0*, lpNumberOfBytesRead=0x3be868*=0x4f3, lpOverlapped=0x0) returned 1 [0047.911] CloseHandle (hObject=0x448) returned 1 [0047.920] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\HE1R.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\HE1R.lnk", lpFilePart=0x0) returned 0x47 [0047.920] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0047.920] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\HE1R.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\he1r.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0047.921] GetFileType (hFile=0x448) returned 0x1 [0047.921] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0047.921] GetFileType (hFile=0x448) returned 0x1 [0047.922] WriteFile (in: hFile=0x448, lpBuffer=0x231daa8*, nNumberOfBytesToWrite=0x500, lpNumberOfBytesWritten=0x3be778, lpOverlapped=0x0 | out: lpBuffer=0x231daa8*, lpNumberOfBytesWritten=0x3be778*=0x500, lpOverlapped=0x0) returned 1 [0047.922] CloseHandle (hObject=0x448) returned 1 [0047.923] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\HE1R.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\HE1R.lnk", lpFilePart=0x0) returned 0x47 [0047.923] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\HE1R.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\HE1R.lnk.xuy", lpFilePart=0x0) returned 0x4b [0047.923] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0047.923] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\HE1R.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\he1r.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf54e845b, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf54e845b, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0x86aacfc, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x500)) returned 1 [0047.924] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0047.924] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\HE1R.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\he1r.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\HE1R.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\he1r.lnk.xuy")) returned 1 [0047.924] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\HFrGs.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\HFrGs.lnk", lpFilePart=0x0) returned 0x48 [0047.924] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0047.924] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\HFrGs.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\hfrgs.lnk"), fInfoLevelId=0x0, lpFileInformation=0x231ed10 | out: lpFileInformation=0x231ed10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf46017a6, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf46017a6, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0xf46017a6, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x4f1)) returned 1 [0047.924] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0047.924] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\HFrGs.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\HFrGs.lnk", lpFilePart=0x0) returned 0x48 [0047.924] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0047.924] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\HFrGs.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\hfrgs.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0047.924] GetFileType (hFile=0x448) returned 0x1 [0047.924] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0047.924] GetFileType (hFile=0x448) returned 0x1 [0047.924] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x4f1 [0047.925] ReadFile (in: hFile=0x448, lpBuffer=0x231f4b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x231f4b0*, lpNumberOfBytesRead=0x3be868*=0x4f1, lpOverlapped=0x0) returned 1 [0047.925] CloseHandle (hObject=0x448) returned 1 [0047.962] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\HFrGs.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\HFrGs.lnk", lpFilePart=0x0) returned 0x48 [0047.962] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0047.962] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\HFrGs.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\hfrgs.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0047.963] GetFileType (hFile=0x448) returned 0x1 [0047.963] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0047.963] GetFileType (hFile=0x448) returned 0x1 [0047.963] WriteFile (in: hFile=0x448, lpBuffer=0x2199068*, nNumberOfBytesToWrite=0x500, lpNumberOfBytesWritten=0x3be778, lpOverlapped=0x0 | out: lpBuffer=0x2199068*, lpNumberOfBytesWritten=0x3be778*=0x500, lpOverlapped=0x0) returned 1 [0047.964] CloseHandle (hObject=0x448) returned 1 [0047.965] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\HFrGs.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\HFrGs.lnk", lpFilePart=0x0) returned 0x48 [0047.965] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\HFrGs.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\HFrGs.lnk.xuy", lpFilePart=0x0) returned 0x4c [0047.965] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0047.965] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\HFrGs.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\hfrgs.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf46017a6, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf46017a6, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0x86f6664, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x500)) returned 1 [0047.965] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0047.965] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\HFrGs.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\hfrgs.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\HFrGs.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\hfrgs.lnk.xuy")) returned 1 [0047.966] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\hih.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\hih.lnk", lpFilePart=0x0) returned 0x46 [0047.966] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0047.966] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\hih.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\hih.lnk"), fInfoLevelId=0x0, lpFileInformation=0x219a2e8 | out: lpFileInformation=0x219a2e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5db2cee, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf5db2cee, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0xf5db2cee, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x271)) returned 1 [0047.966] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0047.966] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\hih.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\hih.lnk", lpFilePart=0x0) returned 0x46 [0047.966] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0047.966] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\hih.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\hih.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0047.966] GetFileType (hFile=0x448) returned 0x1 [0047.966] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0047.966] GetFileType (hFile=0x448) returned 0x1 [0047.966] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x271 [0047.966] ReadFile (in: hFile=0x448, lpBuffer=0x219a7e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x219a7e8*, lpNumberOfBytesRead=0x3be868*=0x271, lpOverlapped=0x0) returned 1 [0047.966] CloseHandle (hObject=0x448) returned 1 [0047.976] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\hih.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\hih.lnk", lpFilePart=0x0) returned 0x46 [0047.977] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0047.977] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\hih.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\hih.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0047.977] GetFileType (hFile=0x448) returned 0x1 [0047.977] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0047.977] GetFileType (hFile=0x448) returned 0x1 [0047.978] WriteFile (in: hFile=0x448, lpBuffer=0x2212438*, nNumberOfBytesToWrite=0x280, lpNumberOfBytesWritten=0x3be778, lpOverlapped=0x0 | out: lpBuffer=0x2212438*, lpNumberOfBytesWritten=0x3be778*=0x280, lpOverlapped=0x0) returned 1 [0047.978] CloseHandle (hObject=0x448) returned 1 [0047.979] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\hih.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\hih.lnk", lpFilePart=0x0) returned 0x46 [0047.979] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\hih.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\hih.lnk.xuy", lpFilePart=0x0) returned 0x4a [0047.979] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0047.979] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\hih.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\hih.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5db2cee, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf5db2cee, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0x871cc78, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x280)) returned 1 [0047.979] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0047.979] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\hih.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\hih.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\hih.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\hih.lnk.xuy")) returned 1 [0047.981] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Hn-6.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Hn-6.lnk", lpFilePart=0x0) returned 0x47 [0047.981] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0047.981] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Hn-6.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\hn-6.lnk"), fInfoLevelId=0x0, lpFileInformation=0x22136a0 | out: lpFileInformation=0x22136a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1d0a9e2, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf525fdbb, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0xf525fdbb, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x356)) returned 1 [0047.981] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0047.981] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Hn-6.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Hn-6.lnk", lpFilePart=0x0) returned 0x47 [0047.981] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0047.981] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Hn-6.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\hn-6.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0047.982] GetFileType (hFile=0x448) returned 0x1 [0047.982] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0047.982] GetFileType (hFile=0x448) returned 0x1 [0047.982] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x356 [0047.982] ReadFile (in: hFile=0x448, lpBuffer=0x2213c90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x2213c90*, lpNumberOfBytesRead=0x3be868*=0x356, lpOverlapped=0x0) returned 1 [0047.982] CloseHandle (hObject=0x448) returned 1 [0047.992] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Hn-6.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Hn-6.lnk", lpFilePart=0x0) returned 0x47 [0047.992] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0047.992] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Hn-6.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\hn-6.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0047.993] GetFileType (hFile=0x448) returned 0x1 [0047.993] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0047.993] GetFileType (hFile=0x448) returned 0x1 [0047.993] WriteFile (in: hFile=0x448, lpBuffer=0x228bd48*, nNumberOfBytesToWrite=0x360, lpNumberOfBytesWritten=0x3be778, lpOverlapped=0x0 | out: lpBuffer=0x228bd48*, lpNumberOfBytesWritten=0x3be778*=0x360, lpOverlapped=0x0) returned 1 [0047.994] CloseHandle (hObject=0x448) returned 1 [0047.994] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Hn-6.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Hn-6.lnk", lpFilePart=0x0) returned 0x47 [0047.995] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Hn-6.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Hn-6.lnk.xuy", lpFilePart=0x0) returned 0x4b [0047.995] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0047.995] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Hn-6.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\hn-6.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1d0a9e2, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf525fdbb, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0x8742ac9, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x360)) returned 1 [0047.995] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0047.995] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Hn-6.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\hn-6.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Hn-6.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\hn-6.lnk.xuy")) returned 1 [0047.995] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\hvsxSLFjGgIvWh.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\hvsxSLFjGgIvWh.lnk", lpFilePart=0x0) returned 0x51 [0047.995] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0047.996] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\hvsxSLFjGgIvWh.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\hvsxslfjggivwh.lnk"), fInfoLevelId=0x0, lpFileInformation=0x228cfb0 | out: lpFileInformation=0x228cfb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf60879fc, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf60879fc, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0xf60879fc, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x2ae)) returned 1 [0047.996] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0047.996] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\hvsxSLFjGgIvWh.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\hvsxSLFjGgIvWh.lnk", lpFilePart=0x0) returned 0x51 [0047.996] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0047.996] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\hvsxSLFjGgIvWh.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\hvsxslfjggivwh.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0047.996] GetFileType (hFile=0x448) returned 0x1 [0047.996] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0047.996] GetFileType (hFile=0x448) returned 0x1 [0047.996] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x2ae [0047.996] ReadFile (in: hFile=0x448, lpBuffer=0x228d548, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x228d548*, lpNumberOfBytesRead=0x3be868*=0x2ae, lpOverlapped=0x0) returned 1 [0047.996] CloseHandle (hObject=0x448) returned 1 [0048.007] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\hvsxSLFjGgIvWh.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\hvsxSLFjGgIvWh.lnk", lpFilePart=0x0) returned 0x51 [0048.007] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0048.007] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\hvsxSLFjGgIvWh.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\hvsxslfjggivwh.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0048.008] GetFileType (hFile=0x448) returned 0x1 [0048.008] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0048.008] GetFileType (hFile=0x448) returned 0x1 [0048.008] WriteFile (in: hFile=0x448, lpBuffer=0x23052b0*, nNumberOfBytesToWrite=0x2b0, lpNumberOfBytesWritten=0x3be778, lpOverlapped=0x0 | out: lpBuffer=0x23052b0*, lpNumberOfBytesWritten=0x3be778*=0x2b0, lpOverlapped=0x0) returned 1 [0048.008] CloseHandle (hObject=0x448) returned 1 [0048.009] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\hvsxSLFjGgIvWh.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\hvsxSLFjGgIvWh.lnk", lpFilePart=0x0) returned 0x51 [0048.009] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\hvsxSLFjGgIvWh.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\hvsxSLFjGgIvWh.lnk.xuy", lpFilePart=0x0) returned 0x55 [0048.009] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0048.009] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\hvsxSLFjGgIvWh.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\hvsxslfjggivwh.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf60879fc, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf60879fc, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0x8768e4b, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2b0)) returned 1 [0048.009] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0048.009] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\hvsxSLFjGgIvWh.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\hvsxslfjggivwh.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\hvsxSLFjGgIvWh.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\hvsxslfjggivwh.lnk.xuy")) returned 1 [0048.010] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\HzbGRo6Y.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\HzbGRo6Y.lnk", lpFilePart=0x0) returned 0x4b [0048.010] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0048.010] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\HzbGRo6Y.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\hzbgro6y.lnk"), fInfoLevelId=0x0, lpFileInformation=0x2306560 | out: lpFileInformation=0x2306560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3ad461a, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf3ad461a, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0xf3ad461a, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x290)) returned 1 [0048.010] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0048.010] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\HzbGRo6Y.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\HzbGRo6Y.lnk", lpFilePart=0x0) returned 0x4b [0048.010] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0048.010] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\HzbGRo6Y.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\hzbgro6y.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0048.010] GetFileType (hFile=0x448) returned 0x1 [0048.010] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0048.010] GetFileType (hFile=0x448) returned 0x1 [0048.010] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x290 [0048.011] ReadFile (in: hFile=0x448, lpBuffer=0x2306aa8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x2306aa8*, lpNumberOfBytesRead=0x3be868*=0x290, lpOverlapped=0x0) returned 1 [0048.011] CloseHandle (hObject=0x448) returned 1 [0048.058] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\HzbGRo6Y.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\HzbGRo6Y.lnk", lpFilePart=0x0) returned 0x4b [0048.058] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0048.058] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\HzbGRo6Y.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\hzbgro6y.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0048.059] GetFileType (hFile=0x448) returned 0x1 [0048.059] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0048.059] GetFileType (hFile=0x448) returned 0x1 [0048.059] WriteFile (in: hFile=0x448, lpBuffer=0x217fa50*, nNumberOfBytesToWrite=0x2a0, lpNumberOfBytesWritten=0x3be778, lpOverlapped=0x0 | out: lpBuffer=0x217fa50*, lpNumberOfBytesWritten=0x3be778*=0x2a0, lpOverlapped=0x0) returned 1 [0048.060] CloseHandle (hObject=0x448) returned 1 [0048.061] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\HzbGRo6Y.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\HzbGRo6Y.lnk", lpFilePart=0x0) returned 0x4b [0048.061] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\HzbGRo6Y.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\HzbGRo6Y.lnk.xuy", lpFilePart=0x0) returned 0x4f [0048.061] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0048.061] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\HzbGRo6Y.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\hzbgro6y.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3ad461a, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf3ad461a, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0x87e894b, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2a0)) returned 1 [0048.061] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0048.061] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\HzbGRo6Y.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\hzbgro6y.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\HzbGRo6Y.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\hzbgro6y.lnk.xuy")) returned 1 [0048.065] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\IJE5Cqpv5XA2m3m.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\IJE5Cqpv5XA2m3m.lnk", lpFilePart=0x0) returned 0x52 [0048.065] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0048.065] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\IJE5Cqpv5XA2m3m.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\ije5cqpv5xa2m3m.lnk"), fInfoLevelId=0x0, lpFileInformation=0x2180cd0 | out: lpFileInformation=0x2180cd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4b5ec7a, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf4b5ec7a, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0xf4b5ec7a, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x34f)) returned 1 [0048.065] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0048.065] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\IJE5Cqpv5XA2m3m.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\IJE5Cqpv5XA2m3m.lnk", lpFilePart=0x0) returned 0x52 [0048.066] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0048.066] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\IJE5Cqpv5XA2m3m.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\ije5cqpv5xa2m3m.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0048.066] GetFileType (hFile=0x448) returned 0x1 [0048.066] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0048.066] GetFileType (hFile=0x448) returned 0x1 [0048.066] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x34f [0048.066] ReadFile (in: hFile=0x448, lpBuffer=0x2181308, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x2181308*, lpNumberOfBytesRead=0x3be868*=0x34f, lpOverlapped=0x0) returned 1 [0048.066] CloseHandle (hObject=0x448) returned 1 [0048.076] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\IJE5Cqpv5XA2m3m.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\IJE5Cqpv5XA2m3m.lnk", lpFilePart=0x0) returned 0x52 [0048.076] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0048.076] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\IJE5Cqpv5XA2m3m.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\ije5cqpv5xa2m3m.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0048.077] GetFileType (hFile=0x448) returned 0x1 [0048.077] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0048.077] GetFileType (hFile=0x448) returned 0x1 [0048.077] WriteFile (in: hFile=0x448, lpBuffer=0x21f9390*, nNumberOfBytesToWrite=0x350, lpNumberOfBytesWritten=0x3be778, lpOverlapped=0x0 | out: lpBuffer=0x21f9390*, lpNumberOfBytesWritten=0x3be778*=0x350, lpOverlapped=0x0) returned 1 [0048.078] CloseHandle (hObject=0x448) returned 1 [0048.078] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\IJE5Cqpv5XA2m3m.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\IJE5Cqpv5XA2m3m.lnk", lpFilePart=0x0) returned 0x52 [0048.078] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\IJE5Cqpv5XA2m3m.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\IJE5Cqpv5XA2m3m.lnk.xuy", lpFilePart=0x0) returned 0x56 [0048.078] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0048.079] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\IJE5Cqpv5XA2m3m.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\ije5cqpv5xa2m3m.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4b5ec7a, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf4b5ec7a, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0x880ee42, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x350)) returned 1 [0048.079] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0048.079] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\IJE5Cqpv5XA2m3m.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\ije5cqpv5xa2m3m.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\IJE5Cqpv5XA2m3m.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\ije5cqpv5xa2m3m.lnk.xuy")) returned 1 [0048.079] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\IsjTI.flv.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\IsjTI.flv.lnk", lpFilePart=0x0) returned 0x4c [0048.079] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0048.079] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\IsjTI.flv.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\isjti.flv.lnk"), fInfoLevelId=0x0, lpFileInformation=0x21fa640 | out: lpFileInformation=0x21fa640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5bc2ed5, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf5bc2ed5, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0xf5bc2ed5, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x3de)) returned 1 [0048.079] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0048.079] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\IsjTI.flv.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\IsjTI.flv.lnk", lpFilePart=0x0) returned 0x4c [0048.079] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0048.079] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\IsjTI.flv.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\isjti.flv.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0048.080] GetFileType (hFile=0x448) returned 0x1 [0048.080] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0048.080] GetFileType (hFile=0x448) returned 0x1 [0048.080] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x3de [0048.080] ReadFile (in: hFile=0x448, lpBuffer=0x21face8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x21face8*, lpNumberOfBytesRead=0x3be868*=0x3de, lpOverlapped=0x0) returned 1 [0048.080] CloseHandle (hObject=0x448) returned 1 [0048.090] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\IsjTI.flv.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\IsjTI.flv.lnk", lpFilePart=0x0) returned 0x4c [0048.090] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0048.090] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\IsjTI.flv.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\isjti.flv.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0048.091] GetFileType (hFile=0x448) returned 0x1 [0048.091] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0048.091] GetFileType (hFile=0x448) returned 0x1 [0048.091] WriteFile (in: hFile=0x448, lpBuffer=0x2273030*, nNumberOfBytesToWrite=0x3e0, lpNumberOfBytesWritten=0x3be778, lpOverlapped=0x0 | out: lpBuffer=0x2273030*, lpNumberOfBytesWritten=0x3be778*=0x3e0, lpOverlapped=0x0) returned 1 [0048.092] CloseHandle (hObject=0x448) returned 1 [0048.092] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\IsjTI.flv.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\IsjTI.flv.lnk", lpFilePart=0x0) returned 0x4c [0048.093] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\IsjTI.flv.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\IsjTI.flv.lnk.xuy", lpFilePart=0x0) returned 0x50 [0048.093] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0048.093] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\IsjTI.flv.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\isjti.flv.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5bc2ed5, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf5bc2ed5, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0x88350e4, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x3e0)) returned 1 [0048.093] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0048.093] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\IsjTI.flv.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\isjti.flv.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\IsjTI.flv.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\isjti.flv.lnk.xuy")) returned 1 [0048.093] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\JcAiiI7bq.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\JcAiiI7bq.lnk", lpFilePart=0x0) returned 0x4c [0048.093] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0048.093] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\JcAiiI7bq.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\jcaiii7bq.lnk"), fInfoLevelId=0x0, lpFileInformation=0x22742c8 | out: lpFileInformation=0x22742c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf579c2e4, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf579c2e4, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0xf579c2e4, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x4e4)) returned 1 [0048.094] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0048.094] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\JcAiiI7bq.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\JcAiiI7bq.lnk", lpFilePart=0x0) returned 0x4c [0048.094] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0048.094] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\JcAiiI7bq.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\jcaiii7bq.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0048.094] GetFileType (hFile=0x448) returned 0x1 [0048.094] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0048.094] GetFileType (hFile=0x448) returned 0x1 [0048.094] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x4e4 [0048.094] ReadFile (in: hFile=0x448, lpBuffer=0x2274a78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x2274a78*, lpNumberOfBytesRead=0x3be868*=0x4e4, lpOverlapped=0x0) returned 1 [0048.094] CloseHandle (hObject=0x448) returned 1 [0048.104] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\JcAiiI7bq.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\JcAiiI7bq.lnk", lpFilePart=0x0) returned 0x4c [0048.104] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0048.104] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\JcAiiI7bq.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\jcaiii7bq.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0048.105] GetFileType (hFile=0x448) returned 0x1 [0048.105] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0048.105] GetFileType (hFile=0x448) returned 0x1 [0048.105] WriteFile (in: hFile=0x448, lpBuffer=0x22ed318*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x3be778, lpOverlapped=0x0 | out: lpBuffer=0x22ed318*, lpNumberOfBytesWritten=0x3be778*=0x4f0, lpOverlapped=0x0) returned 1 [0048.106] CloseHandle (hObject=0x448) returned 1 [0048.106] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\JcAiiI7bq.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\JcAiiI7bq.lnk", lpFilePart=0x0) returned 0x4c [0048.106] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\JcAiiI7bq.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\JcAiiI7bq.lnk.xuy", lpFilePart=0x0) returned 0x50 [0048.107] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0048.107] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\JcAiiI7bq.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\jcaiii7bq.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf579c2e4, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf579c2e4, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0x885b4eb, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x4f0)) returned 1 [0048.107] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0048.107] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\JcAiiI7bq.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\jcaiii7bq.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\JcAiiI7bq.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\jcaiii7bq.lnk.xuy")) returned 1 [0048.107] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\jiLoP1s77mzUlK6iOG4A.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\jiLoP1s77mzUlK6iOG4A.lnk", lpFilePart=0x0) returned 0x57 [0048.107] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0048.107] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\jiLoP1s77mzUlK6iOG4A.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\jilop1s77mzulk6iog4a.lnk"), fInfoLevelId=0x0, lpFileInformation=0x22ee5b0 | out: lpFileInformation=0x22ee5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5ee4000, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf5ee4000, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0xf5ee4000, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x2cc)) returned 1 [0048.107] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0048.107] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\jiLoP1s77mzUlK6iOG4A.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\jiLoP1s77mzUlK6iOG4A.lnk", lpFilePart=0x0) returned 0x57 [0048.107] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0048.108] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\jiLoP1s77mzUlK6iOG4A.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\jilop1s77mzulk6iog4a.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0048.108] GetFileType (hFile=0x448) returned 0x1 [0048.108] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0048.108] GetFileType (hFile=0x448) returned 0x1 [0048.108] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x2cc [0048.108] ReadFile (in: hFile=0x448, lpBuffer=0x22eeb98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x22eeb98*, lpNumberOfBytesRead=0x3be868*=0x2cc, lpOverlapped=0x0) returned 1 [0048.108] CloseHandle (hObject=0x448) returned 1 [0048.146] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\jiLoP1s77mzUlK6iOG4A.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\jiLoP1s77mzUlK6iOG4A.lnk", lpFilePart=0x0) returned 0x57 [0048.146] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0048.146] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\jiLoP1s77mzUlK6iOG4A.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\jilop1s77mzulk6iog4a.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0048.147] GetFileType (hFile=0x448) returned 0x1 [0048.147] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0048.147] GetFileType (hFile=0x448) returned 0x1 [0048.147] WriteFile (in: hFile=0x448, lpBuffer=0x2167810*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x3be778, lpOverlapped=0x0 | out: lpBuffer=0x2167810*, lpNumberOfBytesWritten=0x3be778*=0x2d0, lpOverlapped=0x0) returned 1 [0048.148] CloseHandle (hObject=0x448) returned 1 [0048.149] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\jiLoP1s77mzUlK6iOG4A.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\jiLoP1s77mzUlK6iOG4A.lnk", lpFilePart=0x0) returned 0x57 [0048.149] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\jiLoP1s77mzUlK6iOG4A.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\jiLoP1s77mzUlK6iOG4A.lnk.xuy", lpFilePart=0x0) returned 0x5b [0048.149] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0048.149] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\jiLoP1s77mzUlK6iOG4A.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\jilop1s77mzulk6iog4a.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5ee4000, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf5ee4000, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0x88ce289, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2d0)) returned 1 [0048.149] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0048.149] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\jiLoP1s77mzUlK6iOG4A.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\jilop1s77mzulk6iog4a.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\jiLoP1s77mzUlK6iOG4A.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\jilop1s77mzulk6iog4a.lnk.xuy")) returned 1 [0048.150] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\JJSZ6n05wI.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\JJSZ6n05wI.lnk", lpFilePart=0x0) returned 0x4d [0048.150] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0048.150] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\JJSZ6n05wI.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\jjsz6n05wi.lnk"), fInfoLevelId=0x0, lpFileInformation=0x2168ad8 | out: lpFileInformation=0x2168ad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4568e1a, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf4568e1a, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0xf4568e1a, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x484)) returned 1 [0048.150] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0048.150] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\JJSZ6n05wI.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\JJSZ6n05wI.lnk", lpFilePart=0x0) returned 0x4d [0048.150] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0048.150] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\JJSZ6n05wI.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\jjsz6n05wi.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0048.150] GetFileType (hFile=0x448) returned 0x1 [0048.150] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0048.150] GetFileType (hFile=0x448) returned 0x1 [0048.150] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x484 [0048.150] ReadFile (in: hFile=0x448, lpBuffer=0x2169228, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x2169228*, lpNumberOfBytesRead=0x3be868*=0x484, lpOverlapped=0x0) returned 1 [0048.150] CloseHandle (hObject=0x448) returned 1 [0048.160] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\JJSZ6n05wI.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\JJSZ6n05wI.lnk", lpFilePart=0x0) returned 0x4d [0048.160] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0048.160] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\JJSZ6n05wI.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\jjsz6n05wi.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0048.161] GetFileType (hFile=0x448) returned 0x1 [0048.161] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0048.161] GetFileType (hFile=0x448) returned 0x1 [0048.161] WriteFile (in: hFile=0x448, lpBuffer=0x21e18e8*, nNumberOfBytesToWrite=0x490, lpNumberOfBytesWritten=0x3be778, lpOverlapped=0x0 | out: lpBuffer=0x21e18e8*, lpNumberOfBytesWritten=0x3be778*=0x490, lpOverlapped=0x0) returned 1 [0048.162] CloseHandle (hObject=0x448) returned 1 [0048.163] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\JJSZ6n05wI.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\JJSZ6n05wI.lnk", lpFilePart=0x0) returned 0x4d [0048.163] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\JJSZ6n05wI.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\JJSZ6n05wI.lnk.xuy", lpFilePart=0x0) returned 0x51 [0048.163] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0048.163] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\JJSZ6n05wI.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\jjsz6n05wi.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4568e1a, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf4568e1a, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0x88f3f24, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x490)) returned 1 [0048.163] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0048.163] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\JJSZ6n05wI.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\jjsz6n05wi.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\JJSZ6n05wI.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\jjsz6n05wi.lnk.xuy")) returned 1 [0048.164] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\JPgSFw.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\JPgSFw.lnk", lpFilePart=0x0) returned 0x49 [0048.164] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0048.164] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\JPgSFw.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\jpgsfw.lnk"), fInfoLevelId=0x0, lpFileInformation=0x21e2b80 | out: lpFileInformation=0x21e2b80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3930d5a, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf3930d5a, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0xf3930d5a, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x284)) returned 1 [0048.164] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0048.164] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\JPgSFw.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\JPgSFw.lnk", lpFilePart=0x0) returned 0x49 [0048.164] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0048.164] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\JPgSFw.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\jpgsfw.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0048.164] GetFileType (hFile=0x448) returned 0x1 [0048.164] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0048.164] GetFileType (hFile=0x448) returned 0x1 [0048.164] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x284 [0048.164] ReadFile (in: hFile=0x448, lpBuffer=0x21e30b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x21e30b0*, lpNumberOfBytesRead=0x3be868*=0x284, lpOverlapped=0x0) returned 1 [0048.164] CloseHandle (hObject=0x448) returned 1 [0048.174] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\JPgSFw.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\JPgSFw.lnk", lpFilePart=0x0) returned 0x49 [0048.174] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0048.174] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\JPgSFw.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\jpgsfw.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0048.175] GetFileType (hFile=0x448) returned 0x1 [0048.175] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0048.175] GetFileType (hFile=0x448) returned 0x1 [0048.175] WriteFile (in: hFile=0x448, lpBuffer=0x225ad60*, nNumberOfBytesToWrite=0x290, lpNumberOfBytesWritten=0x3be778, lpOverlapped=0x0 | out: lpBuffer=0x225ad60*, lpNumberOfBytesWritten=0x3be778*=0x290, lpOverlapped=0x0) returned 1 [0048.176] CloseHandle (hObject=0x448) returned 1 [0048.176] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\JPgSFw.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\JPgSFw.lnk", lpFilePart=0x0) returned 0x49 [0048.177] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\JPgSFw.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\JPgSFw.lnk.xuy", lpFilePart=0x0) returned 0x4d [0048.177] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0048.177] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\JPgSFw.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\jpgsfw.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3930d5a, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf3930d5a, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0x88f3f24, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x290)) returned 1 [0048.177] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0048.177] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\JPgSFw.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\jpgsfw.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\JPgSFw.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\jpgsfw.lnk.xuy")) returned 1 [0048.180] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\K9_BFKsm6gjrGpCU.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\K9_BFKsm6gjrGpCU.lnk", lpFilePart=0x0) returned 0x53 [0048.180] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0048.180] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\K9_BFKsm6gjrGpCU.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\k9_bfksm6gjrgpcu.lnk"), fInfoLevelId=0x0, lpFileInformation=0x225bfe0 | out: lpFileInformation=0x225bfe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3da933b, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf3da933b, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0xf3da933b, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x354)) returned 1 [0048.180] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0048.180] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\K9_BFKsm6gjrGpCU.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\K9_BFKsm6gjrGpCU.lnk", lpFilePart=0x0) returned 0x53 [0048.180] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0048.180] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\K9_BFKsm6gjrGpCU.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\k9_bfksm6gjrgpcu.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0048.180] GetFileType (hFile=0x448) returned 0x1 [0048.180] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0048.180] GetFileType (hFile=0x448) returned 0x1 [0048.180] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x354 [0048.180] ReadFile (in: hFile=0x448, lpBuffer=0x225c630, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x225c630*, lpNumberOfBytesRead=0x3be868*=0x354, lpOverlapped=0x0) returned 1 [0048.180] CloseHandle (hObject=0x448) returned 1 [0048.190] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\K9_BFKsm6gjrGpCU.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\K9_BFKsm6gjrGpCU.lnk", lpFilePart=0x0) returned 0x53 [0048.190] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0048.190] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\K9_BFKsm6gjrGpCU.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\k9_bfksm6gjrgpcu.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0048.191] GetFileType (hFile=0x448) returned 0x1 [0048.191] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0048.191] GetFileType (hFile=0x448) returned 0x1 [0048.191] WriteFile (in: hFile=0x448, lpBuffer=0x22d4718*, nNumberOfBytesToWrite=0x360, lpNumberOfBytesWritten=0x3be778, lpOverlapped=0x0 | out: lpBuffer=0x22d4718*, lpNumberOfBytesWritten=0x3be778*=0x360, lpOverlapped=0x0) returned 1 [0048.192] CloseHandle (hObject=0x448) returned 1 [0048.192] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\K9_BFKsm6gjrGpCU.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\K9_BFKsm6gjrGpCU.lnk", lpFilePart=0x0) returned 0x53 [0048.192] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\K9_BFKsm6gjrGpCU.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\K9_BFKsm6gjrGpCU.lnk.xuy", lpFilePart=0x0) returned 0x57 [0048.192] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0048.192] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\K9_BFKsm6gjrGpCU.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\k9_bfksm6gjrgpcu.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3da933b, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf3da933b, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0x891a193, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x360)) returned 1 [0048.192] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0048.193] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\K9_BFKsm6gjrGpCU.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\k9_bfksm6gjrgpcu.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\K9_BFKsm6gjrGpCU.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\k9_bfksm6gjrgpcu.lnk.xuy")) returned 1 [0048.193] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\kd_M3jN.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\kd_M3jN.lnk", lpFilePart=0x0) returned 0x4a [0048.193] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0048.193] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\kd_M3jN.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\kd_m3jn.lnk"), fInfoLevelId=0x0, lpFileInformation=0x22d59c8 | out: lpFileInformation=0x22d59c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf413cca9, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf413cca9, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0xf413cca9, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x3ea)) returned 1 [0048.193] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0048.193] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\kd_M3jN.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\kd_M3jN.lnk", lpFilePart=0x0) returned 0x4a [0048.193] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0048.193] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\kd_M3jN.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\kd_m3jn.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0048.193] GetFileType (hFile=0x448) returned 0x1 [0048.193] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0048.193] GetFileType (hFile=0x448) returned 0x1 [0048.193] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x3ea [0048.194] ReadFile (in: hFile=0x448, lpBuffer=0x22d6060, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x22d6060*, lpNumberOfBytesRead=0x3be868*=0x3ea, lpOverlapped=0x0) returned 1 [0048.194] CloseHandle (hObject=0x448) returned 1 [0048.227] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\kd_M3jN.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\kd_M3jN.lnk", lpFilePart=0x0) returned 0x4a [0048.227] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0048.227] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\kd_M3jN.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\kd_m3jn.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0048.228] GetFileType (hFile=0x448) returned 0x1 [0048.228] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0048.228] GetFileType (hFile=0x448) returned 0x1 [0048.228] WriteFile (in: hFile=0x448, lpBuffer=0x214f3a8*, nNumberOfBytesToWrite=0x3f0, lpNumberOfBytesWritten=0x3be778, lpOverlapped=0x0 | out: lpBuffer=0x214f3a8*, lpNumberOfBytesWritten=0x3be778*=0x3f0, lpOverlapped=0x0) returned 1 [0048.228] CloseHandle (hObject=0x448) returned 1 [0048.229] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\kd_M3jN.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\kd_M3jN.lnk", lpFilePart=0x0) returned 0x4a [0048.229] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\kd_M3jN.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\kd_M3jN.lnk.xuy", lpFilePart=0x0) returned 0x4e [0048.229] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0048.229] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\kd_M3jN.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\kd_m3jn.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf413cca9, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf413cca9, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0x898c75a, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x3f0)) returned 1 [0048.229] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0048.229] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\kd_M3jN.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\kd_m3jn.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\kd_M3jN.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\kd_m3jn.lnk.xuy")) returned 1 [0048.230] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\KeUJ5oCueYQJJFzt.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\KeUJ5oCueYQJJFzt.lnk", lpFilePart=0x0) returned 0x53 [0048.230] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0048.230] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\KeUJ5oCueYQJJFzt.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\keuj5ocueyqjjfzt.lnk"), fInfoLevelId=0x0, lpFileInformation=0x2150628 | out: lpFileInformation=0x2150628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2ba5108, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf5ade1d1, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0xf5ade1d1, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x409)) returned 1 [0048.230] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0048.230] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\KeUJ5oCueYQJJFzt.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\KeUJ5oCueYQJJFzt.lnk", lpFilePart=0x0) returned 0x53 [0048.230] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0048.230] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\KeUJ5oCueYQJJFzt.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\keuj5ocueyqjjfzt.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0048.230] GetFileType (hFile=0x448) returned 0x1 [0048.230] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0048.231] GetFileType (hFile=0x448) returned 0x1 [0048.231] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x409 [0048.231] ReadFile (in: hFile=0x448, lpBuffer=0x2150d30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x2150d30*, lpNumberOfBytesRead=0x3be868*=0x409, lpOverlapped=0x0) returned 1 [0048.231] CloseHandle (hObject=0x448) returned 1 [0048.251] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\KeUJ5oCueYQJJFzt.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\KeUJ5oCueYQJJFzt.lnk", lpFilePart=0x0) returned 0x53 [0048.251] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0048.251] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\KeUJ5oCueYQJJFzt.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\keuj5ocueyqjjfzt.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0048.252] GetFileType (hFile=0x448) returned 0x1 [0048.252] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0048.252] GetFileType (hFile=0x448) returned 0x1 [0048.253] WriteFile (in: hFile=0x448, lpBuffer=0x21c9180*, nNumberOfBytesToWrite=0x410, lpNumberOfBytesWritten=0x3be778, lpOverlapped=0x0 | out: lpBuffer=0x21c9180*, lpNumberOfBytesWritten=0x3be778*=0x410, lpOverlapped=0x0) returned 1 [0048.254] CloseHandle (hObject=0x448) returned 1 [0048.255] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\KeUJ5oCueYQJJFzt.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\KeUJ5oCueYQJJFzt.lnk", lpFilePart=0x0) returned 0x53 [0048.255] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\KeUJ5oCueYQJJFzt.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\KeUJ5oCueYQJJFzt.lnk.xuy", lpFilePart=0x0) returned 0x57 [0048.255] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0048.255] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\KeUJ5oCueYQJJFzt.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\keuj5ocueyqjjfzt.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2ba5108, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf5ade1d1, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0x89b2d27, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x410)) returned 1 [0048.255] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0048.255] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\KeUJ5oCueYQJJFzt.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\keuj5ocueyqjjfzt.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\KeUJ5oCueYQJJFzt.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\keuj5ocueyqjjfzt.lnk.xuy")) returned 1 [0048.256] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\kqPHTpgPgkFex.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\kqPHTpgPgkFex.lnk", lpFilePart=0x0) returned 0x50 [0048.256] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0048.256] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\kqPHTpgPgkFex.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\kqphtpgpgkfex.lnk"), fInfoLevelId=0x0, lpFileInformation=0x21ca430 | out: lpFileInformation=0x21ca430*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf483dac4, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf483dac4, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0xf483dac4, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x45e)) returned 1 [0048.256] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0048.256] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\kqPHTpgPgkFex.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\kqPHTpgPgkFex.lnk", lpFilePart=0x0) returned 0x50 [0048.256] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0048.257] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\kqPHTpgPgkFex.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\kqphtpgpgkfex.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0048.257] GetFileType (hFile=0x448) returned 0x1 [0048.257] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0048.257] GetFileType (hFile=0x448) returned 0x1 [0048.257] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x45e [0048.257] ReadFile (in: hFile=0x448, lpBuffer=0x21cab78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x21cab78*, lpNumberOfBytesRead=0x3be868*=0x45e, lpOverlapped=0x0) returned 1 [0048.257] CloseHandle (hObject=0x448) returned 1 [0048.268] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\kqPHTpgPgkFex.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\kqPHTpgPgkFex.lnk", lpFilePart=0x0) returned 0x50 [0048.268] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0048.268] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\kqPHTpgPgkFex.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\kqphtpgpgkfex.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0048.269] GetFileType (hFile=0x448) returned 0x1 [0048.269] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0048.269] GetFileType (hFile=0x448) returned 0x1 [0048.269] WriteFile (in: hFile=0x448, lpBuffer=0x2243150*, nNumberOfBytesToWrite=0x460, lpNumberOfBytesWritten=0x3be778, lpOverlapped=0x0 | out: lpBuffer=0x2243150*, lpNumberOfBytesWritten=0x3be778*=0x460, lpOverlapped=0x0) returned 1 [0048.270] CloseHandle (hObject=0x448) returned 1 [0048.271] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\kqPHTpgPgkFex.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\kqPHTpgPgkFex.lnk", lpFilePart=0x0) returned 0x50 [0048.271] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\kqPHTpgPgkFex.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\kqPHTpgPgkFex.lnk.xuy", lpFilePart=0x0) returned 0x54 [0048.271] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0048.271] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\kqPHTpgPgkFex.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\kqphtpgpgkfex.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf483dac4, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf483dac4, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0x89d8b7d, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x460)) returned 1 [0048.271] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0048.271] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\kqPHTpgPgkFex.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\kqphtpgpgkfex.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\kqPHTpgPgkFex.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\kqphtpgpgkfex.lnk.xuy")) returned 1 [0048.271] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\kscbOO.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\kscbOO.lnk", lpFilePart=0x0) returned 0x49 [0048.271] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0048.271] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\kscbOO.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\kscboo.lnk"), fInfoLevelId=0x0, lpFileInformation=0x2244400 | out: lpFileInformation=0x2244400*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf209e3aa, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf49950fe, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0xf49950fe, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x362)) returned 1 [0048.272] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0048.272] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\kscbOO.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\kscbOO.lnk", lpFilePart=0x0) returned 0x49 [0048.272] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0048.272] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\kscbOO.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\kscboo.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0048.272] GetFileType (hFile=0x448) returned 0x1 [0048.272] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0048.272] GetFileType (hFile=0x448) returned 0x1 [0048.272] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x362 [0048.272] ReadFile (in: hFile=0x448, lpBuffer=0x2244a10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x2244a10*, lpNumberOfBytesRead=0x3be868*=0x362, lpOverlapped=0x0) returned 1 [0048.273] CloseHandle (hObject=0x448) returned 1 [0048.283] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\kscbOO.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\kscbOO.lnk", lpFilePart=0x0) returned 0x49 [0048.283] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0048.283] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\kscbOO.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\kscboo.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0048.285] GetFileType (hFile=0x448) returned 0x1 [0048.285] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0048.285] GetFileType (hFile=0x448) returned 0x1 [0048.285] WriteFile (in: hFile=0x448, lpBuffer=0x22bcb20*, nNumberOfBytesToWrite=0x370, lpNumberOfBytesWritten=0x3be778, lpOverlapped=0x0 | out: lpBuffer=0x22bcb20*, lpNumberOfBytesWritten=0x3be778*=0x370, lpOverlapped=0x0) returned 1 [0048.285] CloseHandle (hObject=0x448) returned 1 [0048.286] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\kscbOO.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\kscbOO.lnk", lpFilePart=0x0) returned 0x49 [0048.286] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\kscbOO.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\kscbOO.lnk.xuy", lpFilePart=0x0) returned 0x4d [0048.286] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0048.286] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\kscbOO.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\kscboo.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf209e3aa, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf49950fe, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0x89feed9, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x370)) returned 1 [0048.286] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0048.287] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\kscbOO.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\kscboo.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\kscbOO.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\kscboo.lnk.xuy")) returned 1 [0048.287] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\l0MLmWCXjKZ.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\l0MLmWCXjKZ.lnk", lpFilePart=0x0) returned 0x4e [0048.287] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0048.287] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\l0MLmWCXjKZ.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\l0mlmwcxjkz.lnk"), fInfoLevelId=0x0, lpFileInformation=0x22bdda0 | out: lpFileInformation=0x22bdda0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2f5ebd6, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf635c783, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0xf635c783, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x24b)) returned 1 [0048.287] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0048.287] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\l0MLmWCXjKZ.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\l0MLmWCXjKZ.lnk", lpFilePart=0x0) returned 0x4e [0048.287] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0048.287] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\l0MLmWCXjKZ.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\l0mlmwcxjkz.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0048.288] GetFileType (hFile=0x448) returned 0x1 [0048.288] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0048.288] GetFileType (hFile=0x448) returned 0x1 [0048.288] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x24b [0048.288] ReadFile (in: hFile=0x448, lpBuffer=0x22be2b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x22be2b8*, lpNumberOfBytesRead=0x3be868*=0x24b, lpOverlapped=0x0) returned 1 [0048.288] CloseHandle (hObject=0x448) returned 1 [0048.298] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\l0MLmWCXjKZ.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\l0MLmWCXjKZ.lnk", lpFilePart=0x0) returned 0x4e [0048.298] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0048.298] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\l0MLmWCXjKZ.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\l0mlmwcxjkz.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0048.299] GetFileType (hFile=0x448) returned 0x1 [0048.299] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0048.299] GetFileType (hFile=0x448) returned 0x1 [0048.299] WriteFile (in: hFile=0x448, lpBuffer=0x2335e30*, nNumberOfBytesToWrite=0x250, lpNumberOfBytesWritten=0x3be778, lpOverlapped=0x0 | out: lpBuffer=0x2335e30*, lpNumberOfBytesWritten=0x3be778*=0x250, lpOverlapped=0x0) returned 1 [0048.300] CloseHandle (hObject=0x448) returned 1 [0048.301] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\l0MLmWCXjKZ.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\l0MLmWCXjKZ.lnk", lpFilePart=0x0) returned 0x4e [0048.301] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\l0MLmWCXjKZ.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\l0MLmWCXjKZ.lnk.xuy", lpFilePart=0x0) returned 0x52 [0048.301] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0048.301] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\l0MLmWCXjKZ.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\l0mlmwcxjkz.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2f5ebd6, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf635c783, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0x8a25080, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x250)) returned 1 [0048.301] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0048.301] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\l0MLmWCXjKZ.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\l0mlmwcxjkz.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\l0MLmWCXjKZ.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\l0mlmwcxjkz.lnk.xuy")) returned 1 [0048.302] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\L0VH.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\L0VH.lnk", lpFilePart=0x0) returned 0x47 [0048.302] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0048.302] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\L0VH.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\l0vh.lnk"), fInfoLevelId=0x0, lpFileInformation=0x23370c8 | out: lpFileInformation=0x23370c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf39c9615, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf39c9615, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0xf39c9615, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x4c9)) returned 1 [0048.302] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0048.302] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\L0VH.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\L0VH.lnk", lpFilePart=0x0) returned 0x47 [0048.302] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0048.302] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\L0VH.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\l0vh.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0048.302] GetFileType (hFile=0x448) returned 0x1 [0048.302] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0048.302] GetFileType (hFile=0x448) returned 0x1 [0048.302] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x4c9 [0048.302] ReadFile (in: hFile=0x448, lpBuffer=0x2337830, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x2337830*, lpNumberOfBytesRead=0x3be868*=0x4c9, lpOverlapped=0x0) returned 1 [0048.302] CloseHandle (hObject=0x448) returned 1 [0048.344] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\L0VH.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\L0VH.lnk", lpFilePart=0x0) returned 0x47 [0048.344] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0048.344] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\L0VH.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\l0vh.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0048.345] GetFileType (hFile=0x448) returned 0x1 [0048.345] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0048.345] GetFileType (hFile=0x448) returned 0x1 [0048.345] WriteFile (in: hFile=0x448, lpBuffer=0x21b12f0*, nNumberOfBytesToWrite=0x4d0, lpNumberOfBytesWritten=0x3be778, lpOverlapped=0x0 | out: lpBuffer=0x21b12f0*, lpNumberOfBytesWritten=0x3be778*=0x4d0, lpOverlapped=0x0) returned 1 [0048.346] CloseHandle (hObject=0x448) returned 1 [0048.346] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\L0VH.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\L0VH.lnk", lpFilePart=0x0) returned 0x47 [0048.346] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\L0VH.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\L0VH.lnk.xuy", lpFilePart=0x0) returned 0x4b [0048.346] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0048.346] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\L0VH.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\l0vh.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf39c9615, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf39c9615, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0x8a97988, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x4d0)) returned 1 [0048.346] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0048.347] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\L0VH.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\l0vh.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\L0VH.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\l0vh.lnk.xuy")) returned 1 [0048.347] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\L5g5B6.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\L5g5B6.lnk", lpFilePart=0x0) returned 0x49 [0048.347] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0048.347] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\L5g5B6.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\l5g5b6.lnk"), fInfoLevelId=0x0, lpFileInformation=0x21b2558 | out: lpFileInformation=0x21b2558*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5e4b672, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf5e4b672, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0xf5e4b672, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x3e5)) returned 1 [0048.347] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0048.347] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\L5g5B6.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\L5g5B6.lnk", lpFilePart=0x0) returned 0x49 [0048.347] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0048.347] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\L5g5B6.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\l5g5b6.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0048.348] GetFileType (hFile=0x448) returned 0x1 [0048.348] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0048.348] GetFileType (hFile=0x448) returned 0x1 [0048.348] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x3e5 [0048.348] ReadFile (in: hFile=0x448, lpBuffer=0x21b2be8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x21b2be8*, lpNumberOfBytesRead=0x3be868*=0x3e5, lpOverlapped=0x0) returned 1 [0048.348] CloseHandle (hObject=0x448) returned 1 [0048.359] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\L5g5B6.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\L5g5B6.lnk", lpFilePart=0x0) returned 0x49 [0048.359] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0048.359] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\L5g5B6.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\l5g5b6.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0048.360] GetFileType (hFile=0x448) returned 0x1 [0048.360] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0048.360] GetFileType (hFile=0x448) returned 0x1 [0048.360] WriteFile (in: hFile=0x448, lpBuffer=0x222af78*, nNumberOfBytesToWrite=0x3f0, lpNumberOfBytesWritten=0x3be778, lpOverlapped=0x0 | out: lpBuffer=0x222af78*, lpNumberOfBytesWritten=0x3be778*=0x3f0, lpOverlapped=0x0) returned 1 [0048.361] CloseHandle (hObject=0x448) returned 1 [0048.361] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\L5g5B6.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\L5g5B6.lnk", lpFilePart=0x0) returned 0x49 [0048.362] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\L5g5B6.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\L5g5B6.lnk.xuy", lpFilePart=0x0) returned 0x4d [0048.362] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0048.362] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\L5g5B6.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\l5g5b6.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5e4b672, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf5e4b672, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0x8abde26, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x3f0)) returned 1 [0048.362] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0048.362] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\L5g5B6.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\l5g5b6.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\L5g5B6.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\l5g5b6.lnk.xuy")) returned 1 [0048.362] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\lN-gSBVjXH7S4Quo.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\lN-gSBVjXH7S4Quo.lnk", lpFilePart=0x0) returned 0x53 [0048.362] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0048.362] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\lN-gSBVjXH7S4Quo.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\ln-gsbvjxh7s4quo.lnk"), fInfoLevelId=0x0, lpFileInformation=0x222c1f8 | out: lpFileInformation=0x222c1f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf58c7f9c, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf58c7f9c, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0xf58c7f9c, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x46d)) returned 1 [0048.363] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0048.363] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\lN-gSBVjXH7S4Quo.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\lN-gSBVjXH7S4Quo.lnk", lpFilePart=0x0) returned 0x53 [0048.363] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0048.363] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\lN-gSBVjXH7S4Quo.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\ln-gsbvjxh7s4quo.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0048.363] GetFileType (hFile=0x448) returned 0x1 [0048.363] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0048.363] GetFileType (hFile=0x448) returned 0x1 [0048.363] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x46d [0048.363] ReadFile (in: hFile=0x448, lpBuffer=0x222c960, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x222c960*, lpNumberOfBytesRead=0x3be868*=0x46d, lpOverlapped=0x0) returned 1 [0048.363] CloseHandle (hObject=0x448) returned 1 [0048.374] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\lN-gSBVjXH7S4Quo.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\lN-gSBVjXH7S4Quo.lnk", lpFilePart=0x0) returned 0x53 [0048.374] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0048.374] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\lN-gSBVjXH7S4Quo.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\ln-gsbvjxh7s4quo.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0048.375] GetFileType (hFile=0x448) returned 0x1 [0048.375] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0048.375] GetFileType (hFile=0x448) returned 0x1 [0048.375] WriteFile (in: hFile=0x448, lpBuffer=0x22a4f90*, nNumberOfBytesToWrite=0x470, lpNumberOfBytesWritten=0x3be778, lpOverlapped=0x0 | out: lpBuffer=0x22a4f90*, lpNumberOfBytesWritten=0x3be778*=0x470, lpOverlapped=0x0) returned 1 [0048.376] CloseHandle (hObject=0x448) returned 1 [0048.376] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\lN-gSBVjXH7S4Quo.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\lN-gSBVjXH7S4Quo.lnk", lpFilePart=0x0) returned 0x53 [0048.376] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\lN-gSBVjXH7S4Quo.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\lN-gSBVjXH7S4Quo.lnk.xuy", lpFilePart=0x0) returned 0x57 [0048.376] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0048.377] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\lN-gSBVjXH7S4Quo.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\ln-gsbvjxh7s4quo.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf58c7f9c, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf58c7f9c, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0x8ae3dc5, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x470)) returned 1 [0048.377] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0048.377] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\lN-gSBVjXH7S4Quo.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\ln-gsbvjxh7s4quo.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\lN-gSBVjXH7S4Quo.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\ln-gsbvjxh7s4quo.lnk.xuy")) returned 1 [0048.377] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\LzxPE9bRZsj0N.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\LzxPE9bRZsj0N.lnk", lpFilePart=0x0) returned 0x50 [0048.377] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0048.377] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\LzxPE9bRZsj0N.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\lzxpe9brzsj0n.lnk"), fInfoLevelId=0x0, lpFileInformation=0x22a6240 | out: lpFileInformation=0x22a6240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf27eb60d, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf5d1a431, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0xf5d1a431, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x393)) returned 1 [0048.377] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0048.377] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\LzxPE9bRZsj0N.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\LzxPE9bRZsj0N.lnk", lpFilePart=0x0) returned 0x50 [0048.377] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0048.377] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\LzxPE9bRZsj0N.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\lzxpe9brzsj0n.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0048.378] GetFileType (hFile=0x448) returned 0x1 [0048.378] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0048.378] GetFileType (hFile=0x448) returned 0x1 [0048.378] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x393 [0048.378] ReadFile (in: hFile=0x448, lpBuffer=0x22a68c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x22a68c0*, lpNumberOfBytesRead=0x3be868*=0x393, lpOverlapped=0x0) returned 1 [0048.378] CloseHandle (hObject=0x448) returned 1 [0048.389] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\LzxPE9bRZsj0N.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\LzxPE9bRZsj0N.lnk", lpFilePart=0x0) returned 0x50 [0048.389] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0048.389] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\LzxPE9bRZsj0N.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\lzxpe9brzsj0n.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0048.390] GetFileType (hFile=0x448) returned 0x1 [0048.390] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0048.390] GetFileType (hFile=0x448) returned 0x1 [0048.390] WriteFile (in: hFile=0x448, lpBuffer=0x231eae0*, nNumberOfBytesToWrite=0x3a0, lpNumberOfBytesWritten=0x3be778, lpOverlapped=0x0 | out: lpBuffer=0x231eae0*, lpNumberOfBytesWritten=0x3be778*=0x3a0, lpOverlapped=0x0) returned 1 [0048.391] CloseHandle (hObject=0x448) returned 1 [0048.391] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\LzxPE9bRZsj0N.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\LzxPE9bRZsj0N.lnk", lpFilePart=0x0) returned 0x50 [0048.391] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\LzxPE9bRZsj0N.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\LzxPE9bRZsj0N.lnk.xuy", lpFilePart=0x0) returned 0x54 [0048.391] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0048.391] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\LzxPE9bRZsj0N.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\lzxpe9brzsj0n.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf27eb60d, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf5d1a431, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0x8b09feb, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x3a0)) returned 1 [0048.391] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0048.391] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\LzxPE9bRZsj0N.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\lzxpe9brzsj0n.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\LzxPE9bRZsj0N.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\lzxpe9brzsj0n.lnk.xuy")) returned 1 [0048.392] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\maZWJw8hU.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\maZWJw8hU.lnk", lpFilePart=0x0) returned 0x4c [0048.392] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0048.392] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\maZWJw8hU.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\mazwjw8hu.lnk"), fInfoLevelId=0x0, lpFileInformation=0x231fd90 | out: lpFileInformation=0x231fd90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf49bb3a3, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf49bb3a3, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0xf49bb3a3, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x3bc)) returned 1 [0048.392] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0048.392] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\maZWJw8hU.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\maZWJw8hU.lnk", lpFilePart=0x0) returned 0x4c [0048.392] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0048.392] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\maZWJw8hU.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\mazwjw8hu.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0048.392] GetFileType (hFile=0x448) returned 0x1 [0048.392] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0048.392] GetFileType (hFile=0x448) returned 0x1 [0048.392] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x3bc [0048.393] ReadFile (in: hFile=0x448, lpBuffer=0x2320418, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x2320418*, lpNumberOfBytesRead=0x3be868*=0x3bc, lpOverlapped=0x0) returned 1 [0048.393] CloseHandle (hObject=0x448) returned 1 [0048.448] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\maZWJw8hU.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\maZWJw8hU.lnk", lpFilePart=0x0) returned 0x4c [0048.449] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0048.449] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\maZWJw8hU.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\mazwjw8hu.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0048.450] GetFileType (hFile=0x448) returned 0x1 [0048.450] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0048.450] GetFileType (hFile=0x448) returned 0x1 [0048.450] WriteFile (in: hFile=0x448, lpBuffer=0x2199a38*, nNumberOfBytesToWrite=0x3c0, lpNumberOfBytesWritten=0x3be778, lpOverlapped=0x0 | out: lpBuffer=0x2199a38*, lpNumberOfBytesWritten=0x3be778*=0x3c0, lpOverlapped=0x0) returned 1 [0048.450] CloseHandle (hObject=0x448) returned 1 [0048.451] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\maZWJw8hU.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\maZWJw8hU.lnk", lpFilePart=0x0) returned 0x4c [0048.451] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\maZWJw8hU.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\maZWJw8hU.lnk.xuy", lpFilePart=0x0) returned 0x50 [0048.451] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0048.451] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\maZWJw8hU.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\mazwjw8hu.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf49bb3a3, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf49bb3a3, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0x8ba28c3, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x3c0)) returned 1 [0048.451] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0048.451] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\maZWJw8hU.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\mazwjw8hu.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\maZWJw8hU.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\mazwjw8hu.lnk.xuy")) returned 1 [0048.452] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\MGnZQV1D.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\MGnZQV1D.lnk", lpFilePart=0x0) returned 0x4b [0048.452] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0048.452] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\MGnZQV1D.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\mgnzqv1d.lnk"), fInfoLevelId=0x0, lpFileInformation=0x219acd0 | out: lpFileInformation=0x219acd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5be911c, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf5be911c, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0xf5be911c, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x4df)) returned 1 [0048.452] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0048.452] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\MGnZQV1D.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\MGnZQV1D.lnk", lpFilePart=0x0) returned 0x4b [0048.452] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0048.452] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\MGnZQV1D.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\mgnzqv1d.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0048.452] GetFileType (hFile=0x448) returned 0x1 [0048.452] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0048.452] GetFileType (hFile=0x448) returned 0x1 [0048.452] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x4df [0048.452] ReadFile (in: hFile=0x448, lpBuffer=0x219b468, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x219b468*, lpNumberOfBytesRead=0x3be868*=0x4df, lpOverlapped=0x0) returned 1 [0048.452] CloseHandle (hObject=0x448) returned 1 [0048.463] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\MGnZQV1D.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\MGnZQV1D.lnk", lpFilePart=0x0) returned 0x4b [0048.463] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0048.463] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\MGnZQV1D.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\mgnzqv1d.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0048.464] GetFileType (hFile=0x448) returned 0x1 [0048.464] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0048.464] GetFileType (hFile=0x448) returned 0x1 [0048.464] WriteFile (in: hFile=0x448, lpBuffer=0x2213ca8*, nNumberOfBytesToWrite=0x4e0, lpNumberOfBytesWritten=0x3be778, lpOverlapped=0x0 | out: lpBuffer=0x2213ca8*, lpNumberOfBytesWritten=0x3be778*=0x4e0, lpOverlapped=0x0) returned 1 [0048.465] CloseHandle (hObject=0x448) returned 1 [0048.465] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\MGnZQV1D.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\MGnZQV1D.lnk", lpFilePart=0x0) returned 0x4b [0048.465] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\MGnZQV1D.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\MGnZQV1D.lnk.xuy", lpFilePart=0x0) returned 0x4f [0048.465] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0048.466] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\MGnZQV1D.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\mgnzqv1d.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5be911c, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf5be911c, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0x8bc8e24, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x4e0)) returned 1 [0048.466] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0048.466] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\MGnZQV1D.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\mgnzqv1d.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\MGnZQV1D.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\mgnzqv1d.lnk.xuy")) returned 1 [0048.466] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\mSFbzT.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\mSFbzT.lnk", lpFilePart=0x0) returned 0x49 [0048.466] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0048.466] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\mSFbzT.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\msfbzt.lnk"), fInfoLevelId=0x0, lpFileInformation=0x2214f28 | out: lpFileInformation=0x2214f28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5b04438, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf5b04438, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0xf5b04438, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x320)) returned 1 [0048.466] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0048.466] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\mSFbzT.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\mSFbzT.lnk", lpFilePart=0x0) returned 0x49 [0048.466] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0048.466] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\mSFbzT.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\msfbzt.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0048.467] GetFileType (hFile=0x448) returned 0x1 [0048.467] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0048.467] GetFileType (hFile=0x448) returned 0x1 [0048.467] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x320 [0048.467] ReadFile (in: hFile=0x448, lpBuffer=0x22154f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x22154f0*, lpNumberOfBytesRead=0x3be868*=0x320, lpOverlapped=0x0) returned 1 [0048.467] CloseHandle (hObject=0x448) returned 1 [0048.477] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\mSFbzT.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\mSFbzT.lnk", lpFilePart=0x0) returned 0x49 [0048.477] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0048.477] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\mSFbzT.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\msfbzt.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0048.478] GetFileType (hFile=0x448) returned 0x1 [0048.478] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0048.478] GetFileType (hFile=0x448) returned 0x1 [0048.478] WriteFile (in: hFile=0x448, lpBuffer=0x228d4c0*, nNumberOfBytesToWrite=0x330, lpNumberOfBytesWritten=0x3be778, lpOverlapped=0x0 | out: lpBuffer=0x228d4c0*, lpNumberOfBytesWritten=0x3be778*=0x330, lpOverlapped=0x0) returned 1 [0048.479] CloseHandle (hObject=0x448) returned 1 [0048.479] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\mSFbzT.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\mSFbzT.lnk", lpFilePart=0x0) returned 0x49 [0048.479] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\mSFbzT.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\mSFbzT.lnk.xuy", lpFilePart=0x0) returned 0x4d [0048.479] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0048.479] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\mSFbzT.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\msfbzt.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5b04438, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf5b04438, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0x8beed66, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x330)) returned 1 [0048.479] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0048.479] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\mSFbzT.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\msfbzt.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\mSFbzT.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\msfbzt.lnk.xuy")) returned 1 [0048.480] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Music.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Music.lnk", lpFilePart=0x0) returned 0x48 [0048.480] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0048.480] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Music.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\music.lnk"), fInfoLevelId=0x0, lpFileInformation=0x228e740 | out: lpFileInformation=0x228e740*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf49e15cb, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf5fa2bb0, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0xf5fa2bb0, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x2f2)) returned 1 [0048.480] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0048.480] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Music.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Music.lnk", lpFilePart=0x0) returned 0x48 [0048.480] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0048.480] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Music.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\music.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0048.480] GetFileType (hFile=0x448) returned 0x1 [0048.480] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0048.480] GetFileType (hFile=0x448) returned 0x1 [0048.480] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x2f2 [0048.481] ReadFile (in: hFile=0x448, lpBuffer=0x228ece0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x228ece0*, lpNumberOfBytesRead=0x3be868*=0x2f2, lpOverlapped=0x0) returned 1 [0048.481] CloseHandle (hObject=0x448) returned 1 [0048.490] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Music.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Music.lnk", lpFilePart=0x0) returned 0x48 [0048.490] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0048.491] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Music.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\music.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0048.492] GetFileType (hFile=0x448) returned 0x1 [0048.492] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0048.492] GetFileType (hFile=0x448) returned 0x1 [0048.492] WriteFile (in: hFile=0x448, lpBuffer=0x2306bc0*, nNumberOfBytesToWrite=0x300, lpNumberOfBytesWritten=0x3be778, lpOverlapped=0x0 | out: lpBuffer=0x2306bc0*, lpNumberOfBytesWritten=0x3be778*=0x300, lpOverlapped=0x0) returned 1 [0048.493] CloseHandle (hObject=0x448) returned 1 [0048.493] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Music.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Music.lnk", lpFilePart=0x0) returned 0x48 [0048.493] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Music.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Music.lnk.xuy", lpFilePart=0x0) returned 0x4c [0048.493] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0048.493] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Music.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\music.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf49e15cb, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf5fa2bb0, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0x8c14fa6, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x300)) returned 1 [0048.494] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0048.494] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Music.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\music.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Music.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\music.lnk.xuy")) returned 1 [0048.494] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\NGHgpHRGY.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\NGHgpHRGY.lnk", lpFilePart=0x0) returned 0x4c [0048.494] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0048.494] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\NGHgpHRGY.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\nghgphrgy.lnk"), fInfoLevelId=0x0, lpFileInformation=0x2307e40 | out: lpFileInformation=0x2307e40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf27c544c, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf5fef165, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0xf5fef165, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x36c)) returned 1 [0048.494] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0048.494] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\NGHgpHRGY.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\NGHgpHRGY.lnk", lpFilePart=0x0) returned 0x4c [0048.494] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0048.495] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\NGHgpHRGY.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\nghgphrgy.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0048.495] GetFileType (hFile=0x448) returned 0x1 [0048.495] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0048.495] GetFileType (hFile=0x448) returned 0x1 [0048.495] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x36c [0048.495] ReadFile (in: hFile=0x448, lpBuffer=0x2308478, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x2308478*, lpNumberOfBytesRead=0x3be868*=0x36c, lpOverlapped=0x0) returned 1 [0048.495] CloseHandle (hObject=0x448) returned 1 [0048.539] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\NGHgpHRGY.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\NGHgpHRGY.lnk", lpFilePart=0x0) returned 0x4c [0048.539] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0048.540] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\NGHgpHRGY.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\nghgphrgy.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0048.541] GetFileType (hFile=0x448) returned 0x1 [0048.541] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0048.541] GetFileType (hFile=0x448) returned 0x1 [0048.541] WriteFile (in: hFile=0x448, lpBuffer=0x2181698*, nNumberOfBytesToWrite=0x370, lpNumberOfBytesWritten=0x3be778, lpOverlapped=0x0 | out: lpBuffer=0x2181698*, lpNumberOfBytesWritten=0x3be778*=0x370, lpOverlapped=0x0) returned 1 [0048.544] CloseHandle (hObject=0x448) returned 1 [0048.544] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\NGHgpHRGY.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\NGHgpHRGY.lnk", lpFilePart=0x0) returned 0x4c [0048.544] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\NGHgpHRGY.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\NGHgpHRGY.lnk.xuy", lpFilePart=0x0) returned 0x50 [0048.544] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0048.545] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\NGHgpHRGY.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\nghgphrgy.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf27c544c, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf5fef165, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0x8c876ef, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x370)) returned 1 [0048.545] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0048.545] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\NGHgpHRGY.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\nghgphrgy.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\NGHgpHRGY.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\nghgphrgy.lnk.xuy")) returned 1 [0048.545] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\n_6iIbpL-Dw.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\n_6iIbpL-Dw.lnk", lpFilePart=0x0) returned 0x4e [0048.545] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0048.545] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\n_6iIbpL-Dw.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\n_6iibpl-dw.lnk"), fInfoLevelId=0x0, lpFileInformation=0x2182930 | out: lpFileInformation=0x2182930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5fef165, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf5fef165, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0xf5fef165, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x454)) returned 1 [0048.545] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0048.545] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\n_6iIbpL-Dw.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\n_6iIbpL-Dw.lnk", lpFilePart=0x0) returned 0x4e [0048.545] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0048.545] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\n_6iIbpL-Dw.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\n_6iibpl-dw.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0048.546] GetFileType (hFile=0x448) returned 0x1 [0048.546] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0048.546] GetFileType (hFile=0x448) returned 0x1 [0048.546] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x454 [0048.546] ReadFile (in: hFile=0x448, lpBuffer=0x2183050, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x2183050*, lpNumberOfBytesRead=0x3be868*=0x454, lpOverlapped=0x0) returned 1 [0048.546] CloseHandle (hObject=0x448) returned 1 [0048.557] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\n_6iIbpL-Dw.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\n_6iIbpL-Dw.lnk", lpFilePart=0x0) returned 0x4e [0048.557] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0048.557] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\n_6iIbpL-Dw.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\n_6iibpl-dw.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0048.558] GetFileType (hFile=0x448) returned 0x1 [0048.558] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0048.558] GetFileType (hFile=0x448) returned 0x1 [0048.558] WriteFile (in: hFile=0x448, lpBuffer=0x21fb620*, nNumberOfBytesToWrite=0x460, lpNumberOfBytesWritten=0x3be778, lpOverlapped=0x0 | out: lpBuffer=0x21fb620*, lpNumberOfBytesWritten=0x3be778*=0x460, lpOverlapped=0x0) returned 1 [0048.559] CloseHandle (hObject=0x448) returned 1 [0048.559] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\n_6iIbpL-Dw.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\n_6iIbpL-Dw.lnk", lpFilePart=0x0) returned 0x4e [0048.559] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\n_6iIbpL-Dw.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\n_6iIbpL-Dw.lnk.xuy", lpFilePart=0x0) returned 0x52 [0048.559] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0048.559] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\n_6iIbpL-Dw.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\n_6iibpl-dw.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5fef165, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf5fef165, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0x8cadcb5, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x460)) returned 1 [0048.560] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0048.560] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\n_6iIbpL-Dw.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\n_6iibpl-dw.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\n_6iIbpL-Dw.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\n_6iibpl-dw.lnk.xuy")) returned 1 [0048.560] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ODTY47iV0R.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ODTY47iV0R.lnk", lpFilePart=0x0) returned 0x4d [0048.560] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0048.560] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ODTY47iV0R.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\odty47iv0r.lnk"), fInfoLevelId=0x0, lpFileInformation=0x21fc8b8 | out: lpFileInformation=0x21fc8b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf432cd57, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf432cd57, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0xf432cd57, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x441)) returned 1 [0048.560] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0048.560] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ODTY47iV0R.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ODTY47iV0R.lnk", lpFilePart=0x0) returned 0x4d [0048.560] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0048.560] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ODTY47iV0R.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\odty47iv0r.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0048.561] GetFileType (hFile=0x448) returned 0x1 [0048.561] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0048.561] GetFileType (hFile=0x448) returned 0x1 [0048.561] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x441 [0048.561] ReadFile (in: hFile=0x448, lpBuffer=0x21fcfc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x21fcfc8*, lpNumberOfBytesRead=0x3be868*=0x441, lpOverlapped=0x0) returned 1 [0048.561] CloseHandle (hObject=0x448) returned 1 [0048.571] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ODTY47iV0R.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ODTY47iV0R.lnk", lpFilePart=0x0) returned 0x4d [0048.571] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0048.571] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ODTY47iV0R.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\odty47iv0r.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0048.572] GetFileType (hFile=0x448) returned 0x1 [0048.572] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0048.572] GetFileType (hFile=0x448) returned 0x1 [0048.572] WriteFile (in: hFile=0x448, lpBuffer=0x2275548*, nNumberOfBytesToWrite=0x450, lpNumberOfBytesWritten=0x3be778, lpOverlapped=0x0 | out: lpBuffer=0x2275548*, lpNumberOfBytesWritten=0x3be778*=0x450, lpOverlapped=0x0) returned 1 [0048.573] CloseHandle (hObject=0x448) returned 1 [0048.573] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ODTY47iV0R.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ODTY47iV0R.lnk", lpFilePart=0x0) returned 0x4d [0048.573] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ODTY47iV0R.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ODTY47iV0R.lnk.xuy", lpFilePart=0x0) returned 0x51 [0048.573] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0048.573] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ODTY47iV0R.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\odty47iv0r.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf432cd57, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf432cd57, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0x8cd3a69, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x450)) returned 1 [0048.573] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0048.573] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ODTY47iV0R.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\odty47iv0r.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ODTY47iV0R.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\odty47iv0r.lnk.xuy")) returned 1 [0048.574] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\okHmUs.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\okHmUs.lnk", lpFilePart=0x0) returned 0x49 [0048.574] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0048.574] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\okHmUs.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\okhmus.lnk"), fInfoLevelId=0x0, lpFileInformation=0x22767e0 | out: lpFileInformation=0x22767e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf63ceecc, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf63ceecc, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0xf63ceecc, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x3e5)) returned 1 [0048.574] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0048.574] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\okHmUs.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\okHmUs.lnk", lpFilePart=0x0) returned 0x49 [0048.574] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0048.574] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\okHmUs.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\okhmus.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0048.574] GetFileType (hFile=0x448) returned 0x1 [0048.575] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0048.575] GetFileType (hFile=0x448) returned 0x1 [0048.575] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x3e5 [0048.575] ReadFile (in: hFile=0x448, lpBuffer=0x2276e70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x2276e70*, lpNumberOfBytesRead=0x3be868*=0x3e5, lpOverlapped=0x0) returned 1 [0048.575] CloseHandle (hObject=0x448) returned 1 [0048.584] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\okHmUs.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\okHmUs.lnk", lpFilePart=0x0) returned 0x49 [0048.584] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0048.585] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\okHmUs.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\okhmus.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0048.586] GetFileType (hFile=0x448) returned 0x1 [0048.586] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0048.586] GetFileType (hFile=0x448) returned 0x1 [0048.586] WriteFile (in: hFile=0x448, lpBuffer=0x22ef200*, nNumberOfBytesToWrite=0x3f0, lpNumberOfBytesWritten=0x3be778, lpOverlapped=0x0 | out: lpBuffer=0x22ef200*, lpNumberOfBytesWritten=0x3be778*=0x3f0, lpOverlapped=0x0) returned 1 [0048.587] CloseHandle (hObject=0x448) returned 1 [0048.587] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\okHmUs.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\okHmUs.lnk", lpFilePart=0x0) returned 0x49 [0048.587] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\okHmUs.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\okHmUs.lnk.xuy", lpFilePart=0x0) returned 0x4d [0048.587] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0048.587] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\okHmUs.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\okhmus.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf63ceecc, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf63ceecc, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0x8cfbc76, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x3f0)) returned 1 [0048.587] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0048.588] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\okHmUs.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\okhmus.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\okHmUs.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\okhmus.lnk.xuy")) returned 1 [0048.588] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\OMrih.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\OMrih.lnk", lpFilePart=0x0) returned 0x48 [0048.588] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0048.588] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\OMrih.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\omrih.lnk"), fInfoLevelId=0x0, lpFileInformation=0x22f0480 | out: lpFileInformation=0x22f0480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1bb35ce, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf62ea069, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0xf62ea069, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x36c)) returned 1 [0048.588] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0048.588] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\OMrih.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\OMrih.lnk", lpFilePart=0x0) returned 0x48 [0048.588] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0048.588] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\OMrih.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\omrih.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0048.588] GetFileType (hFile=0x448) returned 0x1 [0048.588] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0048.589] GetFileType (hFile=0x448) returned 0x1 [0048.589] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x36c [0048.589] ReadFile (in: hFile=0x448, lpBuffer=0x22f0a98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x22f0a98*, lpNumberOfBytesRead=0x3be868*=0x36c, lpOverlapped=0x0) returned 1 [0048.589] CloseHandle (hObject=0x448) returned 1 [0048.627] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\OMrih.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\OMrih.lnk", lpFilePart=0x0) returned 0x48 [0048.627] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0048.627] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\OMrih.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\omrih.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0048.628] GetFileType (hFile=0x448) returned 0x1 [0048.628] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0048.628] GetFileType (hFile=0x448) returned 0x1 [0048.628] WriteFile (in: hFile=0x448, lpBuffer=0x2169c38*, nNumberOfBytesToWrite=0x370, lpNumberOfBytesWritten=0x3be778, lpOverlapped=0x0 | out: lpBuffer=0x2169c38*, lpNumberOfBytesWritten=0x3be778*=0x370, lpOverlapped=0x0) returned 1 [0048.629] CloseHandle (hObject=0x448) returned 1 [0048.629] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\OMrih.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\OMrih.lnk", lpFilePart=0x0) returned 0x48 [0048.629] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\OMrih.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\OMrih.lnk.xuy", lpFilePart=0x0) returned 0x4c [0048.629] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0048.629] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\OMrih.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\omrih.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1bb35ce, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf62ea069, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0x8d463dc, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x370)) returned 1 [0048.630] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0048.630] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\OMrih.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\omrih.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\OMrih.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\omrih.lnk.xuy")) returned 1 [0048.630] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\oSqIZuo5iz2iuOqFR.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\oSqIZuo5iz2iuOqFR.lnk", lpFilePart=0x0) returned 0x54 [0048.630] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0048.630] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\oSqIZuo5iz2iuOqFR.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\osqizuo5iz2iuoqfr.lnk"), fInfoLevelId=0x0, lpFileInformation=0x216aeb8 | out: lpFileInformation=0x216aeb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5b76cf2, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf5b76cf2, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0xf5b76cf2, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x404)) returned 1 [0048.630] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0048.630] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\oSqIZuo5iz2iuOqFR.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\oSqIZuo5iz2iuOqFR.lnk", lpFilePart=0x0) returned 0x54 [0048.631] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0048.631] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\oSqIZuo5iz2iuOqFR.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\osqizuo5iz2iuoqfr.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0048.631] GetFileType (hFile=0x448) returned 0x1 [0048.631] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0048.631] GetFileType (hFile=0x448) returned 0x1 [0048.631] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x404 [0048.631] ReadFile (in: hFile=0x448, lpBuffer=0x216b5c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x216b5c8*, lpNumberOfBytesRead=0x3be868*=0x404, lpOverlapped=0x0) returned 1 [0048.631] CloseHandle (hObject=0x448) returned 1 [0048.641] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\oSqIZuo5iz2iuOqFR.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\oSqIZuo5iz2iuOqFR.lnk", lpFilePart=0x0) returned 0x54 [0048.641] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0048.641] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\oSqIZuo5iz2iuOqFR.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\osqizuo5iz2iuoqfr.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0048.642] GetFileType (hFile=0x448) returned 0x1 [0048.642] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0048.642] GetFileType (hFile=0x448) returned 0x1 [0048.642] WriteFile (in: hFile=0x448, lpBuffer=0x21e3a28*, nNumberOfBytesToWrite=0x410, lpNumberOfBytesWritten=0x3be778, lpOverlapped=0x0 | out: lpBuffer=0x21e3a28*, lpNumberOfBytesWritten=0x3be778*=0x410, lpOverlapped=0x0) returned 1 [0048.643] CloseHandle (hObject=0x448) returned 1 [0048.644] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\oSqIZuo5iz2iuOqFR.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\oSqIZuo5iz2iuOqFR.lnk", lpFilePart=0x0) returned 0x54 [0048.644] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\oSqIZuo5iz2iuOqFR.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\oSqIZuo5iz2iuOqFR.lnk.xuy", lpFilePart=0x0) returned 0x58 [0048.644] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0048.644] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\oSqIZuo5iz2iuOqFR.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\osqizuo5iz2iuoqfr.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5b76cf2, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf5b76cf2, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0x8d6c421, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x410)) returned 1 [0048.644] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0048.644] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\oSqIZuo5iz2iuOqFR.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\osqizuo5iz2iuoqfr.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\oSqIZuo5iz2iuOqFR.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\osqizuo5iz2iuoqfr.lnk.xuy")) returned 1 [0048.644] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\phsoFQ.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\phsoFQ.lnk", lpFilePart=0x0) returned 0x49 [0048.644] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0048.644] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\phsoFQ.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\phsofq.lnk"), fInfoLevelId=0x0, lpFileInformation=0x21e4cf0 | out: lpFileInformation=0x21e4cf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4889fac, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf4889fac, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0xf4889fac, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x4b0)) returned 1 [0048.645] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0048.645] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\phsoFQ.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\phsoFQ.lnk", lpFilePart=0x0) returned 0x49 [0048.645] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0048.645] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\phsoFQ.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\phsofq.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0048.645] GetFileType (hFile=0x448) returned 0x1 [0048.645] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0048.645] GetFileType (hFile=0x448) returned 0x1 [0048.645] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x4b0 [0048.645] ReadFile (in: hFile=0x448, lpBuffer=0x21e5448, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x21e5448*, lpNumberOfBytesRead=0x3be868*=0x4b0, lpOverlapped=0x0) returned 1 [0048.645] CloseHandle (hObject=0x448) returned 1 [0048.656] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\phsoFQ.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\phsoFQ.lnk", lpFilePart=0x0) returned 0x49 [0048.656] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0048.656] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\phsoFQ.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\phsofq.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0048.657] GetFileType (hFile=0x448) returned 0x1 [0048.657] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0048.657] GetFileType (hFile=0x448) returned 0x1 [0048.657] WriteFile (in: hFile=0x448, lpBuffer=0x225dbe8*, nNumberOfBytesToWrite=0x4c0, lpNumberOfBytesWritten=0x3be778, lpOverlapped=0x0 | out: lpBuffer=0x225dbe8*, lpNumberOfBytesWritten=0x3be778*=0x4c0, lpOverlapped=0x0) returned 1 [0048.657] CloseHandle (hObject=0x448) returned 1 [0048.658] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\phsoFQ.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\phsoFQ.lnk", lpFilePart=0x0) returned 0x49 [0048.658] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\phsoFQ.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\phsoFQ.lnk.xuy", lpFilePart=0x0) returned 0x4d [0048.658] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0048.658] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\phsoFQ.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\phsofq.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4889fac, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf4889fac, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0x8d92b1b, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x4c0)) returned 1 [0048.659] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0048.659] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\phsoFQ.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\phsofq.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\phsoFQ.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\phsofq.lnk.xuy")) returned 1 [0048.659] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Pictures.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Pictures.lnk", lpFilePart=0x0) returned 0x4b [0048.659] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0048.659] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Pictures.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\pictures.lnk"), fInfoLevelId=0x0, lpFileInformation=0x225ee68 | out: lpFileInformation=0x225ee68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2f12698, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf6120370, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0xf6120370, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x305)) returned 1 [0048.659] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0048.659] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Pictures.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Pictures.lnk", lpFilePart=0x0) returned 0x4b [0048.659] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0048.659] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Pictures.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\pictures.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0048.660] GetFileType (hFile=0x448) returned 0x1 [0048.660] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0048.660] GetFileType (hFile=0x448) returned 0x1 [0048.660] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x305 [0048.660] ReadFile (in: hFile=0x448, lpBuffer=0x225f428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x225f428*, lpNumberOfBytesRead=0x3be868*=0x305, lpOverlapped=0x0) returned 1 [0048.660] CloseHandle (hObject=0x448) returned 1 [0048.670] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Pictures.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Pictures.lnk", lpFilePart=0x0) returned 0x4b [0048.670] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0048.670] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Pictures.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\pictures.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0048.671] GetFileType (hFile=0x448) returned 0x1 [0048.671] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0048.671] GetFileType (hFile=0x448) returned 0x1 [0048.671] WriteFile (in: hFile=0x448, lpBuffer=0x22d7360*, nNumberOfBytesToWrite=0x310, lpNumberOfBytesWritten=0x3be778, lpOverlapped=0x0 | out: lpBuffer=0x22d7360*, lpNumberOfBytesWritten=0x3be778*=0x310, lpOverlapped=0x0) returned 1 [0048.672] CloseHandle (hObject=0x448) returned 1 [0048.672] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Pictures.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Pictures.lnk", lpFilePart=0x0) returned 0x4b [0048.672] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Pictures.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Pictures.lnk.xuy", lpFilePart=0x0) returned 0x4f [0048.672] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0048.672] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Pictures.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\pictures.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2f12698, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf6120370, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0x8db8943, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x310)) returned 1 [0048.673] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0048.673] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Pictures.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\pictures.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Pictures.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\pictures.lnk.xuy")) returned 1 [0048.673] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\pkc6AG_LpRlnu-9-.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\pkc6AG_LpRlnu-9-.lnk", lpFilePart=0x0) returned 0x53 [0048.673] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0048.673] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\pkc6AG_LpRlnu-9-.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\pkc6ag_lprlnu-9-.lnk"), fInfoLevelId=0x0, lpFileInformation=0x22d85e0 | out: lpFileInformation=0x22d85e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf55a6e80, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf55a6e80, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0xf55a6e80, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x584)) returned 1 [0048.673] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0048.673] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\pkc6AG_LpRlnu-9-.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\pkc6AG_LpRlnu-9-.lnk", lpFilePart=0x0) returned 0x53 [0048.673] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0048.673] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\pkc6AG_LpRlnu-9-.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\pkc6ag_lprlnu-9-.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0048.674] GetFileType (hFile=0x448) returned 0x1 [0048.674] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0048.674] GetFileType (hFile=0x448) returned 0x1 [0048.674] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x584 [0048.674] ReadFile (in: hFile=0x448, lpBuffer=0x22d8e60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x22d8e60*, lpNumberOfBytesRead=0x3be868*=0x584, lpOverlapped=0x0) returned 1 [0048.674] CloseHandle (hObject=0x448) returned 1 [0048.689] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\pkc6AG_LpRlnu-9-.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\pkc6AG_LpRlnu-9-.lnk", lpFilePart=0x0) returned 0x53 [0048.689] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0048.689] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\pkc6AG_LpRlnu-9-.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\pkc6ag_lprlnu-9-.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0048.690] GetFileType (hFile=0x448) returned 0x1 [0048.690] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0048.690] GetFileType (hFile=0x448) returned 0x1 [0048.690] WriteFile (in: hFile=0x448, lpBuffer=0x2152cf0*, nNumberOfBytesToWrite=0x590, lpNumberOfBytesWritten=0x3be778, lpOverlapped=0x0 | out: lpBuffer=0x2152cf0*, lpNumberOfBytesWritten=0x3be778*=0x590, lpOverlapped=0x0) returned 1 [0048.691] CloseHandle (hObject=0x448) returned 1 [0048.691] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\pkc6AG_LpRlnu-9-.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\pkc6AG_LpRlnu-9-.lnk", lpFilePart=0x0) returned 0x53 [0048.691] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\pkc6AG_LpRlnu-9-.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\pkc6AG_LpRlnu-9-.lnk.xuy", lpFilePart=0x0) returned 0x57 [0048.691] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0048.691] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\pkc6AG_LpRlnu-9-.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\pkc6ag_lprlnu-9-.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf55a6e80, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf55a6e80, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0x8ddebcf, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x590)) returned 1 [0048.692] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0048.692] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\pkc6AG_LpRlnu-9-.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\pkc6ag_lprlnu-9-.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\pkc6AG_LpRlnu-9-.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\pkc6ag_lprlnu-9-.lnk.xuy")) returned 1 [0048.692] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\pLIymR0ZfD9imcx8V2H.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\pLIymR0ZfD9imcx8V2H.lnk", lpFilePart=0x0) returned 0x56 [0048.692] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0048.692] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\pLIymR0ZfD9imcx8V2H.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\pliymr0zfd9imcx8v2h.lnk"), fInfoLevelId=0x0, lpFileInformation=0x2153fa0 | out: lpFileInformation=0x2153fa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf635c783, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf635c783, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0xf635c783, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x363)) returned 1 [0048.692] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0048.692] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\pLIymR0ZfD9imcx8V2H.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\pLIymR0ZfD9imcx8V2H.lnk", lpFilePart=0x0) returned 0x56 [0048.692] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0048.692] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\pLIymR0ZfD9imcx8V2H.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\pliymr0zfd9imcx8v2h.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0048.693] GetFileType (hFile=0x448) returned 0x1 [0048.693] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0048.693] GetFileType (hFile=0x448) returned 0x1 [0048.693] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x363 [0048.693] ReadFile (in: hFile=0x448, lpBuffer=0x2154610, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x2154610*, lpNumberOfBytesRead=0x3be868*=0x363, lpOverlapped=0x0) returned 1 [0048.693] CloseHandle (hObject=0x448) returned 1 [0048.727] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\pLIymR0ZfD9imcx8V2H.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\pLIymR0ZfD9imcx8V2H.lnk", lpFilePart=0x0) returned 0x56 [0048.727] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0048.727] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\pLIymR0ZfD9imcx8V2H.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\pliymr0zfd9imcx8v2h.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0048.728] GetFileType (hFile=0x448) returned 0x1 [0048.728] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0048.728] GetFileType (hFile=0x448) returned 0x1 [0048.728] WriteFile (in: hFile=0x448, lpBuffer=0x21cc750*, nNumberOfBytesToWrite=0x370, lpNumberOfBytesWritten=0x3be778, lpOverlapped=0x0 | out: lpBuffer=0x21cc750*, lpNumberOfBytesWritten=0x3be778*=0x370, lpOverlapped=0x0) returned 1 [0048.729] CloseHandle (hObject=0x448) returned 1 [0048.730] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\pLIymR0ZfD9imcx8V2H.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\pLIymR0ZfD9imcx8V2H.lnk", lpFilePart=0x0) returned 0x56 [0048.730] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\pLIymR0ZfD9imcx8V2H.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\pLIymR0ZfD9imcx8V2H.lnk.xuy", lpFilePart=0x0) returned 0x5a [0048.730] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0048.730] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\pLIymR0ZfD9imcx8V2H.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\pliymr0zfd9imcx8v2h.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf635c783, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf635c783, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0x8e51650, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x370)) returned 1 [0048.730] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0048.730] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\pLIymR0ZfD9imcx8V2H.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\pliymr0zfd9imcx8v2h.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\pLIymR0ZfD9imcx8V2H.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\pliymr0zfd9imcx8v2h.lnk.xuy")) returned 1 [0048.730] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\poXHT9xhAcrp0Yo.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\poXHT9xhAcrp0Yo.lnk", lpFilePart=0x0) returned 0x52 [0048.730] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0048.730] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\poXHT9xhAcrp0Yo.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\poxht9xhacrp0yo.lnk"), fInfoLevelId=0x0, lpFileInformation=0x21cda18 | out: lpFileInformation=0x21cda18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3bb9619, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf3bb9619, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0xf3bb9619, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x414)) returned 1 [0048.731] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0048.731] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\poXHT9xhAcrp0Yo.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\poXHT9xhAcrp0Yo.lnk", lpFilePart=0x0) returned 0x52 [0048.731] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0048.731] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\poXHT9xhAcrp0Yo.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\poxht9xhacrp0yo.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0048.731] GetFileType (hFile=0x448) returned 0x1 [0048.731] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0048.731] GetFileType (hFile=0x448) returned 0x1 [0048.731] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x414 [0048.731] ReadFile (in: hFile=0x448, lpBuffer=0x21ce118, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x21ce118*, lpNumberOfBytesRead=0x3be868*=0x414, lpOverlapped=0x0) returned 1 [0048.731] CloseHandle (hObject=0x448) returned 1 [0048.741] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\poXHT9xhAcrp0Yo.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\poXHT9xhAcrp0Yo.lnk", lpFilePart=0x0) returned 0x52 [0048.741] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0048.741] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\poXHT9xhAcrp0Yo.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\poxht9xhacrp0yo.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0048.742] GetFileType (hFile=0x448) returned 0x1 [0048.742] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0048.742] GetFileType (hFile=0x448) returned 0x1 [0048.742] WriteFile (in: hFile=0x448, lpBuffer=0x22465b8*, nNumberOfBytesToWrite=0x420, lpNumberOfBytesWritten=0x3be778, lpOverlapped=0x0 | out: lpBuffer=0x22465b8*, lpNumberOfBytesWritten=0x3be778*=0x420, lpOverlapped=0x0) returned 1 [0048.743] CloseHandle (hObject=0x448) returned 1 [0048.744] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\poXHT9xhAcrp0Yo.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\poXHT9xhAcrp0Yo.lnk", lpFilePart=0x0) returned 0x52 [0048.744] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\poXHT9xhAcrp0Yo.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\poXHT9xhAcrp0Yo.lnk.xuy", lpFilePart=0x0) returned 0x56 [0048.744] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0048.744] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\poXHT9xhAcrp0Yo.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\poxht9xhacrp0yo.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3bb9619, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf3bb9619, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0x8e7753b, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x420)) returned 1 [0048.744] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0048.744] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\poXHT9xhAcrp0Yo.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\poxht9xhacrp0yo.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\poXHT9xhAcrp0Yo.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\poxht9xhacrp0yo.lnk.xuy")) returned 1 [0048.744] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\pptfNpe1BfneOLa.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\pptfNpe1BfneOLa.lnk", lpFilePart=0x0) returned 0x52 [0048.744] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0048.744] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\pptfNpe1BfneOLa.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\pptfnpe1bfneola.lnk"), fInfoLevelId=0x0, lpFileInformation=0x2247868 | out: lpFileInformation=0x2247868*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf57e3278, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf57e3278, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0xf57e3278, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x3ff)) returned 1 [0048.745] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0048.745] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\pptfNpe1BfneOLa.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\pptfNpe1BfneOLa.lnk", lpFilePart=0x0) returned 0x52 [0048.745] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0048.745] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\pptfNpe1BfneOLa.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\pptfnpe1bfneola.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0048.745] GetFileType (hFile=0x448) returned 0x1 [0048.745] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0048.745] GetFileType (hFile=0x448) returned 0x1 [0048.745] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x3ff [0048.745] ReadFile (in: hFile=0x448, lpBuffer=0x2247f50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x2247f50*, lpNumberOfBytesRead=0x3be868*=0x3ff, lpOverlapped=0x0) returned 1 [0048.745] CloseHandle (hObject=0x448) returned 1 [0048.755] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\pptfNpe1BfneOLa.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\pptfNpe1BfneOLa.lnk", lpFilePart=0x0) returned 0x52 [0048.755] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0048.755] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\pptfNpe1BfneOLa.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\pptfnpe1bfneola.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0048.756] GetFileType (hFile=0x448) returned 0x1 [0048.756] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0048.756] GetFileType (hFile=0x448) returned 0x1 [0048.756] WriteFile (in: hFile=0x448, lpBuffer=0x22c0348*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x3be778, lpOverlapped=0x0 | out: lpBuffer=0x22c0348*, lpNumberOfBytesWritten=0x3be778*=0x400, lpOverlapped=0x0) returned 1 [0048.757] CloseHandle (hObject=0x448) returned 1 [0048.757] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\pptfNpe1BfneOLa.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\pptfNpe1BfneOLa.lnk", lpFilePart=0x0) returned 0x52 [0048.758] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\pptfNpe1BfneOLa.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\pptfNpe1BfneOLa.lnk.xuy", lpFilePart=0x0) returned 0x56 [0048.758] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0048.758] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\pptfNpe1BfneOLa.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\pptfnpe1bfneola.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf57e3278, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf57e3278, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0x8e9d788, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x400)) returned 1 [0048.758] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0048.758] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\pptfNpe1BfneOLa.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\pptfnpe1bfneola.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\pptfNpe1BfneOLa.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\pptfnpe1bfneola.lnk.xuy")) returned 1 [0048.758] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\PRFX.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\PRFX.lnk", lpFilePart=0x0) returned 0x47 [0048.758] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0048.758] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\PRFX.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\prfx.lnk"), fInfoLevelId=0x0, lpFileInformation=0x22c15f8 | out: lpFileInformation=0x22c15f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5dd8f14, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf5dd8f14, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0xf5dd8f14, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x314)) returned 1 [0048.758] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0048.758] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\PRFX.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\PRFX.lnk", lpFilePart=0x0) returned 0x47 [0048.759] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0048.759] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\PRFX.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\prfx.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0048.759] GetFileType (hFile=0x448) returned 0x1 [0048.759] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0048.759] GetFileType (hFile=0x448) returned 0x1 [0048.759] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x314 [0048.759] ReadFile (in: hFile=0x448, lpBuffer=0x22c1ba8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x22c1ba8*, lpNumberOfBytesRead=0x3be868*=0x314, lpOverlapped=0x0) returned 1 [0048.759] CloseHandle (hObject=0x448) returned 1 [0048.769] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\PRFX.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\PRFX.lnk", lpFilePart=0x0) returned 0x47 [0048.769] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0048.769] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\PRFX.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\prfx.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0048.770] GetFileType (hFile=0x448) returned 0x1 [0048.770] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0048.770] GetFileType (hFile=0x448) returned 0x1 [0048.770] WriteFile (in: hFile=0x448, lpBuffer=0x2339b20*, nNumberOfBytesToWrite=0x320, lpNumberOfBytesWritten=0x3be778, lpOverlapped=0x0 | out: lpBuffer=0x2339b20*, lpNumberOfBytesWritten=0x3be778*=0x320, lpOverlapped=0x0) returned 1 [0048.770] CloseHandle (hObject=0x448) returned 1 [0048.771] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\PRFX.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\PRFX.lnk", lpFilePart=0x0) returned 0x47 [0048.771] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\PRFX.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\PRFX.lnk.xuy", lpFilePart=0x0) returned 0x4b [0048.771] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0048.771] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\PRFX.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\prfx.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5dd8f14, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf5dd8f14, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0x8e9d788, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x320)) returned 1 [0048.771] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0048.771] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\PRFX.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\prfx.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\PRFX.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\prfx.lnk.xuy")) returned 1 [0048.773] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\PYe7.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\PYe7.lnk", lpFilePart=0x0) returned 0x47 [0048.773] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0048.773] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\PYe7.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\pye7.lnk"), fInfoLevelId=0x0, lpFileInformation=0x233ad88 | out: lpFileInformation=0x233ad88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2dbb223, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf4270c61, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0xf4270c61, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x49d)) returned 1 [0048.773] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0048.773] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\PYe7.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\PYe7.lnk", lpFilePart=0x0) returned 0x47 [0048.773] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0048.773] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\PYe7.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\pye7.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0048.773] GetFileType (hFile=0x448) returned 0x1 [0048.773] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0048.773] GetFileType (hFile=0x448) returned 0x1 [0048.773] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x49d [0048.773] ReadFile (in: hFile=0x448, lpBuffer=0x233b4c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x233b4c0*, lpNumberOfBytesRead=0x3be868*=0x49d, lpOverlapped=0x0) returned 1 [0048.773] CloseHandle (hObject=0x448) returned 1 [0048.813] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\PYe7.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\PYe7.lnk", lpFilePart=0x0) returned 0x47 [0048.813] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0048.813] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\PYe7.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\pye7.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0048.814] GetFileType (hFile=0x448) returned 0x1 [0048.814] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0048.814] GetFileType (hFile=0x448) returned 0x1 [0048.814] WriteFile (in: hFile=0x448, lpBuffer=0x21b51b8*, nNumberOfBytesToWrite=0x4a0, lpNumberOfBytesWritten=0x3be778, lpOverlapped=0x0 | out: lpBuffer=0x21b51b8*, lpNumberOfBytesWritten=0x3be778*=0x4a0, lpOverlapped=0x0) returned 1 [0048.815] CloseHandle (hObject=0x448) returned 1 [0048.815] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\PYe7.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\PYe7.lnk", lpFilePart=0x0) returned 0x47 [0048.816] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\PYe7.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\PYe7.lnk.xuy", lpFilePart=0x0) returned 0x4b [0048.816] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0048.816] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\PYe7.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\pye7.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2dbb223, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf4270c61, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0x8f0fec4, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x4a0)) returned 1 [0048.816] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0048.816] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\PYe7.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\pye7.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\PYe7.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\pye7.lnk.xuy")) returned 1 [0048.816] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\q9PB6-.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\q9PB6-.lnk", lpFilePart=0x0) returned 0x49 [0048.816] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0048.816] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\q9PB6-.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\q9pb6-.lnk"), fInfoLevelId=0x0, lpFileInformation=0x21b6420 | out: lpFileInformation=0x21b6420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4f3ea71, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf4f3ea71, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0xf4f3ea71, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x506)) returned 1 [0048.816] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0048.817] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\q9PB6-.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\q9PB6-.lnk", lpFilePart=0x0) returned 0x49 [0048.817] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0048.817] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\q9PB6-.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\q9pb6-.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0048.817] GetFileType (hFile=0x448) returned 0x1 [0048.817] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0048.817] GetFileType (hFile=0x448) returned 0x1 [0048.817] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x506 [0048.817] ReadFile (in: hFile=0x448, lpBuffer=0x21b6bd0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x21b6bd0*, lpNumberOfBytesRead=0x3be868*=0x506, lpOverlapped=0x0) returned 1 [0048.817] CloseHandle (hObject=0x448) returned 1 [0048.827] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\q9PB6-.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\q9PB6-.lnk", lpFilePart=0x0) returned 0x49 [0048.828] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0048.828] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\q9PB6-.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\q9pb6-.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0048.829] GetFileType (hFile=0x448) returned 0x1 [0048.829] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0048.829] GetFileType (hFile=0x448) returned 0x1 [0048.829] WriteFile (in: hFile=0x448, lpBuffer=0x222f500*, nNumberOfBytesToWrite=0x510, lpNumberOfBytesWritten=0x3be778, lpOverlapped=0x0 | out: lpBuffer=0x222f500*, lpNumberOfBytesWritten=0x3be778*=0x510, lpOverlapped=0x0) returned 1 [0048.829] CloseHandle (hObject=0x448) returned 1 [0048.830] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\q9PB6-.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\q9PB6-.lnk", lpFilePart=0x0) returned 0x49 [0048.830] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\q9PB6-.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\q9PB6-.lnk.xuy", lpFilePart=0x0) returned 0x4d [0048.830] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0048.830] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\q9PB6-.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\q9pb6-.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4f3ea71, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf4f3ea71, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0x8f3623b, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x510)) returned 1 [0048.830] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0048.830] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\q9PB6-.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\q9pb6-.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\q9PB6-.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\q9pb6-.lnk.xuy")) returned 1 [0048.831] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Qa7KN-vTbOI6h.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Qa7KN-vTbOI6h.lnk", lpFilePart=0x0) returned 0x50 [0048.831] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0048.831] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Qa7KN-vTbOI6h.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\qa7kn-vtboi6h.lnk"), fInfoLevelId=0x0, lpFileInformation=0x2230780 | out: lpFileInformation=0x2230780*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4ef2517, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf4ef2517, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0xf4ef2517, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x40a)) returned 1 [0048.831] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0048.831] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Qa7KN-vTbOI6h.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Qa7KN-vTbOI6h.lnk", lpFilePart=0x0) returned 0x50 [0048.831] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0048.831] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Qa7KN-vTbOI6h.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\qa7kn-vtboi6h.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0048.831] GetFileType (hFile=0x448) returned 0x1 [0048.831] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0048.831] GetFileType (hFile=0x448) returned 0x1 [0048.831] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x40a [0048.831] ReadFile (in: hFile=0x448, lpBuffer=0x2230e78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x2230e78*, lpNumberOfBytesRead=0x3be868*=0x40a, lpOverlapped=0x0) returned 1 [0048.832] CloseHandle (hObject=0x448) returned 1 [0048.842] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Qa7KN-vTbOI6h.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Qa7KN-vTbOI6h.lnk", lpFilePart=0x0) returned 0x50 [0048.842] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0048.842] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Qa7KN-vTbOI6h.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\qa7kn-vtboi6h.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0048.843] GetFileType (hFile=0x448) returned 0x1 [0048.843] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0048.843] GetFileType (hFile=0x448) returned 0x1 [0048.843] WriteFile (in: hFile=0x448, lpBuffer=0x22a92c0*, nNumberOfBytesToWrite=0x410, lpNumberOfBytesWritten=0x3be778, lpOverlapped=0x0 | out: lpBuffer=0x22a92c0*, lpNumberOfBytesWritten=0x3be778*=0x410, lpOverlapped=0x0) returned 1 [0048.844] CloseHandle (hObject=0x448) returned 1 [0048.845] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Qa7KN-vTbOI6h.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Qa7KN-vTbOI6h.lnk", lpFilePart=0x0) returned 0x50 [0048.845] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Qa7KN-vTbOI6h.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Qa7KN-vTbOI6h.lnk.xuy", lpFilePart=0x0) returned 0x54 [0048.845] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0048.845] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Qa7KN-vTbOI6h.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\qa7kn-vtboi6h.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4ef2517, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf4ef2517, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0x8f5c764, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x410)) returned 1 [0048.845] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0048.845] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Qa7KN-vTbOI6h.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\qa7kn-vtboi6h.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Qa7KN-vTbOI6h.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\qa7kn-vtboi6h.lnk.xuy")) returned 1 [0048.845] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\QlEnlER.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\QlEnlER.lnk", lpFilePart=0x0) returned 0x4a [0048.845] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0048.845] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\QlEnlER.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\qlenler.lnk"), fInfoLevelId=0x0, lpFileInformation=0x22aa570 | out: lpFileInformation=0x22aa570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5d1a431, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf5d1a431, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0xf5d1a431, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x473)) returned 1 [0048.845] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0048.846] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\QlEnlER.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\QlEnlER.lnk", lpFilePart=0x0) returned 0x4a [0048.846] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0048.846] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\QlEnlER.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\qlenler.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0048.846] GetFileType (hFile=0x448) returned 0x1 [0048.846] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0048.846] GetFileType (hFile=0x448) returned 0x1 [0048.846] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x473 [0048.846] ReadFile (in: hFile=0x448, lpBuffer=0x22aac90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x22aac90*, lpNumberOfBytesRead=0x3be868*=0x473, lpOverlapped=0x0) returned 1 [0048.846] CloseHandle (hObject=0x448) returned 1 [0048.856] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\QlEnlER.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\QlEnlER.lnk", lpFilePart=0x0) returned 0x4a [0048.856] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0048.856] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\QlEnlER.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\qlenler.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0048.857] GetFileType (hFile=0x448) returned 0x1 [0048.857] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0048.857] GetFileType (hFile=0x448) returned 0x1 [0048.857] WriteFile (in: hFile=0x448, lpBuffer=0x23232f0*, nNumberOfBytesToWrite=0x480, lpNumberOfBytesWritten=0x3be778, lpOverlapped=0x0 | out: lpBuffer=0x23232f0*, lpNumberOfBytesWritten=0x3be778*=0x480, lpOverlapped=0x0) returned 1 [0048.858] CloseHandle (hObject=0x448) returned 1 [0048.859] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\QlEnlER.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\QlEnlER.lnk", lpFilePart=0x0) returned 0x4a [0048.859] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\QlEnlER.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\QlEnlER.lnk.xuy", lpFilePart=0x0) returned 0x4e [0048.859] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0048.859] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\QlEnlER.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\qlenler.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5d1a431, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf5d1a431, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0x8f82469, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x480)) returned 1 [0048.859] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0048.859] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\QlEnlER.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\qlenler.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\QlEnlER.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\qlenler.lnk.xuy")) returned 1 [0048.860] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\QOCXNrR-FN44qxjyc2.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\QOCXNrR-FN44qxjyc2.lnk", lpFilePart=0x0) returned 0x55 [0048.860] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0048.860] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\QOCXNrR-FN44qxjyc2.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\qocxnrr-fn44qxjyc2.lnk"), fInfoLevelId=0x0, lpFileInformation=0x2324570 | out: lpFileInformation=0x2324570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf531e7c3, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf531e7c3, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0xf531e7c3, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x2c2)) returned 1 [0048.860] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0048.860] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\QOCXNrR-FN44qxjyc2.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\QOCXNrR-FN44qxjyc2.lnk", lpFilePart=0x0) returned 0x55 [0048.860] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0048.860] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\QOCXNrR-FN44qxjyc2.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\qocxnrr-fn44qxjyc2.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0048.860] GetFileType (hFile=0x448) returned 0x1 [0048.860] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0048.860] GetFileType (hFile=0x448) returned 0x1 [0048.860] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x2c2 [0048.860] ReadFile (in: hFile=0x448, lpBuffer=0x2324b40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x2324b40*, lpNumberOfBytesRead=0x3be868*=0x2c2, lpOverlapped=0x0) returned 1 [0048.860] CloseHandle (hObject=0x448) returned 1 [0048.899] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\QOCXNrR-FN44qxjyc2.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\QOCXNrR-FN44qxjyc2.lnk", lpFilePart=0x0) returned 0x55 [0048.900] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0048.900] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\QOCXNrR-FN44qxjyc2.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\qocxnrr-fn44qxjyc2.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0048.901] GetFileType (hFile=0x448) returned 0x1 [0048.901] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0048.901] GetFileType (hFile=0x448) returned 0x1 [0048.901] WriteFile (in: hFile=0x448, lpBuffer=0x219db80*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x3be778, lpOverlapped=0x0 | out: lpBuffer=0x219db80*, lpNumberOfBytesWritten=0x3be778*=0x2d0, lpOverlapped=0x0) returned 1 [0048.901] CloseHandle (hObject=0x448) returned 1 [0048.902] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\QOCXNrR-FN44qxjyc2.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\QOCXNrR-FN44qxjyc2.lnk", lpFilePart=0x0) returned 0x55 [0048.902] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\QOCXNrR-FN44qxjyc2.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\QOCXNrR-FN44qxjyc2.lnk.xuy", lpFilePart=0x0) returned 0x59 [0048.902] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0048.902] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\QOCXNrR-FN44qxjyc2.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\qocxnrr-fn44qxjyc2.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf531e7c3, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf531e7c3, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0x8ff503d, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2d0)) returned 1 [0048.902] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0048.903] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\QOCXNrR-FN44qxjyc2.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\qocxnrr-fn44qxjyc2.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\QOCXNrR-FN44qxjyc2.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\qocxnrr-fn44qxjyc2.lnk.xuy")) returned 1 [0048.903] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\qrA9hvnxQuIXrz-kBi.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\qrA9hvnxQuIXrz-kBi.lnk", lpFilePart=0x0) returned 0x55 [0048.903] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0048.903] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\qrA9hvnxQuIXrz-kBi.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\qra9hvnxquixrz-kbi.lnk"), fInfoLevelId=0x0, lpFileInformation=0x219ee48 | out: lpFileInformation=0x219ee48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf319af54, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf50279f2, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0xf50279f2, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x440)) returned 1 [0048.903] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0048.903] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\qrA9hvnxQuIXrz-kBi.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\qrA9hvnxQuIXrz-kBi.lnk", lpFilePart=0x0) returned 0x55 [0048.903] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0048.903] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\qrA9hvnxQuIXrz-kBi.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\qra9hvnxquixrz-kbi.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0048.903] GetFileType (hFile=0x448) returned 0x1 [0048.904] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0048.904] GetFileType (hFile=0x448) returned 0x1 [0048.904] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x440 [0048.904] ReadFile (in: hFile=0x448, lpBuffer=0x219f590, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x219f590*, lpNumberOfBytesRead=0x3be868*=0x440, lpOverlapped=0x0) returned 1 [0048.904] CloseHandle (hObject=0x448) returned 1 [0048.914] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\qrA9hvnxQuIXrz-kBi.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\qrA9hvnxQuIXrz-kBi.lnk", lpFilePart=0x0) returned 0x55 [0048.914] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0048.914] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\qrA9hvnxQuIXrz-kBi.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\qra9hvnxquixrz-kbi.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0048.915] GetFileType (hFile=0x448) returned 0x1 [0048.915] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0048.915] GetFileType (hFile=0x448) returned 0x1 [0048.915] WriteFile (in: hFile=0x448, lpBuffer=0x2217b30*, nNumberOfBytesToWrite=0x450, lpNumberOfBytesWritten=0x3be778, lpOverlapped=0x0 | out: lpBuffer=0x2217b30*, lpNumberOfBytesWritten=0x3be778*=0x450, lpOverlapped=0x0) returned 1 [0048.916] CloseHandle (hObject=0x448) returned 1 [0048.932] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\qrA9hvnxQuIXrz-kBi.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\qrA9hvnxQuIXrz-kBi.lnk", lpFilePart=0x0) returned 0x55 [0048.932] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\qrA9hvnxQuIXrz-kBi.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\qrA9hvnxQuIXrz-kBi.lnk.xuy", lpFilePart=0x0) returned 0x59 [0048.932] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0048.932] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\qrA9hvnxQuIXrz-kBi.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\qra9hvnxquixrz-kbi.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf319af54, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf50279f2, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0x9048d43, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x450)) returned 1 [0048.932] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0048.932] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\qrA9hvnxQuIXrz-kBi.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\qra9hvnxquixrz-kbi.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\qrA9hvnxQuIXrz-kBi.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\qra9hvnxquixrz-kbi.lnk.xuy")) returned 1 [0048.933] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\qTWuqh N53NYZck.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\qTWuqh N53NYZck.lnk", lpFilePart=0x0) returned 0x52 [0048.933] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0048.933] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\qTWuqh N53NYZck.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\qtwuqh n53nyzck.lnk"), fInfoLevelId=0x0, lpFileInformation=0x2218df8 | out: lpFileInformation=0x2218df8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2e53b06, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf55cd1c0, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0xf55cd1c0, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x449)) returned 1 [0048.933] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0048.933] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\qTWuqh N53NYZck.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\qTWuqh N53NYZck.lnk", lpFilePart=0x0) returned 0x52 [0048.933] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0048.933] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\qTWuqh N53NYZck.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\qtwuqh n53nyzck.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0048.933] GetFileType (hFile=0x448) returned 0x1 [0048.933] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0048.933] GetFileType (hFile=0x448) returned 0x1 [0048.933] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x449 [0048.933] ReadFile (in: hFile=0x448, lpBuffer=0x2219530, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x2219530*, lpNumberOfBytesRead=0x3be868*=0x449, lpOverlapped=0x0) returned 1 [0048.933] CloseHandle (hObject=0x448) returned 1 [0048.943] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\qTWuqh N53NYZck.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\qTWuqh N53NYZck.lnk", lpFilePart=0x0) returned 0x52 [0048.943] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0048.943] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\qTWuqh N53NYZck.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\qtwuqh n53nyzck.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0048.944] GetFileType (hFile=0x448) returned 0x1 [0048.944] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0048.944] GetFileType (hFile=0x448) returned 0x1 [0048.944] WriteFile (in: hFile=0x448, lpBuffer=0x2291ab8*, nNumberOfBytesToWrite=0x450, lpNumberOfBytesWritten=0x3be778, lpOverlapped=0x0 | out: lpBuffer=0x2291ab8*, lpNumberOfBytesWritten=0x3be778*=0x450, lpOverlapped=0x0) returned 1 [0048.945] CloseHandle (hObject=0x448) returned 1 [0048.946] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\qTWuqh N53NYZck.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\qTWuqh N53NYZck.lnk", lpFilePart=0x0) returned 0x52 [0048.946] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\qTWuqh N53NYZck.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\qTWuqh N53NYZck.lnk.xuy", lpFilePart=0x0) returned 0x56 [0048.946] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0048.946] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\qTWuqh N53NYZck.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\qtwuqh n53nyzck.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2e53b06, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf55cd1c0, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0x90673d3, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x450)) returned 1 [0048.946] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0048.946] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\qTWuqh N53NYZck.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\qtwuqh n53nyzck.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\qTWuqh N53NYZck.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\qtwuqh n53nyzck.lnk.xuy")) returned 1 [0048.947] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\QYqp7ps5mB.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\QYqp7ps5mB.lnk", lpFilePart=0x0) returned 0x4d [0048.947] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0048.947] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\QYqp7ps5mB.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\qyqp7ps5mb.lnk"), fInfoLevelId=0x0, lpFileInformation=0x2292d68 | out: lpFileInformation=0x2292d68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf470c7a7, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf5a6ba6f, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0xf5a6ba6f, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x418)) returned 1 [0048.947] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0048.947] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\QYqp7ps5mB.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\QYqp7ps5mB.lnk", lpFilePart=0x0) returned 0x4d [0048.947] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0048.947] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\QYqp7ps5mB.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\qyqp7ps5mb.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0048.947] GetFileType (hFile=0x448) returned 0x1 [0048.947] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0048.947] GetFileType (hFile=0x448) returned 0x1 [0048.947] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x418 [0048.947] ReadFile (in: hFile=0x448, lpBuffer=0x2293448, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x2293448*, lpNumberOfBytesRead=0x3be868*=0x418, lpOverlapped=0x0) returned 1 [0048.947] CloseHandle (hObject=0x448) returned 1 [0048.957] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\QYqp7ps5mB.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\QYqp7ps5mB.lnk", lpFilePart=0x0) returned 0x4d [0048.957] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0048.957] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\QYqp7ps5mB.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\qyqp7ps5mb.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0048.958] GetFileType (hFile=0x448) returned 0x1 [0048.958] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0048.958] GetFileType (hFile=0x448) returned 0x1 [0048.958] WriteFile (in: hFile=0x448, lpBuffer=0x230b8d0*, nNumberOfBytesToWrite=0x420, lpNumberOfBytesWritten=0x3be778, lpOverlapped=0x0 | out: lpBuffer=0x230b8d0*, lpNumberOfBytesWritten=0x3be778*=0x420, lpOverlapped=0x0) returned 1 [0048.959] CloseHandle (hObject=0x448) returned 1 [0048.960] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\QYqp7ps5mB.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\QYqp7ps5mB.lnk", lpFilePart=0x0) returned 0x4d [0048.960] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\QYqp7ps5mB.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\QYqp7ps5mB.lnk.xuy", lpFilePart=0x0) returned 0x51 [0048.960] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0048.960] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\QYqp7ps5mB.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\qyqp7ps5mb.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf470c7a7, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf5a6ba6f, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0x908e5f4, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x420)) returned 1 [0048.960] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0048.961] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\QYqp7ps5mB.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\qyqp7ps5mb.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\QYqp7ps5mB.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\qyqp7ps5mb.lnk.xuy")) returned 1 [0048.961] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\R6lD7xHD8T-ubO3-rd.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\R6lD7xHD8T-ubO3-rd.lnk", lpFilePart=0x0) returned 0x55 [0048.961] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0048.961] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\R6lD7xHD8T-ubO3-rd.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\r6ld7xhd8t-ubo3-rd.lnk"), fInfoLevelId=0x0, lpFileInformation=0x230cb68 | out: lpFileInformation=0x230cb68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2694268, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf63a8c50, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0xf63a8c50, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x458)) returned 1 [0048.961] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0048.961] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\R6lD7xHD8T-ubO3-rd.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\R6lD7xHD8T-ubO3-rd.lnk", lpFilePart=0x0) returned 0x55 [0048.962] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0048.962] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\R6lD7xHD8T-ubO3-rd.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\r6ld7xhd8t-ubo3-rd.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0048.962] GetFileType (hFile=0x448) returned 0x1 [0048.962] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0048.962] GetFileType (hFile=0x448) returned 0x1 [0048.962] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x458 [0048.962] ReadFile (in: hFile=0x448, lpBuffer=0x230d2c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x230d2c8*, lpNumberOfBytesRead=0x3be868*=0x458, lpOverlapped=0x0) returned 1 [0048.964] CloseHandle (hObject=0x448) returned 1 [0049.009] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\R6lD7xHD8T-ubO3-rd.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\R6lD7xHD8T-ubO3-rd.lnk", lpFilePart=0x0) returned 0x55 [0049.009] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0049.009] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\R6lD7xHD8T-ubO3-rd.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\r6ld7xhd8t-ubo3-rd.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0049.010] GetFileType (hFile=0x448) returned 0x1 [0049.011] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0049.011] GetFileType (hFile=0x448) returned 0x1 [0049.011] WriteFile (in: hFile=0x448, lpBuffer=0x21868b0*, nNumberOfBytesToWrite=0x460, lpNumberOfBytesWritten=0x3be778, lpOverlapped=0x0 | out: lpBuffer=0x21868b0*, lpNumberOfBytesWritten=0x3be778*=0x460, lpOverlapped=0x0) returned 1 [0049.011] CloseHandle (hObject=0x448) returned 1 [0049.012] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\R6lD7xHD8T-ubO3-rd.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\R6lD7xHD8T-ubO3-rd.lnk", lpFilePart=0x0) returned 0x55 [0049.012] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\R6lD7xHD8T-ubO3-rd.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\R6lD7xHD8T-ubO3-rd.lnk.xuy", lpFilePart=0x0) returned 0x59 [0049.012] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0049.012] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\R6lD7xHD8T-ubO3-rd.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\r6ld7xhd8t-ubo3-rd.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2694268, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf63a8c50, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0x90fcee7, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x460)) returned 1 [0049.012] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0049.012] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\R6lD7xHD8T-ubO3-rd.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\r6ld7xhd8t-ubo3-rd.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\R6lD7xHD8T-ubO3-rd.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\r6ld7xhd8t-ubo3-rd.lnk.xuy")) returned 1 [0049.013] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\R7 9VVQ_Ob5C3PHQ.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\R7 9VVQ_Ob5C3PHQ.lnk", lpFilePart=0x0) returned 0x53 [0049.013] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0049.013] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\R7 9VVQ_Ob5C3PHQ.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\r7 9vvq_ob5c3phq.lnk"), fInfoLevelId=0x0, lpFileInformation=0x2187b78 | out: lpFileInformation=0x2187b78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5f7c92a, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf5f7c92a, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0xf5f7c92a, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x3df)) returned 1 [0049.013] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0049.013] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\R7 9VVQ_Ob5C3PHQ.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\R7 9VVQ_Ob5C3PHQ.lnk", lpFilePart=0x0) returned 0x53 [0049.013] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0049.013] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\R7 9VVQ_Ob5C3PHQ.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\r7 9vvq_ob5c3phq.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0049.013] GetFileType (hFile=0x448) returned 0x1 [0049.013] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0049.013] GetFileType (hFile=0x448) returned 0x1 [0049.013] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x3df [0049.013] ReadFile (in: hFile=0x448, lpBuffer=0x2188250, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x2188250*, lpNumberOfBytesRead=0x3be868*=0x3df, lpOverlapped=0x0) returned 1 [0049.013] CloseHandle (hObject=0x448) returned 1 [0049.023] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\R7 9VVQ_Ob5C3PHQ.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\R7 9VVQ_Ob5C3PHQ.lnk", lpFilePart=0x0) returned 0x53 [0049.023] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0049.023] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\R7 9VVQ_Ob5C3PHQ.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\r7 9vvq_ob5c3phq.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0049.024] GetFileType (hFile=0x448) returned 0x1 [0049.024] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0049.024] GetFileType (hFile=0x448) returned 0x1 [0049.024] WriteFile (in: hFile=0x448, lpBuffer=0x22005b0*, nNumberOfBytesToWrite=0x3e0, lpNumberOfBytesWritten=0x3be778, lpOverlapped=0x0 | out: lpBuffer=0x22005b0*, lpNumberOfBytesWritten=0x3be778*=0x3e0, lpOverlapped=0x0) returned 1 [0049.025] CloseHandle (hObject=0x448) returned 1 [0049.026] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\R7 9VVQ_Ob5C3PHQ.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\R7 9VVQ_Ob5C3PHQ.lnk", lpFilePart=0x0) returned 0x53 [0049.026] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\R7 9VVQ_Ob5C3PHQ.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\R7 9VVQ_Ob5C3PHQ.lnk.xuy", lpFilePart=0x0) returned 0x57 [0049.026] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0049.026] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\R7 9VVQ_Ob5C3PHQ.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\r7 9vvq_ob5c3phq.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5f7c92a, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf5f7c92a, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0x9122f7e, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x3e0)) returned 1 [0049.026] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0049.026] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\R7 9VVQ_Ob5C3PHQ.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\r7 9vvq_ob5c3phq.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\R7 9VVQ_Ob5C3PHQ.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\r7 9vvq_ob5c3phq.lnk.xuy")) returned 1 [0049.027] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\rGxJ8R0.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\rGxJ8R0.lnk", lpFilePart=0x0) returned 0x4a [0049.027] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0049.027] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\rGxJ8R0.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\rgxj8r0.lnk"), fInfoLevelId=0x0, lpFileInformation=0x2201860 | out: lpFileInformation=0x2201860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4bd1347, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf4bd1347, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0xf4bd1347, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x325)) returned 1 [0049.027] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0049.027] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\rGxJ8R0.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\rGxJ8R0.lnk", lpFilePart=0x0) returned 0x4a [0049.027] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0049.027] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\rGxJ8R0.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\rgxj8r0.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0049.027] GetFileType (hFile=0x448) returned 0x1 [0049.027] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0049.027] GetFileType (hFile=0x448) returned 0x1 [0049.027] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x325 [0049.027] ReadFile (in: hFile=0x448, lpBuffer=0x2201e30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x2201e30*, lpNumberOfBytesRead=0x3be868*=0x325, lpOverlapped=0x0) returned 1 [0049.027] CloseHandle (hObject=0x448) returned 1 [0049.038] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\rGxJ8R0.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\rGxJ8R0.lnk", lpFilePart=0x0) returned 0x4a [0049.038] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0049.038] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\rGxJ8R0.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\rgxj8r0.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0049.039] GetFileType (hFile=0x448) returned 0x1 [0049.039] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0049.039] GetFileType (hFile=0x448) returned 0x1 [0049.039] WriteFile (in: hFile=0x448, lpBuffer=0x2279e00*, nNumberOfBytesToWrite=0x330, lpNumberOfBytesWritten=0x3be778, lpOverlapped=0x0 | out: lpBuffer=0x2279e00*, lpNumberOfBytesWritten=0x3be778*=0x330, lpOverlapped=0x0) returned 1 [0049.040] CloseHandle (hObject=0x448) returned 1 [0049.040] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\rGxJ8R0.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\rGxJ8R0.lnk", lpFilePart=0x0) returned 0x4a [0049.041] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\rGxJ8R0.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\rGxJ8R0.lnk.xuy", lpFilePart=0x0) returned 0x4e [0049.041] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0049.041] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\rGxJ8R0.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\rgxj8r0.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4bd1347, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf4bd1347, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0x9149306, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x330)) returned 1 [0049.041] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0049.041] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\rGxJ8R0.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\rgxj8r0.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\rGxJ8R0.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\rgxj8r0.lnk.xuy")) returned 1 [0049.041] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\RL8XNe9oHqfUA86p.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\RL8XNe9oHqfUA86p.lnk", lpFilePart=0x0) returned 0x53 [0049.041] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0049.041] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\RL8XNe9oHqfUA86p.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\rl8xne9ohqfua86p.lnk"), fInfoLevelId=0x0, lpFileInformation=0x227b080 | out: lpFileInformation=0x227b080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3d36c9a, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf3d36c9a, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0xf3d36c9a, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x45f)) returned 1 [0049.041] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0049.041] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\RL8XNe9oHqfUA86p.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\RL8XNe9oHqfUA86p.lnk", lpFilePart=0x0) returned 0x53 [0049.042] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0049.042] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\RL8XNe9oHqfUA86p.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\rl8xne9ohqfua86p.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0049.042] GetFileType (hFile=0x448) returned 0x1 [0049.042] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0049.042] GetFileType (hFile=0x448) returned 0x1 [0049.042] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x45f [0049.042] ReadFile (in: hFile=0x448, lpBuffer=0x227b7d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x227b7d8*, lpNumberOfBytesRead=0x3be868*=0x45f, lpOverlapped=0x0) returned 1 [0049.042] CloseHandle (hObject=0x448) returned 1 [0049.052] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\RL8XNe9oHqfUA86p.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\RL8XNe9oHqfUA86p.lnk", lpFilePart=0x0) returned 0x53 [0049.052] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0049.052] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\RL8XNe9oHqfUA86p.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\rl8xne9ohqfua86p.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0049.053] GetFileType (hFile=0x448) returned 0x1 [0049.053] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0049.053] GetFileType (hFile=0x448) returned 0x1 [0049.053] WriteFile (in: hFile=0x448, lpBuffer=0x22f3db8*, nNumberOfBytesToWrite=0x460, lpNumberOfBytesWritten=0x3be778, lpOverlapped=0x0 | out: lpBuffer=0x22f3db8*, lpNumberOfBytesWritten=0x3be778*=0x460, lpOverlapped=0x0) returned 1 [0049.054] CloseHandle (hObject=0x448) returned 1 [0049.055] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\RL8XNe9oHqfUA86p.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\RL8XNe9oHqfUA86p.lnk", lpFilePart=0x0) returned 0x53 [0049.055] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\RL8XNe9oHqfUA86p.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\RL8XNe9oHqfUA86p.lnk.xuy", lpFilePart=0x0) returned 0x57 [0049.055] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0049.055] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\RL8XNe9oHqfUA86p.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\rl8xne9ohqfua86p.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3d36c9a, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf3d36c9a, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0x916f58a, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x460)) returned 1 [0049.055] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0049.055] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\RL8XNe9oHqfUA86p.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\rl8xne9ohqfua86p.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\RL8XNe9oHqfUA86p.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\rl8xne9ohqfua86p.lnk.xuy")) returned 1 [0049.055] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Roaming.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Roaming.lnk", lpFilePart=0x0) returned 0x4a [0049.055] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0049.055] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Roaming.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\roaming.lnk"), fInfoLevelId=0x0, lpFileInformation=0x22f5068 | out: lpFileInformation=0x22f5068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2136d7f, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf63ceecc, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0xf63ceecc, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x318)) returned 1 [0049.056] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0049.056] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Roaming.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Roaming.lnk", lpFilePart=0x0) returned 0x4a [0049.056] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0049.056] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Roaming.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\roaming.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0049.056] GetFileType (hFile=0x448) returned 0x1 [0049.056] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0049.056] GetFileType (hFile=0x448) returned 0x1 [0049.056] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x318 [0049.056] ReadFile (in: hFile=0x448, lpBuffer=0x22f5628, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x22f5628*, lpNumberOfBytesRead=0x3be868*=0x318, lpOverlapped=0x0) returned 1 [0049.056] CloseHandle (hObject=0x448) returned 1 [0049.094] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Roaming.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Roaming.lnk", lpFilePart=0x0) returned 0x4a [0049.094] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0049.094] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Roaming.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\roaming.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0049.095] GetFileType (hFile=0x448) returned 0x1 [0049.095] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0049.095] GetFileType (hFile=0x448) returned 0x1 [0049.095] WriteFile (in: hFile=0x448, lpBuffer=0x216e7b0*, nNumberOfBytesToWrite=0x320, lpNumberOfBytesWritten=0x3be778, lpOverlapped=0x0 | out: lpBuffer=0x216e7b0*, lpNumberOfBytesWritten=0x3be778*=0x320, lpOverlapped=0x0) returned 1 [0049.096] CloseHandle (hObject=0x448) returned 1 [0049.096] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Roaming.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Roaming.lnk", lpFilePart=0x0) returned 0x4a [0049.097] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Roaming.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Roaming.lnk.xuy", lpFilePart=0x0) returned 0x4e [0049.097] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0049.097] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Roaming.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\roaming.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2136d7f, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf63ceecc, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0x91bb7f9, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x320)) returned 1 [0049.097] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0049.097] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Roaming.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\roaming.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Roaming.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\roaming.lnk.xuy")) returned 1 [0049.097] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\RrmS7r.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\RrmS7r.lnk", lpFilePart=0x0) returned 0x49 [0049.097] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0049.097] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\RrmS7r.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\rrms7r.lnk"), fInfoLevelId=0x0, lpFileInformation=0x216fa30 | out: lpFileInformation=0x216fa30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5a45846, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf5a45846, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0xf5a6ba6f, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x3e5)) returned 1 [0049.098] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0049.098] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\RrmS7r.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\RrmS7r.lnk", lpFilePart=0x0) returned 0x49 [0049.098] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0049.098] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\RrmS7r.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\rrms7r.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0049.098] GetFileType (hFile=0x448) returned 0x1 [0049.098] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0049.098] GetFileType (hFile=0x448) returned 0x1 [0049.098] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x3e5 [0049.098] ReadFile (in: hFile=0x448, lpBuffer=0x21700c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x21700c0*, lpNumberOfBytesRead=0x3be868*=0x3e5, lpOverlapped=0x0) returned 1 [0049.098] CloseHandle (hObject=0x448) returned 1 [0049.108] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\RrmS7r.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\RrmS7r.lnk", lpFilePart=0x0) returned 0x49 [0049.108] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0049.108] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\RrmS7r.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\rrms7r.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0049.109] GetFileType (hFile=0x448) returned 0x1 [0049.109] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0049.109] GetFileType (hFile=0x448) returned 0x1 [0049.109] WriteFile (in: hFile=0x448, lpBuffer=0x21e8450*, nNumberOfBytesToWrite=0x3f0, lpNumberOfBytesWritten=0x3be778, lpOverlapped=0x0 | out: lpBuffer=0x21e8450*, lpNumberOfBytesWritten=0x3be778*=0x3f0, lpOverlapped=0x0) returned 1 [0049.110] CloseHandle (hObject=0x448) returned 1 [0049.111] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\RrmS7r.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\RrmS7r.lnk", lpFilePart=0x0) returned 0x49 [0049.111] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\RrmS7r.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\RrmS7r.lnk.xuy", lpFilePart=0x0) returned 0x4d [0049.111] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0049.111] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\RrmS7r.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\rrms7r.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5a45846, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf5a45846, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0x91e1c3e, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x3f0)) returned 1 [0049.111] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0049.111] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\RrmS7r.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\rrms7r.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\RrmS7r.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\rrms7r.lnk.xuy")) returned 1 [0049.111] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\rspzeeQ4w0Au.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\rspzeeQ4w0Au.lnk", lpFilePart=0x0) returned 0x4f [0049.111] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0049.112] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\rspzeeQ4w0Au.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\rspzeeq4w0au.lnk"), fInfoLevelId=0x0, lpFileInformation=0x21e96d0 | out: lpFileInformation=0x21e96d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf52ac091, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf52ac091, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0xf52ac091, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x4f3)) returned 1 [0049.112] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0049.112] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\rspzeeQ4w0Au.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\rspzeeQ4w0Au.lnk", lpFilePart=0x0) returned 0x4f [0049.112] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0049.112] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\rspzeeQ4w0Au.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\rspzeeq4w0au.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0049.112] GetFileType (hFile=0x448) returned 0x1 [0049.112] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0049.112] GetFileType (hFile=0x448) returned 0x1 [0049.112] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x4f3 [0049.112] ReadFile (in: hFile=0x448, lpBuffer=0x21e9ea0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x21e9ea0*, lpNumberOfBytesRead=0x3be868*=0x4f3, lpOverlapped=0x0) returned 1 [0049.112] CloseHandle (hObject=0x448) returned 1 [0049.126] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\rspzeeQ4w0Au.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\rspzeeQ4w0Au.lnk", lpFilePart=0x0) returned 0x4f [0049.126] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0049.126] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\rspzeeQ4w0Au.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\rspzeeq4w0au.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0049.127] GetFileType (hFile=0x448) returned 0x1 [0049.127] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0049.127] GetFileType (hFile=0x448) returned 0x1 [0049.127] WriteFile (in: hFile=0x448, lpBuffer=0x2262798*, nNumberOfBytesToWrite=0x500, lpNumberOfBytesWritten=0x3be778, lpOverlapped=0x0 | out: lpBuffer=0x2262798*, lpNumberOfBytesWritten=0x3be778*=0x500, lpOverlapped=0x0) returned 1 [0049.128] CloseHandle (hObject=0x448) returned 1 [0049.129] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\rspzeeQ4w0Au.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\rspzeeQ4w0Au.lnk", lpFilePart=0x0) returned 0x4f [0049.129] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\rspzeeQ4w0Au.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\rspzeeQ4w0Au.lnk.xuy", lpFilePart=0x0) returned 0x53 [0049.129] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0049.129] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\rspzeeQ4w0Au.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\rspzeeq4w0au.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf52ac091, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf52ac091, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0x922b20c, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x500)) returned 1 [0049.129] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0049.129] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\rspzeeQ4w0Au.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\rspzeeq4w0au.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\rspzeeQ4w0Au.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\rspzeeq4w0au.lnk.xuy")) returned 1 [0049.130] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\rxFiw9U9bm6LyT9g.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\rxFiw9U9bm6LyT9g.lnk", lpFilePart=0x0) returned 0x53 [0049.130] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0049.130] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\rxFiw9U9bm6LyT9g.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\rxfiw9u9bm6lyt9g.lnk"), fInfoLevelId=0x0, lpFileInformation=0x2263a30 | out: lpFileInformation=0x2263a30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2a73ea8, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf2b32a94, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0xf2b58cff, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x3f3)) returned 1 [0049.130] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0049.130] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\rxFiw9U9bm6LyT9g.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\rxFiw9U9bm6LyT9g.lnk", lpFilePart=0x0) returned 0x53 [0049.130] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0049.130] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\rxFiw9U9bm6LyT9g.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\rxfiw9u9bm6lyt9g.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0049.131] GetFileType (hFile=0x448) returned 0x1 [0049.131] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0049.131] GetFileType (hFile=0x448) returned 0x1 [0049.131] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x3f3 [0049.131] ReadFile (in: hFile=0x448, lpBuffer=0x2264120, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x2264120*, lpNumberOfBytesRead=0x3be868*=0x3f3, lpOverlapped=0x0) returned 1 [0049.131] CloseHandle (hObject=0x448) returned 1 [0049.142] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\rxFiw9U9bm6LyT9g.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\rxFiw9U9bm6LyT9g.lnk", lpFilePart=0x0) returned 0x53 [0049.142] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0049.142] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\rxFiw9U9bm6LyT9g.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\rxfiw9u9bm6lyt9g.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0049.143] GetFileType (hFile=0x448) returned 0x1 [0049.143] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0049.143] GetFileType (hFile=0x448) returned 0x1 [0049.143] WriteFile (in: hFile=0x448, lpBuffer=0x22dc528*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x3be778, lpOverlapped=0x0 | out: lpBuffer=0x22dc528*, lpNumberOfBytesWritten=0x3be778*=0x400, lpOverlapped=0x0) returned 1 [0049.144] CloseHandle (hObject=0x448) returned 1 [0049.144] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\rxFiw9U9bm6LyT9g.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\rxFiw9U9bm6LyT9g.lnk", lpFilePart=0x0) returned 0x53 [0049.144] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\rxFiw9U9bm6LyT9g.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\rxFiw9U9bm6LyT9g.lnk.xuy", lpFilePart=0x0) returned 0x57 [0049.145] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0049.145] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\rxFiw9U9bm6LyT9g.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\rxfiw9u9bm6lyt9g.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2a73ea8, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf2b32a94, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0x923cab1, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x400)) returned 1 [0049.145] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0049.145] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\rxFiw9U9bm6LyT9g.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\rxfiw9u9bm6lyt9g.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\rxFiw9U9bm6LyT9g.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\rxfiw9u9bm6lyt9g.lnk.xuy")) returned 1 [0049.145] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\sasJA6VrgSyC4AEc.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\sasJA6VrgSyC4AEc.lnk", lpFilePart=0x0) returned 0x53 [0049.145] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0049.145] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\sasJA6VrgSyC4AEc.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\sasja6vrgsyc4aec.lnk"), fInfoLevelId=0x0, lpFileInformation=0x22dd7d8 | out: lpFileInformation=0x22dd7d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf43c7ba7, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf43c7ba7, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0xf43eb54b, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x3e8)) returned 1 [0049.145] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0049.145] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\sasJA6VrgSyC4AEc.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\sasJA6VrgSyC4AEc.lnk", lpFilePart=0x0) returned 0x53 [0049.146] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0049.146] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\sasJA6VrgSyC4AEc.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\sasja6vrgsyc4aec.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0049.146] GetFileType (hFile=0x448) returned 0x1 [0049.146] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0049.146] GetFileType (hFile=0x448) returned 0x1 [0049.146] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x3e8 [0049.146] ReadFile (in: hFile=0x448, lpBuffer=0x22ddeb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x22ddeb8*, lpNumberOfBytesRead=0x3be868*=0x3e8, lpOverlapped=0x0) returned 1 [0049.146] CloseHandle (hObject=0x448) returned 1 [0049.160] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\sasJA6VrgSyC4AEc.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\sasJA6VrgSyC4AEc.lnk", lpFilePart=0x0) returned 0x53 [0049.160] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0049.160] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\sasJA6VrgSyC4AEc.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\sasja6vrgsyc4aec.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0049.161] GetFileType (hFile=0x448) returned 0x1 [0049.161] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0049.161] GetFileType (hFile=0x448) returned 0x1 [0049.161] WriteFile (in: hFile=0x448, lpBuffer=0x21567c8*, nNumberOfBytesToWrite=0x3f0, lpNumberOfBytesWritten=0x3be778, lpOverlapped=0x0 | out: lpBuffer=0x21567c8*, lpNumberOfBytesWritten=0x3be778*=0x3f0, lpOverlapped=0x0) returned 1 [0049.162] CloseHandle (hObject=0x448) returned 1 [0049.163] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\sasJA6VrgSyC4AEc.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\sasJA6VrgSyC4AEc.lnk", lpFilePart=0x0) returned 0x53 [0049.163] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\sasJA6VrgSyC4AEc.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\sasJA6VrgSyC4AEc.lnk.xuy", lpFilePart=0x0) returned 0x57 [0049.163] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0049.163] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\sasJA6VrgSyC4AEc.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\sasja6vrgsyc4aec.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf43c7ba7, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf43c7ba7, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0x9262ff9, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x3f0)) returned 1 [0049.163] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0049.163] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\sasJA6VrgSyC4AEc.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\sasja6vrgsyc4aec.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\sasJA6VrgSyC4AEc.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\sasja6vrgsyc4aec.lnk.xuy")) returned 1 [0049.164] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\shyNwC.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\shyNwC.lnk", lpFilePart=0x0) returned 0x49 [0049.164] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0049.164] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\shyNwC.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\shynwc.lnk"), fInfoLevelId=0x0, lpFileInformation=0x2157a78 | out: lpFileInformation=0x2157a78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5e97b02, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf5e97b02, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0xf5e97b02, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x3e5)) returned 1 [0049.164] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0049.164] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\shyNwC.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\shyNwC.lnk", lpFilePart=0x0) returned 0x49 [0049.164] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0049.164] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\shyNwC.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\shynwc.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0049.164] GetFileType (hFile=0x448) returned 0x1 [0049.164] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0049.164] GetFileType (hFile=0x448) returned 0x1 [0049.164] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x3e5 [0049.164] ReadFile (in: hFile=0x448, lpBuffer=0x2158108, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x2158108*, lpNumberOfBytesRead=0x3be868*=0x3e5, lpOverlapped=0x0) returned 1 [0049.164] CloseHandle (hObject=0x448) returned 1 [0049.201] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\shyNwC.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\shyNwC.lnk", lpFilePart=0x0) returned 0x49 [0049.201] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0049.201] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\shyNwC.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\shynwc.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0049.202] GetFileType (hFile=0x448) returned 0x1 [0049.202] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0049.202] GetFileType (hFile=0x448) returned 0x1 [0049.202] WriteFile (in: hFile=0x448, lpBuffer=0x21d0498*, nNumberOfBytesToWrite=0x3f0, lpNumberOfBytesWritten=0x3be778, lpOverlapped=0x0 | out: lpBuffer=0x21d0498*, lpNumberOfBytesWritten=0x3be778*=0x3f0, lpOverlapped=0x0) returned 1 [0049.203] CloseHandle (hObject=0x448) returned 1 [0049.203] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\shyNwC.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\shyNwC.lnk", lpFilePart=0x0) returned 0x49 [0049.204] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\shyNwC.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\shyNwC.lnk.xuy", lpFilePart=0x0) returned 0x4d [0049.204] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0049.204] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\shyNwC.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\shynwc.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5e97b02, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf5e97b02, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0x92d5a3f, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x3f0)) returned 1 [0049.204] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0049.204] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\shyNwC.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\shynwc.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\shyNwC.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\shynwc.lnk.xuy")) returned 1 [0049.204] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Sl1P.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Sl1P.lnk", lpFilePart=0x0) returned 0x47 [0049.204] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0049.204] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Sl1P.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\sl1p.lnk"), fInfoLevelId=0x0, lpFileInformation=0x21d1718 | out: lpFileInformation=0x21d1718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf6205147, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf6205147, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0xf6205147, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x4f3)) returned 1 [0049.204] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0049.205] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Sl1P.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Sl1P.lnk", lpFilePart=0x0) returned 0x47 [0049.205] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0049.205] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Sl1P.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\sl1p.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0049.205] GetFileType (hFile=0x448) returned 0x1 [0049.205] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0049.205] GetFileType (hFile=0x448) returned 0x1 [0049.205] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x4f3 [0049.205] ReadFile (in: hFile=0x448, lpBuffer=0x21d1ea8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x21d1ea8*, lpNumberOfBytesRead=0x3be868*=0x4f3, lpOverlapped=0x0) returned 1 [0049.205] CloseHandle (hObject=0x448) returned 1 [0049.215] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Sl1P.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Sl1P.lnk", lpFilePart=0x0) returned 0x47 [0049.215] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0049.215] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Sl1P.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\sl1p.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0049.216] GetFileType (hFile=0x448) returned 0x1 [0049.216] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0049.216] GetFileType (hFile=0x448) returned 0x1 [0049.216] WriteFile (in: hFile=0x448, lpBuffer=0x224a780*, nNumberOfBytesToWrite=0x500, lpNumberOfBytesWritten=0x3be778, lpOverlapped=0x0 | out: lpBuffer=0x224a780*, lpNumberOfBytesWritten=0x3be778*=0x500, lpOverlapped=0x0) returned 1 [0049.217] CloseHandle (hObject=0x448) returned 1 [0049.218] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Sl1P.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Sl1P.lnk", lpFilePart=0x0) returned 0x47 [0049.218] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Sl1P.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Sl1P.lnk.xuy", lpFilePart=0x0) returned 0x4b [0049.218] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0049.218] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Sl1P.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\sl1p.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf6205147, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf6205147, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0x92fb991, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x500)) returned 1 [0049.218] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0049.218] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Sl1P.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\sl1p.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Sl1P.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\sl1p.lnk.xuy")) returned 1 [0049.221] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\SQa8 vvXUjp_g5d.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\SQa8 vvXUjp_g5d.lnk", lpFilePart=0x0) returned 0x52 [0049.221] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0049.221] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\SQa8 vvXUjp_g5d.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\sqa8 vvxujp_g5d.lnk"), fInfoLevelId=0x0, lpFileInformation=0x224b9e8 | out: lpFileInformation=0x224b9e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf28d048a, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf5c0f31d, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0xf5c0f31d, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x3ee)) returned 1 [0049.221] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0049.221] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\SQa8 vvXUjp_g5d.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\SQa8 vvXUjp_g5d.lnk", lpFilePart=0x0) returned 0x52 [0049.221] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0049.221] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\SQa8 vvXUjp_g5d.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\sqa8 vvxujp_g5d.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0049.221] GetFileType (hFile=0x448) returned 0x1 [0049.221] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0049.221] GetFileType (hFile=0x448) returned 0x1 [0049.221] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x3ee [0049.221] ReadFile (in: hFile=0x448, lpBuffer=0x224c0c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x224c0c0*, lpNumberOfBytesRead=0x3be868*=0x3ee, lpOverlapped=0x0) returned 1 [0049.221] CloseHandle (hObject=0x448) returned 1 [0049.231] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\SQa8 vvXUjp_g5d.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\SQa8 vvXUjp_g5d.lnk", lpFilePart=0x0) returned 0x52 [0049.232] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0049.232] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\SQa8 vvXUjp_g5d.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\sqa8 vvxujp_g5d.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0049.232] GetFileType (hFile=0x448) returned 0x1 [0049.232] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0049.232] GetFileType (hFile=0x448) returned 0x1 [0049.233] WriteFile (in: hFile=0x448, lpBuffer=0x22c4468*, nNumberOfBytesToWrite=0x3f0, lpNumberOfBytesWritten=0x3be778, lpOverlapped=0x0 | out: lpBuffer=0x22c4468*, lpNumberOfBytesWritten=0x3be778*=0x3f0, lpOverlapped=0x0) returned 1 [0049.233] CloseHandle (hObject=0x448) returned 1 [0049.234] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\SQa8 vvXUjp_g5d.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\SQa8 vvXUjp_g5d.lnk", lpFilePart=0x0) returned 0x52 [0049.234] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\SQa8 vvXUjp_g5d.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\SQa8 vvXUjp_g5d.lnk.xuy", lpFilePart=0x0) returned 0x56 [0049.234] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0049.234] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\SQa8 vvXUjp_g5d.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\sqa8 vvxujp_g5d.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf28d048a, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf5c0f31d, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0x9321bbf, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x3f0)) returned 1 [0049.234] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0049.234] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\SQa8 vvXUjp_g5d.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\sqa8 vvxujp_g5d.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\SQa8 vvXUjp_g5d.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\sqa8 vvxujp_g5d.lnk.xuy")) returned 1 [0049.235] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\stCGxWNbc5wFp.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\stCGxWNbc5wFp.lnk", lpFilePart=0x0) returned 0x50 [0049.235] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0049.235] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\stCGxWNbc5wFp.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\stcgxwnbc5wfp.lnk"), fInfoLevelId=0x0, lpFileInformation=0x22c5718 | out: lpFileInformation=0x22c5718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5e25406, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf5e25406, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0xf5e25406, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x45e)) returned 1 [0049.235] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0049.235] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\stCGxWNbc5wFp.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\stCGxWNbc5wFp.lnk", lpFilePart=0x0) returned 0x50 [0049.235] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0049.235] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\stCGxWNbc5wFp.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\stcgxwnbc5wfp.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0049.235] GetFileType (hFile=0x448) returned 0x1 [0049.235] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0049.235] GetFileType (hFile=0x448) returned 0x1 [0049.235] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x45e [0049.235] ReadFile (in: hFile=0x448, lpBuffer=0x22c5e60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x22c5e60*, lpNumberOfBytesRead=0x3be868*=0x45e, lpOverlapped=0x0) returned 1 [0049.235] CloseHandle (hObject=0x448) returned 1 [0049.245] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\stCGxWNbc5wFp.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\stCGxWNbc5wFp.lnk", lpFilePart=0x0) returned 0x50 [0049.245] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0049.245] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\stCGxWNbc5wFp.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\stcgxwnbc5wfp.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0049.246] GetFileType (hFile=0x448) returned 0x1 [0049.246] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0049.246] GetFileType (hFile=0x448) returned 0x1 [0049.246] WriteFile (in: hFile=0x448, lpBuffer=0x233e438*, nNumberOfBytesToWrite=0x460, lpNumberOfBytesWritten=0x3be778, lpOverlapped=0x0 | out: lpBuffer=0x233e438*, lpNumberOfBytesWritten=0x3be778*=0x460, lpOverlapped=0x0) returned 1 [0049.247] CloseHandle (hObject=0x448) returned 1 [0049.248] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\stCGxWNbc5wFp.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\stCGxWNbc5wFp.lnk", lpFilePart=0x0) returned 0x50 [0049.248] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\stCGxWNbc5wFp.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\stCGxWNbc5wFp.lnk.xuy", lpFilePart=0x0) returned 0x54 [0049.248] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0049.248] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\stCGxWNbc5wFp.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\stcgxwnbc5wfp.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5e25406, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf5e25406, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0x9347f3d, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x460)) returned 1 [0049.248] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0049.248] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\stCGxWNbc5wFp.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\stcgxwnbc5wfp.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\stCGxWNbc5wFp.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\stcgxwnbc5wfp.lnk.xuy")) returned 1 [0049.248] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\sYRXyP3UmUCc7I mkd_.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\sYRXyP3UmUCc7I mkd_.lnk", lpFilePart=0x0) returned 0x56 [0049.248] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0049.248] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\sYRXyP3UmUCc7I mkd_.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\syrxyp3umucc7i mkd_.lnk"), fInfoLevelId=0x0, lpFileInformation=0x233f6e8 | out: lpFileInformation=0x233f6e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf36f8403, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf59d3131, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0xf59d3131, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x45d)) returned 1 [0049.248] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0049.248] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\sYRXyP3UmUCc7I mkd_.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\sYRXyP3UmUCc7I mkd_.lnk", lpFilePart=0x0) returned 0x56 [0049.249] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0049.249] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\sYRXyP3UmUCc7I mkd_.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\syrxyp3umucc7i mkd_.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0049.249] GetFileType (hFile=0x448) returned 0x1 [0049.249] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0049.249] GetFileType (hFile=0x448) returned 0x1 [0049.249] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x45d [0049.249] ReadFile (in: hFile=0x448, lpBuffer=0x233fe50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x233fe50*, lpNumberOfBytesRead=0x3be868*=0x45d, lpOverlapped=0x0) returned 1 [0049.249] CloseHandle (hObject=0x448) returned 1 [0049.287] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\sYRXyP3UmUCc7I mkd_.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\sYRXyP3UmUCc7I mkd_.lnk", lpFilePart=0x0) returned 0x56 [0049.287] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0049.287] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\sYRXyP3UmUCc7I mkd_.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\syrxyp3umucc7i mkd_.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0049.289] GetFileType (hFile=0x448) returned 0x1 [0049.289] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0049.289] GetFileType (hFile=0x448) returned 0x1 [0049.289] WriteFile (in: hFile=0x448, lpBuffer=0x21b7fa8*, nNumberOfBytesToWrite=0x460, lpNumberOfBytesWritten=0x3be778, lpOverlapped=0x0 | out: lpBuffer=0x21b7fa8*, lpNumberOfBytesWritten=0x3be778*=0x460, lpOverlapped=0x0) returned 1 [0049.290] CloseHandle (hObject=0x448) returned 1 [0049.290] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\sYRXyP3UmUCc7I mkd_.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\sYRXyP3UmUCc7I mkd_.lnk", lpFilePart=0x0) returned 0x56 [0049.290] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\sYRXyP3UmUCc7I mkd_.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\sYRXyP3UmUCc7I mkd_.lnk.xuy", lpFilePart=0x0) returned 0x5a [0049.291] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0049.291] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\sYRXyP3UmUCc7I mkd_.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\syrxyp3umucc7i mkd_.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf36f8403, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf59d3131, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0x9394485, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x460)) returned 1 [0049.291] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0049.291] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\sYRXyP3UmUCc7I mkd_.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\syrxyp3umucc7i mkd_.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\sYRXyP3UmUCc7I mkd_.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\syrxyp3umucc7i mkd_.lnk.xuy")) returned 1 [0049.291] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\TllDAUU2CxF.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\TllDAUU2CxF.lnk", lpFilePart=0x0) returned 0x4e [0049.291] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0049.291] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\TllDAUU2CxF.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\tlldauu2cxf.lnk"), fInfoLevelId=0x0, lpFileInformation=0x21b9270 | out: lpFileInformation=0x21b9270*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5a1f546, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf5a1f546, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0xf5a1f546, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x51a)) returned 1 [0049.291] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0049.291] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\TllDAUU2CxF.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\TllDAUU2CxF.lnk", lpFilePart=0x0) returned 0x4e [0049.292] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0049.292] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\TllDAUU2CxF.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\tlldauu2cxf.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0049.292] GetFileType (hFile=0x448) returned 0x1 [0049.292] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0049.292] GetFileType (hFile=0x448) returned 0x1 [0049.292] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x51a [0049.292] ReadFile (in: hFile=0x448, lpBuffer=0x21b9a58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x21b9a58*, lpNumberOfBytesRead=0x3be868*=0x51a, lpOverlapped=0x0) returned 1 [0049.292] CloseHandle (hObject=0x448) returned 1 [0049.302] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\TllDAUU2CxF.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\TllDAUU2CxF.lnk", lpFilePart=0x0) returned 0x4e [0049.302] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0049.302] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\TllDAUU2CxF.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\tlldauu2cxf.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0049.303] GetFileType (hFile=0x448) returned 0x1 [0049.303] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0049.303] GetFileType (hFile=0x448) returned 0x1 [0049.303] WriteFile (in: hFile=0x448, lpBuffer=0x22323e0*, nNumberOfBytesToWrite=0x520, lpNumberOfBytesWritten=0x3be778, lpOverlapped=0x0 | out: lpBuffer=0x22323e0*, lpNumberOfBytesWritten=0x3be778*=0x520, lpOverlapped=0x0) returned 1 [0049.304] CloseHandle (hObject=0x448) returned 1 [0049.305] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\TllDAUU2CxF.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\TllDAUU2CxF.lnk", lpFilePart=0x0) returned 0x4e [0049.305] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\TllDAUU2CxF.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\TllDAUU2CxF.lnk.xuy", lpFilePart=0x0) returned 0x52 [0049.305] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0049.305] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\TllDAUU2CxF.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\tlldauu2cxf.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5a1f546, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf5a1f546, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0x93ba5f9, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x520)) returned 1 [0049.305] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0049.305] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\TllDAUU2CxF.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\tlldauu2cxf.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\TllDAUU2CxF.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\tlldauu2cxf.lnk.xuy")) returned 1 [0049.305] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\UELEI-EgHa.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\UELEI-EgHa.lnk", lpFilePart=0x0) returned 0x4d [0049.305] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0049.305] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\UELEI-EgHa.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\uelei-egha.lnk"), fInfoLevelId=0x0, lpFileInformation=0x2233678 | out: lpFileInformation=0x2233678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf6120370, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf6120370, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0xf6120370, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x3da)) returned 1 [0049.306] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0049.306] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\UELEI-EgHa.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\UELEI-EgHa.lnk", lpFilePart=0x0) returned 0x4d [0049.306] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0049.306] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\UELEI-EgHa.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\uelei-egha.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0049.306] GetFileType (hFile=0x448) returned 0x1 [0049.306] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0049.306] GetFileType (hFile=0x448) returned 0x1 [0049.306] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x3da [0049.306] ReadFile (in: hFile=0x448, lpBuffer=0x2233d20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x2233d20*, lpNumberOfBytesRead=0x3be868*=0x3da, lpOverlapped=0x0) returned 1 [0049.306] CloseHandle (hObject=0x448) returned 1 [0049.316] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\UELEI-EgHa.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\UELEI-EgHa.lnk", lpFilePart=0x0) returned 0x4d [0049.316] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0049.316] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\UELEI-EgHa.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\uelei-egha.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0049.317] GetFileType (hFile=0x448) returned 0x1 [0049.317] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0049.317] GetFileType (hFile=0x448) returned 0x1 [0049.317] WriteFile (in: hFile=0x448, lpBuffer=0x22ac068*, nNumberOfBytesToWrite=0x3e0, lpNumberOfBytesWritten=0x3be778, lpOverlapped=0x0 | out: lpBuffer=0x22ac068*, lpNumberOfBytesWritten=0x3be778*=0x3e0, lpOverlapped=0x0) returned 1 [0049.318] CloseHandle (hObject=0x448) returned 1 [0049.319] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\UELEI-EgHa.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\UELEI-EgHa.lnk", lpFilePart=0x0) returned 0x4d [0049.319] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\UELEI-EgHa.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\UELEI-EgHa.lnk.xuy", lpFilePart=0x0) returned 0x51 [0049.319] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0049.319] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\UELEI-EgHa.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\uelei-egha.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf6120370, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf6120370, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0x93e086e, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x3e0)) returned 1 [0049.319] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0049.319] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\UELEI-EgHa.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\uelei-egha.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\UELEI-EgHa.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\uelei-egha.lnk.xuy")) returned 1 [0049.320] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\uItrk_jbFDkZ5N6T.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\uItrk_jbFDkZ5N6T.lnk", lpFilePart=0x0) returned 0x53 [0049.320] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0049.320] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\uItrk_jbFDkZ5N6T.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\uitrk_jbfdkz5n6t.lnk"), fInfoLevelId=0x0, lpFileInformation=0x22ad300 | out: lpFileInformation=0x22ad300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4a2d930, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf4a2d930, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0xf4a2d930, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x584)) returned 1 [0049.320] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0049.320] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\uItrk_jbFDkZ5N6T.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\uItrk_jbFDkZ5N6T.lnk", lpFilePart=0x0) returned 0x53 [0049.320] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0049.320] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\uItrk_jbFDkZ5N6T.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\uitrk_jbfdkz5n6t.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0049.320] GetFileType (hFile=0x448) returned 0x1 [0049.320] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0049.320] GetFileType (hFile=0x448) returned 0x1 [0049.320] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x584 [0049.320] ReadFile (in: hFile=0x448, lpBuffer=0x22adb80, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x22adb80*, lpNumberOfBytesRead=0x3be868*=0x584, lpOverlapped=0x0) returned 1 [0049.320] CloseHandle (hObject=0x448) returned 1 [0049.331] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\uItrk_jbFDkZ5N6T.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\uItrk_jbFDkZ5N6T.lnk", lpFilePart=0x0) returned 0x53 [0049.331] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0049.331] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\uItrk_jbFDkZ5N6T.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\uitrk_jbfdkz5n6t.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0049.332] GetFileType (hFile=0x448) returned 0x1 [0049.332] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0049.332] GetFileType (hFile=0x448) returned 0x1 [0049.332] WriteFile (in: hFile=0x448, lpBuffer=0x2326758*, nNumberOfBytesToWrite=0x590, lpNumberOfBytesWritten=0x3be778, lpOverlapped=0x0 | out: lpBuffer=0x2326758*, lpNumberOfBytesWritten=0x3be778*=0x590, lpOverlapped=0x0) returned 1 [0049.333] CloseHandle (hObject=0x448) returned 1 [0049.333] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\uItrk_jbFDkZ5N6T.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\uItrk_jbFDkZ5N6T.lnk", lpFilePart=0x0) returned 0x53 [0049.333] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\uItrk_jbFDkZ5N6T.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\uItrk_jbFDkZ5N6T.lnk.xuy", lpFilePart=0x0) returned 0x57 [0049.333] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0049.334] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\uItrk_jbFDkZ5N6T.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\uitrk_jbfdkz5n6t.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4a2d930, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf4a2d930, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0x9406a8a, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x590)) returned 1 [0049.334] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0049.334] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\uItrk_jbFDkZ5N6T.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\uitrk_jbfdkz5n6t.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\uItrk_jbFDkZ5N6T.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\uitrk_jbfdkz5n6t.lnk.xuy")) returned 1 [0049.334] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\uwQJ.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\uwQJ.lnk", lpFilePart=0x0) returned 0x47 [0049.334] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0049.334] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\uwQJ.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\uwqj.lnk"), fInfoLevelId=0x0, lpFileInformation=0x2327a08 | out: lpFileInformation=0x2327a08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1bd9825, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf50e241b, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0xf50e241b, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x362)) returned 1 [0049.334] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0049.334] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\uwQJ.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\uwQJ.lnk", lpFilePart=0x0) returned 0x47 [0049.334] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0049.335] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\uwQJ.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\uwqj.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0049.335] GetFileType (hFile=0x448) returned 0x1 [0049.335] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0049.335] GetFileType (hFile=0x448) returned 0x1 [0049.335] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x362 [0049.335] ReadFile (in: hFile=0x448, lpBuffer=0x2328008, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x2328008*, lpNumberOfBytesRead=0x3be868*=0x362, lpOverlapped=0x0) returned 1 [0049.335] CloseHandle (hObject=0x448) returned 1 [0049.373] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\uwQJ.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\uwQJ.lnk", lpFilePart=0x0) returned 0x47 [0049.373] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0049.373] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\uwQJ.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\uwqj.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0049.374] GetFileType (hFile=0x448) returned 0x1 [0049.374] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0049.375] GetFileType (hFile=0x448) returned 0x1 [0049.375] WriteFile (in: hFile=0x448, lpBuffer=0x21a0000*, nNumberOfBytesToWrite=0x370, lpNumberOfBytesWritten=0x3be778, lpOverlapped=0x0 | out: lpBuffer=0x21a0000*, lpNumberOfBytesWritten=0x3be778*=0x370, lpOverlapped=0x0) returned 1 [0049.375] CloseHandle (hObject=0x448) returned 1 [0049.376] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\uwQJ.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\uwQJ.lnk", lpFilePart=0x0) returned 0x47 [0049.376] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\uwQJ.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\uwQJ.lnk.xuy", lpFilePart=0x0) returned 0x4b [0049.376] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0049.376] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\uwQJ.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\uwqj.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1bd9825, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf50e241b, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0x94793bd, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x370)) returned 1 [0049.376] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0049.376] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\uwQJ.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\uwqj.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\uwQJ.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\uwqj.lnk.xuy")) returned 1 [0049.377] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\V4M4Zk zJ0onUYJXIl.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\V4M4Zk zJ0onUYJXIl.lnk", lpFilePart=0x0) returned 0x55 [0049.377] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0049.377] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\V4M4Zk zJ0onUYJXIl.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\v4m4zk zj0onuyjxil.lnk"), fInfoLevelId=0x0, lpFileInformation=0x21a1268 | out: lpFileInformation=0x21a1268*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf285dd69, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf61deec8, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0xf61deec8, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x399)) returned 1 [0049.377] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0049.377] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\V4M4Zk zJ0onUYJXIl.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\V4M4Zk zJ0onUYJXIl.lnk", lpFilePart=0x0) returned 0x55 [0049.377] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0049.377] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\V4M4Zk zJ0onUYJXIl.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\v4m4zk zj0onuyjxil.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0049.377] GetFileType (hFile=0x448) returned 0x1 [0049.377] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0049.377] GetFileType (hFile=0x448) returned 0x1 [0049.377] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x399 [0049.377] ReadFile (in: hFile=0x448, lpBuffer=0x21a1910, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x21a1910*, lpNumberOfBytesRead=0x3be868*=0x399, lpOverlapped=0x0) returned 1 [0049.377] CloseHandle (hObject=0x448) returned 1 [0049.388] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\V4M4Zk zJ0onUYJXIl.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\V4M4Zk zJ0onUYJXIl.lnk", lpFilePart=0x0) returned 0x55 [0049.388] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0049.388] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\V4M4Zk zJ0onUYJXIl.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\v4m4zk zj0onuyjxil.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0049.389] GetFileType (hFile=0x448) returned 0x1 [0049.389] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0049.389] GetFileType (hFile=0x448) returned 0x1 [0049.389] WriteFile (in: hFile=0x448, lpBuffer=0x2219b38*, nNumberOfBytesToWrite=0x3a0, lpNumberOfBytesWritten=0x3be778, lpOverlapped=0x0 | out: lpBuffer=0x2219b38*, lpNumberOfBytesWritten=0x3be778*=0x3a0, lpOverlapped=0x0) returned 1 [0049.389] CloseHandle (hObject=0x448) returned 1 [0049.390] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\V4M4Zk zJ0onUYJXIl.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\V4M4Zk zJ0onUYJXIl.lnk", lpFilePart=0x0) returned 0x55 [0049.390] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\V4M4Zk zJ0onUYJXIl.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\V4M4Zk zJ0onUYJXIl.lnk.xuy", lpFilePart=0x0) returned 0x59 [0049.390] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0049.390] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\V4M4Zk zJ0onUYJXIl.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\v4m4zk zj0onuyjxil.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf285dd69, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf61deec8, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0x949f35e, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x3a0)) returned 1 [0049.390] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0049.390] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\V4M4Zk zJ0onUYJXIl.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\v4m4zk zj0onuyjxil.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\V4M4Zk zJ0onUYJXIl.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\v4m4zk zj0onuyjxil.lnk.xuy")) returned 1 [0049.391] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\v6afBXu2KwQML_bnz2.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\v6afBXu2KwQML_bnz2.lnk", lpFilePart=0x0) returned 0x55 [0049.391] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0049.391] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\v6afBXu2KwQML_bnz2.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\v6afbxu2kwqml_bnz2.lnk"), fInfoLevelId=0x0, lpFileInformation=0x221ae00 | out: lpFileInformation=0x221ae00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4758dee, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf4758dee, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0xf4758dee, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x2c2)) returned 1 [0049.391] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0049.391] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\v6afBXu2KwQML_bnz2.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\v6afBXu2KwQML_bnz2.lnk", lpFilePart=0x0) returned 0x55 [0049.391] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0049.391] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\v6afBXu2KwQML_bnz2.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\v6afbxu2kwqml_bnz2.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0049.391] GetFileType (hFile=0x448) returned 0x1 [0049.391] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0049.391] GetFileType (hFile=0x448) returned 0x1 [0049.391] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x2c2 [0049.391] ReadFile (in: hFile=0x448, lpBuffer=0x221b3d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x221b3d0*, lpNumberOfBytesRead=0x3be868*=0x2c2, lpOverlapped=0x0) returned 1 [0049.391] CloseHandle (hObject=0x448) returned 1 [0049.401] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\v6afBXu2KwQML_bnz2.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\v6afBXu2KwQML_bnz2.lnk", lpFilePart=0x0) returned 0x55 [0049.401] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0049.401] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\v6afBXu2KwQML_bnz2.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\v6afbxu2kwqml_bnz2.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0049.403] GetFileType (hFile=0x448) returned 0x1 [0049.403] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0049.403] GetFileType (hFile=0x448) returned 0x1 [0049.403] WriteFile (in: hFile=0x448, lpBuffer=0x22931f0*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x3be778, lpOverlapped=0x0 | out: lpBuffer=0x22931f0*, lpNumberOfBytesWritten=0x3be778*=0x2d0, lpOverlapped=0x0) returned 1 [0049.404] CloseHandle (hObject=0x448) returned 1 [0049.404] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\v6afBXu2KwQML_bnz2.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\v6afBXu2KwQML_bnz2.lnk", lpFilePart=0x0) returned 0x55 [0049.404] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\v6afBXu2KwQML_bnz2.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\v6afBXu2KwQML_bnz2.lnk.xuy", lpFilePart=0x0) returned 0x59 [0049.404] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0049.404] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\v6afBXu2KwQML_bnz2.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\v6afbxu2kwqml_bnz2.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4758dee, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf4758dee, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0x94c5597, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2d0)) returned 1 [0049.404] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0049.404] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\v6afBXu2KwQML_bnz2.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\v6afbxu2kwqml_bnz2.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\v6afBXu2KwQML_bnz2.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\v6afbxu2kwqml_bnz2.lnk.xuy")) returned 1 [0049.405] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\vg-2sbVgxsUfL6fnj8H.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\vg-2sbVgxsUfL6fnj8H.lnk", lpFilePart=0x0) returned 0x56 [0049.405] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0049.405] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\vg-2sbVgxsUfL6fnj8H.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\vg-2sbvgxsufl6fnj8h.lnk"), fInfoLevelId=0x0, lpFileInformation=0x22944b8 | out: lpFileInformation=0x22944b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3c2bd3d, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf3c2bd3d, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0xf3c2bd3d, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x653)) returned 1 [0049.405] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0049.405] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\vg-2sbVgxsUfL6fnj8H.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\vg-2sbVgxsUfL6fnj8H.lnk", lpFilePart=0x0) returned 0x56 [0049.405] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0049.405] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\vg-2sbVgxsUfL6fnj8H.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\vg-2sbvgxsufl6fnj8h.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0049.405] GetFileType (hFile=0x448) returned 0x1 [0049.406] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0049.406] GetFileType (hFile=0x448) returned 0x1 [0049.406] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x653 [0049.406] ReadFile (in: hFile=0x448, lpBuffer=0x2294e18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x2294e18*, lpNumberOfBytesRead=0x3be868*=0x653, lpOverlapped=0x0) returned 1 [0049.406] CloseHandle (hObject=0x448) returned 1 [0049.416] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\vg-2sbVgxsUfL6fnj8H.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\vg-2sbVgxsUfL6fnj8H.lnk", lpFilePart=0x0) returned 0x56 [0049.416] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0049.416] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\vg-2sbVgxsUfL6fnj8H.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\vg-2sbvgxsufl6fnj8h.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0049.417] GetFileType (hFile=0x448) returned 0x1 [0049.417] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0049.417] GetFileType (hFile=0x448) returned 0x1 [0049.417] WriteFile (in: hFile=0x448, lpBuffer=0x230de08*, nNumberOfBytesToWrite=0x660, lpNumberOfBytesWritten=0x3be778, lpOverlapped=0x0 | out: lpBuffer=0x230de08*, lpNumberOfBytesWritten=0x3be778*=0x660, lpOverlapped=0x0) returned 1 [0049.418] CloseHandle (hObject=0x448) returned 1 [0049.419] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\vg-2sbVgxsUfL6fnj8H.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\vg-2sbVgxsUfL6fnj8H.lnk", lpFilePart=0x0) returned 0x56 [0049.419] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\vg-2sbVgxsUfL6fnj8H.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\vg-2sbVgxsUfL6fnj8H.lnk.xuy", lpFilePart=0x0) returned 0x5a [0049.419] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0049.419] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\vg-2sbVgxsUfL6fnj8H.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\vg-2sbvgxsufl6fnj8h.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3c2bd3d, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf3c2bd3d, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0x94eb826, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x660)) returned 1 [0049.419] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0049.419] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\vg-2sbVgxsUfL6fnj8H.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\vg-2sbvgxsufl6fnj8h.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\vg-2sbVgxsUfL6fnj8H.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\vg-2sbvgxsufl6fnj8h.lnk.xuy")) returned 1 [0049.420] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Videos.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Videos.lnk", lpFilePart=0x0) returned 0x49 [0049.420] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0049.420] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Videos.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\videos.lnk"), fInfoLevelId=0x0, lpFileInformation=0x230f0d0 | out: lpFileInformation=0x230f0d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4221cdf, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf43eb54b, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0xf43eb54b, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x2f9)) returned 1 [0049.420] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0049.420] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Videos.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Videos.lnk", lpFilePart=0x0) returned 0x49 [0049.420] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0049.420] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Videos.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\videos.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0049.420] GetFileType (hFile=0x448) returned 0x1 [0049.420] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0049.420] GetFileType (hFile=0x448) returned 0x1 [0049.420] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x2f9 [0049.420] ReadFile (in: hFile=0x448, lpBuffer=0x230f678, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x230f678*, lpNumberOfBytesRead=0x3be868*=0x2f9, lpOverlapped=0x0) returned 1 [0049.420] CloseHandle (hObject=0x448) returned 1 [0049.476] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Videos.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Videos.lnk", lpFilePart=0x0) returned 0x49 [0049.476] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0049.476] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Videos.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\videos.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0049.477] GetFileType (hFile=0x448) returned 0x1 [0049.477] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0049.477] GetFileType (hFile=0x448) returned 0x1 [0049.477] WriteFile (in: hFile=0x448, lpBuffer=0x21874b8*, nNumberOfBytesToWrite=0x300, lpNumberOfBytesWritten=0x3be778, lpOverlapped=0x0 | out: lpBuffer=0x21874b8*, lpNumberOfBytesWritten=0x3be778*=0x300, lpOverlapped=0x0) returned 1 [0049.478] CloseHandle (hObject=0x448) returned 1 [0049.479] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Videos.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Videos.lnk", lpFilePart=0x0) returned 0x49 [0049.479] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Videos.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Videos.lnk.xuy", lpFilePart=0x0) returned 0x4d [0049.479] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0049.479] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Videos.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\videos.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4221cdf, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf43eb54b, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0x955dfa8, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x300)) returned 1 [0049.479] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0049.479] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Videos.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\videos.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Videos.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\videos.lnk.xuy")) returned 1 [0049.479] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\vRQ5tUuEKHqkKPnnz.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\vRQ5tUuEKHqkKPnnz.lnk", lpFilePart=0x0) returned 0x54 [0049.480] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0049.480] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\vRQ5tUuEKHqkKPnnz.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\vrq5tuuekhqkkpnnz.lnk"), fInfoLevelId=0x0, lpFileInformation=0x2188738 | out: lpFileInformation=0x2188738*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5619561, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf5619561, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0xf5619561, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x65d)) returned 1 [0049.480] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0049.480] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\vRQ5tUuEKHqkKPnnz.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\vRQ5tUuEKHqkKPnnz.lnk", lpFilePart=0x0) returned 0x54 [0049.480] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0049.480] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\vRQ5tUuEKHqkKPnnz.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\vrq5tuuekhqkkpnnz.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0049.480] GetFileType (hFile=0x448) returned 0x1 [0049.480] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0049.480] GetFileType (hFile=0x448) returned 0x1 [0049.480] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x65d [0049.480] ReadFile (in: hFile=0x448, lpBuffer=0x21890a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x21890a0*, lpNumberOfBytesRead=0x3be868*=0x65d, lpOverlapped=0x0) returned 1 [0049.482] CloseHandle (hObject=0x448) returned 1 [0049.492] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\vRQ5tUuEKHqkKPnnz.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\vRQ5tUuEKHqkKPnnz.lnk", lpFilePart=0x0) returned 0x54 [0049.492] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0049.492] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\vRQ5tUuEKHqkKPnnz.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\vrq5tuuekhqkkpnnz.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0049.493] GetFileType (hFile=0x448) returned 0x1 [0049.493] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0049.493] GetFileType (hFile=0x448) returned 0x1 [0049.493] WriteFile (in: hFile=0x448, lpBuffer=0x2202088*, nNumberOfBytesToWrite=0x660, lpNumberOfBytesWritten=0x3be778, lpOverlapped=0x0 | out: lpBuffer=0x2202088*, lpNumberOfBytesWritten=0x3be778*=0x660, lpOverlapped=0x0) returned 1 [0049.494] CloseHandle (hObject=0x448) returned 1 [0049.495] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\vRQ5tUuEKHqkKPnnz.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\vRQ5tUuEKHqkKPnnz.lnk", lpFilePart=0x0) returned 0x54 [0049.495] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\vRQ5tUuEKHqkKPnnz.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\vRQ5tUuEKHqkKPnnz.lnk.xuy", lpFilePart=0x0) returned 0x58 [0049.495] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0049.495] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\vRQ5tUuEKHqkKPnnz.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\vrq5tuuekhqkkpnnz.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5619561, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf5619561, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0x95841a2, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x660)) returned 1 [0049.495] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0049.495] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\vRQ5tUuEKHqkKPnnz.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\vrq5tuuekhqkkpnnz.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\vRQ5tUuEKHqkKPnnz.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\vrq5tuuekhqkkpnnz.lnk.xuy")) returned 1 [0049.496] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\VVjOWuzx8w8tLEluosA.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\VVjOWuzx8w8tLEluosA.lnk", lpFilePart=0x0) returned 0x56 [0049.496] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0049.496] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\VVjOWuzx8w8tLEluosA.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\vvjowuzx8w8tleluosa.lnk"), fInfoLevelId=0x0, lpFileInformation=0x2203350 | out: lpFileInformation=0x2203350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf48d6428, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf48d6428, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0xf48d6428, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x413)) returned 1 [0049.496] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0049.496] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\VVjOWuzx8w8tLEluosA.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\VVjOWuzx8w8tLEluosA.lnk", lpFilePart=0x0) returned 0x56 [0049.496] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0049.496] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\VVjOWuzx8w8tLEluosA.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\vvjowuzx8w8tleluosa.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0049.496] GetFileType (hFile=0x448) returned 0x1 [0049.497] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0049.497] GetFileType (hFile=0x448) returned 0x1 [0049.497] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x413 [0049.497] ReadFile (in: hFile=0x448, lpBuffer=0x2203a70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x2203a70*, lpNumberOfBytesRead=0x3be868*=0x413, lpOverlapped=0x0) returned 1 [0049.497] CloseHandle (hObject=0x448) returned 1 [0049.509] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\VVjOWuzx8w8tLEluosA.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\VVjOWuzx8w8tLEluosA.lnk", lpFilePart=0x0) returned 0x56 [0049.509] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0049.509] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\VVjOWuzx8w8tLEluosA.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\vvjowuzx8w8tleluosa.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0049.510] GetFileType (hFile=0x448) returned 0x1 [0049.510] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0049.510] GetFileType (hFile=0x448) returned 0x1 [0049.510] WriteFile (in: hFile=0x448, lpBuffer=0x227bf20*, nNumberOfBytesToWrite=0x420, lpNumberOfBytesWritten=0x3be778, lpOverlapped=0x0 | out: lpBuffer=0x227bf20*, lpNumberOfBytesWritten=0x3be778*=0x420, lpOverlapped=0x0) returned 1 [0049.511] CloseHandle (hObject=0x448) returned 1 [0049.517] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\VVjOWuzx8w8tLEluosA.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\VVjOWuzx8w8tLEluosA.lnk", lpFilePart=0x0) returned 0x56 [0049.518] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\VVjOWuzx8w8tLEluosA.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\VVjOWuzx8w8tLEluosA.lnk.xuy", lpFilePart=0x0) returned 0x5a [0049.518] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0049.518] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\VVjOWuzx8w8tLEluosA.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\vvjowuzx8w8tleluosa.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf48d6428, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf48d6428, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0x95d069b, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x420)) returned 1 [0049.518] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0049.518] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\VVjOWuzx8w8tLEluosA.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\vvjowuzx8w8tleluosa.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\VVjOWuzx8w8tLEluosA.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\vvjowuzx8w8tleluosa.lnk.xuy")) returned 1 [0049.518] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\wHS8C.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\wHS8C.lnk", lpFilePart=0x0) returned 0x48 [0049.518] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0049.519] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\wHS8C.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\whs8c.lnk"), fInfoLevelId=0x0, lpFileInformation=0x227d1e8 | out: lpFileInformation=0x227d1e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5c355ba, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf5c355ba, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0xf5c355ba, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x284)) returned 1 [0049.519] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0049.519] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\wHS8C.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\wHS8C.lnk", lpFilePart=0x0) returned 0x48 [0049.519] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0049.519] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\wHS8C.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\whs8c.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0049.519] GetFileType (hFile=0x448) returned 0x1 [0049.519] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0049.519] GetFileType (hFile=0x448) returned 0x1 [0049.519] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x284 [0049.519] ReadFile (in: hFile=0x448, lpBuffer=0x227d718, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x227d718*, lpNumberOfBytesRead=0x3be868*=0x284, lpOverlapped=0x0) returned 1 [0049.519] CloseHandle (hObject=0x448) returned 1 [0049.531] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\wHS8C.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\wHS8C.lnk", lpFilePart=0x0) returned 0x48 [0049.531] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0049.531] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\wHS8C.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\whs8c.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0049.532] GetFileType (hFile=0x448) returned 0x1 [0049.532] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0049.532] GetFileType (hFile=0x448) returned 0x1 [0049.532] WriteFile (in: hFile=0x448, lpBuffer=0x22f53c8*, nNumberOfBytesToWrite=0x290, lpNumberOfBytesWritten=0x3be778, lpOverlapped=0x0 | out: lpBuffer=0x22f53c8*, lpNumberOfBytesWritten=0x3be778*=0x290, lpOverlapped=0x0) returned 1 [0049.532] CloseHandle (hObject=0x448) returned 1 [0049.533] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\wHS8C.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\wHS8C.lnk", lpFilePart=0x0) returned 0x48 [0049.533] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\wHS8C.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\wHS8C.lnk.xuy", lpFilePart=0x0) returned 0x4c [0049.533] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0049.533] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\wHS8C.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\whs8c.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5c355ba, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf5c355ba, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0x95f6cc2, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x290)) returned 1 [0049.533] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0049.533] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\wHS8C.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\whs8c.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\wHS8C.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\whs8c.lnk.xuy")) returned 1 [0049.564] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\wk7e2LGGFK8X0Z.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\wk7e2LGGFK8X0Z.lnk", lpFilePart=0x0) returned 0x51 [0049.564] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0049.564] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\wk7e2LGGFK8X0Z.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\wk7e2lggfk8x0z.lnk"), fInfoLevelId=0x0, lpFileInformation=0x22f6648 | out: lpFileInformation=0x22f6648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf44f67d7, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf44f67d7, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0xf44f67d7, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x3fa)) returned 1 [0049.564] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0049.564] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\wk7e2LGGFK8X0Z.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\wk7e2LGGFK8X0Z.lnk", lpFilePart=0x0) returned 0x51 [0049.564] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0049.564] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\wk7e2LGGFK8X0Z.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\wk7e2lggfk8x0z.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0049.564] GetFileType (hFile=0x448) returned 0x1 [0049.564] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0049.564] GetFileType (hFile=0x448) returned 0x1 [0049.564] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x3fa [0049.564] ReadFile (in: hFile=0x448, lpBuffer=0x22f6d30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x22f6d30*, lpNumberOfBytesRead=0x3be868*=0x3fa, lpOverlapped=0x0) returned 1 [0049.564] CloseHandle (hObject=0x448) returned 1 [0049.604] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\wk7e2LGGFK8X0Z.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\wk7e2LGGFK8X0Z.lnk", lpFilePart=0x0) returned 0x51 [0049.604] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0049.604] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\wk7e2LGGFK8X0Z.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\wk7e2lggfk8x0z.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0049.605] GetFileType (hFile=0x448) returned 0x1 [0049.605] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0049.605] GetFileType (hFile=0x448) returned 0x1 [0049.605] WriteFile (in: hFile=0x448, lpBuffer=0x216f258*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x3be778, lpOverlapped=0x0 | out: lpBuffer=0x216f258*, lpNumberOfBytesWritten=0x3be778*=0x400, lpOverlapped=0x0) returned 1 [0049.606] CloseHandle (hObject=0x448) returned 1 [0049.607] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\wk7e2LGGFK8X0Z.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\wk7e2LGGFK8X0Z.lnk", lpFilePart=0x0) returned 0x51 [0049.607] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\wk7e2LGGFK8X0Z.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\wk7e2LGGFK8X0Z.lnk.xuy", lpFilePart=0x0) returned 0x55 [0049.607] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0049.607] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\wk7e2LGGFK8X0Z.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\wk7e2lggfk8x0z.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf44f67d7, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf44f67d7, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0x96b5644, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x400)) returned 1 [0049.607] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0049.607] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\wk7e2LGGFK8X0Z.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\wk7e2lggfk8x0z.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\wk7e2LGGFK8X0Z.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\wk7e2lggfk8x0z.lnk.xuy")) returned 1 [0049.608] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\WlBenJ.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\WlBenJ.lnk", lpFilePart=0x0) returned 0x49 [0049.608] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0049.608] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\WlBenJ.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\wlbenj.lnk"), fInfoLevelId=0x0, lpFileInformation=0x2170508 | out: lpFileInformation=0x2170508*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf63829c1, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf63829c1, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0xf63829c1, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x565)) returned 1 [0049.608] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0049.608] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\WlBenJ.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\WlBenJ.lnk", lpFilePart=0x0) returned 0x49 [0049.608] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0049.608] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\WlBenJ.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\wlbenj.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0049.608] GetFileType (hFile=0x448) returned 0x1 [0049.608] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0049.608] GetFileType (hFile=0x448) returned 0x1 [0049.608] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x565 [0049.609] ReadFile (in: hFile=0x448, lpBuffer=0x2170d18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x2170d18*, lpNumberOfBytesRead=0x3be868*=0x565, lpOverlapped=0x0) returned 1 [0049.609] CloseHandle (hObject=0x448) returned 1 [0049.619] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\WlBenJ.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\WlBenJ.lnk", lpFilePart=0x0) returned 0x49 [0049.619] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0049.619] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\WlBenJ.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\wlbenj.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0049.620] GetFileType (hFile=0x448) returned 0x1 [0049.620] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0049.620] GetFileType (hFile=0x448) returned 0x1 [0049.620] WriteFile (in: hFile=0x448, lpBuffer=0x21e9828*, nNumberOfBytesToWrite=0x570, lpNumberOfBytesWritten=0x3be778, lpOverlapped=0x0 | out: lpBuffer=0x21e9828*, lpNumberOfBytesWritten=0x3be778*=0x570, lpOverlapped=0x0) returned 1 [0049.620] CloseHandle (hObject=0x448) returned 1 [0049.622] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\WlBenJ.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\WlBenJ.lnk", lpFilePart=0x0) returned 0x49 [0049.622] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\WlBenJ.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\WlBenJ.lnk.xuy", lpFilePart=0x0) returned 0x4d [0049.622] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0049.622] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\WlBenJ.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\wlbenj.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf63829c1, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf63829c1, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0x96dbb0b, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x570)) returned 1 [0049.622] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0049.622] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\WlBenJ.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\wlbenj.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\WlBenJ.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\wlbenj.lnk.xuy")) returned 1 [0049.623] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\xeKWFIddBHaEN67 iC.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\xeKWFIddBHaEN67 iC.lnk", lpFilePart=0x0) returned 0x55 [0049.623] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0049.623] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\xeKWFIddBHaEN67 iC.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\xekwfiddbhaen67 ic.lnk"), fInfoLevelId=0x0, lpFileInformation=0x21eaaa8 | out: lpFileInformation=0x21eaaa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf57246c6, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf57246c6, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0xf57246c6, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x5e0)) returned 1 [0049.623] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0049.623] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\xeKWFIddBHaEN67 iC.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\xeKWFIddBHaEN67 iC.lnk", lpFilePart=0x0) returned 0x55 [0049.623] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0049.623] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\xeKWFIddBHaEN67 iC.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\xekwfiddbhaen67 ic.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0049.623] GetFileType (hFile=0x448) returned 0x1 [0049.623] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0049.624] GetFileType (hFile=0x448) returned 0x1 [0049.624] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x5e0 [0049.624] ReadFile (in: hFile=0x448, lpBuffer=0x21eb390, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x21eb390*, lpNumberOfBytesRead=0x3be868*=0x5e0, lpOverlapped=0x0) returned 1 [0049.624] CloseHandle (hObject=0x448) returned 1 [0049.637] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\xeKWFIddBHaEN67 iC.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\xeKWFIddBHaEN67 iC.lnk", lpFilePart=0x0) returned 0x55 [0049.637] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0049.637] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\xeKWFIddBHaEN67 iC.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\xekwfiddbhaen67 ic.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0049.638] GetFileType (hFile=0x448) returned 0x1 [0049.638] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0049.638] GetFileType (hFile=0x448) returned 0x1 [0049.638] WriteFile (in: hFile=0x448, lpBuffer=0x2264150*, nNumberOfBytesToWrite=0x5f0, lpNumberOfBytesWritten=0x3be778, lpOverlapped=0x0 | out: lpBuffer=0x2264150*, lpNumberOfBytesWritten=0x3be778*=0x5f0, lpOverlapped=0x0) returned 1 [0049.639] CloseHandle (hObject=0x448) returned 1 [0049.640] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\xeKWFIddBHaEN67 iC.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\xeKWFIddBHaEN67 iC.lnk", lpFilePart=0x0) returned 0x55 [0049.640] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\xeKWFIddBHaEN67 iC.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\xeKWFIddBHaEN67 iC.lnk.xuy", lpFilePart=0x0) returned 0x59 [0049.640] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0049.640] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\xeKWFIddBHaEN67 iC.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\xekwfiddbhaen67 ic.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf57246c6, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf57246c6, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0x9701e65, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x5f0)) returned 1 [0049.640] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0049.640] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\xeKWFIddBHaEN67 iC.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\xekwfiddbhaen67 ic.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\xeKWFIddBHaEN67 iC.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\xekwfiddbhaen67 ic.lnk.xuy")) returned 1 [0049.640] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\xFZ3UgkUHNIW.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\xFZ3UgkUHNIW.lnk", lpFilePart=0x0) returned 0x4f [0049.640] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0049.641] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\xFZ3UgkUHNIW.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\xfz3ugkuhniw.lnk"), fInfoLevelId=0x0, lpFileInformation=0x2265418 | out: lpFileInformation=0x2265418*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4dc12e3, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf4dc12e3, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0xf4dc12e3, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x405)) returned 1 [0049.641] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0049.641] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\xFZ3UgkUHNIW.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\xFZ3UgkUHNIW.lnk", lpFilePart=0x0) returned 0x4f [0049.641] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0049.641] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\xFZ3UgkUHNIW.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\xfz3ugkuhniw.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0049.641] GetFileType (hFile=0x448) returned 0x1 [0049.641] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0049.641] GetFileType (hFile=0x448) returned 0x1 [0049.641] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x405 [0049.641] ReadFile (in: hFile=0x448, lpBuffer=0x2265af8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x2265af8*, lpNumberOfBytesRead=0x3be868*=0x405, lpOverlapped=0x0) returned 1 [0049.641] CloseHandle (hObject=0x448) returned 1 [0049.651] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\xFZ3UgkUHNIW.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\xFZ3UgkUHNIW.lnk", lpFilePart=0x0) returned 0x4f [0049.651] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0049.651] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\xFZ3UgkUHNIW.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\xfz3ugkuhniw.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0049.652] GetFileType (hFile=0x448) returned 0x1 [0049.652] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0049.652] GetFileType (hFile=0x448) returned 0x1 [0049.653] WriteFile (in: hFile=0x448, lpBuffer=0x22ddf40*, nNumberOfBytesToWrite=0x410, lpNumberOfBytesWritten=0x3be778, lpOverlapped=0x0 | out: lpBuffer=0x22ddf40*, lpNumberOfBytesWritten=0x3be778*=0x410, lpOverlapped=0x0) returned 1 [0049.653] CloseHandle (hObject=0x448) returned 1 [0049.654] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\xFZ3UgkUHNIW.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\xFZ3UgkUHNIW.lnk", lpFilePart=0x0) returned 0x4f [0049.654] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\xFZ3UgkUHNIW.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\xFZ3UgkUHNIW.lnk.xuy", lpFilePart=0x0) returned 0x53 [0049.654] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0049.654] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\xFZ3UgkUHNIW.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\xfz3ugkuhniw.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4dc12e3, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf4dc12e3, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0x9727d82, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x410)) returned 1 [0049.654] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0049.654] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\xFZ3UgkUHNIW.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\xfz3ugkuhniw.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\xFZ3UgkUHNIW.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\xfz3ugkuhniw.lnk.xuy")) returned 1 [0049.655] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\XILJaPf2QbTSe0.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\XILJaPf2QbTSe0.lnk", lpFilePart=0x0) returned 0x51 [0049.655] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0049.655] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\XILJaPf2QbTSe0.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\xiljapf2qbtse0.lnk"), fInfoLevelId=0x0, lpFileInformation=0x22df1d8 | out: lpFileInformation=0x22df1d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf400eab5, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf400eab5, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0xf400eab5, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x529)) returned 1 [0049.655] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0049.655] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\XILJaPf2QbTSe0.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\XILJaPf2QbTSe0.lnk", lpFilePart=0x0) returned 0x51 [0049.655] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0049.655] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\XILJaPf2QbTSe0.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\xiljapf2qbtse0.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0049.655] GetFileType (hFile=0x448) returned 0x1 [0049.655] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0049.655] GetFileType (hFile=0x448) returned 0x1 [0049.655] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x529 [0049.655] ReadFile (in: hFile=0x448, lpBuffer=0x22df9f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x22df9f0*, lpNumberOfBytesRead=0x3be868*=0x529, lpOverlapped=0x0) returned 1 [0049.656] CloseHandle (hObject=0x448) returned 1 [0049.679] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\XILJaPf2QbTSe0.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\XILJaPf2QbTSe0.lnk", lpFilePart=0x0) returned 0x51 [0049.679] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0049.679] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\XILJaPf2QbTSe0.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\xiljapf2qbtse0.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0049.680] GetFileType (hFile=0x448) returned 0x1 [0049.680] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0049.680] GetFileType (hFile=0x448) returned 0x1 [0049.680] WriteFile (in: hFile=0x448, lpBuffer=0x21584f8*, nNumberOfBytesToWrite=0x530, lpNumberOfBytesWritten=0x3be778, lpOverlapped=0x0 | out: lpBuffer=0x21584f8*, lpNumberOfBytesWritten=0x3be778*=0x530, lpOverlapped=0x0) returned 1 [0049.681] CloseHandle (hObject=0x448) returned 1 [0049.681] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\XILJaPf2QbTSe0.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\XILJaPf2QbTSe0.lnk", lpFilePart=0x0) returned 0x51 [0049.681] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\XILJaPf2QbTSe0.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\XILJaPf2QbTSe0.lnk.xuy", lpFilePart=0x0) returned 0x55 [0049.682] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0049.682] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\XILJaPf2QbTSe0.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\xiljapf2qbtse0.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf400eab5, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf400eab5, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0x974dd4b, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x530)) returned 1 [0049.682] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0049.682] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\XILJaPf2QbTSe0.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\xiljapf2qbtse0.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\XILJaPf2QbTSe0.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\xiljapf2qbtse0.lnk.xuy")) returned 1 [0049.682] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\xvc5X_EuKq.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\xvc5X_EuKq.lnk", lpFilePart=0x0) returned 0x4d [0049.682] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0049.682] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\xvc5X_EuKq.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\xvc5x_eukq.lnk"), fInfoLevelId=0x0, lpFileInformation=0x21597a8 | out: lpFileInformation=0x21597a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf58ee2be, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf58ee2be, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0xf58ee2be, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x582)) returned 1 [0049.682] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0049.683] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\xvc5X_EuKq.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\xvc5X_EuKq.lnk", lpFilePart=0x0) returned 0x4d [0049.683] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0049.683] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\xvc5X_EuKq.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\xvc5x_eukq.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0049.683] GetFileType (hFile=0x448) returned 0x1 [0049.683] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0049.683] GetFileType (hFile=0x448) returned 0x1 [0049.683] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x582 [0049.683] ReadFile (in: hFile=0x448, lpBuffer=0x2159ff8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x2159ff8*, lpNumberOfBytesRead=0x3be868*=0x582, lpOverlapped=0x0) returned 1 [0049.683] CloseHandle (hObject=0x448) returned 1 [0049.712] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\xvc5X_EuKq.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\xvc5X_EuKq.lnk", lpFilePart=0x0) returned 0x4d [0049.712] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0049.712] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\xvc5X_EuKq.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\xvc5x_eukq.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0049.713] GetFileType (hFile=0x448) returned 0x1 [0049.713] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0049.714] GetFileType (hFile=0x448) returned 0x1 [0049.714] WriteFile (in: hFile=0x448, lpBuffer=0x21d2bb8*, nNumberOfBytesToWrite=0x590, lpNumberOfBytesWritten=0x3be778, lpOverlapped=0x0 | out: lpBuffer=0x21d2bb8*, lpNumberOfBytesWritten=0x3be778*=0x590, lpOverlapped=0x0) returned 1 [0049.715] CloseHandle (hObject=0x448) returned 1 [0049.715] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\xvc5X_EuKq.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\xvc5X_EuKq.lnk", lpFilePart=0x0) returned 0x4d [0049.716] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\xvc5X_EuKq.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\xvc5X_EuKq.lnk.xuy", lpFilePart=0x0) returned 0x51 [0049.716] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0049.716] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\xvc5X_EuKq.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\xvc5x_eukq.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf58ee2be, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf58ee2be, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0x97c0464, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x590)) returned 1 [0049.716] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0049.716] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\xvc5X_EuKq.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\xvc5x_eukq.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\xvc5X_EuKq.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\xvc5x_eukq.lnk.xuy")) returned 1 [0049.717] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\XVz99OD38.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\XVz99OD38.lnk", lpFilePart=0x0) returned 0x4c [0049.717] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0049.717] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\XVz99OD38.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\xvz99od38.lnk"), fInfoLevelId=0x0, lpFileInformation=0x21d3e50 | out: lpFileInformation=0x21d3e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5ade1d1, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf5ade1d1, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0xf5ade1d1, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x509)) returned 1 [0049.717] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0049.717] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\XVz99OD38.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\XVz99OD38.lnk", lpFilePart=0x0) returned 0x4c [0049.717] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0049.717] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\XVz99OD38.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\xvz99od38.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0049.717] GetFileType (hFile=0x448) returned 0x1 [0049.717] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0049.717] GetFileType (hFile=0x448) returned 0x1 [0049.717] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x509 [0049.717] ReadFile (in: hFile=0x448, lpBuffer=0x21d4628, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x21d4628*, lpNumberOfBytesRead=0x3be868*=0x509, lpOverlapped=0x0) returned 1 [0049.718] CloseHandle (hObject=0x448) returned 1 [0049.729] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\XVz99OD38.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\XVz99OD38.lnk", lpFilePart=0x0) returned 0x4c [0049.729] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0049.729] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\XVz99OD38.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\xvz99od38.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0049.731] GetFileType (hFile=0x448) returned 0x1 [0049.731] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0049.731] GetFileType (hFile=0x448) returned 0x1 [0049.731] WriteFile (in: hFile=0x448, lpBuffer=0x224cf60*, nNumberOfBytesToWrite=0x510, lpNumberOfBytesWritten=0x3be778, lpOverlapped=0x0 | out: lpBuffer=0x224cf60*, lpNumberOfBytesWritten=0x3be778*=0x510, lpOverlapped=0x0) returned 1 [0049.732] CloseHandle (hObject=0x448) returned 1 [0049.733] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\XVz99OD38.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\XVz99OD38.lnk", lpFilePart=0x0) returned 0x4c [0049.733] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\XVz99OD38.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\XVz99OD38.lnk.xuy", lpFilePart=0x0) returned 0x50 [0049.733] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0049.733] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\XVz99OD38.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\xvz99od38.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5ade1d1, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf5ade1d1, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0x97e671a, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x510)) returned 1 [0049.733] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0049.733] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\XVz99OD38.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\xvz99od38.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\XVz99OD38.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\xvz99od38.lnk.xuy")) returned 1 [0049.733] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\y sfavt_6-uR zUfBzh.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\y sfavt_6-uR zUfBzh.lnk", lpFilePart=0x0) returned 0x56 [0049.733] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0049.734] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\y sfavt_6-uR zUfBzh.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\y sfavt_6-ur zufbzh.lnk"), fInfoLevelId=0x0, lpFileInformation=0x224e1f8 | out: lpFileInformation=0x224e1f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4ffd4dc, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf4ffd4dc, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0xf4ffd4dc, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x588)) returned 1 [0049.734] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0049.734] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\y sfavt_6-uR zUfBzh.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\y sfavt_6-uR zUfBzh.lnk", lpFilePart=0x0) returned 0x56 [0049.734] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0049.734] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\y sfavt_6-uR zUfBzh.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\y sfavt_6-ur zufbzh.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0049.734] GetFileType (hFile=0x448) returned 0x1 [0049.734] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0049.734] GetFileType (hFile=0x448) returned 0x1 [0049.734] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x588 [0049.734] ReadFile (in: hFile=0x448, lpBuffer=0x224ea88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x224ea88*, lpNumberOfBytesRead=0x3be868*=0x588, lpOverlapped=0x0) returned 1 [0049.734] CloseHandle (hObject=0x448) returned 1 [0049.744] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\y sfavt_6-uR zUfBzh.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\y sfavt_6-uR zUfBzh.lnk", lpFilePart=0x0) returned 0x56 [0049.744] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0049.744] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\y sfavt_6-uR zUfBzh.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\y sfavt_6-ur zufbzh.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0049.745] GetFileType (hFile=0x448) returned 0x1 [0049.745] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0049.745] GetFileType (hFile=0x448) returned 0x1 [0049.745] WriteFile (in: hFile=0x448, lpBuffer=0x22c7660*, nNumberOfBytesToWrite=0x590, lpNumberOfBytesWritten=0x3be778, lpOverlapped=0x0 | out: lpBuffer=0x22c7660*, lpNumberOfBytesWritten=0x3be778*=0x590, lpOverlapped=0x0) returned 1 [0049.747] CloseHandle (hObject=0x448) returned 1 [0049.748] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\y sfavt_6-uR zUfBzh.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\y sfavt_6-uR zUfBzh.lnk", lpFilePart=0x0) returned 0x56 [0049.748] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\y sfavt_6-uR zUfBzh.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\y sfavt_6-uR zUfBzh.lnk.xuy", lpFilePart=0x0) returned 0x5a [0049.748] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0049.748] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\y sfavt_6-uR zUfBzh.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\y sfavt_6-ur zufbzh.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4ffd4dc, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf4ffd4dc, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0x980c9ca, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x590)) returned 1 [0049.748] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0049.748] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\y sfavt_6-uR zUfBzh.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\y sfavt_6-ur zufbzh.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\y sfavt_6-uR zUfBzh.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\y sfavt_6-ur zufbzh.lnk.xuy")) returned 1 [0049.749] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\y1a4kAzLHPnL4SoS O_.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\y1a4kAzLHPnL4SoS O_.lnk", lpFilePart=0x0) returned 0x56 [0049.749] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0049.749] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\y1a4kAzLHPnL4SoS O_.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\y1a4kazlhpnl4sos o_.lnk"), fInfoLevelId=0x0, lpFileInformation=0x22c8928 | out: lpFileInformation=0x22c8928*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5c81a49, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf5c81a49, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0xf5c81a49, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x428)) returned 1 [0049.749] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0049.749] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\y1a4kAzLHPnL4SoS O_.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\y1a4kAzLHPnL4SoS O_.lnk", lpFilePart=0x0) returned 0x56 [0049.749] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0049.749] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\y1a4kAzLHPnL4SoS O_.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\y1a4kazlhpnl4sos o_.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0049.749] GetFileType (hFile=0x448) returned 0x1 [0049.749] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0049.749] GetFileType (hFile=0x448) returned 0x1 [0049.749] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x428 [0049.750] ReadFile (in: hFile=0x448, lpBuffer=0x22c9058, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x22c9058*, lpNumberOfBytesRead=0x3be868*=0x428, lpOverlapped=0x0) returned 1 [0049.750] CloseHandle (hObject=0x448) returned 1 [0049.760] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\y1a4kAzLHPnL4SoS O_.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\y1a4kAzLHPnL4SoS O_.lnk", lpFilePart=0x0) returned 0x56 [0049.760] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0049.760] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\y1a4kAzLHPnL4SoS O_.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\y1a4kazlhpnl4sos o_.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0049.761] GetFileType (hFile=0x448) returned 0x1 [0049.761] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0049.761] GetFileType (hFile=0x448) returned 0x1 [0049.761] WriteFile (in: hFile=0x448, lpBuffer=0x2341550*, nNumberOfBytesToWrite=0x430, lpNumberOfBytesWritten=0x3be778, lpOverlapped=0x0 | out: lpBuffer=0x2341550*, lpNumberOfBytesWritten=0x3be778*=0x430, lpOverlapped=0x0) returned 1 [0049.762] CloseHandle (hObject=0x448) returned 1 [0049.763] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\y1a4kAzLHPnL4SoS O_.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\y1a4kAzLHPnL4SoS O_.lnk", lpFilePart=0x0) returned 0x56 [0049.763] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\y1a4kAzLHPnL4SoS O_.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\y1a4kAzLHPnL4SoS O_.lnk.xuy", lpFilePart=0x0) returned 0x5a [0049.763] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0049.763] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\y1a4kAzLHPnL4SoS O_.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\y1a4kazlhpnl4sos o_.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5c81a49, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf5c81a49, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0x9832bdd, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x430)) returned 1 [0049.763] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0049.763] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\y1a4kAzLHPnL4SoS O_.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\y1a4kazlhpnl4sos o_.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\y1a4kAzLHPnL4SoS O_.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\y1a4kazlhpnl4sos o_.lnk.xuy")) returned 1 [0049.764] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\y3K K0vmpn.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\y3K K0vmpn.lnk", lpFilePart=0x0) returned 0x4d [0049.764] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0049.764] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\y3K K0vmpn.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\y3k k0vmpn.lnk"), fInfoLevelId=0x0, lpFileInformation=0x2342818 | out: lpFileInformation=0x2342818*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2968cd7, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf56d8174, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0xf56d8174, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x3d5)) returned 1 [0049.764] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0049.764] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\y3K K0vmpn.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\y3K K0vmpn.lnk", lpFilePart=0x0) returned 0x4d [0049.764] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0049.764] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\y3K K0vmpn.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\y3k k0vmpn.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0049.764] GetFileType (hFile=0x448) returned 0x1 [0049.764] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0049.764] GetFileType (hFile=0x448) returned 0x1 [0049.764] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x3d5 [0049.764] ReadFile (in: hFile=0x448, lpBuffer=0x2342eb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x2342eb8*, lpNumberOfBytesRead=0x3be868*=0x3d5, lpOverlapped=0x0) returned 1 [0049.764] CloseHandle (hObject=0x448) returned 1 [0049.842] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\y3K K0vmpn.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\y3K K0vmpn.lnk", lpFilePart=0x0) returned 0x4d [0049.842] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0049.842] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\y3K K0vmpn.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\y3k k0vmpn.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0049.843] GetFileType (hFile=0x448) returned 0x1 [0049.843] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0049.843] GetFileType (hFile=0x448) returned 0x1 [0049.843] WriteFile (in: hFile=0x448, lpBuffer=0x21bb0a8*, nNumberOfBytesToWrite=0x3e0, lpNumberOfBytesWritten=0x3be778, lpOverlapped=0x0 | out: lpBuffer=0x21bb0a8*, lpNumberOfBytesWritten=0x3be778*=0x3e0, lpOverlapped=0x0) returned 1 [0049.844] CloseHandle (hObject=0x448) returned 1 [0049.845] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\y3K K0vmpn.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\y3K K0vmpn.lnk", lpFilePart=0x0) returned 0x4d [0049.845] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\y3K K0vmpn.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\y3K K0vmpn.lnk.xuy", lpFilePart=0x0) returned 0x51 [0049.845] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0049.845] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\y3K K0vmpn.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\y3k k0vmpn.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2968cd7, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf56d8174, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0x98f18f5, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x3e0)) returned 1 [0049.845] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0049.845] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\y3K K0vmpn.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\y3k k0vmpn.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\y3K K0vmpn.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\y3k k0vmpn.lnk.xuy")) returned 1 [0049.845] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\y8reS6m.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\y8reS6m.lnk", lpFilePart=0x0) returned 0x4a [0049.845] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0049.846] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\y8reS6m.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\y8res6m.lnk"), fInfoLevelId=0x0, lpFileInformation=0x21bc340 | out: lpFileInformation=0x21bc340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5239910, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf5239910, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0xf5239910, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x420)) returned 1 [0049.846] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0049.846] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\y8reS6m.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\y8reS6m.lnk", lpFilePart=0x0) returned 0x4a [0049.846] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0049.846] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\y8reS6m.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\y8res6m.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0049.846] GetFileType (hFile=0x448) returned 0x1 [0049.846] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0049.846] GetFileType (hFile=0x448) returned 0x1 [0049.846] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x420 [0049.846] ReadFile (in: hFile=0x448, lpBuffer=0x21bca08, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x21bca08*, lpNumberOfBytesRead=0x3be868*=0x420, lpOverlapped=0x0) returned 1 [0049.846] CloseHandle (hObject=0x448) returned 1 [0049.856] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\y8reS6m.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\y8reS6m.lnk", lpFilePart=0x0) returned 0x4a [0049.856] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0049.856] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\y8reS6m.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\y8res6m.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0049.857] GetFileType (hFile=0x448) returned 0x1 [0049.857] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0049.857] GetFileType (hFile=0x448) returned 0x1 [0049.857] WriteFile (in: hFile=0x448, lpBuffer=0x2234ed8*, nNumberOfBytesToWrite=0x430, lpNumberOfBytesWritten=0x3be778, lpOverlapped=0x0 | out: lpBuffer=0x2234ed8*, lpNumberOfBytesWritten=0x3be778*=0x430, lpOverlapped=0x0) returned 1 [0049.858] CloseHandle (hObject=0x448) returned 1 [0049.859] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\y8reS6m.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\y8reS6m.lnk", lpFilePart=0x0) returned 0x4a [0049.859] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\y8reS6m.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\y8reS6m.lnk.xuy", lpFilePart=0x0) returned 0x4e [0049.859] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0049.859] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\y8reS6m.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\y8res6m.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5239910, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf5239910, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0x9917b04, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x430)) returned 1 [0049.859] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0049.859] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\y8reS6m.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\y8res6m.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\y8reS6m.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\y8res6m.lnk.xuy")) returned 1 [0049.860] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\YWlhp1_r1Xzl.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\YWlhp1_r1Xzl.lnk", lpFilePart=0x0) returned 0x4f [0049.860] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0049.860] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\YWlhp1_r1Xzl.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\ywlhp1_r1xzl.lnk"), fInfoLevelId=0x0, lpFileInformation=0x2236158 | out: lpFileInformation=0x2236158*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3fe57af, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf3fe57af, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0xf3fe57af, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x3f0)) returned 1 [0049.860] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0049.860] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\YWlhp1_r1Xzl.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\YWlhp1_r1Xzl.lnk", lpFilePart=0x0) returned 0x4f [0049.860] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0049.860] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\YWlhp1_r1Xzl.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\ywlhp1_r1xzl.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0049.860] GetFileType (hFile=0x448) returned 0x1 [0049.860] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0049.860] GetFileType (hFile=0x448) returned 0x1 [0049.860] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x3f0 [0049.860] ReadFile (in: hFile=0x448, lpBuffer=0x2236820, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x2236820*, lpNumberOfBytesRead=0x3be868*=0x3f0, lpOverlapped=0x0) returned 1 [0049.860] CloseHandle (hObject=0x448) returned 1 [0049.870] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\YWlhp1_r1Xzl.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\YWlhp1_r1Xzl.lnk", lpFilePart=0x0) returned 0x4f [0049.870] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0049.870] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\YWlhp1_r1Xzl.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\ywlhp1_r1xzl.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0049.872] GetFileType (hFile=0x448) returned 0x1 [0049.872] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0049.872] GetFileType (hFile=0x448) returned 0x1 [0049.872] WriteFile (in: hFile=0x448, lpBuffer=0x22aec18*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x3be778, lpOverlapped=0x0 | out: lpBuffer=0x22aec18*, lpNumberOfBytesWritten=0x3be778*=0x400, lpOverlapped=0x0) returned 1 [0049.873] CloseHandle (hObject=0x448) returned 1 [0049.874] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\YWlhp1_r1Xzl.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\YWlhp1_r1Xzl.lnk", lpFilePart=0x0) returned 0x4f [0049.874] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\YWlhp1_r1Xzl.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\YWlhp1_r1Xzl.lnk.xuy", lpFilePart=0x0) returned 0x53 [0049.874] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0049.874] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\YWlhp1_r1Xzl.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\ywlhp1_r1xzl.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3fe57af, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf3fe57af, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0x993dbed, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x400)) returned 1 [0049.874] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0049.874] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\YWlhp1_r1Xzl.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\ywlhp1_r1xzl.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\YWlhp1_r1Xzl.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\ywlhp1_r1xzl.lnk.xuy")) returned 1 [0049.874] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\zMTJW8Dsc.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\zMTJW8Dsc.lnk", lpFilePart=0x0) returned 0x4c [0049.875] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0049.875] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\zMTJW8Dsc.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\zmtjw8dsc.lnk"), fInfoLevelId=0x0, lpFileInformation=0x22afeb0 | out: lpFileInformation=0x22afeb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf407e149, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf407e149, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0xf407e149, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x561)) returned 1 [0049.875] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0049.875] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\zMTJW8Dsc.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\zMTJW8Dsc.lnk", lpFilePart=0x0) returned 0x4c [0049.875] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0049.875] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\zMTJW8Dsc.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\zmtjw8dsc.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0049.875] GetFileType (hFile=0x448) returned 0x1 [0049.875] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0049.875] GetFileType (hFile=0x448) returned 0x1 [0049.875] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x561 [0049.875] ReadFile (in: hFile=0x448, lpBuffer=0x22b06e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x22b06e0*, lpNumberOfBytesRead=0x3be868*=0x561, lpOverlapped=0x0) returned 1 [0049.875] CloseHandle (hObject=0x448) returned 1 [0049.885] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\zMTJW8Dsc.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\zMTJW8Dsc.lnk", lpFilePart=0x0) returned 0x4c [0049.885] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0049.885] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\zMTJW8Dsc.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\zmtjw8dsc.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0049.886] GetFileType (hFile=0x448) returned 0x1 [0049.886] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0049.886] GetFileType (hFile=0x448) returned 0x1 [0049.886] WriteFile (in: hFile=0x448, lpBuffer=0x2329200*, nNumberOfBytesToWrite=0x570, lpNumberOfBytesWritten=0x3be778, lpOverlapped=0x0 | out: lpBuffer=0x2329200*, lpNumberOfBytesWritten=0x3be778*=0x570, lpOverlapped=0x0) returned 1 [0049.887] CloseHandle (hObject=0x448) returned 1 [0049.887] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\zMTJW8Dsc.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\zMTJW8Dsc.lnk", lpFilePart=0x0) returned 0x4c [0049.887] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\zMTJW8Dsc.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\zMTJW8Dsc.lnk.xuy", lpFilePart=0x0) returned 0x50 [0049.888] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0049.888] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\zMTJW8Dsc.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\zmtjw8dsc.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf407e149, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf407e149, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0x9963e72, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x570)) returned 1 [0049.888] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0049.888] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\zMTJW8Dsc.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\zmtjw8dsc.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\zMTJW8Dsc.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\zmtjw8dsc.lnk.xuy")) returned 1 [0049.888] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\zozaK-qF 9YEvt.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\zozaK-qF 9YEvt.lnk", lpFilePart=0x0) returned 0x51 [0049.888] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0049.888] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\zozaK-qF 9YEvt.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\zozak-qf 9yevt.lnk"), fInfoLevelId=0x0, lpFileInformation=0x232a498 | out: lpFileInformation=0x232a498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf44840b3, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf44840b3, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0xf44840b3, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x40f)) returned 1 [0049.888] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0049.888] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\zozaK-qF 9YEvt.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\zozaK-qF 9YEvt.lnk", lpFilePart=0x0) returned 0x51 [0049.888] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0049.889] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\zozaK-qF 9YEvt.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\zozak-qf 9yevt.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0049.889] GetFileType (hFile=0x448) returned 0x1 [0049.889] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0049.889] GetFileType (hFile=0x448) returned 0x1 [0049.889] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x40f [0049.889] ReadFile (in: hFile=0x448, lpBuffer=0x232ab90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x232ab90*, lpNumberOfBytesRead=0x3be868*=0x40f, lpOverlapped=0x0) returned 1 [0049.889] CloseHandle (hObject=0x448) returned 1 [0049.925] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\zozaK-qF 9YEvt.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\zozaK-qF 9YEvt.lnk", lpFilePart=0x0) returned 0x51 [0049.925] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0049.925] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\zozaK-qF 9YEvt.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\zozak-qf 9yevt.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0049.926] GetFileType (hFile=0x448) returned 0x1 [0049.926] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0049.926] GetFileType (hFile=0x448) returned 0x1 [0049.926] WriteFile (in: hFile=0x448, lpBuffer=0x21a2fd8*, nNumberOfBytesToWrite=0x410, lpNumberOfBytesWritten=0x3be778, lpOverlapped=0x0 | out: lpBuffer=0x21a2fd8*, lpNumberOfBytesWritten=0x3be778*=0x410, lpOverlapped=0x0) returned 1 [0049.926] CloseHandle (hObject=0x448) returned 1 [0049.928] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\zozaK-qF 9YEvt.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\zozaK-qF 9YEvt.lnk", lpFilePart=0x0) returned 0x51 [0049.928] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\zozaK-qF 9YEvt.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\zozaK-qF 9YEvt.lnk.xuy", lpFilePart=0x0) returned 0x55 [0049.928] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0049.928] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\zozaK-qF 9YEvt.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\zozak-qf 9yevt.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf44840b3, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf44840b3, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0x99b03ef, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x410)) returned 1 [0049.928] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0049.929] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\zozaK-qF 9YEvt.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\zozak-qf 9yevt.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\zozaK-qF 9YEvt.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\zozak-qf 9yevt.lnk.xuy")) returned 1 [0049.929] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ZyJPALqhGX4Hsp7.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ZyJPALqhGX4Hsp7.lnk", lpFilePart=0x0) returned 0x52 [0049.929] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0049.929] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ZyJPALqhGX4Hsp7.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\zyjpalqhgx4hsp7.lnk"), fInfoLevelId=0x0, lpFileInformation=0x21a4288 | out: lpFileInformation=0x21a4288*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf51c727c, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf51c727c, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0xf51c727c, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x2b3)) returned 1 [0049.929] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0049.929] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ZyJPALqhGX4Hsp7.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ZyJPALqhGX4Hsp7.lnk", lpFilePart=0x0) returned 0x52 [0049.929] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0049.929] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ZyJPALqhGX4Hsp7.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\zyjpalqhgx4hsp7.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0049.929] GetFileType (hFile=0x448) returned 0x1 [0049.929] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0049.930] GetFileType (hFile=0x448) returned 0x1 [0049.930] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x2b3 [0049.930] ReadFile (in: hFile=0x448, lpBuffer=0x21a4828, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x21a4828*, lpNumberOfBytesRead=0x3be868*=0x2b3, lpOverlapped=0x0) returned 1 [0049.930] CloseHandle (hObject=0x448) returned 1 [0049.943] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ZyJPALqhGX4Hsp7.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ZyJPALqhGX4Hsp7.lnk", lpFilePart=0x0) returned 0x52 [0049.943] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0049.943] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ZyJPALqhGX4Hsp7.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\zyjpalqhgx4hsp7.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0049.944] GetFileType (hFile=0x448) returned 0x1 [0049.944] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0049.944] GetFileType (hFile=0x448) returned 0x1 [0049.944] WriteFile (in: hFile=0x448, lpBuffer=0x221c5e8*, nNumberOfBytesToWrite=0x2c0, lpNumberOfBytesWritten=0x3be778, lpOverlapped=0x0 | out: lpBuffer=0x221c5e8*, lpNumberOfBytesWritten=0x3be778*=0x2c0, lpOverlapped=0x0) returned 1 [0049.945] CloseHandle (hObject=0x448) returned 1 [0049.946] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ZyJPALqhGX4Hsp7.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ZyJPALqhGX4Hsp7.lnk", lpFilePart=0x0) returned 0x52 [0049.946] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ZyJPALqhGX4Hsp7.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ZyJPALqhGX4Hsp7.lnk.xuy", lpFilePart=0x0) returned 0x56 [0049.946] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0049.946] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ZyJPALqhGX4Hsp7.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\zyjpalqhgx4hsp7.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf51c727c, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf51c727c, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0x99d65e6, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2c0)) returned 1 [0049.946] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0049.946] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ZyJPALqhGX4Hsp7.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\zyjpalqhgx4hsp7.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ZyJPALqhGX4Hsp7.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\zyjpalqhgx4hsp7.lnk.xuy")) returned 1 [0049.946] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Zyo85Jd4gSHjAVsjV.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Zyo85Jd4gSHjAVsjV.lnk", lpFilePart=0x0) returned 0x54 [0049.946] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0049.947] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Zyo85Jd4gSHjAVsjV.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\zyo85jd4gshjavsjv.lnk"), fInfoLevelId=0x0, lpFileInformation=0x221d898 | out: lpFileInformation=0x221d898*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf41d5734, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf41d5734, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0xf41d5734, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x4a7)) returned 1 [0049.947] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0049.947] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Zyo85Jd4gSHjAVsjV.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Zyo85Jd4gSHjAVsjV.lnk", lpFilePart=0x0) returned 0x54 [0049.947] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0049.947] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Zyo85Jd4gSHjAVsjV.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\zyo85jd4gshjavsjv.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0049.947] GetFileType (hFile=0x448) returned 0x1 [0049.947] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0049.947] GetFileType (hFile=0x448) returned 0x1 [0049.947] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x4a7 [0049.947] ReadFile (in: hFile=0x448, lpBuffer=0x221e048, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x221e048*, lpNumberOfBytesRead=0x3be868*=0x4a7, lpOverlapped=0x0) returned 1 [0049.947] CloseHandle (hObject=0x448) returned 1 [0049.957] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Zyo85Jd4gSHjAVsjV.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Zyo85Jd4gSHjAVsjV.lnk", lpFilePart=0x0) returned 0x54 [0049.957] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0049.957] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Zyo85Jd4gSHjAVsjV.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\zyo85jd4gshjavsjv.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0049.958] GetFileType (hFile=0x448) returned 0x1 [0049.958] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0049.958] GetFileType (hFile=0x448) returned 0x1 [0049.959] WriteFile (in: hFile=0x448, lpBuffer=0x22967c8*, nNumberOfBytesToWrite=0x4b0, lpNumberOfBytesWritten=0x3be778, lpOverlapped=0x0 | out: lpBuffer=0x22967c8*, lpNumberOfBytesWritten=0x3be778*=0x4b0, lpOverlapped=0x0) returned 1 [0049.959] CloseHandle (hObject=0x448) returned 1 [0049.960] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Zyo85Jd4gSHjAVsjV.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Zyo85Jd4gSHjAVsjV.lnk", lpFilePart=0x0) returned 0x54 [0049.960] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Zyo85Jd4gSHjAVsjV.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Zyo85Jd4gSHjAVsjV.lnk.xuy", lpFilePart=0x0) returned 0x58 [0049.960] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0049.960] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Zyo85Jd4gSHjAVsjV.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\zyo85jd4gshjavsjv.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf41d5734, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf41d5734, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0x99fc91f, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x4b0)) returned 1 [0049.960] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0049.960] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Zyo85Jd4gSHjAVsjV.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\zyo85jd4gshjavsjv.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Zyo85Jd4gSHjAVsjV.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\zyo85jd4gshjavsjv.lnk.xuy")) returned 1 [0049.963] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\zz0GoIZI_KNNIh4a.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\zz0GoIZI_KNNIh4a.lnk", lpFilePart=0x0) returned 0x53 [0049.963] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0049.963] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\zz0GoIZI_KNNIh4a.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\zz0goizi_knnih4a.lnk"), fInfoLevelId=0x0, lpFileInformation=0x2297a90 | out: lpFileInformation=0x2297a90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf209e3aa, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf563f6b0, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0xf563f6b0, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x4f5)) returned 1 [0049.963] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0049.963] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\zz0GoIZI_KNNIh4a.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\zz0GoIZI_KNNIh4a.lnk", lpFilePart=0x0) returned 0x53 [0049.963] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0049.963] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\zz0GoIZI_KNNIh4a.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\zz0goizi_knnih4a.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0049.963] GetFileType (hFile=0x448) returned 0x1 [0049.963] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0049.963] GetFileType (hFile=0x448) returned 0x1 [0049.963] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x4f5 [0049.964] ReadFile (in: hFile=0x448, lpBuffer=0x2298280, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x2298280*, lpNumberOfBytesRead=0x3be868*=0x4f5, lpOverlapped=0x0) returned 1 [0049.964] CloseHandle (hObject=0x448) returned 1 [0049.975] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\zz0GoIZI_KNNIh4a.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\zz0GoIZI_KNNIh4a.lnk", lpFilePart=0x0) returned 0x53 [0049.975] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0049.975] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\zz0GoIZI_KNNIh4a.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\zz0goizi_knnih4a.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0049.976] GetFileType (hFile=0x448) returned 0x1 [0049.976] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0049.976] GetFileType (hFile=0x448) returned 0x1 [0049.976] WriteFile (in: hFile=0x448, lpBuffer=0x2310b88*, nNumberOfBytesToWrite=0x500, lpNumberOfBytesWritten=0x3be778, lpOverlapped=0x0 | out: lpBuffer=0x2310b88*, lpNumberOfBytesWritten=0x3be778*=0x500, lpOverlapped=0x0) returned 1 [0049.977] CloseHandle (hObject=0x448) returned 1 [0049.977] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\zz0GoIZI_KNNIh4a.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\zz0GoIZI_KNNIh4a.lnk", lpFilePart=0x0) returned 0x53 [0049.977] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\zz0GoIZI_KNNIh4a.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\zz0GoIZI_KNNIh4a.lnk.xuy", lpFilePart=0x0) returned 0x57 [0049.977] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0049.977] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\zz0GoIZI_KNNIh4a.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\zz0goizi_knnih4a.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf209e3aa, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf563f6b0, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0x9a22fac, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x500)) returned 1 [0049.978] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0049.978] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\zz0GoIZI_KNNIh4a.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\zz0goizi_knnih4a.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\zz0GoIZI_KNNIh4a.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\zz0goizi_knnih4a.lnk.xuy")) returned 1 [0049.978] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Z_MokPYp K.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Z_MokPYp K.lnk", lpFilePart=0x0) returned 0x4d [0049.978] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0049.978] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Z_MokPYp K.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\z_mokpyp k.lnk"), fInfoLevelId=0x0, lpFileInformation=0x2311e38 | out: lpFileInformation=0x2311e38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3e41d97, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf3e41d97, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0xf3e41d97, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x57b)) returned 1 [0049.978] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0049.978] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Z_MokPYp K.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Z_MokPYp K.lnk", lpFilePart=0x0) returned 0x4d [0049.978] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0049.978] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Z_MokPYp K.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\z_mokpyp k.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0049.979] GetFileType (hFile=0x448) returned 0x1 [0049.979] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0049.979] GetFileType (hFile=0x448) returned 0x1 [0049.979] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x57b [0049.979] ReadFile (in: hFile=0x448, lpBuffer=0x2312680, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x2312680*, lpNumberOfBytesRead=0x3be868*=0x57b, lpOverlapped=0x0) returned 1 [0049.979] CloseHandle (hObject=0x448) returned 1 [0050.018] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Z_MokPYp K.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Z_MokPYp K.lnk", lpFilePart=0x0) returned 0x4d [0050.018] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0050.018] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Z_MokPYp K.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\z_mokpyp k.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0050.019] GetFileType (hFile=0x448) returned 0x1 [0050.019] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0050.019] GetFileType (hFile=0x448) returned 0x1 [0050.019] WriteFile (in: hFile=0x448, lpBuffer=0x218b328*, nNumberOfBytesToWrite=0x580, lpNumberOfBytesWritten=0x3be778, lpOverlapped=0x0 | out: lpBuffer=0x218b328*, lpNumberOfBytesWritten=0x3be778*=0x580, lpOverlapped=0x0) returned 1 [0050.020] CloseHandle (hObject=0x448) returned 1 [0050.021] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Z_MokPYp K.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Z_MokPYp K.lnk", lpFilePart=0x0) returned 0x4d [0050.021] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Z_MokPYp K.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Z_MokPYp K.lnk.xuy", lpFilePart=0x0) returned 0x51 [0050.021] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0050.021] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Z_MokPYp K.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\z_mokpyp k.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3e41d97, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf3e41d97, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0x9a952d1, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x580)) returned 1 [0050.021] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0050.021] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Z_MokPYp K.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\z_mokpyp k.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Z_MokPYp K.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\z_mokpyp k.lnk.xuy")) returned 1 [0050.021] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\_QpPI0V9w7jmp.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\_QpPI0V9w7jmp.lnk", lpFilePart=0x0) returned 0x50 [0050.022] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0050.022] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\_QpPI0V9w7jmp.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\_qppi0v9w7jmp.lnk"), fInfoLevelId=0x0, lpFileInformation=0x218c5c0 | out: lpFileInformation=0x218c5c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf53b6f2e, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf53b6f2e, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0xf53b6f2e, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x2a9)) returned 1 [0050.022] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0050.022] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\_QpPI0V9w7jmp.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\_QpPI0V9w7jmp.lnk", lpFilePart=0x0) returned 0x50 [0050.022] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0050.022] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\_QpPI0V9w7jmp.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\_qppi0v9w7jmp.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0050.022] GetFileType (hFile=0x448) returned 0x1 [0050.022] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0050.022] GetFileType (hFile=0x448) returned 0x1 [0050.022] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x2a9 [0050.022] ReadFile (in: hFile=0x448, lpBuffer=0x218cb58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x218cb58*, lpNumberOfBytesRead=0x3be868*=0x2a9, lpOverlapped=0x0) returned 1 [0050.022] CloseHandle (hObject=0x448) returned 1 [0050.033] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\_QpPI0V9w7jmp.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\_QpPI0V9w7jmp.lnk", lpFilePart=0x0) returned 0x50 [0050.033] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0050.033] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\_QpPI0V9w7jmp.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\_qppi0v9w7jmp.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0050.034] GetFileType (hFile=0x448) returned 0x1 [0050.034] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0050.034] GetFileType (hFile=0x448) returned 0x1 [0050.034] WriteFile (in: hFile=0x448, lpBuffer=0x22048c0*, nNumberOfBytesToWrite=0x2b0, lpNumberOfBytesWritten=0x3be778, lpOverlapped=0x0 | out: lpBuffer=0x22048c0*, lpNumberOfBytesWritten=0x3be778*=0x2b0, lpOverlapped=0x0) returned 1 [0050.035] CloseHandle (hObject=0x448) returned 1 [0050.035] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\_QpPI0V9w7jmp.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\_QpPI0V9w7jmp.lnk", lpFilePart=0x0) returned 0x50 [0050.035] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\_QpPI0V9w7jmp.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\_QpPI0V9w7jmp.lnk.xuy", lpFilePart=0x0) returned 0x54 [0050.035] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0050.035] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\_QpPI0V9w7jmp.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\_qppi0v9w7jmp.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf53b6f2e, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf53b6f2e, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0x9abb780, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2b0)) returned 1 [0050.035] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0050.035] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\_QpPI0V9w7jmp.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\_qppi0v9w7jmp.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\_QpPI0V9w7jmp.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\_qppi0v9w7jmp.lnk.xuy")) returned 1 [0050.036] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\_xN12rPpzNlGEeUEq29.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\_xN12rPpzNlGEeUEq29.lnk", lpFilePart=0x0) returned 0x56 [0050.036] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0050.036] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\_xN12rPpzNlGEeUEq29.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\_xn12rppznlgeeueq29.lnk"), fInfoLevelId=0x0, lpFileInformation=0x2205b70 | out: lpFileInformation=0x2205b70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf46e656a, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf46e656a, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0xf46e656a, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x550)) returned 1 [0050.036] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0050.036] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\_xN12rPpzNlGEeUEq29.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\_xN12rPpzNlGEeUEq29.lnk", lpFilePart=0x0) returned 0x56 [0050.036] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0050.036] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\_xN12rPpzNlGEeUEq29.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\_xn12rppznlgeeueq29.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0050.036] GetFileType (hFile=0x448) returned 0x1 [0050.036] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0050.036] GetFileType (hFile=0x448) returned 0x1 [0050.036] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x550 [0050.037] ReadFile (in: hFile=0x448, lpBuffer=0x22063c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x22063c8*, lpNumberOfBytesRead=0x3be868*=0x550, lpOverlapped=0x0) returned 1 [0050.037] CloseHandle (hObject=0x448) returned 1 [0050.050] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\_xN12rPpzNlGEeUEq29.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\_xN12rPpzNlGEeUEq29.lnk", lpFilePart=0x0) returned 0x56 [0050.050] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0050.050] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\_xN12rPpzNlGEeUEq29.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\_xn12rppznlgeeueq29.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0050.051] GetFileType (hFile=0x448) returned 0x1 [0050.051] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0050.051] GetFileType (hFile=0x448) returned 0x1 [0050.051] WriteFile (in: hFile=0x448, lpBuffer=0x227eeb8*, nNumberOfBytesToWrite=0x560, lpNumberOfBytesWritten=0x3be778, lpOverlapped=0x0 | out: lpBuffer=0x227eeb8*, lpNumberOfBytesWritten=0x3be778*=0x560, lpOverlapped=0x0) returned 1 [0050.052] CloseHandle (hObject=0x448) returned 1 [0050.053] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\_xN12rPpzNlGEeUEq29.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\_xN12rPpzNlGEeUEq29.lnk", lpFilePart=0x0) returned 0x56 [0050.053] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\_xN12rPpzNlGEeUEq29.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\_xN12rPpzNlGEeUEq29.lnk.xuy", lpFilePart=0x0) returned 0x5a [0050.053] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0050.053] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\_xN12rPpzNlGEeUEq29.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\_xn12rppznlgeeueq29.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf46e656a, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf46e656a, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0x9ae1677, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x560)) returned 1 [0050.053] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0050.053] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\_xN12rPpzNlGEeUEq29.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\_xn12rppznlgeeueq29.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\_xN12rPpzNlGEeUEq29.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\_xn12rppznlgeeueq29.lnk.xuy")) returned 1 [0050.054] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0050.054] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations", nBufferLength=0x105, lpBuffer=0x3be3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations", lpFilePart=0x0) returned 0x54 [0050.054] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\", nBufferLength=0x105, lpBuffer=0x3be370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\", lpFilePart=0x0) returned 0x55 [0050.054] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\*", lpFindFileData=0x3be580 | out: lpFindFileData=0x3be580) returned 0x5d78b0 [0050.054] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0050.054] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0050.054] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0050.054] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0050.055] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0050.055] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0050.055] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0050.055] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0050.055] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0050.055] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0050.055] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0050.055] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0050.055] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0050.055] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0050.056] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 0 [0050.056] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0050.056] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0050.056] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7f0) returned 1 [0050.056] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0050.056] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations", nBufferLength=0x105, lpBuffer=0x3be3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations", lpFilePart=0x0) returned 0x54 [0050.056] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\", nBufferLength=0x105, lpBuffer=0x3be370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\", lpFilePart=0x0) returned 0x55 [0050.056] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\*", lpFindFileData=0x3be580 | out: lpFindFileData=0x3be580) returned 0x5d7af0 [0050.056] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0050.056] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0050.056] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0050.056] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0050.057] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0050.057] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0050.057] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0050.057] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0050.057] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0050.057] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0050.057] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0050.058] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0050.058] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0050.058] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0050.059] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 0 [0050.059] FindClose (in: hFindFile=0x5d7af0 | out: hFindFile=0x5d7af0) returned 1 [0050.059] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0050.059] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7f0) returned 1 [0050.059] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\1bc9bbbe61f14501.automaticDestinations-ms", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\1bc9bbbe61f14501.automaticDestinations-ms", lpFilePart=0x0) returned 0x7e [0050.059] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0050.059] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\1bc9bbbe61f14501.automaticDestinations-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\automaticdestinations\\1bc9bbbe61f14501.automaticdestinations-ms"), fInfoLevelId=0x0, lpFileInformation=0x2287310 | out: lpFileInformation=0x2287310*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0802fd3, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0xb0802fd3, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0xb0802fd3, ftLastWriteTime.dwHighDateTime=0x1d301c4, nFileSizeHigh=0x0, nFileSizeLow=0xa00)) returned 1 [0050.060] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0050.060] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\1bc9bbbe61f14501.automaticDestinations-ms", nBufferLength=0x105, lpBuffer=0x3be250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\1bc9bbbe61f14501.automaticDestinations-ms", lpFilePart=0x0) returned 0x7e [0050.060] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be730) returned 1 [0050.060] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\1bc9bbbe61f14501.automaticDestinations-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\automaticdestinations\\1bc9bbbe61f14501.automaticdestinations-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0050.060] GetFileType (hFile=0x448) returned 0x1 [0050.060] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0050.060] GetFileType (hFile=0x448) returned 0x1 [0050.060] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3be8c8 | out: lpFileSizeHigh=0x3be8c8*=0x0) returned 0xa00 [0050.061] ReadFile (in: hFile=0x448, lpBuffer=0x2288108, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be7f8, lpOverlapped=0x0 | out: lpBuffer=0x2288108*, lpNumberOfBytesRead=0x3be7f8*=0xa00, lpOverlapped=0x0) returned 1 [0050.072] CloseHandle (hObject=0x448) returned 1 [0050.082] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\1bc9bbbe61f14501.automaticDestinations-ms", nBufferLength=0x105, lpBuffer=0x3be250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\1bc9bbbe61f14501.automaticDestinations-ms", lpFilePart=0x0) returned 0x7e [0050.082] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be730) returned 1 [0050.082] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\1bc9bbbe61f14501.automaticDestinations-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\automaticdestinations\\1bc9bbbe61f14501.automaticdestinations-ms"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0050.083] GetFileType (hFile=0x448) returned 0x1 [0050.083] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0050.083] GetFileType (hFile=0x448) returned 0x1 [0050.083] WriteFile (in: hFile=0x448, lpBuffer=0x23023e0*, nNumberOfBytesToWrite=0xa10, lpNumberOfBytesWritten=0x3be708, lpOverlapped=0x0 | out: lpBuffer=0x23023e0*, lpNumberOfBytesWritten=0x3be708*=0xa10, lpOverlapped=0x0) returned 1 [0050.084] CloseHandle (hObject=0x448) returned 1 [0050.085] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\1bc9bbbe61f14501.automaticDestinations-ms", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\1bc9bbbe61f14501.automaticDestinations-ms", lpFilePart=0x0) returned 0x7e [0050.085] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\1bc9bbbe61f14501.automaticDestinations-ms.xuy", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\1bc9bbbe61f14501.automaticDestinations-ms.xuy", lpFilePart=0x0) returned 0x82 [0050.085] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0050.085] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\1bc9bbbe61f14501.automaticDestinations-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\automaticdestinations\\1bc9bbbe61f14501.automaticdestinations-ms"), fInfoLevelId=0x0, lpFileInformation=0x3be910 | out: lpFileInformation=0x3be910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0802fd3, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0xb0802fd3, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x9b2d9e4, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xa10)) returned 1 [0050.085] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7f0) returned 1 [0050.085] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\1bc9bbbe61f14501.automaticDestinations-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\automaticdestinations\\1bc9bbbe61f14501.automaticdestinations-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\1bc9bbbe61f14501.automaticDestinations-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\automaticdestinations\\1bc9bbbe61f14501.automaticdestinations-ms.xuy")) returned 1 [0050.086] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\319f01bf9fe00f2d.automaticDestinations-ms", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\319f01bf9fe00f2d.automaticDestinations-ms", lpFilePart=0x0) returned 0x7e [0050.086] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0050.086] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\319f01bf9fe00f2d.automaticDestinations-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\automaticdestinations\\319f01bf9fe00f2d.automaticdestinations-ms"), fInfoLevelId=0x0, lpFileInformation=0x23037c0 | out: lpFileInformation=0x23037c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e8b6a4f, ftCreationTime.dwHighDateTime=0x1d3aaaf, ftLastAccessTime.dwLowDateTime=0x1e8b6a4f, ftLastAccessTime.dwHighDateTime=0x1d3aaaf, ftLastWriteTime.dwLowDateTime=0x1e8b6a4f, ftLastWriteTime.dwHighDateTime=0x1d3aaaf, nFileSizeHigh=0x0, nFileSizeLow=0xe00)) returned 1 [0050.086] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0050.086] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\319f01bf9fe00f2d.automaticDestinations-ms", nBufferLength=0x105, lpBuffer=0x3be250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\319f01bf9fe00f2d.automaticDestinations-ms", lpFilePart=0x0) returned 0x7e [0050.086] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be730) returned 1 [0050.086] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\319f01bf9fe00f2d.automaticDestinations-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\automaticdestinations\\319f01bf9fe00f2d.automaticdestinations-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0050.086] GetFileType (hFile=0x448) returned 0x1 [0050.086] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0050.086] GetFileType (hFile=0x448) returned 0x1 [0050.086] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3be8c8 | out: lpFileSizeHigh=0x3be8c8*=0x0) returned 0xe00 [0050.086] ReadFile (in: hFile=0x448, lpBuffer=0x23049b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be7f8, lpOverlapped=0x0 | out: lpBuffer=0x23049b8*, lpNumberOfBytesRead=0x3be7f8*=0xe00, lpOverlapped=0x0) returned 1 [0050.095] CloseHandle (hObject=0x448) returned 1 [0050.134] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\319f01bf9fe00f2d.automaticDestinations-ms", nBufferLength=0x105, lpBuffer=0x3be250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\319f01bf9fe00f2d.automaticDestinations-ms", lpFilePart=0x0) returned 0x7e [0050.134] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be730) returned 1 [0050.134] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\319f01bf9fe00f2d.automaticDestinations-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\automaticdestinations\\319f01bf9fe00f2d.automaticdestinations-ms"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0050.135] GetFileType (hFile=0x448) returned 0x1 [0050.135] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0050.135] GetFileType (hFile=0x448) returned 0x1 [0050.135] WriteFile (in: hFile=0x448, lpBuffer=0x2181870*, nNumberOfBytesToWrite=0xe10, lpNumberOfBytesWritten=0x3be708, lpOverlapped=0x0 | out: lpBuffer=0x2181870*, lpNumberOfBytesWritten=0x3be708*=0xe10, lpOverlapped=0x0) returned 1 [0050.136] CloseHandle (hObject=0x448) returned 1 [0050.137] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\319f01bf9fe00f2d.automaticDestinations-ms", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\319f01bf9fe00f2d.automaticDestinations-ms", lpFilePart=0x0) returned 0x7e [0050.137] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\319f01bf9fe00f2d.automaticDestinations-ms.xuy", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\319f01bf9fe00f2d.automaticDestinations-ms.xuy", lpFilePart=0x0) returned 0x82 [0050.137] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0050.137] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\319f01bf9fe00f2d.automaticDestinations-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\automaticdestinations\\319f01bf9fe00f2d.automaticdestinations-ms"), fInfoLevelId=0x0, lpFileInformation=0x3be910 | out: lpFileInformation=0x3be910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e8b6a4f, ftCreationTime.dwHighDateTime=0x1d3aaaf, ftLastAccessTime.dwLowDateTime=0x1e8b6a4f, ftLastAccessTime.dwHighDateTime=0x1d3aaaf, ftLastWriteTime.dwLowDateTime=0x9bc63f7, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xe10)) returned 1 [0050.137] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7f0) returned 1 [0050.137] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\319f01bf9fe00f2d.automaticDestinations-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\automaticdestinations\\319f01bf9fe00f2d.automaticdestinations-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\319f01bf9fe00f2d.automaticDestinations-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\automaticdestinations\\319f01bf9fe00f2d.automaticdestinations-ms.xuy")) returned 1 [0050.138] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\5f7b5f1e01b83767.automaticDestinations-ms", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\5f7b5f1e01b83767.automaticDestinations-ms", lpFilePart=0x0) returned 0x7e [0050.138] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0050.138] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\5f7b5f1e01b83767.automaticDestinations-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\automaticdestinations\\5f7b5f1e01b83767.automaticdestinations-ms"), fInfoLevelId=0x0, lpFileInformation=0x2182c50 | out: lpFileInformation=0x2182c50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc876dd6c, ftCreationTime.dwHighDateTime=0x1d2d40c, ftLastAccessTime.dwLowDateTime=0xe122bbb2, ftLastAccessTime.dwHighDateTime=0x1d2fc24, ftLastWriteTime.dwLowDateTime=0xf63ceecc, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x47224)) returned 1 [0050.138] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0050.138] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\5f7b5f1e01b83767.automaticDestinations-ms", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\5f7b5f1e01b83767.automaticDestinations-ms", lpFilePart=0x0) returned 0x7e [0050.138] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0050.138] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\5f7b5f1e01b83767.automaticDestinations-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\automaticdestinations\\5f7b5f1e01b83767.automaticdestinations-ms"), fInfoLevelId=0x0, lpFileInformation=0x2182e40 | out: lpFileInformation=0x2182e40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc876dd6c, ftCreationTime.dwHighDateTime=0x1d2d40c, ftLastAccessTime.dwLowDateTime=0xe122bbb2, ftLastAccessTime.dwHighDateTime=0x1d2fc24, ftLastWriteTime.dwLowDateTime=0xf63ceecc, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x47224)) returned 1 [0050.138] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0050.139] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\5f7b5f1e01b83767.automaticDestinations-ms", nBufferLength=0x105, lpBuffer=0x3be2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\5f7b5f1e01b83767.automaticDestinations-ms", lpFilePart=0x0) returned 0x7e [0050.139] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0050.139] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\5f7b5f1e01b83767.automaticDestinations-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\automaticdestinations\\5f7b5f1e01b83767.automaticdestinations-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0050.139] GetFileType (hFile=0x448) returned 0x1 [0050.139] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be730) returned 1 [0050.139] GetFileType (hFile=0x448) returned 0x1 [0050.139] ReadFile (in: hFile=0x448, lpBuffer=0x2185388, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be848, lpOverlapped=0x0 | out: lpBuffer=0x2185388*, lpNumberOfBytesRead=0x3be848*=0x1000, lpOverlapped=0x0) returned 1 [0050.178] CloseHandle (hObject=0x448) returned 1 [0050.178] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\5f7b5f1e01b83767.automaticDestinations-ms", nBufferLength=0x105, lpBuffer=0x3be2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\5f7b5f1e01b83767.automaticDestinations-ms", lpFilePart=0x0) returned 0x7e [0050.178] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0050.178] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\5f7b5f1e01b83767.automaticDestinations-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\automaticdestinations\\5f7b5f1e01b83767.automaticdestinations-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0050.178] GetFileType (hFile=0x448) returned 0x1 [0050.178] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be730) returned 1 [0050.178] GetFileType (hFile=0x448) returned 0x1 [0050.178] WriteFile (in: hFile=0x448, lpBuffer=0x2183010*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be8f8, lpOverlapped=0x0 | out: lpBuffer=0x2183010*, lpNumberOfBytesWritten=0x3be8f8*=0x2000, lpOverlapped=0x0) returned 1 [0050.179] CloseHandle (hObject=0x448) returned 1 [0050.183] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\5f7b5f1e01b83767.automaticDestinations-ms", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\5f7b5f1e01b83767.automaticDestinations-ms", lpFilePart=0x0) returned 0x7e [0050.183] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\5f7b5f1e01b83767.automaticDestinations-ms.xuy", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\5f7b5f1e01b83767.automaticDestinations-ms.xuy", lpFilePart=0x0) returned 0x82 [0050.183] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0050.183] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\5f7b5f1e01b83767.automaticDestinations-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\automaticdestinations\\5f7b5f1e01b83767.automaticdestinations-ms"), fInfoLevelId=0x0, lpFileInformation=0x3be910 | out: lpFileInformation=0x3be910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc876dd6c, ftCreationTime.dwHighDateTime=0x1d2d40c, ftLastAccessTime.dwLowDateTime=0xe122bbb2, ftLastAccessTime.dwHighDateTime=0x1d2fc24, ftLastWriteTime.dwLowDateTime=0x9c12be2, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x47224)) returned 1 [0050.183] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7f0) returned 1 [0050.183] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\5f7b5f1e01b83767.automaticDestinations-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\automaticdestinations\\5f7b5f1e01b83767.automaticdestinations-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\5f7b5f1e01b83767.automaticDestinations-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\automaticdestinations\\5f7b5f1e01b83767.automaticdestinations-ms.xuy")) returned 1 [0050.184] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\61ebb1e65cfcb8da.automaticDestinations-ms", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\61ebb1e65cfcb8da.automaticDestinations-ms", lpFilePart=0x0) returned 0x7e [0050.184] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0050.184] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\61ebb1e65cfcb8da.automaticDestinations-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\automaticdestinations\\61ebb1e65cfcb8da.automaticdestinations-ms"), fInfoLevelId=0x0, lpFileInformation=0x2201970 | out: lpFileInformation=0x2201970*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb076a68f, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0xb076a68f, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0xb076a68f, ftLastWriteTime.dwHighDateTime=0x1d301c4, nFileSizeHigh=0x0, nFileSizeLow=0xa00)) returned 1 [0050.185] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0050.185] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\61ebb1e65cfcb8da.automaticDestinations-ms", nBufferLength=0x105, lpBuffer=0x3be250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\61ebb1e65cfcb8da.automaticDestinations-ms", lpFilePart=0x0) returned 0x7e [0050.185] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be730) returned 1 [0050.185] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\61ebb1e65cfcb8da.automaticDestinations-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\automaticdestinations\\61ebb1e65cfcb8da.automaticdestinations-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0050.186] GetFileType (hFile=0x448) returned 0x1 [0050.186] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0050.186] GetFileType (hFile=0x448) returned 0x1 [0050.186] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3be8c8 | out: lpFileSizeHigh=0x3be8c8*=0x0) returned 0xa00 [0050.186] ReadFile (in: hFile=0x448, lpBuffer=0x2202768, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be7f8, lpOverlapped=0x0 | out: lpBuffer=0x2202768*, lpNumberOfBytesRead=0x3be7f8*=0xa00, lpOverlapped=0x0) returned 1 [0050.198] CloseHandle (hObject=0x448) returned 1 [0050.208] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\61ebb1e65cfcb8da.automaticDestinations-ms", nBufferLength=0x105, lpBuffer=0x3be250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\61ebb1e65cfcb8da.automaticDestinations-ms", lpFilePart=0x0) returned 0x7e [0050.208] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be730) returned 1 [0050.208] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\61ebb1e65cfcb8da.automaticDestinations-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\automaticdestinations\\61ebb1e65cfcb8da.automaticdestinations-ms"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0050.209] GetFileType (hFile=0x448) returned 0x1 [0050.209] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0050.209] GetFileType (hFile=0x448) returned 0x1 [0050.209] WriteFile (in: hFile=0x448, lpBuffer=0x227ca40*, nNumberOfBytesToWrite=0xa10, lpNumberOfBytesWritten=0x3be708, lpOverlapped=0x0 | out: lpBuffer=0x227ca40*, lpNumberOfBytesWritten=0x3be708*=0xa10, lpOverlapped=0x0) returned 1 [0050.210] CloseHandle (hObject=0x448) returned 1 [0050.210] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\61ebb1e65cfcb8da.automaticDestinations-ms", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\61ebb1e65cfcb8da.automaticDestinations-ms", lpFilePart=0x0) returned 0x7e [0050.211] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\61ebb1e65cfcb8da.automaticDestinations-ms.xuy", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\61ebb1e65cfcb8da.automaticDestinations-ms.xuy", lpFilePart=0x0) returned 0x82 [0050.211] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0050.211] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\61ebb1e65cfcb8da.automaticDestinations-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\automaticdestinations\\61ebb1e65cfcb8da.automaticdestinations-ms"), fInfoLevelId=0x0, lpFileInformation=0x3be910 | out: lpFileInformation=0x3be910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb076a68f, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0xb076a68f, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x9c5ed98, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xa10)) returned 1 [0050.211] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7f0) returned 1 [0050.211] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\61ebb1e65cfcb8da.automaticDestinations-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\automaticdestinations\\61ebb1e65cfcb8da.automaticdestinations-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\61ebb1e65cfcb8da.automaticDestinations-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\automaticdestinations\\61ebb1e65cfcb8da.automaticdestinations-ms.xuy")) returned 1 [0050.211] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\6d2bac8f1edf6668.automaticDestinations-ms", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\6d2bac8f1edf6668.automaticDestinations-ms", lpFilePart=0x0) returned 0x7e [0050.211] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0050.211] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\6d2bac8f1edf6668.automaticDestinations-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\automaticdestinations\\6d2bac8f1edf6668.automaticdestinations-ms"), fInfoLevelId=0x0, lpFileInformation=0x227de20 | out: lpFileInformation=0x227de20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb08c1b41, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0xb08c1b41, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0xb08c1b41, ftLastWriteTime.dwHighDateTime=0x1d301c4, nFileSizeHigh=0x0, nFileSizeLow=0xa00)) returned 1 [0050.214] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0050.214] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\6d2bac8f1edf6668.automaticDestinations-ms", nBufferLength=0x105, lpBuffer=0x3be250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\6d2bac8f1edf6668.automaticDestinations-ms", lpFilePart=0x0) returned 0x7e [0050.214] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be730) returned 1 [0050.215] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\6d2bac8f1edf6668.automaticDestinations-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\automaticdestinations\\6d2bac8f1edf6668.automaticdestinations-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0050.215] GetFileType (hFile=0x448) returned 0x1 [0050.215] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0050.215] GetFileType (hFile=0x448) returned 0x1 [0050.215] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3be8c8 | out: lpFileSizeHigh=0x3be8c8*=0x0) returned 0xa00 [0050.215] ReadFile (in: hFile=0x448, lpBuffer=0x227ec18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be7f8, lpOverlapped=0x0 | out: lpBuffer=0x227ec18*, lpNumberOfBytesRead=0x3be7f8*=0xa00, lpOverlapped=0x0) returned 1 [0050.231] CloseHandle (hObject=0x448) returned 1 [0050.241] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\6d2bac8f1edf6668.automaticDestinations-ms", nBufferLength=0x105, lpBuffer=0x3be250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\6d2bac8f1edf6668.automaticDestinations-ms", lpFilePart=0x0) returned 0x7e [0050.241] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be730) returned 1 [0050.241] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\6d2bac8f1edf6668.automaticDestinations-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\automaticdestinations\\6d2bac8f1edf6668.automaticdestinations-ms"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0050.242] GetFileType (hFile=0x448) returned 0x1 [0050.242] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0050.242] GetFileType (hFile=0x448) returned 0x1 [0050.242] WriteFile (in: hFile=0x448, lpBuffer=0x22f8ef0*, nNumberOfBytesToWrite=0xa10, lpNumberOfBytesWritten=0x3be708, lpOverlapped=0x0 | out: lpBuffer=0x22f8ef0*, lpNumberOfBytesWritten=0x3be708*=0xa10, lpOverlapped=0x0) returned 1 [0050.243] CloseHandle (hObject=0x448) returned 1 [0050.244] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\6d2bac8f1edf6668.automaticDestinations-ms", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\6d2bac8f1edf6668.automaticDestinations-ms", lpFilePart=0x0) returned 0x7e [0050.244] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\6d2bac8f1edf6668.automaticDestinations-ms.xuy", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\6d2bac8f1edf6668.automaticDestinations-ms.xuy", lpFilePart=0x0) returned 0x82 [0050.244] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0050.244] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\6d2bac8f1edf6668.automaticDestinations-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\automaticdestinations\\6d2bac8f1edf6668.automaticdestinations-ms"), fInfoLevelId=0x0, lpFileInformation=0x3be910 | out: lpFileInformation=0x3be910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb08c1b41, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0xb08c1b41, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x9cab166, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xa10)) returned 1 [0050.244] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7f0) returned 1 [0050.244] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\6d2bac8f1edf6668.automaticDestinations-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\automaticdestinations\\6d2bac8f1edf6668.automaticdestinations-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\6d2bac8f1edf6668.automaticDestinations-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\automaticdestinations\\6d2bac8f1edf6668.automaticdestinations-ms.xuy")) returned 1 [0050.245] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\7e4dca80246863e3.automaticDestinations-ms", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\7e4dca80246863e3.automaticDestinations-ms", lpFilePart=0x0) returned 0x7e [0050.245] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0050.245] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\7e4dca80246863e3.automaticDestinations-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\automaticdestinations\\7e4dca80246863e3.automaticdestinations-ms"), fInfoLevelId=0x0, lpFileInformation=0x22fa2d0 | out: lpFileInformation=0x22fa2d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81988536, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x81988536, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0xb9c1e807, ftLastWriteTime.dwHighDateTime=0x1d35db8, nFileSizeHigh=0x0, nFileSizeLow=0x1800)) returned 1 [0050.245] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0050.245] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\7e4dca80246863e3.automaticDestinations-ms", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\7e4dca80246863e3.automaticDestinations-ms", lpFilePart=0x0) returned 0x7e [0050.245] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0050.245] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\7e4dca80246863e3.automaticDestinations-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\automaticdestinations\\7e4dca80246863e3.automaticdestinations-ms"), fInfoLevelId=0x0, lpFileInformation=0x22fa4c0 | out: lpFileInformation=0x22fa4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81988536, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x81988536, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0xb9c1e807, ftLastWriteTime.dwHighDateTime=0x1d35db8, nFileSizeHigh=0x0, nFileSizeLow=0x1800)) returned 1 [0050.245] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0050.245] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\7e4dca80246863e3.automaticDestinations-ms", nBufferLength=0x105, lpBuffer=0x3be2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\7e4dca80246863e3.automaticDestinations-ms", lpFilePart=0x0) returned 0x7e [0050.245] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0050.245] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\7e4dca80246863e3.automaticDestinations-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\automaticdestinations\\7e4dca80246863e3.automaticdestinations-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0050.254] GetFileType (hFile=0x448) returned 0x1 [0050.254] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be730) returned 1 [0050.254] GetFileType (hFile=0x448) returned 0x1 [0050.254] ReadFile (in: hFile=0x448, lpBuffer=0x22fc9d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be848, lpOverlapped=0x0 | out: lpBuffer=0x22fc9d0*, lpNumberOfBytesRead=0x3be848*=0x1000, lpOverlapped=0x0) returned 1 [0050.310] CloseHandle (hObject=0x448) returned 1 [0050.311] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\7e4dca80246863e3.automaticDestinations-ms", nBufferLength=0x105, lpBuffer=0x3be2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\7e4dca80246863e3.automaticDestinations-ms", lpFilePart=0x0) returned 0x7e [0050.311] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0050.311] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\7e4dca80246863e3.automaticDestinations-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\automaticdestinations\\7e4dca80246863e3.automaticdestinations-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0050.311] GetFileType (hFile=0x448) returned 0x1 [0050.311] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be730) returned 1 [0050.311] GetFileType (hFile=0x448) returned 0x1 [0050.311] WriteFile (in: hFile=0x448, lpBuffer=0x2155820*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be8f8, lpOverlapped=0x0 | out: lpBuffer=0x2155820*, lpNumberOfBytesWritten=0x3be8f8*=0x2000, lpOverlapped=0x0) returned 1 [0050.311] CloseHandle (hObject=0x448) returned 1 [0050.312] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\7e4dca80246863e3.automaticDestinations-ms", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\7e4dca80246863e3.automaticDestinations-ms", lpFilePart=0x0) returned 0x7e [0050.312] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\7e4dca80246863e3.automaticDestinations-ms.xuy", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\7e4dca80246863e3.automaticDestinations-ms.xuy", lpFilePart=0x0) returned 0x82 [0050.312] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0050.312] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\7e4dca80246863e3.automaticDestinations-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\automaticdestinations\\7e4dca80246863e3.automaticdestinations-ms"), fInfoLevelId=0x0, lpFileInformation=0x3be910 | out: lpFileInformation=0x3be910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81988536, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x81988536, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x9d69e3a, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0050.312] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7f0) returned 1 [0050.312] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\7e4dca80246863e3.automaticDestinations-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\automaticdestinations\\7e4dca80246863e3.automaticdestinations-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\7e4dca80246863e3.automaticDestinations-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\automaticdestinations\\7e4dca80246863e3.automaticdestinations-ms.xuy")) returned 1 [0050.313] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\969252ce11249fdd.automaticDestinations-ms", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\969252ce11249fdd.automaticDestinations-ms", lpFilePart=0x0) returned 0x7e [0050.313] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0050.313] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\969252ce11249fdd.automaticDestinations-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\automaticdestinations\\969252ce11249fdd.automaticdestinations-ms"), fInfoLevelId=0x0, lpFileInformation=0x217b390 | out: lpFileInformation=0x217b390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1faf53af, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x1faf53af, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x1faf53af, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0xa00)) returned 1 [0050.313] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0050.313] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\969252ce11249fdd.automaticDestinations-ms", nBufferLength=0x105, lpBuffer=0x3be250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\969252ce11249fdd.automaticDestinations-ms", lpFilePart=0x0) returned 0x7e [0050.313] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be730) returned 1 [0050.313] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\969252ce11249fdd.automaticDestinations-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\automaticdestinations\\969252ce11249fdd.automaticdestinations-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0050.313] GetFileType (hFile=0x448) returned 0x1 [0050.313] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0050.314] GetFileType (hFile=0x448) returned 0x1 [0050.314] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3be8c8 | out: lpFileSizeHigh=0x3be8c8*=0x0) returned 0xa00 [0050.314] ReadFile (in: hFile=0x448, lpBuffer=0x217c188, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be7f8, lpOverlapped=0x0 | out: lpBuffer=0x217c188*, lpNumberOfBytesRead=0x3be7f8*=0xa00, lpOverlapped=0x0) returned 1 [0050.330] CloseHandle (hObject=0x448) returned 1 [0050.340] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\969252ce11249fdd.automaticDestinations-ms", nBufferLength=0x105, lpBuffer=0x3be250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\969252ce11249fdd.automaticDestinations-ms", lpFilePart=0x0) returned 0x7e [0050.340] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be730) returned 1 [0050.340] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\969252ce11249fdd.automaticDestinations-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\automaticdestinations\\969252ce11249fdd.automaticdestinations-ms"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0050.341] GetFileType (hFile=0x448) returned 0x1 [0050.341] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0050.341] GetFileType (hFile=0x448) returned 0x1 [0050.341] WriteFile (in: hFile=0x448, lpBuffer=0x21f6460*, nNumberOfBytesToWrite=0xa10, lpNumberOfBytesWritten=0x3be708, lpOverlapped=0x0 | out: lpBuffer=0x21f6460*, lpNumberOfBytesWritten=0x3be708*=0xa10, lpOverlapped=0x0) returned 1 [0050.342] CloseHandle (hObject=0x448) returned 1 [0050.343] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\969252ce11249fdd.automaticDestinations-ms", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\969252ce11249fdd.automaticDestinations-ms", lpFilePart=0x0) returned 0x7e [0050.343] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\969252ce11249fdd.automaticDestinations-ms.xuy", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\969252ce11249fdd.automaticDestinations-ms.xuy", lpFilePart=0x0) returned 0x82 [0050.343] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0050.343] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\969252ce11249fdd.automaticDestinations-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\automaticdestinations\\969252ce11249fdd.automaticdestinations-ms"), fInfoLevelId=0x0, lpFileInformation=0x3be910 | out: lpFileInformation=0x3be910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1faf53af, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x1faf53af, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x9db66b7, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xa10)) returned 1 [0050.343] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7f0) returned 1 [0050.343] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\969252ce11249fdd.automaticDestinations-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\automaticdestinations\\969252ce11249fdd.automaticdestinations-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\969252ce11249fdd.automaticDestinations-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\automaticdestinations\\969252ce11249fdd.automaticdestinations-ms.xuy")) returned 1 [0050.344] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\9cfafb05ce914942.automaticDestinations-ms", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\9cfafb05ce914942.automaticDestinations-ms", lpFilePart=0x0) returned 0x7e [0050.344] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0050.344] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\9cfafb05ce914942.automaticDestinations-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\automaticdestinations\\9cfafb05ce914942.automaticdestinations-ms"), fInfoLevelId=0x0, lpFileInformation=0x21f7840 | out: lpFileInformation=0x21f7840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb071e1e8, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0xb071e1e8, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0xb071e1e8, ftLastWriteTime.dwHighDateTime=0x1d301c4, nFileSizeHigh=0x0, nFileSizeLow=0xa00)) returned 1 [0050.345] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0050.345] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\9cfafb05ce914942.automaticDestinations-ms", nBufferLength=0x105, lpBuffer=0x3be250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\9cfafb05ce914942.automaticDestinations-ms", lpFilePart=0x0) returned 0x7e [0050.345] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be730) returned 1 [0050.345] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\9cfafb05ce914942.automaticDestinations-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\automaticdestinations\\9cfafb05ce914942.automaticdestinations-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0050.345] GetFileType (hFile=0x448) returned 0x1 [0050.345] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0050.345] GetFileType (hFile=0x448) returned 0x1 [0050.345] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3be8c8 | out: lpFileSizeHigh=0x3be8c8*=0x0) returned 0xa00 [0050.345] ReadFile (in: hFile=0x448, lpBuffer=0x21f8638, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be7f8, lpOverlapped=0x0 | out: lpBuffer=0x21f8638*, lpNumberOfBytesRead=0x3be7f8*=0xa00, lpOverlapped=0x0) returned 1 [0050.352] CloseHandle (hObject=0x448) returned 1 [0050.363] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\9cfafb05ce914942.automaticDestinations-ms", nBufferLength=0x105, lpBuffer=0x3be250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\9cfafb05ce914942.automaticDestinations-ms", lpFilePart=0x0) returned 0x7e [0050.363] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be730) returned 1 [0050.363] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\9cfafb05ce914942.automaticDestinations-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\automaticdestinations\\9cfafb05ce914942.automaticdestinations-ms"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0050.364] GetFileType (hFile=0x448) returned 0x1 [0050.364] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0050.364] GetFileType (hFile=0x448) returned 0x1 [0050.364] WriteFile (in: hFile=0x448, lpBuffer=0x2272910*, nNumberOfBytesToWrite=0xa10, lpNumberOfBytesWritten=0x3be708, lpOverlapped=0x0 | out: lpBuffer=0x2272910*, lpNumberOfBytesWritten=0x3be708*=0xa10, lpOverlapped=0x0) returned 1 [0050.365] CloseHandle (hObject=0x448) returned 1 [0050.365] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\9cfafb05ce914942.automaticDestinations-ms", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\9cfafb05ce914942.automaticDestinations-ms", lpFilePart=0x0) returned 0x7e [0050.365] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\9cfafb05ce914942.automaticDestinations-ms.xuy", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\9cfafb05ce914942.automaticDestinations-ms.xuy", lpFilePart=0x0) returned 0x82 [0050.365] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0050.366] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\9cfafb05ce914942.automaticDestinations-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\automaticdestinations\\9cfafb05ce914942.automaticdestinations-ms"), fInfoLevelId=0x0, lpFileInformation=0x3be910 | out: lpFileInformation=0x3be910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb071e1e8, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0xb071e1e8, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x9ddc486, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xa10)) returned 1 [0050.366] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7f0) returned 1 [0050.366] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\9cfafb05ce914942.automaticDestinations-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\automaticdestinations\\9cfafb05ce914942.automaticdestinations-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\9cfafb05ce914942.automaticDestinations-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\automaticdestinations\\9cfafb05ce914942.automaticdestinations-ms.xuy")) returned 1 [0050.366] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\b8ab77100df80ab2.automaticDestinations-ms", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\b8ab77100df80ab2.automaticDestinations-ms", lpFilePart=0x0) returned 0x7e [0050.366] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0050.366] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\b8ab77100df80ab2.automaticDestinations-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\automaticdestinations\\b8ab77100df80ab2.automaticdestinations-ms"), fInfoLevelId=0x0, lpFileInformation=0x2273cf0 | out: lpFileInformation=0x2273cf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb06858c6, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0xb06858c6, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0xb06858c6, ftLastWriteTime.dwHighDateTime=0x1d301c4, nFileSizeHigh=0x0, nFileSizeLow=0xa00)) returned 1 [0050.367] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0050.367] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\b8ab77100df80ab2.automaticDestinations-ms", nBufferLength=0x105, lpBuffer=0x3be250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\b8ab77100df80ab2.automaticDestinations-ms", lpFilePart=0x0) returned 0x7e [0050.367] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be730) returned 1 [0050.367] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\b8ab77100df80ab2.automaticDestinations-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\automaticdestinations\\b8ab77100df80ab2.automaticdestinations-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0050.367] GetFileType (hFile=0x448) returned 0x1 [0050.367] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0050.367] GetFileType (hFile=0x448) returned 0x1 [0050.367] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3be8c8 | out: lpFileSizeHigh=0x3be8c8*=0x0) returned 0xa00 [0050.367] ReadFile (in: hFile=0x448, lpBuffer=0x2274ae8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be7f8, lpOverlapped=0x0 | out: lpBuffer=0x2274ae8*, lpNumberOfBytesRead=0x3be7f8*=0xa00, lpOverlapped=0x0) returned 1 [0050.375] CloseHandle (hObject=0x448) returned 1 [0050.385] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\b8ab77100df80ab2.automaticDestinations-ms", nBufferLength=0x105, lpBuffer=0x3be250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\b8ab77100df80ab2.automaticDestinations-ms", lpFilePart=0x0) returned 0x7e [0050.385] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be730) returned 1 [0050.385] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\b8ab77100df80ab2.automaticDestinations-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\automaticdestinations\\b8ab77100df80ab2.automaticdestinations-ms"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0050.386] GetFileType (hFile=0x448) returned 0x1 [0050.386] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0050.386] GetFileType (hFile=0x448) returned 0x1 [0050.386] WriteFile (in: hFile=0x448, lpBuffer=0x22eedc0*, nNumberOfBytesToWrite=0xa10, lpNumberOfBytesWritten=0x3be708, lpOverlapped=0x0 | out: lpBuffer=0x22eedc0*, lpNumberOfBytesWritten=0x3be708*=0xa10, lpOverlapped=0x0) returned 1 [0050.387] CloseHandle (hObject=0x448) returned 1 [0050.388] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\b8ab77100df80ab2.automaticDestinations-ms", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\b8ab77100df80ab2.automaticDestinations-ms", lpFilePart=0x0) returned 0x7e [0050.388] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\b8ab77100df80ab2.automaticDestinations-ms.xuy", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\b8ab77100df80ab2.automaticDestinations-ms.xuy", lpFilePart=0x0) returned 0x82 [0050.388] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0050.388] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\b8ab77100df80ab2.automaticDestinations-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\automaticdestinations\\b8ab77100df80ab2.automaticdestinations-ms"), fInfoLevelId=0x0, lpFileInformation=0x3be910 | out: lpFileInformation=0x3be910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb06858c6, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0xb06858c6, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x9e28a31, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xa10)) returned 1 [0050.388] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7f0) returned 1 [0050.388] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\b8ab77100df80ab2.automaticDestinations-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\automaticdestinations\\b8ab77100df80ab2.automaticdestinations-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\b8ab77100df80ab2.automaticDestinations-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\automaticdestinations\\b8ab77100df80ab2.automaticdestinations-ms.xuy")) returned 1 [0050.388] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\d00655d2aa12ff6d.automaticDestinations-ms", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\d00655d2aa12ff6d.automaticDestinations-ms", lpFilePart=0x0) returned 0x7e [0050.388] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0050.389] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\d00655d2aa12ff6d.automaticDestinations-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\automaticdestinations\\d00655d2aa12ff6d.automaticdestinations-ms"), fInfoLevelId=0x0, lpFileInformation=0x22f01a0 | out: lpFileInformation=0x22f01a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb09806f4, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0xb09806f4, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0xb09806f4, ftLastWriteTime.dwHighDateTime=0x1d301c4, nFileSizeHigh=0x0, nFileSizeLow=0xa00)) returned 1 [0050.389] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0050.389] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\d00655d2aa12ff6d.automaticDestinations-ms", nBufferLength=0x105, lpBuffer=0x3be250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\d00655d2aa12ff6d.automaticDestinations-ms", lpFilePart=0x0) returned 0x7e [0050.389] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be730) returned 1 [0050.389] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\d00655d2aa12ff6d.automaticDestinations-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\automaticdestinations\\d00655d2aa12ff6d.automaticdestinations-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0050.389] GetFileType (hFile=0x448) returned 0x1 [0050.389] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0050.389] GetFileType (hFile=0x448) returned 0x1 [0050.389] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3be8c8 | out: lpFileSizeHigh=0x3be8c8*=0x0) returned 0xa00 [0050.389] ReadFile (in: hFile=0x448, lpBuffer=0x22f0f98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be7f8, lpOverlapped=0x0 | out: lpBuffer=0x22f0f98*, lpNumberOfBytesRead=0x3be7f8*=0xa00, lpOverlapped=0x0) returned 1 [0050.636] CloseHandle (hObject=0x448) returned 1 [0050.679] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\d00655d2aa12ff6d.automaticDestinations-ms", nBufferLength=0x105, lpBuffer=0x3be250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\d00655d2aa12ff6d.automaticDestinations-ms", lpFilePart=0x0) returned 0x7e [0050.679] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be730) returned 1 [0050.679] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\d00655d2aa12ff6d.automaticDestinations-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\automaticdestinations\\d00655d2aa12ff6d.automaticdestinations-ms"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0050.680] GetFileType (hFile=0x448) returned 0x1 [0050.680] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0050.680] GetFileType (hFile=0x448) returned 0x1 [0050.680] WriteFile (in: hFile=0x448, lpBuffer=0x2168a98*, nNumberOfBytesToWrite=0xa10, lpNumberOfBytesWritten=0x3be708, lpOverlapped=0x0 | out: lpBuffer=0x2168a98*, lpNumberOfBytesWritten=0x3be708*=0xa10, lpOverlapped=0x0) returned 1 [0050.681] CloseHandle (hObject=0x448) returned 1 [0050.682] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\d00655d2aa12ff6d.automaticDestinations-ms", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\d00655d2aa12ff6d.automaticDestinations-ms", lpFilePart=0x0) returned 0x7e [0050.682] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\d00655d2aa12ff6d.automaticDestinations-ms.xuy", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\d00655d2aa12ff6d.automaticDestinations-ms.xuy", lpFilePart=0x0) returned 0x82 [0050.682] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0050.682] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\d00655d2aa12ff6d.automaticDestinations-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\automaticdestinations\\d00655d2aa12ff6d.automaticdestinations-ms"), fInfoLevelId=0x0, lpFileInformation=0x3be910 | out: lpFileInformation=0x3be910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb09806f4, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0xb09806f4, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0xa0d7449, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xa10)) returned 1 [0050.682] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7f0) returned 1 [0050.682] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\d00655d2aa12ff6d.automaticDestinations-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\automaticdestinations\\d00655d2aa12ff6d.automaticdestinations-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\d00655d2aa12ff6d.automaticDestinations-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\automaticdestinations\\d00655d2aa12ff6d.automaticdestinations-ms.xuy")) returned 1 [0050.683] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\eb282ead62b4db87.automaticDestinations-ms", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\eb282ead62b4db87.automaticDestinations-ms", lpFilePart=0x0) returned 0x7e [0050.683] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0050.683] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\eb282ead62b4db87.automaticDestinations-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\automaticdestinations\\eb282ead62b4db87.automaticdestinations-ms"), fInfoLevelId=0x0, lpFileInformation=0x2169e78 | out: lpFileInformation=0x2169e78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4227182, ftCreationTime.dwHighDateTime=0x1d2fc24, ftLastAccessTime.dwLowDateTime=0xe4227182, ftLastAccessTime.dwHighDateTime=0x1d2fc24, ftLastWriteTime.dwLowDateTime=0xe4227182, ftLastWriteTime.dwHighDateTime=0x1d2fc24, nFileSizeHigh=0x0, nFileSizeLow=0xe00)) returned 1 [0050.684] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0050.684] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\eb282ead62b4db87.automaticDestinations-ms", nBufferLength=0x105, lpBuffer=0x3be250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\eb282ead62b4db87.automaticDestinations-ms", lpFilePart=0x0) returned 0x7e [0050.684] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be730) returned 1 [0050.684] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\eb282ead62b4db87.automaticDestinations-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\automaticdestinations\\eb282ead62b4db87.automaticdestinations-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0050.684] GetFileType (hFile=0x448) returned 0x1 [0050.684] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0050.684] GetFileType (hFile=0x448) returned 0x1 [0050.684] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3be8c8 | out: lpFileSizeHigh=0x3be8c8*=0x0) returned 0xe00 [0050.684] ReadFile (in: hFile=0x448, lpBuffer=0x216b070, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be7f8, lpOverlapped=0x0 | out: lpBuffer=0x216b070*, lpNumberOfBytesRead=0x3be7f8*=0xe00, lpOverlapped=0x0) returned 1 [0050.701] CloseHandle (hObject=0x448) returned 1 [0050.712] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\eb282ead62b4db87.automaticDestinations-ms", nBufferLength=0x105, lpBuffer=0x3be250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\eb282ead62b4db87.automaticDestinations-ms", lpFilePart=0x0) returned 0x7e [0050.712] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be730) returned 1 [0050.712] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\eb282ead62b4db87.automaticDestinations-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\automaticdestinations\\eb282ead62b4db87.automaticdestinations-ms"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0050.713] GetFileType (hFile=0x448) returned 0x1 [0050.713] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0050.713] GetFileType (hFile=0x448) returned 0x1 [0050.713] WriteFile (in: hFile=0x448, lpBuffer=0x21e6748*, nNumberOfBytesToWrite=0xe10, lpNumberOfBytesWritten=0x3be708, lpOverlapped=0x0 | out: lpBuffer=0x21e6748*, lpNumberOfBytesWritten=0x3be708*=0xe10, lpOverlapped=0x0) returned 1 [0050.714] CloseHandle (hObject=0x448) returned 1 [0050.715] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\eb282ead62b4db87.automaticDestinations-ms", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\eb282ead62b4db87.automaticDestinations-ms", lpFilePart=0x0) returned 0x7e [0050.715] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\eb282ead62b4db87.automaticDestinations-ms.xuy", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\eb282ead62b4db87.automaticDestinations-ms.xuy", lpFilePart=0x0) returned 0x82 [0050.715] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0050.715] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\eb282ead62b4db87.automaticDestinations-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\automaticdestinations\\eb282ead62b4db87.automaticdestinations-ms"), fInfoLevelId=0x0, lpFileInformation=0x3be910 | out: lpFileInformation=0x3be910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4227182, ftCreationTime.dwHighDateTime=0x1d2fc24, ftLastAccessTime.dwLowDateTime=0xe4227182, ftLastAccessTime.dwHighDateTime=0x1d2fc24, ftLastWriteTime.dwLowDateTime=0xa14a367, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xe10)) returned 1 [0050.715] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7f0) returned 1 [0050.715] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\eb282ead62b4db87.automaticDestinations-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\automaticdestinations\\eb282ead62b4db87.automaticdestinations-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\eb282ead62b4db87.automaticDestinations-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\automaticdestinations\\eb282ead62b4db87.automaticdestinations-ms.xuy")) returned 1 [0050.716] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\f01b4d95cf55d32a.automaticDestinations-ms", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\f01b4d95cf55d32a.automaticDestinations-ms", lpFilePart=0x0) returned 0x7e [0050.716] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0050.716] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\f01b4d95cf55d32a.automaticDestinations-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\automaticdestinations\\f01b4d95cf55d32a.automaticdestinations-ms"), fInfoLevelId=0x0, lpFileInformation=0x21e7b28 | out: lpFileInformation=0x21e7b28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0f752b9, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xc0f752b9, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xf63829c1, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0xec00)) returned 1 [0050.716] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0050.716] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\f01b4d95cf55d32a.automaticDestinations-ms", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\f01b4d95cf55d32a.automaticDestinations-ms", lpFilePart=0x0) returned 0x7e [0050.716] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0050.716] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\f01b4d95cf55d32a.automaticDestinations-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\automaticdestinations\\f01b4d95cf55d32a.automaticdestinations-ms"), fInfoLevelId=0x0, lpFileInformation=0x21e7d18 | out: lpFileInformation=0x21e7d18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0f752b9, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xc0f752b9, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xf63829c1, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0xec00)) returned 1 [0050.716] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0050.716] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\f01b4d95cf55d32a.automaticDestinations-ms", nBufferLength=0x105, lpBuffer=0x3be2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\f01b4d95cf55d32a.automaticDestinations-ms", lpFilePart=0x0) returned 0x7e [0050.717] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0050.717] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\f01b4d95cf55d32a.automaticDestinations-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\automaticdestinations\\f01b4d95cf55d32a.automaticdestinations-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0050.717] GetFileType (hFile=0x448) returned 0x1 [0050.717] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be730) returned 1 [0050.717] GetFileType (hFile=0x448) returned 0x1 [0050.717] ReadFile (in: hFile=0x448, lpBuffer=0x21ea228, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be848, lpOverlapped=0x0 | out: lpBuffer=0x21ea228*, lpNumberOfBytesRead=0x3be848*=0x1000, lpOverlapped=0x0) returned 1 [0050.727] CloseHandle (hObject=0x448) returned 1 [0050.727] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\f01b4d95cf55d32a.automaticDestinations-ms", nBufferLength=0x105, lpBuffer=0x3be2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\f01b4d95cf55d32a.automaticDestinations-ms", lpFilePart=0x0) returned 0x7e [0050.727] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0050.727] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\f01b4d95cf55d32a.automaticDestinations-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\automaticdestinations\\f01b4d95cf55d32a.automaticdestinations-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0050.727] GetFileType (hFile=0x448) returned 0x1 [0050.727] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be730) returned 1 [0050.728] GetFileType (hFile=0x448) returned 0x1 [0050.728] WriteFile (in: hFile=0x448, lpBuffer=0x21e7ee8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be8f8, lpOverlapped=0x0 | out: lpBuffer=0x21e7ee8*, lpNumberOfBytesWritten=0x3be8f8*=0x2000, lpOverlapped=0x0) returned 1 [0050.728] CloseHandle (hObject=0x448) returned 1 [0050.729] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\f01b4d95cf55d32a.automaticDestinations-ms", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\f01b4d95cf55d32a.automaticDestinations-ms", lpFilePart=0x0) returned 0x7e [0050.730] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\f01b4d95cf55d32a.automaticDestinations-ms.xuy", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\f01b4d95cf55d32a.automaticDestinations-ms.xuy", lpFilePart=0x0) returned 0x82 [0050.730] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0050.730] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\f01b4d95cf55d32a.automaticDestinations-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\automaticdestinations\\f01b4d95cf55d32a.automaticdestinations-ms"), fInfoLevelId=0x0, lpFileInformation=0x3be910 | out: lpFileInformation=0x3be910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0f752b9, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xc0f752b9, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xa14a367, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xec00)) returned 1 [0050.730] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7f0) returned 1 [0050.730] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\f01b4d95cf55d32a.automaticDestinations-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\automaticdestinations\\f01b4d95cf55d32a.automaticdestinations-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\f01b4d95cf55d32a.automaticDestinations-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\automaticdestinations\\f01b4d95cf55d32a.automaticdestinations-ms.xuy")) returned 1 [0050.757] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\fb3b0dbfee58fac8.automaticDestinations-ms", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\fb3b0dbfee58fac8.automaticDestinations-ms", lpFilePart=0x0) returned 0x7e [0050.757] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0050.758] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\fb3b0dbfee58fac8.automaticDestinations-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\automaticdestinations\\fb3b0dbfee58fac8.automaticdestinations-ms"), fInfoLevelId=0x0, lpFileInformation=0x22667e0 | out: lpFileInformation=0x22667e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0a19034, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0xb0a19034, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0xb0a19034, ftLastWriteTime.dwHighDateTime=0x1d301c4, nFileSizeHigh=0x0, nFileSizeLow=0xa00)) returned 1 [0050.769] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0050.769] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\fb3b0dbfee58fac8.automaticDestinations-ms", nBufferLength=0x105, lpBuffer=0x3be250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\fb3b0dbfee58fac8.automaticDestinations-ms", lpFilePart=0x0) returned 0x7e [0050.769] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be730) returned 1 [0050.769] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\fb3b0dbfee58fac8.automaticDestinations-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\automaticdestinations\\fb3b0dbfee58fac8.automaticdestinations-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0050.769] GetFileType (hFile=0x448) returned 0x1 [0050.769] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0050.769] GetFileType (hFile=0x448) returned 0x1 [0050.769] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3be8c8 | out: lpFileSizeHigh=0x3be8c8*=0x0) returned 0xa00 [0050.770] ReadFile (in: hFile=0x448, lpBuffer=0x22675d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be7f8, lpOverlapped=0x0 | out: lpBuffer=0x22675d8*, lpNumberOfBytesRead=0x3be7f8*=0xa00, lpOverlapped=0x0) returned 1 [0050.797] CloseHandle (hObject=0x448) returned 1 [0050.806] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\fb3b0dbfee58fac8.automaticDestinations-ms", nBufferLength=0x105, lpBuffer=0x3be250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\fb3b0dbfee58fac8.automaticDestinations-ms", lpFilePart=0x0) returned 0x7e [0050.807] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be730) returned 1 [0050.807] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\fb3b0dbfee58fac8.automaticDestinations-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\automaticdestinations\\fb3b0dbfee58fac8.automaticdestinations-ms"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0050.808] GetFileType (hFile=0x448) returned 0x1 [0050.808] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0050.808] GetFileType (hFile=0x448) returned 0x1 [0050.808] WriteFile (in: hFile=0x448, lpBuffer=0x22e18b0*, nNumberOfBytesToWrite=0xa10, lpNumberOfBytesWritten=0x3be708, lpOverlapped=0x0 | out: lpBuffer=0x22e18b0*, lpNumberOfBytesWritten=0x3be708*=0xa10, lpOverlapped=0x0) returned 1 [0050.809] CloseHandle (hObject=0x448) returned 1 [0050.809] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\fb3b0dbfee58fac8.automaticDestinations-ms", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\fb3b0dbfee58fac8.automaticDestinations-ms", lpFilePart=0x0) returned 0x7e [0050.809] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\fb3b0dbfee58fac8.automaticDestinations-ms.xuy", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\fb3b0dbfee58fac8.automaticDestinations-ms.xuy", lpFilePart=0x0) returned 0x82 [0050.809] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0050.810] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\fb3b0dbfee58fac8.automaticDestinations-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\automaticdestinations\\fb3b0dbfee58fac8.automaticdestinations-ms"), fInfoLevelId=0x0, lpFileInformation=0x3be910 | out: lpFileInformation=0x3be910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0a19034, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0xb0a19034, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0xa22e900, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xa10)) returned 1 [0050.810] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7f0) returned 1 [0050.810] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\fb3b0dbfee58fac8.automaticDestinations-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\automaticdestinations\\fb3b0dbfee58fac8.automaticdestinations-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\fb3b0dbfee58fac8.automaticDestinations-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\automaticdestinations\\fb3b0dbfee58fac8.automaticdestinations-ms.xuy")) returned 1 [0050.810] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0050.810] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations", nBufferLength=0x105, lpBuffer=0x3be3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations", lpFilePart=0x0) returned 0x51 [0050.810] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\", nBufferLength=0x105, lpBuffer=0x3be370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\", lpFilePart=0x0) returned 0x52 [0050.810] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\*", lpFindFileData=0x3be580 | out: lpFindFileData=0x3be580) returned 0x5d7df0 [0050.812] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0050.812] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0050.812] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0050.812] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0050.812] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0050.812] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0050.813] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0050.813] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0050.813] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 0 [0050.813] FindClose (in: hFindFile=0x5d7df0 | out: hFindFile=0x5d7df0) returned 1 [0050.814] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0050.814] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7f0) returned 1 [0050.814] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0050.814] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations", nBufferLength=0x105, lpBuffer=0x3be3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations", lpFilePart=0x0) returned 0x51 [0050.814] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\", nBufferLength=0x105, lpBuffer=0x3be370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\", lpFilePart=0x0) returned 0x52 [0050.814] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\*", lpFindFileData=0x3be580 | out: lpFindFileData=0x3be580) returned 0x5d7a90 [0050.815] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0050.815] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0050.815] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0050.815] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0050.815] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0050.816] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0050.816] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0050.816] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0050.816] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 0 [0050.816] FindClose (in: hFindFile=0x5d7a90 | out: hFindFile=0x5d7a90) returned 1 [0050.817] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0050.817] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7f0) returned 1 [0050.817] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\28c8b86deab549a1.customDestinations-ms", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\28c8b86deab549a1.customDestinations-ms", lpFilePart=0x0) returned 0x78 [0050.817] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0050.817] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\28c8b86deab549a1.customDestinations-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\customdestinations\\28c8b86deab549a1.customdestinations-ms"), fInfoLevelId=0x0, lpFileInformation=0x22e7540 | out: lpFileInformation=0x22e7540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2863e59e, ftCreationTime.dwHighDateTime=0x1d2fc23, ftLastAccessTime.dwLowDateTime=0x2863e59e, ftLastAccessTime.dwHighDateTime=0x1d2fc23, ftLastWriteTime.dwLowDateTime=0x2863e59e, ftLastWriteTime.dwHighDateTime=0x1d2fc23, nFileSizeHigh=0x0, nFileSizeLow=0xd7c)) returned 1 [0050.818] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0050.818] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\28c8b86deab549a1.customDestinations-ms", nBufferLength=0x105, lpBuffer=0x3be250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\28c8b86deab549a1.customDestinations-ms", lpFilePart=0x0) returned 0x78 [0050.818] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be730) returned 1 [0050.818] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\28c8b86deab549a1.customDestinations-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\customdestinations\\28c8b86deab549a1.customdestinations-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0050.818] GetFileType (hFile=0x448) returned 0x1 [0050.819] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0050.819] GetFileType (hFile=0x448) returned 0x1 [0050.819] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3be8c8 | out: lpFileSizeHigh=0x3be8c8*=0x0) returned 0xd7c [0050.819] ReadFile (in: hFile=0x448, lpBuffer=0x22e8698, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be7f8, lpOverlapped=0x0 | out: lpBuffer=0x22e8698*, lpNumberOfBytesRead=0x3be7f8*=0xd7c, lpOverlapped=0x0) returned 1 [0050.835] CloseHandle (hObject=0x448) returned 1 [0050.884] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\28c8b86deab549a1.customDestinations-ms", nBufferLength=0x105, lpBuffer=0x3be250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\28c8b86deab549a1.customDestinations-ms", lpFilePart=0x0) returned 0x78 [0050.884] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be730) returned 1 [0050.884] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\28c8b86deab549a1.customDestinations-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\customdestinations\\28c8b86deab549a1.customdestinations-ms"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0050.885] GetFileType (hFile=0x448) returned 0x1 [0050.885] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0050.885] GetFileType (hFile=0x448) returned 0x1 [0050.885] WriteFile (in: hFile=0x448, lpBuffer=0x21636f0*, nNumberOfBytesToWrite=0xd80, lpNumberOfBytesWritten=0x3be708, lpOverlapped=0x0 | out: lpBuffer=0x21636f0*, lpNumberOfBytesWritten=0x3be708*=0xd80, lpOverlapped=0x0) returned 1 [0050.886] CloseHandle (hObject=0x448) returned 1 [0050.887] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\28c8b86deab549a1.customDestinations-ms", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\28c8b86deab549a1.customDestinations-ms", lpFilePart=0x0) returned 0x78 [0050.887] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\28c8b86deab549a1.customDestinations-ms.xuy", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\28c8b86deab549a1.customDestinations-ms.xuy", lpFilePart=0x0) returned 0x7c [0050.887] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0050.887] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\28c8b86deab549a1.customDestinations-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\customdestinations\\28c8b86deab549a1.customdestinations-ms"), fInfoLevelId=0x0, lpFileInformation=0x3be910 | out: lpFileInformation=0x3be910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2863e59e, ftCreationTime.dwHighDateTime=0x1d2fc23, ftLastAccessTime.dwLowDateTime=0x2863e59e, ftLastAccessTime.dwHighDateTime=0x1d2fc23, ftLastWriteTime.dwLowDateTime=0xa2ed528, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xd80)) returned 1 [0050.887] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7f0) returned 1 [0050.888] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\28c8b86deab549a1.customDestinations-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\customdestinations\\28c8b86deab549a1.customdestinations-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\28c8b86deab549a1.customDestinations-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\customdestinations\\28c8b86deab549a1.customdestinations-ms.xuy")) returned 1 [0050.888] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\590aee7bdd69b59b.customDestinations-ms", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\590aee7bdd69b59b.customDestinations-ms", lpFilePart=0x0) returned 0x78 [0050.888] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0050.888] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\590aee7bdd69b59b.customDestinations-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\customdestinations\\590aee7bdd69b59b.customdestinations-ms"), fInfoLevelId=0x0, lpFileInformation=0x2164ab0 | out: lpFileInformation=0x2164ab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d28e2e8, ftCreationTime.dwHighDateTime=0x1d2fc25, ftLastAccessTime.dwLowDateTime=0xbf0706e2, ftLastAccessTime.dwHighDateTime=0x1d41fd8, ftLastWriteTime.dwLowDateTime=0xbf12f65d, ftLastWriteTime.dwHighDateTime=0x1d41fd8, nFileSizeHigh=0x0, nFileSizeLow=0x1856)) returned 1 [0050.888] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0050.888] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\590aee7bdd69b59b.customDestinations-ms", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\590aee7bdd69b59b.customDestinations-ms", lpFilePart=0x0) returned 0x78 [0050.888] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0050.888] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\590aee7bdd69b59b.customDestinations-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\customdestinations\\590aee7bdd69b59b.customdestinations-ms"), fInfoLevelId=0x0, lpFileInformation=0x2164c90 | out: lpFileInformation=0x2164c90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d28e2e8, ftCreationTime.dwHighDateTime=0x1d2fc25, ftLastAccessTime.dwLowDateTime=0xbf0706e2, ftLastAccessTime.dwHighDateTime=0x1d41fd8, ftLastWriteTime.dwLowDateTime=0xbf12f65d, ftLastWriteTime.dwHighDateTime=0x1d41fd8, nFileSizeHigh=0x0, nFileSizeLow=0x1856)) returned 1 [0050.889] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0050.889] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\590aee7bdd69b59b.customDestinations-ms", nBufferLength=0x105, lpBuffer=0x3be2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\590aee7bdd69b59b.customDestinations-ms", lpFilePart=0x0) returned 0x78 [0050.889] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0050.889] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\590aee7bdd69b59b.customDestinations-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\customdestinations\\590aee7bdd69b59b.customdestinations-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0050.889] GetFileType (hFile=0x448) returned 0x1 [0050.889] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be730) returned 1 [0050.889] GetFileType (hFile=0x448) returned 0x1 [0050.889] ReadFile (in: hFile=0x448, lpBuffer=0x2167180, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be848, lpOverlapped=0x0 | out: lpBuffer=0x2167180*, lpNumberOfBytesRead=0x3be848*=0x1000, lpOverlapped=0x0) returned 1 [0050.901] CloseHandle (hObject=0x448) returned 1 [0050.901] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\590aee7bdd69b59b.customDestinations-ms", nBufferLength=0x105, lpBuffer=0x3be2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\590aee7bdd69b59b.customDestinations-ms", lpFilePart=0x0) returned 0x78 [0050.901] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0050.901] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\590aee7bdd69b59b.customDestinations-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\customdestinations\\590aee7bdd69b59b.customdestinations-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0050.901] GetFileType (hFile=0x448) returned 0x1 [0050.901] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be730) returned 1 [0050.902] GetFileType (hFile=0x448) returned 0x1 [0050.902] WriteFile (in: hFile=0x448, lpBuffer=0x2164e50*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be8f8, lpOverlapped=0x0 | out: lpBuffer=0x2164e50*, lpNumberOfBytesWritten=0x3be8f8*=0x2000, lpOverlapped=0x0) returned 1 [0050.902] CloseHandle (hObject=0x448) returned 1 [0050.903] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\590aee7bdd69b59b.customDestinations-ms", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\590aee7bdd69b59b.customDestinations-ms", lpFilePart=0x0) returned 0x78 [0050.903] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\590aee7bdd69b59b.customDestinations-ms.xuy", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\590aee7bdd69b59b.customDestinations-ms.xuy", lpFilePart=0x0) returned 0x7c [0050.903] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0050.903] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\590aee7bdd69b59b.customDestinations-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\customdestinations\\590aee7bdd69b59b.customdestinations-ms"), fInfoLevelId=0x0, lpFileInformation=0x3be910 | out: lpFileInformation=0x3be910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d28e2e8, ftCreationTime.dwHighDateTime=0x1d2fc25, ftLastAccessTime.dwLowDateTime=0xbf0706e2, ftLastAccessTime.dwHighDateTime=0x1d41fd8, ftLastWriteTime.dwLowDateTime=0xa313880, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0050.903] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7f0) returned 1 [0050.903] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\590aee7bdd69b59b.customDestinations-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\customdestinations\\590aee7bdd69b59b.customdestinations-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\590aee7bdd69b59b.customDestinations-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\customdestinations\\590aee7bdd69b59b.customdestinations-ms.xuy")) returned 1 [0050.904] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\5d696d521de238c3.customDestinations-ms", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\5d696d521de238c3.customDestinations-ms", lpFilePart=0x0) returned 0x78 [0050.904] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0050.904] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\5d696d521de238c3.customDestinations-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\customdestinations\\5d696d521de238c3.customdestinations-ms"), fInfoLevelId=0x0, lpFileInformation=0x21e3708 | out: lpFileInformation=0x21e3708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x781fbd38, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x77e8f343, ftLastAccessTime.dwHighDateTime=0x1d2d59f, ftLastWriteTime.dwLowDateTime=0x77e91a11, ftLastWriteTime.dwHighDateTime=0x1d2d59f, nFileSizeHigh=0x0, nFileSizeLow=0x1898)) returned 1 [0050.904] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0050.904] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\5d696d521de238c3.customDestinations-ms", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\5d696d521de238c3.customDestinations-ms", lpFilePart=0x0) returned 0x78 [0050.904] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0050.904] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\5d696d521de238c3.customDestinations-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\customdestinations\\5d696d521de238c3.customdestinations-ms"), fInfoLevelId=0x0, lpFileInformation=0x21e38e8 | out: lpFileInformation=0x21e38e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x781fbd38, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x77e8f343, ftLastAccessTime.dwHighDateTime=0x1d2d59f, ftLastWriteTime.dwLowDateTime=0x77e91a11, ftLastWriteTime.dwHighDateTime=0x1d2d59f, nFileSizeHigh=0x0, nFileSizeLow=0x1898)) returned 1 [0050.904] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0050.904] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\5d696d521de238c3.customDestinations-ms", nBufferLength=0x105, lpBuffer=0x3be2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\5d696d521de238c3.customDestinations-ms", lpFilePart=0x0) returned 0x78 [0050.904] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0050.904] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\5d696d521de238c3.customDestinations-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\customdestinations\\5d696d521de238c3.customdestinations-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0050.904] GetFileType (hFile=0x448) returned 0x1 [0050.905] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be730) returned 1 [0050.905] GetFileType (hFile=0x448) returned 0x1 [0050.905] ReadFile (in: hFile=0x448, lpBuffer=0x21e5dd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be848, lpOverlapped=0x0 | out: lpBuffer=0x21e5dd8*, lpNumberOfBytesRead=0x3be848*=0x1000, lpOverlapped=0x0) returned 1 [0050.928] CloseHandle (hObject=0x448) returned 1 [0050.928] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\5d696d521de238c3.customDestinations-ms", nBufferLength=0x105, lpBuffer=0x3be2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\5d696d521de238c3.customDestinations-ms", lpFilePart=0x0) returned 0x78 [0050.928] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0050.928] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\5d696d521de238c3.customDestinations-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\customdestinations\\5d696d521de238c3.customdestinations-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0050.928] GetFileType (hFile=0x448) returned 0x1 [0050.928] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be730) returned 1 [0050.928] GetFileType (hFile=0x448) returned 0x1 [0050.928] WriteFile (in: hFile=0x448, lpBuffer=0x21e3aa8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be8f8, lpOverlapped=0x0 | out: lpBuffer=0x21e3aa8*, lpNumberOfBytesWritten=0x3be8f8*=0x2000, lpOverlapped=0x0) returned 1 [0050.928] CloseHandle (hObject=0x448) returned 1 [0050.929] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\5d696d521de238c3.customDestinations-ms", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\5d696d521de238c3.customDestinations-ms", lpFilePart=0x0) returned 0x78 [0050.929] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\5d696d521de238c3.customDestinations-ms.xuy", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\5d696d521de238c3.customDestinations-ms.xuy", lpFilePart=0x0) returned 0x7c [0050.929] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0050.929] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\5d696d521de238c3.customDestinations-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\customdestinations\\5d696d521de238c3.customdestinations-ms"), fInfoLevelId=0x0, lpFileInformation=0x3be910 | out: lpFileInformation=0x3be910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x781fbd38, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x77e8f343, ftLastAccessTime.dwHighDateTime=0x1d2d59f, ftLastWriteTime.dwLowDateTime=0xa3398d9, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0050.929] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7f0) returned 1 [0050.929] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\5d696d521de238c3.customDestinations-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\customdestinations\\5d696d521de238c3.customdestinations-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\5d696d521de238c3.customDestinations-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\customdestinations\\5d696d521de238c3.customdestinations-ms.xuy")) returned 1 [0050.930] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\7e4dca80246863e3.customDestinations-ms", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\7e4dca80246863e3.customDestinations-ms", lpFilePart=0x0) returned 0x78 [0050.930] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0050.930] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\7e4dca80246863e3.customDestinations-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\customdestinations\\7e4dca80246863e3.customdestinations-ms"), fInfoLevelId=0x0, lpFileInformation=0x2262360 | out: lpFileInformation=0x2262360*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0f9b534, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xc0f9b534, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xc0f9b534, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x18)) returned 1 [0050.930] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0050.930] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\7e4dca80246863e3.customDestinations-ms", nBufferLength=0x105, lpBuffer=0x3be250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\7e4dca80246863e3.customDestinations-ms", lpFilePart=0x0) returned 0x78 [0050.930] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be730) returned 1 [0050.931] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\7e4dca80246863e3.customDestinations-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\customdestinations\\7e4dca80246863e3.customdestinations-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0050.931] GetFileType (hFile=0x448) returned 0x1 [0050.931] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0050.931] GetFileType (hFile=0x448) returned 0x1 [0050.931] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3be8c8 | out: lpFileSizeHigh=0x3be8c8*=0x0) returned 0x18 [0050.931] ReadFile (in: hFile=0x448, lpBuffer=0x2262750, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be7f8, lpOverlapped=0x0 | out: lpBuffer=0x2262750*, lpNumberOfBytesRead=0x3be7f8*=0x18, lpOverlapped=0x0) returned 1 [0050.932] CloseHandle (hObject=0x448) returned 1 [0050.942] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\7e4dca80246863e3.customDestinations-ms", nBufferLength=0x105, lpBuffer=0x3be250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\7e4dca80246863e3.customDestinations-ms", lpFilePart=0x0) returned 0x78 [0050.942] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be730) returned 1 [0050.942] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\7e4dca80246863e3.customDestinations-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\customdestinations\\7e4dca80246863e3.customdestinations-ms"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0050.943] GetFileType (hFile=0x448) returned 0x1 [0050.943] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0050.943] GetFileType (hFile=0x448) returned 0x1 [0050.943] WriteFile (in: hFile=0x448, lpBuffer=0x22d9918*, nNumberOfBytesToWrite=0x20, lpNumberOfBytesWritten=0x3be708, lpOverlapped=0x0 | out: lpBuffer=0x22d9918*, lpNumberOfBytesWritten=0x3be708*=0x20, lpOverlapped=0x0) returned 1 [0050.944] CloseHandle (hObject=0x448) returned 1 [0050.944] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\7e4dca80246863e3.customDestinations-ms", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\7e4dca80246863e3.customDestinations-ms", lpFilePart=0x0) returned 0x78 [0050.944] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\7e4dca80246863e3.customDestinations-ms.xuy", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\7e4dca80246863e3.customDestinations-ms.xuy", lpFilePart=0x0) returned 0x7c [0050.944] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0050.944] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\7e4dca80246863e3.customDestinations-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\customdestinations\\7e4dca80246863e3.customdestinations-ms"), fInfoLevelId=0x0, lpFileInformation=0x3be910 | out: lpFileInformation=0x3be910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0f9b534, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xc0f9b534, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xa35fc10, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x20)) returned 1 [0050.944] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7f0) returned 1 [0050.944] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\7e4dca80246863e3.customDestinations-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\customdestinations\\7e4dca80246863e3.customdestinations-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\7e4dca80246863e3.customDestinations-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\customdestinations\\7e4dca80246863e3.customdestinations-ms.xuy")) returned 1 [0050.945] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\969252ce11249fdd.customDestinations-ms", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\969252ce11249fdd.customDestinations-ms", lpFilePart=0x0) returned 0x78 [0050.945] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0050.945] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\969252ce11249fdd.customDestinations-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\customdestinations\\969252ce11249fdd.customdestinations-ms"), fInfoLevelId=0x0, lpFileInformation=0x22dacd8 | out: lpFileInformation=0x22dacd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8333185f, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x705a9a, ftLastAccessTime.dwHighDateTime=0x1d2d446, ftLastWriteTime.dwLowDateTime=0x705a9a, ftLastWriteTime.dwHighDateTime=0x1d2d446, nFileSizeHigh=0x0, nFileSizeLow=0x516e)) returned 1 [0050.945] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0050.945] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\969252ce11249fdd.customDestinations-ms", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\969252ce11249fdd.customDestinations-ms", lpFilePart=0x0) returned 0x78 [0050.945] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0050.945] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\969252ce11249fdd.customDestinations-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\customdestinations\\969252ce11249fdd.customdestinations-ms"), fInfoLevelId=0x0, lpFileInformation=0x22daeb8 | out: lpFileInformation=0x22daeb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8333185f, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x705a9a, ftLastAccessTime.dwHighDateTime=0x1d2d446, ftLastWriteTime.dwLowDateTime=0x705a9a, ftLastWriteTime.dwHighDateTime=0x1d2d446, nFileSizeHigh=0x0, nFileSizeLow=0x516e)) returned 1 [0050.945] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0050.945] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\969252ce11249fdd.customDestinations-ms", nBufferLength=0x105, lpBuffer=0x3be2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\969252ce11249fdd.customDestinations-ms", lpFilePart=0x0) returned 0x78 [0050.946] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0050.946] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\969252ce11249fdd.customDestinations-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\customdestinations\\969252ce11249fdd.customdestinations-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0050.946] GetFileType (hFile=0x448) returned 0x1 [0050.946] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be730) returned 1 [0050.946] GetFileType (hFile=0x448) returned 0x1 [0050.946] ReadFile (in: hFile=0x448, lpBuffer=0x22dd3a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be848, lpOverlapped=0x0 | out: lpBuffer=0x22dd3a8*, lpNumberOfBytesRead=0x3be848*=0x1000, lpOverlapped=0x0) returned 1 [0050.975] CloseHandle (hObject=0x448) returned 1 [0050.975] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\969252ce11249fdd.customDestinations-ms", nBufferLength=0x105, lpBuffer=0x3be2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\969252ce11249fdd.customDestinations-ms", lpFilePart=0x0) returned 0x78 [0050.975] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0050.975] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\969252ce11249fdd.customDestinations-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\customdestinations\\969252ce11249fdd.customdestinations-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0050.975] GetFileType (hFile=0x448) returned 0x1 [0050.975] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be730) returned 1 [0050.976] GetFileType (hFile=0x448) returned 0x1 [0050.976] WriteFile (in: hFile=0x448, lpBuffer=0x21550f8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be8f8, lpOverlapped=0x0 | out: lpBuffer=0x21550f8*, lpNumberOfBytesWritten=0x3be8f8*=0x2000, lpOverlapped=0x0) returned 1 [0050.976] CloseHandle (hObject=0x448) returned 1 [0050.977] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\969252ce11249fdd.customDestinations-ms", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\969252ce11249fdd.customDestinations-ms", lpFilePart=0x0) returned 0x78 [0050.977] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\969252ce11249fdd.customDestinations-ms.xuy", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\969252ce11249fdd.customDestinations-ms.xuy", lpFilePart=0x0) returned 0x7c [0050.977] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0050.977] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\969252ce11249fdd.customDestinations-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\customdestinations\\969252ce11249fdd.customdestinations-ms"), fInfoLevelId=0x0, lpFileInformation=0x3be910 | out: lpFileInformation=0x3be910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8333185f, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x705a9a, ftLastAccessTime.dwHighDateTime=0x1d2d446, ftLastWriteTime.dwLowDateTime=0xa3abfbd, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x516e)) returned 1 [0050.977] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7f0) returned 1 [0050.977] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\969252ce11249fdd.customDestinations-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\customdestinations\\969252ce11249fdd.customdestinations-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\969252ce11249fdd.customDestinations-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\customdestinations\\969252ce11249fdd.customdestinations-ms.xuy")) returned 1 [0050.978] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\d93f411851d7c929.customDestinations-ms", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\d93f411851d7c929.customDestinations-ms", lpFilePart=0x0) returned 0x78 [0050.978] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0050.978] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\d93f411851d7c929.customDestinations-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\customdestinations\\d93f411851d7c929.customdestinations-ms"), fInfoLevelId=0x0, lpFileInformation=0x215ab00 | out: lpFileInformation=0x215ab00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd17757ec, ftCreationTime.dwHighDateTime=0x1d41fdc, ftLastAccessTime.dwLowDateTime=0xd17757ec, ftLastAccessTime.dwHighDateTime=0x1d41fdc, ftLastWriteTime.dwLowDateTime=0xd180e3a5, ftLastWriteTime.dwHighDateTime=0x1d41fdc, nFileSizeHigh=0x0, nFileSizeLow=0x1856)) returned 1 [0050.978] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0050.978] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\d93f411851d7c929.customDestinations-ms", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\d93f411851d7c929.customDestinations-ms", lpFilePart=0x0) returned 0x78 [0050.978] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0050.978] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\d93f411851d7c929.customDestinations-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\customdestinations\\d93f411851d7c929.customdestinations-ms"), fInfoLevelId=0x0, lpFileInformation=0x215ace0 | out: lpFileInformation=0x215ace0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd17757ec, ftCreationTime.dwHighDateTime=0x1d41fdc, ftLastAccessTime.dwLowDateTime=0xd17757ec, ftLastAccessTime.dwHighDateTime=0x1d41fdc, ftLastWriteTime.dwLowDateTime=0xd180e3a5, ftLastWriteTime.dwHighDateTime=0x1d41fdc, nFileSizeHigh=0x0, nFileSizeLow=0x1856)) returned 1 [0050.978] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0050.978] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\d93f411851d7c929.customDestinations-ms", nBufferLength=0x105, lpBuffer=0x3be2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\d93f411851d7c929.customDestinations-ms", lpFilePart=0x0) returned 0x78 [0050.978] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0050.978] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\d93f411851d7c929.customDestinations-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\customdestinations\\d93f411851d7c929.customdestinations-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0050.979] GetFileType (hFile=0x448) returned 0x1 [0050.979] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be730) returned 1 [0050.979] GetFileType (hFile=0x448) returned 0x1 [0050.979] ReadFile (in: hFile=0x448, lpBuffer=0x215d1d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be848, lpOverlapped=0x0 | out: lpBuffer=0x215d1d0*, lpNumberOfBytesRead=0x3be848*=0x1000, lpOverlapped=0x0) returned 1 [0051.025] CloseHandle (hObject=0x448) returned 1 [0051.025] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\d93f411851d7c929.customDestinations-ms", nBufferLength=0x105, lpBuffer=0x3be2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\d93f411851d7c929.customDestinations-ms", lpFilePart=0x0) returned 0x78 [0051.025] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0051.025] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\d93f411851d7c929.customDestinations-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\customdestinations\\d93f411851d7c929.customdestinations-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0051.026] GetFileType (hFile=0x448) returned 0x1 [0051.026] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be730) returned 1 [0051.026] GetFileType (hFile=0x448) returned 0x1 [0051.026] WriteFile (in: hFile=0x448, lpBuffer=0x215aea0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be8f8, lpOverlapped=0x0 | out: lpBuffer=0x215aea0*, lpNumberOfBytesWritten=0x3be8f8*=0x2000, lpOverlapped=0x0) returned 1 [0051.026] CloseHandle (hObject=0x448) returned 1 [0051.027] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\d93f411851d7c929.customDestinations-ms", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\d93f411851d7c929.customDestinations-ms", lpFilePart=0x0) returned 0x78 [0051.027] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\d93f411851d7c929.customDestinations-ms.xuy", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\d93f411851d7c929.customDestinations-ms.xuy", lpFilePart=0x0) returned 0x7c [0051.027] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0051.027] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\d93f411851d7c929.customDestinations-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\customdestinations\\d93f411851d7c929.customdestinations-ms"), fInfoLevelId=0x0, lpFileInformation=0x3be910 | out: lpFileInformation=0x3be910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd17757ec, ftCreationTime.dwHighDateTime=0x1d41fdc, ftLastAccessTime.dwLowDateTime=0xd17757ec, ftLastAccessTime.dwHighDateTime=0x1d41fdc, ftLastWriteTime.dwLowDateTime=0xa41e822, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0051.027] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7f0) returned 1 [0051.027] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\d93f411851d7c929.customDestinations-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\customdestinations\\d93f411851d7c929.customdestinations-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\d93f411851d7c929.customDestinations-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\customdestinations\\d93f411851d7c929.customdestinations-ms.xuy")) returned 1 [0051.028] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\f01b4d95cf55d32a.customDestinations-ms", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\f01b4d95cf55d32a.customDestinations-ms", lpFilePart=0x0) returned 0x78 [0051.028] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0051.028] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\f01b4d95cf55d32a.customDestinations-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\customdestinations\\f01b4d95cf55d32a.customdestinations-ms"), fInfoLevelId=0x0, lpFileInformation=0x21d9758 | out: lpFileInformation=0x21d9758*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0f9b534, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xc0f9b534, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xc0f9b534, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x18)) returned 1 [0051.028] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0051.028] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\f01b4d95cf55d32a.customDestinations-ms", nBufferLength=0x105, lpBuffer=0x3be250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\f01b4d95cf55d32a.customDestinations-ms", lpFilePart=0x0) returned 0x78 [0051.028] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be730) returned 1 [0051.028] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\f01b4d95cf55d32a.customDestinations-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\customdestinations\\f01b4d95cf55d32a.customdestinations-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0051.028] GetFileType (hFile=0x448) returned 0x1 [0051.028] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0051.028] GetFileType (hFile=0x448) returned 0x1 [0051.028] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3be8c8 | out: lpFileSizeHigh=0x3be8c8*=0x0) returned 0x18 [0051.028] ReadFile (in: hFile=0x448, lpBuffer=0x21d9b48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be7f8, lpOverlapped=0x0 | out: lpBuffer=0x21d9b48*, lpNumberOfBytesRead=0x3be7f8*=0x18, lpOverlapped=0x0) returned 1 [0051.029] CloseHandle (hObject=0x448) returned 1 [0051.039] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\f01b4d95cf55d32a.customDestinations-ms", nBufferLength=0x105, lpBuffer=0x3be250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\f01b4d95cf55d32a.customDestinations-ms", lpFilePart=0x0) returned 0x78 [0051.039] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be730) returned 1 [0051.039] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\f01b4d95cf55d32a.customDestinations-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\customdestinations\\f01b4d95cf55d32a.customdestinations-ms"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0051.040] GetFileType (hFile=0x448) returned 0x1 [0051.040] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0051.040] GetFileType (hFile=0x448) returned 0x1 [0051.040] WriteFile (in: hFile=0x448, lpBuffer=0x2250d10*, nNumberOfBytesToWrite=0x20, lpNumberOfBytesWritten=0x3be708, lpOverlapped=0x0 | out: lpBuffer=0x2250d10*, lpNumberOfBytesWritten=0x3be708*=0x20, lpOverlapped=0x0) returned 1 [0051.042] CloseHandle (hObject=0x448) returned 1 [0051.048] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\f01b4d95cf55d32a.customDestinations-ms", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\f01b4d95cf55d32a.customDestinations-ms", lpFilePart=0x0) returned 0x78 [0051.048] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\f01b4d95cf55d32a.customDestinations-ms.xuy", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\f01b4d95cf55d32a.customDestinations-ms.xuy", lpFilePart=0x0) returned 0x7c [0051.048] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0051.048] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\f01b4d95cf55d32a.customDestinations-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\customdestinations\\f01b4d95cf55d32a.customdestinations-ms"), fInfoLevelId=0x0, lpFileInformation=0x3be910 | out: lpFileInformation=0x3be910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0f9b534, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xc0f9b534, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xa46aed8, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x20)) returned 1 [0051.048] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7f0) returned 1 [0051.048] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\f01b4d95cf55d32a.customDestinations-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\customdestinations\\f01b4d95cf55d32a.customdestinations-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\f01b4d95cf55d32a.customDestinations-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\customdestinations\\f01b4d95cf55d32a.customdestinations-ms.xuy")) returned 1 [0051.049] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be950) returned 1 [0051.049] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures", nBufferLength=0x105, lpBuffer=0x3be440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures", lpFilePart=0x0) returned 0x1e [0051.049] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\", nBufferLength=0x105, lpBuffer=0x3be3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\", lpFilePart=0x0) returned 0x1f [0051.049] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\*", lpFindFileData=0x3be5f0 | out: lpFindFileData=0x3be5f0) returned 0x5d78b0 [0051.049] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0051.049] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0051.049] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0051.049] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0051.049] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0051.050] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0051.050] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0051.050] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0051.050] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0051.050] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0051.050] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 0 [0051.050] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0051.050] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0051.050] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0051.050] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be950) returned 1 [0051.050] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures", nBufferLength=0x105, lpBuffer=0x3be440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures", lpFilePart=0x0) returned 0x1e [0051.050] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\", nBufferLength=0x105, lpBuffer=0x3be3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\", lpFilePart=0x0) returned 0x1f [0051.050] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\*", lpFindFileData=0x3be5f0 | out: lpFindFileData=0x3be5f0) returned 0x5d7d30 [0051.051] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0051.051] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0051.051] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0051.051] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0051.051] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0051.051] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0051.051] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0051.051] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0051.051] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0051.052] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0051.052] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 0 [0051.052] FindClose (in: hFindFile=0x5d7d30 | out: hFindFile=0x5d7d30) returned 1 [0051.052] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0051.052] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0051.052] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\desktop.ini", lpFilePart=0x0) returned 0x2a [0051.052] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0051.052] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x2255118 | out: lpFileInformation=0x2255118*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xae11c718, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xae11c718, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xae14297a, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x1f8)) returned 1 [0051.052] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0051.052] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\desktop.ini", lpFilePart=0x0) returned 0x2a [0051.052] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0051.052] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0051.052] GetFileType (hFile=0x448) returned 0x1 [0051.052] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0051.052] GetFileType (hFile=0x448) returned 0x1 [0051.052] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x1f8 [0051.052] ReadFile (in: hFile=0x448, lpBuffer=0x2255538, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x2255538*, lpNumberOfBytesRead=0x3be868*=0x1f8, lpOverlapped=0x0) returned 1 [0051.052] CloseHandle (hObject=0x448) returned 1 [0051.062] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\desktop.ini", lpFilePart=0x0) returned 0x2a [0051.062] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0051.062] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\desktop.ini"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0051.064] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb230) returned 1 [0051.064] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3bbeb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\desktop.ini", lpFilePart=0x0) returned 0x2a [0051.064] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc350) returned 1 [0051.064] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x3bc430 | out: lpFileInformation=0x3bc430*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xae11c718, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xae11c718, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xae14297a, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x1f8)) returned 1 [0051.064] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc310) returned 1 [0051.064] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3bbed0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\desktop.ini", lpFilePart=0x0) returned 0x2a [0051.064] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc350) returned 1 [0051.064] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x22cd698 | out: lpFileInformation=0x22cd698*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xae11c718, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xae11c718, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xae14297a, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x1f8)) returned 1 [0051.064] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc310) returned 1 [0051.064] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3bbd30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\desktop.ini", lpFilePart=0x0) returned 0x2a [0051.065] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc210) returned 1 [0051.065] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0051.065] GetFileType (hFile=0x448) returned 0x1 [0051.065] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc180) returned 1 [0051.065] GetFileType (hFile=0x448) returned 0x1 [0051.065] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3bc3a8 | out: lpFileSizeHigh=0x3bc3a8*=0x0) returned 0x1f8 [0051.065] ReadFile (in: hFile=0x448, lpBuffer=0x22cdab8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bc2d8, lpOverlapped=0x0 | out: lpBuffer=0x22cdab8*, lpNumberOfBytesRead=0x3bc2d8*=0x1f8, lpOverlapped=0x0) returned 1 [0051.065] CloseHandle (hObject=0x448) returned 1 [0051.107] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3bbd30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\desktop.ini", lpFilePart=0x0) returned 0x2a [0051.107] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc210) returned 1 [0051.107] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\desktop.ini"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0051.108] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8ca0) returned 1 [0051.109] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\EB784XEVaS0_dY.bmp", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\EB784XEVaS0_dY.bmp", lpFilePart=0x0) returned 0x31 [0051.109] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0051.109] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\EB784XEVaS0_dY.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\eb784xevas0_dy.bmp"), fInfoLevelId=0x0, lpFileInformation=0x2345bd0 | out: lpFileInformation=0x2345bd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26782c50, ftCreationTime.dwHighDateTime=0x1d45d25, ftLastAccessTime.dwLowDateTime=0xe32fac90, ftLastAccessTime.dwHighDateTime=0x1d45bce, ftLastWriteTime.dwLowDateTime=0xe32fac90, ftLastWriteTime.dwHighDateTime=0x1d45bce, nFileSizeHigh=0x0, nFileSizeLow=0x11f11)) returned 1 [0051.109] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0051.109] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\EB784XEVaS0_dY.bmp", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\EB784XEVaS0_dY.bmp", lpFilePart=0x0) returned 0x31 [0051.109] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0051.109] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\EB784XEVaS0_dY.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\eb784xevas0_dy.bmp"), fInfoLevelId=0x0, lpFileInformation=0x2345cf8 | out: lpFileInformation=0x2345cf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26782c50, ftCreationTime.dwHighDateTime=0x1d45d25, ftLastAccessTime.dwLowDateTime=0xe32fac90, ftLastAccessTime.dwHighDateTime=0x1d45bce, ftLastWriteTime.dwLowDateTime=0xe32fac90, ftLastWriteTime.dwHighDateTime=0x1d45bce, nFileSizeHigh=0x0, nFileSizeLow=0x11f11)) returned 1 [0051.109] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0051.109] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\EB784XEVaS0_dY.bmp", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\EB784XEVaS0_dY.bmp", lpFilePart=0x0) returned 0x31 [0051.109] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0051.109] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\EB784XEVaS0_dY.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\eb784xevas0_dy.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0051.110] GetFileType (hFile=0x448) returned 0x1 [0051.110] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0051.110] GetFileType (hFile=0x448) returned 0x1 [0051.110] ReadFile (in: hFile=0x448, lpBuffer=0x2348078, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be8b8, lpOverlapped=0x0 | out: lpBuffer=0x2348078*, lpNumberOfBytesRead=0x3be8b8*=0x1000, lpOverlapped=0x0) returned 1 [0051.149] CloseHandle (hObject=0x448) returned 1 [0051.149] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\EB784XEVaS0_dY.bmp", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\EB784XEVaS0_dY.bmp", lpFilePart=0x0) returned 0x31 [0051.149] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0051.149] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\EB784XEVaS0_dY.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\eb784xevas0_dy.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0051.149] GetFileType (hFile=0x448) returned 0x1 [0051.150] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0051.150] GetFileType (hFile=0x448) returned 0x1 [0051.150] WriteFile (in: hFile=0x448, lpBuffer=0x2154ed0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be968, lpOverlapped=0x0 | out: lpBuffer=0x2154ed0*, lpNumberOfBytesWritten=0x3be968*=0x2000, lpOverlapped=0x0) returned 1 [0051.150] CloseHandle (hObject=0x448) returned 1 [0051.152] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\EB784XEVaS0_dY.bmp", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\EB784XEVaS0_dY.bmp", lpFilePart=0x0) returned 0x31 [0051.152] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\EB784XEVaS0_dY.bmp.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\EB784XEVaS0_dY.bmp.xuy", lpFilePart=0x0) returned 0x35 [0051.152] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0051.152] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\EB784XEVaS0_dY.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\eb784xevas0_dy.bmp"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26782c50, ftCreationTime.dwHighDateTime=0x1d45d25, ftLastAccessTime.dwLowDateTime=0xe32fac90, ftLastAccessTime.dwHighDateTime=0x1d45bce, ftLastWriteTime.dwLowDateTime=0xa54fdd7, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x11f11)) returned 1 [0051.152] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0051.152] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\EB784XEVaS0_dY.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\eb784xevas0_dy.bmp"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\EB784XEVaS0_dY.bmp.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\eb784xevas0_dy.bmp.xuy")) returned 1 [0051.153] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\UELEI-EgHa.jpg", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\UELEI-EgHa.jpg", lpFilePart=0x0) returned 0x2d [0051.153] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0051.153] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\UELEI-EgHa.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\uelei-egha.jpg"), fInfoLevelId=0x0, lpFileInformation=0x21c3480 | out: lpFileInformation=0x21c3480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x653c3d60, ftCreationTime.dwHighDateTime=0x1d456d0, ftLastAccessTime.dwLowDateTime=0xc75089d0, ftLastAccessTime.dwHighDateTime=0x1d462af, ftLastWriteTime.dwLowDateTime=0xc75089d0, ftLastWriteTime.dwHighDateTime=0x1d462af, nFileSizeHigh=0x0, nFileSizeLow=0x13d2b)) returned 1 [0051.153] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0051.153] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\UELEI-EgHa.jpg", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\UELEI-EgHa.jpg", lpFilePart=0x0) returned 0x2d [0051.153] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0051.153] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\UELEI-EgHa.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\uelei-egha.jpg"), fInfoLevelId=0x0, lpFileInformation=0x21c3598 | out: lpFileInformation=0x21c3598*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x653c3d60, ftCreationTime.dwHighDateTime=0x1d456d0, ftLastAccessTime.dwLowDateTime=0xc75089d0, ftLastAccessTime.dwHighDateTime=0x1d462af, ftLastWriteTime.dwLowDateTime=0xc75089d0, ftLastWriteTime.dwHighDateTime=0x1d462af, nFileSizeHigh=0x0, nFileSizeLow=0x13d2b)) returned 1 [0051.153] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0051.153] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\UELEI-EgHa.jpg", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\UELEI-EgHa.jpg", lpFilePart=0x0) returned 0x2d [0051.153] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0051.153] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\UELEI-EgHa.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\uelei-egha.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0051.153] GetFileType (hFile=0x448) returned 0x1 [0051.153] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0051.153] GetFileType (hFile=0x448) returned 0x1 [0051.154] ReadFile (in: hFile=0x448, lpBuffer=0x21c58f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be8b8, lpOverlapped=0x0 | out: lpBuffer=0x21c58f8*, lpNumberOfBytesRead=0x3be8b8*=0x1000, lpOverlapped=0x0) returned 1 [0051.191] CloseHandle (hObject=0x448) returned 1 [0051.191] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\UELEI-EgHa.jpg", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\UELEI-EgHa.jpg", lpFilePart=0x0) returned 0x2d [0051.191] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0051.191] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\UELEI-EgHa.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\uelei-egha.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0051.192] GetFileType (hFile=0x448) returned 0x1 [0051.192] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0051.192] GetFileType (hFile=0x448) returned 0x1 [0051.192] WriteFile (in: hFile=0x448, lpBuffer=0x21c3690*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be968, lpOverlapped=0x0 | out: lpBuffer=0x21c3690*, lpNumberOfBytesWritten=0x3be968*=0x2000, lpOverlapped=0x0) returned 1 [0051.192] CloseHandle (hObject=0x448) returned 1 [0051.194] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\UELEI-EgHa.jpg", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\UELEI-EgHa.jpg", lpFilePart=0x0) returned 0x2d [0051.194] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\UELEI-EgHa.jpg.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\UELEI-EgHa.jpg.xuy", lpFilePart=0x0) returned 0x31 [0051.194] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0051.194] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\UELEI-EgHa.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\uelei-egha.jpg"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x653c3d60, ftCreationTime.dwHighDateTime=0x1d456d0, ftLastAccessTime.dwLowDateTime=0xc75089d0, ftLastAccessTime.dwHighDateTime=0x1d462af, ftLastWriteTime.dwLowDateTime=0xa5c225d, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x13d2b)) returned 1 [0051.194] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0051.194] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\UELEI-EgHa.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\uelei-egha.jpg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\UELEI-EgHa.jpg.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\uelei-egha.jpg.xuy")) returned 1 [0051.195] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0051.195] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\Camera Roll", nBufferLength=0x105, lpBuffer=0x3be3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\Camera Roll", lpFilePart=0x0) returned 0x2a [0051.195] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\Camera Roll\\", nBufferLength=0x105, lpBuffer=0x3be370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\Camera Roll\\", lpFilePart=0x0) returned 0x2b [0051.195] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\Camera Roll\\*", lpFindFileData=0x3be580 | out: lpFindFileData=0x3be580) returned 0x5d7370 [0051.195] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0051.195] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0051.195] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 0 [0051.195] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0051.195] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0051.195] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7f0) returned 1 [0051.195] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0051.196] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\Camera Roll", nBufferLength=0x105, lpBuffer=0x3be3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\Camera Roll", lpFilePart=0x0) returned 0x2a [0051.196] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\Camera Roll\\", nBufferLength=0x105, lpBuffer=0x3be370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\Camera Roll\\", lpFilePart=0x0) returned 0x2b [0051.196] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\Camera Roll\\*", lpFindFileData=0x3be580 | out: lpFindFileData=0x3be580) returned 0x5d79d0 [0051.196] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0051.196] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0051.196] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 0 [0051.196] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0051.196] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0051.196] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7f0) returned 1 [0051.196] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\Camera Roll\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\Camera Roll\\desktop.ini", lpFilePart=0x0) returned 0x36 [0051.196] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0051.196] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\Camera Roll\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\camera roll\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x2243420 | out: lpFileInformation=0x2243420*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x3bece384, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x3bece384, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x3bece384, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0xbe)) returned 1 [0051.196] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0051.197] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\Camera Roll\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3be250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\Camera Roll\\desktop.ini", lpFilePart=0x0) returned 0x36 [0051.197] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be730) returned 1 [0051.197] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\Camera Roll\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\camera roll\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0051.197] GetFileType (hFile=0x448) returned 0x1 [0051.197] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0051.197] GetFileType (hFile=0x448) returned 0x1 [0051.197] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3be8c8 | out: lpFileSizeHigh=0x3be8c8*=0x0) returned 0xbe [0051.197] ReadFile (in: hFile=0x448, lpBuffer=0x2243738, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be7f8, lpOverlapped=0x0 | out: lpBuffer=0x2243738*, lpNumberOfBytesRead=0x3be7f8*=0xbe, lpOverlapped=0x0) returned 1 [0051.198] CloseHandle (hObject=0x448) returned 1 [0051.208] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\Camera Roll\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3be250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\Camera Roll\\desktop.ini", lpFilePart=0x0) returned 0x36 [0051.208] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be730) returned 1 [0051.208] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\Camera Roll\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\camera roll\\desktop.ini"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0051.209] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb1c0) returned 1 [0051.210] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\Camera Roll\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3bbe40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\Camera Roll\\desktop.ini", lpFilePart=0x0) returned 0x36 [0051.210] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc2e0) returned 1 [0051.210] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\Camera Roll\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\camera roll\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x3bc3c0 | out: lpFileInformation=0x3bc3c0*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x3bece384, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x3bece384, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x3bece384, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0xbe)) returned 1 [0051.210] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc2a0) returned 1 [0051.210] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\Camera Roll\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3bbe60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\Camera Roll\\desktop.ini", lpFilePart=0x0) returned 0x36 [0051.210] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc2e0) returned 1 [0051.210] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\Camera Roll\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\camera roll\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x22bb178 | out: lpFileInformation=0x22bb178*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x3bece384, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x3bece384, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x3bece384, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0xbe)) returned 1 [0051.210] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc2a0) returned 1 [0051.210] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\Camera Roll\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3bbcc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\Camera Roll\\desktop.ini", lpFilePart=0x0) returned 0x36 [0051.210] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc1a0) returned 1 [0051.210] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\Camera Roll\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\camera roll\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0051.210] GetFileType (hFile=0x448) returned 0x1 [0051.210] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc110) returned 1 [0051.210] GetFileType (hFile=0x448) returned 0x1 [0051.210] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3bc338 | out: lpFileSizeHigh=0x3bc338*=0x0) returned 0xbe [0051.211] ReadFile (in: hFile=0x448, lpBuffer=0x22bb490, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bc268, lpOverlapped=0x0 | out: lpBuffer=0x22bb490*, lpNumberOfBytesRead=0x3bc268*=0xbe, lpOverlapped=0x0) returned 1 [0051.211] CloseHandle (hObject=0x448) returned 1 [0051.247] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\Camera Roll\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3bbcc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\Camera Roll\\desktop.ini", lpFilePart=0x0) returned 0x36 [0051.247] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc1a0) returned 1 [0051.247] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\Camera Roll\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\camera roll\\desktop.ini"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0051.248] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8c30) returned 1 [0051.249] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0051.249] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\cLzrBwI9ELH8EUl_mr", nBufferLength=0x105, lpBuffer=0x3be3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\cLzrBwI9ELH8EUl_mr", lpFilePart=0x0) returned 0x31 [0051.249] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\cLzrBwI9ELH8EUl_mr\\", nBufferLength=0x105, lpBuffer=0x3be370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\cLzrBwI9ELH8EUl_mr\\", lpFilePart=0x0) returned 0x32 [0051.249] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\cLzrBwI9ELH8EUl_mr\\*", lpFindFileData=0x3be580 | out: lpFindFileData=0x3be580) returned 0x5d78b0 [0051.249] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0051.250] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0051.250] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 0 [0051.250] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0051.250] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0051.250] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7f0) returned 1 [0051.250] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0051.250] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\cLzrBwI9ELH8EUl_mr", nBufferLength=0x105, lpBuffer=0x3be3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\cLzrBwI9ELH8EUl_mr", lpFilePart=0x0) returned 0x31 [0051.250] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\cLzrBwI9ELH8EUl_mr\\", nBufferLength=0x105, lpBuffer=0x3be370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\cLzrBwI9ELH8EUl_mr\\", lpFilePart=0x0) returned 0x32 [0051.250] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\cLzrBwI9ELH8EUl_mr\\*", lpFindFileData=0x3be580 | out: lpFindFileData=0x3be580) returned 0x5d78b0 [0051.250] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0051.250] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0051.250] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 0 [0051.251] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0051.251] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0051.251] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7f0) returned 1 [0051.251] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\cLzrBwI9ELH8EUl_mr\\7ZO5muiNIGYzs1.jpg", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\cLzrBwI9ELH8EUl_mr\\7ZO5muiNIGYzs1.jpg", lpFilePart=0x0) returned 0x44 [0051.251] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0051.251] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\cLzrBwI9ELH8EUl_mr\\7ZO5muiNIGYzs1.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\clzrbwi9elh8eul_mr\\7zo5muinigyzs1.jpg"), fInfoLevelId=0x0, lpFileInformation=0x2334948 | out: lpFileInformation=0x2334948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e52def0, ftCreationTime.dwHighDateTime=0x1d45bdd, ftLastAccessTime.dwLowDateTime=0x2fc87920, ftLastAccessTime.dwHighDateTime=0x1d4629a, ftLastWriteTime.dwLowDateTime=0x2fc87920, ftLastWriteTime.dwHighDateTime=0x1d4629a, nFileSizeHigh=0x0, nFileSizeLow=0x11e62)) returned 1 [0051.251] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0051.251] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\cLzrBwI9ELH8EUl_mr\\7ZO5muiNIGYzs1.jpg", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\cLzrBwI9ELH8EUl_mr\\7ZO5muiNIGYzs1.jpg", lpFilePart=0x0) returned 0x44 [0051.251] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0051.251] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\cLzrBwI9ELH8EUl_mr\\7ZO5muiNIGYzs1.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\clzrbwi9elh8eul_mr\\7zo5muinigyzs1.jpg"), fInfoLevelId=0x0, lpFileInformation=0x2334a98 | out: lpFileInformation=0x2334a98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e52def0, ftCreationTime.dwHighDateTime=0x1d45bdd, ftLastAccessTime.dwLowDateTime=0x2fc87920, ftLastAccessTime.dwHighDateTime=0x1d4629a, ftLastWriteTime.dwLowDateTime=0x2fc87920, ftLastWriteTime.dwHighDateTime=0x1d4629a, nFileSizeHigh=0x0, nFileSizeLow=0x11e62)) returned 1 [0051.251] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0051.251] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\cLzrBwI9ELH8EUl_mr\\7ZO5muiNIGYzs1.jpg", nBufferLength=0x105, lpBuffer=0x3be2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\cLzrBwI9ELH8EUl_mr\\7ZO5muiNIGYzs1.jpg", lpFilePart=0x0) returned 0x44 [0051.251] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0051.251] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\cLzrBwI9ELH8EUl_mr\\7ZO5muiNIGYzs1.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\clzrbwi9elh8eul_mr\\7zo5muinigyzs1.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0051.251] GetFileType (hFile=0x448) returned 0x1 [0051.251] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be730) returned 1 [0051.251] GetFileType (hFile=0x448) returned 0x1 [0051.251] ReadFile (in: hFile=0x448, lpBuffer=0x2336e68, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be848, lpOverlapped=0x0 | out: lpBuffer=0x2336e68*, lpNumberOfBytesRead=0x3be848*=0x1000, lpOverlapped=0x0) returned 1 [0051.294] CloseHandle (hObject=0x448) returned 1 [0051.294] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\cLzrBwI9ELH8EUl_mr\\7ZO5muiNIGYzs1.jpg", nBufferLength=0x105, lpBuffer=0x3be2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\cLzrBwI9ELH8EUl_mr\\7ZO5muiNIGYzs1.jpg", lpFilePart=0x0) returned 0x44 [0051.294] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0051.294] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\cLzrBwI9ELH8EUl_mr\\7ZO5muiNIGYzs1.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\clzrbwi9elh8eul_mr\\7zo5muinigyzs1.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0051.295] GetFileType (hFile=0x448) returned 0x1 [0051.295] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be730) returned 1 [0051.295] GetFileType (hFile=0x448) returned 0x1 [0051.295] WriteFile (in: hFile=0x448, lpBuffer=0x2154ea0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be8f8, lpOverlapped=0x0 | out: lpBuffer=0x2154ea0*, lpNumberOfBytesWritten=0x3be8f8*=0x2000, lpOverlapped=0x0) returned 1 [0051.295] CloseHandle (hObject=0x448) returned 1 [0051.297] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\cLzrBwI9ELH8EUl_mr\\7ZO5muiNIGYzs1.jpg", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\cLzrBwI9ELH8EUl_mr\\7ZO5muiNIGYzs1.jpg", lpFilePart=0x0) returned 0x44 [0051.297] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\cLzrBwI9ELH8EUl_mr\\7ZO5muiNIGYzs1.jpg.xuy", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\cLzrBwI9ELH8EUl_mr\\7ZO5muiNIGYzs1.jpg.xuy", lpFilePart=0x0) returned 0x48 [0051.297] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0051.297] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\cLzrBwI9ELH8EUl_mr\\7ZO5muiNIGYzs1.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\clzrbwi9elh8eul_mr\\7zo5muinigyzs1.jpg"), fInfoLevelId=0x0, lpFileInformation=0x3be910 | out: lpFileInformation=0x3be910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e52def0, ftCreationTime.dwHighDateTime=0x1d45bdd, ftLastAccessTime.dwLowDateTime=0x2fc87920, ftLastAccessTime.dwHighDateTime=0x1d4629a, ftLastWriteTime.dwLowDateTime=0xa6cd38a, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x11e62)) returned 1 [0051.297] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7f0) returned 1 [0051.297] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\cLzrBwI9ELH8EUl_mr\\7ZO5muiNIGYzs1.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\clzrbwi9elh8eul_mr\\7zo5muinigyzs1.jpg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\cLzrBwI9ELH8EUl_mr\\7ZO5muiNIGYzs1.jpg.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\clzrbwi9elh8eul_mr\\7zo5muinigyzs1.jpg.xuy")) returned 1 [0051.298] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0051.298] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho", nBufferLength=0x105, lpBuffer=0x3be3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho", lpFilePart=0x0) returned 0x32 [0051.298] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\", nBufferLength=0x105, lpBuffer=0x3be370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\", lpFilePart=0x0) returned 0x33 [0051.298] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\*", lpFindFileData=0x3be580 | out: lpFindFileData=0x3be580) returned 0x5d78b0 [0051.298] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0051.298] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0051.298] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0051.298] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0051.299] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0051.299] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0051.299] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 0 [0051.299] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0051.299] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0051.299] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7f0) returned 1 [0051.299] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0051.299] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho", nBufferLength=0x105, lpBuffer=0x3be3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho", lpFilePart=0x0) returned 0x32 [0051.299] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\", nBufferLength=0x105, lpBuffer=0x3be370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\", lpFilePart=0x0) returned 0x33 [0051.300] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\*", lpFindFileData=0x3be580 | out: lpFindFileData=0x3be580) returned 0x5d7370 [0051.300] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0051.300] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0051.300] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0051.300] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0051.300] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0051.301] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0051.301] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 0 [0051.301] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0051.301] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0051.301] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7f0) returned 1 [0051.301] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\NiAQ3VHp8Zu.png", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\NiAQ3VHp8Zu.png", lpFilePart=0x0) returned 0x42 [0051.301] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0051.301] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\NiAQ3VHp8Zu.png" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\hiwbt-r5mj llke0xho\\niaq3vhp8zu.png"), fInfoLevelId=0x0, lpFileInformation=0x21b5d38 | out: lpFileInformation=0x21b5d38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa55afb60, ftCreationTime.dwHighDateTime=0x1d46261, ftLastAccessTime.dwLowDateTime=0xe74750a0, ftLastAccessTime.dwHighDateTime=0x1d461c1, ftLastWriteTime.dwLowDateTime=0xe74750a0, ftLastWriteTime.dwHighDateTime=0x1d461c1, nFileSizeHigh=0x0, nFileSizeLow=0x13e27)) returned 1 [0051.301] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0051.301] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\NiAQ3VHp8Zu.png", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\NiAQ3VHp8Zu.png", lpFilePart=0x0) returned 0x42 [0051.301] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0051.302] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\NiAQ3VHp8Zu.png" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\hiwbt-r5mj llke0xho\\niaq3vhp8zu.png"), fInfoLevelId=0x0, lpFileInformation=0x21b5e78 | out: lpFileInformation=0x21b5e78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa55afb60, ftCreationTime.dwHighDateTime=0x1d46261, ftLastAccessTime.dwLowDateTime=0xe74750a0, ftLastAccessTime.dwHighDateTime=0x1d461c1, ftLastWriteTime.dwLowDateTime=0xe74750a0, ftLastWriteTime.dwHighDateTime=0x1d461c1, nFileSizeHigh=0x0, nFileSizeLow=0x13e27)) returned 1 [0051.302] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0051.302] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\NiAQ3VHp8Zu.png", nBufferLength=0x105, lpBuffer=0x3be2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\NiAQ3VHp8Zu.png", lpFilePart=0x0) returned 0x42 [0051.302] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0051.302] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\NiAQ3VHp8Zu.png" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\hiwbt-r5mj llke0xho\\niaq3vhp8zu.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0051.302] GetFileType (hFile=0x448) returned 0x1 [0051.302] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be730) returned 1 [0051.302] GetFileType (hFile=0x448) returned 0x1 [0051.302] ReadFile (in: hFile=0x448, lpBuffer=0x21b8228, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be848, lpOverlapped=0x0 | out: lpBuffer=0x21b8228*, lpNumberOfBytesRead=0x3be848*=0x1000, lpOverlapped=0x0) returned 1 [0051.344] CloseHandle (hObject=0x448) returned 1 [0051.344] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\NiAQ3VHp8Zu.png", nBufferLength=0x105, lpBuffer=0x3be2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\NiAQ3VHp8Zu.png", lpFilePart=0x0) returned 0x42 [0051.344] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0051.344] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\NiAQ3VHp8Zu.png" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\hiwbt-r5mj llke0xho\\niaq3vhp8zu.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0051.345] GetFileType (hFile=0x448) returned 0x1 [0051.345] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be730) returned 1 [0051.345] GetFileType (hFile=0x448) returned 0x1 [0051.345] WriteFile (in: hFile=0x448, lpBuffer=0x21b5f98*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be8f8, lpOverlapped=0x0 | out: lpBuffer=0x21b5f98*, lpNumberOfBytesWritten=0x3be8f8*=0x2000, lpOverlapped=0x0) returned 1 [0051.345] CloseHandle (hObject=0x448) returned 1 [0051.347] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\NiAQ3VHp8Zu.png", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\NiAQ3VHp8Zu.png", lpFilePart=0x0) returned 0x42 [0051.347] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\NiAQ3VHp8Zu.png.xuy", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\NiAQ3VHp8Zu.png.xuy", lpFilePart=0x0) returned 0x46 [0051.347] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0051.347] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\NiAQ3VHp8Zu.png" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\hiwbt-r5mj llke0xho\\niaq3vhp8zu.png"), fInfoLevelId=0x0, lpFileInformation=0x3be910 | out: lpFileInformation=0x3be910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa55afb60, ftCreationTime.dwHighDateTime=0x1d46261, ftLastAccessTime.dwLowDateTime=0xe74750a0, ftLastAccessTime.dwHighDateTime=0x1d461c1, ftLastWriteTime.dwLowDateTime=0xa73fdb5, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x13e27)) returned 1 [0051.347] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7f0) returned 1 [0051.347] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\NiAQ3VHp8Zu.png" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\hiwbt-r5mj llke0xho\\niaq3vhp8zu.png"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\NiAQ3VHp8Zu.png.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\hiwbt-r5mj llke0xho\\niaq3vhp8zu.png.xuy")) returned 1 [0051.348] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0051.348] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\G--uCJBQv6-u-", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\G--uCJBQv6-u-", lpFilePart=0x0) returned 0x40 [0051.348] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\G--uCJBQv6-u-\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\G--uCJBQv6-u-\\", lpFilePart=0x0) returned 0x41 [0051.348] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\G--uCJBQv6-u-\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d7c70 [0051.348] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0051.348] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0051.349] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0051.349] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0051.349] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0051.349] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0051.349] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0051.349] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\G--uCJBQv6-u-", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\G--uCJBQv6-u-", lpFilePart=0x0) returned 0x40 [0051.349] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\G--uCJBQv6-u-\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\G--uCJBQv6-u-\\", lpFilePart=0x0) returned 0x41 [0051.349] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\G--uCJBQv6-u-\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d7550 [0051.349] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0051.349] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0051.349] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0051.350] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0051.350] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0051.350] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0051.350] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\G--uCJBQv6-u-\\3hK fW-nhuzGhzCyF.jpg", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\G--uCJBQv6-u-\\3hK fW-nhuzGhzCyF.jpg", lpFilePart=0x0) returned 0x56 [0051.350] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0051.350] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\G--uCJBQv6-u-\\3hK fW-nhuzGhzCyF.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\hiwbt-r5mj llke0xho\\g--ucjbqv6-u-\\3hk fw-nhuzghzcyf.jpg"), fInfoLevelId=0x0, lpFileInformation=0x2236430 | out: lpFileInformation=0x2236430*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x856a5c10, ftCreationTime.dwHighDateTime=0x1d45dde, ftLastAccessTime.dwLowDateTime=0xb502bc40, ftLastAccessTime.dwHighDateTime=0x1d46588, ftLastWriteTime.dwLowDateTime=0xb502bc40, ftLastWriteTime.dwHighDateTime=0x1d46588, nFileSizeHigh=0x0, nFileSizeLow=0x6fa8)) returned 1 [0051.350] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0051.350] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\G--uCJBQv6-u-\\3hK fW-nhuzGhzCyF.jpg", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\G--uCJBQv6-u-\\3hK fW-nhuzGhzCyF.jpg", lpFilePart=0x0) returned 0x56 [0051.350] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0051.350] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\G--uCJBQv6-u-\\3hK fW-nhuzGhzCyF.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\hiwbt-r5mj llke0xho\\g--ucjbqv6-u-\\3hk fw-nhuzghzcyf.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22365a8 | out: lpFileInformation=0x22365a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x856a5c10, ftCreationTime.dwHighDateTime=0x1d45dde, ftLastAccessTime.dwLowDateTime=0xb502bc40, ftLastAccessTime.dwHighDateTime=0x1d46588, ftLastWriteTime.dwLowDateTime=0xb502bc40, ftLastWriteTime.dwHighDateTime=0x1d46588, nFileSizeHigh=0x0, nFileSizeLow=0x6fa8)) returned 1 [0051.350] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0051.350] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\G--uCJBQv6-u-\\3hK fW-nhuzGhzCyF.jpg", nBufferLength=0x105, lpBuffer=0x3be270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\G--uCJBQv6-u-\\3hK fW-nhuzGhzCyF.jpg", lpFilePart=0x0) returned 0x56 [0051.350] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0051.350] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\G--uCJBQv6-u-\\3hK fW-nhuzGhzCyF.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\hiwbt-r5mj llke0xho\\g--ucjbqv6-u-\\3hk fw-nhuzghzcyf.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0051.351] GetFileType (hFile=0x448) returned 0x1 [0051.351] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6c0) returned 1 [0051.351] GetFileType (hFile=0x448) returned 0x1 [0051.351] ReadFile (in: hFile=0x448, lpBuffer=0x22389c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be7d8, lpOverlapped=0x0 | out: lpBuffer=0x22389c8*, lpNumberOfBytesRead=0x3be7d8*=0x1000, lpOverlapped=0x0) returned 1 [0051.362] CloseHandle (hObject=0x448) returned 1 [0051.362] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\G--uCJBQv6-u-\\3hK fW-nhuzGhzCyF.jpg", nBufferLength=0x105, lpBuffer=0x3be270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\G--uCJBQv6-u-\\3hK fW-nhuzGhzCyF.jpg", lpFilePart=0x0) returned 0x56 [0051.362] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0051.362] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\G--uCJBQv6-u-\\3hK fW-nhuzGhzCyF.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\hiwbt-r5mj llke0xho\\g--ucjbqv6-u-\\3hk fw-nhuzghzcyf.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0051.362] GetFileType (hFile=0x448) returned 0x1 [0051.362] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6c0) returned 1 [0051.362] GetFileType (hFile=0x448) returned 0x1 [0051.362] WriteFile (in: hFile=0x448, lpBuffer=0x2236700*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be888, lpOverlapped=0x0 | out: lpBuffer=0x2236700*, lpNumberOfBytesWritten=0x3be888*=0x2000, lpOverlapped=0x0) returned 1 [0051.363] CloseHandle (hObject=0x448) returned 1 [0051.364] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\G--uCJBQv6-u-\\3hK fW-nhuzGhzCyF.jpg", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\G--uCJBQv6-u-\\3hK fW-nhuzGhzCyF.jpg", lpFilePart=0x0) returned 0x56 [0051.364] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\G--uCJBQv6-u-\\3hK fW-nhuzGhzCyF.jpg.xuy", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\G--uCJBQv6-u-\\3hK fW-nhuzGhzCyF.jpg.xuy", lpFilePart=0x0) returned 0x5a [0051.364] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0051.364] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\G--uCJBQv6-u-\\3hK fW-nhuzGhzCyF.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\hiwbt-r5mj llke0xho\\g--ucjbqv6-u-\\3hk fw-nhuzghzcyf.jpg"), fInfoLevelId=0x0, lpFileInformation=0x3be8a0 | out: lpFileInformation=0x3be8a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x856a5c10, ftCreationTime.dwHighDateTime=0x1d45dde, ftLastAccessTime.dwLowDateTime=0xb502bc40, ftLastAccessTime.dwHighDateTime=0x1d46588, ftLastWriteTime.dwLowDateTime=0xa765c49, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x6fa8)) returned 1 [0051.364] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0051.364] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\G--uCJBQv6-u-\\3hK fW-nhuzGhzCyF.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\hiwbt-r5mj llke0xho\\g--ucjbqv6-u-\\3hk fw-nhuzghzcyf.jpg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\G--uCJBQv6-u-\\3hK fW-nhuzGhzCyF.jpg.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\hiwbt-r5mj llke0xho\\g--ucjbqv6-u-\\3hk fw-nhuzghzcyf.jpg.xuy")) returned 1 [0051.365] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0051.365] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\qTWuqh N53NYZck", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\qTWuqh N53NYZck", lpFilePart=0x0) returned 0x42 [0051.365] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\qTWuqh N53NYZck\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\qTWuqh N53NYZck\\", lpFilePart=0x0) returned 0x43 [0051.365] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\qTWuqh N53NYZck\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d7550 [0051.365] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0051.366] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0051.366] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0051.366] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0051.366] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0051.366] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0051.366] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0051.366] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0051.366] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0051.366] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0051.366] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0051.367] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\qTWuqh N53NYZck", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\qTWuqh N53NYZck", lpFilePart=0x0) returned 0x42 [0051.367] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\qTWuqh N53NYZck\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\qTWuqh N53NYZck\\", lpFilePart=0x0) returned 0x43 [0051.367] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\qTWuqh N53NYZck\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d7670 [0051.367] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0051.367] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0051.367] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0051.367] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0051.367] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0051.367] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0051.368] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0051.368] FindClose (in: hFindFile=0x5d7670 | out: hFindFile=0x5d7670) returned 1 [0051.368] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0051.368] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0051.368] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\qTWuqh N53NYZck\\fwMACd.png", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\qTWuqh N53NYZck\\fwMACd.png", lpFilePart=0x0) returned 0x4d [0051.368] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0051.368] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\qTWuqh N53NYZck\\fwMACd.png" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\hiwbt-r5mj llke0xho\\qtwuqh n53nyzck\\fwmacd.png"), fInfoLevelId=0x0, lpFileInformation=0x22b7f18 | out: lpFileInformation=0x22b7f18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8e9a40, ftCreationTime.dwHighDateTime=0x1d4571c, ftLastAccessTime.dwLowDateTime=0x5c9db550, ftLastAccessTime.dwHighDateTime=0x1d460ba, ftLastWriteTime.dwLowDateTime=0x5c9db550, ftLastWriteTime.dwHighDateTime=0x1d460ba, nFileSizeHigh=0x0, nFileSizeLow=0x1326f)) returned 1 [0051.368] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0051.368] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\qTWuqh N53NYZck\\fwMACd.png", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\qTWuqh N53NYZck\\fwMACd.png", lpFilePart=0x0) returned 0x4d [0051.368] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0051.368] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\qTWuqh N53NYZck\\fwMACd.png" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\hiwbt-r5mj llke0xho\\qtwuqh n53nyzck\\fwmacd.png"), fInfoLevelId=0x0, lpFileInformation=0x22b8068 | out: lpFileInformation=0x22b8068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8e9a40, ftCreationTime.dwHighDateTime=0x1d4571c, ftLastAccessTime.dwLowDateTime=0x5c9db550, ftLastAccessTime.dwHighDateTime=0x1d460ba, ftLastWriteTime.dwLowDateTime=0x5c9db550, ftLastWriteTime.dwHighDateTime=0x1d460ba, nFileSizeHigh=0x0, nFileSizeLow=0x1326f)) returned 1 [0051.368] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0051.368] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\qTWuqh N53NYZck\\fwMACd.png", nBufferLength=0x105, lpBuffer=0x3be270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\qTWuqh N53NYZck\\fwMACd.png", lpFilePart=0x0) returned 0x4d [0051.368] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0051.368] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\qTWuqh N53NYZck\\fwMACd.png" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\hiwbt-r5mj llke0xho\\qtwuqh n53nyzck\\fwmacd.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0051.369] GetFileType (hFile=0x448) returned 0x1 [0051.369] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6c0) returned 1 [0051.369] GetFileType (hFile=0x448) returned 0x1 [0051.369] ReadFile (in: hFile=0x448, lpBuffer=0x22ba438, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be7d8, lpOverlapped=0x0 | out: lpBuffer=0x22ba438*, lpNumberOfBytesRead=0x3be7d8*=0x1000, lpOverlapped=0x0) returned 1 [0051.380] CloseHandle (hObject=0x448) returned 1 [0051.380] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\qTWuqh N53NYZck\\fwMACd.png", nBufferLength=0x105, lpBuffer=0x3be270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\qTWuqh N53NYZck\\fwMACd.png", lpFilePart=0x0) returned 0x4d [0051.380] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0051.380] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\qTWuqh N53NYZck\\fwMACd.png" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\hiwbt-r5mj llke0xho\\qtwuqh n53nyzck\\fwmacd.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0051.380] GetFileType (hFile=0x448) returned 0x1 [0051.380] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6c0) returned 1 [0051.380] GetFileType (hFile=0x448) returned 0x1 [0051.381] WriteFile (in: hFile=0x448, lpBuffer=0x22b8198*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be888, lpOverlapped=0x0 | out: lpBuffer=0x22b8198*, lpNumberOfBytesWritten=0x3be888*=0x2000, lpOverlapped=0x0) returned 1 [0051.381] CloseHandle (hObject=0x448) returned 1 [0051.383] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\qTWuqh N53NYZck\\fwMACd.png", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\qTWuqh N53NYZck\\fwMACd.png", lpFilePart=0x0) returned 0x4d [0051.383] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\qTWuqh N53NYZck\\fwMACd.png.xuy", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\qTWuqh N53NYZck\\fwMACd.png.xuy", lpFilePart=0x0) returned 0x51 [0051.383] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0051.383] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\qTWuqh N53NYZck\\fwMACd.png" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\hiwbt-r5mj llke0xho\\qtwuqh n53nyzck\\fwmacd.png"), fInfoLevelId=0x0, lpFileInformation=0x3be8a0 | out: lpFileInformation=0x3be8a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8e9a40, ftCreationTime.dwHighDateTime=0x1d4571c, ftLastAccessTime.dwLowDateTime=0x5c9db550, ftLastAccessTime.dwHighDateTime=0x1d460ba, ftLastWriteTime.dwLowDateTime=0xa78be73, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x1326f)) returned 1 [0051.383] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0051.383] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\qTWuqh N53NYZck\\fwMACd.png" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\hiwbt-r5mj llke0xho\\qtwuqh n53nyzck\\fwmacd.png"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\qTWuqh N53NYZck\\fwMACd.png.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\hiwbt-r5mj llke0xho\\qtwuqh n53nyzck\\fwmacd.png.xuy")) returned 1 [0051.384] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\qTWuqh N53NYZck\\gjO 73rZ M4.bmp", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\qTWuqh N53NYZck\\gjO 73rZ M4.bmp", lpFilePart=0x0) returned 0x52 [0051.384] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0051.384] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\qTWuqh N53NYZck\\gjO 73rZ M4.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\hiwbt-r5mj llke0xho\\qtwuqh n53nyzck\\gjo 73rz m4.bmp"), fInfoLevelId=0x0, lpFileInformation=0x2336808 | out: lpFileInformation=0x2336808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1bb6f6c0, ftCreationTime.dwHighDateTime=0x1d45ec9, ftLastAccessTime.dwLowDateTime=0x2ef30be0, ftLastAccessTime.dwHighDateTime=0x1d45611, ftLastWriteTime.dwLowDateTime=0x2ef30be0, ftLastWriteTime.dwHighDateTime=0x1d45611, nFileSizeHigh=0x0, nFileSizeLow=0x1587c)) returned 1 [0051.384] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0051.384] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\qTWuqh N53NYZck\\gjO 73rZ M4.bmp", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\qTWuqh N53NYZck\\gjO 73rZ M4.bmp", lpFilePart=0x0) returned 0x52 [0051.384] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0051.384] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\qTWuqh N53NYZck\\gjO 73rZ M4.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\hiwbt-r5mj llke0xho\\qtwuqh n53nyzck\\gjo 73rz m4.bmp"), fInfoLevelId=0x0, lpFileInformation=0x2336968 | out: lpFileInformation=0x2336968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1bb6f6c0, ftCreationTime.dwHighDateTime=0x1d45ec9, ftLastAccessTime.dwLowDateTime=0x2ef30be0, ftLastAccessTime.dwHighDateTime=0x1d45611, ftLastWriteTime.dwLowDateTime=0x2ef30be0, ftLastWriteTime.dwHighDateTime=0x1d45611, nFileSizeHigh=0x0, nFileSizeLow=0x1587c)) returned 1 [0051.384] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0051.384] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\qTWuqh N53NYZck\\gjO 73rZ M4.bmp", nBufferLength=0x105, lpBuffer=0x3be270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\qTWuqh N53NYZck\\gjO 73rZ M4.bmp", lpFilePart=0x0) returned 0x52 [0051.384] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0051.384] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\qTWuqh N53NYZck\\gjO 73rZ M4.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\hiwbt-r5mj llke0xho\\qtwuqh n53nyzck\\gjo 73rz m4.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0051.385] GetFileType (hFile=0x448) returned 0x1 [0051.385] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6c0) returned 1 [0051.385] GetFileType (hFile=0x448) returned 0x1 [0051.385] ReadFile (in: hFile=0x448, lpBuffer=0x2338d58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be7d8, lpOverlapped=0x0 | out: lpBuffer=0x2338d58*, lpNumberOfBytesRead=0x3be7d8*=0x1000, lpOverlapped=0x0) returned 1 [0051.425] CloseHandle (hObject=0x448) returned 1 [0051.425] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\qTWuqh N53NYZck\\gjO 73rZ M4.bmp", nBufferLength=0x105, lpBuffer=0x3be270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\qTWuqh N53NYZck\\gjO 73rZ M4.bmp", lpFilePart=0x0) returned 0x52 [0051.426] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0051.426] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\qTWuqh N53NYZck\\gjO 73rZ M4.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\hiwbt-r5mj llke0xho\\qtwuqh n53nyzck\\gjo 73rz m4.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0051.426] GetFileType (hFile=0x448) returned 0x1 [0051.426] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6c0) returned 1 [0051.426] GetFileType (hFile=0x448) returned 0x1 [0051.426] WriteFile (in: hFile=0x448, lpBuffer=0x2155328*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be888, lpOverlapped=0x0 | out: lpBuffer=0x2155328*, lpNumberOfBytesWritten=0x3be888*=0x2000, lpOverlapped=0x0) returned 1 [0051.426] CloseHandle (hObject=0x448) returned 1 [0051.428] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\qTWuqh N53NYZck\\gjO 73rZ M4.bmp", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\qTWuqh N53NYZck\\gjO 73rZ M4.bmp", lpFilePart=0x0) returned 0x52 [0051.428] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\qTWuqh N53NYZck\\gjO 73rZ M4.bmp.xuy", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\qTWuqh N53NYZck\\gjO 73rZ M4.bmp.xuy", lpFilePart=0x0) returned 0x56 [0051.428] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0051.429] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\qTWuqh N53NYZck\\gjO 73rZ M4.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\hiwbt-r5mj llke0xho\\qtwuqh n53nyzck\\gjo 73rz m4.bmp"), fInfoLevelId=0x0, lpFileInformation=0x3be8a0 | out: lpFileInformation=0x3be8a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1bb6f6c0, ftCreationTime.dwHighDateTime=0x1d45ec9, ftLastAccessTime.dwLowDateTime=0x2ef30be0, ftLastAccessTime.dwHighDateTime=0x1d45611, ftLastWriteTime.dwLowDateTime=0xa7fe546, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x1587c)) returned 1 [0051.429] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0051.429] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\qTWuqh N53NYZck\\gjO 73rZ M4.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\hiwbt-r5mj llke0xho\\qtwuqh n53nyzck\\gjo 73rz m4.bmp"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\qTWuqh N53NYZck\\gjO 73rZ M4.bmp.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\hiwbt-r5mj llke0xho\\qtwuqh n53nyzck\\gjo 73rz m4.bmp.xuy")) returned 1 [0051.429] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\qTWuqh N53NYZck\\pkc6AG_LpRlnu-9-.bmp", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\qTWuqh N53NYZck\\pkc6AG_LpRlnu-9-.bmp", lpFilePart=0x0) returned 0x57 [0051.429] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0051.429] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\qTWuqh N53NYZck\\pkc6AG_LpRlnu-9-.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\hiwbt-r5mj llke0xho\\qtwuqh n53nyzck\\pkc6ag_lprlnu-9-.bmp"), fInfoLevelId=0x0, lpFileInformation=0x21b55d0 | out: lpFileInformation=0x21b55d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe7a8d50, ftCreationTime.dwHighDateTime=0x1d462f1, ftLastAccessTime.dwLowDateTime=0x70ebb520, ftLastAccessTime.dwHighDateTime=0x1d46051, ftLastWriteTime.dwLowDateTime=0x70ebb520, ftLastWriteTime.dwHighDateTime=0x1d46051, nFileSizeHigh=0x0, nFileSizeLow=0x2967)) returned 1 [0051.430] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0051.430] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\qTWuqh N53NYZck\\pkc6AG_LpRlnu-9-.bmp", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\qTWuqh N53NYZck\\pkc6AG_LpRlnu-9-.bmp", lpFilePart=0x0) returned 0x57 [0051.430] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0051.430] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\qTWuqh N53NYZck\\pkc6AG_LpRlnu-9-.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\hiwbt-r5mj llke0xho\\qtwuqh n53nyzck\\pkc6ag_lprlnu-9-.bmp"), fInfoLevelId=0x0, lpFileInformation=0x21b5748 | out: lpFileInformation=0x21b5748*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe7a8d50, ftCreationTime.dwHighDateTime=0x1d462f1, ftLastAccessTime.dwLowDateTime=0x70ebb520, ftLastAccessTime.dwHighDateTime=0x1d46051, ftLastWriteTime.dwLowDateTime=0x70ebb520, ftLastWriteTime.dwHighDateTime=0x1d46051, nFileSizeHigh=0x0, nFileSizeLow=0x2967)) returned 1 [0051.430] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0051.430] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\qTWuqh N53NYZck\\pkc6AG_LpRlnu-9-.bmp", nBufferLength=0x105, lpBuffer=0x3be270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\qTWuqh N53NYZck\\pkc6AG_LpRlnu-9-.bmp", lpFilePart=0x0) returned 0x57 [0051.430] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0051.430] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\qTWuqh N53NYZck\\pkc6AG_LpRlnu-9-.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\hiwbt-r5mj llke0xho\\qtwuqh n53nyzck\\pkc6ag_lprlnu-9-.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0051.430] GetFileType (hFile=0x448) returned 0x1 [0051.430] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6c0) returned 1 [0051.430] GetFileType (hFile=0x448) returned 0x1 [0051.430] ReadFile (in: hFile=0x448, lpBuffer=0x21b7b68, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be7d8, lpOverlapped=0x0 | out: lpBuffer=0x21b7b68*, lpNumberOfBytesRead=0x3be7d8*=0x1000, lpOverlapped=0x0) returned 1 [0051.459] CloseHandle (hObject=0x448) returned 1 [0051.459] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\qTWuqh N53NYZck\\pkc6AG_LpRlnu-9-.bmp", nBufferLength=0x105, lpBuffer=0x3be270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\qTWuqh N53NYZck\\pkc6AG_LpRlnu-9-.bmp", lpFilePart=0x0) returned 0x57 [0051.459] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0051.460] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\qTWuqh N53NYZck\\pkc6AG_LpRlnu-9-.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\hiwbt-r5mj llke0xho\\qtwuqh n53nyzck\\pkc6ag_lprlnu-9-.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0051.460] GetFileType (hFile=0x448) returned 0x1 [0051.460] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6c0) returned 1 [0051.460] GetFileType (hFile=0x448) returned 0x1 [0051.460] WriteFile (in: hFile=0x448, lpBuffer=0x21b58a0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be888, lpOverlapped=0x0 | out: lpBuffer=0x21b58a0*, lpNumberOfBytesWritten=0x3be888*=0x2000, lpOverlapped=0x0) returned 1 [0051.460] CloseHandle (hObject=0x448) returned 1 [0051.461] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\qTWuqh N53NYZck\\pkc6AG_LpRlnu-9-.bmp", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\qTWuqh N53NYZck\\pkc6AG_LpRlnu-9-.bmp", lpFilePart=0x0) returned 0x57 [0051.461] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\qTWuqh N53NYZck\\pkc6AG_LpRlnu-9-.bmp.xuy", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\qTWuqh N53NYZck\\pkc6AG_LpRlnu-9-.bmp.xuy", lpFilePart=0x0) returned 0x5b [0051.461] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0051.461] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\qTWuqh N53NYZck\\pkc6AG_LpRlnu-9-.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\hiwbt-r5mj llke0xho\\qtwuqh n53nyzck\\pkc6ag_lprlnu-9-.bmp"), fInfoLevelId=0x0, lpFileInformation=0x3be8a0 | out: lpFileInformation=0x3be8a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe7a8d50, ftCreationTime.dwHighDateTime=0x1d462f1, ftLastAccessTime.dwLowDateTime=0x70ebb520, ftLastAccessTime.dwHighDateTime=0x1d46051, ftLastWriteTime.dwLowDateTime=0xa84abe5, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2967)) returned 1 [0051.461] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0051.461] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\qTWuqh N53NYZck\\pkc6AG_LpRlnu-9-.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\hiwbt-r5mj llke0xho\\qtwuqh n53nyzck\\pkc6ag_lprlnu-9-.bmp"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\qTWuqh N53NYZck\\pkc6AG_LpRlnu-9-.bmp.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\hiwbt-r5mj llke0xho\\qtwuqh n53nyzck\\pkc6ag_lprlnu-9-.bmp.xuy")) returned 1 [0051.462] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\qTWuqh N53NYZck\\uItrk_jbFDkZ5N6T.png", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\qTWuqh N53NYZck\\uItrk_jbFDkZ5N6T.png", lpFilePart=0x0) returned 0x57 [0051.462] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0051.462] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\qTWuqh N53NYZck\\uItrk_jbFDkZ5N6T.png" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\hiwbt-r5mj llke0xho\\qtwuqh n53nyzck\\uitrk_jbfdkz5n6t.png"), fInfoLevelId=0x0, lpFileInformation=0x2233f90 | out: lpFileInformation=0x2233f90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfee2fa80, ftCreationTime.dwHighDateTime=0x1d458b5, ftLastAccessTime.dwLowDateTime=0xe48002c0, ftLastAccessTime.dwHighDateTime=0x1d45d6d, ftLastWriteTime.dwLowDateTime=0xe48002c0, ftLastWriteTime.dwHighDateTime=0x1d45d6d, nFileSizeHigh=0x0, nFileSizeLow=0xf004)) returned 1 [0051.462] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0051.462] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\qTWuqh N53NYZck\\uItrk_jbFDkZ5N6T.png", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\qTWuqh N53NYZck\\uItrk_jbFDkZ5N6T.png", lpFilePart=0x0) returned 0x57 [0051.462] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0051.462] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\qTWuqh N53NYZck\\uItrk_jbFDkZ5N6T.png" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\hiwbt-r5mj llke0xho\\qtwuqh n53nyzck\\uitrk_jbfdkz5n6t.png"), fInfoLevelId=0x0, lpFileInformation=0x2234108 | out: lpFileInformation=0x2234108*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfee2fa80, ftCreationTime.dwHighDateTime=0x1d458b5, ftLastAccessTime.dwLowDateTime=0xe48002c0, ftLastAccessTime.dwHighDateTime=0x1d45d6d, ftLastWriteTime.dwLowDateTime=0xe48002c0, ftLastWriteTime.dwHighDateTime=0x1d45d6d, nFileSizeHigh=0x0, nFileSizeLow=0xf004)) returned 1 [0051.463] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0051.463] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\qTWuqh N53NYZck\\uItrk_jbFDkZ5N6T.png", nBufferLength=0x105, lpBuffer=0x3be270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\qTWuqh N53NYZck\\uItrk_jbFDkZ5N6T.png", lpFilePart=0x0) returned 0x57 [0051.463] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0051.463] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\qTWuqh N53NYZck\\uItrk_jbFDkZ5N6T.png" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\hiwbt-r5mj llke0xho\\qtwuqh n53nyzck\\uitrk_jbfdkz5n6t.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0051.463] GetFileType (hFile=0x448) returned 0x1 [0051.463] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6c0) returned 1 [0051.463] GetFileType (hFile=0x448) returned 0x1 [0051.463] ReadFile (in: hFile=0x448, lpBuffer=0x2236528, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be7d8, lpOverlapped=0x0 | out: lpBuffer=0x2236528*, lpNumberOfBytesRead=0x3be7d8*=0x1000, lpOverlapped=0x0) returned 1 [0051.474] CloseHandle (hObject=0x448) returned 1 [0051.474] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\qTWuqh N53NYZck\\uItrk_jbFDkZ5N6T.png", nBufferLength=0x105, lpBuffer=0x3be270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\qTWuqh N53NYZck\\uItrk_jbFDkZ5N6T.png", lpFilePart=0x0) returned 0x57 [0051.474] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0051.474] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\qTWuqh N53NYZck\\uItrk_jbFDkZ5N6T.png" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\hiwbt-r5mj llke0xho\\qtwuqh n53nyzck\\uitrk_jbfdkz5n6t.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0051.475] GetFileType (hFile=0x448) returned 0x1 [0051.475] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6c0) returned 1 [0051.475] GetFileType (hFile=0x448) returned 0x1 [0051.475] WriteFile (in: hFile=0x448, lpBuffer=0x2234260*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be888, lpOverlapped=0x0 | out: lpBuffer=0x2234260*, lpNumberOfBytesWritten=0x3be888*=0x2000, lpOverlapped=0x0) returned 1 [0051.475] CloseHandle (hObject=0x448) returned 1 [0051.486] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\qTWuqh N53NYZck\\uItrk_jbFDkZ5N6T.png", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\qTWuqh N53NYZck\\uItrk_jbFDkZ5N6T.png", lpFilePart=0x0) returned 0x57 [0051.486] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\qTWuqh N53NYZck\\uItrk_jbFDkZ5N6T.png.xuy", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\qTWuqh N53NYZck\\uItrk_jbFDkZ5N6T.png.xuy", lpFilePart=0x0) returned 0x5b [0051.486] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0051.486] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\qTWuqh N53NYZck\\uItrk_jbFDkZ5N6T.png" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\hiwbt-r5mj llke0xho\\qtwuqh n53nyzck\\uitrk_jbfdkz5n6t.png"), fInfoLevelId=0x0, lpFileInformation=0x3be8a0 | out: lpFileInformation=0x3be8a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfee2fa80, ftCreationTime.dwHighDateTime=0x1d458b5, ftLastAccessTime.dwLowDateTime=0xe48002c0, ftLastAccessTime.dwHighDateTime=0x1d45d6d, ftLastWriteTime.dwLowDateTime=0xa870cd7, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xf004)) returned 1 [0051.486] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0051.486] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\qTWuqh N53NYZck\\uItrk_jbFDkZ5N6T.png" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\hiwbt-r5mj llke0xho\\qtwuqh n53nyzck\\uitrk_jbfdkz5n6t.png"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\qTWuqh N53NYZck\\uItrk_jbFDkZ5N6T.png.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\hiwbt-r5mj llke0xho\\qtwuqh n53nyzck\\uitrk_jbfdkz5n6t.png.xuy")) returned 1 [0051.487] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\qTWuqh N53NYZck\\zMTJW8Dsc.png", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\qTWuqh N53NYZck\\zMTJW8Dsc.png", lpFilePart=0x0) returned 0x50 [0051.487] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0051.487] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\qTWuqh N53NYZck\\zMTJW8Dsc.png" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\hiwbt-r5mj llke0xho\\qtwuqh n53nyzck\\zmtjw8dsc.png"), fInfoLevelId=0x0, lpFileInformation=0x22b2950 | out: lpFileInformation=0x22b2950*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b225780, ftCreationTime.dwHighDateTime=0x1d45cd1, ftLastAccessTime.dwLowDateTime=0x6b262400, ftLastAccessTime.dwHighDateTime=0x1d4566e, ftLastWriteTime.dwLowDateTime=0x6b262400, ftLastWriteTime.dwHighDateTime=0x1d4566e, nFileSizeHigh=0x0, nFileSizeLow=0x110ae)) returned 1 [0051.487] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0051.488] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\qTWuqh N53NYZck\\zMTJW8Dsc.png", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\qTWuqh N53NYZck\\zMTJW8Dsc.png", lpFilePart=0x0) returned 0x50 [0051.488] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0051.488] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\qTWuqh N53NYZck\\zMTJW8Dsc.png" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\hiwbt-r5mj llke0xho\\qtwuqh n53nyzck\\zmtjw8dsc.png"), fInfoLevelId=0x0, lpFileInformation=0x22b2ab0 | out: lpFileInformation=0x22b2ab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b225780, ftCreationTime.dwHighDateTime=0x1d45cd1, ftLastAccessTime.dwLowDateTime=0x6b262400, ftLastAccessTime.dwHighDateTime=0x1d4566e, ftLastWriteTime.dwLowDateTime=0x6b262400, ftLastWriteTime.dwHighDateTime=0x1d4566e, nFileSizeHigh=0x0, nFileSizeLow=0x110ae)) returned 1 [0051.488] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0051.488] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\qTWuqh N53NYZck\\zMTJW8Dsc.png", nBufferLength=0x105, lpBuffer=0x3be270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\qTWuqh N53NYZck\\zMTJW8Dsc.png", lpFilePart=0x0) returned 0x50 [0051.488] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0051.488] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\qTWuqh N53NYZck\\zMTJW8Dsc.png" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\hiwbt-r5mj llke0xho\\qtwuqh n53nyzck\\zmtjw8dsc.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0051.488] GetFileType (hFile=0x448) returned 0x1 [0051.488] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6c0) returned 1 [0051.488] GetFileType (hFile=0x448) returned 0x1 [0051.488] ReadFile (in: hFile=0x448, lpBuffer=0x22b4ea0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be7d8, lpOverlapped=0x0 | out: lpBuffer=0x22b4ea0*, lpNumberOfBytesRead=0x3be7d8*=0x1000, lpOverlapped=0x0) returned 1 [0051.500] CloseHandle (hObject=0x448) returned 1 [0051.500] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\qTWuqh N53NYZck\\zMTJW8Dsc.png", nBufferLength=0x105, lpBuffer=0x3be270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\qTWuqh N53NYZck\\zMTJW8Dsc.png", lpFilePart=0x0) returned 0x50 [0051.500] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0051.500] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\qTWuqh N53NYZck\\zMTJW8Dsc.png" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\hiwbt-r5mj llke0xho\\qtwuqh n53nyzck\\zmtjw8dsc.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0051.501] GetFileType (hFile=0x448) returned 0x1 [0051.501] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6c0) returned 1 [0051.501] GetFileType (hFile=0x448) returned 0x1 [0051.501] WriteFile (in: hFile=0x448, lpBuffer=0x22b2bf0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be888, lpOverlapped=0x0 | out: lpBuffer=0x22b2bf0*, lpNumberOfBytesWritten=0x3be888*=0x2000, lpOverlapped=0x0) returned 1 [0051.501] CloseHandle (hObject=0x448) returned 1 [0051.504] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\qTWuqh N53NYZck\\zMTJW8Dsc.png", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\qTWuqh N53NYZck\\zMTJW8Dsc.png", lpFilePart=0x0) returned 0x50 [0051.504] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\qTWuqh N53NYZck\\zMTJW8Dsc.png.xuy", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\qTWuqh N53NYZck\\zMTJW8Dsc.png.xuy", lpFilePart=0x0) returned 0x54 [0051.504] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0051.504] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\qTWuqh N53NYZck\\zMTJW8Dsc.png" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\hiwbt-r5mj llke0xho\\qtwuqh n53nyzck\\zmtjw8dsc.png"), fInfoLevelId=0x0, lpFileInformation=0x3be8a0 | out: lpFileInformation=0x3be8a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b225780, ftCreationTime.dwHighDateTime=0x1d45cd1, ftLastAccessTime.dwLowDateTime=0x6b262400, ftLastAccessTime.dwHighDateTime=0x1d4566e, ftLastWriteTime.dwLowDateTime=0xa8bd45f, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x110ae)) returned 1 [0051.504] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0051.504] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\qTWuqh N53NYZck\\zMTJW8Dsc.png" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\hiwbt-r5mj llke0xho\\qtwuqh n53nyzck\\zmtjw8dsc.png"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\qTWuqh N53NYZck\\zMTJW8Dsc.png.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\hiwbt-r5mj llke0xho\\qtwuqh n53nyzck\\zmtjw8dsc.png.xuy")) returned 1 [0051.505] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0051.505] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\R6lD7xHD8T-ubO3-rd", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\R6lD7xHD8T-ubO3-rd", lpFilePart=0x0) returned 0x45 [0051.505] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\R6lD7xHD8T-ubO3-rd\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\R6lD7xHD8T-ubO3-rd\\", lpFilePart=0x0) returned 0x46 [0051.505] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\R6lD7xHD8T-ubO3-rd\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d7d30 [0051.505] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0051.505] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0051.505] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0051.505] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0051.506] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0051.506] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0051.506] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0051.506] FindClose (in: hFindFile=0x5d7d30 | out: hFindFile=0x5d7d30) returned 1 [0051.506] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0051.506] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0051.506] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0051.506] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\R6lD7xHD8T-ubO3-rd", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\R6lD7xHD8T-ubO3-rd", lpFilePart=0x0) returned 0x45 [0051.506] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\R6lD7xHD8T-ubO3-rd\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\R6lD7xHD8T-ubO3-rd\\", lpFilePart=0x0) returned 0x46 [0051.506] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\R6lD7xHD8T-ubO3-rd\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d7370 [0051.506] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0051.507] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0051.507] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0051.507] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0051.507] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0051.507] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0051.507] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0051.507] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0051.507] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0051.507] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0051.507] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\R6lD7xHD8T-ubO3-rd\\8JP_fHn2fAsy.jpg", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\R6lD7xHD8T-ubO3-rd\\8JP_fHn2fAsy.jpg", lpFilePart=0x0) returned 0x56 [0051.508] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0051.508] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\R6lD7xHD8T-ubO3-rd\\8JP_fHn2fAsy.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\hiwbt-r5mj llke0xho\\r6ld7xhd8t-ubo3-rd\\8jp_fhn2fasy.jpg"), fInfoLevelId=0x0, lpFileInformation=0x23344a0 | out: lpFileInformation=0x23344a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74e26490, ftCreationTime.dwHighDateTime=0x1d45b8c, ftLastAccessTime.dwLowDateTime=0x1836cb50, ftLastAccessTime.dwHighDateTime=0x1d459d4, ftLastWriteTime.dwLowDateTime=0x1836cb50, ftLastWriteTime.dwHighDateTime=0x1d459d4, nFileSizeHigh=0x0, nFileSizeLow=0x2dab)) returned 1 [0051.508] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0051.508] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\R6lD7xHD8T-ubO3-rd\\8JP_fHn2fAsy.jpg", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\R6lD7xHD8T-ubO3-rd\\8JP_fHn2fAsy.jpg", lpFilePart=0x0) returned 0x56 [0051.508] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0051.508] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\R6lD7xHD8T-ubO3-rd\\8JP_fHn2fAsy.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\hiwbt-r5mj llke0xho\\r6ld7xhd8t-ubo3-rd\\8jp_fhn2fasy.jpg"), fInfoLevelId=0x0, lpFileInformation=0x2334610 | out: lpFileInformation=0x2334610*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74e26490, ftCreationTime.dwHighDateTime=0x1d45b8c, ftLastAccessTime.dwLowDateTime=0x1836cb50, ftLastAccessTime.dwHighDateTime=0x1d459d4, ftLastWriteTime.dwLowDateTime=0x1836cb50, ftLastWriteTime.dwHighDateTime=0x1d459d4, nFileSizeHigh=0x0, nFileSizeLow=0x2dab)) returned 1 [0051.508] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0051.508] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\R6lD7xHD8T-ubO3-rd\\8JP_fHn2fAsy.jpg", nBufferLength=0x105, lpBuffer=0x3be270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\R6lD7xHD8T-ubO3-rd\\8JP_fHn2fAsy.jpg", lpFilePart=0x0) returned 0x56 [0051.508] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0051.508] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\R6lD7xHD8T-ubO3-rd\\8JP_fHn2fAsy.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\hiwbt-r5mj llke0xho\\r6ld7xhd8t-ubo3-rd\\8jp_fhn2fasy.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0051.508] GetFileType (hFile=0x448) returned 0x1 [0051.508] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6c0) returned 1 [0051.508] GetFileType (hFile=0x448) returned 0x1 [0051.508] ReadFile (in: hFile=0x448, lpBuffer=0x2336a20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be7d8, lpOverlapped=0x0 | out: lpBuffer=0x2336a20*, lpNumberOfBytesRead=0x3be7d8*=0x1000, lpOverlapped=0x0) returned 1 [0051.561] CloseHandle (hObject=0x448) returned 1 [0051.561] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\R6lD7xHD8T-ubO3-rd\\8JP_fHn2fAsy.jpg", nBufferLength=0x105, lpBuffer=0x3be270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\R6lD7xHD8T-ubO3-rd\\8JP_fHn2fAsy.jpg", lpFilePart=0x0) returned 0x56 [0051.561] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0051.561] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\R6lD7xHD8T-ubO3-rd\\8JP_fHn2fAsy.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\hiwbt-r5mj llke0xho\\r6ld7xhd8t-ubo3-rd\\8jp_fhn2fasy.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0051.561] GetFileType (hFile=0x448) returned 0x1 [0051.561] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6c0) returned 1 [0051.561] GetFileType (hFile=0x448) returned 0x1 [0051.561] WriteFile (in: hFile=0x448, lpBuffer=0x2155350*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be888, lpOverlapped=0x0 | out: lpBuffer=0x2155350*, lpNumberOfBytesWritten=0x3be888*=0x2000, lpOverlapped=0x0) returned 1 [0051.562] CloseHandle (hObject=0x448) returned 1 [0051.563] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\R6lD7xHD8T-ubO3-rd\\8JP_fHn2fAsy.jpg", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\R6lD7xHD8T-ubO3-rd\\8JP_fHn2fAsy.jpg", lpFilePart=0x0) returned 0x56 [0051.563] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\R6lD7xHD8T-ubO3-rd\\8JP_fHn2fAsy.jpg.xuy", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\R6lD7xHD8T-ubO3-rd\\8JP_fHn2fAsy.jpg.xuy", lpFilePart=0x0) returned 0x5a [0051.563] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0051.563] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\R6lD7xHD8T-ubO3-rd\\8JP_fHn2fAsy.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\hiwbt-r5mj llke0xho\\r6ld7xhd8t-ubo3-rd\\8jp_fhn2fasy.jpg"), fInfoLevelId=0x0, lpFileInformation=0x3be8a0 | out: lpFileInformation=0x3be8a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74e26490, ftCreationTime.dwHighDateTime=0x1d45b8c, ftLastAccessTime.dwLowDateTime=0x1836cb50, ftLastAccessTime.dwHighDateTime=0x1d459d4, ftLastWriteTime.dwLowDateTime=0xa955e64, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2dab)) returned 1 [0051.563] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0051.563] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\R6lD7xHD8T-ubO3-rd\\8JP_fHn2fAsy.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\hiwbt-r5mj llke0xho\\r6ld7xhd8t-ubo3-rd\\8jp_fhn2fasy.jpg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\R6lD7xHD8T-ubO3-rd\\8JP_fHn2fAsy.jpg.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\hiwbt-r5mj llke0xho\\r6ld7xhd8t-ubo3-rd\\8jp_fhn2fasy.jpg.xuy")) returned 1 [0051.564] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\R6lD7xHD8T-ubO3-rd\\pv2DdR40ou-b2B8evhuj.gif", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\R6lD7xHD8T-ubO3-rd\\pv2DdR40ou-b2B8evhuj.gif", lpFilePart=0x0) returned 0x5e [0051.564] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0051.564] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\R6lD7xHD8T-ubO3-rd\\pv2DdR40ou-b2B8evhuj.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\hiwbt-r5mj llke0xho\\r6ld7xhd8t-ubo3-rd\\pv2ddr40ou-b2b8evhuj.gif"), fInfoLevelId=0x0, lpFileInformation=0x21b2e40 | out: lpFileInformation=0x21b2e40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd71cab70, ftCreationTime.dwHighDateTime=0x1d45808, ftLastAccessTime.dwLowDateTime=0x9173d240, ftLastAccessTime.dwHighDateTime=0x1d45bfc, ftLastWriteTime.dwLowDateTime=0x9173d240, ftLastWriteTime.dwHighDateTime=0x1d45bfc, nFileSizeHigh=0x0, nFileSizeLow=0x5ee)) returned 1 [0051.564] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0051.564] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\R6lD7xHD8T-ubO3-rd\\pv2DdR40ou-b2B8evhuj.gif", nBufferLength=0x105, lpBuffer=0x3be1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\R6lD7xHD8T-ubO3-rd\\pv2DdR40ou-b2B8evhuj.gif", lpFilePart=0x0) returned 0x5e [0051.564] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6c0) returned 1 [0051.564] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\R6lD7xHD8T-ubO3-rd\\pv2DdR40ou-b2B8evhuj.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\hiwbt-r5mj llke0xho\\r6ld7xhd8t-ubo3-rd\\pv2ddr40ou-b2b8evhuj.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0051.564] GetFileType (hFile=0x448) returned 0x1 [0051.564] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0051.564] GetFileType (hFile=0x448) returned 0x1 [0051.564] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3be858 | out: lpFileSizeHigh=0x3be858*=0x0) returned 0x5ee [0051.564] ReadFile (in: hFile=0x448, lpBuffer=0x21b3768, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be788, lpOverlapped=0x0 | out: lpBuffer=0x21b3768*, lpNumberOfBytesRead=0x3be788*=0x5ee, lpOverlapped=0x0) returned 1 [0051.564] CloseHandle (hObject=0x448) returned 1 [0051.575] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\R6lD7xHD8T-ubO3-rd\\pv2DdR40ou-b2B8evhuj.gif", nBufferLength=0x105, lpBuffer=0x3be1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\R6lD7xHD8T-ubO3-rd\\pv2DdR40ou-b2B8evhuj.gif", lpFilePart=0x0) returned 0x5e [0051.575] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6c0) returned 1 [0051.575] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\R6lD7xHD8T-ubO3-rd\\pv2DdR40ou-b2B8evhuj.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\hiwbt-r5mj llke0xho\\r6ld7xhd8t-ubo3-rd\\pv2ddr40ou-b2b8evhuj.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0051.576] GetFileType (hFile=0x448) returned 0x1 [0051.576] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0051.576] GetFileType (hFile=0x448) returned 0x1 [0051.576] WriteFile (in: hFile=0x448, lpBuffer=0x222c538*, nNumberOfBytesToWrite=0x5f0, lpNumberOfBytesWritten=0x3be698, lpOverlapped=0x0 | out: lpBuffer=0x222c538*, lpNumberOfBytesWritten=0x3be698*=0x5f0, lpOverlapped=0x0) returned 1 [0051.577] CloseHandle (hObject=0x448) returned 1 [0051.578] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\R6lD7xHD8T-ubO3-rd\\pv2DdR40ou-b2B8evhuj.gif", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\R6lD7xHD8T-ubO3-rd\\pv2DdR40ou-b2B8evhuj.gif", lpFilePart=0x0) returned 0x5e [0051.578] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\R6lD7xHD8T-ubO3-rd\\pv2DdR40ou-b2B8evhuj.gif.xuy", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\R6lD7xHD8T-ubO3-rd\\pv2DdR40ou-b2B8evhuj.gif.xuy", lpFilePart=0x0) returned 0x62 [0051.578] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0051.578] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\R6lD7xHD8T-ubO3-rd\\pv2DdR40ou-b2B8evhuj.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\hiwbt-r5mj llke0xho\\r6ld7xhd8t-ubo3-rd\\pv2ddr40ou-b2b8evhuj.gif"), fInfoLevelId=0x0, lpFileInformation=0x3be8a0 | out: lpFileInformation=0x3be8a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd71cab70, ftCreationTime.dwHighDateTime=0x1d45808, ftLastAccessTime.dwLowDateTime=0x9173d240, ftLastAccessTime.dwHighDateTime=0x1d45bfc, ftLastWriteTime.dwLowDateTime=0xa97be7e, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x5f0)) returned 1 [0051.578] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0051.578] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\R6lD7xHD8T-ubO3-rd\\pv2DdR40ou-b2B8evhuj.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\hiwbt-r5mj llke0xho\\r6ld7xhd8t-ubo3-rd\\pv2ddr40ou-b2b8evhuj.gif"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\R6lD7xHD8T-ubO3-rd\\pv2DdR40ou-b2B8evhuj.gif.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\hiwbt-r5mj llke0xho\\r6ld7xhd8t-ubo3-rd\\pv2ddr40ou-b2b8evhuj.gif.xuy")) returned 1 [0051.579] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\R6lD7xHD8T-ubO3-rd\\WlBenJ.bmp", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\R6lD7xHD8T-ubO3-rd\\WlBenJ.bmp", lpFilePart=0x0) returned 0x50 [0051.579] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0051.579] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\R6lD7xHD8T-ubO3-rd\\WlBenJ.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\hiwbt-r5mj llke0xho\\r6ld7xhd8t-ubo3-rd\\wlbenj.bmp"), fInfoLevelId=0x0, lpFileInformation=0x222d830 | out: lpFileInformation=0x222d830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b199f30, ftCreationTime.dwHighDateTime=0x1d459dc, ftLastAccessTime.dwLowDateTime=0x6bab7a0, ftLastAccessTime.dwHighDateTime=0x1d45705, ftLastWriteTime.dwLowDateTime=0x6bab7a0, ftLastWriteTime.dwHighDateTime=0x1d45705, nFileSizeHigh=0x0, nFileSizeLow=0xb092)) returned 1 [0051.579] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0051.579] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\R6lD7xHD8T-ubO3-rd\\WlBenJ.bmp", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\R6lD7xHD8T-ubO3-rd\\WlBenJ.bmp", lpFilePart=0x0) returned 0x50 [0051.579] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0051.579] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\R6lD7xHD8T-ubO3-rd\\WlBenJ.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\hiwbt-r5mj llke0xho\\r6ld7xhd8t-ubo3-rd\\wlbenj.bmp"), fInfoLevelId=0x0, lpFileInformation=0x222d988 | out: lpFileInformation=0x222d988*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b199f30, ftCreationTime.dwHighDateTime=0x1d459dc, ftLastAccessTime.dwLowDateTime=0x6bab7a0, ftLastAccessTime.dwHighDateTime=0x1d45705, ftLastWriteTime.dwLowDateTime=0x6bab7a0, ftLastWriteTime.dwHighDateTime=0x1d45705, nFileSizeHigh=0x0, nFileSizeLow=0xb092)) returned 1 [0051.579] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0051.579] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\R6lD7xHD8T-ubO3-rd\\WlBenJ.bmp", nBufferLength=0x105, lpBuffer=0x3be270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\R6lD7xHD8T-ubO3-rd\\WlBenJ.bmp", lpFilePart=0x0) returned 0x50 [0051.579] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0051.579] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\R6lD7xHD8T-ubO3-rd\\WlBenJ.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\hiwbt-r5mj llke0xho\\r6ld7xhd8t-ubo3-rd\\wlbenj.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0051.580] GetFileType (hFile=0x448) returned 0x1 [0051.580] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6c0) returned 1 [0051.580] GetFileType (hFile=0x448) returned 0x1 [0051.580] ReadFile (in: hFile=0x448, lpBuffer=0x222fd68, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be7d8, lpOverlapped=0x0 | out: lpBuffer=0x222fd68*, lpNumberOfBytesRead=0x3be7d8*=0x1000, lpOverlapped=0x0) returned 1 [0051.592] CloseHandle (hObject=0x448) returned 1 [0051.592] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\R6lD7xHD8T-ubO3-rd\\WlBenJ.bmp", nBufferLength=0x105, lpBuffer=0x3be270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\R6lD7xHD8T-ubO3-rd\\WlBenJ.bmp", lpFilePart=0x0) returned 0x50 [0051.592] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0051.592] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\R6lD7xHD8T-ubO3-rd\\WlBenJ.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\hiwbt-r5mj llke0xho\\r6ld7xhd8t-ubo3-rd\\wlbenj.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0051.592] GetFileType (hFile=0x448) returned 0x1 [0051.592] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6c0) returned 1 [0051.592] GetFileType (hFile=0x448) returned 0x1 [0051.592] WriteFile (in: hFile=0x448, lpBuffer=0x222dac0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be888, lpOverlapped=0x0 | out: lpBuffer=0x222dac0*, lpNumberOfBytesWritten=0x3be888*=0x2000, lpOverlapped=0x0) returned 1 [0051.592] CloseHandle (hObject=0x448) returned 1 [0051.594] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\R6lD7xHD8T-ubO3-rd\\WlBenJ.bmp", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\R6lD7xHD8T-ubO3-rd\\WlBenJ.bmp", lpFilePart=0x0) returned 0x50 [0051.594] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\R6lD7xHD8T-ubO3-rd\\WlBenJ.bmp.xuy", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\R6lD7xHD8T-ubO3-rd\\WlBenJ.bmp.xuy", lpFilePart=0x0) returned 0x54 [0051.594] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0051.594] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\R6lD7xHD8T-ubO3-rd\\WlBenJ.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\hiwbt-r5mj llke0xho\\r6ld7xhd8t-ubo3-rd\\wlbenj.bmp"), fInfoLevelId=0x0, lpFileInformation=0x3be8a0 | out: lpFileInformation=0x3be8a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b199f30, ftCreationTime.dwHighDateTime=0x1d459dc, ftLastAccessTime.dwLowDateTime=0x6bab7a0, ftLastAccessTime.dwHighDateTime=0x1d45705, ftLastWriteTime.dwLowDateTime=0xa9a1fe5, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xb092)) returned 1 [0051.594] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0051.594] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\R6lD7xHD8T-ubO3-rd\\WlBenJ.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\hiwbt-r5mj llke0xho\\r6ld7xhd8t-ubo3-rd\\wlbenj.bmp"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\R6lD7xHD8T-ubO3-rd\\WlBenJ.bmp.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\hiwbt-r5mj llke0xho\\r6ld7xhd8t-ubo3-rd\\wlbenj.bmp.xuy")) returned 1 [0051.595] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\R6lD7xHD8T-ubO3-rd\\Z_MokPYp K.gif", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\R6lD7xHD8T-ubO3-rd\\Z_MokPYp K.gif", lpFilePart=0x0) returned 0x54 [0051.595] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0051.595] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\R6lD7xHD8T-ubO3-rd\\Z_MokPYp K.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\hiwbt-r5mj llke0xho\\r6ld7xhd8t-ubo3-rd\\z_mokpyp k.gif"), fInfoLevelId=0x0, lpFileInformation=0x22ac158 | out: lpFileInformation=0x22ac158*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743930b0, ftCreationTime.dwHighDateTime=0x1d464aa, ftLastAccessTime.dwLowDateTime=0x9aca9b30, ftLastAccessTime.dwHighDateTime=0x1d45cf1, ftLastWriteTime.dwLowDateTime=0x9aca9b30, ftLastWriteTime.dwHighDateTime=0x1d45cf1, nFileSizeHigh=0x0, nFileSizeLow=0xbcf7)) returned 1 [0051.595] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0051.595] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\R6lD7xHD8T-ubO3-rd\\Z_MokPYp K.gif", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\R6lD7xHD8T-ubO3-rd\\Z_MokPYp K.gif", lpFilePart=0x0) returned 0x54 [0051.596] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0051.596] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\R6lD7xHD8T-ubO3-rd\\Z_MokPYp K.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\hiwbt-r5mj llke0xho\\r6ld7xhd8t-ubo3-rd\\z_mokpyp k.gif"), fInfoLevelId=0x0, lpFileInformation=0x22ac2c0 | out: lpFileInformation=0x22ac2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743930b0, ftCreationTime.dwHighDateTime=0x1d464aa, ftLastAccessTime.dwLowDateTime=0x9aca9b30, ftLastAccessTime.dwHighDateTime=0x1d45cf1, ftLastWriteTime.dwLowDateTime=0x9aca9b30, ftLastWriteTime.dwHighDateTime=0x1d45cf1, nFileSizeHigh=0x0, nFileSizeLow=0xbcf7)) returned 1 [0051.596] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0051.596] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\R6lD7xHD8T-ubO3-rd\\Z_MokPYp K.gif", nBufferLength=0x105, lpBuffer=0x3be270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\R6lD7xHD8T-ubO3-rd\\Z_MokPYp K.gif", lpFilePart=0x0) returned 0x54 [0051.596] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0051.596] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\R6lD7xHD8T-ubO3-rd\\Z_MokPYp K.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\hiwbt-r5mj llke0xho\\r6ld7xhd8t-ubo3-rd\\z_mokpyp k.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0051.596] GetFileType (hFile=0x448) returned 0x1 [0051.596] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6c0) returned 1 [0051.596] GetFileType (hFile=0x448) returned 0x1 [0051.596] ReadFile (in: hFile=0x448, lpBuffer=0x22ae6c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be7d8, lpOverlapped=0x0 | out: lpBuffer=0x22ae6c0*, lpNumberOfBytesRead=0x3be7d8*=0x1000, lpOverlapped=0x0) returned 1 [0051.607] CloseHandle (hObject=0x448) returned 1 [0051.608] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\R6lD7xHD8T-ubO3-rd\\Z_MokPYp K.gif", nBufferLength=0x105, lpBuffer=0x3be270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\R6lD7xHD8T-ubO3-rd\\Z_MokPYp K.gif", lpFilePart=0x0) returned 0x54 [0051.608] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0051.608] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\R6lD7xHD8T-ubO3-rd\\Z_MokPYp K.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\hiwbt-r5mj llke0xho\\r6ld7xhd8t-ubo3-rd\\z_mokpyp k.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0051.608] GetFileType (hFile=0x448) returned 0x1 [0051.608] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6c0) returned 1 [0051.608] GetFileType (hFile=0x448) returned 0x1 [0051.608] WriteFile (in: hFile=0x448, lpBuffer=0x22ac408*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be888, lpOverlapped=0x0 | out: lpBuffer=0x22ac408*, lpNumberOfBytesWritten=0x3be888*=0x2000, lpOverlapped=0x0) returned 1 [0051.608] CloseHandle (hObject=0x448) returned 1 [0051.610] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\R6lD7xHD8T-ubO3-rd\\Z_MokPYp K.gif", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\R6lD7xHD8T-ubO3-rd\\Z_MokPYp K.gif", lpFilePart=0x0) returned 0x54 [0051.610] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\R6lD7xHD8T-ubO3-rd\\Z_MokPYp K.gif.xuy", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\R6lD7xHD8T-ubO3-rd\\Z_MokPYp K.gif.xuy", lpFilePart=0x0) returned 0x58 [0051.610] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0051.610] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\R6lD7xHD8T-ubO3-rd\\Z_MokPYp K.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\hiwbt-r5mj llke0xho\\r6ld7xhd8t-ubo3-rd\\z_mokpyp k.gif"), fInfoLevelId=0x0, lpFileInformation=0x3be8a0 | out: lpFileInformation=0x3be8a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743930b0, ftCreationTime.dwHighDateTime=0x1d464aa, ftLastAccessTime.dwLowDateTime=0x9aca9b30, ftLastAccessTime.dwHighDateTime=0x1d45cf1, ftLastWriteTime.dwLowDateTime=0xa9c831f, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xbcf7)) returned 1 [0051.610] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0051.610] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\R6lD7xHD8T-ubO3-rd\\Z_MokPYp K.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\hiwbt-r5mj llke0xho\\r6ld7xhd8t-ubo3-rd\\z_mokpyp k.gif"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\R6lD7xHD8T-ubO3-rd\\Z_MokPYp K.gif.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\hiwbt-r5mj llke0xho\\r6ld7xhd8t-ubo3-rd\\z_mokpyp k.gif.xuy")) returned 1 [0051.611] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0051.611] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\R6lD7xHD8T-ubO3-rd\\zz0GoIZI_KNNIh4a", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\R6lD7xHD8T-ubO3-rd\\zz0GoIZI_KNNIh4a", lpFilePart=0x0) returned 0x56 [0051.611] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\R6lD7xHD8T-ubO3-rd\\zz0GoIZI_KNNIh4a\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\R6lD7xHD8T-ubO3-rd\\zz0GoIZI_KNNIh4a\\", lpFilePart=0x0) returned 0x57 [0051.611] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\R6lD7xHD8T-ubO3-rd\\zz0GoIZI_KNNIh4a\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7af0 [0051.611] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0051.611] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0051.612] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0051.612] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0051.612] FindClose (in: hFindFile=0x5d7af0 | out: hFindFile=0x5d7af0) returned 1 [0051.612] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0051.612] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0051.612] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0051.612] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\R6lD7xHD8T-ubO3-rd\\zz0GoIZI_KNNIh4a", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\R6lD7xHD8T-ubO3-rd\\zz0GoIZI_KNNIh4a", lpFilePart=0x0) returned 0x56 [0051.612] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\R6lD7xHD8T-ubO3-rd\\zz0GoIZI_KNNIh4a\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\R6lD7xHD8T-ubO3-rd\\zz0GoIZI_KNNIh4a\\", lpFilePart=0x0) returned 0x57 [0051.612] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\R6lD7xHD8T-ubO3-rd\\zz0GoIZI_KNNIh4a\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d8090 [0051.612] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0051.612] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0051.613] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0051.613] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0051.613] FindClose (in: hFindFile=0x5d8090 | out: hFindFile=0x5d8090) returned 1 [0051.613] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0051.613] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0051.613] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\R6lD7xHD8T-ubO3-rd\\zz0GoIZI_KNNIh4a\\gVhnkpA.bmp", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\R6lD7xHD8T-ubO3-rd\\zz0GoIZI_KNNIh4a\\gVhnkpA.bmp", lpFilePart=0x0) returned 0x62 [0051.613] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0051.613] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\R6lD7xHD8T-ubO3-rd\\zz0GoIZI_KNNIh4a\\gVhnkpA.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\hiwbt-r5mj llke0xho\\r6ld7xhd8t-ubo3-rd\\zz0goizi_knnih4a\\gvhnkpa.bmp"), fInfoLevelId=0x0, lpFileInformation=0x232d350 | out: lpFileInformation=0x232d350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47745b10, ftCreationTime.dwHighDateTime=0x1d4562a, ftLastAccessTime.dwLowDateTime=0x35d15310, ftLastAccessTime.dwHighDateTime=0x1d455fb, ftLastWriteTime.dwLowDateTime=0x35d15310, ftLastWriteTime.dwHighDateTime=0x1d455fb, nFileSizeHigh=0x0, nFileSizeLow=0x1324)) returned 1 [0051.613] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0051.613] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\R6lD7xHD8T-ubO3-rd\\zz0GoIZI_KNNIh4a\\gVhnkpA.bmp", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\R6lD7xHD8T-ubO3-rd\\zz0GoIZI_KNNIh4a\\gVhnkpA.bmp", lpFilePart=0x0) returned 0x62 [0051.613] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0051.613] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\R6lD7xHD8T-ubO3-rd\\zz0GoIZI_KNNIh4a\\gVhnkpA.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\hiwbt-r5mj llke0xho\\r6ld7xhd8t-ubo3-rd\\zz0goizi_knnih4a\\gvhnkpa.bmp"), fInfoLevelId=0x0, lpFileInformation=0x232d4c8 | out: lpFileInformation=0x232d4c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47745b10, ftCreationTime.dwHighDateTime=0x1d4562a, ftLastAccessTime.dwLowDateTime=0x35d15310, ftLastAccessTime.dwHighDateTime=0x1d455fb, ftLastWriteTime.dwLowDateTime=0x35d15310, ftLastWriteTime.dwHighDateTime=0x1d455fb, nFileSizeHigh=0x0, nFileSizeLow=0x1324)) returned 1 [0051.613] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0051.614] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\R6lD7xHD8T-ubO3-rd\\zz0GoIZI_KNNIh4a\\gVhnkpA.bmp", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\R6lD7xHD8T-ubO3-rd\\zz0GoIZI_KNNIh4a\\gVhnkpA.bmp", lpFilePart=0x0) returned 0x62 [0051.614] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0051.614] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\R6lD7xHD8T-ubO3-rd\\zz0GoIZI_KNNIh4a\\gVhnkpA.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\hiwbt-r5mj llke0xho\\r6ld7xhd8t-ubo3-rd\\zz0goizi_knnih4a\\gvhnkpa.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0051.614] GetFileType (hFile=0x448) returned 0x1 [0051.614] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0051.614] GetFileType (hFile=0x448) returned 0x1 [0051.614] ReadFile (in: hFile=0x448, lpBuffer=0x232f8e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x232f8e8*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0051.655] CloseHandle (hObject=0x448) returned 1 [0051.655] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\R6lD7xHD8T-ubO3-rd\\zz0GoIZI_KNNIh4a\\gVhnkpA.bmp", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\R6lD7xHD8T-ubO3-rd\\zz0GoIZI_KNNIh4a\\gVhnkpA.bmp", lpFilePart=0x0) returned 0x62 [0051.655] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0051.655] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\R6lD7xHD8T-ubO3-rd\\zz0GoIZI_KNNIh4a\\gVhnkpA.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\hiwbt-r5mj llke0xho\\r6ld7xhd8t-ubo3-rd\\zz0goizi_knnih4a\\gvhnkpa.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0051.656] GetFileType (hFile=0x448) returned 0x1 [0051.656] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0051.656] GetFileType (hFile=0x448) returned 0x1 [0051.656] WriteFile (in: hFile=0x448, lpBuffer=0x2155208*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x2155208*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0051.656] CloseHandle (hObject=0x448) returned 1 [0051.657] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\R6lD7xHD8T-ubO3-rd\\zz0GoIZI_KNNIh4a\\gVhnkpA.bmp", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\R6lD7xHD8T-ubO3-rd\\zz0GoIZI_KNNIh4a\\gVhnkpA.bmp", lpFilePart=0x0) returned 0x62 [0051.657] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\R6lD7xHD8T-ubO3-rd\\zz0GoIZI_KNNIh4a\\gVhnkpA.bmp.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\R6lD7xHD8T-ubO3-rd\\zz0GoIZI_KNNIh4a\\gVhnkpA.bmp.xuy", lpFilePart=0x0) returned 0x66 [0051.657] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0051.657] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\R6lD7xHD8T-ubO3-rd\\zz0GoIZI_KNNIh4a\\gVhnkpA.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\hiwbt-r5mj llke0xho\\r6ld7xhd8t-ubo3-rd\\zz0goizi_knnih4a\\gvhnkpa.bmp"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47745b10, ftCreationTime.dwHighDateTime=0x1d4562a, ftLastAccessTime.dwLowDateTime=0x35d15310, ftLastAccessTime.dwHighDateTime=0x1d455fb, ftLastWriteTime.dwLowDateTime=0xaa3a94d, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0051.657] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0051.657] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\R6lD7xHD8T-ubO3-rd\\zz0GoIZI_KNNIh4a\\gVhnkpA.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\hiwbt-r5mj llke0xho\\r6ld7xhd8t-ubo3-rd\\zz0goizi_knnih4a\\gvhnkpa.bmp"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\R6lD7xHD8T-ubO3-rd\\zz0GoIZI_KNNIh4a\\gVhnkpA.bmp.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\hiwbt-r5mj llke0xho\\r6ld7xhd8t-ubo3-rd\\zz0goizi_knnih4a\\gvhnkpa.bmp.xuy")) returned 1 [0051.658] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\R6lD7xHD8T-ubO3-rd\\zz0GoIZI_KNNIh4a\\vRQ5tUuEKHqkKPnnz.jpg", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\R6lD7xHD8T-ubO3-rd\\zz0GoIZI_KNNIh4a\\vRQ5tUuEKHqkKPnnz.jpg", lpFilePart=0x0) returned 0x6c [0051.658] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0051.658] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\R6lD7xHD8T-ubO3-rd\\zz0GoIZI_KNNIh4a\\vRQ5tUuEKHqkKPnnz.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\hiwbt-r5mj llke0xho\\r6ld7xhd8t-ubo3-rd\\zz0goizi_knnih4a\\vrq5tuuekhqkkpnnz.jpg"), fInfoLevelId=0x0, lpFileInformation=0x21abbe8 | out: lpFileInformation=0x21abbe8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76f84e00, ftCreationTime.dwHighDateTime=0x1d459a4, ftLastAccessTime.dwLowDateTime=0x353488c0, ftLastAccessTime.dwHighDateTime=0x1d4622e, ftLastWriteTime.dwLowDateTime=0x353488c0, ftLastWriteTime.dwHighDateTime=0x1d4622e, nFileSizeHigh=0x0, nFileSizeLow=0x8375)) returned 1 [0051.658] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0051.658] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\R6lD7xHD8T-ubO3-rd\\zz0GoIZI_KNNIh4a\\vRQ5tUuEKHqkKPnnz.jpg", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\R6lD7xHD8T-ubO3-rd\\zz0GoIZI_KNNIh4a\\vRQ5tUuEKHqkKPnnz.jpg", lpFilePart=0x0) returned 0x6c [0051.658] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0051.658] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\R6lD7xHD8T-ubO3-rd\\zz0GoIZI_KNNIh4a\\vRQ5tUuEKHqkKPnnz.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\hiwbt-r5mj llke0xho\\r6ld7xhd8t-ubo3-rd\\zz0goizi_knnih4a\\vrq5tuuekhqkkpnnz.jpg"), fInfoLevelId=0x0, lpFileInformation=0x21abd90 | out: lpFileInformation=0x21abd90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76f84e00, ftCreationTime.dwHighDateTime=0x1d459a4, ftLastAccessTime.dwLowDateTime=0x353488c0, ftLastAccessTime.dwHighDateTime=0x1d4622e, ftLastWriteTime.dwLowDateTime=0x353488c0, ftLastWriteTime.dwHighDateTime=0x1d4622e, nFileSizeHigh=0x0, nFileSizeLow=0x8375)) returned 1 [0051.658] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0051.658] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\R6lD7xHD8T-ubO3-rd\\zz0GoIZI_KNNIh4a\\vRQ5tUuEKHqkKPnnz.jpg", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\R6lD7xHD8T-ubO3-rd\\zz0GoIZI_KNNIh4a\\vRQ5tUuEKHqkKPnnz.jpg", lpFilePart=0x0) returned 0x6c [0051.658] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0051.658] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\R6lD7xHD8T-ubO3-rd\\zz0GoIZI_KNNIh4a\\vRQ5tUuEKHqkKPnnz.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\hiwbt-r5mj llke0xho\\r6ld7xhd8t-ubo3-rd\\zz0goizi_knnih4a\\vrq5tuuekhqkkpnnz.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0051.659] GetFileType (hFile=0x448) returned 0x1 [0051.659] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0051.659] GetFileType (hFile=0x448) returned 0x1 [0051.659] ReadFile (in: hFile=0x448, lpBuffer=0x21ae210, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x21ae210*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0051.672] CloseHandle (hObject=0x448) returned 1 [0051.672] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\R6lD7xHD8T-ubO3-rd\\zz0GoIZI_KNNIh4a\\vRQ5tUuEKHqkKPnnz.jpg", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\R6lD7xHD8T-ubO3-rd\\zz0GoIZI_KNNIh4a\\vRQ5tUuEKHqkKPnnz.jpg", lpFilePart=0x0) returned 0x6c [0051.672] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0051.672] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\R6lD7xHD8T-ubO3-rd\\zz0GoIZI_KNNIh4a\\vRQ5tUuEKHqkKPnnz.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\hiwbt-r5mj llke0xho\\r6ld7xhd8t-ubo3-rd\\zz0goizi_knnih4a\\vrq5tuuekhqkkpnnz.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0051.672] GetFileType (hFile=0x448) returned 0x1 [0051.672] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0051.673] GetFileType (hFile=0x448) returned 0x1 [0051.673] WriteFile (in: hFile=0x448, lpBuffer=0x21abf18*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x21abf18*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0051.673] CloseHandle (hObject=0x448) returned 1 [0051.674] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\R6lD7xHD8T-ubO3-rd\\zz0GoIZI_KNNIh4a\\vRQ5tUuEKHqkKPnnz.jpg", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\R6lD7xHD8T-ubO3-rd\\zz0GoIZI_KNNIh4a\\vRQ5tUuEKHqkKPnnz.jpg", lpFilePart=0x0) returned 0x6c [0051.674] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\R6lD7xHD8T-ubO3-rd\\zz0GoIZI_KNNIh4a\\vRQ5tUuEKHqkKPnnz.jpg.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\R6lD7xHD8T-ubO3-rd\\zz0GoIZI_KNNIh4a\\vRQ5tUuEKHqkKPnnz.jpg.xuy", lpFilePart=0x0) returned 0x70 [0051.674] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0051.674] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\R6lD7xHD8T-ubO3-rd\\zz0GoIZI_KNNIh4a\\vRQ5tUuEKHqkKPnnz.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\hiwbt-r5mj llke0xho\\r6ld7xhd8t-ubo3-rd\\zz0goizi_knnih4a\\vrq5tuuekhqkkpnnz.jpg"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76f84e00, ftCreationTime.dwHighDateTime=0x1d459a4, ftLastAccessTime.dwLowDateTime=0x353488c0, ftLastAccessTime.dwHighDateTime=0x1d4622e, ftLastWriteTime.dwLowDateTime=0xaa60bd2, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x8375)) returned 1 [0051.674] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0051.674] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\R6lD7xHD8T-ubO3-rd\\zz0GoIZI_KNNIh4a\\vRQ5tUuEKHqkKPnnz.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\hiwbt-r5mj llke0xho\\r6ld7xhd8t-ubo3-rd\\zz0goizi_knnih4a\\vrq5tuuekhqkkpnnz.jpg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\R6lD7xHD8T-ubO3-rd\\zz0GoIZI_KNNIh4a\\vRQ5tUuEKHqkKPnnz.jpg.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\hiwbt-r5mj llke0xho\\r6ld7xhd8t-ubo3-rd\\zz0goizi_knnih4a\\vrq5tuuekhqkkpnnz.jpg.xuy")) returned 1 [0051.675] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0051.675] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\sYRXyP3UmUCc7I mkd_", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\sYRXyP3UmUCc7I mkd_", lpFilePart=0x0) returned 0x46 [0051.675] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\sYRXyP3UmUCc7I mkd_\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\sYRXyP3UmUCc7I mkd_\\", lpFilePart=0x0) returned 0x47 [0051.675] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\sYRXyP3UmUCc7I mkd_\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d7670 [0051.675] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0051.676] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0051.676] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0051.676] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0051.676] FindClose (in: hFindFile=0x5d7670 | out: hFindFile=0x5d7670) returned 1 [0051.676] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0051.676] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0051.676] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0051.676] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\sYRXyP3UmUCc7I mkd_", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\sYRXyP3UmUCc7I mkd_", lpFilePart=0x0) returned 0x46 [0051.676] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\sYRXyP3UmUCc7I mkd_\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\sYRXyP3UmUCc7I mkd_\\", lpFilePart=0x0) returned 0x47 [0051.676] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\sYRXyP3UmUCc7I mkd_\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d7a30 [0051.676] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0051.677] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0051.677] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0051.677] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0051.677] FindClose (in: hFindFile=0x5d7a30 | out: hFindFile=0x5d7a30) returned 1 [0051.677] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0051.677] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0051.677] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\sYRXyP3UmUCc7I mkd_\\NJULNohQzh.gif", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\sYRXyP3UmUCc7I mkd_\\NJULNohQzh.gif", lpFilePart=0x0) returned 0x55 [0051.677] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0051.677] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\sYRXyP3UmUCc7I mkd_\\NJULNohQzh.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\hiwbt-r5mj llke0xho\\syrxyp3umucc7i mkd_\\njulnohqzh.gif"), fInfoLevelId=0x0, lpFileInformation=0x222cb60 | out: lpFileInformation=0x222cb60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e287110, ftCreationTime.dwHighDateTime=0x1d45d7f, ftLastAccessTime.dwLowDateTime=0x2ea57890, ftLastAccessTime.dwHighDateTime=0x1d464ed, ftLastWriteTime.dwLowDateTime=0x2ea57890, ftLastWriteTime.dwHighDateTime=0x1d464ed, nFileSizeHigh=0x0, nFileSizeLow=0xb42f)) returned 1 [0051.677] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0051.677] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\sYRXyP3UmUCc7I mkd_\\NJULNohQzh.gif", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\sYRXyP3UmUCc7I mkd_\\NJULNohQzh.gif", lpFilePart=0x0) returned 0x55 [0051.677] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0051.677] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\sYRXyP3UmUCc7I mkd_\\NJULNohQzh.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\hiwbt-r5mj llke0xho\\syrxyp3umucc7i mkd_\\njulnohqzh.gif"), fInfoLevelId=0x0, lpFileInformation=0x222ccc8 | out: lpFileInformation=0x222ccc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e287110, ftCreationTime.dwHighDateTime=0x1d45d7f, ftLastAccessTime.dwLowDateTime=0x2ea57890, ftLastAccessTime.dwHighDateTime=0x1d464ed, ftLastWriteTime.dwLowDateTime=0x2ea57890, ftLastWriteTime.dwHighDateTime=0x1d464ed, nFileSizeHigh=0x0, nFileSizeLow=0xb42f)) returned 1 [0051.678] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0051.678] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\sYRXyP3UmUCc7I mkd_\\NJULNohQzh.gif", nBufferLength=0x105, lpBuffer=0x3be270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\sYRXyP3UmUCc7I mkd_\\NJULNohQzh.gif", lpFilePart=0x0) returned 0x55 [0051.678] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0051.678] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\sYRXyP3UmUCc7I mkd_\\NJULNohQzh.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\hiwbt-r5mj llke0xho\\syrxyp3umucc7i mkd_\\njulnohqzh.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0051.678] GetFileType (hFile=0x448) returned 0x1 [0051.678] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6c0) returned 1 [0051.678] GetFileType (hFile=0x448) returned 0x1 [0051.678] ReadFile (in: hFile=0x448, lpBuffer=0x222f0c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be7d8, lpOverlapped=0x0 | out: lpBuffer=0x222f0c8*, lpNumberOfBytesRead=0x3be7d8*=0x1000, lpOverlapped=0x0) returned 1 [0051.786] CloseHandle (hObject=0x448) returned 1 [0051.786] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\sYRXyP3UmUCc7I mkd_\\NJULNohQzh.gif", nBufferLength=0x105, lpBuffer=0x3be270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\sYRXyP3UmUCc7I mkd_\\NJULNohQzh.gif", lpFilePart=0x0) returned 0x55 [0051.786] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0051.786] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\sYRXyP3UmUCc7I mkd_\\NJULNohQzh.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\hiwbt-r5mj llke0xho\\syrxyp3umucc7i mkd_\\njulnohqzh.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0051.786] GetFileType (hFile=0x448) returned 0x1 [0051.786] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6c0) returned 1 [0051.786] GetFileType (hFile=0x448) returned 0x1 [0051.786] WriteFile (in: hFile=0x448, lpBuffer=0x222ce10*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be888, lpOverlapped=0x0 | out: lpBuffer=0x222ce10*, lpNumberOfBytesWritten=0x3be888*=0x2000, lpOverlapped=0x0) returned 1 [0051.787] CloseHandle (hObject=0x448) returned 1 [0051.788] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\sYRXyP3UmUCc7I mkd_\\NJULNohQzh.gif", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\sYRXyP3UmUCc7I mkd_\\NJULNohQzh.gif", lpFilePart=0x0) returned 0x55 [0051.788] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\sYRXyP3UmUCc7I mkd_\\NJULNohQzh.gif.xuy", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\sYRXyP3UmUCc7I mkd_\\NJULNohQzh.gif.xuy", lpFilePart=0x0) returned 0x59 [0051.788] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0051.789] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\sYRXyP3UmUCc7I mkd_\\NJULNohQzh.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\hiwbt-r5mj llke0xho\\syrxyp3umucc7i mkd_\\njulnohqzh.gif"), fInfoLevelId=0x0, lpFileInformation=0x3be8a0 | out: lpFileInformation=0x3be8a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e287110, ftCreationTime.dwHighDateTime=0x1d45d7f, ftLastAccessTime.dwLowDateTime=0x2ea57890, ftLastAccessTime.dwHighDateTime=0x1d464ed, ftLastWriteTime.dwLowDateTime=0xab6bc90, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xb42f)) returned 1 [0051.789] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0051.789] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\sYRXyP3UmUCc7I mkd_\\NJULNohQzh.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\hiwbt-r5mj llke0xho\\syrxyp3umucc7i mkd_\\njulnohqzh.gif"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\sYRXyP3UmUCc7I mkd_\\NJULNohQzh.gif.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\hiwbt-r5mj llke0xho\\syrxyp3umucc7i mkd_\\njulnohqzh.gif.xuy")) returned 1 [0051.789] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\sYRXyP3UmUCc7I mkd_\\xvc5X_EuKq.gif", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\sYRXyP3UmUCc7I mkd_\\xvc5X_EuKq.gif", lpFilePart=0x0) returned 0x55 [0051.790] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0051.790] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\sYRXyP3UmUCc7I mkd_\\xvc5X_EuKq.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\hiwbt-r5mj llke0xho\\syrxyp3umucc7i mkd_\\xvc5x_eukq.gif"), fInfoLevelId=0x0, lpFileInformation=0x22ab4e0 | out: lpFileInformation=0x22ab4e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfac88210, ftCreationTime.dwHighDateTime=0x1d45e0c, ftLastAccessTime.dwLowDateTime=0x3fa9a780, ftLastAccessTime.dwHighDateTime=0x1d458f2, ftLastWriteTime.dwLowDateTime=0x3fa9a780, ftLastWriteTime.dwHighDateTime=0x1d458f2, nFileSizeHigh=0x0, nFileSizeLow=0x26d3)) returned 1 [0051.790] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0051.790] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\sYRXyP3UmUCc7I mkd_\\xvc5X_EuKq.gif", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\sYRXyP3UmUCc7I mkd_\\xvc5X_EuKq.gif", lpFilePart=0x0) returned 0x55 [0051.790] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0051.790] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\sYRXyP3UmUCc7I mkd_\\xvc5X_EuKq.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\hiwbt-r5mj llke0xho\\syrxyp3umucc7i mkd_\\xvc5x_eukq.gif"), fInfoLevelId=0x0, lpFileInformation=0x22ab648 | out: lpFileInformation=0x22ab648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfac88210, ftCreationTime.dwHighDateTime=0x1d45e0c, ftLastAccessTime.dwLowDateTime=0x3fa9a780, ftLastAccessTime.dwHighDateTime=0x1d458f2, ftLastWriteTime.dwLowDateTime=0x3fa9a780, ftLastWriteTime.dwHighDateTime=0x1d458f2, nFileSizeHigh=0x0, nFileSizeLow=0x26d3)) returned 1 [0051.790] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0051.790] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\sYRXyP3UmUCc7I mkd_\\xvc5X_EuKq.gif", nBufferLength=0x105, lpBuffer=0x3be270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\sYRXyP3UmUCc7I mkd_\\xvc5X_EuKq.gif", lpFilePart=0x0) returned 0x55 [0051.790] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0051.790] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\sYRXyP3UmUCc7I mkd_\\xvc5X_EuKq.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\hiwbt-r5mj llke0xho\\syrxyp3umucc7i mkd_\\xvc5x_eukq.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0051.790] GetFileType (hFile=0x448) returned 0x1 [0051.790] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6c0) returned 1 [0051.790] GetFileType (hFile=0x448) returned 0x1 [0051.791] ReadFile (in: hFile=0x448, lpBuffer=0x22ada48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be7d8, lpOverlapped=0x0 | out: lpBuffer=0x22ada48*, lpNumberOfBytesRead=0x3be7d8*=0x1000, lpOverlapped=0x0) returned 1 [0051.866] CloseHandle (hObject=0x448) returned 1 [0051.866] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\sYRXyP3UmUCc7I mkd_\\xvc5X_EuKq.gif", nBufferLength=0x105, lpBuffer=0x3be270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\sYRXyP3UmUCc7I mkd_\\xvc5X_EuKq.gif", lpFilePart=0x0) returned 0x55 [0051.866] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0051.866] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\sYRXyP3UmUCc7I mkd_\\xvc5X_EuKq.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\hiwbt-r5mj llke0xho\\syrxyp3umucc7i mkd_\\xvc5x_eukq.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0051.867] GetFileType (hFile=0x448) returned 0x1 [0051.867] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6c0) returned 1 [0051.867] GetFileType (hFile=0x448) returned 0x1 [0051.867] WriteFile (in: hFile=0x448, lpBuffer=0x22ab790*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be888, lpOverlapped=0x0 | out: lpBuffer=0x22ab790*, lpNumberOfBytesWritten=0x3be888*=0x2000, lpOverlapped=0x0) returned 1 [0051.867] CloseHandle (hObject=0x448) returned 1 [0051.868] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\sYRXyP3UmUCc7I mkd_\\xvc5X_EuKq.gif", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\sYRXyP3UmUCc7I mkd_\\xvc5X_EuKq.gif", lpFilePart=0x0) returned 0x55 [0051.868] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\sYRXyP3UmUCc7I mkd_\\xvc5X_EuKq.gif.xuy", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\sYRXyP3UmUCc7I mkd_\\xvc5X_EuKq.gif.xuy", lpFilePart=0x0) returned 0x59 [0051.868] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0051.868] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\sYRXyP3UmUCc7I mkd_\\xvc5X_EuKq.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\hiwbt-r5mj llke0xho\\syrxyp3umucc7i mkd_\\xvc5x_eukq.gif"), fInfoLevelId=0x0, lpFileInformation=0x3be8a0 | out: lpFileInformation=0x3be8a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfac88210, ftCreationTime.dwHighDateTime=0x1d45e0c, ftLastAccessTime.dwLowDateTime=0x3fa9a780, ftLastAccessTime.dwHighDateTime=0x1d458f2, ftLastWriteTime.dwLowDateTime=0xac2ad88, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x26d3)) returned 1 [0051.868] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0051.868] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\sYRXyP3UmUCc7I mkd_\\xvc5X_EuKq.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\hiwbt-r5mj llke0xho\\syrxyp3umucc7i mkd_\\xvc5x_eukq.gif"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\hIWbt-R5mJ Llke0xho\\sYRXyP3UmUCc7I mkd_\\xvc5X_EuKq.gif.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\hiwbt-r5mj llke0xho\\syrxyp3umucc7i mkd_\\xvc5x_eukq.gif.xuy")) returned 1 [0051.869] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0051.869] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\LzxPE9bRZsj0N", nBufferLength=0x105, lpBuffer=0x3be3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\LzxPE9bRZsj0N", lpFilePart=0x0) returned 0x2c [0051.869] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\LzxPE9bRZsj0N\\", nBufferLength=0x105, lpBuffer=0x3be370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\LzxPE9bRZsj0N\\", lpFilePart=0x0) returned 0x2d [0051.869] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\LzxPE9bRZsj0N\\*", lpFindFileData=0x3be580 | out: lpFindFileData=0x3be580) returned 0x5d75b0 [0051.870] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0051.870] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0051.870] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0051.870] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0051.870] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0051.870] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 0 [0051.871] FindClose (in: hFindFile=0x5d75b0 | out: hFindFile=0x5d75b0) returned 1 [0051.871] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0051.871] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7f0) returned 1 [0051.871] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0051.871] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\LzxPE9bRZsj0N", nBufferLength=0x105, lpBuffer=0x3be3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\LzxPE9bRZsj0N", lpFilePart=0x0) returned 0x2c [0051.871] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\LzxPE9bRZsj0N\\", nBufferLength=0x105, lpBuffer=0x3be370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\LzxPE9bRZsj0N\\", lpFilePart=0x0) returned 0x2d [0051.871] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\LzxPE9bRZsj0N\\*", lpFindFileData=0x3be580 | out: lpFindFileData=0x3be580) returned 0x5d7550 [0051.872] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0051.872] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0051.872] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0051.872] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0051.872] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0051.872] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 0 [0051.872] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0051.873] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0051.873] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7f0) returned 1 [0051.873] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\LzxPE9bRZsj0N\\JJSZ6n05wI.png", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\LzxPE9bRZsj0N\\JJSZ6n05wI.png", lpFilePart=0x0) returned 0x3b [0051.873] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0051.873] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\LzxPE9bRZsj0N\\JJSZ6n05wI.png" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\lzxpe9brzsj0n\\jjsz6n05wi.png"), fInfoLevelId=0x0, lpFileInformation=0x232c280 | out: lpFileInformation=0x232c280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9c9a6e0, ftCreationTime.dwHighDateTime=0x1d45b60, ftLastAccessTime.dwLowDateTime=0xf4138bd0, ftLastAccessTime.dwHighDateTime=0x1d45c14, ftLastWriteTime.dwLowDateTime=0xf4138bd0, ftLastWriteTime.dwHighDateTime=0x1d45c14, nFileSizeHigh=0x0, nFileSizeLow=0x27bc)) returned 1 [0051.873] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0051.873] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\LzxPE9bRZsj0N\\JJSZ6n05wI.png", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\LzxPE9bRZsj0N\\JJSZ6n05wI.png", lpFilePart=0x0) returned 0x3b [0051.873] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0051.873] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\LzxPE9bRZsj0N\\JJSZ6n05wI.png" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\lzxpe9brzsj0n\\jjsz6n05wi.png"), fInfoLevelId=0x0, lpFileInformation=0x232c3b0 | out: lpFileInformation=0x232c3b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9c9a6e0, ftCreationTime.dwHighDateTime=0x1d45b60, ftLastAccessTime.dwLowDateTime=0xf4138bd0, ftLastAccessTime.dwHighDateTime=0x1d45c14, ftLastWriteTime.dwLowDateTime=0xf4138bd0, ftLastWriteTime.dwHighDateTime=0x1d45c14, nFileSizeHigh=0x0, nFileSizeLow=0x27bc)) returned 1 [0051.873] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0051.873] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\LzxPE9bRZsj0N\\JJSZ6n05wI.png", nBufferLength=0x105, lpBuffer=0x3be2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\LzxPE9bRZsj0N\\JJSZ6n05wI.png", lpFilePart=0x0) returned 0x3b [0051.873] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0051.873] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\LzxPE9bRZsj0N\\JJSZ6n05wI.png" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\lzxpe9brzsj0n\\jjsz6n05wi.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0051.874] GetFileType (hFile=0x448) returned 0x1 [0051.874] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be730) returned 1 [0051.874] GetFileType (hFile=0x448) returned 0x1 [0051.874] ReadFile (in: hFile=0x448, lpBuffer=0x232e740, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be848, lpOverlapped=0x0 | out: lpBuffer=0x232e740*, lpNumberOfBytesRead=0x3be848*=0x1000, lpOverlapped=0x0) returned 1 [0051.926] CloseHandle (hObject=0x448) returned 1 [0051.926] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\LzxPE9bRZsj0N\\JJSZ6n05wI.png", nBufferLength=0x105, lpBuffer=0x3be2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\LzxPE9bRZsj0N\\JJSZ6n05wI.png", lpFilePart=0x0) returned 0x3b [0051.926] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0051.926] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\LzxPE9bRZsj0N\\JJSZ6n05wI.png" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\lzxpe9brzsj0n\\jjsz6n05wi.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0051.927] GetFileType (hFile=0x448) returned 0x1 [0051.927] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be730) returned 1 [0051.927] GetFileType (hFile=0x448) returned 0x1 [0051.927] WriteFile (in: hFile=0x448, lpBuffer=0x2154eb8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be8f8, lpOverlapped=0x0 | out: lpBuffer=0x2154eb8*, lpNumberOfBytesWritten=0x3be8f8*=0x2000, lpOverlapped=0x0) returned 1 [0051.927] CloseHandle (hObject=0x448) returned 1 [0051.928] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\LzxPE9bRZsj0N\\JJSZ6n05wI.png", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\LzxPE9bRZsj0N\\JJSZ6n05wI.png", lpFilePart=0x0) returned 0x3b [0051.928] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\LzxPE9bRZsj0N\\JJSZ6n05wI.png.xuy", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\LzxPE9bRZsj0N\\JJSZ6n05wI.png.xuy", lpFilePart=0x0) returned 0x3f [0051.928] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0051.928] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\LzxPE9bRZsj0N\\JJSZ6n05wI.png" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\lzxpe9brzsj0n\\jjsz6n05wi.png"), fInfoLevelId=0x0, lpFileInformation=0x3be910 | out: lpFileInformation=0x3be910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9c9a6e0, ftCreationTime.dwHighDateTime=0x1d45b60, ftLastAccessTime.dwLowDateTime=0xf4138bd0, ftLastAccessTime.dwHighDateTime=0x1d45c14, ftLastWriteTime.dwLowDateTime=0xacc310c, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x27bc)) returned 1 [0051.928] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7f0) returned 1 [0051.928] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\LzxPE9bRZsj0N\\JJSZ6n05wI.png" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\lzxpe9brzsj0n\\jjsz6n05wi.png"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\LzxPE9bRZsj0N\\JJSZ6n05wI.png.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\lzxpe9brzsj0n\\jjsz6n05wi.png.xuy")) returned 1 [0051.929] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\LzxPE9bRZsj0N\\QlEnlER.jpg", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\LzxPE9bRZsj0N\\QlEnlER.jpg", lpFilePart=0x0) returned 0x38 [0051.929] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0051.929] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\LzxPE9bRZsj0N\\QlEnlER.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\lzxpe9brzsj0n\\qlenler.jpg"), fInfoLevelId=0x0, lpFileInformation=0x21aa720 | out: lpFileInformation=0x21aa720*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31d72540, ftCreationTime.dwHighDateTime=0x1d46605, ftLastAccessTime.dwLowDateTime=0xff979140, ftLastAccessTime.dwHighDateTime=0x1d457b4, ftLastWriteTime.dwLowDateTime=0xff979140, ftLastWriteTime.dwHighDateTime=0x1d457b4, nFileSizeHigh=0x0, nFileSizeLow=0x1494c)) returned 1 [0051.929] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0051.929] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\LzxPE9bRZsj0N\\QlEnlER.jpg", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\LzxPE9bRZsj0N\\QlEnlER.jpg", lpFilePart=0x0) returned 0x38 [0051.929] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0051.929] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\LzxPE9bRZsj0N\\QlEnlER.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\lzxpe9brzsj0n\\qlenler.jpg"), fInfoLevelId=0x0, lpFileInformation=0x21aa848 | out: lpFileInformation=0x21aa848*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31d72540, ftCreationTime.dwHighDateTime=0x1d46605, ftLastAccessTime.dwLowDateTime=0xff979140, ftLastAccessTime.dwHighDateTime=0x1d457b4, ftLastWriteTime.dwLowDateTime=0xff979140, ftLastWriteTime.dwHighDateTime=0x1d457b4, nFileSizeHigh=0x0, nFileSizeLow=0x1494c)) returned 1 [0051.929] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0051.929] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\LzxPE9bRZsj0N\\QlEnlER.jpg", nBufferLength=0x105, lpBuffer=0x3be2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\LzxPE9bRZsj0N\\QlEnlER.jpg", lpFilePart=0x0) returned 0x38 [0051.930] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0051.930] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\LzxPE9bRZsj0N\\QlEnlER.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\lzxpe9brzsj0n\\qlenler.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0051.930] GetFileType (hFile=0x448) returned 0x1 [0051.930] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be730) returned 1 [0051.930] GetFileType (hFile=0x448) returned 0x1 [0051.930] ReadFile (in: hFile=0x448, lpBuffer=0x21acbc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be848, lpOverlapped=0x0 | out: lpBuffer=0x21acbc8*, lpNumberOfBytesRead=0x3be848*=0x1000, lpOverlapped=0x0) returned 1 [0051.946] CloseHandle (hObject=0x448) returned 1 [0051.946] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\LzxPE9bRZsj0N\\QlEnlER.jpg", nBufferLength=0x105, lpBuffer=0x3be2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\LzxPE9bRZsj0N\\QlEnlER.jpg", lpFilePart=0x0) returned 0x38 [0051.947] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0051.947] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\LzxPE9bRZsj0N\\QlEnlER.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\lzxpe9brzsj0n\\qlenler.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0051.947] GetFileType (hFile=0x448) returned 0x1 [0051.947] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be730) returned 1 [0051.947] GetFileType (hFile=0x448) returned 0x1 [0051.947] WriteFile (in: hFile=0x448, lpBuffer=0x21aa950*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be8f8, lpOverlapped=0x0 | out: lpBuffer=0x21aa950*, lpNumberOfBytesWritten=0x3be8f8*=0x2000, lpOverlapped=0x0) returned 1 [0051.947] CloseHandle (hObject=0x448) returned 1 [0051.950] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\LzxPE9bRZsj0N\\QlEnlER.jpg", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\LzxPE9bRZsj0N\\QlEnlER.jpg", lpFilePart=0x0) returned 0x38 [0051.951] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\LzxPE9bRZsj0N\\QlEnlER.jpg.xuy", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\LzxPE9bRZsj0N\\QlEnlER.jpg.xuy", lpFilePart=0x0) returned 0x3c [0051.951] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0051.951] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\LzxPE9bRZsj0N\\QlEnlER.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\lzxpe9brzsj0n\\qlenler.jpg"), fInfoLevelId=0x0, lpFileInformation=0x3be910 | out: lpFileInformation=0x3be910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31d72540, ftCreationTime.dwHighDateTime=0x1d46605, ftLastAccessTime.dwLowDateTime=0xff979140, ftLastAccessTime.dwHighDateTime=0x1d457b4, ftLastWriteTime.dwLowDateTime=0xad1002d, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x1494c)) returned 1 [0051.951] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7f0) returned 1 [0051.951] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\LzxPE9bRZsj0N\\QlEnlER.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\lzxpe9brzsj0n\\qlenler.jpg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\LzxPE9bRZsj0N\\QlEnlER.jpg.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\lzxpe9brzsj0n\\qlenler.jpg.xuy")) returned 1 [0051.951] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\LzxPE9bRZsj0N\\Zyo85Jd4gSHjAVsjV.gif", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\LzxPE9bRZsj0N\\Zyo85Jd4gSHjAVsjV.gif", lpFilePart=0x0) returned 0x42 [0051.951] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0051.952] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\LzxPE9bRZsj0N\\Zyo85Jd4gSHjAVsjV.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\lzxpe9brzsj0n\\zyo85jd4gshjavsjv.gif"), fInfoLevelId=0x0, lpFileInformation=0x2228ef8 | out: lpFileInformation=0x2228ef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd25bac0, ftCreationTime.dwHighDateTime=0x1d45ad1, ftLastAccessTime.dwLowDateTime=0x8c2aca40, ftLastAccessTime.dwHighDateTime=0x1d45ef5, ftLastWriteTime.dwLowDateTime=0x8c2aca40, ftLastWriteTime.dwHighDateTime=0x1d45ef5, nFileSizeHigh=0x0, nFileSizeLow=0x11ce0)) returned 1 [0051.952] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0051.952] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\LzxPE9bRZsj0N\\Zyo85Jd4gSHjAVsjV.gif", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\LzxPE9bRZsj0N\\Zyo85Jd4gSHjAVsjV.gif", lpFilePart=0x0) returned 0x42 [0051.952] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0051.952] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\LzxPE9bRZsj0N\\Zyo85Jd4gSHjAVsjV.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\lzxpe9brzsj0n\\zyo85jd4gshjavsjv.gif"), fInfoLevelId=0x0, lpFileInformation=0x2229048 | out: lpFileInformation=0x2229048*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd25bac0, ftCreationTime.dwHighDateTime=0x1d45ad1, ftLastAccessTime.dwLowDateTime=0x8c2aca40, ftLastAccessTime.dwHighDateTime=0x1d45ef5, ftLastWriteTime.dwLowDateTime=0x8c2aca40, ftLastWriteTime.dwHighDateTime=0x1d45ef5, nFileSizeHigh=0x0, nFileSizeLow=0x11ce0)) returned 1 [0051.952] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0051.952] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\LzxPE9bRZsj0N\\Zyo85Jd4gSHjAVsjV.gif", nBufferLength=0x105, lpBuffer=0x3be2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\LzxPE9bRZsj0N\\Zyo85Jd4gSHjAVsjV.gif", lpFilePart=0x0) returned 0x42 [0051.952] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0051.952] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\LzxPE9bRZsj0N\\Zyo85Jd4gSHjAVsjV.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\lzxpe9brzsj0n\\zyo85jd4gshjavsjv.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0051.952] GetFileType (hFile=0x448) returned 0x1 [0051.952] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be730) returned 1 [0051.952] GetFileType (hFile=0x448) returned 0x1 [0051.952] ReadFile (in: hFile=0x448, lpBuffer=0x222b418, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be848, lpOverlapped=0x0 | out: lpBuffer=0x222b418*, lpNumberOfBytesRead=0x3be848*=0x1000, lpOverlapped=0x0) returned 1 [0052.005] CloseHandle (hObject=0x448) returned 1 [0052.005] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\LzxPE9bRZsj0N\\Zyo85Jd4gSHjAVsjV.gif", nBufferLength=0x105, lpBuffer=0x3be2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\LzxPE9bRZsj0N\\Zyo85Jd4gSHjAVsjV.gif", lpFilePart=0x0) returned 0x42 [0052.005] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0052.005] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\LzxPE9bRZsj0N\\Zyo85Jd4gSHjAVsjV.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\lzxpe9brzsj0n\\zyo85jd4gshjavsjv.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0052.005] GetFileType (hFile=0x448) returned 0x1 [0052.005] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be730) returned 1 [0052.005] GetFileType (hFile=0x448) returned 0x1 [0052.005] WriteFile (in: hFile=0x448, lpBuffer=0x2229178*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be8f8, lpOverlapped=0x0 | out: lpBuffer=0x2229178*, lpNumberOfBytesWritten=0x3be8f8*=0x2000, lpOverlapped=0x0) returned 1 [0052.005] CloseHandle (hObject=0x448) returned 1 [0052.008] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\LzxPE9bRZsj0N\\Zyo85Jd4gSHjAVsjV.gif", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\LzxPE9bRZsj0N\\Zyo85Jd4gSHjAVsjV.gif", lpFilePart=0x0) returned 0x42 [0052.008] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\LzxPE9bRZsj0N\\Zyo85Jd4gSHjAVsjV.gif.xuy", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\LzxPE9bRZsj0N\\Zyo85Jd4gSHjAVsjV.gif.xuy", lpFilePart=0x0) returned 0x46 [0052.008] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0052.008] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\LzxPE9bRZsj0N\\Zyo85Jd4gSHjAVsjV.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\lzxpe9brzsj0n\\zyo85jd4gshjavsjv.gif"), fInfoLevelId=0x0, lpFileInformation=0x3be910 | out: lpFileInformation=0x3be910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd25bac0, ftCreationTime.dwHighDateTime=0x1d45ad1, ftLastAccessTime.dwLowDateTime=0x8c2aca40, ftLastAccessTime.dwHighDateTime=0x1d45ef5, ftLastWriteTime.dwLowDateTime=0xad81e63, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x11ce0)) returned 1 [0052.008] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7f0) returned 1 [0052.008] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\LzxPE9bRZsj0N\\Zyo85Jd4gSHjAVsjV.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\lzxpe9brzsj0n\\zyo85jd4gshjavsjv.gif"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\LzxPE9bRZsj0N\\Zyo85Jd4gSHjAVsjV.gif.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\lzxpe9brzsj0n\\zyo85jd4gshjavsjv.gif.xuy")) returned 1 [0052.009] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0052.009] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\LzxPE9bRZsj0N\\-HzS", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\LzxPE9bRZsj0N\\-HzS", lpFilePart=0x0) returned 0x31 [0052.009] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\LzxPE9bRZsj0N\\-HzS\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\LzxPE9bRZsj0N\\-HzS\\", lpFilePart=0x0) returned 0x32 [0052.009] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\LzxPE9bRZsj0N\\-HzS\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d7fd0 [0052.009] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0052.009] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0052.009] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0052.009] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0052.009] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0052.010] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0052.010] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0052.010] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\LzxPE9bRZsj0N\\-HzS", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\LzxPE9bRZsj0N\\-HzS", lpFilePart=0x0) returned 0x31 [0052.010] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\LzxPE9bRZsj0N\\-HzS\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\LzxPE9bRZsj0N\\-HzS\\", lpFilePart=0x0) returned 0x32 [0052.010] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\LzxPE9bRZsj0N\\-HzS\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d7af0 [0052.010] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0052.010] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0052.010] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0052.010] FindClose (in: hFindFile=0x5d7af0 | out: hFindFile=0x5d7af0) returned 1 [0052.010] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0052.010] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0052.010] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\LzxPE9bRZsj0N\\-HzS\\L0VH.bmp", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\LzxPE9bRZsj0N\\-HzS\\L0VH.bmp", lpFilePart=0x0) returned 0x3a [0052.011] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0052.011] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\LzxPE9bRZsj0N\\-HzS\\L0VH.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\lzxpe9brzsj0n\\-hzs\\l0vh.bmp"), fInfoLevelId=0x0, lpFileInformation=0x22a9140 | out: lpFileInformation=0x22a9140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7ace5e0, ftCreationTime.dwHighDateTime=0x1d457ac, ftLastAccessTime.dwLowDateTime=0x55fd7810, ftLastAccessTime.dwHighDateTime=0x1d4604d, ftLastWriteTime.dwLowDateTime=0x55fd7810, ftLastWriteTime.dwHighDateTime=0x1d4604d, nFileSizeHigh=0x0, nFileSizeLow=0x829b)) returned 1 [0052.011] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0052.011] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\LzxPE9bRZsj0N\\-HzS\\L0VH.bmp", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\LzxPE9bRZsj0N\\-HzS\\L0VH.bmp", lpFilePart=0x0) returned 0x3a [0052.011] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0052.011] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\LzxPE9bRZsj0N\\-HzS\\L0VH.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\lzxpe9brzsj0n\\-hzs\\l0vh.bmp"), fInfoLevelId=0x0, lpFileInformation=0x22a9268 | out: lpFileInformation=0x22a9268*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7ace5e0, ftCreationTime.dwHighDateTime=0x1d457ac, ftLastAccessTime.dwLowDateTime=0x55fd7810, ftLastAccessTime.dwHighDateTime=0x1d4604d, ftLastWriteTime.dwLowDateTime=0x55fd7810, ftLastWriteTime.dwHighDateTime=0x1d4604d, nFileSizeHigh=0x0, nFileSizeLow=0x829b)) returned 1 [0052.011] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0052.011] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\LzxPE9bRZsj0N\\-HzS\\L0VH.bmp", nBufferLength=0x105, lpBuffer=0x3be270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\LzxPE9bRZsj0N\\-HzS\\L0VH.bmp", lpFilePart=0x0) returned 0x3a [0052.011] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0052.011] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\LzxPE9bRZsj0N\\-HzS\\L0VH.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\lzxpe9brzsj0n\\-hzs\\l0vh.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0052.012] GetFileType (hFile=0x448) returned 0x1 [0052.012] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6c0) returned 1 [0052.012] GetFileType (hFile=0x448) returned 0x1 [0052.012] ReadFile (in: hFile=0x448, lpBuffer=0x22ab5e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be7d8, lpOverlapped=0x0 | out: lpBuffer=0x22ab5e8*, lpNumberOfBytesRead=0x3be7d8*=0x1000, lpOverlapped=0x0) returned 1 [0052.030] CloseHandle (hObject=0x448) returned 1 [0052.031] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\LzxPE9bRZsj0N\\-HzS\\L0VH.bmp", nBufferLength=0x105, lpBuffer=0x3be270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\LzxPE9bRZsj0N\\-HzS\\L0VH.bmp", lpFilePart=0x0) returned 0x3a [0052.031] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0052.031] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\LzxPE9bRZsj0N\\-HzS\\L0VH.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\lzxpe9brzsj0n\\-hzs\\l0vh.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0052.031] GetFileType (hFile=0x448) returned 0x1 [0052.031] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6c0) returned 1 [0052.031] GetFileType (hFile=0x448) returned 0x1 [0052.031] WriteFile (in: hFile=0x448, lpBuffer=0x22a9370*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be888, lpOverlapped=0x0 | out: lpBuffer=0x22a9370*, lpNumberOfBytesWritten=0x3be888*=0x2000, lpOverlapped=0x0) returned 1 [0052.031] CloseHandle (hObject=0x448) returned 1 [0052.033] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\LzxPE9bRZsj0N\\-HzS\\L0VH.bmp", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\LzxPE9bRZsj0N\\-HzS\\L0VH.bmp", lpFilePart=0x0) returned 0x3a [0052.033] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\LzxPE9bRZsj0N\\-HzS\\L0VH.bmp.xuy", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\LzxPE9bRZsj0N\\-HzS\\L0VH.bmp.xuy", lpFilePart=0x0) returned 0x3e [0052.033] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0052.033] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\LzxPE9bRZsj0N\\-HzS\\L0VH.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\lzxpe9brzsj0n\\-hzs\\l0vh.bmp"), fInfoLevelId=0x0, lpFileInformation=0x3be8a0 | out: lpFileInformation=0x3be8a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7ace5e0, ftCreationTime.dwHighDateTime=0x1d457ac, ftLastAccessTime.dwLowDateTime=0x55fd7810, ftLastAccessTime.dwHighDateTime=0x1d4604d, ftLastWriteTime.dwLowDateTime=0xadce278, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x829b)) returned 1 [0052.033] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0052.033] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\LzxPE9bRZsj0N\\-HzS\\L0VH.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\lzxpe9brzsj0n\\-hzs\\l0vh.bmp"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\LzxPE9bRZsj0N\\-HzS\\L0VH.bmp.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\lzxpe9brzsj0n\\-hzs\\l0vh.bmp.xuy")) returned 1 [0052.034] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0052.034] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\Saved Pictures", nBufferLength=0x105, lpBuffer=0x3be3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\Saved Pictures", lpFilePart=0x0) returned 0x2d [0052.034] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\Saved Pictures\\", nBufferLength=0x105, lpBuffer=0x3be370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\Saved Pictures\\", lpFilePart=0x0) returned 0x2e [0052.034] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\Saved Pictures\\*", lpFindFileData=0x3be580 | out: lpFindFileData=0x3be580) returned 0x5d7f10 [0052.035] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0052.035] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0052.035] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 0 [0052.035] FindClose (in: hFindFile=0x5d7f10 | out: hFindFile=0x5d7f10) returned 1 [0052.035] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0052.035] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7f0) returned 1 [0052.035] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0052.036] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\Saved Pictures", nBufferLength=0x105, lpBuffer=0x3be3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\Saved Pictures", lpFilePart=0x0) returned 0x2d [0052.036] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\Saved Pictures\\", nBufferLength=0x105, lpBuffer=0x3be370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\Saved Pictures\\", lpFilePart=0x0) returned 0x2e [0052.036] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\Saved Pictures\\*", lpFindFileData=0x3be580 | out: lpFindFileData=0x3be580) returned 0x5d81b0 [0052.036] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0052.036] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0052.036] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 0 [0052.036] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0052.037] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0052.037] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7f0) returned 1 [0052.037] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\Saved Pictures\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\Saved Pictures\\desktop.ini", lpFilePart=0x0) returned 0x39 [0052.037] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0052.037] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\Saved Pictures\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\saved pictures\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x23291e8 | out: lpFileInformation=0x23291e8*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x3bf66bb4, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x3bf66bb4, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x3bf66bb4, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0xbe)) returned 1 [0052.037] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0052.037] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\Saved Pictures\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3be250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\Saved Pictures\\desktop.ini", lpFilePart=0x0) returned 0x39 [0052.037] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be730) returned 1 [0052.037] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\Saved Pictures\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\saved pictures\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0052.037] GetFileType (hFile=0x448) returned 0x1 [0052.037] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0052.037] GetFileType (hFile=0x448) returned 0x1 [0052.037] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3be8c8 | out: lpFileSizeHigh=0x3be8c8*=0x0) returned 0xbe [0052.037] ReadFile (in: hFile=0x448, lpBuffer=0x2329510, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be7f8, lpOverlapped=0x0 | out: lpBuffer=0x2329510*, lpNumberOfBytesRead=0x3be7f8*=0xbe, lpOverlapped=0x0) returned 1 [0052.047] CloseHandle (hObject=0x448) returned 1 [0052.104] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\Saved Pictures\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3be250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\Saved Pictures\\desktop.ini", lpFilePart=0x0) returned 0x39 [0052.104] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be730) returned 1 [0052.104] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\Saved Pictures\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\saved pictures\\desktop.ini"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0052.106] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb1c0) returned 1 [0052.106] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\Saved Pictures\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3bbe40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\Saved Pictures\\desktop.ini", lpFilePart=0x0) returned 0x39 [0052.106] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc2e0) returned 1 [0052.106] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\Saved Pictures\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\saved pictures\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x3bc3c0 | out: lpFileInformation=0x3bc3c0*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x3bf66bb4, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x3bf66bb4, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x3bf66bb4, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0xbe)) returned 1 [0052.107] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc2a0) returned 1 [0052.107] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\Saved Pictures\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3bbe60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\Saved Pictures\\desktop.ini", lpFilePart=0x0) returned 0x39 [0052.107] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc2e0) returned 1 [0052.107] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\Saved Pictures\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\saved pictures\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x219dc88 | out: lpFileInformation=0x219dc88*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x3bf66bb4, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x3bf66bb4, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x3bf66bb4, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0xbe)) returned 1 [0052.107] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc2a0) returned 1 [0052.107] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\Saved Pictures\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3bbcc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\Saved Pictures\\desktop.ini", lpFilePart=0x0) returned 0x39 [0052.107] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc1a0) returned 1 [0052.107] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\Saved Pictures\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\saved pictures\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0052.107] GetFileType (hFile=0x448) returned 0x1 [0052.107] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc110) returned 1 [0052.107] GetFileType (hFile=0x448) returned 0x1 [0052.107] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3bc338 | out: lpFileSizeHigh=0x3bc338*=0x0) returned 0xbe [0052.107] ReadFile (in: hFile=0x448, lpBuffer=0x219dfb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bc268, lpOverlapped=0x0 | out: lpBuffer=0x219dfb0*, lpNumberOfBytesRead=0x3bc268*=0xbe, lpOverlapped=0x0) returned 1 [0052.107] CloseHandle (hObject=0x448) returned 1 [0052.172] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\Saved Pictures\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3bbcc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\Saved Pictures\\desktop.ini", lpFilePart=0x0) returned 0x39 [0052.172] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc1a0) returned 1 [0052.172] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\Saved Pictures\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\saved pictures\\desktop.ini"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0052.174] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8c30) returned 1 [0052.175] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0052.175] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\uwQJ", nBufferLength=0x105, lpBuffer=0x3be3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\uwQJ", lpFilePart=0x0) returned 0x23 [0052.175] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\uwQJ\\", nBufferLength=0x105, lpBuffer=0x3be370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\uwQJ\\", lpFilePart=0x0) returned 0x24 [0052.175] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\uwQJ\\*", lpFindFileData=0x3be580 | out: lpFindFileData=0x3be580) returned 0x5d75b0 [0052.175] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0052.175] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0052.176] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0052.176] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0052.176] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0052.176] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 0 [0052.176] FindClose (in: hFindFile=0x5d75b0 | out: hFindFile=0x5d75b0) returned 1 [0052.176] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0052.176] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7f0) returned 1 [0052.176] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0052.176] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\uwQJ", nBufferLength=0x105, lpBuffer=0x3be3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\uwQJ", lpFilePart=0x0) returned 0x23 [0052.177] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\uwQJ\\", nBufferLength=0x105, lpBuffer=0x3be370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\uwQJ\\", lpFilePart=0x0) returned 0x24 [0052.177] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\uwQJ\\*", lpFindFileData=0x3be580 | out: lpFindFileData=0x3be580) returned 0x5d7610 [0052.177] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0052.177] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0052.177] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0052.177] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0052.178] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0052.178] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 0 [0052.178] FindClose (in: hFindFile=0x5d7610 | out: hFindFile=0x5d7610) returned 1 [0052.178] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0052.178] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7f0) returned 1 [0052.178] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\uwQJ\\-n0RC1h1KI_sm3.png", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\uwQJ\\-n0RC1h1KI_sm3.png", lpFilePart=0x0) returned 0x36 [0052.178] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0052.178] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\uwQJ\\-n0RC1h1KI_sm3.png" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\uwqj\\-n0rc1h1ki_sm3.png"), fInfoLevelId=0x0, lpFileInformation=0x2217cd8 | out: lpFileInformation=0x2217cd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95c06190, ftCreationTime.dwHighDateTime=0x1d46045, ftLastAccessTime.dwLowDateTime=0x39ddcc20, ftLastAccessTime.dwHighDateTime=0x1d45a44, ftLastWriteTime.dwLowDateTime=0x39ddcc20, ftLastWriteTime.dwHighDateTime=0x1d45a44, nFileSizeHigh=0x0, nFileSizeLow=0x189bf)) returned 1 [0052.178] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0052.179] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\uwQJ\\-n0RC1h1KI_sm3.png", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\uwQJ\\-n0RC1h1KI_sm3.png", lpFilePart=0x0) returned 0x36 [0052.179] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0052.179] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\uwQJ\\-n0RC1h1KI_sm3.png" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\uwqj\\-n0rc1h1ki_sm3.png"), fInfoLevelId=0x0, lpFileInformation=0x2217e08 | out: lpFileInformation=0x2217e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95c06190, ftCreationTime.dwHighDateTime=0x1d46045, ftLastAccessTime.dwLowDateTime=0x39ddcc20, ftLastAccessTime.dwHighDateTime=0x1d45a44, ftLastWriteTime.dwLowDateTime=0x39ddcc20, ftLastWriteTime.dwHighDateTime=0x1d45a44, nFileSizeHigh=0x0, nFileSizeLow=0x189bf)) returned 1 [0052.179] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0052.179] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\uwQJ\\-n0RC1h1KI_sm3.png", nBufferLength=0x105, lpBuffer=0x3be2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\uwQJ\\-n0RC1h1KI_sm3.png", lpFilePart=0x0) returned 0x36 [0052.179] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0052.179] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\uwQJ\\-n0RC1h1KI_sm3.png" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\uwqj\\-n0rc1h1ki_sm3.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0052.179] GetFileType (hFile=0x448) returned 0x1 [0052.179] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be730) returned 1 [0052.179] GetFileType (hFile=0x448) returned 0x1 [0052.179] ReadFile (in: hFile=0x448, lpBuffer=0x221a198, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be848, lpOverlapped=0x0 | out: lpBuffer=0x221a198*, lpNumberOfBytesRead=0x3be848*=0x1000, lpOverlapped=0x0) returned 1 [0052.240] CloseHandle (hObject=0x448) returned 1 [0052.241] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\uwQJ\\-n0RC1h1KI_sm3.png", nBufferLength=0x105, lpBuffer=0x3be2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\uwQJ\\-n0RC1h1KI_sm3.png", lpFilePart=0x0) returned 0x36 [0052.241] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0052.241] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\uwQJ\\-n0RC1h1KI_sm3.png" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\uwqj\\-n0rc1h1ki_sm3.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0052.241] GetFileType (hFile=0x448) returned 0x1 [0052.241] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be730) returned 1 [0052.241] GetFileType (hFile=0x448) returned 0x1 [0052.241] WriteFile (in: hFile=0x448, lpBuffer=0x2217f18*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be8f8, lpOverlapped=0x0 | out: lpBuffer=0x2217f18*, lpNumberOfBytesWritten=0x3be8f8*=0x2000, lpOverlapped=0x0) returned 1 [0052.250] CloseHandle (hObject=0x448) returned 1 [0052.252] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\uwQJ\\-n0RC1h1KI_sm3.png", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\uwQJ\\-n0RC1h1KI_sm3.png", lpFilePart=0x0) returned 0x36 [0052.252] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\uwQJ\\-n0RC1h1KI_sm3.png.xuy", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\uwQJ\\-n0RC1h1KI_sm3.png.xuy", lpFilePart=0x0) returned 0x3a [0052.252] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0052.253] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\uwQJ\\-n0RC1h1KI_sm3.png" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\uwqj\\-n0rc1h1ki_sm3.png"), fInfoLevelId=0x0, lpFileInformation=0x3be910 | out: lpFileInformation=0x3be910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95c06190, ftCreationTime.dwHighDateTime=0x1d46045, ftLastAccessTime.dwLowDateTime=0x39ddcc20, ftLastAccessTime.dwHighDateTime=0x1d45a44, ftLastWriteTime.dwLowDateTime=0xafe41ff, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x189bf)) returned 1 [0052.253] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7f0) returned 1 [0052.253] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\uwQJ\\-n0RC1h1KI_sm3.png" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\uwqj\\-n0rc1h1ki_sm3.png"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\uwQJ\\-n0RC1h1KI_sm3.png.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\uwqj\\-n0rc1h1ki_sm3.png.xuy")) returned 1 [0052.254] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\uwQJ\\aA1x 4cIy.jpg", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\uwQJ\\aA1x 4cIy.jpg", lpFilePart=0x0) returned 0x31 [0052.254] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0052.254] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\uwQJ\\aA1x 4cIy.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\uwqj\\aa1x 4ciy.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22964b8 | out: lpFileInformation=0x22964b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31033e0, ftCreationTime.dwHighDateTime=0x1d46674, ftLastAccessTime.dwLowDateTime=0x14f9c7b0, ftLastAccessTime.dwHighDateTime=0x1d45d14, ftLastWriteTime.dwLowDateTime=0x14f9c7b0, ftLastWriteTime.dwHighDateTime=0x1d45d14, nFileSizeHigh=0x0, nFileSizeLow=0xf6f9)) returned 1 [0052.254] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0052.254] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\uwQJ\\aA1x 4cIy.jpg", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\uwQJ\\aA1x 4cIy.jpg", lpFilePart=0x0) returned 0x31 [0052.254] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0052.254] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\uwQJ\\aA1x 4cIy.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\uwqj\\aa1x 4ciy.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22965d8 | out: lpFileInformation=0x22965d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31033e0, ftCreationTime.dwHighDateTime=0x1d46674, ftLastAccessTime.dwLowDateTime=0x14f9c7b0, ftLastAccessTime.dwHighDateTime=0x1d45d14, ftLastWriteTime.dwLowDateTime=0x14f9c7b0, ftLastWriteTime.dwHighDateTime=0x1d45d14, nFileSizeHigh=0x0, nFileSizeLow=0xf6f9)) returned 1 [0052.254] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0052.254] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\uwQJ\\aA1x 4cIy.jpg", nBufferLength=0x105, lpBuffer=0x3be2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\uwQJ\\aA1x 4cIy.jpg", lpFilePart=0x0) returned 0x31 [0052.254] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0052.254] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\uwQJ\\aA1x 4cIy.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\uwqj\\aa1x 4ciy.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0052.255] GetFileType (hFile=0x448) returned 0x1 [0052.255] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be730) returned 1 [0052.255] GetFileType (hFile=0x448) returned 0x1 [0052.255] ReadFile (in: hFile=0x448, lpBuffer=0x2298948, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be848, lpOverlapped=0x0 | out: lpBuffer=0x2298948*, lpNumberOfBytesRead=0x3be848*=0x1000, lpOverlapped=0x0) returned 1 [0052.286] CloseHandle (hObject=0x448) returned 1 [0052.287] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\uwQJ\\aA1x 4cIy.jpg", nBufferLength=0x105, lpBuffer=0x3be2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\uwQJ\\aA1x 4cIy.jpg", lpFilePart=0x0) returned 0x31 [0052.287] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0052.287] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\uwQJ\\aA1x 4cIy.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\uwqj\\aa1x 4ciy.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0052.287] GetFileType (hFile=0x448) returned 0x1 [0052.287] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be730) returned 1 [0052.287] GetFileType (hFile=0x448) returned 0x1 [0052.287] WriteFile (in: hFile=0x448, lpBuffer=0x22966d8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be8f8, lpOverlapped=0x0 | out: lpBuffer=0x22966d8*, lpNumberOfBytesWritten=0x3be8f8*=0x2000, lpOverlapped=0x0) returned 1 [0052.287] CloseHandle (hObject=0x448) returned 1 [0052.289] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\uwQJ\\aA1x 4cIy.jpg", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\uwQJ\\aA1x 4cIy.jpg", lpFilePart=0x0) returned 0x31 [0052.289] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\uwQJ\\aA1x 4cIy.jpg.xuy", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\uwQJ\\aA1x 4cIy.jpg.xuy", lpFilePart=0x0) returned 0x35 [0052.289] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0052.289] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\uwQJ\\aA1x 4cIy.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\uwqj\\aa1x 4ciy.jpg"), fInfoLevelId=0x0, lpFileInformation=0x3be910 | out: lpFileInformation=0x3be910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31033e0, ftCreationTime.dwHighDateTime=0x1d46674, ftLastAccessTime.dwLowDateTime=0x14f9c7b0, ftLastAccessTime.dwHighDateTime=0x1d45d14, ftLastWriteTime.dwLowDateTime=0xb0307c8, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xf6f9)) returned 1 [0052.290] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7f0) returned 1 [0052.290] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\uwQJ\\aA1x 4cIy.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\uwqj\\aa1x 4ciy.jpg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\uwQJ\\aA1x 4cIy.jpg.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\uwqj\\aa1x 4ciy.jpg.xuy")) returned 1 [0052.290] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\uwQJ\\dEwwga9gIHgP7bGKwR36.bmp", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\uwQJ\\dEwwga9gIHgP7bGKwR36.bmp", lpFilePart=0x0) returned 0x3c [0052.290] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0052.291] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\uwQJ\\dEwwga9gIHgP7bGKwR36.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\uwqj\\dewwga9gihgp7bgkwr36.bmp"), fInfoLevelId=0x0, lpFileInformation=0x2314c40 | out: lpFileInformation=0x2314c40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9df4e260, ftCreationTime.dwHighDateTime=0x1d45d9c, ftLastAccessTime.dwLowDateTime=0xc9470f40, ftLastAccessTime.dwHighDateTime=0x1d45a83, ftLastWriteTime.dwLowDateTime=0xc9470f40, ftLastWriteTime.dwHighDateTime=0x1d45a83, nFileSizeHigh=0x0, nFileSizeLow=0x14990)) returned 1 [0052.291] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0052.291] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\uwQJ\\dEwwga9gIHgP7bGKwR36.bmp", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\uwQJ\\dEwwga9gIHgP7bGKwR36.bmp", lpFilePart=0x0) returned 0x3c [0052.291] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0052.291] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\uwQJ\\dEwwga9gIHgP7bGKwR36.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\uwqj\\dewwga9gihgp7bgkwr36.bmp"), fInfoLevelId=0x0, lpFileInformation=0x2314d90 | out: lpFileInformation=0x2314d90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9df4e260, ftCreationTime.dwHighDateTime=0x1d45d9c, ftLastAccessTime.dwLowDateTime=0xc9470f40, ftLastAccessTime.dwHighDateTime=0x1d45a83, ftLastWriteTime.dwLowDateTime=0xc9470f40, ftLastWriteTime.dwHighDateTime=0x1d45a83, nFileSizeHigh=0x0, nFileSizeLow=0x14990)) returned 1 [0052.291] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0052.291] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\uwQJ\\dEwwga9gIHgP7bGKwR36.bmp", nBufferLength=0x105, lpBuffer=0x3be2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\uwQJ\\dEwwga9gIHgP7bGKwR36.bmp", lpFilePart=0x0) returned 0x3c [0052.291] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0052.291] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\uwQJ\\dEwwga9gIHgP7bGKwR36.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\uwqj\\dewwga9gihgp7bgkwr36.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0052.291] GetFileType (hFile=0x448) returned 0x1 [0052.291] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be730) returned 1 [0052.291] GetFileType (hFile=0x448) returned 0x1 [0052.292] ReadFile (in: hFile=0x448, lpBuffer=0x2317160, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be848, lpOverlapped=0x0 | out: lpBuffer=0x2317160*, lpNumberOfBytesRead=0x3be848*=0x1000, lpOverlapped=0x0) returned 1 [0052.870] CloseHandle (hObject=0x448) returned 1 [0052.873] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\uwQJ\\dEwwga9gIHgP7bGKwR36.bmp", nBufferLength=0x105, lpBuffer=0x3be2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\uwQJ\\dEwwga9gIHgP7bGKwR36.bmp", lpFilePart=0x0) returned 0x3c [0052.873] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0052.873] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\uwQJ\\dEwwga9gIHgP7bGKwR36.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\uwqj\\dewwga9gihgp7bgkwr36.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0052.873] GetFileType (hFile=0x448) returned 0x1 [0052.873] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be730) returned 1 [0052.873] GetFileType (hFile=0x448) returned 0x1 [0052.873] WriteFile (in: hFile=0x448, lpBuffer=0x2155060*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be8f8, lpOverlapped=0x0 | out: lpBuffer=0x2155060*, lpNumberOfBytesWritten=0x3be8f8*=0x2000, lpOverlapped=0x0) returned 1 [0052.874] CloseHandle (hObject=0x448) returned 1 [0052.876] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\uwQJ\\dEwwga9gIHgP7bGKwR36.bmp", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\uwQJ\\dEwwga9gIHgP7bGKwR36.bmp", lpFilePart=0x0) returned 0x3c [0052.876] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\uwQJ\\dEwwga9gIHgP7bGKwR36.bmp.xuy", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\uwQJ\\dEwwga9gIHgP7bGKwR36.bmp.xuy", lpFilePart=0x0) returned 0x40 [0052.876] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0052.876] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\uwQJ\\dEwwga9gIHgP7bGKwR36.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\uwqj\\dewwga9gihgp7bgkwr36.bmp"), fInfoLevelId=0x0, lpFileInformation=0x3be910 | out: lpFileInformation=0x3be910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9df4e260, ftCreationTime.dwHighDateTime=0x1d45d9c, ftLastAccessTime.dwLowDateTime=0xc9470f40, ftLastAccessTime.dwHighDateTime=0x1d45a83, ftLastWriteTime.dwLowDateTime=0xb5d9fa5, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x14990)) returned 1 [0052.876] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7f0) returned 1 [0052.876] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\uwQJ\\dEwwga9gIHgP7bGKwR36.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\uwqj\\dewwga9gihgp7bgkwr36.bmp"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\uwQJ\\dEwwga9gIHgP7bGKwR36.bmp.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\uwqj\\dewwga9gihgp7bgkwr36.bmp.xuy")) returned 1 [0052.876] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\uwQJ\\RL8XNe9oHqfUA86p.jpg", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\uwQJ\\RL8XNe9oHqfUA86p.jpg", lpFilePart=0x0) returned 0x38 [0052.876] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0052.877] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\uwQJ\\RL8XNe9oHqfUA86p.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\uwqj\\rl8xne9ohqfua86p.jpg"), fInfoLevelId=0x0, lpFileInformation=0x2196920 | out: lpFileInformation=0x2196920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92d29420, ftCreationTime.dwHighDateTime=0x1d45c9a, ftLastAccessTime.dwLowDateTime=0x792b5b00, ftLastAccessTime.dwHighDateTime=0x1d459ee, ftLastWriteTime.dwLowDateTime=0x792b5b00, ftLastWriteTime.dwHighDateTime=0x1d459ee, nFileSizeHigh=0x0, nFileSizeLow=0x15a32)) returned 1 [0052.877] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0052.877] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\uwQJ\\RL8XNe9oHqfUA86p.jpg", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\uwQJ\\RL8XNe9oHqfUA86p.jpg", lpFilePart=0x0) returned 0x38 [0052.877] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0052.877] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\uwQJ\\RL8XNe9oHqfUA86p.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\uwqj\\rl8xne9ohqfua86p.jpg"), fInfoLevelId=0x0, lpFileInformation=0x2196a60 | out: lpFileInformation=0x2196a60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92d29420, ftCreationTime.dwHighDateTime=0x1d45c9a, ftLastAccessTime.dwLowDateTime=0x792b5b00, ftLastAccessTime.dwHighDateTime=0x1d459ee, ftLastWriteTime.dwLowDateTime=0x792b5b00, ftLastWriteTime.dwHighDateTime=0x1d459ee, nFileSizeHigh=0x0, nFileSizeLow=0x15a32)) returned 1 [0052.877] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0052.877] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\uwQJ\\RL8XNe9oHqfUA86p.jpg", nBufferLength=0x105, lpBuffer=0x3be2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\uwQJ\\RL8XNe9oHqfUA86p.jpg", lpFilePart=0x0) returned 0x38 [0052.877] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0052.877] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\uwQJ\\RL8XNe9oHqfUA86p.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\uwqj\\rl8xne9ohqfua86p.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0052.877] GetFileType (hFile=0x448) returned 0x1 [0052.877] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be730) returned 1 [0052.877] GetFileType (hFile=0x448) returned 0x1 [0052.877] ReadFile (in: hFile=0x448, lpBuffer=0x2198e10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be848, lpOverlapped=0x0 | out: lpBuffer=0x2198e10*, lpNumberOfBytesRead=0x3be848*=0x1000, lpOverlapped=0x0) returned 1 [0052.888] CloseHandle (hObject=0x448) returned 1 [0052.888] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\uwQJ\\RL8XNe9oHqfUA86p.jpg", nBufferLength=0x105, lpBuffer=0x3be2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\uwQJ\\RL8XNe9oHqfUA86p.jpg", lpFilePart=0x0) returned 0x38 [0052.888] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0052.889] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\uwQJ\\RL8XNe9oHqfUA86p.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\uwqj\\rl8xne9ohqfua86p.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0052.889] GetFileType (hFile=0x448) returned 0x1 [0052.889] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be730) returned 1 [0052.889] GetFileType (hFile=0x448) returned 0x1 [0052.889] WriteFile (in: hFile=0x448, lpBuffer=0x2196b80*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be8f8, lpOverlapped=0x0 | out: lpBuffer=0x2196b80*, lpNumberOfBytesWritten=0x3be8f8*=0x2000, lpOverlapped=0x0) returned 1 [0052.889] CloseHandle (hObject=0x448) returned 1 [0052.891] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\uwQJ\\RL8XNe9oHqfUA86p.jpg", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\uwQJ\\RL8XNe9oHqfUA86p.jpg", lpFilePart=0x0) returned 0x38 [0052.891] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\uwQJ\\RL8XNe9oHqfUA86p.jpg.xuy", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\uwQJ\\RL8XNe9oHqfUA86p.jpg.xuy", lpFilePart=0x0) returned 0x3c [0052.891] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0052.891] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\uwQJ\\RL8XNe9oHqfUA86p.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\uwqj\\rl8xne9ohqfua86p.jpg"), fInfoLevelId=0x0, lpFileInformation=0x3be910 | out: lpFileInformation=0x3be910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92d29420, ftCreationTime.dwHighDateTime=0x1d45c9a, ftLastAccessTime.dwLowDateTime=0x792b5b00, ftLastAccessTime.dwHighDateTime=0x1d459ee, ftLastWriteTime.dwLowDateTime=0xb60059c, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x15a32)) returned 1 [0052.891] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7f0) returned 1 [0052.891] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\uwQJ\\RL8XNe9oHqfUA86p.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\uwqj\\rl8xne9ohqfua86p.jpg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\uwQJ\\RL8XNe9oHqfUA86p.jpg.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\uwqj\\rl8xne9ohqfua86p.jpg.xuy")) returned 1 [0052.892] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be950) returned 1 [0052.892] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music", nBufferLength=0x105, lpBuffer=0x3be440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music", lpFilePart=0x0) returned 0x1b [0052.892] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\", nBufferLength=0x105, lpBuffer=0x3be3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\", lpFilePart=0x0) returned 0x1c [0052.892] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\*", lpFindFileData=0x3be5f0 | out: lpFindFileData=0x3be5f0) returned 0x5d7c70 [0052.892] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0052.892] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0052.892] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0052.892] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0052.893] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0052.893] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0052.893] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0052.893] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 0 [0052.893] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0052.893] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0052.893] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0052.893] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be950) returned 1 [0052.893] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music", nBufferLength=0x105, lpBuffer=0x3be440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music", lpFilePart=0x0) returned 0x1b [0052.893] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\", nBufferLength=0x105, lpBuffer=0x3be3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\", lpFilePart=0x0) returned 0x1c [0052.893] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\*", lpFindFileData=0x3be5f0 | out: lpFindFileData=0x3be5f0) returned 0x5d7c70 [0052.894] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0052.894] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0052.894] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0052.894] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0052.894] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0052.894] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0052.894] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0052.894] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 0 [0052.894] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0052.895] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0052.895] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0052.895] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\desktop.ini", lpFilePart=0x0) returned 0x27 [0052.895] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0052.895] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x22176e8 | out: lpFileInformation=0x22176e8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xae168be9, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xae168be9, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xae1b508e, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x1f8)) returned 1 [0052.895] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0052.895] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\desktop.ini", lpFilePart=0x0) returned 0x27 [0052.895] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0052.895] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0052.895] GetFileType (hFile=0x448) returned 0x1 [0052.895] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0052.895] GetFileType (hFile=0x448) returned 0x1 [0052.895] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x1f8 [0052.895] ReadFile (in: hFile=0x448, lpBuffer=0x2217af8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x2217af8*, lpNumberOfBytesRead=0x3be868*=0x1f8, lpOverlapped=0x0) returned 1 [0052.895] CloseHandle (hObject=0x448) returned 1 [0052.915] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\desktop.ini", lpFilePart=0x0) returned 0x27 [0052.915] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0052.915] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\desktop.ini"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0052.917] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb230) returned 1 [0052.917] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3bbeb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\desktop.ini", lpFilePart=0x0) returned 0x27 [0052.917] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc350) returned 1 [0052.917] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x3bc430 | out: lpFileInformation=0x3bc430*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xae168be9, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xae168be9, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xae1b508e, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x1f8)) returned 1 [0052.917] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc310) returned 1 [0052.917] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3bbed0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\desktop.ini", lpFilePart=0x0) returned 0x27 [0052.917] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc350) returned 1 [0052.917] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x228fc40 | out: lpFileInformation=0x228fc40*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xae168be9, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xae168be9, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xae1b508e, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x1f8)) returned 1 [0052.919] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc310) returned 1 [0052.919] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3bbd30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\desktop.ini", lpFilePart=0x0) returned 0x27 [0052.919] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc210) returned 1 [0052.919] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0052.919] GetFileType (hFile=0x448) returned 0x1 [0052.919] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc180) returned 1 [0052.919] GetFileType (hFile=0x448) returned 0x1 [0052.919] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3bc3a8 | out: lpFileSizeHigh=0x3bc3a8*=0x0) returned 0x1f8 [0052.919] ReadFile (in: hFile=0x448, lpBuffer=0x2290050, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bc2d8, lpOverlapped=0x0 | out: lpBuffer=0x2290050*, lpNumberOfBytesRead=0x3bc2d8*=0x1f8, lpOverlapped=0x0) returned 1 [0052.920] CloseHandle (hObject=0x448) returned 1 [0052.962] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3bbd30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\desktop.ini", lpFilePart=0x0) returned 0x27 [0052.962] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc210) returned 1 [0052.962] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\desktop.ini"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0052.964] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8ca0) returned 1 [0052.965] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\maZWJw8hU.mp3", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\maZWJw8hU.mp3", lpFilePart=0x0) returned 0x29 [0052.965] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0052.965] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\maZWJw8hU.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\mazwjw8hu.mp3"), fInfoLevelId=0x0, lpFileInformation=0x2308158 | out: lpFileInformation=0x2308158*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5c3f20, ftCreationTime.dwHighDateTime=0x1d45bda, ftLastAccessTime.dwLowDateTime=0xd0be7680, ftLastAccessTime.dwHighDateTime=0x1d4639f, ftLastWriteTime.dwLowDateTime=0xd0be7680, ftLastWriteTime.dwHighDateTime=0x1d4639f, nFileSizeHigh=0x0, nFileSizeLow=0x7424)) returned 1 [0052.965] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0052.965] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\maZWJw8hU.mp3", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\maZWJw8hU.mp3", lpFilePart=0x0) returned 0x29 [0052.965] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0052.965] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\maZWJw8hU.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\mazwjw8hu.mp3"), fInfoLevelId=0x0, lpFileInformation=0x2308268 | out: lpFileInformation=0x2308268*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5c3f20, ftCreationTime.dwHighDateTime=0x1d45bda, ftLastAccessTime.dwLowDateTime=0xd0be7680, ftLastAccessTime.dwHighDateTime=0x1d4639f, ftLastWriteTime.dwLowDateTime=0xd0be7680, ftLastWriteTime.dwHighDateTime=0x1d4639f, nFileSizeHigh=0x0, nFileSizeLow=0x7424)) returned 1 [0052.965] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0052.965] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\maZWJw8hU.mp3", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\maZWJw8hU.mp3", lpFilePart=0x0) returned 0x29 [0052.966] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0052.966] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\maZWJw8hU.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\mazwjw8hu.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0052.966] GetFileType (hFile=0x448) returned 0x1 [0052.966] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0052.966] GetFileType (hFile=0x448) returned 0x1 [0052.966] ReadFile (in: hFile=0x448, lpBuffer=0x230a5b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be8b8, lpOverlapped=0x0 | out: lpBuffer=0x230a5b8*, lpNumberOfBytesRead=0x3be8b8*=0x1000, lpOverlapped=0x0) returned 1 [0053.135] CloseHandle (hObject=0x448) returned 1 [0053.136] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\maZWJw8hU.mp3", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\maZWJw8hU.mp3", lpFilePart=0x0) returned 0x29 [0053.136] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0053.136] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\maZWJw8hU.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\mazwjw8hu.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0053.136] GetFileType (hFile=0x448) returned 0x1 [0053.136] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0053.136] GetFileType (hFile=0x448) returned 0x1 [0053.136] WriteFile (in: hFile=0x448, lpBuffer=0x2154d30*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be968, lpOverlapped=0x0 | out: lpBuffer=0x2154d30*, lpNumberOfBytesWritten=0x3be968*=0x2000, lpOverlapped=0x0) returned 1 [0053.136] CloseHandle (hObject=0x448) returned 1 [0053.138] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\maZWJw8hU.mp3", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\maZWJw8hU.mp3", lpFilePart=0x0) returned 0x29 [0053.138] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\maZWJw8hU.mp3.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\maZWJw8hU.mp3.xuy", lpFilePart=0x0) returned 0x2d [0053.138] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0053.138] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\maZWJw8hU.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\mazwjw8hu.mp3"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5c3f20, ftCreationTime.dwHighDateTime=0x1d45bda, ftLastAccessTime.dwLowDateTime=0xd0be7680, ftLastAccessTime.dwHighDateTime=0x1d4639f, ftLastWriteTime.dwLowDateTime=0xb8663d5, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x7424)) returned 1 [0053.138] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0053.139] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\maZWJw8hU.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\mazwjw8hu.mp3"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\maZWJw8hU.mp3.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\mazwjw8hu.mp3.xuy")) returned 1 [0053.139] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\R7 9VVQ_Ob5C3PHQ.mp3", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\R7 9VVQ_Ob5C3PHQ.mp3", lpFilePart=0x0) returned 0x30 [0053.139] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0053.139] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\R7 9VVQ_Ob5C3PHQ.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\r7 9vvq_ob5c3phq.mp3"), fInfoLevelId=0x0, lpFileInformation=0x2186528 | out: lpFileInformation=0x2186528*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe307c260, ftCreationTime.dwHighDateTime=0x1d45661, ftLastAccessTime.dwLowDateTime=0xc49838d0, ftLastAccessTime.dwHighDateTime=0x1d45e97, ftLastWriteTime.dwLowDateTime=0xc49838d0, ftLastWriteTime.dwHighDateTime=0x1d45e97, nFileSizeHigh=0x0, nFileSizeLow=0x164e5)) returned 1 [0053.139] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0053.139] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\R7 9VVQ_Ob5C3PHQ.mp3", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\R7 9VVQ_Ob5C3PHQ.mp3", lpFilePart=0x0) returned 0x30 [0053.139] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0053.139] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\R7 9VVQ_Ob5C3PHQ.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\r7 9vvq_ob5c3phq.mp3"), fInfoLevelId=0x0, lpFileInformation=0x2186658 | out: lpFileInformation=0x2186658*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe307c260, ftCreationTime.dwHighDateTime=0x1d45661, ftLastAccessTime.dwLowDateTime=0xc49838d0, ftLastAccessTime.dwHighDateTime=0x1d45e97, ftLastWriteTime.dwLowDateTime=0xc49838d0, ftLastWriteTime.dwHighDateTime=0x1d45e97, nFileSizeHigh=0x0, nFileSizeLow=0x164e5)) returned 1 [0053.140] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0053.140] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\R7 9VVQ_Ob5C3PHQ.mp3", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\R7 9VVQ_Ob5C3PHQ.mp3", lpFilePart=0x0) returned 0x30 [0053.140] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0053.140] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\R7 9VVQ_Ob5C3PHQ.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\r7 9vvq_ob5c3phq.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0053.140] GetFileType (hFile=0x448) returned 0x1 [0053.140] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0053.140] GetFileType (hFile=0x448) returned 0x1 [0053.140] ReadFile (in: hFile=0x448, lpBuffer=0x21889e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be8b8, lpOverlapped=0x0 | out: lpBuffer=0x21889e8*, lpNumberOfBytesRead=0x3be8b8*=0x1000, lpOverlapped=0x0) returned 1 [0053.237] CloseHandle (hObject=0x448) returned 1 [0053.237] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\R7 9VVQ_Ob5C3PHQ.mp3", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\R7 9VVQ_Ob5C3PHQ.mp3", lpFilePart=0x0) returned 0x30 [0053.237] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0053.238] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\R7 9VVQ_Ob5C3PHQ.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\r7 9vvq_ob5c3phq.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0053.238] GetFileType (hFile=0x448) returned 0x1 [0053.238] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0053.238] GetFileType (hFile=0x448) returned 0x1 [0053.238] WriteFile (in: hFile=0x448, lpBuffer=0x2186768*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be968, lpOverlapped=0x0 | out: lpBuffer=0x2186768*, lpNumberOfBytesWritten=0x3be968*=0x2000, lpOverlapped=0x0) returned 1 [0053.238] CloseHandle (hObject=0x448) returned 1 [0053.240] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\R7 9VVQ_Ob5C3PHQ.mp3", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\R7 9VVQ_Ob5C3PHQ.mp3", lpFilePart=0x0) returned 0x30 [0053.240] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\R7 9VVQ_Ob5C3PHQ.mp3.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\R7 9VVQ_Ob5C3PHQ.mp3.xuy", lpFilePart=0x0) returned 0x34 [0053.240] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0053.240] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\R7 9VVQ_Ob5C3PHQ.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\r7 9vvq_ob5c3phq.mp3"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe307c260, ftCreationTime.dwHighDateTime=0x1d45661, ftLastAccessTime.dwLowDateTime=0xc49838d0, ftLastAccessTime.dwHighDateTime=0x1d45e97, ftLastWriteTime.dwLowDateTime=0xb949b84, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x164e5)) returned 1 [0053.241] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0053.241] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\R7 9VVQ_Ob5C3PHQ.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\r7 9vvq_ob5c3phq.mp3"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\R7 9VVQ_Ob5C3PHQ.mp3.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\r7 9vvq_ob5c3phq.mp3.xuy")) returned 1 [0053.241] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0053.241] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\fBwW7 r5N", nBufferLength=0x105, lpBuffer=0x3be3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\fBwW7 r5N", lpFilePart=0x0) returned 0x25 [0053.241] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\fBwW7 r5N\\", nBufferLength=0x105, lpBuffer=0x3be370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\fBwW7 r5N\\", lpFilePart=0x0) returned 0x26 [0053.242] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\fBwW7 r5N\\*", lpFindFileData=0x3be580 | out: lpFindFileData=0x3be580) returned 0x5d81b0 [0053.242] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0053.243] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0053.243] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0053.243] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0053.243] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0053.243] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 0 [0053.243] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0053.243] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0053.243] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7f0) returned 1 [0053.243] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0053.243] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\fBwW7 r5N", nBufferLength=0x105, lpBuffer=0x3be3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\fBwW7 r5N", lpFilePart=0x0) returned 0x25 [0053.243] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\fBwW7 r5N\\", nBufferLength=0x105, lpBuffer=0x3be370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\fBwW7 r5N\\", lpFilePart=0x0) returned 0x26 [0053.244] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\fBwW7 r5N\\*", lpFindFileData=0x3be580 | out: lpFindFileData=0x3be580) returned 0x5d79d0 [0053.244] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0053.244] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0053.244] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0053.244] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0053.244] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0053.244] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 0 [0053.245] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0053.245] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0053.245] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7f0) returned 1 [0053.245] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\fBwW7 r5N\\e_d9d.mp3", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\fBwW7 r5N\\e_d9d.mp3", lpFilePart=0x0) returned 0x2f [0053.245] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0053.245] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\fBwW7 r5N\\e_d9d.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\fbww7 r5n\\e_d9d.mp3"), fInfoLevelId=0x0, lpFileInformation=0x2206f50 | out: lpFileInformation=0x2206f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a641ff0, ftCreationTime.dwHighDateTime=0x1d461cd, ftLastAccessTime.dwLowDateTime=0xb5025760, ftLastAccessTime.dwHighDateTime=0x1d459b1, ftLastWriteTime.dwLowDateTime=0xb5025760, ftLastWriteTime.dwHighDateTime=0x1d459b1, nFileSizeHigh=0x0, nFileSizeLow=0xefbd)) returned 1 [0053.245] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0053.245] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\fBwW7 r5N\\e_d9d.mp3", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\fBwW7 r5N\\e_d9d.mp3", lpFilePart=0x0) returned 0x2f [0053.245] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0053.245] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\fBwW7 r5N\\e_d9d.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\fbww7 r5n\\e_d9d.mp3"), fInfoLevelId=0x0, lpFileInformation=0x2207060 | out: lpFileInformation=0x2207060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a641ff0, ftCreationTime.dwHighDateTime=0x1d461cd, ftLastAccessTime.dwLowDateTime=0xb5025760, ftLastAccessTime.dwHighDateTime=0x1d459b1, ftLastWriteTime.dwLowDateTime=0xb5025760, ftLastWriteTime.dwHighDateTime=0x1d459b1, nFileSizeHigh=0x0, nFileSizeLow=0xefbd)) returned 1 [0053.245] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0053.245] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\fBwW7 r5N\\e_d9d.mp3", nBufferLength=0x105, lpBuffer=0x3be2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\fBwW7 r5N\\e_d9d.mp3", lpFilePart=0x0) returned 0x2f [0053.245] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0053.245] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\fBwW7 r5N\\e_d9d.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\fbww7 r5n\\e_d9d.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0053.246] GetFileType (hFile=0x448) returned 0x1 [0053.246] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be730) returned 1 [0053.246] GetFileType (hFile=0x448) returned 0x1 [0053.246] ReadFile (in: hFile=0x448, lpBuffer=0x22093b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be848, lpOverlapped=0x0 | out: lpBuffer=0x22093b0*, lpNumberOfBytesRead=0x3be848*=0x1000, lpOverlapped=0x0) returned 1 [0053.256] CloseHandle (hObject=0x448) returned 1 [0053.256] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\fBwW7 r5N\\e_d9d.mp3", nBufferLength=0x105, lpBuffer=0x3be2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\fBwW7 r5N\\e_d9d.mp3", lpFilePart=0x0) returned 0x2f [0053.256] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0053.257] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\fBwW7 r5N\\e_d9d.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\fbww7 r5n\\e_d9d.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0053.257] GetFileType (hFile=0x448) returned 0x1 [0053.257] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be730) returned 1 [0053.257] GetFileType (hFile=0x448) returned 0x1 [0053.257] WriteFile (in: hFile=0x448, lpBuffer=0x2207150*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be8f8, lpOverlapped=0x0 | out: lpBuffer=0x2207150*, lpNumberOfBytesWritten=0x3be8f8*=0x2000, lpOverlapped=0x0) returned 1 [0053.257] CloseHandle (hObject=0x448) returned 1 [0053.259] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\fBwW7 r5N\\e_d9d.mp3", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\fBwW7 r5N\\e_d9d.mp3", lpFilePart=0x0) returned 0x2f [0053.259] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\fBwW7 r5N\\e_d9d.mp3.xuy", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\fBwW7 r5N\\e_d9d.mp3.xuy", lpFilePart=0x0) returned 0x33 [0053.259] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0053.259] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\fBwW7 r5N\\e_d9d.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\fbww7 r5n\\e_d9d.mp3"), fInfoLevelId=0x0, lpFileInformation=0x3be910 | out: lpFileInformation=0x3be910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a641ff0, ftCreationTime.dwHighDateTime=0x1d461cd, ftLastAccessTime.dwLowDateTime=0xb5025760, ftLastAccessTime.dwHighDateTime=0x1d459b1, ftLastWriteTime.dwLowDateTime=0xb96fe6f, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xefbd)) returned 1 [0053.259] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7f0) returned 1 [0053.259] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\fBwW7 r5N\\e_d9d.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\fbww7 r5n\\e_d9d.mp3"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\fBwW7 r5N\\e_d9d.mp3.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\fbww7 r5n\\e_d9d.mp3.xuy")) returned 1 [0053.260] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\fBwW7 r5N\\kqPHTpgPgkFex.mp3", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\fBwW7 r5N\\kqPHTpgPgkFex.mp3", lpFilePart=0x0) returned 0x37 [0053.260] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0053.260] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\fBwW7 r5N\\kqPHTpgPgkFex.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\fbww7 r5n\\kqphtpgpgkfex.mp3"), fInfoLevelId=0x0, lpFileInformation=0x2285680 | out: lpFileInformation=0x2285680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11a364f0, ftCreationTime.dwHighDateTime=0x1d4629f, ftLastAccessTime.dwLowDateTime=0x39f7c490, ftLastAccessTime.dwHighDateTime=0x1d45ea9, ftLastWriteTime.dwLowDateTime=0x39f7c490, ftLastWriteTime.dwHighDateTime=0x1d45ea9, nFileSizeHigh=0x0, nFileSizeLow=0x115e)) returned 1 [0053.260] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0053.260] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\fBwW7 r5N\\kqPHTpgPgkFex.mp3", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\fBwW7 r5N\\kqPHTpgPgkFex.mp3", lpFilePart=0x0) returned 0x37 [0053.260] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0053.260] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\fBwW7 r5N\\kqPHTpgPgkFex.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\fbww7 r5n\\kqphtpgpgkfex.mp3"), fInfoLevelId=0x0, lpFileInformation=0x22857b0 | out: lpFileInformation=0x22857b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11a364f0, ftCreationTime.dwHighDateTime=0x1d4629f, ftLastAccessTime.dwLowDateTime=0x39f7c490, ftLastAccessTime.dwHighDateTime=0x1d45ea9, ftLastWriteTime.dwLowDateTime=0x39f7c490, ftLastWriteTime.dwHighDateTime=0x1d45ea9, nFileSizeHigh=0x0, nFileSizeLow=0x115e)) returned 1 [0053.260] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0053.260] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\fBwW7 r5N\\kqPHTpgPgkFex.mp3", nBufferLength=0x105, lpBuffer=0x3be2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\fBwW7 r5N\\kqPHTpgPgkFex.mp3", lpFilePart=0x0) returned 0x37 [0053.260] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0053.260] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\fBwW7 r5N\\kqPHTpgPgkFex.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\fbww7 r5n\\kqphtpgpgkfex.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0053.261] GetFileType (hFile=0x448) returned 0x1 [0053.261] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be730) returned 1 [0053.261] GetFileType (hFile=0x448) returned 0x1 [0053.261] ReadFile (in: hFile=0x448, lpBuffer=0x2287b40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be848, lpOverlapped=0x0 | out: lpBuffer=0x2287b40*, lpNumberOfBytesRead=0x3be848*=0x1000, lpOverlapped=0x0) returned 1 [0053.319] CloseHandle (hObject=0x448) returned 1 [0053.319] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\fBwW7 r5N\\kqPHTpgPgkFex.mp3", nBufferLength=0x105, lpBuffer=0x3be2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\fBwW7 r5N\\kqPHTpgPgkFex.mp3", lpFilePart=0x0) returned 0x37 [0053.319] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0053.319] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\fBwW7 r5N\\kqPHTpgPgkFex.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\fbww7 r5n\\kqphtpgpgkfex.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0053.319] GetFileType (hFile=0x448) returned 0x1 [0053.319] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be730) returned 1 [0053.319] GetFileType (hFile=0x448) returned 0x1 [0053.319] WriteFile (in: hFile=0x448, lpBuffer=0x22858c0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be8f8, lpOverlapped=0x0 | out: lpBuffer=0x22858c0*, lpNumberOfBytesWritten=0x3be8f8*=0x2000, lpOverlapped=0x0) returned 1 [0053.320] CloseHandle (hObject=0x448) returned 1 [0053.321] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\fBwW7 r5N\\kqPHTpgPgkFex.mp3", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\fBwW7 r5N\\kqPHTpgPgkFex.mp3", lpFilePart=0x0) returned 0x37 [0053.321] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\fBwW7 r5N\\kqPHTpgPgkFex.mp3.xuy", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\fBwW7 r5N\\kqPHTpgPgkFex.mp3.xuy", lpFilePart=0x0) returned 0x3b [0053.321] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0053.321] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\fBwW7 r5N\\kqPHTpgPgkFex.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\fbww7 r5n\\kqphtpgpgkfex.mp3"), fInfoLevelId=0x0, lpFileInformation=0x3be910 | out: lpFileInformation=0x3be910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11a364f0, ftCreationTime.dwHighDateTime=0x1d4629f, ftLastAccessTime.dwLowDateTime=0x39f7c490, ftLastAccessTime.dwHighDateTime=0x1d45ea9, ftLastWriteTime.dwLowDateTime=0xba08718, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0053.321] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7f0) returned 1 [0053.321] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\fBwW7 r5N\\kqPHTpgPgkFex.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\fbww7 r5n\\kqphtpgpgkfex.mp3"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\fBwW7 r5N\\kqPHTpgPgkFex.mp3.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\fbww7 r5n\\kqphtpgpgkfex.mp3.xuy")) returned 1 [0053.322] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\fBwW7 r5N\\MWDD3fMVUTnRZA.m4a", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\fBwW7 r5N\\MWDD3fMVUTnRZA.m4a", lpFilePart=0x0) returned 0x38 [0053.322] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0053.322] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\fBwW7 r5N\\MWDD3fMVUTnRZA.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\fbww7 r5n\\mwdd3fmvutnrza.m4a"), fInfoLevelId=0x0, lpFileInformation=0x2303e60 | out: lpFileInformation=0x2303e60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x911e99c0, ftCreationTime.dwHighDateTime=0x1d45840, ftLastAccessTime.dwLowDateTime=0x54e580b0, ftLastAccessTime.dwHighDateTime=0x1d45e92, ftLastWriteTime.dwLowDateTime=0x54e580b0, ftLastWriteTime.dwHighDateTime=0x1d45e92, nFileSizeHigh=0x0, nFileSizeLow=0x57bd)) returned 1 [0053.322] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0053.322] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\fBwW7 r5N\\MWDD3fMVUTnRZA.m4a", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\fBwW7 r5N\\MWDD3fMVUTnRZA.m4a", lpFilePart=0x0) returned 0x38 [0053.322] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0053.322] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\fBwW7 r5N\\MWDD3fMVUTnRZA.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\fbww7 r5n\\mwdd3fmvutnrza.m4a"), fInfoLevelId=0x0, lpFileInformation=0x2303f98 | out: lpFileInformation=0x2303f98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x911e99c0, ftCreationTime.dwHighDateTime=0x1d45840, ftLastAccessTime.dwLowDateTime=0x54e580b0, ftLastAccessTime.dwHighDateTime=0x1d45e92, ftLastWriteTime.dwLowDateTime=0x54e580b0, ftLastWriteTime.dwHighDateTime=0x1d45e92, nFileSizeHigh=0x0, nFileSizeLow=0x57bd)) returned 1 [0053.322] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0053.322] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\fBwW7 r5N\\MWDD3fMVUTnRZA.m4a", nBufferLength=0x105, lpBuffer=0x3be2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\fBwW7 r5N\\MWDD3fMVUTnRZA.m4a", lpFilePart=0x0) returned 0x38 [0053.322] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0053.322] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\fBwW7 r5N\\MWDD3fMVUTnRZA.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\fbww7 r5n\\mwdd3fmvutnrza.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0053.323] GetFileType (hFile=0x448) returned 0x1 [0053.323] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be730) returned 1 [0053.323] GetFileType (hFile=0x448) returned 0x1 [0053.323] ReadFile (in: hFile=0x448, lpBuffer=0x2306338, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be848, lpOverlapped=0x0 | out: lpBuffer=0x2306338*, lpNumberOfBytesRead=0x3be848*=0x1000, lpOverlapped=0x0) returned 1 [0053.410] CloseHandle (hObject=0x448) returned 1 [0053.410] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\fBwW7 r5N\\MWDD3fMVUTnRZA.m4a", nBufferLength=0x105, lpBuffer=0x3be2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\fBwW7 r5N\\MWDD3fMVUTnRZA.m4a", lpFilePart=0x0) returned 0x38 [0053.410] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0053.410] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\fBwW7 r5N\\MWDD3fMVUTnRZA.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\fbww7 r5n\\mwdd3fmvutnrza.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0053.411] GetFileType (hFile=0x448) returned 0x1 [0053.411] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be730) returned 1 [0053.411] GetFileType (hFile=0x448) returned 0x1 [0053.411] WriteFile (in: hFile=0x448, lpBuffer=0x2154d00*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be8f8, lpOverlapped=0x0 | out: lpBuffer=0x2154d00*, lpNumberOfBytesWritten=0x3be8f8*=0x2000, lpOverlapped=0x0) returned 1 [0053.411] CloseHandle (hObject=0x448) returned 1 [0053.412] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\fBwW7 r5N\\MWDD3fMVUTnRZA.m4a", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\fBwW7 r5N\\MWDD3fMVUTnRZA.m4a", lpFilePart=0x0) returned 0x38 [0053.412] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\fBwW7 r5N\\MWDD3fMVUTnRZA.m4a.xuy", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\fBwW7 r5N\\MWDD3fMVUTnRZA.m4a.xuy", lpFilePart=0x0) returned 0x3c [0053.412] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0053.412] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\fBwW7 r5N\\MWDD3fMVUTnRZA.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\fbww7 r5n\\mwdd3fmvutnrza.m4a"), fInfoLevelId=0x0, lpFileInformation=0x3be910 | out: lpFileInformation=0x3be910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x911e99c0, ftCreationTime.dwHighDateTime=0x1d45840, ftLastAccessTime.dwLowDateTime=0x54e580b0, ftLastAccessTime.dwHighDateTime=0x1d45e92, ftLastWriteTime.dwLowDateTime=0xbaee997, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x57bd)) returned 1 [0053.412] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7f0) returned 1 [0053.412] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\fBwW7 r5N\\MWDD3fMVUTnRZA.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\fbww7 r5n\\mwdd3fmvutnrza.m4a"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\fBwW7 r5N\\MWDD3fMVUTnRZA.m4a.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\fbww7 r5n\\mwdd3fmvutnrza.m4a.xuy")) returned 1 [0053.413] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\fBwW7 r5N\\stCGxWNbc5wFp.wav", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\fBwW7 r5N\\stCGxWNbc5wFp.wav", lpFilePart=0x0) returned 0x37 [0053.413] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0053.413] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\fBwW7 r5N\\stCGxWNbc5wFp.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\fbww7 r5n\\stcgxwnbc5wfp.wav"), fInfoLevelId=0x0, lpFileInformation=0x2182658 | out: lpFileInformation=0x2182658*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe784c90, ftCreationTime.dwHighDateTime=0x1d462b3, ftLastAccessTime.dwLowDateTime=0xc7e53ba0, ftLastAccessTime.dwHighDateTime=0x1d46031, ftLastWriteTime.dwLowDateTime=0xc7e53ba0, ftLastWriteTime.dwHighDateTime=0x1d46031, nFileSizeHigh=0x0, nFileSizeLow=0x16cce)) returned 1 [0053.413] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0053.413] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\fBwW7 r5N\\stCGxWNbc5wFp.wav", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\fBwW7 r5N\\stCGxWNbc5wFp.wav", lpFilePart=0x0) returned 0x37 [0053.413] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0053.413] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\fBwW7 r5N\\stCGxWNbc5wFp.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\fbww7 r5n\\stcgxwnbc5wfp.wav"), fInfoLevelId=0x0, lpFileInformation=0x2182788 | out: lpFileInformation=0x2182788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe784c90, ftCreationTime.dwHighDateTime=0x1d462b3, ftLastAccessTime.dwLowDateTime=0xc7e53ba0, ftLastAccessTime.dwHighDateTime=0x1d46031, ftLastWriteTime.dwLowDateTime=0xc7e53ba0, ftLastWriteTime.dwHighDateTime=0x1d46031, nFileSizeHigh=0x0, nFileSizeLow=0x16cce)) returned 1 [0053.413] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0053.413] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\fBwW7 r5N\\stCGxWNbc5wFp.wav", nBufferLength=0x105, lpBuffer=0x3be2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\fBwW7 r5N\\stCGxWNbc5wFp.wav", lpFilePart=0x0) returned 0x37 [0053.413] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0053.414] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\fBwW7 r5N\\stCGxWNbc5wFp.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\fbww7 r5n\\stcgxwnbc5wfp.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0053.414] GetFileType (hFile=0x448) returned 0x1 [0053.414] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be730) returned 1 [0053.414] GetFileType (hFile=0x448) returned 0x1 [0053.414] ReadFile (in: hFile=0x448, lpBuffer=0x2184b18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be848, lpOverlapped=0x0 | out: lpBuffer=0x2184b18*, lpNumberOfBytesRead=0x3be848*=0x1000, lpOverlapped=0x0) returned 1 [0053.425] CloseHandle (hObject=0x448) returned 1 [0053.425] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\fBwW7 r5N\\stCGxWNbc5wFp.wav", nBufferLength=0x105, lpBuffer=0x3be2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\fBwW7 r5N\\stCGxWNbc5wFp.wav", lpFilePart=0x0) returned 0x37 [0053.425] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0053.425] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\fBwW7 r5N\\stCGxWNbc5wFp.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\fbww7 r5n\\stcgxwnbc5wfp.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0053.425] GetFileType (hFile=0x448) returned 0x1 [0053.425] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be730) returned 1 [0053.425] GetFileType (hFile=0x448) returned 0x1 [0053.425] WriteFile (in: hFile=0x448, lpBuffer=0x2182898*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be8f8, lpOverlapped=0x0 | out: lpBuffer=0x2182898*, lpNumberOfBytesWritten=0x3be8f8*=0x2000, lpOverlapped=0x0) returned 1 [0053.425] CloseHandle (hObject=0x448) returned 1 [0053.427] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\fBwW7 r5N\\stCGxWNbc5wFp.wav", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\fBwW7 r5N\\stCGxWNbc5wFp.wav", lpFilePart=0x0) returned 0x37 [0053.427] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\fBwW7 r5N\\stCGxWNbc5wFp.wav.xuy", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\fBwW7 r5N\\stCGxWNbc5wFp.wav.xuy", lpFilePart=0x0) returned 0x3b [0053.427] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0053.427] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\fBwW7 r5N\\stCGxWNbc5wFp.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\fbww7 r5n\\stcgxwnbc5wfp.wav"), fInfoLevelId=0x0, lpFileInformation=0x3be910 | out: lpFileInformation=0x3be910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe784c90, ftCreationTime.dwHighDateTime=0x1d462b3, ftLastAccessTime.dwLowDateTime=0xc7e53ba0, ftLastAccessTime.dwHighDateTime=0x1d46031, ftLastWriteTime.dwLowDateTime=0xbb138c0, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x16cce)) returned 1 [0053.428] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7f0) returned 1 [0053.428] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\fBwW7 r5N\\stCGxWNbc5wFp.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\fbww7 r5n\\stcgxwnbc5wfp.wav"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\fBwW7 r5N\\stCGxWNbc5wFp.wav.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\fbww7 r5n\\stcgxwnbc5wfp.wav.xuy")) returned 1 [0053.428] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0053.428] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\NGHgpHRGY", nBufferLength=0x105, lpBuffer=0x3be3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\NGHgpHRGY", lpFilePart=0x0) returned 0x25 [0053.428] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\NGHgpHRGY\\", nBufferLength=0x105, lpBuffer=0x3be370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\NGHgpHRGY\\", lpFilePart=0x0) returned 0x26 [0053.428] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\NGHgpHRGY\\*", lpFindFileData=0x3be580 | out: lpFindFileData=0x3be580) returned 0x5d7370 [0053.429] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0053.429] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0053.429] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0053.429] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0053.429] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 0 [0053.429] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0053.429] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0053.429] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7f0) returned 1 [0053.429] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0053.429] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\NGHgpHRGY", nBufferLength=0x105, lpBuffer=0x3be3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\NGHgpHRGY", lpFilePart=0x0) returned 0x25 [0053.429] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\NGHgpHRGY\\", nBufferLength=0x105, lpBuffer=0x3be370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\NGHgpHRGY\\", lpFilePart=0x0) returned 0x26 [0053.429] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\NGHgpHRGY\\*", lpFindFileData=0x3be580 | out: lpFindFileData=0x3be580) returned 0x5d7550 [0053.430] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0053.430] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0053.430] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0053.430] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0053.430] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 0 [0053.430] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0053.430] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0053.430] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7f0) returned 1 [0053.430] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\NGHgpHRGY\\5-kIDp8-bzm7egwPyy.mp3", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\NGHgpHRGY\\5-kIDp8-bzm7egwPyy.mp3", lpFilePart=0x0) returned 0x3c [0053.430] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0053.430] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\NGHgpHRGY\\5-kIDp8-bzm7egwPyy.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\nghgphrgy\\5-kidp8-bzm7egwpyy.mp3"), fInfoLevelId=0x0, lpFileInformation=0x2202d28 | out: lpFileInformation=0x2202d28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6eaff860, ftCreationTime.dwHighDateTime=0x1d4586e, ftLastAccessTime.dwLowDateTime=0x6fc83e50, ftLastAccessTime.dwHighDateTime=0x1d45c20, ftLastWriteTime.dwLowDateTime=0x6fc83e50, ftLastWriteTime.dwHighDateTime=0x1d45c20, nFileSizeHigh=0x0, nFileSizeLow=0xf16d)) returned 1 [0053.430] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0053.430] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\NGHgpHRGY\\5-kIDp8-bzm7egwPyy.mp3", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\NGHgpHRGY\\5-kIDp8-bzm7egwPyy.mp3", lpFilePart=0x0) returned 0x3c [0053.431] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0053.431] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\NGHgpHRGY\\5-kIDp8-bzm7egwPyy.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\nghgphrgy\\5-kidp8-bzm7egwpyy.mp3"), fInfoLevelId=0x0, lpFileInformation=0x2202e70 | out: lpFileInformation=0x2202e70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6eaff860, ftCreationTime.dwHighDateTime=0x1d4586e, ftLastAccessTime.dwLowDateTime=0x6fc83e50, ftLastAccessTime.dwHighDateTime=0x1d45c20, ftLastWriteTime.dwLowDateTime=0x6fc83e50, ftLastWriteTime.dwHighDateTime=0x1d45c20, nFileSizeHigh=0x0, nFileSizeLow=0xf16d)) returned 1 [0053.431] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0053.431] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\NGHgpHRGY\\5-kIDp8-bzm7egwPyy.mp3", nBufferLength=0x105, lpBuffer=0x3be2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\NGHgpHRGY\\5-kIDp8-bzm7egwPyy.mp3", lpFilePart=0x0) returned 0x3c [0053.431] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0053.431] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\NGHgpHRGY\\5-kIDp8-bzm7egwPyy.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\nghgphrgy\\5-kidp8-bzm7egwpyy.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0053.431] GetFileType (hFile=0x448) returned 0x1 [0053.431] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be730) returned 1 [0053.431] GetFileType (hFile=0x448) returned 0x1 [0053.431] ReadFile (in: hFile=0x448, lpBuffer=0x2205230, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be848, lpOverlapped=0x0 | out: lpBuffer=0x2205230*, lpNumberOfBytesRead=0x3be848*=0x1000, lpOverlapped=0x0) returned 1 [0053.462] CloseHandle (hObject=0x448) returned 1 [0053.462] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\NGHgpHRGY\\5-kIDp8-bzm7egwPyy.mp3", nBufferLength=0x105, lpBuffer=0x3be2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\NGHgpHRGY\\5-kIDp8-bzm7egwPyy.mp3", lpFilePart=0x0) returned 0x3c [0053.462] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0053.462] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\NGHgpHRGY\\5-kIDp8-bzm7egwPyy.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\nghgphrgy\\5-kidp8-bzm7egwpyy.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0053.463] GetFileType (hFile=0x448) returned 0x1 [0053.463] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be730) returned 1 [0053.463] GetFileType (hFile=0x448) returned 0x1 [0053.463] WriteFile (in: hFile=0x448, lpBuffer=0x2202f98*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be8f8, lpOverlapped=0x0 | out: lpBuffer=0x2202f98*, lpNumberOfBytesWritten=0x3be8f8*=0x2000, lpOverlapped=0x0) returned 1 [0053.463] CloseHandle (hObject=0x448) returned 1 [0053.464] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\NGHgpHRGY\\5-kIDp8-bzm7egwPyy.mp3", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\NGHgpHRGY\\5-kIDp8-bzm7egwPyy.mp3", lpFilePart=0x0) returned 0x3c [0053.464] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\NGHgpHRGY\\5-kIDp8-bzm7egwPyy.mp3.xuy", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\NGHgpHRGY\\5-kIDp8-bzm7egwPyy.mp3.xuy", lpFilePart=0x0) returned 0x40 [0053.464] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0053.464] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\NGHgpHRGY\\5-kIDp8-bzm7egwPyy.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\nghgphrgy\\5-kidp8-bzm7egwpyy.mp3"), fInfoLevelId=0x0, lpFileInformation=0x3be910 | out: lpFileInformation=0x3be910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6eaff860, ftCreationTime.dwHighDateTime=0x1d4586e, ftLastAccessTime.dwLowDateTime=0x6fc83e50, ftLastAccessTime.dwHighDateTime=0x1d45c20, ftLastWriteTime.dwLowDateTime=0xbb5fcbf, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xf16d)) returned 1 [0053.464] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7f0) returned 1 [0053.465] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\NGHgpHRGY\\5-kIDp8-bzm7egwPyy.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\nghgphrgy\\5-kidp8-bzm7egwpyy.mp3"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\NGHgpHRGY\\5-kIDp8-bzm7egwPyy.mp3.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\nghgphrgy\\5-kidp8-bzm7egwpyy.mp3.xuy")) returned 1 [0053.465] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\NGHgpHRGY\\iwRTQe8_.m4a", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\NGHgpHRGY\\iwRTQe8_.m4a", lpFilePart=0x0) returned 0x32 [0053.465] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0053.518] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\NGHgpHRGY\\iwRTQe8_.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\nghgphrgy\\iwrtqe8_.m4a"), fInfoLevelId=0x0, lpFileInformation=0x2281598 | out: lpFileInformation=0x2281598*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2dbabd0, ftCreationTime.dwHighDateTime=0x1d465af, ftLastAccessTime.dwLowDateTime=0x4acdf230, ftLastAccessTime.dwHighDateTime=0x1d460f2, ftLastWriteTime.dwLowDateTime=0x4acdf230, ftLastWriteTime.dwHighDateTime=0x1d460f2, nFileSizeHigh=0x0, nFileSizeLow=0x5b3)) returned 1 [0053.518] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0053.518] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\NGHgpHRGY\\iwRTQe8_.m4a", nBufferLength=0x105, lpBuffer=0x3be250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\NGHgpHRGY\\iwRTQe8_.m4a", lpFilePart=0x0) returned 0x32 [0053.518] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be730) returned 1 [0053.518] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\NGHgpHRGY\\iwRTQe8_.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\nghgphrgy\\iwrtqe8_.m4a"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0053.519] GetFileType (hFile=0x448) returned 0x1 [0053.519] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0053.519] GetFileType (hFile=0x448) returned 0x1 [0053.519] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3be8c8 | out: lpFileSizeHigh=0x3be8c8*=0x0) returned 0x5b3 [0053.519] ReadFile (in: hFile=0x448, lpBuffer=0x2281da8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be7f8, lpOverlapped=0x0 | out: lpBuffer=0x2281da8*, lpNumberOfBytesRead=0x3be7f8*=0x5b3, lpOverlapped=0x0) returned 1 [0053.519] CloseHandle (hObject=0x448) returned 1 [0053.530] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\NGHgpHRGY\\iwRTQe8_.m4a", nBufferLength=0x105, lpBuffer=0x3be250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\NGHgpHRGY\\iwRTQe8_.m4a", lpFilePart=0x0) returned 0x32 [0053.530] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be730) returned 1 [0053.530] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\NGHgpHRGY\\iwRTQe8_.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\nghgphrgy\\iwrtqe8_.m4a"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0053.531] GetFileType (hFile=0x448) returned 0x1 [0053.531] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0053.531] GetFileType (hFile=0x448) returned 0x1 [0053.531] WriteFile (in: hFile=0x448, lpBuffer=0x22faa20*, nNumberOfBytesToWrite=0x5c0, lpNumberOfBytesWritten=0x3be708, lpOverlapped=0x0 | out: lpBuffer=0x22faa20*, lpNumberOfBytesWritten=0x3be708*=0x5c0, lpOverlapped=0x0) returned 1 [0053.532] CloseHandle (hObject=0x448) returned 1 [0053.533] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\NGHgpHRGY\\iwRTQe8_.m4a", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\NGHgpHRGY\\iwRTQe8_.m4a", lpFilePart=0x0) returned 0x32 [0053.533] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\NGHgpHRGY\\iwRTQe8_.m4a.xuy", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\NGHgpHRGY\\iwRTQe8_.m4a.xuy", lpFilePart=0x0) returned 0x36 [0053.533] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0053.533] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\NGHgpHRGY\\iwRTQe8_.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\nghgphrgy\\iwrtqe8_.m4a"), fInfoLevelId=0x0, lpFileInformation=0x3be910 | out: lpFileInformation=0x3be910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2dbabd0, ftCreationTime.dwHighDateTime=0x1d465af, ftLastAccessTime.dwLowDateTime=0x4acdf230, ftLastAccessTime.dwHighDateTime=0x1d460f2, ftLastWriteTime.dwLowDateTime=0xbc1e889, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x5c0)) returned 1 [0053.533] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7f0) returned 1 [0053.533] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\NGHgpHRGY\\iwRTQe8_.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\nghgphrgy\\iwrtqe8_.m4a"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\NGHgpHRGY\\iwRTQe8_.m4a.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\nghgphrgy\\iwrtqe8_.m4a.xuy")) returned 1 [0053.534] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\NGHgpHRGY\\n_6iIbpL-Dw.mp3", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\NGHgpHRGY\\n_6iIbpL-Dw.mp3", lpFilePart=0x0) returned 0x35 [0053.534] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0053.534] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\NGHgpHRGY\\n_6iIbpL-Dw.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\nghgphrgy\\n_6iibpl-dw.mp3"), fInfoLevelId=0x0, lpFileInformation=0x22fbc10 | out: lpFileInformation=0x22fbc10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc0bf800, ftCreationTime.dwHighDateTime=0x1d464e4, ftLastAccessTime.dwLowDateTime=0x363f4000, ftLastAccessTime.dwHighDateTime=0x1d4560f, ftLastWriteTime.dwLowDateTime=0x363f4000, ftLastWriteTime.dwHighDateTime=0x1d4560f, nFileSizeHigh=0x0, nFileSizeLow=0x48b1)) returned 1 [0053.534] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0053.534] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\NGHgpHRGY\\n_6iIbpL-Dw.mp3", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\NGHgpHRGY\\n_6iIbpL-Dw.mp3", lpFilePart=0x0) returned 0x35 [0053.534] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0053.534] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\NGHgpHRGY\\n_6iIbpL-Dw.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\nghgphrgy\\n_6iibpl-dw.mp3"), fInfoLevelId=0x0, lpFileInformation=0x22fbd38 | out: lpFileInformation=0x22fbd38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc0bf800, ftCreationTime.dwHighDateTime=0x1d464e4, ftLastAccessTime.dwLowDateTime=0x363f4000, ftLastAccessTime.dwHighDateTime=0x1d4560f, ftLastWriteTime.dwLowDateTime=0x363f4000, ftLastWriteTime.dwHighDateTime=0x1d4560f, nFileSizeHigh=0x0, nFileSizeLow=0x48b1)) returned 1 [0053.535] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0053.535] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\NGHgpHRGY\\n_6iIbpL-Dw.mp3", nBufferLength=0x105, lpBuffer=0x3be2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\NGHgpHRGY\\n_6iIbpL-Dw.mp3", lpFilePart=0x0) returned 0x35 [0053.535] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0053.535] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\NGHgpHRGY\\n_6iIbpL-Dw.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\nghgphrgy\\n_6iibpl-dw.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0053.535] GetFileType (hFile=0x448) returned 0x1 [0053.535] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be730) returned 1 [0053.535] GetFileType (hFile=0x448) returned 0x1 [0053.535] ReadFile (in: hFile=0x448, lpBuffer=0x22fe0b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be848, lpOverlapped=0x0 | out: lpBuffer=0x22fe0b8*, lpNumberOfBytesRead=0x3be848*=0x1000, lpOverlapped=0x0) returned 1 [0053.622] CloseHandle (hObject=0x448) returned 1 [0053.623] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\NGHgpHRGY\\n_6iIbpL-Dw.mp3", nBufferLength=0x105, lpBuffer=0x3be2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\NGHgpHRGY\\n_6iIbpL-Dw.mp3", lpFilePart=0x0) returned 0x35 [0053.623] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0053.623] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\NGHgpHRGY\\n_6iIbpL-Dw.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\nghgphrgy\\n_6iibpl-dw.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0053.623] GetFileType (hFile=0x448) returned 0x1 [0053.623] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be730) returned 1 [0053.623] GetFileType (hFile=0x448) returned 0x1 [0053.623] WriteFile (in: hFile=0x448, lpBuffer=0x2154c80*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be8f8, lpOverlapped=0x0 | out: lpBuffer=0x2154c80*, lpNumberOfBytesWritten=0x3be8f8*=0x2000, lpOverlapped=0x0) returned 1 [0053.623] CloseHandle (hObject=0x448) returned 1 [0053.624] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\NGHgpHRGY\\n_6iIbpL-Dw.mp3", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\NGHgpHRGY\\n_6iIbpL-Dw.mp3", lpFilePart=0x0) returned 0x35 [0053.624] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\NGHgpHRGY\\n_6iIbpL-Dw.mp3.xuy", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\NGHgpHRGY\\n_6iIbpL-Dw.mp3.xuy", lpFilePart=0x0) returned 0x39 [0053.624] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0053.624] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\NGHgpHRGY\\n_6iIbpL-Dw.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\nghgphrgy\\n_6iibpl-dw.mp3"), fInfoLevelId=0x0, lpFileInformation=0x3be910 | out: lpFileInformation=0x3be910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc0bf800, ftCreationTime.dwHighDateTime=0x1d464e4, ftLastAccessTime.dwLowDateTime=0x363f4000, ftLastAccessTime.dwHighDateTime=0x1d4560f, ftLastWriteTime.dwLowDateTime=0xbd03891, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x48b1)) returned 1 [0053.624] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7f0) returned 1 [0053.625] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\NGHgpHRGY\\n_6iIbpL-Dw.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\nghgphrgy\\n_6iibpl-dw.mp3"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\NGHgpHRGY\\n_6iIbpL-Dw.mp3.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\nghgphrgy\\n_6iibpl-dw.mp3.xuy")) returned 1 [0053.625] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0053.625] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl", nBufferLength=0x105, lpBuffer=0x3be3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl", lpFilePart=0x0) returned 0x2e [0053.625] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\", nBufferLength=0x105, lpBuffer=0x3be370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\", lpFilePart=0x0) returned 0x2f [0053.625] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\*", lpFindFileData=0x3be580 | out: lpFindFileData=0x3be580) returned 0x5d7c70 [0053.625] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0053.626] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0053.626] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0053.626] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0053.626] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0053.626] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0053.626] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 0 [0053.626] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0053.626] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0053.626] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7f0) returned 1 [0053.626] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0053.626] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl", nBufferLength=0x105, lpBuffer=0x3be3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl", lpFilePart=0x0) returned 0x2e [0053.626] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\", nBufferLength=0x105, lpBuffer=0x3be370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\", lpFilePart=0x0) returned 0x2f [0053.627] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\*", lpFindFileData=0x3be580 | out: lpFindFileData=0x3be580) returned 0x5d7910 [0053.627] FindNextFileW (in: hFindFile=0x5d7910, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0053.627] FindNextFileW (in: hFindFile=0x5d7910, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0053.627] FindNextFileW (in: hFindFile=0x5d7910, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0053.627] FindNextFileW (in: hFindFile=0x5d7910, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0053.627] FindNextFileW (in: hFindFile=0x5d7910, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0053.627] FindNextFileW (in: hFindFile=0x5d7910, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0053.627] FindNextFileW (in: hFindFile=0x5d7910, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 0 [0053.628] FindClose (in: hFindFile=0x5d7910 | out: hFindFile=0x5d7910) returned 1 [0053.628] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0053.628] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7f0) returned 1 [0053.628] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\-e3Mp2d-PI.m4a", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\-e3Mp2d-PI.m4a", lpFilePart=0x0) returned 0x3d [0053.628] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0053.628] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\-e3Mp2d-PI.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\v4m4zk zj0onuyjxil\\-e3mp2d-pi.m4a"), fInfoLevelId=0x0, lpFileInformation=0x217cd78 | out: lpFileInformation=0x217cd78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x790331c0, ftCreationTime.dwHighDateTime=0x1d45a6b, ftLastAccessTime.dwLowDateTime=0x4de0c9a0, ftLastAccessTime.dwHighDateTime=0x1d45d93, ftLastWriteTime.dwLowDateTime=0x4de0c9a0, ftLastWriteTime.dwHighDateTime=0x1d45d93, nFileSizeHigh=0x0, nFileSizeLow=0x8b98)) returned 1 [0053.628] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0053.628] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\-e3Mp2d-PI.m4a", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\-e3Mp2d-PI.m4a", lpFilePart=0x0) returned 0x3d [0053.628] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0053.628] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\-e3Mp2d-PI.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\v4m4zk zj0onuyjxil\\-e3mp2d-pi.m4a"), fInfoLevelId=0x0, lpFileInformation=0x217ceb0 | out: lpFileInformation=0x217ceb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x790331c0, ftCreationTime.dwHighDateTime=0x1d45a6b, ftLastAccessTime.dwLowDateTime=0x4de0c9a0, ftLastAccessTime.dwHighDateTime=0x1d45d93, ftLastWriteTime.dwLowDateTime=0x4de0c9a0, ftLastWriteTime.dwHighDateTime=0x1d45d93, nFileSizeHigh=0x0, nFileSizeLow=0x8b98)) returned 1 [0053.628] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0053.628] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\-e3Mp2d-PI.m4a", nBufferLength=0x105, lpBuffer=0x3be2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\-e3Mp2d-PI.m4a", lpFilePart=0x0) returned 0x3d [0053.628] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0053.628] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\-e3Mp2d-PI.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\v4m4zk zj0onuyjxil\\-e3mp2d-pi.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0053.628] GetFileType (hFile=0x448) returned 0x1 [0053.628] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be730) returned 1 [0053.629] GetFileType (hFile=0x448) returned 0x1 [0053.629] ReadFile (in: hFile=0x448, lpBuffer=0x217f250, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be848, lpOverlapped=0x0 | out: lpBuffer=0x217f250*, lpNumberOfBytesRead=0x3be848*=0x1000, lpOverlapped=0x0) returned 1 [0053.639] CloseHandle (hObject=0x448) returned 1 [0053.639] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\-e3Mp2d-PI.m4a", nBufferLength=0x105, lpBuffer=0x3be2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\-e3Mp2d-PI.m4a", lpFilePart=0x0) returned 0x3d [0053.639] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0053.639] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\-e3Mp2d-PI.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\v4m4zk zj0onuyjxil\\-e3mp2d-pi.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0053.639] GetFileType (hFile=0x448) returned 0x1 [0053.639] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be730) returned 1 [0053.639] GetFileType (hFile=0x448) returned 0x1 [0053.639] WriteFile (in: hFile=0x448, lpBuffer=0x217cfc8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be8f8, lpOverlapped=0x0 | out: lpBuffer=0x217cfc8*, lpNumberOfBytesWritten=0x3be8f8*=0x2000, lpOverlapped=0x0) returned 1 [0053.639] CloseHandle (hObject=0x448) returned 1 [0053.640] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\-e3Mp2d-PI.m4a", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\-e3Mp2d-PI.m4a", lpFilePart=0x0) returned 0x3d [0053.640] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\-e3Mp2d-PI.m4a.xuy", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\-e3Mp2d-PI.m4a.xuy", lpFilePart=0x0) returned 0x41 [0053.640] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0053.640] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\-e3Mp2d-PI.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\v4m4zk zj0onuyjxil\\-e3mp2d-pi.m4a"), fInfoLevelId=0x0, lpFileInformation=0x3be910 | out: lpFileInformation=0x3be910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x790331c0, ftCreationTime.dwHighDateTime=0x1d45a6b, ftLastAccessTime.dwLowDateTime=0x4de0c9a0, ftLastAccessTime.dwHighDateTime=0x1d45d93, ftLastWriteTime.dwLowDateTime=0xbd2999c, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x8b98)) returned 1 [0053.641] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7f0) returned 1 [0053.641] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\-e3Mp2d-PI.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\v4m4zk zj0onuyjxil\\-e3mp2d-pi.m4a"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\-e3Mp2d-PI.m4a.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\v4m4zk zj0onuyjxil\\-e3mp2d-pi.m4a.xuy")) returned 1 [0053.641] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\a3QnHpY8WxK1ea.wav", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\a3QnHpY8WxK1ea.wav", lpFilePart=0x0) returned 0x41 [0053.641] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0053.641] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\a3QnHpY8WxK1ea.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\v4m4zk zj0onuyjxil\\a3qnhpy8wxk1ea.wav"), fInfoLevelId=0x0, lpFileInformation=0x21fb5a8 | out: lpFileInformation=0x21fb5a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa63e560, ftCreationTime.dwHighDateTime=0x1d4600c, ftLastAccessTime.dwLowDateTime=0x350e7a30, ftLastAccessTime.dwHighDateTime=0x1d456a9, ftLastWriteTime.dwLowDateTime=0x350e7a30, ftLastWriteTime.dwHighDateTime=0x1d456a9, nFileSizeHigh=0x0, nFileSizeLow=0x6b72)) returned 1 [0053.641] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0053.641] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\a3QnHpY8WxK1ea.wav", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\a3QnHpY8WxK1ea.wav", lpFilePart=0x0) returned 0x41 [0053.641] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0053.641] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\a3QnHpY8WxK1ea.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\v4m4zk zj0onuyjxil\\a3qnhpy8wxk1ea.wav"), fInfoLevelId=0x0, lpFileInformation=0x21fb6f0 | out: lpFileInformation=0x21fb6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa63e560, ftCreationTime.dwHighDateTime=0x1d4600c, ftLastAccessTime.dwLowDateTime=0x350e7a30, ftLastAccessTime.dwHighDateTime=0x1d456a9, ftLastWriteTime.dwLowDateTime=0x350e7a30, ftLastWriteTime.dwHighDateTime=0x1d456a9, nFileSizeHigh=0x0, nFileSizeLow=0x6b72)) returned 1 [0053.642] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0053.642] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\a3QnHpY8WxK1ea.wav", nBufferLength=0x105, lpBuffer=0x3be2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\a3QnHpY8WxK1ea.wav", lpFilePart=0x0) returned 0x41 [0053.642] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0053.642] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\a3QnHpY8WxK1ea.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\v4m4zk zj0onuyjxil\\a3qnhpy8wxk1ea.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0053.642] GetFileType (hFile=0x448) returned 0x1 [0053.642] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be730) returned 1 [0053.642] GetFileType (hFile=0x448) returned 0x1 [0053.642] ReadFile (in: hFile=0x448, lpBuffer=0x21fdab0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be848, lpOverlapped=0x0 | out: lpBuffer=0x21fdab0*, lpNumberOfBytesRead=0x3be848*=0x1000, lpOverlapped=0x0) returned 1 [0053.652] CloseHandle (hObject=0x448) returned 1 [0053.652] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\a3QnHpY8WxK1ea.wav", nBufferLength=0x105, lpBuffer=0x3be2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\a3QnHpY8WxK1ea.wav", lpFilePart=0x0) returned 0x41 [0053.652] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0053.652] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\a3QnHpY8WxK1ea.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\v4m4zk zj0onuyjxil\\a3qnhpy8wxk1ea.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0053.652] GetFileType (hFile=0x448) returned 0x1 [0053.652] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be730) returned 1 [0053.652] GetFileType (hFile=0x448) returned 0x1 [0053.652] WriteFile (in: hFile=0x448, lpBuffer=0x21fb818*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be8f8, lpOverlapped=0x0 | out: lpBuffer=0x21fb818*, lpNumberOfBytesWritten=0x3be8f8*=0x2000, lpOverlapped=0x0) returned 1 [0053.652] CloseHandle (hObject=0x448) returned 1 [0053.681] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\a3QnHpY8WxK1ea.wav", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\a3QnHpY8WxK1ea.wav", lpFilePart=0x0) returned 0x41 [0053.681] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\a3QnHpY8WxK1ea.wav.xuy", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\a3QnHpY8WxK1ea.wav.xuy", lpFilePart=0x0) returned 0x45 [0053.681] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0053.681] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\a3QnHpY8WxK1ea.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\v4m4zk zj0onuyjxil\\a3qnhpy8wxk1ea.wav"), fInfoLevelId=0x0, lpFileInformation=0x3be910 | out: lpFileInformation=0x3be910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa63e560, ftCreationTime.dwHighDateTime=0x1d4600c, ftLastAccessTime.dwLowDateTime=0x350e7a30, ftLastAccessTime.dwHighDateTime=0x1d456a9, ftLastWriteTime.dwLowDateTime=0xbd75dfa, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x6b72)) returned 1 [0053.681] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7f0) returned 1 [0053.681] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\a3QnHpY8WxK1ea.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\v4m4zk zj0onuyjxil\\a3qnhpy8wxk1ea.wav"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\a3QnHpY8WxK1ea.wav.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\v4m4zk zj0onuyjxil\\a3qnhpy8wxk1ea.wav.xuy")) returned 1 [0053.682] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\jKcWe03_Z1ou wMT.m4a", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\jKcWe03_Z1ou wMT.m4a", lpFilePart=0x0) returned 0x43 [0053.682] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0053.682] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\jKcWe03_Z1ou wMT.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\v4m4zk zj0onuyjxil\\jkcwe03_z1ou wmt.m4a"), fInfoLevelId=0x0, lpFileInformation=0x2279e30 | out: lpFileInformation=0x2279e30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2aa50a30, ftCreationTime.dwHighDateTime=0x1d463d5, ftLastAccessTime.dwLowDateTime=0x45b39de0, ftLastAccessTime.dwHighDateTime=0x1d46444, ftLastWriteTime.dwLowDateTime=0x45b39de0, ftLastWriteTime.dwHighDateTime=0x1d46444, nFileSizeHigh=0x0, nFileSizeLow=0x1278f)) returned 1 [0053.682] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0053.682] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\jKcWe03_Z1ou wMT.m4a", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\jKcWe03_Z1ou wMT.m4a", lpFilePart=0x0) returned 0x43 [0053.682] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0053.682] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\jKcWe03_Z1ou wMT.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\v4m4zk zj0onuyjxil\\jkcwe03_z1ou wmt.m4a"), fInfoLevelId=0x0, lpFileInformation=0x2279f80 | out: lpFileInformation=0x2279f80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2aa50a30, ftCreationTime.dwHighDateTime=0x1d463d5, ftLastAccessTime.dwLowDateTime=0x45b39de0, ftLastAccessTime.dwHighDateTime=0x1d46444, ftLastWriteTime.dwLowDateTime=0x45b39de0, ftLastWriteTime.dwHighDateTime=0x1d46444, nFileSizeHigh=0x0, nFileSizeLow=0x1278f)) returned 1 [0053.683] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0053.683] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\jKcWe03_Z1ou wMT.m4a", nBufferLength=0x105, lpBuffer=0x3be2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\jKcWe03_Z1ou wMT.m4a", lpFilePart=0x0) returned 0x43 [0053.683] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0053.683] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\jKcWe03_Z1ou wMT.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\v4m4zk zj0onuyjxil\\jkcwe03_z1ou wmt.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0053.683] GetFileType (hFile=0x448) returned 0x1 [0053.683] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be730) returned 1 [0053.683] GetFileType (hFile=0x448) returned 0x1 [0053.683] ReadFile (in: hFile=0x448, lpBuffer=0x227c350, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be848, lpOverlapped=0x0 | out: lpBuffer=0x227c350*, lpNumberOfBytesRead=0x3be848*=0x1000, lpOverlapped=0x0) returned 1 [0053.693] CloseHandle (hObject=0x448) returned 1 [0053.693] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\jKcWe03_Z1ou wMT.m4a", nBufferLength=0x105, lpBuffer=0x3be2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\jKcWe03_Z1ou wMT.m4a", lpFilePart=0x0) returned 0x43 [0053.693] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0053.694] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\jKcWe03_Z1ou wMT.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\v4m4zk zj0onuyjxil\\jkcwe03_z1ou wmt.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0053.694] GetFileType (hFile=0x448) returned 0x1 [0053.694] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be730) returned 1 [0053.694] GetFileType (hFile=0x448) returned 0x1 [0053.694] WriteFile (in: hFile=0x448, lpBuffer=0x227a0b0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be8f8, lpOverlapped=0x0 | out: lpBuffer=0x227a0b0*, lpNumberOfBytesWritten=0x3be8f8*=0x2000, lpOverlapped=0x0) returned 1 [0053.694] CloseHandle (hObject=0x448) returned 1 [0053.696] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\jKcWe03_Z1ou wMT.m4a", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\jKcWe03_Z1ou wMT.m4a", lpFilePart=0x0) returned 0x43 [0053.696] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\jKcWe03_Z1ou wMT.m4a.xuy", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\jKcWe03_Z1ou wMT.m4a.xuy", lpFilePart=0x0) returned 0x47 [0053.696] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0053.696] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\jKcWe03_Z1ou wMT.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\v4m4zk zj0onuyjxil\\jkcwe03_z1ou wmt.m4a"), fInfoLevelId=0x0, lpFileInformation=0x3be910 | out: lpFileInformation=0x3be910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2aa50a30, ftCreationTime.dwHighDateTime=0x1d463d5, ftLastAccessTime.dwLowDateTime=0x45b39de0, ftLastAccessTime.dwHighDateTime=0x1d46444, ftLastWriteTime.dwLowDateTime=0xbd9bfae, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x1278f)) returned 1 [0053.696] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7f0) returned 1 [0053.696] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\jKcWe03_Z1ou wMT.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\v4m4zk zj0onuyjxil\\jkcwe03_z1ou wmt.m4a"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\jKcWe03_Z1ou wMT.m4a.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\v4m4zk zj0onuyjxil\\jkcwe03_z1ou wmt.m4a.xuy")) returned 1 [0053.697] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0053.697] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\qrA9hvnxQuIXrz-kBi", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\qrA9hvnxQuIXrz-kBi", lpFilePart=0x0) returned 0x41 [0053.697] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\qrA9hvnxQuIXrz-kBi\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\qrA9hvnxQuIXrz-kBi\\", lpFilePart=0x0) returned 0x42 [0053.697] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\qrA9hvnxQuIXrz-kBi\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d78b0 [0053.697] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0053.697] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0053.697] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0053.698] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0053.698] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0053.698] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0053.698] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0053.698] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0053.698] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0053.698] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0053.698] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\qrA9hvnxQuIXrz-kBi", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\qrA9hvnxQuIXrz-kBi", lpFilePart=0x0) returned 0x41 [0053.698] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\qrA9hvnxQuIXrz-kBi\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\qrA9hvnxQuIXrz-kBi\\", lpFilePart=0x0) returned 0x42 [0053.698] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\qrA9hvnxQuIXrz-kBi\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d7af0 [0053.698] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0053.698] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0053.699] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0053.699] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0053.699] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0053.699] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0053.699] FindClose (in: hFindFile=0x5d7af0 | out: hFindFile=0x5d7af0) returned 1 [0053.699] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0053.699] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0053.699] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\qrA9hvnxQuIXrz-kBi\\DZwan0p.m4a", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\qrA9hvnxQuIXrz-kBi\\DZwan0p.m4a", lpFilePart=0x0) returned 0x4d [0053.699] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0053.699] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\qrA9hvnxQuIXrz-kBi\\DZwan0p.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\v4m4zk zj0onuyjxil\\qra9hvnxquixrz-kbi\\dzwan0p.m4a"), fInfoLevelId=0x0, lpFileInformation=0x22fb1c8 | out: lpFileInformation=0x22fb1c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42292e20, ftCreationTime.dwHighDateTime=0x1d46150, ftLastAccessTime.dwLowDateTime=0x4a7ffd0, ftLastAccessTime.dwHighDateTime=0x1d45efe, ftLastWriteTime.dwLowDateTime=0x4a7ffd0, ftLastWriteTime.dwHighDateTime=0x1d45efe, nFileSizeHigh=0x0, nFileSizeLow=0x83e7)) returned 1 [0053.699] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0053.699] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\qrA9hvnxQuIXrz-kBi\\DZwan0p.m4a", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\qrA9hvnxQuIXrz-kBi\\DZwan0p.m4a", lpFilePart=0x0) returned 0x4d [0053.699] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0053.699] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\qrA9hvnxQuIXrz-kBi\\DZwan0p.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\v4m4zk zj0onuyjxil\\qra9hvnxquixrz-kbi\\dzwan0p.m4a"), fInfoLevelId=0x0, lpFileInformation=0x22fb318 | out: lpFileInformation=0x22fb318*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42292e20, ftCreationTime.dwHighDateTime=0x1d46150, ftLastAccessTime.dwLowDateTime=0x4a7ffd0, ftLastAccessTime.dwHighDateTime=0x1d45efe, ftLastWriteTime.dwLowDateTime=0x4a7ffd0, ftLastWriteTime.dwHighDateTime=0x1d45efe, nFileSizeHigh=0x0, nFileSizeLow=0x83e7)) returned 1 [0053.700] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0053.700] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\qrA9hvnxQuIXrz-kBi\\DZwan0p.m4a", nBufferLength=0x105, lpBuffer=0x3be270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\qrA9hvnxQuIXrz-kBi\\DZwan0p.m4a", lpFilePart=0x0) returned 0x4d [0053.700] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0053.700] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\qrA9hvnxQuIXrz-kBi\\DZwan0p.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\v4m4zk zj0onuyjxil\\qra9hvnxquixrz-kbi\\dzwan0p.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0053.700] GetFileType (hFile=0x448) returned 0x1 [0053.700] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6c0) returned 1 [0053.700] GetFileType (hFile=0x448) returned 0x1 [0053.700] ReadFile (in: hFile=0x448, lpBuffer=0x22fd6e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be7d8, lpOverlapped=0x0 | out: lpBuffer=0x22fd6e8*, lpNumberOfBytesRead=0x3be7d8*=0x1000, lpOverlapped=0x0) returned 1 [0053.740] CloseHandle (hObject=0x448) returned 1 [0053.740] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\qrA9hvnxQuIXrz-kBi\\DZwan0p.m4a", nBufferLength=0x105, lpBuffer=0x3be270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\qrA9hvnxQuIXrz-kBi\\DZwan0p.m4a", lpFilePart=0x0) returned 0x4d [0053.740] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0053.740] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\qrA9hvnxQuIXrz-kBi\\DZwan0p.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\v4m4zk zj0onuyjxil\\qra9hvnxquixrz-kbi\\dzwan0p.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0053.740] GetFileType (hFile=0x448) returned 0x1 [0053.740] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6c0) returned 1 [0053.740] GetFileType (hFile=0x448) returned 0x1 [0053.740] WriteFile (in: hFile=0x448, lpBuffer=0x2154f28*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be888, lpOverlapped=0x0 | out: lpBuffer=0x2154f28*, lpNumberOfBytesWritten=0x3be888*=0x2000, lpOverlapped=0x0) returned 1 [0053.741] CloseHandle (hObject=0x448) returned 1 [0053.742] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\qrA9hvnxQuIXrz-kBi\\DZwan0p.m4a", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\qrA9hvnxQuIXrz-kBi\\DZwan0p.m4a", lpFilePart=0x0) returned 0x4d [0053.742] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\qrA9hvnxQuIXrz-kBi\\DZwan0p.m4a.xuy", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\qrA9hvnxQuIXrz-kBi\\DZwan0p.m4a.xuy", lpFilePart=0x0) returned 0x51 [0053.742] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0053.742] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\qrA9hvnxQuIXrz-kBi\\DZwan0p.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\v4m4zk zj0onuyjxil\\qra9hvnxquixrz-kbi\\dzwan0p.m4a"), fInfoLevelId=0x0, lpFileInformation=0x3be8a0 | out: lpFileInformation=0x3be8a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42292e20, ftCreationTime.dwHighDateTime=0x1d46150, ftLastAccessTime.dwLowDateTime=0x4a7ffd0, ftLastAccessTime.dwHighDateTime=0x1d45efe, ftLastWriteTime.dwLowDateTime=0xbe0e69d, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x83e7)) returned 1 [0053.742] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0053.742] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\qrA9hvnxQuIXrz-kBi\\DZwan0p.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\v4m4zk zj0onuyjxil\\qra9hvnxquixrz-kbi\\dzwan0p.m4a"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\qrA9hvnxQuIXrz-kBi\\DZwan0p.m4a.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\v4m4zk zj0onuyjxil\\qra9hvnxquixrz-kbi\\dzwan0p.m4a.xuy")) returned 1 [0053.743] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\qrA9hvnxQuIXrz-kBi\\EH77pChgN.wav", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\qrA9hvnxQuIXrz-kBi\\EH77pChgN.wav", lpFilePart=0x0) returned 0x4f [0053.743] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0053.743] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\qrA9hvnxQuIXrz-kBi\\EH77pChgN.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\v4m4zk zj0onuyjxil\\qra9hvnxquixrz-kbi\\eh77pchgn.wav"), fInfoLevelId=0x0, lpFileInformation=0x2179d40 | out: lpFileInformation=0x2179d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa9bf610, ftCreationTime.dwHighDateTime=0x1d45fc8, ftLastAccessTime.dwLowDateTime=0x6bed0700, ftLastAccessTime.dwHighDateTime=0x1d45d80, ftLastWriteTime.dwLowDateTime=0x6bed0700, ftLastWriteTime.dwHighDateTime=0x1d45d80, nFileSizeHigh=0x0, nFileSizeLow=0xf373)) returned 1 [0053.743] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0053.743] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\qrA9hvnxQuIXrz-kBi\\EH77pChgN.wav", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\qrA9hvnxQuIXrz-kBi\\EH77pChgN.wav", lpFilePart=0x0) returned 0x4f [0053.743] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0053.743] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\qrA9hvnxQuIXrz-kBi\\EH77pChgN.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\v4m4zk zj0onuyjxil\\qra9hvnxquixrz-kbi\\eh77pchgn.wav"), fInfoLevelId=0x0, lpFileInformation=0x2179e98 | out: lpFileInformation=0x2179e98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa9bf610, ftCreationTime.dwHighDateTime=0x1d45fc8, ftLastAccessTime.dwLowDateTime=0x6bed0700, ftLastAccessTime.dwHighDateTime=0x1d45d80, ftLastWriteTime.dwLowDateTime=0x6bed0700, ftLastWriteTime.dwHighDateTime=0x1d45d80, nFileSizeHigh=0x0, nFileSizeLow=0xf373)) returned 1 [0053.743] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0053.743] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\qrA9hvnxQuIXrz-kBi\\EH77pChgN.wav", nBufferLength=0x105, lpBuffer=0x3be270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\qrA9hvnxQuIXrz-kBi\\EH77pChgN.wav", lpFilePart=0x0) returned 0x4f [0053.743] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0053.743] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\qrA9hvnxQuIXrz-kBi\\EH77pChgN.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\v4m4zk zj0onuyjxil\\qra9hvnxquixrz-kbi\\eh77pchgn.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0053.743] GetFileType (hFile=0x448) returned 0x1 [0053.743] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6c0) returned 1 [0053.743] GetFileType (hFile=0x448) returned 0x1 [0053.743] ReadFile (in: hFile=0x448, lpBuffer=0x217c278, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be7d8, lpOverlapped=0x0 | out: lpBuffer=0x217c278*, lpNumberOfBytesRead=0x3be7d8*=0x1000, lpOverlapped=0x0) returned 1 [0053.754] CloseHandle (hObject=0x448) returned 1 [0053.754] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\qrA9hvnxQuIXrz-kBi\\EH77pChgN.wav", nBufferLength=0x105, lpBuffer=0x3be270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\qrA9hvnxQuIXrz-kBi\\EH77pChgN.wav", lpFilePart=0x0) returned 0x4f [0053.754] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0053.755] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\qrA9hvnxQuIXrz-kBi\\EH77pChgN.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\v4m4zk zj0onuyjxil\\qra9hvnxquixrz-kbi\\eh77pchgn.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0053.755] GetFileType (hFile=0x448) returned 0x1 [0053.755] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6c0) returned 1 [0053.755] GetFileType (hFile=0x448) returned 0x1 [0053.755] WriteFile (in: hFile=0x448, lpBuffer=0x2179fd0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be888, lpOverlapped=0x0 | out: lpBuffer=0x2179fd0*, lpNumberOfBytesWritten=0x3be888*=0x2000, lpOverlapped=0x0) returned 1 [0053.755] CloseHandle (hObject=0x448) returned 1 [0053.756] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\qrA9hvnxQuIXrz-kBi\\EH77pChgN.wav", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\qrA9hvnxQuIXrz-kBi\\EH77pChgN.wav", lpFilePart=0x0) returned 0x4f [0053.757] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\qrA9hvnxQuIXrz-kBi\\EH77pChgN.wav.xuy", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\qrA9hvnxQuIXrz-kBi\\EH77pChgN.wav.xuy", lpFilePart=0x0) returned 0x53 [0053.757] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0053.757] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\qrA9hvnxQuIXrz-kBi\\EH77pChgN.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\v4m4zk zj0onuyjxil\\qra9hvnxquixrz-kbi\\eh77pchgn.wav"), fInfoLevelId=0x0, lpFileInformation=0x3be8a0 | out: lpFileInformation=0x3be8a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa9bf610, ftCreationTime.dwHighDateTime=0x1d45fc8, ftLastAccessTime.dwLowDateTime=0x6bed0700, ftLastAccessTime.dwHighDateTime=0x1d45d80, ftLastWriteTime.dwLowDateTime=0xbe34a0e, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xf373)) returned 1 [0053.757] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0053.757] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\qrA9hvnxQuIXrz-kBi\\EH77pChgN.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\v4m4zk zj0onuyjxil\\qra9hvnxquixrz-kbi\\eh77pchgn.wav"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\qrA9hvnxQuIXrz-kBi\\EH77pChgN.wav.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\v4m4zk zj0onuyjxil\\qra9hvnxquixrz-kbi\\eh77pchgn.wav.xuy")) returned 1 [0053.757] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\qrA9hvnxQuIXrz-kBi\\y sfavt_6-uR zUfBzh.mp3", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\qrA9hvnxQuIXrz-kBi\\y sfavt_6-uR zUfBzh.mp3", lpFilePart=0x0) returned 0x59 [0053.757] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0053.757] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\qrA9hvnxQuIXrz-kBi\\y sfavt_6-uR zUfBzh.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\v4m4zk zj0onuyjxil\\qra9hvnxquixrz-kbi\\y sfavt_6-ur zufbzh.mp3"), fInfoLevelId=0x0, lpFileInformation=0x21f8650 | out: lpFileInformation=0x21f8650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60cbebd0, ftCreationTime.dwHighDateTime=0x1d45fa0, ftLastAccessTime.dwLowDateTime=0x24aad950, ftLastAccessTime.dwHighDateTime=0x1d45996, ftLastWriteTime.dwLowDateTime=0x24aad950, ftLastWriteTime.dwHighDateTime=0x1d45996, nFileSizeHigh=0x0, nFileSizeLow=0x1646)) returned 1 [0053.758] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0053.758] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\qrA9hvnxQuIXrz-kBi\\y sfavt_6-uR zUfBzh.mp3", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\qrA9hvnxQuIXrz-kBi\\y sfavt_6-uR zUfBzh.mp3", lpFilePart=0x0) returned 0x59 [0053.758] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0053.758] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\qrA9hvnxQuIXrz-kBi\\y sfavt_6-uR zUfBzh.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\v4m4zk zj0onuyjxil\\qra9hvnxquixrz-kbi\\y sfavt_6-ur zufbzh.mp3"), fInfoLevelId=0x0, lpFileInformation=0x21f87d0 | out: lpFileInformation=0x21f87d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60cbebd0, ftCreationTime.dwHighDateTime=0x1d45fa0, ftLastAccessTime.dwLowDateTime=0x24aad950, ftLastAccessTime.dwHighDateTime=0x1d45996, ftLastWriteTime.dwLowDateTime=0x24aad950, ftLastWriteTime.dwHighDateTime=0x1d45996, nFileSizeHigh=0x0, nFileSizeLow=0x1646)) returned 1 [0053.758] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0053.758] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\qrA9hvnxQuIXrz-kBi\\y sfavt_6-uR zUfBzh.mp3", nBufferLength=0x105, lpBuffer=0x3be270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\qrA9hvnxQuIXrz-kBi\\y sfavt_6-uR zUfBzh.mp3", lpFilePart=0x0) returned 0x59 [0053.758] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0053.758] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\qrA9hvnxQuIXrz-kBi\\y sfavt_6-uR zUfBzh.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\v4m4zk zj0onuyjxil\\qra9hvnxquixrz-kbi\\y sfavt_6-ur zufbzh.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0053.758] GetFileType (hFile=0x448) returned 0x1 [0053.758] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6c0) returned 1 [0053.758] GetFileType (hFile=0x448) returned 0x1 [0053.758] ReadFile (in: hFile=0x448, lpBuffer=0x21fac00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be7d8, lpOverlapped=0x0 | out: lpBuffer=0x21fac00*, lpNumberOfBytesRead=0x3be7d8*=0x1000, lpOverlapped=0x0) returned 1 [0053.881] CloseHandle (hObject=0x448) returned 1 [0053.881] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\qrA9hvnxQuIXrz-kBi\\y sfavt_6-uR zUfBzh.mp3", nBufferLength=0x105, lpBuffer=0x3be270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\qrA9hvnxQuIXrz-kBi\\y sfavt_6-uR zUfBzh.mp3", lpFilePart=0x0) returned 0x59 [0053.881] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0053.881] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\qrA9hvnxQuIXrz-kBi\\y sfavt_6-uR zUfBzh.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\v4m4zk zj0onuyjxil\\qra9hvnxquixrz-kbi\\y sfavt_6-ur zufbzh.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0053.882] GetFileType (hFile=0x448) returned 0x1 [0053.882] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6c0) returned 1 [0053.882] GetFileType (hFile=0x448) returned 0x1 [0053.882] WriteFile (in: hFile=0x448, lpBuffer=0x21f8930*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be888, lpOverlapped=0x0 | out: lpBuffer=0x21f8930*, lpNumberOfBytesWritten=0x3be888*=0x2000, lpOverlapped=0x0) returned 1 [0053.883] CloseHandle (hObject=0x448) returned 1 [0053.884] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\qrA9hvnxQuIXrz-kBi\\y sfavt_6-uR zUfBzh.mp3", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\qrA9hvnxQuIXrz-kBi\\y sfavt_6-uR zUfBzh.mp3", lpFilePart=0x0) returned 0x59 [0053.884] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\qrA9hvnxQuIXrz-kBi\\y sfavt_6-uR zUfBzh.mp3.xuy", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\qrA9hvnxQuIXrz-kBi\\y sfavt_6-uR zUfBzh.mp3.xuy", lpFilePart=0x0) returned 0x5d [0053.884] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0053.884] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\qrA9hvnxQuIXrz-kBi\\y sfavt_6-uR zUfBzh.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\v4m4zk zj0onuyjxil\\qra9hvnxquixrz-kbi\\y sfavt_6-ur zufbzh.mp3"), fInfoLevelId=0x0, lpFileInformation=0x3be8a0 | out: lpFileInformation=0x3be8a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60cbebd0, ftCreationTime.dwHighDateTime=0x1d45fa0, ftLastAccessTime.dwLowDateTime=0x24aad950, ftLastAccessTime.dwHighDateTime=0x1d45996, ftLastWriteTime.dwLowDateTime=0xbf65c02, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0053.884] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0053.884] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\qrA9hvnxQuIXrz-kBi\\y sfavt_6-uR zUfBzh.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\v4m4zk zj0onuyjxil\\qra9hvnxquixrz-kbi\\y sfavt_6-ur zufbzh.mp3"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\qrA9hvnxQuIXrz-kBi\\y sfavt_6-uR zUfBzh.mp3.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\v4m4zk zj0onuyjxil\\qra9hvnxquixrz-kbi\\y sfavt_6-ur zufbzh.mp3.xuy")) returned 1 [0053.885] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0053.885] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\qrA9hvnxQuIXrz-kBi\\PYe7", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\qrA9hvnxQuIXrz-kBi\\PYe7", lpFilePart=0x0) returned 0x46 [0053.885] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\qrA9hvnxQuIXrz-kBi\\PYe7\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\qrA9hvnxQuIXrz-kBi\\PYe7\\", lpFilePart=0x0) returned 0x47 [0053.885] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\qrA9hvnxQuIXrz-kBi\\PYe7\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d81b0 [0053.885] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0053.885] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0053.885] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0053.885] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0053.885] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0053.885] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0053.885] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0053.885] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0053.886] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\qrA9hvnxQuIXrz-kBi\\PYe7", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\qrA9hvnxQuIXrz-kBi\\PYe7", lpFilePart=0x0) returned 0x46 [0053.886] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\qrA9hvnxQuIXrz-kBi\\PYe7\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\qrA9hvnxQuIXrz-kBi\\PYe7\\", lpFilePart=0x0) returned 0x47 [0053.886] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\qrA9hvnxQuIXrz-kBi\\PYe7\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7a30 [0053.886] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0053.886] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0053.886] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0053.886] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0053.886] FindClose (in: hFindFile=0x5d7a30 | out: hFindFile=0x5d7a30) returned 1 [0053.886] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0053.886] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0053.887] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\qrA9hvnxQuIXrz-kBi\\PYe7\\g5O83QgO-v7.mp3", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\qrA9hvnxQuIXrz-kBi\\PYe7\\g5O83QgO-v7.mp3", lpFilePart=0x0) returned 0x56 [0053.887] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0053.887] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\qrA9hvnxQuIXrz-kBi\\PYe7\\g5O83QgO-v7.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\v4m4zk zj0onuyjxil\\qra9hvnxquixrz-kbi\\pye7\\g5o83qgo-v7.mp3"), fInfoLevelId=0x0, lpFileInformation=0x22794e8 | out: lpFileInformation=0x22794e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe82a0c10, ftCreationTime.dwHighDateTime=0x1d45feb, ftLastAccessTime.dwLowDateTime=0x656cb570, ftLastAccessTime.dwHighDateTime=0x1d463c4, ftLastWriteTime.dwLowDateTime=0x656cb570, ftLastWriteTime.dwHighDateTime=0x1d463c4, nFileSizeHigh=0x0, nFileSizeLow=0x13cbc)) returned 1 [0053.887] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0053.887] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\qrA9hvnxQuIXrz-kBi\\PYe7\\g5O83QgO-v7.mp3", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\qrA9hvnxQuIXrz-kBi\\PYe7\\g5O83QgO-v7.mp3", lpFilePart=0x0) returned 0x56 [0053.887] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0053.887] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\qrA9hvnxQuIXrz-kBi\\PYe7\\g5O83QgO-v7.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\v4m4zk zj0onuyjxil\\qra9hvnxquixrz-kbi\\pye7\\g5o83qgo-v7.mp3"), fInfoLevelId=0x0, lpFileInformation=0x2279650 | out: lpFileInformation=0x2279650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe82a0c10, ftCreationTime.dwHighDateTime=0x1d45feb, ftLastAccessTime.dwLowDateTime=0x656cb570, ftLastAccessTime.dwHighDateTime=0x1d463c4, ftLastWriteTime.dwLowDateTime=0x656cb570, ftLastWriteTime.dwHighDateTime=0x1d463c4, nFileSizeHigh=0x0, nFileSizeLow=0x13cbc)) returned 1 [0053.887] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0053.887] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\qrA9hvnxQuIXrz-kBi\\PYe7\\g5O83QgO-v7.mp3", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\qrA9hvnxQuIXrz-kBi\\PYe7\\g5O83QgO-v7.mp3", lpFilePart=0x0) returned 0x56 [0053.887] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0053.887] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\qrA9hvnxQuIXrz-kBi\\PYe7\\g5O83QgO-v7.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\v4m4zk zj0onuyjxil\\qra9hvnxquixrz-kbi\\pye7\\g5o83qgo-v7.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0053.888] GetFileType (hFile=0x448) returned 0x1 [0053.888] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0053.888] GetFileType (hFile=0x448) returned 0x1 [0053.888] ReadFile (in: hFile=0x448, lpBuffer=0x227ba50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x227ba50*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0053.897] CloseHandle (hObject=0x448) returned 1 [0053.898] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\qrA9hvnxQuIXrz-kBi\\PYe7\\g5O83QgO-v7.mp3", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\qrA9hvnxQuIXrz-kBi\\PYe7\\g5O83QgO-v7.mp3", lpFilePart=0x0) returned 0x56 [0053.898] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0053.898] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\qrA9hvnxQuIXrz-kBi\\PYe7\\g5O83QgO-v7.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\v4m4zk zj0onuyjxil\\qra9hvnxquixrz-kbi\\pye7\\g5o83qgo-v7.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0053.898] GetFileType (hFile=0x448) returned 0x1 [0053.898] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0053.898] GetFileType (hFile=0x448) returned 0x1 [0053.898] WriteFile (in: hFile=0x448, lpBuffer=0x2279798*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x2279798*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0053.898] CloseHandle (hObject=0x448) returned 1 [0053.900] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\qrA9hvnxQuIXrz-kBi\\PYe7\\g5O83QgO-v7.mp3", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\qrA9hvnxQuIXrz-kBi\\PYe7\\g5O83QgO-v7.mp3", lpFilePart=0x0) returned 0x56 [0053.900] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\qrA9hvnxQuIXrz-kBi\\PYe7\\g5O83QgO-v7.mp3.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\qrA9hvnxQuIXrz-kBi\\PYe7\\g5O83QgO-v7.mp3.xuy", lpFilePart=0x0) returned 0x5a [0053.900] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0053.900] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\qrA9hvnxQuIXrz-kBi\\PYe7\\g5O83QgO-v7.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\v4m4zk zj0onuyjxil\\qra9hvnxquixrz-kbi\\pye7\\g5o83qgo-v7.mp3"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe82a0c10, ftCreationTime.dwHighDateTime=0x1d45feb, ftLastAccessTime.dwLowDateTime=0x656cb570, ftLastAccessTime.dwHighDateTime=0x1d463c4, ftLastWriteTime.dwLowDateTime=0xbf8bf9f, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x13cbc)) returned 1 [0053.900] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0053.900] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\qrA9hvnxQuIXrz-kBi\\PYe7\\g5O83QgO-v7.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\v4m4zk zj0onuyjxil\\qra9hvnxquixrz-kbi\\pye7\\g5o83qgo-v7.mp3"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\qrA9hvnxQuIXrz-kBi\\PYe7\\g5O83QgO-v7.mp3.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\v4m4zk zj0onuyjxil\\qra9hvnxquixrz-kbi\\pye7\\g5o83qgo-v7.mp3.xuy")) returned 1 [0053.901] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\qrA9hvnxQuIXrz-kBi\\PYe7\\TIn_ARo-MEx1p.wav", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\qrA9hvnxQuIXrz-kBi\\PYe7\\TIn_ARo-MEx1p.wav", lpFilePart=0x0) returned 0x58 [0053.901] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0053.901] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\qrA9hvnxQuIXrz-kBi\\PYe7\\TIn_ARo-MEx1p.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\v4m4zk zj0onuyjxil\\qra9hvnxquixrz-kbi\\pye7\\tin_aro-mex1p.wav"), fInfoLevelId=0x0, lpFileInformation=0x22f7e68 | out: lpFileInformation=0x22f7e68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5e676700, ftCreationTime.dwHighDateTime=0x1d461a5, ftLastAccessTime.dwLowDateTime=0xe25bd5a0, ftLastAccessTime.dwHighDateTime=0x1d46380, ftLastWriteTime.dwLowDateTime=0xe25bd5a0, ftLastWriteTime.dwHighDateTime=0x1d46380, nFileSizeHigh=0x0, nFileSizeLow=0xde9a)) returned 1 [0053.901] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0053.901] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\qrA9hvnxQuIXrz-kBi\\PYe7\\TIn_ARo-MEx1p.wav", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\qrA9hvnxQuIXrz-kBi\\PYe7\\TIn_ARo-MEx1p.wav", lpFilePart=0x0) returned 0x58 [0053.901] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0053.901] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\qrA9hvnxQuIXrz-kBi\\PYe7\\TIn_ARo-MEx1p.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\v4m4zk zj0onuyjxil\\qra9hvnxquixrz-kbi\\pye7\\tin_aro-mex1p.wav"), fInfoLevelId=0x0, lpFileInformation=0x22f7fe0 | out: lpFileInformation=0x22f7fe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5e676700, ftCreationTime.dwHighDateTime=0x1d461a5, ftLastAccessTime.dwLowDateTime=0xe25bd5a0, ftLastAccessTime.dwHighDateTime=0x1d46380, ftLastWriteTime.dwLowDateTime=0xe25bd5a0, ftLastWriteTime.dwHighDateTime=0x1d46380, nFileSizeHigh=0x0, nFileSizeLow=0xde9a)) returned 1 [0053.901] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0053.901] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\qrA9hvnxQuIXrz-kBi\\PYe7\\TIn_ARo-MEx1p.wav", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\qrA9hvnxQuIXrz-kBi\\PYe7\\TIn_ARo-MEx1p.wav", lpFilePart=0x0) returned 0x58 [0053.901] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0053.901] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\qrA9hvnxQuIXrz-kBi\\PYe7\\TIn_ARo-MEx1p.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\v4m4zk zj0onuyjxil\\qra9hvnxquixrz-kbi\\pye7\\tin_aro-mex1p.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0053.902] GetFileType (hFile=0x448) returned 0x1 [0053.902] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0053.902] GetFileType (hFile=0x448) returned 0x1 [0053.902] ReadFile (in: hFile=0x448, lpBuffer=0x22fa400, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x22fa400*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0053.944] CloseHandle (hObject=0x448) returned 1 [0053.944] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\qrA9hvnxQuIXrz-kBi\\PYe7\\TIn_ARo-MEx1p.wav", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\qrA9hvnxQuIXrz-kBi\\PYe7\\TIn_ARo-MEx1p.wav", lpFilePart=0x0) returned 0x58 [0053.944] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0053.944] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\qrA9hvnxQuIXrz-kBi\\PYe7\\TIn_ARo-MEx1p.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\v4m4zk zj0onuyjxil\\qra9hvnxquixrz-kbi\\pye7\\tin_aro-mex1p.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0053.944] GetFileType (hFile=0x448) returned 0x1 [0053.944] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0053.944] GetFileType (hFile=0x448) returned 0x1 [0053.944] WriteFile (in: hFile=0x448, lpBuffer=0x2154e90*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x2154e90*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0053.944] CloseHandle (hObject=0x448) returned 1 [0053.946] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\qrA9hvnxQuIXrz-kBi\\PYe7\\TIn_ARo-MEx1p.wav", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\qrA9hvnxQuIXrz-kBi\\PYe7\\TIn_ARo-MEx1p.wav", lpFilePart=0x0) returned 0x58 [0053.946] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\qrA9hvnxQuIXrz-kBi\\PYe7\\TIn_ARo-MEx1p.wav.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\qrA9hvnxQuIXrz-kBi\\PYe7\\TIn_ARo-MEx1p.wav.xuy", lpFilePart=0x0) returned 0x5c [0053.946] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0053.946] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\qrA9hvnxQuIXrz-kBi\\PYe7\\TIn_ARo-MEx1p.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\v4m4zk zj0onuyjxil\\qra9hvnxquixrz-kbi\\pye7\\tin_aro-mex1p.wav"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5e676700, ftCreationTime.dwHighDateTime=0x1d461a5, ftLastAccessTime.dwLowDateTime=0xe25bd5a0, ftLastAccessTime.dwHighDateTime=0x1d46380, ftLastWriteTime.dwLowDateTime=0xbffe765, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xde9a)) returned 1 [0053.946] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0053.946] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\qrA9hvnxQuIXrz-kBi\\PYe7\\TIn_ARo-MEx1p.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\v4m4zk zj0onuyjxil\\qra9hvnxquixrz-kbi\\pye7\\tin_aro-mex1p.wav"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\qrA9hvnxQuIXrz-kBi\\PYe7\\TIn_ARo-MEx1p.wav.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\v4m4zk zj0onuyjxil\\qra9hvnxquixrz-kbi\\pye7\\tin_aro-mex1p.wav.xuy")) returned 1 [0053.947] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0053.947] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB", lpFilePart=0x0) returned 0x39 [0053.947] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\", lpFilePart=0x0) returned 0x3a [0053.947] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d7a30 [0053.947] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0053.947] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0053.947] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0053.948] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0053.948] FindClose (in: hFindFile=0x5d7a30 | out: hFindFile=0x5d7a30) returned 1 [0053.948] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0053.948] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0053.948] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0053.948] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB", lpFilePart=0x0) returned 0x39 [0053.948] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\", lpFilePart=0x0) returned 0x3a [0053.948] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d81b0 [0053.948] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0053.948] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0053.948] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0053.948] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0053.949] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0053.949] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0053.949] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0053.949] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\_xN12rPpzNlGEeUEq29.m4a", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\_xN12rPpzNlGEeUEq29.m4a", lpFilePart=0x0) returned 0x51 [0053.949] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0053.949] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\_xN12rPpzNlGEeUEq29.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\v4m4zk zj0onuyjxil\\qyqp7ps5mb\\_xn12rppznlgeeueq29.m4a"), fInfoLevelId=0x0, lpFileInformation=0x21788b8 | out: lpFileInformation=0x21788b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5fff6e10, ftCreationTime.dwHighDateTime=0x1d4561e, ftLastAccessTime.dwLowDateTime=0xc73c36d0, ftLastAccessTime.dwHighDateTime=0x1d457e0, ftLastWriteTime.dwLowDateTime=0xc73c36d0, ftLastWriteTime.dwHighDateTime=0x1d457e0, nFileSizeHigh=0x0, nFileSizeLow=0x18aa8)) returned 1 [0053.949] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0053.949] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\_xN12rPpzNlGEeUEq29.m4a", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\_xN12rPpzNlGEeUEq29.m4a", lpFilePart=0x0) returned 0x51 [0053.949] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0053.949] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\_xN12rPpzNlGEeUEq29.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\v4m4zk zj0onuyjxil\\qyqp7ps5mb\\_xn12rppznlgeeueq29.m4a"), fInfoLevelId=0x0, lpFileInformation=0x2178a28 | out: lpFileInformation=0x2178a28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5fff6e10, ftCreationTime.dwHighDateTime=0x1d4561e, ftLastAccessTime.dwLowDateTime=0xc73c36d0, ftLastAccessTime.dwHighDateTime=0x1d457e0, ftLastWriteTime.dwLowDateTime=0xc73c36d0, ftLastWriteTime.dwHighDateTime=0x1d457e0, nFileSizeHigh=0x0, nFileSizeLow=0x18aa8)) returned 1 [0053.949] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0053.949] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\_xN12rPpzNlGEeUEq29.m4a", nBufferLength=0x105, lpBuffer=0x3be270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\_xN12rPpzNlGEeUEq29.m4a", lpFilePart=0x0) returned 0x51 [0053.949] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0053.949] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\_xN12rPpzNlGEeUEq29.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\v4m4zk zj0onuyjxil\\qyqp7ps5mb\\_xn12rppznlgeeueq29.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0053.949] GetFileType (hFile=0x448) returned 0x1 [0053.950] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6c0) returned 1 [0053.950] GetFileType (hFile=0x448) returned 0x1 [0053.950] ReadFile (in: hFile=0x448, lpBuffer=0x217ae38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be7d8, lpOverlapped=0x0 | out: lpBuffer=0x217ae38*, lpNumberOfBytesRead=0x3be7d8*=0x1000, lpOverlapped=0x0) returned 1 [0053.973] CloseHandle (hObject=0x448) returned 1 [0053.973] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\_xN12rPpzNlGEeUEq29.m4a", nBufferLength=0x105, lpBuffer=0x3be270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\_xN12rPpzNlGEeUEq29.m4a", lpFilePart=0x0) returned 0x51 [0053.973] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0053.973] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\_xN12rPpzNlGEeUEq29.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\v4m4zk zj0onuyjxil\\qyqp7ps5mb\\_xn12rppznlgeeueq29.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0053.973] GetFileType (hFile=0x448) returned 0x1 [0053.973] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6c0) returned 1 [0053.973] GetFileType (hFile=0x448) returned 0x1 [0053.973] WriteFile (in: hFile=0x448, lpBuffer=0x2178b78*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be888, lpOverlapped=0x0 | out: lpBuffer=0x2178b78*, lpNumberOfBytesWritten=0x3be888*=0x2000, lpOverlapped=0x0) returned 1 [0053.974] CloseHandle (hObject=0x448) returned 1 [0053.976] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\_xN12rPpzNlGEeUEq29.m4a", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\_xN12rPpzNlGEeUEq29.m4a", lpFilePart=0x0) returned 0x51 [0053.976] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\_xN12rPpzNlGEeUEq29.m4a.xuy", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\_xN12rPpzNlGEeUEq29.m4a.xuy", lpFilePart=0x0) returned 0x55 [0053.976] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0053.976] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\_xN12rPpzNlGEeUEq29.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\v4m4zk zj0onuyjxil\\qyqp7ps5mb\\_xn12rppznlgeeueq29.m4a"), fInfoLevelId=0x0, lpFileInformation=0x3be8a0 | out: lpFileInformation=0x3be8a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5fff6e10, ftCreationTime.dwHighDateTime=0x1d4561e, ftLastAccessTime.dwLowDateTime=0xc73c36d0, ftLastAccessTime.dwHighDateTime=0x1d457e0, ftLastWriteTime.dwLowDateTime=0xc04ab8c, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x18aa8)) returned 1 [0053.976] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0053.976] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\_xN12rPpzNlGEeUEq29.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\v4m4zk zj0onuyjxil\\qyqp7ps5mb\\_xn12rppznlgeeueq29.m4a"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\_xN12rPpzNlGEeUEq29.m4a.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\v4m4zk zj0onuyjxil\\qyqp7ps5mb\\_xn12rppznlgeeueq29.m4a.xuy")) returned 1 [0053.977] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0053.977] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2", lpFilePart=0x0) returned 0x44 [0053.977] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\", lpFilePart=0x0) returned 0x45 [0053.977] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7550 [0053.977] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0053.977] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0053.977] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0053.977] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0053.977] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0053.977] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0053.978] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0053.978] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0053.978] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0053.978] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0053.978] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0053.978] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2", lpFilePart=0x0) returned 0x44 [0053.978] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\", lpFilePart=0x0) returned 0x45 [0053.978] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7e50 [0053.978] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0053.978] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0053.978] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0053.979] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0053.979] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0053.979] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0053.979] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0053.979] FindClose (in: hFindFile=0x5d7e50 | out: hFindFile=0x5d7e50) returned 1 [0053.979] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0053.979] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0053.979] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\9m4LOZ8HMX8jF_V_h.mp3", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\9m4LOZ8HMX8jF_V_h.mp3", lpFilePart=0x0) returned 0x5a [0053.979] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0053.979] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\9m4LOZ8HMX8jF_V_h.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\v4m4zk zj0onuyjxil\\qyqp7ps5mb\\-42tue1gv2\\9m4loz8hmx8jf_v_h.mp3"), fInfoLevelId=0x0, lpFileInformation=0x21fa438 | out: lpFileInformation=0x21fa438*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7cff640, ftCreationTime.dwHighDateTime=0x1d45aea, ftLastAccessTime.dwLowDateTime=0xab4b8be0, ftLastAccessTime.dwHighDateTime=0x1d459b3, ftLastWriteTime.dwLowDateTime=0xab4b8be0, ftLastWriteTime.dwHighDateTime=0x1d459b3, nFileSizeHigh=0x0, nFileSizeLow=0x1472f)) returned 1 [0053.979] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0053.979] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\9m4LOZ8HMX8jF_V_h.mp3", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\9m4LOZ8HMX8jF_V_h.mp3", lpFilePart=0x0) returned 0x5a [0053.979] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0053.980] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\9m4LOZ8HMX8jF_V_h.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\v4m4zk zj0onuyjxil\\qyqp7ps5mb\\-42tue1gv2\\9m4loz8hmx8jf_v_h.mp3"), fInfoLevelId=0x0, lpFileInformation=0x21fa5b8 | out: lpFileInformation=0x21fa5b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7cff640, ftCreationTime.dwHighDateTime=0x1d45aea, ftLastAccessTime.dwLowDateTime=0xab4b8be0, ftLastAccessTime.dwHighDateTime=0x1d459b3, ftLastWriteTime.dwLowDateTime=0xab4b8be0, ftLastWriteTime.dwHighDateTime=0x1d459b3, nFileSizeHigh=0x0, nFileSizeLow=0x1472f)) returned 1 [0053.980] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0053.980] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\9m4LOZ8HMX8jF_V_h.mp3", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\9m4LOZ8HMX8jF_V_h.mp3", lpFilePart=0x0) returned 0x5a [0053.980] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0053.980] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\9m4LOZ8HMX8jF_V_h.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\v4m4zk zj0onuyjxil\\qyqp7ps5mb\\-42tue1gv2\\9m4loz8hmx8jf_v_h.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0053.980] GetFileType (hFile=0x448) returned 0x1 [0053.980] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0053.980] GetFileType (hFile=0x448) returned 0x1 [0053.980] ReadFile (in: hFile=0x448, lpBuffer=0x21fc9e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x21fc9e8*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0053.990] CloseHandle (hObject=0x448) returned 1 [0053.990] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\9m4LOZ8HMX8jF_V_h.mp3", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\9m4LOZ8HMX8jF_V_h.mp3", lpFilePart=0x0) returned 0x5a [0053.991] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0053.991] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\9m4LOZ8HMX8jF_V_h.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\v4m4zk zj0onuyjxil\\qyqp7ps5mb\\-42tue1gv2\\9m4loz8hmx8jf_v_h.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0053.991] GetFileType (hFile=0x448) returned 0x1 [0053.991] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0053.991] GetFileType (hFile=0x448) returned 0x1 [0053.991] WriteFile (in: hFile=0x448, lpBuffer=0x21fa718*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x21fa718*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0053.991] CloseHandle (hObject=0x448) returned 1 [0053.993] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\9m4LOZ8HMX8jF_V_h.mp3", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\9m4LOZ8HMX8jF_V_h.mp3", lpFilePart=0x0) returned 0x5a [0053.993] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\9m4LOZ8HMX8jF_V_h.mp3.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\9m4LOZ8HMX8jF_V_h.mp3.xuy", lpFilePart=0x0) returned 0x5e [0053.993] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0053.993] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\9m4LOZ8HMX8jF_V_h.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\v4m4zk zj0onuyjxil\\qyqp7ps5mb\\-42tue1gv2\\9m4loz8hmx8jf_v_h.mp3"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7cff640, ftCreationTime.dwHighDateTime=0x1d45aea, ftLastAccessTime.dwLowDateTime=0xab4b8be0, ftLastAccessTime.dwHighDateTime=0x1d459b3, ftLastWriteTime.dwLowDateTime=0xc070e93, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x1472f)) returned 1 [0053.993] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0053.993] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\9m4LOZ8HMX8jF_V_h.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\v4m4zk zj0onuyjxil\\qyqp7ps5mb\\-42tue1gv2\\9m4loz8hmx8jf_v_h.mp3"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\9m4LOZ8HMX8jF_V_h.mp3.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\v4m4zk zj0onuyjxil\\qyqp7ps5mb\\-42tue1gv2\\9m4loz8hmx8jf_v_h.mp3.xuy")) returned 1 [0053.999] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\m-GVKfYhXB6T.mp3", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\m-GVKfYhXB6T.mp3", lpFilePart=0x0) returned 0x55 [0054.000] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0054.000] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\m-GVKfYhXB6T.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\v4m4zk zj0onuyjxil\\qyqp7ps5mb\\-42tue1gv2\\m-gvkfyhxb6t.mp3"), fInfoLevelId=0x0, lpFileInformation=0x2278e30 | out: lpFileInformation=0x2278e30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbdcf670, ftCreationTime.dwHighDateTime=0x1d4612d, ftLastAccessTime.dwLowDateTime=0x8c994fa0, ftLastAccessTime.dwHighDateTime=0x1d45807, ftLastWriteTime.dwLowDateTime=0x8c994fa0, ftLastWriteTime.dwHighDateTime=0x1d45807, nFileSizeHigh=0x0, nFileSizeLow=0x7953)) returned 1 [0054.000] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0054.000] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\m-GVKfYhXB6T.mp3", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\m-GVKfYhXB6T.mp3", lpFilePart=0x0) returned 0x55 [0054.000] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0054.000] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\m-GVKfYhXB6T.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\v4m4zk zj0onuyjxil\\qyqp7ps5mb\\-42tue1gv2\\m-gvkfyhxb6t.mp3"), fInfoLevelId=0x0, lpFileInformation=0x2278fa0 | out: lpFileInformation=0x2278fa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbdcf670, ftCreationTime.dwHighDateTime=0x1d4612d, ftLastAccessTime.dwLowDateTime=0x8c994fa0, ftLastAccessTime.dwHighDateTime=0x1d45807, ftLastWriteTime.dwLowDateTime=0x8c994fa0, ftLastWriteTime.dwHighDateTime=0x1d45807, nFileSizeHigh=0x0, nFileSizeLow=0x7953)) returned 1 [0054.000] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0054.000] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\m-GVKfYhXB6T.mp3", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\m-GVKfYhXB6T.mp3", lpFilePart=0x0) returned 0x55 [0054.000] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0054.000] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\m-GVKfYhXB6T.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\v4m4zk zj0onuyjxil\\qyqp7ps5mb\\-42tue1gv2\\m-gvkfyhxb6t.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0054.000] GetFileType (hFile=0x448) returned 0x1 [0054.000] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0054.000] GetFileType (hFile=0x448) returned 0x1 [0054.000] ReadFile (in: hFile=0x448, lpBuffer=0x227b3b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x227b3b0*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0054.010] CloseHandle (hObject=0x448) returned 1 [0054.010] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\m-GVKfYhXB6T.mp3", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\m-GVKfYhXB6T.mp3", lpFilePart=0x0) returned 0x55 [0054.011] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0054.011] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\m-GVKfYhXB6T.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\v4m4zk zj0onuyjxil\\qyqp7ps5mb\\-42tue1gv2\\m-gvkfyhxb6t.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0054.011] GetFileType (hFile=0x448) returned 0x1 [0054.011] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0054.011] GetFileType (hFile=0x448) returned 0x1 [0054.011] WriteFile (in: hFile=0x448, lpBuffer=0x22790f0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x22790f0*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0054.011] CloseHandle (hObject=0x448) returned 1 [0054.013] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\m-GVKfYhXB6T.mp3", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\m-GVKfYhXB6T.mp3", lpFilePart=0x0) returned 0x55 [0054.013] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\m-GVKfYhXB6T.mp3.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\m-GVKfYhXB6T.mp3.xuy", lpFilePart=0x0) returned 0x59 [0054.013] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0054.013] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\m-GVKfYhXB6T.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\v4m4zk zj0onuyjxil\\qyqp7ps5mb\\-42tue1gv2\\m-gvkfyhxb6t.mp3"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbdcf670, ftCreationTime.dwHighDateTime=0x1d4612d, ftLastAccessTime.dwLowDateTime=0x8c994fa0, ftLastAccessTime.dwHighDateTime=0x1d45807, ftLastWriteTime.dwLowDateTime=0xc0bd3e2, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x7953)) returned 1 [0054.013] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0054.013] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\m-GVKfYhXB6T.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\v4m4zk zj0onuyjxil\\qyqp7ps5mb\\-42tue1gv2\\m-gvkfyhxb6t.mp3"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\m-GVKfYhXB6T.mp3.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\v4m4zk zj0onuyjxil\\qyqp7ps5mb\\-42tue1gv2\\m-gvkfyhxb6t.mp3.xuy")) returned 1 [0054.013] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\vNVYUbOQ7x0Pi814.m4a", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\vNVYUbOQ7x0Pi814.m4a", lpFilePart=0x0) returned 0x59 [0054.013] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0054.014] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\vNVYUbOQ7x0Pi814.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\v4m4zk zj0onuyjxil\\qyqp7ps5mb\\-42tue1gv2\\vnvyuboq7x0pi814.m4a"), fInfoLevelId=0x0, lpFileInformation=0x22f77d0 | out: lpFileInformation=0x22f77d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd17da090, ftCreationTime.dwHighDateTime=0x1d45856, ftLastAccessTime.dwLowDateTime=0xc6297b00, ftLastAccessTime.dwHighDateTime=0x1d45a14, ftLastWriteTime.dwLowDateTime=0xc6297b00, ftLastWriteTime.dwHighDateTime=0x1d45a14, nFileSizeHigh=0x0, nFileSizeLow=0x17ec0)) returned 1 [0054.014] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0054.014] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\vNVYUbOQ7x0Pi814.m4a", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\vNVYUbOQ7x0Pi814.m4a", lpFilePart=0x0) returned 0x59 [0054.014] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0054.014] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\vNVYUbOQ7x0Pi814.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\v4m4zk zj0onuyjxil\\qyqp7ps5mb\\-42tue1gv2\\vnvyuboq7x0pi814.m4a"), fInfoLevelId=0x0, lpFileInformation=0x22f7950 | out: lpFileInformation=0x22f7950*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd17da090, ftCreationTime.dwHighDateTime=0x1d45856, ftLastAccessTime.dwLowDateTime=0xc6297b00, ftLastAccessTime.dwHighDateTime=0x1d45a14, ftLastWriteTime.dwLowDateTime=0xc6297b00, ftLastWriteTime.dwHighDateTime=0x1d45a14, nFileSizeHigh=0x0, nFileSizeLow=0x17ec0)) returned 1 [0054.014] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0054.014] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\vNVYUbOQ7x0Pi814.m4a", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\vNVYUbOQ7x0Pi814.m4a", lpFilePart=0x0) returned 0x59 [0054.014] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0054.014] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\vNVYUbOQ7x0Pi814.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\v4m4zk zj0onuyjxil\\qyqp7ps5mb\\-42tue1gv2\\vnvyuboq7x0pi814.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0054.014] GetFileType (hFile=0x448) returned 0x1 [0054.014] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0054.014] GetFileType (hFile=0x448) returned 0x1 [0054.014] ReadFile (in: hFile=0x448, lpBuffer=0x22f9d80, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x22f9d80*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0054.053] CloseHandle (hObject=0x448) returned 1 [0054.054] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\vNVYUbOQ7x0Pi814.m4a", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\vNVYUbOQ7x0Pi814.m4a", lpFilePart=0x0) returned 0x59 [0054.054] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0054.054] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\vNVYUbOQ7x0Pi814.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\v4m4zk zj0onuyjxil\\qyqp7ps5mb\\-42tue1gv2\\vnvyuboq7x0pi814.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0054.054] GetFileType (hFile=0x448) returned 0x1 [0054.054] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0054.054] GetFileType (hFile=0x448) returned 0x1 [0054.054] WriteFile (in: hFile=0x448, lpBuffer=0x2155110*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x2155110*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0054.054] CloseHandle (hObject=0x448) returned 1 [0054.056] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\vNVYUbOQ7x0Pi814.m4a", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\vNVYUbOQ7x0Pi814.m4a", lpFilePart=0x0) returned 0x59 [0054.056] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\vNVYUbOQ7x0Pi814.m4a.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\vNVYUbOQ7x0Pi814.m4a.xuy", lpFilePart=0x0) returned 0x5d [0054.056] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0054.056] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\vNVYUbOQ7x0Pi814.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\v4m4zk zj0onuyjxil\\qyqp7ps5mb\\-42tue1gv2\\vnvyuboq7x0pi814.m4a"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd17da090, ftCreationTime.dwHighDateTime=0x1d45856, ftLastAccessTime.dwLowDateTime=0xc6297b00, ftLastAccessTime.dwHighDateTime=0x1d45a14, ftLastWriteTime.dwLowDateTime=0xc10a0ff, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x17ec0)) returned 1 [0054.056] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0054.057] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\vNVYUbOQ7x0Pi814.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\v4m4zk zj0onuyjxil\\qyqp7ps5mb\\-42tue1gv2\\vnvyuboq7x0pi814.m4a"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\vNVYUbOQ7x0Pi814.m4a.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\v4m4zk zj0onuyjxil\\qyqp7ps5mb\\-42tue1gv2\\vnvyuboq7x0pi814.m4a.xuy")) returned 1 [0054.057] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\xeKWFIddBHaEN67 iC.wav", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\xeKWFIddBHaEN67 iC.wav", lpFilePart=0x0) returned 0x5b [0054.057] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0054.057] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\xeKWFIddBHaEN67 iC.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\v4m4zk zj0onuyjxil\\qyqp7ps5mb\\-42tue1gv2\\xekwfiddbhaen67 ic.wav"), fInfoLevelId=0x0, lpFileInformation=0x2176440 | out: lpFileInformation=0x2176440*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62cee100, ftCreationTime.dwHighDateTime=0x1d45a6c, ftLastAccessTime.dwLowDateTime=0x68d8ff20, ftLastAccessTime.dwHighDateTime=0x1d45fc3, ftLastWriteTime.dwLowDateTime=0x68d8ff20, ftLastWriteTime.dwHighDateTime=0x1d45fc3, nFileSizeHigh=0x0, nFileSizeLow=0xfc34)) returned 1 [0054.057] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0054.057] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\xeKWFIddBHaEN67 iC.wav", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\xeKWFIddBHaEN67 iC.wav", lpFilePart=0x0) returned 0x5b [0054.057] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0054.057] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\xeKWFIddBHaEN67 iC.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\v4m4zk zj0onuyjxil\\qyqp7ps5mb\\-42tue1gv2\\xekwfiddbhaen67 ic.wav"), fInfoLevelId=0x0, lpFileInformation=0x21765c0 | out: lpFileInformation=0x21765c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62cee100, ftCreationTime.dwHighDateTime=0x1d45a6c, ftLastAccessTime.dwLowDateTime=0x68d8ff20, ftLastAccessTime.dwHighDateTime=0x1d45fc3, ftLastWriteTime.dwLowDateTime=0x68d8ff20, ftLastWriteTime.dwHighDateTime=0x1d45fc3, nFileSizeHigh=0x0, nFileSizeLow=0xfc34)) returned 1 [0054.058] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0054.058] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\xeKWFIddBHaEN67 iC.wav", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\xeKWFIddBHaEN67 iC.wav", lpFilePart=0x0) returned 0x5b [0054.058] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0054.058] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\xeKWFIddBHaEN67 iC.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\v4m4zk zj0onuyjxil\\qyqp7ps5mb\\-42tue1gv2\\xekwfiddbhaen67 ic.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0054.058] GetFileType (hFile=0x448) returned 0x1 [0054.058] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0054.058] GetFileType (hFile=0x448) returned 0x1 [0054.058] ReadFile (in: hFile=0x448, lpBuffer=0x21789f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x21789f0*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0054.068] CloseHandle (hObject=0x448) returned 1 [0054.069] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\xeKWFIddBHaEN67 iC.wav", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\xeKWFIddBHaEN67 iC.wav", lpFilePart=0x0) returned 0x5b [0054.069] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0054.069] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\xeKWFIddBHaEN67 iC.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\v4m4zk zj0onuyjxil\\qyqp7ps5mb\\-42tue1gv2\\xekwfiddbhaen67 ic.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0054.069] GetFileType (hFile=0x448) returned 0x1 [0054.069] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0054.069] GetFileType (hFile=0x448) returned 0x1 [0054.069] WriteFile (in: hFile=0x448, lpBuffer=0x2176720*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x2176720*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0054.069] CloseHandle (hObject=0x448) returned 1 [0054.071] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\xeKWFIddBHaEN67 iC.wav", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\xeKWFIddBHaEN67 iC.wav", lpFilePart=0x0) returned 0x5b [0054.071] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\xeKWFIddBHaEN67 iC.wav.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\xeKWFIddBHaEN67 iC.wav.xuy", lpFilePart=0x0) returned 0x5f [0054.071] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0054.071] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\xeKWFIddBHaEN67 iC.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\v4m4zk zj0onuyjxil\\qyqp7ps5mb\\-42tue1gv2\\xekwfiddbhaen67 ic.wav"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62cee100, ftCreationTime.dwHighDateTime=0x1d45a6c, ftLastAccessTime.dwLowDateTime=0x68d8ff20, ftLastAccessTime.dwHighDateTime=0x1d45fc3, ftLastWriteTime.dwLowDateTime=0xc12f952, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xfc34)) returned 1 [0054.071] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0054.071] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\xeKWFIddBHaEN67 iC.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\v4m4zk zj0onuyjxil\\qyqp7ps5mb\\-42tue1gv2\\xekwfiddbhaen67 ic.wav"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\xeKWFIddBHaEN67 iC.wav.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\v4m4zk zj0onuyjxil\\qyqp7ps5mb\\-42tue1gv2\\xekwfiddbhaen67 ic.wav.xuy")) returned 1 [0054.072] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0054.072] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\B05_T", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\B05_T", lpFilePart=0x0) returned 0x4a [0054.072] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\B05_T\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\B05_T\\", lpFilePart=0x0) returned 0x4b [0054.072] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\B05_T\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7370 [0054.073] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0054.073] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0054.073] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0054.073] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0054.073] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0054.073] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0054.073] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0054.073] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0054.073] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0054.073] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0054.073] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0054.074] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0054.074] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\B05_T", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\B05_T", lpFilePart=0x0) returned 0x4a [0054.074] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\B05_T\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\B05_T\\", lpFilePart=0x0) returned 0x4b [0054.074] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\B05_T\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7e50 [0054.074] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0054.074] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0054.074] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0054.074] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0054.074] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0054.075] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0054.075] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0054.075] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0054.075] FindClose (in: hFindFile=0x5d7e50 | out: hFindFile=0x5d7e50) returned 1 [0054.075] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0054.075] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0054.075] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\B05_T\\08m7p4.m4a", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\B05_T\\08m7p4.m4a", lpFilePart=0x0) returned 0x55 [0054.075] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0054.075] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\B05_T\\08m7p4.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\v4m4zk zj0onuyjxil\\qyqp7ps5mb\\-42tue1gv2\\b05_t\\08m7p4.m4a"), fInfoLevelId=0x0, lpFileInformation=0x21f85f8 | out: lpFileInformation=0x21f85f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36182910, ftCreationTime.dwHighDateTime=0x1d45809, ftLastAccessTime.dwLowDateTime=0x95dc0530, ftLastAccessTime.dwHighDateTime=0x1d459c9, ftLastWriteTime.dwLowDateTime=0x95dc0530, ftLastWriteTime.dwHighDateTime=0x1d459c9, nFileSizeHigh=0x0, nFileSizeLow=0x18a78)) returned 1 [0054.076] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0054.076] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\B05_T\\08m7p4.m4a", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\B05_T\\08m7p4.m4a", lpFilePart=0x0) returned 0x55 [0054.076] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0054.076] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\B05_T\\08m7p4.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\v4m4zk zj0onuyjxil\\qyqp7ps5mb\\-42tue1gv2\\b05_t\\08m7p4.m4a"), fInfoLevelId=0x0, lpFileInformation=0x21f8758 | out: lpFileInformation=0x21f8758*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36182910, ftCreationTime.dwHighDateTime=0x1d45809, ftLastAccessTime.dwLowDateTime=0x95dc0530, ftLastAccessTime.dwHighDateTime=0x1d459c9, ftLastWriteTime.dwLowDateTime=0x95dc0530, ftLastWriteTime.dwHighDateTime=0x1d459c9, nFileSizeHigh=0x0, nFileSizeLow=0x18a78)) returned 1 [0054.076] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0054.076] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\B05_T\\08m7p4.m4a", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\B05_T\\08m7p4.m4a", lpFilePart=0x0) returned 0x55 [0054.076] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0054.076] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\B05_T\\08m7p4.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\v4m4zk zj0onuyjxil\\qyqp7ps5mb\\-42tue1gv2\\b05_t\\08m7p4.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0054.076] GetFileType (hFile=0x448) returned 0x1 [0054.076] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0054.076] GetFileType (hFile=0x448) returned 0x1 [0054.076] ReadFile (in: hFile=0x448, lpBuffer=0x21fab48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x21fab48*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0054.086] CloseHandle (hObject=0x448) returned 1 [0054.086] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\B05_T\\08m7p4.m4a", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\B05_T\\08m7p4.m4a", lpFilePart=0x0) returned 0x55 [0054.086] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0054.086] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\B05_T\\08m7p4.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\v4m4zk zj0onuyjxil\\qyqp7ps5mb\\-42tue1gv2\\b05_t\\08m7p4.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0054.086] GetFileType (hFile=0x448) returned 0x1 [0054.086] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0054.087] GetFileType (hFile=0x448) returned 0x1 [0054.087] WriteFile (in: hFile=0x448, lpBuffer=0x21f8898*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x21f8898*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0054.087] CloseHandle (hObject=0x448) returned 1 [0054.090] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\B05_T\\08m7p4.m4a", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\B05_T\\08m7p4.m4a", lpFilePart=0x0) returned 0x55 [0054.090] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\B05_T\\08m7p4.m4a.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\B05_T\\08m7p4.m4a.xuy", lpFilePart=0x0) returned 0x59 [0054.090] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0054.090] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\B05_T\\08m7p4.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\v4m4zk zj0onuyjxil\\qyqp7ps5mb\\-42tue1gv2\\b05_t\\08m7p4.m4a"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36182910, ftCreationTime.dwHighDateTime=0x1d45809, ftLastAccessTime.dwLowDateTime=0x95dc0530, ftLastAccessTime.dwHighDateTime=0x1d459c9, ftLastWriteTime.dwLowDateTime=0xc155c46, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x18a78)) returned 1 [0054.090] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0054.090] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\B05_T\\08m7p4.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\v4m4zk zj0onuyjxil\\qyqp7ps5mb\\-42tue1gv2\\b05_t\\08m7p4.m4a"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\B05_T\\08m7p4.m4a.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\v4m4zk zj0onuyjxil\\qyqp7ps5mb\\-42tue1gv2\\b05_t\\08m7p4.m4a.xuy")) returned 1 [0054.093] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\B05_T\\ag70uOVMAZyHaepYdjne.wav", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\B05_T\\ag70uOVMAZyHaepYdjne.wav", lpFilePart=0x0) returned 0x63 [0054.093] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0054.094] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\B05_T\\ag70uOVMAZyHaepYdjne.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\v4m4zk zj0onuyjxil\\qyqp7ps5mb\\-42tue1gv2\\b05_t\\ag70uovmazyhaepydjne.wav"), fInfoLevelId=0x0, lpFileInformation=0x2276f58 | out: lpFileInformation=0x2276f58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23768180, ftCreationTime.dwHighDateTime=0x1d45a66, ftLastAccessTime.dwLowDateTime=0x99d1aa60, ftLastAccessTime.dwHighDateTime=0x1d459be, ftLastWriteTime.dwLowDateTime=0x99d1aa60, ftLastWriteTime.dwHighDateTime=0x1d459be, nFileSizeHigh=0x0, nFileSizeLow=0x18678)) returned 1 [0054.094] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0054.094] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\B05_T\\ag70uOVMAZyHaepYdjne.wav", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\B05_T\\ag70uOVMAZyHaepYdjne.wav", lpFilePart=0x0) returned 0x63 [0054.094] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0054.094] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\B05_T\\ag70uOVMAZyHaepYdjne.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\v4m4zk zj0onuyjxil\\qyqp7ps5mb\\-42tue1gv2\\b05_t\\ag70uovmazyhaepydjne.wav"), fInfoLevelId=0x0, lpFileInformation=0x22770f0 | out: lpFileInformation=0x22770f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23768180, ftCreationTime.dwHighDateTime=0x1d45a66, ftLastAccessTime.dwLowDateTime=0x99d1aa60, ftLastAccessTime.dwHighDateTime=0x1d459be, ftLastWriteTime.dwLowDateTime=0x99d1aa60, ftLastWriteTime.dwHighDateTime=0x1d459be, nFileSizeHigh=0x0, nFileSizeLow=0x18678)) returned 1 [0054.094] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0054.094] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\B05_T\\ag70uOVMAZyHaepYdjne.wav", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\B05_T\\ag70uOVMAZyHaepYdjne.wav", lpFilePart=0x0) returned 0x63 [0054.094] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0054.094] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\B05_T\\ag70uOVMAZyHaepYdjne.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\v4m4zk zj0onuyjxil\\qyqp7ps5mb\\-42tue1gv2\\b05_t\\ag70uovmazyhaepydjne.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0054.094] GetFileType (hFile=0x448) returned 0x1 [0054.094] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0054.094] GetFileType (hFile=0x448) returned 0x1 [0054.094] ReadFile (in: hFile=0x448, lpBuffer=0x2279550, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x2279550*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0054.104] CloseHandle (hObject=0x448) returned 1 [0054.104] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\B05_T\\ag70uOVMAZyHaepYdjne.wav", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\B05_T\\ag70uOVMAZyHaepYdjne.wav", lpFilePart=0x0) returned 0x63 [0054.104] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0054.104] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\B05_T\\ag70uOVMAZyHaepYdjne.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\v4m4zk zj0onuyjxil\\qyqp7ps5mb\\-42tue1gv2\\b05_t\\ag70uovmazyhaepydjne.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0054.104] GetFileType (hFile=0x448) returned 0x1 [0054.104] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0054.105] GetFileType (hFile=0x448) returned 0x1 [0054.105] WriteFile (in: hFile=0x448, lpBuffer=0x2277268*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x2277268*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0054.105] CloseHandle (hObject=0x448) returned 1 [0054.107] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\B05_T\\ag70uOVMAZyHaepYdjne.wav", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\B05_T\\ag70uOVMAZyHaepYdjne.wav", lpFilePart=0x0) returned 0x63 [0054.107] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\B05_T\\ag70uOVMAZyHaepYdjne.wav.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\B05_T\\ag70uOVMAZyHaepYdjne.wav.xuy", lpFilePart=0x0) returned 0x67 [0054.107] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0054.107] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\B05_T\\ag70uOVMAZyHaepYdjne.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\v4m4zk zj0onuyjxil\\qyqp7ps5mb\\-42tue1gv2\\b05_t\\ag70uovmazyhaepydjne.wav"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23768180, ftCreationTime.dwHighDateTime=0x1d45a66, ftLastAccessTime.dwLowDateTime=0x99d1aa60, ftLastAccessTime.dwHighDateTime=0x1d459be, ftLastWriteTime.dwLowDateTime=0xc1a2022, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x18678)) returned 1 [0054.107] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0054.107] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\B05_T\\ag70uOVMAZyHaepYdjne.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\v4m4zk zj0onuyjxil\\qyqp7ps5mb\\-42tue1gv2\\b05_t\\ag70uovmazyhaepydjne.wav"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\B05_T\\ag70uOVMAZyHaepYdjne.wav.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\v4m4zk zj0onuyjxil\\qyqp7ps5mb\\-42tue1gv2\\b05_t\\ag70uovmazyhaepydjne.wav.xuy")) returned 1 [0054.108] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\B05_T\\iPQyt.m4a", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\B05_T\\iPQyt.m4a", lpFilePart=0x0) returned 0x54 [0054.108] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0054.108] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\B05_T\\iPQyt.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\v4m4zk zj0onuyjxil\\qyqp7ps5mb\\-42tue1gv2\\b05_t\\ipqyt.m4a"), fInfoLevelId=0x0, lpFileInformation=0x22f59e0 | out: lpFileInformation=0x22f59e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd263c30, ftCreationTime.dwHighDateTime=0x1d45c47, ftLastAccessTime.dwLowDateTime=0xad052680, ftLastAccessTime.dwHighDateTime=0x1d45c97, ftLastWriteTime.dwLowDateTime=0xad052680, ftLastWriteTime.dwHighDateTime=0x1d45c97, nFileSizeHigh=0x0, nFileSizeLow=0x101f5)) returned 1 [0054.108] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0054.108] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\B05_T\\iPQyt.m4a", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\B05_T\\iPQyt.m4a", lpFilePart=0x0) returned 0x54 [0054.108] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0054.108] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\B05_T\\iPQyt.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\v4m4zk zj0onuyjxil\\qyqp7ps5mb\\-42tue1gv2\\b05_t\\ipqyt.m4a"), fInfoLevelId=0x0, lpFileInformation=0x22f5b40 | out: lpFileInformation=0x22f5b40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd263c30, ftCreationTime.dwHighDateTime=0x1d45c47, ftLastAccessTime.dwLowDateTime=0xad052680, ftLastAccessTime.dwHighDateTime=0x1d45c97, ftLastWriteTime.dwLowDateTime=0xad052680, ftLastWriteTime.dwHighDateTime=0x1d45c97, nFileSizeHigh=0x0, nFileSizeLow=0x101f5)) returned 1 [0054.108] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0054.108] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\B05_T\\iPQyt.m4a", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\B05_T\\iPQyt.m4a", lpFilePart=0x0) returned 0x54 [0054.108] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0054.108] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\B05_T\\iPQyt.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\v4m4zk zj0onuyjxil\\qyqp7ps5mb\\-42tue1gv2\\b05_t\\ipqyt.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0054.109] GetFileType (hFile=0x448) returned 0x1 [0054.109] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0054.109] GetFileType (hFile=0x448) returned 0x1 [0054.109] ReadFile (in: hFile=0x448, lpBuffer=0x22f7f30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x22f7f30*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0054.147] CloseHandle (hObject=0x448) returned 1 [0054.147] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\B05_T\\iPQyt.m4a", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\B05_T\\iPQyt.m4a", lpFilePart=0x0) returned 0x54 [0054.147] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0054.147] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\B05_T\\iPQyt.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\v4m4zk zj0onuyjxil\\qyqp7ps5mb\\-42tue1gv2\\b05_t\\ipqyt.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0054.148] GetFileType (hFile=0x448) returned 0x1 [0054.148] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0054.148] GetFileType (hFile=0x448) returned 0x1 [0054.148] WriteFile (in: hFile=0x448, lpBuffer=0x21552e0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x21552e0*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0054.148] CloseHandle (hObject=0x448) returned 1 [0054.150] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\B05_T\\iPQyt.m4a", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\B05_T\\iPQyt.m4a", lpFilePart=0x0) returned 0x54 [0054.150] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\B05_T\\iPQyt.m4a.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\B05_T\\iPQyt.m4a.xuy", lpFilePart=0x0) returned 0x58 [0054.150] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0054.150] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\B05_T\\iPQyt.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\v4m4zk zj0onuyjxil\\qyqp7ps5mb\\-42tue1gv2\\b05_t\\ipqyt.m4a"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd263c30, ftCreationTime.dwHighDateTime=0x1d45c47, ftLastAccessTime.dwLowDateTime=0xad052680, ftLastAccessTime.dwHighDateTime=0x1d45c97, ftLastWriteTime.dwLowDateTime=0xc1ef6cd, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x101f5)) returned 1 [0054.150] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0054.150] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\B05_T\\iPQyt.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\v4m4zk zj0onuyjxil\\qyqp7ps5mb\\-42tue1gv2\\b05_t\\ipqyt.m4a"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\B05_T\\iPQyt.m4a.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\v4m4zk zj0onuyjxil\\qyqp7ps5mb\\-42tue1gv2\\b05_t\\ipqyt.m4a.xuy")) returned 1 [0054.150] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\B05_T\\qbEo.wav", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\B05_T\\qbEo.wav", lpFilePart=0x0) returned 0x53 [0054.150] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0054.151] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\B05_T\\qbEo.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\v4m4zk zj0onuyjxil\\qyqp7ps5mb\\-42tue1gv2\\b05_t\\qbeo.wav"), fInfoLevelId=0x0, lpFileInformation=0x2174508 | out: lpFileInformation=0x2174508*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3901c470, ftCreationTime.dwHighDateTime=0x1d4638e, ftLastAccessTime.dwLowDateTime=0x24755cc0, ftLastAccessTime.dwHighDateTime=0x1d462de, ftLastWriteTime.dwLowDateTime=0x24755cc0, ftLastWriteTime.dwHighDateTime=0x1d462de, nFileSizeHigh=0x0, nFileSizeLow=0x15def)) returned 1 [0054.151] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0054.151] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\B05_T\\qbEo.wav", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\B05_T\\qbEo.wav", lpFilePart=0x0) returned 0x53 [0054.151] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0054.151] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\B05_T\\qbEo.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\v4m4zk zj0onuyjxil\\qyqp7ps5mb\\-42tue1gv2\\b05_t\\qbeo.wav"), fInfoLevelId=0x0, lpFileInformation=0x2174660 | out: lpFileInformation=0x2174660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3901c470, ftCreationTime.dwHighDateTime=0x1d4638e, ftLastAccessTime.dwLowDateTime=0x24755cc0, ftLastAccessTime.dwHighDateTime=0x1d462de, ftLastWriteTime.dwLowDateTime=0x24755cc0, ftLastWriteTime.dwHighDateTime=0x1d462de, nFileSizeHigh=0x0, nFileSizeLow=0x15def)) returned 1 [0054.151] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0054.151] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\B05_T\\qbEo.wav", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\B05_T\\qbEo.wav", lpFilePart=0x0) returned 0x53 [0054.151] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0054.151] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\B05_T\\qbEo.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\v4m4zk zj0onuyjxil\\qyqp7ps5mb\\-42tue1gv2\\b05_t\\qbeo.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0054.151] GetFileType (hFile=0x448) returned 0x1 [0054.151] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0054.151] GetFileType (hFile=0x448) returned 0x1 [0054.151] ReadFile (in: hFile=0x448, lpBuffer=0x2176a40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x2176a40*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0054.161] CloseHandle (hObject=0x448) returned 1 [0054.161] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\B05_T\\qbEo.wav", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\B05_T\\qbEo.wav", lpFilePart=0x0) returned 0x53 [0054.162] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0054.162] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\B05_T\\qbEo.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\v4m4zk zj0onuyjxil\\qyqp7ps5mb\\-42tue1gv2\\b05_t\\qbeo.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0054.162] GetFileType (hFile=0x448) returned 0x1 [0054.162] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0054.162] GetFileType (hFile=0x448) returned 0x1 [0054.162] WriteFile (in: hFile=0x448, lpBuffer=0x2174798*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x2174798*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0054.162] CloseHandle (hObject=0x448) returned 1 [0054.164] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\B05_T\\qbEo.wav", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\B05_T\\qbEo.wav", lpFilePart=0x0) returned 0x53 [0054.164] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\B05_T\\qbEo.wav.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\B05_T\\qbEo.wav.xuy", lpFilePart=0x0) returned 0x57 [0054.164] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0054.164] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\B05_T\\qbEo.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\v4m4zk zj0onuyjxil\\qyqp7ps5mb\\-42tue1gv2\\b05_t\\qbeo.wav"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3901c470, ftCreationTime.dwHighDateTime=0x1d4638e, ftLastAccessTime.dwLowDateTime=0x24755cc0, ftLastAccessTime.dwHighDateTime=0x1d462de, ftLastWriteTime.dwLowDateTime=0xc214861, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x15def)) returned 1 [0054.164] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0054.164] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\B05_T\\qbEo.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\v4m4zk zj0onuyjxil\\qyqp7ps5mb\\-42tue1gv2\\b05_t\\qbeo.wav"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\B05_T\\qbEo.wav.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\v4m4zk zj0onuyjxil\\qyqp7ps5mb\\-42tue1gv2\\b05_t\\qbeo.wav.xuy")) returned 1 [0054.165] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\B05_T\\vg-2sbVgxsUfL6fnj8H.mp3", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\B05_T\\vg-2sbVgxsUfL6fnj8H.mp3", lpFilePart=0x0) returned 0x62 [0054.165] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0054.165] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\B05_T\\vg-2sbVgxsUfL6fnj8H.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\v4m4zk zj0onuyjxil\\qyqp7ps5mb\\-42tue1gv2\\b05_t\\vg-2sbvgxsufl6fnj8h.mp3"), fInfoLevelId=0x0, lpFileInformation=0x21f2e30 | out: lpFileInformation=0x21f2e30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3606920, ftCreationTime.dwHighDateTime=0x1d45aad, ftLastAccessTime.dwLowDateTime=0xe72b8560, ftLastAccessTime.dwHighDateTime=0x1d45928, ftLastWriteTime.dwLowDateTime=0xe72b8560, ftLastWriteTime.dwHighDateTime=0x1d45928, nFileSizeHigh=0x0, nFileSizeLow=0x4fb2)) returned 1 [0054.165] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0054.165] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\B05_T\\vg-2sbVgxsUfL6fnj8H.mp3", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\B05_T\\vg-2sbVgxsUfL6fnj8H.mp3", lpFilePart=0x0) returned 0x62 [0054.165] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0054.165] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\B05_T\\vg-2sbVgxsUfL6fnj8H.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\v4m4zk zj0onuyjxil\\qyqp7ps5mb\\-42tue1gv2\\b05_t\\vg-2sbvgxsufl6fnj8h.mp3"), fInfoLevelId=0x0, lpFileInformation=0x21f2fc0 | out: lpFileInformation=0x21f2fc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3606920, ftCreationTime.dwHighDateTime=0x1d45aad, ftLastAccessTime.dwLowDateTime=0xe72b8560, ftLastAccessTime.dwHighDateTime=0x1d45928, ftLastWriteTime.dwLowDateTime=0xe72b8560, ftLastWriteTime.dwHighDateTime=0x1d45928, nFileSizeHigh=0x0, nFileSizeLow=0x4fb2)) returned 1 [0054.165] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0054.165] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\B05_T\\vg-2sbVgxsUfL6fnj8H.mp3", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\B05_T\\vg-2sbVgxsUfL6fnj8H.mp3", lpFilePart=0x0) returned 0x62 [0054.165] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0054.165] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\B05_T\\vg-2sbVgxsUfL6fnj8H.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\v4m4zk zj0onuyjxil\\qyqp7ps5mb\\-42tue1gv2\\b05_t\\vg-2sbvgxsufl6fnj8h.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0054.166] GetFileType (hFile=0x448) returned 0x1 [0054.166] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0054.166] GetFileType (hFile=0x448) returned 0x1 [0054.166] ReadFile (in: hFile=0x448, lpBuffer=0x21f5410, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x21f5410*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0054.176] CloseHandle (hObject=0x448) returned 1 [0054.176] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\B05_T\\vg-2sbVgxsUfL6fnj8H.mp3", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\B05_T\\vg-2sbVgxsUfL6fnj8H.mp3", lpFilePart=0x0) returned 0x62 [0054.176] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0054.176] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\B05_T\\vg-2sbVgxsUfL6fnj8H.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\v4m4zk zj0onuyjxil\\qyqp7ps5mb\\-42tue1gv2\\b05_t\\vg-2sbvgxsufl6fnj8h.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0054.176] GetFileType (hFile=0x448) returned 0x1 [0054.176] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0054.176] GetFileType (hFile=0x448) returned 0x1 [0054.176] WriteFile (in: hFile=0x448, lpBuffer=0x21f3130*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x21f3130*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0054.176] CloseHandle (hObject=0x448) returned 1 [0054.177] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\B05_T\\vg-2sbVgxsUfL6fnj8H.mp3", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\B05_T\\vg-2sbVgxsUfL6fnj8H.mp3", lpFilePart=0x0) returned 0x62 [0054.177] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\B05_T\\vg-2sbVgxsUfL6fnj8H.mp3.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\B05_T\\vg-2sbVgxsUfL6fnj8H.mp3.xuy", lpFilePart=0x0) returned 0x66 [0054.177] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0054.177] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\B05_T\\vg-2sbVgxsUfL6fnj8H.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\v4m4zk zj0onuyjxil\\qyqp7ps5mb\\-42tue1gv2\\b05_t\\vg-2sbvgxsufl6fnj8h.mp3"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3606920, ftCreationTime.dwHighDateTime=0x1d45aad, ftLastAccessTime.dwLowDateTime=0xe72b8560, ftLastAccessTime.dwHighDateTime=0x1d45928, ftLastWriteTime.dwLowDateTime=0xc23a9aa, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x4fb2)) returned 1 [0054.177] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0054.178] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\B05_T\\vg-2sbVgxsUfL6fnj8H.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\v4m4zk zj0onuyjxil\\qyqp7ps5mb\\-42tue1gv2\\b05_t\\vg-2sbvgxsufl6fnj8h.mp3"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\B05_T\\vg-2sbVgxsUfL6fnj8H.mp3.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\v4m4zk zj0onuyjxil\\qyqp7ps5mb\\-42tue1gv2\\b05_t\\vg-2sbvgxsufl6fnj8h.mp3.xuy")) returned 1 [0054.178] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\B05_T\\W5vUQUjzm.m4a", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\B05_T\\W5vUQUjzm.m4a", lpFilePart=0x0) returned 0x58 [0054.178] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0054.178] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\B05_T\\W5vUQUjzm.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\v4m4zk zj0onuyjxil\\qyqp7ps5mb\\-42tue1gv2\\b05_t\\w5vuqujzm.m4a"), fInfoLevelId=0x0, lpFileInformation=0x2271898 | out: lpFileInformation=0x2271898*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x714df870, ftCreationTime.dwHighDateTime=0x1d4647a, ftLastAccessTime.dwLowDateTime=0x99a55e20, ftLastAccessTime.dwHighDateTime=0x1d456e8, ftLastWriteTime.dwLowDateTime=0x99a55e20, ftLastWriteTime.dwHighDateTime=0x1d456e8, nFileSizeHigh=0x0, nFileSizeLow=0x5aab)) returned 1 [0054.178] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0054.178] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\B05_T\\W5vUQUjzm.m4a", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\B05_T\\W5vUQUjzm.m4a", lpFilePart=0x0) returned 0x58 [0054.178] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0054.178] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\B05_T\\W5vUQUjzm.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\v4m4zk zj0onuyjxil\\qyqp7ps5mb\\-42tue1gv2\\b05_t\\w5vuqujzm.m4a"), fInfoLevelId=0x0, lpFileInformation=0x2271a08 | out: lpFileInformation=0x2271a08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x714df870, ftCreationTime.dwHighDateTime=0x1d4647a, ftLastAccessTime.dwLowDateTime=0x99a55e20, ftLastAccessTime.dwHighDateTime=0x1d456e8, ftLastWriteTime.dwLowDateTime=0x99a55e20, ftLastWriteTime.dwHighDateTime=0x1d456e8, nFileSizeHigh=0x0, nFileSizeLow=0x5aab)) returned 1 [0054.179] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0054.179] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\B05_T\\W5vUQUjzm.m4a", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\B05_T\\W5vUQUjzm.m4a", lpFilePart=0x0) returned 0x58 [0054.179] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0054.179] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\B05_T\\W5vUQUjzm.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\v4m4zk zj0onuyjxil\\qyqp7ps5mb\\-42tue1gv2\\b05_t\\w5vuqujzm.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0054.179] GetFileType (hFile=0x448) returned 0x1 [0054.179] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0054.179] GetFileType (hFile=0x448) returned 0x1 [0054.179] ReadFile (in: hFile=0x448, lpBuffer=0x2273e18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x2273e18*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0054.190] CloseHandle (hObject=0x448) returned 1 [0054.190] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\B05_T\\W5vUQUjzm.m4a", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\B05_T\\W5vUQUjzm.m4a", lpFilePart=0x0) returned 0x58 [0054.190] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0054.190] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\B05_T\\W5vUQUjzm.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\v4m4zk zj0onuyjxil\\qyqp7ps5mb\\-42tue1gv2\\b05_t\\w5vuqujzm.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0054.191] GetFileType (hFile=0x448) returned 0x1 [0054.191] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0054.191] GetFileType (hFile=0x448) returned 0x1 [0054.191] WriteFile (in: hFile=0x448, lpBuffer=0x2271b58*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x2271b58*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0054.191] CloseHandle (hObject=0x448) returned 1 [0054.192] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\B05_T\\W5vUQUjzm.m4a", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\B05_T\\W5vUQUjzm.m4a", lpFilePart=0x0) returned 0x58 [0054.192] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\B05_T\\W5vUQUjzm.m4a.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\B05_T\\W5vUQUjzm.m4a.xuy", lpFilePart=0x0) returned 0x5c [0054.192] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0054.192] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\B05_T\\W5vUQUjzm.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\v4m4zk zj0onuyjxil\\qyqp7ps5mb\\-42tue1gv2\\b05_t\\w5vuqujzm.m4a"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x714df870, ftCreationTime.dwHighDateTime=0x1d4647a, ftLastAccessTime.dwLowDateTime=0x99a55e20, ftLastAccessTime.dwHighDateTime=0x1d456e8, ftLastWriteTime.dwLowDateTime=0xc26520a, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x5aab)) returned 1 [0054.192] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0054.192] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\B05_T\\W5vUQUjzm.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\v4m4zk zj0onuyjxil\\qyqp7ps5mb\\-42tue1gv2\\b05_t\\w5vuqujzm.m4a"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\V4M4Zk zJ0onUYJXIl\\QYqp7ps5mB\\-42tUE1gV2\\B05_T\\W5vUQUjzm.m4a.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\v4m4zk zj0onuyjxil\\qyqp7ps5mb\\-42tue1gv2\\b05_t\\w5vuqujzm.m4a.xuy")) returned 1 [0054.193] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be950) returned 1 [0054.193] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos", nBufferLength=0x105, lpBuffer=0x3be440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos", lpFilePart=0x0) returned 0x1c [0054.193] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\", nBufferLength=0x105, lpBuffer=0x3be3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\", lpFilePart=0x0) returned 0x1d [0054.193] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\*", lpFindFileData=0x3be5f0 | out: lpFindFileData=0x3be5f0) returned 0x5d7a90 [0054.193] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0054.193] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0054.193] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0054.194] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0054.194] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0054.194] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0054.194] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 0 [0054.194] FindClose (in: hFindFile=0x5d7a90 | out: hFindFile=0x5d7a90) returned 1 [0054.194] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0054.194] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0054.194] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be950) returned 1 [0054.194] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos", nBufferLength=0x105, lpBuffer=0x3be440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos", lpFilePart=0x0) returned 0x1c [0054.194] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\", nBufferLength=0x105, lpBuffer=0x3be3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\", lpFilePart=0x0) returned 0x1d [0054.194] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\*", lpFindFileData=0x3be5f0 | out: lpFindFileData=0x3be5f0) returned 0x5d7370 [0054.194] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0054.195] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0054.195] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0054.195] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0054.195] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0054.195] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0054.195] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 0 [0054.195] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0054.195] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0054.195] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0054.195] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\9-jMlK1J06Z.swf", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\9-jMlK1J06Z.swf", lpFilePart=0x0) returned 0x2c [0054.195] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0054.196] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\9-jMlK1J06Z.swf" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\9-jmlk1j06z.swf"), fInfoLevelId=0x0, lpFileInformation=0x22f23c8 | out: lpFileInformation=0x22f23c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110e1d40, ftCreationTime.dwHighDateTime=0x1d45dd2, ftLastAccessTime.dwLowDateTime=0x8dbe8e10, ftLastAccessTime.dwHighDateTime=0x1d4596d, ftLastWriteTime.dwLowDateTime=0x8dbe8e10, ftLastWriteTime.dwHighDateTime=0x1d4596d, nFileSizeHigh=0x0, nFileSizeLow=0x12e48)) returned 1 [0054.196] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0054.196] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\9-jMlK1J06Z.swf", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\9-jMlK1J06Z.swf", lpFilePart=0x0) returned 0x2c [0054.196] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0054.196] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\9-jMlK1J06Z.swf" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\9-jmlk1j06z.swf"), fInfoLevelId=0x0, lpFileInformation=0x22f24e0 | out: lpFileInformation=0x22f24e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110e1d40, ftCreationTime.dwHighDateTime=0x1d45dd2, ftLastAccessTime.dwLowDateTime=0x8dbe8e10, ftLastAccessTime.dwHighDateTime=0x1d4596d, ftLastWriteTime.dwLowDateTime=0x8dbe8e10, ftLastWriteTime.dwHighDateTime=0x1d4596d, nFileSizeHigh=0x0, nFileSizeLow=0x12e48)) returned 1 [0054.196] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0054.196] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\9-jMlK1J06Z.swf", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\9-jMlK1J06Z.swf", lpFilePart=0x0) returned 0x2c [0054.196] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0054.196] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\9-jMlK1J06Z.swf" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\9-jmlk1j06z.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0054.196] GetFileType (hFile=0x448) returned 0x1 [0054.196] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0054.196] GetFileType (hFile=0x448) returned 0x1 [0054.196] ReadFile (in: hFile=0x448, lpBuffer=0x22f4840, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be8b8, lpOverlapped=0x0 | out: lpBuffer=0x22f4840*, lpNumberOfBytesRead=0x3be8b8*=0x1000, lpOverlapped=0x0) returned 1 [0054.239] CloseHandle (hObject=0x448) returned 1 [0054.239] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\9-jMlK1J06Z.swf", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\9-jMlK1J06Z.swf", lpFilePart=0x0) returned 0x2c [0054.239] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0054.239] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\9-jMlK1J06Z.swf" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\9-jmlk1j06z.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0054.239] GetFileType (hFile=0x448) returned 0x1 [0054.239] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0054.239] GetFileType (hFile=0x448) returned 0x1 [0054.239] WriteFile (in: hFile=0x448, lpBuffer=0x2154ba0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be968, lpOverlapped=0x0 | out: lpBuffer=0x2154ba0*, lpNumberOfBytesWritten=0x3be968*=0x2000, lpOverlapped=0x0) returned 1 [0054.239] CloseHandle (hObject=0x448) returned 1 [0054.241] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\9-jMlK1J06Z.swf", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\9-jMlK1J06Z.swf", lpFilePart=0x0) returned 0x2c [0054.241] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\9-jMlK1J06Z.swf.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\9-jMlK1J06Z.swf.xuy", lpFilePart=0x0) returned 0x30 [0054.241] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0054.241] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\9-jMlK1J06Z.swf" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\9-jmlk1j06z.swf"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110e1d40, ftCreationTime.dwHighDateTime=0x1d45dd2, ftLastAccessTime.dwLowDateTime=0x8dbe8e10, ftLastAccessTime.dwHighDateTime=0x1d4596d, ftLastWriteTime.dwLowDateTime=0xc2d329b, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x12e48)) returned 1 [0054.241] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0054.241] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\9-jMlK1J06Z.swf" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\9-jmlk1j06z.swf"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\9-jMlK1J06Z.swf.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\9-jmlk1j06z.swf.xuy")) returned 1 [0054.242] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\desktop.ini", lpFilePart=0x0) returned 0x28 [0054.242] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0054.242] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x21703b0 | out: lpFileInformation=0x21703b0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xae0aa00a, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xae0aa00a, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xae14297a, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x1f8)) returned 1 [0054.242] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0054.242] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\desktop.ini", lpFilePart=0x0) returned 0x28 [0054.242] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0054.242] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0054.242] GetFileType (hFile=0x448) returned 0x1 [0054.242] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0054.242] GetFileType (hFile=0x448) returned 0x1 [0054.242] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x1f8 [0054.242] ReadFile (in: hFile=0x448, lpBuffer=0x21707d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x21707d0*, lpNumberOfBytesRead=0x3be868*=0x1f8, lpOverlapped=0x0) returned 1 [0054.243] CloseHandle (hObject=0x448) returned 1 [0054.253] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\desktop.ini", lpFilePart=0x0) returned 0x28 [0054.253] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0054.253] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\desktop.ini"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0054.254] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb230) returned 1 [0054.255] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3bbeb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\desktop.ini", lpFilePart=0x0) returned 0x28 [0054.255] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc350) returned 1 [0054.255] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x3bc430 | out: lpFileInformation=0x3bc430*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xae0aa00a, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xae0aa00a, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xae14297a, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x1f8)) returned 1 [0054.255] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc310) returned 1 [0054.255] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3bbed0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\desktop.ini", lpFilePart=0x0) returned 0x28 [0054.255] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc350) returned 1 [0054.255] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x21e8930 | out: lpFileInformation=0x21e8930*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xae0aa00a, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xae0aa00a, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xae14297a, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x1f8)) returned 1 [0054.255] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc310) returned 1 [0054.255] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3bbd30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\desktop.ini", lpFilePart=0x0) returned 0x28 [0054.255] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc210) returned 1 [0054.255] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0054.256] GetFileType (hFile=0x448) returned 0x1 [0054.256] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc180) returned 1 [0054.256] GetFileType (hFile=0x448) returned 0x1 [0054.256] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3bc3a8 | out: lpFileSizeHigh=0x3bc3a8*=0x0) returned 0x1f8 [0054.256] ReadFile (in: hFile=0x448, lpBuffer=0x21e8d50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bc2d8, lpOverlapped=0x0 | out: lpBuffer=0x21e8d50*, lpNumberOfBytesRead=0x3bc2d8*=0x1f8, lpOverlapped=0x0) returned 1 [0054.256] CloseHandle (hObject=0x448) returned 1 [0054.293] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3bbd30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\desktop.ini", lpFilePart=0x0) returned 0x28 [0054.293] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc210) returned 1 [0054.293] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\desktop.ini"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0054.295] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8ca0) returned 1 [0054.296] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\sasJA6VrgSyC4AEc.mkv", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\sasJA6VrgSyC4AEc.mkv", lpFilePart=0x0) returned 0x31 [0054.296] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0054.296] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\sasJA6VrgSyC4AEc.mkv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\sasja6vrgsyc4aec.mkv"), fInfoLevelId=0x0, lpFileInformation=0x2260e68 | out: lpFileInformation=0x2260e68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf11d290, ftCreationTime.dwHighDateTime=0x1d459a1, ftLastAccessTime.dwLowDateTime=0x17f1e410, ftLastAccessTime.dwHighDateTime=0x1d4654e, ftLastWriteTime.dwLowDateTime=0x17f1e410, ftLastWriteTime.dwHighDateTime=0x1d4654e, nFileSizeHigh=0x0, nFileSizeLow=0xb5f7)) returned 1 [0054.296] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0054.296] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\sasJA6VrgSyC4AEc.mkv", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\sasJA6VrgSyC4AEc.mkv", lpFilePart=0x0) returned 0x31 [0054.296] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0054.296] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\sasJA6VrgSyC4AEc.mkv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\sasja6vrgsyc4aec.mkv"), fInfoLevelId=0x0, lpFileInformation=0x2260f98 | out: lpFileInformation=0x2260f98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf11d290, ftCreationTime.dwHighDateTime=0x1d459a1, ftLastAccessTime.dwLowDateTime=0x17f1e410, ftLastAccessTime.dwHighDateTime=0x1d4654e, ftLastWriteTime.dwLowDateTime=0x17f1e410, ftLastWriteTime.dwHighDateTime=0x1d4654e, nFileSizeHigh=0x0, nFileSizeLow=0xb5f7)) returned 1 [0054.296] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0054.296] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\sasJA6VrgSyC4AEc.mkv", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\sasJA6VrgSyC4AEc.mkv", lpFilePart=0x0) returned 0x31 [0054.296] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0054.296] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\sasJA6VrgSyC4AEc.mkv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\sasja6vrgsyc4aec.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0054.296] GetFileType (hFile=0x448) returned 0x1 [0054.296] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0054.296] GetFileType (hFile=0x448) returned 0x1 [0054.296] ReadFile (in: hFile=0x448, lpBuffer=0x2263328, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be8b8, lpOverlapped=0x0 | out: lpBuffer=0x2263328*, lpNumberOfBytesRead=0x3be8b8*=0x1000, lpOverlapped=0x0) returned 1 [0054.332] CloseHandle (hObject=0x448) returned 1 [0054.332] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\sasJA6VrgSyC4AEc.mkv", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\sasJA6VrgSyC4AEc.mkv", lpFilePart=0x0) returned 0x31 [0054.332] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0054.333] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\sasJA6VrgSyC4AEc.mkv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\sasja6vrgsyc4aec.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0054.333] GetFileType (hFile=0x448) returned 0x1 [0054.333] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0054.333] GetFileType (hFile=0x448) returned 0x1 [0054.333] WriteFile (in: hFile=0x448, lpBuffer=0x22610a8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be968, lpOverlapped=0x0 | out: lpBuffer=0x22610a8*, lpNumberOfBytesWritten=0x3be968*=0x2000, lpOverlapped=0x0) returned 1 [0054.333] CloseHandle (hObject=0x448) returned 1 [0054.334] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\sasJA6VrgSyC4AEc.mkv", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\sasJA6VrgSyC4AEc.mkv", lpFilePart=0x0) returned 0x31 [0054.334] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\sasJA6VrgSyC4AEc.mkv.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\sasJA6VrgSyC4AEc.mkv.xuy", lpFilePart=0x0) returned 0x35 [0054.334] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0054.334] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\sasJA6VrgSyC4AEc.mkv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\sasja6vrgsyc4aec.mkv"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf11d290, ftCreationTime.dwHighDateTime=0x1d459a1, ftLastAccessTime.dwLowDateTime=0x17f1e410, ftLastAccessTime.dwHighDateTime=0x1d4654e, ftLastWriteTime.dwLowDateTime=0xc3b80df, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xb5f7)) returned 1 [0054.335] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0054.335] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\sasJA6VrgSyC4AEc.mkv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\sasja6vrgsyc4aec.mkv"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\sasJA6VrgSyC4AEc.mkv.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\sasja6vrgsyc4aec.mkv.xuy")) returned 1 [0054.335] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0054.336] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6", nBufferLength=0x105, lpBuffer=0x3be3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6", lpFilePart=0x0) returned 0x21 [0054.336] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\", nBufferLength=0x105, lpBuffer=0x3be370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\", lpFilePart=0x0) returned 0x22 [0054.336] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\*", lpFindFileData=0x3be580 | out: lpFindFileData=0x3be580) returned 0x5d7af0 [0054.336] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0054.336] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0054.336] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0054.336] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0054.336] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0054.337] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0054.337] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0054.337] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0054.337] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0054.337] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 0 [0054.337] FindClose (in: hFindFile=0x5d7af0 | out: hFindFile=0x5d7af0) returned 1 [0054.337] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0054.337] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7f0) returned 1 [0054.337] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0054.337] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6", nBufferLength=0x105, lpBuffer=0x3be3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6", lpFilePart=0x0) returned 0x21 [0054.337] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\", nBufferLength=0x105, lpBuffer=0x3be370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\", lpFilePart=0x0) returned 0x22 [0054.337] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\*", lpFindFileData=0x3be580 | out: lpFindFileData=0x3be580) returned 0x5d78b0 [0054.338] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0054.338] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0054.338] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0054.338] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0054.338] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0054.338] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0054.338] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0054.338] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0054.339] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0054.339] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 0 [0054.339] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0054.339] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0054.339] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7f0) returned 1 [0054.339] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\ElxEIJtu-_rA.swf", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\ElxEIJtu-_rA.swf", lpFilePart=0x0) returned 0x32 [0054.339] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0054.339] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\ElxEIJtu-_rA.swf" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\hn-6\\elxeijtu-_ra.swf"), fInfoLevelId=0x0, lpFileInformation=0x22e24c8 | out: lpFileInformation=0x22e24c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39fd06b0, ftCreationTime.dwHighDateTime=0x1d462c5, ftLastAccessTime.dwLowDateTime=0x97fa31f0, ftLastAccessTime.dwHighDateTime=0x1d46498, ftLastWriteTime.dwLowDateTime=0x97fa31f0, ftLastWriteTime.dwHighDateTime=0x1d46498, nFileSizeHigh=0x0, nFileSizeLow=0x181ce)) returned 1 [0054.339] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0054.339] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\ElxEIJtu-_rA.swf", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\ElxEIJtu-_rA.swf", lpFilePart=0x0) returned 0x32 [0054.339] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0054.339] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\ElxEIJtu-_rA.swf" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\hn-6\\elxeijtu-_ra.swf"), fInfoLevelId=0x0, lpFileInformation=0x22e25f0 | out: lpFileInformation=0x22e25f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39fd06b0, ftCreationTime.dwHighDateTime=0x1d462c5, ftLastAccessTime.dwLowDateTime=0x97fa31f0, ftLastAccessTime.dwHighDateTime=0x1d46498, ftLastWriteTime.dwLowDateTime=0x97fa31f0, ftLastWriteTime.dwHighDateTime=0x1d46498, nFileSizeHigh=0x0, nFileSizeLow=0x181ce)) returned 1 [0054.339] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0054.339] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\ElxEIJtu-_rA.swf", nBufferLength=0x105, lpBuffer=0x3be2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\ElxEIJtu-_rA.swf", lpFilePart=0x0) returned 0x32 [0054.339] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0054.339] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\ElxEIJtu-_rA.swf" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\hn-6\\elxeijtu-_ra.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0054.340] GetFileType (hFile=0x448) returned 0x1 [0054.340] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be730) returned 1 [0054.340] GetFileType (hFile=0x448) returned 0x1 [0054.340] ReadFile (in: hFile=0x448, lpBuffer=0x22e4970, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be848, lpOverlapped=0x0 | out: lpBuffer=0x22e4970*, lpNumberOfBytesRead=0x3be848*=0x1000, lpOverlapped=0x0) returned 1 [0054.384] CloseHandle (hObject=0x448) returned 1 [0054.384] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\ElxEIJtu-_rA.swf", nBufferLength=0x105, lpBuffer=0x3be2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\ElxEIJtu-_rA.swf", lpFilePart=0x0) returned 0x32 [0054.385] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0054.385] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\ElxEIJtu-_rA.swf" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\hn-6\\elxeijtu-_ra.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0054.385] GetFileType (hFile=0x448) returned 0x1 [0054.385] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be730) returned 1 [0054.385] GetFileType (hFile=0x448) returned 0x1 [0054.385] WriteFile (in: hFile=0x448, lpBuffer=0x2154ff0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be8f8, lpOverlapped=0x0 | out: lpBuffer=0x2154ff0*, lpNumberOfBytesWritten=0x3be8f8*=0x2000, lpOverlapped=0x0) returned 1 [0054.385] CloseHandle (hObject=0x448) returned 1 [0054.389] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\ElxEIJtu-_rA.swf", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\ElxEIJtu-_rA.swf", lpFilePart=0x0) returned 0x32 [0054.389] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\ElxEIJtu-_rA.swf.xuy", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\ElxEIJtu-_rA.swf.xuy", lpFilePart=0x0) returned 0x36 [0054.389] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0054.389] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\ElxEIJtu-_rA.swf" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\hn-6\\elxeijtu-_ra.swf"), fInfoLevelId=0x0, lpFileInformation=0x3be910 | out: lpFileInformation=0x3be910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39fd06b0, ftCreationTime.dwHighDateTime=0x1d462c5, ftLastAccessTime.dwLowDateTime=0x97fa31f0, ftLastAccessTime.dwHighDateTime=0x1d46498, ftLastWriteTime.dwLowDateTime=0xc45385a, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x181ce)) returned 1 [0054.389] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7f0) returned 1 [0054.389] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\ElxEIJtu-_rA.swf" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\hn-6\\elxeijtu-_ra.swf"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\ElxEIJtu-_rA.swf.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\hn-6\\elxeijtu-_ra.swf.xuy")) returned 1 [0054.390] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\J1Ku s.mkv", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\J1Ku s.mkv", lpFilePart=0x0) returned 0x2c [0054.390] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0054.390] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\J1Ku s.mkv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\hn-6\\j1ku s.mkv"), fInfoLevelId=0x0, lpFileInformation=0x21610a8 | out: lpFileInformation=0x21610a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x583ab4a0, ftCreationTime.dwHighDateTime=0x1d45c6d, ftLastAccessTime.dwLowDateTime=0x45dc5870, ftLastAccessTime.dwHighDateTime=0x1d45747, ftLastWriteTime.dwLowDateTime=0x45dc5870, ftLastWriteTime.dwHighDateTime=0x1d45747, nFileSizeHigh=0x0, nFileSizeLow=0x17846)) returned 1 [0054.390] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0054.390] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\J1Ku s.mkv", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\J1Ku s.mkv", lpFilePart=0x0) returned 0x2c [0054.390] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0054.391] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\J1Ku s.mkv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\hn-6\\j1ku s.mkv"), fInfoLevelId=0x0, lpFileInformation=0x21611b8 | out: lpFileInformation=0x21611b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x583ab4a0, ftCreationTime.dwHighDateTime=0x1d45c6d, ftLastAccessTime.dwLowDateTime=0x45dc5870, ftLastAccessTime.dwHighDateTime=0x1d45747, ftLastWriteTime.dwLowDateTime=0x45dc5870, ftLastWriteTime.dwHighDateTime=0x1d45747, nFileSizeHigh=0x0, nFileSizeLow=0x17846)) returned 1 [0054.391] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0054.391] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\J1Ku s.mkv", nBufferLength=0x105, lpBuffer=0x3be2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\J1Ku s.mkv", lpFilePart=0x0) returned 0x2c [0054.391] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0054.391] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\J1Ku s.mkv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\hn-6\\j1ku s.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0054.391] GetFileType (hFile=0x448) returned 0x1 [0054.391] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be730) returned 1 [0054.391] GetFileType (hFile=0x448) returned 0x1 [0054.391] ReadFile (in: hFile=0x448, lpBuffer=0x2163508, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be848, lpOverlapped=0x0 | out: lpBuffer=0x2163508*, lpNumberOfBytesRead=0x3be848*=0x1000, lpOverlapped=0x0) returned 1 [0054.410] CloseHandle (hObject=0x448) returned 1 [0054.411] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\J1Ku s.mkv", nBufferLength=0x105, lpBuffer=0x3be2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\J1Ku s.mkv", lpFilePart=0x0) returned 0x2c [0054.411] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0054.411] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\J1Ku s.mkv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\hn-6\\j1ku s.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0054.411] GetFileType (hFile=0x448) returned 0x1 [0054.411] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be730) returned 1 [0054.411] GetFileType (hFile=0x448) returned 0x1 [0054.411] WriteFile (in: hFile=0x448, lpBuffer=0x21612a8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be8f8, lpOverlapped=0x0 | out: lpBuffer=0x21612a8*, lpNumberOfBytesWritten=0x3be8f8*=0x2000, lpOverlapped=0x0) returned 1 [0054.411] CloseHandle (hObject=0x448) returned 1 [0054.413] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\J1Ku s.mkv", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\J1Ku s.mkv", lpFilePart=0x0) returned 0x2c [0054.413] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\J1Ku s.mkv.xuy", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\J1Ku s.mkv.xuy", lpFilePart=0x0) returned 0x30 [0054.413] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0054.413] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\J1Ku s.mkv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\hn-6\\j1ku s.mkv"), fInfoLevelId=0x0, lpFileInformation=0x3be910 | out: lpFileInformation=0x3be910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x583ab4a0, ftCreationTime.dwHighDateTime=0x1d45c6d, ftLastAccessTime.dwLowDateTime=0x45dc5870, ftLastAccessTime.dwHighDateTime=0x1d45747, ftLastWriteTime.dwLowDateTime=0xc47738a, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x17846)) returned 1 [0054.413] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7f0) returned 1 [0054.414] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\J1Ku s.mkv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\hn-6\\j1ku s.mkv"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\J1Ku s.mkv.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\hn-6\\j1ku s.mkv.xuy")) returned 1 [0054.414] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\MzwZZ.mkv", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\MzwZZ.mkv", lpFilePart=0x0) returned 0x2b [0054.414] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0054.414] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\MzwZZ.mkv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\hn-6\\mzwzz.mkv"), fInfoLevelId=0x0, lpFileInformation=0x21df7d8 | out: lpFileInformation=0x21df7d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcbbaf50, ftCreationTime.dwHighDateTime=0x1d45807, ftLastAccessTime.dwLowDateTime=0xc8078d30, ftLastAccessTime.dwHighDateTime=0x1d46401, ftLastWriteTime.dwLowDateTime=0xc8078d30, ftLastWriteTime.dwHighDateTime=0x1d46401, nFileSizeHigh=0x0, nFileSizeLow=0xdfd2)) returned 1 [0054.414] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0054.414] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\MzwZZ.mkv", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\MzwZZ.mkv", lpFilePart=0x0) returned 0x2b [0054.414] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0054.414] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\MzwZZ.mkv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\hn-6\\mzwzz.mkv"), fInfoLevelId=0x0, lpFileInformation=0x21df8e0 | out: lpFileInformation=0x21df8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcbbaf50, ftCreationTime.dwHighDateTime=0x1d45807, ftLastAccessTime.dwLowDateTime=0xc8078d30, ftLastAccessTime.dwHighDateTime=0x1d46401, ftLastWriteTime.dwLowDateTime=0xc8078d30, ftLastWriteTime.dwHighDateTime=0x1d46401, nFileSizeHigh=0x0, nFileSizeLow=0xdfd2)) returned 1 [0054.414] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0054.415] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\MzwZZ.mkv", nBufferLength=0x105, lpBuffer=0x3be2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\MzwZZ.mkv", lpFilePart=0x0) returned 0x2b [0054.415] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0054.415] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\MzwZZ.mkv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\hn-6\\mzwzz.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0054.415] GetFileType (hFile=0x448) returned 0x1 [0054.415] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be730) returned 1 [0054.415] GetFileType (hFile=0x448) returned 0x1 [0054.415] ReadFile (in: hFile=0x448, lpBuffer=0x21e1c20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be848, lpOverlapped=0x0 | out: lpBuffer=0x21e1c20*, lpNumberOfBytesRead=0x3be848*=0x1000, lpOverlapped=0x0) returned 1 [0054.465] CloseHandle (hObject=0x448) returned 1 [0054.466] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\MzwZZ.mkv", nBufferLength=0x105, lpBuffer=0x3be2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\MzwZZ.mkv", lpFilePart=0x0) returned 0x2b [0054.466] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0054.466] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\MzwZZ.mkv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\hn-6\\mzwzz.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0054.466] GetFileType (hFile=0x448) returned 0x1 [0054.466] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be730) returned 1 [0054.466] GetFileType (hFile=0x448) returned 0x1 [0054.466] WriteFile (in: hFile=0x448, lpBuffer=0x21df9c8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be8f8, lpOverlapped=0x0 | out: lpBuffer=0x21df9c8*, lpNumberOfBytesWritten=0x3be8f8*=0x2000, lpOverlapped=0x0) returned 1 [0054.467] CloseHandle (hObject=0x448) returned 1 [0054.469] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\MzwZZ.mkv", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\MzwZZ.mkv", lpFilePart=0x0) returned 0x2b [0054.469] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\MzwZZ.mkv.xuy", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\MzwZZ.mkv.xuy", lpFilePart=0x0) returned 0x2f [0054.469] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0054.469] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\MzwZZ.mkv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\hn-6\\mzwzz.mkv"), fInfoLevelId=0x0, lpFileInformation=0x3be910 | out: lpFileInformation=0x3be910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcbbaf50, ftCreationTime.dwHighDateTime=0x1d45807, ftLastAccessTime.dwLowDateTime=0xc8078d30, ftLastAccessTime.dwHighDateTime=0x1d46401, ftLastWriteTime.dwLowDateTime=0xc50f982, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xdfd2)) returned 1 [0054.469] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7f0) returned 1 [0054.469] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\MzwZZ.mkv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\hn-6\\mzwzz.mkv"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\MzwZZ.mkv.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\hn-6\\mzwzz.mkv.xuy")) returned 1 [0054.470] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\y8reS6m.avi", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\y8reS6m.avi", lpFilePart=0x0) returned 0x2d [0054.470] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0054.470] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\y8reS6m.avi" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\hn-6\\y8res6m.avi"), fInfoLevelId=0x0, lpFileInformation=0x225ded0 | out: lpFileInformation=0x225ded0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefdd3630, ftCreationTime.dwHighDateTime=0x1d45b45, ftLastAccessTime.dwLowDateTime=0xec2b1b70, ftLastAccessTime.dwHighDateTime=0x1d463dc, ftLastWriteTime.dwLowDateTime=0xec2b1b70, ftLastWriteTime.dwHighDateTime=0x1d463dc, nFileSizeHigh=0x0, nFileSizeLow=0xa1c7)) returned 1 [0054.470] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0054.470] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\y8reS6m.avi", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\y8reS6m.avi", lpFilePart=0x0) returned 0x2d [0054.470] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0054.470] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\y8reS6m.avi" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\hn-6\\y8res6m.avi"), fInfoLevelId=0x0, lpFileInformation=0x225dfe0 | out: lpFileInformation=0x225dfe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefdd3630, ftCreationTime.dwHighDateTime=0x1d45b45, ftLastAccessTime.dwLowDateTime=0xec2b1b70, ftLastAccessTime.dwHighDateTime=0x1d463dc, ftLastWriteTime.dwLowDateTime=0xec2b1b70, ftLastWriteTime.dwHighDateTime=0x1d463dc, nFileSizeHigh=0x0, nFileSizeLow=0xa1c7)) returned 1 [0054.471] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0054.471] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\y8reS6m.avi", nBufferLength=0x105, lpBuffer=0x3be2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\y8reS6m.avi", lpFilePart=0x0) returned 0x2d [0054.471] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0054.471] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\y8reS6m.avi" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\hn-6\\y8res6m.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0054.471] GetFileType (hFile=0x448) returned 0x1 [0054.471] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be730) returned 1 [0054.471] GetFileType (hFile=0x448) returned 0x1 [0054.471] ReadFile (in: hFile=0x448, lpBuffer=0x2260330, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be848, lpOverlapped=0x0 | out: lpBuffer=0x2260330*, lpNumberOfBytesRead=0x3be848*=0x1000, lpOverlapped=0x0) returned 1 [0054.481] CloseHandle (hObject=0x448) returned 1 [0054.482] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\y8reS6m.avi", nBufferLength=0x105, lpBuffer=0x3be2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\y8reS6m.avi", lpFilePart=0x0) returned 0x2d [0054.482] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0054.482] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\y8reS6m.avi" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\hn-6\\y8res6m.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0054.482] GetFileType (hFile=0x448) returned 0x1 [0054.482] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be730) returned 1 [0054.482] GetFileType (hFile=0x448) returned 0x1 [0054.482] WriteFile (in: hFile=0x448, lpBuffer=0x225e0d0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be8f8, lpOverlapped=0x0 | out: lpBuffer=0x225e0d0*, lpNumberOfBytesWritten=0x3be8f8*=0x2000, lpOverlapped=0x0) returned 1 [0054.482] CloseHandle (hObject=0x448) returned 1 [0054.484] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\y8reS6m.avi", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\y8reS6m.avi", lpFilePart=0x0) returned 0x2d [0054.484] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\y8reS6m.avi.xuy", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\y8reS6m.avi.xuy", lpFilePart=0x0) returned 0x31 [0054.484] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0054.484] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\y8reS6m.avi" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\hn-6\\y8res6m.avi"), fInfoLevelId=0x0, lpFileInformation=0x3be910 | out: lpFileInformation=0x3be910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefdd3630, ftCreationTime.dwHighDateTime=0x1d45b45, ftLastAccessTime.dwLowDateTime=0xec2b1b70, ftLastAccessTime.dwHighDateTime=0x1d463dc, ftLastWriteTime.dwLowDateTime=0xc5358b2, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xa1c7)) returned 1 [0054.484] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7f0) returned 1 [0054.484] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\y8reS6m.avi" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\hn-6\\y8res6m.avi"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\y8reS6m.avi.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\hn-6\\y8res6m.avi.xuy")) returned 1 [0054.484] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\zaD3n7 mmqSGIGhEu.flv", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\zaD3n7 mmqSGIGhEu.flv", lpFilePart=0x0) returned 0x37 [0054.485] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0054.485] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\zaD3n7 mmqSGIGhEu.flv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\hn-6\\zad3n7 mmqsgigheu.flv"), fInfoLevelId=0x0, lpFileInformation=0x22dc600 | out: lpFileInformation=0x22dc600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f23b730, ftCreationTime.dwHighDateTime=0x1d45e87, ftLastAccessTime.dwLowDateTime=0x90526b00, ftLastAccessTime.dwHighDateTime=0x1d4578e, ftLastWriteTime.dwLowDateTime=0x90526b00, ftLastWriteTime.dwHighDateTime=0x1d4578e, nFileSizeHigh=0x0, nFileSizeLow=0x6cff)) returned 1 [0054.485] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0054.485] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\zaD3n7 mmqSGIGhEu.flv", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\zaD3n7 mmqSGIGhEu.flv", lpFilePart=0x0) returned 0x37 [0054.485] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0054.485] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\zaD3n7 mmqSGIGhEu.flv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\hn-6\\zad3n7 mmqsgigheu.flv"), fInfoLevelId=0x0, lpFileInformation=0x22dc738 | out: lpFileInformation=0x22dc738*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f23b730, ftCreationTime.dwHighDateTime=0x1d45e87, ftLastAccessTime.dwLowDateTime=0x90526b00, ftLastAccessTime.dwHighDateTime=0x1d4578e, ftLastWriteTime.dwLowDateTime=0x90526b00, ftLastWriteTime.dwHighDateTime=0x1d4578e, nFileSizeHigh=0x0, nFileSizeLow=0x6cff)) returned 1 [0054.485] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0054.485] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\zaD3n7 mmqSGIGhEu.flv", nBufferLength=0x105, lpBuffer=0x3be2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\zaD3n7 mmqSGIGhEu.flv", lpFilePart=0x0) returned 0x37 [0054.485] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0054.485] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\zaD3n7 mmqSGIGhEu.flv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\hn-6\\zad3n7 mmqsgigheu.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0054.485] GetFileType (hFile=0x448) returned 0x1 [0054.485] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be730) returned 1 [0054.485] GetFileType (hFile=0x448) returned 0x1 [0054.485] ReadFile (in: hFile=0x448, lpBuffer=0x22dead8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be848, lpOverlapped=0x0 | out: lpBuffer=0x22dead8*, lpNumberOfBytesRead=0x3be848*=0x1000, lpOverlapped=0x0) returned 1 [0054.508] CloseHandle (hObject=0x448) returned 1 [0054.508] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\zaD3n7 mmqSGIGhEu.flv", nBufferLength=0x105, lpBuffer=0x3be2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\zaD3n7 mmqSGIGhEu.flv", lpFilePart=0x0) returned 0x37 [0054.508] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0054.508] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\zaD3n7 mmqSGIGhEu.flv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\hn-6\\zad3n7 mmqsgigheu.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0054.508] GetFileType (hFile=0x448) returned 0x1 [0054.508] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be730) returned 1 [0054.508] GetFileType (hFile=0x448) returned 0x1 [0054.508] WriteFile (in: hFile=0x448, lpBuffer=0x2154e58*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be8f8, lpOverlapped=0x0 | out: lpBuffer=0x2154e58*, lpNumberOfBytesWritten=0x3be8f8*=0x2000, lpOverlapped=0x0) returned 1 [0054.509] CloseHandle (hObject=0x448) returned 1 [0054.510] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\zaD3n7 mmqSGIGhEu.flv", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\zaD3n7 mmqSGIGhEu.flv", lpFilePart=0x0) returned 0x37 [0054.510] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\zaD3n7 mmqSGIGhEu.flv.xuy", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\zaD3n7 mmqSGIGhEu.flv.xuy", lpFilePart=0x0) returned 0x3b [0054.510] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0054.510] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\zaD3n7 mmqSGIGhEu.flv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\hn-6\\zad3n7 mmqsgigheu.flv"), fInfoLevelId=0x0, lpFileInformation=0x3be910 | out: lpFileInformation=0x3be910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f23b730, ftCreationTime.dwHighDateTime=0x1d45e87, ftLastAccessTime.dwLowDateTime=0x90526b00, ftLastAccessTime.dwHighDateTime=0x1d4578e, ftLastWriteTime.dwLowDateTime=0xc55bbc2, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x6cff)) returned 1 [0054.510] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7f0) returned 1 [0054.510] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\zaD3n7 mmqSGIGhEu.flv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\hn-6\\zad3n7 mmqsgigheu.flv"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\zaD3n7 mmqSGIGhEu.flv.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\hn-6\\zad3n7 mmqsgigheu.flv.xuy")) returned 1 [0054.511] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0054.511] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\rxFiw9U9bm6LyT9g", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\rxFiw9U9bm6LyT9g", lpFilePart=0x0) returned 0x32 [0054.511] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\rxFiw9U9bm6LyT9g\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\rxFiw9U9bm6LyT9g\\", lpFilePart=0x0) returned 0x33 [0054.511] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\rxFiw9U9bm6LyT9g\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d7c70 [0054.512] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0054.512] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0054.512] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0054.512] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0054.520] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0054.521] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0054.521] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0054.521] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0054.521] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0054.521] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\rxFiw9U9bm6LyT9g", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\rxFiw9U9bm6LyT9g", lpFilePart=0x0) returned 0x32 [0054.521] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\rxFiw9U9bm6LyT9g\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\rxFiw9U9bm6LyT9g\\", lpFilePart=0x0) returned 0x33 [0054.521] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\rxFiw9U9bm6LyT9g\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d7370 [0054.522] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0054.522] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0054.522] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0054.522] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0054.522] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0054.522] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0054.523] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0054.523] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0054.523] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\rxFiw9U9bm6LyT9g\\9yWpLzjHOCpe.flv", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\rxFiw9U9bm6LyT9g\\9yWpLzjHOCpe.flv", lpFilePart=0x0) returned 0x43 [0054.523] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0054.523] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\rxFiw9U9bm6LyT9g\\9yWpLzjHOCpe.flv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\hn-6\\rxfiw9u9bm6lyt9g\\9ywplzjhocpe.flv"), fInfoLevelId=0x0, lpFileInformation=0x215c9a8 | out: lpFileInformation=0x215c9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae6e2650, ftCreationTime.dwHighDateTime=0x1d464f0, ftLastAccessTime.dwLowDateTime=0xec346e20, ftLastAccessTime.dwHighDateTime=0x1d45903, ftLastWriteTime.dwLowDateTime=0xec346e20, ftLastWriteTime.dwHighDateTime=0x1d45903, nFileSizeHigh=0x0, nFileSizeLow=0xf36)) returned 1 [0054.523] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0054.523] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\rxFiw9U9bm6LyT9g\\9yWpLzjHOCpe.flv", nBufferLength=0x105, lpBuffer=0x3be1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\rxFiw9U9bm6LyT9g\\9yWpLzjHOCpe.flv", lpFilePart=0x0) returned 0x43 [0054.523] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6c0) returned 1 [0054.523] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\rxFiw9U9bm6LyT9g\\9yWpLzjHOCpe.flv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\hn-6\\rxfiw9u9bm6lyt9g\\9ywplzjhocpe.flv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0054.523] GetFileType (hFile=0x448) returned 0x1 [0054.523] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0054.523] GetFileType (hFile=0x448) returned 0x1 [0054.523] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3be858 | out: lpFileSizeHigh=0x3be858*=0x0) returned 0xf36 [0054.524] ReadFile (in: hFile=0x448, lpBuffer=0x215db88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be788, lpOverlapped=0x0 | out: lpBuffer=0x215db88*, lpNumberOfBytesRead=0x3be788*=0xf36, lpOverlapped=0x0) returned 1 [0054.524] CloseHandle (hObject=0x448) returned 1 [0054.574] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\rxFiw9U9bm6LyT9g\\9yWpLzjHOCpe.flv", nBufferLength=0x105, lpBuffer=0x3be1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\rxFiw9U9bm6LyT9g\\9yWpLzjHOCpe.flv", lpFilePart=0x0) returned 0x43 [0054.574] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6c0) returned 1 [0054.574] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\rxFiw9U9bm6LyT9g\\9yWpLzjHOCpe.flv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\hn-6\\rxfiw9u9bm6lyt9g\\9ywplzjhocpe.flv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0054.576] GetFileType (hFile=0x448) returned 0x1 [0054.576] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0054.576] GetFileType (hFile=0x448) returned 0x1 [0054.576] WriteFile (in: hFile=0x448, lpBuffer=0x21d97a8*, nNumberOfBytesToWrite=0xf40, lpNumberOfBytesWritten=0x3be698, lpOverlapped=0x0 | out: lpBuffer=0x21d97a8*, lpNumberOfBytesWritten=0x3be698*=0xf40, lpOverlapped=0x0) returned 1 [0054.577] CloseHandle (hObject=0x448) returned 1 [0054.578] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\rxFiw9U9bm6LyT9g\\9yWpLzjHOCpe.flv", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\rxFiw9U9bm6LyT9g\\9yWpLzjHOCpe.flv", lpFilePart=0x0) returned 0x43 [0054.578] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\rxFiw9U9bm6LyT9g\\9yWpLzjHOCpe.flv.xuy", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\rxFiw9U9bm6LyT9g\\9yWpLzjHOCpe.flv.xuy", lpFilePart=0x0) returned 0x47 [0054.578] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0054.578] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\rxFiw9U9bm6LyT9g\\9yWpLzjHOCpe.flv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\hn-6\\rxfiw9u9bm6lyt9g\\9ywplzjhocpe.flv"), fInfoLevelId=0x0, lpFileInformation=0x3be8a0 | out: lpFileInformation=0x3be8a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae6e2650, ftCreationTime.dwHighDateTime=0x1d464f0, ftLastAccessTime.dwLowDateTime=0xec346e20, ftLastAccessTime.dwHighDateTime=0x1d45903, ftLastWriteTime.dwLowDateTime=0xc61a672, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xf40)) returned 1 [0054.578] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0054.578] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\rxFiw9U9bm6LyT9g\\9yWpLzjHOCpe.flv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\hn-6\\rxfiw9u9bm6lyt9g\\9ywplzjhocpe.flv"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\rxFiw9U9bm6LyT9g\\9yWpLzjHOCpe.flv.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\hn-6\\rxfiw9u9bm6lyt9g\\9ywplzjhocpe.flv.xuy")) returned 1 [0054.579] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\rxFiw9U9bm6LyT9g\\MVmj7hQl- u hjKWdH.mkv", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\rxFiw9U9bm6LyT9g\\MVmj7hQl- u hjKWdH.mkv", lpFilePart=0x0) returned 0x49 [0054.579] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0054.579] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\rxFiw9U9bm6LyT9g\\MVmj7hQl- u hjKWdH.mkv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\hn-6\\rxfiw9u9bm6lyt9g\\mvmj7hql- u hjkwdh.mkv"), fInfoLevelId=0x0, lpFileInformation=0x21da9f8 | out: lpFileInformation=0x21da9f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92a5a000, ftCreationTime.dwHighDateTime=0x1d46456, ftLastAccessTime.dwLowDateTime=0x436040, ftLastAccessTime.dwHighDateTime=0x1d45c58, ftLastWriteTime.dwLowDateTime=0x436040, ftLastWriteTime.dwHighDateTime=0x1d45c58, nFileSizeHigh=0x0, nFileSizeLow=0xb73d)) returned 1 [0054.579] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0054.579] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\rxFiw9U9bm6LyT9g\\MVmj7hQl- u hjKWdH.mkv", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\rxFiw9U9bm6LyT9g\\MVmj7hQl- u hjKWdH.mkv", lpFilePart=0x0) returned 0x49 [0054.579] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0054.579] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\rxFiw9U9bm6LyT9g\\MVmj7hQl- u hjKWdH.mkv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\hn-6\\rxfiw9u9bm6lyt9g\\mvmj7hql- u hjkwdh.mkv"), fInfoLevelId=0x0, lpFileInformation=0x21dab58 | out: lpFileInformation=0x21dab58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92a5a000, ftCreationTime.dwHighDateTime=0x1d46456, ftLastAccessTime.dwLowDateTime=0x436040, ftLastAccessTime.dwHighDateTime=0x1d45c58, ftLastWriteTime.dwLowDateTime=0x436040, ftLastWriteTime.dwHighDateTime=0x1d45c58, nFileSizeHigh=0x0, nFileSizeLow=0xb73d)) returned 1 [0054.580] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0054.580] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\rxFiw9U9bm6LyT9g\\MVmj7hQl- u hjKWdH.mkv", nBufferLength=0x105, lpBuffer=0x3be270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\rxFiw9U9bm6LyT9g\\MVmj7hQl- u hjKWdH.mkv", lpFilePart=0x0) returned 0x49 [0054.580] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0054.580] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\rxFiw9U9bm6LyT9g\\MVmj7hQl- u hjKWdH.mkv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\hn-6\\rxfiw9u9bm6lyt9g\\mvmj7hql- u hjkwdh.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0054.580] GetFileType (hFile=0x448) returned 0x1 [0054.580] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6c0) returned 1 [0054.580] GetFileType (hFile=0x448) returned 0x1 [0054.580] ReadFile (in: hFile=0x448, lpBuffer=0x21dcf48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be7d8, lpOverlapped=0x0 | out: lpBuffer=0x21dcf48*, lpNumberOfBytesRead=0x3be7d8*=0x1000, lpOverlapped=0x0) returned 1 [0054.601] CloseHandle (hObject=0x448) returned 1 [0054.601] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\rxFiw9U9bm6LyT9g\\MVmj7hQl- u hjKWdH.mkv", nBufferLength=0x105, lpBuffer=0x3be270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\rxFiw9U9bm6LyT9g\\MVmj7hQl- u hjKWdH.mkv", lpFilePart=0x0) returned 0x49 [0054.602] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0054.602] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\rxFiw9U9bm6LyT9g\\MVmj7hQl- u hjKWdH.mkv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\hn-6\\rxfiw9u9bm6lyt9g\\mvmj7hql- u hjkwdh.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0054.602] GetFileType (hFile=0x448) returned 0x1 [0054.602] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6c0) returned 1 [0054.602] GetFileType (hFile=0x448) returned 0x1 [0054.602] WriteFile (in: hFile=0x448, lpBuffer=0x21dac98*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be888, lpOverlapped=0x0 | out: lpBuffer=0x21dac98*, lpNumberOfBytesWritten=0x3be888*=0x2000, lpOverlapped=0x0) returned 1 [0054.602] CloseHandle (hObject=0x448) returned 1 [0054.604] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\rxFiw9U9bm6LyT9g\\MVmj7hQl- u hjKWdH.mkv", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\rxFiw9U9bm6LyT9g\\MVmj7hQl- u hjKWdH.mkv", lpFilePart=0x0) returned 0x49 [0054.604] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\rxFiw9U9bm6LyT9g\\MVmj7hQl- u hjKWdH.mkv.xuy", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\rxFiw9U9bm6LyT9g\\MVmj7hQl- u hjKWdH.mkv.xuy", lpFilePart=0x0) returned 0x4d [0054.604] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0054.604] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\rxFiw9U9bm6LyT9g\\MVmj7hQl- u hjKWdH.mkv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\hn-6\\rxfiw9u9bm6lyt9g\\mvmj7hql- u hjkwdh.mkv"), fInfoLevelId=0x0, lpFileInformation=0x3be8a0 | out: lpFileInformation=0x3be8a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92a5a000, ftCreationTime.dwHighDateTime=0x1d46456, ftLastAccessTime.dwLowDateTime=0x436040, ftLastAccessTime.dwHighDateTime=0x1d45c58, ftLastWriteTime.dwLowDateTime=0xc640923, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xb73d)) returned 1 [0054.604] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0054.604] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\rxFiw9U9bm6LyT9g\\MVmj7hQl- u hjKWdH.mkv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\hn-6\\rxfiw9u9bm6lyt9g\\mvmj7hql- u hjkwdh.mkv"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\rxFiw9U9bm6LyT9g\\MVmj7hQl- u hjKWdH.mkv.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\hn-6\\rxfiw9u9bm6lyt9g\\mvmj7hql- u hjkwdh.mkv.xuy")) returned 1 [0054.605] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\rxFiw9U9bm6LyT9g\\negNC64LftvX.swf", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\rxFiw9U9bm6LyT9g\\negNC64LftvX.swf", lpFilePart=0x0) returned 0x43 [0054.605] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0054.605] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\rxFiw9U9bm6LyT9g\\negNC64LftvX.swf" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\hn-6\\rxfiw9u9bm6lyt9g\\negnc64lftvx.swf"), fInfoLevelId=0x0, lpFileInformation=0x2259310 | out: lpFileInformation=0x2259310*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1fdc940, ftCreationTime.dwHighDateTime=0x1d45880, ftLastAccessTime.dwLowDateTime=0xc6425440, ftLastAccessTime.dwHighDateTime=0x1d45721, ftLastWriteTime.dwLowDateTime=0xc6425440, ftLastWriteTime.dwHighDateTime=0x1d45721, nFileSizeHigh=0x0, nFileSizeLow=0x14ea8)) returned 1 [0054.605] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0054.605] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\rxFiw9U9bm6LyT9g\\negNC64LftvX.swf", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\rxFiw9U9bm6LyT9g\\negNC64LftvX.swf", lpFilePart=0x0) returned 0x43 [0054.605] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0054.605] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\rxFiw9U9bm6LyT9g\\negNC64LftvX.swf" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\hn-6\\rxfiw9u9bm6lyt9g\\negnc64lftvx.swf"), fInfoLevelId=0x0, lpFileInformation=0x2259458 | out: lpFileInformation=0x2259458*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1fdc940, ftCreationTime.dwHighDateTime=0x1d45880, ftLastAccessTime.dwLowDateTime=0xc6425440, ftLastAccessTime.dwHighDateTime=0x1d45721, ftLastWriteTime.dwLowDateTime=0xc6425440, ftLastWriteTime.dwHighDateTime=0x1d45721, nFileSizeHigh=0x0, nFileSizeLow=0x14ea8)) returned 1 [0054.605] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0054.605] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\rxFiw9U9bm6LyT9g\\negNC64LftvX.swf", nBufferLength=0x105, lpBuffer=0x3be270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\rxFiw9U9bm6LyT9g\\negNC64LftvX.swf", lpFilePart=0x0) returned 0x43 [0054.605] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0054.606] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\rxFiw9U9bm6LyT9g\\negNC64LftvX.swf" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\hn-6\\rxfiw9u9bm6lyt9g\\negnc64lftvx.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0054.606] GetFileType (hFile=0x448) returned 0x1 [0054.606] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6c0) returned 1 [0054.606] GetFileType (hFile=0x448) returned 0x1 [0054.606] ReadFile (in: hFile=0x448, lpBuffer=0x225b818, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be7d8, lpOverlapped=0x0 | out: lpBuffer=0x225b818*, lpNumberOfBytesRead=0x3be7d8*=0x1000, lpOverlapped=0x0) returned 1 [0054.617] CloseHandle (hObject=0x448) returned 1 [0054.617] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\rxFiw9U9bm6LyT9g\\negNC64LftvX.swf", nBufferLength=0x105, lpBuffer=0x3be270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\rxFiw9U9bm6LyT9g\\negNC64LftvX.swf", lpFilePart=0x0) returned 0x43 [0054.617] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0054.617] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\rxFiw9U9bm6LyT9g\\negNC64LftvX.swf" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\hn-6\\rxfiw9u9bm6lyt9g\\negnc64lftvx.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0054.618] GetFileType (hFile=0x448) returned 0x1 [0054.618] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6c0) returned 1 [0054.618] GetFileType (hFile=0x448) returned 0x1 [0054.618] WriteFile (in: hFile=0x448, lpBuffer=0x2259580*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be888, lpOverlapped=0x0 | out: lpBuffer=0x2259580*, lpNumberOfBytesWritten=0x3be888*=0x2000, lpOverlapped=0x0) returned 1 [0054.618] CloseHandle (hObject=0x448) returned 1 [0054.620] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\rxFiw9U9bm6LyT9g\\negNC64LftvX.swf", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\rxFiw9U9bm6LyT9g\\negNC64LftvX.swf", lpFilePart=0x0) returned 0x43 [0054.620] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\rxFiw9U9bm6LyT9g\\negNC64LftvX.swf.xuy", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\rxFiw9U9bm6LyT9g\\negNC64LftvX.swf.xuy", lpFilePart=0x0) returned 0x47 [0054.620] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0054.620] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\rxFiw9U9bm6LyT9g\\negNC64LftvX.swf" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\hn-6\\rxfiw9u9bm6lyt9g\\negnc64lftvx.swf"), fInfoLevelId=0x0, lpFileInformation=0x3be8a0 | out: lpFileInformation=0x3be8a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1fdc940, ftCreationTime.dwHighDateTime=0x1d45880, ftLastAccessTime.dwLowDateTime=0xc6425440, ftLastAccessTime.dwHighDateTime=0x1d45721, ftLastWriteTime.dwLowDateTime=0xc66801b, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x14ea8)) returned 1 [0054.620] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0054.620] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\rxFiw9U9bm6LyT9g\\negNC64LftvX.swf" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\hn-6\\rxfiw9u9bm6lyt9g\\negnc64lftvx.swf"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\rxFiw9U9bm6LyT9g\\negNC64LftvX.swf.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\hn-6\\rxfiw9u9bm6lyt9g\\negnc64lftvx.swf.xuy")) returned 1 [0054.621] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0054.621] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d", lpFilePart=0x0) returned 0x31 [0054.621] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\", lpFilePart=0x0) returned 0x32 [0054.621] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d7550 [0054.621] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0054.621] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0054.621] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0054.621] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0054.621] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0054.621] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0054.622] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0054.622] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0054.622] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0054.622] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0054.622] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0054.623] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0054.623] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0054.623] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0054.623] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d", lpFilePart=0x0) returned 0x31 [0054.623] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\", lpFilePart=0x0) returned 0x32 [0054.623] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d75b0 [0054.623] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0054.623] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0054.623] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0054.623] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0054.623] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0054.623] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0054.624] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0054.624] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0054.624] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0054.624] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0054.624] FindClose (in: hFindFile=0x5d75b0 | out: hFindFile=0x5d75b0) returned 1 [0054.624] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0054.624] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0054.624] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\25vyla9KzJI9nEe.flv", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\25vyla9KzJI9nEe.flv", lpFilePart=0x0) returned 0x45 [0054.624] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0054.624] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\25vyla9KzJI9nEe.flv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\hn-6\\sqa8 vvxujp_g5d\\25vyla9kzji9nee.flv"), fInfoLevelId=0x0, lpFileInformation=0x22db230 | out: lpFileInformation=0x22db230*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83e97180, ftCreationTime.dwHighDateTime=0x1d45935, ftLastAccessTime.dwLowDateTime=0x724ee220, ftLastAccessTime.dwHighDateTime=0x1d45d31, ftLastWriteTime.dwLowDateTime=0x724ee220, ftLastWriteTime.dwHighDateTime=0x1d45d31, nFileSizeHigh=0x0, nFileSizeLow=0x3ce6)) returned 1 [0054.624] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0054.624] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\25vyla9KzJI9nEe.flv", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\25vyla9KzJI9nEe.flv", lpFilePart=0x0) returned 0x45 [0054.624] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0054.624] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\25vyla9KzJI9nEe.flv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\hn-6\\sqa8 vvxujp_g5d\\25vyla9kzji9nee.flv"), fInfoLevelId=0x0, lpFileInformation=0x22db380 | out: lpFileInformation=0x22db380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83e97180, ftCreationTime.dwHighDateTime=0x1d45935, ftLastAccessTime.dwLowDateTime=0x724ee220, ftLastAccessTime.dwHighDateTime=0x1d45d31, ftLastWriteTime.dwLowDateTime=0x724ee220, ftLastWriteTime.dwHighDateTime=0x1d45d31, nFileSizeHigh=0x0, nFileSizeLow=0x3ce6)) returned 1 [0054.625] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0054.625] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\25vyla9KzJI9nEe.flv", nBufferLength=0x105, lpBuffer=0x3be270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\25vyla9KzJI9nEe.flv", lpFilePart=0x0) returned 0x45 [0054.625] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0054.625] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\25vyla9KzJI9nEe.flv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\hn-6\\sqa8 vvxujp_g5d\\25vyla9kzji9nee.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0054.625] GetFileType (hFile=0x448) returned 0x1 [0054.625] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6c0) returned 1 [0054.625] GetFileType (hFile=0x448) returned 0x1 [0054.625] ReadFile (in: hFile=0x448, lpBuffer=0x22dd750, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be7d8, lpOverlapped=0x0 | out: lpBuffer=0x22dd750*, lpNumberOfBytesRead=0x3be7d8*=0x1000, lpOverlapped=0x0) returned 1 [0054.641] CloseHandle (hObject=0x448) returned 1 [0054.641] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\25vyla9KzJI9nEe.flv", nBufferLength=0x105, lpBuffer=0x3be270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\25vyla9KzJI9nEe.flv", lpFilePart=0x0) returned 0x45 [0054.641] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0054.641] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\25vyla9KzJI9nEe.flv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\hn-6\\sqa8 vvxujp_g5d\\25vyla9kzji9nee.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0054.642] GetFileType (hFile=0x448) returned 0x1 [0054.642] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6c0) returned 1 [0054.642] GetFileType (hFile=0x448) returned 0x1 [0054.642] WriteFile (in: hFile=0x448, lpBuffer=0x21550f8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be888, lpOverlapped=0x0 | out: lpBuffer=0x21550f8*, lpNumberOfBytesWritten=0x3be888*=0x2000, lpOverlapped=0x0) returned 1 [0054.642] CloseHandle (hObject=0x448) returned 1 [0054.643] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\25vyla9KzJI9nEe.flv", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\25vyla9KzJI9nEe.flv", lpFilePart=0x0) returned 0x45 [0054.643] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\25vyla9KzJI9nEe.flv.xuy", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\25vyla9KzJI9nEe.flv.xuy", lpFilePart=0x0) returned 0x49 [0054.643] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0054.643] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\25vyla9KzJI9nEe.flv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\hn-6\\sqa8 vvxujp_g5d\\25vyla9kzji9nee.flv"), fInfoLevelId=0x0, lpFileInformation=0x3be8a0 | out: lpFileInformation=0x3be8a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83e97180, ftCreationTime.dwHighDateTime=0x1d45935, ftLastAccessTime.dwLowDateTime=0x724ee220, ftLastAccessTime.dwHighDateTime=0x1d45d31, ftLastWriteTime.dwLowDateTime=0xc6b3066, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x3ce6)) returned 1 [0054.643] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0054.643] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\25vyla9KzJI9nEe.flv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\hn-6\\sqa8 vvxujp_g5d\\25vyla9kzji9nee.flv"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\25vyla9KzJI9nEe.flv.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\hn-6\\sqa8 vvxujp_g5d\\25vyla9kzji9nee.flv.xuy")) returned 1 [0054.644] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\9P5vIWV3lOKAM.swf", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\9P5vIWV3lOKAM.swf", lpFilePart=0x0) returned 0x43 [0054.644] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0054.644] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\9P5vIWV3lOKAM.swf" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\hn-6\\sqa8 vvxujp_g5d\\9p5viwv3lokam.swf"), fInfoLevelId=0x0, lpFileInformation=0x215a918 | out: lpFileInformation=0x215a918*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x184d2b20, ftCreationTime.dwHighDateTime=0x1d45f06, ftLastAccessTime.dwLowDateTime=0xaeda9330, ftLastAccessTime.dwHighDateTime=0x1d462c0, ftLastWriteTime.dwLowDateTime=0xaeda9330, ftLastWriteTime.dwHighDateTime=0x1d462c0, nFileSizeHigh=0x0, nFileSizeLow=0x11216)) returned 1 [0054.644] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0054.644] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\9P5vIWV3lOKAM.swf", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\9P5vIWV3lOKAM.swf", lpFilePart=0x0) returned 0x43 [0054.644] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0054.644] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\9P5vIWV3lOKAM.swf" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\hn-6\\sqa8 vvxujp_g5d\\9p5viwv3lokam.swf"), fInfoLevelId=0x0, lpFileInformation=0x215aa60 | out: lpFileInformation=0x215aa60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x184d2b20, ftCreationTime.dwHighDateTime=0x1d45f06, ftLastAccessTime.dwLowDateTime=0xaeda9330, ftLastAccessTime.dwHighDateTime=0x1d462c0, ftLastWriteTime.dwLowDateTime=0xaeda9330, ftLastWriteTime.dwHighDateTime=0x1d462c0, nFileSizeHigh=0x0, nFileSizeLow=0x11216)) returned 1 [0054.644] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0054.644] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\9P5vIWV3lOKAM.swf", nBufferLength=0x105, lpBuffer=0x3be270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\9P5vIWV3lOKAM.swf", lpFilePart=0x0) returned 0x43 [0054.644] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0054.644] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\9P5vIWV3lOKAM.swf" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\hn-6\\sqa8 vvxujp_g5d\\9p5viwv3lokam.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0054.645] GetFileType (hFile=0x448) returned 0x1 [0054.645] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6c0) returned 1 [0054.645] GetFileType (hFile=0x448) returned 0x1 [0054.645] ReadFile (in: hFile=0x448, lpBuffer=0x215ce20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be7d8, lpOverlapped=0x0 | out: lpBuffer=0x215ce20*, lpNumberOfBytesRead=0x3be7d8*=0x1000, lpOverlapped=0x0) returned 1 [0054.682] CloseHandle (hObject=0x448) returned 1 [0054.682] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\9P5vIWV3lOKAM.swf", nBufferLength=0x105, lpBuffer=0x3be270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\9P5vIWV3lOKAM.swf", lpFilePart=0x0) returned 0x43 [0054.682] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0054.682] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\9P5vIWV3lOKAM.swf" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\hn-6\\sqa8 vvxujp_g5d\\9p5viwv3lokam.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0054.682] GetFileType (hFile=0x448) returned 0x1 [0054.682] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6c0) returned 1 [0054.682] GetFileType (hFile=0x448) returned 0x1 [0054.682] WriteFile (in: hFile=0x448, lpBuffer=0x215ab88*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be888, lpOverlapped=0x0 | out: lpBuffer=0x215ab88*, lpNumberOfBytesWritten=0x3be888*=0x2000, lpOverlapped=0x0) returned 1 [0054.682] CloseHandle (hObject=0x448) returned 1 [0054.687] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\9P5vIWV3lOKAM.swf", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\9P5vIWV3lOKAM.swf", lpFilePart=0x0) returned 0x43 [0054.687] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\9P5vIWV3lOKAM.swf.xuy", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\9P5vIWV3lOKAM.swf.xuy", lpFilePart=0x0) returned 0x47 [0054.687] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0054.687] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\9P5vIWV3lOKAM.swf" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\hn-6\\sqa8 vvxujp_g5d\\9p5viwv3lokam.swf"), fInfoLevelId=0x0, lpFileInformation=0x3be8a0 | out: lpFileInformation=0x3be8a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x184d2b20, ftCreationTime.dwHighDateTime=0x1d45f06, ftLastAccessTime.dwLowDateTime=0xaeda9330, ftLastAccessTime.dwHighDateTime=0x1d462c0, ftLastWriteTime.dwLowDateTime=0xc6ff3cf, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x11216)) returned 1 [0054.688] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0054.688] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\9P5vIWV3lOKAM.swf" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\hn-6\\sqa8 vvxujp_g5d\\9p5viwv3lokam.swf"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\9P5vIWV3lOKAM.swf.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\hn-6\\sqa8 vvxujp_g5d\\9p5viwv3lokam.swf.xuy")) returned 1 [0054.688] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\B4a3CXGZxiUO-YbN51.swf", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\B4a3CXGZxiUO-YbN51.swf", lpFilePart=0x0) returned 0x48 [0054.688] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0054.688] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\B4a3CXGZxiUO-YbN51.swf" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\hn-6\\sqa8 vvxujp_g5d\\b4a3cxgzxiuo-ybn51.swf"), fInfoLevelId=0x0, lpFileInformation=0x21d91a0 | out: lpFileInformation=0x21d91a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ba11e20, ftCreationTime.dwHighDateTime=0x1d45771, ftLastAccessTime.dwLowDateTime=0x200f9a40, ftLastAccessTime.dwHighDateTime=0x1d455fc, ftLastWriteTime.dwLowDateTime=0x200f9a40, ftLastWriteTime.dwHighDateTime=0x1d455fc, nFileSizeHigh=0x0, nFileSizeLow=0x6b3f)) returned 1 [0054.688] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0054.688] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\B4a3CXGZxiUO-YbN51.swf", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\B4a3CXGZxiUO-YbN51.swf", lpFilePart=0x0) returned 0x48 [0054.688] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0054.688] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\B4a3CXGZxiUO-YbN51.swf" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\hn-6\\sqa8 vvxujp_g5d\\b4a3cxgzxiuo-ybn51.swf"), fInfoLevelId=0x0, lpFileInformation=0x21d9300 | out: lpFileInformation=0x21d9300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ba11e20, ftCreationTime.dwHighDateTime=0x1d45771, ftLastAccessTime.dwLowDateTime=0x200f9a40, ftLastAccessTime.dwHighDateTime=0x1d455fc, ftLastWriteTime.dwLowDateTime=0x200f9a40, ftLastWriteTime.dwHighDateTime=0x1d455fc, nFileSizeHigh=0x0, nFileSizeLow=0x6b3f)) returned 1 [0054.689] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0054.689] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\B4a3CXGZxiUO-YbN51.swf", nBufferLength=0x105, lpBuffer=0x3be270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\B4a3CXGZxiUO-YbN51.swf", lpFilePart=0x0) returned 0x48 [0054.689] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0054.689] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\B4a3CXGZxiUO-YbN51.swf" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\hn-6\\sqa8 vvxujp_g5d\\b4a3cxgzxiuo-ybn51.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0054.689] GetFileType (hFile=0x448) returned 0x1 [0054.689] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6c0) returned 1 [0054.689] GetFileType (hFile=0x448) returned 0x1 [0054.689] ReadFile (in: hFile=0x448, lpBuffer=0x21db6f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be7d8, lpOverlapped=0x0 | out: lpBuffer=0x21db6f0*, lpNumberOfBytesRead=0x3be7d8*=0x1000, lpOverlapped=0x0) returned 1 [0054.699] CloseHandle (hObject=0x448) returned 1 [0054.699] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\B4a3CXGZxiUO-YbN51.swf", nBufferLength=0x105, lpBuffer=0x3be270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\B4a3CXGZxiUO-YbN51.swf", lpFilePart=0x0) returned 0x48 [0054.699] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0054.699] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\B4a3CXGZxiUO-YbN51.swf" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\hn-6\\sqa8 vvxujp_g5d\\b4a3cxgzxiuo-ybn51.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0054.699] GetFileType (hFile=0x448) returned 0x1 [0054.699] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6c0) returned 1 [0054.699] GetFileType (hFile=0x448) returned 0x1 [0054.699] WriteFile (in: hFile=0x448, lpBuffer=0x21d9440*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be888, lpOverlapped=0x0 | out: lpBuffer=0x21d9440*, lpNumberOfBytesWritten=0x3be888*=0x2000, lpOverlapped=0x0) returned 1 [0054.699] CloseHandle (hObject=0x448) returned 1 [0054.701] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\B4a3CXGZxiUO-YbN51.swf", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\B4a3CXGZxiUO-YbN51.swf", lpFilePart=0x0) returned 0x48 [0054.701] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\B4a3CXGZxiUO-YbN51.swf.xuy", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\B4a3CXGZxiUO-YbN51.swf.xuy", lpFilePart=0x0) returned 0x4c [0054.701] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0054.701] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\B4a3CXGZxiUO-YbN51.swf" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\hn-6\\sqa8 vvxujp_g5d\\b4a3cxgzxiuo-ybn51.swf"), fInfoLevelId=0x0, lpFileInformation=0x3be8a0 | out: lpFileInformation=0x3be8a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ba11e20, ftCreationTime.dwHighDateTime=0x1d45771, ftLastAccessTime.dwLowDateTime=0x200f9a40, ftLastAccessTime.dwHighDateTime=0x1d455fc, ftLastWriteTime.dwLowDateTime=0xc74ba73, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x6b3f)) returned 1 [0054.701] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0054.701] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\B4a3CXGZxiUO-YbN51.swf" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\hn-6\\sqa8 vvxujp_g5d\\b4a3cxgzxiuo-ybn51.swf"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\B4a3CXGZxiUO-YbN51.swf.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\hn-6\\sqa8 vvxujp_g5d\\b4a3cxgzxiuo-ybn51.swf.xuy")) returned 1 [0054.702] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\JcAiiI7bq.avi", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\JcAiiI7bq.avi", lpFilePart=0x0) returned 0x3f [0054.702] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0054.702] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\JcAiiI7bq.avi" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\hn-6\\sqa8 vvxujp_g5d\\jcaiii7bq.avi"), fInfoLevelId=0x0, lpFileInformation=0x2257ab8 | out: lpFileInformation=0x2257ab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c2c7ae0, ftCreationTime.dwHighDateTime=0x1d461e2, ftLastAccessTime.dwLowDateTime=0x7e0425f0, ftLastAccessTime.dwHighDateTime=0x1d46333, ftLastWriteTime.dwLowDateTime=0x7e0425f0, ftLastWriteTime.dwHighDateTime=0x1d46333, nFileSizeHigh=0x0, nFileSizeLow=0x14426)) returned 1 [0054.702] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0054.702] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\JcAiiI7bq.avi", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\JcAiiI7bq.avi", lpFilePart=0x0) returned 0x3f [0054.702] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0054.702] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\JcAiiI7bq.avi" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\hn-6\\sqa8 vvxujp_g5d\\jcaiii7bq.avi"), fInfoLevelId=0x0, lpFileInformation=0x2257bf0 | out: lpFileInformation=0x2257bf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c2c7ae0, ftCreationTime.dwHighDateTime=0x1d461e2, ftLastAccessTime.dwLowDateTime=0x7e0425f0, ftLastAccessTime.dwHighDateTime=0x1d46333, ftLastWriteTime.dwLowDateTime=0x7e0425f0, ftLastWriteTime.dwHighDateTime=0x1d46333, nFileSizeHigh=0x0, nFileSizeLow=0x14426)) returned 1 [0054.702] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0054.702] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\JcAiiI7bq.avi", nBufferLength=0x105, lpBuffer=0x3be270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\JcAiiI7bq.avi", lpFilePart=0x0) returned 0x3f [0054.702] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0054.702] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\JcAiiI7bq.avi" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\hn-6\\sqa8 vvxujp_g5d\\jcaiii7bq.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0054.702] GetFileType (hFile=0x448) returned 0x1 [0054.702] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6c0) returned 1 [0054.703] GetFileType (hFile=0x448) returned 0x1 [0054.703] ReadFile (in: hFile=0x448, lpBuffer=0x2259f90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be7d8, lpOverlapped=0x0 | out: lpBuffer=0x2259f90*, lpNumberOfBytesRead=0x3be7d8*=0x1000, lpOverlapped=0x0) returned 1 [0054.712] CloseHandle (hObject=0x448) returned 1 [0054.712] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\JcAiiI7bq.avi", nBufferLength=0x105, lpBuffer=0x3be270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\JcAiiI7bq.avi", lpFilePart=0x0) returned 0x3f [0054.712] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0054.712] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\JcAiiI7bq.avi" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\hn-6\\sqa8 vvxujp_g5d\\jcaiii7bq.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0054.713] GetFileType (hFile=0x448) returned 0x1 [0054.713] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6c0) returned 1 [0054.713] GetFileType (hFile=0x448) returned 0x1 [0054.713] WriteFile (in: hFile=0x448, lpBuffer=0x2257d08*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be888, lpOverlapped=0x0 | out: lpBuffer=0x2257d08*, lpNumberOfBytesWritten=0x3be888*=0x2000, lpOverlapped=0x0) returned 1 [0054.713] CloseHandle (hObject=0x448) returned 1 [0054.715] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\JcAiiI7bq.avi", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\JcAiiI7bq.avi", lpFilePart=0x0) returned 0x3f [0054.715] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\JcAiiI7bq.avi.xuy", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\JcAiiI7bq.avi.xuy", lpFilePart=0x0) returned 0x43 [0054.715] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0054.715] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\JcAiiI7bq.avi" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\hn-6\\sqa8 vvxujp_g5d\\jcaiii7bq.avi"), fInfoLevelId=0x0, lpFileInformation=0x3be8a0 | out: lpFileInformation=0x3be8a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c2c7ae0, ftCreationTime.dwHighDateTime=0x1d461e2, ftLastAccessTime.dwLowDateTime=0x7e0425f0, ftLastAccessTime.dwHighDateTime=0x1d46333, ftLastWriteTime.dwLowDateTime=0xc74ba73, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x14426)) returned 1 [0054.715] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0054.715] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\JcAiiI7bq.avi" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\hn-6\\sqa8 vvxujp_g5d\\jcaiii7bq.avi"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\JcAiiI7bq.avi.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\hn-6\\sqa8 vvxujp_g5d\\jcaiii7bq.avi.xuy")) returned 1 [0054.716] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\MGnZQV1D.avi", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\MGnZQV1D.avi", lpFilePart=0x0) returned 0x3e [0054.716] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0054.716] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\MGnZQV1D.avi" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\hn-6\\sqa8 vvxujp_g5d\\mgnzqv1d.avi"), fInfoLevelId=0x0, lpFileInformation=0x22d62e8 | out: lpFileInformation=0x22d62e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c138890, ftCreationTime.dwHighDateTime=0x1d4617c, ftLastAccessTime.dwLowDateTime=0xdb29a960, ftLastAccessTime.dwHighDateTime=0x1d45f75, ftLastWriteTime.dwLowDateTime=0xdb29a960, ftLastWriteTime.dwHighDateTime=0x1d45f75, nFileSizeHigh=0x0, nFileSizeLow=0x707a)) returned 1 [0054.716] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0054.716] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\MGnZQV1D.avi", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\MGnZQV1D.avi", lpFilePart=0x0) returned 0x3e [0054.716] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0054.716] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\MGnZQV1D.avi" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\hn-6\\sqa8 vvxujp_g5d\\mgnzqv1d.avi"), fInfoLevelId=0x0, lpFileInformation=0x22d6420 | out: lpFileInformation=0x22d6420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c138890, ftCreationTime.dwHighDateTime=0x1d4617c, ftLastAccessTime.dwLowDateTime=0xdb29a960, ftLastAccessTime.dwHighDateTime=0x1d45f75, ftLastWriteTime.dwLowDateTime=0xdb29a960, ftLastWriteTime.dwHighDateTime=0x1d45f75, nFileSizeHigh=0x0, nFileSizeLow=0x707a)) returned 1 [0054.716] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0054.716] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\MGnZQV1D.avi", nBufferLength=0x105, lpBuffer=0x3be270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\MGnZQV1D.avi", lpFilePart=0x0) returned 0x3e [0054.716] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0054.716] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\MGnZQV1D.avi" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\hn-6\\sqa8 vvxujp_g5d\\mgnzqv1d.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0054.717] GetFileType (hFile=0x448) returned 0x1 [0054.717] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6c0) returned 1 [0054.717] GetFileType (hFile=0x448) returned 0x1 [0054.717] ReadFile (in: hFile=0x448, lpBuffer=0x22d87c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be7d8, lpOverlapped=0x0 | out: lpBuffer=0x22d87c0*, lpNumberOfBytesRead=0x3be7d8*=0x1000, lpOverlapped=0x0) returned 1 [0054.727] CloseHandle (hObject=0x448) returned 1 [0054.727] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\MGnZQV1D.avi", nBufferLength=0x105, lpBuffer=0x3be270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\MGnZQV1D.avi", lpFilePart=0x0) returned 0x3e [0054.727] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0054.727] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\MGnZQV1D.avi" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\hn-6\\sqa8 vvxujp_g5d\\mgnzqv1d.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0054.727] GetFileType (hFile=0x448) returned 0x1 [0054.727] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6c0) returned 1 [0054.727] GetFileType (hFile=0x448) returned 0x1 [0054.727] WriteFile (in: hFile=0x448, lpBuffer=0x22d6538*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be888, lpOverlapped=0x0 | out: lpBuffer=0x22d6538*, lpNumberOfBytesWritten=0x3be888*=0x2000, lpOverlapped=0x0) returned 1 [0054.727] CloseHandle (hObject=0x448) returned 1 [0054.728] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\MGnZQV1D.avi", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\MGnZQV1D.avi", lpFilePart=0x0) returned 0x3e [0054.728] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\MGnZQV1D.avi.xuy", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\MGnZQV1D.avi.xuy", lpFilePart=0x0) returned 0x42 [0054.728] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0054.728] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\MGnZQV1D.avi" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\hn-6\\sqa8 vvxujp_g5d\\mgnzqv1d.avi"), fInfoLevelId=0x0, lpFileInformation=0x3be8a0 | out: lpFileInformation=0x3be8a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c138890, ftCreationTime.dwHighDateTime=0x1d4617c, ftLastAccessTime.dwLowDateTime=0xdb29a960, ftLastAccessTime.dwHighDateTime=0x1d45f75, ftLastWriteTime.dwLowDateTime=0xc771d37, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x707a)) returned 1 [0054.729] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0054.729] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\MGnZQV1D.avi" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\hn-6\\sqa8 vvxujp_g5d\\mgnzqv1d.avi"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\MGnZQV1D.avi.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\hn-6\\sqa8 vvxujp_g5d\\mgnzqv1d.avi.xuy")) returned 1 [0054.729] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\rspzeeQ4w0Au.mp4", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\rspzeeQ4w0Au.mp4", lpFilePart=0x0) returned 0x42 [0054.729] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0054.729] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\rspzeeQ4w0Au.mp4" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\hn-6\\sqa8 vvxujp_g5d\\rspzeeq4w0au.mp4"), fInfoLevelId=0x0, lpFileInformation=0x2354b18 | out: lpFileInformation=0x2354b18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6e12600, ftCreationTime.dwHighDateTime=0x1d46040, ftLastAccessTime.dwLowDateTime=0x6c597f90, ftLastAccessTime.dwHighDateTime=0x1d45ea0, ftLastWriteTime.dwLowDateTime=0x6c597f90, ftLastWriteTime.dwHighDateTime=0x1d45ea0, nFileSizeHigh=0x0, nFileSizeLow=0x10fe8)) returned 1 [0054.729] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0054.729] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\rspzeeQ4w0Au.mp4", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\rspzeeQ4w0Au.mp4", lpFilePart=0x0) returned 0x42 [0054.729] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0054.729] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\rspzeeQ4w0Au.mp4" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\hn-6\\sqa8 vvxujp_g5d\\rspzeeq4w0au.mp4"), fInfoLevelId=0x0, lpFileInformation=0x2354c60 | out: lpFileInformation=0x2354c60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6e12600, ftCreationTime.dwHighDateTime=0x1d46040, ftLastAccessTime.dwLowDateTime=0x6c597f90, ftLastAccessTime.dwHighDateTime=0x1d45ea0, ftLastWriteTime.dwLowDateTime=0x6c597f90, ftLastWriteTime.dwHighDateTime=0x1d45ea0, nFileSizeHigh=0x0, nFileSizeLow=0x10fe8)) returned 1 [0054.730] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0054.730] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\rspzeeQ4w0Au.mp4", nBufferLength=0x105, lpBuffer=0x3be270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\rspzeeQ4w0Au.mp4", lpFilePart=0x0) returned 0x42 [0054.730] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0054.730] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\rspzeeQ4w0Au.mp4" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\hn-6\\sqa8 vvxujp_g5d\\rspzeeq4w0au.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0054.730] GetFileType (hFile=0x448) returned 0x1 [0054.730] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6c0) returned 1 [0054.730] GetFileType (hFile=0x448) returned 0x1 [0054.730] ReadFile (in: hFile=0x448, lpBuffer=0x2357020, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be7d8, lpOverlapped=0x0 | out: lpBuffer=0x2357020*, lpNumberOfBytesRead=0x3be7d8*=0x1000, lpOverlapped=0x0) returned 1 [0054.772] CloseHandle (hObject=0x448) returned 1 [0054.772] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\rspzeeQ4w0Au.mp4", nBufferLength=0x105, lpBuffer=0x3be270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\rspzeeQ4w0Au.mp4", lpFilePart=0x0) returned 0x42 [0054.772] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0054.772] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\rspzeeQ4w0Au.mp4" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\hn-6\\sqa8 vvxujp_g5d\\rspzeeq4w0au.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0054.772] GetFileType (hFile=0x448) returned 0x1 [0054.772] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6c0) returned 1 [0054.772] GetFileType (hFile=0x448) returned 0x1 [0054.772] WriteFile (in: hFile=0x448, lpBuffer=0x2155120*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be888, lpOverlapped=0x0 | out: lpBuffer=0x2155120*, lpNumberOfBytesWritten=0x3be888*=0x2000, lpOverlapped=0x0) returned 1 [0054.773] CloseHandle (hObject=0x448) returned 1 [0054.774] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\rspzeeQ4w0Au.mp4", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\rspzeeQ4w0Au.mp4", lpFilePart=0x0) returned 0x42 [0054.774] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\rspzeeQ4w0Au.mp4.xuy", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\rspzeeQ4w0Au.mp4.xuy", lpFilePart=0x0) returned 0x46 [0054.774] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0054.774] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\rspzeeQ4w0Au.mp4" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\hn-6\\sqa8 vvxujp_g5d\\rspzeeq4w0au.mp4"), fInfoLevelId=0x0, lpFileInformation=0x3be8a0 | out: lpFileInformation=0x3be8a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6e12600, ftCreationTime.dwHighDateTime=0x1d46040, ftLastAccessTime.dwLowDateTime=0x6c597f90, ftLastAccessTime.dwHighDateTime=0x1d45ea0, ftLastWriteTime.dwLowDateTime=0xc7e432b, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x10fe8)) returned 1 [0054.775] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0054.775] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\rspzeeQ4w0Au.mp4" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\hn-6\\sqa8 vvxujp_g5d\\rspzeeq4w0au.mp4"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\rspzeeQ4w0Au.mp4.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\hn-6\\sqa8 vvxujp_g5d\\rspzeeq4w0au.mp4.xuy")) returned 1 [0054.775] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\YjGHp.mp4", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\YjGHp.mp4", lpFilePart=0x0) returned 0x3b [0054.775] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0054.775] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\YjGHp.mp4" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\hn-6\\sqa8 vvxujp_g5d\\yjghp.mp4"), fInfoLevelId=0x0, lpFileInformation=0x21d26f0 | out: lpFileInformation=0x21d26f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd7c154e0, ftCreationTime.dwHighDateTime=0x1d46195, ftLastAccessTime.dwLowDateTime=0xb3cb4630, ftLastAccessTime.dwHighDateTime=0x1d464a2, ftLastWriteTime.dwLowDateTime=0xb3cb4630, ftLastWriteTime.dwHighDateTime=0x1d464a2, nFileSizeHigh=0x0, nFileSizeLow=0xe4a7)) returned 1 [0054.775] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0054.775] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\YjGHp.mp4", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\YjGHp.mp4", lpFilePart=0x0) returned 0x3b [0054.775] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0054.775] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\YjGHp.mp4" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\hn-6\\sqa8 vvxujp_g5d\\yjghp.mp4"), fInfoLevelId=0x0, lpFileInformation=0x21d2818 | out: lpFileInformation=0x21d2818*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd7c154e0, ftCreationTime.dwHighDateTime=0x1d46195, ftLastAccessTime.dwLowDateTime=0xb3cb4630, ftLastAccessTime.dwHighDateTime=0x1d464a2, ftLastWriteTime.dwLowDateTime=0xb3cb4630, ftLastWriteTime.dwHighDateTime=0x1d464a2, nFileSizeHigh=0x0, nFileSizeLow=0xe4a7)) returned 1 [0054.776] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0054.776] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\YjGHp.mp4", nBufferLength=0x105, lpBuffer=0x3be270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\YjGHp.mp4", lpFilePart=0x0) returned 0x3b [0054.776] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0054.776] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\YjGHp.mp4" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\hn-6\\sqa8 vvxujp_g5d\\yjghp.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0054.776] GetFileType (hFile=0x448) returned 0x1 [0054.776] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6c0) returned 1 [0054.776] GetFileType (hFile=0x448) returned 0x1 [0054.776] ReadFile (in: hFile=0x448, lpBuffer=0x21d4b98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be7d8, lpOverlapped=0x0 | out: lpBuffer=0x21d4b98*, lpNumberOfBytesRead=0x3be7d8*=0x1000, lpOverlapped=0x0) returned 1 [0054.791] CloseHandle (hObject=0x448) returned 1 [0054.791] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\YjGHp.mp4", nBufferLength=0x105, lpBuffer=0x3be270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\YjGHp.mp4", lpFilePart=0x0) returned 0x3b [0054.791] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0054.791] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\YjGHp.mp4" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\hn-6\\sqa8 vvxujp_g5d\\yjghp.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0054.792] GetFileType (hFile=0x448) returned 0x1 [0054.792] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6c0) returned 1 [0054.792] GetFileType (hFile=0x448) returned 0x1 [0054.792] WriteFile (in: hFile=0x448, lpBuffer=0x21d2920*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be888, lpOverlapped=0x0 | out: lpBuffer=0x21d2920*, lpNumberOfBytesWritten=0x3be888*=0x2000, lpOverlapped=0x0) returned 1 [0054.792] CloseHandle (hObject=0x448) returned 1 [0054.794] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\YjGHp.mp4", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\YjGHp.mp4", lpFilePart=0x0) returned 0x3b [0054.794] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\YjGHp.mp4.xuy", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\YjGHp.mp4.xuy", lpFilePart=0x0) returned 0x3f [0054.794] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0054.794] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\YjGHp.mp4" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\hn-6\\sqa8 vvxujp_g5d\\yjghp.mp4"), fInfoLevelId=0x0, lpFileInformation=0x3be8a0 | out: lpFileInformation=0x3be8a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd7c154e0, ftCreationTime.dwHighDateTime=0x1d46195, ftLastAccessTime.dwLowDateTime=0xb3cb4630, ftLastAccessTime.dwHighDateTime=0x1d464a2, ftLastWriteTime.dwLowDateTime=0xc83103d, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xe4a7)) returned 1 [0054.794] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0054.794] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\YjGHp.mp4" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\hn-6\\sqa8 vvxujp_g5d\\yjghp.mp4"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\YjGHp.mp4.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\hn-6\\sqa8 vvxujp_g5d\\yjghp.mp4.xuy")) returned 1 [0054.795] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0054.795] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\d2H7a-tYhvZsdzV7Kw0T", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\d2H7a-tYhvZsdzV7Kw0T", lpFilePart=0x0) returned 0x46 [0054.795] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\d2H7a-tYhvZsdzV7Kw0T\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\d2H7a-tYhvZsdzV7Kw0T\\", lpFilePart=0x0) returned 0x47 [0054.795] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\d2H7a-tYhvZsdzV7Kw0T\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d78b0 [0054.795] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0054.795] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0054.795] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0054.795] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0054.796] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0054.796] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0054.796] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0054.796] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0054.796] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0054.796] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0054.796] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\d2H7a-tYhvZsdzV7Kw0T", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\d2H7a-tYhvZsdzV7Kw0T", lpFilePart=0x0) returned 0x46 [0054.796] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\d2H7a-tYhvZsdzV7Kw0T\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\d2H7a-tYhvZsdzV7Kw0T\\", lpFilePart=0x0) returned 0x47 [0054.796] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\d2H7a-tYhvZsdzV7Kw0T\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7550 [0054.796] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0054.796] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0054.797] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0054.797] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0054.797] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0054.797] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0054.797] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0054.797] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0054.797] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0054.797] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\d2H7a-tYhvZsdzV7Kw0T\\1UEZKTO5 S.mp4", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\d2H7a-tYhvZsdzV7Kw0T\\1UEZKTO5 S.mp4", lpFilePart=0x0) returned 0x55 [0054.797] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0054.797] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\d2H7a-tYhvZsdzV7Kw0T\\1UEZKTO5 S.mp4" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\hn-6\\sqa8 vvxujp_g5d\\d2h7a-tyhvzsdzv7kw0t\\1uezkto5 s.mp4"), fInfoLevelId=0x0, lpFileInformation=0x2253c20 | out: lpFileInformation=0x2253c20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7bdbcf20, ftCreationTime.dwHighDateTime=0x1d45637, ftLastAccessTime.dwLowDateTime=0xc9a34640, ftLastAccessTime.dwHighDateTime=0x1d45955, ftLastWriteTime.dwLowDateTime=0xc9a34640, ftLastWriteTime.dwHighDateTime=0x1d45955, nFileSizeHigh=0x0, nFileSizeLow=0x13bf4)) returned 1 [0054.797] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0054.797] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\d2H7a-tYhvZsdzV7Kw0T\\1UEZKTO5 S.mp4", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\d2H7a-tYhvZsdzV7Kw0T\\1UEZKTO5 S.mp4", lpFilePart=0x0) returned 0x55 [0054.797] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0054.797] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\d2H7a-tYhvZsdzV7Kw0T\\1UEZKTO5 S.mp4" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\hn-6\\sqa8 vvxujp_g5d\\d2h7a-tyhvzsdzv7kw0t\\1uezkto5 s.mp4"), fInfoLevelId=0x0, lpFileInformation=0x2253d88 | out: lpFileInformation=0x2253d88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7bdbcf20, ftCreationTime.dwHighDateTime=0x1d45637, ftLastAccessTime.dwLowDateTime=0xc9a34640, ftLastAccessTime.dwHighDateTime=0x1d45955, ftLastWriteTime.dwLowDateTime=0xc9a34640, ftLastWriteTime.dwHighDateTime=0x1d45955, nFileSizeHigh=0x0, nFileSizeLow=0x13bf4)) returned 1 [0054.797] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0054.798] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\d2H7a-tYhvZsdzV7Kw0T\\1UEZKTO5 S.mp4", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\d2H7a-tYhvZsdzV7Kw0T\\1UEZKTO5 S.mp4", lpFilePart=0x0) returned 0x55 [0054.798] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0054.798] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\d2H7a-tYhvZsdzV7Kw0T\\1UEZKTO5 S.mp4" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\hn-6\\sqa8 vvxujp_g5d\\d2h7a-tyhvzsdzv7kw0t\\1uezkto5 s.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0054.798] GetFileType (hFile=0x448) returned 0x1 [0054.798] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0054.798] GetFileType (hFile=0x448) returned 0x1 [0054.798] ReadFile (in: hFile=0x448, lpBuffer=0x2256188, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x2256188*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0054.808] CloseHandle (hObject=0x448) returned 1 [0054.808] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\d2H7a-tYhvZsdzV7Kw0T\\1UEZKTO5 S.mp4", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\d2H7a-tYhvZsdzV7Kw0T\\1UEZKTO5 S.mp4", lpFilePart=0x0) returned 0x55 [0054.808] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0054.808] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\d2H7a-tYhvZsdzV7Kw0T\\1UEZKTO5 S.mp4" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\hn-6\\sqa8 vvxujp_g5d\\d2h7a-tyhvzsdzv7kw0t\\1uezkto5 s.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0054.808] GetFileType (hFile=0x448) returned 0x1 [0054.808] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0054.809] GetFileType (hFile=0x448) returned 0x1 [0054.809] WriteFile (in: hFile=0x448, lpBuffer=0x2253ed0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x2253ed0*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0054.809] CloseHandle (hObject=0x448) returned 1 [0054.811] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\d2H7a-tYhvZsdzV7Kw0T\\1UEZKTO5 S.mp4", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\d2H7a-tYhvZsdzV7Kw0T\\1UEZKTO5 S.mp4", lpFilePart=0x0) returned 0x55 [0054.811] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\d2H7a-tYhvZsdzV7Kw0T\\1UEZKTO5 S.mp4.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\d2H7a-tYhvZsdzV7Kw0T\\1UEZKTO5 S.mp4.xuy", lpFilePart=0x0) returned 0x59 [0054.811] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0054.811] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\d2H7a-tYhvZsdzV7Kw0T\\1UEZKTO5 S.mp4" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\hn-6\\sqa8 vvxujp_g5d\\d2h7a-tyhvzsdzv7kw0t\\1uezkto5 s.mp4"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7bdbcf20, ftCreationTime.dwHighDateTime=0x1d45637, ftLastAccessTime.dwLowDateTime=0xc9a34640, ftLastAccessTime.dwHighDateTime=0x1d45955, ftLastWriteTime.dwLowDateTime=0xc856957, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x13bf4)) returned 1 [0054.811] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0054.811] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\d2H7a-tYhvZsdzV7Kw0T\\1UEZKTO5 S.mp4" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\hn-6\\sqa8 vvxujp_g5d\\d2h7a-tyhvzsdzv7kw0t\\1uezkto5 s.mp4"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\d2H7a-tYhvZsdzV7Kw0T\\1UEZKTO5 S.mp4.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\hn-6\\sqa8 vvxujp_g5d\\d2h7a-tyhvzsdzv7kw0t\\1uezkto5 s.mp4.xuy")) returned 1 [0054.812] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\d2H7a-tYhvZsdzV7Kw0T\\aWjCPF5VCvkE.flv", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\d2H7a-tYhvZsdzV7Kw0T\\aWjCPF5VCvkE.flv", lpFilePart=0x0) returned 0x57 [0054.812] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0054.812] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\d2H7a-tYhvZsdzV7Kw0T\\aWjCPF5VCvkE.flv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\hn-6\\sqa8 vvxujp_g5d\\d2h7a-tyhvzsdzv7kw0t\\awjcpf5vcvke.flv"), fInfoLevelId=0x0, lpFileInformation=0x22d25a0 | out: lpFileInformation=0x22d25a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ef5e2b0, ftCreationTime.dwHighDateTime=0x1d45ea9, ftLastAccessTime.dwLowDateTime=0x37a0eff0, ftLastAccessTime.dwHighDateTime=0x1d457dd, ftLastWriteTime.dwLowDateTime=0x37a0eff0, ftLastWriteTime.dwHighDateTime=0x1d457dd, nFileSizeHigh=0x0, nFileSizeLow=0x153bf)) returned 1 [0054.812] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0054.812] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\d2H7a-tYhvZsdzV7Kw0T\\aWjCPF5VCvkE.flv", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\d2H7a-tYhvZsdzV7Kw0T\\aWjCPF5VCvkE.flv", lpFilePart=0x0) returned 0x57 [0054.812] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0054.812] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\d2H7a-tYhvZsdzV7Kw0T\\aWjCPF5VCvkE.flv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\hn-6\\sqa8 vvxujp_g5d\\d2h7a-tyhvzsdzv7kw0t\\awjcpf5vcvke.flv"), fInfoLevelId=0x0, lpFileInformation=0x22d2710 | out: lpFileInformation=0x22d2710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ef5e2b0, ftCreationTime.dwHighDateTime=0x1d45ea9, ftLastAccessTime.dwLowDateTime=0x37a0eff0, ftLastAccessTime.dwHighDateTime=0x1d457dd, ftLastWriteTime.dwLowDateTime=0x37a0eff0, ftLastWriteTime.dwHighDateTime=0x1d457dd, nFileSizeHigh=0x0, nFileSizeLow=0x153bf)) returned 1 [0054.812] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0054.812] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\d2H7a-tYhvZsdzV7Kw0T\\aWjCPF5VCvkE.flv", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\d2H7a-tYhvZsdzV7Kw0T\\aWjCPF5VCvkE.flv", lpFilePart=0x0) returned 0x57 [0054.812] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0054.812] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\d2H7a-tYhvZsdzV7Kw0T\\aWjCPF5VCvkE.flv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\hn-6\\sqa8 vvxujp_g5d\\d2h7a-tyhvzsdzv7kw0t\\awjcpf5vcvke.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0054.813] GetFileType (hFile=0x448) returned 0x1 [0054.813] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0054.813] GetFileType (hFile=0x448) returned 0x1 [0054.813] ReadFile (in: hFile=0x448, lpBuffer=0x22d4b20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x22d4b20*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0054.823] CloseHandle (hObject=0x448) returned 1 [0054.823] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\d2H7a-tYhvZsdzV7Kw0T\\aWjCPF5VCvkE.flv", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\d2H7a-tYhvZsdzV7Kw0T\\aWjCPF5VCvkE.flv", lpFilePart=0x0) returned 0x57 [0054.823] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0054.823] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\d2H7a-tYhvZsdzV7Kw0T\\aWjCPF5VCvkE.flv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\hn-6\\sqa8 vvxujp_g5d\\d2h7a-tyhvzsdzv7kw0t\\awjcpf5vcvke.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0054.823] GetFileType (hFile=0x448) returned 0x1 [0054.823] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0054.823] GetFileType (hFile=0x448) returned 0x1 [0054.823] WriteFile (in: hFile=0x448, lpBuffer=0x22d2860*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x22d2860*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0054.823] CloseHandle (hObject=0x448) returned 1 [0054.847] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\d2H7a-tYhvZsdzV7Kw0T\\aWjCPF5VCvkE.flv", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\d2H7a-tYhvZsdzV7Kw0T\\aWjCPF5VCvkE.flv", lpFilePart=0x0) returned 0x57 [0054.847] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\d2H7a-tYhvZsdzV7Kw0T\\aWjCPF5VCvkE.flv.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\d2H7a-tYhvZsdzV7Kw0T\\aWjCPF5VCvkE.flv.xuy", lpFilePart=0x0) returned 0x5b [0054.847] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0054.847] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\d2H7a-tYhvZsdzV7Kw0T\\aWjCPF5VCvkE.flv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\hn-6\\sqa8 vvxujp_g5d\\d2h7a-tyhvzsdzv7kw0t\\awjcpf5vcvke.flv"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ef5e2b0, ftCreationTime.dwHighDateTime=0x1d45ea9, ftLastAccessTime.dwLowDateTime=0x37a0eff0, ftLastAccessTime.dwHighDateTime=0x1d457dd, ftLastWriteTime.dwLowDateTime=0xc8a3cd5, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x153bf)) returned 1 [0054.847] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0054.847] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\d2H7a-tYhvZsdzV7Kw0T\\aWjCPF5VCvkE.flv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\hn-6\\sqa8 vvxujp_g5d\\d2h7a-tyhvzsdzv7kw0t\\awjcpf5vcvke.flv"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\d2H7a-tYhvZsdzV7Kw0T\\aWjCPF5VCvkE.flv.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\hn-6\\sqa8 vvxujp_g5d\\d2h7a-tyhvzsdzv7kw0t\\awjcpf5vcvke.flv.xuy")) returned 1 [0054.848] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\d2H7a-tYhvZsdzV7Kw0T\\El 5h qHBzdQQuQ0y63p.avi", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\d2H7a-tYhvZsdzV7Kw0T\\El 5h qHBzdQQuQ0y63p.avi", lpFilePart=0x0) returned 0x5f [0054.848] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0054.848] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\d2H7a-tYhvZsdzV7Kw0T\\El 5h qHBzdQQuQ0y63p.avi" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\hn-6\\sqa8 vvxujp_g5d\\d2h7a-tyhvzsdzv7kw0t\\el 5h qhbzdqquq0y63p.avi"), fInfoLevelId=0x0, lpFileInformation=0x2350f40 | out: lpFileInformation=0x2350f40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfac70ad0, ftCreationTime.dwHighDateTime=0x1d46504, ftLastAccessTime.dwLowDateTime=0x7c75ee80, ftLastAccessTime.dwHighDateTime=0x1d45cd5, ftLastWriteTime.dwLowDateTime=0x7c75ee80, ftLastWriteTime.dwHighDateTime=0x1d45cd5, nFileSizeHigh=0x0, nFileSizeLow=0x7b78)) returned 1 [0054.848] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0054.848] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\d2H7a-tYhvZsdzV7Kw0T\\El 5h qHBzdQQuQ0y63p.avi", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\d2H7a-tYhvZsdzV7Kw0T\\El 5h qHBzdQQuQ0y63p.avi", lpFilePart=0x0) returned 0x5f [0054.848] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0054.848] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\d2H7a-tYhvZsdzV7Kw0T\\El 5h qHBzdQQuQ0y63p.avi" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\hn-6\\sqa8 vvxujp_g5d\\d2h7a-tyhvzsdzv7kw0t\\el 5h qhbzdqquq0y63p.avi"), fInfoLevelId=0x0, lpFileInformation=0x23510d0 | out: lpFileInformation=0x23510d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfac70ad0, ftCreationTime.dwHighDateTime=0x1d46504, ftLastAccessTime.dwLowDateTime=0x7c75ee80, ftLastAccessTime.dwHighDateTime=0x1d45cd5, ftLastWriteTime.dwLowDateTime=0x7c75ee80, ftLastWriteTime.dwHighDateTime=0x1d45cd5, nFileSizeHigh=0x0, nFileSizeLow=0x7b78)) returned 1 [0054.848] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0054.848] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\d2H7a-tYhvZsdzV7Kw0T\\El 5h qHBzdQQuQ0y63p.avi", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\d2H7a-tYhvZsdzV7Kw0T\\El 5h qHBzdQQuQ0y63p.avi", lpFilePart=0x0) returned 0x5f [0054.848] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0054.848] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\d2H7a-tYhvZsdzV7Kw0T\\El 5h qHBzdQQuQ0y63p.avi" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\hn-6\\sqa8 vvxujp_g5d\\d2h7a-tyhvzsdzv7kw0t\\el 5h qhbzdqquq0y63p.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0054.848] GetFileType (hFile=0x448) returned 0x1 [0054.848] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0054.848] GetFileType (hFile=0x448) returned 0x1 [0054.848] ReadFile (in: hFile=0x448, lpBuffer=0x2353520, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x2353520*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0054.892] CloseHandle (hObject=0x448) returned 1 [0054.892] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\d2H7a-tYhvZsdzV7Kw0T\\El 5h qHBzdQQuQ0y63p.avi", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\d2H7a-tYhvZsdzV7Kw0T\\El 5h qHBzdQQuQ0y63p.avi", lpFilePart=0x0) returned 0x5f [0054.892] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0054.892] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\d2H7a-tYhvZsdzV7Kw0T\\El 5h qHBzdQQuQ0y63p.avi" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\hn-6\\sqa8 vvxujp_g5d\\d2h7a-tyhvzsdzv7kw0t\\el 5h qhbzdqquq0y63p.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0054.892] GetFileType (hFile=0x448) returned 0x1 [0054.892] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0054.892] GetFileType (hFile=0x448) returned 0x1 [0054.892] WriteFile (in: hFile=0x448, lpBuffer=0x2155008*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x2155008*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0054.893] CloseHandle (hObject=0x448) returned 1 [0054.894] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\d2H7a-tYhvZsdzV7Kw0T\\El 5h qHBzdQQuQ0y63p.avi", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\d2H7a-tYhvZsdzV7Kw0T\\El 5h qHBzdQQuQ0y63p.avi", lpFilePart=0x0) returned 0x5f [0054.894] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\d2H7a-tYhvZsdzV7Kw0T\\El 5h qHBzdQQuQ0y63p.avi.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\d2H7a-tYhvZsdzV7Kw0T\\El 5h qHBzdQQuQ0y63p.avi.xuy", lpFilePart=0x0) returned 0x63 [0054.894] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0054.894] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\d2H7a-tYhvZsdzV7Kw0T\\El 5h qHBzdQQuQ0y63p.avi" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\hn-6\\sqa8 vvxujp_g5d\\d2h7a-tyhvzsdzv7kw0t\\el 5h qhbzdqquq0y63p.avi"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfac70ad0, ftCreationTime.dwHighDateTime=0x1d46504, ftLastAccessTime.dwLowDateTime=0x7c75ee80, ftLastAccessTime.dwHighDateTime=0x1d45cd5, ftLastWriteTime.dwLowDateTime=0xc915829, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x7b78)) returned 1 [0054.894] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0054.894] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\d2H7a-tYhvZsdzV7Kw0T\\El 5h qHBzdQQuQ0y63p.avi" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\hn-6\\sqa8 vvxujp_g5d\\d2h7a-tyhvzsdzv7kw0t\\el 5h qhbzdqquq0y63p.avi"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\d2H7a-tYhvZsdzV7Kw0T\\El 5h qHBzdQQuQ0y63p.avi.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\hn-6\\sqa8 vvxujp_g5d\\d2h7a-tyhvzsdzv7kw0t\\el 5h qhbzdqquq0y63p.avi.xuy")) returned 1 [0054.895] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\d2H7a-tYhvZsdzV7Kw0T\\F925j.mp4", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\d2H7a-tYhvZsdzV7Kw0T\\F925j.mp4", lpFilePart=0x0) returned 0x50 [0054.895] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0054.895] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\d2H7a-tYhvZsdzV7Kw0T\\F925j.mp4" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\hn-6\\sqa8 vvxujp_g5d\\d2h7a-tyhvzsdzv7kw0t\\f925j.mp4"), fInfoLevelId=0x0, lpFileInformation=0x21cf848 | out: lpFileInformation=0x21cf848*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d1cae20, ftCreationTime.dwHighDateTime=0x1d45bca, ftLastAccessTime.dwLowDateTime=0xb99f5530, ftLastAccessTime.dwHighDateTime=0x1d45e3d, ftLastWriteTime.dwLowDateTime=0xb99f5530, ftLastWriteTime.dwHighDateTime=0x1d45e3d, nFileSizeHigh=0x0, nFileSizeLow=0xd297)) returned 1 [0054.895] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0054.895] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\d2H7a-tYhvZsdzV7Kw0T\\F925j.mp4", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\d2H7a-tYhvZsdzV7Kw0T\\F925j.mp4", lpFilePart=0x0) returned 0x50 [0054.895] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0054.895] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\d2H7a-tYhvZsdzV7Kw0T\\F925j.mp4" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\hn-6\\sqa8 vvxujp_g5d\\d2h7a-tyhvzsdzv7kw0t\\f925j.mp4"), fInfoLevelId=0x0, lpFileInformation=0x21cf9a0 | out: lpFileInformation=0x21cf9a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d1cae20, ftCreationTime.dwHighDateTime=0x1d45bca, ftLastAccessTime.dwLowDateTime=0xb99f5530, ftLastAccessTime.dwHighDateTime=0x1d45e3d, ftLastWriteTime.dwLowDateTime=0xb99f5530, ftLastWriteTime.dwHighDateTime=0x1d45e3d, nFileSizeHigh=0x0, nFileSizeLow=0xd297)) returned 1 [0054.895] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0054.895] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\d2H7a-tYhvZsdzV7Kw0T\\F925j.mp4", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\d2H7a-tYhvZsdzV7Kw0T\\F925j.mp4", lpFilePart=0x0) returned 0x50 [0054.895] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0054.895] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\d2H7a-tYhvZsdzV7Kw0T\\F925j.mp4" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\hn-6\\sqa8 vvxujp_g5d\\d2h7a-tyhvzsdzv7kw0t\\f925j.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0054.895] GetFileType (hFile=0x448) returned 0x1 [0054.895] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0054.895] GetFileType (hFile=0x448) returned 0x1 [0054.895] ReadFile (in: hFile=0x448, lpBuffer=0x21d1d80, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x21d1d80*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0054.906] CloseHandle (hObject=0x448) returned 1 [0054.906] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\d2H7a-tYhvZsdzV7Kw0T\\F925j.mp4", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\d2H7a-tYhvZsdzV7Kw0T\\F925j.mp4", lpFilePart=0x0) returned 0x50 [0054.906] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0054.906] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\d2H7a-tYhvZsdzV7Kw0T\\F925j.mp4" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\hn-6\\sqa8 vvxujp_g5d\\d2h7a-tyhvzsdzv7kw0t\\f925j.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0054.906] GetFileType (hFile=0x448) returned 0x1 [0054.906] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0054.906] GetFileType (hFile=0x448) returned 0x1 [0054.906] WriteFile (in: hFile=0x448, lpBuffer=0x21cfad8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x21cfad8*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0054.906] CloseHandle (hObject=0x448) returned 1 [0054.908] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\d2H7a-tYhvZsdzV7Kw0T\\F925j.mp4", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\d2H7a-tYhvZsdzV7Kw0T\\F925j.mp4", lpFilePart=0x0) returned 0x50 [0054.908] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\d2H7a-tYhvZsdzV7Kw0T\\F925j.mp4.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\d2H7a-tYhvZsdzV7Kw0T\\F925j.mp4.xuy", lpFilePart=0x0) returned 0x54 [0054.908] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0054.908] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\d2H7a-tYhvZsdzV7Kw0T\\F925j.mp4" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\hn-6\\sqa8 vvxujp_g5d\\d2h7a-tyhvzsdzv7kw0t\\f925j.mp4"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d1cae20, ftCreationTime.dwHighDateTime=0x1d45bca, ftLastAccessTime.dwLowDateTime=0xb99f5530, ftLastAccessTime.dwHighDateTime=0x1d45e3d, ftLastWriteTime.dwLowDateTime=0xc93b6b2, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xd297)) returned 1 [0054.908] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0054.908] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\d2H7a-tYhvZsdzV7Kw0T\\F925j.mp4" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\hn-6\\sqa8 vvxujp_g5d\\d2h7a-tyhvzsdzv7kw0t\\f925j.mp4"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\SQa8 vvXUjp_g5d\\d2H7a-tYhvZsdzV7Kw0T\\F925j.mp4.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\hn-6\\sqa8 vvxujp_g5d\\d2h7a-tyhvzsdzv7kw0t\\f925j.mp4.xuy")) returned 1 [0054.908] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0054.908] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\y3K K0vmpn", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\y3K K0vmpn", lpFilePart=0x0) returned 0x2c [0054.908] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\y3K K0vmpn\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\y3K K0vmpn\\", lpFilePart=0x0) returned 0x2d [0054.909] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\y3K K0vmpn\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d7d30 [0054.909] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0054.909] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0054.909] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0054.909] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0054.909] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0054.909] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0054.909] FindClose (in: hFindFile=0x5d7d30 | out: hFindFile=0x5d7d30) returned 1 [0054.909] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0054.909] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0054.909] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0054.909] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\y3K K0vmpn", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\y3K K0vmpn", lpFilePart=0x0) returned 0x2c [0054.909] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\y3K K0vmpn\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\y3K K0vmpn\\", lpFilePart=0x0) returned 0x2d [0054.910] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\y3K K0vmpn\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d7e50 [0054.910] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0054.910] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0054.910] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0054.910] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0054.910] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0054.910] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0054.910] FindClose (in: hFindFile=0x5d7e50 | out: hFindFile=0x5d7e50) returned 1 [0054.910] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0054.910] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0054.910] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\y3K K0vmpn\\3zrj1.avi", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\y3K K0vmpn\\3zrj1.avi", lpFilePart=0x0) returned 0x36 [0054.910] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0054.910] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\y3K K0vmpn\\3zrj1.avi" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\hn-6\\y3k k0vmpn\\3zrj1.avi"), fInfoLevelId=0x0, lpFileInformation=0x2250518 | out: lpFileInformation=0x2250518*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf20ced40, ftCreationTime.dwHighDateTime=0x1d455fc, ftLastAccessTime.dwLowDateTime=0xea2470, ftLastAccessTime.dwHighDateTime=0x1d456ae, ftLastWriteTime.dwLowDateTime=0xea2470, ftLastWriteTime.dwHighDateTime=0x1d456ae, nFileSizeHigh=0x0, nFileSizeLow=0x14737)) returned 1 [0054.911] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0054.911] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\y3K K0vmpn\\3zrj1.avi", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\y3K K0vmpn\\3zrj1.avi", lpFilePart=0x0) returned 0x36 [0054.911] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0054.911] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\y3K K0vmpn\\3zrj1.avi" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\hn-6\\y3k k0vmpn\\3zrj1.avi"), fInfoLevelId=0x0, lpFileInformation=0x2250638 | out: lpFileInformation=0x2250638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf20ced40, ftCreationTime.dwHighDateTime=0x1d455fc, ftLastAccessTime.dwLowDateTime=0xea2470, ftLastAccessTime.dwHighDateTime=0x1d456ae, ftLastWriteTime.dwLowDateTime=0xea2470, ftLastWriteTime.dwHighDateTime=0x1d456ae, nFileSizeHigh=0x0, nFileSizeLow=0x14737)) returned 1 [0054.911] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0054.911] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\y3K K0vmpn\\3zrj1.avi", nBufferLength=0x105, lpBuffer=0x3be270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\y3K K0vmpn\\3zrj1.avi", lpFilePart=0x0) returned 0x36 [0054.911] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0054.911] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\y3K K0vmpn\\3zrj1.avi" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\hn-6\\y3k k0vmpn\\3zrj1.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0054.911] GetFileType (hFile=0x448) returned 0x1 [0054.911] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6c0) returned 1 [0054.911] GetFileType (hFile=0x448) returned 0x1 [0054.911] ReadFile (in: hFile=0x448, lpBuffer=0x22529a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be7d8, lpOverlapped=0x0 | out: lpBuffer=0x22529a8*, lpNumberOfBytesRead=0x3be7d8*=0x1000, lpOverlapped=0x0) returned 1 [0054.922] CloseHandle (hObject=0x448) returned 1 [0054.922] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\y3K K0vmpn\\3zrj1.avi", nBufferLength=0x105, lpBuffer=0x3be270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\y3K K0vmpn\\3zrj1.avi", lpFilePart=0x0) returned 0x36 [0054.922] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0054.922] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\y3K K0vmpn\\3zrj1.avi" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\hn-6\\y3k k0vmpn\\3zrj1.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0054.922] GetFileType (hFile=0x448) returned 0x1 [0054.922] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6c0) returned 1 [0054.922] GetFileType (hFile=0x448) returned 0x1 [0054.922] WriteFile (in: hFile=0x448, lpBuffer=0x2250738*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be888, lpOverlapped=0x0 | out: lpBuffer=0x2250738*, lpNumberOfBytesWritten=0x3be888*=0x2000, lpOverlapped=0x0) returned 1 [0054.922] CloseHandle (hObject=0x448) returned 1 [0054.925] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\y3K K0vmpn\\3zrj1.avi", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\y3K K0vmpn\\3zrj1.avi", lpFilePart=0x0) returned 0x36 [0054.925] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\y3K K0vmpn\\3zrj1.avi.xuy", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\y3K K0vmpn\\3zrj1.avi.xuy", lpFilePart=0x0) returned 0x3a [0054.925] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0054.925] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\y3K K0vmpn\\3zrj1.avi" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\hn-6\\y3k k0vmpn\\3zrj1.avi"), fInfoLevelId=0x0, lpFileInformation=0x3be8a0 | out: lpFileInformation=0x3be8a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf20ced40, ftCreationTime.dwHighDateTime=0x1d455fc, ftLastAccessTime.dwLowDateTime=0xea2470, ftLastAccessTime.dwHighDateTime=0x1d456ae, ftLastWriteTime.dwLowDateTime=0xc961a17, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x14737)) returned 1 [0054.925] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0054.925] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\y3K K0vmpn\\3zrj1.avi" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\hn-6\\y3k k0vmpn\\3zrj1.avi"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\y3K K0vmpn\\3zrj1.avi.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\hn-6\\y3k k0vmpn\\3zrj1.avi.xuy")) returned 1 [0054.926] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\y3K K0vmpn\\9r86svUYxeIc.swf", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\y3K K0vmpn\\9r86svUYxeIc.swf", lpFilePart=0x0) returned 0x3d [0054.926] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0054.926] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\y3K K0vmpn\\9r86svUYxeIc.swf" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\hn-6\\y3k k0vmpn\\9r86svuyxeic.swf"), fInfoLevelId=0x0, lpFileInformation=0x22cecb8 | out: lpFileInformation=0x22cecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfbf5bb10, ftCreationTime.dwHighDateTime=0x1d464e9, ftLastAccessTime.dwLowDateTime=0x6df0fc90, ftLastAccessTime.dwHighDateTime=0x1d45c3c, ftLastWriteTime.dwLowDateTime=0x6df0fc90, ftLastWriteTime.dwHighDateTime=0x1d45c3c, nFileSizeHigh=0x0, nFileSizeLow=0x12e9a)) returned 1 [0054.926] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0054.926] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\y3K K0vmpn\\9r86svUYxeIc.swf", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\y3K K0vmpn\\9r86svUYxeIc.swf", lpFilePart=0x0) returned 0x3d [0054.926] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0054.926] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\y3K K0vmpn\\9r86svUYxeIc.swf" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\hn-6\\y3k k0vmpn\\9r86svuyxeic.swf"), fInfoLevelId=0x0, lpFileInformation=0x22cedf8 | out: lpFileInformation=0x22cedf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfbf5bb10, ftCreationTime.dwHighDateTime=0x1d464e9, ftLastAccessTime.dwLowDateTime=0x6df0fc90, ftLastAccessTime.dwHighDateTime=0x1d45c3c, ftLastWriteTime.dwLowDateTime=0x6df0fc90, ftLastWriteTime.dwHighDateTime=0x1d45c3c, nFileSizeHigh=0x0, nFileSizeLow=0x12e9a)) returned 1 [0054.926] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0054.926] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\y3K K0vmpn\\9r86svUYxeIc.swf", nBufferLength=0x105, lpBuffer=0x3be270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\y3K K0vmpn\\9r86svUYxeIc.swf", lpFilePart=0x0) returned 0x3d [0054.926] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0054.926] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\y3K K0vmpn\\9r86svUYxeIc.swf" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\hn-6\\y3k k0vmpn\\9r86svuyxeic.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0054.927] GetFileType (hFile=0x448) returned 0x1 [0054.927] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6c0) returned 1 [0054.927] GetFileType (hFile=0x448) returned 0x1 [0054.927] ReadFile (in: hFile=0x448, lpBuffer=0x22d11a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be7d8, lpOverlapped=0x0 | out: lpBuffer=0x22d11a8*, lpNumberOfBytesRead=0x3be7d8*=0x1000, lpOverlapped=0x0) returned 1 [0054.939] CloseHandle (hObject=0x448) returned 1 [0054.939] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\y3K K0vmpn\\9r86svUYxeIc.swf", nBufferLength=0x105, lpBuffer=0x3be270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\y3K K0vmpn\\9r86svUYxeIc.swf", lpFilePart=0x0) returned 0x3d [0054.939] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0054.939] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\y3K K0vmpn\\9r86svUYxeIc.swf" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\hn-6\\y3k k0vmpn\\9r86svuyxeic.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0054.939] GetFileType (hFile=0x448) returned 0x1 [0054.939] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6c0) returned 1 [0054.939] GetFileType (hFile=0x448) returned 0x1 [0054.939] WriteFile (in: hFile=0x448, lpBuffer=0x22cef18*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be888, lpOverlapped=0x0 | out: lpBuffer=0x22cef18*, lpNumberOfBytesWritten=0x3be888*=0x2000, lpOverlapped=0x0) returned 1 [0054.940] CloseHandle (hObject=0x448) returned 1 [0054.941] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\y3K K0vmpn\\9r86svUYxeIc.swf", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\y3K K0vmpn\\9r86svUYxeIc.swf", lpFilePart=0x0) returned 0x3d [0054.941] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\y3K K0vmpn\\9r86svUYxeIc.swf.xuy", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\y3K K0vmpn\\9r86svUYxeIc.swf.xuy", lpFilePart=0x0) returned 0x41 [0054.941] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0054.941] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\y3K K0vmpn\\9r86svUYxeIc.swf" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\hn-6\\y3k k0vmpn\\9r86svuyxeic.swf"), fInfoLevelId=0x0, lpFileInformation=0x3be8a0 | out: lpFileInformation=0x3be8a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfbf5bb10, ftCreationTime.dwHighDateTime=0x1d464e9, ftLastAccessTime.dwLowDateTime=0x6df0fc90, ftLastAccessTime.dwHighDateTime=0x1d45c3c, ftLastWriteTime.dwLowDateTime=0xc987c68, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x12e9a)) returned 1 [0054.942] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0054.942] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\y3K K0vmpn\\9r86svUYxeIc.swf" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\hn-6\\y3k k0vmpn\\9r86svuyxeic.swf"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\y3K K0vmpn\\9r86svUYxeIc.swf.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\hn-6\\y3k k0vmpn\\9r86svuyxeic.swf.xuy")) returned 1 [0054.942] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\y3K K0vmpn\\FGbApjzVzIlNW.mp4", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\y3K K0vmpn\\FGbApjzVzIlNW.mp4", lpFilePart=0x0) returned 0x3e [0054.942] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0054.942] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\y3K K0vmpn\\FGbApjzVzIlNW.mp4" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\hn-6\\y3k k0vmpn\\fgbapjzvzilnw.mp4"), fInfoLevelId=0x0, lpFileInformation=0x234d508 | out: lpFileInformation=0x234d508*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x864baf90, ftCreationTime.dwHighDateTime=0x1d45e87, ftLastAccessTime.dwLowDateTime=0x4f71afc0, ftLastAccessTime.dwHighDateTime=0x1d462aa, ftLastWriteTime.dwLowDateTime=0x4f71afc0, ftLastWriteTime.dwHighDateTime=0x1d462aa, nFileSizeHigh=0x0, nFileSizeLow=0x1ead)) returned 1 [0054.942] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0054.942] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\y3K K0vmpn\\FGbApjzVzIlNW.mp4", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\y3K K0vmpn\\FGbApjzVzIlNW.mp4", lpFilePart=0x0) returned 0x3e [0054.943] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0054.943] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\y3K K0vmpn\\FGbApjzVzIlNW.mp4" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\hn-6\\y3k k0vmpn\\fgbapjzvzilnw.mp4"), fInfoLevelId=0x0, lpFileInformation=0x234d648 | out: lpFileInformation=0x234d648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x864baf90, ftCreationTime.dwHighDateTime=0x1d45e87, ftLastAccessTime.dwLowDateTime=0x4f71afc0, ftLastAccessTime.dwHighDateTime=0x1d462aa, ftLastWriteTime.dwLowDateTime=0x4f71afc0, ftLastWriteTime.dwHighDateTime=0x1d462aa, nFileSizeHigh=0x0, nFileSizeLow=0x1ead)) returned 1 [0054.943] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0054.943] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\y3K K0vmpn\\FGbApjzVzIlNW.mp4", nBufferLength=0x105, lpBuffer=0x3be270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\y3K K0vmpn\\FGbApjzVzIlNW.mp4", lpFilePart=0x0) returned 0x3e [0054.943] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0054.943] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\y3K K0vmpn\\FGbApjzVzIlNW.mp4" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\hn-6\\y3k k0vmpn\\fgbapjzvzilnw.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0054.943] GetFileType (hFile=0x448) returned 0x1 [0054.943] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6c0) returned 1 [0054.943] GetFileType (hFile=0x448) returned 0x1 [0054.943] ReadFile (in: hFile=0x448, lpBuffer=0x234f9f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be7d8, lpOverlapped=0x0 | out: lpBuffer=0x234f9f8*, lpNumberOfBytesRead=0x3be7d8*=0x1000, lpOverlapped=0x0) returned 1 [0054.985] CloseHandle (hObject=0x448) returned 1 [0054.985] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\y3K K0vmpn\\FGbApjzVzIlNW.mp4", nBufferLength=0x105, lpBuffer=0x3be270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\y3K K0vmpn\\FGbApjzVzIlNW.mp4", lpFilePart=0x0) returned 0x3e [0054.985] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0054.985] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\y3K K0vmpn\\FGbApjzVzIlNW.mp4" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\hn-6\\y3k k0vmpn\\fgbapjzvzilnw.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0054.985] GetFileType (hFile=0x448) returned 0x1 [0054.985] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6c0) returned 1 [0054.985] GetFileType (hFile=0x448) returned 0x1 [0054.985] WriteFile (in: hFile=0x448, lpBuffer=0x2154e40*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be888, lpOverlapped=0x0 | out: lpBuffer=0x2154e40*, lpNumberOfBytesWritten=0x3be888*=0x2000, lpOverlapped=0x0) returned 1 [0054.985] CloseHandle (hObject=0x448) returned 1 [0054.986] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\y3K K0vmpn\\FGbApjzVzIlNW.mp4", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\y3K K0vmpn\\FGbApjzVzIlNW.mp4", lpFilePart=0x0) returned 0x3e [0054.986] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\y3K K0vmpn\\FGbApjzVzIlNW.mp4.xuy", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\y3K K0vmpn\\FGbApjzVzIlNW.mp4.xuy", lpFilePart=0x0) returned 0x42 [0054.986] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0054.986] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\y3K K0vmpn\\FGbApjzVzIlNW.mp4" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\hn-6\\y3k k0vmpn\\fgbapjzvzilnw.mp4"), fInfoLevelId=0x0, lpFileInformation=0x3be8a0 | out: lpFileInformation=0x3be8a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x864baf90, ftCreationTime.dwHighDateTime=0x1d45e87, ftLastAccessTime.dwLowDateTime=0x4f71afc0, ftLastAccessTime.dwHighDateTime=0x1d462aa, ftLastWriteTime.dwLowDateTime=0xc9fa343, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0054.986] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0054.986] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\y3K K0vmpn\\FGbApjzVzIlNW.mp4" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\hn-6\\y3k k0vmpn\\fgbapjzvzilnw.mp4"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\y3K K0vmpn\\FGbApjzVzIlNW.mp4.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\hn-6\\y3k k0vmpn\\fgbapjzvzilnw.mp4.xuy")) returned 1 [0054.987] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\y3K K0vmpn\\phsoFQ.mkv", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\y3K K0vmpn\\phsoFQ.mkv", lpFilePart=0x0) returned 0x37 [0054.987] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0054.987] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\y3K K0vmpn\\phsoFQ.mkv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\hn-6\\y3k k0vmpn\\phsofq.mkv"), fInfoLevelId=0x0, lpFileInformation=0x21cbb70 | out: lpFileInformation=0x21cbb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfcb7e180, ftCreationTime.dwHighDateTime=0x1d45db5, ftLastAccessTime.dwLowDateTime=0x2826f960, ftLastAccessTime.dwHighDateTime=0x1d45ec8, ftLastWriteTime.dwLowDateTime=0x2826f960, ftLastWriteTime.dwHighDateTime=0x1d45ec8, nFileSizeHigh=0x0, nFileSizeLow=0xdfb9)) returned 1 [0054.987] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0054.987] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\y3K K0vmpn\\phsoFQ.mkv", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\y3K K0vmpn\\phsoFQ.mkv", lpFilePart=0x0) returned 0x37 [0054.987] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0054.987] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\y3K K0vmpn\\phsoFQ.mkv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\hn-6\\y3k k0vmpn\\phsofq.mkv"), fInfoLevelId=0x0, lpFileInformation=0x21cbc90 | out: lpFileInformation=0x21cbc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfcb7e180, ftCreationTime.dwHighDateTime=0x1d45db5, ftLastAccessTime.dwLowDateTime=0x2826f960, ftLastAccessTime.dwHighDateTime=0x1d45ec8, ftLastWriteTime.dwLowDateTime=0x2826f960, ftLastWriteTime.dwHighDateTime=0x1d45ec8, nFileSizeHigh=0x0, nFileSizeLow=0xdfb9)) returned 1 [0054.987] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0054.987] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\y3K K0vmpn\\phsoFQ.mkv", nBufferLength=0x105, lpBuffer=0x3be270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\y3K K0vmpn\\phsoFQ.mkv", lpFilePart=0x0) returned 0x37 [0054.987] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0054.988] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\y3K K0vmpn\\phsoFQ.mkv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\hn-6\\y3k k0vmpn\\phsofq.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0054.988] GetFileType (hFile=0x448) returned 0x1 [0054.988] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6c0) returned 1 [0054.988] GetFileType (hFile=0x448) returned 0x1 [0054.988] ReadFile (in: hFile=0x448, lpBuffer=0x21ce000, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be7d8, lpOverlapped=0x0 | out: lpBuffer=0x21ce000*, lpNumberOfBytesRead=0x3be7d8*=0x1000, lpOverlapped=0x0) returned 1 [0054.998] CloseHandle (hObject=0x448) returned 1 [0054.998] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\y3K K0vmpn\\phsoFQ.mkv", nBufferLength=0x105, lpBuffer=0x3be270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\y3K K0vmpn\\phsoFQ.mkv", lpFilePart=0x0) returned 0x37 [0054.998] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0054.998] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\y3K K0vmpn\\phsoFQ.mkv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\hn-6\\y3k k0vmpn\\phsofq.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0054.999] GetFileType (hFile=0x448) returned 0x1 [0054.999] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6c0) returned 1 [0054.999] GetFileType (hFile=0x448) returned 0x1 [0054.999] WriteFile (in: hFile=0x448, lpBuffer=0x21cbd90*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be888, lpOverlapped=0x0 | out: lpBuffer=0x21cbd90*, lpNumberOfBytesWritten=0x3be888*=0x2000, lpOverlapped=0x0) returned 1 [0054.999] CloseHandle (hObject=0x448) returned 1 [0055.000] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\y3K K0vmpn\\phsoFQ.mkv", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\y3K K0vmpn\\phsoFQ.mkv", lpFilePart=0x0) returned 0x37 [0055.000] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\y3K K0vmpn\\phsoFQ.mkv.xuy", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\y3K K0vmpn\\phsoFQ.mkv.xuy", lpFilePart=0x0) returned 0x3b [0055.000] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0055.000] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\y3K K0vmpn\\phsoFQ.mkv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\hn-6\\y3k k0vmpn\\phsofq.mkv"), fInfoLevelId=0x0, lpFileInformation=0x3be8a0 | out: lpFileInformation=0x3be8a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfcb7e180, ftCreationTime.dwHighDateTime=0x1d45db5, ftLastAccessTime.dwLowDateTime=0x2826f960, ftLastAccessTime.dwHighDateTime=0x1d45ec8, ftLastWriteTime.dwLowDateTime=0xca20632, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xdfb9)) returned 1 [0055.000] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0055.000] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\y3K K0vmpn\\phsoFQ.mkv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\hn-6\\y3k k0vmpn\\phsofq.mkv"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Hn-6\\y3K K0vmpn\\phsoFQ.mkv.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\hn-6\\y3k k0vmpn\\phsofq.mkv.xuy")) returned 1 [0055.001] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0055.001] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\kscbOO", nBufferLength=0x105, lpBuffer=0x3be3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\kscbOO", lpFilePart=0x0) returned 0x23 [0055.001] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\kscbOO\\", nBufferLength=0x105, lpBuffer=0x3be370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\kscbOO\\", lpFilePart=0x0) returned 0x24 [0055.001] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\kscbOO\\*", lpFindFileData=0x3be580 | out: lpFindFileData=0x3be580) returned 0x5d7910 [0055.001] FindNextFileW (in: hFindFile=0x5d7910, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0055.001] FindNextFileW (in: hFindFile=0x5d7910, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0055.002] FindNextFileW (in: hFindFile=0x5d7910, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0055.002] FindNextFileW (in: hFindFile=0x5d7910, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0055.002] FindNextFileW (in: hFindFile=0x5d7910, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 0 [0055.002] FindClose (in: hFindFile=0x5d7910 | out: hFindFile=0x5d7910) returned 1 [0055.002] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0055.002] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7f0) returned 1 [0055.002] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0055.002] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\kscbOO", nBufferLength=0x105, lpBuffer=0x3be3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\kscbOO", lpFilePart=0x0) returned 0x23 [0055.002] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\kscbOO\\", nBufferLength=0x105, lpBuffer=0x3be370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\kscbOO\\", lpFilePart=0x0) returned 0x24 [0055.002] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\kscbOO\\*", lpFindFileData=0x3be580 | out: lpFindFileData=0x3be580) returned 0x5d7370 [0055.002] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0055.002] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0055.003] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0055.003] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0055.003] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 0 [0055.003] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0055.003] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0055.003] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7f0) returned 1 [0055.003] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\kscbOO\\2vlWto.swf", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\kscbOO\\2vlWto.swf", lpFilePart=0x0) returned 0x2e [0055.003] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0055.003] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\kscbOO\\2vlWto.swf" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\kscboo\\2vlwto.swf"), fInfoLevelId=0x0, lpFileInformation=0x224c0f0 | out: lpFileInformation=0x224c0f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11603650, ftCreationTime.dwHighDateTime=0x1d464a0, ftLastAccessTime.dwLowDateTime=0xccfe5040, ftLastAccessTime.dwHighDateTime=0x1d45825, ftLastWriteTime.dwLowDateTime=0xccfe5040, ftLastWriteTime.dwHighDateTime=0x1d45825, nFileSizeHigh=0x0, nFileSizeLow=0x180df)) returned 1 [0055.003] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0055.003] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\kscbOO\\2vlWto.swf", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\kscbOO\\2vlWto.swf", lpFilePart=0x0) returned 0x2e [0055.003] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0055.003] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\kscbOO\\2vlWto.swf" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\kscboo\\2vlwto.swf"), fInfoLevelId=0x0, lpFileInformation=0x224c200 | out: lpFileInformation=0x224c200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11603650, ftCreationTime.dwHighDateTime=0x1d464a0, ftLastAccessTime.dwLowDateTime=0xccfe5040, ftLastAccessTime.dwHighDateTime=0x1d45825, ftLastWriteTime.dwLowDateTime=0xccfe5040, ftLastWriteTime.dwHighDateTime=0x1d45825, nFileSizeHigh=0x0, nFileSizeLow=0x180df)) returned 1 [0055.003] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0055.004] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\kscbOO\\2vlWto.swf", nBufferLength=0x105, lpBuffer=0x3be2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\kscbOO\\2vlWto.swf", lpFilePart=0x0) returned 0x2e [0055.004] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0055.004] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\kscbOO\\2vlWto.swf" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\kscboo\\2vlwto.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0055.004] GetFileType (hFile=0x448) returned 0x1 [0055.004] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be730) returned 1 [0055.004] GetFileType (hFile=0x448) returned 0x1 [0055.004] ReadFile (in: hFile=0x448, lpBuffer=0x224e550, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be848, lpOverlapped=0x0 | out: lpBuffer=0x224e550*, lpNumberOfBytesRead=0x3be848*=0x1000, lpOverlapped=0x0) returned 1 [0055.014] CloseHandle (hObject=0x448) returned 1 [0055.014] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\kscbOO\\2vlWto.swf", nBufferLength=0x105, lpBuffer=0x3be2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\kscbOO\\2vlWto.swf", lpFilePart=0x0) returned 0x2e [0055.014] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0055.014] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\kscbOO\\2vlWto.swf" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\kscboo\\2vlwto.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0055.014] GetFileType (hFile=0x448) returned 0x1 [0055.014] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be730) returned 1 [0055.014] GetFileType (hFile=0x448) returned 0x1 [0055.015] WriteFile (in: hFile=0x448, lpBuffer=0x224c2f0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be8f8, lpOverlapped=0x0 | out: lpBuffer=0x224c2f0*, lpNumberOfBytesWritten=0x3be8f8*=0x2000, lpOverlapped=0x0) returned 1 [0055.015] CloseHandle (hObject=0x448) returned 1 [0055.017] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\kscbOO\\2vlWto.swf", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\kscbOO\\2vlWto.swf", lpFilePart=0x0) returned 0x2e [0055.017] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\kscbOO\\2vlWto.swf.xuy", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\kscbOO\\2vlWto.swf.xuy", lpFilePart=0x0) returned 0x32 [0055.017] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0055.017] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\kscbOO\\2vlWto.swf" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\kscboo\\2vlwto.swf"), fInfoLevelId=0x0, lpFileInformation=0x3be910 | out: lpFileInformation=0x3be910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11603650, ftCreationTime.dwHighDateTime=0x1d464a0, ftLastAccessTime.dwLowDateTime=0xccfe5040, ftLastAccessTime.dwHighDateTime=0x1d45825, ftLastWriteTime.dwLowDateTime=0xca4687e, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x180df)) returned 1 [0055.017] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7f0) returned 1 [0055.017] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\kscbOO\\2vlWto.swf" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\kscboo\\2vlwto.swf"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\kscbOO\\2vlWto.swf.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\kscboo\\2vlwto.swf.xuy")) returned 1 [0055.020] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\kscbOO\\l4gbd3wQGAh.flv", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\kscbOO\\l4gbd3wQGAh.flv", lpFilePart=0x0) returned 0x33 [0055.020] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0055.020] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\kscbOO\\l4gbd3wQGAh.flv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\kscboo\\l4gbd3wqgah.flv"), fInfoLevelId=0x0, lpFileInformation=0x22ca820 | out: lpFileInformation=0x22ca820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf651d7c0, ftCreationTime.dwHighDateTime=0x1d46543, ftLastAccessTime.dwLowDateTime=0x8b687200, ftLastAccessTime.dwHighDateTime=0x1d46392, ftLastWriteTime.dwLowDateTime=0x8b687200, ftLastWriteTime.dwHighDateTime=0x1d46392, nFileSizeHigh=0x0, nFileSizeLow=0xf6fc)) returned 1 [0055.021] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0055.021] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\kscbOO\\l4gbd3wQGAh.flv", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\kscbOO\\l4gbd3wQGAh.flv", lpFilePart=0x0) returned 0x33 [0055.021] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0055.021] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\kscbOO\\l4gbd3wQGAh.flv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\kscboo\\l4gbd3wqgah.flv"), fInfoLevelId=0x0, lpFileInformation=0x22ca940 | out: lpFileInformation=0x22ca940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf651d7c0, ftCreationTime.dwHighDateTime=0x1d46543, ftLastAccessTime.dwLowDateTime=0x8b687200, ftLastAccessTime.dwHighDateTime=0x1d46392, ftLastWriteTime.dwLowDateTime=0x8b687200, ftLastWriteTime.dwHighDateTime=0x1d46392, nFileSizeHigh=0x0, nFileSizeLow=0xf6fc)) returned 1 [0055.021] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0055.021] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\kscbOO\\l4gbd3wQGAh.flv", nBufferLength=0x105, lpBuffer=0x3be2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\kscbOO\\l4gbd3wQGAh.flv", lpFilePart=0x0) returned 0x33 [0055.021] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0055.021] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\kscbOO\\l4gbd3wQGAh.flv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\kscboo\\l4gbd3wqgah.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0055.021] GetFileType (hFile=0x448) returned 0x1 [0055.021] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be730) returned 1 [0055.021] GetFileType (hFile=0x448) returned 0x1 [0055.021] ReadFile (in: hFile=0x448, lpBuffer=0x22cccb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be848, lpOverlapped=0x0 | out: lpBuffer=0x22cccb0*, lpNumberOfBytesRead=0x3be848*=0x1000, lpOverlapped=0x0) returned 1 [0055.031] CloseHandle (hObject=0x448) returned 1 [0055.031] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\kscbOO\\l4gbd3wQGAh.flv", nBufferLength=0x105, lpBuffer=0x3be2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\kscbOO\\l4gbd3wQGAh.flv", lpFilePart=0x0) returned 0x33 [0055.032] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0055.032] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\kscbOO\\l4gbd3wQGAh.flv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\kscboo\\l4gbd3wqgah.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0055.032] GetFileType (hFile=0x448) returned 0x1 [0055.032] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be730) returned 1 [0055.032] GetFileType (hFile=0x448) returned 0x1 [0055.032] WriteFile (in: hFile=0x448, lpBuffer=0x22caa40*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be8f8, lpOverlapped=0x0 | out: lpBuffer=0x22caa40*, lpNumberOfBytesWritten=0x3be8f8*=0x2000, lpOverlapped=0x0) returned 1 [0055.032] CloseHandle (hObject=0x448) returned 1 [0055.034] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\kscbOO\\l4gbd3wQGAh.flv", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\kscbOO\\l4gbd3wQGAh.flv", lpFilePart=0x0) returned 0x33 [0055.034] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\kscbOO\\l4gbd3wQGAh.flv.xuy", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\kscbOO\\l4gbd3wQGAh.flv.xuy", lpFilePart=0x0) returned 0x37 [0055.034] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0055.034] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\kscbOO\\l4gbd3wQGAh.flv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\kscboo\\l4gbd3wqgah.flv"), fInfoLevelId=0x0, lpFileInformation=0x3be910 | out: lpFileInformation=0x3be910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf651d7c0, ftCreationTime.dwHighDateTime=0x1d46543, ftLastAccessTime.dwLowDateTime=0x8b687200, ftLastAccessTime.dwHighDateTime=0x1d46392, ftLastWriteTime.dwLowDateTime=0xca6c9d3, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xf6fc)) returned 1 [0055.034] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7f0) returned 1 [0055.034] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\kscbOO\\l4gbd3wQGAh.flv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\kscboo\\l4gbd3wqgah.flv"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\kscbOO\\l4gbd3wQGAh.flv.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\kscboo\\l4gbd3wqgah.flv.xuy")) returned 1 [0055.034] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\kscbOO\\ODTY47iV0R.mkv", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\kscbOO\\ODTY47iV0R.mkv", lpFilePart=0x0) returned 0x32 [0055.034] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0055.035] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\kscbOO\\ODTY47iV0R.mkv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\kscboo\\odty47iv0r.mkv"), fInfoLevelId=0x0, lpFileInformation=0x2348fa8 | out: lpFileInformation=0x2348fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88404e30, ftCreationTime.dwHighDateTime=0x1d45cc7, ftLastAccessTime.dwLowDateTime=0x1f8bc1f0, ftLastAccessTime.dwHighDateTime=0x1d45775, ftLastWriteTime.dwLowDateTime=0x1f8bc1f0, ftLastWriteTime.dwHighDateTime=0x1d45775, nFileSizeHigh=0x0, nFileSizeLow=0x99cb)) returned 1 [0055.035] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0055.035] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\kscbOO\\ODTY47iV0R.mkv", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\kscbOO\\ODTY47iV0R.mkv", lpFilePart=0x0) returned 0x32 [0055.035] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0055.035] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\kscbOO\\ODTY47iV0R.mkv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\kscboo\\odty47iv0r.mkv"), fInfoLevelId=0x0, lpFileInformation=0x23490c8 | out: lpFileInformation=0x23490c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88404e30, ftCreationTime.dwHighDateTime=0x1d45cc7, ftLastAccessTime.dwLowDateTime=0x1f8bc1f0, ftLastAccessTime.dwHighDateTime=0x1d45775, ftLastWriteTime.dwLowDateTime=0x1f8bc1f0, ftLastWriteTime.dwHighDateTime=0x1d45775, nFileSizeHigh=0x0, nFileSizeLow=0x99cb)) returned 1 [0055.035] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0055.035] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\kscbOO\\ODTY47iV0R.mkv", nBufferLength=0x105, lpBuffer=0x3be2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\kscbOO\\ODTY47iV0R.mkv", lpFilePart=0x0) returned 0x32 [0055.035] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0055.035] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\kscbOO\\ODTY47iV0R.mkv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\kscboo\\odty47iv0r.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0055.035] GetFileType (hFile=0x448) returned 0x1 [0055.035] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be730) returned 1 [0055.035] GetFileType (hFile=0x448) returned 0x1 [0055.035] ReadFile (in: hFile=0x448, lpBuffer=0x234b438, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be848, lpOverlapped=0x0 | out: lpBuffer=0x234b438*, lpNumberOfBytesRead=0x3be848*=0x1000, lpOverlapped=0x0) returned 1 [0055.075] CloseHandle (hObject=0x448) returned 1 [0055.075] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\kscbOO\\ODTY47iV0R.mkv", nBufferLength=0x105, lpBuffer=0x3be2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\kscbOO\\ODTY47iV0R.mkv", lpFilePart=0x0) returned 0x32 [0055.075] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0055.075] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\kscbOO\\ODTY47iV0R.mkv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\kscboo\\odty47iv0r.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0055.076] GetFileType (hFile=0x448) returned 0x1 [0055.076] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be730) returned 1 [0055.076] GetFileType (hFile=0x448) returned 0x1 [0055.076] WriteFile (in: hFile=0x448, lpBuffer=0x2154bc8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be8f8, lpOverlapped=0x0 | out: lpBuffer=0x2154bc8*, lpNumberOfBytesWritten=0x3be8f8*=0x2000, lpOverlapped=0x0) returned 1 [0055.076] CloseHandle (hObject=0x448) returned 1 [0055.076] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\kscbOO\\ODTY47iV0R.mkv", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\kscbOO\\ODTY47iV0R.mkv", lpFilePart=0x0) returned 0x32 [0055.076] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\kscbOO\\ODTY47iV0R.mkv.xuy", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\kscbOO\\ODTY47iV0R.mkv.xuy", lpFilePart=0x0) returned 0x36 [0055.076] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0055.076] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\kscbOO\\ODTY47iV0R.mkv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\kscboo\\odty47iv0r.mkv"), fInfoLevelId=0x0, lpFileInformation=0x3be910 | out: lpFileInformation=0x3be910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88404e30, ftCreationTime.dwHighDateTime=0x1d45cc7, ftLastAccessTime.dwLowDateTime=0x1f8bc1f0, ftLastAccessTime.dwHighDateTime=0x1d45775, ftLastWriteTime.dwLowDateTime=0xcadf21c, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x99cb)) returned 1 [0055.076] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7f0) returned 1 [0055.076] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\kscbOO\\ODTY47iV0R.mkv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\kscboo\\odty47iv0r.mkv"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\kscbOO\\ODTY47iV0R.mkv.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\kscboo\\odty47iv0r.mkv.xuy")) returned 1 [0055.077] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be950) returned 1 [0055.077] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents", nBufferLength=0x105, lpBuffer=0x3be440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents", lpFilePart=0x0) returned 0x1f [0055.077] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\", nBufferLength=0x105, lpBuffer=0x3be3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\", lpFilePart=0x0) returned 0x20 [0055.077] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\*", lpFindFileData=0x3be5f0 | out: lpFindFileData=0x3be5f0) returned 0x5d7a30 [0055.077] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0055.077] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0055.077] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0055.077] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0055.078] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0055.078] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0055.078] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0055.078] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0055.078] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0055.078] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0055.078] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0055.078] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0055.078] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0055.079] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0055.079] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0055.079] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0055.079] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0055.079] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0055.079] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0055.079] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0055.079] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0055.080] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0055.080] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0055.080] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0055.080] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0055.080] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0055.080] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0055.080] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0055.080] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 0 [0055.080] FindClose (in: hFindFile=0x5d7a30 | out: hFindFile=0x5d7a30) returned 1 [0055.080] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0055.080] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0055.080] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be950) returned 1 [0055.081] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents", nBufferLength=0x105, lpBuffer=0x3be440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents", lpFilePart=0x0) returned 0x1f [0055.081] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\", nBufferLength=0x105, lpBuffer=0x3be3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\", lpFilePart=0x0) returned 0x20 [0055.081] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\*", lpFindFileData=0x3be5f0 | out: lpFindFileData=0x3be5f0) returned 0x5d7370 [0055.081] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0055.081] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0055.081] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0055.081] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0055.081] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0055.081] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0055.082] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0055.082] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0055.082] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0055.082] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0055.082] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0055.082] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0055.082] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0055.082] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0055.083] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0055.083] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0055.083] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0055.083] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0055.083] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0055.083] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0055.083] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0055.083] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0055.083] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0055.084] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0055.084] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0055.084] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0055.084] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0055.084] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0055.084] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 0 [0055.084] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0055.084] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0055.084] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0055.084] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\1E9x6o.xlsx", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\1E9x6o.xlsx", lpFilePart=0x0) returned 0x2b [0055.084] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0055.084] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\1E9x6o.xlsx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\1e9x6o.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x21ce560 | out: lpFileInformation=0x21ce560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47254c40, ftCreationTime.dwHighDateTime=0x1d41003, ftLastAccessTime.dwLowDateTime=0x505cad80, ftLastAccessTime.dwHighDateTime=0x1d47007, ftLastWriteTime.dwLowDateTime=0x505cad80, ftLastWriteTime.dwHighDateTime=0x1d47007, nFileSizeHigh=0x0, nFileSizeLow=0xc86f)) returned 1 [0055.085] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0055.085] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\1E9x6o.xlsx", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\1E9x6o.xlsx", lpFilePart=0x0) returned 0x2b [0055.085] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0055.085] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\1E9x6o.xlsx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\1e9x6o.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x21ce668 | out: lpFileInformation=0x21ce668*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47254c40, ftCreationTime.dwHighDateTime=0x1d41003, ftLastAccessTime.dwLowDateTime=0x505cad80, ftLastAccessTime.dwHighDateTime=0x1d47007, ftLastWriteTime.dwLowDateTime=0x505cad80, ftLastWriteTime.dwHighDateTime=0x1d47007, nFileSizeHigh=0x0, nFileSizeLow=0xc86f)) returned 1 [0055.085] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0055.085] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\1E9x6o.xlsx", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\1E9x6o.xlsx", lpFilePart=0x0) returned 0x2b [0055.085] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0055.085] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\1E9x6o.xlsx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\1e9x6o.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0055.085] GetFileType (hFile=0x448) returned 0x1 [0055.085] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0055.085] GetFileType (hFile=0x448) returned 0x1 [0055.085] ReadFile (in: hFile=0x448, lpBuffer=0x21d09a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be8b8, lpOverlapped=0x0 | out: lpBuffer=0x21d09a8*, lpNumberOfBytesRead=0x3be8b8*=0x1000, lpOverlapped=0x0) returned 1 [0055.096] CloseHandle (hObject=0x448) returned 1 [0055.096] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\1E9x6o.xlsx", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\1E9x6o.xlsx", lpFilePart=0x0) returned 0x2b [0055.096] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0055.096] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\1E9x6o.xlsx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\1e9x6o.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0055.096] GetFileType (hFile=0x448) returned 0x1 [0055.096] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0055.096] GetFileType (hFile=0x448) returned 0x1 [0055.096] WriteFile (in: hFile=0x448, lpBuffer=0x21ce750*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be968, lpOverlapped=0x0 | out: lpBuffer=0x21ce750*, lpNumberOfBytesWritten=0x3be968*=0x2000, lpOverlapped=0x0) returned 1 [0055.096] CloseHandle (hObject=0x448) returned 1 [0055.097] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\1E9x6o.xlsx", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\1E9x6o.xlsx", lpFilePart=0x0) returned 0x2b [0055.097] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\1E9x6o.xlsx.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\1E9x6o.xlsx.xuy", lpFilePart=0x0) returned 0x2f [0055.097] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0055.097] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\1E9x6o.xlsx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\1e9x6o.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47254c40, ftCreationTime.dwHighDateTime=0x1d41003, ftLastAccessTime.dwLowDateTime=0x505cad80, ftLastAccessTime.dwHighDateTime=0x1d47007, ftLastWriteTime.dwLowDateTime=0xcb08283, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xc86f)) returned 1 [0055.097] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0055.097] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\1E9x6o.xlsx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\1e9x6o.xlsx"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\1E9x6o.xlsx.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\1e9x6o.xlsx.xuy")) returned 1 [0055.097] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\2FqWk.pdf", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\2FqWk.pdf", lpFilePart=0x0) returned 0x29 [0055.097] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0055.097] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\2FqWk.pdf" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\2fqwk.pdf"), fInfoLevelId=0x0, lpFileInformation=0x224cc58 | out: lpFileInformation=0x224cc58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86e39680, ftCreationTime.dwHighDateTime=0x1d45bd9, ftLastAccessTime.dwLowDateTime=0xa7089e20, ftLastAccessTime.dwHighDateTime=0x1d4638f, ftLastWriteTime.dwLowDateTime=0xa7089e20, ftLastWriteTime.dwHighDateTime=0x1d4638f, nFileSizeHigh=0x0, nFileSizeLow=0x14343)) returned 1 [0055.098] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0055.098] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\2FqWk.pdf", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\2FqWk.pdf", lpFilePart=0x0) returned 0x29 [0055.098] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0055.098] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\2FqWk.pdf" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\2fqwk.pdf"), fInfoLevelId=0x0, lpFileInformation=0x224cd60 | out: lpFileInformation=0x224cd60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86e39680, ftCreationTime.dwHighDateTime=0x1d45bd9, ftLastAccessTime.dwLowDateTime=0xa7089e20, ftLastAccessTime.dwHighDateTime=0x1d4638f, ftLastWriteTime.dwLowDateTime=0xa7089e20, ftLastWriteTime.dwHighDateTime=0x1d4638f, nFileSizeHigh=0x0, nFileSizeLow=0x14343)) returned 1 [0055.098] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0055.098] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\2FqWk.pdf", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\2FqWk.pdf", lpFilePart=0x0) returned 0x29 [0055.098] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0055.098] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\2FqWk.pdf" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\2fqwk.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0055.098] GetFileType (hFile=0x448) returned 0x1 [0055.098] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0055.098] GetFileType (hFile=0x448) returned 0x1 [0055.098] ReadFile (in: hFile=0x448, lpBuffer=0x224f0a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be8b8, lpOverlapped=0x0 | out: lpBuffer=0x224f0a0*, lpNumberOfBytesRead=0x3be8b8*=0x1000, lpOverlapped=0x0) returned 1 [0055.109] CloseHandle (hObject=0x448) returned 1 [0055.109] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\2FqWk.pdf", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\2FqWk.pdf", lpFilePart=0x0) returned 0x29 [0055.109] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0055.109] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\2FqWk.pdf" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\2fqwk.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0055.110] GetFileType (hFile=0x448) returned 0x1 [0055.110] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0055.110] GetFileType (hFile=0x448) returned 0x1 [0055.110] WriteFile (in: hFile=0x448, lpBuffer=0x224ce48*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be968, lpOverlapped=0x0 | out: lpBuffer=0x224ce48*, lpNumberOfBytesWritten=0x3be968*=0x2000, lpOverlapped=0x0) returned 1 [0055.110] CloseHandle (hObject=0x448) returned 1 [0055.110] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\2FqWk.pdf", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\2FqWk.pdf", lpFilePart=0x0) returned 0x29 [0055.110] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\2FqWk.pdf.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\2FqWk.pdf.xuy", lpFilePart=0x0) returned 0x2d [0055.110] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0055.110] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\2FqWk.pdf" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\2fqwk.pdf"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86e39680, ftCreationTime.dwHighDateTime=0x1d45bd9, ftLastAccessTime.dwLowDateTime=0xa7089e20, ftLastAccessTime.dwHighDateTime=0x1d4638f, ftLastWriteTime.dwLowDateTime=0xcb2b7ca, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x14343)) returned 1 [0055.110] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0055.110] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\2FqWk.pdf" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\2fqwk.pdf"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\2FqWk.pdf.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\2fqwk.pdf.xuy")) returned 1 [0055.111] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\6nnSA.xlsx", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\6nnSA.xlsx", lpFilePart=0x0) returned 0x2a [0055.111] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0055.111] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\6nnSA.xlsx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\6nnsa.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x22cb350 | out: lpFileInformation=0x22cb350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1723be0, ftCreationTime.dwHighDateTime=0x1d4339e, ftLastAccessTime.dwLowDateTime=0xd73c84f0, ftLastAccessTime.dwHighDateTime=0x1d4113a, ftLastWriteTime.dwLowDateTime=0xd73c84f0, ftLastWriteTime.dwHighDateTime=0x1d4113a, nFileSizeHigh=0x0, nFileSizeLow=0x180da)) returned 1 [0055.111] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0055.111] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\6nnSA.xlsx", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\6nnSA.xlsx", lpFilePart=0x0) returned 0x2a [0055.111] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0055.111] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\6nnSA.xlsx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\6nnsa.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x22cb458 | out: lpFileInformation=0x22cb458*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1723be0, ftCreationTime.dwHighDateTime=0x1d4339e, ftLastAccessTime.dwLowDateTime=0xd73c84f0, ftLastAccessTime.dwHighDateTime=0x1d4113a, ftLastWriteTime.dwLowDateTime=0xd73c84f0, ftLastWriteTime.dwHighDateTime=0x1d4113a, nFileSizeHigh=0x0, nFileSizeLow=0x180da)) returned 1 [0055.111] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0055.111] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\6nnSA.xlsx", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\6nnSA.xlsx", lpFilePart=0x0) returned 0x2a [0055.111] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0055.111] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\6nnSA.xlsx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\6nnsa.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0055.111] GetFileType (hFile=0x448) returned 0x1 [0055.112] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0055.112] GetFileType (hFile=0x448) returned 0x1 [0055.112] ReadFile (in: hFile=0x448, lpBuffer=0x22cd798, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be8b8, lpOverlapped=0x0 | out: lpBuffer=0x22cd798*, lpNumberOfBytesRead=0x3be8b8*=0x1000, lpOverlapped=0x0) returned 1 [0055.121] CloseHandle (hObject=0x448) returned 1 [0055.121] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\6nnSA.xlsx", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\6nnSA.xlsx", lpFilePart=0x0) returned 0x2a [0055.121] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0055.121] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\6nnSA.xlsx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\6nnsa.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0055.122] GetFileType (hFile=0x448) returned 0x1 [0055.122] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0055.122] GetFileType (hFile=0x448) returned 0x1 [0055.122] WriteFile (in: hFile=0x448, lpBuffer=0x22cb540*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be968, lpOverlapped=0x0 | out: lpBuffer=0x22cb540*, lpNumberOfBytesWritten=0x3be968*=0x2000, lpOverlapped=0x0) returned 1 [0055.122] CloseHandle (hObject=0x448) returned 1 [0055.122] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\6nnSA.xlsx", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\6nnSA.xlsx", lpFilePart=0x0) returned 0x2a [0055.122] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\6nnSA.xlsx.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\6nnSA.xlsx.xuy", lpFilePart=0x0) returned 0x2e [0055.122] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0055.122] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\6nnSA.xlsx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\6nnsa.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1723be0, ftCreationTime.dwHighDateTime=0x1d4339e, ftLastAccessTime.dwLowDateTime=0xd73c84f0, ftLastAccessTime.dwHighDateTime=0x1d4113a, ftLastWriteTime.dwLowDateTime=0xcb51822, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x180da)) returned 1 [0055.122] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0055.123] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\6nnSA.xlsx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\6nnsa.xlsx"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\6nnSA.xlsx.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\6nnsa.xlsx.xuy")) returned 1 [0055.123] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Database1.accdb", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Database1.accdb", lpFilePart=0x0) returned 0x2f [0055.123] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0055.123] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Database1.accdb" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\database1.accdb"), fInfoLevelId=0x0, lpFileInformation=0x2349a48 | out: lpFileInformation=0x2349a48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1072f2e6, ftCreationTime.dwHighDateTime=0x1d3aaaf, ftLastAccessTime.dwLowDateTime=0x116be699, ftLastAccessTime.dwHighDateTime=0x1d3aaaf, ftLastWriteTime.dwLowDateTime=0x1e86a4be, ftLastWriteTime.dwHighDateTime=0x1d3aaaf, nFileSizeHigh=0x0, nFileSizeLow=0x57000)) returned 1 [0055.123] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0055.123] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Database1.accdb", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Database1.accdb", lpFilePart=0x0) returned 0x2f [0055.123] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0055.123] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Database1.accdb" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\database1.accdb"), fInfoLevelId=0x0, lpFileInformation=0x2349b60 | out: lpFileInformation=0x2349b60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1072f2e6, ftCreationTime.dwHighDateTime=0x1d3aaaf, ftLastAccessTime.dwLowDateTime=0x116be699, ftLastAccessTime.dwHighDateTime=0x1d3aaaf, ftLastWriteTime.dwLowDateTime=0x1e86a4be, ftLastWriteTime.dwHighDateTime=0x1d3aaaf, nFileSizeHigh=0x0, nFileSizeLow=0x57000)) returned 1 [0055.123] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0055.123] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Database1.accdb", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Database1.accdb", lpFilePart=0x0) returned 0x2f [0055.123] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0055.124] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Database1.accdb" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\database1.accdb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0055.124] GetFileType (hFile=0x448) returned 0x1 [0055.124] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0055.124] GetFileType (hFile=0x448) returned 0x1 [0055.124] ReadFile (in: hFile=0x448, lpBuffer=0x234bec0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be8b8, lpOverlapped=0x0 | out: lpBuffer=0x234bec0*, lpNumberOfBytesRead=0x3be8b8*=0x1000, lpOverlapped=0x0) returned 1 [0055.164] CloseHandle (hObject=0x448) returned 1 [0055.164] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Database1.accdb", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Database1.accdb", lpFilePart=0x0) returned 0x2f [0055.164] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0055.164] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Database1.accdb" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\database1.accdb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0055.165] GetFileType (hFile=0x448) returned 0x1 [0055.165] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0055.165] GetFileType (hFile=0x448) returned 0x1 [0055.165] WriteFile (in: hFile=0x448, lpBuffer=0x2155728*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be968, lpOverlapped=0x0 | out: lpBuffer=0x2155728*, lpNumberOfBytesWritten=0x3be968*=0x2000, lpOverlapped=0x0) returned 1 [0055.165] CloseHandle (hObject=0x448) returned 1 [0055.165] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Database1.accdb", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Database1.accdb", lpFilePart=0x0) returned 0x2f [0055.165] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Database1.accdb.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Database1.accdb.xuy", lpFilePart=0x0) returned 0x33 [0055.165] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0055.165] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Database1.accdb" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\database1.accdb"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1072f2e6, ftCreationTime.dwHighDateTime=0x1d3aaaf, ftLastAccessTime.dwLowDateTime=0x116be699, ftLastAccessTime.dwHighDateTime=0x1d3aaaf, ftLastWriteTime.dwLowDateTime=0xcb9ddcf, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x57000)) returned 1 [0055.165] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0055.165] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Database1.accdb" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\database1.accdb"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Database1.accdb.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\database1.accdb.xuy")) returned 1 [0055.169] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\desktop.ini", lpFilePart=0x0) returned 0x2b [0055.169] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0055.169] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x21c8cd0 | out: lpFileInformation=0x21c8cd0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xae168be9, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xae168be9, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xae201536, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x192)) returned 1 [0055.169] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0055.169] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\desktop.ini", lpFilePart=0x0) returned 0x2b [0055.169] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0055.169] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0055.169] GetFileType (hFile=0x448) returned 0x1 [0055.169] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0055.169] GetFileType (hFile=0x448) returned 0x1 [0055.169] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x192 [0055.169] ReadFile (in: hFile=0x448, lpBuffer=0x21c9090, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x21c9090*, lpNumberOfBytesRead=0x3be868*=0x192, lpOverlapped=0x0) returned 1 [0055.169] CloseHandle (hObject=0x448) returned 1 [0055.179] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\desktop.ini", lpFilePart=0x0) returned 0x2b [0055.179] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0055.179] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\desktop.ini"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0055.181] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb230) returned 1 [0055.181] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3bbeb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\desktop.ini", lpFilePart=0x0) returned 0x2b [0055.181] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc350) returned 1 [0055.181] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x3bc430 | out: lpFileInformation=0x3bc430*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xae168be9, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xae168be9, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xae201536, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x192)) returned 1 [0055.181] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc310) returned 1 [0055.181] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3bbed0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\desktop.ini", lpFilePart=0x0) returned 0x2b [0055.181] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc350) returned 1 [0055.181] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x2241018 | out: lpFileInformation=0x2241018*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xae168be9, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xae168be9, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xae201536, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x192)) returned 1 [0055.181] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc310) returned 1 [0055.182] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3bbd30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\desktop.ini", lpFilePart=0x0) returned 0x2b [0055.182] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc210) returned 1 [0055.182] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0055.182] GetFileType (hFile=0x448) returned 0x1 [0055.182] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc180) returned 1 [0055.182] GetFileType (hFile=0x448) returned 0x1 [0055.182] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3bc3a8 | out: lpFileSizeHigh=0x3bc3a8*=0x0) returned 0x192 [0055.182] ReadFile (in: hFile=0x448, lpBuffer=0x22413d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bc2d8, lpOverlapped=0x0 | out: lpBuffer=0x22413d8*, lpNumberOfBytesRead=0x3bc2d8*=0x192, lpOverlapped=0x0) returned 1 [0055.182] CloseHandle (hObject=0x448) returned 1 [0055.219] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3bbd30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\desktop.ini", lpFilePart=0x0) returned 0x2b [0055.219] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc210) returned 1 [0055.219] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\desktop.ini"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0055.220] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8ca0) returned 1 [0055.221] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\DlWnE.docx", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\DlWnE.docx", lpFilePart=0x0) returned 0x2a [0055.221] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0055.221] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\DlWnE.docx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\dlwne.docx"), fInfoLevelId=0x0, lpFileInformation=0x22b9318 | out: lpFileInformation=0x22b9318*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b70e6f0, ftCreationTime.dwHighDateTime=0x1d42b2b, ftLastAccessTime.dwLowDateTime=0xc7c7ac00, ftLastAccessTime.dwHighDateTime=0x1d476ef, ftLastWriteTime.dwLowDateTime=0xc7c7ac00, ftLastWriteTime.dwHighDateTime=0x1d476ef, nFileSizeHigh=0x0, nFileSizeLow=0x7e8e)) returned 1 [0055.221] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0055.221] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\DlWnE.docx", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\DlWnE.docx", lpFilePart=0x0) returned 0x2a [0055.222] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0055.222] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\DlWnE.docx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\dlwne.docx"), fInfoLevelId=0x0, lpFileInformation=0x22b9420 | out: lpFileInformation=0x22b9420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b70e6f0, ftCreationTime.dwHighDateTime=0x1d42b2b, ftLastAccessTime.dwLowDateTime=0xc7c7ac00, ftLastAccessTime.dwHighDateTime=0x1d476ef, ftLastWriteTime.dwLowDateTime=0xc7c7ac00, ftLastWriteTime.dwHighDateTime=0x1d476ef, nFileSizeHigh=0x0, nFileSizeLow=0x7e8e)) returned 1 [0055.222] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0055.222] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\DlWnE.docx", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\DlWnE.docx", lpFilePart=0x0) returned 0x2a [0055.222] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0055.222] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\DlWnE.docx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\dlwne.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0055.222] GetFileType (hFile=0x448) returned 0x1 [0055.222] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0055.222] GetFileType (hFile=0x448) returned 0x1 [0055.222] ReadFile (in: hFile=0x448, lpBuffer=0x22bb760, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be8b8, lpOverlapped=0x0 | out: lpBuffer=0x22bb760*, lpNumberOfBytesRead=0x3be8b8*=0x1000, lpOverlapped=0x0) returned 1 [0055.259] CloseHandle (hObject=0x448) returned 1 [0055.259] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\DlWnE.docx", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\DlWnE.docx", lpFilePart=0x0) returned 0x2a [0055.259] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0055.259] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\DlWnE.docx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\dlwne.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0055.259] GetFileType (hFile=0x448) returned 0x1 [0055.259] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0055.259] GetFileType (hFile=0x448) returned 0x1 [0055.259] WriteFile (in: hFile=0x448, lpBuffer=0x22b9508*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be968, lpOverlapped=0x0 | out: lpBuffer=0x22b9508*, lpNumberOfBytesWritten=0x3be968*=0x2000, lpOverlapped=0x0) returned 1 [0055.260] CloseHandle (hObject=0x448) returned 1 [0055.260] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\DlWnE.docx", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\DlWnE.docx", lpFilePart=0x0) returned 0x2a [0055.260] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\DlWnE.docx.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\DlWnE.docx.xuy", lpFilePart=0x0) returned 0x2e [0055.260] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0055.260] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\DlWnE.docx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\dlwne.docx"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b70e6f0, ftCreationTime.dwHighDateTime=0x1d42b2b, ftLastAccessTime.dwLowDateTime=0xc7c7ac00, ftLastAccessTime.dwHighDateTime=0x1d476ef, ftLastWriteTime.dwLowDateTime=0xcc82c4f, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x7e8e)) returned 1 [0055.260] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0055.260] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\DlWnE.docx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\dlwne.docx"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\DlWnE.docx.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\dlwne.docx.xuy")) returned 1 [0055.261] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Dt9dhKb.xlsx", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Dt9dhKb.xlsx", lpFilePart=0x0) returned 0x2c [0055.261] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0055.261] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Dt9dhKb.xlsx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\dt9dhkb.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x2337a10 | out: lpFileInformation=0x2337a10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7523950, ftCreationTime.dwHighDateTime=0x1d45862, ftLastAccessTime.dwLowDateTime=0x2bdfd740, ftLastAccessTime.dwHighDateTime=0x1d40084, ftLastWriteTime.dwLowDateTime=0x2bdfd740, ftLastWriteTime.dwHighDateTime=0x1d40084, nFileSizeHigh=0x0, nFileSizeLow=0xdfaa)) returned 1 [0055.261] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0055.261] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Dt9dhKb.xlsx", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Dt9dhKb.xlsx", lpFilePart=0x0) returned 0x2c [0055.261] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0055.261] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Dt9dhKb.xlsx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\dt9dhkb.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x2337b28 | out: lpFileInformation=0x2337b28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7523950, ftCreationTime.dwHighDateTime=0x1d45862, ftLastAccessTime.dwLowDateTime=0x2bdfd740, ftLastAccessTime.dwHighDateTime=0x1d40084, ftLastWriteTime.dwLowDateTime=0x2bdfd740, ftLastWriteTime.dwHighDateTime=0x1d40084, nFileSizeHigh=0x0, nFileSizeLow=0xdfaa)) returned 1 [0055.261] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0055.261] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Dt9dhKb.xlsx", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Dt9dhKb.xlsx", lpFilePart=0x0) returned 0x2c [0055.261] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0055.261] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Dt9dhKb.xlsx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\dt9dhkb.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0055.261] GetFileType (hFile=0x448) returned 0x1 [0055.261] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0055.261] GetFileType (hFile=0x448) returned 0x1 [0055.261] ReadFile (in: hFile=0x448, lpBuffer=0x2339e88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be8b8, lpOverlapped=0x0 | out: lpBuffer=0x2339e88*, lpNumberOfBytesRead=0x3be8b8*=0x1000, lpOverlapped=0x0) returned 1 [0055.298] CloseHandle (hObject=0x448) returned 1 [0055.298] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Dt9dhKb.xlsx", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Dt9dhKb.xlsx", lpFilePart=0x0) returned 0x2c [0055.298] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0055.298] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Dt9dhKb.xlsx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\dt9dhkb.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0055.299] GetFileType (hFile=0x448) returned 0x1 [0055.299] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0055.299] GetFileType (hFile=0x448) returned 0x1 [0055.299] WriteFile (in: hFile=0x448, lpBuffer=0x2155850*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be968, lpOverlapped=0x0 | out: lpBuffer=0x2155850*, lpNumberOfBytesWritten=0x3be968*=0x2000, lpOverlapped=0x0) returned 1 [0055.299] CloseHandle (hObject=0x448) returned 1 [0055.299] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Dt9dhKb.xlsx", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Dt9dhKb.xlsx", lpFilePart=0x0) returned 0x2c [0055.299] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Dt9dhKb.xlsx.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Dt9dhKb.xlsx.xuy", lpFilePart=0x0) returned 0x30 [0055.299] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0055.299] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Dt9dhKb.xlsx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\dt9dhkb.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7523950, ftCreationTime.dwHighDateTime=0x1d45862, ftLastAccessTime.dwLowDateTime=0x2bdfd740, ftLastAccessTime.dwHighDateTime=0x1d40084, ftLastWriteTime.dwLowDateTime=0xccf5338, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xdfaa)) returned 1 [0055.299] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0055.299] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Dt9dhKb.xlsx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\dt9dhkb.xlsx"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Dt9dhKb.xlsx.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\dt9dhkb.xlsx.xuy")) returned 1 [0055.300] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\DUii1j9HuykgCRKk.xlsx", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\DUii1j9HuykgCRKk.xlsx", lpFilePart=0x0) returned 0x35 [0055.300] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0055.300] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\DUii1j9HuykgCRKk.xlsx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\duii1j9huykgcrkk.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x21b6278 | out: lpFileInformation=0x21b6278*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1716d960, ftCreationTime.dwHighDateTime=0x1d43ca9, ftLastAccessTime.dwLowDateTime=0x4c262cb0, ftLastAccessTime.dwHighDateTime=0x1d433e3, ftLastWriteTime.dwLowDateTime=0x4c262cb0, ftLastWriteTime.dwHighDateTime=0x1d433e3, nFileSizeHigh=0x0, nFileSizeLow=0x18c2f)) returned 1 [0055.300] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0055.300] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\DUii1j9HuykgCRKk.xlsx", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\DUii1j9HuykgCRKk.xlsx", lpFilePart=0x0) returned 0x35 [0055.300] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0055.300] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\DUii1j9HuykgCRKk.xlsx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\duii1j9huykgcrkk.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x21b63b0 | out: lpFileInformation=0x21b63b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1716d960, ftCreationTime.dwHighDateTime=0x1d43ca9, ftLastAccessTime.dwLowDateTime=0x4c262cb0, ftLastAccessTime.dwHighDateTime=0x1d433e3, ftLastWriteTime.dwLowDateTime=0x4c262cb0, ftLastWriteTime.dwHighDateTime=0x1d433e3, nFileSizeHigh=0x0, nFileSizeLow=0x18c2f)) returned 1 [0055.300] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0055.300] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\DUii1j9HuykgCRKk.xlsx", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\DUii1j9HuykgCRKk.xlsx", lpFilePart=0x0) returned 0x35 [0055.300] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0055.300] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\DUii1j9HuykgCRKk.xlsx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\duii1j9huykgcrkk.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0055.301] GetFileType (hFile=0x448) returned 0x1 [0055.301] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0055.301] GetFileType (hFile=0x448) returned 0x1 [0055.301] ReadFile (in: hFile=0x448, lpBuffer=0x21b8750, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be8b8, lpOverlapped=0x0 | out: lpBuffer=0x21b8750*, lpNumberOfBytesRead=0x3be8b8*=0x1000, lpOverlapped=0x0) returned 1 [0055.311] CloseHandle (hObject=0x448) returned 1 [0055.311] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\DUii1j9HuykgCRKk.xlsx", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\DUii1j9HuykgCRKk.xlsx", lpFilePart=0x0) returned 0x35 [0055.311] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0055.311] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\DUii1j9HuykgCRKk.xlsx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\duii1j9huykgcrkk.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0055.311] GetFileType (hFile=0x448) returned 0x1 [0055.311] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0055.312] GetFileType (hFile=0x448) returned 0x1 [0055.312] WriteFile (in: hFile=0x448, lpBuffer=0x21b64c8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be968, lpOverlapped=0x0 | out: lpBuffer=0x21b64c8*, lpNumberOfBytesWritten=0x3be968*=0x2000, lpOverlapped=0x0) returned 1 [0055.312] CloseHandle (hObject=0x448) returned 1 [0055.312] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\DUii1j9HuykgCRKk.xlsx", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\DUii1j9HuykgCRKk.xlsx", lpFilePart=0x0) returned 0x35 [0055.312] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\DUii1j9HuykgCRKk.xlsx.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\DUii1j9HuykgCRKk.xlsx.xuy", lpFilePart=0x0) returned 0x39 [0055.312] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0055.312] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\DUii1j9HuykgCRKk.xlsx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\duii1j9huykgcrkk.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1716d960, ftCreationTime.dwHighDateTime=0x1d43ca9, ftLastAccessTime.dwLowDateTime=0x4c262cb0, ftLastAccessTime.dwHighDateTime=0x1d433e3, ftLastWriteTime.dwLowDateTime=0xcd1b4ef, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x18c2f)) returned 1 [0055.312] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0055.312] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\DUii1j9HuykgCRKk.xlsx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\duii1j9huykgcrkk.xlsx"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\DUii1j9HuykgCRKk.xlsx.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\duii1j9huykgcrkk.xlsx.xuy")) returned 1 [0055.313] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\FCiMOpjqGPmFU0.pptx", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\FCiMOpjqGPmFU0.pptx", lpFilePart=0x0) returned 0x33 [0055.313] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0055.313] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\FCiMOpjqGPmFU0.pptx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\fcimopjqgpmfu0.pptx"), fInfoLevelId=0x0, lpFileInformation=0x2234a78 | out: lpFileInformation=0x2234a78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b1293d0, ftCreationTime.dwHighDateTime=0x1d4148f, ftLastAccessTime.dwLowDateTime=0x13ad4a0, ftLastAccessTime.dwHighDateTime=0x1d472ca, ftLastWriteTime.dwLowDateTime=0x13ad4a0, ftLastWriteTime.dwHighDateTime=0x1d472ca, nFileSizeHigh=0x0, nFileSizeLow=0xf77d)) returned 1 [0055.313] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0055.313] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\FCiMOpjqGPmFU0.pptx", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\FCiMOpjqGPmFU0.pptx", lpFilePart=0x0) returned 0x33 [0055.313] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0055.313] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\FCiMOpjqGPmFU0.pptx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\fcimopjqgpmfu0.pptx"), fInfoLevelId=0x0, lpFileInformation=0x2234ba0 | out: lpFileInformation=0x2234ba0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b1293d0, ftCreationTime.dwHighDateTime=0x1d4148f, ftLastAccessTime.dwLowDateTime=0x13ad4a0, ftLastAccessTime.dwHighDateTime=0x1d472ca, ftLastWriteTime.dwLowDateTime=0x13ad4a0, ftLastWriteTime.dwHighDateTime=0x1d472ca, nFileSizeHigh=0x0, nFileSizeLow=0xf77d)) returned 1 [0055.313] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0055.313] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\FCiMOpjqGPmFU0.pptx", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\FCiMOpjqGPmFU0.pptx", lpFilePart=0x0) returned 0x33 [0055.313] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0055.313] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\FCiMOpjqGPmFU0.pptx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\fcimopjqgpmfu0.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0055.313] GetFileType (hFile=0x448) returned 0x1 [0055.313] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0055.313] GetFileType (hFile=0x448) returned 0x1 [0055.314] ReadFile (in: hFile=0x448, lpBuffer=0x2236f20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be8b8, lpOverlapped=0x0 | out: lpBuffer=0x2236f20*, lpNumberOfBytesRead=0x3be8b8*=0x1000, lpOverlapped=0x0) returned 1 [0055.324] CloseHandle (hObject=0x448) returned 1 [0055.324] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\FCiMOpjqGPmFU0.pptx", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\FCiMOpjqGPmFU0.pptx", lpFilePart=0x0) returned 0x33 [0055.324] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0055.324] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\FCiMOpjqGPmFU0.pptx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\fcimopjqgpmfu0.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0055.324] GetFileType (hFile=0x448) returned 0x1 [0055.324] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0055.324] GetFileType (hFile=0x448) returned 0x1 [0055.324] WriteFile (in: hFile=0x448, lpBuffer=0x2234ca8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be968, lpOverlapped=0x0 | out: lpBuffer=0x2234ca8*, lpNumberOfBytesWritten=0x3be968*=0x2000, lpOverlapped=0x0) returned 1 [0055.324] CloseHandle (hObject=0x448) returned 1 [0055.324] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\FCiMOpjqGPmFU0.pptx", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\FCiMOpjqGPmFU0.pptx", lpFilePart=0x0) returned 0x33 [0055.324] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\FCiMOpjqGPmFU0.pptx.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\FCiMOpjqGPmFU0.pptx.xuy", lpFilePart=0x0) returned 0x37 [0055.324] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0055.324] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\FCiMOpjqGPmFU0.pptx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\fcimopjqgpmfu0.pptx"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b1293d0, ftCreationTime.dwHighDateTime=0x1d4148f, ftLastAccessTime.dwLowDateTime=0x13ad4a0, ftLastAccessTime.dwHighDateTime=0x1d472ca, ftLastWriteTime.dwLowDateTime=0xcd1b4ef, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xf77d)) returned 1 [0055.324] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0055.325] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\FCiMOpjqGPmFU0.pptx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\fcimopjqgpmfu0.pptx"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\FCiMOpjqGPmFU0.pptx.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\fcimopjqgpmfu0.pptx.xuy")) returned 1 [0055.325] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Fh0-0-tlk.ods", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Fh0-0-tlk.ods", lpFilePart=0x0) returned 0x2d [0055.325] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0055.325] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Fh0-0-tlk.ods" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\fh0-0-tlk.ods"), fInfoLevelId=0x0, lpFileInformation=0x22b3220 | out: lpFileInformation=0x22b3220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34055a60, ftCreationTime.dwHighDateTime=0x1d45d06, ftLastAccessTime.dwLowDateTime=0xa97a31f0, ftLastAccessTime.dwHighDateTime=0x1d46461, ftLastWriteTime.dwLowDateTime=0xa97a31f0, ftLastWriteTime.dwHighDateTime=0x1d46461, nFileSizeHigh=0x0, nFileSizeLow=0x18f39)) returned 1 [0055.326] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0055.326] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Fh0-0-tlk.ods", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Fh0-0-tlk.ods", lpFilePart=0x0) returned 0x2d [0055.326] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0055.326] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Fh0-0-tlk.ods" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\fh0-0-tlk.ods"), fInfoLevelId=0x0, lpFileInformation=0x22b3338 | out: lpFileInformation=0x22b3338*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34055a60, ftCreationTime.dwHighDateTime=0x1d45d06, ftLastAccessTime.dwLowDateTime=0xa97a31f0, ftLastAccessTime.dwHighDateTime=0x1d46461, ftLastWriteTime.dwLowDateTime=0xa97a31f0, ftLastWriteTime.dwHighDateTime=0x1d46461, nFileSizeHigh=0x0, nFileSizeLow=0x18f39)) returned 1 [0055.326] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0055.326] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Fh0-0-tlk.ods", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Fh0-0-tlk.ods", lpFilePart=0x0) returned 0x2d [0055.326] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0055.326] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Fh0-0-tlk.ods" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\fh0-0-tlk.ods"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0055.326] GetFileType (hFile=0x448) returned 0x1 [0055.326] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0055.326] GetFileType (hFile=0x448) returned 0x1 [0055.326] ReadFile (in: hFile=0x448, lpBuffer=0x22b5698, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be8b8, lpOverlapped=0x0 | out: lpBuffer=0x22b5698*, lpNumberOfBytesRead=0x3be8b8*=0x1000, lpOverlapped=0x0) returned 1 [0055.336] CloseHandle (hObject=0x448) returned 1 [0055.336] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Fh0-0-tlk.ods", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Fh0-0-tlk.ods", lpFilePart=0x0) returned 0x2d [0055.336] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0055.336] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Fh0-0-tlk.ods" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\fh0-0-tlk.ods"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0055.336] GetFileType (hFile=0x448) returned 0x1 [0055.336] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0055.337] GetFileType (hFile=0x448) returned 0x1 [0055.337] WriteFile (in: hFile=0x448, lpBuffer=0x22b3430*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be968, lpOverlapped=0x0 | out: lpBuffer=0x22b3430*, lpNumberOfBytesWritten=0x3be968*=0x2000, lpOverlapped=0x0) returned 1 [0055.337] CloseHandle (hObject=0x448) returned 1 [0055.337] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Fh0-0-tlk.ods", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Fh0-0-tlk.ods", lpFilePart=0x0) returned 0x2d [0055.337] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Fh0-0-tlk.ods.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Fh0-0-tlk.ods.xuy", lpFilePart=0x0) returned 0x31 [0055.337] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0055.337] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Fh0-0-tlk.ods" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\fh0-0-tlk.ods"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34055a60, ftCreationTime.dwHighDateTime=0x1d45d06, ftLastAccessTime.dwLowDateTime=0xa97a31f0, ftLastAccessTime.dwHighDateTime=0x1d46461, ftLastWriteTime.dwLowDateTime=0xcd4169f, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x18f39)) returned 1 [0055.337] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0055.337] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Fh0-0-tlk.ods" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\fh0-0-tlk.ods"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Fh0-0-tlk.ods.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\fh0-0-tlk.ods.xuy")) returned 1 [0055.337] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Gat4ii3taiw.pptx", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Gat4ii3taiw.pptx", lpFilePart=0x0) returned 0x30 [0055.338] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0055.338] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Gat4ii3taiw.pptx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\gat4ii3taiw.pptx"), fInfoLevelId=0x0, lpFileInformation=0x2331970 | out: lpFileInformation=0x2331970*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x828a8820, ftCreationTime.dwHighDateTime=0x1d46c99, ftLastAccessTime.dwLowDateTime=0xb0bd2e00, ftLastAccessTime.dwHighDateTime=0x1d43f62, ftLastWriteTime.dwLowDateTime=0xb0bd2e00, ftLastWriteTime.dwHighDateTime=0x1d43f62, nFileSizeHigh=0x0, nFileSizeLow=0x8876)) returned 1 [0055.338] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0055.338] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Gat4ii3taiw.pptx", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Gat4ii3taiw.pptx", lpFilePart=0x0) returned 0x30 [0055.338] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0055.338] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Gat4ii3taiw.pptx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\gat4ii3taiw.pptx"), fInfoLevelId=0x0, lpFileInformation=0x2331a98 | out: lpFileInformation=0x2331a98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x828a8820, ftCreationTime.dwHighDateTime=0x1d46c99, ftLastAccessTime.dwLowDateTime=0xb0bd2e00, ftLastAccessTime.dwHighDateTime=0x1d43f62, ftLastWriteTime.dwLowDateTime=0xb0bd2e00, ftLastWriteTime.dwHighDateTime=0x1d43f62, nFileSizeHigh=0x0, nFileSizeLow=0x8876)) returned 1 [0055.338] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0055.338] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Gat4ii3taiw.pptx", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Gat4ii3taiw.pptx", lpFilePart=0x0) returned 0x30 [0055.338] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0055.338] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Gat4ii3taiw.pptx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\gat4ii3taiw.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0055.338] GetFileType (hFile=0x448) returned 0x1 [0055.338] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0055.338] GetFileType (hFile=0x448) returned 0x1 [0055.338] ReadFile (in: hFile=0x448, lpBuffer=0x2333e18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be8b8, lpOverlapped=0x0 | out: lpBuffer=0x2333e18*, lpNumberOfBytesRead=0x3be8b8*=0x1000, lpOverlapped=0x0) returned 1 [0055.377] CloseHandle (hObject=0x448) returned 1 [0055.377] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Gat4ii3taiw.pptx", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Gat4ii3taiw.pptx", lpFilePart=0x0) returned 0x30 [0055.378] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0055.378] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Gat4ii3taiw.pptx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\gat4ii3taiw.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0055.378] GetFileType (hFile=0x448) returned 0x1 [0055.378] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0055.378] GetFileType (hFile=0x448) returned 0x1 [0055.378] WriteFile (in: hFile=0x448, lpBuffer=0x2155728*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be968, lpOverlapped=0x0 | out: lpBuffer=0x2155728*, lpNumberOfBytesWritten=0x3be968*=0x2000, lpOverlapped=0x0) returned 1 [0055.378] CloseHandle (hObject=0x448) returned 1 [0055.378] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Gat4ii3taiw.pptx", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Gat4ii3taiw.pptx", lpFilePart=0x0) returned 0x30 [0055.378] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Gat4ii3taiw.pptx.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Gat4ii3taiw.pptx.xuy", lpFilePart=0x0) returned 0x34 [0055.378] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0055.378] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Gat4ii3taiw.pptx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\gat4ii3taiw.pptx"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x828a8820, ftCreationTime.dwHighDateTime=0x1d46c99, ftLastAccessTime.dwLowDateTime=0xb0bd2e00, ftLastAccessTime.dwHighDateTime=0x1d43f62, ftLastWriteTime.dwLowDateTime=0xcdb4230, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x8876)) returned 1 [0055.379] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0055.379] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Gat4ii3taiw.pptx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\gat4ii3taiw.pptx"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Gat4ii3taiw.pptx.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\gat4ii3taiw.pptx.xuy")) returned 1 [0055.379] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Gqr Olni3uCq.docx", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Gqr Olni3uCq.docx", lpFilePart=0x0) returned 0x31 [0055.379] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0055.379] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Gqr Olni3uCq.docx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\gqr olni3ucq.docx"), fInfoLevelId=0x0, lpFileInformation=0x21afff8 | out: lpFileInformation=0x21afff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb94d4660, ftCreationTime.dwHighDateTime=0x1d42f52, ftLastAccessTime.dwLowDateTime=0x76542ad0, ftLastAccessTime.dwHighDateTime=0x1d42035, ftLastWriteTime.dwLowDateTime=0x76542ad0, ftLastWriteTime.dwHighDateTime=0x1d42035, nFileSizeHigh=0x0, nFileSizeLow=0x81fc)) returned 1 [0055.379] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0055.379] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Gqr Olni3uCq.docx", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Gqr Olni3uCq.docx", lpFilePart=0x0) returned 0x31 [0055.379] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0055.379] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Gqr Olni3uCq.docx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\gqr olni3ucq.docx"), fInfoLevelId=0x0, lpFileInformation=0x21b0120 | out: lpFileInformation=0x21b0120*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb94d4660, ftCreationTime.dwHighDateTime=0x1d42f52, ftLastAccessTime.dwLowDateTime=0x76542ad0, ftLastAccessTime.dwHighDateTime=0x1d42035, ftLastWriteTime.dwLowDateTime=0x76542ad0, ftLastWriteTime.dwHighDateTime=0x1d42035, nFileSizeHigh=0x0, nFileSizeLow=0x81fc)) returned 1 [0055.379] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0055.380] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Gqr Olni3uCq.docx", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Gqr Olni3uCq.docx", lpFilePart=0x0) returned 0x31 [0055.380] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0055.380] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Gqr Olni3uCq.docx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\gqr olni3ucq.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0055.380] GetFileType (hFile=0x448) returned 0x1 [0055.380] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0055.380] GetFileType (hFile=0x448) returned 0x1 [0055.380] ReadFile (in: hFile=0x448, lpBuffer=0x21b24a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be8b8, lpOverlapped=0x0 | out: lpBuffer=0x21b24a0*, lpNumberOfBytesRead=0x3be8b8*=0x1000, lpOverlapped=0x0) returned 1 [0055.390] CloseHandle (hObject=0x448) returned 1 [0055.390] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Gqr Olni3uCq.docx", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Gqr Olni3uCq.docx", lpFilePart=0x0) returned 0x31 [0055.390] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0055.390] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Gqr Olni3uCq.docx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\gqr olni3ucq.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0055.391] GetFileType (hFile=0x448) returned 0x1 [0055.391] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0055.391] GetFileType (hFile=0x448) returned 0x1 [0055.391] WriteFile (in: hFile=0x448, lpBuffer=0x21b0228*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be968, lpOverlapped=0x0 | out: lpBuffer=0x21b0228*, lpNumberOfBytesWritten=0x3be968*=0x2000, lpOverlapped=0x0) returned 1 [0055.391] CloseHandle (hObject=0x448) returned 1 [0055.391] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Gqr Olni3uCq.docx", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Gqr Olni3uCq.docx", lpFilePart=0x0) returned 0x31 [0055.391] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Gqr Olni3uCq.docx.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Gqr Olni3uCq.docx.xuy", lpFilePart=0x0) returned 0x35 [0055.391] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0055.391] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Gqr Olni3uCq.docx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\gqr olni3ucq.docx"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb94d4660, ftCreationTime.dwHighDateTime=0x1d42f52, ftLastAccessTime.dwLowDateTime=0x76542ad0, ftLastAccessTime.dwHighDateTime=0x1d42035, ftLastWriteTime.dwLowDateTime=0xcdda1d4, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x81fc)) returned 1 [0055.391] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0055.391] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Gqr Olni3uCq.docx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\gqr olni3ucq.docx"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Gqr Olni3uCq.docx.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\gqr olni3ucq.docx.xuy")) returned 1 [0055.392] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\NuBo6HPNg.docx", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\NuBo6HPNg.docx", lpFilePart=0x0) returned 0x2e [0055.392] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0055.392] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\NuBo6HPNg.docx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\nubo6hpng.docx"), fInfoLevelId=0x0, lpFileInformation=0x222e7a0 | out: lpFileInformation=0x222e7a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe402ff40, ftCreationTime.dwHighDateTime=0x1d41aed, ftLastAccessTime.dwLowDateTime=0x5e8a42d0, ftLastAccessTime.dwHighDateTime=0x1d437d8, ftLastWriteTime.dwLowDateTime=0x5e8a42d0, ftLastWriteTime.dwHighDateTime=0x1d437d8, nFileSizeHigh=0x0, nFileSizeLow=0xb0c1)) returned 1 [0055.392] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0055.392] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\NuBo6HPNg.docx", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\NuBo6HPNg.docx", lpFilePart=0x0) returned 0x2e [0055.392] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0055.392] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\NuBo6HPNg.docx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\nubo6hpng.docx"), fInfoLevelId=0x0, lpFileInformation=0x222e8b8 | out: lpFileInformation=0x222e8b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe402ff40, ftCreationTime.dwHighDateTime=0x1d41aed, ftLastAccessTime.dwLowDateTime=0x5e8a42d0, ftLastAccessTime.dwHighDateTime=0x1d437d8, ftLastWriteTime.dwLowDateTime=0x5e8a42d0, ftLastWriteTime.dwHighDateTime=0x1d437d8, nFileSizeHigh=0x0, nFileSizeLow=0xb0c1)) returned 1 [0055.392] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0055.392] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\NuBo6HPNg.docx", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\NuBo6HPNg.docx", lpFilePart=0x0) returned 0x2e [0055.392] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0055.392] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\NuBo6HPNg.docx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\nubo6hpng.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0055.392] GetFileType (hFile=0x448) returned 0x1 [0055.392] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0055.393] GetFileType (hFile=0x448) returned 0x1 [0055.393] ReadFile (in: hFile=0x448, lpBuffer=0x2230c18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be8b8, lpOverlapped=0x0 | out: lpBuffer=0x2230c18*, lpNumberOfBytesRead=0x3be8b8*=0x1000, lpOverlapped=0x0) returned 1 [0055.402] CloseHandle (hObject=0x448) returned 1 [0055.402] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\NuBo6HPNg.docx", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\NuBo6HPNg.docx", lpFilePart=0x0) returned 0x2e [0055.402] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0055.403] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\NuBo6HPNg.docx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\nubo6hpng.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0055.403] GetFileType (hFile=0x448) returned 0x1 [0055.403] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0055.403] GetFileType (hFile=0x448) returned 0x1 [0055.403] WriteFile (in: hFile=0x448, lpBuffer=0x222e9b0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be968, lpOverlapped=0x0 | out: lpBuffer=0x222e9b0*, lpNumberOfBytesWritten=0x3be968*=0x2000, lpOverlapped=0x0) returned 1 [0055.403] CloseHandle (hObject=0x448) returned 1 [0055.403] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\NuBo6HPNg.docx", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\NuBo6HPNg.docx", lpFilePart=0x0) returned 0x2e [0055.403] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\NuBo6HPNg.docx.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\NuBo6HPNg.docx.xuy", lpFilePart=0x0) returned 0x32 [0055.403] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0055.403] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\NuBo6HPNg.docx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\nubo6hpng.docx"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe402ff40, ftCreationTime.dwHighDateTime=0x1d41aed, ftLastAccessTime.dwLowDateTime=0x5e8a42d0, ftLastAccessTime.dwHighDateTime=0x1d437d8, ftLastWriteTime.dwLowDateTime=0xce0040e, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xb0c1)) returned 1 [0055.403] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0055.404] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\NuBo6HPNg.docx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\nubo6hpng.docx"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\NuBo6HPNg.docx.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\nubo6hpng.docx.xuy")) returned 1 [0055.404] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\oSqIZuo5iz2iuOqFR.pps", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\oSqIZuo5iz2iuOqFR.pps", lpFilePart=0x0) returned 0x35 [0055.404] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0055.404] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\oSqIZuo5iz2iuOqFR.pps" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\osqizuo5iz2iuoqfr.pps"), fInfoLevelId=0x0, lpFileInformation=0x22acef0 | out: lpFileInformation=0x22acef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x804fd840, ftCreationTime.dwHighDateTime=0x1d4583e, ftLastAccessTime.dwLowDateTime=0x2d1a5120, ftLastAccessTime.dwHighDateTime=0x1d463ef, ftLastWriteTime.dwLowDateTime=0x2d1a5120, ftLastWriteTime.dwHighDateTime=0x1d463ef, nFileSizeHigh=0x0, nFileSizeLow=0x12c43)) returned 1 [0055.404] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0055.404] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\oSqIZuo5iz2iuOqFR.pps", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\oSqIZuo5iz2iuOqFR.pps", lpFilePart=0x0) returned 0x35 [0055.404] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0055.404] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\oSqIZuo5iz2iuOqFR.pps" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\osqizuo5iz2iuoqfr.pps"), fInfoLevelId=0x0, lpFileInformation=0x22ad028 | out: lpFileInformation=0x22ad028*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x804fd840, ftCreationTime.dwHighDateTime=0x1d4583e, ftLastAccessTime.dwLowDateTime=0x2d1a5120, ftLastAccessTime.dwHighDateTime=0x1d463ef, ftLastWriteTime.dwLowDateTime=0x2d1a5120, ftLastWriteTime.dwHighDateTime=0x1d463ef, nFileSizeHigh=0x0, nFileSizeLow=0x12c43)) returned 1 [0055.404] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0055.404] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\oSqIZuo5iz2iuOqFR.pps", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\oSqIZuo5iz2iuOqFR.pps", lpFilePart=0x0) returned 0x35 [0055.404] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0055.404] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\oSqIZuo5iz2iuOqFR.pps" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\osqizuo5iz2iuoqfr.pps"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0055.405] GetFileType (hFile=0x448) returned 0x1 [0055.405] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0055.405] GetFileType (hFile=0x448) returned 0x1 [0055.405] ReadFile (in: hFile=0x448, lpBuffer=0x22af3c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be8b8, lpOverlapped=0x0 | out: lpBuffer=0x22af3c8*, lpNumberOfBytesRead=0x3be8b8*=0x1000, lpOverlapped=0x0) returned 1 [0055.415] CloseHandle (hObject=0x448) returned 1 [0055.415] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\oSqIZuo5iz2iuOqFR.pps", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\oSqIZuo5iz2iuOqFR.pps", lpFilePart=0x0) returned 0x35 [0055.415] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0055.415] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\oSqIZuo5iz2iuOqFR.pps" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\osqizuo5iz2iuoqfr.pps"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0055.415] GetFileType (hFile=0x448) returned 0x1 [0055.415] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0055.416] GetFileType (hFile=0x448) returned 0x1 [0055.416] WriteFile (in: hFile=0x448, lpBuffer=0x22ad140*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be968, lpOverlapped=0x0 | out: lpBuffer=0x22ad140*, lpNumberOfBytesWritten=0x3be968*=0x2000, lpOverlapped=0x0) returned 1 [0055.416] CloseHandle (hObject=0x448) returned 1 [0055.416] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\oSqIZuo5iz2iuOqFR.pps", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\oSqIZuo5iz2iuOqFR.pps", lpFilePart=0x0) returned 0x35 [0055.416] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\oSqIZuo5iz2iuOqFR.pps.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\oSqIZuo5iz2iuOqFR.pps.xuy", lpFilePart=0x0) returned 0x39 [0055.416] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0055.416] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\oSqIZuo5iz2iuOqFR.pps" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\osqizuo5iz2iuoqfr.pps"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x804fd840, ftCreationTime.dwHighDateTime=0x1d4583e, ftLastAccessTime.dwLowDateTime=0x2d1a5120, ftLastAccessTime.dwHighDateTime=0x1d463ef, ftLastWriteTime.dwLowDateTime=0xce0040e, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x12c43)) returned 1 [0055.416] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0055.416] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\oSqIZuo5iz2iuOqFR.pps" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\osqizuo5iz2iuoqfr.pps"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\oSqIZuo5iz2iuOqFR.pps.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\osqizuo5iz2iuoqfr.pps.xuy")) returned 1 [0055.417] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\pptfNpe1BfneOLa.xlsx", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\pptfNpe1BfneOLa.xlsx", lpFilePart=0x0) returned 0x34 [0055.417] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0055.417] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\pptfNpe1BfneOLa.xlsx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\pptfnpe1bfneola.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x232b6f0 | out: lpFileInformation=0x232b6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a8e9a70, ftCreationTime.dwHighDateTime=0x1d474d6, ftLastAccessTime.dwLowDateTime=0x62209370, ftLastAccessTime.dwHighDateTime=0x1d3f6b2, ftLastWriteTime.dwLowDateTime=0x62209370, ftLastWriteTime.dwHighDateTime=0x1d3f6b2, nFileSizeHigh=0x0, nFileSizeLow=0x7f3d)) returned 1 [0055.417] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0055.417] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\pptfNpe1BfneOLa.xlsx", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\pptfNpe1BfneOLa.xlsx", lpFilePart=0x0) returned 0x34 [0055.417] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0055.417] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\pptfNpe1BfneOLa.xlsx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\pptfnpe1bfneola.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x232b828 | out: lpFileInformation=0x232b828*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a8e9a70, ftCreationTime.dwHighDateTime=0x1d474d6, ftLastAccessTime.dwLowDateTime=0x62209370, ftLastAccessTime.dwHighDateTime=0x1d3f6b2, ftLastWriteTime.dwLowDateTime=0x62209370, ftLastWriteTime.dwHighDateTime=0x1d3f6b2, nFileSizeHigh=0x0, nFileSizeLow=0x7f3d)) returned 1 [0055.417] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0055.417] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\pptfNpe1BfneOLa.xlsx", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\pptfNpe1BfneOLa.xlsx", lpFilePart=0x0) returned 0x34 [0055.417] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0055.417] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\pptfNpe1BfneOLa.xlsx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\pptfnpe1bfneola.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0055.417] GetFileType (hFile=0x448) returned 0x1 [0055.417] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0055.417] GetFileType (hFile=0x448) returned 0x1 [0055.417] ReadFile (in: hFile=0x448, lpBuffer=0x232dbc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be8b8, lpOverlapped=0x0 | out: lpBuffer=0x232dbc8*, lpNumberOfBytesRead=0x3be8b8*=0x1000, lpOverlapped=0x0) returned 1 [0055.473] CloseHandle (hObject=0x448) returned 1 [0055.473] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\pptfNpe1BfneOLa.xlsx", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\pptfNpe1BfneOLa.xlsx", lpFilePart=0x0) returned 0x34 [0055.474] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0055.474] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\pptfNpe1BfneOLa.xlsx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\pptfnpe1bfneola.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0055.474] GetFileType (hFile=0x448) returned 0x1 [0055.474] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0055.474] GetFileType (hFile=0x448) returned 0x1 [0055.474] WriteFile (in: hFile=0x448, lpBuffer=0x2155728*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be968, lpOverlapped=0x0 | out: lpBuffer=0x2155728*, lpNumberOfBytesWritten=0x3be968*=0x2000, lpOverlapped=0x0) returned 1 [0055.475] CloseHandle (hObject=0x448) returned 1 [0055.475] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\pptfNpe1BfneOLa.xlsx", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\pptfNpe1BfneOLa.xlsx", lpFilePart=0x0) returned 0x34 [0055.475] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\pptfNpe1BfneOLa.xlsx.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\pptfNpe1BfneOLa.xlsx.xuy", lpFilePart=0x0) returned 0x38 [0055.475] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0055.475] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\pptfNpe1BfneOLa.xlsx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\pptfnpe1bfneola.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a8e9a70, ftCreationTime.dwHighDateTime=0x1d474d6, ftLastAccessTime.dwLowDateTime=0x62209370, ftLastAccessTime.dwHighDateTime=0x1d3f6b2, ftLastWriteTime.dwLowDateTime=0xce98cd6, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x7f3d)) returned 1 [0055.475] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0055.475] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\pptfNpe1BfneOLa.xlsx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\pptfnpe1bfneola.xlsx"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\pptfNpe1BfneOLa.xlsx.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\pptfnpe1bfneola.xlsx.xuy")) returned 1 [0055.476] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\tdVdq4X0JYdL.pptx", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\tdVdq4X0JYdL.pptx", lpFilePart=0x0) returned 0x31 [0055.476] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0055.476] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\tdVdq4X0JYdL.pptx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\tdvdq4x0jydl.pptx"), fInfoLevelId=0x0, lpFileInformation=0x21a9ec0 | out: lpFileInformation=0x21a9ec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13068af0, ftCreationTime.dwHighDateTime=0x1d4141d, ftLastAccessTime.dwLowDateTime=0xb5678c0, ftLastAccessTime.dwHighDateTime=0x1d43e4c, ftLastWriteTime.dwLowDateTime=0xb5678c0, ftLastWriteTime.dwHighDateTime=0x1d43e4c, nFileSizeHigh=0x0, nFileSizeLow=0x2edb)) returned 1 [0055.476] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0055.476] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\tdVdq4X0JYdL.pptx", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\tdVdq4X0JYdL.pptx", lpFilePart=0x0) returned 0x31 [0055.476] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0055.476] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\tdVdq4X0JYdL.pptx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\tdvdq4x0jydl.pptx"), fInfoLevelId=0x0, lpFileInformation=0x21a9fe8 | out: lpFileInformation=0x21a9fe8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13068af0, ftCreationTime.dwHighDateTime=0x1d4141d, ftLastAccessTime.dwLowDateTime=0xb5678c0, ftLastAccessTime.dwHighDateTime=0x1d43e4c, ftLastWriteTime.dwLowDateTime=0xb5678c0, ftLastWriteTime.dwHighDateTime=0x1d43e4c, nFileSizeHigh=0x0, nFileSizeLow=0x2edb)) returned 1 [0055.476] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0055.476] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\tdVdq4X0JYdL.pptx", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\tdVdq4X0JYdL.pptx", lpFilePart=0x0) returned 0x31 [0055.476] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0055.476] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\tdVdq4X0JYdL.pptx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\tdvdq4x0jydl.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0055.476] GetFileType (hFile=0x448) returned 0x1 [0055.476] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0055.476] GetFileType (hFile=0x448) returned 0x1 [0055.477] ReadFile (in: hFile=0x448, lpBuffer=0x21ac368, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be8b8, lpOverlapped=0x0 | out: lpBuffer=0x21ac368*, lpNumberOfBytesRead=0x3be8b8*=0x1000, lpOverlapped=0x0) returned 1 [0055.487] CloseHandle (hObject=0x448) returned 1 [0055.487] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\tdVdq4X0JYdL.pptx", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\tdVdq4X0JYdL.pptx", lpFilePart=0x0) returned 0x31 [0055.487] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0055.487] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\tdVdq4X0JYdL.pptx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\tdvdq4x0jydl.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0055.487] GetFileType (hFile=0x448) returned 0x1 [0055.487] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0055.487] GetFileType (hFile=0x448) returned 0x1 [0055.487] WriteFile (in: hFile=0x448, lpBuffer=0x21aa0f0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be968, lpOverlapped=0x0 | out: lpBuffer=0x21aa0f0*, lpNumberOfBytesWritten=0x3be968*=0x2000, lpOverlapped=0x0) returned 1 [0055.487] CloseHandle (hObject=0x448) returned 1 [0055.487] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\tdVdq4X0JYdL.pptx", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\tdVdq4X0JYdL.pptx", lpFilePart=0x0) returned 0x31 [0055.487] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\tdVdq4X0JYdL.pptx.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\tdVdq4X0JYdL.pptx.xuy", lpFilePart=0x0) returned 0x35 [0055.488] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0055.488] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\tdVdq4X0JYdL.pptx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\tdvdq4x0jydl.pptx"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13068af0, ftCreationTime.dwHighDateTime=0x1d4141d, ftLastAccessTime.dwLowDateTime=0xb5678c0, ftLastAccessTime.dwHighDateTime=0x1d43e4c, ftLastWriteTime.dwLowDateTime=0xcec1009, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2edb)) returned 1 [0055.488] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0055.488] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\tdVdq4X0JYdL.pptx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\tdvdq4x0jydl.pptx"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\tdVdq4X0JYdL.pptx.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\tdvdq4x0jydl.pptx.xuy")) returned 1 [0055.488] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Tjz3tMJZz8.docx", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Tjz3tMJZz8.docx", lpFilePart=0x0) returned 0x2f [0055.488] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0055.488] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Tjz3tMJZz8.docx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\tjz3tmjzz8.docx"), fInfoLevelId=0x0, lpFileInformation=0x2228668 | out: lpFileInformation=0x2228668*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ba89310, ftCreationTime.dwHighDateTime=0x1d46984, ftLastAccessTime.dwLowDateTime=0x5af780f0, ftLastAccessTime.dwHighDateTime=0x1d44161, ftLastWriteTime.dwLowDateTime=0x5af780f0, ftLastWriteTime.dwHighDateTime=0x1d44161, nFileSizeHigh=0x0, nFileSizeLow=0x17c1d)) returned 1 [0055.488] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0055.488] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Tjz3tMJZz8.docx", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Tjz3tMJZz8.docx", lpFilePart=0x0) returned 0x2f [0055.488] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0055.489] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Tjz3tMJZz8.docx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\tjz3tmjzz8.docx"), fInfoLevelId=0x0, lpFileInformation=0x2228780 | out: lpFileInformation=0x2228780*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ba89310, ftCreationTime.dwHighDateTime=0x1d46984, ftLastAccessTime.dwLowDateTime=0x5af780f0, ftLastAccessTime.dwHighDateTime=0x1d44161, ftLastWriteTime.dwLowDateTime=0x5af780f0, ftLastWriteTime.dwHighDateTime=0x1d44161, nFileSizeHigh=0x0, nFileSizeLow=0x17c1d)) returned 1 [0055.489] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0055.489] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Tjz3tMJZz8.docx", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Tjz3tMJZz8.docx", lpFilePart=0x0) returned 0x2f [0055.489] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0055.489] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Tjz3tMJZz8.docx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\tjz3tmjzz8.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0055.489] GetFileType (hFile=0x448) returned 0x1 [0055.489] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0055.489] GetFileType (hFile=0x448) returned 0x1 [0055.489] ReadFile (in: hFile=0x448, lpBuffer=0x222aae0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be8b8, lpOverlapped=0x0 | out: lpBuffer=0x222aae0*, lpNumberOfBytesRead=0x3be8b8*=0x1000, lpOverlapped=0x0) returned 1 [0055.499] CloseHandle (hObject=0x448) returned 1 [0055.500] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Tjz3tMJZz8.docx", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Tjz3tMJZz8.docx", lpFilePart=0x0) returned 0x2f [0055.500] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0055.500] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Tjz3tMJZz8.docx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\tjz3tmjzz8.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0055.500] GetFileType (hFile=0x448) returned 0x1 [0055.500] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0055.500] GetFileType (hFile=0x448) returned 0x1 [0055.500] WriteFile (in: hFile=0x448, lpBuffer=0x2228878*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be968, lpOverlapped=0x0 | out: lpBuffer=0x2228878*, lpNumberOfBytesWritten=0x3be968*=0x2000, lpOverlapped=0x0) returned 1 [0055.500] CloseHandle (hObject=0x448) returned 1 [0055.500] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Tjz3tMJZz8.docx", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Tjz3tMJZz8.docx", lpFilePart=0x0) returned 0x2f [0055.500] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Tjz3tMJZz8.docx.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Tjz3tMJZz8.docx.xuy", lpFilePart=0x0) returned 0x33 [0055.500] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0055.500] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Tjz3tMJZz8.docx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\tjz3tmjzz8.docx"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ba89310, ftCreationTime.dwHighDateTime=0x1d46984, ftLastAccessTime.dwLowDateTime=0x5af780f0, ftLastAccessTime.dwHighDateTime=0x1d44161, ftLastWriteTime.dwLowDateTime=0xcee5200, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x17c1d)) returned 1 [0055.500] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0055.500] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Tjz3tMJZz8.docx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\tjz3tmjzz8.docx"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Tjz3tMJZz8.docx.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\tjz3tmjzz8.docx.xuy")) returned 1 [0055.501] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\VVjOWuzx8w8tLEluosA.pptx", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\VVjOWuzx8w8tLEluosA.pptx", lpFilePart=0x0) returned 0x38 [0055.501] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0055.501] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\VVjOWuzx8w8tLEluosA.pptx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\vvjowuzx8w8tleluosa.pptx"), fInfoLevelId=0x0, lpFileInformation=0x22a6db8 | out: lpFileInformation=0x22a6db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a5b5960, ftCreationTime.dwHighDateTime=0x1d4196b, ftLastAccessTime.dwLowDateTime=0x3a3f3540, ftLastAccessTime.dwHighDateTime=0x1d41986, ftLastWriteTime.dwLowDateTime=0x3a3f3540, ftLastWriteTime.dwHighDateTime=0x1d41986, nFileSizeHigh=0x0, nFileSizeLow=0xa393)) returned 1 [0055.501] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0055.501] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\VVjOWuzx8w8tLEluosA.pptx", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\VVjOWuzx8w8tLEluosA.pptx", lpFilePart=0x0) returned 0x38 [0055.501] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0055.501] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\VVjOWuzx8w8tLEluosA.pptx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\vvjowuzx8w8tleluosa.pptx"), fInfoLevelId=0x0, lpFileInformation=0x22a6f00 | out: lpFileInformation=0x22a6f00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a5b5960, ftCreationTime.dwHighDateTime=0x1d4196b, ftLastAccessTime.dwLowDateTime=0x3a3f3540, ftLastAccessTime.dwHighDateTime=0x1d41986, ftLastWriteTime.dwLowDateTime=0x3a3f3540, ftLastWriteTime.dwHighDateTime=0x1d41986, nFileSizeHigh=0x0, nFileSizeLow=0xa393)) returned 1 [0055.501] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0055.501] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\VVjOWuzx8w8tLEluosA.pptx", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\VVjOWuzx8w8tLEluosA.pptx", lpFilePart=0x0) returned 0x38 [0055.501] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0055.501] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\VVjOWuzx8w8tLEluosA.pptx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\vvjowuzx8w8tleluosa.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0055.502] GetFileType (hFile=0x448) returned 0x1 [0055.502] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0055.502] GetFileType (hFile=0x448) returned 0x1 [0055.502] ReadFile (in: hFile=0x448, lpBuffer=0x22a92c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be8b8, lpOverlapped=0x0 | out: lpBuffer=0x22a92c0*, lpNumberOfBytesRead=0x3be8b8*=0x1000, lpOverlapped=0x0) returned 1 [0055.511] CloseHandle (hObject=0x448) returned 1 [0055.512] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\VVjOWuzx8w8tLEluosA.pptx", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\VVjOWuzx8w8tLEluosA.pptx", lpFilePart=0x0) returned 0x38 [0055.512] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0055.512] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\VVjOWuzx8w8tLEluosA.pptx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\vvjowuzx8w8tleluosa.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0055.512] GetFileType (hFile=0x448) returned 0x1 [0055.512] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0055.512] GetFileType (hFile=0x448) returned 0x1 [0055.512] WriteFile (in: hFile=0x448, lpBuffer=0x22a7028*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be968, lpOverlapped=0x0 | out: lpBuffer=0x22a7028*, lpNumberOfBytesWritten=0x3be968*=0x2000, lpOverlapped=0x0) returned 1 [0055.518] CloseHandle (hObject=0x448) returned 1 [0055.519] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\VVjOWuzx8w8tLEluosA.pptx", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\VVjOWuzx8w8tLEluosA.pptx", lpFilePart=0x0) returned 0x38 [0055.519] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\VVjOWuzx8w8tLEluosA.pptx.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\VVjOWuzx8w8tLEluosA.pptx.xuy", lpFilePart=0x0) returned 0x3c [0055.519] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0055.519] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\VVjOWuzx8w8tLEluosA.pptx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\vvjowuzx8w8tleluosa.pptx"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a5b5960, ftCreationTime.dwHighDateTime=0x1d4196b, ftLastAccessTime.dwLowDateTime=0x3a3f3540, ftLastAccessTime.dwHighDateTime=0x1d41986, ftLastWriteTime.dwLowDateTime=0xcf0b37c, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xa393)) returned 1 [0055.519] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0055.519] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\VVjOWuzx8w8tLEluosA.pptx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\vvjowuzx8w8tleluosa.pptx"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\VVjOWuzx8w8tLEluosA.pptx.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\vvjowuzx8w8tleluosa.pptx.xuy")) returned 1 [0055.520] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\wk7e2LGGFK8X0Z.docx", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\wk7e2LGGFK8X0Z.docx", lpFilePart=0x0) returned 0x33 [0055.520] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0055.520] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\wk7e2LGGFK8X0Z.docx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\wk7e2lggfk8x0z.docx"), fInfoLevelId=0x0, lpFileInformation=0x2325610 | out: lpFileInformation=0x2325610*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3225f10, ftCreationTime.dwHighDateTime=0x1d43337, ftLastAccessTime.dwLowDateTime=0x7cdb9340, ftLastAccessTime.dwHighDateTime=0x1d458a5, ftLastWriteTime.dwLowDateTime=0x7cdb9340, ftLastWriteTime.dwHighDateTime=0x1d458a5, nFileSizeHigh=0x0, nFileSizeLow=0x8722)) returned 1 [0055.520] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0055.520] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\wk7e2LGGFK8X0Z.docx", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\wk7e2LGGFK8X0Z.docx", lpFilePart=0x0) returned 0x33 [0055.520] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0055.520] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\wk7e2LGGFK8X0Z.docx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\wk7e2lggfk8x0z.docx"), fInfoLevelId=0x0, lpFileInformation=0x2325738 | out: lpFileInformation=0x2325738*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3225f10, ftCreationTime.dwHighDateTime=0x1d43337, ftLastAccessTime.dwLowDateTime=0x7cdb9340, ftLastAccessTime.dwHighDateTime=0x1d458a5, ftLastWriteTime.dwLowDateTime=0x7cdb9340, ftLastWriteTime.dwHighDateTime=0x1d458a5, nFileSizeHigh=0x0, nFileSizeLow=0x8722)) returned 1 [0055.520] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0055.520] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\wk7e2LGGFK8X0Z.docx", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\wk7e2LGGFK8X0Z.docx", lpFilePart=0x0) returned 0x33 [0055.520] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0055.520] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\wk7e2LGGFK8X0Z.docx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\wk7e2lggfk8x0z.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0055.520] GetFileType (hFile=0x448) returned 0x1 [0055.520] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0055.520] GetFileType (hFile=0x448) returned 0x1 [0055.520] ReadFile (in: hFile=0x448, lpBuffer=0x2327ab8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be8b8, lpOverlapped=0x0 | out: lpBuffer=0x2327ab8*, lpNumberOfBytesRead=0x3be8b8*=0x1000, lpOverlapped=0x0) returned 1 [0055.564] CloseHandle (hObject=0x448) returned 1 [0055.564] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\wk7e2LGGFK8X0Z.docx", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\wk7e2LGGFK8X0Z.docx", lpFilePart=0x0) returned 0x33 [0055.564] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0055.564] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\wk7e2LGGFK8X0Z.docx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\wk7e2lggfk8x0z.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0055.564] GetFileType (hFile=0x448) returned 0x1 [0055.564] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0055.564] GetFileType (hFile=0x448) returned 0x1 [0055.564] WriteFile (in: hFile=0x448, lpBuffer=0x2155728*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be968, lpOverlapped=0x0 | out: lpBuffer=0x2155728*, lpNumberOfBytesWritten=0x3be968*=0x2000, lpOverlapped=0x0) returned 1 [0055.564] CloseHandle (hObject=0x448) returned 1 [0055.564] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\wk7e2LGGFK8X0Z.docx", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\wk7e2LGGFK8X0Z.docx", lpFilePart=0x0) returned 0x33 [0055.565] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\wk7e2LGGFK8X0Z.docx.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\wk7e2LGGFK8X0Z.docx.xuy", lpFilePart=0x0) returned 0x37 [0055.565] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0055.565] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\wk7e2LGGFK8X0Z.docx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\wk7e2lggfk8x0z.docx"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3225f10, ftCreationTime.dwHighDateTime=0x1d43337, ftLastAccessTime.dwLowDateTime=0x7cdb9340, ftLastAccessTime.dwHighDateTime=0x1d458a5, ftLastWriteTime.dwLowDateTime=0xcf7dac0, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x8722)) returned 1 [0055.565] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0055.565] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\wk7e2LGGFK8X0Z.docx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\wk7e2lggfk8x0z.docx"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\wk7e2LGGFK8X0Z.docx.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\wk7e2lggfk8x0z.docx.xuy")) returned 1 [0055.565] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\YWlhp1_r1Xzl.pptx", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\YWlhp1_r1Xzl.pptx", lpFilePart=0x0) returned 0x31 [0055.565] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0055.565] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\YWlhp1_r1Xzl.pptx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ywlhp1_r1xzl.pptx"), fInfoLevelId=0x0, lpFileInformation=0x21a3d98 | out: lpFileInformation=0x21a3d98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa6d1a7a0, ftCreationTime.dwHighDateTime=0x1d44b7d, ftLastAccessTime.dwLowDateTime=0x1e59bed0, ftLastAccessTime.dwHighDateTime=0x1d42797, ftLastWriteTime.dwLowDateTime=0x1e59bed0, ftLastWriteTime.dwHighDateTime=0x1d42797, nFileSizeHigh=0x0, nFileSizeLow=0xa19d)) returned 1 [0055.566] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0055.566] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\YWlhp1_r1Xzl.pptx", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\YWlhp1_r1Xzl.pptx", lpFilePart=0x0) returned 0x31 [0055.566] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0055.566] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\YWlhp1_r1Xzl.pptx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ywlhp1_r1xzl.pptx"), fInfoLevelId=0x0, lpFileInformation=0x21a3ec0 | out: lpFileInformation=0x21a3ec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa6d1a7a0, ftCreationTime.dwHighDateTime=0x1d44b7d, ftLastAccessTime.dwLowDateTime=0x1e59bed0, ftLastAccessTime.dwHighDateTime=0x1d42797, ftLastWriteTime.dwLowDateTime=0x1e59bed0, ftLastWriteTime.dwHighDateTime=0x1d42797, nFileSizeHigh=0x0, nFileSizeLow=0xa19d)) returned 1 [0055.566] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0055.566] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\YWlhp1_r1Xzl.pptx", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\YWlhp1_r1Xzl.pptx", lpFilePart=0x0) returned 0x31 [0055.566] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0055.566] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\YWlhp1_r1Xzl.pptx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ywlhp1_r1xzl.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0055.566] GetFileType (hFile=0x448) returned 0x1 [0055.566] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0055.566] GetFileType (hFile=0x448) returned 0x1 [0055.566] ReadFile (in: hFile=0x448, lpBuffer=0x21a6240, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be8b8, lpOverlapped=0x0 | out: lpBuffer=0x21a6240*, lpNumberOfBytesRead=0x3be8b8*=0x1000, lpOverlapped=0x0) returned 1 [0055.583] CloseHandle (hObject=0x448) returned 1 [0055.583] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\YWlhp1_r1Xzl.pptx", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\YWlhp1_r1Xzl.pptx", lpFilePart=0x0) returned 0x31 [0055.583] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0055.583] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\YWlhp1_r1Xzl.pptx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ywlhp1_r1xzl.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0055.584] GetFileType (hFile=0x448) returned 0x1 [0055.584] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0055.584] GetFileType (hFile=0x448) returned 0x1 [0055.584] WriteFile (in: hFile=0x448, lpBuffer=0x21a3fc8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be968, lpOverlapped=0x0 | out: lpBuffer=0x21a3fc8*, lpNumberOfBytesWritten=0x3be968*=0x2000, lpOverlapped=0x0) returned 1 [0055.584] CloseHandle (hObject=0x448) returned 1 [0055.584] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\YWlhp1_r1Xzl.pptx", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\YWlhp1_r1Xzl.pptx", lpFilePart=0x0) returned 0x31 [0055.584] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\YWlhp1_r1Xzl.pptx.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\YWlhp1_r1Xzl.pptx.xuy", lpFilePart=0x0) returned 0x35 [0055.584] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0055.584] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\YWlhp1_r1Xzl.pptx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ywlhp1_r1xzl.pptx"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa6d1a7a0, ftCreationTime.dwHighDateTime=0x1d44b7d, ftLastAccessTime.dwLowDateTime=0x1e59bed0, ftLastAccessTime.dwHighDateTime=0x1d42797, ftLastWriteTime.dwLowDateTime=0xcfa3fae, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xa19d)) returned 1 [0055.584] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0055.584] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\YWlhp1_r1Xzl.pptx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ywlhp1_r1xzl.pptx"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\YWlhp1_r1Xzl.pptx.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\ywlhp1_r1xzl.pptx.xuy")) returned 1 [0055.585] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0055.585] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Music", nBufferLength=0x105, lpBuffer=0x3be3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Music", lpFilePart=0x0) returned 0x28 [0055.585] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Music\\", nBufferLength=0x105, lpBuffer=0x3be370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Music\\", lpFilePart=0x0) returned 0x29 [0055.585] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Music\\*", lpFindFileData=0x3be580 | out: lpFindFileData=0x3be580) returned 0xffffffffffffffff [0055.586] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be810) returned 1 [0055.646] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0055.647] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Pictures", nBufferLength=0x105, lpBuffer=0x3be3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Pictures", lpFilePart=0x0) returned 0x2b [0055.647] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Pictures\\", nBufferLength=0x105, lpBuffer=0x3be370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Pictures\\", lpFilePart=0x0) returned 0x2c [0055.647] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Pictures\\*", lpFindFileData=0x3be580 | out: lpFindFileData=0x3be580) returned 0xffffffffffffffff [0055.647] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be810) returned 1 [0055.649] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0055.649] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x3be3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Shapes", lpFilePart=0x0) returned 0x29 [0055.649] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Shapes\\", nBufferLength=0x105, lpBuffer=0x3be370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Shapes\\", lpFilePart=0x0) returned 0x2a [0055.649] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Shapes\\*", lpFindFileData=0x3be580 | out: lpFindFileData=0x3be580) returned 0x5d7df0 [0055.652] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0055.652] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0055.652] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0055.652] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0055.652] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 0 [0055.652] FindClose (in: hFindFile=0x5d7df0 | out: hFindFile=0x5d7df0) returned 1 [0055.653] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0055.653] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7f0) returned 1 [0055.653] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0055.653] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x3be3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Shapes", lpFilePart=0x0) returned 0x29 [0055.653] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Shapes\\", nBufferLength=0x105, lpBuffer=0x3be370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Shapes\\", lpFilePart=0x0) returned 0x2a [0055.653] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Shapes\\*", lpFindFileData=0x3be580 | out: lpFindFileData=0x3be580) returned 0x5d7370 [0055.653] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0055.653] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0055.654] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0055.654] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0055.654] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 0 [0055.654] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0055.654] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0055.654] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7f0) returned 1 [0055.654] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Shapes\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Shapes\\desktop.ini", lpFilePart=0x0) returned 0x35 [0055.654] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0055.654] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Shapes\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\my shapes\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x2225e00 | out: lpFileInformation=0x2225e00*(dwFileAttributes=0x2, ftCreationTime.dwLowDateTime=0x608b5c0f, ftCreationTime.dwHighDateTime=0x1d301d2, ftLastAccessTime.dwLowDateTime=0x608b5c0f, ftLastAccessTime.dwHighDateTime=0x1d301d2, ftLastWriteTime.dwLowDateTime=0x608b96b1, ftLastWriteTime.dwHighDateTime=0x1d301d2, nFileSizeHigh=0x0, nFileSizeLow=0xd8)) returned 1 [0055.654] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0055.654] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Shapes\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3be250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Shapes\\desktop.ini", lpFilePart=0x0) returned 0x35 [0055.654] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be730) returned 1 [0055.654] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Shapes\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\my shapes\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0055.655] GetFileType (hFile=0x448) returned 0x1 [0055.655] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0055.655] GetFileType (hFile=0x448) returned 0x1 [0055.655] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3be8c8 | out: lpFileSizeHigh=0x3be8c8*=0x0) returned 0xd8 [0055.655] ReadFile (in: hFile=0x448, lpBuffer=0x2226130, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be7f8, lpOverlapped=0x0 | out: lpBuffer=0x2226130*, lpNumberOfBytesRead=0x3be7f8*=0xd8, lpOverlapped=0x0) returned 1 [0055.655] CloseHandle (hObject=0x448) returned 1 [0055.695] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Shapes\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3be250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Shapes\\desktop.ini", lpFilePart=0x0) returned 0x35 [0055.695] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be730) returned 1 [0055.695] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Shapes\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\my shapes\\desktop.ini"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0055.696] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb1c0) returned 1 [0055.697] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Shapes\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3bbe40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Shapes\\desktop.ini", lpFilePart=0x0) returned 0x35 [0055.697] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc2e0) returned 1 [0055.697] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Shapes\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\my shapes\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x3bc3c0 | out: lpFileInformation=0x3bc3c0*(dwFileAttributes=0x2, ftCreationTime.dwLowDateTime=0x608b5c0f, ftCreationTime.dwHighDateTime=0x1d301d2, ftLastAccessTime.dwLowDateTime=0x608b5c0f, ftLastAccessTime.dwHighDateTime=0x1d301d2, ftLastWriteTime.dwLowDateTime=0x608b96b1, ftLastWriteTime.dwHighDateTime=0x1d301d2, nFileSizeHigh=0x0, nFileSizeLow=0xd8)) returned 1 [0055.697] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc2a0) returned 1 [0055.697] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Shapes\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3bbe60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Shapes\\desktop.ini", lpFilePart=0x0) returned 0x35 [0055.697] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc2e0) returned 1 [0055.697] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Shapes\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\my shapes\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x229dbb0 | out: lpFileInformation=0x229dbb0*(dwFileAttributes=0x2, ftCreationTime.dwLowDateTime=0x608b5c0f, ftCreationTime.dwHighDateTime=0x1d301d2, ftLastAccessTime.dwLowDateTime=0x608b5c0f, ftLastAccessTime.dwHighDateTime=0x1d301d2, ftLastWriteTime.dwLowDateTime=0x608b96b1, ftLastWriteTime.dwHighDateTime=0x1d301d2, nFileSizeHigh=0x0, nFileSizeLow=0xd8)) returned 1 [0055.697] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc2a0) returned 1 [0055.697] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Shapes\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3bbcc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Shapes\\desktop.ini", lpFilePart=0x0) returned 0x35 [0055.697] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc1a0) returned 1 [0055.697] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Shapes\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\my shapes\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0055.697] GetFileType (hFile=0x448) returned 0x1 [0055.697] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc110) returned 1 [0055.697] GetFileType (hFile=0x448) returned 0x1 [0055.697] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3bc338 | out: lpFileSizeHigh=0x3bc338*=0x0) returned 0xd8 [0055.697] ReadFile (in: hFile=0x448, lpBuffer=0x229dee0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bc268, lpOverlapped=0x0 | out: lpBuffer=0x229dee0*, lpNumberOfBytesRead=0x3bc268*=0xd8, lpOverlapped=0x0) returned 1 [0055.697] CloseHandle (hObject=0x448) returned 1 [0055.736] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Shapes\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3bbcc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Shapes\\desktop.ini", lpFilePart=0x0) returned 0x35 [0055.736] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc1a0) returned 1 [0055.736] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Shapes\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\my shapes\\desktop.ini"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0055.738] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8c30) returned 1 [0055.738] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Shapes\\Favorites.vssx", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Shapes\\Favorites.vssx", lpFilePart=0x0) returned 0x38 [0055.738] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0055.738] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Shapes\\Favorites.vssx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\my shapes\\favorites.vssx"), fInfoLevelId=0x0, lpFileInformation=0x2315900 | out: lpFileInformation=0x2315900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x607ae082, ftCreationTime.dwHighDateTime=0x1d301d2, ftLastAccessTime.dwLowDateTime=0x607ae082, ftLastAccessTime.dwHighDateTime=0x1d301d2, ftLastWriteTime.dwLowDateTime=0x607ae082, ftLastWriteTime.dwHighDateTime=0x1d301d2, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0055.739] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0055.739] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Shapes\\Favorites.vssx", nBufferLength=0x105, lpBuffer=0x3be250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Shapes\\Favorites.vssx", lpFilePart=0x0) returned 0x38 [0055.739] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be730) returned 1 [0055.739] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Shapes\\Favorites.vssx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\my shapes\\favorites.vssx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0055.739] GetFileType (hFile=0x448) returned 0x1 [0055.739] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0055.739] GetFileType (hFile=0x448) returned 0x1 [0055.739] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3be8c8 | out: lpFileSizeHigh=0x3be8c8*=0x0) returned 0x0 [0055.739] CloseHandle (hObject=0x448) returned 1 [0055.781] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Shapes\\Favorites.vssx", nBufferLength=0x105, lpBuffer=0x3be250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Shapes\\Favorites.vssx", lpFilePart=0x0) returned 0x38 [0055.781] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be730) returned 1 [0055.781] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Shapes\\Favorites.vssx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\my shapes\\favorites.vssx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0055.782] GetFileType (hFile=0x448) returned 0x1 [0055.782] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0055.782] GetFileType (hFile=0x448) returned 0x1 [0055.782] WriteFile (in: hFile=0x448, lpBuffer=0x21882e0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x3be708, lpOverlapped=0x0 | out: lpBuffer=0x21882e0*, lpNumberOfBytesWritten=0x3be708*=0x10, lpOverlapped=0x0) returned 1 [0055.783] CloseHandle (hObject=0x448) returned 1 [0055.783] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Shapes\\Favorites.vssx", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Shapes\\Favorites.vssx", lpFilePart=0x0) returned 0x38 [0055.783] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Shapes\\Favorites.vssx.xuy", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Shapes\\Favorites.vssx.xuy", lpFilePart=0x0) returned 0x3c [0055.783] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0055.783] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Shapes\\Favorites.vssx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\my shapes\\favorites.vssx"), fInfoLevelId=0x0, lpFileInformation=0x3be910 | out: lpFileInformation=0x3be910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x607ae082, ftCreationTime.dwHighDateTime=0x1d301d2, ftLastAccessTime.dwLowDateTime=0x607ae082, ftLastAccessTime.dwHighDateTime=0x1d301d2, ftLastWriteTime.dwLowDateTime=0xd193f47, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0055.783] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7f0) returned 1 [0055.783] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Shapes\\Favorites.vssx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\my shapes\\favorites.vssx"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Shapes\\Favorites.vssx.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\my shapes\\favorites.vssx.xuy")) returned 1 [0055.784] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0055.784] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Shapes\\_private", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Shapes\\_private", lpFilePart=0x0) returned 0x32 [0055.784] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Shapes\\_private\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Shapes\\_private\\", lpFilePart=0x0) returned 0x33 [0055.784] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Shapes\\_private\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d7a30 [0055.786] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0055.786] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0055.786] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0055.786] FindClose (in: hFindFile=0x5d7a30 | out: hFindFile=0x5d7a30) returned 1 [0055.786] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0055.787] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0055.787] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0055.787] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Shapes\\_private", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Shapes\\_private", lpFilePart=0x0) returned 0x32 [0055.787] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Shapes\\_private\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Shapes\\_private\\", lpFilePart=0x0) returned 0x33 [0055.787] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Shapes\\_private\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d7df0 [0055.787] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0055.787] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0055.787] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0055.787] FindClose (in: hFindFile=0x5d7df0 | out: hFindFile=0x5d7df0) returned 1 [0055.787] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0055.787] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0055.787] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Shapes\\_private\\folder.ico", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Shapes\\_private\\folder.ico", lpFilePart=0x0) returned 0x3d [0055.787] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0055.787] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Shapes\\_private\\folder.ico" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\my shapes\\_private\\folder.ico"), fInfoLevelId=0x0, lpFileInformation=0x218af30 | out: lpFileInformation=0x218af30*(dwFileAttributes=0x2, ftCreationTime.dwLowDateTime=0x608b6fa3, ftCreationTime.dwHighDateTime=0x1d301d2, ftLastAccessTime.dwLowDateTime=0x608b6fa3, ftLastAccessTime.dwHighDateTime=0x1d301d2, ftLastWriteTime.dwLowDateTime=0x608b6fa3, ftLastWriteTime.dwHighDateTime=0x1d301d2, nFileSizeHigh=0x0, nFileSizeLow=0x74e6)) returned 1 [0055.788] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0055.788] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Shapes\\_private\\folder.ico", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Shapes\\_private\\folder.ico", lpFilePart=0x0) returned 0x3d [0055.788] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0055.788] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Shapes\\_private\\folder.ico" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\my shapes\\_private\\folder.ico"), fInfoLevelId=0x0, lpFileInformation=0x218b060 | out: lpFileInformation=0x218b060*(dwFileAttributes=0x2, ftCreationTime.dwLowDateTime=0x608b6fa3, ftCreationTime.dwHighDateTime=0x1d301d2, ftLastAccessTime.dwLowDateTime=0x608b6fa3, ftLastAccessTime.dwHighDateTime=0x1d301d2, ftLastWriteTime.dwLowDateTime=0x608b6fa3, ftLastWriteTime.dwHighDateTime=0x1d301d2, nFileSizeHigh=0x0, nFileSizeLow=0x74e6)) returned 1 [0055.788] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0055.788] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Shapes\\_private\\folder.ico", nBufferLength=0x105, lpBuffer=0x3be270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Shapes\\_private\\folder.ico", lpFilePart=0x0) returned 0x3d [0055.788] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0055.788] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Shapes\\_private\\folder.ico" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\my shapes\\_private\\folder.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0055.788] GetFileType (hFile=0x448) returned 0x1 [0055.788] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6c0) returned 1 [0055.788] GetFileType (hFile=0x448) returned 0x1 [0055.788] ReadFile (in: hFile=0x448, lpBuffer=0x218d3f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be7d8, lpOverlapped=0x0 | out: lpBuffer=0x218d3f0*, lpNumberOfBytesRead=0x3be7d8*=0x1000, lpOverlapped=0x0) returned 1 [0055.851] CloseHandle (hObject=0x448) returned 1 [0055.851] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Shapes\\_private\\folder.ico", nBufferLength=0x105, lpBuffer=0x3be270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Shapes\\_private\\folder.ico", lpFilePart=0x0) returned 0x3d [0055.851] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0055.851] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Shapes\\_private\\folder.ico" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\my shapes\\_private\\folder.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0055.852] GetFileType (hFile=0x448) returned 0x1 [0055.852] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6c0) returned 1 [0055.852] GetFileType (hFile=0x448) returned 0x1 [0055.852] WriteFile (in: hFile=0x448, lpBuffer=0x218b170*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be888, lpOverlapped=0x0 | out: lpBuffer=0x218b170*, lpNumberOfBytesWritten=0x3be888*=0x2000, lpOverlapped=0x0) returned 1 [0055.852] CloseHandle (hObject=0x448) returned 1 [0055.852] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Shapes\\_private\\folder.ico", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Shapes\\_private\\folder.ico", lpFilePart=0x0) returned 0x3d [0055.852] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Shapes\\_private\\folder.ico.xuy", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Shapes\\_private\\folder.ico.xuy", lpFilePart=0x0) returned 0x41 [0055.852] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0055.852] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Shapes\\_private\\folder.ico" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\my shapes\\_private\\folder.ico"), fInfoLevelId=0x0, lpFileInformation=0x3be8a0 | out: lpFileInformation=0x3be8a0*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x608b6fa3, ftCreationTime.dwHighDateTime=0x1d301d2, ftLastAccessTime.dwLowDateTime=0x608b6fa3, ftLastAccessTime.dwHighDateTime=0x1d301d2, ftLastWriteTime.dwLowDateTime=0xd22c499, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x74e6)) returned 1 [0055.852] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0055.852] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Shapes\\_private\\folder.ico" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\my shapes\\_private\\folder.ico"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Shapes\\_private\\folder.ico.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\my shapes\\_private\\folder.ico.xuy")) returned 1 [0055.853] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0055.853] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Videos", nBufferLength=0x105, lpBuffer=0x3be3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Videos", lpFilePart=0x0) returned 0x29 [0055.853] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Videos\\", nBufferLength=0x105, lpBuffer=0x3be370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Videos\\", lpFilePart=0x0) returned 0x2a [0055.853] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Videos\\*", lpFindFileData=0x3be580 | out: lpFindFileData=0x3be580) returned 0xffffffffffffffff [0055.853] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be810) returned 1 [0055.855] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0055.855] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih", nBufferLength=0x105, lpBuffer=0x3be3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih", lpFilePart=0x0) returned 0x25 [0055.855] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\", nBufferLength=0x105, lpBuffer=0x3be370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\", lpFilePart=0x0) returned 0x26 [0055.855] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\*", lpFindFileData=0x3be580 | out: lpFindFileData=0x3be580) returned 0x5d7af0 [0055.855] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0055.855] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0055.855] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0055.855] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0055.856] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0055.856] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0055.856] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0055.856] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0055.856] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0055.856] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 0 [0055.856] FindClose (in: hFindFile=0x5d7af0 | out: hFindFile=0x5d7af0) returned 1 [0055.856] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0055.856] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7f0) returned 1 [0055.857] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0055.857] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih", nBufferLength=0x105, lpBuffer=0x3be3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih", lpFilePart=0x0) returned 0x25 [0055.857] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\", nBufferLength=0x105, lpBuffer=0x3be370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\", lpFilePart=0x0) returned 0x26 [0055.857] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\*", lpFindFileData=0x3be580 | out: lpFindFileData=0x3be580) returned 0x5d81b0 [0055.857] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0055.857] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0055.857] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0055.857] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0055.857] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0055.857] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0055.858] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0055.858] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0055.858] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0055.858] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 0 [0055.858] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0055.858] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0055.858] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7f0) returned 1 [0055.858] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\0NTVcp BTflcPWN7FCj.ots", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\0NTVcp BTflcPWN7FCj.ots", lpFilePart=0x0) returned 0x3d [0055.858] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0055.858] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\0NTVcp BTflcPWN7FCj.ots" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\omrih\\0ntvcp btflcpwn7fcj.ots"), fInfoLevelId=0x0, lpFileInformation=0x220d608 | out: lpFileInformation=0x220d608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76adb1a0, ftCreationTime.dwHighDateTime=0x1d45ea0, ftLastAccessTime.dwLowDateTime=0xa12eefb0, ftLastAccessTime.dwHighDateTime=0x1d463e7, ftLastWriteTime.dwLowDateTime=0xa12eefb0, ftLastWriteTime.dwHighDateTime=0x1d463e7, nFileSizeHigh=0x0, nFileSizeLow=0xa919)) returned 1 [0055.858] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0055.858] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\0NTVcp BTflcPWN7FCj.ots", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\0NTVcp BTflcPWN7FCj.ots", lpFilePart=0x0) returned 0x3d [0055.858] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0055.858] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\0NTVcp BTflcPWN7FCj.ots" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\omrih\\0ntvcp btflcpwn7fcj.ots"), fInfoLevelId=0x0, lpFileInformation=0x220d750 | out: lpFileInformation=0x220d750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76adb1a0, ftCreationTime.dwHighDateTime=0x1d45ea0, ftLastAccessTime.dwLowDateTime=0xa12eefb0, ftLastAccessTime.dwHighDateTime=0x1d463e7, ftLastWriteTime.dwLowDateTime=0xa12eefb0, ftLastWriteTime.dwHighDateTime=0x1d463e7, nFileSizeHigh=0x0, nFileSizeLow=0xa919)) returned 1 [0055.859] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0055.859] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\0NTVcp BTflcPWN7FCj.ots", nBufferLength=0x105, lpBuffer=0x3be2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\0NTVcp BTflcPWN7FCj.ots", lpFilePart=0x0) returned 0x3d [0055.859] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0055.859] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\0NTVcp BTflcPWN7FCj.ots" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\omrih\\0ntvcp btflcpwn7fcj.ots"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0055.859] GetFileType (hFile=0x448) returned 0x1 [0055.859] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be730) returned 1 [0055.859] GetFileType (hFile=0x448) returned 0x1 [0055.859] ReadFile (in: hFile=0x448, lpBuffer=0x220fb10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be848, lpOverlapped=0x0 | out: lpBuffer=0x220fb10*, lpNumberOfBytesRead=0x3be848*=0x1000, lpOverlapped=0x0) returned 1 [0055.898] CloseHandle (hObject=0x448) returned 1 [0055.898] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\0NTVcp BTflcPWN7FCj.ots", nBufferLength=0x105, lpBuffer=0x3be2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\0NTVcp BTflcPWN7FCj.ots", lpFilePart=0x0) returned 0x3d [0055.898] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0055.898] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\0NTVcp BTflcPWN7FCj.ots" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\omrih\\0ntvcp btflcpwn7fcj.ots"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0055.899] GetFileType (hFile=0x448) returned 0x1 [0055.899] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be730) returned 1 [0055.899] GetFileType (hFile=0x448) returned 0x1 [0055.899] WriteFile (in: hFile=0x448, lpBuffer=0x220d878*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be8f8, lpOverlapped=0x0 | out: lpBuffer=0x220d878*, lpNumberOfBytesWritten=0x3be8f8*=0x2000, lpOverlapped=0x0) returned 1 [0055.899] CloseHandle (hObject=0x448) returned 1 [0055.899] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\0NTVcp BTflcPWN7FCj.ots", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\0NTVcp BTflcPWN7FCj.ots", lpFilePart=0x0) returned 0x3d [0055.899] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\0NTVcp BTflcPWN7FCj.ots.xuy", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\0NTVcp BTflcPWN7FCj.ots.xuy", lpFilePart=0x0) returned 0x41 [0055.899] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0055.899] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\0NTVcp BTflcPWN7FCj.ots" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\omrih\\0ntvcp btflcpwn7fcj.ots"), fInfoLevelId=0x0, lpFileInformation=0x3be910 | out: lpFileInformation=0x3be910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76adb1a0, ftCreationTime.dwHighDateTime=0x1d45ea0, ftLastAccessTime.dwLowDateTime=0xa12eefb0, ftLastAccessTime.dwHighDateTime=0x1d463e7, ftLastWriteTime.dwLowDateTime=0xd29ebfa, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xa919)) returned 1 [0055.899] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7f0) returned 1 [0055.899] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\0NTVcp BTflcPWN7FCj.ots" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\omrih\\0ntvcp btflcpwn7fcj.ots"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\0NTVcp BTflcPWN7FCj.ots.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\omrih\\0ntvcp btflcpwn7fcj.ots.xuy")) returned 1 [0055.900] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\4Z-bQL1 kRLVzZ8r.ots", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\4Z-bQL1 kRLVzZ8r.ots", lpFilePart=0x0) returned 0x3a [0055.900] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0055.900] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\4Z-bQL1 kRLVzZ8r.ots" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\omrih\\4z-bql1 krlvzz8r.ots"), fInfoLevelId=0x0, lpFileInformation=0x228be78 | out: lpFileInformation=0x228be78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1dd4a250, ftCreationTime.dwHighDateTime=0x1d45b76, ftLastAccessTime.dwLowDateTime=0x5f79d8c0, ftLastAccessTime.dwHighDateTime=0x1d4572e, ftLastWriteTime.dwLowDateTime=0x5f79d8c0, ftLastWriteTime.dwHighDateTime=0x1d4572e, nFileSizeHigh=0x0, nFileSizeLow=0x12ff6)) returned 1 [0055.900] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0055.900] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\4Z-bQL1 kRLVzZ8r.ots", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\4Z-bQL1 kRLVzZ8r.ots", lpFilePart=0x0) returned 0x3a [0055.900] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0055.900] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\4Z-bQL1 kRLVzZ8r.ots" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\omrih\\4z-bql1 krlvzz8r.ots"), fInfoLevelId=0x0, lpFileInformation=0x228bfb8 | out: lpFileInformation=0x228bfb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1dd4a250, ftCreationTime.dwHighDateTime=0x1d45b76, ftLastAccessTime.dwLowDateTime=0x5f79d8c0, ftLastAccessTime.dwHighDateTime=0x1d4572e, ftLastWriteTime.dwLowDateTime=0x5f79d8c0, ftLastWriteTime.dwHighDateTime=0x1d4572e, nFileSizeHigh=0x0, nFileSizeLow=0x12ff6)) returned 1 [0055.900] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0055.900] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\4Z-bQL1 kRLVzZ8r.ots", nBufferLength=0x105, lpBuffer=0x3be2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\4Z-bQL1 kRLVzZ8r.ots", lpFilePart=0x0) returned 0x3a [0055.900] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0055.900] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\4Z-bQL1 kRLVzZ8r.ots" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\omrih\\4z-bql1 krlvzz8r.ots"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0055.901] GetFileType (hFile=0x448) returned 0x1 [0055.901] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be730) returned 1 [0055.901] GetFileType (hFile=0x448) returned 0x1 [0055.901] ReadFile (in: hFile=0x448, lpBuffer=0x228e368, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be848, lpOverlapped=0x0 | out: lpBuffer=0x228e368*, lpNumberOfBytesRead=0x3be848*=0x1000, lpOverlapped=0x0) returned 1 [0055.912] CloseHandle (hObject=0x448) returned 1 [0055.913] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\4Z-bQL1 kRLVzZ8r.ots", nBufferLength=0x105, lpBuffer=0x3be2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\4Z-bQL1 kRLVzZ8r.ots", lpFilePart=0x0) returned 0x3a [0055.913] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0055.913] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\4Z-bQL1 kRLVzZ8r.ots" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\omrih\\4z-bql1 krlvzz8r.ots"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0055.913] GetFileType (hFile=0x448) returned 0x1 [0055.913] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be730) returned 1 [0055.913] GetFileType (hFile=0x448) returned 0x1 [0055.913] WriteFile (in: hFile=0x448, lpBuffer=0x228c0d8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be8f8, lpOverlapped=0x0 | out: lpBuffer=0x228c0d8*, lpNumberOfBytesWritten=0x3be8f8*=0x2000, lpOverlapped=0x0) returned 1 [0055.913] CloseHandle (hObject=0x448) returned 1 [0055.913] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\4Z-bQL1 kRLVzZ8r.ots", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\4Z-bQL1 kRLVzZ8r.ots", lpFilePart=0x0) returned 0x3a [0055.913] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\4Z-bQL1 kRLVzZ8r.ots.xuy", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\4Z-bQL1 kRLVzZ8r.ots.xuy", lpFilePart=0x0) returned 0x3e [0055.913] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0055.913] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\4Z-bQL1 kRLVzZ8r.ots" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\omrih\\4z-bql1 krlvzz8r.ots"), fInfoLevelId=0x0, lpFileInformation=0x3be910 | out: lpFileInformation=0x3be910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1dd4a250, ftCreationTime.dwHighDateTime=0x1d45b76, ftLastAccessTime.dwLowDateTime=0x5f79d8c0, ftLastAccessTime.dwHighDateTime=0x1d4572e, ftLastWriteTime.dwLowDateTime=0xd2c512d, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x12ff6)) returned 1 [0055.913] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7f0) returned 1 [0055.913] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\4Z-bQL1 kRLVzZ8r.ots" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\omrih\\4z-bql1 krlvzz8r.ots"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\4Z-bQL1 kRLVzZ8r.ots.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\omrih\\4z-bql1 krlvzz8r.ots.xuy")) returned 1 [0055.914] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\d Y_MLHa.odp", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\d Y_MLHa.odp", lpFilePart=0x0) returned 0x32 [0055.914] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0055.914] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\d Y_MLHa.odp" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\omrih\\d y_mlha.odp"), fInfoLevelId=0x0, lpFileInformation=0x230a6b0 | out: lpFileInformation=0x230a6b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94ec9de0, ftCreationTime.dwHighDateTime=0x1d45cc3, ftLastAccessTime.dwLowDateTime=0xc6e8ef0, ftLastAccessTime.dwHighDateTime=0x1d45e4a, ftLastWriteTime.dwLowDateTime=0xc6e8ef0, ftLastWriteTime.dwHighDateTime=0x1d45e4a, nFileSizeHigh=0x0, nFileSizeLow=0xa181)) returned 1 [0055.914] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0055.914] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\d Y_MLHa.odp", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\d Y_MLHa.odp", lpFilePart=0x0) returned 0x32 [0055.914] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0055.914] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\d Y_MLHa.odp" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\omrih\\d y_mlha.odp"), fInfoLevelId=0x0, lpFileInformation=0x230a7d0 | out: lpFileInformation=0x230a7d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94ec9de0, ftCreationTime.dwHighDateTime=0x1d45cc3, ftLastAccessTime.dwLowDateTime=0xc6e8ef0, ftLastAccessTime.dwHighDateTime=0x1d45e4a, ftLastWriteTime.dwLowDateTime=0xc6e8ef0, ftLastWriteTime.dwHighDateTime=0x1d45e4a, nFileSizeHigh=0x0, nFileSizeLow=0xa181)) returned 1 [0055.914] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0055.914] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\d Y_MLHa.odp", nBufferLength=0x105, lpBuffer=0x3be2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\d Y_MLHa.odp", lpFilePart=0x0) returned 0x32 [0055.914] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0055.915] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\d Y_MLHa.odp" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\omrih\\d y_mlha.odp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0055.915] GetFileType (hFile=0x448) returned 0x1 [0055.915] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be730) returned 1 [0055.915] GetFileType (hFile=0x448) returned 0x1 [0055.915] ReadFile (in: hFile=0x448, lpBuffer=0x230cb40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be848, lpOverlapped=0x0 | out: lpBuffer=0x230cb40*, lpNumberOfBytesRead=0x3be848*=0x1000, lpOverlapped=0x0) returned 1 [0055.952] CloseHandle (hObject=0x448) returned 1 [0055.952] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\d Y_MLHa.odp", nBufferLength=0x105, lpBuffer=0x3be2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\d Y_MLHa.odp", lpFilePart=0x0) returned 0x32 [0055.952] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0055.952] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\d Y_MLHa.odp" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\omrih\\d y_mlha.odp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0055.952] GetFileType (hFile=0x448) returned 0x1 [0055.952] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be730) returned 1 [0055.952] GetFileType (hFile=0x448) returned 0x1 [0055.952] WriteFile (in: hFile=0x448, lpBuffer=0x2155168*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be8f8, lpOverlapped=0x0 | out: lpBuffer=0x2155168*, lpNumberOfBytesWritten=0x3be8f8*=0x2000, lpOverlapped=0x0) returned 1 [0055.952] CloseHandle (hObject=0x448) returned 1 [0055.953] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\d Y_MLHa.odp", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\d Y_MLHa.odp", lpFilePart=0x0) returned 0x32 [0055.953] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\d Y_MLHa.odp.xuy", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\d Y_MLHa.odp.xuy", lpFilePart=0x0) returned 0x36 [0055.953] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0055.953] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\d Y_MLHa.odp" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\omrih\\d y_mlha.odp"), fInfoLevelId=0x0, lpFileInformation=0x3be910 | out: lpFileInformation=0x3be910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94ec9de0, ftCreationTime.dwHighDateTime=0x1d45cc3, ftLastAccessTime.dwLowDateTime=0xc6e8ef0, ftLastAccessTime.dwHighDateTime=0x1d45e4a, ftLastWriteTime.dwLowDateTime=0xd337808, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xa181)) returned 1 [0055.953] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7f0) returned 1 [0055.953] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\d Y_MLHa.odp" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\omrih\\d y_mlha.odp"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\d Y_MLHa.odp.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\omrih\\d y_mlha.odp.xuy")) returned 1 [0055.953] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\e6huRO7 BfdOE JzK.odt", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\e6huRO7 BfdOE JzK.odt", lpFilePart=0x0) returned 0x3b [0055.954] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0055.954] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\e6huRO7 BfdOE JzK.odt" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\omrih\\e6huro7 bfdoe jzk.odt"), fInfoLevelId=0x0, lpFileInformation=0x218c1c0 | out: lpFileInformation=0x218c1c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x974cdce0, ftCreationTime.dwHighDateTime=0x1d45911, ftLastAccessTime.dwLowDateTime=0xf2357dd0, ftLastAccessTime.dwHighDateTime=0x1d45973, ftLastWriteTime.dwLowDateTime=0xf2357dd0, ftLastWriteTime.dwHighDateTime=0x1d45973, nFileSizeHigh=0x0, nFileSizeLow=0x6258)) returned 1 [0055.954] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0055.954] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\e6huRO7 BfdOE JzK.odt", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\e6huRO7 BfdOE JzK.odt", lpFilePart=0x0) returned 0x3b [0055.954] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0055.954] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\e6huRO7 BfdOE JzK.odt" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\omrih\\e6huro7 bfdoe jzk.odt"), fInfoLevelId=0x0, lpFileInformation=0x218c300 | out: lpFileInformation=0x218c300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x974cdce0, ftCreationTime.dwHighDateTime=0x1d45911, ftLastAccessTime.dwLowDateTime=0xf2357dd0, ftLastAccessTime.dwHighDateTime=0x1d45973, ftLastWriteTime.dwLowDateTime=0xf2357dd0, ftLastWriteTime.dwHighDateTime=0x1d45973, nFileSizeHigh=0x0, nFileSizeLow=0x6258)) returned 1 [0055.954] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0055.954] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\e6huRO7 BfdOE JzK.odt", nBufferLength=0x105, lpBuffer=0x3be2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\e6huRO7 BfdOE JzK.odt", lpFilePart=0x0) returned 0x3b [0055.954] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0055.954] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\e6huRO7 BfdOE JzK.odt" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\omrih\\e6huro7 bfdoe jzk.odt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0055.954] GetFileType (hFile=0x448) returned 0x1 [0055.954] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be730) returned 1 [0055.954] GetFileType (hFile=0x448) returned 0x1 [0055.954] ReadFile (in: hFile=0x448, lpBuffer=0x218e6b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be848, lpOverlapped=0x0 | out: lpBuffer=0x218e6b0*, lpNumberOfBytesRead=0x3be848*=0x1000, lpOverlapped=0x0) returned 1 [0055.964] CloseHandle (hObject=0x448) returned 1 [0055.964] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\e6huRO7 BfdOE JzK.odt", nBufferLength=0x105, lpBuffer=0x3be2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\e6huRO7 BfdOE JzK.odt", lpFilePart=0x0) returned 0x3b [0055.964] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0055.964] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\e6huRO7 BfdOE JzK.odt" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\omrih\\e6huro7 bfdoe jzk.odt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0055.964] GetFileType (hFile=0x448) returned 0x1 [0055.964] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be730) returned 1 [0055.965] GetFileType (hFile=0x448) returned 0x1 [0055.965] WriteFile (in: hFile=0x448, lpBuffer=0x218c420*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be8f8, lpOverlapped=0x0 | out: lpBuffer=0x218c420*, lpNumberOfBytesWritten=0x3be8f8*=0x2000, lpOverlapped=0x0) returned 1 [0055.965] CloseHandle (hObject=0x448) returned 1 [0055.965] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\e6huRO7 BfdOE JzK.odt", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\e6huRO7 BfdOE JzK.odt", lpFilePart=0x0) returned 0x3b [0055.965] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\e6huRO7 BfdOE JzK.odt.xuy", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\e6huRO7 BfdOE JzK.odt.xuy", lpFilePart=0x0) returned 0x3f [0055.965] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0055.965] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\e6huRO7 BfdOE JzK.odt" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\omrih\\e6huro7 bfdoe jzk.odt"), fInfoLevelId=0x0, lpFileInformation=0x3be910 | out: lpFileInformation=0x3be910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x974cdce0, ftCreationTime.dwHighDateTime=0x1d45911, ftLastAccessTime.dwLowDateTime=0xf2357dd0, ftLastAccessTime.dwHighDateTime=0x1d45973, ftLastWriteTime.dwLowDateTime=0xd337808, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x6258)) returned 1 [0055.965] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7f0) returned 1 [0055.965] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\e6huRO7 BfdOE JzK.odt" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\omrih\\e6huro7 bfdoe jzk.odt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\e6huRO7 BfdOE JzK.odt.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\omrih\\e6huro7 bfdoe jzk.odt.xuy")) returned 1 [0055.967] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\lN-gSBVjXH7S4Quo.pdf", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\lN-gSBVjXH7S4Quo.pdf", lpFilePart=0x0) returned 0x3a [0055.967] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0055.967] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\lN-gSBVjXH7S4Quo.pdf" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\omrih\\ln-gsbvjxh7s4quo.pdf"), fInfoLevelId=0x0, lpFileInformation=0x220a9f8 | out: lpFileInformation=0x220a9f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x575efb80, ftCreationTime.dwHighDateTime=0x1d45697, ftLastAccessTime.dwLowDateTime=0xa3ca9760, ftLastAccessTime.dwHighDateTime=0x1d45b0e, ftLastWriteTime.dwLowDateTime=0xa3ca9760, ftLastWriteTime.dwHighDateTime=0x1d45b0e, nFileSizeHigh=0x0, nFileSizeLow=0x148a7)) returned 1 [0055.967] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0055.967] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\lN-gSBVjXH7S4Quo.pdf", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\lN-gSBVjXH7S4Quo.pdf", lpFilePart=0x0) returned 0x3a [0055.967] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0055.967] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\lN-gSBVjXH7S4Quo.pdf" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\omrih\\ln-gsbvjxh7s4quo.pdf"), fInfoLevelId=0x0, lpFileInformation=0x220ab38 | out: lpFileInformation=0x220ab38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x575efb80, ftCreationTime.dwHighDateTime=0x1d45697, ftLastAccessTime.dwLowDateTime=0xa3ca9760, ftLastAccessTime.dwHighDateTime=0x1d45b0e, ftLastWriteTime.dwLowDateTime=0xa3ca9760, ftLastWriteTime.dwHighDateTime=0x1d45b0e, nFileSizeHigh=0x0, nFileSizeLow=0x148a7)) returned 1 [0055.967] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0055.967] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\lN-gSBVjXH7S4Quo.pdf", nBufferLength=0x105, lpBuffer=0x3be2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\lN-gSBVjXH7S4Quo.pdf", lpFilePart=0x0) returned 0x3a [0055.967] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0055.967] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\lN-gSBVjXH7S4Quo.pdf" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\omrih\\ln-gsbvjxh7s4quo.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0055.967] GetFileType (hFile=0x448) returned 0x1 [0055.968] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be730) returned 1 [0055.968] GetFileType (hFile=0x448) returned 0x1 [0055.968] ReadFile (in: hFile=0x448, lpBuffer=0x220cee8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be848, lpOverlapped=0x0 | out: lpBuffer=0x220cee8*, lpNumberOfBytesRead=0x3be848*=0x1000, lpOverlapped=0x0) returned 1 [0055.978] CloseHandle (hObject=0x448) returned 1 [0055.978] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\lN-gSBVjXH7S4Quo.pdf", nBufferLength=0x105, lpBuffer=0x3be2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\lN-gSBVjXH7S4Quo.pdf", lpFilePart=0x0) returned 0x3a [0055.978] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0055.978] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\lN-gSBVjXH7S4Quo.pdf" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\omrih\\ln-gsbvjxh7s4quo.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0055.978] GetFileType (hFile=0x448) returned 0x1 [0055.978] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be730) returned 1 [0055.978] GetFileType (hFile=0x448) returned 0x1 [0055.978] WriteFile (in: hFile=0x448, lpBuffer=0x220ac58*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be8f8, lpOverlapped=0x0 | out: lpBuffer=0x220ac58*, lpNumberOfBytesWritten=0x3be8f8*=0x2000, lpOverlapped=0x0) returned 1 [0055.978] CloseHandle (hObject=0x448) returned 1 [0055.978] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\lN-gSBVjXH7S4Quo.pdf", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\lN-gSBVjXH7S4Quo.pdf", lpFilePart=0x0) returned 0x3a [0055.978] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\lN-gSBVjXH7S4Quo.pdf.xuy", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\lN-gSBVjXH7S4Quo.pdf.xuy", lpFilePart=0x0) returned 0x3e [0055.978] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0055.979] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\lN-gSBVjXH7S4Quo.pdf" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\omrih\\ln-gsbvjxh7s4quo.pdf"), fInfoLevelId=0x0, lpFileInformation=0x3be910 | out: lpFileInformation=0x3be910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x575efb80, ftCreationTime.dwHighDateTime=0x1d45697, ftLastAccessTime.dwLowDateTime=0xa3ca9760, ftLastAccessTime.dwHighDateTime=0x1d45b0e, ftLastWriteTime.dwLowDateTime=0xd35d718, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x148a7)) returned 1 [0055.979] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7f0) returned 1 [0055.979] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\lN-gSBVjXH7S4Quo.pdf" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\omrih\\ln-gsbvjxh7s4quo.pdf"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\lN-gSBVjXH7S4Quo.pdf.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\omrih\\ln-gsbvjxh7s4quo.pdf.xuy")) returned 1 [0055.979] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\rOLZ.pdf", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\rOLZ.pdf", lpFilePart=0x0) returned 0x2e [0055.979] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0055.979] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\rOLZ.pdf" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\omrih\\rolz.pdf"), fInfoLevelId=0x0, lpFileInformation=0x2289230 | out: lpFileInformation=0x2289230*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfbfcf8c0, ftCreationTime.dwHighDateTime=0x1d4588d, ftLastAccessTime.dwLowDateTime=0xee5b0190, ftLastAccessTime.dwHighDateTime=0x1d460ac, ftLastWriteTime.dwLowDateTime=0xee5b0190, ftLastWriteTime.dwHighDateTime=0x1d460ac, nFileSizeHigh=0x0, nFileSizeLow=0x4900)) returned 1 [0055.979] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0055.979] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\rOLZ.pdf", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\rOLZ.pdf", lpFilePart=0x0) returned 0x2e [0055.979] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0055.979] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\rOLZ.pdf" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\omrih\\rolz.pdf"), fInfoLevelId=0x0, lpFileInformation=0x2289340 | out: lpFileInformation=0x2289340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfbfcf8c0, ftCreationTime.dwHighDateTime=0x1d4588d, ftLastAccessTime.dwLowDateTime=0xee5b0190, ftLastAccessTime.dwHighDateTime=0x1d460ac, ftLastWriteTime.dwLowDateTime=0xee5b0190, ftLastWriteTime.dwHighDateTime=0x1d460ac, nFileSizeHigh=0x0, nFileSizeLow=0x4900)) returned 1 [0055.980] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0055.980] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\rOLZ.pdf", nBufferLength=0x105, lpBuffer=0x3be2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\rOLZ.pdf", lpFilePart=0x0) returned 0x2e [0055.980] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0055.980] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\rOLZ.pdf" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\omrih\\rolz.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0055.980] GetFileType (hFile=0x448) returned 0x1 [0055.980] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be730) returned 1 [0055.980] GetFileType (hFile=0x448) returned 0x1 [0055.980] ReadFile (in: hFile=0x448, lpBuffer=0x228b690, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be848, lpOverlapped=0x0 | out: lpBuffer=0x228b690*, lpNumberOfBytesRead=0x3be848*=0x1000, lpOverlapped=0x0) returned 1 [0055.990] CloseHandle (hObject=0x448) returned 1 [0055.990] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\rOLZ.pdf", nBufferLength=0x105, lpBuffer=0x3be2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\rOLZ.pdf", lpFilePart=0x0) returned 0x2e [0055.990] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0055.990] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\rOLZ.pdf" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\omrih\\rolz.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0055.990] GetFileType (hFile=0x448) returned 0x1 [0055.990] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be730) returned 1 [0055.991] GetFileType (hFile=0x448) returned 0x1 [0055.991] WriteFile (in: hFile=0x448, lpBuffer=0x2289430*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be8f8, lpOverlapped=0x0 | out: lpBuffer=0x2289430*, lpNumberOfBytesWritten=0x3be8f8*=0x2000, lpOverlapped=0x0) returned 1 [0055.991] CloseHandle (hObject=0x448) returned 1 [0055.991] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\rOLZ.pdf", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\rOLZ.pdf", lpFilePart=0x0) returned 0x2e [0055.991] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\rOLZ.pdf.xuy", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\rOLZ.pdf.xuy", lpFilePart=0x0) returned 0x32 [0055.991] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0055.991] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\rOLZ.pdf" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\omrih\\rolz.pdf"), fInfoLevelId=0x0, lpFileInformation=0x3be910 | out: lpFileInformation=0x3be910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfbfcf8c0, ftCreationTime.dwHighDateTime=0x1d4588d, ftLastAccessTime.dwLowDateTime=0xee5b0190, ftLastAccessTime.dwHighDateTime=0x1d460ac, ftLastWriteTime.dwLowDateTime=0xd3839d6, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x4900)) returned 1 [0055.991] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7f0) returned 1 [0055.991] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\rOLZ.pdf" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\omrih\\rolz.pdf"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\rOLZ.pdf.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\omrih\\rolz.pdf.xuy")) returned 1 [0055.992] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0055.992] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl", lpFilePart=0x0) returned 0x37 [0055.992] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\", lpFilePart=0x0) returned 0x38 [0055.992] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d7d90 [0055.992] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0055.992] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0055.992] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0055.992] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0055.992] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0055.992] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0055.992] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0055.993] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0055.993] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0055.993] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0055.993] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0055.993] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0055.993] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0055.993] FindClose (in: hFindFile=0x5d7d90 | out: hFindFile=0x5d7d90) returned 1 [0055.993] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0055.993] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0055.993] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0055.993] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl", lpFilePart=0x0) returned 0x37 [0055.993] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\", lpFilePart=0x0) returned 0x38 [0055.993] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d7cd0 [0055.994] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0055.994] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0055.994] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0055.994] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0055.994] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0055.994] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0055.994] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0055.994] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0055.995] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0055.995] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0055.995] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0055.995] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0055.995] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0055.995] FindClose (in: hFindFile=0x5d7cd0 | out: hFindFile=0x5d7cd0) returned 1 [0055.995] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0055.995] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0055.995] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\8MQwAP0_D5NFG dD.xlsx", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\8MQwAP0_D5NFG dD.xlsx", lpFilePart=0x0) returned 0x4d [0055.995] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0055.995] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\8MQwAP0_D5NFG dD.xlsx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\omrih\\gf2xpstl-3sswoqbl\\8mqwap0_d5nfg dd.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x230bf48 | out: lpFileInformation=0x230bf48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x658c2f40, ftCreationTime.dwHighDateTime=0x1d4619e, ftLastAccessTime.dwLowDateTime=0x78506f90, ftLastAccessTime.dwHighDateTime=0x1d46029, ftLastWriteTime.dwLowDateTime=0x78506f90, ftLastWriteTime.dwHighDateTime=0x1d46029, nFileSizeHigh=0x0, nFileSizeLow=0xfd50)) returned 1 [0055.995] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0055.996] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\8MQwAP0_D5NFG dD.xlsx", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\8MQwAP0_D5NFG dD.xlsx", lpFilePart=0x0) returned 0x4d [0055.996] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0055.996] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\8MQwAP0_D5NFG dD.xlsx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\omrih\\gf2xpstl-3sswoqbl\\8mqwap0_d5nfg dd.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x230c0b0 | out: lpFileInformation=0x230c0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x658c2f40, ftCreationTime.dwHighDateTime=0x1d4619e, ftLastAccessTime.dwLowDateTime=0x78506f90, ftLastAccessTime.dwHighDateTime=0x1d46029, ftLastWriteTime.dwLowDateTime=0x78506f90, ftLastWriteTime.dwHighDateTime=0x1d46029, nFileSizeHigh=0x0, nFileSizeLow=0xfd50)) returned 1 [0055.996] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0055.996] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\8MQwAP0_D5NFG dD.xlsx", nBufferLength=0x105, lpBuffer=0x3be270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\8MQwAP0_D5NFG dD.xlsx", lpFilePart=0x0) returned 0x4d [0055.996] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0055.996] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\8MQwAP0_D5NFG dD.xlsx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\omrih\\gf2xpstl-3sswoqbl\\8mqwap0_d5nfg dd.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0055.996] GetFileType (hFile=0x448) returned 0x1 [0055.996] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6c0) returned 1 [0055.996] GetFileType (hFile=0x448) returned 0x1 [0055.996] ReadFile (in: hFile=0x448, lpBuffer=0x230e4b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be7d8, lpOverlapped=0x0 | out: lpBuffer=0x230e4b0*, lpNumberOfBytesRead=0x3be7d8*=0x1000, lpOverlapped=0x0) returned 1 [0056.035] CloseHandle (hObject=0x448) returned 1 [0056.035] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\8MQwAP0_D5NFG dD.xlsx", nBufferLength=0x105, lpBuffer=0x3be270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\8MQwAP0_D5NFG dD.xlsx", lpFilePart=0x0) returned 0x4d [0056.035] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0056.035] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\8MQwAP0_D5NFG dD.xlsx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\omrih\\gf2xpstl-3sswoqbl\\8mqwap0_d5nfg dd.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0056.036] GetFileType (hFile=0x448) returned 0x1 [0056.036] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6c0) returned 1 [0056.036] GetFileType (hFile=0x448) returned 0x1 [0056.036] WriteFile (in: hFile=0x448, lpBuffer=0x21555d0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be888, lpOverlapped=0x0 | out: lpBuffer=0x21555d0*, lpNumberOfBytesWritten=0x3be888*=0x2000, lpOverlapped=0x0) returned 1 [0056.036] CloseHandle (hObject=0x448) returned 1 [0056.036] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\8MQwAP0_D5NFG dD.xlsx", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\8MQwAP0_D5NFG dD.xlsx", lpFilePart=0x0) returned 0x4d [0056.036] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\8MQwAP0_D5NFG dD.xlsx.xuy", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\8MQwAP0_D5NFG dD.xlsx.xuy", lpFilePart=0x0) returned 0x51 [0056.036] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0056.036] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\8MQwAP0_D5NFG dD.xlsx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\omrih\\gf2xpstl-3sswoqbl\\8mqwap0_d5nfg dd.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x3be8a0 | out: lpFileInformation=0x3be8a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x658c2f40, ftCreationTime.dwHighDateTime=0x1d4619e, ftLastAccessTime.dwLowDateTime=0x78506f90, ftLastAccessTime.dwHighDateTime=0x1d46029, ftLastWriteTime.dwLowDateTime=0xd3f6110, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xfd50)) returned 1 [0056.036] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0056.036] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\8MQwAP0_D5NFG dD.xlsx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\omrih\\gf2xpstl-3sswoqbl\\8mqwap0_d5nfg dd.xlsx"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\8MQwAP0_D5NFG dD.xlsx.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\omrih\\gf2xpstl-3sswoqbl\\8mqwap0_d5nfg dd.xlsx.xuy")) returned 1 [0056.037] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\9mRe9.odt", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\9mRe9.odt", lpFilePart=0x0) returned 0x41 [0056.037] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0056.037] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\9mRe9.odt" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\omrih\\gf2xpstl-3sswoqbl\\9mre9.odt"), fInfoLevelId=0x0, lpFileInformation=0x218ad08 | out: lpFileInformation=0x218ad08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c3ddba0, ftCreationTime.dwHighDateTime=0x1d45d09, ftLastAccessTime.dwLowDateTime=0xfc0bf700, ftLastAccessTime.dwHighDateTime=0x1d45b79, ftLastWriteTime.dwLowDateTime=0xfc0bf700, ftLastWriteTime.dwHighDateTime=0x1d45b79, nFileSizeHigh=0x0, nFileSizeLow=0x12f32)) returned 1 [0056.037] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0056.037] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\9mRe9.odt", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\9mRe9.odt", lpFilePart=0x0) returned 0x41 [0056.037] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0056.037] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\9mRe9.odt" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\omrih\\gf2xpstl-3sswoqbl\\9mre9.odt"), fInfoLevelId=0x0, lpFileInformation=0x218ae40 | out: lpFileInformation=0x218ae40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c3ddba0, ftCreationTime.dwHighDateTime=0x1d45d09, ftLastAccessTime.dwLowDateTime=0xfc0bf700, ftLastAccessTime.dwHighDateTime=0x1d45b79, ftLastWriteTime.dwLowDateTime=0xfc0bf700, ftLastWriteTime.dwHighDateTime=0x1d45b79, nFileSizeHigh=0x0, nFileSizeLow=0x12f32)) returned 1 [0056.037] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0056.037] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\9mRe9.odt", nBufferLength=0x105, lpBuffer=0x3be270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\9mRe9.odt", lpFilePart=0x0) returned 0x41 [0056.037] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0056.037] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\9mRe9.odt" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\omrih\\gf2xpstl-3sswoqbl\\9mre9.odt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0056.038] GetFileType (hFile=0x448) returned 0x1 [0056.038] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6c0) returned 1 [0056.038] GetFileType (hFile=0x448) returned 0x1 [0056.038] ReadFile (in: hFile=0x448, lpBuffer=0x218d1e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be7d8, lpOverlapped=0x0 | out: lpBuffer=0x218d1e0*, lpNumberOfBytesRead=0x3be7d8*=0x1000, lpOverlapped=0x0) returned 1 [0056.054] CloseHandle (hObject=0x448) returned 1 [0056.054] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\9mRe9.odt", nBufferLength=0x105, lpBuffer=0x3be270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\9mRe9.odt", lpFilePart=0x0) returned 0x41 [0056.054] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0056.054] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\9mRe9.odt" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\omrih\\gf2xpstl-3sswoqbl\\9mre9.odt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0056.055] GetFileType (hFile=0x448) returned 0x1 [0056.055] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6c0) returned 1 [0056.055] GetFileType (hFile=0x448) returned 0x1 [0056.055] WriteFile (in: hFile=0x448, lpBuffer=0x218af58*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be888, lpOverlapped=0x0 | out: lpBuffer=0x218af58*, lpNumberOfBytesWritten=0x3be888*=0x2000, lpOverlapped=0x0) returned 1 [0056.055] CloseHandle (hObject=0x448) returned 1 [0056.055] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\9mRe9.odt", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\9mRe9.odt", lpFilePart=0x0) returned 0x41 [0056.055] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\9mRe9.odt.xuy", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\9mRe9.odt.xuy", lpFilePart=0x0) returned 0x45 [0056.055] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0056.055] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\9mRe9.odt" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\omrih\\gf2xpstl-3sswoqbl\\9mre9.odt"), fInfoLevelId=0x0, lpFileInformation=0x3be8a0 | out: lpFileInformation=0x3be8a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c3ddba0, ftCreationTime.dwHighDateTime=0x1d45d09, ftLastAccessTime.dwLowDateTime=0xfc0bf700, ftLastAccessTime.dwHighDateTime=0x1d45b79, ftLastWriteTime.dwLowDateTime=0xd41c364, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x12f32)) returned 1 [0056.055] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0056.055] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\9mRe9.odt" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\omrih\\gf2xpstl-3sswoqbl\\9mre9.odt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\9mRe9.odt.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\omrih\\gf2xpstl-3sswoqbl\\9mre9.odt.xuy")) returned 1 [0056.056] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\9pdaonXHjn.xlsx", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\9pdaonXHjn.xlsx", lpFilePart=0x0) returned 0x47 [0056.056] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0056.056] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\9pdaonXHjn.xlsx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\omrih\\gf2xpstl-3sswoqbl\\9pdaonxhjn.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x2209550 | out: lpFileInformation=0x2209550*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35d949a0, ftCreationTime.dwHighDateTime=0x1d462f1, ftLastAccessTime.dwLowDateTime=0x509f9770, ftLastAccessTime.dwHighDateTime=0x1d46365, ftLastWriteTime.dwLowDateTime=0x509f9770, ftLastWriteTime.dwHighDateTime=0x1d46365, nFileSizeHigh=0x0, nFileSizeLow=0x161e1)) returned 1 [0056.056] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0056.056] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\9pdaonXHjn.xlsx", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\9pdaonXHjn.xlsx", lpFilePart=0x0) returned 0x47 [0056.056] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0056.056] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\9pdaonXHjn.xlsx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\omrih\\gf2xpstl-3sswoqbl\\9pdaonxhjn.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x2209698 | out: lpFileInformation=0x2209698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35d949a0, ftCreationTime.dwHighDateTime=0x1d462f1, ftLastAccessTime.dwLowDateTime=0x509f9770, ftLastAccessTime.dwHighDateTime=0x1d46365, ftLastWriteTime.dwLowDateTime=0x509f9770, ftLastWriteTime.dwHighDateTime=0x1d46365, nFileSizeHigh=0x0, nFileSizeLow=0x161e1)) returned 1 [0056.056] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0056.056] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\9pdaonXHjn.xlsx", nBufferLength=0x105, lpBuffer=0x3be270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\9pdaonXHjn.xlsx", lpFilePart=0x0) returned 0x47 [0056.056] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0056.056] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\9pdaonXHjn.xlsx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\omrih\\gf2xpstl-3sswoqbl\\9pdaonxhjn.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0056.057] GetFileType (hFile=0x448) returned 0x1 [0056.057] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6c0) returned 1 [0056.057] GetFileType (hFile=0x448) returned 0x1 [0056.057] ReadFile (in: hFile=0x448, lpBuffer=0x220ba58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be7d8, lpOverlapped=0x0 | out: lpBuffer=0x220ba58*, lpNumberOfBytesRead=0x3be7d8*=0x1000, lpOverlapped=0x0) returned 1 [0056.067] CloseHandle (hObject=0x448) returned 1 [0056.067] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\9pdaonXHjn.xlsx", nBufferLength=0x105, lpBuffer=0x3be270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\9pdaonXHjn.xlsx", lpFilePart=0x0) returned 0x47 [0056.067] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0056.067] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\9pdaonXHjn.xlsx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\omrih\\gf2xpstl-3sswoqbl\\9pdaonxhjn.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0056.068] GetFileType (hFile=0x448) returned 0x1 [0056.068] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6c0) returned 1 [0056.068] GetFileType (hFile=0x448) returned 0x1 [0056.068] WriteFile (in: hFile=0x448, lpBuffer=0x22097c0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be888, lpOverlapped=0x0 | out: lpBuffer=0x22097c0*, lpNumberOfBytesWritten=0x3be888*=0x2000, lpOverlapped=0x0) returned 1 [0056.068] CloseHandle (hObject=0x448) returned 1 [0056.068] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\9pdaonXHjn.xlsx", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\9pdaonXHjn.xlsx", lpFilePart=0x0) returned 0x47 [0056.068] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\9pdaonXHjn.xlsx.xuy", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\9pdaonXHjn.xlsx.xuy", lpFilePart=0x0) returned 0x4b [0056.068] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0056.068] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\9pdaonXHjn.xlsx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\omrih\\gf2xpstl-3sswoqbl\\9pdaonxhjn.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x3be8a0 | out: lpFileInformation=0x3be8a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35d949a0, ftCreationTime.dwHighDateTime=0x1d462f1, ftLastAccessTime.dwLowDateTime=0x509f9770, ftLastAccessTime.dwHighDateTime=0x1d46365, ftLastWriteTime.dwLowDateTime=0xd442693, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x161e1)) returned 1 [0056.068] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0056.068] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\9pdaonXHjn.xlsx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\omrih\\gf2xpstl-3sswoqbl\\9pdaonxhjn.xlsx"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\9pdaonXHjn.xlsx.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\omrih\\gf2xpstl-3sswoqbl\\9pdaonxhjn.xlsx.xuy")) returned 1 [0056.069] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\blgtot1emYp.ots", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\blgtot1emYp.ots", lpFilePart=0x0) returned 0x47 [0056.069] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0056.069] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\blgtot1emYp.ots" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\omrih\\gf2xpstl-3sswoqbl\\blgtot1emyp.ots"), fInfoLevelId=0x0, lpFileInformation=0x2287df0 | out: lpFileInformation=0x2287df0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69612b30, ftCreationTime.dwHighDateTime=0x1d458ce, ftLastAccessTime.dwLowDateTime=0xa193d310, ftLastAccessTime.dwHighDateTime=0x1d456a1, ftLastWriteTime.dwLowDateTime=0xa193d310, ftLastWriteTime.dwHighDateTime=0x1d456a1, nFileSizeHigh=0x0, nFileSizeLow=0xb5f3)) returned 1 [0056.069] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0056.069] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\blgtot1emYp.ots", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\blgtot1emYp.ots", lpFilePart=0x0) returned 0x47 [0056.069] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0056.069] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\blgtot1emYp.ots" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\omrih\\gf2xpstl-3sswoqbl\\blgtot1emyp.ots"), fInfoLevelId=0x0, lpFileInformation=0x2287f38 | out: lpFileInformation=0x2287f38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69612b30, ftCreationTime.dwHighDateTime=0x1d458ce, ftLastAccessTime.dwLowDateTime=0xa193d310, ftLastAccessTime.dwHighDateTime=0x1d456a1, ftLastWriteTime.dwLowDateTime=0xa193d310, ftLastWriteTime.dwHighDateTime=0x1d456a1, nFileSizeHigh=0x0, nFileSizeLow=0xb5f3)) returned 1 [0056.069] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0056.069] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\blgtot1emYp.ots", nBufferLength=0x105, lpBuffer=0x3be270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\blgtot1emYp.ots", lpFilePart=0x0) returned 0x47 [0056.069] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0056.069] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\blgtot1emYp.ots" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\omrih\\gf2xpstl-3sswoqbl\\blgtot1emyp.ots"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0056.070] GetFileType (hFile=0x448) returned 0x1 [0056.070] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6c0) returned 1 [0056.070] GetFileType (hFile=0x448) returned 0x1 [0056.070] ReadFile (in: hFile=0x448, lpBuffer=0x228a2f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be7d8, lpOverlapped=0x0 | out: lpBuffer=0x228a2f8*, lpNumberOfBytesRead=0x3be7d8*=0x1000, lpOverlapped=0x0) returned 1 [0056.081] CloseHandle (hObject=0x448) returned 1 [0056.081] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\blgtot1emYp.ots", nBufferLength=0x105, lpBuffer=0x3be270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\blgtot1emYp.ots", lpFilePart=0x0) returned 0x47 [0056.081] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0056.081] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\blgtot1emYp.ots" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\omrih\\gf2xpstl-3sswoqbl\\blgtot1emyp.ots"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0056.081] GetFileType (hFile=0x448) returned 0x1 [0056.081] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6c0) returned 1 [0056.081] GetFileType (hFile=0x448) returned 0x1 [0056.081] WriteFile (in: hFile=0x448, lpBuffer=0x2288060*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be888, lpOverlapped=0x0 | out: lpBuffer=0x2288060*, lpNumberOfBytesWritten=0x3be888*=0x2000, lpOverlapped=0x0) returned 1 [0056.081] CloseHandle (hObject=0x448) returned 1 [0056.081] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\blgtot1emYp.ots", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\blgtot1emYp.ots", lpFilePart=0x0) returned 0x47 [0056.081] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\blgtot1emYp.ots.xuy", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\blgtot1emYp.ots.xuy", lpFilePart=0x0) returned 0x4b [0056.081] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0056.081] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\blgtot1emYp.ots" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\omrih\\gf2xpstl-3sswoqbl\\blgtot1emyp.ots"), fInfoLevelId=0x0, lpFileInformation=0x3be8a0 | out: lpFileInformation=0x3be8a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69612b30, ftCreationTime.dwHighDateTime=0x1d458ce, ftLastAccessTime.dwLowDateTime=0xa193d310, ftLastAccessTime.dwHighDateTime=0x1d456a1, ftLastWriteTime.dwLowDateTime=0xd468b02, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xb5f3)) returned 1 [0056.082] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0056.082] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\blgtot1emYp.ots" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\omrih\\gf2xpstl-3sswoqbl\\blgtot1emyp.ots"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\blgtot1emYp.ots.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\omrih\\gf2xpstl-3sswoqbl\\blgtot1emyp.ots.xuy")) returned 1 [0056.082] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\f9CNAAX-CCQjG-zrLuqx.pptx", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\f9CNAAX-CCQjG-zrLuqx.pptx", lpFilePart=0x0) returned 0x51 [0056.082] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0056.082] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\f9CNAAX-CCQjG-zrLuqx.pptx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\omrih\\gf2xpstl-3sswoqbl\\f9cnaax-ccqjg-zrluqx.pptx"), fInfoLevelId=0x0, lpFileInformation=0x2306690 | out: lpFileInformation=0x2306690*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc233f330, ftCreationTime.dwHighDateTime=0x1d45b9b, ftLastAccessTime.dwLowDateTime=0x1bf71820, ftLastAccessTime.dwHighDateTime=0x1d45a57, ftLastWriteTime.dwLowDateTime=0x1bf71820, ftLastWriteTime.dwHighDateTime=0x1d45a57, nFileSizeHigh=0x0, nFileSizeLow=0xc3ce)) returned 1 [0056.082] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0056.082] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\f9CNAAX-CCQjG-zrLuqx.pptx", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\f9CNAAX-CCQjG-zrLuqx.pptx", lpFilePart=0x0) returned 0x51 [0056.082] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0056.082] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\f9CNAAX-CCQjG-zrLuqx.pptx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\omrih\\gf2xpstl-3sswoqbl\\f9cnaax-ccqjg-zrluqx.pptx"), fInfoLevelId=0x0, lpFileInformation=0x2306808 | out: lpFileInformation=0x2306808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc233f330, ftCreationTime.dwHighDateTime=0x1d45b9b, ftLastAccessTime.dwLowDateTime=0x1bf71820, ftLastAccessTime.dwHighDateTime=0x1d45a57, ftLastWriteTime.dwLowDateTime=0x1bf71820, ftLastWriteTime.dwHighDateTime=0x1d45a57, nFileSizeHigh=0x0, nFileSizeLow=0xc3ce)) returned 1 [0056.082] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0056.083] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\f9CNAAX-CCQjG-zrLuqx.pptx", nBufferLength=0x105, lpBuffer=0x3be270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\f9CNAAX-CCQjG-zrLuqx.pptx", lpFilePart=0x0) returned 0x51 [0056.083] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0056.083] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\f9CNAAX-CCQjG-zrLuqx.pptx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\omrih\\gf2xpstl-3sswoqbl\\f9cnaax-ccqjg-zrluqx.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0056.083] GetFileType (hFile=0x448) returned 0x1 [0056.083] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6c0) returned 1 [0056.083] GetFileType (hFile=0x448) returned 0x1 [0056.083] ReadFile (in: hFile=0x448, lpBuffer=0x2308c28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be7d8, lpOverlapped=0x0 | out: lpBuffer=0x2308c28*, lpNumberOfBytesRead=0x3be7d8*=0x1000, lpOverlapped=0x0) returned 1 [0056.123] CloseHandle (hObject=0x448) returned 1 [0056.124] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\f9CNAAX-CCQjG-zrLuqx.pptx", nBufferLength=0x105, lpBuffer=0x3be270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\f9CNAAX-CCQjG-zrLuqx.pptx", lpFilePart=0x0) returned 0x51 [0056.124] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0056.124] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\f9CNAAX-CCQjG-zrLuqx.pptx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\omrih\\gf2xpstl-3sswoqbl\\f9cnaax-ccqjg-zrluqx.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0056.124] GetFileType (hFile=0x448) returned 0x1 [0056.124] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6c0) returned 1 [0056.124] GetFileType (hFile=0x448) returned 0x1 [0056.124] WriteFile (in: hFile=0x448, lpBuffer=0x21555b8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be888, lpOverlapped=0x0 | out: lpBuffer=0x21555b8*, lpNumberOfBytesWritten=0x3be888*=0x2000, lpOverlapped=0x0) returned 1 [0056.124] CloseHandle (hObject=0x448) returned 1 [0056.124] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\f9CNAAX-CCQjG-zrLuqx.pptx", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\f9CNAAX-CCQjG-zrLuqx.pptx", lpFilePart=0x0) returned 0x51 [0056.124] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\f9CNAAX-CCQjG-zrLuqx.pptx.xuy", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\f9CNAAX-CCQjG-zrLuqx.pptx.xuy", lpFilePart=0x0) returned 0x55 [0056.124] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0056.125] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\f9CNAAX-CCQjG-zrLuqx.pptx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\omrih\\gf2xpstl-3sswoqbl\\f9cnaax-ccqjg-zrluqx.pptx"), fInfoLevelId=0x0, lpFileInformation=0x3be8a0 | out: lpFileInformation=0x3be8a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc233f330, ftCreationTime.dwHighDateTime=0x1d45b9b, ftLastAccessTime.dwLowDateTime=0x1bf71820, ftLastAccessTime.dwHighDateTime=0x1d45a57, ftLastWriteTime.dwLowDateTime=0xd4daf21, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xc3ce)) returned 1 [0056.125] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0056.125] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\f9CNAAX-CCQjG-zrLuqx.pptx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\omrih\\gf2xpstl-3sswoqbl\\f9cnaax-ccqjg-zrluqx.pptx"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\f9CNAAX-CCQjG-zrLuqx.pptx.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\omrih\\gf2xpstl-3sswoqbl\\f9cnaax-ccqjg-zrluqx.pptx.xuy")) returned 1 [0056.125] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\IoYP1j58wJWdG.odt", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\IoYP1j58wJWdG.odt", lpFilePart=0x0) returned 0x49 [0056.125] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0056.125] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\IoYP1j58wJWdG.odt" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\omrih\\gf2xpstl-3sswoqbl\\ioyp1j58wjwdg.odt"), fInfoLevelId=0x0, lpFileInformation=0x2185040 | out: lpFileInformation=0x2185040*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbefd3400, ftCreationTime.dwHighDateTime=0x1d462b3, ftLastAccessTime.dwLowDateTime=0x171f6ce0, ftLastAccessTime.dwHighDateTime=0x1d4599d, ftLastWriteTime.dwLowDateTime=0x171f6ce0, ftLastWriteTime.dwHighDateTime=0x1d4599d, nFileSizeHigh=0x0, nFileSizeLow=0xd645)) returned 1 [0056.126] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0056.126] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\IoYP1j58wJWdG.odt", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\IoYP1j58wJWdG.odt", lpFilePart=0x0) returned 0x49 [0056.126] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0056.126] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\IoYP1j58wJWdG.odt" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\omrih\\gf2xpstl-3sswoqbl\\ioyp1j58wjwdg.odt"), fInfoLevelId=0x0, lpFileInformation=0x2185198 | out: lpFileInformation=0x2185198*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbefd3400, ftCreationTime.dwHighDateTime=0x1d462b3, ftLastAccessTime.dwLowDateTime=0x171f6ce0, ftLastAccessTime.dwHighDateTime=0x1d4599d, ftLastWriteTime.dwLowDateTime=0x171f6ce0, ftLastWriteTime.dwHighDateTime=0x1d4599d, nFileSizeHigh=0x0, nFileSizeLow=0xd645)) returned 1 [0056.126] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0056.126] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\IoYP1j58wJWdG.odt", nBufferLength=0x105, lpBuffer=0x3be270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\IoYP1j58wJWdG.odt", lpFilePart=0x0) returned 0x49 [0056.126] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0056.126] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\IoYP1j58wJWdG.odt" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\omrih\\gf2xpstl-3sswoqbl\\ioyp1j58wjwdg.odt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0056.126] GetFileType (hFile=0x448) returned 0x1 [0056.126] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6c0) returned 1 [0056.126] GetFileType (hFile=0x448) returned 0x1 [0056.126] ReadFile (in: hFile=0x448, lpBuffer=0x2187578, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be7d8, lpOverlapped=0x0 | out: lpBuffer=0x2187578*, lpNumberOfBytesRead=0x3be7d8*=0x1000, lpOverlapped=0x0) returned 1 [0056.137] CloseHandle (hObject=0x448) returned 1 [0056.138] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\IoYP1j58wJWdG.odt", nBufferLength=0x105, lpBuffer=0x3be270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\IoYP1j58wJWdG.odt", lpFilePart=0x0) returned 0x49 [0056.138] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0056.138] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\IoYP1j58wJWdG.odt" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\omrih\\gf2xpstl-3sswoqbl\\ioyp1j58wjwdg.odt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0056.139] GetFileType (hFile=0x448) returned 0x1 [0056.139] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6c0) returned 1 [0056.139] GetFileType (hFile=0x448) returned 0x1 [0056.139] WriteFile (in: hFile=0x448, lpBuffer=0x21852d0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be888, lpOverlapped=0x0 | out: lpBuffer=0x21852d0*, lpNumberOfBytesWritten=0x3be888*=0x2000, lpOverlapped=0x0) returned 1 [0056.139] CloseHandle (hObject=0x448) returned 1 [0056.139] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\IoYP1j58wJWdG.odt", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\IoYP1j58wJWdG.odt", lpFilePart=0x0) returned 0x49 [0056.139] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\IoYP1j58wJWdG.odt.xuy", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\IoYP1j58wJWdG.odt.xuy", lpFilePart=0x0) returned 0x4d [0056.139] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0056.139] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\IoYP1j58wJWdG.odt" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\omrih\\gf2xpstl-3sswoqbl\\ioyp1j58wjwdg.odt"), fInfoLevelId=0x0, lpFileInformation=0x3be8a0 | out: lpFileInformation=0x3be8a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbefd3400, ftCreationTime.dwHighDateTime=0x1d462b3, ftLastAccessTime.dwLowDateTime=0x171f6ce0, ftLastAccessTime.dwHighDateTime=0x1d4599d, ftLastWriteTime.dwLowDateTime=0xd5010cc, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xd645)) returned 1 [0056.139] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0056.139] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\IoYP1j58wJWdG.odt" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\omrih\\gf2xpstl-3sswoqbl\\ioyp1j58wjwdg.odt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\IoYP1j58wJWdG.odt.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\omrih\\gf2xpstl-3sswoqbl\\ioyp1j58wjwdg.odt.xuy")) returned 1 [0056.140] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\q9PB6-.pptx", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\q9PB6-.pptx", lpFilePart=0x0) returned 0x43 [0056.140] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0056.140] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\q9PB6-.pptx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\omrih\\gf2xpstl-3sswoqbl\\q9pb6-.pptx"), fInfoLevelId=0x0, lpFileInformation=0x2203938 | out: lpFileInformation=0x2203938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2ba44e0, ftCreationTime.dwHighDateTime=0x1d45a14, ftLastAccessTime.dwLowDateTime=0xc28666c0, ftLastAccessTime.dwHighDateTime=0x1d45fbe, ftLastWriteTime.dwLowDateTime=0xc28666c0, ftLastWriteTime.dwHighDateTime=0x1d45fbe, nFileSizeHigh=0x0, nFileSizeLow=0x14889)) returned 1 [0056.140] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0056.140] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\q9PB6-.pptx", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\q9PB6-.pptx", lpFilePart=0x0) returned 0x43 [0056.140] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0056.140] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\q9PB6-.pptx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\omrih\\gf2xpstl-3sswoqbl\\q9pb6-.pptx"), fInfoLevelId=0x0, lpFileInformation=0x2203a70 | out: lpFileInformation=0x2203a70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2ba44e0, ftCreationTime.dwHighDateTime=0x1d45a14, ftLastAccessTime.dwLowDateTime=0xc28666c0, ftLastAccessTime.dwHighDateTime=0x1d45fbe, ftLastWriteTime.dwLowDateTime=0xc28666c0, ftLastWriteTime.dwHighDateTime=0x1d45fbe, nFileSizeHigh=0x0, nFileSizeLow=0x14889)) returned 1 [0056.140] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0056.140] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\q9PB6-.pptx", nBufferLength=0x105, lpBuffer=0x3be270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\q9PB6-.pptx", lpFilePart=0x0) returned 0x43 [0056.140] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0056.140] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\q9PB6-.pptx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\omrih\\gf2xpstl-3sswoqbl\\q9pb6-.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0056.141] GetFileType (hFile=0x448) returned 0x1 [0056.141] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6c0) returned 1 [0056.141] GetFileType (hFile=0x448) returned 0x1 [0056.141] ReadFile (in: hFile=0x448, lpBuffer=0x2205e10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be7d8, lpOverlapped=0x0 | out: lpBuffer=0x2205e10*, lpNumberOfBytesRead=0x3be7d8*=0x1000, lpOverlapped=0x0) returned 1 [0056.152] CloseHandle (hObject=0x448) returned 1 [0056.152] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\q9PB6-.pptx", nBufferLength=0x105, lpBuffer=0x3be270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\q9PB6-.pptx", lpFilePart=0x0) returned 0x43 [0056.152] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0056.152] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\q9PB6-.pptx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\omrih\\gf2xpstl-3sswoqbl\\q9pb6-.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0056.152] GetFileType (hFile=0x448) returned 0x1 [0056.152] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6c0) returned 1 [0056.152] GetFileType (hFile=0x448) returned 0x1 [0056.152] WriteFile (in: hFile=0x448, lpBuffer=0x2203b88*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be888, lpOverlapped=0x0 | out: lpBuffer=0x2203b88*, lpNumberOfBytesWritten=0x3be888*=0x2000, lpOverlapped=0x0) returned 1 [0056.153] CloseHandle (hObject=0x448) returned 1 [0056.153] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\q9PB6-.pptx", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\q9PB6-.pptx", lpFilePart=0x0) returned 0x43 [0056.153] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\q9PB6-.pptx.xuy", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\q9PB6-.pptx.xuy", lpFilePart=0x0) returned 0x47 [0056.153] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0056.153] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\q9PB6-.pptx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\omrih\\gf2xpstl-3sswoqbl\\q9pb6-.pptx"), fInfoLevelId=0x0, lpFileInformation=0x3be8a0 | out: lpFileInformation=0x3be8a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2ba44e0, ftCreationTime.dwHighDateTime=0x1d45a14, ftLastAccessTime.dwLowDateTime=0xc28666c0, ftLastAccessTime.dwHighDateTime=0x1d45fbe, ftLastWriteTime.dwLowDateTime=0xd5010cc, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x14889)) returned 1 [0056.154] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0056.154] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\q9PB6-.pptx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\omrih\\gf2xpstl-3sswoqbl\\q9pb6-.pptx"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\q9PB6-.pptx.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\omrih\\gf2xpstl-3sswoqbl\\q9pb6-.pptx.xuy")) returned 1 [0056.154] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\Sl1P.csv", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\Sl1P.csv", lpFilePart=0x0) returned 0x40 [0056.154] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0056.154] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\Sl1P.csv" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\omrih\\gf2xpstl-3sswoqbl\\sl1p.csv"), fInfoLevelId=0x0, lpFileInformation=0x2282180 | out: lpFileInformation=0x2282180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c091600, ftCreationTime.dwHighDateTime=0x1d463cc, ftLastAccessTime.dwLowDateTime=0x49d42480, ftLastAccessTime.dwHighDateTime=0x1d45981, ftLastWriteTime.dwLowDateTime=0x49d42480, ftLastWriteTime.dwHighDateTime=0x1d45981, nFileSizeHigh=0x0, nFileSizeLow=0x170a1)) returned 1 [0056.154] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0056.154] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\Sl1P.csv", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\Sl1P.csv", lpFilePart=0x0) returned 0x40 [0056.154] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0056.154] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\Sl1P.csv" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\omrih\\gf2xpstl-3sswoqbl\\sl1p.csv"), fInfoLevelId=0x0, lpFileInformation=0x22822b8 | out: lpFileInformation=0x22822b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c091600, ftCreationTime.dwHighDateTime=0x1d463cc, ftLastAccessTime.dwLowDateTime=0x49d42480, ftLastAccessTime.dwHighDateTime=0x1d45981, ftLastWriteTime.dwLowDateTime=0x49d42480, ftLastWriteTime.dwHighDateTime=0x1d45981, nFileSizeHigh=0x0, nFileSizeLow=0x170a1)) returned 1 [0056.154] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0056.155] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\Sl1P.csv", nBufferLength=0x105, lpBuffer=0x3be270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\Sl1P.csv", lpFilePart=0x0) returned 0x40 [0056.155] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0056.155] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\Sl1P.csv" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\omrih\\gf2xpstl-3sswoqbl\\sl1p.csv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0056.155] GetFileType (hFile=0x448) returned 0x1 [0056.155] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6c0) returned 1 [0056.155] GetFileType (hFile=0x448) returned 0x1 [0056.155] ReadFile (in: hFile=0x448, lpBuffer=0x2284658, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be7d8, lpOverlapped=0x0 | out: lpBuffer=0x2284658*, lpNumberOfBytesRead=0x3be7d8*=0x1000, lpOverlapped=0x0) returned 1 [0056.165] CloseHandle (hObject=0x448) returned 1 [0056.165] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\Sl1P.csv", nBufferLength=0x105, lpBuffer=0x3be270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\Sl1P.csv", lpFilePart=0x0) returned 0x40 [0056.165] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0056.165] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\Sl1P.csv" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\omrih\\gf2xpstl-3sswoqbl\\sl1p.csv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0056.165] GetFileType (hFile=0x448) returned 0x1 [0056.165] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6c0) returned 1 [0056.165] GetFileType (hFile=0x448) returned 0x1 [0056.165] WriteFile (in: hFile=0x448, lpBuffer=0x22823d0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be888, lpOverlapped=0x0 | out: lpBuffer=0x22823d0*, lpNumberOfBytesWritten=0x3be888*=0x2000, lpOverlapped=0x0) returned 1 [0056.165] CloseHandle (hObject=0x448) returned 1 [0056.166] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\Sl1P.csv", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\Sl1P.csv", lpFilePart=0x0) returned 0x40 [0056.166] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\Sl1P.csv.xuy", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\Sl1P.csv.xuy", lpFilePart=0x0) returned 0x44 [0056.166] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0056.166] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\Sl1P.csv" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\omrih\\gf2xpstl-3sswoqbl\\sl1p.csv"), fInfoLevelId=0x0, lpFileInformation=0x3be8a0 | out: lpFileInformation=0x3be8a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c091600, ftCreationTime.dwHighDateTime=0x1d463cc, ftLastAccessTime.dwLowDateTime=0x49d42480, ftLastAccessTime.dwHighDateTime=0x1d45981, ftLastWriteTime.dwLowDateTime=0xd5273b4, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x170a1)) returned 1 [0056.166] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0056.166] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\Sl1P.csv" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\omrih\\gf2xpstl-3sswoqbl\\sl1p.csv"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\Sl1P.csv.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\omrih\\gf2xpstl-3sswoqbl\\sl1p.csv.xuy")) returned 1 [0056.166] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\TllDAUU2CxF.csv", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\TllDAUU2CxF.csv", lpFilePart=0x0) returned 0x47 [0056.166] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0056.167] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\TllDAUU2CxF.csv" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\omrih\\gf2xpstl-3sswoqbl\\tlldauu2cxf.csv"), fInfoLevelId=0x0, lpFileInformation=0x23009c8 | out: lpFileInformation=0x23009c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb993a00, ftCreationTime.dwHighDateTime=0x1d45dd4, ftLastAccessTime.dwLowDateTime=0x1d227160, ftLastAccessTime.dwHighDateTime=0x1d45f3c, ftLastWriteTime.dwLowDateTime=0x1d227160, ftLastWriteTime.dwHighDateTime=0x1d45f3c, nFileSizeHigh=0x0, nFileSizeLow=0x13520)) returned 1 [0056.167] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0056.167] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\TllDAUU2CxF.csv", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\TllDAUU2CxF.csv", lpFilePart=0x0) returned 0x47 [0056.167] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0056.167] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\TllDAUU2CxF.csv" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\omrih\\gf2xpstl-3sswoqbl\\tlldauu2cxf.csv"), fInfoLevelId=0x0, lpFileInformation=0x2300b10 | out: lpFileInformation=0x2300b10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb993a00, ftCreationTime.dwHighDateTime=0x1d45dd4, ftLastAccessTime.dwLowDateTime=0x1d227160, ftLastAccessTime.dwHighDateTime=0x1d45f3c, ftLastWriteTime.dwLowDateTime=0x1d227160, ftLastWriteTime.dwHighDateTime=0x1d45f3c, nFileSizeHigh=0x0, nFileSizeLow=0x13520)) returned 1 [0056.167] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0056.167] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\TllDAUU2CxF.csv", nBufferLength=0x105, lpBuffer=0x3be270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\TllDAUU2CxF.csv", lpFilePart=0x0) returned 0x47 [0056.167] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0056.167] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\TllDAUU2CxF.csv" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\omrih\\gf2xpstl-3sswoqbl\\tlldauu2cxf.csv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0056.167] GetFileType (hFile=0x448) returned 0x1 [0056.167] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6c0) returned 1 [0056.167] GetFileType (hFile=0x448) returned 0x1 [0056.167] ReadFile (in: hFile=0x448, lpBuffer=0x2302ed0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be7d8, lpOverlapped=0x0 | out: lpBuffer=0x2302ed0*, lpNumberOfBytesRead=0x3be7d8*=0x1000, lpOverlapped=0x0) returned 1 [0056.207] CloseHandle (hObject=0x448) returned 1 [0056.207] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\TllDAUU2CxF.csv", nBufferLength=0x105, lpBuffer=0x3be270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\TllDAUU2CxF.csv", lpFilePart=0x0) returned 0x47 [0056.207] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0056.207] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\TllDAUU2CxF.csv" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\omrih\\gf2xpstl-3sswoqbl\\tlldauu2cxf.csv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0056.208] GetFileType (hFile=0x448) returned 0x1 [0056.208] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6c0) returned 1 [0056.208] GetFileType (hFile=0x448) returned 0x1 [0056.208] WriteFile (in: hFile=0x448, lpBuffer=0x21555b8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be888, lpOverlapped=0x0 | out: lpBuffer=0x21555b8*, lpNumberOfBytesWritten=0x3be888*=0x2000, lpOverlapped=0x0) returned 1 [0056.208] CloseHandle (hObject=0x448) returned 1 [0056.208] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\TllDAUU2CxF.csv", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\TllDAUU2CxF.csv", lpFilePart=0x0) returned 0x47 [0056.208] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\TllDAUU2CxF.csv.xuy", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\TllDAUU2CxF.csv.xuy", lpFilePart=0x0) returned 0x4b [0056.208] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0056.208] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\TllDAUU2CxF.csv" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\omrih\\gf2xpstl-3sswoqbl\\tlldauu2cxf.csv"), fInfoLevelId=0x0, lpFileInformation=0x3be8a0 | out: lpFileInformation=0x3be8a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb993a00, ftCreationTime.dwHighDateTime=0x1d45dd4, ftLastAccessTime.dwLowDateTime=0x1d227160, ftLastAccessTime.dwHighDateTime=0x1d45f3c, ftLastWriteTime.dwLowDateTime=0xd59adaa, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x13520)) returned 1 [0056.208] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0056.208] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\TllDAUU2CxF.csv" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\omrih\\gf2xpstl-3sswoqbl\\tlldauu2cxf.csv"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\TllDAUU2CxF.csv.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\omrih\\gf2xpstl-3sswoqbl\\tlldauu2cxf.csv.xuy")) returned 1 [0056.209] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\wcIk.doc", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\wcIk.doc", lpFilePart=0x0) returned 0x40 [0056.209] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0056.209] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\wcIk.doc" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\omrih\\gf2xpstl-3sswoqbl\\wcik.doc"), fInfoLevelId=0x0, lpFileInformation=0x217f258 | out: lpFileInformation=0x217f258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7af60150, ftCreationTime.dwHighDateTime=0x1d459cc, ftLastAccessTime.dwLowDateTime=0x2ca75540, ftLastAccessTime.dwHighDateTime=0x1d45db3, ftLastWriteTime.dwLowDateTime=0x2ca75540, ftLastWriteTime.dwHighDateTime=0x1d45db3, nFileSizeHigh=0x0, nFileSizeLow=0x10a3a)) returned 1 [0056.209] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0056.209] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\wcIk.doc", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\wcIk.doc", lpFilePart=0x0) returned 0x40 [0056.209] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0056.209] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\wcIk.doc" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\omrih\\gf2xpstl-3sswoqbl\\wcik.doc"), fInfoLevelId=0x0, lpFileInformation=0x217f390 | out: lpFileInformation=0x217f390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7af60150, ftCreationTime.dwHighDateTime=0x1d459cc, ftLastAccessTime.dwLowDateTime=0x2ca75540, ftLastAccessTime.dwHighDateTime=0x1d45db3, ftLastWriteTime.dwLowDateTime=0x2ca75540, ftLastWriteTime.dwHighDateTime=0x1d45db3, nFileSizeHigh=0x0, nFileSizeLow=0x10a3a)) returned 1 [0056.209] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0056.209] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\wcIk.doc", nBufferLength=0x105, lpBuffer=0x3be270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\wcIk.doc", lpFilePart=0x0) returned 0x40 [0056.209] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0056.209] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\wcIk.doc" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\omrih\\gf2xpstl-3sswoqbl\\wcik.doc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0056.210] GetFileType (hFile=0x448) returned 0x1 [0056.210] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6c0) returned 1 [0056.210] GetFileType (hFile=0x448) returned 0x1 [0056.210] ReadFile (in: hFile=0x448, lpBuffer=0x2181730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be7d8, lpOverlapped=0x0 | out: lpBuffer=0x2181730*, lpNumberOfBytesRead=0x3be7d8*=0x1000, lpOverlapped=0x0) returned 1 [0056.222] CloseHandle (hObject=0x448) returned 1 [0056.222] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\wcIk.doc", nBufferLength=0x105, lpBuffer=0x3be270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\wcIk.doc", lpFilePart=0x0) returned 0x40 [0056.222] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0056.222] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\wcIk.doc" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\omrih\\gf2xpstl-3sswoqbl\\wcik.doc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0056.222] GetFileType (hFile=0x448) returned 0x1 [0056.222] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6c0) returned 1 [0056.222] GetFileType (hFile=0x448) returned 0x1 [0056.222] WriteFile (in: hFile=0x448, lpBuffer=0x217f4a8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be888, lpOverlapped=0x0 | out: lpBuffer=0x217f4a8*, lpNumberOfBytesWritten=0x3be888*=0x2000, lpOverlapped=0x0) returned 1 [0056.223] CloseHandle (hObject=0x448) returned 1 [0056.223] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\wcIk.doc", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\wcIk.doc", lpFilePart=0x0) returned 0x40 [0056.223] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\wcIk.doc.xuy", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\wcIk.doc.xuy", lpFilePart=0x0) returned 0x44 [0056.223] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0056.223] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\wcIk.doc" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\omrih\\gf2xpstl-3sswoqbl\\wcik.doc"), fInfoLevelId=0x0, lpFileInformation=0x3be8a0 | out: lpFileInformation=0x3be8a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7af60150, ftCreationTime.dwHighDateTime=0x1d459cc, ftLastAccessTime.dwLowDateTime=0x2ca75540, ftLastAccessTime.dwHighDateTime=0x1d45db3, ftLastWriteTime.dwLowDateTime=0xd5c016e, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x10a3a)) returned 1 [0056.223] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0056.223] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\wcIk.doc" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\omrih\\gf2xpstl-3sswoqbl\\wcik.doc"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\wcIk.doc.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\omrih\\gf2xpstl-3sswoqbl\\wcik.doc.xuy")) returned 1 [0056.224] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\XILJaPf2QbTSe0.ppt", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\XILJaPf2QbTSe0.ppt", lpFilePart=0x0) returned 0x4a [0056.224] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0056.224] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\XILJaPf2QbTSe0.ppt" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\omrih\\gf2xpstl-3sswoqbl\\xiljapf2qbtse0.ppt"), fInfoLevelId=0x0, lpFileInformation=0x21fdaa0 | out: lpFileInformation=0x21fdaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2912b60, ftCreationTime.dwHighDateTime=0x1d465ce, ftLastAccessTime.dwLowDateTime=0x5e652ed0, ftLastAccessTime.dwHighDateTime=0x1d4617e, ftLastWriteTime.dwLowDateTime=0x5e652ed0, ftLastWriteTime.dwHighDateTime=0x1d4617e, nFileSizeHigh=0x0, nFileSizeLow=0x16a62)) returned 1 [0056.224] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0056.224] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\XILJaPf2QbTSe0.ppt", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\XILJaPf2QbTSe0.ppt", lpFilePart=0x0) returned 0x4a [0056.224] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0056.224] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\XILJaPf2QbTSe0.ppt" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\omrih\\gf2xpstl-3sswoqbl\\xiljapf2qbtse0.ppt"), fInfoLevelId=0x0, lpFileInformation=0x21fdbf8 | out: lpFileInformation=0x21fdbf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2912b60, ftCreationTime.dwHighDateTime=0x1d465ce, ftLastAccessTime.dwLowDateTime=0x5e652ed0, ftLastAccessTime.dwHighDateTime=0x1d4617e, ftLastWriteTime.dwLowDateTime=0x5e652ed0, ftLastWriteTime.dwHighDateTime=0x1d4617e, nFileSizeHigh=0x0, nFileSizeLow=0x16a62)) returned 1 [0056.224] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0056.224] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\XILJaPf2QbTSe0.ppt", nBufferLength=0x105, lpBuffer=0x3be270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\XILJaPf2QbTSe0.ppt", lpFilePart=0x0) returned 0x4a [0056.224] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0056.224] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\XILJaPf2QbTSe0.ppt" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\omrih\\gf2xpstl-3sswoqbl\\xiljapf2qbtse0.ppt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0056.224] GetFileType (hFile=0x448) returned 0x1 [0056.224] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6c0) returned 1 [0056.224] GetFileType (hFile=0x448) returned 0x1 [0056.224] ReadFile (in: hFile=0x448, lpBuffer=0x21fffd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be7d8, lpOverlapped=0x0 | out: lpBuffer=0x21fffd8*, lpNumberOfBytesRead=0x3be7d8*=0x1000, lpOverlapped=0x0) returned 1 [0056.235] CloseHandle (hObject=0x448) returned 1 [0056.235] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\XILJaPf2QbTSe0.ppt", nBufferLength=0x105, lpBuffer=0x3be270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\XILJaPf2QbTSe0.ppt", lpFilePart=0x0) returned 0x4a [0056.235] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0056.235] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\XILJaPf2QbTSe0.ppt" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\omrih\\gf2xpstl-3sswoqbl\\xiljapf2qbtse0.ppt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0056.235] GetFileType (hFile=0x448) returned 0x1 [0056.235] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6c0) returned 1 [0056.235] GetFileType (hFile=0x448) returned 0x1 [0056.235] WriteFile (in: hFile=0x448, lpBuffer=0x21fdd30*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be888, lpOverlapped=0x0 | out: lpBuffer=0x21fdd30*, lpNumberOfBytesWritten=0x3be888*=0x2000, lpOverlapped=0x0) returned 1 [0056.235] CloseHandle (hObject=0x448) returned 1 [0056.235] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\XILJaPf2QbTSe0.ppt", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\XILJaPf2QbTSe0.ppt", lpFilePart=0x0) returned 0x4a [0056.235] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\XILJaPf2QbTSe0.ppt.xuy", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\XILJaPf2QbTSe0.ppt.xuy", lpFilePart=0x0) returned 0x4e [0056.235] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0056.236] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\XILJaPf2QbTSe0.ppt" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\omrih\\gf2xpstl-3sswoqbl\\xiljapf2qbtse0.ppt"), fInfoLevelId=0x0, lpFileInformation=0x3be8a0 | out: lpFileInformation=0x3be8a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2912b60, ftCreationTime.dwHighDateTime=0x1d465ce, ftLastAccessTime.dwLowDateTime=0x5e652ed0, ftLastAccessTime.dwHighDateTime=0x1d4617e, ftLastWriteTime.dwLowDateTime=0xd5e5f73, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x16a62)) returned 1 [0056.236] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0056.236] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\XILJaPf2QbTSe0.ppt" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\omrih\\gf2xpstl-3sswoqbl\\xiljapf2qbtse0.ppt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\gf2Xpstl-3SsWOQBl\\XILJaPf2QbTSe0.ppt.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\omrih\\gf2xpstl-3sswoqbl\\xiljapf2qbtse0.ppt.xuy")) returned 1 [0056.236] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0056.236] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\KeUJ5oCueYQJJFzt", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\KeUJ5oCueYQJJFzt", lpFilePart=0x0) returned 0x36 [0056.236] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\KeUJ5oCueYQJJFzt\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\KeUJ5oCueYQJJFzt\\", lpFilePart=0x0) returned 0x37 [0056.236] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\KeUJ5oCueYQJJFzt\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d7c70 [0056.237] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0056.237] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0056.237] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0056.237] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0056.237] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0056.237] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0056.237] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0056.237] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0056.237] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0056.237] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0056.237] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0056.237] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0056.237] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\KeUJ5oCueYQJJFzt", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\KeUJ5oCueYQJJFzt", lpFilePart=0x0) returned 0x36 [0056.238] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\KeUJ5oCueYQJJFzt\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\KeUJ5oCueYQJJFzt\\", lpFilePart=0x0) returned 0x37 [0056.238] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\KeUJ5oCueYQJJFzt\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d7550 [0056.238] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0056.238] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0056.238] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0056.238] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0056.238] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0056.238] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0056.239] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0056.239] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0056.239] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0056.239] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0056.239] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0056.239] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\KeUJ5oCueYQJJFzt\\CtG65B.ppt", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\KeUJ5oCueYQJJFzt\\CtG65B.ppt", lpFilePart=0x0) returned 0x41 [0056.239] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0056.239] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\KeUJ5oCueYQJJFzt\\CtG65B.ppt" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\omrih\\keuj5ocueyqjjfzt\\ctg65b.ppt"), fInfoLevelId=0x0, lpFileInformation=0x227f378 | out: lpFileInformation=0x227f378*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4889b70, ftCreationTime.dwHighDateTime=0x1d461e5, ftLastAccessTime.dwLowDateTime=0x9cdd5590, ftLastAccessTime.dwHighDateTime=0x1d45a33, ftLastWriteTime.dwLowDateTime=0x9cdd5590, ftLastWriteTime.dwHighDateTime=0x1d45a33, nFileSizeHigh=0x0, nFileSizeLow=0x1427e)) returned 1 [0056.239] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0056.239] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\KeUJ5oCueYQJJFzt\\CtG65B.ppt", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\KeUJ5oCueYQJJFzt\\CtG65B.ppt", lpFilePart=0x0) returned 0x41 [0056.239] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0056.239] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\KeUJ5oCueYQJJFzt\\CtG65B.ppt" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\omrih\\keuj5ocueyqjjfzt\\ctg65b.ppt"), fInfoLevelId=0x0, lpFileInformation=0x227f4b0 | out: lpFileInformation=0x227f4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4889b70, ftCreationTime.dwHighDateTime=0x1d461e5, ftLastAccessTime.dwLowDateTime=0x9cdd5590, ftLastAccessTime.dwHighDateTime=0x1d45a33, ftLastWriteTime.dwLowDateTime=0x9cdd5590, ftLastWriteTime.dwHighDateTime=0x1d45a33, nFileSizeHigh=0x0, nFileSizeLow=0x1427e)) returned 1 [0056.239] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0056.239] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\KeUJ5oCueYQJJFzt\\CtG65B.ppt", nBufferLength=0x105, lpBuffer=0x3be270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\KeUJ5oCueYQJJFzt\\CtG65B.ppt", lpFilePart=0x0) returned 0x41 [0056.239] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0056.239] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\KeUJ5oCueYQJJFzt\\CtG65B.ppt" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\omrih\\keuj5ocueyqjjfzt\\ctg65b.ppt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0056.240] GetFileType (hFile=0x448) returned 0x1 [0056.240] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6c0) returned 1 [0056.240] GetFileType (hFile=0x448) returned 0x1 [0056.240] ReadFile (in: hFile=0x448, lpBuffer=0x2281850, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be7d8, lpOverlapped=0x0 | out: lpBuffer=0x2281850*, lpNumberOfBytesRead=0x3be7d8*=0x1000, lpOverlapped=0x0) returned 1 [0056.250] CloseHandle (hObject=0x448) returned 1 [0056.250] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\KeUJ5oCueYQJJFzt\\CtG65B.ppt", nBufferLength=0x105, lpBuffer=0x3be270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\KeUJ5oCueYQJJFzt\\CtG65B.ppt", lpFilePart=0x0) returned 0x41 [0056.250] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0056.250] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\KeUJ5oCueYQJJFzt\\CtG65B.ppt" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\omrih\\keuj5ocueyqjjfzt\\ctg65b.ppt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0056.250] GetFileType (hFile=0x448) returned 0x1 [0056.250] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6c0) returned 1 [0056.250] GetFileType (hFile=0x448) returned 0x1 [0056.250] WriteFile (in: hFile=0x448, lpBuffer=0x227f5c8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be888, lpOverlapped=0x0 | out: lpBuffer=0x227f5c8*, lpNumberOfBytesWritten=0x3be888*=0x2000, lpOverlapped=0x0) returned 1 [0056.251] CloseHandle (hObject=0x448) returned 1 [0056.251] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\KeUJ5oCueYQJJFzt\\CtG65B.ppt", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\KeUJ5oCueYQJJFzt\\CtG65B.ppt", lpFilePart=0x0) returned 0x41 [0056.251] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\KeUJ5oCueYQJJFzt\\CtG65B.ppt.xuy", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\KeUJ5oCueYQJJFzt\\CtG65B.ppt.xuy", lpFilePart=0x0) returned 0x45 [0056.251] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0056.251] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\KeUJ5oCueYQJJFzt\\CtG65B.ppt" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\omrih\\keuj5ocueyqjjfzt\\ctg65b.ppt"), fInfoLevelId=0x0, lpFileInformation=0x3be8a0 | out: lpFileInformation=0x3be8a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4889b70, ftCreationTime.dwHighDateTime=0x1d461e5, ftLastAccessTime.dwLowDateTime=0x9cdd5590, ftLastAccessTime.dwHighDateTime=0x1d45a33, ftLastWriteTime.dwLowDateTime=0xd60c1d6, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x1427e)) returned 1 [0056.251] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0056.251] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\KeUJ5oCueYQJJFzt\\CtG65B.ppt" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\omrih\\keuj5ocueyqjjfzt\\ctg65b.ppt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\KeUJ5oCueYQJJFzt\\CtG65B.ppt.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\omrih\\keuj5ocueyqjjfzt\\ctg65b.ppt.xuy")) returned 1 [0056.251] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\KeUJ5oCueYQJJFzt\\HE1R.docx", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\KeUJ5oCueYQJJFzt\\HE1R.docx", lpFilePart=0x0) returned 0x40 [0056.251] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0056.251] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\KeUJ5oCueYQJJFzt\\HE1R.docx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\omrih\\keuj5ocueyqjjfzt\\he1r.docx"), fInfoLevelId=0x0, lpFileInformation=0x22fdbc0 | out: lpFileInformation=0x22fdbc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x873aa570, ftCreationTime.dwHighDateTime=0x1d4598f, ftLastAccessTime.dwLowDateTime=0xacfb7ed0, ftLastAccessTime.dwHighDateTime=0x1d4578f, ftLastWriteTime.dwLowDateTime=0xacfb7ed0, ftLastWriteTime.dwHighDateTime=0x1d4578f, nFileSizeHigh=0x0, nFileSizeLow=0x11334)) returned 1 [0056.252] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0056.252] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\KeUJ5oCueYQJJFzt\\HE1R.docx", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\KeUJ5oCueYQJJFzt\\HE1R.docx", lpFilePart=0x0) returned 0x40 [0056.252] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0056.252] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\KeUJ5oCueYQJJFzt\\HE1R.docx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\omrih\\keuj5ocueyqjjfzt\\he1r.docx"), fInfoLevelId=0x0, lpFileInformation=0x22fdcf8 | out: lpFileInformation=0x22fdcf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x873aa570, ftCreationTime.dwHighDateTime=0x1d4598f, ftLastAccessTime.dwLowDateTime=0xacfb7ed0, ftLastAccessTime.dwHighDateTime=0x1d4578f, ftLastWriteTime.dwLowDateTime=0xacfb7ed0, ftLastWriteTime.dwHighDateTime=0x1d4578f, nFileSizeHigh=0x0, nFileSizeLow=0x11334)) returned 1 [0056.252] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0056.252] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\KeUJ5oCueYQJJFzt\\HE1R.docx", nBufferLength=0x105, lpBuffer=0x3be270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\KeUJ5oCueYQJJFzt\\HE1R.docx", lpFilePart=0x0) returned 0x40 [0056.252] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0056.252] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\KeUJ5oCueYQJJFzt\\HE1R.docx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\omrih\\keuj5ocueyqjjfzt\\he1r.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0056.252] GetFileType (hFile=0x448) returned 0x1 [0056.252] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6c0) returned 1 [0056.252] GetFileType (hFile=0x448) returned 0x1 [0056.252] ReadFile (in: hFile=0x448, lpBuffer=0x2300098, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be7d8, lpOverlapped=0x0 | out: lpBuffer=0x2300098*, lpNumberOfBytesRead=0x3be7d8*=0x1000, lpOverlapped=0x0) returned 1 [0056.294] CloseHandle (hObject=0x448) returned 1 [0056.294] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\KeUJ5oCueYQJJFzt\\HE1R.docx", nBufferLength=0x105, lpBuffer=0x3be270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\KeUJ5oCueYQJJFzt\\HE1R.docx", lpFilePart=0x0) returned 0x40 [0056.294] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0056.294] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\KeUJ5oCueYQJJFzt\\HE1R.docx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\omrih\\keuj5ocueyqjjfzt\\he1r.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0056.295] GetFileType (hFile=0x448) returned 0x1 [0056.295] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6c0) returned 1 [0056.295] GetFileType (hFile=0x448) returned 0x1 [0056.295] WriteFile (in: hFile=0x448, lpBuffer=0x2155220*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be888, lpOverlapped=0x0 | out: lpBuffer=0x2155220*, lpNumberOfBytesWritten=0x3be888*=0x2000, lpOverlapped=0x0) returned 1 [0056.295] CloseHandle (hObject=0x448) returned 1 [0056.295] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\KeUJ5oCueYQJJFzt\\HE1R.docx", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\KeUJ5oCueYQJJFzt\\HE1R.docx", lpFilePart=0x0) returned 0x40 [0056.295] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\KeUJ5oCueYQJJFzt\\HE1R.docx.xuy", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\KeUJ5oCueYQJJFzt\\HE1R.docx.xuy", lpFilePart=0x0) returned 0x44 [0056.295] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0056.295] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\KeUJ5oCueYQJJFzt\\HE1R.docx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\omrih\\keuj5ocueyqjjfzt\\he1r.docx"), fInfoLevelId=0x0, lpFileInformation=0x3be8a0 | out: lpFileInformation=0x3be8a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x873aa570, ftCreationTime.dwHighDateTime=0x1d4598f, ftLastAccessTime.dwLowDateTime=0xacfb7ed0, ftLastAccessTime.dwHighDateTime=0x1d4578f, ftLastWriteTime.dwLowDateTime=0xd67ebcd, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x11334)) returned 1 [0056.295] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0056.295] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\KeUJ5oCueYQJJFzt\\HE1R.docx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\omrih\\keuj5ocueyqjjfzt\\he1r.docx"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\KeUJ5oCueYQJJFzt\\HE1R.docx.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\omrih\\keuj5ocueyqjjfzt\\he1r.docx.xuy")) returned 1 [0056.296] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\KeUJ5oCueYQJJFzt\\HFrGs.pps", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\KeUJ5oCueYQJJFzt\\HFrGs.pps", lpFilePart=0x0) returned 0x40 [0056.296] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0056.296] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\KeUJ5oCueYQJJFzt\\HFrGs.pps" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\omrih\\keuj5ocueyqjjfzt\\hfrgs.pps"), fInfoLevelId=0x0, lpFileInformation=0x217c058 | out: lpFileInformation=0x217c058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5d6d3f0, ftCreationTime.dwHighDateTime=0x1d46324, ftLastAccessTime.dwLowDateTime=0x909037f0, ftLastAccessTime.dwHighDateTime=0x1d4636e, ftLastWriteTime.dwLowDateTime=0x909037f0, ftLastWriteTime.dwHighDateTime=0x1d4636e, nFileSizeHigh=0x0, nFileSizeLow=0x2d4d)) returned 1 [0056.296] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0056.296] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\KeUJ5oCueYQJJFzt\\HFrGs.pps", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\KeUJ5oCueYQJJFzt\\HFrGs.pps", lpFilePart=0x0) returned 0x40 [0056.296] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0056.296] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\KeUJ5oCueYQJJFzt\\HFrGs.pps" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\omrih\\keuj5ocueyqjjfzt\\hfrgs.pps"), fInfoLevelId=0x0, lpFileInformation=0x217c190 | out: lpFileInformation=0x217c190*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5d6d3f0, ftCreationTime.dwHighDateTime=0x1d46324, ftLastAccessTime.dwLowDateTime=0x909037f0, ftLastAccessTime.dwHighDateTime=0x1d4636e, ftLastWriteTime.dwLowDateTime=0x909037f0, ftLastWriteTime.dwHighDateTime=0x1d4636e, nFileSizeHigh=0x0, nFileSizeLow=0x2d4d)) returned 1 [0056.296] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0056.296] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\KeUJ5oCueYQJJFzt\\HFrGs.pps", nBufferLength=0x105, lpBuffer=0x3be270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\KeUJ5oCueYQJJFzt\\HFrGs.pps", lpFilePart=0x0) returned 0x40 [0056.296] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0056.296] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\KeUJ5oCueYQJJFzt\\HFrGs.pps" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\omrih\\keuj5ocueyqjjfzt\\hfrgs.pps"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0056.297] GetFileType (hFile=0x448) returned 0x1 [0056.297] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6c0) returned 1 [0056.297] GetFileType (hFile=0x448) returned 0x1 [0056.297] ReadFile (in: hFile=0x448, lpBuffer=0x217e530, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be7d8, lpOverlapped=0x0 | out: lpBuffer=0x217e530*, lpNumberOfBytesRead=0x3be7d8*=0x1000, lpOverlapped=0x0) returned 1 [0056.307] CloseHandle (hObject=0x448) returned 1 [0056.307] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\KeUJ5oCueYQJJFzt\\HFrGs.pps", nBufferLength=0x105, lpBuffer=0x3be270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\KeUJ5oCueYQJJFzt\\HFrGs.pps", lpFilePart=0x0) returned 0x40 [0056.307] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0056.307] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\KeUJ5oCueYQJJFzt\\HFrGs.pps" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\omrih\\keuj5ocueyqjjfzt\\hfrgs.pps"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0056.307] GetFileType (hFile=0x448) returned 0x1 [0056.307] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6c0) returned 1 [0056.307] GetFileType (hFile=0x448) returned 0x1 [0056.307] WriteFile (in: hFile=0x448, lpBuffer=0x217c2a8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be888, lpOverlapped=0x0 | out: lpBuffer=0x217c2a8*, lpNumberOfBytesWritten=0x3be888*=0x2000, lpOverlapped=0x0) returned 1 [0056.307] CloseHandle (hObject=0x448) returned 1 [0056.307] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\KeUJ5oCueYQJJFzt\\HFrGs.pps", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\KeUJ5oCueYQJJFzt\\HFrGs.pps", lpFilePart=0x0) returned 0x40 [0056.307] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\KeUJ5oCueYQJJFzt\\HFrGs.pps.xuy", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\KeUJ5oCueYQJJFzt\\HFrGs.pps.xuy", lpFilePart=0x0) returned 0x44 [0056.307] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0056.307] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\KeUJ5oCueYQJJFzt\\HFrGs.pps" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\omrih\\keuj5ocueyqjjfzt\\hfrgs.pps"), fInfoLevelId=0x0, lpFileInformation=0x3be8a0 | out: lpFileInformation=0x3be8a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5d6d3f0, ftCreationTime.dwHighDateTime=0x1d46324, ftLastAccessTime.dwLowDateTime=0x909037f0, ftLastAccessTime.dwHighDateTime=0x1d4636e, ftLastWriteTime.dwLowDateTime=0xd67ebcd, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2d4d)) returned 1 [0056.308] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0056.308] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\KeUJ5oCueYQJJFzt\\HFrGs.pps" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\omrih\\keuj5ocueyqjjfzt\\hfrgs.pps"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\KeUJ5oCueYQJJFzt\\HFrGs.pps.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\omrih\\keuj5ocueyqjjfzt\\hfrgs.pps.xuy")) returned 1 [0056.308] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\KeUJ5oCueYQJJFzt\\IxrnmACj9Vmjcevb.rtf", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\KeUJ5oCueYQJJFzt\\IxrnmACj9Vmjcevb.rtf", lpFilePart=0x0) returned 0x4b [0056.308] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0056.308] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\KeUJ5oCueYQJJFzt\\IxrnmACj9Vmjcevb.rtf" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\omrih\\keuj5ocueyqjjfzt\\ixrnmacj9vmjcevb.rtf"), fInfoLevelId=0x0, lpFileInformation=0x21fa8a0 | out: lpFileInformation=0x21fa8a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe55e5d90, ftCreationTime.dwHighDateTime=0x1d45b38, ftLastAccessTime.dwLowDateTime=0xe9399f20, ftLastAccessTime.dwHighDateTime=0x1d45b3c, ftLastWriteTime.dwLowDateTime=0xe9399f20, ftLastWriteTime.dwHighDateTime=0x1d45b3c, nFileSizeHigh=0x0, nFileSizeLow=0x129ea)) returned 1 [0056.308] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0056.308] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\KeUJ5oCueYQJJFzt\\IxrnmACj9Vmjcevb.rtf", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\KeUJ5oCueYQJJFzt\\IxrnmACj9Vmjcevb.rtf", lpFilePart=0x0) returned 0x4b [0056.308] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0056.308] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\KeUJ5oCueYQJJFzt\\IxrnmACj9Vmjcevb.rtf" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\omrih\\keuj5ocueyqjjfzt\\ixrnmacj9vmjcevb.rtf"), fInfoLevelId=0x0, lpFileInformation=0x21faa00 | out: lpFileInformation=0x21faa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe55e5d90, ftCreationTime.dwHighDateTime=0x1d45b38, ftLastAccessTime.dwLowDateTime=0xe9399f20, ftLastAccessTime.dwHighDateTime=0x1d45b3c, ftLastWriteTime.dwLowDateTime=0xe9399f20, ftLastWriteTime.dwHighDateTime=0x1d45b3c, nFileSizeHigh=0x0, nFileSizeLow=0x129ea)) returned 1 [0056.309] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0056.309] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\KeUJ5oCueYQJJFzt\\IxrnmACj9Vmjcevb.rtf", nBufferLength=0x105, lpBuffer=0x3be270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\KeUJ5oCueYQJJFzt\\IxrnmACj9Vmjcevb.rtf", lpFilePart=0x0) returned 0x4b [0056.309] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0056.309] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\KeUJ5oCueYQJJFzt\\IxrnmACj9Vmjcevb.rtf" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\omrih\\keuj5ocueyqjjfzt\\ixrnmacj9vmjcevb.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0056.309] GetFileType (hFile=0x448) returned 0x1 [0056.309] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6c0) returned 1 [0056.316] GetFileType (hFile=0x448) returned 0x1 [0056.316] ReadFile (in: hFile=0x448, lpBuffer=0x21fcdf0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be7d8, lpOverlapped=0x0 | out: lpBuffer=0x21fcdf0*, lpNumberOfBytesRead=0x3be7d8*=0x1000, lpOverlapped=0x0) returned 1 [0056.326] CloseHandle (hObject=0x448) returned 1 [0056.326] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\KeUJ5oCueYQJJFzt\\IxrnmACj9Vmjcevb.rtf", nBufferLength=0x105, lpBuffer=0x3be270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\KeUJ5oCueYQJJFzt\\IxrnmACj9Vmjcevb.rtf", lpFilePart=0x0) returned 0x4b [0056.326] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0056.326] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\KeUJ5oCueYQJJFzt\\IxrnmACj9Vmjcevb.rtf" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\omrih\\keuj5ocueyqjjfzt\\ixrnmacj9vmjcevb.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0056.327] GetFileType (hFile=0x448) returned 0x1 [0056.327] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6c0) returned 1 [0056.327] GetFileType (hFile=0x448) returned 0x1 [0056.327] WriteFile (in: hFile=0x448, lpBuffer=0x21fab40*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be888, lpOverlapped=0x0 | out: lpBuffer=0x21fab40*, lpNumberOfBytesWritten=0x3be888*=0x2000, lpOverlapped=0x0) returned 1 [0056.327] CloseHandle (hObject=0x448) returned 1 [0056.327] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\KeUJ5oCueYQJJFzt\\IxrnmACj9Vmjcevb.rtf", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\KeUJ5oCueYQJJFzt\\IxrnmACj9Vmjcevb.rtf", lpFilePart=0x0) returned 0x4b [0056.327] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\KeUJ5oCueYQJJFzt\\IxrnmACj9Vmjcevb.rtf.xuy", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\KeUJ5oCueYQJJFzt\\IxrnmACj9Vmjcevb.rtf.xuy", lpFilePart=0x0) returned 0x4f [0056.327] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0056.327] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\KeUJ5oCueYQJJFzt\\IxrnmACj9Vmjcevb.rtf" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\omrih\\keuj5ocueyqjjfzt\\ixrnmacj9vmjcevb.rtf"), fInfoLevelId=0x0, lpFileInformation=0x3be8a0 | out: lpFileInformation=0x3be8a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe55e5d90, ftCreationTime.dwHighDateTime=0x1d45b38, ftLastAccessTime.dwLowDateTime=0xe9399f20, ftLastAccessTime.dwHighDateTime=0x1d45b3c, ftLastWriteTime.dwLowDateTime=0xd6cad8a, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x129ea)) returned 1 [0056.327] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0056.327] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\KeUJ5oCueYQJJFzt\\IxrnmACj9Vmjcevb.rtf" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\omrih\\keuj5ocueyqjjfzt\\ixrnmacj9vmjcevb.rtf"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\KeUJ5oCueYQJJFzt\\IxrnmACj9Vmjcevb.rtf.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\omrih\\keuj5ocueyqjjfzt\\ixrnmacj9vmjcevb.rtf.xuy")) returned 1 [0056.328] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\KeUJ5oCueYQJJFzt\\lR01HU4Lr.odt", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\KeUJ5oCueYQJJFzt\\lR01HU4Lr.odt", lpFilePart=0x0) returned 0x44 [0056.328] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0056.328] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\KeUJ5oCueYQJJFzt\\lR01HU4Lr.odt" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\omrih\\keuj5ocueyqjjfzt\\lr01hu4lr.odt"), fInfoLevelId=0x0, lpFileInformation=0x22791b8 | out: lpFileInformation=0x22791b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3e1d520, ftCreationTime.dwHighDateTime=0x1d45a87, ftLastAccessTime.dwLowDateTime=0x3d969300, ftLastAccessTime.dwHighDateTime=0x1d45ea5, ftLastWriteTime.dwLowDateTime=0x3d969300, ftLastWriteTime.dwHighDateTime=0x1d45ea5, nFileSizeHigh=0x0, nFileSizeLow=0xbd8e)) returned 1 [0056.328] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0056.328] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\KeUJ5oCueYQJJFzt\\lR01HU4Lr.odt", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\KeUJ5oCueYQJJFzt\\lR01HU4Lr.odt", lpFilePart=0x0) returned 0x44 [0056.328] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0056.328] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\KeUJ5oCueYQJJFzt\\lR01HU4Lr.odt" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\omrih\\keuj5ocueyqjjfzt\\lr01hu4lr.odt"), fInfoLevelId=0x0, lpFileInformation=0x2279300 | out: lpFileInformation=0x2279300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3e1d520, ftCreationTime.dwHighDateTime=0x1d45a87, ftLastAccessTime.dwLowDateTime=0x3d969300, ftLastAccessTime.dwHighDateTime=0x1d45ea5, ftLastWriteTime.dwLowDateTime=0x3d969300, ftLastWriteTime.dwHighDateTime=0x1d45ea5, nFileSizeHigh=0x0, nFileSizeLow=0xbd8e)) returned 1 [0056.328] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0056.328] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\KeUJ5oCueYQJJFzt\\lR01HU4Lr.odt", nBufferLength=0x105, lpBuffer=0x3be270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\KeUJ5oCueYQJJFzt\\lR01HU4Lr.odt", lpFilePart=0x0) returned 0x44 [0056.328] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0056.328] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\KeUJ5oCueYQJJFzt\\lR01HU4Lr.odt" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\omrih\\keuj5ocueyqjjfzt\\lr01hu4lr.odt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0056.329] GetFileType (hFile=0x448) returned 0x1 [0056.329] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6c0) returned 1 [0056.329] GetFileType (hFile=0x448) returned 0x1 [0056.329] ReadFile (in: hFile=0x448, lpBuffer=0x227b6c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be7d8, lpOverlapped=0x0 | out: lpBuffer=0x227b6c0*, lpNumberOfBytesRead=0x3be7d8*=0x1000, lpOverlapped=0x0) returned 1 [0056.339] CloseHandle (hObject=0x448) returned 1 [0056.339] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\KeUJ5oCueYQJJFzt\\lR01HU4Lr.odt", nBufferLength=0x105, lpBuffer=0x3be270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\KeUJ5oCueYQJJFzt\\lR01HU4Lr.odt", lpFilePart=0x0) returned 0x44 [0056.339] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0056.339] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\KeUJ5oCueYQJJFzt\\lR01HU4Lr.odt" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\omrih\\keuj5ocueyqjjfzt\\lr01hu4lr.odt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0056.339] GetFileType (hFile=0x448) returned 0x1 [0056.339] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6c0) returned 1 [0056.339] GetFileType (hFile=0x448) returned 0x1 [0056.339] WriteFile (in: hFile=0x448, lpBuffer=0x2279428*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be888, lpOverlapped=0x0 | out: lpBuffer=0x2279428*, lpNumberOfBytesWritten=0x3be888*=0x2000, lpOverlapped=0x0) returned 1 [0056.339] CloseHandle (hObject=0x448) returned 1 [0056.339] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\KeUJ5oCueYQJJFzt\\lR01HU4Lr.odt", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\KeUJ5oCueYQJJFzt\\lR01HU4Lr.odt", lpFilePart=0x0) returned 0x44 [0056.339] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\KeUJ5oCueYQJJFzt\\lR01HU4Lr.odt.xuy", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\KeUJ5oCueYQJJFzt\\lR01HU4Lr.odt.xuy", lpFilePart=0x0) returned 0x48 [0056.340] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0056.340] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\KeUJ5oCueYQJJFzt\\lR01HU4Lr.odt" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\omrih\\keuj5ocueyqjjfzt\\lr01hu4lr.odt"), fInfoLevelId=0x0, lpFileInformation=0x3be8a0 | out: lpFileInformation=0x3be8a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3e1d520, ftCreationTime.dwHighDateTime=0x1d45a87, ftLastAccessTime.dwLowDateTime=0x3d969300, ftLastAccessTime.dwHighDateTime=0x1d45ea5, ftLastWriteTime.dwLowDateTime=0xd6cad8a, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xbd8e)) returned 1 [0056.340] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0056.340] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\KeUJ5oCueYQJJFzt\\lR01HU4Lr.odt" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\omrih\\keuj5ocueyqjjfzt\\lr01hu4lr.odt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\KeUJ5oCueYQJJFzt\\lR01HU4Lr.odt.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\omrih\\keuj5ocueyqjjfzt\\lr01hu4lr.odt.xuy")) returned 1 [0056.340] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\KeUJ5oCueYQJJFzt\\XVz99OD38.rtf", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\KeUJ5oCueYQJJFzt\\XVz99OD38.rtf", lpFilePart=0x0) returned 0x44 [0056.341] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0056.341] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\KeUJ5oCueYQJJFzt\\XVz99OD38.rtf" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\omrih\\keuj5ocueyqjjfzt\\xvz99od38.rtf"), fInfoLevelId=0x0, lpFileInformation=0x22f7a58 | out: lpFileInformation=0x22f7a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x805897e0, ftCreationTime.dwHighDateTime=0x1d460af, ftLastAccessTime.dwLowDateTime=0x6e508330, ftLastAccessTime.dwHighDateTime=0x1d45af3, ftLastWriteTime.dwLowDateTime=0x6e508330, ftLastWriteTime.dwHighDateTime=0x1d45af3, nFileSizeHigh=0x0, nFileSizeLow=0x17f68)) returned 1 [0056.341] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0056.341] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\KeUJ5oCueYQJJFzt\\XVz99OD38.rtf", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\KeUJ5oCueYQJJFzt\\XVz99OD38.rtf", lpFilePart=0x0) returned 0x44 [0056.341] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0056.341] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\KeUJ5oCueYQJJFzt\\XVz99OD38.rtf" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\omrih\\keuj5ocueyqjjfzt\\xvz99od38.rtf"), fInfoLevelId=0x0, lpFileInformation=0x22f7ba0 | out: lpFileInformation=0x22f7ba0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x805897e0, ftCreationTime.dwHighDateTime=0x1d460af, ftLastAccessTime.dwLowDateTime=0x6e508330, ftLastAccessTime.dwHighDateTime=0x1d45af3, ftLastWriteTime.dwLowDateTime=0x6e508330, ftLastWriteTime.dwHighDateTime=0x1d45af3, nFileSizeHigh=0x0, nFileSizeLow=0x17f68)) returned 1 [0056.341] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0056.341] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\KeUJ5oCueYQJJFzt\\XVz99OD38.rtf", nBufferLength=0x105, lpBuffer=0x3be270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\KeUJ5oCueYQJJFzt\\XVz99OD38.rtf", lpFilePart=0x0) returned 0x44 [0056.341] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0056.341] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\KeUJ5oCueYQJJFzt\\XVz99OD38.rtf" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\omrih\\keuj5ocueyqjjfzt\\xvz99od38.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0056.341] GetFileType (hFile=0x448) returned 0x1 [0056.341] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6c0) returned 1 [0056.341] GetFileType (hFile=0x448) returned 0x1 [0056.341] ReadFile (in: hFile=0x448, lpBuffer=0x22f9f60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be7d8, lpOverlapped=0x0 | out: lpBuffer=0x22f9f60*, lpNumberOfBytesRead=0x3be7d8*=0x1000, lpOverlapped=0x0) returned 1 [0056.427] CloseHandle (hObject=0x448) returned 1 [0056.428] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\KeUJ5oCueYQJJFzt\\XVz99OD38.rtf", nBufferLength=0x105, lpBuffer=0x3be270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\KeUJ5oCueYQJJFzt\\XVz99OD38.rtf", lpFilePart=0x0) returned 0x44 [0056.428] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0056.428] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\KeUJ5oCueYQJJFzt\\XVz99OD38.rtf" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\omrih\\keuj5ocueyqjjfzt\\xvz99od38.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0056.428] GetFileType (hFile=0x448) returned 0x1 [0056.428] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6c0) returned 1 [0056.428] GetFileType (hFile=0x448) returned 0x1 [0056.428] WriteFile (in: hFile=0x448, lpBuffer=0x2155220*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be888, lpOverlapped=0x0 | out: lpBuffer=0x2155220*, lpNumberOfBytesWritten=0x3be888*=0x2000, lpOverlapped=0x0) returned 1 [0056.431] CloseHandle (hObject=0x448) returned 1 [0056.431] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\KeUJ5oCueYQJJFzt\\XVz99OD38.rtf", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\KeUJ5oCueYQJJFzt\\XVz99OD38.rtf", lpFilePart=0x0) returned 0x44 [0056.431] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\KeUJ5oCueYQJJFzt\\XVz99OD38.rtf.xuy", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\KeUJ5oCueYQJJFzt\\XVz99OD38.rtf.xuy", lpFilePart=0x0) returned 0x48 [0056.431] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0056.431] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\KeUJ5oCueYQJJFzt\\XVz99OD38.rtf" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\omrih\\keuj5ocueyqjjfzt\\xvz99od38.rtf"), fInfoLevelId=0x0, lpFileInformation=0x3be8a0 | out: lpFileInformation=0x3be8a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x805897e0, ftCreationTime.dwHighDateTime=0x1d460af, ftLastAccessTime.dwLowDateTime=0x6e508330, ftLastAccessTime.dwHighDateTime=0x1d45af3, ftLastWriteTime.dwLowDateTime=0xd7afb4c, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x17f68)) returned 1 [0056.431] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0056.431] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\KeUJ5oCueYQJJFzt\\XVz99OD38.rtf" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\omrih\\keuj5ocueyqjjfzt\\xvz99od38.rtf"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OMrih\\KeUJ5oCueYQJJFzt\\XVz99OD38.rtf.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\omrih\\keuj5ocueyqjjfzt\\xvz99od38.rtf.xuy")) returned 1 [0056.432] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0056.432] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks", nBufferLength=0x105, lpBuffer=0x3be3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks", lpFilePart=0x0) returned 0x31 [0056.432] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks\\", nBufferLength=0x105, lpBuffer=0x3be370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks\\", lpFilePart=0x0) returned 0x32 [0056.432] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks\\*", lpFindFileData=0x3be580 | out: lpFindFileData=0x3be580) returned 0x5d73d0 [0056.433] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0056.433] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0056.433] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 0 [0056.433] FindClose (in: hFindFile=0x5d73d0 | out: hFindFile=0x5d73d0) returned 1 [0056.434] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0056.434] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7f0) returned 1 [0056.434] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0056.434] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks", nBufferLength=0x105, lpBuffer=0x3be3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks", lpFilePart=0x0) returned 0x31 [0056.434] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks\\", nBufferLength=0x105, lpBuffer=0x3be370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks\\", lpFilePart=0x0) returned 0x32 [0056.434] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks\\*", lpFindFileData=0x3be580 | out: lpFindFileData=0x3be580) returned 0x5d81b0 [0056.452] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0056.452] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0056.452] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 0 [0056.452] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0056.452] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0056.452] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7f0) returned 1 [0056.452] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0056.452] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks\\My Notebook", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks\\My Notebook", lpFilePart=0x0) returned 0x3d [0056.452] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks\\My Notebook\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks\\My Notebook\\", lpFilePart=0x0) returned 0x3e [0056.452] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks\\My Notebook\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d7e50 [0056.453] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0056.454] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0056.454] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0056.454] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0056.454] FindClose (in: hFindFile=0x5d7e50 | out: hFindFile=0x5d7e50) returned 1 [0056.454] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0056.454] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0056.454] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0056.454] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks\\My Notebook", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks\\My Notebook", lpFilePart=0x0) returned 0x3d [0056.454] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks\\My Notebook\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks\\My Notebook\\", lpFilePart=0x0) returned 0x3e [0056.454] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks\\My Notebook\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d7d90 [0056.454] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0056.454] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0056.454] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0056.455] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0056.455] FindClose (in: hFindFile=0x5d7d90 | out: hFindFile=0x5d7d90) returned 1 [0056.455] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0056.455] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0056.455] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks\\My Notebook\\Open Notebook.onetoc2", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks\\My Notebook\\Open Notebook.onetoc2", lpFilePart=0x0) returned 0x53 [0056.455] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0056.455] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks\\My Notebook\\Open Notebook.onetoc2" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\onenote notebooks\\my notebook\\open notebook.onetoc2"), fInfoLevelId=0x0, lpFileInformation=0x2179f60 | out: lpFileInformation=0x2179f60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6db521d4, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6db521d4, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6eab8059, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x1828)) returned 1 [0056.457] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0056.457] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks\\My Notebook\\Open Notebook.onetoc2", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks\\My Notebook\\Open Notebook.onetoc2", lpFilePart=0x0) returned 0x53 [0056.457] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0056.457] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks\\My Notebook\\Open Notebook.onetoc2" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\onenote notebooks\\my notebook\\open notebook.onetoc2"), fInfoLevelId=0x0, lpFileInformation=0x217a0d0 | out: lpFileInformation=0x217a0d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6db521d4, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6db521d4, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6eab8059, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x1828)) returned 1 [0056.457] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0056.457] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks\\My Notebook\\Open Notebook.onetoc2", nBufferLength=0x105, lpBuffer=0x3be270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks\\My Notebook\\Open Notebook.onetoc2", lpFilePart=0x0) returned 0x53 [0056.457] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0056.457] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks\\My Notebook\\Open Notebook.onetoc2" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\onenote notebooks\\my notebook\\open notebook.onetoc2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0056.457] GetFileType (hFile=0x448) returned 0x1 [0056.457] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6c0) returned 1 [0056.457] GetFileType (hFile=0x448) returned 0x1 [0056.457] ReadFile (in: hFile=0x448, lpBuffer=0x217c4e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be7d8, lpOverlapped=0x0 | out: lpBuffer=0x217c4e0*, lpNumberOfBytesRead=0x3be7d8*=0x1000, lpOverlapped=0x0) returned 1 [0056.485] CloseHandle (hObject=0x448) returned 1 [0056.486] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks\\My Notebook\\Open Notebook.onetoc2", nBufferLength=0x105, lpBuffer=0x3be270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks\\My Notebook\\Open Notebook.onetoc2", lpFilePart=0x0) returned 0x53 [0056.486] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0056.486] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks\\My Notebook\\Open Notebook.onetoc2" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\onenote notebooks\\my notebook\\open notebook.onetoc2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0056.486] GetFileType (hFile=0x448) returned 0x1 [0056.486] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6c0) returned 1 [0056.486] GetFileType (hFile=0x448) returned 0x1 [0056.486] WriteFile (in: hFile=0x448, lpBuffer=0x217a220*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be888, lpOverlapped=0x0 | out: lpBuffer=0x217a220*, lpNumberOfBytesWritten=0x3be888*=0x2000, lpOverlapped=0x0) returned 1 [0056.486] CloseHandle (hObject=0x448) returned 1 [0056.486] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks\\My Notebook\\Open Notebook.onetoc2", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks\\My Notebook\\Open Notebook.onetoc2", lpFilePart=0x0) returned 0x53 [0056.486] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks\\My Notebook\\Open Notebook.onetoc2.xuy", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks\\My Notebook\\Open Notebook.onetoc2.xuy", lpFilePart=0x0) returned 0x57 [0056.486] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0056.486] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks\\My Notebook\\Open Notebook.onetoc2" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\onenote notebooks\\my notebook\\open notebook.onetoc2"), fInfoLevelId=0x0, lpFileInformation=0x3be8a0 | out: lpFileInformation=0x3be8a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6db521d4, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6db521d4, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0xd848542, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0056.487] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0056.487] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks\\My Notebook\\Open Notebook.onetoc2" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\onenote notebooks\\my notebook\\open notebook.onetoc2"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks\\My Notebook\\Open Notebook.onetoc2.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\onenote notebooks\\my notebook\\open notebook.onetoc2.xuy")) returned 1 [0056.487] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks\\My Notebook\\Quick Notes.one", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks\\My Notebook\\Quick Notes.one", lpFilePart=0x0) returned 0x4d [0056.487] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0056.487] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks\\My Notebook\\Quick Notes.one" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\onenote notebooks\\my notebook\\quick notes.one"), fInfoLevelId=0x0, lpFileInformation=0x21f88e8 | out: lpFileInformation=0x21f88e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6db8ed1e, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6db8ed1e, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6f29dd49, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x57ec8)) returned 1 [0056.488] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0056.488] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks\\My Notebook\\Quick Notes.one", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks\\My Notebook\\Quick Notes.one", lpFilePart=0x0) returned 0x4d [0056.488] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0056.488] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks\\My Notebook\\Quick Notes.one" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\onenote notebooks\\my notebook\\quick notes.one"), fInfoLevelId=0x0, lpFileInformation=0x21f8a40 | out: lpFileInformation=0x21f8a40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6db8ed1e, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6db8ed1e, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6f29dd49, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x57ec8)) returned 1 [0056.488] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0056.488] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks\\My Notebook\\Quick Notes.one", nBufferLength=0x105, lpBuffer=0x3be270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks\\My Notebook\\Quick Notes.one", lpFilePart=0x0) returned 0x4d [0056.488] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0056.488] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks\\My Notebook\\Quick Notes.one" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\onenote notebooks\\my notebook\\quick notes.one"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0056.488] GetFileType (hFile=0x448) returned 0x1 [0056.488] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6c0) returned 1 [0056.488] GetFileType (hFile=0x448) returned 0x1 [0056.488] ReadFile (in: hFile=0x448, lpBuffer=0x21fae20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be7d8, lpOverlapped=0x0 | out: lpBuffer=0x21fae20*, lpNumberOfBytesRead=0x3be7d8*=0x1000, lpOverlapped=0x0) returned 1 [0056.526] CloseHandle (hObject=0x448) returned 1 [0056.526] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks\\My Notebook\\Quick Notes.one", nBufferLength=0x105, lpBuffer=0x3be270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks\\My Notebook\\Quick Notes.one", lpFilePart=0x0) returned 0x4d [0056.526] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0056.526] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks\\My Notebook\\Quick Notes.one" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\onenote notebooks\\my notebook\\quick notes.one"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0056.526] GetFileType (hFile=0x448) returned 0x1 [0056.526] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6c0) returned 1 [0056.526] GetFileType (hFile=0x448) returned 0x1 [0056.526] WriteFile (in: hFile=0x448, lpBuffer=0x21f8b78*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be888, lpOverlapped=0x0 | out: lpBuffer=0x21f8b78*, lpNumberOfBytesWritten=0x3be888*=0x2000, lpOverlapped=0x0) returned 1 [0056.527] CloseHandle (hObject=0x448) returned 1 [0056.527] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks\\My Notebook\\Quick Notes.one", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks\\My Notebook\\Quick Notes.one", lpFilePart=0x0) returned 0x4d [0056.527] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks\\My Notebook\\Quick Notes.one.xuy", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks\\My Notebook\\Quick Notes.one.xuy", lpFilePart=0x0) returned 0x51 [0056.527] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0056.527] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks\\My Notebook\\Quick Notes.one" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\onenote notebooks\\my notebook\\quick notes.one"), fInfoLevelId=0x0, lpFileInformation=0x3be8a0 | out: lpFileInformation=0x3be8a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6db8ed1e, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6db8ed1e, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0xd894c04, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x57ec8)) returned 1 [0056.527] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0056.527] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks\\My Notebook\\Quick Notes.one" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\onenote notebooks\\my notebook\\quick notes.one"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks\\My Notebook\\Quick Notes.one.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\onenote notebooks\\my notebook\\quick notes.one.xuy")) returned 1 [0056.527] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0056.527] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Outlook Files", nBufferLength=0x105, lpBuffer=0x3be3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Outlook Files", lpFilePart=0x0) returned 0x2d [0056.528] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Outlook Files\\", nBufferLength=0x105, lpBuffer=0x3be370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Outlook Files\\", lpFilePart=0x0) returned 0x2e [0056.528] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Outlook Files\\*", lpFindFileData=0x3be580 | out: lpFindFileData=0x3be580) returned 0x5d7e50 [0056.530] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0056.530] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0056.530] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 0 [0056.530] FindClose (in: hFindFile=0x5d7e50 | out: hFindFile=0x5d7e50) returned 1 [0056.530] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0056.530] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7f0) returned 1 [0056.530] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0056.530] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Outlook Files", nBufferLength=0x105, lpBuffer=0x3be3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Outlook Files", lpFilePart=0x0) returned 0x2d [0056.530] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Outlook Files\\", nBufferLength=0x105, lpBuffer=0x3be370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Outlook Files\\", lpFilePart=0x0) returned 0x2e [0056.530] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Outlook Files\\*", lpFindFileData=0x3be580 | out: lpFindFileData=0x3be580) returned 0x5d7670 [0056.531] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0056.531] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0056.531] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 0 [0056.531] FindClose (in: hFindFile=0x5d7670 | out: hFindFile=0x5d7670) returned 1 [0056.531] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0056.531] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7f0) returned 1 [0056.531] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Outlook Files\\lcfkj@kiekc.df.pst", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Outlook Files\\lcfkj@kiekc.df.pst", lpFilePart=0x0) returned 0x40 [0056.531] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0056.531] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Outlook Files\\lcfkj@kiekc.df.pst" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\outlook files\\lcfkj@kiekc.df.pst"), fInfoLevelId=0x0, lpFileInformation=0x2278be0 | out: lpFileInformation=0x2278be0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfdcc0a39, ftCreationTime.dwHighDateTime=0x1d2fc24, ftLastAccessTime.dwLowDateTime=0xfdcc0a39, ftLastAccessTime.dwHighDateTime=0x1d2fc24, ftLastWriteTime.dwLowDateTime=0xa5dac98, ftLastWriteTime.dwHighDateTime=0x1d2fc25, nFileSizeHigh=0x0, nFileSizeLow=0x42400)) returned 1 [0056.531] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0056.531] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Outlook Files\\lcfkj@kiekc.df.pst", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Outlook Files\\lcfkj@kiekc.df.pst", lpFilePart=0x0) returned 0x40 [0056.531] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0056.531] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Outlook Files\\lcfkj@kiekc.df.pst" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\outlook files\\lcfkj@kiekc.df.pst"), fInfoLevelId=0x0, lpFileInformation=0x2278d28 | out: lpFileInformation=0x2278d28*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfdcc0a39, ftCreationTime.dwHighDateTime=0x1d2fc24, ftLastAccessTime.dwLowDateTime=0xfdcc0a39, ftLastAccessTime.dwHighDateTime=0x1d2fc24, ftLastWriteTime.dwLowDateTime=0xa5dac98, ftLastWriteTime.dwHighDateTime=0x1d2fc25, nFileSizeHigh=0x0, nFileSizeLow=0x42400)) returned 1 [0056.532] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0056.532] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Outlook Files\\lcfkj@kiekc.df.pst", nBufferLength=0x105, lpBuffer=0x3be2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Outlook Files\\lcfkj@kiekc.df.pst", lpFilePart=0x0) returned 0x40 [0056.532] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0056.532] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Outlook Files\\lcfkj@kiekc.df.pst" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\outlook files\\lcfkj@kiekc.df.pst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0056.532] GetFileType (hFile=0x448) returned 0x1 [0056.532] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be730) returned 1 [0056.532] GetFileType (hFile=0x448) returned 0x1 [0056.532] ReadFile (in: hFile=0x448, lpBuffer=0x227b0e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be848, lpOverlapped=0x0 | out: lpBuffer=0x227b0e8*, lpNumberOfBytesRead=0x3be848*=0x1000, lpOverlapped=0x0) returned 1 [0056.557] CloseHandle (hObject=0x448) returned 1 [0056.557] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Outlook Files\\lcfkj@kiekc.df.pst", nBufferLength=0x105, lpBuffer=0x3be2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Outlook Files\\lcfkj@kiekc.df.pst", lpFilePart=0x0) returned 0x40 [0056.557] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0056.557] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Outlook Files\\lcfkj@kiekc.df.pst" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\outlook files\\lcfkj@kiekc.df.pst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0056.557] GetFileType (hFile=0x448) returned 0x1 [0056.557] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be730) returned 1 [0056.557] GetFileType (hFile=0x448) returned 0x1 [0056.557] WriteFile (in: hFile=0x448, lpBuffer=0x2278e50*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be8f8, lpOverlapped=0x0 | out: lpBuffer=0x2278e50*, lpNumberOfBytesWritten=0x3be8f8*=0x2000, lpOverlapped=0x0) returned 1 [0056.557] CloseHandle (hObject=0x448) returned 1 [0056.558] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Outlook Files\\lcfkj@kiekc.df.pst", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Outlook Files\\lcfkj@kiekc.df.pst", lpFilePart=0x0) returned 0x40 [0056.558] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Outlook Files\\lcfkj@kiekc.df.pst.xuy", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Outlook Files\\lcfkj@kiekc.df.pst.xuy", lpFilePart=0x0) returned 0x44 [0056.558] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0056.558] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Outlook Files\\lcfkj@kiekc.df.pst" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\outlook files\\lcfkj@kiekc.df.pst"), fInfoLevelId=0x0, lpFileInformation=0x3be910 | out: lpFileInformation=0x3be910*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfdcc0a39, ftCreationTime.dwHighDateTime=0x1d2fc24, ftLastAccessTime.dwLowDateTime=0xfdcc0a39, ftLastAccessTime.dwHighDateTime=0x1d2fc24, ftLastWriteTime.dwLowDateTime=0xd8e0d77, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x42400)) returned 1 [0056.558] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7f0) returned 1 [0056.558] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Outlook Files\\lcfkj@kiekc.df.pst" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\outlook files\\lcfkj@kiekc.df.pst"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Outlook Files\\lcfkj@kiekc.df.pst.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\outlook files\\lcfkj@kiekc.df.pst.xuy")) returned 1 [0056.558] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be950) returned 1 [0056.558] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Favorites", nBufferLength=0x105, lpBuffer=0x3be440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Favorites", lpFilePart=0x0) returned 0x1f [0056.558] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\", nBufferLength=0x105, lpBuffer=0x3be3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\", lpFilePart=0x0) returned 0x20 [0056.559] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\*", lpFindFileData=0x3be5f0 | out: lpFindFileData=0x3be5f0) returned 0x5d7550 [0056.559] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0056.559] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0056.559] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0056.559] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0056.559] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 0 [0056.560] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0056.560] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0056.560] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0056.560] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be950) returned 1 [0056.560] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Favorites", nBufferLength=0x105, lpBuffer=0x3be440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Favorites", lpFilePart=0x0) returned 0x1f [0056.560] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\", nBufferLength=0x105, lpBuffer=0x3be3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\", lpFilePart=0x0) returned 0x20 [0056.560] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\*", lpFindFileData=0x3be5f0 | out: lpFindFileData=0x3be5f0) returned 0x5d7550 [0056.560] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0056.560] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0056.560] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0056.560] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0056.560] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 0 [0056.560] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0056.561] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0056.561] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0056.561] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\Bing.url", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\Bing.url", lpFilePart=0x0) returned 0x28 [0056.561] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0056.561] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\Bing.url" (normalized: "c:\\users\\ciihmnxmn6ps\\favorites\\bing.url"), fInfoLevelId=0x0, lpFileInformation=0x22f8f98 | out: lpFileInformation=0x22f8f98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xadb98fe8, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xadb98fe8, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xadc0b718, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0xd0)) returned 1 [0056.561] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0056.561] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\Bing.url", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\Bing.url", lpFilePart=0x0) returned 0x28 [0056.561] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0056.561] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\Bing.url" (normalized: "c:\\users\\ciihmnxmn6ps\\favorites\\bing.url"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0056.561] GetFileType (hFile=0x448) returned 0x1 [0056.561] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0056.561] GetFileType (hFile=0x448) returned 0x1 [0056.561] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0xd0 [0056.561] ReadFile (in: hFile=0x448, lpBuffer=0x22f9290, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x22f9290*, lpNumberOfBytesRead=0x3be868*=0xd0, lpOverlapped=0x0) returned 1 [0056.562] CloseHandle (hObject=0x448) returned 1 [0056.605] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\Bing.url", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\Bing.url", lpFilePart=0x0) returned 0x28 [0056.605] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0056.605] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\Bing.url" (normalized: "c:\\users\\ciihmnxmn6ps\\favorites\\bing.url"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0056.607] GetFileType (hFile=0x448) returned 0x1 [0056.607] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0056.607] GetFileType (hFile=0x448) returned 0x1 [0056.607] WriteFile (in: hFile=0x448, lpBuffer=0x21503d8*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x3be778, lpOverlapped=0x0 | out: lpBuffer=0x21503d8*, lpNumberOfBytesWritten=0x3be778*=0xe0, lpOverlapped=0x0) returned 1 [0056.608] CloseHandle (hObject=0x448) returned 1 [0056.608] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\Bing.url", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\Bing.url", lpFilePart=0x0) returned 0x28 [0056.608] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\Bing.url.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\Bing.url.xuy", lpFilePart=0x0) returned 0x2c [0056.608] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0056.608] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\Bing.url" (normalized: "c:\\users\\ciihmnxmn6ps\\favorites\\bing.url"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xadb98fe8, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xadb98fe8, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xd9797a1, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1 [0056.608] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0056.608] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\Bing.url" (normalized: "c:\\users\\ciihmnxmn6ps\\favorites\\bing.url"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\Bing.url.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\favorites\\bing.url.xuy")) returned 1 [0056.609] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\desktop.ini", lpFilePart=0x0) returned 0x2b [0056.609] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0056.609] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\favorites\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x2151598 | out: lpFileInformation=0x2151598*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xae14297a, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xae14297a, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xae14297a, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x192)) returned 1 [0056.609] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0056.609] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\desktop.ini", lpFilePart=0x0) returned 0x2b [0056.609] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0056.609] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\favorites\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0056.609] GetFileType (hFile=0x448) returned 0x1 [0056.609] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0056.609] GetFileType (hFile=0x448) returned 0x1 [0056.609] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x192 [0056.609] ReadFile (in: hFile=0x448, lpBuffer=0x2151958, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x2151958*, lpNumberOfBytesRead=0x3be868*=0x192, lpOverlapped=0x0) returned 1 [0056.610] CloseHandle (hObject=0x448) returned 1 [0056.620] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\desktop.ini", lpFilePart=0x0) returned 0x2b [0056.620] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0056.620] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\favorites\\desktop.ini"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0056.622] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb230) returned 1 [0056.622] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3bbeb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\desktop.ini", lpFilePart=0x0) returned 0x2b [0056.623] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc350) returned 1 [0056.623] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\favorites\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x3bc430 | out: lpFileInformation=0x3bc430*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xae14297a, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xae14297a, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xae14297a, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x192)) returned 1 [0056.623] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc310) returned 1 [0056.623] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3bbed0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\desktop.ini", lpFilePart=0x0) returned 0x2b [0056.623] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc350) returned 1 [0056.623] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\favorites\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x21c98e0 | out: lpFileInformation=0x21c98e0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xae14297a, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xae14297a, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xae14297a, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x192)) returned 1 [0056.623] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc310) returned 1 [0056.623] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3bbd30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\desktop.ini", lpFilePart=0x0) returned 0x2b [0056.623] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc210) returned 1 [0056.623] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\favorites\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0056.623] GetFileType (hFile=0x448) returned 0x1 [0056.623] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc180) returned 1 [0056.623] GetFileType (hFile=0x448) returned 0x1 [0056.623] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3bc3a8 | out: lpFileSizeHigh=0x3bc3a8*=0x0) returned 0x192 [0056.623] ReadFile (in: hFile=0x448, lpBuffer=0x21c9ca0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bc2d8, lpOverlapped=0x0 | out: lpBuffer=0x21c9ca0*, lpNumberOfBytesRead=0x3bc2d8*=0x192, lpOverlapped=0x0) returned 1 [0056.623] CloseHandle (hObject=0x448) returned 1 [0056.667] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3bbd30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\desktop.ini", lpFilePart=0x0) returned 0x2b [0056.667] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc210) returned 1 [0056.667] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\favorites\\desktop.ini"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0056.669] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8ca0) returned 1 [0056.670] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0056.670] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\Links", nBufferLength=0x105, lpBuffer=0x3be3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\Links", lpFilePart=0x0) returned 0x25 [0056.670] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\Links\\", nBufferLength=0x105, lpBuffer=0x3be370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\Links\\", lpFilePart=0x0) returned 0x26 [0056.670] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\Links\\*", lpFindFileData=0x3be580 | out: lpFindFileData=0x3be580) returned 0x5d78b0 [0056.670] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0056.670] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0056.670] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 0 [0056.670] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0056.670] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0056.671] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7f0) returned 1 [0056.671] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0056.671] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\Links", nBufferLength=0x105, lpBuffer=0x3be3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\Links", lpFilePart=0x0) returned 0x25 [0056.671] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\Links\\", nBufferLength=0x105, lpBuffer=0x3be370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\Links\\", lpFilePart=0x0) returned 0x26 [0056.671] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\Links\\*", lpFindFileData=0x3be580 | out: lpFindFileData=0x3be580) returned 0x5d78b0 [0056.671] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0056.671] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0056.671] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 0 [0056.671] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0056.671] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0056.671] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7f0) returned 1 [0056.671] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\Links\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\Links\\desktop.ini", lpFilePart=0x0) returned 0x31 [0056.671] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0056.671] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\Links\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\favorites\\links\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x22432d0 | out: lpFileInformation=0x22432d0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xadc0b718, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xadc0b718, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xadc0b718, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x50)) returned 1 [0056.672] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0056.672] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\Links\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3be250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\Links\\desktop.ini", lpFilePart=0x0) returned 0x31 [0056.672] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be730) returned 1 [0056.672] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\Links\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\favorites\\links\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0056.672] GetFileType (hFile=0x448) returned 0x1 [0056.672] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0056.672] GetFileType (hFile=0x448) returned 0x1 [0056.672] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3be8c8 | out: lpFileSizeHigh=0x3be8c8*=0x0) returned 0x50 [0056.672] ReadFile (in: hFile=0x448, lpBuffer=0x2243568, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be7f8, lpOverlapped=0x0 | out: lpBuffer=0x2243568*, lpNumberOfBytesRead=0x3be7f8*=0x50, lpOverlapped=0x0) returned 1 [0056.673] CloseHandle (hObject=0x448) returned 1 [0056.713] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\Links\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3be250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\Links\\desktop.ini", lpFilePart=0x0) returned 0x31 [0056.713] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be730) returned 1 [0056.713] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\Links\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\favorites\\links\\desktop.ini"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0056.715] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb1c0) returned 1 [0056.716] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\Links\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3bbe40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\Links\\desktop.ini", lpFilePart=0x0) returned 0x31 [0056.716] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc2e0) returned 1 [0056.716] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\Links\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\favorites\\links\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x3bc3c0 | out: lpFileInformation=0x3bc3c0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xadc0b718, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xadc0b718, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xadc0b718, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x50)) returned 1 [0056.716] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc2a0) returned 1 [0056.716] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\Links\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3bbe60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\Links\\desktop.ini", lpFilePart=0x0) returned 0x31 [0056.716] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc2e0) returned 1 [0056.716] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\Links\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\favorites\\links\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x22baed8 | out: lpFileInformation=0x22baed8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xadc0b718, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xadc0b718, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xadc0b718, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x50)) returned 1 [0056.716] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc2a0) returned 1 [0056.716] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\Links\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3bbcc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\Links\\desktop.ini", lpFilePart=0x0) returned 0x31 [0056.716] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc1a0) returned 1 [0056.716] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\Links\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\favorites\\links\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0056.716] GetFileType (hFile=0x448) returned 0x1 [0056.716] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc110) returned 1 [0056.716] GetFileType (hFile=0x448) returned 0x1 [0056.716] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3bc338 | out: lpFileSizeHigh=0x3bc338*=0x0) returned 0x50 [0056.716] ReadFile (in: hFile=0x448, lpBuffer=0x22bb170, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bc268, lpOverlapped=0x0 | out: lpBuffer=0x22bb170*, lpNumberOfBytesRead=0x3bc268*=0x50, lpOverlapped=0x0) returned 1 [0056.717] CloseHandle (hObject=0x448) returned 1 [0056.754] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\Links\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3bbcc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\Links\\desktop.ini", lpFilePart=0x0) returned 0x31 [0056.754] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc1a0) returned 1 [0056.754] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\Links\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\favorites\\links\\desktop.ini"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0056.756] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8c30) returned 1 [0056.756] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be950) returned 1 [0056.756] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents", nBufferLength=0x105, lpBuffer=0x3be440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents", lpFilePart=0x0) returned 0x19 [0056.756] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents\\", nBufferLength=0x105, lpBuffer=0x3be3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents\\", lpFilePart=0x0) returned 0x1a [0056.756] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Documents\\*", lpFindFileData=0x3be5f0 | out: lpFindFileData=0x3be5f0) returned 0x5d8090 [0056.758] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0056.759] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0056.759] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0056.759] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0056.759] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0056.759] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 0 [0056.759] FindClose (in: hFindFile=0x5d8090 | out: hFindFile=0x5d8090) returned 1 [0056.760] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0056.760] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0056.760] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be950) returned 1 [0056.760] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents", nBufferLength=0x105, lpBuffer=0x3be440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents", lpFilePart=0x0) returned 0x19 [0056.760] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents\\", nBufferLength=0x105, lpBuffer=0x3be3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents\\", lpFilePart=0x0) returned 0x1a [0056.760] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Documents\\*", lpFindFileData=0x3be5f0 | out: lpFindFileData=0x3be5f0) returned 0x5d7670 [0056.761] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0056.761] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0056.761] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0056.761] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0056.761] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0056.761] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 0 [0056.762] FindClose (in: hFindFile=0x5d7670 | out: hFindFile=0x5d7670) returned 1 [0056.762] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0056.763] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0056.763] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents\\desktop.ini", lpFilePart=0x0) returned 0x25 [0056.763] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0056.763] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Documents\\desktop.ini" (normalized: "c:\\users\\public\\documents\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x23347e8 | out: lpFileInformation=0x23347e8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x2fc9a479, ftCreationTime.dwHighDateTime=0x1d0bb00, ftLastAccessTime.dwLowDateTime=0xf0657cae, ftLastAccessTime.dwHighDateTime=0x1d0baff, ftLastWriteTime.dwLowDateTime=0xf0657cae, ftLastWriteTime.dwHighDateTime=0x1d0baff, nFileSizeHigh=0x0, nFileSizeLow=0x116)) returned 1 [0056.763] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0056.763] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents\\desktop.ini", lpFilePart=0x0) returned 0x25 [0056.763] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0056.763] CreateFileW (lpFileName="C:\\Users\\Public\\Documents\\desktop.ini" (normalized: "c:\\users\\public\\documents\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0056.764] GetFileType (hFile=0x448) returned 0x1 [0056.764] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0056.764] GetFileType (hFile=0x448) returned 0x1 [0056.764] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x116 [0056.764] ReadFile (in: hFile=0x448, lpBuffer=0x2334b18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x2334b18*, lpNumberOfBytesRead=0x3be868*=0x116, lpOverlapped=0x0) returned 1 [0056.764] CloseHandle (hObject=0x448) returned 1 [0056.816] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents\\desktop.ini", lpFilePart=0x0) returned 0x25 [0056.816] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0056.816] CreateFileW (lpFileName="C:\\Users\\Public\\Documents\\desktop.ini" (normalized: "c:\\users\\public\\documents\\desktop.ini"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0056.818] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb230) returned 1 [0056.818] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3bbeb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents\\desktop.ini", lpFilePart=0x0) returned 0x25 [0056.818] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc350) returned 1 [0056.818] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Documents\\desktop.ini" (normalized: "c:\\users\\public\\documents\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x3bc430 | out: lpFileInformation=0x3bc430*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x2fc9a479, ftCreationTime.dwHighDateTime=0x1d0bb00, ftLastAccessTime.dwLowDateTime=0xf0657cae, ftLastAccessTime.dwHighDateTime=0x1d0baff, ftLastWriteTime.dwLowDateTime=0xf0657cae, ftLastWriteTime.dwHighDateTime=0x1d0baff, nFileSizeHigh=0x0, nFileSizeLow=0x116)) returned 1 [0056.818] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc310) returned 1 [0056.818] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3bbed0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents\\desktop.ini", lpFilePart=0x0) returned 0x25 [0056.818] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc350) returned 1 [0056.819] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Documents\\desktop.ini" (normalized: "c:\\users\\public\\documents\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x21ad508 | out: lpFileInformation=0x21ad508*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x2fc9a479, ftCreationTime.dwHighDateTime=0x1d0bb00, ftLastAccessTime.dwLowDateTime=0xf0657cae, ftLastAccessTime.dwHighDateTime=0x1d0baff, ftLastWriteTime.dwLowDateTime=0xf0657cae, ftLastWriteTime.dwHighDateTime=0x1d0baff, nFileSizeHigh=0x0, nFileSizeLow=0x116)) returned 1 [0056.819] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc310) returned 1 [0056.819] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3bbd30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents\\desktop.ini", lpFilePart=0x0) returned 0x25 [0056.819] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc210) returned 1 [0056.819] CreateFileW (lpFileName="C:\\Users\\Public\\Documents\\desktop.ini" (normalized: "c:\\users\\public\\documents\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0056.819] GetFileType (hFile=0x448) returned 0x1 [0056.819] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc180) returned 1 [0056.819] GetFileType (hFile=0x448) returned 0x1 [0056.819] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3bc3a8 | out: lpFileSizeHigh=0x3bc3a8*=0x0) returned 0x116 [0056.819] ReadFile (in: hFile=0x448, lpBuffer=0x21ad838, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bc2d8, lpOverlapped=0x0 | out: lpBuffer=0x21ad838*, lpNumberOfBytesRead=0x3bc2d8*=0x116, lpOverlapped=0x0) returned 1 [0056.819] CloseHandle (hObject=0x448) returned 1 [0056.866] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3bbd30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents\\desktop.ini", lpFilePart=0x0) returned 0x25 [0056.866] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc210) returned 1 [0056.866] CreateFileW (lpFileName="C:\\Users\\Public\\Documents\\desktop.ini" (normalized: "c:\\users\\public\\documents\\desktop.ini"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0056.868] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8ca0) returned 1 [0056.869] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0056.869] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents\\My Music", nBufferLength=0x105, lpBuffer=0x3be3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents\\My Music", lpFilePart=0x0) returned 0x22 [0056.869] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents\\My Music\\", nBufferLength=0x105, lpBuffer=0x3be370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents\\My Music\\", lpFilePart=0x0) returned 0x23 [0056.869] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Documents\\My Music\\*", lpFindFileData=0x3be580 | out: lpFindFileData=0x3be580) returned 0xffffffffffffffff [0056.869] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be810) returned 1 [0056.871] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0056.871] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents\\My Pictures", nBufferLength=0x105, lpBuffer=0x3be3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents\\My Pictures", lpFilePart=0x0) returned 0x25 [0056.871] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents\\My Pictures\\", nBufferLength=0x105, lpBuffer=0x3be370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents\\My Pictures\\", lpFilePart=0x0) returned 0x26 [0056.872] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Documents\\My Pictures\\*", lpFindFileData=0x3be580 | out: lpFindFileData=0x3be580) returned 0xffffffffffffffff [0056.872] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be810) returned 1 [0056.874] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0056.874] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents\\My Videos", nBufferLength=0x105, lpBuffer=0x3be3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents\\My Videos", lpFilePart=0x0) returned 0x23 [0056.874] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents\\My Videos\\", nBufferLength=0x105, lpBuffer=0x3be370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents\\My Videos\\", lpFilePart=0x0) returned 0x24 [0056.875] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Documents\\My Videos\\*", lpFindFileData=0x3be580 | out: lpFindFileData=0x3be580) returned 0xffffffffffffffff [0056.875] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be810) returned 1 [0056.877] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be950) returned 1 [0056.877] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures", nBufferLength=0x105, lpBuffer=0x3be440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures", lpFilePart=0x0) returned 0x18 [0056.877] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\", nBufferLength=0x105, lpBuffer=0x3be3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\", lpFilePart=0x0) returned 0x19 [0056.877] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Pictures\\*", lpFindFileData=0x3be5f0 | out: lpFindFileData=0x3be5f0) returned 0x5d79d0 [0056.877] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0056.877] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0056.877] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 0 [0056.878] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0056.878] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0056.878] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0056.878] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be950) returned 1 [0056.878] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures", nBufferLength=0x105, lpBuffer=0x3be440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures", lpFilePart=0x0) returned 0x18 [0056.878] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\", nBufferLength=0x105, lpBuffer=0x3be3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\", lpFilePart=0x0) returned 0x19 [0056.878] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Pictures\\*", lpFindFileData=0x3be5f0 | out: lpFindFileData=0x3be5f0) returned 0x5d81b0 [0056.878] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0056.878] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0056.878] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 0 [0056.879] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0056.879] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0056.879] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0056.879] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\desktop.ini", lpFilePart=0x0) returned 0x24 [0056.879] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0056.879] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Pictures\\desktop.ini" (normalized: "c:\\users\\public\\pictures\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x2228e28 | out: lpFileInformation=0x2228e28*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x2fc9a479, ftCreationTime.dwHighDateTime=0x1d0bb00, ftLastAccessTime.dwLowDateTime=0xf0657cae, ftLastAccessTime.dwHighDateTime=0x1d0baff, ftLastWriteTime.dwLowDateTime=0xf0657cae, ftLastWriteTime.dwHighDateTime=0x1d0baff, nFileSizeHigh=0x0, nFileSizeLow=0x17c)) returned 1 [0056.880] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0056.880] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\desktop.ini", lpFilePart=0x0) returned 0x24 [0056.880] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0056.880] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\desktop.ini" (normalized: "c:\\users\\public\\pictures\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0056.881] GetFileType (hFile=0x448) returned 0x1 [0056.881] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0056.881] GetFileType (hFile=0x448) returned 0x1 [0056.881] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x17c [0056.881] ReadFile (in: hFile=0x448, lpBuffer=0x22291c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x22291c0*, lpNumberOfBytesRead=0x3be868*=0x17c, lpOverlapped=0x0) returned 1 [0056.882] CloseHandle (hObject=0x448) returned 1 [0056.927] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\desktop.ini", lpFilePart=0x0) returned 0x24 [0056.927] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0056.927] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\desktop.ini" (normalized: "c:\\users\\public\\pictures\\desktop.ini"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0056.929] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb230) returned 1 [0056.929] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3bbeb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\desktop.ini", lpFilePart=0x0) returned 0x24 [0056.929] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc350) returned 1 [0056.930] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Pictures\\desktop.ini" (normalized: "c:\\users\\public\\pictures\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x3bc430 | out: lpFileInformation=0x3bc430*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x2fc9a479, ftCreationTime.dwHighDateTime=0x1d0bb00, ftLastAccessTime.dwLowDateTime=0xf0657cae, ftLastAccessTime.dwHighDateTime=0x1d0baff, ftLastWriteTime.dwLowDateTime=0xf0657cae, ftLastWriteTime.dwHighDateTime=0x1d0baff, nFileSizeHigh=0x0, nFileSizeLow=0x17c)) returned 1 [0056.930] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc310) returned 1 [0056.930] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3bbed0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\desktop.ini", lpFilePart=0x0) returned 0x24 [0056.930] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc350) returned 1 [0056.930] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Pictures\\desktop.ini" (normalized: "c:\\users\\public\\pictures\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x22a1088 | out: lpFileInformation=0x22a1088*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x2fc9a479, ftCreationTime.dwHighDateTime=0x1d0bb00, ftLastAccessTime.dwLowDateTime=0xf0657cae, ftLastAccessTime.dwHighDateTime=0x1d0baff, ftLastWriteTime.dwLowDateTime=0xf0657cae, ftLastWriteTime.dwHighDateTime=0x1d0baff, nFileSizeHigh=0x0, nFileSizeLow=0x17c)) returned 1 [0056.930] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc310) returned 1 [0056.930] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3bbd30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\desktop.ini", lpFilePart=0x0) returned 0x24 [0056.930] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc210) returned 1 [0056.930] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\desktop.ini" (normalized: "c:\\users\\public\\pictures\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0056.930] GetFileType (hFile=0x448) returned 0x1 [0056.930] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc180) returned 1 [0056.930] GetFileType (hFile=0x448) returned 0x1 [0056.930] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3bc3a8 | out: lpFileSizeHigh=0x3bc3a8*=0x0) returned 0x17c [0056.930] ReadFile (in: hFile=0x448, lpBuffer=0x22a1420, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bc2d8, lpOverlapped=0x0 | out: lpBuffer=0x22a1420*, lpNumberOfBytesRead=0x3bc2d8*=0x17c, lpOverlapped=0x0) returned 1 [0056.931] CloseHandle (hObject=0x448) returned 1 [0056.978] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3bbd30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\desktop.ini", lpFilePart=0x0) returned 0x24 [0056.978] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc210) returned 1 [0056.978] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\desktop.ini" (normalized: "c:\\users\\public\\pictures\\desktop.ini"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0056.979] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8ca0) returned 1 [0056.980] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be950) returned 1 [0056.980] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Music", nBufferLength=0x105, lpBuffer=0x3be440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Music", lpFilePart=0x0) returned 0x15 [0056.980] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Music\\", nBufferLength=0x105, lpBuffer=0x3be3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Music\\", lpFilePart=0x0) returned 0x16 [0056.980] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Music\\*", lpFindFileData=0x3be5f0 | out: lpFindFileData=0x3be5f0) returned 0x5d7c70 [0056.981] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0056.981] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0056.981] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 0 [0056.981] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0056.981] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0056.981] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0056.981] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be950) returned 1 [0056.982] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Music", nBufferLength=0x105, lpBuffer=0x3be440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Music", lpFilePart=0x0) returned 0x15 [0056.982] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Music\\", nBufferLength=0x105, lpBuffer=0x3be3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Music\\", lpFilePart=0x0) returned 0x16 [0056.982] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Music\\*", lpFindFileData=0x3be5f0 | out: lpFindFileData=0x3be5f0) returned 0x5d8090 [0056.982] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0056.982] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0056.982] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 0 [0056.982] FindClose (in: hFindFile=0x5d8090 | out: hFindFile=0x5d8090) returned 1 [0056.982] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0056.982] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0056.982] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Music\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Music\\desktop.ini", lpFilePart=0x0) returned 0x21 [0056.982] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0056.982] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Music\\desktop.ini" (normalized: "c:\\users\\public\\music\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x231a5d8 | out: lpFileInformation=0x231a5d8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x2fc9a479, ftCreationTime.dwHighDateTime=0x1d0bb00, ftLastAccessTime.dwLowDateTime=0xf0657cae, ftLastAccessTime.dwHighDateTime=0x1d0baff, ftLastWriteTime.dwLowDateTime=0xf0657cae, ftLastWriteTime.dwHighDateTime=0x1d0baff, nFileSizeHigh=0x0, nFileSizeLow=0x17c)) returned 1 [0056.983] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0056.983] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Music\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Music\\desktop.ini", lpFilePart=0x0) returned 0x21 [0056.983] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0056.983] CreateFileW (lpFileName="C:\\Users\\Public\\Music\\desktop.ini" (normalized: "c:\\users\\public\\music\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0056.983] GetFileType (hFile=0x448) returned 0x1 [0056.983] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0056.983] GetFileType (hFile=0x448) returned 0x1 [0056.983] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x17c [0056.983] ReadFile (in: hFile=0x448, lpBuffer=0x231a960, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x231a960*, lpNumberOfBytesRead=0x3be868*=0x17c, lpOverlapped=0x0) returned 1 [0056.984] CloseHandle (hObject=0x448) returned 1 [0057.035] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Music\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Music\\desktop.ini", lpFilePart=0x0) returned 0x21 [0057.035] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0057.035] CreateFileW (lpFileName="C:\\Users\\Public\\Music\\desktop.ini" (normalized: "c:\\users\\public\\music\\desktop.ini"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0057.037] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb230) returned 1 [0057.038] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Music\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3bbeb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Music\\desktop.ini", lpFilePart=0x0) returned 0x21 [0057.038] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc350) returned 1 [0057.038] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Music\\desktop.ini" (normalized: "c:\\users\\public\\music\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x3bc430 | out: lpFileInformation=0x3bc430*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x2fc9a479, ftCreationTime.dwHighDateTime=0x1d0bb00, ftLastAccessTime.dwLowDateTime=0xf0657cae, ftLastAccessTime.dwHighDateTime=0x1d0baff, ftLastWriteTime.dwLowDateTime=0xf0657cae, ftLastWriteTime.dwHighDateTime=0x1d0baff, nFileSizeHigh=0x0, nFileSizeLow=0x17c)) returned 1 [0057.038] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc310) returned 1 [0057.038] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Music\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3bbed0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Music\\desktop.ini", lpFilePart=0x0) returned 0x21 [0057.038] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc350) returned 1 [0057.038] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Music\\desktop.ini" (normalized: "c:\\users\\public\\music\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x2193508 | out: lpFileInformation=0x2193508*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x2fc9a479, ftCreationTime.dwHighDateTime=0x1d0bb00, ftLastAccessTime.dwLowDateTime=0xf0657cae, ftLastAccessTime.dwHighDateTime=0x1d0baff, ftLastWriteTime.dwLowDateTime=0xf0657cae, ftLastWriteTime.dwHighDateTime=0x1d0baff, nFileSizeHigh=0x0, nFileSizeLow=0x17c)) returned 1 [0057.038] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc310) returned 1 [0057.038] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Music\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3bbd30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Music\\desktop.ini", lpFilePart=0x0) returned 0x21 [0057.038] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc210) returned 1 [0057.039] CreateFileW (lpFileName="C:\\Users\\Public\\Music\\desktop.ini" (normalized: "c:\\users\\public\\music\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0057.039] GetFileType (hFile=0x448) returned 0x1 [0057.039] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc180) returned 1 [0057.039] GetFileType (hFile=0x448) returned 0x1 [0057.039] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3bc3a8 | out: lpFileSizeHigh=0x3bc3a8*=0x0) returned 0x17c [0057.039] ReadFile (in: hFile=0x448, lpBuffer=0x2193890, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bc2d8, lpOverlapped=0x0 | out: lpBuffer=0x2193890*, lpNumberOfBytesRead=0x3bc2d8*=0x17c, lpOverlapped=0x0) returned 1 [0057.039] CloseHandle (hObject=0x448) returned 1 [0057.082] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Music\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3bbd30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Music\\desktop.ini", lpFilePart=0x0) returned 0x21 [0057.082] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc210) returned 1 [0057.082] CreateFileW (lpFileName="C:\\Users\\Public\\Music\\desktop.ini" (normalized: "c:\\users\\public\\music\\desktop.ini"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0057.084] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8ca0) returned 1 [0057.084] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be950) returned 1 [0057.084] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Videos", nBufferLength=0x105, lpBuffer=0x3be440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Videos", lpFilePart=0x0) returned 0x16 [0057.085] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Videos\\", nBufferLength=0x105, lpBuffer=0x3be3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Videos\\", lpFilePart=0x0) returned 0x17 [0057.085] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Videos\\*", lpFindFileData=0x3be5f0 | out: lpFindFileData=0x3be5f0) returned 0x5d7550 [0057.085] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0057.085] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0057.085] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 0 [0057.085] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0057.085] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0057.085] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0057.085] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be950) returned 1 [0057.085] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Videos", nBufferLength=0x105, lpBuffer=0x3be440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Videos", lpFilePart=0x0) returned 0x16 [0057.085] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Videos\\", nBufferLength=0x105, lpBuffer=0x3be3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Videos\\", lpFilePart=0x0) returned 0x17 [0057.085] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Videos\\*", lpFindFileData=0x3be5f0 | out: lpFindFileData=0x3be5f0) returned 0x5d7550 [0057.086] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0057.086] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0057.086] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 0 [0057.086] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0057.086] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0057.086] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0057.086] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Videos\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Videos\\desktop.ini", lpFilePart=0x0) returned 0x22 [0057.086] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0057.086] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Videos\\desktop.ini" (normalized: "c:\\users\\public\\videos\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x220caa8 | out: lpFileInformation=0x220caa8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x2fcc06e0, ftCreationTime.dwHighDateTime=0x1d0bb00, ftLastAccessTime.dwLowDateTime=0xf0657cae, ftLastAccessTime.dwHighDateTime=0x1d0baff, ftLastWriteTime.dwLowDateTime=0xf0657cae, ftLastWriteTime.dwHighDateTime=0x1d0baff, nFileSizeHigh=0x0, nFileSizeLow=0x17c)) returned 1 [0057.086] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0057.086] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Videos\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Videos\\desktop.ini", lpFilePart=0x0) returned 0x22 [0057.086] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0057.086] CreateFileW (lpFileName="C:\\Users\\Public\\Videos\\desktop.ini" (normalized: "c:\\users\\public\\videos\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0057.087] GetFileType (hFile=0x448) returned 0x1 [0057.087] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0057.087] GetFileType (hFile=0x448) returned 0x1 [0057.087] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x17c [0057.087] ReadFile (in: hFile=0x448, lpBuffer=0x220ce30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x220ce30*, lpNumberOfBytesRead=0x3be868*=0x17c, lpOverlapped=0x0) returned 1 [0057.087] CloseHandle (hObject=0x448) returned 1 [0057.123] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Videos\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Videos\\desktop.ini", lpFilePart=0x0) returned 0x22 [0057.123] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0057.123] CreateFileW (lpFileName="C:\\Users\\Public\\Videos\\desktop.ini" (normalized: "c:\\users\\public\\videos\\desktop.ini"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0057.125] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb230) returned 1 [0057.125] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Videos\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3bbeb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Videos\\desktop.ini", lpFilePart=0x0) returned 0x22 [0057.125] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc350) returned 1 [0057.125] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Videos\\desktop.ini" (normalized: "c:\\users\\public\\videos\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x3bc430 | out: lpFileInformation=0x3bc430*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x2fcc06e0, ftCreationTime.dwHighDateTime=0x1d0bb00, ftLastAccessTime.dwLowDateTime=0xf0657cae, ftLastAccessTime.dwHighDateTime=0x1d0baff, ftLastWriteTime.dwLowDateTime=0xf0657cae, ftLastWriteTime.dwHighDateTime=0x1d0baff, nFileSizeHigh=0x0, nFileSizeLow=0x17c)) returned 1 [0057.125] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc310) returned 1 [0057.125] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Videos\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3bbed0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Videos\\desktop.ini", lpFilePart=0x0) returned 0x22 [0057.125] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc350) returned 1 [0057.125] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Videos\\desktop.ini" (normalized: "c:\\users\\public\\videos\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x2284ce0 | out: lpFileInformation=0x2284ce0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x2fcc06e0, ftCreationTime.dwHighDateTime=0x1d0bb00, ftLastAccessTime.dwLowDateTime=0xf0657cae, ftLastAccessTime.dwHighDateTime=0x1d0baff, ftLastWriteTime.dwLowDateTime=0xf0657cae, ftLastWriteTime.dwHighDateTime=0x1d0baff, nFileSizeHigh=0x0, nFileSizeLow=0x17c)) returned 1 [0057.125] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc310) returned 1 [0057.125] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Videos\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3bbd30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Videos\\desktop.ini", lpFilePart=0x0) returned 0x22 [0057.125] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc210) returned 1 [0057.126] CreateFileW (lpFileName="C:\\Users\\Public\\Videos\\desktop.ini" (normalized: "c:\\users\\public\\videos\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0057.126] GetFileType (hFile=0x448) returned 0x1 [0057.126] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc180) returned 1 [0057.126] GetFileType (hFile=0x448) returned 0x1 [0057.126] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3bc3a8 | out: lpFileSizeHigh=0x3bc3a8*=0x0) returned 0x17c [0057.126] ReadFile (in: hFile=0x448, lpBuffer=0x2285068, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bc2d8, lpOverlapped=0x0 | out: lpBuffer=0x2285068*, lpNumberOfBytesRead=0x3bc2d8*=0x17c, lpOverlapped=0x0) returned 1 [0057.126] CloseHandle (hObject=0x448) returned 1 [0057.164] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Videos\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3bbd30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Videos\\desktop.ini", lpFilePart=0x0) returned 0x22 [0057.164] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc210) returned 1 [0057.164] CreateFileW (lpFileName="C:\\Users\\Public\\Videos\\desktop.ini" (normalized: "c:\\users\\public\\videos\\desktop.ini"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0057.165] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8ca0) returned 1 [0057.166] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be950) returned 1 [0057.166] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Desktop", nBufferLength=0x105, lpBuffer=0x3be440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Desktop", lpFilePart=0x0) returned 0x17 [0057.166] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Desktop\\", nBufferLength=0x105, lpBuffer=0x3be3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Desktop\\", lpFilePart=0x0) returned 0x18 [0057.166] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Desktop\\*", lpFindFileData=0x3be5f0 | out: lpFindFileData=0x3be5f0) returned 0x5d78b0 [0057.166] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0057.167] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0057.167] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0057.167] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0057.167] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0057.167] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 0 [0057.167] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0057.167] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0057.167] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0057.167] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be950) returned 1 [0057.167] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Desktop", nBufferLength=0x105, lpBuffer=0x3be440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Desktop", lpFilePart=0x0) returned 0x17 [0057.167] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Desktop\\", nBufferLength=0x105, lpBuffer=0x3be3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Desktop\\", lpFilePart=0x0) returned 0x18 [0057.167] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Desktop\\*", lpFindFileData=0x3be5f0 | out: lpFindFileData=0x3be5f0) returned 0x5d7fd0 [0057.168] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0057.168] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0057.168] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0057.168] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0057.168] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0057.168] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 0 [0057.169] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0057.169] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0057.169] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0057.169] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Desktop\\Acrobat Reader DC.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Desktop\\Acrobat Reader DC.lnk", lpFilePart=0x0) returned 0x2d [0057.169] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0057.169] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Desktop\\Acrobat Reader DC.lnk" (normalized: "c:\\users\\public\\desktop\\acrobat reader dc.lnk"), fInfoLevelId=0x0, lpFileInformation=0x22fed20 | out: lpFileInformation=0x22fed20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x523d642, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x523d642, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x523d642, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x852)) returned 1 [0057.169] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0057.169] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Desktop\\Acrobat Reader DC.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Desktop\\Acrobat Reader DC.lnk", lpFilePart=0x0) returned 0x2d [0057.169] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0057.169] CreateFileW (lpFileName="C:\\Users\\Public\\Desktop\\Acrobat Reader DC.lnk" (normalized: "c:\\users\\public\\desktop\\acrobat reader dc.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0057.169] GetFileType (hFile=0x448) returned 0x1 [0057.169] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0057.169] GetFileType (hFile=0x448) returned 0x1 [0057.169] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x852 [0057.169] ReadFile (in: hFile=0x448, lpBuffer=0x22ff7e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x22ff7e0*, lpNumberOfBytesRead=0x3be868*=0x852, lpOverlapped=0x0) returned 1 [0057.170] CloseHandle (hObject=0x448) returned 1 [0057.212] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Desktop\\Acrobat Reader DC.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Desktop\\Acrobat Reader DC.lnk", lpFilePart=0x0) returned 0x2d [0057.212] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0057.212] CreateFileW (lpFileName="C:\\Users\\Public\\Desktop\\Acrobat Reader DC.lnk" (normalized: "c:\\users\\public\\desktop\\acrobat reader dc.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0057.218] GetFileType (hFile=0x448) returned 0x1 [0057.218] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0057.219] GetFileType (hFile=0x448) returned 0x1 [0057.219] WriteFile (in: hFile=0x448, lpBuffer=0x217a780*, nNumberOfBytesToWrite=0x860, lpNumberOfBytesWritten=0x3be778, lpOverlapped=0x0 | out: lpBuffer=0x217a780*, lpNumberOfBytesWritten=0x3be778*=0x860, lpOverlapped=0x0) returned 1 [0057.219] CloseHandle (hObject=0x448) returned 1 [0057.231] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Desktop\\Acrobat Reader DC.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Desktop\\Acrobat Reader DC.lnk", lpFilePart=0x0) returned 0x2d [0057.231] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Desktop\\Acrobat Reader DC.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Desktop\\Acrobat Reader DC.lnk.xuy", lpFilePart=0x0) returned 0x31 [0057.231] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0057.231] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Desktop\\Acrobat Reader DC.lnk" (normalized: "c:\\users\\public\\desktop\\acrobat reader dc.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x523d642, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x523d642, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0xdf49581, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x860)) returned 1 [0057.232] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0057.232] MoveFileW (lpExistingFileName="C:\\Users\\Public\\Desktop\\Acrobat Reader DC.lnk" (normalized: "c:\\users\\public\\desktop\\acrobat reader dc.lnk"), lpNewFileName="C:\\Users\\Public\\Desktop\\Acrobat Reader DC.lnk.xuy" (normalized: "c:\\users\\public\\desktop\\acrobat reader dc.lnk.xuy")) returned 1 [0057.233] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Desktop\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Desktop\\desktop.ini", lpFilePart=0x0) returned 0x23 [0057.233] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0057.234] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Desktop\\desktop.ini" (normalized: "c:\\users\\public\\desktop\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x217b958 | out: lpFileInformation=0x217b958*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x2fc9a479, ftCreationTime.dwHighDateTime=0x1d0bb00, ftLastAccessTime.dwLowDateTime=0xf0657cae, ftLastAccessTime.dwHighDateTime=0x1d0baff, ftLastWriteTime.dwLowDateTime=0xf0657cae, ftLastWriteTime.dwHighDateTime=0x1d0baff, nFileSizeHigh=0x0, nFileSizeLow=0xae)) returned 1 [0057.234] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0057.234] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Desktop\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Desktop\\desktop.ini", lpFilePart=0x0) returned 0x23 [0057.234] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0057.234] CreateFileW (lpFileName="C:\\Users\\Public\\Desktop\\desktop.ini" (normalized: "c:\\users\\public\\desktop\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0057.234] GetFileType (hFile=0x448) returned 0x1 [0057.234] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0057.234] GetFileType (hFile=0x448) returned 0x1 [0057.234] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0xae [0057.234] ReadFile (in: hFile=0x448, lpBuffer=0x217bc10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x217bc10*, lpNumberOfBytesRead=0x3be868*=0xae, lpOverlapped=0x0) returned 1 [0057.235] CloseHandle (hObject=0x448) returned 1 [0057.275] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Desktop\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Desktop\\desktop.ini", lpFilePart=0x0) returned 0x23 [0057.275] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0057.275] CreateFileW (lpFileName="C:\\Users\\Public\\Desktop\\desktop.ini" (normalized: "c:\\users\\public\\desktop\\desktop.ini"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0057.276] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb230) returned 1 [0057.276] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Desktop\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3bbeb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Desktop\\desktop.ini", lpFilePart=0x0) returned 0x23 [0057.277] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc350) returned 1 [0057.277] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Desktop\\desktop.ini" (normalized: "c:\\users\\public\\desktop\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x3bc430 | out: lpFileInformation=0x3bc430*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x2fc9a479, ftCreationTime.dwHighDateTime=0x1d0bb00, ftLastAccessTime.dwLowDateTime=0xf0657cae, ftLastAccessTime.dwHighDateTime=0x1d0baff, ftLastWriteTime.dwLowDateTime=0xf0657cae, ftLastWriteTime.dwHighDateTime=0x1d0baff, nFileSizeHigh=0x0, nFileSizeLow=0xae)) returned 1 [0057.277] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc310) returned 1 [0057.277] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Desktop\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3bbed0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Desktop\\desktop.ini", lpFilePart=0x0) returned 0x23 [0057.277] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc350) returned 1 [0057.277] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Desktop\\desktop.ini" (normalized: "c:\\users\\public\\desktop\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x21f35b8 | out: lpFileInformation=0x21f35b8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x2fc9a479, ftCreationTime.dwHighDateTime=0x1d0bb00, ftLastAccessTime.dwLowDateTime=0xf0657cae, ftLastAccessTime.dwHighDateTime=0x1d0baff, ftLastWriteTime.dwLowDateTime=0xf0657cae, ftLastWriteTime.dwHighDateTime=0x1d0baff, nFileSizeHigh=0x0, nFileSizeLow=0xae)) returned 1 [0057.277] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc310) returned 1 [0057.277] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Desktop\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3bbd30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Desktop\\desktop.ini", lpFilePart=0x0) returned 0x23 [0057.277] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc210) returned 1 [0057.277] CreateFileW (lpFileName="C:\\Users\\Public\\Desktop\\desktop.ini" (normalized: "c:\\users\\public\\desktop\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0057.277] GetFileType (hFile=0x448) returned 0x1 [0057.277] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc180) returned 1 [0057.277] GetFileType (hFile=0x448) returned 0x1 [0057.277] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3bc3a8 | out: lpFileSizeHigh=0x3bc3a8*=0x0) returned 0xae [0057.277] ReadFile (in: hFile=0x448, lpBuffer=0x21f3870, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bc2d8, lpOverlapped=0x0 | out: lpBuffer=0x21f3870*, lpNumberOfBytesRead=0x3bc2d8*=0xae, lpOverlapped=0x0) returned 1 [0057.277] CloseHandle (hObject=0x448) returned 1 [0057.315] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Desktop\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3bbd30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Desktop\\desktop.ini", lpFilePart=0x0) returned 0x23 [0057.315] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc210) returned 1 [0057.316] CreateFileW (lpFileName="C:\\Users\\Public\\Desktop\\desktop.ini" (normalized: "c:\\users\\public\\desktop\\desktop.ini"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0057.317] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8ca0) returned 1 [0057.318] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Desktop\\Google Chrome.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Desktop\\Google Chrome.lnk", lpFilePart=0x0) returned 0x29 [0057.318] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0057.318] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Desktop\\Google Chrome.lnk" (normalized: "c:\\users\\public\\desktop\\google chrome.lnk"), fInfoLevelId=0x0, lpFileInformation=0x226b1e0 | out: lpFileInformation=0x226b1e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ee1f2fe, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x6ee1f2fe, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x6ee1f2fe, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x922)) returned 1 [0057.318] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0057.318] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Desktop\\Google Chrome.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Desktop\\Google Chrome.lnk", lpFilePart=0x0) returned 0x29 [0057.318] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0057.318] CreateFileW (lpFileName="C:\\Users\\Public\\Desktop\\Google Chrome.lnk" (normalized: "c:\\users\\public\\desktop\\google chrome.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0057.318] GetFileType (hFile=0x448) returned 0x1 [0057.318] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0057.318] GetFileType (hFile=0x448) returned 0x1 [0057.318] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x922 [0057.318] ReadFile (in: hFile=0x448, lpBuffer=0x226bd50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x226bd50*, lpNumberOfBytesRead=0x3be868*=0x922, lpOverlapped=0x0) returned 1 [0057.319] CloseHandle (hObject=0x448) returned 1 [0057.356] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Desktop\\Google Chrome.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Desktop\\Google Chrome.lnk", lpFilePart=0x0) returned 0x29 [0057.357] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0057.357] CreateFileW (lpFileName="C:\\Users\\Public\\Desktop\\Google Chrome.lnk" (normalized: "c:\\users\\public\\desktop\\google chrome.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0057.358] GetFileType (hFile=0x448) returned 0x1 [0057.358] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0057.358] GetFileType (hFile=0x448) returned 0x1 [0057.358] WriteFile (in: hFile=0x448, lpBuffer=0x22e5af0*, nNumberOfBytesToWrite=0x930, lpNumberOfBytesWritten=0x3be778, lpOverlapped=0x0 | out: lpBuffer=0x22e5af0*, lpNumberOfBytesWritten=0x3be778*=0x930, lpOverlapped=0x0) returned 1 [0057.359] CloseHandle (hObject=0x448) returned 1 [0057.360] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Desktop\\Google Chrome.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Desktop\\Google Chrome.lnk", lpFilePart=0x0) returned 0x29 [0057.360] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Desktop\\Google Chrome.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Desktop\\Google Chrome.lnk.xuy", lpFilePart=0x0) returned 0x2d [0057.360] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0057.360] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Desktop\\Google Chrome.lnk" (normalized: "c:\\users\\public\\desktop\\google chrome.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ee1f2fe, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x6ee1f2fe, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0xe0a0bf1, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x930)) returned 1 [0057.360] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0057.360] MoveFileW (lpExistingFileName="C:\\Users\\Public\\Desktop\\Google Chrome.lnk" (normalized: "c:\\users\\public\\desktop\\google chrome.lnk"), lpNewFileName="C:\\Users\\Public\\Desktop\\Google Chrome.lnk.xuy" (normalized: "c:\\users\\public\\desktop\\google chrome.lnk.xuy")) returned 1 [0057.362] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Desktop\\Mozilla Firefox.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Desktop\\Mozilla Firefox.lnk", lpFilePart=0x0) returned 0x2b [0057.362] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0057.362] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Desktop\\Mozilla Firefox.lnk" (normalized: "c:\\users\\public\\desktop\\mozilla firefox.lnk"), fInfoLevelId=0x0, lpFileInformation=0x22e6cb0 | out: lpFileInformation=0x22e6cb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1fa82ca5, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x324cb7a4, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x324cb7a4, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x4c6)) returned 1 [0057.362] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0057.362] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Desktop\\Mozilla Firefox.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Desktop\\Mozilla Firefox.lnk", lpFilePart=0x0) returned 0x2b [0057.362] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0057.362] CreateFileW (lpFileName="C:\\Users\\Public\\Desktop\\Mozilla Firefox.lnk" (normalized: "c:\\users\\public\\desktop\\mozilla firefox.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0057.362] GetFileType (hFile=0x448) returned 0x1 [0057.362] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0057.362] GetFileType (hFile=0x448) returned 0x1 [0057.362] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x4c6 [0057.362] ReadFile (in: hFile=0x448, lpBuffer=0x22e73c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x22e73c0*, lpNumberOfBytesRead=0x3be868*=0x4c6, lpOverlapped=0x0) returned 1 [0057.363] CloseHandle (hObject=0x448) returned 1 [0057.400] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Desktop\\Mozilla Firefox.lnk", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Desktop\\Mozilla Firefox.lnk", lpFilePart=0x0) returned 0x2b [0057.400] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0057.400] CreateFileW (lpFileName="C:\\Users\\Public\\Desktop\\Mozilla Firefox.lnk" (normalized: "c:\\users\\public\\desktop\\mozilla firefox.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0057.402] GetFileType (hFile=0x448) returned 0x1 [0057.402] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0057.402] GetFileType (hFile=0x448) returned 0x1 [0057.402] WriteFile (in: hFile=0x448, lpBuffer=0x2161848*, nNumberOfBytesToWrite=0x4d0, lpNumberOfBytesWritten=0x3be778, lpOverlapped=0x0 | out: lpBuffer=0x2161848*, lpNumberOfBytesWritten=0x3be778*=0x4d0, lpOverlapped=0x0) returned 1 [0057.403] CloseHandle (hObject=0x448) returned 1 [0057.404] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Desktop\\Mozilla Firefox.lnk", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Desktop\\Mozilla Firefox.lnk", lpFilePart=0x0) returned 0x2b [0057.404] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Desktop\\Mozilla Firefox.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Desktop\\Mozilla Firefox.lnk.xuy", lpFilePart=0x0) returned 0x2f [0057.404] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0057.404] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Desktop\\Mozilla Firefox.lnk" (normalized: "c:\\users\\public\\desktop\\mozilla firefox.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1fa82ca5, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x324cb7a4, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xe0ecd45, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x4d0)) returned 1 [0057.404] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0057.404] MoveFileW (lpExistingFileName="C:\\Users\\Public\\Desktop\\Mozilla Firefox.lnk" (normalized: "c:\\users\\public\\desktop\\mozilla firefox.lnk"), lpNewFileName="C:\\Users\\Public\\Desktop\\Mozilla Firefox.lnk.xuy" (normalized: "c:\\users\\public\\desktop\\mozilla firefox.lnk.xuy")) returned 1 [0057.405] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be950) returned 1 [0057.405] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop", nBufferLength=0x105, lpBuffer=0x3be440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpFilePart=0x0) returned 0x1d [0057.405] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\", nBufferLength=0x105, lpBuffer=0x3be3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\", lpFilePart=0x0) returned 0x1e [0057.405] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\*", lpFindFileData=0x3be5f0 | out: lpFindFileData=0x3be5f0) returned 0x5d7a30 [0057.406] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0057.406] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0057.406] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0057.406] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0057.406] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0057.406] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0057.406] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0057.407] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0057.407] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0057.407] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0057.407] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0057.407] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0057.407] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0057.407] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0057.407] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0057.407] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0057.408] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0057.408] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0057.408] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0057.408] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0057.408] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0057.408] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0057.408] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0057.408] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0057.408] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0057.408] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0057.409] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0057.409] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0057.409] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0057.409] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0057.409] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0057.409] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0057.409] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0057.409] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0057.409] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0057.409] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0057.410] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 0 [0057.410] FindClose (in: hFindFile=0x5d7a30 | out: hFindFile=0x5d7a30) returned 1 [0057.410] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0057.410] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0057.410] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be950) returned 1 [0057.410] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop", nBufferLength=0x105, lpBuffer=0x3be440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpFilePart=0x0) returned 0x1d [0057.410] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\", nBufferLength=0x105, lpBuffer=0x3be3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\", lpFilePart=0x0) returned 0x1e [0057.410] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\*", lpFindFileData=0x3be5f0 | out: lpFindFileData=0x3be5f0) returned 0x5d78b0 [0057.410] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0057.410] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0057.410] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0057.411] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0057.411] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0057.411] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0057.411] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0057.411] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0057.411] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0057.411] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0057.411] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0057.412] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0057.412] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0057.412] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0057.412] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0057.412] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0057.412] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0057.412] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0057.412] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0057.413] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0057.413] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0057.413] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0057.413] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0057.413] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0057.413] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0057.413] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0057.414] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0057.414] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0057.414] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0057.414] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0057.414] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0057.414] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0057.415] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0057.415] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0057.415] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0057.415] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0057.415] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 0 [0057.415] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0057.415] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0057.415] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0057.415] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\-cvcX Qn.mkv", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\-cvcX Qn.mkv", lpFilePart=0x0) returned 0x2a [0057.415] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0057.415] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\-cvcX Qn.mkv" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\-cvcx qn.mkv"), fInfoLevelId=0x0, lpFileInformation=0x216b618 | out: lpFileInformation=0x216b618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84df0f0, ftCreationTime.dwHighDateTime=0x1d464de, ftLastAccessTime.dwLowDateTime=0x8e2e140, ftLastAccessTime.dwHighDateTime=0x1d4635a, ftLastWriteTime.dwLowDateTime=0x8e2e140, ftLastWriteTime.dwHighDateTime=0x1d4635a, nFileSizeHigh=0x0, nFileSizeLow=0x11642)) returned 1 [0057.416] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0057.416] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\-cvcX Qn.mkv", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\-cvcX Qn.mkv", lpFilePart=0x0) returned 0x2a [0057.416] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0057.416] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\-cvcX Qn.mkv" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\-cvcx qn.mkv"), fInfoLevelId=0x0, lpFileInformation=0x216b728 | out: lpFileInformation=0x216b728*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84df0f0, ftCreationTime.dwHighDateTime=0x1d464de, ftLastAccessTime.dwLowDateTime=0x8e2e140, ftLastAccessTime.dwHighDateTime=0x1d4635a, ftLastWriteTime.dwLowDateTime=0x8e2e140, ftLastWriteTime.dwHighDateTime=0x1d4635a, nFileSizeHigh=0x0, nFileSizeLow=0x11642)) returned 1 [0057.416] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0057.416] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\-cvcX Qn.mkv", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\-cvcX Qn.mkv", lpFilePart=0x0) returned 0x2a [0057.416] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0057.416] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\-cvcX Qn.mkv" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\-cvcx qn.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0057.416] GetFileType (hFile=0x448) returned 0x1 [0057.416] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0057.416] GetFileType (hFile=0x448) returned 0x1 [0057.416] ReadFile (in: hFile=0x448, lpBuffer=0x216da78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be8b8, lpOverlapped=0x0 | out: lpBuffer=0x216da78*, lpNumberOfBytesRead=0x3be8b8*=0x1000, lpOverlapped=0x0) returned 1 [0057.427] CloseHandle (hObject=0x448) returned 1 [0057.427] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\-cvcX Qn.mkv", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\-cvcX Qn.mkv", lpFilePart=0x0) returned 0x2a [0057.427] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0057.427] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\-cvcX Qn.mkv" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\-cvcx qn.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0057.427] GetFileType (hFile=0x448) returned 0x1 [0057.427] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0057.427] GetFileType (hFile=0x448) returned 0x1 [0057.427] WriteFile (in: hFile=0x448, lpBuffer=0x216b818*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be968, lpOverlapped=0x0 | out: lpBuffer=0x216b818*, lpNumberOfBytesWritten=0x3be968*=0x2000, lpOverlapped=0x0) returned 1 [0057.427] CloseHandle (hObject=0x448) returned 1 [0057.428] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\-cvcX Qn.mkv", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\-cvcX Qn.mkv", lpFilePart=0x0) returned 0x2a [0057.428] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\-cvcX Qn.mkv.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\-cvcX Qn.mkv.xuy", lpFilePart=0x0) returned 0x2e [0057.428] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0057.428] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\-cvcX Qn.mkv" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\-cvcx qn.mkv"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84df0f0, ftCreationTime.dwHighDateTime=0x1d464de, ftLastAccessTime.dwLowDateTime=0x8e2e140, ftLastAccessTime.dwHighDateTime=0x1d4635a, ftLastWriteTime.dwLowDateTime=0xe1392a8, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x11642)) returned 1 [0057.428] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0057.429] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\-cvcX Qn.mkv" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\-cvcx qn.mkv"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\-cvcX Qn.mkv.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\-cvcx qn.mkv.xuy")) returned 1 [0057.430] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\00p5vLt xbX.avi", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\00p5vLt xbX.avi", lpFilePart=0x0) returned 0x2d [0057.430] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0057.430] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\00p5vLt xbX.avi" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\00p5vlt xbx.avi"), fInfoLevelId=0x0, lpFileInformation=0x21e9d30 | out: lpFileInformation=0x21e9d30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0b823d0, ftCreationTime.dwHighDateTime=0x1d46630, ftLastAccessTime.dwLowDateTime=0xf34f1c10, ftLastAccessTime.dwHighDateTime=0x1d4592f, ftLastWriteTime.dwLowDateTime=0xf34f1c10, ftLastWriteTime.dwHighDateTime=0x1d4592f, nFileSizeHigh=0x0, nFileSizeLow=0x7977)) returned 1 [0057.430] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0057.430] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\00p5vLt xbX.avi", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\00p5vLt xbX.avi", lpFilePart=0x0) returned 0x2d [0057.430] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0057.430] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\00p5vLt xbX.avi" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\00p5vlt xbx.avi"), fInfoLevelId=0x0, lpFileInformation=0x21e9e48 | out: lpFileInformation=0x21e9e48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0b823d0, ftCreationTime.dwHighDateTime=0x1d46630, ftLastAccessTime.dwLowDateTime=0xf34f1c10, ftLastAccessTime.dwHighDateTime=0x1d4592f, ftLastWriteTime.dwLowDateTime=0xf34f1c10, ftLastWriteTime.dwHighDateTime=0x1d4592f, nFileSizeHigh=0x0, nFileSizeLow=0x7977)) returned 1 [0057.430] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0057.430] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\00p5vLt xbX.avi", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\00p5vLt xbX.avi", lpFilePart=0x0) returned 0x2d [0057.430] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0057.430] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\00p5vLt xbX.avi" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\00p5vlt xbx.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0057.431] GetFileType (hFile=0x448) returned 0x1 [0057.431] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0057.431] GetFileType (hFile=0x448) returned 0x1 [0057.431] ReadFile (in: hFile=0x448, lpBuffer=0x21ec1a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be8b8, lpOverlapped=0x0 | out: lpBuffer=0x21ec1a8*, lpNumberOfBytesRead=0x3be8b8*=0x1000, lpOverlapped=0x0) returned 1 [0057.458] CloseHandle (hObject=0x448) returned 1 [0057.458] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\00p5vLt xbX.avi", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\00p5vLt xbX.avi", lpFilePart=0x0) returned 0x2d [0057.458] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0057.458] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\00p5vLt xbX.avi" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\00p5vlt xbx.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0057.459] GetFileType (hFile=0x448) returned 0x1 [0057.459] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0057.459] GetFileType (hFile=0x448) returned 0x1 [0057.459] WriteFile (in: hFile=0x448, lpBuffer=0x21e9f40*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be968, lpOverlapped=0x0 | out: lpBuffer=0x21e9f40*, lpNumberOfBytesWritten=0x3be968*=0x2000, lpOverlapped=0x0) returned 1 [0057.459] CloseHandle (hObject=0x448) returned 1 [0057.460] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\00p5vLt xbX.avi", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\00p5vLt xbX.avi", lpFilePart=0x0) returned 0x2d [0057.460] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\00p5vLt xbX.avi.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\00p5vLt xbX.avi.xuy", lpFilePart=0x0) returned 0x31 [0057.460] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0057.460] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\00p5vLt xbX.avi" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\00p5vlt xbx.avi"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0b823d0, ftCreationTime.dwHighDateTime=0x1d46630, ftLastAccessTime.dwLowDateTime=0xf34f1c10, ftLastAccessTime.dwHighDateTime=0x1d4592f, ftLastWriteTime.dwLowDateTime=0xe18563f, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x7977)) returned 1 [0057.460] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0057.460] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\00p5vLt xbX.avi" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\00p5vlt xbx.avi"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\00p5vLt xbX.avi.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\00p5vlt xbx.avi.xuy")) returned 1 [0057.462] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\00_yfQNqHGFuHt64v1.m4a", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\00_yfQNqHGFuHt64v1.m4a", lpFilePart=0x0) returned 0x34 [0057.462] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0057.462] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\00_yfQNqHGFuHt64v1.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\00_yfqnqhgfuht64v1.m4a"), fInfoLevelId=0x0, lpFileInformation=0x2268480 | out: lpFileInformation=0x2268480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ad2c5e0, ftCreationTime.dwHighDateTime=0x1d4566c, ftLastAccessTime.dwLowDateTime=0xed92950, ftLastAccessTime.dwHighDateTime=0x1d4609a, ftLastWriteTime.dwLowDateTime=0xed92950, ftLastWriteTime.dwHighDateTime=0x1d4609a, nFileSizeHigh=0x0, nFileSizeLow=0x7fc0)) returned 1 [0057.462] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0057.462] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\00_yfQNqHGFuHt64v1.m4a", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\00_yfQNqHGFuHt64v1.m4a", lpFilePart=0x0) returned 0x34 [0057.462] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0057.462] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\00_yfQNqHGFuHt64v1.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\00_yfqnqhgfuht64v1.m4a"), fInfoLevelId=0x0, lpFileInformation=0x22685b8 | out: lpFileInformation=0x22685b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ad2c5e0, ftCreationTime.dwHighDateTime=0x1d4566c, ftLastAccessTime.dwLowDateTime=0xed92950, ftLastAccessTime.dwHighDateTime=0x1d4609a, ftLastWriteTime.dwLowDateTime=0xed92950, ftLastWriteTime.dwHighDateTime=0x1d4609a, nFileSizeHigh=0x0, nFileSizeLow=0x7fc0)) returned 1 [0057.462] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0057.462] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\00_yfQNqHGFuHt64v1.m4a", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\00_yfQNqHGFuHt64v1.m4a", lpFilePart=0x0) returned 0x34 [0057.462] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0057.462] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\00_yfQNqHGFuHt64v1.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\00_yfqnqhgfuht64v1.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0057.462] GetFileType (hFile=0x448) returned 0x1 [0057.462] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0057.462] GetFileType (hFile=0x448) returned 0x1 [0057.462] ReadFile (in: hFile=0x448, lpBuffer=0x226a958, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be8b8, lpOverlapped=0x0 | out: lpBuffer=0x226a958*, lpNumberOfBytesRead=0x3be8b8*=0x1000, lpOverlapped=0x0) returned 1 [0057.473] CloseHandle (hObject=0x448) returned 1 [0057.473] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\00_yfQNqHGFuHt64v1.m4a", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\00_yfQNqHGFuHt64v1.m4a", lpFilePart=0x0) returned 0x34 [0057.473] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0057.473] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\00_yfQNqHGFuHt64v1.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\00_yfqnqhgfuht64v1.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0057.473] GetFileType (hFile=0x448) returned 0x1 [0057.473] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0057.473] GetFileType (hFile=0x448) returned 0x1 [0057.473] WriteFile (in: hFile=0x448, lpBuffer=0x22686d0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be968, lpOverlapped=0x0 | out: lpBuffer=0x22686d0*, lpNumberOfBytesWritten=0x3be968*=0x2000, lpOverlapped=0x0) returned 1 [0057.473] CloseHandle (hObject=0x448) returned 1 [0057.474] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\00_yfQNqHGFuHt64v1.m4a", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\00_yfQNqHGFuHt64v1.m4a", lpFilePart=0x0) returned 0x34 [0057.474] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\00_yfQNqHGFuHt64v1.m4a.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\00_yfQNqHGFuHt64v1.m4a.xuy", lpFilePart=0x0) returned 0x38 [0057.474] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0057.474] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\00_yfQNqHGFuHt64v1.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\00_yfqnqhgfuht64v1.m4a"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ad2c5e0, ftCreationTime.dwHighDateTime=0x1d4566c, ftLastAccessTime.dwLowDateTime=0xed92950, ftLastAccessTime.dwHighDateTime=0x1d4609a, ftLastWriteTime.dwLowDateTime=0xe1ab962, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x7fc0)) returned 1 [0057.474] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0057.474] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\00_yfQNqHGFuHt64v1.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\00_yfqnqhgfuht64v1.m4a"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\00_yfQNqHGFuHt64v1.m4a.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\00_yfqnqhgfuht64v1.m4a.xuy")) returned 1 [0057.476] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\2A5pVv5N.bmp", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\2A5pVv5N.bmp", lpFilePart=0x0) returned 0x2a [0057.476] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0057.476] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\2A5pVv5N.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\2a5pvv5n.bmp"), fInfoLevelId=0x0, lpFileInformation=0x22e6c80 | out: lpFileInformation=0x22e6c80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc97517d0, ftCreationTime.dwHighDateTime=0x1d45788, ftLastAccessTime.dwLowDateTime=0x4c843d60, ftLastAccessTime.dwHighDateTime=0x1d46416, ftLastWriteTime.dwLowDateTime=0x4c843d60, ftLastWriteTime.dwHighDateTime=0x1d46416, nFileSizeHigh=0x0, nFileSizeLow=0x12110)) returned 1 [0057.476] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0057.476] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\2A5pVv5N.bmp", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\2A5pVv5N.bmp", lpFilePart=0x0) returned 0x2a [0057.476] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0057.476] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\2A5pVv5N.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\2a5pvv5n.bmp"), fInfoLevelId=0x0, lpFileInformation=0x22e6d90 | out: lpFileInformation=0x22e6d90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc97517d0, ftCreationTime.dwHighDateTime=0x1d45788, ftLastAccessTime.dwLowDateTime=0x4c843d60, ftLastAccessTime.dwHighDateTime=0x1d46416, ftLastWriteTime.dwLowDateTime=0x4c843d60, ftLastWriteTime.dwHighDateTime=0x1d46416, nFileSizeHigh=0x0, nFileSizeLow=0x12110)) returned 1 [0057.476] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0057.476] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\2A5pVv5N.bmp", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\2A5pVv5N.bmp", lpFilePart=0x0) returned 0x2a [0057.476] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0057.476] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\2A5pVv5N.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\2a5pvv5n.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0057.476] GetFileType (hFile=0x448) returned 0x1 [0057.476] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0057.476] GetFileType (hFile=0x448) returned 0x1 [0057.476] ReadFile (in: hFile=0x448, lpBuffer=0x22e90e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be8b8, lpOverlapped=0x0 | out: lpBuffer=0x22e90e0*, lpNumberOfBytesRead=0x3be8b8*=0x1000, lpOverlapped=0x0) returned 1 [0057.532] CloseHandle (hObject=0x448) returned 1 [0057.532] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\2A5pVv5N.bmp", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\2A5pVv5N.bmp", lpFilePart=0x0) returned 0x2a [0057.532] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0057.533] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\2A5pVv5N.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\2a5pvv5n.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0057.533] GetFileType (hFile=0x448) returned 0x1 [0057.533] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0057.533] GetFileType (hFile=0x448) returned 0x1 [0057.533] WriteFile (in: hFile=0x448, lpBuffer=0x213f210*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be968, lpOverlapped=0x0 | out: lpBuffer=0x213f210*, lpNumberOfBytesWritten=0x3be968*=0x2000, lpOverlapped=0x0) returned 1 [0057.597] CloseHandle (hObject=0x448) returned 1 [0057.597] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\2A5pVv5N.bmp", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\2A5pVv5N.bmp", lpFilePart=0x0) returned 0x2a [0057.597] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\2A5pVv5N.bmp.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\2A5pVv5N.bmp.xuy", lpFilePart=0x0) returned 0x2e [0057.597] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0057.598] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\2A5pVv5N.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\2a5pvv5n.bmp"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc97517d0, ftCreationTime.dwHighDateTime=0x1d45788, ftLastAccessTime.dwLowDateTime=0x4c843d60, ftLastAccessTime.dwHighDateTime=0x1d46416, ftLastWriteTime.dwLowDateTime=0xe2dcd37, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x12110)) returned 1 [0057.598] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0057.598] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\2A5pVv5N.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\2a5pvv5n.bmp"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\2A5pVv5N.bmp.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\2a5pvv5n.bmp.xuy")) returned 1 [0057.598] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\4GlynYCXpbRyePe.m4a", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\4GlynYCXpbRyePe.m4a", lpFilePart=0x0) returned 0x31 [0057.598] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0057.598] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\4GlynYCXpbRyePe.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\4glynycxpbryepe.m4a"), fInfoLevelId=0x0, lpFileInformation=0x216a788 | out: lpFileInformation=0x216a788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5fa8ccb0, ftCreationTime.dwHighDateTime=0x1d45dec, ftLastAccessTime.dwLowDateTime=0x71274f0, ftLastAccessTime.dwHighDateTime=0x1d45c31, ftLastWriteTime.dwLowDateTime=0x71274f0, ftLastWriteTime.dwHighDateTime=0x1d45c31, nFileSizeHigh=0x0, nFileSizeLow=0x36cc)) returned 1 [0057.598] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0057.599] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\4GlynYCXpbRyePe.m4a", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\4GlynYCXpbRyePe.m4a", lpFilePart=0x0) returned 0x31 [0057.599] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0057.599] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\4GlynYCXpbRyePe.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\4glynycxpbryepe.m4a"), fInfoLevelId=0x0, lpFileInformation=0x216a8b0 | out: lpFileInformation=0x216a8b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5fa8ccb0, ftCreationTime.dwHighDateTime=0x1d45dec, ftLastAccessTime.dwLowDateTime=0x71274f0, ftLastAccessTime.dwHighDateTime=0x1d45c31, ftLastWriteTime.dwLowDateTime=0x71274f0, ftLastWriteTime.dwHighDateTime=0x1d45c31, nFileSizeHigh=0x0, nFileSizeLow=0x36cc)) returned 1 [0057.599] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0057.599] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\4GlynYCXpbRyePe.m4a", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\4GlynYCXpbRyePe.m4a", lpFilePart=0x0) returned 0x31 [0057.599] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0057.599] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\4GlynYCXpbRyePe.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\4glynycxpbryepe.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0057.599] GetFileType (hFile=0x448) returned 0x1 [0057.599] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0057.599] GetFileType (hFile=0x448) returned 0x1 [0057.599] ReadFile (in: hFile=0x448, lpBuffer=0x216cc30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be8b8, lpOverlapped=0x0 | out: lpBuffer=0x216cc30*, lpNumberOfBytesRead=0x3be8b8*=0x1000, lpOverlapped=0x0) returned 1 [0057.610] CloseHandle (hObject=0x448) returned 1 [0057.610] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\4GlynYCXpbRyePe.m4a", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\4GlynYCXpbRyePe.m4a", lpFilePart=0x0) returned 0x31 [0057.610] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0057.610] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\4GlynYCXpbRyePe.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\4glynycxpbryepe.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0057.610] GetFileType (hFile=0x448) returned 0x1 [0057.610] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0057.610] GetFileType (hFile=0x448) returned 0x1 [0057.610] WriteFile (in: hFile=0x448, lpBuffer=0x216a9b8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be968, lpOverlapped=0x0 | out: lpBuffer=0x216a9b8*, lpNumberOfBytesWritten=0x3be968*=0x2000, lpOverlapped=0x0) returned 1 [0057.610] CloseHandle (hObject=0x448) returned 1 [0057.610] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\4GlynYCXpbRyePe.m4a", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\4GlynYCXpbRyePe.m4a", lpFilePart=0x0) returned 0x31 [0057.610] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\4GlynYCXpbRyePe.m4a.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\4GlynYCXpbRyePe.m4a.xuy", lpFilePart=0x0) returned 0x35 [0057.610] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0057.611] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\4GlynYCXpbRyePe.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\4glynycxpbryepe.m4a"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5fa8ccb0, ftCreationTime.dwHighDateTime=0x1d45dec, ftLastAccessTime.dwLowDateTime=0x71274f0, ftLastAccessTime.dwHighDateTime=0x1d45c31, ftLastWriteTime.dwLowDateTime=0xe302f25, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x36cc)) returned 1 [0057.611] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0057.611] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\4GlynYCXpbRyePe.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\4glynycxpbryepe.m4a"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\4GlynYCXpbRyePe.m4a.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\4glynycxpbryepe.m4a.xuy")) returned 1 [0057.611] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\A-6CfSPMROK0fG74g-Zj.xls", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\A-6CfSPMROK0fG74g-Zj.xls", lpFilePart=0x0) returned 0x36 [0057.611] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0057.611] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\A-6CfSPMROK0fG74g-Zj.xls" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\a-6cfspmrok0fg74g-zj.xls"), fInfoLevelId=0x0, lpFileInformation=0x21e8f30 | out: lpFileInformation=0x21e8f30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef004480, ftCreationTime.dwHighDateTime=0x1d458a4, ftLastAccessTime.dwLowDateTime=0x30bfcc60, ftLastAccessTime.dwHighDateTime=0x1d45c42, ftLastWriteTime.dwLowDateTime=0x30bfcc60, ftLastWriteTime.dwHighDateTime=0x1d45c42, nFileSizeHigh=0x0, nFileSizeLow=0x37c6)) returned 1 [0057.611] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0057.611] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\A-6CfSPMROK0fG74g-Zj.xls", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\A-6CfSPMROK0fG74g-Zj.xls", lpFilePart=0x0) returned 0x36 [0057.611] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0057.611] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\A-6CfSPMROK0fG74g-Zj.xls" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\a-6cfspmrok0fg74g-zj.xls"), fInfoLevelId=0x0, lpFileInformation=0x21e9070 | out: lpFileInformation=0x21e9070*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef004480, ftCreationTime.dwHighDateTime=0x1d458a4, ftLastAccessTime.dwLowDateTime=0x30bfcc60, ftLastAccessTime.dwHighDateTime=0x1d45c42, ftLastWriteTime.dwLowDateTime=0x30bfcc60, ftLastWriteTime.dwHighDateTime=0x1d45c42, nFileSizeHigh=0x0, nFileSizeLow=0x37c6)) returned 1 [0057.612] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0057.612] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\A-6CfSPMROK0fG74g-Zj.xls", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\A-6CfSPMROK0fG74g-Zj.xls", lpFilePart=0x0) returned 0x36 [0057.612] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0057.612] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\A-6CfSPMROK0fG74g-Zj.xls" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\a-6cfspmrok0fg74g-zj.xls"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0057.612] GetFileType (hFile=0x448) returned 0x1 [0057.612] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0057.612] GetFileType (hFile=0x448) returned 0x1 [0057.612] ReadFile (in: hFile=0x448, lpBuffer=0x21eb420, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be8b8, lpOverlapped=0x0 | out: lpBuffer=0x21eb420*, lpNumberOfBytesRead=0x3be8b8*=0x1000, lpOverlapped=0x0) returned 1 [0057.624] CloseHandle (hObject=0x448) returned 1 [0057.624] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\A-6CfSPMROK0fG74g-Zj.xls", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\A-6CfSPMROK0fG74g-Zj.xls", lpFilePart=0x0) returned 0x36 [0057.624] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0057.624] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\A-6CfSPMROK0fG74g-Zj.xls" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\a-6cfspmrok0fg74g-zj.xls"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0057.624] GetFileType (hFile=0x448) returned 0x1 [0057.624] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0057.624] GetFileType (hFile=0x448) returned 0x1 [0057.624] WriteFile (in: hFile=0x448, lpBuffer=0x21e9190*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be968, lpOverlapped=0x0 | out: lpBuffer=0x21e9190*, lpNumberOfBytesWritten=0x3be968*=0x2000, lpOverlapped=0x0) returned 1 [0057.624] CloseHandle (hObject=0x448) returned 1 [0057.627] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\A-6CfSPMROK0fG74g-Zj.xls", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\A-6CfSPMROK0fG74g-Zj.xls", lpFilePart=0x0) returned 0x36 [0057.627] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\A-6CfSPMROK0fG74g-Zj.xls.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\A-6CfSPMROK0fG74g-Zj.xls.xuy", lpFilePart=0x0) returned 0x3a [0057.627] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0057.627] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\A-6CfSPMROK0fG74g-Zj.xls" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\a-6cfspmrok0fg74g-zj.xls"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef004480, ftCreationTime.dwHighDateTime=0x1d458a4, ftLastAccessTime.dwLowDateTime=0x30bfcc60, ftLastAccessTime.dwHighDateTime=0x1d45c42, ftLastWriteTime.dwLowDateTime=0xe3295e0, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x37c6)) returned 1 [0057.627] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0057.627] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\A-6CfSPMROK0fG74g-Zj.xls" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\a-6cfspmrok0fg74g-zj.xls"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\A-6CfSPMROK0fG74g-Zj.xls.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\a-6cfspmrok0fg74g-zj.xls.xuy")) returned 1 [0057.628] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\aWky26OAlQ8f6r.jpg", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\aWky26OAlQ8f6r.jpg", lpFilePart=0x0) returned 0x30 [0057.628] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0057.628] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\aWky26OAlQ8f6r.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\awky26oalq8f6r.jpg"), fInfoLevelId=0x0, lpFileInformation=0x2267750 | out: lpFileInformation=0x2267750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf226a420, ftCreationTime.dwHighDateTime=0x1d45a4c, ftLastAccessTime.dwLowDateTime=0xa3217310, ftLastAccessTime.dwHighDateTime=0x1d45ca3, ftLastWriteTime.dwLowDateTime=0xa3217310, ftLastWriteTime.dwHighDateTime=0x1d45ca3, nFileSizeHigh=0x0, nFileSizeLow=0x1155f)) returned 1 [0057.628] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0057.628] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\aWky26OAlQ8f6r.jpg", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\aWky26OAlQ8f6r.jpg", lpFilePart=0x0) returned 0x30 [0057.628] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0057.629] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\aWky26OAlQ8f6r.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\awky26oalq8f6r.jpg"), fInfoLevelId=0x0, lpFileInformation=0x2267878 | out: lpFileInformation=0x2267878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf226a420, ftCreationTime.dwHighDateTime=0x1d45a4c, ftLastAccessTime.dwLowDateTime=0xa3217310, ftLastAccessTime.dwHighDateTime=0x1d45ca3, ftLastWriteTime.dwLowDateTime=0xa3217310, ftLastWriteTime.dwHighDateTime=0x1d45ca3, nFileSizeHigh=0x0, nFileSizeLow=0x1155f)) returned 1 [0057.629] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0057.629] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\aWky26OAlQ8f6r.jpg", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\aWky26OAlQ8f6r.jpg", lpFilePart=0x0) returned 0x30 [0057.629] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0057.629] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\aWky26OAlQ8f6r.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\awky26oalq8f6r.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0057.629] GetFileType (hFile=0x448) returned 0x1 [0057.629] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0057.629] GetFileType (hFile=0x448) returned 0x1 [0057.629] ReadFile (in: hFile=0x448, lpBuffer=0x2269bf8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be8b8, lpOverlapped=0x0 | out: lpBuffer=0x2269bf8*, lpNumberOfBytesRead=0x3be8b8*=0x1000, lpOverlapped=0x0) returned 1 [0057.639] CloseHandle (hObject=0x448) returned 1 [0057.640] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\aWky26OAlQ8f6r.jpg", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\aWky26OAlQ8f6r.jpg", lpFilePart=0x0) returned 0x30 [0057.640] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0057.640] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\aWky26OAlQ8f6r.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\awky26oalq8f6r.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0057.640] GetFileType (hFile=0x448) returned 0x1 [0057.640] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0057.640] GetFileType (hFile=0x448) returned 0x1 [0057.640] WriteFile (in: hFile=0x448, lpBuffer=0x2267980*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be968, lpOverlapped=0x0 | out: lpBuffer=0x2267980*, lpNumberOfBytesWritten=0x3be968*=0x2000, lpOverlapped=0x0) returned 1 [0057.640] CloseHandle (hObject=0x448) returned 1 [0057.641] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\aWky26OAlQ8f6r.jpg", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\aWky26OAlQ8f6r.jpg", lpFilePart=0x0) returned 0x30 [0057.641] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\aWky26OAlQ8f6r.jpg.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\aWky26OAlQ8f6r.jpg.xuy", lpFilePart=0x0) returned 0x34 [0057.641] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0057.641] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\aWky26OAlQ8f6r.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\awky26oalq8f6r.jpg"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf226a420, ftCreationTime.dwHighDateTime=0x1d45a4c, ftLastAccessTime.dwLowDateTime=0xa3217310, ftLastAccessTime.dwHighDateTime=0x1d45ca3, ftLastWriteTime.dwLowDateTime=0xe34f408, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x1155f)) returned 1 [0057.641] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0057.641] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\aWky26OAlQ8f6r.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\awky26oalq8f6r.jpg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\aWky26OAlQ8f6r.jpg.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\awky26oalq8f6r.jpg.xuy")) returned 1 [0057.643] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\az88pgn.gif", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\az88pgn.gif", lpFilePart=0x0) returned 0x29 [0057.643] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0057.643] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\az88pgn.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\az88pgn.gif"), fInfoLevelId=0x0, lpFileInformation=0x22e5ef8 | out: lpFileInformation=0x22e5ef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc5d77e0, ftCreationTime.dwHighDateTime=0x1d46353, ftLastAccessTime.dwLowDateTime=0x6ed028d0, ftLastAccessTime.dwHighDateTime=0x1d45f38, ftLastWriteTime.dwLowDateTime=0x6ed028d0, ftLastWriteTime.dwHighDateTime=0x1d45f38, nFileSizeHigh=0x0, nFileSizeLow=0x11325)) returned 1 [0057.643] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0057.643] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\az88pgn.gif", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\az88pgn.gif", lpFilePart=0x0) returned 0x29 [0057.643] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0057.643] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\az88pgn.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\az88pgn.gif"), fInfoLevelId=0x0, lpFileInformation=0x22e6000 | out: lpFileInformation=0x22e6000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc5d77e0, ftCreationTime.dwHighDateTime=0x1d46353, ftLastAccessTime.dwLowDateTime=0x6ed028d0, ftLastAccessTime.dwHighDateTime=0x1d45f38, ftLastWriteTime.dwLowDateTime=0x6ed028d0, ftLastWriteTime.dwHighDateTime=0x1d45f38, nFileSizeHigh=0x0, nFileSizeLow=0x11325)) returned 1 [0057.643] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0057.643] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\az88pgn.gif", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\az88pgn.gif", lpFilePart=0x0) returned 0x29 [0057.643] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0057.643] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\az88pgn.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\az88pgn.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0057.643] GetFileType (hFile=0x448) returned 0x1 [0057.644] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0057.644] GetFileType (hFile=0x448) returned 0x1 [0057.644] ReadFile (in: hFile=0x448, lpBuffer=0x22e8340, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be8b8, lpOverlapped=0x0 | out: lpBuffer=0x22e8340*, lpNumberOfBytesRead=0x3be8b8*=0x1000, lpOverlapped=0x0) returned 1 [0057.694] CloseHandle (hObject=0x448) returned 1 [0057.694] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\az88pgn.gif", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\az88pgn.gif", lpFilePart=0x0) returned 0x29 [0057.694] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0057.694] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\az88pgn.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\az88pgn.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0057.695] GetFileType (hFile=0x448) returned 0x1 [0057.695] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0057.695] GetFileType (hFile=0x448) returned 0x1 [0057.695] WriteFile (in: hFile=0x448, lpBuffer=0x2144a48*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be968, lpOverlapped=0x0 | out: lpBuffer=0x2144a48*, lpNumberOfBytesWritten=0x3be968*=0x2000, lpOverlapped=0x0) returned 1 [0057.695] CloseHandle (hObject=0x448) returned 1 [0057.699] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\az88pgn.gif", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\az88pgn.gif", lpFilePart=0x0) returned 0x29 [0057.699] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\az88pgn.gif.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\az88pgn.gif.xuy", lpFilePart=0x0) returned 0x2d [0057.699] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0057.699] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\az88pgn.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\az88pgn.gif"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc5d77e0, ftCreationTime.dwHighDateTime=0x1d46353, ftLastAccessTime.dwLowDateTime=0x6ed028d0, ftLastAccessTime.dwHighDateTime=0x1d45f38, ftLastWriteTime.dwLowDateTime=0xe3c1a52, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x11325)) returned 1 [0057.699] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0057.700] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\az88pgn.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\az88pgn.gif"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\az88pgn.gif.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\az88pgn.gif.xuy")) returned 1 [0057.701] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\desktop.ini", lpFilePart=0x0) returned 0x29 [0057.701] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0057.701] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x2169e08 | out: lpFileInformation=0x2169e08*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xae11c718, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xae11c718, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xae11c718, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x11a)) returned 1 [0057.701] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0057.701] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\desktop.ini", lpFilePart=0x0) returned 0x29 [0057.702] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0057.702] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0057.702] GetFileType (hFile=0x448) returned 0x1 [0057.702] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0057.702] GetFileType (hFile=0x448) returned 0x1 [0057.702] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x11a [0057.702] ReadFile (in: hFile=0x448, lpBuffer=0x216a150, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x216a150*, lpNumberOfBytesRead=0x3be868*=0x11a, lpOverlapped=0x0) returned 1 [0057.702] CloseHandle (hObject=0x448) returned 1 [0057.712] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\desktop.ini", lpFilePart=0x0) returned 0x29 [0057.712] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0057.712] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\desktop.ini"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0057.713] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb230) returned 1 [0057.714] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3bbeb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\desktop.ini", lpFilePart=0x0) returned 0x29 [0057.714] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc350) returned 1 [0057.714] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x3bc430 | out: lpFileInformation=0x3bc430*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xae11c718, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xae11c718, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xae11c718, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x11a)) returned 1 [0057.714] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc310) returned 1 [0057.714] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3bbed0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\desktop.ini", lpFilePart=0x0) returned 0x29 [0057.714] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc350) returned 1 [0057.714] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x21e1e50 | out: lpFileInformation=0x21e1e50*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xae11c718, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xae11c718, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xae11c718, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x11a)) returned 1 [0057.714] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc310) returned 1 [0057.714] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3bbd30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\desktop.ini", lpFilePart=0x0) returned 0x29 [0057.714] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc210) returned 1 [0057.714] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0057.714] GetFileType (hFile=0x448) returned 0x1 [0057.714] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc180) returned 1 [0057.714] GetFileType (hFile=0x448) returned 0x1 [0057.714] GetFileSize (in: hFile=0x448, lpFileSizeHigh=0x3bc3a8 | out: lpFileSizeHigh=0x3bc3a8*=0x0) returned 0x11a [0057.714] ReadFile (in: hFile=0x448, lpBuffer=0x21e2198, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bc2d8, lpOverlapped=0x0 | out: lpBuffer=0x21e2198*, lpNumberOfBytesRead=0x3bc2d8*=0x11a, lpOverlapped=0x0) returned 1 [0057.714] CloseHandle (hObject=0x448) returned 1 [0057.771] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3bbd30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\desktop.ini", lpFilePart=0x0) returned 0x29 [0057.771] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc210) returned 1 [0057.771] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\desktop.ini"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0057.772] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8ca0) returned 1 [0057.773] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\E6zmnTMjp.odp", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\E6zmnTMjp.odp", lpFilePart=0x0) returned 0x2b [0057.773] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0057.773] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\E6zmnTMjp.odp" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\e6zmntmjp.odp"), fInfoLevelId=0x0, lpFileInformation=0x2259e50 | out: lpFileInformation=0x2259e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3ad2db0, ftCreationTime.dwHighDateTime=0x1d4604c, ftLastAccessTime.dwLowDateTime=0x2e938a50, ftLastAccessTime.dwHighDateTime=0x1d45db2, ftLastWriteTime.dwLowDateTime=0x2e938a50, ftLastWriteTime.dwHighDateTime=0x1d45db2, nFileSizeHigh=0x0, nFileSizeLow=0x15e2e)) returned 1 [0057.773] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0057.773] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\E6zmnTMjp.odp", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\E6zmnTMjp.odp", lpFilePart=0x0) returned 0x2b [0057.773] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0057.773] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\E6zmnTMjp.odp" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\e6zmntmjp.odp"), fInfoLevelId=0x0, lpFileInformation=0x2259f60 | out: lpFileInformation=0x2259f60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3ad2db0, ftCreationTime.dwHighDateTime=0x1d4604c, ftLastAccessTime.dwLowDateTime=0x2e938a50, ftLastAccessTime.dwHighDateTime=0x1d45db2, ftLastWriteTime.dwLowDateTime=0x2e938a50, ftLastWriteTime.dwHighDateTime=0x1d45db2, nFileSizeHigh=0x0, nFileSizeLow=0x15e2e)) returned 1 [0057.774] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0057.774] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\E6zmnTMjp.odp", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\E6zmnTMjp.odp", lpFilePart=0x0) returned 0x2b [0057.774] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0057.774] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\E6zmnTMjp.odp" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\e6zmntmjp.odp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0057.774] GetFileType (hFile=0x448) returned 0x1 [0057.774] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0057.774] GetFileType (hFile=0x448) returned 0x1 [0057.774] ReadFile (in: hFile=0x448, lpBuffer=0x225c2b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be8b8, lpOverlapped=0x0 | out: lpBuffer=0x225c2b0*, lpNumberOfBytesRead=0x3be8b8*=0x1000, lpOverlapped=0x0) returned 1 [0057.808] CloseHandle (hObject=0x448) returned 1 [0057.808] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\E6zmnTMjp.odp", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\E6zmnTMjp.odp", lpFilePart=0x0) returned 0x2b [0057.808] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0057.808] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\E6zmnTMjp.odp" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\e6zmntmjp.odp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0057.808] GetFileType (hFile=0x448) returned 0x1 [0057.808] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0057.808] GetFileType (hFile=0x448) returned 0x1 [0057.808] WriteFile (in: hFile=0x448, lpBuffer=0x225a050*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be968, lpOverlapped=0x0 | out: lpBuffer=0x225a050*, lpNumberOfBytesWritten=0x3be968*=0x2000, lpOverlapped=0x0) returned 1 [0057.809] CloseHandle (hObject=0x448) returned 1 [0057.810] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\E6zmnTMjp.odp", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\E6zmnTMjp.odp", lpFilePart=0x0) returned 0x2b [0057.810] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\E6zmnTMjp.odp.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\E6zmnTMjp.odp.xuy", lpFilePart=0x0) returned 0x2f [0057.810] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0057.810] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\E6zmnTMjp.odp" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\e6zmntmjp.odp"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3ad2db0, ftCreationTime.dwHighDateTime=0x1d4604c, ftLastAccessTime.dwLowDateTime=0x2e938a50, ftLastAccessTime.dwHighDateTime=0x1d45db2, ftLastWriteTime.dwLowDateTime=0xe4ccad0, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x15e2e)) returned 1 [0057.810] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0057.810] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\E6zmnTMjp.odp" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\e6zmntmjp.odp"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\E6zmnTMjp.odp.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\e6zmntmjp.odp.xuy")) returned 1 [0057.811] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Enw1.bmp", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Enw1.bmp", lpFilePart=0x0) returned 0x26 [0057.811] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0057.811] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Enw1.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\enw1.bmp"), fInfoLevelId=0x0, lpFileInformation=0x22d8568 | out: lpFileInformation=0x22d8568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf6c8620, ftCreationTime.dwHighDateTime=0x1d45e1d, ftLastAccessTime.dwLowDateTime=0x37812040, ftLastAccessTime.dwHighDateTime=0x1d4610f, ftLastWriteTime.dwLowDateTime=0x37812040, ftLastWriteTime.dwHighDateTime=0x1d4610f, nFileSizeHigh=0x0, nFileSizeLow=0x391e)) returned 1 [0057.811] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0057.811] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Enw1.bmp", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Enw1.bmp", lpFilePart=0x0) returned 0x26 [0057.811] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0057.811] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Enw1.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\enw1.bmp"), fInfoLevelId=0x0, lpFileInformation=0x22d8668 | out: lpFileInformation=0x22d8668*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf6c8620, ftCreationTime.dwHighDateTime=0x1d45e1d, ftLastAccessTime.dwLowDateTime=0x37812040, ftLastAccessTime.dwHighDateTime=0x1d4610f, ftLastWriteTime.dwLowDateTime=0x37812040, ftLastWriteTime.dwHighDateTime=0x1d4610f, nFileSizeHigh=0x0, nFileSizeLow=0x391e)) returned 1 [0057.811] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0057.811] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Enw1.bmp", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Enw1.bmp", lpFilePart=0x0) returned 0x26 [0057.811] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0057.812] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Enw1.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\enw1.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0057.812] GetFileType (hFile=0x448) returned 0x1 [0057.812] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0057.812] GetFileType (hFile=0x448) returned 0x1 [0057.812] ReadFile (in: hFile=0x448, lpBuffer=0x22da998, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be8b8, lpOverlapped=0x0 | out: lpBuffer=0x22da998*, lpNumberOfBytesRead=0x3be8b8*=0x1000, lpOverlapped=0x0) returned 1 [0057.853] CloseHandle (hObject=0x448) returned 1 [0057.853] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Enw1.bmp", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Enw1.bmp", lpFilePart=0x0) returned 0x26 [0057.853] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0057.853] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Enw1.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\enw1.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0057.853] GetFileType (hFile=0x448) returned 0x1 [0057.853] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0057.853] GetFileType (hFile=0x448) returned 0x1 [0057.853] WriteFile (in: hFile=0x448, lpBuffer=0x214a390*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be968, lpOverlapped=0x0 | out: lpBuffer=0x214a390*, lpNumberOfBytesWritten=0x3be968*=0x2000, lpOverlapped=0x0) returned 1 [0057.853] CloseHandle (hObject=0x448) returned 1 [0057.854] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Enw1.bmp", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Enw1.bmp", lpFilePart=0x0) returned 0x26 [0057.854] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Enw1.bmp.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Enw1.bmp.xuy", lpFilePart=0x0) returned 0x2a [0057.854] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0057.854] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Enw1.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\enw1.bmp"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf6c8620, ftCreationTime.dwHighDateTime=0x1d45e1d, ftLastAccessTime.dwLowDateTime=0x37812040, ftLastAccessTime.dwHighDateTime=0x1d4610f, ftLastWriteTime.dwLowDateTime=0xe53f114, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x391e)) returned 1 [0057.854] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0057.854] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Enw1.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\enw1.bmp"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Enw1.bmp.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\enw1.bmp.xuy")) returned 1 [0057.856] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Fe7T5WvwX3mnv_7K.avi", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Fe7T5WvwX3mnv_7K.avi", lpFilePart=0x0) returned 0x32 [0057.856] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0057.856] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Fe7T5WvwX3mnv_7K.avi" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\fe7t5wvwx3mnv_7k.avi"), fInfoLevelId=0x0, lpFileInformation=0x215c550 | out: lpFileInformation=0x215c550*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f0ad000, ftCreationTime.dwHighDateTime=0x1d462fe, ftLastAccessTime.dwLowDateTime=0x7e1adb60, ftLastAccessTime.dwHighDateTime=0x1d45834, ftLastWriteTime.dwLowDateTime=0x7e1adb60, ftLastWriteTime.dwHighDateTime=0x1d45834, nFileSizeHigh=0x0, nFileSizeLow=0x290d)) returned 1 [0057.856] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0057.856] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Fe7T5WvwX3mnv_7K.avi", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Fe7T5WvwX3mnv_7K.avi", lpFilePart=0x0) returned 0x32 [0057.856] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0057.856] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Fe7T5WvwX3mnv_7K.avi" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\fe7t5wvwx3mnv_7k.avi"), fInfoLevelId=0x0, lpFileInformation=0x215c680 | out: lpFileInformation=0x215c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f0ad000, ftCreationTime.dwHighDateTime=0x1d462fe, ftLastAccessTime.dwLowDateTime=0x7e1adb60, ftLastAccessTime.dwHighDateTime=0x1d45834, ftLastWriteTime.dwLowDateTime=0x7e1adb60, ftLastWriteTime.dwHighDateTime=0x1d45834, nFileSizeHigh=0x0, nFileSizeLow=0x290d)) returned 1 [0057.856] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0057.857] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Fe7T5WvwX3mnv_7K.avi", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Fe7T5WvwX3mnv_7K.avi", lpFilePart=0x0) returned 0x32 [0057.857] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0057.857] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Fe7T5WvwX3mnv_7K.avi" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\fe7t5wvwx3mnv_7k.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0057.857] GetFileType (hFile=0x448) returned 0x1 [0057.857] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0057.857] GetFileType (hFile=0x448) returned 0x1 [0057.857] ReadFile (in: hFile=0x448, lpBuffer=0x215ea10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be8b8, lpOverlapped=0x0 | out: lpBuffer=0x215ea10*, lpNumberOfBytesRead=0x3be8b8*=0x1000, lpOverlapped=0x0) returned 1 [0057.867] CloseHandle (hObject=0x448) returned 1 [0057.867] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Fe7T5WvwX3mnv_7K.avi", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Fe7T5WvwX3mnv_7K.avi", lpFilePart=0x0) returned 0x32 [0057.867] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0057.867] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Fe7T5WvwX3mnv_7K.avi" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\fe7t5wvwx3mnv_7k.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0057.868] GetFileType (hFile=0x448) returned 0x1 [0057.868] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0057.868] GetFileType (hFile=0x448) returned 0x1 [0057.868] WriteFile (in: hFile=0x448, lpBuffer=0x215c790*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be968, lpOverlapped=0x0 | out: lpBuffer=0x215c790*, lpNumberOfBytesWritten=0x3be968*=0x2000, lpOverlapped=0x0) returned 1 [0057.868] CloseHandle (hObject=0x448) returned 1 [0057.869] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Fe7T5WvwX3mnv_7K.avi", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Fe7T5WvwX3mnv_7K.avi", lpFilePart=0x0) returned 0x32 [0057.869] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Fe7T5WvwX3mnv_7K.avi.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Fe7T5WvwX3mnv_7K.avi.xuy", lpFilePart=0x0) returned 0x36 [0057.869] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0057.869] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Fe7T5WvwX3mnv_7K.avi" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\fe7t5wvwx3mnv_7k.avi"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f0ad000, ftCreationTime.dwHighDateTime=0x1d462fe, ftLastAccessTime.dwLowDateTime=0x7e1adb60, ftLastAccessTime.dwHighDateTime=0x1d45834, ftLastWriteTime.dwLowDateTime=0xe5653d9, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x290d)) returned 1 [0057.869] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0057.869] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Fe7T5WvwX3mnv_7K.avi" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\fe7t5wvwx3mnv_7k.avi"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Fe7T5WvwX3mnv_7K.avi.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\fe7t5wvwx3mnv_7k.avi.xuy")) returned 1 [0057.870] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\fwSMGY 8T1_Vmp.bmp", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\fwSMGY 8T1_Vmp.bmp", lpFilePart=0x0) returned 0x30 [0057.870] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0057.870] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\fwSMGY 8T1_Vmp.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\fwsmgy 8t1_vmp.bmp"), fInfoLevelId=0x0, lpFileInformation=0x21dad18 | out: lpFileInformation=0x21dad18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x966bcfa0, ftCreationTime.dwHighDateTime=0x1d459a9, ftLastAccessTime.dwLowDateTime=0xf5ab8b0, ftLastAccessTime.dwHighDateTime=0x1d463f8, ftLastWriteTime.dwLowDateTime=0xf5ab8b0, ftLastWriteTime.dwHighDateTime=0x1d463f8, nFileSizeHigh=0x0, nFileSizeLow=0xca9d)) returned 1 [0057.871] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0057.871] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\fwSMGY 8T1_Vmp.bmp", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\fwSMGY 8T1_Vmp.bmp", lpFilePart=0x0) returned 0x30 [0057.871] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0057.871] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\fwSMGY 8T1_Vmp.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\fwsmgy 8t1_vmp.bmp"), fInfoLevelId=0x0, lpFileInformation=0x21dae40 | out: lpFileInformation=0x21dae40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x966bcfa0, ftCreationTime.dwHighDateTime=0x1d459a9, ftLastAccessTime.dwLowDateTime=0xf5ab8b0, ftLastAccessTime.dwHighDateTime=0x1d463f8, ftLastWriteTime.dwLowDateTime=0xf5ab8b0, ftLastWriteTime.dwHighDateTime=0x1d463f8, nFileSizeHigh=0x0, nFileSizeLow=0xca9d)) returned 1 [0057.871] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0057.871] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\fwSMGY 8T1_Vmp.bmp", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\fwSMGY 8T1_Vmp.bmp", lpFilePart=0x0) returned 0x30 [0057.871] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0057.871] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\fwSMGY 8T1_Vmp.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\fwsmgy 8t1_vmp.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0057.871] GetFileType (hFile=0x448) returned 0x1 [0057.871] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0057.871] GetFileType (hFile=0x448) returned 0x1 [0057.871] ReadFile (in: hFile=0x448, lpBuffer=0x21dd1c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be8b8, lpOverlapped=0x0 | out: lpBuffer=0x21dd1c0*, lpNumberOfBytesRead=0x3be8b8*=0x1000, lpOverlapped=0x0) returned 1 [0057.882] CloseHandle (hObject=0x448) returned 1 [0057.882] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\fwSMGY 8T1_Vmp.bmp", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\fwSMGY 8T1_Vmp.bmp", lpFilePart=0x0) returned 0x30 [0057.882] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0057.882] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\fwSMGY 8T1_Vmp.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\fwsmgy 8t1_vmp.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0057.882] GetFileType (hFile=0x448) returned 0x1 [0057.882] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0057.882] GetFileType (hFile=0x448) returned 0x1 [0057.882] WriteFile (in: hFile=0x448, lpBuffer=0x21daf48*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be968, lpOverlapped=0x0 | out: lpBuffer=0x21daf48*, lpNumberOfBytesWritten=0x3be968*=0x2000, lpOverlapped=0x0) returned 1 [0057.882] CloseHandle (hObject=0x448) returned 1 [0057.883] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\fwSMGY 8T1_Vmp.bmp", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\fwSMGY 8T1_Vmp.bmp", lpFilePart=0x0) returned 0x30 [0057.883] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\fwSMGY 8T1_Vmp.bmp.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\fwSMGY 8T1_Vmp.bmp.xuy", lpFilePart=0x0) returned 0x34 [0057.884] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0057.884] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\fwSMGY 8T1_Vmp.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\fwsmgy 8t1_vmp.bmp"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x966bcfa0, ftCreationTime.dwHighDateTime=0x1d459a9, ftLastAccessTime.dwLowDateTime=0xf5ab8b0, ftLastAccessTime.dwHighDateTime=0x1d463f8, ftLastWriteTime.dwLowDateTime=0xe58b672, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xca9d)) returned 1 [0057.884] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0057.884] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\fwSMGY 8T1_Vmp.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\fwsmgy 8t1_vmp.bmp"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\fwSMGY 8T1_Vmp.bmp.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\fwsmgy 8t1_vmp.bmp.xuy")) returned 1 [0057.886] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\GHXa.mkv", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\GHXa.mkv", lpFilePart=0x0) returned 0x26 [0057.886] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0057.886] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\GHXa.mkv" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\ghxa.mkv"), fInfoLevelId=0x0, lpFileInformation=0x22594c0 | out: lpFileInformation=0x22594c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62c12740, ftCreationTime.dwHighDateTime=0x1d456fc, ftLastAccessTime.dwLowDateTime=0x3853090, ftLastAccessTime.dwHighDateTime=0x1d45680, ftLastWriteTime.dwLowDateTime=0x3853090, ftLastWriteTime.dwHighDateTime=0x1d45680, nFileSizeHigh=0x0, nFileSizeLow=0x4212)) returned 1 [0057.886] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0057.886] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\GHXa.mkv", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\GHXa.mkv", lpFilePart=0x0) returned 0x26 [0057.886] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0057.886] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\GHXa.mkv" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\ghxa.mkv"), fInfoLevelId=0x0, lpFileInformation=0x22595c0 | out: lpFileInformation=0x22595c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62c12740, ftCreationTime.dwHighDateTime=0x1d456fc, ftLastAccessTime.dwLowDateTime=0x3853090, ftLastAccessTime.dwHighDateTime=0x1d45680, ftLastWriteTime.dwLowDateTime=0x3853090, ftLastWriteTime.dwHighDateTime=0x1d45680, nFileSizeHigh=0x0, nFileSizeLow=0x4212)) returned 1 [0057.886] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0057.886] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\GHXa.mkv", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\GHXa.mkv", lpFilePart=0x0) returned 0x26 [0057.886] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0057.886] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\GHXa.mkv" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\ghxa.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0057.886] GetFileType (hFile=0x448) returned 0x1 [0057.886] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0057.886] GetFileType (hFile=0x448) returned 0x1 [0057.886] ReadFile (in: hFile=0x448, lpBuffer=0x225b8f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be8b8, lpOverlapped=0x0 | out: lpBuffer=0x225b8f0*, lpNumberOfBytesRead=0x3be8b8*=0x1000, lpOverlapped=0x0) returned 1 [0057.908] CloseHandle (hObject=0x448) returned 1 [0057.908] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\GHXa.mkv", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\GHXa.mkv", lpFilePart=0x0) returned 0x26 [0057.908] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0057.908] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\GHXa.mkv" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\ghxa.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0057.909] GetFileType (hFile=0x448) returned 0x1 [0057.909] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0057.909] GetFileType (hFile=0x448) returned 0x1 [0057.909] WriteFile (in: hFile=0x448, lpBuffer=0x22596a0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be968, lpOverlapped=0x0 | out: lpBuffer=0x22596a0*, lpNumberOfBytesWritten=0x3be968*=0x2000, lpOverlapped=0x0) returned 1 [0057.909] CloseHandle (hObject=0x448) returned 1 [0057.914] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\GHXa.mkv", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\GHXa.mkv", lpFilePart=0x0) returned 0x26 [0057.914] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\GHXa.mkv.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\GHXa.mkv.xuy", lpFilePart=0x0) returned 0x2a [0057.914] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0057.915] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\GHXa.mkv" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\ghxa.mkv"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62c12740, ftCreationTime.dwHighDateTime=0x1d456fc, ftLastAccessTime.dwLowDateTime=0x3853090, ftLastAccessTime.dwHighDateTime=0x1d45680, ftLastWriteTime.dwLowDateTime=0xe5d7aa7, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x4212)) returned 1 [0057.915] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0057.915] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\GHXa.mkv" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\ghxa.mkv"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\GHXa.mkv.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\ghxa.mkv.xuy")) returned 1 [0057.917] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\gHZm.jpg", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\gHZm.jpg", lpFilePart=0x0) returned 0x26 [0057.917] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0057.917] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\gHZm.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\ghzm.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22d7b80 | out: lpFileInformation=0x22d7b80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd75e59c0, ftCreationTime.dwHighDateTime=0x1d456d3, ftLastAccessTime.dwLowDateTime=0xbaec3ef0, ftLastAccessTime.dwHighDateTime=0x1d463cc, ftLastWriteTime.dwLowDateTime=0xbaec3ef0, ftLastWriteTime.dwHighDateTime=0x1d463cc, nFileSizeHigh=0x0, nFileSizeLow=0x60da)) returned 1 [0057.917] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0057.917] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\gHZm.jpg", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\gHZm.jpg", lpFilePart=0x0) returned 0x26 [0057.917] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0057.917] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\gHZm.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\ghzm.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22d7c80 | out: lpFileInformation=0x22d7c80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd75e59c0, ftCreationTime.dwHighDateTime=0x1d456d3, ftLastAccessTime.dwLowDateTime=0xbaec3ef0, ftLastAccessTime.dwHighDateTime=0x1d463cc, ftLastWriteTime.dwLowDateTime=0xbaec3ef0, ftLastWriteTime.dwHighDateTime=0x1d463cc, nFileSizeHigh=0x0, nFileSizeLow=0x60da)) returned 1 [0057.917] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0057.917] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\gHZm.jpg", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\gHZm.jpg", lpFilePart=0x0) returned 0x26 [0057.917] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0057.917] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\gHZm.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\ghzm.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0057.917] GetFileType (hFile=0x448) returned 0x1 [0057.917] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0057.917] GetFileType (hFile=0x448) returned 0x1 [0057.917] ReadFile (in: hFile=0x448, lpBuffer=0x22d9fb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be8b8, lpOverlapped=0x0 | out: lpBuffer=0x22d9fb0*, lpNumberOfBytesRead=0x3be8b8*=0x1000, lpOverlapped=0x0) returned 1 [0057.955] CloseHandle (hObject=0x448) returned 1 [0057.956] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\gHZm.jpg", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\gHZm.jpg", lpFilePart=0x0) returned 0x26 [0057.956] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0057.956] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\gHZm.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\ghzm.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0057.956] GetFileType (hFile=0x448) returned 0x1 [0057.956] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0057.956] GetFileType (hFile=0x448) returned 0x1 [0057.956] WriteFile (in: hFile=0x448, lpBuffer=0x214fbc8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be968, lpOverlapped=0x0 | out: lpBuffer=0x214fbc8*, lpNumberOfBytesWritten=0x3be968*=0x2000, lpOverlapped=0x0) returned 1 [0057.956] CloseHandle (hObject=0x448) returned 1 [0057.958] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\gHZm.jpg", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\gHZm.jpg", lpFilePart=0x0) returned 0x26 [0057.958] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\gHZm.jpg.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\gHZm.jpg.xuy", lpFilePart=0x0) returned 0x2a [0057.958] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0057.958] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\gHZm.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\ghzm.jpg"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd75e59c0, ftCreationTime.dwHighDateTime=0x1d456d3, ftLastAccessTime.dwLowDateTime=0xbaec3ef0, ftLastAccessTime.dwHighDateTime=0x1d463cc, ftLastWriteTime.dwLowDateTime=0xe64a212, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x60da)) returned 1 [0057.958] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0057.958] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\gHZm.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\ghzm.jpg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\gHZm.jpg.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\ghzm.jpg.xuy")) returned 1 [0057.960] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\hih.m4a", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\hih.m4a", lpFilePart=0x0) returned 0x25 [0057.960] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0057.960] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\hih.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\hih.m4a"), fInfoLevelId=0x0, lpFileInformation=0x215ba48 | out: lpFileInformation=0x215ba48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d3ea2b0, ftCreationTime.dwHighDateTime=0x1d460b3, ftLastAccessTime.dwLowDateTime=0x125e7250, ftLastAccessTime.dwHighDateTime=0x1d46375, ftLastWriteTime.dwLowDateTime=0x125e7250, ftLastWriteTime.dwHighDateTime=0x1d46375, nFileSizeHigh=0x0, nFileSizeLow=0xa51e)) returned 1 [0057.960] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0057.960] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\hih.m4a", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\hih.m4a", lpFilePart=0x0) returned 0x25 [0057.960] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0057.960] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\hih.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\hih.m4a"), fInfoLevelId=0x0, lpFileInformation=0x215bb40 | out: lpFileInformation=0x215bb40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d3ea2b0, ftCreationTime.dwHighDateTime=0x1d460b3, ftLastAccessTime.dwLowDateTime=0x125e7250, ftLastAccessTime.dwHighDateTime=0x1d46375, ftLastWriteTime.dwLowDateTime=0x125e7250, ftLastWriteTime.dwHighDateTime=0x1d46375, nFileSizeHigh=0x0, nFileSizeLow=0xa51e)) returned 1 [0057.960] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0057.960] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\hih.m4a", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\hih.m4a", lpFilePart=0x0) returned 0x25 [0057.960] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0057.960] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\hih.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\hih.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0057.960] GetFileType (hFile=0x448) returned 0x1 [0057.961] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0057.961] GetFileType (hFile=0x448) returned 0x1 [0057.961] ReadFile (in: hFile=0x448, lpBuffer=0x215de60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be8b8, lpOverlapped=0x0 | out: lpBuffer=0x215de60*, lpNumberOfBytesRead=0x3be8b8*=0x1000, lpOverlapped=0x0) returned 1 [0057.976] CloseHandle (hObject=0x448) returned 1 [0057.976] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\hih.m4a", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\hih.m4a", lpFilePart=0x0) returned 0x25 [0057.976] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0057.976] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\hih.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\hih.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0057.976] GetFileType (hFile=0x448) returned 0x1 [0057.976] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0057.976] GetFileType (hFile=0x448) returned 0x1 [0057.976] WriteFile (in: hFile=0x448, lpBuffer=0x215bc18*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be968, lpOverlapped=0x0 | out: lpBuffer=0x215bc18*, lpNumberOfBytesWritten=0x3be968*=0x2000, lpOverlapped=0x0) returned 1 [0057.977] CloseHandle (hObject=0x448) returned 1 [0057.979] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\hih.m4a", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\hih.m4a", lpFilePart=0x0) returned 0x25 [0057.980] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\hih.m4a.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\hih.m4a.xuy", lpFilePart=0x0) returned 0x29 [0057.980] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0057.980] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\hih.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\hih.m4a"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d3ea2b0, ftCreationTime.dwHighDateTime=0x1d460b3, ftLastAccessTime.dwLowDateTime=0x125e7250, ftLastAccessTime.dwHighDateTime=0x1d46375, ftLastWriteTime.dwLowDateTime=0xe67043c, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xa51e)) returned 1 [0057.980] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0057.980] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\hih.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\hih.m4a"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\hih.m4a.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\hih.m4a.xuy")) returned 1 [0057.982] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\hvsxSLFjGgIvWh.m4a", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\hvsxSLFjGgIvWh.m4a", lpFilePart=0x0) returned 0x30 [0057.982] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0057.983] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\hvsxSLFjGgIvWh.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\hvsxslfjggivwh.m4a"), fInfoLevelId=0x0, lpFileInformation=0x21da0e8 | out: lpFileInformation=0x21da0e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x349a66a0, ftCreationTime.dwHighDateTime=0x1d45630, ftLastAccessTime.dwLowDateTime=0x5caa3c50, ftLastAccessTime.dwHighDateTime=0x1d46216, ftLastWriteTime.dwLowDateTime=0x5caa3c50, ftLastWriteTime.dwHighDateTime=0x1d46216, nFileSizeHigh=0x0, nFileSizeLow=0x6a8b)) returned 1 [0057.983] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0057.983] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\hvsxSLFjGgIvWh.m4a", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\hvsxSLFjGgIvWh.m4a", lpFilePart=0x0) returned 0x30 [0057.983] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0057.983] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\hvsxSLFjGgIvWh.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\hvsxslfjggivwh.m4a"), fInfoLevelId=0x0, lpFileInformation=0x21da210 | out: lpFileInformation=0x21da210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x349a66a0, ftCreationTime.dwHighDateTime=0x1d45630, ftLastAccessTime.dwLowDateTime=0x5caa3c50, ftLastAccessTime.dwHighDateTime=0x1d46216, ftLastWriteTime.dwLowDateTime=0x5caa3c50, ftLastWriteTime.dwHighDateTime=0x1d46216, nFileSizeHigh=0x0, nFileSizeLow=0x6a8b)) returned 1 [0057.983] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0057.983] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\hvsxSLFjGgIvWh.m4a", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\hvsxSLFjGgIvWh.m4a", lpFilePart=0x0) returned 0x30 [0057.983] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0057.983] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\hvsxSLFjGgIvWh.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\hvsxslfjggivwh.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0057.985] GetFileType (hFile=0x448) returned 0x1 [0057.985] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0057.985] GetFileType (hFile=0x448) returned 0x1 [0057.985] ReadFile (in: hFile=0x448, lpBuffer=0x21dc590, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be8b8, lpOverlapped=0x0 | out: lpBuffer=0x21dc590*, lpNumberOfBytesRead=0x3be8b8*=0x1000, lpOverlapped=0x0) returned 1 [0058.001] CloseHandle (hObject=0x448) returned 1 [0058.001] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\hvsxSLFjGgIvWh.m4a", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\hvsxSLFjGgIvWh.m4a", lpFilePart=0x0) returned 0x30 [0058.001] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0058.001] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\hvsxSLFjGgIvWh.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\hvsxslfjggivwh.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0058.002] GetFileType (hFile=0x448) returned 0x1 [0058.002] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0058.002] GetFileType (hFile=0x448) returned 0x1 [0058.002] WriteFile (in: hFile=0x448, lpBuffer=0x21da318*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be968, lpOverlapped=0x0 | out: lpBuffer=0x21da318*, lpNumberOfBytesWritten=0x3be968*=0x2000, lpOverlapped=0x0) returned 1 [0058.002] CloseHandle (hObject=0x448) returned 1 [0058.005] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\hvsxSLFjGgIvWh.m4a", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\hvsxSLFjGgIvWh.m4a", lpFilePart=0x0) returned 0x30 [0058.005] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\hvsxSLFjGgIvWh.m4a.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\hvsxSLFjGgIvWh.m4a.xuy", lpFilePart=0x0) returned 0x34 [0058.005] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0058.005] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\hvsxSLFjGgIvWh.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\hvsxslfjggivwh.m4a"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x349a66a0, ftCreationTime.dwHighDateTime=0x1d45630, ftLastAccessTime.dwLowDateTime=0x5caa3c50, ftLastAccessTime.dwHighDateTime=0x1d46216, ftLastWriteTime.dwLowDateTime=0xe6c9800, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x6a8b)) returned 1 [0058.005] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0058.005] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\hvsxSLFjGgIvWh.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\hvsxslfjggivwh.m4a"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\hvsxSLFjGgIvWh.m4a.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\hvsxslfjggivwh.m4a.xuy")) returned 1 [0058.008] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\HzbGRo6Y.jpg", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\HzbGRo6Y.jpg", lpFilePart=0x0) returned 0x2a [0058.008] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0058.008] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\HzbGRo6Y.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\hzbgro6y.jpg"), fInfoLevelId=0x0, lpFileInformation=0x2258890 | out: lpFileInformation=0x2258890*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f278ff0, ftCreationTime.dwHighDateTime=0x1d45999, ftLastAccessTime.dwLowDateTime=0x5ab69bf0, ftLastAccessTime.dwHighDateTime=0x1d4584d, ftLastWriteTime.dwLowDateTime=0x5ab69bf0, ftLastWriteTime.dwHighDateTime=0x1d4584d, nFileSizeHigh=0x0, nFileSizeLow=0x67b2)) returned 1 [0058.008] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0058.008] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\HzbGRo6Y.jpg", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\HzbGRo6Y.jpg", lpFilePart=0x0) returned 0x2a [0058.008] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0058.008] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\HzbGRo6Y.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\hzbgro6y.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22589a0 | out: lpFileInformation=0x22589a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f278ff0, ftCreationTime.dwHighDateTime=0x1d45999, ftLastAccessTime.dwLowDateTime=0x5ab69bf0, ftLastAccessTime.dwHighDateTime=0x1d4584d, ftLastWriteTime.dwLowDateTime=0x5ab69bf0, ftLastWriteTime.dwHighDateTime=0x1d4584d, nFileSizeHigh=0x0, nFileSizeLow=0x67b2)) returned 1 [0058.008] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0058.009] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\HzbGRo6Y.jpg", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\HzbGRo6Y.jpg", lpFilePart=0x0) returned 0x2a [0058.009] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0058.009] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\HzbGRo6Y.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\hzbgro6y.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0058.009] GetFileType (hFile=0x448) returned 0x1 [0058.009] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0058.009] GetFileType (hFile=0x448) returned 0x1 [0058.009] ReadFile (in: hFile=0x448, lpBuffer=0x225acf0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be8b8, lpOverlapped=0x0 | out: lpBuffer=0x225acf0*, lpNumberOfBytesRead=0x3be8b8*=0x1000, lpOverlapped=0x0) returned 1 [0058.022] CloseHandle (hObject=0x448) returned 1 [0058.022] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\HzbGRo6Y.jpg", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\HzbGRo6Y.jpg", lpFilePart=0x0) returned 0x2a [0058.022] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0058.022] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\HzbGRo6Y.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\hzbgro6y.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0058.023] GetFileType (hFile=0x448) returned 0x1 [0058.023] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0058.023] GetFileType (hFile=0x448) returned 0x1 [0058.023] WriteFile (in: hFile=0x448, lpBuffer=0x2258a90*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be968, lpOverlapped=0x0 | out: lpBuffer=0x2258a90*, lpNumberOfBytesWritten=0x3be968*=0x2000, lpOverlapped=0x0) returned 1 [0058.023] CloseHandle (hObject=0x448) returned 1 [0058.024] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\HzbGRo6Y.jpg", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\HzbGRo6Y.jpg", lpFilePart=0x0) returned 0x2a [0058.024] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\HzbGRo6Y.jpg.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\HzbGRo6Y.jpg.xuy", lpFilePart=0x0) returned 0x2e [0058.024] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0058.024] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\HzbGRo6Y.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\hzbgro6y.jpg"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f278ff0, ftCreationTime.dwHighDateTime=0x1d45999, ftLastAccessTime.dwLowDateTime=0x5ab69bf0, ftLastAccessTime.dwHighDateTime=0x1d4584d, ftLastWriteTime.dwLowDateTime=0xe6f950f, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x67b2)) returned 1 [0058.024] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0058.024] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\HzbGRo6Y.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\hzbgro6y.jpg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\HzbGRo6Y.jpg.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\hzbgro6y.jpg.xuy")) returned 1 [0058.026] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\jiLoP1s77mzUlK6iOG4A.ppt", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\jiLoP1s77mzUlK6iOG4A.ppt", lpFilePart=0x0) returned 0x36 [0058.026] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0058.026] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\jiLoP1s77mzUlK6iOG4A.ppt" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\jilop1s77mzulk6iog4a.ppt"), fInfoLevelId=0x0, lpFileInformation=0x22d6fa8 | out: lpFileInformation=0x22d6fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7eae3c0, ftCreationTime.dwHighDateTime=0x1d45def, ftLastAccessTime.dwLowDateTime=0xf0d36590, ftLastAccessTime.dwHighDateTime=0x1d45d80, ftLastWriteTime.dwLowDateTime=0xf0d36590, ftLastWriteTime.dwHighDateTime=0x1d45d80, nFileSizeHigh=0x0, nFileSizeLow=0x16a74)) returned 1 [0058.026] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0058.026] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\jiLoP1s77mzUlK6iOG4A.ppt", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\jiLoP1s77mzUlK6iOG4A.ppt", lpFilePart=0x0) returned 0x36 [0058.026] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0058.026] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\jiLoP1s77mzUlK6iOG4A.ppt" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\jilop1s77mzulk6iog4a.ppt"), fInfoLevelId=0x0, lpFileInformation=0x22d70e8 | out: lpFileInformation=0x22d70e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7eae3c0, ftCreationTime.dwHighDateTime=0x1d45def, ftLastAccessTime.dwLowDateTime=0xf0d36590, ftLastAccessTime.dwHighDateTime=0x1d45d80, ftLastWriteTime.dwLowDateTime=0xf0d36590, ftLastWriteTime.dwHighDateTime=0x1d45d80, nFileSizeHigh=0x0, nFileSizeLow=0x16a74)) returned 1 [0058.026] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0058.026] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\jiLoP1s77mzUlK6iOG4A.ppt", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\jiLoP1s77mzUlK6iOG4A.ppt", lpFilePart=0x0) returned 0x36 [0058.026] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0058.026] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\jiLoP1s77mzUlK6iOG4A.ppt" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\jilop1s77mzulk6iog4a.ppt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0058.026] GetFileType (hFile=0x448) returned 0x1 [0058.026] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0058.026] GetFileType (hFile=0x448) returned 0x1 [0058.026] ReadFile (in: hFile=0x448, lpBuffer=0x22d9498, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be8b8, lpOverlapped=0x0 | out: lpBuffer=0x22d9498*, lpNumberOfBytesRead=0x3be8b8*=0x1000, lpOverlapped=0x0) returned 1 [0058.040] CloseHandle (hObject=0x448) returned 1 [0058.040] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\jiLoP1s77mzUlK6iOG4A.ppt", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\jiLoP1s77mzUlK6iOG4A.ppt", lpFilePart=0x0) returned 0x36 [0058.040] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0058.040] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\jiLoP1s77mzUlK6iOG4A.ppt" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\jilop1s77mzulk6iog4a.ppt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0058.041] GetFileType (hFile=0x448) returned 0x1 [0058.041] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0058.041] GetFileType (hFile=0x448) returned 0x1 [0058.041] WriteFile (in: hFile=0x448, lpBuffer=0x2155400*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be968, lpOverlapped=0x0 | out: lpBuffer=0x2155400*, lpNumberOfBytesWritten=0x3be968*=0x2000, lpOverlapped=0x0) returned 1 [0058.041] CloseHandle (hObject=0x448) returned 1 [0058.042] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\jiLoP1s77mzUlK6iOG4A.ppt", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\jiLoP1s77mzUlK6iOG4A.ppt", lpFilePart=0x0) returned 0x36 [0058.042] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\jiLoP1s77mzUlK6iOG4A.ppt.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\jiLoP1s77mzUlK6iOG4A.ppt.xuy", lpFilePart=0x0) returned 0x3a [0058.042] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0058.042] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\jiLoP1s77mzUlK6iOG4A.ppt" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\jilop1s77mzulk6iog4a.ppt"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7eae3c0, ftCreationTime.dwHighDateTime=0x1d45def, ftLastAccessTime.dwLowDateTime=0xf0d36590, ftLastAccessTime.dwHighDateTime=0x1d45d80, ftLastWriteTime.dwLowDateTime=0xe71fa16, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x16a74)) returned 1 [0058.042] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0058.043] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\jiLoP1s77mzUlK6iOG4A.ppt" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\jilop1s77mzulk6iog4a.ppt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\jiLoP1s77mzUlK6iOG4A.ppt.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\jilop1s77mzulk6iog4a.ppt.xuy")) returned 1 [0058.044] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\JPgSFw.csv", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\JPgSFw.csv", lpFilePart=0x0) returned 0x28 [0058.044] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0058.044] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\JPgSFw.csv" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\jpgsfw.csv"), fInfoLevelId=0x0, lpFileInformation=0x215abc8 | out: lpFileInformation=0x215abc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89956e60, ftCreationTime.dwHighDateTime=0x1d461df, ftLastAccessTime.dwLowDateTime=0x406b4330, ftLastAccessTime.dwHighDateTime=0x1d45bfa, ftLastWriteTime.dwLowDateTime=0x406b4330, ftLastWriteTime.dwHighDateTime=0x1d45bfa, nFileSizeHigh=0x0, nFileSizeLow=0xcab0)) returned 1 [0058.044] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0058.044] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\JPgSFw.csv", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\JPgSFw.csv", lpFilePart=0x0) returned 0x28 [0058.044] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0058.044] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\JPgSFw.csv" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\jpgsfw.csv"), fInfoLevelId=0x0, lpFileInformation=0x215acd0 | out: lpFileInformation=0x215acd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89956e60, ftCreationTime.dwHighDateTime=0x1d461df, ftLastAccessTime.dwLowDateTime=0x406b4330, ftLastAccessTime.dwHighDateTime=0x1d45bfa, ftLastWriteTime.dwLowDateTime=0x406b4330, ftLastWriteTime.dwHighDateTime=0x1d45bfa, nFileSizeHigh=0x0, nFileSizeLow=0xcab0)) returned 1 [0058.044] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0058.044] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\JPgSFw.csv", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\JPgSFw.csv", lpFilePart=0x0) returned 0x28 [0058.044] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0058.044] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\JPgSFw.csv" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\jpgsfw.csv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0058.044] GetFileType (hFile=0x448) returned 0x1 [0058.044] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0058.044] GetFileType (hFile=0x448) returned 0x1 [0058.044] ReadFile (in: hFile=0x448, lpBuffer=0x215d010, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be8b8, lpOverlapped=0x0 | out: lpBuffer=0x215d010*, lpNumberOfBytesRead=0x3be8b8*=0x1000, lpOverlapped=0x0) returned 1 [0058.083] CloseHandle (hObject=0x448) returned 1 [0058.083] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\JPgSFw.csv", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\JPgSFw.csv", lpFilePart=0x0) returned 0x28 [0058.083] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0058.083] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\JPgSFw.csv" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\jpgsfw.csv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0058.083] GetFileType (hFile=0x448) returned 0x1 [0058.083] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0058.083] GetFileType (hFile=0x448) returned 0x1 [0058.083] WriteFile (in: hFile=0x448, lpBuffer=0x215adb8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be968, lpOverlapped=0x0 | out: lpBuffer=0x215adb8*, lpNumberOfBytesWritten=0x3be968*=0x2000, lpOverlapped=0x0) returned 1 [0058.083] CloseHandle (hObject=0x448) returned 1 [0058.084] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\JPgSFw.csv", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\JPgSFw.csv", lpFilePart=0x0) returned 0x28 [0058.084] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\JPgSFw.csv.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\JPgSFw.csv.xuy", lpFilePart=0x0) returned 0x2c [0058.084] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0058.085] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\JPgSFw.csv" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\jpgsfw.csv"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89956e60, ftCreationTime.dwHighDateTime=0x1d461df, ftLastAccessTime.dwLowDateTime=0x406b4330, ftLastAccessTime.dwHighDateTime=0x1d45bfa, ftLastWriteTime.dwLowDateTime=0xe76bf2d, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xcab0)) returned 1 [0058.085] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0058.085] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\JPgSFw.csv" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\jpgsfw.csv"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\JPgSFw.csv.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\jpgsfw.csv.xuy")) returned 1 [0058.086] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\lbz uIFWEPpxo2ZVx6wj.bmp", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\lbz uIFWEPpxo2ZVx6wj.bmp", lpFilePart=0x0) returned 0x36 [0058.086] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0058.086] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\lbz uIFWEPpxo2ZVx6wj.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\lbz uifweppxo2zvx6wj.bmp"), fInfoLevelId=0x0, lpFileInformation=0x21d92c0 | out: lpFileInformation=0x21d92c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefe81070, ftCreationTime.dwHighDateTime=0x1d4623c, ftLastAccessTime.dwLowDateTime=0xf6235ad0, ftLastAccessTime.dwHighDateTime=0x1d4632c, ftLastWriteTime.dwLowDateTime=0xf6235ad0, ftLastWriteTime.dwHighDateTime=0x1d4632c, nFileSizeHigh=0x0, nFileSizeLow=0x10824)) returned 1 [0058.086] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0058.086] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\lbz uIFWEPpxo2ZVx6wj.bmp", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\lbz uIFWEPpxo2ZVx6wj.bmp", lpFilePart=0x0) returned 0x36 [0058.086] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0058.086] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\lbz uIFWEPpxo2ZVx6wj.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\lbz uifweppxo2zvx6wj.bmp"), fInfoLevelId=0x0, lpFileInformation=0x21d9400 | out: lpFileInformation=0x21d9400*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefe81070, ftCreationTime.dwHighDateTime=0x1d4623c, ftLastAccessTime.dwLowDateTime=0xf6235ad0, ftLastAccessTime.dwHighDateTime=0x1d4632c, ftLastWriteTime.dwLowDateTime=0xf6235ad0, ftLastWriteTime.dwHighDateTime=0x1d4632c, nFileSizeHigh=0x0, nFileSizeLow=0x10824)) returned 1 [0058.086] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0058.086] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\lbz uIFWEPpxo2ZVx6wj.bmp", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\lbz uIFWEPpxo2ZVx6wj.bmp", lpFilePart=0x0) returned 0x36 [0058.086] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0058.086] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\lbz uIFWEPpxo2ZVx6wj.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\lbz uifweppxo2zvx6wj.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0058.087] GetFileType (hFile=0x448) returned 0x1 [0058.087] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0058.087] GetFileType (hFile=0x448) returned 0x1 [0058.087] ReadFile (in: hFile=0x448, lpBuffer=0x21db7b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be8b8, lpOverlapped=0x0 | out: lpBuffer=0x21db7b0*, lpNumberOfBytesRead=0x3be8b8*=0x1000, lpOverlapped=0x0) returned 1 [0058.097] CloseHandle (hObject=0x448) returned 1 [0058.097] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\lbz uIFWEPpxo2ZVx6wj.bmp", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\lbz uIFWEPpxo2ZVx6wj.bmp", lpFilePart=0x0) returned 0x36 [0058.097] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0058.097] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\lbz uIFWEPpxo2ZVx6wj.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\lbz uifweppxo2zvx6wj.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0058.097] GetFileType (hFile=0x448) returned 0x1 [0058.097] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0058.097] GetFileType (hFile=0x448) returned 0x1 [0058.097] WriteFile (in: hFile=0x448, lpBuffer=0x21d9520*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be968, lpOverlapped=0x0 | out: lpBuffer=0x21d9520*, lpNumberOfBytesWritten=0x3be968*=0x2000, lpOverlapped=0x0) returned 1 [0058.098] CloseHandle (hObject=0x448) returned 1 [0058.098] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\lbz uIFWEPpxo2ZVx6wj.bmp", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\lbz uIFWEPpxo2ZVx6wj.bmp", lpFilePart=0x0) returned 0x36 [0058.098] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\lbz uIFWEPpxo2ZVx6wj.bmp.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\lbz uIFWEPpxo2ZVx6wj.bmp.xuy", lpFilePart=0x0) returned 0x3a [0058.099] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0058.099] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\lbz uIFWEPpxo2ZVx6wj.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\lbz uifweppxo2zvx6wj.bmp"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefe81070, ftCreationTime.dwHighDateTime=0x1d4623c, ftLastAccessTime.dwLowDateTime=0xf6235ad0, ftLastAccessTime.dwHighDateTime=0x1d4632c, ftLastWriteTime.dwLowDateTime=0xe7921d3, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x10824)) returned 1 [0058.099] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0058.099] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\lbz uIFWEPpxo2ZVx6wj.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\lbz uifweppxo2zvx6wj.bmp"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\lbz uIFWEPpxo2ZVx6wj.bmp.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\lbz uifweppxo2zvx6wj.bmp.xuy")) returned 1 [0058.100] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\lkYPcxH85KgpwT8.jpg", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\lkYPcxH85KgpwT8.jpg", lpFilePart=0x0) returned 0x31 [0058.100] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0058.100] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\lkYPcxH85KgpwT8.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\lkypcxh85kgpwt8.jpg"), fInfoLevelId=0x0, lpFileInformation=0x2257ae0 | out: lpFileInformation=0x2257ae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68585900, ftCreationTime.dwHighDateTime=0x1d46069, ftLastAccessTime.dwLowDateTime=0x6d75f170, ftLastAccessTime.dwHighDateTime=0x1d45c42, ftLastWriteTime.dwLowDateTime=0x6d75f170, ftLastWriteTime.dwHighDateTime=0x1d45c42, nFileSizeHigh=0x0, nFileSizeLow=0x1400e)) returned 1 [0058.100] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0058.100] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\lkYPcxH85KgpwT8.jpg", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\lkYPcxH85KgpwT8.jpg", lpFilePart=0x0) returned 0x31 [0058.100] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0058.101] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\lkYPcxH85KgpwT8.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\lkypcxh85kgpwt8.jpg"), fInfoLevelId=0x0, lpFileInformation=0x2257c08 | out: lpFileInformation=0x2257c08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68585900, ftCreationTime.dwHighDateTime=0x1d46069, ftLastAccessTime.dwLowDateTime=0x6d75f170, ftLastAccessTime.dwHighDateTime=0x1d45c42, ftLastWriteTime.dwLowDateTime=0x6d75f170, ftLastWriteTime.dwHighDateTime=0x1d45c42, nFileSizeHigh=0x0, nFileSizeLow=0x1400e)) returned 1 [0058.101] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0058.101] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\lkYPcxH85KgpwT8.jpg", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\lkYPcxH85KgpwT8.jpg", lpFilePart=0x0) returned 0x31 [0058.101] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0058.101] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\lkYPcxH85KgpwT8.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\lkypcxh85kgpwt8.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0058.101] GetFileType (hFile=0x448) returned 0x1 [0058.101] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0058.101] GetFileType (hFile=0x448) returned 0x1 [0058.101] ReadFile (in: hFile=0x448, lpBuffer=0x2259f88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be8b8, lpOverlapped=0x0 | out: lpBuffer=0x2259f88*, lpNumberOfBytesRead=0x3be8b8*=0x1000, lpOverlapped=0x0) returned 1 [0058.111] CloseHandle (hObject=0x448) returned 1 [0058.111] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\lkYPcxH85KgpwT8.jpg", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\lkYPcxH85KgpwT8.jpg", lpFilePart=0x0) returned 0x31 [0058.112] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0058.112] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\lkYPcxH85KgpwT8.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\lkypcxh85kgpwt8.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0058.112] GetFileType (hFile=0x448) returned 0x1 [0058.112] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0058.112] GetFileType (hFile=0x448) returned 0x1 [0058.112] WriteFile (in: hFile=0x448, lpBuffer=0x2257d10*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be968, lpOverlapped=0x0 | out: lpBuffer=0x2257d10*, lpNumberOfBytesWritten=0x3be968*=0x2000, lpOverlapped=0x0) returned 1 [0058.112] CloseHandle (hObject=0x448) returned 1 [0058.113] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\lkYPcxH85KgpwT8.jpg", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\lkYPcxH85KgpwT8.jpg", lpFilePart=0x0) returned 0x31 [0058.113] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\lkYPcxH85KgpwT8.jpg.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\lkYPcxH85KgpwT8.jpg.xuy", lpFilePart=0x0) returned 0x35 [0058.113] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0058.113] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\lkYPcxH85KgpwT8.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\lkypcxh85kgpwt8.jpg"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68585900, ftCreationTime.dwHighDateTime=0x1d46069, ftLastAccessTime.dwLowDateTime=0x6d75f170, ftLastAccessTime.dwHighDateTime=0x1d45c42, ftLastWriteTime.dwLowDateTime=0xe7b8449, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x1400e)) returned 1 [0058.113] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0058.113] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\lkYPcxH85KgpwT8.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\lkypcxh85kgpwt8.jpg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\lkYPcxH85KgpwT8.jpg.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\lkypcxh85kgpwt8.jpg.xuy")) returned 1 [0058.120] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\nLT0.docx", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\nLT0.docx", lpFilePart=0x0) returned 0x27 [0058.120] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0058.120] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\nLT0.docx" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\nlt0.docx"), fInfoLevelId=0x0, lpFileInformation=0x22d6288 | out: lpFileInformation=0x22d6288*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4181bc0, ftCreationTime.dwHighDateTime=0x1d462a8, ftLastAccessTime.dwLowDateTime=0xd2ead7f0, ftLastAccessTime.dwHighDateTime=0x1d459d1, ftLastWriteTime.dwLowDateTime=0xd2ead7f0, ftLastWriteTime.dwHighDateTime=0x1d459d1, nFileSizeHigh=0x0, nFileSizeLow=0x7205)) returned 1 [0058.120] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0058.120] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\nLT0.docx", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\nLT0.docx", lpFilePart=0x0) returned 0x27 [0058.120] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0058.120] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\nLT0.docx" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\nlt0.docx"), fInfoLevelId=0x0, lpFileInformation=0x22d6388 | out: lpFileInformation=0x22d6388*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4181bc0, ftCreationTime.dwHighDateTime=0x1d462a8, ftLastAccessTime.dwLowDateTime=0xd2ead7f0, ftLastAccessTime.dwHighDateTime=0x1d459d1, ftLastWriteTime.dwLowDateTime=0xd2ead7f0, ftLastWriteTime.dwHighDateTime=0x1d459d1, nFileSizeHigh=0x0, nFileSizeLow=0x7205)) returned 1 [0058.120] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0058.120] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\nLT0.docx", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\nLT0.docx", lpFilePart=0x0) returned 0x27 [0058.120] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0058.120] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\nLT0.docx" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\nlt0.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0058.121] GetFileType (hFile=0x448) returned 0x1 [0058.121] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0058.121] GetFileType (hFile=0x448) returned 0x1 [0058.121] ReadFile (in: hFile=0x448, lpBuffer=0x22d86b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be8b8, lpOverlapped=0x0 | out: lpBuffer=0x22d86b8*, lpNumberOfBytesRead=0x3be8b8*=0x1000, lpOverlapped=0x0) returned 1 [0058.134] CloseHandle (hObject=0x448) returned 1 [0058.134] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\nLT0.docx", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\nLT0.docx", lpFilePart=0x0) returned 0x27 [0058.134] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0058.134] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\nLT0.docx" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\nlt0.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0058.135] GetFileType (hFile=0x448) returned 0x1 [0058.135] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0058.135] GetFileType (hFile=0x448) returned 0x1 [0058.135] WriteFile (in: hFile=0x448, lpBuffer=0x22d6468*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be968, lpOverlapped=0x0 | out: lpBuffer=0x22d6468*, lpNumberOfBytesWritten=0x3be968*=0x2000, lpOverlapped=0x0) returned 1 [0058.135] CloseHandle (hObject=0x448) returned 1 [0058.136] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\nLT0.docx", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\nLT0.docx", lpFilePart=0x0) returned 0x27 [0058.136] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\nLT0.docx.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\nLT0.docx.xuy", lpFilePart=0x0) returned 0x2b [0058.136] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0058.136] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\nLT0.docx" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\nlt0.docx"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4181bc0, ftCreationTime.dwHighDateTime=0x1d462a8, ftLastAccessTime.dwLowDateTime=0xd2ead7f0, ftLastAccessTime.dwHighDateTime=0x1d459d1, ftLastWriteTime.dwLowDateTime=0xe804965, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x7205)) returned 1 [0058.136] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0058.136] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\nLT0.docx" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\nlt0.docx"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\nLT0.docx.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\nlt0.docx.xuy")) returned 1 [0058.138] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Oo1FL c-lsQI 20dpg.swf", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Oo1FL c-lsQI 20dpg.swf", lpFilePart=0x0) returned 0x34 [0058.138] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0058.138] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Oo1FL c-lsQI 20dpg.swf" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\oo1fl c-lsqi 20dpg.swf"), fInfoLevelId=0x0, lpFileInformation=0x2354948 | out: lpFileInformation=0x2354948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8883f3f0, ftCreationTime.dwHighDateTime=0x1d45de5, ftLastAccessTime.dwLowDateTime=0x9c86a10, ftLastAccessTime.dwHighDateTime=0x1d4604b, ftLastWriteTime.dwLowDateTime=0x9c86a10, ftLastWriteTime.dwHighDateTime=0x1d4604b, nFileSizeHigh=0x0, nFileSizeLow=0x108a9)) returned 1 [0058.138] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0058.138] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Oo1FL c-lsQI 20dpg.swf", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Oo1FL c-lsQI 20dpg.swf", lpFilePart=0x0) returned 0x34 [0058.138] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0058.138] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Oo1FL c-lsQI 20dpg.swf" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\oo1fl c-lsqi 20dpg.swf"), fInfoLevelId=0x0, lpFileInformation=0x2354a80 | out: lpFileInformation=0x2354a80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8883f3f0, ftCreationTime.dwHighDateTime=0x1d45de5, ftLastAccessTime.dwLowDateTime=0x9c86a10, ftLastAccessTime.dwHighDateTime=0x1d4604b, ftLastWriteTime.dwLowDateTime=0x9c86a10, ftLastWriteTime.dwHighDateTime=0x1d4604b, nFileSizeHigh=0x0, nFileSizeLow=0x108a9)) returned 1 [0058.138] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0058.138] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Oo1FL c-lsQI 20dpg.swf", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Oo1FL c-lsQI 20dpg.swf", lpFilePart=0x0) returned 0x34 [0058.138] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0058.138] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Oo1FL c-lsQI 20dpg.swf" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\oo1fl c-lsqi 20dpg.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0058.138] GetFileType (hFile=0x448) returned 0x1 [0058.138] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0058.139] GetFileType (hFile=0x448) returned 0x1 [0058.139] ReadFile (in: hFile=0x448, lpBuffer=0x2356e20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be8b8, lpOverlapped=0x0 | out: lpBuffer=0x2356e20*, lpNumberOfBytesRead=0x3be8b8*=0x1000, lpOverlapped=0x0) returned 1 [0058.182] CloseHandle (hObject=0x448) returned 1 [0058.182] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Oo1FL c-lsQI 20dpg.swf", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Oo1FL c-lsQI 20dpg.swf", lpFilePart=0x0) returned 0x34 [0058.182] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0058.182] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Oo1FL c-lsQI 20dpg.swf" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\oo1fl c-lsqi 20dpg.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0058.183] GetFileType (hFile=0x448) returned 0x1 [0058.183] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0058.183] GetFileType (hFile=0x448) returned 0x1 [0058.183] WriteFile (in: hFile=0x448, lpBuffer=0x2159838*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be968, lpOverlapped=0x0 | out: lpBuffer=0x2159838*, lpNumberOfBytesWritten=0x3be968*=0x2000, lpOverlapped=0x0) returned 1 [0058.183] CloseHandle (hObject=0x448) returned 1 [0058.184] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Oo1FL c-lsQI 20dpg.swf", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Oo1FL c-lsQI 20dpg.swf", lpFilePart=0x0) returned 0x34 [0058.184] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Oo1FL c-lsQI 20dpg.swf.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Oo1FL c-lsQI 20dpg.swf.xuy", lpFilePart=0x0) returned 0x38 [0058.184] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0058.184] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Oo1FL c-lsQI 20dpg.swf" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\oo1fl c-lsqi 20dpg.swf"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8883f3f0, ftCreationTime.dwHighDateTime=0x1d45de5, ftLastAccessTime.dwLowDateTime=0x9c86a10, ftLastAccessTime.dwHighDateTime=0x1d4604b, ftLastWriteTime.dwLowDateTime=0xe877185, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x108a9)) returned 1 [0058.184] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0058.184] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Oo1FL c-lsQI 20dpg.swf" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\oo1fl c-lsqi 20dpg.swf"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Oo1FL c-lsQI 20dpg.swf.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\oo1fl c-lsqi 20dpg.swf.xuy")) returned 1 [0058.185] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\QNw8RivG2FdzDoT6w.jpg", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\QNw8RivG2FdzDoT6w.jpg", lpFilePart=0x0) returned 0x33 [0058.185] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0058.185] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\QNw8RivG2FdzDoT6w.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\qnw8rivg2fdzdot6w.jpg"), fInfoLevelId=0x0, lpFileInformation=0x21d6890 | out: lpFileInformation=0x21d6890*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31f55c80, ftCreationTime.dwHighDateTime=0x1d4602f, ftLastAccessTime.dwLowDateTime=0x9b85df10, ftLastAccessTime.dwHighDateTime=0x1d45a37, ftLastWriteTime.dwLowDateTime=0x9b85df10, ftLastWriteTime.dwHighDateTime=0x1d45a37, nFileSizeHigh=0x0, nFileSizeLow=0x1343b)) returned 1 [0058.185] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0058.185] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\QNw8RivG2FdzDoT6w.jpg", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\QNw8RivG2FdzDoT6w.jpg", lpFilePart=0x0) returned 0x33 [0058.185] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0058.185] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\QNw8RivG2FdzDoT6w.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\qnw8rivg2fdzdot6w.jpg"), fInfoLevelId=0x0, lpFileInformation=0x21d69c0 | out: lpFileInformation=0x21d69c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31f55c80, ftCreationTime.dwHighDateTime=0x1d4602f, ftLastAccessTime.dwLowDateTime=0x9b85df10, ftLastAccessTime.dwHighDateTime=0x1d45a37, ftLastWriteTime.dwLowDateTime=0x9b85df10, ftLastWriteTime.dwHighDateTime=0x1d45a37, nFileSizeHigh=0x0, nFileSizeLow=0x1343b)) returned 1 [0058.185] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0058.185] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\QNw8RivG2FdzDoT6w.jpg", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\QNw8RivG2FdzDoT6w.jpg", lpFilePart=0x0) returned 0x33 [0058.185] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0058.185] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\QNw8RivG2FdzDoT6w.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\qnw8rivg2fdzdot6w.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0058.186] GetFileType (hFile=0x448) returned 0x1 [0058.186] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0058.186] GetFileType (hFile=0x448) returned 0x1 [0058.186] ReadFile (in: hFile=0x448, lpBuffer=0x21d8d50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be8b8, lpOverlapped=0x0 | out: lpBuffer=0x21d8d50*, lpNumberOfBytesRead=0x3be8b8*=0x1000, lpOverlapped=0x0) returned 1 [0058.196] CloseHandle (hObject=0x448) returned 1 [0058.196] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\QNw8RivG2FdzDoT6w.jpg", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\QNw8RivG2FdzDoT6w.jpg", lpFilePart=0x0) returned 0x33 [0058.196] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0058.196] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\QNw8RivG2FdzDoT6w.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\qnw8rivg2fdzdot6w.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0058.196] GetFileType (hFile=0x448) returned 0x1 [0058.196] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0058.197] GetFileType (hFile=0x448) returned 0x1 [0058.197] WriteFile (in: hFile=0x448, lpBuffer=0x21d6ad0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be968, lpOverlapped=0x0 | out: lpBuffer=0x21d6ad0*, lpNumberOfBytesWritten=0x3be968*=0x2000, lpOverlapped=0x0) returned 1 [0058.197] CloseHandle (hObject=0x448) returned 1 [0058.197] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\QNw8RivG2FdzDoT6w.jpg", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\QNw8RivG2FdzDoT6w.jpg", lpFilePart=0x0) returned 0x33 [0058.197] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\QNw8RivG2FdzDoT6w.jpg.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\QNw8RivG2FdzDoT6w.jpg.xuy", lpFilePart=0x0) returned 0x37 [0058.197] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0058.198] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\QNw8RivG2FdzDoT6w.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\qnw8rivg2fdzdot6w.jpg"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31f55c80, ftCreationTime.dwHighDateTime=0x1d4602f, ftLastAccessTime.dwLowDateTime=0x9b85df10, ftLastAccessTime.dwHighDateTime=0x1d45a37, ftLastWriteTime.dwLowDateTime=0xe89d297, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x1343b)) returned 1 [0058.198] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0058.198] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\QNw8RivG2FdzDoT6w.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\qnw8rivg2fdzdot6w.jpg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\QNw8RivG2FdzDoT6w.jpg.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\qnw8rivg2fdzdot6w.jpg.xuy")) returned 1 [0058.199] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\QOCXNrR-FN44qxjyc2.gif", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\QOCXNrR-FN44qxjyc2.gif", lpFilePart=0x0) returned 0x34 [0058.199] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0058.199] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\QOCXNrR-FN44qxjyc2.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\qocxnrr-fn44qxjyc2.gif"), fInfoLevelId=0x0, lpFileInformation=0x2255058 | out: lpFileInformation=0x2255058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7fce9600, ftCreationTime.dwHighDateTime=0x1d4575c, ftLastAccessTime.dwLowDateTime=0xaaf37a20, ftLastAccessTime.dwHighDateTime=0x1d464d2, ftLastWriteTime.dwLowDateTime=0xaaf37a20, ftLastWriteTime.dwHighDateTime=0x1d464d2, nFileSizeHigh=0x0, nFileSizeLow=0x49d5)) returned 1 [0058.199] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0058.199] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\QOCXNrR-FN44qxjyc2.gif", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\QOCXNrR-FN44qxjyc2.gif", lpFilePart=0x0) returned 0x34 [0058.199] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0058.199] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\QOCXNrR-FN44qxjyc2.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\qocxnrr-fn44qxjyc2.gif"), fInfoLevelId=0x0, lpFileInformation=0x2255190 | out: lpFileInformation=0x2255190*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7fce9600, ftCreationTime.dwHighDateTime=0x1d4575c, ftLastAccessTime.dwLowDateTime=0xaaf37a20, ftLastAccessTime.dwHighDateTime=0x1d464d2, ftLastWriteTime.dwLowDateTime=0xaaf37a20, ftLastWriteTime.dwHighDateTime=0x1d464d2, nFileSizeHigh=0x0, nFileSizeLow=0x49d5)) returned 1 [0058.199] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0058.199] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\QOCXNrR-FN44qxjyc2.gif", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\QOCXNrR-FN44qxjyc2.gif", lpFilePart=0x0) returned 0x34 [0058.199] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0058.199] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\QOCXNrR-FN44qxjyc2.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\qocxnrr-fn44qxjyc2.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0058.199] GetFileType (hFile=0x448) returned 0x1 [0058.200] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0058.200] GetFileType (hFile=0x448) returned 0x1 [0058.200] ReadFile (in: hFile=0x448, lpBuffer=0x2257530, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be8b8, lpOverlapped=0x0 | out: lpBuffer=0x2257530*, lpNumberOfBytesRead=0x3be8b8*=0x1000, lpOverlapped=0x0) returned 1 [0058.211] CloseHandle (hObject=0x448) returned 1 [0058.211] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\QOCXNrR-FN44qxjyc2.gif", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\QOCXNrR-FN44qxjyc2.gif", lpFilePart=0x0) returned 0x34 [0058.211] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0058.211] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\QOCXNrR-FN44qxjyc2.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\qocxnrr-fn44qxjyc2.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0058.211] GetFileType (hFile=0x448) returned 0x1 [0058.211] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0058.211] GetFileType (hFile=0x448) returned 0x1 [0058.211] WriteFile (in: hFile=0x448, lpBuffer=0x22552a8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be968, lpOverlapped=0x0 | out: lpBuffer=0x22552a8*, lpNumberOfBytesWritten=0x3be968*=0x2000, lpOverlapped=0x0) returned 1 [0058.211] CloseHandle (hObject=0x448) returned 1 [0058.212] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\QOCXNrR-FN44qxjyc2.gif", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\QOCXNrR-FN44qxjyc2.gif", lpFilePart=0x0) returned 0x34 [0058.212] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\QOCXNrR-FN44qxjyc2.gif.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\QOCXNrR-FN44qxjyc2.gif.xuy", lpFilePart=0x0) returned 0x38 [0058.212] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0058.212] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\QOCXNrR-FN44qxjyc2.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\qocxnrr-fn44qxjyc2.gif"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7fce9600, ftCreationTime.dwHighDateTime=0x1d4575c, ftLastAccessTime.dwLowDateTime=0xaaf37a20, ftLastAccessTime.dwHighDateTime=0x1d464d2, ftLastWriteTime.dwLowDateTime=0xe8c362c, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x49d5)) returned 1 [0058.212] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0058.213] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\QOCXNrR-FN44qxjyc2.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\qocxnrr-fn44qxjyc2.gif"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\QOCXNrR-FN44qxjyc2.gif.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\qocxnrr-fn44qxjyc2.gif.xuy")) returned 1 [0058.267] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\uKpxUuYO1PkhihtOk.gif", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\uKpxUuYO1PkhihtOk.gif", lpFilePart=0x0) returned 0x33 [0058.267] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0058.267] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\uKpxUuYO1PkhihtOk.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\ukpxuuyo1pkhihtok.gif"), fInfoLevelId=0x0, lpFileInformation=0x22d3858 | out: lpFileInformation=0x22d3858*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41832ac0, ftCreationTime.dwHighDateTime=0x1d465dd, ftLastAccessTime.dwLowDateTime=0xb0b2d430, ftLastAccessTime.dwHighDateTime=0x1d46345, ftLastWriteTime.dwLowDateTime=0xb0b2d430, ftLastWriteTime.dwHighDateTime=0x1d46345, nFileSizeHigh=0x0, nFileSizeLow=0xbaa6)) returned 1 [0058.267] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0058.267] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\uKpxUuYO1PkhihtOk.gif", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\uKpxUuYO1PkhihtOk.gif", lpFilePart=0x0) returned 0x33 [0058.267] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0058.267] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\uKpxUuYO1PkhihtOk.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\ukpxuuyo1pkhihtok.gif"), fInfoLevelId=0x0, lpFileInformation=0x22d3988 | out: lpFileInformation=0x22d3988*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41832ac0, ftCreationTime.dwHighDateTime=0x1d465dd, ftLastAccessTime.dwLowDateTime=0xb0b2d430, ftLastAccessTime.dwHighDateTime=0x1d46345, ftLastWriteTime.dwLowDateTime=0xb0b2d430, ftLastWriteTime.dwHighDateTime=0x1d46345, nFileSizeHigh=0x0, nFileSizeLow=0xbaa6)) returned 1 [0058.267] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0058.267] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\uKpxUuYO1PkhihtOk.gif", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\uKpxUuYO1PkhihtOk.gif", lpFilePart=0x0) returned 0x33 [0058.267] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0058.267] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\uKpxUuYO1PkhihtOk.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\ukpxuuyo1pkhihtok.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0058.267] GetFileType (hFile=0x448) returned 0x1 [0058.267] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0058.268] GetFileType (hFile=0x448) returned 0x1 [0058.268] ReadFile (in: hFile=0x448, lpBuffer=0x22d5d18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be8b8, lpOverlapped=0x0 | out: lpBuffer=0x22d5d18*, lpNumberOfBytesRead=0x3be8b8*=0x1000, lpOverlapped=0x0) returned 1 [0058.278] CloseHandle (hObject=0x448) returned 1 [0058.279] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\uKpxUuYO1PkhihtOk.gif", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\uKpxUuYO1PkhihtOk.gif", lpFilePart=0x0) returned 0x33 [0058.279] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0058.279] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\uKpxUuYO1PkhihtOk.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\ukpxuuyo1pkhihtok.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0058.279] GetFileType (hFile=0x448) returned 0x1 [0058.279] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0058.279] GetFileType (hFile=0x448) returned 0x1 [0058.279] WriteFile (in: hFile=0x448, lpBuffer=0x22d3a98*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be968, lpOverlapped=0x0 | out: lpBuffer=0x22d3a98*, lpNumberOfBytesWritten=0x3be968*=0x2000, lpOverlapped=0x0) returned 1 [0058.279] CloseHandle (hObject=0x448) returned 1 [0058.279] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\uKpxUuYO1PkhihtOk.gif", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\uKpxUuYO1PkhihtOk.gif", lpFilePart=0x0) returned 0x33 [0058.279] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\uKpxUuYO1PkhihtOk.gif.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\uKpxUuYO1PkhihtOk.gif.xuy", lpFilePart=0x0) returned 0x37 [0058.280] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0058.280] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\uKpxUuYO1PkhihtOk.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\ukpxuuyo1pkhihtok.gif"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41832ac0, ftCreationTime.dwHighDateTime=0x1d465dd, ftLastAccessTime.dwLowDateTime=0xb0b2d430, ftLastAccessTime.dwHighDateTime=0x1d46345, ftLastWriteTime.dwLowDateTime=0xe95beac, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xbaa6)) returned 1 [0058.280] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0058.280] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\uKpxUuYO1PkhihtOk.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\ukpxuuyo1pkhihtok.gif"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\uKpxUuYO1PkhihtOk.gif.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\ukpxuuyo1pkhihtok.gif.xuy")) returned 1 [0058.280] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\v6afBXu2KwQML_bnz2.avi", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\v6afBXu2KwQML_bnz2.avi", lpFilePart=0x0) returned 0x34 [0058.280] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0058.280] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\v6afBXu2KwQML_bnz2.avi" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\v6afbxu2kwqml_bnz2.avi"), fInfoLevelId=0x0, lpFileInformation=0x2352020 | out: lpFileInformation=0x2352020*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9cb67300, ftCreationTime.dwHighDateTime=0x1d457ca, ftLastAccessTime.dwLowDateTime=0xf67a6380, ftLastAccessTime.dwHighDateTime=0x1d46434, ftLastWriteTime.dwLowDateTime=0xf67a6380, ftLastWriteTime.dwHighDateTime=0x1d46434, nFileSizeHigh=0x0, nFileSizeLow=0x18f06)) returned 1 [0058.280] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0058.280] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\v6afBXu2KwQML_bnz2.avi", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\v6afBXu2KwQML_bnz2.avi", lpFilePart=0x0) returned 0x34 [0058.281] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0058.281] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\v6afBXu2KwQML_bnz2.avi" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\v6afbxu2kwqml_bnz2.avi"), fInfoLevelId=0x0, lpFileInformation=0x2352158 | out: lpFileInformation=0x2352158*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9cb67300, ftCreationTime.dwHighDateTime=0x1d457ca, ftLastAccessTime.dwLowDateTime=0xf67a6380, ftLastAccessTime.dwHighDateTime=0x1d46434, ftLastWriteTime.dwLowDateTime=0xf67a6380, ftLastWriteTime.dwHighDateTime=0x1d46434, nFileSizeHigh=0x0, nFileSizeLow=0x18f06)) returned 1 [0058.281] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0058.281] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\v6afBXu2KwQML_bnz2.avi", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\v6afBXu2KwQML_bnz2.avi", lpFilePart=0x0) returned 0x34 [0058.281] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0058.281] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\v6afBXu2KwQML_bnz2.avi" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\v6afbxu2kwqml_bnz2.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0058.281] GetFileType (hFile=0x448) returned 0x1 [0058.281] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0058.281] GetFileType (hFile=0x448) returned 0x1 [0058.281] ReadFile (in: hFile=0x448, lpBuffer=0x23544f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be8b8, lpOverlapped=0x0 | out: lpBuffer=0x23544f8*, lpNumberOfBytesRead=0x3be8b8*=0x1000, lpOverlapped=0x0) returned 1 [0058.322] CloseHandle (hObject=0x448) returned 1 [0058.322] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\v6afBXu2KwQML_bnz2.avi", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\v6afBXu2KwQML_bnz2.avi", lpFilePart=0x0) returned 0x34 [0058.322] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0058.322] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\v6afBXu2KwQML_bnz2.avi" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\v6afbxu2kwqml_bnz2.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0058.322] GetFileType (hFile=0x448) returned 0x1 [0058.323] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0058.323] GetFileType (hFile=0x448) returned 0x1 [0058.323] WriteFile (in: hFile=0x448, lpBuffer=0x2159838*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be968, lpOverlapped=0x0 | out: lpBuffer=0x2159838*, lpNumberOfBytesWritten=0x3be968*=0x2000, lpOverlapped=0x0) returned 1 [0058.323] CloseHandle (hObject=0x448) returned 1 [0058.323] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\v6afBXu2KwQML_bnz2.avi", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\v6afBXu2KwQML_bnz2.avi", lpFilePart=0x0) returned 0x34 [0058.323] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\v6afBXu2KwQML_bnz2.avi.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\v6afBXu2KwQML_bnz2.avi.xuy", lpFilePart=0x0) returned 0x38 [0058.323] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0058.323] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\v6afBXu2KwQML_bnz2.avi" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\v6afbxu2kwqml_bnz2.avi"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9cb67300, ftCreationTime.dwHighDateTime=0x1d457ca, ftLastAccessTime.dwLowDateTime=0xf67a6380, ftLastAccessTime.dwHighDateTime=0x1d46434, ftLastWriteTime.dwLowDateTime=0xe9cea5c, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x18f06)) returned 1 [0058.323] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0058.323] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\v6afBXu2KwQML_bnz2.avi" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\v6afbxu2kwqml_bnz2.avi"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\v6afBXu2KwQML_bnz2.avi.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\v6afbxu2kwqml_bnz2.avi.xuy")) returned 1 [0058.324] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\wHS8C.xlsx", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\wHS8C.xlsx", lpFilePart=0x0) returned 0x28 [0058.324] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0058.324] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\wHS8C.xlsx" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\whs8c.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x21d0800 | out: lpFileInformation=0x21d0800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x259f650, ftCreationTime.dwHighDateTime=0x1d4615d, ftLastAccessTime.dwLowDateTime=0xc9b4d3a0, ftLastAccessTime.dwHighDateTime=0x1d465a4, ftLastWriteTime.dwLowDateTime=0xc9b4d3a0, ftLastWriteTime.dwHighDateTime=0x1d465a4, nFileSizeHigh=0x0, nFileSizeLow=0x6b9e)) returned 1 [0058.324] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0058.324] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\wHS8C.xlsx", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\wHS8C.xlsx", lpFilePart=0x0) returned 0x28 [0058.324] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0058.324] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\wHS8C.xlsx" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\whs8c.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x21d0908 | out: lpFileInformation=0x21d0908*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x259f650, ftCreationTime.dwHighDateTime=0x1d4615d, ftLastAccessTime.dwLowDateTime=0xc9b4d3a0, ftLastAccessTime.dwHighDateTime=0x1d465a4, ftLastWriteTime.dwLowDateTime=0xc9b4d3a0, ftLastWriteTime.dwHighDateTime=0x1d465a4, nFileSizeHigh=0x0, nFileSizeLow=0x6b9e)) returned 1 [0058.324] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0058.324] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\wHS8C.xlsx", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\wHS8C.xlsx", lpFilePart=0x0) returned 0x28 [0058.324] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0058.324] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\wHS8C.xlsx" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\whs8c.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0058.325] GetFileType (hFile=0x448) returned 0x1 [0058.325] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0058.325] GetFileType (hFile=0x448) returned 0x1 [0058.325] ReadFile (in: hFile=0x448, lpBuffer=0x21d2c48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be8b8, lpOverlapped=0x0 | out: lpBuffer=0x21d2c48*, lpNumberOfBytesRead=0x3be8b8*=0x1000, lpOverlapped=0x0) returned 1 [0058.335] CloseHandle (hObject=0x448) returned 1 [0058.335] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\wHS8C.xlsx", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\wHS8C.xlsx", lpFilePart=0x0) returned 0x28 [0058.335] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0058.335] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\wHS8C.xlsx" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\whs8c.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0058.335] GetFileType (hFile=0x448) returned 0x1 [0058.335] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0058.335] GetFileType (hFile=0x448) returned 0x1 [0058.335] WriteFile (in: hFile=0x448, lpBuffer=0x21d09f0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be968, lpOverlapped=0x0 | out: lpBuffer=0x21d09f0*, lpNumberOfBytesWritten=0x3be968*=0x2000, lpOverlapped=0x0) returned 1 [0058.335] CloseHandle (hObject=0x448) returned 1 [0058.335] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\wHS8C.xlsx", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\wHS8C.xlsx", lpFilePart=0x0) returned 0x28 [0058.336] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\wHS8C.xlsx.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\wHS8C.xlsx.xuy", lpFilePart=0x0) returned 0x2c [0058.336] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0058.336] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\wHS8C.xlsx" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\whs8c.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x259f650, ftCreationTime.dwHighDateTime=0x1d4615d, ftLastAccessTime.dwLowDateTime=0xc9b4d3a0, ftLastAccessTime.dwHighDateTime=0x1d465a4, ftLastWriteTime.dwLowDateTime=0xe9f4781, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x6b9e)) returned 1 [0058.336] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0058.336] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\wHS8C.xlsx" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\whs8c.xlsx"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\wHS8C.xlsx.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\whs8c.xlsx.xuy")) returned 1 [0058.336] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XyuEncrypt.exe", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XyuEncrypt.exe", lpFilePart=0x0) returned 0x2c [0058.336] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0058.336] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XyuEncrypt.exe" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\xyuencrypt.exe"), fInfoLevelId=0x0, lpFileInformation=0x224eef8 | out: lpFileInformation=0x224eef8*(dwFileAttributes=0x2, ftCreationTime.dwLowDateTime=0xd686cfb6, ftCreationTime.dwHighDateTime=0x1d46683, ftLastAccessTime.dwLowDateTime=0xd686cfb6, ftLastAccessTime.dwHighDateTime=0x1d46683, ftLastWriteTime.dwLowDateTime=0xe9ccde00, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x3e00)) returned 1 [0058.336] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0058.336] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XyuEncrypt.exe", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XyuEncrypt.exe", lpFilePart=0x0) returned 0x2c [0058.337] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0058.337] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XyuEncrypt.exe" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\xyuencrypt.exe"), fInfoLevelId=0x0, lpFileInformation=0x224f010 | out: lpFileInformation=0x224f010*(dwFileAttributes=0x2, ftCreationTime.dwLowDateTime=0xd686cfb6, ftCreationTime.dwHighDateTime=0x1d46683, ftLastAccessTime.dwLowDateTime=0xd686cfb6, ftLastAccessTime.dwHighDateTime=0x1d46683, ftLastWriteTime.dwLowDateTime=0xe9ccde00, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x3e00)) returned 1 [0058.337] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0058.337] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XyuEncrypt.exe", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XyuEncrypt.exe", lpFilePart=0x0) returned 0x2c [0058.337] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0058.337] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XyuEncrypt.exe" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\xyuencrypt.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0058.370] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb2c0) returned 1 [0058.370] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XyuEncrypt.exe", nBufferLength=0x105, lpBuffer=0x3bbf40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XyuEncrypt.exe", lpFilePart=0x0) returned 0x2c [0058.370] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc3e0) returned 1 [0058.370] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XyuEncrypt.exe" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\xyuencrypt.exe"), fInfoLevelId=0x0, lpFileInformation=0x3bc4c0 | out: lpFileInformation=0x3bc4c0*(dwFileAttributes=0x2, ftCreationTime.dwLowDateTime=0xd686cfb6, ftCreationTime.dwHighDateTime=0x1d46683, ftLastAccessTime.dwLowDateTime=0xd686cfb6, ftLastAccessTime.dwHighDateTime=0x1d46683, ftLastWriteTime.dwLowDateTime=0xe9ccde00, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x3e00)) returned 1 [0058.371] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc3a0) returned 1 [0058.371] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XyuEncrypt.exe", nBufferLength=0x105, lpBuffer=0x3bbf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XyuEncrypt.exe", lpFilePart=0x0) returned 0x2c [0058.371] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc3e0) returned 1 [0058.371] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XyuEncrypt.exe" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\xyuencrypt.exe"), fInfoLevelId=0x0, lpFileInformation=0x2251bb0 | out: lpFileInformation=0x2251bb0*(dwFileAttributes=0x2, ftCreationTime.dwLowDateTime=0xd686cfb6, ftCreationTime.dwHighDateTime=0x1d46683, ftLastAccessTime.dwLowDateTime=0xd686cfb6, ftLastAccessTime.dwHighDateTime=0x1d46683, ftLastWriteTime.dwLowDateTime=0xe9ccde00, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x3e00)) returned 1 [0058.371] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc3a0) returned 1 [0058.371] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XyuEncrypt.exe", nBufferLength=0x105, lpBuffer=0x3bbf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XyuEncrypt.exe", lpFilePart=0x0) returned 0x2c [0058.371] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc3e0) returned 1 [0058.371] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XyuEncrypt.exe" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\xyuencrypt.exe"), fInfoLevelId=0x0, lpFileInformation=0x2251cc8 | out: lpFileInformation=0x2251cc8*(dwFileAttributes=0x2, ftCreationTime.dwLowDateTime=0xd686cfb6, ftCreationTime.dwHighDateTime=0x1d46683, ftLastAccessTime.dwLowDateTime=0xd686cfb6, ftLastAccessTime.dwHighDateTime=0x1d46683, ftLastWriteTime.dwLowDateTime=0xe9ccde00, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x3e00)) returned 1 [0058.371] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc3a0) returned 1 [0058.371] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XyuEncrypt.exe", nBufferLength=0x105, lpBuffer=0x3bbe00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XyuEncrypt.exe", lpFilePart=0x0) returned 0x2c [0058.371] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc2e0) returned 1 [0058.371] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XyuEncrypt.exe" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\xyuencrypt.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0058.372] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8d70) returned 1 [0058.373] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\YmyQuKCa6uf.mp4", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\YmyQuKCa6uf.mp4", lpFilePart=0x0) returned 0x2d [0058.373] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0058.373] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\YmyQuKCa6uf.mp4" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\ymyqukca6uf.mp4"), fInfoLevelId=0x0, lpFileInformation=0x2254748 | out: lpFileInformation=0x2254748*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x868f62b0, ftCreationTime.dwHighDateTime=0x1d4580d, ftLastAccessTime.dwLowDateTime=0x1c08a330, ftLastAccessTime.dwHighDateTime=0x1d465ae, ftLastWriteTime.dwLowDateTime=0x1c08a330, ftLastWriteTime.dwHighDateTime=0x1d465ae, nFileSizeHigh=0x0, nFileSizeLow=0x18951)) returned 1 [0058.373] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0058.373] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\YmyQuKCa6uf.mp4", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\YmyQuKCa6uf.mp4", lpFilePart=0x0) returned 0x2d [0058.373] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0058.373] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\YmyQuKCa6uf.mp4" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\ymyqukca6uf.mp4"), fInfoLevelId=0x0, lpFileInformation=0x2254860 | out: lpFileInformation=0x2254860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x868f62b0, ftCreationTime.dwHighDateTime=0x1d4580d, ftLastAccessTime.dwLowDateTime=0x1c08a330, ftLastAccessTime.dwHighDateTime=0x1d465ae, ftLastWriteTime.dwLowDateTime=0x1c08a330, ftLastWriteTime.dwHighDateTime=0x1d465ae, nFileSizeHigh=0x0, nFileSizeLow=0x18951)) returned 1 [0058.373] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0058.374] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\YmyQuKCa6uf.mp4", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\YmyQuKCa6uf.mp4", lpFilePart=0x0) returned 0x2d [0058.374] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0058.374] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\YmyQuKCa6uf.mp4" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\ymyqukca6uf.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0058.374] GetFileType (hFile=0x448) returned 0x1 [0058.374] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0058.374] GetFileType (hFile=0x448) returned 0x1 [0058.374] ReadFile (in: hFile=0x448, lpBuffer=0x2256bc0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be8b8, lpOverlapped=0x0 | out: lpBuffer=0x2256bc0*, lpNumberOfBytesRead=0x3be8b8*=0x1000, lpOverlapped=0x0) returned 1 [0058.414] CloseHandle (hObject=0x448) returned 1 [0058.414] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\YmyQuKCa6uf.mp4", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\YmyQuKCa6uf.mp4", lpFilePart=0x0) returned 0x2d [0058.414] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0058.414] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\YmyQuKCa6uf.mp4" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\ymyqukca6uf.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0058.415] GetFileType (hFile=0x448) returned 0x1 [0058.415] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0058.415] GetFileType (hFile=0x448) returned 0x1 [0058.415] WriteFile (in: hFile=0x448, lpBuffer=0x2254958*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be968, lpOverlapped=0x0 | out: lpBuffer=0x2254958*, lpNumberOfBytesWritten=0x3be968*=0x2000, lpOverlapped=0x0) returned 1 [0058.415] CloseHandle (hObject=0x448) returned 1 [0058.415] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\YmyQuKCa6uf.mp4", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\YmyQuKCa6uf.mp4", lpFilePart=0x0) returned 0x2d [0058.415] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\YmyQuKCa6uf.mp4.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\YmyQuKCa6uf.mp4.xuy", lpFilePart=0x0) returned 0x31 [0058.415] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0058.415] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\YmyQuKCa6uf.mp4" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\ymyqukca6uf.mp4"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x868f62b0, ftCreationTime.dwHighDateTime=0x1d4580d, ftLastAccessTime.dwLowDateTime=0x1c08a330, ftLastAccessTime.dwHighDateTime=0x1d465ae, ftLastWriteTime.dwLowDateTime=0xeab3624, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x18951)) returned 1 [0058.415] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0058.415] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\YmyQuKCa6uf.mp4" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\ymyqukca6uf.mp4"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\YmyQuKCa6uf.mp4.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\ymyqukca6uf.mp4.xuy")) returned 1 [0058.416] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\ZR1kbnnjKcwkhC4U3Z.swf", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\ZR1kbnnjKcwkhC4U3Z.swf", lpFilePart=0x0) returned 0x34 [0058.416] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0058.416] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\ZR1kbnnjKcwkhC4U3Z.swf" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\zr1kbnnjkcwkhc4u3z.swf"), fInfoLevelId=0x0, lpFileInformation=0x22d2e98 | out: lpFileInformation=0x22d2e98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x512cd430, ftCreationTime.dwHighDateTime=0x1d45e3f, ftLastAccessTime.dwLowDateTime=0x447e8690, ftLastAccessTime.dwHighDateTime=0x1d46252, ftLastWriteTime.dwLowDateTime=0x447e8690, ftLastWriteTime.dwHighDateTime=0x1d46252, nFileSizeHigh=0x0, nFileSizeLow=0x3c84)) returned 1 [0058.416] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0058.416] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\ZR1kbnnjKcwkhC4U3Z.swf", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\ZR1kbnnjKcwkhC4U3Z.swf", lpFilePart=0x0) returned 0x34 [0058.416] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0058.416] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\ZR1kbnnjKcwkhC4U3Z.swf" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\zr1kbnnjkcwkhc4u3z.swf"), fInfoLevelId=0x0, lpFileInformation=0x22d2fd0 | out: lpFileInformation=0x22d2fd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x512cd430, ftCreationTime.dwHighDateTime=0x1d45e3f, ftLastAccessTime.dwLowDateTime=0x447e8690, ftLastAccessTime.dwHighDateTime=0x1d46252, ftLastWriteTime.dwLowDateTime=0x447e8690, ftLastWriteTime.dwHighDateTime=0x1d46252, nFileSizeHigh=0x0, nFileSizeLow=0x3c84)) returned 1 [0058.416] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0058.416] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\ZR1kbnnjKcwkhC4U3Z.swf", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\ZR1kbnnjKcwkhC4U3Z.swf", lpFilePart=0x0) returned 0x34 [0058.416] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0058.416] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\ZR1kbnnjKcwkhC4U3Z.swf" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\zr1kbnnjkcwkhc4u3z.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0058.417] GetFileType (hFile=0x448) returned 0x1 [0058.417] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0058.417] GetFileType (hFile=0x448) returned 0x1 [0058.417] ReadFile (in: hFile=0x448, lpBuffer=0x22d5370, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be8b8, lpOverlapped=0x0 | out: lpBuffer=0x22d5370*, lpNumberOfBytesRead=0x3be8b8*=0x1000, lpOverlapped=0x0) returned 1 [0058.427] CloseHandle (hObject=0x448) returned 1 [0058.427] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\ZR1kbnnjKcwkhC4U3Z.swf", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\ZR1kbnnjKcwkhC4U3Z.swf", lpFilePart=0x0) returned 0x34 [0058.427] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0058.427] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\ZR1kbnnjKcwkhC4U3Z.swf" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\zr1kbnnjkcwkhc4u3z.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x448 [0058.427] GetFileType (hFile=0x448) returned 0x1 [0058.427] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0058.427] GetFileType (hFile=0x448) returned 0x1 [0058.427] WriteFile (in: hFile=0x448, lpBuffer=0x22d30e8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be968, lpOverlapped=0x0 | out: lpBuffer=0x22d30e8*, lpNumberOfBytesWritten=0x3be968*=0x2000, lpOverlapped=0x0) returned 1 [0058.428] CloseHandle (hObject=0x448) returned 1 [0058.428] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\ZR1kbnnjKcwkhC4U3Z.swf", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\ZR1kbnnjKcwkhC4U3Z.swf", lpFilePart=0x0) returned 0x34 [0058.428] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\ZR1kbnnjKcwkhC4U3Z.swf.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\ZR1kbnnjKcwkhC4U3Z.swf.xuy", lpFilePart=0x0) returned 0x38 [0058.428] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0058.428] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\ZR1kbnnjKcwkhC4U3Z.swf" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\zr1kbnnjkcwkhc4u3z.swf"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x512cd430, ftCreationTime.dwHighDateTime=0x1d45e3f, ftLastAccessTime.dwLowDateTime=0x447e8690, ftLastAccessTime.dwHighDateTime=0x1d46252, ftLastWriteTime.dwLowDateTime=0xeab3624, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x3c84)) returned 1 [0058.428] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0058.428] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\ZR1kbnnjKcwkhC4U3Z.swf" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\zr1kbnnjkcwkhc4u3z.swf"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\ZR1kbnnjKcwkhC4U3Z.swf.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\zr1kbnnjkcwkhc4u3z.swf.xuy")) returned 1 [0058.429] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\ZyJPALqhGX4Hsp7.mkv", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\ZyJPALqhGX4Hsp7.mkv", lpFilePart=0x0) returned 0x31 [0058.429] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0058.429] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\ZyJPALqhGX4Hsp7.mkv" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\zyjpalqhgx4hsp7.mkv"), fInfoLevelId=0x0, lpFileInformation=0x2351698 | out: lpFileInformation=0x2351698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0d527d0, ftCreationTime.dwHighDateTime=0x1d45d13, ftLastAccessTime.dwLowDateTime=0xcd207a80, ftLastAccessTime.dwHighDateTime=0x1d457b2, ftLastWriteTime.dwLowDateTime=0xcd207a80, ftLastWriteTime.dwHighDateTime=0x1d457b2, nFileSizeHigh=0x0, nFileSizeLow=0xf148)) returned 1 [0058.429] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0058.429] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\ZyJPALqhGX4Hsp7.mkv", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\ZyJPALqhGX4Hsp7.mkv", lpFilePart=0x0) returned 0x31 [0058.429] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0058.429] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\ZyJPALqhGX4Hsp7.mkv" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\zyjpalqhgx4hsp7.mkv"), fInfoLevelId=0x0, lpFileInformation=0x23517c0 | out: lpFileInformation=0x23517c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0d527d0, ftCreationTime.dwHighDateTime=0x1d45d13, ftLastAccessTime.dwLowDateTime=0xcd207a80, ftLastAccessTime.dwHighDateTime=0x1d457b2, ftLastWriteTime.dwLowDateTime=0xcd207a80, ftLastWriteTime.dwHighDateTime=0x1d457b2, nFileSizeHigh=0x0, nFileSizeLow=0xf148)) returned 1 [0058.429] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0058.429] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\ZyJPALqhGX4Hsp7.mkv", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\ZyJPALqhGX4Hsp7.mkv", lpFilePart=0x0) returned 0x31 [0058.429] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0058.429] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\ZyJPALqhGX4Hsp7.mkv" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\zyjpalqhgx4hsp7.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0058.727] GetFileType (hFile=0x444) returned 0x1 [0058.727] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0058.727] GetFileType (hFile=0x444) returned 0x1 [0058.727] ReadFile (in: hFile=0x444, lpBuffer=0x2353b40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be8b8, lpOverlapped=0x0 | out: lpBuffer=0x2353b40*, lpNumberOfBytesRead=0x3be8b8*=0x1000, lpOverlapped=0x0) returned 1 [0059.186] CloseHandle (hObject=0x444) returned 1 [0059.186] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\ZyJPALqhGX4Hsp7.mkv", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\ZyJPALqhGX4Hsp7.mkv", lpFilePart=0x0) returned 0x31 [0059.186] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0059.186] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\ZyJPALqhGX4Hsp7.mkv" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\zyjpalqhgx4hsp7.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0059.186] GetFileType (hFile=0x444) returned 0x1 [0059.186] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0059.186] GetFileType (hFile=0x444) returned 0x1 [0059.186] WriteFile (in: hFile=0x444, lpBuffer=0x2159a60*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be968, lpOverlapped=0x0 | out: lpBuffer=0x2159a60*, lpNumberOfBytesWritten=0x3be968*=0x2000, lpOverlapped=0x0) returned 1 [0059.186] CloseHandle (hObject=0x444) returned 1 [0059.186] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\ZyJPALqhGX4Hsp7.mkv", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\ZyJPALqhGX4Hsp7.mkv", lpFilePart=0x0) returned 0x31 [0059.186] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\ZyJPALqhGX4Hsp7.mkv.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\ZyJPALqhGX4Hsp7.mkv.xuy", lpFilePart=0x0) returned 0x35 [0059.187] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0059.187] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\ZyJPALqhGX4Hsp7.mkv" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\zyjpalqhgx4hsp7.mkv"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0d527d0, ftCreationTime.dwHighDateTime=0x1d45d13, ftLastAccessTime.dwLowDateTime=0xcd207a80, ftLastAccessTime.dwHighDateTime=0x1d457b2, ftLastWriteTime.dwLowDateTime=0xf2022de, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xf148)) returned 1 [0059.187] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0059.187] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\ZyJPALqhGX4Hsp7.mkv" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\zyjpalqhgx4hsp7.mkv"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\ZyJPALqhGX4Hsp7.mkv.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\zyjpalqhgx4hsp7.mkv.xuy")) returned 1 [0059.187] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\_QpPI0V9w7jmp.wav", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\_QpPI0V9w7jmp.wav", lpFilePart=0x0) returned 0x2f [0059.187] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0059.187] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\_QpPI0V9w7jmp.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\_qppi0v9w7jmp.wav"), fInfoLevelId=0x0, lpFileInformation=0x21d0050 | out: lpFileInformation=0x21d0050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd20dce00, ftCreationTime.dwHighDateTime=0x1d4629b, ftLastAccessTime.dwLowDateTime=0xf7b009f0, ftLastAccessTime.dwHighDateTime=0x1d45e79, ftLastWriteTime.dwLowDateTime=0xf7b009f0, ftLastWriteTime.dwHighDateTime=0x1d45e79, nFileSizeHigh=0x0, nFileSizeLow=0x1571)) returned 1 [0059.187] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0059.187] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\_QpPI0V9w7jmp.wav", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\_QpPI0V9w7jmp.wav", lpFilePart=0x0) returned 0x2f [0059.188] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0059.188] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\_QpPI0V9w7jmp.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\_qppi0v9w7jmp.wav"), fInfoLevelId=0x0, lpFileInformation=0x21d0170 | out: lpFileInformation=0x21d0170*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd20dce00, ftCreationTime.dwHighDateTime=0x1d4629b, ftLastAccessTime.dwLowDateTime=0xf7b009f0, ftLastAccessTime.dwHighDateTime=0x1d45e79, ftLastWriteTime.dwLowDateTime=0xf7b009f0, ftLastWriteTime.dwHighDateTime=0x1d45e79, nFileSizeHigh=0x0, nFileSizeLow=0x1571)) returned 1 [0059.188] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0059.188] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\_QpPI0V9w7jmp.wav", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\_QpPI0V9w7jmp.wav", lpFilePart=0x0) returned 0x2f [0059.188] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0059.188] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\_QpPI0V9w7jmp.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\_qppi0v9w7jmp.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0059.188] GetFileType (hFile=0x444) returned 0x1 [0059.188] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0059.188] GetFileType (hFile=0x444) returned 0x1 [0059.188] ReadFile (in: hFile=0x444, lpBuffer=0x21d24e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be8b8, lpOverlapped=0x0 | out: lpBuffer=0x21d24e0*, lpNumberOfBytesRead=0x3be8b8*=0x1000, lpOverlapped=0x0) returned 1 [0059.199] CloseHandle (hObject=0x444) returned 1 [0059.199] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\_QpPI0V9w7jmp.wav", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\_QpPI0V9w7jmp.wav", lpFilePart=0x0) returned 0x2f [0059.199] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0059.199] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\_QpPI0V9w7jmp.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\_qppi0v9w7jmp.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0059.199] GetFileType (hFile=0x444) returned 0x1 [0059.199] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0059.199] GetFileType (hFile=0x444) returned 0x1 [0059.199] WriteFile (in: hFile=0x444, lpBuffer=0x21d0270*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be968, lpOverlapped=0x0 | out: lpBuffer=0x21d0270*, lpNumberOfBytesWritten=0x3be968*=0x2000, lpOverlapped=0x0) returned 1 [0059.200] CloseHandle (hObject=0x444) returned 1 [0059.200] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\_QpPI0V9w7jmp.wav", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\_QpPI0V9w7jmp.wav", lpFilePart=0x0) returned 0x2f [0059.200] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\_QpPI0V9w7jmp.wav.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\_QpPI0V9w7jmp.wav.xuy", lpFilePart=0x0) returned 0x33 [0059.200] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0059.200] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\_QpPI0V9w7jmp.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\_qppi0v9w7jmp.wav"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd20dce00, ftCreationTime.dwHighDateTime=0x1d4629b, ftLastAccessTime.dwLowDateTime=0xf7b009f0, ftLastAccessTime.dwHighDateTime=0x1d45e79, ftLastWriteTime.dwLowDateTime=0xf2285bd, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0059.200] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0059.200] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\_QpPI0V9w7jmp.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\_qppi0v9w7jmp.wav"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\_QpPI0V9w7jmp.wav.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\_qppi0v9w7jmp.wav.xuy")) returned 1 [0059.200] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0059.200] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ", nBufferLength=0x105, lpBuffer=0x3be3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ", lpFilePart=0x0) returned 0x29 [0059.200] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\", nBufferLength=0x105, lpBuffer=0x3be370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\", lpFilePart=0x0) returned 0x2a [0059.201] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\*", lpFindFileData=0x3be580 | out: lpFindFileData=0x3be580) returned 0x5d7cd0 [0059.201] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0059.201] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0059.201] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0059.201] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0059.201] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0059.201] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0059.201] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0059.202] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0059.202] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0059.202] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0059.202] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0059.202] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0059.202] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0059.202] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 0 [0059.202] FindClose (in: hFindFile=0x5d7cd0 | out: hFindFile=0x5d7cd0) returned 1 [0059.202] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0059.202] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7f0) returned 1 [0059.202] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0059.202] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ", nBufferLength=0x105, lpBuffer=0x3be3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ", lpFilePart=0x0) returned 0x29 [0059.202] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\", nBufferLength=0x105, lpBuffer=0x3be370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\", lpFilePart=0x0) returned 0x2a [0059.202] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\*", lpFindFileData=0x3be580 | out: lpFindFileData=0x3be580) returned 0x5d78b0 [0059.203] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0059.203] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0059.203] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0059.203] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0059.203] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0059.203] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0059.203] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0059.204] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0059.204] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0059.204] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0059.204] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0059.204] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0059.204] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0059.204] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 0 [0059.204] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0059.204] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0059.204] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7f0) returned 1 [0059.205] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\7qmJucxrSVDQh7.avi", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\7qmJucxrSVDQh7.avi", lpFilePart=0x0) returned 0x3c [0059.205] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0059.205] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\7qmJucxrSVDQh7.avi" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\l0mlmwcxjkz\\7qmjucxrsvdqh7.avi"), fInfoLevelId=0x0, lpFileInformation=0x2252a78 | out: lpFileInformation=0x2252a78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xddd08310, ftCreationTime.dwHighDateTime=0x1d461bd, ftLastAccessTime.dwLowDateTime=0x1d8c4ba0, ftLastAccessTime.dwHighDateTime=0x1d45ecc, ftLastWriteTime.dwLowDateTime=0x1d8c4ba0, ftLastWriteTime.dwHighDateTime=0x1d45ecc, nFileSizeHigh=0x0, nFileSizeLow=0x142ec)) returned 1 [0059.205] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0059.205] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\7qmJucxrSVDQh7.avi", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\7qmJucxrSVDQh7.avi", lpFilePart=0x0) returned 0x3c [0059.205] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0059.205] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\7qmJucxrSVDQh7.avi" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\l0mlmwcxjkz\\7qmjucxrsvdqh7.avi"), fInfoLevelId=0x0, lpFileInformation=0x2252bb8 | out: lpFileInformation=0x2252bb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xddd08310, ftCreationTime.dwHighDateTime=0x1d461bd, ftLastAccessTime.dwLowDateTime=0x1d8c4ba0, ftLastAccessTime.dwHighDateTime=0x1d45ecc, ftLastWriteTime.dwLowDateTime=0x1d8c4ba0, ftLastWriteTime.dwHighDateTime=0x1d45ecc, nFileSizeHigh=0x0, nFileSizeLow=0x142ec)) returned 1 [0059.205] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0059.205] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\7qmJucxrSVDQh7.avi", nBufferLength=0x105, lpBuffer=0x3be2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\7qmJucxrSVDQh7.avi", lpFilePart=0x0) returned 0x3c [0059.205] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0059.205] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\7qmJucxrSVDQh7.avi" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\l0mlmwcxjkz\\7qmjucxrsvdqh7.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0059.205] GetFileType (hFile=0x444) returned 0x1 [0059.205] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be730) returned 1 [0059.205] GetFileType (hFile=0x444) returned 0x1 [0059.205] ReadFile (in: hFile=0x444, lpBuffer=0x2254f68, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be848, lpOverlapped=0x0 | out: lpBuffer=0x2254f68*, lpNumberOfBytesRead=0x3be848*=0x1000, lpOverlapped=0x0) returned 1 [0059.216] CloseHandle (hObject=0x444) returned 1 [0059.216] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\7qmJucxrSVDQh7.avi", nBufferLength=0x105, lpBuffer=0x3be2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\7qmJucxrSVDQh7.avi", lpFilePart=0x0) returned 0x3c [0059.216] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0059.216] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\7qmJucxrSVDQh7.avi" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\l0mlmwcxjkz\\7qmjucxrsvdqh7.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0059.216] GetFileType (hFile=0x444) returned 0x1 [0059.216] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be730) returned 1 [0059.216] GetFileType (hFile=0x444) returned 0x1 [0059.216] WriteFile (in: hFile=0x444, lpBuffer=0x2252cd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be8f8, lpOverlapped=0x0 | out: lpBuffer=0x2252cd8*, lpNumberOfBytesWritten=0x3be8f8*=0x2000, lpOverlapped=0x0) returned 1 [0059.216] CloseHandle (hObject=0x444) returned 1 [0059.216] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\7qmJucxrSVDQh7.avi", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\7qmJucxrSVDQh7.avi", lpFilePart=0x0) returned 0x3c [0059.217] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\7qmJucxrSVDQh7.avi.xuy", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\7qmJucxrSVDQh7.avi.xuy", lpFilePart=0x0) returned 0x40 [0059.217] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0059.217] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\7qmJucxrSVDQh7.avi" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\l0mlmwcxjkz\\7qmjucxrsvdqh7.avi"), fInfoLevelId=0x0, lpFileInformation=0x3be910 | out: lpFileInformation=0x3be910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xddd08310, ftCreationTime.dwHighDateTime=0x1d461bd, ftLastAccessTime.dwLowDateTime=0x1d8c4ba0, ftLastAccessTime.dwHighDateTime=0x1d45ecc, ftLastWriteTime.dwLowDateTime=0xf24e8be, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x142ec)) returned 1 [0059.217] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7f0) returned 1 [0059.217] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\7qmJucxrSVDQh7.avi" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\l0mlmwcxjkz\\7qmjucxrsvdqh7.avi"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\7qmJucxrSVDQh7.avi.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\l0mlmwcxjkz\\7qmjucxrsvdqh7.avi.xuy")) returned 1 [0059.217] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\h La5PakbEMKVp.bmp", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\h La5PakbEMKVp.bmp", lpFilePart=0x0) returned 0x3c [0059.217] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0059.217] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\h La5PakbEMKVp.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\l0mlmwcxjkz\\h la5pakbemkvp.bmp"), fInfoLevelId=0x0, lpFileInformation=0x22d12c8 | out: lpFileInformation=0x22d12c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8a2d3e0, ftCreationTime.dwHighDateTime=0x1d45786, ftLastAccessTime.dwLowDateTime=0xde0e3150, ftLastAccessTime.dwHighDateTime=0x1d45c78, ftLastWriteTime.dwLowDateTime=0xde0e3150, ftLastWriteTime.dwHighDateTime=0x1d45c78, nFileSizeHigh=0x0, nFileSizeLow=0xe340)) returned 1 [0059.217] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0059.217] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\h La5PakbEMKVp.bmp", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\h La5PakbEMKVp.bmp", lpFilePart=0x0) returned 0x3c [0059.217] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0059.218] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\h La5PakbEMKVp.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\l0mlmwcxjkz\\h la5pakbemkvp.bmp"), fInfoLevelId=0x0, lpFileInformation=0x22d1408 | out: lpFileInformation=0x22d1408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8a2d3e0, ftCreationTime.dwHighDateTime=0x1d45786, ftLastAccessTime.dwLowDateTime=0xde0e3150, ftLastAccessTime.dwHighDateTime=0x1d45c78, ftLastWriteTime.dwLowDateTime=0xde0e3150, ftLastWriteTime.dwHighDateTime=0x1d45c78, nFileSizeHigh=0x0, nFileSizeLow=0xe340)) returned 1 [0059.218] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0059.218] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\h La5PakbEMKVp.bmp", nBufferLength=0x105, lpBuffer=0x3be2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\h La5PakbEMKVp.bmp", lpFilePart=0x0) returned 0x3c [0059.218] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0059.218] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\h La5PakbEMKVp.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\l0mlmwcxjkz\\h la5pakbemkvp.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0059.218] GetFileType (hFile=0x444) returned 0x1 [0059.218] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be730) returned 1 [0059.218] GetFileType (hFile=0x444) returned 0x1 [0059.218] ReadFile (in: hFile=0x444, lpBuffer=0x22d37b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be848, lpOverlapped=0x0 | out: lpBuffer=0x22d37b8*, lpNumberOfBytesRead=0x3be848*=0x1000, lpOverlapped=0x0) returned 1 [0059.307] CloseHandle (hObject=0x444) returned 1 [0059.307] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\h La5PakbEMKVp.bmp", nBufferLength=0x105, lpBuffer=0x3be2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\h La5PakbEMKVp.bmp", lpFilePart=0x0) returned 0x3c [0059.307] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0059.307] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\h La5PakbEMKVp.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\l0mlmwcxjkz\\h la5pakbemkvp.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0059.308] GetFileType (hFile=0x444) returned 0x1 [0059.308] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be730) returned 1 [0059.308] GetFileType (hFile=0x444) returned 0x1 [0059.308] WriteFile (in: hFile=0x444, lpBuffer=0x22d1528*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be8f8, lpOverlapped=0x0 | out: lpBuffer=0x22d1528*, lpNumberOfBytesWritten=0x3be8f8*=0x2000, lpOverlapped=0x0) returned 1 [0059.308] CloseHandle (hObject=0x444) returned 1 [0059.308] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\h La5PakbEMKVp.bmp", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\h La5PakbEMKVp.bmp", lpFilePart=0x0) returned 0x3c [0059.308] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\h La5PakbEMKVp.bmp.xuy", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\h La5PakbEMKVp.bmp.xuy", lpFilePart=0x0) returned 0x40 [0059.308] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0059.308] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\h La5PakbEMKVp.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\l0mlmwcxjkz\\h la5pakbemkvp.bmp"), fInfoLevelId=0x0, lpFileInformation=0x3be910 | out: lpFileInformation=0x3be910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8a2d3e0, ftCreationTime.dwHighDateTime=0x1d45786, ftLastAccessTime.dwLowDateTime=0xde0e3150, ftLastAccessTime.dwHighDateTime=0x1d45c78, ftLastWriteTime.dwLowDateTime=0xf31c88b, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xe340)) returned 1 [0059.308] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7f0) returned 1 [0059.308] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\h La5PakbEMKVp.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\l0mlmwcxjkz\\h la5pakbemkvp.bmp"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\h La5PakbEMKVp.bmp.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\l0mlmwcxjkz\\h la5pakbemkvp.bmp.xuy")) returned 1 [0059.309] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\IJE5Cqpv5XA2m3m.pdf", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\IJE5Cqpv5XA2m3m.pdf", lpFilePart=0x0) returned 0x3d [0059.309] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0059.309] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\IJE5Cqpv5XA2m3m.pdf" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\l0mlmwcxjkz\\ije5cqpv5xa2m3m.pdf"), fInfoLevelId=0x0, lpFileInformation=0x234fb18 | out: lpFileInformation=0x234fb18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7288c250, ftCreationTime.dwHighDateTime=0x1d45deb, ftLastAccessTime.dwLowDateTime=0xe2313530, ftLastAccessTime.dwHighDateTime=0x1d457e5, ftLastWriteTime.dwLowDateTime=0xe2313530, ftLastWriteTime.dwHighDateTime=0x1d457e5, nFileSizeHigh=0x0, nFileSizeLow=0x17ae3)) returned 1 [0059.309] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0059.309] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\IJE5Cqpv5XA2m3m.pdf", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\IJE5Cqpv5XA2m3m.pdf", lpFilePart=0x0) returned 0x3d [0059.309] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0059.309] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\IJE5Cqpv5XA2m3m.pdf" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\l0mlmwcxjkz\\ije5cqpv5xa2m3m.pdf"), fInfoLevelId=0x0, lpFileInformation=0x234fc58 | out: lpFileInformation=0x234fc58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7288c250, ftCreationTime.dwHighDateTime=0x1d45deb, ftLastAccessTime.dwLowDateTime=0xe2313530, ftLastAccessTime.dwHighDateTime=0x1d457e5, ftLastWriteTime.dwLowDateTime=0xe2313530, ftLastWriteTime.dwHighDateTime=0x1d457e5, nFileSizeHigh=0x0, nFileSizeLow=0x17ae3)) returned 1 [0059.309] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0059.309] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\IJE5Cqpv5XA2m3m.pdf", nBufferLength=0x105, lpBuffer=0x3be2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\IJE5Cqpv5XA2m3m.pdf", lpFilePart=0x0) returned 0x3d [0059.309] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0059.309] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\IJE5Cqpv5XA2m3m.pdf" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\l0mlmwcxjkz\\ije5cqpv5xa2m3m.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0059.310] GetFileType (hFile=0x444) returned 0x1 [0059.310] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be730) returned 1 [0059.310] GetFileType (hFile=0x444) returned 0x1 [0059.310] ReadFile (in: hFile=0x444, lpBuffer=0x2352008, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be848, lpOverlapped=0x0 | out: lpBuffer=0x2352008*, lpNumberOfBytesRead=0x3be848*=0x1000, lpOverlapped=0x0) returned 1 [0059.382] CloseHandle (hObject=0x444) returned 1 [0059.382] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\IJE5Cqpv5XA2m3m.pdf", nBufferLength=0x105, lpBuffer=0x3be2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\IJE5Cqpv5XA2m3m.pdf", lpFilePart=0x0) returned 0x3d [0059.382] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0059.382] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\IJE5Cqpv5XA2m3m.pdf" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\l0mlmwcxjkz\\ije5cqpv5xa2m3m.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0059.382] GetFileType (hFile=0x444) returned 0x1 [0059.382] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be730) returned 1 [0059.382] GetFileType (hFile=0x444) returned 0x1 [0059.382] WriteFile (in: hFile=0x444, lpBuffer=0x215a0e8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be8f8, lpOverlapped=0x0 | out: lpBuffer=0x215a0e8*, lpNumberOfBytesWritten=0x3be8f8*=0x2000, lpOverlapped=0x0) returned 1 [0059.383] CloseHandle (hObject=0x444) returned 1 [0059.383] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\IJE5Cqpv5XA2m3m.pdf", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\IJE5Cqpv5XA2m3m.pdf", lpFilePart=0x0) returned 0x3d [0059.383] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\IJE5Cqpv5XA2m3m.pdf.xuy", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\IJE5Cqpv5XA2m3m.pdf.xuy", lpFilePart=0x0) returned 0x41 [0059.383] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0059.383] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\IJE5Cqpv5XA2m3m.pdf" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\l0mlmwcxjkz\\ije5cqpv5xa2m3m.pdf"), fInfoLevelId=0x0, lpFileInformation=0x3be910 | out: lpFileInformation=0x3be910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7288c250, ftCreationTime.dwHighDateTime=0x1d45deb, ftLastAccessTime.dwLowDateTime=0xe2313530, ftLastAccessTime.dwHighDateTime=0x1d457e5, ftLastWriteTime.dwLowDateTime=0xf3db48b, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x17ae3)) returned 1 [0059.383] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7f0) returned 1 [0059.383] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\IJE5Cqpv5XA2m3m.pdf" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\l0mlmwcxjkz\\ije5cqpv5xa2m3m.pdf"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\IJE5Cqpv5XA2m3m.pdf.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\l0mlmwcxjkz\\ije5cqpv5xa2m3m.pdf.xuy")) returned 1 [0059.384] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\K9_BFKsm6gjrGpCU.m4a", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\K9_BFKsm6gjrGpCU.m4a", lpFilePart=0x0) returned 0x3e [0059.384] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0059.384] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\K9_BFKsm6gjrGpCU.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\l0mlmwcxjkz\\k9_bfksm6gjrgpcu.m4a"), fInfoLevelId=0x0, lpFileInformation=0x21ce9d8 | out: lpFileInformation=0x21ce9d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ad155f0, ftCreationTime.dwHighDateTime=0x1d4663b, ftLastAccessTime.dwLowDateTime=0x7881d2f0, ftLastAccessTime.dwHighDateTime=0x1d461a1, ftLastWriteTime.dwLowDateTime=0x7881d2f0, ftLastWriteTime.dwHighDateTime=0x1d461a1, nFileSizeHigh=0x0, nFileSizeLow=0x17d39)) returned 1 [0059.384] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0059.384] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\K9_BFKsm6gjrGpCU.m4a", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\K9_BFKsm6gjrGpCU.m4a", lpFilePart=0x0) returned 0x3e [0059.384] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0059.384] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\K9_BFKsm6gjrGpCU.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\l0mlmwcxjkz\\k9_bfksm6gjrgpcu.m4a"), fInfoLevelId=0x0, lpFileInformation=0x21ceb20 | out: lpFileInformation=0x21ceb20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ad155f0, ftCreationTime.dwHighDateTime=0x1d4663b, ftLastAccessTime.dwLowDateTime=0x7881d2f0, ftLastAccessTime.dwHighDateTime=0x1d461a1, ftLastWriteTime.dwLowDateTime=0x7881d2f0, ftLastWriteTime.dwHighDateTime=0x1d461a1, nFileSizeHigh=0x0, nFileSizeLow=0x17d39)) returned 1 [0059.384] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0059.384] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\K9_BFKsm6gjrGpCU.m4a", nBufferLength=0x105, lpBuffer=0x3be2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\K9_BFKsm6gjrGpCU.m4a", lpFilePart=0x0) returned 0x3e [0059.384] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0059.384] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\K9_BFKsm6gjrGpCU.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\l0mlmwcxjkz\\k9_bfksm6gjrgpcu.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0059.384] GetFileType (hFile=0x444) returned 0x1 [0059.384] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be730) returned 1 [0059.384] GetFileType (hFile=0x444) returned 0x1 [0059.385] ReadFile (in: hFile=0x444, lpBuffer=0x21d0ee0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be848, lpOverlapped=0x0 | out: lpBuffer=0x21d0ee0*, lpNumberOfBytesRead=0x3be848*=0x1000, lpOverlapped=0x0) returned 1 [0059.395] CloseHandle (hObject=0x444) returned 1 [0059.395] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\K9_BFKsm6gjrGpCU.m4a", nBufferLength=0x105, lpBuffer=0x3be2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\K9_BFKsm6gjrGpCU.m4a", lpFilePart=0x0) returned 0x3e [0059.395] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0059.395] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\K9_BFKsm6gjrGpCU.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\l0mlmwcxjkz\\k9_bfksm6gjrgpcu.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0059.396] GetFileType (hFile=0x444) returned 0x1 [0059.396] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be730) returned 1 [0059.396] GetFileType (hFile=0x444) returned 0x1 [0059.396] WriteFile (in: hFile=0x444, lpBuffer=0x21cec48*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be8f8, lpOverlapped=0x0 | out: lpBuffer=0x21cec48*, lpNumberOfBytesWritten=0x3be8f8*=0x2000, lpOverlapped=0x0) returned 1 [0059.396] CloseHandle (hObject=0x444) returned 1 [0059.396] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\K9_BFKsm6gjrGpCU.m4a", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\K9_BFKsm6gjrGpCU.m4a", lpFilePart=0x0) returned 0x3e [0059.396] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\K9_BFKsm6gjrGpCU.m4a.xuy", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\K9_BFKsm6gjrGpCU.m4a.xuy", lpFilePart=0x0) returned 0x42 [0059.396] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0059.396] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\K9_BFKsm6gjrGpCU.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\l0mlmwcxjkz\\k9_bfksm6gjrgpcu.m4a"), fInfoLevelId=0x0, lpFileInformation=0x3be910 | out: lpFileInformation=0x3be910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ad155f0, ftCreationTime.dwHighDateTime=0x1d4663b, ftLastAccessTime.dwLowDateTime=0x7881d2f0, ftLastAccessTime.dwHighDateTime=0x1d461a1, ftLastWriteTime.dwLowDateTime=0xf40179d, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x17d39)) returned 1 [0059.396] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7f0) returned 1 [0059.396] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\K9_BFKsm6gjrGpCU.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\l0mlmwcxjkz\\k9_bfksm6gjrgpcu.m4a"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\K9_BFKsm6gjrGpCU.m4a.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\l0mlmwcxjkz\\k9_bfksm6gjrgpcu.m4a.xuy")) returned 1 [0059.397] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\mqeKy-XpKEgFY8AjHJ.ots", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\mqeKy-XpKEgFY8AjHJ.ots", lpFilePart=0x0) returned 0x40 [0059.397] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0059.397] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\mqeKy-XpKEgFY8AjHJ.ots" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\l0mlmwcxjkz\\mqeky-xpkegfy8ajhj.ots"), fInfoLevelId=0x0, lpFileInformation=0x224d248 | out: lpFileInformation=0x224d248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39d767c0, ftCreationTime.dwHighDateTime=0x1d460cc, ftLastAccessTime.dwLowDateTime=0x3c9cfe70, ftLastAccessTime.dwHighDateTime=0x1d45f6e, ftLastWriteTime.dwLowDateTime=0x3c9cfe70, ftLastWriteTime.dwHighDateTime=0x1d45f6e, nFileSizeHigh=0x0, nFileSizeLow=0xc6da)) returned 1 [0059.397] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0059.397] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\mqeKy-XpKEgFY8AjHJ.ots", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\mqeKy-XpKEgFY8AjHJ.ots", lpFilePart=0x0) returned 0x40 [0059.397] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0059.397] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\mqeKy-XpKEgFY8AjHJ.ots" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\l0mlmwcxjkz\\mqeky-xpkegfy8ajhj.ots"), fInfoLevelId=0x0, lpFileInformation=0x224d398 | out: lpFileInformation=0x224d398*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39d767c0, ftCreationTime.dwHighDateTime=0x1d460cc, ftLastAccessTime.dwLowDateTime=0x3c9cfe70, ftLastAccessTime.dwHighDateTime=0x1d45f6e, ftLastWriteTime.dwLowDateTime=0x3c9cfe70, ftLastWriteTime.dwHighDateTime=0x1d45f6e, nFileSizeHigh=0x0, nFileSizeLow=0xc6da)) returned 1 [0059.397] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0059.397] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\mqeKy-XpKEgFY8AjHJ.ots", nBufferLength=0x105, lpBuffer=0x3be2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\mqeKy-XpKEgFY8AjHJ.ots", lpFilePart=0x0) returned 0x40 [0059.397] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0059.397] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\mqeKy-XpKEgFY8AjHJ.ots" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\l0mlmwcxjkz\\mqeky-xpkegfy8ajhj.ots"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0059.397] GetFileType (hFile=0x444) returned 0x1 [0059.398] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be730) returned 1 [0059.398] GetFileType (hFile=0x444) returned 0x1 [0059.398] ReadFile (in: hFile=0x444, lpBuffer=0x224f768, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be848, lpOverlapped=0x0 | out: lpBuffer=0x224f768*, lpNumberOfBytesRead=0x3be848*=0x1000, lpOverlapped=0x0) returned 1 [0059.410] CloseHandle (hObject=0x444) returned 1 [0059.411] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\mqeKy-XpKEgFY8AjHJ.ots", nBufferLength=0x105, lpBuffer=0x3be2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\mqeKy-XpKEgFY8AjHJ.ots", lpFilePart=0x0) returned 0x40 [0059.411] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0059.411] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\mqeKy-XpKEgFY8AjHJ.ots" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\l0mlmwcxjkz\\mqeky-xpkegfy8ajhj.ots"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0059.411] GetFileType (hFile=0x444) returned 0x1 [0059.411] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be730) returned 1 [0059.411] GetFileType (hFile=0x444) returned 0x1 [0059.411] WriteFile (in: hFile=0x444, lpBuffer=0x224d4c8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be8f8, lpOverlapped=0x0 | out: lpBuffer=0x224d4c8*, lpNumberOfBytesWritten=0x3be8f8*=0x2000, lpOverlapped=0x0) returned 1 [0059.411] CloseHandle (hObject=0x444) returned 1 [0059.411] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\mqeKy-XpKEgFY8AjHJ.ots", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\mqeKy-XpKEgFY8AjHJ.ots", lpFilePart=0x0) returned 0x40 [0059.411] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\mqeKy-XpKEgFY8AjHJ.ots.xuy", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\mqeKy-XpKEgFY8AjHJ.ots.xuy", lpFilePart=0x0) returned 0x44 [0059.411] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0059.411] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\mqeKy-XpKEgFY8AjHJ.ots" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\l0mlmwcxjkz\\mqeky-xpkegfy8ajhj.ots"), fInfoLevelId=0x0, lpFileInformation=0x3be910 | out: lpFileInformation=0x3be910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39d767c0, ftCreationTime.dwHighDateTime=0x1d460cc, ftLastAccessTime.dwLowDateTime=0x3c9cfe70, ftLastAccessTime.dwHighDateTime=0x1d45f6e, ftLastWriteTime.dwLowDateTime=0xf427c68, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xc6da)) returned 1 [0059.412] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7f0) returned 1 [0059.412] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\mqeKy-XpKEgFY8AjHJ.ots" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\l0mlmwcxjkz\\mqeky-xpkegfy8ajhj.ots"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\mqeKy-XpKEgFY8AjHJ.ots.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\l0mlmwcxjkz\\mqeky-xpkegfy8ajhj.ots.xuy")) returned 1 [0059.412] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\mSFbzT.wav", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\mSFbzT.wav", lpFilePart=0x0) returned 0x34 [0059.412] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0059.412] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\mSFbzT.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\l0mlmwcxjkz\\msfbzt.wav"), fInfoLevelId=0x0, lpFileInformation=0x22cbaf0 | out: lpFileInformation=0x22cbaf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf8930b30, ftCreationTime.dwHighDateTime=0x1d465b1, ftLastAccessTime.dwLowDateTime=0x28d0a5b0, ftLastAccessTime.dwHighDateTime=0x1d46390, ftLastWriteTime.dwLowDateTime=0x28d0a5b0, ftLastWriteTime.dwHighDateTime=0x1d46390, nFileSizeHigh=0x0, nFileSizeLow=0x12a38)) returned 1 [0059.413] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0059.413] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\mSFbzT.wav", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\mSFbzT.wav", lpFilePart=0x0) returned 0x34 [0059.413] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0059.413] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\mSFbzT.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\l0mlmwcxjkz\\msfbzt.wav"), fInfoLevelId=0x0, lpFileInformation=0x22cbc10 | out: lpFileInformation=0x22cbc10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf8930b30, ftCreationTime.dwHighDateTime=0x1d465b1, ftLastAccessTime.dwLowDateTime=0x28d0a5b0, ftLastAccessTime.dwHighDateTime=0x1d46390, ftLastWriteTime.dwLowDateTime=0x28d0a5b0, ftLastWriteTime.dwHighDateTime=0x1d46390, nFileSizeHigh=0x0, nFileSizeLow=0x12a38)) returned 1 [0059.413] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0059.413] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\mSFbzT.wav", nBufferLength=0x105, lpBuffer=0x3be2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\mSFbzT.wav", lpFilePart=0x0) returned 0x34 [0059.413] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0059.413] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\mSFbzT.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\l0mlmwcxjkz\\msfbzt.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0059.413] GetFileType (hFile=0x444) returned 0x1 [0059.413] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be730) returned 1 [0059.413] GetFileType (hFile=0x444) returned 0x1 [0059.413] ReadFile (in: hFile=0x444, lpBuffer=0x22cdf80, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be848, lpOverlapped=0x0 | out: lpBuffer=0x22cdf80*, lpNumberOfBytesRead=0x3be848*=0x1000, lpOverlapped=0x0) returned 1 [0059.431] CloseHandle (hObject=0x444) returned 1 [0059.431] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\mSFbzT.wav", nBufferLength=0x105, lpBuffer=0x3be2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\mSFbzT.wav", lpFilePart=0x0) returned 0x34 [0059.431] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0059.431] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\mSFbzT.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\l0mlmwcxjkz\\msfbzt.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0059.431] GetFileType (hFile=0x444) returned 0x1 [0059.431] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be730) returned 1 [0059.431] GetFileType (hFile=0x444) returned 0x1 [0059.431] WriteFile (in: hFile=0x444, lpBuffer=0x22cbd10*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be8f8, lpOverlapped=0x0 | out: lpBuffer=0x22cbd10*, lpNumberOfBytesWritten=0x3be8f8*=0x2000, lpOverlapped=0x0) returned 1 [0059.431] CloseHandle (hObject=0x444) returned 1 [0059.431] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\mSFbzT.wav", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\mSFbzT.wav", lpFilePart=0x0) returned 0x34 [0059.431] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\mSFbzT.wav.xuy", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\mSFbzT.wav.xuy", lpFilePart=0x0) returned 0x38 [0059.432] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0059.432] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\mSFbzT.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\l0mlmwcxjkz\\msfbzt.wav"), fInfoLevelId=0x0, lpFileInformation=0x3be910 | out: lpFileInformation=0x3be910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf8930b30, ftCreationTime.dwHighDateTime=0x1d465b1, ftLastAccessTime.dwLowDateTime=0x28d0a5b0, ftLastAccessTime.dwHighDateTime=0x1d46390, ftLastWriteTime.dwLowDateTime=0xf44dbff, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x12a38)) returned 1 [0059.432] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7f0) returned 1 [0059.432] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\mSFbzT.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\l0mlmwcxjkz\\msfbzt.wav"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\mSFbzT.wav.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\l0mlmwcxjkz\\msfbzt.wav.xuy")) returned 1 [0059.432] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\pLIymR0ZfD9imcx8V2H.ppt", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\pLIymR0ZfD9imcx8V2H.ppt", lpFilePart=0x0) returned 0x41 [0059.432] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0059.432] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\pLIymR0ZfD9imcx8V2H.ppt" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\l0mlmwcxjkz\\pliymr0zfd9imcx8v2h.ppt"), fInfoLevelId=0x0, lpFileInformation=0x234a290 | out: lpFileInformation=0x234a290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x606d8200, ftCreationTime.dwHighDateTime=0x1d45967, ftLastAccessTime.dwLowDateTime=0xac07d1f0, ftLastAccessTime.dwHighDateTime=0x1d46201, ftLastWriteTime.dwLowDateTime=0xac07d1f0, ftLastWriteTime.dwHighDateTime=0x1d46201, nFileSizeHigh=0x0, nFileSizeLow=0x82fd)) returned 1 [0059.432] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0059.432] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\pLIymR0ZfD9imcx8V2H.ppt", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\pLIymR0ZfD9imcx8V2H.ppt", lpFilePart=0x0) returned 0x41 [0059.433] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0059.433] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\pLIymR0ZfD9imcx8V2H.ppt" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\l0mlmwcxjkz\\pliymr0zfd9imcx8v2h.ppt"), fInfoLevelId=0x0, lpFileInformation=0x234a3e0 | out: lpFileInformation=0x234a3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x606d8200, ftCreationTime.dwHighDateTime=0x1d45967, ftLastAccessTime.dwLowDateTime=0xac07d1f0, ftLastAccessTime.dwHighDateTime=0x1d46201, ftLastWriteTime.dwLowDateTime=0xac07d1f0, ftLastWriteTime.dwHighDateTime=0x1d46201, nFileSizeHigh=0x0, nFileSizeLow=0x82fd)) returned 1 [0059.433] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0059.433] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\pLIymR0ZfD9imcx8V2H.ppt", nBufferLength=0x105, lpBuffer=0x3be2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\pLIymR0ZfD9imcx8V2H.ppt", lpFilePart=0x0) returned 0x41 [0059.433] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0059.433] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\pLIymR0ZfD9imcx8V2H.ppt" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\l0mlmwcxjkz\\pliymr0zfd9imcx8v2h.ppt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0059.433] GetFileType (hFile=0x444) returned 0x1 [0059.433] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be730) returned 1 [0059.433] GetFileType (hFile=0x444) returned 0x1 [0059.433] ReadFile (in: hFile=0x444, lpBuffer=0x234c7b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be848, lpOverlapped=0x0 | out: lpBuffer=0x234c7b0*, lpNumberOfBytesRead=0x3be848*=0x1000, lpOverlapped=0x0) returned 1 [0059.546] CloseHandle (hObject=0x444) returned 1 [0059.546] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\pLIymR0ZfD9imcx8V2H.ppt", nBufferLength=0x105, lpBuffer=0x3be2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\pLIymR0ZfD9imcx8V2H.ppt", lpFilePart=0x0) returned 0x41 [0059.546] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0059.546] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\pLIymR0ZfD9imcx8V2H.ppt" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\l0mlmwcxjkz\\pliymr0zfd9imcx8v2h.ppt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0059.546] GetFileType (hFile=0x444) returned 0x1 [0059.546] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be730) returned 1 [0059.546] GetFileType (hFile=0x444) returned 0x1 [0059.546] WriteFile (in: hFile=0x444, lpBuffer=0x215a0d0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be8f8, lpOverlapped=0x0 | out: lpBuffer=0x215a0d0*, lpNumberOfBytesWritten=0x3be8f8*=0x2000, lpOverlapped=0x0) returned 1 [0059.547] CloseHandle (hObject=0x444) returned 1 [0059.547] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\pLIymR0ZfD9imcx8V2H.ppt", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\pLIymR0ZfD9imcx8V2H.ppt", lpFilePart=0x0) returned 0x41 [0059.547] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\pLIymR0ZfD9imcx8V2H.ppt.xuy", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\pLIymR0ZfD9imcx8V2H.ppt.xuy", lpFilePart=0x0) returned 0x45 [0059.547] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0059.547] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\pLIymR0ZfD9imcx8V2H.ppt" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\l0mlmwcxjkz\\pliymr0zfd9imcx8v2h.ppt"), fInfoLevelId=0x0, lpFileInformation=0x3be910 | out: lpFileInformation=0x3be910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x606d8200, ftCreationTime.dwHighDateTime=0x1d45967, ftLastAccessTime.dwLowDateTime=0xac07d1f0, ftLastAccessTime.dwHighDateTime=0x1d46201, ftLastWriteTime.dwLowDateTime=0xf57f0f8, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x82fd)) returned 1 [0059.547] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7f0) returned 1 [0059.547] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\pLIymR0ZfD9imcx8V2H.ppt" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\l0mlmwcxjkz\\pliymr0zfd9imcx8v2h.ppt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\pLIymR0ZfD9imcx8V2H.ppt.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\l0mlmwcxjkz\\pliymr0zfd9imcx8v2h.ppt.xuy")) returned 1 [0059.548] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\PRFX.bmp", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\PRFX.bmp", lpFilePart=0x0) returned 0x32 [0059.548] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0059.548] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\PRFX.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\l0mlmwcxjkz\\prfx.bmp"), fInfoLevelId=0x0, lpFileInformation=0x21c8b08 | out: lpFileInformation=0x21c8b08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa35267b0, ftCreationTime.dwHighDateTime=0x1d4560c, ftLastAccessTime.dwLowDateTime=0xc2a13bd0, ftLastAccessTime.dwHighDateTime=0x1d457e9, ftLastWriteTime.dwLowDateTime=0xc2a13bd0, ftLastWriteTime.dwHighDateTime=0x1d457e9, nFileSizeHigh=0x0, nFileSizeLow=0x11ff)) returned 1 [0059.548] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0059.548] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\PRFX.bmp", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\PRFX.bmp", lpFilePart=0x0) returned 0x32 [0059.548] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0059.548] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\PRFX.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\l0mlmwcxjkz\\prfx.bmp"), fInfoLevelId=0x0, lpFileInformation=0x21c8c20 | out: lpFileInformation=0x21c8c20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa35267b0, ftCreationTime.dwHighDateTime=0x1d4560c, ftLastAccessTime.dwLowDateTime=0xc2a13bd0, ftLastAccessTime.dwHighDateTime=0x1d457e9, ftLastWriteTime.dwLowDateTime=0xc2a13bd0, ftLastWriteTime.dwHighDateTime=0x1d457e9, nFileSizeHigh=0x0, nFileSizeLow=0x11ff)) returned 1 [0059.548] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0059.548] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\PRFX.bmp", nBufferLength=0x105, lpBuffer=0x3be2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\PRFX.bmp", lpFilePart=0x0) returned 0x32 [0059.548] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0059.548] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\PRFX.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\l0mlmwcxjkz\\prfx.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0059.548] GetFileType (hFile=0x444) returned 0x1 [0059.548] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be730) returned 1 [0059.548] GetFileType (hFile=0x444) returned 0x1 [0059.548] ReadFile (in: hFile=0x444, lpBuffer=0x21caf80, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be848, lpOverlapped=0x0 | out: lpBuffer=0x21caf80*, lpNumberOfBytesRead=0x3be848*=0x1000, lpOverlapped=0x0) returned 1 [0059.559] CloseHandle (hObject=0x444) returned 1 [0059.559] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\PRFX.bmp", nBufferLength=0x105, lpBuffer=0x3be2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\PRFX.bmp", lpFilePart=0x0) returned 0x32 [0059.559] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0059.559] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\PRFX.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\l0mlmwcxjkz\\prfx.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0059.559] GetFileType (hFile=0x444) returned 0x1 [0059.559] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be730) returned 1 [0059.559] GetFileType (hFile=0x444) returned 0x1 [0059.559] WriteFile (in: hFile=0x444, lpBuffer=0x21c8d18*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be8f8, lpOverlapped=0x0 | out: lpBuffer=0x21c8d18*, lpNumberOfBytesWritten=0x3be8f8*=0x2000, lpOverlapped=0x0) returned 1 [0059.559] CloseHandle (hObject=0x444) returned 1 [0059.560] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\PRFX.bmp", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\PRFX.bmp", lpFilePart=0x0) returned 0x32 [0059.560] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\PRFX.bmp.xuy", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\PRFX.bmp.xuy", lpFilePart=0x0) returned 0x36 [0059.560] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0059.560] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\PRFX.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\l0mlmwcxjkz\\prfx.bmp"), fInfoLevelId=0x0, lpFileInformation=0x3be910 | out: lpFileInformation=0x3be910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa35267b0, ftCreationTime.dwHighDateTime=0x1d4560c, ftLastAccessTime.dwLowDateTime=0xc2a13bd0, ftLastAccessTime.dwHighDateTime=0x1d457e9, ftLastWriteTime.dwLowDateTime=0xf57f0f8, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0059.564] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7f0) returned 1 [0059.564] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\PRFX.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\l0mlmwcxjkz\\prfx.bmp"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\PRFX.bmp.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\l0mlmwcxjkz\\prfx.bmp.xuy")) returned 1 [0059.565] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\rGxJ8R0.avi", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\rGxJ8R0.avi", lpFilePart=0x0) returned 0x35 [0059.565] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0059.565] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\rGxJ8R0.avi" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\l0mlmwcxjkz\\rgxj8r0.avi"), fInfoLevelId=0x0, lpFileInformation=0x2247270 | out: lpFileInformation=0x2247270*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef1ced20, ftCreationTime.dwHighDateTime=0x1d45808, ftLastAccessTime.dwLowDateTime=0x4d8d9d20, ftLastAccessTime.dwHighDateTime=0x1d456db, ftLastWriteTime.dwLowDateTime=0x4d8d9d20, ftLastWriteTime.dwHighDateTime=0x1d456db, nFileSizeHigh=0x0, nFileSizeLow=0x5d73)) returned 1 [0059.565] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0059.565] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\rGxJ8R0.avi", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\rGxJ8R0.avi", lpFilePart=0x0) returned 0x35 [0059.565] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0059.565] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\rGxJ8R0.avi" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\l0mlmwcxjkz\\rgxj8r0.avi"), fInfoLevelId=0x0, lpFileInformation=0x2247390 | out: lpFileInformation=0x2247390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef1ced20, ftCreationTime.dwHighDateTime=0x1d45808, ftLastAccessTime.dwLowDateTime=0x4d8d9d20, ftLastAccessTime.dwHighDateTime=0x1d456db, ftLastWriteTime.dwLowDateTime=0x4d8d9d20, ftLastWriteTime.dwHighDateTime=0x1d456db, nFileSizeHigh=0x0, nFileSizeLow=0x5d73)) returned 1 [0059.565] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0059.565] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\rGxJ8R0.avi", nBufferLength=0x105, lpBuffer=0x3be2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\rGxJ8R0.avi", lpFilePart=0x0) returned 0x35 [0059.565] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0059.565] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\rGxJ8R0.avi" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\l0mlmwcxjkz\\rgxj8r0.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0059.566] GetFileType (hFile=0x444) returned 0x1 [0059.566] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be730) returned 1 [0059.566] GetFileType (hFile=0x444) returned 0x1 [0059.566] ReadFile (in: hFile=0x444, lpBuffer=0x2249700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be848, lpOverlapped=0x0 | out: lpBuffer=0x2249700*, lpNumberOfBytesRead=0x3be848*=0x1000, lpOverlapped=0x0) returned 1 [0059.598] CloseHandle (hObject=0x444) returned 1 [0059.598] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\rGxJ8R0.avi", nBufferLength=0x105, lpBuffer=0x3be2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\rGxJ8R0.avi", lpFilePart=0x0) returned 0x35 [0059.598] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0059.598] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\rGxJ8R0.avi" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\l0mlmwcxjkz\\rgxj8r0.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0059.598] GetFileType (hFile=0x444) returned 0x1 [0059.598] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be730) returned 1 [0059.598] GetFileType (hFile=0x444) returned 0x1 [0059.599] WriteFile (in: hFile=0x444, lpBuffer=0x2247490*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be8f8, lpOverlapped=0x0 | out: lpBuffer=0x2247490*, lpNumberOfBytesWritten=0x3be8f8*=0x2000, lpOverlapped=0x0) returned 1 [0059.599] CloseHandle (hObject=0x444) returned 1 [0059.599] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\rGxJ8R0.avi", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\rGxJ8R0.avi", lpFilePart=0x0) returned 0x35 [0059.599] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\rGxJ8R0.avi.xuy", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\rGxJ8R0.avi.xuy", lpFilePart=0x0) returned 0x39 [0059.599] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0059.599] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\rGxJ8R0.avi" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\l0mlmwcxjkz\\rgxj8r0.avi"), fInfoLevelId=0x0, lpFileInformation=0x3be910 | out: lpFileInformation=0x3be910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef1ced20, ftCreationTime.dwHighDateTime=0x1d45808, ftLastAccessTime.dwLowDateTime=0x4d8d9d20, ftLastAccessTime.dwHighDateTime=0x1d456db, ftLastWriteTime.dwLowDateTime=0xf5f13b5, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x5d73)) returned 1 [0059.599] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7f0) returned 1 [0059.599] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\rGxJ8R0.avi" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\l0mlmwcxjkz\\rgxj8r0.avi"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\rGxJ8R0.avi.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\l0mlmwcxjkz\\rgxj8r0.avi.xuy")) returned 1 [0059.600] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\sI-BFCbljwWDcLW5.odt", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\sI-BFCbljwWDcLW5.odt", lpFilePart=0x0) returned 0x3e [0059.600] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0059.600] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\sI-BFCbljwWDcLW5.odt" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\l0mlmwcxjkz\\si-bfcbljwwdclw5.odt"), fInfoLevelId=0x0, lpFileInformation=0x22c5a10 | out: lpFileInformation=0x22c5a10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50f0c830, ftCreationTime.dwHighDateTime=0x1d45f95, ftLastAccessTime.dwLowDateTime=0xd3f9700, ftLastAccessTime.dwHighDateTime=0x1d4606d, ftLastWriteTime.dwLowDateTime=0xd3f9700, ftLastWriteTime.dwHighDateTime=0x1d4606d, nFileSizeHigh=0x0, nFileSizeLow=0x14c77)) returned 1 [0059.600] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0059.600] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\sI-BFCbljwWDcLW5.odt", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\sI-BFCbljwWDcLW5.odt", lpFilePart=0x0) returned 0x3e [0059.600] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0059.600] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\sI-BFCbljwWDcLW5.odt" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\l0mlmwcxjkz\\si-bfcbljwwdclw5.odt"), fInfoLevelId=0x0, lpFileInformation=0x22c5b58 | out: lpFileInformation=0x22c5b58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50f0c830, ftCreationTime.dwHighDateTime=0x1d45f95, ftLastAccessTime.dwLowDateTime=0xd3f9700, ftLastAccessTime.dwHighDateTime=0x1d4606d, ftLastWriteTime.dwLowDateTime=0xd3f9700, ftLastWriteTime.dwHighDateTime=0x1d4606d, nFileSizeHigh=0x0, nFileSizeLow=0x14c77)) returned 1 [0059.600] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0059.600] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\sI-BFCbljwWDcLW5.odt", nBufferLength=0x105, lpBuffer=0x3be2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\sI-BFCbljwWDcLW5.odt", lpFilePart=0x0) returned 0x3e [0059.600] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0059.600] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\sI-BFCbljwWDcLW5.odt" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\l0mlmwcxjkz\\si-bfcbljwwdclw5.odt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0059.600] GetFileType (hFile=0x444) returned 0x1 [0059.600] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be730) returned 1 [0059.601] GetFileType (hFile=0x444) returned 0x1 [0059.601] ReadFile (in: hFile=0x444, lpBuffer=0x22c7f18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be848, lpOverlapped=0x0 | out: lpBuffer=0x22c7f18*, lpNumberOfBytesRead=0x3be848*=0x1000, lpOverlapped=0x0) returned 1 [0059.611] CloseHandle (hObject=0x444) returned 1 [0059.612] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\sI-BFCbljwWDcLW5.odt", nBufferLength=0x105, lpBuffer=0x3be2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\sI-BFCbljwWDcLW5.odt", lpFilePart=0x0) returned 0x3e [0059.612] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0059.612] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\sI-BFCbljwWDcLW5.odt" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\l0mlmwcxjkz\\si-bfcbljwwdclw5.odt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0059.612] GetFileType (hFile=0x444) returned 0x1 [0059.612] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be730) returned 1 [0059.612] GetFileType (hFile=0x444) returned 0x1 [0059.612] WriteFile (in: hFile=0x444, lpBuffer=0x22c5c80*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be8f8, lpOverlapped=0x0 | out: lpBuffer=0x22c5c80*, lpNumberOfBytesWritten=0x3be8f8*=0x2000, lpOverlapped=0x0) returned 1 [0059.612] CloseHandle (hObject=0x444) returned 1 [0059.612] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\sI-BFCbljwWDcLW5.odt", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\sI-BFCbljwWDcLW5.odt", lpFilePart=0x0) returned 0x3e [0059.612] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\sI-BFCbljwWDcLW5.odt.xuy", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\sI-BFCbljwWDcLW5.odt.xuy", lpFilePart=0x0) returned 0x42 [0059.612] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0059.612] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\sI-BFCbljwWDcLW5.odt" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\l0mlmwcxjkz\\si-bfcbljwwdclw5.odt"), fInfoLevelId=0x0, lpFileInformation=0x3be910 | out: lpFileInformation=0x3be910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50f0c830, ftCreationTime.dwHighDateTime=0x1d45f95, ftLastAccessTime.dwLowDateTime=0xd3f9700, ftLastAccessTime.dwHighDateTime=0x1d4606d, ftLastWriteTime.dwLowDateTime=0xf6178ac, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x14c77)) returned 1 [0059.613] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7f0) returned 1 [0059.613] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\sI-BFCbljwWDcLW5.odt" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\l0mlmwcxjkz\\si-bfcbljwwdclw5.odt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\sI-BFCbljwWDcLW5.odt.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\l0mlmwcxjkz\\si-bfcbljwwdclw5.odt.xuy")) returned 1 [0059.613] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\taGJFoA0OzRId.png", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\taGJFoA0OzRId.png", lpFilePart=0x0) returned 0x3b [0059.613] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0059.613] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\taGJFoA0OzRId.png" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\l0mlmwcxjkz\\tagjfoa0ozrid.png"), fInfoLevelId=0x0, lpFileInformation=0x2344280 | out: lpFileInformation=0x2344280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc130b2a0, ftCreationTime.dwHighDateTime=0x1d4603e, ftLastAccessTime.dwLowDateTime=0x13c7cb20, ftLastAccessTime.dwHighDateTime=0x1d45bc6, ftLastWriteTime.dwLowDateTime=0x13c7cb20, ftLastWriteTime.dwHighDateTime=0x1d45bc6, nFileSizeHigh=0x0, nFileSizeLow=0xdfda)) returned 1 [0059.613] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0059.613] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\taGJFoA0OzRId.png", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\taGJFoA0OzRId.png", lpFilePart=0x0) returned 0x3b [0059.613] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0059.613] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\taGJFoA0OzRId.png" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\l0mlmwcxjkz\\tagjfoa0ozrid.png"), fInfoLevelId=0x0, lpFileInformation=0x23443b8 | out: lpFileInformation=0x23443b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc130b2a0, ftCreationTime.dwHighDateTime=0x1d4603e, ftLastAccessTime.dwLowDateTime=0x13c7cb20, ftLastAccessTime.dwHighDateTime=0x1d45bc6, ftLastWriteTime.dwLowDateTime=0x13c7cb20, ftLastWriteTime.dwHighDateTime=0x1d45bc6, nFileSizeHigh=0x0, nFileSizeLow=0xdfda)) returned 1 [0059.614] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0059.614] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\taGJFoA0OzRId.png", nBufferLength=0x105, lpBuffer=0x3be2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\taGJFoA0OzRId.png", lpFilePart=0x0) returned 0x3b [0059.614] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0059.614] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\taGJFoA0OzRId.png" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\l0mlmwcxjkz\\tagjfoa0ozrid.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0059.614] GetFileType (hFile=0x444) returned 0x1 [0059.614] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be730) returned 1 [0059.614] GetFileType (hFile=0x444) returned 0x1 [0059.614] ReadFile (in: hFile=0x444, lpBuffer=0x2346758, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be848, lpOverlapped=0x0 | out: lpBuffer=0x2346758*, lpNumberOfBytesRead=0x3be848*=0x1000, lpOverlapped=0x0) returned 1 [0059.666] CloseHandle (hObject=0x444) returned 1 [0059.666] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\taGJFoA0OzRId.png", nBufferLength=0x105, lpBuffer=0x3be2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\taGJFoA0OzRId.png", lpFilePart=0x0) returned 0x3b [0059.666] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0059.666] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\taGJFoA0OzRId.png" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\l0mlmwcxjkz\\tagjfoa0ozrid.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0059.666] GetFileType (hFile=0x444) returned 0x1 [0059.666] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be730) returned 1 [0059.666] GetFileType (hFile=0x444) returned 0x1 [0059.667] WriteFile (in: hFile=0x444, lpBuffer=0x215a0d0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be8f8, lpOverlapped=0x0 | out: lpBuffer=0x215a0d0*, lpNumberOfBytesWritten=0x3be8f8*=0x2000, lpOverlapped=0x0) returned 1 [0059.667] CloseHandle (hObject=0x444) returned 1 [0059.667] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\taGJFoA0OzRId.png", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\taGJFoA0OzRId.png", lpFilePart=0x0) returned 0x3b [0059.667] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\taGJFoA0OzRId.png.xuy", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\taGJFoA0OzRId.png.xuy", lpFilePart=0x0) returned 0x3f [0059.667] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0059.667] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\taGJFoA0OzRId.png" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\l0mlmwcxjkz\\tagjfoa0ozrid.png"), fInfoLevelId=0x0, lpFileInformation=0x3be910 | out: lpFileInformation=0x3be910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc130b2a0, ftCreationTime.dwHighDateTime=0x1d4603e, ftLastAccessTime.dwLowDateTime=0x13c7cb20, ftLastAccessTime.dwHighDateTime=0x1d45bc6, ftLastWriteTime.dwLowDateTime=0xf68a052, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xdfda)) returned 1 [0059.667] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7f0) returned 1 [0059.667] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\taGJFoA0OzRId.png" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\l0mlmwcxjkz\\tagjfoa0ozrid.png"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\taGJFoA0OzRId.png.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\l0mlmwcxjkz\\tagjfoa0ozrid.png.xuy")) returned 1 [0059.668] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\VJwX.docx", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\VJwX.docx", lpFilePart=0x0) returned 0x33 [0059.668] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0059.668] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\VJwX.docx" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\l0mlmwcxjkz\\vjwx.docx"), fInfoLevelId=0x0, lpFileInformation=0x21c2a80 | out: lpFileInformation=0x21c2a80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5349990, ftCreationTime.dwHighDateTime=0x1d46286, ftLastAccessTime.dwLowDateTime=0x6c8d93f0, ftLastAccessTime.dwHighDateTime=0x1d45605, ftLastWriteTime.dwLowDateTime=0x6c8d93f0, ftLastWriteTime.dwHighDateTime=0x1d45605, nFileSizeHigh=0x0, nFileSizeLow=0xb451)) returned 1 [0059.668] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0059.668] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\VJwX.docx", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\VJwX.docx", lpFilePart=0x0) returned 0x33 [0059.668] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0059.668] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\VJwX.docx" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\l0mlmwcxjkz\\vjwx.docx"), fInfoLevelId=0x0, lpFileInformation=0x21c2b98 | out: lpFileInformation=0x21c2b98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5349990, ftCreationTime.dwHighDateTime=0x1d46286, ftLastAccessTime.dwLowDateTime=0x6c8d93f0, ftLastAccessTime.dwHighDateTime=0x1d45605, ftLastWriteTime.dwLowDateTime=0x6c8d93f0, ftLastWriteTime.dwHighDateTime=0x1d45605, nFileSizeHigh=0x0, nFileSizeLow=0xb451)) returned 1 [0059.668] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0059.668] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\VJwX.docx", nBufferLength=0x105, lpBuffer=0x3be2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\VJwX.docx", lpFilePart=0x0) returned 0x33 [0059.668] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0059.668] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\VJwX.docx" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\l0mlmwcxjkz\\vjwx.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0059.668] GetFileType (hFile=0x444) returned 0x1 [0059.668] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be730) returned 1 [0059.668] GetFileType (hFile=0x444) returned 0x1 [0059.669] ReadFile (in: hFile=0x444, lpBuffer=0x21c4ef8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be848, lpOverlapped=0x0 | out: lpBuffer=0x21c4ef8*, lpNumberOfBytesRead=0x3be848*=0x1000, lpOverlapped=0x0) returned 1 [0059.679] CloseHandle (hObject=0x444) returned 1 [0059.679] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\VJwX.docx", nBufferLength=0x105, lpBuffer=0x3be2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\VJwX.docx", lpFilePart=0x0) returned 0x33 [0059.679] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0059.679] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\VJwX.docx" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\l0mlmwcxjkz\\vjwx.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0059.679] GetFileType (hFile=0x444) returned 0x1 [0059.679] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be730) returned 1 [0059.679] GetFileType (hFile=0x444) returned 0x1 [0059.679] WriteFile (in: hFile=0x444, lpBuffer=0x21c2c90*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be8f8, lpOverlapped=0x0 | out: lpBuffer=0x21c2c90*, lpNumberOfBytesWritten=0x3be8f8*=0x2000, lpOverlapped=0x0) returned 1 [0059.680] CloseHandle (hObject=0x444) returned 1 [0059.680] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\VJwX.docx", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\VJwX.docx", lpFilePart=0x0) returned 0x33 [0059.680] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\VJwX.docx.xuy", nBufferLength=0x105, lpBuffer=0x3be3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\VJwX.docx.xuy", lpFilePart=0x0) returned 0x37 [0059.680] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0059.680] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\VJwX.docx" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\l0mlmwcxjkz\\vjwx.docx"), fInfoLevelId=0x0, lpFileInformation=0x3be910 | out: lpFileInformation=0x3be910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5349990, ftCreationTime.dwHighDateTime=0x1d46286, ftLastAccessTime.dwLowDateTime=0x6c8d93f0, ftLastAccessTime.dwHighDateTime=0x1d45605, ftLastWriteTime.dwLowDateTime=0xf6b0180, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xb451)) returned 1 [0059.680] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7f0) returned 1 [0059.680] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\VJwX.docx" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\l0mlmwcxjkz\\vjwx.docx"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\VJwX.docx.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\l0mlmwcxjkz\\vjwx.docx.xuy")) returned 1 [0059.681] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be950) returned 1 [0059.681] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming", nBufferLength=0x105, lpBuffer=0x3be440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming", lpFilePart=0x0) returned 0x25 [0059.681] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\", nBufferLength=0x105, lpBuffer=0x3be3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\", lpFilePart=0x0) returned 0x26 [0059.681] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\*", lpFindFileData=0x3be5f0 | out: lpFindFileData=0x3be5f0) returned 0x5d7550 [0059.681] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0059.681] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0059.681] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0059.682] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0059.682] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0059.682] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0059.682] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0059.682] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0059.682] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0059.682] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0059.682] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0059.682] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0059.683] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0059.683] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0059.683] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0059.683] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0059.683] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0059.683] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0059.683] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0059.683] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0059.683] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0059.683] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0059.684] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0059.684] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0059.684] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0059.684] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0059.684] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0059.684] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0059.684] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0059.684] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0059.684] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0059.685] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0059.685] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0059.755] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0059.755] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0059.755] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0059.756] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0059.756] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0059.756] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0059.756] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0059.756] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0059.756] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0059.756] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0059.756] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0059.757] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0059.757] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 0 [0059.757] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0059.757] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0059.757] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0059.757] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be950) returned 1 [0059.757] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming", nBufferLength=0x105, lpBuffer=0x3be440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming", lpFilePart=0x0) returned 0x25 [0059.757] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\", nBufferLength=0x105, lpBuffer=0x3be3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\", lpFilePart=0x0) returned 0x26 [0059.757] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\*", lpFindFileData=0x3be5f0 | out: lpFindFileData=0x3be5f0) returned 0x5d7670 [0059.757] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0059.757] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0059.758] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0059.758] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0059.758] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0059.758] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0059.758] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0059.758] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0059.758] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0059.758] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0059.759] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0059.759] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0059.759] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0059.759] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0059.759] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0059.759] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0059.759] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0059.759] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0059.760] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0059.760] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0059.760] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0059.760] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0059.760] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0059.760] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0059.760] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0059.760] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0059.760] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0059.761] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0059.761] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0059.761] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0059.761] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0059.761] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0059.761] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0059.761] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0059.761] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0059.762] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0059.762] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0059.762] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0059.762] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0059.762] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0059.762] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0059.762] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0059.763] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0059.763] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0059.763] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0059.763] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 0 [0059.763] FindClose (in: hFindFile=0x5d7670 | out: hFindFile=0x5d7670) returned 1 [0059.763] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0059.763] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0059.763] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\0RAKtw47d.pdf", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\0RAKtw47d.pdf", lpFilePart=0x0) returned 0x33 [0059.764] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0059.764] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\0RAKtw47d.pdf" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\0raktw47d.pdf"), fInfoLevelId=0x0, lpFileInformation=0x224c220 | out: lpFileInformation=0x224c220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x130fafe0, ftCreationTime.dwHighDateTime=0x1d46283, ftLastAccessTime.dwLowDateTime=0x11ed6d30, ftLastAccessTime.dwHighDateTime=0x1d460a5, ftLastWriteTime.dwLowDateTime=0x11ed6d30, ftLastWriteTime.dwHighDateTime=0x1d460a5, nFileSizeHigh=0x0, nFileSizeLow=0x140e4)) returned 1 [0059.764] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0059.764] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\0RAKtw47d.pdf", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\0RAKtw47d.pdf", lpFilePart=0x0) returned 0x33 [0059.764] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0059.764] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\0RAKtw47d.pdf" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\0raktw47d.pdf"), fInfoLevelId=0x0, lpFileInformation=0x224c340 | out: lpFileInformation=0x224c340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x130fafe0, ftCreationTime.dwHighDateTime=0x1d46283, ftLastAccessTime.dwLowDateTime=0x11ed6d30, ftLastAccessTime.dwHighDateTime=0x1d460a5, ftLastWriteTime.dwLowDateTime=0x11ed6d30, ftLastWriteTime.dwHighDateTime=0x1d460a5, nFileSizeHigh=0x0, nFileSizeLow=0x140e4)) returned 1 [0059.764] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0059.764] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\0RAKtw47d.pdf", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\0RAKtw47d.pdf", lpFilePart=0x0) returned 0x33 [0059.764] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0059.764] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\0RAKtw47d.pdf" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\0raktw47d.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0059.764] GetFileType (hFile=0x444) returned 0x1 [0059.764] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0059.764] GetFileType (hFile=0x444) returned 0x1 [0059.764] ReadFile (in: hFile=0x444, lpBuffer=0x224e6b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be8b8, lpOverlapped=0x0 | out: lpBuffer=0x224e6b0*, lpNumberOfBytesRead=0x3be8b8*=0x1000, lpOverlapped=0x0) returned 1 [0059.774] CloseHandle (hObject=0x444) returned 1 [0059.775] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\0RAKtw47d.pdf", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\0RAKtw47d.pdf", lpFilePart=0x0) returned 0x33 [0059.775] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0059.775] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\0RAKtw47d.pdf" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\0raktw47d.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0059.775] GetFileType (hFile=0x444) returned 0x1 [0059.775] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0059.775] GetFileType (hFile=0x444) returned 0x1 [0059.775] WriteFile (in: hFile=0x444, lpBuffer=0x224c440*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be968, lpOverlapped=0x0 | out: lpBuffer=0x224c440*, lpNumberOfBytesWritten=0x3be968*=0x2000, lpOverlapped=0x0) returned 1 [0059.775] CloseHandle (hObject=0x444) returned 1 [0059.775] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\0RAKtw47d.pdf", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\0RAKtw47d.pdf", lpFilePart=0x0) returned 0x33 [0059.775] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\0RAKtw47d.pdf.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\0RAKtw47d.pdf.xuy", lpFilePart=0x0) returned 0x37 [0059.775] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0059.775] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\0RAKtw47d.pdf" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\0raktw47d.pdf"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x130fafe0, ftCreationTime.dwHighDateTime=0x1d46283, ftLastAccessTime.dwLowDateTime=0x11ed6d30, ftLastAccessTime.dwHighDateTime=0x1d460a5, ftLastWriteTime.dwLowDateTime=0xf794ede, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x140e4)) returned 1 [0059.775] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0059.775] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\0RAKtw47d.pdf" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\0raktw47d.pdf"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\0RAKtw47d.pdf.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\0raktw47d.pdf.xuy")) returned 1 [0059.776] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\2JQ1gX.mp3", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\2JQ1gX.mp3", lpFilePart=0x0) returned 0x30 [0059.776] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0059.776] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\2JQ1gX.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\2jq1gx.mp3"), fInfoLevelId=0x0, lpFileInformation=0x22ca9a8 | out: lpFileInformation=0x22ca9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50415570, ftCreationTime.dwHighDateTime=0x1d46031, ftLastAccessTime.dwLowDateTime=0x1e34ff10, ftLastAccessTime.dwHighDateTime=0x1d45937, ftLastWriteTime.dwLowDateTime=0x1e34ff10, ftLastWriteTime.dwHighDateTime=0x1d45937, nFileSizeHigh=0x0, nFileSizeLow=0x9a58)) returned 1 [0059.776] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0059.776] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\2JQ1gX.mp3", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\2JQ1gX.mp3", lpFilePart=0x0) returned 0x30 [0059.776] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0059.776] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\2JQ1gX.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\2jq1gx.mp3"), fInfoLevelId=0x0, lpFileInformation=0x22caac0 | out: lpFileInformation=0x22caac0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50415570, ftCreationTime.dwHighDateTime=0x1d46031, ftLastAccessTime.dwLowDateTime=0x1e34ff10, ftLastAccessTime.dwHighDateTime=0x1d45937, ftLastWriteTime.dwLowDateTime=0x1e34ff10, ftLastWriteTime.dwHighDateTime=0x1d45937, nFileSizeHigh=0x0, nFileSizeLow=0x9a58)) returned 1 [0059.776] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0059.776] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\2JQ1gX.mp3", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\2JQ1gX.mp3", lpFilePart=0x0) returned 0x30 [0059.776] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0059.776] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\2JQ1gX.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\2jq1gx.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0059.777] GetFileType (hFile=0x444) returned 0x1 [0059.777] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0059.777] GetFileType (hFile=0x444) returned 0x1 [0059.777] ReadFile (in: hFile=0x444, lpBuffer=0x22cce20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be8b8, lpOverlapped=0x0 | out: lpBuffer=0x22cce20*, lpNumberOfBytesRead=0x3be8b8*=0x1000, lpOverlapped=0x0) returned 1 [0059.788] CloseHandle (hObject=0x444) returned 1 [0059.788] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\2JQ1gX.mp3", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\2JQ1gX.mp3", lpFilePart=0x0) returned 0x30 [0059.788] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0059.788] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\2JQ1gX.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\2jq1gx.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0059.788] GetFileType (hFile=0x444) returned 0x1 [0059.788] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0059.788] GetFileType (hFile=0x444) returned 0x1 [0059.788] WriteFile (in: hFile=0x444, lpBuffer=0x22cabb8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be968, lpOverlapped=0x0 | out: lpBuffer=0x22cabb8*, lpNumberOfBytesWritten=0x3be968*=0x2000, lpOverlapped=0x0) returned 1 [0059.788] CloseHandle (hObject=0x444) returned 1 [0059.788] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\2JQ1gX.mp3", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\2JQ1gX.mp3", lpFilePart=0x0) returned 0x30 [0059.788] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\2JQ1gX.mp3.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\2JQ1gX.mp3.xuy", lpFilePart=0x0) returned 0x34 [0059.788] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0059.789] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\2JQ1gX.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\2jq1gx.mp3"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50415570, ftCreationTime.dwHighDateTime=0x1d46031, ftLastAccessTime.dwLowDateTime=0x1e34ff10, ftLastAccessTime.dwHighDateTime=0x1d45937, ftLastWriteTime.dwLowDateTime=0xf7bb482, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x9a58)) returned 1 [0059.789] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0059.789] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\2JQ1gX.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\2jq1gx.mp3"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\2JQ1gX.mp3.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\2jq1gx.mp3.xuy")) returned 1 [0059.789] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\3CZFOoupTGQXIb.m4a", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\3CZFOoupTGQXIb.m4a", lpFilePart=0x0) returned 0x38 [0059.789] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0059.789] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\3CZFOoupTGQXIb.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\3czfoouptgqxib.m4a"), fInfoLevelId=0x0, lpFileInformation=0x2349110 | out: lpFileInformation=0x2349110*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1510b50, ftCreationTime.dwHighDateTime=0x1d45f81, ftLastAccessTime.dwLowDateTime=0xff8c7110, ftLastAccessTime.dwHighDateTime=0x1d461a1, ftLastWriteTime.dwLowDateTime=0xff8c7110, ftLastWriteTime.dwHighDateTime=0x1d461a1, nFileSizeHigh=0x0, nFileSizeLow=0xe7a1)) returned 1 [0059.789] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0059.789] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\3CZFOoupTGQXIb.m4a", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\3CZFOoupTGQXIb.m4a", lpFilePart=0x0) returned 0x38 [0059.790] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0059.790] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\3CZFOoupTGQXIb.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\3czfoouptgqxib.m4a"), fInfoLevelId=0x0, lpFileInformation=0x2349248 | out: lpFileInformation=0x2349248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1510b50, ftCreationTime.dwHighDateTime=0x1d45f81, ftLastAccessTime.dwLowDateTime=0xff8c7110, ftLastAccessTime.dwHighDateTime=0x1d461a1, ftLastWriteTime.dwLowDateTime=0xff8c7110, ftLastWriteTime.dwHighDateTime=0x1d461a1, nFileSizeHigh=0x0, nFileSizeLow=0xe7a1)) returned 1 [0059.790] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0059.790] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\3CZFOoupTGQXIb.m4a", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\3CZFOoupTGQXIb.m4a", lpFilePart=0x0) returned 0x38 [0059.790] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0059.790] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\3CZFOoupTGQXIb.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\3czfoouptgqxib.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0059.790] GetFileType (hFile=0x444) returned 0x1 [0059.790] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0059.790] GetFileType (hFile=0x444) returned 0x1 [0059.790] ReadFile (in: hFile=0x444, lpBuffer=0x234b5e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be8b8, lpOverlapped=0x0 | out: lpBuffer=0x234b5e8*, lpNumberOfBytesRead=0x3be8b8*=0x1000, lpOverlapped=0x0) returned 1 [0059.839] CloseHandle (hObject=0x444) returned 1 [0059.839] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\3CZFOoupTGQXIb.m4a", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\3CZFOoupTGQXIb.m4a", lpFilePart=0x0) returned 0x38 [0059.839] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0059.840] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\3CZFOoupTGQXIb.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\3czfoouptgqxib.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0059.840] GetFileType (hFile=0x444) returned 0x1 [0059.840] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0059.840] GetFileType (hFile=0x444) returned 0x1 [0059.840] WriteFile (in: hFile=0x444, lpBuffer=0x215b258*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be968, lpOverlapped=0x0 | out: lpBuffer=0x215b258*, lpNumberOfBytesWritten=0x3be968*=0x2000, lpOverlapped=0x0) returned 1 [0059.840] CloseHandle (hObject=0x444) returned 1 [0059.840] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\3CZFOoupTGQXIb.m4a", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\3CZFOoupTGQXIb.m4a", lpFilePart=0x0) returned 0x38 [0059.840] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\3CZFOoupTGQXIb.m4a.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\3CZFOoupTGQXIb.m4a.xuy", lpFilePart=0x0) returned 0x3c [0059.840] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0059.840] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\3CZFOoupTGQXIb.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\3czfoouptgqxib.m4a"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1510b50, ftCreationTime.dwHighDateTime=0x1d45f81, ftLastAccessTime.dwLowDateTime=0xff8c7110, ftLastAccessTime.dwHighDateTime=0x1d461a1, ftLastWriteTime.dwLowDateTime=0xf82d85d, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xe7a1)) returned 1 [0059.840] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0059.841] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\3CZFOoupTGQXIb.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\3czfoouptgqxib.m4a"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\3CZFOoupTGQXIb.m4a.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\3czfoouptgqxib.m4a.xuy")) returned 1 [0059.843] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\4M9GNaeWOnw2HrFq.ods", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\4M9GNaeWOnw2HrFq.ods", lpFilePart=0x0) returned 0x3a [0059.843] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0059.843] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\4M9GNaeWOnw2HrFq.ods" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\4m9gnaewonw2hrfq.ods"), fInfoLevelId=0x0, lpFileInformation=0x21c8aa8 | out: lpFileInformation=0x21c8aa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e16b300, ftCreationTime.dwHighDateTime=0x1d460dc, ftLastAccessTime.dwLowDateTime=0x11c05740, ftLastAccessTime.dwHighDateTime=0x1d45dc7, ftLastWriteTime.dwLowDateTime=0x11c05740, ftLastWriteTime.dwHighDateTime=0x1d45dc7, nFileSizeHigh=0x0, nFileSizeLow=0xf243)) returned 1 [0059.843] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0059.843] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\4M9GNaeWOnw2HrFq.ods", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\4M9GNaeWOnw2HrFq.ods", lpFilePart=0x0) returned 0x3a [0059.843] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0059.843] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\4M9GNaeWOnw2HrFq.ods" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\4m9gnaewonw2hrfq.ods"), fInfoLevelId=0x0, lpFileInformation=0x21c8be8 | out: lpFileInformation=0x21c8be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e16b300, ftCreationTime.dwHighDateTime=0x1d460dc, ftLastAccessTime.dwLowDateTime=0x11c05740, ftLastAccessTime.dwHighDateTime=0x1d45dc7, ftLastWriteTime.dwLowDateTime=0x11c05740, ftLastWriteTime.dwHighDateTime=0x1d45dc7, nFileSizeHigh=0x0, nFileSizeLow=0xf243)) returned 1 [0059.843] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0059.843] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\4M9GNaeWOnw2HrFq.ods", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\4M9GNaeWOnw2HrFq.ods", lpFilePart=0x0) returned 0x3a [0059.843] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0059.843] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\4M9GNaeWOnw2HrFq.ods" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\4m9gnaewonw2hrfq.ods"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0059.843] GetFileType (hFile=0x444) returned 0x1 [0059.843] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0059.843] GetFileType (hFile=0x444) returned 0x1 [0059.843] ReadFile (in: hFile=0x444, lpBuffer=0x21caf98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be8b8, lpOverlapped=0x0 | out: lpBuffer=0x21caf98*, lpNumberOfBytesRead=0x3be8b8*=0x1000, lpOverlapped=0x0) returned 1 [0059.854] CloseHandle (hObject=0x444) returned 1 [0059.854] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\4M9GNaeWOnw2HrFq.ods", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\4M9GNaeWOnw2HrFq.ods", lpFilePart=0x0) returned 0x3a [0059.854] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0059.854] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\4M9GNaeWOnw2HrFq.ods" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\4m9gnaewonw2hrfq.ods"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0059.854] GetFileType (hFile=0x444) returned 0x1 [0059.854] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0059.854] GetFileType (hFile=0x444) returned 0x1 [0059.854] WriteFile (in: hFile=0x444, lpBuffer=0x21c8d08*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be968, lpOverlapped=0x0 | out: lpBuffer=0x21c8d08*, lpNumberOfBytesWritten=0x3be968*=0x2000, lpOverlapped=0x0) returned 1 [0059.854] CloseHandle (hObject=0x444) returned 1 [0059.854] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\4M9GNaeWOnw2HrFq.ods", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\4M9GNaeWOnw2HrFq.ods", lpFilePart=0x0) returned 0x3a [0059.854] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\4M9GNaeWOnw2HrFq.ods.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\4M9GNaeWOnw2HrFq.ods.xuy", lpFilePart=0x0) returned 0x3e [0059.854] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0059.854] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\4M9GNaeWOnw2HrFq.ods" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\4m9gnaewonw2hrfq.ods"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e16b300, ftCreationTime.dwHighDateTime=0x1d460dc, ftLastAccessTime.dwLowDateTime=0x11c05740, ftLastAccessTime.dwHighDateTime=0x1d45dc7, ftLastWriteTime.dwLowDateTime=0xf853c89, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xf243)) returned 1 [0059.855] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0059.855] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\4M9GNaeWOnw2HrFq.ods" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\4m9gnaewonw2hrfq.ods"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\4M9GNaeWOnw2HrFq.ods.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\4m9gnaewonw2hrfq.ods.xuy")) returned 1 [0059.855] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\4TX0WLVzI0D.wav", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\4TX0WLVzI0D.wav", lpFilePart=0x0) returned 0x35 [0059.855] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0059.855] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\4TX0WLVzI0D.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\4tx0wlvzi0d.wav"), fInfoLevelId=0x0, lpFileInformation=0x22472e0 | out: lpFileInformation=0x22472e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ee6a440, ftCreationTime.dwHighDateTime=0x1d45be7, ftLastAccessTime.dwLowDateTime=0x20021350, ftLastAccessTime.dwHighDateTime=0x1d459fa, ftLastWriteTime.dwLowDateTime=0x20021350, ftLastWriteTime.dwHighDateTime=0x1d459fa, nFileSizeHigh=0x0, nFileSizeLow=0x10b88)) returned 1 [0059.855] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0059.855] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\4TX0WLVzI0D.wav", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\4TX0WLVzI0D.wav", lpFilePart=0x0) returned 0x35 [0059.855] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0059.855] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\4TX0WLVzI0D.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\4tx0wlvzi0d.wav"), fInfoLevelId=0x0, lpFileInformation=0x2247408 | out: lpFileInformation=0x2247408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ee6a440, ftCreationTime.dwHighDateTime=0x1d45be7, ftLastAccessTime.dwLowDateTime=0x20021350, ftLastAccessTime.dwHighDateTime=0x1d459fa, ftLastWriteTime.dwLowDateTime=0x20021350, ftLastWriteTime.dwHighDateTime=0x1d459fa, nFileSizeHigh=0x0, nFileSizeLow=0x10b88)) returned 1 [0059.856] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0059.856] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\4TX0WLVzI0D.wav", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\4TX0WLVzI0D.wav", lpFilePart=0x0) returned 0x35 [0059.856] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0059.856] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\4TX0WLVzI0D.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\4tx0wlvzi0d.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0059.856] GetFileType (hFile=0x444) returned 0x1 [0059.856] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0059.856] GetFileType (hFile=0x444) returned 0x1 [0059.856] ReadFile (in: hFile=0x444, lpBuffer=0x2249788, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be8b8, lpOverlapped=0x0 | out: lpBuffer=0x2249788*, lpNumberOfBytesRead=0x3be8b8*=0x1000, lpOverlapped=0x0) returned 1 [0059.866] CloseHandle (hObject=0x444) returned 1 [0059.866] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\4TX0WLVzI0D.wav", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\4TX0WLVzI0D.wav", lpFilePart=0x0) returned 0x35 [0059.866] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0059.867] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\4TX0WLVzI0D.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\4tx0wlvzi0d.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0059.867] GetFileType (hFile=0x444) returned 0x1 [0059.867] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0059.867] GetFileType (hFile=0x444) returned 0x1 [0059.867] WriteFile (in: hFile=0x444, lpBuffer=0x2247510*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be968, lpOverlapped=0x0 | out: lpBuffer=0x2247510*, lpNumberOfBytesWritten=0x3be968*=0x2000, lpOverlapped=0x0) returned 1 [0059.867] CloseHandle (hObject=0x444) returned 1 [0059.867] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\4TX0WLVzI0D.wav", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\4TX0WLVzI0D.wav", lpFilePart=0x0) returned 0x35 [0059.867] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\4TX0WLVzI0D.wav.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\4TX0WLVzI0D.wav.xuy", lpFilePart=0x0) returned 0x39 [0059.867] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0059.867] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\4TX0WLVzI0D.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\4tx0wlvzi0d.wav"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ee6a440, ftCreationTime.dwHighDateTime=0x1d45be7, ftLastAccessTime.dwLowDateTime=0x20021350, ftLastAccessTime.dwHighDateTime=0x1d459fa, ftLastWriteTime.dwLowDateTime=0xf879db0, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x10b88)) returned 1 [0059.867] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0059.867] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\4TX0WLVzI0D.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\4tx0wlvzi0d.wav"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\4TX0WLVzI0D.wav.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\4tx0wlvzi0d.wav.xuy")) returned 1 [0059.868] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\4UQKtgpXFhDlO9QReM.rtf", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\4UQKtgpXFhDlO9QReM.rtf", lpFilePart=0x0) returned 0x3c [0059.868] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0059.868] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\4UQKtgpXFhDlO9QReM.rtf" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\4uqktgpxfhdlo9qrem.rtf"), fInfoLevelId=0x0, lpFileInformation=0x22c5aa0 | out: lpFileInformation=0x22c5aa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0c9a140, ftCreationTime.dwHighDateTime=0x1d45c4b, ftLastAccessTime.dwLowDateTime=0x5c3f40, ftLastAccessTime.dwHighDateTime=0x1d46386, ftLastWriteTime.dwLowDateTime=0x5c3f40, ftLastWriteTime.dwHighDateTime=0x1d46386, nFileSizeHigh=0x0, nFileSizeLow=0x3e6c)) returned 1 [0059.868] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0059.868] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\4UQKtgpXFhDlO9QReM.rtf", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\4UQKtgpXFhDlO9QReM.rtf", lpFilePart=0x0) returned 0x3c [0059.868] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0059.868] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\4UQKtgpXFhDlO9QReM.rtf" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\4uqktgpxfhdlo9qrem.rtf"), fInfoLevelId=0x0, lpFileInformation=0x22c5be8 | out: lpFileInformation=0x22c5be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0c9a140, ftCreationTime.dwHighDateTime=0x1d45c4b, ftLastAccessTime.dwLowDateTime=0x5c3f40, ftLastAccessTime.dwHighDateTime=0x1d46386, ftLastWriteTime.dwLowDateTime=0x5c3f40, ftLastWriteTime.dwHighDateTime=0x1d46386, nFileSizeHigh=0x0, nFileSizeLow=0x3e6c)) returned 1 [0059.868] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0059.868] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\4UQKtgpXFhDlO9QReM.rtf", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\4UQKtgpXFhDlO9QReM.rtf", lpFilePart=0x0) returned 0x3c [0059.868] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0059.868] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\4UQKtgpXFhDlO9QReM.rtf" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\4uqktgpxfhdlo9qrem.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0059.869] GetFileType (hFile=0x444) returned 0x1 [0059.869] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0059.869] GetFileType (hFile=0x444) returned 0x1 [0059.869] ReadFile (in: hFile=0x444, lpBuffer=0x22c7fa8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be8b8, lpOverlapped=0x0 | out: lpBuffer=0x22c7fa8*, lpNumberOfBytesRead=0x3be8b8*=0x1000, lpOverlapped=0x0) returned 1 [0059.881] CloseHandle (hObject=0x444) returned 1 [0059.881] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\4UQKtgpXFhDlO9QReM.rtf", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\4UQKtgpXFhDlO9QReM.rtf", lpFilePart=0x0) returned 0x3c [0059.881] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0059.881] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\4UQKtgpXFhDlO9QReM.rtf" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\4uqktgpxfhdlo9qrem.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0059.881] GetFileType (hFile=0x444) returned 0x1 [0059.881] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0059.881] GetFileType (hFile=0x444) returned 0x1 [0059.881] WriteFile (in: hFile=0x444, lpBuffer=0x22c5d10*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be968, lpOverlapped=0x0 | out: lpBuffer=0x22c5d10*, lpNumberOfBytesWritten=0x3be968*=0x2000, lpOverlapped=0x0) returned 1 [0059.881] CloseHandle (hObject=0x444) returned 1 [0059.882] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\4UQKtgpXFhDlO9QReM.rtf", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\4UQKtgpXFhDlO9QReM.rtf", lpFilePart=0x0) returned 0x3c [0059.882] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\4UQKtgpXFhDlO9QReM.rtf.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\4UQKtgpXFhDlO9QReM.rtf.xuy", lpFilePart=0x0) returned 0x40 [0059.882] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0059.882] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\4UQKtgpXFhDlO9QReM.rtf" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\4uqktgpxfhdlo9qrem.rtf"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0c9a140, ftCreationTime.dwHighDateTime=0x1d45c4b, ftLastAccessTime.dwLowDateTime=0x5c3f40, ftLastAccessTime.dwHighDateTime=0x1d46386, ftLastWriteTime.dwLowDateTime=0xf8a02c8, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x3e6c)) returned 1 [0059.882] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0059.882] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\4UQKtgpXFhDlO9QReM.rtf" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\4uqktgpxfhdlo9qrem.rtf"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\4UQKtgpXFhDlO9QReM.rtf.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\4uqktgpxfhdlo9qrem.rtf.xuy")) returned 1 [0059.882] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\6ukdx.avi", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\6ukdx.avi", lpFilePart=0x0) returned 0x2f [0059.882] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0059.882] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\6ukdx.avi" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\6ukdx.avi"), fInfoLevelId=0x0, lpFileInformation=0x2344310 | out: lpFileInformation=0x2344310*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x16b88a90, ftCreationTime.dwHighDateTime=0x1d45c57, ftLastAccessTime.dwLowDateTime=0x1385c450, ftLastAccessTime.dwHighDateTime=0x1d46472, ftLastWriteTime.dwLowDateTime=0x1385c450, ftLastWriteTime.dwHighDateTime=0x1d46472, nFileSizeHigh=0x0, nFileSizeLow=0x99de)) returned 1 [0059.883] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0059.883] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\6ukdx.avi", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\6ukdx.avi", lpFilePart=0x0) returned 0x2f [0059.883] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0059.883] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\6ukdx.avi" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\6ukdx.avi"), fInfoLevelId=0x0, lpFileInformation=0x2344420 | out: lpFileInformation=0x2344420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x16b88a90, ftCreationTime.dwHighDateTime=0x1d45c57, ftLastAccessTime.dwLowDateTime=0x1385c450, ftLastAccessTime.dwHighDateTime=0x1d46472, ftLastWriteTime.dwLowDateTime=0x1385c450, ftLastWriteTime.dwHighDateTime=0x1d46472, nFileSizeHigh=0x0, nFileSizeLow=0x99de)) returned 1 [0059.883] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0059.883] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\6ukdx.avi", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\6ukdx.avi", lpFilePart=0x0) returned 0x2f [0059.883] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0059.883] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\6ukdx.avi" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\6ukdx.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0059.883] GetFileType (hFile=0x444) returned 0x1 [0059.883] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0059.883] GetFileType (hFile=0x444) returned 0x1 [0059.883] ReadFile (in: hFile=0x444, lpBuffer=0x2346770, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be8b8, lpOverlapped=0x0 | out: lpBuffer=0x2346770*, lpNumberOfBytesRead=0x3be8b8*=0x1000, lpOverlapped=0x0) returned 1 [0059.924] CloseHandle (hObject=0x444) returned 1 [0059.924] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\6ukdx.avi", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\6ukdx.avi", lpFilePart=0x0) returned 0x2f [0059.924] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0059.924] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\6ukdx.avi" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\6ukdx.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0059.924] GetFileType (hFile=0x444) returned 0x1 [0059.924] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0059.924] GetFileType (hFile=0x444) returned 0x1 [0059.924] WriteFile (in: hFile=0x444, lpBuffer=0x215b240*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be968, lpOverlapped=0x0 | out: lpBuffer=0x215b240*, lpNumberOfBytesWritten=0x3be968*=0x2000, lpOverlapped=0x0) returned 1 [0059.925] CloseHandle (hObject=0x444) returned 1 [0059.925] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\6ukdx.avi", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\6ukdx.avi", lpFilePart=0x0) returned 0x2f [0059.925] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\6ukdx.avi.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\6ukdx.avi.xuy", lpFilePart=0x0) returned 0x33 [0059.925] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0059.925] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\6ukdx.avi" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\6ukdx.avi"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x16b88a90, ftCreationTime.dwHighDateTime=0x1d45c57, ftLastAccessTime.dwLowDateTime=0x1385c450, ftLastAccessTime.dwHighDateTime=0x1d46472, ftLastWriteTime.dwLowDateTime=0xf9129b9, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x99de)) returned 1 [0059.925] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0059.925] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\6ukdx.avi" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\6ukdx.avi"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\6ukdx.avi.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\6ukdx.avi.xuy")) returned 1 [0059.926] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\75-wgqXSdjOxU.mkv", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\75-wgqXSdjOxU.mkv", lpFilePart=0x0) returned 0x37 [0059.926] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0059.926] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\75-wgqXSdjOxU.mkv" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\75-wgqxsdjoxu.mkv"), fInfoLevelId=0x0, lpFileInformation=0x21c2a00 | out: lpFileInformation=0x21c2a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf2f7cd0, ftCreationTime.dwHighDateTime=0x1d46377, ftLastAccessTime.dwLowDateTime=0x46d5d930, ftLastAccessTime.dwHighDateTime=0x1d45ed2, ftLastWriteTime.dwLowDateTime=0x46d5d930, ftLastWriteTime.dwHighDateTime=0x1d45ed2, nFileSizeHigh=0x0, nFileSizeLow=0x10889)) returned 1 [0059.926] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0059.926] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\75-wgqXSdjOxU.mkv", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\75-wgqXSdjOxU.mkv", lpFilePart=0x0) returned 0x37 [0059.926] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0059.926] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\75-wgqXSdjOxU.mkv" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\75-wgqxsdjoxu.mkv"), fInfoLevelId=0x0, lpFileInformation=0x21c2b30 | out: lpFileInformation=0x21c2b30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf2f7cd0, ftCreationTime.dwHighDateTime=0x1d46377, ftLastAccessTime.dwLowDateTime=0x46d5d930, ftLastAccessTime.dwHighDateTime=0x1d45ed2, ftLastWriteTime.dwLowDateTime=0x46d5d930, ftLastWriteTime.dwHighDateTime=0x1d45ed2, nFileSizeHigh=0x0, nFileSizeLow=0x10889)) returned 1 [0059.926] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0059.926] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\75-wgqXSdjOxU.mkv", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\75-wgqXSdjOxU.mkv", lpFilePart=0x0) returned 0x37 [0059.926] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0059.926] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\75-wgqXSdjOxU.mkv" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\75-wgqxsdjoxu.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0059.926] GetFileType (hFile=0x444) returned 0x1 [0059.926] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0059.926] GetFileType (hFile=0x444) returned 0x1 [0059.926] ReadFile (in: hFile=0x444, lpBuffer=0x21c4ec0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be8b8, lpOverlapped=0x0 | out: lpBuffer=0x21c4ec0*, lpNumberOfBytesRead=0x3be8b8*=0x1000, lpOverlapped=0x0) returned 1 [0059.940] CloseHandle (hObject=0x444) returned 1 [0059.940] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\75-wgqXSdjOxU.mkv", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\75-wgqXSdjOxU.mkv", lpFilePart=0x0) returned 0x37 [0059.940] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0059.940] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\75-wgqXSdjOxU.mkv" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\75-wgqxsdjoxu.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0059.940] GetFileType (hFile=0x444) returned 0x1 [0059.940] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0059.941] GetFileType (hFile=0x444) returned 0x1 [0059.941] WriteFile (in: hFile=0x444, lpBuffer=0x21c2c40*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be968, lpOverlapped=0x0 | out: lpBuffer=0x21c2c40*, lpNumberOfBytesWritten=0x3be968*=0x2000, lpOverlapped=0x0) returned 1 [0059.941] CloseHandle (hObject=0x444) returned 1 [0059.941] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\75-wgqXSdjOxU.mkv", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\75-wgqXSdjOxU.mkv", lpFilePart=0x0) returned 0x37 [0059.941] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\75-wgqXSdjOxU.mkv.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\75-wgqXSdjOxU.mkv.xuy", lpFilePart=0x0) returned 0x3b [0059.941] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0059.941] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\75-wgqXSdjOxU.mkv" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\75-wgqxsdjoxu.mkv"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf2f7cd0, ftCreationTime.dwHighDateTime=0x1d46377, ftLastAccessTime.dwLowDateTime=0x46d5d930, ftLastAccessTime.dwHighDateTime=0x1d45ed2, ftLastWriteTime.dwLowDateTime=0xf9388f8, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x10889)) returned 1 [0059.941] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0059.941] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\75-wgqXSdjOxU.mkv" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\75-wgqxsdjoxu.mkv"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\75-wgqXSdjOxU.mkv.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\75-wgqxsdjoxu.mkv.xuy")) returned 1 [0060.045] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\A4ItiusytGvu1_7.mp4", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\A4ItiusytGvu1_7.mp4", lpFilePart=0x0) returned 0x39 [0060.045] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0060.045] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\A4ItiusytGvu1_7.mp4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\a4itiusytgvu1_7.mp4"), fInfoLevelId=0x0, lpFileInformation=0x22411e0 | out: lpFileInformation=0x22411e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa011e9c0, ftCreationTime.dwHighDateTime=0x1d45ebf, ftLastAccessTime.dwLowDateTime=0x34ade010, ftLastAccessTime.dwHighDateTime=0x1d4601f, ftLastWriteTime.dwLowDateTime=0x34ade010, ftLastWriteTime.dwHighDateTime=0x1d4601f, nFileSizeHigh=0x0, nFileSizeLow=0x17f91)) returned 1 [0060.045] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0060.045] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\A4ItiusytGvu1_7.mp4", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\A4ItiusytGvu1_7.mp4", lpFilePart=0x0) returned 0x39 [0060.045] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0060.045] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\A4ItiusytGvu1_7.mp4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\a4itiusytgvu1_7.mp4"), fInfoLevelId=0x0, lpFileInformation=0x2241318 | out: lpFileInformation=0x2241318*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa011e9c0, ftCreationTime.dwHighDateTime=0x1d45ebf, ftLastAccessTime.dwLowDateTime=0x34ade010, ftLastAccessTime.dwHighDateTime=0x1d4601f, ftLastWriteTime.dwLowDateTime=0x34ade010, ftLastWriteTime.dwHighDateTime=0x1d4601f, nFileSizeHigh=0x0, nFileSizeLow=0x17f91)) returned 1 [0060.045] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0060.045] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\A4ItiusytGvu1_7.mp4", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\A4ItiusytGvu1_7.mp4", lpFilePart=0x0) returned 0x39 [0060.045] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0060.045] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\A4ItiusytGvu1_7.mp4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\a4itiusytgvu1_7.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0060.046] GetFileType (hFile=0x444) returned 0x1 [0060.046] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0060.046] GetFileType (hFile=0x444) returned 0x1 [0060.046] ReadFile (in: hFile=0x444, lpBuffer=0x22436b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be8b8, lpOverlapped=0x0 | out: lpBuffer=0x22436b8*, lpNumberOfBytesRead=0x3be8b8*=0x1000, lpOverlapped=0x0) returned 1 [0060.056] CloseHandle (hObject=0x444) returned 1 [0060.056] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\A4ItiusytGvu1_7.mp4", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\A4ItiusytGvu1_7.mp4", lpFilePart=0x0) returned 0x39 [0060.056] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0060.056] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\A4ItiusytGvu1_7.mp4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\a4itiusytgvu1_7.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0060.056] GetFileType (hFile=0x444) returned 0x1 [0060.056] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0060.056] GetFileType (hFile=0x444) returned 0x1 [0060.056] WriteFile (in: hFile=0x444, lpBuffer=0x2241430*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be968, lpOverlapped=0x0 | out: lpBuffer=0x2241430*, lpNumberOfBytesWritten=0x3be968*=0x2000, lpOverlapped=0x0) returned 1 [0060.056] CloseHandle (hObject=0x444) returned 1 [0060.057] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\A4ItiusytGvu1_7.mp4", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\A4ItiusytGvu1_7.mp4", lpFilePart=0x0) returned 0x39 [0060.057] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\A4ItiusytGvu1_7.mp4.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\A4ItiusytGvu1_7.mp4.xuy", lpFilePart=0x0) returned 0x3d [0060.057] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0060.057] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\A4ItiusytGvu1_7.mp4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\a4itiusytgvu1_7.mp4"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa011e9c0, ftCreationTime.dwHighDateTime=0x1d45ebf, ftLastAccessTime.dwLowDateTime=0x34ade010, ftLastAccessTime.dwHighDateTime=0x1d4601f, ftLastWriteTime.dwLowDateTime=0xfa43ad9, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x17f91)) returned 1 [0060.057] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0060.057] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\A4ItiusytGvu1_7.mp4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\a4itiusytgvu1_7.mp4"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\A4ItiusytGvu1_7.mp4.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\a4itiusytgvu1_7.mp4.xuy")) returned 1 [0060.057] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\arCRFTwnP.pps", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\arCRFTwnP.pps", lpFilePart=0x0) returned 0x33 [0060.057] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0060.057] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\arCRFTwnP.pps" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\arcrftwnp.pps"), fInfoLevelId=0x0, lpFileInformation=0x22bf9f8 | out: lpFileInformation=0x22bf9f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a70900, ftCreationTime.dwHighDateTime=0x1d46315, ftLastAccessTime.dwLowDateTime=0x84577cf0, ftLastAccessTime.dwHighDateTime=0x1d462f6, ftLastWriteTime.dwLowDateTime=0x84577cf0, ftLastWriteTime.dwHighDateTime=0x1d462f6, nFileSizeHigh=0x0, nFileSizeLow=0x1292b)) returned 1 [0060.058] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0060.058] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\arCRFTwnP.pps", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\arCRFTwnP.pps", lpFilePart=0x0) returned 0x33 [0060.058] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0060.058] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\arCRFTwnP.pps" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\arcrftwnp.pps"), fInfoLevelId=0x0, lpFileInformation=0x22bfb18 | out: lpFileInformation=0x22bfb18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a70900, ftCreationTime.dwHighDateTime=0x1d46315, ftLastAccessTime.dwLowDateTime=0x84577cf0, ftLastAccessTime.dwHighDateTime=0x1d462f6, ftLastWriteTime.dwLowDateTime=0x84577cf0, ftLastWriteTime.dwHighDateTime=0x1d462f6, nFileSizeHigh=0x0, nFileSizeLow=0x1292b)) returned 1 [0060.058] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0060.058] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\arCRFTwnP.pps", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\arCRFTwnP.pps", lpFilePart=0x0) returned 0x33 [0060.058] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0060.058] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\arCRFTwnP.pps" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\arcrftwnp.pps"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0060.058] GetFileType (hFile=0x444) returned 0x1 [0060.058] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0060.058] GetFileType (hFile=0x444) returned 0x1 [0060.058] ReadFile (in: hFile=0x444, lpBuffer=0x22c1e88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be8b8, lpOverlapped=0x0 | out: lpBuffer=0x22c1e88*, lpNumberOfBytesRead=0x3be8b8*=0x1000, lpOverlapped=0x0) returned 1 [0060.069] CloseHandle (hObject=0x444) returned 1 [0060.069] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\arCRFTwnP.pps", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\arCRFTwnP.pps", lpFilePart=0x0) returned 0x33 [0060.069] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0060.069] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\arCRFTwnP.pps" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\arcrftwnp.pps"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0060.069] GetFileType (hFile=0x444) returned 0x1 [0060.069] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0060.069] GetFileType (hFile=0x444) returned 0x1 [0060.069] WriteFile (in: hFile=0x444, lpBuffer=0x22bfc18*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be968, lpOverlapped=0x0 | out: lpBuffer=0x22bfc18*, lpNumberOfBytesWritten=0x3be968*=0x2000, lpOverlapped=0x0) returned 1 [0060.069] CloseHandle (hObject=0x444) returned 1 [0060.069] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\arCRFTwnP.pps", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\arCRFTwnP.pps", lpFilePart=0x0) returned 0x33 [0060.069] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\arCRFTwnP.pps.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\arCRFTwnP.pps.xuy", lpFilePart=0x0) returned 0x37 [0060.069] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0060.069] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\arCRFTwnP.pps" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\arcrftwnp.pps"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a70900, ftCreationTime.dwHighDateTime=0x1d46315, ftLastAccessTime.dwLowDateTime=0x84577cf0, ftLastAccessTime.dwHighDateTime=0x1d462f6, ftLastWriteTime.dwLowDateTime=0xfa69bb9, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x1292b)) returned 1 [0060.069] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0060.069] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\arCRFTwnP.pps" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\arcrftwnp.pps"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\arCRFTwnP.pps.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\arcrftwnp.pps.xuy")) returned 1 [0060.070] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\AZC2.mkv", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\AZC2.mkv", lpFilePart=0x0) returned 0x2e [0060.070] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0060.070] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\AZC2.mkv" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\azc2.mkv"), fInfoLevelId=0x0, lpFileInformation=0x233e180 | out: lpFileInformation=0x233e180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe26ff2d0, ftCreationTime.dwHighDateTime=0x1d46491, ftLastAccessTime.dwLowDateTime=0xe8d34a20, ftLastAccessTime.dwHighDateTime=0x1d46048, ftLastWriteTime.dwLowDateTime=0xe8d34a20, ftLastWriteTime.dwHighDateTime=0x1d46048, nFileSizeHigh=0x0, nFileSizeLow=0x11c98)) returned 1 [0060.070] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0060.070] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\AZC2.mkv", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\AZC2.mkv", lpFilePart=0x0) returned 0x2e [0060.070] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0060.070] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\AZC2.mkv" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\azc2.mkv"), fInfoLevelId=0x0, lpFileInformation=0x233e290 | out: lpFileInformation=0x233e290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe26ff2d0, ftCreationTime.dwHighDateTime=0x1d46491, ftLastAccessTime.dwLowDateTime=0xe8d34a20, ftLastAccessTime.dwHighDateTime=0x1d46048, ftLastWriteTime.dwLowDateTime=0xe8d34a20, ftLastWriteTime.dwHighDateTime=0x1d46048, nFileSizeHigh=0x0, nFileSizeLow=0x11c98)) returned 1 [0060.070] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0060.071] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\AZC2.mkv", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\AZC2.mkv", lpFilePart=0x0) returned 0x2e [0060.071] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0060.071] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\AZC2.mkv" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\azc2.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0060.071] GetFileType (hFile=0x444) returned 0x1 [0060.071] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0060.071] GetFileType (hFile=0x444) returned 0x1 [0060.071] ReadFile (in: hFile=0x444, lpBuffer=0x23405e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be8b8, lpOverlapped=0x0 | out: lpBuffer=0x23405e0*, lpNumberOfBytesRead=0x3be8b8*=0x1000, lpOverlapped=0x0) returned 1 [0060.130] CloseHandle (hObject=0x444) returned 1 [0060.131] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\AZC2.mkv", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\AZC2.mkv", lpFilePart=0x0) returned 0x2e [0060.131] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0060.131] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\AZC2.mkv" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\azc2.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0060.131] GetFileType (hFile=0x444) returned 0x1 [0060.131] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0060.131] GetFileType (hFile=0x444) returned 0x1 [0060.131] WriteFile (in: hFile=0x444, lpBuffer=0x215b240*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be968, lpOverlapped=0x0 | out: lpBuffer=0x215b240*, lpNumberOfBytesWritten=0x3be968*=0x2000, lpOverlapped=0x0) returned 1 [0060.131] CloseHandle (hObject=0x444) returned 1 [0060.131] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\AZC2.mkv", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\AZC2.mkv", lpFilePart=0x0) returned 0x2e [0060.131] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\AZC2.mkv.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\AZC2.mkv.xuy", lpFilePart=0x0) returned 0x32 [0060.132] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0060.132] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\AZC2.mkv" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\azc2.mkv"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe26ff2d0, ftCreationTime.dwHighDateTime=0x1d46491, ftLastAccessTime.dwLowDateTime=0xe8d34a20, ftLastAccessTime.dwHighDateTime=0x1d46048, ftLastWriteTime.dwLowDateTime=0xfb025bc, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x11c98)) returned 1 [0060.132] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0060.132] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\AZC2.mkv" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\azc2.mkv"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\AZC2.mkv.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\azc2.mkv.xuy")) returned 1 [0060.132] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\cDYYopjyW.jpg", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\cDYYopjyW.jpg", lpFilePart=0x0) returned 0x33 [0060.132] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0060.132] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\cDYYopjyW.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\cdyyopjyw.jpg"), fInfoLevelId=0x0, lpFileInformation=0x21bc880 | out: lpFileInformation=0x21bc880*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51ea2a0, ftCreationTime.dwHighDateTime=0x1d45b1d, ftLastAccessTime.dwLowDateTime=0xe4f180d0, ftLastAccessTime.dwHighDateTime=0x1d46592, ftLastWriteTime.dwLowDateTime=0xe4f180d0, ftLastWriteTime.dwHighDateTime=0x1d46592, nFileSizeHigh=0x0, nFileSizeLow=0xcb8c)) returned 1 [0060.132] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0060.132] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\cDYYopjyW.jpg", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\cDYYopjyW.jpg", lpFilePart=0x0) returned 0x33 [0060.133] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0060.133] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\cDYYopjyW.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\cdyyopjyw.jpg"), fInfoLevelId=0x0, lpFileInformation=0x21bc9a0 | out: lpFileInformation=0x21bc9a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51ea2a0, ftCreationTime.dwHighDateTime=0x1d45b1d, ftLastAccessTime.dwLowDateTime=0xe4f180d0, ftLastAccessTime.dwHighDateTime=0x1d46592, ftLastWriteTime.dwLowDateTime=0xe4f180d0, ftLastWriteTime.dwHighDateTime=0x1d46592, nFileSizeHigh=0x0, nFileSizeLow=0xcb8c)) returned 1 [0060.133] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0060.133] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\cDYYopjyW.jpg", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\cDYYopjyW.jpg", lpFilePart=0x0) returned 0x33 [0060.133] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0060.133] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\cDYYopjyW.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\cdyyopjyw.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0060.133] GetFileType (hFile=0x444) returned 0x1 [0060.133] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0060.133] GetFileType (hFile=0x444) returned 0x1 [0060.133] ReadFile (in: hFile=0x444, lpBuffer=0x21bed10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be8b8, lpOverlapped=0x0 | out: lpBuffer=0x21bed10*, lpNumberOfBytesRead=0x3be8b8*=0x1000, lpOverlapped=0x0) returned 1 [0060.144] CloseHandle (hObject=0x444) returned 1 [0060.144] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\cDYYopjyW.jpg", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\cDYYopjyW.jpg", lpFilePart=0x0) returned 0x33 [0060.144] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0060.144] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\cDYYopjyW.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\cdyyopjyw.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0060.144] GetFileType (hFile=0x444) returned 0x1 [0060.144] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0060.144] GetFileType (hFile=0x444) returned 0x1 [0060.144] WriteFile (in: hFile=0x444, lpBuffer=0x21bcaa0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be968, lpOverlapped=0x0 | out: lpBuffer=0x21bcaa0*, lpNumberOfBytesWritten=0x3be968*=0x2000, lpOverlapped=0x0) returned 1 [0060.144] CloseHandle (hObject=0x444) returned 1 [0060.145] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\cDYYopjyW.jpg", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\cDYYopjyW.jpg", lpFilePart=0x0) returned 0x33 [0060.145] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\cDYYopjyW.jpg.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\cDYYopjyW.jpg.xuy", lpFilePart=0x0) returned 0x37 [0060.145] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0060.145] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\cDYYopjyW.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\cdyyopjyw.jpg"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51ea2a0, ftCreationTime.dwHighDateTime=0x1d45b1d, ftLastAccessTime.dwLowDateTime=0xe4f180d0, ftLastAccessTime.dwHighDateTime=0x1d46592, ftLastWriteTime.dwLowDateTime=0xfb2880d, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xcb8c)) returned 1 [0060.145] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0060.145] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\cDYYopjyW.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\cdyyopjyw.jpg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\cDYYopjyW.jpg.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\cdyyopjyw.jpg.xuy")) returned 1 [0060.145] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\CNfRGDwaADTpS.flv", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\CNfRGDwaADTpS.flv", lpFilePart=0x0) returned 0x37 [0060.145] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0060.145] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\CNfRGDwaADTpS.flv" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\cnfrgdwaadtps.flv"), fInfoLevelId=0x0, lpFileInformation=0x223b008 | out: lpFileInformation=0x223b008*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5e7a54b0, ftCreationTime.dwHighDateTime=0x1d464c4, ftLastAccessTime.dwLowDateTime=0x673bece0, ftLastAccessTime.dwHighDateTime=0x1d456ef, ftLastWriteTime.dwLowDateTime=0x673bece0, ftLastWriteTime.dwHighDateTime=0x1d456ef, nFileSizeHigh=0x0, nFileSizeLow=0xc371)) returned 1 [0060.146] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0060.146] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\CNfRGDwaADTpS.flv", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\CNfRGDwaADTpS.flv", lpFilePart=0x0) returned 0x37 [0060.146] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0060.146] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\CNfRGDwaADTpS.flv" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\cnfrgdwaadtps.flv"), fInfoLevelId=0x0, lpFileInformation=0x223b138 | out: lpFileInformation=0x223b138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5e7a54b0, ftCreationTime.dwHighDateTime=0x1d464c4, ftLastAccessTime.dwLowDateTime=0x673bece0, ftLastAccessTime.dwHighDateTime=0x1d456ef, ftLastWriteTime.dwLowDateTime=0x673bece0, ftLastWriteTime.dwHighDateTime=0x1d456ef, nFileSizeHigh=0x0, nFileSizeLow=0xc371)) returned 1 [0060.146] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0060.146] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\CNfRGDwaADTpS.flv", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\CNfRGDwaADTpS.flv", lpFilePart=0x0) returned 0x37 [0060.146] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0060.146] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\CNfRGDwaADTpS.flv" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\cnfrgdwaadtps.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0060.146] GetFileType (hFile=0x444) returned 0x1 [0060.146] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0060.146] GetFileType (hFile=0x444) returned 0x1 [0060.146] ReadFile (in: hFile=0x444, lpBuffer=0x223d4c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be8b8, lpOverlapped=0x0 | out: lpBuffer=0x223d4c8*, lpNumberOfBytesRead=0x3be8b8*=0x1000, lpOverlapped=0x0) returned 1 [0060.160] CloseHandle (hObject=0x444) returned 1 [0060.160] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\CNfRGDwaADTpS.flv", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\CNfRGDwaADTpS.flv", lpFilePart=0x0) returned 0x37 [0060.160] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0060.160] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\CNfRGDwaADTpS.flv" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\cnfrgdwaadtps.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0060.161] GetFileType (hFile=0x444) returned 0x1 [0060.161] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0060.161] GetFileType (hFile=0x444) returned 0x1 [0060.161] WriteFile (in: hFile=0x444, lpBuffer=0x223b248*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be968, lpOverlapped=0x0 | out: lpBuffer=0x223b248*, lpNumberOfBytesWritten=0x3be968*=0x2000, lpOverlapped=0x0) returned 1 [0060.161] CloseHandle (hObject=0x444) returned 1 [0060.161] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\CNfRGDwaADTpS.flv", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\CNfRGDwaADTpS.flv", lpFilePart=0x0) returned 0x37 [0060.161] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\CNfRGDwaADTpS.flv.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\CNfRGDwaADTpS.flv.xuy", lpFilePart=0x0) returned 0x3b [0060.161] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0060.161] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\CNfRGDwaADTpS.flv" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\cnfrgdwaadtps.flv"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5e7a54b0, ftCreationTime.dwHighDateTime=0x1d464c4, ftLastAccessTime.dwLowDateTime=0x673bece0, ftLastAccessTime.dwHighDateTime=0x1d456ef, ftLastWriteTime.dwLowDateTime=0xfb4ee06, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xc371)) returned 1 [0060.161] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0060.161] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\CNfRGDwaADTpS.flv" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\cnfrgdwaadtps.flv"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\CNfRGDwaADTpS.flv.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\cnfrgdwaadtps.flv.xuy")) returned 1 [0060.162] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\FMnZT7MP3TB0L3.mp4", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\FMnZT7MP3TB0L3.mp4", lpFilePart=0x0) returned 0x38 [0060.162] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0060.162] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\FMnZT7MP3TB0L3.mp4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\fmnzt7mp3tb0l3.mp4"), fInfoLevelId=0x0, lpFileInformation=0x22b97e8 | out: lpFileInformation=0x22b97e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26c19d10, ftCreationTime.dwHighDateTime=0x1d45922, ftLastAccessTime.dwLowDateTime=0x8e2a9a80, ftLastAccessTime.dwHighDateTime=0x1d45966, ftLastWriteTime.dwLowDateTime=0x8e2a9a80, ftLastWriteTime.dwHighDateTime=0x1d45966, nFileSizeHigh=0x0, nFileSizeLow=0x13ea1)) returned 1 [0060.162] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0060.162] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\FMnZT7MP3TB0L3.mp4", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\FMnZT7MP3TB0L3.mp4", lpFilePart=0x0) returned 0x38 [0060.162] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0060.162] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\FMnZT7MP3TB0L3.mp4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\fmnzt7mp3tb0l3.mp4"), fInfoLevelId=0x0, lpFileInformation=0x22b9920 | out: lpFileInformation=0x22b9920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26c19d10, ftCreationTime.dwHighDateTime=0x1d45922, ftLastAccessTime.dwLowDateTime=0x8e2a9a80, ftLastAccessTime.dwHighDateTime=0x1d45966, ftLastWriteTime.dwLowDateTime=0x8e2a9a80, ftLastWriteTime.dwHighDateTime=0x1d45966, nFileSizeHigh=0x0, nFileSizeLow=0x13ea1)) returned 1 [0060.162] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0060.162] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\FMnZT7MP3TB0L3.mp4", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\FMnZT7MP3TB0L3.mp4", lpFilePart=0x0) returned 0x38 [0060.162] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0060.162] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\FMnZT7MP3TB0L3.mp4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\fmnzt7mp3tb0l3.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0060.162] GetFileType (hFile=0x444) returned 0x1 [0060.163] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0060.163] GetFileType (hFile=0x444) returned 0x1 [0060.163] ReadFile (in: hFile=0x444, lpBuffer=0x22bbcc0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be8b8, lpOverlapped=0x0 | out: lpBuffer=0x22bbcc0*, lpNumberOfBytesRead=0x3be8b8*=0x1000, lpOverlapped=0x0) returned 1 [0060.192] CloseHandle (hObject=0x444) returned 1 [0060.192] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\FMnZT7MP3TB0L3.mp4", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\FMnZT7MP3TB0L3.mp4", lpFilePart=0x0) returned 0x38 [0060.192] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0060.192] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\FMnZT7MP3TB0L3.mp4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\fmnzt7mp3tb0l3.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0060.192] GetFileType (hFile=0x444) returned 0x1 [0060.192] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0060.192] GetFileType (hFile=0x444) returned 0x1 [0060.192] WriteFile (in: hFile=0x444, lpBuffer=0x22b9a38*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be968, lpOverlapped=0x0 | out: lpBuffer=0x22b9a38*, lpNumberOfBytesWritten=0x3be968*=0x2000, lpOverlapped=0x0) returned 1 [0060.192] CloseHandle (hObject=0x444) returned 1 [0060.193] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\FMnZT7MP3TB0L3.mp4", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\FMnZT7MP3TB0L3.mp4", lpFilePart=0x0) returned 0x38 [0060.193] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\FMnZT7MP3TB0L3.mp4.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\FMnZT7MP3TB0L3.mp4.xuy", lpFilePart=0x0) returned 0x3c [0060.193] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0060.193] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\FMnZT7MP3TB0L3.mp4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\fmnzt7mp3tb0l3.mp4"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26c19d10, ftCreationTime.dwHighDateTime=0x1d45922, ftLastAccessTime.dwLowDateTime=0x8e2a9a80, ftLastAccessTime.dwHighDateTime=0x1d45966, ftLastWriteTime.dwLowDateTime=0xfb9ae38, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x13ea1)) returned 1 [0060.193] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0060.193] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\FMnZT7MP3TB0L3.mp4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\fmnzt7mp3tb0l3.mp4"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\FMnZT7MP3TB0L3.mp4.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\fmnzt7mp3tb0l3.mp4.xuy")) returned 1 [0060.193] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Gk8oY7c.wav", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Gk8oY7c.wav", lpFilePart=0x0) returned 0x31 [0060.194] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0060.194] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Gk8oY7c.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\gk8oy7c.wav"), fInfoLevelId=0x0, lpFileInformation=0x2338000 | out: lpFileInformation=0x2338000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85ddb500, ftCreationTime.dwHighDateTime=0x1d45a75, ftLastAccessTime.dwLowDateTime=0x59960120, ftLastAccessTime.dwHighDateTime=0x1d45e29, ftLastWriteTime.dwLowDateTime=0x59960120, ftLastWriteTime.dwHighDateTime=0x1d45e29, nFileSizeHigh=0x0, nFileSizeLow=0x15411)) returned 1 [0060.194] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0060.194] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Gk8oY7c.wav", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Gk8oY7c.wav", lpFilePart=0x0) returned 0x31 [0060.194] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0060.194] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Gk8oY7c.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\gk8oy7c.wav"), fInfoLevelId=0x0, lpFileInformation=0x2338118 | out: lpFileInformation=0x2338118*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85ddb500, ftCreationTime.dwHighDateTime=0x1d45a75, ftLastAccessTime.dwLowDateTime=0x59960120, ftLastAccessTime.dwHighDateTime=0x1d45e29, ftLastWriteTime.dwLowDateTime=0x59960120, ftLastWriteTime.dwHighDateTime=0x1d45e29, nFileSizeHigh=0x0, nFileSizeLow=0x15411)) returned 1 [0060.194] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0060.194] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Gk8oY7c.wav", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Gk8oY7c.wav", lpFilePart=0x0) returned 0x31 [0060.194] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0060.194] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Gk8oY7c.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\gk8oy7c.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0060.194] GetFileType (hFile=0x444) returned 0x1 [0060.194] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0060.194] GetFileType (hFile=0x444) returned 0x1 [0060.194] ReadFile (in: hFile=0x444, lpBuffer=0x233a478, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be8b8, lpOverlapped=0x0 | out: lpBuffer=0x233a478*, lpNumberOfBytesRead=0x3be8b8*=0x1000, lpOverlapped=0x0) returned 1 [0060.243] CloseHandle (hObject=0x444) returned 1 [0060.243] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Gk8oY7c.wav", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Gk8oY7c.wav", lpFilePart=0x0) returned 0x31 [0060.243] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0060.244] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Gk8oY7c.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\gk8oy7c.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0060.244] GetFileType (hFile=0x444) returned 0x1 [0060.244] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0060.244] GetFileType (hFile=0x444) returned 0x1 [0060.244] WriteFile (in: hFile=0x444, lpBuffer=0x215b240*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be968, lpOverlapped=0x0 | out: lpBuffer=0x215b240*, lpNumberOfBytesWritten=0x3be968*=0x2000, lpOverlapped=0x0) returned 1 [0060.244] CloseHandle (hObject=0x444) returned 1 [0060.244] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Gk8oY7c.wav", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Gk8oY7c.wav", lpFilePart=0x0) returned 0x31 [0060.244] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Gk8oY7c.wav.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Gk8oY7c.wav.xuy", lpFilePart=0x0) returned 0x35 [0060.244] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0060.244] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Gk8oY7c.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\gk8oy7c.wav"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85ddb500, ftCreationTime.dwHighDateTime=0x1d45a75, ftLastAccessTime.dwLowDateTime=0x59960120, ftLastAccessTime.dwHighDateTime=0x1d45e29, ftLastWriteTime.dwLowDateTime=0xfc0d616, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x15411)) returned 1 [0060.244] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0060.244] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Gk8oY7c.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\gk8oy7c.wav"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Gk8oY7c.wav.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\gk8oy7c.wav.xuy")) returned 1 [0060.245] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\h5ZE6cD5v9t tme A-G.odt", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\h5ZE6cD5v9t tme A-G.odt", lpFilePart=0x0) returned 0x3d [0060.245] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0060.245] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\h5ZE6cD5v9t tme A-G.odt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\h5ze6cd5v9t tme a-g.odt"), fInfoLevelId=0x0, lpFileInformation=0x21b6750 | out: lpFileInformation=0x21b6750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6329d550, ftCreationTime.dwHighDateTime=0x1d460da, ftLastAccessTime.dwLowDateTime=0xa9ac0ea0, ftLastAccessTime.dwHighDateTime=0x1d46425, ftLastWriteTime.dwLowDateTime=0xa9ac0ea0, ftLastWriteTime.dwHighDateTime=0x1d46425, nFileSizeHigh=0x0, nFileSizeLow=0x11ed5)) returned 1 [0060.246] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0060.246] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\h5ZE6cD5v9t tme A-G.odt", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\h5ZE6cD5v9t tme A-G.odt", lpFilePart=0x0) returned 0x3d [0060.246] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0060.246] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\h5ZE6cD5v9t tme A-G.odt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\h5ze6cd5v9t tme a-g.odt"), fInfoLevelId=0x0, lpFileInformation=0x21b6898 | out: lpFileInformation=0x21b6898*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6329d550, ftCreationTime.dwHighDateTime=0x1d460da, ftLastAccessTime.dwLowDateTime=0xa9ac0ea0, ftLastAccessTime.dwHighDateTime=0x1d46425, ftLastWriteTime.dwLowDateTime=0xa9ac0ea0, ftLastWriteTime.dwHighDateTime=0x1d46425, nFileSizeHigh=0x0, nFileSizeLow=0x11ed5)) returned 1 [0060.246] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0060.246] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\h5ZE6cD5v9t tme A-G.odt", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\h5ZE6cD5v9t tme A-G.odt", lpFilePart=0x0) returned 0x3d [0060.246] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0060.246] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\h5ZE6cD5v9t tme A-G.odt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\h5ze6cd5v9t tme a-g.odt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0060.246] GetFileType (hFile=0x444) returned 0x1 [0060.246] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0060.246] GetFileType (hFile=0x444) returned 0x1 [0060.246] ReadFile (in: hFile=0x444, lpBuffer=0x21b8c58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be8b8, lpOverlapped=0x0 | out: lpBuffer=0x21b8c58*, lpNumberOfBytesRead=0x3be8b8*=0x1000, lpOverlapped=0x0) returned 1 [0060.260] CloseHandle (hObject=0x444) returned 1 [0060.260] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\h5ZE6cD5v9t tme A-G.odt", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\h5ZE6cD5v9t tme A-G.odt", lpFilePart=0x0) returned 0x3d [0060.260] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0060.260] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\h5ZE6cD5v9t tme A-G.odt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\h5ze6cd5v9t tme a-g.odt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0060.260] GetFileType (hFile=0x444) returned 0x1 [0060.260] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0060.261] GetFileType (hFile=0x444) returned 0x1 [0060.261] WriteFile (in: hFile=0x444, lpBuffer=0x21b69c0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be968, lpOverlapped=0x0 | out: lpBuffer=0x21b69c0*, lpNumberOfBytesWritten=0x3be968*=0x2000, lpOverlapped=0x0) returned 1 [0060.261] CloseHandle (hObject=0x444) returned 1 [0060.261] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\h5ZE6cD5v9t tme A-G.odt", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\h5ZE6cD5v9t tme A-G.odt", lpFilePart=0x0) returned 0x3d [0060.261] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\h5ZE6cD5v9t tme A-G.odt.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\h5ZE6cD5v9t tme A-G.odt.xuy", lpFilePart=0x0) returned 0x41 [0060.261] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0060.261] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\h5ZE6cD5v9t tme A-G.odt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\h5ze6cd5v9t tme a-g.odt"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6329d550, ftCreationTime.dwHighDateTime=0x1d460da, ftLastAccessTime.dwLowDateTime=0xa9ac0ea0, ftLastAccessTime.dwHighDateTime=0x1d46425, ftLastWriteTime.dwLowDateTime=0xfc33bb0, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x11ed5)) returned 1 [0060.261] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0060.261] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\h5ZE6cD5v9t tme A-G.odt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\h5ze6cd5v9t tme a-g.odt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\h5ZE6cD5v9t tme A-G.odt.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\h5ze6cd5v9t tme a-g.odt.xuy")) returned 1 [0060.262] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\I4d51v 16zFbNtlE.swf", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\I4d51v 16zFbNtlE.swf", lpFilePart=0x0) returned 0x3a [0060.262] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0060.262] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\I4d51v 16zFbNtlE.swf" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\i4d51v 16zfbntle.swf"), fInfoLevelId=0x0, lpFileInformation=0x2234fc0 | out: lpFileInformation=0x2234fc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed8c0660, ftCreationTime.dwHighDateTime=0x1d461ec, ftLastAccessTime.dwLowDateTime=0x207c3920, ftLastAccessTime.dwHighDateTime=0x1d462bd, ftLastWriteTime.dwLowDateTime=0x207c3920, ftLastWriteTime.dwHighDateTime=0x1d462bd, nFileSizeHigh=0x0, nFileSizeLow=0xf9e8)) returned 1 [0060.262] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0060.262] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\I4d51v 16zFbNtlE.swf", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\I4d51v 16zFbNtlE.swf", lpFilePart=0x0) returned 0x3a [0060.262] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0060.262] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\I4d51v 16zFbNtlE.swf" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\i4d51v 16zfbntle.swf"), fInfoLevelId=0x0, lpFileInformation=0x2235100 | out: lpFileInformation=0x2235100*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed8c0660, ftCreationTime.dwHighDateTime=0x1d461ec, ftLastAccessTime.dwLowDateTime=0x207c3920, ftLastAccessTime.dwHighDateTime=0x1d462bd, ftLastWriteTime.dwLowDateTime=0x207c3920, ftLastWriteTime.dwHighDateTime=0x1d462bd, nFileSizeHigh=0x0, nFileSizeLow=0xf9e8)) returned 1 [0060.262] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0060.262] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\I4d51v 16zFbNtlE.swf", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\I4d51v 16zFbNtlE.swf", lpFilePart=0x0) returned 0x3a [0060.262] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0060.262] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\I4d51v 16zFbNtlE.swf" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\i4d51v 16zfbntle.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0060.262] GetFileType (hFile=0x444) returned 0x1 [0060.262] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0060.262] GetFileType (hFile=0x444) returned 0x1 [0060.262] ReadFile (in: hFile=0x444, lpBuffer=0x22374b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be8b8, lpOverlapped=0x0 | out: lpBuffer=0x22374b0*, lpNumberOfBytesRead=0x3be8b8*=0x1000, lpOverlapped=0x0) returned 1 [0060.273] CloseHandle (hObject=0x444) returned 1 [0060.273] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\I4d51v 16zFbNtlE.swf", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\I4d51v 16zFbNtlE.swf", lpFilePart=0x0) returned 0x3a [0060.273] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0060.273] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\I4d51v 16zFbNtlE.swf" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\i4d51v 16zfbntle.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0060.273] GetFileType (hFile=0x444) returned 0x1 [0060.273] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0060.273] GetFileType (hFile=0x444) returned 0x1 [0060.273] WriteFile (in: hFile=0x444, lpBuffer=0x2235220*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be968, lpOverlapped=0x0 | out: lpBuffer=0x2235220*, lpNumberOfBytesWritten=0x3be968*=0x2000, lpOverlapped=0x0) returned 1 [0060.274] CloseHandle (hObject=0x444) returned 1 [0060.274] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\I4d51v 16zFbNtlE.swf", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\I4d51v 16zFbNtlE.swf", lpFilePart=0x0) returned 0x3a [0060.274] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\I4d51v 16zFbNtlE.swf.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\I4d51v 16zFbNtlE.swf.xuy", lpFilePart=0x0) returned 0x3e [0060.274] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0060.274] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\I4d51v 16zFbNtlE.swf" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\i4d51v 16zfbntle.swf"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed8c0660, ftCreationTime.dwHighDateTime=0x1d461ec, ftLastAccessTime.dwLowDateTime=0x207c3920, ftLastAccessTime.dwHighDateTime=0x1d462bd, ftLastWriteTime.dwLowDateTime=0xfc59a8b, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xf9e8)) returned 1 [0060.274] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0060.274] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\I4d51v 16zFbNtlE.swf" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\i4d51v 16zfbntle.swf"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\I4d51v 16zFbNtlE.swf.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\i4d51v 16zfbntle.swf.xuy")) returned 1 [0060.275] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\IsjTI.flv", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\IsjTI.flv", lpFilePart=0x0) returned 0x2f [0060.275] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0060.275] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\IsjTI.flv" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\isjti.flv"), fInfoLevelId=0x0, lpFileInformation=0x22b37f8 | out: lpFileInformation=0x22b37f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94468900, ftCreationTime.dwHighDateTime=0x1d45bf6, ftLastAccessTime.dwLowDateTime=0x12771bd0, ftLastAccessTime.dwHighDateTime=0x1d46464, ftLastWriteTime.dwLowDateTime=0x12771bd0, ftLastWriteTime.dwHighDateTime=0x1d46464, nFileSizeHigh=0x0, nFileSizeLow=0x7d70)) returned 1 [0060.275] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0060.275] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\IsjTI.flv", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\IsjTI.flv", lpFilePart=0x0) returned 0x2f [0060.275] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0060.275] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\IsjTI.flv" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\isjti.flv"), fInfoLevelId=0x0, lpFileInformation=0x22b3908 | out: lpFileInformation=0x22b3908*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94468900, ftCreationTime.dwHighDateTime=0x1d45bf6, ftLastAccessTime.dwLowDateTime=0x12771bd0, ftLastAccessTime.dwHighDateTime=0x1d46464, ftLastWriteTime.dwLowDateTime=0x12771bd0, ftLastWriteTime.dwHighDateTime=0x1d46464, nFileSizeHigh=0x0, nFileSizeLow=0x7d70)) returned 1 [0060.275] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0060.275] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\IsjTI.flv", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\IsjTI.flv", lpFilePart=0x0) returned 0x2f [0060.275] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0060.275] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\IsjTI.flv" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\isjti.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0060.275] GetFileType (hFile=0x444) returned 0x1 [0060.275] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0060.275] GetFileType (hFile=0x444) returned 0x1 [0060.275] ReadFile (in: hFile=0x444, lpBuffer=0x22b5c58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be8b8, lpOverlapped=0x0 | out: lpBuffer=0x22b5c58*, lpNumberOfBytesRead=0x3be8b8*=0x1000, lpOverlapped=0x0) returned 1 [0060.291] CloseHandle (hObject=0x444) returned 1 [0060.291] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\IsjTI.flv", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\IsjTI.flv", lpFilePart=0x0) returned 0x2f [0060.291] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0060.291] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\IsjTI.flv" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\isjti.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0060.291] GetFileType (hFile=0x444) returned 0x1 [0060.291] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0060.291] GetFileType (hFile=0x444) returned 0x1 [0060.291] WriteFile (in: hFile=0x444, lpBuffer=0x22b39f8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be968, lpOverlapped=0x0 | out: lpBuffer=0x22b39f8*, lpNumberOfBytesWritten=0x3be968*=0x2000, lpOverlapped=0x0) returned 1 [0060.291] CloseHandle (hObject=0x444) returned 1 [0060.291] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\IsjTI.flv", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\IsjTI.flv", lpFilePart=0x0) returned 0x2f [0060.292] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\IsjTI.flv.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\IsjTI.flv.xuy", lpFilePart=0x0) returned 0x33 [0060.292] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0060.292] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\IsjTI.flv" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\isjti.flv"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94468900, ftCreationTime.dwHighDateTime=0x1d45bf6, ftLastAccessTime.dwLowDateTime=0x12771bd0, ftLastAccessTime.dwHighDateTime=0x1d46464, ftLastWriteTime.dwLowDateTime=0xfc7fc7f, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x7d70)) returned 1 [0060.292] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0060.292] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\IsjTI.flv" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\isjti.flv"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\IsjTI.flv.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\isjti.flv.xuy")) returned 1 [0060.292] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\kd_M3jN.ods", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\kd_M3jN.ods", lpFilePart=0x0) returned 0x31 [0060.292] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0060.292] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\kd_M3jN.ods" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\kd_m3jn.ods"), fInfoLevelId=0x0, lpFileInformation=0x2331f28 | out: lpFileInformation=0x2331f28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59257020, ftCreationTime.dwHighDateTime=0x1d459b7, ftLastAccessTime.dwLowDateTime=0x622df50, ftLastAccessTime.dwHighDateTime=0x1d458c4, ftLastWriteTime.dwLowDateTime=0x622df50, ftLastWriteTime.dwHighDateTime=0x1d458c4, nFileSizeHigh=0x0, nFileSizeLow=0x487d)) returned 1 [0060.292] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0060.292] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\kd_M3jN.ods", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\kd_M3jN.ods", lpFilePart=0x0) returned 0x31 [0060.293] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0060.293] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\kd_M3jN.ods" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\kd_m3jn.ods"), fInfoLevelId=0x0, lpFileInformation=0x2332040 | out: lpFileInformation=0x2332040*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59257020, ftCreationTime.dwHighDateTime=0x1d459b7, ftLastAccessTime.dwLowDateTime=0x622df50, ftLastAccessTime.dwHighDateTime=0x1d458c4, ftLastWriteTime.dwLowDateTime=0x622df50, ftLastWriteTime.dwHighDateTime=0x1d458c4, nFileSizeHigh=0x0, nFileSizeLow=0x487d)) returned 1 [0060.293] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0060.293] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\kd_M3jN.ods", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\kd_M3jN.ods", lpFilePart=0x0) returned 0x31 [0060.293] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0060.293] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\kd_M3jN.ods" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\kd_m3jn.ods"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0060.293] GetFileType (hFile=0x444) returned 0x1 [0060.293] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0060.293] GetFileType (hFile=0x444) returned 0x1 [0060.293] ReadFile (in: hFile=0x444, lpBuffer=0x23343a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be8b8, lpOverlapped=0x0 | out: lpBuffer=0x23343a0*, lpNumberOfBytesRead=0x3be8b8*=0x1000, lpOverlapped=0x0) returned 1 [0060.336] CloseHandle (hObject=0x444) returned 1 [0060.336] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\kd_M3jN.ods", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\kd_M3jN.ods", lpFilePart=0x0) returned 0x31 [0060.336] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0060.336] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\kd_M3jN.ods" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\kd_m3jn.ods"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0060.336] GetFileType (hFile=0x444) returned 0x1 [0060.336] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0060.336] GetFileType (hFile=0x444) returned 0x1 [0060.336] WriteFile (in: hFile=0x444, lpBuffer=0x215b240*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be968, lpOverlapped=0x0 | out: lpBuffer=0x215b240*, lpNumberOfBytesWritten=0x3be968*=0x2000, lpOverlapped=0x0) returned 1 [0060.337] CloseHandle (hObject=0x444) returned 1 [0060.337] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\kd_M3jN.ods", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\kd_M3jN.ods", lpFilePart=0x0) returned 0x31 [0060.337] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\kd_M3jN.ods.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\kd_M3jN.ods.xuy", lpFilePart=0x0) returned 0x35 [0060.337] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0060.337] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\kd_M3jN.ods" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\kd_m3jn.ods"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59257020, ftCreationTime.dwHighDateTime=0x1d459b7, ftLastAccessTime.dwLowDateTime=0x622df50, ftLastAccessTime.dwHighDateTime=0x1d458c4, ftLastWriteTime.dwLowDateTime=0xfcf23f0, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x487d)) returned 1 [0060.337] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0060.337] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\kd_M3jN.ods" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\kd_m3jn.ods"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\kd_M3jN.ods.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\kd_m3jn.ods.xuy")) returned 1 [0060.338] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\L5g5B6.wav", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\L5g5B6.wav", lpFilePart=0x0) returned 0x30 [0060.338] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0060.338] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\L5g5B6.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\l5g5b6.wav"), fInfoLevelId=0x0, lpFileInformation=0x21b0680 | out: lpFileInformation=0x21b0680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb57ee870, ftCreationTime.dwHighDateTime=0x1d45853, ftLastAccessTime.dwLowDateTime=0xcdb88690, ftLastAccessTime.dwHighDateTime=0x1d4608b, ftLastWriteTime.dwLowDateTime=0xcdb88690, ftLastWriteTime.dwHighDateTime=0x1d4608b, nFileSizeHigh=0x0, nFileSizeLow=0xce09)) returned 1 [0060.338] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0060.338] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\L5g5B6.wav", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\L5g5B6.wav", lpFilePart=0x0) returned 0x30 [0060.338] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0060.338] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\L5g5B6.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\l5g5b6.wav"), fInfoLevelId=0x0, lpFileInformation=0x21b0798 | out: lpFileInformation=0x21b0798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb57ee870, ftCreationTime.dwHighDateTime=0x1d45853, ftLastAccessTime.dwLowDateTime=0xcdb88690, ftLastAccessTime.dwHighDateTime=0x1d4608b, ftLastWriteTime.dwLowDateTime=0xcdb88690, ftLastWriteTime.dwHighDateTime=0x1d4608b, nFileSizeHigh=0x0, nFileSizeLow=0xce09)) returned 1 [0060.338] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0060.338] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\L5g5B6.wav", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\L5g5B6.wav", lpFilePart=0x0) returned 0x30 [0060.338] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0060.338] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\L5g5B6.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\l5g5b6.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0060.338] GetFileType (hFile=0x444) returned 0x1 [0060.338] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0060.338] GetFileType (hFile=0x444) returned 0x1 [0060.338] ReadFile (in: hFile=0x444, lpBuffer=0x21b2af8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be8b8, lpOverlapped=0x0 | out: lpBuffer=0x21b2af8*, lpNumberOfBytesRead=0x3be8b8*=0x1000, lpOverlapped=0x0) returned 1 [0060.349] CloseHandle (hObject=0x444) returned 1 [0060.349] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\L5g5B6.wav", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\L5g5B6.wav", lpFilePart=0x0) returned 0x30 [0060.349] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0060.349] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\L5g5B6.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\l5g5b6.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0060.349] GetFileType (hFile=0x444) returned 0x1 [0060.349] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0060.350] GetFileType (hFile=0x444) returned 0x1 [0060.350] WriteFile (in: hFile=0x444, lpBuffer=0x21b0890*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be968, lpOverlapped=0x0 | out: lpBuffer=0x21b0890*, lpNumberOfBytesWritten=0x3be968*=0x2000, lpOverlapped=0x0) returned 1 [0060.350] CloseHandle (hObject=0x444) returned 1 [0060.350] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\L5g5B6.wav", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\L5g5B6.wav", lpFilePart=0x0) returned 0x30 [0060.350] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\L5g5B6.wav.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\L5g5B6.wav.xuy", lpFilePart=0x0) returned 0x34 [0060.350] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0060.350] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\L5g5B6.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\l5g5b6.wav"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb57ee870, ftCreationTime.dwHighDateTime=0x1d45853, ftLastAccessTime.dwLowDateTime=0xcdb88690, ftLastAccessTime.dwHighDateTime=0x1d4608b, ftLastWriteTime.dwLowDateTime=0xfd186e9, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xce09)) returned 1 [0060.350] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0060.350] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\L5g5B6.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\l5g5b6.wav"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\L5g5B6.wav.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\l5g5b6.wav.xuy")) returned 1 [0060.351] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\N2k0nehPI_DPwMxo.pdf", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\N2k0nehPI_DPwMxo.pdf", lpFilePart=0x0) returned 0x3a [0060.351] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0060.351] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\N2k0nehPI_DPwMxo.pdf" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\n2k0nehpi_dpwmxo.pdf"), fInfoLevelId=0x0, lpFileInformation=0x222ede8 | out: lpFileInformation=0x222ede8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a491840, ftCreationTime.dwHighDateTime=0x1d464ca, ftLastAccessTime.dwLowDateTime=0xb87a5350, ftLastAccessTime.dwHighDateTime=0x1d45ab2, ftLastWriteTime.dwLowDateTime=0xb87a5350, ftLastWriteTime.dwHighDateTime=0x1d45ab2, nFileSizeHigh=0x0, nFileSizeLow=0x11d8f)) returned 1 [0060.351] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0060.351] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\N2k0nehPI_DPwMxo.pdf", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\N2k0nehPI_DPwMxo.pdf", lpFilePart=0x0) returned 0x3a [0060.351] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0060.351] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\N2k0nehPI_DPwMxo.pdf" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\n2k0nehpi_dpwmxo.pdf"), fInfoLevelId=0x0, lpFileInformation=0x222ef28 | out: lpFileInformation=0x222ef28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a491840, ftCreationTime.dwHighDateTime=0x1d464ca, ftLastAccessTime.dwLowDateTime=0xb87a5350, ftLastAccessTime.dwHighDateTime=0x1d45ab2, ftLastWriteTime.dwLowDateTime=0xb87a5350, ftLastWriteTime.dwHighDateTime=0x1d45ab2, nFileSizeHigh=0x0, nFileSizeLow=0x11d8f)) returned 1 [0060.351] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0060.351] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\N2k0nehPI_DPwMxo.pdf", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\N2k0nehPI_DPwMxo.pdf", lpFilePart=0x0) returned 0x3a [0060.351] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0060.351] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\N2k0nehPI_DPwMxo.pdf" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\n2k0nehpi_dpwmxo.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0060.352] GetFileType (hFile=0x444) returned 0x1 [0060.352] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0060.352] GetFileType (hFile=0x444) returned 0x1 [0060.352] ReadFile (in: hFile=0x444, lpBuffer=0x22312d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be8b8, lpOverlapped=0x0 | out: lpBuffer=0x22312d8*, lpNumberOfBytesRead=0x3be8b8*=0x1000, lpOverlapped=0x0) returned 1 [0060.362] CloseHandle (hObject=0x444) returned 1 [0060.362] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\N2k0nehPI_DPwMxo.pdf", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\N2k0nehPI_DPwMxo.pdf", lpFilePart=0x0) returned 0x3a [0060.362] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0060.362] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\N2k0nehPI_DPwMxo.pdf" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\n2k0nehpi_dpwmxo.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0060.363] GetFileType (hFile=0x444) returned 0x1 [0060.363] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0060.363] GetFileType (hFile=0x444) returned 0x1 [0060.363] WriteFile (in: hFile=0x444, lpBuffer=0x222f048*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be968, lpOverlapped=0x0 | out: lpBuffer=0x222f048*, lpNumberOfBytesWritten=0x3be968*=0x2000, lpOverlapped=0x0) returned 1 [0060.363] CloseHandle (hObject=0x444) returned 1 [0060.363] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\N2k0nehPI_DPwMxo.pdf", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\N2k0nehPI_DPwMxo.pdf", lpFilePart=0x0) returned 0x3a [0060.363] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\N2k0nehPI_DPwMxo.pdf.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\N2k0nehPI_DPwMxo.pdf.xuy", lpFilePart=0x0) returned 0x3e [0060.363] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0060.363] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\N2k0nehPI_DPwMxo.pdf" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\n2k0nehpi_dpwmxo.pdf"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a491840, ftCreationTime.dwHighDateTime=0x1d464ca, ftLastAccessTime.dwLowDateTime=0xb87a5350, ftLastAccessTime.dwHighDateTime=0x1d45ab2, ftLastWriteTime.dwLowDateTime=0xfd3e913, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x11d8f)) returned 1 [0060.363] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0060.363] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\N2k0nehPI_DPwMxo.pdf" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\n2k0nehpi_dpwmxo.pdf"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\N2k0nehPI_DPwMxo.pdf.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\n2k0nehpi_dpwmxo.pdf.xuy")) returned 1 [0060.366] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\NpFxNoNsr7bqD.m4a", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\NpFxNoNsr7bqD.m4a", lpFilePart=0x0) returned 0x37 [0060.366] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0060.366] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\NpFxNoNsr7bqD.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\npfxnonsr7bqd.m4a"), fInfoLevelId=0x0, lpFileInformation=0x22ad620 | out: lpFileInformation=0x22ad620*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7559d0, ftCreationTime.dwHighDateTime=0x1d45a84, ftLastAccessTime.dwLowDateTime=0x6fbcead0, ftLastAccessTime.dwHighDateTime=0x1d4624e, ftLastWriteTime.dwLowDateTime=0x6fbcead0, ftLastWriteTime.dwHighDateTime=0x1d4624e, nFileSizeHigh=0x0, nFileSizeLow=0xf2e9)) returned 1 [0060.366] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0060.366] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\NpFxNoNsr7bqD.m4a", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\NpFxNoNsr7bqD.m4a", lpFilePart=0x0) returned 0x37 [0060.366] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0060.366] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\NpFxNoNsr7bqD.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\npfxnonsr7bqd.m4a"), fInfoLevelId=0x0, lpFileInformation=0x22ad750 | out: lpFileInformation=0x22ad750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7559d0, ftCreationTime.dwHighDateTime=0x1d45a84, ftLastAccessTime.dwLowDateTime=0x6fbcead0, ftLastAccessTime.dwHighDateTime=0x1d4624e, ftLastWriteTime.dwLowDateTime=0x6fbcead0, ftLastWriteTime.dwHighDateTime=0x1d4624e, nFileSizeHigh=0x0, nFileSizeLow=0xf2e9)) returned 1 [0060.366] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0060.366] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\NpFxNoNsr7bqD.m4a", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\NpFxNoNsr7bqD.m4a", lpFilePart=0x0) returned 0x37 [0060.367] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0060.367] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\NpFxNoNsr7bqD.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\npfxnonsr7bqd.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0060.367] GetFileType (hFile=0x444) returned 0x1 [0060.367] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0060.367] GetFileType (hFile=0x444) returned 0x1 [0060.367] ReadFile (in: hFile=0x444, lpBuffer=0x22afae0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be8b8, lpOverlapped=0x0 | out: lpBuffer=0x22afae0*, lpNumberOfBytesRead=0x3be8b8*=0x1000, lpOverlapped=0x0) returned 1 [0060.391] CloseHandle (hObject=0x444) returned 1 [0060.391] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\NpFxNoNsr7bqD.m4a", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\NpFxNoNsr7bqD.m4a", lpFilePart=0x0) returned 0x37 [0060.391] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0060.391] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\NpFxNoNsr7bqD.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\npfxnonsr7bqd.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0060.391] GetFileType (hFile=0x444) returned 0x1 [0060.391] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0060.391] GetFileType (hFile=0x444) returned 0x1 [0060.391] WriteFile (in: hFile=0x444, lpBuffer=0x22ad860*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be968, lpOverlapped=0x0 | out: lpBuffer=0x22ad860*, lpNumberOfBytesWritten=0x3be968*=0x2000, lpOverlapped=0x0) returned 1 [0060.392] CloseHandle (hObject=0x444) returned 1 [0060.392] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\NpFxNoNsr7bqD.m4a", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\NpFxNoNsr7bqD.m4a", lpFilePart=0x0) returned 0x37 [0060.392] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\NpFxNoNsr7bqD.m4a.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\NpFxNoNsr7bqD.m4a.xuy", lpFilePart=0x0) returned 0x3b [0060.392] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0060.392] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\NpFxNoNsr7bqD.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\npfxnonsr7bqd.m4a"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7559d0, ftCreationTime.dwHighDateTime=0x1d45a84, ftLastAccessTime.dwLowDateTime=0x6fbcead0, ftLastAccessTime.dwHighDateTime=0x1d4624e, ftLastWriteTime.dwLowDateTime=0xfd8ad35, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xf2e9)) returned 1 [0060.392] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0060.392] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\NpFxNoNsr7bqD.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\npfxnonsr7bqd.m4a"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\NpFxNoNsr7bqD.m4a.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\npfxnonsr7bqd.m4a.xuy")) returned 1 [0060.393] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\okHmUs.wav", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\okHmUs.wav", lpFilePart=0x0) returned 0x30 [0060.393] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0060.393] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\okHmUs.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\okhmus.wav"), fInfoLevelId=0x0, lpFileInformation=0x232be00 | out: lpFileInformation=0x232be00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23c25980, ftCreationTime.dwHighDateTime=0x1d45ff6, ftLastAccessTime.dwLowDateTime=0xca0c8800, ftLastAccessTime.dwHighDateTime=0x1d460ab, ftLastWriteTime.dwLowDateTime=0xca0c8800, ftLastWriteTime.dwHighDateTime=0x1d460ab, nFileSizeHigh=0x0, nFileSizeLow=0x4ebc)) returned 1 [0060.393] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0060.393] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\okHmUs.wav", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\okHmUs.wav", lpFilePart=0x0) returned 0x30 [0060.393] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0060.393] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\okHmUs.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\okhmus.wav"), fInfoLevelId=0x0, lpFileInformation=0x232bf18 | out: lpFileInformation=0x232bf18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23c25980, ftCreationTime.dwHighDateTime=0x1d45ff6, ftLastAccessTime.dwLowDateTime=0xca0c8800, ftLastAccessTime.dwHighDateTime=0x1d460ab, ftLastWriteTime.dwLowDateTime=0xca0c8800, ftLastWriteTime.dwHighDateTime=0x1d460ab, nFileSizeHigh=0x0, nFileSizeLow=0x4ebc)) returned 1 [0060.393] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0060.393] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\okHmUs.wav", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\okHmUs.wav", lpFilePart=0x0) returned 0x30 [0060.393] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0060.393] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\okHmUs.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\okhmus.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0060.393] GetFileType (hFile=0x444) returned 0x1 [0060.393] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0060.393] GetFileType (hFile=0x444) returned 0x1 [0060.393] ReadFile (in: hFile=0x444, lpBuffer=0x232e278, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be8b8, lpOverlapped=0x0 | out: lpBuffer=0x232e278*, lpNumberOfBytesRead=0x3be8b8*=0x1000, lpOverlapped=0x0) returned 1 [0060.433] CloseHandle (hObject=0x444) returned 1 [0060.434] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\okHmUs.wav", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\okHmUs.wav", lpFilePart=0x0) returned 0x30 [0060.434] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0060.434] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\okHmUs.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\okhmus.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0060.434] GetFileType (hFile=0x444) returned 0x1 [0060.434] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0060.434] GetFileType (hFile=0x444) returned 0x1 [0060.434] WriteFile (in: hFile=0x444, lpBuffer=0x215b240*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be968, lpOverlapped=0x0 | out: lpBuffer=0x215b240*, lpNumberOfBytesWritten=0x3be968*=0x2000, lpOverlapped=0x0) returned 1 [0060.434] CloseHandle (hObject=0x444) returned 1 [0060.434] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\okHmUs.wav", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\okHmUs.wav", lpFilePart=0x0) returned 0x30 [0060.434] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\okHmUs.wav.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\okHmUs.wav.xuy", lpFilePart=0x0) returned 0x34 [0060.434] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0060.434] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\okHmUs.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\okhmus.wav"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23c25980, ftCreationTime.dwHighDateTime=0x1d45ff6, ftLastAccessTime.dwLowDateTime=0xca0c8800, ftLastAccessTime.dwHighDateTime=0x1d460ab, ftLastWriteTime.dwLowDateTime=0xfdd71df, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x4ebc)) returned 1 [0060.435] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0060.435] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\okHmUs.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\okhmus.wav"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\okHmUs.wav.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\okhmus.wav.xuy")) returned 1 [0060.445] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\pFxvyS9.avi", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\pFxvyS9.avi", lpFilePart=0x0) returned 0x31 [0060.445] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0060.445] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\pFxvyS9.avi" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\pfxvys9.avi"), fInfoLevelId=0x0, lpFileInformation=0x21aa540 | out: lpFileInformation=0x21aa540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd458560, ftCreationTime.dwHighDateTime=0x1d45e81, ftLastAccessTime.dwLowDateTime=0x398e5a80, ftLastAccessTime.dwHighDateTime=0x1d45cdf, ftLastWriteTime.dwLowDateTime=0x398e5a80, ftLastWriteTime.dwHighDateTime=0x1d45cdf, nFileSizeHigh=0x0, nFileSizeLow=0x110ff)) returned 1 [0060.445] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0060.445] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\pFxvyS9.avi", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\pFxvyS9.avi", lpFilePart=0x0) returned 0x31 [0060.445] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0060.445] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\pFxvyS9.avi" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\pfxvys9.avi"), fInfoLevelId=0x0, lpFileInformation=0x21aa658 | out: lpFileInformation=0x21aa658*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd458560, ftCreationTime.dwHighDateTime=0x1d45e81, ftLastAccessTime.dwLowDateTime=0x398e5a80, ftLastAccessTime.dwHighDateTime=0x1d45cdf, ftLastWriteTime.dwLowDateTime=0x398e5a80, ftLastWriteTime.dwHighDateTime=0x1d45cdf, nFileSizeHigh=0x0, nFileSizeLow=0x110ff)) returned 1 [0060.445] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0060.445] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\pFxvyS9.avi", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\pFxvyS9.avi", lpFilePart=0x0) returned 0x31 [0060.445] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0060.446] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\pFxvyS9.avi" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\pfxvys9.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0060.446] GetFileType (hFile=0x444) returned 0x1 [0060.446] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0060.446] GetFileType (hFile=0x444) returned 0x1 [0060.446] ReadFile (in: hFile=0x444, lpBuffer=0x21ac9b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be8b8, lpOverlapped=0x0 | out: lpBuffer=0x21ac9b8*, lpNumberOfBytesRead=0x3be8b8*=0x1000, lpOverlapped=0x0) returned 1 [0060.458] CloseHandle (hObject=0x444) returned 1 [0060.458] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\pFxvyS9.avi", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\pFxvyS9.avi", lpFilePart=0x0) returned 0x31 [0060.458] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0060.458] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\pFxvyS9.avi" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\pfxvys9.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0060.459] GetFileType (hFile=0x444) returned 0x1 [0060.459] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0060.459] GetFileType (hFile=0x444) returned 0x1 [0060.459] WriteFile (in: hFile=0x444, lpBuffer=0x21aa750*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be968, lpOverlapped=0x0 | out: lpBuffer=0x21aa750*, lpNumberOfBytesWritten=0x3be968*=0x2000, lpOverlapped=0x0) returned 1 [0060.459] CloseHandle (hObject=0x444) returned 1 [0060.459] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\pFxvyS9.avi", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\pFxvyS9.avi", lpFilePart=0x0) returned 0x31 [0060.459] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\pFxvyS9.avi.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\pFxvyS9.avi.xuy", lpFilePart=0x0) returned 0x35 [0060.459] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0060.459] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\pFxvyS9.avi" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\pfxvys9.avi"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd458560, ftCreationTime.dwHighDateTime=0x1d45e81, ftLastAccessTime.dwLowDateTime=0x398e5a80, ftLastAccessTime.dwHighDateTime=0x1d45cdf, ftLastWriteTime.dwLowDateTime=0xfe2372a, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x110ff)) returned 1 [0060.459] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0060.459] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\pFxvyS9.avi" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\pfxvys9.avi"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\pFxvyS9.avi.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\pfxvys9.avi.xuy")) returned 1 [0060.460] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\poXHT9xhAcrp0Yo.mp3", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\poXHT9xhAcrp0Yo.mp3", lpFilePart=0x0) returned 0x39 [0060.460] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0060.460] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\poXHT9xhAcrp0Yo.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\poxht9xhacrp0yo.mp3"), fInfoLevelId=0x0, lpFileInformation=0x2228ca8 | out: lpFileInformation=0x2228ca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x729fb380, ftCreationTime.dwHighDateTime=0x1d45abb, ftLastAccessTime.dwLowDateTime=0xd80e1500, ftLastAccessTime.dwHighDateTime=0x1d46087, ftLastWriteTime.dwLowDateTime=0xd80e1500, ftLastWriteTime.dwHighDateTime=0x1d46087, nFileSizeHigh=0x0, nFileSizeLow=0xcf29)) returned 1 [0060.460] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0060.460] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\poXHT9xhAcrp0Yo.mp3", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\poXHT9xhAcrp0Yo.mp3", lpFilePart=0x0) returned 0x39 [0060.460] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0060.460] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\poXHT9xhAcrp0Yo.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\poxht9xhacrp0yo.mp3"), fInfoLevelId=0x0, lpFileInformation=0x2228de0 | out: lpFileInformation=0x2228de0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x729fb380, ftCreationTime.dwHighDateTime=0x1d45abb, ftLastAccessTime.dwLowDateTime=0xd80e1500, ftLastAccessTime.dwHighDateTime=0x1d46087, ftLastWriteTime.dwLowDateTime=0xd80e1500, ftLastWriteTime.dwHighDateTime=0x1d46087, nFileSizeHigh=0x0, nFileSizeLow=0xcf29)) returned 1 [0060.460] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0060.460] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\poXHT9xhAcrp0Yo.mp3", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\poXHT9xhAcrp0Yo.mp3", lpFilePart=0x0) returned 0x39 [0060.460] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0060.460] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\poXHT9xhAcrp0Yo.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\poxht9xhacrp0yo.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0060.460] GetFileType (hFile=0x444) returned 0x1 [0060.460] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0060.461] GetFileType (hFile=0x444) returned 0x1 [0060.461] ReadFile (in: hFile=0x444, lpBuffer=0x222b180, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be8b8, lpOverlapped=0x0 | out: lpBuffer=0x222b180*, lpNumberOfBytesRead=0x3be8b8*=0x1000, lpOverlapped=0x0) returned 1 [0060.472] CloseHandle (hObject=0x444) returned 1 [0060.472] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\poXHT9xhAcrp0Yo.mp3", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\poXHT9xhAcrp0Yo.mp3", lpFilePart=0x0) returned 0x39 [0060.472] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0060.472] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\poXHT9xhAcrp0Yo.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\poxht9xhacrp0yo.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0060.472] GetFileType (hFile=0x444) returned 0x1 [0060.472] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0060.472] GetFileType (hFile=0x444) returned 0x1 [0060.472] WriteFile (in: hFile=0x444, lpBuffer=0x2228ef8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be968, lpOverlapped=0x0 | out: lpBuffer=0x2228ef8*, lpNumberOfBytesWritten=0x3be968*=0x2000, lpOverlapped=0x0) returned 1 [0060.472] CloseHandle (hObject=0x444) returned 1 [0060.472] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\poXHT9xhAcrp0Yo.mp3", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\poXHT9xhAcrp0Yo.mp3", lpFilePart=0x0) returned 0x39 [0060.473] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\poXHT9xhAcrp0Yo.mp3.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\poXHT9xhAcrp0Yo.mp3.xuy", lpFilePart=0x0) returned 0x3d [0060.473] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0060.473] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\poXHT9xhAcrp0Yo.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\poxht9xhacrp0yo.mp3"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x729fb380, ftCreationTime.dwHighDateTime=0x1d45abb, ftLastAccessTime.dwLowDateTime=0xd80e1500, ftLastAccessTime.dwHighDateTime=0x1d46087, ftLastWriteTime.dwLowDateTime=0xfe49c30, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xcf29)) returned 1 [0060.473] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0060.473] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\poXHT9xhAcrp0Yo.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\poxht9xhacrp0yo.mp3"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\poXHT9xhAcrp0Yo.mp3.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\poxht9xhacrp0yo.mp3.xuy")) returned 1 [0060.473] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Qa7KN-vTbOI6h.jpg", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Qa7KN-vTbOI6h.jpg", lpFilePart=0x0) returned 0x37 [0060.473] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0060.473] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Qa7KN-vTbOI6h.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\qa7kn-vtboi6h.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22a74c0 | out: lpFileInformation=0x22a74c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0893c70, ftCreationTime.dwHighDateTime=0x1d46132, ftLastAccessTime.dwLowDateTime=0xeb0de6f0, ftLastAccessTime.dwHighDateTime=0x1d4567b, ftLastWriteTime.dwLowDateTime=0xeb0de6f0, ftLastWriteTime.dwHighDateTime=0x1d4567b, nFileSizeHigh=0x0, nFileSizeLow=0x17e51)) returned 1 [0060.473] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0060.473] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Qa7KN-vTbOI6h.jpg", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Qa7KN-vTbOI6h.jpg", lpFilePart=0x0) returned 0x37 [0060.473] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0060.474] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Qa7KN-vTbOI6h.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\qa7kn-vtboi6h.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22a75f0 | out: lpFileInformation=0x22a75f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0893c70, ftCreationTime.dwHighDateTime=0x1d46132, ftLastAccessTime.dwLowDateTime=0xeb0de6f0, ftLastAccessTime.dwHighDateTime=0x1d4567b, ftLastWriteTime.dwLowDateTime=0xeb0de6f0, ftLastWriteTime.dwHighDateTime=0x1d4567b, nFileSizeHigh=0x0, nFileSizeLow=0x17e51)) returned 1 [0060.474] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0060.474] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Qa7KN-vTbOI6h.jpg", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Qa7KN-vTbOI6h.jpg", lpFilePart=0x0) returned 0x37 [0060.474] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0060.474] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Qa7KN-vTbOI6h.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\qa7kn-vtboi6h.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0060.474] GetFileType (hFile=0x444) returned 0x1 [0060.474] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0060.474] GetFileType (hFile=0x444) returned 0x1 [0060.474] ReadFile (in: hFile=0x444, lpBuffer=0x22a9980, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be8b8, lpOverlapped=0x0 | out: lpBuffer=0x22a9980*, lpNumberOfBytesRead=0x3be8b8*=0x1000, lpOverlapped=0x0) returned 1 [0060.497] CloseHandle (hObject=0x444) returned 1 [0060.497] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Qa7KN-vTbOI6h.jpg", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Qa7KN-vTbOI6h.jpg", lpFilePart=0x0) returned 0x37 [0060.497] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0060.516] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Qa7KN-vTbOI6h.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\qa7kn-vtboi6h.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0060.516] GetFileType (hFile=0x444) returned 0x1 [0060.516] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0060.516] GetFileType (hFile=0x444) returned 0x1 [0060.516] WriteFile (in: hFile=0x444, lpBuffer=0x22a7700*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be968, lpOverlapped=0x0 | out: lpBuffer=0x22a7700*, lpNumberOfBytesWritten=0x3be968*=0x2000, lpOverlapped=0x0) returned 1 [0060.516] CloseHandle (hObject=0x444) returned 1 [0060.516] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Qa7KN-vTbOI6h.jpg", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Qa7KN-vTbOI6h.jpg", lpFilePart=0x0) returned 0x37 [0060.516] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Qa7KN-vTbOI6h.jpg.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Qa7KN-vTbOI6h.jpg.xuy", lpFilePart=0x0) returned 0x3b [0060.517] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0060.517] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Qa7KN-vTbOI6h.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\qa7kn-vtboi6h.jpg"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0893c70, ftCreationTime.dwHighDateTime=0x1d46132, ftLastAccessTime.dwLowDateTime=0xeb0de6f0, ftLastAccessTime.dwHighDateTime=0x1d4567b, ftLastWriteTime.dwLowDateTime=0xfebbf63, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x17e51)) returned 1 [0060.517] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0060.517] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Qa7KN-vTbOI6h.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\qa7kn-vtboi6h.jpg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Qa7KN-vTbOI6h.jpg.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\qa7kn-vtboi6h.jpg.xuy")) returned 1 [0060.517] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\rK5x2F.wav", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\rK5x2F.wav", lpFilePart=0x0) returned 0x30 [0060.517] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0060.517] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\rK5x2F.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\rk5x2f.wav"), fInfoLevelId=0x0, lpFileInformation=0x2325ca0 | out: lpFileInformation=0x2325ca0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e4d6fc0, ftCreationTime.dwHighDateTime=0x1d4628a, ftLastAccessTime.dwLowDateTime=0x5bef9d90, ftLastAccessTime.dwHighDateTime=0x1d45c31, ftLastWriteTime.dwLowDateTime=0x5bef9d90, ftLastWriteTime.dwHighDateTime=0x1d45c31, nFileSizeHigh=0x0, nFileSizeLow=0xac7f)) returned 1 [0060.518] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0060.518] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\rK5x2F.wav", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\rK5x2F.wav", lpFilePart=0x0) returned 0x30 [0060.518] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0060.518] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\rK5x2F.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\rk5x2f.wav"), fInfoLevelId=0x0, lpFileInformation=0x2325db8 | out: lpFileInformation=0x2325db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e4d6fc0, ftCreationTime.dwHighDateTime=0x1d4628a, ftLastAccessTime.dwLowDateTime=0x5bef9d90, ftLastAccessTime.dwHighDateTime=0x1d45c31, ftLastWriteTime.dwLowDateTime=0x5bef9d90, ftLastWriteTime.dwHighDateTime=0x1d45c31, nFileSizeHigh=0x0, nFileSizeLow=0xac7f)) returned 1 [0060.518] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0060.518] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\rK5x2F.wav", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\rK5x2F.wav", lpFilePart=0x0) returned 0x30 [0060.518] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0060.518] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\rK5x2F.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\rk5x2f.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0060.518] GetFileType (hFile=0x444) returned 0x1 [0060.518] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0060.518] GetFileType (hFile=0x444) returned 0x1 [0060.518] ReadFile (in: hFile=0x444, lpBuffer=0x2328118, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be8b8, lpOverlapped=0x0 | out: lpBuffer=0x2328118*, lpNumberOfBytesRead=0x3be8b8*=0x1000, lpOverlapped=0x0) returned 1 [0060.570] CloseHandle (hObject=0x444) returned 1 [0060.570] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\rK5x2F.wav", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\rK5x2F.wav", lpFilePart=0x0) returned 0x30 [0060.570] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0060.570] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\rK5x2F.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\rk5x2f.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0060.570] GetFileType (hFile=0x444) returned 0x1 [0060.570] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0060.570] GetFileType (hFile=0x444) returned 0x1 [0060.570] WriteFile (in: hFile=0x444, lpBuffer=0x215b240*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be968, lpOverlapped=0x0 | out: lpBuffer=0x215b240*, lpNumberOfBytesWritten=0x3be968*=0x2000, lpOverlapped=0x0) returned 1 [0060.571] CloseHandle (hObject=0x444) returned 1 [0060.571] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\rK5x2F.wav", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\rK5x2F.wav", lpFilePart=0x0) returned 0x30 [0060.571] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\rK5x2F.wav.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\rK5x2F.wav.xuy", lpFilePart=0x0) returned 0x34 [0060.571] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0060.571] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\rK5x2F.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\rk5x2f.wav"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e4d6fc0, ftCreationTime.dwHighDateTime=0x1d4628a, ftLastAccessTime.dwLowDateTime=0x5bef9d90, ftLastAccessTime.dwHighDateTime=0x1d45c31, ftLastWriteTime.dwLowDateTime=0xff2e912, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xac7f)) returned 1 [0060.571] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0060.571] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\rK5x2F.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\rk5x2f.wav"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\rK5x2F.wav.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\rk5x2f.wav.xuy")) returned 1 [0060.572] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\RrmS7r.wav", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\RrmS7r.wav", lpFilePart=0x0) returned 0x30 [0060.572] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0060.572] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\RrmS7r.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\rrms7r.wav"), fInfoLevelId=0x0, lpFileInformation=0x21a43f0 | out: lpFileInformation=0x21a43f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99c37a40, ftCreationTime.dwHighDateTime=0x1d464da, ftLastAccessTime.dwLowDateTime=0xe6b95920, ftLastAccessTime.dwHighDateTime=0x1d45ac9, ftLastWriteTime.dwLowDateTime=0xe6b95920, ftLastWriteTime.dwHighDateTime=0x1d45ac9, nFileSizeHigh=0x0, nFileSizeLow=0xb5d1)) returned 1 [0060.572] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0060.572] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\RrmS7r.wav", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\RrmS7r.wav", lpFilePart=0x0) returned 0x30 [0060.572] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0060.572] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\RrmS7r.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\rrms7r.wav"), fInfoLevelId=0x0, lpFileInformation=0x21a4508 | out: lpFileInformation=0x21a4508*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99c37a40, ftCreationTime.dwHighDateTime=0x1d464da, ftLastAccessTime.dwLowDateTime=0xe6b95920, ftLastAccessTime.dwHighDateTime=0x1d45ac9, ftLastWriteTime.dwLowDateTime=0xe6b95920, ftLastWriteTime.dwHighDateTime=0x1d45ac9, nFileSizeHigh=0x0, nFileSizeLow=0xb5d1)) returned 1 [0060.572] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0060.572] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\RrmS7r.wav", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\RrmS7r.wav", lpFilePart=0x0) returned 0x30 [0060.572] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0060.572] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\RrmS7r.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\rrms7r.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0060.572] GetFileType (hFile=0x444) returned 0x1 [0060.572] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0060.572] GetFileType (hFile=0x444) returned 0x1 [0060.572] ReadFile (in: hFile=0x444, lpBuffer=0x21a6868, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be8b8, lpOverlapped=0x0 | out: lpBuffer=0x21a6868*, lpNumberOfBytesRead=0x3be8b8*=0x1000, lpOverlapped=0x0) returned 1 [0060.583] CloseHandle (hObject=0x444) returned 1 [0060.583] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\RrmS7r.wav", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\RrmS7r.wav", lpFilePart=0x0) returned 0x30 [0060.583] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0060.583] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\RrmS7r.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\rrms7r.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0060.584] GetFileType (hFile=0x444) returned 0x1 [0060.584] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0060.584] GetFileType (hFile=0x444) returned 0x1 [0060.584] WriteFile (in: hFile=0x444, lpBuffer=0x21a4600*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be968, lpOverlapped=0x0 | out: lpBuffer=0x21a4600*, lpNumberOfBytesWritten=0x3be968*=0x2000, lpOverlapped=0x0) returned 1 [0060.584] CloseHandle (hObject=0x444) returned 1 [0060.584] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\RrmS7r.wav", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\RrmS7r.wav", lpFilePart=0x0) returned 0x30 [0060.584] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\RrmS7r.wav.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\RrmS7r.wav.xuy", lpFilePart=0x0) returned 0x34 [0060.584] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0060.584] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\RrmS7r.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\rrms7r.wav"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99c37a40, ftCreationTime.dwHighDateTime=0x1d464da, ftLastAccessTime.dwLowDateTime=0xe6b95920, ftLastAccessTime.dwHighDateTime=0x1d45ac9, ftLastWriteTime.dwLowDateTime=0xff54cb1, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xb5d1)) returned 1 [0060.584] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0060.584] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\RrmS7r.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\rrms7r.wav"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\RrmS7r.wav.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\rrms7r.wav.xuy")) returned 1 [0060.585] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\shyNwC.avi", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\shyNwC.avi", lpFilePart=0x0) returned 0x30 [0060.585] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0060.585] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\shyNwC.avi" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\shynwc.avi"), fInfoLevelId=0x0, lpFileInformation=0x2222b58 | out: lpFileInformation=0x2222b58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5fd0420, ftCreationTime.dwHighDateTime=0x1d45c20, ftLastAccessTime.dwLowDateTime=0xd4ceaa0, ftLastAccessTime.dwHighDateTime=0x1d46003, ftLastWriteTime.dwLowDateTime=0xd4ceaa0, ftLastWriteTime.dwHighDateTime=0x1d46003, nFileSizeHigh=0x0, nFileSizeLow=0xcf82)) returned 1 [0060.585] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0060.585] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\shyNwC.avi", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\shyNwC.avi", lpFilePart=0x0) returned 0x30 [0060.585] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0060.585] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\shyNwC.avi" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\shynwc.avi"), fInfoLevelId=0x0, lpFileInformation=0x2222c70 | out: lpFileInformation=0x2222c70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5fd0420, ftCreationTime.dwHighDateTime=0x1d45c20, ftLastAccessTime.dwLowDateTime=0xd4ceaa0, ftLastAccessTime.dwHighDateTime=0x1d46003, ftLastWriteTime.dwLowDateTime=0xd4ceaa0, ftLastWriteTime.dwHighDateTime=0x1d46003, nFileSizeHigh=0x0, nFileSizeLow=0xcf82)) returned 1 [0060.585] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0060.585] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\shyNwC.avi", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\shyNwC.avi", lpFilePart=0x0) returned 0x30 [0060.585] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0060.585] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\shyNwC.avi" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\shynwc.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0060.586] GetFileType (hFile=0x444) returned 0x1 [0060.586] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0060.586] GetFileType (hFile=0x444) returned 0x1 [0060.586] ReadFile (in: hFile=0x444, lpBuffer=0x2224fd0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be8b8, lpOverlapped=0x0 | out: lpBuffer=0x2224fd0*, lpNumberOfBytesRead=0x3be8b8*=0x1000, lpOverlapped=0x0) returned 1 [0060.596] CloseHandle (hObject=0x444) returned 1 [0060.596] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\shyNwC.avi", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\shyNwC.avi", lpFilePart=0x0) returned 0x30 [0060.596] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0060.597] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\shyNwC.avi" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\shynwc.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0060.597] GetFileType (hFile=0x444) returned 0x1 [0060.597] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0060.597] GetFileType (hFile=0x444) returned 0x1 [0060.597] WriteFile (in: hFile=0x444, lpBuffer=0x2222d68*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be968, lpOverlapped=0x0 | out: lpBuffer=0x2222d68*, lpNumberOfBytesWritten=0x3be968*=0x2000, lpOverlapped=0x0) returned 1 [0060.597] CloseHandle (hObject=0x444) returned 1 [0060.597] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\shyNwC.avi", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\shyNwC.avi", lpFilePart=0x0) returned 0x30 [0060.597] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\shyNwC.avi.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\shyNwC.avi.xuy", lpFilePart=0x0) returned 0x34 [0060.597] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0060.597] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\shyNwC.avi" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\shynwc.avi"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5fd0420, ftCreationTime.dwHighDateTime=0x1d45c20, ftLastAccessTime.dwLowDateTime=0xd4ceaa0, ftLastAccessTime.dwHighDateTime=0x1d46003, ftLastWriteTime.dwLowDateTime=0xff7ac02, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xcf82)) returned 1 [0060.597] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0060.597] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\shyNwC.avi" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\shynwc.avi"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\shyNwC.avi.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\shynwc.avi.xuy")) returned 1 [0060.598] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\TnDnwlmA_OOl7YS8W.png", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\TnDnwlmA_OOl7YS8W.png", lpFilePart=0x0) returned 0x3b [0060.598] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0060.598] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\TnDnwlmA_OOl7YS8W.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\tndnwlma_ool7ys8w.png"), fInfoLevelId=0x0, lpFileInformation=0x22a12c0 | out: lpFileInformation=0x22a12c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46f65190, ftCreationTime.dwHighDateTime=0x1d465b9, ftLastAccessTime.dwLowDateTime=0x4bd2fa0, ftLastAccessTime.dwHighDateTime=0x1d4650b, ftLastWriteTime.dwLowDateTime=0x4bd2fa0, ftLastWriteTime.dwHighDateTime=0x1d4650b, nFileSizeHigh=0x0, nFileSizeLow=0x8e99)) returned 1 [0060.598] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0060.598] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\TnDnwlmA_OOl7YS8W.png", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\TnDnwlmA_OOl7YS8W.png", lpFilePart=0x0) returned 0x3b [0060.598] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0060.598] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\TnDnwlmA_OOl7YS8W.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\tndnwlma_ool7ys8w.png"), fInfoLevelId=0x0, lpFileInformation=0x22a1400 | out: lpFileInformation=0x22a1400*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46f65190, ftCreationTime.dwHighDateTime=0x1d465b9, ftLastAccessTime.dwLowDateTime=0x4bd2fa0, ftLastAccessTime.dwHighDateTime=0x1d4650b, ftLastWriteTime.dwLowDateTime=0x4bd2fa0, ftLastWriteTime.dwHighDateTime=0x1d4650b, nFileSizeHigh=0x0, nFileSizeLow=0x8e99)) returned 1 [0060.598] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0060.598] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\TnDnwlmA_OOl7YS8W.png", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\TnDnwlmA_OOl7YS8W.png", lpFilePart=0x0) returned 0x3b [0060.598] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0060.598] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\TnDnwlmA_OOl7YS8W.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\tndnwlma_ool7ys8w.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0060.599] GetFileType (hFile=0x444) returned 0x1 [0060.599] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0060.599] GetFileType (hFile=0x444) returned 0x1 [0060.599] ReadFile (in: hFile=0x444, lpBuffer=0x22a37b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be8b8, lpOverlapped=0x0 | out: lpBuffer=0x22a37b0*, lpNumberOfBytesRead=0x3be8b8*=0x1000, lpOverlapped=0x0) returned 1 [0060.620] CloseHandle (hObject=0x444) returned 1 [0060.621] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\TnDnwlmA_OOl7YS8W.png", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\TnDnwlmA_OOl7YS8W.png", lpFilePart=0x0) returned 0x3b [0060.621] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0060.621] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\TnDnwlmA_OOl7YS8W.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\tndnwlma_ool7ys8w.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0060.621] GetFileType (hFile=0x444) returned 0x1 [0060.621] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0060.621] GetFileType (hFile=0x444) returned 0x1 [0060.621] WriteFile (in: hFile=0x444, lpBuffer=0x22a1520*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be968, lpOverlapped=0x0 | out: lpBuffer=0x22a1520*, lpNumberOfBytesWritten=0x3be968*=0x2000, lpOverlapped=0x0) returned 1 [0060.621] CloseHandle (hObject=0x444) returned 1 [0060.622] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\TnDnwlmA_OOl7YS8W.png", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\TnDnwlmA_OOl7YS8W.png", lpFilePart=0x0) returned 0x3b [0060.622] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\TnDnwlmA_OOl7YS8W.png.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\TnDnwlmA_OOl7YS8W.png.xuy", lpFilePart=0x0) returned 0x3f [0060.622] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0060.622] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\TnDnwlmA_OOl7YS8W.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\tndnwlma_ool7ys8w.png"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46f65190, ftCreationTime.dwHighDateTime=0x1d465b9, ftLastAccessTime.dwLowDateTime=0x4bd2fa0, ftLastAccessTime.dwHighDateTime=0x1d4650b, ftLastWriteTime.dwLowDateTime=0xffa0de9, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x8e99)) returned 1 [0060.622] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0060.622] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\TnDnwlmA_OOl7YS8W.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\tndnwlma_ool7ys8w.png"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\TnDnwlmA_OOl7YS8W.png.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\tndnwlma_ool7ys8w.png.xuy")) returned 1 [0060.625] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\wEoyHQta_w7GziWd r.bmp", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\wEoyHQta_w7GziWd r.bmp", lpFilePart=0x0) returned 0x3c [0060.625] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0060.625] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\wEoyHQta_w7GziWd r.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\weoyhqta_w7gziwd r.bmp"), fInfoLevelId=0x0, lpFileInformation=0x231faf8 | out: lpFileInformation=0x231faf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7a94d40, ftCreationTime.dwHighDateTime=0x1d45915, ftLastAccessTime.dwLowDateTime=0x4a4e4ab0, ftLastAccessTime.dwHighDateTime=0x1d458ca, ftLastWriteTime.dwLowDateTime=0x4a4e4ab0, ftLastWriteTime.dwHighDateTime=0x1d458ca, nFileSizeHigh=0x0, nFileSizeLow=0x66f2)) returned 1 [0060.626] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0060.626] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\wEoyHQta_w7GziWd r.bmp", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\wEoyHQta_w7GziWd r.bmp", lpFilePart=0x0) returned 0x3c [0060.626] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0060.626] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\wEoyHQta_w7GziWd r.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\weoyhqta_w7gziwd r.bmp"), fInfoLevelId=0x0, lpFileInformation=0x231fc40 | out: lpFileInformation=0x231fc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7a94d40, ftCreationTime.dwHighDateTime=0x1d45915, ftLastAccessTime.dwLowDateTime=0x4a4e4ab0, ftLastAccessTime.dwHighDateTime=0x1d458ca, ftLastWriteTime.dwLowDateTime=0x4a4e4ab0, ftLastWriteTime.dwHighDateTime=0x1d458ca, nFileSizeHigh=0x0, nFileSizeLow=0x66f2)) returned 1 [0060.626] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0060.626] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\wEoyHQta_w7GziWd r.bmp", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\wEoyHQta_w7GziWd r.bmp", lpFilePart=0x0) returned 0x3c [0060.626] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0060.626] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\wEoyHQta_w7GziWd r.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\weoyhqta_w7gziwd r.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0060.626] GetFileType (hFile=0x444) returned 0x1 [0060.626] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0060.627] GetFileType (hFile=0x444) returned 0x1 [0060.627] ReadFile (in: hFile=0x444, lpBuffer=0x2322000, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be8b8, lpOverlapped=0x0 | out: lpBuffer=0x2322000*, lpNumberOfBytesRead=0x3be8b8*=0x1000, lpOverlapped=0x0) returned 1 [0060.693] CloseHandle (hObject=0x444) returned 1 [0060.693] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\wEoyHQta_w7GziWd r.bmp", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\wEoyHQta_w7GziWd r.bmp", lpFilePart=0x0) returned 0x3c [0060.693] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0060.693] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\wEoyHQta_w7GziWd r.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\weoyhqta_w7gziwd r.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0060.693] GetFileType (hFile=0x444) returned 0x1 [0060.694] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0060.694] GetFileType (hFile=0x444) returned 0x1 [0060.694] WriteFile (in: hFile=0x444, lpBuffer=0x215b240*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be968, lpOverlapped=0x0 | out: lpBuffer=0x215b240*, lpNumberOfBytesWritten=0x3be968*=0x2000, lpOverlapped=0x0) returned 1 [0060.694] CloseHandle (hObject=0x444) returned 1 [0060.694] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\wEoyHQta_w7GziWd r.bmp", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\wEoyHQta_w7GziWd r.bmp", lpFilePart=0x0) returned 0x3c [0060.694] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\wEoyHQta_w7GziWd r.bmp.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\wEoyHQta_w7GziWd r.bmp.xuy", lpFilePart=0x0) returned 0x40 [0060.694] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0060.694] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\wEoyHQta_w7GziWd r.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\weoyhqta_w7gziwd r.bmp"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7a94d40, ftCreationTime.dwHighDateTime=0x1d45915, ftLastAccessTime.dwLowDateTime=0x4a4e4ab0, ftLastAccessTime.dwHighDateTime=0x1d458ca, ftLastWriteTime.dwLowDateTime=0x1005fa02, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x66f2)) returned 1 [0060.694] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0060.694] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\wEoyHQta_w7GziWd r.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\weoyhqta_w7gziwd r.bmp"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\wEoyHQta_w7GziWd r.bmp.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\weoyhqta_w7gziwd r.bmp.xuy")) returned 1 [0060.695] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\xFZ3UgkUHNIW.odp", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\xFZ3UgkUHNIW.odp", lpFilePart=0x0) returned 0x36 [0060.695] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0060.695] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\xFZ3UgkUHNIW.odp" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\xfz3ugkuhniw.odp"), fInfoLevelId=0x0, lpFileInformation=0x219e338 | out: lpFileInformation=0x219e338*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ff563e0, ftCreationTime.dwHighDateTime=0x1d4657e, ftLastAccessTime.dwLowDateTime=0x123fc2d0, ftLastAccessTime.dwHighDateTime=0x1d4654e, ftLastWriteTime.dwLowDateTime=0x123fc2d0, ftLastWriteTime.dwHighDateTime=0x1d4654e, nFileSizeHigh=0x0, nFileSizeLow=0x1489)) returned 1 [0060.695] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0060.695] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\xFZ3UgkUHNIW.odp", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\xFZ3UgkUHNIW.odp", lpFilePart=0x0) returned 0x36 [0060.695] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0060.695] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\xFZ3UgkUHNIW.odp" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\xfz3ugkuhniw.odp"), fInfoLevelId=0x0, lpFileInformation=0x219e468 | out: lpFileInformation=0x219e468*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ff563e0, ftCreationTime.dwHighDateTime=0x1d4657e, ftLastAccessTime.dwLowDateTime=0x123fc2d0, ftLastAccessTime.dwHighDateTime=0x1d4654e, ftLastWriteTime.dwLowDateTime=0x123fc2d0, ftLastWriteTime.dwHighDateTime=0x1d4654e, nFileSizeHigh=0x0, nFileSizeLow=0x1489)) returned 1 [0060.695] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0060.695] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\xFZ3UgkUHNIW.odp", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\xFZ3UgkUHNIW.odp", lpFilePart=0x0) returned 0x36 [0060.695] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0060.695] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\xFZ3UgkUHNIW.odp" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\xfz3ugkuhniw.odp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0060.696] GetFileType (hFile=0x444) returned 0x1 [0060.696] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0060.696] GetFileType (hFile=0x444) returned 0x1 [0060.696] ReadFile (in: hFile=0x444, lpBuffer=0x21a07f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be8b8, lpOverlapped=0x0 | out: lpBuffer=0x21a07f8*, lpNumberOfBytesRead=0x3be8b8*=0x1000, lpOverlapped=0x0) returned 1 [0060.708] CloseHandle (hObject=0x444) returned 1 [0060.708] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\xFZ3UgkUHNIW.odp", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\xFZ3UgkUHNIW.odp", lpFilePart=0x0) returned 0x36 [0060.708] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0060.708] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\xFZ3UgkUHNIW.odp" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\xfz3ugkuhniw.odp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0060.709] GetFileType (hFile=0x444) returned 0x1 [0060.709] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0060.709] GetFileType (hFile=0x444) returned 0x1 [0060.709] WriteFile (in: hFile=0x444, lpBuffer=0x219e578*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be968, lpOverlapped=0x0 | out: lpBuffer=0x219e578*, lpNumberOfBytesWritten=0x3be968*=0x2000, lpOverlapped=0x0) returned 1 [0060.709] CloseHandle (hObject=0x444) returned 1 [0060.709] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\xFZ3UgkUHNIW.odp", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\xFZ3UgkUHNIW.odp", lpFilePart=0x0) returned 0x36 [0060.709] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\xFZ3UgkUHNIW.odp.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\xFZ3UgkUHNIW.odp.xuy", lpFilePart=0x0) returned 0x3a [0060.709] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0060.709] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\xFZ3UgkUHNIW.odp" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\xfz3ugkuhniw.odp"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ff563e0, ftCreationTime.dwHighDateTime=0x1d4657e, ftLastAccessTime.dwLowDateTime=0x123fc2d0, ftLastAccessTime.dwHighDateTime=0x1d4654e, ftLastWriteTime.dwLowDateTime=0x10086024, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0060.709] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0060.709] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\xFZ3UgkUHNIW.odp" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\xfz3ugkuhniw.odp"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\xFZ3UgkUHNIW.odp.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\xfz3ugkuhniw.odp.xuy")) returned 1 [0060.710] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\xIhOWl6rJBF 6ak.m4a", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\xIhOWl6rJBF 6ak.m4a", lpFilePart=0x0) returned 0x39 [0060.710] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0060.710] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\xIhOWl6rJBF 6ak.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\xihowl6rjbf 6ak.m4a"), fInfoLevelId=0x0, lpFileInformation=0x221cb18 | out: lpFileInformation=0x221cb18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41f623f0, ftCreationTime.dwHighDateTime=0x1d46113, ftLastAccessTime.dwLowDateTime=0x283a66a0, ftLastAccessTime.dwHighDateTime=0x1d45ce1, ftLastWriteTime.dwLowDateTime=0x283a66a0, ftLastWriteTime.dwHighDateTime=0x1d45ce1, nFileSizeHigh=0x0, nFileSizeLow=0x10d4e)) returned 1 [0060.710] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0060.710] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\xIhOWl6rJBF 6ak.m4a", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\xIhOWl6rJBF 6ak.m4a", lpFilePart=0x0) returned 0x39 [0060.710] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0060.710] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\xIhOWl6rJBF 6ak.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\xihowl6rjbf 6ak.m4a"), fInfoLevelId=0x0, lpFileInformation=0x221cc50 | out: lpFileInformation=0x221cc50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41f623f0, ftCreationTime.dwHighDateTime=0x1d46113, ftLastAccessTime.dwLowDateTime=0x283a66a0, ftLastAccessTime.dwHighDateTime=0x1d45ce1, ftLastWriteTime.dwLowDateTime=0x283a66a0, ftLastWriteTime.dwHighDateTime=0x1d45ce1, nFileSizeHigh=0x0, nFileSizeLow=0x10d4e)) returned 1 [0060.710] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0060.710] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\xIhOWl6rJBF 6ak.m4a", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\xIhOWl6rJBF 6ak.m4a", lpFilePart=0x0) returned 0x39 [0060.710] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0060.710] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\xIhOWl6rJBF 6ak.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\xihowl6rjbf 6ak.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0060.711] GetFileType (hFile=0x444) returned 0x1 [0060.711] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0060.711] GetFileType (hFile=0x444) returned 0x1 [0060.711] ReadFile (in: hFile=0x444, lpBuffer=0x221eff0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be8b8, lpOverlapped=0x0 | out: lpBuffer=0x221eff0*, lpNumberOfBytesRead=0x3be8b8*=0x1000, lpOverlapped=0x0) returned 1 [0060.778] CloseHandle (hObject=0x444) returned 1 [0060.778] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\xIhOWl6rJBF 6ak.m4a", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\xIhOWl6rJBF 6ak.m4a", lpFilePart=0x0) returned 0x39 [0060.778] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0060.778] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\xIhOWl6rJBF 6ak.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\xihowl6rjbf 6ak.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0060.778] GetFileType (hFile=0x444) returned 0x1 [0060.778] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0060.778] GetFileType (hFile=0x444) returned 0x1 [0060.778] WriteFile (in: hFile=0x444, lpBuffer=0x221cd68*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be968, lpOverlapped=0x0 | out: lpBuffer=0x221cd68*, lpNumberOfBytesWritten=0x3be968*=0x2000, lpOverlapped=0x0) returned 1 [0060.778] CloseHandle (hObject=0x444) returned 1 [0060.779] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\xIhOWl6rJBF 6ak.m4a", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\xIhOWl6rJBF 6ak.m4a", lpFilePart=0x0) returned 0x39 [0060.779] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\xIhOWl6rJBF 6ak.m4a.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\xIhOWl6rJBF 6ak.m4a.xuy", lpFilePart=0x0) returned 0x3d [0060.779] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0060.779] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\xIhOWl6rJBF 6ak.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\xihowl6rjbf 6ak.m4a"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41f623f0, ftCreationTime.dwHighDateTime=0x1d46113, ftLastAccessTime.dwLowDateTime=0x283a66a0, ftLastAccessTime.dwHighDateTime=0x1d45ce1, ftLastWriteTime.dwLowDateTime=0x101448c6, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x10d4e)) returned 1 [0060.779] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0060.779] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\xIhOWl6rJBF 6ak.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\xihowl6rjbf 6ak.m4a"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\xIhOWl6rJBF 6ak.m4a.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\xihowl6rjbf 6ak.m4a.xuy")) returned 1 [0060.780] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\y1a4kAzLHPnL4SoS O_.bmp", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\y1a4kAzLHPnL4SoS O_.bmp", lpFilePart=0x0) returned 0x3d [0060.780] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0060.780] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\y1a4kAzLHPnL4SoS O_.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\y1a4kazlhpnl4sos o_.bmp"), fInfoLevelId=0x0, lpFileInformation=0x229b330 | out: lpFileInformation=0x229b330*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3e23120, ftCreationTime.dwHighDateTime=0x1d462ef, ftLastAccessTime.dwLowDateTime=0x69c390c0, ftLastAccessTime.dwHighDateTime=0x1d45fc4, ftLastWriteTime.dwLowDateTime=0x69c390c0, ftLastWriteTime.dwHighDateTime=0x1d45fc4, nFileSizeHigh=0x0, nFileSizeLow=0x5055)) returned 1 [0060.780] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0060.780] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\y1a4kAzLHPnL4SoS O_.bmp", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\y1a4kAzLHPnL4SoS O_.bmp", lpFilePart=0x0) returned 0x3d [0060.780] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0060.780] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\y1a4kAzLHPnL4SoS O_.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\y1a4kazlhpnl4sos o_.bmp"), fInfoLevelId=0x0, lpFileInformation=0x229b478 | out: lpFileInformation=0x229b478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3e23120, ftCreationTime.dwHighDateTime=0x1d462ef, ftLastAccessTime.dwLowDateTime=0x69c390c0, ftLastAccessTime.dwHighDateTime=0x1d45fc4, ftLastWriteTime.dwLowDateTime=0x69c390c0, ftLastWriteTime.dwHighDateTime=0x1d45fc4, nFileSizeHigh=0x0, nFileSizeLow=0x5055)) returned 1 [0060.780] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0060.780] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\y1a4kAzLHPnL4SoS O_.bmp", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\y1a4kAzLHPnL4SoS O_.bmp", lpFilePart=0x0) returned 0x3d [0060.780] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0060.780] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\y1a4kAzLHPnL4SoS O_.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\y1a4kazlhpnl4sos o_.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0060.781] GetFileType (hFile=0x444) returned 0x1 [0060.781] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0060.781] GetFileType (hFile=0x444) returned 0x1 [0060.781] ReadFile (in: hFile=0x444, lpBuffer=0x229d838, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be8b8, lpOverlapped=0x0 | out: lpBuffer=0x229d838*, lpNumberOfBytesRead=0x3be8b8*=0x1000, lpOverlapped=0x0) returned 1 [0060.791] CloseHandle (hObject=0x444) returned 1 [0060.791] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\y1a4kAzLHPnL4SoS O_.bmp", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\y1a4kAzLHPnL4SoS O_.bmp", lpFilePart=0x0) returned 0x3d [0060.791] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0060.791] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\y1a4kAzLHPnL4SoS O_.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\y1a4kazlhpnl4sos o_.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0060.791] GetFileType (hFile=0x444) returned 0x1 [0060.791] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0060.791] GetFileType (hFile=0x444) returned 0x1 [0060.791] WriteFile (in: hFile=0x444, lpBuffer=0x229b5a0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be968, lpOverlapped=0x0 | out: lpBuffer=0x229b5a0*, lpNumberOfBytesWritten=0x3be968*=0x2000, lpOverlapped=0x0) returned 1 [0060.792] CloseHandle (hObject=0x444) returned 1 [0060.792] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\y1a4kAzLHPnL4SoS O_.bmp", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\y1a4kAzLHPnL4SoS O_.bmp", lpFilePart=0x0) returned 0x3d [0060.792] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\y1a4kAzLHPnL4SoS O_.bmp.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\y1a4kAzLHPnL4SoS O_.bmp.xuy", lpFilePart=0x0) returned 0x41 [0060.792] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0060.792] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\y1a4kAzLHPnL4SoS O_.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\y1a4kazlhpnl4sos o_.bmp"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3e23120, ftCreationTime.dwHighDateTime=0x1d462ef, ftLastAccessTime.dwLowDateTime=0x69c390c0, ftLastAccessTime.dwHighDateTime=0x1d45fc4, ftLastWriteTime.dwLowDateTime=0x101448c6, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x5055)) returned 1 [0060.792] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0060.792] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\y1a4kAzLHPnL4SoS O_.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\y1a4kazlhpnl4sos o_.bmp"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\y1a4kAzLHPnL4SoS O_.bmp.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\y1a4kazlhpnl4sos o_.bmp.xuy")) returned 1 [0060.793] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Yme L49sGIAxefbQ-c.png", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Yme L49sGIAxefbQ-c.png", lpFilePart=0x0) returned 0x3c [0060.793] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0060.793] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Yme L49sGIAxefbQ-c.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\yme l49sgiaxefbq-c.png"), fInfoLevelId=0x0, lpFileInformation=0x2319ba0 | out: lpFileInformation=0x2319ba0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x488378e0, ftCreationTime.dwHighDateTime=0x1d45c03, ftLastAccessTime.dwLowDateTime=0xf051bb40, ftLastAccessTime.dwHighDateTime=0x1d45cf8, ftLastWriteTime.dwLowDateTime=0xf051bb40, ftLastWriteTime.dwHighDateTime=0x1d45cf8, nFileSizeHigh=0x0, nFileSizeLow=0x186bd)) returned 1 [0060.793] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0060.793] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Yme L49sGIAxefbQ-c.png", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Yme L49sGIAxefbQ-c.png", lpFilePart=0x0) returned 0x3c [0060.793] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0060.793] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Yme L49sGIAxefbQ-c.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\yme l49sgiaxefbq-c.png"), fInfoLevelId=0x0, lpFileInformation=0x2319ce8 | out: lpFileInformation=0x2319ce8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x488378e0, ftCreationTime.dwHighDateTime=0x1d45c03, ftLastAccessTime.dwLowDateTime=0xf051bb40, ftLastAccessTime.dwHighDateTime=0x1d45cf8, ftLastWriteTime.dwLowDateTime=0xf051bb40, ftLastWriteTime.dwHighDateTime=0x1d45cf8, nFileSizeHigh=0x0, nFileSizeLow=0x186bd)) returned 1 [0060.793] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0060.793] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Yme L49sGIAxefbQ-c.png", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Yme L49sGIAxefbQ-c.png", lpFilePart=0x0) returned 0x3c [0060.793] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0060.793] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Yme L49sGIAxefbQ-c.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\yme l49sgiaxefbq-c.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0060.793] GetFileType (hFile=0x444) returned 0x1 [0060.793] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0060.793] GetFileType (hFile=0x444) returned 0x1 [0060.794] ReadFile (in: hFile=0x444, lpBuffer=0x231c0a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be8b8, lpOverlapped=0x0 | out: lpBuffer=0x231c0a8*, lpNumberOfBytesRead=0x3be8b8*=0x1000, lpOverlapped=0x0) returned 1 [0060.876] CloseHandle (hObject=0x444) returned 1 [0060.876] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Yme L49sGIAxefbQ-c.png", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Yme L49sGIAxefbQ-c.png", lpFilePart=0x0) returned 0x3c [0060.876] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0060.876] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Yme L49sGIAxefbQ-c.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\yme l49sgiaxefbq-c.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0060.877] GetFileType (hFile=0x444) returned 0x1 [0060.877] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0060.877] GetFileType (hFile=0x444) returned 0x1 [0060.877] WriteFile (in: hFile=0x444, lpBuffer=0x215b240*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be968, lpOverlapped=0x0 | out: lpBuffer=0x215b240*, lpNumberOfBytesWritten=0x3be968*=0x2000, lpOverlapped=0x0) returned 1 [0060.877] CloseHandle (hObject=0x444) returned 1 [0060.878] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Yme L49sGIAxefbQ-c.png", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Yme L49sGIAxefbQ-c.png", lpFilePart=0x0) returned 0x3c [0060.878] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Yme L49sGIAxefbQ-c.png.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Yme L49sGIAxefbQ-c.png.xuy", lpFilePart=0x0) returned 0x40 [0060.878] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0060.878] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Yme L49sGIAxefbQ-c.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\yme l49sgiaxefbq-c.png"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x488378e0, ftCreationTime.dwHighDateTime=0x1d45c03, ftLastAccessTime.dwLowDateTime=0xf051bb40, ftLastAccessTime.dwHighDateTime=0x1d45cf8, ftLastWriteTime.dwLowDateTime=0x102296c4, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x186bd)) returned 1 [0060.878] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0060.878] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Yme L49sGIAxefbQ-c.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\yme l49sgiaxefbq-c.png"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Yme L49sGIAxefbQ-c.png.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\yme l49sgiaxefbq-c.png.xuy")) returned 1 [0060.878] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\zozaK-qF 9YEvt.mp4", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\zozaK-qF 9YEvt.mp4", lpFilePart=0x0) returned 0x38 [0060.878] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0060.878] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\zozaK-qF 9YEvt.mp4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\zozak-qf 9yevt.mp4"), fInfoLevelId=0x0, lpFileInformation=0x2198418 | out: lpFileInformation=0x2198418*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93a13840, ftCreationTime.dwHighDateTime=0x1d45617, ftLastAccessTime.dwLowDateTime=0xf4a43bb0, ftLastAccessTime.dwHighDateTime=0x1d46049, ftLastWriteTime.dwLowDateTime=0xf4a43bb0, ftLastWriteTime.dwHighDateTime=0x1d46049, nFileSizeHigh=0x0, nFileSizeLow=0xcb0e)) returned 1 [0060.879] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0060.879] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\zozaK-qF 9YEvt.mp4", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\zozaK-qF 9YEvt.mp4", lpFilePart=0x0) returned 0x38 [0060.879] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0060.879] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\zozaK-qF 9YEvt.mp4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\zozak-qf 9yevt.mp4"), fInfoLevelId=0x0, lpFileInformation=0x2198550 | out: lpFileInformation=0x2198550*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93a13840, ftCreationTime.dwHighDateTime=0x1d45617, ftLastAccessTime.dwLowDateTime=0xf4a43bb0, ftLastAccessTime.dwHighDateTime=0x1d46049, ftLastWriteTime.dwLowDateTime=0xf4a43bb0, ftLastWriteTime.dwHighDateTime=0x1d46049, nFileSizeHigh=0x0, nFileSizeLow=0xcb0e)) returned 1 [0060.879] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0060.879] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\zozaK-qF 9YEvt.mp4", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\zozaK-qF 9YEvt.mp4", lpFilePart=0x0) returned 0x38 [0060.879] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0060.879] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\zozaK-qF 9YEvt.mp4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\zozak-qf 9yevt.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0060.879] GetFileType (hFile=0x444) returned 0x1 [0060.879] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0060.879] GetFileType (hFile=0x444) returned 0x1 [0060.879] ReadFile (in: hFile=0x444, lpBuffer=0x219a8f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be8b8, lpOverlapped=0x0 | out: lpBuffer=0x219a8f0*, lpNumberOfBytesRead=0x3be8b8*=0x1000, lpOverlapped=0x0) returned 1 [0060.897] CloseHandle (hObject=0x444) returned 1 [0060.897] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\zozaK-qF 9YEvt.mp4", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\zozaK-qF 9YEvt.mp4", lpFilePart=0x0) returned 0x38 [0060.897] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0060.897] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\zozaK-qF 9YEvt.mp4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\zozak-qf 9yevt.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0060.897] GetFileType (hFile=0x444) returned 0x1 [0060.897] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0060.898] GetFileType (hFile=0x444) returned 0x1 [0060.898] WriteFile (in: hFile=0x444, lpBuffer=0x2198668*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be968, lpOverlapped=0x0 | out: lpBuffer=0x2198668*, lpNumberOfBytesWritten=0x3be968*=0x2000, lpOverlapped=0x0) returned 1 [0060.898] CloseHandle (hObject=0x444) returned 1 [0060.898] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\zozaK-qF 9YEvt.mp4", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\zozaK-qF 9YEvt.mp4", lpFilePart=0x0) returned 0x38 [0060.898] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\zozaK-qF 9YEvt.mp4.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\zozaK-qF 9YEvt.mp4.xuy", lpFilePart=0x0) returned 0x3c [0060.898] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0060.898] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\zozaK-qF 9YEvt.mp4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\zozak-qf 9yevt.mp4"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93a13840, ftCreationTime.dwHighDateTime=0x1d45617, ftLastAccessTime.dwLowDateTime=0xf4a43bb0, ftLastAccessTime.dwHighDateTime=0x1d46049, ftLastWriteTime.dwLowDateTime=0x1024f828, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xcb0e)) returned 1 [0060.898] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0060.898] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\zozaK-qF 9YEvt.mp4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\zozak-qf 9yevt.mp4"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\zozaK-qF 9YEvt.mp4.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\zozak-qf 9yevt.mp4.xuy")) returned 1 [0060.899] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\zYbO.swf", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\zYbO.swf", lpFilePart=0x0) returned 0x2e [0060.899] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0060.899] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\zYbO.swf" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\zybo.swf"), fInfoLevelId=0x0, lpFileInformation=0x2216c30 | out: lpFileInformation=0x2216c30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc079c800, ftCreationTime.dwHighDateTime=0x1d45e78, ftLastAccessTime.dwLowDateTime=0x7c612d80, ftLastAccessTime.dwHighDateTime=0x1d45e13, ftLastWriteTime.dwLowDateTime=0x7c612d80, ftLastWriteTime.dwHighDateTime=0x1d45e13, nFileSizeHigh=0x0, nFileSizeLow=0x1ef4)) returned 1 [0060.899] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0060.899] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\zYbO.swf", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\zYbO.swf", lpFilePart=0x0) returned 0x2e [0060.899] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0060.899] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\zYbO.swf" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\zybo.swf"), fInfoLevelId=0x0, lpFileInformation=0x2216d40 | out: lpFileInformation=0x2216d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc079c800, ftCreationTime.dwHighDateTime=0x1d45e78, ftLastAccessTime.dwLowDateTime=0x7c612d80, ftLastAccessTime.dwHighDateTime=0x1d45e13, ftLastWriteTime.dwLowDateTime=0x7c612d80, ftLastWriteTime.dwHighDateTime=0x1d45e13, nFileSizeHigh=0x0, nFileSizeLow=0x1ef4)) returned 1 [0060.899] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0060.899] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\zYbO.swf", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\zYbO.swf", lpFilePart=0x0) returned 0x2e [0060.899] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0060.899] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\zYbO.swf" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\zybo.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0060.899] GetFileType (hFile=0x444) returned 0x1 [0060.899] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0060.899] GetFileType (hFile=0x444) returned 0x1 [0060.899] ReadFile (in: hFile=0x444, lpBuffer=0x2219090, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be8b8, lpOverlapped=0x0 | out: lpBuffer=0x2219090*, lpNumberOfBytesRead=0x3be8b8*=0x1000, lpOverlapped=0x0) returned 1 [0060.910] CloseHandle (hObject=0x444) returned 1 [0060.910] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\zYbO.swf", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\zYbO.swf", lpFilePart=0x0) returned 0x2e [0060.910] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0060.910] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\zYbO.swf" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\zybo.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0060.910] GetFileType (hFile=0x444) returned 0x1 [0060.910] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0060.910] GetFileType (hFile=0x444) returned 0x1 [0060.910] WriteFile (in: hFile=0x444, lpBuffer=0x2216e30*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be968, lpOverlapped=0x0 | out: lpBuffer=0x2216e30*, lpNumberOfBytesWritten=0x3be968*=0x2000, lpOverlapped=0x0) returned 1 [0060.911] CloseHandle (hObject=0x444) returned 1 [0060.911] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\zYbO.swf", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\zYbO.swf", lpFilePart=0x0) returned 0x2e [0060.911] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\zYbO.swf.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\zYbO.swf.xuy", lpFilePart=0x0) returned 0x32 [0060.911] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0060.911] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\zYbO.swf" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\zybo.swf"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc079c800, ftCreationTime.dwHighDateTime=0x1d45e78, ftLastAccessTime.dwLowDateTime=0x7c612d80, ftLastAccessTime.dwHighDateTime=0x1d45e13, ftLastWriteTime.dwLowDateTime=0x10275a70, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0060.911] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0060.911] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\zYbO.swf" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\zybo.swf"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\zYbO.swf.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\zybo.swf.xuy")) returned 1 [0060.911] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0060.912] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe", nBufferLength=0x105, lpBuffer=0x3be3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe", lpFilePart=0x0) returned 0x2b [0060.912] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\", nBufferLength=0x105, lpBuffer=0x3be370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\", lpFilePart=0x0) returned 0x2c [0060.912] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\*", lpFindFileData=0x3be580 | out: lpFindFileData=0x3be580) returned 0x5d7370 [0061.042] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0061.042] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0061.042] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0061.043] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0061.043] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0061.043] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0061.043] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0061.043] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 0 [0061.043] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0061.044] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0061.044] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7f0) returned 1 [0061.044] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0061.044] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe", nBufferLength=0x105, lpBuffer=0x3be3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe", lpFilePart=0x0) returned 0x2b [0061.044] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\", nBufferLength=0x105, lpBuffer=0x3be370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\", lpFilePart=0x0) returned 0x2c [0061.044] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\*", lpFindFileData=0x3be580 | out: lpFindFileData=0x3be580) returned 0x5d75b0 [0061.045] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0061.045] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0061.045] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0061.046] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0061.046] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0061.046] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0061.046] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0061.046] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 0 [0061.046] FindClose (in: hFindFile=0x5d75b0 | out: hFindFile=0x5d75b0) returned 1 [0061.047] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0061.047] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7f0) returned 1 [0061.047] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0061.047] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat", lpFilePart=0x0) returned 0x33 [0061.047] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\", lpFilePart=0x0) returned 0x34 [0061.047] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d7d30 [0061.048] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0061.048] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0061.048] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0061.048] FindClose (in: hFindFile=0x5d7d30 | out: hFindFile=0x5d7d30) returned 1 [0061.048] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0061.048] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0061.048] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0061.048] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat", lpFilePart=0x0) returned 0x33 [0061.048] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\", lpFilePart=0x0) returned 0x34 [0061.048] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d7370 [0061.048] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0061.049] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0061.049] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0061.049] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0061.049] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0061.049] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0061.049] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0061.049] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC", lpFilePart=0x0) returned 0x36 [0061.049] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\", lpFilePart=0x0) returned 0x37 [0061.049] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7c70 [0061.049] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0061.049] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0061.049] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0061.050] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0061.050] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0061.050] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0061.050] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0061.050] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0061.050] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0061.050] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0061.050] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC", lpFilePart=0x0) returned 0x36 [0061.050] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\", lpFilePart=0x0) returned 0x37 [0061.050] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d79d0 [0061.050] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0061.050] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0061.051] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0061.051] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0061.051] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0061.051] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0061.051] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0061.051] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0061.051] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0061.051] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0061.051] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Collab", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Collab", lpFilePart=0x0) returned 0x3d [0061.051] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Collab\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Collab\\", lpFilePart=0x0) returned 0x3e [0061.051] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Collab\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d81b0 [0061.055] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0061.055] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0061.055] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0061.055] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0061.055] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0061.055] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0061.055] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Collab", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Collab", lpFilePart=0x0) returned 0x3d [0061.055] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Collab\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Collab\\", lpFilePart=0x0) returned 0x3e [0061.056] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Collab\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7d90 [0061.056] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0061.056] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0061.056] FindClose (in: hFindFile=0x5d7d90 | out: hFindFile=0x5d7d90) returned 1 [0061.056] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0061.056] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0061.056] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0061.056] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Forms", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Forms", lpFilePart=0x0) returned 0x3c [0061.056] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Forms\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Forms\\", lpFilePart=0x0) returned 0x3d [0061.056] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Forms\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7af0 [0061.056] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0061.056] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0061.057] FindClose (in: hFindFile=0x5d7af0 | out: hFindFile=0x5d7af0) returned 1 [0061.057] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0061.057] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0061.057] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0061.057] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Forms", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Forms", lpFilePart=0x0) returned 0x3c [0061.057] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Forms\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Forms\\", lpFilePart=0x0) returned 0x3d [0061.057] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Forms\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7370 [0061.057] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0061.057] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0061.057] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0061.057] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0061.057] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0061.057] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0061.057] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache", lpFilePart=0x0) returned 0x3e [0061.057] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache\\", lpFilePart=0x0) returned 0x3f [0061.057] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7e50 [0061.058] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0061.058] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0061.058] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0061.058] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0061.058] FindClose (in: hFindFile=0x5d7e50 | out: hFindFile=0x5d7e50) returned 1 [0061.058] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0061.058] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0061.058] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0061.058] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache", lpFilePart=0x0) returned 0x3e [0061.058] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache\\", lpFilePart=0x0) returned 0x3f [0061.058] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7670 [0061.059] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0061.059] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0061.059] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0061.059] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0061.059] FindClose (in: hFindFile=0x5d7670 | out: hFindFile=0x5d7670) returned 1 [0061.059] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0061.059] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0061.084] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache\\GlobData", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache\\GlobData", lpFilePart=0x0) returned 0x47 [0061.084] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0061.084] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache\\GlobData" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\acrobat\\dc\\jscache\\globdata"), fInfoLevelId=0x0, lpFileInformation=0x22a0e98 | out: lpFileInformation=0x22a0e98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ed44b1d, ftCreationTime.dwHighDateTime=0x1d2d43f, ftLastAccessTime.dwLowDateTime=0x6ed44b1d, ftLastAccessTime.dwHighDateTime=0x1d2d43f, ftLastWriteTime.dwLowDateTime=0x6ed44b1d, ftLastWriteTime.dwHighDateTime=0x1d2d43f, nFileSizeHigh=0x0, nFileSizeLow=0x16)) returned 1 [0061.093] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0061.094] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache\\GlobData", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache\\GlobData", lpFilePart=0x0) returned 0x47 [0061.094] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0061.094] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache\\GlobData" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\acrobat\\dc\\jscache\\globdata"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0061.094] GetFileType (hFile=0x444) returned 0x1 [0061.094] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0061.094] GetFileType (hFile=0x444) returned 0x1 [0061.094] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x16 [0061.094] ReadFile (in: hFile=0x444, lpBuffer=0x22a1148, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x22a1148*, lpNumberOfBytesRead=0x3be6a8*=0x16, lpOverlapped=0x0) returned 1 [0061.095] CloseHandle (hObject=0x444) returned 1 [0061.115] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache\\GlobData", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache\\GlobData", lpFilePart=0x0) returned 0x47 [0061.115] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0061.115] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache\\GlobData" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\acrobat\\dc\\jscache\\globdata"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0061.117] GetFileType (hFile=0x444) returned 0x1 [0061.117] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0061.117] GetFileType (hFile=0x444) returned 0x1 [0061.117] WriteFile (in: hFile=0x444, lpBuffer=0x2318278*, nNumberOfBytesToWrite=0x20, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x2318278*, lpNumberOfBytesWritten=0x3be5b8*=0x20, lpOverlapped=0x0) returned 1 [0061.118] CloseHandle (hObject=0x444) returned 1 [0061.118] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache\\GlobData", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache\\GlobData", lpFilePart=0x0) returned 0x47 [0061.118] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache\\GlobData.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache\\GlobData.xuy", lpFilePart=0x0) returned 0x4b [0061.118] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0061.118] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache\\GlobData" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\acrobat\\dc\\jscache\\globdata"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ed44b1d, ftCreationTime.dwHighDateTime=0x1d2d43f, ftLastAccessTime.dwLowDateTime=0x6ed44b1d, ftLastAccessTime.dwHighDateTime=0x1d2d43f, ftLastWriteTime.dwLowDateTime=0x104659da, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x20)) returned 1 [0061.118] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0061.118] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache\\GlobData" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\acrobat\\dc\\jscache\\globdata"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache\\GlobData.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\acrobat\\dc\\jscache\\globdata.xuy")) returned 1 [0061.119] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache\\GlobSettings", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache\\GlobSettings", lpFilePart=0x0) returned 0x4b [0061.119] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0061.119] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache\\GlobSettings" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\acrobat\\dc\\jscache\\globsettings"), fInfoLevelId=0x0, lpFileInformation=0x23194b8 | out: lpFileInformation=0x23194b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb35ef7f, ftCreationTime.dwHighDateTime=0x1d336e1, ftLastAccessTime.dwLowDateTime=0x1edad023, ftLastAccessTime.dwHighDateTime=0x1d35db9, ftLastWriteTime.dwLowDateTime=0x1edad023, ftLastWriteTime.dwHighDateTime=0x1d35db9, nFileSizeHigh=0x0, nFileSizeLow=0x18)) returned 1 [0061.119] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0061.120] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache\\GlobSettings", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache\\GlobSettings", lpFilePart=0x0) returned 0x4b [0061.120] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0061.120] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache\\GlobSettings" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\acrobat\\dc\\jscache\\globsettings"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0061.120] GetFileType (hFile=0x444) returned 0x1 [0061.120] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0061.120] GetFileType (hFile=0x444) returned 0x1 [0061.120] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x18 [0061.120] ReadFile (in: hFile=0x444, lpBuffer=0x2319788, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x2319788*, lpNumberOfBytesRead=0x3be6a8*=0x18, lpOverlapped=0x0) returned 1 [0061.121] CloseHandle (hObject=0x444) returned 1 [0061.176] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache\\GlobSettings", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache\\GlobSettings", lpFilePart=0x0) returned 0x4b [0061.176] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0061.176] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache\\GlobSettings" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\acrobat\\dc\\jscache\\globsettings"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0061.178] GetFileType (hFile=0x444) returned 0x1 [0061.178] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0061.178] GetFileType (hFile=0x444) returned 0x1 [0061.178] WriteFile (in: hFile=0x444, lpBuffer=0x218ca28*, nNumberOfBytesToWrite=0x20, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x218ca28*, lpNumberOfBytesWritten=0x3be5b8*=0x20, lpOverlapped=0x0) returned 1 [0061.178] CloseHandle (hObject=0x444) returned 1 [0061.178] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache\\GlobSettings", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache\\GlobSettings", lpFilePart=0x0) returned 0x4b [0061.178] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache\\GlobSettings.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache\\GlobSettings.xuy", lpFilePart=0x0) returned 0x4f [0061.179] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0061.179] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache\\GlobSettings" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\acrobat\\dc\\jscache\\globsettings"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb35ef7f, ftCreationTime.dwHighDateTime=0x1d336e1, ftLastAccessTime.dwLowDateTime=0x1edad023, ftLastAccessTime.dwHighDateTime=0x1d35db9, ftLastWriteTime.dwLowDateTime=0x104fe2e8, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x20)) returned 1 [0061.179] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0061.179] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache\\GlobSettings" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\acrobat\\dc\\jscache\\globsettings"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache\\GlobSettings.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\acrobat\\dc\\jscache\\globsettings.xuy")) returned 1 [0061.179] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0061.179] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security", lpFilePart=0x0) returned 0x3f [0061.179] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\", lpFilePart=0x0) returned 0x40 [0061.179] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7c70 [0061.180] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0061.180] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0061.180] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0061.180] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0061.180] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0061.180] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0061.180] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0061.180] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0061.180] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security", lpFilePart=0x0) returned 0x3f [0061.180] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\", lpFilePart=0x0) returned 0x40 [0061.180] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7550 [0061.180] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0061.180] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0061.181] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0061.181] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0061.181] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0061.181] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0061.181] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0061.181] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\addressbook.acrodata", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\addressbook.acrodata", lpFilePart=0x0) returned 0x54 [0061.181] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0061.181] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\addressbook.acrodata" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\acrobat\\dc\\security\\addressbook.acrodata"), fInfoLevelId=0x0, lpFileInformation=0x218fed0 | out: lpFileInformation=0x218fed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88be8b8f, ftCreationTime.dwHighDateTime=0x1d2d43b, ftLastAccessTime.dwLowDateTime=0x88be8b8f, ftLastAccessTime.dwHighDateTime=0x1d2d43b, ftLastWriteTime.dwLowDateTime=0xadc1bd75, ftLastWriteTime.dwHighDateTime=0x1d336e1, nFileSizeHigh=0x0, nFileSizeLow=0x2a8f)) returned 1 [0061.191] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0061.192] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\addressbook.acrodata", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\addressbook.acrodata", lpFilePart=0x0) returned 0x54 [0061.192] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0061.192] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\addressbook.acrodata" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\acrobat\\dc\\security\\addressbook.acrodata"), fInfoLevelId=0x0, lpFileInformation=0x2190048 | out: lpFileInformation=0x2190048*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88be8b8f, ftCreationTime.dwHighDateTime=0x1d2d43b, ftLastAccessTime.dwLowDateTime=0x88be8b8f, ftLastAccessTime.dwHighDateTime=0x1d2d43b, ftLastWriteTime.dwLowDateTime=0xadc1bd75, ftLastWriteTime.dwHighDateTime=0x1d336e1, nFileSizeHigh=0x0, nFileSizeLow=0x2a8f)) returned 1 [0061.192] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0061.192] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\addressbook.acrodata", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\addressbook.acrodata", lpFilePart=0x0) returned 0x54 [0061.192] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0061.192] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\addressbook.acrodata" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\acrobat\\dc\\security\\addressbook.acrodata"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0061.192] GetFileType (hFile=0x444) returned 0x1 [0061.192] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0061.192] GetFileType (hFile=0x444) returned 0x1 [0061.192] ReadFile (in: hFile=0x444, lpBuffer=0x2192468, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x2192468*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0061.238] CloseHandle (hObject=0x444) returned 1 [0061.238] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\addressbook.acrodata", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\addressbook.acrodata", lpFilePart=0x0) returned 0x54 [0061.238] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0061.238] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\addressbook.acrodata" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\acrobat\\dc\\security\\addressbook.acrodata"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0061.238] GetFileType (hFile=0x444) returned 0x1 [0061.238] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0061.238] GetFileType (hFile=0x444) returned 0x1 [0061.238] WriteFile (in: hFile=0x444, lpBuffer=0x21901a0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x21901a0*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0061.238] CloseHandle (hObject=0x444) returned 1 [0061.239] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\addressbook.acrodata", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\addressbook.acrodata", lpFilePart=0x0) returned 0x54 [0061.239] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\addressbook.acrodata.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\addressbook.acrodata.xuy", lpFilePart=0x0) returned 0x58 [0061.239] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0061.239] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\addressbook.acrodata" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\acrobat\\dc\\security\\addressbook.acrodata"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88be8b8f, ftCreationTime.dwHighDateTime=0x1d2d43b, ftLastAccessTime.dwLowDateTime=0x88be8b8f, ftLastAccessTime.dwHighDateTime=0x1d2d43b, ftLastWriteTime.dwLowDateTime=0x10596ef2, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2a8f)) returned 1 [0061.239] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0061.239] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\addressbook.acrodata" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\acrobat\\dc\\security\\addressbook.acrodata"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\addressbook.acrodata.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\acrobat\\dc\\security\\addressbook.acrodata.xuy")) returned 1 [0061.239] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0061.239] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\CRLCache", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\CRLCache", lpFilePart=0x0) returned 0x48 [0061.239] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\CRLCache\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\CRLCache\\", lpFilePart=0x0) returned 0x49 [0061.240] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\CRLCache\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d7c70 [0061.240] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0061.240] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0061.240] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0061.240] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0061.240] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0061.240] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0061.240] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0061.240] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0061.240] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\CRLCache", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\CRLCache", lpFilePart=0x0) returned 0x48 [0061.240] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\CRLCache\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\CRLCache\\", lpFilePart=0x0) returned 0x49 [0061.240] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\CRLCache\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d7a30 [0061.241] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0061.241] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0061.241] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0061.241] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0061.241] FindClose (in: hFindFile=0x5d7a30 | out: hFindFile=0x5d7a30) returned 1 [0061.241] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0061.241] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0061.241] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\CRLCache\\0FDED5CEB68C302B1CDB2BDDD9D0000E76539CB0.crl", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\CRLCache\\0FDED5CEB68C302B1CDB2BDDD9D0000E76539CB0.crl", lpFilePart=0x0) returned 0x75 [0061.241] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0061.241] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\CRLCache\\0FDED5CEB68C302B1CDB2BDDD9D0000E76539CB0.crl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\acrobat\\dc\\security\\crlcache\\0fded5ceb68c302b1cdb2bddd9d0000e76539cb0.crl"), fInfoLevelId=0x0, lpFileInformation=0x2211078 | out: lpFileInformation=0x2211078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x888a1791, ftCreationTime.dwHighDateTime=0x1d2d43b, ftLastAccessTime.dwLowDateTime=0x888a1791, ftLastAccessTime.dwHighDateTime=0x1d2d43b, ftLastWriteTime.dwLowDateTime=0x1dd95253, ftLastWriteTime.dwHighDateTime=0x1d35db9, nFileSizeHigh=0x0, nFileSizeLow=0x27d)) returned 1 [0061.241] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0061.241] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\CRLCache\\0FDED5CEB68C302B1CDB2BDDD9D0000E76539CB0.crl", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\CRLCache\\0FDED5CEB68C302B1CDB2BDDD9D0000E76539CB0.crl", lpFilePart=0x0) returned 0x75 [0061.241] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0061.241] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\CRLCache\\0FDED5CEB68C302B1CDB2BDDD9D0000E76539CB0.crl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\acrobat\\dc\\security\\crlcache\\0fded5ceb68c302b1cdb2bddd9d0000e76539cb0.crl"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0061.241] GetFileType (hFile=0x444) returned 0x1 [0061.241] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0061.242] GetFileType (hFile=0x444) returned 0x1 [0061.242] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be708 | out: lpFileSizeHigh=0x3be708*=0x0) returned 0x27d [0061.242] ReadFile (in: hFile=0x444, lpBuffer=0x22116e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be638, lpOverlapped=0x0 | out: lpBuffer=0x22116e0*, lpNumberOfBytesRead=0x3be638*=0x27d, lpOverlapped=0x0) returned 1 [0061.255] CloseHandle (hObject=0x444) returned 1 [0061.268] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\CRLCache\\0FDED5CEB68C302B1CDB2BDDD9D0000E76539CB0.crl", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\CRLCache\\0FDED5CEB68C302B1CDB2BDDD9D0000E76539CB0.crl", lpFilePart=0x0) returned 0x75 [0061.268] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0061.268] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\CRLCache\\0FDED5CEB68C302B1CDB2BDDD9D0000E76539CB0.crl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\acrobat\\dc\\security\\crlcache\\0fded5ceb68c302b1cdb2bddd9d0000e76539cb0.crl"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0061.269] GetFileType (hFile=0x444) returned 0x1 [0061.269] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0061.269] GetFileType (hFile=0x444) returned 0x1 [0061.269] WriteFile (in: hFile=0x444, lpBuffer=0x22893d8*, nNumberOfBytesToWrite=0x280, lpNumberOfBytesWritten=0x3be548, lpOverlapped=0x0 | out: lpBuffer=0x22893d8*, lpNumberOfBytesWritten=0x3be548*=0x280, lpOverlapped=0x0) returned 1 [0061.269] CloseHandle (hObject=0x444) returned 1 [0061.270] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\CRLCache\\0FDED5CEB68C302B1CDB2BDDD9D0000E76539CB0.crl", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\CRLCache\\0FDED5CEB68C302B1CDB2BDDD9D0000E76539CB0.crl", lpFilePart=0x0) returned 0x75 [0061.270] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\CRLCache\\0FDED5CEB68C302B1CDB2BDDD9D0000E76539CB0.crl.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\CRLCache\\0FDED5CEB68C302B1CDB2BDDD9D0000E76539CB0.crl.xuy", lpFilePart=0x0) returned 0x79 [0061.270] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0061.270] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\CRLCache\\0FDED5CEB68C302B1CDB2BDDD9D0000E76539CB0.crl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\acrobat\\dc\\security\\crlcache\\0fded5ceb68c302b1cdb2bddd9d0000e76539cb0.crl"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x888a1791, ftCreationTime.dwHighDateTime=0x1d2d43b, ftLastAccessTime.dwLowDateTime=0x888a1791, ftLastAccessTime.dwHighDateTime=0x1d2d43b, ftLastWriteTime.dwLowDateTime=0x105e31e9, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x280)) returned 1 [0061.270] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0061.270] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\CRLCache\\0FDED5CEB68C302B1CDB2BDDD9D0000E76539CB0.crl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\acrobat\\dc\\security\\crlcache\\0fded5ceb68c302b1cdb2bddd9d0000e76539cb0.crl"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\CRLCache\\0FDED5CEB68C302B1CDB2BDDD9D0000E76539CB0.crl.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\acrobat\\dc\\security\\crlcache\\0fded5ceb68c302b1cdb2bddd9d0000e76539cb0.crl.xuy")) returned 1 [0061.271] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\CRLCache\\CE338828149963DCEA4CD26BB86F0363B4CA0BA5.crl", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\CRLCache\\CE338828149963DCEA4CD26BB86F0363B4CA0BA5.crl", lpFilePart=0x0) returned 0x75 [0061.271] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0061.271] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\CRLCache\\CE338828149963DCEA4CD26BB86F0363B4CA0BA5.crl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\acrobat\\dc\\security\\crlcache\\ce338828149963dcea4cd26bb86f0363b4ca0ba5.crl"), fInfoLevelId=0x0, lpFileInformation=0x228a760 | out: lpFileInformation=0x228a760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8887b565, ftCreationTime.dwHighDateTime=0x1d2d43b, ftLastAccessTime.dwLowDateTime=0x8887b565, ftLastAccessTime.dwHighDateTime=0x1d2d43b, ftLastWriteTime.dwLowDateTime=0x1dd95253, ftLastWriteTime.dwHighDateTime=0x1d35db9, nFileSizeHigh=0x0, nFileSizeLow=0x1a9)) returned 1 [0061.271] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0061.271] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\CRLCache\\CE338828149963DCEA4CD26BB86F0363B4CA0BA5.crl", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\CRLCache\\CE338828149963DCEA4CD26BB86F0363B4CA0BA5.crl", lpFilePart=0x0) returned 0x75 [0061.271] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0061.271] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\CRLCache\\CE338828149963DCEA4CD26BB86F0363B4CA0BA5.crl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\acrobat\\dc\\security\\crlcache\\ce338828149963dcea4cd26bb86f0363b4ca0ba5.crl"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0061.271] GetFileType (hFile=0x444) returned 0x1 [0061.271] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0061.271] GetFileType (hFile=0x444) returned 0x1 [0061.271] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be708 | out: lpFileSizeHigh=0x3be708*=0x0) returned 0x1a9 [0061.271] ReadFile (in: hFile=0x444, lpBuffer=0x228acf8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be638, lpOverlapped=0x0 | out: lpBuffer=0x228acf8*, lpNumberOfBytesRead=0x3be638*=0x1a9, lpOverlapped=0x0) returned 1 [0061.272] CloseHandle (hObject=0x444) returned 1 [0061.282] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\CRLCache\\CE338828149963DCEA4CD26BB86F0363B4CA0BA5.crl", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\CRLCache\\CE338828149963DCEA4CD26BB86F0363B4CA0BA5.crl", lpFilePart=0x0) returned 0x75 [0061.282] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0061.282] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\CRLCache\\CE338828149963DCEA4CD26BB86F0363B4CA0BA5.crl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\acrobat\\dc\\security\\crlcache\\ce338828149963dcea4cd26bb86f0363b4ca0ba5.crl"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0061.283] GetFileType (hFile=0x444) returned 0x1 [0061.283] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0061.283] GetFileType (hFile=0x444) returned 0x1 [0061.283] WriteFile (in: hFile=0x444, lpBuffer=0x23025e0*, nNumberOfBytesToWrite=0x1b0, lpNumberOfBytesWritten=0x3be548, lpOverlapped=0x0 | out: lpBuffer=0x23025e0*, lpNumberOfBytesWritten=0x3be548*=0x1b0, lpOverlapped=0x0) returned 1 [0061.284] CloseHandle (hObject=0x444) returned 1 [0061.284] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\CRLCache\\CE338828149963DCEA4CD26BB86F0363B4CA0BA5.crl", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\CRLCache\\CE338828149963DCEA4CD26BB86F0363B4CA0BA5.crl", lpFilePart=0x0) returned 0x75 [0061.284] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\CRLCache\\CE338828149963DCEA4CD26BB86F0363B4CA0BA5.crl.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\CRLCache\\CE338828149963DCEA4CD26BB86F0363B4CA0BA5.crl.xuy", lpFilePart=0x0) returned 0x79 [0061.284] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0061.284] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\CRLCache\\CE338828149963DCEA4CD26BB86F0363B4CA0BA5.crl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\acrobat\\dc\\security\\crlcache\\ce338828149963dcea4cd26bb86f0363b4ca0ba5.crl"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8887b565, ftCreationTime.dwHighDateTime=0x1d2d43b, ftLastAccessTime.dwLowDateTime=0x8887b565, ftLastAccessTime.dwHighDateTime=0x1d2d43b, ftLastWriteTime.dwLowDateTime=0x10609319, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x1b0)) returned 1 [0061.284] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0061.284] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\CRLCache\\CE338828149963DCEA4CD26BB86F0363B4CA0BA5.crl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\acrobat\\dc\\security\\crlcache\\ce338828149963dcea4cd26bb86f0363b4ca0ba5.crl"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\CRLCache\\CE338828149963DCEA4CD26BB86F0363B4CA0BA5.crl.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\acrobat\\dc\\security\\crlcache\\ce338828149963dcea4cd26bb86f0363b4ca0ba5.crl.xuy")) returned 1 [0061.285] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0061.285] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Flash Player", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Flash Player", lpFilePart=0x0) returned 0x38 [0061.285] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Flash Player\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Flash Player\\", lpFilePart=0x0) returned 0x39 [0061.285] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Flash Player\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d81b0 [0061.285] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0061.285] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0061.286] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0061.286] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0061.286] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0061.286] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0061.286] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0061.286] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0061.286] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Flash Player", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Flash Player", lpFilePart=0x0) returned 0x38 [0061.286] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Flash Player\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Flash Player\\", lpFilePart=0x0) returned 0x39 [0061.286] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Flash Player\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d7af0 [0061.286] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0061.286] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0061.287] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0061.287] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0061.287] FindClose (in: hFindFile=0x5d7af0 | out: hFindFile=0x5d7af0) returned 1 [0061.287] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0061.287] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0061.287] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0061.287] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache", lpFilePart=0x0) returned 0x43 [0061.287] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\", lpFilePart=0x0) returned 0x44 [0061.287] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d81b0 [0061.316] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0061.317] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0061.317] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0061.317] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0061.317] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0061.317] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0061.317] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0061.317] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache", lpFilePart=0x0) returned 0x43 [0061.317] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\", lpFilePart=0x0) returned 0x44 [0061.317] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7550 [0061.317] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0061.317] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0061.317] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0061.317] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0061.317] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0061.318] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0061.318] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0061.318] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\NAHQNPMN", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\NAHQNPMN", lpFilePart=0x0) returned 0x4c [0061.318] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\NAHQNPMN\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\NAHQNPMN\\", lpFilePart=0x0) returned 0x4d [0061.318] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\NAHQNPMN\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d75b0 [0061.318] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0061.318] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0061.318] FindClose (in: hFindFile=0x5d75b0 | out: hFindFile=0x5d75b0) returned 1 [0061.318] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0061.318] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0061.318] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0061.318] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\NAHQNPMN", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\NAHQNPMN", lpFilePart=0x0) returned 0x4c [0061.318] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\NAHQNPMN\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\NAHQNPMN\\", lpFilePart=0x0) returned 0x4d [0061.318] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\NAHQNPMN\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d81b0 [0061.318] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0061.319] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0061.319] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0061.319] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0061.319] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0061.319] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0061.319] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Flash Player\\NativeCache", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Flash Player\\NativeCache", lpFilePart=0x0) returned 0x44 [0061.319] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Flash Player\\NativeCache\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Flash Player\\NativeCache\\", lpFilePart=0x0) returned 0x45 [0061.319] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Flash Player\\NativeCache\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7550 [0061.319] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0061.319] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0061.319] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0061.319] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0061.319] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0061.319] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0061.319] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0061.320] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Flash Player\\NativeCache", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Flash Player\\NativeCache", lpFilePart=0x0) returned 0x44 [0061.320] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Flash Player\\NativeCache\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Flash Player\\NativeCache\\", lpFilePart=0x0) returned 0x45 [0061.320] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Flash Player\\NativeCache\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d81b0 [0061.320] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0061.320] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0061.320] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0061.320] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0061.320] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0061.320] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0061.320] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Flash Player\\NativeCache\\NativeCache.directory", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Flash Player\\NativeCache\\NativeCache.directory", lpFilePart=0x0) returned 0x5a [0061.320] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0061.320] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Flash Player\\NativeCache\\NativeCache.directory" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\flash player\\nativecache\\nativecache.directory"), fInfoLevelId=0x0, lpFileInformation=0x230b2b8 | out: lpFileInformation=0x230b2b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x951d0a94, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x951d0a94, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x265e6afb, ftLastWriteTime.dwHighDateTime=0x1d2fc23, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0061.320] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0061.320] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Flash Player\\NativeCache\\NativeCache.directory", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Flash Player\\NativeCache\\NativeCache.directory", lpFilePart=0x0) returned 0x5a [0061.320] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0061.320] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Flash Player\\NativeCache\\NativeCache.directory" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\flash player\\nativecache\\nativecache.directory"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0061.321] GetFileType (hFile=0x444) returned 0x1 [0061.321] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0061.321] GetFileType (hFile=0x444) returned 0x1 [0061.321] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0x0 [0061.321] CloseHandle (hObject=0x444) returned 1 [0061.361] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Flash Player\\NativeCache\\NativeCache.directory", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Flash Player\\NativeCache\\NativeCache.directory", lpFilePart=0x0) returned 0x5a [0061.361] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0061.362] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Flash Player\\NativeCache\\NativeCache.directory" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\flash player\\nativecache\\nativecache.directory"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0061.362] GetFileType (hFile=0x444) returned 0x1 [0061.362] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0061.362] GetFileType (hFile=0x444) returned 0x1 [0061.362] WriteFile (in: hFile=0x444, lpBuffer=0x2181480*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x3be628, lpOverlapped=0x0 | out: lpBuffer=0x2181480*, lpNumberOfBytesWritten=0x3be628*=0x10, lpOverlapped=0x0) returned 1 [0061.364] CloseHandle (hObject=0x444) returned 1 [0061.364] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Flash Player\\NativeCache\\NativeCache.directory", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Flash Player\\NativeCache\\NativeCache.directory", lpFilePart=0x0) returned 0x5a [0061.364] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Flash Player\\NativeCache\\NativeCache.directory.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Flash Player\\NativeCache\\NativeCache.directory.xuy", lpFilePart=0x0) returned 0x5e [0061.364] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0061.364] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Flash Player\\NativeCache\\NativeCache.directory" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\flash player\\nativecache\\nativecache.directory"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x951d0a94, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x951d0a94, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x106c7ebd, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0061.364] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0061.364] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Flash Player\\NativeCache\\NativeCache.directory" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\flash player\\nativecache\\nativecache.directory"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Flash Player\\NativeCache\\NativeCache.directory.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\flash player\\nativecache\\nativecache.directory.xuy")) returned 1 [0061.365] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0061.365] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Headlights", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Headlights", lpFilePart=0x0) returned 0x36 [0061.365] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Headlights\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Headlights\\", lpFilePart=0x0) returned 0x37 [0061.365] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Headlights\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d7af0 [0061.378] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0061.379] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0061.379] FindClose (in: hFindFile=0x5d7af0 | out: hFindFile=0x5d7af0) returned 1 [0061.379] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0061.379] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0061.379] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0061.379] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Headlights", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Headlights", lpFilePart=0x0) returned 0x36 [0061.379] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Headlights\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Headlights\\", lpFilePart=0x0) returned 0x37 [0061.379] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Headlights\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d7550 [0061.379] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0061.379] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0061.379] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0061.379] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0061.379] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0061.379] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0061.379] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Linguistics", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Linguistics", lpFilePart=0x0) returned 0x37 [0061.380] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Linguistics\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Linguistics\\", lpFilePart=0x0) returned 0x38 [0061.380] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Linguistics\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d7550 [0061.382] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0061.382] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0061.382] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0061.382] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0061.382] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0061.382] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0061.382] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Linguistics", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Linguistics", lpFilePart=0x0) returned 0x37 [0061.382] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Linguistics\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Linguistics\\", lpFilePart=0x0) returned 0x38 [0061.382] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Linguistics\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d7370 [0061.383] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0061.383] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0061.383] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0061.383] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0061.383] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0061.383] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0061.383] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\LogTransport2", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\LogTransport2", lpFilePart=0x0) returned 0x39 [0061.383] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\LogTransport2\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\LogTransport2\\", lpFilePart=0x0) returned 0x3a [0061.383] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\LogTransport2\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d7370 [0061.383] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0061.383] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0061.383] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0061.384] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0061.384] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0061.384] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0061.384] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0061.384] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0061.384] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\LogTransport2", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\LogTransport2", lpFilePart=0x0) returned 0x39 [0061.384] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\LogTransport2\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\LogTransport2\\", lpFilePart=0x0) returned 0x3a [0061.384] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\LogTransport2\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d7d30 [0061.384] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0061.384] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0061.384] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0061.385] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0061.385] FindClose (in: hFindFile=0x5d7d30 | out: hFindFile=0x5d7d30) returned 1 [0061.385] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0061.385] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0061.385] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\LogTransport2\\LogTransport2.cfg", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\LogTransport2\\LogTransport2.cfg", lpFilePart=0x0) returned 0x4b [0061.385] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0061.385] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\LogTransport2\\LogTransport2.cfg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\logtransport2\\logtransport2.cfg"), fInfoLevelId=0x0, lpFileInformation=0x2187688 | out: lpFileInformation=0x2187688*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81fcf4d7, ftCreationTime.dwHighDateTime=0x1d2d43b, ftLastAccessTime.dwLowDateTime=0x81fcf4d7, ftLastAccessTime.dwHighDateTime=0x1d2d43b, ftLastWriteTime.dwLowDateTime=0xa0984a28, ftLastWriteTime.dwHighDateTime=0x1d336e1, nFileSizeHigh=0x0, nFileSizeLow=0xd8)) returned 1 [0061.385] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0061.385] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\LogTransport2\\LogTransport2.cfg", nBufferLength=0x105, lpBuffer=0x3be1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\LogTransport2\\LogTransport2.cfg", lpFilePart=0x0) returned 0x4b [0061.385] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6c0) returned 1 [0061.385] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\LogTransport2\\LogTransport2.cfg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\logtransport2\\logtransport2.cfg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0061.385] GetFileType (hFile=0x444) returned 0x1 [0061.385] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0061.385] GetFileType (hFile=0x444) returned 0x1 [0061.385] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be858 | out: lpFileSizeHigh=0x3be858*=0x0) returned 0xd8 [0061.385] ReadFile (in: hFile=0x444, lpBuffer=0x2187a28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be788, lpOverlapped=0x0 | out: lpBuffer=0x2187a28*, lpNumberOfBytesRead=0x3be788*=0xd8, lpOverlapped=0x0) returned 1 [0061.402] CloseHandle (hObject=0x444) returned 1 [0061.413] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\LogTransport2\\LogTransport2.cfg", nBufferLength=0x105, lpBuffer=0x3be1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\LogTransport2\\LogTransport2.cfg", lpFilePart=0x0) returned 0x4b [0061.414] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6c0) returned 1 [0061.414] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\LogTransport2\\LogTransport2.cfg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\logtransport2\\logtransport2.cfg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0061.415] GetFileType (hFile=0x444) returned 0x1 [0061.415] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0061.415] GetFileType (hFile=0x444) returned 0x1 [0061.415] WriteFile (in: hFile=0x444, lpBuffer=0x21fece8*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x3be698, lpOverlapped=0x0 | out: lpBuffer=0x21fece8*, lpNumberOfBytesWritten=0x3be698*=0xe0, lpOverlapped=0x0) returned 1 [0061.416] CloseHandle (hObject=0x444) returned 1 [0061.416] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\LogTransport2\\LogTransport2.cfg", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\LogTransport2\\LogTransport2.cfg", lpFilePart=0x0) returned 0x4b [0061.416] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\LogTransport2\\LogTransport2.cfg.xuy", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\LogTransport2\\LogTransport2.cfg.xuy", lpFilePart=0x0) returned 0x4f [0061.416] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0061.416] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\LogTransport2\\LogTransport2.cfg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\logtransport2\\logtransport2.cfg"), fInfoLevelId=0x0, lpFileInformation=0x3be8a0 | out: lpFileInformation=0x3be8a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81fcf4d7, ftCreationTime.dwHighDateTime=0x1d2d43b, ftLastAccessTime.dwLowDateTime=0x81fcf4d7, ftLastAccessTime.dwHighDateTime=0x1d2d43b, ftLastWriteTime.dwLowDateTime=0x1073a615, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1 [0061.416] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0061.416] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\LogTransport2\\LogTransport2.cfg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\logtransport2\\logtransport2.cfg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\LogTransport2\\LogTransport2.cfg.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\logtransport2\\logtransport2.cfg.xuy")) returned 1 [0061.417] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0061.417] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\LogTransport2\\Logs", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\LogTransport2\\Logs", lpFilePart=0x0) returned 0x3e [0061.417] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\LogTransport2\\Logs\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\LogTransport2\\Logs\\", lpFilePart=0x0) returned 0x3f [0061.417] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\LogTransport2\\Logs\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7e50 [0061.417] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0061.417] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0061.417] FindClose (in: hFindFile=0x5d7e50 | out: hFindFile=0x5d7e50) returned 1 [0061.417] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0061.417] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0061.417] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0061.417] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\LogTransport2\\Logs", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\LogTransport2\\Logs", lpFilePart=0x0) returned 0x3e [0061.417] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\LogTransport2\\Logs\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\LogTransport2\\Logs\\", lpFilePart=0x0) returned 0x3f [0061.417] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\LogTransport2\\Logs\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7670 [0061.418] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0061.418] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0061.418] FindClose (in: hFindFile=0x5d7670 | out: hFindFile=0x5d7670) returned 1 [0061.418] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0061.418] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0061.418] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0061.418] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Sonar", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Sonar", lpFilePart=0x0) returned 0x31 [0061.418] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Sonar\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Sonar\\", lpFilePart=0x0) returned 0x32 [0061.418] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Sonar\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d78b0 [0061.419] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0061.419] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0061.419] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0061.419] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0061.419] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0061.419] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0061.420] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0061.420] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Sonar", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Sonar", lpFilePart=0x0) returned 0x31 [0061.420] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Sonar\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Sonar\\", lpFilePart=0x0) returned 0x32 [0061.420] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Sonar\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d7a30 [0061.420] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0061.420] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0061.420] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0061.420] FindClose (in: hFindFile=0x5d7a30 | out: hFindFile=0x5d7a30) returned 1 [0061.420] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0061.420] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0061.420] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0061.420] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Sonar\\Sonar1.0", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Sonar\\Sonar1.0", lpFilePart=0x0) returned 0x3a [0061.420] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Sonar\\Sonar1.0\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Sonar\\Sonar1.0\\", lpFilePart=0x0) returned 0x3b [0061.421] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Sonar\\Sonar1.0\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7cd0 [0061.421] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0061.421] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0061.421] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0061.421] FindClose (in: hFindFile=0x5d7cd0 | out: hFindFile=0x5d7cd0) returned 1 [0061.421] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0061.421] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0061.421] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0061.421] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Sonar\\Sonar1.0", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Sonar\\Sonar1.0", lpFilePart=0x0) returned 0x3a [0061.421] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Sonar\\Sonar1.0\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Sonar\\Sonar1.0\\", lpFilePart=0x0) returned 0x3b [0061.421] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Sonar\\Sonar1.0\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d78b0 [0061.421] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0061.422] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0061.422] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0061.422] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0061.422] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0061.422] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0061.422] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Sonar\\Sonar1.0\\sonar_policy.xml", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Sonar\\Sonar1.0\\sonar_policy.xml", lpFilePart=0x0) returned 0x4b [0061.422] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0061.422] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Sonar\\Sonar1.0\\sonar_policy.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\sonar\\sonar1.0\\sonar_policy.xml"), fInfoLevelId=0x0, lpFileInformation=0x2204f20 | out: lpFileInformation=0x2204f20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x703eb0e4, ftCreationTime.dwHighDateTime=0x1d2d43f, ftLastAccessTime.dwLowDateTime=0x703eb0e4, ftLastAccessTime.dwHighDateTime=0x1d2d43f, ftLastWriteTime.dwLowDateTime=0xa02d00f0, ftLastWriteTime.dwHighDateTime=0x1d336e1, nFileSizeHigh=0x0, nFileSizeLow=0x4949)) returned 1 [0061.423] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0061.423] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Sonar\\Sonar1.0\\sonar_policy.xml", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Sonar\\Sonar1.0\\sonar_policy.xml", lpFilePart=0x0) returned 0x4b [0061.423] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0061.423] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Sonar\\Sonar1.0\\sonar_policy.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\sonar\\sonar1.0\\sonar_policy.xml"), fInfoLevelId=0x0, lpFileInformation=0x2205078 | out: lpFileInformation=0x2205078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x703eb0e4, ftCreationTime.dwHighDateTime=0x1d2d43f, ftLastAccessTime.dwLowDateTime=0x703eb0e4, ftLastAccessTime.dwHighDateTime=0x1d2d43f, ftLastWriteTime.dwLowDateTime=0xa02d00f0, ftLastWriteTime.dwHighDateTime=0x1d336e1, nFileSizeHigh=0x0, nFileSizeLow=0x4949)) returned 1 [0061.424] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0061.424] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Sonar\\Sonar1.0\\sonar_policy.xml", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Sonar\\Sonar1.0\\sonar_policy.xml", lpFilePart=0x0) returned 0x4b [0061.424] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0061.424] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Sonar\\Sonar1.0\\sonar_policy.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\sonar\\sonar1.0\\sonar_policy.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0061.424] GetFileType (hFile=0x444) returned 0x1 [0061.424] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0061.424] GetFileType (hFile=0x444) returned 0x1 [0061.424] ReadFile (in: hFile=0x444, lpBuffer=0x2207458, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x2207458*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0061.437] CloseHandle (hObject=0x444) returned 1 [0061.437] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Sonar\\Sonar1.0\\sonar_policy.xml", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Sonar\\Sonar1.0\\sonar_policy.xml", lpFilePart=0x0) returned 0x4b [0061.437] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0061.437] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Sonar\\Sonar1.0\\sonar_policy.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\sonar\\sonar1.0\\sonar_policy.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0061.437] GetFileType (hFile=0x444) returned 0x1 [0061.437] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0061.437] GetFileType (hFile=0x444) returned 0x1 [0061.437] WriteFile (in: hFile=0x444, lpBuffer=0x22051b0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x22051b0*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0061.438] CloseHandle (hObject=0x444) returned 1 [0061.438] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Sonar\\Sonar1.0\\sonar_policy.xml", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Sonar\\Sonar1.0\\sonar_policy.xml", lpFilePart=0x0) returned 0x4b [0061.438] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Sonar\\Sonar1.0\\sonar_policy.xml.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Sonar\\Sonar1.0\\sonar_policy.xml.xuy", lpFilePart=0x0) returned 0x4f [0061.438] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0061.438] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Sonar\\Sonar1.0\\sonar_policy.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\sonar\\sonar1.0\\sonar_policy.xml"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x703eb0e4, ftCreationTime.dwHighDateTime=0x1d2d43f, ftLastAccessTime.dwLowDateTime=0x703eb0e4, ftLastAccessTime.dwHighDateTime=0x1d2d43f, ftLastWriteTime.dwLowDateTime=0x10786aa9, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x4949)) returned 1 [0061.438] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0061.438] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Sonar\\Sonar1.0\\sonar_policy.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\sonar\\sonar1.0\\sonar_policy.xml"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Sonar\\Sonar1.0\\sonar_policy.xml.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\sonar\\sonar1.0\\sonar_policy.xml.xuy")) returned 1 [0061.439] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0061.439] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Identities", nBufferLength=0x105, lpBuffer=0x3be3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Identities", lpFilePart=0x0) returned 0x30 [0061.439] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Identities\\", nBufferLength=0x105, lpBuffer=0x3be370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Identities\\", lpFilePart=0x0) returned 0x31 [0061.439] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Identities\\*", lpFindFileData=0x3be580 | out: lpFindFileData=0x3be580) returned 0x5d79d0 [0061.439] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0061.439] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0061.439] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 0 [0061.439] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0061.439] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0061.439] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7f0) returned 1 [0061.439] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0061.439] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Identities", nBufferLength=0x105, lpBuffer=0x3be3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Identities", lpFilePart=0x0) returned 0x30 [0061.440] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Identities\\", nBufferLength=0x105, lpBuffer=0x3be370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Identities\\", lpFilePart=0x0) returned 0x31 [0061.440] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Identities\\*", lpFindFileData=0x3be580 | out: lpFindFileData=0x3be580) returned 0x5d7d30 [0061.440] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0061.440] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0061.440] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 0 [0061.440] FindClose (in: hFindFile=0x5d7d30 | out: hFindFile=0x5d7d30) returned 1 [0061.440] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0061.440] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7f0) returned 1 [0061.440] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0061.440] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Identities\\{CA8CA1BB-F2A6-4E9C-B7CC-FB56671763E8}", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Identities\\{CA8CA1BB-F2A6-4E9C-B7CC-FB56671763E8}", lpFilePart=0x0) returned 0x57 [0061.440] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Identities\\{CA8CA1BB-F2A6-4E9C-B7CC-FB56671763E8}\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Identities\\{CA8CA1BB-F2A6-4E9C-B7CC-FB56671763E8}\\", lpFilePart=0x0) returned 0x58 [0061.440] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Identities\\{CA8CA1BB-F2A6-4E9C-B7CC-FB56671763E8}\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d73d0 [0061.441] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0061.441] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0061.441] FindClose (in: hFindFile=0x5d73d0 | out: hFindFile=0x5d73d0) returned 1 [0061.441] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0061.441] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0061.441] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0061.441] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Identities\\{CA8CA1BB-F2A6-4E9C-B7CC-FB56671763E8}", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Identities\\{CA8CA1BB-F2A6-4E9C-B7CC-FB56671763E8}", lpFilePart=0x0) returned 0x57 [0061.441] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Identities\\{CA8CA1BB-F2A6-4E9C-B7CC-FB56671763E8}\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Identities\\{CA8CA1BB-F2A6-4E9C-B7CC-FB56671763E8}\\", lpFilePart=0x0) returned 0x58 [0061.441] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Identities\\{CA8CA1BB-F2A6-4E9C-B7CC-FB56671763E8}\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d73d0 [0061.441] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0061.441] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0061.442] FindClose (in: hFindFile=0x5d73d0 | out: hFindFile=0x5d73d0) returned 1 [0061.442] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0061.442] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0061.442] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0061.442] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia", nBufferLength=0x105, lpBuffer=0x3be3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia", lpFilePart=0x0) returned 0x30 [0061.442] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\", nBufferLength=0x105, lpBuffer=0x3be370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\", lpFilePart=0x0) returned 0x31 [0061.442] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\*", lpFindFileData=0x3be580 | out: lpFindFileData=0x3be580) returned 0x5d78b0 [0061.445] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0061.446] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0061.446] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 0 [0061.446] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0061.446] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0061.446] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7f0) returned 1 [0061.446] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0061.446] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia", nBufferLength=0x105, lpBuffer=0x3be3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia", lpFilePart=0x0) returned 0x30 [0061.446] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\", nBufferLength=0x105, lpBuffer=0x3be370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\", lpFilePart=0x0) returned 0x31 [0061.446] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\*", lpFindFileData=0x3be580 | out: lpFindFileData=0x3be580) returned 0x5d78b0 [0061.446] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0061.447] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0061.447] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 0 [0061.447] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0061.447] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0061.447] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7f0) returned 1 [0061.447] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0061.447] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player", lpFilePart=0x0) returned 0x3d [0061.447] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\", lpFilePart=0x0) returned 0x3e [0061.447] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d7550 [0061.447] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0061.447] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0061.447] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0061.448] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0061.448] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0061.448] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0061.448] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0061.448] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0061.448] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player", lpFilePart=0x0) returned 0x3d [0061.448] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\", lpFilePart=0x0) returned 0x3e [0061.448] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d7d30 [0061.448] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0061.448] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0061.448] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0061.448] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0061.449] FindClose (in: hFindFile=0x5d7d30 | out: hFindFile=0x5d7d30) returned 1 [0061.449] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0061.449] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0061.449] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0061.449] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects", lpFilePart=0x0) returned 0x4c [0061.449] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\", lpFilePart=0x0) returned 0x4d [0061.449] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7550 [0061.449] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0061.449] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0061.449] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0061.449] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0061.449] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0061.450] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0061.450] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0061.450] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects", lpFilePart=0x0) returned 0x4c [0061.450] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\", lpFilePart=0x0) returned 0x4d [0061.450] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d81b0 [0061.450] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0061.450] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0061.450] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0061.450] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0061.450] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0061.450] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0061.451] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0061.451] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\DQQHJZ8C", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\DQQHJZ8C", lpFilePart=0x0) returned 0x55 [0061.451] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\DQQHJZ8C\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\DQQHJZ8C\\", lpFilePart=0x0) returned 0x56 [0061.451] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\DQQHJZ8C\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d79d0 [0061.451] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0061.451] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0061.451] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0061.451] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0061.451] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0061.451] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0061.451] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\DQQHJZ8C", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\DQQHJZ8C", lpFilePart=0x0) returned 0x55 [0061.451] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\DQQHJZ8C\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\DQQHJZ8C\\", lpFilePart=0x0) returned 0x56 [0061.451] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\DQQHJZ8C\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d78b0 [0061.452] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0061.452] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0061.452] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0061.452] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0061.452] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0061.452] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0061.452] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com", lpFilePart=0x0) returned 0x4c [0061.452] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\", lpFilePart=0x0) returned 0x4d [0061.452] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7d30 [0061.452] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0061.452] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0061.452] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0061.453] FindClose (in: hFindFile=0x5d7d30 | out: hFindFile=0x5d7d30) returned 1 [0061.453] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0061.453] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0061.453] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0061.453] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com", lpFilePart=0x0) returned 0x4c [0061.453] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\", lpFilePart=0x0) returned 0x4d [0061.453] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7370 [0061.453] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0061.453] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0061.453] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0061.453] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0061.453] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0061.453] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0061.453] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0061.453] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support", lpFilePart=0x0) returned 0x54 [0061.453] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\", lpFilePart=0x0) returned 0x55 [0061.453] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7550 [0061.454] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0061.454] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0061.454] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0061.454] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0061.454] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0061.454] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0061.454] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0061.454] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support", lpFilePart=0x0) returned 0x54 [0061.454] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\", lpFilePart=0x0) returned 0x55 [0061.454] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7f10 [0061.454] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0061.455] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0061.455] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0061.455] FindClose (in: hFindFile=0x5d7f10 | out: hFindFile=0x5d7f10) returned 1 [0061.455] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0061.455] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0061.455] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0061.455] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer", lpFilePart=0x0) returned 0x60 [0061.455] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\", lpFilePart=0x0) returned 0x61 [0061.455] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d7d90 [0061.455] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0061.455] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0061.455] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0061.455] FindClose (in: hFindFile=0x5d7d90 | out: hFindFile=0x5d7d90) returned 1 [0061.456] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0061.456] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0061.456] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0061.456] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer", lpFilePart=0x0) returned 0x60 [0061.456] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\", lpFilePart=0x0) returned 0x61 [0061.456] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d7d90 [0061.456] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0061.456] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0061.456] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0061.456] FindClose (in: hFindFile=0x5d7d90 | out: hFindFile=0x5d7d90) returned 1 [0061.456] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0061.456] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0061.456] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0061.456] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys", lpFilePart=0x0) returned 0x64 [0061.456] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\", lpFilePart=0x0) returned 0x65 [0061.456] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d7df0 [0061.457] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0061.457] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0061.457] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0061.457] FindClose (in: hFindFile=0x5d7df0 | out: hFindFile=0x5d7df0) returned 1 [0061.457] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0061.457] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0061.457] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0061.457] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys", lpFilePart=0x0) returned 0x64 [0061.457] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\", lpFilePart=0x0) returned 0x65 [0061.457] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d79d0 [0061.457] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0061.457] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0061.457] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0061.458] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0061.458] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0061.458] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0061.458] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\settings.sol", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\settings.sol", lpFilePart=0x0) returned 0x71 [0061.458] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0061.458] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\settings.sol" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\macromedia\\flash player\\macromedia.com\\support\\flashplayer\\sys\\settings.sol"), fInfoLevelId=0x0, lpFileInformation=0x2297850 | out: lpFileInformation=0x2297850*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37494b33, ftCreationTime.dwHighDateTime=0x1d2d43b, ftLastAccessTime.dwLowDateTime=0x95410d73, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x95410d73, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0x1fa)) returned 1 [0061.458] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0061.458] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\settings.sol", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\settings.sol", lpFilePart=0x0) returned 0x71 [0061.458] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0061.458] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\settings.sol" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\macromedia\\flash player\\macromedia.com\\support\\flashplayer\\sys\\settings.sol"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0061.458] GetFileType (hFile=0x444) returned 0x1 [0061.458] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0061.458] GetFileType (hFile=0x444) returned 0x1 [0061.458] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x1fa [0061.458] ReadFile (in: hFile=0x444, lpBuffer=0x2297da8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x2297da8*, lpNumberOfBytesRead=0x3be5c8*=0x1fa, lpOverlapped=0x0) returned 1 [0061.469] CloseHandle (hObject=0x444) returned 1 [0061.479] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\settings.sol", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\settings.sol", lpFilePart=0x0) returned 0x71 [0061.479] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0061.479] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\settings.sol" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\macromedia\\flash player\\macromedia.com\\support\\flashplayer\\sys\\settings.sol"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0061.481] GetFileType (hFile=0x444) returned 0x1 [0061.481] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0061.481] GetFileType (hFile=0x444) returned 0x1 [0061.481] WriteFile (in: hFile=0x444, lpBuffer=0x230f7d8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x230f7d8*, lpNumberOfBytesWritten=0x3be4d8*=0x200, lpOverlapped=0x0) returned 1 [0061.481] CloseHandle (hObject=0x444) returned 1 [0061.481] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\settings.sol", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\settings.sol", lpFilePart=0x0) returned 0x71 [0061.481] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\settings.sol.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\settings.sol.xuy", lpFilePart=0x0) returned 0x75 [0061.482] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0061.482] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\settings.sol" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\macromedia\\flash player\\macromedia.com\\support\\flashplayer\\sys\\settings.sol"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37494b33, ftCreationTime.dwHighDateTime=0x1d2d43b, ftLastAccessTime.dwLowDateTime=0x95410d73, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x107d2f4a, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x200)) returned 1 [0061.483] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0061.484] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\settings.sol" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\macromedia\\flash player\\macromedia.com\\support\\flashplayer\\sys\\settings.sol"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\settings.sol.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\macromedia\\flash player\\macromedia.com\\support\\flashplayer\\sys\\settings.sol.xuy")) returned 1 [0061.484] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0061.484] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft", nBufferLength=0x105, lpBuffer=0x3be3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft", lpFilePart=0x0) returned 0x2f [0061.484] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\", nBufferLength=0x105, lpBuffer=0x3be370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\", lpFilePart=0x0) returned 0x30 [0061.484] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\*", lpFindFileData=0x3be580 | out: lpFindFileData=0x3be580) returned 0x5d7fd0 [0061.484] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0061.485] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0061.485] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0061.485] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0061.485] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0061.485] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0061.485] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0061.485] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0061.485] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0061.485] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0061.485] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0061.485] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0061.485] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0061.485] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0061.485] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0061.485] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0061.485] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0061.485] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0061.485] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0061.485] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0061.485] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0061.485] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0061.485] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0061.485] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0061.485] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0061.485] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0061.485] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0061.485] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 0 [0061.485] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0061.486] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0061.486] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7f0) returned 1 [0061.486] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0061.486] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft", nBufferLength=0x105, lpBuffer=0x3be3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft", lpFilePart=0x0) returned 0x2f [0061.486] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\", nBufferLength=0x105, lpBuffer=0x3be370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\", lpFilePart=0x0) returned 0x30 [0061.486] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\*", lpFindFileData=0x3be580 | out: lpFindFileData=0x3be580) returned 0x5d7370 [0061.486] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0061.486] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0061.486] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0061.486] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0061.486] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0061.486] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0061.486] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0061.486] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0061.486] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0061.486] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0061.486] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0061.486] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0061.486] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0061.486] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0061.486] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0061.486] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0061.486] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0061.486] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0061.486] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0061.486] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0061.486] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0061.486] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0061.486] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0061.486] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0061.487] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0061.487] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0061.487] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0061.487] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 0 [0061.487] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0061.487] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0061.487] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7f0) returned 1 [0061.487] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0061.487] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Access", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Access", lpFilePart=0x0) returned 0x36 [0061.487] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Access\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Access\\", lpFilePart=0x0) returned 0x37 [0061.487] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Access\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d73d0 [0061.487] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0061.487] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0061.487] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0061.487] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0061.487] FindClose (in: hFindFile=0x5d73d0 | out: hFindFile=0x5d73d0) returned 1 [0061.487] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0061.487] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0061.487] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0061.487] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Access", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Access", lpFilePart=0x0) returned 0x36 [0061.487] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Access\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Access\\", lpFilePart=0x0) returned 0x37 [0061.487] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Access\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d79d0 [0061.488] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0061.488] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0061.488] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0061.488] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0061.488] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0061.488] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0061.488] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0061.488] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Access\\AccessCache.accdb", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Access\\AccessCache.accdb", lpFilePart=0x0) returned 0x48 [0061.488] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0061.488] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Access\\AccessCache.accdb" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\access\\accesscache.accdb"), fInfoLevelId=0x0, lpFileInformation=0x2319b28 | out: lpFileInformation=0x2319b28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x122f1cc8, ftCreationTime.dwHighDateTime=0x1d3aaaf, ftLastAccessTime.dwLowDateTime=0x122f1cc8, ftLastAccessTime.dwHighDateTime=0x1d3aaaf, ftLastWriteTime.dwLowDateTime=0x1eaf7fb0, ftLastWriteTime.dwHighDateTime=0x1d3aaaf, nFileSizeHigh=0x0, nFileSizeLow=0x31000)) returned 1 [0061.488] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0061.488] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Access\\AccessCache.accdb", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Access\\AccessCache.accdb", lpFilePart=0x0) returned 0x48 [0061.488] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0061.488] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Access\\AccessCache.accdb" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\access\\accesscache.accdb"), fInfoLevelId=0x0, lpFileInformation=0x2319c80 | out: lpFileInformation=0x2319c80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x122f1cc8, ftCreationTime.dwHighDateTime=0x1d3aaaf, ftLastAccessTime.dwLowDateTime=0x122f1cc8, ftLastAccessTime.dwHighDateTime=0x1d3aaaf, ftLastWriteTime.dwLowDateTime=0x1eaf7fb0, ftLastWriteTime.dwHighDateTime=0x1d3aaaf, nFileSizeHigh=0x0, nFileSizeLow=0x31000)) returned 1 [0061.488] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0061.488] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Access\\AccessCache.accdb", nBufferLength=0x105, lpBuffer=0x3be270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Access\\AccessCache.accdb", lpFilePart=0x0) returned 0x48 [0061.488] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0061.488] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Access\\AccessCache.accdb" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\access\\accesscache.accdb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0061.489] GetFileType (hFile=0x444) returned 0x1 [0061.489] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6c0) returned 1 [0061.489] GetFileType (hFile=0x444) returned 0x1 [0061.489] ReadFile (in: hFile=0x444, lpBuffer=0x231c060, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be7d8, lpOverlapped=0x0 | out: lpBuffer=0x231c060*, lpNumberOfBytesRead=0x3be7d8*=0x1000, lpOverlapped=0x0) returned 1 [0061.635] CloseHandle (hObject=0x444) returned 1 [0061.636] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Access\\AccessCache.accdb", nBufferLength=0x105, lpBuffer=0x3be270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Access\\AccessCache.accdb", lpFilePart=0x0) returned 0x48 [0061.636] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0061.636] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Access\\AccessCache.accdb" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\access\\accesscache.accdb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0061.636] GetFileType (hFile=0x444) returned 0x1 [0061.636] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6c0) returned 1 [0061.636] GetFileType (hFile=0x444) returned 0x1 [0061.636] WriteFile (in: hFile=0x444, lpBuffer=0x215ae50*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be888, lpOverlapped=0x0 | out: lpBuffer=0x215ae50*, lpNumberOfBytesWritten=0x3be888*=0x2000, lpOverlapped=0x0) returned 1 [0061.636] CloseHandle (hObject=0x444) returned 1 [0061.636] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Access\\AccessCache.accdb", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Access\\AccessCache.accdb", lpFilePart=0x0) returned 0x48 [0061.636] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Access\\AccessCache.accdb.xuy", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Access\\AccessCache.accdb.xuy", lpFilePart=0x0) returned 0x4c [0061.636] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0061.636] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Access\\AccessCache.accdb" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\access\\accesscache.accdb"), fInfoLevelId=0x0, lpFileInformation=0x3be8a0 | out: lpFileInformation=0x3be8a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x122f1cc8, ftCreationTime.dwHighDateTime=0x1d3aaaf, ftLastAccessTime.dwLowDateTime=0x122f1cc8, ftLastAccessTime.dwHighDateTime=0x1d3aaaf, ftLastWriteTime.dwLowDateTime=0x109506a5, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x31000)) returned 1 [0061.637] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0061.637] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Access\\AccessCache.accdb" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\access\\accesscache.accdb"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Access\\AccessCache.accdb.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\access\\accesscache.accdb.xuy")) returned 1 [0061.637] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Access\\System.mdw", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Access\\System.mdw", lpFilePart=0x0) returned 0x41 [0061.637] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0061.637] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Access\\System.mdw" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\access\\system.mdw"), fInfoLevelId=0x0, lpFileInformation=0x219c100 | out: lpFileInformation=0x219c100*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1127d24b, ftCreationTime.dwHighDateTime=0x1d3aaaf, ftLastAccessTime.dwLowDateTime=0x1127d24b, ftLastAccessTime.dwHighDateTime=0x1d3aaaf, ftLastWriteTime.dwLowDateTime=0x113007c2, ftLastWriteTime.dwHighDateTime=0x1d3aaaf, nFileSizeHigh=0x0, nFileSizeLow=0x1f000)) returned 1 [0061.658] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0061.658] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Access\\System.mdw", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Access\\System.mdw", lpFilePart=0x0) returned 0x41 [0061.658] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0061.658] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Access\\System.mdw" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\access\\system.mdw"), fInfoLevelId=0x0, lpFileInformation=0x219c238 | out: lpFileInformation=0x219c238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1127d24b, ftCreationTime.dwHighDateTime=0x1d3aaaf, ftLastAccessTime.dwLowDateTime=0x1127d24b, ftLastAccessTime.dwHighDateTime=0x1d3aaaf, ftLastWriteTime.dwLowDateTime=0x113007c2, ftLastWriteTime.dwHighDateTime=0x1d3aaaf, nFileSizeHigh=0x0, nFileSizeLow=0x1f000)) returned 1 [0061.658] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0061.658] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Access\\System.mdw", nBufferLength=0x105, lpBuffer=0x3be270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Access\\System.mdw", lpFilePart=0x0) returned 0x41 [0061.658] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0061.659] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Access\\System.mdw" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\access\\system.mdw"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0061.659] GetFileType (hFile=0x444) returned 0x1 [0061.659] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6c0) returned 1 [0061.659] GetFileType (hFile=0x444) returned 0x1 [0061.659] ReadFile (in: hFile=0x444, lpBuffer=0x219e5d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be7d8, lpOverlapped=0x0 | out: lpBuffer=0x219e5d8*, lpNumberOfBytesRead=0x3be7d8*=0x1000, lpOverlapped=0x0) returned 1 [0061.686] CloseHandle (hObject=0x444) returned 1 [0061.686] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Access\\System.mdw", nBufferLength=0x105, lpBuffer=0x3be270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Access\\System.mdw", lpFilePart=0x0) returned 0x41 [0061.686] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0061.686] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Access\\System.mdw" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\access\\system.mdw"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0061.686] GetFileType (hFile=0x444) returned 0x1 [0061.686] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6c0) returned 1 [0061.686] GetFileType (hFile=0x444) returned 0x1 [0061.686] WriteFile (in: hFile=0x444, lpBuffer=0x219c350*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be888, lpOverlapped=0x0 | out: lpBuffer=0x219c350*, lpNumberOfBytesWritten=0x3be888*=0x2000, lpOverlapped=0x0) returned 1 [0061.687] CloseHandle (hObject=0x444) returned 1 [0061.687] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Access\\System.mdw", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Access\\System.mdw", lpFilePart=0x0) returned 0x41 [0061.687] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Access\\System.mdw.xuy", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Access\\System.mdw.xuy", lpFilePart=0x0) returned 0x45 [0061.687] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0061.687] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Access\\System.mdw" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\access\\system.mdw"), fInfoLevelId=0x0, lpFileInformation=0x3be8a0 | out: lpFileInformation=0x3be8a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1127d24b, ftCreationTime.dwHighDateTime=0x1d3aaaf, ftLastAccessTime.dwLowDateTime=0x1127d24b, ftLastAccessTime.dwHighDateTime=0x1d3aaaf, ftLastWriteTime.dwLowDateTime=0x109e8ff7, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x1f000)) returned 1 [0061.687] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0061.687] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Access\\System.mdw" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\access\\system.mdw"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Access\\System.mdw.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\access\\system.mdw.xuy")) returned 1 [0061.688] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0061.688] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\AddIns", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\AddIns", lpFilePart=0x0) returned 0x36 [0061.688] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\AddIns\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\AddIns\\", lpFilePart=0x0) returned 0x37 [0061.688] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\AddIns\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d78b0 [0061.688] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0061.689] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0061.689] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0061.689] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0061.689] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0061.689] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0061.689] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\AddIns", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\AddIns", lpFilePart=0x0) returned 0x36 [0061.689] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\AddIns\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\AddIns\\", lpFilePart=0x0) returned 0x37 [0061.689] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\AddIns\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d7c70 [0061.689] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0061.689] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0061.689] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0061.689] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0061.689] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0061.689] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0061.690] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography", lpFilePart=0x0) returned 0x3c [0061.690] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\", lpFilePart=0x0) returned 0x3d [0061.690] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d7eb0 [0061.690] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0061.690] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0061.690] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0061.690] FindClose (in: hFindFile=0x5d7eb0 | out: hFindFile=0x5d7eb0) returned 1 [0061.696] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0061.696] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0061.696] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0061.696] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography", lpFilePart=0x0) returned 0x3c [0061.696] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\", lpFilePart=0x0) returned 0x3d [0061.696] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d7cd0 [0061.696] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0061.696] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0061.696] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0061.696] FindClose (in: hFindFile=0x5d7cd0 | out: hFindFile=0x5d7cd0) returned 1 [0061.696] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0061.696] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0061.696] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0061.696] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style", lpFilePart=0x0) returned 0x42 [0061.696] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\", lpFilePart=0x0) returned 0x43 [0061.696] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7fd0 [0061.754] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0061.754] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0061.754] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0061.755] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0061.755] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0061.755] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0061.755] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0061.755] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0061.755] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0061.755] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0061.755] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0061.755] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0061.756] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0061.756] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0061.756] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0061.756] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0061.756] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0061.756] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0061.756] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style", lpFilePart=0x0) returned 0x42 [0061.757] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\", lpFilePart=0x0) returned 0x43 [0061.757] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7df0 [0061.757] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0061.757] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0061.758] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0061.758] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0061.758] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0061.758] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0061.758] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0061.758] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0061.758] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0061.759] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0061.759] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0061.759] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0061.759] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0061.759] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0061.759] FindClose (in: hFindFile=0x5d7df0 | out: hFindFile=0x5d7df0) returned 1 [0061.760] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0061.760] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0061.760] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\APASixthEditionOfficeOnline.xsl", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\APASixthEditionOfficeOnline.xsl", lpFilePart=0x0) returned 0x62 [0061.760] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0061.760] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\APASixthEditionOfficeOnline.xsl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\apasixtheditionofficeonline.xsl"), fInfoLevelId=0x0, lpFileInformation=0x2222da0 | out: lpFileInformation=0x2222da0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49a969e8, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x49a969e8, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0xb0e48032, ftLastWriteTime.dwHighDateTime=0x1d2d426, nFileSizeHigh=0x0, nFileSizeLow=0x51722)) returned 1 [0061.761] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0061.761] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\APASixthEditionOfficeOnline.xsl", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\APASixthEditionOfficeOnline.xsl", lpFilePart=0x0) returned 0x62 [0061.761] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0061.761] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\APASixthEditionOfficeOnline.xsl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\apasixtheditionofficeonline.xsl"), fInfoLevelId=0x0, lpFileInformation=0x2222f40 | out: lpFileInformation=0x2222f40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49a969e8, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x49a969e8, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0xb0e48032, ftLastWriteTime.dwHighDateTime=0x1d2d426, nFileSizeHigh=0x0, nFileSizeLow=0x51722)) returned 1 [0061.761] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0061.761] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\APASixthEditionOfficeOnline.xsl", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\APASixthEditionOfficeOnline.xsl", lpFilePart=0x0) returned 0x62 [0061.761] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0061.761] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\APASixthEditionOfficeOnline.xsl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\apasixtheditionofficeonline.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0061.761] GetFileType (hFile=0x444) returned 0x1 [0061.761] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0061.761] GetFileType (hFile=0x444) returned 0x1 [0061.761] ReadFile (in: hFile=0x444, lpBuffer=0x22253b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x22253b0*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0061.791] CloseHandle (hObject=0x444) returned 1 [0061.791] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\APASixthEditionOfficeOnline.xsl", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\APASixthEditionOfficeOnline.xsl", lpFilePart=0x0) returned 0x62 [0061.791] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0061.791] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\APASixthEditionOfficeOnline.xsl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\apasixtheditionofficeonline.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0061.792] GetFileType (hFile=0x444) returned 0x1 [0061.792] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0061.792] GetFileType (hFile=0x444) returned 0x1 [0061.792] WriteFile (in: hFile=0x444, lpBuffer=0x22230c0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x22230c0*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0061.792] CloseHandle (hObject=0x444) returned 1 [0061.792] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\APASixthEditionOfficeOnline.xsl", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\APASixthEditionOfficeOnline.xsl", lpFilePart=0x0) returned 0x62 [0061.792] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\APASixthEditionOfficeOnline.xsl.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\APASixthEditionOfficeOnline.xsl.xuy", lpFilePart=0x0) returned 0x66 [0061.792] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0061.792] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\APASixthEditionOfficeOnline.xsl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\apasixtheditionofficeonline.xsl"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49a969e8, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x49a969e8, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x10acdd58, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x51722)) returned 1 [0061.792] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0061.792] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\APASixthEditionOfficeOnline.xsl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\apasixtheditionofficeonline.xsl"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\APASixthEditionOfficeOnline.xsl.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\apasixtheditionofficeonline.xsl.xuy")) returned 1 [0061.793] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\CHICAGO.XSL", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\CHICAGO.XSL", lpFilePart=0x0) returned 0x4e [0061.793] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0061.793] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\CHICAGO.XSL" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\chicago.xsl"), fInfoLevelId=0x0, lpFileInformation=0x22a1848 | out: lpFileInformation=0x22a1848*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49ae2e90, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x49ae2e90, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x7089a712, ftLastWriteTime.dwHighDateTime=0x1d2d426, nFileSizeHigh=0x0, nFileSizeLow=0x48839)) returned 1 [0061.793] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0061.793] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\CHICAGO.XSL", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\CHICAGO.XSL", lpFilePart=0x0) returned 0x4e [0061.793] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0061.793] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\CHICAGO.XSL" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\chicago.xsl"), fInfoLevelId=0x0, lpFileInformation=0x22a1998 | out: lpFileInformation=0x22a1998*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49ae2e90, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x49ae2e90, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x7089a712, ftLastWriteTime.dwHighDateTime=0x1d2d426, nFileSizeHigh=0x0, nFileSizeLow=0x48839)) returned 1 [0061.793] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0061.793] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\CHICAGO.XSL", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\CHICAGO.XSL", lpFilePart=0x0) returned 0x4e [0061.793] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0061.793] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\CHICAGO.XSL" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\chicago.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0061.794] GetFileType (hFile=0x444) returned 0x1 [0061.794] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0061.794] GetFileType (hFile=0x444) returned 0x1 [0061.794] ReadFile (in: hFile=0x444, lpBuffer=0x22a3d68, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x22a3d68*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0061.816] CloseHandle (hObject=0x444) returned 1 [0061.817] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\CHICAGO.XSL", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\CHICAGO.XSL", lpFilePart=0x0) returned 0x4e [0061.817] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0061.817] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\CHICAGO.XSL" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\chicago.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0061.817] GetFileType (hFile=0x444) returned 0x1 [0061.817] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0061.817] GetFileType (hFile=0x444) returned 0x1 [0061.817] WriteFile (in: hFile=0x444, lpBuffer=0x22a1ac8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x22a1ac8*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0061.817] CloseHandle (hObject=0x444) returned 1 [0061.817] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\CHICAGO.XSL", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\CHICAGO.XSL", lpFilePart=0x0) returned 0x4e [0061.817] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\CHICAGO.XSL.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\CHICAGO.XSL.xuy", lpFilePart=0x0) returned 0x52 [0061.817] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0061.817] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\CHICAGO.XSL" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\chicago.xsl"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49ae2e90, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x49ae2e90, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x10b1a472, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x48839)) returned 1 [0061.818] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0061.818] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\CHICAGO.XSL" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\chicago.xsl"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\CHICAGO.XSL.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\chicago.xsl.xuy")) returned 1 [0061.818] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GB.XSL", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GB.XSL", lpFilePart=0x0) returned 0x49 [0061.818] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0061.818] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GB.XSL" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\gb.xsl"), fInfoLevelId=0x0, lpFileInformation=0x2320138 | out: lpFileInformation=0x2320138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49b7b6e8, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x49b7b6e8, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6fe5246f, ftLastWriteTime.dwHighDateTime=0x1d2d426, nFileSizeHigh=0x0, nFileSizeLow=0x4197e)) returned 1 [0061.818] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0061.818] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GB.XSL", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GB.XSL", lpFilePart=0x0) returned 0x49 [0061.818] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0061.818] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GB.XSL" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\gb.xsl"), fInfoLevelId=0x0, lpFileInformation=0x2320278 | out: lpFileInformation=0x2320278*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49b7b6e8, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x49b7b6e8, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6fe5246f, ftLastWriteTime.dwHighDateTime=0x1d2d426, nFileSizeHigh=0x0, nFileSizeLow=0x4197e)) returned 1 [0061.819] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0061.819] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GB.XSL", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GB.XSL", lpFilePart=0x0) returned 0x49 [0061.819] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0061.819] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GB.XSL" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\gb.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0061.819] GetFileType (hFile=0x444) returned 0x1 [0061.819] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0061.819] GetFileType (hFile=0x444) returned 0x1 [0061.819] ReadFile (in: hFile=0x444, lpBuffer=0x2322628, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x2322628*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0061.883] CloseHandle (hObject=0x444) returned 1 [0061.883] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GB.XSL", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GB.XSL", lpFilePart=0x0) returned 0x49 [0061.884] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0061.884] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GB.XSL" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\gb.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0061.884] GetFileType (hFile=0x444) returned 0x1 [0061.884] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0061.884] GetFileType (hFile=0x444) returned 0x1 [0061.884] WriteFile (in: hFile=0x444, lpBuffer=0x215b778*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x215b778*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0061.884] CloseHandle (hObject=0x444) returned 1 [0061.884] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GB.XSL", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GB.XSL", lpFilePart=0x0) returned 0x49 [0061.885] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GB.XSL.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GB.XSL.xuy", lpFilePart=0x0) returned 0x4d [0061.885] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0061.885] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GB.XSL" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\gb.xsl"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49b7b6e8, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x49b7b6e8, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x10bb2db0, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x4197e)) returned 1 [0061.885] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0061.885] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GB.XSL" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\gb.xsl"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GB.XSL.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\gb.xsl.xuy")) returned 1 [0061.885] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GostName.XSL", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GostName.XSL", lpFilePart=0x0) returned 0x4f [0061.885] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0061.885] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GostName.XSL" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\gostname.xsl"), fInfoLevelId=0x0, lpFileInformation=0x219f2d0 | out: lpFileInformation=0x219f2d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49ba18f1, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x49ba18f1, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x70258426, ftLastWriteTime.dwHighDateTime=0x1d2d426, nFileSizeHigh=0x0, nFileSizeLow=0x3e966)) returned 1 [0061.888] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0061.889] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GostName.XSL", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GostName.XSL", lpFilePart=0x0) returned 0x4f [0061.889] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0061.889] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GostName.XSL" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\gostname.xsl"), fInfoLevelId=0x0, lpFileInformation=0x219f428 | out: lpFileInformation=0x219f428*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49ba18f1, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x49ba18f1, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x70258426, ftLastWriteTime.dwHighDateTime=0x1d2d426, nFileSizeHigh=0x0, nFileSizeLow=0x3e966)) returned 1 [0061.889] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0061.889] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GostName.XSL", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GostName.XSL", lpFilePart=0x0) returned 0x4f [0061.889] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0061.889] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GostName.XSL" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\gostname.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0061.889] GetFileType (hFile=0x444) returned 0x1 [0061.889] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0061.889] GetFileType (hFile=0x444) returned 0x1 [0061.889] ReadFile (in: hFile=0x444, lpBuffer=0x21a1808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x21a1808*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0061.922] CloseHandle (hObject=0x444) returned 1 [0061.922] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GostName.XSL", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GostName.XSL", lpFilePart=0x0) returned 0x4f [0061.922] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0061.922] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GostName.XSL" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\gostname.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0061.923] GetFileType (hFile=0x444) returned 0x1 [0061.923] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0061.923] GetFileType (hFile=0x444) returned 0x1 [0061.923] WriteFile (in: hFile=0x444, lpBuffer=0x219f560*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x219f560*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0061.923] CloseHandle (hObject=0x444) returned 1 [0061.923] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GostName.XSL", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GostName.XSL", lpFilePart=0x0) returned 0x4f [0061.923] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GostName.XSL.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GostName.XSL.xuy", lpFilePart=0x0) returned 0x53 [0061.923] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0061.923] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GostName.XSL" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\gostname.xsl"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49ba18f1, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x49ba18f1, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x10c25769, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x3e966)) returned 1 [0061.923] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0061.923] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GostName.XSL" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\gostname.xsl"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GostName.XSL.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\gostname.xsl.xuy")) returned 1 [0061.924] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GostTitle.XSL", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GostTitle.XSL", lpFilePart=0x0) returned 0x50 [0061.924] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0061.924] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GostTitle.XSL" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\gosttitle.xsl"), fInfoLevelId=0x0, lpFileInformation=0x221dbe0 | out: lpFileInformation=0x221dbe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49bc7b75, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x49bc7b75, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6f6deecb, ftLastWriteTime.dwHighDateTime=0x1d2d426, nFileSizeHigh=0x0, nFileSizeLow=0x3d639)) returned 1 [0061.924] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0061.924] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GostTitle.XSL", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GostTitle.XSL", lpFilePart=0x0) returned 0x50 [0061.924] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0061.924] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GostTitle.XSL" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\gosttitle.xsl"), fInfoLevelId=0x0, lpFileInformation=0x221dd40 | out: lpFileInformation=0x221dd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49bc7b75, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x49bc7b75, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6f6deecb, ftLastWriteTime.dwHighDateTime=0x1d2d426, nFileSizeHigh=0x0, nFileSizeLow=0x3d639)) returned 1 [0061.924] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0061.924] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GostTitle.XSL", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GostTitle.XSL", lpFilePart=0x0) returned 0x50 [0061.924] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0061.924] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GostTitle.XSL" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\gosttitle.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0061.925] GetFileType (hFile=0x444) returned 0x1 [0061.925] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0061.925] GetFileType (hFile=0x444) returned 0x1 [0061.925] ReadFile (in: hFile=0x444, lpBuffer=0x2220130, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x2220130*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0061.938] CloseHandle (hObject=0x444) returned 1 [0061.938] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GostTitle.XSL", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GostTitle.XSL", lpFilePart=0x0) returned 0x50 [0061.938] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0061.938] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GostTitle.XSL" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\gosttitle.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0061.938] GetFileType (hFile=0x444) returned 0x1 [0061.938] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0061.938] GetFileType (hFile=0x444) returned 0x1 [0061.938] WriteFile (in: hFile=0x444, lpBuffer=0x221de80*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x221de80*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0061.938] CloseHandle (hObject=0x444) returned 1 [0061.939] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GostTitle.XSL", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GostTitle.XSL", lpFilePart=0x0) returned 0x50 [0061.939] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GostTitle.XSL.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GostTitle.XSL.xuy", lpFilePart=0x0) returned 0x54 [0061.939] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0061.939] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GostTitle.XSL" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\gosttitle.xsl"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49bc7b75, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x49bc7b75, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x10c4b59b, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x3d639)) returned 1 [0061.939] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0061.939] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GostTitle.XSL" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\gosttitle.xsl"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GostTitle.XSL.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\gosttitle.xsl.xuy")) returned 1 [0061.939] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\HarvardAnglia2008OfficeOnline.xsl", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\HarvardAnglia2008OfficeOnline.xsl", lpFilePart=0x0) returned 0x64 [0061.939] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0061.939] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\HarvardAnglia2008OfficeOnline.xsl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\harvardanglia2008officeonline.xsl"), fInfoLevelId=0x0, lpFileInformation=0x229c528 | out: lpFileInformation=0x229c528*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49bc7b75, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x49bc7b75, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x711652a0, ftLastWriteTime.dwHighDateTime=0x1d2d426, nFileSizeHigh=0x0, nFileSizeLow=0x45882)) returned 1 [0061.942] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0061.942] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\HarvardAnglia2008OfficeOnline.xsl", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\HarvardAnglia2008OfficeOnline.xsl", lpFilePart=0x0) returned 0x64 [0061.942] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0061.942] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\HarvardAnglia2008OfficeOnline.xsl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\harvardanglia2008officeonline.xsl"), fInfoLevelId=0x0, lpFileInformation=0x229c6d8 | out: lpFileInformation=0x229c6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49bc7b75, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x49bc7b75, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x711652a0, ftLastWriteTime.dwHighDateTime=0x1d2d426, nFileSizeHigh=0x0, nFileSizeLow=0x45882)) returned 1 [0061.942] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0061.942] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\HarvardAnglia2008OfficeOnline.xsl", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\HarvardAnglia2008OfficeOnline.xsl", lpFilePart=0x0) returned 0x64 [0061.942] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0061.942] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\HarvardAnglia2008OfficeOnline.xsl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\harvardanglia2008officeonline.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0061.943] GetFileType (hFile=0x444) returned 0x1 [0061.943] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0061.943] GetFileType (hFile=0x444) returned 0x1 [0061.943] ReadFile (in: hFile=0x444, lpBuffer=0x229eb68, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x229eb68*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0061.969] CloseHandle (hObject=0x444) returned 1 [0061.969] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\HarvardAnglia2008OfficeOnline.xsl", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\HarvardAnglia2008OfficeOnline.xsl", lpFilePart=0x0) returned 0x64 [0061.969] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0061.970] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\HarvardAnglia2008OfficeOnline.xsl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\harvardanglia2008officeonline.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0061.970] GetFileType (hFile=0x444) returned 0x1 [0061.970] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0061.970] GetFileType (hFile=0x444) returned 0x1 [0061.970] WriteFile (in: hFile=0x444, lpBuffer=0x229c868*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x229c868*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0061.970] CloseHandle (hObject=0x444) returned 1 [0061.970] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\HarvardAnglia2008OfficeOnline.xsl", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\HarvardAnglia2008OfficeOnline.xsl", lpFilePart=0x0) returned 0x64 [0061.970] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\HarvardAnglia2008OfficeOnline.xsl.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\HarvardAnglia2008OfficeOnline.xsl.xuy", lpFilePart=0x0) returned 0x68 [0061.970] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0061.971] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\HarvardAnglia2008OfficeOnline.xsl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\harvardanglia2008officeonline.xsl"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49bc7b75, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x49bc7b75, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x10c97a98, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x45882)) returned 1 [0061.971] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0061.971] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\HarvardAnglia2008OfficeOnline.xsl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\harvardanglia2008officeonline.xsl"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\HarvardAnglia2008OfficeOnline.xsl.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\harvardanglia2008officeonline.xsl.xuy")) returned 1 [0061.971] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\IEEE2006OfficeOnline.xsl", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\IEEE2006OfficeOnline.xsl", lpFilePart=0x0) returned 0x5b [0061.971] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0061.972] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\IEEE2006OfficeOnline.xsl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\ieee2006officeonline.xsl"), fInfoLevelId=0x0, lpFileInformation=0x231b028 | out: lpFileInformation=0x231b028*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49c14180, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x49c14180, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x70eb67b5, ftLastWriteTime.dwHighDateTime=0x1d2d426, nFileSizeHigh=0x0, nFileSizeLow=0x47e7d)) returned 1 [0061.972] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0061.972] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\IEEE2006OfficeOnline.xsl", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\IEEE2006OfficeOnline.xsl", lpFilePart=0x0) returned 0x5b [0061.972] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0061.972] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\IEEE2006OfficeOnline.xsl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\ieee2006officeonline.xsl"), fInfoLevelId=0x0, lpFileInformation=0x231b1b0 | out: lpFileInformation=0x231b1b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49c14180, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x49c14180, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x70eb67b5, ftLastWriteTime.dwHighDateTime=0x1d2d426, nFileSizeHigh=0x0, nFileSizeLow=0x47e7d)) returned 1 [0061.972] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0061.972] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\IEEE2006OfficeOnline.xsl", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\IEEE2006OfficeOnline.xsl", lpFilePart=0x0) returned 0x5b [0061.972] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0061.972] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\IEEE2006OfficeOnline.xsl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\ieee2006officeonline.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0061.973] GetFileType (hFile=0x444) returned 0x1 [0061.973] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0061.973] GetFileType (hFile=0x444) returned 0x1 [0061.973] ReadFile (in: hFile=0x444, lpBuffer=0x231d5f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x231d5f0*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0062.038] CloseHandle (hObject=0x444) returned 1 [0062.038] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\IEEE2006OfficeOnline.xsl", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\IEEE2006OfficeOnline.xsl", lpFilePart=0x0) returned 0x5b [0062.038] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0062.038] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\IEEE2006OfficeOnline.xsl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\ieee2006officeonline.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0062.039] GetFileType (hFile=0x444) returned 0x1 [0062.039] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0062.039] GetFileType (hFile=0x444) returned 0x1 [0062.039] WriteFile (in: hFile=0x444, lpBuffer=0x215b778*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x215b778*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0062.039] CloseHandle (hObject=0x444) returned 1 [0062.039] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\IEEE2006OfficeOnline.xsl", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\IEEE2006OfficeOnline.xsl", lpFilePart=0x0) returned 0x5b [0062.039] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\IEEE2006OfficeOnline.xsl.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\IEEE2006OfficeOnline.xsl.xuy", lpFilePart=0x0) returned 0x5f [0062.039] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0062.039] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\IEEE2006OfficeOnline.xsl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\ieee2006officeonline.xsl"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49c14180, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x49c14180, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x10d30549, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x47e7d)) returned 1 [0062.039] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0062.039] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\IEEE2006OfficeOnline.xsl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\ieee2006officeonline.xsl"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\IEEE2006OfficeOnline.xsl.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\ieee2006officeonline.xsl.xuy")) returned 1 [0062.040] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\ISO690.XSL", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\ISO690.XSL", lpFilePart=0x0) returned 0x4d [0062.040] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0062.040] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\ISO690.XSL" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\iso690.xsl"), fInfoLevelId=0x0, lpFileInformation=0x2199a18 | out: lpFileInformation=0x2199a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49c3a302, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x49c3a302, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x70f9b6bd, ftLastWriteTime.dwHighDateTime=0x1d2d426, nFileSizeHigh=0x0, nFileSizeLow=0x42132)) returned 1 [0062.043] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0062.043] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\ISO690.XSL", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\ISO690.XSL", lpFilePart=0x0) returned 0x4d [0062.043] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0062.043] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\ISO690.XSL" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\iso690.xsl"), fInfoLevelId=0x0, lpFileInformation=0x2199b68 | out: lpFileInformation=0x2199b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49c3a302, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x49c3a302, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x70f9b6bd, ftLastWriteTime.dwHighDateTime=0x1d2d426, nFileSizeHigh=0x0, nFileSizeLow=0x42132)) returned 1 [0062.043] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0062.044] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\ISO690.XSL", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\ISO690.XSL", lpFilePart=0x0) returned 0x4d [0062.044] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0062.044] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\ISO690.XSL" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\iso690.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0062.044] GetFileType (hFile=0x444) returned 0x1 [0062.044] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0062.044] GetFileType (hFile=0x444) returned 0x1 [0062.044] ReadFile (in: hFile=0x444, lpBuffer=0x219bf38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x219bf38*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0062.084] CloseHandle (hObject=0x444) returned 1 [0062.084] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\ISO690.XSL", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\ISO690.XSL", lpFilePart=0x0) returned 0x4d [0062.084] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0062.084] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\ISO690.XSL" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\iso690.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0062.084] GetFileType (hFile=0x444) returned 0x1 [0062.084] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0062.084] GetFileType (hFile=0x444) returned 0x1 [0062.084] WriteFile (in: hFile=0x444, lpBuffer=0x2199c98*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x2199c98*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0062.084] CloseHandle (hObject=0x444) returned 1 [0062.084] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\ISO690.XSL", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\ISO690.XSL", lpFilePart=0x0) returned 0x4d [0062.084] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\ISO690.XSL.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\ISO690.XSL.xuy", lpFilePart=0x0) returned 0x51 [0062.085] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0062.085] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\ISO690.XSL" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\iso690.xsl"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49c3a302, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x49c3a302, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x10da2bdb, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x42132)) returned 1 [0062.085] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0062.085] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\ISO690.XSL" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\iso690.xsl"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\ISO690.XSL.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\iso690.xsl.xuy")) returned 1 [0062.085] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\ISO690Nmerical.XSL", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\ISO690Nmerical.XSL", lpFilePart=0x0) returned 0x55 [0062.085] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0062.085] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\ISO690Nmerical.XSL" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\iso690nmerical.xsl"), fInfoLevelId=0x0, lpFileInformation=0x2218308 | out: lpFileInformation=0x2218308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49c3a302, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x49c3a302, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x70dab746, ftLastWriteTime.dwHighDateTime=0x1d2d426, nFileSizeHigh=0x0, nFileSizeLow=0x351ea)) returned 1 [0062.105] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0062.105] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\ISO690Nmerical.XSL", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\ISO690Nmerical.XSL", lpFilePart=0x0) returned 0x55 [0062.105] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0062.105] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\ISO690Nmerical.XSL" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\iso690nmerical.xsl"), fInfoLevelId=0x0, lpFileInformation=0x2218478 | out: lpFileInformation=0x2218478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49c3a302, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x49c3a302, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x70dab746, ftLastWriteTime.dwHighDateTime=0x1d2d426, nFileSizeHigh=0x0, nFileSizeLow=0x351ea)) returned 1 [0062.105] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0062.105] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\ISO690Nmerical.XSL", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\ISO690Nmerical.XSL", lpFilePart=0x0) returned 0x55 [0062.105] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0062.105] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\ISO690Nmerical.XSL" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\iso690nmerical.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0062.105] GetFileType (hFile=0x444) returned 0x1 [0062.105] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0062.105] GetFileType (hFile=0x444) returned 0x1 [0062.106] ReadFile (in: hFile=0x444, lpBuffer=0x221a888, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x221a888*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0062.129] CloseHandle (hObject=0x444) returned 1 [0062.129] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\ISO690Nmerical.XSL", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\ISO690Nmerical.XSL", lpFilePart=0x0) returned 0x55 [0062.129] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0062.129] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\ISO690Nmerical.XSL" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\iso690nmerical.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0062.130] GetFileType (hFile=0x444) returned 0x1 [0062.130] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0062.130] GetFileType (hFile=0x444) returned 0x1 [0062.130] WriteFile (in: hFile=0x444, lpBuffer=0x22185c8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x22185c8*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0062.130] CloseHandle (hObject=0x444) returned 1 [0062.131] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\ISO690Nmerical.XSL", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\ISO690Nmerical.XSL", lpFilePart=0x0) returned 0x55 [0062.131] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\ISO690Nmerical.XSL.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\ISO690Nmerical.XSL.xuy", lpFilePart=0x0) returned 0x59 [0062.131] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0062.131] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\ISO690Nmerical.XSL" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\iso690nmerical.xsl"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49c3a302, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x49c3a302, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x10e1536a, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x351ea)) returned 1 [0062.131] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0062.131] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\ISO690Nmerical.XSL" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\iso690nmerical.xsl"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\ISO690Nmerical.XSL.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\iso690nmerical.xsl.xuy")) returned 1 [0062.131] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\MLASeventhEditionOfficeOnline.xsl", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\MLASeventhEditionOfficeOnline.xsl", lpFilePart=0x0) returned 0x64 [0062.131] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0062.131] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\MLASeventhEditionOfficeOnline.xsl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\mlaseventheditionofficeonline.xsl"), fInfoLevelId=0x0, lpFileInformation=0x2296ca8 | out: lpFileInformation=0x2296ca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49c8680e, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x49c8680e, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x70a8a5bb, ftLastWriteTime.dwHighDateTime=0x1d2d426, nFileSizeHigh=0x0, nFileSizeLow=0x3e4f3)) returned 1 [0062.132] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0062.132] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\MLASeventhEditionOfficeOnline.xsl", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\MLASeventhEditionOfficeOnline.xsl", lpFilePart=0x0) returned 0x64 [0062.132] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0062.132] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\MLASeventhEditionOfficeOnline.xsl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\mlaseventheditionofficeonline.xsl"), fInfoLevelId=0x0, lpFileInformation=0x2296e58 | out: lpFileInformation=0x2296e58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49c8680e, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x49c8680e, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x70a8a5bb, ftLastWriteTime.dwHighDateTime=0x1d2d426, nFileSizeHigh=0x0, nFileSizeLow=0x3e4f3)) returned 1 [0062.132] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0062.132] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\MLASeventhEditionOfficeOnline.xsl", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\MLASeventhEditionOfficeOnline.xsl", lpFilePart=0x0) returned 0x64 [0062.132] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0062.133] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\MLASeventhEditionOfficeOnline.xsl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\mlaseventheditionofficeonline.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0062.133] GetFileType (hFile=0x444) returned 0x1 [0062.133] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0062.133] GetFileType (hFile=0x444) returned 0x1 [0062.133] ReadFile (in: hFile=0x444, lpBuffer=0x22992e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x22992e8*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0062.144] CloseHandle (hObject=0x444) returned 1 [0062.149] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\MLASeventhEditionOfficeOnline.xsl", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\MLASeventhEditionOfficeOnline.xsl", lpFilePart=0x0) returned 0x64 [0062.149] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0062.149] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\MLASeventhEditionOfficeOnline.xsl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\mlaseventheditionofficeonline.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0062.150] GetFileType (hFile=0x444) returned 0x1 [0062.150] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0062.150] GetFileType (hFile=0x444) returned 0x1 [0062.150] WriteFile (in: hFile=0x444, lpBuffer=0x2296fe8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x2296fe8*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0062.150] CloseHandle (hObject=0x444) returned 1 [0062.150] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\MLASeventhEditionOfficeOnline.xsl", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\MLASeventhEditionOfficeOnline.xsl", lpFilePart=0x0) returned 0x64 [0062.150] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\MLASeventhEditionOfficeOnline.xsl.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\MLASeventhEditionOfficeOnline.xsl.xuy", lpFilePart=0x0) returned 0x68 [0062.150] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0062.150] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\MLASeventhEditionOfficeOnline.xsl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\mlaseventheditionofficeonline.xsl"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49c8680e, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x49c8680e, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x10e3b3aa, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x3e4f3)) returned 1 [0062.150] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0062.150] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\MLASeventhEditionOfficeOnline.xsl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\mlaseventheditionofficeonline.xsl"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\MLASeventhEditionOfficeOnline.xsl.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\mlaseventheditionofficeonline.xsl.xuy")) returned 1 [0062.151] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\SIST02.XSL", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\SIST02.XSL", lpFilePart=0x0) returned 0x4d [0062.151] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0062.151] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\SIST02.XSL" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\sist02.xsl"), fInfoLevelId=0x0, lpFileInformation=0x23157a8 | out: lpFileInformation=0x23157a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49c8680e, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x49c8680e, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x70e1de73, ftLastWriteTime.dwHighDateTime=0x1d2d426, nFileSizeHigh=0x0, nFileSizeLow=0x3d5c8)) returned 1 [0062.151] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0062.151] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\SIST02.XSL", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\SIST02.XSL", lpFilePart=0x0) returned 0x4d [0062.151] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0062.151] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\SIST02.XSL" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\sist02.xsl"), fInfoLevelId=0x0, lpFileInformation=0x23158f8 | out: lpFileInformation=0x23158f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49c8680e, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x49c8680e, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x70e1de73, ftLastWriteTime.dwHighDateTime=0x1d2d426, nFileSizeHigh=0x0, nFileSizeLow=0x3d5c8)) returned 1 [0062.151] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0062.151] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\SIST02.XSL", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\SIST02.XSL", lpFilePart=0x0) returned 0x4d [0062.151] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0062.151] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\SIST02.XSL" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\sist02.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0062.152] GetFileType (hFile=0x444) returned 0x1 [0062.152] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0062.152] GetFileType (hFile=0x444) returned 0x1 [0062.152] ReadFile (in: hFile=0x444, lpBuffer=0x2317cc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x2317cc8*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0062.223] CloseHandle (hObject=0x444) returned 1 [0062.223] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\SIST02.XSL", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\SIST02.XSL", lpFilePart=0x0) returned 0x4d [0062.223] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0062.223] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\SIST02.XSL" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\sist02.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0062.224] GetFileType (hFile=0x444) returned 0x1 [0062.224] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0062.224] GetFileType (hFile=0x444) returned 0x1 [0062.224] WriteFile (in: hFile=0x444, lpBuffer=0x215b778*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x215b778*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0062.224] CloseHandle (hObject=0x444) returned 1 [0062.224] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\SIST02.XSL", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\SIST02.XSL", lpFilePart=0x0) returned 0x4d [0062.224] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\SIST02.XSL.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\SIST02.XSL.xuy", lpFilePart=0x0) returned 0x51 [0062.224] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0062.224] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\SIST02.XSL" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\sist02.xsl"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49c8680e, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x49c8680e, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x10efa4e4, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x3d5c8)) returned 1 [0062.224] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0062.224] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\SIST02.XSL" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\sist02.xsl"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\SIST02.XSL.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\sist02.xsl.xuy")) returned 1 [0062.227] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\TURABIAN.XSL", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\TURABIAN.XSL", lpFilePart=0x0) returned 0x4f [0062.227] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0062.227] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\TURABIAN.XSL" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\turabian.xsl"), fInfoLevelId=0x0, lpFileInformation=0x2194098 | out: lpFileInformation=0x2194098*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49cac9a0, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x49cac9a0, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x71aee913, ftLastWriteTime.dwHighDateTime=0x1d2d426, nFileSizeHigh=0x0, nFileSizeLow=0x54256)) returned 1 [0062.244] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0062.244] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\TURABIAN.XSL", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\TURABIAN.XSL", lpFilePart=0x0) returned 0x4f [0062.244] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0062.244] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\TURABIAN.XSL" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\turabian.xsl"), fInfoLevelId=0x0, lpFileInformation=0x21941f0 | out: lpFileInformation=0x21941f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49cac9a0, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x49cac9a0, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x71aee913, ftLastWriteTime.dwHighDateTime=0x1d2d426, nFileSizeHigh=0x0, nFileSizeLow=0x54256)) returned 1 [0062.244] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0062.244] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\TURABIAN.XSL", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\TURABIAN.XSL", lpFilePart=0x0) returned 0x4f [0062.245] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0062.245] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\TURABIAN.XSL" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\turabian.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0062.245] GetFileType (hFile=0x444) returned 0x1 [0062.245] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0062.245] GetFileType (hFile=0x444) returned 0x1 [0062.245] ReadFile (in: hFile=0x444, lpBuffer=0x21965d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x21965d0*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0062.275] CloseHandle (hObject=0x444) returned 1 [0062.276] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\TURABIAN.XSL", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\TURABIAN.XSL", lpFilePart=0x0) returned 0x4f [0062.276] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0062.276] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\TURABIAN.XSL" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\turabian.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0062.276] GetFileType (hFile=0x444) returned 0x1 [0062.276] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0062.276] GetFileType (hFile=0x444) returned 0x1 [0062.276] WriteFile (in: hFile=0x444, lpBuffer=0x2194328*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x2194328*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0062.276] CloseHandle (hObject=0x444) returned 1 [0062.276] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\TURABIAN.XSL", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\TURABIAN.XSL", lpFilePart=0x0) returned 0x4f [0062.276] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\TURABIAN.XSL.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\TURABIAN.XSL.xuy", lpFilePart=0x0) returned 0x53 [0062.276] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0062.276] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\TURABIAN.XSL" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\turabian.xsl"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49cac9a0, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x49cac9a0, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x10f6c763, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x54256)) returned 1 [0062.277] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0062.277] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\TURABIAN.XSL" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\turabian.xsl"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\TURABIAN.XSL.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\turabian.xsl.xuy")) returned 1 [0062.277] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0062.277] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Credentials", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Credentials", lpFilePart=0x0) returned 0x3b [0062.277] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Credentials\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Credentials\\", lpFilePart=0x0) returned 0x3c [0062.277] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Credentials\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d73d0 [0062.278] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0062.278] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0062.278] FindClose (in: hFindFile=0x5d73d0 | out: hFindFile=0x5d73d0) returned 1 [0062.278] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0062.278] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0062.278] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0062.278] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Credentials", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Credentials", lpFilePart=0x0) returned 0x3b [0062.278] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Credentials\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Credentials\\", lpFilePart=0x0) returned 0x3c [0062.278] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Credentials\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d7fd0 [0062.278] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0062.278] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0062.280] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0062.280] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0062.280] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0062.280] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0062.280] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto", lpFilePart=0x0) returned 0x36 [0062.280] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\", lpFilePart=0x0) returned 0x37 [0062.280] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d7c70 [0062.281] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0062.281] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0062.281] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0062.281] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0062.281] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0062.281] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0062.281] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0062.281] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto", lpFilePart=0x0) returned 0x36 [0062.281] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\", lpFilePart=0x0) returned 0x37 [0062.281] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d7c70 [0062.281] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0062.281] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0062.282] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0062.282] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0062.282] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0062.282] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0062.282] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0062.282] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\RSA", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\RSA", lpFilePart=0x0) returned 0x3a [0062.282] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\", lpFilePart=0x0) returned 0x3b [0062.282] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d78b0 [0062.283] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0062.283] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0062.283] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0062.283] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0062.283] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0062.283] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0062.283] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0062.283] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\RSA", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\RSA", lpFilePart=0x0) returned 0x3a [0062.283] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\", lpFilePart=0x0) returned 0x3b [0062.283] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7a30 [0062.283] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0062.284] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0062.284] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0062.284] FindClose (in: hFindFile=0x5d7a30 | out: hFindFile=0x5d7a30) returned 1 [0062.284] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0062.284] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0062.284] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0062.284] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-1462094071-1423818996-289466292-1000", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-1462094071-1423818996-289466292-1000", lpFilePart=0x0) returned 0x68 [0062.284] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-1462094071-1423818996-289466292-1000\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-1462094071-1423818996-289466292-1000\\", lpFilePart=0x0) returned 0x69 [0062.284] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-1462094071-1423818996-289466292-1000\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7af0 [0062.299] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0062.299] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0062.300] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0062.300] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0062.300] FindClose (in: hFindFile=0x5d7af0 | out: hFindFile=0x5d7af0) returned 1 [0062.300] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0062.300] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0062.300] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0062.300] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-1462094071-1423818996-289466292-1000", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-1462094071-1423818996-289466292-1000", lpFilePart=0x0) returned 0x68 [0062.301] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-1462094071-1423818996-289466292-1000\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-1462094071-1423818996-289466292-1000\\", lpFilePart=0x0) returned 0x69 [0062.301] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-1462094071-1423818996-289466292-1000\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d81b0 [0062.301] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0062.301] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0062.302] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0062.302] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0062.302] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0062.302] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0062.302] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0062.303] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-1462094071-1423818996-289466292-1000\\46a78fa46b43fb180b4fa21773f8ff3e_427a1946-e0ff-4097-8c9e-ca2c1e22780b", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-1462094071-1423818996-289466292-1000\\46a78fa46b43fb180b4fa21773f8ff3e_427a1946-e0ff-4097-8c9e-ca2c1e22780b", lpFilePart=0x0) returned 0xae [0062.303] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0062.303] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-1462094071-1423818996-289466292-1000\\46a78fa46b43fb180b4fa21773f8ff3e_427a1946-e0ff-4097-8c9e-ca2c1e22780b" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\crypto\\rsa\\s-1-5-21-1462094071-1423818996-289466292-1000\\46a78fa46b43fb180b4fa21773f8ff3e_427a1946-e0ff-4097-8c9e-ca2c1e22780b"), fInfoLevelId=0x0, lpFileInformation=0x221add8 | out: lpFileInformation=0x221add8*(dwFileAttributes=0x24, ftCreationTime.dwLowDateTime=0x1facf153, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x1facf153, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x1facf153, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x35)) returned 1 [0062.303] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0062.303] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-1462094071-1423818996-289466292-1000\\46a78fa46b43fb180b4fa21773f8ff3e_427a1946-e0ff-4097-8c9e-ca2c1e22780b", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-1462094071-1423818996-289466292-1000\\46a78fa46b43fb180b4fa21773f8ff3e_427a1946-e0ff-4097-8c9e-ca2c1e22780b", lpFilePart=0x0) returned 0xae [0062.303] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0062.304] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-1462094071-1423818996-289466292-1000\\46a78fa46b43fb180b4fa21773f8ff3e_427a1946-e0ff-4097-8c9e-ca2c1e22780b" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\crypto\\rsa\\s-1-5-21-1462094071-1423818996-289466292-1000\\46a78fa46b43fb180b4fa21773f8ff3e_427a1946-e0ff-4097-8c9e-ca2c1e22780b"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0062.304] GetFileType (hFile=0x444) returned 0x1 [0062.304] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0062.304] GetFileType (hFile=0x444) returned 0x1 [0062.304] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x35 [0062.304] ReadFile (in: hFile=0x444, lpBuffer=0x221b338, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x221b338*, lpNumberOfBytesRead=0x3be6a8*=0x35, lpOverlapped=0x0) returned 1 [0062.305] CloseHandle (hObject=0x444) returned 1 [0062.318] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-1462094071-1423818996-289466292-1000\\46a78fa46b43fb180b4fa21773f8ff3e_427a1946-e0ff-4097-8c9e-ca2c1e22780b", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-1462094071-1423818996-289466292-1000\\46a78fa46b43fb180b4fa21773f8ff3e_427a1946-e0ff-4097-8c9e-ca2c1e22780b", lpFilePart=0x0) returned 0xae [0062.318] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0062.318] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-1462094071-1423818996-289466292-1000\\46a78fa46b43fb180b4fa21773f8ff3e_427a1946-e0ff-4097-8c9e-ca2c1e22780b" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\crypto\\rsa\\s-1-5-21-1462094071-1423818996-289466292-1000\\46a78fa46b43fb180b4fa21773f8ff3e_427a1946-e0ff-4097-8c9e-ca2c1e22780b"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0062.320] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb070) returned 1 [0062.320] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-1462094071-1423818996-289466292-1000\\46a78fa46b43fb180b4fa21773f8ff3e_427a1946-e0ff-4097-8c9e-ca2c1e22780b", nBufferLength=0x105, lpBuffer=0x3bbcf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-1462094071-1423818996-289466292-1000\\46a78fa46b43fb180b4fa21773f8ff3e_427a1946-e0ff-4097-8c9e-ca2c1e22780b", lpFilePart=0x0) returned 0xae [0062.320] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0062.320] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-1462094071-1423818996-289466292-1000\\46a78fa46b43fb180b4fa21773f8ff3e_427a1946-e0ff-4097-8c9e-ca2c1e22780b" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\crypto\\rsa\\s-1-5-21-1462094071-1423818996-289466292-1000\\46a78fa46b43fb180b4fa21773f8ff3e_427a1946-e0ff-4097-8c9e-ca2c1e22780b"), fInfoLevelId=0x0, lpFileInformation=0x3bc270 | out: lpFileInformation=0x3bc270*(dwFileAttributes=0x24, ftCreationTime.dwLowDateTime=0x1facf153, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x1facf153, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x1facf153, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x35)) returned 1 [0062.320] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc150) returned 1 [0062.320] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-1462094071-1423818996-289466292-1000\\46a78fa46b43fb180b4fa21773f8ff3e_427a1946-e0ff-4097-8c9e-ca2c1e22780b", nBufferLength=0x105, lpBuffer=0x3bbd10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-1462094071-1423818996-289466292-1000\\46a78fa46b43fb180b4fa21773f8ff3e_427a1946-e0ff-4097-8c9e-ca2c1e22780b", lpFilePart=0x0) returned 0xae [0062.320] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0062.320] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-1462094071-1423818996-289466292-1000\\46a78fa46b43fb180b4fa21773f8ff3e_427a1946-e0ff-4097-8c9e-ca2c1e22780b" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\crypto\\rsa\\s-1-5-21-1462094071-1423818996-289466292-1000\\46a78fa46b43fb180b4fa21773f8ff3e_427a1946-e0ff-4097-8c9e-ca2c1e22780b"), fInfoLevelId=0x0, lpFileInformation=0x2293110 | out: lpFileInformation=0x2293110*(dwFileAttributes=0x24, ftCreationTime.dwLowDateTime=0x1facf153, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x1facf153, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x1facf153, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x35)) returned 1 [0062.321] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc150) returned 1 [0062.321] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-1462094071-1423818996-289466292-1000\\46a78fa46b43fb180b4fa21773f8ff3e_427a1946-e0ff-4097-8c9e-ca2c1e22780b", nBufferLength=0x105, lpBuffer=0x3bbb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-1462094071-1423818996-289466292-1000\\46a78fa46b43fb180b4fa21773f8ff3e_427a1946-e0ff-4097-8c9e-ca2c1e22780b", lpFilePart=0x0) returned 0xae [0062.321] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc050) returned 1 [0062.321] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-1462094071-1423818996-289466292-1000\\46a78fa46b43fb180b4fa21773f8ff3e_427a1946-e0ff-4097-8c9e-ca2c1e22780b" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\crypto\\rsa\\s-1-5-21-1462094071-1423818996-289466292-1000\\46a78fa46b43fb180b4fa21773f8ff3e_427a1946-e0ff-4097-8c9e-ca2c1e22780b"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0062.321] GetFileType (hFile=0x444) returned 0x1 [0062.321] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbfc0) returned 1 [0062.321] GetFileType (hFile=0x444) returned 0x1 [0062.321] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc1e8 | out: lpFileSizeHigh=0x3bc1e8*=0x0) returned 0x35 [0062.321] ReadFile (in: hFile=0x444, lpBuffer=0x2293670, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bc118, lpOverlapped=0x0 | out: lpBuffer=0x2293670*, lpNumberOfBytesRead=0x3bc118*=0x35, lpOverlapped=0x0) returned 1 [0062.321] CloseHandle (hObject=0x444) returned 1 [0062.397] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-1462094071-1423818996-289466292-1000\\46a78fa46b43fb180b4fa21773f8ff3e_427a1946-e0ff-4097-8c9e-ca2c1e22780b", nBufferLength=0x105, lpBuffer=0x3bbb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-1462094071-1423818996-289466292-1000\\46a78fa46b43fb180b4fa21773f8ff3e_427a1946-e0ff-4097-8c9e-ca2c1e22780b", lpFilePart=0x0) returned 0xae [0062.397] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc050) returned 1 [0062.397] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-1462094071-1423818996-289466292-1000\\46a78fa46b43fb180b4fa21773f8ff3e_427a1946-e0ff-4097-8c9e-ca2c1e22780b" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\crypto\\rsa\\s-1-5-21-1462094071-1423818996-289466292-1000\\46a78fa46b43fb180b4fa21773f8ff3e_427a1946-e0ff-4097-8c9e-ca2c1e22780b"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0062.398] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8ae0) returned 1 [0062.399] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-1462094071-1423818996-289466292-1000\\83aa4cc77f591dfc2374580bbd95f6ba_427a1946-e0ff-4097-8c9e-ca2c1e22780b", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-1462094071-1423818996-289466292-1000\\83aa4cc77f591dfc2374580bbd95f6ba_427a1946-e0ff-4097-8c9e-ca2c1e22780b", lpFilePart=0x0) returned 0xae [0062.399] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0062.399] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-1462094071-1423818996-289466292-1000\\83aa4cc77f591dfc2374580bbd95f6ba_427a1946-e0ff-4097-8c9e-ca2c1e22780b" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\crypto\\rsa\\s-1-5-21-1462094071-1423818996-289466292-1000\\83aa4cc77f591dfc2374580bbd95f6ba_427a1946-e0ff-4097-8c9e-ca2c1e22780b"), fInfoLevelId=0x0, lpFileInformation=0x230b3a0 | out: lpFileInformation=0x230b3a0*(dwFileAttributes=0x24, ftCreationTime.dwLowDateTime=0xd1af789b, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0xd1af789b, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0xd1af789b, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0x2d)) returned 1 [0062.400] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0062.400] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-1462094071-1423818996-289466292-1000\\83aa4cc77f591dfc2374580bbd95f6ba_427a1946-e0ff-4097-8c9e-ca2c1e22780b", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-1462094071-1423818996-289466292-1000\\83aa4cc77f591dfc2374580bbd95f6ba_427a1946-e0ff-4097-8c9e-ca2c1e22780b", lpFilePart=0x0) returned 0xae [0062.400] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0062.400] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-1462094071-1423818996-289466292-1000\\83aa4cc77f591dfc2374580bbd95f6ba_427a1946-e0ff-4097-8c9e-ca2c1e22780b" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\crypto\\rsa\\s-1-5-21-1462094071-1423818996-289466292-1000\\83aa4cc77f591dfc2374580bbd95f6ba_427a1946-e0ff-4097-8c9e-ca2c1e22780b"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0062.400] GetFileType (hFile=0x444) returned 0x1 [0062.400] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0062.400] GetFileType (hFile=0x444) returned 0x1 [0062.400] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x2d [0062.400] ReadFile (in: hFile=0x444, lpBuffer=0x230b8f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x230b8f8*, lpNumberOfBytesRead=0x3be6a8*=0x2d, lpOverlapped=0x0) returned 1 [0062.401] CloseHandle (hObject=0x444) returned 1 [0062.460] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-1462094071-1423818996-289466292-1000\\83aa4cc77f591dfc2374580bbd95f6ba_427a1946-e0ff-4097-8c9e-ca2c1e22780b", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-1462094071-1423818996-289466292-1000\\83aa4cc77f591dfc2374580bbd95f6ba_427a1946-e0ff-4097-8c9e-ca2c1e22780b", lpFilePart=0x0) returned 0xae [0062.461] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0062.461] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-1462094071-1423818996-289466292-1000\\83aa4cc77f591dfc2374580bbd95f6ba_427a1946-e0ff-4097-8c9e-ca2c1e22780b" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\crypto\\rsa\\s-1-5-21-1462094071-1423818996-289466292-1000\\83aa4cc77f591dfc2374580bbd95f6ba_427a1946-e0ff-4097-8c9e-ca2c1e22780b"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0062.462] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb070) returned 1 [0062.463] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-1462094071-1423818996-289466292-1000\\83aa4cc77f591dfc2374580bbd95f6ba_427a1946-e0ff-4097-8c9e-ca2c1e22780b", nBufferLength=0x105, lpBuffer=0x3bbcf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-1462094071-1423818996-289466292-1000\\83aa4cc77f591dfc2374580bbd95f6ba_427a1946-e0ff-4097-8c9e-ca2c1e22780b", lpFilePart=0x0) returned 0xae [0062.463] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0062.463] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-1462094071-1423818996-289466292-1000\\83aa4cc77f591dfc2374580bbd95f6ba_427a1946-e0ff-4097-8c9e-ca2c1e22780b" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\crypto\\rsa\\s-1-5-21-1462094071-1423818996-289466292-1000\\83aa4cc77f591dfc2374580bbd95f6ba_427a1946-e0ff-4097-8c9e-ca2c1e22780b"), fInfoLevelId=0x0, lpFileInformation=0x3bc270 | out: lpFileInformation=0x3bc270*(dwFileAttributes=0x24, ftCreationTime.dwLowDateTime=0xd1af789b, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0xd1af789b, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0xd1af789b, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0x2d)) returned 1 [0062.463] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc150) returned 1 [0062.463] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-1462094071-1423818996-289466292-1000\\83aa4cc77f591dfc2374580bbd95f6ba_427a1946-e0ff-4097-8c9e-ca2c1e22780b", nBufferLength=0x105, lpBuffer=0x3bbd10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-1462094071-1423818996-289466292-1000\\83aa4cc77f591dfc2374580bbd95f6ba_427a1946-e0ff-4097-8c9e-ca2c1e22780b", lpFilePart=0x0) returned 0xae [0062.463] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0062.463] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-1462094071-1423818996-289466292-1000\\83aa4cc77f591dfc2374580bbd95f6ba_427a1946-e0ff-4097-8c9e-ca2c1e22780b" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\crypto\\rsa\\s-1-5-21-1462094071-1423818996-289466292-1000\\83aa4cc77f591dfc2374580bbd95f6ba_427a1946-e0ff-4097-8c9e-ca2c1e22780b"), fInfoLevelId=0x0, lpFileInformation=0x2180130 | out: lpFileInformation=0x2180130*(dwFileAttributes=0x24, ftCreationTime.dwLowDateTime=0xd1af789b, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0xd1af789b, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0xd1af789b, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0x2d)) returned 1 [0062.463] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc150) returned 1 [0062.463] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-1462094071-1423818996-289466292-1000\\83aa4cc77f591dfc2374580bbd95f6ba_427a1946-e0ff-4097-8c9e-ca2c1e22780b", nBufferLength=0x105, lpBuffer=0x3bbb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-1462094071-1423818996-289466292-1000\\83aa4cc77f591dfc2374580bbd95f6ba_427a1946-e0ff-4097-8c9e-ca2c1e22780b", lpFilePart=0x0) returned 0xae [0062.463] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc050) returned 1 [0062.463] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-1462094071-1423818996-289466292-1000\\83aa4cc77f591dfc2374580bbd95f6ba_427a1946-e0ff-4097-8c9e-ca2c1e22780b" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\crypto\\rsa\\s-1-5-21-1462094071-1423818996-289466292-1000\\83aa4cc77f591dfc2374580bbd95f6ba_427a1946-e0ff-4097-8c9e-ca2c1e22780b"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0062.463] GetFileType (hFile=0x444) returned 0x1 [0062.463] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbfc0) returned 1 [0062.463] GetFileType (hFile=0x444) returned 0x1 [0062.463] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc1e8 | out: lpFileSizeHigh=0x3bc1e8*=0x0) returned 0x2d [0062.463] ReadFile (in: hFile=0x444, lpBuffer=0x2180688, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bc118, lpOverlapped=0x0 | out: lpBuffer=0x2180688*, lpNumberOfBytesRead=0x3bc118*=0x2d, lpOverlapped=0x0) returned 1 [0062.463] CloseHandle (hObject=0x444) returned 1 [0062.519] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-1462094071-1423818996-289466292-1000\\83aa4cc77f591dfc2374580bbd95f6ba_427a1946-e0ff-4097-8c9e-ca2c1e22780b", nBufferLength=0x105, lpBuffer=0x3bbb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-1462094071-1423818996-289466292-1000\\83aa4cc77f591dfc2374580bbd95f6ba_427a1946-e0ff-4097-8c9e-ca2c1e22780b", lpFilePart=0x0) returned 0xae [0062.519] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc050) returned 1 [0062.519] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-1462094071-1423818996-289466292-1000\\83aa4cc77f591dfc2374580bbd95f6ba_427a1946-e0ff-4097-8c9e-ca2c1e22780b" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\crypto\\rsa\\s-1-5-21-1462094071-1423818996-289466292-1000\\83aa4cc77f591dfc2374580bbd95f6ba_427a1946-e0ff-4097-8c9e-ca2c1e22780b"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0062.521] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8ae0) returned 1 [0062.522] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0062.522] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Document Building Blocks", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Document Building Blocks", lpFilePart=0x0) returned 0x48 [0062.522] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\", lpFilePart=0x0) returned 0x49 [0062.522] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d78b0 [0062.543] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0062.543] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0062.543] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0062.544] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0062.544] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0062.544] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0062.544] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0062.544] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Document Building Blocks", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Document Building Blocks", lpFilePart=0x0) returned 0x48 [0062.544] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\", lpFilePart=0x0) returned 0x49 [0062.544] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d7e50 [0062.545] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0062.545] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0062.545] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0062.546] FindClose (in: hFindFile=0x5d7e50 | out: hFindFile=0x5d7e50) returned 1 [0062.546] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0062.546] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0062.546] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0062.546] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033", lpFilePart=0x0) returned 0x4d [0062.546] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\", lpFilePart=0x0) returned 0x4e [0062.546] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d78b0 [0062.547] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0062.547] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0062.547] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0062.548] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0062.548] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0062.548] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0062.548] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0062.548] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033", lpFilePart=0x0) returned 0x4d [0062.548] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\", lpFilePart=0x0) returned 0x4e [0062.548] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d8090 [0062.548] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0062.548] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0062.548] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0062.548] FindClose (in: hFindFile=0x5d8090 | out: hFindFile=0x5d8090) returned 1 [0062.548] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0062.548] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0062.548] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0062.548] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\16", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\16", lpFilePart=0x0) returned 0x50 [0062.549] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\16\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\16\\", lpFilePart=0x0) returned 0x51 [0062.549] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\16\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7670 [0062.554] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0062.554] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0062.554] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0062.554] FindClose (in: hFindFile=0x5d7670 | out: hFindFile=0x5d7670) returned 1 [0062.554] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0062.554] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0062.554] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0062.554] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\16", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\16", lpFilePart=0x0) returned 0x50 [0062.554] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\16\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\16\\", lpFilePart=0x0) returned 0x51 [0062.554] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\16\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d81b0 [0062.555] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0062.555] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0062.555] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0062.555] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0062.555] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0062.555] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0062.555] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\16\\Built-In Building Blocks.dotx", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\16\\Built-In Building Blocks.dotx", lpFilePart=0x0) returned 0x6e [0062.555] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0062.555] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\16\\Built-In Building Blocks.dotx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\document building blocks\\1033\\16\\built-in building blocks.dotx"), fInfoLevelId=0x0, lpFileInformation=0x21fe328 | out: lpFileInformation=0x21fe328*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4bbe1a32, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x4bbe1a32, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x765965b6, ftLastWriteTime.dwHighDateTime=0x1d2d426, nFileSizeHigh=0x0, nFileSizeLow=0x388cc7)) returned 1 [0062.567] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0062.567] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\16\\Built-In Building Blocks.dotx", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\16\\Built-In Building Blocks.dotx", lpFilePart=0x0) returned 0x6e [0062.567] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0062.567] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\16\\Built-In Building Blocks.dotx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\document building blocks\\1033\\16\\built-in building blocks.dotx"), fInfoLevelId=0x0, lpFileInformation=0x21fe4e0 | out: lpFileInformation=0x21fe4e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4bbe1a32, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x4bbe1a32, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x765965b6, ftLastWriteTime.dwHighDateTime=0x1d2d426, nFileSizeHigh=0x0, nFileSizeLow=0x388cc7)) returned 1 [0062.567] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0062.568] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\16\\Built-In Building Blocks.dotx", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\16\\Built-In Building Blocks.dotx", lpFilePart=0x0) returned 0x6e [0062.568] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0062.568] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\16\\Built-In Building Blocks.dotx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\document building blocks\\1033\\16\\built-in building blocks.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0062.568] GetFileType (hFile=0x444) returned 0x1 [0062.568] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0062.568] GetFileType (hFile=0x444) returned 0x1 [0062.568] ReadFile (in: hFile=0x444, lpBuffer=0x2200980, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x2200980*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0062.636] CloseHandle (hObject=0x444) returned 1 [0062.636] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\16\\Built-In Building Blocks.dotx", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\16\\Built-In Building Blocks.dotx", lpFilePart=0x0) returned 0x6e [0062.637] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0062.637] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\16\\Built-In Building Blocks.dotx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\document building blocks\\1033\\16\\built-in building blocks.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0062.637] GetFileType (hFile=0x444) returned 0x1 [0062.637] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0062.637] GetFileType (hFile=0x444) returned 0x1 [0062.637] WriteFile (in: hFile=0x444, lpBuffer=0x21fe678*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x21fe678*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0062.637] CloseHandle (hObject=0x444) returned 1 [0062.637] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\16\\Built-In Building Blocks.dotx", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\16\\Built-In Building Blocks.dotx", lpFilePart=0x0) returned 0x6e [0062.637] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\16\\Built-In Building Blocks.dotx.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\16\\Built-In Building Blocks.dotx.xuy", lpFilePart=0x0) returned 0x72 [0062.637] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0062.637] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\16\\Built-In Building Blocks.dotx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\document building blocks\\1033\\16\\built-in building blocks.dotx"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4bbe1a32, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x4bbe1a32, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x112d9f17, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x388cc7)) returned 1 [0062.638] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0062.638] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\16\\Built-In Building Blocks.dotx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\document building blocks\\1033\\16\\built-in building blocks.dotx"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\16\\Built-In Building Blocks.dotx.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\document building blocks\\1033\\16\\built-in building blocks.dotx.xuy")) returned 1 [0062.641] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0062.641] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Excel", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Excel", lpFilePart=0x0) returned 0x35 [0062.641] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Excel\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Excel\\", lpFilePart=0x0) returned 0x36 [0062.641] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Excel\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d79d0 [0062.647] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0062.648] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0062.648] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0062.648] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0062.648] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0062.648] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0062.648] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0062.648] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Excel", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Excel", lpFilePart=0x0) returned 0x35 [0062.648] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Excel\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Excel\\", lpFilePart=0x0) returned 0x36 [0062.648] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Excel\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d7eb0 [0062.648] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0062.648] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0062.649] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0062.649] FindClose (in: hFindFile=0x5d7eb0 | out: hFindFile=0x5d7eb0) returned 1 [0062.649] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0062.649] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0062.649] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0062.649] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Excel\\XLSTART", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Excel\\XLSTART", lpFilePart=0x0) returned 0x3d [0062.649] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Excel\\XLSTART\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Excel\\XLSTART\\", lpFilePart=0x0) returned 0x3e [0062.649] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Excel\\XLSTART\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d79d0 [0062.649] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0062.649] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0062.649] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0062.649] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0062.649] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0062.649] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0062.649] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Excel\\XLSTART", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Excel\\XLSTART", lpFilePart=0x0) returned 0x3d [0062.650] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Excel\\XLSTART\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Excel\\XLSTART\\", lpFilePart=0x0) returned 0x3e [0062.650] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Excel\\XLSTART\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d79d0 [0062.650] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0062.650] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0062.650] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0062.650] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0062.650] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0062.650] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0062.650] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer", lpFilePart=0x0) returned 0x41 [0062.650] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\", lpFilePart=0x0) returned 0x42 [0062.650] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d81b0 [0062.650] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0062.651] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0062.651] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0062.651] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0062.651] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0062.651] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0062.651] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0062.651] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0062.651] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer", lpFilePart=0x0) returned 0x41 [0062.651] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\", lpFilePart=0x0) returned 0x42 [0062.651] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d79d0 [0062.651] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0062.652] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0062.652] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0062.652] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0062.652] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0062.652] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0062.652] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0062.652] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0062.652] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch", lpFilePart=0x0) returned 0x4e [0062.652] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\", lpFilePart=0x0) returned 0x4f [0062.652] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7c70 [0062.652] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0062.652] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0062.652] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0062.653] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0062.653] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0062.653] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0062.653] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0062.653] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0062.653] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0062.653] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0062.653] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0062.653] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0062.653] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch", lpFilePart=0x0) returned 0x4e [0062.653] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\", lpFilePart=0x0) returned 0x4f [0062.653] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d81b0 [0062.654] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0062.654] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0062.654] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0062.654] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0062.654] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0062.655] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0062.655] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0062.655] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0062.655] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0062.655] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0062.655] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0062.655] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\desktop.ini", lpFilePart=0x0) returned 0x5a [0062.655] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0062.655] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x2285e18 | out: lpFileInformation=0x2285e18*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xa8456400, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa8456400, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xf58e708b, ftLastWriteTime.dwHighDateTime=0x1d0baff, nFileSizeHigh=0x0, nFileSizeLow=0x94)) returned 1 [0062.655] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0062.655] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\desktop.ini", lpFilePart=0x0) returned 0x5a [0062.655] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0062.655] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0062.655] GetFileType (hFile=0x444) returned 0x1 [0062.655] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0062.656] GetFileType (hFile=0x444) returned 0x1 [0062.656] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0x94 [0062.656] ReadFile (in: hFile=0x444, lpBuffer=0x2286198, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be718, lpOverlapped=0x0 | out: lpBuffer=0x2286198*, lpNumberOfBytesRead=0x3be718*=0x94, lpOverlapped=0x0) returned 1 [0062.656] CloseHandle (hObject=0x444) returned 1 [0062.666] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\desktop.ini", lpFilePart=0x0) returned 0x5a [0062.666] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0062.666] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\desktop.ini"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0062.668] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb0e0) returned 1 [0062.668] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3bbd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\desktop.ini", lpFilePart=0x0) returned 0x5a [0062.668] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc200) returned 1 [0062.668] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x3bc2e0 | out: lpFileInformation=0x3bc2e0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xa8456400, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa8456400, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xf58e708b, ftLastWriteTime.dwHighDateTime=0x1d0baff, nFileSizeHigh=0x0, nFileSizeLow=0x94)) returned 1 [0062.668] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1c0) returned 1 [0062.668] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3bbd80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\desktop.ini", lpFilePart=0x0) returned 0x5a [0062.668] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc200) returned 1 [0062.668] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x22fdc78 | out: lpFileInformation=0x22fdc78*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xa8456400, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa8456400, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xf58e708b, ftLastWriteTime.dwHighDateTime=0x1d0baff, nFileSizeHigh=0x0, nFileSizeLow=0x94)) returned 1 [0062.668] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1c0) returned 1 [0062.668] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3bbbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\desktop.ini", lpFilePart=0x0) returned 0x5a [0062.668] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0c0) returned 1 [0062.668] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0062.669] GetFileType (hFile=0x444) returned 0x1 [0062.669] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc030) returned 1 [0062.669] GetFileType (hFile=0x444) returned 0x1 [0062.669] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc258 | out: lpFileSizeHigh=0x3bc258*=0x0) returned 0x94 [0062.669] ReadFile (in: hFile=0x444, lpBuffer=0x22fdff8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bc188, lpOverlapped=0x0 | out: lpBuffer=0x22fdff8*, lpNumberOfBytesRead=0x3bc188*=0x94, lpOverlapped=0x0) returned 1 [0062.669] CloseHandle (hObject=0x444) returned 1 [0062.813] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3bbbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\desktop.ini", lpFilePart=0x0) returned 0x5a [0062.813] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0c0) returned 1 [0062.813] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\desktop.ini"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0062.815] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8b50) returned 1 [0062.815] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Google Chrome.lnk", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Google Chrome.lnk", lpFilePart=0x0) returned 0x60 [0062.815] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0062.815] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Google Chrome.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\google chrome.lnk"), fInfoLevelId=0x0, lpFileInformation=0x2176180 | out: lpFileInformation=0x2176180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ee453d1, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x6ee453d1, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x562f92aa, ftLastWriteTime.dwHighDateTime=0x1d2d446, nFileSizeHigh=0x0, nFileSizeLow=0x93a)) returned 1 [0062.816] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0062.816] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Google Chrome.lnk", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Google Chrome.lnk", lpFilePart=0x0) returned 0x60 [0062.816] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0062.816] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Google Chrome.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\google chrome.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0062.816] GetFileType (hFile=0x444) returned 0x1 [0062.816] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0062.816] GetFileType (hFile=0x444) returned 0x1 [0062.816] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0x93a [0062.816] ReadFile (in: hFile=0x444, lpBuffer=0x2176de8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be718, lpOverlapped=0x0 | out: lpBuffer=0x2176de8*, lpNumberOfBytesRead=0x3be718*=0x93a, lpOverlapped=0x0) returned 1 [0062.835] CloseHandle (hObject=0x444) returned 1 [0062.875] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Google Chrome.lnk", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Google Chrome.lnk", lpFilePart=0x0) returned 0x60 [0062.875] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0062.875] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Google Chrome.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\google chrome.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0062.876] GetFileType (hFile=0x444) returned 0x1 [0062.876] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0062.877] GetFileType (hFile=0x444) returned 0x1 [0062.877] WriteFile (in: hFile=0x444, lpBuffer=0x21f0c40*, nNumberOfBytesToWrite=0x940, lpNumberOfBytesWritten=0x3be628, lpOverlapped=0x0 | out: lpBuffer=0x21f0c40*, lpNumberOfBytesWritten=0x3be628*=0x940, lpOverlapped=0x0) returned 1 [0062.877] CloseHandle (hObject=0x444) returned 1 [0062.878] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Google Chrome.lnk", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Google Chrome.lnk", lpFilePart=0x0) returned 0x60 [0062.878] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Google Chrome.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Google Chrome.lnk.xuy", lpFilePart=0x0) returned 0x64 [0062.878] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0062.878] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Google Chrome.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\google chrome.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ee453d1, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x6ee453d1, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1153c662, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x940)) returned 1 [0062.878] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0062.878] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Google Chrome.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\google chrome.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Google Chrome.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\google chrome.lnk.xuy")) returned 1 [0062.878] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Microsoft Outlook.lnk", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Microsoft Outlook.lnk", lpFilePart=0x0) returned 0x64 [0062.878] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0062.878] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Microsoft Outlook.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\microsoft outlook.lnk"), fInfoLevelId=0x0, lpFileInformation=0x21f1f50 | out: lpFileInformation=0x21f1f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24c1e44, ftCreationTime.dwHighDateTime=0x1d2fc25, ftLastAccessTime.dwLowDateTime=0x24c1e44, ftLastAccessTime.dwHighDateTime=0x1d2fc25, ftLastWriteTime.dwLowDateTime=0x24e8093, ftLastWriteTime.dwHighDateTime=0x1d2fc25, nFileSizeHigh=0x0, nFileSizeLow=0x4f9)) returned 1 [0062.879] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0062.879] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Microsoft Outlook.lnk", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Microsoft Outlook.lnk", lpFilePart=0x0) returned 0x64 [0062.879] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0062.879] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Microsoft Outlook.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\microsoft outlook.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0062.879] GetFileType (hFile=0x444) returned 0x1 [0062.879] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0062.879] GetFileType (hFile=0x444) returned 0x1 [0062.879] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0x4f9 [0062.879] ReadFile (in: hFile=0x444, lpBuffer=0x21f2798, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be718, lpOverlapped=0x0 | out: lpBuffer=0x21f2798*, lpNumberOfBytesRead=0x3be718*=0x4f9, lpOverlapped=0x0) returned 1 [0062.894] CloseHandle (hObject=0x444) returned 1 [0062.904] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Microsoft Outlook.lnk", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Microsoft Outlook.lnk", lpFilePart=0x0) returned 0x64 [0062.904] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0062.904] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Microsoft Outlook.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\microsoft outlook.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0062.906] GetFileType (hFile=0x444) returned 0x1 [0062.906] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0062.906] GetFileType (hFile=0x444) returned 0x1 [0062.906] WriteFile (in: hFile=0x444, lpBuffer=0x226b0c0*, nNumberOfBytesToWrite=0x500, lpNumberOfBytesWritten=0x3be628, lpOverlapped=0x0 | out: lpBuffer=0x226b0c0*, lpNumberOfBytesWritten=0x3be628*=0x500, lpOverlapped=0x0) returned 1 [0062.906] CloseHandle (hObject=0x444) returned 1 [0062.907] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Microsoft Outlook.lnk", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Microsoft Outlook.lnk", lpFilePart=0x0) returned 0x64 [0062.907] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Microsoft Outlook.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Microsoft Outlook.lnk.xuy", lpFilePart=0x0) returned 0x68 [0062.907] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0062.907] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Microsoft Outlook.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\microsoft outlook.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24c1e44, ftCreationTime.dwHighDateTime=0x1d2fc25, ftLastAccessTime.dwLowDateTime=0x24c1e44, ftLastAccessTime.dwHighDateTime=0x1d2fc25, ftLastWriteTime.dwLowDateTime=0x1158896f, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x500)) returned 1 [0062.907] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0062.907] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Microsoft Outlook.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\microsoft outlook.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Microsoft Outlook.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\microsoft outlook.lnk.xuy")) returned 1 [0062.907] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Shows Desktop.lnk", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Shows Desktop.lnk", lpFilePart=0x0) returned 0x60 [0062.907] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0062.908] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Shows Desktop.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\shows desktop.lnk"), fInfoLevelId=0x0, lpFileInformation=0x226c3e8 | out: lpFileInformation=0x226c3e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8456400, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa8456400, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x9befd7b1, ftLastWriteTime.dwHighDateTime=0x1d0baff, nFileSizeHigh=0x0, nFileSizeLow=0x160)) returned 1 [0062.908] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0062.908] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Shows Desktop.lnk", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Shows Desktop.lnk", lpFilePart=0x0) returned 0x60 [0062.908] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0062.908] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Shows Desktop.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\shows desktop.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0062.908] GetFileType (hFile=0x444) returned 0x1 [0062.908] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0062.908] GetFileType (hFile=0x444) returned 0x1 [0062.908] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0x160 [0062.908] ReadFile (in: hFile=0x444, lpBuffer=0x226c870, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be718, lpOverlapped=0x0 | out: lpBuffer=0x226c870*, lpNumberOfBytesRead=0x3be718*=0x160, lpOverlapped=0x0) returned 1 [0062.909] CloseHandle (hObject=0x444) returned 1 [0062.919] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Shows Desktop.lnk", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Shows Desktop.lnk", lpFilePart=0x0) returned 0x60 [0062.919] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0062.919] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Shows Desktop.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\shows desktop.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0062.920] GetFileType (hFile=0x444) returned 0x1 [0062.920] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0062.920] GetFileType (hFile=0x444) returned 0x1 [0062.920] WriteFile (in: hFile=0x444, lpBuffer=0x22e3fc0*, nNumberOfBytesToWrite=0x170, lpNumberOfBytesWritten=0x3be628, lpOverlapped=0x0 | out: lpBuffer=0x22e3fc0*, lpNumberOfBytesWritten=0x3be628*=0x170, lpOverlapped=0x0) returned 1 [0062.921] CloseHandle (hObject=0x444) returned 1 [0062.921] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Shows Desktop.lnk", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Shows Desktop.lnk", lpFilePart=0x0) returned 0x60 [0062.921] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Shows Desktop.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Shows Desktop.lnk.xuy", lpFilePart=0x0) returned 0x64 [0062.921] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0062.921] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Shows Desktop.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\shows desktop.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8456400, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa8456400, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x115aea1c, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x170)) returned 1 [0062.921] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0062.921] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Shows Desktop.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\shows desktop.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Shows Desktop.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\shows desktop.lnk.xuy")) returned 1 [0062.922] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Window Switcher.lnk", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Window Switcher.lnk", lpFilePart=0x0) returned 0x62 [0062.922] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0062.922] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Window Switcher.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\window switcher.lnk"), fInfoLevelId=0x0, lpFileInformation=0x22e52d0 | out: lpFileInformation=0x22e52d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8456400, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa8456400, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x9bf23a18, ftLastWriteTime.dwHighDateTime=0x1d0baff, nFileSizeHigh=0x0, nFileSizeLow=0x14e)) returned 1 [0062.924] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0062.924] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Window Switcher.lnk", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Window Switcher.lnk", lpFilePart=0x0) returned 0x62 [0062.924] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0062.924] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Window Switcher.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\window switcher.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0062.924] GetFileType (hFile=0x444) returned 0x1 [0062.924] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0062.924] GetFileType (hFile=0x444) returned 0x1 [0062.924] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0x14e [0062.924] ReadFile (in: hFile=0x444, lpBuffer=0x22e5748, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be718, lpOverlapped=0x0 | out: lpBuffer=0x22e5748*, lpNumberOfBytesRead=0x3be718*=0x14e, lpOverlapped=0x0) returned 1 [0062.925] CloseHandle (hObject=0x444) returned 1 [0062.939] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Window Switcher.lnk", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Window Switcher.lnk", lpFilePart=0x0) returned 0x62 [0062.939] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0062.940] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Window Switcher.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\window switcher.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0062.941] GetFileType (hFile=0x444) returned 0x1 [0062.941] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0062.941] GetFileType (hFile=0x444) returned 0x1 [0062.941] WriteFile (in: hFile=0x444, lpBuffer=0x215c768*, nNumberOfBytesToWrite=0x150, lpNumberOfBytesWritten=0x3be628, lpOverlapped=0x0 | out: lpBuffer=0x215c768*, lpNumberOfBytesWritten=0x3be628*=0x150, lpOverlapped=0x0) returned 1 [0062.941] CloseHandle (hObject=0x444) returned 1 [0062.941] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Window Switcher.lnk", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Window Switcher.lnk", lpFilePart=0x0) returned 0x62 [0062.942] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Window Switcher.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Window Switcher.lnk.xuy", lpFilePart=0x0) returned 0x66 [0062.942] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0062.942] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Window Switcher.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\window switcher.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8456400, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa8456400, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x115d4bfb, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x150)) returned 1 [0062.942] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0062.942] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Window Switcher.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\window switcher.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Window Switcher.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\window switcher.lnk.xuy")) returned 1 [0062.942] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0062.942] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned", lpFilePart=0x0) returned 0x5a [0062.942] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\", lpFilePart=0x0) returned 0x5b [0062.943] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d81b0 [0062.943] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0062.943] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0062.943] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0062.943] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0062.943] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0062.943] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0062.943] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0062.943] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0062.943] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned", lpFilePart=0x0) returned 0x5a [0062.943] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\", lpFilePart=0x0) returned 0x5b [0062.943] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7a30 [0062.944] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0062.944] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0062.944] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0062.944] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0062.944] FindClose (in: hFindFile=0x5d7a30 | out: hFindFile=0x5d7a30) returned 1 [0062.944] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0062.944] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0062.944] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0062.944] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts", lpFilePart=0x0) returned 0x6f [0062.944] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts\\", lpFilePart=0x0) returned 0x70 [0062.944] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d79d0 [0062.945] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0062.945] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0062.945] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0062.945] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0062.945] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0062.945] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0062.945] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts", lpFilePart=0x0) returned 0x6f [0062.945] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts\\", lpFilePart=0x0) returned 0x70 [0062.945] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d7cd0 [0062.945] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0062.945] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0062.945] FindClose (in: hFindFile=0x5d7cd0 | out: hFindFile=0x5d7cd0) returned 1 [0062.946] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0062.946] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0062.946] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0062.946] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar", lpFilePart=0x0) returned 0x62 [0062.946] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\", lpFilePart=0x0) returned 0x63 [0062.946] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d81b0 [0062.946] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0062.947] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0062.947] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0062.947] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0062.947] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0062.947] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0062.947] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0062.947] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0062.947] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0062.947] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0062.948] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0062.948] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0062.948] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0062.948] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0062.948] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0062.948] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0062.948] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar", lpFilePart=0x0) returned 0x62 [0062.948] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\", lpFilePart=0x0) returned 0x63 [0062.948] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d7a30 [0062.948] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0062.948] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0062.948] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0062.949] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0062.949] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0062.949] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0062.949] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0062.949] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0062.949] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0062.949] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0062.949] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0062.950] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0062.950] FindClose (in: hFindFile=0x5d7a30 | out: hFindFile=0x5d7a30) returned 1 [0062.950] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0062.950] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0062.950] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\desktop.ini", lpFilePart=0x0) returned 0x6e [0062.950] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0062.950] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x2167f60 | out: lpFileInformation=0x2167f60*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0xc0dd18e7, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xc0dd18e7, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xc0dd18e7, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x53)) returned 1 [0062.950] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0062.950] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\desktop.ini", lpFilePart=0x0) returned 0x6e [0062.950] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0062.950] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0062.950] GetFileType (hFile=0x444) returned 0x1 [0062.950] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0062.951] GetFileType (hFile=0x444) returned 0x1 [0062.951] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be708 | out: lpFileSizeHigh=0x3be708*=0x0) returned 0x53 [0062.951] ReadFile (in: hFile=0x444, lpBuffer=0x21682f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be638, lpOverlapped=0x0 | out: lpBuffer=0x21682f0*, lpNumberOfBytesRead=0x3be638*=0x53, lpOverlapped=0x0) returned 1 [0062.952] CloseHandle (hObject=0x444) returned 1 [0062.990] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\desktop.ini", lpFilePart=0x0) returned 0x6e [0062.991] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0062.991] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\desktop.ini"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0062.992] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb000) returned 1 [0062.993] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3bbc80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\desktop.ini", lpFilePart=0x0) returned 0x6e [0062.993] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc120) returned 1 [0062.993] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x3bc200 | out: lpFileInformation=0x3bc200*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0xc0dd18e7, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xc0dd18e7, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xc0dd18e7, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x53)) returned 1 [0062.993] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc0e0) returned 1 [0062.993] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3bbca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\desktop.ini", lpFilePart=0x0) returned 0x6e [0062.993] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc120) returned 1 [0062.993] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x21dfdc8 | out: lpFileInformation=0x21dfdc8*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0xc0dd18e7, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xc0dd18e7, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xc0dd18e7, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x53)) returned 1 [0062.993] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc0e0) returned 1 [0062.993] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3bbb00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\desktop.ini", lpFilePart=0x0) returned 0x6e [0062.993] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbfe0) returned 1 [0062.993] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0062.994] GetFileType (hFile=0x444) returned 0x1 [0062.994] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbf50) returned 1 [0062.994] GetFileType (hFile=0x444) returned 0x1 [0062.994] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc178 | out: lpFileSizeHigh=0x3bc178*=0x0) returned 0x53 [0062.994] ReadFile (in: hFile=0x444, lpBuffer=0x21e0158, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bc0a8, lpOverlapped=0x0 | out: lpBuffer=0x21e0158*, lpNumberOfBytesRead=0x3bc0a8*=0x53, lpOverlapped=0x0) returned 1 [0062.994] CloseHandle (hObject=0x444) returned 1 [0063.040] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3bbb00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\desktop.ini", lpFilePart=0x0) returned 0x6e [0063.040] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbfe0) returned 1 [0063.040] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\desktop.ini"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0063.042] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8a70) returned 1 [0063.042] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Excel 2016.lnk", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Excel 2016.lnk", lpFilePart=0x0) returned 0x71 [0063.042] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0063.043] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Excel 2016.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\excel 2016.lnk"), fInfoLevelId=0x0, lpFileInformation=0x2257b60 | out: lpFileInformation=0x2257b60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa36d3429, ftCreationTime.dwHighDateTime=0x1d301c6, ftLastAccessTime.dwLowDateTime=0xa36d3429, ftLastAccessTime.dwHighDateTime=0x1d301c6, ftLastWriteTime.dwLowDateTime=0x5b6b4343, ftLastWriteTime.dwHighDateTime=0x1d301c5, nFileSizeHigh=0x0, nFileSizeLow=0x973)) returned 1 [0063.043] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0063.043] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Excel 2016.lnk", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Excel 2016.lnk", lpFilePart=0x0) returned 0x71 [0063.043] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0063.043] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Excel 2016.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\excel 2016.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0063.043] GetFileType (hFile=0x444) returned 0x1 [0063.043] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0063.043] GetFileType (hFile=0x444) returned 0x1 [0063.043] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be708 | out: lpFileSizeHigh=0x3be708*=0x0) returned 0x973 [0063.043] ReadFile (in: hFile=0x444, lpBuffer=0x2258830, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be638, lpOverlapped=0x0 | out: lpBuffer=0x2258830*, lpNumberOfBytesRead=0x3be638*=0x973, lpOverlapped=0x0) returned 1 [0063.044] CloseHandle (hObject=0x444) returned 1 [0063.082] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Excel 2016.lnk", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Excel 2016.lnk", lpFilePart=0x0) returned 0x71 [0063.082] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0063.082] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Excel 2016.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\excel 2016.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0063.084] GetFileType (hFile=0x444) returned 0x1 [0063.084] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0063.084] GetFileType (hFile=0x444) returned 0x1 [0063.084] WriteFile (in: hFile=0x444, lpBuffer=0x22d27e8*, nNumberOfBytesToWrite=0x980, lpNumberOfBytesWritten=0x3be548, lpOverlapped=0x0 | out: lpBuffer=0x22d27e8*, lpNumberOfBytesWritten=0x3be548*=0x980, lpOverlapped=0x0) returned 1 [0063.085] CloseHandle (hObject=0x444) returned 1 [0063.086] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Excel 2016.lnk", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Excel 2016.lnk", lpFilePart=0x0) returned 0x71 [0063.086] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Excel 2016.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Excel 2016.lnk.xuy", lpFilePart=0x0) returned 0x75 [0063.086] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0063.086] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Excel 2016.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\excel 2016.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa36d3429, ftCreationTime.dwHighDateTime=0x1d301c6, ftLastAccessTime.dwLowDateTime=0xa36d3429, ftLastAccessTime.dwHighDateTime=0x1d301c6, ftLastWriteTime.dwLowDateTime=0x1172f283, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x980)) returned 1 [0063.086] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0063.086] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Excel 2016.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\excel 2016.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Excel 2016.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\excel 2016.lnk.xuy")) returned 1 [0063.089] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\File Explorer.lnk", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\File Explorer.lnk", lpFilePart=0x0) returned 0x74 [0063.089] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0063.089] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\File Explorer.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\file explorer.lnk"), fInfoLevelId=0x0, lpFileInformation=0x22d3b58 | out: lpFileInformation=0x22d3b58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0dd18e7, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xc0dd18e7, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x9bf49c7f, ftLastWriteTime.dwHighDateTime=0x1d0baff, nFileSizeHigh=0x0, nFileSizeLow=0x197)) returned 1 [0063.089] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0063.089] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\File Explorer.lnk", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\File Explorer.lnk", lpFilePart=0x0) returned 0x74 [0063.089] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0063.089] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\File Explorer.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\file explorer.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0063.089] GetFileType (hFile=0x444) returned 0x1 [0063.089] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0063.089] GetFileType (hFile=0x444) returned 0x1 [0063.089] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be708 | out: lpFileSizeHigh=0x3be708*=0x0) returned 0x197 [0063.090] ReadFile (in: hFile=0x444, lpBuffer=0x22d4068, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be638, lpOverlapped=0x0 | out: lpBuffer=0x22d4068*, lpNumberOfBytesRead=0x3be638*=0x197, lpOverlapped=0x0) returned 1 [0063.090] CloseHandle (hObject=0x444) returned 1 [0063.101] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\File Explorer.lnk", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\File Explorer.lnk", lpFilePart=0x0) returned 0x74 [0063.101] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0063.101] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\File Explorer.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\file explorer.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0063.104] GetFileType (hFile=0x444) returned 0x1 [0063.104] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0063.104] GetFileType (hFile=0x444) returned 0x1 [0063.104] WriteFile (in: hFile=0x444, lpBuffer=0x234b8d0*, nNumberOfBytesToWrite=0x1a0, lpNumberOfBytesWritten=0x3be548, lpOverlapped=0x0 | out: lpBuffer=0x234b8d0*, lpNumberOfBytesWritten=0x3be548*=0x1a0, lpOverlapped=0x0) returned 1 [0063.105] CloseHandle (hObject=0x444) returned 1 [0063.107] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\File Explorer.lnk", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\File Explorer.lnk", lpFilePart=0x0) returned 0x74 [0063.107] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\File Explorer.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\File Explorer.lnk.xuy", lpFilePart=0x0) returned 0x78 [0063.107] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0063.107] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\File Explorer.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\file explorer.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0dd18e7, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xc0dd18e7, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x11755529, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x1a0)) returned 1 [0063.107] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0063.107] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\File Explorer.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\file explorer.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\File Explorer.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\file explorer.lnk.xuy")) returned 1 [0063.111] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Mozilla Firefox.lnk", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Mozilla Firefox.lnk", lpFilePart=0x0) returned 0x76 [0063.111] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0063.111] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Mozilla Firefox.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\mozilla firefox.lnk"), fInfoLevelId=0x0, lpFileInformation=0x234cc58 | out: lpFileInformation=0x234cc58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21682a12, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x21682a12, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x1fa82ca5, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x4d2)) returned 1 [0063.111] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0063.111] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Mozilla Firefox.lnk", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Mozilla Firefox.lnk", lpFilePart=0x0) returned 0x76 [0063.111] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0063.111] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Mozilla Firefox.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\mozilla firefox.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0063.111] GetFileType (hFile=0x444) returned 0x1 [0063.111] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0063.111] GetFileType (hFile=0x444) returned 0x1 [0063.111] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be708 | out: lpFileSizeHigh=0x3be708*=0x0) returned 0x4d2 [0063.111] ReadFile (in: hFile=0x444, lpBuffer=0x234d4a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be638, lpOverlapped=0x0 | out: lpBuffer=0x234d4a8*, lpNumberOfBytesRead=0x3be638*=0x4d2, lpOverlapped=0x0) returned 1 [0063.112] CloseHandle (hObject=0x444) returned 1 [0063.152] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Mozilla Firefox.lnk", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Mozilla Firefox.lnk", lpFilePart=0x0) returned 0x76 [0063.152] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0063.153] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Mozilla Firefox.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\mozilla firefox.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0063.154] GetFileType (hFile=0x444) returned 0x1 [0063.154] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0063.154] GetFileType (hFile=0x444) returned 0x1 [0063.154] WriteFile (in: hFile=0x444, lpBuffer=0x21c6b10*, nNumberOfBytesToWrite=0x4e0, lpNumberOfBytesWritten=0x3be548, lpOverlapped=0x0 | out: lpBuffer=0x21c6b10*, lpNumberOfBytesWritten=0x3be548*=0x4e0, lpOverlapped=0x0) returned 1 [0063.156] CloseHandle (hObject=0x444) returned 1 [0063.156] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Mozilla Firefox.lnk", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Mozilla Firefox.lnk", lpFilePart=0x0) returned 0x76 [0063.156] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Mozilla Firefox.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Mozilla Firefox.lnk.xuy", lpFilePart=0x0) returned 0x7a [0063.156] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0063.157] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Mozilla Firefox.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\mozilla firefox.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21682a12, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x21682a12, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x117ee02b, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x4e0)) returned 1 [0063.157] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0063.157] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Mozilla Firefox.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\mozilla firefox.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Mozilla Firefox.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\mozilla firefox.lnk.xuy")) returned 1 [0063.159] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\OneNote 2016.lnk", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\OneNote 2016.lnk", lpFilePart=0x0) returned 0x73 [0063.159] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0063.159] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\OneNote 2016.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\onenote 2016.lnk"), fInfoLevelId=0x0, lpFileInformation=0x21c7e98 | out: lpFileInformation=0x21c7e98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3df9dfb, ftCreationTime.dwHighDateTime=0x1d301c6, ftLastAccessTime.dwLowDateTime=0xa3df9dfb, ftLastAccessTime.dwHighDateTime=0x1d301c6, ftLastWriteTime.dwLowDateTime=0x5baba117, ftLastWriteTime.dwHighDateTime=0x1d301c5, nFileSizeHigh=0x0, nFileSizeLow=0x95f)) returned 1 [0063.159] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0063.159] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\OneNote 2016.lnk", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\OneNote 2016.lnk", lpFilePart=0x0) returned 0x73 [0063.159] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0063.160] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\OneNote 2016.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\onenote 2016.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0063.160] GetFileType (hFile=0x444) returned 0x1 [0063.160] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0063.160] GetFileType (hFile=0x444) returned 0x1 [0063.160] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be708 | out: lpFileSizeHigh=0x3be708*=0x0) returned 0x95f [0063.160] ReadFile (in: hFile=0x444, lpBuffer=0x21c8b60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be638, lpOverlapped=0x0 | out: lpBuffer=0x21c8b60*, lpNumberOfBytesRead=0x3be638*=0x95f, lpOverlapped=0x0) returned 1 [0063.160] CloseHandle (hObject=0x444) returned 1 [0063.172] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\OneNote 2016.lnk", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\OneNote 2016.lnk", lpFilePart=0x0) returned 0x73 [0063.172] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0063.172] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\OneNote 2016.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\onenote 2016.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0063.174] GetFileType (hFile=0x444) returned 0x1 [0063.174] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0063.174] GetFileType (hFile=0x444) returned 0x1 [0063.174] WriteFile (in: hFile=0x444, lpBuffer=0x2242a78*, nNumberOfBytesToWrite=0x960, lpNumberOfBytesWritten=0x3be548, lpOverlapped=0x0 | out: lpBuffer=0x2242a78*, lpNumberOfBytesWritten=0x3be548*=0x960, lpOverlapped=0x0) returned 1 [0063.175] CloseHandle (hObject=0x444) returned 1 [0063.176] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\OneNote 2016.lnk", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\OneNote 2016.lnk", lpFilePart=0x0) returned 0x73 [0063.176] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\OneNote 2016.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\OneNote 2016.lnk.xuy", lpFilePart=0x0) returned 0x77 [0063.176] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0063.176] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\OneNote 2016.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\onenote 2016.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3df9dfb, ftCreationTime.dwHighDateTime=0x1d301c6, ftLastAccessTime.dwLowDateTime=0xa3df9dfb, ftLastAccessTime.dwHighDateTime=0x1d301c6, ftLastWriteTime.dwLowDateTime=0x11814144, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x960)) returned 1 [0063.176] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0063.176] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\OneNote 2016.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\onenote 2016.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\OneNote 2016.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\onenote 2016.lnk.xuy")) returned 1 [0063.178] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Outlook 2016.lnk", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Outlook 2016.lnk", lpFilePart=0x0) returned 0x73 [0063.178] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0063.178] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Outlook 2016.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\outlook 2016.lnk"), fInfoLevelId=0x0, lpFileInformation=0x2243de8 | out: lpFileInformation=0x2243de8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa41ffc39, ftCreationTime.dwHighDateTime=0x1d301c6, ftLastAccessTime.dwLowDateTime=0xa41ffc39, ftLastAccessTime.dwHighDateTime=0x1d301c6, ftLastWriteTime.dwLowDateTime=0x5bb52a4a, ftLastWriteTime.dwHighDateTime=0x1d301c5, nFileSizeHigh=0x0, nFileSizeLow=0x96d)) returned 1 [0063.178] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0063.179] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Outlook 2016.lnk", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Outlook 2016.lnk", lpFilePart=0x0) returned 0x73 [0063.179] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0063.179] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Outlook 2016.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\outlook 2016.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0063.179] GetFileType (hFile=0x444) returned 0x1 [0063.179] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0063.179] GetFileType (hFile=0x444) returned 0x1 [0063.179] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be708 | out: lpFileSizeHigh=0x3be708*=0x0) returned 0x96d [0063.179] ReadFile (in: hFile=0x444, lpBuffer=0x2244ac0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be638, lpOverlapped=0x0 | out: lpBuffer=0x2244ac0*, lpNumberOfBytesRead=0x3be638*=0x96d, lpOverlapped=0x0) returned 1 [0063.180] CloseHandle (hObject=0x444) returned 1 [0063.193] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Outlook 2016.lnk", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Outlook 2016.lnk", lpFilePart=0x0) returned 0x73 [0063.193] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0063.193] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Outlook 2016.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\outlook 2016.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0063.220] GetFileType (hFile=0x444) returned 0x1 [0063.220] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0063.220] GetFileType (hFile=0x444) returned 0x1 [0063.220] WriteFile (in: hFile=0x444, lpBuffer=0x22bea28*, nNumberOfBytesToWrite=0x970, lpNumberOfBytesWritten=0x3be548, lpOverlapped=0x0 | out: lpBuffer=0x22bea28*, lpNumberOfBytesWritten=0x3be548*=0x970, lpOverlapped=0x0) returned 1 [0063.220] CloseHandle (hObject=0x444) returned 1 [0063.220] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Outlook 2016.lnk", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Outlook 2016.lnk", lpFilePart=0x0) returned 0x73 [0063.221] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Outlook 2016.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Outlook 2016.lnk.xuy", lpFilePart=0x0) returned 0x77 [0063.221] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0063.221] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Outlook 2016.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\outlook 2016.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa41ffc39, ftCreationTime.dwHighDateTime=0x1d301c6, ftLastAccessTime.dwLowDateTime=0xa41ffc39, ftLastAccessTime.dwHighDateTime=0x1d301c6, ftLastWriteTime.dwLowDateTime=0x11886675, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x970)) returned 1 [0063.221] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0063.221] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Outlook 2016.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\outlook 2016.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Outlook 2016.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\outlook 2016.lnk.xuy")) returned 1 [0063.221] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\PowerPoint 2016.lnk", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\PowerPoint 2016.lnk", lpFilePart=0x0) returned 0x76 [0063.222] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0063.222] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\PowerPoint 2016.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\powerpoint 2016.lnk"), fInfoLevelId=0x0, lpFileInformation=0x22bfd98 | out: lpFileInformation=0x22bfd98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa45df874, ftCreationTime.dwHighDateTime=0x1d301c6, ftLastAccessTime.dwLowDateTime=0xa45df874, ftLastAccessTime.dwHighDateTime=0x1d301c6, ftLastWriteTime.dwLowDateTime=0x5bcd02b5, ftLastWriteTime.dwHighDateTime=0x1d301c5, nFileSizeHigh=0x0, nFileSizeLow=0x998)) returned 1 [0063.222] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0063.222] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\PowerPoint 2016.lnk", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\PowerPoint 2016.lnk", lpFilePart=0x0) returned 0x76 [0063.222] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0063.222] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\PowerPoint 2016.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\powerpoint 2016.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0063.222] GetFileType (hFile=0x444) returned 0x1 [0063.222] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0063.222] GetFileType (hFile=0x444) returned 0x1 [0063.222] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be708 | out: lpFileSizeHigh=0x3be708*=0x0) returned 0x998 [0063.222] ReadFile (in: hFile=0x444, lpBuffer=0x22c0aa8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be638, lpOverlapped=0x0 | out: lpBuffer=0x22c0aa8*, lpNumberOfBytesRead=0x3be638*=0x998, lpOverlapped=0x0) returned 1 [0063.223] CloseHandle (hObject=0x444) returned 1 [0063.233] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\PowerPoint 2016.lnk", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\PowerPoint 2016.lnk", lpFilePart=0x0) returned 0x76 [0063.233] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0063.233] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\PowerPoint 2016.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\powerpoint 2016.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0063.235] GetFileType (hFile=0x444) returned 0x1 [0063.235] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0063.235] GetFileType (hFile=0x444) returned 0x1 [0063.235] WriteFile (in: hFile=0x444, lpBuffer=0x233ab08*, nNumberOfBytesToWrite=0x9a0, lpNumberOfBytesWritten=0x3be548, lpOverlapped=0x0 | out: lpBuffer=0x233ab08*, lpNumberOfBytesWritten=0x3be548*=0x9a0, lpOverlapped=0x0) returned 1 [0063.235] CloseHandle (hObject=0x444) returned 1 [0063.235] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\PowerPoint 2016.lnk", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\PowerPoint 2016.lnk", lpFilePart=0x0) returned 0x76 [0063.236] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\PowerPoint 2016.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\PowerPoint 2016.lnk.xuy", lpFilePart=0x0) returned 0x7a [0063.236] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0063.236] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\PowerPoint 2016.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\powerpoint 2016.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa45df874, ftCreationTime.dwHighDateTime=0x1d301c6, ftLastAccessTime.dwLowDateTime=0xa45df874, ftLastAccessTime.dwHighDateTime=0x1d301c6, ftLastWriteTime.dwLowDateTime=0x118acae7, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x9a0)) returned 1 [0063.236] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0063.236] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\PowerPoint 2016.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\powerpoint 2016.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\PowerPoint 2016.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\powerpoint 2016.lnk.xuy")) returned 1 [0063.236] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Project 2016.lnk", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Project 2016.lnk", lpFilePart=0x0) returned 0x73 [0063.236] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0063.236] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Project 2016.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\project 2016.lnk"), fInfoLevelId=0x0, lpFileInformation=0x233be90 | out: lpFileInformation=0x233be90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68c19d55, ftCreationTime.dwHighDateTime=0x1d301ca, ftLastAccessTime.dwLowDateTime=0x68c19d55, ftLastAccessTime.dwHighDateTime=0x1d301ca, ftLastWriteTime.dwLowDateTime=0x92986602, ftLastWriteTime.dwHighDateTime=0x1d301c8, nFileSizeHigh=0x0, nFileSizeLow=0x87e)) returned 1 [0063.237] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0063.237] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Project 2016.lnk", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Project 2016.lnk", lpFilePart=0x0) returned 0x73 [0063.237] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0063.237] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Project 2016.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\project 2016.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0063.237] GetFileType (hFile=0x444) returned 0x1 [0063.237] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0063.237] GetFileType (hFile=0x444) returned 0x1 [0063.237] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be708 | out: lpFileSizeHigh=0x3be708*=0x0) returned 0x87e [0063.237] ReadFile (in: hFile=0x444, lpBuffer=0x233ca78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be638, lpOverlapped=0x0 | out: lpBuffer=0x233ca78*, lpNumberOfBytesRead=0x3be638*=0x87e, lpOverlapped=0x0) returned 1 [0063.238] CloseHandle (hObject=0x444) returned 1 [0063.279] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Project 2016.lnk", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Project 2016.lnk", lpFilePart=0x0) returned 0x73 [0063.279] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0063.279] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Project 2016.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\project 2016.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0063.293] GetFileType (hFile=0x444) returned 0x1 [0063.293] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0063.293] GetFileType (hFile=0x444) returned 0x1 [0063.293] WriteFile (in: hFile=0x444, lpBuffer=0x21b67b8*, nNumberOfBytesToWrite=0x880, lpNumberOfBytesWritten=0x3be548, lpOverlapped=0x0 | out: lpBuffer=0x21b67b8*, lpNumberOfBytesWritten=0x3be548*=0x880, lpOverlapped=0x0) returned 1 [0063.294] CloseHandle (hObject=0x444) returned 1 [0063.299] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Project 2016.lnk", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Project 2016.lnk", lpFilePart=0x0) returned 0x73 [0063.299] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Project 2016.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Project 2016.lnk.xuy", lpFilePart=0x0) returned 0x77 [0063.299] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0063.299] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Project 2016.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\project 2016.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68c19d55, ftCreationTime.dwHighDateTime=0x1d301ca, ftLastAccessTime.dwLowDateTime=0x68c19d55, ftLastAccessTime.dwHighDateTime=0x1d301ca, ftLastWriteTime.dwLowDateTime=0x1191f0bd, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x880)) returned 1 [0063.299] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0063.300] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Project 2016.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\project 2016.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Project 2016.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\project 2016.lnk.xuy")) returned 1 [0063.301] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Visio 2016.lnk", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Visio 2016.lnk", lpFilePart=0x0) returned 0x71 [0063.301] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0063.301] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Visio 2016.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\visio 2016.lnk"), fInfoLevelId=0x0, lpFileInformation=0x21b7b28 | out: lpFileInformation=0x21b7b28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5418d56, ftCreationTime.dwHighDateTime=0x1d301d1, ftLastAccessTime.dwLowDateTime=0xf5418d56, ftLastAccessTime.dwHighDateTime=0x1d301d1, ftLastWriteTime.dwLowDateTime=0x7212add6, ftLastWriteTime.dwHighDateTime=0x1d301d0, nFileSizeHigh=0x0, nFileSizeLow=0x86e)) returned 1 [0063.302] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0063.302] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Visio 2016.lnk", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Visio 2016.lnk", lpFilePart=0x0) returned 0x71 [0063.302] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0063.302] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Visio 2016.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\visio 2016.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0063.302] GetFileType (hFile=0x444) returned 0x1 [0063.302] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0063.302] GetFileType (hFile=0x444) returned 0x1 [0063.302] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be708 | out: lpFileSizeHigh=0x3be708*=0x0) returned 0x86e [0063.302] ReadFile (in: hFile=0x444, lpBuffer=0x21b86f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be638, lpOverlapped=0x0 | out: lpBuffer=0x21b86f0*, lpNumberOfBytesRead=0x3be638*=0x86e, lpOverlapped=0x0) returned 1 [0063.303] CloseHandle (hObject=0x444) returned 1 [0063.314] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Visio 2016.lnk", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Visio 2016.lnk", lpFilePart=0x0) returned 0x71 [0063.314] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0063.314] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Visio 2016.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\visio 2016.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0063.316] GetFileType (hFile=0x444) returned 0x1 [0063.316] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0063.316] GetFileType (hFile=0x444) returned 0x1 [0063.316] WriteFile (in: hFile=0x444, lpBuffer=0x2232150*, nNumberOfBytesToWrite=0x870, lpNumberOfBytesWritten=0x3be548, lpOverlapped=0x0 | out: lpBuffer=0x2232150*, lpNumberOfBytesWritten=0x3be548*=0x870, lpOverlapped=0x0) returned 1 [0063.317] CloseHandle (hObject=0x444) returned 1 [0063.317] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Visio 2016.lnk", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Visio 2016.lnk", lpFilePart=0x0) returned 0x71 [0063.317] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Visio 2016.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Visio 2016.lnk.xuy", lpFilePart=0x0) returned 0x75 [0063.317] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0063.317] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Visio 2016.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\visio 2016.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5418d56, ftCreationTime.dwHighDateTime=0x1d301d1, ftLastAccessTime.dwLowDateTime=0xf5418d56, ftLastAccessTime.dwHighDateTime=0x1d301d1, ftLastWriteTime.dwLowDateTime=0x1196b5ed, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x870)) returned 1 [0063.317] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0063.317] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Visio 2016.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\visio 2016.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Visio 2016.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\visio 2016.lnk.xuy")) returned 1 [0063.320] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Word 2016.lnk", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Word 2016.lnk", lpFilePart=0x0) returned 0x70 [0063.320] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0063.320] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Word 2016.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\word 2016.lnk"), fInfoLevelId=0x0, lpFileInformation=0x22334c0 | out: lpFileInformation=0x22334c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa49e56c0, ftCreationTime.dwHighDateTime=0x1d301c6, ftLastAccessTime.dwLowDateTime=0xa49e56c0, ftLastAccessTime.dwHighDateTime=0x1d301c6, ftLastWriteTime.dwLowDateTime=0x5be99d41, ftLastWriteTime.dwHighDateTime=0x1d301c5, nFileSizeHigh=0x0, nFileSizeLow=0x999)) returned 1 [0063.320] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0063.320] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Word 2016.lnk", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Word 2016.lnk", lpFilePart=0x0) returned 0x70 [0063.320] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0063.320] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Word 2016.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\word 2016.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0063.320] GetFileType (hFile=0x444) returned 0x1 [0063.320] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0063.320] GetFileType (hFile=0x444) returned 0x1 [0063.320] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be708 | out: lpFileSizeHigh=0x3be708*=0x0) returned 0x999 [0063.320] ReadFile (in: hFile=0x444, lpBuffer=0x22341b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be638, lpOverlapped=0x0 | out: lpBuffer=0x22341b8*, lpNumberOfBytesRead=0x3be638*=0x999, lpOverlapped=0x0) returned 1 [0063.321] CloseHandle (hObject=0x444) returned 1 [0063.332] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Word 2016.lnk", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Word 2016.lnk", lpFilePart=0x0) returned 0x70 [0063.332] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0063.332] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Word 2016.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\word 2016.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0063.334] GetFileType (hFile=0x444) returned 0x1 [0063.334] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0063.334] GetFileType (hFile=0x444) returned 0x1 [0063.334] WriteFile (in: hFile=0x444, lpBuffer=0x22ae208*, nNumberOfBytesToWrite=0x9a0, lpNumberOfBytesWritten=0x3be548, lpOverlapped=0x0 | out: lpBuffer=0x22ae208*, lpNumberOfBytesWritten=0x3be548*=0x9a0, lpOverlapped=0x0) returned 1 [0063.335] CloseHandle (hObject=0x444) returned 1 [0063.336] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Word 2016.lnk", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Word 2016.lnk", lpFilePart=0x0) returned 0x70 [0063.336] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Word 2016.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Word 2016.lnk.xuy", lpFilePart=0x0) returned 0x74 [0063.336] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0063.336] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Word 2016.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\word 2016.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa49e56c0, ftCreationTime.dwHighDateTime=0x1d301c6, ftLastAccessTime.dwLowDateTime=0xa49e56c0, ftLastAccessTime.dwHighDateTime=0x1d301c6, ftLastWriteTime.dwLowDateTime=0x11991b49, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x9a0)) returned 1 [0063.336] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0063.336] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Word 2016.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\word 2016.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Word 2016.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\word 2016.lnk.xuy")) returned 1 [0063.339] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0063.339] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData", lpFilePart=0x0) returned 0x4a [0063.339] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\", lpFilePart=0x0) returned 0x4b [0063.339] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7fd0 [0063.340] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0063.341] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0063.341] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0063.341] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0063.341] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0063.341] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0063.341] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0063.341] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData", lpFilePart=0x0) returned 0x4a [0063.341] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\", lpFilePart=0x0) returned 0x4b [0063.341] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d78b0 [0063.341] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0063.342] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0063.342] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0063.342] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0063.342] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0063.342] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0063.342] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0063.342] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low", lpFilePart=0x0) returned 0x4e [0063.342] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\", lpFilePart=0x0) returned 0x4f [0063.342] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7370 [0063.343] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0063.343] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0063.343] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0063.343] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0063.343] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0063.343] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0063.343] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low", lpFilePart=0x0) returned 0x4e [0063.343] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\", lpFilePart=0x0) returned 0x4f [0063.344] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d78b0 [0063.344] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0063.344] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0063.344] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0063.344] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0063.344] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0063.344] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0063.344] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MMC", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MMC", lpFilePart=0x0) returned 0x33 [0063.344] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MMC\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MMC\\", lpFilePart=0x0) returned 0x34 [0063.344] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MMC\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d81b0 [0063.344] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0063.345] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0063.345] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0063.345] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0063.345] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0063.345] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0063.345] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MMC", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MMC", lpFilePart=0x0) returned 0x33 [0063.345] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MMC\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MMC\\", lpFilePart=0x0) returned 0x34 [0063.345] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MMC\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d7550 [0063.345] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0063.345] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0063.345] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0063.346] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0063.346] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0063.346] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0063.346] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MS Project", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MS Project", lpFilePart=0x0) returned 0x3a [0063.346] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MS Project\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MS Project\\", lpFilePart=0x0) returned 0x3b [0063.346] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MS Project\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d7550 [0063.346] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0063.346] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0063.346] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0063.346] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0063.347] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0063.347] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0063.347] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0063.347] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MS Project", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MS Project", lpFilePart=0x0) returned 0x3a [0063.347] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MS Project\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MS Project\\", lpFilePart=0x0) returned 0x3b [0063.347] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MS Project\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d7d90 [0063.347] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0063.347] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0063.347] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0063.347] FindClose (in: hFindFile=0x5d7d90 | out: hFindFile=0x5d7d90) returned 1 [0063.347] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0063.347] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0063.347] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0063.347] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MS Project\\16", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MS Project\\16", lpFilePart=0x0) returned 0x3d [0063.347] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MS Project\\16\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MS Project\\16\\", lpFilePart=0x0) returned 0x3e [0063.348] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MS Project\\16\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d78b0 [0063.348] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0063.348] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0063.348] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0063.348] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0063.348] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0063.348] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0063.348] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0063.348] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MS Project\\16", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MS Project\\16", lpFilePart=0x0) returned 0x3d [0063.348] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MS Project\\16\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MS Project\\16\\", lpFilePart=0x0) returned 0x3e [0063.348] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MS Project\\16\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d79d0 [0063.349] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0063.349] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0063.349] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0063.349] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0063.349] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0063.349] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0063.349] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0063.349] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MS Project\\16\\en-US", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MS Project\\16\\en-US", lpFilePart=0x0) returned 0x43 [0063.349] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MS Project\\16\\en-US\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MS Project\\16\\en-US\\", lpFilePart=0x0) returned 0x44 [0063.349] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MS Project\\16\\en-US\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7d30 [0063.350] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0063.350] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0063.350] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0063.350] FindClose (in: hFindFile=0x5d7d30 | out: hFindFile=0x5d7d30) returned 1 [0063.351] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0063.351] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0063.351] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0063.351] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MS Project\\16\\en-US", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MS Project\\16\\en-US", lpFilePart=0x0) returned 0x43 [0063.351] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MS Project\\16\\en-US\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MS Project\\16\\en-US\\", lpFilePart=0x0) returned 0x44 [0063.351] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MS Project\\16\\en-US\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d73d0 [0063.351] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0063.351] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0063.351] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0063.351] FindClose (in: hFindFile=0x5d73d0 | out: hFindFile=0x5d73d0) returned 1 [0063.351] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0063.351] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0063.351] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MS Project\\16\\en-US\\Global.MPT", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MS Project\\16\\en-US\\Global.MPT", lpFilePart=0x0) returned 0x4e [0063.351] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0063.352] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MS Project\\16\\en-US\\Global.MPT" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\ms project\\16\\en-us\\global.mpt"), fInfoLevelId=0x0, lpFileInformation=0x22b9dd0 | out: lpFileInformation=0x22b9dd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0e5a771, ftCreationTime.dwHighDateTime=0x1d301cf, ftLastAccessTime.dwLowDateTime=0xa0e5a771, ftLastAccessTime.dwHighDateTime=0x1d301cf, ftLastWriteTime.dwLowDateTime=0x71035980, ftLastWriteTime.dwHighDateTime=0x1d3aaaf, nFileSizeHigh=0x0, nFileSizeLow=0x136e00)) returned 1 [0063.352] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0063.352] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MS Project\\16\\en-US\\Global.MPT", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MS Project\\16\\en-US\\Global.MPT", lpFilePart=0x0) returned 0x4e [0063.352] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0063.353] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MS Project\\16\\en-US\\Global.MPT" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\ms project\\16\\en-us\\global.mpt"), fInfoLevelId=0x0, lpFileInformation=0x22b9f20 | out: lpFileInformation=0x22b9f20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0e5a771, ftCreationTime.dwHighDateTime=0x1d301cf, ftLastAccessTime.dwLowDateTime=0xa0e5a771, ftLastAccessTime.dwHighDateTime=0x1d301cf, ftLastWriteTime.dwLowDateTime=0x71035980, ftLastWriteTime.dwHighDateTime=0x1d3aaaf, nFileSizeHigh=0x0, nFileSizeLow=0x136e00)) returned 1 [0063.353] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0063.353] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MS Project\\16\\en-US\\Global.MPT", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MS Project\\16\\en-US\\Global.MPT", lpFilePart=0x0) returned 0x4e [0063.353] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0063.353] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MS Project\\16\\en-US\\Global.MPT" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\ms project\\16\\en-us\\global.mpt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0063.353] GetFileType (hFile=0x444) returned 0x1 [0063.353] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0063.353] GetFileType (hFile=0x444) returned 0x1 [0063.353] ReadFile (in: hFile=0x444, lpBuffer=0x22bc2f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x22bc2f0*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0063.377] CloseHandle (hObject=0x444) returned 1 [0063.377] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MS Project\\16\\en-US\\Global.MPT", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MS Project\\16\\en-US\\Global.MPT", lpFilePart=0x0) returned 0x4e [0063.377] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0063.377] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MS Project\\16\\en-US\\Global.MPT" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\ms project\\16\\en-us\\global.mpt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0063.378] GetFileType (hFile=0x444) returned 0x1 [0063.378] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0063.378] GetFileType (hFile=0x444) returned 0x1 [0063.378] WriteFile (in: hFile=0x444, lpBuffer=0x22ba050*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x22ba050*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0063.378] CloseHandle (hObject=0x444) returned 1 [0063.378] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MS Project\\16\\en-US\\Global.MPT", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MS Project\\16\\en-US\\Global.MPT", lpFilePart=0x0) returned 0x4e [0063.378] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MS Project\\16\\en-US\\Global.MPT.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MS Project\\16\\en-US\\Global.MPT.xuy", lpFilePart=0x0) returned 0x52 [0063.378] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0063.378] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MS Project\\16\\en-US\\Global.MPT" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\ms project\\16\\en-us\\global.mpt"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0e5a771, ftCreationTime.dwHighDateTime=0x1d301cf, ftLastAccessTime.dwLowDateTime=0xa0e5a771, ftLastAccessTime.dwHighDateTime=0x1d301cf, ftLastWriteTime.dwLowDateTime=0x11a03fbf, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x136e00)) returned 1 [0063.378] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0063.378] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MS Project\\16\\en-US\\Global.MPT" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\ms project\\16\\en-us\\global.mpt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MS Project\\16\\en-US\\Global.MPT.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\ms project\\16\\en-us\\global.mpt.xuy")) returned 1 [0063.379] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0063.379] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Network", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Network", lpFilePart=0x0) returned 0x37 [0063.379] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Network\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Network\\", lpFilePart=0x0) returned 0x38 [0063.379] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Network\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d7af0 [0063.380] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0063.380] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0063.380] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0063.381] FindClose (in: hFindFile=0x5d7af0 | out: hFindFile=0x5d7af0) returned 1 [0063.381] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0063.381] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0063.381] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0063.381] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Network", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Network", lpFilePart=0x0) returned 0x37 [0063.381] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Network\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Network\\", lpFilePart=0x0) returned 0x38 [0063.381] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Network\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d7c70 [0063.381] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0063.381] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0063.381] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0063.381] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0063.381] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0063.381] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0063.382] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0063.382] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Network\\Connections", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Network\\Connections", lpFilePart=0x0) returned 0x43 [0063.382] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Network\\Connections\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Network\\Connections\\", lpFilePart=0x0) returned 0x44 [0063.382] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Network\\Connections\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7fd0 [0063.382] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0063.382] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0063.383] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0063.383] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0063.383] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0063.383] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0063.383] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0063.383] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Network\\Connections", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Network\\Connections", lpFilePart=0x0) returned 0x43 [0063.383] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Network\\Connections\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Network\\Connections\\", lpFilePart=0x0) returned 0x44 [0063.383] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Network\\Connections\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7a30 [0063.383] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0063.383] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0063.383] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0063.383] FindClose (in: hFindFile=0x5d7a30 | out: hFindFile=0x5d7a30) returned 1 [0063.383] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0063.383] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0063.383] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0063.384] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk", lpFilePart=0x0) returned 0x47 [0063.384] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\", lpFilePart=0x0) returned 0x48 [0063.384] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d81b0 [0063.384] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0063.384] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0063.385] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0063.385] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0063.385] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0063.385] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0063.385] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0063.385] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk", lpFilePart=0x0) returned 0x47 [0063.385] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\", lpFilePart=0x0) returned 0x48 [0063.385] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d78b0 [0063.385] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0063.385] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0063.385] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0063.385] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0063.385] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0063.386] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0063.386] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0063.386] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk", lpFilePart=0x0) returned 0x52 [0063.386] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk\\", lpFilePart=0x0) returned 0x53 [0063.386] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d81b0 [0063.386] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0063.386] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0063.386] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0063.386] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0063.386] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0063.386] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0063.386] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0063.386] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk", lpFilePart=0x0) returned 0x52 [0063.386] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk\\", lpFilePart=0x0) returned 0x53 [0063.386] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d7af0 [0063.387] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0063.387] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0063.387] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0063.387] FindClose (in: hFindFile=0x5d7af0 | out: hFindFile=0x5d7af0) returned 1 [0063.387] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0063.387] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0063.387] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk\\rasphone.pbk", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk\\rasphone.pbk", lpFilePart=0x0) returned 0x5f [0063.387] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0063.387] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk\\rasphone.pbk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\network\\connections\\pbk\\_hiddenpbk\\rasphone.pbk"), fInfoLevelId=0x0, lpFileInformation=0x2340188 | out: lpFileInformation=0x2340188*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5654163b, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x5654163b, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x5654163b, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0063.388] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0063.388] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk\\rasphone.pbk", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk\\rasphone.pbk", lpFilePart=0x0) returned 0x5f [0063.388] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0063.388] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk\\rasphone.pbk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\network\\connections\\pbk\\_hiddenpbk\\rasphone.pbk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0063.388] GetFileType (hFile=0x444) returned 0x1 [0063.388] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0063.388] GetFileType (hFile=0x444) returned 0x1 [0063.388] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be708 | out: lpFileSizeHigh=0x3be708*=0x0) returned 0x0 [0063.388] CloseHandle (hObject=0x444) returned 1 [0063.428] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk\\rasphone.pbk", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk\\rasphone.pbk", lpFilePart=0x0) returned 0x5f [0063.428] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0063.428] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk\\rasphone.pbk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\network\\connections\\pbk\\_hiddenpbk\\rasphone.pbk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0063.428] GetFileType (hFile=0x444) returned 0x1 [0063.428] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0063.429] GetFileType (hFile=0x444) returned 0x1 [0063.429] WriteFile (in: hFile=0x444, lpBuffer=0x21b5130*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x3be548, lpOverlapped=0x0 | out: lpBuffer=0x21b5130*, lpNumberOfBytesWritten=0x3be548*=0x10, lpOverlapped=0x0) returned 1 [0063.429] CloseHandle (hObject=0x444) returned 1 [0063.429] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk\\rasphone.pbk", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk\\rasphone.pbk", lpFilePart=0x0) returned 0x5f [0063.429] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk\\rasphone.pbk.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk\\rasphone.pbk.xuy", lpFilePart=0x0) returned 0x63 [0063.429] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0063.430] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk\\rasphone.pbk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\network\\connections\\pbk\\_hiddenpbk\\rasphone.pbk"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5654163b, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x5654163b, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x11a7690d, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0063.430] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0063.430] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk\\rasphone.pbk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\network\\connections\\pbk\\_hiddenpbk\\rasphone.pbk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk\\rasphone.pbk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\network\\connections\\pbk\\_hiddenpbk\\rasphone.pbk.xuy")) returned 1 [0063.430] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0063.430] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office", lpFilePart=0x0) returned 0x36 [0063.430] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\", lpFilePart=0x0) returned 0x37 [0063.430] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d7e50 [0063.432] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0063.432] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0063.432] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0063.432] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0063.432] FindClose (in: hFindFile=0x5d7e50 | out: hFindFile=0x5d7e50) returned 1 [0063.432] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0063.432] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0063.433] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0063.433] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office", lpFilePart=0x0) returned 0x36 [0063.433] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\", lpFilePart=0x0) returned 0x37 [0063.433] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d78b0 [0063.433] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0063.433] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0063.433] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0063.433] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0063.433] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0063.433] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0063.433] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0063.433] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\MSO1033.acl", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\MSO1033.acl", lpFilePart=0x0) returned 0x42 [0063.433] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0063.434] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\MSO1033.acl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\office\\mso1033.acl"), fInfoLevelId=0x0, lpFileInformation=0x21b82d0 | out: lpFileInformation=0x21b82d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a2c8a2d, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x4a2c8a2d, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x4a2c8a2d, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x9362)) returned 1 [0063.435] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0063.435] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\MSO1033.acl", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\MSO1033.acl", lpFilePart=0x0) returned 0x42 [0063.435] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0063.435] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\MSO1033.acl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\office\\mso1033.acl"), fInfoLevelId=0x0, lpFileInformation=0x21b8408 | out: lpFileInformation=0x21b8408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a2c8a2d, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x4a2c8a2d, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x4a2c8a2d, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x9362)) returned 1 [0063.435] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0063.435] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\MSO1033.acl", nBufferLength=0x105, lpBuffer=0x3be270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\MSO1033.acl", lpFilePart=0x0) returned 0x42 [0063.435] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0063.435] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\MSO1033.acl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\office\\mso1033.acl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0063.435] GetFileType (hFile=0x444) returned 0x1 [0063.435] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6c0) returned 1 [0063.436] GetFileType (hFile=0x444) returned 0x1 [0063.436] ReadFile (in: hFile=0x444, lpBuffer=0x21ba7a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be7d8, lpOverlapped=0x0 | out: lpBuffer=0x21ba7a8*, lpNumberOfBytesRead=0x3be7d8*=0x1000, lpOverlapped=0x0) returned 1 [0063.448] CloseHandle (hObject=0x444) returned 1 [0063.448] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\MSO1033.acl", nBufferLength=0x105, lpBuffer=0x3be270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\MSO1033.acl", lpFilePart=0x0) returned 0x42 [0063.448] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0063.448] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\MSO1033.acl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\office\\mso1033.acl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0063.449] GetFileType (hFile=0x444) returned 0x1 [0063.449] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6c0) returned 1 [0063.449] GetFileType (hFile=0x444) returned 0x1 [0063.449] WriteFile (in: hFile=0x444, lpBuffer=0x21b8520*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be888, lpOverlapped=0x0 | out: lpBuffer=0x21b8520*, lpNumberOfBytesWritten=0x3be888*=0x2000, lpOverlapped=0x0) returned 1 [0063.449] CloseHandle (hObject=0x444) returned 1 [0063.449] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\MSO1033.acl", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\MSO1033.acl", lpFilePart=0x0) returned 0x42 [0063.449] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\MSO1033.acl.xuy", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\MSO1033.acl.xuy", lpFilePart=0x0) returned 0x46 [0063.449] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0063.449] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\MSO1033.acl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\office\\mso1033.acl"), fInfoLevelId=0x0, lpFileInformation=0x3be8a0 | out: lpFileInformation=0x3be8a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a2c8a2d, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x4a2c8a2d, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x11a9c895, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x9362)) returned 1 [0063.449] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0063.449] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\MSO1033.acl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\office\\mso1033.acl"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\MSO1033.acl.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\office\\mso1033.acl.xuy")) returned 1 [0063.450] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0063.450] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent", lpFilePart=0x0) returned 0x3d [0063.450] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\", lpFilePart=0x0) returned 0x3e [0063.450] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7cd0 [0063.453] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0063.453] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0063.453] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0063.453] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0063.453] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0063.453] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0063.453] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0063.453] FindClose (in: hFindFile=0x5d7cd0 | out: hFindFile=0x5d7cd0) returned 1 [0063.454] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0063.454] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0063.454] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0063.454] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent", lpFilePart=0x0) returned 0x3d [0063.454] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\", lpFilePart=0x0) returned 0x3e [0063.454] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d8090 [0063.455] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0063.455] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0063.455] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0063.455] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0063.455] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0063.456] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0063.456] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0063.456] FindClose (in: hFindFile=0x5d8090 | out: hFindFile=0x5d8090) returned 1 [0063.457] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0063.457] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0063.457] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Database1.LNK", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Database1.LNK", lpFilePart=0x0) returned 0x4b [0063.457] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0063.457] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Database1.LNK" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\office\\recent\\database1.lnk"), fInfoLevelId=0x0, lpFileInformation=0x22398c0 | out: lpFileInformation=0x22398c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e86a4be, ftCreationTime.dwHighDateTime=0x1d3aaaf, ftLastAccessTime.dwLowDateTime=0x1e86a4be, ftLastAccessTime.dwHighDateTime=0x1d3aaaf, ftLastWriteTime.dwLowDateTime=0x1e8907fc, ftLastWriteTime.dwHighDateTime=0x1d3aaaf, nFileSizeHigh=0x0, nFileSizeLow=0x45b)) returned 1 [0063.459] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0063.459] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Database1.LNK", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Database1.LNK", lpFilePart=0x0) returned 0x4b [0063.459] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0063.459] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Database1.LNK" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\office\\recent\\database1.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0063.459] GetFileType (hFile=0x444) returned 0x1 [0063.459] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0063.459] GetFileType (hFile=0x444) returned 0x1 [0063.459] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0x45b [0063.459] ReadFile (in: hFile=0x444, lpBuffer=0x2239fd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be718, lpOverlapped=0x0 | out: lpBuffer=0x2239fd8*, lpNumberOfBytesRead=0x3be718*=0x45b, lpOverlapped=0x0) returned 1 [0063.482] CloseHandle (hObject=0x444) returned 1 [0063.572] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Database1.LNK", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Database1.LNK", lpFilePart=0x0) returned 0x4b [0063.572] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0063.572] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Database1.LNK" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\office\\recent\\database1.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0063.573] GetFileType (hFile=0x444) returned 0x1 [0063.573] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0063.573] GetFileType (hFile=0x444) returned 0x1 [0063.573] WriteFile (in: hFile=0x444, lpBuffer=0x22b2598*, nNumberOfBytesToWrite=0x460, lpNumberOfBytesWritten=0x3be628, lpOverlapped=0x0 | out: lpBuffer=0x22b2598*, lpNumberOfBytesWritten=0x3be628*=0x460, lpOverlapped=0x0) returned 1 [0063.574] CloseHandle (hObject=0x444) returned 1 [0063.574] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Database1.LNK", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Database1.LNK", lpFilePart=0x0) returned 0x4b [0063.574] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Database1.LNK.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Database1.LNK.xuy", lpFilePart=0x0) returned 0x4f [0063.574] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0063.574] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Database1.LNK" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\office\\recent\\database1.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e86a4be, ftCreationTime.dwHighDateTime=0x1d3aaaf, ftLastAccessTime.dwLowDateTime=0x1e86a4be, ftLastAccessTime.dwHighDateTime=0x1d3aaaf, ftLastWriteTime.dwLowDateTime=0x11bcdb8d, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x460)) returned 1 [0063.574] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0063.574] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Database1.LNK" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\office\\recent\\database1.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Database1.LNK.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\office\\recent\\database1.lnk.xuy")) returned 1 [0063.575] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Documents.LNK", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Documents.LNK", lpFilePart=0x0) returned 0x4b [0063.575] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0063.575] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Documents.LNK" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\office\\recent\\documents.lnk"), fInfoLevelId=0x0, lpFileInformation=0x22b3818 | out: lpFileInformation=0x22b3818*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11a4c7c4, ftCreationTime.dwHighDateTime=0x1d3aaaf, ftLastAccessTime.dwLowDateTime=0x11a4c7c4, ftLastAccessTime.dwHighDateTime=0x1d3aaaf, ftLastWriteTime.dwLowDateTime=0x11a9961f, ftLastWriteTime.dwHighDateTime=0x1d3aaaf, nFileSizeHigh=0x0, nFileSizeLow=0x3bf)) returned 1 [0063.575] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0063.575] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Documents.LNK", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Documents.LNK", lpFilePart=0x0) returned 0x4b [0063.575] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0063.575] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Documents.LNK" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\office\\recent\\documents.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0063.575] GetFileType (hFile=0x444) returned 0x1 [0063.575] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0063.575] GetFileType (hFile=0x444) returned 0x1 [0063.575] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0x3bf [0063.575] ReadFile (in: hFile=0x444, lpBuffer=0x22b3e90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be718, lpOverlapped=0x0 | out: lpBuffer=0x22b3e90*, lpNumberOfBytesRead=0x3be718*=0x3bf, lpOverlapped=0x0) returned 1 [0063.586] CloseHandle (hObject=0x444) returned 1 [0063.596] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Documents.LNK", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Documents.LNK", lpFilePart=0x0) returned 0x4b [0063.596] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0063.596] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Documents.LNK" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\office\\recent\\documents.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0063.597] GetFileType (hFile=0x444) returned 0x1 [0063.597] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0063.597] GetFileType (hFile=0x444) returned 0x1 [0063.597] WriteFile (in: hFile=0x444, lpBuffer=0x232c130*, nNumberOfBytesToWrite=0x3c0, lpNumberOfBytesWritten=0x3be628, lpOverlapped=0x0 | out: lpBuffer=0x232c130*, lpNumberOfBytesWritten=0x3be628*=0x3c0, lpOverlapped=0x0) returned 1 [0063.598] CloseHandle (hObject=0x444) returned 1 [0063.598] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Documents.LNK", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Documents.LNK", lpFilePart=0x0) returned 0x4b [0063.598] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Documents.LNK.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Documents.LNK.xuy", lpFilePart=0x0) returned 0x4f [0063.598] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0063.598] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Documents.LNK" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\office\\recent\\documents.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11a4c7c4, ftCreationTime.dwHighDateTime=0x1d3aaaf, ftLastAccessTime.dwLowDateTime=0x11a4c7c4, ftLastAccessTime.dwHighDateTime=0x1d3aaaf, ftLastWriteTime.dwLowDateTime=0x11c19f96, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x3c0)) returned 1 [0063.598] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0063.598] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Documents.LNK" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\office\\recent\\documents.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Documents.LNK.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\office\\recent\\documents.lnk.xuy")) returned 1 [0063.599] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Global.LNK", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Global.LNK", lpFilePart=0x0) returned 0x48 [0063.599] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0063.599] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Global.LNK" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\office\\recent\\global.lnk"), fInfoLevelId=0x0, lpFileInformation=0x232d3b0 | out: lpFileInformation=0x232d3b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa11c0f4e, ftCreationTime.dwHighDateTime=0x1d301cf, ftLastAccessTime.dwLowDateTime=0xa11c0f4e, ftLastAccessTime.dwHighDateTime=0x1d301cf, ftLastWriteTime.dwLowDateTime=0xa12d137f, ftLastWriteTime.dwHighDateTime=0x1d301cf, nFileSizeHigh=0x0, nFileSizeLow=0x5e0)) returned 1 [0063.599] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0063.599] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Global.LNK", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Global.LNK", lpFilePart=0x0) returned 0x48 [0063.599] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0063.599] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Global.LNK" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\office\\recent\\global.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0063.599] GetFileType (hFile=0x444) returned 0x1 [0063.599] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0063.599] GetFileType (hFile=0x444) returned 0x1 [0063.600] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0x5e0 [0063.600] ReadFile (in: hFile=0x444, lpBuffer=0x232dc38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be718, lpOverlapped=0x0 | out: lpBuffer=0x232dc38*, lpNumberOfBytesRead=0x3be718*=0x5e0, lpOverlapped=0x0) returned 1 [0063.618] CloseHandle (hObject=0x444) returned 1 [0063.660] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Global.LNK", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Global.LNK", lpFilePart=0x0) returned 0x48 [0063.660] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0063.660] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Global.LNK" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\office\\recent\\global.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0063.661] GetFileType (hFile=0x444) returned 0x1 [0063.661] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0063.661] GetFileType (hFile=0x444) returned 0x1 [0063.661] WriteFile (in: hFile=0x444, lpBuffer=0x21a70a0*, nNumberOfBytesToWrite=0x5f0, lpNumberOfBytesWritten=0x3be628, lpOverlapped=0x0 | out: lpBuffer=0x21a70a0*, lpNumberOfBytesWritten=0x3be628*=0x5f0, lpOverlapped=0x0) returned 1 [0063.662] CloseHandle (hObject=0x444) returned 1 [0063.662] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Global.LNK", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Global.LNK", lpFilePart=0x0) returned 0x48 [0063.662] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Global.LNK.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Global.LNK.xuy", lpFilePart=0x0) returned 0x4c [0063.662] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0063.662] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Global.LNK" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\office\\recent\\global.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa11c0f4e, ftCreationTime.dwHighDateTime=0x1d301cf, ftLastAccessTime.dwLowDateTime=0xa11c0f4e, ftLastAccessTime.dwHighDateTime=0x1d301cf, ftLastWriteTime.dwLowDateTime=0x11cb29e9, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x5f0)) returned 1 [0063.663] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0063.663] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Global.LNK" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\office\\recent\\global.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Global.LNK.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\office\\recent\\global.lnk.xuy")) returned 1 [0063.663] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\index.dat", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\index.dat", lpFilePart=0x0) returned 0x47 [0063.663] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0063.663] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\index.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\office\\recent\\index.dat"), fInfoLevelId=0x0, lpFileInformation=0x21a8320 | out: lpFileInformation=0x21a8320*(dwFileAttributes=0x2, ftCreationTime.dwLowDateTime=0x55120d2b, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x55120d2b, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x1e8907fc, ftLastWriteTime.dwHighDateTime=0x1d3aaaf, nFileSizeHigh=0x0, nFileSizeLow=0x5f)) returned 1 [0063.673] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0063.673] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\index.dat", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\index.dat", lpFilePart=0x0) returned 0x47 [0063.673] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0063.673] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\index.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\office\\recent\\index.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0063.673] GetFileType (hFile=0x444) returned 0x1 [0063.673] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0063.673] GetFileType (hFile=0x444) returned 0x1 [0063.673] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0x5f [0063.673] ReadFile (in: hFile=0x444, lpBuffer=0x21a8618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be718, lpOverlapped=0x0 | out: lpBuffer=0x21a8618*, lpNumberOfBytesRead=0x3be718*=0x5f, lpOverlapped=0x0) returned 1 [0063.674] CloseHandle (hObject=0x444) returned 1 [0063.684] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\index.dat", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\index.dat", lpFilePart=0x0) returned 0x47 [0063.684] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0063.684] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\index.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\office\\recent\\index.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0063.686] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb0e0) returned 1 [0063.687] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\index.dat", nBufferLength=0x105, lpBuffer=0x3bbd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\index.dat", lpFilePart=0x0) returned 0x47 [0063.687] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc200) returned 1 [0063.687] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\index.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\office\\recent\\index.dat"), fInfoLevelId=0x0, lpFileInformation=0x3bc2e0 | out: lpFileInformation=0x3bc2e0*(dwFileAttributes=0x2, ftCreationTime.dwLowDateTime=0x55120d2b, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x55120d2b, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x1e8907fc, ftLastWriteTime.dwHighDateTime=0x1d3aaaf, nFileSizeHigh=0x0, nFileSizeLow=0x5f)) returned 1 [0063.687] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1c0) returned 1 [0063.687] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\index.dat", nBufferLength=0x105, lpBuffer=0x3bbd80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\index.dat", lpFilePart=0x0) returned 0x47 [0063.687] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc200) returned 1 [0063.687] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\index.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\office\\recent\\index.dat"), fInfoLevelId=0x0, lpFileInformation=0x221fff8 | out: lpFileInformation=0x221fff8*(dwFileAttributes=0x2, ftCreationTime.dwLowDateTime=0x55120d2b, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x55120d2b, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x1e8907fc, ftLastWriteTime.dwHighDateTime=0x1d3aaaf, nFileSizeHigh=0x0, nFileSizeLow=0x5f)) returned 1 [0063.687] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1c0) returned 1 [0063.687] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\index.dat", nBufferLength=0x105, lpBuffer=0x3bbbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\index.dat", lpFilePart=0x0) returned 0x47 [0063.687] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0c0) returned 1 [0063.687] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\index.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\office\\recent\\index.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0063.687] GetFileType (hFile=0x444) returned 0x1 [0063.687] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc030) returned 1 [0063.687] GetFileType (hFile=0x444) returned 0x1 [0063.687] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc258 | out: lpFileSizeHigh=0x3bc258*=0x0) returned 0x5f [0063.687] ReadFile (in: hFile=0x444, lpBuffer=0x22202f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bc188, lpOverlapped=0x0 | out: lpBuffer=0x22202f0*, lpNumberOfBytesRead=0x3bc188*=0x5f, lpOverlapped=0x0) returned 1 [0063.687] CloseHandle (hObject=0x444) returned 1 [0063.725] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\index.dat", nBufferLength=0x105, lpBuffer=0x3bbbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\index.dat", lpFilePart=0x0) returned 0x47 [0063.725] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0c0) returned 1 [0063.725] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\index.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\office\\recent\\index.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0063.726] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8b50) returned 1 [0063.727] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Templates.LNK", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Templates.LNK", lpFilePart=0x0) returned 0x4b [0063.727] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0063.727] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Templates.LNK" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\office\\recent\\templates.lnk"), fInfoLevelId=0x0, lpFileInformation=0x2297c50 | out: lpFileInformation=0x2297c50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x550d49e5, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x550d49e5, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x55120d2b, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x4a7)) returned 1 [0063.727] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0063.727] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Templates.LNK", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Templates.LNK", lpFilePart=0x0) returned 0x4b [0063.727] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0063.727] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Templates.LNK" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\office\\recent\\templates.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0063.728] GetFileType (hFile=0x444) returned 0x1 [0063.728] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0063.728] GetFileType (hFile=0x444) returned 0x1 [0063.728] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0x4a7 [0063.728] ReadFile (in: hFile=0x444, lpBuffer=0x22983b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be718, lpOverlapped=0x0 | out: lpBuffer=0x22983b0*, lpNumberOfBytesRead=0x3be718*=0x4a7, lpOverlapped=0x0) returned 1 [0063.740] CloseHandle (hObject=0x444) returned 1 [0063.774] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Templates.LNK", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Templates.LNK", lpFilePart=0x0) returned 0x4b [0063.774] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0063.774] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Templates.LNK" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\office\\recent\\templates.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0063.775] GetFileType (hFile=0x444) returned 0x1 [0063.775] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0063.775] GetFileType (hFile=0x444) returned 0x1 [0063.775] WriteFile (in: hFile=0x444, lpBuffer=0x2310b08*, nNumberOfBytesToWrite=0x4b0, lpNumberOfBytesWritten=0x3be628, lpOverlapped=0x0 | out: lpBuffer=0x2310b08*, lpNumberOfBytesWritten=0x3be628*=0x4b0, lpOverlapped=0x0) returned 1 [0063.776] CloseHandle (hObject=0x444) returned 1 [0063.776] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Templates.LNK", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Templates.LNK", lpFilePart=0x0) returned 0x4b [0063.776] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Templates.LNK.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Templates.LNK.xuy", lpFilePart=0x0) returned 0x4f [0063.776] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0063.776] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Templates.LNK" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\office\\recent\\templates.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x550d49e5, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x550d49e5, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x11dbdde7, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x4b0)) returned 1 [0063.776] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0063.776] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Templates.LNK" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\office\\recent\\templates.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Templates.LNK.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\office\\recent\\templates.lnk.xuy")) returned 1 [0063.777] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0063.777] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\OneNote", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\OneNote", lpFilePart=0x0) returned 0x37 [0063.777] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\OneNote\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\OneNote\\", lpFilePart=0x0) returned 0x38 [0063.777] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\OneNote\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d79d0 [0063.778] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0063.778] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0063.778] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0063.778] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0063.779] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0063.779] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0063.779] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0063.779] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\OneNote", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\OneNote", lpFilePart=0x0) returned 0x37 [0063.779] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\OneNote\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\OneNote\\", lpFilePart=0x0) returned 0x38 [0063.779] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\OneNote\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d7cd0 [0063.779] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0063.779] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0063.779] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0063.779] FindClose (in: hFindFile=0x5d7cd0 | out: hFindFile=0x5d7cd0) returned 1 [0063.779] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0063.779] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0063.779] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0063.779] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\OneNote\\16.0", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\OneNote\\16.0", lpFilePart=0x0) returned 0x3c [0063.779] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\OneNote\\16.0\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\OneNote\\16.0\\", lpFilePart=0x0) returned 0x3d [0063.780] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\OneNote\\16.0\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d81b0 [0063.780] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0063.780] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0063.780] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0063.780] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0063.780] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0063.780] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0063.781] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0063.781] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\OneNote\\16.0", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\OneNote\\16.0", lpFilePart=0x0) returned 0x3c [0063.781] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\OneNote\\16.0\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\OneNote\\16.0\\", lpFilePart=0x0) returned 0x3d [0063.781] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\OneNote\\16.0\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7a30 [0063.781] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0063.781] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0063.781] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0063.781] FindClose (in: hFindFile=0x5d7a30 | out: hFindFile=0x5d7a30) returned 1 [0063.781] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0063.781] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0063.781] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\OneNote\\16.0\\Preferences.dat", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\OneNote\\16.0\\Preferences.dat", lpFilePart=0x0) returned 0x4c [0063.781] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0063.781] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\OneNote\\16.0\\Preferences.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\onenote\\16.0\\preferences.dat"), fInfoLevelId=0x0, lpFileInformation=0x23155e0 | out: lpFileInformation=0x23155e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ea45990, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6ea45990, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6fc738d2, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x1440)) returned 1 [0063.783] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0063.784] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\OneNote\\16.0\\Preferences.dat", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\OneNote\\16.0\\Preferences.dat", lpFilePart=0x0) returned 0x4c [0063.784] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0063.784] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\OneNote\\16.0\\Preferences.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\onenote\\16.0\\preferences.dat"), fInfoLevelId=0x0, lpFileInformation=0x2315738 | out: lpFileInformation=0x2315738*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ea45990, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6ea45990, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6fc738d2, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x1440)) returned 1 [0063.784] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0063.784] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\OneNote\\16.0\\Preferences.dat", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\OneNote\\16.0\\Preferences.dat", lpFilePart=0x0) returned 0x4c [0063.784] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0063.784] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\OneNote\\16.0\\Preferences.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\onenote\\16.0\\preferences.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0063.784] GetFileType (hFile=0x444) returned 0x1 [0063.784] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0063.784] GetFileType (hFile=0x444) returned 0x1 [0063.784] ReadFile (in: hFile=0x444, lpBuffer=0x2317b18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x2317b18*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0063.826] CloseHandle (hObject=0x444) returned 1 [0063.826] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\OneNote\\16.0\\Preferences.dat", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\OneNote\\16.0\\Preferences.dat", lpFilePart=0x0) returned 0x4c [0063.826] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0063.826] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\OneNote\\16.0\\Preferences.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\onenote\\16.0\\preferences.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0063.827] GetFileType (hFile=0x444) returned 0x1 [0063.827] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0063.827] GetFileType (hFile=0x444) returned 0x1 [0063.827] WriteFile (in: hFile=0x444, lpBuffer=0x215b238*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x215b238*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0063.828] CloseHandle (hObject=0x444) returned 1 [0063.828] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\OneNote\\16.0\\Preferences.dat", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\OneNote\\16.0\\Preferences.dat", lpFilePart=0x0) returned 0x4c [0063.828] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\OneNote\\16.0\\Preferences.dat.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\OneNote\\16.0\\Preferences.dat.xuy", lpFilePart=0x0) returned 0x50 [0063.828] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0063.828] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\OneNote\\16.0\\Preferences.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\onenote\\16.0\\preferences.dat"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ea45990, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6ea45990, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x11e56319, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0063.828] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0063.828] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\OneNote\\16.0\\Preferences.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\onenote\\16.0\\preferences.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\OneNote\\16.0\\Preferences.dat.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\onenote\\16.0\\preferences.dat.xuy")) returned 1 [0063.829] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0063.829] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Outlook", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Outlook", lpFilePart=0x0) returned 0x37 [0063.829] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Outlook\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Outlook\\", lpFilePart=0x0) returned 0x38 [0063.829] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Outlook\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d7550 [0063.830] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0063.831] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0063.831] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0063.831] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0063.831] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0063.831] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0063.831] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0063.831] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0063.831] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Outlook", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Outlook", lpFilePart=0x0) returned 0x37 [0063.831] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Outlook\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Outlook\\", lpFilePart=0x0) returned 0x38 [0063.831] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Outlook\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d7d30 [0063.831] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0063.831] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0063.831] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0063.832] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0063.832] FindClose (in: hFindFile=0x5d7d30 | out: hFindFile=0x5d7d30) returned 1 [0063.832] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0063.832] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0063.832] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.srs", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.srs", lpFilePart=0x0) returned 0x43 [0063.832] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0063.832] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.srs" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\outlook\\outlook.srs"), fInfoLevelId=0x0, lpFileInformation=0x2198888 | out: lpFileInformation=0x2198888*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d2b717, ftCreationTime.dwHighDateTime=0x1d2fc25, ftLastAccessTime.dwLowDateTime=0x9d2b717, ftLastAccessTime.dwHighDateTime=0x1d2fc25, ftLastWriteTime.dwLowDateTime=0x9ede1e0, ftLastWriteTime.dwHighDateTime=0x1d2fc25, nFileSizeHigh=0x0, nFileSizeLow=0xa00)) returned 1 [0063.837] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0063.837] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.srs", nBufferLength=0x105, lpBuffer=0x3be1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.srs", lpFilePart=0x0) returned 0x43 [0063.837] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6c0) returned 1 [0063.837] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.srs" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\outlook\\outlook.srs"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0063.837] GetFileType (hFile=0x444) returned 0x1 [0063.837] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0063.837] GetFileType (hFile=0x444) returned 0x1 [0063.837] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be858 | out: lpFileSizeHigh=0x3be858*=0x0) returned 0xa00 [0063.837] ReadFile (in: hFile=0x444, lpBuffer=0x2199510, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be788, lpOverlapped=0x0 | out: lpBuffer=0x2199510*, lpNumberOfBytesRead=0x3be788*=0xa00, lpOverlapped=0x0) returned 1 [0063.850] CloseHandle (hObject=0x444) returned 1 [0063.861] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.srs", nBufferLength=0x105, lpBuffer=0x3be1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.srs", lpFilePart=0x0) returned 0x43 [0063.861] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6c0) returned 1 [0063.861] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.srs" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\outlook\\outlook.srs"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0063.862] GetFileType (hFile=0x444) returned 0x1 [0063.862] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0063.862] GetFileType (hFile=0x444) returned 0x1 [0063.862] WriteFile (in: hFile=0x444, lpBuffer=0x2213730*, nNumberOfBytesToWrite=0xa10, lpNumberOfBytesWritten=0x3be698, lpOverlapped=0x0 | out: lpBuffer=0x2213730*, lpNumberOfBytesWritten=0x3be698*=0xa10, lpOverlapped=0x0) returned 1 [0063.863] CloseHandle (hObject=0x444) returned 1 [0063.863] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.srs", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.srs", lpFilePart=0x0) returned 0x43 [0063.863] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.srs.xuy", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.srs.xuy", lpFilePart=0x0) returned 0x47 [0063.863] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0063.863] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.srs" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\outlook\\outlook.srs"), fInfoLevelId=0x0, lpFileInformation=0x3be8a0 | out: lpFileInformation=0x3be8a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d2b717, ftCreationTime.dwHighDateTime=0x1d2fc25, ftLastAccessTime.dwLowDateTime=0x9d2b717, ftLastAccessTime.dwHighDateTime=0x1d2fc25, ftLastWriteTime.dwLowDateTime=0x11ea2b59, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xa10)) returned 1 [0063.863] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0063.863] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.srs" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\outlook\\outlook.srs"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.srs.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\outlook\\outlook.srs.xuy")) returned 1 [0063.863] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.xml", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.xml", lpFilePart=0x0) returned 0x43 [0063.864] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0063.864] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\outlook\\outlook.xml"), fInfoLevelId=0x0, lpFileInformation=0x2214980 | out: lpFileInformation=0x2214980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3d64df, ftCreationTime.dwHighDateTime=0x1d2fc25, ftLastAccessTime.dwLowDateTime=0xa3d64df, ftLastAccessTime.dwHighDateTime=0x1d2fc25, ftLastWriteTime.dwLowDateTime=0xa3d786f, ftLastWriteTime.dwHighDateTime=0x1d2fc25, nFileSizeHigh=0x0, nFileSizeLow=0x956)) returned 1 [0063.864] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0063.864] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.xml", nBufferLength=0x105, lpBuffer=0x3be1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.xml", lpFilePart=0x0) returned 0x43 [0063.864] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6c0) returned 1 [0063.864] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\outlook\\outlook.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0063.864] GetFileType (hFile=0x444) returned 0x1 [0063.864] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0063.864] GetFileType (hFile=0x444) returned 0x1 [0063.864] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be858 | out: lpFileSizeHigh=0x3be858*=0x0) returned 0x956 [0063.864] ReadFile (in: hFile=0x444, lpBuffer=0x2215560, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be788, lpOverlapped=0x0 | out: lpBuffer=0x2215560*, lpNumberOfBytesRead=0x3be788*=0x956, lpOverlapped=0x0) returned 1 [0063.878] CloseHandle (hObject=0x444) returned 1 [0063.888] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.xml", nBufferLength=0x105, lpBuffer=0x3be1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.xml", lpFilePart=0x0) returned 0x43 [0063.888] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6c0) returned 1 [0063.888] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\outlook\\outlook.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0063.891] GetFileType (hFile=0x444) returned 0x1 [0063.891] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0063.891] GetFileType (hFile=0x444) returned 0x1 [0063.891] WriteFile (in: hFile=0x444, lpBuffer=0x228f410*, nNumberOfBytesToWrite=0x960, lpNumberOfBytesWritten=0x3be698, lpOverlapped=0x0 | out: lpBuffer=0x228f410*, lpNumberOfBytesWritten=0x3be698*=0x960, lpOverlapped=0x0) returned 1 [0063.892] CloseHandle (hObject=0x444) returned 1 [0063.892] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.xml", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.xml", lpFilePart=0x0) returned 0x43 [0063.892] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.xml.xuy", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.xml.xuy", lpFilePart=0x0) returned 0x47 [0063.892] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0063.892] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\outlook\\outlook.xml"), fInfoLevelId=0x0, lpFileInformation=0x3be8a0 | out: lpFileInformation=0x3be8a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3d64df, ftCreationTime.dwHighDateTime=0x1d2fc25, ftLastAccessTime.dwLowDateTime=0xa3d64df, ftLastAccessTime.dwHighDateTime=0x1d2fc25, ftLastWriteTime.dwLowDateTime=0x11eef7bb, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x960)) returned 1 [0063.892] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0063.892] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\outlook\\outlook.xml"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.xml.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\outlook\\outlook.xml.xuy")) returned 1 [0063.893] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0063.893] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\PowerPoint", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\PowerPoint", lpFilePart=0x0) returned 0x3a [0063.893] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\PowerPoint\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\PowerPoint\\", lpFilePart=0x0) returned 0x3b [0063.893] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\PowerPoint\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d7370 [0063.893] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0063.893] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0063.893] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0063.893] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0063.893] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0063.893] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0063.893] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\PowerPoint", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\PowerPoint", lpFilePart=0x0) returned 0x3a [0063.894] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\PowerPoint\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\PowerPoint\\", lpFilePart=0x0) returned 0x3b [0063.894] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\PowerPoint\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d7550 [0063.894] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0063.894] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0063.894] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0063.894] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0063.894] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0063.894] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0063.894] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Proof", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Proof", lpFilePart=0x0) returned 0x35 [0063.894] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Proof\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Proof\\", lpFilePart=0x0) returned 0x36 [0063.894] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Proof\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d79d0 [0063.896] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0063.896] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0063.896] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0063.896] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0063.896] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0063.896] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0063.896] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Proof", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Proof", lpFilePart=0x0) returned 0x35 [0063.896] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Proof\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Proof\\", lpFilePart=0x0) returned 0x36 [0063.896] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Proof\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d78b0 [0063.897] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0063.897] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0063.897] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0063.897] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0063.897] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0063.897] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0063.897] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect", lpFilePart=0x0) returned 0x37 [0063.897] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\", lpFilePart=0x0) returned 0x38 [0063.897] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d79d0 [0063.897] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0063.897] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0063.898] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0063.898] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0063.898] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0063.898] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0063.898] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0063.898] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0063.898] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0063.898] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect", lpFilePart=0x0) returned 0x37 [0063.898] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\", lpFilePart=0x0) returned 0x38 [0063.898] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d7a30 [0063.898] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0063.898] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0063.899] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0063.899] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0063.899] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0063.899] FindClose (in: hFindFile=0x5d7a30 | out: hFindFile=0x5d7a30) returned 1 [0063.899] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0063.899] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0063.899] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\CREDHIST", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\CREDHIST", lpFilePart=0x0) returned 0x40 [0063.899] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0063.899] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\CREDHIST" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\protect\\credhist"), fInfoLevelId=0x0, lpFileInformation=0x2295a10 | out: lpFileInformation=0x2295a10*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xa9d162d0, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa9d162d0, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xe3415383, ftLastWriteTime.dwHighDateTime=0x1d38bec, nFileSizeHigh=0x0, nFileSizeLow=0x1c8)) returned 1 [0063.899] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0063.899] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\CREDHIST", nBufferLength=0x105, lpBuffer=0x3be1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\CREDHIST", lpFilePart=0x0) returned 0x40 [0063.899] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6c0) returned 1 [0063.899] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\CREDHIST" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\protect\\credhist"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0063.899] GetFileType (hFile=0x444) returned 0x1 [0063.899] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0063.899] GetFileType (hFile=0x444) returned 0x1 [0063.899] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be858 | out: lpFileSizeHigh=0x3be858*=0x0) returned 0x1c8 [0063.900] ReadFile (in: hFile=0x444, lpBuffer=0x2295e60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be788, lpOverlapped=0x0 | out: lpBuffer=0x2295e60*, lpNumberOfBytesRead=0x3be788*=0x1c8, lpOverlapped=0x0) returned 1 [0063.900] CloseHandle (hObject=0x444) returned 1 [0063.910] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\CREDHIST", nBufferLength=0x105, lpBuffer=0x3be1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\CREDHIST", lpFilePart=0x0) returned 0x40 [0063.910] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6c0) returned 1 [0063.910] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\CREDHIST" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\protect\\credhist"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0063.911] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb150) returned 1 [0063.912] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\CREDHIST", nBufferLength=0x105, lpBuffer=0x3bbdd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\CREDHIST", lpFilePart=0x0) returned 0x40 [0063.912] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc270) returned 1 [0063.912] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\CREDHIST" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\protect\\credhist"), fInfoLevelId=0x0, lpFileInformation=0x3bc350 | out: lpFileInformation=0x3bc350*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xa9d162d0, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa9d162d0, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xe3415383, ftLastWriteTime.dwHighDateTime=0x1d38bec, nFileSizeHigh=0x0, nFileSizeLow=0x1c8)) returned 1 [0063.912] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc230) returned 1 [0063.912] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\CREDHIST", nBufferLength=0x105, lpBuffer=0x3bbdf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\CREDHIST", lpFilePart=0x0) returned 0x40 [0063.912] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc270) returned 1 [0063.912] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\CREDHIST" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\protect\\credhist"), fInfoLevelId=0x0, lpFileInformation=0x230df60 | out: lpFileInformation=0x230df60*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xa9d162d0, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa9d162d0, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xe3415383, ftLastWriteTime.dwHighDateTime=0x1d38bec, nFileSizeHigh=0x0, nFileSizeLow=0x1c8)) returned 1 [0063.912] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc230) returned 1 [0063.912] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\CREDHIST", nBufferLength=0x105, lpBuffer=0x3bbc50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\CREDHIST", lpFilePart=0x0) returned 0x40 [0063.912] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc130) returned 1 [0063.912] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\CREDHIST" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\protect\\credhist"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0063.912] GetFileType (hFile=0x444) returned 0x1 [0063.912] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc0a0) returned 1 [0063.912] GetFileType (hFile=0x444) returned 0x1 [0063.912] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc2c8 | out: lpFileSizeHigh=0x3bc2c8*=0x0) returned 0x1c8 [0063.913] ReadFile (in: hFile=0x444, lpBuffer=0x230e3b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bc1f8, lpOverlapped=0x0 | out: lpBuffer=0x230e3b0*, lpNumberOfBytesRead=0x3bc1f8*=0x1c8, lpOverlapped=0x0) returned 1 [0063.913] CloseHandle (hObject=0x444) returned 1 [0063.955] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\CREDHIST", nBufferLength=0x105, lpBuffer=0x3bbc50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\CREDHIST", lpFilePart=0x0) returned 0x40 [0063.955] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc130) returned 1 [0063.955] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\CREDHIST" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\protect\\credhist"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0063.957] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8bc0) returned 1 [0063.958] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\SYNCHIST", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\SYNCHIST", lpFilePart=0x0) returned 0x40 [0063.958] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0063.958] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\SYNCHIST" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\protect\\synchist"), fInfoLevelId=0x0, lpFileInformation=0x2183648 | out: lpFileInformation=0x2183648*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xb4886a98, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb4886a98, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xe3736526, ftLastWriteTime.dwHighDateTime=0x1d38bec, nFileSizeHigh=0x0, nFileSizeLow=0x4c)) returned 1 [0063.958] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0063.958] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\SYNCHIST", nBufferLength=0x105, lpBuffer=0x3be1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\SYNCHIST", lpFilePart=0x0) returned 0x40 [0063.958] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6c0) returned 1 [0063.958] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\SYNCHIST" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\protect\\synchist"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0063.958] GetFileType (hFile=0x444) returned 0x1 [0063.958] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0063.958] GetFileType (hFile=0x444) returned 0x1 [0063.958] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be858 | out: lpFileSizeHigh=0x3be858*=0x0) returned 0x4c [0063.958] ReadFile (in: hFile=0x444, lpBuffer=0x2183920, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be788, lpOverlapped=0x0 | out: lpBuffer=0x2183920*, lpNumberOfBytesRead=0x3be788*=0x4c, lpOverlapped=0x0) returned 1 [0063.959] CloseHandle (hObject=0x444) returned 1 [0063.996] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\SYNCHIST", nBufferLength=0x105, lpBuffer=0x3be1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\SYNCHIST", lpFilePart=0x0) returned 0x40 [0063.996] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6c0) returned 1 [0063.996] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\SYNCHIST" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\protect\\synchist"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0063.997] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb150) returned 1 [0063.998] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\SYNCHIST", nBufferLength=0x105, lpBuffer=0x3bbdd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\SYNCHIST", lpFilePart=0x0) returned 0x40 [0063.998] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc270) returned 1 [0063.998] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\SYNCHIST" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\protect\\synchist"), fInfoLevelId=0x0, lpFileInformation=0x3bc350 | out: lpFileInformation=0x3bc350*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xb4886a98, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb4886a98, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xe3736526, ftLastWriteTime.dwHighDateTime=0x1d38bec, nFileSizeHigh=0x0, nFileSizeLow=0x4c)) returned 1 [0063.998] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc230) returned 1 [0063.998] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\SYNCHIST", nBufferLength=0x105, lpBuffer=0x3bbdf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\SYNCHIST", lpFilePart=0x0) returned 0x40 [0063.998] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc270) returned 1 [0063.998] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\SYNCHIST" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\protect\\synchist"), fInfoLevelId=0x0, lpFileInformation=0x21fb2c8 | out: lpFileInformation=0x21fb2c8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xb4886a98, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb4886a98, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xe3736526, ftLastWriteTime.dwHighDateTime=0x1d38bec, nFileSizeHigh=0x0, nFileSizeLow=0x4c)) returned 1 [0063.998] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc230) returned 1 [0063.998] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\SYNCHIST", nBufferLength=0x105, lpBuffer=0x3bbc50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\SYNCHIST", lpFilePart=0x0) returned 0x40 [0063.998] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc130) returned 1 [0063.998] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\SYNCHIST" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\protect\\synchist"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0063.999] GetFileType (hFile=0x444) returned 0x1 [0063.999] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc0a0) returned 1 [0063.999] GetFileType (hFile=0x444) returned 0x1 [0063.999] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc2c8 | out: lpFileSizeHigh=0x3bc2c8*=0x0) returned 0x4c [0063.999] ReadFile (in: hFile=0x444, lpBuffer=0x21fb5a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bc1f8, lpOverlapped=0x0 | out: lpBuffer=0x21fb5a0*, lpNumberOfBytesRead=0x3bc1f8*=0x4c, lpOverlapped=0x0) returned 1 [0063.999] CloseHandle (hObject=0x444) returned 1 [0064.036] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\SYNCHIST", nBufferLength=0x105, lpBuffer=0x3bbc50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\SYNCHIST", lpFilePart=0x0) returned 0x40 [0064.036] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc130) returned 1 [0064.036] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\SYNCHIST" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\protect\\synchist"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0064.037] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8bc0) returned 1 [0064.038] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0064.038] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000", lpFilePart=0x0) returned 0x65 [0064.038] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\", lpFilePart=0x0) returned 0x66 [0064.038] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7370 [0064.039] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0064.039] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0064.039] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0064.039] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0064.039] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0064.039] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0064.039] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0064.039] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0064.039] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0064.040] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0064.040] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0064.040] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0064.040] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000", lpFilePart=0x0) returned 0x65 [0064.040] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\", lpFilePart=0x0) returned 0x66 [0064.040] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7c70 [0064.040] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0064.040] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0064.040] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0064.040] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0064.041] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0064.041] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0064.041] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0064.041] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0064.041] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0064.041] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0064.041] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0064.041] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\04cd465a-248d-4abd-853a-5cb67fe43510", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\04cd465a-248d-4abd-853a-5cb67fe43510", lpFilePart=0x0) returned 0x8a [0064.041] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0064.041] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\04cd465a-248d-4abd-853a-5cb67fe43510" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-1462094071-1423818996-289466292-1000\\04cd465a-248d-4abd-853a-5cb67fe43510"), fInfoLevelId=0x0, lpFileInformation=0x2277658 | out: lpFileInformation=0x2277658*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xfa839987, ftCreationTime.dwHighDateTime=0x1d41fbe, ftLastAccessTime.dwLowDateTime=0xfa839987, ftLastAccessTime.dwHighDateTime=0x1d41fbe, ftLastWriteTime.dwLowDateTime=0xfa8ac08f, ftLastWriteTime.dwHighDateTime=0x1d41fbe, nFileSizeHigh=0x0, nFileSizeLow=0x1d4)) returned 1 [0064.041] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0064.041] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\04cd465a-248d-4abd-853a-5cb67fe43510", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\04cd465a-248d-4abd-853a-5cb67fe43510", lpFilePart=0x0) returned 0x8a [0064.041] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0064.041] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\04cd465a-248d-4abd-853a-5cb67fe43510" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-1462094071-1423818996-289466292-1000\\04cd465a-248d-4abd-853a-5cb67fe43510"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0064.042] GetFileType (hFile=0x444) returned 0x1 [0064.042] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0064.042] GetFileType (hFile=0x444) returned 0x1 [0064.042] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0x1d4 [0064.042] ReadFile (in: hFile=0x444, lpBuffer=0x2277c48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be718, lpOverlapped=0x0 | out: lpBuffer=0x2277c48*, lpNumberOfBytesRead=0x3be718*=0x1d4, lpOverlapped=0x0) returned 1 [0064.042] CloseHandle (hObject=0x444) returned 1 [0064.135] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\04cd465a-248d-4abd-853a-5cb67fe43510", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\04cd465a-248d-4abd-853a-5cb67fe43510", lpFilePart=0x0) returned 0x8a [0064.135] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0064.136] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\04cd465a-248d-4abd-853a-5cb67fe43510" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-1462094071-1423818996-289466292-1000\\04cd465a-248d-4abd-853a-5cb67fe43510"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0064.137] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb0e0) returned 1 [0064.137] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\04cd465a-248d-4abd-853a-5cb67fe43510", nBufferLength=0x105, lpBuffer=0x3bbd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\04cd465a-248d-4abd-853a-5cb67fe43510", lpFilePart=0x0) returned 0x8a [0064.137] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc200) returned 1 [0064.138] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\04cd465a-248d-4abd-853a-5cb67fe43510" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-1462094071-1423818996-289466292-1000\\04cd465a-248d-4abd-853a-5cb67fe43510"), fInfoLevelId=0x0, lpFileInformation=0x3bc2e0 | out: lpFileInformation=0x3bc2e0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xfa839987, ftCreationTime.dwHighDateTime=0x1d41fbe, ftLastAccessTime.dwLowDateTime=0xfa839987, ftLastAccessTime.dwHighDateTime=0x1d41fbe, ftLastWriteTime.dwLowDateTime=0xfa8ac08f, ftLastWriteTime.dwHighDateTime=0x1d41fbe, nFileSizeHigh=0x0, nFileSizeLow=0x1d4)) returned 1 [0064.138] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1c0) returned 1 [0064.138] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\04cd465a-248d-4abd-853a-5cb67fe43510", nBufferLength=0x105, lpBuffer=0x3bbd80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\04cd465a-248d-4abd-853a-5cb67fe43510", lpFilePart=0x0) returned 0x8a [0064.138] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc200) returned 1 [0064.138] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\04cd465a-248d-4abd-853a-5cb67fe43510" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-1462094071-1423818996-289466292-1000\\04cd465a-248d-4abd-853a-5cb67fe43510"), fInfoLevelId=0x0, lpFileInformation=0x22eff88 | out: lpFileInformation=0x22eff88*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xfa839987, ftCreationTime.dwHighDateTime=0x1d41fbe, ftLastAccessTime.dwLowDateTime=0xfa839987, ftLastAccessTime.dwHighDateTime=0x1d41fbe, ftLastWriteTime.dwLowDateTime=0xfa8ac08f, ftLastWriteTime.dwHighDateTime=0x1d41fbe, nFileSizeHigh=0x0, nFileSizeLow=0x1d4)) returned 1 [0064.138] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1c0) returned 1 [0064.138] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\04cd465a-248d-4abd-853a-5cb67fe43510", nBufferLength=0x105, lpBuffer=0x3bbbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\04cd465a-248d-4abd-853a-5cb67fe43510", lpFilePart=0x0) returned 0x8a [0064.138] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0c0) returned 1 [0064.138] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\04cd465a-248d-4abd-853a-5cb67fe43510" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-1462094071-1423818996-289466292-1000\\04cd465a-248d-4abd-853a-5cb67fe43510"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0064.138] GetFileType (hFile=0x444) returned 0x1 [0064.138] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc030) returned 1 [0064.138] GetFileType (hFile=0x444) returned 0x1 [0064.138] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc258 | out: lpFileSizeHigh=0x3bc258*=0x0) returned 0x1d4 [0064.138] ReadFile (in: hFile=0x444, lpBuffer=0x22f0578, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bc188, lpOverlapped=0x0 | out: lpBuffer=0x22f0578*, lpNumberOfBytesRead=0x3bc188*=0x1d4, lpOverlapped=0x0) returned 1 [0064.139] CloseHandle (hObject=0x444) returned 1 [0064.357] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\04cd465a-248d-4abd-853a-5cb67fe43510", nBufferLength=0x105, lpBuffer=0x3bbbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\04cd465a-248d-4abd-853a-5cb67fe43510", lpFilePart=0x0) returned 0x8a [0064.357] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0c0) returned 1 [0064.357] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\04cd465a-248d-4abd-853a-5cb67fe43510" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-1462094071-1423818996-289466292-1000\\04cd465a-248d-4abd-853a-5cb67fe43510"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0064.359] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8b50) returned 1 [0064.359] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\15d22704-736b-416f-a36b-857f2a5d2a7e", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\15d22704-736b-416f-a36b-857f2a5d2a7e", lpFilePart=0x0) returned 0x8a [0064.359] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0064.359] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\15d22704-736b-416f-a36b-857f2a5d2a7e" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-1462094071-1423818996-289466292-1000\\15d22704-736b-416f-a36b-857f2a5d2a7e"), fInfoLevelId=0x0, lpFileInformation=0x21690e0 | out: lpFileInformation=0x21690e0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x4e3d2fc3, ftCreationTime.dwHighDateTime=0x1d46680, ftLastAccessTime.dwLowDateTime=0x4e3d2fc3, ftLastAccessTime.dwHighDateTime=0x1d46680, ftLastWriteTime.dwLowDateTime=0x4e41f4f9, ftLastWriteTime.dwHighDateTime=0x1d46680, nFileSizeHigh=0x0, nFileSizeLow=0x1d4)) returned 1 [0064.359] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0064.359] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\15d22704-736b-416f-a36b-857f2a5d2a7e", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\15d22704-736b-416f-a36b-857f2a5d2a7e", lpFilePart=0x0) returned 0x8a [0064.360] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0064.360] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\15d22704-736b-416f-a36b-857f2a5d2a7e" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-1462094071-1423818996-289466292-1000\\15d22704-736b-416f-a36b-857f2a5d2a7e"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0064.360] GetFileType (hFile=0x444) returned 0x1 [0064.360] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0064.360] GetFileType (hFile=0x444) returned 0x1 [0064.360] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0x1d4 [0064.360] ReadFile (in: hFile=0x444, lpBuffer=0x21696d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be718, lpOverlapped=0x0 | out: lpBuffer=0x21696d0*, lpNumberOfBytesRead=0x3be718*=0x1d4, lpOverlapped=0x0) returned 1 [0064.360] CloseHandle (hObject=0x444) returned 1 [0064.477] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\15d22704-736b-416f-a36b-857f2a5d2a7e", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\15d22704-736b-416f-a36b-857f2a5d2a7e", lpFilePart=0x0) returned 0x8a [0064.477] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0064.477] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\15d22704-736b-416f-a36b-857f2a5d2a7e" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-1462094071-1423818996-289466292-1000\\15d22704-736b-416f-a36b-857f2a5d2a7e"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0064.479] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb0e0) returned 1 [0064.479] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\15d22704-736b-416f-a36b-857f2a5d2a7e", nBufferLength=0x105, lpBuffer=0x3bbd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\15d22704-736b-416f-a36b-857f2a5d2a7e", lpFilePart=0x0) returned 0x8a [0064.479] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc200) returned 1 [0064.479] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\15d22704-736b-416f-a36b-857f2a5d2a7e" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-1462094071-1423818996-289466292-1000\\15d22704-736b-416f-a36b-857f2a5d2a7e"), fInfoLevelId=0x0, lpFileInformation=0x3bc2e0 | out: lpFileInformation=0x3bc2e0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x4e3d2fc3, ftCreationTime.dwHighDateTime=0x1d46680, ftLastAccessTime.dwLowDateTime=0x4e3d2fc3, ftLastAccessTime.dwHighDateTime=0x1d46680, ftLastWriteTime.dwLowDateTime=0x4e41f4f9, ftLastWriteTime.dwHighDateTime=0x1d46680, nFileSizeHigh=0x0, nFileSizeLow=0x1d4)) returned 1 [0064.480] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1c0) returned 1 [0064.480] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\15d22704-736b-416f-a36b-857f2a5d2a7e", nBufferLength=0x105, lpBuffer=0x3bbd80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\15d22704-736b-416f-a36b-857f2a5d2a7e", lpFilePart=0x0) returned 0x8a [0064.480] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc200) returned 1 [0064.480] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\15d22704-736b-416f-a36b-857f2a5d2a7e" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-1462094071-1423818996-289466292-1000\\15d22704-736b-416f-a36b-857f2a5d2a7e"), fInfoLevelId=0x0, lpFileInformation=0x21e1a10 | out: lpFileInformation=0x21e1a10*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x4e3d2fc3, ftCreationTime.dwHighDateTime=0x1d46680, ftLastAccessTime.dwLowDateTime=0x4e3d2fc3, ftLastAccessTime.dwHighDateTime=0x1d46680, ftLastWriteTime.dwLowDateTime=0x4e41f4f9, ftLastWriteTime.dwHighDateTime=0x1d46680, nFileSizeHigh=0x0, nFileSizeLow=0x1d4)) returned 1 [0064.480] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1c0) returned 1 [0064.480] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\15d22704-736b-416f-a36b-857f2a5d2a7e", nBufferLength=0x105, lpBuffer=0x3bbbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\15d22704-736b-416f-a36b-857f2a5d2a7e", lpFilePart=0x0) returned 0x8a [0064.480] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0c0) returned 1 [0064.480] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\15d22704-736b-416f-a36b-857f2a5d2a7e" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-1462094071-1423818996-289466292-1000\\15d22704-736b-416f-a36b-857f2a5d2a7e"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0064.480] GetFileType (hFile=0x444) returned 0x1 [0064.480] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc030) returned 1 [0064.480] GetFileType (hFile=0x444) returned 0x1 [0064.480] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc258 | out: lpFileSizeHigh=0x3bc258*=0x0) returned 0x1d4 [0064.480] ReadFile (in: hFile=0x444, lpBuffer=0x21e2000, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bc188, lpOverlapped=0x0 | out: lpBuffer=0x21e2000*, lpNumberOfBytesRead=0x3bc188*=0x1d4, lpOverlapped=0x0) returned 1 [0064.480] CloseHandle (hObject=0x444) returned 1 [0064.540] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\15d22704-736b-416f-a36b-857f2a5d2a7e", nBufferLength=0x105, lpBuffer=0x3bbbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\15d22704-736b-416f-a36b-857f2a5d2a7e", lpFilePart=0x0) returned 0x8a [0064.540] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0c0) returned 1 [0064.540] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\15d22704-736b-416f-a36b-857f2a5d2a7e" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-1462094071-1423818996-289466292-1000\\15d22704-736b-416f-a36b-857f2a5d2a7e"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0064.542] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8b50) returned 1 [0064.543] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\496f2c5b-a90f-4380-b805-3bf6ac63451b", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\496f2c5b-a90f-4380-b805-3bf6ac63451b", lpFilePart=0x0) returned 0x8a [0064.543] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0064.543] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\496f2c5b-a90f-4380-b805-3bf6ac63451b" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-1462094071-1423818996-289466292-1000\\496f2c5b-a90f-4380-b805-3bf6ac63451b"), fInfoLevelId=0x0, lpFileInformation=0x225a210 | out: lpFileInformation=0x225a210*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xe089c000, ftCreationTime.dwHighDateTime=0x1d38bec, ftLastAccessTime.dwLowDateTime=0xe089c000, ftLastAccessTime.dwHighDateTime=0x1d38bec, ftLastWriteTime.dwLowDateTime=0xe3461830, ftLastWriteTime.dwHighDateTime=0x1d38bec, nFileSizeHigh=0x0, nFileSizeLow=0x1d4)) returned 1 [0064.543] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0064.543] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\496f2c5b-a90f-4380-b805-3bf6ac63451b", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\496f2c5b-a90f-4380-b805-3bf6ac63451b", lpFilePart=0x0) returned 0x8a [0064.543] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0064.543] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\496f2c5b-a90f-4380-b805-3bf6ac63451b" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-1462094071-1423818996-289466292-1000\\496f2c5b-a90f-4380-b805-3bf6ac63451b"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0064.543] GetFileType (hFile=0x444) returned 0x1 [0064.543] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0064.543] GetFileType (hFile=0x444) returned 0x1 [0064.543] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0x1d4 [0064.544] ReadFile (in: hFile=0x444, lpBuffer=0x225a800, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be718, lpOverlapped=0x0 | out: lpBuffer=0x225a800*, lpNumberOfBytesRead=0x3be718*=0x1d4, lpOverlapped=0x0) returned 1 [0064.544] CloseHandle (hObject=0x444) returned 1 [0064.584] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\496f2c5b-a90f-4380-b805-3bf6ac63451b", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\496f2c5b-a90f-4380-b805-3bf6ac63451b", lpFilePart=0x0) returned 0x8a [0064.584] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0064.584] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\496f2c5b-a90f-4380-b805-3bf6ac63451b" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-1462094071-1423818996-289466292-1000\\496f2c5b-a90f-4380-b805-3bf6ac63451b"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0064.586] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb0e0) returned 1 [0064.586] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\496f2c5b-a90f-4380-b805-3bf6ac63451b", nBufferLength=0x105, lpBuffer=0x3bbd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\496f2c5b-a90f-4380-b805-3bf6ac63451b", lpFilePart=0x0) returned 0x8a [0064.586] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc200) returned 1 [0064.586] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\496f2c5b-a90f-4380-b805-3bf6ac63451b" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-1462094071-1423818996-289466292-1000\\496f2c5b-a90f-4380-b805-3bf6ac63451b"), fInfoLevelId=0x0, lpFileInformation=0x3bc2e0 | out: lpFileInformation=0x3bc2e0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xe089c000, ftCreationTime.dwHighDateTime=0x1d38bec, ftLastAccessTime.dwLowDateTime=0xe089c000, ftLastAccessTime.dwHighDateTime=0x1d38bec, ftLastWriteTime.dwLowDateTime=0xe3461830, ftLastWriteTime.dwHighDateTime=0x1d38bec, nFileSizeHigh=0x0, nFileSizeLow=0x1d4)) returned 1 [0064.587] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1c0) returned 1 [0064.587] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\496f2c5b-a90f-4380-b805-3bf6ac63451b", nBufferLength=0x105, lpBuffer=0x3bbd80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\496f2c5b-a90f-4380-b805-3bf6ac63451b", lpFilePart=0x0) returned 0x8a [0064.587] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc200) returned 1 [0064.587] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\496f2c5b-a90f-4380-b805-3bf6ac63451b" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-1462094071-1423818996-289466292-1000\\496f2c5b-a90f-4380-b805-3bf6ac63451b"), fInfoLevelId=0x0, lpFileInformation=0x22d2b40 | out: lpFileInformation=0x22d2b40*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xe089c000, ftCreationTime.dwHighDateTime=0x1d38bec, ftLastAccessTime.dwLowDateTime=0xe089c000, ftLastAccessTime.dwHighDateTime=0x1d38bec, ftLastWriteTime.dwLowDateTime=0xe3461830, ftLastWriteTime.dwHighDateTime=0x1d38bec, nFileSizeHigh=0x0, nFileSizeLow=0x1d4)) returned 1 [0064.587] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1c0) returned 1 [0064.587] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\496f2c5b-a90f-4380-b805-3bf6ac63451b", nBufferLength=0x105, lpBuffer=0x3bbbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\496f2c5b-a90f-4380-b805-3bf6ac63451b", lpFilePart=0x0) returned 0x8a [0064.587] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0c0) returned 1 [0064.587] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\496f2c5b-a90f-4380-b805-3bf6ac63451b" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-1462094071-1423818996-289466292-1000\\496f2c5b-a90f-4380-b805-3bf6ac63451b"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0064.587] GetFileType (hFile=0x444) returned 0x1 [0064.587] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc030) returned 1 [0064.587] GetFileType (hFile=0x444) returned 0x1 [0064.587] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc258 | out: lpFileSizeHigh=0x3bc258*=0x0) returned 0x1d4 [0064.587] ReadFile (in: hFile=0x444, lpBuffer=0x22d3130, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bc188, lpOverlapped=0x0 | out: lpBuffer=0x22d3130*, lpNumberOfBytesRead=0x3bc188*=0x1d4, lpOverlapped=0x0) returned 1 [0064.587] CloseHandle (hObject=0x444) returned 1 [0064.788] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\496f2c5b-a90f-4380-b805-3bf6ac63451b", nBufferLength=0x105, lpBuffer=0x3bbbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\496f2c5b-a90f-4380-b805-3bf6ac63451b", lpFilePart=0x0) returned 0x8a [0064.788] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0c0) returned 1 [0064.788] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\496f2c5b-a90f-4380-b805-3bf6ac63451b" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-1462094071-1423818996-289466292-1000\\496f2c5b-a90f-4380-b805-3bf6ac63451b"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0064.789] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8b50) returned 1 [0064.790] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\5b8a3202-35dc-4437-b5d7-374f5e872415", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\5b8a3202-35dc-4437-b5d7-374f5e872415", lpFilePart=0x0) returned 0x8a [0064.790] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0064.790] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\5b8a3202-35dc-4437-b5d7-374f5e872415" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-1462094071-1423818996-289466292-1000\\5b8a3202-35dc-4437-b5d7-374f5e872415"), fInfoLevelId=0x0, lpFileInformation=0x234b340 | out: lpFileInformation=0x234b340*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xa9d3c51f, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa9d3c51f, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xe354667a, ftLastWriteTime.dwHighDateTime=0x1d38bec, nFileSizeHigh=0x0, nFileSizeLow=0x1d4)) returned 1 [0064.790] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0064.791] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\5b8a3202-35dc-4437-b5d7-374f5e872415", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\5b8a3202-35dc-4437-b5d7-374f5e872415", lpFilePart=0x0) returned 0x8a [0064.791] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0064.791] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\5b8a3202-35dc-4437-b5d7-374f5e872415" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-1462094071-1423818996-289466292-1000\\5b8a3202-35dc-4437-b5d7-374f5e872415"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0064.791] GetFileType (hFile=0x444) returned 0x1 [0064.791] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0064.791] GetFileType (hFile=0x444) returned 0x1 [0064.791] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0x1d4 [0064.791] ReadFile (in: hFile=0x444, lpBuffer=0x234b930, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be718, lpOverlapped=0x0 | out: lpBuffer=0x234b930*, lpNumberOfBytesRead=0x3be718*=0x1d4, lpOverlapped=0x0) returned 1 [0064.792] CloseHandle (hObject=0x444) returned 1 [0064.837] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\5b8a3202-35dc-4437-b5d7-374f5e872415", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\5b8a3202-35dc-4437-b5d7-374f5e872415", lpFilePart=0x0) returned 0x8a [0064.837] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0064.837] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\5b8a3202-35dc-4437-b5d7-374f5e872415" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-1462094071-1423818996-289466292-1000\\5b8a3202-35dc-4437-b5d7-374f5e872415"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0064.839] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb0e0) returned 1 [0064.839] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\5b8a3202-35dc-4437-b5d7-374f5e872415", nBufferLength=0x105, lpBuffer=0x3bbd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\5b8a3202-35dc-4437-b5d7-374f5e872415", lpFilePart=0x0) returned 0x8a [0064.839] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc200) returned 1 [0064.839] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\5b8a3202-35dc-4437-b5d7-374f5e872415" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-1462094071-1423818996-289466292-1000\\5b8a3202-35dc-4437-b5d7-374f5e872415"), fInfoLevelId=0x0, lpFileInformation=0x3bc2e0 | out: lpFileInformation=0x3bc2e0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xa9d3c51f, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa9d3c51f, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xe354667a, ftLastWriteTime.dwHighDateTime=0x1d38bec, nFileSizeHigh=0x0, nFileSizeLow=0x1d4)) returned 1 [0064.840] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1c0) returned 1 [0064.840] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\5b8a3202-35dc-4437-b5d7-374f5e872415", nBufferLength=0x105, lpBuffer=0x3bbd80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\5b8a3202-35dc-4437-b5d7-374f5e872415", lpFilePart=0x0) returned 0x8a [0064.840] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc200) returned 1 [0064.840] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\5b8a3202-35dc-4437-b5d7-374f5e872415" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-1462094071-1423818996-289466292-1000\\5b8a3202-35dc-4437-b5d7-374f5e872415"), fInfoLevelId=0x0, lpFileInformation=0x21c3878 | out: lpFileInformation=0x21c3878*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xa9d3c51f, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa9d3c51f, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xe354667a, ftLastWriteTime.dwHighDateTime=0x1d38bec, nFileSizeHigh=0x0, nFileSizeLow=0x1d4)) returned 1 [0064.840] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1c0) returned 1 [0064.840] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\5b8a3202-35dc-4437-b5d7-374f5e872415", nBufferLength=0x105, lpBuffer=0x3bbbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\5b8a3202-35dc-4437-b5d7-374f5e872415", lpFilePart=0x0) returned 0x8a [0064.840] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0c0) returned 1 [0064.840] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\5b8a3202-35dc-4437-b5d7-374f5e872415" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-1462094071-1423818996-289466292-1000\\5b8a3202-35dc-4437-b5d7-374f5e872415"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0064.840] GetFileType (hFile=0x444) returned 0x1 [0064.840] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc030) returned 1 [0064.840] GetFileType (hFile=0x444) returned 0x1 [0064.840] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc258 | out: lpFileSizeHigh=0x3bc258*=0x0) returned 0x1d4 [0064.840] ReadFile (in: hFile=0x444, lpBuffer=0x21c3e68, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bc188, lpOverlapped=0x0 | out: lpBuffer=0x21c3e68*, lpNumberOfBytesRead=0x3bc188*=0x1d4, lpOverlapped=0x0) returned 1 [0064.840] CloseHandle (hObject=0x444) returned 1 [0064.879] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\5b8a3202-35dc-4437-b5d7-374f5e872415", nBufferLength=0x105, lpBuffer=0x3bbbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\5b8a3202-35dc-4437-b5d7-374f5e872415", lpFilePart=0x0) returned 0x8a [0064.879] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0c0) returned 1 [0064.879] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\5b8a3202-35dc-4437-b5d7-374f5e872415" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-1462094071-1423818996-289466292-1000\\5b8a3202-35dc-4437-b5d7-374f5e872415"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0064.881] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8b50) returned 1 [0064.881] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\d7746ecf-458e-4e71-8557-8ac80457022a", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\d7746ecf-458e-4e71-8557-8ac80457022a", lpFilePart=0x0) returned 0x8a [0064.881] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0064.881] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\d7746ecf-458e-4e71-8557-8ac80457022a" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-1462094071-1423818996-289466292-1000\\d7746ecf-458e-4e71-8557-8ac80457022a"), fInfoLevelId=0x0, lpFileInformation=0x223c078 | out: lpFileInformation=0x223c078*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc095c422, ftCreationTime.dwHighDateTime=0x1d3368c, ftLastAccessTime.dwLowDateTime=0xc095c422, ftLastAccessTime.dwHighDateTime=0x1d3368c, ftLastWriteTime.dwLowDateTime=0xe3651709, ftLastWriteTime.dwHighDateTime=0x1d38bec, nFileSizeHigh=0x0, nFileSizeLow=0x1d4)) returned 1 [0064.882] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0064.882] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\d7746ecf-458e-4e71-8557-8ac80457022a", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\d7746ecf-458e-4e71-8557-8ac80457022a", lpFilePart=0x0) returned 0x8a [0064.882] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0064.882] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\d7746ecf-458e-4e71-8557-8ac80457022a" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-1462094071-1423818996-289466292-1000\\d7746ecf-458e-4e71-8557-8ac80457022a"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0064.882] GetFileType (hFile=0x444) returned 0x1 [0064.882] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0064.882] GetFileType (hFile=0x444) returned 0x1 [0064.882] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0x1d4 [0064.882] ReadFile (in: hFile=0x444, lpBuffer=0x223c668, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be718, lpOverlapped=0x0 | out: lpBuffer=0x223c668*, lpNumberOfBytesRead=0x3be718*=0x1d4, lpOverlapped=0x0) returned 1 [0064.883] CloseHandle (hObject=0x444) returned 1 [0064.920] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\d7746ecf-458e-4e71-8557-8ac80457022a", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\d7746ecf-458e-4e71-8557-8ac80457022a", lpFilePart=0x0) returned 0x8a [0064.920] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0064.920] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\d7746ecf-458e-4e71-8557-8ac80457022a" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-1462094071-1423818996-289466292-1000\\d7746ecf-458e-4e71-8557-8ac80457022a"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0064.924] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb0e0) returned 1 [0064.924] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\d7746ecf-458e-4e71-8557-8ac80457022a", nBufferLength=0x105, lpBuffer=0x3bbd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\d7746ecf-458e-4e71-8557-8ac80457022a", lpFilePart=0x0) returned 0x8a [0064.924] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc200) returned 1 [0064.924] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\d7746ecf-458e-4e71-8557-8ac80457022a" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-1462094071-1423818996-289466292-1000\\d7746ecf-458e-4e71-8557-8ac80457022a"), fInfoLevelId=0x0, lpFileInformation=0x3bc2e0 | out: lpFileInformation=0x3bc2e0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc095c422, ftCreationTime.dwHighDateTime=0x1d3368c, ftLastAccessTime.dwLowDateTime=0xc095c422, ftLastAccessTime.dwHighDateTime=0x1d3368c, ftLastWriteTime.dwLowDateTime=0xe3651709, ftLastWriteTime.dwHighDateTime=0x1d38bec, nFileSizeHigh=0x0, nFileSizeLow=0x1d4)) returned 1 [0064.924] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1c0) returned 1 [0064.924] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\d7746ecf-458e-4e71-8557-8ac80457022a", nBufferLength=0x105, lpBuffer=0x3bbd80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\d7746ecf-458e-4e71-8557-8ac80457022a", lpFilePart=0x0) returned 0x8a [0064.924] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc200) returned 1 [0064.925] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\d7746ecf-458e-4e71-8557-8ac80457022a" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-1462094071-1423818996-289466292-1000\\d7746ecf-458e-4e71-8557-8ac80457022a"), fInfoLevelId=0x0, lpFileInformation=0x22b49a8 | out: lpFileInformation=0x22b49a8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc095c422, ftCreationTime.dwHighDateTime=0x1d3368c, ftLastAccessTime.dwLowDateTime=0xc095c422, ftLastAccessTime.dwHighDateTime=0x1d3368c, ftLastWriteTime.dwLowDateTime=0xe3651709, ftLastWriteTime.dwHighDateTime=0x1d38bec, nFileSizeHigh=0x0, nFileSizeLow=0x1d4)) returned 1 [0064.925] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1c0) returned 1 [0064.925] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\d7746ecf-458e-4e71-8557-8ac80457022a", nBufferLength=0x105, lpBuffer=0x3bbbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\d7746ecf-458e-4e71-8557-8ac80457022a", lpFilePart=0x0) returned 0x8a [0064.925] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0c0) returned 1 [0064.925] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\d7746ecf-458e-4e71-8557-8ac80457022a" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-1462094071-1423818996-289466292-1000\\d7746ecf-458e-4e71-8557-8ac80457022a"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0064.925] GetFileType (hFile=0x444) returned 0x1 [0064.925] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc030) returned 1 [0064.925] GetFileType (hFile=0x444) returned 0x1 [0064.925] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc258 | out: lpFileSizeHigh=0x3bc258*=0x0) returned 0x1d4 [0064.925] ReadFile (in: hFile=0x444, lpBuffer=0x22b4f98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bc188, lpOverlapped=0x0 | out: lpBuffer=0x22b4f98*, lpNumberOfBytesRead=0x3bc188*=0x1d4, lpOverlapped=0x0) returned 1 [0064.925] CloseHandle (hObject=0x444) returned 1 [0064.962] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\d7746ecf-458e-4e71-8557-8ac80457022a", nBufferLength=0x105, lpBuffer=0x3bbbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\d7746ecf-458e-4e71-8557-8ac80457022a", lpFilePart=0x0) returned 0x8a [0064.962] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0c0) returned 1 [0064.962] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\d7746ecf-458e-4e71-8557-8ac80457022a" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-1462094071-1423818996-289466292-1000\\d7746ecf-458e-4e71-8557-8ac80457022a"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0064.964] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8b50) returned 1 [0064.965] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\Preferred", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\Preferred", lpFilePart=0x0) returned 0x6f [0064.965] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0064.965] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\Preferred" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-1462094071-1423818996-289466292-1000\\preferred"), fInfoLevelId=0x0, lpFileInformation=0x232d1a8 | out: lpFileInformation=0x232d1a8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xa9d3c51f, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa9d3c51f, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x4e491b41, ftLastWriteTime.dwHighDateTime=0x1d46680, nFileSizeHigh=0x0, nFileSizeLow=0x18)) returned 1 [0064.965] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0064.965] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\Preferred", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\Preferred", lpFilePart=0x0) returned 0x6f [0064.965] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0064.965] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\Preferred" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-1462094071-1423818996-289466292-1000\\preferred"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0064.965] GetFileType (hFile=0x444) returned 0x1 [0064.965] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0064.965] GetFileType (hFile=0x444) returned 0x1 [0064.965] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0x18 [0064.965] ReadFile (in: hFile=0x444, lpBuffer=0x232d4f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be718, lpOverlapped=0x0 | out: lpBuffer=0x232d4f8*, lpNumberOfBytesRead=0x3be718*=0x18, lpOverlapped=0x0) returned 1 [0064.965] CloseHandle (hObject=0x444) returned 1 [0065.009] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\Preferred", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\Preferred", lpFilePart=0x0) returned 0x6f [0065.009] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0065.009] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\Preferred" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-1462094071-1423818996-289466292-1000\\preferred"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0065.011] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb0e0) returned 1 [0065.011] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\Preferred", nBufferLength=0x105, lpBuffer=0x3bbd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\Preferred", lpFilePart=0x0) returned 0x6f [0065.011] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc200) returned 1 [0065.011] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\Preferred" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-1462094071-1423818996-289466292-1000\\preferred"), fInfoLevelId=0x0, lpFileInformation=0x3bc2e0 | out: lpFileInformation=0x3bc2e0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xa9d3c51f, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa9d3c51f, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x4e491b41, ftLastWriteTime.dwHighDateTime=0x1d46680, nFileSizeHigh=0x0, nFileSizeLow=0x18)) returned 1 [0065.011] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1c0) returned 1 [0065.011] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\Preferred", nBufferLength=0x105, lpBuffer=0x3bbd80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\Preferred", lpFilePart=0x0) returned 0x6f [0065.011] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc200) returned 1 [0065.011] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\Preferred" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-1462094071-1423818996-289466292-1000\\preferred"), fInfoLevelId=0x0, lpFileInformation=0x21a4ca8 | out: lpFileInformation=0x21a4ca8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xa9d3c51f, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa9d3c51f, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x4e491b41, ftLastWriteTime.dwHighDateTime=0x1d46680, nFileSizeHigh=0x0, nFileSizeLow=0x18)) returned 1 [0065.011] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1c0) returned 1 [0065.011] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\Preferred", nBufferLength=0x105, lpBuffer=0x3bbbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\Preferred", lpFilePart=0x0) returned 0x6f [0065.011] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0c0) returned 1 [0065.011] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\Preferred" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-1462094071-1423818996-289466292-1000\\preferred"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0065.011] GetFileType (hFile=0x444) returned 0x1 [0065.011] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc030) returned 1 [0065.012] GetFileType (hFile=0x444) returned 0x1 [0065.012] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc258 | out: lpFileSizeHigh=0x3bc258*=0x0) returned 0x18 [0065.012] ReadFile (in: hFile=0x444, lpBuffer=0x21a4ff8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bc188, lpOverlapped=0x0 | out: lpBuffer=0x21a4ff8*, lpNumberOfBytesRead=0x3bc188*=0x18, lpOverlapped=0x0) returned 1 [0065.012] CloseHandle (hObject=0x444) returned 1 [0065.051] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\Preferred", nBufferLength=0x105, lpBuffer=0x3bbbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\Preferred", lpFilePart=0x0) returned 0x6f [0065.051] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0c0) returned 1 [0065.051] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\Preferred" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-1462094071-1423818996-289466292-1000\\preferred"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0065.052] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8b50) returned 1 [0065.053] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0065.053] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Publisher", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Publisher", lpFilePart=0x0) returned 0x39 [0065.053] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Publisher\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Publisher\\", lpFilePart=0x0) returned 0x3a [0065.053] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Publisher\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d7eb0 [0065.054] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0065.054] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0065.054] FindClose (in: hFindFile=0x5d7eb0 | out: hFindFile=0x5d7eb0) returned 1 [0065.054] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0065.054] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0065.054] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0065.054] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Publisher", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Publisher", lpFilePart=0x0) returned 0x39 [0065.054] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Publisher\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Publisher\\", lpFilePart=0x0) returned 0x3a [0065.054] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Publisher\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d79d0 [0065.054] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0065.054] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0065.054] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0065.055] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0065.055] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0065.055] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0065.055] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks", lpFilePart=0x0) returned 0x49 [0065.055] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\", lpFilePart=0x0) returned 0x4a [0065.055] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d81b0 [0065.055] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0065.055] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0065.055] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0065.055] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0065.055] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0065.055] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0065.055] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0065.055] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks", lpFilePart=0x0) returned 0x49 [0065.056] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\", lpFilePart=0x0) returned 0x4a [0065.056] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d79d0 [0065.056] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0065.056] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0065.056] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0065.056] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0065.056] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0065.056] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0065.056] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\ContentStore.xml", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\ContentStore.xml", lpFilePart=0x0) returned 0x5a [0065.056] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0065.056] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\ContentStore.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\publisher building blocks\\contentstore.xml"), fInfoLevelId=0x0, lpFileInformation=0x22201a0 | out: lpFileInformation=0x22201a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c1242fa, ftCreationTime.dwHighDateTime=0x1d3aaaf, ftLastAccessTime.dwLowDateTime=0x7c1242fa, ftLastAccessTime.dwHighDateTime=0x1d3aaaf, ftLastWriteTime.dwLowDateTime=0x8301165e, ftLastWriteTime.dwHighDateTime=0x1d3aaaf, nFileSizeHigh=0x0, nFileSizeLow=0xa8)) returned 1 [0065.058] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0065.058] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\ContentStore.xml", nBufferLength=0x105, lpBuffer=0x3be1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\ContentStore.xml", lpFilePart=0x0) returned 0x5a [0065.058] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6c0) returned 1 [0065.058] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\ContentStore.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\publisher building blocks\\contentstore.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0065.058] GetFileType (hFile=0x444) returned 0x1 [0065.058] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0065.058] GetFileType (hFile=0x444) returned 0x1 [0065.058] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be858 | out: lpFileSizeHigh=0x3be858*=0x0) returned 0xa8 [0065.058] ReadFile (in: hFile=0x444, lpBuffer=0x2220550, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be788, lpOverlapped=0x0 | out: lpBuffer=0x2220550*, lpNumberOfBytesRead=0x3be788*=0xa8, lpOverlapped=0x0) returned 1 [0065.059] CloseHandle (hObject=0x444) returned 1 [0065.098] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\ContentStore.xml", nBufferLength=0x105, lpBuffer=0x3be1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\ContentStore.xml", lpFilePart=0x0) returned 0x5a [0065.098] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6c0) returned 1 [0065.098] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\ContentStore.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\publisher building blocks\\contentstore.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0065.099] GetFileType (hFile=0x444) returned 0x1 [0065.099] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0065.099] GetFileType (hFile=0x444) returned 0x1 [0065.099] WriteFile (in: hFile=0x444, lpBuffer=0x22977d0*, nNumberOfBytesToWrite=0xb0, lpNumberOfBytesWritten=0x3be698, lpOverlapped=0x0 | out: lpBuffer=0x22977d0*, lpNumberOfBytesWritten=0x3be698*=0xb0, lpOverlapped=0x0) returned 1 [0065.100] CloseHandle (hObject=0x444) returned 1 [0065.100] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\ContentStore.xml", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\ContentStore.xml", lpFilePart=0x0) returned 0x5a [0065.100] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\ContentStore.xml.xuy", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\ContentStore.xml.xuy", lpFilePart=0x0) returned 0x5e [0065.100] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0065.100] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\ContentStore.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\publisher building blocks\\contentstore.xml"), fInfoLevelId=0x0, lpFileInformation=0x3be8a0 | out: lpFileInformation=0x3be8a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c1242fa, ftCreationTime.dwHighDateTime=0x1d3aaaf, ftLastAccessTime.dwLowDateTime=0x7c1242fa, ftLastAccessTime.dwHighDateTime=0x1d3aaaf, ftLastWriteTime.dwLowDateTime=0x12a68656, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xb0)) returned 1 [0065.100] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0065.100] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\ContentStore.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\publisher building blocks\\contentstore.xml"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\ContentStore.xml.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\publisher building blocks\\contentstore.xml.xuy")) returned 1 [0065.101] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0065.101] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Speech", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Speech", lpFilePart=0x0) returned 0x36 [0065.101] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Speech\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Speech\\", lpFilePart=0x0) returned 0x37 [0065.101] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Speech\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d78b0 [0065.101] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0065.102] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0065.102] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0065.102] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0065.102] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0065.102] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0065.102] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Speech", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Speech", lpFilePart=0x0) returned 0x36 [0065.102] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Speech\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Speech\\", lpFilePart=0x0) returned 0x37 [0065.102] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Speech\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d7370 [0065.102] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0065.102] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0065.102] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0065.102] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0065.102] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0065.102] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0065.103] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates", lpFilePart=0x0) returned 0x42 [0065.103] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\", lpFilePart=0x0) returned 0x43 [0065.103] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d78b0 [0065.103] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0065.103] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0065.103] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0065.103] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0065.103] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0065.103] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0065.103] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0065.103] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates", lpFilePart=0x0) returned 0x42 [0065.103] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\", lpFilePart=0x0) returned 0x43 [0065.103] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d81b0 [0065.104] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0065.104] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0065.104] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0065.104] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0065.104] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0065.104] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0065.104] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0065.104] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My", lpFilePart=0x0) returned 0x45 [0065.104] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\", lpFilePart=0x0) returned 0x46 [0065.104] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7550 [0065.104] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0065.105] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0065.105] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0065.105] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0065.105] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0065.105] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0065.105] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0065.105] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0065.105] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0065.105] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0065.105] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My", lpFilePart=0x0) returned 0x45 [0065.105] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\", lpFilePart=0x0) returned 0x46 [0065.105] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7550 [0065.106] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0065.106] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0065.106] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0065.106] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0065.106] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0065.106] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0065.106] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0065.106] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0065.106] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0065.106] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\AppContainerUserCertRead", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\AppContainerUserCertRead", lpFilePart=0x0) returned 0x5e [0065.106] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0065.107] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\AppContainerUserCertRead" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\systemcertificates\\my\\appcontainerusercertread"), fInfoLevelId=0x0, lpFileInformation=0x229eb00 | out: lpFileInformation=0x229eb00*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x5de40e52, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x5de40e52, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x5de40e52, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0065.107] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0065.107] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\AppContainerUserCertRead", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\AppContainerUserCertRead", lpFilePart=0x0) returned 0x5e [0065.107] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0065.107] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\AppContainerUserCertRead" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\systemcertificates\\my\\appcontainerusercertread"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0065.107] GetFileType (hFile=0x444) returned 0x1 [0065.107] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0065.107] GetFileType (hFile=0x444) returned 0x1 [0065.107] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0x0 [0065.107] CloseHandle (hObject=0x444) returned 1 [0065.117] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\AppContainerUserCertRead", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\AppContainerUserCertRead", lpFilePart=0x0) returned 0x5e [0065.117] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0065.117] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\AppContainerUserCertRead" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\systemcertificates\\my\\appcontainerusercertread"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0065.119] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb0e0) returned 1 [0065.119] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\AppContainerUserCertRead", nBufferLength=0x105, lpBuffer=0x3bbd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\AppContainerUserCertRead", lpFilePart=0x0) returned 0x5e [0065.119] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc200) returned 1 [0065.119] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\AppContainerUserCertRead" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\systemcertificates\\my\\appcontainerusercertread"), fInfoLevelId=0x0, lpFileInformation=0x3bc2e0 | out: lpFileInformation=0x3bc2e0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x5de40e52, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x5de40e52, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x5de40e52, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0065.119] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1c0) returned 1 [0065.119] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\AppContainerUserCertRead", nBufferLength=0x105, lpBuffer=0x3bbd80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\AppContainerUserCertRead", lpFilePart=0x0) returned 0x5e [0065.119] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc200) returned 1 [0065.119] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\AppContainerUserCertRead" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\systemcertificates\\my\\appcontainerusercertread"), fInfoLevelId=0x0, lpFileInformation=0x2315800 | out: lpFileInformation=0x2315800*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x5de40e52, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x5de40e52, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x5de40e52, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0065.120] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1c0) returned 1 [0065.120] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\AppContainerUserCertRead", nBufferLength=0x105, lpBuffer=0x3bbbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\AppContainerUserCertRead", lpFilePart=0x0) returned 0x5e [0065.120] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0c0) returned 1 [0065.120] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\AppContainerUserCertRead" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\systemcertificates\\my\\appcontainerusercertread"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0065.120] GetFileType (hFile=0x444) returned 0x1 [0065.120] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc030) returned 1 [0065.120] GetFileType (hFile=0x444) returned 0x1 [0065.120] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc258 | out: lpFileSizeHigh=0x3bc258*=0x0) returned 0x0 [0065.120] CloseHandle (hObject=0x444) returned 1 [0065.161] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\AppContainerUserCertRead", nBufferLength=0x105, lpBuffer=0x3bbbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\AppContainerUserCertRead", lpFilePart=0x0) returned 0x5e [0065.161] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0c0) returned 1 [0065.162] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\AppContainerUserCertRead" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\systemcertificates\\my\\appcontainerusercertread"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0065.163] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8b50) returned 1 [0065.164] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0065.164] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates", lpFilePart=0x0) returned 0x52 [0065.164] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates\\", lpFilePart=0x0) returned 0x53 [0065.164] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7550 [0065.164] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0065.165] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0065.165] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0065.165] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0065.165] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0065.165] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0065.165] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates", lpFilePart=0x0) returned 0x52 [0065.165] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates\\", lpFilePart=0x0) returned 0x53 [0065.165] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d73d0 [0065.165] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0065.165] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0065.165] FindClose (in: hFindFile=0x5d73d0 | out: hFindFile=0x5d73d0) returned 1 [0065.165] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0065.165] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0065.165] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0065.165] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs", lpFilePart=0x0) returned 0x4a [0065.166] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs\\", lpFilePart=0x0) returned 0x4b [0065.166] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d78b0 [0065.166] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0065.166] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0065.166] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0065.166] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0065.166] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0065.166] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0065.166] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs", lpFilePart=0x0) returned 0x4a [0065.166] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs\\", lpFilePart=0x0) returned 0x4b [0065.166] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7e50 [0065.166] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0065.167] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0065.167] FindClose (in: hFindFile=0x5d7e50 | out: hFindFile=0x5d7e50) returned 1 [0065.167] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0065.167] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0065.167] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0065.167] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs", lpFilePart=0x0) returned 0x4a [0065.167] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs\\", lpFilePart=0x0) returned 0x4b [0065.167] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7df0 [0065.167] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0065.167] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0065.167] FindClose (in: hFindFile=0x5d7df0 | out: hFindFile=0x5d7df0) returned 1 [0065.167] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0065.167] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0065.167] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0065.167] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs", lpFilePart=0x0) returned 0x4a [0065.168] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs\\", lpFilePart=0x0) returned 0x4b [0065.168] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d78b0 [0065.168] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0065.168] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0065.168] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0065.168] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0065.168] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0065.168] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0065.168] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates", lpFilePart=0x0) returned 0x39 [0065.168] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\", lpFilePart=0x0) returned 0x3a [0065.168] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d7e50 [0065.198] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0065.198] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0065.198] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0065.198] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0065.198] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0065.199] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0065.199] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0065.199] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0065.199] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0065.199] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0065.199] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0065.199] FindClose (in: hFindFile=0x5d7e50 | out: hFindFile=0x5d7e50) returned 1 [0065.200] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0065.200] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0065.200] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0065.200] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates", lpFilePart=0x0) returned 0x39 [0065.200] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\", lpFilePart=0x0) returned 0x3a [0065.200] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d78b0 [0065.201] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0065.201] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0065.201] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0065.201] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0065.203] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0065.203] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0065.203] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0065.203] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0065.204] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0065.204] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0065.204] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0065.204] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0065.205] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0065.205] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0065.205] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Calendar insights.xltm", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Calendar insights.xltm", lpFilePart=0x0) returned 0x50 [0065.205] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0065.205] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Calendar insights.xltm" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\calendar insights.xltm"), fInfoLevelId=0x0, lpFileInformation=0x2195aa0 | out: lpFileInformation=0x2195aa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87a04365, ftCreationTime.dwHighDateTime=0x1d2d438, ftLastAccessTime.dwLowDateTime=0x87a04365, ftLastAccessTime.dwHighDateTime=0x1d2d438, ftLastWriteTime.dwLowDateTime=0x18fd4a00, ftLastWriteTime.dwHighDateTime=0x1d24144, nFileSizeHigh=0x0, nFileSizeLow=0xdf362)) returned 1 [0065.206] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0065.206] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Calendar insights.xltm", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Calendar insights.xltm", lpFilePart=0x0) returned 0x50 [0065.206] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0065.206] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Calendar insights.xltm" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\calendar insights.xltm"), fInfoLevelId=0x0, lpFileInformation=0x2195c10 | out: lpFileInformation=0x2195c10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87a04365, ftCreationTime.dwHighDateTime=0x1d2d438, ftLastAccessTime.dwLowDateTime=0x87a04365, ftLastAccessTime.dwHighDateTime=0x1d2d438, ftLastWriteTime.dwLowDateTime=0x18fd4a00, ftLastWriteTime.dwHighDateTime=0x1d24144, nFileSizeHigh=0x0, nFileSizeLow=0xdf362)) returned 1 [0065.206] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0065.206] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Calendar insights.xltm", nBufferLength=0x105, lpBuffer=0x3be270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Calendar insights.xltm", lpFilePart=0x0) returned 0x50 [0065.206] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0065.206] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Calendar insights.xltm" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\calendar insights.xltm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0065.206] GetFileType (hFile=0x444) returned 0x1 [0065.206] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6c0) returned 1 [0065.206] GetFileType (hFile=0x444) returned 0x1 [0065.206] ReadFile (in: hFile=0x444, lpBuffer=0x2198020, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be7d8, lpOverlapped=0x0 | out: lpBuffer=0x2198020*, lpNumberOfBytesRead=0x3be7d8*=0x1000, lpOverlapped=0x0) returned 1 [0065.302] CloseHandle (hObject=0x444) returned 1 [0065.303] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Calendar insights.xltm", nBufferLength=0x105, lpBuffer=0x3be270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Calendar insights.xltm", lpFilePart=0x0) returned 0x50 [0065.303] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0065.303] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Calendar insights.xltm" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\calendar insights.xltm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0065.303] GetFileType (hFile=0x444) returned 0x1 [0065.303] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6c0) returned 1 [0065.303] GetFileType (hFile=0x444) returned 0x1 [0065.303] WriteFile (in: hFile=0x444, lpBuffer=0x2195d60*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be888, lpOverlapped=0x0 | out: lpBuffer=0x2195d60*, lpNumberOfBytesWritten=0x3be888*=0x2000, lpOverlapped=0x0) returned 1 [0065.303] CloseHandle (hObject=0x444) returned 1 [0065.303] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Calendar insights.xltm", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Calendar insights.xltm", lpFilePart=0x0) returned 0x50 [0065.303] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Calendar insights.xltm.xuy", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Calendar insights.xltm.xuy", lpFilePart=0x0) returned 0x54 [0065.303] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0065.304] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Calendar insights.xltm" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\calendar insights.xltm"), fInfoLevelId=0x0, lpFileInformation=0x3be8a0 | out: lpFileInformation=0x3be8a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87a04365, ftCreationTime.dwHighDateTime=0x1d2d438, ftLastAccessTime.dwLowDateTime=0x87a04365, ftLastAccessTime.dwHighDateTime=0x1d2d438, ftLastWriteTime.dwLowDateTime=0x12c584ea, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xdf362)) returned 1 [0065.304] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0065.304] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Calendar insights.xltm" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\calendar insights.xltm"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Calendar insights.xltm.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\calendar insights.xltm.xuy")) returned 1 [0065.304] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Cashflow analysis.xltm", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Cashflow analysis.xltm", lpFilePart=0x0) returned 0x50 [0065.304] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0065.304] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Cashflow analysis.xltm" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\cashflow analysis.xltm"), fInfoLevelId=0x0, lpFileInformation=0x2214428 | out: lpFileInformation=0x2214428*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87b2d852, ftCreationTime.dwHighDateTime=0x1d2d438, ftLastAccessTime.dwLowDateTime=0x87b2d852, ftLastAccessTime.dwHighDateTime=0x1d2d438, ftLastWriteTime.dwLowDateTime=0x26670400, ftLastWriteTime.dwHighDateTime=0x1d24145, nFileSizeHigh=0x0, nFileSizeLow=0x5cc66)) returned 1 [0065.306] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0065.306] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Cashflow analysis.xltm", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Cashflow analysis.xltm", lpFilePart=0x0) returned 0x50 [0065.306] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0065.306] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Cashflow analysis.xltm" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\cashflow analysis.xltm"), fInfoLevelId=0x0, lpFileInformation=0x2214598 | out: lpFileInformation=0x2214598*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87b2d852, ftCreationTime.dwHighDateTime=0x1d2d438, ftLastAccessTime.dwLowDateTime=0x87b2d852, ftLastAccessTime.dwHighDateTime=0x1d2d438, ftLastWriteTime.dwLowDateTime=0x26670400, ftLastWriteTime.dwHighDateTime=0x1d24145, nFileSizeHigh=0x0, nFileSizeLow=0x5cc66)) returned 1 [0065.307] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0065.307] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Cashflow analysis.xltm", nBufferLength=0x105, lpBuffer=0x3be270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Cashflow analysis.xltm", lpFilePart=0x0) returned 0x50 [0065.307] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0065.307] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Cashflow analysis.xltm" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\cashflow analysis.xltm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0065.307] GetFileType (hFile=0x444) returned 0x1 [0065.307] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6c0) returned 1 [0065.307] GetFileType (hFile=0x444) returned 0x1 [0065.307] ReadFile (in: hFile=0x444, lpBuffer=0x22169a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be7d8, lpOverlapped=0x0 | out: lpBuffer=0x22169a8*, lpNumberOfBytesRead=0x3be7d8*=0x1000, lpOverlapped=0x0) returned 1 [0065.363] CloseHandle (hObject=0x444) returned 1 [0065.402] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Cashflow analysis.xltm", nBufferLength=0x105, lpBuffer=0x3be270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Cashflow analysis.xltm", lpFilePart=0x0) returned 0x50 [0065.402] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0065.402] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Cashflow analysis.xltm" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\cashflow analysis.xltm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0065.403] GetFileType (hFile=0x444) returned 0x1 [0065.403] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6c0) returned 1 [0065.403] GetFileType (hFile=0x444) returned 0x1 [0065.403] WriteFile (in: hFile=0x444, lpBuffer=0x22146e8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be888, lpOverlapped=0x0 | out: lpBuffer=0x22146e8*, lpNumberOfBytesWritten=0x3be888*=0x2000, lpOverlapped=0x0) returned 1 [0065.403] CloseHandle (hObject=0x444) returned 1 [0065.403] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Cashflow analysis.xltm", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Cashflow analysis.xltm", lpFilePart=0x0) returned 0x50 [0065.403] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Cashflow analysis.xltm.xuy", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Cashflow analysis.xltm.xuy", lpFilePart=0x0) returned 0x54 [0065.403] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0065.403] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Cashflow analysis.xltm" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\cashflow analysis.xltm"), fInfoLevelId=0x0, lpFileInformation=0x3be8a0 | out: lpFileInformation=0x3be8a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87b2d852, ftCreationTime.dwHighDateTime=0x1d2d438, ftLastAccessTime.dwLowDateTime=0x87b2d852, ftLastAccessTime.dwHighDateTime=0x1d2d438, ftLastWriteTime.dwLowDateTime=0x12d3cf7d, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x5cc66)) returned 1 [0065.403] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0065.404] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Cashflow analysis.xltm" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\cashflow analysis.xltm"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Cashflow analysis.xltm.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\cashflow analysis.xltm.xuy")) returned 1 [0065.404] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Email Insights.xltm", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Email Insights.xltm", lpFilePart=0x0) returned 0x4d [0065.404] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0065.404] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Email Insights.xltm" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\email insights.xltm"), fInfoLevelId=0x0, lpFileInformation=0x2292db0 | out: lpFileInformation=0x2292db0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88523410, ftCreationTime.dwHighDateTime=0x1d2d438, ftLastAccessTime.dwLowDateTime=0x88523410, ftLastAccessTime.dwHighDateTime=0x1d2d438, ftLastWriteTime.dwLowDateTime=0xd02e6c00, ftLastWriteTime.dwHighDateTime=0x1d288bf, nFileSizeHigh=0x0, nFileSizeLow=0xb431d)) returned 1 [0065.405] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0065.405] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Email Insights.xltm", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Email Insights.xltm", lpFilePart=0x0) returned 0x4d [0065.405] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0065.405] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Email Insights.xltm" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\email insights.xltm"), fInfoLevelId=0x0, lpFileInformation=0x2292f10 | out: lpFileInformation=0x2292f10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88523410, ftCreationTime.dwHighDateTime=0x1d2d438, ftLastAccessTime.dwLowDateTime=0x88523410, ftLastAccessTime.dwHighDateTime=0x1d2d438, ftLastWriteTime.dwLowDateTime=0xd02e6c00, ftLastWriteTime.dwHighDateTime=0x1d288bf, nFileSizeHigh=0x0, nFileSizeLow=0xb431d)) returned 1 [0065.405] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0065.405] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Email Insights.xltm", nBufferLength=0x105, lpBuffer=0x3be270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Email Insights.xltm", lpFilePart=0x0) returned 0x4d [0065.405] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0065.406] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Email Insights.xltm" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\email insights.xltm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0065.406] GetFileType (hFile=0x444) returned 0x1 [0065.406] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6c0) returned 1 [0065.406] GetFileType (hFile=0x444) returned 0x1 [0065.406] ReadFile (in: hFile=0x444, lpBuffer=0x2295300, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be7d8, lpOverlapped=0x0 | out: lpBuffer=0x2295300*, lpNumberOfBytesRead=0x3be7d8*=0x1000, lpOverlapped=0x0) returned 1 [0065.439] CloseHandle (hObject=0x444) returned 1 [0065.577] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Email Insights.xltm", nBufferLength=0x105, lpBuffer=0x3be270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Email Insights.xltm", lpFilePart=0x0) returned 0x4d [0065.577] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0065.577] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Email Insights.xltm" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\email insights.xltm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0065.578] GetFileType (hFile=0x444) returned 0x1 [0065.578] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6c0) returned 1 [0065.578] GetFileType (hFile=0x444) returned 0x1 [0065.578] WriteFile (in: hFile=0x444, lpBuffer=0x2293050*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be888, lpOverlapped=0x0 | out: lpBuffer=0x2293050*, lpNumberOfBytesWritten=0x3be888*=0x2000, lpOverlapped=0x0) returned 1 [0065.578] CloseHandle (hObject=0x444) returned 1 [0065.578] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Email Insights.xltm", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Email Insights.xltm", lpFilePart=0x0) returned 0x4d [0065.578] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Email Insights.xltm.xuy", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Email Insights.xltm.xuy", lpFilePart=0x0) returned 0x51 [0065.578] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0065.578] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Email Insights.xltm" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\email insights.xltm"), fInfoLevelId=0x0, lpFileInformation=0x3be8a0 | out: lpFileInformation=0x3be8a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88523410, ftCreationTime.dwHighDateTime=0x1d2d438, ftLastAccessTime.dwLowDateTime=0x88523410, ftLastAccessTime.dwHighDateTime=0x1d2d438, ftLastWriteTime.dwLowDateTime=0x12f06a77, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xb431d)) returned 1 [0065.578] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0065.578] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Email Insights.xltm" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\email insights.xltm"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Email Insights.xltm.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\email insights.xltm.xuy")) returned 1 [0065.579] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Normal.dotm", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Normal.dotm", lpFilePart=0x0) returned 0x45 [0065.579] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0065.579] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Normal.dotm" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\normal.dotm"), fInfoLevelId=0x0, lpFileInformation=0x23116e0 | out: lpFileInformation=0x23116e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x551935ba, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0xaf33b0f8, ftLastAccessTime.dwHighDateTime=0x1d3aaaf, ftLastWriteTime.dwLowDateTime=0xaf4ac686, ftLastWriteTime.dwHighDateTime=0x1d3aaaf, nFileSizeHigh=0x0, nFileSizeLow=0x49a5)) returned 1 [0065.579] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0065.579] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Normal.dotm", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Normal.dotm", lpFilePart=0x0) returned 0x45 [0065.579] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0065.579] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Normal.dotm" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\normal.dotm"), fInfoLevelId=0x0, lpFileInformation=0x2311820 | out: lpFileInformation=0x2311820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x551935ba, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0xaf33b0f8, ftLastAccessTime.dwHighDateTime=0x1d3aaaf, ftLastWriteTime.dwLowDateTime=0xaf4ac686, ftLastWriteTime.dwHighDateTime=0x1d3aaaf, nFileSizeHigh=0x0, nFileSizeLow=0x49a5)) returned 1 [0065.579] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0065.579] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Normal.dotm", nBufferLength=0x105, lpBuffer=0x3be270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Normal.dotm", lpFilePart=0x0) returned 0x45 [0065.579] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0065.580] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Normal.dotm" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\normal.dotm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0065.580] GetFileType (hFile=0x444) returned 0x1 [0065.580] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6c0) returned 1 [0065.580] GetFileType (hFile=0x444) returned 0x1 [0065.580] ReadFile (in: hFile=0x444, lpBuffer=0x2313bd0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be7d8, lpOverlapped=0x0 | out: lpBuffer=0x2313bd0*, lpNumberOfBytesRead=0x3be7d8*=0x1000, lpOverlapped=0x0) returned 1 [0065.778] CloseHandle (hObject=0x444) returned 1 [0065.832] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Normal.dotm", nBufferLength=0x105, lpBuffer=0x3be270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Normal.dotm", lpFilePart=0x0) returned 0x45 [0065.832] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0065.832] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Normal.dotm" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\normal.dotm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0065.832] GetFileType (hFile=0x444) returned 0x1 [0065.832] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6c0) returned 1 [0065.833] GetFileType (hFile=0x444) returned 0x1 [0065.833] WriteFile (in: hFile=0x444, lpBuffer=0x215b798*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be888, lpOverlapped=0x0 | out: lpBuffer=0x215b798*, lpNumberOfBytesWritten=0x3be888*=0x2000, lpOverlapped=0x0) returned 1 [0065.833] CloseHandle (hObject=0x444) returned 1 [0065.833] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Normal.dotm", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Normal.dotm", lpFilePart=0x0) returned 0x45 [0065.833] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Normal.dotm.xuy", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Normal.dotm.xuy", lpFilePart=0x0) returned 0x49 [0065.833] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0065.833] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Normal.dotm" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\normal.dotm"), fInfoLevelId=0x0, lpFileInformation=0x3be8a0 | out: lpFileInformation=0x3be8a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x551935ba, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0xaf33b0f8, ftLastAccessTime.dwHighDateTime=0x1d3aaaf, ftLastWriteTime.dwLowDateTime=0x13168fbe, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x49a5)) returned 1 [0065.833] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0065.833] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Normal.dotm" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\normal.dotm"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Normal.dotm.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\normal.dotm.xuy")) returned 1 [0065.834] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Process Map for Basic Flowchart.xltx", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Process Map for Basic Flowchart.xltx", lpFilePart=0x0) returned 0x5e [0065.834] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0065.834] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Process Map for Basic Flowchart.xltx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\process map for basic flowchart.xltx"), fInfoLevelId=0x0, lpFileInformation=0x2193038 | out: lpFileInformation=0x2193038*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87f14aba, ftCreationTime.dwHighDateTime=0x1d2d438, ftLastAccessTime.dwLowDateTime=0x87f14aba, ftLastAccessTime.dwHighDateTime=0x1d2d438, ftLastWriteTime.dwLowDateTime=0xbf39700, ftLastWriteTime.dwHighDateTime=0x1d2ad83, nFileSizeHigh=0x0, nFileSizeLow=0x1ad7d)) returned 1 [0065.834] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0065.834] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Process Map for Basic Flowchart.xltx", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Process Map for Basic Flowchart.xltx", lpFilePart=0x0) returned 0x5e [0065.834] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0065.834] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Process Map for Basic Flowchart.xltx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\process map for basic flowchart.xltx"), fInfoLevelId=0x0, lpFileInformation=0x21931e0 | out: lpFileInformation=0x21931e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87f14aba, ftCreationTime.dwHighDateTime=0x1d2d438, ftLastAccessTime.dwLowDateTime=0x87f14aba, ftLastAccessTime.dwHighDateTime=0x1d2d438, ftLastWriteTime.dwLowDateTime=0xbf39700, ftLastWriteTime.dwHighDateTime=0x1d2ad83, nFileSizeHigh=0x0, nFileSizeLow=0x1ad7d)) returned 1 [0065.834] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0065.834] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Process Map for Basic Flowchart.xltx", nBufferLength=0x105, lpBuffer=0x3be270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Process Map for Basic Flowchart.xltx", lpFilePart=0x0) returned 0x5e [0065.834] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0065.834] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Process Map for Basic Flowchart.xltx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\process map for basic flowchart.xltx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0065.835] GetFileType (hFile=0x444) returned 0x1 [0065.835] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6c0) returned 1 [0065.835] GetFileType (hFile=0x444) returned 0x1 [0065.835] ReadFile (in: hFile=0x444, lpBuffer=0x2195660, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be7d8, lpOverlapped=0x0 | out: lpBuffer=0x2195660*, lpNumberOfBytesRead=0x3be7d8*=0x1000, lpOverlapped=0x0) returned 1 [0065.848] CloseHandle (hObject=0x444) returned 1 [0065.848] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Process Map for Basic Flowchart.xltx", nBufferLength=0x105, lpBuffer=0x3be270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Process Map for Basic Flowchart.xltx", lpFilePart=0x0) returned 0x5e [0065.848] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0065.848] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Process Map for Basic Flowchart.xltx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\process map for basic flowchart.xltx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0065.848] GetFileType (hFile=0x444) returned 0x1 [0065.848] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6c0) returned 1 [0065.848] GetFileType (hFile=0x444) returned 0x1 [0065.848] WriteFile (in: hFile=0x444, lpBuffer=0x2193368*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be888, lpOverlapped=0x0 | out: lpBuffer=0x2193368*, lpNumberOfBytesWritten=0x3be888*=0x2000, lpOverlapped=0x0) returned 1 [0065.848] CloseHandle (hObject=0x444) returned 1 [0065.849] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Process Map for Basic Flowchart.xltx", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Process Map for Basic Flowchart.xltx", lpFilePart=0x0) returned 0x5e [0065.849] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Process Map for Basic Flowchart.xltx.xuy", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Process Map for Basic Flowchart.xltx.xuy", lpFilePart=0x0) returned 0x62 [0065.849] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0065.849] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Process Map for Basic Flowchart.xltx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\process map for basic flowchart.xltx"), fInfoLevelId=0x0, lpFileInformation=0x3be8a0 | out: lpFileInformation=0x3be8a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87f14aba, ftCreationTime.dwHighDateTime=0x1d2d438, ftLastAccessTime.dwLowDateTime=0x87f14aba, ftLastAccessTime.dwHighDateTime=0x1d2d438, ftLastWriteTime.dwLowDateTime=0x1318f5dc, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x1ad7d)) returned 1 [0065.849] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0065.849] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Process Map for Basic Flowchart.xltx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\process map for basic flowchart.xltx"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Process Map for Basic Flowchart.xltx.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\process map for basic flowchart.xltx.xuy")) returned 1 [0065.849] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Process Map for Cross-Functional Flowchart.xltx", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Process Map for Cross-Functional Flowchart.xltx", lpFilePart=0x0) returned 0x69 [0065.850] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0065.850] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Process Map for Cross-Functional Flowchart.xltx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\process map for cross-functional flowchart.xltx"), fInfoLevelId=0x0, lpFileInformation=0x2211ae8 | out: lpFileInformation=0x2211ae8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87950be8, ftCreationTime.dwHighDateTime=0x1d2d438, ftLastAccessTime.dwLowDateTime=0x87950be8, ftLastAccessTime.dwHighDateTime=0x1d2d438, ftLastWriteTime.dwLowDateTime=0xa654da00, ftLastWriteTime.dwHighDateTime=0x1d2ad85, nFileSizeHigh=0x0, nFileSizeLow=0x2355e)) returned 1 [0065.850] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0065.850] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Process Map for Cross-Functional Flowchart.xltx", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Process Map for Cross-Functional Flowchart.xltx", lpFilePart=0x0) returned 0x69 [0065.850] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0065.850] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Process Map for Cross-Functional Flowchart.xltx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\process map for cross-functional flowchart.xltx"), fInfoLevelId=0x0, lpFileInformation=0x2211cb8 | out: lpFileInformation=0x2211cb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87950be8, ftCreationTime.dwHighDateTime=0x1d2d438, ftLastAccessTime.dwLowDateTime=0x87950be8, ftLastAccessTime.dwHighDateTime=0x1d2d438, ftLastWriteTime.dwLowDateTime=0xa654da00, ftLastWriteTime.dwHighDateTime=0x1d2ad85, nFileSizeHigh=0x0, nFileSizeLow=0x2355e)) returned 1 [0065.850] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0065.850] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Process Map for Cross-Functional Flowchart.xltx", nBufferLength=0x105, lpBuffer=0x3be270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Process Map for Cross-Functional Flowchart.xltx", lpFilePart=0x0) returned 0x69 [0065.850] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0065.850] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Process Map for Cross-Functional Flowchart.xltx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\process map for cross-functional flowchart.xltx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0065.850] GetFileType (hFile=0x444) returned 0x1 [0065.850] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6c0) returned 1 [0065.850] GetFileType (hFile=0x444) returned 0x1 [0065.850] ReadFile (in: hFile=0x444, lpBuffer=0x2214188, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be7d8, lpOverlapped=0x0 | out: lpBuffer=0x2214188*, lpNumberOfBytesRead=0x3be7d8*=0x1000, lpOverlapped=0x0) returned 1 [0065.964] CloseHandle (hObject=0x444) returned 1 [0066.130] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Process Map for Cross-Functional Flowchart.xltx", nBufferLength=0x105, lpBuffer=0x3be270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Process Map for Cross-Functional Flowchart.xltx", lpFilePart=0x0) returned 0x69 [0066.130] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0066.130] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Process Map for Cross-Functional Flowchart.xltx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\process map for cross-functional flowchart.xltx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0066.131] GetFileType (hFile=0x444) returned 0x1 [0066.131] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6c0) returned 1 [0066.131] GetFileType (hFile=0x444) returned 0x1 [0066.131] WriteFile (in: hFile=0x444, lpBuffer=0x2211e68*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be888, lpOverlapped=0x0 | out: lpBuffer=0x2211e68*, lpNumberOfBytesWritten=0x3be888*=0x2000, lpOverlapped=0x0) returned 1 [0066.131] CloseHandle (hObject=0x444) returned 1 [0066.131] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Process Map for Cross-Functional Flowchart.xltx", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Process Map for Cross-Functional Flowchart.xltx", lpFilePart=0x0) returned 0x69 [0066.131] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Process Map for Cross-Functional Flowchart.xltx.xuy", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Process Map for Cross-Functional Flowchart.xltx.xuy", lpFilePart=0x0) returned 0x6d [0066.131] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0066.131] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Process Map for Cross-Functional Flowchart.xltx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\process map for cross-functional flowchart.xltx"), fInfoLevelId=0x0, lpFileInformation=0x3be8a0 | out: lpFileInformation=0x3be8a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87950be8, ftCreationTime.dwHighDateTime=0x1d2d438, ftLastAccessTime.dwLowDateTime=0x87950be8, ftLastAccessTime.dwHighDateTime=0x1d2d438, ftLastWriteTime.dwLowDateTime=0x1343de2f, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2355e)) returned 1 [0066.131] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0066.131] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Process Map for Cross-Functional Flowchart.xltx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\process map for cross-functional flowchart.xltx"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Process Map for Cross-Functional Flowchart.xltx.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\process map for cross-functional flowchart.xltx.xuy")) returned 1 [0066.136] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Stock symbols comparison.xltm", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Stock symbols comparison.xltm", lpFilePart=0x0) returned 0x57 [0066.136] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0066.136] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Stock symbols comparison.xltm" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\stock symbols comparison.xltm"), fInfoLevelId=0x0, lpFileInformation=0x2290680 | out: lpFileInformation=0x2290680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87b075f3, ftCreationTime.dwHighDateTime=0x1d2d438, ftLastAccessTime.dwLowDateTime=0x87b075f3, ftLastAccessTime.dwHighDateTime=0x1d2d438, ftLastWriteTime.dwLowDateTime=0x85f0b800, ftLastWriteTime.dwHighDateTime=0x1d2b27c, nFileSizeHigh=0x0, nFileSizeLow=0x16438a)) returned 1 [0066.136] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0066.136] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Stock symbols comparison.xltm", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Stock symbols comparison.xltm", lpFilePart=0x0) returned 0x57 [0066.136] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0066.136] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Stock symbols comparison.xltm" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\stock symbols comparison.xltm"), fInfoLevelId=0x0, lpFileInformation=0x2290808 | out: lpFileInformation=0x2290808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87b075f3, ftCreationTime.dwHighDateTime=0x1d2d438, ftLastAccessTime.dwLowDateTime=0x87b075f3, ftLastAccessTime.dwHighDateTime=0x1d2d438, ftLastWriteTime.dwLowDateTime=0x85f0b800, ftLastWriteTime.dwHighDateTime=0x1d2b27c, nFileSizeHigh=0x0, nFileSizeLow=0x16438a)) returned 1 [0066.136] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0066.136] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Stock symbols comparison.xltm", nBufferLength=0x105, lpBuffer=0x3be270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Stock symbols comparison.xltm", lpFilePart=0x0) returned 0x57 [0066.137] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0066.137] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Stock symbols comparison.xltm" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\stock symbols comparison.xltm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0066.137] GetFileType (hFile=0x444) returned 0x1 [0066.137] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6c0) returned 1 [0066.137] GetFileType (hFile=0x444) returned 0x1 [0066.137] ReadFile (in: hFile=0x444, lpBuffer=0x2292c48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be7d8, lpOverlapped=0x0 | out: lpBuffer=0x2292c48*, lpNumberOfBytesRead=0x3be7d8*=0x1000, lpOverlapped=0x0) returned 1 [0066.197] CloseHandle (hObject=0x444) returned 1 [0066.197] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Stock symbols comparison.xltm", nBufferLength=0x105, lpBuffer=0x3be270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Stock symbols comparison.xltm", lpFilePart=0x0) returned 0x57 [0066.197] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0066.197] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Stock symbols comparison.xltm" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\stock symbols comparison.xltm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0066.197] GetFileType (hFile=0x444) returned 0x1 [0066.197] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6c0) returned 1 [0066.197] GetFileType (hFile=0x444) returned 0x1 [0066.197] WriteFile (in: hFile=0x444, lpBuffer=0x2290970*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be888, lpOverlapped=0x0 | out: lpBuffer=0x2290970*, lpNumberOfBytesWritten=0x3be888*=0x2000, lpOverlapped=0x0) returned 1 [0066.197] CloseHandle (hObject=0x444) returned 1 [0066.198] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Stock symbols comparison.xltm", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Stock symbols comparison.xltm", lpFilePart=0x0) returned 0x57 [0066.198] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Stock symbols comparison.xltm.xuy", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Stock symbols comparison.xltm.xuy", lpFilePart=0x0) returned 0x5b [0066.198] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0066.198] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Stock symbols comparison.xltm" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\stock symbols comparison.xltm"), fInfoLevelId=0x0, lpFileInformation=0x3be8a0 | out: lpFileInformation=0x3be8a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87b075f3, ftCreationTime.dwHighDateTime=0x1d2d438, ftLastAccessTime.dwLowDateTime=0x87b075f3, ftLastAccessTime.dwHighDateTime=0x1d2d438, ftLastWriteTime.dwLowDateTime=0x134d6564, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x16438a)) returned 1 [0066.198] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0066.198] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Stock symbols comparison.xltm" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\stock symbols comparison.xltm"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Stock symbols comparison.xltm.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\stock symbols comparison.xltm.xuy")) returned 1 [0066.199] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Welcome to Excel.xltx", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Welcome to Excel.xltx", lpFilePart=0x0) returned 0x4f [0066.199] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0066.199] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Welcome to Excel.xltx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\welcome to excel.xltx"), fInfoLevelId=0x0, lpFileInformation=0x230f080 | out: lpFileInformation=0x230f080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x884450c3, ftCreationTime.dwHighDateTime=0x1d2d438, ftLastAccessTime.dwLowDateTime=0x884450c3, ftLastAccessTime.dwHighDateTime=0x1d2d438, ftLastWriteTime.dwLowDateTime=0x18fc1300, ftLastWriteTime.dwHighDateTime=0x1d2b2ba, nFileSizeHigh=0x0, nFileSizeLow=0x78c9b)) returned 1 [0066.199] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0066.199] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Welcome to Excel.xltx", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Welcome to Excel.xltx", lpFilePart=0x0) returned 0x4f [0066.199] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0066.199] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Welcome to Excel.xltx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\welcome to excel.xltx"), fInfoLevelId=0x0, lpFileInformation=0x230f1e8 | out: lpFileInformation=0x230f1e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x884450c3, ftCreationTime.dwHighDateTime=0x1d2d438, ftLastAccessTime.dwLowDateTime=0x884450c3, ftLastAccessTime.dwHighDateTime=0x1d2d438, ftLastWriteTime.dwLowDateTime=0x18fc1300, ftLastWriteTime.dwHighDateTime=0x1d2b2ba, nFileSizeHigh=0x0, nFileSizeLow=0x78c9b)) returned 1 [0066.199] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0066.199] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Welcome to Excel.xltx", nBufferLength=0x105, lpBuffer=0x3be270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Welcome to Excel.xltx", lpFilePart=0x0) returned 0x4f [0066.199] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0066.199] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Welcome to Excel.xltx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\welcome to excel.xltx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0066.199] GetFileType (hFile=0x444) returned 0x1 [0066.199] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6c0) returned 1 [0066.200] GetFileType (hFile=0x444) returned 0x1 [0066.200] ReadFile (in: hFile=0x444, lpBuffer=0x23115e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be7d8, lpOverlapped=0x0 | out: lpBuffer=0x23115e8*, lpNumberOfBytesRead=0x3be7d8*=0x1000, lpOverlapped=0x0) returned 1 [0066.295] CloseHandle (hObject=0x444) returned 1 [0066.471] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Welcome to Excel.xltx", nBufferLength=0x105, lpBuffer=0x3be270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Welcome to Excel.xltx", lpFilePart=0x0) returned 0x4f [0066.471] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0066.471] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Welcome to Excel.xltx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\welcome to excel.xltx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0066.471] GetFileType (hFile=0x444) returned 0x1 [0066.471] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6c0) returned 1 [0066.471] GetFileType (hFile=0x444) returned 0x1 [0066.471] WriteFile (in: hFile=0x444, lpBuffer=0x215b620*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be888, lpOverlapped=0x0 | out: lpBuffer=0x215b620*, lpNumberOfBytesWritten=0x3be888*=0x2000, lpOverlapped=0x0) returned 1 [0066.472] CloseHandle (hObject=0x444) returned 1 [0066.472] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Welcome to Excel.xltx", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Welcome to Excel.xltx", lpFilePart=0x0) returned 0x4f [0066.472] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Welcome to Excel.xltx.xuy", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Welcome to Excel.xltx.xuy", lpFilePart=0x0) returned 0x53 [0066.472] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0066.472] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Welcome to Excel.xltx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\welcome to excel.xltx"), fInfoLevelId=0x0, lpFileInformation=0x3be8a0 | out: lpFileInformation=0x3be8a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x884450c3, ftCreationTime.dwHighDateTime=0x1d2d438, ftLastAccessTime.dwLowDateTime=0x884450c3, ftLastAccessTime.dwHighDateTime=0x1d2d438, ftLastWriteTime.dwLowDateTime=0x1378501a, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x78c9b)) returned 1 [0066.472] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0066.472] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Welcome to Excel.xltx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\welcome to excel.xltx"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Welcome to Excel.xltx.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\welcome to excel.xltx.xuy")) returned 1 [0066.473] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0066.473] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent", lpFilePart=0x0) returned 0x45 [0066.473] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\", lpFilePart=0x0) returned 0x46 [0066.473] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7c70 [0066.473] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0066.474] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0066.474] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0066.474] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0066.474] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0066.474] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0066.474] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0066.474] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent", lpFilePart=0x0) returned 0x45 [0066.474] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\", lpFilePart=0x0) returned 0x46 [0066.474] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7550 [0066.474] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0066.474] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0066.474] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0066.475] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0066.475] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0066.475] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0066.475] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0066.475] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16", lpFilePart=0x0) returned 0x48 [0066.475] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\", lpFilePart=0x0) returned 0x49 [0066.475] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d78b0 [0066.475] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0066.475] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0066.475] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0066.475] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0066.475] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0066.476] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0066.476] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0066.476] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0066.476] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16", lpFilePart=0x0) returned 0x48 [0066.476] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\", lpFilePart=0x0) returned 0x49 [0066.476] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7c70 [0066.476] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0066.476] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0066.476] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0066.476] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0066.476] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0066.476] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0066.476] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0066.476] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0066.477] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed", lpFilePart=0x0) returned 0x50 [0066.477] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\", lpFilePart=0x0) returned 0x51 [0066.477] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d7370 [0066.477] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0066.477] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0066.478] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0066.478] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0066.478] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0066.478] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0066.478] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0066.478] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0066.478] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed", lpFilePart=0x0) returned 0x50 [0066.478] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\", lpFilePart=0x0) returned 0x51 [0066.478] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d7a30 [0066.478] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0066.478] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0066.478] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0066.479] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0066.479] FindClose (in: hFindFile=0x5d7a30 | out: hFindFile=0x5d7a30) returned 1 [0066.479] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0066.479] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0066.479] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0066.479] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes", lpFilePart=0x0) returned 0x60 [0066.479] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\", lpFilePart=0x0) returned 0x61 [0066.479] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d7c70 [0066.479] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0066.479] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0066.479] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0066.479] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0066.479] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0066.480] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0066.480] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0066.480] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes", lpFilePart=0x0) returned 0x60 [0066.480] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\", lpFilePart=0x0) returned 0x61 [0066.480] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d79d0 [0066.480] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0066.480] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0066.480] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0066.480] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0066.480] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0066.480] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0066.480] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0066.480] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033", nBufferLength=0x105, lpBuffer=0x3be130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033", lpFilePart=0x0) returned 0x65 [0066.480] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\", nBufferLength=0x105, lpBuffer=0x3be0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\", lpFilePart=0x0) returned 0x66 [0066.480] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\*", lpFindFileData=0x3be2e0 | out: lpFindFileData=0x3be2e0) returned 0x5d7370 [0066.482] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0066.482] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0066.482] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0066.482] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0066.483] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0066.483] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0066.483] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0066.483] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0066.483] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0066.483] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0066.484] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0066.484] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0066.484] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0066.484] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0066.484] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0066.484] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0066.484] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0066.484] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0066.484] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0066.484] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0066.485] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0066.485] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0066.485] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0066.485] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0066.485] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0066.485] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 0 [0066.485] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0066.486] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0066.486] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0066.486] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0066.486] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033", nBufferLength=0x105, lpBuffer=0x3be130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033", lpFilePart=0x0) returned 0x65 [0066.486] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\", nBufferLength=0x105, lpBuffer=0x3be0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\", lpFilePart=0x0) returned 0x66 [0066.486] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\*", lpFindFileData=0x3be2e0 | out: lpFindFileData=0x3be2e0) returned 0x5d79d0 [0066.487] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0066.487] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0066.487] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0066.487] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0066.487] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0066.488] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0066.488] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0066.488] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0066.488] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0066.488] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0066.488] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0066.489] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0066.489] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0066.489] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0066.489] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0066.489] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0066.489] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0066.489] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0066.490] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0066.490] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0066.490] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0066.490] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0066.490] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0066.490] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0066.490] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0066.490] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 0 [0066.491] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0066.491] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0066.491] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0066.491] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03090430[[fn=Banded]].thmx", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03090430[[fn=Banded]].thmx", lpFilePart=0x0) returned 0x82 [0066.491] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0066.491] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03090430[[fn=Banded]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03090430[[fn=banded]].thmx"), fInfoLevelId=0x0, lpFileInformation=0x21a1f98 | out: lpFileInformation=0x21a1f98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f502714, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x6f502714, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x6f5289b3, ftLastWriteTime.dwHighDateTime=0x1d301c4, nFileSizeHigh=0x0, nFileSizeLow=0x893c1)) returned 1 [0066.492] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0066.492] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03090430[[fn=Banded]].thmx", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03090430[[fn=Banded]].thmx", lpFilePart=0x0) returned 0x82 [0066.492] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0066.492] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03090430[[fn=Banded]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03090430[[fn=banded]].thmx"), fInfoLevelId=0x0, lpFileInformation=0x21a2178 | out: lpFileInformation=0x21a2178*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f502714, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x6f502714, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x6f5289b3, ftLastWriteTime.dwHighDateTime=0x1d301c4, nFileSizeHigh=0x0, nFileSizeLow=0x893c1)) returned 1 [0066.492] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0066.492] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03090430[[fn=Banded]].thmx", nBufferLength=0x105, lpBuffer=0x3be040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03090430[[fn=Banded]].thmx", lpFilePart=0x0) returned 0x82 [0066.492] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0066.492] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03090430[[fn=Banded]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03090430[[fn=banded]].thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0066.493] GetFileType (hFile=0x444) returned 0x1 [0066.493] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be490) returned 1 [0066.493] GetFileType (hFile=0x444) returned 0x1 [0066.493] ReadFile (in: hFile=0x444, lpBuffer=0x21a4668, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5a8, lpOverlapped=0x0 | out: lpBuffer=0x21a4668*, lpNumberOfBytesRead=0x3be5a8*=0x1000, lpOverlapped=0x0) returned 1 [0066.540] CloseHandle (hObject=0x444) returned 1 [0066.561] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03090430[[fn=Banded]].thmx", nBufferLength=0x105, lpBuffer=0x3be040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03090430[[fn=Banded]].thmx", lpFilePart=0x0) returned 0x82 [0066.561] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0066.561] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03090430[[fn=Banded]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03090430[[fn=banded]].thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0066.561] GetFileType (hFile=0x444) returned 0x1 [0066.561] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be490) returned 1 [0066.561] GetFileType (hFile=0x444) returned 0x1 [0066.561] WriteFile (in: hFile=0x444, lpBuffer=0x21a2338*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be658, lpOverlapped=0x0 | out: lpBuffer=0x21a2338*, lpNumberOfBytesWritten=0x3be658*=0x2000, lpOverlapped=0x0) returned 1 [0066.562] CloseHandle (hObject=0x444) returned 1 [0066.562] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03090430[[fn=Banded]].thmx", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03090430[[fn=Banded]].thmx", lpFilePart=0x0) returned 0x82 [0066.562] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03090430[[fn=Banded]].thmx.xuy", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03090430[[fn=Banded]].thmx.xuy", lpFilePart=0x0) returned 0x86 [0066.562] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0066.562] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03090430[[fn=Banded]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03090430[[fn=banded]].thmx"), fInfoLevelId=0x0, lpFileInformation=0x3be670 | out: lpFileInformation=0x3be670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f502714, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x6f502714, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x13869dee, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x893c1)) returned 1 [0066.562] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0066.562] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03090430[[fn=Banded]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03090430[[fn=banded]].thmx"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03090430[[fn=Banded]].thmx.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03090430[[fn=banded]].thmx.xuy")) returned 1 [0066.563] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03090434[[fn=Wood Type]].thmx", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03090434[[fn=Wood Type]].thmx", lpFilePart=0x0) returned 0x85 [0066.563] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0066.563] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03090434[[fn=Wood Type]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03090434[[fn=wood type]].thmx"), fInfoLevelId=0x0, lpFileInformation=0x2220c00 | out: lpFileInformation=0x2220c00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f67fe68, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x6f67fe68, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x6f67fe68, ftLastWriteTime.dwHighDateTime=0x1d301c4, nFileSizeHigh=0x0, nFileSizeLow=0x192bb1)) returned 1 [0066.563] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0066.564] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03090434[[fn=Wood Type]].thmx", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03090434[[fn=Wood Type]].thmx", lpFilePart=0x0) returned 0x85 [0066.564] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0066.564] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03090434[[fn=Wood Type]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03090434[[fn=wood type]].thmx"), fInfoLevelId=0x0, lpFileInformation=0x2220de8 | out: lpFileInformation=0x2220de8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f67fe68, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x6f67fe68, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x6f67fe68, ftLastWriteTime.dwHighDateTime=0x1d301c4, nFileSizeHigh=0x0, nFileSizeLow=0x192bb1)) returned 1 [0066.564] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0066.564] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03090434[[fn=Wood Type]].thmx", nBufferLength=0x105, lpBuffer=0x3be040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03090434[[fn=Wood Type]].thmx", lpFilePart=0x0) returned 0x85 [0066.564] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0066.564] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03090434[[fn=Wood Type]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03090434[[fn=wood type]].thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0066.564] GetFileType (hFile=0x444) returned 0x1 [0066.564] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be490) returned 1 [0066.564] GetFileType (hFile=0x444) returned 0x1 [0066.564] ReadFile (in: hFile=0x444, lpBuffer=0x22232e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5a8, lpOverlapped=0x0 | out: lpBuffer=0x22232e8*, lpNumberOfBytesRead=0x3be5a8*=0x1000, lpOverlapped=0x0) returned 1 [0066.588] CloseHandle (hObject=0x444) returned 1 [0066.588] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03090434[[fn=Wood Type]].thmx", nBufferLength=0x105, lpBuffer=0x3be040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03090434[[fn=Wood Type]].thmx", lpFilePart=0x0) returned 0x85 [0066.588] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0066.589] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03090434[[fn=Wood Type]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03090434[[fn=wood type]].thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0066.589] GetFileType (hFile=0x444) returned 0x1 [0066.589] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be490) returned 1 [0066.589] GetFileType (hFile=0x444) returned 0x1 [0066.589] WriteFile (in: hFile=0x444, lpBuffer=0x2220fb0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be658, lpOverlapped=0x0 | out: lpBuffer=0x2220fb0*, lpNumberOfBytesWritten=0x3be658*=0x2000, lpOverlapped=0x0) returned 1 [0066.589] CloseHandle (hObject=0x444) returned 1 [0066.589] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03090434[[fn=Wood Type]].thmx", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03090434[[fn=Wood Type]].thmx", lpFilePart=0x0) returned 0x85 [0066.589] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03090434[[fn=Wood Type]].thmx.xuy", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03090434[[fn=Wood Type]].thmx.xuy", lpFilePart=0x0) returned 0x89 [0066.589] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0066.589] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03090434[[fn=Wood Type]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03090434[[fn=wood type]].thmx"), fInfoLevelId=0x0, lpFileInformation=0x3be670 | out: lpFileInformation=0x3be670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f67fe68, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x6f67fe68, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x138900c8, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x192bb1)) returned 1 [0066.589] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0066.589] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03090434[[fn=Wood Type]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03090434[[fn=wood type]].thmx"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03090434[[fn=Wood Type]].thmx.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03090434[[fn=wood type]].thmx.xuy")) returned 1 [0066.590] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457444[[fn=Basis]].thmx", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457444[[fn=Basis]].thmx", lpFilePart=0x0) returned 0x81 [0066.590] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0066.590] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457444[[fn=Basis]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03457444[[fn=basis]].thmx"), fInfoLevelId=0x0, lpFileInformation=0x229f8a0 | out: lpFileInformation=0x229f8a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f60d73b, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x6f60d73b, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x6f633982, ftLastWriteTime.dwHighDateTime=0x1d301c4, nFileSizeHigh=0x0, nFileSizeLow=0x883d3)) returned 1 [0066.591] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0066.591] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457444[[fn=Basis]].thmx", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457444[[fn=Basis]].thmx", lpFilePart=0x0) returned 0x81 [0066.591] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0066.591] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457444[[fn=Basis]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03457444[[fn=basis]].thmx"), fInfoLevelId=0x0, lpFileInformation=0x229fa78 | out: lpFileInformation=0x229fa78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f60d73b, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x6f60d73b, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x6f633982, ftLastWriteTime.dwHighDateTime=0x1d301c4, nFileSizeHigh=0x0, nFileSizeLow=0x883d3)) returned 1 [0066.591] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0066.591] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457444[[fn=Basis]].thmx", nBufferLength=0x105, lpBuffer=0x3be040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457444[[fn=Basis]].thmx", lpFilePart=0x0) returned 0x81 [0066.591] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0066.591] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457444[[fn=Basis]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03457444[[fn=basis]].thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0066.592] GetFileType (hFile=0x444) returned 0x1 [0066.592] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be490) returned 1 [0066.592] GetFileType (hFile=0x444) returned 0x1 [0066.592] ReadFile (in: hFile=0x444, lpBuffer=0x22a1f58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5a8, lpOverlapped=0x0 | out: lpBuffer=0x22a1f58*, lpNumberOfBytesRead=0x3be5a8*=0x1000, lpOverlapped=0x0) returned 1 [0066.627] CloseHandle (hObject=0x444) returned 1 [0066.627] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457444[[fn=Basis]].thmx", nBufferLength=0x105, lpBuffer=0x3be040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457444[[fn=Basis]].thmx", lpFilePart=0x0) returned 0x81 [0066.627] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0066.627] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457444[[fn=Basis]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03457444[[fn=basis]].thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0066.628] GetFileType (hFile=0x444) returned 0x1 [0066.628] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be490) returned 1 [0066.628] GetFileType (hFile=0x444) returned 0x1 [0066.628] WriteFile (in: hFile=0x444, lpBuffer=0x229fc30*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be658, lpOverlapped=0x0 | out: lpBuffer=0x229fc30*, lpNumberOfBytesWritten=0x3be658*=0x2000, lpOverlapped=0x0) returned 1 [0066.628] CloseHandle (hObject=0x444) returned 1 [0066.628] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457444[[fn=Basis]].thmx", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457444[[fn=Basis]].thmx", lpFilePart=0x0) returned 0x81 [0066.628] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457444[[fn=Basis]].thmx.xuy", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457444[[fn=Basis]].thmx.xuy", lpFilePart=0x0) returned 0x85 [0066.628] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0066.628] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457444[[fn=Basis]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03457444[[fn=basis]].thmx"), fInfoLevelId=0x0, lpFileInformation=0x3be670 | out: lpFileInformation=0x3be670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f60d73b, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x6f60d73b, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x139029b0, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x883d3)) returned 1 [0066.628] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0066.628] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457444[[fn=Basis]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03457444[[fn=basis]].thmx"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457444[[fn=Basis]].thmx.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03457444[[fn=basis]].thmx.xuy")) returned 1 [0066.629] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457464[[fn=Dividend]].thmx", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457464[[fn=Dividend]].thmx", lpFilePart=0x0) returned 0x84 [0066.629] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0066.629] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457464[[fn=Dividend]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03457464[[fn=dividend]].thmx"), fInfoLevelId=0x0, lpFileInformation=0x231e4e8 | out: lpFileInformation=0x231e4e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fdf3153, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x6fdf3153, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x6fe193e7, ftLastWriteTime.dwHighDateTime=0x1d301c4, nFileSizeHigh=0x0, nFileSizeLow=0x8b615)) returned 1 [0066.631] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0066.631] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457464[[fn=Dividend]].thmx", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457464[[fn=Dividend]].thmx", lpFilePart=0x0) returned 0x84 [0066.631] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0066.631] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457464[[fn=Dividend]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03457464[[fn=dividend]].thmx"), fInfoLevelId=0x0, lpFileInformation=0x231e6d0 | out: lpFileInformation=0x231e6d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fdf3153, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x6fdf3153, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x6fe193e7, ftLastWriteTime.dwHighDateTime=0x1d301c4, nFileSizeHigh=0x0, nFileSizeLow=0x8b615)) returned 1 [0066.631] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0066.631] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457464[[fn=Dividend]].thmx", nBufferLength=0x105, lpBuffer=0x3be040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457464[[fn=Dividend]].thmx", lpFilePart=0x0) returned 0x84 [0066.631] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0066.631] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457464[[fn=Dividend]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03457464[[fn=dividend]].thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0066.631] GetFileType (hFile=0x444) returned 0x1 [0066.631] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be490) returned 1 [0066.631] GetFileType (hFile=0x444) returned 0x1 [0066.632] ReadFile (in: hFile=0x444, lpBuffer=0x2320bd0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5a8, lpOverlapped=0x0 | out: lpBuffer=0x2320bd0*, lpNumberOfBytesRead=0x3be5a8*=0x1000, lpOverlapped=0x0) returned 1 [0066.684] CloseHandle (hObject=0x444) returned 1 [0066.684] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457464[[fn=Dividend]].thmx", nBufferLength=0x105, lpBuffer=0x3be040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457464[[fn=Dividend]].thmx", lpFilePart=0x0) returned 0x84 [0066.685] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0066.685] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457464[[fn=Dividend]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03457464[[fn=dividend]].thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0066.685] GetFileType (hFile=0x444) returned 0x1 [0066.685] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be490) returned 1 [0066.685] GetFileType (hFile=0x444) returned 0x1 [0066.685] WriteFile (in: hFile=0x444, lpBuffer=0x213bc10*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be658, lpOverlapped=0x0 | out: lpBuffer=0x213bc10*, lpNumberOfBytesWritten=0x3be658*=0x2000, lpOverlapped=0x0) returned 1 [0066.685] CloseHandle (hObject=0x444) returned 1 [0066.686] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457464[[fn=Dividend]].thmx", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457464[[fn=Dividend]].thmx", lpFilePart=0x0) returned 0x84 [0066.686] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457464[[fn=Dividend]].thmx.xuy", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457464[[fn=Dividend]].thmx.xuy", lpFilePart=0x0) returned 0x88 [0066.686] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0066.686] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457464[[fn=Dividend]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03457464[[fn=dividend]].thmx"), fInfoLevelId=0x0, lpFileInformation=0x3be670 | out: lpFileInformation=0x3be670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fdf3153, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x6fdf3153, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x139750b0, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x8b615)) returned 1 [0066.686] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0066.686] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457464[[fn=Dividend]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03457464[[fn=dividend]].thmx"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457464[[fn=Dividend]].thmx.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03457464[[fn=dividend]].thmx.xuy")) returned 1 [0066.687] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457475[[fn=Frame]].thmx", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457475[[fn=Frame]].thmx", lpFilePart=0x0) returned 0x81 [0066.687] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0066.687] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457475[[fn=Frame]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03457475[[fn=frame]].thmx"), fInfoLevelId=0x0, lpFileInformation=0x217d790 | out: lpFileInformation=0x217d790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fc296fa, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x6fc296fa, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x6fc4f827, ftLastWriteTime.dwHighDateTime=0x1d301c4, nFileSizeHigh=0x0, nFileSizeLow=0x7fb28)) returned 1 [0066.689] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0066.689] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457475[[fn=Frame]].thmx", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457475[[fn=Frame]].thmx", lpFilePart=0x0) returned 0x81 [0066.689] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0066.689] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457475[[fn=Frame]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03457475[[fn=frame]].thmx"), fInfoLevelId=0x0, lpFileInformation=0x217d968 | out: lpFileInformation=0x217d968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fc296fa, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x6fc296fa, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x6fc4f827, ftLastWriteTime.dwHighDateTime=0x1d301c4, nFileSizeHigh=0x0, nFileSizeLow=0x7fb28)) returned 1 [0066.689] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0066.689] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457475[[fn=Frame]].thmx", nBufferLength=0x105, lpBuffer=0x3be040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457475[[fn=Frame]].thmx", lpFilePart=0x0) returned 0x81 [0066.690] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0066.690] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457475[[fn=Frame]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03457475[[fn=frame]].thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0066.690] GetFileType (hFile=0x444) returned 0x1 [0066.690] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be490) returned 1 [0066.690] GetFileType (hFile=0x444) returned 0x1 [0066.690] ReadFile (in: hFile=0x444, lpBuffer=0x217fe48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5a8, lpOverlapped=0x0 | out: lpBuffer=0x217fe48*, lpNumberOfBytesRead=0x3be5a8*=0x1000, lpOverlapped=0x0) returned 1 [0066.717] CloseHandle (hObject=0x444) returned 1 [0066.717] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457475[[fn=Frame]].thmx", nBufferLength=0x105, lpBuffer=0x3be040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457475[[fn=Frame]].thmx", lpFilePart=0x0) returned 0x81 [0066.717] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0066.717] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457475[[fn=Frame]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03457475[[fn=frame]].thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0066.718] GetFileType (hFile=0x444) returned 0x1 [0066.718] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be490) returned 1 [0066.718] GetFileType (hFile=0x444) returned 0x1 [0066.718] WriteFile (in: hFile=0x444, lpBuffer=0x217db20*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be658, lpOverlapped=0x0 | out: lpBuffer=0x217db20*, lpNumberOfBytesWritten=0x3be658*=0x2000, lpOverlapped=0x0) returned 1 [0066.718] CloseHandle (hObject=0x444) returned 1 [0066.718] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457475[[fn=Frame]].thmx", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457475[[fn=Frame]].thmx", lpFilePart=0x0) returned 0x81 [0066.718] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457475[[fn=Frame]].thmx.xuy", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457475[[fn=Frame]].thmx.xuy", lpFilePart=0x0) returned 0x85 [0066.718] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0066.718] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457475[[fn=Frame]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03457475[[fn=frame]].thmx"), fInfoLevelId=0x0, lpFileInformation=0x3be670 | out: lpFileInformation=0x3be670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fc296fa, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x6fc296fa, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x139e7627, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x7fb28)) returned 1 [0066.718] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0066.718] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457475[[fn=Frame]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03457475[[fn=frame]].thmx"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457475[[fn=Frame]].thmx.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03457475[[fn=frame]].thmx.xuy")) returned 1 [0066.719] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457485[[fn=Mesh]].thmx", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457485[[fn=Mesh]].thmx", lpFilePart=0x0) returned 0x80 [0066.719] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0066.719] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457485[[fn=Mesh]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03457485[[fn=mesh]].thmx"), fInfoLevelId=0x0, lpFileInformation=0x21fc3d8 | out: lpFileInformation=0x21fc3d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71dbeda4, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x71dbeda4, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x71e31468, ftLastWriteTime.dwHighDateTime=0x1d301c4, nFileSizeHigh=0x0, nFileSizeLow=0x2ef7a4)) returned 1 [0066.722] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0066.722] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457485[[fn=Mesh]].thmx", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457485[[fn=Mesh]].thmx", lpFilePart=0x0) returned 0x80 [0066.722] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0066.722] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457485[[fn=Mesh]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03457485[[fn=mesh]].thmx"), fInfoLevelId=0x0, lpFileInformation=0x21fc5b0 | out: lpFileInformation=0x21fc5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71dbeda4, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x71dbeda4, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x71e31468, ftLastWriteTime.dwHighDateTime=0x1d301c4, nFileSizeHigh=0x0, nFileSizeLow=0x2ef7a4)) returned 1 [0066.722] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0066.722] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457485[[fn=Mesh]].thmx", nBufferLength=0x105, lpBuffer=0x3be040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457485[[fn=Mesh]].thmx", lpFilePart=0x0) returned 0x80 [0066.722] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0066.722] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457485[[fn=Mesh]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03457485[[fn=mesh]].thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0066.723] GetFileType (hFile=0x444) returned 0x1 [0066.723] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be490) returned 1 [0066.723] GetFileType (hFile=0x444) returned 0x1 [0066.723] ReadFile (in: hFile=0x444, lpBuffer=0x21fea90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5a8, lpOverlapped=0x0 | out: lpBuffer=0x21fea90*, lpNumberOfBytesRead=0x3be5a8*=0x1000, lpOverlapped=0x0) returned 1 [0066.765] CloseHandle (hObject=0x444) returned 1 [0066.765] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457485[[fn=Mesh]].thmx", nBufferLength=0x105, lpBuffer=0x3be040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457485[[fn=Mesh]].thmx", lpFilePart=0x0) returned 0x80 [0066.766] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0066.766] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457485[[fn=Mesh]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03457485[[fn=mesh]].thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0066.766] GetFileType (hFile=0x444) returned 0x1 [0066.766] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be490) returned 1 [0066.766] GetFileType (hFile=0x444) returned 0x1 [0066.766] WriteFile (in: hFile=0x444, lpBuffer=0x21fc768*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be658, lpOverlapped=0x0 | out: lpBuffer=0x21fc768*, lpNumberOfBytesWritten=0x3be658*=0x2000, lpOverlapped=0x0) returned 1 [0066.766] CloseHandle (hObject=0x444) returned 1 [0066.766] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457485[[fn=Mesh]].thmx", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457485[[fn=Mesh]].thmx", lpFilePart=0x0) returned 0x80 [0066.766] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457485[[fn=Mesh]].thmx.xuy", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457485[[fn=Mesh]].thmx.xuy", lpFilePart=0x0) returned 0x84 [0066.766] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0066.766] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457485[[fn=Mesh]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03457485[[fn=mesh]].thmx"), fInfoLevelId=0x0, lpFileInformation=0x3be670 | out: lpFileInformation=0x3be670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71dbeda4, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x71dbeda4, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x13a59e68, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2ef7a4)) returned 1 [0066.767] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0066.767] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457485[[fn=Mesh]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03457485[[fn=mesh]].thmx"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457485[[fn=Mesh]].thmx.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03457485[[fn=mesh]].thmx.xuy")) returned 1 [0066.767] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457491[[fn=Metropolitan]].thmx", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457491[[fn=Metropolitan]].thmx", lpFilePart=0x0) returned 0x88 [0066.767] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0066.767] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457491[[fn=Metropolitan]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03457491[[fn=metropolitan]].thmx"), fInfoLevelId=0x0, lpFileInformation=0x227b020 | out: lpFileInformation=0x227b020*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x709a15b0, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x709a15b0, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x709c7805, ftLastWriteTime.dwHighDateTime=0x1d301c4, nFileSizeHigh=0x0, nFileSizeLow=0xbddaf)) returned 1 [0066.768] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0066.768] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457491[[fn=Metropolitan]].thmx", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457491[[fn=Metropolitan]].thmx", lpFilePart=0x0) returned 0x88 [0066.768] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0066.768] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457491[[fn=Metropolitan]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03457491[[fn=metropolitan]].thmx"), fInfoLevelId=0x0, lpFileInformation=0x227b218 | out: lpFileInformation=0x227b218*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x709a15b0, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x709a15b0, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x709c7805, ftLastWriteTime.dwHighDateTime=0x1d301c4, nFileSizeHigh=0x0, nFileSizeLow=0xbddaf)) returned 1 [0066.768] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0066.768] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457491[[fn=Metropolitan]].thmx", nBufferLength=0x105, lpBuffer=0x3be040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457491[[fn=Metropolitan]].thmx", lpFilePart=0x0) returned 0x88 [0066.768] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0066.768] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457491[[fn=Metropolitan]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03457491[[fn=metropolitan]].thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0066.769] GetFileType (hFile=0x444) returned 0x1 [0066.769] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be490) returned 1 [0066.769] GetFileType (hFile=0x444) returned 0x1 [0066.769] ReadFile (in: hFile=0x444, lpBuffer=0x227d738, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5a8, lpOverlapped=0x0 | out: lpBuffer=0x227d738*, lpNumberOfBytesRead=0x3be5a8*=0x1000, lpOverlapped=0x0) returned 1 [0066.791] CloseHandle (hObject=0x444) returned 1 [0066.791] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457491[[fn=Metropolitan]].thmx", nBufferLength=0x105, lpBuffer=0x3be040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457491[[fn=Metropolitan]].thmx", lpFilePart=0x0) returned 0x88 [0066.791] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0066.791] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457491[[fn=Metropolitan]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03457491[[fn=metropolitan]].thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0066.791] GetFileType (hFile=0x444) returned 0x1 [0066.791] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be490) returned 1 [0066.791] GetFileType (hFile=0x444) returned 0x1 [0066.791] WriteFile (in: hFile=0x444, lpBuffer=0x227b3f0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be658, lpOverlapped=0x0 | out: lpBuffer=0x227b3f0*, lpNumberOfBytesWritten=0x3be658*=0x2000, lpOverlapped=0x0) returned 1 [0066.791] CloseHandle (hObject=0x444) returned 1 [0066.792] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457491[[fn=Metropolitan]].thmx", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457491[[fn=Metropolitan]].thmx", lpFilePart=0x0) returned 0x88 [0066.792] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457491[[fn=Metropolitan]].thmx.xuy", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457491[[fn=Metropolitan]].thmx.xuy", lpFilePart=0x0) returned 0x8c [0066.792] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0066.792] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457491[[fn=Metropolitan]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03457491[[fn=metropolitan]].thmx"), fInfoLevelId=0x0, lpFileInformation=0x3be670 | out: lpFileInformation=0x3be670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x709a15b0, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x709a15b0, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x13a7fea2, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xbddaf)) returned 1 [0066.792] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0066.792] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457491[[fn=Metropolitan]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03457491[[fn=metropolitan]].thmx"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457491[[fn=Metropolitan]].thmx.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03457491[[fn=metropolitan]].thmx.xuy")) returned 1 [0066.793] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457496[[fn=Parallax]].thmx", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457496[[fn=Parallax]].thmx", lpFilePart=0x0) returned 0x84 [0066.793] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0066.793] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457496[[fn=Parallax]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03457496[[fn=parallax]].thmx"), fInfoLevelId=0x0, lpFileInformation=0x22f9d18 | out: lpFileInformation=0x22f9d18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fd34607, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x6fd34607, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x6fd5a87f, ftLastWriteTime.dwHighDateTime=0x1d301c4, nFileSizeHigh=0x0, nFileSizeLow=0xe1c0f)) returned 1 [0066.793] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0066.793] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457496[[fn=Parallax]].thmx", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457496[[fn=Parallax]].thmx", lpFilePart=0x0) returned 0x84 [0066.793] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0066.793] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457496[[fn=Parallax]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03457496[[fn=parallax]].thmx"), fInfoLevelId=0x0, lpFileInformation=0x22f9f00 | out: lpFileInformation=0x22f9f00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fd34607, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x6fd34607, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x6fd5a87f, ftLastWriteTime.dwHighDateTime=0x1d301c4, nFileSizeHigh=0x0, nFileSizeLow=0xe1c0f)) returned 1 [0066.793] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0066.793] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457496[[fn=Parallax]].thmx", nBufferLength=0x105, lpBuffer=0x3be040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457496[[fn=Parallax]].thmx", lpFilePart=0x0) returned 0x84 [0066.793] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0066.793] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457496[[fn=Parallax]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03457496[[fn=parallax]].thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0066.794] GetFileType (hFile=0x444) returned 0x1 [0066.794] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be490) returned 1 [0066.794] GetFileType (hFile=0x444) returned 0x1 [0066.794] ReadFile (in: hFile=0x444, lpBuffer=0x22fc400, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5a8, lpOverlapped=0x0 | out: lpBuffer=0x22fc400*, lpNumberOfBytesRead=0x3be5a8*=0x1000, lpOverlapped=0x0) returned 1 [0066.852] CloseHandle (hObject=0x444) returned 1 [0066.852] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457496[[fn=Parallax]].thmx", nBufferLength=0x105, lpBuffer=0x3be040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457496[[fn=Parallax]].thmx", lpFilePart=0x0) returned 0x84 [0066.852] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0066.852] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457496[[fn=Parallax]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03457496[[fn=parallax]].thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0066.853] GetFileType (hFile=0x444) returned 0x1 [0066.853] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be490) returned 1 [0066.853] GetFileType (hFile=0x444) returned 0x1 [0066.853] WriteFile (in: hFile=0x444, lpBuffer=0x2141420*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be658, lpOverlapped=0x0 | out: lpBuffer=0x2141420*, lpNumberOfBytesWritten=0x3be658*=0x2000, lpOverlapped=0x0) returned 1 [0066.853] CloseHandle (hObject=0x444) returned 1 [0066.853] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457496[[fn=Parallax]].thmx", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457496[[fn=Parallax]].thmx", lpFilePart=0x0) returned 0x84 [0066.853] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457496[[fn=Parallax]].thmx.xuy", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457496[[fn=Parallax]].thmx.xuy", lpFilePart=0x0) returned 0x88 [0066.853] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0066.853] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457496[[fn=Parallax]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03457496[[fn=parallax]].thmx"), fInfoLevelId=0x0, lpFileInformation=0x3be670 | out: lpFileInformation=0x3be670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fd34607, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x6fd34607, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x13b188ab, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xe1c0f)) returned 1 [0066.853] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0066.853] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457496[[fn=Parallax]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03457496[[fn=parallax]].thmx"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457496[[fn=Parallax]].thmx.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03457496[[fn=parallax]].thmx.xuy")) returned 1 [0066.854] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457503[[fn=Quotable]].thmx", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457503[[fn=Quotable]].thmx", lpFilePart=0x0) returned 0x84 [0066.854] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0066.854] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457503[[fn=Quotable]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03457503[[fn=quotable]].thmx"), fInfoLevelId=0x0, lpFileInformation=0x217e1a0 | out: lpFileInformation=0x217e1a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x709eda88, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x709eda88, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x70a39f16, ftLastWriteTime.dwHighDateTime=0x1d301c4, nFileSizeHigh=0x0, nFileSizeLow=0xec122)) returned 1 [0066.854] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0066.854] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457503[[fn=Quotable]].thmx", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457503[[fn=Quotable]].thmx", lpFilePart=0x0) returned 0x84 [0066.854] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0066.854] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457503[[fn=Quotable]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03457503[[fn=quotable]].thmx"), fInfoLevelId=0x0, lpFileInformation=0x217e388 | out: lpFileInformation=0x217e388*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x709eda88, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x709eda88, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x70a39f16, ftLastWriteTime.dwHighDateTime=0x1d301c4, nFileSizeHigh=0x0, nFileSizeLow=0xec122)) returned 1 [0066.854] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0066.855] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457503[[fn=Quotable]].thmx", nBufferLength=0x105, lpBuffer=0x3be040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457503[[fn=Quotable]].thmx", lpFilePart=0x0) returned 0x84 [0066.855] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0066.855] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457503[[fn=Quotable]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03457503[[fn=quotable]].thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0066.855] GetFileType (hFile=0x444) returned 0x1 [0066.855] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be490) returned 1 [0066.855] GetFileType (hFile=0x444) returned 0x1 [0066.855] ReadFile (in: hFile=0x444, lpBuffer=0x2180888, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5a8, lpOverlapped=0x0 | out: lpBuffer=0x2180888*, lpNumberOfBytesRead=0x3be5a8*=0x1000, lpOverlapped=0x0) returned 1 [0066.893] CloseHandle (hObject=0x444) returned 1 [0066.918] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457503[[fn=Quotable]].thmx", nBufferLength=0x105, lpBuffer=0x3be040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457503[[fn=Quotable]].thmx", lpFilePart=0x0) returned 0x84 [0066.918] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0066.918] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457503[[fn=Quotable]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03457503[[fn=quotable]].thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0066.919] GetFileType (hFile=0x444) returned 0x1 [0066.919] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be490) returned 1 [0066.919] GetFileType (hFile=0x444) returned 0x1 [0066.919] WriteFile (in: hFile=0x444, lpBuffer=0x217e550*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be658, lpOverlapped=0x0 | out: lpBuffer=0x217e550*, lpNumberOfBytesWritten=0x3be658*=0x2000, lpOverlapped=0x0) returned 1 [0066.919] CloseHandle (hObject=0x444) returned 1 [0066.919] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457503[[fn=Quotable]].thmx", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457503[[fn=Quotable]].thmx", lpFilePart=0x0) returned 0x84 [0066.919] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457503[[fn=Quotable]].thmx.xuy", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457503[[fn=Quotable]].thmx.xuy", lpFilePart=0x0) returned 0x88 [0066.919] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0066.919] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457503[[fn=Quotable]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03457503[[fn=quotable]].thmx"), fInfoLevelId=0x0, lpFileInformation=0x3be670 | out: lpFileInformation=0x3be670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x709eda88, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x709eda88, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x13bb7b06, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xec122)) returned 1 [0066.919] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0066.919] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457503[[fn=Quotable]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03457503[[fn=quotable]].thmx"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457503[[fn=Quotable]].thmx.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03457503[[fn=quotable]].thmx.xuy")) returned 1 [0066.920] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457510[[fn=Savon]].thmx", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457510[[fn=Savon]].thmx", lpFilePart=0x0) returned 0x81 [0066.920] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0066.920] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457510[[fn=Savon]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03457510[[fn=savon]].thmx"), fInfoLevelId=0x0, lpFileInformation=0x21fce40 | out: lpFileInformation=0x21fce40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x716257e1, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x716257e1, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x71697f8e, ftLastWriteTime.dwHighDateTime=0x1d301c4, nFileSizeHigh=0x0, nFileSizeLow=0x125f51)) returned 1 [0066.921] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0066.921] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457510[[fn=Savon]].thmx", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457510[[fn=Savon]].thmx", lpFilePart=0x0) returned 0x81 [0066.921] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0066.921] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457510[[fn=Savon]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03457510[[fn=savon]].thmx"), fInfoLevelId=0x0, lpFileInformation=0x21fd018 | out: lpFileInformation=0x21fd018*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x716257e1, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x716257e1, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x71697f8e, ftLastWriteTime.dwHighDateTime=0x1d301c4, nFileSizeHigh=0x0, nFileSizeLow=0x125f51)) returned 1 [0066.921] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0066.921] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457510[[fn=Savon]].thmx", nBufferLength=0x105, lpBuffer=0x3be040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457510[[fn=Savon]].thmx", lpFilePart=0x0) returned 0x81 [0066.921] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0066.921] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457510[[fn=Savon]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03457510[[fn=savon]].thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0066.922] GetFileType (hFile=0x444) returned 0x1 [0066.922] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be490) returned 1 [0066.922] GetFileType (hFile=0x444) returned 0x1 [0066.922] ReadFile (in: hFile=0x444, lpBuffer=0x21ff4f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5a8, lpOverlapped=0x0 | out: lpBuffer=0x21ff4f8*, lpNumberOfBytesRead=0x3be5a8*=0x1000, lpOverlapped=0x0) returned 1 [0066.954] CloseHandle (hObject=0x444) returned 1 [0066.954] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457510[[fn=Savon]].thmx", nBufferLength=0x105, lpBuffer=0x3be040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457510[[fn=Savon]].thmx", lpFilePart=0x0) returned 0x81 [0066.955] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0066.955] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457510[[fn=Savon]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03457510[[fn=savon]].thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0066.955] GetFileType (hFile=0x444) returned 0x1 [0066.955] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be490) returned 1 [0066.955] GetFileType (hFile=0x444) returned 0x1 [0066.955] WriteFile (in: hFile=0x444, lpBuffer=0x21fd1d0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be658, lpOverlapped=0x0 | out: lpBuffer=0x21fd1d0*, lpNumberOfBytesWritten=0x3be658*=0x2000, lpOverlapped=0x0) returned 1 [0066.955] CloseHandle (hObject=0x444) returned 1 [0066.955] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457510[[fn=Savon]].thmx", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457510[[fn=Savon]].thmx", lpFilePart=0x0) returned 0x81 [0066.955] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457510[[fn=Savon]].thmx.xuy", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457510[[fn=Savon]].thmx.xuy", lpFilePart=0x0) returned 0x85 [0066.955] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0066.955] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457510[[fn=Savon]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03457510[[fn=savon]].thmx"), fInfoLevelId=0x0, lpFileInformation=0x3be670 | out: lpFileInformation=0x3be670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x716257e1, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x716257e1, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x13c23b10, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x125f51)) returned 1 [0066.956] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0066.956] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457510[[fn=Savon]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03457510[[fn=savon]].thmx"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457510[[fn=Savon]].thmx.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03457510[[fn=savon]].thmx.xuy")) returned 1 [0066.956] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457515[[fn=View]].thmx", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457515[[fn=View]].thmx", lpFilePart=0x0) returned 0x80 [0066.956] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0066.956] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457515[[fn=View]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03457515[[fn=view]].thmx"), fInfoLevelId=0x0, lpFileInformation=0x227ba88 | out: lpFileInformation=0x227ba88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70245469, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x70245469, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x7026b6cf, ftLastWriteTime.dwHighDateTime=0x1d301c4, nFileSizeHigh=0x0, nFileSizeLow=0x76cc4)) returned 1 [0066.956] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0066.956] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457515[[fn=View]].thmx", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457515[[fn=View]].thmx", lpFilePart=0x0) returned 0x80 [0066.956] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0066.957] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457515[[fn=View]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03457515[[fn=view]].thmx"), fInfoLevelId=0x0, lpFileInformation=0x227bc60 | out: lpFileInformation=0x227bc60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70245469, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x70245469, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x7026b6cf, ftLastWriteTime.dwHighDateTime=0x1d301c4, nFileSizeHigh=0x0, nFileSizeLow=0x76cc4)) returned 1 [0066.957] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0066.957] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457515[[fn=View]].thmx", nBufferLength=0x105, lpBuffer=0x3be040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457515[[fn=View]].thmx", lpFilePart=0x0) returned 0x80 [0066.957] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0066.957] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457515[[fn=View]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03457515[[fn=view]].thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0066.957] GetFileType (hFile=0x444) returned 0x1 [0066.957] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be490) returned 1 [0066.957] GetFileType (hFile=0x444) returned 0x1 [0066.957] ReadFile (in: hFile=0x444, lpBuffer=0x227e140, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5a8, lpOverlapped=0x0 | out: lpBuffer=0x227e140*, lpNumberOfBytesRead=0x3be5a8*=0x1000, lpOverlapped=0x0) returned 1 [0066.997] CloseHandle (hObject=0x444) returned 1 [0066.997] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457515[[fn=View]].thmx", nBufferLength=0x105, lpBuffer=0x3be040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457515[[fn=View]].thmx", lpFilePart=0x0) returned 0x80 [0066.997] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0066.997] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457515[[fn=View]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03457515[[fn=view]].thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0066.997] GetFileType (hFile=0x444) returned 0x1 [0066.997] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be490) returned 1 [0066.997] GetFileType (hFile=0x444) returned 0x1 [0066.997] WriteFile (in: hFile=0x444, lpBuffer=0x227be18*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be658, lpOverlapped=0x0 | out: lpBuffer=0x227be18*, lpNumberOfBytesWritten=0x3be658*=0x2000, lpOverlapped=0x0) returned 1 [0066.997] CloseHandle (hObject=0x444) returned 1 [0066.998] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457515[[fn=View]].thmx", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457515[[fn=View]].thmx", lpFilePart=0x0) returned 0x80 [0066.998] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457515[[fn=View]].thmx.xuy", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457515[[fn=View]].thmx.xuy", lpFilePart=0x0) returned 0x84 [0066.998] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0066.998] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457515[[fn=View]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03457515[[fn=view]].thmx"), fInfoLevelId=0x0, lpFileInformation=0x3be670 | out: lpFileInformation=0x3be670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70245469, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x70245469, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x13c6fe7c, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x76cc4)) returned 1 [0066.998] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0066.998] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457515[[fn=View]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03457515[[fn=view]].thmx"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457515[[fn=View]].thmx.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03457515[[fn=view]].thmx.xuy")) returned 1 [0066.999] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033917[[fn=Berlin]].thmx", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033917[[fn=Berlin]].thmx", lpFilePart=0x0) returned 0x82 [0066.999] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0066.999] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033917[[fn=Berlin]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm04033917[[fn=berlin]].thmx"), fInfoLevelId=0x0, lpFileInformation=0x22fa6d0 | out: lpFileInformation=0x22fa6d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x714359a1, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x714359a1, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0xd634c500, ftLastWriteTime.dwHighDateTime=0x1d0e937, nFileSizeHigh=0x0, nFileSizeLow=0xee481)) returned 1 [0067.000] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0067.000] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033917[[fn=Berlin]].thmx", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033917[[fn=Berlin]].thmx", lpFilePart=0x0) returned 0x82 [0067.000] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0067.000] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033917[[fn=Berlin]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm04033917[[fn=berlin]].thmx"), fInfoLevelId=0x0, lpFileInformation=0x22fa8b0 | out: lpFileInformation=0x22fa8b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x714359a1, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x714359a1, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0xd634c500, ftLastWriteTime.dwHighDateTime=0x1d0e937, nFileSizeHigh=0x0, nFileSizeLow=0xee481)) returned 1 [0067.000] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0067.000] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033917[[fn=Berlin]].thmx", nBufferLength=0x105, lpBuffer=0x3be040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033917[[fn=Berlin]].thmx", lpFilePart=0x0) returned 0x82 [0067.001] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0067.001] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033917[[fn=Berlin]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm04033917[[fn=berlin]].thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0067.001] GetFileType (hFile=0x444) returned 0x1 [0067.001] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be490) returned 1 [0067.001] GetFileType (hFile=0x444) returned 0x1 [0067.001] ReadFile (in: hFile=0x444, lpBuffer=0x22fcda0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5a8, lpOverlapped=0x0 | out: lpBuffer=0x22fcda0*, lpNumberOfBytesRead=0x3be5a8*=0x1000, lpOverlapped=0x0) returned 1 [0067.046] CloseHandle (hObject=0x444) returned 1 [0067.046] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033917[[fn=Berlin]].thmx", nBufferLength=0x105, lpBuffer=0x3be040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033917[[fn=Berlin]].thmx", lpFilePart=0x0) returned 0x82 [0067.047] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0067.047] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033917[[fn=Berlin]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm04033917[[fn=berlin]].thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0067.047] GetFileType (hFile=0x444) returned 0x1 [0067.047] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be490) returned 1 [0067.047] GetFileType (hFile=0x444) returned 0x1 [0067.047] WriteFile (in: hFile=0x444, lpBuffer=0x2146c30*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be658, lpOverlapped=0x0 | out: lpBuffer=0x2146c30*, lpNumberOfBytesWritten=0x3be658*=0x2000, lpOverlapped=0x0) returned 1 [0067.047] CloseHandle (hObject=0x444) returned 1 [0067.047] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033917[[fn=Berlin]].thmx", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033917[[fn=Berlin]].thmx", lpFilePart=0x0) returned 0x82 [0067.047] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033917[[fn=Berlin]].thmx.xuy", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033917[[fn=Berlin]].thmx.xuy", lpFilePart=0x0) returned 0x86 [0067.047] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0067.047] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033917[[fn=Berlin]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm04033917[[fn=berlin]].thmx"), fInfoLevelId=0x0, lpFileInformation=0x3be670 | out: lpFileInformation=0x3be670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x714359a1, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x714359a1, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x13d08bd7, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xee481)) returned 1 [0067.048] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0067.048] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033917[[fn=Berlin]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm04033917[[fn=berlin]].thmx"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033917[[fn=Berlin]].thmx.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm04033917[[fn=berlin]].thmx.xuy")) returned 1 [0067.048] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033919[[fn=Circuit]].thmx", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033919[[fn=Circuit]].thmx", lpFilePart=0x0) returned 0x83 [0067.048] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0067.048] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033919[[fn=Circuit]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm04033919[[fn=circuit]].thmx"), fInfoLevelId=0x0, lpFileInformation=0x217eb50 | out: lpFileInformation=0x217eb50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71245bd9, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x71245bd9, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x7129204a, ftLastWriteTime.dwHighDateTime=0x1d301c4, nFileSizeHigh=0x0, nFileSizeLow=0x165552)) returned 1 [0067.050] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0067.050] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033919[[fn=Circuit]].thmx", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033919[[fn=Circuit]].thmx", lpFilePart=0x0) returned 0x83 [0067.050] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0067.050] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033919[[fn=Circuit]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm04033919[[fn=circuit]].thmx"), fInfoLevelId=0x0, lpFileInformation=0x217ed30 | out: lpFileInformation=0x217ed30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71245bd9, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x71245bd9, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x7129204a, ftLastWriteTime.dwHighDateTime=0x1d301c4, nFileSizeHigh=0x0, nFileSizeLow=0x165552)) returned 1 [0067.050] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0067.050] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033919[[fn=Circuit]].thmx", nBufferLength=0x105, lpBuffer=0x3be040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033919[[fn=Circuit]].thmx", lpFilePart=0x0) returned 0x83 [0067.050] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0067.050] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033919[[fn=Circuit]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm04033919[[fn=circuit]].thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0067.051] GetFileType (hFile=0x444) returned 0x1 [0067.051] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be490) returned 1 [0067.051] GetFileType (hFile=0x444) returned 0x1 [0067.051] ReadFile (in: hFile=0x444, lpBuffer=0x2181220, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5a8, lpOverlapped=0x0 | out: lpBuffer=0x2181220*, lpNumberOfBytesRead=0x3be5a8*=0x1000, lpOverlapped=0x0) returned 1 [0067.083] CloseHandle (hObject=0x444) returned 1 [0067.083] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033919[[fn=Circuit]].thmx", nBufferLength=0x105, lpBuffer=0x3be040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033919[[fn=Circuit]].thmx", lpFilePart=0x0) returned 0x83 [0067.083] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0067.083] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033919[[fn=Circuit]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm04033919[[fn=circuit]].thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0067.083] GetFileType (hFile=0x444) returned 0x1 [0067.083] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be490) returned 1 [0067.083] GetFileType (hFile=0x444) returned 0x1 [0067.083] WriteFile (in: hFile=0x444, lpBuffer=0x217eef0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be658, lpOverlapped=0x0 | out: lpBuffer=0x217eef0*, lpNumberOfBytesWritten=0x3be658*=0x2000, lpOverlapped=0x0) returned 1 [0067.084] CloseHandle (hObject=0x444) returned 1 [0067.084] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033919[[fn=Circuit]].thmx", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033919[[fn=Circuit]].thmx", lpFilePart=0x0) returned 0x83 [0067.084] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033919[[fn=Circuit]].thmx.xuy", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033919[[fn=Circuit]].thmx.xuy", lpFilePart=0x0) returned 0x87 [0067.084] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0067.084] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033919[[fn=Circuit]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm04033919[[fn=circuit]].thmx"), fInfoLevelId=0x0, lpFileInformation=0x3be670 | out: lpFileInformation=0x3be670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71245bd9, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x71245bd9, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x13d54c7b, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x165552)) returned 1 [0067.084] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0067.084] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033919[[fn=Circuit]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm04033919[[fn=circuit]].thmx"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033919[[fn=Circuit]].thmx.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm04033919[[fn=circuit]].thmx.xuy")) returned 1 [0067.085] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033921[[fn=Damask]].thmx", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033921[[fn=Damask]].thmx", lpFilePart=0x0) returned 0x82 [0067.085] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0067.085] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033921[[fn=Damask]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm04033921[[fn=damask]].thmx"), fInfoLevelId=0x0, lpFileInformation=0x21fd7b8 | out: lpFileInformation=0x21fd7b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7132a9aa, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x7132a9aa, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x7139d0ad, ftLastWriteTime.dwHighDateTime=0x1d301c4, nFileSizeHigh=0x0, nFileSizeLow=0x21dbbf)) returned 1 [0067.085] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0067.085] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033921[[fn=Damask]].thmx", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033921[[fn=Damask]].thmx", lpFilePart=0x0) returned 0x82 [0067.085] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0067.085] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033921[[fn=Damask]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm04033921[[fn=damask]].thmx"), fInfoLevelId=0x0, lpFileInformation=0x21fd998 | out: lpFileInformation=0x21fd998*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7132a9aa, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x7132a9aa, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x7139d0ad, ftLastWriteTime.dwHighDateTime=0x1d301c4, nFileSizeHigh=0x0, nFileSizeLow=0x21dbbf)) returned 1 [0067.085] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0067.085] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033921[[fn=Damask]].thmx", nBufferLength=0x105, lpBuffer=0x3be040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033921[[fn=Damask]].thmx", lpFilePart=0x0) returned 0x82 [0067.085] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0067.085] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033921[[fn=Damask]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm04033921[[fn=damask]].thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0067.086] GetFileType (hFile=0x444) returned 0x1 [0067.086] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be490) returned 1 [0067.086] GetFileType (hFile=0x444) returned 0x1 [0067.086] ReadFile (in: hFile=0x444, lpBuffer=0x21ffe88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5a8, lpOverlapped=0x0 | out: lpBuffer=0x21ffe88*, lpNumberOfBytesRead=0x3be5a8*=0x1000, lpOverlapped=0x0) returned 1 [0067.109] CloseHandle (hObject=0x444) returned 1 [0067.109] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033921[[fn=Damask]].thmx", nBufferLength=0x105, lpBuffer=0x3be040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033921[[fn=Damask]].thmx", lpFilePart=0x0) returned 0x82 [0067.109] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0067.110] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033921[[fn=Damask]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm04033921[[fn=damask]].thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0067.110] GetFileType (hFile=0x444) returned 0x1 [0067.110] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be490) returned 1 [0067.110] GetFileType (hFile=0x444) returned 0x1 [0067.110] WriteFile (in: hFile=0x444, lpBuffer=0x21fdb58*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be658, lpOverlapped=0x0 | out: lpBuffer=0x21fdb58*, lpNumberOfBytesWritten=0x3be658*=0x2000, lpOverlapped=0x0) returned 1 [0067.110] CloseHandle (hObject=0x444) returned 1 [0067.110] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033921[[fn=Damask]].thmx", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033921[[fn=Damask]].thmx", lpFilePart=0x0) returned 0x82 [0067.110] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033921[[fn=Damask]].thmx.xuy", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033921[[fn=Damask]].thmx.xuy", lpFilePart=0x0) returned 0x86 [0067.110] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0067.110] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033921[[fn=Damask]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm04033921[[fn=damask]].thmx"), fInfoLevelId=0x0, lpFileInformation=0x3be670 | out: lpFileInformation=0x3be670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7132a9aa, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x7132a9aa, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x13da1181, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x21dbbf)) returned 1 [0067.110] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0067.111] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033921[[fn=Damask]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm04033921[[fn=damask]].thmx"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033921[[fn=Damask]].thmx.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm04033921[[fn=damask]].thmx.xuy")) returned 1 [0067.111] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033925[[fn=Droplet]].thmx", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033925[[fn=Droplet]].thmx", lpFilePart=0x0) returned 0x83 [0067.111] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0067.111] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033925[[fn=Droplet]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm04033925[[fn=droplet]].thmx"), fInfoLevelId=0x0, lpFileInformation=0x227c420 | out: lpFileInformation=0x227c420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71a5188a, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x71a5188a, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x71b36654, ftLastWriteTime.dwHighDateTime=0x1d301c4, nFileSizeHigh=0x0, nFileSizeLow=0x1ab70b)) returned 1 [0067.112] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0067.112] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033925[[fn=Droplet]].thmx", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033925[[fn=Droplet]].thmx", lpFilePart=0x0) returned 0x83 [0067.113] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0067.113] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033925[[fn=Droplet]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm04033925[[fn=droplet]].thmx"), fInfoLevelId=0x0, lpFileInformation=0x227c600 | out: lpFileInformation=0x227c600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71a5188a, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x71a5188a, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x71b36654, ftLastWriteTime.dwHighDateTime=0x1d301c4, nFileSizeHigh=0x0, nFileSizeLow=0x1ab70b)) returned 1 [0067.113] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0067.113] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033925[[fn=Droplet]].thmx", nBufferLength=0x105, lpBuffer=0x3be040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033925[[fn=Droplet]].thmx", lpFilePart=0x0) returned 0x83 [0067.113] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0067.113] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033925[[fn=Droplet]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm04033925[[fn=droplet]].thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0067.113] GetFileType (hFile=0x444) returned 0x1 [0067.113] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be490) returned 1 [0067.113] GetFileType (hFile=0x444) returned 0x1 [0067.113] ReadFile (in: hFile=0x444, lpBuffer=0x227eaf0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5a8, lpOverlapped=0x0 | out: lpBuffer=0x227eaf0*, lpNumberOfBytesRead=0x3be5a8*=0x1000, lpOverlapped=0x0) returned 1 [0067.125] CloseHandle (hObject=0x444) returned 1 [0067.132] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033925[[fn=Droplet]].thmx", nBufferLength=0x105, lpBuffer=0x3be040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033925[[fn=Droplet]].thmx", lpFilePart=0x0) returned 0x83 [0067.132] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0067.132] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033925[[fn=Droplet]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm04033925[[fn=droplet]].thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0067.132] GetFileType (hFile=0x444) returned 0x1 [0067.133] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be490) returned 1 [0067.133] GetFileType (hFile=0x444) returned 0x1 [0067.133] WriteFile (in: hFile=0x444, lpBuffer=0x227c7c0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be658, lpOverlapped=0x0 | out: lpBuffer=0x227c7c0*, lpNumberOfBytesWritten=0x3be658*=0x2000, lpOverlapped=0x0) returned 1 [0067.133] CloseHandle (hObject=0x444) returned 1 [0067.133] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033925[[fn=Droplet]].thmx", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033925[[fn=Droplet]].thmx", lpFilePart=0x0) returned 0x83 [0067.133] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033925[[fn=Droplet]].thmx.xuy", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033925[[fn=Droplet]].thmx.xuy", lpFilePart=0x0) returned 0x87 [0067.133] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0067.133] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033925[[fn=Droplet]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm04033925[[fn=droplet]].thmx"), fInfoLevelId=0x0, lpFileInformation=0x3be670 | out: lpFileInformation=0x3be670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71a5188a, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x71a5188a, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x13dc734c, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x1ab70b)) returned 1 [0067.133] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0067.133] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033925[[fn=Droplet]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm04033925[[fn=droplet]].thmx"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033925[[fn=Droplet]].thmx.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm04033925[[fn=droplet]].thmx.xuy")) returned 1 [0067.134] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033927[[fn=Main Event]].thmx", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033927[[fn=Main Event]].thmx", lpFilePart=0x0) returned 0x86 [0067.134] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0067.134] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033927[[fn=Main Event]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm04033927[[fn=main event]].thmx"), fInfoLevelId=0x0, lpFileInformation=0x22fb088 | out: lpFileInformation=0x22fb088*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71aea1ac, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x71aea1ac, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x71ba8d81, ftLastWriteTime.dwHighDateTime=0x1d301c4, nFileSizeHigh=0x0, nFileSizeLow=0x2c9ecd)) returned 1 [0067.134] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0067.134] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033927[[fn=Main Event]].thmx", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033927[[fn=Main Event]].thmx", lpFilePart=0x0) returned 0x86 [0067.134] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0067.134] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033927[[fn=Main Event]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm04033927[[fn=main event]].thmx"), fInfoLevelId=0x0, lpFileInformation=0x22fb278 | out: lpFileInformation=0x22fb278*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71aea1ac, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x71aea1ac, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x71ba8d81, ftLastWriteTime.dwHighDateTime=0x1d301c4, nFileSizeHigh=0x0, nFileSizeLow=0x2c9ecd)) returned 1 [0067.134] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0067.134] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033927[[fn=Main Event]].thmx", nBufferLength=0x105, lpBuffer=0x3be040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033927[[fn=Main Event]].thmx", lpFilePart=0x0) returned 0x86 [0067.134] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0067.134] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033927[[fn=Main Event]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm04033927[[fn=main event]].thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0067.135] GetFileType (hFile=0x444) returned 0x1 [0067.135] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be490) returned 1 [0067.135] GetFileType (hFile=0x444) returned 0x1 [0067.135] ReadFile (in: hFile=0x444, lpBuffer=0x22fd788, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5a8, lpOverlapped=0x0 | out: lpBuffer=0x22fd788*, lpNumberOfBytesRead=0x3be5a8*=0x1000, lpOverlapped=0x0) returned 1 [0067.179] CloseHandle (hObject=0x444) returned 1 [0067.179] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033927[[fn=Main Event]].thmx", nBufferLength=0x105, lpBuffer=0x3be040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033927[[fn=Main Event]].thmx", lpFilePart=0x0) returned 0x86 [0067.179] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0067.179] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033927[[fn=Main Event]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm04033927[[fn=main event]].thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0067.179] GetFileType (hFile=0x444) returned 0x1 [0067.179] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be490) returned 1 [0067.179] GetFileType (hFile=0x444) returned 0x1 [0067.179] WriteFile (in: hFile=0x444, lpBuffer=0x214c440*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be658, lpOverlapped=0x0 | out: lpBuffer=0x214c440*, lpNumberOfBytesWritten=0x3be658*=0x2000, lpOverlapped=0x0) returned 1 [0067.179] CloseHandle (hObject=0x444) returned 1 [0067.180] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033927[[fn=Main Event]].thmx", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033927[[fn=Main Event]].thmx", lpFilePart=0x0) returned 0x86 [0067.180] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033927[[fn=Main Event]].thmx.xuy", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033927[[fn=Main Event]].thmx.xuy", lpFilePart=0x0) returned 0x8a [0067.180] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0067.180] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033927[[fn=Main Event]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm04033927[[fn=main event]].thmx"), fInfoLevelId=0x0, lpFileInformation=0x3be670 | out: lpFileInformation=0x3be670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71aea1ac, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x71aea1ac, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x13e39ac8, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2c9ecd)) returned 1 [0067.180] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0067.180] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033927[[fn=Main Event]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm04033927[[fn=main event]].thmx"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033927[[fn=Main Event]].thmx.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm04033927[[fn=main event]].thmx.xuy")) returned 1 [0067.181] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033929[[fn=Slate]].thmx", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033929[[fn=Slate]].thmx", lpFilePart=0x0) returned 0x81 [0067.181] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0067.181] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033929[[fn=Slate]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm04033929[[fn=slate]].thmx"), fInfoLevelId=0x0, lpFileInformation=0x217f538 | out: lpFileInformation=0x217f538*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71bcefed, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x71bcefed, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x71c4171d, ftLastWriteTime.dwHighDateTime=0x1d301c4, nFileSizeHigh=0x0, nFileSizeLow=0x23f73b)) returned 1 [0067.181] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0067.181] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033929[[fn=Slate]].thmx", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033929[[fn=Slate]].thmx", lpFilePart=0x0) returned 0x81 [0067.181] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0067.181] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033929[[fn=Slate]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm04033929[[fn=slate]].thmx"), fInfoLevelId=0x0, lpFileInformation=0x217f710 | out: lpFileInformation=0x217f710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71bcefed, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x71bcefed, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x71c4171d, ftLastWriteTime.dwHighDateTime=0x1d301c4, nFileSizeHigh=0x0, nFileSizeLow=0x23f73b)) returned 1 [0067.181] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0067.181] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033929[[fn=Slate]].thmx", nBufferLength=0x105, lpBuffer=0x3be040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033929[[fn=Slate]].thmx", lpFilePart=0x0) returned 0x81 [0067.181] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0067.181] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033929[[fn=Slate]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm04033929[[fn=slate]].thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0067.182] GetFileType (hFile=0x444) returned 0x1 [0067.182] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be490) returned 1 [0067.182] GetFileType (hFile=0x444) returned 0x1 [0067.182] ReadFile (in: hFile=0x444, lpBuffer=0x2181bf0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5a8, lpOverlapped=0x0 | out: lpBuffer=0x2181bf0*, lpNumberOfBytesRead=0x3be5a8*=0x1000, lpOverlapped=0x0) returned 1 [0067.206] CloseHandle (hObject=0x444) returned 1 [0067.206] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033929[[fn=Slate]].thmx", nBufferLength=0x105, lpBuffer=0x3be040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033929[[fn=Slate]].thmx", lpFilePart=0x0) returned 0x81 [0067.207] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0067.207] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033929[[fn=Slate]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm04033929[[fn=slate]].thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0067.207] GetFileType (hFile=0x444) returned 0x1 [0067.207] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be490) returned 1 [0067.207] GetFileType (hFile=0x444) returned 0x1 [0067.207] WriteFile (in: hFile=0x444, lpBuffer=0x217f8c8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be658, lpOverlapped=0x0 | out: lpBuffer=0x217f8c8*, lpNumberOfBytesWritten=0x3be658*=0x2000, lpOverlapped=0x0) returned 1 [0067.207] CloseHandle (hObject=0x444) returned 1 [0067.207] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033929[[fn=Slate]].thmx", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033929[[fn=Slate]].thmx", lpFilePart=0x0) returned 0x81 [0067.207] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033929[[fn=Slate]].thmx.xuy", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033929[[fn=Slate]].thmx.xuy", lpFilePart=0x0) returned 0x85 [0067.207] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0067.208] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033929[[fn=Slate]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm04033929[[fn=slate]].thmx"), fInfoLevelId=0x0, lpFileInformation=0x3be670 | out: lpFileInformation=0x3be670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71bcefed, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x71bcefed, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x13e85fc8, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x23f73b)) returned 1 [0067.208] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0067.208] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033929[[fn=Slate]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm04033929[[fn=slate]].thmx"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033929[[fn=Slate]].thmx.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm04033929[[fn=slate]].thmx.xuy")) returned 1 [0067.208] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033937[[fn=Vapor Trail]].thmx", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033937[[fn=Vapor Trail]].thmx", lpFilePart=0x0) returned 0x87 [0067.208] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0067.209] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033937[[fn=Vapor Trail]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm04033937[[fn=vapor trail]].thmx"), fInfoLevelId=0x0, lpFileInformation=0x21fe180 | out: lpFileInformation=0x21fe180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71ea3bd6, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x71ea3bd6, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x71ef0028, ftLastWriteTime.dwHighDateTime=0x1d301c4, nFileSizeHigh=0x0, nFileSizeLow=0x371abc)) returned 1 [0067.212] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0067.212] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033937[[fn=Vapor Trail]].thmx", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033937[[fn=Vapor Trail]].thmx", lpFilePart=0x0) returned 0x87 [0067.212] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0067.212] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033937[[fn=Vapor Trail]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm04033937[[fn=vapor trail]].thmx"), fInfoLevelId=0x0, lpFileInformation=0x21fe370 | out: lpFileInformation=0x21fe370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71ea3bd6, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x71ea3bd6, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x71ef0028, ftLastWriteTime.dwHighDateTime=0x1d301c4, nFileSizeHigh=0x0, nFileSizeLow=0x371abc)) returned 1 [0067.212] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0067.212] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033937[[fn=Vapor Trail]].thmx", nBufferLength=0x105, lpBuffer=0x3be040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033937[[fn=Vapor Trail]].thmx", lpFilePart=0x0) returned 0x87 [0067.212] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0067.212] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033937[[fn=Vapor Trail]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm04033937[[fn=vapor trail]].thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0067.213] GetFileType (hFile=0x444) returned 0x1 [0067.213] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be490) returned 1 [0067.213] GetFileType (hFile=0x444) returned 0x1 [0067.213] ReadFile (in: hFile=0x444, lpBuffer=0x2200880, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5a8, lpOverlapped=0x0 | out: lpBuffer=0x2200880*, lpNumberOfBytesRead=0x3be5a8*=0x1000, lpOverlapped=0x0) returned 1 [0067.226] CloseHandle (hObject=0x444) returned 1 [0067.226] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033937[[fn=Vapor Trail]].thmx", nBufferLength=0x105, lpBuffer=0x3be040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033937[[fn=Vapor Trail]].thmx", lpFilePart=0x0) returned 0x87 [0067.226] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0067.226] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033937[[fn=Vapor Trail]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm04033937[[fn=vapor trail]].thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0067.227] GetFileType (hFile=0x444) returned 0x1 [0067.227] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be490) returned 1 [0067.227] GetFileType (hFile=0x444) returned 0x1 [0067.227] WriteFile (in: hFile=0x444, lpBuffer=0x21fe540*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be658, lpOverlapped=0x0 | out: lpBuffer=0x21fe540*, lpNumberOfBytesWritten=0x3be658*=0x2000, lpOverlapped=0x0) returned 1 [0067.227] CloseHandle (hObject=0x444) returned 1 [0067.227] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033937[[fn=Vapor Trail]].thmx", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033937[[fn=Vapor Trail]].thmx", lpFilePart=0x0) returned 0x87 [0067.227] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033937[[fn=Vapor Trail]].thmx.xuy", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033937[[fn=Vapor Trail]].thmx.xuy", lpFilePart=0x0) returned 0x8b [0067.227] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0067.227] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033937[[fn=Vapor Trail]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm04033937[[fn=vapor trail]].thmx"), fInfoLevelId=0x0, lpFileInformation=0x3be670 | out: lpFileInformation=0x3be670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71ea3bd6, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x71ea3bd6, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x13eac159, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x371abc)) returned 1 [0067.227] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0067.227] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033937[[fn=Vapor Trail]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm04033937[[fn=vapor trail]].thmx"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033937[[fn=Vapor Trail]].thmx.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm04033937[[fn=vapor trail]].thmx.xuy")) returned 1 [0067.228] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001103[[fn=Headlines]].thmx", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001103[[fn=Headlines]].thmx", lpFilePart=0x0) returned 0x85 [0067.228] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0067.228] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001103[[fn=Headlines]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm10001103[[fn=headlines]].thmx"), fInfoLevelId=0x0, lpFileInformation=0x227ce40 | out: lpFileInformation=0x227ce40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x708e2a5b, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x708e2a5b, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x78b32c00, ftLastWriteTime.dwHighDateTime=0x1d0f120, nFileSizeHigh=0x0, nFileSizeLow=0x83bd9)) returned 1 [0067.228] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0067.228] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001103[[fn=Headlines]].thmx", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001103[[fn=Headlines]].thmx", lpFilePart=0x0) returned 0x85 [0067.228] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0067.229] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001103[[fn=Headlines]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm10001103[[fn=headlines]].thmx"), fInfoLevelId=0x0, lpFileInformation=0x227d028 | out: lpFileInformation=0x227d028*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x708e2a5b, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x708e2a5b, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x78b32c00, ftLastWriteTime.dwHighDateTime=0x1d0f120, nFileSizeHigh=0x0, nFileSizeLow=0x83bd9)) returned 1 [0067.229] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0067.229] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001103[[fn=Headlines]].thmx", nBufferLength=0x105, lpBuffer=0x3be040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001103[[fn=Headlines]].thmx", lpFilePart=0x0) returned 0x85 [0067.229] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0067.229] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001103[[fn=Headlines]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm10001103[[fn=headlines]].thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0067.229] GetFileType (hFile=0x444) returned 0x1 [0067.229] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be490) returned 1 [0067.229] GetFileType (hFile=0x444) returned 0x1 [0067.229] ReadFile (in: hFile=0x444, lpBuffer=0x227f528, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5a8, lpOverlapped=0x0 | out: lpBuffer=0x227f528*, lpNumberOfBytesRead=0x3be5a8*=0x1000, lpOverlapped=0x0) returned 1 [0067.269] CloseHandle (hObject=0x444) returned 1 [0067.276] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001103[[fn=Headlines]].thmx", nBufferLength=0x105, lpBuffer=0x3be040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001103[[fn=Headlines]].thmx", lpFilePart=0x0) returned 0x85 [0067.276] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0067.276] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001103[[fn=Headlines]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm10001103[[fn=headlines]].thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0067.277] GetFileType (hFile=0x444) returned 0x1 [0067.277] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be490) returned 1 [0067.277] GetFileType (hFile=0x444) returned 0x1 [0067.277] WriteFile (in: hFile=0x444, lpBuffer=0x227d1f0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be658, lpOverlapped=0x0 | out: lpBuffer=0x227d1f0*, lpNumberOfBytesWritten=0x3be658*=0x2000, lpOverlapped=0x0) returned 1 [0067.277] CloseHandle (hObject=0x444) returned 1 [0067.277] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001103[[fn=Headlines]].thmx", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001103[[fn=Headlines]].thmx", lpFilePart=0x0) returned 0x85 [0067.277] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001103[[fn=Headlines]].thmx.xuy", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001103[[fn=Headlines]].thmx.xuy", lpFilePart=0x0) returned 0x89 [0067.277] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0067.277] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001103[[fn=Headlines]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm10001103[[fn=headlines]].thmx"), fInfoLevelId=0x0, lpFileInformation=0x3be670 | out: lpFileInformation=0x3be670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x708e2a5b, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x708e2a5b, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x13f1e8de, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x83bd9)) returned 1 [0067.277] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0067.278] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001103[[fn=Headlines]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm10001103[[fn=headlines]].thmx"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001103[[fn=Headlines]].thmx.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm10001103[[fn=headlines]].thmx.xuy")) returned 1 [0067.278] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001104[[fn=Feathered]].thmx", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001104[[fn=Feathered]].thmx", lpFilePart=0x0) returned 0x85 [0067.278] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0067.278] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001104[[fn=Feathered]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm10001104[[fn=feathered]].thmx"), fInfoLevelId=0x0, lpFileInformation=0x22fbae0 | out: lpFileInformation=0x22fbae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7196ca94, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x7196ca94, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0xe9e8500, ftLastWriteTime.dwHighDateTime=0x1d0f128, nFileSizeHigh=0x0, nFileSizeLow=0x1f53d4)) returned 1 [0067.279] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0067.279] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001104[[fn=Feathered]].thmx", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001104[[fn=Feathered]].thmx", lpFilePart=0x0) returned 0x85 [0067.279] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0067.279] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001104[[fn=Feathered]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm10001104[[fn=feathered]].thmx"), fInfoLevelId=0x0, lpFileInformation=0x22fbcc8 | out: lpFileInformation=0x22fbcc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7196ca94, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x7196ca94, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0xe9e8500, ftLastWriteTime.dwHighDateTime=0x1d0f128, nFileSizeHigh=0x0, nFileSizeLow=0x1f53d4)) returned 1 [0067.279] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0067.279] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001104[[fn=Feathered]].thmx", nBufferLength=0x105, lpBuffer=0x3be040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001104[[fn=Feathered]].thmx", lpFilePart=0x0) returned 0x85 [0067.279] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0067.279] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001104[[fn=Feathered]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm10001104[[fn=feathered]].thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0067.279] GetFileType (hFile=0x444) returned 0x1 [0067.279] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be490) returned 1 [0067.279] GetFileType (hFile=0x444) returned 0x1 [0067.279] ReadFile (in: hFile=0x444, lpBuffer=0x22fe1c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5a8, lpOverlapped=0x0 | out: lpBuffer=0x22fe1c8*, lpNumberOfBytesRead=0x3be5a8*=0x1000, lpOverlapped=0x0) returned 1 [0067.367] CloseHandle (hObject=0x444) returned 1 [0067.367] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001104[[fn=Feathered]].thmx", nBufferLength=0x105, lpBuffer=0x3be040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001104[[fn=Feathered]].thmx", lpFilePart=0x0) returned 0x85 [0067.367] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0067.367] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001104[[fn=Feathered]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm10001104[[fn=feathered]].thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0067.368] GetFileType (hFile=0x444) returned 0x1 [0067.368] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be490) returned 1 [0067.368] GetFileType (hFile=0x444) returned 0x1 [0067.368] WriteFile (in: hFile=0x444, lpBuffer=0x2151c50*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be658, lpOverlapped=0x0 | out: lpBuffer=0x2151c50*, lpNumberOfBytesWritten=0x3be658*=0x2000, lpOverlapped=0x0) returned 1 [0067.368] CloseHandle (hObject=0x444) returned 1 [0067.368] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001104[[fn=Feathered]].thmx", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001104[[fn=Feathered]].thmx", lpFilePart=0x0) returned 0x85 [0067.368] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001104[[fn=Feathered]].thmx.xuy", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001104[[fn=Feathered]].thmx.xuy", lpFilePart=0x0) returned 0x89 [0067.369] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0067.369] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001104[[fn=Feathered]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm10001104[[fn=feathered]].thmx"), fInfoLevelId=0x0, lpFileInformation=0x3be670 | out: lpFileInformation=0x3be670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7196ca94, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x7196ca94, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x14003845, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x1f53d4)) returned 1 [0067.369] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0067.369] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001104[[fn=Feathered]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm10001104[[fn=feathered]].thmx"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001104[[fn=Feathered]].thmx.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm10001104[[fn=feathered]].thmx.xuy")) returned 1 [0067.370] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001105[[fn=Crop]].thmx", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001105[[fn=Crop]].thmx", lpFilePart=0x0) returned 0x80 [0067.370] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0067.370] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001105[[fn=Crop]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm10001105[[fn=crop]].thmx"), fInfoLevelId=0x0, lpFileInformation=0x217ff98 | out: lpFileInformation=0x217ff98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7121f9d6, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x7121f9d6, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x78b32c00, ftLastWriteTime.dwHighDateTime=0x1d0f120, nFileSizeHigh=0x0, nFileSizeLow=0x8301c)) returned 1 [0067.373] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0067.373] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001105[[fn=Crop]].thmx", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001105[[fn=Crop]].thmx", lpFilePart=0x0) returned 0x80 [0067.373] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0067.373] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001105[[fn=Crop]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm10001105[[fn=crop]].thmx"), fInfoLevelId=0x0, lpFileInformation=0x2180170 | out: lpFileInformation=0x2180170*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7121f9d6, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x7121f9d6, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x78b32c00, ftLastWriteTime.dwHighDateTime=0x1d0f120, nFileSizeHigh=0x0, nFileSizeLow=0x8301c)) returned 1 [0067.373] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0067.373] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001105[[fn=Crop]].thmx", nBufferLength=0x105, lpBuffer=0x3be040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001105[[fn=Crop]].thmx", lpFilePart=0x0) returned 0x80 [0067.373] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0067.373] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001105[[fn=Crop]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm10001105[[fn=crop]].thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0067.375] GetFileType (hFile=0x444) returned 0x1 [0067.375] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be490) returned 1 [0067.375] GetFileType (hFile=0x444) returned 0x1 [0067.375] ReadFile (in: hFile=0x444, lpBuffer=0x2182650, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5a8, lpOverlapped=0x0 | out: lpBuffer=0x2182650*, lpNumberOfBytesRead=0x3be5a8*=0x1000, lpOverlapped=0x0) returned 1 [0067.403] CloseHandle (hObject=0x444) returned 1 [0067.403] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001105[[fn=Crop]].thmx", nBufferLength=0x105, lpBuffer=0x3be040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001105[[fn=Crop]].thmx", lpFilePart=0x0) returned 0x80 [0067.403] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0067.403] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001105[[fn=Crop]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm10001105[[fn=crop]].thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0067.403] GetFileType (hFile=0x444) returned 0x1 [0067.403] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be490) returned 1 [0067.403] GetFileType (hFile=0x444) returned 0x1 [0067.403] WriteFile (in: hFile=0x444, lpBuffer=0x2180328*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be658, lpOverlapped=0x0 | out: lpBuffer=0x2180328*, lpNumberOfBytesWritten=0x3be658*=0x2000, lpOverlapped=0x0) returned 1 [0067.404] CloseHandle (hObject=0x444) returned 1 [0067.404] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001105[[fn=Crop]].thmx", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001105[[fn=Crop]].thmx", lpFilePart=0x0) returned 0x80 [0067.404] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001105[[fn=Crop]].thmx.xuy", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001105[[fn=Crop]].thmx.xuy", lpFilePart=0x0) returned 0x84 [0067.404] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0067.404] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001105[[fn=Crop]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm10001105[[fn=crop]].thmx"), fInfoLevelId=0x0, lpFileInformation=0x3be670 | out: lpFileInformation=0x3be670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7121f9d6, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x7121f9d6, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x1404fc83, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x8301c)) returned 1 [0067.404] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0067.404] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001105[[fn=Crop]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm10001105[[fn=crop]].thmx"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001105[[fn=Crop]].thmx.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm10001105[[fn=crop]].thmx.xuy")) returned 1 [0067.405] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001106[[fn=Badge]].thmx", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001106[[fn=Badge]].thmx", lpFilePart=0x0) returned 0x81 [0067.405] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0067.405] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001106[[fn=Badge]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm10001106[[fn=badge]].thmx"), fInfoLevelId=0x0, lpFileInformation=0x21febe0 | out: lpFileInformation=0x21febe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70ce8916, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x70ce8916, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x40c4b100, ftLastWriteTime.dwHighDateTime=0x1d0ef87, nFileSizeHigh=0x0, nFileSizeLow=0xa2181)) returned 1 [0067.405] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0067.405] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001106[[fn=Badge]].thmx", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001106[[fn=Badge]].thmx", lpFilePart=0x0) returned 0x81 [0067.405] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0067.405] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001106[[fn=Badge]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm10001106[[fn=badge]].thmx"), fInfoLevelId=0x0, lpFileInformation=0x21fedb8 | out: lpFileInformation=0x21fedb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70ce8916, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x70ce8916, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x40c4b100, ftLastWriteTime.dwHighDateTime=0x1d0ef87, nFileSizeHigh=0x0, nFileSizeLow=0xa2181)) returned 1 [0067.406] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0067.406] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001106[[fn=Badge]].thmx", nBufferLength=0x105, lpBuffer=0x3be040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001106[[fn=Badge]].thmx", lpFilePart=0x0) returned 0x81 [0067.406] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0067.406] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001106[[fn=Badge]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm10001106[[fn=badge]].thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0067.406] GetFileType (hFile=0x444) returned 0x1 [0067.406] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be490) returned 1 [0067.406] GetFileType (hFile=0x444) returned 0x1 [0067.406] ReadFile (in: hFile=0x444, lpBuffer=0x2201298, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5a8, lpOverlapped=0x0 | out: lpBuffer=0x2201298*, lpNumberOfBytesRead=0x3be5a8*=0x1000, lpOverlapped=0x0) returned 1 [0067.433] CloseHandle (hObject=0x444) returned 1 [0067.731] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001106[[fn=Badge]].thmx", nBufferLength=0x105, lpBuffer=0x3be040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001106[[fn=Badge]].thmx", lpFilePart=0x0) returned 0x81 [0067.731] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0067.731] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001106[[fn=Badge]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm10001106[[fn=badge]].thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0067.731] GetFileType (hFile=0x444) returned 0x1 [0067.731] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be490) returned 1 [0067.731] GetFileType (hFile=0x444) returned 0x1 [0067.731] WriteFile (in: hFile=0x444, lpBuffer=0x21fef70*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be658, lpOverlapped=0x0 | out: lpBuffer=0x21fef70*, lpNumberOfBytesWritten=0x3be658*=0x2000, lpOverlapped=0x0) returned 1 [0067.793] CloseHandle (hObject=0x444) returned 1 [0067.793] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001106[[fn=Badge]].thmx", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001106[[fn=Badge]].thmx", lpFilePart=0x0) returned 0x81 [0067.793] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001106[[fn=Badge]].thmx.xuy", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001106[[fn=Badge]].thmx.xuy", lpFilePart=0x0) returned 0x85 [0067.793] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0067.793] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001106[[fn=Badge]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm10001106[[fn=badge]].thmx"), fInfoLevelId=0x0, lpFileInformation=0x3be670 | out: lpFileInformation=0x3be670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70ce8916, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x70ce8916, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x14409728, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xa2181)) returned 1 [0067.794] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0067.794] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001106[[fn=Badge]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm10001106[[fn=badge]].thmx"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001106[[fn=Badge]].thmx.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm10001106[[fn=badge]].thmx.xuy")) returned 1 [0067.794] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001114[[fn=Gallery]].thmx", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001114[[fn=Gallery]].thmx", lpFilePart=0x0) returned 0x83 [0067.794] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0067.794] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001114[[fn=Gallery]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm10001114[[fn=gallery]].thmx"), fInfoLevelId=0x0, lpFileInformation=0x227d828 | out: lpFileInformation=0x227d828*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x714f456a, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x714f456a, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x75a81300, ftLastWriteTime.dwHighDateTime=0x1d138aa, nFileSizeHigh=0x0, nFileSizeLow=0x10a79d)) returned 1 [0067.794] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0067.795] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001114[[fn=Gallery]].thmx", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001114[[fn=Gallery]].thmx", lpFilePart=0x0) returned 0x83 [0067.795] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0067.795] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001114[[fn=Gallery]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm10001114[[fn=gallery]].thmx"), fInfoLevelId=0x0, lpFileInformation=0x227da08 | out: lpFileInformation=0x227da08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x714f456a, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x714f456a, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x75a81300, ftLastWriteTime.dwHighDateTime=0x1d138aa, nFileSizeHigh=0x0, nFileSizeLow=0x10a79d)) returned 1 [0067.795] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0067.795] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001114[[fn=Gallery]].thmx", nBufferLength=0x105, lpBuffer=0x3be040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001114[[fn=Gallery]].thmx", lpFilePart=0x0) returned 0x83 [0067.795] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0067.795] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001114[[fn=Gallery]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm10001114[[fn=gallery]].thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0067.795] GetFileType (hFile=0x444) returned 0x1 [0067.795] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be490) returned 1 [0067.795] GetFileType (hFile=0x444) returned 0x1 [0067.795] ReadFile (in: hFile=0x444, lpBuffer=0x227fef8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5a8, lpOverlapped=0x0 | out: lpBuffer=0x227fef8*, lpNumberOfBytesRead=0x3be5a8*=0x1000, lpOverlapped=0x0) returned 1 [0067.904] CloseHandle (hObject=0x444) returned 1 [0067.905] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001114[[fn=Gallery]].thmx", nBufferLength=0x105, lpBuffer=0x3be040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001114[[fn=Gallery]].thmx", lpFilePart=0x0) returned 0x83 [0067.905] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0067.905] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001114[[fn=Gallery]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm10001114[[fn=gallery]].thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0067.905] GetFileType (hFile=0x444) returned 0x1 [0067.905] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be490) returned 1 [0067.906] GetFileType (hFile=0x444) returned 0x1 [0067.906] WriteFile (in: hFile=0x444, lpBuffer=0x227dbc8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be658, lpOverlapped=0x0 | out: lpBuffer=0x227dbc8*, lpNumberOfBytesWritten=0x3be658*=0x2000, lpOverlapped=0x0) returned 1 [0067.906] CloseHandle (hObject=0x444) returned 1 [0067.906] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001114[[fn=Gallery]].thmx", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001114[[fn=Gallery]].thmx", lpFilePart=0x0) returned 0x83 [0067.906] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001114[[fn=Gallery]].thmx.xuy", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001114[[fn=Gallery]].thmx.xuy", lpFilePart=0x0) returned 0x87 [0067.906] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0067.906] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001114[[fn=Gallery]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm10001114[[fn=gallery]].thmx"), fInfoLevelId=0x0, lpFileInformation=0x3be670 | out: lpFileInformation=0x3be670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x714f456a, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x714f456a, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x1453a979, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x10a79d)) returned 1 [0067.906] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0067.906] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001114[[fn=Gallery]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm10001114[[fn=gallery]].thmx"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001114[[fn=Gallery]].thmx.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm10001114[[fn=gallery]].thmx.xuy")) returned 1 [0067.908] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001115[[fn=Parcel]].thmx", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001115[[fn=Parcel]].thmx", lpFilePart=0x0) returned 0x82 [0067.908] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0067.908] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001115[[fn=Parcel]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm10001115[[fn=parcel]].thmx"), fInfoLevelId=0x0, lpFileInformation=0x22fc490 | out: lpFileInformation=0x22fc490*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7073f0cf, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x7073f0cf, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x493dd800, ftLastWriteTime.dwHighDateTime=0x1d104b0, nFileSizeHigh=0x0, nFileSizeLow=0x9477a)) returned 1 [0067.908] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0067.909] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001115[[fn=Parcel]].thmx", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001115[[fn=Parcel]].thmx", lpFilePart=0x0) returned 0x82 [0067.909] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0067.909] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001115[[fn=Parcel]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm10001115[[fn=parcel]].thmx"), fInfoLevelId=0x0, lpFileInformation=0x22fc670 | out: lpFileInformation=0x22fc670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7073f0cf, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x7073f0cf, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x493dd800, ftLastWriteTime.dwHighDateTime=0x1d104b0, nFileSizeHigh=0x0, nFileSizeLow=0x9477a)) returned 1 [0067.909] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0067.909] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001115[[fn=Parcel]].thmx", nBufferLength=0x105, lpBuffer=0x3be040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001115[[fn=Parcel]].thmx", lpFilePart=0x0) returned 0x82 [0067.909] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0067.909] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001115[[fn=Parcel]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm10001115[[fn=parcel]].thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0067.909] GetFileType (hFile=0x444) returned 0x1 [0067.910] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be490) returned 1 [0067.910] GetFileType (hFile=0x444) returned 0x1 [0067.910] ReadFile (in: hFile=0x444, lpBuffer=0x22feb60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5a8, lpOverlapped=0x0 | out: lpBuffer=0x22feb60*, lpNumberOfBytesRead=0x3be5a8*=0x1000, lpOverlapped=0x0) returned 1 [0068.035] CloseHandle (hObject=0x444) returned 1 [0068.035] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001115[[fn=Parcel]].thmx", nBufferLength=0x105, lpBuffer=0x3be040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001115[[fn=Parcel]].thmx", lpFilePart=0x0) returned 0x82 [0068.035] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0068.035] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001115[[fn=Parcel]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm10001115[[fn=parcel]].thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0068.036] GetFileType (hFile=0x444) returned 0x1 [0068.036] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be490) returned 1 [0068.036] GetFileType (hFile=0x444) returned 0x1 [0068.036] WriteFile (in: hFile=0x444, lpBuffer=0x2157488*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be658, lpOverlapped=0x0 | out: lpBuffer=0x2157488*, lpNumberOfBytesWritten=0x3be658*=0x2000, lpOverlapped=0x0) returned 1 [0068.036] CloseHandle (hObject=0x444) returned 1 [0068.036] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001115[[fn=Parcel]].thmx", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001115[[fn=Parcel]].thmx", lpFilePart=0x0) returned 0x82 [0068.036] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001115[[fn=Parcel]].thmx.xuy", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001115[[fn=Parcel]].thmx.xuy", lpFilePart=0x0) returned 0x86 [0068.036] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0068.036] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001115[[fn=Parcel]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm10001115[[fn=parcel]].thmx"), fInfoLevelId=0x0, lpFileInformation=0x3be670 | out: lpFileInformation=0x3be670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7073f0cf, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x7073f0cf, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x1467a383, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x9477a)) returned 1 [0068.036] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0068.036] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001115[[fn=Parcel]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm10001115[[fn=parcel]].thmx"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001115[[fn=Parcel]].thmx.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm10001115[[fn=parcel]].thmx.xuy")) returned 1 [0068.037] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0068.037] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics", lpFilePart=0x0) returned 0x62 [0068.037] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\", lpFilePart=0x0) returned 0x63 [0068.037] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d7fd0 [0068.039] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0068.040] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0068.040] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0068.040] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0068.040] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0068.040] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0068.040] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0068.040] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics", lpFilePart=0x0) returned 0x62 [0068.040] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\", lpFilePart=0x0) returned 0x63 [0068.041] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d7c70 [0068.041] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0068.041] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0068.041] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0068.041] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0068.041] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0068.041] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0068.041] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0068.041] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033", nBufferLength=0x105, lpBuffer=0x3be130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033", lpFilePart=0x0) returned 0x67 [0068.041] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\", nBufferLength=0x105, lpBuffer=0x3be0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\", lpFilePart=0x0) returned 0x68 [0068.041] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\*", lpFindFileData=0x3be2e0 | out: lpFindFileData=0x3be2e0) returned 0x5d7c70 [0068.137] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0068.162] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0068.162] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0068.162] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0068.162] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0068.163] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0068.163] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0068.163] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0068.163] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0068.163] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0068.163] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0068.164] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0068.164] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0068.164] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0068.164] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0068.164] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0068.164] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0068.164] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0068.164] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 0 [0068.164] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0068.165] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0068.165] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0068.165] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0068.165] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033", nBufferLength=0x105, lpBuffer=0x3be130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033", lpFilePart=0x0) returned 0x67 [0068.165] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\", nBufferLength=0x105, lpBuffer=0x3be0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\", lpFilePart=0x0) returned 0x68 [0068.165] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\*", lpFindFileData=0x3be2e0 | out: lpFindFileData=0x3be2e0) returned 0x5d78b0 [0068.166] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0068.166] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0068.167] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0068.167] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0068.167] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0068.167] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0068.167] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0068.167] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0068.167] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0068.168] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0068.168] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0068.168] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0068.168] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0068.168] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0068.168] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0068.168] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0068.168] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0068.169] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0068.169] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 0 [0068.169] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0068.169] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0068.169] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0068.170] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328884[[fn=architecture]].glox", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328884[[fn=architecture]].glox", lpFilePart=0x0) returned 0x8a [0068.170] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0068.170] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328884[[fn=architecture]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328884[[fn=architecture]].glox"), fInfoLevelId=0x0, lpFileInformation=0x218c638 | out: lpFileInformation=0x218c638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f574db6, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x6f574db6, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x6f574db6, ftLastWriteTime.dwHighDateTime=0x1d301c4, nFileSizeHigh=0x0, nFileSizeLow=0x1697)) returned 1 [0068.170] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0068.170] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328884[[fn=architecture]].glox", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328884[[fn=architecture]].glox", lpFilePart=0x0) returned 0x8a [0068.170] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0068.171] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328884[[fn=architecture]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328884[[fn=architecture]].glox"), fInfoLevelId=0x0, lpFileInformation=0x218c830 | out: lpFileInformation=0x218c830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f574db6, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x6f574db6, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x6f574db6, ftLastWriteTime.dwHighDateTime=0x1d301c4, nFileSizeHigh=0x0, nFileSizeLow=0x1697)) returned 1 [0068.171] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0068.171] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328884[[fn=architecture]].glox", nBufferLength=0x105, lpBuffer=0x3be040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328884[[fn=architecture]].glox", lpFilePart=0x0) returned 0x8a [0068.171] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0068.171] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328884[[fn=architecture]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328884[[fn=architecture]].glox"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0068.171] GetFileType (hFile=0x444) returned 0x1 [0068.171] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be490) returned 1 [0068.171] GetFileType (hFile=0x444) returned 0x1 [0068.171] ReadFile (in: hFile=0x444, lpBuffer=0x218ed50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5a8, lpOverlapped=0x0 | out: lpBuffer=0x218ed50*, lpNumberOfBytesRead=0x3be5a8*=0x1000, lpOverlapped=0x0) returned 1 [0068.207] CloseHandle (hObject=0x444) returned 1 [0068.208] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328884[[fn=architecture]].glox", nBufferLength=0x105, lpBuffer=0x3be040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328884[[fn=architecture]].glox", lpFilePart=0x0) returned 0x8a [0068.208] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0068.208] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328884[[fn=architecture]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328884[[fn=architecture]].glox"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0068.208] GetFileType (hFile=0x444) returned 0x1 [0068.208] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be490) returned 1 [0068.208] GetFileType (hFile=0x444) returned 0x1 [0068.208] WriteFile (in: hFile=0x444, lpBuffer=0x218ca08*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be658, lpOverlapped=0x0 | out: lpBuffer=0x218ca08*, lpNumberOfBytesWritten=0x3be658*=0x2000, lpOverlapped=0x0) returned 1 [0068.208] CloseHandle (hObject=0x444) returned 1 [0068.208] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328884[[fn=architecture]].glox", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328884[[fn=architecture]].glox", lpFilePart=0x0) returned 0x8a [0068.209] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328884[[fn=architecture]].glox.xuy", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328884[[fn=architecture]].glox.xuy", lpFilePart=0x0) returned 0x8e [0068.209] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0068.209] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328884[[fn=architecture]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328884[[fn=architecture]].glox"), fInfoLevelId=0x0, lpFileInformation=0x3be670 | out: lpFileInformation=0x3be670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f574db6, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x6f574db6, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x147fd8d5, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0068.209] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0068.209] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328884[[fn=architecture]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328884[[fn=architecture]].glox"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328884[[fn=architecture]].glox.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328884[[fn=architecture]].glox.xuy")) returned 1 [0068.209] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328893[[fn=BracketList]].glox", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328893[[fn=BracketList]].glox", lpFilePart=0x0) returned 0x89 [0068.209] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0068.210] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328893[[fn=BracketList]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328893[[fn=bracketlist]].glox"), fInfoLevelId=0x0, lpFileInformation=0x220b330 | out: lpFileInformation=0x220b330*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f71875a, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x6f71875a, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x6f71875a, ftLastWriteTime.dwHighDateTime=0x1d301c4, nFileSizeHigh=0x0, nFileSizeLow=0xfba)) returned 1 [0068.210] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0068.210] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328893[[fn=BracketList]].glox", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328893[[fn=BracketList]].glox", lpFilePart=0x0) returned 0x89 [0068.210] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0068.210] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328893[[fn=BracketList]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328893[[fn=bracketlist]].glox"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0068.211] GetFileType (hFile=0x444) returned 0x1 [0068.211] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be400) returned 1 [0068.211] GetFileType (hFile=0x444) returned 0x1 [0068.211] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be628 | out: lpFileSizeHigh=0x3be628*=0x0) returned 0xfba [0068.211] ReadFile (in: hFile=0x444, lpBuffer=0x220c6f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be558, lpOverlapped=0x0 | out: lpBuffer=0x220c6f8*, lpNumberOfBytesRead=0x3be558*=0xfba, lpOverlapped=0x0) returned 1 [0068.289] CloseHandle (hObject=0x444) returned 1 [0068.301] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328893[[fn=BracketList]].glox", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328893[[fn=BracketList]].glox", lpFilePart=0x0) returned 0x89 [0068.301] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0068.301] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328893[[fn=BracketList]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328893[[fn=bracketlist]].glox"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0068.302] GetFileType (hFile=0x444) returned 0x1 [0068.302] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be400) returned 1 [0068.302] GetFileType (hFile=0x444) returned 0x1 [0068.302] WriteFile (in: hFile=0x444, lpBuffer=0x2288640*, nNumberOfBytesToWrite=0xfc0, lpNumberOfBytesWritten=0x3be468, lpOverlapped=0x0 | out: lpBuffer=0x2288640*, lpNumberOfBytesWritten=0x3be468*=0xfc0, lpOverlapped=0x0) returned 1 [0068.304] CloseHandle (hObject=0x444) returned 1 [0068.304] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328893[[fn=BracketList]].glox", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328893[[fn=BracketList]].glox", lpFilePart=0x0) returned 0x89 [0068.304] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328893[[fn=BracketList]].glox.xuy", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328893[[fn=BracketList]].glox.xuy", lpFilePart=0x0) returned 0x8d [0068.304] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0068.304] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328893[[fn=BracketList]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328893[[fn=bracketlist]].glox"), fInfoLevelId=0x0, lpFileInformation=0x3be670 | out: lpFileInformation=0x3be670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f71875a, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x6f71875a, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x149082ea, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xfc0)) returned 1 [0068.304] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0068.304] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328893[[fn=BracketList]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328893[[fn=bracketlist]].glox"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328893[[fn=BracketList]].glox.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328893[[fn=bracketlist]].glox.xuy")) returned 1 [0068.305] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328905[[fn=Chevron Accent]].glox", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328905[[fn=Chevron Accent]].glox", lpFilePart=0x0) returned 0x8c [0068.305] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0068.305] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328905[[fn=Chevron Accent]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328905[[fn=chevron accent]].glox"), fInfoLevelId=0x0, lpFileInformation=0x2289a40 | out: lpFileInformation=0x2289a40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f7b1098, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x6f7b1098, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x6f7b1098, ftLastWriteTime.dwHighDateTime=0x1d301c4, nFileSizeHigh=0x0, nFileSizeLow=0x1093)) returned 1 [0068.306] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0068.306] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328905[[fn=Chevron Accent]].glox", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328905[[fn=Chevron Accent]].glox", lpFilePart=0x0) returned 0x8c [0068.306] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0068.306] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328905[[fn=Chevron Accent]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328905[[fn=chevron accent]].glox"), fInfoLevelId=0x0, lpFileInformation=0x2289c48 | out: lpFileInformation=0x2289c48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f7b1098, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x6f7b1098, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x6f7b1098, ftLastWriteTime.dwHighDateTime=0x1d301c4, nFileSizeHigh=0x0, nFileSizeLow=0x1093)) returned 1 [0068.306] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0068.306] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328905[[fn=Chevron Accent]].glox", nBufferLength=0x105, lpBuffer=0x3be040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328905[[fn=Chevron Accent]].glox", lpFilePart=0x0) returned 0x8c [0068.307] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0068.307] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328905[[fn=Chevron Accent]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328905[[fn=chevron accent]].glox"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0068.307] GetFileType (hFile=0x444) returned 0x1 [0068.307] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be490) returned 1 [0068.307] GetFileType (hFile=0x444) returned 0x1 [0068.307] ReadFile (in: hFile=0x444, lpBuffer=0x228c188, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5a8, lpOverlapped=0x0 | out: lpBuffer=0x228c188*, lpNumberOfBytesRead=0x3be5a8*=0x1000, lpOverlapped=0x0) returned 1 [0068.338] CloseHandle (hObject=0x444) returned 1 [0068.338] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328905[[fn=Chevron Accent]].glox", nBufferLength=0x105, lpBuffer=0x3be040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328905[[fn=Chevron Accent]].glox", lpFilePart=0x0) returned 0x8c [0068.338] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0068.338] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328905[[fn=Chevron Accent]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328905[[fn=chevron accent]].glox"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0068.338] GetFileType (hFile=0x444) returned 0x1 [0068.339] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be490) returned 1 [0068.339] GetFileType (hFile=0x444) returned 0x1 [0068.339] WriteFile (in: hFile=0x444, lpBuffer=0x2289e30*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be658, lpOverlapped=0x0 | out: lpBuffer=0x2289e30*, lpNumberOfBytesWritten=0x3be658*=0x2000, lpOverlapped=0x0) returned 1 [0068.339] CloseHandle (hObject=0x444) returned 1 [0068.339] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328905[[fn=Chevron Accent]].glox", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328905[[fn=Chevron Accent]].glox", lpFilePart=0x0) returned 0x8c [0068.339] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328905[[fn=Chevron Accent]].glox.xuy", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328905[[fn=Chevron Accent]].glox.xuy", lpFilePart=0x0) returned 0x90 [0068.339] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0068.339] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328905[[fn=Chevron Accent]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328905[[fn=chevron accent]].glox"), fInfoLevelId=0x0, lpFileInformation=0x3be670 | out: lpFileInformation=0x3be670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f7b1098, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x6f7b1098, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x14954a35, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0068.339] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0068.339] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328905[[fn=Chevron Accent]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328905[[fn=chevron accent]].glox"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328905[[fn=Chevron Accent]].glox.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328905[[fn=chevron accent]].glox.xuy")) returned 1 [0068.340] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328908[[fn=Circle Process]].glox", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328908[[fn=Circle Process]].glox", lpFilePart=0x0) returned 0x8c [0068.340] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0068.340] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328908[[fn=Circle Process]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328908[[fn=circle process]].glox"), fInfoLevelId=0x0, lpFileInformation=0x2308790 | out: lpFileInformation=0x2308790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6faabeaf, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x6faabeaf, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x6faabeaf, ftLastWriteTime.dwHighDateTime=0x1d301c4, nFileSizeHigh=0x0, nFileSizeLow=0x41a6)) returned 1 [0068.341] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0068.341] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328908[[fn=Circle Process]].glox", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328908[[fn=Circle Process]].glox", lpFilePart=0x0) returned 0x8c [0068.341] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0068.341] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328908[[fn=Circle Process]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328908[[fn=circle process]].glox"), fInfoLevelId=0x0, lpFileInformation=0x2308998 | out: lpFileInformation=0x2308998*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6faabeaf, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x6faabeaf, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x6faabeaf, ftLastWriteTime.dwHighDateTime=0x1d301c4, nFileSizeHigh=0x0, nFileSizeLow=0x41a6)) returned 1 [0068.341] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0068.342] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328908[[fn=Circle Process]].glox", nBufferLength=0x105, lpBuffer=0x3be040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328908[[fn=Circle Process]].glox", lpFilePart=0x0) returned 0x8c [0068.342] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0068.342] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328908[[fn=Circle Process]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328908[[fn=circle process]].glox"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0068.342] GetFileType (hFile=0x444) returned 0x1 [0068.342] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be490) returned 1 [0068.342] GetFileType (hFile=0x444) returned 0x1 [0068.342] ReadFile (in: hFile=0x444, lpBuffer=0x230aed8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5a8, lpOverlapped=0x0 | out: lpBuffer=0x230aed8*, lpNumberOfBytesRead=0x3be5a8*=0x1000, lpOverlapped=0x0) returned 1 [0068.391] CloseHandle (hObject=0x444) returned 1 [0068.391] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328908[[fn=Circle Process]].glox", nBufferLength=0x105, lpBuffer=0x3be040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328908[[fn=Circle Process]].glox", lpFilePart=0x0) returned 0x8c [0068.391] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0068.391] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328908[[fn=Circle Process]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328908[[fn=circle process]].glox"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0068.392] GetFileType (hFile=0x444) returned 0x1 [0068.392] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be490) returned 1 [0068.392] GetFileType (hFile=0x444) returned 0x1 [0068.392] WriteFile (in: hFile=0x444, lpBuffer=0x215e3d8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be658, lpOverlapped=0x0 | out: lpBuffer=0x215e3d8*, lpNumberOfBytesWritten=0x3be658*=0x2000, lpOverlapped=0x0) returned 1 [0068.392] CloseHandle (hObject=0x444) returned 1 [0068.392] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328908[[fn=Circle Process]].glox", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328908[[fn=Circle Process]].glox", lpFilePart=0x0) returned 0x8c [0068.392] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328908[[fn=Circle Process]].glox.xuy", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328908[[fn=Circle Process]].glox.xuy", lpFilePart=0x0) returned 0x90 [0068.392] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0068.392] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328908[[fn=Circle Process]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328908[[fn=circle process]].glox"), fInfoLevelId=0x0, lpFileInformation=0x3be670 | out: lpFileInformation=0x3be670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6faabeaf, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x6faabeaf, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x149c6ba7, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x41a6)) returned 1 [0068.392] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0068.392] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328908[[fn=Circle Process]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328908[[fn=circle process]].glox"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328908[[fn=Circle Process]].glox.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328908[[fn=circle process]].glox.xuy")) returned 1 [0068.393] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328916[[fn=Converging Text]].glox", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328916[[fn=Converging Text]].glox", lpFilePart=0x0) returned 0x8d [0068.393] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0068.393] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328916[[fn=Converging Text]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328916[[fn=converging text]].glox"), fInfoLevelId=0x0, lpFileInformation=0x218e3f8 | out: lpFileInformation=0x218e3f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f54eba8, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x6f54eba8, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x6f54eba8, ftLastWriteTime.dwHighDateTime=0x1d301c4, nFileSizeHigh=0x0, nFileSizeLow=0x2c74)) returned 1 [0068.393] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0068.393] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328916[[fn=Converging Text]].glox", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328916[[fn=Converging Text]].glox", lpFilePart=0x0) returned 0x8d [0068.393] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0068.393] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328916[[fn=Converging Text]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328916[[fn=converging text]].glox"), fInfoLevelId=0x0, lpFileInformation=0x218e600 | out: lpFileInformation=0x218e600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f54eba8, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x6f54eba8, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x6f54eba8, ftLastWriteTime.dwHighDateTime=0x1d301c4, nFileSizeHigh=0x0, nFileSizeLow=0x2c74)) returned 1 [0068.394] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0068.394] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328916[[fn=Converging Text]].glox", nBufferLength=0x105, lpBuffer=0x3be040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328916[[fn=Converging Text]].glox", lpFilePart=0x0) returned 0x8d [0068.394] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0068.394] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328916[[fn=Converging Text]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328916[[fn=converging text]].glox"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0068.394] GetFileType (hFile=0x444) returned 0x1 [0068.394] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be490) returned 1 [0068.394] GetFileType (hFile=0x444) returned 0x1 [0068.394] ReadFile (in: hFile=0x444, lpBuffer=0x2190b40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5a8, lpOverlapped=0x0 | out: lpBuffer=0x2190b40*, lpNumberOfBytesRead=0x3be5a8*=0x1000, lpOverlapped=0x0) returned 1 [0068.411] CloseHandle (hObject=0x444) returned 1 [0068.411] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328916[[fn=Converging Text]].glox", nBufferLength=0x105, lpBuffer=0x3be040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328916[[fn=Converging Text]].glox", lpFilePart=0x0) returned 0x8d [0068.411] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0068.411] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328916[[fn=Converging Text]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328916[[fn=converging text]].glox"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0068.411] GetFileType (hFile=0x444) returned 0x1 [0068.411] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be490) returned 1 [0068.411] GetFileType (hFile=0x444) returned 0x1 [0068.411] WriteFile (in: hFile=0x444, lpBuffer=0x218e7e8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be658, lpOverlapped=0x0 | out: lpBuffer=0x218e7e8*, lpNumberOfBytesWritten=0x3be658*=0x2000, lpOverlapped=0x0) returned 1 [0068.412] CloseHandle (hObject=0x444) returned 1 [0068.412] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328916[[fn=Converging Text]].glox", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328916[[fn=Converging Text]].glox", lpFilePart=0x0) returned 0x8d [0068.412] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328916[[fn=Converging Text]].glox.xuy", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328916[[fn=Converging Text]].glox.xuy", lpFilePart=0x0) returned 0x91 [0068.412] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0068.412] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328916[[fn=Converging Text]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328916[[fn=converging text]].glox"), fInfoLevelId=0x0, lpFileInformation=0x3be670 | out: lpFileInformation=0x3be670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f54eba8, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x6f54eba8, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x149ecd88, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2c74)) returned 1 [0068.412] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0068.412] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328916[[fn=Converging Text]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328916[[fn=converging text]].glox"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328916[[fn=Converging Text]].glox.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328916[[fn=converging text]].glox.xuy")) returned 1 [0068.413] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328919[[fn=Hexagon Radial]].glox", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328919[[fn=Hexagon Radial]].glox", lpFilePart=0x0) returned 0x8c [0068.413] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0068.413] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328919[[fn=Hexagon Radial]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328919[[fn=hexagon radial]].glox"), fInfoLevelId=0x0, lpFileInformation=0x220d148 | out: lpFileInformation=0x220d148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f4dc4d0, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x6f4dc4d0, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x6f502714, ftLastWriteTime.dwHighDateTime=0x1d301c4, nFileSizeHigh=0x0, nFileSizeLow=0x1788)) returned 1 [0068.414] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0068.414] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328919[[fn=Hexagon Radial]].glox", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328919[[fn=Hexagon Radial]].glox", lpFilePart=0x0) returned 0x8c [0068.414] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0068.414] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328919[[fn=Hexagon Radial]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328919[[fn=hexagon radial]].glox"), fInfoLevelId=0x0, lpFileInformation=0x220d350 | out: lpFileInformation=0x220d350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f4dc4d0, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x6f4dc4d0, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x6f502714, ftLastWriteTime.dwHighDateTime=0x1d301c4, nFileSizeHigh=0x0, nFileSizeLow=0x1788)) returned 1 [0068.414] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0068.415] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328919[[fn=Hexagon Radial]].glox", nBufferLength=0x105, lpBuffer=0x3be040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328919[[fn=Hexagon Radial]].glox", lpFilePart=0x0) returned 0x8c [0068.415] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0068.415] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328919[[fn=Hexagon Radial]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328919[[fn=hexagon radial]].glox"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0068.415] GetFileType (hFile=0x444) returned 0x1 [0068.415] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be490) returned 1 [0068.415] GetFileType (hFile=0x444) returned 0x1 [0068.415] ReadFile (in: hFile=0x444, lpBuffer=0x220f890, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5a8, lpOverlapped=0x0 | out: lpBuffer=0x220f890*, lpNumberOfBytesRead=0x3be5a8*=0x1000, lpOverlapped=0x0) returned 1 [0068.436] CloseHandle (hObject=0x444) returned 1 [0068.436] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328919[[fn=Hexagon Radial]].glox", nBufferLength=0x105, lpBuffer=0x3be040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328919[[fn=Hexagon Radial]].glox", lpFilePart=0x0) returned 0x8c [0068.436] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0068.436] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328919[[fn=Hexagon Radial]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328919[[fn=hexagon radial]].glox"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0068.437] GetFileType (hFile=0x444) returned 0x1 [0068.437] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be490) returned 1 [0068.437] GetFileType (hFile=0x444) returned 0x1 [0068.437] WriteFile (in: hFile=0x444, lpBuffer=0x220d538*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be658, lpOverlapped=0x0 | out: lpBuffer=0x220d538*, lpNumberOfBytesWritten=0x3be658*=0x2000, lpOverlapped=0x0) returned 1 [0068.437] CloseHandle (hObject=0x444) returned 1 [0068.437] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328919[[fn=Hexagon Radial]].glox", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328919[[fn=Hexagon Radial]].glox", lpFilePart=0x0) returned 0x8c [0068.437] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328919[[fn=Hexagon Radial]].glox.xuy", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328919[[fn=Hexagon Radial]].glox.xuy", lpFilePart=0x0) returned 0x90 [0068.437] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0068.437] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328919[[fn=Hexagon Radial]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328919[[fn=hexagon radial]].glox"), fInfoLevelId=0x0, lpFileInformation=0x3be670 | out: lpFileInformation=0x3be670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f4dc4d0, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x6f4dc4d0, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x14a392cb, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0068.437] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0068.437] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328919[[fn=Hexagon Radial]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328919[[fn=hexagon radial]].glox"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328919[[fn=Hexagon Radial]].glox.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328919[[fn=hexagon radial]].glox.xuy")) returned 1 [0068.438] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328925[[fn=Interconnected Block Process]].glox", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328925[[fn=Interconnected Block Process]].glox", lpFilePart=0x0) returned 0x9a [0068.438] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0068.438] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328925[[fn=Interconnected Block Process]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328925[[fn=interconnected block process]].glox"), fInfoLevelId=0x0, lpFileInformation=0x228be98 | out: lpFileInformation=0x228be98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f633982, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x6f633982, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x6f633982, ftLastWriteTime.dwHighDateTime=0x1d301c4, nFileSizeHigh=0x0, nFileSizeLow=0x23e7)) returned 1 [0068.439] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0068.439] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328925[[fn=Interconnected Block Process]].glox", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328925[[fn=Interconnected Block Process]].glox", lpFilePart=0x0) returned 0x9a [0068.439] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0068.439] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328925[[fn=Interconnected Block Process]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328925[[fn=interconnected block process]].glox"), fInfoLevelId=0x0, lpFileInformation=0x228c0d0 | out: lpFileInformation=0x228c0d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f633982, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x6f633982, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x6f633982, ftLastWriteTime.dwHighDateTime=0x1d301c4, nFileSizeHigh=0x0, nFileSizeLow=0x23e7)) returned 1 [0068.439] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0068.439] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328925[[fn=Interconnected Block Process]].glox", nBufferLength=0x105, lpBuffer=0x3be040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328925[[fn=Interconnected Block Process]].glox", lpFilePart=0x0) returned 0x9a [0068.439] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0068.439] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328925[[fn=Interconnected Block Process]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328925[[fn=interconnected block process]].glox"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0068.440] GetFileType (hFile=0x444) returned 0x1 [0068.440] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be490) returned 1 [0068.440] GetFileType (hFile=0x444) returned 0x1 [0068.440] ReadFile (in: hFile=0x444, lpBuffer=0x228e670, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5a8, lpOverlapped=0x0 | out: lpBuffer=0x228e670*, lpNumberOfBytesRead=0x3be5a8*=0x1000, lpOverlapped=0x0) returned 1 [0068.465] CloseHandle (hObject=0x444) returned 1 [0068.465] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328925[[fn=Interconnected Block Process]].glox", nBufferLength=0x105, lpBuffer=0x3be040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328925[[fn=Interconnected Block Process]].glox", lpFilePart=0x0) returned 0x9a [0068.465] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0068.465] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328925[[fn=Interconnected Block Process]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328925[[fn=interconnected block process]].glox"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0068.465] GetFileType (hFile=0x444) returned 0x1 [0068.465] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be490) returned 1 [0068.465] GetFileType (hFile=0x444) returned 0x1 [0068.465] WriteFile (in: hFile=0x444, lpBuffer=0x228c2e8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be658, lpOverlapped=0x0 | out: lpBuffer=0x228c2e8*, lpNumberOfBytesWritten=0x3be658*=0x2000, lpOverlapped=0x0) returned 1 [0068.465] CloseHandle (hObject=0x444) returned 1 [0068.466] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328925[[fn=Interconnected Block Process]].glox", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328925[[fn=Interconnected Block Process]].glox", lpFilePart=0x0) returned 0x9a [0068.466] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328925[[fn=Interconnected Block Process]].glox.xuy", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328925[[fn=Interconnected Block Process]].glox.xuy", lpFilePart=0x0) returned 0x9e [0068.466] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0068.466] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328925[[fn=Interconnected Block Process]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328925[[fn=interconnected block process]].glox"), fInfoLevelId=0x0, lpFileInformation=0x3be670 | out: lpFileInformation=0x3be670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f633982, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x6f633982, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x14a856e6, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x23e7)) returned 1 [0068.466] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0068.466] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328925[[fn=Interconnected Block Process]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328925[[fn=interconnected block process]].glox"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328925[[fn=Interconnected Block Process]].glox.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328925[[fn=interconnected block process]].glox.xuy")) returned 1 [0068.467] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328932[[fn=Picture Frame]].glox", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328932[[fn=Picture Frame]].glox", lpFilePart=0x0) returned 0x8b [0068.467] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0068.467] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328932[[fn=Picture Frame]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328932[[fn=picture frame]].glox"), fInfoLevelId=0x0, lpFileInformation=0x230acf0 | out: lpFileInformation=0x230acf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f6a606e, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x6f6a606e, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x6f6a606e, ftLastWriteTime.dwHighDateTime=0x1d301c4, nFileSizeHigh=0x0, nFileSizeLow=0x10e6)) returned 1 [0068.467] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0068.467] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328932[[fn=Picture Frame]].glox", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328932[[fn=Picture Frame]].glox", lpFilePart=0x0) returned 0x8b [0068.467] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0068.467] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328932[[fn=Picture Frame]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328932[[fn=picture frame]].glox"), fInfoLevelId=0x0, lpFileInformation=0x230aee8 | out: lpFileInformation=0x230aee8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f6a606e, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x6f6a606e, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x6f6a606e, ftLastWriteTime.dwHighDateTime=0x1d301c4, nFileSizeHigh=0x0, nFileSizeLow=0x10e6)) returned 1 [0068.467] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0068.467] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328932[[fn=Picture Frame]].glox", nBufferLength=0x105, lpBuffer=0x3be040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328932[[fn=Picture Frame]].glox", lpFilePart=0x0) returned 0x8b [0068.467] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0068.467] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328932[[fn=Picture Frame]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328932[[fn=picture frame]].glox"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0068.468] GetFileType (hFile=0x444) returned 0x1 [0068.468] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be490) returned 1 [0068.468] GetFileType (hFile=0x444) returned 0x1 [0068.468] ReadFile (in: hFile=0x444, lpBuffer=0x230d408, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5a8, lpOverlapped=0x0 | out: lpBuffer=0x230d408*, lpNumberOfBytesRead=0x3be5a8*=0x1000, lpOverlapped=0x0) returned 1 [0068.530] CloseHandle (hObject=0x444) returned 1 [0068.530] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328932[[fn=Picture Frame]].glox", nBufferLength=0x105, lpBuffer=0x3be040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328932[[fn=Picture Frame]].glox", lpFilePart=0x0) returned 0x8b [0068.530] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0068.531] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328932[[fn=Picture Frame]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328932[[fn=picture frame]].glox"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0068.531] GetFileType (hFile=0x444) returned 0x1 [0068.531] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be490) returned 1 [0068.531] GetFileType (hFile=0x444) returned 0x1 [0068.531] WriteFile (in: hFile=0x444, lpBuffer=0x215e418*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be658, lpOverlapped=0x0 | out: lpBuffer=0x215e418*, lpNumberOfBytesWritten=0x3be658*=0x2000, lpOverlapped=0x0) returned 1 [0068.531] CloseHandle (hObject=0x444) returned 1 [0068.531] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328932[[fn=Picture Frame]].glox", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328932[[fn=Picture Frame]].glox", lpFilePart=0x0) returned 0x8b [0068.531] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328932[[fn=Picture Frame]].glox.xuy", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328932[[fn=Picture Frame]].glox.xuy", lpFilePart=0x0) returned 0x8f [0068.531] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0068.531] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328932[[fn=Picture Frame]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328932[[fn=picture frame]].glox"), fInfoLevelId=0x0, lpFileInformation=0x3be670 | out: lpFileInformation=0x3be670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f6a606e, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x6f6a606e, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x14b1e265, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0068.531] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0068.532] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328932[[fn=Picture Frame]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328932[[fn=picture frame]].glox"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328932[[fn=Picture Frame]].glox.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328932[[fn=picture frame]].glox.xuy")) returned 1 [0068.532] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328935[[fn=Picture Organization Chart]].glox", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328935[[fn=Picture Organization Chart]].glox", lpFilePart=0x0) returned 0x98 [0068.532] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0068.532] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328935[[fn=Picture Organization Chart]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328935[[fn=picture organization chart]].glox"), fInfoLevelId=0x0, lpFileInformation=0x2189a20 | out: lpFileInformation=0x2189a20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f7fd57b, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x6f7fd57b, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x6f7fd57b, ftLastWriteTime.dwHighDateTime=0x1d301c4, nFileSizeHigh=0x0, nFileSizeLow=0x1cca)) returned 1 [0068.543] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0068.543] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328935[[fn=Picture Organization Chart]].glox", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328935[[fn=Picture Organization Chart]].glox", lpFilePart=0x0) returned 0x98 [0068.543] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0068.543] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328935[[fn=Picture Organization Chart]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328935[[fn=picture organization chart]].glox"), fInfoLevelId=0x0, lpFileInformation=0x2189c58 | out: lpFileInformation=0x2189c58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f7fd57b, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x6f7fd57b, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x6f7fd57b, ftLastWriteTime.dwHighDateTime=0x1d301c4, nFileSizeHigh=0x0, nFileSizeLow=0x1cca)) returned 1 [0068.543] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0068.543] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328935[[fn=Picture Organization Chart]].glox", nBufferLength=0x105, lpBuffer=0x3be040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328935[[fn=Picture Organization Chart]].glox", lpFilePart=0x0) returned 0x98 [0068.543] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0068.543] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328935[[fn=Picture Organization Chart]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328935[[fn=picture organization chart]].glox"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0068.544] GetFileType (hFile=0x444) returned 0x1 [0068.544] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be490) returned 1 [0068.544] GetFileType (hFile=0x444) returned 0x1 [0068.544] ReadFile (in: hFile=0x444, lpBuffer=0x218c1f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5a8, lpOverlapped=0x0 | out: lpBuffer=0x218c1f8*, lpNumberOfBytesRead=0x3be5a8*=0x1000, lpOverlapped=0x0) returned 1 [0068.587] CloseHandle (hObject=0x444) returned 1 [0068.588] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328935[[fn=Picture Organization Chart]].glox", nBufferLength=0x105, lpBuffer=0x3be040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328935[[fn=Picture Organization Chart]].glox", lpFilePart=0x0) returned 0x98 [0068.588] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0068.588] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328935[[fn=Picture Organization Chart]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328935[[fn=picture organization chart]].glox"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0068.588] GetFileType (hFile=0x444) returned 0x1 [0068.588] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be490) returned 1 [0068.588] GetFileType (hFile=0x444) returned 0x1 [0068.588] WriteFile (in: hFile=0x444, lpBuffer=0x2189e70*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be658, lpOverlapped=0x0 | out: lpBuffer=0x2189e70*, lpNumberOfBytesWritten=0x3be658*=0x2000, lpOverlapped=0x0) returned 1 [0068.588] CloseHandle (hObject=0x444) returned 1 [0068.588] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328935[[fn=Picture Organization Chart]].glox", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328935[[fn=Picture Organization Chart]].glox", lpFilePart=0x0) returned 0x98 [0068.588] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328935[[fn=Picture Organization Chart]].glox.xuy", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328935[[fn=Picture Organization Chart]].glox.xuy", lpFilePart=0x0) returned 0x9c [0068.588] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0068.589] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328935[[fn=Picture Organization Chart]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328935[[fn=picture organization chart]].glox"), fInfoLevelId=0x0, lpFileInformation=0x3be670 | out: lpFileInformation=0x3be670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f7fd57b, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x6f7fd57b, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x14bb6a5c, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0068.589] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0068.589] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328935[[fn=Picture Organization Chart]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328935[[fn=picture organization chart]].glox"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328935[[fn=Picture Organization Chart]].glox.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328935[[fn=picture organization chart]].glox.xuy")) returned 1 [0068.589] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328940[[fn=Radial Picture List]].glox", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328940[[fn=Radial Picture List]].glox", lpFilePart=0x0) returned 0x91 [0068.589] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0068.590] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328940[[fn=Radial Picture List]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328940[[fn=radial picture list]].glox"), fInfoLevelId=0x0, lpFileInformation=0x2208878 | out: lpFileInformation=0x2208878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f574db6, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x6f574db6, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x6f574db6, ftLastWriteTime.dwHighDateTime=0x1d301c4, nFileSizeHigh=0x0, nFileSizeLow=0x15dc)) returned 1 [0068.590] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0068.590] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328940[[fn=Radial Picture List]].glox", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328940[[fn=Radial Picture List]].glox", lpFilePart=0x0) returned 0x91 [0068.590] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0068.590] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328940[[fn=Radial Picture List]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328940[[fn=radial picture list]].glox"), fInfoLevelId=0x0, lpFileInformation=0x2208a90 | out: lpFileInformation=0x2208a90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f574db6, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x6f574db6, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x6f574db6, ftLastWriteTime.dwHighDateTime=0x1d301c4, nFileSizeHigh=0x0, nFileSizeLow=0x15dc)) returned 1 [0068.591] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0068.591] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328940[[fn=Radial Picture List]].glox", nBufferLength=0x105, lpBuffer=0x3be040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328940[[fn=Radial Picture List]].glox", lpFilePart=0x0) returned 0x91 [0068.591] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0068.591] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328940[[fn=Radial Picture List]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328940[[fn=radial picture list]].glox"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0068.591] GetFileType (hFile=0x444) returned 0x1 [0068.591] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be490) returned 1 [0068.591] GetFileType (hFile=0x444) returned 0x1 [0068.591] ReadFile (in: hFile=0x444, lpBuffer=0x220aff0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5a8, lpOverlapped=0x0 | out: lpBuffer=0x220aff0*, lpNumberOfBytesRead=0x3be5a8*=0x1000, lpOverlapped=0x0) returned 1 [0068.614] CloseHandle (hObject=0x444) returned 1 [0068.615] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328940[[fn=Radial Picture List]].glox", nBufferLength=0x105, lpBuffer=0x3be040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328940[[fn=Radial Picture List]].glox", lpFilePart=0x0) returned 0x91 [0068.615] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0068.615] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328940[[fn=Radial Picture List]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328940[[fn=radial picture list]].glox"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0068.615] GetFileType (hFile=0x444) returned 0x1 [0068.615] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be490) returned 1 [0068.615] GetFileType (hFile=0x444) returned 0x1 [0068.615] WriteFile (in: hFile=0x444, lpBuffer=0x2208c88*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be658, lpOverlapped=0x0 | out: lpBuffer=0x2208c88*, lpNumberOfBytesWritten=0x3be658*=0x2000, lpOverlapped=0x0) returned 1 [0068.615] CloseHandle (hObject=0x444) returned 1 [0068.615] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328940[[fn=Radial Picture List]].glox", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328940[[fn=Radial Picture List]].glox", lpFilePart=0x0) returned 0x91 [0068.616] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328940[[fn=Radial Picture List]].glox.xuy", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328940[[fn=Radial Picture List]].glox.xuy", lpFilePart=0x0) returned 0x95 [0068.616] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0068.616] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328940[[fn=Radial Picture List]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328940[[fn=radial picture list]].glox"), fInfoLevelId=0x0, lpFileInformation=0x3be670 | out: lpFileInformation=0x3be670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f574db6, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x6f574db6, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x14bdcbe9, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0068.616] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0068.616] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328940[[fn=Radial Picture List]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328940[[fn=radial picture list]].glox"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328940[[fn=Radial Picture List]].glox.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328940[[fn=radial picture list]].glox.xuy")) returned 1 [0068.617] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328951[[fn=Tabbed Arc]].glox", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328951[[fn=Tabbed Arc]].glox", lpFilePart=0x0) returned 0x88 [0068.617] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0068.617] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328951[[fn=Tabbed Arc]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328951[[fn=tabbed arc]].glox"), fInfoLevelId=0x0, lpFileInformation=0x2287620 | out: lpFileInformation=0x2287620*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f5e74e6, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x6f5e74e6, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x6f5e74e6, ftLastWriteTime.dwHighDateTime=0x1d301c4, nFileSizeHigh=0x0, nFileSizeLow=0xe63)) returned 1 [0068.621] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0068.621] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328951[[fn=Tabbed Arc]].glox", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328951[[fn=Tabbed Arc]].glox", lpFilePart=0x0) returned 0x88 [0068.621] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0068.621] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328951[[fn=Tabbed Arc]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328951[[fn=tabbed arc]].glox"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0068.621] GetFileType (hFile=0x444) returned 0x1 [0068.621] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be400) returned 1 [0068.621] GetFileType (hFile=0x444) returned 0x1 [0068.621] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be628 | out: lpFileSizeHigh=0x3be628*=0x0) returned 0xe63 [0068.621] ReadFile (in: hFile=0x444, lpBuffer=0x2288890, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be558, lpOverlapped=0x0 | out: lpBuffer=0x2288890*, lpNumberOfBytesRead=0x3be558*=0xe63, lpOverlapped=0x0) returned 1 [0068.665] CloseHandle (hObject=0x444) returned 1 [0068.675] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328951[[fn=Tabbed Arc]].glox", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328951[[fn=Tabbed Arc]].glox", lpFilePart=0x0) returned 0x88 [0068.675] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0068.675] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328951[[fn=Tabbed Arc]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328951[[fn=tabbed arc]].glox"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0068.676] GetFileType (hFile=0x444) returned 0x1 [0068.676] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be400) returned 1 [0068.676] GetFileType (hFile=0x444) returned 0x1 [0068.676] WriteFile (in: hFile=0x444, lpBuffer=0x2304150*, nNumberOfBytesToWrite=0xe70, lpNumberOfBytesWritten=0x3be468, lpOverlapped=0x0 | out: lpBuffer=0x2304150*, lpNumberOfBytesWritten=0x3be468*=0xe70, lpOverlapped=0x0) returned 1 [0068.677] CloseHandle (hObject=0x444) returned 1 [0068.677] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328951[[fn=Tabbed Arc]].glox", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328951[[fn=Tabbed Arc]].glox", lpFilePart=0x0) returned 0x88 [0068.677] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328951[[fn=Tabbed Arc]].glox.xuy", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328951[[fn=Tabbed Arc]].glox.xuy", lpFilePart=0x0) returned 0x8c [0068.677] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0068.677] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328951[[fn=Tabbed Arc]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328951[[fn=tabbed arc]].glox"), fInfoLevelId=0x0, lpFileInformation=0x3be670 | out: lpFileInformation=0x3be670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f5e74e6, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x6f5e74e6, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x14c755ce, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xe70)) returned 1 [0068.677] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0068.677] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328951[[fn=Tabbed Arc]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328951[[fn=tabbed arc]].glox"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328951[[fn=Tabbed Arc]].glox.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328951[[fn=tabbed arc]].glox.xuy")) returned 1 [0068.689] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328972[[fn=Tab List]].glox", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328972[[fn=Tab List]].glox", lpFilePart=0x0) returned 0x86 [0068.689] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0068.689] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328972[[fn=Tab List]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328972[[fn=tab list]].glox"), fInfoLevelId=0x0, lpFileInformation=0x2305550 | out: lpFileInformation=0x2305550*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f9a0e5d, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x6f9a0e5d, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x6f9a0e5d, ftLastWriteTime.dwHighDateTime=0x1d301c4, nFileSizeHigh=0x0, nFileSizeLow=0x1318)) returned 1 [0068.689] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0068.689] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328972[[fn=Tab List]].glox", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328972[[fn=Tab List]].glox", lpFilePart=0x0) returned 0x86 [0068.689] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0068.689] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328972[[fn=Tab List]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328972[[fn=tab list]].glox"), fInfoLevelId=0x0, lpFileInformation=0x2305738 | out: lpFileInformation=0x2305738*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f9a0e5d, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x6f9a0e5d, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x6f9a0e5d, ftLastWriteTime.dwHighDateTime=0x1d301c4, nFileSizeHigh=0x0, nFileSizeLow=0x1318)) returned 1 [0068.689] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0068.689] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328972[[fn=Tab List]].glox", nBufferLength=0x105, lpBuffer=0x3be040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328972[[fn=Tab List]].glox", lpFilePart=0x0) returned 0x86 [0068.689] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0068.689] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328972[[fn=Tab List]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328972[[fn=tab list]].glox"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0068.690] GetFileType (hFile=0x444) returned 0x1 [0068.690] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be490) returned 1 [0068.690] GetFileType (hFile=0x444) returned 0x1 [0068.690] ReadFile (in: hFile=0x444, lpBuffer=0x2307c38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5a8, lpOverlapped=0x0 | out: lpBuffer=0x2307c38*, lpNumberOfBytesRead=0x3be5a8*=0x1000, lpOverlapped=0x0) returned 1 [0068.747] CloseHandle (hObject=0x444) returned 1 [0068.747] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328972[[fn=Tab List]].glox", nBufferLength=0x105, lpBuffer=0x3be040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328972[[fn=Tab List]].glox", lpFilePart=0x0) returned 0x86 [0068.747] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0068.747] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328972[[fn=Tab List]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328972[[fn=tab list]].glox"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0068.747] GetFileType (hFile=0x444) returned 0x1 [0068.748] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be490) returned 1 [0068.748] GetFileType (hFile=0x444) returned 0x1 [0068.748] WriteFile (in: hFile=0x444, lpBuffer=0x215e418*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be658, lpOverlapped=0x0 | out: lpBuffer=0x215e418*, lpNumberOfBytesWritten=0x3be658*=0x2000, lpOverlapped=0x0) returned 1 [0068.748] CloseHandle (hObject=0x444) returned 1 [0068.748] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328972[[fn=Tab List]].glox", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328972[[fn=Tab List]].glox", lpFilePart=0x0) returned 0x86 [0068.748] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328972[[fn=Tab List]].glox.xuy", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328972[[fn=Tab List]].glox.xuy", lpFilePart=0x0) returned 0x8a [0068.748] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0068.748] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328972[[fn=Tab List]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328972[[fn=tab list]].glox"), fInfoLevelId=0x0, lpFileInformation=0x3be670 | out: lpFileInformation=0x3be670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f9a0e5d, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x6f9a0e5d, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x14d34235, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0068.748] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0068.748] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328972[[fn=Tab List]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328972[[fn=tab list]].glox"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328972[[fn=Tab List]].glox.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328972[[fn=tab list]].glox.xuy")) returned 1 [0068.749] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328975[[fn=Theme Picture Accent]].glox", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328975[[fn=Theme Picture Accent]].glox", lpFilePart=0x0) returned 0x92 [0068.749] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0068.749] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328975[[fn=Theme Picture Accent]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328975[[fn=theme picture accent]].glox"), fInfoLevelId=0x0, lpFileInformation=0x21841d8 | out: lpFileInformation=0x21841d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f764c0f, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x6f764c0f, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x6f78ae4e, ftLastWriteTime.dwHighDateTime=0x1d301c4, nFileSizeHigh=0x0, nFileSizeLow=0x1930)) returned 1 [0068.749] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0068.749] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328975[[fn=Theme Picture Accent]].glox", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328975[[fn=Theme Picture Accent]].glox", lpFilePart=0x0) returned 0x92 [0068.749] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0068.749] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328975[[fn=Theme Picture Accent]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328975[[fn=theme picture accent]].glox"), fInfoLevelId=0x0, lpFileInformation=0x21843f0 | out: lpFileInformation=0x21843f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f764c0f, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x6f764c0f, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x6f78ae4e, ftLastWriteTime.dwHighDateTime=0x1d301c4, nFileSizeHigh=0x0, nFileSizeLow=0x1930)) returned 1 [0068.749] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0068.749] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328975[[fn=Theme Picture Accent]].glox", nBufferLength=0x105, lpBuffer=0x3be040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328975[[fn=Theme Picture Accent]].glox", lpFilePart=0x0) returned 0x92 [0068.749] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0068.749] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328975[[fn=Theme Picture Accent]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328975[[fn=theme picture accent]].glox"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0068.750] GetFileType (hFile=0x444) returned 0x1 [0068.750] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be490) returned 1 [0068.750] GetFileType (hFile=0x444) returned 0x1 [0068.750] ReadFile (in: hFile=0x444, lpBuffer=0x2186950, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5a8, lpOverlapped=0x0 | out: lpBuffer=0x2186950*, lpNumberOfBytesRead=0x3be5a8*=0x1000, lpOverlapped=0x0) returned 1 [0068.768] CloseHandle (hObject=0x444) returned 1 [0068.768] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328975[[fn=Theme Picture Accent]].glox", nBufferLength=0x105, lpBuffer=0x3be040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328975[[fn=Theme Picture Accent]].glox", lpFilePart=0x0) returned 0x92 [0068.768] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0068.768] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328975[[fn=Theme Picture Accent]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328975[[fn=theme picture accent]].glox"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0068.768] GetFileType (hFile=0x444) returned 0x1 [0068.768] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be490) returned 1 [0068.768] GetFileType (hFile=0x444) returned 0x1 [0068.768] WriteFile (in: hFile=0x444, lpBuffer=0x21845e8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be658, lpOverlapped=0x0 | out: lpBuffer=0x21845e8*, lpNumberOfBytesWritten=0x3be658*=0x2000, lpOverlapped=0x0) returned 1 [0068.769] CloseHandle (hObject=0x444) returned 1 [0068.769] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328975[[fn=Theme Picture Accent]].glox", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328975[[fn=Theme Picture Accent]].glox", lpFilePart=0x0) returned 0x92 [0068.769] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328975[[fn=Theme Picture Accent]].glox.xuy", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328975[[fn=Theme Picture Accent]].glox.xuy", lpFilePart=0x0) returned 0x96 [0068.769] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0068.769] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328975[[fn=Theme Picture Accent]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328975[[fn=theme picture accent]].glox"), fInfoLevelId=0x0, lpFileInformation=0x3be670 | out: lpFileInformation=0x3be670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f764c0f, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x6f764c0f, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x14d5a411, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0068.769] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0068.769] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328975[[fn=Theme Picture Accent]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328975[[fn=theme picture accent]].glox"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328975[[fn=Theme Picture Accent]].glox.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328975[[fn=theme picture accent]].glox.xuy")) returned 1 [0068.770] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328983[[fn=Theme Picture Alternating Accent]].glox", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328983[[fn=Theme Picture Alternating Accent]].glox", lpFilePart=0x0) returned 0x9e [0068.770] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0068.770] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328983[[fn=Theme Picture Alternating Accent]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328983[[fn=theme picture alternating accent]].glox"), fInfoLevelId=0x0, lpFileInformation=0x2202f80 | out: lpFileInformation=0x2202f80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f73e9b4, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x6f73e9b4, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x6f73e9b4, ftLastWriteTime.dwHighDateTime=0x1d301c4, nFileSizeHigh=0x0, nFileSizeLow=0x15fe)) returned 1 [0068.770] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0068.770] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328983[[fn=Theme Picture Alternating Accent]].glox", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328983[[fn=Theme Picture Alternating Accent]].glox", lpFilePart=0x0) returned 0x9e [0068.770] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0068.770] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328983[[fn=Theme Picture Alternating Accent]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328983[[fn=theme picture alternating accent]].glox"), fInfoLevelId=0x0, lpFileInformation=0x22031c8 | out: lpFileInformation=0x22031c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f73e9b4, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x6f73e9b4, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x6f73e9b4, ftLastWriteTime.dwHighDateTime=0x1d301c4, nFileSizeHigh=0x0, nFileSizeLow=0x15fe)) returned 1 [0068.770] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0068.770] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328983[[fn=Theme Picture Alternating Accent]].glox", nBufferLength=0x105, lpBuffer=0x3be040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328983[[fn=Theme Picture Alternating Accent]].glox", lpFilePart=0x0) returned 0x9e [0068.770] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0068.770] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328983[[fn=Theme Picture Alternating Accent]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328983[[fn=theme picture alternating accent]].glox"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0068.771] GetFileType (hFile=0x444) returned 0x1 [0068.771] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be490) returned 1 [0068.771] GetFileType (hFile=0x444) returned 0x1 [0068.771] ReadFile (in: hFile=0x444, lpBuffer=0x2205788, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5a8, lpOverlapped=0x0 | out: lpBuffer=0x2205788*, lpNumberOfBytesRead=0x3be5a8*=0x1000, lpOverlapped=0x0) returned 1 [0068.783] CloseHandle (hObject=0x444) returned 1 [0068.783] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328983[[fn=Theme Picture Alternating Accent]].glox", nBufferLength=0x105, lpBuffer=0x3be040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328983[[fn=Theme Picture Alternating Accent]].glox", lpFilePart=0x0) returned 0x9e [0068.784] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0068.784] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328983[[fn=Theme Picture Alternating Accent]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328983[[fn=theme picture alternating accent]].glox"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0068.784] GetFileType (hFile=0x444) returned 0x1 [0068.784] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be490) returned 1 [0068.784] GetFileType (hFile=0x444) returned 0x1 [0068.784] WriteFile (in: hFile=0x444, lpBuffer=0x22033f0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be658, lpOverlapped=0x0 | out: lpBuffer=0x22033f0*, lpNumberOfBytesWritten=0x3be658*=0x2000, lpOverlapped=0x0) returned 1 [0068.784] CloseHandle (hObject=0x444) returned 1 [0068.784] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328983[[fn=Theme Picture Alternating Accent]].glox", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328983[[fn=Theme Picture Alternating Accent]].glox", lpFilePart=0x0) returned 0x9e [0068.784] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328983[[fn=Theme Picture Alternating Accent]].glox.xuy", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328983[[fn=Theme Picture Alternating Accent]].glox.xuy", lpFilePart=0x0) returned 0xa2 [0068.784] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0068.784] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328983[[fn=Theme Picture Alternating Accent]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328983[[fn=theme picture alternating accent]].glox"), fInfoLevelId=0x0, lpFileInformation=0x3be670 | out: lpFileInformation=0x3be670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f73e9b4, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x6f73e9b4, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x14d805e6, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0068.785] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0068.785] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328983[[fn=Theme Picture Alternating Accent]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328983[[fn=theme picture alternating accent]].glox"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328983[[fn=Theme Picture Alternating Accent]].glox.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328983[[fn=theme picture alternating accent]].glox.xuy")) returned 1 [0068.785] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328986[[fn=Theme Picture Grid]].glox", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328986[[fn=Theme Picture Grid]].glox", lpFilePart=0x0) returned 0x90 [0068.785] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0068.785] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328986[[fn=Theme Picture Grid]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328986[[fn=theme picture grid]].glox"), fInfoLevelId=0x0, lpFileInformation=0x2281e30 | out: lpFileInformation=0x2281e30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f6cc2af, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x6f6cc2af, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x6f6cc2af, ftLastWriteTime.dwHighDateTime=0x1d301c4, nFileSizeHigh=0x0, nFileSizeLow=0x1831)) returned 1 [0068.786] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0068.786] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328986[[fn=Theme Picture Grid]].glox", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328986[[fn=Theme Picture Grid]].glox", lpFilePart=0x0) returned 0x90 [0068.786] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0068.786] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328986[[fn=Theme Picture Grid]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328986[[fn=theme picture grid]].glox"), fInfoLevelId=0x0, lpFileInformation=0x2282048 | out: lpFileInformation=0x2282048*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f6cc2af, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x6f6cc2af, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x6f6cc2af, ftLastWriteTime.dwHighDateTime=0x1d301c4, nFileSizeHigh=0x0, nFileSizeLow=0x1831)) returned 1 [0068.786] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0068.786] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328986[[fn=Theme Picture Grid]].glox", nBufferLength=0x105, lpBuffer=0x3be040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328986[[fn=Theme Picture Grid]].glox", lpFilePart=0x0) returned 0x90 [0068.786] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0068.786] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328986[[fn=Theme Picture Grid]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328986[[fn=theme picture grid]].glox"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0068.786] GetFileType (hFile=0x444) returned 0x1 [0068.786] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be490) returned 1 [0068.786] GetFileType (hFile=0x444) returned 0x1 [0068.786] ReadFile (in: hFile=0x444, lpBuffer=0x22845a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5a8, lpOverlapped=0x0 | out: lpBuffer=0x22845a8*, lpNumberOfBytesRead=0x3be5a8*=0x1000, lpOverlapped=0x0) returned 1 [0068.809] CloseHandle (hObject=0x444) returned 1 [0068.809] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328986[[fn=Theme Picture Grid]].glox", nBufferLength=0x105, lpBuffer=0x3be040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328986[[fn=Theme Picture Grid]].glox", lpFilePart=0x0) returned 0x90 [0068.810] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0068.810] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328986[[fn=Theme Picture Grid]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328986[[fn=theme picture grid]].glox"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0068.810] GetFileType (hFile=0x444) returned 0x1 [0068.810] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be490) returned 1 [0068.810] GetFileType (hFile=0x444) returned 0x1 [0068.810] WriteFile (in: hFile=0x444, lpBuffer=0x2282240*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be658, lpOverlapped=0x0 | out: lpBuffer=0x2282240*, lpNumberOfBytesWritten=0x3be658*=0x2000, lpOverlapped=0x0) returned 1 [0068.812] CloseHandle (hObject=0x444) returned 1 [0068.812] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328986[[fn=Theme Picture Grid]].glox", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328986[[fn=Theme Picture Grid]].glox", lpFilePart=0x0) returned 0x90 [0068.812] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328986[[fn=Theme Picture Grid]].glox.xuy", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328986[[fn=Theme Picture Grid]].glox.xuy", lpFilePart=0x0) returned 0x94 [0068.812] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0068.812] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328986[[fn=Theme Picture Grid]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328986[[fn=theme picture grid]].glox"), fInfoLevelId=0x0, lpFileInformation=0x3be670 | out: lpFileInformation=0x3be670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f6cc2af, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x6f6cc2af, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x14dccb0f, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0068.812] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0068.812] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328986[[fn=Theme Picture Grid]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328986[[fn=theme picture grid]].glox"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328986[[fn=Theme Picture Grid]].glox.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328986[[fn=theme picture grid]].glox.xuy")) returned 1 [0068.813] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328990[[fn=Varying Width List]].glox", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328990[[fn=Varying Width List]].glox", lpFilePart=0x0) returned 0x90 [0068.813] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0068.813] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328990[[fn=Varying Width List]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328990[[fn=varying width list]].glox"), fInfoLevelId=0x0, lpFileInformation=0x2300bd8 | out: lpFileInformation=0x2300bd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f78ae4e, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x6f78ae4e, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x6f78ae4e, ftLastWriteTime.dwHighDateTime=0x1d301c4, nFileSizeHigh=0x0, nFileSizeLow=0xc03)) returned 1 [0068.813] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0068.813] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328990[[fn=Varying Width List]].glox", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328990[[fn=Varying Width List]].glox", lpFilePart=0x0) returned 0x90 [0068.813] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0068.814] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328990[[fn=Varying Width List]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328990[[fn=varying width list]].glox"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0068.814] GetFileType (hFile=0x444) returned 0x1 [0068.814] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be400) returned 1 [0068.814] GetFileType (hFile=0x444) returned 0x1 [0068.814] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be628 | out: lpFileSizeHigh=0x3be628*=0x0) returned 0xc03 [0068.814] ReadFile (in: hFile=0x444, lpBuffer=0x2301c28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be558, lpOverlapped=0x0 | out: lpBuffer=0x2301c28*, lpNumberOfBytesRead=0x3be558*=0xc03, lpOverlapped=0x0) returned 1 [0068.828] CloseHandle (hObject=0x444) returned 1 [0068.873] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328990[[fn=Varying Width List]].glox", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328990[[fn=Varying Width List]].glox", lpFilePart=0x0) returned 0x90 [0068.873] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0068.873] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328990[[fn=Varying Width List]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328990[[fn=varying width list]].glox"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0068.875] GetFileType (hFile=0x444) returned 0x1 [0068.875] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be400) returned 1 [0068.875] GetFileType (hFile=0x444) returned 0x1 [0068.875] WriteFile (in: hFile=0x444, lpBuffer=0x217a360*, nNumberOfBytesToWrite=0xc10, lpNumberOfBytesWritten=0x3be468, lpOverlapped=0x0 | out: lpBuffer=0x217a360*, lpNumberOfBytesWritten=0x3be468*=0xc10, lpOverlapped=0x0) returned 1 [0068.875] CloseHandle (hObject=0x444) returned 1 [0068.876] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328990[[fn=Varying Width List]].glox", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328990[[fn=Varying Width List]].glox", lpFilePart=0x0) returned 0x90 [0068.876] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328990[[fn=Varying Width List]].glox.xuy", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328990[[fn=Varying Width List]].glox.xuy", lpFilePart=0x0) returned 0x94 [0068.876] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0068.876] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328990[[fn=Varying Width List]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328990[[fn=varying width list]].glox"), fInfoLevelId=0x0, lpFileInformation=0x3be670 | out: lpFileInformation=0x3be670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f78ae4e, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x6f78ae4e, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x14e65591, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xc10)) returned 1 [0068.876] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0068.876] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328990[[fn=Varying Width List]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328990[[fn=varying width list]].glox"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328990[[fn=Varying Width List]].glox.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328990[[fn=varying width list]].glox.xuy")) returned 1 [0068.877] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328998[[fn=Rings]].glox", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328998[[fn=Rings]].glox", lpFilePart=0x0) returned 0x83 [0068.877] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0068.877] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328998[[fn=Rings]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328998[[fn=rings]].glox"), fInfoLevelId=0x0, lpFileInformation=0x217b790 | out: lpFileInformation=0x217b790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f8e235b, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x6f8e235b, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x6f8e235b, ftLastWriteTime.dwHighDateTime=0x1d301c4, nFileSizeHigh=0x0, nFileSizeLow=0x141f)) returned 1 [0068.877] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0068.877] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328998[[fn=Rings]].glox", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328998[[fn=Rings]].glox", lpFilePart=0x0) returned 0x83 [0068.877] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0068.877] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328998[[fn=Rings]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328998[[fn=rings]].glox"), fInfoLevelId=0x0, lpFileInformation=0x217b968 | out: lpFileInformation=0x217b968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f8e235b, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x6f8e235b, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x6f8e235b, ftLastWriteTime.dwHighDateTime=0x1d301c4, nFileSizeHigh=0x0, nFileSizeLow=0x141f)) returned 1 [0068.877] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0068.877] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328998[[fn=Rings]].glox", nBufferLength=0x105, lpBuffer=0x3be040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328998[[fn=Rings]].glox", lpFilePart=0x0) returned 0x83 [0068.877] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0068.877] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328998[[fn=Rings]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328998[[fn=rings]].glox"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0068.878] GetFileType (hFile=0x444) returned 0x1 [0068.878] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be490) returned 1 [0068.878] GetFileType (hFile=0x444) returned 0x1 [0068.878] ReadFile (in: hFile=0x444, lpBuffer=0x217de48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5a8, lpOverlapped=0x0 | out: lpBuffer=0x217de48*, lpNumberOfBytesRead=0x3be5a8*=0x1000, lpOverlapped=0x0) returned 1 [0068.923] CloseHandle (hObject=0x444) returned 1 [0068.924] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328998[[fn=Rings]].glox", nBufferLength=0x105, lpBuffer=0x3be040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328998[[fn=Rings]].glox", lpFilePart=0x0) returned 0x83 [0068.924] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0068.924] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328998[[fn=Rings]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328998[[fn=rings]].glox"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0068.925] GetFileType (hFile=0x444) returned 0x1 [0068.925] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be490) returned 1 [0068.925] GetFileType (hFile=0x444) returned 0x1 [0068.925] WriteFile (in: hFile=0x444, lpBuffer=0x217bb20*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be658, lpOverlapped=0x0 | out: lpBuffer=0x217bb20*, lpNumberOfBytesWritten=0x3be658*=0x2000, lpOverlapped=0x0) returned 1 [0068.925] CloseHandle (hObject=0x444) returned 1 [0068.925] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328998[[fn=Rings]].glox", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328998[[fn=Rings]].glox", lpFilePart=0x0) returned 0x83 [0068.925] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328998[[fn=Rings]].glox.xuy", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328998[[fn=Rings]].glox.xuy", lpFilePart=0x0) returned 0x87 [0068.925] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0068.925] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328998[[fn=Rings]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328998[[fn=rings]].glox"), fInfoLevelId=0x0, lpFileInformation=0x3be670 | out: lpFileInformation=0x3be670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f8e235b, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x6f8e235b, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x14ef5767, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0068.925] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0068.926] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328998[[fn=Rings]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328998[[fn=rings]].glox"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328998[[fn=Rings]].glox.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328998[[fn=rings]].glox.xuy")) returned 1 [0068.927] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0068.927] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User", lpFilePart=0x0) returned 0x4d [0068.927] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\", lpFilePart=0x0) returned 0x4e [0068.927] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d7d30 [0068.927] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0068.928] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0068.928] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0068.928] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0068.928] FindClose (in: hFindFile=0x5d7d30 | out: hFindFile=0x5d7d30) returned 1 [0068.928] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0068.929] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0068.929] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0068.929] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User", lpFilePart=0x0) returned 0x4d [0068.929] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\", lpFilePart=0x0) returned 0x4e [0068.929] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d7370 [0068.930] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0068.930] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0068.930] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0068.931] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0068.931] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0068.931] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0068.931] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0068.931] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0068.931] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\Document Themes", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\Document Themes", lpFilePart=0x0) returned 0x5d [0068.931] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\Document Themes\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\Document Themes\\", lpFilePart=0x0) returned 0x5e [0068.931] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\Document Themes\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d75b0 [0068.931] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0068.932] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0068.932] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0068.933] FindClose (in: hFindFile=0x5d75b0 | out: hFindFile=0x5d75b0) returned 1 [0068.933] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0068.933] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0068.933] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0068.933] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\Document Themes", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\Document Themes", lpFilePart=0x0) returned 0x5d [0068.933] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\Document Themes\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\Document Themes\\", lpFilePart=0x0) returned 0x5e [0068.933] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\Document Themes\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d7d30 [0068.934] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0068.934] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0068.934] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0068.934] FindClose (in: hFindFile=0x5d7d30 | out: hFindFile=0x5d7d30) returned 1 [0068.934] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0068.934] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0068.934] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0068.934] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\Document Themes\\1033", nBufferLength=0x105, lpBuffer=0x3be130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\Document Themes\\1033", lpFilePart=0x0) returned 0x62 [0068.934] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\Document Themes\\1033\\", nBufferLength=0x105, lpBuffer=0x3be0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\Document Themes\\1033\\", lpFilePart=0x0) returned 0x63 [0068.934] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\Document Themes\\1033\\*", lpFindFileData=0x3be2e0 | out: lpFindFileData=0x3be2e0) returned 0x5d7370 [0068.935] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0068.935] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 0 [0068.935] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0068.935] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0068.935] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0068.935] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0068.935] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\Document Themes\\1033", nBufferLength=0x105, lpBuffer=0x3be130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\Document Themes\\1033", lpFilePart=0x0) returned 0x62 [0068.935] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\Document Themes\\1033\\", nBufferLength=0x105, lpBuffer=0x3be0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\Document Themes\\1033\\", lpFilePart=0x0) returned 0x63 [0068.935] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\Document Themes\\1033\\*", lpFindFileData=0x3be2e0 | out: lpFindFileData=0x3be2e0) returned 0x5d7c70 [0068.936] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0068.936] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 0 [0068.936] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0068.936] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0068.936] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0068.936] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0068.936] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\SmartArt Graphics", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\SmartArt Graphics", lpFilePart=0x0) returned 0x5f [0068.936] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\SmartArt Graphics\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\SmartArt Graphics\\", lpFilePart=0x0) returned 0x60 [0068.937] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\SmartArt Graphics\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d79d0 [0068.939] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0068.939] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0068.939] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0068.939] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0068.939] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0068.939] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0068.939] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0068.939] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\SmartArt Graphics", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\SmartArt Graphics", lpFilePart=0x0) returned 0x5f [0068.939] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\SmartArt Graphics\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\SmartArt Graphics\\", lpFilePart=0x0) returned 0x60 [0068.940] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\SmartArt Graphics\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d81b0 [0068.940] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0068.940] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0068.940] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0068.941] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0068.941] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0068.941] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0068.941] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0068.941] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\SmartArt Graphics\\1033", nBufferLength=0x105, lpBuffer=0x3be130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\SmartArt Graphics\\1033", lpFilePart=0x0) returned 0x64 [0068.941] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\SmartArt Graphics\\1033\\", nBufferLength=0x105, lpBuffer=0x3be0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\SmartArt Graphics\\1033\\", lpFilePart=0x0) returned 0x65 [0068.941] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\SmartArt Graphics\\1033\\*", lpFindFileData=0x3be2e0 | out: lpFindFileData=0x3be2e0) returned 0x5d7d90 [0068.944] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0068.944] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 0 [0068.944] FindClose (in: hFindFile=0x5d7d90 | out: hFindFile=0x5d7d90) returned 1 [0068.944] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0068.944] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0068.945] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0068.945] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\SmartArt Graphics\\1033", nBufferLength=0x105, lpBuffer=0x3be130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\SmartArt Graphics\\1033", lpFilePart=0x0) returned 0x64 [0068.945] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\SmartArt Graphics\\1033\\", nBufferLength=0x105, lpBuffer=0x3be0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\SmartArt Graphics\\1033\\", lpFilePart=0x0) returned 0x65 [0068.945] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\SmartArt Graphics\\1033\\*", lpFindFileData=0x3be2e0 | out: lpFindFileData=0x3be2e0) returned 0x5d7af0 [0068.945] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0068.945] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 0 [0068.945] FindClose (in: hFindFile=0x5d7af0 | out: hFindFile=0x5d7af0) returned 1 [0068.945] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0068.945] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0068.945] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0068.945] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\UProof", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\UProof", lpFilePart=0x0) returned 0x36 [0068.946] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\UProof\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\UProof\\", lpFilePart=0x0) returned 0x37 [0068.946] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\UProof\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d7370 [0068.946] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0068.946] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0068.946] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0068.946] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0068.946] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0068.946] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0068.947] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0068.947] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\UProof", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\UProof", lpFilePart=0x0) returned 0x36 [0068.947] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\UProof\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\UProof\\", lpFilePart=0x0) returned 0x37 [0068.947] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\UProof\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d7e50 [0068.947] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0068.947] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0068.947] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0068.947] FindClose (in: hFindFile=0x5d7e50 | out: hFindFile=0x5d7e50) returned 1 [0068.947] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0068.948] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0068.948] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\UProof\\CUSTOM.DIC", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\UProof\\CUSTOM.DIC", lpFilePart=0x0) returned 0x41 [0068.948] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0068.948] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\UProof\\CUSTOM.DIC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\uproof\\custom.dic"), fInfoLevelId=0x0, lpFileInformation=0x2206e20 | out: lpFileInformation=0x2206e20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8893fdb3, ftCreationTime.dwHighDateTime=0x1d2d438, ftLastAccessTime.dwLowDateTime=0x8893fdb3, ftLastAccessTime.dwHighDateTime=0x1d2d438, ftLastWriteTime.dwLowDateTime=0x889436fc, ftLastWriteTime.dwHighDateTime=0x1d2d438, nFileSizeHigh=0x0, nFileSizeLow=0x1e)) returned 1 [0068.948] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0068.948] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\UProof\\CUSTOM.DIC", nBufferLength=0x105, lpBuffer=0x3be1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\UProof\\CUSTOM.DIC", lpFilePart=0x0) returned 0x41 [0068.948] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6c0) returned 1 [0068.948] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\UProof\\CUSTOM.DIC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\uproof\\custom.dic"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0068.948] GetFileType (hFile=0x444) returned 0x1 [0068.948] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0068.948] GetFileType (hFile=0x444) returned 0x1 [0068.948] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be858 | out: lpFileSizeHigh=0x3be858*=0x0) returned 0x1e [0068.948] ReadFile (in: hFile=0x444, lpBuffer=0x22070c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be788, lpOverlapped=0x0 | out: lpBuffer=0x22070c8*, lpNumberOfBytesRead=0x3be788*=0x1e, lpOverlapped=0x0) returned 1 [0068.949] CloseHandle (hObject=0x444) returned 1 [0068.967] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\UProof\\CUSTOM.DIC", nBufferLength=0x105, lpBuffer=0x3be1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\UProof\\CUSTOM.DIC", lpFilePart=0x0) returned 0x41 [0068.967] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6c0) returned 1 [0068.967] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\UProof\\CUSTOM.DIC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\uproof\\custom.dic"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0068.969] GetFileType (hFile=0x444) returned 0x1 [0068.969] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0068.969] GetFileType (hFile=0x444) returned 0x1 [0068.969] WriteFile (in: hFile=0x444, lpBuffer=0x227e1e8*, nNumberOfBytesToWrite=0x20, lpNumberOfBytesWritten=0x3be698, lpOverlapped=0x0 | out: lpBuffer=0x227e1e8*, lpNumberOfBytesWritten=0x3be698*=0x20, lpOverlapped=0x0) returned 1 [0068.970] CloseHandle (hObject=0x444) returned 1 [0068.970] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\UProof\\CUSTOM.DIC", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\UProof\\CUSTOM.DIC", lpFilePart=0x0) returned 0x41 [0068.970] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\UProof\\CUSTOM.DIC.xuy", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\UProof\\CUSTOM.DIC.xuy", lpFilePart=0x0) returned 0x45 [0068.970] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0068.970] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\UProof\\CUSTOM.DIC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\uproof\\custom.dic"), fInfoLevelId=0x0, lpFileInformation=0x3be8a0 | out: lpFileInformation=0x3be8a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8893fdb3, ftCreationTime.dwHighDateTime=0x1d2d438, ftLastAccessTime.dwLowDateTime=0x8893fdb3, ftLastAccessTime.dwHighDateTime=0x1d2d438, ftLastWriteTime.dwLowDateTime=0x14f48408, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x20)) returned 1 [0068.970] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0068.970] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\UProof\\CUSTOM.DIC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\uproof\\custom.dic"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\UProof\\CUSTOM.DIC.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\uproof\\custom.dic.xuy")) returned 1 [0068.971] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0068.971] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Vault", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Vault", lpFilePart=0x0) returned 0x35 [0068.971] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Vault\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Vault\\", lpFilePart=0x0) returned 0x36 [0068.971] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Vault\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d73d0 [0068.974] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0068.975] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0068.975] FindClose (in: hFindFile=0x5d73d0 | out: hFindFile=0x5d73d0) returned 1 [0068.975] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0068.975] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0068.975] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0068.975] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Vault", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Vault", lpFilePart=0x0) returned 0x35 [0068.975] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Vault\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Vault\\", lpFilePart=0x0) returned 0x36 [0068.975] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Vault\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d7c70 [0068.975] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0068.976] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0068.976] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0068.976] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0068.976] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0068.976] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0068.976] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows", lpFilePart=0x0) returned 0x37 [0068.976] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\", lpFilePart=0x0) returned 0x38 [0068.976] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d7550 [0068.976] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0068.977] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0068.977] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0068.977] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0068.977] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0068.977] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0068.977] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0068.978] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0068.978] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0068.978] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0068.978] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0068.978] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0068.978] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0068.978] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0068.978] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0068.978] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows", lpFilePart=0x0) returned 0x37 [0068.979] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\", lpFilePart=0x0) returned 0x38 [0068.979] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d78b0 [0068.979] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0068.979] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0068.979] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0068.979] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0068.979] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0068.980] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0068.980] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0068.980] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0068.980] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0068.980] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0068.980] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0068.980] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0068.980] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0068.980] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0068.980] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0068.981] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\AccountPictures", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\AccountPictures", lpFilePart=0x0) returned 0x47 [0068.981] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\AccountPictures\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\AccountPictures\\", lpFilePart=0x0) returned 0x48 [0068.981] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\AccountPictures\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7c70 [0068.981] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0068.981] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0068.981] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0068.981] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0068.981] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0068.981] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0068.982] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0068.982] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\AccountPictures", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\AccountPictures", lpFilePart=0x0) returned 0x47 [0068.982] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\AccountPictures\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\AccountPictures\\", lpFilePart=0x0) returned 0x48 [0068.982] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\AccountPictures\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7370 [0068.982] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0068.982] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0068.982] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0068.982] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0068.982] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0068.983] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0068.983] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\AccountPictures\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\AccountPictures\\desktop.ini", lpFilePart=0x0) returned 0x53 [0068.983] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0068.983] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\AccountPictures\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\accountpictures\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x2286540 | out: lpFileInformation=0x2286540*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0xae1db2e4, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xae1db2e4, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xae1db2e4, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0xc4)) returned 1 [0068.983] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0068.983] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\AccountPictures\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\AccountPictures\\desktop.ini", lpFilePart=0x0) returned 0x53 [0068.983] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0068.983] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\AccountPictures\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\accountpictures\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0068.983] GetFileType (hFile=0x444) returned 0x1 [0068.983] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0068.983] GetFileType (hFile=0x444) returned 0x1 [0068.983] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0xc4 [0068.983] ReadFile (in: hFile=0x444, lpBuffer=0x22868d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be718, lpOverlapped=0x0 | out: lpBuffer=0x22868d0*, lpNumberOfBytesRead=0x3be718*=0xc4, lpOverlapped=0x0) returned 1 [0068.984] CloseHandle (hObject=0x444) returned 1 [0068.999] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\AccountPictures\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\AccountPictures\\desktop.ini", lpFilePart=0x0) returned 0x53 [0068.999] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0068.999] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\AccountPictures\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\accountpictures\\desktop.ini"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0069.000] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb0e0) returned 1 [0069.000] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\AccountPictures\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3bbd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\AccountPictures\\desktop.ini", lpFilePart=0x0) returned 0x53 [0069.001] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc200) returned 1 [0069.001] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\AccountPictures\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\accountpictures\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x3bc2e0 | out: lpFileInformation=0x3bc2e0*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0xae1db2e4, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xae1db2e4, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xae1db2e4, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0xc4)) returned 1 [0069.001] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1c0) returned 1 [0069.001] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\AccountPictures\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3bbd80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\AccountPictures\\desktop.ini", lpFilePart=0x0) returned 0x53 [0069.001] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc200) returned 1 [0069.001] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\AccountPictures\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\accountpictures\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x22fe3e0 | out: lpFileInformation=0x22fe3e0*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0xae1db2e4, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xae1db2e4, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xae1db2e4, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0xc4)) returned 1 [0069.001] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1c0) returned 1 [0069.001] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\AccountPictures\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3bbbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\AccountPictures\\desktop.ini", lpFilePart=0x0) returned 0x53 [0069.001] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0c0) returned 1 [0069.001] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\AccountPictures\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\accountpictures\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0069.001] GetFileType (hFile=0x444) returned 0x1 [0069.001] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc030) returned 1 [0069.001] GetFileType (hFile=0x444) returned 0x1 [0069.001] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc258 | out: lpFileSizeHigh=0x3bc258*=0x0) returned 0xc4 [0069.001] ReadFile (in: hFile=0x444, lpBuffer=0x22fe770, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bc188, lpOverlapped=0x0 | out: lpBuffer=0x22fe770*, lpNumberOfBytesRead=0x3bc188*=0xc4, lpOverlapped=0x0) returned 1 [0069.001] CloseHandle (hObject=0x444) returned 1 [0069.043] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\AccountPictures\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3bbbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\AccountPictures\\desktop.ini", lpFilePart=0x0) returned 0x53 [0069.043] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0c0) returned 1 [0069.043] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\AccountPictures\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\accountpictures\\desktop.ini"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0069.044] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8b50) returned 1 [0069.045] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0069.045] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Libraries", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Libraries", lpFilePart=0x0) returned 0x41 [0069.045] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\", lpFilePart=0x0) returned 0x42 [0069.045] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7550 [0069.046] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.046] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.046] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.046] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.046] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.046] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.047] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.047] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.047] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0069.047] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0069.047] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0069.047] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0069.047] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0069.048] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Libraries", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Libraries", lpFilePart=0x0) returned 0x41 [0069.048] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\", lpFilePart=0x0) returned 0x42 [0069.048] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7c70 [0069.048] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.049] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.049] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.049] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.049] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.049] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.049] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.049] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.049] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0069.050] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0069.050] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0069.050] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0069.050] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\CameraRoll.library-ms", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\CameraRoll.library-ms", lpFilePart=0x0) returned 0x57 [0069.050] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0069.050] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\CameraRoll.library-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\libraries\\cameraroll.library-ms"), fInfoLevelId=0x0, lpFileInformation=0x2178478 | out: lpFileInformation=0x2178478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bef44d2, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x3bef44d2, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x3bef44d2, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x3fa)) returned 1 [0069.051] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0069.051] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\CameraRoll.library-ms", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\CameraRoll.library-ms", lpFilePart=0x0) returned 0x57 [0069.051] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0069.051] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\CameraRoll.library-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\libraries\\cameraroll.library-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0069.051] GetFileType (hFile=0x444) returned 0x1 [0069.051] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0069.051] GetFileType (hFile=0x444) returned 0x1 [0069.051] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0x3fa [0069.051] ReadFile (in: hFile=0x444, lpBuffer=0x2178b80, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be718, lpOverlapped=0x0 | out: lpBuffer=0x2178b80*, lpNumberOfBytesRead=0x3be718*=0x3fa, lpOverlapped=0x0) returned 1 [0069.053] CloseHandle (hObject=0x444) returned 1 [0069.095] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\CameraRoll.library-ms", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\CameraRoll.library-ms", lpFilePart=0x0) returned 0x57 [0069.095] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0069.095] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\CameraRoll.library-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\libraries\\cameraroll.library-ms"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0069.096] GetFileType (hFile=0x444) returned 0x1 [0069.096] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0069.096] GetFileType (hFile=0x444) returned 0x1 [0069.096] WriteFile (in: hFile=0x444, lpBuffer=0x21f0f88*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x3be628, lpOverlapped=0x0 | out: lpBuffer=0x21f0f88*, lpNumberOfBytesWritten=0x3be628*=0x400, lpOverlapped=0x0) returned 1 [0069.097] CloseHandle (hObject=0x444) returned 1 [0069.097] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\CameraRoll.library-ms", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\CameraRoll.library-ms", lpFilePart=0x0) returned 0x57 [0069.097] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\CameraRoll.library-ms.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\CameraRoll.library-ms.xuy", lpFilePart=0x0) returned 0x5b [0069.097] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0069.097] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\CameraRoll.library-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\libraries\\cameraroll.library-ms"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bef44d2, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x3bef44d2, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x1508758e, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x400)) returned 1 [0069.098] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0069.098] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\CameraRoll.library-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\libraries\\cameraroll.library-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\CameraRoll.library-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\libraries\\cameraroll.library-ms.xuy")) returned 1 [0069.098] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\desktop.ini", lpFilePart=0x0) returned 0x4d [0069.098] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0069.098] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\libraries\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x21f2250 | out: lpFileInformation=0x21f2250*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0xae0aa00a, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xae0aa00a, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x3bf8ce23, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x1c3)) returned 1 [0069.098] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0069.098] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\desktop.ini", lpFilePart=0x0) returned 0x4d [0069.099] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0069.099] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\libraries\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0069.099] GetFileType (hFile=0x444) returned 0x1 [0069.099] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0069.099] GetFileType (hFile=0x444) returned 0x1 [0069.099] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0x1c3 [0069.099] ReadFile (in: hFile=0x444, lpBuffer=0x21f26d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be718, lpOverlapped=0x0 | out: lpBuffer=0x21f26d0*, lpNumberOfBytesRead=0x3be718*=0x1c3, lpOverlapped=0x0) returned 1 [0069.100] CloseHandle (hObject=0x444) returned 1 [0069.111] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\desktop.ini", lpFilePart=0x0) returned 0x4d [0069.111] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0069.111] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\libraries\\desktop.ini"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0069.113] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb0e0) returned 1 [0069.113] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3bbd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\desktop.ini", lpFilePart=0x0) returned 0x4d [0069.113] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc200) returned 1 [0069.113] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\libraries\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x3bc2e0 | out: lpFileInformation=0x3bc2e0*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0xae0aa00a, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xae0aa00a, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x3bf8ce23, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x1c3)) returned 1 [0069.114] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1c0) returned 1 [0069.114] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3bbd80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\desktop.ini", lpFilePart=0x0) returned 0x4d [0069.114] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc200) returned 1 [0069.114] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\libraries\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x226a820 | out: lpFileInformation=0x226a820*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0xae0aa00a, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xae0aa00a, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x3bf8ce23, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x1c3)) returned 1 [0069.114] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1c0) returned 1 [0069.114] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3bbbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\desktop.ini", lpFilePart=0x0) returned 0x4d [0069.114] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0c0) returned 1 [0069.114] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\libraries\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0069.114] GetFileType (hFile=0x444) returned 0x1 [0069.114] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc030) returned 1 [0069.114] GetFileType (hFile=0x444) returned 0x1 [0069.114] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc258 | out: lpFileSizeHigh=0x3bc258*=0x0) returned 0x1c3 [0069.114] ReadFile (in: hFile=0x444, lpBuffer=0x226aca0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bc188, lpOverlapped=0x0 | out: lpBuffer=0x226aca0*, lpNumberOfBytesRead=0x3bc188*=0x1c3, lpOverlapped=0x0) returned 1 [0069.114] CloseHandle (hObject=0x444) returned 1 [0069.151] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3bbbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\desktop.ini", lpFilePart=0x0) returned 0x4d [0069.151] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0c0) returned 1 [0069.151] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\libraries\\desktop.ini"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0069.154] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8b50) returned 1 [0069.155] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\Documents.library-ms", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\Documents.library-ms", lpFilePart=0x0) returned 0x56 [0069.155] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0069.155] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\Documents.library-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\libraries\\documents.library-ms"), fInfoLevelId=0x0, lpFileInformation=0x22e2d68 | out: lpFileInformation=0x22e2d68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae168be9, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xae168be9, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xae168be9, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x3b6)) returned 1 [0069.155] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0069.155] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\Documents.library-ms", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\Documents.library-ms", lpFilePart=0x0) returned 0x56 [0069.155] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0069.155] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\Documents.library-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\libraries\\documents.library-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0069.155] GetFileType (hFile=0x444) returned 0x1 [0069.155] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0069.155] GetFileType (hFile=0x444) returned 0x1 [0069.155] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0x3b6 [0069.155] ReadFile (in: hFile=0x444, lpBuffer=0x22e3428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be718, lpOverlapped=0x0 | out: lpBuffer=0x22e3428*, lpNumberOfBytesRead=0x3be718*=0x3b6, lpOverlapped=0x0) returned 1 [0069.171] CloseHandle (hObject=0x444) returned 1 [0069.223] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\Documents.library-ms", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\Documents.library-ms", lpFilePart=0x0) returned 0x56 [0069.224] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0069.224] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\Documents.library-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\libraries\\documents.library-ms"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0069.225] GetFileType (hFile=0x444) returned 0x1 [0069.225] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0069.225] GetFileType (hFile=0x444) returned 0x1 [0069.225] WriteFile (in: hFile=0x444, lpBuffer=0x235b6f8*, nNumberOfBytesToWrite=0x3c0, lpNumberOfBytesWritten=0x3be628, lpOverlapped=0x0 | out: lpBuffer=0x235b6f8*, lpNumberOfBytesWritten=0x3be628*=0x3c0, lpOverlapped=0x0) returned 1 [0069.228] CloseHandle (hObject=0x444) returned 1 [0069.228] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\Documents.library-ms", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\Documents.library-ms", lpFilePart=0x0) returned 0x56 [0069.228] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\Documents.library-ms.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\Documents.library-ms.xuy", lpFilePart=0x0) returned 0x5a [0069.228] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0069.228] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\Documents.library-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\libraries\\documents.library-ms"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae168be9, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xae168be9, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x151b91a3, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x3c0)) returned 1 [0069.228] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0069.228] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\Documents.library-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\libraries\\documents.library-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\Documents.library-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\libraries\\documents.library-ms.xuy")) returned 1 [0069.229] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\Music.library-ms", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\Music.library-ms", lpFilePart=0x0) returned 0x52 [0069.229] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0069.229] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\Music.library-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\libraries\\music.library-ms"), fInfoLevelId=0x0, lpFileInformation=0x235c9c8 | out: lpFileInformation=0x235c9c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae201536, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xae201536, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xae201536, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x3a6)) returned 1 [0069.229] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0069.229] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\Music.library-ms", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\Music.library-ms", lpFilePart=0x0) returned 0x52 [0069.230] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0069.230] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\Music.library-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\libraries\\music.library-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0069.230] GetFileType (hFile=0x444) returned 0x1 [0069.230] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0069.230] GetFileType (hFile=0x444) returned 0x1 [0069.230] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0x3a6 [0069.230] ReadFile (in: hFile=0x444, lpBuffer=0x235d058, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be718, lpOverlapped=0x0 | out: lpBuffer=0x235d058*, lpNumberOfBytesRead=0x3be718*=0x3a6, lpOverlapped=0x0) returned 1 [0069.232] CloseHandle (hObject=0x444) returned 1 [0069.292] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\Music.library-ms", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\Music.library-ms", lpFilePart=0x0) returned 0x52 [0069.292] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0069.293] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\Music.library-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\libraries\\music.library-ms"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0069.295] GetFileType (hFile=0x444) returned 0x1 [0069.295] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0069.295] GetFileType (hFile=0x444) returned 0x1 [0069.295] WriteFile (in: hFile=0x444, lpBuffer=0x21d49b0*, nNumberOfBytesToWrite=0x3b0, lpNumberOfBytesWritten=0x3be628, lpOverlapped=0x0 | out: lpBuffer=0x21d49b0*, lpNumberOfBytesWritten=0x3be628*=0x3b0, lpOverlapped=0x0) returned 1 [0069.297] CloseHandle (hObject=0x444) returned 1 [0069.297] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\Music.library-ms", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\Music.library-ms", lpFilePart=0x0) returned 0x52 [0069.297] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\Music.library-ms.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\Music.library-ms.xuy", lpFilePart=0x0) returned 0x56 [0069.297] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0069.297] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\Music.library-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\libraries\\music.library-ms"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae201536, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xae201536, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x15277a0d, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x3b0)) returned 1 [0069.298] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0069.298] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\Music.library-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\libraries\\music.library-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\Music.library-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\libraries\\music.library-ms.xuy")) returned 1 [0069.299] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\Pictures.library-ms", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\Pictures.library-ms", lpFilePart=0x0) returned 0x55 [0069.299] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0069.299] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\Pictures.library-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\libraries\\pictures.library-ms"), fInfoLevelId=0x0, lpFileInformation=0x21d5c68 | out: lpFileInformation=0x21d5c68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae1db2e4, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xae1db2e4, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xae1db2e4, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x3b2)) returned 1 [0069.299] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0069.299] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\Pictures.library-ms", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\Pictures.library-ms", lpFilePart=0x0) returned 0x55 [0069.299] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0069.299] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\Pictures.library-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\libraries\\pictures.library-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0069.299] GetFileType (hFile=0x444) returned 0x1 [0069.299] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0069.299] GetFileType (hFile=0x444) returned 0x1 [0069.299] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0x3b2 [0069.299] ReadFile (in: hFile=0x444, lpBuffer=0x21d6318, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be718, lpOverlapped=0x0 | out: lpBuffer=0x21d6318*, lpNumberOfBytesRead=0x3be718*=0x3b2, lpOverlapped=0x0) returned 1 [0069.301] CloseHandle (hObject=0x444) returned 1 [0069.321] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\Pictures.library-ms", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\Pictures.library-ms", lpFilePart=0x0) returned 0x55 [0069.321] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0069.321] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\Pictures.library-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\libraries\\pictures.library-ms"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0069.323] GetFileType (hFile=0x444) returned 0x1 [0069.323] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0069.323] GetFileType (hFile=0x444) returned 0x1 [0069.323] WriteFile (in: hFile=0x444, lpBuffer=0x224e5e0*, nNumberOfBytesToWrite=0x3c0, lpNumberOfBytesWritten=0x3be628, lpOverlapped=0x0 | out: lpBuffer=0x224e5e0*, lpNumberOfBytesWritten=0x3be628*=0x3c0, lpOverlapped=0x0) returned 1 [0069.324] CloseHandle (hObject=0x444) returned 1 [0069.324] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\Pictures.library-ms", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\Pictures.library-ms", lpFilePart=0x0) returned 0x55 [0069.324] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\Pictures.library-ms.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\Pictures.library-ms.xuy", lpFilePart=0x0) returned 0x59 [0069.330] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0069.330] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\Pictures.library-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\libraries\\pictures.library-ms"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae1db2e4, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xae1db2e4, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x1529e006, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x3c0)) returned 1 [0069.330] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0069.330] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\Pictures.library-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\libraries\\pictures.library-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\Pictures.library-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\libraries\\pictures.library-ms.xuy")) returned 1 [0069.331] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\SavedPictures.library-ms", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\SavedPictures.library-ms", lpFilePart=0x0) returned 0x5a [0069.331] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0069.331] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\SavedPictures.library-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\libraries\\savedpictures.library-ms"), fInfoLevelId=0x0, lpFileInformation=0x224f8b0 | out: lpFileInformation=0x224f8b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bf66bb4, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x3bf66bb4, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x3bf8ce23, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x400)) returned 1 [0069.331] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0069.331] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\SavedPictures.library-ms", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\SavedPictures.library-ms", lpFilePart=0x0) returned 0x5a [0069.331] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0069.331] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\SavedPictures.library-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\libraries\\savedpictures.library-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0069.331] GetFileType (hFile=0x444) returned 0x1 [0069.331] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0069.331] GetFileType (hFile=0x444) returned 0x1 [0069.331] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0x400 [0069.331] ReadFile (in: hFile=0x444, lpBuffer=0x224ffd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be718, lpOverlapped=0x0 | out: lpBuffer=0x224ffd8*, lpNumberOfBytesRead=0x3be718*=0x400, lpOverlapped=0x0) returned 1 [0069.350] CloseHandle (hObject=0x444) returned 1 [0069.361] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\SavedPictures.library-ms", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\SavedPictures.library-ms", lpFilePart=0x0) returned 0x5a [0069.361] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0069.361] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\SavedPictures.library-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\libraries\\savedpictures.library-ms"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0069.362] GetFileType (hFile=0x444) returned 0x1 [0069.362] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0069.362] GetFileType (hFile=0x444) returned 0x1 [0069.362] WriteFile (in: hFile=0x444, lpBuffer=0x22c8448*, nNumberOfBytesToWrite=0x410, lpNumberOfBytesWritten=0x3be628, lpOverlapped=0x0 | out: lpBuffer=0x22c8448*, lpNumberOfBytesWritten=0x3be628*=0x410, lpOverlapped=0x0) returned 1 [0069.363] CloseHandle (hObject=0x444) returned 1 [0069.363] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\SavedPictures.library-ms", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\SavedPictures.library-ms", lpFilePart=0x0) returned 0x5a [0069.363] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\SavedPictures.library-ms.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\SavedPictures.library-ms.xuy", lpFilePart=0x0) returned 0x5e [0069.363] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0069.363] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\SavedPictures.library-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\libraries\\savedpictures.library-ms"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bf66bb4, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x3bf66bb4, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x153101aa, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x410)) returned 1 [0069.363] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0069.364] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\SavedPictures.library-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\libraries\\savedpictures.library-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\SavedPictures.library-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\libraries\\savedpictures.library-ms.xuy")) returned 1 [0069.364] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\Videos.library-ms", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\Videos.library-ms", lpFilePart=0x0) returned 0x53 [0069.364] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0069.364] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\Videos.library-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\libraries\\videos.library-ms"), fInfoLevelId=0x0, lpFileInformation=0x22c9730 | out: lpFileInformation=0x22c9730*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae0aa00a, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xae0aa00a, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xae0aa00a, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x3ab)) returned 1 [0069.365] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0069.365] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\Videos.library-ms", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\Videos.library-ms", lpFilePart=0x0) returned 0x53 [0069.365] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0069.365] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\Videos.library-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\libraries\\videos.library-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0069.365] GetFileType (hFile=0x444) returned 0x1 [0069.365] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0069.365] GetFileType (hFile=0x444) returned 0x1 [0069.365] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0x3ab [0069.365] ReadFile (in: hFile=0x444, lpBuffer=0x22c9dc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be718, lpOverlapped=0x0 | out: lpBuffer=0x22c9dc8*, lpNumberOfBytesRead=0x3be718*=0x3ab, lpOverlapped=0x0) returned 1 [0069.367] CloseHandle (hObject=0x444) returned 1 [0069.378] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\Videos.library-ms", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\Videos.library-ms", lpFilePart=0x0) returned 0x53 [0069.378] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0069.378] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\Videos.library-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\libraries\\videos.library-ms"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0069.379] GetFileType (hFile=0x444) returned 0x1 [0069.379] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0069.379] GetFileType (hFile=0x444) returned 0x1 [0069.380] WriteFile (in: hFile=0x444, lpBuffer=0x2342030*, nNumberOfBytesToWrite=0x3b0, lpNumberOfBytesWritten=0x3be628, lpOverlapped=0x0 | out: lpBuffer=0x2342030*, lpNumberOfBytesWritten=0x3be628*=0x3b0, lpOverlapped=0x0) returned 1 [0069.380] CloseHandle (hObject=0x444) returned 1 [0069.380] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\Videos.library-ms", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\Videos.library-ms", lpFilePart=0x0) returned 0x53 [0069.380] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\Videos.library-ms.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\Videos.library-ms.xuy", lpFilePart=0x0) returned 0x57 [0069.380] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0069.381] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\Videos.library-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\libraries\\videos.library-ms"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae0aa00a, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xae0aa00a, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x153363a1, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x3b0)) returned 1 [0069.381] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0069.381] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\Videos.library-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\libraries\\videos.library-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\Videos.library-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\libraries\\videos.library-ms.xuy")) returned 1 [0069.381] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0069.381] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Network Shortcuts", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Network Shortcuts", lpFilePart=0x0) returned 0x49 [0069.381] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Network Shortcuts\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Network Shortcuts\\", lpFilePart=0x0) returned 0x4a [0069.382] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Network Shortcuts\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7d90 [0069.382] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.382] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0069.382] FindClose (in: hFindFile=0x5d7d90 | out: hFindFile=0x5d7d90) returned 1 [0069.382] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0069.382] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0069.382] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0069.382] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Network Shortcuts", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Network Shortcuts", lpFilePart=0x0) returned 0x49 [0069.382] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Network Shortcuts\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Network Shortcuts\\", lpFilePart=0x0) returned 0x4a [0069.382] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Network Shortcuts\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d78b0 [0069.382] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.383] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0069.383] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0069.383] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0069.383] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0069.383] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0069.383] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Printer Shortcuts", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Printer Shortcuts", lpFilePart=0x0) returned 0x49 [0069.383] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Printer Shortcuts\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Printer Shortcuts\\", lpFilePart=0x0) returned 0x4a [0069.383] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Printer Shortcuts\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7d30 [0069.383] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.383] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0069.383] FindClose (in: hFindFile=0x5d7d30 | out: hFindFile=0x5d7d30) returned 1 [0069.383] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0069.383] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0069.383] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0069.383] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Printer Shortcuts", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Printer Shortcuts", lpFilePart=0x0) returned 0x49 [0069.384] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Printer Shortcuts\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Printer Shortcuts\\", lpFilePart=0x0) returned 0x4a [0069.384] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Printer Shortcuts\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d73d0 [0069.384] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.384] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0069.384] FindClose (in: hFindFile=0x5d73d0 | out: hFindFile=0x5d73d0) returned 1 [0069.384] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0069.384] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0069.384] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0069.384] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent", lpFilePart=0x0) returned 0x3e [0069.384] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\", lpFilePart=0x0) returned 0x3f [0069.384] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7a90 [0069.384] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.385] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.385] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.385] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.385] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.385] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.385] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.385] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.385] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.385] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.386] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.386] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.386] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.386] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.386] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.386] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.386] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.386] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.386] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.386] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.399] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.399] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.400] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.400] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.400] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.400] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.400] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.400] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.400] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.400] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.400] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.401] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.401] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.401] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.401] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.401] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.401] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.401] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.401] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.401] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.402] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.402] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.402] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.402] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.402] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.402] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.402] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.403] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.403] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.403] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.403] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.403] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.403] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.403] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.403] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.403] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.403] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.404] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.404] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.404] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.404] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.404] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.404] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.404] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.404] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.404] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.405] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.405] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.405] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.405] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.405] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.405] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.405] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.405] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.405] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.406] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.406] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.406] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.406] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.406] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.406] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.406] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.406] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.406] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.406] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.407] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.407] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.407] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.407] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.407] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.407] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.407] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.407] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.407] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.408] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.408] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.408] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.408] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.408] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.408] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.408] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.408] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.408] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.408] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.409] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.409] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.409] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.409] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.409] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.409] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.409] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.409] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.409] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.409] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.410] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.410] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.410] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.410] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.410] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.410] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.410] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.410] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.410] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.410] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.410] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.410] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.410] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.410] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.410] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.410] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.410] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.410] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.410] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.410] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.410] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.410] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.411] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.411] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.411] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.411] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.411] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.411] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.411] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.411] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.411] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.414] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.414] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.414] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.414] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.414] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.414] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.414] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.414] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.414] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.414] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.414] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.414] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.414] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.415] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.415] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0069.415] FindClose (in: hFindFile=0x5d7a90 | out: hFindFile=0x5d7a90) returned 1 [0069.415] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0069.415] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0069.415] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0069.415] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent", lpFilePart=0x0) returned 0x3e [0069.415] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\", lpFilePart=0x0) returned 0x3f [0069.415] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d73d0 [0069.415] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.415] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.415] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.415] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.415] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.415] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.415] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.415] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.415] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.415] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.415] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.415] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.415] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.415] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.415] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.415] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.415] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.416] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.416] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.416] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.416] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.416] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.416] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.416] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.416] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.416] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.416] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.416] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.416] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.416] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.416] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.416] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.416] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.416] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.416] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.416] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.416] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.416] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.416] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.416] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.416] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.416] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.416] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.416] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.416] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.416] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.416] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.416] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.416] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.416] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.417] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.417] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.417] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.417] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.417] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.417] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.417] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.417] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.417] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.417] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.417] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.417] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.417] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.417] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.417] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.417] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.417] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.417] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.417] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.417] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.417] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.417] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.417] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.417] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.417] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.417] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.417] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.417] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.417] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.417] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.417] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.447] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0069.447] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0069.447] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\desktop.ini", lpFilePart=0x0) returned 0x4a [0069.447] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0069.448] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0069.448] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0069.448] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0069.504] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0069.505] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\desktop.ini"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0069.506] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb0e0) returned 1 [0069.506] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3bbd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\desktop.ini", lpFilePart=0x0) returned 0x4a [0069.506] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc200) returned 1 [0069.507] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x3bc2e0 | out: lpFileInformation=0x3bc2e0*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0xae1b508e, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xae1b508e, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xae1b508e, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x1b0)) returned 1 [0069.507] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1c0) returned 1 [0069.507] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3bbd80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\desktop.ini", lpFilePart=0x0) returned 0x4a [0069.507] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc200) returned 1 [0069.507] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x21f61e8 | out: lpFileInformation=0x21f61e8*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0xae1b508e, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xae1b508e, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xae1b508e, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x1b0)) returned 1 [0069.507] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1c0) returned 1 [0069.507] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3bbbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\desktop.ini", lpFilePart=0x0) returned 0x4a [0069.507] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0c0) returned 1 [0069.507] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0069.507] GetFileType (hFile=0x444) returned 0x1 [0069.507] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc030) returned 1 [0069.507] GetFileType (hFile=0x444) returned 0x1 [0069.507] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc258 | out: lpFileSizeHigh=0x3bc258*=0x0) returned 0x1b0 [0069.507] ReadFile (in: hFile=0x444, lpBuffer=0x21f6640, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bc188, lpOverlapped=0x0 | out: lpBuffer=0x21f6640*, lpNumberOfBytesRead=0x3bc188*=0x1b0, lpOverlapped=0x0) returned 1 [0069.507] CloseHandle (hObject=0x444) returned 1 [0069.553] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3bbbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\desktop.ini", lpFilePart=0x0) returned 0x4a [0069.553] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0c0) returned 1 [0069.553] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\desktop.ini"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0069.555] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8b50) returned 1 [0069.556] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0069.556] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations", lpFilePart=0x0) returned 0x54 [0069.556] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\", lpFilePart=0x0) returned 0x55 [0069.556] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7cd0 [0069.556] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0069.556] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0069.556] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0069.556] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0069.556] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0069.557] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0069.557] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0069.557] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0069.557] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0069.557] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0069.557] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0069.557] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0069.557] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0069.557] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0069.557] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0069.558] FindClose (in: hFindFile=0x5d7cd0 | out: hFindFile=0x5d7cd0) returned 1 [0069.558] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0069.558] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0069.558] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0069.558] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations", lpFilePart=0x0) returned 0x54 [0069.558] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\", lpFilePart=0x0) returned 0x55 [0069.558] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d78b0 [0069.558] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0069.558] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0069.558] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0069.558] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0069.559] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0069.559] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0069.559] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0069.559] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0069.559] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0069.560] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0069.560] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0069.560] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0069.560] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0069.560] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0069.560] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0069.560] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0069.560] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0069.560] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0069.560] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0069.560] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations", lpFilePart=0x0) returned 0x51 [0069.560] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\", lpFilePart=0x0) returned 0x52 [0069.561] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d81b0 [0069.561] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0069.561] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0069.561] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0069.561] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0069.561] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0069.561] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0069.561] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0069.561] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0069.562] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0069.562] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0069.562] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0069.562] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0069.562] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0069.562] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations", lpFilePart=0x0) returned 0x51 [0069.562] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\", lpFilePart=0x0) returned 0x52 [0069.562] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7a30 [0069.562] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0069.562] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0069.562] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0069.562] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0069.562] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0069.563] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0069.563] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0069.563] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0069.563] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0069.563] FindClose (in: hFindFile=0x5d7a30 | out: hFindFile=0x5d7a30) returned 1 [0069.563] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0069.563] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0069.563] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0069.563] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\SendTo", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\SendTo", lpFilePart=0x0) returned 0x3e [0069.563] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\", lpFilePart=0x0) returned 0x3f [0069.563] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d79d0 [0069.567] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.568] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.568] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.568] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.568] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.568] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.568] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.568] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0069.568] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0069.569] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0069.569] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0069.569] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0069.569] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\SendTo", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\SendTo", lpFilePart=0x0) returned 0x3e [0069.569] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\", lpFilePart=0x0) returned 0x3f [0069.569] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7cd0 [0069.570] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.570] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.570] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.570] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.570] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.570] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.570] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.570] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0069.571] FindClose (in: hFindFile=0x5d7cd0 | out: hFindFile=0x5d7cd0) returned 1 [0069.571] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0069.571] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0069.571] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Compressed (zipped) Folder.ZFSendToTarget", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Compressed (zipped) Folder.ZFSendToTarget", lpFilePart=0x0) returned 0x68 [0069.571] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0069.571] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Compressed (zipped) Folder.ZFSendToTarget" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\sendto\\compressed (zipped) folder.zfsendtotarget"), fInfoLevelId=0x0, lpFileInformation=0x227f070 | out: lpFileInformation=0x227f070*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa84301ad, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa84301ad, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xf0631a47, ftLastWriteTime.dwHighDateTime=0x1d0baff, nFileSizeHigh=0x0, nFileSizeLow=0x3)) returned 1 [0069.572] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0069.572] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Compressed (zipped) Folder.ZFSendToTarget", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Compressed (zipped) Folder.ZFSendToTarget", lpFilePart=0x0) returned 0x68 [0069.572] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0069.572] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Compressed (zipped) Folder.ZFSendToTarget" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\sendto\\compressed (zipped) folder.zfsendtotarget"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0069.572] GetFileType (hFile=0x444) returned 0x1 [0069.572] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0069.572] GetFileType (hFile=0x444) returned 0x1 [0069.572] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0x3 [0069.572] ReadFile (in: hFile=0x444, lpBuffer=0x227f420, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be718, lpOverlapped=0x0 | out: lpBuffer=0x227f420*, lpNumberOfBytesRead=0x3be718*=0x3, lpOverlapped=0x0) returned 1 [0069.575] CloseHandle (hObject=0x444) returned 1 [0069.610] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Compressed (zipped) Folder.ZFSendToTarget", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Compressed (zipped) Folder.ZFSendToTarget", lpFilePart=0x0) returned 0x68 [0069.610] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0069.610] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Compressed (zipped) Folder.ZFSendToTarget" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\sendto\\compressed (zipped) folder.zfsendtotarget"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0069.611] GetFileType (hFile=0x444) returned 0x1 [0069.611] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0069.611] GetFileType (hFile=0x444) returned 0x1 [0069.611] WriteFile (in: hFile=0x444, lpBuffer=0x22f65a0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x3be628, lpOverlapped=0x0 | out: lpBuffer=0x22f65a0*, lpNumberOfBytesWritten=0x3be628*=0x10, lpOverlapped=0x0) returned 1 [0069.612] CloseHandle (hObject=0x444) returned 1 [0069.612] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Compressed (zipped) Folder.ZFSendToTarget", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Compressed (zipped) Folder.ZFSendToTarget", lpFilePart=0x0) returned 0x68 [0069.612] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Compressed (zipped) Folder.ZFSendToTarget.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Compressed (zipped) Folder.ZFSendToTarget.xuy", lpFilePart=0x0) returned 0x6c [0069.612] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0069.612] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Compressed (zipped) Folder.ZFSendToTarget" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\sendto\\compressed (zipped) folder.zfsendtotarget"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa84301ad, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa84301ad, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x15572a13, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0069.612] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0069.612] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Compressed (zipped) Folder.ZFSendToTarget" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\sendto\\compressed (zipped) folder.zfsendtotarget"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Compressed (zipped) Folder.ZFSendToTarget.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\sendto\\compressed (zipped) folder.zfsendtotarget.xuy")) returned 1 [0069.613] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Desktop (create shortcut).DeskLink", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Desktop (create shortcut).DeskLink", lpFilePart=0x0) returned 0x61 [0069.613] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0069.613] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Desktop (create shortcut).DeskLink" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\sendto\\desktop (create shortcut).desklink"), fInfoLevelId=0x0, lpFileInformation=0x22f78e8 | out: lpFileInformation=0x22f78e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa84301ad, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa84301ad, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xf0631a47, ftLastWriteTime.dwHighDateTime=0x1d0baff, nFileSizeHigh=0x0, nFileSizeLow=0x7)) returned 1 [0069.613] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0069.613] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Desktop (create shortcut).DeskLink", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Desktop (create shortcut).DeskLink", lpFilePart=0x0) returned 0x61 [0069.613] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0069.613] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Desktop (create shortcut).DeskLink" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\sendto\\desktop (create shortcut).desklink"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0069.613] GetFileType (hFile=0x444) returned 0x1 [0069.613] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0069.613] GetFileType (hFile=0x444) returned 0x1 [0069.613] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0x7 [0069.613] ReadFile (in: hFile=0x444, lpBuffer=0x22f7c58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be718, lpOverlapped=0x0 | out: lpBuffer=0x22f7c58*, lpNumberOfBytesRead=0x3be718*=0x7, lpOverlapped=0x0) returned 1 [0069.617] CloseHandle (hObject=0x444) returned 1 [0069.661] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Desktop (create shortcut).DeskLink", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Desktop (create shortcut).DeskLink", lpFilePart=0x0) returned 0x61 [0069.661] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0069.661] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Desktop (create shortcut).DeskLink" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\sendto\\desktop (create shortcut).desklink"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0069.662] GetFileType (hFile=0x444) returned 0x1 [0069.662] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0069.662] GetFileType (hFile=0x444) returned 0x1 [0069.662] WriteFile (in: hFile=0x444, lpBuffer=0x2168190*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x3be628, lpOverlapped=0x0 | out: lpBuffer=0x2168190*, lpNumberOfBytesWritten=0x3be628*=0x10, lpOverlapped=0x0) returned 1 [0069.663] CloseHandle (hObject=0x444) returned 1 [0069.663] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Desktop (create shortcut).DeskLink", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Desktop (create shortcut).DeskLink", lpFilePart=0x0) returned 0x61 [0069.663] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Desktop (create shortcut).DeskLink.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Desktop (create shortcut).DeskLink.xuy", lpFilePart=0x0) returned 0x65 [0069.663] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0069.663] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Desktop (create shortcut).DeskLink" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\sendto\\desktop (create shortcut).desklink"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa84301ad, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa84301ad, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x155e4f78, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0069.664] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0069.664] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Desktop (create shortcut).DeskLink" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\sendto\\desktop (create shortcut).desklink"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Desktop (create shortcut).DeskLink.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\sendto\\desktop (create shortcut).desklink.xuy")) returned 1 [0069.664] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Desktop.ini", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Desktop.ini", lpFilePart=0x0) returned 0x4a [0069.664] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0069.664] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\sendto\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x21694a0 | out: lpFileInformation=0x21694a0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xa84301ad, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa84301ad, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xf58c0df1, ftLastWriteTime.dwHighDateTime=0x1d0baff, nFileSizeHigh=0x0, nFileSizeLow=0x22e)) returned 1 [0069.664] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0069.664] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Desktop.ini", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Desktop.ini", lpFilePart=0x0) returned 0x4a [0069.664] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0069.664] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\sendto\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0069.665] GetFileType (hFile=0x444) returned 0x1 [0069.665] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0069.665] GetFileType (hFile=0x444) returned 0x1 [0069.665] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0x22e [0069.665] ReadFile (in: hFile=0x444, lpBuffer=0x2169978, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be718, lpOverlapped=0x0 | out: lpBuffer=0x2169978*, lpNumberOfBytesRead=0x3be718*=0x22e, lpOverlapped=0x0) returned 1 [0069.679] CloseHandle (hObject=0x444) returned 1 [0069.706] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Desktop.ini", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Desktop.ini", lpFilePart=0x0) returned 0x4a [0069.706] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0069.706] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\sendto\\desktop.ini"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0069.707] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb0e0) returned 1 [0069.708] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Desktop.ini", nBufferLength=0x105, lpBuffer=0x3bbd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Desktop.ini", lpFilePart=0x0) returned 0x4a [0069.708] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc200) returned 1 [0069.708] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\sendto\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x3bc2e0 | out: lpFileInformation=0x3bc2e0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xa84301ad, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa84301ad, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xf58c0df1, ftLastWriteTime.dwHighDateTime=0x1d0baff, nFileSizeHigh=0x0, nFileSizeLow=0x22e)) returned 1 [0069.708] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1c0) returned 1 [0069.708] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Desktop.ini", nBufferLength=0x105, lpBuffer=0x3bbd80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Desktop.ini", lpFilePart=0x0) returned 0x4a [0069.708] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc200) returned 1 [0069.708] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\sendto\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x21e1c88 | out: lpFileInformation=0x21e1c88*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xa84301ad, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa84301ad, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xf58c0df1, ftLastWriteTime.dwHighDateTime=0x1d0baff, nFileSizeHigh=0x0, nFileSizeLow=0x22e)) returned 1 [0069.708] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1c0) returned 1 [0069.708] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Desktop.ini", nBufferLength=0x105, lpBuffer=0x3bbbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Desktop.ini", lpFilePart=0x0) returned 0x4a [0069.708] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0c0) returned 1 [0069.708] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\sendto\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0069.709] GetFileType (hFile=0x444) returned 0x1 [0069.709] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc030) returned 1 [0069.709] GetFileType (hFile=0x444) returned 0x1 [0069.709] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc258 | out: lpFileSizeHigh=0x3bc258*=0x0) returned 0x22e [0069.709] ReadFile (in: hFile=0x444, lpBuffer=0x21e2160, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bc188, lpOverlapped=0x0 | out: lpBuffer=0x21e2160*, lpNumberOfBytesRead=0x3bc188*=0x22e, lpOverlapped=0x0) returned 1 [0069.709] CloseHandle (hObject=0x444) returned 1 [0069.751] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Desktop.ini", nBufferLength=0x105, lpBuffer=0x3bbbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Desktop.ini", lpFilePart=0x0) returned 0x4a [0069.751] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0c0) returned 1 [0069.751] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\sendto\\desktop.ini"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0069.753] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8b50) returned 1 [0069.753] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Documents.mydocs", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Documents.mydocs", lpFilePart=0x0) returned 0x4f [0069.754] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0069.754] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Documents.mydocs" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\sendto\\documents.mydocs"), fInfoLevelId=0x0, lpFileInformation=0x225a3e8 | out: lpFileInformation=0x225a3e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae2e6368, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xae2e6368, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xae2e6368, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0069.757] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0069.757] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Documents.mydocs", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Documents.mydocs", lpFilePart=0x0) returned 0x4f [0069.757] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0069.757] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Documents.mydocs" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\sendto\\documents.mydocs"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0069.757] GetFileType (hFile=0x444) returned 0x1 [0069.757] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0069.757] GetFileType (hFile=0x444) returned 0x1 [0069.757] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0x0 [0069.757] CloseHandle (hObject=0x444) returned 1 [0069.796] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Documents.mydocs", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Documents.mydocs", lpFilePart=0x0) returned 0x4f [0069.796] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0069.796] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Documents.mydocs" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\sendto\\documents.mydocs"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0069.796] GetFileType (hFile=0x444) returned 0x1 [0069.796] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0069.796] GetFileType (hFile=0x444) returned 0x1 [0069.796] WriteFile (in: hFile=0x444, lpBuffer=0x22d07c0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x3be628, lpOverlapped=0x0 | out: lpBuffer=0x22d07c0*, lpNumberOfBytesWritten=0x3be628*=0x10, lpOverlapped=0x0) returned 1 [0069.797] CloseHandle (hObject=0x444) returned 1 [0069.797] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Documents.mydocs", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Documents.mydocs", lpFilePart=0x0) returned 0x4f [0069.797] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Documents.mydocs.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Documents.mydocs.xuy", lpFilePart=0x0) returned 0x53 [0069.797] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0069.797] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Documents.mydocs" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\sendto\\documents.mydocs"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae2e6368, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xae2e6368, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x1573c2ff, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0069.797] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0069.797] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Documents.mydocs" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\sendto\\documents.mydocs"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Documents.mydocs.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\sendto\\documents.mydocs.xuy")) returned 1 [0069.798] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Fax Recipient.lnk", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Fax Recipient.lnk", lpFilePart=0x0) returned 0x50 [0069.798] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0069.798] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Fax Recipient.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\sendto\\fax recipient.lnk"), fInfoLevelId=0x0, lpFileInformation=0x22d1a58 | out: lpFileInformation=0x22d1a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa84301ad, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa84301ad, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xc0ddf27b, ftLastWriteTime.dwHighDateTime=0x1d0baff, nFileSizeHigh=0x0, nFileSizeLow=0x458)) returned 1 [0069.798] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0069.798] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Fax Recipient.lnk", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Fax Recipient.lnk", lpFilePart=0x0) returned 0x50 [0069.798] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0069.798] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Fax Recipient.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\sendto\\fax recipient.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0069.799] GetFileType (hFile=0x444) returned 0x1 [0069.799] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0069.799] GetFileType (hFile=0x444) returned 0x1 [0069.799] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0x458 [0069.799] ReadFile (in: hFile=0x444, lpBuffer=0x22d2198, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be718, lpOverlapped=0x0 | out: lpBuffer=0x22d2198*, lpNumberOfBytesRead=0x3be718*=0x458, lpOverlapped=0x0) returned 1 [0069.800] CloseHandle (hObject=0x444) returned 1 [0069.811] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Fax Recipient.lnk", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Fax Recipient.lnk", lpFilePart=0x0) returned 0x50 [0069.811] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0069.811] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Fax Recipient.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\sendto\\fax recipient.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0069.812] GetFileType (hFile=0x444) returned 0x1 [0069.812] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0069.812] GetFileType (hFile=0x444) returned 0x1 [0069.812] WriteFile (in: hFile=0x444, lpBuffer=0x234a770*, nNumberOfBytesToWrite=0x460, lpNumberOfBytesWritten=0x3be628, lpOverlapped=0x0 | out: lpBuffer=0x234a770*, lpNumberOfBytesWritten=0x3be628*=0x460, lpOverlapped=0x0) returned 1 [0069.813] CloseHandle (hObject=0x444) returned 1 [0069.813] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Fax Recipient.lnk", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Fax Recipient.lnk", lpFilePart=0x0) returned 0x50 [0069.813] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Fax Recipient.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Fax Recipient.lnk.xuy", lpFilePart=0x0) returned 0x54 [0069.813] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0069.813] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Fax Recipient.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\sendto\\fax recipient.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa84301ad, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa84301ad, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x157625e3, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x460)) returned 1 [0069.813] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0069.813] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Fax Recipient.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\sendto\\fax recipient.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Fax Recipient.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\sendto\\fax recipient.lnk.xuy")) returned 1 [0069.814] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Mail Recipient.MAPIMail", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Mail Recipient.MAPIMail", lpFilePart=0x0) returned 0x56 [0069.814] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0069.814] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Mail Recipient.MAPIMail" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\sendto\\mail recipient.mapimail"), fInfoLevelId=0x0, lpFileInformation=0x234ba28 | out: lpFileInformation=0x234ba28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa84301ad, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa84301ad, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xf0631a47, ftLastWriteTime.dwHighDateTime=0x1d0baff, nFileSizeHigh=0x0, nFileSizeLow=0x4)) returned 1 [0069.814] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0069.814] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Mail Recipient.MAPIMail", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Mail Recipient.MAPIMail", lpFilePart=0x0) returned 0x56 [0069.814] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0069.814] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Mail Recipient.MAPIMail" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\sendto\\mail recipient.mapimail"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0069.814] GetFileType (hFile=0x444) returned 0x1 [0069.814] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0069.814] GetFileType (hFile=0x444) returned 0x1 [0069.814] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0x4 [0069.814] ReadFile (in: hFile=0x444, lpBuffer=0x234bd38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be718, lpOverlapped=0x0 | out: lpBuffer=0x234bd38*, lpNumberOfBytesRead=0x3be718*=0x4, lpOverlapped=0x0) returned 1 [0069.820] CloseHandle (hObject=0x444) returned 1 [0069.895] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Mail Recipient.MAPIMail", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Mail Recipient.MAPIMail", lpFilePart=0x0) returned 0x56 [0069.896] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0069.896] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Mail Recipient.MAPIMail" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\sendto\\mail recipient.mapimail"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0069.897] GetFileType (hFile=0x444) returned 0x1 [0069.897] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0069.897] GetFileType (hFile=0x444) returned 0x1 [0069.897] WriteFile (in: hFile=0x444, lpBuffer=0x21c2e08*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x3be628, lpOverlapped=0x0 | out: lpBuffer=0x21c2e08*, lpNumberOfBytesWritten=0x3be628*=0x10, lpOverlapped=0x0) returned 1 [0069.897] CloseHandle (hObject=0x444) returned 1 [0069.898] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Mail Recipient.MAPIMail", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Mail Recipient.MAPIMail", lpFilePart=0x0) returned 0x56 [0069.898] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Mail Recipient.MAPIMail.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Mail Recipient.MAPIMail.xuy", lpFilePart=0x0) returned 0x5a [0069.898] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0069.898] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Mail Recipient.MAPIMail" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\sendto\\mail recipient.mapimail"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa84301ad, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa84301ad, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x158210cd, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0069.898] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0069.898] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Mail Recipient.MAPIMail" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\sendto\\mail recipient.mapimail"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Mail Recipient.MAPIMail.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\sendto\\mail recipient.mapimail.xuy")) returned 1 [0069.898] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0069.898] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu", lpFilePart=0x0) returned 0x42 [0069.899] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\", lpFilePart=0x0) returned 0x43 [0069.899] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7a90 [0069.899] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.899] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.899] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.899] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0069.899] FindClose (in: hFindFile=0x5d7a90 | out: hFindFile=0x5d7a90) returned 1 [0069.899] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0069.899] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0069.899] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0069.899] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu", lpFilePart=0x0) returned 0x42 [0069.899] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\", lpFilePart=0x0) returned 0x43 [0069.900] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d81b0 [0069.900] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.900] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.900] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0069.900] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0069.900] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0069.900] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0069.900] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0069.900] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\desktop.ini", lpFilePart=0x0) returned 0x4e [0069.900] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0069.900] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x21c62c0 | out: lpFileInformation=0x21c62c0*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0xae14297a, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xae14297a, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xae14297a, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0xae)) returned 1 [0069.900] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0069.900] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\desktop.ini", lpFilePart=0x0) returned 0x4e [0069.901] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0069.901] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0069.901] GetFileType (hFile=0x444) returned 0x1 [0069.901] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0069.901] GetFileType (hFile=0x444) returned 0x1 [0069.901] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0xae [0069.901] ReadFile (in: hFile=0x444, lpBuffer=0x21c6628, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be718, lpOverlapped=0x0 | out: lpBuffer=0x21c6628*, lpNumberOfBytesRead=0x3be718*=0xae, lpOverlapped=0x0) returned 1 [0069.901] CloseHandle (hObject=0x444) returned 1 [0069.912] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\desktop.ini", lpFilePart=0x0) returned 0x4e [0069.912] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0069.912] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\desktop.ini"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0069.913] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb0e0) returned 1 [0069.913] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3bbd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\desktop.ini", lpFilePart=0x0) returned 0x4e [0069.913] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc200) returned 1 [0069.913] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x3bc2e0 | out: lpFileInformation=0x3bc2e0*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0xae14297a, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xae14297a, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xae14297a, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0xae)) returned 1 [0069.913] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1c0) returned 1 [0069.914] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3bbd80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\desktop.ini", lpFilePart=0x0) returned 0x4e [0069.914] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc200) returned 1 [0069.914] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x223e0d8 | out: lpFileInformation=0x223e0d8*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0xae14297a, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xae14297a, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xae14297a, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0xae)) returned 1 [0069.914] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1c0) returned 1 [0069.914] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3bbbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\desktop.ini", lpFilePart=0x0) returned 0x4e [0069.914] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0c0) returned 1 [0069.914] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0069.914] GetFileType (hFile=0x444) returned 0x1 [0069.914] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc030) returned 1 [0069.914] GetFileType (hFile=0x444) returned 0x1 [0069.914] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc258 | out: lpFileSizeHigh=0x3bc258*=0x0) returned 0xae [0069.914] ReadFile (in: hFile=0x444, lpBuffer=0x223e440, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bc188, lpOverlapped=0x0 | out: lpBuffer=0x223e440*, lpNumberOfBytesRead=0x3bc188*=0xae, lpOverlapped=0x0) returned 1 [0069.914] CloseHandle (hObject=0x444) returned 1 [0069.955] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3bbbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\desktop.ini", lpFilePart=0x0) returned 0x4e [0069.955] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0c0) returned 1 [0069.955] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\desktop.ini"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0069.956] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8b50) returned 1 [0069.957] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0069.957] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs", lpFilePart=0x0) returned 0x4b [0069.957] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\", lpFilePart=0x0) returned 0x4c [0069.957] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7550 [0069.957] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0069.957] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0069.958] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0069.958] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0069.958] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0069.958] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0069.958] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0069.958] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0069.958] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0069.958] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0069.959] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0069.959] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0069.959] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0069.959] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0069.959] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0069.959] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs", lpFilePart=0x0) returned 0x4b [0069.959] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\", lpFilePart=0x0) returned 0x4c [0069.959] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7550 [0069.959] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0069.959] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0069.959] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0069.960] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0069.960] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0069.960] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0069.960] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0069.960] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0069.960] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0069.960] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0069.960] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0069.960] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0069.961] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0069.961] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0069.961] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\desktop.ini", lpFilePart=0x0) returned 0x57 [0069.961] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0069.961] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x22ba3f0 | out: lpFileInformation=0x22ba3f0*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0xae168be9, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xae168be9, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xae168be9, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0xae)) returned 1 [0069.961] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0069.961] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\desktop.ini", lpFilePart=0x0) returned 0x57 [0069.961] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0069.961] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0069.961] GetFileType (hFile=0x444) returned 0x1 [0069.961] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0069.961] GetFileType (hFile=0x444) returned 0x1 [0069.961] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0xae [0069.961] ReadFile (in: hFile=0x444, lpBuffer=0x22ba778, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x22ba778*, lpNumberOfBytesRead=0x3be6a8*=0xae, lpOverlapped=0x0) returned 1 [0069.962] CloseHandle (hObject=0x444) returned 1 [0070.008] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\desktop.ini", lpFilePart=0x0) returned 0x57 [0070.009] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0070.009] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\desktop.ini"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0070.010] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb070) returned 1 [0070.011] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3bbcf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\desktop.ini", lpFilePart=0x0) returned 0x57 [0070.011] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0070.011] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x3bc270 | out: lpFileInformation=0x3bc270*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0xae168be9, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xae168be9, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xae168be9, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0xae)) returned 1 [0070.011] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc150) returned 1 [0070.011] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3bbd10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\desktop.ini", lpFilePart=0x0) returned 0x57 [0070.011] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0070.011] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x2332258 | out: lpFileInformation=0x2332258*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0xae168be9, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xae168be9, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xae168be9, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0xae)) returned 1 [0070.011] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc150) returned 1 [0070.011] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3bbb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\desktop.ini", lpFilePart=0x0) returned 0x57 [0070.011] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc050) returned 1 [0070.011] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0070.011] GetFileType (hFile=0x444) returned 0x1 [0070.012] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbfc0) returned 1 [0070.012] GetFileType (hFile=0x444) returned 0x1 [0070.012] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc1e8 | out: lpFileSizeHigh=0x3bc1e8*=0x0) returned 0xae [0070.012] ReadFile (in: hFile=0x444, lpBuffer=0x23325e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bc118, lpOverlapped=0x0 | out: lpBuffer=0x23325e0*, lpNumberOfBytesRead=0x3bc118*=0xae, lpOverlapped=0x0) returned 1 [0070.012] CloseHandle (hObject=0x444) returned 1 [0070.053] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3bbb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\desktop.ini", lpFilePart=0x0) returned 0x57 [0070.054] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc050) returned 1 [0070.054] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\desktop.ini"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0070.055] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8ae0) returned 1 [0070.056] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\OneDrive.lnk", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\OneDrive.lnk", lpFilePart=0x0) returned 0x58 [0070.056] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0070.056] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\OneDrive.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\onedrive.lnk"), fInfoLevelId=0x0, lpFileInformation=0x21aa810 | out: lpFileInformation=0x21aa810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x322ca074, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x5fb9fb13, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x6076540b, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x956)) returned 1 [0070.056] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0070.056] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\OneDrive.lnk", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\OneDrive.lnk", lpFilePart=0x0) returned 0x58 [0070.056] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0070.056] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\OneDrive.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\onedrive.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0070.056] GetFileType (hFile=0x444) returned 0x1 [0070.056] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0070.056] GetFileType (hFile=0x444) returned 0x1 [0070.057] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x956 [0070.057] ReadFile (in: hFile=0x444, lpBuffer=0x21ab460, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x21ab460*, lpNumberOfBytesRead=0x3be6a8*=0x956, lpOverlapped=0x0) returned 1 [0070.068] CloseHandle (hObject=0x444) returned 1 [0070.117] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\OneDrive.lnk", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\OneDrive.lnk", lpFilePart=0x0) returned 0x58 [0070.117] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0070.117] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\OneDrive.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\onedrive.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0070.122] GetFileType (hFile=0x444) returned 0x1 [0070.122] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0070.122] GetFileType (hFile=0x444) returned 0x1 [0070.122] WriteFile (in: hFile=0x444, lpBuffer=0x2225348*, nNumberOfBytesToWrite=0x960, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x2225348*, lpNumberOfBytesWritten=0x3be5b8*=0x960, lpOverlapped=0x0) returned 1 [0070.123] CloseHandle (hObject=0x444) returned 1 [0070.125] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\OneDrive.lnk", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\OneDrive.lnk", lpFilePart=0x0) returned 0x58 [0070.125] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\OneDrive.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\OneDrive.lnk.xuy", lpFilePart=0x0) returned 0x5c [0070.125] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0070.125] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\OneDrive.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\onedrive.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x322ca074, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x5fb9fb13, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x15a5d64d, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x960)) returned 1 [0070.125] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0070.126] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\OneDrive.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\onedrive.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\OneDrive.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\onedrive.lnk.xuy")) returned 1 [0070.128] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0070.128] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility", lpFilePart=0x0) returned 0x59 [0070.128] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility\\", lpFilePart=0x0) returned 0x5a [0070.128] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d7c70 [0070.128] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0070.129] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0070.129] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0070.129] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0070.129] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0070.129] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0070.129] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0070.129] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0070.129] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0070.129] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0070.129] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility", lpFilePart=0x0) returned 0x59 [0070.129] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility\\", lpFilePart=0x0) returned 0x5a [0070.129] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d7fd0 [0070.130] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0070.130] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0070.130] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0070.130] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0070.130] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0070.130] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0070.130] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0070.130] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0070.130] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0070.131] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility\\Desktop.ini", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility\\Desktop.ini", lpFilePart=0x0) returned 0x65 [0070.131] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0070.131] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility\\Desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessibility\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x22298a0 | out: lpFileInformation=0x22298a0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xa84301ad, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa84301ad, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xf58c0df1, ftLastWriteTime.dwHighDateTime=0x1d0baff, nFileSizeHigh=0x0, nFileSizeLow=0x238)) returned 1 [0070.131] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0070.131] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility\\Desktop.ini", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility\\Desktop.ini", lpFilePart=0x0) returned 0x65 [0070.131] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0070.131] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility\\Desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessibility\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0070.131] GetFileType (hFile=0x444) returned 0x1 [0070.131] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0070.131] GetFileType (hFile=0x444) returned 0x1 [0070.131] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be708 | out: lpFileSizeHigh=0x3be708*=0x0) returned 0x238 [0070.131] ReadFile (in: hFile=0x444, lpBuffer=0x2229df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be638, lpOverlapped=0x0 | out: lpBuffer=0x2229df0*, lpNumberOfBytesRead=0x3be638*=0x238, lpOverlapped=0x0) returned 1 [0070.132] CloseHandle (hObject=0x444) returned 1 [0070.143] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility\\Desktop.ini", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility\\Desktop.ini", lpFilePart=0x0) returned 0x65 [0070.143] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0070.143] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility\\Desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessibility\\desktop.ini"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0070.144] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb000) returned 1 [0070.145] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility\\Desktop.ini", nBufferLength=0x105, lpBuffer=0x3bbc80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility\\Desktop.ini", lpFilePart=0x0) returned 0x65 [0070.145] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc120) returned 1 [0070.145] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility\\Desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessibility\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x3bc200 | out: lpFileInformation=0x3bc200*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xa84301ad, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa84301ad, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xf58c0df1, ftLastWriteTime.dwHighDateTime=0x1d0baff, nFileSizeHigh=0x0, nFileSizeLow=0x238)) returned 1 [0070.145] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc0e0) returned 1 [0070.145] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility\\Desktop.ini", nBufferLength=0x105, lpBuffer=0x3bbca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility\\Desktop.ini", lpFilePart=0x0) returned 0x65 [0070.145] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc120) returned 1 [0070.145] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility\\Desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessibility\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x22a21f8 | out: lpFileInformation=0x22a21f8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xa84301ad, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa84301ad, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xf58c0df1, ftLastWriteTime.dwHighDateTime=0x1d0baff, nFileSizeHigh=0x0, nFileSizeLow=0x238)) returned 1 [0070.145] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc0e0) returned 1 [0070.145] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility\\Desktop.ini", nBufferLength=0x105, lpBuffer=0x3bbb00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility\\Desktop.ini", lpFilePart=0x0) returned 0x65 [0070.145] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbfe0) returned 1 [0070.145] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility\\Desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessibility\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0070.145] GetFileType (hFile=0x444) returned 0x1 [0070.145] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbf50) returned 1 [0070.145] GetFileType (hFile=0x444) returned 0x1 [0070.145] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc178 | out: lpFileSizeHigh=0x3bc178*=0x0) returned 0x238 [0070.145] ReadFile (in: hFile=0x444, lpBuffer=0x22a2748, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bc0a8, lpOverlapped=0x0 | out: lpBuffer=0x22a2748*, lpNumberOfBytesRead=0x3bc0a8*=0x238, lpOverlapped=0x0) returned 1 [0070.146] CloseHandle (hObject=0x444) returned 1 [0070.204] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility\\Desktop.ini", nBufferLength=0x105, lpBuffer=0x3bbb00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility\\Desktop.ini", lpFilePart=0x0) returned 0x65 [0070.205] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbfe0) returned 1 [0070.205] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility\\Desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessibility\\desktop.ini"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0070.206] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8a70) returned 1 [0070.207] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility\\Magnify.lnk", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility\\Magnify.lnk", lpFilePart=0x0) returned 0x65 [0070.207] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0070.207] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility\\Magnify.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessibility\\magnify.lnk"), fInfoLevelId=0x0, lpFileInformation=0x231aa90 | out: lpFileInformation=0x231aa90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8409f48, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa8409f48, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x92d3e8d9, ftLastWriteTime.dwHighDateTime=0x1d0baff, nFileSizeHigh=0x0, nFileSizeLow=0x452)) returned 1 [0070.207] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0070.207] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility\\Magnify.lnk", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility\\Magnify.lnk", lpFilePart=0x0) returned 0x65 [0070.207] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0070.207] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility\\Magnify.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessibility\\magnify.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0070.207] GetFileType (hFile=0x444) returned 0x1 [0070.207] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0070.207] GetFileType (hFile=0x444) returned 0x1 [0070.207] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be708 | out: lpFileSizeHigh=0x3be708*=0x0) returned 0x452 [0070.207] ReadFile (in: hFile=0x444, lpBuffer=0x231b200, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be638, lpOverlapped=0x0 | out: lpBuffer=0x231b200*, lpNumberOfBytesRead=0x3be638*=0x452, lpOverlapped=0x0) returned 1 [0070.266] CloseHandle (hObject=0x444) returned 1 [0070.314] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility\\Magnify.lnk", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility\\Magnify.lnk", lpFilePart=0x0) returned 0x65 [0070.314] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0070.314] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility\\Magnify.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessibility\\magnify.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0070.334] GetFileType (hFile=0x444) returned 0x1 [0070.334] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0070.334] GetFileType (hFile=0x444) returned 0x1 [0070.334] WriteFile (in: hFile=0x444, lpBuffer=0x2193b10*, nNumberOfBytesToWrite=0x460, lpNumberOfBytesWritten=0x3be548, lpOverlapped=0x0 | out: lpBuffer=0x2193b10*, lpNumberOfBytesWritten=0x3be548*=0x460, lpOverlapped=0x0) returned 1 [0070.335] CloseHandle (hObject=0x444) returned 1 [0070.336] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility\\Magnify.lnk", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility\\Magnify.lnk", lpFilePart=0x0) returned 0x65 [0070.336] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility\\Magnify.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility\\Magnify.lnk.xuy", lpFilePart=0x0) returned 0x69 [0070.336] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0070.337] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility\\Magnify.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessibility\\magnify.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8409f48, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa8409f48, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x15c4d2f4, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x460)) returned 1 [0070.337] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0070.337] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility\\Magnify.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessibility\\magnify.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility\\Magnify.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessibility\\magnify.lnk.xuy")) returned 1 [0070.340] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility\\Narrator.lnk", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility\\Narrator.lnk", lpFilePart=0x0) returned 0x66 [0070.341] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0070.341] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility\\Narrator.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessibility\\narrator.lnk"), fInfoLevelId=0x0, lpFileInformation=0x2194e38 | out: lpFileInformation=0x2194e38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8409f48, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa8409f48, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x92d64b40, ftLastWriteTime.dwHighDateTime=0x1d0baff, nFileSizeHigh=0x0, nFileSizeLow=0x454)) returned 1 [0070.341] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0070.341] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility\\Narrator.lnk", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility\\Narrator.lnk", lpFilePart=0x0) returned 0x66 [0070.341] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0070.341] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility\\Narrator.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessibility\\narrator.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0070.341] GetFileType (hFile=0x444) returned 0x1 [0070.341] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0070.341] GetFileType (hFile=0x444) returned 0x1 [0070.341] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be708 | out: lpFileSizeHigh=0x3be708*=0x0) returned 0x454 [0070.341] ReadFile (in: hFile=0x444, lpBuffer=0x21955b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be638, lpOverlapped=0x0 | out: lpBuffer=0x21955b8*, lpNumberOfBytesRead=0x3be638*=0x454, lpOverlapped=0x0) returned 1 [0070.426] CloseHandle (hObject=0x444) returned 1 [0070.480] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility\\Narrator.lnk", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility\\Narrator.lnk", lpFilePart=0x0) returned 0x66 [0070.480] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0070.480] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility\\Narrator.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessibility\\narrator.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0070.485] GetFileType (hFile=0x444) returned 0x1 [0070.485] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0070.485] GetFileType (hFile=0x444) returned 0x1 [0070.486] WriteFile (in: hFile=0x444, lpBuffer=0x220dbb8*, nNumberOfBytesToWrite=0x460, lpNumberOfBytesWritten=0x3be548, lpOverlapped=0x0 | out: lpBuffer=0x220dbb8*, lpNumberOfBytesWritten=0x3be548*=0x460, lpOverlapped=0x0) returned 1 [0070.487] CloseHandle (hObject=0x444) returned 1 [0070.489] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility\\Narrator.lnk", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility\\Narrator.lnk", lpFilePart=0x0) returned 0x66 [0070.489] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility\\Narrator.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility\\Narrator.lnk.xuy", lpFilePart=0x0) returned 0x6a [0070.489] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0070.489] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility\\Narrator.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessibility\\narrator.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8409f48, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa8409f48, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x15dcabb8, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x460)) returned 1 [0070.489] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0070.489] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility\\Narrator.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessibility\\narrator.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility\\Narrator.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessibility\\narrator.lnk.xuy")) returned 1 [0070.495] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility\\On-Screen Keyboard.lnk", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility\\On-Screen Keyboard.lnk", lpFilePart=0x0) returned 0x70 [0070.495] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0070.495] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility\\On-Screen Keyboard.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessibility\\on-screen keyboard.lnk"), fInfoLevelId=0x0, lpFileInformation=0x220eee0 | out: lpFileInformation=0x220eee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8409f48, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa8409f48, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x92f7ace7, ftLastWriteTime.dwHighDateTime=0x1d0baff, nFileSizeHigh=0x0, nFileSizeLow=0x452)) returned 1 [0070.495] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0070.495] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility\\On-Screen Keyboard.lnk", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility\\On-Screen Keyboard.lnk", lpFilePart=0x0) returned 0x70 [0070.495] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0070.495] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility\\On-Screen Keyboard.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessibility\\on-screen keyboard.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0070.496] GetFileType (hFile=0x444) returned 0x1 [0070.496] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0070.496] GetFileType (hFile=0x444) returned 0x1 [0070.496] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be708 | out: lpFileSizeHigh=0x3be708*=0x0) returned 0x452 [0070.496] ReadFile (in: hFile=0x444, lpBuffer=0x220f6b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be638, lpOverlapped=0x0 | out: lpBuffer=0x220f6b0*, lpNumberOfBytesRead=0x3be638*=0x452, lpOverlapped=0x0) returned 1 [0070.498] CloseHandle (hObject=0x444) returned 1 [0070.515] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility\\On-Screen Keyboard.lnk", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility\\On-Screen Keyboard.lnk", lpFilePart=0x0) returned 0x70 [0070.515] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0070.515] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility\\On-Screen Keyboard.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessibility\\on-screen keyboard.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0070.518] GetFileType (hFile=0x444) returned 0x1 [0070.518] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0070.518] GetFileType (hFile=0x444) returned 0x1 [0070.518] WriteFile (in: hFile=0x444, lpBuffer=0x2287cd8*, nNumberOfBytesToWrite=0x460, lpNumberOfBytesWritten=0x3be548, lpOverlapped=0x0 | out: lpBuffer=0x2287cd8*, lpNumberOfBytesWritten=0x3be548*=0x460, lpOverlapped=0x0) returned 1 [0070.519] CloseHandle (hObject=0x444) returned 1 [0070.520] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility\\On-Screen Keyboard.lnk", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility\\On-Screen Keyboard.lnk", lpFilePart=0x0) returned 0x70 [0070.520] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility\\On-Screen Keyboard.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility\\On-Screen Keyboard.lnk.xuy", lpFilePart=0x0) returned 0x74 [0070.520] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0070.521] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility\\On-Screen Keyboard.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessibility\\on-screen keyboard.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8409f48, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa8409f48, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x15e17111, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x460)) returned 1 [0070.521] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0070.521] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility\\On-Screen Keyboard.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessibility\\on-screen keyboard.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility\\On-Screen Keyboard.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessibility\\on-screen keyboard.lnk.xuy")) returned 1 [0070.529] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0070.529] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories", lpFilePart=0x0) returned 0x57 [0070.529] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\", lpFilePart=0x0) returned 0x58 [0070.529] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d79d0 [0070.529] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0070.529] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0070.529] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0070.530] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0070.530] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0070.530] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0070.530] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0070.530] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0070.530] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0070.530] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories", lpFilePart=0x0) returned 0x57 [0070.530] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\", lpFilePart=0x0) returned 0x58 [0070.530] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d7610 [0070.530] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0070.531] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0070.531] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0070.531] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0070.531] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0070.531] FindClose (in: hFindFile=0x5d7610 | out: hFindFile=0x5d7610) returned 1 [0070.531] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0070.531] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0070.532] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Desktop.ini", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Desktop.ini", lpFilePart=0x0) returned 0x63 [0070.532] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0070.532] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x228bd18 | out: lpFileInformation=0x228bd18*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0xa83e3cfc, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa83e3cfc, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xad12ab21, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x1c0)) returned 1 [0070.532] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0070.532] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Desktop.ini", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Desktop.ini", lpFilePart=0x0) returned 0x63 [0070.532] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0070.532] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0070.532] GetFileType (hFile=0x444) returned 0x1 [0070.532] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0070.532] GetFileType (hFile=0x444) returned 0x1 [0070.532] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be708 | out: lpFileSizeHigh=0x3be708*=0x0) returned 0x1c0 [0070.532] ReadFile (in: hFile=0x444, lpBuffer=0x228c1e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be638, lpOverlapped=0x0 | out: lpBuffer=0x228c1e0*, lpNumberOfBytesRead=0x3be638*=0x1c0, lpOverlapped=0x0) returned 1 [0070.533] CloseHandle (hObject=0x444) returned 1 [0070.557] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Desktop.ini", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Desktop.ini", lpFilePart=0x0) returned 0x63 [0070.557] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0070.557] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\desktop.ini"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0070.559] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb000) returned 1 [0070.559] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Desktop.ini", nBufferLength=0x105, lpBuffer=0x3bbc80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Desktop.ini", lpFilePart=0x0) returned 0x63 [0070.559] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc120) returned 1 [0070.559] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x3bc200 | out: lpFileInformation=0x3bc200*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0xa83e3cfc, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa83e3cfc, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xad12ab21, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x1c0)) returned 1 [0070.559] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc0e0) returned 1 [0070.559] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Desktop.ini", nBufferLength=0x105, lpBuffer=0x3bbca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Desktop.ini", lpFilePart=0x0) returned 0x63 [0070.559] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc120) returned 1 [0070.559] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x23043a8 | out: lpFileInformation=0x23043a8*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0xa83e3cfc, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa83e3cfc, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xad12ab21, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x1c0)) returned 1 [0070.559] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc0e0) returned 1 [0070.560] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Desktop.ini", nBufferLength=0x105, lpBuffer=0x3bbb00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Desktop.ini", lpFilePart=0x0) returned 0x63 [0070.560] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbfe0) returned 1 [0070.560] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0070.560] GetFileType (hFile=0x444) returned 0x1 [0070.560] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbf50) returned 1 [0070.560] GetFileType (hFile=0x444) returned 0x1 [0070.560] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc178 | out: lpFileSizeHigh=0x3bc178*=0x0) returned 0x1c0 [0070.560] ReadFile (in: hFile=0x444, lpBuffer=0x2304870, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bc0a8, lpOverlapped=0x0 | out: lpBuffer=0x2304870*, lpNumberOfBytesRead=0x3bc0a8*=0x1c0, lpOverlapped=0x0) returned 1 [0070.560] CloseHandle (hObject=0x444) returned 1 [0070.613] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Desktop.ini", nBufferLength=0x105, lpBuffer=0x3bbb00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Desktop.ini", lpFilePart=0x0) returned 0x63 [0070.613] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbfe0) returned 1 [0070.613] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\desktop.ini"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0070.615] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8a70) returned 1 [0070.616] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Internet Explorer.lnk", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Internet Explorer.lnk", lpFilePart=0x0) returned 0x6d [0070.616] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0070.616] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Internet Explorer.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\internet explorer.lnk"), fInfoLevelId=0x0, lpFileInformation=0x217c6e8 | out: lpFileInformation=0x217c6e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad1048c5, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xad1048c5, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xad12ab21, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x52d)) returned 1 [0070.616] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0070.616] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Internet Explorer.lnk", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Internet Explorer.lnk", lpFilePart=0x0) returned 0x6d [0070.616] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0070.616] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Internet Explorer.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\internet explorer.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0070.616] GetFileType (hFile=0x444) returned 0x1 [0070.616] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0070.616] GetFileType (hFile=0x444) returned 0x1 [0070.616] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be708 | out: lpFileSizeHigh=0x3be708*=0x0) returned 0x52d [0070.616] ReadFile (in: hFile=0x444, lpBuffer=0x217cf80, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be638, lpOverlapped=0x0 | out: lpBuffer=0x217cf80*, lpNumberOfBytesRead=0x3be638*=0x52d, lpOverlapped=0x0) returned 1 [0070.633] CloseHandle (hObject=0x444) returned 1 [0070.712] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Internet Explorer.lnk", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Internet Explorer.lnk", lpFilePart=0x0) returned 0x6d [0070.712] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0070.712] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Internet Explorer.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\internet explorer.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0070.717] GetFileType (hFile=0x444) returned 0x1 [0070.717] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0070.717] GetFileType (hFile=0x444) returned 0x1 [0070.717] WriteFile (in: hFile=0x444, lpBuffer=0x21f59a8*, nNumberOfBytesToWrite=0x530, lpNumberOfBytesWritten=0x3be548, lpOverlapped=0x0 | out: lpBuffer=0x21f59a8*, lpNumberOfBytesWritten=0x3be548*=0x530, lpOverlapped=0x0) returned 1 [0070.718] CloseHandle (hObject=0x444) returned 1 [0070.720] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Internet Explorer.lnk", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Internet Explorer.lnk", lpFilePart=0x0) returned 0x6d [0070.720] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Internet Explorer.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Internet Explorer.lnk.xuy", lpFilePart=0x0) returned 0x71 [0070.720] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0070.720] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Internet Explorer.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\internet explorer.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad1048c5, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xad1048c5, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x16006ec2, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x530)) returned 1 [0070.721] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0070.721] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Internet Explorer.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\internet explorer.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Internet Explorer.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\internet explorer.lnk.xuy")) returned 1 [0070.726] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Notepad.lnk", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Notepad.lnk", lpFilePart=0x0) returned 0x63 [0070.726] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0070.726] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Notepad.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\notepad.lnk"), fInfoLevelId=0x0, lpFileInformation=0x21f6d00 | out: lpFileInformation=0x21f6d00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa83e3cfc, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa83e3cfc, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x99f1954b, ftLastWriteTime.dwHighDateTime=0x1d0baff, nFileSizeHigh=0x0, nFileSizeLow=0x486)) returned 1 [0070.726] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0070.726] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Notepad.lnk", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Notepad.lnk", lpFilePart=0x0) returned 0x63 [0070.726] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0070.726] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Notepad.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\notepad.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0070.727] GetFileType (hFile=0x444) returned 0x1 [0070.727] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0070.727] GetFileType (hFile=0x444) returned 0x1 [0070.727] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be708 | out: lpFileSizeHigh=0x3be708*=0x0) returned 0x486 [0070.727] ReadFile (in: hFile=0x444, lpBuffer=0x21f7490, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be638, lpOverlapped=0x0 | out: lpBuffer=0x21f7490*, lpNumberOfBytesRead=0x3be638*=0x486, lpOverlapped=0x0) returned 1 [0070.729] CloseHandle (hObject=0x444) returned 1 [0070.748] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Notepad.lnk", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Notepad.lnk", lpFilePart=0x0) returned 0x63 [0070.748] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0070.749] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Notepad.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\notepad.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0070.753] GetFileType (hFile=0x444) returned 0x1 [0070.753] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0070.753] GetFileType (hFile=0x444) returned 0x1 [0070.753] WriteFile (in: hFile=0x444, lpBuffer=0x226fb70*, nNumberOfBytesToWrite=0x490, lpNumberOfBytesWritten=0x3be548, lpOverlapped=0x0 | out: lpBuffer=0x226fb70*, lpNumberOfBytesWritten=0x3be548*=0x490, lpOverlapped=0x0) returned 1 [0070.754] CloseHandle (hObject=0x444) returned 1 [0070.757] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Notepad.lnk", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Notepad.lnk", lpFilePart=0x0) returned 0x63 [0070.757] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Notepad.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Notepad.lnk.xuy", lpFilePart=0x0) returned 0x67 [0070.758] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0070.758] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Notepad.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\notepad.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa83e3cfc, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa83e3cfc, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x160532c1, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x490)) returned 1 [0070.758] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0070.758] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Notepad.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\notepad.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Notepad.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\notepad.lnk.xuy")) returned 1 [0070.769] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0070.769] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools", lpFilePart=0x0) returned 0x60 [0070.769] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\", lpFilePart=0x0) returned 0x61 [0070.769] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d7550 [0070.770] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0070.770] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0070.770] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0070.770] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0070.770] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0070.770] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0070.770] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0070.770] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools", lpFilePart=0x0) returned 0x60 [0070.770] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\", lpFilePart=0x0) returned 0x61 [0070.771] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d75b0 [0070.771] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0070.771] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0070.771] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0070.771] FindClose (in: hFindFile=0x5d75b0 | out: hFindFile=0x5d75b0) returned 1 [0070.771] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0070.771] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0070.772] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\desktop.ini", lpFilePart=0x0) returned 0x6c [0070.772] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0070.772] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\administrative tools\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x2273360 | out: lpFileInformation=0x2273360*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0xae201536, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xae201536, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xae201536, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0xae)) returned 1 [0070.772] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0070.772] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\desktop.ini", lpFilePart=0x0) returned 0x6c [0070.772] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0070.772] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\administrative tools\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0070.772] GetFileType (hFile=0x444) returned 0x1 [0070.772] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0070.772] GetFileType (hFile=0x444) returned 0x1 [0070.772] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be708 | out: lpFileSizeHigh=0x3be708*=0x0) returned 0xae [0070.772] ReadFile (in: hFile=0x444, lpBuffer=0x2273748, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be638, lpOverlapped=0x0 | out: lpBuffer=0x2273748*, lpNumberOfBytesRead=0x3be638*=0xae, lpOverlapped=0x0) returned 1 [0070.773] CloseHandle (hObject=0x444) returned 1 [0070.792] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\desktop.ini", lpFilePart=0x0) returned 0x6c [0070.792] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0070.793] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\administrative tools\\desktop.ini"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0070.796] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb000) returned 1 [0070.797] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3bbc80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\desktop.ini", lpFilePart=0x0) returned 0x6c [0070.797] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc120) returned 1 [0070.797] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\administrative tools\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x3bc200 | out: lpFileInformation=0x3bc200*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0xae201536, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xae201536, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xae201536, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0xae)) returned 1 [0070.797] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc0e0) returned 1 [0070.797] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3bbca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\desktop.ini", lpFilePart=0x0) returned 0x6c [0070.797] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc120) returned 1 [0070.797] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\administrative tools\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x22eb2b8 | out: lpFileInformation=0x22eb2b8*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0xae201536, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xae201536, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xae201536, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0xae)) returned 1 [0070.797] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc0e0) returned 1 [0070.797] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3bbb00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\desktop.ini", lpFilePart=0x0) returned 0x6c [0070.797] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbfe0) returned 1 [0070.798] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\administrative tools\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0070.798] GetFileType (hFile=0x444) returned 0x1 [0070.798] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbf50) returned 1 [0070.798] GetFileType (hFile=0x444) returned 0x1 [0070.798] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc178 | out: lpFileSizeHigh=0x3bc178*=0x0) returned 0xae [0070.798] ReadFile (in: hFile=0x444, lpBuffer=0x22eb6a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bc0a8, lpOverlapped=0x0 | out: lpBuffer=0x22eb6a0*, lpNumberOfBytesRead=0x3bc0a8*=0xae, lpOverlapped=0x0) returned 1 [0070.798] CloseHandle (hObject=0x444) returned 1 [0070.857] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3bbb00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\desktop.ini", lpFilePart=0x0) returned 0x6c [0070.857] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbfe0) returned 1 [0070.857] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\administrative tools\\desktop.ini"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0070.859] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8a70) returned 1 [0070.860] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0070.860] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance", lpFilePart=0x0) returned 0x57 [0070.860] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\", lpFilePart=0x0) returned 0x58 [0070.860] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d79d0 [0070.860] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0070.861] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0070.861] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0070.861] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0070.861] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0070.861] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0070.861] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0070.861] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance", lpFilePart=0x0) returned 0x57 [0070.861] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\", lpFilePart=0x0) returned 0x58 [0070.861] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d7c70 [0070.861] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0070.862] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0070.862] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0070.862] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0070.862] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0070.862] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0070.862] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Desktop.ini", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Desktop.ini", lpFilePart=0x0) returned 0x63 [0070.862] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0070.862] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\maintenance\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x2165278 | out: lpFileInformation=0x2165278*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xa83e3cfc, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa83e3cfc, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xf0631a47, ftLastWriteTime.dwHighDateTime=0x1d0baff, nFileSizeHigh=0x0, nFileSizeLow=0xaa)) returned 1 [0070.862] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0070.862] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Desktop.ini", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Desktop.ini", lpFilePart=0x0) returned 0x63 [0070.863] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0070.863] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\maintenance\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0070.863] GetFileType (hFile=0x444) returned 0x1 [0070.863] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0070.863] GetFileType (hFile=0x444) returned 0x1 [0070.863] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be708 | out: lpFileSizeHigh=0x3be708*=0x0) returned 0xaa [0070.863] ReadFile (in: hFile=0x444, lpBuffer=0x2165630, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be638, lpOverlapped=0x0 | out: lpBuffer=0x2165630*, lpNumberOfBytesRead=0x3be638*=0xaa, lpOverlapped=0x0) returned 1 [0070.864] CloseHandle (hObject=0x444) returned 1 [0070.920] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Desktop.ini", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Desktop.ini", lpFilePart=0x0) returned 0x63 [0070.920] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0070.920] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\maintenance\\desktop.ini"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0070.922] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb000) returned 1 [0070.923] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Desktop.ini", nBufferLength=0x105, lpBuffer=0x3bbc80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Desktop.ini", lpFilePart=0x0) returned 0x63 [0070.923] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc120) returned 1 [0070.923] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\maintenance\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x3bc200 | out: lpFileInformation=0x3bc200*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xa83e3cfc, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa83e3cfc, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xf0631a47, ftLastWriteTime.dwHighDateTime=0x1d0baff, nFileSizeHigh=0x0, nFileSizeLow=0xaa)) returned 1 [0070.923] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc0e0) returned 1 [0070.923] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Desktop.ini", nBufferLength=0x105, lpBuffer=0x3bbca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Desktop.ini", lpFilePart=0x0) returned 0x63 [0070.923] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc120) returned 1 [0070.923] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\maintenance\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x21dd158 | out: lpFileInformation=0x21dd158*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xa83e3cfc, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa83e3cfc, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xf0631a47, ftLastWriteTime.dwHighDateTime=0x1d0baff, nFileSizeHigh=0x0, nFileSizeLow=0xaa)) returned 1 [0070.923] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc0e0) returned 1 [0070.923] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Desktop.ini", nBufferLength=0x105, lpBuffer=0x3bbb00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Desktop.ini", lpFilePart=0x0) returned 0x63 [0070.923] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbfe0) returned 1 [0070.923] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\maintenance\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0070.924] GetFileType (hFile=0x444) returned 0x1 [0070.924] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbf50) returned 1 [0070.924] GetFileType (hFile=0x444) returned 0x1 [0070.924] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc178 | out: lpFileSizeHigh=0x3bc178*=0x0) returned 0xaa [0070.924] ReadFile (in: hFile=0x444, lpBuffer=0x21dd510, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bc0a8, lpOverlapped=0x0 | out: lpBuffer=0x21dd510*, lpNumberOfBytesRead=0x3bc0a8*=0xaa, lpOverlapped=0x0) returned 1 [0070.924] CloseHandle (hObject=0x444) returned 1 [0070.979] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Desktop.ini", nBufferLength=0x105, lpBuffer=0x3bbb00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Desktop.ini", lpFilePart=0x0) returned 0x63 [0070.979] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbfe0) returned 1 [0070.979] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\maintenance\\desktop.ini"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0070.983] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8a70) returned 1 [0070.983] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0070.984] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup", lpFilePart=0x0) returned 0x53 [0070.984] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\", lpFilePart=0x0) returned 0x54 [0070.984] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d81b0 [0070.984] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0070.984] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0070.984] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0070.984] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0070.984] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0070.985] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0070.985] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0070.985] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0070.985] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup", lpFilePart=0x0) returned 0x53 [0070.985] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\", lpFilePart=0x0) returned 0x54 [0070.985] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d79d0 [0070.985] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0070.985] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0070.985] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0070.986] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0070.986] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0070.986] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0070.986] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0070.986] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\desktop.ini", lpFilePart=0x0) returned 0x5f [0070.986] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0070.986] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\startup\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x22576d0 | out: lpFileInformation=0x22576d0*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0xae201536, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xae201536, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xae201536, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0xae)) returned 1 [0070.986] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0070.986] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\desktop.ini", lpFilePart=0x0) returned 0x5f [0070.986] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0070.986] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\startup\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0070.987] GetFileType (hFile=0x444) returned 0x1 [0070.987] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0070.987] GetFileType (hFile=0x444) returned 0x1 [0070.987] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be708 | out: lpFileSizeHigh=0x3be708*=0x0) returned 0xae [0070.987] ReadFile (in: hFile=0x444, lpBuffer=0x2257a78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be638, lpOverlapped=0x0 | out: lpBuffer=0x2257a78*, lpNumberOfBytesRead=0x3be638*=0xae, lpOverlapped=0x0) returned 1 [0070.988] CloseHandle (hObject=0x444) returned 1 [0071.039] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\desktop.ini", lpFilePart=0x0) returned 0x5f [0071.039] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0071.039] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\startup\\desktop.ini"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0071.041] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb000) returned 1 [0071.042] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3bbc80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\desktop.ini", lpFilePart=0x0) returned 0x5f [0071.042] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc120) returned 1 [0071.042] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\startup\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x3bc200 | out: lpFileInformation=0x3bc200*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0xae201536, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xae201536, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xae201536, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0xae)) returned 1 [0071.042] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc0e0) returned 1 [0071.042] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3bbca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\desktop.ini", lpFilePart=0x0) returned 0x5f [0071.042] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc120) returned 1 [0071.042] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\startup\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x22cf588 | out: lpFileInformation=0x22cf588*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0xae201536, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xae201536, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xae201536, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0xae)) returned 1 [0071.043] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc0e0) returned 1 [0071.043] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3bbb00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\desktop.ini", lpFilePart=0x0) returned 0x5f [0071.043] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbfe0) returned 1 [0071.043] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\startup\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0071.044] GetFileType (hFile=0x444) returned 0x1 [0071.044] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbf50) returned 1 [0071.044] GetFileType (hFile=0x444) returned 0x1 [0071.044] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc178 | out: lpFileSizeHigh=0x3bc178*=0x0) returned 0xae [0071.044] ReadFile (in: hFile=0x444, lpBuffer=0x22cf930, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bc0a8, lpOverlapped=0x0 | out: lpBuffer=0x22cf930*, lpNumberOfBytesRead=0x3bc0a8*=0xae, lpOverlapped=0x0) returned 1 [0071.044] CloseHandle (hObject=0x444) returned 1 [0071.099] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3bbb00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\desktop.ini", lpFilePart=0x0) returned 0x5f [0071.099] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbfe0) returned 1 [0071.099] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\startup\\desktop.ini"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0071.101] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8a70) returned 1 [0071.102] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\Send to OneNote.lnk", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\Send to OneNote.lnk", lpFilePart=0x0) returned 0x67 [0071.102] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0071.102] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\Send to OneNote.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\startup\\send to onenote.lnk"), fInfoLevelId=0x0, lpFileInformation=0x2347390 | out: lpFileInformation=0x2347390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6becd30e, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6becd30e, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6bf65b3b, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x524)) returned 1 [0071.103] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0071.103] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\Send to OneNote.lnk", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\Send to OneNote.lnk", lpFilePart=0x0) returned 0x67 [0071.103] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0071.103] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\Send to OneNote.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\startup\\send to onenote.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0071.104] GetFileType (hFile=0x444) returned 0x1 [0071.104] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0071.104] GetFileType (hFile=0x444) returned 0x1 [0071.104] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be708 | out: lpFileSizeHigh=0x3be708*=0x0) returned 0x524 [0071.104] ReadFile (in: hFile=0x444, lpBuffer=0x2347bf0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be638, lpOverlapped=0x0 | out: lpBuffer=0x2347bf0*, lpNumberOfBytesRead=0x3be638*=0x524, lpOverlapped=0x0) returned 1 [0071.154] CloseHandle (hObject=0x444) returned 1 [0071.909] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\Send to OneNote.lnk", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\Send to OneNote.lnk", lpFilePart=0x0) returned 0x67 [0071.909] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0071.909] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\Send to OneNote.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\startup\\send to onenote.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0071.914] GetFileType (hFile=0x444) returned 0x1 [0071.914] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0071.914] GetFileType (hFile=0x444) returned 0x1 [0071.914] WriteFile (in: hFile=0x444, lpBuffer=0x21c0af8*, nNumberOfBytesToWrite=0x530, lpNumberOfBytesWritten=0x3be548, lpOverlapped=0x0 | out: lpBuffer=0x21c0af8*, lpNumberOfBytesWritten=0x3be548*=0x530, lpOverlapped=0x0) returned 1 [0071.915] CloseHandle (hObject=0x444) returned 1 [0071.916] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\Send to OneNote.lnk", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\Send to OneNote.lnk", lpFilePart=0x0) returned 0x67 [0071.916] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\Send to OneNote.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\Send to OneNote.lnk.xuy", lpFilePart=0x0) returned 0x6b [0071.916] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0071.916] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\Send to OneNote.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\startup\\send to onenote.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6becd30e, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6becd30e, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x16b5a13d, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x530)) returned 1 [0071.916] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0071.916] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\Send to OneNote.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\startup\\send to onenote.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\Send to OneNote.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\startup\\send to onenote.lnk.xuy")) returned 1 [0071.923] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0071.923] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools", lpFilePart=0x0) returned 0x58 [0071.924] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\", lpFilePart=0x0) returned 0x59 [0071.924] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d73d0 [0071.924] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0071.924] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0071.924] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0071.924] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0071.924] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0071.924] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0071.925] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0071.925] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0071.925] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0071.925] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0071.925] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0071.925] FindClose (in: hFindFile=0x5d73d0 | out: hFindFile=0x5d73d0) returned 1 [0071.925] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0071.925] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0071.925] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0071.925] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools", lpFilePart=0x0) returned 0x58 [0071.925] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\", lpFilePart=0x0) returned 0x59 [0071.925] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d7fd0 [0071.926] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0071.926] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0071.926] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0071.926] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0071.926] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0071.926] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0071.927] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0071.927] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0071.927] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0071.927] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0071.927] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0071.927] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0071.927] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0071.927] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0071.927] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Command Prompt.lnk", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Command Prompt.lnk", lpFilePart=0x0) returned 0x6b [0071.927] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0071.927] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Command Prompt.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\command prompt.lnk"), fInfoLevelId=0x0, lpFileInformation=0x21c6b20 | out: lpFileInformation=0x21c6b20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa83e3cfc, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa83e3cfc, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x8fdb4a22, ftLastWriteTime.dwHighDateTime=0x1d0baff, nFileSizeHigh=0x0, nFileSizeLow=0x476)) returned 1 [0071.928] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0071.928] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Command Prompt.lnk", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Command Prompt.lnk", lpFilePart=0x0) returned 0x6b [0071.928] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0071.928] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Command Prompt.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\command prompt.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0071.928] GetFileType (hFile=0x444) returned 0x1 [0071.928] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0071.928] GetFileType (hFile=0x444) returned 0x1 [0071.928] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be708 | out: lpFileSizeHigh=0x3be708*=0x0) returned 0x476 [0071.928] ReadFile (in: hFile=0x444, lpBuffer=0x21c72e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be638, lpOverlapped=0x0 | out: lpBuffer=0x21c72e0*, lpNumberOfBytesRead=0x3be638*=0x476, lpOverlapped=0x0) returned 1 [0071.943] CloseHandle (hObject=0x444) returned 1 [0071.982] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Command Prompt.lnk", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Command Prompt.lnk", lpFilePart=0x0) returned 0x6b [0071.982] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0071.982] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Command Prompt.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\command prompt.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0071.987] GetFileType (hFile=0x444) returned 0x1 [0071.987] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0071.987] GetFileType (hFile=0x444) returned 0x1 [0071.987] WriteFile (in: hFile=0x444, lpBuffer=0x223f990*, nNumberOfBytesToWrite=0x480, lpNumberOfBytesWritten=0x3be548, lpOverlapped=0x0 | out: lpBuffer=0x223f990*, lpNumberOfBytesWritten=0x3be548*=0x480, lpOverlapped=0x0) returned 1 [0071.988] CloseHandle (hObject=0x444) returned 1 [0071.990] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Command Prompt.lnk", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Command Prompt.lnk", lpFilePart=0x0) returned 0x6b [0071.990] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Command Prompt.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Command Prompt.lnk.xuy", lpFilePart=0x0) returned 0x6f [0071.990] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0071.990] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Command Prompt.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\command prompt.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa83e3cfc, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa83e3cfc, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x16c18d38, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x480)) returned 1 [0071.990] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0071.990] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Command Prompt.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\command prompt.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Command Prompt.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\command prompt.lnk.xuy")) returned 1 [0071.993] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\computer.lnk", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\computer.lnk", lpFilePart=0x0) returned 0x65 [0071.993] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0071.993] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\computer.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\computer.lnk"), fInfoLevelId=0x0, lpFileInformation=0x2240cd0 | out: lpFileInformation=0x2240cd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa83bda77, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa83bda77, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x9bf23a18, ftLastWriteTime.dwHighDateTime=0x1d0baff, nFileSizeHigh=0x0, nFileSizeLow=0x14f)) returned 1 [0071.993] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0071.993] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\computer.lnk", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\computer.lnk", lpFilePart=0x0) returned 0x65 [0071.993] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0071.993] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\computer.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\computer.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0071.994] GetFileType (hFile=0x444) returned 0x1 [0071.994] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0071.994] GetFileType (hFile=0x444) returned 0x1 [0071.994] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be708 | out: lpFileSizeHigh=0x3be708*=0x0) returned 0x14f [0071.994] ReadFile (in: hFile=0x444, lpBuffer=0x2241148, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be638, lpOverlapped=0x0 | out: lpBuffer=0x2241148*, lpNumberOfBytesRead=0x3be638*=0x14f, lpOverlapped=0x0) returned 1 [0071.995] CloseHandle (hObject=0x444) returned 1 [0072.005] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\computer.lnk", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\computer.lnk", lpFilePart=0x0) returned 0x65 [0072.005] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0072.005] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\computer.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\computer.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0072.008] GetFileType (hFile=0x444) returned 0x1 [0072.008] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0072.008] GetFileType (hFile=0x444) returned 0x1 [0072.008] WriteFile (in: hFile=0x444, lpBuffer=0x22b87f0*, nNumberOfBytesToWrite=0x150, lpNumberOfBytesWritten=0x3be548, lpOverlapped=0x0 | out: lpBuffer=0x22b87f0*, lpNumberOfBytesWritten=0x3be548*=0x150, lpOverlapped=0x0) returned 1 [0072.009] CloseHandle (hObject=0x444) returned 1 [0072.010] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\computer.lnk", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\computer.lnk", lpFilePart=0x0) returned 0x65 [0072.011] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\computer.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\computer.lnk.xuy", lpFilePart=0x0) returned 0x69 [0072.011] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0072.011] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\computer.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\computer.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa83bda77, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa83bda77, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x16c3f14f, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x150)) returned 1 [0072.011] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0072.011] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\computer.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\computer.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\computer.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\computer.lnk.xuy")) returned 1 [0072.016] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Control Panel.lnk", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Control Panel.lnk", lpFilePart=0x0) returned 0x6a [0072.016] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0072.017] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Control Panel.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\control panel.lnk"), fInfoLevelId=0x0, lpFileInformation=0x22b9b18 | out: lpFileInformation=0x22b9b18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa83bda77, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa83bda77, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x9bf23a18, ftLastWriteTime.dwHighDateTime=0x1d0baff, nFileSizeHigh=0x0, nFileSizeLow=0x195)) returned 1 [0072.017] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0072.017] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Control Panel.lnk", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Control Panel.lnk", lpFilePart=0x0) returned 0x6a [0072.017] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0072.017] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Control Panel.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\control panel.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0072.017] GetFileType (hFile=0x444) returned 0x1 [0072.017] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0072.017] GetFileType (hFile=0x444) returned 0x1 [0072.017] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be708 | out: lpFileSizeHigh=0x3be708*=0x0) returned 0x195 [0072.017] ReadFile (in: hFile=0x444, lpBuffer=0x22b9ff8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be638, lpOverlapped=0x0 | out: lpBuffer=0x22b9ff8*, lpNumberOfBytesRead=0x3be638*=0x195, lpOverlapped=0x0) returned 1 [0072.018] CloseHandle (hObject=0x444) returned 1 [0072.028] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Control Panel.lnk", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Control Panel.lnk", lpFilePart=0x0) returned 0x6a [0072.029] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0072.029] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Control Panel.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\control panel.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0072.031] GetFileType (hFile=0x444) returned 0x1 [0072.031] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0072.031] GetFileType (hFile=0x444) returned 0x1 [0072.031] WriteFile (in: hFile=0x444, lpBuffer=0x2331848*, nNumberOfBytesToWrite=0x1a0, lpNumberOfBytesWritten=0x3be548, lpOverlapped=0x0 | out: lpBuffer=0x2331848*, lpNumberOfBytesWritten=0x3be548*=0x1a0, lpOverlapped=0x0) returned 1 [0072.032] CloseHandle (hObject=0x444) returned 1 [0072.033] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Control Panel.lnk", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Control Panel.lnk", lpFilePart=0x0) returned 0x6a [0072.034] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Control Panel.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Control Panel.lnk.xuy", lpFilePart=0x0) returned 0x6e [0072.034] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0072.034] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Control Panel.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\control panel.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa83bda77, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa83bda77, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x16c8b3bf, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x1a0)) returned 1 [0072.034] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0072.034] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Control Panel.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\control panel.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Control Panel.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\control panel.lnk.xuy")) returned 1 [0072.038] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Default Apps.lnk", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Default Apps.lnk", lpFilePart=0x0) returned 0x69 [0072.038] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0072.038] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Default Apps.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\default apps.lnk"), fInfoLevelId=0x0, lpFileInformation=0x2332b88 | out: lpFileInformation=0x2332b88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa83bda77, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa83bda77, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x9bf23a18, ftLastWriteTime.dwHighDateTime=0x1d0baff, nFileSizeHigh=0x0, nFileSizeLow=0x32f)) returned 1 [0072.039] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0072.039] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Default Apps.lnk", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Default Apps.lnk", lpFilePart=0x0) returned 0x69 [0072.039] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0072.039] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Default Apps.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\default apps.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0072.039] GetFileType (hFile=0x444) returned 0x1 [0072.039] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0072.039] GetFileType (hFile=0x444) returned 0x1 [0072.039] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be708 | out: lpFileSizeHigh=0x3be708*=0x0) returned 0x32f [0072.039] ReadFile (in: hFile=0x444, lpBuffer=0x2333200, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be638, lpOverlapped=0x0 | out: lpBuffer=0x2333200*, lpNumberOfBytesRead=0x3be638*=0x32f, lpOverlapped=0x0) returned 1 [0072.282] CloseHandle (hObject=0x444) returned 1 [0072.322] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Default Apps.lnk", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Default Apps.lnk", lpFilePart=0x0) returned 0x69 [0072.322] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0072.322] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Default Apps.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\default apps.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0072.324] GetFileType (hFile=0x444) returned 0x1 [0072.324] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0072.324] GetFileType (hFile=0x444) returned 0x1 [0072.324] WriteFile (in: hFile=0x444, lpBuffer=0x21ab220*, nNumberOfBytesToWrite=0x330, lpNumberOfBytesWritten=0x3be548, lpOverlapped=0x0 | out: lpBuffer=0x21ab220*, lpNumberOfBytesWritten=0x3be548*=0x330, lpOverlapped=0x0) returned 1 [0072.326] CloseHandle (hObject=0x444) returned 1 [0072.328] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Default Apps.lnk", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Default Apps.lnk", lpFilePart=0x0) returned 0x69 [0072.328] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Default Apps.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Default Apps.lnk.xuy", lpFilePart=0x0) returned 0x6d [0072.328] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0072.328] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Default Apps.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\default apps.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa83bda77, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa83bda77, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x16f6009f, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x330)) returned 1 [0072.328] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0072.328] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Default Apps.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\default apps.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Default Apps.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\default apps.lnk.xuy")) returned 1 [0072.332] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Desktop.ini", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Desktop.ini", lpFilePart=0x0) returned 0x64 [0072.332] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0072.333] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x21ac560 | out: lpFileInformation=0x21ac560*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xa83bda77, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa83bda77, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xf58e708b, ftLastWriteTime.dwHighDateTime=0x1d0baff, nFileSizeHigh=0x0, nFileSizeLow=0x47a)) returned 1 [0072.333] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0072.333] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Desktop.ini", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Desktop.ini", lpFilePart=0x0) returned 0x64 [0072.333] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0072.333] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0072.333] GetFileType (hFile=0x444) returned 0x1 [0072.333] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0072.333] GetFileType (hFile=0x444) returned 0x1 [0072.333] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be708 | out: lpFileSizeHigh=0x3be708*=0x0) returned 0x47a [0072.333] ReadFile (in: hFile=0x444, lpBuffer=0x21accf8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be638, lpOverlapped=0x0 | out: lpBuffer=0x21accf8*, lpNumberOfBytesRead=0x3be638*=0x47a, lpOverlapped=0x0) returned 1 [0072.334] CloseHandle (hObject=0x444) returned 1 [0072.345] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Desktop.ini", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Desktop.ini", lpFilePart=0x0) returned 0x64 [0072.345] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0072.345] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\desktop.ini"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0072.347] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb000) returned 1 [0072.347] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Desktop.ini", nBufferLength=0x105, lpBuffer=0x3bbc80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Desktop.ini", lpFilePart=0x0) returned 0x64 [0072.347] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc120) returned 1 [0072.347] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x3bc200 | out: lpFileInformation=0x3bc200*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xa83bda77, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa83bda77, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xf58e708b, ftLastWriteTime.dwHighDateTime=0x1d0baff, nFileSizeHigh=0x0, nFileSizeLow=0x47a)) returned 1 [0072.348] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc0e0) returned 1 [0072.348] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Desktop.ini", nBufferLength=0x105, lpBuffer=0x3bbca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Desktop.ini", lpFilePart=0x0) returned 0x64 [0072.348] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc120) returned 1 [0072.348] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x2225c40 | out: lpFileInformation=0x2225c40*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xa83bda77, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa83bda77, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xf58e708b, ftLastWriteTime.dwHighDateTime=0x1d0baff, nFileSizeHigh=0x0, nFileSizeLow=0x47a)) returned 1 [0072.348] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc0e0) returned 1 [0072.348] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Desktop.ini", nBufferLength=0x105, lpBuffer=0x3bbb00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Desktop.ini", lpFilePart=0x0) returned 0x64 [0072.348] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbfe0) returned 1 [0072.348] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0072.348] GetFileType (hFile=0x444) returned 0x1 [0072.348] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbf50) returned 1 [0072.348] GetFileType (hFile=0x444) returned 0x1 [0072.348] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc178 | out: lpFileSizeHigh=0x3bc178*=0x0) returned 0x47a [0072.348] ReadFile (in: hFile=0x444, lpBuffer=0x22263d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bc0a8, lpOverlapped=0x0 | out: lpBuffer=0x22263d8*, lpNumberOfBytesRead=0x3bc0a8*=0x47a, lpOverlapped=0x0) returned 1 [0072.349] CloseHandle (hObject=0x444) returned 1 [0072.389] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Desktop.ini", nBufferLength=0x105, lpBuffer=0x3bbb00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Desktop.ini", lpFilePart=0x0) returned 0x64 [0072.389] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbfe0) returned 1 [0072.389] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\desktop.ini"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0072.391] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8a70) returned 1 [0072.392] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Devices.lnk", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Devices.lnk", lpFilePart=0x0) returned 0x64 [0072.392] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0072.392] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Devices.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\devices.lnk"), fInfoLevelId=0x0, lpFileInformation=0x229f260 | out: lpFileInformation=0x229f260*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8397844, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa8397844, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x9bf23a18, ftLastWriteTime.dwHighDateTime=0x1d0baff, nFileSizeHigh=0x0, nFileSizeLow=0x32d)) returned 1 [0072.393] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0072.393] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Devices.lnk", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Devices.lnk", lpFilePart=0x0) returned 0x64 [0072.393] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0072.393] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Devices.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\devices.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0072.393] GetFileType (hFile=0x444) returned 0x1 [0072.393] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0072.393] GetFileType (hFile=0x444) returned 0x1 [0072.393] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be708 | out: lpFileSizeHigh=0x3be708*=0x0) returned 0x32d [0072.393] ReadFile (in: hFile=0x444, lpBuffer=0x229f8a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be638, lpOverlapped=0x0 | out: lpBuffer=0x229f8a8*, lpNumberOfBytesRead=0x3be638*=0x32d, lpOverlapped=0x0) returned 1 [0072.432] CloseHandle (hObject=0x444) returned 1 [0072.475] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Devices.lnk", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Devices.lnk", lpFilePart=0x0) returned 0x64 [0072.475] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0072.475] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Devices.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\devices.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0072.479] GetFileType (hFile=0x444) returned 0x1 [0072.479] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0072.479] GetFileType (hFile=0x444) returned 0x1 [0072.479] WriteFile (in: hFile=0x444, lpBuffer=0x23178a8*, nNumberOfBytesToWrite=0x330, lpNumberOfBytesWritten=0x3be548, lpOverlapped=0x0 | out: lpBuffer=0x23178a8*, lpNumberOfBytesWritten=0x3be548*=0x330, lpOverlapped=0x0) returned 1 [0072.480] CloseHandle (hObject=0x444) returned 1 [0072.481] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Devices.lnk", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Devices.lnk", lpFilePart=0x0) returned 0x64 [0072.481] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Devices.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Devices.lnk.xuy", lpFilePart=0x0) returned 0x68 [0072.481] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0072.481] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Devices.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\devices.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8397844, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa8397844, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x170b7b31, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x330)) returned 1 [0072.481] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0072.481] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Devices.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\devices.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Devices.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\devices.lnk.xuy")) returned 1 [0072.486] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\File Explorer.lnk", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\File Explorer.lnk", lpFilePart=0x0) returned 0x6a [0072.486] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0072.486] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\File Explorer.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\file explorer.lnk"), fInfoLevelId=0x0, lpFileInformation=0x2318bd0 | out: lpFileInformation=0x2318bd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8397844, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa8397844, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x9bf49c7f, ftLastWriteTime.dwHighDateTime=0x1d0baff, nFileSizeHigh=0x0, nFileSizeLow=0x197)) returned 1 [0072.486] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0072.486] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\File Explorer.lnk", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\File Explorer.lnk", lpFilePart=0x0) returned 0x6a [0072.486] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0072.486] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\File Explorer.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\file explorer.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0072.487] GetFileType (hFile=0x444) returned 0x1 [0072.487] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0072.487] GetFileType (hFile=0x444) returned 0x1 [0072.487] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be708 | out: lpFileSizeHigh=0x3be708*=0x0) returned 0x197 [0072.487] ReadFile (in: hFile=0x444, lpBuffer=0x23190b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be638, lpOverlapped=0x0 | out: lpBuffer=0x23190b0*, lpNumberOfBytesRead=0x3be638*=0x197, lpOverlapped=0x0) returned 1 [0072.488] CloseHandle (hObject=0x444) returned 1 [0072.538] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\File Explorer.lnk", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\File Explorer.lnk", lpFilePart=0x0) returned 0x6a [0072.538] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0072.538] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\File Explorer.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\file explorer.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0072.549] GetFileType (hFile=0x444) returned 0x1 [0072.549] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0072.549] GetFileType (hFile=0x444) returned 0x1 [0072.549] WriteFile (in: hFile=0x444, lpBuffer=0x2190838*, nNumberOfBytesToWrite=0x1a0, lpNumberOfBytesWritten=0x3be548, lpOverlapped=0x0 | out: lpBuffer=0x2190838*, lpNumberOfBytesWritten=0x3be548*=0x1a0, lpOverlapped=0x0) returned 1 [0072.550] CloseHandle (hObject=0x444) returned 1 [0072.552] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\File Explorer.lnk", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\File Explorer.lnk", lpFilePart=0x0) returned 0x6a [0072.552] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\File Explorer.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\File Explorer.lnk.xuy", lpFilePart=0x0) returned 0x6e [0072.552] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0072.552] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\File Explorer.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\file explorer.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8397844, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa8397844, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x17182270, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x1a0)) returned 1 [0072.552] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0072.552] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\File Explorer.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\file explorer.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\File Explorer.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\file explorer.lnk.xuy")) returned 1 [0072.556] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Run.lnk", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Run.lnk", lpFilePart=0x0) returned 0x60 [0072.556] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0072.556] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Run.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\run.lnk"), fInfoLevelId=0x0, lpFileInformation=0x2191b78 | out: lpFileInformation=0x2191b78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa83715d8, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa83715d8, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x9bf49c7f, ftLastWriteTime.dwHighDateTime=0x1d0baff, nFileSizeHigh=0x0, nFileSizeLow=0x199)) returned 1 [0072.556] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0072.556] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Run.lnk", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Run.lnk", lpFilePart=0x0) returned 0x60 [0072.556] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0072.557] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Run.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\run.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0072.557] GetFileType (hFile=0x444) returned 0x1 [0072.557] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0072.557] GetFileType (hFile=0x444) returned 0x1 [0072.557] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be708 | out: lpFileSizeHigh=0x3be708*=0x0) returned 0x199 [0072.557] ReadFile (in: hFile=0x444, lpBuffer=0x2192010, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be638, lpOverlapped=0x0 | out: lpBuffer=0x2192010*, lpNumberOfBytesRead=0x3be638*=0x199, lpOverlapped=0x0) returned 1 [0072.558] CloseHandle (hObject=0x444) returned 1 [0072.569] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Run.lnk", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Run.lnk", lpFilePart=0x0) returned 0x60 [0072.569] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0072.569] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Run.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\run.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0072.571] GetFileType (hFile=0x444) returned 0x1 [0072.571] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0072.571] GetFileType (hFile=0x444) returned 0x1 [0072.571] WriteFile (in: hFile=0x444, lpBuffer=0x2209830*, nNumberOfBytesToWrite=0x1a0, lpNumberOfBytesWritten=0x3be548, lpOverlapped=0x0 | out: lpBuffer=0x2209830*, lpNumberOfBytesWritten=0x3be548*=0x1a0, lpOverlapped=0x0) returned 1 [0072.572] CloseHandle (hObject=0x444) returned 1 [0072.573] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Run.lnk", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Run.lnk", lpFilePart=0x0) returned 0x60 [0072.573] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Run.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Run.lnk.xuy", lpFilePart=0x0) returned 0x64 [0072.574] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0072.574] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Run.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\run.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa83715d8, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa83715d8, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x1719c31a, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x1a0)) returned 1 [0072.574] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0072.574] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Run.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\run.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Run.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\run.lnk.xuy")) returned 1 [0072.581] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Windows Defender.lnk", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Windows Defender.lnk", lpFilePart=0x0) returned 0x6d [0072.581] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0072.582] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Windows Defender.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\windows defender.lnk"), fInfoLevelId=0x0, lpFileInformation=0x220ab40 | out: lpFileInformation=0x220ab40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa83715d8, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa83715d8, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x8ab4b8d0, ftLastWriteTime.dwHighDateTime=0x1d0baff, nFileSizeHigh=0x0, nFileSizeLow=0x422)) returned 1 [0072.584] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0072.584] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Windows Defender.lnk", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Windows Defender.lnk", lpFilePart=0x0) returned 0x6d [0072.584] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0072.584] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Windows Defender.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\windows defender.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0072.584] GetFileType (hFile=0x444) returned 0x1 [0072.584] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0072.584] GetFileType (hFile=0x444) returned 0x1 [0072.584] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be708 | out: lpFileSizeHigh=0x3be708*=0x0) returned 0x422 [0072.584] ReadFile (in: hFile=0x444, lpBuffer=0x220b2d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be638, lpOverlapped=0x0 | out: lpBuffer=0x220b2d0*, lpNumberOfBytesRead=0x3be638*=0x422, lpOverlapped=0x0) returned 1 [0072.601] CloseHandle (hObject=0x444) returned 1 [0072.614] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Windows Defender.lnk", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Windows Defender.lnk", lpFilePart=0x0) returned 0x6d [0072.615] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0072.615] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Windows Defender.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\windows defender.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0072.617] GetFileType (hFile=0x444) returned 0x1 [0072.617] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0072.617] GetFileType (hFile=0x444) returned 0x1 [0072.617] WriteFile (in: hFile=0x444, lpBuffer=0x2283800*, nNumberOfBytesToWrite=0x430, lpNumberOfBytesWritten=0x3be548, lpOverlapped=0x0 | out: lpBuffer=0x2283800*, lpNumberOfBytesWritten=0x3be548*=0x430, lpOverlapped=0x0) returned 1 [0072.618] CloseHandle (hObject=0x444) returned 1 [0072.618] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Windows Defender.lnk", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Windows Defender.lnk", lpFilePart=0x0) returned 0x6d [0072.618] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Windows Defender.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Windows Defender.lnk.xuy", lpFilePart=0x0) returned 0x71 [0072.618] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0072.618] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Windows Defender.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\windows defender.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa83715d8, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa83715d8, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x1720ecf8, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x430)) returned 1 [0072.618] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0072.619] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Windows Defender.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\windows defender.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Windows Defender.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\windows defender.lnk.xuy")) returned 1 [0072.620] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0072.620] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell", lpFilePart=0x0) returned 0x5e [0072.620] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\", lpFilePart=0x0) returned 0x5f [0072.620] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d7550 [0072.620] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0072.621] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0072.621] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0072.621] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0072.625] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0072.625] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0072.625] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0072.625] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0072.625] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0072.625] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0072.626] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0072.626] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell", lpFilePart=0x0) returned 0x5e [0072.626] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\", lpFilePart=0x0) returned 0x5f [0072.626] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d81b0 [0072.626] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0072.626] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0072.627] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0072.627] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0072.627] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0072.627] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0072.627] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0072.628] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0072.628] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0072.628] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0072.628] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\desktop.ini", lpFilePart=0x0) returned 0x6a [0072.628] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0072.628] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\windows powershell\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x2288880 | out: lpFileInformation=0x2288880*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xa8397844, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa8397844, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xf58c0df1, ftLastWriteTime.dwHighDateTime=0x1d0baff, nFileSizeHigh=0x0, nFileSizeLow=0xda)) returned 1 [0072.628] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0072.628] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\desktop.ini", lpFilePart=0x0) returned 0x6a [0072.628] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0072.628] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\windows powershell\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0072.628] GetFileType (hFile=0x444) returned 0x1 [0072.629] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0072.629] GetFileType (hFile=0x444) returned 0x1 [0072.629] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be708 | out: lpFileSizeHigh=0x3be708*=0x0) returned 0xda [0072.629] ReadFile (in: hFile=0x444, lpBuffer=0x2288c88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be638, lpOverlapped=0x0 | out: lpBuffer=0x2288c88*, lpNumberOfBytesRead=0x3be638*=0xda, lpOverlapped=0x0) returned 1 [0072.629] CloseHandle (hObject=0x444) returned 1 [0072.642] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\desktop.ini", lpFilePart=0x0) returned 0x6a [0072.642] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0072.643] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\windows powershell\\desktop.ini"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0072.644] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb000) returned 1 [0072.645] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3bbc80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\desktop.ini", lpFilePart=0x0) returned 0x6a [0072.645] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc120) returned 1 [0072.645] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\windows powershell\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x3bc200 | out: lpFileInformation=0x3bc200*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xa8397844, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa8397844, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xf58c0df1, ftLastWriteTime.dwHighDateTime=0x1d0baff, nFileSizeHigh=0x0, nFileSizeLow=0xda)) returned 1 [0072.645] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc0e0) returned 1 [0072.645] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3bbca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\desktop.ini", lpFilePart=0x0) returned 0x6a [0072.645] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc120) returned 1 [0072.645] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\windows powershell\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x2300840 | out: lpFileInformation=0x2300840*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xa8397844, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa8397844, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xf58c0df1, ftLastWriteTime.dwHighDateTime=0x1d0baff, nFileSizeHigh=0x0, nFileSizeLow=0xda)) returned 1 [0072.645] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc0e0) returned 1 [0072.645] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3bbb00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\desktop.ini", lpFilePart=0x0) returned 0x6a [0072.645] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbfe0) returned 1 [0072.645] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\windows powershell\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0072.645] GetFileType (hFile=0x444) returned 0x1 [0072.645] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbf50) returned 1 [0072.645] GetFileType (hFile=0x444) returned 0x1 [0072.645] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc178 | out: lpFileSizeHigh=0x3bc178*=0x0) returned 0xda [0072.645] ReadFile (in: hFile=0x444, lpBuffer=0x2300c48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bc0a8, lpOverlapped=0x0 | out: lpBuffer=0x2300c48*, lpNumberOfBytesRead=0x3bc0a8*=0xda, lpOverlapped=0x0) returned 1 [0072.645] CloseHandle (hObject=0x444) returned 1 [0072.725] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3bbb00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\desktop.ini", lpFilePart=0x0) returned 0x6a [0072.725] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbfe0) returned 1 [0072.725] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\windows powershell\\desktop.ini"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0072.727] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8a70) returned 1 [0072.728] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\Windows PowerShell (x86).lnk", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\Windows PowerShell (x86).lnk", lpFilePart=0x0) returned 0x7b [0072.728] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0072.728] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\Windows PowerShell (x86).lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\windows powershell\\windows powershell (x86).lnk"), fInfoLevelId=0x0, lpFileInformation=0x21785b8 | out: lpFileInformation=0x21785b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8397844, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa8397844, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xf0657cae, ftLastWriteTime.dwHighDateTime=0x1d0baff, nFileSizeHigh=0x0, nFileSizeLow=0x8bc)) returned 1 [0072.728] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0072.729] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\Windows PowerShell (x86).lnk", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\Windows PowerShell (x86).lnk", lpFilePart=0x0) returned 0x7b [0072.729] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0072.729] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\Windows PowerShell (x86).lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\windows powershell\\windows powershell (x86).lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0072.729] GetFileType (hFile=0x444) returned 0x1 [0072.729] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0072.729] GetFileType (hFile=0x444) returned 0x1 [0072.729] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be708 | out: lpFileSizeHigh=0x3be708*=0x0) returned 0x8bc [0072.729] ReadFile (in: hFile=0x444, lpBuffer=0x2179230, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be638, lpOverlapped=0x0 | out: lpBuffer=0x2179230*, lpNumberOfBytesRead=0x3be638*=0x8bc, lpOverlapped=0x0) returned 1 [0072.733] CloseHandle (hObject=0x444) returned 1 [0072.785] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\Windows PowerShell (x86).lnk", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\Windows PowerShell (x86).lnk", lpFilePart=0x0) returned 0x7b [0072.785] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0072.785] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\Windows PowerShell (x86).lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\windows powershell\\windows powershell (x86).lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0072.789] GetFileType (hFile=0x444) returned 0x1 [0072.789] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0072.789] GetFileType (hFile=0x444) returned 0x1 [0072.789] WriteFile (in: hFile=0x444, lpBuffer=0x21f2e50*, nNumberOfBytesToWrite=0x8c0, lpNumberOfBytesWritten=0x3be548, lpOverlapped=0x0 | out: lpBuffer=0x21f2e50*, lpNumberOfBytesWritten=0x3be548*=0x8c0, lpOverlapped=0x0) returned 1 [0072.791] CloseHandle (hObject=0x444) returned 1 [0072.795] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\Windows PowerShell (x86).lnk", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\Windows PowerShell (x86).lnk", lpFilePart=0x0) returned 0x7b [0072.795] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\Windows PowerShell (x86).lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\Windows PowerShell (x86).lnk.xuy", lpFilePart=0x0) returned 0x7f [0072.795] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0072.795] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\Windows PowerShell (x86).lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\windows powershell\\windows powershell (x86).lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8397844, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa8397844, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x173b258a, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x8c0)) returned 1 [0072.795] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0072.795] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\Windows PowerShell (x86).lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\windows powershell\\windows powershell (x86).lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\Windows PowerShell (x86).lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\windows powershell\\windows powershell (x86).lnk.xuy")) returned 1 [0072.796] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\Windows PowerShell ISE (x86).lnk", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\Windows PowerShell ISE (x86).lnk", lpFilePart=0x0) returned 0x7f [0072.796] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0072.796] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\Windows PowerShell ISE (x86).lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\windows powershell\\windows powershell ise (x86).lnk"), fInfoLevelId=0x0, lpFileInformation=0x21f41f0 | out: lpFileInformation=0x21f41f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8397844, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa8397844, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xba541b0d, ftLastWriteTime.dwHighDateTime=0x1d0baff, nFileSizeHigh=0x0, nFileSizeLow=0x4fa)) returned 1 [0072.797] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0072.797] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\Windows PowerShell ISE (x86).lnk", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\Windows PowerShell ISE (x86).lnk", lpFilePart=0x0) returned 0x7f [0072.797] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0072.797] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\Windows PowerShell ISE (x86).lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\windows powershell\\windows powershell ise (x86).lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0072.797] GetFileType (hFile=0x444) returned 0x1 [0072.797] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0072.797] GetFileType (hFile=0x444) returned 0x1 [0072.797] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be708 | out: lpFileSizeHigh=0x3be708*=0x0) returned 0x4fa [0072.797] ReadFile (in: hFile=0x444, lpBuffer=0x21f4ac8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be638, lpOverlapped=0x0 | out: lpBuffer=0x21f4ac8*, lpNumberOfBytesRead=0x3be638*=0x4fa, lpOverlapped=0x0) returned 1 [0072.799] CloseHandle (hObject=0x444) returned 1 [0072.817] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\Windows PowerShell ISE (x86).lnk", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\Windows PowerShell ISE (x86).lnk", lpFilePart=0x0) returned 0x7f [0072.817] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0072.817] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\Windows PowerShell ISE (x86).lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\windows powershell\\windows powershell ise (x86).lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0072.819] GetFileType (hFile=0x444) returned 0x1 [0072.819] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0072.819] GetFileType (hFile=0x444) returned 0x1 [0072.819] WriteFile (in: hFile=0x444, lpBuffer=0x226d438*, nNumberOfBytesToWrite=0x500, lpNumberOfBytesWritten=0x3be548, lpOverlapped=0x0 | out: lpBuffer=0x226d438*, lpNumberOfBytesWritten=0x3be548*=0x500, lpOverlapped=0x0) returned 1 [0072.820] CloseHandle (hObject=0x444) returned 1 [0072.820] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\Windows PowerShell ISE (x86).lnk", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\Windows PowerShell ISE (x86).lnk", lpFilePart=0x0) returned 0x7f [0072.821] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\Windows PowerShell ISE (x86).lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\Windows PowerShell ISE (x86).lnk.xuy", lpFilePart=0x0) returned 0x83 [0072.821] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0072.821] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\Windows PowerShell ISE (x86).lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\windows powershell\\windows powershell ise (x86).lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8397844, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa8397844, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x173ff057, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x500)) returned 1 [0072.821] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0072.821] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\Windows PowerShell ISE (x86).lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\windows powershell\\windows powershell ise (x86).lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\Windows PowerShell ISE (x86).lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\windows powershell\\windows powershell ise (x86).lnk.xuy")) returned 1 [0072.822] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\Windows PowerShell ISE.lnk", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\Windows PowerShell ISE.lnk", lpFilePart=0x0) returned 0x79 [0072.822] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0072.822] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\Windows PowerShell ISE.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\windows powershell\\windows powershell ise.lnk"), fInfoLevelId=0x0, lpFileInformation=0x226e7f0 | out: lpFileInformation=0x226e7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa83715d8, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa83715d8, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xba541b0d, ftLastWriteTime.dwHighDateTime=0x1d0baff, nFileSizeHigh=0x0, nFileSizeLow=0x4fa)) returned 1 [0072.822] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0072.822] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\Windows PowerShell ISE.lnk", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\Windows PowerShell ISE.lnk", lpFilePart=0x0) returned 0x79 [0072.822] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0072.823] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\Windows PowerShell ISE.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\windows powershell\\windows powershell ise.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0072.823] GetFileType (hFile=0x444) returned 0x1 [0072.823] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0072.823] GetFileType (hFile=0x444) returned 0x1 [0072.823] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be708 | out: lpFileSizeHigh=0x3be708*=0x0) returned 0x4fa [0072.823] ReadFile (in: hFile=0x444, lpBuffer=0x226f098, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be638, lpOverlapped=0x0 | out: lpBuffer=0x226f098*, lpNumberOfBytesRead=0x3be638*=0x4fa, lpOverlapped=0x0) returned 1 [0072.827] CloseHandle (hObject=0x444) returned 1 [0072.844] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\Windows PowerShell ISE.lnk", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\Windows PowerShell ISE.lnk", lpFilePart=0x0) returned 0x79 [0072.844] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0072.844] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\Windows PowerShell ISE.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\windows powershell\\windows powershell ise.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0072.848] GetFileType (hFile=0x444) returned 0x1 [0072.848] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0072.848] GetFileType (hFile=0x444) returned 0x1 [0072.849] WriteFile (in: hFile=0x444, lpBuffer=0x22e79f0*, nNumberOfBytesToWrite=0x500, lpNumberOfBytesWritten=0x3be548, lpOverlapped=0x0 | out: lpBuffer=0x22e79f0*, lpNumberOfBytesWritten=0x3be548*=0x500, lpOverlapped=0x0) returned 1 [0072.850] CloseHandle (hObject=0x444) returned 1 [0072.853] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\Windows PowerShell ISE.lnk", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\Windows PowerShell ISE.lnk", lpFilePart=0x0) returned 0x79 [0072.853] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\Windows PowerShell ISE.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\Windows PowerShell ISE.lnk.xuy", lpFilePart=0x0) returned 0x7d [0072.853] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0072.853] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\Windows PowerShell ISE.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\windows powershell\\windows powershell ise.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa83715d8, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa83715d8, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x1744ae7d, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x500)) returned 1 [0072.854] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0072.854] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\Windows PowerShell ISE.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\windows powershell\\windows powershell ise.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\Windows PowerShell ISE.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\windows powershell\\windows powershell ise.lnk.xuy")) returned 1 [0072.859] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\Windows PowerShell.lnk", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\Windows PowerShell.lnk", lpFilePart=0x0) returned 0x75 [0072.859] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0072.859] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\Windows PowerShell.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\windows powershell\\windows powershell.lnk"), fInfoLevelId=0x0, lpFileInformation=0x22e8d90 | out: lpFileInformation=0x22e8d90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa83715d8, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa83715d8, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xf0657cae, ftLastWriteTime.dwHighDateTime=0x1d0baff, nFileSizeHigh=0x0, nFileSizeLow=0x8bc)) returned 1 [0072.859] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0072.859] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\Windows PowerShell.lnk", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\Windows PowerShell.lnk", lpFilePart=0x0) returned 0x75 [0072.859] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0072.859] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\Windows PowerShell.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\windows powershell\\windows powershell.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0072.860] GetFileType (hFile=0x444) returned 0x1 [0072.860] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0072.860] GetFileType (hFile=0x444) returned 0x1 [0072.860] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be708 | out: lpFileSizeHigh=0x3be708*=0x0) returned 0x8bc [0072.860] ReadFile (in: hFile=0x444, lpBuffer=0x22e99d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be638, lpOverlapped=0x0 | out: lpBuffer=0x22e99d8*, lpNumberOfBytesRead=0x3be638*=0x8bc, lpOverlapped=0x0) returned 1 [0072.871] CloseHandle (hObject=0x444) returned 1 [0073.101] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\Windows PowerShell.lnk", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\Windows PowerShell.lnk", lpFilePart=0x0) returned 0x75 [0073.101] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0073.101] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\Windows PowerShell.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\windows powershell\\windows powershell.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0073.103] GetFileType (hFile=0x444) returned 0x1 [0073.104] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0073.104] GetFileType (hFile=0x444) returned 0x1 [0073.104] WriteFile (in: hFile=0x444, lpBuffer=0x2163a98*, nNumberOfBytesToWrite=0x8c0, lpNumberOfBytesWritten=0x3be548, lpOverlapped=0x0 | out: lpBuffer=0x2163a98*, lpNumberOfBytesWritten=0x3be548*=0x8c0, lpOverlapped=0x0) returned 1 [0073.106] CloseHandle (hObject=0x444) returned 1 [0073.106] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\Windows PowerShell.lnk", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\Windows PowerShell.lnk", lpFilePart=0x0) returned 0x75 [0073.106] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\Windows PowerShell.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\Windows PowerShell.lnk.xuy", lpFilePart=0x0) returned 0x79 [0073.106] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0073.107] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\Windows PowerShell.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\windows powershell\\windows powershell.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa83715d8, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa83715d8, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x176d354d, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x8c0)) returned 1 [0073.107] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0073.107] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\Windows PowerShell.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\windows powershell\\windows powershell.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\Windows PowerShell.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\windows powershell\\windows powershell.lnk.xuy")) returned 1 [0073.108] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0073.108] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Templates", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Templates", lpFilePart=0x0) returned 0x41 [0073.108] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Templates\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Templates\\", lpFilePart=0x0) returned 0x42 [0073.108] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Templates\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7fd0 [0073.109] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0073.109] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0073.109] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0073.109] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0073.109] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0073.109] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0073.109] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Templates", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Templates", lpFilePart=0x0) returned 0x41 [0073.109] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Templates\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Templates\\", lpFilePart=0x0) returned 0x42 [0073.109] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Templates\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7c70 [0073.109] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0073.110] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0073.110] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0073.110] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0073.110] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0073.110] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0073.110] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Themes", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Themes", lpFilePart=0x0) returned 0x3e [0073.110] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Themes\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Themes\\", lpFilePart=0x0) returned 0x3f [0073.110] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Themes\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7c70 [0073.110] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0073.111] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0073.111] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0073.111] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0073.111] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0073.111] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0073.111] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0073.111] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0073.111] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Themes", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Themes", lpFilePart=0x0) returned 0x3e [0073.111] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Themes\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Themes\\", lpFilePart=0x0) returned 0x3f [0073.112] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Themes\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d79d0 [0073.112] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0073.112] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0073.112] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0073.112] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0073.112] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0073.112] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0073.112] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0073.113] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Themes\\TranscodedWallpaper", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Themes\\TranscodedWallpaper", lpFilePart=0x0) returned 0x52 [0073.113] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0073.113] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Themes\\TranscodedWallpaper" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\themes\\transcodedwallpaper"), fInfoLevelId=0x0, lpFileInformation=0x21689c8 | out: lpFileInformation=0x21689c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3e609f2, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xc3e609f2, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xc5828172, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x1200e)) returned 1 [0073.113] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0073.113] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Themes\\TranscodedWallpaper", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Themes\\TranscodedWallpaper", lpFilePart=0x0) returned 0x52 [0073.113] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0073.113] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Themes\\TranscodedWallpaper" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\themes\\transcodedwallpaper"), fInfoLevelId=0x0, lpFileInformation=0x2168b30 | out: lpFileInformation=0x2168b30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3e609f2, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xc3e609f2, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xc5828172, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x1200e)) returned 1 [0073.113] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0073.113] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Themes\\TranscodedWallpaper", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Themes\\TranscodedWallpaper", lpFilePart=0x0) returned 0x52 [0073.113] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0073.113] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Themes\\TranscodedWallpaper" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\themes\\transcodedwallpaper"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0073.114] GetFileType (hFile=0x444) returned 0x1 [0073.114] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0073.114] GetFileType (hFile=0x444) returned 0x1 [0073.114] ReadFile (in: hFile=0x444, lpBuffer=0x216af30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x216af30*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0073.195] CloseHandle (hObject=0x444) returned 1 [0073.196] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Themes\\TranscodedWallpaper", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Themes\\TranscodedWallpaper", lpFilePart=0x0) returned 0x52 [0073.196] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0073.196] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Themes\\TranscodedWallpaper" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\themes\\transcodedwallpaper"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0073.196] GetFileType (hFile=0x444) returned 0x1 [0073.196] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0073.196] GetFileType (hFile=0x444) returned 0x1 [0073.196] WriteFile (in: hFile=0x444, lpBuffer=0x2168c78*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x2168c78*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0073.197] CloseHandle (hObject=0x444) returned 1 [0073.197] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Themes\\TranscodedWallpaper", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Themes\\TranscodedWallpaper", lpFilePart=0x0) returned 0x52 [0073.197] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Themes\\TranscodedWallpaper.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Themes\\TranscodedWallpaper.xuy", lpFilePart=0x0) returned 0x56 [0073.197] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0073.197] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Themes\\TranscodedWallpaper" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\themes\\transcodedwallpaper"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3e609f2, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xc3e609f2, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x1778d1f6, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x1200e)) returned 1 [0073.198] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0073.198] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Themes\\TranscodedWallpaper" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\themes\\transcodedwallpaper"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Themes\\TranscodedWallpaper.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\themes\\transcodedwallpaper.xuy")) returned 1 [0073.199] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0073.199] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Themes\\CachedFiles", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Themes\\CachedFiles", lpFilePart=0x0) returned 0x4a [0073.199] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Themes\\CachedFiles\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Themes\\CachedFiles\\", lpFilePart=0x0) returned 0x4b [0073.199] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Themes\\CachedFiles\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d73d0 [0073.199] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0073.199] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0073.199] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0073.200] FindClose (in: hFindFile=0x5d73d0 | out: hFindFile=0x5d73d0) returned 1 [0073.200] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0073.200] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0073.200] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0073.200] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Themes\\CachedFiles", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Themes\\CachedFiles", lpFilePart=0x0) returned 0x4a [0073.200] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Themes\\CachedFiles\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Themes\\CachedFiles\\", lpFilePart=0x0) returned 0x4b [0073.200] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Themes\\CachedFiles\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d78b0 [0073.200] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0073.200] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0073.201] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0073.201] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0073.201] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0073.201] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0073.201] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Themes\\CachedFiles\\CachedImage_1440_900_POS4.jpg", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Themes\\CachedFiles\\CachedImage_1440_900_POS4.jpg", lpFilePart=0x0) returned 0x68 [0073.201] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0073.201] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Themes\\CachedFiles\\CachedImage_1440_900_POS4.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\themes\\cachedfiles\\cachedimage_1440_900_pos4.jpg"), fInfoLevelId=0x0, lpFileInformation=0x21e94c0 | out: lpFileInformation=0x21e94c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc584e3de, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xc584e3de, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xc589a8d1, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x1268b)) returned 1 [0073.201] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0073.201] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Themes\\CachedFiles\\CachedImage_1440_900_POS4.jpg", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Themes\\CachedFiles\\CachedImage_1440_900_POS4.jpg", lpFilePart=0x0) returned 0x68 [0073.201] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0073.201] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Themes\\CachedFiles\\CachedImage_1440_900_POS4.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\themes\\cachedfiles\\cachedimage_1440_900_pos4.jpg"), fInfoLevelId=0x0, lpFileInformation=0x21e9670 | out: lpFileInformation=0x21e9670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc584e3de, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xc584e3de, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xc589a8d1, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x1268b)) returned 1 [0073.201] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0073.202] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Themes\\CachedFiles\\CachedImage_1440_900_POS4.jpg", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Themes\\CachedFiles\\CachedImage_1440_900_POS4.jpg", lpFilePart=0x0) returned 0x68 [0073.202] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0073.202] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Themes\\CachedFiles\\CachedImage_1440_900_POS4.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\themes\\cachedfiles\\cachedimage_1440_900_pos4.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0073.202] GetFileType (hFile=0x444) returned 0x1 [0073.202] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0073.202] GetFileType (hFile=0x444) returned 0x1 [0073.202] ReadFile (in: hFile=0x444, lpBuffer=0x21ebb00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x21ebb00*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0073.343] CloseHandle (hObject=0x444) returned 1 [0073.343] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Themes\\CachedFiles\\CachedImage_1440_900_POS4.jpg", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Themes\\CachedFiles\\CachedImage_1440_900_POS4.jpg", lpFilePart=0x0) returned 0x68 [0073.344] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0073.344] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Themes\\CachedFiles\\CachedImage_1440_900_POS4.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\themes\\cachedfiles\\cachedimage_1440_900_pos4.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0073.344] GetFileType (hFile=0x444) returned 0x1 [0073.344] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0073.344] GetFileType (hFile=0x444) returned 0x1 [0073.344] WriteFile (in: hFile=0x444, lpBuffer=0x21e9800*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x21e9800*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0073.345] CloseHandle (hObject=0x444) returned 1 [0073.345] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Themes\\CachedFiles\\CachedImage_1440_900_POS4.jpg", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Themes\\CachedFiles\\CachedImage_1440_900_POS4.jpg", lpFilePart=0x0) returned 0x68 [0073.345] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Themes\\CachedFiles\\CachedImage_1440_900_POS4.jpg.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Themes\\CachedFiles\\CachedImage_1440_900_POS4.jpg.xuy", lpFilePart=0x0) returned 0x6c [0073.345] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0073.345] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Themes\\CachedFiles\\CachedImage_1440_900_POS4.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\themes\\cachedfiles\\cachedimage_1440_900_pos4.jpg"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc584e3de, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xc584e3de, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x1790ab69, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x1268b)) returned 1 [0073.345] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0073.345] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Themes\\CachedFiles\\CachedImage_1440_900_POS4.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\themes\\cachedfiles\\cachedimage_1440_900_pos4.jpg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Themes\\CachedFiles\\CachedImage_1440_900_POS4.jpg.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\themes\\cachedfiles\\cachedimage_1440_900_pos4.jpg.xuy")) returned 1 [0073.346] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0073.346] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Word", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Word", lpFilePart=0x0) returned 0x34 [0073.346] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Word\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Word\\", lpFilePart=0x0) returned 0x35 [0073.346] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Word\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d7a30 [0073.347] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0073.347] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0073.347] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0073.347] FindClose (in: hFindFile=0x5d7a30 | out: hFindFile=0x5d7a30) returned 1 [0073.347] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0073.347] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0073.347] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0073.347] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Word", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Word", lpFilePart=0x0) returned 0x34 [0073.347] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Word\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Word\\", lpFilePart=0x0) returned 0x35 [0073.347] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Word\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d7df0 [0073.348] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0073.348] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0073.348] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0073.348] FindClose (in: hFindFile=0x5d7df0 | out: hFindFile=0x5d7df0) returned 1 [0073.348] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0073.348] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0073.348] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0073.348] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Word\\STARTUP", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Word\\STARTUP", lpFilePart=0x0) returned 0x3c [0073.348] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Word\\STARTUP\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Word\\STARTUP\\", lpFilePart=0x0) returned 0x3d [0073.349] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Word\\STARTUP\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7670 [0073.349] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0073.349] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0073.349] FindClose (in: hFindFile=0x5d7670 | out: hFindFile=0x5d7670) returned 1 [0073.349] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0073.349] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0073.349] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0073.349] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Word\\STARTUP", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Word\\STARTUP", lpFilePart=0x0) returned 0x3c [0073.349] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Word\\STARTUP\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Word\\STARTUP\\", lpFilePart=0x0) returned 0x3d [0073.349] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Word\\STARTUP\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d79d0 [0073.350] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0073.350] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0073.350] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0073.350] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0073.350] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0073.350] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0073.350] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla", nBufferLength=0x105, lpBuffer=0x3be3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla", lpFilePart=0x0) returned 0x2d [0073.350] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\", nBufferLength=0x105, lpBuffer=0x3be370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\", lpFilePart=0x0) returned 0x2e [0073.351] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\*", lpFindFileData=0x3be580 | out: lpFindFileData=0x3be580) returned 0x5d78b0 [0073.351] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0073.351] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0073.351] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0073.351] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 0 [0073.351] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0073.352] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0073.352] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7f0) returned 1 [0073.352] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0073.352] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla", nBufferLength=0x105, lpBuffer=0x3be3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla", lpFilePart=0x0) returned 0x2d [0073.352] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\", nBufferLength=0x105, lpBuffer=0x3be370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\", lpFilePart=0x0) returned 0x2e [0073.352] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\*", lpFindFileData=0x3be580 | out: lpFindFileData=0x3be580) returned 0x5d7370 [0073.352] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0073.352] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0073.352] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0073.353] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 0 [0073.353] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0073.353] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0073.353] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7f0) returned 1 [0073.353] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0073.353] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Extensions", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Extensions", lpFilePart=0x0) returned 0x38 [0073.353] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Extensions\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Extensions\\", lpFilePart=0x0) returned 0x39 [0073.353] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Extensions\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d79d0 [0073.354] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0073.354] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0073.354] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0073.354] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0073.354] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0073.354] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0073.354] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Extensions", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Extensions", lpFilePart=0x0) returned 0x38 [0073.354] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Extensions\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Extensions\\", lpFilePart=0x0) returned 0x39 [0073.355] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Extensions\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d7a30 [0073.355] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0073.355] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0073.355] FindClose (in: hFindFile=0x5d7a30 | out: hFindFile=0x5d7a30) returned 1 [0073.355] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0073.355] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0073.355] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0073.355] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox", lpFilePart=0x0) returned 0x35 [0073.355] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\", lpFilePart=0x0) returned 0x36 [0073.355] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d81b0 [0073.356] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0073.356] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0073.356] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0073.356] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0073.356] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0073.356] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0073.357] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0073.357] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0073.357] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0073.357] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox", lpFilePart=0x0) returned 0x35 [0073.357] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\", lpFilePart=0x0) returned 0x36 [0073.357] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d7cd0 [0073.357] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0073.357] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0073.357] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0073.358] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0073.358] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0073.358] FindClose (in: hFindFile=0x5d7cd0 | out: hFindFile=0x5d7cd0) returned 1 [0073.358] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0073.358] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0073.358] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\profiles.ini", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\profiles.ini", lpFilePart=0x0) returned 0x42 [0073.358] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0073.358] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\profiles.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles.ini"), fInfoLevelId=0x0, lpFileInformation=0x2270900 | out: lpFileInformation=0x2270900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24f48bbb, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x24f48bbb, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x24f48bbb, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x7a)) returned 1 [0073.417] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0073.417] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\profiles.ini", nBufferLength=0x105, lpBuffer=0x3be1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\profiles.ini", lpFilePart=0x0) returned 0x42 [0073.417] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6c0) returned 1 [0073.417] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\profiles.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0073.417] GetFileType (hFile=0x444) returned 0x1 [0073.417] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0073.417] GetFileType (hFile=0x444) returned 0x1 [0073.418] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be858 | out: lpFileSizeHigh=0x3be858*=0x0) returned 0x7a [0073.418] ReadFile (in: hFile=0x444, lpBuffer=0x2270c18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be788, lpOverlapped=0x0 | out: lpBuffer=0x2270c18*, lpNumberOfBytesRead=0x3be788*=0x7a, lpOverlapped=0x0) returned 1 [0073.419] CloseHandle (hObject=0x444) returned 1 [0073.495] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\profiles.ini", nBufferLength=0x105, lpBuffer=0x3be1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\profiles.ini", lpFilePart=0x0) returned 0x42 [0073.495] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6c0) returned 1 [0073.495] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\profiles.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles.ini"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0073.497] GetFileType (hFile=0x444) returned 0x1 [0073.497] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0073.497] GetFileType (hFile=0x444) returned 0x1 [0073.497] WriteFile (in: hFile=0x444, lpBuffer=0x22e7e00*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x3be698, lpOverlapped=0x0 | out: lpBuffer=0x22e7e00*, lpNumberOfBytesWritten=0x3be698*=0x80, lpOverlapped=0x0) returned 1 [0073.498] CloseHandle (hObject=0x444) returned 1 [0073.498] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\profiles.ini", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\profiles.ini", lpFilePart=0x0) returned 0x42 [0073.498] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\profiles.ini.xuy", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\profiles.ini.xuy", lpFilePart=0x0) returned 0x46 [0073.498] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0073.498] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\profiles.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles.ini"), fInfoLevelId=0x0, lpFileInformation=0x3be8a0 | out: lpFileInformation=0x3be8a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24f48bbb, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x24f48bbb, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x17a881f0, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x80)) returned 1 [0073.498] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0073.498] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\profiles.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles.ini"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\profiles.ini.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles.ini.xuy")) returned 1 [0073.499] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0073.499] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports", lpFilePart=0x0) returned 0x43 [0073.499] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\", lpFilePart=0x0) returned 0x44 [0073.499] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d79d0 [0073.500] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0073.500] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0073.500] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0073.500] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0073.500] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0073.500] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0073.500] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0073.500] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0073.500] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports", lpFilePart=0x0) returned 0x43 [0073.500] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\", lpFilePart=0x0) returned 0x44 [0073.500] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d73d0 [0073.501] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0073.501] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0073.501] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0073.501] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0073.501] FindClose (in: hFindFile=0x5d73d0 | out: hFindFile=0x5d73d0) returned 1 [0073.501] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0073.501] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0073.501] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\InstallTime20170518000419", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\InstallTime20170518000419", lpFilePart=0x0) returned 0x5d [0073.501] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0073.501] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\InstallTime20170518000419" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\crash reports\\installtime20170518000419"), fInfoLevelId=0x0, lpFileInformation=0x22eb398 | out: lpFileInformation=0x22eb398*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24f22a36, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x24f22a36, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x24f22a36, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0xa)) returned 1 [0073.543] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0073.543] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\InstallTime20170518000419", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\InstallTime20170518000419", lpFilePart=0x0) returned 0x5d [0073.543] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0073.543] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\InstallTime20170518000419" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\crash reports\\installtime20170518000419"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0073.544] GetFileType (hFile=0x444) returned 0x1 [0073.544] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0073.544] GetFileType (hFile=0x444) returned 0x1 [0073.544] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0xa [0073.544] ReadFile (in: hFile=0x444, lpBuffer=0x22eb6e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be718, lpOverlapped=0x0 | out: lpBuffer=0x22eb6e0*, lpNumberOfBytesRead=0x3be718*=0xa, lpOverlapped=0x0) returned 1 [0073.546] CloseHandle (hObject=0x444) returned 1 [0073.657] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\InstallTime20170518000419", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\InstallTime20170518000419", lpFilePart=0x0) returned 0x5d [0073.657] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0073.657] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\InstallTime20170518000419" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\crash reports\\installtime20170518000419"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0073.659] GetFileType (hFile=0x444) returned 0x1 [0073.659] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0073.659] GetFileType (hFile=0x444) returned 0x1 [0073.659] WriteFile (in: hFile=0x444, lpBuffer=0x2161078*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x3be628, lpOverlapped=0x0 | out: lpBuffer=0x2161078*, lpNumberOfBytesWritten=0x3be628*=0x10, lpOverlapped=0x0) returned 1 [0073.660] CloseHandle (hObject=0x444) returned 1 [0073.660] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\InstallTime20170518000419", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\InstallTime20170518000419", lpFilePart=0x0) returned 0x5d [0073.660] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\InstallTime20170518000419.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\InstallTime20170518000419.xuy", lpFilePart=0x0) returned 0x61 [0073.660] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0073.660] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\InstallTime20170518000419" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\crash reports\\installtime20170518000419"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24f22a36, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x24f22a36, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x17c05952, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0073.660] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0073.660] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\InstallTime20170518000419" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\crash reports\\installtime20170518000419"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\InstallTime20170518000419.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\crash reports\\installtime20170518000419.xuy")) returned 1 [0073.661] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0073.661] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\events", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\events", lpFilePart=0x0) returned 0x4a [0073.661] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\events\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\events\\", lpFilePart=0x0) returned 0x4b [0073.661] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\events\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7550 [0073.662] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0073.662] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0073.662] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0073.662] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0073.662] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0073.662] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0073.662] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\events", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\events", lpFilePart=0x0) returned 0x4a [0073.662] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\events\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\events\\", lpFilePart=0x0) returned 0x4b [0073.662] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\events\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7370 [0073.663] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0073.663] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0073.663] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0073.663] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0073.663] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0073.663] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0073.663] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles", lpFilePart=0x0) returned 0x3e [0073.663] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\", lpFilePart=0x0) returned 0x3f [0073.663] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7370 [0073.663] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0073.664] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0073.664] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0073.664] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0073.664] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0073.664] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0073.664] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0073.664] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles", lpFilePart=0x0) returned 0x3e [0073.664] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\", lpFilePart=0x0) returned 0x3f [0073.664] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7d30 [0073.665] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0073.665] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0073.665] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0073.665] FindClose (in: hFindFile=0x5d7d30 | out: hFindFile=0x5d7d30) returned 1 [0073.665] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0073.665] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0073.665] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0073.665] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default", lpFilePart=0x0) returned 0x4f [0073.665] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\", lpFilePart=0x0) returned 0x50 [0073.665] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d79d0 [0073.740] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0073.793] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0073.794] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0073.794] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0073.794] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0073.794] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0073.794] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0073.794] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0073.794] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0073.794] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0073.794] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0073.795] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0073.795] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0073.795] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0073.795] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0073.795] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0073.795] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0073.795] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0073.795] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0073.796] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0073.796] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0073.796] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0073.796] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0073.796] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0073.796] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0073.796] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0073.796] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0073.797] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0073.797] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0073.797] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0073.797] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0073.797] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0073.797] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0073.806] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0073.806] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0073.806] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0073.806] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0073.806] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0073.806] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0073.806] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0073.810] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0073.810] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0073.810] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0073.810] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0073.810] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0073.810] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0073.811] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0073.811] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0073.811] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0073.811] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default", lpFilePart=0x0) returned 0x4f [0073.811] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\", lpFilePart=0x0) returned 0x50 [0073.811] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7c70 [0073.812] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0073.812] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0073.813] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0073.813] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0073.813] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0073.813] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0073.813] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0073.814] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0073.814] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0073.814] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0073.814] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0073.814] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0073.814] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0073.815] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0073.815] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0073.815] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0073.815] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0073.815] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0073.815] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0073.816] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0073.816] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0073.816] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0073.816] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0073.816] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0073.816] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0073.816] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0073.817] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0073.817] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0073.817] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0073.817] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0073.817] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0073.817] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0073.818] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0073.818] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0073.818] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0073.818] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0073.818] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0073.818] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0073.819] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0073.819] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0073.819] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0073.819] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0073.819] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0073.819] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0073.820] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0073.820] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0073.821] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0073.821] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0073.821] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\addons.json", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\addons.json", lpFilePart=0x0) returned 0x5b [0073.821] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0073.821] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\addons.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\addons.json"), fInfoLevelId=0x0, lpFileInformation=0x2175060 | out: lpFileInformation=0x2175060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8856e0e7, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x8856e0e7, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x8856e0e7, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x18)) returned 1 [0073.853] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0073.853] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\addons.json", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\addons.json", lpFilePart=0x0) returned 0x5b [0073.853] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0073.853] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\addons.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\addons.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0073.854] GetFileType (hFile=0x444) returned 0x1 [0073.854] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0073.854] GetFileType (hFile=0x444) returned 0x1 [0073.854] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x18 [0073.854] ReadFile (in: hFile=0x444, lpBuffer=0x2175360, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x2175360*, lpNumberOfBytesRead=0x3be6a8*=0x18, lpOverlapped=0x0) returned 1 [0073.855] CloseHandle (hObject=0x444) returned 1 [0073.893] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\addons.json", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\addons.json", lpFilePart=0x0) returned 0x5b [0073.893] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0073.893] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\addons.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\addons.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0073.894] GetFileType (hFile=0x444) returned 0x1 [0073.894] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0073.895] GetFileType (hFile=0x444) returned 0x1 [0073.895] WriteFile (in: hFile=0x444, lpBuffer=0x21ec4b0*, nNumberOfBytesToWrite=0x20, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x21ec4b0*, lpNumberOfBytesWritten=0x3be5b8*=0x20, lpOverlapped=0x0) returned 1 [0073.895] CloseHandle (hObject=0x444) returned 1 [0073.896] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\addons.json", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\addons.json", lpFilePart=0x0) returned 0x5b [0073.896] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\addons.json.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\addons.json.xuy", lpFilePart=0x0) returned 0x5f [0073.896] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0073.896] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\addons.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\addons.json"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8856e0e7, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x8856e0e7, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x17e41c28, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x20)) returned 1 [0073.896] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0073.896] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\addons.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\addons.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\addons.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\addons.json.xuy")) returned 1 [0073.897] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\AlternateServices.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\AlternateServices.txt", lpFilePart=0x0) returned 0x65 [0073.897] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0073.897] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\AlternateServices.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\alternateservices.txt"), fInfoLevelId=0x0, lpFileInformation=0x21ed790 | out: lpFileInformation=0x21ed790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb5bde46, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xeb5bde46, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x3bebd7d, ftLastWriteTime.dwHighDateTime=0x1d2d446, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0074.502] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0074.502] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\AlternateServices.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\AlternateServices.txt", lpFilePart=0x0) returned 0x65 [0074.502] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0074.502] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\AlternateServices.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\alternateservices.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0074.503] GetFileType (hFile=0x444) returned 0x1 [0074.503] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0074.503] GetFileType (hFile=0x444) returned 0x1 [0074.503] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x0 [0074.503] CloseHandle (hObject=0x444) returned 1 [0074.519] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\AlternateServices.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\AlternateServices.txt", lpFilePart=0x0) returned 0x65 [0074.519] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0074.519] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\AlternateServices.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\alternateservices.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0074.520] GetFileType (hFile=0x444) returned 0x1 [0074.520] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0074.520] GetFileType (hFile=0x444) returned 0x1 [0074.520] WriteFile (in: hFile=0x444, lpBuffer=0x2263c10*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x2263c10*, lpNumberOfBytesWritten=0x3be5b8*=0x10, lpOverlapped=0x0) returned 1 [0074.521] CloseHandle (hObject=0x444) returned 1 [0074.522] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\AlternateServices.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\AlternateServices.txt", lpFilePart=0x0) returned 0x65 [0074.522] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\AlternateServices.txt.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\AlternateServices.txt.xuy", lpFilePart=0x0) returned 0x69 [0074.522] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0074.522] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\AlternateServices.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\alternateservices.txt"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb5bde46, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xeb5bde46, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x18437b36, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0074.522] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0074.522] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\AlternateServices.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\alternateservices.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\AlternateServices.txt.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\alternateservices.txt.xuy")) returned 1 [0074.523] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\blocklist-addons.json", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\blocklist-addons.json", lpFilePart=0x0) returned 0x65 [0074.523] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0074.523] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\blocklist-addons.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\blocklist-addons.json"), fInfoLevelId=0x0, lpFileInformation=0x2264f38 | out: lpFileInformation=0x2264f38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd291b190, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xd291b190, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0xd291b190, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x70608)) returned 1 [0074.525] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0074.525] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\blocklist-addons.json", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\blocklist-addons.json", lpFilePart=0x0) returned 0x65 [0074.525] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0074.528] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\blocklist-addons.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\blocklist-addons.json"), fInfoLevelId=0x0, lpFileInformation=0x22650d0 | out: lpFileInformation=0x22650d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd291b190, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xd291b190, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0xd291b190, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x70608)) returned 1 [0074.528] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0074.528] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\blocklist-addons.json", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\blocklist-addons.json", lpFilePart=0x0) returned 0x65 [0074.528] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0074.528] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\blocklist-addons.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\blocklist-addons.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0074.529] GetFileType (hFile=0x444) returned 0x1 [0074.529] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0074.529] GetFileType (hFile=0x444) returned 0x1 [0074.529] ReadFile (in: hFile=0x444, lpBuffer=0x2267530, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x2267530*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0074.591] CloseHandle (hObject=0x444) returned 1 [0074.591] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\blocklist-addons.json", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\blocklist-addons.json", lpFilePart=0x0) returned 0x65 [0074.591] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0074.591] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\blocklist-addons.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\blocklist-addons.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0074.592] GetFileType (hFile=0x444) returned 0x1 [0074.592] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0074.592] GetFileType (hFile=0x444) returned 0x1 [0074.592] WriteFile (in: hFile=0x444, lpBuffer=0x2265248*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x2265248*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0074.592] CloseHandle (hObject=0x444) returned 1 [0074.592] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\blocklist-addons.json", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\blocklist-addons.json", lpFilePart=0x0) returned 0x65 [0074.592] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\blocklist-addons.json.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\blocklist-addons.json.xuy", lpFilePart=0x0) returned 0x69 [0074.592] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0074.592] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\blocklist-addons.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\blocklist-addons.json"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd291b190, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xd291b190, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x184f662c, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x70608)) returned 1 [0074.592] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0074.593] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\blocklist-addons.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\blocklist-addons.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\blocklist-addons.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\blocklist-addons.json.xuy")) returned 1 [0074.593] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\blocklist-gfx.json", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\blocklist-gfx.json", lpFilePart=0x0) returned 0x62 [0074.593] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0074.593] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\blocklist-gfx.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\blocklist-gfx.json"), fInfoLevelId=0x0, lpFileInformation=0x22e39d8 | out: lpFileInformation=0x22e39d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3127152, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xd3127152, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0xd3127152, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x6d31)) returned 1 [0074.594] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0074.595] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\blocklist-gfx.json", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\blocklist-gfx.json", lpFilePart=0x0) returned 0x62 [0074.595] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0074.595] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\blocklist-gfx.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\blocklist-gfx.json"), fInfoLevelId=0x0, lpFileInformation=0x22e3b60 | out: lpFileInformation=0x22e3b60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3127152, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xd3127152, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0xd3127152, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x6d31)) returned 1 [0074.595] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0074.595] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\blocklist-gfx.json", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\blocklist-gfx.json", lpFilePart=0x0) returned 0x62 [0074.595] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0074.595] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\blocklist-gfx.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\blocklist-gfx.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0074.595] GetFileType (hFile=0x444) returned 0x1 [0074.596] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0074.596] GetFileType (hFile=0x444) returned 0x1 [0074.596] ReadFile (in: hFile=0x444, lpBuffer=0x22e5fa0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x22e5fa0*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0074.633] CloseHandle (hObject=0x444) returned 1 [0074.633] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\blocklist-gfx.json", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\blocklist-gfx.json", lpFilePart=0x0) returned 0x62 [0074.633] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0074.633] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\blocklist-gfx.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\blocklist-gfx.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0074.634] GetFileType (hFile=0x444) returned 0x1 [0074.634] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0074.634] GetFileType (hFile=0x444) returned 0x1 [0074.634] WriteFile (in: hFile=0x444, lpBuffer=0x215f778*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x215f778*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0074.634] CloseHandle (hObject=0x444) returned 1 [0074.634] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\blocklist-gfx.json", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\blocklist-gfx.json", lpFilePart=0x0) returned 0x62 [0074.634] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\blocklist-gfx.json.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\blocklist-gfx.json.xuy", lpFilePart=0x0) returned 0x66 [0074.634] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0074.634] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\blocklist-gfx.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\blocklist-gfx.json"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3127152, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xd3127152, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x18542b4e, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x6d31)) returned 1 [0074.634] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0074.635] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\blocklist-gfx.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\blocklist-gfx.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\blocklist-gfx.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\blocklist-gfx.json.xuy")) returned 1 [0074.638] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\blocklist-plugins.json", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\blocklist-plugins.json", lpFilePart=0x0) returned 0x66 [0074.638] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0074.638] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\blocklist-plugins.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\blocklist-plugins.json"), fInfoLevelId=0x0, lpFileInformation=0x2168558 | out: lpFileInformation=0x2168558*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd119a159, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xd119a159, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0xd119a159, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x312c0)) returned 1 [0074.642] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0074.642] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\blocklist-plugins.json", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\blocklist-plugins.json", lpFilePart=0x0) returned 0x66 [0074.642] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0074.642] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\blocklist-plugins.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\blocklist-plugins.json"), fInfoLevelId=0x0, lpFileInformation=0x21686f0 | out: lpFileInformation=0x21686f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd119a159, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xd119a159, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0xd119a159, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x312c0)) returned 1 [0074.642] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0074.643] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\blocklist-plugins.json", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\blocklist-plugins.json", lpFilePart=0x0) returned 0x66 [0074.643] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0074.643] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\blocklist-plugins.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\blocklist-plugins.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0074.643] GetFileType (hFile=0x444) returned 0x1 [0074.643] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0074.643] GetFileType (hFile=0x444) returned 0x1 [0074.643] ReadFile (in: hFile=0x444, lpBuffer=0x216ab50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x216ab50*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0074.743] CloseHandle (hObject=0x444) returned 1 [0074.743] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\blocklist-plugins.json", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\blocklist-plugins.json", lpFilePart=0x0) returned 0x66 [0074.743] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0074.743] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\blocklist-plugins.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\blocklist-plugins.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0074.743] GetFileType (hFile=0x444) returned 0x1 [0074.743] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0074.743] GetFileType (hFile=0x444) returned 0x1 [0074.744] WriteFile (in: hFile=0x444, lpBuffer=0x2168868*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x2168868*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0074.744] CloseHandle (hObject=0x444) returned 1 [0074.745] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\blocklist-plugins.json", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\blocklist-plugins.json", lpFilePart=0x0) returned 0x66 [0074.745] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\blocklist-plugins.json.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\blocklist-plugins.json.xuy", lpFilePart=0x0) returned 0x6a [0074.745] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0074.745] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\blocklist-plugins.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\blocklist-plugins.json"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd119a159, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xd119a159, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x1864dd59, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x312c0)) returned 1 [0074.745] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0074.745] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\blocklist-plugins.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\blocklist-plugins.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\blocklist-plugins.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\blocklist-plugins.json.xuy")) returned 1 [0074.746] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\blocklist.xml", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\blocklist.xml", lpFilePart=0x0) returned 0x5d [0074.746] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0074.746] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\blocklist.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\blocklist.xml"), fInfoLevelId=0x0, lpFileInformation=0x21e6ff8 | out: lpFileInformation=0x21e6ff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0a0091a, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xd0a0091a, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0xd0a0091a, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x3ef9f)) returned 1 [0074.748] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0074.748] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\blocklist.xml", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\blocklist.xml", lpFilePart=0x0) returned 0x5d [0074.748] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0074.748] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\blocklist.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\blocklist.xml"), fInfoLevelId=0x0, lpFileInformation=0x21e7170 | out: lpFileInformation=0x21e7170*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0a0091a, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xd0a0091a, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0xd0a0091a, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x3ef9f)) returned 1 [0074.748] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0074.748] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\blocklist.xml", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\blocklist.xml", lpFilePart=0x0) returned 0x5d [0074.748] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0074.748] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\blocklist.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\blocklist.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0074.749] GetFileType (hFile=0x444) returned 0x1 [0074.749] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0074.749] GetFileType (hFile=0x444) returned 0x1 [0074.749] ReadFile (in: hFile=0x444, lpBuffer=0x21e9590, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x21e9590*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0074.784] CloseHandle (hObject=0x444) returned 1 [0074.784] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\blocklist.xml", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\blocklist.xml", lpFilePart=0x0) returned 0x5d [0074.784] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0074.784] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\blocklist.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\blocklist.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0074.785] GetFileType (hFile=0x444) returned 0x1 [0074.785] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0074.785] GetFileType (hFile=0x444) returned 0x1 [0074.785] WriteFile (in: hFile=0x444, lpBuffer=0x21e72c8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x21e72c8*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0074.785] CloseHandle (hObject=0x444) returned 1 [0074.785] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\blocklist.xml", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\blocklist.xml", lpFilePart=0x0) returned 0x5d [0074.785] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\blocklist.xml.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\blocklist.xml.xuy", lpFilePart=0x0) returned 0x61 [0074.785] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0074.785] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\blocklist.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\blocklist.xml"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0a0091a, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xd0a0091a, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x186c04d4, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x3ef9f)) returned 1 [0074.786] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0074.786] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\blocklist.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\blocklist.xml"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\blocklist.xml.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\blocklist.xml.xuy")) returned 1 [0074.787] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cert8.db", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cert8.db", lpFilePart=0x0) returned 0x58 [0074.787] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0074.787] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cert8.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\cert8.db"), fInfoLevelId=0x0, lpFileInformation=0x22659e0 | out: lpFileInformation=0x22659e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39caaff7, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x39caaff7, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x3c11fdf, ftLastWriteTime.dwHighDateTime=0x1d2d446, nFileSizeHigh=0x0, nFileSizeLow=0x18000)) returned 1 [0074.787] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0074.787] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cert8.db", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cert8.db", lpFilePart=0x0) returned 0x58 [0074.787] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0074.787] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cert8.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\cert8.db"), fInfoLevelId=0x0, lpFileInformation=0x2265b48 | out: lpFileInformation=0x2265b48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39caaff7, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x39caaff7, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x3c11fdf, ftLastWriteTime.dwHighDateTime=0x1d2d446, nFileSizeHigh=0x0, nFileSizeLow=0x18000)) returned 1 [0074.787] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0074.787] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cert8.db", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cert8.db", lpFilePart=0x0) returned 0x58 [0074.787] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0074.787] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cert8.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\cert8.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0074.788] GetFileType (hFile=0x444) returned 0x1 [0074.788] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0074.788] GetFileType (hFile=0x444) returned 0x1 [0074.788] ReadFile (in: hFile=0x444, lpBuffer=0x2267f48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x2267f48*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0074.829] CloseHandle (hObject=0x444) returned 1 [0074.829] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cert8.db", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cert8.db", lpFilePart=0x0) returned 0x58 [0074.829] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0074.829] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cert8.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\cert8.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0074.829] GetFileType (hFile=0x444) returned 0x1 [0074.829] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0074.829] GetFileType (hFile=0x444) returned 0x1 [0074.829] WriteFile (in: hFile=0x444, lpBuffer=0x2265c90*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x2265c90*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0074.830] CloseHandle (hObject=0x444) returned 1 [0074.830] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cert8.db", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cert8.db", lpFilePart=0x0) returned 0x58 [0074.830] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cert8.db.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cert8.db.xuy", lpFilePart=0x0) returned 0x5c [0074.830] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0074.830] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cert8.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\cert8.db"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39caaff7, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x39caaff7, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x187329d2, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x18000)) returned 1 [0074.830] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0074.830] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cert8.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\cert8.db"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cert8.db.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\cert8.db.xuy")) returned 1 [0074.831] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\compatibility.ini", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\compatibility.ini", lpFilePart=0x0) returned 0x61 [0074.831] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0074.831] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\compatibility.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\compatibility.ini"), fInfoLevelId=0x0, lpFileInformation=0x22e4378 | out: lpFileInformation=0x22e4378*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24f48bbb, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x24f48bbb, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xf65b24f0, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0xd0)) returned 1 [0074.832] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0074.832] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\compatibility.ini", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\compatibility.ini", lpFilePart=0x0) returned 0x61 [0074.832] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0074.832] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\compatibility.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\compatibility.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0074.833] GetFileType (hFile=0x444) returned 0x1 [0074.833] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0074.833] GetFileType (hFile=0x444) returned 0x1 [0074.833] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0xd0 [0074.833] ReadFile (in: hFile=0x444, lpBuffer=0x22e4770, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x22e4770*, lpNumberOfBytesRead=0x3be6a8*=0xd0, lpOverlapped=0x0) returned 1 [0074.834] CloseHandle (hObject=0x444) returned 1 [0074.848] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\compatibility.ini", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\compatibility.ini", lpFilePart=0x0) returned 0x61 [0074.848] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0074.848] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\compatibility.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\compatibility.ini"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0074.850] GetFileType (hFile=0x444) returned 0x1 [0074.850] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0074.850] GetFileType (hFile=0x444) returned 0x1 [0074.850] WriteFile (in: hFile=0x444, lpBuffer=0x235ba68*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x235ba68*, lpNumberOfBytesWritten=0x3be5b8*=0xe0, lpOverlapped=0x0) returned 1 [0074.851] CloseHandle (hObject=0x444) returned 1 [0074.851] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\compatibility.ini", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\compatibility.ini", lpFilePart=0x0) returned 0x61 [0074.851] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\compatibility.ini.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\compatibility.ini.xuy", lpFilePart=0x0) returned 0x65 [0074.851] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0074.851] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\compatibility.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\compatibility.ini"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24f48bbb, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x24f48bbb, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x18758fe2, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1 [0074.851] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0074.851] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\compatibility.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\compatibility.ini"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\compatibility.ini.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\compatibility.ini.xuy")) returned 1 [0074.852] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\containers.json", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\containers.json", lpFilePart=0x0) returned 0x5f [0074.852] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0074.852] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\containers.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\containers.json"), fInfoLevelId=0x0, lpFileInformation=0x235cd78 | out: lpFileInformation=0x235cd78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3be5d9ac, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3be5d9ac, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x3be5d9ac, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x329)) returned 1 [0074.856] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0074.856] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\containers.json", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\containers.json", lpFilePart=0x0) returned 0x5f [0074.856] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0074.856] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\containers.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\containers.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0074.857] GetFileType (hFile=0x444) returned 0x1 [0074.857] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0074.857] GetFileType (hFile=0x444) returned 0x1 [0074.857] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x329 [0074.857] ReadFile (in: hFile=0x444, lpBuffer=0x235d3b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x235d3b0*, lpNumberOfBytesRead=0x3be6a8*=0x329, lpOverlapped=0x0) returned 1 [0074.872] CloseHandle (hObject=0x444) returned 1 [0074.925] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\containers.json", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\containers.json", lpFilePart=0x0) returned 0x5f [0074.925] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0074.926] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\containers.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\containers.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0074.927] GetFileType (hFile=0x444) returned 0x1 [0074.927] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0074.927] GetFileType (hFile=0x444) returned 0x1 [0074.927] WriteFile (in: hFile=0x444, lpBuffer=0x21d13d8*, nNumberOfBytesToWrite=0x330, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x21d13d8*, lpNumberOfBytesWritten=0x3be5b8*=0x330, lpOverlapped=0x0) returned 1 [0074.928] CloseHandle (hObject=0x444) returned 1 [0074.928] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\containers.json", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\containers.json", lpFilePart=0x0) returned 0x5f [0074.928] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\containers.json.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\containers.json.xuy", lpFilePart=0x0) returned 0x63 [0074.928] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0074.928] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\containers.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\containers.json"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3be5d9ac, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3be5d9ac, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x18817961, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x330)) returned 1 [0074.928] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0074.928] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\containers.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\containers.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\containers.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\containers.json.xuy")) returned 1 [0074.929] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\content-prefs.sqlite", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\content-prefs.sqlite", lpFilePart=0x0) returned 0x64 [0074.929] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0074.929] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\content-prefs.sqlite" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\content-prefs.sqlite"), fInfoLevelId=0x0, lpFileInformation=0x21d26d0 | out: lpFileInformation=0x21d26d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a3497f7, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3a3497f7, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x3a690cdd, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x38000)) returned 1 [0074.941] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0074.941] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\content-prefs.sqlite", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\content-prefs.sqlite", lpFilePart=0x0) returned 0x64 [0074.941] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0074.942] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\content-prefs.sqlite" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\content-prefs.sqlite"), fInfoLevelId=0x0, lpFileInformation=0x21d2868 | out: lpFileInformation=0x21d2868*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a3497f7, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3a3497f7, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x3a690cdd, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x38000)) returned 1 [0074.942] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0074.942] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\content-prefs.sqlite", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\content-prefs.sqlite", lpFilePart=0x0) returned 0x64 [0074.942] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0074.942] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\content-prefs.sqlite" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\content-prefs.sqlite"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0074.942] GetFileType (hFile=0x444) returned 0x1 [0074.942] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0074.942] GetFileType (hFile=0x444) returned 0x1 [0074.942] ReadFile (in: hFile=0x444, lpBuffer=0x21d4cc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x21d4cc8*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0074.975] CloseHandle (hObject=0x444) returned 1 [0074.975] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\content-prefs.sqlite", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\content-prefs.sqlite", lpFilePart=0x0) returned 0x64 [0074.975] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0074.976] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\content-prefs.sqlite" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\content-prefs.sqlite"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0074.976] GetFileType (hFile=0x444) returned 0x1 [0074.976] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0074.976] GetFileType (hFile=0x444) returned 0x1 [0074.976] WriteFile (in: hFile=0x444, lpBuffer=0x21d29e0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x21d29e0*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0074.976] CloseHandle (hObject=0x444) returned 1 [0074.977] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\content-prefs.sqlite", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\content-prefs.sqlite", lpFilePart=0x0) returned 0x64 [0074.977] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\content-prefs.sqlite.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\content-prefs.sqlite.xuy", lpFilePart=0x0) returned 0x68 [0074.977] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0074.977] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\content-prefs.sqlite" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\content-prefs.sqlite"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a3497f7, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3a3497f7, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x18889dbb, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x38000)) returned 1 [0074.977] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0074.977] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\content-prefs.sqlite" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\content-prefs.sqlite"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\content-prefs.sqlite.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\content-prefs.sqlite.xuy")) returned 1 [0074.978] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cookies.sqlite", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cookies.sqlite", lpFilePart=0x0) returned 0x5e [0074.978] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0074.978] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cookies.sqlite" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\cookies.sqlite"), fInfoLevelId=0x0, lpFileInformation=0x2251170 | out: lpFileInformation=0x2251170*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b33018c, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3b33018c, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x3bebd7d, ftLastWriteTime.dwHighDateTime=0x1d2d446, nFileSizeHigh=0x0, nFileSizeLow=0x80000)) returned 1 [0074.981] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0074.981] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cookies.sqlite", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cookies.sqlite", lpFilePart=0x0) returned 0x5e [0074.981] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0074.981] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cookies.sqlite" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\cookies.sqlite"), fInfoLevelId=0x0, lpFileInformation=0x22512e8 | out: lpFileInformation=0x22512e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b33018c, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3b33018c, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x3bebd7d, ftLastWriteTime.dwHighDateTime=0x1d2d446, nFileSizeHigh=0x0, nFileSizeLow=0x80000)) returned 1 [0074.981] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0074.981] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cookies.sqlite", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cookies.sqlite", lpFilePart=0x0) returned 0x5e [0074.981] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0074.981] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cookies.sqlite" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\cookies.sqlite"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0074.981] GetFileType (hFile=0x444) returned 0x1 [0074.981] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0074.982] GetFileType (hFile=0x444) returned 0x1 [0074.982] ReadFile (in: hFile=0x444, lpBuffer=0x2253708, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x2253708*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0075.019] CloseHandle (hObject=0x444) returned 1 [0075.019] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cookies.sqlite", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cookies.sqlite", lpFilePart=0x0) returned 0x5e [0075.019] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0075.019] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cookies.sqlite" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\cookies.sqlite"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0075.019] GetFileType (hFile=0x444) returned 0x1 [0075.019] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0075.020] GetFileType (hFile=0x444) returned 0x1 [0075.020] WriteFile (in: hFile=0x444, lpBuffer=0x2251440*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x2251440*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0075.020] CloseHandle (hObject=0x444) returned 1 [0075.020] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cookies.sqlite", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cookies.sqlite", lpFilePart=0x0) returned 0x5e [0075.020] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cookies.sqlite.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cookies.sqlite.xuy", lpFilePart=0x0) returned 0x62 [0075.020] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0075.020] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cookies.sqlite" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\cookies.sqlite"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b33018c, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3b33018c, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x188fc559, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x80000)) returned 1 [0075.020] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0075.020] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cookies.sqlite" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\cookies.sqlite"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cookies.sqlite.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\cookies.sqlite.xuy")) returned 1 [0075.022] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\extensions.ini", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\extensions.ini", lpFilePart=0x0) returned 0x5e [0075.022] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0075.022] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\extensions.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\extensions.ini"), fInfoLevelId=0x0, lpFileInformation=0x22cfb60 | out: lpFileInformation=0x22cfb60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39ee71ed, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x39ee71ed, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x39ee71ed, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0xb9)) returned 1 [0075.023] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0075.023] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\extensions.ini", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\extensions.ini", lpFilePart=0x0) returned 0x5e [0075.023] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0075.023] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\extensions.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\extensions.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0075.023] GetFileType (hFile=0x444) returned 0x1 [0075.023] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0075.023] GetFileType (hFile=0x444) returned 0x1 [0075.023] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0xb9 [0075.023] ReadFile (in: hFile=0x444, lpBuffer=0x22cff28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x22cff28*, lpNumberOfBytesRead=0x3be6a8*=0xb9, lpOverlapped=0x0) returned 1 [0075.025] CloseHandle (hObject=0x444) returned 1 [0075.071] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\extensions.ini", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\extensions.ini", lpFilePart=0x0) returned 0x5e [0075.071] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0075.071] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\extensions.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\extensions.ini"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0075.075] GetFileType (hFile=0x444) returned 0x1 [0075.075] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0075.075] GetFileType (hFile=0x444) returned 0x1 [0075.076] WriteFile (in: hFile=0x444, lpBuffer=0x23471c8*, nNumberOfBytesToWrite=0xc0, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x23471c8*, lpNumberOfBytesWritten=0x3be5b8*=0xc0, lpOverlapped=0x0) returned 1 [0075.076] CloseHandle (hObject=0x444) returned 1 [0075.077] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\extensions.ini", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\extensions.ini", lpFilePart=0x0) returned 0x5e [0075.077] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\extensions.ini.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\extensions.ini.xuy", lpFilePart=0x0) returned 0x62 [0075.077] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0075.077] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\extensions.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\extensions.ini"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39ee71ed, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x39ee71ed, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x18994f33, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xc0)) returned 1 [0075.077] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0075.077] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\extensions.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\extensions.ini"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\extensions.ini.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\extensions.ini.xuy")) returned 1 [0075.078] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\extensions.json", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\extensions.json", lpFilePart=0x0) returned 0x5f [0075.078] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0075.078] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\extensions.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\extensions.json"), fInfoLevelId=0x0, lpFileInformation=0x23484c0 | out: lpFileInformation=0x23484c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x16fe9435, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x16fe9435, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x16fe9435, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x172b)) returned 1 [0075.080] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0075.080] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\extensions.json", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\extensions.json", lpFilePart=0x0) returned 0x5f [0075.080] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0075.080] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\extensions.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\extensions.json"), fInfoLevelId=0x0, lpFileInformation=0x2348638 | out: lpFileInformation=0x2348638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x16fe9435, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x16fe9435, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x16fe9435, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x172b)) returned 1 [0075.081] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0075.081] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\extensions.json", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\extensions.json", lpFilePart=0x0) returned 0x5f [0075.081] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0075.081] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\extensions.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\extensions.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0075.081] GetFileType (hFile=0x444) returned 0x1 [0075.081] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0075.081] GetFileType (hFile=0x444) returned 0x1 [0075.081] ReadFile (in: hFile=0x444, lpBuffer=0x234aa58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x234aa58*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0075.154] CloseHandle (hObject=0x444) returned 1 [0075.154] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\extensions.json", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\extensions.json", lpFilePart=0x0) returned 0x5f [0075.154] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0075.154] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\extensions.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\extensions.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0075.154] GetFileType (hFile=0x444) returned 0x1 [0075.154] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0075.154] GetFileType (hFile=0x444) returned 0x1 [0075.154] WriteFile (in: hFile=0x444, lpBuffer=0x215f790*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x215f790*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0075.155] CloseHandle (hObject=0x444) returned 1 [0075.155] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\extensions.json", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\extensions.json", lpFilePart=0x0) returned 0x5f [0075.155] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\extensions.json.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\extensions.json.xuy", lpFilePart=0x0) returned 0x63 [0075.155] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0075.155] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\extensions.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\extensions.json"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x16fe9435, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x16fe9435, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x18a540fd, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0075.155] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0075.155] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\extensions.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\extensions.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\extensions.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\extensions.json.xuy")) returned 1 [0075.156] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\formhistory.sqlite", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\formhistory.sqlite", lpFilePart=0x0) returned 0x62 [0075.156] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0075.156] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\formhistory.sqlite" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\formhistory.sqlite"), fInfoLevelId=0x0, lpFileInformation=0x21c9d38 | out: lpFileInformation=0x21c9d38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e277ad9, ftCreationTime.dwHighDateTime=0x1d2d444, ftLastAccessTime.dwLowDateTime=0x8e277ad9, ftLastAccessTime.dwHighDateTime=0x1d2d444, ftLastWriteTime.dwLowDateTime=0x8e6a3dc8, ftLastWriteTime.dwHighDateTime=0x1d2d444, nFileSizeHigh=0x0, nFileSizeLow=0x30000)) returned 1 [0075.160] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0075.161] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\formhistory.sqlite", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\formhistory.sqlite", lpFilePart=0x0) returned 0x62 [0075.161] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0075.161] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\formhistory.sqlite" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\formhistory.sqlite"), fInfoLevelId=0x0, lpFileInformation=0x21c9ec0 | out: lpFileInformation=0x21c9ec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e277ad9, ftCreationTime.dwHighDateTime=0x1d2d444, ftLastAccessTime.dwLowDateTime=0x8e277ad9, ftLastAccessTime.dwHighDateTime=0x1d2d444, ftLastWriteTime.dwLowDateTime=0x8e6a3dc8, ftLastWriteTime.dwHighDateTime=0x1d2d444, nFileSizeHigh=0x0, nFileSizeLow=0x30000)) returned 1 [0075.161] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0075.161] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\formhistory.sqlite", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\formhistory.sqlite", lpFilePart=0x0) returned 0x62 [0075.161] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0075.161] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\formhistory.sqlite" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\formhistory.sqlite"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0075.162] GetFileType (hFile=0x444) returned 0x1 [0075.162] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0075.162] GetFileType (hFile=0x444) returned 0x1 [0075.162] ReadFile (in: hFile=0x444, lpBuffer=0x21cc300, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x21cc300*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0075.193] CloseHandle (hObject=0x444) returned 1 [0075.246] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\formhistory.sqlite", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\formhistory.sqlite", lpFilePart=0x0) returned 0x62 [0075.246] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0075.246] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\formhistory.sqlite" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\formhistory.sqlite"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0075.247] GetFileType (hFile=0x444) returned 0x1 [0075.247] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0075.247] GetFileType (hFile=0x444) returned 0x1 [0075.247] WriteFile (in: hFile=0x444, lpBuffer=0x21ca028*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x21ca028*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0075.247] CloseHandle (hObject=0x444) returned 1 [0075.247] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\formhistory.sqlite", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\formhistory.sqlite", lpFilePart=0x0) returned 0x62 [0075.247] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\formhistory.sqlite.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\formhistory.sqlite.xuy", lpFilePart=0x0) returned 0x66 [0075.247] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0075.247] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\formhistory.sqlite" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\formhistory.sqlite"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e277ad9, ftCreationTime.dwHighDateTime=0x1d2d444, ftLastAccessTime.dwLowDateTime=0x8e277ad9, ftLastAccessTime.dwHighDateTime=0x1d2d444, ftLastWriteTime.dwLowDateTime=0x18b3893e, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x30000)) returned 1 [0075.247] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0075.247] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\formhistory.sqlite" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\formhistory.sqlite"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\formhistory.sqlite.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\formhistory.sqlite.xuy")) returned 1 [0075.248] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\key3.db", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\key3.db", lpFilePart=0x0) returned 0x57 [0075.248] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0075.248] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\key3.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\key3.db"), fInfoLevelId=0x0, lpFileInformation=0x2248778 | out: lpFileInformation=0x2248778*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39cf74ac, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x39cf74ac, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x3c11fdf, ftLastWriteTime.dwHighDateTime=0x1d2d446, nFileSizeHigh=0x0, nFileSizeLow=0x4000)) returned 1 [0075.248] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0075.249] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\key3.db", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\key3.db", lpFilePart=0x0) returned 0x57 [0075.249] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0075.249] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\key3.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\key3.db"), fInfoLevelId=0x0, lpFileInformation=0x22488d0 | out: lpFileInformation=0x22488d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39cf74ac, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x39cf74ac, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x3c11fdf, ftLastWriteTime.dwHighDateTime=0x1d2d446, nFileSizeHigh=0x0, nFileSizeLow=0x4000)) returned 1 [0075.249] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0075.249] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\key3.db", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\key3.db", lpFilePart=0x0) returned 0x57 [0075.249] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0075.249] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\key3.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\key3.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0075.249] GetFileType (hFile=0x444) returned 0x1 [0075.249] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0075.249] GetFileType (hFile=0x444) returned 0x1 [0075.249] ReadFile (in: hFile=0x444, lpBuffer=0x224acb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x224acb0*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0075.268] CloseHandle (hObject=0x444) returned 1 [0075.268] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\key3.db", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\key3.db", lpFilePart=0x0) returned 0x57 [0075.268] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0075.268] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\key3.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\key3.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0075.268] GetFileType (hFile=0x444) returned 0x1 [0075.268] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0075.268] GetFileType (hFile=0x444) returned 0x1 [0075.268] WriteFile (in: hFile=0x444, lpBuffer=0x2248a08*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x2248a08*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0075.268] CloseHandle (hObject=0x444) returned 1 [0075.269] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\key3.db", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\key3.db", lpFilePart=0x0) returned 0x57 [0075.269] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\key3.db.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\key3.db.xuy", lpFilePart=0x0) returned 0x5b [0075.269] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0075.269] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\key3.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\key3.db"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39cf74ac, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x39cf74ac, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x18b5eb58, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x4000)) returned 1 [0075.269] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0075.269] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\key3.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\key3.db"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\key3.db.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\key3.db.xuy")) returned 1 [0075.270] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\kinto.sqlite", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\kinto.sqlite", lpFilePart=0x0) returned 0x5c [0075.270] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0075.270] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\kinto.sqlite" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\kinto.sqlite"), fInfoLevelId=0x0, lpFileInformation=0x22c70b8 | out: lpFileInformation=0x22c70b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf84fba4, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xcf84fba4, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0xd30b4b13, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x100000)) returned 1 [0075.271] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0075.271] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\kinto.sqlite", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\kinto.sqlite", lpFilePart=0x0) returned 0x5c [0075.271] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0075.271] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\kinto.sqlite" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\kinto.sqlite"), fInfoLevelId=0x0, lpFileInformation=0x22c7230 | out: lpFileInformation=0x22c7230*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf84fba4, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xcf84fba4, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0xd30b4b13, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x100000)) returned 1 [0075.271] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0075.271] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\kinto.sqlite", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\kinto.sqlite", lpFilePart=0x0) returned 0x5c [0075.271] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0075.271] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\kinto.sqlite" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\kinto.sqlite"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0075.272] GetFileType (hFile=0x444) returned 0x1 [0075.272] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0075.272] GetFileType (hFile=0x444) returned 0x1 [0075.272] ReadFile (in: hFile=0x444, lpBuffer=0x22c9650, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x22c9650*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0075.301] CloseHandle (hObject=0x444) returned 1 [0075.324] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\kinto.sqlite", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\kinto.sqlite", lpFilePart=0x0) returned 0x5c [0075.324] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0075.324] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\kinto.sqlite" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\kinto.sqlite"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0075.324] GetFileType (hFile=0x444) returned 0x1 [0075.324] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0075.324] GetFileType (hFile=0x444) returned 0x1 [0075.325] WriteFile (in: hFile=0x444, lpBuffer=0x22c7388*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x22c7388*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0075.325] CloseHandle (hObject=0x444) returned 1 [0075.325] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\kinto.sqlite", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\kinto.sqlite", lpFilePart=0x0) returned 0x5c [0075.325] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\kinto.sqlite.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\kinto.sqlite.xuy", lpFilePart=0x0) returned 0x60 [0075.325] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0075.325] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\kinto.sqlite" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\kinto.sqlite"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf84fba4, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xcf84fba4, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x18bf764c, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x100000)) returned 1 [0075.325] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0075.325] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\kinto.sqlite" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\kinto.sqlite"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\kinto.sqlite.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\kinto.sqlite.xuy")) returned 1 [0075.326] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\mimeTypes.rdf", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\mimeTypes.rdf", lpFilePart=0x0) returned 0x5d [0075.326] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0075.326] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\mimeTypes.rdf" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\mimetypes.rdf"), fInfoLevelId=0x0, lpFileInformation=0x2345aa8 | out: lpFileInformation=0x2345aa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b8c6e4c, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3b9cc1ca, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x3b9d5df3, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0xf23)) returned 1 [0075.326] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0075.326] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\mimeTypes.rdf", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\mimeTypes.rdf", lpFilePart=0x0) returned 0x5d [0075.326] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0075.326] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\mimeTypes.rdf" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\mimetypes.rdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0075.326] GetFileType (hFile=0x444) returned 0x1 [0075.326] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0075.326] GetFileType (hFile=0x444) returned 0x1 [0075.326] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0xf23 [0075.327] ReadFile (in: hFile=0x444, lpBuffer=0x2346cd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x2346cd8*, lpNumberOfBytesRead=0x3be6a8*=0xf23, lpOverlapped=0x0) returned 1 [0075.405] CloseHandle (hObject=0x444) returned 1 [0075.469] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\mimeTypes.rdf", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\mimeTypes.rdf", lpFilePart=0x0) returned 0x5d [0075.469] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0075.469] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\mimeTypes.rdf" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\mimetypes.rdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0075.470] GetFileType (hFile=0x444) returned 0x1 [0075.470] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0075.471] GetFileType (hFile=0x444) returned 0x1 [0075.471] WriteFile (in: hFile=0x444, lpBuffer=0x21c0618*, nNumberOfBytesToWrite=0xf30, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x21c0618*, lpNumberOfBytesWritten=0x3be5b8*=0xf30, lpOverlapped=0x0) returned 1 [0075.472] CloseHandle (hObject=0x444) returned 1 [0075.472] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\mimeTypes.rdf", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\mimeTypes.rdf", lpFilePart=0x0) returned 0x5d [0075.472] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\mimeTypes.rdf.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\mimeTypes.rdf.xuy", lpFilePart=0x0) returned 0x61 [0075.472] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0075.472] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\mimeTypes.rdf" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\mimetypes.rdf"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b8c6e4c, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3b9cc1ca, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x18d4e9e3, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xf30)) returned 1 [0075.472] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0075.472] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\mimeTypes.rdf" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\mimetypes.rdf"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\mimeTypes.rdf.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\mimetypes.rdf.xuy")) returned 1 [0075.473] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\parent.lock", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\parent.lock", lpFilePart=0x0) returned 0x5b [0075.473] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0075.473] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\parent.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\parent.lock"), fInfoLevelId=0x0, lpFileInformation=0x21c1910 | out: lpFileInformation=0x21c1910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24f48bbb, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x24f48bbb, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x70a7daab, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0075.474] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0075.474] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\parent.lock", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\parent.lock", lpFilePart=0x0) returned 0x5b [0075.474] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0075.474] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\parent.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\parent.lock"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0075.474] GetFileType (hFile=0x444) returned 0x1 [0075.474] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0075.474] GetFileType (hFile=0x444) returned 0x1 [0075.474] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x0 [0075.474] CloseHandle (hObject=0x444) returned 1 [0075.487] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\parent.lock", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\parent.lock", lpFilePart=0x0) returned 0x5b [0075.487] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0075.487] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\parent.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\parent.lock"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0075.490] GetFileType (hFile=0x444) returned 0x1 [0075.490] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0075.490] GetFileType (hFile=0x444) returned 0x1 [0075.490] WriteFile (in: hFile=0x444, lpBuffer=0x2237d00*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x2237d00*, lpNumberOfBytesWritten=0x3be5b8*=0x10, lpOverlapped=0x0) returned 1 [0075.491] CloseHandle (hObject=0x444) returned 1 [0075.492] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\parent.lock", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\parent.lock", lpFilePart=0x0) returned 0x5b [0075.492] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\parent.lock.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\parent.lock.xuy", lpFilePart=0x0) returned 0x5f [0075.492] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0075.492] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\parent.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\parent.lock"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24f48bbb, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x24f48bbb, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x18d74eb1, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0075.492] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0075.492] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\parent.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\parent.lock"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\parent.lock.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\parent.lock.xuy")) returned 1 [0075.493] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\permissions.sqlite", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\permissions.sqlite", lpFilePart=0x0) returned 0x62 [0075.493] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0075.493] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\permissions.sqlite" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\permissions.sqlite"), fInfoLevelId=0x0, lpFileInformation=0x2238fe0 | out: lpFileInformation=0x2238fe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39a6ed25, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x39a6ed25, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x39bc6179, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x18000)) returned 1 [0075.498] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0075.498] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\permissions.sqlite", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\permissions.sqlite", lpFilePart=0x0) returned 0x62 [0075.498] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0075.498] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\permissions.sqlite" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\permissions.sqlite"), fInfoLevelId=0x0, lpFileInformation=0x2239168 | out: lpFileInformation=0x2239168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39a6ed25, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x39a6ed25, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x39bc6179, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x18000)) returned 1 [0075.498] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0075.498] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\permissions.sqlite", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\permissions.sqlite", lpFilePart=0x0) returned 0x62 [0075.498] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0075.498] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\permissions.sqlite" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\permissions.sqlite"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0075.499] GetFileType (hFile=0x444) returned 0x1 [0075.499] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0075.499] GetFileType (hFile=0x444) returned 0x1 [0075.499] ReadFile (in: hFile=0x444, lpBuffer=0x223b5a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x223b5a8*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0075.544] CloseHandle (hObject=0x444) returned 1 [0075.631] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\permissions.sqlite", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\permissions.sqlite", lpFilePart=0x0) returned 0x62 [0075.631] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0075.631] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\permissions.sqlite" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\permissions.sqlite"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0075.632] GetFileType (hFile=0x444) returned 0x1 [0075.632] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0075.632] GetFileType (hFile=0x444) returned 0x1 [0075.632] WriteFile (in: hFile=0x444, lpBuffer=0x22392d0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x22392d0*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0075.632] CloseHandle (hObject=0x444) returned 1 [0075.632] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\permissions.sqlite", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\permissions.sqlite", lpFilePart=0x0) returned 0x62 [0075.632] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\permissions.sqlite.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\permissions.sqlite.xuy", lpFilePart=0x0) returned 0x66 [0075.632] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0075.632] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\permissions.sqlite" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\permissions.sqlite"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39a6ed25, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x39a6ed25, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x18ecc20c, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x18000)) returned 1 [0075.632] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0075.632] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\permissions.sqlite" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\permissions.sqlite"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\permissions.sqlite.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\permissions.sqlite.xuy")) returned 1 [0075.633] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\places.sqlite", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\places.sqlite", lpFilePart=0x0) returned 0x5d [0075.633] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0075.633] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\places.sqlite" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\places.sqlite"), fInfoLevelId=0x0, lpFileInformation=0x22b7a28 | out: lpFileInformation=0x22b7a28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a0184b3, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3a0184b3, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x3e01eda, ftLastWriteTime.dwHighDateTime=0x1d2d446, nFileSizeHigh=0x0, nFileSizeLow=0xa00000)) returned 1 [0075.634] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0075.634] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\places.sqlite", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\places.sqlite", lpFilePart=0x0) returned 0x5d [0075.634] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0075.634] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\places.sqlite" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\places.sqlite"), fInfoLevelId=0x0, lpFileInformation=0x22b7ba0 | out: lpFileInformation=0x22b7ba0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a0184b3, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3a0184b3, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x3e01eda, ftLastWriteTime.dwHighDateTime=0x1d2d446, nFileSizeHigh=0x0, nFileSizeLow=0xa00000)) returned 1 [0075.634] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0075.634] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\places.sqlite", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\places.sqlite", lpFilePart=0x0) returned 0x5d [0075.634] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0075.634] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\places.sqlite" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\places.sqlite"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0075.638] GetFileType (hFile=0x444) returned 0x1 [0075.638] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0075.638] GetFileType (hFile=0x444) returned 0x1 [0075.638] ReadFile (in: hFile=0x444, lpBuffer=0x22b9fc0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x22b9fc0*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0075.737] CloseHandle (hObject=0x444) returned 1 [0075.796] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\places.sqlite", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\places.sqlite", lpFilePart=0x0) returned 0x5d [0075.796] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0075.796] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\places.sqlite" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\places.sqlite"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0075.796] GetFileType (hFile=0x444) returned 0x1 [0075.796] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0075.796] GetFileType (hFile=0x444) returned 0x1 [0075.796] WriteFile (in: hFile=0x444, lpBuffer=0x22b7cf8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x22b7cf8*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0075.797] CloseHandle (hObject=0x444) returned 1 [0075.797] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\places.sqlite", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\places.sqlite", lpFilePart=0x0) returned 0x5d [0075.797] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\places.sqlite.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\places.sqlite.xuy", lpFilePart=0x0) returned 0x61 [0075.797] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0075.797] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\places.sqlite" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\places.sqlite"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a0184b3, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3a0184b3, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x1906fb95, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xa00000)) returned 1 [0075.797] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0075.797] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\places.sqlite" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\places.sqlite"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\places.sqlite.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\places.sqlite.xuy")) returned 1 [0075.798] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\pluginreg.dat", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\pluginreg.dat", lpFilePart=0x0) returned 0x5d [0075.798] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0075.798] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\pluginreg.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\pluginreg.dat"), fInfoLevelId=0x0, lpFileInformation=0x2336418 | out: lpFileInformation=0x2336418*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87001075, ftCreationTime.dwHighDateTime=0x1d2d43f, ftLastAccessTime.dwLowDateTime=0x87001075, ftLastAccessTime.dwHighDateTime=0x1d2d43f, ftLastWriteTime.dwLowDateTime=0x870272b5, ftLastWriteTime.dwHighDateTime=0x1d2d43f, nFileSizeHigh=0x0, nFileSizeLow=0x23b)) returned 1 [0075.800] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0075.800] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\pluginreg.dat", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\pluginreg.dat", lpFilePart=0x0) returned 0x5d [0075.800] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0075.800] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\pluginreg.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\pluginreg.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0075.800] GetFileType (hFile=0x444) returned 0x1 [0075.800] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0075.800] GetFileType (hFile=0x444) returned 0x1 [0075.800] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x23b [0075.800] ReadFile (in: hFile=0x444, lpBuffer=0x2336960, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x2336960*, lpNumberOfBytesRead=0x3be6a8*=0x23b, lpOverlapped=0x0) returned 1 [0075.801] CloseHandle (hObject=0x444) returned 1 [0075.849] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\pluginreg.dat", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\pluginreg.dat", lpFilePart=0x0) returned 0x5d [0075.849] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0075.849] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\pluginreg.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\pluginreg.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0075.851] GetFileType (hFile=0x444) returned 0x1 [0075.851] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0075.851] GetFileType (hFile=0x444) returned 0x1 [0075.851] WriteFile (in: hFile=0x444, lpBuffer=0x21ad7b8*, nNumberOfBytesToWrite=0x240, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x21ad7b8*, lpNumberOfBytesWritten=0x3be5b8*=0x240, lpOverlapped=0x0) returned 1 [0075.852] CloseHandle (hObject=0x444) returned 1 [0075.852] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\pluginreg.dat", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\pluginreg.dat", lpFilePart=0x0) returned 0x5d [0075.852] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\pluginreg.dat.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\pluginreg.dat.xuy", lpFilePart=0x0) returned 0x61 [0075.852] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0075.852] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\pluginreg.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\pluginreg.dat"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87001075, ftCreationTime.dwHighDateTime=0x1d2d43f, ftLastAccessTime.dwLowDateTime=0x87001075, ftLastAccessTime.dwHighDateTime=0x1d2d43f, ftLastWriteTime.dwLowDateTime=0x190e33cf, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x240)) returned 1 [0075.852] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0075.852] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\pluginreg.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\pluginreg.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\pluginreg.dat.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\pluginreg.dat.xuy")) returned 1 [0075.853] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\prefs.js", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\prefs.js", lpFilePart=0x0) returned 0x58 [0075.853] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0075.853] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\prefs.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\prefs.js"), fInfoLevelId=0x0, lpFileInformation=0x21aeaa8 | out: lpFileInformation=0x21aeaa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ec0b23, ftCreationTime.dwHighDateTime=0x1d2d446, ftLastAccessTime.dwLowDateTime=0x3ec0b23, ftLastAccessTime.dwHighDateTime=0x1d2d446, ftLastWriteTime.dwLowDateTime=0x3ec0b23, ftLastWriteTime.dwHighDateTime=0x1d2d446, nFileSizeHigh=0x0, nFileSizeLow=0x2cc9)) returned 1 [0075.853] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0075.853] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\prefs.js", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\prefs.js", lpFilePart=0x0) returned 0x58 [0075.853] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0075.853] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\prefs.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\prefs.js"), fInfoLevelId=0x0, lpFileInformation=0x21aec10 | out: lpFileInformation=0x21aec10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ec0b23, ftCreationTime.dwHighDateTime=0x1d2d446, ftLastAccessTime.dwLowDateTime=0x3ec0b23, ftLastAccessTime.dwHighDateTime=0x1d2d446, ftLastWriteTime.dwLowDateTime=0x3ec0b23, ftLastWriteTime.dwHighDateTime=0x1d2d446, nFileSizeHigh=0x0, nFileSizeLow=0x2cc9)) returned 1 [0075.854] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0075.854] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\prefs.js", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\prefs.js", lpFilePart=0x0) returned 0x58 [0075.854] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0075.854] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\prefs.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\prefs.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0075.855] GetFileType (hFile=0x444) returned 0x1 [0075.855] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0075.855] GetFileType (hFile=0x444) returned 0x1 [0075.855] ReadFile (in: hFile=0x444, lpBuffer=0x21b1010, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x21b1010*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0075.908] CloseHandle (hObject=0x444) returned 1 [0075.908] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\prefs.js", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\prefs.js", lpFilePart=0x0) returned 0x58 [0075.908] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0075.909] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\prefs.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\prefs.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0075.909] GetFileType (hFile=0x444) returned 0x1 [0075.909] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0075.909] GetFileType (hFile=0x444) returned 0x1 [0075.909] WriteFile (in: hFile=0x444, lpBuffer=0x21aed58*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x21aed58*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0075.909] CloseHandle (hObject=0x444) returned 1 [0075.909] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\prefs.js", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\prefs.js", lpFilePart=0x0) returned 0x58 [0075.909] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\prefs.js.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\prefs.js.xuy", lpFilePart=0x0) returned 0x5c [0075.909] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0075.909] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\prefs.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\prefs.js"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ec0b23, ftCreationTime.dwHighDateTime=0x1d2d446, ftLastAccessTime.dwLowDateTime=0x3ec0b23, ftLastAccessTime.dwHighDateTime=0x1d2d446, ftLastWriteTime.dwLowDateTime=0x19181dea, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2cc9)) returned 1 [0075.910] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0075.910] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\prefs.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\prefs.js"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\prefs.js.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\prefs.js.xuy")) returned 1 [0075.911] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\revocations.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\revocations.txt", lpFilePart=0x0) returned 0x5f [0075.911] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0075.911] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\revocations.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\revocations.txt"), fInfoLevelId=0x0, lpFileInformation=0x222d440 | out: lpFileInformation=0x222d440*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0ba4336, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xd0ba4336, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0xd0ba4336, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x53a6)) returned 1 [0075.911] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0075.911] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\revocations.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\revocations.txt", lpFilePart=0x0) returned 0x5f [0075.911] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0075.911] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\revocations.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\revocations.txt"), fInfoLevelId=0x0, lpFileInformation=0x222d5b8 | out: lpFileInformation=0x222d5b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0ba4336, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xd0ba4336, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0xd0ba4336, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x53a6)) returned 1 [0075.911] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0075.911] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\revocations.txt", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\revocations.txt", lpFilePart=0x0) returned 0x5f [0075.911] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0075.911] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\revocations.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\revocations.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0075.912] GetFileType (hFile=0x444) returned 0x1 [0075.912] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0075.912] GetFileType (hFile=0x444) returned 0x1 [0075.912] ReadFile (in: hFile=0x444, lpBuffer=0x222f9d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x222f9d8*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0076.060] CloseHandle (hObject=0x444) returned 1 [0076.060] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\revocations.txt", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\revocations.txt", lpFilePart=0x0) returned 0x5f [0076.060] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0076.060] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\revocations.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\revocations.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0076.061] GetFileType (hFile=0x444) returned 0x1 [0076.061] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0076.061] GetFileType (hFile=0x444) returned 0x1 [0076.061] WriteFile (in: hFile=0x444, lpBuffer=0x222d710*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x222d710*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0076.061] CloseHandle (hObject=0x444) returned 1 [0076.061] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\revocations.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\revocations.txt", lpFilePart=0x0) returned 0x5f [0076.061] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\revocations.txt.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\revocations.txt.xuy", lpFilePart=0x0) returned 0x63 [0076.061] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0076.061] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\revocations.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\revocations.txt"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0ba4336, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xd0ba4336, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x192f837a, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x53a6)) returned 1 [0076.061] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0076.061] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\revocations.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\revocations.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\revocations.txt.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\revocations.txt.xuy")) returned 1 [0076.062] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\search.json.mozlz4", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\search.json.mozlz4", lpFilePart=0x0) returned 0x62 [0076.062] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0076.062] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\search.json.mozlz4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\search.json.mozlz4"), fInfoLevelId=0x0, lpFileInformation=0x22abe30 | out: lpFileInformation=0x22abe30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c0b8aba, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3c0b8aba, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x3c0bb1cd, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x62cf)) returned 1 [0076.063] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0076.063] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\search.json.mozlz4", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\search.json.mozlz4", lpFilePart=0x0) returned 0x62 [0076.063] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0076.063] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\search.json.mozlz4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\search.json.mozlz4"), fInfoLevelId=0x0, lpFileInformation=0x22abfb8 | out: lpFileInformation=0x22abfb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c0b8aba, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3c0b8aba, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x3c0bb1cd, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x62cf)) returned 1 [0076.064] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0076.064] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\search.json.mozlz4", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\search.json.mozlz4", lpFilePart=0x0) returned 0x62 [0076.064] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0076.064] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\search.json.mozlz4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\search.json.mozlz4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0076.064] GetFileType (hFile=0x444) returned 0x1 [0076.064] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0076.064] GetFileType (hFile=0x444) returned 0x1 [0076.064] ReadFile (in: hFile=0x444, lpBuffer=0x22ae3f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x22ae3f8*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0076.168] CloseHandle (hObject=0x444) returned 1 [0076.217] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\search.json.mozlz4", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\search.json.mozlz4", lpFilePart=0x0) returned 0x62 [0076.217] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0076.217] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\search.json.mozlz4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\search.json.mozlz4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0076.217] GetFileType (hFile=0x444) returned 0x1 [0076.217] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0076.217] GetFileType (hFile=0x444) returned 0x1 [0076.217] WriteFile (in: hFile=0x444, lpBuffer=0x22ac120*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x22ac120*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0076.218] CloseHandle (hObject=0x444) returned 1 [0076.218] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\search.json.mozlz4", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\search.json.mozlz4", lpFilePart=0x0) returned 0x62 [0076.218] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\search.json.mozlz4.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\search.json.mozlz4.xuy", lpFilePart=0x0) returned 0x66 [0076.218] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0076.218] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\search.json.mozlz4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\search.json.mozlz4"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c0b8aba, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3c0b8aba, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x19475a1c, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x62cf)) returned 1 [0076.218] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0076.218] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\search.json.mozlz4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\search.json.mozlz4"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\search.json.mozlz4.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\search.json.mozlz4.xuy")) returned 1 [0076.221] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\secmod.db", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\secmod.db", lpFilePart=0x0) returned 0x59 [0076.221] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0076.221] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\secmod.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\secmod.db"), fInfoLevelId=0x0, lpFileInformation=0x232a870 | out: lpFileInformation=0x232a870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39c84c55, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x39c84c55, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x39caaff7, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x4000)) returned 1 [0076.223] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0076.223] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\secmod.db", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\secmod.db", lpFilePart=0x0) returned 0x59 [0076.223] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0076.223] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\secmod.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\secmod.db"), fInfoLevelId=0x0, lpFileInformation=0x232a9d8 | out: lpFileInformation=0x232a9d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39c84c55, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x39c84c55, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x39caaff7, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x4000)) returned 1 [0076.223] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0076.223] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\secmod.db", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\secmod.db", lpFilePart=0x0) returned 0x59 [0076.223] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0076.223] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\secmod.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\secmod.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0076.224] GetFileType (hFile=0x444) returned 0x1 [0076.224] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0076.224] GetFileType (hFile=0x444) returned 0x1 [0076.224] ReadFile (in: hFile=0x444, lpBuffer=0x232cdd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x232cdd8*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0076.269] CloseHandle (hObject=0x444) returned 1 [0076.269] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\secmod.db", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\secmod.db", lpFilePart=0x0) returned 0x59 [0076.269] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0076.269] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\secmod.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\secmod.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0076.270] GetFileType (hFile=0x444) returned 0x1 [0076.270] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0076.270] GetFileType (hFile=0x444) returned 0x1 [0076.270] WriteFile (in: hFile=0x444, lpBuffer=0x215f790*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x215f790*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0076.270] CloseHandle (hObject=0x444) returned 1 [0076.270] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\secmod.db", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\secmod.db", lpFilePart=0x0) returned 0x59 [0076.270] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\secmod.db.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\secmod.db.xuy", lpFilePart=0x0) returned 0x5d [0076.270] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0076.270] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\secmod.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\secmod.db"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39c84c55, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x39c84c55, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x194e86d3, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x4000)) returned 1 [0076.271] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0076.271] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\secmod.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\secmod.db"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\secmod.db.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\secmod.db.xuy")) returned 1 [0076.271] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\SecurityPreloadState.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\SecurityPreloadState.txt", lpFilePart=0x0) returned 0x68 [0076.271] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0076.272] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\SecurityPreloadState.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\securitypreloadstate.txt"), fInfoLevelId=0x0, lpFileInformation=0x21ac180 | out: lpFileInformation=0x21ac180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb5d8c21, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xeb5d8c21, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x3c11fdf, ftLastWriteTime.dwHighDateTime=0x1d2d446, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0076.272] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0076.272] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\SecurityPreloadState.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\SecurityPreloadState.txt", lpFilePart=0x0) returned 0x68 [0076.272] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0076.272] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\SecurityPreloadState.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\securitypreloadstate.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0076.272] GetFileType (hFile=0x444) returned 0x1 [0076.272] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0076.272] GetFileType (hFile=0x444) returned 0x1 [0076.272] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x0 [0076.272] CloseHandle (hObject=0x444) returned 1 [0076.283] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\SecurityPreloadState.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\SecurityPreloadState.txt", lpFilePart=0x0) returned 0x68 [0076.283] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0076.283] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\SecurityPreloadState.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\securitypreloadstate.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0076.284] GetFileType (hFile=0x444) returned 0x1 [0076.284] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0076.284] GetFileType (hFile=0x444) returned 0x1 [0076.284] WriteFile (in: hFile=0x444, lpBuffer=0x2222630*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x2222630*, lpNumberOfBytesWritten=0x3be5b8*=0x10, lpOverlapped=0x0) returned 1 [0076.284] CloseHandle (hObject=0x444) returned 1 [0076.285] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\SecurityPreloadState.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\SecurityPreloadState.txt", lpFilePart=0x0) returned 0x68 [0076.285] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\SecurityPreloadState.txt.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\SecurityPreloadState.txt.xuy", lpFilePart=0x0) returned 0x6c [0076.285] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0076.285] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\SecurityPreloadState.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\securitypreloadstate.txt"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb5d8c21, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xeb5d8c21, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x1950e3e8, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0076.285] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0076.285] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\SecurityPreloadState.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\securitypreloadstate.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\SecurityPreloadState.txt.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\securitypreloadstate.txt.xuy")) returned 1 [0076.286] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionCheckpoints.json", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionCheckpoints.json", lpFilePart=0x0) returned 0x67 [0076.286] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0076.286] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionCheckpoints.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\sessioncheckpoints.json"), fInfoLevelId=0x0, lpFileInformation=0x2223970 | out: lpFileInformation=0x2223970*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39d5cde, ftCreationTime.dwHighDateTime=0x1d2d446, ftLastAccessTime.dwLowDateTime=0x3c11fdf, ftLastAccessTime.dwHighDateTime=0x1d2d446, ftLastWriteTime.dwLowDateTime=0x3c11fdf, ftLastWriteTime.dwHighDateTime=0x1d2d446, nFileSizeHigh=0x0, nFileSizeLow=0x120)) returned 1 [0076.287] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0076.287] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionCheckpoints.json", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionCheckpoints.json", lpFilePart=0x0) returned 0x67 [0076.287] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0076.287] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionCheckpoints.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\sessioncheckpoints.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0076.287] GetFileType (hFile=0x444) returned 0x1 [0076.287] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0076.287] GetFileType (hFile=0x444) returned 0x1 [0076.287] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x120 [0076.287] ReadFile (in: hFile=0x444, lpBuffer=0x2223dd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x2223dd8*, lpNumberOfBytesRead=0x3be6a8*=0x120, lpOverlapped=0x0) returned 1 [0076.288] CloseHandle (hObject=0x444) returned 1 [0076.301] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionCheckpoints.json", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionCheckpoints.json", lpFilePart=0x0) returned 0x67 [0076.301] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0076.301] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionCheckpoints.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\sessioncheckpoints.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0076.302] GetFileType (hFile=0x444) returned 0x1 [0076.302] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0076.302] GetFileType (hFile=0x444) returned 0x1 [0076.302] WriteFile (in: hFile=0x444, lpBuffer=0x229b3f8*, nNumberOfBytesToWrite=0x130, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x229b3f8*, lpNumberOfBytesWritten=0x3be5b8*=0x130, lpOverlapped=0x0) returned 1 [0076.303] CloseHandle (hObject=0x444) returned 1 [0076.303] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionCheckpoints.json", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionCheckpoints.json", lpFilePart=0x0) returned 0x67 [0076.303] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionCheckpoints.json.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionCheckpoints.json.xuy", lpFilePart=0x0) returned 0x6b [0076.303] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0076.303] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionCheckpoints.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\sessioncheckpoints.json"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39d5cde, ftCreationTime.dwHighDateTime=0x1d2d446, ftLastAccessTime.dwLowDateTime=0x3c11fdf, ftLastAccessTime.dwHighDateTime=0x1d2d446, ftLastWriteTime.dwLowDateTime=0x195345a9, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x130)) returned 1 [0076.303] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0076.303] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionCheckpoints.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\sessioncheckpoints.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionCheckpoints.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\sessioncheckpoints.json.xuy")) returned 1 [0076.304] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionstore.js", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionstore.js", lpFilePart=0x0) returned 0x5f [0076.304] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0076.304] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionstore.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\sessionstore.js"), fInfoLevelId=0x0, lpFileInformation=0x229c718 | out: lpFileInformation=0x229c718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a22169, ftCreationTime.dwHighDateTime=0x1d2d446, ftLastAccessTime.dwLowDateTime=0x3a22169, ftLastAccessTime.dwHighDateTime=0x1d2d446, ftLastWriteTime.dwLowDateTime=0x3a22169, ftLastWriteTime.dwHighDateTime=0x1d2d446, nFileSizeHigh=0x0, nFileSizeLow=0x3da)) returned 1 [0076.306] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0076.306] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionstore.js", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionstore.js", lpFilePart=0x0) returned 0x5f [0076.306] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0076.306] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionstore.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\sessionstore.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0076.306] GetFileType (hFile=0x444) returned 0x1 [0076.306] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0076.306] GetFileType (hFile=0x444) returned 0x1 [0076.306] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x3da [0076.306] ReadFile (in: hFile=0x444, lpBuffer=0x229ce00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x229ce00*, lpNumberOfBytesRead=0x3be6a8*=0x3da, lpOverlapped=0x0) returned 1 [0076.331] CloseHandle (hObject=0x444) returned 1 [0076.343] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionstore.js", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionstore.js", lpFilePart=0x0) returned 0x5f [0076.343] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0076.343] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionstore.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\sessionstore.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0076.344] GetFileType (hFile=0x444) returned 0x1 [0076.344] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0076.344] GetFileType (hFile=0x444) returned 0x1 [0076.344] WriteFile (in: hFile=0x444, lpBuffer=0x2315168*, nNumberOfBytesToWrite=0x3e0, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x2315168*, lpNumberOfBytesWritten=0x3be5b8*=0x3e0, lpOverlapped=0x0) returned 1 [0076.345] CloseHandle (hObject=0x444) returned 1 [0076.345] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionstore.js", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionstore.js", lpFilePart=0x0) returned 0x5f [0076.345] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionstore.js.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionstore.js.xuy", lpFilePart=0x0) returned 0x63 [0076.345] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0076.345] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionstore.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\sessionstore.js"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a22169, ftCreationTime.dwHighDateTime=0x1d2d446, ftLastAccessTime.dwLowDateTime=0x3a22169, ftLastAccessTime.dwHighDateTime=0x1d2d446, ftLastWriteTime.dwLowDateTime=0x195a6d73, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x3e0)) returned 1 [0076.345] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0076.345] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionstore.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\sessionstore.js"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionstore.js.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\sessionstore.js.xuy")) returned 1 [0076.346] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\SiteSecurityServiceState.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\SiteSecurityServiceState.txt", lpFilePart=0x0) returned 0x6c [0076.346] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0076.346] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\SiteSecurityServiceState.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\sitesecurityservicestate.txt"), fInfoLevelId=0x0, lpFileInformation=0x2316460 | out: lpFileInformation=0x2316460*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb5e4ee6, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xeb5e4ee6, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x3c38247, ftLastWriteTime.dwHighDateTime=0x1d2d446, nFileSizeHigh=0x0, nFileSizeLow=0x788)) returned 1 [0076.347] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0076.347] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\SiteSecurityServiceState.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\SiteSecurityServiceState.txt", lpFilePart=0x0) returned 0x6c [0076.347] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0076.347] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\SiteSecurityServiceState.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\sitesecurityservicestate.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0076.347] GetFileType (hFile=0x444) returned 0x1 [0076.347] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0076.347] GetFileType (hFile=0x444) returned 0x1 [0076.347] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x788 [0076.347] ReadFile (in: hFile=0x444, lpBuffer=0x2316f70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x2316f70*, lpNumberOfBytesRead=0x3be6a8*=0x788, lpOverlapped=0x0) returned 1 [0076.363] CloseHandle (hObject=0x444) returned 1 [0076.411] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\SiteSecurityServiceState.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\SiteSecurityServiceState.txt", lpFilePart=0x0) returned 0x6c [0076.411] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0076.411] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\SiteSecurityServiceState.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\sitesecurityservicestate.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0076.413] GetFileType (hFile=0x444) returned 0x1 [0076.413] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0076.413] GetFileType (hFile=0x444) returned 0x1 [0076.413] WriteFile (in: hFile=0x444, lpBuffer=0x218db30*, nNumberOfBytesToWrite=0x790, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x218db30*, lpNumberOfBytesWritten=0x3be5b8*=0x790, lpOverlapped=0x0) returned 1 [0076.414] CloseHandle (hObject=0x444) returned 1 [0076.414] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\SiteSecurityServiceState.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\SiteSecurityServiceState.txt", lpFilePart=0x0) returned 0x6c [0076.414] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\SiteSecurityServiceState.txt.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\SiteSecurityServiceState.txt.xuy", lpFilePart=0x0) returned 0x70 [0076.414] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0076.414] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\SiteSecurityServiceState.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\sitesecurityservicestate.txt"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb5e4ee6, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xeb5e4ee6, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x1963f736, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x790)) returned 1 [0076.414] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0076.415] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\SiteSecurityServiceState.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\sitesecurityservicestate.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\SiteSecurityServiceState.txt.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\sitesecurityservicestate.txt.xuy")) returned 1 [0076.415] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage.sqlite", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage.sqlite", lpFilePart=0x0) returned 0x5e [0076.416] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0076.416] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage.sqlite" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\storage.sqlite"), fInfoLevelId=0x0, lpFileInformation=0x218ee88 | out: lpFileInformation=0x218ee88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bcf1d4b, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3bcf1d4b, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x3c12b6ee, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x200)) returned 1 [0076.417] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0076.417] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage.sqlite", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage.sqlite", lpFilePart=0x0) returned 0x5e [0076.417] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0076.417] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage.sqlite" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\storage.sqlite"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0076.417] GetFileType (hFile=0x444) returned 0x1 [0076.417] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0076.417] GetFileType (hFile=0x444) returned 0x1 [0076.417] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x200 [0076.417] ReadFile (in: hFile=0x444, lpBuffer=0x218f390, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x218f390*, lpNumberOfBytesRead=0x3be6a8*=0x200, lpOverlapped=0x0) returned 1 [0076.420] CloseHandle (hObject=0x444) returned 1 [0076.434] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage.sqlite", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage.sqlite", lpFilePart=0x0) returned 0x5e [0076.434] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0076.435] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage.sqlite" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\storage.sqlite"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0076.436] GetFileType (hFile=0x444) returned 0x1 [0076.436] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0076.436] GetFileType (hFile=0x444) returned 0x1 [0076.436] WriteFile (in: hFile=0x444, lpBuffer=0x2206df0*, nNumberOfBytesToWrite=0x210, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x2206df0*, lpNumberOfBytesWritten=0x3be5b8*=0x210, lpOverlapped=0x0) returned 1 [0076.437] CloseHandle (hObject=0x444) returned 1 [0076.437] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage.sqlite", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage.sqlite", lpFilePart=0x0) returned 0x5e [0076.437] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage.sqlite.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage.sqlite.xuy", lpFilePart=0x0) returned 0x62 [0076.437] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0076.437] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage.sqlite" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\storage.sqlite"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bcf1d4b, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3bcf1d4b, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x1968bc9b, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x210)) returned 1 [0076.437] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0076.437] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage.sqlite" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\storage.sqlite"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage.sqlite.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\storage.sqlite.xuy")) returned 1 [0076.438] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\times.json", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\times.json", lpFilePart=0x0) returned 0x5a [0076.438] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0076.438] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\times.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\times.json"), fInfoLevelId=0x0, lpFileInformation=0x22080e8 | out: lpFileInformation=0x22080e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24f48bbb, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x24f48bbb, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x24f48bbb, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x1d)) returned 1 [0076.438] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0076.438] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\times.json", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\times.json", lpFilePart=0x0) returned 0x5a [0076.438] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0076.438] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\times.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\times.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0076.438] GetFileType (hFile=0x444) returned 0x1 [0076.438] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0076.439] GetFileType (hFile=0x444) returned 0x1 [0076.439] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x1d [0076.439] ReadFile (in: hFile=0x444, lpBuffer=0x22083f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x22083f0*, lpNumberOfBytesRead=0x3be6a8*=0x1d, lpOverlapped=0x0) returned 1 [0076.439] CloseHandle (hObject=0x444) returned 1 [0076.450] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\times.json", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\times.json", lpFilePart=0x0) returned 0x5a [0076.450] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0076.450] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\times.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\times.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0076.452] GetFileType (hFile=0x444) returned 0x1 [0076.452] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0076.452] GetFileType (hFile=0x444) returned 0x1 [0076.452] WriteFile (in: hFile=0x444, lpBuffer=0x227f540*, nNumberOfBytesToWrite=0x20, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x227f540*, lpNumberOfBytesWritten=0x3be5b8*=0x20, lpOverlapped=0x0) returned 1 [0076.453] CloseHandle (hObject=0x444) returned 1 [0076.453] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\times.json", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\times.json", lpFilePart=0x0) returned 0x5a [0076.453] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\times.json.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\times.json.xuy", lpFilePart=0x0) returned 0x5e [0076.453] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0076.453] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\times.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\times.json"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24f48bbb, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x24f48bbb, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x196b1e8e, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x20)) returned 1 [0076.453] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0076.453] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\times.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\times.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\times.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\times.json.xuy")) returned 1 [0076.454] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\webappsstore.sqlite", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\webappsstore.sqlite", lpFilePart=0x0) returned 0x63 [0076.454] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0076.454] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\webappsstore.sqlite" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\webappsstore.sqlite"), fInfoLevelId=0x0, lpFileInformation=0x2280820 | out: lpFileInformation=0x2280820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c26b459, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3c26b459, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x3e9a96f, ftLastWriteTime.dwHighDateTime=0x1d2d446, nFileSizeHigh=0x0, nFileSizeLow=0x18000)) returned 1 [0076.455] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0076.455] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\webappsstore.sqlite", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\webappsstore.sqlite", lpFilePart=0x0) returned 0x63 [0076.455] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0076.455] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\webappsstore.sqlite" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\webappsstore.sqlite"), fInfoLevelId=0x0, lpFileInformation=0x22809a8 | out: lpFileInformation=0x22809a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c26b459, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3c26b459, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x3e9a96f, ftLastWriteTime.dwHighDateTime=0x1d2d446, nFileSizeHigh=0x0, nFileSizeLow=0x18000)) returned 1 [0076.455] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0076.455] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\webappsstore.sqlite", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\webappsstore.sqlite", lpFilePart=0x0) returned 0x63 [0076.455] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0076.455] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\webappsstore.sqlite" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\webappsstore.sqlite"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0076.456] GetFileType (hFile=0x444) returned 0x1 [0076.456] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0076.456] GetFileType (hFile=0x444) returned 0x1 [0076.456] ReadFile (in: hFile=0x444, lpBuffer=0x2282de8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x2282de8*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0076.483] CloseHandle (hObject=0x444) returned 1 [0076.484] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\webappsstore.sqlite", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\webappsstore.sqlite", lpFilePart=0x0) returned 0x63 [0076.485] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0076.485] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\webappsstore.sqlite" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\webappsstore.sqlite"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0076.485] GetFileType (hFile=0x444) returned 0x1 [0076.485] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0076.485] GetFileType (hFile=0x444) returned 0x1 [0076.485] WriteFile (in: hFile=0x444, lpBuffer=0x2280b10*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x2280b10*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0076.485] CloseHandle (hObject=0x444) returned 1 [0076.485] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\webappsstore.sqlite", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\webappsstore.sqlite", lpFilePart=0x0) returned 0x63 [0076.486] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\webappsstore.sqlite.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\webappsstore.sqlite.xuy", lpFilePart=0x0) returned 0x67 [0076.486] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0076.486] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\webappsstore.sqlite" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\webappsstore.sqlite"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c26b459, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3c26b459, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x196fe52f, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x18000)) returned 1 [0076.486] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0076.486] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\webappsstore.sqlite" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\webappsstore.sqlite"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\webappsstore.sqlite.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\webappsstore.sqlite.xuy")) returned 1 [0076.487] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\xulstore.json", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\xulstore.json", lpFilePart=0x0) returned 0x5d [0076.487] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0076.487] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\xulstore.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\xulstore.json"), fInfoLevelId=0x0, lpFileInformation=0x22ff268 | out: lpFileInformation=0x22ff268*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb9d4caa, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0xeb9d4caa, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0xeb9d4caa, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0x333)) returned 1 [0076.487] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0076.487] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\xulstore.json", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\xulstore.json", lpFilePart=0x0) returned 0x5d [0076.487] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0076.487] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\xulstore.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\xulstore.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0076.487] GetFileType (hFile=0x444) returned 0x1 [0076.487] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0076.487] GetFileType (hFile=0x444) returned 0x1 [0076.487] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x333 [0076.487] ReadFile (in: hFile=0x444, lpBuffer=0x22ff8a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x22ff8a8*, lpNumberOfBytesRead=0x3be6a8*=0x333, lpOverlapped=0x0) returned 1 [0076.507] CloseHandle (hObject=0x444) returned 1 [0076.572] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\xulstore.json", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\xulstore.json", lpFilePart=0x0) returned 0x5d [0076.572] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0076.572] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\xulstore.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\xulstore.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0076.576] GetFileType (hFile=0x444) returned 0x1 [0076.576] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0076.576] GetFileType (hFile=0x444) returned 0x1 [0076.576] WriteFile (in: hFile=0x444, lpBuffer=0x21774c0*, nNumberOfBytesToWrite=0x340, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x21774c0*, lpNumberOfBytesWritten=0x3be5b8*=0x340, lpOverlapped=0x0) returned 1 [0076.577] CloseHandle (hObject=0x444) returned 1 [0076.577] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\xulstore.json", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\xulstore.json", lpFilePart=0x0) returned 0x5d [0076.577] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\xulstore.json.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\xulstore.json.xuy", lpFilePart=0x0) returned 0x61 [0076.578] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0076.578] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\xulstore.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\xulstore.json"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb9d4caa, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0xeb9d4caa, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x197e315b, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x340)) returned 1 [0076.578] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0076.578] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\xulstore.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\xulstore.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\xulstore.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\xulstore.json.xuy")) returned 1 [0076.579] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0076.579] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\bookmarkbackups", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\bookmarkbackups", lpFilePart=0x0) returned 0x5f [0076.579] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\bookmarkbackups\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\bookmarkbackups\\", lpFilePart=0x0) returned 0x60 [0076.579] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\bookmarkbackups\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d7fd0 [0076.579] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0076.579] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0076.579] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0076.580] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0076.580] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0076.580] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0076.580] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0076.580] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\bookmarkbackups", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\bookmarkbackups", lpFilePart=0x0) returned 0x5f [0076.580] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\bookmarkbackups\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\bookmarkbackups\\", lpFilePart=0x0) returned 0x60 [0076.580] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\bookmarkbackups\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d78b0 [0076.580] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0076.580] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0076.581] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0076.581] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0076.581] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0076.581] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0076.581] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\bookmarkbackups\\bookmarks-2017-05-24_14_kL0o5I+exwq3TXuLDkMF9w==.jsonlz4", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\bookmarkbackups\\bookmarks-2017-05-24_14_kL0o5I+exwq3TXuLDkMF9w==.jsonlz4", lpFilePart=0x0) returned 0x98 [0076.581] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0076.581] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\bookmarkbackups\\bookmarks-2017-05-24_14_kL0o5I+exwq3TXuLDkMF9w==.jsonlz4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\bookmarkbackups\\bookmarks-2017-05-24_14_kl0o5i+exwq3txuldkmf9w==.jsonlz4"), fInfoLevelId=0x0, lpFileInformation=0x217afa8 | out: lpFileInformation=0x217afa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1e13f83, ftCreationTime.dwHighDateTime=0x1d2d444, ftLastAccessTime.dwLowDateTime=0xb1e13f83, ftLastAccessTime.dwHighDateTime=0x1d2d444, ftLastWriteTime.dwLowDateTime=0xb1e13f83, ftLastWriteTime.dwHighDateTime=0x1d2d444, nFileSizeHigh=0x0, nFileSizeLow=0x559)) returned 1 [0076.582] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0076.582] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\bookmarkbackups\\bookmarks-2017-05-24_14_kL0o5I+exwq3TXuLDkMF9w==.jsonlz4", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\bookmarkbackups\\bookmarks-2017-05-24_14_kL0o5I+exwq3TXuLDkMF9w==.jsonlz4", lpFilePart=0x0) returned 0x98 [0076.582] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0076.582] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\bookmarkbackups\\bookmarks-2017-05-24_14_kL0o5I+exwq3TXuLDkMF9w==.jsonlz4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\bookmarkbackups\\bookmarks-2017-05-24_14_kl0o5i+exwq3txuldkmf9w==.jsonlz4"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0076.583] GetFileType (hFile=0x444) returned 0x1 [0076.583] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0076.583] GetFileType (hFile=0x444) returned 0x1 [0076.583] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be708 | out: lpFileSizeHigh=0x3be708*=0x0) returned 0x559 [0076.583] ReadFile (in: hFile=0x444, lpBuffer=0x217b9b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be638, lpOverlapped=0x0 | out: lpBuffer=0x217b9b0*, lpNumberOfBytesRead=0x3be638*=0x559, lpOverlapped=0x0) returned 1 [0076.608] CloseHandle (hObject=0x444) returned 1 [0076.624] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\bookmarkbackups\\bookmarks-2017-05-24_14_kL0o5I+exwq3TXuLDkMF9w==.jsonlz4", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\bookmarkbackups\\bookmarks-2017-05-24_14_kL0o5I+exwq3TXuLDkMF9w==.jsonlz4", lpFilePart=0x0) returned 0x98 [0076.624] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0076.624] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\bookmarkbackups\\bookmarks-2017-05-24_14_kL0o5I+exwq3TXuLDkMF9w==.jsonlz4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\bookmarkbackups\\bookmarks-2017-05-24_14_kl0o5i+exwq3txuldkmf9w==.jsonlz4"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0076.626] GetFileType (hFile=0x444) returned 0x1 [0076.626] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0076.626] GetFileType (hFile=0x444) returned 0x1 [0076.626] WriteFile (in: hFile=0x444, lpBuffer=0x21f4568*, nNumberOfBytesToWrite=0x560, lpNumberOfBytesWritten=0x3be548, lpOverlapped=0x0 | out: lpBuffer=0x21f4568*, lpNumberOfBytesWritten=0x3be548*=0x560, lpOverlapped=0x0) returned 1 [0076.627] CloseHandle (hObject=0x444) returned 1 [0076.627] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\bookmarkbackups\\bookmarks-2017-05-24_14_kL0o5I+exwq3TXuLDkMF9w==.jsonlz4", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\bookmarkbackups\\bookmarks-2017-05-24_14_kL0o5I+exwq3TXuLDkMF9w==.jsonlz4", lpFilePart=0x0) returned 0x98 [0076.627] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\bookmarkbackups\\bookmarks-2017-05-24_14_kL0o5I+exwq3TXuLDkMF9w==.jsonlz4.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\bookmarkbackups\\bookmarks-2017-05-24_14_kL0o5I+exwq3TXuLDkMF9w==.jsonlz4.xuy", lpFilePart=0x0) returned 0x9c [0076.627] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0076.627] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\bookmarkbackups\\bookmarks-2017-05-24_14_kL0o5I+exwq3TXuLDkMF9w==.jsonlz4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\bookmarkbackups\\bookmarks-2017-05-24_14_kl0o5i+exwq3txuldkmf9w==.jsonlz4"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1e13f83, ftCreationTime.dwHighDateTime=0x1d2d444, ftLastAccessTime.dwLowDateTime=0xb1e13f83, ftLastAccessTime.dwHighDateTime=0x1d2d444, ftLastWriteTime.dwLowDateTime=0x198559ac, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x560)) returned 1 [0076.627] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0076.628] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\bookmarkbackups\\bookmarks-2017-05-24_14_kL0o5I+exwq3TXuLDkMF9w==.jsonlz4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\bookmarkbackups\\bookmarks-2017-05-24_14_kl0o5i+exwq3txuldkmf9w==.jsonlz4"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\bookmarkbackups\\bookmarks-2017-05-24_14_kL0o5I+exwq3TXuLDkMF9w==.jsonlz4.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\bookmarkbackups\\bookmarks-2017-05-24_14_kl0o5i+exwq3txuldkmf9w==.jsonlz4.xuy")) returned 1 [0076.628] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0076.628] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\crashes", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\crashes", lpFilePart=0x0) returned 0x57 [0076.629] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\crashes\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\crashes\\", lpFilePart=0x0) returned 0x58 [0076.629] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\crashes\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d79d0 [0076.629] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0076.629] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0076.629] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0076.629] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0076.630] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0076.630] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0076.630] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0076.630] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0076.630] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\crashes", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\crashes", lpFilePart=0x0) returned 0x57 [0076.630] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\crashes\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\crashes\\", lpFilePart=0x0) returned 0x58 [0076.630] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\crashes\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d7a90 [0076.630] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0076.630] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0076.630] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0076.631] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0076.631] FindClose (in: hFindFile=0x5d7a90 | out: hFindFile=0x5d7a90) returned 1 [0076.631] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0076.631] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0076.631] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\crashes\\store.json.mozlz4", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\crashes\\store.json.mozlz4", lpFilePart=0x0) returned 0x69 [0076.631] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0076.631] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\crashes\\store.json.mozlz4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\crashes\\store.json.mozlz4"), fInfoLevelId=0x0, lpFileInformation=0x21f8230 | out: lpFileInformation=0x21f8230*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92cf99e1, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x92cf99e1, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x92cf99e1, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0x42)) returned 1 [0076.632] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0076.632] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\crashes\\store.json.mozlz4", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\crashes\\store.json.mozlz4", lpFilePart=0x0) returned 0x69 [0076.632] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0076.632] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\crashes\\store.json.mozlz4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\crashes\\store.json.mozlz4"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0076.632] GetFileType (hFile=0x444) returned 0x1 [0076.632] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0076.632] GetFileType (hFile=0x444) returned 0x1 [0076.632] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be708 | out: lpFileSizeHigh=0x3be708*=0x0) returned 0x42 [0076.632] ReadFile (in: hFile=0x444, lpBuffer=0x21f85c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be638, lpOverlapped=0x0 | out: lpBuffer=0x21f85c0*, lpNumberOfBytesRead=0x3be638*=0x42, lpOverlapped=0x0) returned 1 [0076.634] CloseHandle (hObject=0x444) returned 1 [0076.650] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\crashes\\store.json.mozlz4", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\crashes\\store.json.mozlz4", lpFilePart=0x0) returned 0x69 [0076.650] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0076.650] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\crashes\\store.json.mozlz4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\crashes\\store.json.mozlz4"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0076.653] GetFileType (hFile=0x444) returned 0x1 [0076.653] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0076.653] GetFileType (hFile=0x444) returned 0x1 [0076.653] WriteFile (in: hFile=0x444, lpBuffer=0x226f7a8*, nNumberOfBytesToWrite=0x50, lpNumberOfBytesWritten=0x3be548, lpOverlapped=0x0 | out: lpBuffer=0x226f7a8*, lpNumberOfBytesWritten=0x3be548*=0x50, lpOverlapped=0x0) returned 1 [0076.654] CloseHandle (hObject=0x444) returned 1 [0076.654] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\crashes\\store.json.mozlz4", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\crashes\\store.json.mozlz4", lpFilePart=0x0) returned 0x69 [0076.654] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\crashes\\store.json.mozlz4.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\crashes\\store.json.mozlz4.xuy", lpFilePart=0x0) returned 0x6d [0076.654] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0076.654] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\crashes\\store.json.mozlz4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\crashes\\store.json.mozlz4"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92cf99e1, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x92cf99e1, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x198a1cd8, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x50)) returned 1 [0076.655] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0076.655] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\crashes\\store.json.mozlz4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\crashes\\store.json.mozlz4"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\crashes\\store.json.mozlz4.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\crashes\\store.json.mozlz4.xuy")) returned 1 [0076.655] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0076.655] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\crashes\\events", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\crashes\\events", lpFilePart=0x0) returned 0x5e [0076.655] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\crashes\\events\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\crashes\\events\\", lpFilePart=0x0) returned 0x5f [0076.655] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\crashes\\events\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d7370 [0076.656] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0076.656] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0076.656] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0076.656] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0076.656] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0076.656] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0076.656] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\crashes\\events", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\crashes\\events", lpFilePart=0x0) returned 0x5e [0076.656] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\crashes\\events\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\crashes\\events\\", lpFilePart=0x0) returned 0x5f [0076.656] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\crashes\\events\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d73d0 [0076.656] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0076.657] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0076.657] FindClose (in: hFindFile=0x5d73d0 | out: hFindFile=0x5d73d0) returned 1 [0076.657] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0076.657] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0076.657] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0076.657] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting", lpFilePart=0x0) returned 0x5d [0076.657] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\", lpFilePart=0x0) returned 0x5e [0076.657] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d79d0 [0076.676] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0076.677] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0076.677] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0076.677] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0076.677] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0076.677] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0076.678] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0076.678] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0076.678] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0076.678] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting", lpFilePart=0x0) returned 0x5d [0076.678] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\", lpFilePart=0x0) returned 0x5e [0076.678] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d7e50 [0076.679] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0076.679] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0076.679] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0076.680] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0076.680] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0076.680] FindClose (in: hFindFile=0x5d7e50 | out: hFindFile=0x5d7e50) returned 1 [0076.681] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0076.681] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0076.681] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\session-state.json", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\session-state.json", lpFilePart=0x0) returned 0x70 [0076.681] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0076.681] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\session-state.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\datareporting\\session-state.json"), fInfoLevelId=0x0, lpFileInformation=0x2275990 | out: lpFileInformation=0x2275990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94a24ef4, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x94a24ef4, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x94a24ef4, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0x87)) returned 1 [0076.711] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0076.711] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\session-state.json", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\session-state.json", lpFilePart=0x0) returned 0x70 [0076.711] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0076.711] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\session-state.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\datareporting\\session-state.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0076.712] GetFileType (hFile=0x444) returned 0x1 [0076.712] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0076.712] GetFileType (hFile=0x444) returned 0x1 [0076.712] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be708 | out: lpFileSizeHigh=0x3be708*=0x0) returned 0x87 [0076.712] ReadFile (in: hFile=0x444, lpBuffer=0x2275d80, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be638, lpOverlapped=0x0 | out: lpBuffer=0x2275d80*, lpNumberOfBytesRead=0x3be638*=0x87, lpOverlapped=0x0) returned 1 [0076.713] CloseHandle (hObject=0x444) returned 1 [0076.728] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\session-state.json", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\session-state.json", lpFilePart=0x0) returned 0x70 [0076.728] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0076.728] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\session-state.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\datareporting\\session-state.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0076.732] GetFileType (hFile=0x444) returned 0x1 [0076.732] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0076.732] GetFileType (hFile=0x444) returned 0x1 [0076.732] WriteFile (in: hFile=0x444, lpBuffer=0x22ecff8*, nNumberOfBytesToWrite=0x90, lpNumberOfBytesWritten=0x3be548, lpOverlapped=0x0 | out: lpBuffer=0x22ecff8*, lpNumberOfBytesWritten=0x3be548*=0x90, lpOverlapped=0x0) returned 1 [0076.733] CloseHandle (hObject=0x444) returned 1 [0076.733] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\session-state.json", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\session-state.json", lpFilePart=0x0) returned 0x70 [0076.733] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\session-state.json.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\session-state.json.xuy", lpFilePart=0x0) returned 0x74 [0076.733] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0076.733] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\session-state.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\datareporting\\session-state.json"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94a24ef4, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x94a24ef4, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x19960846, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x90)) returned 1 [0076.733] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0076.733] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\session-state.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\datareporting\\session-state.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\session-state.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\datareporting\\session-state.json.xuy")) returned 1 [0076.734] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\state.json", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\state.json", lpFilePart=0x0) returned 0x68 [0076.734] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0076.734] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\state.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\datareporting\\state.json"), fInfoLevelId=0x0, lpFileInformation=0x22ee368 | out: lpFileInformation=0x22ee368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dc40eaf, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x5dc40eaf, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x5dc435b9, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x33)) returned 1 [0076.736] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0076.736] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\state.json", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\state.json", lpFilePart=0x0) returned 0x68 [0076.736] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0076.736] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\state.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\datareporting\\state.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0076.736] GetFileType (hFile=0x444) returned 0x1 [0076.736] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0076.736] GetFileType (hFile=0x444) returned 0x1 [0076.736] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be708 | out: lpFileSizeHigh=0x3be708*=0x0) returned 0x33 [0076.736] ReadFile (in: hFile=0x444, lpBuffer=0x22ee6c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be638, lpOverlapped=0x0 | out: lpBuffer=0x22ee6c8*, lpNumberOfBytesRead=0x3be638*=0x33, lpOverlapped=0x0) returned 1 [0076.737] CloseHandle (hObject=0x444) returned 1 [0076.787] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\state.json", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\state.json", lpFilePart=0x0) returned 0x68 [0076.787] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0076.787] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\state.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\datareporting\\state.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0076.789] GetFileType (hFile=0x444) returned 0x1 [0076.789] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0076.789] GetFileType (hFile=0x444) returned 0x1 [0076.789] WriteFile (in: hFile=0x444, lpBuffer=0x213f858*, nNumberOfBytesToWrite=0x40, lpNumberOfBytesWritten=0x3be548, lpOverlapped=0x0 | out: lpBuffer=0x213f858*, lpNumberOfBytesWritten=0x3be548*=0x40, lpOverlapped=0x0) returned 1 [0076.790] CloseHandle (hObject=0x444) returned 1 [0076.790] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\state.json", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\state.json", lpFilePart=0x0) returned 0x68 [0076.790] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\state.json.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\state.json.xuy", lpFilePart=0x0) returned 0x6c [0076.790] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0076.790] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\state.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\datareporting\\state.json"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dc40eaf, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x5dc40eaf, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x199d302b, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x40)) returned 1 [0076.790] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0076.790] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\state.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\datareporting\\state.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\state.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\datareporting\\state.json.xuy")) returned 1 [0076.792] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0076.792] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived", lpFilePart=0x0) returned 0x66 [0076.792] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\", lpFilePart=0x0) returned 0x67 [0076.792] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d78b0 [0076.794] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0076.794] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0076.795] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0076.795] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0076.795] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0076.795] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0076.795] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0076.795] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived", lpFilePart=0x0) returned 0x66 [0076.795] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\", lpFilePart=0x0) returned 0x67 [0076.795] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d7c70 [0076.795] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0076.796] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0076.796] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0076.796] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0076.796] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0076.796] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0076.796] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0076.796] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05", nBufferLength=0x105, lpBuffer=0x3be130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05", lpFilePart=0x0) returned 0x6e [0076.796] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\", nBufferLength=0x105, lpBuffer=0x3be0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\", lpFilePart=0x0) returned 0x6f [0076.796] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\*", lpFindFileData=0x3be2e0 | out: lpFindFileData=0x3be2e0) returned 0x5d7eb0 [0076.811] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0076.811] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0076.812] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0076.812] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0076.812] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0076.812] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0076.812] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0076.812] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0076.812] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 0 [0076.812] FindClose (in: hFindFile=0x5d7eb0 | out: hFindFile=0x5d7eb0) returned 1 [0076.813] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0076.813] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0076.813] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0076.813] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05", nBufferLength=0x105, lpBuffer=0x3be130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05", lpFilePart=0x0) returned 0x6e [0076.813] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\", nBufferLength=0x105, lpBuffer=0x3be0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\", lpFilePart=0x0) returned 0x6f [0076.814] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\*", lpFindFileData=0x3be2e0 | out: lpFindFileData=0x3be2e0) returned 0x5d7cd0 [0076.815] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0076.815] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0076.815] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0076.815] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0076.815] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0076.815] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0076.816] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0076.816] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0076.816] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 0 [0076.816] FindClose (in: hFindFile=0x5d7cd0 | out: hFindFile=0x5d7cd0) returned 1 [0076.817] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0076.817] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0076.817] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495592260754.fe0bc3a3-866c-458a-ad46-a730981653d6.main.jsonlz4", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495592260754.fe0bc3a3-866c-458a-ad46-a730981653d6.main.jsonlz4", lpFilePart=0x0) returned 0xae [0076.817] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0076.817] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495592260754.fe0bc3a3-866c-458a-ad46-a730981653d6.main.jsonlz4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495592260754.fe0bc3a3-866c-458a-ad46-a730981653d6.main.jsonlz4"), fInfoLevelId=0x0, lpFileInformation=0x2148ed0 | out: lpFileInformation=0x2148ed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb90f8ec, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xeb90f8ec, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xeb90f8ec, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x162b)) returned 1 [0076.819] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0076.819] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495592260754.fe0bc3a3-866c-458a-ad46-a730981653d6.main.jsonlz4", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495592260754.fe0bc3a3-866c-458a-ad46-a730981653d6.main.jsonlz4", lpFilePart=0x0) returned 0xae [0076.819] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0076.819] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495592260754.fe0bc3a3-866c-458a-ad46-a730981653d6.main.jsonlz4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495592260754.fe0bc3a3-866c-458a-ad46-a730981653d6.main.jsonlz4"), fInfoLevelId=0x0, lpFileInformation=0x2149148 | out: lpFileInformation=0x2149148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb90f8ec, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xeb90f8ec, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xeb90f8ec, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x162b)) returned 1 [0076.820] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0076.820] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495592260754.fe0bc3a3-866c-458a-ad46-a730981653d6.main.jsonlz4", nBufferLength=0x105, lpBuffer=0x3be040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495592260754.fe0bc3a3-866c-458a-ad46-a730981653d6.main.jsonlz4", lpFilePart=0x0) returned 0xae [0076.820] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0076.820] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495592260754.fe0bc3a3-866c-458a-ad46-a730981653d6.main.jsonlz4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495592260754.fe0bc3a3-866c-458a-ad46-a730981653d6.main.jsonlz4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0076.820] GetFileType (hFile=0x444) returned 0x1 [0076.820] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be490) returned 1 [0076.820] GetFileType (hFile=0x444) returned 0x1 [0076.820] ReadFile (in: hFile=0x444, lpBuffer=0x214b768, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5a8, lpOverlapped=0x0 | out: lpBuffer=0x214b768*, lpNumberOfBytesRead=0x3be5a8*=0x1000, lpOverlapped=0x0) returned 1 [0076.847] CloseHandle (hObject=0x444) returned 1 [0076.847] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495592260754.fe0bc3a3-866c-458a-ad46-a730981653d6.main.jsonlz4", nBufferLength=0x105, lpBuffer=0x3be040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495592260754.fe0bc3a3-866c-458a-ad46-a730981653d6.main.jsonlz4", lpFilePart=0x0) returned 0xae [0076.847] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0076.847] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495592260754.fe0bc3a3-866c-458a-ad46-a730981653d6.main.jsonlz4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495592260754.fe0bc3a3-866c-458a-ad46-a730981653d6.main.jsonlz4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0076.847] GetFileType (hFile=0x444) returned 0x1 [0076.847] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be490) returned 1 [0076.847] GetFileType (hFile=0x444) returned 0x1 [0076.847] WriteFile (in: hFile=0x444, lpBuffer=0x21493a0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be658, lpOverlapped=0x0 | out: lpBuffer=0x21493a0*, lpNumberOfBytesWritten=0x3be658*=0x2000, lpOverlapped=0x0) returned 1 [0076.848] CloseHandle (hObject=0x444) returned 1 [0076.848] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495592260754.fe0bc3a3-866c-458a-ad46-a730981653d6.main.jsonlz4", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495592260754.fe0bc3a3-866c-458a-ad46-a730981653d6.main.jsonlz4", lpFilePart=0x0) returned 0xae [0076.848] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495592260754.fe0bc3a3-866c-458a-ad46-a730981653d6.main.jsonlz4.xuy", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495592260754.fe0bc3a3-866c-458a-ad46-a730981653d6.main.jsonlz4.xuy", lpFilePart=0x0) returned 0xb2 [0076.848] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0076.848] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495592260754.fe0bc3a3-866c-458a-ad46-a730981653d6.main.jsonlz4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495592260754.fe0bc3a3-866c-458a-ad46-a730981653d6.main.jsonlz4"), fInfoLevelId=0x0, lpFileInformation=0x3be670 | out: lpFileInformation=0x3be670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb90f8ec, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xeb90f8ec, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x19a6bc41, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0076.848] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0076.848] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495592260754.fe0bc3a3-866c-458a-ad46-a730981653d6.main.jsonlz4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495592260754.fe0bc3a3-866c-458a-ad46-a730981653d6.main.jsonlz4"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495592260754.fe0bc3a3-866c-458a-ad46-a730981653d6.main.jsonlz4.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495592260754.fe0bc3a3-866c-458a-ad46-a730981653d6.main.jsonlz4.xuy")) returned 1 [0076.849] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495592289365.f6bd7dec-4421-47ce-b829-1080689ec7ca.main.jsonlz4", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495592289365.f6bd7dec-4421-47ce-b829-1080689ec7ca.main.jsonlz4", lpFilePart=0x0) returned 0xae [0076.849] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0076.849] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495592289365.f6bd7dec-4421-47ce-b829-1080689ec7ca.main.jsonlz4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495592289365.f6bd7dec-4421-47ce-b829-1080689ec7ca.main.jsonlz4"), fInfoLevelId=0x0, lpFileInformation=0x21c7ea8 | out: lpFileInformation=0x21c7ea8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc9d4bbf, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xfc9d4bbf, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xfc9d4bbf, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x137c)) returned 1 [0076.851] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0076.851] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495592289365.f6bd7dec-4421-47ce-b829-1080689ec7ca.main.jsonlz4", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495592289365.f6bd7dec-4421-47ce-b829-1080689ec7ca.main.jsonlz4", lpFilePart=0x0) returned 0xae [0076.851] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0076.851] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495592289365.f6bd7dec-4421-47ce-b829-1080689ec7ca.main.jsonlz4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495592289365.f6bd7dec-4421-47ce-b829-1080689ec7ca.main.jsonlz4"), fInfoLevelId=0x0, lpFileInformation=0x21c8120 | out: lpFileInformation=0x21c8120*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc9d4bbf, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xfc9d4bbf, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xfc9d4bbf, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x137c)) returned 1 [0076.851] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0076.851] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495592289365.f6bd7dec-4421-47ce-b829-1080689ec7ca.main.jsonlz4", nBufferLength=0x105, lpBuffer=0x3be040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495592289365.f6bd7dec-4421-47ce-b829-1080689ec7ca.main.jsonlz4", lpFilePart=0x0) returned 0xae [0076.851] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0076.851] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495592289365.f6bd7dec-4421-47ce-b829-1080689ec7ca.main.jsonlz4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495592289365.f6bd7dec-4421-47ce-b829-1080689ec7ca.main.jsonlz4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0076.852] GetFileType (hFile=0x444) returned 0x1 [0076.852] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be490) returned 1 [0076.852] GetFileType (hFile=0x444) returned 0x1 [0076.852] ReadFile (in: hFile=0x444, lpBuffer=0x21ca740, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5a8, lpOverlapped=0x0 | out: lpBuffer=0x21ca740*, lpNumberOfBytesRead=0x3be5a8*=0x1000, lpOverlapped=0x0) returned 1 [0076.884] CloseHandle (hObject=0x444) returned 1 [0076.897] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495592289365.f6bd7dec-4421-47ce-b829-1080689ec7ca.main.jsonlz4", nBufferLength=0x105, lpBuffer=0x3be040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495592289365.f6bd7dec-4421-47ce-b829-1080689ec7ca.main.jsonlz4", lpFilePart=0x0) returned 0xae [0076.897] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0076.897] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495592289365.f6bd7dec-4421-47ce-b829-1080689ec7ca.main.jsonlz4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495592289365.f6bd7dec-4421-47ce-b829-1080689ec7ca.main.jsonlz4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0076.897] GetFileType (hFile=0x444) returned 0x1 [0076.897] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be490) returned 1 [0076.897] GetFileType (hFile=0x444) returned 0x1 [0076.897] WriteFile (in: hFile=0x444, lpBuffer=0x21c8378*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be658, lpOverlapped=0x0 | out: lpBuffer=0x21c8378*, lpNumberOfBytesWritten=0x3be658*=0x2000, lpOverlapped=0x0) returned 1 [0076.897] CloseHandle (hObject=0x444) returned 1 [0076.897] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495592289365.f6bd7dec-4421-47ce-b829-1080689ec7ca.main.jsonlz4", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495592289365.f6bd7dec-4421-47ce-b829-1080689ec7ca.main.jsonlz4", lpFilePart=0x0) returned 0xae [0076.898] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495592289365.f6bd7dec-4421-47ce-b829-1080689ec7ca.main.jsonlz4.xuy", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495592289365.f6bd7dec-4421-47ce-b829-1080689ec7ca.main.jsonlz4.xuy", lpFilePart=0x0) returned 0xb2 [0076.898] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0076.898] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495592289365.f6bd7dec-4421-47ce-b829-1080689ec7ca.main.jsonlz4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495592289365.f6bd7dec-4421-47ce-b829-1080689ec7ca.main.jsonlz4"), fInfoLevelId=0x0, lpFileInformation=0x3be670 | out: lpFileInformation=0x3be670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc9d4bbf, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xfc9d4bbf, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x19addf4c, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0076.898] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0076.898] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495592289365.f6bd7dec-4421-47ce-b829-1080689ec7ca.main.jsonlz4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495592289365.f6bd7dec-4421-47ce-b829-1080689ec7ca.main.jsonlz4"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495592289365.f6bd7dec-4421-47ce-b829-1080689ec7ca.main.jsonlz4.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495592289365.f6bd7dec-4421-47ce-b829-1080689ec7ca.main.jsonlz4.xuy")) returned 1 [0076.898] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495596278120.31e5ce24-c2bf-486b-b29e-534113b7c6dc.main.jsonlz4", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495596278120.31e5ce24-c2bf-486b-b29e-534113b7c6dc.main.jsonlz4", lpFilePart=0x0) returned 0xae [0076.899] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0076.899] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495596278120.31e5ce24-c2bf-486b-b29e-534113b7c6dc.main.jsonlz4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495596278120.31e5ce24-c2bf-486b-b29e-534113b7c6dc.main.jsonlz4"), fInfoLevelId=0x0, lpFileInformation=0x2246e80 | out: lpFileInformation=0x2246e80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x461809e4, ftCreationTime.dwHighDateTime=0x1d2d43d, ftLastAccessTime.dwLowDateTime=0x461809e4, ftLastAccessTime.dwHighDateTime=0x1d2d43d, ftLastWriteTime.dwLowDateTime=0x461809e4, ftLastWriteTime.dwHighDateTime=0x1d2d43d, nFileSizeHigh=0x0, nFileSizeLow=0x1407)) returned 1 [0076.899] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0076.899] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495596278120.31e5ce24-c2bf-486b-b29e-534113b7c6dc.main.jsonlz4", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495596278120.31e5ce24-c2bf-486b-b29e-534113b7c6dc.main.jsonlz4", lpFilePart=0x0) returned 0xae [0076.899] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0076.899] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495596278120.31e5ce24-c2bf-486b-b29e-534113b7c6dc.main.jsonlz4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495596278120.31e5ce24-c2bf-486b-b29e-534113b7c6dc.main.jsonlz4"), fInfoLevelId=0x0, lpFileInformation=0x22470f8 | out: lpFileInformation=0x22470f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x461809e4, ftCreationTime.dwHighDateTime=0x1d2d43d, ftLastAccessTime.dwLowDateTime=0x461809e4, ftLastAccessTime.dwHighDateTime=0x1d2d43d, ftLastWriteTime.dwLowDateTime=0x461809e4, ftLastWriteTime.dwHighDateTime=0x1d2d43d, nFileSizeHigh=0x0, nFileSizeLow=0x1407)) returned 1 [0076.899] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0076.899] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495596278120.31e5ce24-c2bf-486b-b29e-534113b7c6dc.main.jsonlz4", nBufferLength=0x105, lpBuffer=0x3be040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495596278120.31e5ce24-c2bf-486b-b29e-534113b7c6dc.main.jsonlz4", lpFilePart=0x0) returned 0xae [0076.900] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0076.900] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495596278120.31e5ce24-c2bf-486b-b29e-534113b7c6dc.main.jsonlz4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495596278120.31e5ce24-c2bf-486b-b29e-534113b7c6dc.main.jsonlz4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0076.900] GetFileType (hFile=0x444) returned 0x1 [0076.900] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be490) returned 1 [0076.900] GetFileType (hFile=0x444) returned 0x1 [0076.900] ReadFile (in: hFile=0x444, lpBuffer=0x2249718, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5a8, lpOverlapped=0x0 | out: lpBuffer=0x2249718*, lpNumberOfBytesRead=0x3be5a8*=0x1000, lpOverlapped=0x0) returned 1 [0076.912] CloseHandle (hObject=0x444) returned 1 [0076.913] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495596278120.31e5ce24-c2bf-486b-b29e-534113b7c6dc.main.jsonlz4", nBufferLength=0x105, lpBuffer=0x3be040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495596278120.31e5ce24-c2bf-486b-b29e-534113b7c6dc.main.jsonlz4", lpFilePart=0x0) returned 0xae [0076.913] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0076.913] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495596278120.31e5ce24-c2bf-486b-b29e-534113b7c6dc.main.jsonlz4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495596278120.31e5ce24-c2bf-486b-b29e-534113b7c6dc.main.jsonlz4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0076.913] GetFileType (hFile=0x444) returned 0x1 [0076.913] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be490) returned 1 [0076.913] GetFileType (hFile=0x444) returned 0x1 [0076.913] WriteFile (in: hFile=0x444, lpBuffer=0x2247350*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be658, lpOverlapped=0x0 | out: lpBuffer=0x2247350*, lpNumberOfBytesWritten=0x3be658*=0x2000, lpOverlapped=0x0) returned 1 [0076.913] CloseHandle (hObject=0x444) returned 1 [0076.913] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495596278120.31e5ce24-c2bf-486b-b29e-534113b7c6dc.main.jsonlz4", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495596278120.31e5ce24-c2bf-486b-b29e-534113b7c6dc.main.jsonlz4", lpFilePart=0x0) returned 0xae [0076.913] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495596278120.31e5ce24-c2bf-486b-b29e-534113b7c6dc.main.jsonlz4.xuy", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495596278120.31e5ce24-c2bf-486b-b29e-534113b7c6dc.main.jsonlz4.xuy", lpFilePart=0x0) returned 0xb2 [0076.914] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0076.914] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495596278120.31e5ce24-c2bf-486b-b29e-534113b7c6dc.main.jsonlz4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495596278120.31e5ce24-c2bf-486b-b29e-534113b7c6dc.main.jsonlz4"), fInfoLevelId=0x0, lpFileInformation=0x3be670 | out: lpFileInformation=0x3be670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x461809e4, ftCreationTime.dwHighDateTime=0x1d2d43d, ftLastAccessTime.dwLowDateTime=0x461809e4, ftLastAccessTime.dwHighDateTime=0x1d2d43d, ftLastWriteTime.dwLowDateTime=0x19b04104, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0076.914] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0076.914] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495596278120.31e5ce24-c2bf-486b-b29e-534113b7c6dc.main.jsonlz4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495596278120.31e5ce24-c2bf-486b-b29e-534113b7c6dc.main.jsonlz4"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495596278120.31e5ce24-c2bf-486b-b29e-534113b7c6dc.main.jsonlz4.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495596278120.31e5ce24-c2bf-486b-b29e-534113b7c6dc.main.jsonlz4.xuy")) returned 1 [0076.915] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495597242414.2e462298-aeda-4ee5-bf23-a73bdf74947f.main.jsonlz4", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495597242414.2e462298-aeda-4ee5-bf23-a73bdf74947f.main.jsonlz4", lpFilePart=0x0) returned 0xae [0076.915] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0076.915] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495597242414.2e462298-aeda-4ee5-bf23-a73bdf74947f.main.jsonlz4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495597242414.2e462298-aeda-4ee5-bf23-a73bdf74947f.main.jsonlz4"), fInfoLevelId=0x0, lpFileInformation=0x22c5e58 | out: lpFileInformation=0x22c5e58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84dda212, ftCreationTime.dwHighDateTime=0x1d2d43f, ftLastAccessTime.dwLowDateTime=0x84dda212, ftLastAccessTime.dwHighDateTime=0x1d2d43f, ftLastWriteTime.dwLowDateTime=0x84dda212, ftLastWriteTime.dwHighDateTime=0x1d2d43f, nFileSizeHigh=0x0, nFileSizeLow=0x14b2)) returned 1 [0076.915] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0076.915] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495597242414.2e462298-aeda-4ee5-bf23-a73bdf74947f.main.jsonlz4", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495597242414.2e462298-aeda-4ee5-bf23-a73bdf74947f.main.jsonlz4", lpFilePart=0x0) returned 0xae [0076.915] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0076.915] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495597242414.2e462298-aeda-4ee5-bf23-a73bdf74947f.main.jsonlz4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495597242414.2e462298-aeda-4ee5-bf23-a73bdf74947f.main.jsonlz4"), fInfoLevelId=0x0, lpFileInformation=0x22c60d0 | out: lpFileInformation=0x22c60d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84dda212, ftCreationTime.dwHighDateTime=0x1d2d43f, ftLastAccessTime.dwLowDateTime=0x84dda212, ftLastAccessTime.dwHighDateTime=0x1d2d43f, ftLastWriteTime.dwLowDateTime=0x84dda212, ftLastWriteTime.dwHighDateTime=0x1d2d43f, nFileSizeHigh=0x0, nFileSizeLow=0x14b2)) returned 1 [0076.915] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0076.915] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495597242414.2e462298-aeda-4ee5-bf23-a73bdf74947f.main.jsonlz4", nBufferLength=0x105, lpBuffer=0x3be040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495597242414.2e462298-aeda-4ee5-bf23-a73bdf74947f.main.jsonlz4", lpFilePart=0x0) returned 0xae [0076.915] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0076.915] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495597242414.2e462298-aeda-4ee5-bf23-a73bdf74947f.main.jsonlz4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495597242414.2e462298-aeda-4ee5-bf23-a73bdf74947f.main.jsonlz4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0076.916] GetFileType (hFile=0x444) returned 0x1 [0076.916] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be490) returned 1 [0076.916] GetFileType (hFile=0x444) returned 0x1 [0076.916] ReadFile (in: hFile=0x444, lpBuffer=0x22c86f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5a8, lpOverlapped=0x0 | out: lpBuffer=0x22c86f0*, lpNumberOfBytesRead=0x3be5a8*=0x1000, lpOverlapped=0x0) returned 1 [0076.974] CloseHandle (hObject=0x444) returned 1 [0076.974] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495597242414.2e462298-aeda-4ee5-bf23-a73bdf74947f.main.jsonlz4", nBufferLength=0x105, lpBuffer=0x3be040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495597242414.2e462298-aeda-4ee5-bf23-a73bdf74947f.main.jsonlz4", lpFilePart=0x0) returned 0xae [0076.974] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0076.974] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495597242414.2e462298-aeda-4ee5-bf23-a73bdf74947f.main.jsonlz4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495597242414.2e462298-aeda-4ee5-bf23-a73bdf74947f.main.jsonlz4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0076.974] GetFileType (hFile=0x444) returned 0x1 [0076.974] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be490) returned 1 [0076.974] GetFileType (hFile=0x444) returned 0x1 [0076.974] WriteFile (in: hFile=0x444, lpBuffer=0x213ae00*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be658, lpOverlapped=0x0 | out: lpBuffer=0x213ae00*, lpNumberOfBytesWritten=0x3be658*=0x2000, lpOverlapped=0x0) returned 1 [0076.974] CloseHandle (hObject=0x444) returned 1 [0076.975] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495597242414.2e462298-aeda-4ee5-bf23-a73bdf74947f.main.jsonlz4", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495597242414.2e462298-aeda-4ee5-bf23-a73bdf74947f.main.jsonlz4", lpFilePart=0x0) returned 0xae [0076.975] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495597242414.2e462298-aeda-4ee5-bf23-a73bdf74947f.main.jsonlz4.xuy", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495597242414.2e462298-aeda-4ee5-bf23-a73bdf74947f.main.jsonlz4.xuy", lpFilePart=0x0) returned 0xb2 [0076.975] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0076.975] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495597242414.2e462298-aeda-4ee5-bf23-a73bdf74947f.main.jsonlz4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495597242414.2e462298-aeda-4ee5-bf23-a73bdf74947f.main.jsonlz4"), fInfoLevelId=0x0, lpFileInformation=0x3be670 | out: lpFileInformation=0x3be670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84dda212, ftCreationTime.dwHighDateTime=0x1d2d43f, ftLastAccessTime.dwLowDateTime=0x84dda212, ftLastAccessTime.dwHighDateTime=0x1d2d43f, ftLastWriteTime.dwLowDateTime=0x19b9cc03, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0076.975] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0076.975] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495597242414.2e462298-aeda-4ee5-bf23-a73bdf74947f.main.jsonlz4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495597242414.2e462298-aeda-4ee5-bf23-a73bdf74947f.main.jsonlz4"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495597242414.2e462298-aeda-4ee5-bf23-a73bdf74947f.main.jsonlz4.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495597242414.2e462298-aeda-4ee5-bf23-a73bdf74947f.main.jsonlz4.xuy")) returned 1 [0076.976] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495597261897.a7b36bf3-f762-448c-874e-9388e91739b4.main.jsonlz4", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495597261897.a7b36bf3-f762-448c-874e-9388e91739b4.main.jsonlz4", lpFilePart=0x0) returned 0xae [0076.976] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0076.976] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495597261897.a7b36bf3-f762-448c-874e-9388e91739b4.main.jsonlz4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495597261897.a7b36bf3-f762-448c-874e-9388e91739b4.main.jsonlz4"), fInfoLevelId=0x0, lpFileInformation=0x2149340 | out: lpFileInformation=0x2149340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x907a7866, ftCreationTime.dwHighDateTime=0x1d2d43f, ftLastAccessTime.dwLowDateTime=0x907a7866, ftLastAccessTime.dwHighDateTime=0x1d2d43f, ftLastWriteTime.dwLowDateTime=0x907a7866, ftLastWriteTime.dwHighDateTime=0x1d2d43f, nFileSizeHigh=0x0, nFileSizeLow=0x149b)) returned 1 [0076.978] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0076.978] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495597261897.a7b36bf3-f762-448c-874e-9388e91739b4.main.jsonlz4", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495597261897.a7b36bf3-f762-448c-874e-9388e91739b4.main.jsonlz4", lpFilePart=0x0) returned 0xae [0076.978] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0076.978] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495597261897.a7b36bf3-f762-448c-874e-9388e91739b4.main.jsonlz4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495597261897.a7b36bf3-f762-448c-874e-9388e91739b4.main.jsonlz4"), fInfoLevelId=0x0, lpFileInformation=0x21495b8 | out: lpFileInformation=0x21495b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x907a7866, ftCreationTime.dwHighDateTime=0x1d2d43f, ftLastAccessTime.dwLowDateTime=0x907a7866, ftLastAccessTime.dwHighDateTime=0x1d2d43f, ftLastWriteTime.dwLowDateTime=0x907a7866, ftLastWriteTime.dwHighDateTime=0x1d2d43f, nFileSizeHigh=0x0, nFileSizeLow=0x149b)) returned 1 [0076.979] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0076.979] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495597261897.a7b36bf3-f762-448c-874e-9388e91739b4.main.jsonlz4", nBufferLength=0x105, lpBuffer=0x3be040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495597261897.a7b36bf3-f762-448c-874e-9388e91739b4.main.jsonlz4", lpFilePart=0x0) returned 0xae [0076.979] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0076.979] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495597261897.a7b36bf3-f762-448c-874e-9388e91739b4.main.jsonlz4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495597261897.a7b36bf3-f762-448c-874e-9388e91739b4.main.jsonlz4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0076.980] GetFileType (hFile=0x444) returned 0x1 [0076.980] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be490) returned 1 [0076.980] GetFileType (hFile=0x444) returned 0x1 [0076.980] ReadFile (in: hFile=0x444, lpBuffer=0x214bbd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5a8, lpOverlapped=0x0 | out: lpBuffer=0x214bbd8*, lpNumberOfBytesRead=0x3be5a8*=0x1000, lpOverlapped=0x0) returned 1 [0077.005] CloseHandle (hObject=0x444) returned 1 [0077.005] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495597261897.a7b36bf3-f762-448c-874e-9388e91739b4.main.jsonlz4", nBufferLength=0x105, lpBuffer=0x3be040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495597261897.a7b36bf3-f762-448c-874e-9388e91739b4.main.jsonlz4", lpFilePart=0x0) returned 0xae [0077.005] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0077.005] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495597261897.a7b36bf3-f762-448c-874e-9388e91739b4.main.jsonlz4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495597261897.a7b36bf3-f762-448c-874e-9388e91739b4.main.jsonlz4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0077.006] GetFileType (hFile=0x444) returned 0x1 [0077.006] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be490) returned 1 [0077.006] GetFileType (hFile=0x444) returned 0x1 [0077.006] WriteFile (in: hFile=0x444, lpBuffer=0x2149810*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be658, lpOverlapped=0x0 | out: lpBuffer=0x2149810*, lpNumberOfBytesWritten=0x3be658*=0x2000, lpOverlapped=0x0) returned 1 [0077.006] CloseHandle (hObject=0x444) returned 1 [0077.006] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495597261897.a7b36bf3-f762-448c-874e-9388e91739b4.main.jsonlz4", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495597261897.a7b36bf3-f762-448c-874e-9388e91739b4.main.jsonlz4", lpFilePart=0x0) returned 0xae [0077.006] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495597261897.a7b36bf3-f762-448c-874e-9388e91739b4.main.jsonlz4.xuy", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495597261897.a7b36bf3-f762-448c-874e-9388e91739b4.main.jsonlz4.xuy", lpFilePart=0x0) returned 0xb2 [0077.007] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0077.007] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495597261897.a7b36bf3-f762-448c-874e-9388e91739b4.main.jsonlz4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495597261897.a7b36bf3-f762-448c-874e-9388e91739b4.main.jsonlz4"), fInfoLevelId=0x0, lpFileInformation=0x3be670 | out: lpFileInformation=0x3be670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x907a7866, ftCreationTime.dwHighDateTime=0x1d2d43f, ftLastAccessTime.dwLowDateTime=0x907a7866, ftLastAccessTime.dwHighDateTime=0x1d2d43f, ftLastWriteTime.dwLowDateTime=0x19be9270, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0077.007] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0077.007] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495597261897.a7b36bf3-f762-448c-874e-9388e91739b4.main.jsonlz4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495597261897.a7b36bf3-f762-448c-874e-9388e91739b4.main.jsonlz4"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495597261897.a7b36bf3-f762-448c-874e-9388e91739b4.main.jsonlz4.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495597261897.a7b36bf3-f762-448c-874e-9388e91739b4.main.jsonlz4.xuy")) returned 1 [0077.008] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495599783008.23c86977-85eb-412a-ae39-c4c6ea9a5744.main.jsonlz4", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495599783008.23c86977-85eb-412a-ae39-c4c6ea9a5744.main.jsonlz4", lpFilePart=0x0) returned 0xae [0077.008] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0077.008] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495599783008.23c86977-85eb-412a-ae39-c4c6ea9a5744.main.jsonlz4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495599783008.23c86977-85eb-412a-ae39-c4c6ea9a5744.main.jsonlz4"), fInfoLevelId=0x0, lpFileInformation=0x21c8318 | out: lpFileInformation=0x21c8318*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f2cc46e, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x6f2cc46e, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x6f2cc46e, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0x1825)) returned 1 [0077.008] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0077.008] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495599783008.23c86977-85eb-412a-ae39-c4c6ea9a5744.main.jsonlz4", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495599783008.23c86977-85eb-412a-ae39-c4c6ea9a5744.main.jsonlz4", lpFilePart=0x0) returned 0xae [0077.008] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0077.009] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495599783008.23c86977-85eb-412a-ae39-c4c6ea9a5744.main.jsonlz4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495599783008.23c86977-85eb-412a-ae39-c4c6ea9a5744.main.jsonlz4"), fInfoLevelId=0x0, lpFileInformation=0x21c8590 | out: lpFileInformation=0x21c8590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f2cc46e, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x6f2cc46e, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x6f2cc46e, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0x1825)) returned 1 [0077.009] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0077.009] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495599783008.23c86977-85eb-412a-ae39-c4c6ea9a5744.main.jsonlz4", nBufferLength=0x105, lpBuffer=0x3be040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495599783008.23c86977-85eb-412a-ae39-c4c6ea9a5744.main.jsonlz4", lpFilePart=0x0) returned 0xae [0077.009] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0077.009] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495599783008.23c86977-85eb-412a-ae39-c4c6ea9a5744.main.jsonlz4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495599783008.23c86977-85eb-412a-ae39-c4c6ea9a5744.main.jsonlz4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0077.009] GetFileType (hFile=0x444) returned 0x1 [0077.009] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be490) returned 1 [0077.009] GetFileType (hFile=0x444) returned 0x1 [0077.010] ReadFile (in: hFile=0x444, lpBuffer=0x21cabb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5a8, lpOverlapped=0x0 | out: lpBuffer=0x21cabb0*, lpNumberOfBytesRead=0x3be5a8*=0x1000, lpOverlapped=0x0) returned 1 [0077.036] CloseHandle (hObject=0x444) returned 1 [0077.036] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495599783008.23c86977-85eb-412a-ae39-c4c6ea9a5744.main.jsonlz4", nBufferLength=0x105, lpBuffer=0x3be040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495599783008.23c86977-85eb-412a-ae39-c4c6ea9a5744.main.jsonlz4", lpFilePart=0x0) returned 0xae [0077.036] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0077.037] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495599783008.23c86977-85eb-412a-ae39-c4c6ea9a5744.main.jsonlz4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495599783008.23c86977-85eb-412a-ae39-c4c6ea9a5744.main.jsonlz4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0077.037] GetFileType (hFile=0x444) returned 0x1 [0077.037] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be490) returned 1 [0077.037] GetFileType (hFile=0x444) returned 0x1 [0077.037] WriteFile (in: hFile=0x444, lpBuffer=0x21c87e8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be658, lpOverlapped=0x0 | out: lpBuffer=0x21c87e8*, lpNumberOfBytesWritten=0x3be658*=0x2000, lpOverlapped=0x0) returned 1 [0077.037] CloseHandle (hObject=0x444) returned 1 [0077.037] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495599783008.23c86977-85eb-412a-ae39-c4c6ea9a5744.main.jsonlz4", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495599783008.23c86977-85eb-412a-ae39-c4c6ea9a5744.main.jsonlz4", lpFilePart=0x0) returned 0xae [0077.037] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495599783008.23c86977-85eb-412a-ae39-c4c6ea9a5744.main.jsonlz4.xuy", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495599783008.23c86977-85eb-412a-ae39-c4c6ea9a5744.main.jsonlz4.xuy", lpFilePart=0x0) returned 0xb2 [0077.037] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0077.037] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495599783008.23c86977-85eb-412a-ae39-c4c6ea9a5744.main.jsonlz4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495599783008.23c86977-85eb-412a-ae39-c4c6ea9a5744.main.jsonlz4"), fInfoLevelId=0x0, lpFileInformation=0x3be670 | out: lpFileInformation=0x3be670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f2cc46e, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x6f2cc46e, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x19c353f9, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0077.038] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0077.038] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495599783008.23c86977-85eb-412a-ae39-c4c6ea9a5744.main.jsonlz4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495599783008.23c86977-85eb-412a-ae39-c4c6ea9a5744.main.jsonlz4"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495599783008.23c86977-85eb-412a-ae39-c4c6ea9a5744.main.jsonlz4.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495599783008.23c86977-85eb-412a-ae39-c4c6ea9a5744.main.jsonlz4.xuy")) returned 1 [0077.038] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495600032629.d896fec9-1a7a-4db1-a3a2-e46d95b631a5.main.jsonlz4", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495600032629.d896fec9-1a7a-4db1-a3a2-e46d95b631a5.main.jsonlz4", lpFilePart=0x0) returned 0xae [0077.038] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0077.038] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495600032629.d896fec9-1a7a-4db1-a3a2-e46d95b631a5.main.jsonlz4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495600032629.d896fec9-1a7a-4db1-a3a2-e46d95b631a5.main.jsonlz4"), fInfoLevelId=0x0, lpFileInformation=0x22472f0 | out: lpFileInformation=0x22472f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f593e5, ftCreationTime.dwHighDateTime=0x1d2d446, ftLastAccessTime.dwLowDateTime=0x3f593e5, ftLastAccessTime.dwHighDateTime=0x1d2d446, ftLastWriteTime.dwLowDateTime=0x3f593e5, ftLastWriteTime.dwHighDateTime=0x1d2d446, nFileSizeHigh=0x0, nFileSizeLow=0x1435)) returned 1 [0077.040] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0077.040] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495600032629.d896fec9-1a7a-4db1-a3a2-e46d95b631a5.main.jsonlz4", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495600032629.d896fec9-1a7a-4db1-a3a2-e46d95b631a5.main.jsonlz4", lpFilePart=0x0) returned 0xae [0077.040] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0077.040] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495600032629.d896fec9-1a7a-4db1-a3a2-e46d95b631a5.main.jsonlz4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495600032629.d896fec9-1a7a-4db1-a3a2-e46d95b631a5.main.jsonlz4"), fInfoLevelId=0x0, lpFileInformation=0x2247568 | out: lpFileInformation=0x2247568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f593e5, ftCreationTime.dwHighDateTime=0x1d2d446, ftLastAccessTime.dwLowDateTime=0x3f593e5, ftLastAccessTime.dwHighDateTime=0x1d2d446, ftLastWriteTime.dwLowDateTime=0x3f593e5, ftLastWriteTime.dwHighDateTime=0x1d2d446, nFileSizeHigh=0x0, nFileSizeLow=0x1435)) returned 1 [0077.040] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0077.040] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495600032629.d896fec9-1a7a-4db1-a3a2-e46d95b631a5.main.jsonlz4", nBufferLength=0x105, lpBuffer=0x3be040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495600032629.d896fec9-1a7a-4db1-a3a2-e46d95b631a5.main.jsonlz4", lpFilePart=0x0) returned 0xae [0077.040] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0077.040] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495600032629.d896fec9-1a7a-4db1-a3a2-e46d95b631a5.main.jsonlz4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495600032629.d896fec9-1a7a-4db1-a3a2-e46d95b631a5.main.jsonlz4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0077.042] GetFileType (hFile=0x444) returned 0x1 [0077.042] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be490) returned 1 [0077.042] GetFileType (hFile=0x444) returned 0x1 [0077.042] ReadFile (in: hFile=0x444, lpBuffer=0x2249b88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5a8, lpOverlapped=0x0 | out: lpBuffer=0x2249b88*, lpNumberOfBytesRead=0x3be5a8*=0x1000, lpOverlapped=0x0) returned 1 [0077.070] CloseHandle (hObject=0x444) returned 1 [0077.070] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495600032629.d896fec9-1a7a-4db1-a3a2-e46d95b631a5.main.jsonlz4", nBufferLength=0x105, lpBuffer=0x3be040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495600032629.d896fec9-1a7a-4db1-a3a2-e46d95b631a5.main.jsonlz4", lpFilePart=0x0) returned 0xae [0077.070] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0077.070] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495600032629.d896fec9-1a7a-4db1-a3a2-e46d95b631a5.main.jsonlz4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495600032629.d896fec9-1a7a-4db1-a3a2-e46d95b631a5.main.jsonlz4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0077.070] GetFileType (hFile=0x444) returned 0x1 [0077.070] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be490) returned 1 [0077.070] GetFileType (hFile=0x444) returned 0x1 [0077.070] WriteFile (in: hFile=0x444, lpBuffer=0x22477c0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be658, lpOverlapped=0x0 | out: lpBuffer=0x22477c0*, lpNumberOfBytesWritten=0x3be658*=0x2000, lpOverlapped=0x0) returned 1 [0077.071] CloseHandle (hObject=0x444) returned 1 [0077.071] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495600032629.d896fec9-1a7a-4db1-a3a2-e46d95b631a5.main.jsonlz4", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495600032629.d896fec9-1a7a-4db1-a3a2-e46d95b631a5.main.jsonlz4", lpFilePart=0x0) returned 0xae [0077.071] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495600032629.d896fec9-1a7a-4db1-a3a2-e46d95b631a5.main.jsonlz4.xuy", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495600032629.d896fec9-1a7a-4db1-a3a2-e46d95b631a5.main.jsonlz4.xuy", lpFilePart=0x0) returned 0xb2 [0077.071] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0077.071] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495600032629.d896fec9-1a7a-4db1-a3a2-e46d95b631a5.main.jsonlz4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495600032629.d896fec9-1a7a-4db1-a3a2-e46d95b631a5.main.jsonlz4"), fInfoLevelId=0x0, lpFileInformation=0x3be670 | out: lpFileInformation=0x3be670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f593e5, ftCreationTime.dwHighDateTime=0x1d2d446, ftLastAccessTime.dwLowDateTime=0x3f593e5, ftLastAccessTime.dwHighDateTime=0x1d2d446, ftLastWriteTime.dwLowDateTime=0x19c81a16, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0077.071] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0077.071] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495600032629.d896fec9-1a7a-4db1-a3a2-e46d95b631a5.main.jsonlz4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495600032629.d896fec9-1a7a-4db1-a3a2-e46d95b631a5.main.jsonlz4"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495600032629.d896fec9-1a7a-4db1-a3a2-e46d95b631a5.main.jsonlz4.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495600032629.d896fec9-1a7a-4db1-a3a2-e46d95b631a5.main.jsonlz4.xuy")) returned 1 [0077.072] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0077.072] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp", lpFilePart=0x0) returned 0x53 [0077.072] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp\\", lpFilePart=0x0) returned 0x54 [0077.072] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d78b0 [0077.072] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0077.072] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0077.073] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0077.073] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0077.073] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0077.073] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0077.073] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0077.073] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp", lpFilePart=0x0) returned 0x53 [0077.073] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp\\", lpFilePart=0x0) returned 0x54 [0077.073] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d73d0 [0077.073] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0077.073] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0077.073] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0077.074] FindClose (in: hFindFile=0x5d73d0 | out: hFindFile=0x5d73d0) returned 1 [0077.074] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0077.074] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0077.074] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0077.074] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp\\WINNT_x86-msvc", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp\\WINNT_x86-msvc", lpFilePart=0x0) returned 0x62 [0077.074] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp\\WINNT_x86-msvc\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp\\WINNT_x86-msvc\\", lpFilePart=0x0) returned 0x63 [0077.074] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp\\WINNT_x86-msvc\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d7c70 [0077.075] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0077.075] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0077.075] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0077.075] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0077.075] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0077.075] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0077.075] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp\\WINNT_x86-msvc", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp\\WINNT_x86-msvc", lpFilePart=0x0) returned 0x62 [0077.075] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp\\WINNT_x86-msvc\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp\\WINNT_x86-msvc\\", lpFilePart=0x0) returned 0x63 [0077.075] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp\\WINNT_x86-msvc\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d7550 [0077.076] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0077.076] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0077.076] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0077.076] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0077.076] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0077.076] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0077.076] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-gmpopenh264", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-gmpopenh264", lpFilePart=0x0) returned 0x5f [0077.076] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-gmpopenh264\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-gmpopenh264\\", lpFilePart=0x0) returned 0x60 [0077.076] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-gmpopenh264\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d78b0 [0077.077] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0077.078] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0077.078] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0077.078] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0077.078] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0077.078] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0077.078] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0077.078] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-gmpopenh264", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-gmpopenh264", lpFilePart=0x0) returned 0x5f [0077.078] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-gmpopenh264\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-gmpopenh264\\", lpFilePart=0x0) returned 0x60 [0077.078] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-gmpopenh264\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d7c70 [0077.078] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0077.078] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0077.079] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0077.079] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0077.079] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0077.079] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0077.079] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0077.079] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-gmpopenh264\\1.6", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-gmpopenh264\\1.6", lpFilePart=0x0) returned 0x63 [0077.079] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-gmpopenh264\\1.6\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-gmpopenh264\\1.6\\", lpFilePart=0x0) returned 0x64 [0077.079] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-gmpopenh264\\1.6\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d7370 [0077.079] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0077.079] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0077.079] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0077.079] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0077.080] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0077.080] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0077.080] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0077.080] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0077.080] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-gmpopenh264\\1.6", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-gmpopenh264\\1.6", lpFilePart=0x0) returned 0x63 [0077.080] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-gmpopenh264\\1.6\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-gmpopenh264\\1.6\\", lpFilePart=0x0) returned 0x64 [0077.080] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-gmpopenh264\\1.6\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d7a30 [0077.080] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0077.080] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0077.080] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0077.080] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0077.081] FindClose (in: hFindFile=0x5d7a30 | out: hFindFile=0x5d7a30) returned 1 [0077.081] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0077.081] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0077.081] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-gmpopenh264\\1.6\\gmpopenh264.dll", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-gmpopenh264\\1.6\\gmpopenh264.dll", lpFilePart=0x0) returned 0x73 [0077.081] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0077.081] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-gmpopenh264\\1.6\\gmpopenh264.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\gmp-gmpopenh264\\1.6\\gmpopenh264.dll"), fInfoLevelId=0x0, lpFileInformation=0x22cf618 | out: lpFileInformation=0x22cf618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5fc2ccdb, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xcd246a80, ftLastAccessTime.dwHighDateTime=0x1d1e9c5, ftLastWriteTime.dwLowDateTime=0xcd246a80, ftLastWriteTime.dwHighDateTime=0x1d1e9c5, nFileSizeHigh=0x0, nFileSizeLow=0xba1c8)) returned 1 [0077.082] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0077.082] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-gmpopenh264\\1.6\\gmpopenh264.dll", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-gmpopenh264\\1.6\\gmpopenh264.dll", lpFilePart=0x0) returned 0x73 [0077.082] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0077.082] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-gmpopenh264\\1.6\\gmpopenh264.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\gmp-gmpopenh264\\1.6\\gmpopenh264.dll"), fInfoLevelId=0x0, lpFileInformation=0x22cf7b8 | out: lpFileInformation=0x22cf7b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5fc2ccdb, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xcd246a80, ftLastAccessTime.dwHighDateTime=0x1d1e9c5, ftLastWriteTime.dwLowDateTime=0xcd246a80, ftLastWriteTime.dwHighDateTime=0x1d1e9c5, nFileSizeHigh=0x0, nFileSizeLow=0xba1c8)) returned 1 [0077.082] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0077.082] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-gmpopenh264\\1.6\\gmpopenh264.dll", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-gmpopenh264\\1.6\\gmpopenh264.dll", lpFilePart=0x0) returned 0x73 [0077.082] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0077.082] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-gmpopenh264\\1.6\\gmpopenh264.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\gmp-gmpopenh264\\1.6\\gmpopenh264.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0077.083] GetFileType (hFile=0x444) returned 0x1 [0077.083] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0077.083] GetFileType (hFile=0x444) returned 0x1 [0077.083] ReadFile (in: hFile=0x444, lpBuffer=0x22d1c28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x22d1c28*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0077.175] CloseHandle (hObject=0x444) returned 1 [0077.176] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-gmpopenh264\\1.6\\gmpopenh264.dll", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-gmpopenh264\\1.6\\gmpopenh264.dll", lpFilePart=0x0) returned 0x73 [0077.176] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0077.176] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-gmpopenh264\\1.6\\gmpopenh264.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\gmp-gmpopenh264\\1.6\\gmpopenh264.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0077.176] GetFileType (hFile=0x444) returned 0x1 [0077.176] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0077.176] GetFileType (hFile=0x444) returned 0x1 [0077.176] WriteFile (in: hFile=0x444, lpBuffer=0x2140998*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x2140998*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0077.176] CloseHandle (hObject=0x444) returned 1 [0077.177] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-gmpopenh264\\1.6\\gmpopenh264.dll", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-gmpopenh264\\1.6\\gmpopenh264.dll", lpFilePart=0x0) returned 0x73 [0077.177] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-gmpopenh264\\1.6\\gmpopenh264.dll.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-gmpopenh264\\1.6\\gmpopenh264.dll.xuy", lpFilePart=0x0) returned 0x77 [0077.177] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0077.177] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-gmpopenh264\\1.6\\gmpopenh264.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\gmp-gmpopenh264\\1.6\\gmpopenh264.dll"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5fc2ccdb, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xcd246a80, ftLastAccessTime.dwHighDateTime=0x1d1e9c5, ftLastWriteTime.dwLowDateTime=0x19d8ca33, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xba1c8)) returned 1 [0077.177] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0077.177] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-gmpopenh264\\1.6\\gmpopenh264.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\gmp-gmpopenh264\\1.6\\gmpopenh264.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-gmpopenh264\\1.6\\gmpopenh264.dll.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\gmp-gmpopenh264\\1.6\\gmpopenh264.dll.xuy")) returned 1 [0077.178] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-gmpopenh264\\1.6\\gmpopenh264.info", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-gmpopenh264\\1.6\\gmpopenh264.info", lpFilePart=0x0) returned 0x74 [0077.178] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0077.178] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-gmpopenh264\\1.6\\gmpopenh264.info" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\gmp-gmpopenh264\\1.6\\gmpopenh264.info"), fInfoLevelId=0x0, lpFileInformation=0x2153cc0 | out: lpFileInformation=0x2153cc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5fc40554, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x6a599480, ftLastAccessTime.dwHighDateTime=0x1d1e848, ftLastWriteTime.dwLowDateTime=0x6a599480, ftLastWriteTime.dwHighDateTime=0x1d1e848, nFileSizeHigh=0x0, nFileSizeLow=0x74)) returned 1 [0077.180] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0077.180] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-gmpopenh264\\1.6\\gmpopenh264.info", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-gmpopenh264\\1.6\\gmpopenh264.info", lpFilePart=0x0) returned 0x74 [0077.180] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0077.180] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-gmpopenh264\\1.6\\gmpopenh264.info" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\gmp-gmpopenh264\\1.6\\gmpopenh264.info"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0077.180] GetFileType (hFile=0x444) returned 0x1 [0077.180] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0077.180] GetFileType (hFile=0x444) returned 0x1 [0077.180] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x74 [0077.180] ReadFile (in: hFile=0x444, lpBuffer=0x21540b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x21540b0*, lpNumberOfBytesRead=0x3be5c8*=0x74, lpOverlapped=0x0) returned 1 [0077.181] CloseHandle (hObject=0x444) returned 1 [0077.192] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-gmpopenh264\\1.6\\gmpopenh264.info", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-gmpopenh264\\1.6\\gmpopenh264.info", lpFilePart=0x0) returned 0x74 [0077.192] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0077.192] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-gmpopenh264\\1.6\\gmpopenh264.info" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\gmp-gmpopenh264\\1.6\\gmpopenh264.info"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0077.193] GetFileType (hFile=0x444) returned 0x1 [0077.193] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0077.193] GetFileType (hFile=0x444) returned 0x1 [0077.193] WriteFile (in: hFile=0x444, lpBuffer=0x21cb310*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x21cb310*, lpNumberOfBytesWritten=0x3be4d8*=0x80, lpOverlapped=0x0) returned 1 [0077.194] CloseHandle (hObject=0x444) returned 1 [0077.194] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-gmpopenh264\\1.6\\gmpopenh264.info", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-gmpopenh264\\1.6\\gmpopenh264.info", lpFilePart=0x0) returned 0x74 [0077.194] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-gmpopenh264\\1.6\\gmpopenh264.info.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-gmpopenh264\\1.6\\gmpopenh264.info.xuy", lpFilePart=0x0) returned 0x78 [0077.194] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0077.194] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-gmpopenh264\\1.6\\gmpopenh264.info" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\gmp-gmpopenh264\\1.6\\gmpopenh264.info"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5fc40554, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x6a599480, ftLastAccessTime.dwHighDateTime=0x1d1e848, ftLastWriteTime.dwLowDateTime=0x19db2fce, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x80)) returned 1 [0077.195] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0077.195] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-gmpopenh264\\1.6\\gmpopenh264.info" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\gmp-gmpopenh264\\1.6\\gmpopenh264.info"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-gmpopenh264\\1.6\\gmpopenh264.info.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\gmp-gmpopenh264\\1.6\\gmpopenh264.info.xuy")) returned 1 [0077.195] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0077.195] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm", lpFilePart=0x0) returned 0x5f [0077.195] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\", lpFilePart=0x0) returned 0x60 [0077.196] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d7370 [0077.197] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0077.198] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0077.198] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0077.198] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0077.198] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0077.198] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0077.198] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0077.198] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm", lpFilePart=0x0) returned 0x5f [0077.198] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\", lpFilePart=0x0) returned 0x60 [0077.198] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d7670 [0077.199] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0077.199] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0077.199] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0077.199] FindClose (in: hFindFile=0x5d7670 | out: hFindFile=0x5d7670) returned 1 [0077.199] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0077.199] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0077.199] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0077.199] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903", lpFilePart=0x0) returned 0x69 [0077.199] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\", lpFilePart=0x0) returned 0x6a [0077.199] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d78b0 [0077.202] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0077.202] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0077.202] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0077.202] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0077.202] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0077.202] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0077.202] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0077.203] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0077.203] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0077.203] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0077.203] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903", lpFilePart=0x0) returned 0x69 [0077.203] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\", lpFilePart=0x0) returned 0x6a [0077.203] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d7370 [0077.204] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0077.204] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0077.204] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0077.204] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0077.204] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0077.205] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0077.205] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0077.205] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0077.205] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0077.205] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\LICENSE.txt", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\LICENSE.txt", lpFilePart=0x0) returned 0x75 [0077.205] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0077.206] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\LICENSE.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\license.txt"), fInfoLevelId=0x0, lpFileInformation=0x21d2458 | out: lpFileInformation=0x21d2458*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60b06503, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x6bb1b700, ftLastAccessTime.dwHighDateTime=0x1d1de6f, ftLastWriteTime.dwLowDateTime=0x6bb1b700, ftLastWriteTime.dwHighDateTime=0x1d1de6f, nFileSizeHigh=0x0, nFileSizeLow=0x1df)) returned 1 [0077.206] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0077.206] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\LICENSE.txt", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\LICENSE.txt", lpFilePart=0x0) returned 0x75 [0077.206] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0077.206] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\LICENSE.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\license.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0077.207] GetFileType (hFile=0x444) returned 0x1 [0077.207] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0077.207] GetFileType (hFile=0x444) returned 0x1 [0077.207] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x1df [0077.207] ReadFile (in: hFile=0x444, lpBuffer=0x21d2990, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x21d2990*, lpNumberOfBytesRead=0x3be5c8*=0x1df, lpOverlapped=0x0) returned 1 [0077.209] CloseHandle (hObject=0x444) returned 1 [0077.220] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\LICENSE.txt", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\LICENSE.txt", lpFilePart=0x0) returned 0x75 [0077.220] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0077.220] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\LICENSE.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\license.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0077.221] GetFileType (hFile=0x444) returned 0x1 [0077.221] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0077.221] GetFileType (hFile=0x444) returned 0x1 [0077.221] WriteFile (in: hFile=0x444, lpBuffer=0x224a320*, nNumberOfBytesToWrite=0x1e0, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x224a320*, lpNumberOfBytesWritten=0x3be4d8*=0x1e0, lpOverlapped=0x0) returned 1 [0077.222] CloseHandle (hObject=0x444) returned 1 [0077.222] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\LICENSE.txt", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\LICENSE.txt", lpFilePart=0x0) returned 0x75 [0077.222] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\LICENSE.txt.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\LICENSE.txt.xuy", lpFilePart=0x0) returned 0x79 [0077.222] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0077.222] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\LICENSE.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\license.txt"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60b06503, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x6bb1b700, ftLastAccessTime.dwHighDateTime=0x1d1de6f, ftLastWriteTime.dwLowDateTime=0x19dff130, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x1e0)) returned 1 [0077.223] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0077.223] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\LICENSE.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\license.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\LICENSE.txt.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\license.txt.xuy")) returned 1 [0077.223] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\manifest.json", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\manifest.json", lpFilePart=0x0) returned 0x77 [0077.223] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0077.223] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\manifest.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\manifest.json"), fInfoLevelId=0x0, lpFileInformation=0x224b6a8 | out: lpFileInformation=0x224b6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60b769e9, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x6bb1b700, ftLastAccessTime.dwHighDateTime=0x1d1de6f, ftLastWriteTime.dwLowDateTime=0x6bb1b700, ftLastWriteTime.dwHighDateTime=0x1d1de6f, nFileSizeHigh=0x0, nFileSizeLow=0x15d)) returned 1 [0077.225] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0077.225] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\manifest.json", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\manifest.json", lpFilePart=0x0) returned 0x77 [0077.225] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0077.225] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\manifest.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\manifest.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0077.225] GetFileType (hFile=0x444) returned 0x1 [0077.225] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0077.225] GetFileType (hFile=0x444) returned 0x1 [0077.225] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x15d [0077.225] ReadFile (in: hFile=0x444, lpBuffer=0x224bb70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x224bb70*, lpNumberOfBytesRead=0x3be5c8*=0x15d, lpOverlapped=0x0) returned 1 [0077.226] CloseHandle (hObject=0x444) returned 1 [0077.237] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\manifest.json", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\manifest.json", lpFilePart=0x0) returned 0x77 [0077.237] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0077.237] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\manifest.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\manifest.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0077.239] GetFileType (hFile=0x444) returned 0x1 [0077.239] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0077.239] GetFileType (hFile=0x444) returned 0x1 [0077.239] WriteFile (in: hFile=0x444, lpBuffer=0x22c3288*, nNumberOfBytesToWrite=0x160, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x22c3288*, lpNumberOfBytesWritten=0x3be4d8*=0x160, lpOverlapped=0x0) returned 1 [0077.241] CloseHandle (hObject=0x444) returned 1 [0077.241] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\manifest.json", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\manifest.json", lpFilePart=0x0) returned 0x77 [0077.241] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\manifest.json.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\manifest.json.xuy", lpFilePart=0x0) returned 0x7b [0077.241] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0077.241] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\manifest.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\manifest.json"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60b769e9, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x6bb1b700, ftLastAccessTime.dwHighDateTime=0x1d1de6f, ftLastWriteTime.dwLowDateTime=0x19e25338, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x160)) returned 1 [0077.241] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0077.241] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\manifest.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\manifest.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\manifest.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\manifest.json.xuy")) returned 1 [0077.242] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\widevinecdm.dll", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\widevinecdm.dll", lpFilePart=0x0) returned 0x79 [0077.242] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0077.242] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\widevinecdm.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\widevinecdm.dll"), fInfoLevelId=0x0, lpFileInformation=0x22c4610 | out: lpFileInformation=0x22c4610*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60b0b31f, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x6bb1b700, ftLastAccessTime.dwHighDateTime=0x1d1de6f, ftLastWriteTime.dwLowDateTime=0x6bb1b700, ftLastWriteTime.dwHighDateTime=0x1d1de6f, nFileSizeHigh=0x0, nFileSizeLow=0x585bf8)) returned 1 [0077.245] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0077.245] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\widevinecdm.dll", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\widevinecdm.dll", lpFilePart=0x0) returned 0x79 [0077.245] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0077.245] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\widevinecdm.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\widevinecdm.dll"), fInfoLevelId=0x0, lpFileInformation=0x22c47c0 | out: lpFileInformation=0x22c47c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60b0b31f, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x6bb1b700, ftLastAccessTime.dwHighDateTime=0x1d1de6f, ftLastWriteTime.dwLowDateTime=0x6bb1b700, ftLastWriteTime.dwHighDateTime=0x1d1de6f, nFileSizeHigh=0x0, nFileSizeLow=0x585bf8)) returned 1 [0077.245] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0077.245] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\widevinecdm.dll", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\widevinecdm.dll", lpFilePart=0x0) returned 0x79 [0077.245] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0077.245] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\widevinecdm.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\widevinecdm.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0077.246] GetFileType (hFile=0x444) returned 0x1 [0077.246] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0077.246] GetFileType (hFile=0x444) returned 0x1 [0077.246] ReadFile (in: hFile=0x444, lpBuffer=0x22c6c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x22c6c50*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0077.275] CloseHandle (hObject=0x444) returned 1 [0077.280] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\widevinecdm.dll", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\widevinecdm.dll", lpFilePart=0x0) returned 0x79 [0077.280] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0077.281] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\widevinecdm.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\widevinecdm.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0077.281] GetFileType (hFile=0x444) returned 0x1 [0077.281] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0077.281] GetFileType (hFile=0x444) returned 0x1 [0077.281] WriteFile (in: hFile=0x444, lpBuffer=0x22c4950*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x22c4950*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0077.281] CloseHandle (hObject=0x444) returned 1 [0077.281] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\widevinecdm.dll", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\widevinecdm.dll", lpFilePart=0x0) returned 0x79 [0077.281] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\widevinecdm.dll.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\widevinecdm.dll.xuy", lpFilePart=0x0) returned 0x7d [0077.281] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0077.281] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\widevinecdm.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\widevinecdm.dll"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60b0b31f, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x6bb1b700, ftLastAccessTime.dwHighDateTime=0x1d1de6f, ftLastWriteTime.dwLowDateTime=0x19e979e7, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x585bf8)) returned 1 [0077.281] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0077.282] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\widevinecdm.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\widevinecdm.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\widevinecdm.dll.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\widevinecdm.dll.xuy")) returned 1 [0077.282] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\widevinecdm.dll.lib", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\widevinecdm.dll.lib", lpFilePart=0x0) returned 0x7d [0077.282] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0077.282] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\widevinecdm.dll.lib" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\widevinecdm.dll.lib"), fInfoLevelId=0x0, lpFileInformation=0x2343188 | out: lpFileInformation=0x2343188*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60b08c06, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x6bb1b700, ftLastAccessTime.dwHighDateTime=0x1d1de6f, ftLastWriteTime.dwLowDateTime=0x6bb1b700, ftLastWriteTime.dwHighDateTime=0x1d1de6f, nFileSizeHigh=0x0, nFileSizeLow=0x9a8)) returned 1 [0077.282] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0077.282] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\widevinecdm.dll.lib", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\widevinecdm.dll.lib", lpFilePart=0x0) returned 0x7d [0077.283] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0077.283] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\widevinecdm.dll.lib" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\widevinecdm.dll.lib"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0077.283] GetFileType (hFile=0x444) returned 0x1 [0077.283] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0077.283] GetFileType (hFile=0x444) returned 0x1 [0077.283] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x9a8 [0077.283] ReadFile (in: hFile=0x444, lpBuffer=0x2343ec8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x2343ec8*, lpNumberOfBytesRead=0x3be5c8*=0x9a8, lpOverlapped=0x0) returned 1 [0077.301] CloseHandle (hObject=0x444) returned 1 [0077.344] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\widevinecdm.dll.lib", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\widevinecdm.dll.lib", lpFilePart=0x0) returned 0x7d [0077.344] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0077.345] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\widevinecdm.dll.lib" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\widevinecdm.dll.lib"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0077.346] GetFileType (hFile=0x444) returned 0x1 [0077.346] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0077.346] GetFileType (hFile=0x444) returned 0x1 [0077.346] WriteFile (in: hFile=0x444, lpBuffer=0x21c0238*, nNumberOfBytesToWrite=0x9b0, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x21c0238*, lpNumberOfBytesWritten=0x3be4d8*=0x9b0, lpOverlapped=0x0) returned 1 [0077.347] CloseHandle (hObject=0x444) returned 1 [0077.347] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\widevinecdm.dll.lib", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\widevinecdm.dll.lib", lpFilePart=0x0) returned 0x7d [0077.347] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\widevinecdm.dll.lib.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\widevinecdm.dll.lib.xuy", lpFilePart=0x0) returned 0x81 [0077.347] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0077.347] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\widevinecdm.dll.lib" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\widevinecdm.dll.lib"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60b08c06, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x6bb1b700, ftLastAccessTime.dwHighDateTime=0x1d1de6f, ftLastWriteTime.dwLowDateTime=0x19f3076f, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x9b0)) returned 1 [0077.347] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0077.347] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\widevinecdm.dll.lib" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\widevinecdm.dll.lib"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\widevinecdm.dll.lib.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\widevinecdm.dll.lib.xuy")) returned 1 [0077.348] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0077.348] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\minidumps", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\minidumps", lpFilePart=0x0) returned 0x59 [0077.348] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\minidumps\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\minidumps\\", lpFilePart=0x0) returned 0x5a [0077.348] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\minidumps\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d8090 [0077.348] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0077.349] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0077.349] FindClose (in: hFindFile=0x5d8090 | out: hFindFile=0x5d8090) returned 1 [0077.349] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0077.349] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0077.349] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0077.349] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\minidumps", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\minidumps", lpFilePart=0x0) returned 0x59 [0077.349] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\minidumps\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\minidumps\\", lpFilePart=0x0) returned 0x5a [0077.349] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\minidumps\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d79d0 [0077.349] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0077.349] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0077.349] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0077.349] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0077.350] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0077.350] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0077.350] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\saved-telemetry-pings", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\saved-telemetry-pings", lpFilePart=0x0) returned 0x65 [0077.350] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\saved-telemetry-pings\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\saved-telemetry-pings\\", lpFilePart=0x0) returned 0x66 [0077.350] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\saved-telemetry-pings\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d78b0 [0077.351] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0077.351] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0077.351] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0077.351] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0077.352] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0077.352] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0077.352] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0077.352] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\saved-telemetry-pings", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\saved-telemetry-pings", lpFilePart=0x0) returned 0x65 [0077.352] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\saved-telemetry-pings\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\saved-telemetry-pings\\", lpFilePart=0x0) returned 0x66 [0077.352] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\saved-telemetry-pings\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d7eb0 [0077.352] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0077.352] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0077.352] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0077.352] FindClose (in: hFindFile=0x5d7eb0 | out: hFindFile=0x5d7eb0) returned 1 [0077.352] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0077.353] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0077.353] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\saved-telemetry-pings\\d896fec9-1a7a-4db1-a3a2-e46d95b631a5", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\saved-telemetry-pings\\d896fec9-1a7a-4db1-a3a2-e46d95b631a5", lpFilePart=0x0) returned 0x8a [0077.353] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0077.353] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\saved-telemetry-pings\\d896fec9-1a7a-4db1-a3a2-e46d95b631a5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\saved-telemetry-pings\\d896fec9-1a7a-4db1-a3a2-e46d95b631a5"), fInfoLevelId=0x0, lpFileInformation=0x21c5c00 | out: lpFileInformation=0x21c5c00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f593e5, ftCreationTime.dwHighDateTime=0x1d2d446, ftLastAccessTime.dwLowDateTime=0x3f593e5, ftLastAccessTime.dwHighDateTime=0x1d2d446, ftLastWriteTime.dwLowDateTime=0x3f593e5, ftLastWriteTime.dwHighDateTime=0x1d2d446, nFileSizeHigh=0x0, nFileSizeLow=0x29c5)) returned 1 [0077.354] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0077.354] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\saved-telemetry-pings\\d896fec9-1a7a-4db1-a3a2-e46d95b631a5", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\saved-telemetry-pings\\d896fec9-1a7a-4db1-a3a2-e46d95b631a5", lpFilePart=0x0) returned 0x8a [0077.354] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0077.354] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\saved-telemetry-pings\\d896fec9-1a7a-4db1-a3a2-e46d95b631a5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\saved-telemetry-pings\\d896fec9-1a7a-4db1-a3a2-e46d95b631a5"), fInfoLevelId=0x0, lpFileInformation=0x21c5e00 | out: lpFileInformation=0x21c5e00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f593e5, ftCreationTime.dwHighDateTime=0x1d2d446, ftLastAccessTime.dwLowDateTime=0x3f593e5, ftLastAccessTime.dwHighDateTime=0x1d2d446, ftLastWriteTime.dwLowDateTime=0x3f593e5, ftLastWriteTime.dwHighDateTime=0x1d2d446, nFileSizeHigh=0x0, nFileSizeLow=0x29c5)) returned 1 [0077.354] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0077.355] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\saved-telemetry-pings\\d896fec9-1a7a-4db1-a3a2-e46d95b631a5", nBufferLength=0x105, lpBuffer=0x3be120, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\saved-telemetry-pings\\d896fec9-1a7a-4db1-a3a2-e46d95b631a5", lpFilePart=0x0) returned 0x8a [0077.355] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0077.355] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\saved-telemetry-pings\\d896fec9-1a7a-4db1-a3a2-e46d95b631a5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\saved-telemetry-pings\\d896fec9-1a7a-4db1-a3a2-e46d95b631a5"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0077.355] GetFileType (hFile=0x444) returned 0x1 [0077.355] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be570) returned 1 [0077.355] GetFileType (hFile=0x444) returned 0x1 [0077.355] ReadFile (in: hFile=0x444, lpBuffer=0x21c8330, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be688, lpOverlapped=0x0 | out: lpBuffer=0x21c8330*, lpNumberOfBytesRead=0x3be688*=0x1000, lpOverlapped=0x0) returned 1 [0077.381] CloseHandle (hObject=0x444) returned 1 [0077.381] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\saved-telemetry-pings\\d896fec9-1a7a-4db1-a3a2-e46d95b631a5", nBufferLength=0x105, lpBuffer=0x3be120, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\saved-telemetry-pings\\d896fec9-1a7a-4db1-a3a2-e46d95b631a5", lpFilePart=0x0) returned 0x8a [0077.381] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0077.381] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\saved-telemetry-pings\\d896fec9-1a7a-4db1-a3a2-e46d95b631a5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\saved-telemetry-pings\\d896fec9-1a7a-4db1-a3a2-e46d95b631a5"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0077.381] GetFileType (hFile=0x444) returned 0x1 [0077.381] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be570) returned 1 [0077.381] GetFileType (hFile=0x444) returned 0x1 [0077.381] WriteFile (in: hFile=0x444, lpBuffer=0x21c5fe0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be738, lpOverlapped=0x0 | out: lpBuffer=0x21c5fe0*, lpNumberOfBytesWritten=0x3be738*=0x2000, lpOverlapped=0x0) returned 1 [0077.381] CloseHandle (hObject=0x444) returned 1 [0077.381] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\saved-telemetry-pings\\d896fec9-1a7a-4db1-a3a2-e46d95b631a5", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\saved-telemetry-pings\\d896fec9-1a7a-4db1-a3a2-e46d95b631a5", lpFilePart=0x0) returned 0x8a [0077.382] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\saved-telemetry-pings\\d896fec9-1a7a-4db1-a3a2-e46d95b631a5.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\saved-telemetry-pings\\d896fec9-1a7a-4db1-a3a2-e46d95b631a5.xuy", lpFilePart=0x0) returned 0x8e [0077.382] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0077.382] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\saved-telemetry-pings\\d896fec9-1a7a-4db1-a3a2-e46d95b631a5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\saved-telemetry-pings\\d896fec9-1a7a-4db1-a3a2-e46d95b631a5"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f593e5, ftCreationTime.dwHighDateTime=0x1d2d446, ftLastAccessTime.dwLowDateTime=0x3f593e5, ftLastAccessTime.dwHighDateTime=0x1d2d446, ftLastWriteTime.dwLowDateTime=0x19f7c86c, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x29c5)) returned 1 [0077.382] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0077.382] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\saved-telemetry-pings\\d896fec9-1a7a-4db1-a3a2-e46d95b631a5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\saved-telemetry-pings\\d896fec9-1a7a-4db1-a3a2-e46d95b631a5"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\saved-telemetry-pings\\d896fec9-1a7a-4db1-a3a2-e46d95b631a5.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\saved-telemetry-pings\\d896fec9-1a7a-4db1-a3a2-e46d95b631a5.xuy")) returned 1 [0077.387] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0077.387] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionstore-backups", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionstore-backups", lpFilePart=0x0) returned 0x64 [0077.387] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionstore-backups\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionstore-backups\\", lpFilePart=0x0) returned 0x65 [0077.387] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionstore-backups\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d7d90 [0077.403] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0077.403] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0077.403] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0077.403] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0077.403] FindClose (in: hFindFile=0x5d7d90 | out: hFindFile=0x5d7d90) returned 1 [0077.404] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0077.404] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0077.404] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0077.404] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionstore-backups", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionstore-backups", lpFilePart=0x0) returned 0x64 [0077.404] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionstore-backups\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionstore-backups\\", lpFilePart=0x0) returned 0x65 [0077.404] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionstore-backups\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d78b0 [0077.405] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0077.405] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0077.405] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0077.405] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0077.405] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0077.406] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0077.406] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0077.406] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionstore-backups\\previous.js", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionstore-backups\\previous.js", lpFilePart=0x0) returned 0x70 [0077.406] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0077.406] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionstore-backups\\previous.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\sessionstore-backups\\previous.js"), fInfoLevelId=0x0, lpFileInformation=0x2247550 | out: lpFileInformation=0x2247550*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6eea02a3, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x6eea02a3, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x6eea02a3, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0x29d43)) returned 1 [0077.408] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0077.408] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionstore-backups\\previous.js", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionstore-backups\\previous.js", lpFilePart=0x0) returned 0x70 [0077.408] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0077.408] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionstore-backups\\previous.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\sessionstore-backups\\previous.js"), fInfoLevelId=0x0, lpFileInformation=0x22476e8 | out: lpFileInformation=0x22476e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6eea02a3, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x6eea02a3, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x6eea02a3, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0x29d43)) returned 1 [0077.408] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0077.408] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionstore-backups\\previous.js", nBufferLength=0x105, lpBuffer=0x3be120, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionstore-backups\\previous.js", lpFilePart=0x0) returned 0x70 [0077.408] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0077.408] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionstore-backups\\previous.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\sessionstore-backups\\previous.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0077.409] GetFileType (hFile=0x444) returned 0x1 [0077.409] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be570) returned 1 [0077.409] GetFileType (hFile=0x444) returned 0x1 [0077.409] ReadFile (in: hFile=0x444, lpBuffer=0x2249b48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be688, lpOverlapped=0x0 | out: lpBuffer=0x2249b48*, lpNumberOfBytesRead=0x3be688*=0x1000, lpOverlapped=0x0) returned 1 [0077.438] CloseHandle (hObject=0x444) returned 1 [0077.438] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionstore-backups\\previous.js", nBufferLength=0x105, lpBuffer=0x3be120, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionstore-backups\\previous.js", lpFilePart=0x0) returned 0x70 [0077.438] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0077.438] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionstore-backups\\previous.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\sessionstore-backups\\previous.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0077.439] GetFileType (hFile=0x444) returned 0x1 [0077.439] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be570) returned 1 [0077.439] GetFileType (hFile=0x444) returned 0x1 [0077.439] WriteFile (in: hFile=0x444, lpBuffer=0x2247860*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be738, lpOverlapped=0x0 | out: lpBuffer=0x2247860*, lpNumberOfBytesWritten=0x3be738*=0x2000, lpOverlapped=0x0) returned 1 [0077.439] CloseHandle (hObject=0x444) returned 1 [0077.439] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionstore-backups\\previous.js", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionstore-backups\\previous.js", lpFilePart=0x0) returned 0x70 [0077.439] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionstore-backups\\previous.js.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionstore-backups\\previous.js.xuy", lpFilePart=0x0) returned 0x74 [0077.439] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0077.439] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionstore-backups\\previous.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\sessionstore-backups\\previous.js"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6eea02a3, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x6eea02a3, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x1a01529b, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x29d43)) returned 1 [0077.439] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0077.439] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionstore-backups\\previous.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\sessionstore-backups\\previous.js"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionstore-backups\\previous.js.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\sessionstore-backups\\previous.js.xuy")) returned 1 [0077.440] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionstore-backups\\upgrade.js-20170518000419", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionstore-backups\\upgrade.js-20170518000419", lpFilePart=0x0) returned 0x7e [0077.440] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0077.440] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionstore-backups\\upgrade.js-20170518000419" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\sessionstore-backups\\upgrade.js-20170518000419"), fInfoLevelId=0x0, lpFileInformation=0x22c6050 | out: lpFileInformation=0x22c6050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf99fffca, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xf99fffca, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xeb43e8c0, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0xa9b2)) returned 1 [0077.441] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0077.441] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionstore-backups\\upgrade.js-20170518000419", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionstore-backups\\upgrade.js-20170518000419", lpFilePart=0x0) returned 0x7e [0077.441] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0077.441] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionstore-backups\\upgrade.js-20170518000419" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\sessionstore-backups\\upgrade.js-20170518000419"), fInfoLevelId=0x0, lpFileInformation=0x22c6220 | out: lpFileInformation=0x22c6220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf99fffca, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xf99fffca, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xeb43e8c0, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0xa9b2)) returned 1 [0077.441] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0077.441] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionstore-backups\\upgrade.js-20170518000419", nBufferLength=0x105, lpBuffer=0x3be120, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionstore-backups\\upgrade.js-20170518000419", lpFilePart=0x0) returned 0x7e [0077.441] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0077.441] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionstore-backups\\upgrade.js-20170518000419" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\sessionstore-backups\\upgrade.js-20170518000419"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0077.441] GetFileType (hFile=0x444) returned 0x1 [0077.442] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be570) returned 1 [0077.442] GetFileType (hFile=0x444) returned 0x1 [0077.442] ReadFile (in: hFile=0x444, lpBuffer=0x22c86f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be688, lpOverlapped=0x0 | out: lpBuffer=0x22c86f0*, lpNumberOfBytesRead=0x3be688*=0x1000, lpOverlapped=0x0) returned 1 [0077.482] CloseHandle (hObject=0x444) returned 1 [0077.486] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionstore-backups\\upgrade.js-20170518000419", nBufferLength=0x105, lpBuffer=0x3be120, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionstore-backups\\upgrade.js-20170518000419", lpFilePart=0x0) returned 0x7e [0077.486] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0077.486] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionstore-backups\\upgrade.js-20170518000419" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\sessionstore-backups\\upgrade.js-20170518000419"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0077.487] GetFileType (hFile=0x444) returned 0x1 [0077.487] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be570) returned 1 [0077.487] GetFileType (hFile=0x444) returned 0x1 [0077.487] WriteFile (in: hFile=0x444, lpBuffer=0x22c63d0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be738, lpOverlapped=0x0 | out: lpBuffer=0x22c63d0*, lpNumberOfBytesWritten=0x3be738*=0x2000, lpOverlapped=0x0) returned 1 [0077.487] CloseHandle (hObject=0x444) returned 1 [0077.487] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionstore-backups\\upgrade.js-20170518000419", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionstore-backups\\upgrade.js-20170518000419", lpFilePart=0x0) returned 0x7e [0077.487] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionstore-backups\\upgrade.js-20170518000419.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionstore-backups\\upgrade.js-20170518000419.xuy", lpFilePart=0x0) returned 0x82 [0077.487] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0077.487] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionstore-backups\\upgrade.js-20170518000419" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\sessionstore-backups\\upgrade.js-20170518000419"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf99fffca, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xf99fffca, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x1a0879c5, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xa9b2)) returned 1 [0077.487] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0077.487] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionstore-backups\\upgrade.js-20170518000419" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\sessionstore-backups\\upgrade.js-20170518000419"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionstore-backups\\upgrade.js-20170518000419.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\sessionstore-backups\\upgrade.js-20170518000419.xuy")) returned 1 [0077.488] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0077.488] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage", lpFilePart=0x0) returned 0x57 [0077.488] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\", lpFilePart=0x0) returned 0x58 [0077.488] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d7cd0 [0077.489] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0077.489] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0077.489] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0077.489] FindClose (in: hFindFile=0x5d7cd0 | out: hFindFile=0x5d7cd0) returned 1 [0077.489] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0077.489] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0077.489] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0077.489] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage", lpFilePart=0x0) returned 0x57 [0077.489] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\", lpFilePart=0x0) returned 0x58 [0077.489] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d78b0 [0077.489] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0077.490] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0077.490] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0077.490] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0077.490] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0077.490] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0077.490] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0077.490] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent", lpFilePart=0x0) returned 0x61 [0077.490] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\", lpFilePart=0x0) returned 0x62 [0077.493] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d81b0 [0077.493] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0077.494] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0077.494] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0077.494] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0077.494] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0077.494] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0077.494] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0077.494] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0077.494] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent", lpFilePart=0x0) returned 0x61 [0077.494] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\", lpFilePart=0x0) returned 0x62 [0077.494] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d7a30 [0077.495] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0077.495] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0077.495] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0077.495] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0077.495] FindClose (in: hFindFile=0x5d7a30 | out: hFindFile=0x5d7a30) returned 1 [0077.495] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0077.495] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0077.495] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0077.495] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome", nBufferLength=0x105, lpBuffer=0x3be130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome", lpFilePart=0x0) returned 0x68 [0077.495] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\", nBufferLength=0x105, lpBuffer=0x3be0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\", lpFilePart=0x0) returned 0x69 [0077.495] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\*", lpFindFileData=0x3be2e0 | out: lpFindFileData=0x3be2e0) returned 0x5d79d0 [0077.495] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0077.496] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0077.496] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0077.496] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0077.496] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 0 [0077.496] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0077.496] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0077.496] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0077.496] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0077.496] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome", nBufferLength=0x105, lpBuffer=0x3be130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome", lpFilePart=0x0) returned 0x68 [0077.496] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\", nBufferLength=0x105, lpBuffer=0x3be0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\", lpFilePart=0x0) returned 0x69 [0077.496] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\*", lpFindFileData=0x3be2e0 | out: lpFindFileData=0x3be2e0) returned 0x5d7cd0 [0077.496] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0077.496] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0077.497] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0077.497] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0077.497] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 0 [0077.497] FindClose (in: hFindFile=0x5d7cd0 | out: hFindFile=0x5d7cd0) returned 1 [0077.497] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0077.497] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0077.497] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\.metadata", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\.metadata", lpFilePart=0x0) returned 0x72 [0077.497] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0077.497] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\.metadata" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\storage\\permanent\\chrome\\.metadata"), fInfoLevelId=0x0, lpFileInformation=0x214e5f0 | out: lpFileInformation=0x214e5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c215d0c, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3c215d0c, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x3c21841f, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x1d)) returned 1 [0077.498] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0077.498] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\.metadata", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\.metadata", lpFilePart=0x0) returned 0x72 [0077.498] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0077.498] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\.metadata" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\storage\\permanent\\chrome\\.metadata"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0077.498] GetFileType (hFile=0x444) returned 0x1 [0077.498] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be400) returned 1 [0077.498] GetFileType (hFile=0x444) returned 0x1 [0077.498] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be628 | out: lpFileSizeHigh=0x3be628*=0x0) returned 0x1d [0077.498] ReadFile (in: hFile=0x444, lpBuffer=0x214e958, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be558, lpOverlapped=0x0 | out: lpBuffer=0x214e958*, lpNumberOfBytesRead=0x3be558*=0x1d, lpOverlapped=0x0) returned 1 [0077.499] CloseHandle (hObject=0x444) returned 1 [0077.536] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\.metadata", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\.metadata", lpFilePart=0x0) returned 0x72 [0077.536] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0077.537] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\.metadata" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\storage\\permanent\\chrome\\.metadata"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0077.538] GetFileType (hFile=0x444) returned 0x1 [0077.538] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be400) returned 1 [0077.538] GetFileType (hFile=0x444) returned 0x1 [0077.538] WriteFile (in: hFile=0x444, lpBuffer=0x21c5ad8*, nNumberOfBytesToWrite=0x20, lpNumberOfBytesWritten=0x3be468, lpOverlapped=0x0 | out: lpBuffer=0x21c5ad8*, lpNumberOfBytesWritten=0x3be468*=0x20, lpOverlapped=0x0) returned 1 [0077.539] CloseHandle (hObject=0x444) returned 1 [0077.539] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\.metadata", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\.metadata", lpFilePart=0x0) returned 0x72 [0077.539] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\.metadata.xuy", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\.metadata.xuy", lpFilePart=0x0) returned 0x76 [0077.540] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0077.540] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\.metadata" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\storage\\permanent\\chrome\\.metadata"), fInfoLevelId=0x0, lpFileInformation=0x3be670 | out: lpFileInformation=0x3be670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c215d0c, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3c215d0c, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x1a0f9ff5, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x20)) returned 1 [0077.540] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0077.540] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\.metadata" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\storage\\permanent\\chrome\\.metadata"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\.metadata.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\storage\\permanent\\chrome\\.metadata.xuy")) returned 1 [0077.541] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\.metadata-v2", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\.metadata-v2", lpFilePart=0x0) returned 0x75 [0077.541] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0077.541] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\.metadata-v2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\storage\\permanent\\chrome\\.metadata-v2"), fInfoLevelId=0x0, lpFileInformation=0x21c6e58 | out: lpFileInformation=0x21c6e58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c21841f, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3c21841f, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x3c21841f, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x2a)) returned 1 [0077.541] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0077.541] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\.metadata-v2", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\.metadata-v2", lpFilePart=0x0) returned 0x75 [0077.541] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0077.542] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\.metadata-v2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\storage\\permanent\\chrome\\.metadata-v2"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0077.542] GetFileType (hFile=0x444) returned 0x1 [0077.542] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be400) returned 1 [0077.542] GetFileType (hFile=0x444) returned 0x1 [0077.542] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be628 | out: lpFileSizeHigh=0x3be628*=0x0) returned 0x2a [0077.542] ReadFile (in: hFile=0x444, lpBuffer=0x21c71f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be558, lpOverlapped=0x0 | out: lpBuffer=0x21c71f0*, lpNumberOfBytesRead=0x3be558*=0x2a, lpOverlapped=0x0) returned 1 [0077.543] CloseHandle (hObject=0x444) returned 1 [0077.553] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\.metadata-v2", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\.metadata-v2", lpFilePart=0x0) returned 0x75 [0077.553] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0077.553] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\.metadata-v2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\storage\\permanent\\chrome\\.metadata-v2"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0077.554] GetFileType (hFile=0x444) returned 0x1 [0077.554] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be400) returned 1 [0077.555] GetFileType (hFile=0x444) returned 0x1 [0077.555] WriteFile (in: hFile=0x444, lpBuffer=0x223e3a0*, nNumberOfBytesToWrite=0x30, lpNumberOfBytesWritten=0x3be468, lpOverlapped=0x0 | out: lpBuffer=0x223e3a0*, lpNumberOfBytesWritten=0x3be468*=0x30, lpOverlapped=0x0) returned 1 [0077.555] CloseHandle (hObject=0x444) returned 1 [0077.556] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\.metadata-v2", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\.metadata-v2", lpFilePart=0x0) returned 0x75 [0077.556] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\.metadata-v2.xuy", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\.metadata-v2.xuy", lpFilePart=0x0) returned 0x79 [0077.556] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0077.556] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\.metadata-v2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\storage\\permanent\\chrome\\.metadata-v2"), fInfoLevelId=0x0, lpFileInformation=0x3be670 | out: lpFileInformation=0x3be670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c21841f, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3c21841f, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x1a120304, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x30)) returned 1 [0077.556] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0077.556] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\.metadata-v2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\storage\\permanent\\chrome\\.metadata-v2"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\.metadata-v2.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\storage\\permanent\\chrome\\.metadata-v2.xuy")) returned 1 [0077.585] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0077.585] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\idb", nBufferLength=0x105, lpBuffer=0x3be0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\idb", lpFilePart=0x0) returned 0x6c [0077.585] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\idb\\", nBufferLength=0x105, lpBuffer=0x3be060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\idb\\", lpFilePart=0x0) returned 0x6d [0077.585] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\idb\\*", lpFindFileData=0x3be270 | out: lpFindFileData=0x3be270) returned 0x5d7af0 [0077.597] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0077.597] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0077.598] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0077.598] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 0 [0077.598] FindClose (in: hFindFile=0x5d7af0 | out: hFindFile=0x5d7af0) returned 1 [0077.598] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0077.598] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0077.598] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0077.598] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\idb", nBufferLength=0x105, lpBuffer=0x3be0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\idb", lpFilePart=0x0) returned 0x6c [0077.599] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\idb\\", nBufferLength=0x105, lpBuffer=0x3be060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\idb\\", lpFilePart=0x0) returned 0x6d [0077.599] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\idb\\*", lpFindFileData=0x3be270 | out: lpFindFileData=0x3be270) returned 0x5d7c70 [0077.599] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0077.599] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0077.600] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0077.600] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 0 [0077.600] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0077.600] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0077.600] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0077.600] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\idb\\2918063365piupsah.sqlite", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\idb\\2918063365piupsah.sqlite", lpFilePart=0x0) returned 0x85 [0077.600] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0077.600] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\idb\\2918063365piupsah.sqlite" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\storage\\permanent\\chrome\\idb\\2918063365piupsah.sqlite"), fInfoLevelId=0x0, lpFileInformation=0x22426c0 | out: lpFileInformation=0x22426c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c21ab28, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3c21ab28, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x3de55c1e, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0xc000)) returned 1 [0077.601] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0077.601] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\idb\\2918063365piupsah.sqlite", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\idb\\2918063365piupsah.sqlite", lpFilePart=0x0) returned 0x85 [0077.601] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0077.601] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\idb\\2918063365piupsah.sqlite" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\storage\\permanent\\chrome\\idb\\2918063365piupsah.sqlite"), fInfoLevelId=0x0, lpFileInformation=0x22428a0 | out: lpFileInformation=0x22428a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c21ab28, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3c21ab28, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x3de55c1e, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0xc000)) returned 1 [0077.601] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0077.601] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\idb\\2918063365piupsah.sqlite", nBufferLength=0x105, lpBuffer=0x3bdfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\idb\\2918063365piupsah.sqlite", lpFilePart=0x0) returned 0x85 [0077.601] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0077.601] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\idb\\2918063365piupsah.sqlite" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\storage\\permanent\\chrome\\idb\\2918063365piupsah.sqlite"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0077.602] GetFileType (hFile=0x444) returned 0x1 [0077.602] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be420) returned 1 [0077.602] GetFileType (hFile=0x444) returned 0x1 [0077.602] ReadFile (in: hFile=0x444, lpBuffer=0x2244d90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be538, lpOverlapped=0x0 | out: lpBuffer=0x2244d90*, lpNumberOfBytesRead=0x3be538*=0x1000, lpOverlapped=0x0) returned 1 [0077.635] CloseHandle (hObject=0x444) returned 1 [0077.636] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\idb\\2918063365piupsah.sqlite", nBufferLength=0x105, lpBuffer=0x3bdfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\idb\\2918063365piupsah.sqlite", lpFilePart=0x0) returned 0x85 [0077.636] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0077.636] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\idb\\2918063365piupsah.sqlite" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\storage\\permanent\\chrome\\idb\\2918063365piupsah.sqlite"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0077.636] GetFileType (hFile=0x444) returned 0x1 [0077.636] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be420) returned 1 [0077.636] GetFileType (hFile=0x444) returned 0x1 [0077.636] WriteFile (in: hFile=0x444, lpBuffer=0x2242a60*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be5e8, lpOverlapped=0x0 | out: lpBuffer=0x2242a60*, lpNumberOfBytesWritten=0x3be5e8*=0x2000, lpOverlapped=0x0) returned 1 [0077.636] CloseHandle (hObject=0x444) returned 1 [0077.636] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\idb\\2918063365piupsah.sqlite", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\idb\\2918063365piupsah.sqlite", lpFilePart=0x0) returned 0x85 [0077.637] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\idb\\2918063365piupsah.sqlite.xuy", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\idb\\2918063365piupsah.sqlite.xuy", lpFilePart=0x0) returned 0x89 [0077.637] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0077.637] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\idb\\2918063365piupsah.sqlite" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\storage\\permanent\\chrome\\idb\\2918063365piupsah.sqlite"), fInfoLevelId=0x0, lpFileInformation=0x3be600 | out: lpFileInformation=0x3be600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c21ab28, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3c21ab28, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x1a205134, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xc000)) returned 1 [0077.637] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0077.637] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\idb\\2918063365piupsah.sqlite" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\storage\\permanent\\chrome\\idb\\2918063365piupsah.sqlite"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\idb\\2918063365piupsah.sqlite.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\storage\\permanent\\chrome\\idb\\2918063365piupsah.sqlite.xuy")) returned 1 [0077.638] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0077.638] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\idb\\2918063365piupsah.files", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\idb\\2918063365piupsah.files", lpFilePart=0x0) returned 0x84 [0077.638] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\idb\\2918063365piupsah.files\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\idb\\2918063365piupsah.files\\", lpFilePart=0x0) returned 0x85 [0077.638] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\idb\\2918063365piupsah.files\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7550 [0077.638] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0077.638] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0077.638] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0077.638] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0077.638] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0077.638] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0077.638] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\idb\\2918063365piupsah.files", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\idb\\2918063365piupsah.files", lpFilePart=0x0) returned 0x84 [0077.638] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\idb\\2918063365piupsah.files\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\idb\\2918063365piupsah.files\\", lpFilePart=0x0) returned 0x85 [0077.638] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\idb\\2918063365piupsah.files\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d78b0 [0077.639] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0077.639] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0077.639] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0077.639] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0077.639] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0077.639] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0077.639] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home", nBufferLength=0x105, lpBuffer=0x3be130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home", lpFilePart=0x0) returned 0x75 [0077.639] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\", nBufferLength=0x105, lpBuffer=0x3be0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\", lpFilePart=0x0) returned 0x76 [0077.639] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\*", lpFindFileData=0x3be2e0 | out: lpFindFileData=0x3be2e0) returned 0x5d78b0 [0077.640] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0077.640] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0077.640] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0077.640] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0077.640] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 0 [0077.640] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0077.640] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0077.640] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0077.640] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0077.640] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home", nBufferLength=0x105, lpBuffer=0x3be130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home", lpFilePart=0x0) returned 0x75 [0077.640] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\", nBufferLength=0x105, lpBuffer=0x3be0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\", lpFilePart=0x0) returned 0x76 [0077.641] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\*", lpFindFileData=0x3be2e0 | out: lpFindFileData=0x3be2e0) returned 0x5d79d0 [0077.641] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0077.641] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0077.641] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0077.641] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0077.641] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 0 [0077.641] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0077.641] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0077.641] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0077.641] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\.metadata", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\.metadata", lpFilePart=0x0) returned 0x7f [0077.641] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0077.641] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\.metadata" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\.metadata"), fInfoLevelId=0x0, lpFileInformation=0x22c6fa0 | out: lpFileInformation=0x22c6fa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f2f1f26, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3f2f1f26, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x3f2f1f26, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x2e)) returned 1 [0077.642] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0077.642] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\.metadata", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\.metadata", lpFilePart=0x0) returned 0x7f [0077.642] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0077.642] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\.metadata" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\.metadata"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0077.642] GetFileType (hFile=0x444) returned 0x1 [0077.642] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be400) returned 1 [0077.642] GetFileType (hFile=0x444) returned 0x1 [0077.642] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be628 | out: lpFileSizeHigh=0x3be628*=0x0) returned 0x2e [0077.642] ReadFile (in: hFile=0x444, lpBuffer=0x22c7348, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be558, lpOverlapped=0x0 | out: lpBuffer=0x22c7348*, lpNumberOfBytesRead=0x3be558*=0x2e, lpOverlapped=0x0) returned 1 [0077.643] CloseHandle (hObject=0x444) returned 1 [0077.654] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\.metadata", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\.metadata", lpFilePart=0x0) returned 0x7f [0077.654] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0077.655] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\.metadata" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\.metadata"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0077.656] GetFileType (hFile=0x444) returned 0x1 [0077.657] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be400) returned 1 [0077.657] GetFileType (hFile=0x444) returned 0x1 [0077.657] WriteFile (in: hFile=0x444, lpBuffer=0x233e500*, nNumberOfBytesToWrite=0x30, lpNumberOfBytesWritten=0x3be468, lpOverlapped=0x0 | out: lpBuffer=0x233e500*, lpNumberOfBytesWritten=0x3be468*=0x30, lpOverlapped=0x0) returned 1 [0077.658] CloseHandle (hObject=0x444) returned 1 [0077.658] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\.metadata", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\.metadata", lpFilePart=0x0) returned 0x7f [0077.658] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\.metadata.xuy", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\.metadata.xuy", lpFilePart=0x0) returned 0x83 [0077.658] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0077.658] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\.metadata" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\.metadata"), fInfoLevelId=0x0, lpFileInformation=0x3be670 | out: lpFileInformation=0x3be670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f2f1f26, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3f2f1f26, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x1a22b2e5, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x30)) returned 1 [0077.658] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0077.658] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\.metadata" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\.metadata"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\.metadata.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\.metadata.xuy")) returned 1 [0077.659] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\.metadata-v2", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\.metadata-v2", lpFilePart=0x0) returned 0x82 [0077.659] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0077.659] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\.metadata-v2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\.metadata-v2"), fInfoLevelId=0x0, lpFileInformation=0x233f8c8 | out: lpFileInformation=0x233f8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f2f1f26, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3f2f1f26, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x3f2f1f26, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x3b)) returned 1 [0077.663] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0077.663] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\.metadata-v2", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\.metadata-v2", lpFilePart=0x0) returned 0x82 [0077.663] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0077.663] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\.metadata-v2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\.metadata-v2"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0077.663] GetFileType (hFile=0x444) returned 0x1 [0077.663] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be400) returned 1 [0077.663] GetFileType (hFile=0x444) returned 0x1 [0077.663] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be628 | out: lpFileSizeHigh=0x3be628*=0x0) returned 0x3b [0077.664] ReadFile (in: hFile=0x444, lpBuffer=0x233fca0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be558, lpOverlapped=0x0 | out: lpBuffer=0x233fca0*, lpNumberOfBytesRead=0x3be558*=0x3b, lpOverlapped=0x0) returned 1 [0077.665] CloseHandle (hObject=0x444) returned 1 [0077.727] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\.metadata-v2", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\.metadata-v2", lpFilePart=0x0) returned 0x82 [0077.727] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0077.727] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\.metadata-v2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\.metadata-v2"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0077.731] GetFileType (hFile=0x444) returned 0x1 [0077.731] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be400) returned 1 [0077.731] GetFileType (hFile=0x444) returned 0x1 [0077.731] WriteFile (in: hFile=0x444, lpBuffer=0x21b7b98*, nNumberOfBytesToWrite=0x40, lpNumberOfBytesWritten=0x3be468, lpOverlapped=0x0 | out: lpBuffer=0x21b7b98*, lpNumberOfBytesWritten=0x3be468*=0x40, lpOverlapped=0x0) returned 1 [0077.732] CloseHandle (hObject=0x444) returned 1 [0077.732] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\.metadata-v2", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\.metadata-v2", lpFilePart=0x0) returned 0x82 [0077.732] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\.metadata-v2.xuy", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\.metadata-v2.xuy", lpFilePart=0x0) returned 0x86 [0077.732] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0077.732] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\.metadata-v2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\.metadata-v2"), fInfoLevelId=0x0, lpFileInformation=0x3be670 | out: lpFileInformation=0x3be670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f2f1f26, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3f2f1f26, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x1a2ea01d, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x40)) returned 1 [0077.733] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0077.733] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\.metadata-v2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\.metadata-v2"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\.metadata-v2.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\.metadata-v2.xuy")) returned 1 [0077.733] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0077.733] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb", nBufferLength=0x105, lpBuffer=0x3be0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb", lpFilePart=0x0) returned 0x79 [0077.733] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\", nBufferLength=0x105, lpBuffer=0x3be060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\", lpFilePart=0x0) returned 0x7a [0077.734] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\*", lpFindFileData=0x3be270 | out: lpFindFileData=0x3be270) returned 0x5d73d0 [0077.768] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0077.768] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0077.768] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0077.768] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 0 [0077.768] FindClose (in: hFindFile=0x5d73d0 | out: hFindFile=0x5d73d0) returned 1 [0077.769] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0077.769] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0077.769] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0077.769] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb", nBufferLength=0x105, lpBuffer=0x3be0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb", lpFilePart=0x0) returned 0x79 [0077.769] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\", nBufferLength=0x105, lpBuffer=0x3be060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\", lpFilePart=0x0) returned 0x7a [0077.769] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\*", lpFindFileData=0x3be270 | out: lpFindFileData=0x3be270) returned 0x5d81b0 [0077.770] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0077.770] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0077.770] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0077.770] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 0 [0077.770] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0077.771] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0077.771] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0077.771] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.sqlite", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.sqlite", lpFilePart=0x0) returned 0x93 [0077.771] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0077.771] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.sqlite" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.sqlite"), fInfoLevelId=0x0, lpFileInformation=0x21bc260 | out: lpFileInformation=0x21bc260*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f2f4639, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3f2f4639, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x737971ad, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0xc000)) returned 1 [0077.772] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0077.772] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.sqlite", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.sqlite", lpFilePart=0x0) returned 0x93 [0077.772] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0077.772] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.sqlite" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.sqlite"), fInfoLevelId=0x0, lpFileInformation=0x21bc458 | out: lpFileInformation=0x21bc458*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f2f4639, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3f2f4639, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x737971ad, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0xc000)) returned 1 [0077.772] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0077.772] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.sqlite", nBufferLength=0x105, lpBuffer=0x3bdfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.sqlite", lpFilePart=0x0) returned 0x93 [0077.772] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0077.772] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.sqlite" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.sqlite"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0077.773] GetFileType (hFile=0x444) returned 0x1 [0077.773] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be420) returned 1 [0077.773] GetFileType (hFile=0x444) returned 0x1 [0077.773] ReadFile (in: hFile=0x444, lpBuffer=0x21be978, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be538, lpOverlapped=0x0 | out: lpBuffer=0x21be978*, lpNumberOfBytesRead=0x3be538*=0x1000, lpOverlapped=0x0) returned 1 [0077.803] CloseHandle (hObject=0x444) returned 1 [0077.843] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.sqlite", nBufferLength=0x105, lpBuffer=0x3bdfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.sqlite", lpFilePart=0x0) returned 0x93 [0077.844] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0077.844] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.sqlite" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.sqlite"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0077.844] GetFileType (hFile=0x444) returned 0x1 [0077.844] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be420) returned 1 [0077.844] GetFileType (hFile=0x444) returned 0x1 [0077.844] WriteFile (in: hFile=0x444, lpBuffer=0x21bc630*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be5e8, lpOverlapped=0x0 | out: lpBuffer=0x21bc630*, lpNumberOfBytesWritten=0x3be5e8*=0x2000, lpOverlapped=0x0) returned 1 [0077.844] CloseHandle (hObject=0x444) returned 1 [0077.844] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.sqlite", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.sqlite", lpFilePart=0x0) returned 0x93 [0077.844] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.sqlite.xuy", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.sqlite.xuy", lpFilePart=0x0) returned 0x97 [0077.844] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0077.844] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.sqlite" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.sqlite"), fInfoLevelId=0x0, lpFileInformation=0x3be600 | out: lpFileInformation=0x3be600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f2f4639, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3f2f4639, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x1a3f4e7e, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xc000)) returned 1 [0077.845] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0077.845] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.sqlite" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.sqlite"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.sqlite.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.sqlite.xuy")) returned 1 [0077.845] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0077.845] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.files", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.files", lpFilePart=0x0) returned 0x92 [0077.846] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.files\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.files\\", lpFilePart=0x0) returned 0x93 [0077.846] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.files\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7370 [0077.846] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0077.846] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0077.847] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0077.847] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0077.847] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0077.847] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0077.847] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0077.847] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0077.847] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.files", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.files", lpFilePart=0x0) returned 0x92 [0077.847] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.files\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.files\\", lpFilePart=0x0) returned 0x93 [0077.847] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.files\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7370 [0077.847] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0077.847] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0077.847] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0077.848] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0077.848] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0077.848] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0077.848] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0077.848] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.files\\1", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.files\\1", lpFilePart=0x0) returned 0x94 [0077.848] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0077.848] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.files\\1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.files\\1"), fInfoLevelId=0x0, lpFileInformation=0x223e630 | out: lpFileInformation=0x223e630*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x408bf5ea, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x408bf5ea, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x4096084d, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x81229)) returned 1 [0077.848] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0077.848] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.files\\1", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.files\\1", lpFilePart=0x0) returned 0x94 [0077.848] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0077.848] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.files\\1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.files\\1"), fInfoLevelId=0x0, lpFileInformation=0x223e800 | out: lpFileInformation=0x223e800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x408bf5ea, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x408bf5ea, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x4096084d, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x81229)) returned 1 [0077.848] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0077.848] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.files\\1", nBufferLength=0x105, lpBuffer=0x3bdf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.files\\1", lpFilePart=0x0) returned 0x94 [0077.848] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be440) returned 1 [0077.848] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.files\\1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.files\\1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0077.849] GetFileType (hFile=0x444) returned 0x1 [0077.849] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be3b0) returned 1 [0077.849] GetFileType (hFile=0x444) returned 0x1 [0077.849] ReadFile (in: hFile=0x444, lpBuffer=0x2240cd0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be4c8, lpOverlapped=0x0 | out: lpBuffer=0x2240cd0*, lpNumberOfBytesRead=0x3be4c8*=0x1000, lpOverlapped=0x0) returned 1 [0077.883] CloseHandle (hObject=0x444) returned 1 [0077.889] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.files\\1", nBufferLength=0x105, lpBuffer=0x3bdf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.files\\1", lpFilePart=0x0) returned 0x94 [0077.889] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be440) returned 1 [0077.889] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.files\\1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.files\\1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0077.890] GetFileType (hFile=0x444) returned 0x1 [0077.890] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be3b0) returned 1 [0077.890] GetFileType (hFile=0x444) returned 0x1 [0077.890] WriteFile (in: hFile=0x444, lpBuffer=0x223e9b0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be578, lpOverlapped=0x0 | out: lpBuffer=0x223e9b0*, lpNumberOfBytesWritten=0x3be578*=0x2000, lpOverlapped=0x0) returned 1 [0077.890] CloseHandle (hObject=0x444) returned 1 [0077.890] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.files\\1", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.files\\1", lpFilePart=0x0) returned 0x94 [0077.890] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.files\\1.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.files\\1.xuy", lpFilePart=0x0) returned 0x98 [0077.890] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0077.891] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.files\\1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.files\\1"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x408bf5ea, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x408bf5ea, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x1a467751, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x81229)) returned 1 [0077.891] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0077.891] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.files\\1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.files\\1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.files\\1.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.files\\1.xuy")) returned 1 [0077.892] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0077.892] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.files\\journals", nBufferLength=0x105, lpBuffer=0x3bdfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.files\\journals", lpFilePart=0x0) returned 0x9b [0077.892] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.files\\journals\\", nBufferLength=0x105, lpBuffer=0x3bdf80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.files\\journals\\", lpFilePart=0x0) returned 0x9c [0077.892] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.files\\journals\\*", lpFindFileData=0x3be190 | out: lpFindFileData=0x3be190) returned 0x5d7af0 [0077.893] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be1e0 | out: lpFindFileData=0x3be1e0) returned 1 [0077.893] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be1e0 | out: lpFindFileData=0x3be1e0) returned 0 [0077.894] FindClose (in: hFindFile=0x5d7af0 | out: hFindFile=0x5d7af0) returned 1 [0077.894] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be440) returned 1 [0077.894] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be400) returned 1 [0077.894] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0077.894] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.files\\journals", nBufferLength=0x105, lpBuffer=0x3bdfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.files\\journals", lpFilePart=0x0) returned 0x9b [0077.894] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.files\\journals\\", nBufferLength=0x105, lpBuffer=0x3bdf80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.files\\journals\\", lpFilePart=0x0) returned 0x9c [0077.894] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.files\\journals\\*", lpFindFileData=0x3be190 | out: lpFindFileData=0x3be190) returned 0x5d7670 [0077.894] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be1e0 | out: lpFindFileData=0x3be1e0) returned 1 [0077.894] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be1e0 | out: lpFindFileData=0x3be1e0) returned 0 [0077.895] FindClose (in: hFindFile=0x5d7670 | out: hFindFile=0x5d7670) returned 1 [0077.895] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be440) returned 1 [0077.895] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be400) returned 1 [0077.895] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0077.895] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Skype", nBufferLength=0x105, lpBuffer=0x3be3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Skype", lpFilePart=0x0) returned 0x2b [0077.895] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Skype\\", nBufferLength=0x105, lpBuffer=0x3be370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Skype\\", lpFilePart=0x0) returned 0x2c [0077.895] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Skype\\*", lpFindFileData=0x3be580 | out: lpFindFileData=0x3be580) returned 0x5d7f10 [0077.896] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0077.896] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0077.896] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 0 [0077.896] FindClose (in: hFindFile=0x5d7f10 | out: hFindFile=0x5d7f10) returned 1 [0077.896] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0077.896] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7f0) returned 1 [0077.896] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0077.897] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Skype", nBufferLength=0x105, lpBuffer=0x3be3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Skype", lpFilePart=0x0) returned 0x2b [0077.897] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Skype\\", nBufferLength=0x105, lpBuffer=0x3be370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Skype\\", lpFilePart=0x0) returned 0x2c [0077.897] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Skype\\*", lpFindFileData=0x3be580 | out: lpFindFileData=0x3be580) returned 0x5d7370 [0077.897] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0077.897] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0077.897] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 0 [0077.897] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0077.897] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0077.897] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7f0) returned 1 [0077.898] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0077.898] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Skype\\RootTools", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Skype\\RootTools", lpFilePart=0x0) returned 0x35 [0077.898] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Skype\\RootTools\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Skype\\RootTools\\", lpFilePart=0x0) returned 0x36 [0077.898] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Skype\\RootTools\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d78b0 [0077.898] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0077.898] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0077.898] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0077.898] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0077.899] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0077.899] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0077.899] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0077.899] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Skype\\RootTools", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Skype\\RootTools", lpFilePart=0x0) returned 0x35 [0077.899] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Skype\\RootTools\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Skype\\RootTools\\", lpFilePart=0x0) returned 0x36 [0077.899] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Skype\\RootTools\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d7c70 [0077.899] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0077.899] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0077.899] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0077.900] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0077.900] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0077.900] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0077.900] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Skype\\RootTools\\roottools.conf", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Skype\\RootTools\\roottools.conf", lpFilePart=0x0) returned 0x44 [0077.900] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0077.900] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Skype\\RootTools\\roottools.conf" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\skype\\roottools\\roottools.conf"), fInfoLevelId=0x0, lpFileInformation=0x22c3340 | out: lpFileInformation=0x22c3340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1dbc722c, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x1dbc722c, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x1dc13853, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x4c)) returned 1 [0077.900] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0077.900] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Skype\\RootTools\\roottools.conf", nBufferLength=0x105, lpBuffer=0x3be1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Skype\\RootTools\\roottools.conf", lpFilePart=0x0) returned 0x44 [0077.900] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6c0) returned 1 [0077.900] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Skype\\RootTools\\roottools.conf" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\skype\\roottools\\roottools.conf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0077.901] GetFileType (hFile=0x444) returned 0x1 [0077.901] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0077.901] GetFileType (hFile=0x444) returned 0x1 [0077.901] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be858 | out: lpFileSizeHigh=0x3be858*=0x0) returned 0x4c [0077.901] ReadFile (in: hFile=0x444, lpBuffer=0x22c3638, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be788, lpOverlapped=0x0 | out: lpBuffer=0x22c3638*, lpNumberOfBytesRead=0x3be788*=0x4c, lpOverlapped=0x0) returned 1 [0077.902] CloseHandle (hObject=0x444) returned 1 [0077.919] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Skype\\RootTools\\roottools.conf", nBufferLength=0x105, lpBuffer=0x3be1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Skype\\RootTools\\roottools.conf", lpFilePart=0x0) returned 0x44 [0077.919] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6c0) returned 1 [0077.919] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Skype\\RootTools\\roottools.conf" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\skype\\roottools\\roottools.conf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0077.921] GetFileType (hFile=0x444) returned 0x1 [0077.921] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0077.921] GetFileType (hFile=0x444) returned 0x1 [0077.922] WriteFile (in: hFile=0x444, lpBuffer=0x233a7c8*, nNumberOfBytesToWrite=0x50, lpNumberOfBytesWritten=0x3be698, lpOverlapped=0x0 | out: lpBuffer=0x233a7c8*, lpNumberOfBytesWritten=0x3be698*=0x50, lpOverlapped=0x0) returned 1 [0077.923] CloseHandle (hObject=0x444) returned 1 [0077.923] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Skype\\RootTools\\roottools.conf", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Skype\\RootTools\\roottools.conf", lpFilePart=0x0) returned 0x44 [0077.923] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Skype\\RootTools\\roottools.conf.xuy", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Skype\\RootTools\\roottools.conf.xuy", lpFilePart=0x0) returned 0x48 [0077.923] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0077.923] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Skype\\RootTools\\roottools.conf" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\skype\\roottools\\roottools.conf"), fInfoLevelId=0x0, lpFileInformation=0x3be8a0 | out: lpFileInformation=0x3be8a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1dbc722c, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x1dbc722c, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x1a4b3bec, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x50)) returned 1 [0077.924] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0077.924] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Skype\\RootTools\\roottools.conf" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\skype\\roottools\\roottools.conf"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Skype\\RootTools\\roottools.conf.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\skype\\roottools\\roottools.conf.xuy")) returned 1 [0077.925] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0077.925] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Sun", nBufferLength=0x105, lpBuffer=0x3be3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Sun", lpFilePart=0x0) returned 0x29 [0077.925] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Sun\\", nBufferLength=0x105, lpBuffer=0x3be370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Sun\\", lpFilePart=0x0) returned 0x2a [0077.925] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Sun\\*", lpFindFileData=0x3be580 | out: lpFindFileData=0x3be580) returned 0x5d7550 [0077.926] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0077.926] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0077.926] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 0 [0077.926] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0077.926] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0077.926] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7f0) returned 1 [0077.926] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0077.926] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Sun", nBufferLength=0x105, lpBuffer=0x3be3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Sun", lpFilePart=0x0) returned 0x29 [0077.927] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Sun\\", nBufferLength=0x105, lpBuffer=0x3be370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Sun\\", lpFilePart=0x0) returned 0x2a [0077.927] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Sun\\*", lpFindFileData=0x3be580 | out: lpFindFileData=0x3be580) returned 0x5d7d90 [0077.927] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0077.927] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0077.927] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 0 [0077.927] FindClose (in: hFindFile=0x5d7d90 | out: hFindFile=0x5d7d90) returned 1 [0077.927] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0077.927] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7f0) returned 1 [0077.928] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0077.928] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Sun\\Java", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Sun\\Java", lpFilePart=0x0) returned 0x2e [0077.928] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Sun\\Java\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Sun\\Java\\", lpFilePart=0x0) returned 0x2f [0077.928] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Sun\\Java\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d78b0 [0077.930] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0077.930] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0077.930] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0077.931] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0077.931] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0077.931] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0077.931] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0077.931] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Sun\\Java", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Sun\\Java", lpFilePart=0x0) returned 0x2e [0077.931] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Sun\\Java\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Sun\\Java\\", lpFilePart=0x0) returned 0x2f [0077.931] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Sun\\Java\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d79d0 [0077.931] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0077.932] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0077.932] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0077.932] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0077.932] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0077.932] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0077.932] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0077.932] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Sun\\Java\\Deployment", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Sun\\Java\\Deployment", lpFilePart=0x0) returned 0x39 [0077.932] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Sun\\Java\\Deployment\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Sun\\Java\\Deployment\\", lpFilePart=0x0) returned 0x3a [0077.932] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Sun\\Java\\Deployment\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7d30 [0077.933] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0077.933] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0077.933] FindClose (in: hFindFile=0x5d7d30 | out: hFindFile=0x5d7d30) returned 1 [0077.933] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0077.933] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0077.933] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0077.933] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Sun\\Java\\Deployment", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Sun\\Java\\Deployment", lpFilePart=0x0) returned 0x39 [0077.933] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Sun\\Java\\Deployment\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Sun\\Java\\Deployment\\", lpFilePart=0x0) returned 0x3a [0077.933] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Sun\\Java\\Deployment\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d73d0 [0077.934] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0077.934] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0077.934] FindClose (in: hFindFile=0x5d73d0 | out: hFindFile=0x5d73d0) returned 1 [0077.934] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0077.934] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0077.934] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be950) returned 1 [0077.934] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop", nBufferLength=0x105, lpBuffer=0x3be440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpFilePart=0x0) returned 0x1d [0077.934] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\", nBufferLength=0x105, lpBuffer=0x3be3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\", lpFilePart=0x0) returned 0x1e [0077.934] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\*", lpFindFileData=0x3be5f0 | out: lpFindFileData=0x3be5f0) returned 0x5d73d0 [0077.934] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0077.935] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0077.935] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0077.935] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0077.935] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0077.935] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0077.935] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0077.936] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0077.936] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0077.936] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0077.936] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0077.936] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0077.936] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0077.936] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0077.937] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0077.937] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0077.937] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0077.937] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0077.937] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0077.937] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0077.937] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0077.937] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0077.938] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0077.938] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0077.938] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0077.938] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0077.938] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0077.938] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0077.938] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0077.939] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0077.939] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0077.939] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0077.939] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0077.939] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0077.939] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0077.939] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0077.940] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 0 [0077.940] FindClose (in: hFindFile=0x5d73d0 | out: hFindFile=0x5d73d0) returned 1 [0077.940] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0077.940] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0077.940] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be950) returned 1 [0077.940] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop", nBufferLength=0x105, lpBuffer=0x3be440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpFilePart=0x0) returned 0x1d [0077.940] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\", nBufferLength=0x105, lpBuffer=0x3be3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\", lpFilePart=0x0) returned 0x1e [0077.940] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\*", lpFindFileData=0x3be5f0 | out: lpFindFileData=0x3be5f0) returned 0x5d78b0 [0077.940] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0077.940] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0077.941] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0077.941] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0077.941] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0077.941] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0077.941] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0077.941] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0077.942] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0077.942] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0077.942] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0077.942] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0077.942] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0077.943] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0077.943] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0077.943] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0077.943] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0077.943] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0077.943] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0077.944] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0077.944] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0077.944] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0077.944] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0077.944] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0077.944] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0077.944] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0077.944] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0077.944] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0077.944] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0077.944] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0077.944] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0077.945] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0077.945] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0077.945] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0077.945] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0077.945] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0077.945] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 0 [0077.945] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0077.945] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0077.945] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0077.945] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\desktop.ini", lpFilePart=0x0) returned 0x29 [0077.948] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0077.949] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x214b098 | out: lpFileInformation=0x214b098*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xae11c718, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xae11c718, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xae11c718, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x11a)) returned 1 [0077.949] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0077.949] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\desktop.ini", lpFilePart=0x0) returned 0x29 [0077.949] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0077.949] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0077.949] GetFileType (hFile=0x444) returned 0x1 [0077.949] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0077.949] GetFileType (hFile=0x444) returned 0x1 [0077.949] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be938 | out: lpFileSizeHigh=0x3be938*=0x0) returned 0x11a [0077.949] ReadFile (in: hFile=0x444, lpBuffer=0x214b388, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be868, lpOverlapped=0x0 | out: lpBuffer=0x214b388*, lpNumberOfBytesRead=0x3be868*=0x11a, lpOverlapped=0x0) returned 1 [0077.949] CloseHandle (hObject=0x444) returned 1 [0078.001] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3be2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\desktop.ini", lpFilePart=0x0) returned 0x29 [0078.001] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7a0) returned 1 [0078.001] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\desktop.ini"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.003] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb230) returned 1 [0078.003] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3bbeb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\desktop.ini", lpFilePart=0x0) returned 0x29 [0078.003] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc350) returned 1 [0078.003] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x3bc430 | out: lpFileInformation=0x3bc430*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xae11c718, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xae11c718, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xae11c718, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x11a)) returned 1 [0078.004] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc310) returned 1 [0078.004] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3bbed0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\desktop.ini", lpFilePart=0x0) returned 0x29 [0078.004] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc350) returned 1 [0078.004] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x21c3088 | out: lpFileInformation=0x21c3088*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xae11c718, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xae11c718, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xae11c718, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x11a)) returned 1 [0078.004] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc310) returned 1 [0078.004] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3bbd30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\desktop.ini", lpFilePart=0x0) returned 0x29 [0078.004] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc210) returned 1 [0078.004] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0078.004] GetFileType (hFile=0x444) returned 0x1 [0078.004] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc180) returned 1 [0078.004] GetFileType (hFile=0x444) returned 0x1 [0078.004] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc3a8 | out: lpFileSizeHigh=0x3bc3a8*=0x0) returned 0x11a [0078.004] ReadFile (in: hFile=0x444, lpBuffer=0x21c33d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bc2d8, lpOverlapped=0x0 | out: lpBuffer=0x21c33d0*, lpNumberOfBytesRead=0x3bc2d8*=0x11a, lpOverlapped=0x0) returned 1 [0078.004] CloseHandle (hObject=0x444) returned 1 [0078.059] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3bbd30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\desktop.ini", lpFilePart=0x0) returned 0x29 [0078.059] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc210) returned 1 [0078.059] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\desktop.ini"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.061] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8ca0) returned 1 [0078.062] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XyuEncrypt.exe", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XyuEncrypt.exe", lpFilePart=0x0) returned 0x2c [0078.062] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0078.062] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XyuEncrypt.exe" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\xyuencrypt.exe"), fInfoLevelId=0x0, lpFileInformation=0x223b3a8 | out: lpFileInformation=0x223b3a8*(dwFileAttributes=0x2, ftCreationTime.dwLowDateTime=0xd686cfb6, ftCreationTime.dwHighDateTime=0x1d46683, ftLastAccessTime.dwLowDateTime=0xd686cfb6, ftLastAccessTime.dwHighDateTime=0x1d46683, ftLastWriteTime.dwLowDateTime=0xe9ccde00, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x3e00)) returned 1 [0078.062] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0078.062] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XyuEncrypt.exe", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XyuEncrypt.exe", lpFilePart=0x0) returned 0x2c [0078.062] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0078.062] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XyuEncrypt.exe" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\xyuencrypt.exe"), fInfoLevelId=0x0, lpFileInformation=0x223b4c0 | out: lpFileInformation=0x223b4c0*(dwFileAttributes=0x2, ftCreationTime.dwLowDateTime=0xd686cfb6, ftCreationTime.dwHighDateTime=0x1d46683, ftLastAccessTime.dwLowDateTime=0xd686cfb6, ftLastAccessTime.dwHighDateTime=0x1d46683, ftLastWriteTime.dwLowDateTime=0xe9ccde00, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x3e00)) returned 1 [0078.062] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0078.063] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XyuEncrypt.exe", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XyuEncrypt.exe", lpFilePart=0x0) returned 0x2c [0078.063] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0078.063] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XyuEncrypt.exe" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\xyuencrypt.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.064] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb2c0) returned 1 [0078.065] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XyuEncrypt.exe", nBufferLength=0x105, lpBuffer=0x3bbf40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XyuEncrypt.exe", lpFilePart=0x0) returned 0x2c [0078.065] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc3e0) returned 1 [0078.065] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XyuEncrypt.exe" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\xyuencrypt.exe"), fInfoLevelId=0x0, lpFileInformation=0x3bc4c0 | out: lpFileInformation=0x3bc4c0*(dwFileAttributes=0x2, ftCreationTime.dwLowDateTime=0xd686cfb6, ftCreationTime.dwHighDateTime=0x1d46683, ftLastAccessTime.dwLowDateTime=0xd686cfb6, ftLastAccessTime.dwHighDateTime=0x1d46683, ftLastWriteTime.dwLowDateTime=0xe9ccde00, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x3e00)) returned 1 [0078.065] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc3a0) returned 1 [0078.065] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XyuEncrypt.exe", nBufferLength=0x105, lpBuffer=0x3bbf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XyuEncrypt.exe", lpFilePart=0x0) returned 0x2c [0078.065] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc3e0) returned 1 [0078.065] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XyuEncrypt.exe" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\xyuencrypt.exe"), fInfoLevelId=0x0, lpFileInformation=0x223df48 | out: lpFileInformation=0x223df48*(dwFileAttributes=0x2, ftCreationTime.dwLowDateTime=0xd686cfb6, ftCreationTime.dwHighDateTime=0x1d46683, ftLastAccessTime.dwLowDateTime=0xd686cfb6, ftLastAccessTime.dwHighDateTime=0x1d46683, ftLastWriteTime.dwLowDateTime=0xe9ccde00, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x3e00)) returned 1 [0078.065] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc3a0) returned 1 [0078.065] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XyuEncrypt.exe", nBufferLength=0x105, lpBuffer=0x3bbf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XyuEncrypt.exe", lpFilePart=0x0) returned 0x2c [0078.065] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc3e0) returned 1 [0078.065] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XyuEncrypt.exe" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\xyuencrypt.exe"), fInfoLevelId=0x0, lpFileInformation=0x223e060 | out: lpFileInformation=0x223e060*(dwFileAttributes=0x2, ftCreationTime.dwLowDateTime=0xd686cfb6, ftCreationTime.dwHighDateTime=0x1d46683, ftLastAccessTime.dwLowDateTime=0xd686cfb6, ftLastAccessTime.dwHighDateTime=0x1d46683, ftLastWriteTime.dwLowDateTime=0xe9ccde00, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x3e00)) returned 1 [0078.065] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc3a0) returned 1 [0078.065] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XyuEncrypt.exe", nBufferLength=0x105, lpBuffer=0x3bbe00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XyuEncrypt.exe", lpFilePart=0x0) returned 0x2c [0078.066] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc2e0) returned 1 [0078.066] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XyuEncrypt.exe" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\xyuencrypt.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.067] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8d70) returned 1 [0078.068] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0078.068] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ", nBufferLength=0x105, lpBuffer=0x3be3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ", lpFilePart=0x0) returned 0x29 [0078.068] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\", nBufferLength=0x105, lpBuffer=0x3be370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\", lpFilePart=0x0) returned 0x2a [0078.068] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\*", lpFindFileData=0x3be580 | out: lpFindFileData=0x3be580) returned 0x5d7370 [0078.069] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0078.069] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0078.069] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0078.069] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0078.069] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0078.069] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0078.069] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0078.070] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0078.070] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0078.070] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0078.070] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0078.070] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0078.070] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0078.070] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 0 [0078.070] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0078.071] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0078.071] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7f0) returned 1 [0078.071] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0078.071] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ", nBufferLength=0x105, lpBuffer=0x3be3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ", lpFilePart=0x0) returned 0x29 [0078.071] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\", nBufferLength=0x105, lpBuffer=0x3be370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\", lpFilePart=0x0) returned 0x2a [0078.071] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\l0MLmWCXjKZ\\*", lpFindFileData=0x3be580 | out: lpFindFileData=0x3be580) returned 0x5d78b0 [0078.071] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0078.071] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0078.071] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0078.072] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0078.072] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0078.072] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0078.073] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0078.074] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0078.074] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0078.074] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0078.074] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0078.074] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0078.074] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0078.075] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 0 [0078.075] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0078.075] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0078.075] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7f0) returned 1 [0078.075] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be950) returned 1 [0078.075] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local", nBufferLength=0x105, lpBuffer=0x3be440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local", lpFilePart=0x0) returned 0x23 [0078.075] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\", nBufferLength=0x105, lpBuffer=0x3be3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\", lpFilePart=0x0) returned 0x24 [0078.075] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\*", lpFindFileData=0x3be5f0 | out: lpFindFileData=0x3be5f0) returned 0x5d7a90 [0078.075] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0078.076] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0078.076] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0078.076] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0078.076] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0078.076] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0078.076] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0078.077] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0078.077] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0078.077] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0078.077] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0078.077] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0078.077] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0078.078] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0078.078] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0078.078] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0078.078] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0078.078] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0078.078] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 0 [0078.079] FindClose (in: hFindFile=0x5d7a90 | out: hFindFile=0x5d7a90) returned 1 [0078.079] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0078.079] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0078.079] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be950) returned 1 [0078.079] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local", nBufferLength=0x105, lpBuffer=0x3be440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local", lpFilePart=0x0) returned 0x23 [0078.079] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\", nBufferLength=0x105, lpBuffer=0x3be3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\", lpFilePart=0x0) returned 0x24 [0078.079] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\*", lpFindFileData=0x3be5f0 | out: lpFindFileData=0x3be5f0) returned 0x5d7370 [0078.079] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0078.079] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0078.080] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0078.080] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0078.080] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0078.080] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0078.080] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0078.080] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0078.080] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0078.080] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0078.081] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0078.081] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0078.081] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0078.081] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0078.081] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0078.081] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0078.081] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0078.082] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 1 [0078.082] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be640 | out: lpFindFileData=0x3be640) returned 0 [0078.082] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0078.082] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0078.082] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0078.082] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\IconCache.db", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\IconCache.db", lpFilePart=0x0) returned 0x30 [0078.082] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0078.082] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\IconCache.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\iconcache.db"), fInfoLevelId=0x0, lpFileInformation=0x2249e20 | out: lpFileInformation=0x2249e20*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0xd0352ba0, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xd0352ba0, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xcd31b26c, ftLastWriteTime.dwHighDateTime=0x1d41fe0, nFileSizeHigh=0x0, nFileSizeLow=0x1da38)) returned 1 [0078.082] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0078.082] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\IconCache.db", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\IconCache.db", lpFilePart=0x0) returned 0x30 [0078.082] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0078.082] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\IconCache.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\iconcache.db"), fInfoLevelId=0x0, lpFileInformation=0x2249f40 | out: lpFileInformation=0x2249f40*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0xd0352ba0, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xd0352ba0, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xcd31b26c, ftLastWriteTime.dwHighDateTime=0x1d41fe0, nFileSizeHigh=0x0, nFileSizeLow=0x1da38)) returned 1 [0078.083] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be8a0) returned 1 [0078.083] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\IconCache.db", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\IconCache.db", lpFilePart=0x0) returned 0x30 [0078.083] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0078.083] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\IconCache.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\iconcache.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0078.083] GetFileType (hFile=0x444) returned 0x1 [0078.083] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0078.083] GetFileType (hFile=0x444) returned 0x1 [0078.083] ReadFile (in: hFile=0x444, lpBuffer=0x224c2b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be8b8, lpOverlapped=0x0 | out: lpBuffer=0x224c2b0*, lpNumberOfBytesRead=0x3be8b8*=0x1000, lpOverlapped=0x0) returned 1 [0078.143] CloseHandle (hObject=0x444) returned 1 [0078.143] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\IconCache.db", nBufferLength=0x105, lpBuffer=0x3be350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\IconCache.db", lpFilePart=0x0) returned 0x30 [0078.144] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0078.144] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\IconCache.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\iconcache.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0078.144] GetFileType (hFile=0x444) returned 0x1 [0078.144] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7a0) returned 1 [0078.144] GetFileType (hFile=0x444) returned 0x1 [0078.145] WriteFile (in: hFile=0x444, lpBuffer=0x224a040*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be968, lpOverlapped=0x0 | out: lpBuffer=0x224a040*, lpNumberOfBytesWritten=0x3be968*=0x2000, lpOverlapped=0x0) returned 1 [0078.145] CloseHandle (hObject=0x444) returned 1 [0078.145] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\IconCache.db", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\IconCache.db", lpFilePart=0x0) returned 0x30 [0078.145] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\IconCache.db.xuy", nBufferLength=0x105, lpBuffer=0x3be460, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\IconCache.db.xuy", lpFilePart=0x0) returned 0x34 [0078.145] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8a0) returned 1 [0078.145] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\IconCache.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\iconcache.db"), fInfoLevelId=0x0, lpFileInformation=0x3be980 | out: lpFileInformation=0x3be980*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0xd0352ba0, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xd0352ba0, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x1a6e2be2, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x1da38)) returned 1 [0078.146] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be860) returned 1 [0078.146] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\IconCache.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\iconcache.db"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\IconCache.db.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\iconcache.db.xuy")) returned 1 [0078.147] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0078.148] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe", nBufferLength=0x105, lpBuffer=0x3be3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe", lpFilePart=0x0) returned 0x29 [0078.148] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\", nBufferLength=0x105, lpBuffer=0x3be370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\", lpFilePart=0x0) returned 0x2a [0078.148] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\*", lpFindFileData=0x3be580 | out: lpFindFileData=0x3be580) returned 0x5d79d0 [0078.148] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0078.148] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0078.148] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0078.149] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0078.149] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 0 [0078.149] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0078.149] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0078.149] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7f0) returned 1 [0078.150] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0078.150] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe", nBufferLength=0x105, lpBuffer=0x3be3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe", lpFilePart=0x0) returned 0x29 [0078.150] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\", nBufferLength=0x105, lpBuffer=0x3be370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\", lpFilePart=0x0) returned 0x2a [0078.150] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\*", lpFindFileData=0x3be580 | out: lpFindFileData=0x3be580) returned 0x5d7a90 [0078.150] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0078.151] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0078.151] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0078.151] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0078.151] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 0 [0078.151] FindClose (in: hFindFile=0x5d7a90 | out: hFindFile=0x5d7a90) returned 1 [0078.151] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0078.151] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7f0) returned 1 [0078.152] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0078.152] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat", lpFilePart=0x0) returned 0x31 [0078.152] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\", lpFilePart=0x0) returned 0x32 [0078.152] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d81b0 [0078.153] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0078.153] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0078.153] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0078.153] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0078.153] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0078.153] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0078.153] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0078.153] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat", lpFilePart=0x0) returned 0x31 [0078.154] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\", lpFilePart=0x0) returned 0x32 [0078.154] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d7d30 [0078.154] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0078.154] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0078.155] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0078.155] FindClose (in: hFindFile=0x5d7d30 | out: hFindFile=0x5d7d30) returned 1 [0078.155] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0078.155] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0078.155] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0078.155] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC", lpFilePart=0x0) returned 0x34 [0078.155] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\", lpFilePart=0x0) returned 0x35 [0078.155] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7370 [0078.166] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0078.166] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0078.166] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0078.166] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0078.167] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0078.167] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0078.167] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0078.167] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0078.167] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0078.167] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0078.169] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0078.169] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0078.169] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0078.170] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0078.170] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0078.170] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0078.170] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC", lpFilePart=0x0) returned 0x34 [0078.171] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\", lpFilePart=0x0) returned 0x35 [0078.171] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d75b0 [0078.172] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0078.172] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0078.172] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0078.172] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0078.173] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0078.173] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0078.173] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0078.173] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0078.173] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0078.174] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0078.174] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0078.174] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0078.174] FindClose (in: hFindFile=0x5d75b0 | out: hFindFile=0x5d75b0) returned 1 [0078.175] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0078.175] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0078.175] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeCMapFnt15.lst", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeCMapFnt15.lst", lpFilePart=0x0) returned 0x47 [0078.175] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0078.175] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeCMapFnt15.lst" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrobat\\dc\\adobecmapfnt15.lst"), fInfoLevelId=0x0, lpFileInformation=0x22cfd78 | out: lpFileInformation=0x22cfd78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f1bd1b4, ftCreationTime.dwHighDateTime=0x1d2d43f, ftLastAccessTime.dwLowDateTime=0x6f1bd1b4, ftLastAccessTime.dwHighDateTime=0x1d2d43f, ftLastWriteTime.dwLowDateTime=0x6f1bd1b4, ftLastWriteTime.dwHighDateTime=0x1d2d43f, nFileSizeHigh=0x0, nFileSizeLow=0x40b)) returned 1 [0078.178] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0078.178] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeCMapFnt15.lst", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeCMapFnt15.lst", lpFilePart=0x0) returned 0x47 [0078.178] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0078.178] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeCMapFnt15.lst" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrobat\\dc\\adobecmapfnt15.lst"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0078.178] GetFileType (hFile=0x444) returned 0x1 [0078.178] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0078.178] GetFileType (hFile=0x444) returned 0x1 [0078.178] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0x40b [0078.178] ReadFile (in: hFile=0x444, lpBuffer=0x22d0440, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be718, lpOverlapped=0x0 | out: lpBuffer=0x22d0440*, lpNumberOfBytesRead=0x3be718*=0x40b, lpOverlapped=0x0) returned 1 [0078.192] CloseHandle (hObject=0x444) returned 1 [0078.245] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeCMapFnt15.lst", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeCMapFnt15.lst", lpFilePart=0x0) returned 0x47 [0078.246] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0078.246] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeCMapFnt15.lst" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrobat\\dc\\adobecmapfnt15.lst"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0078.247] GetFileType (hFile=0x444) returned 0x1 [0078.247] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0078.247] GetFileType (hFile=0x444) returned 0x1 [0078.248] WriteFile (in: hFile=0x444, lpBuffer=0x2348870*, nNumberOfBytesToWrite=0x410, lpNumberOfBytesWritten=0x3be628, lpOverlapped=0x0 | out: lpBuffer=0x2348870*, lpNumberOfBytesWritten=0x3be628*=0x410, lpOverlapped=0x0) returned 1 [0078.249] CloseHandle (hObject=0x444) returned 1 [0078.249] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeCMapFnt15.lst", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeCMapFnt15.lst", lpFilePart=0x0) returned 0x47 [0078.249] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeCMapFnt15.lst.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeCMapFnt15.lst.xuy", lpFilePart=0x0) returned 0x4b [0078.249] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0078.249] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeCMapFnt15.lst" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrobat\\dc\\adobecmapfnt15.lst"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f1bd1b4, ftCreationTime.dwHighDateTime=0x1d2d43f, ftLastAccessTime.dwLowDateTime=0x6f1bd1b4, ftLastAccessTime.dwHighDateTime=0x1d2d43f, ftLastWriteTime.dwLowDateTime=0x1a7cf2c1, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x410)) returned 1 [0078.249] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0078.249] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeCMapFnt15.lst" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrobat\\dc\\adobecmapfnt15.lst"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeCMapFnt15.lst.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrobat\\dc\\adobecmapfnt15.lst.xuy")) returned 1 [0078.250] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeCMapFnt17.lst", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeCMapFnt17.lst", lpFilePart=0x0) returned 0x47 [0078.250] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0078.250] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeCMapFnt17.lst" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrobat\\dc\\adobecmapfnt17.lst"), fInfoLevelId=0x0, lpFileInformation=0x2349ad8 | out: lpFileInformation=0x2349ad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab3856cc, ftCreationTime.dwHighDateTime=0x1d336e1, ftLastAccessTime.dwLowDateTime=0xab3856cc, ftLastAccessTime.dwHighDateTime=0x1d336e1, ftLastWriteTime.dwLowDateTime=0xab3856cc, ftLastWriteTime.dwHighDateTime=0x1d336e1, nFileSizeHigh=0x0, nFileSizeLow=0x218)) returned 1 [0078.251] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0078.251] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeCMapFnt17.lst", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeCMapFnt17.lst", lpFilePart=0x0) returned 0x47 [0078.251] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0078.251] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeCMapFnt17.lst" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrobat\\dc\\adobecmapfnt17.lst"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0078.251] GetFileType (hFile=0x444) returned 0x1 [0078.251] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0078.251] GetFileType (hFile=0x444) returned 0x1 [0078.251] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0x218 [0078.251] ReadFile (in: hFile=0x444, lpBuffer=0x2349fa8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be718, lpOverlapped=0x0 | out: lpBuffer=0x2349fa8*, lpNumberOfBytesRead=0x3be718*=0x218, lpOverlapped=0x0) returned 1 [0078.254] CloseHandle (hObject=0x444) returned 1 [0078.312] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeCMapFnt17.lst", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeCMapFnt17.lst", lpFilePart=0x0) returned 0x47 [0078.312] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0078.312] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeCMapFnt17.lst" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrobat\\dc\\adobecmapfnt17.lst"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0078.314] GetFileType (hFile=0x444) returned 0x1 [0078.314] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0078.314] GetFileType (hFile=0x444) returned 0x1 [0078.314] WriteFile (in: hFile=0x444, lpBuffer=0x21c32c8*, nNumberOfBytesToWrite=0x220, lpNumberOfBytesWritten=0x3be628, lpOverlapped=0x0 | out: lpBuffer=0x21c32c8*, lpNumberOfBytesWritten=0x3be628*=0x220, lpOverlapped=0x0) returned 1 [0078.315] CloseHandle (hObject=0x444) returned 1 [0078.315] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeCMapFnt17.lst", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeCMapFnt17.lst", lpFilePart=0x0) returned 0x47 [0078.315] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeCMapFnt17.lst.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeCMapFnt17.lst.xuy", lpFilePart=0x0) returned 0x4b [0078.316] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0078.316] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeCMapFnt17.lst" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrobat\\dc\\adobecmapfnt17.lst"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab3856cc, ftCreationTime.dwHighDateTime=0x1d336e1, ftLastAccessTime.dwLowDateTime=0xab3856cc, ftLastAccessTime.dwHighDateTime=0x1d336e1, ftLastWriteTime.dwLowDateTime=0x1a8679b0, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x220)) returned 1 [0078.316] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0078.316] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeCMapFnt17.lst" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrobat\\dc\\adobecmapfnt17.lst"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeCMapFnt17.lst.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrobat\\dc\\adobecmapfnt17.lst.xuy")) returned 1 [0078.317] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeSysFnt15.lst", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeSysFnt15.lst", lpFilePart=0x0) returned 0x46 [0078.317] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0078.317] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeSysFnt15.lst" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrobat\\dc\\adobesysfnt15.lst"), fInfoLevelId=0x0, lpFileInformation=0x21c4530 | out: lpFileInformation=0x21c4530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f1bd1b4, ftCreationTime.dwHighDateTime=0x1d2d43f, ftLastAccessTime.dwLowDateTime=0x6f1bd1b4, ftLastAccessTime.dwHighDateTime=0x1d2d43f, ftLastWriteTime.dwLowDateTime=0x6f1bd1b4, ftLastWriteTime.dwHighDateTime=0x1d2d43f, nFileSizeHigh=0x0, nFileSizeLow=0x1613f)) returned 1 [0078.317] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0078.317] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeSysFnt15.lst", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeSysFnt15.lst", lpFilePart=0x0) returned 0x46 [0078.317] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0078.317] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeSysFnt15.lst" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrobat\\dc\\adobesysfnt15.lst"), fInfoLevelId=0x0, lpFileInformation=0x21c4680 | out: lpFileInformation=0x21c4680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f1bd1b4, ftCreationTime.dwHighDateTime=0x1d2d43f, ftLastAccessTime.dwLowDateTime=0x6f1bd1b4, ftLastAccessTime.dwHighDateTime=0x1d2d43f, ftLastWriteTime.dwLowDateTime=0x6f1bd1b4, ftLastWriteTime.dwHighDateTime=0x1d2d43f, nFileSizeHigh=0x0, nFileSizeLow=0x1613f)) returned 1 [0078.317] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0078.317] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeSysFnt15.lst", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeSysFnt15.lst", lpFilePart=0x0) returned 0x46 [0078.318] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0078.318] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeSysFnt15.lst" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrobat\\dc\\adobesysfnt15.lst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0078.318] GetFileType (hFile=0x444) returned 0x1 [0078.318] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0078.318] GetFileType (hFile=0x444) returned 0x1 [0078.318] ReadFile (in: hFile=0x444, lpBuffer=0x21c6a50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x21c6a50*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0078.360] CloseHandle (hObject=0x444) returned 1 [0078.360] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeSysFnt15.lst", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeSysFnt15.lst", lpFilePart=0x0) returned 0x46 [0078.360] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0078.361] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeSysFnt15.lst" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrobat\\dc\\adobesysfnt15.lst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0078.361] GetFileType (hFile=0x444) returned 0x1 [0078.361] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0078.361] GetFileType (hFile=0x444) returned 0x1 [0078.361] WriteFile (in: hFile=0x444, lpBuffer=0x21c47b0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x21c47b0*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0078.361] CloseHandle (hObject=0x444) returned 1 [0078.361] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeSysFnt15.lst", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeSysFnt15.lst", lpFilePart=0x0) returned 0x46 [0078.361] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeSysFnt15.lst.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeSysFnt15.lst.xuy", lpFilePart=0x0) returned 0x4a [0078.361] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0078.362] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeSysFnt15.lst" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrobat\\dc\\adobesysfnt15.lst"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f1bd1b4, ftCreationTime.dwHighDateTime=0x1d2d43f, ftLastAccessTime.dwLowDateTime=0x6f1bd1b4, ftLastAccessTime.dwHighDateTime=0x1d2d43f, ftLastWriteTime.dwLowDateTime=0x1a8d9fd4, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x1613f)) returned 1 [0078.362] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0078.362] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeSysFnt15.lst" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrobat\\dc\\adobesysfnt15.lst"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeSysFnt15.lst.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrobat\\dc\\adobesysfnt15.lst.xuy")) returned 1 [0078.363] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeSysFnt17.lst", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeSysFnt17.lst", lpFilePart=0x0) returned 0x46 [0078.363] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0078.363] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeSysFnt17.lst" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrobat\\dc\\adobesysfnt17.lst"), fInfoLevelId=0x0, lpFileInformation=0x2242df0 | out: lpFileInformation=0x2242df0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab3856cc, ftCreationTime.dwHighDateTime=0x1d336e1, ftLastAccessTime.dwLowDateTime=0xab3856cc, ftLastAccessTime.dwHighDateTime=0x1d336e1, ftLastWriteTime.dwLowDateTime=0xab3856cc, ftLastWriteTime.dwHighDateTime=0x1d336e1, nFileSizeHigh=0x0, nFileSizeLow=0x24b55)) returned 1 [0078.363] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0078.363] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeSysFnt17.lst", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeSysFnt17.lst", lpFilePart=0x0) returned 0x46 [0078.363] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0078.363] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeSysFnt17.lst" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrobat\\dc\\adobesysfnt17.lst"), fInfoLevelId=0x0, lpFileInformation=0x2242f40 | out: lpFileInformation=0x2242f40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab3856cc, ftCreationTime.dwHighDateTime=0x1d336e1, ftLastAccessTime.dwLowDateTime=0xab3856cc, ftLastAccessTime.dwHighDateTime=0x1d336e1, ftLastWriteTime.dwLowDateTime=0xab3856cc, ftLastWriteTime.dwHighDateTime=0x1d336e1, nFileSizeHigh=0x0, nFileSizeLow=0x24b55)) returned 1 [0078.363] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0078.363] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeSysFnt17.lst", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeSysFnt17.lst", lpFilePart=0x0) returned 0x46 [0078.363] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0078.363] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeSysFnt17.lst" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrobat\\dc\\adobesysfnt17.lst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0078.364] GetFileType (hFile=0x444) returned 0x1 [0078.364] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0078.364] GetFileType (hFile=0x444) returned 0x1 [0078.364] ReadFile (in: hFile=0x444, lpBuffer=0x2245310, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x2245310*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0078.392] CloseHandle (hObject=0x444) returned 1 [0078.394] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeSysFnt17.lst", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeSysFnt17.lst", lpFilePart=0x0) returned 0x46 [0078.394] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0078.394] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeSysFnt17.lst" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrobat\\dc\\adobesysfnt17.lst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0078.395] GetFileType (hFile=0x444) returned 0x1 [0078.395] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0078.395] GetFileType (hFile=0x444) returned 0x1 [0078.395] WriteFile (in: hFile=0x444, lpBuffer=0x2243070*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x2243070*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0078.395] CloseHandle (hObject=0x444) returned 1 [0078.395] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeSysFnt17.lst", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeSysFnt17.lst", lpFilePart=0x0) returned 0x46 [0078.395] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeSysFnt17.lst.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeSysFnt17.lst.xuy", lpFilePart=0x0) returned 0x4a [0078.395] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0078.395] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeSysFnt17.lst" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrobat\\dc\\adobesysfnt17.lst"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab3856cc, ftCreationTime.dwHighDateTime=0x1d336e1, ftLastAccessTime.dwLowDateTime=0xab3856cc, ftLastAccessTime.dwHighDateTime=0x1d336e1, ftLastWriteTime.dwLowDateTime=0x1a926178, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x24b55)) returned 1 [0078.395] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0078.396] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeSysFnt17.lst" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrobat\\dc\\adobesysfnt17.lst"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeSysFnt17.lst.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrobat\\dc\\adobesysfnt17.lst.xuy")) returned 1 [0078.396] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\IconCacheRdr.dat", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\IconCacheRdr.dat", lpFilePart=0x0) returned 0x45 [0078.396] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0078.397] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\IconCacheRdr.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrobat\\dc\\iconcacherdr.dat"), fInfoLevelId=0x0, lpFileInformation=0x22c16b0 | out: lpFileInformation=0x22c16b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ee9c04b, ftCreationTime.dwHighDateTime=0x1d2d43f, ftLastAccessTime.dwLowDateTime=0x6ee9c04b, ftLastAccessTime.dwHighDateTime=0x1d2d43f, ftLastWriteTime.dwLowDateTime=0x6ee9c04b, ftLastWriteTime.dwHighDateTime=0x1d2d43f, nFileSizeHigh=0x0, nFileSizeLow=0xd146)) returned 1 [0078.397] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0078.397] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\IconCacheRdr.dat", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\IconCacheRdr.dat", lpFilePart=0x0) returned 0x45 [0078.397] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0078.397] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\IconCacheRdr.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrobat\\dc\\iconcacherdr.dat"), fInfoLevelId=0x0, lpFileInformation=0x22c1800 | out: lpFileInformation=0x22c1800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ee9c04b, ftCreationTime.dwHighDateTime=0x1d2d43f, ftLastAccessTime.dwLowDateTime=0x6ee9c04b, ftLastAccessTime.dwHighDateTime=0x1d2d43f, ftLastWriteTime.dwLowDateTime=0x6ee9c04b, ftLastWriteTime.dwHighDateTime=0x1d2d43f, nFileSizeHigh=0x0, nFileSizeLow=0xd146)) returned 1 [0078.397] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0078.397] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\IconCacheRdr.dat", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\IconCacheRdr.dat", lpFilePart=0x0) returned 0x45 [0078.397] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0078.397] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\IconCacheRdr.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrobat\\dc\\iconcacherdr.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0078.398] GetFileType (hFile=0x444) returned 0x1 [0078.398] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0078.398] GetFileType (hFile=0x444) returned 0x1 [0078.398] ReadFile (in: hFile=0x444, lpBuffer=0x22c3bd0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x22c3bd0*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0078.428] CloseHandle (hObject=0x444) returned 1 [0078.428] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\IconCacheRdr.dat", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\IconCacheRdr.dat", lpFilePart=0x0) returned 0x45 [0078.428] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0078.429] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\IconCacheRdr.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrobat\\dc\\iconcacherdr.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0078.429] GetFileType (hFile=0x444) returned 0x1 [0078.429] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0078.429] GetFileType (hFile=0x444) returned 0x1 [0078.429] WriteFile (in: hFile=0x444, lpBuffer=0x22c1930*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x22c1930*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0078.430] CloseHandle (hObject=0x444) returned 1 [0078.430] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\IconCacheRdr.dat", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\IconCacheRdr.dat", lpFilePart=0x0) returned 0x45 [0078.430] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\IconCacheRdr.dat.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\IconCacheRdr.dat.xuy", lpFilePart=0x0) returned 0x49 [0078.430] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0078.430] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\IconCacheRdr.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrobat\\dc\\iconcacherdr.dat"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ee9c04b, ftCreationTime.dwHighDateTime=0x1d2d43f, ftLastAccessTime.dwLowDateTime=0x6ee9c04b, ftLastAccessTime.dwHighDateTime=0x1d2d43f, ftLastWriteTime.dwLowDateTime=0x1a998a59, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xd146)) returned 1 [0078.430] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0078.430] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\IconCacheRdr.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrobat\\dc\\iconcacherdr.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\IconCacheRdr.dat.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrobat\\dc\\iconcacherdr.dat.xuy")) returned 1 [0078.431] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\IconCacheRdr65536.dat", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\IconCacheRdr65536.dat", lpFilePart=0x0) returned 0x4a [0078.431] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0078.431] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\IconCacheRdr65536.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrobat\\dc\\iconcacherdr65536.dat"), fInfoLevelId=0x0, lpFileInformation=0x233ff70 | out: lpFileInformation=0x233ff70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb3d1687, ftCreationTime.dwHighDateTime=0x1d336e1, ftLastAccessTime.dwLowDateTime=0xfb3d1687, ftLastAccessTime.dwHighDateTime=0x1d336e1, ftLastWriteTime.dwLowDateTime=0x1edf94de, ftLastWriteTime.dwHighDateTime=0x1d35db9, nFileSizeHigh=0x0, nFileSizeLow=0x2da43)) returned 1 [0078.431] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0078.431] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\IconCacheRdr65536.dat", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\IconCacheRdr65536.dat", lpFilePart=0x0) returned 0x4a [0078.431] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0078.431] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\IconCacheRdr65536.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrobat\\dc\\iconcacherdr65536.dat"), fInfoLevelId=0x0, lpFileInformation=0x23400d0 | out: lpFileInformation=0x23400d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb3d1687, ftCreationTime.dwHighDateTime=0x1d336e1, ftLastAccessTime.dwLowDateTime=0xfb3d1687, ftLastAccessTime.dwHighDateTime=0x1d336e1, ftLastWriteTime.dwLowDateTime=0x1edf94de, ftLastWriteTime.dwHighDateTime=0x1d35db9, nFileSizeHigh=0x0, nFileSizeLow=0x2da43)) returned 1 [0078.432] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0078.432] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\IconCacheRdr65536.dat", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\IconCacheRdr65536.dat", lpFilePart=0x0) returned 0x4a [0078.432] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0078.432] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\IconCacheRdr65536.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrobat\\dc\\iconcacherdr65536.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0078.432] GetFileType (hFile=0x444) returned 0x1 [0078.432] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0078.432] GetFileType (hFile=0x444) returned 0x1 [0078.432] ReadFile (in: hFile=0x444, lpBuffer=0x23424c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x23424c0*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0078.485] CloseHandle (hObject=0x444) returned 1 [0078.485] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\IconCacheRdr65536.dat", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\IconCacheRdr65536.dat", lpFilePart=0x0) returned 0x4a [0078.485] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0078.485] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\IconCacheRdr65536.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrobat\\dc\\iconcacherdr65536.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0078.485] GetFileType (hFile=0x444) returned 0x1 [0078.485] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0078.486] GetFileType (hFile=0x444) returned 0x1 [0078.486] WriteFile (in: hFile=0x444, lpBuffer=0x214d190*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x214d190*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0078.486] CloseHandle (hObject=0x444) returned 1 [0078.486] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\IconCacheRdr65536.dat", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\IconCacheRdr65536.dat", lpFilePart=0x0) returned 0x4a [0078.486] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\IconCacheRdr65536.dat.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\IconCacheRdr65536.dat.xuy", lpFilePart=0x0) returned 0x4e [0078.486] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0078.486] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\IconCacheRdr65536.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrobat\\dc\\iconcacherdr65536.dat"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb3d1687, ftCreationTime.dwHighDateTime=0x1d336e1, ftLastAccessTime.dwLowDateTime=0xfb3d1687, ftLastAccessTime.dwHighDateTime=0x1d336e1, ftLastWriteTime.dwLowDateTime=0x1aa0b097, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2da43)) returned 1 [0078.486] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0078.486] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\IconCacheRdr65536.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrobat\\dc\\iconcacherdr65536.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\IconCacheRdr65536.dat.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrobat\\dc\\iconcacherdr65536.dat.xuy")) returned 1 [0078.487] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\SharedDataEvents", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\SharedDataEvents", lpFilePart=0x0) returned 0x45 [0078.487] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0078.487] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\SharedDataEvents" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrobat\\dc\\shareddataevents"), fInfoLevelId=0x0, lpFileInformation=0x21c2698 | out: lpFileInformation=0x21c2698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f0ba22e, ftCreationTime.dwHighDateTime=0x1d2d43b, ftLastAccessTime.dwLowDateTime=0x7f0ba22e, ftLastAccessTime.dwHighDateTime=0x1d2d43b, ftLastWriteTime.dwLowDateTime=0x1ef76ece, ftLastWriteTime.dwHighDateTime=0x1d35db9, nFileSizeHigh=0x0, nFileSizeLow=0x1800)) returned 1 [0078.489] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0078.489] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\SharedDataEvents", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\SharedDataEvents", lpFilePart=0x0) returned 0x45 [0078.489] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0078.489] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\SharedDataEvents" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrobat\\dc\\shareddataevents"), fInfoLevelId=0x0, lpFileInformation=0x21c27e8 | out: lpFileInformation=0x21c27e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f0ba22e, ftCreationTime.dwHighDateTime=0x1d2d43b, ftLastAccessTime.dwLowDateTime=0x7f0ba22e, ftLastAccessTime.dwHighDateTime=0x1d2d43b, ftLastWriteTime.dwLowDateTime=0x1ef76ece, ftLastWriteTime.dwHighDateTime=0x1d35db9, nFileSizeHigh=0x0, nFileSizeLow=0x1800)) returned 1 [0078.489] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0078.489] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\SharedDataEvents", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\SharedDataEvents", lpFilePart=0x0) returned 0x45 [0078.489] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0078.489] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\SharedDataEvents" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrobat\\dc\\shareddataevents"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0078.490] GetFileType (hFile=0x444) returned 0x1 [0078.490] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0078.490] GetFileType (hFile=0x444) returned 0x1 [0078.490] ReadFile (in: hFile=0x444, lpBuffer=0x21c4bb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x21c4bb8*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0078.509] CloseHandle (hObject=0x444) returned 1 [0078.509] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\SharedDataEvents", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\SharedDataEvents", lpFilePart=0x0) returned 0x45 [0078.509] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0078.509] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\SharedDataEvents" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrobat\\dc\\shareddataevents"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0078.510] GetFileType (hFile=0x444) returned 0x1 [0078.510] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0078.510] GetFileType (hFile=0x444) returned 0x1 [0078.510] WriteFile (in: hFile=0x444, lpBuffer=0x21c2918*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x21c2918*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0078.510] CloseHandle (hObject=0x444) returned 1 [0078.510] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\SharedDataEvents", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\SharedDataEvents", lpFilePart=0x0) returned 0x45 [0078.510] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\SharedDataEvents.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\SharedDataEvents.xuy", lpFilePart=0x0) returned 0x49 [0078.510] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0078.510] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\SharedDataEvents" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrobat\\dc\\shareddataevents"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f0ba22e, ftCreationTime.dwHighDateTime=0x1d2d43b, ftLastAccessTime.dwLowDateTime=0x7f0ba22e, ftLastAccessTime.dwHighDateTime=0x1d2d43b, ftLastWriteTime.dwLowDateTime=0x1aa57a04, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0078.510] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0078.510] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\SharedDataEvents" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrobat\\dc\\shareddataevents"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\SharedDataEvents.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrobat\\dc\\shareddataevents.xuy")) returned 1 [0078.511] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\UserCache.bin", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\UserCache.bin", lpFilePart=0x0) returned 0x42 [0078.511] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0078.511] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\UserCache.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrobat\\dc\\usercache.bin"), fInfoLevelId=0x0, lpFileInformation=0x2240f58 | out: lpFileInformation=0x2240f58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d8bc749, ftCreationTime.dwHighDateTime=0x1d2d43b, ftLastAccessTime.dwLowDateTime=0x7d8bc749, ftLastAccessTime.dwHighDateTime=0x1d2d43b, ftLastWriteTime.dwLowDateTime=0x186167b1, ftLastWriteTime.dwHighDateTime=0x1d35db9, nFileSizeHigh=0x0, nFileSizeLow=0xf7b5)) returned 1 [0078.512] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0078.512] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\UserCache.bin", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\UserCache.bin", lpFilePart=0x0) returned 0x42 [0078.512] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0078.512] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\UserCache.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrobat\\dc\\usercache.bin"), fInfoLevelId=0x0, lpFileInformation=0x2241098 | out: lpFileInformation=0x2241098*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d8bc749, ftCreationTime.dwHighDateTime=0x1d2d43b, ftLastAccessTime.dwLowDateTime=0x7d8bc749, ftLastAccessTime.dwHighDateTime=0x1d2d43b, ftLastWriteTime.dwLowDateTime=0x186167b1, ftLastWriteTime.dwHighDateTime=0x1d35db9, nFileSizeHigh=0x0, nFileSizeLow=0xf7b5)) returned 1 [0078.512] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0078.512] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\UserCache.bin", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\UserCache.bin", lpFilePart=0x0) returned 0x42 [0078.512] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0078.512] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\UserCache.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrobat\\dc\\usercache.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0078.513] GetFileType (hFile=0x444) returned 0x1 [0078.513] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0078.513] GetFileType (hFile=0x444) returned 0x1 [0078.513] ReadFile (in: hFile=0x444, lpBuffer=0x2243448, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x2243448*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0078.542] CloseHandle (hObject=0x444) returned 1 [0078.542] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\UserCache.bin", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\UserCache.bin", lpFilePart=0x0) returned 0x42 [0078.542] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0078.543] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\UserCache.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrobat\\dc\\usercache.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0078.543] GetFileType (hFile=0x444) returned 0x1 [0078.543] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0078.543] GetFileType (hFile=0x444) returned 0x1 [0078.543] WriteFile (in: hFile=0x444, lpBuffer=0x22411b8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x22411b8*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0078.543] CloseHandle (hObject=0x444) returned 1 [0078.543] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\UserCache.bin", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\UserCache.bin", lpFilePart=0x0) returned 0x42 [0078.544] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\UserCache.bin.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\UserCache.bin.xuy", lpFilePart=0x0) returned 0x46 [0078.544] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0078.544] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\UserCache.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrobat\\dc\\usercache.bin"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d8bc749, ftCreationTime.dwHighDateTime=0x1d2d43b, ftLastAccessTime.dwLowDateTime=0x7d8bc749, ftLastAccessTime.dwHighDateTime=0x1d2d43b, ftLastWriteTime.dwLowDateTime=0x1aaa396c, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xf7b5)) returned 1 [0078.544] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0078.544] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\UserCache.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrobat\\dc\\usercache.bin"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\UserCache.bin.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrobat\\dc\\usercache.bin.xuy")) returned 1 [0078.545] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0078.545] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\Cache", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\Cache", lpFilePart=0x0) returned 0x3a [0078.545] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\Cache\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\Cache\\", lpFilePart=0x0) returned 0x3b [0078.545] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\Cache\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d81b0 [0078.548] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0078.548] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0078.549] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0078.549] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0078.549] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0078.550] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0078.550] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0078.550] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0078.550] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\Cache", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\Cache", lpFilePart=0x0) returned 0x3a [0078.550] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\Cache\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\Cache\\", lpFilePart=0x0) returned 0x3b [0078.550] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\Cache\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d78b0 [0078.551] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0078.551] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0078.551] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0078.552] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0078.552] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0078.552] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0078.553] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0078.553] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\Cache\\AcroFnt15.lst", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\Cache\\AcroFnt15.lst", lpFilePart=0x0) returned 0x48 [0078.553] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0078.553] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\Cache\\AcroFnt15.lst" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrobat\\dc\\cache\\acrofnt15.lst"), fInfoLevelId=0x0, lpFileInformation=0x22c18f8 | out: lpFileInformation=0x22c18f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f1bd1b4, ftCreationTime.dwHighDateTime=0x1d2d43f, ftLastAccessTime.dwLowDateTime=0x6f1bd1b4, ftLastAccessTime.dwHighDateTime=0x1d2d43f, ftLastWriteTime.dwLowDateTime=0x6f1bd1b4, ftLastWriteTime.dwHighDateTime=0x1d2d43f, nFileSizeHigh=0x0, nFileSizeLow=0x255e)) returned 1 [0078.554] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0078.554] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\Cache\\AcroFnt15.lst", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\Cache\\AcroFnt15.lst", lpFilePart=0x0) returned 0x48 [0078.554] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0078.554] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\Cache\\AcroFnt15.lst" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrobat\\dc\\cache\\acrofnt15.lst"), fInfoLevelId=0x0, lpFileInformation=0x22c1a48 | out: lpFileInformation=0x22c1a48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f1bd1b4, ftCreationTime.dwHighDateTime=0x1d2d43f, ftLastAccessTime.dwLowDateTime=0x6f1bd1b4, ftLastAccessTime.dwHighDateTime=0x1d2d43f, ftLastWriteTime.dwLowDateTime=0x6f1bd1b4, ftLastWriteTime.dwHighDateTime=0x1d2d43f, nFileSizeHigh=0x0, nFileSizeLow=0x255e)) returned 1 [0078.554] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0078.554] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\Cache\\AcroFnt15.lst", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\Cache\\AcroFnt15.lst", lpFilePart=0x0) returned 0x48 [0078.554] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0078.554] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\Cache\\AcroFnt15.lst" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrobat\\dc\\cache\\acrofnt15.lst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0078.555] GetFileType (hFile=0x444) returned 0x1 [0078.555] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0078.555] GetFileType (hFile=0x444) returned 0x1 [0078.555] ReadFile (in: hFile=0x444, lpBuffer=0x22c3e18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x22c3e18*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0078.576] CloseHandle (hObject=0x444) returned 1 [0078.576] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\Cache\\AcroFnt15.lst", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\Cache\\AcroFnt15.lst", lpFilePart=0x0) returned 0x48 [0078.576] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0078.576] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\Cache\\AcroFnt15.lst" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrobat\\dc\\cache\\acrofnt15.lst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0078.578] GetFileType (hFile=0x444) returned 0x1 [0078.578] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0078.578] GetFileType (hFile=0x444) returned 0x1 [0078.578] WriteFile (in: hFile=0x444, lpBuffer=0x22c1b78*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x22c1b78*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0078.578] CloseHandle (hObject=0x444) returned 1 [0078.578] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\Cache\\AcroFnt15.lst", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\Cache\\AcroFnt15.lst", lpFilePart=0x0) returned 0x48 [0078.578] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\Cache\\AcroFnt15.lst.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\Cache\\AcroFnt15.lst.xuy", lpFilePart=0x0) returned 0x4c [0078.579] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0078.579] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\Cache\\AcroFnt15.lst" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrobat\\dc\\cache\\acrofnt15.lst"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f1bd1b4, ftCreationTime.dwHighDateTime=0x1d2d43f, ftLastAccessTime.dwLowDateTime=0x6f1bd1b4, ftLastAccessTime.dwHighDateTime=0x1d2d43f, ftLastWriteTime.dwLowDateTime=0x1aaefd92, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x255e)) returned 1 [0078.579] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0078.579] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\Cache\\AcroFnt15.lst" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrobat\\dc\\cache\\acrofnt15.lst"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\Cache\\AcroFnt15.lst.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrobat\\dc\\cache\\acrofnt15.lst.xuy")) returned 1 [0078.580] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\Cache\\AcroFnt17.lst", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\Cache\\AcroFnt17.lst", lpFilePart=0x0) returned 0x48 [0078.580] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0078.580] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\Cache\\AcroFnt17.lst" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrobat\\dc\\cache\\acrofnt17.lst"), fInfoLevelId=0x0, lpFileInformation=0x23401d0 | out: lpFileInformation=0x23401d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab35f474, ftCreationTime.dwHighDateTime=0x1d336e1, ftLastAccessTime.dwLowDateTime=0xab35f474, ftLastAccessTime.dwHighDateTime=0x1d336e1, ftLastWriteTime.dwLowDateTime=0xab35f474, ftLastWriteTime.dwHighDateTime=0x1d336e1, nFileSizeHigh=0x0, nFileSizeLow=0x255e)) returned 1 [0078.580] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0078.581] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\Cache\\AcroFnt17.lst", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\Cache\\AcroFnt17.lst", lpFilePart=0x0) returned 0x48 [0078.581] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0078.581] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\Cache\\AcroFnt17.lst" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrobat\\dc\\cache\\acrofnt17.lst"), fInfoLevelId=0x0, lpFileInformation=0x2340320 | out: lpFileInformation=0x2340320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab35f474, ftCreationTime.dwHighDateTime=0x1d336e1, ftLastAccessTime.dwLowDateTime=0xab35f474, ftLastAccessTime.dwHighDateTime=0x1d336e1, ftLastWriteTime.dwLowDateTime=0xab35f474, ftLastWriteTime.dwHighDateTime=0x1d336e1, nFileSizeHigh=0x0, nFileSizeLow=0x255e)) returned 1 [0078.581] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0078.581] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\Cache\\AcroFnt17.lst", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\Cache\\AcroFnt17.lst", lpFilePart=0x0) returned 0x48 [0078.581] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0078.581] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\Cache\\AcroFnt17.lst" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrobat\\dc\\cache\\acrofnt17.lst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0078.581] GetFileType (hFile=0x444) returned 0x1 [0078.581] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0078.581] GetFileType (hFile=0x444) returned 0x1 [0078.581] ReadFile (in: hFile=0x444, lpBuffer=0x23426f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x23426f0*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0078.635] CloseHandle (hObject=0x444) returned 1 [0078.635] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\Cache\\AcroFnt17.lst", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\Cache\\AcroFnt17.lst", lpFilePart=0x0) returned 0x48 [0078.635] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0078.635] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\Cache\\AcroFnt17.lst" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrobat\\dc\\cache\\acrofnt17.lst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0078.635] GetFileType (hFile=0x444) returned 0x1 [0078.635] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0078.635] GetFileType (hFile=0x444) returned 0x1 [0078.635] WriteFile (in: hFile=0x444, lpBuffer=0x2152b40*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x2152b40*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0078.636] CloseHandle (hObject=0x444) returned 1 [0078.636] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\Cache\\AcroFnt17.lst", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\Cache\\AcroFnt17.lst", lpFilePart=0x0) returned 0x48 [0078.636] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\Cache\\AcroFnt17.lst.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\Cache\\AcroFnt17.lst.xuy", lpFilePart=0x0) returned 0x4c [0078.636] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0078.636] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\Cache\\AcroFnt17.lst" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrobat\\dc\\cache\\acrofnt17.lst"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab35f474, ftCreationTime.dwHighDateTime=0x1d336e1, ftLastAccessTime.dwLowDateTime=0xab35f474, ftLastAccessTime.dwHighDateTime=0x1d336e1, ftLastWriteTime.dwLowDateTime=0x1ab8884d, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x255e)) returned 1 [0078.636] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0078.636] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\Cache\\AcroFnt17.lst" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrobat\\dc\\cache\\acrofnt17.lst"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\Cache\\AcroFnt17.lst.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrobat\\dc\\cache\\acrofnt17.lst.xuy")) returned 1 [0078.637] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0078.637] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\ToolsSearchCacheRdr", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\ToolsSearchCacheRdr", lpFilePart=0x0) returned 0x48 [0078.637] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\ToolsSearchCacheRdr\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\ToolsSearchCacheRdr\\", lpFilePart=0x0) returned 0x49 [0078.637] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\ToolsSearchCacheRdr\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7a90 [0078.637] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0078.637] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0078.637] FindClose (in: hFindFile=0x5d7a90 | out: hFindFile=0x5d7a90) returned 1 [0078.638] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0078.638] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0078.638] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0078.638] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\ToolsSearchCacheRdr", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\ToolsSearchCacheRdr", lpFilePart=0x0) returned 0x48 [0078.638] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\ToolsSearchCacheRdr\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\ToolsSearchCacheRdr\\", lpFilePart=0x0) returned 0x49 [0078.638] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\ToolsSearchCacheRdr\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d81b0 [0078.638] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0078.638] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0078.638] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0078.638] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0078.638] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0078.638] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0078.638] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef", lpFilePart=0x0) returned 0x31 [0078.638] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\", lpFilePart=0x0) returned 0x32 [0078.638] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d7d30 [0078.639] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0078.639] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0078.639] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0078.639] FindClose (in: hFindFile=0x5d7d30 | out: hFindFile=0x5d7d30) returned 1 [0078.639] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0078.639] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0078.639] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0078.639] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef", lpFilePart=0x0) returned 0x31 [0078.639] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\", lpFilePart=0x0) returned 0x32 [0078.639] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d7370 [0078.639] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0078.640] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0078.640] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0078.640] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0078.640] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0078.640] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0078.640] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0078.640] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC", lpFilePart=0x0) returned 0x34 [0078.640] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\", lpFilePart=0x0) returned 0x35 [0078.640] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d75b0 [0078.640] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0078.640] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0078.640] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0078.640] FindClose (in: hFindFile=0x5d75b0 | out: hFindFile=0x5d75b0) returned 1 [0078.641] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0078.641] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0078.641] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0078.641] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC", lpFilePart=0x0) returned 0x34 [0078.641] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\", lpFilePart=0x0) returned 0x35 [0078.641] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7d30 [0078.641] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0078.641] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0078.641] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0078.641] FindClose (in: hFindFile=0x5d7d30 | out: hFindFile=0x5d7d30) returned 1 [0078.641] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0078.641] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0078.641] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0078.641] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat", lpFilePart=0x0) returned 0x3c [0078.642] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\", lpFilePart=0x0) returned 0x3d [0078.642] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7370 [0078.642] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0078.642] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0078.642] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0078.642] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0078.642] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0078.642] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0078.642] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0078.642] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0078.642] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat", lpFilePart=0x0) returned 0x3c [0078.642] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\", lpFilePart=0x0) returned 0x3d [0078.642] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7c70 [0078.643] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0078.643] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0078.643] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0078.643] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0078.643] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0078.643] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0078.643] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0078.643] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0078.643] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache", lpFilePart=0x0) returned 0x42 [0078.643] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\", lpFilePart=0x0) returned 0x43 [0078.643] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d79d0 [0078.644] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0078.645] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0078.645] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0078.645] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0078.645] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0078.645] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0078.645] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0078.645] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0078.645] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache", lpFilePart=0x0) returned 0x42 [0078.645] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\", lpFilePart=0x0) returned 0x43 [0078.645] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d81b0 [0078.645] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0078.645] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0078.646] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0078.646] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0078.646] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0078.646] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0078.646] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0078.646] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Visited Links", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Visited Links", lpFilePart=0x0) returned 0x50 [0078.646] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0078.646] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Visited Links" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrocef\\dc\\acrobat\\cache\\visited links"), fInfoLevelId=0x0, lpFileInformation=0x21cd508 | out: lpFileInformation=0x21cd508*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa2b3717, ftCreationTime.dwHighDateTime=0x1d336e1, ftLastAccessTime.dwLowDateTime=0xaa2b3717, ftLastAccessTime.dwHighDateTime=0x1d336e1, ftLastWriteTime.dwLowDateTime=0x1f271c05, ftLastWriteTime.dwHighDateTime=0x1d35db9, nFileSizeHigh=0x0, nFileSizeLow=0x20000)) returned 1 [0078.646] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0078.646] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Visited Links", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Visited Links", lpFilePart=0x0) returned 0x50 [0078.646] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0078.646] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Visited Links" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrocef\\dc\\acrobat\\cache\\visited links"), fInfoLevelId=0x0, lpFileInformation=0x21cd668 | out: lpFileInformation=0x21cd668*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa2b3717, ftCreationTime.dwHighDateTime=0x1d336e1, ftLastAccessTime.dwLowDateTime=0xaa2b3717, ftLastAccessTime.dwHighDateTime=0x1d336e1, ftLastWriteTime.dwLowDateTime=0x1f271c05, ftLastWriteTime.dwHighDateTime=0x1d35db9, nFileSizeHigh=0x0, nFileSizeLow=0x20000)) returned 1 [0078.646] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0078.646] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Visited Links", nBufferLength=0x105, lpBuffer=0x3be120, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Visited Links", lpFilePart=0x0) returned 0x50 [0078.646] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0078.646] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Visited Links" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrocef\\dc\\acrobat\\cache\\visited links"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0078.647] GetFileType (hFile=0x444) returned 0x1 [0078.647] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be570) returned 1 [0078.647] GetFileType (hFile=0x444) returned 0x1 [0078.647] ReadFile (in: hFile=0x444, lpBuffer=0x21cfa58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be688, lpOverlapped=0x0 | out: lpBuffer=0x21cfa58*, lpNumberOfBytesRead=0x3be688*=0x1000, lpOverlapped=0x0) returned 1 [0078.662] CloseHandle (hObject=0x444) returned 1 [0078.663] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Visited Links", nBufferLength=0x105, lpBuffer=0x3be120, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Visited Links", lpFilePart=0x0) returned 0x50 [0078.663] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0078.663] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Visited Links" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrocef\\dc\\acrobat\\cache\\visited links"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0078.664] GetFileType (hFile=0x444) returned 0x1 [0078.664] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be570) returned 1 [0078.664] GetFileType (hFile=0x444) returned 0x1 [0078.664] WriteFile (in: hFile=0x444, lpBuffer=0x21cd7a8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be738, lpOverlapped=0x0 | out: lpBuffer=0x21cd7a8*, lpNumberOfBytesWritten=0x3be738*=0x2000, lpOverlapped=0x0) returned 1 [0078.664] CloseHandle (hObject=0x444) returned 1 [0078.664] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Visited Links", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Visited Links", lpFilePart=0x0) returned 0x50 [0078.664] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Visited Links.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Visited Links.xuy", lpFilePart=0x0) returned 0x54 [0078.664] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0078.664] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Visited Links" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrocef\\dc\\acrobat\\cache\\visited links"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa2b3717, ftCreationTime.dwHighDateTime=0x1d336e1, ftLastAccessTime.dwLowDateTime=0xaa2b3717, ftLastAccessTime.dwHighDateTime=0x1d336e1, ftLastWriteTime.dwLowDateTime=0x1abd4e16, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x20000)) returned 1 [0078.664] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0078.665] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Visited Links" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrocef\\dc\\acrobat\\cache\\visited links"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Visited Links.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrocef\\dc\\acrobat\\cache\\visited links.xuy")) returned 1 [0078.666] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0078.666] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache", lpFilePart=0x0) returned 0x48 [0078.666] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\", lpFilePart=0x0) returned 0x49 [0078.666] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d7fd0 [0078.667] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0078.667] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0078.667] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0078.668] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0078.668] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0078.668] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0078.668] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0078.668] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0078.668] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0078.668] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0078.668] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0078.668] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache", lpFilePart=0x0) returned 0x48 [0078.668] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\", lpFilePart=0x0) returned 0x49 [0078.668] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d78b0 [0078.669] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0078.669] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0078.669] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0078.669] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0078.669] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0078.669] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0078.669] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0078.669] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0078.670] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0078.670] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0078.670] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\data_0", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\data_0", lpFilePart=0x0) returned 0x4f [0078.670] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0078.670] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\data_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrocef\\dc\\acrobat\\cache\\cache\\data_0"), fInfoLevelId=0x0, lpFileInformation=0x224ecc8 | out: lpFileInformation=0x224ecc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae807a73, ftCreationTime.dwHighDateTime=0x1d336e1, ftLastAccessTime.dwLowDateTime=0xae807a73, ftLastAccessTime.dwHighDateTime=0x1d336e1, ftLastWriteTime.dwLowDateTime=0xae807a73, ftLastWriteTime.dwHighDateTime=0x1d336e1, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0078.672] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0078.672] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\data_0", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\data_0", lpFilePart=0x0) returned 0x4f [0078.672] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0078.672] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\data_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrocef\\dc\\acrobat\\cache\\cache\\data_0"), fInfoLevelId=0x0, lpFileInformation=0x224ee10 | out: lpFileInformation=0x224ee10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae807a73, ftCreationTime.dwHighDateTime=0x1d336e1, ftLastAccessTime.dwLowDateTime=0xae807a73, ftLastAccessTime.dwHighDateTime=0x1d336e1, ftLastWriteTime.dwLowDateTime=0xae807a73, ftLastWriteTime.dwHighDateTime=0x1d336e1, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0078.672] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0078.673] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\data_0", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\data_0", lpFilePart=0x0) returned 0x4f [0078.673] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0078.673] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\data_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrocef\\dc\\acrobat\\cache\\cache\\data_0"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0078.673] GetFileType (hFile=0x444) returned 0x1 [0078.673] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0078.673] GetFileType (hFile=0x444) returned 0x1 [0078.673] ReadFile (in: hFile=0x444, lpBuffer=0x22511d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x22511d0*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0078.714] CloseHandle (hObject=0x444) returned 1 [0078.714] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\data_0", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\data_0", lpFilePart=0x0) returned 0x4f [0078.714] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0078.714] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\data_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrocef\\dc\\acrobat\\cache\\cache\\data_0"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0078.715] GetFileType (hFile=0x444) returned 0x1 [0078.715] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0078.715] GetFileType (hFile=0x444) returned 0x1 [0078.715] WriteFile (in: hFile=0x444, lpBuffer=0x224ef38*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x224ef38*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0078.715] CloseHandle (hObject=0x444) returned 1 [0078.715] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\data_0", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\data_0", lpFilePart=0x0) returned 0x4f [0078.715] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\data_0.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\data_0.xuy", lpFilePart=0x0) returned 0x53 [0078.715] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0078.715] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\data_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrocef\\dc\\acrobat\\cache\\cache\\data_0"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae807a73, ftCreationTime.dwHighDateTime=0x1d336e1, ftLastAccessTime.dwLowDateTime=0xae807a73, ftLastAccessTime.dwHighDateTime=0x1d336e1, ftLastWriteTime.dwLowDateTime=0x1ac47504, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0078.715] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0078.715] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\data_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrocef\\dc\\acrobat\\cache\\cache\\data_0"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\data_0.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrocef\\dc\\acrobat\\cache\\cache\\data_0.xuy")) returned 1 [0078.716] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\data_1", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\data_1", lpFilePart=0x0) returned 0x4f [0078.716] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0078.716] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\data_1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrocef\\dc\\acrobat\\cache\\cache\\data_1"), fInfoLevelId=0x0, lpFileInformation=0x22cd570 | out: lpFileInformation=0x22cd570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae80a181, ftCreationTime.dwHighDateTime=0x1d336e1, ftLastAccessTime.dwLowDateTime=0xae80a181, ftLastAccessTime.dwHighDateTime=0x1d336e1, ftLastWriteTime.dwLowDateTime=0x1f2be082, ftLastWriteTime.dwHighDateTime=0x1d35db9, nFileSizeHigh=0x0, nFileSizeLow=0x42000)) returned 1 [0078.717] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0078.717] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\data_1", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\data_1", lpFilePart=0x0) returned 0x4f [0078.717] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0078.717] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\data_1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrocef\\dc\\acrobat\\cache\\cache\\data_1"), fInfoLevelId=0x0, lpFileInformation=0x22cd6b8 | out: lpFileInformation=0x22cd6b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae80a181, ftCreationTime.dwHighDateTime=0x1d336e1, ftLastAccessTime.dwLowDateTime=0xae80a181, ftLastAccessTime.dwHighDateTime=0x1d336e1, ftLastWriteTime.dwLowDateTime=0x1f2be082, ftLastWriteTime.dwHighDateTime=0x1d35db9, nFileSizeHigh=0x0, nFileSizeLow=0x42000)) returned 1 [0078.717] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0078.717] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\data_1", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\data_1", lpFilePart=0x0) returned 0x4f [0078.717] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0078.717] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\data_1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrocef\\dc\\acrobat\\cache\\cache\\data_1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0078.718] GetFileType (hFile=0x444) returned 0x1 [0078.718] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0078.718] GetFileType (hFile=0x444) returned 0x1 [0078.718] ReadFile (in: hFile=0x444, lpBuffer=0x22cfa78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x22cfa78*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0078.740] CloseHandle (hObject=0x444) returned 1 [0078.740] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\data_1", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\data_1", lpFilePart=0x0) returned 0x4f [0078.740] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0078.740] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\data_1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrocef\\dc\\acrobat\\cache\\cache\\data_1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0078.741] GetFileType (hFile=0x444) returned 0x1 [0078.741] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0078.741] GetFileType (hFile=0x444) returned 0x1 [0078.741] WriteFile (in: hFile=0x444, lpBuffer=0x22cd7e0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x22cd7e0*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0078.741] CloseHandle (hObject=0x444) returned 1 [0078.741] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\data_1", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\data_1", lpFilePart=0x0) returned 0x4f [0078.741] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\data_1.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\data_1.xuy", lpFilePart=0x0) returned 0x53 [0078.741] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0078.741] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\data_1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrocef\\dc\\acrobat\\cache\\cache\\data_1"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae80a181, ftCreationTime.dwHighDateTime=0x1d336e1, ftLastAccessTime.dwLowDateTime=0xae80a181, ftLastAccessTime.dwHighDateTime=0x1d336e1, ftLastWriteTime.dwLowDateTime=0x1ac6dbf6, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x42000)) returned 1 [0078.743] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0078.743] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\data_1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrocef\\dc\\acrobat\\cache\\cache\\data_1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\data_1.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrocef\\dc\\acrobat\\cache\\cache\\data_1.xuy")) returned 1 [0078.744] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\data_2", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\data_2", lpFilePart=0x0) returned 0x4f [0078.745] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0078.745] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\data_2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrocef\\dc\\acrobat\\cache\\cache\\data_2"), fInfoLevelId=0x0, lpFileInformation=0x234be18 | out: lpFileInformation=0x234be18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae80a181, ftCreationTime.dwHighDateTime=0x1d336e1, ftLastAccessTime.dwLowDateTime=0xae80a181, ftLastAccessTime.dwHighDateTime=0x1d336e1, ftLastWriteTime.dwLowDateTime=0xae80a181, ftLastWriteTime.dwHighDateTime=0x1d336e1, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0078.745] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0078.745] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\data_2", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\data_2", lpFilePart=0x0) returned 0x4f [0078.745] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0078.745] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\data_2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrocef\\dc\\acrobat\\cache\\cache\\data_2"), fInfoLevelId=0x0, lpFileInformation=0x234bf60 | out: lpFileInformation=0x234bf60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae80a181, ftCreationTime.dwHighDateTime=0x1d336e1, ftLastAccessTime.dwLowDateTime=0xae80a181, ftLastAccessTime.dwHighDateTime=0x1d336e1, ftLastWriteTime.dwLowDateTime=0xae80a181, ftLastWriteTime.dwHighDateTime=0x1d336e1, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0078.745] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0078.745] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\data_2", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\data_2", lpFilePart=0x0) returned 0x4f [0078.745] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0078.745] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\data_2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrocef\\dc\\acrobat\\cache\\cache\\data_2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0078.746] GetFileType (hFile=0x444) returned 0x1 [0078.746] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0078.746] GetFileType (hFile=0x444) returned 0x1 [0078.746] ReadFile (in: hFile=0x444, lpBuffer=0x234e320, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x234e320*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0078.814] CloseHandle (hObject=0x444) returned 1 [0078.814] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\data_2", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\data_2", lpFilePart=0x0) returned 0x4f [0078.814] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0078.814] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\data_2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrocef\\dc\\acrobat\\cache\\cache\\data_2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0078.815] GetFileType (hFile=0x444) returned 0x1 [0078.815] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0078.815] GetFileType (hFile=0x444) returned 0x1 [0078.815] WriteFile (in: hFile=0x444, lpBuffer=0x2158b08*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x2158b08*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0078.815] CloseHandle (hObject=0x444) returned 1 [0078.815] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\data_2", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\data_2", lpFilePart=0x0) returned 0x4f [0078.815] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\data_2.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\data_2.xuy", lpFilePart=0x0) returned 0x53 [0078.815] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0078.815] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\data_2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrocef\\dc\\acrobat\\cache\\cache\\data_2"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae80a181, ftCreationTime.dwHighDateTime=0x1d336e1, ftLastAccessTime.dwLowDateTime=0xae80a181, ftLastAccessTime.dwHighDateTime=0x1d336e1, ftLastWriteTime.dwLowDateTime=0x1ad2c1b0, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0078.815] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0078.815] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\data_2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrocef\\dc\\acrobat\\cache\\cache\\data_2"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\data_2.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrocef\\dc\\acrobat\\cache\\cache\\data_2.xuy")) returned 1 [0078.816] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\data_3", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\data_3", lpFilePart=0x0) returned 0x4f [0078.816] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0078.816] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\data_3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrocef\\dc\\acrobat\\cache\\cache\\data_3"), fInfoLevelId=0x0, lpFileInformation=0x21d0670 | out: lpFileInformation=0x21d0670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae80d369, ftCreationTime.dwHighDateTime=0x1d336e1, ftLastAccessTime.dwLowDateTime=0xae80d369, ftLastAccessTime.dwHighDateTime=0x1d336e1, ftLastWriteTime.dwLowDateTime=0xae80d369, ftLastWriteTime.dwHighDateTime=0x1d336e1, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0078.816] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0078.816] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\data_3", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\data_3", lpFilePart=0x0) returned 0x4f [0078.817] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0078.817] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\data_3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrocef\\dc\\acrobat\\cache\\cache\\data_3"), fInfoLevelId=0x0, lpFileInformation=0x21d07b8 | out: lpFileInformation=0x21d07b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae80d369, ftCreationTime.dwHighDateTime=0x1d336e1, ftLastAccessTime.dwLowDateTime=0xae80d369, ftLastAccessTime.dwHighDateTime=0x1d336e1, ftLastWriteTime.dwLowDateTime=0xae80d369, ftLastWriteTime.dwHighDateTime=0x1d336e1, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0078.817] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0078.817] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\data_3", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\data_3", lpFilePart=0x0) returned 0x4f [0078.817] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0078.817] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\data_3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrocef\\dc\\acrobat\\cache\\cache\\data_3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0078.817] GetFileType (hFile=0x444) returned 0x1 [0078.817] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0078.817] GetFileType (hFile=0x444) returned 0x1 [0078.817] ReadFile (in: hFile=0x444, lpBuffer=0x21d2b78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x21d2b78*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0078.853] CloseHandle (hObject=0x444) returned 1 [0078.862] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\data_3", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\data_3", lpFilePart=0x0) returned 0x4f [0078.862] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0078.863] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\data_3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrocef\\dc\\acrobat\\cache\\cache\\data_3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0078.863] GetFileType (hFile=0x444) returned 0x1 [0078.863] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0078.863] GetFileType (hFile=0x444) returned 0x1 [0078.863] WriteFile (in: hFile=0x444, lpBuffer=0x21d08e0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x21d08e0*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0078.891] CloseHandle (hObject=0x444) returned 1 [0078.891] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\data_3", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\data_3", lpFilePart=0x0) returned 0x4f [0078.891] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\data_3.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\data_3.xuy", lpFilePart=0x0) returned 0x53 [0078.891] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0078.891] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\data_3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrocef\\dc\\acrobat\\cache\\cache\\data_3"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae80d369, ftCreationTime.dwHighDateTime=0x1d336e1, ftLastAccessTime.dwLowDateTime=0xae80d369, ftLastAccessTime.dwHighDateTime=0x1d336e1, ftLastWriteTime.dwLowDateTime=0x1adeab84, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0078.891] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0078.891] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\data_3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrocef\\dc\\acrobat\\cache\\cache\\data_3"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\data_3.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrocef\\dc\\acrobat\\cache\\cache\\data_3.xuy")) returned 1 [0078.892] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\index", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\index", lpFilePart=0x0) returned 0x4e [0078.892] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0078.892] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\index" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrocef\\dc\\acrobat\\cache\\cache\\index"), fInfoLevelId=0x0, lpFileInformation=0x224ef18 | out: lpFileInformation=0x224ef18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae7fde33, ftCreationTime.dwHighDateTime=0x1d336e1, ftLastAccessTime.dwLowDateTime=0xae7fde33, ftLastAccessTime.dwHighDateTime=0x1d336e1, ftLastWriteTime.dwLowDateTime=0xae802c44, ftLastWriteTime.dwHighDateTime=0x1d336e1, nFileSizeHigh=0x0, nFileSizeLow=0x80170)) returned 1 [0078.892] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0078.892] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\index", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\index", lpFilePart=0x0) returned 0x4e [0078.892] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0078.892] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\index" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrocef\\dc\\acrobat\\cache\\cache\\index"), fInfoLevelId=0x0, lpFileInformation=0x224f060 | out: lpFileInformation=0x224f060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae7fde33, ftCreationTime.dwHighDateTime=0x1d336e1, ftLastAccessTime.dwLowDateTime=0xae7fde33, ftLastAccessTime.dwHighDateTime=0x1d336e1, ftLastWriteTime.dwLowDateTime=0xae802c44, ftLastWriteTime.dwHighDateTime=0x1d336e1, nFileSizeHigh=0x0, nFileSizeLow=0x80170)) returned 1 [0078.892] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0078.893] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\index", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\index", lpFilePart=0x0) returned 0x4e [0078.893] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0078.893] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\index" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrocef\\dc\\acrobat\\cache\\cache\\index"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0078.893] GetFileType (hFile=0x444) returned 0x1 [0078.893] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0078.893] GetFileType (hFile=0x444) returned 0x1 [0078.893] ReadFile (in: hFile=0x444, lpBuffer=0x2251420, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x2251420*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0078.934] CloseHandle (hObject=0x444) returned 1 [0078.934] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\index", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\index", lpFilePart=0x0) returned 0x4e [0078.934] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0078.934] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\index" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrocef\\dc\\acrobat\\cache\\cache\\index"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0078.934] GetFileType (hFile=0x444) returned 0x1 [0078.934] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0078.934] GetFileType (hFile=0x444) returned 0x1 [0078.935] WriteFile (in: hFile=0x444, lpBuffer=0x224f188*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x224f188*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0078.937] CloseHandle (hObject=0x444) returned 1 [0078.937] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\index", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\index", lpFilePart=0x0) returned 0x4e [0078.937] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\index.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\index.xuy", lpFilePart=0x0) returned 0x52 [0078.937] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0078.937] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\index" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrocef\\dc\\acrobat\\cache\\cache\\index"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae7fde33, ftCreationTime.dwHighDateTime=0x1d336e1, ftLastAccessTime.dwLowDateTime=0xae7fde33, ftLastAccessTime.dwHighDateTime=0x1d336e1, ftLastWriteTime.dwLowDateTime=0x1ae5d396, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x80170)) returned 1 [0078.937] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0078.937] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\index" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrocef\\dc\\acrobat\\cache\\cache\\index"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\index.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrocef\\dc\\acrobat\\cache\\cache\\index.xuy")) returned 1 [0078.938] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0078.938] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cookie", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cookie", lpFilePart=0x0) returned 0x43 [0078.938] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cookie\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cookie\\", lpFilePart=0x0) returned 0x44 [0078.938] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cookie\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d78b0 [0078.938] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0078.938] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0078.938] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0078.939] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0078.939] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0078.939] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0078.939] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0078.939] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0078.939] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cookie", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cookie", lpFilePart=0x0) returned 0x43 [0078.939] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cookie\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cookie\\", lpFilePart=0x0) returned 0x44 [0078.939] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cookie\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d7a90 [0078.939] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0078.939] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0078.939] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0078.940] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0078.940] FindClose (in: hFindFile=0x5d7a90 | out: hFindFile=0x5d7a90) returned 1 [0078.940] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0078.940] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0078.940] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cookie\\Cookies", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cookie\\Cookies", lpFilePart=0x0) returned 0x4b [0078.940] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0078.940] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cookie\\Cookies" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrocef\\dc\\acrobat\\cookie\\cookies"), fInfoLevelId=0x0, lpFileInformation=0x22cfa50 | out: lpFileInformation=0x22cfa50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ffc6fd1, ftCreationTime.dwHighDateTime=0x1d2d43b, ftLastAccessTime.dwLowDateTime=0x7ffc6fd1, ftLastAccessTime.dwHighDateTime=0x1d2d43b, ftLastWriteTime.dwLowDateTime=0xae331145, ftLastWriteTime.dwHighDateTime=0x1d336e1, nFileSizeHigh=0x0, nFileSizeLow=0x1c00)) returned 1 [0078.943] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0078.943] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cookie\\Cookies", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cookie\\Cookies", lpFilePart=0x0) returned 0x4b [0078.943] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0078.943] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cookie\\Cookies" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrocef\\dc\\acrobat\\cookie\\cookies"), fInfoLevelId=0x0, lpFileInformation=0x22cfb90 | out: lpFileInformation=0x22cfb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ffc6fd1, ftCreationTime.dwHighDateTime=0x1d2d43b, ftLastAccessTime.dwLowDateTime=0x7ffc6fd1, ftLastAccessTime.dwHighDateTime=0x1d2d43b, ftLastWriteTime.dwLowDateTime=0xae331145, ftLastWriteTime.dwHighDateTime=0x1d336e1, nFileSizeHigh=0x0, nFileSizeLow=0x1c00)) returned 1 [0078.943] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0078.944] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cookie\\Cookies", nBufferLength=0x105, lpBuffer=0x3be120, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cookie\\Cookies", lpFilePart=0x0) returned 0x4b [0078.944] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0078.944] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cookie\\Cookies" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrocef\\dc\\acrobat\\cookie\\cookies"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0078.944] GetFileType (hFile=0x444) returned 0x1 [0078.944] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be570) returned 1 [0078.944] GetFileType (hFile=0x444) returned 0x1 [0078.944] ReadFile (in: hFile=0x444, lpBuffer=0x22d1f40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be688, lpOverlapped=0x0 | out: lpBuffer=0x22d1f40*, lpNumberOfBytesRead=0x3be688*=0x1000, lpOverlapped=0x0) returned 1 [0078.958] CloseHandle (hObject=0x444) returned 1 [0078.958] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cookie\\Cookies", nBufferLength=0x105, lpBuffer=0x3be120, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cookie\\Cookies", lpFilePart=0x0) returned 0x4b [0078.958] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0078.959] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cookie\\Cookies" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrocef\\dc\\acrobat\\cookie\\cookies"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0078.959] GetFileType (hFile=0x444) returned 0x1 [0078.959] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be570) returned 1 [0078.959] GetFileType (hFile=0x444) returned 0x1 [0078.959] WriteFile (in: hFile=0x444, lpBuffer=0x22cfcb0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be738, lpOverlapped=0x0 | out: lpBuffer=0x22cfcb0*, lpNumberOfBytesWritten=0x3be738*=0x2000, lpOverlapped=0x0) returned 1 [0078.959] CloseHandle (hObject=0x444) returned 1 [0078.959] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cookie\\Cookies", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cookie\\Cookies", lpFilePart=0x0) returned 0x4b [0078.959] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cookie\\Cookies.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cookie\\Cookies.xuy", lpFilePart=0x0) returned 0x4f [0078.959] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0078.959] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cookie\\Cookies" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrocef\\dc\\acrobat\\cookie\\cookies"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ffc6fd1, ftCreationTime.dwHighDateTime=0x1d2d43b, ftLastAccessTime.dwLowDateTime=0x7ffc6fd1, ftLastAccessTime.dwHighDateTime=0x1d2d43b, ftLastWriteTime.dwLowDateTime=0x1ae835db, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0078.959] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0078.959] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cookie\\Cookies" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrocef\\dc\\acrobat\\cookie\\cookies"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cookie\\Cookies.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrocef\\dc\\acrobat\\cookie\\cookies.xuy")) returned 1 [0078.960] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cookie\\Cookies-journal", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cookie\\Cookies-journal", lpFilePart=0x0) returned 0x53 [0078.960] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0078.961] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cookie\\Cookies-journal" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrocef\\dc\\acrobat\\cookie\\cookies-journal"), fInfoLevelId=0x0, lpFileInformation=0x234e2c0 | out: lpFileInformation=0x234e2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ffed24f, ftCreationTime.dwHighDateTime=0x1d2d43b, ftLastAccessTime.dwLowDateTime=0x7ffed24f, ftLastAccessTime.dwHighDateTime=0x1d2d43b, ftLastWriteTime.dwLowDateTime=0xae415f68, ftLastWriteTime.dwHighDateTime=0x1d336e1, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0078.963] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0078.963] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cookie\\Cookies-journal", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cookie\\Cookies-journal", lpFilePart=0x0) returned 0x53 [0078.963] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0078.963] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cookie\\Cookies-journal" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrocef\\dc\\acrobat\\cookie\\cookies-journal"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0078.963] GetFileType (hFile=0x444) returned 0x1 [0078.963] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0078.963] GetFileType (hFile=0x444) returned 0x1 [0078.963] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be708 | out: lpFileSizeHigh=0x3be708*=0x0) returned 0x0 [0078.963] CloseHandle (hObject=0x444) returned 1 [0079.094] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cookie\\Cookies-journal", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cookie\\Cookies-journal", lpFilePart=0x0) returned 0x53 [0079.094] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0079.094] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cookie\\Cookies-journal" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrocef\\dc\\acrobat\\cookie\\cookies-journal"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0079.095] GetFileType (hFile=0x444) returned 0x1 [0079.095] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0079.095] GetFileType (hFile=0x444) returned 0x1 [0079.095] WriteFile (in: hFile=0x444, lpBuffer=0x21c6e40*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x3be548, lpOverlapped=0x0 | out: lpBuffer=0x21c6e40*, lpNumberOfBytesWritten=0x3be548*=0x10, lpOverlapped=0x0) returned 1 [0079.097] CloseHandle (hObject=0x444) returned 1 [0079.097] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cookie\\Cookies-journal", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cookie\\Cookies-journal", lpFilePart=0x0) returned 0x53 [0079.097] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cookie\\Cookies-journal.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cookie\\Cookies-journal.xuy", lpFilePart=0x0) returned 0x57 [0079.097] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0079.097] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cookie\\Cookies-journal" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrocef\\dc\\acrobat\\cookie\\cookies-journal"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ffed24f, ftCreationTime.dwHighDateTime=0x1d2d43b, ftLastAccessTime.dwLowDateTime=0x7ffed24f, ftLastAccessTime.dwHighDateTime=0x1d2d43b, ftLastWriteTime.dwLowDateTime=0x1afdac7f, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0079.097] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0079.097] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cookie\\Cookies-journal" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrocef\\dc\\acrobat\\cookie\\cookies-journal"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cookie\\Cookies-journal.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrocef\\dc\\acrobat\\cookie\\cookies-journal.xuy")) returned 1 [0079.098] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0079.098] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Color", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Color", lpFilePart=0x0) returned 0x2f [0079.098] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Color\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Color\\", lpFilePart=0x0) returned 0x30 [0079.098] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Color\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d7a30 [0079.099] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0079.099] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0079.099] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0079.099] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0079.099] FindClose (in: hFindFile=0x5d7a30 | out: hFindFile=0x5d7a30) returned 1 [0079.099] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0079.099] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0079.099] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0079.099] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Color", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Color", lpFilePart=0x0) returned 0x2f [0079.099] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Color\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Color\\", lpFilePart=0x0) returned 0x30 [0079.100] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Color\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d79d0 [0079.100] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0079.100] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0079.100] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0079.100] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0079.100] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0079.100] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0079.100] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0079.100] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Color\\ACECache11.lst", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Color\\ACECache11.lst", lpFilePart=0x0) returned 0x3e [0079.101] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0079.101] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Color\\ACECache11.lst" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\color\\acecache11.lst"), fInfoLevelId=0x0, lpFileInformation=0x21c9e70 | out: lpFileInformation=0x21c9e70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d0b0731, ftCreationTime.dwHighDateTime=0x1d2d43b, ftLastAccessTime.dwLowDateTime=0x7d0b0731, ftLastAccessTime.dwHighDateTime=0x1d2d43b, ftLastWriteTime.dwLowDateTime=0x7d0d6b30, ftLastWriteTime.dwHighDateTime=0x1d2d43b, nFileSizeHigh=0x0, nFileSizeLow=0x48c)) returned 1 [0079.102] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0079.102] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Color\\ACECache11.lst", nBufferLength=0x105, lpBuffer=0x3be1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Color\\ACECache11.lst", lpFilePart=0x0) returned 0x3e [0079.102] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6c0) returned 1 [0079.102] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Color\\ACECache11.lst" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\color\\acecache11.lst"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0079.102] GetFileType (hFile=0x444) returned 0x1 [0079.102] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0079.102] GetFileType (hFile=0x444) returned 0x1 [0079.102] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be858 | out: lpFileSizeHigh=0x3be858*=0x0) returned 0x48c [0079.102] ReadFile (in: hFile=0x444, lpBuffer=0x21ca588, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be788, lpOverlapped=0x0 | out: lpBuffer=0x21ca588*, lpNumberOfBytesRead=0x3be788*=0x48c, lpOverlapped=0x0) returned 1 [0079.133] CloseHandle (hObject=0x444) returned 1 [0079.152] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Color\\ACECache11.lst", nBufferLength=0x105, lpBuffer=0x3be1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Color\\ACECache11.lst", lpFilePart=0x0) returned 0x3e [0079.153] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6c0) returned 1 [0079.153] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Color\\ACECache11.lst" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\color\\acecache11.lst"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0079.154] GetFileType (hFile=0x444) returned 0x1 [0079.154] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0079.155] GetFileType (hFile=0x444) returned 0x1 [0079.155] WriteFile (in: hFile=0x444, lpBuffer=0x2242c20*, nNumberOfBytesToWrite=0x490, lpNumberOfBytesWritten=0x3be698, lpOverlapped=0x0 | out: lpBuffer=0x2242c20*, lpNumberOfBytesWritten=0x3be698*=0x490, lpOverlapped=0x0) returned 1 [0079.156] CloseHandle (hObject=0x444) returned 1 [0079.165] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Color\\ACECache11.lst", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Color\\ACECache11.lst", lpFilePart=0x0) returned 0x3e [0079.165] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Color\\ACECache11.lst.xuy", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Color\\ACECache11.lst.xuy", lpFilePart=0x0) returned 0x42 [0079.165] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0079.165] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Color\\ACECache11.lst" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\color\\acecache11.lst"), fInfoLevelId=0x0, lpFileInformation=0x3be8a0 | out: lpFileInformation=0x3be8a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d0b0731, ftCreationTime.dwHighDateTime=0x1d2d43b, ftLastAccessTime.dwLowDateTime=0x7d0b0731, ftLastAccessTime.dwHighDateTime=0x1d2d43b, ftLastWriteTime.dwLowDateTime=0x1b07357a, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x490)) returned 1 [0079.166] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0079.166] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Color\\ACECache11.lst" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\color\\acecache11.lst"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Color\\ACECache11.lst.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\color\\acecache11.lst.xuy")) returned 1 [0079.167] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0079.167] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Color\\Profiles", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Color\\Profiles", lpFilePart=0x0) returned 0x38 [0079.167] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Color\\Profiles\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Color\\Profiles\\", lpFilePart=0x0) returned 0x39 [0079.167] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Color\\Profiles\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d79d0 [0079.167] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0079.167] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0079.167] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0079.168] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0079.168] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0079.168] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0079.168] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0079.168] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0079.168] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Color\\Profiles", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Color\\Profiles", lpFilePart=0x0) returned 0x38 [0079.168] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Color\\Profiles\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Color\\Profiles\\", lpFilePart=0x0) returned 0x39 [0079.168] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Color\\Profiles\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d79d0 [0079.168] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0079.169] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0079.169] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0079.169] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0079.169] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0079.169] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0079.169] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0079.169] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Color\\Profiles\\wscRGB.icc", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Color\\Profiles\\wscRGB.icc", lpFilePart=0x0) returned 0x43 [0079.169] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0079.169] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Color\\Profiles\\wscRGB.icc" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\color\\profiles\\wscrgb.icc"), fInfoLevelId=0x0, lpFileInformation=0x2245d40 | out: lpFileInformation=0x2245d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d098079, ftCreationTime.dwHighDateTime=0x1d2d43b, ftLastAccessTime.dwLowDateTime=0x7d098079, ftLastAccessTime.dwHighDateTime=0x1d2d43b, ftLastWriteTime.dwLowDateTime=0x7d0a43d0, ftLastWriteTime.dwHighDateTime=0x1d2d43b, nFileSizeHigh=0x0, nFileSizeLow=0x102a0)) returned 1 [0079.170] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0079.170] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Color\\Profiles\\wscRGB.icc", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Color\\Profiles\\wscRGB.icc", lpFilePart=0x0) returned 0x43 [0079.170] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0079.170] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Color\\Profiles\\wscRGB.icc" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\color\\profiles\\wscrgb.icc"), fInfoLevelId=0x0, lpFileInformation=0x2245e78 | out: lpFileInformation=0x2245e78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d098079, ftCreationTime.dwHighDateTime=0x1d2d43b, ftLastAccessTime.dwLowDateTime=0x7d098079, ftLastAccessTime.dwHighDateTime=0x1d2d43b, ftLastWriteTime.dwLowDateTime=0x7d0a43d0, ftLastWriteTime.dwHighDateTime=0x1d2d43b, nFileSizeHigh=0x0, nFileSizeLow=0x102a0)) returned 1 [0079.170] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0079.170] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Color\\Profiles\\wscRGB.icc", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Color\\Profiles\\wscRGB.icc", lpFilePart=0x0) returned 0x43 [0079.170] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0079.170] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Color\\Profiles\\wscRGB.icc" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\color\\profiles\\wscrgb.icc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0079.171] GetFileType (hFile=0x444) returned 0x1 [0079.171] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0079.171] GetFileType (hFile=0x444) returned 0x1 [0079.171] ReadFile (in: hFile=0x444, lpBuffer=0x2248218, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x2248218*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0079.206] CloseHandle (hObject=0x444) returned 1 [0079.206] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Color\\Profiles\\wscRGB.icc", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Color\\Profiles\\wscRGB.icc", lpFilePart=0x0) returned 0x43 [0079.206] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0079.206] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Color\\Profiles\\wscRGB.icc" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\color\\profiles\\wscrgb.icc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0079.207] GetFileType (hFile=0x444) returned 0x1 [0079.207] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0079.207] GetFileType (hFile=0x444) returned 0x1 [0079.207] WriteFile (in: hFile=0x444, lpBuffer=0x2245f90*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x2245f90*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0079.207] CloseHandle (hObject=0x444) returned 1 [0079.207] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Color\\Profiles\\wscRGB.icc", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Color\\Profiles\\wscRGB.icc", lpFilePart=0x0) returned 0x43 [0079.207] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Color\\Profiles\\wscRGB.icc.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Color\\Profiles\\wscRGB.icc.xuy", lpFilePart=0x0) returned 0x47 [0079.207] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0079.207] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Color\\Profiles\\wscRGB.icc" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\color\\profiles\\wscrgb.icc"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d098079, ftCreationTime.dwHighDateTime=0x1d2d43b, ftLastAccessTime.dwLowDateTime=0x7d098079, ftLastAccessTime.dwHighDateTime=0x1d2d43b, ftLastWriteTime.dwLowDateTime=0x1b0e5c1c, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x102a0)) returned 1 [0079.207] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0079.208] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Color\\Profiles\\wscRGB.icc" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\color\\profiles\\wscrgb.icc"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Color\\Profiles\\wscRGB.icc.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\color\\profiles\\wscrgb.icc.xuy")) returned 1 [0079.208] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Color\\Profiles\\wsRGB.icc", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Color\\Profiles\\wsRGB.icc", lpFilePart=0x0) returned 0x42 [0079.208] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0079.208] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Color\\Profiles\\wsRGB.icc" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\color\\profiles\\wsrgb.icc"), fInfoLevelId=0x0, lpFileInformation=0x22c4588 | out: lpFileInformation=0x22c4588*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d0b0731, ftCreationTime.dwHighDateTime=0x1d2d43b, ftLastAccessTime.dwLowDateTime=0x7d0b0731, ftLastAccessTime.dwHighDateTime=0x1d2d43b, ftLastWriteTime.dwLowDateTime=0x7d0b0731, ftLastWriteTime.dwHighDateTime=0x1d2d43b, nFileSizeHigh=0x0, nFileSizeLow=0xa74)) returned 1 [0079.209] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0079.209] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Color\\Profiles\\wsRGB.icc", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Color\\Profiles\\wsRGB.icc", lpFilePart=0x0) returned 0x42 [0079.209] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0079.209] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Color\\Profiles\\wsRGB.icc" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\color\\profiles\\wsrgb.icc"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0079.209] GetFileType (hFile=0x444) returned 0x1 [0079.209] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0079.209] GetFileType (hFile=0x444) returned 0x1 [0079.209] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0xa74 [0079.209] ReadFile (in: hFile=0x444, lpBuffer=0x22c5288, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be718, lpOverlapped=0x0 | out: lpBuffer=0x22c5288*, lpNumberOfBytesRead=0x3be718*=0xa74, lpOverlapped=0x0) returned 1 [0079.218] CloseHandle (hObject=0x444) returned 1 [0079.233] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Color\\Profiles\\wsRGB.icc", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Color\\Profiles\\wsRGB.icc", lpFilePart=0x0) returned 0x42 [0079.234] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0079.234] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Color\\Profiles\\wsRGB.icc" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\color\\profiles\\wsrgb.icc"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0079.235] GetFileType (hFile=0x444) returned 0x1 [0079.235] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0079.235] GetFileType (hFile=0x444) returned 0x1 [0079.235] WriteFile (in: hFile=0x444, lpBuffer=0x233f6d8*, nNumberOfBytesToWrite=0xa80, lpNumberOfBytesWritten=0x3be628, lpOverlapped=0x0 | out: lpBuffer=0x233f6d8*, lpNumberOfBytesWritten=0x3be628*=0xa80, lpOverlapped=0x0) returned 1 [0079.236] CloseHandle (hObject=0x444) returned 1 [0079.236] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Color\\Profiles\\wsRGB.icc", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Color\\Profiles\\wsRGB.icc", lpFilePart=0x0) returned 0x42 [0079.236] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Color\\Profiles\\wsRGB.icc.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Color\\Profiles\\wsRGB.icc.xuy", lpFilePart=0x0) returned 0x46 [0079.236] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0079.236] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Color\\Profiles\\wsRGB.icc" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\color\\profiles\\wsrgb.icc"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d0b0731, ftCreationTime.dwHighDateTime=0x1d2d43b, ftLastAccessTime.dwLowDateTime=0x7d0b0731, ftLastAccessTime.dwHighDateTime=0x1d2d43b, ftLastWriteTime.dwLowDateTime=0x1b132134, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xa80)) returned 1 [0079.236] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0079.236] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Color\\Profiles\\wsRGB.icc" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\color\\profiles\\wsrgb.icc"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Color\\Profiles\\wsRGB.icc.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\color\\profiles\\wsrgb.icc.xuy")) returned 1 [0079.237] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0079.237] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Application Data", nBufferLength=0x105, lpBuffer=0x3be3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Application Data", lpFilePart=0x0) returned 0x34 [0079.237] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Application Data\\", nBufferLength=0x105, lpBuffer=0x3be370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Application Data\\", lpFilePart=0x0) returned 0x35 [0079.237] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Application Data\\*", lpFindFileData=0x3be580 | out: lpFindFileData=0x3be580) returned 0xffffffffffffffff [0079.237] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be810) returned 1 [0079.239] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0079.239] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\CEF", nBufferLength=0x105, lpBuffer=0x3be3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\CEF", lpFilePart=0x0) returned 0x27 [0079.239] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\CEF\\", nBufferLength=0x105, lpBuffer=0x3be370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\CEF\\", lpFilePart=0x0) returned 0x28 [0079.239] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\CEF\\*", lpFindFileData=0x3be580 | out: lpFindFileData=0x3be580) returned 0x5d7370 [0079.239] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0079.239] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0079.239] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 0 [0079.239] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0079.239] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0079.239] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7f0) returned 1 [0079.239] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0079.240] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\CEF", nBufferLength=0x105, lpBuffer=0x3be3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\CEF", lpFilePart=0x0) returned 0x27 [0079.240] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\CEF\\", nBufferLength=0x105, lpBuffer=0x3be370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\CEF\\", lpFilePart=0x0) returned 0x28 [0079.240] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\CEF\\*", lpFindFileData=0x3be580 | out: lpFindFileData=0x3be580) returned 0x5d78b0 [0079.240] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0079.240] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0079.240] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 0 [0079.240] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0079.240] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0079.240] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7f0) returned 1 [0079.240] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0079.240] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\CEF\\User Data", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\CEF\\User Data", lpFilePart=0x0) returned 0x31 [0079.240] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\CEF\\User Data\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\CEF\\User Data\\", lpFilePart=0x0) returned 0x32 [0079.240] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\CEF\\User Data\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d81b0 [0079.241] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0079.241] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0079.241] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0079.241] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0079.241] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0079.241] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0079.241] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0079.241] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\CEF\\User Data", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\CEF\\User Data", lpFilePart=0x0) returned 0x31 [0079.241] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\CEF\\User Data\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\CEF\\User Data\\", lpFilePart=0x0) returned 0x32 [0079.241] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\CEF\\User Data\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d7550 [0079.241] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0079.242] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0079.243] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0079.243] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0079.243] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0079.243] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0079.243] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0079.243] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\CEF\\User Data\\Dictionaries", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\CEF\\User Data\\Dictionaries", lpFilePart=0x0) returned 0x3e [0079.243] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\CEF\\User Data\\Dictionaries\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\CEF\\User Data\\Dictionaries\\", lpFilePart=0x0) returned 0x3f [0079.243] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\CEF\\User Data\\Dictionaries\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7550 [0079.243] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0079.243] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0079.243] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0079.243] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0079.243] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0079.243] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0079.244] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\CEF\\User Data\\Dictionaries", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\CEF\\User Data\\Dictionaries", lpFilePart=0x0) returned 0x3e [0079.244] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\CEF\\User Data\\Dictionaries\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\CEF\\User Data\\Dictionaries\\", lpFilePart=0x0) returned 0x3f [0079.244] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\CEF\\User Data\\Dictionaries\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7d90 [0079.244] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0079.244] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0079.244] FindClose (in: hFindFile=0x5d7d90 | out: hFindFile=0x5d7d90) returned 1 [0079.244] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0079.244] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0079.244] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0079.244] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms", nBufferLength=0x105, lpBuffer=0x3be3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms", lpFilePart=0x0) returned 0x29 [0079.244] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\", nBufferLength=0x105, lpBuffer=0x3be370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\", lpFilePart=0x0) returned 0x2a [0079.244] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\*", lpFindFileData=0x3be580 | out: lpFindFileData=0x3be580) returned 0x5d78b0 [0079.245] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0079.245] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0079.245] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0079.245] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0079.245] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 0 [0079.245] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0079.245] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0079.245] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7f0) returned 1 [0079.245] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0079.245] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms", nBufferLength=0x105, lpBuffer=0x3be3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms", lpFilePart=0x0) returned 0x29 [0079.245] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\", nBufferLength=0x105, lpBuffer=0x3be370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\", lpFilePart=0x0) returned 0x2a [0079.245] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\*", lpFindFileData=0x3be580 | out: lpFindFileData=0x3be580) returned 0x5d79d0 [0079.246] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0079.246] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0079.246] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0079.246] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0079.246] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 0 [0079.246] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0079.246] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0079.246] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7f0) returned 1 [0079.246] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0079.246] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\Temp", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\Temp", lpFilePart=0x0) returned 0x2e [0079.246] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\Temp\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\Temp\\", lpFilePart=0x0) returned 0x2f [0079.246] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\Temp\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d7d30 [0079.247] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0079.247] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0079.247] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0079.247] FindClose (in: hFindFile=0x5d7d30 | out: hFindFile=0x5d7d30) returned 1 [0079.247] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0079.247] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0079.247] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0079.247] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\Temp", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\Temp", lpFilePart=0x0) returned 0x2e [0079.247] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\Temp\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\Temp\\", lpFilePart=0x0) returned 0x2f [0079.247] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\Temp\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d73d0 [0079.247] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0079.247] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0079.248] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0079.248] FindClose (in: hFindFile=0x5d73d0 | out: hFindFile=0x5d73d0) returned 1 [0079.248] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0079.248] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0079.248] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\Temp\\CalendarCache.dat", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\Temp\\CalendarCache.dat", lpFilePart=0x0) returned 0x40 [0079.248] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0079.248] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\Temp\\CalendarCache.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\comms\\temp\\calendarcache.dat"), fInfoLevelId=0x0, lpFileInformation=0x2349b18 | out: lpFileInformation=0x2349b18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e165a8a, ftCreationTime.dwHighDateTime=0x1d2d43a, ftLastAccessTime.dwLowDateTime=0x2e165a8a, ftLastAccessTime.dwHighDateTime=0x1d2d43a, ftLastWriteTime.dwLowDateTime=0x2e165a8a, ftLastWriteTime.dwHighDateTime=0x1d2d43a, nFileSizeHigh=0x0, nFileSizeLow=0x14)) returned 1 [0079.248] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0079.248] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\Temp\\CalendarCache.dat", nBufferLength=0x105, lpBuffer=0x3be1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\Temp\\CalendarCache.dat", lpFilePart=0x0) returned 0x40 [0079.248] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6c0) returned 1 [0079.248] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\Temp\\CalendarCache.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\comms\\temp\\calendarcache.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0079.248] GetFileType (hFile=0x444) returned 0x1 [0079.248] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0079.248] GetFileType (hFile=0x444) returned 0x1 [0079.248] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be858 | out: lpFileSizeHigh=0x3be858*=0x0) returned 0x14 [0079.248] ReadFile (in: hFile=0x444, lpBuffer=0x2349dd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be788, lpOverlapped=0x0 | out: lpBuffer=0x2349dd8*, lpNumberOfBytesRead=0x3be788*=0x14, lpOverlapped=0x0) returned 1 [0079.249] CloseHandle (hObject=0x444) returned 1 [0079.297] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\Temp\\CalendarCache.dat", nBufferLength=0x105, lpBuffer=0x3be1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\Temp\\CalendarCache.dat", lpFilePart=0x0) returned 0x40 [0079.298] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6c0) returned 1 [0079.298] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\Temp\\CalendarCache.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\comms\\temp\\calendarcache.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0079.299] GetFileType (hFile=0x444) returned 0x1 [0079.299] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0079.299] GetFileType (hFile=0x444) returned 0x1 [0079.299] WriteFile (in: hFile=0x444, lpBuffer=0x21c1010*, nNumberOfBytesToWrite=0x20, lpNumberOfBytesWritten=0x3be698, lpOverlapped=0x0 | out: lpBuffer=0x21c1010*, lpNumberOfBytesWritten=0x3be698*=0x20, lpOverlapped=0x0) returned 1 [0079.300] CloseHandle (hObject=0x444) returned 1 [0079.300] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\Temp\\CalendarCache.dat", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\Temp\\CalendarCache.dat", lpFilePart=0x0) returned 0x40 [0079.300] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\Temp\\CalendarCache.dat.xuy", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\Temp\\CalendarCache.dat.xuy", lpFilePart=0x0) returned 0x44 [0079.300] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0079.300] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\Temp\\CalendarCache.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\comms\\temp\\calendarcache.dat"), fInfoLevelId=0x0, lpFileInformation=0x3be8a0 | out: lpFileInformation=0x3be8a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e165a8a, ftCreationTime.dwHighDateTime=0x1d2d43a, ftLastAccessTime.dwLowDateTime=0x2e165a8a, ftLastAccessTime.dwHighDateTime=0x1d2d43a, ftLastWriteTime.dwLowDateTime=0x1b1caed0, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x20)) returned 1 [0079.301] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0079.301] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\Temp\\CalendarCache.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\comms\\temp\\calendarcache.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\Temp\\CalendarCache.dat.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\comms\\temp\\calendarcache.dat.xuy")) returned 1 [0079.302] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0079.302] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\Unistore", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\Unistore", lpFilePart=0x0) returned 0x32 [0079.302] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\Unistore\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\Unistore\\", lpFilePart=0x0) returned 0x33 [0079.302] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\Unistore\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d81b0 [0079.303] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0079.303] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0079.303] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0079.303] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0079.303] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0079.303] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0079.303] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\Unistore", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\Unistore", lpFilePart=0x0) returned 0x32 [0079.303] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\Unistore\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\Unistore\\", lpFilePart=0x0) returned 0x33 [0079.303] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\Unistore\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d8090 [0079.303] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0079.304] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0079.304] FindClose (in: hFindFile=0x5d8090 | out: hFindFile=0x5d8090) returned 1 [0079.304] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0079.304] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0079.304] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0079.304] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB", lpFilePart=0x0) returned 0x34 [0079.304] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\", lpFilePart=0x0) returned 0x35 [0079.305] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d7550 [0079.335] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0079.335] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0079.335] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0079.336] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0079.336] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0079.336] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0079.336] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0079.336] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0079.337] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0079.338] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0079.338] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0079.338] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0079.338] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB", lpFilePart=0x0) returned 0x34 [0079.338] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\", lpFilePart=0x0) returned 0x35 [0079.338] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d78b0 [0079.339] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0079.340] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0079.340] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0079.340] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0079.341] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0079.341] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0079.341] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0079.341] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0079.342] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0079.343] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0079.343] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0079.343] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\store.vol", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\store.vol", lpFilePart=0x0) returned 0x3e [0079.343] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0079.343] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\store.vol" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\comms\\unistoredb\\store.vol"), fInfoLevelId=0x0, lpFileInformation=0x21c6630 | out: lpFileInformation=0x21c6630*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69687f6, ftCreationTime.dwHighDateTime=0x1d2d439, ftLastAccessTime.dwLowDateTime=0xe69687f6, ftLastAccessTime.dwHighDateTime=0x1d2d439, ftLastWriteTime.dwLowDateTime=0x651fda9, ftLastWriteTime.dwHighDateTime=0x1d2d446, nFileSizeHigh=0x0, nFileSizeLow=0x600000)) returned 1 [0079.347] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0079.347] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\store.vol", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\store.vol", lpFilePart=0x0) returned 0x3e [0079.347] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0079.347] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\store.vol" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\comms\\unistoredb\\store.vol"), fInfoLevelId=0x0, lpFileInformation=0x21c6760 | out: lpFileInformation=0x21c6760*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69687f6, ftCreationTime.dwHighDateTime=0x1d2d439, ftLastAccessTime.dwLowDateTime=0xe69687f6, ftLastAccessTime.dwHighDateTime=0x1d2d439, ftLastWriteTime.dwLowDateTime=0x651fda9, ftLastWriteTime.dwHighDateTime=0x1d2d446, nFileSizeHigh=0x0, nFileSizeLow=0x600000)) returned 1 [0079.347] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0079.347] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\store.vol", nBufferLength=0x105, lpBuffer=0x3be270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\store.vol", lpFilePart=0x0) returned 0x3e [0079.347] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0079.347] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\store.vol" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\comms\\unistoredb\\store.vol"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0079.348] GetFileType (hFile=0x444) returned 0x1 [0079.348] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6c0) returned 1 [0079.348] GetFileType (hFile=0x444) returned 0x1 [0079.348] ReadFile (in: hFile=0x444, lpBuffer=0x21c8af0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be7d8, lpOverlapped=0x0 | out: lpBuffer=0x21c8af0*, lpNumberOfBytesRead=0x3be7d8*=0x1000, lpOverlapped=0x0) returned 1 [0079.421] CloseHandle (hObject=0x444) returned 1 [0079.421] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\store.vol", nBufferLength=0x105, lpBuffer=0x3be270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\store.vol", lpFilePart=0x0) returned 0x3e [0079.421] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0079.421] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\store.vol" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\comms\\unistoredb\\store.vol"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0079.422] GetFileType (hFile=0x444) returned 0x1 [0079.422] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6c0) returned 1 [0079.422] GetFileType (hFile=0x444) returned 0x1 [0079.422] WriteFile (in: hFile=0x444, lpBuffer=0x21c6870*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be888, lpOverlapped=0x0 | out: lpBuffer=0x21c6870*, lpNumberOfBytesWritten=0x3be888*=0x2000, lpOverlapped=0x0) returned 1 [0079.422] CloseHandle (hObject=0x444) returned 1 [0079.422] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\store.vol", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\store.vol", lpFilePart=0x0) returned 0x3e [0079.422] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\store.vol.xuy", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\store.vol.xuy", lpFilePart=0x0) returned 0x42 [0079.422] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0079.422] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\store.vol" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\comms\\unistoredb\\store.vol"), fInfoLevelId=0x0, lpFileInformation=0x3be8a0 | out: lpFileInformation=0x3be8a0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69687f6, ftCreationTime.dwHighDateTime=0x1d2d439, ftLastAccessTime.dwLowDateTime=0xe69687f6, ftLastAccessTime.dwHighDateTime=0x1d2d439, ftLastWriteTime.dwLowDateTime=0x1b2f9ecb, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x600000)) returned 1 [0079.422] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0079.422] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\store.vol" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\comms\\unistoredb\\store.vol"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\store.vol.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\comms\\unistoredb\\store.vol.xuy")) returned 1 [0079.423] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USS.chk", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USS.chk", lpFilePart=0x0) returned 0x3c [0079.423] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0079.423] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USS.chk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\comms\\unistoredb\\uss.chk"), fInfoLevelId=0x0, lpFileInformation=0x2244e40 | out: lpFileInformation=0x2244e40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6942617, ftCreationTime.dwHighDateTime=0x1d2d439, ftLastAccessTime.dwLowDateTime=0xe6942617, ftLastAccessTime.dwHighDateTime=0x1d2d439, ftLastWriteTime.dwLowDateTime=0xe6942617, ftLastWriteTime.dwHighDateTime=0x1d2d439, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0079.423] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0079.423] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USS.chk", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USS.chk", lpFilePart=0x0) returned 0x3c [0079.423] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0079.423] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USS.chk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\comms\\unistoredb\\uss.chk"), fInfoLevelId=0x0, lpFileInformation=0x2244f68 | out: lpFileInformation=0x2244f68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6942617, ftCreationTime.dwHighDateTime=0x1d2d439, ftLastAccessTime.dwLowDateTime=0xe6942617, ftLastAccessTime.dwHighDateTime=0x1d2d439, ftLastWriteTime.dwLowDateTime=0xe6942617, ftLastWriteTime.dwHighDateTime=0x1d2d439, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0079.423] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0079.423] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USS.chk", nBufferLength=0x105, lpBuffer=0x3be270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USS.chk", lpFilePart=0x0) returned 0x3c [0079.423] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0079.424] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USS.chk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\comms\\unistoredb\\uss.chk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0079.424] GetFileType (hFile=0x444) returned 0x1 [0079.424] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6c0) returned 1 [0079.424] GetFileType (hFile=0x444) returned 0x1 [0079.424] ReadFile (in: hFile=0x444, lpBuffer=0x22472e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be7d8, lpOverlapped=0x0 | out: lpBuffer=0x22472e8*, lpNumberOfBytesRead=0x3be7d8*=0x1000, lpOverlapped=0x0) returned 1 [0079.441] CloseHandle (hObject=0x444) returned 1 [0079.441] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USS.chk", nBufferLength=0x105, lpBuffer=0x3be270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USS.chk", lpFilePart=0x0) returned 0x3c [0079.441] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0079.441] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USS.chk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\comms\\unistoredb\\uss.chk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0079.442] GetFileType (hFile=0x444) returned 0x1 [0079.442] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6c0) returned 1 [0079.442] GetFileType (hFile=0x444) returned 0x1 [0079.442] WriteFile (in: hFile=0x444, lpBuffer=0x2245070*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be888, lpOverlapped=0x0 | out: lpBuffer=0x2245070*, lpNumberOfBytesWritten=0x3be888*=0x2000, lpOverlapped=0x0) returned 1 [0079.442] CloseHandle (hObject=0x444) returned 1 [0079.442] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USS.chk", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USS.chk", lpFilePart=0x0) returned 0x3c [0079.442] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USS.chk.xuy", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USS.chk.xuy", lpFilePart=0x0) returned 0x40 [0079.442] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0079.443] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USS.chk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\comms\\unistoredb\\uss.chk"), fInfoLevelId=0x0, lpFileInformation=0x3be8a0 | out: lpFileInformation=0x3be8a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6942617, ftCreationTime.dwHighDateTime=0x1d2d439, ftLastAccessTime.dwLowDateTime=0xe6942617, ftLastAccessTime.dwHighDateTime=0x1d2d439, ftLastWriteTime.dwLowDateTime=0x1b31f9d4, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0079.443] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0079.443] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USS.chk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\comms\\unistoredb\\uss.chk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USS.chk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\comms\\unistoredb\\uss.chk.xuy")) returned 1 [0079.445] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USS.log", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USS.log", lpFilePart=0x0) returned 0x3c [0079.445] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0079.445] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USS.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\comms\\unistoredb\\uss.log"), fInfoLevelId=0x0, lpFileInformation=0x22c3630 | out: lpFileInformation=0x22c3630*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe691c3cb, ftCreationTime.dwHighDateTime=0x1d2d439, ftLastAccessTime.dwLowDateTime=0xe691c3cb, ftLastAccessTime.dwHighDateTime=0x1d2d439, ftLastWriteTime.dwLowDateTime=0x651e9ee, ftLastWriteTime.dwHighDateTime=0x1d2d446, nFileSizeHigh=0x0, nFileSizeLow=0x300000)) returned 1 [0079.447] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0079.447] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USS.log", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USS.log", lpFilePart=0x0) returned 0x3c [0079.447] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0079.447] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USS.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\comms\\unistoredb\\uss.log"), fInfoLevelId=0x0, lpFileInformation=0x22c3758 | out: lpFileInformation=0x22c3758*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe691c3cb, ftCreationTime.dwHighDateTime=0x1d2d439, ftLastAccessTime.dwLowDateTime=0xe691c3cb, ftLastAccessTime.dwHighDateTime=0x1d2d439, ftLastWriteTime.dwLowDateTime=0x651e9ee, ftLastWriteTime.dwHighDateTime=0x1d2d446, nFileSizeHigh=0x0, nFileSizeLow=0x300000)) returned 1 [0079.447] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0079.448] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USS.log", nBufferLength=0x105, lpBuffer=0x3be270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USS.log", lpFilePart=0x0) returned 0x3c [0079.448] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0079.448] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USS.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\comms\\unistoredb\\uss.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0079.448] GetFileType (hFile=0x444) returned 0x1 [0079.448] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6c0) returned 1 [0079.448] GetFileType (hFile=0x444) returned 0x1 [0079.448] ReadFile (in: hFile=0x444, lpBuffer=0x22c5ad8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be7d8, lpOverlapped=0x0 | out: lpBuffer=0x22c5ad8*, lpNumberOfBytesRead=0x3be7d8*=0x1000, lpOverlapped=0x0) returned 1 [0079.490] CloseHandle (hObject=0x444) returned 1 [0079.490] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USS.log", nBufferLength=0x105, lpBuffer=0x3be270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USS.log", lpFilePart=0x0) returned 0x3c [0079.490] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0079.490] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USS.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\comms\\unistoredb\\uss.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0079.492] GetFileType (hFile=0x444) returned 0x1 [0079.492] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6c0) returned 1 [0079.492] GetFileType (hFile=0x444) returned 0x1 [0079.492] WriteFile (in: hFile=0x444, lpBuffer=0x22c3860*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be888, lpOverlapped=0x0 | out: lpBuffer=0x22c3860*, lpNumberOfBytesWritten=0x3be888*=0x2000, lpOverlapped=0x0) returned 1 [0079.492] CloseHandle (hObject=0x444) returned 1 [0079.493] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USS.log", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USS.log", lpFilePart=0x0) returned 0x3c [0079.493] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USS.log.xuy", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USS.log.xuy", lpFilePart=0x0) returned 0x40 [0079.493] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0079.493] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USS.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\comms\\unistoredb\\uss.log"), fInfoLevelId=0x0, lpFileInformation=0x3be8a0 | out: lpFileInformation=0x3be8a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe691c3cb, ftCreationTime.dwHighDateTime=0x1d2d439, ftLastAccessTime.dwLowDateTime=0xe691c3cb, ftLastAccessTime.dwHighDateTime=0x1d2d439, ftLastWriteTime.dwLowDateTime=0x1b3bc14c, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x300000)) returned 1 [0079.493] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0079.493] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USS.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\comms\\unistoredb\\uss.log"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USS.log.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\comms\\unistoredb\\uss.log.xuy")) returned 1 [0079.495] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USSres00001.jrs", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USSres00001.jrs", lpFilePart=0x0) returned 0x44 [0079.495] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0079.495] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USSres00001.jrs" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\comms\\unistoredb\\ussres00001.jrs"), fInfoLevelId=0x0, lpFileInformation=0x2341e20 | out: lpFileInformation=0x2341e20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe691c3cb, ftCreationTime.dwHighDateTime=0x1d2d439, ftLastAccessTime.dwLowDateTime=0xe691c3cb, ftLastAccessTime.dwHighDateTime=0x1d2d439, ftLastWriteTime.dwLowDateTime=0xe691c3cb, ftLastWriteTime.dwHighDateTime=0x1d2d439, nFileSizeHigh=0x0, nFileSizeLow=0x300000)) returned 1 [0079.495] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0079.495] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USSres00001.jrs", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USSres00001.jrs", lpFilePart=0x0) returned 0x44 [0079.495] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0079.495] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USSres00001.jrs" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\comms\\unistoredb\\ussres00001.jrs"), fInfoLevelId=0x0, lpFileInformation=0x2341f68 | out: lpFileInformation=0x2341f68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe691c3cb, ftCreationTime.dwHighDateTime=0x1d2d439, ftLastAccessTime.dwLowDateTime=0xe691c3cb, ftLastAccessTime.dwHighDateTime=0x1d2d439, ftLastWriteTime.dwLowDateTime=0xe691c3cb, ftLastWriteTime.dwHighDateTime=0x1d2d439, nFileSizeHigh=0x0, nFileSizeLow=0x300000)) returned 1 [0079.495] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0079.496] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USSres00001.jrs", nBufferLength=0x105, lpBuffer=0x3be270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USSres00001.jrs", lpFilePart=0x0) returned 0x44 [0079.496] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0079.496] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USSres00001.jrs" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\comms\\unistoredb\\ussres00001.jrs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0079.496] GetFileType (hFile=0x444) returned 0x1 [0079.496] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6c0) returned 1 [0079.496] GetFileType (hFile=0x444) returned 0x1 [0079.496] ReadFile (in: hFile=0x444, lpBuffer=0x2344328, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be7d8, lpOverlapped=0x0 | out: lpBuffer=0x2344328*, lpNumberOfBytesRead=0x3be7d8*=0x1000, lpOverlapped=0x0) returned 1 [0079.558] CloseHandle (hObject=0x444) returned 1 [0079.558] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USSres00001.jrs", nBufferLength=0x105, lpBuffer=0x3be270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USSres00001.jrs", lpFilePart=0x0) returned 0x44 [0079.558] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0079.558] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USSres00001.jrs" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\comms\\unistoredb\\ussres00001.jrs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0079.558] GetFileType (hFile=0x444) returned 0x1 [0079.558] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6c0) returned 1 [0079.559] GetFileType (hFile=0x444) returned 0x1 [0079.559] WriteFile (in: hFile=0x444, lpBuffer=0x215e930*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be888, lpOverlapped=0x0 | out: lpBuffer=0x215e930*, lpNumberOfBytesWritten=0x3be888*=0x2000, lpOverlapped=0x0) returned 1 [0079.559] CloseHandle (hObject=0x444) returned 1 [0079.559] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USSres00001.jrs", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USSres00001.jrs", lpFilePart=0x0) returned 0x44 [0079.559] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USSres00001.jrs.xuy", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USSres00001.jrs.xuy", lpFilePart=0x0) returned 0x48 [0079.559] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0079.559] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USSres00001.jrs" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\comms\\unistoredb\\ussres00001.jrs"), fInfoLevelId=0x0, lpFileInformation=0x3be8a0 | out: lpFileInformation=0x3be8a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe691c3cb, ftCreationTime.dwHighDateTime=0x1d2d439, ftLastAccessTime.dwLowDateTime=0xe691c3cb, ftLastAccessTime.dwHighDateTime=0x1d2d439, ftLastWriteTime.dwLowDateTime=0x1b43d1d0, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x300000)) returned 1 [0079.559] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0079.559] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USSres00001.jrs" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\comms\\unistoredb\\ussres00001.jrs"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USSres00001.jrs.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\comms\\unistoredb\\ussres00001.jrs.xuy")) returned 1 [0079.560] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USSres00002.jrs", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USSres00002.jrs", lpFilePart=0x0) returned 0x44 [0079.560] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0079.560] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USSres00002.jrs" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\comms\\unistoredb\\ussres00002.jrs"), fInfoLevelId=0x0, lpFileInformation=0x21c3b98 | out: lpFileInformation=0x21c3b98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe691c3cb, ftCreationTime.dwHighDateTime=0x1d2d439, ftLastAccessTime.dwLowDateTime=0xe691c3cb, ftLastAccessTime.dwHighDateTime=0x1d2d439, ftLastWriteTime.dwLowDateTime=0xe6942617, ftLastWriteTime.dwHighDateTime=0x1d2d439, nFileSizeHigh=0x0, nFileSizeLow=0x300000)) returned 1 [0079.560] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0079.560] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USSres00002.jrs", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USSres00002.jrs", lpFilePart=0x0) returned 0x44 [0079.560] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0079.560] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USSres00002.jrs" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\comms\\unistoredb\\ussres00002.jrs"), fInfoLevelId=0x0, lpFileInformation=0x21c3ce0 | out: lpFileInformation=0x21c3ce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe691c3cb, ftCreationTime.dwHighDateTime=0x1d2d439, ftLastAccessTime.dwLowDateTime=0xe691c3cb, ftLastAccessTime.dwHighDateTime=0x1d2d439, ftLastWriteTime.dwLowDateTime=0xe6942617, ftLastWriteTime.dwHighDateTime=0x1d2d439, nFileSizeHigh=0x0, nFileSizeLow=0x300000)) returned 1 [0079.560] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0079.560] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USSres00002.jrs", nBufferLength=0x105, lpBuffer=0x3be270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USSres00002.jrs", lpFilePart=0x0) returned 0x44 [0079.560] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0079.560] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USSres00002.jrs" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\comms\\unistoredb\\ussres00002.jrs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0079.567] GetFileType (hFile=0x444) returned 0x1 [0079.567] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6c0) returned 1 [0079.567] GetFileType (hFile=0x444) returned 0x1 [0079.567] ReadFile (in: hFile=0x444, lpBuffer=0x21c60a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be7d8, lpOverlapped=0x0 | out: lpBuffer=0x21c60a0*, lpNumberOfBytesRead=0x3be7d8*=0x1000, lpOverlapped=0x0) returned 1 [0079.581] CloseHandle (hObject=0x444) returned 1 [0079.581] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USSres00002.jrs", nBufferLength=0x105, lpBuffer=0x3be270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USSres00002.jrs", lpFilePart=0x0) returned 0x44 [0079.581] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0079.581] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USSres00002.jrs" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\comms\\unistoredb\\ussres00002.jrs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0079.583] GetFileType (hFile=0x444) returned 0x1 [0079.583] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6c0) returned 1 [0079.583] GetFileType (hFile=0x444) returned 0x1 [0079.583] WriteFile (in: hFile=0x444, lpBuffer=0x21c3e08*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be888, lpOverlapped=0x0 | out: lpBuffer=0x21c3e08*, lpNumberOfBytesWritten=0x3be888*=0x2000, lpOverlapped=0x0) returned 1 [0079.583] CloseHandle (hObject=0x444) returned 1 [0079.583] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USSres00002.jrs", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USSres00002.jrs", lpFilePart=0x0) returned 0x44 [0079.583] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USSres00002.jrs.xuy", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USSres00002.jrs.xuy", lpFilePart=0x0) returned 0x48 [0079.583] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0079.583] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USSres00002.jrs" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\comms\\unistoredb\\ussres00002.jrs"), fInfoLevelId=0x0, lpFileInformation=0x3be8a0 | out: lpFileInformation=0x3be8a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe691c3cb, ftCreationTime.dwHighDateTime=0x1d2d439, ftLastAccessTime.dwLowDateTime=0xe691c3cb, ftLastAccessTime.dwHighDateTime=0x1d2d439, ftLastWriteTime.dwLowDateTime=0x1b4896e8, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x300000)) returned 1 [0079.583] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0079.583] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USSres00002.jrs" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\comms\\unistoredb\\ussres00002.jrs"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USSres00002.jrs.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\comms\\unistoredb\\ussres00002.jrs.xuy")) returned 1 [0079.584] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USStmp.log", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USStmp.log", lpFilePart=0x0) returned 0x3f [0079.584] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0079.584] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USStmp.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\comms\\unistoredb\\usstmp.log"), fInfoLevelId=0x0, lpFileInformation=0x2242438 | out: lpFileInformation=0x2242438*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe691c3cb, ftCreationTime.dwHighDateTime=0x1d2d439, ftLastAccessTime.dwLowDateTime=0xe691c3cb, ftLastAccessTime.dwHighDateTime=0x1d2d439, ftLastWriteTime.dwLowDateTime=0x64df227, ftLastWriteTime.dwHighDateTime=0x1d2d446, nFileSizeHigh=0x0, nFileSizeLow=0x300000)) returned 1 [0079.584] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0079.584] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USStmp.log", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USStmp.log", lpFilePart=0x0) returned 0x3f [0079.584] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0079.584] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USStmp.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\comms\\unistoredb\\usstmp.log"), fInfoLevelId=0x0, lpFileInformation=0x2242568 | out: lpFileInformation=0x2242568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe691c3cb, ftCreationTime.dwHighDateTime=0x1d2d439, ftLastAccessTime.dwLowDateTime=0xe691c3cb, ftLastAccessTime.dwHighDateTime=0x1d2d439, ftLastWriteTime.dwLowDateTime=0x64df227, ftLastWriteTime.dwHighDateTime=0x1d2d446, nFileSizeHigh=0x0, nFileSizeLow=0x300000)) returned 1 [0079.584] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0079.584] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USStmp.log", nBufferLength=0x105, lpBuffer=0x3be270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USStmp.log", lpFilePart=0x0) returned 0x3f [0079.585] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0079.585] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USStmp.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\comms\\unistoredb\\usstmp.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0079.585] GetFileType (hFile=0x444) returned 0x1 [0079.585] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6c0) returned 1 [0079.585] GetFileType (hFile=0x444) returned 0x1 [0079.585] ReadFile (in: hFile=0x444, lpBuffer=0x22448f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be7d8, lpOverlapped=0x0 | out: lpBuffer=0x22448f8*, lpNumberOfBytesRead=0x3be7d8*=0x1000, lpOverlapped=0x0) returned 1 [0079.604] CloseHandle (hObject=0x444) returned 1 [0079.604] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USStmp.log", nBufferLength=0x105, lpBuffer=0x3be270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USStmp.log", lpFilePart=0x0) returned 0x3f [0079.605] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0079.605] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USStmp.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\comms\\unistoredb\\usstmp.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0079.605] GetFileType (hFile=0x444) returned 0x1 [0079.605] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6c0) returned 1 [0079.605] GetFileType (hFile=0x444) returned 0x1 [0079.605] WriteFile (in: hFile=0x444, lpBuffer=0x2242678*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be888, lpOverlapped=0x0 | out: lpBuffer=0x2242678*, lpNumberOfBytesWritten=0x3be888*=0x2000, lpOverlapped=0x0) returned 1 [0079.605] CloseHandle (hObject=0x444) returned 1 [0079.605] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USStmp.log", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USStmp.log", lpFilePart=0x0) returned 0x3f [0079.605] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USStmp.log.xuy", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USStmp.log.xuy", lpFilePart=0x0) returned 0x43 [0079.606] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0079.606] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USStmp.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\comms\\unistoredb\\usstmp.log"), fInfoLevelId=0x0, lpFileInformation=0x3be8a0 | out: lpFileInformation=0x3be8a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe691c3cb, ftCreationTime.dwHighDateTime=0x1d2d439, ftLastAccessTime.dwLowDateTime=0xe691c3cb, ftLastAccessTime.dwHighDateTime=0x1d2d439, ftLastWriteTime.dwLowDateTime=0x1b4af9a5, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x300000)) returned 1 [0079.606] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0079.606] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USStmp.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\comms\\unistoredb\\usstmp.log"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USStmp.log.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\comms\\unistoredb\\usstmp.log.xuy")) returned 1 [0079.607] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0079.607] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google", nBufferLength=0x105, lpBuffer=0x3be3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google", lpFilePart=0x0) returned 0x2a [0079.607] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\", nBufferLength=0x105, lpBuffer=0x3be370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\", lpFilePart=0x0) returned 0x2b [0079.607] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\*", lpFindFileData=0x3be580 | out: lpFindFileData=0x3be580) returned 0x5d7a90 [0079.607] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0079.607] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0079.607] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0079.609] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 0 [0079.609] FindClose (in: hFindFile=0x5d7a90 | out: hFindFile=0x5d7a90) returned 1 [0079.609] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0079.609] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7f0) returned 1 [0079.609] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0079.609] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google", nBufferLength=0x105, lpBuffer=0x3be3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google", lpFilePart=0x0) returned 0x2a [0079.609] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\", nBufferLength=0x105, lpBuffer=0x3be370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\", lpFilePart=0x0) returned 0x2b [0079.609] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\*", lpFindFileData=0x3be580 | out: lpFindFileData=0x3be580) returned 0x5d73d0 [0079.609] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0079.610] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0079.610] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0079.610] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 0 [0079.610] FindClose (in: hFindFile=0x5d73d0 | out: hFindFile=0x5d73d0) returned 1 [0079.610] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0079.610] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7f0) returned 1 [0079.610] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0079.610] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome", lpFilePart=0x0) returned 0x31 [0079.610] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\", lpFilePart=0x0) returned 0x32 [0079.610] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d79d0 [0079.611] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0079.611] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0079.611] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0079.611] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0079.611] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0079.611] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0079.611] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0079.611] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome", lpFilePart=0x0) returned 0x31 [0079.611] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\", lpFilePart=0x0) returned 0x32 [0079.612] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d7cd0 [0079.612] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0079.612] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0079.612] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0079.612] FindClose (in: hFindFile=0x5d7cd0 | out: hFindFile=0x5d7cd0) returned 1 [0079.612] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0079.613] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0079.613] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0079.613] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data", lpFilePart=0x0) returned 0x3b [0079.613] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\", lpFilePart=0x0) returned 0x3c [0079.613] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d78b0 [0079.627] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0079.630] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0079.630] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0079.630] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0079.630] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0079.631] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0079.631] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0079.631] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0079.631] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0079.631] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0079.631] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0079.631] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0079.631] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0079.632] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0079.632] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0079.632] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0079.632] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0079.632] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0079.632] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0079.632] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0079.633] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0079.633] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0079.633] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0079.633] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0079.633] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0079.633] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0079.633] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0079.634] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0079.634] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0079.634] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0079.634] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0079.634] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0079.635] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0079.635] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0079.635] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0079.635] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data", lpFilePart=0x0) returned 0x3b [0079.635] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\", lpFilePart=0x0) returned 0x3c [0079.636] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d73d0 [0079.637] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0079.637] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0079.637] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0079.637] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0079.637] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0079.637] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0079.637] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0079.638] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0079.638] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0079.638] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0079.638] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0079.638] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0079.638] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0079.639] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0079.640] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0079.640] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0079.640] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0079.640] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0079.640] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0079.641] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0079.641] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0079.641] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0079.641] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0079.641] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0079.641] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0079.641] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0079.642] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0079.642] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0079.642] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0079.642] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0079.642] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0079.642] FindClose (in: hFindFile=0x5d73d0 | out: hFindFile=0x5d73d0) returned 1 [0079.643] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0079.643] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0079.643] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\First Run", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\First Run", lpFilePart=0x0) returned 0x45 [0079.643] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0079.643] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\First Run" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\first run"), fInfoLevelId=0x0, lpFileInformation=0x22ce030 | out: lpFileInformation=0x22ce030*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x710d75fa, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x710d75fa, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x710d75fa, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0079.644] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0079.644] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\First Run", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\First Run", lpFilePart=0x0) returned 0x45 [0079.644] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0079.644] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\First Run" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\first run"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0079.644] GetFileType (hFile=0x444) returned 0x1 [0079.644] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0079.644] GetFileType (hFile=0x444) returned 0x1 [0079.644] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0x0 [0079.644] CloseHandle (hObject=0x444) returned 1 [0079.657] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\First Run", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\First Run", lpFilePart=0x0) returned 0x45 [0079.657] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0079.657] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\First Run" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\first run"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0079.657] GetFileType (hFile=0x444) returned 0x1 [0079.657] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0079.657] GetFileType (hFile=0x444) returned 0x1 [0079.657] WriteFile (in: hFile=0x444, lpBuffer=0x23443a8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x3be628, lpOverlapped=0x0 | out: lpBuffer=0x23443a8*, lpNumberOfBytesWritten=0x3be628*=0x10, lpOverlapped=0x0) returned 1 [0079.658] CloseHandle (hObject=0x444) returned 1 [0079.658] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\First Run", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\First Run", lpFilePart=0x0) returned 0x45 [0079.658] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\First Run.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\First Run.xuy", lpFilePart=0x0) returned 0x49 [0079.658] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0079.658] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\First Run" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\first run"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x710d75fa, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x710d75fa, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1b548264, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0079.659] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0079.659] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\First Run" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\first run"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\First Run.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\first run.xuy")) returned 1 [0079.659] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Local State", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Local State", lpFilePart=0x0) returned 0x47 [0079.659] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0079.659] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Local State" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\local state"), fInfoLevelId=0x0, lpFileInformation=0x23455e8 | out: lpFileInformation=0x23455e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76e95b22, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7d1d076f, ftLastAccessTime.dwHighDateTime=0x1d2d59f, ftLastWriteTime.dwLowDateTime=0x7d1d076f, ftLastWriteTime.dwHighDateTime=0x1d2d59f, nFileSizeHigh=0x0, nFileSizeLow=0x12b26)) returned 1 [0079.660] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0079.661] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Local State", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Local State", lpFilePart=0x0) returned 0x47 [0079.661] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0079.661] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Local State" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\local state"), fInfoLevelId=0x0, lpFileInformation=0x2345728 | out: lpFileInformation=0x2345728*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76e95b22, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7d1d076f, ftLastAccessTime.dwHighDateTime=0x1d2d59f, ftLastWriteTime.dwLowDateTime=0x7d1d076f, ftLastWriteTime.dwHighDateTime=0x1d2d59f, nFileSizeHigh=0x0, nFileSizeLow=0x12b26)) returned 1 [0079.661] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0079.661] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Local State", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Local State", lpFilePart=0x0) returned 0x47 [0079.661] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0079.661] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Local State" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\local state"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0079.661] GetFileType (hFile=0x444) returned 0x1 [0079.661] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0079.661] GetFileType (hFile=0x444) returned 0x1 [0079.661] ReadFile (in: hFile=0x444, lpBuffer=0x2347ad8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x2347ad8*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0079.740] CloseHandle (hObject=0x444) returned 1 [0079.740] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Local State", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Local State", lpFilePart=0x0) returned 0x47 [0079.740] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0079.740] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Local State" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\local state"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0079.741] GetFileType (hFile=0x444) returned 0x1 [0079.741] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0079.741] GetFileType (hFile=0x444) returned 0x1 [0079.741] WriteFile (in: hFile=0x444, lpBuffer=0x215fc48*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x215fc48*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0079.741] CloseHandle (hObject=0x444) returned 1 [0079.741] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Local State", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Local State", lpFilePart=0x0) returned 0x47 [0079.741] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Local State.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Local State.xuy", lpFilePart=0x0) returned 0x4b [0079.741] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0079.741] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Local State" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\local state"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76e95b22, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7d1d076f, ftLastAccessTime.dwHighDateTime=0x1d2d59f, ftLastWriteTime.dwLowDateTime=0x1b60b7f6, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x12b26)) returned 1 [0079.741] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0079.742] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Local State" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\local state"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Local State.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\local state.xuy")) returned 1 [0079.743] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Bloom", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Bloom", lpFilePart=0x0) returned 0x4f [0079.743] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0079.743] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Bloom" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\safe browsing bloom"), fInfoLevelId=0x0, lpFileInformation=0x21c5160 | out: lpFileInformation=0x21c5160*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96ca9616, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x96ca9616, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x988a17dc, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x4d7e84)) returned 1 [0079.743] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0079.743] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Bloom", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Bloom", lpFilePart=0x0) returned 0x4f [0079.743] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0079.743] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Bloom" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\safe browsing bloom"), fInfoLevelId=0x0, lpFileInformation=0x21c52c0 | out: lpFileInformation=0x21c52c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96ca9616, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x96ca9616, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x988a17dc, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x4d7e84)) returned 1 [0079.743] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0079.743] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Bloom", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Bloom", lpFilePart=0x0) returned 0x4f [0079.743] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0079.743] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Bloom" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\safe browsing bloom"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0079.744] GetFileType (hFile=0x444) returned 0x1 [0079.744] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0079.744] GetFileType (hFile=0x444) returned 0x1 [0079.744] ReadFile (in: hFile=0x444, lpBuffer=0x21c76b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x21c76b0*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0079.758] CloseHandle (hObject=0x444) returned 1 [0079.758] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Bloom", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Bloom", lpFilePart=0x0) returned 0x4f [0079.758] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0079.758] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Bloom" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\safe browsing bloom"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0079.759] GetFileType (hFile=0x444) returned 0x1 [0079.759] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0079.759] GetFileType (hFile=0x444) returned 0x1 [0079.759] WriteFile (in: hFile=0x444, lpBuffer=0x21c5400*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x21c5400*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0079.759] CloseHandle (hObject=0x444) returned 1 [0079.759] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Bloom", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Bloom", lpFilePart=0x0) returned 0x4f [0079.759] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Bloom.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Bloom.xuy", lpFilePart=0x0) returned 0x53 [0079.759] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0079.759] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Bloom" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\safe browsing bloom"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96ca9616, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x96ca9616, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1b62d37c, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x4d7e84)) returned 1 [0079.759] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0079.759] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Bloom" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\safe browsing bloom"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Bloom.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\safe browsing bloom.xuy")) returned 1 [0079.760] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Bloom Prefix Set", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Bloom Prefix Set", lpFilePart=0x0) returned 0x5a [0079.760] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0079.760] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Bloom Prefix Set" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\safe browsing bloom prefix set"), fInfoLevelId=0x0, lpFileInformation=0x2243a68 | out: lpFileInformation=0x2243a68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x988edcb5, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x988edcb5, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x988edcb5, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xac14c)) returned 1 [0079.761] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0079.761] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Bloom Prefix Set", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Bloom Prefix Set", lpFilePart=0x0) returned 0x5a [0079.761] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0079.761] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Bloom Prefix Set" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\safe browsing bloom prefix set"), fInfoLevelId=0x0, lpFileInformation=0x2243bf8 | out: lpFileInformation=0x2243bf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x988edcb5, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x988edcb5, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x988edcb5, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xac14c)) returned 1 [0079.762] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0079.762] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Bloom Prefix Set", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Bloom Prefix Set", lpFilePart=0x0) returned 0x5a [0079.762] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0079.762] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Bloom Prefix Set" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\safe browsing bloom prefix set"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0079.762] GetFileType (hFile=0x444) returned 0x1 [0079.762] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0079.762] GetFileType (hFile=0x444) returned 0x1 [0079.762] ReadFile (in: hFile=0x444, lpBuffer=0x2246048, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x2246048*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0079.779] CloseHandle (hObject=0x444) returned 1 [0079.804] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Bloom Prefix Set", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Bloom Prefix Set", lpFilePart=0x0) returned 0x5a [0079.804] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0079.804] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Bloom Prefix Set" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\safe browsing bloom prefix set"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0079.805] GetFileType (hFile=0x444) returned 0x1 [0079.805] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0079.805] GetFileType (hFile=0x444) returned 0x1 [0079.805] WriteFile (in: hFile=0x444, lpBuffer=0x2243d68*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x2243d68*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0079.805] CloseHandle (hObject=0x444) returned 1 [0079.805] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Bloom Prefix Set", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Bloom Prefix Set", lpFilePart=0x0) returned 0x5a [0079.805] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Bloom Prefix Set.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Bloom Prefix Set.xuy", lpFilePart=0x0) returned 0x5e [0079.805] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0079.805] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Bloom Prefix Set" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\safe browsing bloom prefix set"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x988edcb5, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x988edcb5, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1b69f701, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xac14c)) returned 1 [0079.805] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0079.805] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Bloom Prefix Set" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\safe browsing bloom prefix set"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Bloom Prefix Set.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\safe browsing bloom prefix set.xuy")) returned 1 [0079.806] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Channel IDs", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Channel IDs", lpFilePart=0x0) returned 0x55 [0079.806] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0079.806] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Channel IDs" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\safe browsing channel ids"), fInfoLevelId=0x0, lpFileInformation=0x22c2478 | out: lpFileInformation=0x22c2478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77556505, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x77556505, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x9ae99ea8, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x1400)) returned 1 [0079.808] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0079.808] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Channel IDs", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Channel IDs", lpFilePart=0x0) returned 0x55 [0079.808] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0079.808] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Channel IDs" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\safe browsing channel ids"), fInfoLevelId=0x0, lpFileInformation=0x22c25f8 | out: lpFileInformation=0x22c25f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77556505, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x77556505, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x9ae99ea8, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x1400)) returned 1 [0079.808] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0079.808] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Channel IDs", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Channel IDs", lpFilePart=0x0) returned 0x55 [0079.808] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0079.808] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Channel IDs" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\safe browsing channel ids"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0079.809] GetFileType (hFile=0x444) returned 0x1 [0079.809] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0079.809] GetFileType (hFile=0x444) returned 0x1 [0079.809] ReadFile (in: hFile=0x444, lpBuffer=0x22c4a28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x22c4a28*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0079.829] CloseHandle (hObject=0x444) returned 1 [0079.830] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Channel IDs", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Channel IDs", lpFilePart=0x0) returned 0x55 [0079.830] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0079.830] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Channel IDs" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\safe browsing channel ids"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0079.830] GetFileType (hFile=0x444) returned 0x1 [0079.830] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0079.830] GetFileType (hFile=0x444) returned 0x1 [0079.830] WriteFile (in: hFile=0x444, lpBuffer=0x22c2758*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x22c2758*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0079.830] CloseHandle (hObject=0x444) returned 1 [0079.831] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Channel IDs", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Channel IDs", lpFilePart=0x0) returned 0x55 [0079.831] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Channel IDs.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Channel IDs.xuy", lpFilePart=0x0) returned 0x59 [0079.831] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0079.831] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Channel IDs" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\safe browsing channel ids"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77556505, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x77556505, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1b6ebd4d, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0079.831] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0079.831] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Channel IDs" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\safe browsing channel ids"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Channel IDs.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\safe browsing channel ids.xuy")) returned 1 [0079.832] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Channel IDs-journal", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Channel IDs-journal", lpFilePart=0x0) returned 0x5d [0079.832] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0079.832] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Channel IDs-journal" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\safe browsing channel ids-journal"), fInfoLevelId=0x0, lpFileInformation=0x2340e30 | out: lpFileInformation=0x2340e30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77558c33, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x77558c33, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x9aee64bb, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0079.834] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0079.834] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Channel IDs-journal", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Channel IDs-journal", lpFilePart=0x0) returned 0x5d [0079.834] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0079.834] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Channel IDs-journal" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\safe browsing channel ids-journal"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0079.834] GetFileType (hFile=0x444) returned 0x1 [0079.834] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0079.834] GetFileType (hFile=0x444) returned 0x1 [0079.834] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0x0 [0079.834] CloseHandle (hObject=0x444) returned 1 [0079.888] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Channel IDs-journal", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Channel IDs-journal", lpFilePart=0x0) returned 0x5d [0079.889] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0079.889] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Channel IDs-journal" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\safe browsing channel ids-journal"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0079.890] GetFileType (hFile=0x444) returned 0x1 [0079.890] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0079.890] GetFileType (hFile=0x444) returned 0x1 [0079.890] WriteFile (in: hFile=0x444, lpBuffer=0x21b40c8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x3be628, lpOverlapped=0x0 | out: lpBuffer=0x21b40c8*, lpNumberOfBytesWritten=0x3be628*=0x10, lpOverlapped=0x0) returned 1 [0079.891] CloseHandle (hObject=0x444) returned 1 [0079.891] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Channel IDs-journal", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Channel IDs-journal", lpFilePart=0x0) returned 0x5d [0079.891] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Channel IDs-journal.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Channel IDs-journal.xuy", lpFilePart=0x0) returned 0x61 [0079.891] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0079.892] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Channel IDs-journal" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\safe browsing channel ids-journal"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77558c33, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x77558c33, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1b7845af, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0079.892] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0079.892] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Channel IDs-journal" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\safe browsing channel ids-journal"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Channel IDs-journal.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\safe browsing channel ids-journal.xuy")) returned 1 [0079.893] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Cookies", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Cookies", lpFilePart=0x0) returned 0x51 [0079.893] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0079.893] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Cookies" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\safe browsing cookies"), fInfoLevelId=0x0, lpFileInformation=0x21b5398 | out: lpFileInformation=0x21b5398*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76fac071, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x76fac071, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x9ae277ac, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x1c00)) returned 1 [0079.895] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0079.895] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Cookies", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Cookies", lpFilePart=0x0) returned 0x51 [0079.895] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0079.895] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Cookies" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\safe browsing cookies"), fInfoLevelId=0x0, lpFileInformation=0x21b5508 | out: lpFileInformation=0x21b5508*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76fac071, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x76fac071, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x9ae277ac, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x1c00)) returned 1 [0079.895] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0079.895] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Cookies", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Cookies", lpFilePart=0x0) returned 0x51 [0079.895] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0079.895] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Cookies" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\safe browsing cookies"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0079.896] GetFileType (hFile=0x444) returned 0x1 [0079.896] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0079.896] GetFileType (hFile=0x444) returned 0x1 [0079.896] ReadFile (in: hFile=0x444, lpBuffer=0x21b7918, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x21b7918*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0079.914] CloseHandle (hObject=0x444) returned 1 [0079.914] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Cookies", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Cookies", lpFilePart=0x0) returned 0x51 [0079.914] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0079.915] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Cookies" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\safe browsing cookies"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0079.915] GetFileType (hFile=0x444) returned 0x1 [0079.915] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0079.915] GetFileType (hFile=0x444) returned 0x1 [0079.915] WriteFile (in: hFile=0x444, lpBuffer=0x21b5658*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x21b5658*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0079.915] CloseHandle (hObject=0x444) returned 1 [0079.916] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Cookies", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Cookies", lpFilePart=0x0) returned 0x51 [0079.916] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Cookies.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Cookies.xuy", lpFilePart=0x0) returned 0x55 [0079.916] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0079.916] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Cookies" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\safe browsing cookies"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76fac071, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x76fac071, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1b7aacb3, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0079.916] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0079.916] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Cookies" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\safe browsing cookies"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Cookies.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\safe browsing cookies.xuy")) returned 1 [0079.917] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Cookies-journal", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Cookies-journal", lpFilePart=0x0) returned 0x59 [0079.917] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0079.917] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Cookies-journal" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\safe browsing cookies-journal"), fInfoLevelId=0x0, lpFileInformation=0x2233cf8 | out: lpFileInformation=0x2233cf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76fae7ac, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x76fae7ac, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x9aec0279, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0079.917] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0079.917] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Cookies-journal", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Cookies-journal", lpFilePart=0x0) returned 0x59 [0079.917] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0079.918] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Cookies-journal" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\safe browsing cookies-journal"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0079.918] GetFileType (hFile=0x444) returned 0x1 [0079.918] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0079.918] GetFileType (hFile=0x444) returned 0x1 [0079.918] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0x0 [0079.918] CloseHandle (hObject=0x444) returned 1 [0079.934] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Cookies-journal", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Cookies-journal", lpFilePart=0x0) returned 0x59 [0079.935] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0079.935] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Cookies-journal" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\safe browsing cookies-journal"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0079.935] GetFileType (hFile=0x444) returned 0x1 [0079.935] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0079.935] GetFileType (hFile=0x444) returned 0x1 [0079.935] WriteFile (in: hFile=0x444, lpBuffer=0x22aa160*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x3be628, lpOverlapped=0x0 | out: lpBuffer=0x22aa160*, lpNumberOfBytesWritten=0x3be628*=0x10, lpOverlapped=0x0) returned 1 [0079.937] CloseHandle (hObject=0x444) returned 1 [0079.939] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Cookies-journal", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Cookies-journal", lpFilePart=0x0) returned 0x59 [0079.939] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Cookies-journal.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Cookies-journal.xuy", lpFilePart=0x0) returned 0x5d [0079.939] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0079.939] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Cookies-journal" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\safe browsing cookies-journal"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76fae7ac, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x76fae7ac, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1b7f6c6e, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0079.939] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0079.939] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Cookies-journal" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\safe browsing cookies-journal"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Cookies-journal.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\safe browsing cookies-journal.xuy")) returned 1 [0079.940] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Csd Whitelist", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Csd Whitelist", lpFilePart=0x0) returned 0x57 [0079.940] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0079.940] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Csd Whitelist" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\safe browsing csd whitelist"), fInfoLevelId=0x0, lpFileInformation=0x22ab418 | out: lpFileInformation=0x22ab418*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96ca9616, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x96ca9616, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x98913f17, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x370f4)) returned 1 [0079.941] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0079.941] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Csd Whitelist", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Csd Whitelist", lpFilePart=0x0) returned 0x57 [0079.941] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0079.941] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Csd Whitelist" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\safe browsing csd whitelist"), fInfoLevelId=0x0, lpFileInformation=0x22ab598 | out: lpFileInformation=0x22ab598*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96ca9616, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x96ca9616, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x98913f17, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x370f4)) returned 1 [0079.941] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0079.941] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Csd Whitelist", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Csd Whitelist", lpFilePart=0x0) returned 0x57 [0079.941] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0079.941] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Csd Whitelist" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\safe browsing csd whitelist"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0079.942] GetFileType (hFile=0x444) returned 0x1 [0079.942] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0079.942] GetFileType (hFile=0x444) returned 0x1 [0079.942] ReadFile (in: hFile=0x444, lpBuffer=0x22ad9c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x22ad9c8*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0079.982] CloseHandle (hObject=0x444) returned 1 [0079.982] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Csd Whitelist", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Csd Whitelist", lpFilePart=0x0) returned 0x57 [0079.982] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0079.982] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Csd Whitelist" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\safe browsing csd whitelist"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0079.983] GetFileType (hFile=0x444) returned 0x1 [0079.983] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0079.983] GetFileType (hFile=0x444) returned 0x1 [0079.983] WriteFile (in: hFile=0x444, lpBuffer=0x22ab6f8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x22ab6f8*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0079.983] CloseHandle (hObject=0x444) returned 1 [0079.984] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Csd Whitelist", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Csd Whitelist", lpFilePart=0x0) returned 0x57 [0079.984] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Csd Whitelist.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Csd Whitelist.xuy", lpFilePart=0x0) returned 0x5b [0079.984] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0079.984] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Csd Whitelist" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\safe browsing csd whitelist"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96ca9616, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x96ca9616, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1b8692c7, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x370f4)) returned 1 [0079.984] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0079.984] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Csd Whitelist" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\safe browsing csd whitelist"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Csd Whitelist.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\safe browsing csd whitelist.xuy")) returned 1 [0079.985] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Download", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Download", lpFilePart=0x0) returned 0x52 [0079.985] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0079.985] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Download" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\safe browsing download"), fInfoLevelId=0x0, lpFileInformation=0x2329dd0 | out: lpFileInformation=0x2329dd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96ca9616, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x96ca9616, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x984bb29a, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x41ed4)) returned 1 [0079.985] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0079.985] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Download", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Download", lpFilePart=0x0) returned 0x52 [0079.985] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0079.985] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Download" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\safe browsing download"), fInfoLevelId=0x0, lpFileInformation=0x2329f40 | out: lpFileInformation=0x2329f40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96ca9616, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x96ca9616, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x984bb29a, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x41ed4)) returned 1 [0079.985] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0079.985] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Download", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Download", lpFilePart=0x0) returned 0x52 [0079.986] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0079.986] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Download" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\safe browsing download"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0079.986] GetFileType (hFile=0x444) returned 0x1 [0079.986] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0079.986] GetFileType (hFile=0x444) returned 0x1 [0079.986] ReadFile (in: hFile=0x444, lpBuffer=0x232c350, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x232c350*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0080.079] CloseHandle (hObject=0x444) returned 1 [0080.080] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Download", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Download", lpFilePart=0x0) returned 0x52 [0080.080] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0080.080] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Download" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\safe browsing download"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0080.080] GetFileType (hFile=0x444) returned 0x1 [0080.080] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0080.080] GetFileType (hFile=0x444) returned 0x1 [0080.080] WriteFile (in: hFile=0x444, lpBuffer=0x215fc30*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x215fc30*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0080.080] CloseHandle (hObject=0x444) returned 1 [0080.081] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Download", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Download", lpFilePart=0x0) returned 0x52 [0080.081] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Download.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Download.xuy", lpFilePart=0x0) returned 0x56 [0080.081] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0080.081] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Download" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\safe browsing download"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96ca9616, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x96ca9616, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1b94e4a6, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x41ed4)) returned 1 [0080.081] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0080.081] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Download" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\safe browsing download"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Download.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\safe browsing download.xuy")) returned 1 [0080.082] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Download Whitelist", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Download Whitelist", lpFilePart=0x0) returned 0x5c [0080.082] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0080.082] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Download Whitelist" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\safe browsing download whitelist"), fInfoLevelId=0x0, lpFileInformation=0x21ab8e0 | out: lpFileInformation=0x21ab8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96ca9616, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x96ca9616, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x98913f17, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x55ac)) returned 1 [0080.082] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0080.082] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Download Whitelist", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Download Whitelist", lpFilePart=0x0) returned 0x5c [0080.082] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0080.082] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Download Whitelist" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\safe browsing download whitelist"), fInfoLevelId=0x0, lpFileInformation=0x21aba80 | out: lpFileInformation=0x21aba80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96ca9616, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x96ca9616, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x98913f17, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x55ac)) returned 1 [0080.082] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0080.082] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Download Whitelist", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Download Whitelist", lpFilePart=0x0) returned 0x5c [0080.082] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0080.083] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Download Whitelist" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\safe browsing download whitelist"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0080.083] GetFileType (hFile=0x444) returned 0x1 [0080.083] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0080.083] GetFileType (hFile=0x444) returned 0x1 [0080.083] ReadFile (in: hFile=0x444, lpBuffer=0x21adef0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x21adef0*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0080.104] CloseHandle (hObject=0x444) returned 1 [0080.105] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Download Whitelist", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Download Whitelist", lpFilePart=0x0) returned 0x5c [0080.105] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0080.105] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Download Whitelist" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\safe browsing download whitelist"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0080.105] GetFileType (hFile=0x444) returned 0x1 [0080.105] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0080.105] GetFileType (hFile=0x444) returned 0x1 [0080.105] WriteFile (in: hFile=0x444, lpBuffer=0x21abc00*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x21abc00*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0080.105] CloseHandle (hObject=0x444) returned 1 [0080.105] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Download Whitelist", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Download Whitelist", lpFilePart=0x0) returned 0x5c [0080.105] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Download Whitelist.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Download Whitelist.xuy", lpFilePart=0x0) returned 0x60 [0080.106] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0080.106] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Download Whitelist" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\safe browsing download whitelist"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96ca9616, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x96ca9616, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1b9743cf, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x55ac)) returned 1 [0080.106] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0080.106] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Download Whitelist" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\safe browsing download whitelist"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Download Whitelist.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\safe browsing download whitelist.xuy")) returned 1 [0080.107] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Extension Blacklist", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Extension Blacklist", lpFilePart=0x0) returned 0x5d [0080.107] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0080.107] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Extension Blacklist" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\safe browsing extension blacklist"), fInfoLevelId=0x0, lpFileInformation=0x222a348 | out: lpFileInformation=0x222a348*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96ca9616, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x96ca9616, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x98913f17, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x17048)) returned 1 [0080.107] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0080.107] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Extension Blacklist", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Extension Blacklist", lpFilePart=0x0) returned 0x5d [0080.107] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0080.107] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Extension Blacklist" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\safe browsing extension blacklist"), fInfoLevelId=0x0, lpFileInformation=0x222a4e8 | out: lpFileInformation=0x222a4e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96ca9616, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x96ca9616, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x98913f17, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x17048)) returned 1 [0080.107] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0080.107] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Extension Blacklist", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Extension Blacklist", lpFilePart=0x0) returned 0x5d [0080.107] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0080.107] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Extension Blacklist" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\safe browsing extension blacklist"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0080.109] GetFileType (hFile=0x444) returned 0x1 [0080.109] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0080.109] GetFileType (hFile=0x444) returned 0x1 [0080.109] ReadFile (in: hFile=0x444, lpBuffer=0x222c958, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x222c958*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0080.130] CloseHandle (hObject=0x444) returned 1 [0080.138] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Extension Blacklist", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Extension Blacklist", lpFilePart=0x0) returned 0x5d [0080.138] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0080.138] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Extension Blacklist" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\safe browsing extension blacklist"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0080.138] GetFileType (hFile=0x444) returned 0x1 [0080.138] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0080.139] GetFileType (hFile=0x444) returned 0x1 [0080.139] WriteFile (in: hFile=0x444, lpBuffer=0x222a668*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x222a668*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0080.139] CloseHandle (hObject=0x444) returned 1 [0080.139] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Extension Blacklist", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Extension Blacklist", lpFilePart=0x0) returned 0x5d [0080.139] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Extension Blacklist.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Extension Blacklist.xuy", lpFilePart=0x0) returned 0x61 [0080.139] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0080.139] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Extension Blacklist" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\safe browsing extension blacklist"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96ca9616, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x96ca9616, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1b9e69dc, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x17048)) returned 1 [0080.139] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0080.140] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Extension Blacklist" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\safe browsing extension blacklist"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Extension Blacklist.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\safe browsing extension blacklist.xuy")) returned 1 [0080.140] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing IP Blacklist", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing IP Blacklist", lpFilePart=0x0) returned 0x56 [0080.140] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0080.140] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing IP Blacklist" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\safe browsing ip blacklist"), fInfoLevelId=0x0, lpFileInformation=0x22a8db0 | out: lpFileInformation=0x22a8db0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96ca9616, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x96ca9616, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x98913f17, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x70)) returned 1 [0080.141] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0080.141] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing IP Blacklist", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing IP Blacklist", lpFilePart=0x0) returned 0x56 [0080.141] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0080.141] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing IP Blacklist" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\safe browsing ip blacklist"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0080.141] GetFileType (hFile=0x444) returned 0x1 [0080.141] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0080.141] GetFileType (hFile=0x444) returned 0x1 [0080.141] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0x70 [0080.141] ReadFile (in: hFile=0x444, lpBuffer=0x22a9138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be718, lpOverlapped=0x0 | out: lpBuffer=0x22a9138*, lpNumberOfBytesRead=0x3be718*=0x70, lpOverlapped=0x0) returned 1 [0080.142] CloseHandle (hObject=0x444) returned 1 [0080.153] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing IP Blacklist", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing IP Blacklist", lpFilePart=0x0) returned 0x56 [0080.153] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0080.153] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing IP Blacklist" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\safe browsing ip blacklist"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0080.154] GetFileType (hFile=0x444) returned 0x1 [0080.154] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0080.154] GetFileType (hFile=0x444) returned 0x1 [0080.154] WriteFile (in: hFile=0x444, lpBuffer=0x2320368*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x3be628, lpOverlapped=0x0 | out: lpBuffer=0x2320368*, lpNumberOfBytesWritten=0x3be628*=0x80, lpOverlapped=0x0) returned 1 [0080.155] CloseHandle (hObject=0x444) returned 1 [0080.155] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing IP Blacklist", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing IP Blacklist", lpFilePart=0x0) returned 0x56 [0080.155] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing IP Blacklist.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing IP Blacklist.xuy", lpFilePart=0x0) returned 0x5a [0080.155] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0080.155] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing IP Blacklist" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\safe browsing ip blacklist"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96ca9616, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x96ca9616, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1ba0cd0b, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x80)) returned 1 [0080.156] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0080.156] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing IP Blacklist" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\safe browsing ip blacklist"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing IP Blacklist.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\safe browsing ip blacklist.xuy")) returned 1 [0080.156] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Module Whitelist", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Module Whitelist", lpFilePart=0x0) returned 0x5a [0080.156] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0080.156] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Module Whitelist" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\safe browsing module whitelist"), fInfoLevelId=0x0, lpFileInformation=0x2321608 | out: lpFileInformation=0x2321608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96ca9616, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x96ca9616, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x989d2afc, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xe8f4)) returned 1 [0080.157] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0080.157] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Module Whitelist", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Module Whitelist", lpFilePart=0x0) returned 0x5a [0080.157] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0080.157] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Module Whitelist" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\safe browsing module whitelist"), fInfoLevelId=0x0, lpFileInformation=0x2321798 | out: lpFileInformation=0x2321798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96ca9616, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x96ca9616, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x989d2afc, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xe8f4)) returned 1 [0080.157] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0080.157] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Module Whitelist", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Module Whitelist", lpFilePart=0x0) returned 0x5a [0080.157] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0080.157] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Module Whitelist" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\safe browsing module whitelist"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0080.157] GetFileType (hFile=0x444) returned 0x1 [0080.157] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0080.157] GetFileType (hFile=0x444) returned 0x1 [0080.158] ReadFile (in: hFile=0x444, lpBuffer=0x2323be8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x2323be8*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0080.200] CloseHandle (hObject=0x444) returned 1 [0080.200] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Module Whitelist", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Module Whitelist", lpFilePart=0x0) returned 0x5a [0080.201] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0080.201] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Module Whitelist" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\safe browsing module whitelist"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0080.201] GetFileType (hFile=0x444) returned 0x1 [0080.201] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0080.201] GetFileType (hFile=0x444) returned 0x1 [0080.201] WriteFile (in: hFile=0x444, lpBuffer=0x215fc30*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x215fc30*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0080.202] CloseHandle (hObject=0x444) returned 1 [0080.202] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Module Whitelist", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Module Whitelist", lpFilePart=0x0) returned 0x5a [0080.202] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Module Whitelist.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Module Whitelist.xuy", lpFilePart=0x0) returned 0x5e [0080.202] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0080.202] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Module Whitelist" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\safe browsing module whitelist"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96ca9616, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x96ca9616, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1ba7f49e, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xe8f4)) returned 1 [0080.202] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0080.202] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Module Whitelist" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\safe browsing module whitelist"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Module Whitelist.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\safe browsing module whitelist.xuy")) returned 1 [0080.203] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Resource Blacklist", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Resource Blacklist", lpFilePart=0x0) returned 0x5c [0080.203] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0080.203] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Resource Blacklist" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\safe browsing resource blacklist"), fInfoLevelId=0x0, lpFileInformation=0x21a0000 | out: lpFileInformation=0x21a0000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96ca9616, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x96ca9616, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x989d2afc, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x544)) returned 1 [0080.203] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0080.203] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Resource Blacklist", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Resource Blacklist", lpFilePart=0x0) returned 0x5c [0080.203] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0080.204] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Resource Blacklist" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\safe browsing resource blacklist"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0080.204] GetFileType (hFile=0x444) returned 0x1 [0080.204] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0080.204] GetFileType (hFile=0x444) returned 0x1 [0080.204] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0x544 [0080.204] ReadFile (in: hFile=0x444, lpBuffer=0x21a08a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be718, lpOverlapped=0x0 | out: lpBuffer=0x21a08a0*, lpNumberOfBytesRead=0x3be718*=0x544, lpOverlapped=0x0) returned 1 [0080.205] CloseHandle (hObject=0x444) returned 1 [0080.219] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Resource Blacklist", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Resource Blacklist", lpFilePart=0x0) returned 0x5c [0080.219] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0080.219] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Resource Blacklist" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\safe browsing resource blacklist"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0080.220] GetFileType (hFile=0x444) returned 0x1 [0080.220] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0080.221] GetFileType (hFile=0x444) returned 0x1 [0080.221] WriteFile (in: hFile=0x444, lpBuffer=0x2219368*, nNumberOfBytesToWrite=0x550, lpNumberOfBytesWritten=0x3be628, lpOverlapped=0x0 | out: lpBuffer=0x2219368*, lpNumberOfBytesWritten=0x3be628*=0x550, lpOverlapped=0x0) returned 1 [0080.222] CloseHandle (hObject=0x444) returned 1 [0080.222] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Resource Blacklist", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Resource Blacklist", lpFilePart=0x0) returned 0x5c [0080.222] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Resource Blacklist.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Resource Blacklist.xuy", lpFilePart=0x0) returned 0x60 [0080.222] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0080.222] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Resource Blacklist" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\safe browsing resource blacklist"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96ca9616, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x96ca9616, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1baa5bee, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x550)) returned 1 [0080.222] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0080.222] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Resource Blacklist" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\safe browsing resource blacklist"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Resource Blacklist.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\safe browsing resource blacklist.xuy")) returned 1 [0080.223] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing UwS List", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing UwS List", lpFilePart=0x0) returned 0x52 [0080.223] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0080.223] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing UwS List" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\safe browsing uws list"), fInfoLevelId=0x0, lpFileInformation=0x221a638 | out: lpFileInformation=0x221a638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96ca9616, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x96ca9616, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x989ac849, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x96c54)) returned 1 [0080.223] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0080.223] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing UwS List", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing UwS List", lpFilePart=0x0) returned 0x52 [0080.223] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0080.223] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing UwS List" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\safe browsing uws list"), fInfoLevelId=0x0, lpFileInformation=0x221a7a8 | out: lpFileInformation=0x221a7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96ca9616, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x96ca9616, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x989ac849, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x96c54)) returned 1 [0080.224] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0080.224] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing UwS List", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing UwS List", lpFilePart=0x0) returned 0x52 [0080.224] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0080.224] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing UwS List" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\safe browsing uws list"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0080.224] GetFileType (hFile=0x444) returned 0x1 [0080.224] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0080.224] GetFileType (hFile=0x444) returned 0x1 [0080.224] ReadFile (in: hFile=0x444, lpBuffer=0x221cbb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x221cbb8*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0080.247] CloseHandle (hObject=0x444) returned 1 [0080.247] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing UwS List", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing UwS List", lpFilePart=0x0) returned 0x52 [0080.247] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0080.247] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing UwS List" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\safe browsing uws list"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0080.247] GetFileType (hFile=0x444) returned 0x1 [0080.247] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0080.247] GetFileType (hFile=0x444) returned 0x1 [0080.247] WriteFile (in: hFile=0x444, lpBuffer=0x221a8f8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x221a8f8*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0080.248] CloseHandle (hObject=0x444) returned 1 [0080.248] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing UwS List", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing UwS List", lpFilePart=0x0) returned 0x52 [0080.248] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing UwS List.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing UwS List.xuy", lpFilePart=0x0) returned 0x56 [0080.248] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0080.248] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing UwS List" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\safe browsing uws list"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96ca9616, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x96ca9616, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1bacb7d7, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x96c54)) returned 1 [0080.248] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0080.249] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing UwS List" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\safe browsing uws list"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing UwS List.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\safe browsing uws list.xuy")) returned 1 [0080.250] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing UwS List Prefix Set", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing UwS List Prefix Set", lpFilePart=0x0) returned 0x5d [0080.250] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0080.250] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing UwS List Prefix Set" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\safe browsing uws list prefix set"), fInfoLevelId=0x0, lpFileInformation=0x2298f98 | out: lpFileInformation=0x2298f98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x989d2afc, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x989d2afc, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x989d2afc, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x3c942)) returned 1 [0080.250] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0080.250] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing UwS List Prefix Set", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing UwS List Prefix Set", lpFilePart=0x0) returned 0x5d [0080.250] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0080.250] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing UwS List Prefix Set" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\safe browsing uws list prefix set"), fInfoLevelId=0x0, lpFileInformation=0x2299138 | out: lpFileInformation=0x2299138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x989d2afc, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x989d2afc, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x989d2afc, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x3c942)) returned 1 [0080.250] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0080.251] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing UwS List Prefix Set", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing UwS List Prefix Set", lpFilePart=0x0) returned 0x5d [0080.251] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0080.251] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing UwS List Prefix Set" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\safe browsing uws list prefix set"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0080.251] GetFileType (hFile=0x444) returned 0x1 [0080.251] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0080.251] GetFileType (hFile=0x444) returned 0x1 [0080.251] ReadFile (in: hFile=0x444, lpBuffer=0x229b5a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x229b5a8*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0080.275] CloseHandle (hObject=0x444) returned 1 [0080.280] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing UwS List Prefix Set", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing UwS List Prefix Set", lpFilePart=0x0) returned 0x5d [0080.280] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0080.280] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing UwS List Prefix Set" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\safe browsing uws list prefix set"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0080.280] GetFileType (hFile=0x444) returned 0x1 [0080.280] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0080.280] GetFileType (hFile=0x444) returned 0x1 [0080.280] WriteFile (in: hFile=0x444, lpBuffer=0x22992b8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x22992b8*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0080.281] CloseHandle (hObject=0x444) returned 1 [0080.281] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing UwS List Prefix Set", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing UwS List Prefix Set", lpFilePart=0x0) returned 0x5d [0080.281] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing UwS List Prefix Set.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing UwS List Prefix Set.xuy", lpFilePart=0x0) returned 0x61 [0080.281] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0080.281] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing UwS List Prefix Set" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\safe browsing uws list prefix set"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x989d2afc, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x989d2afc, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1bb3deef, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x3c942)) returned 1 [0080.281] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0080.281] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing UwS List Prefix Set" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\safe browsing uws list prefix set"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing UwS List Prefix Set.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\safe browsing uws list prefix set.xuy")) returned 1 [0080.282] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0080.282] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency", lpFilePart=0x0) returned 0x53 [0080.282] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency\\", lpFilePart=0x0) returned 0x54 [0080.282] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d81b0 [0080.283] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0080.283] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0080.283] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0080.283] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0080.283] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0080.283] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0080.283] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency", lpFilePart=0x0) returned 0x53 [0080.283] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency\\", lpFilePart=0x0) returned 0x54 [0080.283] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7af0 [0080.284] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0080.284] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0080.284] FindClose (in: hFindFile=0x5d7af0 | out: hFindFile=0x5d7af0) returned 1 [0080.284] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0080.284] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0080.284] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0080.284] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad", lpFilePart=0x0) returned 0x44 [0080.284] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\", lpFilePart=0x0) returned 0x45 [0080.284] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d81b0 [0080.284] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0080.284] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0080.285] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0080.285] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0080.285] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0080.285] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0080.285] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0080.285] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0080.285] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0080.285] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad", lpFilePart=0x0) returned 0x44 [0080.285] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\", lpFilePart=0x0) returned 0x45 [0080.285] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7550 [0080.285] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0080.285] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0080.286] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0080.286] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0080.286] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0080.286] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0080.286] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0080.286] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0080.286] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\metadata", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\metadata", lpFilePart=0x0) returned 0x4d [0080.286] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0080.286] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\metadata" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\crashpad\\metadata"), fInfoLevelId=0x0, lpFileInformation=0x231bda0 | out: lpFileInformation=0x231bda0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70216cdc, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x70216cdc, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x70216cdc, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0080.287] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0080.287] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\metadata", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\metadata", lpFilePart=0x0) returned 0x4d [0080.287] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0080.287] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\metadata" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\crashpad\\metadata"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0080.287] GetFileType (hFile=0x444) returned 0x1 [0080.287] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0080.287] GetFileType (hFile=0x444) returned 0x1 [0080.287] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x0 [0080.287] CloseHandle (hObject=0x444) returned 1 [0080.330] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\metadata", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\metadata", lpFilePart=0x0) returned 0x4d [0080.331] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0080.331] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\metadata" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\crashpad\\metadata"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0080.331] GetFileType (hFile=0x444) returned 0x1 [0080.331] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0080.331] GetFileType (hFile=0x444) returned 0x1 [0080.331] WriteFile (in: hFile=0x444, lpBuffer=0x218e3b8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x218e3b8*, lpNumberOfBytesWritten=0x3be5b8*=0x10, lpOverlapped=0x0) returned 1 [0080.332] CloseHandle (hObject=0x444) returned 1 [0080.333] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\metadata", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\metadata", lpFilePart=0x0) returned 0x4d [0080.333] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\metadata.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\metadata.xuy", lpFilePart=0x0) returned 0x51 [0080.333] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0080.333] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\metadata" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\crashpad\\metadata"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70216cdc, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x70216cdc, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1bbb07ea, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0080.333] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0080.333] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\metadata" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\crashpad\\metadata"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\metadata.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\crashpad\\metadata.xuy")) returned 1 [0080.334] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\settings.dat", lpFilePart=0x0) returned 0x51 [0080.334] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0080.334] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\crashpad\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x218f650 | out: lpFileInformation=0x218f650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70216cdc, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x70216cdc, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x74c69a3a, ftLastWriteTime.dwHighDateTime=0x1d2d59f, nFileSizeHigh=0x0, nFileSizeLow=0x28)) returned 1 [0080.334] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0080.334] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\settings.dat", lpFilePart=0x0) returned 0x51 [0080.334] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0080.334] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\crashpad\\settings.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0080.335] GetFileType (hFile=0x444) returned 0x1 [0080.335] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0080.335] GetFileType (hFile=0x444) returned 0x1 [0080.335] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x28 [0080.335] ReadFile (in: hFile=0x444, lpBuffer=0x218f950, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x218f950*, lpNumberOfBytesRead=0x3be6a8*=0x28, lpOverlapped=0x0) returned 1 [0080.335] CloseHandle (hObject=0x444) returned 1 [0080.347] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\settings.dat", lpFilePart=0x0) returned 0x51 [0080.347] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0080.347] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\crashpad\\settings.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0080.348] GetFileType (hFile=0x444) returned 0x1 [0080.348] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0080.348] GetFileType (hFile=0x444) returned 0x1 [0080.348] WriteFile (in: hFile=0x444, lpBuffer=0x2206ab8*, nNumberOfBytesToWrite=0x30, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x2206ab8*, lpNumberOfBytesWritten=0x3be5b8*=0x30, lpOverlapped=0x0) returned 1 [0080.349] CloseHandle (hObject=0x444) returned 1 [0080.349] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\settings.dat", lpFilePart=0x0) returned 0x51 [0080.349] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\settings.dat.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\settings.dat.xuy", lpFilePart=0x0) returned 0x55 [0080.349] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0080.349] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\crashpad\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70216cdc, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x70216cdc, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1bbd6b02, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x30)) returned 1 [0080.349] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0080.349] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\crashpad\\settings.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\settings.dat.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\crashpad\\settings.dat.xuy")) returned 1 [0080.350] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0080.350] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports", lpFilePart=0x0) returned 0x4c [0080.350] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports\\", lpFilePart=0x0) returned 0x4d [0080.350] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d7370 [0080.352] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0080.352] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0080.352] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0080.352] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0080.352] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0080.352] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0080.352] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports", lpFilePart=0x0) returned 0x4c [0080.352] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports\\", lpFilePart=0x0) returned 0x4d [0080.352] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d75b0 [0080.352] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0080.353] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0080.353] FindClose (in: hFindFile=0x5d75b0 | out: hFindFile=0x5d75b0) returned 1 [0080.353] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0080.353] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0080.353] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0080.353] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default", lpFilePart=0x0) returned 0x43 [0080.353] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\", lpFilePart=0x0) returned 0x44 [0080.353] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7d30 [0080.368] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0080.386] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0080.386] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0080.387] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0080.387] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0080.387] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0080.387] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0080.387] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0080.387] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0080.387] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0080.387] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0080.388] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0080.388] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0080.388] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0080.388] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0080.388] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0080.388] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0080.388] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0080.388] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0080.389] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0080.389] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0080.389] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0080.389] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0080.389] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0080.389] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0080.389] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0080.390] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0080.390] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0080.390] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0080.390] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0080.390] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0080.390] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0080.390] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0080.393] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0080.393] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0080.393] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0080.393] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0080.393] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0080.394] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0080.394] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0080.394] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0080.394] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0080.394] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0080.394] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0080.394] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0080.394] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0080.395] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0080.395] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0080.395] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0080.395] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0080.395] FindClose (in: hFindFile=0x5d7d30 | out: hFindFile=0x5d7d30) returned 1 [0080.396] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0080.396] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0080.396] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0080.396] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default", lpFilePart=0x0) returned 0x43 [0080.396] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\", lpFilePart=0x0) returned 0x44 [0080.396] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7370 [0080.397] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0080.397] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0080.397] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0080.398] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0080.398] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0080.398] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0080.398] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0080.398] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0080.398] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0080.398] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0080.398] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0080.399] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0080.399] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0080.399] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0080.399] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0080.399] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0080.399] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0080.399] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0080.399] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0080.400] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0080.400] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0080.400] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0080.400] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0080.400] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0080.400] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0080.400] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0080.400] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0080.401] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0080.401] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0080.401] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0080.401] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0080.401] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0080.401] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0080.401] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0080.402] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0080.402] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0080.402] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0080.402] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0080.402] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0080.402] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0080.402] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0080.402] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0080.402] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0080.402] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0080.403] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0080.403] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0080.403] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0080.403] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0080.403] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0080.403] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0080.403] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0080.404] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0080.404] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0080.404] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies", lpFilePart=0x0) returned 0x4b [0080.404] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0080.404] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cookies"), fInfoLevelId=0x0, lpFileInformation=0x22192b0 | out: lpFileInformation=0x22192b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x728aca3f, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x728aca3f, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7d374137, ftLastWriteTime.dwHighDateTime=0x1d2d59f, nFileSizeHigh=0x0, nFileSizeLow=0x3400)) returned 1 [0080.408] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0080.408] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies", lpFilePart=0x0) returned 0x4b [0080.408] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0080.408] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cookies"), fInfoLevelId=0x0, lpFileInformation=0x22193f0 | out: lpFileInformation=0x22193f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x728aca3f, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x728aca3f, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7d374137, ftLastWriteTime.dwHighDateTime=0x1d2d59f, nFileSizeHigh=0x0, nFileSizeLow=0x3400)) returned 1 [0080.408] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0080.408] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies", lpFilePart=0x0) returned 0x4b [0080.408] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0080.408] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cookies"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0080.409] GetFileType (hFile=0x444) returned 0x1 [0080.409] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0080.409] GetFileType (hFile=0x444) returned 0x1 [0080.409] ReadFile (in: hFile=0x444, lpBuffer=0x221b7a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x221b7a0*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0080.423] CloseHandle (hObject=0x444) returned 1 [0080.423] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies", lpFilePart=0x0) returned 0x4b [0080.423] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0080.423] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cookies"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0080.423] GetFileType (hFile=0x444) returned 0x1 [0080.423] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0080.423] GetFileType (hFile=0x444) returned 0x1 [0080.423] WriteFile (in: hFile=0x444, lpBuffer=0x2219510*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x2219510*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0080.423] CloseHandle (hObject=0x444) returned 1 [0080.424] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies", lpFilePart=0x0) returned 0x4b [0080.424] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies.xuy", lpFilePart=0x0) returned 0x4f [0080.424] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0080.424] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cookies"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x728aca3f, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x728aca3f, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1bc95639, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x3400)) returned 1 [0080.424] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0080.424] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cookies"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cookies.xuy")) returned 1 [0080.425] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies-journal", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies-journal", lpFilePart=0x0) returned 0x53 [0080.425] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0080.425] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies-journal" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cookies-journal"), fInfoLevelId=0x0, lpFileInformation=0x2297b20 | out: lpFileInformation=0x2297b20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x728af09a, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x728af09a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7d3c05cd, ftLastWriteTime.dwHighDateTime=0x1d2d59f, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0080.425] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0080.425] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies-journal", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies-journal", lpFilePart=0x0) returned 0x53 [0080.425] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0080.425] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies-journal" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cookies-journal"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0080.425] GetFileType (hFile=0x444) returned 0x1 [0080.425] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0080.425] GetFileType (hFile=0x444) returned 0x1 [0080.425] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x0 [0080.425] CloseHandle (hObject=0x444) returned 1 [0080.435] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies-journal", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies-journal", lpFilePart=0x0) returned 0x53 [0080.435] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0080.435] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies-journal" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cookies-journal"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0080.437] GetFileType (hFile=0x444) returned 0x1 [0080.437] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0080.437] GetFileType (hFile=0x444) returned 0x1 [0080.437] WriteFile (in: hFile=0x444, lpBuffer=0x230def8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x230def8*, lpNumberOfBytesWritten=0x3be5b8*=0x10, lpOverlapped=0x0) returned 1 [0080.438] CloseHandle (hObject=0x444) returned 1 [0080.438] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies-journal", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies-journal", lpFilePart=0x0) returned 0x53 [0080.438] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies-journal.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies-journal.xuy", lpFilePart=0x0) returned 0x57 [0080.438] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0080.438] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies-journal" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cookies-journal"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x728af09a, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x728af09a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1bcbb7b0, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0080.438] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0080.438] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies-journal" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cookies-journal"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies-journal.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cookies-journal.xuy")) returned 1 [0080.439] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Session", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Session", lpFilePart=0x0) returned 0x53 [0080.439] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0080.439] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Session" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\current session"), fInfoLevelId=0x0, lpFileInformation=0x230f180 | out: lpFileInformation=0x230f180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x727f57a1, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x763f61d1, ftLastAccessTime.dwHighDateTime=0x1d2d59f, ftLastWriteTime.dwLowDateTime=0x7d1d076f, ftLastWriteTime.dwHighDateTime=0x1d2d59f, nFileSizeHigh=0x0, nFileSizeLow=0x3892)) returned 1 [0080.441] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0080.441] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Session", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Session", lpFilePart=0x0) returned 0x53 [0080.441] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0080.441] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Session" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\current session"), fInfoLevelId=0x0, lpFileInformation=0x230f2e0 | out: lpFileInformation=0x230f2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x727f57a1, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x763f61d1, ftLastAccessTime.dwHighDateTime=0x1d2d59f, ftLastWriteTime.dwLowDateTime=0x7d1d076f, ftLastWriteTime.dwHighDateTime=0x1d2d59f, nFileSizeHigh=0x0, nFileSizeLow=0x3892)) returned 1 [0080.442] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0080.442] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Session", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Session", lpFilePart=0x0) returned 0x53 [0080.442] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0080.442] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Session" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\current session"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0080.442] GetFileType (hFile=0x444) returned 0x1 [0080.442] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0080.442] GetFileType (hFile=0x444) returned 0x1 [0080.442] ReadFile (in: hFile=0x444, lpBuffer=0x23116d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x23116d0*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0080.588] CloseHandle (hObject=0x444) returned 1 [0080.588] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Session", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Session", lpFilePart=0x0) returned 0x53 [0080.588] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0080.588] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Session" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\current session"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0080.590] GetFileType (hFile=0x444) returned 0x1 [0080.590] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0080.590] GetFileType (hFile=0x444) returned 0x1 [0080.590] WriteFile (in: hFile=0x444, lpBuffer=0x2161558*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x2161558*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0080.590] CloseHandle (hObject=0x444) returned 1 [0080.591] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Session", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Session", lpFilePart=0x0) returned 0x53 [0080.591] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Session.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Session.xuy", lpFilePart=0x0) returned 0x57 [0080.591] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0080.591] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Session" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\current session"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x727f57a1, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x763f61d1, ftLastAccessTime.dwHighDateTime=0x1d2d59f, ftLastWriteTime.dwLowDateTime=0x1be12d72, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x3892)) returned 1 [0080.591] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0080.591] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Session" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\current session"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Session.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\current session.xuy")) returned 1 [0080.592] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Tabs", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Tabs", lpFilePart=0x0) returned 0x50 [0080.592] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0080.592] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Tabs" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\current tabs"), fInfoLevelId=0x0, lpFileInformation=0x2193118 | out: lpFileInformation=0x2193118*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e321e2f, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7688ee7e, ftLastAccessTime.dwHighDateTime=0x1d2d59f, ftLastWriteTime.dwLowDateTime=0x7d2690b2, ftLastWriteTime.dwHighDateTime=0x1d2d59f, nFileSizeHigh=0x0, nFileSizeLow=0x3101)) returned 1 [0080.595] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0080.595] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Tabs", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Tabs", lpFilePart=0x0) returned 0x50 [0080.595] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0080.595] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Tabs" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\current tabs"), fInfoLevelId=0x0, lpFileInformation=0x2193278 | out: lpFileInformation=0x2193278*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e321e2f, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7688ee7e, ftLastAccessTime.dwHighDateTime=0x1d2d59f, ftLastWriteTime.dwLowDateTime=0x7d2690b2, ftLastWriteTime.dwHighDateTime=0x1d2d59f, nFileSizeHigh=0x0, nFileSizeLow=0x3101)) returned 1 [0080.595] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0080.595] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Tabs", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Tabs", lpFilePart=0x0) returned 0x50 [0080.595] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0080.595] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Tabs" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\current tabs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0080.596] GetFileType (hFile=0x444) returned 0x1 [0080.596] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0080.596] GetFileType (hFile=0x444) returned 0x1 [0080.596] ReadFile (in: hFile=0x444, lpBuffer=0x2195668, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x2195668*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0080.670] CloseHandle (hObject=0x444) returned 1 [0080.743] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Tabs", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Tabs", lpFilePart=0x0) returned 0x50 [0080.743] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0080.743] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Tabs" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\current tabs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0080.743] GetFileType (hFile=0x444) returned 0x1 [0080.743] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0080.743] GetFileType (hFile=0x444) returned 0x1 [0080.743] WriteFile (in: hFile=0x444, lpBuffer=0x21933b8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x21933b8*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0080.743] CloseHandle (hObject=0x444) returned 1 [0080.744] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Tabs", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Tabs", lpFilePart=0x0) returned 0x50 [0080.744] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Tabs.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Tabs.xuy", lpFilePart=0x0) returned 0x54 [0080.744] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0080.744] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Tabs" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\current tabs"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e321e2f, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7688ee7e, ftLastAccessTime.dwHighDateTime=0x1d2d59f, ftLastWriteTime.dwLowDateTime=0x1bf90364, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x3101)) returned 1 [0080.744] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0080.744] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Tabs" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\current tabs"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Tabs.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\current tabs.xuy")) returned 1 [0080.745] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons", lpFilePart=0x0) returned 0x4c [0080.745] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0080.745] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\favicons"), fInfoLevelId=0x0, lpFileInformation=0x2211a38 | out: lpFileInformation=0x2211a38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x716f3653, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x716f3653, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7c0c79c0, ftLastWriteTime.dwHighDateTime=0x1d2d59f, nFileSizeHigh=0x0, nFileSizeLow=0x7000)) returned 1 [0080.746] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0080.746] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons", lpFilePart=0x0) returned 0x4c [0080.746] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0080.746] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\favicons"), fInfoLevelId=0x0, lpFileInformation=0x2211b88 | out: lpFileInformation=0x2211b88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x716f3653, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x716f3653, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7c0c79c0, ftLastWriteTime.dwHighDateTime=0x1d2d59f, nFileSizeHigh=0x0, nFileSizeLow=0x7000)) returned 1 [0080.746] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0080.746] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons", lpFilePart=0x0) returned 0x4c [0080.746] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0080.746] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\favicons"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0080.747] GetFileType (hFile=0x444) returned 0x1 [0080.747] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0080.747] GetFileType (hFile=0x444) returned 0x1 [0080.747] ReadFile (in: hFile=0x444, lpBuffer=0x2213f58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x2213f58*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0080.829] CloseHandle (hObject=0x444) returned 1 [0080.829] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons", lpFilePart=0x0) returned 0x4c [0080.829] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0080.829] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\favicons"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0080.829] GetFileType (hFile=0x444) returned 0x1 [0080.829] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0080.829] GetFileType (hFile=0x444) returned 0x1 [0080.829] WriteFile (in: hFile=0x444, lpBuffer=0x2211cb8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x2211cb8*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0080.830] CloseHandle (hObject=0x444) returned 1 [0080.830] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons", lpFilePart=0x0) returned 0x4c [0080.830] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons.xuy", lpFilePart=0x0) returned 0x50 [0080.830] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0080.830] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\favicons"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x716f3653, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x716f3653, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1c075285, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x7000)) returned 1 [0080.830] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0080.830] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\favicons"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\favicons.xuy")) returned 1 [0080.831] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons-journal", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons-journal", lpFilePart=0x0) returned 0x54 [0080.831] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0080.831] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons-journal" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\favicons-journal"), fInfoLevelId=0x0, lpFileInformation=0x2290300 | out: lpFileInformation=0x2290300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x716f3653, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x716f3653, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7c113e96, ftLastWriteTime.dwHighDateTime=0x1d2d59f, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0080.832] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0080.832] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons-journal", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons-journal", lpFilePart=0x0) returned 0x54 [0080.832] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0080.832] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons-journal" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\favicons-journal"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0080.832] GetFileType (hFile=0x444) returned 0x1 [0080.832] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0080.832] GetFileType (hFile=0x444) returned 0x1 [0080.832] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x0 [0080.832] CloseHandle (hObject=0x444) returned 1 [0080.844] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons-journal", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons-journal", lpFilePart=0x0) returned 0x54 [0080.844] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0080.844] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons-journal" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\favicons-journal"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0080.845] GetFileType (hFile=0x444) returned 0x1 [0080.845] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0080.845] GetFileType (hFile=0x444) returned 0x1 [0080.845] WriteFile (in: hFile=0x444, lpBuffer=0x2306708*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x2306708*, lpNumberOfBytesWritten=0x3be5b8*=0x10, lpOverlapped=0x0) returned 1 [0080.846] CloseHandle (hObject=0x444) returned 1 [0080.846] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons-journal", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons-journal", lpFilePart=0x0) returned 0x54 [0080.846] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons-journal.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons-journal.xuy", lpFilePart=0x0) returned 0x58 [0080.846] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0080.846] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons-journal" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\favicons-journal"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x716f3653, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x716f3653, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1c09b48b, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0080.846] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0080.846] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons-journal" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\favicons-journal"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons-journal.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\favicons-journal.xuy")) returned 1 [0080.847] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Google Profile.ico", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Google Profile.ico", lpFilePart=0x0) returned 0x56 [0080.847] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0080.847] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Google Profile.ico" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\google profile.ico"), fInfoLevelId=0x0, lpFileInformation=0x23079d0 | out: lpFileInformation=0x23079d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x717198be, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x717198be, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7173fb23, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x2b2e9)) returned 1 [0080.848] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0080.848] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Google Profile.ico", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Google Profile.ico", lpFilePart=0x0) returned 0x56 [0080.848] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0080.848] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Google Profile.ico" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\google profile.ico"), fInfoLevelId=0x0, lpFileInformation=0x2307b40 | out: lpFileInformation=0x2307b40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x717198be, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x717198be, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7173fb23, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x2b2e9)) returned 1 [0080.848] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0080.848] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Google Profile.ico", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Google Profile.ico", lpFilePart=0x0) returned 0x56 [0080.848] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0080.848] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Google Profile.ico" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\google profile.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0080.848] GetFileType (hFile=0x444) returned 0x1 [0080.848] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0080.849] GetFileType (hFile=0x444) returned 0x1 [0080.849] ReadFile (in: hFile=0x444, lpBuffer=0x2309f50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x2309f50*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0080.950] CloseHandle (hObject=0x444) returned 1 [0080.951] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Google Profile.ico", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Google Profile.ico", lpFilePart=0x0) returned 0x56 [0080.951] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0080.951] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Google Profile.ico" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\google profile.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0080.951] GetFileType (hFile=0x444) returned 0x1 [0080.951] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0080.951] GetFileType (hFile=0x444) returned 0x1 [0080.954] WriteFile (in: hFile=0x444, lpBuffer=0x2161558*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x2161558*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0080.954] CloseHandle (hObject=0x444) returned 1 [0080.954] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Google Profile.ico", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Google Profile.ico", lpFilePart=0x0) returned 0x56 [0080.954] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Google Profile.ico.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Google Profile.ico.xuy", lpFilePart=0x0) returned 0x5a [0080.954] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0080.955] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Google Profile.ico" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\google profile.ico"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x717198be, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x717198be, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1c1a659f, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2b2e9)) returned 1 [0080.955] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0080.955] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Google Profile.ico" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\google profile.ico"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Google Profile.ico.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\google profile.ico.xuy")) returned 1 [0080.956] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History", lpFilePart=0x0) returned 0x4b [0080.956] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0080.956] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\history"), fInfoLevelId=0x0, lpFileInformation=0x2186348 | out: lpFileInformation=0x2186348*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x713d24f3, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x713d24f3, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x9454ce59, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x19000)) returned 1 [0080.957] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0080.957] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History", lpFilePart=0x0) returned 0x4b [0080.957] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0080.957] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\history"), fInfoLevelId=0x0, lpFileInformation=0x2186488 | out: lpFileInformation=0x2186488*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x713d24f3, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x713d24f3, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x9454ce59, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x19000)) returned 1 [0080.957] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0080.957] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History", lpFilePart=0x0) returned 0x4b [0080.957] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0080.957] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\history"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0080.958] GetFileType (hFile=0x444) returned 0x1 [0080.958] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0080.958] GetFileType (hFile=0x444) returned 0x1 [0080.958] ReadFile (in: hFile=0x444, lpBuffer=0x2188838, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x2188838*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0080.997] CloseHandle (hObject=0x444) returned 1 [0081.001] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History", lpFilePart=0x0) returned 0x4b [0081.001] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0081.002] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\history"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0081.002] GetFileType (hFile=0x444) returned 0x1 [0081.002] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0081.002] GetFileType (hFile=0x444) returned 0x1 [0081.002] WriteFile (in: hFile=0x444, lpBuffer=0x21865a8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x21865a8*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0081.002] CloseHandle (hObject=0x444) returned 1 [0081.002] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History", lpFilePart=0x0) returned 0x4b [0081.002] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History.xuy", lpFilePart=0x0) returned 0x4f [0081.002] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0081.003] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\history"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x713d24f3, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x713d24f3, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1c218bb7, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x19000)) returned 1 [0081.003] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0081.003] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\history"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\history.xuy")) returned 1 [0081.003] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History Provider Cache", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History Provider Cache", lpFilePart=0x0) returned 0x5a [0081.003] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0081.003] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History Provider Cache" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\history provider cache"), fInfoLevelId=0x0, lpFileInformation=0x2204bb8 | out: lpFileInformation=0x2204bb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ab0663f, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb65a824a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7d1d076f, ftLastWriteTime.dwHighDateTime=0x1d2d59f, nFileSizeHigh=0x0, nFileSizeLow=0x584)) returned 1 [0081.004] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0081.004] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History Provider Cache", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History Provider Cache", lpFilePart=0x0) returned 0x5a [0081.004] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0081.004] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History Provider Cache" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\history provider cache"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0081.004] GetFileType (hFile=0x444) returned 0x1 [0081.004] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0081.004] GetFileType (hFile=0x444) returned 0x1 [0081.005] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x584 [0081.005] ReadFile (in: hFile=0x444, lpBuffer=0x2205458, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x2205458*, lpNumberOfBytesRead=0x3be6a8*=0x584, lpOverlapped=0x0) returned 1 [0081.006] CloseHandle (hObject=0x444) returned 1 [0081.016] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History Provider Cache", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History Provider Cache", lpFilePart=0x0) returned 0x5a [0081.016] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0081.017] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History Provider Cache" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\history provider cache"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0081.018] GetFileType (hFile=0x444) returned 0x1 [0081.018] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0081.018] GetFileType (hFile=0x444) returned 0x1 [0081.018] WriteFile (in: hFile=0x444, lpBuffer=0x227e040*, nNumberOfBytesToWrite=0x590, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x227e040*, lpNumberOfBytesWritten=0x3be5b8*=0x590, lpOverlapped=0x0) returned 1 [0081.019] CloseHandle (hObject=0x444) returned 1 [0081.022] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History Provider Cache", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History Provider Cache", lpFilePart=0x0) returned 0x5a [0081.022] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History Provider Cache.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History Provider Cache.xuy", lpFilePart=0x0) returned 0x5e [0081.022] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0081.022] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History Provider Cache" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\history provider cache"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ab0663f, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb65a824a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1c23f05d, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x590)) returned 1 [0081.022] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0081.022] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History Provider Cache" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\history provider cache"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History Provider Cache.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\history provider cache.xuy")) returned 1 [0081.023] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History-journal", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History-journal", lpFilePart=0x0) returned 0x53 [0081.023] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0081.023] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History-journal" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\history-journal"), fInfoLevelId=0x0, lpFileInformation=0x227f2f8 | out: lpFileInformation=0x227f2f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x713d24f3, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x713d24f3, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x95c31fae, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x2210)) returned 1 [0081.023] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0081.023] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History-journal", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History-journal", lpFilePart=0x0) returned 0x53 [0081.023] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0081.023] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History-journal" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\history-journal"), fInfoLevelId=0x0, lpFileInformation=0x227f458 | out: lpFileInformation=0x227f458*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x713d24f3, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x713d24f3, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x95c31fae, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x2210)) returned 1 [0081.023] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0081.023] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History-journal", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History-journal", lpFilePart=0x0) returned 0x53 [0081.023] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0081.023] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History-journal" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\history-journal"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0081.024] GetFileType (hFile=0x444) returned 0x1 [0081.024] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0081.024] GetFileType (hFile=0x444) returned 0x1 [0081.024] ReadFile (in: hFile=0x444, lpBuffer=0x2281848, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x2281848*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0081.052] CloseHandle (hObject=0x444) returned 1 [0081.052] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History-journal", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History-journal", lpFilePart=0x0) returned 0x53 [0081.052] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0081.052] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History-journal" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\history-journal"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0081.052] GetFileType (hFile=0x444) returned 0x1 [0081.052] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0081.052] GetFileType (hFile=0x444) returned 0x1 [0081.052] WriteFile (in: hFile=0x444, lpBuffer=0x227f598*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x227f598*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0081.052] CloseHandle (hObject=0x444) returned 1 [0081.052] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History-journal", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History-journal", lpFilePart=0x0) returned 0x53 [0081.052] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History-journal.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History-journal.xuy", lpFilePart=0x0) returned 0x57 [0081.053] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0081.053] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History-journal" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\history-journal"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x713d24f3, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x713d24f3, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1c28b3c6, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2210)) returned 1 [0081.053] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0081.053] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History-journal" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\history-journal"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History-journal.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\history-journal.xuy")) returned 1 [0081.053] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Last Session", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Last Session", lpFilePart=0x0) returned 0x50 [0081.053] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0081.054] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Last Session" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\last session"), fInfoLevelId=0x0, lpFileInformation=0x22fdc18 | out: lpFileInformation=0x22fdc18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x727f57a1, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xc02a2c3e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0xc02a7a63, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xd1)) returned 1 [0081.055] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0081.055] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Last Session", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Last Session", lpFilePart=0x0) returned 0x50 [0081.055] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0081.055] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Last Session" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\last session"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0081.055] GetFileType (hFile=0x444) returned 0x1 [0081.055] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0081.055] GetFileType (hFile=0x444) returned 0x1 [0081.055] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0xd1 [0081.055] ReadFile (in: hFile=0x444, lpBuffer=0x22fdfc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x22fdfc8*, lpNumberOfBytesRead=0x3be6a8*=0xd1, lpOverlapped=0x0) returned 1 [0081.056] CloseHandle (hObject=0x444) returned 1 [0081.100] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Last Session", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Last Session", lpFilePart=0x0) returned 0x50 [0081.100] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0081.100] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Last Session" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\last session"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0081.101] GetFileType (hFile=0x444) returned 0x1 [0081.101] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0081.101] GetFileType (hFile=0x444) returned 0x1 [0081.101] WriteFile (in: hFile=0x444, lpBuffer=0x2172198*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x2172198*, lpNumberOfBytesWritten=0x3be5b8*=0xe0, lpOverlapped=0x0) returned 1 [0081.102] CloseHandle (hObject=0x444) returned 1 [0081.102] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Last Session", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Last Session", lpFilePart=0x0) returned 0x50 [0081.102] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Last Session.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Last Session.xuy", lpFilePart=0x0) returned 0x54 [0081.102] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0081.102] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Last Session" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\last session"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x727f57a1, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xc02a2c3e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1c2fdaa9, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1 [0081.103] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0081.103] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Last Session" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\last session"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Last Session.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\last session.xuy")) returned 1 [0081.103] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Last Tabs", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Last Tabs", lpFilePart=0x0) returned 0x4d [0081.103] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0081.103] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Last Tabs" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\last tabs"), fInfoLevelId=0x0, lpFileInformation=0x2173420 | out: lpFileInformation=0x2173420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e321e2f, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb8c167ef, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0xba05a86c, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x8)) returned 1 [0081.106] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0081.106] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Last Tabs", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Last Tabs", lpFilePart=0x0) returned 0x4d [0081.106] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0081.107] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Last Tabs" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\last tabs"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0081.107] GetFileType (hFile=0x444) returned 0x1 [0081.107] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0081.107] GetFileType (hFile=0x444) returned 0x1 [0081.107] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x8 [0081.107] ReadFile (in: hFile=0x444, lpBuffer=0x21736e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x21736e0*, lpNumberOfBytesRead=0x3be6a8*=0x8, lpOverlapped=0x0) returned 1 [0081.108] CloseHandle (hObject=0x444) returned 1 [0081.119] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Last Tabs", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Last Tabs", lpFilePart=0x0) returned 0x4d [0081.119] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0081.119] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Last Tabs" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\last tabs"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0081.120] GetFileType (hFile=0x444) returned 0x1 [0081.120] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0081.120] GetFileType (hFile=0x444) returned 0x1 [0081.120] WriteFile (in: hFile=0x444, lpBuffer=0x21ea7e0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x21ea7e0*, lpNumberOfBytesWritten=0x3be5b8*=0x10, lpOverlapped=0x0) returned 1 [0081.121] CloseHandle (hObject=0x444) returned 1 [0081.121] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Last Tabs", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Last Tabs", lpFilePart=0x0) returned 0x4d [0081.121] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Last Tabs.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Last Tabs.xuy", lpFilePart=0x0) returned 0x51 [0081.121] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0081.121] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Last Tabs" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\last tabs"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e321e2f, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb8c167ef, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1c323c79, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0081.121] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0081.121] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Last Tabs" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\last tabs"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Last Tabs.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\last tabs.xuy")) returned 1 [0081.122] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data", lpFilePart=0x0) returned 0x4e [0081.123] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0081.123] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\login data"), fInfoLevelId=0x0, lpFileInformation=0x21eba50 | out: lpFileInformation=0x21eba50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x712ed6d5, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x712ed6d5, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x74e0d415, ftLastWriteTime.dwHighDateTime=0x1d2d59f, nFileSizeHigh=0x0, nFileSizeLow=0x4800)) returned 1 [0081.123] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0081.123] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data", lpFilePart=0x0) returned 0x4e [0081.123] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0081.123] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\login data"), fInfoLevelId=0x0, lpFileInformation=0x21ebba0 | out: lpFileInformation=0x21ebba0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x712ed6d5, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x712ed6d5, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x74e0d415, ftLastWriteTime.dwHighDateTime=0x1d2d59f, nFileSizeHigh=0x0, nFileSizeLow=0x4800)) returned 1 [0081.123] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0081.124] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data", lpFilePart=0x0) returned 0x4e [0081.124] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0081.124] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\login data"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0081.124] GetFileType (hFile=0x444) returned 0x1 [0081.124] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0081.124] GetFileType (hFile=0x444) returned 0x1 [0081.124] ReadFile (in: hFile=0x444, lpBuffer=0x21edf70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x21edf70*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0081.156] CloseHandle (hObject=0x444) returned 1 [0081.156] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data", lpFilePart=0x0) returned 0x4e [0081.156] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0081.156] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\login data"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0081.156] GetFileType (hFile=0x444) returned 0x1 [0081.156] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0081.156] GetFileType (hFile=0x444) returned 0x1 [0081.156] WriteFile (in: hFile=0x444, lpBuffer=0x21ebcd0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x21ebcd0*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0081.157] CloseHandle (hObject=0x444) returned 1 [0081.157] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data", lpFilePart=0x0) returned 0x4e [0081.157] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data.xuy", lpFilePart=0x0) returned 0x52 [0081.157] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0081.157] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\login data"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x712ed6d5, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x712ed6d5, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1c3967aa, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x4800)) returned 1 [0081.157] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0081.157] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\login data"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\login data.xuy")) returned 1 [0081.158] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data-journal", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data-journal", lpFilePart=0x0) returned 0x56 [0081.158] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0081.158] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data-journal" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\login data-journal"), fInfoLevelId=0x0, lpFileInformation=0x226a318 | out: lpFileInformation=0x226a318*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x712ed6d5, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x712ed6d5, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x74e598ca, ftLastWriteTime.dwHighDateTime=0x1d2d59f, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0081.158] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0081.158] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data-journal", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data-journal", lpFilePart=0x0) returned 0x56 [0081.158] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0081.158] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data-journal" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\login data-journal"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0081.158] GetFileType (hFile=0x444) returned 0x1 [0081.158] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0081.158] GetFileType (hFile=0x444) returned 0x1 [0081.158] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x0 [0081.158] CloseHandle (hObject=0x444) returned 1 [0081.168] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data-journal", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data-journal", lpFilePart=0x0) returned 0x56 [0081.169] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0081.169] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data-journal" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\login data-journal"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0081.169] GetFileType (hFile=0x444) returned 0x1 [0081.169] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0081.169] GetFileType (hFile=0x444) returned 0x1 [0081.169] WriteFile (in: hFile=0x444, lpBuffer=0x22e0720*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x22e0720*, lpNumberOfBytesWritten=0x3be5b8*=0x10, lpOverlapped=0x0) returned 1 [0081.170] CloseHandle (hObject=0x444) returned 1 [0081.171] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data-journal", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data-journal", lpFilePart=0x0) returned 0x56 [0081.171] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data-journal.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data-journal.xuy", lpFilePart=0x0) returned 0x5a [0081.171] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0081.171] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data-journal" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\login data-journal"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x712ed6d5, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x712ed6d5, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1c3bc5d8, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0081.171] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0081.171] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data-journal" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\login data-journal"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data-journal.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\login data-journal.xuy")) returned 1 [0081.172] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor", lpFilePart=0x0) returned 0x5c [0081.172] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0081.172] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\network action predictor"), fInfoLevelId=0x0, lpFileInformation=0x22e19c0 | out: lpFileInformation=0x22e19c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x718e34f1, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x718e34f1, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0xb6e11f66, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x6000)) returned 1 [0081.173] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0081.173] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor", lpFilePart=0x0) returned 0x5c [0081.173] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0081.173] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\network action predictor"), fInfoLevelId=0x0, lpFileInformation=0x22e1b50 | out: lpFileInformation=0x22e1b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x718e34f1, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x718e34f1, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0xb6e11f66, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x6000)) returned 1 [0081.173] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0081.173] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor", lpFilePart=0x0) returned 0x5c [0081.173] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0081.173] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\network action predictor"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0081.174] GetFileType (hFile=0x444) returned 0x1 [0081.174] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0081.174] GetFileType (hFile=0x444) returned 0x1 [0081.174] ReadFile (in: hFile=0x444, lpBuffer=0x22e3fa0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x22e3fa0*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0081.237] CloseHandle (hObject=0x444) returned 1 [0081.238] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor", lpFilePart=0x0) returned 0x5c [0081.238] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0081.238] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\network action predictor"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0081.238] GetFileType (hFile=0x444) returned 0x1 [0081.238] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0081.238] GetFileType (hFile=0x444) returned 0x1 [0081.238] WriteFile (in: hFile=0x444, lpBuffer=0x22e1cc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x22e1cc0*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0081.238] CloseHandle (hObject=0x444) returned 1 [0081.239] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor", lpFilePart=0x0) returned 0x5c [0081.239] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor.xuy", lpFilePart=0x0) returned 0x60 [0081.239] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0081.239] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\network action predictor"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x718e34f1, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x718e34f1, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1c455032, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x6000)) returned 1 [0081.239] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0081.239] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\network action predictor"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\network action predictor.xuy")) returned 1 [0081.240] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor-journal", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor-journal", lpFilePart=0x0) returned 0x64 [0081.240] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0081.240] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor-journal" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\network action predictor-journal"), fInfoLevelId=0x0, lpFileInformation=0x23603e8 | out: lpFileInformation=0x23603e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x718e34f1, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x718e34f1, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0xb6e34138, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0081.240] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0081.240] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor-journal", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor-journal", lpFilePart=0x0) returned 0x64 [0081.240] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0081.240] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor-journal" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\network action predictor-journal"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0081.240] GetFileType (hFile=0x444) returned 0x1 [0081.240] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0081.240] GetFileType (hFile=0x444) returned 0x1 [0081.240] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x0 [0081.240] CloseHandle (hObject=0x444) returned 1 [0081.284] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor-journal", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor-journal", lpFilePart=0x0) returned 0x64 [0081.284] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0081.284] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor-journal" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\network action predictor-journal"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0081.285] GetFileType (hFile=0x444) returned 0x1 [0081.285] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0081.285] GetFileType (hFile=0x444) returned 0x1 [0081.285] WriteFile (in: hFile=0x444, lpBuffer=0x21d67e0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x21d67e0*, lpNumberOfBytesWritten=0x3be5b8*=0x10, lpOverlapped=0x0) returned 1 [0081.286] CloseHandle (hObject=0x444) returned 1 [0081.286] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor-journal", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor-journal", lpFilePart=0x0) returned 0x64 [0081.286] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor-journal.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor-journal.xuy", lpFilePart=0x0) returned 0x68 [0081.286] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0081.286] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor-journal" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\network action predictor-journal"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x718e34f1, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x718e34f1, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1c4c77b9, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0081.287] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0081.287] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor-journal" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\network action predictor-journal"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor-journal.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\network action predictor-journal.xuy")) returned 1 [0081.287] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Persistent State", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Persistent State", lpFilePart=0x0) returned 0x5c [0081.288] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0081.288] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Persistent State" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\network persistent state"), fInfoLevelId=0x0, lpFileInformation=0x21d7ae0 | out: lpFileInformation=0x21d7ae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77381881, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7ac2154a, ftLastAccessTime.dwHighDateTime=0x1d2d59f, ftLastWriteTime.dwLowDateTime=0x7ac2154a, ftLastWriteTime.dwHighDateTime=0x1d2d59f, nFileSizeHigh=0x0, nFileSizeLow=0x28)) returned 1 [0081.288] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0081.288] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Persistent State", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Persistent State", lpFilePart=0x0) returned 0x5c [0081.288] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0081.288] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Persistent State" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\network persistent state"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0081.288] GetFileType (hFile=0x444) returned 0x1 [0081.288] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0081.288] GetFileType (hFile=0x444) returned 0x1 [0081.288] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x28 [0081.288] ReadFile (in: hFile=0x444, lpBuffer=0x21d7e40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x21d7e40*, lpNumberOfBytesRead=0x3be6a8*=0x28, lpOverlapped=0x0) returned 1 [0081.289] CloseHandle (hObject=0x444) returned 1 [0081.300] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Persistent State", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Persistent State", lpFilePart=0x0) returned 0x5c [0081.300] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0081.300] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Persistent State" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\network persistent state"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0081.302] GetFileType (hFile=0x444) returned 0x1 [0081.302] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0081.302] GetFileType (hFile=0x444) returned 0x1 [0081.302] WriteFile (in: hFile=0x444, lpBuffer=0x224efd8*, nNumberOfBytesToWrite=0x30, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x224efd8*, lpNumberOfBytesWritten=0x3be5b8*=0x30, lpOverlapped=0x0) returned 1 [0081.303] CloseHandle (hObject=0x444) returned 1 [0081.303] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Persistent State", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Persistent State", lpFilePart=0x0) returned 0x5c [0081.303] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Persistent State.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Persistent State.xuy", lpFilePart=0x0) returned 0x60 [0081.303] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0081.303] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Persistent State" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\network persistent state"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77381881, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7ac2154a, ftLastAccessTime.dwHighDateTime=0x1d2d59f, ftLastWriteTime.dwLowDateTime=0x1c4ed9f4, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x30)) returned 1 [0081.303] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0081.303] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Persistent State" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\network persistent state"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Persistent State.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\network persistent state.xuy")) returned 1 [0081.304] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs", lpFilePart=0x0) returned 0x56 [0081.304] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0081.304] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\origin bound certs"), fInfoLevelId=0x0, lpFileInformation=0x22502a8 | out: lpFileInformation=0x22502a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7209626a, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7209626a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x9aff13d6, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0081.305] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0081.305] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs", lpFilePart=0x0) returned 0x56 [0081.305] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0081.305] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\origin bound certs"), fInfoLevelId=0x0, lpFileInformation=0x2250418 | out: lpFileInformation=0x2250418*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7209626a, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7209626a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x9aff13d6, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0081.305] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0081.305] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs", lpFilePart=0x0) returned 0x56 [0081.305] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0081.305] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\origin bound certs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0081.306] GetFileType (hFile=0x444) returned 0x1 [0081.306] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0081.306] GetFileType (hFile=0x444) returned 0x1 [0081.306] ReadFile (in: hFile=0x444, lpBuffer=0x2252828, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x2252828*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0081.330] CloseHandle (hObject=0x444) returned 1 [0081.333] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs", lpFilePart=0x0) returned 0x56 [0081.333] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0081.334] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\origin bound certs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0081.334] GetFileType (hFile=0x444) returned 0x1 [0081.334] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0081.334] GetFileType (hFile=0x444) returned 0x1 [0081.334] WriteFile (in: hFile=0x444, lpBuffer=0x2250568*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x2250568*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0081.334] CloseHandle (hObject=0x444) returned 1 [0081.334] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs", lpFilePart=0x0) returned 0x56 [0081.334] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs.xuy", lpFilePart=0x0) returned 0x5a [0081.334] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0081.334] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\origin bound certs"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7209626a, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7209626a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1c53a37b, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0081.335] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0081.335] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\origin bound certs"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\origin bound certs.xuy")) returned 1 [0081.335] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs-journal", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs-journal", lpFilePart=0x0) returned 0x5e [0081.335] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0081.335] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs-journal" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\origin bound certs-journal"), fInfoLevelId=0x0, lpFileInformation=0x22cec20 | out: lpFileInformation=0x22cec20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72098983, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x72098983, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x9b03d8a5, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0081.336] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0081.336] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs-journal", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs-journal", lpFilePart=0x0) returned 0x5e [0081.336] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0081.336] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs-journal" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\origin bound certs-journal"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0081.336] GetFileType (hFile=0x444) returned 0x1 [0081.336] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0081.336] GetFileType (hFile=0x444) returned 0x1 [0081.336] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x0 [0081.336] CloseHandle (hObject=0x444) returned 1 [0081.347] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs-journal", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs-journal", lpFilePart=0x0) returned 0x5e [0081.347] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0081.347] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs-journal" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\origin bound certs-journal"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0081.348] GetFileType (hFile=0x444) returned 0x1 [0081.348] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0081.348] GetFileType (hFile=0x444) returned 0x1 [0081.348] WriteFile (in: hFile=0x444, lpBuffer=0x2345088*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x2345088*, lpNumberOfBytesWritten=0x3be5b8*=0x10, lpOverlapped=0x0) returned 1 [0081.348] CloseHandle (hObject=0x444) returned 1 [0081.349] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs-journal", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs-journal", lpFilePart=0x0) returned 0x5e [0081.349] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs-journal.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs-journal.xuy", lpFilePart=0x0) returned 0x62 [0081.349] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0081.349] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs-journal" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\origin bound certs-journal"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72098983, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x72098983, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1c55ffbc, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0081.349] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0081.349] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs-journal" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\origin bound certs-journal"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs-journal.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\origin bound certs-journal.xuy")) returned 1 [0081.350] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Preferences", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Preferences", lpFilePart=0x0) returned 0x4f [0081.350] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0081.350] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Preferences" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\preferences"), fInfoLevelId=0x0, lpFileInformation=0x2346358 | out: lpFileInformation=0x2346358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70f33bfa, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7d21cc1a, ftLastAccessTime.dwHighDateTime=0x1d2d59f, ftLastWriteTime.dwLowDateTime=0x7d2690b2, ftLastWriteTime.dwHighDateTime=0x1d2d59f, nFileSizeHigh=0x0, nFileSizeLow=0x1d4dc)) returned 1 [0081.350] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0081.350] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Preferences", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Preferences", lpFilePart=0x0) returned 0x4f [0081.350] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0081.351] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Preferences" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\preferences"), fInfoLevelId=0x0, lpFileInformation=0x23464a8 | out: lpFileInformation=0x23464a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70f33bfa, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7d21cc1a, ftLastAccessTime.dwHighDateTime=0x1d2d59f, ftLastWriteTime.dwLowDateTime=0x7d2690b2, ftLastWriteTime.dwHighDateTime=0x1d2d59f, nFileSizeHigh=0x0, nFileSizeLow=0x1d4dc)) returned 1 [0081.351] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0081.351] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Preferences", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Preferences", lpFilePart=0x0) returned 0x4f [0081.351] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0081.351] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Preferences" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\preferences"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0081.351] GetFileType (hFile=0x444) returned 0x1 [0081.351] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0081.351] GetFileType (hFile=0x444) returned 0x1 [0081.351] ReadFile (in: hFile=0x444, lpBuffer=0x2348878, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x2348878*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0081.411] CloseHandle (hObject=0x444) returned 1 [0081.411] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Preferences", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Preferences", lpFilePart=0x0) returned 0x4f [0081.411] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0081.411] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Preferences" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\preferences"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0081.411] GetFileType (hFile=0x444) returned 0x1 [0081.412] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0081.412] GetFileType (hFile=0x444) returned 0x1 [0081.412] WriteFile (in: hFile=0x444, lpBuffer=0x2161558*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x2161558*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0081.412] CloseHandle (hObject=0x444) returned 1 [0081.412] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Preferences", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Preferences", lpFilePart=0x0) returned 0x4f [0081.412] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Preferences.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Preferences.xuy", lpFilePart=0x0) returned 0x53 [0081.412] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0081.412] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Preferences" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\preferences"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70f33bfa, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7d21cc1a, ftLastAccessTime.dwHighDateTime=0x1d2d59f, ftLastWriteTime.dwLowDateTime=0x1c5f8e9b, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x1d4dc)) returned 1 [0081.413] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0081.413] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Preferences" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\preferences"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Preferences.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\preferences.xuy")) returned 1 [0081.413] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db", lpFilePart=0x0) returned 0x57 [0081.414] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0081.414] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\previews_opt_out.db"), fInfoLevelId=0x0, lpFileInformation=0x21c7db0 | out: lpFileInformation=0x21c7db0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7141e9ad, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7141e9ad, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7160e835, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x4000)) returned 1 [0081.415] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0081.415] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db", lpFilePart=0x0) returned 0x57 [0081.415] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0081.415] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\previews_opt_out.db"), fInfoLevelId=0x0, lpFileInformation=0x21c7f20 | out: lpFileInformation=0x21c7f20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7141e9ad, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7141e9ad, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7160e835, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x4000)) returned 1 [0081.416] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0081.416] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db", lpFilePart=0x0) returned 0x57 [0081.416] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0081.416] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\previews_opt_out.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0081.416] GetFileType (hFile=0x444) returned 0x1 [0081.416] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0081.416] GetFileType (hFile=0x444) returned 0x1 [0081.416] ReadFile (in: hFile=0x444, lpBuffer=0x21ca330, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x21ca330*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0081.429] CloseHandle (hObject=0x444) returned 1 [0081.430] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db", lpFilePart=0x0) returned 0x57 [0081.430] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0081.430] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\previews_opt_out.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0081.430] GetFileType (hFile=0x444) returned 0x1 [0081.430] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0081.430] GetFileType (hFile=0x444) returned 0x1 [0081.430] WriteFile (in: hFile=0x444, lpBuffer=0x21c8070*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x21c8070*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0081.430] CloseHandle (hObject=0x444) returned 1 [0081.430] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db", lpFilePart=0x0) returned 0x57 [0081.431] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db.xuy", lpFilePart=0x0) returned 0x5b [0081.431] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0081.431] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\previews_opt_out.db"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7141e9ad, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7141e9ad, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1c61eadf, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x4000)) returned 1 [0081.431] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0081.431] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\previews_opt_out.db"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\previews_opt_out.db.xuy")) returned 1 [0081.432] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db-journal", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db-journal", lpFilePart=0x0) returned 0x5f [0081.432] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0081.432] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db-journal" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\previews_opt_out.db-journal"), fInfoLevelId=0x0, lpFileInformation=0x2246758 | out: lpFileInformation=0x2246758*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7141e9ad, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7141e9ad, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x716f3653, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0081.432] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0081.432] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db-journal", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db-journal", lpFilePart=0x0) returned 0x5f [0081.432] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0081.432] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db-journal" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\previews_opt_out.db-journal"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0081.433] GetFileType (hFile=0x444) returned 0x1 [0081.433] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0081.433] GetFileType (hFile=0x444) returned 0x1 [0081.433] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x0 [0081.433] CloseHandle (hObject=0x444) returned 1 [0081.444] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db-journal", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db-journal", lpFilePart=0x0) returned 0x5f [0081.444] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0081.444] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db-journal" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\previews_opt_out.db-journal"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0081.445] GetFileType (hFile=0x444) returned 0x1 [0081.445] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0081.445] GetFileType (hFile=0x444) returned 0x1 [0081.445] WriteFile (in: hFile=0x444, lpBuffer=0x22bcbc0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x22bcbc0*, lpNumberOfBytesWritten=0x3be5b8*=0x10, lpOverlapped=0x0) returned 1 [0081.446] CloseHandle (hObject=0x444) returned 1 [0081.446] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db-journal", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db-journal", lpFilePart=0x0) returned 0x5f [0081.446] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db-journal.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db-journal.xuy", lpFilePart=0x0) returned 0x63 [0081.446] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0081.446] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db-journal" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\previews_opt_out.db-journal"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7141e9ad, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7141e9ad, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1c644dc1, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0081.446] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0081.446] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db-journal" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\previews_opt_out.db-journal"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db-journal.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\previews_opt_out.db-journal.xuy")) returned 1 [0081.447] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\QuotaManager", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\QuotaManager", lpFilePart=0x0) returned 0x50 [0081.447] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0081.447] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\QuotaManager" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\quotamanager"), fInfoLevelId=0x0, lpFileInformation=0x22bde90 | out: lpFileInformation=0x22bde90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7684a450, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7684a450, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7d432cd7, ftLastWriteTime.dwHighDateTime=0x1d2d59f, nFileSizeHigh=0x0, nFileSizeLow=0x3c00)) returned 1 [0081.448] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0081.448] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\QuotaManager", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\QuotaManager", lpFilePart=0x0) returned 0x50 [0081.448] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0081.448] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\QuotaManager" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\quotamanager"), fInfoLevelId=0x0, lpFileInformation=0x22bdff0 | out: lpFileInformation=0x22bdff0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7684a450, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7684a450, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7d432cd7, ftLastWriteTime.dwHighDateTime=0x1d2d59f, nFileSizeHigh=0x0, nFileSizeLow=0x3c00)) returned 1 [0081.448] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0081.448] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\QuotaManager", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\QuotaManager", lpFilePart=0x0) returned 0x50 [0081.449] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0081.449] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\QuotaManager" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\quotamanager"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0081.449] GetFileType (hFile=0x444) returned 0x1 [0081.449] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0081.449] GetFileType (hFile=0x444) returned 0x1 [0081.449] ReadFile (in: hFile=0x444, lpBuffer=0x22c03e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x22c03e0*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0081.474] CloseHandle (hObject=0x444) returned 1 [0081.474] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\QuotaManager", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\QuotaManager", lpFilePart=0x0) returned 0x50 [0081.474] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0081.474] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\QuotaManager" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\quotamanager"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0081.474] GetFileType (hFile=0x444) returned 0x1 [0081.474] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0081.474] GetFileType (hFile=0x444) returned 0x1 [0081.474] WriteFile (in: hFile=0x444, lpBuffer=0x22be130*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x22be130*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0081.475] CloseHandle (hObject=0x444) returned 1 [0081.475] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\QuotaManager", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\QuotaManager", lpFilePart=0x0) returned 0x50 [0081.475] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\QuotaManager.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\QuotaManager.xuy", lpFilePart=0x0) returned 0x54 [0081.475] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0081.475] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\QuotaManager" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\quotamanager"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7684a450, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7684a450, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1c691265, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x3c00)) returned 1 [0081.475] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0081.475] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\QuotaManager" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\quotamanager"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\QuotaManager.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\quotamanager.xuy")) returned 1 [0081.476] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\QuotaManager-journal", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\QuotaManager-journal", lpFilePart=0x0) returned 0x58 [0081.476] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0081.476] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\QuotaManager-journal" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\quotamanager-journal"), fInfoLevelId=0x0, lpFileInformation=0x233c7b0 | out: lpFileInformation=0x233c7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7684a450, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7684a450, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7d47f188, ftLastWriteTime.dwHighDateTime=0x1d2d59f, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0081.477] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0081.477] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\QuotaManager-journal", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\QuotaManager-journal", lpFilePart=0x0) returned 0x58 [0081.477] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0081.477] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\QuotaManager-journal" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\quotamanager-journal"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0081.477] GetFileType (hFile=0x444) returned 0x1 [0081.477] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0081.477] GetFileType (hFile=0x444) returned 0x1 [0081.478] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x0 [0081.478] CloseHandle (hObject=0x444) returned 1 [0081.521] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\QuotaManager-journal", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\QuotaManager-journal", lpFilePart=0x0) returned 0x58 [0081.521] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0081.521] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\QuotaManager-journal" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\quotamanager-journal"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0081.522] GetFileType (hFile=0x444) returned 0x1 [0081.522] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0081.522] GetFileType (hFile=0x444) returned 0x1 [0081.522] WriteFile (in: hFile=0x444, lpBuffer=0x21afa10*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x21afa10*, lpNumberOfBytesWritten=0x3be5b8*=0x10, lpOverlapped=0x0) returned 1 [0081.522] CloseHandle (hObject=0x444) returned 1 [0081.523] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\QuotaManager-journal", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\QuotaManager-journal", lpFilePart=0x0) returned 0x58 [0081.523] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\QuotaManager-journal.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\QuotaManager-journal.xuy", lpFilePart=0x0) returned 0x5c [0081.523] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0081.523] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\QuotaManager-journal" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\quotamanager-journal"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7684a450, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7684a450, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1c703acf, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0081.523] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0081.523] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\QuotaManager-journal" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\quotamanager-journal"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\QuotaManager-journal.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\quotamanager-journal.xuy")) returned 1 [0081.524] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Secure Preferences", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Secure Preferences", lpFilePart=0x0) returned 0x56 [0081.524] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0081.524] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Secure Preferences" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\secure preferences"), fInfoLevelId=0x0, lpFileInformation=0x21b0cc8 | out: lpFileInformation=0x21b0cc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76f80153, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7abb2ef2, ftLastAccessTime.dwHighDateTime=0x1d2d59f, ftLastWriteTime.dwLowDateTime=0x7abb2ef2, ftLastWriteTime.dwHighDateTime=0x1d2d59f, nFileSizeHigh=0x0, nFileSizeLow=0x8b23)) returned 1 [0081.525] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0081.525] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Secure Preferences", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Secure Preferences", lpFilePart=0x0) returned 0x56 [0081.525] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0081.525] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Secure Preferences" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\secure preferences"), fInfoLevelId=0x0, lpFileInformation=0x21b0e38 | out: lpFileInformation=0x21b0e38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76f80153, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7abb2ef2, ftLastAccessTime.dwHighDateTime=0x1d2d59f, ftLastWriteTime.dwLowDateTime=0x7abb2ef2, ftLastWriteTime.dwHighDateTime=0x1d2d59f, nFileSizeHigh=0x0, nFileSizeLow=0x8b23)) returned 1 [0081.525] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0081.525] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Secure Preferences", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Secure Preferences", lpFilePart=0x0) returned 0x56 [0081.525] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0081.525] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Secure Preferences" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\secure preferences"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0081.526] GetFileType (hFile=0x444) returned 0x1 [0081.526] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0081.526] GetFileType (hFile=0x444) returned 0x1 [0081.526] ReadFile (in: hFile=0x444, lpBuffer=0x21b3248, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x21b3248*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0081.559] CloseHandle (hObject=0x444) returned 1 [0081.559] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Secure Preferences", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Secure Preferences", lpFilePart=0x0) returned 0x56 [0081.559] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0081.559] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Secure Preferences" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\secure preferences"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0081.560] GetFileType (hFile=0x444) returned 0x1 [0081.560] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0081.560] GetFileType (hFile=0x444) returned 0x1 [0081.560] WriteFile (in: hFile=0x444, lpBuffer=0x21b0f88*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x21b0f88*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0081.560] CloseHandle (hObject=0x444) returned 1 [0081.560] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Secure Preferences", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Secure Preferences", lpFilePart=0x0) returned 0x56 [0081.560] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Secure Preferences.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Secure Preferences.xuy", lpFilePart=0x0) returned 0x5a [0081.560] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0081.560] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Secure Preferences" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\secure preferences"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76f80153, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7abb2ef2, ftLastAccessTime.dwHighDateTime=0x1d2d59f, ftLastWriteTime.dwLowDateTime=0x1c74fe2e, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x8b23)) returned 1 [0081.560] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0081.560] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Secure Preferences" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\secure preferences"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Secure Preferences.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\secure preferences.xuy")) returned 1 [0081.568] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts", lpFilePart=0x0) returned 0x4d [0081.568] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0081.568] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\shortcuts"), fInfoLevelId=0x0, lpFileInformation=0x222f640 | out: lpFileInformation=0x222f640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x717b221f, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x717b221f, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0xb680ad46, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x5000)) returned 1 [0081.568] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0081.568] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts", lpFilePart=0x0) returned 0x4d [0081.568] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0081.568] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\shortcuts"), fInfoLevelId=0x0, lpFileInformation=0x222f790 | out: lpFileInformation=0x222f790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x717b221f, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x717b221f, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0xb680ad46, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x5000)) returned 1 [0081.568] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0081.568] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts", lpFilePart=0x0) returned 0x4d [0081.568] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0081.568] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\shortcuts"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0081.569] GetFileType (hFile=0x444) returned 0x1 [0081.569] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0081.569] GetFileType (hFile=0x444) returned 0x1 [0081.569] ReadFile (in: hFile=0x444, lpBuffer=0x2231b60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x2231b60*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0081.603] CloseHandle (hObject=0x444) returned 1 [0081.633] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts", lpFilePart=0x0) returned 0x4d [0081.633] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0081.633] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\shortcuts"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0081.634] GetFileType (hFile=0x444) returned 0x1 [0081.634] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0081.634] GetFileType (hFile=0x444) returned 0x1 [0081.634] WriteFile (in: hFile=0x444, lpBuffer=0x222f8c0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x222f8c0*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0081.634] CloseHandle (hObject=0x444) returned 1 [0081.634] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts", lpFilePart=0x0) returned 0x4d [0081.634] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts.xuy", lpFilePart=0x0) returned 0x51 [0081.634] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0081.634] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\shortcuts"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x717b221f, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x717b221f, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1c80ea35, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x5000)) returned 1 [0081.634] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0081.634] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\shortcuts"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\shortcuts.xuy")) returned 1 [0081.635] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts-journal", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts-journal", lpFilePart=0x0) returned 0x55 [0081.635] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0081.635] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts-journal" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\shortcuts-journal"), fInfoLevelId=0x0, lpFileInformation=0x22adf08 | out: lpFileInformation=0x22adf08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x717b221f, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x717b221f, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0xb6842fbf, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0081.635] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0081.635] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts-journal", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts-journal", lpFilePart=0x0) returned 0x55 [0081.635] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0081.635] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts-journal" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\shortcuts-journal"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0081.636] GetFileType (hFile=0x444) returned 0x1 [0081.636] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0081.636] GetFileType (hFile=0x444) returned 0x1 [0081.636] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x0 [0081.636] CloseHandle (hObject=0x444) returned 1 [0081.647] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts-journal", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts-journal", lpFilePart=0x0) returned 0x55 [0081.647] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0081.647] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts-journal" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\shortcuts-journal"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0081.647] GetFileType (hFile=0x444) returned 0x1 [0081.647] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0081.647] GetFileType (hFile=0x444) returned 0x1 [0081.647] WriteFile (in: hFile=0x444, lpBuffer=0x2324310*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x2324310*, lpNumberOfBytesWritten=0x3be5b8*=0x10, lpOverlapped=0x0) returned 1 [0081.648] CloseHandle (hObject=0x444) returned 1 [0081.648] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts-journal", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts-journal", lpFilePart=0x0) returned 0x55 [0081.648] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts-journal.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts-journal.xuy", lpFilePart=0x0) returned 0x59 [0081.648] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0081.649] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts-journal" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\shortcuts-journal"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x717b221f, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x717b221f, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1c834bc4, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0081.649] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0081.649] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts-journal" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\shortcuts-journal"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts-journal.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\shortcuts-journal.xuy")) returned 1 [0081.650] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites", lpFilePart=0x0) returned 0x4d [0081.650] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0081.650] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\top sites"), fInfoLevelId=0x0, lpFileInformation=0x23255b0 | out: lpFileInformation=0x23255b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7122eb0f, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7122eb0f, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x71eb2b86, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x5000)) returned 1 [0081.650] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0081.650] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites", lpFilePart=0x0) returned 0x4d [0081.650] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0081.650] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\top sites"), fInfoLevelId=0x0, lpFileInformation=0x2325700 | out: lpFileInformation=0x2325700*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7122eb0f, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7122eb0f, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x71eb2b86, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x5000)) returned 1 [0081.651] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0081.651] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites", lpFilePart=0x0) returned 0x4d [0081.651] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0081.651] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\top sites"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0081.651] GetFileType (hFile=0x444) returned 0x1 [0081.651] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0081.651] GetFileType (hFile=0x444) returned 0x1 [0081.651] ReadFile (in: hFile=0x444, lpBuffer=0x2327ad0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x2327ad0*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0081.741] CloseHandle (hObject=0x444) returned 1 [0081.741] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites", lpFilePart=0x0) returned 0x4d [0081.741] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0081.741] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\top sites"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0081.742] GetFileType (hFile=0x444) returned 0x1 [0081.742] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0081.742] GetFileType (hFile=0x444) returned 0x1 [0081.742] WriteFile (in: hFile=0x444, lpBuffer=0x2161558*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x2161558*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0081.742] CloseHandle (hObject=0x444) returned 1 [0081.742] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites", lpFilePart=0x0) returned 0x4d [0081.742] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites.xuy", lpFilePart=0x0) returned 0x51 [0081.742] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0081.742] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\top sites"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7122eb0f, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7122eb0f, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1c919b08, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x5000)) returned 1 [0081.742] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0081.742] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\top sites"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\top sites.xuy")) returned 1 [0081.743] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites-journal", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites-journal", lpFilePart=0x0) returned 0x55 [0081.743] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0081.743] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites-journal" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\top sites-journal"), fInfoLevelId=0x0, lpFileInformation=0x21a7050 | out: lpFileInformation=0x21a7050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7122eb0f, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7122eb0f, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x71eeae17, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0081.743] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0081.744] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites-journal", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites-journal", lpFilePart=0x0) returned 0x55 [0081.744] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0081.744] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites-journal" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\top sites-journal"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0081.744] GetFileType (hFile=0x444) returned 0x1 [0081.744] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0081.744] GetFileType (hFile=0x444) returned 0x1 [0081.744] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x0 [0081.744] CloseHandle (hObject=0x444) returned 1 [0081.768] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites-journal", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites-journal", lpFilePart=0x0) returned 0x55 [0081.768] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0081.768] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites-journal" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\top sites-journal"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0081.769] GetFileType (hFile=0x444) returned 0x1 [0081.769] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0081.769] GetFileType (hFile=0x444) returned 0x1 [0081.769] WriteFile (in: hFile=0x444, lpBuffer=0x221d458*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x221d458*, lpNumberOfBytesWritten=0x3be5b8*=0x10, lpOverlapped=0x0) returned 1 [0081.770] CloseHandle (hObject=0x444) returned 1 [0081.770] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites-journal", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites-journal", lpFilePart=0x0) returned 0x55 [0081.770] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites-journal.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites-journal.xuy", lpFilePart=0x0) returned 0x59 [0081.770] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0081.770] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites-journal" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\top sites-journal"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7122eb0f, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7122eb0f, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1c96b17a, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0081.770] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0081.770] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites-journal" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\top sites-journal"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites-journal.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\top sites-journal.xuy")) returned 1 [0081.771] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\TransportSecurity", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\TransportSecurity", lpFilePart=0x0) returned 0x55 [0081.771] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0081.771] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\TransportSecurity" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\transportsecurity"), fInfoLevelId=0x0, lpFileInformation=0x221e6f8 | out: lpFileInformation=0x221e6f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ca3887f, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7ac1c778, ftLastAccessTime.dwHighDateTime=0x1d2d59f, ftLastWriteTime.dwLowDateTime=0x7ac2d8d6, ftLastWriteTime.dwHighDateTime=0x1d2d59f, nFileSizeHigh=0x0, nFileSizeLow=0x776)) returned 1 [0081.771] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0081.771] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\TransportSecurity", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\TransportSecurity", lpFilePart=0x0) returned 0x55 [0081.771] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0081.771] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\TransportSecurity" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\transportsecurity"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0081.771] GetFileType (hFile=0x444) returned 0x1 [0081.771] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0081.771] GetFileType (hFile=0x444) returned 0x1 [0081.771] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x776 [0081.771] ReadFile (in: hFile=0x444, lpBuffer=0x221f168, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x221f168*, lpNumberOfBytesRead=0x3be6a8*=0x776, lpOverlapped=0x0) returned 1 [0081.785] CloseHandle (hObject=0x444) returned 1 [0081.796] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\TransportSecurity", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\TransportSecurity", lpFilePart=0x0) returned 0x55 [0081.796] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0081.796] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\TransportSecurity" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\transportsecurity"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0081.798] GetFileType (hFile=0x444) returned 0x1 [0081.798] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0081.798] GetFileType (hFile=0x444) returned 0x1 [0081.798] WriteFile (in: hFile=0x444, lpBuffer=0x22986f0*, nNumberOfBytesToWrite=0x780, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x22986f0*, lpNumberOfBytesWritten=0x3be5b8*=0x780, lpOverlapped=0x0) returned 1 [0081.799] CloseHandle (hObject=0x444) returned 1 [0081.799] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\TransportSecurity", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\TransportSecurity", lpFilePart=0x0) returned 0x55 [0081.799] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\TransportSecurity.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\TransportSecurity.xuy", lpFilePart=0x0) returned 0x59 [0081.799] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0081.799] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\TransportSecurity" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\transportsecurity"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ca3887f, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7ac1c778, ftLastAccessTime.dwHighDateTime=0x1d2d59f, ftLastWriteTime.dwLowDateTime=0x1c9b242f, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x780)) returned 1 [0081.799] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0081.799] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\TransportSecurity" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\transportsecurity"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\TransportSecurity.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\transportsecurity.xuy")) returned 1 [0081.800] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Visited Links", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Visited Links", lpFilePart=0x0) returned 0x51 [0081.800] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0081.800] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Visited Links" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\visited links"), fInfoLevelId=0x0, lpFileInformation=0x2299990 | out: lpFileInformation=0x2299990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71aad131, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x71aad131, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x8f426e42, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x20000)) returned 1 [0081.800] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0081.801] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Visited Links", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Visited Links", lpFilePart=0x0) returned 0x51 [0081.801] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0081.801] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Visited Links" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\visited links"), fInfoLevelId=0x0, lpFileInformation=0x2299af0 | out: lpFileInformation=0x2299af0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71aad131, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x71aad131, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x8f426e42, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x20000)) returned 1 [0081.801] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0081.801] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Visited Links", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Visited Links", lpFilePart=0x0) returned 0x51 [0081.801] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0081.801] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Visited Links" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\visited links"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0081.801] GetFileType (hFile=0x444) returned 0x1 [0081.801] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0081.801] GetFileType (hFile=0x444) returned 0x1 [0081.802] ReadFile (in: hFile=0x444, lpBuffer=0x229bee0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x229bee0*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0081.830] CloseHandle (hObject=0x444) returned 1 [0081.860] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Visited Links", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Visited Links", lpFilePart=0x0) returned 0x51 [0081.860] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0081.860] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Visited Links" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\visited links"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0081.860] GetFileType (hFile=0x444) returned 0x1 [0081.860] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0081.861] GetFileType (hFile=0x444) returned 0x1 [0081.861] WriteFile (in: hFile=0x444, lpBuffer=0x2299c30*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x2299c30*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0081.861] CloseHandle (hObject=0x444) returned 1 [0081.861] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Visited Links", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Visited Links", lpFilePart=0x0) returned 0x51 [0081.861] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Visited Links.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Visited Links.xuy", lpFilePart=0x0) returned 0x55 [0081.861] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0081.861] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Visited Links" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\visited links"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71aad131, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x71aad131, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1ca4aca8, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x20000)) returned 1 [0081.861] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0081.861] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Visited Links" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\visited links"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Visited Links.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\visited links.xuy")) returned 1 [0081.862] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data", lpFilePart=0x0) returned 0x4c [0081.863] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0081.863] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\web data"), fInfoLevelId=0x0, lpFileInformation=0x23182b0 | out: lpFileInformation=0x23182b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x710d75fa, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x710d75fa, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x74f6fd29, ftLastWriteTime.dwHighDateTime=0x1d2d59f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0081.863] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0081.863] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data", lpFilePart=0x0) returned 0x4c [0081.863] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0081.863] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\web data"), fInfoLevelId=0x0, lpFileInformation=0x2318400 | out: lpFileInformation=0x2318400*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x710d75fa, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x710d75fa, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x74f6fd29, ftLastWriteTime.dwHighDateTime=0x1d2d59f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0081.863] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0081.863] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data", lpFilePart=0x0) returned 0x4c [0081.863] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0081.863] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\web data"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0081.864] GetFileType (hFile=0x444) returned 0x1 [0081.864] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0081.864] GetFileType (hFile=0x444) returned 0x1 [0081.864] ReadFile (in: hFile=0x444, lpBuffer=0x231a7d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x231a7d0*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0081.918] CloseHandle (hObject=0x444) returned 1 [0081.918] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data", lpFilePart=0x0) returned 0x4c [0081.918] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0081.918] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\web data"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0081.919] GetFileType (hFile=0x444) returned 0x1 [0081.919] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0081.919] GetFileType (hFile=0x444) returned 0x1 [0081.919] WriteFile (in: hFile=0x444, lpBuffer=0x2161558*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x2161558*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0081.919] CloseHandle (hObject=0x444) returned 1 [0081.919] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data", lpFilePart=0x0) returned 0x4c [0081.919] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data.xuy", lpFilePart=0x0) returned 0x50 [0081.919] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0081.919] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\web data"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x710d75fa, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x710d75fa, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1cabd591, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0081.919] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0081.919] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\web data"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\web data.xuy")) returned 1 [0081.921] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data-journal", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data-journal", lpFilePart=0x0) returned 0x54 [0081.922] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0081.922] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data-journal" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\web data-journal"), fInfoLevelId=0x0, lpFileInformation=0x2196b50 | out: lpFileInformation=0x2196b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x710d75fa, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x710d75fa, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x74fb42e6, ftLastWriteTime.dwHighDateTime=0x1d2d59f, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0081.922] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0081.922] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data-journal", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data-journal", lpFilePart=0x0) returned 0x54 [0081.922] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0081.922] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data-journal" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\web data-journal"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0081.922] GetFileType (hFile=0x444) returned 0x1 [0081.922] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0081.922] GetFileType (hFile=0x444) returned 0x1 [0081.922] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x0 [0081.922] CloseHandle (hObject=0x444) returned 1 [0081.939] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data-journal", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data-journal", lpFilePart=0x0) returned 0x54 [0081.939] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0081.939] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data-journal" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\web data-journal"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0081.940] GetFileType (hFile=0x444) returned 0x1 [0081.940] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0081.940] GetFileType (hFile=0x444) returned 0x1 [0081.941] WriteFile (in: hFile=0x444, lpBuffer=0x220cf58*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x220cf58*, lpNumberOfBytesWritten=0x3be5b8*=0x10, lpOverlapped=0x0) returned 1 [0081.941] CloseHandle (hObject=0x444) returned 1 [0081.942] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data-journal", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data-journal", lpFilePart=0x0) returned 0x54 [0081.942] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data-journal.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data-journal.xuy", lpFilePart=0x0) returned 0x58 [0081.942] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0081.942] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data-journal" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\web data-journal"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x710d75fa, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x710d75fa, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1cb09bb2, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0081.942] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0081.942] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data-journal" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\web data-journal"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data-journal.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\web data-journal.xuy")) returned 1 [0081.943] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0081.943] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache", lpFilePart=0x0) returned 0x49 [0081.943] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\", lpFilePart=0x0) returned 0x4a [0081.943] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d7370 [0081.962] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0081.962] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0081.962] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0081.962] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0081.962] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0081.962] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0081.963] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0081.963] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0081.963] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0081.963] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0081.963] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0081.963] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0081.963] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0081.964] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0081.964] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0081.964] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0081.964] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0081.964] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0081.964] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0081.964] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0081.964] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0081.964] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0081.965] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0081.965] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0081.965] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0081.965] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0081.965] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0081.965] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0081.965] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0081.965] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0081.966] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0081.966] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0081.966] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0081.966] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0081.966] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0081.966] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0081.966] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0081.966] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0081.968] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0081.968] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0081.968] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0081.968] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache", lpFilePart=0x0) returned 0x49 [0081.968] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\", lpFilePart=0x0) returned 0x4a [0081.968] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d79d0 [0081.969] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0081.969] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0081.970] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0081.970] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0081.970] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0081.970] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0081.970] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0081.970] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0081.970] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0081.971] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0081.971] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0081.971] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0081.971] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0081.971] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0081.971] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0081.972] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0081.972] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0081.972] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0081.972] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0081.972] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0081.972] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0081.973] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0081.973] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0081.973] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0081.973] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0081.973] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0081.973] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0081.973] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0081.974] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0081.974] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0081.974] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0081.974] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0081.974] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0081.974] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0081.975] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0081.975] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0081.975] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0081.975] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0081.976] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0081.976] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0081.976] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_0", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_0", lpFilePart=0x0) returned 0x50 [0081.976] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0081.976] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\data_0"), fInfoLevelId=0x0, lpFileInformation=0x2218df0 | out: lpFileInformation=0x2218df0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72106768, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x72106768, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7d2db7ac, ftLastWriteTime.dwHighDateTime=0x1d2d59f, nFileSizeHigh=0x0, nFileSizeLow=0xb000)) returned 1 [0081.977] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0081.977] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_0", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_0", lpFilePart=0x0) returned 0x50 [0081.977] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0081.977] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\data_0"), fInfoLevelId=0x0, lpFileInformation=0x2218f40 | out: lpFileInformation=0x2218f40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72106768, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x72106768, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7d2db7ac, ftLastWriteTime.dwHighDateTime=0x1d2d59f, nFileSizeHigh=0x0, nFileSizeLow=0xb000)) returned 1 [0081.977] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0081.977] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_0", nBufferLength=0x105, lpBuffer=0x3be120, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_0", lpFilePart=0x0) returned 0x50 [0081.977] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0081.978] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\data_0"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0081.978] GetFileType (hFile=0x444) returned 0x1 [0081.978] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be570) returned 1 [0081.978] GetFileType (hFile=0x444) returned 0x1 [0081.978] ReadFile (in: hFile=0x444, lpBuffer=0x221b310, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be688, lpOverlapped=0x0 | out: lpBuffer=0x221b310*, lpNumberOfBytesRead=0x3be688*=0x1000, lpOverlapped=0x0) returned 1 [0081.997] CloseHandle (hObject=0x444) returned 1 [0081.998] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_0", nBufferLength=0x105, lpBuffer=0x3be120, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_0", lpFilePart=0x0) returned 0x50 [0081.998] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0081.998] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\data_0"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0081.999] GetFileType (hFile=0x444) returned 0x1 [0081.999] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be570) returned 1 [0081.999] GetFileType (hFile=0x444) returned 0x1 [0081.999] WriteFile (in: hFile=0x444, lpBuffer=0x2219070*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be738, lpOverlapped=0x0 | out: lpBuffer=0x2219070*, lpNumberOfBytesWritten=0x3be738*=0x2000, lpOverlapped=0x0) returned 1 [0082.000] CloseHandle (hObject=0x444) returned 1 [0082.000] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_0", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_0", lpFilePart=0x0) returned 0x50 [0082.000] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_0.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_0.xuy", lpFilePart=0x0) returned 0x54 [0082.000] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0082.000] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\data_0"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72106768, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x72106768, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1cba2350, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xb000)) returned 1 [0082.000] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0082.000] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\data_0"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_0.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\data_0.xuy")) returned 1 [0082.001] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_1", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_1", lpFilePart=0x0) returned 0x50 [0082.001] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0082.001] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\data_1"), fInfoLevelId=0x0, lpFileInformation=0x22976d0 | out: lpFileInformation=0x22976d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72106768, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x72106768, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7d2db7ac, ftLastWriteTime.dwHighDateTime=0x1d2d59f, nFileSizeHigh=0x0, nFileSizeLow=0x42000)) returned 1 [0082.001] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0082.001] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_1", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_1", lpFilePart=0x0) returned 0x50 [0082.002] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0082.002] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\data_1"), fInfoLevelId=0x0, lpFileInformation=0x2297820 | out: lpFileInformation=0x2297820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72106768, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x72106768, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7d2db7ac, ftLastWriteTime.dwHighDateTime=0x1d2d59f, nFileSizeHigh=0x0, nFileSizeLow=0x42000)) returned 1 [0082.002] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0082.002] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_1", nBufferLength=0x105, lpBuffer=0x3be120, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_1", lpFilePart=0x0) returned 0x50 [0082.002] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0082.002] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\data_1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0082.003] GetFileType (hFile=0x444) returned 0x1 [0082.003] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be570) returned 1 [0082.003] GetFileType (hFile=0x444) returned 0x1 [0082.003] ReadFile (in: hFile=0x444, lpBuffer=0x2299bf0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be688, lpOverlapped=0x0 | out: lpBuffer=0x2299bf0*, lpNumberOfBytesRead=0x3be688*=0x1000, lpOverlapped=0x0) returned 1 [0082.035] CloseHandle (hObject=0x444) returned 1 [0082.046] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_1", nBufferLength=0x105, lpBuffer=0x3be120, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_1", lpFilePart=0x0) returned 0x50 [0082.046] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0082.046] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\data_1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0082.047] GetFileType (hFile=0x444) returned 0x1 [0082.047] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be570) returned 1 [0082.047] GetFileType (hFile=0x444) returned 0x1 [0082.047] WriteFile (in: hFile=0x444, lpBuffer=0x2297950*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be738, lpOverlapped=0x0 | out: lpBuffer=0x2297950*, lpNumberOfBytesWritten=0x3be738*=0x2000, lpOverlapped=0x0) returned 1 [0082.047] CloseHandle (hObject=0x444) returned 1 [0082.047] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_1", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_1", lpFilePart=0x0) returned 0x50 [0082.047] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_1.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_1.xuy", lpFilePart=0x0) returned 0x54 [0082.047] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0082.047] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\data_1"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72106768, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x72106768, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1cc1496e, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x42000)) returned 1 [0082.048] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0082.048] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\data_1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_1.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\data_1.xuy")) returned 1 [0082.049] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_2", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_2", lpFilePart=0x0) returned 0x50 [0082.049] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0082.049] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\data_2"), fInfoLevelId=0x0, lpFileInformation=0x2315fb0 | out: lpFileInformation=0x2315fb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72108e77, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x72108e77, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7d2db7ac, ftLastWriteTime.dwHighDateTime=0x1d2d59f, nFileSizeHigh=0x0, nFileSizeLow=0x102000)) returned 1 [0082.050] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0082.050] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_2", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_2", lpFilePart=0x0) returned 0x50 [0082.050] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0082.050] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\data_2"), fInfoLevelId=0x0, lpFileInformation=0x2316100 | out: lpFileInformation=0x2316100*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72108e77, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x72108e77, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7d2db7ac, ftLastWriteTime.dwHighDateTime=0x1d2d59f, nFileSizeHigh=0x0, nFileSizeLow=0x102000)) returned 1 [0082.050] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0082.050] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_2", nBufferLength=0x105, lpBuffer=0x3be120, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_2", lpFilePart=0x0) returned 0x50 [0082.050] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0082.050] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\data_2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0082.051] GetFileType (hFile=0x444) returned 0x1 [0082.051] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be570) returned 1 [0082.051] GetFileType (hFile=0x444) returned 0x1 [0082.051] ReadFile (in: hFile=0x444, lpBuffer=0x23184d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be688, lpOverlapped=0x0 | out: lpBuffer=0x23184d0*, lpNumberOfBytesRead=0x3be688*=0x1000, lpOverlapped=0x0) returned 1 [0082.134] CloseHandle (hObject=0x444) returned 1 [0082.134] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_2", nBufferLength=0x105, lpBuffer=0x3be120, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_2", lpFilePart=0x0) returned 0x50 [0082.134] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0082.134] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\data_2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0082.134] GetFileType (hFile=0x444) returned 0x1 [0082.135] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be570) returned 1 [0082.135] GetFileType (hFile=0x444) returned 0x1 [0082.135] WriteFile (in: hFile=0x444, lpBuffer=0x2161658*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be738, lpOverlapped=0x0 | out: lpBuffer=0x2161658*, lpNumberOfBytesWritten=0x3be738*=0x2000, lpOverlapped=0x0) returned 1 [0082.135] CloseHandle (hObject=0x444) returned 1 [0082.135] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_2", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_2", lpFilePart=0x0) returned 0x50 [0082.135] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_2.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_2.xuy", lpFilePart=0x0) returned 0x54 [0082.135] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0082.135] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\data_2"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72108e77, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x72108e77, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1ccd3798, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x102000)) returned 1 [0082.135] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0082.135] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\data_2"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_2.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\data_2.xuy")) returned 1 [0082.136] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_3", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_3", lpFilePart=0x0) returned 0x50 [0082.136] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0082.136] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\data_3"), fInfoLevelId=0x0, lpFileInformation=0x2194968 | out: lpFileInformation=0x2194968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72108e77, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x72108e77, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7d2db7ac, ftLastWriteTime.dwHighDateTime=0x1d2d59f, nFileSizeHigh=0x0, nFileSizeLow=0x402000)) returned 1 [0082.136] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0082.136] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_3", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_3", lpFilePart=0x0) returned 0x50 [0082.137] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0082.137] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\data_3"), fInfoLevelId=0x0, lpFileInformation=0x2194ab8 | out: lpFileInformation=0x2194ab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72108e77, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x72108e77, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7d2db7ac, ftLastWriteTime.dwHighDateTime=0x1d2d59f, nFileSizeHigh=0x0, nFileSizeLow=0x402000)) returned 1 [0082.137] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0082.137] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_3", nBufferLength=0x105, lpBuffer=0x3be120, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_3", lpFilePart=0x0) returned 0x50 [0082.137] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0082.137] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\data_3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0082.138] GetFileType (hFile=0x444) returned 0x1 [0082.138] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be570) returned 1 [0082.138] GetFileType (hFile=0x444) returned 0x1 [0082.138] ReadFile (in: hFile=0x444, lpBuffer=0x2196e88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be688, lpOverlapped=0x0 | out: lpBuffer=0x2196e88*, lpNumberOfBytesRead=0x3be688*=0x1000, lpOverlapped=0x0) returned 1 [0082.166] CloseHandle (hObject=0x444) returned 1 [0082.166] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_3", nBufferLength=0x105, lpBuffer=0x3be120, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_3", lpFilePart=0x0) returned 0x50 [0082.166] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0082.166] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\data_3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0082.167] GetFileType (hFile=0x444) returned 0x1 [0082.167] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be570) returned 1 [0082.167] GetFileType (hFile=0x444) returned 0x1 [0082.167] WriteFile (in: hFile=0x444, lpBuffer=0x2194be8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be738, lpOverlapped=0x0 | out: lpBuffer=0x2194be8*, lpNumberOfBytesWritten=0x3be738*=0x2000, lpOverlapped=0x0) returned 1 [0082.167] CloseHandle (hObject=0x444) returned 1 [0082.167] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_3", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_3", lpFilePart=0x0) returned 0x50 [0082.167] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_3.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_3.xuy", lpFilePart=0x0) returned 0x54 [0082.167] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0082.167] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\data_3"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72108e77, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x72108e77, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1cd1faa6, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x402000)) returned 1 [0082.167] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0082.167] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\data_3"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_3.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\data_3.xuy")) returned 1 [0082.168] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000001", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000001", lpFilePart=0x0) returned 0x52 [0082.168] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0082.168] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000001" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000001"), fInfoLevelId=0x0, lpFileInformation=0x2213248 | out: lpFileInformation=0x2213248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75df12d0, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x75df12d0, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x75df39ef, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x4355)) returned 1 [0082.169] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0082.169] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000001", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000001", lpFilePart=0x0) returned 0x52 [0082.169] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0082.169] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000001" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000001"), fInfoLevelId=0x0, lpFileInformation=0x22133a0 | out: lpFileInformation=0x22133a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75df12d0, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x75df12d0, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x75df39ef, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x4355)) returned 1 [0082.169] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0082.169] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000001", nBufferLength=0x105, lpBuffer=0x3be120, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000001", lpFilePart=0x0) returned 0x52 [0082.169] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0082.169] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000001" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000001"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0082.170] GetFileType (hFile=0x444) returned 0x1 [0082.170] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be570) returned 1 [0082.170] GetFileType (hFile=0x444) returned 0x1 [0082.170] ReadFile (in: hFile=0x444, lpBuffer=0x2215780, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be688, lpOverlapped=0x0 | out: lpBuffer=0x2215780*, lpNumberOfBytesRead=0x3be688*=0x1000, lpOverlapped=0x0) returned 1 [0082.204] CloseHandle (hObject=0x444) returned 1 [0082.204] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000001", nBufferLength=0x105, lpBuffer=0x3be120, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000001", lpFilePart=0x0) returned 0x52 [0082.204] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0082.204] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000001" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000001"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0082.204] GetFileType (hFile=0x444) returned 0x1 [0082.205] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be570) returned 1 [0082.205] GetFileType (hFile=0x444) returned 0x1 [0082.205] WriteFile (in: hFile=0x444, lpBuffer=0x22134d8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be738, lpOverlapped=0x0 | out: lpBuffer=0x22134d8*, lpNumberOfBytesWritten=0x3be738*=0x2000, lpOverlapped=0x0) returned 1 [0082.205] CloseHandle (hObject=0x444) returned 1 [0082.205] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000001", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000001", lpFilePart=0x0) returned 0x52 [0082.205] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000001.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000001.xuy", lpFilePart=0x0) returned 0x56 [0082.205] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0082.205] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000001" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000001"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75df12d0, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x75df12d0, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1cd9220c, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x4355)) returned 1 [0082.205] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0082.205] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000001" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000001"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000001.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000001.xuy")) returned 1 [0082.206] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000002", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000002", lpFilePart=0x0) returned 0x52 [0082.206] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0082.206] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000002" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000002"), fInfoLevelId=0x0, lpFileInformation=0x2291b48 | out: lpFileInformation=0x2291b48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76136a18, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x76136a18, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x76139134, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x12530)) returned 1 [0082.206] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0082.206] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000002", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000002", lpFilePart=0x0) returned 0x52 [0082.206] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0082.206] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000002" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000002"), fInfoLevelId=0x0, lpFileInformation=0x2291ca0 | out: lpFileInformation=0x2291ca0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76136a18, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x76136a18, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x76139134, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x12530)) returned 1 [0082.207] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0082.207] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000002", nBufferLength=0x105, lpBuffer=0x3be120, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000002", lpFilePart=0x0) returned 0x52 [0082.207] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0082.207] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000002" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000002"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0082.207] GetFileType (hFile=0x444) returned 0x1 [0082.207] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be570) returned 1 [0082.207] GetFileType (hFile=0x444) returned 0x1 [0082.207] ReadFile (in: hFile=0x444, lpBuffer=0x2294080, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be688, lpOverlapped=0x0 | out: lpBuffer=0x2294080*, lpNumberOfBytesRead=0x3be688*=0x1000, lpOverlapped=0x0) returned 1 [0082.234] CloseHandle (hObject=0x444) returned 1 [0082.234] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000002", nBufferLength=0x105, lpBuffer=0x3be120, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000002", lpFilePart=0x0) returned 0x52 [0082.234] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0082.234] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000002" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000002"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0082.234] GetFileType (hFile=0x444) returned 0x1 [0082.234] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be570) returned 1 [0082.234] GetFileType (hFile=0x444) returned 0x1 [0082.234] WriteFile (in: hFile=0x444, lpBuffer=0x2291dd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be738, lpOverlapped=0x0 | out: lpBuffer=0x2291dd8*, lpNumberOfBytesWritten=0x3be738*=0x2000, lpOverlapped=0x0) returned 1 [0082.235] CloseHandle (hObject=0x444) returned 1 [0082.235] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000002", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000002", lpFilePart=0x0) returned 0x52 [0082.235] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000002.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000002.xuy", lpFilePart=0x0) returned 0x56 [0082.235] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0082.235] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000002" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000002"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76136a18, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x76136a18, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1cdde5c5, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x12530)) returned 1 [0082.235] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0082.235] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000002" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000002"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000002.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000002.xuy")) returned 1 [0082.236] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000003", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000003", lpFilePart=0x0) returned 0x52 [0082.236] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0082.236] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000003" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000003"), fInfoLevelId=0x0, lpFileInformation=0x2310448 | out: lpFileInformation=0x2310448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76262f03, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x76262f03, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x76262f03, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x7e9e)) returned 1 [0082.236] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0082.236] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000003", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000003", lpFilePart=0x0) returned 0x52 [0082.236] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0082.236] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000003" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000003"), fInfoLevelId=0x0, lpFileInformation=0x23105a0 | out: lpFileInformation=0x23105a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76262f03, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x76262f03, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x76262f03, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x7e9e)) returned 1 [0082.236] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0082.236] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000003", nBufferLength=0x105, lpBuffer=0x3be120, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000003", lpFilePart=0x0) returned 0x52 [0082.236] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0082.236] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000003" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000003"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0082.237] GetFileType (hFile=0x444) returned 0x1 [0082.237] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be570) returned 1 [0082.237] GetFileType (hFile=0x444) returned 0x1 [0082.237] ReadFile (in: hFile=0x444, lpBuffer=0x2312980, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be688, lpOverlapped=0x0 | out: lpBuffer=0x2312980*, lpNumberOfBytesRead=0x3be688*=0x1000, lpOverlapped=0x0) returned 1 [0082.308] CloseHandle (hObject=0x444) returned 1 [0082.308] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000003", nBufferLength=0x105, lpBuffer=0x3be120, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000003", lpFilePart=0x0) returned 0x52 [0082.308] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0082.308] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000003" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000003"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0082.309] GetFileType (hFile=0x444) returned 0x1 [0082.309] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be570) returned 1 [0082.309] GetFileType (hFile=0x444) returned 0x1 [0082.309] WriteFile (in: hFile=0x444, lpBuffer=0x2161640*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be738, lpOverlapped=0x0 | out: lpBuffer=0x2161640*, lpNumberOfBytesWritten=0x3be738*=0x2000, lpOverlapped=0x0) returned 1 [0082.309] CloseHandle (hObject=0x444) returned 1 [0082.309] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000003", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000003", lpFilePart=0x0) returned 0x52 [0082.309] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000003.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000003.xuy", lpFilePart=0x0) returned 0x56 [0082.309] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0082.309] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000003" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000003"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76262f03, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x76262f03, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1ce771b3, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x7e9e)) returned 1 [0082.309] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0082.309] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000003" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000003"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000003.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000003.xuy")) returned 1 [0082.310] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000004", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000004", lpFilePart=0x0) returned 0x52 [0082.310] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0082.310] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000004" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000004"), fInfoLevelId=0x0, lpFileInformation=0x218ed60 | out: lpFileInformation=0x218ed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76289ff9, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x76289ff9, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x76289ff9, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x5fcc)) returned 1 [0082.313] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0082.313] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000004", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000004", lpFilePart=0x0) returned 0x52 [0082.313] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0082.313] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000004" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000004"), fInfoLevelId=0x0, lpFileInformation=0x218eeb8 | out: lpFileInformation=0x218eeb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76289ff9, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x76289ff9, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x76289ff9, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x5fcc)) returned 1 [0082.313] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0082.313] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000004", nBufferLength=0x105, lpBuffer=0x3be120, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000004", lpFilePart=0x0) returned 0x52 [0082.313] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0082.313] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000004" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000004"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0082.314] GetFileType (hFile=0x444) returned 0x1 [0082.314] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be570) returned 1 [0082.314] GetFileType (hFile=0x444) returned 0x1 [0082.314] ReadFile (in: hFile=0x444, lpBuffer=0x2191298, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be688, lpOverlapped=0x0 | out: lpBuffer=0x2191298*, lpNumberOfBytesRead=0x3be688*=0x1000, lpOverlapped=0x0) returned 1 [0082.335] CloseHandle (hObject=0x444) returned 1 [0082.335] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000004", nBufferLength=0x105, lpBuffer=0x3be120, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000004", lpFilePart=0x0) returned 0x52 [0082.335] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0082.335] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000004" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000004"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0082.335] GetFileType (hFile=0x444) returned 0x1 [0082.335] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be570) returned 1 [0082.335] GetFileType (hFile=0x444) returned 0x1 [0082.335] WriteFile (in: hFile=0x444, lpBuffer=0x218eff0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be738, lpOverlapped=0x0 | out: lpBuffer=0x218eff0*, lpNumberOfBytesWritten=0x3be738*=0x2000, lpOverlapped=0x0) returned 1 [0082.336] CloseHandle (hObject=0x444) returned 1 [0082.336] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000004", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000004", lpFilePart=0x0) returned 0x52 [0082.336] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000004.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000004.xuy", lpFilePart=0x0) returned 0x56 [0082.336] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0082.336] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000004" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000004"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76289ff9, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x76289ff9, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1cec346d, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x5fcc)) returned 1 [0082.336] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0082.336] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000004" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000004"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000004.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000004.xuy")) returned 1 [0082.337] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000005", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000005", lpFilePart=0x0) returned 0x52 [0082.337] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0082.337] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000005" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000005"), fInfoLevelId=0x0, lpFileInformation=0x220d660 | out: lpFileInformation=0x220d660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76293c6c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x76293c6c, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x76293c6c, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x1139e)) returned 1 [0082.337] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0082.337] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000005", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000005", lpFilePart=0x0) returned 0x52 [0082.337] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0082.337] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000005" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000005"), fInfoLevelId=0x0, lpFileInformation=0x220d7b8 | out: lpFileInformation=0x220d7b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76293c6c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x76293c6c, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x76293c6c, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x1139e)) returned 1 [0082.337] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0082.337] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000005", nBufferLength=0x105, lpBuffer=0x3be120, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000005", lpFilePart=0x0) returned 0x52 [0082.337] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0082.337] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000005" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000005"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0082.338] GetFileType (hFile=0x444) returned 0x1 [0082.338] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be570) returned 1 [0082.338] GetFileType (hFile=0x444) returned 0x1 [0082.338] ReadFile (in: hFile=0x444, lpBuffer=0x220fb98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be688, lpOverlapped=0x0 | out: lpBuffer=0x220fb98*, lpNumberOfBytesRead=0x3be688*=0x1000, lpOverlapped=0x0) returned 1 [0082.352] CloseHandle (hObject=0x444) returned 1 [0082.352] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000005", nBufferLength=0x105, lpBuffer=0x3be120, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000005", lpFilePart=0x0) returned 0x52 [0082.353] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0082.353] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000005" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000005"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0082.353] GetFileType (hFile=0x444) returned 0x1 [0082.353] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be570) returned 1 [0082.353] GetFileType (hFile=0x444) returned 0x1 [0082.353] WriteFile (in: hFile=0x444, lpBuffer=0x220d8f0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be738, lpOverlapped=0x0 | out: lpBuffer=0x220d8f0*, lpNumberOfBytesWritten=0x3be738*=0x2000, lpOverlapped=0x0) returned 1 [0082.353] CloseHandle (hObject=0x444) returned 1 [0082.353] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000005", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000005", lpFilePart=0x0) returned 0x52 [0082.353] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000005.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000005.xuy", lpFilePart=0x0) returned 0x56 [0082.353] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0082.353] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000005" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000005"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76293c6c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x76293c6c, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1cee9be2, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x1139e)) returned 1 [0082.353] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0082.354] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000005" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000005"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000005.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000005.xuy")) returned 1 [0082.354] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000006", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000006", lpFilePart=0x0) returned 0x52 [0082.354] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0082.354] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000006" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000006"), fInfoLevelId=0x0, lpFileInformation=0x228bf60 | out: lpFileInformation=0x228bf60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76be2bc2, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x76be2bc2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x76be52d8, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x16604)) returned 1 [0082.355] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0082.356] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000006", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000006", lpFilePart=0x0) returned 0x52 [0082.356] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0082.356] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000006" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000006"), fInfoLevelId=0x0, lpFileInformation=0x228c0b8 | out: lpFileInformation=0x228c0b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76be2bc2, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x76be2bc2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x76be52d8, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x16604)) returned 1 [0082.356] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0082.356] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000006", nBufferLength=0x105, lpBuffer=0x3be120, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000006", lpFilePart=0x0) returned 0x52 [0082.356] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0082.356] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000006" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000006"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0082.356] GetFileType (hFile=0x444) returned 0x1 [0082.356] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be570) returned 1 [0082.356] GetFileType (hFile=0x444) returned 0x1 [0082.356] ReadFile (in: hFile=0x444, lpBuffer=0x228e498, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be688, lpOverlapped=0x0 | out: lpBuffer=0x228e498*, lpNumberOfBytesRead=0x3be688*=0x1000, lpOverlapped=0x0) returned 1 [0082.376] CloseHandle (hObject=0x444) returned 1 [0082.377] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000006", nBufferLength=0x105, lpBuffer=0x3be120, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000006", lpFilePart=0x0) returned 0x52 [0082.377] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0082.377] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000006" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000006"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0082.377] GetFileType (hFile=0x444) returned 0x1 [0082.377] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be570) returned 1 [0082.377] GetFileType (hFile=0x444) returned 0x1 [0082.377] WriteFile (in: hFile=0x444, lpBuffer=0x228c1f0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be738, lpOverlapped=0x0 | out: lpBuffer=0x228c1f0*, lpNumberOfBytesWritten=0x3be738*=0x2000, lpOverlapped=0x0) returned 1 [0082.377] CloseHandle (hObject=0x444) returned 1 [0082.377] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000006", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000006", lpFilePart=0x0) returned 0x52 [0082.377] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000006.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000006.xuy", lpFilePart=0x0) returned 0x56 [0082.377] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0082.378] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000006" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000006"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76be2bc2, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x76be2bc2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1cf35ab8, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x16604)) returned 1 [0082.378] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0082.378] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000006" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000006"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000006.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000006.xuy")) returned 1 [0082.378] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000007", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000007", lpFilePart=0x0) returned 0x52 [0082.378] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0082.378] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000007" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000007"), fInfoLevelId=0x0, lpFileInformation=0x230a860 | out: lpFileInformation=0x230a860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7711cbb5, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7711cbb5, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7711f2cb, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xe423)) returned 1 [0082.379] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0082.379] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000007", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000007", lpFilePart=0x0) returned 0x52 [0082.379] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0082.379] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000007" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000007"), fInfoLevelId=0x0, lpFileInformation=0x230a9b8 | out: lpFileInformation=0x230a9b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7711cbb5, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7711cbb5, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7711f2cb, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xe423)) returned 1 [0082.379] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0082.379] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000007", nBufferLength=0x105, lpBuffer=0x3be120, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000007", lpFilePart=0x0) returned 0x52 [0082.379] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0082.379] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000007" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000007"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0082.379] GetFileType (hFile=0x444) returned 0x1 [0082.379] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be570) returned 1 [0082.379] GetFileType (hFile=0x444) returned 0x1 [0082.379] ReadFile (in: hFile=0x444, lpBuffer=0x230cd98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be688, lpOverlapped=0x0 | out: lpBuffer=0x230cd98*, lpNumberOfBytesRead=0x3be688*=0x1000, lpOverlapped=0x0) returned 1 [0082.432] CloseHandle (hObject=0x444) returned 1 [0082.433] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000007", nBufferLength=0x105, lpBuffer=0x3be120, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000007", lpFilePart=0x0) returned 0x52 [0082.433] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0082.433] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000007" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000007"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0082.433] GetFileType (hFile=0x444) returned 0x1 [0082.433] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be570) returned 1 [0082.433] GetFileType (hFile=0x444) returned 0x1 [0082.433] WriteFile (in: hFile=0x444, lpBuffer=0x2161640*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be738, lpOverlapped=0x0 | out: lpBuffer=0x2161640*, lpNumberOfBytesWritten=0x3be738*=0x2000, lpOverlapped=0x0) returned 1 [0082.433] CloseHandle (hObject=0x444) returned 1 [0082.433] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000007", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000007", lpFilePart=0x0) returned 0x52 [0082.434] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000007.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000007.xuy", lpFilePart=0x0) returned 0x56 [0082.434] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0082.434] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000007" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000007"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7711cbb5, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7711cbb5, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1cfa83f9, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xe423)) returned 1 [0082.434] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0082.434] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000007" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000007"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000007.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000007.xuy")) returned 1 [0082.434] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000008", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000008", lpFilePart=0x0) returned 0x52 [0082.435] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0082.435] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000008" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000008"), fInfoLevelId=0x0, lpFileInformation=0x2189150 | out: lpFileInformation=0x2189150*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x772d4307, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x772d4307, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x772d6a23, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xe2be)) returned 1 [0082.435] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0082.435] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000008", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000008", lpFilePart=0x0) returned 0x52 [0082.435] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0082.435] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000008" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000008"), fInfoLevelId=0x0, lpFileInformation=0x21892a8 | out: lpFileInformation=0x21892a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x772d4307, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x772d4307, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x772d6a23, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xe2be)) returned 1 [0082.435] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0082.435] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000008", nBufferLength=0x105, lpBuffer=0x3be120, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000008", lpFilePart=0x0) returned 0x52 [0082.435] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0082.435] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000008" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000008"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0082.437] GetFileType (hFile=0x444) returned 0x1 [0082.437] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be570) returned 1 [0082.437] GetFileType (hFile=0x444) returned 0x1 [0082.437] ReadFile (in: hFile=0x444, lpBuffer=0x218b688, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be688, lpOverlapped=0x0 | out: lpBuffer=0x218b688*, lpNumberOfBytesRead=0x3be688*=0x1000, lpOverlapped=0x0) returned 1 [0082.481] CloseHandle (hObject=0x444) returned 1 [0082.605] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000008", nBufferLength=0x105, lpBuffer=0x3be120, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000008", lpFilePart=0x0) returned 0x52 [0082.605] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0082.605] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000008" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000008"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0082.605] GetFileType (hFile=0x444) returned 0x1 [0082.605] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be570) returned 1 [0082.605] GetFileType (hFile=0x444) returned 0x1 [0082.605] WriteFile (in: hFile=0x444, lpBuffer=0x21893e0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be738, lpOverlapped=0x0 | out: lpBuffer=0x21893e0*, lpNumberOfBytesWritten=0x3be738*=0x2000, lpOverlapped=0x0) returned 1 [0082.606] CloseHandle (hObject=0x444) returned 1 [0082.606] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000008", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000008", lpFilePart=0x0) returned 0x52 [0082.606] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000008.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000008.xuy", lpFilePart=0x0) returned 0x56 [0082.606] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0082.606] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000008" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000008"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x772d4307, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x772d4307, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1d14bbbc, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xe2be)) returned 1 [0082.606] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0082.606] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000008" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000008"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000008.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000008.xuy")) returned 1 [0082.607] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000009", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000009", lpFilePart=0x0) returned 0x52 [0082.607] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0082.607] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000009" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000009"), fInfoLevelId=0x0, lpFileInformation=0x2207a50 | out: lpFileInformation=0x2207a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x774eae39, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x774eae39, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x774ed558, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xaf65)) returned 1 [0082.607] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0082.608] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000009", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000009", lpFilePart=0x0) returned 0x52 [0082.608] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0082.608] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000009" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000009"), fInfoLevelId=0x0, lpFileInformation=0x2207ba8 | out: lpFileInformation=0x2207ba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x774eae39, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x774eae39, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x774ed558, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xaf65)) returned 1 [0082.608] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0082.608] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000009", nBufferLength=0x105, lpBuffer=0x3be120, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000009", lpFilePart=0x0) returned 0x52 [0082.608] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0082.608] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000009" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000009"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0082.609] GetFileType (hFile=0x444) returned 0x1 [0082.609] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be570) returned 1 [0082.609] GetFileType (hFile=0x444) returned 0x1 [0082.609] ReadFile (in: hFile=0x444, lpBuffer=0x2209f88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be688, lpOverlapped=0x0 | out: lpBuffer=0x2209f88*, lpNumberOfBytesRead=0x3be688*=0x1000, lpOverlapped=0x0) returned 1 [0082.715] CloseHandle (hObject=0x444) returned 1 [0082.715] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000009", nBufferLength=0x105, lpBuffer=0x3be120, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000009", lpFilePart=0x0) returned 0x52 [0082.715] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0082.715] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000009" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000009"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0082.716] GetFileType (hFile=0x444) returned 0x1 [0082.716] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be570) returned 1 [0082.716] GetFileType (hFile=0x444) returned 0x1 [0082.716] WriteFile (in: hFile=0x444, lpBuffer=0x2207ce0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be738, lpOverlapped=0x0 | out: lpBuffer=0x2207ce0*, lpNumberOfBytesWritten=0x3be738*=0x2000, lpOverlapped=0x0) returned 1 [0082.716] CloseHandle (hObject=0x444) returned 1 [0082.716] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000009", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000009", lpFilePart=0x0) returned 0x52 [0082.716] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000009.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000009.xuy", lpFilePart=0x0) returned 0x56 [0082.716] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0082.716] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000009" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000009"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x774eae39, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x774eae39, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1d256ceb, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xaf65)) returned 1 [0082.717] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0082.717] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000009" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000009"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000009.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000009.xuy")) returned 1 [0082.718] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000a", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000a", lpFilePart=0x0) returned 0x52 [0082.718] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0082.718] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000a" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_00000a"), fInfoLevelId=0x0, lpFileInformation=0x2286350 | out: lpFileInformation=0x2286350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77760d23, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x77760d23, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7776344f, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xa600)) returned 1 [0082.718] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0082.718] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000a", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000a", lpFilePart=0x0) returned 0x52 [0082.718] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0082.718] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000a" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_00000a"), fInfoLevelId=0x0, lpFileInformation=0x22864a8 | out: lpFileInformation=0x22864a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77760d23, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x77760d23, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7776344f, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xa600)) returned 1 [0082.719] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0082.719] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000a", nBufferLength=0x105, lpBuffer=0x3be120, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000a", lpFilePart=0x0) returned 0x52 [0082.719] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0082.719] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000a" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_00000a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0082.719] GetFileType (hFile=0x444) returned 0x1 [0082.719] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be570) returned 1 [0082.720] GetFileType (hFile=0x444) returned 0x1 [0082.720] ReadFile (in: hFile=0x444, lpBuffer=0x2288888, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be688, lpOverlapped=0x0 | out: lpBuffer=0x2288888*, lpNumberOfBytesRead=0x3be688*=0x1000, lpOverlapped=0x0) returned 1 [0082.784] CloseHandle (hObject=0x444) returned 1 [0082.784] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000a", nBufferLength=0x105, lpBuffer=0x3be120, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000a", lpFilePart=0x0) returned 0x52 [0082.784] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0082.784] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000a" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_00000a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0082.784] GetFileType (hFile=0x444) returned 0x1 [0082.784] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be570) returned 1 [0082.785] GetFileType (hFile=0x444) returned 0x1 [0082.785] WriteFile (in: hFile=0x444, lpBuffer=0x22865e0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be738, lpOverlapped=0x0 | out: lpBuffer=0x22865e0*, lpNumberOfBytesWritten=0x3be738*=0x2000, lpOverlapped=0x0) returned 1 [0082.785] CloseHandle (hObject=0x444) returned 1 [0082.785] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000a", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000a", lpFilePart=0x0) returned 0x52 [0082.785] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000a.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000a.xuy", lpFilePart=0x0) returned 0x56 [0082.785] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0082.785] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000a" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_00000a"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77760d23, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x77760d23, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1d3158f8, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xa600)) returned 1 [0082.785] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0082.785] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000a" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_00000a"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000a.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_00000a.xuy")) returned 1 [0082.786] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000b", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000b", lpFilePart=0x0) returned 0x52 [0082.787] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0082.787] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000b" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_00000b"), fInfoLevelId=0x0, lpFileInformation=0x2304c50 | out: lpFileInformation=0x2304c50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79e54833, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x79e54833, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x79e56f52, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xa038)) returned 1 [0082.788] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0082.788] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000b", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000b", lpFilePart=0x0) returned 0x52 [0082.788] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0082.788] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000b" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_00000b"), fInfoLevelId=0x0, lpFileInformation=0x2304da8 | out: lpFileInformation=0x2304da8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79e54833, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x79e54833, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x79e56f52, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xa038)) returned 1 [0082.789] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0082.789] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000b", nBufferLength=0x105, lpBuffer=0x3be120, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000b", lpFilePart=0x0) returned 0x52 [0082.789] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0082.789] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000b" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_00000b"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0082.789] GetFileType (hFile=0x444) returned 0x1 [0082.789] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be570) returned 1 [0082.789] GetFileType (hFile=0x444) returned 0x1 [0082.789] ReadFile (in: hFile=0x444, lpBuffer=0x2307188, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be688, lpOverlapped=0x0 | out: lpBuffer=0x2307188*, lpNumberOfBytesRead=0x3be688*=0x1000, lpOverlapped=0x0) returned 1 [0082.852] CloseHandle (hObject=0x444) returned 1 [0082.852] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000b", nBufferLength=0x105, lpBuffer=0x3be120, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000b", lpFilePart=0x0) returned 0x52 [0082.852] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0082.852] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000b" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_00000b"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0082.852] GetFileType (hFile=0x444) returned 0x1 [0082.853] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be570) returned 1 [0082.853] GetFileType (hFile=0x444) returned 0x1 [0082.853] WriteFile (in: hFile=0x444, lpBuffer=0x2161640*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be738, lpOverlapped=0x0 | out: lpBuffer=0x2161640*, lpNumberOfBytesWritten=0x3be738*=0x2000, lpOverlapped=0x0) returned 1 [0082.853] CloseHandle (hObject=0x444) returned 1 [0082.856] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000b", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000b", lpFilePart=0x0) returned 0x52 [0082.856] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000b.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000b.xuy", lpFilePart=0x0) returned 0x56 [0082.856] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0082.856] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000b" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_00000b"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79e54833, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x79e54833, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1d3ae249, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xa038)) returned 1 [0082.856] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0082.856] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000b" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_00000b"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000b.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_00000b.xuy")) returned 1 [0082.857] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000c", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000c", lpFilePart=0x0) returned 0x52 [0082.857] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0082.857] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000c" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_00000c"), fInfoLevelId=0x0, lpFileInformation=0x2183520 | out: lpFileInformation=0x2183520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79ea032b, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x79ea032b, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x79ea2a5a, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x72b1)) returned 1 [0082.857] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0082.857] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000c", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000c", lpFilePart=0x0) returned 0x52 [0082.857] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0082.857] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000c" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_00000c"), fInfoLevelId=0x0, lpFileInformation=0x2183678 | out: lpFileInformation=0x2183678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79ea032b, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x79ea032b, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x79ea2a5a, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x72b1)) returned 1 [0082.860] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0082.860] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000c", nBufferLength=0x105, lpBuffer=0x3be120, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000c", lpFilePart=0x0) returned 0x52 [0082.860] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0082.860] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000c" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_00000c"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0082.861] GetFileType (hFile=0x444) returned 0x1 [0082.861] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be570) returned 1 [0082.861] GetFileType (hFile=0x444) returned 0x1 [0082.862] ReadFile (in: hFile=0x444, lpBuffer=0x2185a58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be688, lpOverlapped=0x0 | out: lpBuffer=0x2185a58*, lpNumberOfBytesRead=0x3be688*=0x1000, lpOverlapped=0x0) returned 1 [0082.891] CloseHandle (hObject=0x444) returned 1 [0082.891] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000c", nBufferLength=0x105, lpBuffer=0x3be120, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000c", lpFilePart=0x0) returned 0x52 [0082.891] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0082.891] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000c" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_00000c"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0082.892] GetFileType (hFile=0x444) returned 0x1 [0082.892] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be570) returned 1 [0082.892] GetFileType (hFile=0x444) returned 0x1 [0082.892] WriteFile (in: hFile=0x444, lpBuffer=0x21837b0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be738, lpOverlapped=0x0 | out: lpBuffer=0x21837b0*, lpNumberOfBytesWritten=0x3be738*=0x2000, lpOverlapped=0x0) returned 1 [0082.892] CloseHandle (hObject=0x444) returned 1 [0082.892] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000c", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000c", lpFilePart=0x0) returned 0x52 [0082.892] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000c.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000c.xuy", lpFilePart=0x0) returned 0x56 [0082.892] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0082.892] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000c" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_00000c"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79ea032b, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x79ea032b, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1d420a07, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x72b1)) returned 1 [0082.892] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0082.892] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000c" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_00000c"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000c.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_00000c.xuy")) returned 1 [0082.893] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000d", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000d", lpFilePart=0x0) returned 0x52 [0082.893] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0082.893] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000d" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_00000d"), fInfoLevelId=0x0, lpFileInformation=0x2201e20 | out: lpFileInformation=0x2201e20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a116216, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a116216, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7a122551, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xaa4b)) returned 1 [0082.893] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0082.893] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000d", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000d", lpFilePart=0x0) returned 0x52 [0082.893] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0082.893] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000d" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_00000d"), fInfoLevelId=0x0, lpFileInformation=0x2201f78 | out: lpFileInformation=0x2201f78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a116216, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a116216, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7a122551, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xaa4b)) returned 1 [0082.893] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0082.894] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000d", nBufferLength=0x105, lpBuffer=0x3be120, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000d", lpFilePart=0x0) returned 0x52 [0082.894] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0082.894] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000d" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_00000d"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0082.894] GetFileType (hFile=0x444) returned 0x1 [0082.894] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be570) returned 1 [0082.894] GetFileType (hFile=0x444) returned 0x1 [0082.894] ReadFile (in: hFile=0x444, lpBuffer=0x2204358, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be688, lpOverlapped=0x0 | out: lpBuffer=0x2204358*, lpNumberOfBytesRead=0x3be688*=0x1000, lpOverlapped=0x0) returned 1 [0082.909] CloseHandle (hObject=0x444) returned 1 [0082.911] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000d", nBufferLength=0x105, lpBuffer=0x3be120, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000d", lpFilePart=0x0) returned 0x52 [0082.911] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0082.912] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000d" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_00000d"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0082.912] GetFileType (hFile=0x444) returned 0x1 [0082.912] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be570) returned 1 [0082.912] GetFileType (hFile=0x444) returned 0x1 [0082.912] WriteFile (in: hFile=0x444, lpBuffer=0x22020b0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be738, lpOverlapped=0x0 | out: lpBuffer=0x22020b0*, lpNumberOfBytesWritten=0x3be738*=0x2000, lpOverlapped=0x0) returned 1 [0082.912] CloseHandle (hObject=0x444) returned 1 [0082.912] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000d", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000d", lpFilePart=0x0) returned 0x52 [0082.912] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000d.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000d.xuy", lpFilePart=0x0) returned 0x56 [0082.912] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0082.912] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000d" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_00000d"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a116216, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a116216, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1d446af8, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xaa4b)) returned 1 [0082.912] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0082.912] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000d" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_00000d"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000d.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_00000d.xuy")) returned 1 [0082.913] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000e", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000e", lpFilePart=0x0) returned 0x52 [0082.913] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0082.913] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000e" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_00000e"), fInfoLevelId=0x0, lpFileInformation=0x2280720 | out: lpFileInformation=0x2280720*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a13369c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a13369c, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7a13369c, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x8954)) returned 1 [0082.915] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0082.915] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000e", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000e", lpFilePart=0x0) returned 0x52 [0082.915] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0082.915] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000e" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_00000e"), fInfoLevelId=0x0, lpFileInformation=0x2280878 | out: lpFileInformation=0x2280878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a13369c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a13369c, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7a13369c, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x8954)) returned 1 [0082.915] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0082.915] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000e", nBufferLength=0x105, lpBuffer=0x3be120, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000e", lpFilePart=0x0) returned 0x52 [0082.915] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0082.915] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000e" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_00000e"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0082.916] GetFileType (hFile=0x444) returned 0x1 [0082.916] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be570) returned 1 [0082.916] GetFileType (hFile=0x444) returned 0x1 [0082.916] ReadFile (in: hFile=0x444, lpBuffer=0x2282c58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be688, lpOverlapped=0x0 | out: lpBuffer=0x2282c58*, lpNumberOfBytesRead=0x3be688*=0x1000, lpOverlapped=0x0) returned 1 [0082.931] CloseHandle (hObject=0x444) returned 1 [0082.932] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000e", nBufferLength=0x105, lpBuffer=0x3be120, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000e", lpFilePart=0x0) returned 0x52 [0082.932] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0082.932] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000e" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_00000e"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0082.932] GetFileType (hFile=0x444) returned 0x1 [0082.932] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be570) returned 1 [0082.932] GetFileType (hFile=0x444) returned 0x1 [0082.932] WriteFile (in: hFile=0x444, lpBuffer=0x22809b0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be738, lpOverlapped=0x0 | out: lpBuffer=0x22809b0*, lpNumberOfBytesWritten=0x3be738*=0x2000, lpOverlapped=0x0) returned 1 [0082.933] CloseHandle (hObject=0x444) returned 1 [0082.933] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000e", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000e", lpFilePart=0x0) returned 0x52 [0082.933] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000e.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000e.xuy", lpFilePart=0x0) returned 0x56 [0082.933] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0082.933] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000e" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_00000e"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a13369c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a13369c, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1d46cccf, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x8954)) returned 1 [0082.933] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0082.933] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000e" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_00000e"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000e.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_00000e.xuy")) returned 1 [0082.935] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000f", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000f", lpFilePart=0x0) returned 0x52 [0082.935] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0082.935] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000f" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_00000f"), fInfoLevelId=0x0, lpFileInformation=0x22ff020 | out: lpFileInformation=0x22ff020*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b0a44e1, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7b0a44e1, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7b0a44e1, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x1ab2c)) returned 1 [0082.936] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0082.936] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000f", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000f", lpFilePart=0x0) returned 0x52 [0082.936] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0082.936] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000f" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_00000f"), fInfoLevelId=0x0, lpFileInformation=0x22ff178 | out: lpFileInformation=0x22ff178*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b0a44e1, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7b0a44e1, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7b0a44e1, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x1ab2c)) returned 1 [0082.936] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0082.936] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000f", nBufferLength=0x105, lpBuffer=0x3be120, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000f", lpFilePart=0x0) returned 0x52 [0082.936] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0082.936] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000f" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_00000f"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0082.937] GetFileType (hFile=0x444) returned 0x1 [0082.937] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be570) returned 1 [0082.937] GetFileType (hFile=0x444) returned 0x1 [0082.937] ReadFile (in: hFile=0x444, lpBuffer=0x2301558, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be688, lpOverlapped=0x0 | out: lpBuffer=0x2301558*, lpNumberOfBytesRead=0x3be688*=0x1000, lpOverlapped=0x0) returned 1 [0082.985] CloseHandle (hObject=0x444) returned 1 [0082.986] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000f", nBufferLength=0x105, lpBuffer=0x3be120, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000f", lpFilePart=0x0) returned 0x52 [0082.986] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0082.986] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000f" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_00000f"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0082.986] GetFileType (hFile=0x444) returned 0x1 [0082.986] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be570) returned 1 [0082.986] GetFileType (hFile=0x444) returned 0x1 [0082.986] WriteFile (in: hFile=0x444, lpBuffer=0x2161640*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be738, lpOverlapped=0x0 | out: lpBuffer=0x2161640*, lpNumberOfBytesWritten=0x3be738*=0x2000, lpOverlapped=0x0) returned 1 [0082.987] CloseHandle (hObject=0x444) returned 1 [0082.987] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000f", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000f", lpFilePart=0x0) returned 0x52 [0082.987] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000f.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000f.xuy", lpFilePart=0x0) returned 0x56 [0082.987] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0082.987] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000f" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_00000f"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b0a44e1, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7b0a44e1, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1d50579e, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x1ab2c)) returned 1 [0082.987] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0082.987] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000f" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_00000f"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000f.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_00000f.xuy")) returned 1 [0082.988] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000010", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000010", lpFilePart=0x0) returned 0x52 [0082.988] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0082.988] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000010" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000010"), fInfoLevelId=0x0, lpFileInformation=0x217d920 | out: lpFileInformation=0x217d920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b2ebd5f, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7b2ebd5f, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7b2ee47b, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x6b7c)) returned 1 [0082.988] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0082.988] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000010", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000010", lpFilePart=0x0) returned 0x52 [0082.988] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0082.988] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000010" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000010"), fInfoLevelId=0x0, lpFileInformation=0x217da78 | out: lpFileInformation=0x217da78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b2ebd5f, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7b2ebd5f, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7b2ee47b, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x6b7c)) returned 1 [0082.988] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0082.989] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000010", nBufferLength=0x105, lpBuffer=0x3be120, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000010", lpFilePart=0x0) returned 0x52 [0082.989] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0082.989] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000010" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000010"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0082.989] GetFileType (hFile=0x444) returned 0x1 [0082.989] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be570) returned 1 [0082.989] GetFileType (hFile=0x444) returned 0x1 [0082.989] ReadFile (in: hFile=0x444, lpBuffer=0x217fe58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be688, lpOverlapped=0x0 | out: lpBuffer=0x217fe58*, lpNumberOfBytesRead=0x3be688*=0x1000, lpOverlapped=0x0) returned 1 [0083.019] CloseHandle (hObject=0x444) returned 1 [0083.019] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000010", nBufferLength=0x105, lpBuffer=0x3be120, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000010", lpFilePart=0x0) returned 0x52 [0083.019] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0083.019] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000010" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000010"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0083.019] GetFileType (hFile=0x444) returned 0x1 [0083.019] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be570) returned 1 [0083.019] GetFileType (hFile=0x444) returned 0x1 [0083.019] WriteFile (in: hFile=0x444, lpBuffer=0x217dbb0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be738, lpOverlapped=0x0 | out: lpBuffer=0x217dbb0*, lpNumberOfBytesWritten=0x3be738*=0x2000, lpOverlapped=0x0) returned 1 [0083.020] CloseHandle (hObject=0x444) returned 1 [0083.020] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000010", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000010", lpFilePart=0x0) returned 0x52 [0083.020] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000010.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000010.xuy", lpFilePart=0x0) returned 0x56 [0083.020] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0083.020] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000010" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000010"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b2ebd5f, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7b2ebd5f, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1d551f5a, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x6b7c)) returned 1 [0083.020] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0083.020] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000010" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000010"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000010.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000010.xuy")) returned 1 [0083.021] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000011", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000011", lpFilePart=0x0) returned 0x52 [0083.021] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0083.021] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000011" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000011"), fInfoLevelId=0x0, lpFileInformation=0x21fc220 | out: lpFileInformation=0x21fc220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b304414, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7b304414, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7b304414, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xb36a)) returned 1 [0083.023] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0083.023] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000011", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000011", lpFilePart=0x0) returned 0x52 [0083.023] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0083.023] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000011" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000011"), fInfoLevelId=0x0, lpFileInformation=0x21fc378 | out: lpFileInformation=0x21fc378*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b304414, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7b304414, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7b304414, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xb36a)) returned 1 [0083.023] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0083.023] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000011", nBufferLength=0x105, lpBuffer=0x3be120, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000011", lpFilePart=0x0) returned 0x52 [0083.023] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0083.023] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000011" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000011"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0083.024] GetFileType (hFile=0x444) returned 0x1 [0083.024] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be570) returned 1 [0083.024] GetFileType (hFile=0x444) returned 0x1 [0083.024] ReadFile (in: hFile=0x444, lpBuffer=0x21fe758, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be688, lpOverlapped=0x0 | out: lpBuffer=0x21fe758*, lpNumberOfBytesRead=0x3be688*=0x1000, lpOverlapped=0x0) returned 1 [0083.051] CloseHandle (hObject=0x444) returned 1 [0083.051] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000011", nBufferLength=0x105, lpBuffer=0x3be120, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000011", lpFilePart=0x0) returned 0x52 [0083.051] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0083.051] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000011" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000011"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0083.051] GetFileType (hFile=0x444) returned 0x1 [0083.051] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be570) returned 1 [0083.051] GetFileType (hFile=0x444) returned 0x1 [0083.051] WriteFile (in: hFile=0x444, lpBuffer=0x21fc4b0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be738, lpOverlapped=0x0 | out: lpBuffer=0x21fc4b0*, lpNumberOfBytesWritten=0x3be738*=0x2000, lpOverlapped=0x0) returned 1 [0083.052] CloseHandle (hObject=0x444) returned 1 [0083.052] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000011", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000011", lpFilePart=0x0) returned 0x52 [0083.052] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000011.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000011.xuy", lpFilePart=0x0) returned 0x56 [0083.052] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0083.052] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000011" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000011"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b304414, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7b304414, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1d59e549, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xb36a)) returned 1 [0083.052] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0083.052] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000011" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000011"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000011.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000011.xuy")) returned 1 [0083.053] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000012", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000012", lpFilePart=0x0) returned 0x52 [0083.053] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0083.053] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000012" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000012"), fInfoLevelId=0x0, lpFileInformation=0x227ab20 | out: lpFileInformation=0x227ab20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c7d8961, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7c7d8961, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7c7d8961, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x66090)) returned 1 [0083.055] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0083.055] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000012", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000012", lpFilePart=0x0) returned 0x52 [0083.055] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0083.055] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000012" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000012"), fInfoLevelId=0x0, lpFileInformation=0x227ac78 | out: lpFileInformation=0x227ac78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c7d8961, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7c7d8961, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7c7d8961, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x66090)) returned 1 [0083.055] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0083.055] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000012", nBufferLength=0x105, lpBuffer=0x3be120, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000012", lpFilePart=0x0) returned 0x52 [0083.055] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0083.055] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000012" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000012"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0083.056] GetFileType (hFile=0x444) returned 0x1 [0083.056] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be570) returned 1 [0083.056] GetFileType (hFile=0x444) returned 0x1 [0083.056] ReadFile (in: hFile=0x444, lpBuffer=0x227d058, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be688, lpOverlapped=0x0 | out: lpBuffer=0x227d058*, lpNumberOfBytesRead=0x3be688*=0x1000, lpOverlapped=0x0) returned 1 [0083.087] CloseHandle (hObject=0x444) returned 1 [0083.087] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000012", nBufferLength=0x105, lpBuffer=0x3be120, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000012", lpFilePart=0x0) returned 0x52 [0083.087] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0083.087] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000012" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000012"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0083.087] GetFileType (hFile=0x444) returned 0x1 [0083.087] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be570) returned 1 [0083.087] GetFileType (hFile=0x444) returned 0x1 [0083.087] WriteFile (in: hFile=0x444, lpBuffer=0x227adb0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be738, lpOverlapped=0x0 | out: lpBuffer=0x227adb0*, lpNumberOfBytesWritten=0x3be738*=0x2000, lpOverlapped=0x0) returned 1 [0083.088] CloseHandle (hObject=0x444) returned 1 [0083.088] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000012", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000012", lpFilePart=0x0) returned 0x52 [0083.088] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000012.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000012.xuy", lpFilePart=0x0) returned 0x56 [0083.088] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0083.088] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000012" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000012"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c7d8961, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7c7d8961, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1d5ea421, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x66090)) returned 1 [0083.088] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0083.088] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000012" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000012"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000012.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000012.xuy")) returned 1 [0083.089] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000013", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000013", lpFilePart=0x0) returned 0x52 [0083.089] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0083.089] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000013" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000013"), fInfoLevelId=0x0, lpFileInformation=0x22f9420 | out: lpFileInformation=0x22f9420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e51cfbf, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x8e51cfbf, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x8e51f6d8, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x9da7)) returned 1 [0083.089] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0083.090] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000013", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000013", lpFilePart=0x0) returned 0x52 [0083.090] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0083.090] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000013" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000013"), fInfoLevelId=0x0, lpFileInformation=0x22f9578 | out: lpFileInformation=0x22f9578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e51cfbf, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x8e51cfbf, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x8e51f6d8, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x9da7)) returned 1 [0083.090] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0083.090] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000013", nBufferLength=0x105, lpBuffer=0x3be120, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000013", lpFilePart=0x0) returned 0x52 [0083.090] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0083.090] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000013" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000013"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0083.090] GetFileType (hFile=0x444) returned 0x1 [0083.090] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be570) returned 1 [0083.091] GetFileType (hFile=0x444) returned 0x1 [0083.091] ReadFile (in: hFile=0x444, lpBuffer=0x22fb958, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be688, lpOverlapped=0x0 | out: lpBuffer=0x22fb958*, lpNumberOfBytesRead=0x3be688*=0x1000, lpOverlapped=0x0) returned 1 [0083.142] CloseHandle (hObject=0x444) returned 1 [0083.142] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000013", nBufferLength=0x105, lpBuffer=0x3be120, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000013", lpFilePart=0x0) returned 0x52 [0083.142] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0083.142] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000013" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000013"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0083.143] GetFileType (hFile=0x444) returned 0x1 [0083.143] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be570) returned 1 [0083.143] GetFileType (hFile=0x444) returned 0x1 [0083.143] WriteFile (in: hFile=0x444, lpBuffer=0x2161640*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be738, lpOverlapped=0x0 | out: lpBuffer=0x2161640*, lpNumberOfBytesWritten=0x3be738*=0x2000, lpOverlapped=0x0) returned 1 [0083.143] CloseHandle (hObject=0x444) returned 1 [0083.143] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000013", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000013", lpFilePart=0x0) returned 0x52 [0083.143] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000013.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000013.xuy", lpFilePart=0x0) returned 0x56 [0083.143] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0083.143] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000013" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000013"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e51cfbf, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x8e51cfbf, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1d6833d5, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x9da7)) returned 1 [0083.144] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0083.144] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000013" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000013"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000013.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000013.xuy")) returned 1 [0083.145] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000014", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000014", lpFilePart=0x0) returned 0x52 [0083.145] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0083.145] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000014" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000014"), fInfoLevelId=0x0, lpFileInformation=0x2177d10 | out: lpFileInformation=0x2177d10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e797ca4, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x8e797ca4, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x8e79a3b6, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x159cc)) returned 1 [0083.145] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0083.145] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000014", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000014", lpFilePart=0x0) returned 0x52 [0083.145] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0083.145] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000014" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000014"), fInfoLevelId=0x0, lpFileInformation=0x2177e68 | out: lpFileInformation=0x2177e68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e797ca4, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x8e797ca4, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x8e79a3b6, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x159cc)) returned 1 [0083.145] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0083.145] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000014", nBufferLength=0x105, lpBuffer=0x3be120, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000014", lpFilePart=0x0) returned 0x52 [0083.145] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0083.145] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000014" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000014"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0083.146] GetFileType (hFile=0x444) returned 0x1 [0083.146] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be570) returned 1 [0083.146] GetFileType (hFile=0x444) returned 0x1 [0083.146] ReadFile (in: hFile=0x444, lpBuffer=0x217a248, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be688, lpOverlapped=0x0 | out: lpBuffer=0x217a248*, lpNumberOfBytesRead=0x3be688*=0x1000, lpOverlapped=0x0) returned 1 [0083.176] CloseHandle (hObject=0x444) returned 1 [0083.176] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000014", nBufferLength=0x105, lpBuffer=0x3be120, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000014", lpFilePart=0x0) returned 0x52 [0083.176] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0083.176] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000014" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000014"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0083.176] GetFileType (hFile=0x444) returned 0x1 [0083.176] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be570) returned 1 [0083.176] GetFileType (hFile=0x444) returned 0x1 [0083.176] WriteFile (in: hFile=0x444, lpBuffer=0x2177fa0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be738, lpOverlapped=0x0 | out: lpBuffer=0x2177fa0*, lpNumberOfBytesWritten=0x3be738*=0x2000, lpOverlapped=0x0) returned 1 [0083.177] CloseHandle (hObject=0x444) returned 1 [0083.177] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000014", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000014", lpFilePart=0x0) returned 0x52 [0083.177] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000014.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000014.xuy", lpFilePart=0x0) returned 0x56 [0083.177] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0083.177] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000014" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000014"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e797ca4, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x8e797ca4, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1d6cf45a, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x159cc)) returned 1 [0083.177] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0083.177] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000014" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000014"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000014.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000014.xuy")) returned 1 [0083.178] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000015", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000015", lpFilePart=0x0) returned 0x52 [0083.178] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0083.178] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000015" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000015"), fInfoLevelId=0x0, lpFileInformation=0x21f6610 | out: lpFileInformation=0x21f6610*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e7cff19, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x8e7cff19, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x8e7d262c, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x4192)) returned 1 [0083.179] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0083.179] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000015", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000015", lpFilePart=0x0) returned 0x52 [0083.179] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0083.179] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000015" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000015"), fInfoLevelId=0x0, lpFileInformation=0x21f6768 | out: lpFileInformation=0x21f6768*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e7cff19, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x8e7cff19, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x8e7d262c, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x4192)) returned 1 [0083.179] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0083.179] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000015", nBufferLength=0x105, lpBuffer=0x3be120, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000015", lpFilePart=0x0) returned 0x52 [0083.179] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0083.179] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000015" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000015"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0083.180] GetFileType (hFile=0x444) returned 0x1 [0083.180] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be570) returned 1 [0083.180] GetFileType (hFile=0x444) returned 0x1 [0083.180] ReadFile (in: hFile=0x444, lpBuffer=0x21f8b48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be688, lpOverlapped=0x0 | out: lpBuffer=0x21f8b48*, lpNumberOfBytesRead=0x3be688*=0x1000, lpOverlapped=0x0) returned 1 [0083.225] CloseHandle (hObject=0x444) returned 1 [0083.226] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000015", nBufferLength=0x105, lpBuffer=0x3be120, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000015", lpFilePart=0x0) returned 0x52 [0083.226] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0083.226] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000015" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000015"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0083.226] GetFileType (hFile=0x444) returned 0x1 [0083.226] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be570) returned 1 [0083.226] GetFileType (hFile=0x444) returned 0x1 [0083.226] WriteFile (in: hFile=0x444, lpBuffer=0x21f68a0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be738, lpOverlapped=0x0 | out: lpBuffer=0x21f68a0*, lpNumberOfBytesWritten=0x3be738*=0x2000, lpOverlapped=0x0) returned 1 [0083.227] CloseHandle (hObject=0x444) returned 1 [0083.227] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000015", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000015", lpFilePart=0x0) returned 0x52 [0083.227] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000015.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000015.xuy", lpFilePart=0x0) returned 0x56 [0083.227] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0083.227] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000015" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000015"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e7cff19, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x8e7cff19, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1d7448d7, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x4192)) returned 1 [0083.227] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0083.227] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000015" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000015"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000015.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000015.xuy")) returned 1 [0083.228] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000016", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000016", lpFilePart=0x0) returned 0x52 [0083.228] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0083.228] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000016" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000016"), fInfoLevelId=0x0, lpFileInformation=0x2274f10 | out: lpFileInformation=0x2274f10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8eb3041f, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x8eb3041f, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x8eb32b28, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x25f0a)) returned 1 [0083.229] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0083.229] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000016", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000016", lpFilePart=0x0) returned 0x52 [0083.230] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0083.230] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000016" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000016"), fInfoLevelId=0x0, lpFileInformation=0x2275068 | out: lpFileInformation=0x2275068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8eb3041f, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x8eb3041f, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x8eb32b28, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x25f0a)) returned 1 [0083.230] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0083.230] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000016", nBufferLength=0x105, lpBuffer=0x3be120, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000016", lpFilePart=0x0) returned 0x52 [0083.230] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0083.230] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000016" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000016"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0083.230] GetFileType (hFile=0x444) returned 0x1 [0083.231] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be570) returned 1 [0083.231] GetFileType (hFile=0x444) returned 0x1 [0083.231] ReadFile (in: hFile=0x444, lpBuffer=0x2277448, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be688, lpOverlapped=0x0 | out: lpBuffer=0x2277448*, lpNumberOfBytesRead=0x3be688*=0x1000, lpOverlapped=0x0) returned 1 [0083.279] CloseHandle (hObject=0x444) returned 1 [0083.279] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000016", nBufferLength=0x105, lpBuffer=0x3be120, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000016", lpFilePart=0x0) returned 0x52 [0083.279] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0083.279] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000016" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000016"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0083.280] GetFileType (hFile=0x444) returned 0x1 [0083.280] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be570) returned 1 [0083.280] GetFileType (hFile=0x444) returned 0x1 [0083.280] WriteFile (in: hFile=0x444, lpBuffer=0x22751a0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be738, lpOverlapped=0x0 | out: lpBuffer=0x22751a0*, lpNumberOfBytesWritten=0x3be738*=0x2000, lpOverlapped=0x0) returned 1 [0083.280] CloseHandle (hObject=0x444) returned 1 [0083.280] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000016", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000016", lpFilePart=0x0) returned 0x52 [0083.280] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000016.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000016.xuy", lpFilePart=0x0) returned 0x56 [0083.280] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0083.280] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000016" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000016"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8eb3041f, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x8eb3041f, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1d7b7043, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x25f0a)) returned 1 [0083.281] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0083.281] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000016" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000016"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000016.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000016.xuy")) returned 1 [0083.282] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000017", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000017", lpFilePart=0x0) returned 0x52 [0083.282] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0083.282] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000017" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000017"), fInfoLevelId=0x0, lpFileInformation=0x22f3810 | out: lpFileInformation=0x22f3810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ecad221, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x8ecad221, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x8ecaf94d, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xb74d)) returned 1 [0083.282] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0083.282] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000017", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000017", lpFilePart=0x0) returned 0x52 [0083.282] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0083.282] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000017" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000017"), fInfoLevelId=0x0, lpFileInformation=0x22f3968 | out: lpFileInformation=0x22f3968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ecad221, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x8ecad221, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x8ecaf94d, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xb74d)) returned 1 [0083.282] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0083.282] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000017", nBufferLength=0x105, lpBuffer=0x3be120, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000017", lpFilePart=0x0) returned 0x52 [0083.282] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0083.282] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000017" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000017"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0083.283] GetFileType (hFile=0x444) returned 0x1 [0083.283] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be570) returned 1 [0083.283] GetFileType (hFile=0x444) returned 0x1 [0083.283] ReadFile (in: hFile=0x444, lpBuffer=0x22f5d48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be688, lpOverlapped=0x0 | out: lpBuffer=0x22f5d48*, lpNumberOfBytesRead=0x3be688*=0x1000, lpOverlapped=0x0) returned 1 [0083.342] CloseHandle (hObject=0x444) returned 1 [0083.342] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000017", nBufferLength=0x105, lpBuffer=0x3be120, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000017", lpFilePart=0x0) returned 0x52 [0083.342] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0083.342] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000017" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000017"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0083.343] GetFileType (hFile=0x444) returned 0x1 [0083.343] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be570) returned 1 [0083.343] GetFileType (hFile=0x444) returned 0x1 [0083.343] WriteFile (in: hFile=0x444, lpBuffer=0x2161640*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be738, lpOverlapped=0x0 | out: lpBuffer=0x2161640*, lpNumberOfBytesWritten=0x3be738*=0x2000, lpOverlapped=0x0) returned 1 [0083.343] CloseHandle (hObject=0x444) returned 1 [0083.343] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000017", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000017", lpFilePart=0x0) returned 0x52 [0083.344] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000017.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000017.xuy", lpFilePart=0x0) returned 0x56 [0083.344] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0083.344] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000017" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000017"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ecad221, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x8ecad221, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1d84fa7c, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xb74d)) returned 1 [0083.344] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0083.344] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000017" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000017"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000017.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000017.xuy")) returned 1 [0083.345] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000018", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000018", lpFilePart=0x0) returned 0x52 [0083.346] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0083.346] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000018" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000018"), fInfoLevelId=0x0, lpFileInformation=0x21720e0 | out: lpFileInformation=0x21720e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f0a2627, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x8f0a2627, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x8f0a2627, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x10fe0)) returned 1 [0083.346] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0083.346] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000018", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000018", lpFilePart=0x0) returned 0x52 [0083.346] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0083.346] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000018" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000018"), fInfoLevelId=0x0, lpFileInformation=0x2172238 | out: lpFileInformation=0x2172238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f0a2627, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x8f0a2627, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x8f0a2627, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x10fe0)) returned 1 [0083.346] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0083.346] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000018", nBufferLength=0x105, lpBuffer=0x3be120, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000018", lpFilePart=0x0) returned 0x52 [0083.347] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0083.347] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000018" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000018"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0083.348] GetFileType (hFile=0x444) returned 0x1 [0083.348] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be570) returned 1 [0083.348] GetFileType (hFile=0x444) returned 0x1 [0083.348] ReadFile (in: hFile=0x444, lpBuffer=0x2174618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be688, lpOverlapped=0x0 | out: lpBuffer=0x2174618*, lpNumberOfBytesRead=0x3be688*=0x1000, lpOverlapped=0x0) returned 1 [0083.370] CloseHandle (hObject=0x444) returned 1 [0083.370] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000018", nBufferLength=0x105, lpBuffer=0x3be120, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000018", lpFilePart=0x0) returned 0x52 [0083.371] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0083.371] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000018" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000018"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0083.371] GetFileType (hFile=0x444) returned 0x1 [0083.371] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be570) returned 1 [0083.371] GetFileType (hFile=0x444) returned 0x1 [0083.371] WriteFile (in: hFile=0x444, lpBuffer=0x2172370*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be738, lpOverlapped=0x0 | out: lpBuffer=0x2172370*, lpNumberOfBytesWritten=0x3be738*=0x2000, lpOverlapped=0x0) returned 1 [0083.371] CloseHandle (hObject=0x444) returned 1 [0083.372] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000018", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000018", lpFilePart=0x0) returned 0x52 [0083.372] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000018.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000018.xuy", lpFilePart=0x0) returned 0x56 [0083.372] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0083.372] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000018" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000018"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f0a2627, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x8f0a2627, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1d89c501, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x10fe0)) returned 1 [0083.372] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0083.372] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000018" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000018"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000018.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000018.xuy")) returned 1 [0083.373] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001a", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001a", lpFilePart=0x0) returned 0x52 [0083.373] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0083.373] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001a" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_00001a"), fInfoLevelId=0x0, lpFileInformation=0x21f09e0 | out: lpFileInformation=0x21f09e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb74d2847, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb74d2847, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0xb74d4f63, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x12530)) returned 1 [0083.378] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0083.378] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001a", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001a", lpFilePart=0x0) returned 0x52 [0083.378] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0083.378] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001a" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_00001a"), fInfoLevelId=0x0, lpFileInformation=0x21f0b38 | out: lpFileInformation=0x21f0b38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb74d2847, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb74d2847, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0xb74d4f63, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x12530)) returned 1 [0083.378] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0083.378] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001a", nBufferLength=0x105, lpBuffer=0x3be120, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001a", lpFilePart=0x0) returned 0x52 [0083.378] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0083.378] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001a" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_00001a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0083.379] GetFileType (hFile=0x444) returned 0x1 [0083.379] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be570) returned 1 [0083.379] GetFileType (hFile=0x444) returned 0x1 [0083.379] ReadFile (in: hFile=0x444, lpBuffer=0x21f2f18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be688, lpOverlapped=0x0 | out: lpBuffer=0x21f2f18*, lpNumberOfBytesRead=0x3be688*=0x1000, lpOverlapped=0x0) returned 1 [0083.410] CloseHandle (hObject=0x444) returned 1 [0083.410] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001a", nBufferLength=0x105, lpBuffer=0x3be120, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001a", lpFilePart=0x0) returned 0x52 [0083.410] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0083.410] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001a" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_00001a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0083.411] GetFileType (hFile=0x444) returned 0x1 [0083.411] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be570) returned 1 [0083.411] GetFileType (hFile=0x444) returned 0x1 [0083.411] WriteFile (in: hFile=0x444, lpBuffer=0x21f0c70*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be738, lpOverlapped=0x0 | out: lpBuffer=0x21f0c70*, lpNumberOfBytesWritten=0x3be738*=0x2000, lpOverlapped=0x0) returned 1 [0083.411] CloseHandle (hObject=0x444) returned 1 [0083.411] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001a", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001a", lpFilePart=0x0) returned 0x52 [0083.411] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001a.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001a.xuy", lpFilePart=0x0) returned 0x56 [0083.411] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0083.411] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001a" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_00001a"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb74d2847, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb74d2847, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1d90e83e, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x12530)) returned 1 [0083.412] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0083.412] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001a" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_00001a"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001a.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_00001a.xuy")) returned 1 [0083.413] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001b", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001b", lpFilePart=0x0) returned 0x52 [0083.413] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0083.413] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001b" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_00001b"), fInfoLevelId=0x0, lpFileInformation=0x226f2e0 | out: lpFileInformation=0x226f2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb79b706e, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb79b706e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0xb79b97b5, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xe503)) returned 1 [0083.415] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0083.415] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001b", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001b", lpFilePart=0x0) returned 0x52 [0083.415] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0083.415] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001b" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_00001b"), fInfoLevelId=0x0, lpFileInformation=0x226f438 | out: lpFileInformation=0x226f438*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb79b706e, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb79b706e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0xb79b97b5, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xe503)) returned 1 [0083.415] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0083.415] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001b", nBufferLength=0x105, lpBuffer=0x3be120, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001b", lpFilePart=0x0) returned 0x52 [0083.415] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0083.416] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001b" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_00001b"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0083.416] GetFileType (hFile=0x444) returned 0x1 [0083.416] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be570) returned 1 [0083.416] GetFileType (hFile=0x444) returned 0x1 [0083.416] ReadFile (in: hFile=0x444, lpBuffer=0x2271818, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be688, lpOverlapped=0x0 | out: lpBuffer=0x2271818*, lpNumberOfBytesRead=0x3be688*=0x1000, lpOverlapped=0x0) returned 1 [0083.460] CloseHandle (hObject=0x444) returned 1 [0083.460] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001b", nBufferLength=0x105, lpBuffer=0x3be120, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001b", lpFilePart=0x0) returned 0x52 [0083.461] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0083.461] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001b" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_00001b"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0083.461] GetFileType (hFile=0x444) returned 0x1 [0083.461] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be570) returned 1 [0083.461] GetFileType (hFile=0x444) returned 0x1 [0083.461] WriteFile (in: hFile=0x444, lpBuffer=0x226f570*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be738, lpOverlapped=0x0 | out: lpBuffer=0x226f570*, lpNumberOfBytesWritten=0x3be738*=0x2000, lpOverlapped=0x0) returned 1 [0083.461] CloseHandle (hObject=0x444) returned 1 [0083.462] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001b", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001b", lpFilePart=0x0) returned 0x52 [0083.462] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001b.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001b.xuy", lpFilePart=0x0) returned 0x56 [0083.462] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0083.462] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001b" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_00001b"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb79b706e, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb79b706e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1d981f50, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xe503)) returned 1 [0083.462] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0083.462] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001b" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_00001b"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001b.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_00001b.xuy")) returned 1 [0083.463] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001c", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001c", lpFilePart=0x0) returned 0x52 [0083.464] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0083.464] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001c" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_00001c"), fInfoLevelId=0x0, lpFileInformation=0x22edbe0 | out: lpFileInformation=0x22edbe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75c6fab6, ftCreationTime.dwHighDateTime=0x1d2d59f, ftLastAccessTime.dwLowDateTime=0x75c6fab6, ftLastAccessTime.dwHighDateTime=0x1d2d59f, ftLastWriteTime.dwLowDateTime=0x75c721dc, ftLastWriteTime.dwHighDateTime=0x1d2d59f, nFileSizeHigh=0x0, nFileSizeLow=0x4403)) returned 1 [0083.466] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0083.466] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001c", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001c", lpFilePart=0x0) returned 0x52 [0083.466] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0083.466] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001c" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_00001c"), fInfoLevelId=0x0, lpFileInformation=0x22edd38 | out: lpFileInformation=0x22edd38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75c6fab6, ftCreationTime.dwHighDateTime=0x1d2d59f, ftLastAccessTime.dwLowDateTime=0x75c6fab6, ftLastAccessTime.dwHighDateTime=0x1d2d59f, ftLastWriteTime.dwLowDateTime=0x75c721dc, ftLastWriteTime.dwHighDateTime=0x1d2d59f, nFileSizeHigh=0x0, nFileSizeLow=0x4403)) returned 1 [0083.467] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0083.467] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001c", nBufferLength=0x105, lpBuffer=0x3be120, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001c", lpFilePart=0x0) returned 0x52 [0083.467] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0083.467] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001c" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_00001c"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0083.468] GetFileType (hFile=0x444) returned 0x1 [0083.468] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be570) returned 1 [0083.468] GetFileType (hFile=0x444) returned 0x1 [0083.468] ReadFile (in: hFile=0x444, lpBuffer=0x22f0118, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be688, lpOverlapped=0x0 | out: lpBuffer=0x22f0118*, lpNumberOfBytesRead=0x3be688*=0x1000, lpOverlapped=0x0) returned 1 [0083.526] CloseHandle (hObject=0x444) returned 1 [0083.526] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001c", nBufferLength=0x105, lpBuffer=0x3be120, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001c", lpFilePart=0x0) returned 0x52 [0083.527] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0083.527] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001c" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_00001c"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0083.527] GetFileType (hFile=0x444) returned 0x1 [0083.527] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be570) returned 1 [0083.527] GetFileType (hFile=0x444) returned 0x1 [0083.527] WriteFile (in: hFile=0x444, lpBuffer=0x2161640*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be738, lpOverlapped=0x0 | out: lpBuffer=0x2161640*, lpNumberOfBytesWritten=0x3be738*=0x2000, lpOverlapped=0x0) returned 1 [0083.528] CloseHandle (hObject=0x444) returned 1 [0083.528] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001c", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001c", lpFilePart=0x0) returned 0x52 [0083.528] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001c.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001c.xuy", lpFilePart=0x0) returned 0x56 [0083.528] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0083.528] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001c" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_00001c"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75c6fab6, ftCreationTime.dwHighDateTime=0x1d2d59f, ftLastAccessTime.dwLowDateTime=0x75c6fab6, ftLastAccessTime.dwHighDateTime=0x1d2d59f, ftLastWriteTime.dwLowDateTime=0x1da196fe, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x4403)) returned 1 [0083.528] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0083.528] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001c" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_00001c"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001c.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_00001c.xuy")) returned 1 [0083.529] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001d", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001d", lpFilePart=0x0) returned 0x52 [0083.529] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0083.529] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001d" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_00001d"), fInfoLevelId=0x0, lpFileInformation=0x216c4e0 | out: lpFileInformation=0x216c4e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76073958, ftCreationTime.dwHighDateTime=0x1d2d59f, ftLastAccessTime.dwLowDateTime=0x76073958, ftLastAccessTime.dwHighDateTime=0x1d2d59f, ftLastWriteTime.dwLowDateTime=0x76076023, ftLastWriteTime.dwHighDateTime=0x1d2d59f, nFileSizeHigh=0x0, nFileSizeLow=0x10314)) returned 1 [0083.533] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0083.533] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001d", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001d", lpFilePart=0x0) returned 0x52 [0083.533] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0083.533] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001d" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_00001d"), fInfoLevelId=0x0, lpFileInformation=0x216c638 | out: lpFileInformation=0x216c638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76073958, ftCreationTime.dwHighDateTime=0x1d2d59f, ftLastAccessTime.dwLowDateTime=0x76073958, ftLastAccessTime.dwHighDateTime=0x1d2d59f, ftLastWriteTime.dwLowDateTime=0x76076023, ftLastWriteTime.dwHighDateTime=0x1d2d59f, nFileSizeHigh=0x0, nFileSizeLow=0x10314)) returned 1 [0083.533] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0083.533] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001d", nBufferLength=0x105, lpBuffer=0x3be120, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001d", lpFilePart=0x0) returned 0x52 [0083.534] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0083.534] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001d" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_00001d"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0083.534] GetFileType (hFile=0x444) returned 0x1 [0083.534] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be570) returned 1 [0083.534] GetFileType (hFile=0x444) returned 0x1 [0083.535] ReadFile (in: hFile=0x444, lpBuffer=0x216ea18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be688, lpOverlapped=0x0 | out: lpBuffer=0x216ea18*, lpNumberOfBytesRead=0x3be688*=0x1000, lpOverlapped=0x0) returned 1 [0083.587] CloseHandle (hObject=0x444) returned 1 [0083.587] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001d", nBufferLength=0x105, lpBuffer=0x3be120, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001d", lpFilePart=0x0) returned 0x52 [0083.587] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0083.587] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001d" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_00001d"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0083.587] GetFileType (hFile=0x444) returned 0x1 [0083.587] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be570) returned 1 [0083.587] GetFileType (hFile=0x444) returned 0x1 [0083.587] WriteFile (in: hFile=0x444, lpBuffer=0x216c770*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be738, lpOverlapped=0x0 | out: lpBuffer=0x216c770*, lpNumberOfBytesWritten=0x3be738*=0x2000, lpOverlapped=0x0) returned 1 [0083.588] CloseHandle (hObject=0x444) returned 1 [0083.588] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001d", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001d", lpFilePart=0x0) returned 0x52 [0083.588] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001d.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001d.xuy", lpFilePart=0x0) returned 0x56 [0083.588] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0083.588] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001d" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_00001d"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76073958, ftCreationTime.dwHighDateTime=0x1d2d59f, ftLastAccessTime.dwLowDateTime=0x76073958, ftLastAccessTime.dwHighDateTime=0x1d2d59f, ftLastWriteTime.dwLowDateTime=0x1dab2019, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x10314)) returned 1 [0083.588] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0083.588] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001d" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_00001d"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001d.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_00001d.xuy")) returned 1 [0083.591] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001e", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001e", lpFilePart=0x0) returned 0x52 [0083.591] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0083.591] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001e" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_00001e"), fInfoLevelId=0x0, lpFileInformation=0x21eade0 | out: lpFileInformation=0x21eade0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76466600, ftCreationTime.dwHighDateTime=0x1d2d59f, ftLastAccessTime.dwLowDateTime=0x76466600, ftLastAccessTime.dwHighDateTime=0x1d2d59f, ftLastWriteTime.dwLowDateTime=0x76468d0f, ftLastWriteTime.dwHighDateTime=0x1d2d59f, nFileSizeHigh=0x0, nFileSizeLow=0xe425)) returned 1 [0083.597] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0083.597] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001e", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001e", lpFilePart=0x0) returned 0x52 [0083.597] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0083.598] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001e" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_00001e"), fInfoLevelId=0x0, lpFileInformation=0x21eaf38 | out: lpFileInformation=0x21eaf38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76466600, ftCreationTime.dwHighDateTime=0x1d2d59f, ftLastAccessTime.dwLowDateTime=0x76466600, ftLastAccessTime.dwHighDateTime=0x1d2d59f, ftLastWriteTime.dwLowDateTime=0x76468d0f, ftLastWriteTime.dwHighDateTime=0x1d2d59f, nFileSizeHigh=0x0, nFileSizeLow=0xe425)) returned 1 [0083.598] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0083.598] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001e", nBufferLength=0x105, lpBuffer=0x3be120, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001e", lpFilePart=0x0) returned 0x52 [0083.598] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0083.598] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001e" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_00001e"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0083.599] GetFileType (hFile=0x444) returned 0x1 [0083.599] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be570) returned 1 [0083.599] GetFileType (hFile=0x444) returned 0x1 [0083.599] ReadFile (in: hFile=0x444, lpBuffer=0x21ed318, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be688, lpOverlapped=0x0 | out: lpBuffer=0x21ed318*, lpNumberOfBytesRead=0x3be688*=0x1000, lpOverlapped=0x0) returned 1 [0083.636] CloseHandle (hObject=0x444) returned 1 [0083.636] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001e", nBufferLength=0x105, lpBuffer=0x3be120, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001e", lpFilePart=0x0) returned 0x52 [0083.636] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0083.636] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001e" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_00001e"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0083.637] GetFileType (hFile=0x444) returned 0x1 [0083.637] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be570) returned 1 [0083.637] GetFileType (hFile=0x444) returned 0x1 [0083.637] WriteFile (in: hFile=0x444, lpBuffer=0x21eb070*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be738, lpOverlapped=0x0 | out: lpBuffer=0x21eb070*, lpNumberOfBytesWritten=0x3be738*=0x2000, lpOverlapped=0x0) returned 1 [0083.637] CloseHandle (hObject=0x444) returned 1 [0083.637] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001e", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001e", lpFilePart=0x0) returned 0x52 [0083.637] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001e.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001e.xuy", lpFilePart=0x0) returned 0x56 [0083.637] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0083.638] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001e" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_00001e"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76466600, ftCreationTime.dwHighDateTime=0x1d2d59f, ftLastAccessTime.dwLowDateTime=0x76466600, ftLastAccessTime.dwHighDateTime=0x1d2d59f, ftLastWriteTime.dwLowDateTime=0x1db24726, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xe425)) returned 1 [0083.638] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0083.638] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001e" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_00001e"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001e.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_00001e.xuy")) returned 1 [0083.639] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001f", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001f", lpFilePart=0x0) returned 0x52 [0083.639] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0083.639] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001f" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_00001f"), fInfoLevelId=0x0, lpFileInformation=0x22696e0 | out: lpFileInformation=0x22696e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x768ce617, ftCreationTime.dwHighDateTime=0x1d2d59f, ftLastAccessTime.dwLowDateTime=0x768ce617, ftLastAccessTime.dwHighDateTime=0x1d2d59f, ftLastWriteTime.dwLowDateTime=0x768d5b68, ftLastWriteTime.dwHighDateTime=0x1d2d59f, nFileSizeHigh=0x0, nFileSizeLow=0xaf65)) returned 1 [0083.639] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0083.639] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001f", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001f", lpFilePart=0x0) returned 0x52 [0083.639] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0083.640] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001f" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_00001f"), fInfoLevelId=0x0, lpFileInformation=0x2269838 | out: lpFileInformation=0x2269838*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x768ce617, ftCreationTime.dwHighDateTime=0x1d2d59f, ftLastAccessTime.dwLowDateTime=0x768ce617, ftLastAccessTime.dwHighDateTime=0x1d2d59f, ftLastWriteTime.dwLowDateTime=0x768d5b68, ftLastWriteTime.dwHighDateTime=0x1d2d59f, nFileSizeHigh=0x0, nFileSizeLow=0xaf65)) returned 1 [0083.640] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0083.640] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001f", nBufferLength=0x105, lpBuffer=0x3be120, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001f", lpFilePart=0x0) returned 0x52 [0083.640] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0083.640] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001f" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_00001f"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0083.641] GetFileType (hFile=0x444) returned 0x1 [0083.641] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be570) returned 1 [0083.641] GetFileType (hFile=0x444) returned 0x1 [0083.641] ReadFile (in: hFile=0x444, lpBuffer=0x226bc18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be688, lpOverlapped=0x0 | out: lpBuffer=0x226bc18*, lpNumberOfBytesRead=0x3be688*=0x1000, lpOverlapped=0x0) returned 1 [0083.758] CloseHandle (hObject=0x444) returned 1 [0083.758] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001f", nBufferLength=0x105, lpBuffer=0x3be120, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001f", lpFilePart=0x0) returned 0x52 [0083.758] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0083.758] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001f" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_00001f"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0083.759] GetFileType (hFile=0x444) returned 0x1 [0083.759] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be570) returned 1 [0083.759] GetFileType (hFile=0x444) returned 0x1 [0083.759] WriteFile (in: hFile=0x444, lpBuffer=0x2269970*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be738, lpOverlapped=0x0 | out: lpBuffer=0x2269970*, lpNumberOfBytesWritten=0x3be738*=0x2000, lpOverlapped=0x0) returned 1 [0083.759] CloseHandle (hObject=0x444) returned 1 [0083.759] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001f", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001f", lpFilePart=0x0) returned 0x52 [0083.759] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001f.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001f.xuy", lpFilePart=0x0) returned 0x56 [0083.759] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0083.759] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001f" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_00001f"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x768ce617, ftCreationTime.dwHighDateTime=0x1d2d59f, ftLastAccessTime.dwLowDateTime=0x768ce617, ftLastAccessTime.dwHighDateTime=0x1d2d59f, ftLastWriteTime.dwLowDateTime=0x1dc558fe, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xaf65)) returned 1 [0083.759] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0083.759] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001f" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_00001f"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001f.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_00001f.xuy")) returned 1 [0083.760] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\index", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\index", lpFilePart=0x0) returned 0x4f [0083.761] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0083.761] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\index" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\index"), fInfoLevelId=0x0, lpFileInformation=0x22e7fe0 | out: lpFileInformation=0x22e7fe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72056acc, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x72056acc, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7210191a, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x80170)) returned 1 [0083.761] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0083.761] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\index", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\index", lpFilePart=0x0) returned 0x4f [0083.761] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0083.761] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\index" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\index"), fInfoLevelId=0x0, lpFileInformation=0x22e8128 | out: lpFileInformation=0x22e8128*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72056acc, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x72056acc, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7210191a, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x80170)) returned 1 [0083.761] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0083.761] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\index", nBufferLength=0x105, lpBuffer=0x3be120, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\index", lpFilePart=0x0) returned 0x4f [0083.761] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0083.761] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\index" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\index"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0083.762] GetFileType (hFile=0x444) returned 0x1 [0083.762] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be570) returned 1 [0083.762] GetFileType (hFile=0x444) returned 0x1 [0083.762] ReadFile (in: hFile=0x444, lpBuffer=0x22ea4e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be688, lpOverlapped=0x0 | out: lpBuffer=0x22ea4e8*, lpNumberOfBytesRead=0x3be688*=0x1000, lpOverlapped=0x0) returned 1 [0083.817] CloseHandle (hObject=0x444) returned 1 [0083.818] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\index", nBufferLength=0x105, lpBuffer=0x3be120, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\index", lpFilePart=0x0) returned 0x4f [0083.818] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0083.818] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\index" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\index"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0083.818] GetFileType (hFile=0x444) returned 0x1 [0083.818] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be570) returned 1 [0083.818] GetFileType (hFile=0x444) returned 0x1 [0083.818] WriteFile (in: hFile=0x444, lpBuffer=0x22e8250*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be738, lpOverlapped=0x0 | out: lpBuffer=0x22e8250*, lpNumberOfBytesWritten=0x3be738*=0x2000, lpOverlapped=0x0) returned 1 [0083.819] CloseHandle (hObject=0x444) returned 1 [0083.819] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\index", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\index", lpFilePart=0x0) returned 0x4f [0083.819] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\index.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\index.xuy", lpFilePart=0x0) returned 0x53 [0083.819] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0083.819] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\index" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\index"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72056acc, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x72056acc, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1dcee3f0, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x80170)) returned 1 [0083.819] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0083.819] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\index" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\index"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\index.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\index.xuy")) returned 1 [0083.820] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0083.820] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\databases", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\databases", lpFilePart=0x0) returned 0x4d [0083.820] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\databases\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\databases\\", lpFilePart=0x0) returned 0x4e [0083.824] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\databases\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d79d0 [0083.826] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0083.826] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0083.826] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0083.826] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0083.827] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0083.827] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0083.827] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0083.827] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0083.827] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\databases", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\databases", lpFilePart=0x0) returned 0x4d [0083.827] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\databases\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\databases\\", lpFilePart=0x0) returned 0x4e [0083.827] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\databases\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d7c70 [0083.827] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0083.828] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0083.828] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0083.828] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0083.829] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0083.829] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0083.829] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0083.829] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\databases\\Databases.db", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\databases\\Databases.db", lpFilePart=0x0) returned 0x5a [0083.829] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0083.829] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\databases\\Databases.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\databases\\databases.db"), fInfoLevelId=0x0, lpFileInformation=0x2161e20 | out: lpFileInformation=0x2161e20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d46f718, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7d46f718, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7d574b04, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x1c00)) returned 1 [0083.829] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0083.829] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\databases\\Databases.db", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\databases\\Databases.db", lpFilePart=0x0) returned 0x5a [0083.829] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0083.829] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\databases\\Databases.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\databases\\databases.db"), fInfoLevelId=0x0, lpFileInformation=0x2161f90 | out: lpFileInformation=0x2161f90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d46f718, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7d46f718, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7d574b04, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x1c00)) returned 1 [0083.829] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0083.830] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\databases\\Databases.db", nBufferLength=0x105, lpBuffer=0x3be120, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\databases\\Databases.db", lpFilePart=0x0) returned 0x5a [0083.830] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0083.830] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\databases\\Databases.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\databases\\databases.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0083.830] GetFileType (hFile=0x444) returned 0x1 [0083.831] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be570) returned 1 [0083.831] GetFileType (hFile=0x444) returned 0x1 [0083.831] ReadFile (in: hFile=0x444, lpBuffer=0x21643a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be688, lpOverlapped=0x0 | out: lpBuffer=0x21643a0*, lpNumberOfBytesRead=0x3be688*=0x1000, lpOverlapped=0x0) returned 1 [0083.889] CloseHandle (hObject=0x444) returned 1 [0083.889] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\databases\\Databases.db", nBufferLength=0x105, lpBuffer=0x3be120, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\databases\\Databases.db", lpFilePart=0x0) returned 0x5a [0083.889] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0083.889] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\databases\\Databases.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\databases\\databases.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0083.889] GetFileType (hFile=0x444) returned 0x1 [0083.889] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be570) returned 1 [0083.889] GetFileType (hFile=0x444) returned 0x1 [0083.890] WriteFile (in: hFile=0x444, lpBuffer=0x21620e0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be738, lpOverlapped=0x0 | out: lpBuffer=0x21620e0*, lpNumberOfBytesWritten=0x3be738*=0x2000, lpOverlapped=0x0) returned 1 [0083.890] CloseHandle (hObject=0x444) returned 1 [0083.892] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\databases\\Databases.db", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\databases\\Databases.db", lpFilePart=0x0) returned 0x5a [0083.892] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\databases\\Databases.db.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\databases\\Databases.db.xuy", lpFilePart=0x0) returned 0x5e [0083.892] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0083.892] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\databases\\Databases.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\databases\\databases.db"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d46f718, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7d46f718, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1dd872c4, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0083.892] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0083.893] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\databases\\Databases.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\databases\\databases.db"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\databases\\Databases.db.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\databases\\databases.db.xuy")) returned 1 [0083.894] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\databases\\Databases.db-journal", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\databases\\Databases.db-journal", lpFilePart=0x0) returned 0x62 [0083.894] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0083.894] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\databases\\Databases.db-journal" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\databases\\databases.db-journal"), fInfoLevelId=0x0, lpFileInformation=0x21e07e0 | out: lpFileInformation=0x21e07e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d46f718, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7d46f718, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7d5a314e, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0083.894] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0083.894] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\databases\\Databases.db-journal", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\databases\\Databases.db-journal", lpFilePart=0x0) returned 0x62 [0083.894] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0083.894] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\databases\\Databases.db-journal" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\databases\\databases.db-journal"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0083.894] GetFileType (hFile=0x444) returned 0x1 [0083.895] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0083.895] GetFileType (hFile=0x444) returned 0x1 [0083.895] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be708 | out: lpFileSizeHigh=0x3be708*=0x0) returned 0x0 [0083.895] CloseHandle (hObject=0x444) returned 1 [0083.911] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\databases\\Databases.db-journal", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\databases\\Databases.db-journal", lpFilePart=0x0) returned 0x62 [0083.911] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0083.912] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\databases\\Databases.db-journal" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\databases\\databases.db-journal"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0083.913] GetFileType (hFile=0x444) returned 0x1 [0083.913] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0083.913] GetFileType (hFile=0x444) returned 0x1 [0083.913] WriteFile (in: hFile=0x444, lpBuffer=0x2256c48*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x3be548, lpOverlapped=0x0 | out: lpBuffer=0x2256c48*, lpNumberOfBytesWritten=0x3be548*=0x10, lpOverlapped=0x0) returned 1 [0083.914] CloseHandle (hObject=0x444) returned 1 [0083.914] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\databases\\Databases.db-journal", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\databases\\Databases.db-journal", lpFilePart=0x0) returned 0x62 [0083.914] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\databases\\Databases.db-journal.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\databases\\Databases.db-journal.xuy", lpFilePart=0x0) returned 0x66 [0083.914] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0083.914] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\databases\\Databases.db-journal" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\databases\\databases.db-journal"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d46f718, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7d46f718, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1ddd31cf, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0083.914] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0083.914] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\databases\\Databases.db-journal" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\databases\\databases.db-journal"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\databases\\Databases.db-journal.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\databases\\databases.db-journal.xuy")) returned 1 [0083.915] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0083.915] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb", lpFilePart=0x0) returned 0x60 [0083.916] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\", lpFilePart=0x0) returned 0x61 [0083.916] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d7e50 [0083.926] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0083.927] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0083.927] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0083.927] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0083.927] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0083.927] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0083.927] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0083.927] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0083.928] FindClose (in: hFindFile=0x5d7e50 | out: hFindFile=0x5d7e50) returned 1 [0083.928] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0083.928] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0083.929] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0083.929] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb", lpFilePart=0x0) returned 0x60 [0083.929] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\", lpFilePart=0x0) returned 0x61 [0083.929] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d7d90 [0083.930] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0083.930] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0083.930] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0083.931] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0083.931] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0083.931] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0083.931] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0083.931] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0083.932] FindClose (in: hFindFile=0x5d7d90 | out: hFindFile=0x5d7d90) returned 1 [0083.933] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0083.933] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0083.933] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\000003.log", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\000003.log", lpFilePart=0x0) returned 0x6b [0083.933] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0083.933] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\000003.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\000003.log"), fInfoLevelId=0x0, lpFileInformation=0x225bcb0 | out: lpFileInformation=0x225bcb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x714dd573, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x714dd573, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x714dd573, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0083.936] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0083.936] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\000003.log", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\000003.log", lpFilePart=0x0) returned 0x6b [0083.936] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0083.936] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\000003.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\000003.log"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0083.936] GetFileType (hFile=0x444) returned 0x1 [0083.936] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0083.936] GetFileType (hFile=0x444) returned 0x1 [0083.937] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be708 | out: lpFileSizeHigh=0x3be708*=0x0) returned 0x0 [0083.937] CloseHandle (hObject=0x444) returned 1 [0083.957] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\000003.log", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\000003.log", lpFilePart=0x0) returned 0x6b [0083.957] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0083.957] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\000003.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\000003.log"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0083.958] GetFileType (hFile=0x444) returned 0x1 [0083.958] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0083.958] GetFileType (hFile=0x444) returned 0x1 [0083.958] WriteFile (in: hFile=0x444, lpBuffer=0x22d2100*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x3be548, lpOverlapped=0x0 | out: lpBuffer=0x22d2100*, lpNumberOfBytesWritten=0x3be548*=0x10, lpOverlapped=0x0) returned 1 [0083.959] CloseHandle (hObject=0x444) returned 1 [0083.959] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\000003.log", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\000003.log", lpFilePart=0x0) returned 0x6b [0083.959] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\000003.log.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\000003.log.xuy", lpFilePart=0x0) returned 0x6f [0083.959] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0083.959] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\000003.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\000003.log"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x714dd573, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x714dd573, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1de48eb0, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0083.960] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0083.960] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\000003.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\000003.log"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\000003.log.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\000003.log.xuy")) returned 1 [0083.961] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\CURRENT", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\CURRENT", lpFilePart=0x0) returned 0x68 [0083.961] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0083.961] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\CURRENT" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\current"), fInfoLevelId=0x0, lpFileInformation=0x22d3418 | out: lpFileInformation=0x22d3418*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7141e9ad, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7141e9ad, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7141e9ad, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0083.961] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0083.961] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\CURRENT", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\CURRENT", lpFilePart=0x0) returned 0x68 [0083.961] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0083.961] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\CURRENT" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\current"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0083.961] GetFileType (hFile=0x444) returned 0x1 [0083.961] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0083.961] GetFileType (hFile=0x444) returned 0x1 [0083.961] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be708 | out: lpFileSizeHigh=0x3be708*=0x0) returned 0x10 [0083.962] ReadFile (in: hFile=0x444, lpBuffer=0x22d3740, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be638, lpOverlapped=0x0 | out: lpBuffer=0x22d3740*, lpNumberOfBytesRead=0x3be638*=0x10, lpOverlapped=0x0) returned 1 [0083.963] CloseHandle (hObject=0x444) returned 1 [0083.982] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\CURRENT", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\CURRENT", lpFilePart=0x0) returned 0x68 [0083.982] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0083.983] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\CURRENT" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\current"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0083.985] GetFileType (hFile=0x444) returned 0x1 [0083.985] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0083.985] GetFileType (hFile=0x444) returned 0x1 [0083.985] WriteFile (in: hFile=0x444, lpBuffer=0x234a8b0*, nNumberOfBytesToWrite=0x20, lpNumberOfBytesWritten=0x3be548, lpOverlapped=0x0 | out: lpBuffer=0x234a8b0*, lpNumberOfBytesWritten=0x3be548*=0x20, lpOverlapped=0x0) returned 1 [0083.986] CloseHandle (hObject=0x444) returned 1 [0083.987] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\CURRENT", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\CURRENT", lpFilePart=0x0) returned 0x68 [0083.987] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\CURRENT.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\CURRENT.xuy", lpFilePart=0x0) returned 0x6c [0083.987] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0083.987] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\CURRENT" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\current"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7141e9ad, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7141e9ad, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1de91e40, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x20)) returned 1 [0083.987] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0083.987] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\CURRENT" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\current"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\CURRENT.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\current.xuy")) returned 1 [0083.988] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOCK", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOCK", lpFilePart=0x0) returned 0x65 [0083.988] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0083.988] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOCK" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\lock"), fInfoLevelId=0x0, lpFileInformation=0x234bbc8 | out: lpFileInformation=0x234bbc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7141e9ad, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7141e9ad, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7141e9ad, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0083.989] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0083.989] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOCK", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOCK", lpFilePart=0x0) returned 0x65 [0083.989] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0083.989] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOCK" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\lock"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0083.989] GetFileType (hFile=0x444) returned 0x1 [0083.989] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0083.989] GetFileType (hFile=0x444) returned 0x1 [0083.989] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be708 | out: lpFileSizeHigh=0x3be708*=0x0) returned 0x0 [0083.989] CloseHandle (hObject=0x444) returned 1 [0084.061] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOCK", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOCK", lpFilePart=0x0) returned 0x65 [0084.061] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0084.061] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOCK" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\lock"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0084.063] GetFileType (hFile=0x444) returned 0x1 [0084.063] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0084.063] GetFileType (hFile=0x444) returned 0x1 [0084.063] WriteFile (in: hFile=0x444, lpBuffer=0x21c28f0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x3be548, lpOverlapped=0x0 | out: lpBuffer=0x21c28f0*, lpNumberOfBytesWritten=0x3be548*=0x10, lpOverlapped=0x0) returned 1 [0084.065] CloseHandle (hObject=0x444) returned 1 [0084.065] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOCK", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOCK", lpFilePart=0x0) returned 0x65 [0084.065] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOCK.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOCK.xuy", lpFilePart=0x0) returned 0x69 [0084.065] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0084.065] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOCK" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\lock"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7141e9ad, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7141e9ad, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1df519a6, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0084.065] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0084.066] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOCK" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\lock"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOCK.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\lock.xuy")) returned 1 [0084.067] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOG", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOG", lpFilePart=0x0) returned 0x64 [0084.067] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0084.067] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOG" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\log"), fInfoLevelId=0x0, lpFileInformation=0x21c3bf0 | out: lpFileInformation=0x21c3bf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7141e9ad, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x74c69a3a, ftLastAccessTime.dwHighDateTime=0x1d2d59f, ftLastWriteTime.dwLowDateTime=0x7553c513, ftLastWriteTime.dwHighDateTime=0x1d2d59f, nFileSizeHigh=0x0, nFileSizeLow=0x168)) returned 1 [0084.069] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0084.069] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOG", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOG", lpFilePart=0x0) returned 0x64 [0084.069] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0084.069] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOG" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\log"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0084.069] GetFileType (hFile=0x444) returned 0x1 [0084.069] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0084.069] GetFileType (hFile=0x444) returned 0x1 [0084.070] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be708 | out: lpFileSizeHigh=0x3be708*=0x0) returned 0x168 [0084.070] ReadFile (in: hFile=0x444, lpBuffer=0x21c4050, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be638, lpOverlapped=0x0 | out: lpBuffer=0x21c4050*, lpNumberOfBytesRead=0x3be638*=0x168, lpOverlapped=0x0) returned 1 [0084.071] CloseHandle (hObject=0x444) returned 1 [0084.090] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOG", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOG", lpFilePart=0x0) returned 0x64 [0084.090] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0084.090] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOG" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\log"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0084.092] GetFileType (hFile=0x444) returned 0x1 [0084.092] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0084.092] GetFileType (hFile=0x444) returned 0x1 [0084.092] WriteFile (in: hFile=0x444, lpBuffer=0x223b780*, nNumberOfBytesToWrite=0x170, lpNumberOfBytesWritten=0x3be548, lpOverlapped=0x0 | out: lpBuffer=0x223b780*, lpNumberOfBytesWritten=0x3be548*=0x170, lpOverlapped=0x0) returned 1 [0084.095] CloseHandle (hObject=0x444) returned 1 [0084.095] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOG", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOG", lpFilePart=0x0) returned 0x64 [0084.095] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOG.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOG.xuy", lpFilePart=0x0) returned 0x68 [0084.095] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0084.095] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOG" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\log"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7141e9ad, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x74c69a3a, ftLastAccessTime.dwHighDateTime=0x1d2d59f, ftLastWriteTime.dwLowDateTime=0x1df9ce01, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x170)) returned 1 [0084.096] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0084.096] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOG" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\log"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOG.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\log.xuy")) returned 1 [0084.097] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOG.old", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOG.old", lpFilePart=0x0) returned 0x68 [0084.097] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0084.097] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOG.old" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\log.old"), fInfoLevelId=0x0, lpFileInformation=0x223caa8 | out: lpFileInformation=0x223caa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7141e9ad, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xbf38cf6c, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0xbff315b3, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x168)) returned 1 [0084.097] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0084.097] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOG.old", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOG.old", lpFilePart=0x0) returned 0x68 [0084.097] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0084.097] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOG.old" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\log.old"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0084.098] GetFileType (hFile=0x444) returned 0x1 [0084.098] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0084.098] GetFileType (hFile=0x444) returned 0x1 [0084.098] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be708 | out: lpFileSizeHigh=0x3be708*=0x0) returned 0x168 [0084.098] ReadFile (in: hFile=0x444, lpBuffer=0x223cf28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be638, lpOverlapped=0x0 | out: lpBuffer=0x223cf28*, lpNumberOfBytesRead=0x3be638*=0x168, lpOverlapped=0x0) returned 1 [0084.100] CloseHandle (hObject=0x444) returned 1 [0084.118] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOG.old", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOG.old", lpFilePart=0x0) returned 0x68 [0084.118] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0084.118] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOG.old" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\log.old"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0084.121] GetFileType (hFile=0x444) returned 0x1 [0084.121] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0084.121] GetFileType (hFile=0x444) returned 0x1 [0084.121] WriteFile (in: hFile=0x444, lpBuffer=0x22b4668*, nNumberOfBytesToWrite=0x170, lpNumberOfBytesWritten=0x3be548, lpOverlapped=0x0 | out: lpBuffer=0x22b4668*, lpNumberOfBytesWritten=0x3be548*=0x170, lpOverlapped=0x0) returned 1 [0084.122] CloseHandle (hObject=0x444) returned 1 [0084.122] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOG.old", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOG.old", lpFilePart=0x0) returned 0x68 [0084.122] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOG.old.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOG.old.xuy", lpFilePart=0x0) returned 0x6c [0084.122] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0084.122] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOG.old" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\log.old"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7141e9ad, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xbf38cf6c, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1dfc30c3, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x170)) returned 1 [0084.123] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0084.123] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOG.old" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\log.old"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOG.old.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\log.old.xuy")) returned 1 [0084.125] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\MANIFEST-000001", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\MANIFEST-000001", lpFilePart=0x0) returned 0x70 [0084.125] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0084.125] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\MANIFEST-000001" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\manifest-000001"), fInfoLevelId=0x0, lpFileInformation=0x22b5980 | out: lpFileInformation=0x22b5980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7141e9ad, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7141e9ad, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7141e9ad, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x29)) returned 1 [0084.126] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0084.126] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\MANIFEST-000001", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\MANIFEST-000001", lpFilePart=0x0) returned 0x70 [0084.126] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0084.126] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\MANIFEST-000001" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\manifest-000001"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0084.126] GetFileType (hFile=0x444) returned 0x1 [0084.126] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0084.126] GetFileType (hFile=0x444) returned 0x1 [0084.126] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be708 | out: lpFileSizeHigh=0x3be708*=0x0) returned 0x29 [0084.126] ReadFile (in: hFile=0x444, lpBuffer=0x22b5d08, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be638, lpOverlapped=0x0 | out: lpBuffer=0x22b5d08*, lpNumberOfBytesRead=0x3be638*=0x29, lpOverlapped=0x0) returned 1 [0084.128] CloseHandle (hObject=0x444) returned 1 [0084.150] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\MANIFEST-000001", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\MANIFEST-000001", lpFilePart=0x0) returned 0x70 [0084.150] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0084.150] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\MANIFEST-000001" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\manifest-000001"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0084.152] GetFileType (hFile=0x444) returned 0x1 [0084.152] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0084.152] GetFileType (hFile=0x444) returned 0x1 [0084.152] WriteFile (in: hFile=0x444, lpBuffer=0x232ceb0*, nNumberOfBytesToWrite=0x30, lpNumberOfBytesWritten=0x3be548, lpOverlapped=0x0 | out: lpBuffer=0x232ceb0*, lpNumberOfBytesWritten=0x3be548*=0x30, lpOverlapped=0x0) returned 1 [0084.155] CloseHandle (hObject=0x444) returned 1 [0084.155] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\MANIFEST-000001", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\MANIFEST-000001", lpFilePart=0x0) returned 0x70 [0084.155] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\MANIFEST-000001.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\MANIFEST-000001.xuy", lpFilePart=0x0) returned 0x74 [0084.155] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0084.155] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\MANIFEST-000001" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\manifest-000001"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7141e9ad, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7141e9ad, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1e00f53b, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x30)) returned 1 [0084.155] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0084.156] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\MANIFEST-000001" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\manifest-000001"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\MANIFEST-000001.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\manifest-000001.xuy")) returned 1 [0084.158] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0084.158] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules", lpFilePart=0x0) returned 0x53 [0084.158] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\", lpFilePart=0x0) returned 0x54 [0084.159] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d73d0 [0084.176] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0084.176] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0084.176] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0084.176] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0084.176] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0084.176] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0084.176] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0084.177] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0084.177] FindClose (in: hFindFile=0x5d73d0 | out: hFindFile=0x5d73d0) returned 1 [0084.177] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0084.177] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0084.178] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0084.178] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules", lpFilePart=0x0) returned 0x53 [0084.178] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\", lpFilePart=0x0) returned 0x54 [0084.178] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d73d0 [0084.179] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0084.179] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0084.179] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0084.179] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0084.179] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0084.180] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0084.180] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0084.180] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0084.180] FindClose (in: hFindFile=0x5d73d0 | out: hFindFile=0x5d73d0) returned 1 [0084.181] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0084.181] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0084.181] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\000003.log", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\000003.log", lpFilePart=0x0) returned 0x5e [0084.181] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0084.181] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\000003.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\000003.log"), fInfoLevelId=0x0, lpFileInformation=0x2331a28 | out: lpFileInformation=0x2331a28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7296b0b6, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7296b0b6, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0xba05a86c, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x214)) returned 1 [0084.183] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0084.183] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\000003.log", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\000003.log", lpFilePart=0x0) returned 0x5e [0084.183] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0084.184] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\000003.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\000003.log"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0084.184] GetFileType (hFile=0x444) returned 0x1 [0084.184] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0084.184] GetFileType (hFile=0x444) returned 0x1 [0084.184] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be708 | out: lpFileSizeHigh=0x3be708*=0x0) returned 0x214 [0084.184] ReadFile (in: hFile=0x444, lpBuffer=0x2331f38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be638, lpOverlapped=0x0 | out: lpBuffer=0x2331f38*, lpNumberOfBytesRead=0x3be638*=0x214, lpOverlapped=0x0) returned 1 [0084.185] CloseHandle (hObject=0x444) returned 1 [0084.239] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\000003.log", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\000003.log", lpFilePart=0x0) returned 0x5e [0084.239] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0084.239] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\000003.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\000003.log"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0084.240] GetFileType (hFile=0x444) returned 0x1 [0084.240] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0084.240] GetFileType (hFile=0x444) returned 0x1 [0084.240] WriteFile (in: hFile=0x444, lpBuffer=0x21a9b30*, nNumberOfBytesToWrite=0x220, lpNumberOfBytesWritten=0x3be548, lpOverlapped=0x0 | out: lpBuffer=0x21a9b30*, lpNumberOfBytesWritten=0x3be548*=0x220, lpOverlapped=0x0) returned 1 [0084.241] CloseHandle (hObject=0x444) returned 1 [0084.241] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\000003.log", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\000003.log", lpFilePart=0x0) returned 0x5e [0084.241] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\000003.log.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\000003.log.xuy", lpFilePart=0x0) returned 0x62 [0084.241] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0084.241] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\000003.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\000003.log"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7296b0b6, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7296b0b6, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1e0f4370, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x220)) returned 1 [0084.241] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0084.241] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\000003.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\000003.log"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\000003.log.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\000003.log.xuy")) returned 1 [0084.242] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\CURRENT", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\CURRENT", lpFilePart=0x0) returned 0x5b [0084.243] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0084.243] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\CURRENT" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\current"), fInfoLevelId=0x0, lpFileInformation=0x21aae00 | out: lpFileInformation=0x21aae00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x728aa275, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x728aa275, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x728b3eb0, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0084.244] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0084.244] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\CURRENT", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\CURRENT", lpFilePart=0x0) returned 0x5b [0084.244] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0084.244] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\CURRENT" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\current"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0084.244] GetFileType (hFile=0x444) returned 0x1 [0084.245] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0084.245] GetFileType (hFile=0x444) returned 0x1 [0084.245] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be708 | out: lpFileSizeHigh=0x3be708*=0x0) returned 0x10 [0084.245] ReadFile (in: hFile=0x444, lpBuffer=0x21ab0e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be638, lpOverlapped=0x0 | out: lpBuffer=0x21ab0e8*, lpNumberOfBytesRead=0x3be638*=0x10, lpOverlapped=0x0) returned 1 [0084.246] CloseHandle (hObject=0x444) returned 1 [0084.263] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\CURRENT", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\CURRENT", lpFilePart=0x0) returned 0x5b [0084.263] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0084.263] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\CURRENT" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\current"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0084.265] GetFileType (hFile=0x444) returned 0x1 [0084.266] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0084.266] GetFileType (hFile=0x444) returned 0x1 [0084.266] WriteFile (in: hFile=0x444, lpBuffer=0x2222238*, nNumberOfBytesToWrite=0x20, lpNumberOfBytesWritten=0x3be548, lpOverlapped=0x0 | out: lpBuffer=0x2222238*, lpNumberOfBytesWritten=0x3be548*=0x20, lpOverlapped=0x0) returned 1 [0084.267] CloseHandle (hObject=0x444) returned 1 [0084.267] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\CURRENT", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\CURRENT", lpFilePart=0x0) returned 0x5b [0084.267] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\CURRENT.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\CURRENT.xuy", lpFilePart=0x0) returned 0x5f [0084.267] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0084.267] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\CURRENT" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\current"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x728aa275, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x728aa275, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1e140db8, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x20)) returned 1 [0084.267] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0084.267] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\CURRENT" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\current"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\CURRENT.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\current.xuy")) returned 1 [0084.268] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOCK", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOCK", lpFilePart=0x0) returned 0x58 [0084.269] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0084.269] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOCK" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\lock"), fInfoLevelId=0x0, lpFileInformation=0x22234f0 | out: lpFileInformation=0x22234f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x728aa275, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x728aa275, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x728aa275, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0084.269] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0084.269] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOCK", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOCK", lpFilePart=0x0) returned 0x58 [0084.269] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0084.269] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOCK" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\lock"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0084.269] GetFileType (hFile=0x444) returned 0x1 [0084.269] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0084.269] GetFileType (hFile=0x444) returned 0x1 [0084.269] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be708 | out: lpFileSizeHigh=0x3be708*=0x0) returned 0x0 [0084.269] CloseHandle (hObject=0x444) returned 1 [0084.287] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOCK", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOCK", lpFilePart=0x0) returned 0x58 [0084.287] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0084.287] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOCK" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\lock"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0084.288] GetFileType (hFile=0x444) returned 0x1 [0084.288] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0084.289] GetFileType (hFile=0x444) returned 0x1 [0084.289] WriteFile (in: hFile=0x444, lpBuffer=0x22998c8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x3be548, lpOverlapped=0x0 | out: lpBuffer=0x22998c8*, lpNumberOfBytesWritten=0x3be548*=0x10, lpOverlapped=0x0) returned 1 [0084.290] CloseHandle (hObject=0x444) returned 1 [0084.290] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOCK", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOCK", lpFilePart=0x0) returned 0x58 [0084.290] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOCK.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOCK.xuy", lpFilePart=0x0) returned 0x5c [0084.290] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0084.290] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOCK" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\lock"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x728aa275, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x728aa275, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1e166aef, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0084.291] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0084.291] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOCK" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\lock"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOCK.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\lock.xuy")) returned 1 [0084.292] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOG", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOG", lpFilePart=0x0) returned 0x57 [0084.292] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0084.292] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOG" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\log"), fInfoLevelId=0x0, lpFileInformation=0x229ab80 | out: lpFileInformation=0x229ab80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x728aa275, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb8972424, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0xba05a86c, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x14e)) returned 1 [0084.292] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0084.292] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOG", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOG", lpFilePart=0x0) returned 0x57 [0084.292] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0084.292] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOG" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\log"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0084.293] GetFileType (hFile=0x444) returned 0x1 [0084.293] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0084.293] GetFileType (hFile=0x444) returned 0x1 [0084.293] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be708 | out: lpFileSizeHigh=0x3be708*=0x0) returned 0x14e [0084.293] ReadFile (in: hFile=0x444, lpBuffer=0x229af88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be638, lpOverlapped=0x0 | out: lpBuffer=0x229af88*, lpNumberOfBytesRead=0x3be638*=0x14e, lpOverlapped=0x0) returned 1 [0084.294] CloseHandle (hObject=0x444) returned 1 [0084.314] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOG", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOG", lpFilePart=0x0) returned 0x57 [0084.314] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0084.315] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOG" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\log"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0084.316] GetFileType (hFile=0x444) returned 0x1 [0084.316] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0084.316] GetFileType (hFile=0x444) returned 0x1 [0084.316] WriteFile (in: hFile=0x444, lpBuffer=0x23125f8*, nNumberOfBytesToWrite=0x150, lpNumberOfBytesWritten=0x3be548, lpOverlapped=0x0 | out: lpBuffer=0x23125f8*, lpNumberOfBytesWritten=0x3be548*=0x150, lpOverlapped=0x0) returned 1 [0084.317] CloseHandle (hObject=0x444) returned 1 [0084.318] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOG", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOG", lpFilePart=0x0) returned 0x57 [0084.318] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOG.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOG.xuy", lpFilePart=0x0) returned 0x5b [0084.318] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0084.318] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOG" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\log"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x728aa275, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb8972424, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1e1b2ed1, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x150)) returned 1 [0084.318] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0084.318] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOG" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\log"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOG.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\log.xuy")) returned 1 [0084.319] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOG.old", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOG.old", lpFilePart=0x0) returned 0x5b [0084.319] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0084.319] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOG.old" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\log.old"), fInfoLevelId=0x0, lpFileInformation=0x23138c0 | out: lpFileInformation=0x23138c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x728aa275, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x728aa275, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x8992a8b6, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x92)) returned 1 [0084.320] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0084.320] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOG.old", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOG.old", lpFilePart=0x0) returned 0x5b [0084.320] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0084.320] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOG.old" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\log.old"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0084.320] GetFileType (hFile=0x444) returned 0x1 [0084.320] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0084.320] GetFileType (hFile=0x444) returned 0x1 [0084.320] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be708 | out: lpFileSizeHigh=0x3be708*=0x0) returned 0x92 [0084.320] ReadFile (in: hFile=0x444, lpBuffer=0x2313c30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be638, lpOverlapped=0x0 | out: lpBuffer=0x2313c30*, lpNumberOfBytesRead=0x3be638*=0x92, lpOverlapped=0x0) returned 1 [0084.323] CloseHandle (hObject=0x444) returned 1 [0084.382] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOG.old", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOG.old", lpFilePart=0x0) returned 0x5b [0084.382] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0084.382] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOG.old" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\log.old"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0084.383] GetFileType (hFile=0x444) returned 0x1 [0084.383] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0084.383] GetFileType (hFile=0x444) returned 0x1 [0084.383] WriteFile (in: hFile=0x444, lpBuffer=0x218acc0*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x3be548, lpOverlapped=0x0 | out: lpBuffer=0x218acc0*, lpNumberOfBytesWritten=0x3be548*=0xa0, lpOverlapped=0x0) returned 1 [0084.384] CloseHandle (hObject=0x444) returned 1 [0084.384] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOG.old", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOG.old", lpFilePart=0x0) returned 0x5b [0084.384] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOG.old.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOG.old.xuy", lpFilePart=0x0) returned 0x5f [0084.384] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0084.384] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOG.old" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\log.old"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x728aa275, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x728aa275, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1e24b839, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xa0)) returned 1 [0084.385] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0084.385] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOG.old" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\log.old"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOG.old.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\log.old.xuy")) returned 1 [0084.386] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\MANIFEST-000001", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\MANIFEST-000001", lpFilePart=0x0) returned 0x63 [0084.386] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0084.386] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\MANIFEST-000001" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\manifest-000001"), fInfoLevelId=0x0, lpFileInformation=0x218bf78 | out: lpFileInformation=0x218bf78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x728aa275, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x728aa275, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x728aa275, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x29)) returned 1 [0084.386] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0084.386] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\MANIFEST-000001", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\MANIFEST-000001", lpFilePart=0x0) returned 0x63 [0084.386] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0084.386] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\MANIFEST-000001" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\manifest-000001"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0084.386] GetFileType (hFile=0x444) returned 0x1 [0084.386] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0084.386] GetFileType (hFile=0x444) returned 0x1 [0084.386] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be708 | out: lpFileSizeHigh=0x3be708*=0x0) returned 0x29 [0084.386] ReadFile (in: hFile=0x444, lpBuffer=0x218c2c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be638, lpOverlapped=0x0 | out: lpBuffer=0x218c2c0*, lpNumberOfBytesRead=0x3be638*=0x29, lpOverlapped=0x0) returned 1 [0084.387] CloseHandle (hObject=0x444) returned 1 [0084.409] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\MANIFEST-000001", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\MANIFEST-000001", lpFilePart=0x0) returned 0x63 [0084.409] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0084.409] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\MANIFEST-000001" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\manifest-000001"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0084.410] GetFileType (hFile=0x444) returned 0x1 [0084.410] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0084.411] GetFileType (hFile=0x444) returned 0x1 [0084.411] WriteFile (in: hFile=0x444, lpBuffer=0x2203448*, nNumberOfBytesToWrite=0x30, lpNumberOfBytesWritten=0x3be548, lpOverlapped=0x0 | out: lpBuffer=0x2203448*, lpNumberOfBytesWritten=0x3be548*=0x30, lpOverlapped=0x0) returned 1 [0084.412] CloseHandle (hObject=0x444) returned 1 [0084.412] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\MANIFEST-000001", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\MANIFEST-000001", lpFilePart=0x0) returned 0x63 [0084.412] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\MANIFEST-000001.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\MANIFEST-000001.xuy", lpFilePart=0x0) returned 0x67 [0084.412] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0084.412] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\MANIFEST-000001" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\manifest-000001"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x728aa275, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x728aa275, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1e297d2a, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x30)) returned 1 [0084.412] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0084.412] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\MANIFEST-000001" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\manifest-000001"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\MANIFEST-000001.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\manifest-000001.xuy")) returned 1 [0084.413] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0084.413] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State", lpFilePart=0x0) returned 0x53 [0084.413] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\", lpFilePart=0x0) returned 0x54 [0084.413] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d7370 [0084.433] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0084.433] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0084.433] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0084.433] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0084.433] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0084.433] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0084.433] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0084.434] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0084.434] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0084.435] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0084.435] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0084.435] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0084.435] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State", lpFilePart=0x0) returned 0x53 [0084.435] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\", lpFilePart=0x0) returned 0x54 [0084.435] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d75b0 [0084.436] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0084.436] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0084.437] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0084.438] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0084.438] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0084.439] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0084.439] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0084.439] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0084.439] FindClose (in: hFindFile=0x5d75b0 | out: hFindFile=0x5d75b0) returned 1 [0084.440] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0084.440] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0084.440] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\000003.log", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\000003.log", lpFilePart=0x0) returned 0x5e [0084.440] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0084.440] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\000003.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\000003.log"), fInfoLevelId=0x0, lpFileInformation=0x2207f60 | out: lpFileInformation=0x2207f60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76a7bd36, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x76a7bd36, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0xba05a86c, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x4e6)) returned 1 [0084.443] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0084.443] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\000003.log", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\000003.log", lpFilePart=0x0) returned 0x5e [0084.443] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0084.443] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\000003.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\000003.log"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0084.443] GetFileType (hFile=0x444) returned 0x1 [0084.443] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0084.443] GetFileType (hFile=0x444) returned 0x1 [0084.443] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be708 | out: lpFileSizeHigh=0x3be708*=0x0) returned 0x4e6 [0084.443] ReadFile (in: hFile=0x444, lpBuffer=0x2208740, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be638, lpOverlapped=0x0 | out: lpBuffer=0x2208740*, lpNumberOfBytesRead=0x3be638*=0x4e6, lpOverlapped=0x0) returned 1 [0084.448] CloseHandle (hObject=0x444) returned 1 [0084.465] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\000003.log", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\000003.log", lpFilePart=0x0) returned 0x5e [0084.465] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0084.465] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\000003.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\000003.log"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0084.467] GetFileType (hFile=0x444) returned 0x1 [0084.467] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0084.467] GetFileType (hFile=0x444) returned 0x1 [0084.467] WriteFile (in: hFile=0x444, lpBuffer=0x2280ff8*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x3be548, lpOverlapped=0x0 | out: lpBuffer=0x2280ff8*, lpNumberOfBytesWritten=0x3be548*=0x4f0, lpOverlapped=0x0) returned 1 [0084.468] CloseHandle (hObject=0x444) returned 1 [0084.479] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\000003.log", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\000003.log", lpFilePart=0x0) returned 0x5e [0084.479] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\000003.log.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\000003.log.xuy", lpFilePart=0x0) returned 0x62 [0084.479] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0084.479] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\000003.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\000003.log"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76a7bd36, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x76a7bd36, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1e30a3a0, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x4f0)) returned 1 [0084.479] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0084.479] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\000003.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\000003.log"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\000003.log.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\000003.log.xuy")) returned 1 [0084.480] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\CURRENT", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\CURRENT", lpFilePart=0x0) returned 0x5b [0084.480] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0084.480] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\CURRENT" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\current"), fInfoLevelId=0x0, lpFileInformation=0x22822c8 | out: lpFileInformation=0x22822c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x769e6e48, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x769e6e48, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x769e6e48, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0084.480] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0084.480] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\CURRENT", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\CURRENT", lpFilePart=0x0) returned 0x5b [0084.480] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0084.480] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\CURRENT" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\current"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0084.480] GetFileType (hFile=0x444) returned 0x1 [0084.480] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0084.480] GetFileType (hFile=0x444) returned 0x1 [0084.480] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be708 | out: lpFileSizeHigh=0x3be708*=0x0) returned 0x10 [0084.480] ReadFile (in: hFile=0x444, lpBuffer=0x22825b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be638, lpOverlapped=0x0 | out: lpBuffer=0x22825b0*, lpNumberOfBytesRead=0x3be638*=0x10, lpOverlapped=0x0) returned 1 [0084.481] CloseHandle (hObject=0x444) returned 1 [0084.492] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\CURRENT", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\CURRENT", lpFilePart=0x0) returned 0x5b [0084.492] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0084.492] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\CURRENT" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\current"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0084.493] GetFileType (hFile=0x444) returned 0x1 [0084.493] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0084.493] GetFileType (hFile=0x444) returned 0x1 [0084.493] WriteFile (in: hFile=0x444, lpBuffer=0x22f9700*, nNumberOfBytesToWrite=0x20, lpNumberOfBytesWritten=0x3be548, lpOverlapped=0x0 | out: lpBuffer=0x22f9700*, lpNumberOfBytesWritten=0x3be548*=0x20, lpOverlapped=0x0) returned 1 [0084.494] CloseHandle (hObject=0x444) returned 1 [0084.494] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\CURRENT", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\CURRENT", lpFilePart=0x0) returned 0x5b [0084.494] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\CURRENT.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\CURRENT.xuy", lpFilePart=0x0) returned 0x5f [0084.494] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0084.494] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\CURRENT" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\current"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x769e6e48, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x769e6e48, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1e35683c, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x20)) returned 1 [0084.494] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0084.494] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\CURRENT" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\current"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\CURRENT.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\current.xuy")) returned 1 [0084.495] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOCK", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOCK", lpFilePart=0x0) returned 0x58 [0084.495] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0084.495] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOCK" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\lock"), fInfoLevelId=0x0, lpFileInformation=0x22fa9b8 | out: lpFileInformation=0x22fa9b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x769e4729, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x769e4729, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x769e4729, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0084.495] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0084.495] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOCK", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOCK", lpFilePart=0x0) returned 0x58 [0084.495] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0084.495] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOCK" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\lock"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0084.495] GetFileType (hFile=0x444) returned 0x1 [0084.495] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0084.495] GetFileType (hFile=0x444) returned 0x1 [0084.496] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be708 | out: lpFileSizeHigh=0x3be708*=0x0) returned 0x0 [0084.496] CloseHandle (hObject=0x444) returned 1 [0084.543] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOCK", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOCK", lpFilePart=0x0) returned 0x58 [0084.543] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0084.543] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOCK" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\lock"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0084.544] GetFileType (hFile=0x444) returned 0x1 [0084.544] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0084.544] GetFileType (hFile=0x444) returned 0x1 [0084.544] WriteFile (in: hFile=0x444, lpBuffer=0x2170d20*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x3be548, lpOverlapped=0x0 | out: lpBuffer=0x2170d20*, lpNumberOfBytesWritten=0x3be548*=0x10, lpOverlapped=0x0) returned 1 [0084.545] CloseHandle (hObject=0x444) returned 1 [0084.545] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOCK", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOCK", lpFilePart=0x0) returned 0x58 [0084.545] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOCK.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOCK.xuy", lpFilePart=0x0) returned 0x5c [0084.545] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0084.545] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOCK" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\lock"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x769e4729, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x769e4729, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1e3c8e9e, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0084.545] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0084.545] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOCK" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\lock"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOCK.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\lock.xuy")) returned 1 [0084.546] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOG", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOG", lpFilePart=0x0) returned 0x57 [0084.547] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0084.547] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOG" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\log"), fInfoLevelId=0x0, lpFileInformation=0x2171fd8 | out: lpFileInformation=0x2171fd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x769e4729, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7665ae58, ftLastAccessTime.dwHighDateTime=0x1d2d59f, ftLastWriteTime.dwLowDateTime=0x778372ca, ftLastWriteTime.dwHighDateTime=0x1d2d59f, nFileSizeHigh=0x0, nFileSizeLow=0x14e)) returned 1 [0084.552] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0084.552] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOG", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOG", lpFilePart=0x0) returned 0x57 [0084.552] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0084.552] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOG" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\log"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0084.552] GetFileType (hFile=0x444) returned 0x1 [0084.552] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0084.552] GetFileType (hFile=0x444) returned 0x1 [0084.552] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be708 | out: lpFileSizeHigh=0x3be708*=0x0) returned 0x14e [0084.552] ReadFile (in: hFile=0x444, lpBuffer=0x21723e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be638, lpOverlapped=0x0 | out: lpBuffer=0x21723e0*, lpNumberOfBytesRead=0x3be638*=0x14e, lpOverlapped=0x0) returned 1 [0084.559] CloseHandle (hObject=0x444) returned 1 [0084.597] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOG", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOG", lpFilePart=0x0) returned 0x57 [0084.597] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0084.597] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOG" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\log"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0084.598] GetFileType (hFile=0x444) returned 0x1 [0084.598] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0084.599] GetFileType (hFile=0x444) returned 0x1 [0084.599] WriteFile (in: hFile=0x444, lpBuffer=0x21e9a50*, nNumberOfBytesToWrite=0x150, lpNumberOfBytesWritten=0x3be548, lpOverlapped=0x0 | out: lpBuffer=0x21e9a50*, lpNumberOfBytesWritten=0x3be548*=0x150, lpOverlapped=0x0) returned 1 [0084.600] CloseHandle (hObject=0x444) returned 1 [0084.600] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOG", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOG", lpFilePart=0x0) returned 0x57 [0084.600] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOG.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOG.xuy", lpFilePart=0x0) returned 0x5b [0084.600] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0084.600] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOG" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\log"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x769e4729, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7665ae58, ftLastAccessTime.dwHighDateTime=0x1d2d59f, ftLastWriteTime.dwLowDateTime=0x1e461949, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x150)) returned 1 [0084.600] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0084.600] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOG" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\log"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOG.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\log.xuy")) returned 1 [0084.601] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOG.old", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOG.old", lpFilePart=0x0) returned 0x5b [0084.601] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0084.601] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOG.old" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\log.old"), fInfoLevelId=0x0, lpFileInformation=0x21ead18 | out: lpFileInformation=0x21ead18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x769e4729, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb7734e80, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0xb99ea613, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x14e)) returned 1 [0084.601] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0084.602] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOG.old", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOG.old", lpFilePart=0x0) returned 0x5b [0084.602] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0084.602] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOG.old" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\log.old"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0084.602] GetFileType (hFile=0x444) returned 0x1 [0084.602] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0084.602] GetFileType (hFile=0x444) returned 0x1 [0084.602] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be708 | out: lpFileSizeHigh=0x3be708*=0x0) returned 0x14e [0084.602] ReadFile (in: hFile=0x444, lpBuffer=0x21eb140, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be638, lpOverlapped=0x0 | out: lpBuffer=0x21eb140*, lpNumberOfBytesRead=0x3be638*=0x14e, lpOverlapped=0x0) returned 1 [0084.603] CloseHandle (hObject=0x444) returned 1 [0084.621] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOG.old", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOG.old", lpFilePart=0x0) returned 0x5b [0084.621] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0084.622] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOG.old" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\log.old"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0084.623] GetFileType (hFile=0x444) returned 0x1 [0084.623] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0084.623] GetFileType (hFile=0x444) returned 0x1 [0084.623] WriteFile (in: hFile=0x444, lpBuffer=0x22627c0*, nNumberOfBytesToWrite=0x150, lpNumberOfBytesWritten=0x3be548, lpOverlapped=0x0 | out: lpBuffer=0x22627c0*, lpNumberOfBytesWritten=0x3be548*=0x150, lpOverlapped=0x0) returned 1 [0084.624] CloseHandle (hObject=0x444) returned 1 [0084.624] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOG.old", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOG.old", lpFilePart=0x0) returned 0x5b [0084.624] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOG.old.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOG.old.xuy", lpFilePart=0x0) returned 0x5f [0084.624] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0084.624] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOG.old" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\log.old"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x769e4729, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb7734e80, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1e487b4e, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x150)) returned 1 [0084.624] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0084.624] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOG.old" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\log.old"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOG.old.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\log.old.xuy")) returned 1 [0084.638] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\MANIFEST-000001", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\MANIFEST-000001", lpFilePart=0x0) returned 0x63 [0084.638] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0084.638] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\MANIFEST-000001" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\manifest-000001"), fInfoLevelId=0x0, lpFileInformation=0x2263a78 | out: lpFileInformation=0x2263a78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x769e4729, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x769e4729, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x769e4729, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x29)) returned 1 [0084.639] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0084.639] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\MANIFEST-000001", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\MANIFEST-000001", lpFilePart=0x0) returned 0x63 [0084.639] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0084.639] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\MANIFEST-000001" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\manifest-000001"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0084.639] GetFileType (hFile=0x444) returned 0x1 [0084.639] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0084.639] GetFileType (hFile=0x444) returned 0x1 [0084.639] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be708 | out: lpFileSizeHigh=0x3be708*=0x0) returned 0x29 [0084.639] ReadFile (in: hFile=0x444, lpBuffer=0x2263dc0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be638, lpOverlapped=0x0 | out: lpBuffer=0x2263dc0*, lpNumberOfBytesRead=0x3be638*=0x29, lpOverlapped=0x0) returned 1 [0084.640] CloseHandle (hObject=0x444) returned 1 [0084.650] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\MANIFEST-000001", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\MANIFEST-000001", lpFilePart=0x0) returned 0x63 [0084.650] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0084.650] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\MANIFEST-000001" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\manifest-000001"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0084.652] GetFileType (hFile=0x444) returned 0x1 [0084.652] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0084.652] GetFileType (hFile=0x444) returned 0x1 [0084.652] WriteFile (in: hFile=0x444, lpBuffer=0x22daf48*, nNumberOfBytesToWrite=0x30, lpNumberOfBytesWritten=0x3be548, lpOverlapped=0x0 | out: lpBuffer=0x22daf48*, lpNumberOfBytesWritten=0x3be548*=0x30, lpOverlapped=0x0) returned 1 [0084.652] CloseHandle (hObject=0x444) returned 1 [0084.653] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\MANIFEST-000001", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\MANIFEST-000001", lpFilePart=0x0) returned 0x63 [0084.653] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\MANIFEST-000001.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\MANIFEST-000001.xuy", lpFilePart=0x0) returned 0x67 [0084.653] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0084.653] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\MANIFEST-000001" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\manifest-000001"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x769e4729, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x769e4729, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1e4d3f24, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x30)) returned 1 [0084.653] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0084.653] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\MANIFEST-000001" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\manifest-000001"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\MANIFEST-000001.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\manifest-000001.xuy")) returned 1 [0084.654] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0084.654] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions", lpFilePart=0x0) returned 0x4e [0084.654] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\", lpFilePart=0x0) returned 0x4f [0084.654] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d7fd0 [0084.917] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0084.917] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0084.918] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0084.918] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0084.918] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0084.918] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0084.918] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0084.918] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0084.919] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0084.919] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0084.919] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0084.919] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0084.919] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0084.920] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0084.920] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0084.920] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0084.920] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions", lpFilePart=0x0) returned 0x4e [0084.920] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\", lpFilePart=0x0) returned 0x4f [0084.920] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d79d0 [0084.943] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0084.943] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0084.943] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0084.943] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0084.943] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0084.943] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0084.943] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0084.944] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0084.944] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0084.944] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0084.944] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0084.944] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0084.944] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0084.945] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0084.945] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0084.945] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0084.945] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek", lpFilePart=0x0) returned 0x6f [0084.945] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\", lpFilePart=0x0) returned 0x70 [0084.945] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d7eb0 [0085.003] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0085.003] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0085.003] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0085.003] FindClose (in: hFindFile=0x5d7eb0 | out: hFindFile=0x5d7eb0) returned 1 [0085.003] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0085.003] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0085.003] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0085.003] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek", lpFilePart=0x0) returned 0x6f [0085.003] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\", lpFilePart=0x0) returned 0x70 [0085.003] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d7c70 [0085.004] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0085.004] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0085.004] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0085.004] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0085.004] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0085.004] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0085.004] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0085.004] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0", nBufferLength=0x105, lpBuffer=0x3be130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0", lpFilePart=0x0) returned 0x75 [0085.004] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\", nBufferLength=0x105, lpBuffer=0x3be0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\", lpFilePart=0x0) returned 0x76 [0085.004] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\*", lpFindFileData=0x3be2e0 | out: lpFindFileData=0x3be2e0) returned 0x5d7a30 [0085.080] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0085.081] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0085.081] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0085.081] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0085.081] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0085.081] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0085.081] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0085.081] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0085.082] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 0 [0085.082] FindClose (in: hFindFile=0x5d7a30 | out: hFindFile=0x5d7a30) returned 1 [0085.083] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0085.083] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0085.083] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0085.083] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0", nBufferLength=0x105, lpBuffer=0x3be130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0", lpFilePart=0x0) returned 0x75 [0085.083] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\", nBufferLength=0x105, lpBuffer=0x3be0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\", lpFilePart=0x0) returned 0x76 [0085.083] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\*", lpFindFileData=0x3be2e0 | out: lpFindFileData=0x3be2e0) returned 0x5d8090 [0085.084] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0085.084] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0085.084] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0085.085] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0085.085] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0085.085] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0085.085] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0085.085] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0085.085] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 0 [0085.085] FindClose (in: hFindFile=0x5d8090 | out: hFindFile=0x5d8090) returned 1 [0085.086] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0085.086] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0085.086] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png", lpFilePart=0x0) returned 0x82 [0085.087] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0085.087] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png"), fInfoLevelId=0x0, lpFileInformation=0x22e8b20 | out: lpFileInformation=0x22e8b20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7554aae7, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7580ebb8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7580ebb8, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xd2c)) returned 1 [0085.116] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0085.117] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png", lpFilePart=0x0) returned 0x82 [0085.117] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0085.117] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0085.117] GetFileType (hFile=0x444) returned 0x1 [0085.117] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be400) returned 1 [0085.117] GetFileType (hFile=0x444) returned 0x1 [0085.117] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be628 | out: lpFileSizeHigh=0x3be628*=0x0) returned 0xd2c [0085.117] ReadFile (in: hFile=0x444, lpBuffer=0x22e9be8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be558, lpOverlapped=0x0 | out: lpBuffer=0x22e9be8*, lpNumberOfBytesRead=0x3be558*=0xd2c, lpOverlapped=0x0) returned 1 [0085.127] CloseHandle (hObject=0x444) returned 1 [0085.173] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png", lpFilePart=0x0) returned 0x82 [0085.173] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0085.173] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0085.175] GetFileType (hFile=0x444) returned 0x1 [0085.176] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be400) returned 1 [0085.176] GetFileType (hFile=0x444) returned 0x1 [0085.176] WriteFile (in: hFile=0x444, lpBuffer=0x2166628*, nNumberOfBytesToWrite=0xd30, lpNumberOfBytesWritten=0x3be468, lpOverlapped=0x0 | out: lpBuffer=0x2166628*, lpNumberOfBytesWritten=0x3be468*=0xd30, lpOverlapped=0x0) returned 1 [0085.177] CloseHandle (hObject=0x444) returned 1 [0085.180] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png", lpFilePart=0x0) returned 0x82 [0085.180] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png.xuy", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png.xuy", lpFilePart=0x0) returned 0x86 [0085.180] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0085.180] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png"), fInfoLevelId=0x0, lpFileInformation=0x3be670 | out: lpFileInformation=0x3be670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7554aae7, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7580ebb8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1e9e518b, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xd30)) returned 1 [0085.181] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0085.181] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png.xuy")) returned 1 [0085.182] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png", lpFilePart=0x0) returned 0x81 [0085.182] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0085.182] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png"), fInfoLevelId=0x0, lpFileInformation=0x21679f8 | out: lpFileInformation=0x21679f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7555202f, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7580ebb8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x758112e3, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xa0)) returned 1 [0085.182] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0085.183] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png", lpFilePart=0x0) returned 0x81 [0085.183] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0085.183] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0085.183] GetFileType (hFile=0x444) returned 0x1 [0085.183] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be400) returned 1 [0085.183] GetFileType (hFile=0x444) returned 0x1 [0085.183] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be628 | out: lpFileSizeHigh=0x3be628*=0x0) returned 0xa0 [0085.183] ReadFile (in: hFile=0x444, lpBuffer=0x2167e20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be558, lpOverlapped=0x0 | out: lpBuffer=0x2167e20*, lpNumberOfBytesRead=0x3be558*=0xa0, lpOverlapped=0x0) returned 1 [0085.184] CloseHandle (hObject=0x444) returned 1 [0085.251] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png", lpFilePart=0x0) returned 0x81 [0085.251] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0085.251] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0085.253] GetFileType (hFile=0x444) returned 0x1 [0085.253] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be400) returned 1 [0085.253] GetFileType (hFile=0x444) returned 0x1 [0085.253] WriteFile (in: hFile=0x444, lpBuffer=0x21df0e8*, nNumberOfBytesToWrite=0xb0, lpNumberOfBytesWritten=0x3be468, lpOverlapped=0x0 | out: lpBuffer=0x21df0e8*, lpNumberOfBytesWritten=0x3be468*=0xb0, lpOverlapped=0x0) returned 1 [0085.254] CloseHandle (hObject=0x444) returned 1 [0085.254] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png", lpFilePart=0x0) returned 0x81 [0085.254] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png.xuy", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png.xuy", lpFilePart=0x0) returned 0x85 [0085.254] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0085.254] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png"), fInfoLevelId=0x0, lpFileInformation=0x3be670 | out: lpFileInformation=0x3be670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7555202f, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7580ebb8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1eaa3c85, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xb0)) returned 1 [0085.254] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0085.254] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png.xuy")) returned 1 [0085.255] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html", lpFilePart=0x0) returned 0x7f [0085.255] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0085.255] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html"), fInfoLevelId=0x0, lpFileInformation=0x21e04b8 | out: lpFileInformation=0x21e04b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7555bc70, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7555bb10, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0xe4180700, ftLastWriteTime.dwHighDateTime=0x1d03f5e, nFileSizeHigh=0x0, nFileSizeLow=0x5c)) returned 1 [0085.256] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0085.256] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html", lpFilePart=0x0) returned 0x7f [0085.256] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0085.256] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0085.256] GetFileType (hFile=0x444) returned 0x1 [0085.256] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be400) returned 1 [0085.256] GetFileType (hFile=0x444) returned 0x1 [0085.256] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be628 | out: lpFileSizeHigh=0x3be628*=0x0) returned 0x5c [0085.256] ReadFile (in: hFile=0x444, lpBuffer=0x21e0890, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be558, lpOverlapped=0x0 | out: lpBuffer=0x21e0890*, lpNumberOfBytesRead=0x3be558*=0x5c, lpOverlapped=0x0) returned 1 [0085.267] CloseHandle (hObject=0x444) returned 1 [0085.281] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html", lpFilePart=0x0) returned 0x7f [0085.281] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0085.282] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0085.283] GetFileType (hFile=0x444) returned 0x1 [0085.283] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be400) returned 1 [0085.283] GetFileType (hFile=0x444) returned 0x1 [0085.283] WriteFile (in: hFile=0x444, lpBuffer=0x2257aa8*, nNumberOfBytesToWrite=0x60, lpNumberOfBytesWritten=0x3be468, lpOverlapped=0x0 | out: lpBuffer=0x2257aa8*, lpNumberOfBytesWritten=0x3be468*=0x60, lpOverlapped=0x0) returned 1 [0085.284] CloseHandle (hObject=0x444) returned 1 [0085.284] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html", lpFilePart=0x0) returned 0x7f [0085.284] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html.xuy", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html.xuy", lpFilePart=0x0) returned 0x83 [0085.284] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0085.285] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html"), fInfoLevelId=0x0, lpFileInformation=0x3be670 | out: lpFileInformation=0x3be670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7555bc70, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7555bb10, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1eaf01e1, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x60)) returned 1 [0085.285] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0085.285] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html.xuy")) returned 1 [0085.286] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js", lpFilePart=0x0) returned 0x7d [0085.286] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0085.286] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js"), fInfoLevelId=0x0, lpFileInformation=0x2258e58 | out: lpFileInformation=0x2258e58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75567fb8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7556a570, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0xe4180700, ftLastWriteTime.dwHighDateTime=0x1d03f5e, nFileSizeHigh=0x0, nFileSizeLow=0x5f)) returned 1 [0085.286] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0085.286] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js", lpFilePart=0x0) returned 0x7d [0085.286] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0085.286] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0085.286] GetFileType (hFile=0x444) returned 0x1 [0085.286] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be400) returned 1 [0085.286] GetFileType (hFile=0x444) returned 0x1 [0085.286] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be628 | out: lpFileSizeHigh=0x3be628*=0x0) returned 0x5f [0085.286] ReadFile (in: hFile=0x444, lpBuffer=0x2259220, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be558, lpOverlapped=0x0 | out: lpBuffer=0x2259220*, lpNumberOfBytesRead=0x3be558*=0x5f, lpOverlapped=0x0) returned 1 [0085.287] CloseHandle (hObject=0x444) returned 1 [0085.302] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js", lpFilePart=0x0) returned 0x7d [0085.302] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0085.302] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0085.304] GetFileType (hFile=0x444) returned 0x1 [0085.304] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be400) returned 1 [0085.304] GetFileType (hFile=0x444) returned 0x1 [0085.304] WriteFile (in: hFile=0x444, lpBuffer=0x22d0430*, nNumberOfBytesToWrite=0x60, lpNumberOfBytesWritten=0x3be468, lpOverlapped=0x0 | out: lpBuffer=0x22d0430*, lpNumberOfBytesWritten=0x3be468*=0x60, lpOverlapped=0x0) returned 1 [0085.307] CloseHandle (hObject=0x444) returned 1 [0085.307] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js", lpFilePart=0x0) returned 0x7d [0085.308] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js.xuy", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js.xuy", lpFilePart=0x0) returned 0x81 [0085.308] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0085.308] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js"), fInfoLevelId=0x0, lpFileInformation=0x3be670 | out: lpFileInformation=0x3be670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75567fb8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7556a570, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1eb1670d, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x60)) returned 1 [0085.308] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0085.308] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js.xuy")) returned 1 [0085.309] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\manifest.json", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\manifest.json", lpFilePart=0x0) returned 0x83 [0085.309] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0085.309] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\manifest.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\manifest.json"), fInfoLevelId=0x0, lpFileInformation=0x22d17e8 | out: lpFileInformation=0x22d17e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75002104, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x75571aa0, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7580769c, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x2d5)) returned 1 [0085.309] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0085.309] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\manifest.json", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\manifest.json", lpFilePart=0x0) returned 0x83 [0085.310] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0085.310] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\manifest.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\manifest.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0085.310] GetFileType (hFile=0x444) returned 0x1 [0085.310] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be400) returned 1 [0085.310] GetFileType (hFile=0x444) returned 0x1 [0085.310] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be628 | out: lpFileSizeHigh=0x3be628*=0x0) returned 0x2d5 [0085.310] ReadFile (in: hFile=0x444, lpBuffer=0x22d1e58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be558, lpOverlapped=0x0 | out: lpBuffer=0x22d1e58*, lpNumberOfBytesRead=0x3be558*=0x2d5, lpOverlapped=0x0) returned 1 [0085.326] CloseHandle (hObject=0x444) returned 1 [0085.340] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\manifest.json", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\manifest.json", lpFilePart=0x0) returned 0x83 [0085.340] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0085.340] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\manifest.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\manifest.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0085.342] GetFileType (hFile=0x444) returned 0x1 [0085.342] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be400) returned 1 [0085.342] GetFileType (hFile=0x444) returned 0x1 [0085.342] WriteFile (in: hFile=0x444, lpBuffer=0x2349d10*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x3be468, lpOverlapped=0x0 | out: lpBuffer=0x2349d10*, lpNumberOfBytesWritten=0x3be468*=0x2e0, lpOverlapped=0x0) returned 1 [0085.345] CloseHandle (hObject=0x444) returned 1 [0085.345] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\manifest.json", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\manifest.json", lpFilePart=0x0) returned 0x83 [0085.345] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\manifest.json.xuy", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\manifest.json.xuy", lpFilePart=0x0) returned 0x87 [0085.345] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0085.345] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\manifest.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\manifest.json"), fInfoLevelId=0x0, lpFileInformation=0x3be670 | out: lpFileInformation=0x3be670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75002104, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x75571aa0, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1eb889c9, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2e0)) returned 1 [0085.346] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0085.346] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\manifest.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\manifest.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\manifest.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\manifest.json.xuy")) returned 1 [0085.347] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0085.347] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", nBufferLength=0x105, lpBuffer=0x3be0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpFilePart=0x0) returned 0x7e [0085.347] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", nBufferLength=0x105, lpBuffer=0x3be060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpFilePart=0x0) returned 0x7f [0085.347] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\*", lpFindFileData=0x3be270 | out: lpFindFileData=0x3be270) returned 0x5d79d0 [0085.365] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0085.365] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0085.365] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0085.365] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0085.365] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0085.366] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0085.366] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0085.366] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0085.366] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0085.366] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0085.366] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0085.366] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0085.367] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0085.367] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0085.367] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0085.367] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0085.367] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0085.367] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0085.368] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0085.368] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0085.368] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0085.368] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0085.368] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0085.368] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0085.368] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0085.369] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0085.369] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0085.369] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0085.369] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0085.369] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0085.369] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0085.369] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0085.370] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0085.370] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0085.370] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0085.370] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0085.370] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0085.370] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0085.370] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0085.371] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0085.371] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0085.371] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0085.371] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0085.371] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 0 [0085.371] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0085.372] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0085.372] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0085.372] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0085.372] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", nBufferLength=0x105, lpBuffer=0x3be0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpFilePart=0x0) returned 0x7e [0085.372] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", nBufferLength=0x105, lpBuffer=0x3be060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpFilePart=0x0) returned 0x7f [0085.373] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\*", lpFindFileData=0x3be270 | out: lpFindFileData=0x3be270) returned 0x5d7fd0 [0085.374] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0085.374] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0085.374] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0085.374] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0085.374] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0085.376] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0085.376] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0085.376] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0085.376] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0085.376] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0085.376] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0085.376] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0085.376] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0085.377] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0085.377] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0085.377] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0085.377] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0085.377] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0085.377] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0085.377] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0085.377] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0085.377] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0085.378] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0085.378] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0085.378] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0085.378] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0085.378] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0085.378] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0085.378] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0085.378] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0085.379] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0085.379] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0085.379] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0085.379] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0085.379] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0085.379] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0085.379] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0085.379] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0085.379] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0085.380] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0085.380] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0085.380] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0085.380] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0085.380] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 0 [0085.380] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0085.381] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0085.381] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0085.381] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0085.381] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar", lpFilePart=0x0) returned 0x81 [0085.381] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\", lpFilePart=0x0) returned 0x82 [0085.381] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7370 [0085.386] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0085.387] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0085.387] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0085.387] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0085.387] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0085.387] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0085.387] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0085.387] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar", lpFilePart=0x0) returned 0x81 [0085.387] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\", lpFilePart=0x0) returned 0x82 [0085.387] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d73d0 [0085.387] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0085.388] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0085.388] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0085.388] FindClose (in: hFindFile=0x5d73d0 | out: hFindFile=0x5d73d0) returned 1 [0085.388] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0085.388] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0085.388] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\messages.json", lpFilePart=0x0) returned 0x8f [0085.388] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0085.388] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x235ecd0 | out: lpFileInformation=0x235ecd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x750243e4, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x75026af0, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x758112e3, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x101)) returned 1 [0085.388] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0085.388] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\messages.json", lpFilePart=0x0) returned 0x8f [0085.388] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0085.389] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0085.389] GetFileType (hFile=0x444) returned 0x1 [0085.389] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0085.389] GetFileType (hFile=0x444) returned 0x1 [0085.389] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x101 [0085.389] ReadFile (in: hFile=0x444, lpBuffer=0x235f1a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x235f1a0*, lpNumberOfBytesRead=0x3be478*=0x101, lpOverlapped=0x0) returned 1 [0085.391] CloseHandle (hObject=0x444) returned 1 [0085.450] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\messages.json", lpFilePart=0x0) returned 0x8f [0085.450] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0085.450] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0085.451] GetFileType (hFile=0x444) returned 0x1 [0085.451] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0085.452] GetFileType (hFile=0x444) returned 0x1 [0085.452] WriteFile (in: hFile=0x444, lpBuffer=0x21d8b78*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x21d8b78*, lpNumberOfBytesWritten=0x3be388*=0x110, lpOverlapped=0x0) returned 1 [0085.453] CloseHandle (hObject=0x444) returned 1 [0085.453] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\messages.json", lpFilePart=0x0) returned 0x8f [0085.453] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0085.453] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0085.453] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x750243e4, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x75026af0, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1ec93a71, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x110)) returned 1 [0085.453] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0085.453] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\messages.json.xuy")) returned 1 [0085.454] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0085.454] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg", lpFilePart=0x0) returned 0x81 [0085.454] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\", lpFilePart=0x0) returned 0x82 [0085.454] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d79d0 [0085.455] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0085.455] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0085.455] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0085.455] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0085.455] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0085.455] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0085.455] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0085.455] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg", lpFilePart=0x0) returned 0x81 [0085.455] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\", lpFilePart=0x0) returned 0x82 [0085.455] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d79d0 [0085.456] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0085.456] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0085.456] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0085.456] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0085.456] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0085.456] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0085.456] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\messages.json", lpFilePart=0x0) returned 0x8f [0085.456] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0085.456] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x21dccd0 | out: lpFileInformation=0x21dccd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502e02f, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7502e020, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x758112e3, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x110)) returned 1 [0085.456] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0085.457] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\messages.json", lpFilePart=0x0) returned 0x8f [0085.457] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0085.457] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0085.457] GetFileType (hFile=0x444) returned 0x1 [0085.457] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0085.457] GetFileType (hFile=0x444) returned 0x1 [0085.457] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x110 [0085.457] ReadFile (in: hFile=0x444, lpBuffer=0x21dd1a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x21dd1a8*, lpNumberOfBytesRead=0x3be478*=0x110, lpOverlapped=0x0) returned 1 [0085.458] CloseHandle (hObject=0x444) returned 1 [0085.472] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\messages.json", lpFilePart=0x0) returned 0x8f [0085.472] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0085.472] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0085.474] GetFileType (hFile=0x444) returned 0x1 [0085.474] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0085.474] GetFileType (hFile=0x444) returned 0x1 [0085.474] WriteFile (in: hFile=0x444, lpBuffer=0x22547b8*, nNumberOfBytesToWrite=0x120, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x22547b8*, lpNumberOfBytesWritten=0x3be388*=0x120, lpOverlapped=0x0) returned 1 [0085.475] CloseHandle (hObject=0x444) returned 1 [0085.475] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\messages.json", lpFilePart=0x0) returned 0x8f [0085.475] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0085.475] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0085.475] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502e02f, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7502e020, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1ecba409, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x120)) returned 1 [0085.476] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0085.476] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\messages.json.xuy")) returned 1 [0085.477] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0085.477] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca", lpFilePart=0x0) returned 0x81 [0085.477] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\", lpFilePart=0x0) returned 0x82 [0085.477] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d79d0 [0085.481] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0085.481] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0085.482] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0085.482] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0085.482] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0085.482] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0085.482] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0085.482] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca", lpFilePart=0x0) returned 0x81 [0085.482] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\", lpFilePart=0x0) returned 0x82 [0085.482] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d81b0 [0085.483] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0085.483] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0085.483] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0085.483] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0085.483] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0085.483] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0085.483] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\messages.json", lpFilePart=0x0) returned 0x8f [0085.483] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0085.483] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x2258910 | out: lpFileInformation=0x2258910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7503ca95, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7503ca80, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x758112e3, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1 [0085.485] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0085.485] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\messages.json", lpFilePart=0x0) returned 0x8f [0085.485] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0085.485] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0085.485] GetFileType (hFile=0x444) returned 0x1 [0085.485] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0085.485] GetFileType (hFile=0x444) returned 0x1 [0085.485] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xe0 [0085.485] ReadFile (in: hFile=0x444, lpBuffer=0x2258db8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x2258db8*, lpNumberOfBytesRead=0x3be478*=0xe0, lpOverlapped=0x0) returned 1 [0085.487] CloseHandle (hObject=0x444) returned 1 [0085.508] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\messages.json", lpFilePart=0x0) returned 0x8f [0085.508] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0085.509] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0085.510] GetFileType (hFile=0x444) returned 0x1 [0085.510] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0085.510] GetFileType (hFile=0x444) returned 0x1 [0085.511] WriteFile (in: hFile=0x444, lpBuffer=0x22d0120*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x22d0120*, lpNumberOfBytesWritten=0x3be388*=0xf0, lpOverlapped=0x0) returned 1 [0085.512] CloseHandle (hObject=0x444) returned 1 [0085.512] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\messages.json", lpFilePart=0x0) returned 0x8f [0085.512] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0085.512] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0085.512] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7503ca95, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7503ca80, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1ed0629d, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xf0)) returned 1 [0085.512] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0085.512] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\messages.json.xuy")) returned 1 [0085.513] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0085.514] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs", lpFilePart=0x0) returned 0x81 [0085.514] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\", lpFilePart=0x0) returned 0x82 [0085.514] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7fd0 [0085.514] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0085.514] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0085.514] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0085.515] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0085.515] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0085.515] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0085.515] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0085.515] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs", lpFilePart=0x0) returned 0x81 [0085.515] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\", lpFilePart=0x0) returned 0x82 [0085.516] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7c70 [0085.516] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0085.516] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0085.517] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0085.517] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0085.517] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0085.517] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0085.517] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\messages.json", lpFilePart=0x0) returned 0x8f [0085.517] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0085.517] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x22d4278 | out: lpFileInformation=0x22d4278*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x750466f0, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x750466c0, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x758139f3, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1 [0085.517] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0085.517] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\messages.json", lpFilePart=0x0) returned 0x8f [0085.517] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0085.518] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0085.518] GetFileType (hFile=0x444) returned 0x1 [0085.518] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0085.518] GetFileType (hFile=0x444) returned 0x1 [0085.518] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xe0 [0085.518] ReadFile (in: hFile=0x444, lpBuffer=0x22d4720, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x22d4720*, lpNumberOfBytesRead=0x3be478*=0xe0, lpOverlapped=0x0) returned 1 [0085.519] CloseHandle (hObject=0x444) returned 1 [0085.532] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\messages.json", lpFilePart=0x0) returned 0x8f [0085.533] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0085.533] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0085.534] GetFileType (hFile=0x444) returned 0x1 [0085.534] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0085.535] GetFileType (hFile=0x444) returned 0x1 [0085.535] WriteFile (in: hFile=0x444, lpBuffer=0x234ba88*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x234ba88*, lpNumberOfBytesWritten=0x3be388*=0xf0, lpOverlapped=0x0) returned 1 [0085.536] CloseHandle (hObject=0x444) returned 1 [0085.536] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\messages.json", lpFilePart=0x0) returned 0x8f [0085.536] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0085.536] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0085.536] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x750466f0, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x750466c0, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1ed526bd, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xf0)) returned 1 [0085.536] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0085.537] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\messages.json.xuy")) returned 1 [0085.538] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0085.538] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da", lpFilePart=0x0) returned 0x81 [0085.538] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\", lpFilePart=0x0) returned 0x82 [0085.538] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7c70 [0085.542] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0085.542] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0085.542] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0085.542] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0085.542] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0085.542] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0085.542] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0085.542] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da", lpFilePart=0x0) returned 0x81 [0085.542] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\", lpFilePart=0x0) returned 0x82 [0085.543] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7fd0 [0085.543] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0085.543] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0085.543] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0085.543] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0085.543] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0085.543] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0085.544] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\messages.json", lpFilePart=0x0) returned 0x8f [0085.544] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0085.544] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x234fbe0 | out: lpFileInformation=0x234fbe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x750725f8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x750725e0, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x758139f3, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1 [0085.544] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0085.544] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\messages.json", lpFilePart=0x0) returned 0x8f [0085.544] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0085.544] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0085.544] GetFileType (hFile=0x444) returned 0x1 [0085.544] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0085.544] GetFileType (hFile=0x444) returned 0x1 [0085.545] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xe0 [0085.545] ReadFile (in: hFile=0x444, lpBuffer=0x2350088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x2350088*, lpNumberOfBytesRead=0x3be478*=0xe0, lpOverlapped=0x0) returned 1 [0085.546] CloseHandle (hObject=0x444) returned 1 [0085.616] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\messages.json", lpFilePart=0x0) returned 0x8f [0085.616] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0085.616] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0085.618] GetFileType (hFile=0x444) returned 0x1 [0085.618] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0085.618] GetFileType (hFile=0x444) returned 0x1 [0085.618] WriteFile (in: hFile=0x444, lpBuffer=0x21c7380*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x21c7380*, lpNumberOfBytesWritten=0x3be388*=0xf0, lpOverlapped=0x0) returned 1 [0085.620] CloseHandle (hObject=0x444) returned 1 [0085.620] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\messages.json", lpFilePart=0x0) returned 0x8f [0085.620] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0085.620] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0085.620] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x750725f8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x750725e0, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1ee13b8a, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xf0)) returned 1 [0085.620] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0085.620] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\messages.json.xuy")) returned 1 [0085.622] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0085.622] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de", lpFilePart=0x0) returned 0x81 [0085.622] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\", lpFilePart=0x0) returned 0x82 [0085.622] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d78b0 [0085.623] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0085.623] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0085.623] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0085.623] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0085.623] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0085.623] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0085.623] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0085.623] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de", lpFilePart=0x0) returned 0x81 [0085.623] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\", lpFilePart=0x0) returned 0x82 [0085.623] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7a30 [0085.624] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0085.624] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0085.624] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0085.624] FindClose (in: hFindFile=0x5d7a30 | out: hFindFile=0x5d7a30) returned 1 [0085.624] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0085.624] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0085.625] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\messages.json", lpFilePart=0x0) returned 0x8f [0085.625] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0085.625] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x21cb4d8 | out: lpFileInformation=0x21cb4d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75096ff5, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x75096fd0, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x758139f3, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xea)) returned 1 [0085.625] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0085.625] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\messages.json", lpFilePart=0x0) returned 0x8f [0085.625] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0085.625] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0085.625] GetFileType (hFile=0x444) returned 0x1 [0085.625] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0085.625] GetFileType (hFile=0x444) returned 0x1 [0085.625] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xea [0085.625] ReadFile (in: hFile=0x444, lpBuffer=0x21cb990, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x21cb990*, lpNumberOfBytesRead=0x3be478*=0xea, lpOverlapped=0x0) returned 1 [0085.627] CloseHandle (hObject=0x444) returned 1 [0085.645] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\messages.json", lpFilePart=0x0) returned 0x8f [0085.645] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0085.645] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0085.647] GetFileType (hFile=0x444) returned 0x1 [0085.647] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0085.647] GetFileType (hFile=0x444) returned 0x1 [0085.647] WriteFile (in: hFile=0x444, lpBuffer=0x2242cf0*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x2242cf0*, lpNumberOfBytesWritten=0x3be388*=0xf0, lpOverlapped=0x0) returned 1 [0085.648] CloseHandle (hObject=0x444) returned 1 [0085.648] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\messages.json", lpFilePart=0x0) returned 0x8f [0085.648] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0085.648] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0085.648] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75096ff5, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x75096fd0, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1ee5d70e, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xf0)) returned 1 [0085.648] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0085.649] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\messages.json.xuy")) returned 1 [0085.649] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0085.649] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el", lpFilePart=0x0) returned 0x81 [0085.650] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\", lpFilePart=0x0) returned 0x82 [0085.650] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d73d0 [0085.651] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0085.651] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0085.651] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0085.651] FindClose (in: hFindFile=0x5d73d0 | out: hFindFile=0x5d73d0) returned 1 [0085.651] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0085.651] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0085.652] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0085.652] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el", lpFilePart=0x0) returned 0x81 [0085.652] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\", lpFilePart=0x0) returned 0x82 [0085.652] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7c70 [0085.652] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0085.652] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0085.652] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0085.652] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0085.652] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0085.652] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0085.653] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\messages.json", lpFilePart=0x0) returned 0x8f [0085.653] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0085.653] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x2246e48 | out: lpFileInformation=0x2246e48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x750a3349, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x750a3320, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x758139f3, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x112)) returned 1 [0085.653] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0085.653] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\messages.json", lpFilePart=0x0) returned 0x8f [0085.653] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0085.653] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0085.653] GetFileType (hFile=0x444) returned 0x1 [0085.653] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0085.653] GetFileType (hFile=0x444) returned 0x1 [0085.653] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x112 [0085.653] ReadFile (in: hFile=0x444, lpBuffer=0x2247328, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x2247328*, lpNumberOfBytesRead=0x3be478*=0x112, lpOverlapped=0x0) returned 1 [0085.654] CloseHandle (hObject=0x444) returned 1 [0085.670] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\messages.json", lpFilePart=0x0) returned 0x8f [0085.670] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0085.670] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0085.675] GetFileType (hFile=0x444) returned 0x1 [0085.675] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0085.675] GetFileType (hFile=0x444) returned 0x1 [0085.675] WriteFile (in: hFile=0x444, lpBuffer=0x22be938*, nNumberOfBytesToWrite=0x120, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x22be938*, lpNumberOfBytesWritten=0x3be388*=0x120, lpOverlapped=0x0) returned 1 [0085.677] CloseHandle (hObject=0x444) returned 1 [0085.677] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\messages.json", lpFilePart=0x0) returned 0x8f [0085.677] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0085.677] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0085.677] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x750a3349, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x750a3320, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1eeafd93, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x120)) returned 1 [0085.677] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0085.677] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\messages.json.xuy")) returned 1 [0085.678] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0085.678] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB", lpFilePart=0x0) returned 0x84 [0085.679] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\", lpFilePart=0x0) returned 0x85 [0085.679] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d78b0 [0085.679] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0085.679] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0085.679] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0085.679] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0085.680] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0085.680] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0085.680] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0085.680] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB", lpFilePart=0x0) returned 0x84 [0085.680] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\", lpFilePart=0x0) returned 0x85 [0085.680] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7550 [0085.680] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0085.680] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0085.681] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0085.681] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0085.681] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0085.681] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0085.681] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\messages.json", lpFilePart=0x0) returned 0x92 [0085.681] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0085.681] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_gb\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x22c2b60 | out: lpFileInformation=0x22c2b60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x750c0816, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x750c2ef0, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x758160f9, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xd6)) returned 1 [0085.681] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0085.681] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\messages.json", lpFilePart=0x0) returned 0x92 [0085.681] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0085.681] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_gb\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0085.682] GetFileType (hFile=0x444) returned 0x1 [0085.682] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0085.682] GetFileType (hFile=0x444) returned 0x1 [0085.682] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xd6 [0085.682] ReadFile (in: hFile=0x444, lpBuffer=0x22c3010, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x22c3010*, lpNumberOfBytesRead=0x3be478*=0xd6, lpOverlapped=0x0) returned 1 [0085.683] CloseHandle (hObject=0x444) returned 1 [0085.696] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\messages.json", lpFilePart=0x0) returned 0x92 [0085.696] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0085.696] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_gb\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0085.697] GetFileType (hFile=0x444) returned 0x1 [0085.697] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0085.697] GetFileType (hFile=0x444) returned 0x1 [0085.698] WriteFile (in: hFile=0x444, lpBuffer=0x233a360*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x233a360*, lpNumberOfBytesWritten=0x3be388*=0xe0, lpOverlapped=0x0) returned 1 [0085.698] CloseHandle (hObject=0x444) returned 1 [0085.699] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\messages.json", lpFilePart=0x0) returned 0x92 [0085.699] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\messages.json.xuy", lpFilePart=0x0) returned 0x96 [0085.699] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0085.699] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_gb\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x750c0816, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x750c2ef0, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1eecfdb2, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1 [0085.699] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0085.699] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_gb\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_gb\\messages.json.xuy")) returned 1 [0085.700] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0085.700] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US", lpFilePart=0x0) returned 0x84 [0085.700] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\", lpFilePart=0x0) returned 0x85 [0085.701] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7fd0 [0085.711] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0085.711] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0085.712] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0085.712] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0085.713] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0085.713] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0085.713] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0085.713] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US", lpFilePart=0x0) returned 0x84 [0085.713] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\", lpFilePart=0x0) returned 0x85 [0085.713] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d79d0 [0085.714] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0085.714] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0085.714] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0085.714] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0085.714] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0085.714] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0085.714] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\messages.json", lpFilePart=0x0) returned 0x92 [0085.714] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0085.714] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_us\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x233e5a0 | out: lpFileInformation=0x233e5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x750ea02e, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x750e9ff0, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x758160f9, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xd7)) returned 1 [0085.715] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0085.715] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\messages.json", lpFilePart=0x0) returned 0x92 [0085.715] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0085.715] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_us\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0085.715] GetFileType (hFile=0x444) returned 0x1 [0085.715] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0085.715] GetFileType (hFile=0x444) returned 0x1 [0085.715] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xd7 [0085.715] ReadFile (in: hFile=0x444, lpBuffer=0x233ea50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x233ea50*, lpNumberOfBytesRead=0x3be478*=0xd7, lpOverlapped=0x0) returned 1 [0085.716] CloseHandle (hObject=0x444) returned 1 [0085.790] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\messages.json", lpFilePart=0x0) returned 0x92 [0085.790] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0085.791] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_us\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0085.792] GetFileType (hFile=0x444) returned 0x1 [0085.792] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0085.792] GetFileType (hFile=0x444) returned 0x1 [0085.793] WriteFile (in: hFile=0x444, lpBuffer=0x21b5da8*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x21b5da8*, lpNumberOfBytesWritten=0x3be388*=0xe0, lpOverlapped=0x0) returned 1 [0085.794] CloseHandle (hObject=0x444) returned 1 [0085.794] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\messages.json", lpFilePart=0x0) returned 0x92 [0085.794] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\messages.json.xuy", lpFilePart=0x0) returned 0x96 [0085.794] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0085.794] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_us\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x750ea02e, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x750e9ff0, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1efb4d45, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1 [0085.794] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0085.794] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_us\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_us\\messages.json.xuy")) returned 1 [0085.795] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0085.796] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es", lpFilePart=0x0) returned 0x81 [0085.796] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\", lpFilePart=0x0) returned 0x82 [0085.796] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7550 [0085.796] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0085.806] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0085.806] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0085.806] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0085.806] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0085.807] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0085.807] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0085.807] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es", lpFilePart=0x0) returned 0x81 [0085.807] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\", lpFilePart=0x0) returned 0x82 [0085.807] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7d30 [0085.807] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0085.807] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0085.807] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0085.808] FindClose (in: hFindFile=0x5d7d30 | out: hFindFile=0x5d7d30) returned 1 [0085.808] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0085.808] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0085.808] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\messages.json", lpFilePart=0x0) returned 0x8f [0085.808] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0085.808] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x21b9f18 | out: lpFileInformation=0x21b9f18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x751026d3, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x751074b0, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x758160f9, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xdf)) returned 1 [0085.808] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0085.808] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\messages.json", lpFilePart=0x0) returned 0x8f [0085.808] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0085.808] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0085.809] GetFileType (hFile=0x444) returned 0x1 [0085.809] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0085.809] GetFileType (hFile=0x444) returned 0x1 [0085.809] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xdf [0085.809] ReadFile (in: hFile=0x444, lpBuffer=0x21ba3c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x21ba3c0*, lpNumberOfBytesRead=0x3be478*=0xdf, lpOverlapped=0x0) returned 1 [0085.810] CloseHandle (hObject=0x444) returned 1 [0085.893] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\messages.json", lpFilePart=0x0) returned 0x8f [0085.893] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0085.893] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0085.895] GetFileType (hFile=0x444) returned 0x1 [0085.895] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0085.895] GetFileType (hFile=0x444) returned 0x1 [0085.896] WriteFile (in: hFile=0x444, lpBuffer=0x2231700*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x2231700*, lpNumberOfBytesWritten=0x3be388*=0xe0, lpOverlapped=0x0) returned 1 [0085.897] CloseHandle (hObject=0x444) returned 1 [0085.897] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\messages.json", lpFilePart=0x0) returned 0x8f [0085.897] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0085.897] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0085.897] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x751026d3, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x751074b0, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1f0bfbfb, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1 [0085.897] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0085.897] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\messages.json.xuy")) returned 1 [0085.898] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0085.898] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419", lpFilePart=0x0) returned 0x85 [0085.898] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\", lpFilePart=0x0) returned 0x86 [0085.898] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7550 [0085.903] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0085.904] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0085.904] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0085.904] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0085.904] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0085.904] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0085.904] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0085.904] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419", lpFilePart=0x0) returned 0x85 [0085.904] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\", lpFilePart=0x0) returned 0x86 [0085.904] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d78b0 [0085.904] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0085.905] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0085.905] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0085.905] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0085.905] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0085.905] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0085.905] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\messages.json", lpFilePart=0x0) returned 0x93 [0085.905] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0085.905] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x2235948 | out: lpFileInformation=0x2235948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x751297dc, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x75129790, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x758160f9, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xdd)) returned 1 [0085.906] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0085.909] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\messages.json", lpFilePart=0x0) returned 0x93 [0085.909] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0085.909] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0085.910] GetFileType (hFile=0x444) returned 0x1 [0085.910] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0085.910] GetFileType (hFile=0x444) returned 0x1 [0085.910] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xdd [0085.910] ReadFile (in: hFile=0x444, lpBuffer=0x2235e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x2235e00*, lpNumberOfBytesRead=0x3be478*=0xdd, lpOverlapped=0x0) returned 1 [0085.911] CloseHandle (hObject=0x444) returned 1 [0085.950] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\messages.json", lpFilePart=0x0) returned 0x93 [0085.950] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0085.951] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0085.954] GetFileType (hFile=0x444) returned 0x1 [0085.954] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0085.954] GetFileType (hFile=0x444) returned 0x1 [0085.954] WriteFile (in: hFile=0x444, lpBuffer=0x22ad148*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x22ad148*, lpNumberOfBytesWritten=0x3be388*=0xe0, lpOverlapped=0x0) returned 1 [0085.955] CloseHandle (hObject=0x444) returned 1 [0085.956] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\messages.json", lpFilePart=0x0) returned 0x93 [0085.956] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\messages.json.xuy", lpFilePart=0x0) returned 0x97 [0085.956] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0085.956] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x751297dc, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x75129790, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1f158788, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1 [0085.956] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0085.956] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\messages.json.xuy")) returned 1 [0085.957] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0085.957] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et", lpFilePart=0x0) returned 0x81 [0085.958] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\", lpFilePart=0x0) returned 0x82 [0085.958] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d78b0 [0085.958] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0085.958] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0085.959] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0085.959] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0085.959] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0085.959] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0085.959] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0085.959] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et", lpFilePart=0x0) returned 0x81 [0085.959] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\", lpFilePart=0x0) returned 0x82 [0085.959] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d78b0 [0085.959] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0085.960] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0085.960] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0085.960] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0085.960] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0085.960] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0085.960] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\messages.json", lpFilePart=0x0) returned 0x8f [0085.960] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0085.960] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x22b12b8 | out: lpFileInformation=0x22b12b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7513f774, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7514e180, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x758160f9, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xd6)) returned 1 [0085.961] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0085.961] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\messages.json", lpFilePart=0x0) returned 0x8f [0085.961] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0085.961] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0085.961] GetFileType (hFile=0x444) returned 0x1 [0085.961] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0085.961] GetFileType (hFile=0x444) returned 0x1 [0085.961] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xd6 [0085.961] ReadFile (in: hFile=0x444, lpBuffer=0x22b1758, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x22b1758*, lpNumberOfBytesRead=0x3be478*=0xd6, lpOverlapped=0x0) returned 1 [0085.963] CloseHandle (hObject=0x444) returned 1 [0085.988] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\messages.json", lpFilePart=0x0) returned 0x8f [0085.988] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0085.988] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0085.990] GetFileType (hFile=0x444) returned 0x1 [0085.990] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0085.990] GetFileType (hFile=0x444) returned 0x1 [0085.991] WriteFile (in: hFile=0x444, lpBuffer=0x2328aa0*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x2328aa0*, lpNumberOfBytesWritten=0x3be388*=0xe0, lpOverlapped=0x0) returned 1 [0085.992] CloseHandle (hObject=0x444) returned 1 [0085.992] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\messages.json", lpFilePart=0x0) returned 0x8f [0085.992] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0085.992] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0085.992] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7513f774, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7514e180, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1f1a4b8d, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1 [0085.992] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0085.992] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\messages.json.xuy")) returned 1 [0085.994] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0085.994] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi", lpFilePart=0x0) returned 0x81 [0085.994] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\", lpFilePart=0x0) returned 0x82 [0085.994] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7d90 [0086.028] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0086.028] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0086.028] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0086.028] FindClose (in: hFindFile=0x5d7d90 | out: hFindFile=0x5d7d90) returned 1 [0086.029] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0086.029] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0086.029] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0086.029] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi", lpFilePart=0x0) returned 0x81 [0086.029] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\", lpFilePart=0x0) returned 0x82 [0086.029] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d78b0 [0086.029] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0086.029] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0086.030] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0086.030] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0086.030] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0086.030] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0086.030] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\messages.json", lpFilePart=0x0) returned 0x8f [0086.030] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0086.030] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x232cbf8 | out: lpFileInformation=0x232cbf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x751668da, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x75166820, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x75818809, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xd9)) returned 1 [0086.031] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0086.031] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\messages.json", lpFilePart=0x0) returned 0x8f [0086.031] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0086.031] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0086.032] GetFileType (hFile=0x444) returned 0x1 [0086.032] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0086.032] GetFileType (hFile=0x444) returned 0x1 [0086.032] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xd9 [0086.033] ReadFile (in: hFile=0x444, lpBuffer=0x232d0a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x232d0a0*, lpNumberOfBytesRead=0x3be478*=0xd9, lpOverlapped=0x0) returned 1 [0086.034] CloseHandle (hObject=0x444) returned 1 [0086.150] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\messages.json", lpFilePart=0x0) returned 0x8f [0086.150] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0086.150] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0086.152] GetFileType (hFile=0x444) returned 0x1 [0086.152] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0086.152] GetFileType (hFile=0x444) returned 0x1 [0086.152] WriteFile (in: hFile=0x444, lpBuffer=0x21a43b8*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x21a43b8*, lpNumberOfBytesWritten=0x3be388*=0xe0, lpOverlapped=0x0) returned 1 [0086.154] CloseHandle (hObject=0x444) returned 1 [0086.155] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\messages.json", lpFilePart=0x0) returned 0x8f [0086.155] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0086.155] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0086.155] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x751668da, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x75166820, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1f322114, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1 [0086.155] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0086.155] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\messages.json.xuy")) returned 1 [0086.157] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0086.157] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil", lpFilePart=0x0) returned 0x82 [0086.157] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\", lpFilePart=0x0) returned 0x83 [0086.157] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7a90 [0086.158] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0086.158] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0086.158] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0086.158] FindClose (in: hFindFile=0x5d7a90 | out: hFindFile=0x5d7a90) returned 1 [0086.158] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0086.158] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0086.158] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0086.159] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil", lpFilePart=0x0) returned 0x82 [0086.159] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\", lpFilePart=0x0) returned 0x83 [0086.159] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7c70 [0086.159] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0086.159] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0086.159] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0086.159] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0086.159] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0086.160] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0086.160] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\messages.json", lpFilePart=0x0) returned 0x90 [0086.160] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0086.160] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x21a85a0 | out: lpFileInformation=0x21a85a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75186457, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x751863f0, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x75818809, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1 [0086.160] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0086.160] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\messages.json", lpFilePart=0x0) returned 0x90 [0086.160] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0086.160] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0086.160] GetFileType (hFile=0x444) returned 0x1 [0086.160] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0086.160] GetFileType (hFile=0x444) returned 0x1 [0086.160] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xe0 [0086.160] ReadFile (in: hFile=0x444, lpBuffer=0x21a8a58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x21a8a58*, lpNumberOfBytesRead=0x3be478*=0xe0, lpOverlapped=0x0) returned 1 [0086.161] CloseHandle (hObject=0x444) returned 1 [0086.176] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\messages.json", lpFilePart=0x0) returned 0x90 [0086.176] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0086.177] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0086.178] GetFileType (hFile=0x444) returned 0x1 [0086.178] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0086.178] GetFileType (hFile=0x444) returned 0x1 [0086.178] WriteFile (in: hFile=0x444, lpBuffer=0x221fdc8*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x221fdc8*, lpNumberOfBytesWritten=0x3be388*=0xf0, lpOverlapped=0x0) returned 1 [0086.179] CloseHandle (hObject=0x444) returned 1 [0086.179] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\messages.json", lpFilePart=0x0) returned 0x90 [0086.179] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\messages.json.xuy", lpFilePart=0x0) returned 0x94 [0086.180] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0086.180] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75186457, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x751863f0, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1f36e6a5, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xf0)) returned 1 [0086.180] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0086.180] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\messages.json.xuy")) returned 1 [0086.181] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0086.181] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr", lpFilePart=0x0) returned 0x81 [0086.181] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\", lpFilePart=0x0) returned 0x82 [0086.181] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d81b0 [0086.186] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0086.186] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0086.186] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0086.186] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0086.186] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0086.186] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0086.186] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0086.186] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr", lpFilePart=0x0) returned 0x81 [0086.186] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\", lpFilePart=0x0) returned 0x82 [0086.187] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7af0 [0086.187] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0086.187] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0086.187] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0086.187] FindClose (in: hFindFile=0x5d7af0 | out: hFindFile=0x5d7af0) returned 1 [0086.188] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0086.188] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0086.188] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\messages.json", lpFilePart=0x0) returned 0x8f [0086.188] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0086.188] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x2223f38 | out: lpFileInformation=0x2223f38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75199cd7, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7519ea90, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x75818809, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xde)) returned 1 [0086.188] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0086.188] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\messages.json", lpFilePart=0x0) returned 0x8f [0086.188] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0086.188] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0086.188] GetFileType (hFile=0x444) returned 0x1 [0086.188] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0086.188] GetFileType (hFile=0x444) returned 0x1 [0086.188] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xde [0086.189] ReadFile (in: hFile=0x444, lpBuffer=0x22243e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x22243e0*, lpNumberOfBytesRead=0x3be478*=0xde, lpOverlapped=0x0) returned 1 [0086.190] CloseHandle (hObject=0x444) returned 1 [0086.204] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\messages.json", lpFilePart=0x0) returned 0x8f [0086.205] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0086.205] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0086.207] GetFileType (hFile=0x444) returned 0x1 [0086.207] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0086.207] GetFileType (hFile=0x444) returned 0x1 [0086.207] WriteFile (in: hFile=0x444, lpBuffer=0x229b720*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x229b720*, lpNumberOfBytesWritten=0x3be388*=0xe0, lpOverlapped=0x0) returned 1 [0086.208] CloseHandle (hObject=0x444) returned 1 [0086.208] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\messages.json", lpFilePart=0x0) returned 0x8f [0086.208] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0086.208] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0086.209] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75199cd7, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7519ea90, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1f3babdc, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1 [0086.209] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0086.209] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\messages.json.xuy")) returned 1 [0086.210] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0086.210] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he", lpFilePart=0x0) returned 0x81 [0086.210] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\", lpFilePart=0x0) returned 0x82 [0086.210] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d75b0 [0086.211] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0086.211] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0086.211] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0086.211] FindClose (in: hFindFile=0x5d75b0 | out: hFindFile=0x5d75b0) returned 1 [0086.211] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0086.211] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0086.211] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0086.211] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he", lpFilePart=0x0) returned 0x81 [0086.211] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\", lpFilePart=0x0) returned 0x82 [0086.211] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7d30 [0086.212] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0086.212] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0086.212] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0086.212] FindClose (in: hFindFile=0x5d7d30 | out: hFindFile=0x5d7d30) returned 1 [0086.212] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0086.212] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0086.212] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\messages.json", lpFilePart=0x0) returned 0x8f [0086.212] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0086.212] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x229f878 | out: lpFileInformation=0x229f878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x751b4a8e, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x751b4a20, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7581af28, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xe1)) returned 1 [0086.213] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0086.213] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\messages.json", lpFilePart=0x0) returned 0x8f [0086.213] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0086.213] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0086.213] GetFileType (hFile=0x444) returned 0x1 [0086.213] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0086.213] GetFileType (hFile=0x444) returned 0x1 [0086.213] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xe1 [0086.213] ReadFile (in: hFile=0x444, lpBuffer=0x229fd28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x229fd28*, lpNumberOfBytesRead=0x3be478*=0xe1, lpOverlapped=0x0) returned 1 [0086.214] CloseHandle (hObject=0x444) returned 1 [0086.236] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\messages.json", lpFilePart=0x0) returned 0x8f [0086.236] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0086.236] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0086.238] GetFileType (hFile=0x444) returned 0x1 [0086.238] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0086.238] GetFileType (hFile=0x444) returned 0x1 [0086.238] WriteFile (in: hFile=0x444, lpBuffer=0x2317090*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x2317090*, lpNumberOfBytesWritten=0x3be388*=0xf0, lpOverlapped=0x0) returned 1 [0086.239] CloseHandle (hObject=0x444) returned 1 [0086.240] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\messages.json", lpFilePart=0x0) returned 0x8f [0086.240] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0086.240] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0086.240] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x751b4a8e, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x751b4a20, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1f406e0c, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xf0)) returned 1 [0086.240] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0086.240] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\messages.json.xuy")) returned 1 [0086.241] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0086.241] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi", lpFilePart=0x0) returned 0x81 [0086.241] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\", lpFilePart=0x0) returned 0x82 [0086.241] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d79d0 [0086.244] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0086.245] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0086.245] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0086.245] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0086.245] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0086.245] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0086.245] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0086.245] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi", lpFilePart=0x0) returned 0x81 [0086.245] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\", lpFilePart=0x0) returned 0x82 [0086.245] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7e50 [0086.245] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0086.246] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0086.246] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0086.246] FindClose (in: hFindFile=0x5d7e50 | out: hFindFile=0x5d7e50) returned 1 [0086.246] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0086.246] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0086.246] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\messages.json", lpFilePart=0x0) returned 0x8f [0086.246] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0086.246] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x231b1e8 | out: lpFileInformation=0x231b1e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x751caa24, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x751cf7d0, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7581af28, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x123)) returned 1 [0086.247] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0086.247] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\messages.json", lpFilePart=0x0) returned 0x8f [0086.247] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0086.247] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0086.247] GetFileType (hFile=0x444) returned 0x1 [0086.247] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0086.247] GetFileType (hFile=0x444) returned 0x1 [0086.247] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x123 [0086.247] ReadFile (in: hFile=0x444, lpBuffer=0x231b6d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x231b6d8*, lpNumberOfBytesRead=0x3be478*=0x123, lpOverlapped=0x0) returned 1 [0086.249] CloseHandle (hObject=0x444) returned 1 [0086.311] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\messages.json", lpFilePart=0x0) returned 0x8f [0086.311] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0086.311] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0086.322] GetFileType (hFile=0x444) returned 0x1 [0086.322] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0086.322] GetFileType (hFile=0x444) returned 0x1 [0086.322] WriteFile (in: hFile=0x444, lpBuffer=0x2192d60*, nNumberOfBytesToWrite=0x130, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x2192d60*, lpNumberOfBytesWritten=0x3be388*=0x130, lpOverlapped=0x0) returned 1 [0086.323] CloseHandle (hObject=0x444) returned 1 [0086.324] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\messages.json", lpFilePart=0x0) returned 0x8f [0086.324] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0086.324] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0086.324] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x751caa24, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x751cf7d0, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1f4c5c09, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x130)) returned 1 [0086.324] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0086.324] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\messages.json.xuy")) returned 1 [0086.325] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0086.325] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu", lpFilePart=0x0) returned 0x81 [0086.325] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\", lpFilePart=0x0) returned 0x82 [0086.325] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d75b0 [0086.326] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0086.326] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0086.326] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0086.326] FindClose (in: hFindFile=0x5d75b0 | out: hFindFile=0x5d75b0) returned 1 [0086.326] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0086.326] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0086.326] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0086.326] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu", lpFilePart=0x0) returned 0x81 [0086.326] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\", lpFilePart=0x0) returned 0x82 [0086.327] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7c70 [0086.327] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0086.327] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0086.327] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0086.327] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0086.327] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0086.328] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0086.328] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\messages.json", lpFilePart=0x0) returned 0x8f [0086.328] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0086.328] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x2196eb8 | out: lpFileInformation=0x2196eb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x751f1b33, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x751f41c0, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7581af28, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xe6)) returned 1 [0086.328] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0086.328] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\messages.json", lpFilePart=0x0) returned 0x8f [0086.328] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0086.328] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0086.328] GetFileType (hFile=0x444) returned 0x1 [0086.328] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0086.328] GetFileType (hFile=0x444) returned 0x1 [0086.328] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xe6 [0086.329] ReadFile (in: hFile=0x444, lpBuffer=0x2197368, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x2197368*, lpNumberOfBytesRead=0x3be478*=0xe6, lpOverlapped=0x0) returned 1 [0086.330] CloseHandle (hObject=0x444) returned 1 [0086.348] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\messages.json", lpFilePart=0x0) returned 0x8f [0086.348] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0086.348] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0086.350] GetFileType (hFile=0x444) returned 0x1 [0086.350] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0086.350] GetFileType (hFile=0x444) returned 0x1 [0086.350] WriteFile (in: hFile=0x444, lpBuffer=0x220e6d0*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x220e6d0*, lpNumberOfBytesWritten=0x3be388*=0xf0, lpOverlapped=0x0) returned 1 [0086.351] CloseHandle (hObject=0x444) returned 1 [0086.352] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\messages.json", lpFilePart=0x0) returned 0x8f [0086.352] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0086.352] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0086.352] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x751f1b33, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x751f41c0, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1f51258c, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xf0)) returned 1 [0086.352] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0086.352] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\messages.json.xuy")) returned 1 [0086.353] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0086.353] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id", lpFilePart=0x0) returned 0x81 [0086.353] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\", lpFilePart=0x0) returned 0x82 [0086.354] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d79d0 [0086.359] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0086.360] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0086.360] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0086.360] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0086.360] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0086.360] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0086.360] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0086.360] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id", lpFilePart=0x0) returned 0x81 [0086.360] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\", lpFilePart=0x0) returned 0x82 [0086.360] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7670 [0086.361] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0086.361] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0086.361] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0086.361] FindClose (in: hFindFile=0x5d7670 | out: hFindFile=0x5d7670) returned 1 [0086.361] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0086.361] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0086.362] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\messages.json", lpFilePart=0x0) returned 0x8f [0086.362] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0086.362] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x2212828 | out: lpFileInformation=0x2212828*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75200596, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x75202c20, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7581af28, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xd0)) returned 1 [0086.362] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0086.362] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\messages.json", lpFilePart=0x0) returned 0x8f [0086.362] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0086.362] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0086.362] GetFileType (hFile=0x444) returned 0x1 [0086.362] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0086.363] GetFileType (hFile=0x444) returned 0x1 [0086.363] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xd0 [0086.363] ReadFile (in: hFile=0x444, lpBuffer=0x2212cc0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x2212cc0*, lpNumberOfBytesRead=0x3be478*=0xd0, lpOverlapped=0x0) returned 1 [0086.364] CloseHandle (hObject=0x444) returned 1 [0086.386] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\messages.json", lpFilePart=0x0) returned 0x8f [0086.386] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0086.386] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0086.388] GetFileType (hFile=0x444) returned 0x1 [0086.388] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0086.388] GetFileType (hFile=0x444) returned 0x1 [0086.388] WriteFile (in: hFile=0x444, lpBuffer=0x228a008*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x228a008*, lpNumberOfBytesWritten=0x3be388*=0xe0, lpOverlapped=0x0) returned 1 [0086.390] CloseHandle (hObject=0x444) returned 1 [0086.390] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\messages.json", lpFilePart=0x0) returned 0x8f [0086.390] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0086.390] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0086.390] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75200596, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x75202c20, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1f55e649, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1 [0086.390] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0086.391] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\messages.json.xuy")) returned 1 [0086.392] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0086.392] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it", lpFilePart=0x0) returned 0x81 [0086.392] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\", lpFilePart=0x0) returned 0x82 [0086.392] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7af0 [0086.393] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0086.393] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0086.393] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0086.393] FindClose (in: hFindFile=0x5d7af0 | out: hFindFile=0x5d7af0) returned 1 [0086.393] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0086.393] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0086.393] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0086.393] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it", lpFilePart=0x0) returned 0x81 [0086.393] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\", lpFilePart=0x0) returned 0x82 [0086.393] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7fd0 [0086.394] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0086.394] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0086.394] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0086.394] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0086.394] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0086.394] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0086.394] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\messages.json", lpFilePart=0x0) returned 0x8f [0086.395] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0086.395] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x228e160 | out: lpFileInformation=0x228e160*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75224f99, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x75227610, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7581af28, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xdd)) returned 1 [0086.395] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0086.395] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\messages.json", lpFilePart=0x0) returned 0x8f [0086.395] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0086.395] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0086.395] GetFileType (hFile=0x444) returned 0x1 [0086.395] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0086.395] GetFileType (hFile=0x444) returned 0x1 [0086.395] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xdd [0086.395] ReadFile (in: hFile=0x444, lpBuffer=0x228e608, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x228e608*, lpNumberOfBytesRead=0x3be478*=0xdd, lpOverlapped=0x0) returned 1 [0086.398] CloseHandle (hObject=0x444) returned 1 [0086.416] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\messages.json", lpFilePart=0x0) returned 0x8f [0086.416] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0086.416] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0086.418] GetFileType (hFile=0x444) returned 0x1 [0086.418] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0086.418] GetFileType (hFile=0x444) returned 0x1 [0086.418] WriteFile (in: hFile=0x444, lpBuffer=0x2305948*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x2305948*, lpNumberOfBytesWritten=0x3be388*=0xe0, lpOverlapped=0x0) returned 1 [0086.419] CloseHandle (hObject=0x444) returned 1 [0086.420] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\messages.json", lpFilePart=0x0) returned 0x8f [0086.420] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0086.420] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0086.420] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75224f99, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x75227610, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1f5aaa4a, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1 [0086.420] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0086.420] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\messages.json.xuy")) returned 1 [0086.422] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0086.422] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja", lpFilePart=0x0) returned 0x81 [0086.422] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\", lpFilePart=0x0) returned 0x82 [0086.422] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7d90 [0086.426] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0086.426] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0086.426] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0086.426] FindClose (in: hFindFile=0x5d7d90 | out: hFindFile=0x5d7d90) returned 1 [0086.426] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0086.426] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0086.426] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0086.427] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja", lpFilePart=0x0) returned 0x81 [0086.427] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\", lpFilePart=0x0) returned 0x82 [0086.427] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d79d0 [0086.427] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0086.427] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0086.427] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0086.427] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0086.428] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0086.428] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0086.428] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\messages.json", lpFilePart=0x0) returned 0x8f [0086.428] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0086.428] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x2309aa0 | out: lpFileInformation=0x2309aa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7524245a, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x75244ad0, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7581d634, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xec)) returned 1 [0086.428] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0086.428] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\messages.json", lpFilePart=0x0) returned 0x8f [0086.428] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0086.428] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0086.428] GetFileType (hFile=0x444) returned 0x1 [0086.428] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0086.428] GetFileType (hFile=0x444) returned 0x1 [0086.428] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xec [0086.429] ReadFile (in: hFile=0x444, lpBuffer=0x2309f58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x2309f58*, lpNumberOfBytesRead=0x3be478*=0xec, lpOverlapped=0x0) returned 1 [0086.430] CloseHandle (hObject=0x444) returned 1 [0086.506] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\messages.json", lpFilePart=0x0) returned 0x8f [0086.506] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0086.506] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0086.508] GetFileType (hFile=0x444) returned 0x1 [0086.508] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0086.508] GetFileType (hFile=0x444) returned 0x1 [0086.508] WriteFile (in: hFile=0x444, lpBuffer=0x21812b0*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x21812b0*, lpNumberOfBytesWritten=0x3be388*=0xf0, lpOverlapped=0x0) returned 1 [0086.510] CloseHandle (hObject=0x444) returned 1 [0086.510] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\messages.json", lpFilePart=0x0) returned 0x8f [0086.510] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0086.510] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0086.510] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7524245a, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x75244ad0, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1f68f855, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xf0)) returned 1 [0086.510] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0086.510] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\messages.json.xuy")) returned 1 [0086.511] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0086.512] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko", lpFilePart=0x0) returned 0x81 [0086.512] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\", lpFilePart=0x0) returned 0x82 [0086.512] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7cd0 [0086.512] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0086.512] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0086.513] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0086.513] FindClose (in: hFindFile=0x5d7cd0 | out: hFindFile=0x5d7cd0) returned 1 [0086.513] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0086.513] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0086.513] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0086.513] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko", lpFilePart=0x0) returned 0x81 [0086.513] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\", lpFilePart=0x0) returned 0x82 [0086.513] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d78b0 [0086.513] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0086.514] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0086.514] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0086.514] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0086.514] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0086.514] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0086.514] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\messages.json", lpFilePart=0x0) returned 0x8f [0086.514] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0086.514] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x2185408 | out: lpFileInformation=0x2185408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7529a2a6, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7529c910, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7581d634, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xe6)) returned 1 [0086.514] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0086.514] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\messages.json", lpFilePart=0x0) returned 0x8f [0086.515] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0086.515] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0086.515] GetFileType (hFile=0x444) returned 0x1 [0086.515] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0086.515] GetFileType (hFile=0x444) returned 0x1 [0086.515] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xe6 [0086.515] ReadFile (in: hFile=0x444, lpBuffer=0x21858b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x21858b8*, lpNumberOfBytesRead=0x3be478*=0xe6, lpOverlapped=0x0) returned 1 [0086.516] CloseHandle (hObject=0x444) returned 1 [0086.534] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\messages.json", lpFilePart=0x0) returned 0x8f [0086.534] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0086.534] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0086.536] GetFileType (hFile=0x444) returned 0x1 [0086.536] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0086.536] GetFileType (hFile=0x444) returned 0x1 [0086.536] WriteFile (in: hFile=0x444, lpBuffer=0x21fcc20*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x21fcc20*, lpNumberOfBytesWritten=0x3be388*=0xf0, lpOverlapped=0x0) returned 1 [0086.537] CloseHandle (hObject=0x444) returned 1 [0086.537] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\messages.json", lpFilePart=0x0) returned 0x8f [0086.537] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0086.537] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0086.537] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7529a2a6, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7529c910, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1f6dbdfe, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xf0)) returned 1 [0086.537] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0086.538] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\messages.json.xuy")) returned 1 [0086.539] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0086.539] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt", lpFilePart=0x0) returned 0x81 [0086.539] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\", lpFilePart=0x0) returned 0x82 [0086.539] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7550 [0086.541] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0086.541] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0086.542] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0086.542] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0086.542] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0086.542] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0086.542] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0086.542] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt", lpFilePart=0x0) returned 0x81 [0086.542] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\", lpFilePart=0x0) returned 0x82 [0086.542] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d78b0 [0086.542] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0086.543] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0086.543] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0086.543] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0086.543] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0086.543] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0086.543] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\messages.json", lpFilePart=0x0) returned 0x8f [0086.543] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0086.543] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x2200d78 | out: lpFileInformation=0x2200d78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x752c3ac8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x752eab10, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7581d634, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xe4)) returned 1 [0086.544] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0086.544] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\messages.json", lpFilePart=0x0) returned 0x8f [0086.544] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0086.544] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0086.544] GetFileType (hFile=0x444) returned 0x1 [0086.544] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0086.544] GetFileType (hFile=0x444) returned 0x1 [0086.544] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xe4 [0086.544] ReadFile (in: hFile=0x444, lpBuffer=0x2201228, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x2201228*, lpNumberOfBytesRead=0x3be478*=0xe4, lpOverlapped=0x0) returned 1 [0086.545] CloseHandle (hObject=0x444) returned 1 [0086.579] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\messages.json", lpFilePart=0x0) returned 0x8f [0086.579] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0086.579] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0086.581] GetFileType (hFile=0x444) returned 0x1 [0086.581] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0086.581] GetFileType (hFile=0x444) returned 0x1 [0086.581] WriteFile (in: hFile=0x444, lpBuffer=0x2278590*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x2278590*, lpNumberOfBytesWritten=0x3be388*=0xf0, lpOverlapped=0x0) returned 1 [0086.583] CloseHandle (hObject=0x444) returned 1 [0086.584] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\messages.json", lpFilePart=0x0) returned 0x8f [0086.584] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0086.584] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0086.584] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x752c3ac8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x752eab10, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1f74e50f, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xf0)) returned 1 [0086.584] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0086.584] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\messages.json.xuy")) returned 1 [0086.585] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0086.585] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv", lpFilePart=0x0) returned 0x81 [0086.585] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\", lpFilePart=0x0) returned 0x82 [0086.586] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d79d0 [0086.586] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0086.586] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0086.586] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0086.586] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0086.586] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0086.587] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0086.587] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0086.587] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv", lpFilePart=0x0) returned 0x81 [0086.587] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\", lpFilePart=0x0) returned 0x82 [0086.587] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7670 [0086.587] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0086.587] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0086.587] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0086.588] FindClose (in: hFindFile=0x5d7670 | out: hFindFile=0x5d7670) returned 1 [0086.588] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0086.588] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0086.588] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\messages.json", lpFilePart=0x0) returned 0x8f [0086.588] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0086.588] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x227c6e8 | out: lpFileInformation=0x227c6e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75333fbc, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x75336600, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7581d634, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xe9)) returned 1 [0086.588] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0086.588] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\messages.json", lpFilePart=0x0) returned 0x8f [0086.588] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0086.588] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0086.589] GetFileType (hFile=0x444) returned 0x1 [0086.589] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0086.589] GetFileType (hFile=0x444) returned 0x1 [0086.589] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xe9 [0086.589] ReadFile (in: hFile=0x444, lpBuffer=0x227cba0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x227cba0*, lpNumberOfBytesRead=0x3be478*=0xe9, lpOverlapped=0x0) returned 1 [0086.591] CloseHandle (hObject=0x444) returned 1 [0086.613] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\messages.json", lpFilePart=0x0) returned 0x8f [0086.613] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0086.613] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0086.615] GetFileType (hFile=0x444) returned 0x1 [0086.615] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0086.615] GetFileType (hFile=0x444) returned 0x1 [0086.615] WriteFile (in: hFile=0x444, lpBuffer=0x22f3f00*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x22f3f00*, lpNumberOfBytesWritten=0x3be388*=0xf0, lpOverlapped=0x0) returned 1 [0086.616] CloseHandle (hObject=0x444) returned 1 [0086.616] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\messages.json", lpFilePart=0x0) returned 0x8f [0086.616] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0086.617] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0086.617] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75333fbc, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x75336600, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1f79a8a7, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xf0)) returned 1 [0086.617] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0086.617] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\messages.json.xuy")) returned 1 [0086.618] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0086.618] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms", lpFilePart=0x0) returned 0x81 [0086.618] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\", lpFilePart=0x0) returned 0x82 [0086.619] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d79d0 [0086.619] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0086.619] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0086.619] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0086.619] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0086.620] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0086.620] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0086.620] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0086.620] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms", lpFilePart=0x0) returned 0x81 [0086.620] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\", lpFilePart=0x0) returned 0x82 [0086.620] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7af0 [0086.620] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0086.620] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0086.621] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0086.621] FindClose (in: hFindFile=0x5d7af0 | out: hFindFile=0x5d7af0) returned 1 [0086.621] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0086.621] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0086.621] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\messages.json", lpFilePart=0x0) returned 0x8f [0086.621] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0086.621] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x22f8058 | out: lpFileInformation=0x22f8058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x753625f4, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x75384800, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7581d634, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xd2)) returned 1 [0086.621] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0086.621] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\messages.json", lpFilePart=0x0) returned 0x8f [0086.621] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0086.621] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0086.622] GetFileType (hFile=0x444) returned 0x1 [0086.622] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0086.622] GetFileType (hFile=0x444) returned 0x1 [0086.622] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xd2 [0086.622] ReadFile (in: hFile=0x444, lpBuffer=0x22f84f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x22f84f8*, lpNumberOfBytesRead=0x3be478*=0xd2, lpOverlapped=0x0) returned 1 [0086.623] CloseHandle (hObject=0x444) returned 1 [0086.696] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\messages.json", lpFilePart=0x0) returned 0x8f [0086.696] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0086.696] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0086.698] GetFileType (hFile=0x444) returned 0x1 [0086.698] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0086.698] GetFileType (hFile=0x444) returned 0x1 [0086.698] WriteFile (in: hFile=0x444, lpBuffer=0x216f820*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x216f820*, lpNumberOfBytesWritten=0x3be388*=0xe0, lpOverlapped=0x0) returned 1 [0086.699] CloseHandle (hObject=0x444) returned 1 [0086.699] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\messages.json", lpFilePart=0x0) returned 0x8f [0086.700] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0086.700] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0086.700] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x753625f4, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x75384800, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1f859494, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1 [0086.700] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0086.700] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\messages.json.xuy")) returned 1 [0086.701] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0086.701] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl", lpFilePart=0x0) returned 0x81 [0086.702] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\", lpFilePart=0x0) returned 0x82 [0086.702] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d73d0 [0086.705] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0086.705] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0086.705] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0086.706] FindClose (in: hFindFile=0x5d73d0 | out: hFindFile=0x5d73d0) returned 1 [0086.706] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0086.706] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0086.706] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0086.706] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl", lpFilePart=0x0) returned 0x81 [0086.706] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\", lpFilePart=0x0) returned 0x82 [0086.706] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d78b0 [0086.706] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0086.707] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0086.707] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0086.707] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0086.707] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0086.707] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0086.707] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\messages.json", lpFilePart=0x0) returned 0x8f [0086.707] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0086.707] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x2173978 | out: lpFileInformation=0x2173978*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x753c4091, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x753c3fa0, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7581fd3d, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xdd)) returned 1 [0086.707] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0086.707] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\messages.json", lpFilePart=0x0) returned 0x8f [0086.708] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0086.708] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0086.708] GetFileType (hFile=0x444) returned 0x1 [0086.708] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0086.708] GetFileType (hFile=0x444) returned 0x1 [0086.708] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xdd [0086.708] ReadFile (in: hFile=0x444, lpBuffer=0x2173e20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x2173e20*, lpNumberOfBytesRead=0x3be478*=0xdd, lpOverlapped=0x0) returned 1 [0086.709] CloseHandle (hObject=0x444) returned 1 [0086.726] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\messages.json", lpFilePart=0x0) returned 0x8f [0086.726] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0086.726] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0086.728] GetFileType (hFile=0x444) returned 0x1 [0086.728] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0086.728] GetFileType (hFile=0x444) returned 0x1 [0086.728] WriteFile (in: hFile=0x444, lpBuffer=0x21eb160*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x21eb160*, lpNumberOfBytesWritten=0x3be388*=0xe0, lpOverlapped=0x0) returned 1 [0086.729] CloseHandle (hObject=0x444) returned 1 [0086.729] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\messages.json", lpFilePart=0x0) returned 0x8f [0086.729] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0086.729] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0086.729] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x753c4091, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x753c3fa0, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1f8af4c0, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1 [0086.729] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0086.730] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\messages.json.xuy")) returned 1 [0086.731] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0086.731] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no", lpFilePart=0x0) returned 0x81 [0086.731] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\", lpFilePart=0x0) returned 0x82 [0086.731] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7af0 [0086.733] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0086.733] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0086.733] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0086.733] FindClose (in: hFindFile=0x5d7af0 | out: hFindFile=0x5d7af0) returned 1 [0086.733] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0086.733] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0086.733] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0086.733] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no", lpFilePart=0x0) returned 0x81 [0086.734] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\", lpFilePart=0x0) returned 0x82 [0086.734] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d81b0 [0086.734] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0086.735] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0086.735] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0086.735] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0086.735] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0086.735] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0086.735] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\messages.json", lpFilePart=0x0) returned 0x8f [0086.735] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0086.735] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x21ef2b8 | out: lpFileInformation=0x21ef2b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x753d03eb, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x753d2a00, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0xe4180700, ftLastWriteTime.dwHighDateTime=0x1d03f5e, nFileSizeHigh=0x0, nFileSizeLow=0xcb)) returned 1 [0086.736] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0086.736] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\messages.json", lpFilePart=0x0) returned 0x8f [0086.736] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0086.736] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0086.736] GetFileType (hFile=0x444) returned 0x1 [0086.736] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0086.736] GetFileType (hFile=0x444) returned 0x1 [0086.736] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xcb [0086.736] ReadFile (in: hFile=0x444, lpBuffer=0x21ef750, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x21ef750*, lpNumberOfBytesRead=0x3be478*=0xcb, lpOverlapped=0x0) returned 1 [0086.737] CloseHandle (hObject=0x444) returned 1 [0086.753] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\messages.json", lpFilePart=0x0) returned 0x8f [0086.754] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0086.754] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0086.755] GetFileType (hFile=0x444) returned 0x1 [0086.755] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0086.756] GetFileType (hFile=0x444) returned 0x1 [0086.756] WriteFile (in: hFile=0x444, lpBuffer=0x2266a70*, nNumberOfBytesToWrite=0xd0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x2266a70*, lpNumberOfBytesWritten=0x3be388*=0xd0, lpOverlapped=0x0) returned 1 [0086.757] CloseHandle (hObject=0x444) returned 1 [0086.767] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\messages.json", lpFilePart=0x0) returned 0x8f [0086.767] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0086.767] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0086.767] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x753d03eb, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x753d2a00, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1f8f226e, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xd0)) returned 1 [0086.768] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0086.768] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\messages.json.xuy")) returned 1 [0086.769] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0086.769] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl", lpFilePart=0x0) returned 0x81 [0086.769] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\", lpFilePart=0x0) returned 0x82 [0086.769] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7e50 [0086.770] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0086.770] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0086.770] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0086.770] FindClose (in: hFindFile=0x5d7e50 | out: hFindFile=0x5d7e50) returned 1 [0086.770] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0086.770] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0086.770] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0086.770] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl", lpFilePart=0x0) returned 0x81 [0086.770] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\", lpFilePart=0x0) returned 0x82 [0086.770] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7370 [0086.771] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0086.771] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0086.771] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0086.771] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0086.771] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0086.771] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0086.771] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\messages.json", lpFilePart=0x0) returned 0x8f [0086.771] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0086.772] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x226abc8 | out: lpFileInformation=0x226abc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x753f26d5, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x753f25d0, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7581fd3d, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xd9)) returned 1 [0086.772] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0086.772] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\messages.json", lpFilePart=0x0) returned 0x8f [0086.772] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0086.772] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0086.772] GetFileType (hFile=0x444) returned 0x1 [0086.772] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0086.772] GetFileType (hFile=0x444) returned 0x1 [0086.772] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xd9 [0086.772] ReadFile (in: hFile=0x444, lpBuffer=0x226b070, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x226b070*, lpNumberOfBytesRead=0x3be478*=0xd9, lpOverlapped=0x0) returned 1 [0086.775] CloseHandle (hObject=0x444) returned 1 [0086.820] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\messages.json", lpFilePart=0x0) returned 0x8f [0086.820] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0086.821] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0086.822] GetFileType (hFile=0x444) returned 0x1 [0086.822] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0086.822] GetFileType (hFile=0x444) returned 0x1 [0086.822] WriteFile (in: hFile=0x444, lpBuffer=0x22e23b0*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x22e23b0*, lpNumberOfBytesWritten=0x3be388*=0xe0, lpOverlapped=0x0) returned 1 [0086.823] CloseHandle (hObject=0x444) returned 1 [0086.823] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\messages.json", lpFilePart=0x0) returned 0x8f [0086.823] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0086.823] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0086.823] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x753f26d5, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x753f25d0, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1f98a6a0, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1 [0086.824] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0086.824] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\messages.json.xuy")) returned 1 [0086.825] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0086.825] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR", lpFilePart=0x0) returned 0x84 [0086.825] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\", lpFilePart=0x0) returned 0x85 [0086.825] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7670 [0086.936] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0086.937] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0086.937] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0086.954] FindClose (in: hFindFile=0x5d7670 | out: hFindFile=0x5d7670) returned 1 [0086.954] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0086.954] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0086.955] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0086.955] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR", lpFilePart=0x0) returned 0x84 [0086.955] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\", lpFilePart=0x0) returned 0x85 [0086.955] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d79d0 [0086.955] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0086.955] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0086.955] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0086.955] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0086.956] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0086.956] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0086.956] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\messages.json", lpFilePart=0x0) returned 0x92 [0086.956] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0086.956] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_br\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x22e65d8 | out: lpFileInformation=0x22e65d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7540d486, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7542cf50, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7581fd3d, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xde)) returned 1 [0087.060] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0087.060] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\messages.json", lpFilePart=0x0) returned 0x92 [0087.060] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0087.060] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_br\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0087.060] GetFileType (hFile=0x444) returned 0x1 [0087.060] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0087.060] GetFileType (hFile=0x444) returned 0x1 [0087.061] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xde [0087.061] ReadFile (in: hFile=0x444, lpBuffer=0x22e6a90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x22e6a90*, lpNumberOfBytesRead=0x3be478*=0xde, lpOverlapped=0x0) returned 1 [0087.062] CloseHandle (hObject=0x444) returned 1 [0087.076] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\messages.json", lpFilePart=0x0) returned 0x92 [0087.076] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0087.076] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_br\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0087.115] GetFileType (hFile=0x444) returned 0x1 [0087.115] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0087.115] GetFileType (hFile=0x444) returned 0x1 [0087.115] WriteFile (in: hFile=0x444, lpBuffer=0x235ddd8*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x235ddd8*, lpNumberOfBytesWritten=0x3be388*=0xe0, lpOverlapped=0x0) returned 1 [0087.116] CloseHandle (hObject=0x444) returned 1 [0087.116] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\messages.json", lpFilePart=0x0) returned 0x92 [0087.116] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\messages.json.xuy", lpFilePart=0x0) returned 0x96 [0087.116] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0087.116] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_br\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7540d486, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7542cf50, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1fc60df0, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1 [0087.116] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0087.116] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_br\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_br\\messages.json.xuy")) returned 1 [0087.117] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0087.118] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT", lpFilePart=0x0) returned 0x84 [0087.118] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\", lpFilePart=0x0) returned 0x85 [0087.118] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7610 [0087.118] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0087.118] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0087.118] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0087.118] FindClose (in: hFindFile=0x5d7610 | out: hFindFile=0x5d7610) returned 1 [0087.118] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0087.118] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0087.118] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0087.118] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT", lpFilePart=0x0) returned 0x84 [0087.119] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\", lpFilePart=0x0) returned 0x85 [0087.119] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d79d0 [0087.119] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0087.119] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0087.119] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0087.119] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0087.119] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0087.119] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0087.119] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\messages.json", lpFilePart=0x0) returned 0x92 [0087.119] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0087.119] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_pt\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x2362018 | out: lpFileInformation=0x2362018*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7543bacd, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7543e0c0, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x75822459, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1 [0087.120] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0087.120] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\messages.json", lpFilePart=0x0) returned 0x92 [0087.120] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0087.120] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_pt\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0087.120] GetFileType (hFile=0x444) returned 0x1 [0087.120] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0087.120] GetFileType (hFile=0x444) returned 0x1 [0087.120] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xe0 [0087.120] ReadFile (in: hFile=0x444, lpBuffer=0x23624d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x23624d0*, lpNumberOfBytesRead=0x3be478*=0xe0, lpOverlapped=0x0) returned 1 [0087.121] CloseHandle (hObject=0x444) returned 1 [0087.266] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\messages.json", lpFilePart=0x0) returned 0x92 [0087.266] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0087.266] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_pt\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0087.268] GetFileType (hFile=0x444) returned 0x1 [0087.268] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0087.268] GetFileType (hFile=0x444) returned 0x1 [0087.268] WriteFile (in: hFile=0x444, lpBuffer=0x21b4a38*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x21b4a38*, lpNumberOfBytesWritten=0x3be388*=0xf0, lpOverlapped=0x0) returned 1 [0087.269] CloseHandle (hObject=0x444) returned 1 [0087.270] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\messages.json", lpFilePart=0x0) returned 0x92 [0087.270] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\messages.json.xuy", lpFilePart=0x0) returned 0x96 [0087.270] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0087.270] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_pt\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7543bacd, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7543e0c0, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1fddcb5b, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xf0)) returned 1 [0087.270] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0087.270] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_pt\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_pt\\messages.json.xuy")) returned 1 [0087.271] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0087.271] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro", lpFilePart=0x0) returned 0x81 [0087.271] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\", lpFilePart=0x0) returned 0x82 [0087.271] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7c70 [0087.275] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0087.275] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0087.275] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0087.275] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0087.275] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0087.275] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0087.275] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0087.275] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro", lpFilePart=0x0) returned 0x81 [0087.275] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\", lpFilePart=0x0) returned 0x82 [0087.275] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d8090 [0087.276] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0087.276] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0087.276] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0087.276] FindClose (in: hFindFile=0x5d8090 | out: hFindFile=0x5d8090) returned 1 [0087.276] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0087.276] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0087.276] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\messages.json", lpFilePart=0x0) returned 0x8f [0087.276] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0087.276] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x21b8ba8 | out: lpFileInformation=0x21b8ba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75447e18, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7544a410, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x75822459, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xde)) returned 1 [0087.277] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0087.277] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\messages.json", lpFilePart=0x0) returned 0x8f [0087.277] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0087.277] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0087.277] GetFileType (hFile=0x444) returned 0x1 [0087.277] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0087.277] GetFileType (hFile=0x444) returned 0x1 [0087.277] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xde [0087.277] ReadFile (in: hFile=0x444, lpBuffer=0x21b9050, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x21b9050*, lpNumberOfBytesRead=0x3be478*=0xde, lpOverlapped=0x0) returned 1 [0087.278] CloseHandle (hObject=0x444) returned 1 [0087.293] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\messages.json", lpFilePart=0x0) returned 0x8f [0087.293] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0087.293] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0087.295] GetFileType (hFile=0x444) returned 0x1 [0087.295] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0087.295] GetFileType (hFile=0x444) returned 0x1 [0087.295] WriteFile (in: hFile=0x444, lpBuffer=0x2230390*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x2230390*, lpNumberOfBytesWritten=0x3be388*=0xe0, lpOverlapped=0x0) returned 1 [0087.296] CloseHandle (hObject=0x444) returned 1 [0087.296] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\messages.json", lpFilePart=0x0) returned 0x8f [0087.298] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0087.298] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0087.298] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75447e18, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7544a410, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1fe02d21, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1 [0087.298] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0087.298] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\messages.json.xuy")) returned 1 [0087.299] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0087.299] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru", lpFilePart=0x0) returned 0x81 [0087.299] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\", lpFilePart=0x0) returned 0x82 [0087.300] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d81b0 [0087.300] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0087.300] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0087.300] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0087.300] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0087.300] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0087.300] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0087.301] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0087.301] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru", lpFilePart=0x0) returned 0x81 [0087.301] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\", lpFilePart=0x0) returned 0x82 [0087.301] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7d30 [0087.301] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0087.301] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0087.301] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0087.301] FindClose (in: hFindFile=0x5d7d30 | out: hFindFile=0x5d7d30) returned 1 [0087.302] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0087.302] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0087.302] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\messages.json", lpFilePart=0x0) returned 0x8f [0087.302] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0087.302] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x22344e8 | out: lpFileInformation=0x22344e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x754604bd, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x754603a0, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x75822459, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x110)) returned 1 [0087.302] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0087.302] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\messages.json", lpFilePart=0x0) returned 0x8f [0087.302] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0087.302] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0087.302] GetFileType (hFile=0x444) returned 0x1 [0087.302] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0087.302] GetFileType (hFile=0x444) returned 0x1 [0087.302] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x110 [0087.302] ReadFile (in: hFile=0x444, lpBuffer=0x22349c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x22349c0*, lpNumberOfBytesRead=0x3be478*=0x110, lpOverlapped=0x0) returned 1 [0087.303] CloseHandle (hObject=0x444) returned 1 [0087.320] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\messages.json", lpFilePart=0x0) returned 0x8f [0087.321] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0087.321] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0087.322] GetFileType (hFile=0x444) returned 0x1 [0087.322] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0087.322] GetFileType (hFile=0x444) returned 0x1 [0087.322] WriteFile (in: hFile=0x444, lpBuffer=0x22abfd0*, nNumberOfBytesToWrite=0x120, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x22abfd0*, lpNumberOfBytesWritten=0x3be388*=0x120, lpOverlapped=0x0) returned 1 [0087.323] CloseHandle (hObject=0x444) returned 1 [0087.323] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\messages.json", lpFilePart=0x0) returned 0x8f [0087.323] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0087.324] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0087.324] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x754604bd, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x754603a0, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1fe4f0e5, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x120)) returned 1 [0087.324] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0087.324] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\messages.json.xuy")) returned 1 [0087.325] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0087.325] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk", lpFilePart=0x0) returned 0x81 [0087.325] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\", lpFilePart=0x0) returned 0x82 [0087.325] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7fd0 [0087.333] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0087.333] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0087.333] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0087.333] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0087.333] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0087.333] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0087.334] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0087.334] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk", lpFilePart=0x0) returned 0x81 [0087.334] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\", lpFilePart=0x0) returned 0x82 [0087.334] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7370 [0087.334] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0087.334] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0087.334] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0087.335] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0087.335] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0087.335] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0087.335] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\messages.json", lpFilePart=0x0) returned 0x8f [0087.335] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0087.335] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x22b0128 | out: lpFileInformation=0x22b0128*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7546a104, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7546c6f0, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x75822459, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xe3)) returned 1 [0087.335] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0087.335] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\messages.json", lpFilePart=0x0) returned 0x8f [0087.335] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0087.335] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0087.335] GetFileType (hFile=0x444) returned 0x1 [0087.335] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0087.335] GetFileType (hFile=0x444) returned 0x1 [0087.336] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xe3 [0087.336] ReadFile (in: hFile=0x444, lpBuffer=0x22b05d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x22b05d8*, lpNumberOfBytesRead=0x3be478*=0xe3, lpOverlapped=0x0) returned 1 [0087.337] CloseHandle (hObject=0x444) returned 1 [0087.351] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\messages.json", lpFilePart=0x0) returned 0x8f [0087.351] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0087.351] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0087.352] GetFileType (hFile=0x444) returned 0x1 [0087.352] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0087.352] GetFileType (hFile=0x444) returned 0x1 [0087.352] WriteFile (in: hFile=0x444, lpBuffer=0x2327940*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x2327940*, lpNumberOfBytesWritten=0x3be388*=0xf0, lpOverlapped=0x0) returned 1 [0087.353] CloseHandle (hObject=0x444) returned 1 [0087.353] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\messages.json", lpFilePart=0x0) returned 0x8f [0087.353] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0087.353] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0087.353] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7546a104, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7546c6f0, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1fe9b684, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xf0)) returned 1 [0087.353] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0087.354] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\messages.json.xuy")) returned 1 [0087.354] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0087.354] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl", lpFilePart=0x0) returned 0x81 [0087.354] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\", lpFilePart=0x0) returned 0x82 [0087.355] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d81b0 [0087.355] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0087.355] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0087.355] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0087.355] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0087.355] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0087.355] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0087.355] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0087.355] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl", lpFilePart=0x0) returned 0x81 [0087.355] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\", lpFilePart=0x0) returned 0x82 [0087.356] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d79d0 [0087.356] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0087.356] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0087.356] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0087.356] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0087.356] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0087.356] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0087.356] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\messages.json", lpFilePart=0x0) returned 0x8f [0087.356] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0087.356] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x232ba98 | out: lpFileInformation=0x232ba98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7547d987, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7547ff70, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x75822459, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xdf)) returned 1 [0087.357] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0087.357] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\messages.json", lpFilePart=0x0) returned 0x8f [0087.357] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0087.357] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0087.357] GetFileType (hFile=0x444) returned 0x1 [0087.357] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0087.357] GetFileType (hFile=0x444) returned 0x1 [0087.357] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xdf [0087.357] ReadFile (in: hFile=0x444, lpBuffer=0x232bf40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x232bf40*, lpNumberOfBytesRead=0x3be478*=0xdf, lpOverlapped=0x0) returned 1 [0087.358] CloseHandle (hObject=0x444) returned 1 [0087.404] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\messages.json", lpFilePart=0x0) returned 0x8f [0087.404] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0087.404] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0087.406] GetFileType (hFile=0x444) returned 0x1 [0087.406] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0087.406] GetFileType (hFile=0x444) returned 0x1 [0087.406] WriteFile (in: hFile=0x444, lpBuffer=0x21a3bf8*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x21a3bf8*, lpNumberOfBytesWritten=0x3be388*=0xe0, lpOverlapped=0x0) returned 1 [0087.408] CloseHandle (hObject=0x444) returned 1 [0087.408] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\messages.json", lpFilePart=0x0) returned 0x8f [0087.408] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0087.408] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0087.408] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7547d987, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7547ff70, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1ff34519, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1 [0087.408] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0087.409] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\messages.json.xuy")) returned 1 [0087.410] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0087.410] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr", lpFilePart=0x0) returned 0x81 [0087.410] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\", lpFilePart=0x0) returned 0x82 [0087.410] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7eb0 [0087.412] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0087.412] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0087.412] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0087.412] FindClose (in: hFindFile=0x5d7eb0 | out: hFindFile=0x5d7eb0) returned 1 [0087.412] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0087.412] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0087.412] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0087.412] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr", lpFilePart=0x0) returned 0x81 [0087.412] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\", lpFilePart=0x0) returned 0x82 [0087.412] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d79d0 [0087.413] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0087.413] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0087.413] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0087.413] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0087.413] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0087.413] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0087.413] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\messages.json", lpFilePart=0x0) returned 0x8f [0087.413] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0087.413] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x21a7d50 | out: lpFileInformation=0x21a7d50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7548c3eb, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7548c2c0, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x75824b69, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x104)) returned 1 [0087.414] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0087.414] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\messages.json", lpFilePart=0x0) returned 0x8f [0087.414] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0087.414] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0087.414] GetFileType (hFile=0x444) returned 0x1 [0087.414] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0087.414] GetFileType (hFile=0x444) returned 0x1 [0087.414] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x104 [0087.414] ReadFile (in: hFile=0x444, lpBuffer=0x21a8220, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x21a8220*, lpNumberOfBytesRead=0x3be478*=0x104, lpOverlapped=0x0) returned 1 [0087.415] CloseHandle (hObject=0x444) returned 1 [0087.432] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\messages.json", lpFilePart=0x0) returned 0x8f [0087.432] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0087.432] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0087.433] GetFileType (hFile=0x444) returned 0x1 [0087.433] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0087.433] GetFileType (hFile=0x444) returned 0x1 [0087.433] WriteFile (in: hFile=0x444, lpBuffer=0x221f7e0*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x221f7e0*, lpNumberOfBytesWritten=0x3be388*=0x110, lpOverlapped=0x0) returned 1 [0087.434] CloseHandle (hObject=0x444) returned 1 [0087.435] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\messages.json", lpFilePart=0x0) returned 0x8f [0087.435] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0087.435] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0087.435] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7548c3eb, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7548c2c0, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1ff5a3fe, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x110)) returned 1 [0087.435] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0087.435] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\messages.json.xuy")) returned 1 [0087.436] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0087.436] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv", lpFilePart=0x0) returned 0x81 [0087.436] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\", lpFilePart=0x0) returned 0x82 [0087.436] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d78b0 [0087.437] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0087.438] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0087.438] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0087.438] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0087.438] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0087.438] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0087.438] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0087.438] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv", lpFilePart=0x0) returned 0x81 [0087.438] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\", lpFilePart=0x0) returned 0x82 [0087.438] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7fd0 [0087.439] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0087.439] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0087.439] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0087.439] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0087.439] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0087.439] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0087.439] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\messages.json", lpFilePart=0x0) returned 0x8f [0087.439] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0087.440] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x2223938 | out: lpFileInformation=0x2223938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x754b833b, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x754b81e0, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x75824b69, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xe2)) returned 1 [0087.440] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0087.440] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\messages.json", lpFilePart=0x0) returned 0x8f [0087.440] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0087.440] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0087.440] GetFileType (hFile=0x444) returned 0x1 [0087.440] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0087.440] GetFileType (hFile=0x444) returned 0x1 [0087.440] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xe2 [0087.440] ReadFile (in: hFile=0x444, lpBuffer=0x2223de8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x2223de8*, lpNumberOfBytesRead=0x3be478*=0xe2, lpOverlapped=0x0) returned 1 [0087.441] CloseHandle (hObject=0x444) returned 1 [0087.458] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\messages.json", lpFilePart=0x0) returned 0x8f [0087.458] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0087.458] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0087.460] GetFileType (hFile=0x444) returned 0x1 [0087.460] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0087.460] GetFileType (hFile=0x444) returned 0x1 [0087.460] WriteFile (in: hFile=0x444, lpBuffer=0x229b150*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x229b150*, lpNumberOfBytesWritten=0x3be388*=0xf0, lpOverlapped=0x0) returned 1 [0087.461] CloseHandle (hObject=0x444) returned 1 [0087.461] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\messages.json", lpFilePart=0x0) returned 0x8f [0087.461] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0087.461] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0087.461] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x754b833b, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x754b81e0, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1ffa6819, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xf0)) returned 1 [0087.461] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0087.461] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\messages.json.xuy")) returned 1 [0087.462] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0087.462] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th", lpFilePart=0x0) returned 0x81 [0087.462] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\", lpFilePart=0x0) returned 0x82 [0087.462] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7af0 [0087.465] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0087.465] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0087.465] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0087.465] FindClose (in: hFindFile=0x5d7af0 | out: hFindFile=0x5d7af0) returned 1 [0087.465] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0087.465] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0087.465] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0087.465] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th", lpFilePart=0x0) returned 0x81 [0087.465] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\", lpFilePart=0x0) returned 0x82 [0087.465] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7c70 [0087.466] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0087.466] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0087.466] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0087.466] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0087.466] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0087.466] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0087.466] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\messages.json", lpFilePart=0x0) returned 0x8f [0087.466] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0087.466] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x229f2a8 | out: lpFileInformation=0x229f2a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x754cbb98, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x754cba60, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x75824b69, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x104)) returned 1 [0087.467] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0087.467] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\messages.json", lpFilePart=0x0) returned 0x8f [0087.467] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0087.467] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0087.467] GetFileType (hFile=0x444) returned 0x1 [0087.467] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0087.467] GetFileType (hFile=0x444) returned 0x1 [0087.467] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x104 [0087.467] ReadFile (in: hFile=0x444, lpBuffer=0x229f778, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x229f778*, lpNumberOfBytesRead=0x3be478*=0x104, lpOverlapped=0x0) returned 1 [0087.469] CloseHandle (hObject=0x444) returned 1 [0087.486] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\messages.json", lpFilePart=0x0) returned 0x8f [0087.486] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0087.486] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0087.487] GetFileType (hFile=0x444) returned 0x1 [0087.487] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0087.487] GetFileType (hFile=0x444) returned 0x1 [0087.488] WriteFile (in: hFile=0x444, lpBuffer=0x2316d38*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x2316d38*, lpNumberOfBytesWritten=0x3be388*=0x110, lpOverlapped=0x0) returned 1 [0087.488] CloseHandle (hObject=0x444) returned 1 [0087.489] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\messages.json", lpFilePart=0x0) returned 0x8f [0087.489] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0087.489] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0087.489] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x754cbb98, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x754cba60, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1fff2c60, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x110)) returned 1 [0087.489] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0087.489] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\messages.json.xuy")) returned 1 [0087.490] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0087.490] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr", lpFilePart=0x0) returned 0x81 [0087.490] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\", lpFilePart=0x0) returned 0x82 [0087.490] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7670 [0087.490] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0087.491] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0087.491] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0087.491] FindClose (in: hFindFile=0x5d7670 | out: hFindFile=0x5d7670) returned 1 [0087.491] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0087.491] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0087.491] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0087.491] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr", lpFilePart=0x0) returned 0x81 [0087.491] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\", lpFilePart=0x0) returned 0x82 [0087.491] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d78b0 [0087.491] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0087.491] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0087.492] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0087.492] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0087.492] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0087.492] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0087.492] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\messages.json", lpFilePart=0x0) returned 0x8f [0087.492] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0087.492] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x231ae90 | out: lpFileInformation=0x231ae90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x754d7ef0, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x754da4c0, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x75824b69, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xdd)) returned 1 [0087.492] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0087.492] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\messages.json", lpFilePart=0x0) returned 0x8f [0087.492] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0087.492] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0087.492] GetFileType (hFile=0x444) returned 0x1 [0087.492] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0087.492] GetFileType (hFile=0x444) returned 0x1 [0087.492] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xdd [0087.493] ReadFile (in: hFile=0x444, lpBuffer=0x231b338, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x231b338*, lpNumberOfBytesRead=0x3be478*=0xdd, lpOverlapped=0x0) returned 1 [0087.499] CloseHandle (hObject=0x444) returned 1 [0087.554] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\messages.json", lpFilePart=0x0) returned 0x8f [0087.554] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0087.554] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0087.556] GetFileType (hFile=0x444) returned 0x1 [0087.556] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0087.556] GetFileType (hFile=0x444) returned 0x1 [0087.556] WriteFile (in: hFile=0x444, lpBuffer=0x2193008*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x2193008*, lpNumberOfBytesWritten=0x3be388*=0xe0, lpOverlapped=0x0) returned 1 [0087.557] CloseHandle (hObject=0x444) returned 1 [0087.557] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\messages.json", lpFilePart=0x0) returned 0x8f [0087.558] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0087.558] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0087.558] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x754d7ef0, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x754da4c0, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2008b994, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1 [0087.558] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0087.558] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\messages.json.xuy")) returned 1 [0087.559] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0087.559] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk", lpFilePart=0x0) returned 0x81 [0087.559] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\", lpFilePart=0x0) returned 0x82 [0087.559] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d78b0 [0087.562] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0087.562] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0087.562] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0087.562] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0087.562] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0087.563] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0087.563] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0087.563] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk", lpFilePart=0x0) returned 0x81 [0087.563] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\", lpFilePart=0x0) returned 0x82 [0087.563] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d73d0 [0087.563] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0087.563] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0087.563] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0087.563] FindClose (in: hFindFile=0x5d73d0 | out: hFindFile=0x5d73d0) returned 1 [0087.564] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0087.564] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0087.564] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\messages.json", lpFilePart=0x0) returned 0x8f [0087.564] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0087.564] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x2197160 | out: lpFileInformation=0x2197160*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7550b340, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7550d910, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x75824b69, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x10e)) returned 1 [0087.564] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0087.564] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\messages.json", lpFilePart=0x0) returned 0x8f [0087.564] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0087.564] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0087.564] GetFileType (hFile=0x444) returned 0x1 [0087.564] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0087.564] GetFileType (hFile=0x444) returned 0x1 [0087.564] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x10e [0087.564] ReadFile (in: hFile=0x444, lpBuffer=0x2197638, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x2197638*, lpNumberOfBytesRead=0x3be478*=0x10e, lpOverlapped=0x0) returned 1 [0087.574] CloseHandle (hObject=0x444) returned 1 [0087.591] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\messages.json", lpFilePart=0x0) returned 0x8f [0087.591] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0087.591] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0087.593] GetFileType (hFile=0x444) returned 0x1 [0087.593] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0087.593] GetFileType (hFile=0x444) returned 0x1 [0087.593] WriteFile (in: hFile=0x444, lpBuffer=0x220ebf0*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x220ebf0*, lpNumberOfBytesWritten=0x3be388*=0x110, lpOverlapped=0x0) returned 1 [0087.595] CloseHandle (hObject=0x444) returned 1 [0087.596] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\messages.json", lpFilePart=0x0) returned 0x8f [0087.596] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0087.596] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0087.596] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7550b340, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7550d910, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x200fdc37, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x110)) returned 1 [0087.596] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0087.596] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\messages.json.xuy")) returned 1 [0087.597] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0087.597] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi", lpFilePart=0x0) returned 0x81 [0087.597] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\", lpFilePart=0x0) returned 0x82 [0087.597] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7c70 [0087.598] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0087.598] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0087.598] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0087.598] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0087.598] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0087.598] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0087.598] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0087.598] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi", lpFilePart=0x0) returned 0x81 [0087.598] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\", lpFilePart=0x0) returned 0x82 [0087.598] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d78b0 [0087.599] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0087.599] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0087.599] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0087.599] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0087.599] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0087.599] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0087.599] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\messages.json", lpFilePart=0x0) returned 0x8f [0087.599] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0087.599] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x2212d48 | out: lpFileInformation=0x2212d48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7551ebcf, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7551ea80, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x75827275, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xed)) returned 1 [0087.600] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0087.600] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\messages.json", lpFilePart=0x0) returned 0x8f [0087.600] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0087.600] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0087.600] GetFileType (hFile=0x444) returned 0x1 [0087.600] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0087.600] GetFileType (hFile=0x444) returned 0x1 [0087.600] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xed [0087.600] ReadFile (in: hFile=0x444, lpBuffer=0x2213200, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x2213200*, lpNumberOfBytesRead=0x3be478*=0xed, lpOverlapped=0x0) returned 1 [0087.601] CloseHandle (hObject=0x444) returned 1 [0087.617] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\messages.json", lpFilePart=0x0) returned 0x8f [0087.617] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0087.617] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0087.619] GetFileType (hFile=0x444) returned 0x1 [0087.619] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0087.619] GetFileType (hFile=0x444) returned 0x1 [0087.619] WriteFile (in: hFile=0x444, lpBuffer=0x228a560*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x228a560*, lpNumberOfBytesWritten=0x3be388*=0xf0, lpOverlapped=0x0) returned 1 [0087.620] CloseHandle (hObject=0x444) returned 1 [0087.620] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\messages.json", lpFilePart=0x0) returned 0x8f [0087.620] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0087.620] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0087.620] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7551ebcf, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7551ea80, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x20123ef6, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xf0)) returned 1 [0087.620] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0087.620] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\messages.json.xuy")) returned 1 [0087.621] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0087.621] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN", lpFilePart=0x0) returned 0x84 [0087.621] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\", lpFilePart=0x0) returned 0x85 [0087.622] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7370 [0087.625] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0087.625] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0087.625] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0087.625] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0087.625] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0087.625] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0087.625] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0087.625] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN", lpFilePart=0x0) returned 0x84 [0087.625] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\", lpFilePart=0x0) returned 0x85 [0087.625] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7670 [0087.626] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0087.626] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0087.626] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0087.626] FindClose (in: hFindFile=0x5d7670 | out: hFindFile=0x5d7670) returned 1 [0087.626] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0087.626] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0087.626] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\messages.json", lpFilePart=0x0) returned 0x92 [0087.626] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0087.626] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_cn\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x228e788 | out: lpFileInformation=0x228e788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7552af23, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7552d4e0, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x75827275, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xd7)) returned 1 [0087.627] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0087.627] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\messages.json", lpFilePart=0x0) returned 0x92 [0087.627] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0087.627] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_cn\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0087.627] GetFileType (hFile=0x444) returned 0x1 [0087.627] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0087.627] GetFileType (hFile=0x444) returned 0x1 [0087.627] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xd7 [0087.627] ReadFile (in: hFile=0x444, lpBuffer=0x228ec38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x228ec38*, lpNumberOfBytesRead=0x3be478*=0xd7, lpOverlapped=0x0) returned 1 [0087.628] CloseHandle (hObject=0x444) returned 1 [0087.644] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\messages.json", lpFilePart=0x0) returned 0x92 [0087.644] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0087.644] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_cn\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0087.646] GetFileType (hFile=0x444) returned 0x1 [0087.646] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0087.646] GetFileType (hFile=0x444) returned 0x1 [0087.646] WriteFile (in: hFile=0x444, lpBuffer=0x2305f88*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x2305f88*, lpNumberOfBytesWritten=0x3be388*=0xe0, lpOverlapped=0x0) returned 1 [0087.647] CloseHandle (hObject=0x444) returned 1 [0087.647] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\messages.json", lpFilePart=0x0) returned 0x92 [0087.647] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\messages.json.xuy", lpFilePart=0x0) returned 0x96 [0087.647] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0087.647] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_cn\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7552af23, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7552d4e0, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x201704fe, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1 [0087.647] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0087.647] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_cn\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_cn\\messages.json.xuy")) returned 1 [0087.648] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0087.648] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW", lpFilePart=0x0) returned 0x84 [0087.648] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\", lpFilePart=0x0) returned 0x85 [0087.648] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d79d0 [0087.649] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0087.649] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0087.649] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0087.649] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0087.649] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0087.649] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0087.649] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0087.649] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW", lpFilePart=0x0) returned 0x84 [0087.649] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\", lpFilePart=0x0) returned 0x85 [0087.649] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7370 [0087.650] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0087.650] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0087.650] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0087.650] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0087.650] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0087.650] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0087.650] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\messages.json", lpFilePart=0x0) returned 0x92 [0087.650] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0087.650] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_tw\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x230a1c8 | out: lpFileInformation=0x230a1c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75537277, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x75537120, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x75827275, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xd1)) returned 1 [0087.653] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0087.653] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\messages.json", lpFilePart=0x0) returned 0x92 [0087.653] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0087.653] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_tw\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0087.653] GetFileType (hFile=0x444) returned 0x1 [0087.653] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0087.653] GetFileType (hFile=0x444) returned 0x1 [0087.653] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xd1 [0087.653] ReadFile (in: hFile=0x444, lpBuffer=0x230a678, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x230a678*, lpNumberOfBytesRead=0x3be478*=0xd1, lpOverlapped=0x0) returned 1 [0087.654] CloseHandle (hObject=0x444) returned 1 [0087.709] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\messages.json", lpFilePart=0x0) returned 0x92 [0087.710] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0087.710] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_tw\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0087.711] GetFileType (hFile=0x444) returned 0x1 [0087.711] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0087.711] GetFileType (hFile=0x444) returned 0x1 [0087.711] WriteFile (in: hFile=0x444, lpBuffer=0x2182338*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x2182338*, lpNumberOfBytesWritten=0x3be388*=0xe0, lpOverlapped=0x0) returned 1 [0087.712] CloseHandle (hObject=0x444) returned 1 [0087.712] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\messages.json", lpFilePart=0x0) returned 0x92 [0087.712] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\messages.json.xuy", lpFilePart=0x0) returned 0x96 [0087.712] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0087.713] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_tw\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75537277, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x75537120, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x20208e56, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1 [0087.713] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0087.713] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_tw\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_tw\\messages.json.xuy")) returned 1 [0087.714] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0087.714] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata", nBufferLength=0x105, lpBuffer=0x3be0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata", lpFilePart=0x0) returned 0x7f [0087.714] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\", nBufferLength=0x105, lpBuffer=0x3be060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\", lpFilePart=0x0) returned 0x80 [0087.714] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\*", lpFindFileData=0x3be270 | out: lpFindFileData=0x3be270) returned 0x5d8090 [0087.723] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0087.723] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0087.723] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0087.724] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 0 [0087.724] FindClose (in: hFindFile=0x5d8090 | out: hFindFile=0x5d8090) returned 1 [0087.724] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0087.724] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0087.724] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0087.724] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata", nBufferLength=0x105, lpBuffer=0x3be0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata", lpFilePart=0x0) returned 0x7f [0087.724] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\", nBufferLength=0x105, lpBuffer=0x3be060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\", lpFilePart=0x0) returned 0x80 [0087.724] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\*", lpFindFileData=0x3be270 | out: lpFindFileData=0x3be270) returned 0x5d7550 [0087.724] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0087.724] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0087.725] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0087.725] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 0 [0087.725] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0087.725] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0087.725] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0087.725] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\computed_hashes.json", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\computed_hashes.json", lpFilePart=0x0) returned 0x94 [0087.725] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0087.725] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\computed_hashes.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\computed_hashes.json"), fInfoLevelId=0x0, lpFileInformation=0x2186ba0 | out: lpFileInformation=0x2186ba0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75861c04, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x75861c04, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x75861c04, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x160)) returned 1 [0087.725] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0087.725] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\computed_hashes.json", nBufferLength=0x105, lpBuffer=0x3bdf40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\computed_hashes.json", lpFilePart=0x0) returned 0x94 [0087.726] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be420) returned 1 [0087.726] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\computed_hashes.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\computed_hashes.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0087.726] GetFileType (hFile=0x444) returned 0x1 [0087.726] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be390) returned 1 [0087.726] GetFileType (hFile=0x444) returned 0x1 [0087.726] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be5b8 | out: lpFileSizeHigh=0x3be5b8*=0x0) returned 0x160 [0087.726] ReadFile (in: hFile=0x444, lpBuffer=0x2187108, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be4e8, lpOverlapped=0x0 | out: lpBuffer=0x2187108*, lpNumberOfBytesRead=0x3be4e8*=0x160, lpOverlapped=0x0) returned 1 [0087.727] CloseHandle (hObject=0x444) returned 1 [0087.748] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\computed_hashes.json", nBufferLength=0x105, lpBuffer=0x3bdf40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\computed_hashes.json", lpFilePart=0x0) returned 0x94 [0087.748] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be420) returned 1 [0087.748] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\computed_hashes.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\computed_hashes.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0087.750] GetFileType (hFile=0x444) returned 0x1 [0087.750] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be390) returned 1 [0087.750] GetFileType (hFile=0x444) returned 0x1 [0087.750] WriteFile (in: hFile=0x444, lpBuffer=0x21fe8c8*, nNumberOfBytesToWrite=0x170, lpNumberOfBytesWritten=0x3be3f8, lpOverlapped=0x0 | out: lpBuffer=0x21fe8c8*, lpNumberOfBytesWritten=0x3be3f8*=0x170, lpOverlapped=0x0) returned 1 [0087.751] CloseHandle (hObject=0x444) returned 1 [0087.751] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\computed_hashes.json", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\computed_hashes.json", lpFilePart=0x0) returned 0x94 [0087.751] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\computed_hashes.json.xuy", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\computed_hashes.json.xuy", lpFilePart=0x0) returned 0x98 [0087.751] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0087.751] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\computed_hashes.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\computed_hashes.json"), fInfoLevelId=0x0, lpFileInformation=0x3be600 | out: lpFileInformation=0x3be600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75861c04, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x75861c04, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2027b3fa, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x170)) returned 1 [0087.752] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0087.752] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\computed_hashes.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\computed_hashes.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\computed_hashes.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\computed_hashes.json.xuy")) returned 1 [0087.753] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\verified_contents.json", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\verified_contents.json", lpFilePart=0x0) returned 0x96 [0087.753] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0087.753] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\verified_contents.json"), fInfoLevelId=0x0, lpFileInformation=0x21ffd10 | out: lpFileInformation=0x21ffd10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75579137, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7557b6e0, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0xe4180700, ftLastWriteTime.dwHighDateTime=0x1d03f5e, nFileSizeHigh=0x0, nFileSizeLow=0x2b56)) returned 1 [0087.753] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0087.753] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\verified_contents.json", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\verified_contents.json", lpFilePart=0x0) returned 0x96 [0087.753] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0087.753] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\verified_contents.json"), fInfoLevelId=0x0, lpFileInformation=0x21fff08 | out: lpFileInformation=0x21fff08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75579137, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7557b6e0, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0xe4180700, ftLastWriteTime.dwHighDateTime=0x1d03f5e, nFileSizeHigh=0x0, nFileSizeLow=0x2b56)) returned 1 [0087.753] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0087.753] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\verified_contents.json", nBufferLength=0x105, lpBuffer=0x3bdfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\verified_contents.json", lpFilePart=0x0) returned 0x96 [0087.753] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0087.753] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\verified_contents.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0087.754] GetFileType (hFile=0x444) returned 0x1 [0087.754] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be420) returned 1 [0087.754] GetFileType (hFile=0x444) returned 0x1 [0087.754] ReadFile (in: hFile=0x444, lpBuffer=0x2202428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be538, lpOverlapped=0x0 | out: lpBuffer=0x2202428*, lpNumberOfBytesRead=0x3be538*=0x1000, lpOverlapped=0x0) returned 1 [0087.784] CloseHandle (hObject=0x444) returned 1 [0087.784] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\verified_contents.json", nBufferLength=0x105, lpBuffer=0x3bdfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\verified_contents.json", lpFilePart=0x0) returned 0x96 [0087.784] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0087.784] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\verified_contents.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0087.785] GetFileType (hFile=0x444) returned 0x1 [0087.785] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be420) returned 1 [0087.785] GetFileType (hFile=0x444) returned 0x1 [0087.785] WriteFile (in: hFile=0x444, lpBuffer=0x22000e0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be5e8, lpOverlapped=0x0 | out: lpBuffer=0x22000e0*, lpNumberOfBytesWritten=0x3be5e8*=0x2000, lpOverlapped=0x0) returned 1 [0087.785] CloseHandle (hObject=0x444) returned 1 [0087.785] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\verified_contents.json", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\verified_contents.json", lpFilePart=0x0) returned 0x96 [0087.785] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\verified_contents.json.xuy", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\verified_contents.json.xuy", lpFilePart=0x0) returned 0x9a [0087.785] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0087.785] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\verified_contents.json"), fInfoLevelId=0x0, lpFileInformation=0x3be600 | out: lpFileInformation=0x3be600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75579137, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7557b6e0, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x202c7871, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2b56)) returned 1 [0087.785] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0087.785] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\verified_contents.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\verified_contents.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\verified_contents.json.xuy")) returned 1 [0087.786] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0087.786] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake", lpFilePart=0x0) returned 0x6f [0087.786] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\", lpFilePart=0x0) returned 0x70 [0087.787] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d7550 [0087.787] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0087.787] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0087.787] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0087.787] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0087.787] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0087.787] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0087.788] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0087.788] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake", lpFilePart=0x0) returned 0x6f [0087.788] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\", lpFilePart=0x0) returned 0x70 [0087.788] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d7d90 [0087.788] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0087.788] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0087.788] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0087.788] FindClose (in: hFindFile=0x5d7d90 | out: hFindFile=0x5d7d90) returned 1 [0087.788] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0087.788] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0087.789] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0087.789] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0", nBufferLength=0x105, lpBuffer=0x3be130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0", lpFilePart=0x0) returned 0x75 [0087.789] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\", nBufferLength=0x105, lpBuffer=0x3be0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\", lpFilePart=0x0) returned 0x76 [0087.789] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\*", lpFindFileData=0x3be2e0 | out: lpFindFileData=0x3be2e0) returned 0x5d78b0 [0087.801] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0087.802] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0087.802] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0087.802] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0087.802] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0087.802] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0087.802] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0087.802] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0087.803] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 0 [0087.803] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0087.803] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0087.804] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0087.804] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0087.804] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0", nBufferLength=0x105, lpBuffer=0x3be130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0", lpFilePart=0x0) returned 0x75 [0087.804] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\", nBufferLength=0x105, lpBuffer=0x3be0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\", lpFilePart=0x0) returned 0x76 [0087.804] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\*", lpFindFileData=0x3be2e0 | out: lpFindFileData=0x3be2e0) returned 0x5d81b0 [0087.805] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0087.805] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0087.805] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0087.805] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0087.805] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0087.806] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0087.806] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0087.806] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0087.806] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 0 [0087.806] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0087.807] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0087.807] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0087.807] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png", lpFilePart=0x0) returned 0x82 [0087.807] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0087.807] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png"), fInfoLevelId=0x0, lpFileInformation=0x2285ed8 | out: lpFileInformation=0x2285ed8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x766e0eb5, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x76d22930, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x76d22930, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xc8d)) returned 1 [0087.809] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0087.809] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png", lpFilePart=0x0) returned 0x82 [0087.809] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0087.809] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0087.810] GetFileType (hFile=0x444) returned 0x1 [0087.810] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be400) returned 1 [0087.810] GetFileType (hFile=0x444) returned 0x1 [0087.810] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be628 | out: lpFileSizeHigh=0x3be628*=0x0) returned 0xc8d [0087.810] ReadFile (in: hFile=0x444, lpBuffer=0x2286f00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be558, lpOverlapped=0x0 | out: lpBuffer=0x2286f00*, lpNumberOfBytesRead=0x3be558*=0xc8d, lpOverlapped=0x0) returned 1 [0087.820] CloseHandle (hObject=0x444) returned 1 [0087.837] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png", lpFilePart=0x0) returned 0x82 [0087.838] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0087.838] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0087.839] GetFileType (hFile=0x444) returned 0x1 [0087.839] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be400) returned 1 [0087.840] GetFileType (hFile=0x444) returned 0x1 [0087.840] WriteFile (in: hFile=0x444, lpBuffer=0x2301e20*, nNumberOfBytesToWrite=0xc90, lpNumberOfBytesWritten=0x3be468, lpOverlapped=0x0 | out: lpBuffer=0x2301e20*, lpNumberOfBytesWritten=0x3be468*=0xc90, lpOverlapped=0x0) returned 1 [0087.841] CloseHandle (hObject=0x444) returned 1 [0087.841] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png", lpFilePart=0x0) returned 0x82 [0087.841] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png.xuy", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png.xuy", lpFilePart=0x0) returned 0x86 [0087.841] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0087.841] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png"), fInfoLevelId=0x0, lpFileInformation=0x3be670 | out: lpFileInformation=0x3be670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x766e0eb5, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x76d22930, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x20339fd2, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xc90)) returned 1 [0087.841] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0087.841] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png.xuy")) returned 1 [0087.843] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png", lpFilePart=0x0) returned 0x81 [0087.843] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0087.843] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png"), fInfoLevelId=0x0, lpFileInformation=0x23031f0 | out: lpFileInformation=0x23031f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76703188, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x76d22930, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x76d22930, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x8f)) returned 1 [0087.843] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0087.843] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png", lpFilePart=0x0) returned 0x81 [0087.843] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0087.843] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0087.843] GetFileType (hFile=0x444) returned 0x1 [0087.843] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be400) returned 1 [0087.843] GetFileType (hFile=0x444) returned 0x1 [0087.844] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be628 | out: lpFileSizeHigh=0x3be628*=0x0) returned 0x8f [0087.844] ReadFile (in: hFile=0x444, lpBuffer=0x2303608, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be558, lpOverlapped=0x0 | out: lpBuffer=0x2303608*, lpNumberOfBytesRead=0x3be558*=0x8f, lpOverlapped=0x0) returned 1 [0087.845] CloseHandle (hObject=0x444) returned 1 [0087.900] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png", lpFilePart=0x0) returned 0x81 [0087.900] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0087.900] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0087.902] GetFileType (hFile=0x444) returned 0x1 [0087.902] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be400) returned 1 [0087.902] GetFileType (hFile=0x444) returned 0x1 [0087.902] WriteFile (in: hFile=0x444, lpBuffer=0x217b990*, nNumberOfBytesToWrite=0x90, lpNumberOfBytesWritten=0x3be468, lpOverlapped=0x0 | out: lpBuffer=0x217b990*, lpNumberOfBytesWritten=0x3be468*=0x90, lpOverlapped=0x0) returned 1 [0087.904] CloseHandle (hObject=0x444) returned 1 [0087.904] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png", lpFilePart=0x0) returned 0x81 [0087.904] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png.xuy", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png.xuy", lpFilePart=0x0) returned 0x85 [0087.904] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0087.904] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png"), fInfoLevelId=0x0, lpFileInformation=0x3be670 | out: lpFileInformation=0x3be670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76703188, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x76d22930, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x203d2848, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x90)) returned 1 [0087.905] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0087.905] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png.xuy")) returned 1 [0087.906] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html", lpFilePart=0x0) returned 0x7f [0087.906] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0087.906] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html"), fInfoLevelId=0x0, lpFileInformation=0x217cd60 | out: lpFileInformation=0x217cd60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7670a6d9, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x767e37e2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0xfe051a00, ftLastWriteTime.dwHighDateTime=0x1d03f5d, nFileSizeHigh=0x0, nFileSizeLow=0x5c)) returned 1 [0087.906] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0087.906] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html", lpFilePart=0x0) returned 0x7f [0087.906] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0087.906] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0087.906] GetFileType (hFile=0x444) returned 0x1 [0087.906] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be400) returned 1 [0087.906] GetFileType (hFile=0x444) returned 0x1 [0087.906] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be628 | out: lpFileSizeHigh=0x3be628*=0x0) returned 0x5c [0087.907] ReadFile (in: hFile=0x444, lpBuffer=0x217d138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be558, lpOverlapped=0x0 | out: lpBuffer=0x217d138*, lpNumberOfBytesRead=0x3be558*=0x5c, lpOverlapped=0x0) returned 1 [0087.908] CloseHandle (hObject=0x444) returned 1 [0087.926] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html", lpFilePart=0x0) returned 0x7f [0087.926] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0087.926] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0087.927] GetFileType (hFile=0x444) returned 0x1 [0087.927] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be400) returned 1 [0087.928] GetFileType (hFile=0x444) returned 0x1 [0087.928] WriteFile (in: hFile=0x444, lpBuffer=0x21f4350*, nNumberOfBytesToWrite=0x60, lpNumberOfBytesWritten=0x3be468, lpOverlapped=0x0 | out: lpBuffer=0x21f4350*, lpNumberOfBytesWritten=0x3be468*=0x60, lpOverlapped=0x0) returned 1 [0087.928] CloseHandle (hObject=0x444) returned 1 [0087.929] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html", lpFilePart=0x0) returned 0x7f [0087.929] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html.xuy", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html.xuy", lpFilePart=0x0) returned 0x83 [0087.929] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0087.929] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html"), fInfoLevelId=0x0, lpFileInformation=0x3be670 | out: lpFileInformation=0x3be670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7670a6d9, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x767e37e2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2041ee0b, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x60)) returned 1 [0087.929] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0087.929] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html.xuy")) returned 1 [0087.930] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js", lpFilePart=0x0) returned 0x7d [0087.930] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0087.930] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js"), fInfoLevelId=0x0, lpFileInformation=0x21f5700 | out: lpFileInformation=0x21f5700*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x767e89ad, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x767ead12, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0xfe051a00, ftLastWriteTime.dwHighDateTime=0x1d03f5d, nFileSizeHigh=0x0, nFileSizeLow=0x5b)) returned 1 [0087.930] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0087.930] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js", lpFilePart=0x0) returned 0x7d [0087.931] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0087.931] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0087.931] GetFileType (hFile=0x444) returned 0x1 [0087.931] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be400) returned 1 [0087.931] GetFileType (hFile=0x444) returned 0x1 [0087.931] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be628 | out: lpFileSizeHigh=0x3be628*=0x0) returned 0x5b [0087.931] ReadFile (in: hFile=0x444, lpBuffer=0x21f5ac8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be558, lpOverlapped=0x0 | out: lpBuffer=0x21f5ac8*, lpNumberOfBytesRead=0x3be558*=0x5b, lpOverlapped=0x0) returned 1 [0087.932] CloseHandle (hObject=0x444) returned 1 [0087.948] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js", lpFilePart=0x0) returned 0x7d [0087.949] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0087.949] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0087.950] GetFileType (hFile=0x444) returned 0x1 [0087.950] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be400) returned 1 [0087.950] GetFileType (hFile=0x444) returned 0x1 [0087.950] WriteFile (in: hFile=0x444, lpBuffer=0x226ccd8*, nNumberOfBytesToWrite=0x60, lpNumberOfBytesWritten=0x3be468, lpOverlapped=0x0 | out: lpBuffer=0x226ccd8*, lpNumberOfBytesWritten=0x3be468*=0x60, lpOverlapped=0x0) returned 1 [0087.951] CloseHandle (hObject=0x444) returned 1 [0087.951] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js", lpFilePart=0x0) returned 0x7d [0087.951] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js.xuy", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js.xuy", lpFilePart=0x0) returned 0x81 [0087.951] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0087.952] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js"), fInfoLevelId=0x0, lpFileInformation=0x3be670 | out: lpFileInformation=0x3be670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x767e89ad, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x767ead12, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x204450fc, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x60)) returned 1 [0087.952] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0087.952] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js.xuy")) returned 1 [0087.953] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\manifest.json", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\manifest.json", lpFilePart=0x0) returned 0x83 [0087.953] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0087.953] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\manifest.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\manifest.json"), fInfoLevelId=0x0, lpFileInformation=0x226e090 | out: lpFileInformation=0x226e090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75966ff6, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x768a93f2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x76d1b40d, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x2d5)) returned 1 [0087.953] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0087.953] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\manifest.json", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\manifest.json", lpFilePart=0x0) returned 0x83 [0087.953] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0087.953] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\manifest.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\manifest.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0087.953] GetFileType (hFile=0x444) returned 0x1 [0087.953] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be400) returned 1 [0087.953] GetFileType (hFile=0x444) returned 0x1 [0087.953] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be628 | out: lpFileSizeHigh=0x3be628*=0x0) returned 0x2d5 [0087.953] ReadFile (in: hFile=0x444, lpBuffer=0x226e700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be558, lpOverlapped=0x0 | out: lpBuffer=0x226e700*, lpNumberOfBytesRead=0x3be558*=0x2d5, lpOverlapped=0x0) returned 1 [0087.991] CloseHandle (hObject=0x444) returned 1 [0088.007] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\manifest.json", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\manifest.json", lpFilePart=0x0) returned 0x83 [0088.007] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0088.008] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\manifest.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\manifest.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0088.009] GetFileType (hFile=0x444) returned 0x1 [0088.009] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be400) returned 1 [0088.009] GetFileType (hFile=0x444) returned 0x1 [0088.009] WriteFile (in: hFile=0x444, lpBuffer=0x22e65b8*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x3be468, lpOverlapped=0x0 | out: lpBuffer=0x22e65b8*, lpNumberOfBytesWritten=0x3be468*=0x2e0, lpOverlapped=0x0) returned 1 [0088.010] CloseHandle (hObject=0x444) returned 1 [0088.010] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\manifest.json", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\manifest.json", lpFilePart=0x0) returned 0x83 [0088.010] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\manifest.json.xuy", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\manifest.json.xuy", lpFilePart=0x0) returned 0x87 [0088.010] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0088.010] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\manifest.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\manifest.json"), fInfoLevelId=0x0, lpFileInformation=0x3be670 | out: lpFileInformation=0x3be670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75966ff6, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x768a93f2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x204ddb26, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2e0)) returned 1 [0088.011] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0088.011] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\manifest.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\manifest.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\manifest.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\manifest.json.xuy")) returned 1 [0088.012] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0088.012] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", nBufferLength=0x105, lpBuffer=0x3be0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpFilePart=0x0) returned 0x7e [0088.012] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", nBufferLength=0x105, lpBuffer=0x3be060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpFilePart=0x0) returned 0x7f [0088.012] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\*", lpFindFileData=0x3be270 | out: lpFindFileData=0x3be270) returned 0x5d7c70 [0088.014] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0088.014] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0088.014] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0088.014] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0088.014] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0088.014] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0088.015] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0088.015] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0088.016] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0088.016] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0088.016] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0088.016] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0088.016] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0088.017] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0088.017] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0088.017] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0088.017] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0088.017] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0088.017] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0088.018] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0088.018] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0088.018] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0088.018] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0088.018] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0088.018] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0088.019] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0088.019] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0088.019] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0088.019] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0088.019] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0088.019] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0088.019] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0088.020] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0088.020] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0088.020] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0088.020] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0088.020] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0088.020] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0088.021] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0088.021] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0088.021] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0088.021] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0088.021] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0088.021] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 0 [0088.021] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0088.022] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0088.022] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0088.022] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0088.022] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", nBufferLength=0x105, lpBuffer=0x3be0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpFilePart=0x0) returned 0x7e [0088.023] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", nBufferLength=0x105, lpBuffer=0x3be060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpFilePart=0x0) returned 0x7f [0088.023] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\*", lpFindFileData=0x3be270 | out: lpFindFileData=0x3be270) returned 0x5d7fd0 [0088.024] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0088.024] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0088.024] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0088.024] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0088.024] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0088.024] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0088.024] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0088.024] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0088.025] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0088.025] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0088.025] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0088.025] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0088.025] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0088.025] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0088.025] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0088.025] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0088.026] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0088.026] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0088.026] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0088.026] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0088.026] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0088.026] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0088.026] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0088.026] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0088.026] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0088.027] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0088.027] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0088.027] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0088.027] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0088.027] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0088.027] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0088.027] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0088.027] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0088.027] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0088.028] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0088.028] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0088.028] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0088.028] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0088.028] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0088.028] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0088.028] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0088.028] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0088.028] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0088.029] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 0 [0088.029] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0088.029] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0088.029] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0088.030] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0088.030] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar", lpFilePart=0x0) returned 0x81 [0088.030] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\", lpFilePart=0x0) returned 0x82 [0088.030] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7d90 [0088.032] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0088.032] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0088.032] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0088.032] FindClose (in: hFindFile=0x5d7d90 | out: hFindFile=0x5d7d90) returned 1 [0088.032] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0088.032] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0088.032] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0088.033] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar", lpFilePart=0x0) returned 0x81 [0088.033] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\", lpFilePart=0x0) returned 0x82 [0088.033] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d79d0 [0088.033] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0088.033] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0088.033] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0088.033] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0088.033] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0088.033] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0088.033] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\messages.json", lpFilePart=0x0) returned 0x8f [0088.033] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0088.034] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x22fb578 | out: lpFileInformation=0x22fb578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7597816c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x75978162, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x76d2505e, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xf6)) returned 1 [0088.036] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0088.036] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\messages.json", lpFilePart=0x0) returned 0x8f [0088.036] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0088.036] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0088.036] GetFileType (hFile=0x444) returned 0x1 [0088.036] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0088.036] GetFileType (hFile=0x444) returned 0x1 [0088.036] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xf6 [0088.036] ReadFile (in: hFile=0x444, lpBuffer=0x22fba38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x22fba38*, lpNumberOfBytesRead=0x3be478*=0xf6, lpOverlapped=0x0) returned 1 [0088.037] CloseHandle (hObject=0x444) returned 1 [0088.089] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\messages.json", lpFilePart=0x0) returned 0x8f [0088.089] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0088.090] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0088.091] GetFileType (hFile=0x444) returned 0x1 [0088.091] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0088.091] GetFileType (hFile=0x444) returned 0x1 [0088.091] WriteFile (in: hFile=0x444, lpBuffer=0x2176930*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x2176930*, lpNumberOfBytesWritten=0x3be388*=0x100, lpOverlapped=0x0) returned 1 [0088.092] CloseHandle (hObject=0x444) returned 1 [0088.092] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\messages.json", lpFilePart=0x0) returned 0x8f [0088.092] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0088.092] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0088.092] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7597816c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x75978162, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2059c729, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x100)) returned 1 [0088.093] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0088.093] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\messages.json.xuy")) returned 1 [0088.094] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0088.094] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg", lpFilePart=0x0) returned 0x81 [0088.094] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\", lpFilePart=0x0) returned 0x82 [0088.094] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7cd0 [0088.095] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0088.095] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0088.095] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0088.095] FindClose (in: hFindFile=0x5d7cd0 | out: hFindFile=0x5d7cd0) returned 1 [0088.095] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0088.095] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0088.095] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0088.095] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg", lpFilePart=0x0) returned 0x81 [0088.095] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\", lpFilePart=0x0) returned 0x82 [0088.095] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d78b0 [0088.096] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0088.096] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0088.096] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0088.096] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0088.096] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0088.096] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0088.096] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\messages.json", lpFilePart=0x0) returned 0x8f [0088.096] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0088.096] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x217aa88 | out: lpFileInformation=0x217aa88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75986bd0, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x759892d2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x76d2505e, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x108)) returned 1 [0088.097] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0088.097] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\messages.json", lpFilePart=0x0) returned 0x8f [0088.097] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0088.097] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0088.097] GetFileType (hFile=0x444) returned 0x1 [0088.097] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0088.097] GetFileType (hFile=0x444) returned 0x1 [0088.097] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x108 [0088.097] ReadFile (in: hFile=0x444, lpBuffer=0x217af58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x217af58*, lpNumberOfBytesRead=0x3be478*=0x108, lpOverlapped=0x0) returned 1 [0088.098] CloseHandle (hObject=0x444) returned 1 [0088.114] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\messages.json", lpFilePart=0x0) returned 0x8f [0088.114] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0088.114] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0088.116] GetFileType (hFile=0x444) returned 0x1 [0088.116] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0088.116] GetFileType (hFile=0x444) returned 0x1 [0088.116] WriteFile (in: hFile=0x444, lpBuffer=0x21f2510*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x21f2510*, lpNumberOfBytesWritten=0x3be388*=0x110, lpOverlapped=0x0) returned 1 [0088.117] CloseHandle (hObject=0x444) returned 1 [0088.117] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\messages.json", lpFilePart=0x0) returned 0x8f [0088.117] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0088.117] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0088.117] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75986bd0, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x759892d2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x205e8c7e, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x110)) returned 1 [0088.118] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0088.118] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\messages.json.xuy")) returned 1 [0088.119] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0088.119] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca", lpFilePart=0x0) returned 0x81 [0088.119] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\", lpFilePart=0x0) returned 0x82 [0088.119] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7550 [0088.119] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0088.119] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0088.119] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0088.119] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0088.120] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0088.120] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0088.120] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0088.120] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca", lpFilePart=0x0) returned 0x81 [0088.120] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\", lpFilePart=0x0) returned 0x82 [0088.120] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d78b0 [0088.120] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0088.120] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0088.120] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0088.120] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0088.121] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0088.121] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0088.121] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\messages.json", lpFilePart=0x0) returned 0x8f [0088.121] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0088.121] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x21f6668 | out: lpFileInformation=0x21f6668*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75990811, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x75992f12, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x76d2505e, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xcf)) returned 1 [0088.123] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0088.123] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\messages.json", lpFilePart=0x0) returned 0x8f [0088.123] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0088.124] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0088.124] GetFileType (hFile=0x444) returned 0x1 [0088.124] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0088.124] GetFileType (hFile=0x444) returned 0x1 [0088.124] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xcf [0088.124] ReadFile (in: hFile=0x444, lpBuffer=0x21f6b00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x21f6b00*, lpNumberOfBytesRead=0x3be478*=0xcf, lpOverlapped=0x0) returned 1 [0088.125] CloseHandle (hObject=0x444) returned 1 [0088.142] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\messages.json", lpFilePart=0x0) returned 0x8f [0088.142] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0088.142] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0088.144] GetFileType (hFile=0x444) returned 0x1 [0088.144] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0088.144] GetFileType (hFile=0x444) returned 0x1 [0088.144] WriteFile (in: hFile=0x444, lpBuffer=0x226de20*, nNumberOfBytesToWrite=0xd0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x226de20*, lpNumberOfBytesWritten=0x3be388*=0xd0, lpOverlapped=0x0) returned 1 [0088.145] CloseHandle (hObject=0x444) returned 1 [0088.145] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\messages.json", lpFilePart=0x0) returned 0x8f [0088.145] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0088.145] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0088.145] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75990811, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x75992f12, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x206352e2, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xd0)) returned 1 [0088.145] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0088.145] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\messages.json.xuy")) returned 1 [0088.146] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0088.146] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs", lpFilePart=0x0) returned 0x81 [0088.147] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\", lpFilePart=0x0) returned 0x82 [0088.147] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d79d0 [0088.147] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0088.147] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0088.147] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0088.147] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0088.147] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0088.147] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0088.147] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0088.147] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs", lpFilePart=0x0) returned 0x81 [0088.148] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\", lpFilePart=0x0) returned 0x82 [0088.148] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7670 [0088.148] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0088.148] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0088.148] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0088.148] FindClose (in: hFindFile=0x5d7670 | out: hFindFile=0x5d7670) returned 1 [0088.148] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0088.148] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0088.148] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\messages.json", lpFilePart=0x0) returned 0x8f [0088.149] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0088.149] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x2271f78 | out: lpFileInformation=0x2271f78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7599cb62, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7599cb52, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x76d2776b, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xde)) returned 1 [0088.149] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0088.149] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\messages.json", lpFilePart=0x0) returned 0x8f [0088.149] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0088.149] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0088.149] GetFileType (hFile=0x444) returned 0x1 [0088.149] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0088.149] GetFileType (hFile=0x444) returned 0x1 [0088.149] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xde [0088.149] ReadFile (in: hFile=0x444, lpBuffer=0x2272420, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x2272420*, lpNumberOfBytesRead=0x3be478*=0xde, lpOverlapped=0x0) returned 1 [0088.151] CloseHandle (hObject=0x444) returned 1 [0088.168] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\messages.json", lpFilePart=0x0) returned 0x8f [0088.168] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0088.168] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0088.169] GetFileType (hFile=0x444) returned 0x1 [0088.169] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0088.169] GetFileType (hFile=0x444) returned 0x1 [0088.169] WriteFile (in: hFile=0x444, lpBuffer=0x22e9760*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x22e9760*, lpNumberOfBytesWritten=0x3be388*=0xe0, lpOverlapped=0x0) returned 1 [0088.171] CloseHandle (hObject=0x444) returned 1 [0088.171] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\messages.json", lpFilePart=0x0) returned 0x8f [0088.171] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0088.171] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0088.171] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7599cb62, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7599cb52, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2065b0d9, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1 [0088.171] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0088.171] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\messages.json.xuy")) returned 1 [0088.174] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0088.174] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da", lpFilePart=0x0) returned 0x81 [0088.174] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\", lpFilePart=0x0) returned 0x82 [0088.174] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d79d0 [0088.175] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0088.175] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0088.175] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0088.175] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0088.175] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0088.175] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0088.175] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0088.175] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da", lpFilePart=0x0) returned 0x81 [0088.175] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\", lpFilePart=0x0) returned 0x82 [0088.175] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7af0 [0088.175] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0088.176] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0088.176] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0088.176] FindClose (in: hFindFile=0x5d7af0 | out: hFindFile=0x5d7af0) returned 1 [0088.176] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0088.176] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0088.176] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\messages.json", lpFilePart=0x0) returned 0x8f [0088.176] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0088.176] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x22ed8b8 | out: lpFileInformation=0x22ed8b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x759a4081, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x759a8ea2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x76d2776b, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xd8)) returned 1 [0088.178] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0088.178] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\messages.json", lpFilePart=0x0) returned 0x8f [0088.178] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0088.178] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0088.178] GetFileType (hFile=0x444) returned 0x1 [0088.178] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0088.178] GetFileType (hFile=0x444) returned 0x1 [0088.178] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xd8 [0088.178] ReadFile (in: hFile=0x444, lpBuffer=0x22edd58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x22edd58*, lpNumberOfBytesRead=0x3be478*=0xd8, lpOverlapped=0x0) returned 1 [0088.180] CloseHandle (hObject=0x444) returned 1 [0088.247] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\messages.json", lpFilePart=0x0) returned 0x8f [0088.247] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0088.247] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0088.249] GetFileType (hFile=0x444) returned 0x1 [0088.249] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0088.249] GetFileType (hFile=0x444) returned 0x1 [0088.249] WriteFile (in: hFile=0x444, lpBuffer=0x2165a18*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x2165a18*, lpNumberOfBytesWritten=0x3be388*=0xe0, lpOverlapped=0x0) returned 1 [0088.250] CloseHandle (hObject=0x444) returned 1 [0088.250] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\messages.json", lpFilePart=0x0) returned 0x8f [0088.250] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0088.250] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0088.250] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x759a4081, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x759a8ea2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2072d45f, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1 [0088.251] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0088.251] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\messages.json.xuy")) returned 1 [0088.252] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0088.252] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de", lpFilePart=0x0) returned 0x81 [0088.252] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\", lpFilePart=0x0) returned 0x82 [0088.252] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d73d0 [0088.252] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0088.252] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0088.253] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0088.253] FindClose (in: hFindFile=0x5d73d0 | out: hFindFile=0x5d73d0) returned 1 [0088.253] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0088.253] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0088.253] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0088.253] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de", lpFilePart=0x0) returned 0x81 [0088.253] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\", lpFilePart=0x0) returned 0x82 [0088.253] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d78b0 [0088.253] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0088.253] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0088.253] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0088.254] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0088.254] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0088.254] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0088.254] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\messages.json", lpFilePart=0x0) returned 0x8f [0088.254] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0088.254] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x2169b70 | out: lpFileInformation=0x2169b70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x759b790d, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x759b7902, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x76d2776b, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xd9)) returned 1 [0088.254] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0088.254] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\messages.json", lpFilePart=0x0) returned 0x8f [0088.254] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0088.254] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0088.254] GetFileType (hFile=0x444) returned 0x1 [0088.254] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0088.255] GetFileType (hFile=0x444) returned 0x1 [0088.255] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xd9 [0088.255] ReadFile (in: hFile=0x444, lpBuffer=0x216a018, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x216a018*, lpNumberOfBytesRead=0x3be478*=0xd9, lpOverlapped=0x0) returned 1 [0088.257] CloseHandle (hObject=0x444) returned 1 [0088.284] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\messages.json", lpFilePart=0x0) returned 0x8f [0088.284] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0088.285] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0088.286] GetFileType (hFile=0x444) returned 0x1 [0088.286] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0088.286] GetFileType (hFile=0x444) returned 0x1 [0088.286] WriteFile (in: hFile=0x444, lpBuffer=0x21e1358*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x21e1358*, lpNumberOfBytesWritten=0x3be388*=0xe0, lpOverlapped=0x0) returned 1 [0088.287] CloseHandle (hObject=0x444) returned 1 [0088.287] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\messages.json", lpFilePart=0x0) returned 0x8f [0088.287] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0088.287] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0088.288] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x759b790d, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x759b7902, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x20779d7e, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1 [0088.288] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0088.288] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\messages.json.xuy")) returned 1 [0088.289] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0088.289] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el", lpFilePart=0x0) returned 0x81 [0088.289] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\", lpFilePart=0x0) returned 0x82 [0088.289] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7af0 [0088.290] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0088.290] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0088.290] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0088.290] FindClose (in: hFindFile=0x5d7af0 | out: hFindFile=0x5d7af0) returned 1 [0088.290] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0088.290] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0088.290] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0088.290] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el", lpFilePart=0x0) returned 0x81 [0088.290] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\", lpFilePart=0x0) returned 0x82 [0088.291] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d81b0 [0088.291] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0088.291] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0088.291] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0088.291] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0088.291] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0088.291] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0088.291] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\messages.json", lpFilePart=0x0) returned 0x8f [0088.291] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0088.292] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x21e54b0 | out: lpFileInformation=0x21e54b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x759ed489, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x759efb72, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x76d2776b, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x104)) returned 1 [0088.293] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0088.293] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\messages.json", lpFilePart=0x0) returned 0x8f [0088.293] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0088.293] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0088.294] GetFileType (hFile=0x444) returned 0x1 [0088.294] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0088.294] GetFileType (hFile=0x444) returned 0x1 [0088.294] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x104 [0088.294] ReadFile (in: hFile=0x444, lpBuffer=0x21e5980, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x21e5980*, lpNumberOfBytesRead=0x3be478*=0x104, lpOverlapped=0x0) returned 1 [0088.295] CloseHandle (hObject=0x444) returned 1 [0088.313] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\messages.json", lpFilePart=0x0) returned 0x8f [0088.313] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0088.313] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0088.315] GetFileType (hFile=0x444) returned 0x1 [0088.315] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0088.315] GetFileType (hFile=0x444) returned 0x1 [0088.315] WriteFile (in: hFile=0x444, lpBuffer=0x225cf40*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x225cf40*, lpNumberOfBytesWritten=0x3be388*=0x110, lpOverlapped=0x0) returned 1 [0088.316] CloseHandle (hObject=0x444) returned 1 [0088.316] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\messages.json", lpFilePart=0x0) returned 0x8f [0088.316] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0088.316] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0088.316] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x759ed489, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x759efb72, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x207c668d, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x110)) returned 1 [0088.317] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0088.317] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\messages.json.xuy")) returned 1 [0088.318] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0088.318] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB", lpFilePart=0x0) returned 0x84 [0088.318] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\", lpFilePart=0x0) returned 0x85 [0088.318] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7e50 [0088.318] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0088.318] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0088.319] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0088.319] FindClose (in: hFindFile=0x5d7e50 | out: hFindFile=0x5d7e50) returned 1 [0088.319] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0088.319] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0088.319] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0088.319] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB", lpFilePart=0x0) returned 0x84 [0088.319] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\", lpFilePart=0x0) returned 0x85 [0088.319] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7370 [0088.319] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0088.319] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0088.320] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0088.320] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0088.320] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0088.320] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0088.320] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\messages.json", lpFilePart=0x0) returned 0x92 [0088.320] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0088.320] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_gb\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x2261168 | out: lpFileInformation=0x2261168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75a11e76, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x75a11e52, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x76d2776b, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xd0)) returned 1 [0088.321] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0088.321] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\messages.json", lpFilePart=0x0) returned 0x92 [0088.321] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0088.321] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_gb\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0088.321] GetFileType (hFile=0x444) returned 0x1 [0088.321] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0088.321] GetFileType (hFile=0x444) returned 0x1 [0088.321] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xd0 [0088.321] ReadFile (in: hFile=0x444, lpBuffer=0x2261610, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x2261610*, lpNumberOfBytesRead=0x3be478*=0xd0, lpOverlapped=0x0) returned 1 [0088.322] CloseHandle (hObject=0x444) returned 1 [0088.343] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\messages.json", lpFilePart=0x0) returned 0x92 [0088.343] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0088.343] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_gb\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0088.345] GetFileType (hFile=0x444) returned 0x1 [0088.345] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0088.345] GetFileType (hFile=0x444) returned 0x1 [0088.345] WriteFile (in: hFile=0x444, lpBuffer=0x22d8960*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x22d8960*, lpNumberOfBytesWritten=0x3be388*=0xe0, lpOverlapped=0x0) returned 1 [0088.346] CloseHandle (hObject=0x444) returned 1 [0088.346] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\messages.json", lpFilePart=0x0) returned 0x92 [0088.346] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\messages.json.xuy", lpFilePart=0x0) returned 0x96 [0088.346] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0088.346] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_gb\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75a11e76, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x75a11e52, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x20812559, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1 [0088.347] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0088.347] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_gb\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_gb\\messages.json.xuy")) returned 1 [0088.348] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0088.348] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US", lpFilePart=0x0) returned 0x84 [0088.348] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\", lpFilePart=0x0) returned 0x85 [0088.348] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7d30 [0088.348] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0088.348] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0088.348] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0088.349] FindClose (in: hFindFile=0x5d7d30 | out: hFindFile=0x5d7d30) returned 1 [0088.349] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0088.349] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0088.349] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0088.349] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US", lpFilePart=0x0) returned 0x84 [0088.349] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\", lpFilePart=0x0) returned 0x85 [0088.349] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7370 [0088.349] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0088.349] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0088.349] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0088.350] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0088.350] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0088.350] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0088.350] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\messages.json", lpFilePart=0x0) returned 0x92 [0088.350] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0088.350] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_us\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x22dcba0 | out: lpFileInformation=0x22dcba0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75a25705, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x75a27de2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x76d29e74, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xd1)) returned 1 [0088.353] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0088.353] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\messages.json", lpFilePart=0x0) returned 0x92 [0088.353] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0088.353] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_us\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0088.354] GetFileType (hFile=0x444) returned 0x1 [0088.354] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0088.354] GetFileType (hFile=0x444) returned 0x1 [0088.354] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xd1 [0088.354] ReadFile (in: hFile=0x444, lpBuffer=0x22dd050, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x22dd050*, lpNumberOfBytesRead=0x3be478*=0xd1, lpOverlapped=0x0) returned 1 [0088.355] CloseHandle (hObject=0x444) returned 1 [0088.393] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\messages.json", lpFilePart=0x0) returned 0x92 [0088.393] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0088.393] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_us\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0088.394] GetFileType (hFile=0x444) returned 0x1 [0088.395] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0088.395] GetFileType (hFile=0x444) returned 0x1 [0088.395] WriteFile (in: hFile=0x444, lpBuffer=0x2154d40*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x2154d40*, lpNumberOfBytesWritten=0x3be388*=0xe0, lpOverlapped=0x0) returned 1 [0088.395] CloseHandle (hObject=0x444) returned 1 [0088.398] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\messages.json", lpFilePart=0x0) returned 0x92 [0088.398] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\messages.json.xuy", lpFilePart=0x0) returned 0x96 [0088.398] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0088.398] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_us\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75a25705, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x75a27de2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x20884ceb, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1 [0088.398] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0088.398] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_us\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_us\\messages.json.xuy")) returned 1 [0088.399] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0088.399] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es", lpFilePart=0x0) returned 0x81 [0088.399] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\", lpFilePart=0x0) returned 0x82 [0088.399] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d75b0 [0088.400] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0088.400] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0088.400] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0088.400] FindClose (in: hFindFile=0x5d75b0 | out: hFindFile=0x5d75b0) returned 1 [0088.400] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0088.400] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0088.400] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0088.400] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es", lpFilePart=0x0) returned 0x81 [0088.400] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\", lpFilePart=0x0) returned 0x82 [0088.400] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d81b0 [0088.400] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0088.401] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0088.401] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0088.401] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0088.401] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0088.401] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0088.401] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\messages.json", lpFilePart=0x0) returned 0x8f [0088.401] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0088.401] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x2158eb0 | out: lpFileInformation=0x2158eb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75a31a40, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x75a31a22, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x76d29e74, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xce)) returned 1 [0088.401] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0088.401] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\messages.json", lpFilePart=0x0) returned 0x8f [0088.401] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0088.402] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0088.402] GetFileType (hFile=0x444) returned 0x1 [0088.402] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0088.402] GetFileType (hFile=0x444) returned 0x1 [0088.402] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xce [0088.402] ReadFile (in: hFile=0x444, lpBuffer=0x2159348, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x2159348*, lpNumberOfBytesRead=0x3be478*=0xce, lpOverlapped=0x0) returned 1 [0088.403] CloseHandle (hObject=0x444) returned 1 [0088.413] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\messages.json", lpFilePart=0x0) returned 0x8f [0088.413] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0088.413] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0088.415] GetFileType (hFile=0x444) returned 0x1 [0088.415] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0088.415] GetFileType (hFile=0x444) returned 0x1 [0088.415] WriteFile (in: hFile=0x444, lpBuffer=0x21d0668*, nNumberOfBytesToWrite=0xd0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x21d0668*, lpNumberOfBytesWritten=0x3be388*=0xd0, lpOverlapped=0x0) returned 1 [0088.416] CloseHandle (hObject=0x444) returned 1 [0088.416] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\messages.json", lpFilePart=0x0) returned 0x8f [0088.416] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0088.416] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0088.416] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75a31a40, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x75a31a22, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x208d1170, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xd0)) returned 1 [0088.416] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0088.416] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\messages.json.xuy")) returned 1 [0088.420] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0088.420] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419", lpFilePart=0x0) returned 0x85 [0088.420] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\", lpFilePart=0x0) returned 0x86 [0088.420] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7c70 [0088.420] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0088.420] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0088.421] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0088.421] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0088.421] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0088.421] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0088.421] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0088.421] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419", lpFilePart=0x0) returned 0x85 [0088.421] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\", lpFilePart=0x0) returned 0x86 [0088.421] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d8090 [0088.421] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0088.421] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0088.421] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0088.422] FindClose (in: hFindFile=0x5d8090 | out: hFindFile=0x5d8090) returned 1 [0088.422] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0088.422] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0088.422] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\messages.json", lpFilePart=0x0) returned 0x93 [0088.422] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0088.422] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x21d48b0 | out: lpFileInformation=0x21d48b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75a3dd97, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x75a40482, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x76d29e74, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xce)) returned 1 [0088.423] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0088.423] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\messages.json", lpFilePart=0x0) returned 0x93 [0088.423] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0088.423] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0088.423] GetFileType (hFile=0x444) returned 0x1 [0088.423] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0088.423] GetFileType (hFile=0x444) returned 0x1 [0088.423] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xce [0088.423] ReadFile (in: hFile=0x444, lpBuffer=0x21d4d58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x21d4d58*, lpNumberOfBytesRead=0x3be478*=0xce, lpOverlapped=0x0) returned 1 [0088.424] CloseHandle (hObject=0x444) returned 1 [0088.440] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\messages.json", lpFilePart=0x0) returned 0x93 [0088.440] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0088.440] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0088.442] GetFileType (hFile=0x444) returned 0x1 [0088.442] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0088.442] GetFileType (hFile=0x444) returned 0x1 [0088.442] WriteFile (in: hFile=0x444, lpBuffer=0x224c080*, nNumberOfBytesToWrite=0xd0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x224c080*, lpNumberOfBytesWritten=0x3be388*=0xd0, lpOverlapped=0x0) returned 1 [0088.444] CloseHandle (hObject=0x444) returned 1 [0088.444] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\messages.json", lpFilePart=0x0) returned 0x93 [0088.444] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\messages.json.xuy", lpFilePart=0x0) returned 0x97 [0088.444] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0088.444] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75a3dd97, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x75a40482, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x208f78d2, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xd0)) returned 1 [0088.444] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0088.444] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\messages.json.xuy")) returned 1 [0088.446] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0088.446] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et", lpFilePart=0x0) returned 0x81 [0088.446] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\", lpFilePart=0x0) returned 0x82 [0088.447] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7cd0 [0088.447] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0088.447] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0088.447] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0088.447] FindClose (in: hFindFile=0x5d7cd0 | out: hFindFile=0x5d7cd0) returned 1 [0088.447] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0088.447] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0088.448] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0088.448] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et", lpFilePart=0x0) returned 0x81 [0088.448] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\", lpFilePart=0x0) returned 0x82 [0088.448] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d8090 [0088.448] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0088.448] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0088.448] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0088.449] FindClose (in: hFindFile=0x5d8090 | out: hFindFile=0x5d8090) returned 1 [0088.449] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0088.449] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0088.449] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\messages.json", lpFilePart=0x0) returned 0x8f [0088.449] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0088.449] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x22501f0 | out: lpFileInformation=0x22501f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75a53d46, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x75a53d02, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x76d29e74, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xd8)) returned 1 [0088.449] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0088.449] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\messages.json", lpFilePart=0x0) returned 0x8f [0088.449] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0088.449] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0088.449] GetFileType (hFile=0x444) returned 0x1 [0088.449] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0088.449] GetFileType (hFile=0x444) returned 0x1 [0088.449] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xd8 [0088.450] ReadFile (in: hFile=0x444, lpBuffer=0x2250690, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x2250690*, lpNumberOfBytesRead=0x3be478*=0xd8, lpOverlapped=0x0) returned 1 [0088.451] CloseHandle (hObject=0x444) returned 1 [0088.463] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\messages.json", lpFilePart=0x0) returned 0x8f [0088.463] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0088.463] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0088.464] GetFileType (hFile=0x444) returned 0x1 [0088.464] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0088.464] GetFileType (hFile=0x444) returned 0x1 [0088.464] WriteFile (in: hFile=0x444, lpBuffer=0x22c79d0*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x22c79d0*, lpNumberOfBytesWritten=0x3be388*=0xe0, lpOverlapped=0x0) returned 1 [0088.465] CloseHandle (hObject=0x444) returned 1 [0088.465] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\messages.json", lpFilePart=0x0) returned 0x8f [0088.465] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0088.465] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0088.465] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75a53d46, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x75a53d02, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x209438f7, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1 [0088.465] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0088.465] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\messages.json.xuy")) returned 1 [0088.466] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0088.466] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi", lpFilePart=0x0) returned 0x81 [0088.466] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\", lpFilePart=0x0) returned 0x82 [0088.466] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7c70 [0088.467] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0088.467] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0088.467] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0088.467] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0088.467] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0088.467] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0088.467] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0088.467] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi", lpFilePart=0x0) returned 0x81 [0088.467] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\", lpFilePart=0x0) returned 0x82 [0088.467] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d81b0 [0088.468] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0088.468] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0088.468] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0088.468] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0088.469] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0088.469] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0088.469] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\messages.json", lpFilePart=0x0) returned 0x8f [0088.469] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0088.469] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x22cbb28 | out: lpFileInformation=0x22cbb28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75a5d97e, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x75a60052, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x76d29e74, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xd8)) returned 1 [0088.473] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0088.473] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\messages.json", lpFilePart=0x0) returned 0x8f [0088.473] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0088.473] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0088.473] GetFileType (hFile=0x444) returned 0x1 [0088.473] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0088.473] GetFileType (hFile=0x444) returned 0x1 [0088.473] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xd8 [0088.473] ReadFile (in: hFile=0x444, lpBuffer=0x22cbfc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x22cbfc8*, lpNumberOfBytesRead=0x3be478*=0xd8, lpOverlapped=0x0) returned 1 [0088.474] CloseHandle (hObject=0x444) returned 1 [0088.485] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\messages.json", lpFilePart=0x0) returned 0x8f [0088.485] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0088.485] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0088.486] GetFileType (hFile=0x444) returned 0x1 [0088.486] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0088.486] GetFileType (hFile=0x444) returned 0x1 [0088.486] WriteFile (in: hFile=0x444, lpBuffer=0x2343308*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x2343308*, lpNumberOfBytesWritten=0x3be388*=0xe0, lpOverlapped=0x0) returned 1 [0088.487] CloseHandle (hObject=0x444) returned 1 [0088.487] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\messages.json", lpFilePart=0x0) returned 0x8f [0088.487] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0088.487] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0088.487] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75a5d97e, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x75a60052, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x20969ab7, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1 [0088.487] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0088.487] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\messages.json.xuy")) returned 1 [0088.488] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0088.488] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil", lpFilePart=0x0) returned 0x82 [0088.488] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\", lpFilePart=0x0) returned 0x83 [0088.488] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7370 [0088.488] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0088.489] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0088.489] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0088.489] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0088.489] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0088.489] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0088.489] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0088.489] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil", lpFilePart=0x0) returned 0x82 [0088.489] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\", lpFilePart=0x0) returned 0x83 [0088.489] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7d30 [0088.489] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0088.493] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0088.493] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0088.493] FindClose (in: hFindFile=0x5d7d30 | out: hFindFile=0x5d7d30) returned 1 [0088.493] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0088.493] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0088.493] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\messages.json", lpFilePart=0x0) returned 0x90 [0088.493] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0088.493] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x2147d00 | out: lpFileInformation=0x2147d00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75a76023, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x75a75fe2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x76d2c58d, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xdb)) returned 1 [0088.493] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0088.493] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\messages.json", lpFilePart=0x0) returned 0x90 [0088.493] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0088.493] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0088.494] GetFileType (hFile=0x444) returned 0x1 [0088.494] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0088.494] GetFileType (hFile=0x444) returned 0x1 [0088.494] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xdb [0088.494] ReadFile (in: hFile=0x444, lpBuffer=0x21481b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x21481b8*, lpNumberOfBytesRead=0x3be478*=0xdb, lpOverlapped=0x0) returned 1 [0088.495] CloseHandle (hObject=0x444) returned 1 [0088.664] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\messages.json", lpFilePart=0x0) returned 0x90 [0088.670] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0088.670] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0088.671] GetFileType (hFile=0x444) returned 0x1 [0088.671] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0088.671] GetFileType (hFile=0x444) returned 0x1 [0088.671] WriteFile (in: hFile=0x444, lpBuffer=0x21bf500*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x21bf500*, lpNumberOfBytesWritten=0x3be388*=0xe0, lpOverlapped=0x0) returned 1 [0088.672] CloseHandle (hObject=0x444) returned 1 [0088.672] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\messages.json", lpFilePart=0x0) returned 0x90 [0088.672] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\messages.json.xuy", lpFilePart=0x0) returned 0x94 [0088.672] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0088.672] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75a76023, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x75a75fe2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x20b338c9, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1 [0088.672] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0088.672] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\messages.json.xuy")) returned 1 [0088.673] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0088.673] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr", lpFilePart=0x0) returned 0x81 [0088.673] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\", lpFilePart=0x0) returned 0x82 [0088.673] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7f10 [0088.673] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0088.674] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0088.674] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0088.674] FindClose (in: hFindFile=0x5d7f10 | out: hFindFile=0x5d7f10) returned 1 [0088.674] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0088.674] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0088.674] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0088.674] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr", lpFilePart=0x0) returned 0x81 [0088.674] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\", lpFilePart=0x0) returned 0x82 [0088.674] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7370 [0088.674] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0088.674] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0088.675] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0088.675] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0088.675] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0088.675] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0088.675] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\messages.json", lpFilePart=0x0) returned 0x8f [0088.675] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0088.675] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x21c3670 | out: lpFileInformation=0x21c3670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75a82377, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x75a82332, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x76d2c58d, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xd7)) returned 1 [0088.676] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0088.676] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\messages.json", lpFilePart=0x0) returned 0x8f [0088.677] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0088.677] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0088.677] GetFileType (hFile=0x444) returned 0x1 [0088.677] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0088.677] GetFileType (hFile=0x444) returned 0x1 [0088.677] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xd7 [0088.677] ReadFile (in: hFile=0x444, lpBuffer=0x21c3b10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x21c3b10*, lpNumberOfBytesRead=0x3be478*=0xd7, lpOverlapped=0x0) returned 1 [0088.678] CloseHandle (hObject=0x444) returned 1 [0088.694] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\messages.json", lpFilePart=0x0) returned 0x8f [0088.694] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0088.694] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0088.696] GetFileType (hFile=0x444) returned 0x1 [0088.696] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0088.696] GetFileType (hFile=0x444) returned 0x1 [0088.696] WriteFile (in: hFile=0x444, lpBuffer=0x223ae58*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x223ae58*, lpNumberOfBytesWritten=0x3be388*=0xe0, lpOverlapped=0x0) returned 1 [0088.697] CloseHandle (hObject=0x444) returned 1 [0088.697] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\messages.json", lpFilePart=0x0) returned 0x8f [0088.697] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0088.697] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0088.697] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75a82377, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x75a82332, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x20b7fc1e, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1 [0088.697] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0088.697] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\messages.json.xuy")) returned 1 [0088.698] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0088.698] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he", lpFilePart=0x0) returned 0x81 [0088.699] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\", lpFilePart=0x0) returned 0x82 [0088.699] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d78b0 [0088.699] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0088.699] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0088.699] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0088.699] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0088.699] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0088.699] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0088.699] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0088.700] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he", lpFilePart=0x0) returned 0x81 [0088.700] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\", lpFilePart=0x0) returned 0x82 [0088.700] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7370 [0088.700] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0088.700] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0088.700] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0088.700] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0088.700] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0088.700] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0088.700] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\messages.json", lpFilePart=0x0) returned 0x8f [0088.701] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0088.701] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x223efb0 | out: lpFileInformation=0x223efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75a8e6c8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x75a8e682, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x76d2c58d, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xdd)) returned 1 [0088.701] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0088.701] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\messages.json", lpFilePart=0x0) returned 0x8f [0088.701] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0088.701] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0088.701] GetFileType (hFile=0x444) returned 0x1 [0088.701] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0088.701] GetFileType (hFile=0x444) returned 0x1 [0088.701] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xdd [0088.701] ReadFile (in: hFile=0x444, lpBuffer=0x223f458, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x223f458*, lpNumberOfBytesRead=0x3be478*=0xdd, lpOverlapped=0x0) returned 1 [0088.702] CloseHandle (hObject=0x444) returned 1 [0088.723] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\messages.json", lpFilePart=0x0) returned 0x8f [0088.723] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0088.723] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0088.724] GetFileType (hFile=0x444) returned 0x1 [0088.724] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0088.724] GetFileType (hFile=0x444) returned 0x1 [0088.724] WriteFile (in: hFile=0x444, lpBuffer=0x22b6798*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x22b6798*, lpNumberOfBytesWritten=0x3be388*=0xe0, lpOverlapped=0x0) returned 1 [0088.725] CloseHandle (hObject=0x444) returned 1 [0088.725] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\messages.json", lpFilePart=0x0) returned 0x8f [0088.725] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0088.726] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0088.726] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75a8e6c8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x75a8e682, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x20ba5e9a, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1 [0088.726] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0088.726] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\messages.json.xuy")) returned 1 [0088.727] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0088.727] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi", lpFilePart=0x0) returned 0x81 [0088.727] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\", lpFilePart=0x0) returned 0x82 [0088.727] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7fd0 [0088.728] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0088.728] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0088.728] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0088.728] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0088.728] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0088.728] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0088.728] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0088.728] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi", lpFilePart=0x0) returned 0x81 [0088.728] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\", lpFilePart=0x0) returned 0x82 [0088.728] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7c70 [0088.729] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0088.729] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0088.729] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0088.729] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0088.729] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0088.729] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0088.729] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\messages.json", lpFilePart=0x0) returned 0x8f [0088.729] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0088.729] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x22ba8f0 | out: lpFileInformation=0x22ba8f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75aa1f51, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x75aa1f02, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x76d2c58d, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x117)) returned 1 [0088.732] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0088.732] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\messages.json", lpFilePart=0x0) returned 0x8f [0088.732] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0088.732] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0088.732] GetFileType (hFile=0x444) returned 0x1 [0088.732] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0088.732] GetFileType (hFile=0x444) returned 0x1 [0088.732] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x117 [0088.732] ReadFile (in: hFile=0x444, lpBuffer=0x22badd0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x22badd0*, lpNumberOfBytesRead=0x3be478*=0x117, lpOverlapped=0x0) returned 1 [0088.733] CloseHandle (hObject=0x444) returned 1 [0088.751] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\messages.json", lpFilePart=0x0) returned 0x8f [0088.751] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0088.751] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0088.753] GetFileType (hFile=0x444) returned 0x1 [0088.753] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0088.753] GetFileType (hFile=0x444) returned 0x1 [0088.753] WriteFile (in: hFile=0x444, lpBuffer=0x23323e0*, nNumberOfBytesToWrite=0x120, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x23323e0*, lpNumberOfBytesWritten=0x3be388*=0x120, lpOverlapped=0x0) returned 1 [0088.754] CloseHandle (hObject=0x444) returned 1 [0088.754] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\messages.json", lpFilePart=0x0) returned 0x8f [0088.754] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0088.754] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0088.754] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75aa1f51, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x75aa1f02, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x20bf23a6, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x120)) returned 1 [0088.754] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0088.755] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\messages.json.xuy")) returned 1 [0088.756] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0088.756] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu", lpFilePart=0x0) returned 0x81 [0088.756] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\", lpFilePart=0x0) returned 0x82 [0088.756] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d81b0 [0088.756] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0088.756] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0088.756] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0088.756] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0088.756] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0088.757] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0088.757] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0088.757] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu", lpFilePart=0x0) returned 0x81 [0088.757] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\", lpFilePart=0x0) returned 0x82 [0088.757] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7a30 [0088.757] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0088.757] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0088.757] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0088.762] FindClose (in: hFindFile=0x5d7a30 | out: hFindFile=0x5d7a30) returned 1 [0088.762] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0088.762] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0088.762] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\messages.json", lpFilePart=0x0) returned 0x8f [0088.762] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0088.762] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x2336538 | out: lpFileInformation=0x2336538*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75ab097c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x75ab0962, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x76d2ec9c, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xeb)) returned 1 [0088.762] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0088.762] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\messages.json", lpFilePart=0x0) returned 0x8f [0088.762] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0088.762] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0088.763] GetFileType (hFile=0x444) returned 0x1 [0088.763] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0088.763] GetFileType (hFile=0x444) returned 0x1 [0088.763] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xeb [0088.763] ReadFile (in: hFile=0x444, lpBuffer=0x23369f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x23369f0*, lpNumberOfBytesRead=0x3be478*=0xeb, lpOverlapped=0x0) returned 1 [0088.764] CloseHandle (hObject=0x444) returned 1 [0088.822] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\messages.json", lpFilePart=0x0) returned 0x8f [0088.823] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0088.823] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0088.824] GetFileType (hFile=0x444) returned 0x1 [0088.824] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0088.824] GetFileType (hFile=0x444) returned 0x1 [0088.824] WriteFile (in: hFile=0x444, lpBuffer=0x21ae6f8*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x21ae6f8*, lpNumberOfBytesWritten=0x3be388*=0xf0, lpOverlapped=0x0) returned 1 [0088.825] CloseHandle (hObject=0x444) returned 1 [0088.826] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\messages.json", lpFilePart=0x0) returned 0x8f [0088.826] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0088.826] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0088.826] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75ab097c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x75ab0962, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x20cb140c, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xf0)) returned 1 [0088.826] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0088.826] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\messages.json.xuy")) returned 1 [0088.827] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0088.827] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id", lpFilePart=0x0) returned 0x81 [0088.827] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\", lpFilePart=0x0) returned 0x82 [0088.827] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7c70 [0088.827] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0088.828] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0088.828] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0088.828] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0088.828] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0088.828] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0088.828] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0088.828] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id", lpFilePart=0x0) returned 0x81 [0088.828] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\", lpFilePart=0x0) returned 0x82 [0088.828] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7370 [0088.828] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0088.828] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0088.829] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0088.829] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0088.829] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0088.829] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0088.829] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\messages.json", lpFilePart=0x0) returned 0x8f [0088.829] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0088.829] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x21b2850 | out: lpFileInformation=0x21b2850*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75ac4240, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x75ac68f2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x76d2ec9c, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xd1)) returned 1 [0088.833] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0088.833] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\messages.json", lpFilePart=0x0) returned 0x8f [0088.833] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0088.833] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0088.833] GetFileType (hFile=0x444) returned 0x1 [0088.833] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0088.833] GetFileType (hFile=0x444) returned 0x1 [0088.833] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xd1 [0088.834] ReadFile (in: hFile=0x444, lpBuffer=0x21b2cf0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x21b2cf0*, lpNumberOfBytesRead=0x3be478*=0xd1, lpOverlapped=0x0) returned 1 [0088.835] CloseHandle (hObject=0x444) returned 1 [0088.855] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\messages.json", lpFilePart=0x0) returned 0x8f [0088.855] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0088.855] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0088.857] GetFileType (hFile=0x444) returned 0x1 [0088.857] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0088.857] GetFileType (hFile=0x444) returned 0x1 [0088.857] WriteFile (in: hFile=0x444, lpBuffer=0x222a038*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x222a038*, lpNumberOfBytesWritten=0x3be388*=0xe0, lpOverlapped=0x0) returned 1 [0088.858] CloseHandle (hObject=0x444) returned 1 [0088.858] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\messages.json", lpFilePart=0x0) returned 0x8f [0088.858] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0088.858] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0088.858] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75ac4240, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x75ac68f2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x20cfd3a1, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1 [0088.858] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0088.858] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\messages.json.xuy")) returned 1 [0088.859] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0088.859] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it", lpFilePart=0x0) returned 0x81 [0088.859] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\", lpFilePart=0x0) returned 0x82 [0088.860] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d75b0 [0088.860] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0088.860] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0088.860] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0088.860] FindClose (in: hFindFile=0x5d75b0 | out: hFindFile=0x5d75b0) returned 1 [0088.860] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0088.860] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0088.860] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0088.860] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it", lpFilePart=0x0) returned 0x81 [0088.861] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\", lpFilePart=0x0) returned 0x82 [0088.861] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7df0 [0088.861] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0088.861] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0088.861] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0088.861] FindClose (in: hFindFile=0x5d7df0 | out: hFindFile=0x5d7df0) returned 1 [0088.861] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0088.861] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0088.861] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\messages.json", lpFilePart=0x0) returned 0x8f [0088.862] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0088.862] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x222e190 | out: lpFileInformation=0x222e190*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75ad2c94, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x75ad2c42, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x76d2ec9c, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xd5)) returned 1 [0088.862] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0088.862] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\messages.json", lpFilePart=0x0) returned 0x8f [0088.862] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0088.862] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0088.862] GetFileType (hFile=0x444) returned 0x1 [0088.862] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0088.862] GetFileType (hFile=0x444) returned 0x1 [0088.862] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xd5 [0088.862] ReadFile (in: hFile=0x444, lpBuffer=0x222e630, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x222e630*, lpNumberOfBytesRead=0x3be478*=0xd5, lpOverlapped=0x0) returned 1 [0088.864] CloseHandle (hObject=0x444) returned 1 [0088.878] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\messages.json", lpFilePart=0x0) returned 0x8f [0088.878] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0088.878] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0088.880] GetFileType (hFile=0x444) returned 0x1 [0088.880] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0088.880] GetFileType (hFile=0x444) returned 0x1 [0088.880] WriteFile (in: hFile=0x444, lpBuffer=0x22a5978*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x22a5978*, lpNumberOfBytesWritten=0x3be388*=0xe0, lpOverlapped=0x0) returned 1 [0088.882] CloseHandle (hObject=0x444) returned 1 [0088.882] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\messages.json", lpFilePart=0x0) returned 0x8f [0088.882] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0088.882] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0088.882] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75ad2c94, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x75ad2c42, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x20d23590, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1 [0088.882] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0088.882] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\messages.json.xuy")) returned 1 [0088.884] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0088.884] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja", lpFilePart=0x0) returned 0x81 [0088.884] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\", lpFilePart=0x0) returned 0x82 [0088.884] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7fd0 [0088.888] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0088.888] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0088.888] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0088.888] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0088.889] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0088.889] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0088.889] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0088.889] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja", lpFilePart=0x0) returned 0x81 [0088.889] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\", lpFilePart=0x0) returned 0x82 [0088.889] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7e50 [0088.889] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0088.890] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0088.890] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0088.890] FindClose (in: hFindFile=0x5d7e50 | out: hFindFile=0x5d7e50) returned 1 [0088.890] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0088.890] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0088.890] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\messages.json", lpFilePart=0x0) returned 0x8f [0088.890] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0088.890] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x22a9ad0 | out: lpFileInformation=0x22a9ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75ae3e11, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x75ae64c2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x76d313a6, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xdd)) returned 1 [0088.892] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0088.892] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\messages.json", lpFilePart=0x0) returned 0x8f [0088.892] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0088.892] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0088.893] GetFileType (hFile=0x444) returned 0x1 [0088.893] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0088.893] GetFileType (hFile=0x444) returned 0x1 [0088.893] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xdd [0088.893] ReadFile (in: hFile=0x444, lpBuffer=0x22a9f78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x22a9f78*, lpNumberOfBytesRead=0x3be478*=0xdd, lpOverlapped=0x0) returned 1 [0088.894] CloseHandle (hObject=0x444) returned 1 [0088.996] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\messages.json", lpFilePart=0x0) returned 0x8f [0088.996] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0088.996] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0088.998] GetFileType (hFile=0x444) returned 0x1 [0088.999] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0088.999] GetFileType (hFile=0x444) returned 0x1 [0088.999] WriteFile (in: hFile=0x444, lpBuffer=0x23212b8*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x23212b8*, lpNumberOfBytesWritten=0x3be388*=0xe0, lpOverlapped=0x0) returned 1 [0089.000] CloseHandle (hObject=0x444) returned 1 [0089.000] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\messages.json", lpFilePart=0x0) returned 0x8f [0089.000] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0089.000] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0089.000] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75ae3e11, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x75ae64c2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x20e52143, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1 [0089.000] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0089.001] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\messages.json.xuy")) returned 1 [0089.002] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0089.002] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko", lpFilePart=0x0) returned 0x81 [0089.002] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\", lpFilePart=0x0) returned 0x82 [0089.002] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d78b0 [0089.003] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0089.003] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0089.003] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0089.003] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0089.003] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0089.003] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0089.003] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0089.004] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko", lpFilePart=0x0) returned 0x81 [0089.004] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\", lpFilePart=0x0) returned 0x82 [0089.004] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7550 [0089.004] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0089.004] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0089.004] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0089.005] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0089.005] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0089.005] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0089.005] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\messages.json", lpFilePart=0x0) returned 0x8f [0089.005] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0089.005] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x2325410 | out: lpFileInformation=0x2325410*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75af287b, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x75af2812, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x76d313a6, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xda)) returned 1 [0089.005] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0089.005] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\messages.json", lpFilePart=0x0) returned 0x8f [0089.005] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0089.005] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0089.006] GetFileType (hFile=0x444) returned 0x1 [0089.006] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0089.006] GetFileType (hFile=0x444) returned 0x1 [0089.006] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xda [0089.006] ReadFile (in: hFile=0x444, lpBuffer=0x23258b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x23258b8*, lpNumberOfBytesRead=0x3be478*=0xda, lpOverlapped=0x0) returned 1 [0089.008] CloseHandle (hObject=0x444) returned 1 [0089.073] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\messages.json", lpFilePart=0x0) returned 0x8f [0089.073] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0089.073] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0089.076] GetFileType (hFile=0x444) returned 0x1 [0089.076] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0089.076] GetFileType (hFile=0x444) returned 0x1 [0089.076] WriteFile (in: hFile=0x444, lpBuffer=0x219d568*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x219d568*, lpNumberOfBytesWritten=0x3be388*=0xe0, lpOverlapped=0x0) returned 1 [0089.077] CloseHandle (hObject=0x444) returned 1 [0089.077] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\messages.json", lpFilePart=0x0) returned 0x8f [0089.078] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0089.078] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0089.078] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75af287b, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x75af2812, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x20f20964, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1 [0089.078] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0089.078] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\messages.json.xuy")) returned 1 [0089.079] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0089.079] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt", lpFilePart=0x0) returned 0x81 [0089.080] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\", lpFilePart=0x0) returned 0x82 [0089.080] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d8090 [0089.080] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0089.080] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0089.080] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0089.080] FindClose (in: hFindFile=0x5d8090 | out: hFindFile=0x5d8090) returned 1 [0089.080] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0089.081] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0089.081] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0089.081] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt", lpFilePart=0x0) returned 0x81 [0089.081] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\", lpFilePart=0x0) returned 0x82 [0089.081] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7550 [0089.081] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0089.081] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0089.081] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0089.081] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0089.082] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0089.082] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0089.082] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\messages.json", lpFilePart=0x0) returned 0x8f [0089.082] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0089.082] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x21a16c0 | out: lpFileInformation=0x21a16c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75afebc5, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x75afeb62, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x76d313a6, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xe4)) returned 1 [0089.084] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0089.084] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\messages.json", lpFilePart=0x0) returned 0x8f [0089.084] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0089.085] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0089.085] GetFileType (hFile=0x444) returned 0x1 [0089.085] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0089.085] GetFileType (hFile=0x444) returned 0x1 [0089.085] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xe4 [0089.085] ReadFile (in: hFile=0x444, lpBuffer=0x21a1b70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x21a1b70*, lpNumberOfBytesRead=0x3be478*=0xe4, lpOverlapped=0x0) returned 1 [0089.086] CloseHandle (hObject=0x444) returned 1 [0089.102] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\messages.json", lpFilePart=0x0) returned 0x8f [0089.102] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0089.102] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0089.104] GetFileType (hFile=0x444) returned 0x1 [0089.104] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0089.104] GetFileType (hFile=0x444) returned 0x1 [0089.104] WriteFile (in: hFile=0x444, lpBuffer=0x2218ed8*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x2218ed8*, lpNumberOfBytesWritten=0x3be388*=0xf0, lpOverlapped=0x0) returned 1 [0089.105] CloseHandle (hObject=0x444) returned 1 [0089.105] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\messages.json", lpFilePart=0x0) returned 0x8f [0089.105] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0089.105] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0089.105] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75afebc5, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x75afeb62, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x20f46f6c, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xf0)) returned 1 [0089.105] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0089.105] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\messages.json.xuy")) returned 1 [0089.109] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0089.109] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv", lpFilePart=0x0) returned 0x81 [0089.109] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\", lpFilePart=0x0) returned 0x82 [0089.110] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7670 [0089.110] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0089.110] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0089.110] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0089.110] FindClose (in: hFindFile=0x5d7670 | out: hFindFile=0x5d7670) returned 1 [0089.110] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0089.110] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0089.110] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0089.110] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv", lpFilePart=0x0) returned 0x81 [0089.111] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\", lpFilePart=0x0) returned 0x82 [0089.111] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d78b0 [0089.111] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0089.111] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0089.111] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0089.111] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0089.111] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0089.111] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0089.111] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\messages.json", lpFilePart=0x0) returned 0x8f [0089.112] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0089.112] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x221d030 | out: lpFileInformation=0x221d030*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75b1244e, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x75b123e2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x76d313a6, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1 [0089.112] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0089.112] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\messages.json", lpFilePart=0x0) returned 0x8f [0089.112] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0089.112] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0089.112] GetFileType (hFile=0x444) returned 0x1 [0089.112] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0089.112] GetFileType (hFile=0x444) returned 0x1 [0089.112] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xe0 [0089.112] ReadFile (in: hFile=0x444, lpBuffer=0x221d4d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x221d4d8*, lpNumberOfBytesRead=0x3be478*=0xe0, lpOverlapped=0x0) returned 1 [0089.113] CloseHandle (hObject=0x444) returned 1 [0089.162] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\messages.json", lpFilePart=0x0) returned 0x8f [0089.162] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0089.162] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0089.164] GetFileType (hFile=0x444) returned 0x1 [0089.164] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0089.164] GetFileType (hFile=0x444) returned 0x1 [0089.164] WriteFile (in: hFile=0x444, lpBuffer=0x2294840*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x2294840*, lpNumberOfBytesWritten=0x3be388*=0xf0, lpOverlapped=0x0) returned 1 [0089.165] CloseHandle (hObject=0x444) returned 1 [0089.165] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\messages.json", lpFilePart=0x0) returned 0x8f [0089.165] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0089.165] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0089.165] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75b1244e, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x75b123e2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x20fdfc3f, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xf0)) returned 1 [0089.165] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0089.165] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\messages.json.xuy")) returned 1 [0089.166] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0089.166] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms", lpFilePart=0x0) returned 0x81 [0089.166] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\", lpFilePart=0x0) returned 0x82 [0089.166] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d78b0 [0089.166] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0089.166] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0089.167] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0089.167] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0089.167] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0089.167] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0089.167] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0089.167] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms", lpFilePart=0x0) returned 0x81 [0089.167] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\", lpFilePart=0x0) returned 0x82 [0089.167] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7370 [0089.167] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0089.167] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0089.167] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0089.167] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0089.167] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0089.168] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0089.168] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\messages.json", lpFilePart=0x0) returned 0x8f [0089.168] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0089.168] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x2298998 | out: lpFileInformation=0x2298998*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75b25cdb, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x75b25c62, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x76d313a6, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xcf)) returned 1 [0089.169] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0089.169] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\messages.json", lpFilePart=0x0) returned 0x8f [0089.169] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0089.169] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0089.169] GetFileType (hFile=0x444) returned 0x1 [0089.169] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0089.169] GetFileType (hFile=0x444) returned 0x1 [0089.169] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xcf [0089.169] ReadFile (in: hFile=0x444, lpBuffer=0x2298e30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x2298e30*, lpNumberOfBytesRead=0x3be478*=0xcf, lpOverlapped=0x0) returned 1 [0089.170] CloseHandle (hObject=0x444) returned 1 [0089.181] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\messages.json", lpFilePart=0x0) returned 0x8f [0089.181] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0089.181] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0089.182] GetFileType (hFile=0x444) returned 0x1 [0089.182] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0089.182] GetFileType (hFile=0x444) returned 0x1 [0089.182] WriteFile (in: hFile=0x444, lpBuffer=0x2310150*, nNumberOfBytesToWrite=0xd0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x2310150*, lpNumberOfBytesWritten=0x3be388*=0xd0, lpOverlapped=0x0) returned 1 [0089.183] CloseHandle (hObject=0x444) returned 1 [0089.183] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\messages.json", lpFilePart=0x0) returned 0x8f [0089.183] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0089.183] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0089.183] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75b25cdb, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x75b25c62, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x21005a4a, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xd0)) returned 1 [0089.184] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0089.184] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\messages.json.xuy")) returned 1 [0089.185] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0089.185] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl", lpFilePart=0x0) returned 0x81 [0089.185] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\", lpFilePart=0x0) returned 0x82 [0089.186] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7af0 [0089.186] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0089.186] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0089.186] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0089.186] FindClose (in: hFindFile=0x5d7af0 | out: hFindFile=0x5d7af0) returned 1 [0089.186] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0089.186] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0089.186] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0089.186] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl", lpFilePart=0x0) returned 0x81 [0089.186] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\", lpFilePart=0x0) returned 0x82 [0089.186] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d81b0 [0089.187] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0089.187] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0089.187] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0089.187] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0089.187] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0089.187] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0089.187] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\messages.json", lpFilePart=0x0) returned 0x8f [0089.187] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0089.187] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x23142a8 | out: lpFileInformation=0x23142a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75b3e37c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x75b3e302, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x76d361c8, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xd9)) returned 1 [0089.187] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0089.188] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\messages.json", lpFilePart=0x0) returned 0x8f [0089.188] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0089.188] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0089.188] GetFileType (hFile=0x444) returned 0x1 [0089.188] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0089.188] GetFileType (hFile=0x444) returned 0x1 [0089.188] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xd9 [0089.188] ReadFile (in: hFile=0x444, lpBuffer=0x2314750, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x2314750*, lpNumberOfBytesRead=0x3be478*=0xd9, lpOverlapped=0x0) returned 1 [0089.189] CloseHandle (hObject=0x444) returned 1 [0089.230] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\messages.json", lpFilePart=0x0) returned 0x8f [0089.230] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0089.230] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0089.231] GetFileType (hFile=0x444) returned 0x1 [0089.231] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0089.231] GetFileType (hFile=0x444) returned 0x1 [0089.231] WriteFile (in: hFile=0x444, lpBuffer=0x218c408*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x218c408*, lpNumberOfBytesWritten=0x3be388*=0xe0, lpOverlapped=0x0) returned 1 [0089.234] CloseHandle (hObject=0x444) returned 1 [0089.234] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\messages.json", lpFilePart=0x0) returned 0x8f [0089.234] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0089.234] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0089.234] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75b3e37c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x75b3e302, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2109e480, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1 [0089.234] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0089.234] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\messages.json.xuy")) returned 1 [0089.235] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0089.235] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no", lpFilePart=0x0) returned 0x81 [0089.235] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\", lpFilePart=0x0) returned 0x82 [0089.235] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7c70 [0089.236] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0089.236] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0089.236] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0089.236] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0089.236] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0089.236] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0089.236] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0089.236] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no", lpFilePart=0x0) returned 0x81 [0089.236] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\", lpFilePart=0x0) returned 0x82 [0089.236] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7c70 [0089.236] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0089.236] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0089.237] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0089.237] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0089.237] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0089.237] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0089.237] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\messages.json", lpFilePart=0x0) returned 0x8f [0089.237] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0089.237] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x2190560 | out: lpFileInformation=0x2190560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75b47fc1, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x75b4a652, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0xfe051a00, ftLastWriteTime.dwHighDateTime=0x1d03f5d, nFileSizeHigh=0x0, nFileSizeLow=0xc3)) returned 1 [0089.238] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0089.238] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\messages.json", lpFilePart=0x0) returned 0x8f [0089.238] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0089.238] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0089.238] GetFileType (hFile=0x444) returned 0x1 [0089.238] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0089.239] GetFileType (hFile=0x444) returned 0x1 [0089.239] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xc3 [0089.239] ReadFile (in: hFile=0x444, lpBuffer=0x21909f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x21909f0*, lpNumberOfBytesRead=0x3be478*=0xc3, lpOverlapped=0x0) returned 1 [0089.240] CloseHandle (hObject=0x444) returned 1 [0089.250] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\messages.json", lpFilePart=0x0) returned 0x8f [0089.250] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0089.251] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0089.252] GetFileType (hFile=0x444) returned 0x1 [0089.252] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0089.252] GetFileType (hFile=0x444) returned 0x1 [0089.252] WriteFile (in: hFile=0x444, lpBuffer=0x2207d18*, nNumberOfBytesToWrite=0xd0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x2207d18*, lpNumberOfBytesWritten=0x3be388*=0xd0, lpOverlapped=0x0) returned 1 [0089.253] CloseHandle (hObject=0x444) returned 1 [0089.253] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\messages.json", lpFilePart=0x0) returned 0x8f [0089.253] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0089.254] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0089.254] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75b47fc1, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x75b4a652, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x210c4a5f, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xd0)) returned 1 [0089.254] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0089.254] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\messages.json.xuy")) returned 1 [0089.255] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0089.255] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl", lpFilePart=0x0) returned 0x81 [0089.255] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\", lpFilePart=0x0) returned 0x82 [0089.255] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7610 [0089.255] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0089.255] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0089.255] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0089.255] FindClose (in: hFindFile=0x5d7610 | out: hFindFile=0x5d7610) returned 1 [0089.255] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0089.255] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0089.256] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0089.256] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl", lpFilePart=0x0) returned 0x81 [0089.256] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\", lpFilePart=0x0) returned 0x82 [0089.256] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d79d0 [0089.256] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0089.256] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0089.256] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0089.256] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0089.256] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0089.256] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0089.256] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\messages.json", lpFilePart=0x0) returned 0x8f [0089.256] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0089.256] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x220be70 | out: lpFileInformation=0x220be70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75b5b83a, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x75b5ded2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x76d361c8, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xd5)) returned 1 [0089.257] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0089.257] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\messages.json", lpFilePart=0x0) returned 0x8f [0089.257] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0089.257] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0089.257] GetFileType (hFile=0x444) returned 0x1 [0089.257] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0089.257] GetFileType (hFile=0x444) returned 0x1 [0089.257] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xd5 [0089.257] ReadFile (in: hFile=0x444, lpBuffer=0x220c310, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x220c310*, lpNumberOfBytesRead=0x3be478*=0xd5, lpOverlapped=0x0) returned 1 [0089.258] CloseHandle (hObject=0x444) returned 1 [0089.269] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\messages.json", lpFilePart=0x0) returned 0x8f [0089.270] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0089.270] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0089.271] GetFileType (hFile=0x444) returned 0x1 [0089.271] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0089.271] GetFileType (hFile=0x444) returned 0x1 [0089.271] WriteFile (in: hFile=0x444, lpBuffer=0x2283658*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x2283658*, lpNumberOfBytesWritten=0x3be388*=0xe0, lpOverlapped=0x0) returned 1 [0089.272] CloseHandle (hObject=0x444) returned 1 [0089.272] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\messages.json", lpFilePart=0x0) returned 0x8f [0089.272] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0089.272] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0089.272] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75b5b83a, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x75b5ded2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x210ea95b, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1 [0089.272] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0089.272] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\messages.json.xuy")) returned 1 [0089.273] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0089.273] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR", lpFilePart=0x0) returned 0x84 [0089.273] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\", lpFilePart=0x0) returned 0x85 [0089.273] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d75b0 [0089.273] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0089.274] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0089.274] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0089.274] FindClose (in: hFindFile=0x5d75b0 | out: hFindFile=0x5d75b0) returned 1 [0089.274] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0089.274] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0089.274] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0089.274] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR", lpFilePart=0x0) returned 0x84 [0089.274] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\", lpFilePart=0x0) returned 0x85 [0089.274] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7a30 [0089.274] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0089.274] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0089.275] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0089.275] FindClose (in: hFindFile=0x5d7a30 | out: hFindFile=0x5d7a30) returned 1 [0089.275] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0089.275] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0089.275] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\messages.json", lpFilePart=0x0) returned 0x92 [0089.275] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0089.275] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_br\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x2287880 | out: lpFileInformation=0x2287880*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7627408f, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7650bf42, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x76d361c8, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xce)) returned 1 [0089.275] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0089.275] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\messages.json", lpFilePart=0x0) returned 0x92 [0089.275] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0089.275] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_br\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0089.275] GetFileType (hFile=0x444) returned 0x1 [0089.275] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0089.275] GetFileType (hFile=0x444) returned 0x1 [0089.275] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xce [0089.275] ReadFile (in: hFile=0x444, lpBuffer=0x2287d28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x2287d28*, lpNumberOfBytesRead=0x3be478*=0xce, lpOverlapped=0x0) returned 1 [0089.277] CloseHandle (hObject=0x444) returned 1 [0089.287] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\messages.json", lpFilePart=0x0) returned 0x92 [0089.287] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0089.287] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_br\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0089.289] GetFileType (hFile=0x444) returned 0x1 [0089.289] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0089.289] GetFileType (hFile=0x444) returned 0x1 [0089.289] WriteFile (in: hFile=0x444, lpBuffer=0x22ff050*, nNumberOfBytesToWrite=0xd0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x22ff050*, lpNumberOfBytesWritten=0x3be388*=0xd0, lpOverlapped=0x0) returned 1 [0089.289] CloseHandle (hObject=0x444) returned 1 [0089.290] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\messages.json", lpFilePart=0x0) returned 0x92 [0089.290] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\messages.json.xuy", lpFilePart=0x0) returned 0x96 [0089.290] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0089.290] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_br\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7627408f, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7650bf42, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x21110b85, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xd0)) returned 1 [0089.290] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0089.290] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_br\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_br\\messages.json.xuy")) returned 1 [0089.291] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0089.291] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT", lpFilePart=0x0) returned 0x84 [0089.291] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\", lpFilePart=0x0) returned 0x85 [0089.291] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7550 [0089.293] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0089.293] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0089.293] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0089.293] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0089.293] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0089.293] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0089.293] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0089.293] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT", lpFilePart=0x0) returned 0x84 [0089.293] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\", lpFilePart=0x0) returned 0x85 [0089.293] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7550 [0089.293] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0089.294] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0089.294] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0089.294] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0089.294] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0089.294] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0089.294] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\messages.json", lpFilePart=0x0) returned 0x92 [0089.294] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0089.294] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_pt\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x2303290 | out: lpFileInformation=0x2303290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7660ef16, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7660ebe2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x76d361c8, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xd0)) returned 1 [0089.294] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0089.294] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\messages.json", lpFilePart=0x0) returned 0x92 [0089.294] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0089.294] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_pt\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0089.295] GetFileType (hFile=0x444) returned 0x1 [0089.295] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0089.295] GetFileType (hFile=0x444) returned 0x1 [0089.295] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xd0 [0089.295] ReadFile (in: hFile=0x444, lpBuffer=0x2303738, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x2303738*, lpNumberOfBytesRead=0x3be478*=0xd0, lpOverlapped=0x0) returned 1 [0089.296] CloseHandle (hObject=0x444) returned 1 [0089.337] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\messages.json", lpFilePart=0x0) returned 0x92 [0089.337] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0089.337] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_pt\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0089.338] GetFileType (hFile=0x444) returned 0x1 [0089.338] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0089.338] GetFileType (hFile=0x444) returned 0x1 [0089.338] WriteFile (in: hFile=0x444, lpBuffer=0x217b3f0*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x217b3f0*, lpNumberOfBytesWritten=0x3be388*=0xe0, lpOverlapped=0x0) returned 1 [0089.339] CloseHandle (hObject=0x444) returned 1 [0089.339] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\messages.json", lpFilePart=0x0) returned 0x92 [0089.339] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\messages.json.xuy", lpFilePart=0x0) returned 0x96 [0089.339] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0089.339] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_pt\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7660ef16, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7660ebe2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x211832e6, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1 [0089.340] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0089.340] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_pt\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_pt\\messages.json.xuy")) returned 1 [0089.340] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0089.340] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro", lpFilePart=0x0) returned 0x81 [0089.340] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\", lpFilePart=0x0) returned 0x82 [0089.341] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d81b0 [0089.341] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0089.341] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0089.341] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0089.341] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0089.341] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0089.341] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0089.342] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0089.342] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro", lpFilePart=0x0) returned 0x81 [0089.342] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\", lpFilePart=0x0) returned 0x82 [0089.342] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d79d0 [0089.342] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0089.342] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0089.342] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0089.342] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0089.342] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0089.342] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0089.342] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\messages.json", lpFilePart=0x0) returned 0x8f [0089.342] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0089.342] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x217f560 | out: lpFileInformation=0x217f560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7661d97d, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7661d642, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x76d388e1, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xd5)) returned 1 [0089.343] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0089.343] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\messages.json", lpFilePart=0x0) returned 0x8f [0089.343] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0089.343] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0089.343] GetFileType (hFile=0x444) returned 0x1 [0089.343] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0089.343] GetFileType (hFile=0x444) returned 0x1 [0089.343] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xd5 [0089.343] ReadFile (in: hFile=0x444, lpBuffer=0x217fa00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x217fa00*, lpNumberOfBytesRead=0x3be478*=0xd5, lpOverlapped=0x0) returned 1 [0089.344] CloseHandle (hObject=0x444) returned 1 [0089.354] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\messages.json", lpFilePart=0x0) returned 0x8f [0089.354] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0089.354] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0089.355] GetFileType (hFile=0x444) returned 0x1 [0089.355] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0089.355] GetFileType (hFile=0x444) returned 0x1 [0089.355] WriteFile (in: hFile=0x444, lpBuffer=0x21f6d48*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x21f6d48*, lpNumberOfBytesWritten=0x3be388*=0xe0, lpOverlapped=0x0) returned 1 [0089.356] CloseHandle (hObject=0x444) returned 1 [0089.356] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\messages.json", lpFilePart=0x0) returned 0x8f [0089.356] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0089.356] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0089.356] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7661d97d, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7661d642, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x211a955c, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1 [0089.356] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0089.356] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\messages.json.xuy")) returned 1 [0089.358] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0089.358] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru", lpFilePart=0x0) returned 0x81 [0089.358] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\", lpFilePart=0x0) returned 0x82 [0089.358] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7c70 [0089.359] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0089.359] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0089.359] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0089.359] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0089.359] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0089.359] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0089.360] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0089.360] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru", lpFilePart=0x0) returned 0x81 [0089.360] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\", lpFilePart=0x0) returned 0x82 [0089.360] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7af0 [0089.360] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0089.360] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0089.360] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0089.360] FindClose (in: hFindFile=0x5d7af0 | out: hFindFile=0x5d7af0) returned 1 [0089.360] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0089.360] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0089.360] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\messages.json", lpFilePart=0x0) returned 0x8f [0089.360] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0089.360] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x21faea0 | out: lpFileInformation=0x21faea0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76638738, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x766383f2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x76d388e1, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x10a)) returned 1 [0089.361] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0089.361] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\messages.json", lpFilePart=0x0) returned 0x8f [0089.361] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0089.361] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0089.361] GetFileType (hFile=0x444) returned 0x1 [0089.361] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0089.361] GetFileType (hFile=0x444) returned 0x1 [0089.361] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x10a [0089.361] ReadFile (in: hFile=0x444, lpBuffer=0x21fb378, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x21fb378*, lpNumberOfBytesRead=0x3be478*=0x10a, lpOverlapped=0x0) returned 1 [0089.362] CloseHandle (hObject=0x444) returned 1 [0089.372] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\messages.json", lpFilePart=0x0) returned 0x8f [0089.372] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0089.373] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0089.374] GetFileType (hFile=0x444) returned 0x1 [0089.374] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0089.374] GetFileType (hFile=0x444) returned 0x1 [0089.374] WriteFile (in: hFile=0x444, lpBuffer=0x2272930*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x2272930*, lpNumberOfBytesWritten=0x3be388*=0x110, lpOverlapped=0x0) returned 1 [0089.375] CloseHandle (hObject=0x444) returned 1 [0089.375] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\messages.json", lpFilePart=0x0) returned 0x8f [0089.375] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0089.375] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0089.375] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76638738, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x766383f2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x211f599c, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x110)) returned 1 [0089.375] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0089.375] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\messages.json.xuy")) returned 1 [0089.376] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0089.376] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk", lpFilePart=0x0) returned 0x81 [0089.376] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\", lpFilePart=0x0) returned 0x82 [0089.376] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7fd0 [0089.376] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0089.376] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0089.376] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0089.376] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0089.376] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0089.377] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0089.377] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0089.377] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk", lpFilePart=0x0) returned 0x81 [0089.377] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\", lpFilePart=0x0) returned 0x82 [0089.377] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7d90 [0089.377] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0089.377] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0089.377] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0089.377] FindClose (in: hFindFile=0x5d7d90 | out: hFindFile=0x5d7d90) returned 1 [0089.377] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0089.377] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0089.377] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\messages.json", lpFilePart=0x0) returned 0x8f [0089.377] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0089.377] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x2276a88 | out: lpFileInformation=0x2276a88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76642392, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x76644742, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x76d388e1, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xdd)) returned 1 [0089.378] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0089.378] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\messages.json", lpFilePart=0x0) returned 0x8f [0089.378] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0089.378] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0089.378] GetFileType (hFile=0x444) returned 0x1 [0089.378] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0089.378] GetFileType (hFile=0x444) returned 0x1 [0089.378] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xdd [0089.378] ReadFile (in: hFile=0x444, lpBuffer=0x2276f30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x2276f30*, lpNumberOfBytesRead=0x3be478*=0xdd, lpOverlapped=0x0) returned 1 [0089.379] CloseHandle (hObject=0x444) returned 1 [0089.391] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\messages.json", lpFilePart=0x0) returned 0x8f [0089.391] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0089.391] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0089.392] GetFileType (hFile=0x444) returned 0x1 [0089.392] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0089.392] GetFileType (hFile=0x444) returned 0x1 [0089.392] WriteFile (in: hFile=0x444, lpBuffer=0x22ee270*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x22ee270*, lpNumberOfBytesWritten=0x3be388*=0xe0, lpOverlapped=0x0) returned 1 [0089.393] CloseHandle (hObject=0x444) returned 1 [0089.393] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\messages.json", lpFilePart=0x0) returned 0x8f [0089.393] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0089.393] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0089.393] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76642392, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x76644742, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2121bce3, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1 [0089.393] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0089.394] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\messages.json.xuy")) returned 1 [0089.395] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0089.395] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl", lpFilePart=0x0) returned 0x81 [0089.395] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\", lpFilePart=0x0) returned 0x82 [0089.395] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7a30 [0089.397] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0089.397] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0089.397] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0089.397] FindClose (in: hFindFile=0x5d7a30 | out: hFindFile=0x5d7a30) returned 1 [0089.397] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0089.397] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0089.397] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0089.398] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl", lpFilePart=0x0) returned 0x81 [0089.398] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\", lpFilePart=0x0) returned 0x82 [0089.398] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7cd0 [0089.398] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0089.398] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0089.398] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0089.398] FindClose (in: hFindFile=0x5d7cd0 | out: hFindFile=0x5d7cd0) returned 1 [0089.398] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0089.398] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0089.398] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\messages.json", lpFilePart=0x0) returned 0x8f [0089.398] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0089.398] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x22f23c8 | out: lpFileInformation=0x22f23c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7665aa18, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7665a6d2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x76d388e1, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xda)) returned 1 [0089.399] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0089.399] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\messages.json", lpFilePart=0x0) returned 0x8f [0089.399] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0089.399] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0089.399] GetFileType (hFile=0x444) returned 0x1 [0089.399] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0089.399] GetFileType (hFile=0x444) returned 0x1 [0089.399] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xda [0089.399] ReadFile (in: hFile=0x444, lpBuffer=0x22f2870, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x22f2870*, lpNumberOfBytesRead=0x3be478*=0xda, lpOverlapped=0x0) returned 1 [0089.400] CloseHandle (hObject=0x444) returned 1 [0089.437] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\messages.json", lpFilePart=0x0) returned 0x8f [0089.437] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0089.437] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0089.438] GetFileType (hFile=0x444) returned 0x1 [0089.438] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0089.438] GetFileType (hFile=0x444) returned 0x1 [0089.438] WriteFile (in: hFile=0x444, lpBuffer=0x216a538*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x216a538*, lpNumberOfBytesWritten=0x3be388*=0xe0, lpOverlapped=0x0) returned 1 [0089.439] CloseHandle (hObject=0x444) returned 1 [0089.439] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\messages.json", lpFilePart=0x0) returned 0x8f [0089.439] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0089.440] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0089.440] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7665aa18, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7665a6d2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2128e6b5, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1 [0089.440] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0089.440] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\messages.json.xuy")) returned 1 [0089.441] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0089.441] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr", lpFilePart=0x0) returned 0x81 [0089.441] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\", lpFilePart=0x0) returned 0x82 [0089.441] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7c70 [0089.441] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0089.441] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0089.442] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0089.442] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0089.442] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0089.442] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0089.442] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0089.442] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr", lpFilePart=0x0) returned 0x81 [0089.442] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\", lpFilePart=0x0) returned 0x82 [0089.442] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7550 [0089.442] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0089.442] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0089.442] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0089.442] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0089.442] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0089.442] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0089.443] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\messages.json", lpFilePart=0x0) returned 0x8f [0089.443] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0089.443] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x216e690 | out: lpFileInformation=0x216e690*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76666d75, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x76669132, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x76d3aff1, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xf8)) returned 1 [0089.443] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0089.443] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\messages.json", lpFilePart=0x0) returned 0x8f [0089.443] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0089.443] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0089.443] GetFileType (hFile=0x444) returned 0x1 [0089.443] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0089.443] GetFileType (hFile=0x444) returned 0x1 [0089.443] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xf8 [0089.443] ReadFile (in: hFile=0x444, lpBuffer=0x216eb50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x216eb50*, lpNumberOfBytesRead=0x3be478*=0xf8, lpOverlapped=0x0) returned 1 [0089.444] CloseHandle (hObject=0x444) returned 1 [0089.460] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\messages.json", lpFilePart=0x0) returned 0x8f [0089.460] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0089.460] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0089.461] GetFileType (hFile=0x444) returned 0x1 [0089.461] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0089.461] GetFileType (hFile=0x444) returned 0x1 [0089.461] WriteFile (in: hFile=0x444, lpBuffer=0x21e5ed0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x21e5ed0*, lpNumberOfBytesWritten=0x3be388*=0x100, lpOverlapped=0x0) returned 1 [0089.463] CloseHandle (hObject=0x444) returned 1 [0089.463] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\messages.json", lpFilePart=0x0) returned 0x8f [0089.463] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0089.463] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0089.463] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76666d75, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x76669132, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x212b4763, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x100)) returned 1 [0089.463] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0089.463] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\messages.json.xuy")) returned 1 [0089.464] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0089.464] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv", lpFilePart=0x0) returned 0x81 [0089.464] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\", lpFilePart=0x0) returned 0x82 [0089.464] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7550 [0089.466] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0089.467] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0089.467] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0089.467] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0089.467] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0089.467] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0089.467] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0089.467] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv", lpFilePart=0x0) returned 0x81 [0089.467] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\", lpFilePart=0x0) returned 0x82 [0089.467] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d79d0 [0089.468] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0089.468] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0089.468] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0089.468] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0089.468] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0089.468] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0089.468] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\messages.json", lpFilePart=0x0) returned 0x8f [0089.468] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0089.468] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x21ea028 | out: lpFileInformation=0x21ea028*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x766730bd, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x76672d72, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x76d3aff1, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xd6)) returned 1 [0089.468] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0089.469] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\messages.json", lpFilePart=0x0) returned 0x8f [0089.469] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0089.469] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0089.469] GetFileType (hFile=0x444) returned 0x1 [0089.469] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0089.469] GetFileType (hFile=0x444) returned 0x1 [0089.469] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xd6 [0089.469] ReadFile (in: hFile=0x444, lpBuffer=0x21ea4c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x21ea4c8*, lpNumberOfBytesRead=0x3be478*=0xd6, lpOverlapped=0x0) returned 1 [0089.471] CloseHandle (hObject=0x444) returned 1 [0089.500] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\messages.json", lpFilePart=0x0) returned 0x8f [0089.500] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0089.500] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0089.501] GetFileType (hFile=0x444) returned 0x1 [0089.501] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0089.501] GetFileType (hFile=0x444) returned 0x1 [0089.501] WriteFile (in: hFile=0x444, lpBuffer=0x2261810*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x2261810*, lpNumberOfBytesWritten=0x3be388*=0xe0, lpOverlapped=0x0) returned 1 [0089.502] CloseHandle (hObject=0x444) returned 1 [0089.502] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\messages.json", lpFilePart=0x0) returned 0x8f [0089.502] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0089.502] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0089.502] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x766730bd, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x76672d72, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x21326b13, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1 [0089.502] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0089.502] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\messages.json.xuy")) returned 1 [0089.503] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0089.503] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th", lpFilePart=0x0) returned 0x81 [0089.503] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\", lpFilePart=0x0) returned 0x82 [0089.503] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d78b0 [0089.504] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0089.504] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0089.504] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0089.504] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0089.504] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0089.504] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0089.504] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0089.504] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th", lpFilePart=0x0) returned 0x81 [0089.504] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\", lpFilePart=0x0) returned 0x82 [0089.504] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d79d0 [0089.504] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0089.505] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0089.505] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0089.505] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0089.505] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0089.505] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0089.505] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\messages.json", lpFilePart=0x0) returned 0x8f [0089.505] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0089.505] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x2265968 | out: lpFileInformation=0x2265968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7669058e, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x76690232, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x76d3aff1, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xfe)) returned 1 [0089.505] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0089.505] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\messages.json", lpFilePart=0x0) returned 0x8f [0089.505] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0089.505] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0089.505] GetFileType (hFile=0x444) returned 0x1 [0089.505] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0089.505] GetFileType (hFile=0x444) returned 0x1 [0089.506] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xfe [0089.506] ReadFile (in: hFile=0x444, lpBuffer=0x2265e30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x2265e30*, lpNumberOfBytesRead=0x3be478*=0xfe, lpOverlapped=0x0) returned 1 [0089.506] CloseHandle (hObject=0x444) returned 1 [0089.518] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\messages.json", lpFilePart=0x0) returned 0x8f [0089.518] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0089.518] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0089.520] GetFileType (hFile=0x444) returned 0x1 [0089.520] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0089.520] GetFileType (hFile=0x444) returned 0x1 [0089.520] WriteFile (in: hFile=0x444, lpBuffer=0x22dd1b0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x22dd1b0*, lpNumberOfBytesWritten=0x3be388*=0x100, lpOverlapped=0x0) returned 1 [0089.521] CloseHandle (hObject=0x444) returned 1 [0089.521] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\messages.json", lpFilePart=0x0) returned 0x8f [0089.521] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0089.521] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0089.521] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7669058e, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x76690232, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2134ceb4, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x100)) returned 1 [0089.521] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0089.521] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\messages.json.xuy")) returned 1 [0089.522] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0089.522] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr", lpFilePart=0x0) returned 0x81 [0089.522] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\", lpFilePart=0x0) returned 0x82 [0089.522] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d73d0 [0089.525] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0089.525] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0089.525] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0089.525] FindClose (in: hFindFile=0x5d73d0 | out: hFindFile=0x5d73d0) returned 1 [0089.525] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0089.525] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0089.525] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0089.526] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr", lpFilePart=0x0) returned 0x81 [0089.526] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\", lpFilePart=0x0) returned 0x82 [0089.526] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d73d0 [0089.526] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0089.526] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0089.526] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0089.526] FindClose (in: hFindFile=0x5d73d0 | out: hFindFile=0x5d73d0) returned 1 [0089.526] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0089.527] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0089.527] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\messages.json", lpFilePart=0x0) returned 0x8f [0089.527] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0089.527] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x22e1308 | out: lpFileInformation=0x22e1308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7669a1cf, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7669c582, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x76d3aff1, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xe3)) returned 1 [0089.527] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0089.527] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\messages.json", lpFilePart=0x0) returned 0x8f [0089.527] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0089.527] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0089.527] GetFileType (hFile=0x444) returned 0x1 [0089.527] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0089.527] GetFileType (hFile=0x444) returned 0x1 [0089.527] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xe3 [0089.527] ReadFile (in: hFile=0x444, lpBuffer=0x22e17b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x22e17b8*, lpNumberOfBytesRead=0x3be478*=0xe3, lpOverlapped=0x0) returned 1 [0089.528] CloseHandle (hObject=0x444) returned 1 [0089.569] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\messages.json", lpFilePart=0x0) returned 0x8f [0089.569] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0089.569] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0089.571] GetFileType (hFile=0x444) returned 0x1 [0089.571] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0089.571] GetFileType (hFile=0x444) returned 0x1 [0089.571] WriteFile (in: hFile=0x444, lpBuffer=0x21594d0*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x21594d0*, lpNumberOfBytesWritten=0x3be388*=0xf0, lpOverlapped=0x0) returned 1 [0089.572] CloseHandle (hObject=0x444) returned 1 [0089.572] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\messages.json", lpFilePart=0x0) returned 0x8f [0089.572] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0089.572] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0089.572] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7669a1cf, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7669c582, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x213bf5de, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xf0)) returned 1 [0089.573] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0089.573] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\messages.json.xuy")) returned 1 [0089.574] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0089.574] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk", lpFilePart=0x0) returned 0x81 [0089.574] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\", lpFilePart=0x0) returned 0x82 [0089.574] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7af0 [0089.574] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0089.574] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0089.574] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0089.575] FindClose (in: hFindFile=0x5d7af0 | out: hFindFile=0x5d7af0) returned 1 [0089.575] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0089.575] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0089.575] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0089.575] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk", lpFilePart=0x0) returned 0x81 [0089.575] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\", lpFilePart=0x0) returned 0x82 [0089.575] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d81b0 [0089.575] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0089.575] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0089.583] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0089.583] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0089.583] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0089.583] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0089.583] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\messages.json", lpFilePart=0x0) returned 0x8f [0089.584] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0089.584] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x215d628 | out: lpFileInformation=0x215d628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x766ada58, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x766ad6f2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x76d3aff1, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x108)) returned 1 [0089.584] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0089.584] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\messages.json", lpFilePart=0x0) returned 0x8f [0089.584] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0089.584] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0089.584] GetFileType (hFile=0x444) returned 0x1 [0089.584] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0089.584] GetFileType (hFile=0x444) returned 0x1 [0089.584] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x108 [0089.584] ReadFile (in: hFile=0x444, lpBuffer=0x215daf8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x215daf8*, lpNumberOfBytesRead=0x3be478*=0x108, lpOverlapped=0x0) returned 1 [0089.586] CloseHandle (hObject=0x444) returned 1 [0089.602] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\messages.json", lpFilePart=0x0) returned 0x8f [0089.602] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0089.602] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0089.605] GetFileType (hFile=0x444) returned 0x1 [0089.605] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0089.605] GetFileType (hFile=0x444) returned 0x1 [0089.605] WriteFile (in: hFile=0x444, lpBuffer=0x21d50b0*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x21d50b0*, lpNumberOfBytesWritten=0x3be388*=0x110, lpOverlapped=0x0) returned 1 [0089.606] CloseHandle (hObject=0x444) returned 1 [0089.606] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\messages.json", lpFilePart=0x0) returned 0x8f [0089.606] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0089.606] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0089.606] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x766ada58, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x766ad6f2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2140bf40, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x110)) returned 1 [0089.606] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0089.606] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\messages.json.xuy")) returned 1 [0089.611] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0089.611] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi", lpFilePart=0x0) returned 0x81 [0089.611] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\", lpFilePart=0x0) returned 0x82 [0089.611] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7e50 [0089.613] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0089.613] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0089.613] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0089.613] FindClose (in: hFindFile=0x5d7e50 | out: hFindFile=0x5d7e50) returned 1 [0089.613] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0089.613] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0089.613] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0089.614] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi", lpFilePart=0x0) returned 0x81 [0089.614] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\", lpFilePart=0x0) returned 0x82 [0089.614] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7370 [0089.614] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0089.614] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0089.614] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0089.614] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0089.614] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0089.615] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0089.615] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\messages.json", lpFilePart=0x0) returned 0x8f [0089.615] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0089.615] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x21d9208 | out: lpFileInformation=0x21d9208*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x766b9d9c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x766bc152, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x76d3d700, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xe1)) returned 1 [0089.615] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0089.615] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\messages.json", lpFilePart=0x0) returned 0x8f [0089.615] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0089.615] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0089.615] GetFileType (hFile=0x444) returned 0x1 [0089.615] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0089.615] GetFileType (hFile=0x444) returned 0x1 [0089.615] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xe1 [0089.615] ReadFile (in: hFile=0x444, lpBuffer=0x21d96b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x21d96b8*, lpNumberOfBytesRead=0x3be478*=0xe1, lpOverlapped=0x0) returned 1 [0089.616] CloseHandle (hObject=0x444) returned 1 [0089.632] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\messages.json", lpFilePart=0x0) returned 0x8f [0089.632] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0089.632] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0089.634] GetFileType (hFile=0x444) returned 0x1 [0089.634] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0089.634] GetFileType (hFile=0x444) returned 0x1 [0089.634] WriteFile (in: hFile=0x444, lpBuffer=0x2250a20*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x2250a20*, lpNumberOfBytesWritten=0x3be388*=0xf0, lpOverlapped=0x0) returned 1 [0089.635] CloseHandle (hObject=0x444) returned 1 [0089.635] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\messages.json", lpFilePart=0x0) returned 0x8f [0089.635] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0089.635] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0089.635] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x766b9d9c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x766bc152, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x21457f54, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xf0)) returned 1 [0089.636] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0089.636] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\messages.json.xuy")) returned 1 [0089.637] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0089.637] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN", lpFilePart=0x0) returned 0x84 [0089.637] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\", lpFilePart=0x0) returned 0x85 [0089.637] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d78b0 [0089.637] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0089.637] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0089.637] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0089.638] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0089.638] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0089.638] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0089.638] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0089.638] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN", lpFilePart=0x0) returned 0x84 [0089.638] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\", lpFilePart=0x0) returned 0x85 [0089.638] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d79d0 [0089.638] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0089.639] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0089.639] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0089.639] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0089.639] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0089.639] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0089.639] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\messages.json", lpFilePart=0x0) returned 0x92 [0089.639] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0089.639] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_cn\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x2254c48 | out: lpFileInformation=0x2254c48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x766cd62c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x766cd2c2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x76d3d700, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xce)) returned 1 [0089.639] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0089.639] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\messages.json", lpFilePart=0x0) returned 0x92 [0089.639] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0089.639] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_cn\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0089.640] GetFileType (hFile=0x444) returned 0x1 [0089.640] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0089.640] GetFileType (hFile=0x444) returned 0x1 [0089.640] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xce [0089.640] ReadFile (in: hFile=0x444, lpBuffer=0x22550f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x22550f0*, lpNumberOfBytesRead=0x3be478*=0xce, lpOverlapped=0x0) returned 1 [0089.641] CloseHandle (hObject=0x444) returned 1 [0089.659] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\messages.json", lpFilePart=0x0) returned 0x92 [0089.659] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0089.659] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_cn\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0089.661] GetFileType (hFile=0x444) returned 0x1 [0089.661] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0089.661] GetFileType (hFile=0x444) returned 0x1 [0089.661] WriteFile (in: hFile=0x444, lpBuffer=0x22cc418*, nNumberOfBytesToWrite=0xd0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x22cc418*, lpNumberOfBytesWritten=0x3be388*=0xd0, lpOverlapped=0x0) returned 1 [0089.662] CloseHandle (hObject=0x444) returned 1 [0089.662] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\messages.json", lpFilePart=0x0) returned 0x92 [0089.662] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\messages.json.xuy", lpFilePart=0x0) returned 0x96 [0089.662] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0089.662] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_cn\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x766cd62c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x766cd2c2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x214a4494, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xd0)) returned 1 [0089.662] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0089.662] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_cn\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_cn\\messages.json.xuy")) returned 1 [0089.663] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0089.663] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW", lpFilePart=0x0) returned 0x84 [0089.663] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\", lpFilePart=0x0) returned 0x85 [0089.664] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7f10 [0089.664] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0089.664] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0089.664] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0089.664] FindClose (in: hFindFile=0x5d7f10 | out: hFindFile=0x5d7f10) returned 1 [0089.664] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0089.664] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0089.664] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0089.664] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW", lpFilePart=0x0) returned 0x84 [0089.664] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\", lpFilePart=0x0) returned 0x85 [0089.665] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d78b0 [0089.665] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0089.665] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0089.665] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0089.665] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0089.665] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0089.665] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0089.665] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\messages.json", lpFilePart=0x0) returned 0x92 [0089.665] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0089.665] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_tw\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x22d0658 | out: lpFileInformation=0x22d0658*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x766d9989, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x766d9612, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x76d3d700, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xce)) returned 1 [0089.666] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0089.666] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\messages.json", lpFilePart=0x0) returned 0x92 [0089.666] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0089.666] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_tw\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0089.666] GetFileType (hFile=0x444) returned 0x1 [0089.666] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0089.666] GetFileType (hFile=0x444) returned 0x1 [0089.666] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xce [0089.666] ReadFile (in: hFile=0x444, lpBuffer=0x22d0b00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x22d0b00*, lpNumberOfBytesRead=0x3be478*=0xce, lpOverlapped=0x0) returned 1 [0089.667] CloseHandle (hObject=0x444) returned 1 [0089.686] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\messages.json", lpFilePart=0x0) returned 0x92 [0089.686] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0089.686] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_tw\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0089.688] GetFileType (hFile=0x444) returned 0x1 [0089.688] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0089.688] GetFileType (hFile=0x444) returned 0x1 [0089.688] WriteFile (in: hFile=0x444, lpBuffer=0x2347e28*, nNumberOfBytesToWrite=0xd0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x2347e28*, lpNumberOfBytesWritten=0x3be388*=0xd0, lpOverlapped=0x0) returned 1 [0089.689] CloseHandle (hObject=0x444) returned 1 [0089.689] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\messages.json", lpFilePart=0x0) returned 0x92 [0089.689] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\messages.json.xuy", lpFilePart=0x0) returned 0x96 [0089.689] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0089.690] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_tw\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x766d9989, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x766d9612, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x214f0969, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xd0)) returned 1 [0089.690] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0089.690] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_tw\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_tw\\messages.json.xuy")) returned 1 [0089.691] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0089.691] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata", nBufferLength=0x105, lpBuffer=0x3be0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata", lpFilePart=0x0) returned 0x7f [0089.691] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\", nBufferLength=0x105, lpBuffer=0x3be060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\", lpFilePart=0x0) returned 0x80 [0089.691] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\*", lpFindFileData=0x3be270 | out: lpFindFileData=0x3be270) returned 0x5d7550 [0089.691] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0089.691] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0089.692] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0089.692] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 0 [0089.692] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0089.692] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0089.692] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0089.692] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0089.692] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata", nBufferLength=0x105, lpBuffer=0x3be0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata", lpFilePart=0x0) returned 0x7f [0089.692] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\", nBufferLength=0x105, lpBuffer=0x3be060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\", lpFilePart=0x0) returned 0x80 [0089.697] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\*", lpFindFileData=0x3be270 | out: lpFindFileData=0x3be270) returned 0x5d81b0 [0089.697] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0089.698] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0089.698] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0089.698] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 0 [0089.698] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0089.698] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0089.698] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0089.698] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\computed_hashes.json", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\computed_hashes.json", lpFilePart=0x0) returned 0x94 [0089.698] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0089.698] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\computed_hashes.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\computed_hashes.json"), fInfoLevelId=0x0, lpFileInformation=0x214cd28 | out: lpFileInformation=0x214cd28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76e38eaa, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x76e38eaa, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x76e38eaa, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x160)) returned 1 [0089.699] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0089.699] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\computed_hashes.json", nBufferLength=0x105, lpBuffer=0x3bdf40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\computed_hashes.json", lpFilePart=0x0) returned 0x94 [0089.699] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be420) returned 1 [0089.699] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\computed_hashes.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\computed_hashes.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0089.699] GetFileType (hFile=0x444) returned 0x1 [0089.699] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be390) returned 1 [0089.699] GetFileType (hFile=0x444) returned 0x1 [0089.699] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be5b8 | out: lpFileSizeHigh=0x3be5b8*=0x0) returned 0x160 [0089.699] ReadFile (in: hFile=0x444, lpBuffer=0x214d290, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be4e8, lpOverlapped=0x0 | out: lpBuffer=0x214d290*, lpNumberOfBytesRead=0x3be4e8*=0x160, lpOverlapped=0x0) returned 1 [0089.700] CloseHandle (hObject=0x444) returned 1 [0089.749] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\computed_hashes.json", nBufferLength=0x105, lpBuffer=0x3bdf40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\computed_hashes.json", lpFilePart=0x0) returned 0x94 [0089.749] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be420) returned 1 [0089.749] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\computed_hashes.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\computed_hashes.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0089.750] GetFileType (hFile=0x444) returned 0x1 [0089.750] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be390) returned 1 [0089.750] GetFileType (hFile=0x444) returned 0x1 [0089.750] WriteFile (in: hFile=0x444, lpBuffer=0x21c4a50*, nNumberOfBytesToWrite=0x170, lpNumberOfBytesWritten=0x3be3f8, lpOverlapped=0x0 | out: lpBuffer=0x21c4a50*, lpNumberOfBytesWritten=0x3be3f8*=0x170, lpOverlapped=0x0) returned 1 [0089.751] CloseHandle (hObject=0x444) returned 1 [0089.751] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\computed_hashes.json", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\computed_hashes.json", lpFilePart=0x0) returned 0x94 [0089.751] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\computed_hashes.json.xuy", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\computed_hashes.json.xuy", lpFilePart=0x0) returned 0x98 [0089.751] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0089.751] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\computed_hashes.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\computed_hashes.json"), fInfoLevelId=0x0, lpFileInformation=0x3be600 | out: lpFileInformation=0x3be600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76e38eaa, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x76e38eaa, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x215893d9, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x170)) returned 1 [0089.751] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0089.751] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\computed_hashes.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\computed_hashes.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\computed_hashes.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\computed_hashes.json.xuy")) returned 1 [0089.752] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\verified_contents.json", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\verified_contents.json", lpFilePart=0x0) returned 0x96 [0089.752] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0089.752] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\verified_contents.json"), fInfoLevelId=0x0, lpFileInformation=0x21c5e98 | out: lpFileInformation=0x21c5e98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7690162a, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x76903942, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0xfe051a00, ftLastWriteTime.dwHighDateTime=0x1d03f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2b56)) returned 1 [0089.752] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0089.752] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\verified_contents.json", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\verified_contents.json", lpFilePart=0x0) returned 0x96 [0089.752] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0089.753] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\verified_contents.json"), fInfoLevelId=0x0, lpFileInformation=0x21c6090 | out: lpFileInformation=0x21c6090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7690162a, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x76903942, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0xfe051a00, ftLastWriteTime.dwHighDateTime=0x1d03f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2b56)) returned 1 [0089.753] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0089.753] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\verified_contents.json", nBufferLength=0x105, lpBuffer=0x3bdfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\verified_contents.json", lpFilePart=0x0) returned 0x96 [0089.753] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0089.753] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\verified_contents.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0089.753] GetFileType (hFile=0x444) returned 0x1 [0089.753] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be420) returned 1 [0089.753] GetFileType (hFile=0x444) returned 0x1 [0089.753] ReadFile (in: hFile=0x444, lpBuffer=0x21c85b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be538, lpOverlapped=0x0 | out: lpBuffer=0x21c85b0*, lpNumberOfBytesRead=0x3be538*=0x1000, lpOverlapped=0x0) returned 1 [0089.775] CloseHandle (hObject=0x444) returned 1 [0089.775] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\verified_contents.json", nBufferLength=0x105, lpBuffer=0x3bdfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\verified_contents.json", lpFilePart=0x0) returned 0x96 [0089.775] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0089.775] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\verified_contents.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0089.776] GetFileType (hFile=0x444) returned 0x1 [0089.776] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be420) returned 1 [0089.776] GetFileType (hFile=0x444) returned 0x1 [0089.776] WriteFile (in: hFile=0x444, lpBuffer=0x21c6268*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be5e8, lpOverlapped=0x0 | out: lpBuffer=0x21c6268*, lpNumberOfBytesWritten=0x3be5e8*=0x2000, lpOverlapped=0x0) returned 1 [0089.776] CloseHandle (hObject=0x444) returned 1 [0089.776] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\verified_contents.json", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\verified_contents.json", lpFilePart=0x0) returned 0x96 [0089.776] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\verified_contents.json.xuy", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\verified_contents.json.xuy", lpFilePart=0x0) returned 0x9a [0089.776] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0089.776] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\verified_contents.json"), fInfoLevelId=0x0, lpFileInformation=0x3be600 | out: lpFileInformation=0x3be600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7690162a, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x76903942, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x215af3ce, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2b56)) returned 1 [0089.776] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0089.776] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\verified_contents.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\verified_contents.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\verified_contents.json.xuy")) returned 1 [0089.777] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0089.777] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf", lpFilePart=0x0) returned 0x6f [0089.777] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\", lpFilePart=0x0) returned 0x70 [0089.778] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d7eb0 [0089.779] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0089.780] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0089.780] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0089.780] FindClose (in: hFindFile=0x5d7eb0 | out: hFindFile=0x5d7eb0) returned 1 [0089.780] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0089.780] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0089.780] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0089.780] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf", lpFilePart=0x0) returned 0x6f [0089.780] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\", lpFilePart=0x0) returned 0x70 [0089.780] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d7d90 [0089.780] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0089.780] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0089.781] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0089.781] FindClose (in: hFindFile=0x5d7d90 | out: hFindFile=0x5d7d90) returned 1 [0089.781] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0089.781] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0089.781] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0089.781] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0", nBufferLength=0x105, lpBuffer=0x3be130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0", lpFilePart=0x0) returned 0x76 [0089.781] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\", nBufferLength=0x105, lpBuffer=0x3be0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\", lpFilePart=0x0) returned 0x77 [0089.781] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\*", lpFindFileData=0x3be2e0 | out: lpFindFileData=0x3be2e0) returned 0x5d78b0 [0089.791] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0089.791] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0089.791] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0089.792] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0089.792] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0089.792] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 0 [0089.792] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0089.793] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0089.793] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0089.793] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0089.793] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0", nBufferLength=0x105, lpBuffer=0x3be130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0", lpFilePart=0x0) returned 0x76 [0089.793] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\", nBufferLength=0x105, lpBuffer=0x3be0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\", lpFilePart=0x0) returned 0x77 [0089.793] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\*", lpFindFileData=0x3be2e0 | out: lpFindFileData=0x3be2e0) returned 0x5d7fd0 [0089.794] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0089.794] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0089.794] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0089.794] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0089.794] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0089.794] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 0 [0089.795] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0089.795] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0089.795] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0089.795] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png", lpFilePart=0x0) returned 0x7e [0089.795] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0089.795] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png"), fInfoLevelId=0x0, lpFileInformation=0x224afd0 | out: lpFileInformation=0x224afd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7871b523, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x78bc05b2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x78bc05b2, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x1a33)) returned 1 [0089.797] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0089.797] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png", lpFilePart=0x0) returned 0x7e [0089.797] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0089.797] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png"), fInfoLevelId=0x0, lpFileInformation=0x224b178 | out: lpFileInformation=0x224b178*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7871b523, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x78bc05b2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x78bc05b2, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x1a33)) returned 1 [0089.797] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0089.797] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png", nBufferLength=0x105, lpBuffer=0x3be040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png", lpFilePart=0x0) returned 0x7e [0089.797] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0089.797] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0089.798] GetFileType (hFile=0x444) returned 0x1 [0089.798] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be490) returned 1 [0089.798] GetFileType (hFile=0x444) returned 0x1 [0089.798] ReadFile (in: hFile=0x444, lpBuffer=0x224d5f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5a8, lpOverlapped=0x0 | out: lpBuffer=0x224d5f8*, lpNumberOfBytesRead=0x3be5a8*=0x1000, lpOverlapped=0x0) returned 1 [0089.816] CloseHandle (hObject=0x444) returned 1 [0089.817] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png", nBufferLength=0x105, lpBuffer=0x3be040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png", lpFilePart=0x0) returned 0x7e [0089.817] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0089.817] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0089.817] GetFileType (hFile=0x444) returned 0x1 [0089.817] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be490) returned 1 [0089.817] GetFileType (hFile=0x444) returned 0x1 [0089.817] WriteFile (in: hFile=0x444, lpBuffer=0x224b300*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be658, lpOverlapped=0x0 | out: lpBuffer=0x224b300*, lpNumberOfBytesWritten=0x3be658*=0x2000, lpOverlapped=0x0) returned 1 [0089.817] CloseHandle (hObject=0x444) returned 1 [0089.817] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png", lpFilePart=0x0) returned 0x7e [0089.817] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png.xuy", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png.xuy", lpFilePart=0x0) returned 0x82 [0089.817] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0089.818] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png"), fInfoLevelId=0x0, lpFileInformation=0x3be670 | out: lpFileInformation=0x3be670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7871b523, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x78bc05b2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x21621ad2, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0089.818] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0089.818] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png.xuy")) returned 1 [0089.818] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\manifest.json", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\manifest.json", lpFilePart=0x0) returned 0x84 [0089.819] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0089.819] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\manifest.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\manifest.json"), fInfoLevelId=0x0, lpFileInformation=0x22c9b40 | out: lpFileInformation=0x22c9b40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7870f1de, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x789a24be, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x78bb6977, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x3ec)) returned 1 [0089.819] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0089.819] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\manifest.json", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\manifest.json", lpFilePart=0x0) returned 0x84 [0089.819] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0089.819] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\manifest.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\manifest.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0089.819] GetFileType (hFile=0x444) returned 0x1 [0089.819] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be400) returned 1 [0089.819] GetFileType (hFile=0x444) returned 0x1 [0089.819] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be628 | out: lpFileSizeHigh=0x3be628*=0x0) returned 0x3ec [0089.819] ReadFile (in: hFile=0x444, lpBuffer=0x22ca2d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be558, lpOverlapped=0x0 | out: lpBuffer=0x22ca2d8*, lpNumberOfBytesRead=0x3be558*=0x3ec, lpOverlapped=0x0) returned 1 [0089.829] CloseHandle (hObject=0x444) returned 1 [0089.840] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\manifest.json", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\manifest.json", lpFilePart=0x0) returned 0x84 [0089.840] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0089.840] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\manifest.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\manifest.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0089.843] GetFileType (hFile=0x444) returned 0x1 [0089.843] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be400) returned 1 [0089.843] GetFileType (hFile=0x444) returned 0x1 [0089.843] WriteFile (in: hFile=0x444, lpBuffer=0x23426e0*, nNumberOfBytesToWrite=0x3f0, lpNumberOfBytesWritten=0x3be468, lpOverlapped=0x0 | out: lpBuffer=0x23426e0*, lpNumberOfBytesWritten=0x3be468*=0x3f0, lpOverlapped=0x0) returned 1 [0089.844] CloseHandle (hObject=0x444) returned 1 [0089.844] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\manifest.json", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\manifest.json", lpFilePart=0x0) returned 0x84 [0089.844] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\manifest.json.xuy", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\manifest.json.xuy", lpFilePart=0x0) returned 0x88 [0089.844] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0089.844] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\manifest.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\manifest.json"), fInfoLevelId=0x0, lpFileInformation=0x3be670 | out: lpFileInformation=0x3be670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7870f1de, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x789a24be, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2166dfb6, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x3f0)) returned 1 [0089.844] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0089.845] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\manifest.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\manifest.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\manifest.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\manifest.json.xuy")) returned 1 [0089.845] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0089.845] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales", nBufferLength=0x105, lpBuffer=0x3be0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales", lpFilePart=0x0) returned 0x7f [0089.846] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\", nBufferLength=0x105, lpBuffer=0x3be060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\", lpFilePart=0x0) returned 0x80 [0089.846] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\*", lpFindFileData=0x3be270 | out: lpFindFileData=0x3be270) returned 0x5d7fd0 [0089.866] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0089.866] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0089.866] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0089.866] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0089.866] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0089.866] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0089.866] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0089.866] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0089.867] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0089.867] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0089.867] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0089.867] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0089.867] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0089.867] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0089.867] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0089.867] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0089.868] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0089.868] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0089.868] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0089.868] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0089.868] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0089.868] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0089.868] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0089.868] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0089.868] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0089.869] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0089.869] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0089.869] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0089.869] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0089.869] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0089.869] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0089.869] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0089.869] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0089.870] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0089.870] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0089.870] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0089.870] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0089.870] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0089.870] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0089.870] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0089.871] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0089.871] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0089.871] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0089.871] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0089.874] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0089.875] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 0 [0089.875] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0089.875] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0089.875] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0089.875] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0089.876] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales", nBufferLength=0x105, lpBuffer=0x3be0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales", lpFilePart=0x0) returned 0x7f [0089.876] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\", nBufferLength=0x105, lpBuffer=0x3be060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\", lpFilePart=0x0) returned 0x80 [0089.876] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\*", lpFindFileData=0x3be270 | out: lpFindFileData=0x3be270) returned 0x5d7df0 [0089.876] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0089.877] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0089.877] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0089.877] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0089.877] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0089.877] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0089.877] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0089.877] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0089.877] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0089.877] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0089.878] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0089.878] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0089.878] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0089.878] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0089.878] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0089.878] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0089.878] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0089.878] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0089.878] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0089.878] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0089.878] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0089.878] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0089.878] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0089.878] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0089.878] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0089.878] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0089.878] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0089.879] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0089.879] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0089.879] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0089.879] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0089.879] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0089.879] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0089.879] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0089.879] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0089.879] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0089.879] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0089.879] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0089.879] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0089.879] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0089.879] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0089.879] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0089.879] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0089.879] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0089.879] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0089.879] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 0 [0089.880] FindClose (in: hFindFile=0x5d7df0 | out: hFindFile=0x5d7df0) returned 1 [0089.880] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0089.880] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0089.880] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0089.880] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar", lpFilePart=0x0) returned 0x82 [0089.880] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\", lpFilePart=0x0) returned 0x83 [0089.880] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7370 [0089.884] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0089.884] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0089.884] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0089.884] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0089.884] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0089.884] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0089.884] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0089.885] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar", lpFilePart=0x0) returned 0x82 [0089.885] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\", lpFilePart=0x0) returned 0x83 [0089.885] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7670 [0089.885] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0089.885] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0089.885] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0089.885] FindClose (in: hFindFile=0x5d7670 | out: hFindFile=0x5d7670) returned 1 [0089.885] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0089.885] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0089.885] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\messages.json", lpFilePart=0x0) returned 0x90 [0089.885] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0089.885] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x2158c48 | out: lpFileInformation=0x2158c48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x787314c2, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x78733bce, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x78bc05b2, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x116)) returned 1 [0089.885] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0089.885] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\messages.json", lpFilePart=0x0) returned 0x90 [0089.885] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0089.885] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0089.886] GetFileType (hFile=0x444) returned 0x1 [0089.886] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0089.886] GetFileType (hFile=0x444) returned 0x1 [0089.886] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x116 [0089.886] ReadFile (in: hFile=0x444, lpBuffer=0x2159138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x2159138*, lpNumberOfBytesRead=0x3be478*=0x116, lpOverlapped=0x0) returned 1 [0089.887] CloseHandle (hObject=0x444) returned 1 [0089.929] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\messages.json", lpFilePart=0x0) returned 0x90 [0089.930] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0089.930] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0089.932] GetFileType (hFile=0x444) returned 0x1 [0089.932] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0089.932] GetFileType (hFile=0x444) returned 0x1 [0089.932] WriteFile (in: hFile=0x444, lpBuffer=0x21d0750*, nNumberOfBytesToWrite=0x120, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x21d0750*, lpNumberOfBytesWritten=0x3be388*=0x120, lpOverlapped=0x0) returned 1 [0089.933] CloseHandle (hObject=0x444) returned 1 [0089.933] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\messages.json", lpFilePart=0x0) returned 0x90 [0089.934] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\messages.json.xuy", lpFilePart=0x0) returned 0x94 [0089.934] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0089.934] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x787314c2, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x78733bce, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2172cea3, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x120)) returned 1 [0089.934] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0089.934] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\messages.json.xuy")) returned 1 [0089.937] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0089.937] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg", lpFilePart=0x0) returned 0x82 [0089.937] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\", lpFilePart=0x0) returned 0x83 [0089.937] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d79d0 [0089.938] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0089.938] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0089.938] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0089.938] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0089.938] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0089.938] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0089.938] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0089.938] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg", lpFilePart=0x0) returned 0x82 [0089.938] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\", lpFilePart=0x0) returned 0x83 [0089.938] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7370 [0089.939] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0089.939] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0089.939] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0089.939] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0089.939] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0089.939] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0089.939] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\messages.json", lpFilePart=0x0) returned 0x90 [0089.939] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0089.939] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x21d4950 | out: lpFileInformation=0x21d4950*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7873ff1f, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7873ff1e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x78bc2cc8, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x13f)) returned 1 [0089.939] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0089.939] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\messages.json", lpFilePart=0x0) returned 0x90 [0089.939] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0089.939] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0089.940] GetFileType (hFile=0x444) returned 0x1 [0089.940] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0089.940] GetFileType (hFile=0x444) returned 0x1 [0089.940] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x13f [0089.940] ReadFile (in: hFile=0x444, lpBuffer=0x21d4e68, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x21d4e68*, lpNumberOfBytesRead=0x3be478*=0x13f, lpOverlapped=0x0) returned 1 [0089.946] CloseHandle (hObject=0x444) returned 1 [0089.979] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\messages.json", lpFilePart=0x0) returned 0x90 [0089.979] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0089.979] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0089.981] GetFileType (hFile=0x444) returned 0x1 [0089.981] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0089.981] GetFileType (hFile=0x444) returned 0x1 [0089.981] WriteFile (in: hFile=0x444, lpBuffer=0x224c518*, nNumberOfBytesToWrite=0x140, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x224c518*, lpNumberOfBytesWritten=0x3be388*=0x140, lpOverlapped=0x0) returned 1 [0089.982] CloseHandle (hObject=0x444) returned 1 [0089.982] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\messages.json", lpFilePart=0x0) returned 0x90 [0089.983] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\messages.json.xuy", lpFilePart=0x0) returned 0x94 [0089.983] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0089.983] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7873ff1f, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7873ff1e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x217c55a7, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x140)) returned 1 [0089.983] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0089.983] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\messages.json.xuy")) returned 1 [0089.984] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0089.984] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca", lpFilePart=0x0) returned 0x82 [0089.984] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\", lpFilePart=0x0) returned 0x83 [0089.984] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d8090 [0089.985] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0089.985] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0089.985] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0089.985] FindClose (in: hFindFile=0x5d8090 | out: hFindFile=0x5d8090) returned 1 [0089.985] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0089.985] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0089.985] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0089.985] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca", lpFilePart=0x0) returned 0x82 [0089.985] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\", lpFilePart=0x0) returned 0x83 [0089.985] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7550 [0089.985] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0089.985] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0089.985] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0089.986] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0089.986] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0089.986] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0089.986] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\messages.json", lpFilePart=0x0) returned 0x90 [0089.986] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0089.986] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x2250718 | out: lpFileInformation=0x2250718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78749b6a, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7874e97e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x78bc2cc8, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x109)) returned 1 [0089.986] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0089.986] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\messages.json", lpFilePart=0x0) returned 0x90 [0089.986] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0089.986] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0089.986] GetFileType (hFile=0x444) returned 0x1 [0089.986] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0089.986] GetFileType (hFile=0x444) returned 0x1 [0089.986] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x109 [0089.986] ReadFile (in: hFile=0x444, lpBuffer=0x2250c00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x2250c00*, lpNumberOfBytesRead=0x3be478*=0x109, lpOverlapped=0x0) returned 1 [0089.987] CloseHandle (hObject=0x444) returned 1 [0089.997] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\messages.json", lpFilePart=0x0) returned 0x90 [0089.998] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0089.999] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0090.000] GetFileType (hFile=0x444) returned 0x1 [0090.000] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0090.000] GetFileType (hFile=0x444) returned 0x1 [0090.000] WriteFile (in: hFile=0x444, lpBuffer=0x22c81c0*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x22c81c0*, lpNumberOfBytesWritten=0x3be388*=0x110, lpOverlapped=0x0) returned 1 [0090.001] CloseHandle (hObject=0x444) returned 1 [0090.001] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\messages.json", lpFilePart=0x0) returned 0x90 [0090.001] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\messages.json.xuy", lpFilePart=0x0) returned 0x94 [0090.001] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0090.001] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78749b6a, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7874e97e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x217eb8fb, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x110)) returned 1 [0090.001] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0090.001] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\messages.json.xuy")) returned 1 [0090.002] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0090.002] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs", lpFilePart=0x0) returned 0x82 [0090.002] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\", lpFilePart=0x0) returned 0x83 [0090.002] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7370 [0090.002] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0090.002] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0090.003] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0090.003] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0090.003] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0090.003] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0090.003] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0090.003] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs", lpFilePart=0x0) returned 0x82 [0090.003] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\", lpFilePart=0x0) returned 0x83 [0090.003] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7550 [0090.003] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0090.003] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0090.003] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0090.003] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0090.003] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0090.003] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0090.003] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\messages.json", lpFilePart=0x0) returned 0x90 [0090.003] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0090.003] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x22cc3c0 | out: lpFileInformation=0x22cc3c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7875acda, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7875d3de, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x78bc2cc8, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x103)) returned 1 [0090.003] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0090.003] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\messages.json", lpFilePart=0x0) returned 0x90 [0090.003] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0090.004] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0090.004] GetFileType (hFile=0x444) returned 0x1 [0090.004] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0090.004] GetFileType (hFile=0x444) returned 0x1 [0090.004] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x103 [0090.004] ReadFile (in: hFile=0x444, lpBuffer=0x22cc8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x22cc8a0*, lpNumberOfBytesRead=0x3be478*=0x103, lpOverlapped=0x0) returned 1 [0090.005] CloseHandle (hObject=0x444) returned 1 [0090.017] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\messages.json", lpFilePart=0x0) returned 0x90 [0090.017] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0090.017] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0090.018] GetFileType (hFile=0x444) returned 0x1 [0090.018] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0090.019] GetFileType (hFile=0x444) returned 0x1 [0090.019] WriteFile (in: hFile=0x444, lpBuffer=0x2343e68*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x2343e68*, lpNumberOfBytesWritten=0x3be388*=0x110, lpOverlapped=0x0) returned 1 [0090.019] CloseHandle (hObject=0x444) returned 1 [0090.019] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\messages.json", lpFilePart=0x0) returned 0x90 [0090.019] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\messages.json.xuy", lpFilePart=0x0) returned 0x94 [0090.019] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0090.020] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7875acda, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7875d3de, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x21811e5d, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x110)) returned 1 [0090.020] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0090.020] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\messages.json.xuy")) returned 1 [0090.020] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0090.021] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da", lpFilePart=0x0) returned 0x82 [0090.021] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\", lpFilePart=0x0) returned 0x83 [0090.021] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d79d0 [0090.022] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0090.022] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0090.023] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0090.023] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0090.023] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0090.023] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0090.023] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0090.023] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da", lpFilePart=0x0) returned 0x82 [0090.023] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\", lpFilePart=0x0) returned 0x83 [0090.023] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d81b0 [0090.023] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0090.023] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0090.023] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0090.023] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0090.023] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0090.023] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0090.023] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\messages.json", lpFilePart=0x0) returned 0x90 [0090.023] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0090.023] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x2348068 | out: lpFileInformation=0x2348068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7876be50, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7876be3e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x78bc2cc8, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xf3)) returned 1 [0090.023] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0090.024] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\messages.json", lpFilePart=0x0) returned 0x90 [0090.024] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0090.024] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0090.024] GetFileType (hFile=0x444) returned 0x1 [0090.024] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0090.024] GetFileType (hFile=0x444) returned 0x1 [0090.024] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xf3 [0090.024] ReadFile (in: hFile=0x444, lpBuffer=0x2348538, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x2348538*, lpNumberOfBytesRead=0x3be478*=0xf3, lpOverlapped=0x0) returned 1 [0090.025] CloseHandle (hObject=0x444) returned 1 [0090.068] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\messages.json", lpFilePart=0x0) returned 0x90 [0090.068] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0090.068] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0090.070] GetFileType (hFile=0x444) returned 0x1 [0090.070] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0090.070] GetFileType (hFile=0x444) returned 0x1 [0090.070] WriteFile (in: hFile=0x444, lpBuffer=0x21c3668*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x21c3668*, lpNumberOfBytesWritten=0x3be388*=0x100, lpOverlapped=0x0) returned 1 [0090.071] CloseHandle (hObject=0x444) returned 1 [0090.071] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\messages.json", lpFilePart=0x0) returned 0x90 [0090.071] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\messages.json.xuy", lpFilePart=0x0) returned 0x94 [0090.071] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0090.071] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7876be50, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7876be3e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2188453a, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x100)) returned 1 [0090.071] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0090.071] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\messages.json.xuy")) returned 1 [0090.072] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0090.072] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de", lpFilePart=0x0) returned 0x82 [0090.072] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\", lpFilePart=0x0) returned 0x83 [0090.072] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d78b0 [0090.072] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0090.072] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0090.073] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0090.073] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0090.073] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0090.073] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0090.073] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0090.073] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de", lpFilePart=0x0) returned 0x82 [0090.073] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\", lpFilePart=0x0) returned 0x83 [0090.073] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d73d0 [0090.073] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0090.073] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0090.073] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0090.073] FindClose (in: hFindFile=0x5d73d0 | out: hFindFile=0x5d73d0) returned 1 [0090.074] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0090.074] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0090.074] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\messages.json", lpFilePart=0x0) returned 0x90 [0090.074] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0090.074] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x21c7868 | out: lpFileInformation=0x21c7868*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7877f6dc, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7877f6be, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x78bc2cc8, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x100)) returned 1 [0090.074] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0090.074] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\messages.json", lpFilePart=0x0) returned 0x90 [0090.074] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0090.074] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0090.074] GetFileType (hFile=0x444) returned 0x1 [0090.074] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0090.074] GetFileType (hFile=0x444) returned 0x1 [0090.074] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x100 [0090.074] ReadFile (in: hFile=0x444, lpBuffer=0x21c7d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x21c7d40*, lpNumberOfBytesRead=0x3be478*=0x100, lpOverlapped=0x0) returned 1 [0090.075] CloseHandle (hObject=0x444) returned 1 [0090.086] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\messages.json", lpFilePart=0x0) returned 0x90 [0090.086] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0090.086] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0090.087] GetFileType (hFile=0x444) returned 0x1 [0090.087] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0090.087] GetFileType (hFile=0x444) returned 0x1 [0090.087] WriteFile (in: hFile=0x444, lpBuffer=0x223f308*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x223f308*, lpNumberOfBytesWritten=0x3be388*=0x110, lpOverlapped=0x0) returned 1 [0090.088] CloseHandle (hObject=0x444) returned 1 [0090.088] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\messages.json", lpFilePart=0x0) returned 0x90 [0090.088] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\messages.json.xuy", lpFilePart=0x0) returned 0x94 [0090.088] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0090.088] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7877f6dc, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7877f6be, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x218aa37a, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x110)) returned 1 [0090.088] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0090.088] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\messages.json.xuy")) returned 1 [0090.089] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0090.089] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el", lpFilePart=0x0) returned 0x82 [0090.089] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\", lpFilePart=0x0) returned 0x83 [0090.089] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7370 [0090.091] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0090.091] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0090.091] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0090.091] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0090.091] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0090.091] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0090.092] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0090.092] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el", lpFilePart=0x0) returned 0x82 [0090.092] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\", lpFilePart=0x0) returned 0x83 [0090.092] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7d30 [0090.092] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0090.092] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0090.092] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0090.092] FindClose (in: hFindFile=0x5d7d30 | out: hFindFile=0x5d7d30) returned 1 [0090.092] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0090.092] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0090.092] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\messages.json", lpFilePart=0x0) returned 0x90 [0090.092] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0090.092] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x2243508 | out: lpFileInformation=0x2243508*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78789317, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7878ba0e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x78bc53e4, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x149)) returned 1 [0090.093] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0090.093] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\messages.json", lpFilePart=0x0) returned 0x90 [0090.093] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0090.093] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0090.093] GetFileType (hFile=0x444) returned 0x1 [0090.093] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0090.093] GetFileType (hFile=0x444) returned 0x1 [0090.093] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x149 [0090.093] ReadFile (in: hFile=0x444, lpBuffer=0x2243a30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x2243a30*, lpNumberOfBytesRead=0x3be478*=0x149, lpOverlapped=0x0) returned 1 [0090.094] CloseHandle (hObject=0x444) returned 1 [0090.105] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\messages.json", lpFilePart=0x0) returned 0x90 [0090.105] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0090.105] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0090.107] GetFileType (hFile=0x444) returned 0x1 [0090.107] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0090.107] GetFileType (hFile=0x444) returned 0x1 [0090.107] WriteFile (in: hFile=0x444, lpBuffer=0x22bb130*, nNumberOfBytesToWrite=0x150, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x22bb130*, lpNumberOfBytesWritten=0x3be388*=0x150, lpOverlapped=0x0) returned 1 [0090.108] CloseHandle (hObject=0x444) returned 1 [0090.108] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\messages.json", lpFilePart=0x0) returned 0x90 [0090.108] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\messages.json.xuy", lpFilePart=0x0) returned 0x94 [0090.108] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0090.108] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78789317, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7878ba0e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x218f689d, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x150)) returned 1 [0090.108] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0090.108] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\messages.json.xuy")) returned 1 [0090.109] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0090.109] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB", lpFilePart=0x0) returned 0x85 [0090.109] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\", lpFilePart=0x0) returned 0x86 [0090.109] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7f10 [0090.109] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0090.109] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0090.110] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0090.110] FindClose (in: hFindFile=0x5d7f10 | out: hFindFile=0x5d7f10) returned 1 [0090.110] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0090.110] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0090.110] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0090.110] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB", lpFilePart=0x0) returned 0x85 [0090.110] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\", lpFilePart=0x0) returned 0x86 [0090.110] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7370 [0090.110] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0090.110] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0090.110] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0090.111] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0090.111] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0090.111] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0090.111] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\messages.json", lpFilePart=0x0) returned 0x93 [0090.111] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0090.111] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_gb\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x22bf390 | out: lpFileInformation=0x22bf390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78797d7e, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x78797d5e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x78bc53e4, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xf9)) returned 1 [0090.111] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0090.111] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\messages.json", lpFilePart=0x0) returned 0x93 [0090.111] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0090.111] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_gb\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0090.111] GetFileType (hFile=0x444) returned 0x1 [0090.111] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0090.111] GetFileType (hFile=0x444) returned 0x1 [0090.111] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xf9 [0090.111] ReadFile (in: hFile=0x444, lpBuffer=0x22bf868, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x22bf868*, lpNumberOfBytesRead=0x3be478*=0xf9, lpOverlapped=0x0) returned 1 [0090.113] CloseHandle (hObject=0x444) returned 1 [0090.125] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\messages.json", lpFilePart=0x0) returned 0x93 [0090.125] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0090.125] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_gb\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0090.126] GetFileType (hFile=0x444) returned 0x1 [0090.126] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0090.126] GetFileType (hFile=0x444) returned 0x1 [0090.126] WriteFile (in: hFile=0x444, lpBuffer=0x2336bf0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x2336bf0*, lpNumberOfBytesWritten=0x3be388*=0x100, lpOverlapped=0x0) returned 1 [0090.127] CloseHandle (hObject=0x444) returned 1 [0090.128] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\messages.json", lpFilePart=0x0) returned 0x93 [0090.128] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\messages.json.xuy", lpFilePart=0x0) returned 0x97 [0090.128] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0090.128] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_gb\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78797d7e, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x78797d5e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2191cc08, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x100)) returned 1 [0090.128] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0090.128] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_gb\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_gb\\messages.json.xuy")) returned 1 [0090.129] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0090.129] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US", lpFilePart=0x0) returned 0x85 [0090.129] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\", lpFilePart=0x0) returned 0x86 [0090.129] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d73d0 [0090.132] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0090.132] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0090.132] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0090.132] FindClose (in: hFindFile=0x5d73d0 | out: hFindFile=0x5d73d0) returned 1 [0090.132] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0090.132] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0090.132] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0090.132] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US", lpFilePart=0x0) returned 0x85 [0090.132] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\", lpFilePart=0x0) returned 0x86 [0090.132] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7c70 [0090.133] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0090.133] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0090.133] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0090.133] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0090.133] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0090.133] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0090.133] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\messages.json", lpFilePart=0x0) returned 0x93 [0090.133] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0090.133] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_us\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x233ae50 | out: lpFileInformation=0x233ae50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x787ab5fe, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x787ab5de, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x78bc53e4, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xf9)) returned 1 [0090.134] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0090.134] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\messages.json", lpFilePart=0x0) returned 0x93 [0090.134] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0090.134] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_us\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0090.134] GetFileType (hFile=0x444) returned 0x1 [0090.134] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0090.134] GetFileType (hFile=0x444) returned 0x1 [0090.134] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xf9 [0090.134] ReadFile (in: hFile=0x444, lpBuffer=0x233b328, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x233b328*, lpNumberOfBytesRead=0x3be478*=0xf9, lpOverlapped=0x0) returned 1 [0090.135] CloseHandle (hObject=0x444) returned 1 [0090.178] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\messages.json", lpFilePart=0x0) returned 0x93 [0090.178] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0090.178] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_us\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0090.179] GetFileType (hFile=0x444) returned 0x1 [0090.179] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0090.179] GetFileType (hFile=0x444) returned 0x1 [0090.179] WriteFile (in: hFile=0x444, lpBuffer=0x21b3038*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x21b3038*, lpNumberOfBytesWritten=0x3be388*=0x100, lpOverlapped=0x0) returned 1 [0090.180] CloseHandle (hObject=0x444) returned 1 [0090.180] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\messages.json", lpFilePart=0x0) returned 0x93 [0090.180] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\messages.json.xuy", lpFilePart=0x0) returned 0x97 [0090.180] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0090.180] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_us\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x787ab5fe, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x787ab5de, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2198f38d, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x100)) returned 1 [0090.180] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0090.180] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_us\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_us\\messages.json.xuy")) returned 1 [0090.181] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0090.181] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es", lpFilePart=0x0) returned 0x82 [0090.181] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\", lpFilePart=0x0) returned 0x83 [0090.181] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d78b0 [0090.182] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0090.182] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0090.182] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0090.182] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0090.182] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0090.182] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0090.182] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0090.182] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es", lpFilePart=0x0) returned 0x82 [0090.182] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\", lpFilePart=0x0) returned 0x83 [0090.182] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d78b0 [0090.183] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0090.183] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0090.183] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0090.183] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0090.183] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0090.183] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0090.183] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\messages.json", lpFilePart=0x0) returned 0x90 [0090.183] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0090.183] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x21b7238 | out: lpFileInformation=0x21b7238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x787b5245, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x787b792e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x78bc53e4, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x103)) returned 1 [0090.183] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0090.183] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\messages.json", lpFilePart=0x0) returned 0x90 [0090.183] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0090.184] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0090.184] GetFileType (hFile=0x444) returned 0x1 [0090.184] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0090.184] GetFileType (hFile=0x444) returned 0x1 [0090.184] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x103 [0090.184] ReadFile (in: hFile=0x444, lpBuffer=0x21b7718, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x21b7718*, lpNumberOfBytesRead=0x3be478*=0x103, lpOverlapped=0x0) returned 1 [0090.186] CloseHandle (hObject=0x444) returned 1 [0090.200] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\messages.json", lpFilePart=0x0) returned 0x90 [0090.200] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0090.200] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0090.202] GetFileType (hFile=0x444) returned 0x1 [0090.202] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0090.202] GetFileType (hFile=0x444) returned 0x1 [0090.202] WriteFile (in: hFile=0x444, lpBuffer=0x222ece0*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x222ece0*, lpNumberOfBytesWritten=0x3be388*=0x110, lpOverlapped=0x0) returned 1 [0090.203] CloseHandle (hObject=0x444) returned 1 [0090.203] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\messages.json", lpFilePart=0x0) returned 0x90 [0090.203] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\messages.json.xuy", lpFilePart=0x0) returned 0x94 [0090.203] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0090.203] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x787b5245, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x787b792e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x219db77b, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x110)) returned 1 [0090.204] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0090.204] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\messages.json.xuy")) returned 1 [0090.205] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0090.205] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419", lpFilePart=0x0) returned 0x86 [0090.205] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\", lpFilePart=0x0) returned 0x87 [0090.205] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7eb0 [0090.206] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0090.207] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0090.207] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0090.207] FindClose (in: hFindFile=0x5d7eb0 | out: hFindFile=0x5d7eb0) returned 1 [0090.207] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0090.207] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0090.207] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0090.207] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419", lpFilePart=0x0) returned 0x86 [0090.207] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\", lpFilePart=0x0) returned 0x87 [0090.207] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7e50 [0090.207] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0090.207] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0090.208] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0090.208] FindClose (in: hFindFile=0x5d7e50 | out: hFindFile=0x5d7e50) returned 1 [0090.208] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0090.208] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0090.208] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\messages.json", lpFilePart=0x0) returned 0x94 [0090.208] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0090.208] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x2232fd0 | out: lpFileInformation=0x2232fd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x787bee87, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x787c3c7e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x78bc7afa, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x103)) returned 1 [0090.208] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0090.208] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\messages.json", lpFilePart=0x0) returned 0x94 [0090.208] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0090.208] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0090.208] GetFileType (hFile=0x444) returned 0x1 [0090.208] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0090.208] GetFileType (hFile=0x444) returned 0x1 [0090.208] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x103 [0090.208] ReadFile (in: hFile=0x444, lpBuffer=0x22334c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x22334c0*, lpNumberOfBytesRead=0x3be478*=0x103, lpOverlapped=0x0) returned 1 [0090.209] CloseHandle (hObject=0x444) returned 1 [0090.220] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\messages.json", lpFilePart=0x0) returned 0x94 [0090.220] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0090.220] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0090.222] GetFileType (hFile=0x444) returned 0x1 [0090.222] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0090.222] GetFileType (hFile=0x444) returned 0x1 [0090.222] WriteFile (in: hFile=0x444, lpBuffer=0x22aaa90*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x22aaa90*, lpNumberOfBytesWritten=0x3be388*=0x110, lpOverlapped=0x0) returned 1 [0090.223] CloseHandle (hObject=0x444) returned 1 [0090.223] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\messages.json", lpFilePart=0x0) returned 0x94 [0090.223] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\messages.json.xuy", lpFilePart=0x0) returned 0x98 [0090.223] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0090.223] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x787bee87, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x787c3c7e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x21a01a45, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x110)) returned 1 [0090.223] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0090.223] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\messages.json.xuy")) returned 1 [0090.224] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0090.224] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et", lpFilePart=0x0) returned 0x82 [0090.224] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\", lpFilePart=0x0) returned 0x83 [0090.224] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7a30 [0090.225] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0090.225] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0090.225] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0090.225] FindClose (in: hFindFile=0x5d7a30 | out: hFindFile=0x5d7a30) returned 1 [0090.225] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0090.225] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0090.225] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0090.225] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et", lpFilePart=0x0) returned 0x82 [0090.225] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\", lpFilePart=0x0) returned 0x83 [0090.225] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7fd0 [0090.225] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0090.225] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0090.226] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0090.226] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0090.226] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0090.226] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0090.226] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\messages.json", lpFilePart=0x0) returned 0x90 [0090.226] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0090.226] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x22aeca8 | out: lpFileInformation=0x22aeca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x787d2713, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x787d26de, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x78bc7afa, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xfb)) returned 1 [0090.226] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0090.226] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\messages.json", lpFilePart=0x0) returned 0x90 [0090.226] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0090.226] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0090.226] GetFileType (hFile=0x444) returned 0x1 [0090.226] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0090.226] GetFileType (hFile=0x444) returned 0x1 [0090.226] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xfb [0090.226] ReadFile (in: hFile=0x444, lpBuffer=0x22af180, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x22af180*, lpNumberOfBytesRead=0x3be478*=0xfb, lpOverlapped=0x0) returned 1 [0090.227] CloseHandle (hObject=0x444) returned 1 [0090.238] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\messages.json", lpFilePart=0x0) returned 0x90 [0090.238] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0090.238] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0090.240] GetFileType (hFile=0x444) returned 0x1 [0090.240] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0090.240] GetFileType (hFile=0x444) returned 0x1 [0090.240] WriteFile (in: hFile=0x444, lpBuffer=0x2326508*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x2326508*, lpNumberOfBytesWritten=0x3be388*=0x100, lpOverlapped=0x0) returned 1 [0090.240] CloseHandle (hObject=0x444) returned 1 [0090.241] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\messages.json", lpFilePart=0x0) returned 0x90 [0090.241] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\messages.json.xuy", lpFilePart=0x0) returned 0x94 [0090.241] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0090.241] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x787d2713, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x787d26de, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x21a27c14, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x100)) returned 1 [0090.241] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0090.241] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\messages.json.xuy")) returned 1 [0090.242] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0090.242] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu", lpFilePart=0x0) returned 0x82 [0090.242] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\", lpFilePart=0x0) returned 0x83 [0090.242] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d78b0 [0090.244] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0090.244] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0090.244] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0090.244] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0090.244] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0090.244] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0090.244] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0090.244] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu", lpFilePart=0x0) returned 0x82 [0090.244] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\", lpFilePart=0x0) returned 0x83 [0090.244] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d81b0 [0090.244] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0090.244] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0090.245] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0090.245] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0090.245] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0090.245] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0090.245] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\messages.json", lpFilePart=0x0) returned 0x90 [0090.245] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0090.245] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x232a708 | out: lpFileInformation=0x232a708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x787dea6a, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x787dea2e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0xd3d59700, ftLastWriteTime.dwHighDateTime=0x1d10aaf, nFileSizeHigh=0x0, nFileSizeLow=0xf3)) returned 1 [0090.245] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0090.245] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\messages.json", lpFilePart=0x0) returned 0x90 [0090.245] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0090.245] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0090.245] GetFileType (hFile=0x444) returned 0x1 [0090.245] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0090.245] GetFileType (hFile=0x444) returned 0x1 [0090.245] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xf3 [0090.245] ReadFile (in: hFile=0x444, lpBuffer=0x232abd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x232abd8*, lpNumberOfBytesRead=0x3be478*=0xf3, lpOverlapped=0x0) returned 1 [0090.246] CloseHandle (hObject=0x444) returned 1 [0090.294] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\messages.json", lpFilePart=0x0) returned 0x90 [0090.294] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0090.294] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0090.296] GetFileType (hFile=0x444) returned 0x1 [0090.296] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0090.296] GetFileType (hFile=0x444) returned 0x1 [0090.296] WriteFile (in: hFile=0x444, lpBuffer=0x21a28f0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x21a28f0*, lpNumberOfBytesWritten=0x3be388*=0x100, lpOverlapped=0x0) returned 1 [0090.296] CloseHandle (hObject=0x444) returned 1 [0090.297] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\messages.json", lpFilePart=0x0) returned 0x90 [0090.297] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\messages.json.xuy", lpFilePart=0x0) returned 0x94 [0090.297] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0090.297] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x787dea6a, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x787dea2e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x21ac04a1, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x100)) returned 1 [0090.297] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0090.297] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\messages.json.xuy")) returned 1 [0090.298] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0090.298] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi", lpFilePart=0x0) returned 0x82 [0090.298] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\", lpFilePart=0x0) returned 0x83 [0090.298] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7670 [0090.298] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0090.298] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0090.298] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0090.298] FindClose (in: hFindFile=0x5d7670 | out: hFindFile=0x5d7670) returned 1 [0090.299] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0090.299] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0090.299] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0090.299] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi", lpFilePart=0x0) returned 0x82 [0090.299] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\", lpFilePart=0x0) returned 0x83 [0090.299] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7fd0 [0090.299] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0090.299] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0090.299] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0090.299] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0090.299] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0090.299] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0090.299] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\messages.json", lpFilePart=0x0) returned 0x90 [0090.299] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0090.299] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x21a6af0 | out: lpFileInformation=0x21a6af0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x787e86a2, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x787ead7e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x78bc7afa, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x101)) returned 1 [0090.300] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0090.300] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\messages.json", lpFilePart=0x0) returned 0x90 [0090.300] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0090.300] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0090.300] GetFileType (hFile=0x444) returned 0x1 [0090.300] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0090.300] GetFileType (hFile=0x444) returned 0x1 [0090.300] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x101 [0090.300] ReadFile (in: hFile=0x444, lpBuffer=0x21a6fd0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x21a6fd0*, lpNumberOfBytesRead=0x3be478*=0x101, lpOverlapped=0x0) returned 1 [0090.301] CloseHandle (hObject=0x444) returned 1 [0090.312] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\messages.json", lpFilePart=0x0) returned 0x90 [0090.312] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0090.312] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0090.313] GetFileType (hFile=0x444) returned 0x1 [0090.313] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0090.313] GetFileType (hFile=0x444) returned 0x1 [0090.313] WriteFile (in: hFile=0x444, lpBuffer=0x221e598*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x221e598*, lpNumberOfBytesWritten=0x3be388*=0x110, lpOverlapped=0x0) returned 1 [0090.314] CloseHandle (hObject=0x444) returned 1 [0090.314] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\messages.json", lpFilePart=0x0) returned 0x90 [0090.314] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\messages.json.xuy", lpFilePart=0x0) returned 0x94 [0090.314] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0090.314] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x787e86a2, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x787ead7e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x21ae6aba, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x110)) returned 1 [0090.315] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0090.315] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\messages.json.xuy")) returned 1 [0090.315] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0090.315] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil", lpFilePart=0x0) returned 0x83 [0090.315] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\", lpFilePart=0x0) returned 0x84 [0090.315] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d81b0 [0090.318] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0090.318] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0090.318] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0090.318] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0090.318] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0090.318] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0090.318] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0090.318] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil", lpFilePart=0x0) returned 0x83 [0090.318] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\", lpFilePart=0x0) returned 0x84 [0090.319] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7d30 [0090.319] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0090.319] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0090.319] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0090.319] FindClose (in: hFindFile=0x5d7d30 | out: hFindFile=0x5d7d30) returned 1 [0090.319] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0090.319] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0090.319] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\messages.json", lpFilePart=0x0) returned 0x91 [0090.319] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0090.319] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x22227b8 | out: lpFileInformation=0x22227b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x787f49f6, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x787f70ce, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x78bc7afa, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x104)) returned 1 [0090.320] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0090.320] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\messages.json", lpFilePart=0x0) returned 0x91 [0090.320] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0090.320] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0090.320] GetFileType (hFile=0x444) returned 0x1 [0090.320] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0090.320] GetFileType (hFile=0x444) returned 0x1 [0090.320] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x104 [0090.320] ReadFile (in: hFile=0x444, lpBuffer=0x2222c98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x2222c98*, lpNumberOfBytesRead=0x3be478*=0x104, lpOverlapped=0x0) returned 1 [0090.321] CloseHandle (hObject=0x444) returned 1 [0090.331] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\messages.json", lpFilePart=0x0) returned 0x91 [0090.331] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0090.331] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0090.333] GetFileType (hFile=0x444) returned 0x1 [0090.333] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0090.333] GetFileType (hFile=0x444) returned 0x1 [0090.333] WriteFile (in: hFile=0x444, lpBuffer=0x229a260*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x229a260*, lpNumberOfBytesWritten=0x3be388*=0x110, lpOverlapped=0x0) returned 1 [0090.334] CloseHandle (hObject=0x444) returned 1 [0090.334] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\messages.json", lpFilePart=0x0) returned 0x91 [0090.334] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\messages.json.xuy", lpFilePart=0x0) returned 0x95 [0090.334] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0090.334] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x787f49f6, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x787f70ce, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x21b0c97c, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x110)) returned 1 [0090.334] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0090.334] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\messages.json.xuy")) returned 1 [0090.338] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0090.338] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr", lpFilePart=0x0) returned 0x82 [0090.338] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\", lpFilePart=0x0) returned 0x83 [0090.338] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7c70 [0090.338] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0090.338] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0090.338] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0090.338] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0090.338] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0090.338] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0090.339] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0090.339] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr", lpFilePart=0x0) returned 0x82 [0090.339] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\", lpFilePart=0x0) returned 0x83 [0090.339] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d81b0 [0090.339] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0090.339] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0090.339] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0090.339] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0090.339] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0090.339] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0090.339] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\messages.json", lpFilePart=0x0) returned 0x90 [0090.339] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0090.340] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x229e460 | out: lpFileInformation=0x229e460*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78805b69, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x78805b2e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x78bc7afa, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xfc)) returned 1 [0090.340] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0090.340] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\messages.json", lpFilePart=0x0) returned 0x90 [0090.340] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0090.340] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0090.340] GetFileType (hFile=0x444) returned 0x1 [0090.340] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0090.340] GetFileType (hFile=0x444) returned 0x1 [0090.340] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xfc [0090.340] ReadFile (in: hFile=0x444, lpBuffer=0x229e938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x229e938*, lpNumberOfBytesRead=0x3be478*=0xfc, lpOverlapped=0x0) returned 1 [0090.341] CloseHandle (hObject=0x444) returned 1 [0090.351] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\messages.json", lpFilePart=0x0) returned 0x90 [0090.352] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0090.352] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0090.353] GetFileType (hFile=0x444) returned 0x1 [0090.353] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0090.353] GetFileType (hFile=0x444) returned 0x1 [0090.353] WriteFile (in: hFile=0x444, lpBuffer=0x2315cc0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x2315cc0*, lpNumberOfBytesWritten=0x3be388*=0x100, lpOverlapped=0x0) returned 1 [0090.354] CloseHandle (hObject=0x444) returned 1 [0090.354] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\messages.json", lpFilePart=0x0) returned 0x90 [0090.354] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\messages.json.xuy", lpFilePart=0x0) returned 0x94 [0090.354] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0090.354] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78805b69, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x78805b2e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x21b32ba7, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x100)) returned 1 [0090.354] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0090.354] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\messages.json.xuy")) returned 1 [0090.355] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0090.355] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he", lpFilePart=0x0) returned 0x82 [0090.355] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\", lpFilePart=0x0) returned 0x83 [0090.355] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7fd0 [0090.357] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0090.357] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0090.358] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0090.358] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0090.358] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0090.358] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0090.358] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0090.358] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he", lpFilePart=0x0) returned 0x82 [0090.358] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\", lpFilePart=0x0) returned 0x83 [0090.358] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7670 [0090.358] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0090.358] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0090.359] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0090.359] FindClose (in: hFindFile=0x5d7670 | out: hFindFile=0x5d7670) returned 1 [0090.359] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0090.359] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0090.359] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\messages.json", lpFilePart=0x0) returned 0x90 [0090.359] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0090.359] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x2319ec0 | out: lpFileInformation=0x2319ec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7880f7a8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x78811e7e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x78bca212, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x116)) returned 1 [0090.360] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0090.360] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\messages.json", lpFilePart=0x0) returned 0x90 [0090.360] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0090.360] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0090.360] GetFileType (hFile=0x444) returned 0x1 [0090.360] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0090.360] GetFileType (hFile=0x444) returned 0x1 [0090.360] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x116 [0090.360] ReadFile (in: hFile=0x444, lpBuffer=0x231a3b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x231a3b0*, lpNumberOfBytesRead=0x3be478*=0x116, lpOverlapped=0x0) returned 1 [0090.361] CloseHandle (hObject=0x444) returned 1 [0090.401] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\messages.json", lpFilePart=0x0) returned 0x90 [0090.401] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0090.401] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0090.402] GetFileType (hFile=0x444) returned 0x1 [0090.402] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0090.402] GetFileType (hFile=0x444) returned 0x1 [0090.402] WriteFile (in: hFile=0x444, lpBuffer=0x2192368*, nNumberOfBytesToWrite=0x120, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x2192368*, lpNumberOfBytesWritten=0x3be388*=0x120, lpOverlapped=0x0) returned 1 [0090.403] CloseHandle (hObject=0x444) returned 1 [0090.404] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\messages.json", lpFilePart=0x0) returned 0x90 [0090.404] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\messages.json.xuy", lpFilePart=0x0) returned 0x94 [0090.404] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0090.404] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7880f7a8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x78811e7e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x21bcb520, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x120)) returned 1 [0090.405] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0090.405] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\messages.json.xuy")) returned 1 [0090.406] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0090.406] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi", lpFilePart=0x0) returned 0x82 [0090.406] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\", lpFilePart=0x0) returned 0x83 [0090.406] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d78b0 [0090.406] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0090.406] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0090.406] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0090.406] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0090.406] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0090.407] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0090.407] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0090.407] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi", lpFilePart=0x0) returned 0x82 [0090.407] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\", lpFilePart=0x0) returned 0x83 [0090.407] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7a30 [0090.407] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0090.407] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0090.407] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0090.407] FindClose (in: hFindFile=0x5d7a30 | out: hFindFile=0x5d7a30) returned 1 [0090.407] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0090.407] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0090.407] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\messages.json", lpFilePart=0x0) returned 0x90 [0090.407] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0090.408] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x2196568 | out: lpFileInformation=0x2196568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7881e20e, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x788208de, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x78bca212, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x159)) returned 1 [0090.408] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0090.408] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\messages.json", lpFilePart=0x0) returned 0x90 [0090.408] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0090.408] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0090.408] GetFileType (hFile=0x444) returned 0x1 [0090.408] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0090.408] GetFileType (hFile=0x444) returned 0x1 [0090.408] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x159 [0090.408] ReadFile (in: hFile=0x444, lpBuffer=0x2196aa0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x2196aa0*, lpNumberOfBytesRead=0x3be478*=0x159, lpOverlapped=0x0) returned 1 [0090.409] CloseHandle (hObject=0x444) returned 1 [0090.419] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\messages.json", lpFilePart=0x0) returned 0x90 [0090.419] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0090.419] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0090.421] GetFileType (hFile=0x444) returned 0x1 [0090.421] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0090.421] GetFileType (hFile=0x444) returned 0x1 [0090.421] WriteFile (in: hFile=0x444, lpBuffer=0x220e1f0*, nNumberOfBytesToWrite=0x160, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x220e1f0*, lpNumberOfBytesWritten=0x3be388*=0x160, lpOverlapped=0x0) returned 1 [0090.422] CloseHandle (hObject=0x444) returned 1 [0090.422] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\messages.json", lpFilePart=0x0) returned 0x90 [0090.422] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\messages.json.xuy", lpFilePart=0x0) returned 0x94 [0090.422] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0090.422] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7881e20e, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x788208de, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x21bf180e, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x160)) returned 1 [0090.422] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0090.422] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\messages.json.xuy")) returned 1 [0090.423] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0090.423] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr", lpFilePart=0x0) returned 0x82 [0090.423] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\", lpFilePart=0x0) returned 0x83 [0090.423] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7550 [0090.430] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0090.430] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0090.430] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0090.430] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0090.430] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0090.430] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0090.430] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0090.430] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr", lpFilePart=0x0) returned 0x82 [0090.430] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\", lpFilePart=0x0) returned 0x83 [0090.430] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7d90 [0090.431] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0090.431] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0090.431] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0090.431] FindClose (in: hFindFile=0x5d7d90 | out: hFindFile=0x5d7d90) returned 1 [0090.431] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0090.431] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0090.431] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\messages.json", lpFilePart=0x0) returned 0x90 [0090.431] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0090.431] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x22123f0 | out: lpFileInformation=0x22123f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7882a562, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7882cc2e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x78bca212, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x107)) returned 1 [0090.431] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0090.432] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\messages.json", lpFilePart=0x0) returned 0x90 [0090.432] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0090.432] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0090.432] GetFileType (hFile=0x444) returned 0x1 [0090.432] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0090.432] GetFileType (hFile=0x444) returned 0x1 [0090.432] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x107 [0090.432] ReadFile (in: hFile=0x444, lpBuffer=0x22128d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x22128d0*, lpNumberOfBytesRead=0x3be478*=0x107, lpOverlapped=0x0) returned 1 [0090.433] CloseHandle (hObject=0x444) returned 1 [0090.444] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\messages.json", lpFilePart=0x0) returned 0x90 [0090.444] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0090.444] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0090.446] GetFileType (hFile=0x444) returned 0x1 [0090.446] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0090.446] GetFileType (hFile=0x444) returned 0x1 [0090.446] WriteFile (in: hFile=0x444, lpBuffer=0x2289e98*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x2289e98*, lpNumberOfBytesWritten=0x3be388*=0x110, lpOverlapped=0x0) returned 1 [0090.446] CloseHandle (hObject=0x444) returned 1 [0090.447] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\messages.json", lpFilePart=0x0) returned 0x90 [0090.447] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\messages.json.xuy", lpFilePart=0x0) returned 0x94 [0090.447] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0090.447] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7882a562, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7882cc2e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x21c17cdf, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x110)) returned 1 [0090.447] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0090.447] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\messages.json.xuy")) returned 1 [0090.448] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0090.448] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu", lpFilePart=0x0) returned 0x82 [0090.448] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\", lpFilePart=0x0) returned 0x83 [0090.448] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7df0 [0090.448] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0090.448] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0090.449] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0090.449] FindClose (in: hFindFile=0x5d7df0 | out: hFindFile=0x5d7df0) returned 1 [0090.449] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0090.449] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0090.449] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0090.449] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu", lpFilePart=0x0) returned 0x82 [0090.449] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\", lpFilePart=0x0) returned 0x83 [0090.449] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d79d0 [0090.449] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0090.449] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0090.449] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0090.449] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0090.450] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0090.450] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0090.450] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\messages.json", lpFilePart=0x0) returned 0x90 [0090.450] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0090.450] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x228e098 | out: lpFileInformation=0x228e098*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78838fb3, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7883dd9e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x78bca212, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x108)) returned 1 [0090.450] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0090.450] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\messages.json", lpFilePart=0x0) returned 0x90 [0090.450] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0090.450] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0090.450] GetFileType (hFile=0x444) returned 0x1 [0090.450] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0090.450] GetFileType (hFile=0x444) returned 0x1 [0090.450] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x108 [0090.450] ReadFile (in: hFile=0x444, lpBuffer=0x228e578, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x228e578*, lpNumberOfBytesRead=0x3be478*=0x108, lpOverlapped=0x0) returned 1 [0090.453] CloseHandle (hObject=0x444) returned 1 [0090.463] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\messages.json", lpFilePart=0x0) returned 0x90 [0090.463] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0090.463] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0090.464] GetFileType (hFile=0x444) returned 0x1 [0090.465] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0090.465] GetFileType (hFile=0x444) returned 0x1 [0090.465] WriteFile (in: hFile=0x444, lpBuffer=0x2305b38*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x2305b38*, lpNumberOfBytesWritten=0x3be388*=0x110, lpOverlapped=0x0) returned 1 [0090.465] CloseHandle (hObject=0x444) returned 1 [0090.466] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\messages.json", lpFilePart=0x0) returned 0x90 [0090.466] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\messages.json.xuy", lpFilePart=0x0) returned 0x94 [0090.466] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0090.466] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78838fb3, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7883dd9e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x21c3dc92, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x110)) returned 1 [0090.466] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0090.466] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\messages.json.xuy")) returned 1 [0090.468] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0090.468] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id", lpFilePart=0x0) returned 0x82 [0090.468] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\", lpFilePart=0x0) returned 0x83 [0090.468] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d8090 [0090.470] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0090.471] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0090.471] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0090.471] FindClose (in: hFindFile=0x5d8090 | out: hFindFile=0x5d8090) returned 1 [0090.471] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0090.471] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0090.471] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0090.471] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id", lpFilePart=0x0) returned 0x82 [0090.471] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\", lpFilePart=0x0) returned 0x83 [0090.471] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7e50 [0090.471] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0090.471] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0090.472] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0090.472] FindClose (in: hFindFile=0x5d7e50 | out: hFindFile=0x5d7e50) returned 1 [0090.472] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0090.472] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0090.472] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\messages.json", lpFilePart=0x0) returned 0x90 [0090.472] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0090.472] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x2309d38 | out: lpFileInformation=0x2309d38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7884a13f, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x78869cbe, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x78bca212, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x105)) returned 1 [0090.472] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0090.472] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\messages.json", lpFilePart=0x0) returned 0x90 [0090.472] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0090.472] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0090.472] GetFileType (hFile=0x444) returned 0x1 [0090.472] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0090.473] GetFileType (hFile=0x444) returned 0x1 [0090.473] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x105 [0090.473] ReadFile (in: hFile=0x444, lpBuffer=0x230a218, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x230a218*, lpNumberOfBytesRead=0x3be478*=0x105, lpOverlapped=0x0) returned 1 [0090.473] CloseHandle (hObject=0x444) returned 1 [0090.518] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\messages.json", lpFilePart=0x0) returned 0x90 [0090.518] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0090.518] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0090.520] GetFileType (hFile=0x444) returned 0x1 [0090.520] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0090.520] GetFileType (hFile=0x444) returned 0x1 [0090.520] WriteFile (in: hFile=0x444, lpBuffer=0x2182298*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x2182298*, lpNumberOfBytesWritten=0x3be388*=0x110, lpOverlapped=0x0) returned 1 [0090.521] CloseHandle (hObject=0x444) returned 1 [0090.521] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\messages.json", lpFilePart=0x0) returned 0x90 [0090.522] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\messages.json.xuy", lpFilePart=0x0) returned 0x94 [0090.522] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0090.522] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7884a13f, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x78869cbe, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x21cd66cd, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x110)) returned 1 [0090.522] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0090.522] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\messages.json.xuy")) returned 1 [0090.523] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0090.523] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it", lpFilePart=0x0) returned 0x82 [0090.523] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\", lpFilePart=0x0) returned 0x83 [0090.523] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d78b0 [0090.524] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0090.524] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0090.524] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0090.524] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0090.524] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0090.524] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0090.524] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0090.524] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it", lpFilePart=0x0) returned 0x82 [0090.524] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\", lpFilePart=0x0) returned 0x83 [0090.524] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7d30 [0090.525] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0090.525] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0090.525] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0090.525] FindClose (in: hFindFile=0x5d7d30 | out: hFindFile=0x5d7d30) returned 1 [0090.525] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0090.525] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0090.525] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\messages.json", lpFilePart=0x0) returned 0x90 [0090.525] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0090.525] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x2186498 | out: lpFileInformation=0x2186498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x788787ce, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7887871e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x78bcc90f, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x102)) returned 1 [0090.525] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0090.525] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\messages.json", lpFilePart=0x0) returned 0x90 [0090.525] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0090.526] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0090.526] GetFileType (hFile=0x444) returned 0x1 [0090.526] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0090.526] GetFileType (hFile=0x444) returned 0x1 [0090.526] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x102 [0090.526] ReadFile (in: hFile=0x444, lpBuffer=0x2186978, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x2186978*, lpNumberOfBytesRead=0x3be478*=0x102, lpOverlapped=0x0) returned 1 [0090.527] CloseHandle (hObject=0x444) returned 1 [0090.538] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\messages.json", lpFilePart=0x0) returned 0x90 [0090.538] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0090.538] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0090.540] GetFileType (hFile=0x444) returned 0x1 [0090.540] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0090.540] GetFileType (hFile=0x444) returned 0x1 [0090.540] WriteFile (in: hFile=0x444, lpBuffer=0x21fdf40*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x21fdf40*, lpNumberOfBytesWritten=0x3be388*=0x110, lpOverlapped=0x0) returned 1 [0090.541] CloseHandle (hObject=0x444) returned 1 [0090.541] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\messages.json", lpFilePart=0x0) returned 0x90 [0090.541] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\messages.json.xuy", lpFilePart=0x0) returned 0x94 [0090.541] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0090.541] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x788787ce, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7887871e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x21cfc9ea, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x110)) returned 1 [0090.541] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0090.542] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\messages.json.xuy")) returned 1 [0090.543] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0090.543] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja", lpFilePart=0x0) returned 0x82 [0090.543] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\", lpFilePart=0x0) returned 0x83 [0090.543] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7fd0 [0090.545] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0090.545] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0090.545] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0090.545] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0090.546] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0090.546] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0090.546] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0090.546] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja", lpFilePart=0x0) returned 0x82 [0090.546] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\", lpFilePart=0x0) returned 0x83 [0090.546] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d78b0 [0090.546] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0090.546] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0090.546] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0090.546] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0090.547] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0090.547] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0090.547] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\messages.json", lpFilePart=0x0) returned 0x90 [0090.547] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0090.547] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x2202140 | out: lpFileInformation=0x2202140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x788823b8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7888235e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x78bcc90f, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x125)) returned 1 [0090.547] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0090.547] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\messages.json", lpFilePart=0x0) returned 0x90 [0090.547] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0090.547] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0090.547] GetFileType (hFile=0x444) returned 0x1 [0090.547] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0090.547] GetFileType (hFile=0x444) returned 0x1 [0090.547] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x125 [0090.548] ReadFile (in: hFile=0x444, lpBuffer=0x2202640, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x2202640*, lpNumberOfBytesRead=0x3be478*=0x125, lpOverlapped=0x0) returned 1 [0090.549] CloseHandle (hObject=0x444) returned 1 [0090.561] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\messages.json", lpFilePart=0x0) returned 0x90 [0090.561] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0090.562] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0090.563] GetFileType (hFile=0x444) returned 0x1 [0090.563] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0090.563] GetFileType (hFile=0x444) returned 0x1 [0090.563] WriteFile (in: hFile=0x444, lpBuffer=0x2279ca8*, nNumberOfBytesToWrite=0x130, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x2279ca8*, lpNumberOfBytesWritten=0x3be388*=0x130, lpOverlapped=0x0) returned 1 [0090.564] CloseHandle (hObject=0x444) returned 1 [0090.564] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\messages.json", lpFilePart=0x0) returned 0x90 [0090.564] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\messages.json.xuy", lpFilePart=0x0) returned 0x94 [0090.564] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0090.564] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x788823b8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7888235e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x21d48dab, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x130)) returned 1 [0090.564] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0090.564] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\messages.json.xuy")) returned 1 [0090.565] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0090.565] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko", lpFilePart=0x0) returned 0x82 [0090.565] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\", lpFilePart=0x0) returned 0x83 [0090.566] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d75b0 [0090.566] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0090.566] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0090.566] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0090.566] FindClose (in: hFindFile=0x5d75b0 | out: hFindFile=0x5d75b0) returned 1 [0090.566] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0090.566] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0090.567] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0090.567] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko", lpFilePart=0x0) returned 0x82 [0090.567] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\", lpFilePart=0x0) returned 0x83 [0090.567] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7550 [0090.567] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0090.567] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0090.567] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0090.567] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0090.568] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0090.568] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0090.568] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\messages.json", lpFilePart=0x0) returned 0x90 [0090.568] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0090.568] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x227dea8 | out: lpFileInformation=0x227dea8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7889352b, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x788934ce, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x78bcc90f, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x119)) returned 1 [0090.568] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0090.568] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\messages.json", lpFilePart=0x0) returned 0x90 [0090.568] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0090.568] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0090.568] GetFileType (hFile=0x444) returned 0x1 [0090.568] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0090.568] GetFileType (hFile=0x444) returned 0x1 [0090.568] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x119 [0090.568] ReadFile (in: hFile=0x444, lpBuffer=0x227e3a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x227e3a0*, lpNumberOfBytesRead=0x3be478*=0x119, lpOverlapped=0x0) returned 1 [0090.570] CloseHandle (hObject=0x444) returned 1 [0090.588] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\messages.json", lpFilePart=0x0) returned 0x90 [0090.588] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0090.588] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0090.589] GetFileType (hFile=0x444) returned 0x1 [0090.590] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0090.590] GetFileType (hFile=0x444) returned 0x1 [0090.590] WriteFile (in: hFile=0x444, lpBuffer=0x22f59b0*, nNumberOfBytesToWrite=0x120, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x22f59b0*, lpNumberOfBytesWritten=0x3be388*=0x120, lpOverlapped=0x0) returned 1 [0090.590] CloseHandle (hObject=0x444) returned 1 [0090.591] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\messages.json", lpFilePart=0x0) returned 0x90 [0090.591] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\messages.json.xuy", lpFilePart=0x0) returned 0x94 [0090.591] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0090.591] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7889352b, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x788934ce, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x21d6f0f9, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x120)) returned 1 [0090.591] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0090.591] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\messages.json.xuy")) returned 1 [0090.594] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0090.594] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt", lpFilePart=0x0) returned 0x82 [0090.594] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\", lpFilePart=0x0) returned 0x83 [0090.594] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7d30 [0090.595] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0090.595] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0090.596] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0090.596] FindClose (in: hFindFile=0x5d7d30 | out: hFindFile=0x5d7d30) returned 1 [0090.596] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0090.596] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0090.596] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0090.596] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt", lpFilePart=0x0) returned 0x82 [0090.596] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\", lpFilePart=0x0) returned 0x83 [0090.596] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7370 [0090.596] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0090.596] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0090.596] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0090.596] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0090.596] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0090.597] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0090.597] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\messages.json", lpFilePart=0x0) returned 0x90 [0090.597] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0090.597] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x22f9bb0 | out: lpFileInformation=0x22f9bb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7889d167, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7889d10e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x78bcc90f, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x11d)) returned 1 [0090.597] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0090.597] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\messages.json", lpFilePart=0x0) returned 0x90 [0090.597] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0090.597] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0090.597] GetFileType (hFile=0x444) returned 0x1 [0090.597] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0090.597] GetFileType (hFile=0x444) returned 0x1 [0090.597] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x11d [0090.597] ReadFile (in: hFile=0x444, lpBuffer=0x22fa0a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x22fa0a8*, lpNumberOfBytesRead=0x3be478*=0x11d, lpOverlapped=0x0) returned 1 [0090.598] CloseHandle (hObject=0x444) returned 1 [0090.640] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\messages.json", lpFilePart=0x0) returned 0x90 [0090.640] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0090.640] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0090.642] GetFileType (hFile=0x444) returned 0x1 [0090.642] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0090.642] GetFileType (hFile=0x444) returned 0x1 [0090.642] WriteFile (in: hFile=0x444, lpBuffer=0x21721a0*, nNumberOfBytesToWrite=0x120, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x21721a0*, lpNumberOfBytesWritten=0x3be388*=0x120, lpOverlapped=0x0) returned 1 [0090.643] CloseHandle (hObject=0x444) returned 1 [0090.643] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\messages.json", lpFilePart=0x0) returned 0x90 [0090.643] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\messages.json.xuy", lpFilePart=0x0) returned 0x94 [0090.643] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0090.643] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7889d167, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7889d10e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x21e07892, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x120)) returned 1 [0090.643] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0090.643] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\messages.json.xuy")) returned 1 [0090.644] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0090.644] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv", lpFilePart=0x0) returned 0x82 [0090.644] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\", lpFilePart=0x0) returned 0x83 [0090.644] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d78b0 [0090.645] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0090.645] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0090.645] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0090.645] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0090.645] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0090.645] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0090.645] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0090.645] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv", lpFilePart=0x0) returned 0x82 [0090.645] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\", lpFilePart=0x0) returned 0x83 [0090.645] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7fd0 [0090.645] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0090.646] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0090.646] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0090.646] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0090.646] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0090.646] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0090.646] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\messages.json", lpFilePart=0x0) returned 0x90 [0090.646] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0090.646] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x21763a0 | out: lpFileInformation=0x21763a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x788a94da, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x788a945e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x78bcc90f, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x102)) returned 1 [0090.646] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0090.646] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\messages.json", lpFilePart=0x0) returned 0x90 [0090.646] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0090.646] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0090.646] GetFileType (hFile=0x444) returned 0x1 [0090.647] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0090.647] GetFileType (hFile=0x444) returned 0x1 [0090.647] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x102 [0090.647] ReadFile (in: hFile=0x444, lpBuffer=0x2176880, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x2176880*, lpNumberOfBytesRead=0x3be478*=0x102, lpOverlapped=0x0) returned 1 [0090.647] CloseHandle (hObject=0x444) returned 1 [0090.658] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\messages.json", lpFilePart=0x0) returned 0x90 [0090.658] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0090.659] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0090.660] GetFileType (hFile=0x444) returned 0x1 [0090.660] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0090.660] GetFileType (hFile=0x444) returned 0x1 [0090.660] WriteFile (in: hFile=0x444, lpBuffer=0x21ede48*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x21ede48*, lpNumberOfBytesWritten=0x3be388*=0x110, lpOverlapped=0x0) returned 1 [0090.661] CloseHandle (hObject=0x444) returned 1 [0090.661] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\messages.json", lpFilePart=0x0) returned 0x90 [0090.661] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\messages.json.xuy", lpFilePart=0x0) returned 0x94 [0090.661] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0090.661] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x788a94da, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x788a945e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x21e2de02, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x110)) returned 1 [0090.661] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0090.661] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\messages.json.xuy")) returned 1 [0090.662] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0090.662] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms", lpFilePart=0x0) returned 0x82 [0090.662] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\", lpFilePart=0x0) returned 0x83 [0090.662] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7fd0 [0090.663] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0090.663] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0090.663] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0090.663] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0090.663] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0090.663] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0090.664] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0090.664] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms", lpFilePart=0x0) returned 0x82 [0090.664] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\", lpFilePart=0x0) returned 0x83 [0090.664] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d78b0 [0090.664] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0090.664] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0090.664] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0090.664] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0090.664] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0090.664] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0090.664] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\messages.json", lpFilePart=0x0) returned 0x90 [0090.664] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0090.664] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x21f2048 | out: lpFileInformation=0x21f2048*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x788c4279, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x788c420e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x78bcf032, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xfe)) returned 1 [0090.665] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0090.665] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\messages.json", lpFilePart=0x0) returned 0x90 [0090.665] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0090.665] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0090.665] GetFileType (hFile=0x444) returned 0x1 [0090.665] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0090.665] GetFileType (hFile=0x444) returned 0x1 [0090.665] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xfe [0090.665] ReadFile (in: hFile=0x444, lpBuffer=0x21f2520, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x21f2520*, lpNumberOfBytesRead=0x3be478*=0xfe, lpOverlapped=0x0) returned 1 [0090.666] CloseHandle (hObject=0x444) returned 1 [0090.676] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\messages.json", lpFilePart=0x0) returned 0x90 [0090.676] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0090.676] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0090.678] GetFileType (hFile=0x444) returned 0x1 [0090.678] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0090.678] GetFileType (hFile=0x444) returned 0x1 [0090.678] WriteFile (in: hFile=0x444, lpBuffer=0x22698a8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x22698a8*, lpNumberOfBytesWritten=0x3be388*=0x100, lpOverlapped=0x0) returned 1 [0090.679] CloseHandle (hObject=0x444) returned 1 [0090.679] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\messages.json", lpFilePart=0x0) returned 0x90 [0090.679] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\messages.json.xuy", lpFilePart=0x0) returned 0x94 [0090.679] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0090.679] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x788c4279, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x788c420e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x21e53cb7, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x100)) returned 1 [0090.679] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0090.679] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\messages.json.xuy")) returned 1 [0090.680] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0090.680] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl", lpFilePart=0x0) returned 0x82 [0090.680] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\", lpFilePart=0x0) returned 0x83 [0090.680] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d81b0 [0090.680] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0090.680] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0090.680] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0090.681] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0090.681] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0090.681] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0090.681] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0090.681] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl", lpFilePart=0x0) returned 0x82 [0090.681] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\", lpFilePart=0x0) returned 0x83 [0090.681] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7a30 [0090.681] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0090.681] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0090.681] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0090.681] FindClose (in: hFindFile=0x5d7a30 | out: hFindFile=0x5d7a30) returned 1 [0090.681] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0090.681] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0090.681] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\messages.json", lpFilePart=0x0) returned 0x90 [0090.681] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0090.682] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x226daa8 | out: lpFileInformation=0x226daa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x788d05cd, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x788d537e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x78bcf032, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xf2)) returned 1 [0090.682] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0090.682] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\messages.json", lpFilePart=0x0) returned 0x90 [0090.682] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0090.682] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0090.682] GetFileType (hFile=0x444) returned 0x1 [0090.682] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0090.682] GetFileType (hFile=0x444) returned 0x1 [0090.682] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xf2 [0090.682] ReadFile (in: hFile=0x444, lpBuffer=0x226df78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x226df78*, lpNumberOfBytesRead=0x3be478*=0xf2, lpOverlapped=0x0) returned 1 [0090.684] CloseHandle (hObject=0x444) returned 1 [0090.694] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\messages.json", lpFilePart=0x0) returned 0x90 [0090.694] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0090.695] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0090.696] GetFileType (hFile=0x444) returned 0x1 [0090.696] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0090.696] GetFileType (hFile=0x444) returned 0x1 [0090.696] WriteFile (in: hFile=0x444, lpBuffer=0x22e5308*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x22e5308*, lpNumberOfBytesWritten=0x3be388*=0x100, lpOverlapped=0x0) returned 1 [0090.697] CloseHandle (hObject=0x444) returned 1 [0090.697] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\messages.json", lpFilePart=0x0) returned 0x90 [0090.697] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\messages.json.xuy", lpFilePart=0x0) returned 0x94 [0090.697] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0090.697] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x788d05cd, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x788d537e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x21e79efa, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x100)) returned 1 [0090.697] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0090.697] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\messages.json.xuy")) returned 1 [0090.698] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0090.698] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no", lpFilePart=0x0) returned 0x82 [0090.698] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\", lpFilePart=0x0) returned 0x83 [0090.698] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7d30 [0090.700] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0090.701] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0090.701] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0090.701] FindClose (in: hFindFile=0x5d7d30 | out: hFindFile=0x5d7d30) returned 1 [0090.701] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0090.701] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0090.701] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0090.701] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no", lpFilePart=0x0) returned 0x82 [0090.701] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\", lpFilePart=0x0) returned 0x83 [0090.701] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d73d0 [0090.701] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0090.701] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0090.702] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0090.702] FindClose (in: hFindFile=0x5d73d0 | out: hFindFile=0x5d73d0) returned 1 [0090.702] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0090.702] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0090.702] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\messages.json", lpFilePart=0x0) returned 0x90 [0090.702] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0090.702] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x22e9508 | out: lpFileInformation=0x22e9508*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x788e1740, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x788e3dde, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0xd3d59700, ftLastWriteTime.dwHighDateTime=0x1d10aaf, nFileSizeHigh=0x0, nFileSizeLow=0xda)) returned 1 [0090.702] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0090.702] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\messages.json", lpFilePart=0x0) returned 0x90 [0090.702] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0090.702] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0090.702] GetFileType (hFile=0x444) returned 0x1 [0090.702] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0090.702] GetFileType (hFile=0x444) returned 0x1 [0090.702] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xda [0090.702] ReadFile (in: hFile=0x444, lpBuffer=0x22e99c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x22e99c0*, lpNumberOfBytesRead=0x3be478*=0xda, lpOverlapped=0x0) returned 1 [0090.703] CloseHandle (hObject=0x444) returned 1 [0090.744] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\messages.json", lpFilePart=0x0) returned 0x90 [0090.744] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0090.744] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0090.745] GetFileType (hFile=0x444) returned 0x1 [0090.745] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0090.745] GetFileType (hFile=0x444) returned 0x1 [0090.745] WriteFile (in: hFile=0x444, lpBuffer=0x21617d8*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x21617d8*, lpNumberOfBytesWritten=0x3be388*=0xe0, lpOverlapped=0x0) returned 1 [0090.746] CloseHandle (hObject=0x444) returned 1 [0090.746] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\messages.json", lpFilePart=0x0) returned 0x90 [0090.746] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\messages.json.xuy", lpFilePart=0x0) returned 0x94 [0090.746] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0090.746] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x788e1740, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x788e3dde, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x21eec702, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1 [0090.746] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0090.746] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\messages.json.xuy")) returned 1 [0090.749] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0090.749] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl", lpFilePart=0x0) returned 0x82 [0090.749] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\", lpFilePart=0x0) returned 0x83 [0090.749] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d81b0 [0090.749] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0090.749] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0090.750] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0090.750] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0090.750] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0090.750] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0090.750] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0090.750] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl", lpFilePart=0x0) returned 0x82 [0090.750] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\", lpFilePart=0x0) returned 0x83 [0090.750] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7af0 [0090.750] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0090.750] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0090.750] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0090.751] FindClose (in: hFindFile=0x5d7af0 | out: hFindFile=0x5d7af0) returned 1 [0090.751] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0090.751] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0090.751] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\messages.json", lpFilePart=0x0) returned 0x90 [0090.751] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0090.751] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x21659d8 | out: lpFileInformation=0x21659d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x788eb384, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x788eda1e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x78bcf032, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x101)) returned 1 [0090.751] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0090.751] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\messages.json", lpFilePart=0x0) returned 0x90 [0090.751] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0090.751] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0090.751] GetFileType (hFile=0x444) returned 0x1 [0090.751] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0090.751] GetFileType (hFile=0x444) returned 0x1 [0090.751] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x101 [0090.751] ReadFile (in: hFile=0x444, lpBuffer=0x2165eb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x2165eb8*, lpNumberOfBytesRead=0x3be478*=0x101, lpOverlapped=0x0) returned 1 [0090.752] CloseHandle (hObject=0x444) returned 1 [0090.762] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\messages.json", lpFilePart=0x0) returned 0x90 [0090.762] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0090.762] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0090.764] GetFileType (hFile=0x444) returned 0x1 [0090.764] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0090.764] GetFileType (hFile=0x444) returned 0x1 [0090.764] WriteFile (in: hFile=0x444, lpBuffer=0x21dd480*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x21dd480*, lpNumberOfBytesWritten=0x3be388*=0x110, lpOverlapped=0x0) returned 1 [0090.765] CloseHandle (hObject=0x444) returned 1 [0090.765] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\messages.json", lpFilePart=0x0) returned 0x90 [0090.765] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\messages.json.xuy", lpFilePart=0x0) returned 0x94 [0090.765] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0090.765] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x788eb384, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x788eda1e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x21f38b3a, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x110)) returned 1 [0090.765] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0090.765] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\messages.json.xuy")) returned 1 [0090.766] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0090.766] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR", lpFilePart=0x0) returned 0x85 [0090.766] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR\\", lpFilePart=0x0) returned 0x86 [0090.766] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d78b0 [0090.768] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0090.768] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0090.768] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0090.768] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0090.768] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0090.768] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0090.768] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0090.768] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR", lpFilePart=0x0) returned 0x85 [0090.768] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR\\", lpFilePart=0x0) returned 0x86 [0090.768] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7370 [0090.768] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0090.769] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0090.769] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0090.769] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0090.769] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0090.769] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0090.769] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR\\messages.json", lpFilePart=0x0) returned 0x93 [0090.769] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0090.769] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_br\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x21e16e0 | out: lpFileInformation=0x21e16e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x788f76d5, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x788f765e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x78bd172f, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xf6)) returned 1 [0090.769] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0090.769] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR\\messages.json", lpFilePart=0x0) returned 0x93 [0090.769] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0090.769] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_br\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0090.770] GetFileType (hFile=0x444) returned 0x1 [0090.770] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0090.770] GetFileType (hFile=0x444) returned 0x1 [0090.770] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xf6 [0090.770] ReadFile (in: hFile=0x444, lpBuffer=0x21e1bb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x21e1bb0*, lpNumberOfBytesRead=0x3be478*=0xf6, lpOverlapped=0x0) returned 1 [0090.771] CloseHandle (hObject=0x444) returned 1 [0090.781] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR\\messages.json", lpFilePart=0x0) returned 0x93 [0090.781] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0090.782] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_br\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0090.783] GetFileType (hFile=0x444) returned 0x1 [0090.783] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0090.783] GetFileType (hFile=0x444) returned 0x1 [0090.783] WriteFile (in: hFile=0x444, lpBuffer=0x2258f40*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x2258f40*, lpNumberOfBytesWritten=0x3be388*=0x100, lpOverlapped=0x0) returned 1 [0090.784] CloseHandle (hObject=0x444) returned 1 [0090.784] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR\\messages.json", lpFilePart=0x0) returned 0x93 [0090.784] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR\\messages.json.xuy", lpFilePart=0x0) returned 0x97 [0090.784] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0090.784] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_br\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x788f76d5, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x788f765e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x21f5f16c, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x100)) returned 1 [0090.784] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0090.784] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_br\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_br\\messages.json.xuy")) returned 1 [0090.785] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0090.785] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT", lpFilePart=0x0) returned 0x85 [0090.785] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT\\", lpFilePart=0x0) returned 0x86 [0090.785] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7d90 [0090.786] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0090.786] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0090.786] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0090.786] FindClose (in: hFindFile=0x5d7d90 | out: hFindFile=0x5d7d90) returned 1 [0090.786] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0090.786] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0090.786] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0090.786] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT", lpFilePart=0x0) returned 0x85 [0090.786] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT\\", lpFilePart=0x0) returned 0x86 [0090.786] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d78b0 [0090.786] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0090.787] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0090.787] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0090.787] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0090.787] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0090.787] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0090.787] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT\\messages.json", lpFilePart=0x0) returned 0x93 [0090.787] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0090.787] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_pt\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x225d1a0 | out: lpFileInformation=0x225d1a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7890884c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7890aede, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x78bd172f, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x108)) returned 1 [0090.787] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0090.787] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT\\messages.json", lpFilePart=0x0) returned 0x93 [0090.787] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0090.787] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_pt\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0090.787] GetFileType (hFile=0x444) returned 0x1 [0090.788] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0090.788] GetFileType (hFile=0x444) returned 0x1 [0090.788] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x108 [0090.788] ReadFile (in: hFile=0x444, lpBuffer=0x225d680, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x225d680*, lpNumberOfBytesRead=0x3be478*=0x108, lpOverlapped=0x0) returned 1 [0090.789] CloseHandle (hObject=0x444) returned 1 [0090.800] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT\\messages.json", lpFilePart=0x0) returned 0x93 [0090.800] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0090.800] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_pt\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0090.801] GetFileType (hFile=0x444) returned 0x1 [0090.801] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0090.801] GetFileType (hFile=0x444) returned 0x1 [0090.801] WriteFile (in: hFile=0x444, lpBuffer=0x22d4c40*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x22d4c40*, lpNumberOfBytesWritten=0x3be388*=0x110, lpOverlapped=0x0) returned 1 [0090.802] CloseHandle (hObject=0x444) returned 1 [0090.802] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT\\messages.json", lpFilePart=0x0) returned 0x93 [0090.802] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT\\messages.json.xuy", lpFilePart=0x0) returned 0x97 [0090.802] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0090.802] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_pt\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7890884c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7890aede, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x21f85009, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x110)) returned 1 [0090.802] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0090.803] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_pt\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_pt\\messages.json.xuy")) returned 1 [0090.803] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0090.803] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro", lpFilePart=0x0) returned 0x82 [0090.803] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\", lpFilePart=0x0) returned 0x83 [0090.804] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d81b0 [0090.805] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0090.805] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0090.805] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0090.805] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0090.805] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0090.805] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0090.805] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0090.805] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro", lpFilePart=0x0) returned 0x82 [0090.805] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\", lpFilePart=0x0) returned 0x83 [0090.805] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d79d0 [0090.806] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0090.806] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0090.806] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0090.806] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0090.806] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0090.806] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0090.806] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\messages.json", lpFilePart=0x0) returned 0x90 [0090.806] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0090.806] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x22d8e40 | out: lpFileInformation=0x22d8e40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7891248a, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x78914b1e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x78bd172f, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x119)) returned 1 [0090.806] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0090.806] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\messages.json", lpFilePart=0x0) returned 0x90 [0090.807] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0090.807] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0090.807] GetFileType (hFile=0x444) returned 0x1 [0090.807] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0090.807] GetFileType (hFile=0x444) returned 0x1 [0090.807] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x119 [0090.807] ReadFile (in: hFile=0x444, lpBuffer=0x22d9338, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x22d9338*, lpNumberOfBytesRead=0x3be478*=0x119, lpOverlapped=0x0) returned 1 [0090.808] CloseHandle (hObject=0x444) returned 1 [0090.820] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\messages.json", lpFilePart=0x0) returned 0x90 [0090.820] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0090.820] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0090.821] GetFileType (hFile=0x444) returned 0x1 [0090.821] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0090.821] GetFileType (hFile=0x444) returned 0x1 [0090.821] WriteFile (in: hFile=0x444, lpBuffer=0x2350948*, nNumberOfBytesToWrite=0x120, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x2350948*, lpNumberOfBytesWritten=0x3be388*=0x120, lpOverlapped=0x0) returned 1 [0090.822] CloseHandle (hObject=0x444) returned 1 [0090.823] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\messages.json", lpFilePart=0x0) returned 0x90 [0090.823] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\messages.json.xuy", lpFilePart=0x0) returned 0x94 [0090.823] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0090.823] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7891248a, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x78914b1e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x21fab168, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x120)) returned 1 [0090.823] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0090.823] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\messages.json.xuy")) returned 1 [0090.824] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0090.824] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru", lpFilePart=0x0) returned 0x82 [0090.824] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\", lpFilePart=0x0) returned 0x83 [0090.824] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7eb0 [0090.824] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0090.824] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0090.824] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0090.825] FindClose (in: hFindFile=0x5d7eb0 | out: hFindFile=0x5d7eb0) returned 1 [0090.825] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0090.825] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0090.825] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0090.825] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru", lpFilePart=0x0) returned 0x82 [0090.825] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\", lpFilePart=0x0) returned 0x83 [0090.829] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d81b0 [0090.829] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0090.829] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0090.829] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0090.829] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0090.829] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0090.829] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0090.829] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\messages.json", lpFilePart=0x0) returned 0x90 [0090.830] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0090.830] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x2155638 | out: lpFileInformation=0x2155638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7891e7de, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7891e75e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x78bd172f, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x152)) returned 1 [0090.830] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0090.830] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\messages.json", lpFilePart=0x0) returned 0x90 [0090.830] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0090.830] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0090.830] GetFileType (hFile=0x444) returned 0x1 [0090.830] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0090.830] GetFileType (hFile=0x444) returned 0x1 [0090.830] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x152 [0090.830] ReadFile (in: hFile=0x444, lpBuffer=0x2155b68, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x2155b68*, lpNumberOfBytesRead=0x3be478*=0x152, lpOverlapped=0x0) returned 1 [0090.831] CloseHandle (hObject=0x444) returned 1 [0090.870] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\messages.json", lpFilePart=0x0) returned 0x90 [0090.870] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0090.870] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0090.872] GetFileType (hFile=0x444) returned 0x1 [0090.872] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0090.872] GetFileType (hFile=0x444) returned 0x1 [0090.872] WriteFile (in: hFile=0x444, lpBuffer=0x21cd2c0*, nNumberOfBytesToWrite=0x160, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x21cd2c0*, lpNumberOfBytesWritten=0x3be388*=0x160, lpOverlapped=0x0) returned 1 [0090.873] CloseHandle (hObject=0x444) returned 1 [0090.873] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\messages.json", lpFilePart=0x0) returned 0x90 [0090.873] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\messages.json.xuy", lpFilePart=0x0) returned 0x94 [0090.873] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0090.873] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7891e7de, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7891e75e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x22043b7a, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x160)) returned 1 [0090.874] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0090.874] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\messages.json.xuy")) returned 1 [0090.874] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0090.874] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk", lpFilePart=0x0) returned 0x82 [0090.875] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\", lpFilePart=0x0) returned 0x83 [0090.875] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d81b0 [0090.876] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0090.876] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0090.877] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0090.877] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0090.877] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0090.877] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0090.877] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0090.877] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk", lpFilePart=0x0) returned 0x82 [0090.877] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\", lpFilePart=0x0) returned 0x83 [0090.877] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7d90 [0090.877] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0090.877] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0090.878] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0090.878] FindClose (in: hFindFile=0x5d7d90 | out: hFindFile=0x5d7d90) returned 1 [0090.878] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0090.878] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0090.878] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\messages.json", lpFilePart=0x0) returned 0x90 [0090.878] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0090.878] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x21d14c0 | out: lpFileInformation=0x21d14c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7892d241, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7892f8ce, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x78bd3e4b, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x112)) returned 1 [0090.878] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0090.878] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\messages.json", lpFilePart=0x0) returned 0x90 [0090.878] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0090.878] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0090.879] GetFileType (hFile=0x444) returned 0x1 [0090.879] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0090.879] GetFileType (hFile=0x444) returned 0x1 [0090.879] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x112 [0090.879] ReadFile (in: hFile=0x444, lpBuffer=0x21d19b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x21d19b0*, lpNumberOfBytesRead=0x3be478*=0x112, lpOverlapped=0x0) returned 1 [0090.880] CloseHandle (hObject=0x444) returned 1 [0090.890] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\messages.json", lpFilePart=0x0) returned 0x90 [0090.890] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0090.890] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0090.892] GetFileType (hFile=0x444) returned 0x1 [0090.892] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0090.892] GetFileType (hFile=0x444) returned 0x1 [0090.892] WriteFile (in: hFile=0x444, lpBuffer=0x2248fc8*, nNumberOfBytesToWrite=0x120, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x2248fc8*, lpNumberOfBytesWritten=0x3be388*=0x120, lpOverlapped=0x0) returned 1 [0090.893] CloseHandle (hObject=0x444) returned 1 [0090.893] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\messages.json", lpFilePart=0x0) returned 0x90 [0090.893] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\messages.json.xuy", lpFilePart=0x0) returned 0x94 [0090.893] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0090.893] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7892d241, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7892f8ce, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x22069f5d, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x120)) returned 1 [0090.893] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0090.893] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\messages.json.xuy")) returned 1 [0090.894] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0090.894] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl", lpFilePart=0x0) returned 0x82 [0090.894] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\", lpFilePart=0x0) returned 0x83 [0090.894] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7fd0 [0090.895] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0090.895] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0090.895] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0090.895] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0090.895] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0090.895] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0090.895] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0090.895] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl", lpFilePart=0x0) returned 0x82 [0090.895] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\", lpFilePart=0x0) returned 0x83 [0090.895] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d78b0 [0090.895] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0090.895] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0090.896] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0090.896] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0090.896] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0090.896] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0090.896] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\messages.json", lpFilePart=0x0) returned 0x90 [0090.896] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0090.896] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x224d1c8 | out: lpFileInformation=0x224d1c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78939596, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7893950e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x78bd3e4b, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x10c)) returned 1 [0090.896] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0090.896] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\messages.json", lpFilePart=0x0) returned 0x90 [0090.896] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0090.896] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0090.896] GetFileType (hFile=0x444) returned 0x1 [0090.896] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0090.896] GetFileType (hFile=0x444) returned 0x1 [0090.896] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x10c [0090.896] ReadFile (in: hFile=0x444, lpBuffer=0x224d6b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x224d6b0*, lpNumberOfBytesRead=0x3be478*=0x10c, lpOverlapped=0x0) returned 1 [0090.897] CloseHandle (hObject=0x444) returned 1 [0090.908] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\messages.json", lpFilePart=0x0) returned 0x90 [0090.909] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0090.909] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0090.910] GetFileType (hFile=0x444) returned 0x1 [0090.910] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0090.910] GetFileType (hFile=0x444) returned 0x1 [0090.910] WriteFile (in: hFile=0x444, lpBuffer=0x22c4c70*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x22c4c70*, lpNumberOfBytesWritten=0x3be388*=0x110, lpOverlapped=0x0) returned 1 [0090.911] CloseHandle (hObject=0x444) returned 1 [0090.911] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\messages.json", lpFilePart=0x0) returned 0x90 [0090.911] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\messages.json.xuy", lpFilePart=0x0) returned 0x94 [0090.911] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0090.911] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78939596, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7893950e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2209041a, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x110)) returned 1 [0090.911] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0090.911] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\messages.json.xuy")) returned 1 [0090.912] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0090.912] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr", lpFilePart=0x0) returned 0x82 [0090.912] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\", lpFilePart=0x0) returned 0x83 [0090.912] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7c70 [0090.913] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0090.914] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0090.914] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0090.914] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0090.914] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0090.914] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0090.914] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0090.914] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr", lpFilePart=0x0) returned 0x82 [0090.914] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\", lpFilePart=0x0) returned 0x83 [0090.914] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d78b0 [0090.914] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0090.914] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0090.914] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0090.915] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0090.915] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0090.915] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0090.915] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\messages.json", lpFilePart=0x0) returned 0x90 [0090.915] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0090.915] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x22c8e70 | out: lpFileInformation=0x22c8e70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x789431d7, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7894314e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x78bd3e4b, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x11f)) returned 1 [0090.915] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0090.915] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\messages.json", lpFilePart=0x0) returned 0x90 [0090.915] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0090.915] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0090.915] GetFileType (hFile=0x444) returned 0x1 [0090.915] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0090.915] GetFileType (hFile=0x444) returned 0x1 [0090.915] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x11f [0090.915] ReadFile (in: hFile=0x444, lpBuffer=0x22c9368, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x22c9368*, lpNumberOfBytesRead=0x3be478*=0x11f, lpOverlapped=0x0) returned 1 [0090.916] CloseHandle (hObject=0x444) returned 1 [0090.926] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\messages.json", lpFilePart=0x0) returned 0x90 [0090.926] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0090.926] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0090.928] GetFileType (hFile=0x444) returned 0x1 [0090.928] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0090.928] GetFileType (hFile=0x444) returned 0x1 [0090.928] WriteFile (in: hFile=0x444, lpBuffer=0x2340978*, nNumberOfBytesToWrite=0x120, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x2340978*, lpNumberOfBytesWritten=0x3be388*=0x120, lpOverlapped=0x0) returned 1 [0090.929] CloseHandle (hObject=0x444) returned 1 [0090.929] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\messages.json", lpFilePart=0x0) returned 0x90 [0090.929] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\messages.json.xuy", lpFilePart=0x0) returned 0x94 [0090.929] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0090.929] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x789431d7, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7894314e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x220b6227, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x120)) returned 1 [0090.929] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0090.929] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\messages.json.xuy")) returned 1 [0090.930] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0090.930] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv", lpFilePart=0x0) returned 0x82 [0090.930] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\", lpFilePart=0x0) returned 0x83 [0090.930] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d79d0 [0090.930] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0090.930] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0090.931] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0090.931] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0090.931] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0090.931] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0090.931] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0090.931] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv", lpFilePart=0x0) returned 0x82 [0090.931] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\", lpFilePart=0x0) returned 0x83 [0090.931] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7fd0 [0090.931] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0090.931] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0090.931] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0090.931] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0090.931] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0090.931] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0090.931] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\messages.json", lpFilePart=0x0) returned 0x90 [0090.931] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0090.932] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x2344b78 | out: lpFileInformation=0x2344b78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78951c69, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x78951bae, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x78bd3e4b, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xfd)) returned 1 [0090.932] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0090.932] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\messages.json", lpFilePart=0x0) returned 0x90 [0090.932] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0090.932] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0090.932] GetFileType (hFile=0x444) returned 0x1 [0090.932] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0090.932] GetFileType (hFile=0x444) returned 0x1 [0090.932] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xfd [0090.932] ReadFile (in: hFile=0x444, lpBuffer=0x2345050, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x2345050*, lpNumberOfBytesRead=0x3be478*=0xfd, lpOverlapped=0x0) returned 1 [0090.933] CloseHandle (hObject=0x444) returned 1 [0091.023] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\messages.json", lpFilePart=0x0) returned 0x90 [0091.023] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0091.023] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0091.025] GetFileType (hFile=0x444) returned 0x1 [0091.025] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0091.025] GetFileType (hFile=0x444) returned 0x1 [0091.025] WriteFile (in: hFile=0x444, lpBuffer=0x21bcc50*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x21bcc50*, lpNumberOfBytesWritten=0x3be388*=0x100, lpOverlapped=0x0) returned 1 [0091.026] CloseHandle (hObject=0x444) returned 1 [0091.026] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\messages.json", lpFilePart=0x0) returned 0x90 [0091.026] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\messages.json.xuy", lpFilePart=0x0) returned 0x94 [0091.026] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0091.026] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78951c69, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x78951bae, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2219b11c, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x100)) returned 1 [0091.026] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0091.026] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\messages.json.xuy")) returned 1 [0091.027] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0091.027] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th", lpFilePart=0x0) returned 0x82 [0091.027] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\", lpFilePart=0x0) returned 0x83 [0091.027] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d78b0 [0091.031] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0091.032] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0091.032] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0091.032] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0091.032] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0091.032] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0091.032] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0091.032] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th", lpFilePart=0x0) returned 0x82 [0091.032] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\", lpFilePart=0x0) returned 0x83 [0091.032] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7550 [0091.032] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0091.032] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0091.033] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0091.033] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0091.033] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0091.033] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0091.033] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\messages.json", lpFilePart=0x0) returned 0x90 [0091.033] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0091.033] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x21c0e50 | out: lpFileInformation=0x21c0e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7895b8a4, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7895b7ee, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x78bd3e4b, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x164)) returned 1 [0091.033] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0091.033] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\messages.json", lpFilePart=0x0) returned 0x90 [0091.033] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0091.033] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0091.033] GetFileType (hFile=0x444) returned 0x1 [0091.033] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0091.033] GetFileType (hFile=0x444) returned 0x1 [0091.033] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x164 [0091.034] ReadFile (in: hFile=0x444, lpBuffer=0x21c1390, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x21c1390*, lpNumberOfBytesRead=0x3be478*=0x164, lpOverlapped=0x0) returned 1 [0091.037] CloseHandle (hObject=0x444) returned 1 [0091.047] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\messages.json", lpFilePart=0x0) returned 0x90 [0091.047] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0091.047] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0091.049] GetFileType (hFile=0x444) returned 0x1 [0091.049] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0091.049] GetFileType (hFile=0x444) returned 0x1 [0091.049] WriteFile (in: hFile=0x444, lpBuffer=0x2238b38*, nNumberOfBytesToWrite=0x170, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x2238b38*, lpNumberOfBytesWritten=0x3be388*=0x170, lpOverlapped=0x0) returned 1 [0091.050] CloseHandle (hObject=0x444) returned 1 [0091.050] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\messages.json", lpFilePart=0x0) returned 0x90 [0091.050] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\messages.json.xuy", lpFilePart=0x0) returned 0x94 [0091.050] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0091.050] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7895b8a4, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7895b7ee, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x221e764e, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x170)) returned 1 [0091.050] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0091.050] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\messages.json.xuy")) returned 1 [0091.051] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0091.051] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr", lpFilePart=0x0) returned 0x82 [0091.051] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\", lpFilePart=0x0) returned 0x83 [0091.051] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7a30 [0091.051] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0091.051] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0091.052] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0091.052] FindClose (in: hFindFile=0x5d7a30 | out: hFindFile=0x5d7a30) returned 1 [0091.052] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0091.052] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0091.052] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0091.052] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr", lpFilePart=0x0) returned 0x82 [0091.052] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\", lpFilePart=0x0) returned 0x83 [0091.052] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d81b0 [0091.052] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0091.052] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0091.052] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0091.052] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0091.053] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0091.053] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0091.053] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\messages.json", lpFilePart=0x0) returned 0x90 [0091.053] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0091.053] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x223cd38 | out: lpFileInformation=0x223cd38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x789654ec, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x78967b3e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x78bd656a, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x10e)) returned 1 [0091.053] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0091.053] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\messages.json", lpFilePart=0x0) returned 0x90 [0091.053] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0091.053] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0091.053] GetFileType (hFile=0x444) returned 0x1 [0091.053] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0091.053] GetFileType (hFile=0x444) returned 0x1 [0091.053] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x10e [0091.053] ReadFile (in: hFile=0x444, lpBuffer=0x223d220, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x223d220*, lpNumberOfBytesRead=0x3be478*=0x10e, lpOverlapped=0x0) returned 1 [0091.054] CloseHandle (hObject=0x444) returned 1 [0091.065] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\messages.json", lpFilePart=0x0) returned 0x90 [0091.065] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0091.065] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0091.066] GetFileType (hFile=0x444) returned 0x1 [0091.066] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0091.066] GetFileType (hFile=0x444) returned 0x1 [0091.066] WriteFile (in: hFile=0x444, lpBuffer=0x22b47e0*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x22b47e0*, lpNumberOfBytesWritten=0x3be388*=0x110, lpOverlapped=0x0) returned 1 [0091.067] CloseHandle (hObject=0x444) returned 1 [0091.067] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\messages.json", lpFilePart=0x0) returned 0x90 [0091.067] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\messages.json.xuy", lpFilePart=0x0) returned 0x94 [0091.067] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0091.067] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x789654ec, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x78967b3e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2220db9b, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x110)) returned 1 [0091.067] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0091.067] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\messages.json.xuy")) returned 1 [0091.068] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0091.068] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk", lpFilePart=0x0) returned 0x82 [0091.068] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\", lpFilePart=0x0) returned 0x83 [0091.068] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7550 [0091.070] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0091.070] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0091.070] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0091.070] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0091.070] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0091.070] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0091.071] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0091.071] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk", lpFilePart=0x0) returned 0x82 [0091.071] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\", lpFilePart=0x0) returned 0x83 [0091.071] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7fd0 [0091.071] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0091.071] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0091.071] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0091.071] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0091.071] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0091.071] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0091.071] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\messages.json", lpFilePart=0x0) returned 0x90 [0091.071] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0091.072] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x22b89e0 | out: lpFileInformation=0x22b89e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78973f1b, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7897659e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x78bd656a, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x161)) returned 1 [0091.072] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0091.072] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\messages.json", lpFilePart=0x0) returned 0x90 [0091.072] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0091.072] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0091.072] GetFileType (hFile=0x444) returned 0x1 [0091.072] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0091.072] GetFileType (hFile=0x444) returned 0x1 [0091.072] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x161 [0091.072] ReadFile (in: hFile=0x444, lpBuffer=0x22b8f20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x22b8f20*, lpNumberOfBytesRead=0x3be478*=0x161, lpOverlapped=0x0) returned 1 [0091.073] CloseHandle (hObject=0x444) returned 1 [0091.084] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\messages.json", lpFilePart=0x0) returned 0x90 [0091.084] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0091.084] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0091.086] GetFileType (hFile=0x444) returned 0x1 [0091.086] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0091.086] GetFileType (hFile=0x444) returned 0x1 [0091.086] WriteFile (in: hFile=0x444, lpBuffer=0x23306c8*, nNumberOfBytesToWrite=0x170, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x23306c8*, lpNumberOfBytesWritten=0x3be388*=0x170, lpOverlapped=0x0) returned 1 [0091.088] CloseHandle (hObject=0x444) returned 1 [0091.088] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\messages.json", lpFilePart=0x0) returned 0x90 [0091.088] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\messages.json.xuy", lpFilePart=0x0) returned 0x94 [0091.088] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0091.088] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78973f1b, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7897659e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x222339df, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x170)) returned 1 [0091.088] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0091.088] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\messages.json.xuy")) returned 1 [0091.089] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0091.089] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi", lpFilePart=0x0) returned 0x82 [0091.089] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\", lpFilePart=0x0) returned 0x83 [0091.089] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d79d0 [0091.089] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0091.089] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0091.090] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0091.090] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0091.090] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0091.090] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0091.090] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0091.090] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi", lpFilePart=0x0) returned 0x82 [0091.090] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\", lpFilePart=0x0) returned 0x83 [0091.090] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7a90 [0091.090] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0091.090] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0091.090] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0091.090] FindClose (in: hFindFile=0x5d7a90 | out: hFindFile=0x5d7a90) returned 1 [0091.091] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0091.091] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0091.091] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\messages.json", lpFilePart=0x0) returned 0x90 [0091.091] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0091.091] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x23348c8 | out: lpFileInformation=0x23348c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7897db7e, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x789801de, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x78bd656a, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x117)) returned 1 [0091.091] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0091.091] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\messages.json", lpFilePart=0x0) returned 0x90 [0091.091] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0091.092] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0091.092] GetFileType (hFile=0x444) returned 0x1 [0091.092] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0091.092] GetFileType (hFile=0x444) returned 0x1 [0091.092] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x117 [0091.092] ReadFile (in: hFile=0x444, lpBuffer=0x2334db8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x2334db8*, lpNumberOfBytesRead=0x3be478*=0x117, lpOverlapped=0x0) returned 1 [0091.093] CloseHandle (hObject=0x444) returned 1 [0091.135] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\messages.json", lpFilePart=0x0) returned 0x90 [0091.135] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0091.135] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0091.136] GetFileType (hFile=0x444) returned 0x1 [0091.136] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0091.136] GetFileType (hFile=0x444) returned 0x1 [0091.136] WriteFile (in: hFile=0x444, lpBuffer=0x21acd80*, nNumberOfBytesToWrite=0x120, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x21acd80*, lpNumberOfBytesWritten=0x3be388*=0x120, lpOverlapped=0x0) returned 1 [0091.137] CloseHandle (hObject=0x444) returned 1 [0091.137] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\messages.json", lpFilePart=0x0) returned 0x90 [0091.137] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\messages.json.xuy", lpFilePart=0x0) returned 0x94 [0091.137] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0091.137] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7897db7e, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x789801de, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x222a61a0, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x120)) returned 1 [0091.138] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0091.138] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\messages.json.xuy")) returned 1 [0091.139] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0091.139] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN", lpFilePart=0x0) returned 0x85 [0091.139] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN\\", lpFilePart=0x0) returned 0x86 [0091.139] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7df0 [0091.147] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0091.147] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0091.147] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0091.147] FindClose (in: hFindFile=0x5d7df0 | out: hFindFile=0x5d7df0) returned 1 [0091.147] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0091.147] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0091.148] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0091.148] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN", lpFilePart=0x0) returned 0x85 [0091.148] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN\\", lpFilePart=0x0) returned 0x86 [0091.148] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7c70 [0091.148] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0091.148] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0091.148] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0091.148] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0091.148] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0091.148] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0091.149] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN\\messages.json", lpFilePart=0x0) returned 0x93 [0091.149] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0091.149] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_cn\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x21b0fe0 | out: lpFileInformation=0x21b0fe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78989ebd, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x78989e1e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x78bd656a, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x111)) returned 1 [0091.149] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0091.149] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN\\messages.json", lpFilePart=0x0) returned 0x93 [0091.149] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0091.149] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_cn\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0091.149] GetFileType (hFile=0x444) returned 0x1 [0091.149] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0091.149] GetFileType (hFile=0x444) returned 0x1 [0091.149] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x111 [0091.149] ReadFile (in: hFile=0x444, lpBuffer=0x21b14d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x21b14d0*, lpNumberOfBytesRead=0x3be478*=0x111, lpOverlapped=0x0) returned 1 [0091.153] CloseHandle (hObject=0x444) returned 1 [0091.164] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN\\messages.json", lpFilePart=0x0) returned 0x93 [0091.164] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0091.164] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_cn\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0091.166] GetFileType (hFile=0x444) returned 0x1 [0091.166] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0091.166] GetFileType (hFile=0x444) returned 0x1 [0091.166] WriteFile (in: hFile=0x444, lpBuffer=0x2228ae8*, nNumberOfBytesToWrite=0x120, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x2228ae8*, lpNumberOfBytesWritten=0x3be388*=0x120, lpOverlapped=0x0) returned 1 [0091.167] CloseHandle (hObject=0x444) returned 1 [0091.167] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN\\messages.json", lpFilePart=0x0) returned 0x93 [0091.167] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN\\messages.json.xuy", lpFilePart=0x0) returned 0x97 [0091.167] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0091.167] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_cn\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78989ebd, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x78989e1e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x222f2642, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x120)) returned 1 [0091.168] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0091.168] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_cn\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_cn\\messages.json.xuy")) returned 1 [0091.169] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0091.169] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW", lpFilePart=0x0) returned 0x85 [0091.169] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW\\", lpFilePart=0x0) returned 0x86 [0091.169] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d75b0 [0091.169] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0091.170] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0091.170] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0091.170] FindClose (in: hFindFile=0x5d75b0 | out: hFindFile=0x5d75b0) returned 1 [0091.170] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0091.170] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0091.170] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0091.170] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW", lpFilePart=0x0) returned 0x85 [0091.170] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW\\", lpFilePart=0x0) returned 0x86 [0091.170] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7c70 [0091.171] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0091.171] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0091.171] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0091.171] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0091.171] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0091.171] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0091.171] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW\\messages.json", lpFilePart=0x0) returned 0x93 [0091.171] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0091.171] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_tw\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x222cd48 | out: lpFileInformation=0x222cd48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78993afe, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x78993a5e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x78bd656a, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x10b)) returned 1 [0091.171] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0091.171] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW\\messages.json", lpFilePart=0x0) returned 0x93 [0091.172] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0091.172] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_tw\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0091.172] GetFileType (hFile=0x444) returned 0x1 [0091.172] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0091.172] GetFileType (hFile=0x444) returned 0x1 [0091.172] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x10b [0091.172] ReadFile (in: hFile=0x444, lpBuffer=0x222d230, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x222d230*, lpNumberOfBytesRead=0x3be478*=0x10b, lpOverlapped=0x0) returned 1 [0091.173] CloseHandle (hObject=0x444) returned 1 [0091.183] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW\\messages.json", lpFilePart=0x0) returned 0x93 [0091.184] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0091.184] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_tw\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0091.185] GetFileType (hFile=0x444) returned 0x1 [0091.185] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0091.185] GetFileType (hFile=0x444) returned 0x1 [0091.186] WriteFile (in: hFile=0x444, lpBuffer=0x22a47f0*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x22a47f0*, lpNumberOfBytesWritten=0x3be388*=0x110, lpOverlapped=0x0) returned 1 [0091.186] CloseHandle (hObject=0x444) returned 1 [0091.186] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW\\messages.json", lpFilePart=0x0) returned 0x93 [0091.186] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW\\messages.json.xuy", lpFilePart=0x0) returned 0x97 [0091.187] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0091.187] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_tw\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78993afe, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x78993a5e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2233f6aa, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x110)) returned 1 [0091.187] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0091.187] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_tw\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_tw\\messages.json.xuy")) returned 1 [0091.188] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0091.188] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata", nBufferLength=0x105, lpBuffer=0x3be0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata", lpFilePart=0x0) returned 0x80 [0091.188] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\", nBufferLength=0x105, lpBuffer=0x3be060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\", lpFilePart=0x0) returned 0x81 [0091.188] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\*", lpFindFileData=0x3be270 | out: lpFindFileData=0x3be270) returned 0x5d7e50 [0091.191] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0091.191] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0091.191] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 0 [0091.191] FindClose (in: hFindFile=0x5d7e50 | out: hFindFile=0x5d7e50) returned 1 [0091.191] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0091.191] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0091.191] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0091.191] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata", nBufferLength=0x105, lpBuffer=0x3be0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata", lpFilePart=0x0) returned 0x80 [0091.191] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\", nBufferLength=0x105, lpBuffer=0x3be060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\", lpFilePart=0x0) returned 0x81 [0091.191] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\*", lpFindFileData=0x3be270 | out: lpFindFileData=0x3be270) returned 0x5d7670 [0091.192] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0091.192] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0091.192] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 0 [0091.192] FindClose (in: hFindFile=0x5d7670 | out: hFindFile=0x5d7670) returned 1 [0091.192] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0091.193] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0091.193] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\verified_contents.json", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\verified_contents.json", lpFilePart=0x0) returned 0x97 [0091.193] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0091.193] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\verified_contents.json"), fInfoLevelId=0x0, lpFileInformation=0x22a89b0 | out: lpFileInformation=0x22a89b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x789ac19d, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x789ac0fe, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0xd3d59700, ftLastWriteTime.dwHighDateTime=0x1d10aaf, nFileSizeHigh=0x0, nFileSizeLow=0x2bd5)) returned 1 [0091.193] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0091.193] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\verified_contents.json", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\verified_contents.json", lpFilePart=0x0) returned 0x97 [0091.193] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0091.193] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\verified_contents.json"), fInfoLevelId=0x0, lpFileInformation=0x22a8ba8 | out: lpFileInformation=0x22a8ba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x789ac19d, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x789ac0fe, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0xd3d59700, ftLastWriteTime.dwHighDateTime=0x1d10aaf, nFileSizeHigh=0x0, nFileSizeLow=0x2bd5)) returned 1 [0091.194] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0091.194] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\verified_contents.json", nBufferLength=0x105, lpBuffer=0x3bdfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\verified_contents.json", lpFilePart=0x0) returned 0x97 [0091.194] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0091.194] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\verified_contents.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0091.195] GetFileType (hFile=0x444) returned 0x1 [0091.195] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be420) returned 1 [0091.195] GetFileType (hFile=0x444) returned 0x1 [0091.195] ReadFile (in: hFile=0x444, lpBuffer=0x22ab0c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be538, lpOverlapped=0x0 | out: lpBuffer=0x22ab0c8*, lpNumberOfBytesRead=0x3be538*=0x1000, lpOverlapped=0x0) returned 1 [0091.222] CloseHandle (hObject=0x444) returned 1 [0091.222] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\verified_contents.json", nBufferLength=0x105, lpBuffer=0x3bdfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\verified_contents.json", lpFilePart=0x0) returned 0x97 [0091.222] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0091.222] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\verified_contents.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0091.223] GetFileType (hFile=0x444) returned 0x1 [0091.223] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be420) returned 1 [0091.223] GetFileType (hFile=0x444) returned 0x1 [0091.223] WriteFile (in: hFile=0x444, lpBuffer=0x22a8d80*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be5e8, lpOverlapped=0x0 | out: lpBuffer=0x22a8d80*, lpNumberOfBytesWritten=0x3be5e8*=0x2000, lpOverlapped=0x0) returned 1 [0091.223] CloseHandle (hObject=0x444) returned 1 [0091.223] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\verified_contents.json", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\verified_contents.json", lpFilePart=0x0) returned 0x97 [0091.223] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\verified_contents.json.xuy", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\verified_contents.json.xuy", lpFilePart=0x0) returned 0x9b [0091.224] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0091.224] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\verified_contents.json"), fInfoLevelId=0x0, lpFileInformation=0x3be600 | out: lpFileInformation=0x3be600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x789ac19d, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x789ac0fe, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2238b4a1, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2bd5)) returned 1 [0091.224] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0091.224] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\verified_contents.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\verified_contents.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\verified_contents.json.xuy")) returned 1 [0091.225] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0091.225] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo", lpFilePart=0x0) returned 0x6f [0091.225] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\", lpFilePart=0x0) returned 0x70 [0091.225] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d81b0 [0091.226] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0091.227] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0091.227] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0091.227] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0091.227] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0091.227] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0091.227] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0091.227] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo", lpFilePart=0x0) returned 0x6f [0091.227] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\", lpFilePart=0x0) returned 0x70 [0091.227] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d7550 [0091.227] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0091.228] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0091.228] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0091.228] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0091.228] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0091.228] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0091.228] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0091.228] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0", nBufferLength=0x105, lpBuffer=0x3be130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0", lpFilePart=0x0) returned 0x77 [0091.228] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\", nBufferLength=0x105, lpBuffer=0x3be0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\", lpFilePart=0x0) returned 0x78 [0091.228] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\*", lpFindFileData=0x3be2e0 | out: lpFindFileData=0x3be2e0) returned 0x5d7550 [0091.246] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0091.246] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0091.246] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0091.246] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0091.246] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0091.247] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 0 [0091.247] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0091.248] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0091.248] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0091.248] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0091.248] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0", nBufferLength=0x105, lpBuffer=0x3be130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0", lpFilePart=0x0) returned 0x77 [0091.248] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\", nBufferLength=0x105, lpBuffer=0x3be0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\", lpFilePart=0x0) returned 0x78 [0091.248] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\*", lpFindFileData=0x3be2e0 | out: lpFindFileData=0x3be2e0) returned 0x5d7d90 [0091.249] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0091.249] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0091.249] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0091.249] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0091.249] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0091.250] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 0 [0091.250] FindClose (in: hFindFile=0x5d7d90 | out: hFindFile=0x5d7d90) returned 1 [0091.250] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0091.250] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0091.251] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png", lpFilePart=0x0) returned 0x7f [0091.251] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0091.251] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png"), fInfoLevelId=0x0, lpFileInformation=0x232dbd0 | out: lpFileInformation=0x232dbd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78f1bc98, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x794fe3a5, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x794fe3a5, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xd4e)) returned 1 [0091.252] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0091.252] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png", lpFilePart=0x0) returned 0x7f [0091.252] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0091.252] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0091.252] GetFileType (hFile=0x444) returned 0x1 [0091.252] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be400) returned 1 [0091.252] GetFileType (hFile=0x444) returned 0x1 [0091.252] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be628 | out: lpFileSizeHigh=0x3be628*=0x0) returned 0xd4e [0091.252] ReadFile (in: hFile=0x444, lpBuffer=0x232ec88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be558, lpOverlapped=0x0 | out: lpBuffer=0x232ec88*, lpNumberOfBytesRead=0x3be558*=0xd4e, lpOverlapped=0x0) returned 1 [0091.259] CloseHandle (hObject=0x444) returned 1 [0091.312] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png", lpFilePart=0x0) returned 0x7f [0091.312] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0091.312] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0091.314] GetFileType (hFile=0x444) returned 0x1 [0091.314] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be400) returned 1 [0091.314] GetFileType (hFile=0x444) returned 0x1 [0091.314] WriteFile (in: hFile=0x444, lpBuffer=0x21abaf0*, nNumberOfBytesToWrite=0xd50, lpNumberOfBytesWritten=0x3be468, lpOverlapped=0x0 | out: lpBuffer=0x21abaf0*, lpNumberOfBytesWritten=0x3be468*=0xd50, lpOverlapped=0x0) returned 1 [0091.315] CloseHandle (hObject=0x444) returned 1 [0091.325] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png", lpFilePart=0x0) returned 0x7f [0091.325] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png.xuy", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png.xuy", lpFilePart=0x0) returned 0x83 [0091.325] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0091.325] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png"), fInfoLevelId=0x0, lpFileInformation=0x3be670 | out: lpFileInformation=0x3be670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78f1bc98, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x794fe3a5, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x22470202, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xd50)) returned 1 [0091.325] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0091.325] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png.xuy")) returned 1 [0091.327] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\manifest.json", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\manifest.json", lpFilePart=0x0) returned 0x85 [0091.327] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0091.327] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\manifest.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\manifest.json"), fInfoLevelId=0x0, lpFileInformation=0x21acea8 | out: lpFileInformation=0x21acea8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78f0ab22, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x79266122, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x794f6e7c, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x2d8)) returned 1 [0091.327] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0091.327] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\manifest.json", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\manifest.json", lpFilePart=0x0) returned 0x85 [0091.327] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0091.327] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\manifest.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\manifest.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0091.327] GetFileType (hFile=0x444) returned 0x1 [0091.327] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be400) returned 1 [0091.327] GetFileType (hFile=0x444) returned 0x1 [0091.328] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be628 | out: lpFileSizeHigh=0x3be628*=0x0) returned 0x2d8 [0091.328] ReadFile (in: hFile=0x444, lpBuffer=0x21ad528, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be558, lpOverlapped=0x0 | out: lpBuffer=0x21ad528*, lpNumberOfBytesRead=0x3be558*=0x2d8, lpOverlapped=0x0) returned 1 [0091.333] CloseHandle (hObject=0x444) returned 1 [0091.345] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\manifest.json", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\manifest.json", lpFilePart=0x0) returned 0x85 [0091.345] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0091.345] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\manifest.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\manifest.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0091.347] GetFileType (hFile=0x444) returned 0x1 [0091.347] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be400) returned 1 [0091.347] GetFileType (hFile=0x444) returned 0x1 [0091.347] WriteFile (in: hFile=0x444, lpBuffer=0x22253e0*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x3be468, lpOverlapped=0x0 | out: lpBuffer=0x22253e0*, lpNumberOfBytesWritten=0x3be468*=0x2e0, lpOverlapped=0x0) returned 1 [0091.348] CloseHandle (hObject=0x444) returned 1 [0091.348] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\manifest.json", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\manifest.json", lpFilePart=0x0) returned 0x85 [0091.348] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\manifest.json.xuy", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\manifest.json.xuy", lpFilePart=0x0) returned 0x89 [0091.348] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0091.348] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\manifest.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\manifest.json"), fInfoLevelId=0x0, lpFileInformation=0x3be670 | out: lpFileInformation=0x3be670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78f0ab22, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x79266122, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x224bc278, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2e0)) returned 1 [0091.349] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0091.349] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\manifest.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\manifest.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\manifest.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\manifest.json.xuy")) returned 1 [0091.350] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0091.350] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales", nBufferLength=0x105, lpBuffer=0x3be0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales", lpFilePart=0x0) returned 0x80 [0091.350] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\", nBufferLength=0x105, lpBuffer=0x3be060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\", lpFilePart=0x0) returned 0x81 [0091.350] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\*", lpFindFileData=0x3be270 | out: lpFindFileData=0x3be270) returned 0x5d7c70 [0091.370] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0091.370] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0091.371] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0091.371] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0091.371] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0091.371] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0091.371] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0091.371] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0091.371] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0091.371] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0091.372] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0091.372] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0091.372] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0091.372] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0091.372] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0091.372] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0091.373] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0091.373] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0091.373] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0091.373] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0091.374] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0091.374] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0091.374] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0091.374] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0091.374] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0091.374] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0091.374] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0091.374] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0091.375] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0091.375] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0091.375] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0091.375] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0091.375] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0091.375] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0091.375] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0091.375] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0091.375] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0091.376] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0091.376] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0091.376] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0091.376] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 0 [0091.376] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0091.377] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0091.377] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0091.377] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0091.377] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales", nBufferLength=0x105, lpBuffer=0x3be0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales", lpFilePart=0x0) returned 0x80 [0091.377] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\", nBufferLength=0x105, lpBuffer=0x3be060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\", lpFilePart=0x0) returned 0x81 [0091.377] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\*", lpFindFileData=0x3be270 | out: lpFindFileData=0x3be270) returned 0x5d7a30 [0091.378] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0091.378] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0091.378] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0091.378] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0091.378] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0091.378] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0091.378] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0091.379] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0091.379] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0091.379] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0091.379] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0091.379] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0091.379] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0091.379] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0091.379] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0091.379] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0091.379] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0091.379] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0091.380] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0091.380] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0091.380] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0091.380] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0091.380] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0091.380] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0091.380] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0091.380] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0091.380] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0091.380] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0091.381] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0091.381] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0091.381] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0091.381] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0091.381] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0091.381] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0091.381] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0091.381] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0091.381] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0091.381] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0091.381] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0091.382] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0091.382] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 0 [0091.382] FindClose (in: hFindFile=0x5d7a30 | out: hFindFile=0x5d7a30) returned 1 [0091.382] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0091.382] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0091.382] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0091.383] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar", lpFilePart=0x0) returned 0x83 [0091.383] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\", lpFilePart=0x0) returned 0x84 [0091.383] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d8090 [0091.384] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0091.384] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0091.384] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0091.384] FindClose (in: hFindFile=0x5d8090 | out: hFindFile=0x5d8090) returned 1 [0091.384] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0091.384] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0091.384] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0091.384] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar", lpFilePart=0x0) returned 0x83 [0091.384] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\", lpFilePart=0x0) returned 0x84 [0091.384] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7e50 [0091.384] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0091.384] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0091.384] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0091.385] FindClose (in: hFindFile=0x5d7e50 | out: hFindFile=0x5d7e50) returned 1 [0091.385] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0091.385] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0091.385] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\messages.json", lpFilePart=0x0) returned 0x91 [0091.385] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0091.385] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x2239400 | out: lpFileInformation=0x2239400*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78f2ce1b, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x78f31c22, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x79500aca, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1 [0091.385] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0091.385] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\messages.json", lpFilePart=0x0) returned 0x91 [0091.385] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0091.385] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0091.385] GetFileType (hFile=0x444) returned 0x1 [0091.385] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0091.385] GetFileType (hFile=0x444) returned 0x1 [0091.385] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xb3 [0091.385] ReadFile (in: hFile=0x444, lpBuffer=0x2239890, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x2239890*, lpNumberOfBytesRead=0x3be478*=0xb3, lpOverlapped=0x0) returned 1 [0091.387] CloseHandle (hObject=0x444) returned 1 [0091.398] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\messages.json", lpFilePart=0x0) returned 0x91 [0091.398] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0091.398] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0091.399] GetFileType (hFile=0x444) returned 0x1 [0091.399] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0091.399] GetFileType (hFile=0x444) returned 0x1 [0091.399] WriteFile (in: hFile=0x444, lpBuffer=0x22b0ba0*, nNumberOfBytesToWrite=0xc0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x22b0ba0*, lpNumberOfBytesWritten=0x3be388*=0xc0, lpOverlapped=0x0) returned 1 [0091.400] CloseHandle (hObject=0x444) returned 1 [0091.400] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\messages.json", lpFilePart=0x0) returned 0x91 [0091.400] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\messages.json.xuy", lpFilePart=0x0) returned 0x95 [0091.401] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0091.401] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78f2ce1b, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x78f31c22, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2252e915, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xc0)) returned 1 [0091.401] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0091.401] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\messages.json.xuy")) returned 1 [0091.402] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0091.402] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg", lpFilePart=0x0) returned 0x83 [0091.402] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\", lpFilePart=0x0) returned 0x84 [0091.402] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d78b0 [0091.402] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0091.402] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0091.402] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0091.402] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0091.402] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0091.403] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0091.403] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0091.403] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg", lpFilePart=0x0) returned 0x83 [0091.403] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\", lpFilePart=0x0) returned 0x84 [0091.403] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7d30 [0091.403] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0091.403] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0091.403] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0091.403] FindClose (in: hFindFile=0x5d7d30 | out: hFindFile=0x5d7d30) returned 1 [0091.403] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0091.403] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0091.403] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\messages.json", lpFilePart=0x0) returned 0x91 [0091.403] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0091.403] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x22b4dc0 | out: lpFileInformation=0x22b4dc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78f3b872, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x78f3df72, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x79500aca, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1 [0091.405] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0091.405] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\messages.json", lpFilePart=0x0) returned 0x91 [0091.405] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0091.405] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0091.405] GetFileType (hFile=0x444) returned 0x1 [0091.405] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0091.406] GetFileType (hFile=0x444) returned 0x1 [0091.406] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xb3 [0091.406] ReadFile (in: hFile=0x444, lpBuffer=0x22b5250, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x22b5250*, lpNumberOfBytesRead=0x3be478*=0xb3, lpOverlapped=0x0) returned 1 [0091.406] CloseHandle (hObject=0x444) returned 1 [0091.418] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\messages.json", lpFilePart=0x0) returned 0x91 [0091.418] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0091.418] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0091.420] GetFileType (hFile=0x444) returned 0x1 [0091.420] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0091.420] GetFileType (hFile=0x444) returned 0x1 [0091.420] WriteFile (in: hFile=0x444, lpBuffer=0x232c560*, nNumberOfBytesToWrite=0xc0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x232c560*, lpNumberOfBytesWritten=0x3be388*=0xc0, lpOverlapped=0x0) returned 1 [0091.421] CloseHandle (hObject=0x444) returned 1 [0091.421] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\messages.json", lpFilePart=0x0) returned 0x91 [0091.421] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\messages.json.xuy", lpFilePart=0x0) returned 0x95 [0091.421] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0091.421] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78f3b872, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x78f3df72, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2257ae30, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xc0)) returned 1 [0091.421] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0091.421] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\messages.json.xuy")) returned 1 [0091.422] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0091.422] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca", lpFilePart=0x0) returned 0x83 [0091.422] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\", lpFilePart=0x0) returned 0x84 [0091.422] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7fd0 [0091.423] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0091.423] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0091.423] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0091.423] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0091.423] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0091.423] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0091.423] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0091.423] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca", lpFilePart=0x0) returned 0x83 [0091.423] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\", lpFilePart=0x0) returned 0x84 [0091.423] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d78b0 [0091.423] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0091.424] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0091.424] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0091.424] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0091.424] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0091.424] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0091.424] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\messages.json", lpFilePart=0x0) returned 0x91 [0091.424] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0091.424] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x2330780 | out: lpFileInformation=0x2330780*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78f4a2df, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x78f4a2c2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x79500aca, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1 [0091.424] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0091.424] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\messages.json", lpFilePart=0x0) returned 0x91 [0091.424] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0091.424] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0091.425] GetFileType (hFile=0x444) returned 0x1 [0091.425] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0091.425] GetFileType (hFile=0x444) returned 0x1 [0091.425] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xb3 [0091.425] ReadFile (in: hFile=0x444, lpBuffer=0x2330c10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x2330c10*, lpNumberOfBytesRead=0x3be478*=0xb3, lpOverlapped=0x0) returned 1 [0091.426] CloseHandle (hObject=0x444) returned 1 [0091.493] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\messages.json", lpFilePart=0x0) returned 0x91 [0091.493] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0091.493] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0091.494] GetFileType (hFile=0x444) returned 0x1 [0091.494] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0091.494] GetFileType (hFile=0x444) returned 0x1 [0091.494] WriteFile (in: hFile=0x444, lpBuffer=0x21ad050*, nNumberOfBytesToWrite=0xc0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x21ad050*, lpNumberOfBytesWritten=0x3be388*=0xc0, lpOverlapped=0x0) returned 1 [0091.495] CloseHandle (hObject=0x444) returned 1 [0091.496] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\messages.json", lpFilePart=0x0) returned 0x91 [0091.496] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\messages.json.xuy", lpFilePart=0x0) returned 0x95 [0091.496] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0091.496] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78f4a2df, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x78f4a2c2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x22613b34, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xc0)) returned 1 [0091.496] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0091.496] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\messages.json.xuy")) returned 1 [0091.497] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0091.497] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs", lpFilePart=0x0) returned 0x83 [0091.497] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\", lpFilePart=0x0) returned 0x84 [0091.497] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d75b0 [0091.498] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0091.498] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0091.498] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0091.498] FindClose (in: hFindFile=0x5d75b0 | out: hFindFile=0x5d75b0) returned 1 [0091.498] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0091.498] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0091.498] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0091.498] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs", lpFilePart=0x0) returned 0x83 [0091.498] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\", lpFilePart=0x0) returned 0x84 [0091.498] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7550 [0091.499] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0091.499] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0091.499] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0091.499] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0091.499] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0091.499] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0091.499] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\messages.json", lpFilePart=0x0) returned 0x91 [0091.499] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0091.499] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x21b1270 | out: lpFileInformation=0x21b1270*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78f56630, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x78f58d22, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x79500aca, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1 [0091.500] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0091.501] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\messages.json", lpFilePart=0x0) returned 0x91 [0091.501] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0091.501] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0091.501] GetFileType (hFile=0x444) returned 0x1 [0091.501] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0091.501] GetFileType (hFile=0x444) returned 0x1 [0091.501] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xb3 [0091.501] ReadFile (in: hFile=0x444, lpBuffer=0x21b1700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x21b1700*, lpNumberOfBytesRead=0x3be478*=0xb3, lpOverlapped=0x0) returned 1 [0091.502] CloseHandle (hObject=0x444) returned 1 [0091.512] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\messages.json", lpFilePart=0x0) returned 0x91 [0091.512] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0091.512] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0091.513] GetFileType (hFile=0x444) returned 0x1 [0091.513] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0091.513] GetFileType (hFile=0x444) returned 0x1 [0091.514] WriteFile (in: hFile=0x444, lpBuffer=0x2228a10*, nNumberOfBytesToWrite=0xc0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x2228a10*, lpNumberOfBytesWritten=0x3be388*=0xc0, lpOverlapped=0x0) returned 1 [0091.514] CloseHandle (hObject=0x444) returned 1 [0091.514] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\messages.json", lpFilePart=0x0) returned 0x91 [0091.514] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\messages.json.xuy", lpFilePart=0x0) returned 0x95 [0091.514] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0091.514] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78f56630, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x78f58d22, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2266048a, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xc0)) returned 1 [0091.515] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0091.515] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\messages.json.xuy")) returned 1 [0091.516] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0091.516] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da", lpFilePart=0x0) returned 0x83 [0091.516] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\", lpFilePart=0x0) returned 0x84 [0091.516] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7d30 [0091.516] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0091.516] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0091.516] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0091.516] FindClose (in: hFindFile=0x5d7d30 | out: hFindFile=0x5d7d30) returned 1 [0091.516] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0091.516] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0091.516] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0091.516] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da", lpFilePart=0x0) returned 0x83 [0091.516] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\", lpFilePart=0x0) returned 0x84 [0091.517] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7370 [0091.517] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0091.517] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0091.517] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0091.517] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0091.517] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0091.517] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0091.517] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\messages.json", lpFilePart=0x0) returned 0x91 [0091.517] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0091.517] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x222cc30 | out: lpFileInformation=0x222cc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78f677aa, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x78f6c5a2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x795031cd, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1 [0091.517] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0091.518] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\messages.json", lpFilePart=0x0) returned 0x91 [0091.518] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0091.518] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0091.518] GetFileType (hFile=0x444) returned 0x1 [0091.518] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0091.518] GetFileType (hFile=0x444) returned 0x1 [0091.518] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xb3 [0091.518] ReadFile (in: hFile=0x444, lpBuffer=0x222d0c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x222d0c0*, lpNumberOfBytesRead=0x3be478*=0xb3, lpOverlapped=0x0) returned 1 [0091.519] CloseHandle (hObject=0x444) returned 1 [0091.530] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\messages.json", lpFilePart=0x0) returned 0x91 [0091.530] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0091.530] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0091.531] GetFileType (hFile=0x444) returned 0x1 [0091.531] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0091.531] GetFileType (hFile=0x444) returned 0x1 [0091.531] WriteFile (in: hFile=0x444, lpBuffer=0x22a43d0*, nNumberOfBytesToWrite=0xc0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x22a43d0*, lpNumberOfBytesWritten=0x3be388*=0xc0, lpOverlapped=0x0) returned 1 [0091.532] CloseHandle (hObject=0x444) returned 1 [0091.532] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\messages.json", lpFilePart=0x0) returned 0x91 [0091.532] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\messages.json.xuy", lpFilePart=0x0) returned 0x95 [0091.532] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0091.532] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78f677aa, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x78f6c5a2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x22685edc, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xc0)) returned 1 [0091.532] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0091.532] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\messages.json.xuy")) returned 1 [0091.533] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0091.533] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de", lpFilePart=0x0) returned 0x83 [0091.533] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\", lpFilePart=0x0) returned 0x84 [0091.533] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d78b0 [0091.533] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0091.534] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0091.534] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0091.534] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0091.534] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0091.534] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0091.534] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0091.534] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de", lpFilePart=0x0) returned 0x83 [0091.534] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\", lpFilePart=0x0) returned 0x84 [0091.534] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7fd0 [0091.534] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0091.534] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0091.534] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0091.535] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0091.535] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0091.535] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0091.535] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\messages.json", lpFilePart=0x0) returned 0x91 [0091.535] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0091.535] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x22a85f0 | out: lpFileInformation=0x22a85f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78f76204, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x78f761e2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x795031cd, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1 [0091.536] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0091.536] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\messages.json", lpFilePart=0x0) returned 0x91 [0091.536] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0091.536] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0091.536] GetFileType (hFile=0x444) returned 0x1 [0091.536] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0091.536] GetFileType (hFile=0x444) returned 0x1 [0091.537] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xb3 [0091.537] ReadFile (in: hFile=0x444, lpBuffer=0x22a8a80, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x22a8a80*, lpNumberOfBytesRead=0x3be478*=0xb3, lpOverlapped=0x0) returned 1 [0091.537] CloseHandle (hObject=0x444) returned 1 [0091.549] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\messages.json", lpFilePart=0x0) returned 0x91 [0091.549] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0091.550] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0091.551] GetFileType (hFile=0x444) returned 0x1 [0091.551] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0091.551] GetFileType (hFile=0x444) returned 0x1 [0091.551] WriteFile (in: hFile=0x444, lpBuffer=0x231fd90*, nNumberOfBytesToWrite=0xc0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x231fd90*, lpNumberOfBytesWritten=0x3be388*=0xc0, lpOverlapped=0x0) returned 1 [0091.552] CloseHandle (hObject=0x444) returned 1 [0091.552] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\messages.json", lpFilePart=0x0) returned 0x91 [0091.552] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\messages.json.xuy", lpFilePart=0x0) returned 0x95 [0091.552] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0091.552] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78f76204, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x78f761e2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x226ac0af, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xc0)) returned 1 [0091.552] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0091.552] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\messages.json.xuy")) returned 1 [0091.553] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0091.553] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el", lpFilePart=0x0) returned 0x83 [0091.553] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\", lpFilePart=0x0) returned 0x84 [0091.553] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7fd0 [0091.554] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0091.554] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0091.554] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0091.554] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0091.554] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0091.554] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0091.554] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0091.554] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el", lpFilePart=0x0) returned 0x83 [0091.554] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\", lpFilePart=0x0) returned 0x84 [0091.554] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d78b0 [0091.554] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0091.554] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0091.555] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0091.555] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0091.555] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0091.555] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0091.555] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\messages.json", lpFilePart=0x0) returned 0x91 [0091.555] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0091.555] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x2323fb0 | out: lpFileInformation=0x2323fb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78f8255e, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x78f84c42, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x795031cd, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1 [0091.555] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0091.555] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\messages.json", lpFilePart=0x0) returned 0x91 [0091.555] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0091.555] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0091.555] GetFileType (hFile=0x444) returned 0x1 [0091.555] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0091.555] GetFileType (hFile=0x444) returned 0x1 [0091.555] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xb3 [0091.555] ReadFile (in: hFile=0x444, lpBuffer=0x2324440, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x2324440*, lpNumberOfBytesRead=0x3be478*=0xb3, lpOverlapped=0x0) returned 1 [0091.558] CloseHandle (hObject=0x444) returned 1 [0091.603] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\messages.json", lpFilePart=0x0) returned 0x91 [0091.603] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0091.603] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0091.605] GetFileType (hFile=0x444) returned 0x1 [0091.605] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0091.605] GetFileType (hFile=0x444) returned 0x1 [0091.605] WriteFile (in: hFile=0x444, lpBuffer=0x219c098*, nNumberOfBytesToWrite=0xc0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x219c098*, lpNumberOfBytesWritten=0x3be388*=0xc0, lpOverlapped=0x0) returned 1 [0091.606] CloseHandle (hObject=0x444) returned 1 [0091.606] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\messages.json", lpFilePart=0x0) returned 0x91 [0091.606] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\messages.json.xuy", lpFilePart=0x0) returned 0x95 [0091.606] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0091.606] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78f8255e, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x78f84c42, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2271e7ce, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xc0)) returned 1 [0091.606] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0091.606] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\messages.json.xuy")) returned 1 [0091.608] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0091.609] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en", lpFilePart=0x0) returned 0x83 [0091.609] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\", lpFilePart=0x0) returned 0x84 [0091.609] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7a30 [0091.609] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0091.609] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0091.609] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0091.609] FindClose (in: hFindFile=0x5d7a30 | out: hFindFile=0x5d7a30) returned 1 [0091.610] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0091.610] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0091.610] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0091.610] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en", lpFilePart=0x0) returned 0x83 [0091.610] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\", lpFilePart=0x0) returned 0x84 [0091.610] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d79d0 [0091.610] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0091.610] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0091.610] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0091.611] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0091.611] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0091.611] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0091.611] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\messages.json", lpFilePart=0x0) returned 0x91 [0091.611] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0091.611] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x21a02b8 | out: lpFileInformation=0x21a02b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78f95de4, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x78f984c2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x795031cd, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1 [0091.613] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0091.613] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\messages.json", lpFilePart=0x0) returned 0x91 [0091.613] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0091.613] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0091.613] GetFileType (hFile=0x444) returned 0x1 [0091.613] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0091.613] GetFileType (hFile=0x444) returned 0x1 [0091.613] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xb3 [0091.613] ReadFile (in: hFile=0x444, lpBuffer=0x21a0748, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x21a0748*, lpNumberOfBytesRead=0x3be478*=0xb3, lpOverlapped=0x0) returned 1 [0091.614] CloseHandle (hObject=0x444) returned 1 [0091.625] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\messages.json", lpFilePart=0x0) returned 0x91 [0091.625] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0091.625] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0091.626] GetFileType (hFile=0x444) returned 0x1 [0091.626] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0091.626] GetFileType (hFile=0x444) returned 0x1 [0091.626] WriteFile (in: hFile=0x444, lpBuffer=0x2217a58*, nNumberOfBytesToWrite=0xc0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x2217a58*, lpNumberOfBytesWritten=0x3be388*=0xc0, lpOverlapped=0x0) returned 1 [0091.627] CloseHandle (hObject=0x444) returned 1 [0091.627] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\messages.json", lpFilePart=0x0) returned 0x91 [0091.627] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\messages.json.xuy", lpFilePart=0x0) returned 0x95 [0091.627] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0091.627] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78f95de4, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x78f984c2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2276b062, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xc0)) returned 1 [0091.627] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0091.628] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\messages.json.xuy")) returned 1 [0091.628] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0091.628] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es", lpFilePart=0x0) returned 0x83 [0091.629] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\", lpFilePart=0x0) returned 0x84 [0091.629] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d73d0 [0091.629] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0091.629] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0091.629] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0091.629] FindClose (in: hFindFile=0x5d73d0 | out: hFindFile=0x5d73d0) returned 1 [0091.629] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0091.629] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0091.629] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0091.629] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es", lpFilePart=0x0) returned 0x83 [0091.629] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\", lpFilePart=0x0) returned 0x84 [0091.629] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d73d0 [0091.630] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0091.630] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0091.630] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0091.630] FindClose (in: hFindFile=0x5d73d0 | out: hFindFile=0x5d73d0) returned 1 [0091.630] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0091.630] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0091.630] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\messages.json", lpFilePart=0x0) returned 0x91 [0091.630] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0091.630] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x221bc78 | out: lpFileInformation=0x221bc78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78fba7d4, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x78fbf5c2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x795031cd, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1 [0091.630] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0091.630] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\messages.json", lpFilePart=0x0) returned 0x91 [0091.630] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0091.631] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0091.631] GetFileType (hFile=0x444) returned 0x1 [0091.631] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0091.631] GetFileType (hFile=0x444) returned 0x1 [0091.631] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xb3 [0091.631] ReadFile (in: hFile=0x444, lpBuffer=0x221c108, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x221c108*, lpNumberOfBytesRead=0x3be478*=0xb3, lpOverlapped=0x0) returned 1 [0091.632] CloseHandle (hObject=0x444) returned 1 [0091.642] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\messages.json", lpFilePart=0x0) returned 0x91 [0091.643] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0091.643] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0091.644] GetFileType (hFile=0x444) returned 0x1 [0091.644] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0091.644] GetFileType (hFile=0x444) returned 0x1 [0091.644] WriteFile (in: hFile=0x444, lpBuffer=0x2293418*, nNumberOfBytesToWrite=0xc0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x2293418*, lpNumberOfBytesWritten=0x3be388*=0xc0, lpOverlapped=0x0) returned 1 [0091.645] CloseHandle (hObject=0x444) returned 1 [0091.645] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\messages.json", lpFilePart=0x0) returned 0x91 [0091.645] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\messages.json.xuy", lpFilePart=0x0) returned 0x95 [0091.645] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0091.645] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78fba7d4, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x78fbf5c2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x22790eea, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xc0)) returned 1 [0091.645] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0091.645] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\messages.json.xuy")) returned 1 [0091.646] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0091.646] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi", lpFilePart=0x0) returned 0x83 [0091.646] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\", lpFilePart=0x0) returned 0x84 [0091.646] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7af0 [0091.647] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0091.647] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0091.647] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0091.647] FindClose (in: hFindFile=0x5d7af0 | out: hFindFile=0x5d7af0) returned 1 [0091.647] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0091.647] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0091.647] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0091.647] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi", lpFilePart=0x0) returned 0x83 [0091.647] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\", lpFilePart=0x0) returned 0x84 [0091.647] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7c70 [0091.648] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0091.648] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0091.648] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0091.648] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0091.648] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0091.648] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0091.648] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\messages.json", lpFilePart=0x0) returned 0x91 [0091.648] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0091.648] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x2297638 | out: lpFileInformation=0x2297638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78fd0773, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x78fd0732, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x795058dd, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1 [0091.649] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0091.649] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\messages.json", lpFilePart=0x0) returned 0x91 [0091.649] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0091.649] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0091.650] GetFileType (hFile=0x444) returned 0x1 [0091.650] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0091.650] GetFileType (hFile=0x444) returned 0x1 [0091.650] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xb3 [0091.650] ReadFile (in: hFile=0x444, lpBuffer=0x2297ac8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x2297ac8*, lpNumberOfBytesRead=0x3be478*=0xb3, lpOverlapped=0x0) returned 1 [0091.651] CloseHandle (hObject=0x444) returned 1 [0091.661] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\messages.json", lpFilePart=0x0) returned 0x91 [0091.661] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0091.661] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0091.662] GetFileType (hFile=0x444) returned 0x1 [0091.662] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0091.662] GetFileType (hFile=0x444) returned 0x1 [0091.663] WriteFile (in: hFile=0x444, lpBuffer=0x230edd8*, nNumberOfBytesToWrite=0xc0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x230edd8*, lpNumberOfBytesWritten=0x3be388*=0xc0, lpOverlapped=0x0) returned 1 [0091.663] CloseHandle (hObject=0x444) returned 1 [0091.663] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\messages.json", lpFilePart=0x0) returned 0x91 [0091.663] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\messages.json.xuy", lpFilePart=0x0) returned 0x95 [0091.664] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0091.664] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78fd0773, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x78fd0732, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x227b70b8, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xc0)) returned 1 [0091.664] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0091.664] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\messages.json.xuy")) returned 1 [0091.665] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0091.665] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil", lpFilePart=0x0) returned 0x84 [0091.665] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\", lpFilePart=0x0) returned 0x85 [0091.665] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7370 [0091.665] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0091.665] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0091.665] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0091.665] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0091.665] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0091.665] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0091.665] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0091.665] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil", lpFilePart=0x0) returned 0x84 [0091.665] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\", lpFilePart=0x0) returned 0x85 [0091.665] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7a90 [0091.666] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0091.666] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0091.666] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0091.666] FindClose (in: hFindFile=0x5d7a90 | out: hFindFile=0x5d7a90) returned 1 [0091.666] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0091.666] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0091.666] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\messages.json", lpFilePart=0x0) returned 0x92 [0091.666] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0091.666] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x2313018 | out: lpFileInformation=0x2313018*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78fe3ff2, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x78fe66c2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x795058dd, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1 [0091.666] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0091.667] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\messages.json", lpFilePart=0x0) returned 0x92 [0091.667] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0091.667] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0091.667] GetFileType (hFile=0x444) returned 0x1 [0091.667] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0091.667] GetFileType (hFile=0x444) returned 0x1 [0091.667] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xb3 [0091.667] ReadFile (in: hFile=0x444, lpBuffer=0x23134a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x23134a8*, lpNumberOfBytesRead=0x3be478*=0xb3, lpOverlapped=0x0) returned 1 [0091.668] CloseHandle (hObject=0x444) returned 1 [0091.710] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\messages.json", lpFilePart=0x0) returned 0x92 [0091.710] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0091.710] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0091.711] GetFileType (hFile=0x444) returned 0x1 [0091.711] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0091.711] GetFileType (hFile=0x444) returned 0x1 [0091.711] WriteFile (in: hFile=0x444, lpBuffer=0x218a7c8*, nNumberOfBytesToWrite=0xc0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x218a7c8*, lpNumberOfBytesWritten=0x3be388*=0xc0, lpOverlapped=0x0) returned 1 [0091.712] CloseHandle (hObject=0x444) returned 1 [0091.713] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\messages.json", lpFilePart=0x0) returned 0x92 [0091.713] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\messages.json.xuy", lpFilePart=0x0) returned 0x96 [0091.713] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0091.713] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78fe3ff2, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x78fe66c2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x228298bf, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xc0)) returned 1 [0091.713] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0091.713] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\messages.json.xuy")) returned 1 [0091.714] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0091.714] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr", lpFilePart=0x0) returned 0x83 [0091.714] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\", lpFilePart=0x0) returned 0x84 [0091.714] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d78b0 [0091.714] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0091.714] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0091.714] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0091.715] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0091.715] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0091.715] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0091.715] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0091.715] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr", lpFilePart=0x0) returned 0x83 [0091.715] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\", lpFilePart=0x0) returned 0x84 [0091.715] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d81b0 [0091.715] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0091.715] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0091.715] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0091.715] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0091.715] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0091.715] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0091.716] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\messages.json", lpFilePart=0x0) returned 0x91 [0091.716] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0091.716] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x218e9e8 | out: lpFileInformation=0x218e9e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78ff0334, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x78ff2a12, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x795058dd, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1 [0091.717] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0091.717] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\messages.json", lpFilePart=0x0) returned 0x91 [0091.718] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0091.718] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0091.718] GetFileType (hFile=0x444) returned 0x1 [0091.718] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0091.718] GetFileType (hFile=0x444) returned 0x1 [0091.718] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xb3 [0091.718] ReadFile (in: hFile=0x444, lpBuffer=0x218ee78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x218ee78*, lpNumberOfBytesRead=0x3be478*=0xb3, lpOverlapped=0x0) returned 1 [0091.719] CloseHandle (hObject=0x444) returned 1 [0091.729] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\messages.json", lpFilePart=0x0) returned 0x91 [0091.729] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0091.729] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0091.731] GetFileType (hFile=0x444) returned 0x1 [0091.731] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0091.731] GetFileType (hFile=0x444) returned 0x1 [0091.731] WriteFile (in: hFile=0x444, lpBuffer=0x2206188*, nNumberOfBytesToWrite=0xc0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x2206188*, lpNumberOfBytesWritten=0x3be388*=0xc0, lpOverlapped=0x0) returned 1 [0091.732] CloseHandle (hObject=0x444) returned 1 [0091.733] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\messages.json", lpFilePart=0x0) returned 0x91 [0091.733] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\messages.json.xuy", lpFilePart=0x0) returned 0x95 [0091.733] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0091.733] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78ff0334, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x78ff2a12, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x22875cfe, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xc0)) returned 1 [0091.733] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0091.733] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\messages.json.xuy")) returned 1 [0091.734] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0091.734] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he", lpFilePart=0x0) returned 0x83 [0091.734] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\", lpFilePart=0x0) returned 0x84 [0091.734] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d79d0 [0091.734] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0091.735] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0091.735] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0091.735] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0091.735] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0091.735] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0091.735] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0091.735] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he", lpFilePart=0x0) returned 0x83 [0091.735] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\", lpFilePart=0x0) returned 0x84 [0091.735] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7eb0 [0091.735] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0091.735] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0091.736] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0091.736] FindClose (in: hFindFile=0x5d7eb0 | out: hFindFile=0x5d7eb0) returned 1 [0091.736] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0091.736] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0091.736] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\messages.json", lpFilePart=0x0) returned 0x91 [0091.736] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0091.736] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x220a3a8 | out: lpFileInformation=0x220a3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78ffc69d, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x78ffc652, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x795058dd, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1 [0091.736] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0091.736] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\messages.json", lpFilePart=0x0) returned 0x91 [0091.736] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0091.736] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0091.736] GetFileType (hFile=0x444) returned 0x1 [0091.736] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0091.736] GetFileType (hFile=0x444) returned 0x1 [0091.736] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xb3 [0091.737] ReadFile (in: hFile=0x444, lpBuffer=0x220a838, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x220a838*, lpNumberOfBytesRead=0x3be478*=0xb3, lpOverlapped=0x0) returned 1 [0091.737] CloseHandle (hObject=0x444) returned 1 [0091.748] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\messages.json", lpFilePart=0x0) returned 0x91 [0091.748] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0091.748] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0091.749] GetFileType (hFile=0x444) returned 0x1 [0091.749] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0091.749] GetFileType (hFile=0x444) returned 0x1 [0091.750] WriteFile (in: hFile=0x444, lpBuffer=0x2281b48*, nNumberOfBytesToWrite=0xc0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x2281b48*, lpNumberOfBytesWritten=0x3be388*=0xc0, lpOverlapped=0x0) returned 1 [0091.750] CloseHandle (hObject=0x444) returned 1 [0091.750] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\messages.json", lpFilePart=0x0) returned 0x91 [0091.750] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\messages.json.xuy", lpFilePart=0x0) returned 0x95 [0091.750] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0091.751] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78ffc69d, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x78ffc652, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2289c06f, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xc0)) returned 1 [0091.751] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0091.751] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\messages.json.xuy")) returned 1 [0091.752] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0091.752] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi", lpFilePart=0x0) returned 0x83 [0091.752] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\", lpFilePart=0x0) returned 0x84 [0091.752] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d81b0 [0091.752] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0091.752] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0091.752] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0091.752] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0091.752] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0091.752] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0091.753] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0091.753] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi", lpFilePart=0x0) returned 0x83 [0091.753] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\", lpFilePart=0x0) returned 0x84 [0091.753] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d79d0 [0091.753] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0091.753] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0091.753] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0091.753] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0091.753] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0091.753] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0091.753] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\messages.json", lpFilePart=0x0) returned 0x91 [0091.753] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0091.754] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x2285d68 | out: lpFileInformation=0x2285d68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7900ff23, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7900fed2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x795058dd, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1 [0091.755] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0091.755] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\messages.json", lpFilePart=0x0) returned 0x91 [0091.755] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0091.755] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0091.755] GetFileType (hFile=0x444) returned 0x1 [0091.756] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0091.756] GetFileType (hFile=0x444) returned 0x1 [0091.756] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xb3 [0091.756] ReadFile (in: hFile=0x444, lpBuffer=0x22861f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x22861f8*, lpNumberOfBytesRead=0x3be478*=0xb3, lpOverlapped=0x0) returned 1 [0091.756] CloseHandle (hObject=0x444) returned 1 [0091.767] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\messages.json", lpFilePart=0x0) returned 0x91 [0091.767] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0091.767] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0091.769] GetFileType (hFile=0x444) returned 0x1 [0091.769] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0091.769] GetFileType (hFile=0x444) returned 0x1 [0091.769] WriteFile (in: hFile=0x444, lpBuffer=0x22fd508*, nNumberOfBytesToWrite=0xc0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x22fd508*, lpNumberOfBytesWritten=0x3be388*=0xc0, lpOverlapped=0x0) returned 1 [0091.770] CloseHandle (hObject=0x444) returned 1 [0091.770] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\messages.json", lpFilePart=0x0) returned 0x91 [0091.770] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\messages.json.xuy", lpFilePart=0x0) returned 0x95 [0091.770] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0091.770] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7900ff23, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7900fed2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x228c2574, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xc0)) returned 1 [0091.770] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0091.770] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\messages.json.xuy")) returned 1 [0091.771] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0091.771] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr", lpFilePart=0x0) returned 0x83 [0091.771] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\", lpFilePart=0x0) returned 0x84 [0091.771] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7d90 [0091.771] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0091.772] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0091.772] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0091.772] FindClose (in: hFindFile=0x5d7d90 | out: hFindFile=0x5d7d90) returned 1 [0091.772] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0091.772] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0091.772] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0091.772] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr", lpFilePart=0x0) returned 0x83 [0091.772] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\", lpFilePart=0x0) returned 0x84 [0091.772] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7af0 [0091.772] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0091.772] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0091.773] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0091.773] FindClose (in: hFindFile=0x5d7af0 | out: hFindFile=0x5d7af0) returned 1 [0091.773] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0091.773] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0091.773] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\messages.json", lpFilePart=0x0) returned 0x91 [0091.773] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0091.773] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x2301728 | out: lpFileInformation=0x2301728*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7901e987, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7901e932, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7950ce05, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1 [0091.773] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0091.773] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\messages.json", lpFilePart=0x0) returned 0x91 [0091.773] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0091.773] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0091.773] GetFileType (hFile=0x444) returned 0x1 [0091.773] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0091.773] GetFileType (hFile=0x444) returned 0x1 [0091.773] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xb3 [0091.773] ReadFile (in: hFile=0x444, lpBuffer=0x2301bb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x2301bb8*, lpNumberOfBytesRead=0x3be478*=0xb3, lpOverlapped=0x0) returned 1 [0091.774] CloseHandle (hObject=0x444) returned 1 [0091.817] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\messages.json", lpFilePart=0x0) returned 0x91 [0091.817] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0091.817] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0091.819] GetFileType (hFile=0x444) returned 0x1 [0091.819] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0091.819] GetFileType (hFile=0x444) returned 0x1 [0091.819] WriteFile (in: hFile=0x444, lpBuffer=0x2178ed0*, nNumberOfBytesToWrite=0xc0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x2178ed0*, lpNumberOfBytesWritten=0x3be388*=0xc0, lpOverlapped=0x0) returned 1 [0091.820] CloseHandle (hObject=0x444) returned 1 [0091.820] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\messages.json", lpFilePart=0x0) returned 0x91 [0091.820] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\messages.json.xuy", lpFilePart=0x0) returned 0x95 [0091.821] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0091.821] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7901e987, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7901e932, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x229348b1, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xc0)) returned 1 [0091.821] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0091.821] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\messages.json.xuy")) returned 1 [0091.822] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0091.822] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu", lpFilePart=0x0) returned 0x83 [0091.822] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\", lpFilePart=0x0) returned 0x84 [0091.822] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d78b0 [0091.823] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0091.823] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0091.823] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0091.823] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0091.823] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0091.823] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0091.823] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0091.823] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu", lpFilePart=0x0) returned 0x83 [0091.823] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\", lpFilePart=0x0) returned 0x84 [0091.823] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7370 [0091.823] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0091.824] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0091.824] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0091.824] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0091.824] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0091.824] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0091.824] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\messages.json", lpFilePart=0x0) returned 0x91 [0091.824] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0091.824] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x217d0f0 | out: lpFileInformation=0x217d0f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x790321fa, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x790348c2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7950ce05, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1 [0091.826] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0091.826] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\messages.json", lpFilePart=0x0) returned 0x91 [0091.826] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0091.826] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0091.827] GetFileType (hFile=0x444) returned 0x1 [0091.827] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0091.827] GetFileType (hFile=0x444) returned 0x1 [0091.827] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xb3 [0091.827] ReadFile (in: hFile=0x444, lpBuffer=0x217d580, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x217d580*, lpNumberOfBytesRead=0x3be478*=0xb3, lpOverlapped=0x0) returned 1 [0091.828] CloseHandle (hObject=0x444) returned 1 [0091.839] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\messages.json", lpFilePart=0x0) returned 0x91 [0091.839] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0091.839] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0091.842] GetFileType (hFile=0x444) returned 0x1 [0091.842] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0091.842] GetFileType (hFile=0x444) returned 0x1 [0091.842] WriteFile (in: hFile=0x444, lpBuffer=0x21f4890*, nNumberOfBytesToWrite=0xc0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x21f4890*, lpNumberOfBytesWritten=0x3be388*=0xc0, lpOverlapped=0x0) returned 1 [0091.843] CloseHandle (hObject=0x444) returned 1 [0091.844] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\messages.json", lpFilePart=0x0) returned 0x91 [0091.844] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\messages.json.xuy", lpFilePart=0x0) returned 0x95 [0091.844] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0091.844] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x790321fa, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x790348c2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x22981064, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xc0)) returned 1 [0091.844] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0091.844] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\messages.json.xuy")) returned 1 [0091.845] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0091.845] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id", lpFilePart=0x0) returned 0x83 [0091.845] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\", lpFilePart=0x0) returned 0x84 [0091.845] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d78b0 [0091.846] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0091.846] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0091.846] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0091.846] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0091.846] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0091.846] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0091.846] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0091.846] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id", lpFilePart=0x0) returned 0x83 [0091.846] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\", lpFilePart=0x0) returned 0x84 [0091.847] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7370 [0091.847] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0091.847] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0091.847] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0091.847] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0091.847] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0091.847] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0091.847] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\messages.json", lpFilePart=0x0) returned 0x91 [0091.847] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0091.847] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x21f8ab0 | out: lpFileInformation=0x21f8ab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7904cfb8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x79054492, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7950ce05, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1 [0091.848] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0091.848] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\messages.json", lpFilePart=0x0) returned 0x91 [0091.848] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0091.848] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0091.848] GetFileType (hFile=0x444) returned 0x1 [0091.848] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0091.848] GetFileType (hFile=0x444) returned 0x1 [0091.848] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xb3 [0091.848] ReadFile (in: hFile=0x444, lpBuffer=0x21f8f40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x21f8f40*, lpNumberOfBytesRead=0x3be478*=0xb3, lpOverlapped=0x0) returned 1 [0091.849] CloseHandle (hObject=0x444) returned 1 [0091.862] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\messages.json", lpFilePart=0x0) returned 0x91 [0091.862] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0091.862] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0091.864] GetFileType (hFile=0x444) returned 0x1 [0091.864] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0091.864] GetFileType (hFile=0x444) returned 0x1 [0091.864] WriteFile (in: hFile=0x444, lpBuffer=0x2270250*, nNumberOfBytesToWrite=0xc0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x2270250*, lpNumberOfBytesWritten=0x3be388*=0xc0, lpOverlapped=0x0) returned 1 [0091.865] CloseHandle (hObject=0x444) returned 1 [0091.865] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\messages.json", lpFilePart=0x0) returned 0x91 [0091.865] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\messages.json.xuy", lpFilePart=0x0) returned 0x95 [0091.865] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0091.865] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7904cfb8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x79054492, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x229a71a8, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xc0)) returned 1 [0091.866] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0091.866] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\messages.json.xuy")) returned 1 [0091.867] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0091.867] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it", lpFilePart=0x0) returned 0x83 [0091.867] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\", lpFilePart=0x0) returned 0x84 [0091.867] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7fd0 [0091.867] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0091.867] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0091.868] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0091.868] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0091.868] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0091.868] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0091.868] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0091.868] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it", lpFilePart=0x0) returned 0x83 [0091.868] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\", lpFilePart=0x0) returned 0x84 [0091.868] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d79d0 [0091.868] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0091.868] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0091.869] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0091.869] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0091.869] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0091.869] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0091.869] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\messages.json", lpFilePart=0x0) returned 0x91 [0091.869] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0091.869] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x2274470 | out: lpFileInformation=0x2274470*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79060838, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x79062ef2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7950ce05, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1 [0091.870] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0091.870] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\messages.json", lpFilePart=0x0) returned 0x91 [0091.871] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0091.871] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0091.871] GetFileType (hFile=0x444) returned 0x1 [0091.871] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0091.871] GetFileType (hFile=0x444) returned 0x1 [0091.871] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xb3 [0091.871] ReadFile (in: hFile=0x444, lpBuffer=0x2274900, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x2274900*, lpNumberOfBytesRead=0x3be478*=0xb3, lpOverlapped=0x0) returned 1 [0091.872] CloseHandle (hObject=0x444) returned 1 [0091.887] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\messages.json", lpFilePart=0x0) returned 0x91 [0091.887] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0091.887] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0091.889] GetFileType (hFile=0x444) returned 0x1 [0091.889] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0091.889] GetFileType (hFile=0x444) returned 0x1 [0091.889] WriteFile (in: hFile=0x444, lpBuffer=0x22ebc10*, nNumberOfBytesToWrite=0xc0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x22ebc10*, lpNumberOfBytesWritten=0x3be388*=0xc0, lpOverlapped=0x0) returned 1 [0091.890] CloseHandle (hObject=0x444) returned 1 [0091.891] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\messages.json", lpFilePart=0x0) returned 0x91 [0091.891] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\messages.json.xuy", lpFilePart=0x0) returned 0x95 [0091.891] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0091.891] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79060838, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x79062ef2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x229f3580, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xc0)) returned 1 [0091.891] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0091.891] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\messages.json.xuy")) returned 1 [0091.892] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0091.892] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja", lpFilePart=0x0) returned 0x83 [0091.892] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\", lpFilePart=0x0) returned 0x84 [0091.892] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7550 [0091.893] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0091.893] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0091.893] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0091.893] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0091.893] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0091.893] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0091.893] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0091.893] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja", lpFilePart=0x0) returned 0x83 [0091.893] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\", lpFilePart=0x0) returned 0x84 [0091.894] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7a30 [0091.894] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0091.894] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0091.894] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0091.894] FindClose (in: hFindFile=0x5d7a30 | out: hFindFile=0x5d7a30) returned 1 [0091.894] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0091.894] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0091.894] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\messages.json", lpFilePart=0x0) returned 0x91 [0091.894] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0091.895] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x22efe30 | out: lpFileInformation=0x22efe30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79091588, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x79091522, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7950f52a, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1 [0091.895] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0091.895] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\messages.json", lpFilePart=0x0) returned 0x91 [0091.895] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0091.895] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0091.895] GetFileType (hFile=0x444) returned 0x1 [0091.895] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0091.895] GetFileType (hFile=0x444) returned 0x1 [0091.895] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xb3 [0091.895] ReadFile (in: hFile=0x444, lpBuffer=0x22f02c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x22f02c0*, lpNumberOfBytesRead=0x3be478*=0xb3, lpOverlapped=0x0) returned 1 [0091.897] CloseHandle (hObject=0x444) returned 1 [0091.942] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\messages.json", lpFilePart=0x0) returned 0x91 [0091.942] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0091.942] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0091.944] GetFileType (hFile=0x444) returned 0x1 [0091.944] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0091.944] GetFileType (hFile=0x444) returned 0x1 [0091.944] WriteFile (in: hFile=0x444, lpBuffer=0x21675b0*, nNumberOfBytesToWrite=0xc0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x21675b0*, lpNumberOfBytesWritten=0x3be388*=0xc0, lpOverlapped=0x0) returned 1 [0091.945] CloseHandle (hObject=0x444) returned 1 [0091.945] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\messages.json", lpFilePart=0x0) returned 0x91 [0091.945] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\messages.json.xuy", lpFilePart=0x0) returned 0x95 [0091.945] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0091.946] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79091588, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x79091522, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x22a65caf, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xc0)) returned 1 [0091.946] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0091.946] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\messages.json.xuy")) returned 1 [0091.947] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0091.947] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko", lpFilePart=0x0) returned 0x83 [0091.947] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\", lpFilePart=0x0) returned 0x84 [0091.947] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d81b0 [0091.947] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0091.947] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0091.948] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0091.948] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0091.948] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0091.948] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0091.948] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0091.948] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko", lpFilePart=0x0) returned 0x83 [0091.948] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\", lpFilePart=0x0) returned 0x84 [0091.948] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d78b0 [0091.948] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0091.948] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0091.949] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0091.949] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0091.949] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0091.949] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0091.949] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\messages.json", lpFilePart=0x0) returned 0x91 [0091.949] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0091.949] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x216b7d0 | out: lpFileInformation=0x216b7d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x790a4e14, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x790a74b2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7950f52a, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1 [0091.969] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0091.969] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\messages.json", lpFilePart=0x0) returned 0x91 [0091.969] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0091.969] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0091.970] GetFileType (hFile=0x444) returned 0x1 [0091.970] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0091.970] GetFileType (hFile=0x444) returned 0x1 [0091.970] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xb3 [0091.970] ReadFile (in: hFile=0x444, lpBuffer=0x216bc60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x216bc60*, lpNumberOfBytesRead=0x3be478*=0xb3, lpOverlapped=0x0) returned 1 [0091.971] CloseHandle (hObject=0x444) returned 1 [0091.988] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\messages.json", lpFilePart=0x0) returned 0x91 [0091.988] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0091.988] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0091.990] GetFileType (hFile=0x444) returned 0x1 [0091.990] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0091.990] GetFileType (hFile=0x444) returned 0x1 [0091.990] WriteFile (in: hFile=0x444, lpBuffer=0x21e2f70*, nNumberOfBytesToWrite=0xc0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x21e2f70*, lpNumberOfBytesWritten=0x3be388*=0xc0, lpOverlapped=0x0) returned 1 [0091.991] CloseHandle (hObject=0x444) returned 1 [0091.991] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\messages.json", lpFilePart=0x0) returned 0x91 [0091.991] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\messages.json.xuy", lpFilePart=0x0) returned 0x95 [0091.991] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0091.991] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x790a4e14, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x790a74b2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x22ad872f, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xc0)) returned 1 [0091.991] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0091.991] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\messages.json.xuy")) returned 1 [0091.993] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0091.993] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt", lpFilePart=0x0) returned 0x83 [0091.993] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\", lpFilePart=0x0) returned 0x84 [0091.993] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7fd0 [0091.993] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0091.993] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0091.993] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0091.994] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0091.994] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0091.994] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0091.994] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0091.994] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt", lpFilePart=0x0) returned 0x83 [0091.994] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\", lpFilePart=0x0) returned 0x84 [0091.994] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7670 [0091.994] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0091.994] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0091.994] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0091.994] FindClose (in: hFindFile=0x5d7670 | out: hFindFile=0x5d7670) returned 1 [0091.995] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0091.995] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0091.995] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\messages.json", lpFilePart=0x0) returned 0x91 [0091.995] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0091.995] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x21e7190 | out: lpFileInformation=0x21e7190*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x790b5fe5, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x790b5f12, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7950f52a, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1 [0091.995] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0091.995] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\messages.json", lpFilePart=0x0) returned 0x91 [0091.995] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0091.995] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0091.995] GetFileType (hFile=0x444) returned 0x1 [0091.995] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0091.995] GetFileType (hFile=0x444) returned 0x1 [0091.995] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xb3 [0091.995] ReadFile (in: hFile=0x444, lpBuffer=0x21e7620, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x21e7620*, lpNumberOfBytesRead=0x3be478*=0xb3, lpOverlapped=0x0) returned 1 [0092.002] CloseHandle (hObject=0x444) returned 1 [0092.014] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\messages.json", lpFilePart=0x0) returned 0x91 [0092.014] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0092.014] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0092.015] GetFileType (hFile=0x444) returned 0x1 [0092.015] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0092.016] GetFileType (hFile=0x444) returned 0x1 [0092.016] WriteFile (in: hFile=0x444, lpBuffer=0x225e930*, nNumberOfBytesToWrite=0xc0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x225e930*, lpNumberOfBytesWritten=0x3be388*=0xc0, lpOverlapped=0x0) returned 1 [0092.016] CloseHandle (hObject=0x444) returned 1 [0092.017] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\messages.json", lpFilePart=0x0) returned 0x91 [0092.017] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\messages.json.xuy", lpFilePart=0x0) returned 0x95 [0092.017] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0092.017] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x790b5fe5, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x790b5f12, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x22b2477d, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xc0)) returned 1 [0092.017] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0092.017] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\messages.json.xuy")) returned 1 [0092.018] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0092.018] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv", lpFilePart=0x0) returned 0x83 [0092.018] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\", lpFilePart=0x0) returned 0x84 [0092.018] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7a90 [0092.018] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0092.019] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0092.019] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0092.019] FindClose (in: hFindFile=0x5d7a90 | out: hFindFile=0x5d7a90) returned 1 [0092.019] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0092.019] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0092.019] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0092.019] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv", lpFilePart=0x0) returned 0x83 [0092.019] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\", lpFilePart=0x0) returned 0x84 [0092.019] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d81b0 [0092.019] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0092.019] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0092.019] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0092.020] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0092.020] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0092.020] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0092.020] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\messages.json", lpFilePart=0x0) returned 0x91 [0092.020] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0092.020] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x2262b50 | out: lpFileInformation=0x2262b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x790bfbcc, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x790c7082, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7950f52a, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1 [0092.021] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0092.021] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\messages.json", lpFilePart=0x0) returned 0x91 [0092.021] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0092.021] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0092.021] GetFileType (hFile=0x444) returned 0x1 [0092.021] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0092.021] GetFileType (hFile=0x444) returned 0x1 [0092.022] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xb3 [0092.022] ReadFile (in: hFile=0x444, lpBuffer=0x2262fe0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x2262fe0*, lpNumberOfBytesRead=0x3be478*=0xb3, lpOverlapped=0x0) returned 1 [0092.022] CloseHandle (hObject=0x444) returned 1 [0092.034] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\messages.json", lpFilePart=0x0) returned 0x91 [0092.034] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0092.034] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0092.035] GetFileType (hFile=0x444) returned 0x1 [0092.035] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0092.035] GetFileType (hFile=0x444) returned 0x1 [0092.035] WriteFile (in: hFile=0x444, lpBuffer=0x22da2f0*, nNumberOfBytesToWrite=0xc0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x22da2f0*, lpNumberOfBytesWritten=0x3be388*=0xc0, lpOverlapped=0x0) returned 1 [0092.036] CloseHandle (hObject=0x444) returned 1 [0092.036] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\messages.json", lpFilePart=0x0) returned 0x91 [0092.036] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\messages.json.xuy", lpFilePart=0x0) returned 0x95 [0092.036] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0092.036] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x790bfbcc, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x790c7082, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x22b4a946, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xc0)) returned 1 [0092.037] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0092.037] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\messages.json.xuy")) returned 1 [0092.038] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0092.038] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl", lpFilePart=0x0) returned 0x83 [0092.038] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\", lpFilePart=0x0) returned 0x84 [0092.038] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7c70 [0092.038] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0092.039] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0092.039] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0092.039] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0092.039] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0092.039] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0092.039] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0092.039] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl", lpFilePart=0x0) returned 0x83 [0092.039] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\", lpFilePart=0x0) returned 0x84 [0092.039] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7c70 [0092.040] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0092.040] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0092.040] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0092.040] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0092.040] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0092.040] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0092.040] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\messages.json", lpFilePart=0x0) returned 0x91 [0092.040] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0092.040] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x22de510 | out: lpFileInformation=0x22de510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x790d5b5e, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x790d81f2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7950f52a, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1 [0092.041] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0092.041] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\messages.json", lpFilePart=0x0) returned 0x91 [0092.041] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0092.041] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0092.041] GetFileType (hFile=0x444) returned 0x1 [0092.041] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0092.041] GetFileType (hFile=0x444) returned 0x1 [0092.041] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xb3 [0092.041] ReadFile (in: hFile=0x444, lpBuffer=0x22de9a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x22de9a0*, lpNumberOfBytesRead=0x3be478*=0xb3, lpOverlapped=0x0) returned 1 [0092.043] CloseHandle (hObject=0x444) returned 1 [0092.061] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\messages.json", lpFilePart=0x0) returned 0x91 [0092.061] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0092.061] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0092.062] GetFileType (hFile=0x444) returned 0x1 [0092.062] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0092.062] GetFileType (hFile=0x444) returned 0x1 [0092.062] WriteFile (in: hFile=0x444, lpBuffer=0x2355cb0*, nNumberOfBytesToWrite=0xc0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x2355cb0*, lpNumberOfBytesWritten=0x3be388*=0xc0, lpOverlapped=0x0) returned 1 [0092.063] CloseHandle (hObject=0x444) returned 1 [0092.063] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\messages.json", lpFilePart=0x0) returned 0x91 [0092.063] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\messages.json.xuy", lpFilePart=0x0) returned 0x95 [0092.063] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0092.063] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x790d5b5e, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x790d81f2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x22b96e7a, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xc0)) returned 1 [0092.064] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0092.064] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\messages.json.xuy")) returned 1 [0092.065] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0092.065] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no", lpFilePart=0x0) returned 0x83 [0092.065] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\", lpFilePart=0x0) returned 0x84 [0092.065] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7df0 [0092.065] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0092.065] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0092.065] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0092.065] FindClose (in: hFindFile=0x5d7df0 | out: hFindFile=0x5d7df0) returned 1 [0092.066] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0092.066] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0092.066] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0092.066] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no", lpFilePart=0x0) returned 0x83 [0092.066] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\", lpFilePart=0x0) returned 0x84 [0092.066] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d73d0 [0092.066] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0092.066] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0092.066] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0092.066] FindClose (in: hFindFile=0x5d73d0 | out: hFindFile=0x5d73d0) returned 1 [0092.066] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0092.066] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0092.067] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\messages.json", lpFilePart=0x0) returned 0x91 [0092.067] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0092.067] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x2359ed0 | out: lpFileInformation=0x2359ed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x790e45c8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x790e4542, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x9c12fb00, ftLastWriteTime.dwHighDateTime=0x1d0f3ee, nFileSizeHigh=0x0, nFileSizeLow=0x9f)) returned 1 [0092.068] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0092.068] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\messages.json", lpFilePart=0x0) returned 0x91 [0092.068] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0092.068] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0092.068] GetFileType (hFile=0x444) returned 0x1 [0092.068] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0092.068] GetFileType (hFile=0x444) returned 0x1 [0092.068] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x9f [0092.068] ReadFile (in: hFile=0x444, lpBuffer=0x235a348, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x235a348*, lpNumberOfBytesRead=0x3be478*=0x9f, lpOverlapped=0x0) returned 1 [0092.069] CloseHandle (hObject=0x444) returned 1 [0092.106] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\messages.json", lpFilePart=0x0) returned 0x91 [0092.106] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0092.106] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0092.109] GetFileType (hFile=0x444) returned 0x1 [0092.109] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0092.109] GetFileType (hFile=0x444) returned 0x1 [0092.109] WriteFile (in: hFile=0x444, lpBuffer=0x21d15f8*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x21d15f8*, lpNumberOfBytesWritten=0x3be388*=0xa0, lpOverlapped=0x0) returned 1 [0092.110] CloseHandle (hObject=0x444) returned 1 [0092.110] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\messages.json", lpFilePart=0x0) returned 0x91 [0092.110] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\messages.json.xuy", lpFilePart=0x0) returned 0x95 [0092.110] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0092.110] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x790e45c8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x790e4542, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x22c09766, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xa0)) returned 1 [0092.110] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0092.111] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\messages.json.xuy")) returned 1 [0092.112] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0092.112] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl", lpFilePart=0x0) returned 0x83 [0092.112] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\", lpFilePart=0x0) returned 0x84 [0092.112] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7a30 [0092.112] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0092.113] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0092.113] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0092.113] FindClose (in: hFindFile=0x5d7a30 | out: hFindFile=0x5d7a30) returned 1 [0092.113] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0092.113] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0092.113] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0092.113] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl", lpFilePart=0x0) returned 0x83 [0092.113] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\", lpFilePart=0x0) returned 0x84 [0092.113] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d79d0 [0092.113] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0092.114] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0092.114] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0092.114] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0092.114] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0092.114] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0092.114] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\messages.json", lpFilePart=0x0) returned 0x91 [0092.114] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0092.114] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x21d5818 | out: lpFileInformation=0x21d5818*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x790f7e4e, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x790f7dc2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x79511c34, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1 [0092.114] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0092.114] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\messages.json", lpFilePart=0x0) returned 0x91 [0092.114] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0092.114] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0092.115] GetFileType (hFile=0x444) returned 0x1 [0092.115] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0092.115] GetFileType (hFile=0x444) returned 0x1 [0092.115] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xb3 [0092.115] ReadFile (in: hFile=0x444, lpBuffer=0x21d5ca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x21d5ca8*, lpNumberOfBytesRead=0x3be478*=0xb3, lpOverlapped=0x0) returned 1 [0092.116] CloseHandle (hObject=0x444) returned 1 [0092.127] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\messages.json", lpFilePart=0x0) returned 0x91 [0092.127] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0092.127] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0092.129] GetFileType (hFile=0x444) returned 0x1 [0092.129] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0092.129] GetFileType (hFile=0x444) returned 0x1 [0092.129] WriteFile (in: hFile=0x444, lpBuffer=0x224cfb8*, nNumberOfBytesToWrite=0xc0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x224cfb8*, lpNumberOfBytesWritten=0x3be388*=0xc0, lpOverlapped=0x0) returned 1 [0092.130] CloseHandle (hObject=0x444) returned 1 [0092.130] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\messages.json", lpFilePart=0x0) returned 0x91 [0092.130] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\messages.json.xuy", lpFilePart=0x0) returned 0x95 [0092.130] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0092.130] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x790f7e4e, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x790f7dc2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x22c2fd2b, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xc0)) returned 1 [0092.130] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0092.130] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\messages.json.xuy")) returned 1 [0092.131] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0092.131] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR", lpFilePart=0x0) returned 0x86 [0092.131] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR\\", lpFilePart=0x0) returned 0x87 [0092.132] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7c70 [0092.132] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0092.132] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0092.132] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0092.132] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0092.132] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0092.132] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0092.132] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0092.132] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR", lpFilePart=0x0) returned 0x86 [0092.132] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR\\", lpFilePart=0x0) returned 0x87 [0092.132] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d73d0 [0092.133] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0092.133] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0092.133] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0092.133] FindClose (in: hFindFile=0x5d73d0 | out: hFindFile=0x5d73d0) returned 1 [0092.133] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0092.133] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0092.133] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR\\messages.json", lpFilePart=0x0) returned 0x94 [0092.133] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0092.133] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_br\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x22512a8 | out: lpFileInformation=0x22512a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7910418c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x79104112, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x79511c34, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1 [0092.135] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0092.135] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR\\messages.json", lpFilePart=0x0) returned 0x94 [0092.135] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0092.135] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_br\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0092.136] GetFileType (hFile=0x444) returned 0x1 [0092.136] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0092.136] GetFileType (hFile=0x444) returned 0x1 [0092.136] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xb3 [0092.136] ReadFile (in: hFile=0x444, lpBuffer=0x2251748, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x2251748*, lpNumberOfBytesRead=0x3be478*=0xb3, lpOverlapped=0x0) returned 1 [0092.137] CloseHandle (hObject=0x444) returned 1 [0092.147] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR\\messages.json", lpFilePart=0x0) returned 0x94 [0092.147] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0092.147] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_br\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0092.148] GetFileType (hFile=0x444) returned 0x1 [0092.148] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0092.148] GetFileType (hFile=0x444) returned 0x1 [0092.148] WriteFile (in: hFile=0x444, lpBuffer=0x22c8a60*, nNumberOfBytesToWrite=0xc0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x22c8a60*, lpNumberOfBytesWritten=0x3be388*=0xc0, lpOverlapped=0x0) returned 1 [0092.149] CloseHandle (hObject=0x444) returned 1 [0092.149] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR\\messages.json", lpFilePart=0x0) returned 0x94 [0092.149] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR\\messages.json.xuy", lpFilePart=0x0) returned 0x98 [0092.149] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0092.149] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_br\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7910418c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x79104112, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x22c55a22, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xc0)) returned 1 [0092.149] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0092.149] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_br\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_br\\messages.json.xuy")) returned 1 [0092.150] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0092.150] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT", lpFilePart=0x0) returned 0x86 [0092.150] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT\\", lpFilePart=0x0) returned 0x87 [0092.150] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7550 [0092.151] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0092.151] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0092.151] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0092.151] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0092.151] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0092.151] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0092.151] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0092.151] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT", lpFilePart=0x0) returned 0x86 [0092.151] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT\\", lpFilePart=0x0) returned 0x87 [0092.151] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7af0 [0092.151] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0092.152] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0092.152] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0092.152] FindClose (in: hFindFile=0x5d7af0 | out: hFindFile=0x5d7af0) returned 1 [0092.152] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0092.152] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0092.152] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT\\messages.json", lpFilePart=0x0) returned 0x94 [0092.152] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0092.152] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_pt\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x22ccd68 | out: lpFileInformation=0x22ccd68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7911a102, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x791215d2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x79511c34, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1 [0092.152] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0092.152] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT\\messages.json", lpFilePart=0x0) returned 0x94 [0092.152] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0092.152] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_pt\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0092.153] GetFileType (hFile=0x444) returned 0x1 [0092.153] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0092.153] GetFileType (hFile=0x444) returned 0x1 [0092.153] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xb3 [0092.153] ReadFile (in: hFile=0x444, lpBuffer=0x22cd208, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x22cd208*, lpNumberOfBytesRead=0x3be478*=0xb3, lpOverlapped=0x0) returned 1 [0092.155] CloseHandle (hObject=0x444) returned 1 [0092.166] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT\\messages.json", lpFilePart=0x0) returned 0x94 [0092.166] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0092.166] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_pt\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0092.168] GetFileType (hFile=0x444) returned 0x1 [0092.168] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0092.168] GetFileType (hFile=0x444) returned 0x1 [0092.168] WriteFile (in: hFile=0x444, lpBuffer=0x2344520*, nNumberOfBytesToWrite=0xc0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x2344520*, lpNumberOfBytesWritten=0x3be388*=0xc0, lpOverlapped=0x0) returned 1 [0092.169] CloseHandle (hObject=0x444) returned 1 [0092.169] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT\\messages.json", lpFilePart=0x0) returned 0x94 [0092.169] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT\\messages.json.xuy", lpFilePart=0x0) returned 0x98 [0092.169] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0092.169] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_pt\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7911a102, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x791215d2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x22c7bc52, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xc0)) returned 1 [0092.169] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0092.169] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_pt\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_pt\\messages.json.xuy")) returned 1 [0092.172] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0092.172] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro", lpFilePart=0x0) returned 0x83 [0092.172] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\", lpFilePart=0x0) returned 0x84 [0092.172] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7370 [0092.173] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0092.173] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0092.173] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0092.173] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0092.173] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0092.173] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0092.173] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0092.173] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro", lpFilePart=0x0) returned 0x83 [0092.173] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\", lpFilePart=0x0) returned 0x84 [0092.173] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7670 [0092.173] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0092.174] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0092.174] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0092.174] FindClose (in: hFindFile=0x5d7670 | out: hFindFile=0x5d7670) returned 1 [0092.174] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0092.174] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0092.174] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\messages.json", lpFilePart=0x0) returned 0x91 [0092.174] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0092.174] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x2348758 | out: lpFileInformation=0x2348758*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7912d9b4, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7912d922, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x79511c34, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1 [0092.175] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0092.175] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\messages.json", lpFilePart=0x0) returned 0x91 [0092.176] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0092.176] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0092.176] GetFileType (hFile=0x444) returned 0x1 [0092.176] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0092.176] GetFileType (hFile=0x444) returned 0x1 [0092.176] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xb3 [0092.176] ReadFile (in: hFile=0x444, lpBuffer=0x2348be8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x2348be8*, lpNumberOfBytesRead=0x3be478*=0xb3, lpOverlapped=0x0) returned 1 [0092.177] CloseHandle (hObject=0x444) returned 1 [0092.218] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\messages.json", lpFilePart=0x0) returned 0x91 [0092.218] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0092.219] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0092.220] GetFileType (hFile=0x444) returned 0x1 [0092.220] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0092.220] GetFileType (hFile=0x444) returned 0x1 [0092.220] WriteFile (in: hFile=0x444, lpBuffer=0x21bfeb8*, nNumberOfBytesToWrite=0xc0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x21bfeb8*, lpNumberOfBytesWritten=0x3be388*=0xc0, lpOverlapped=0x0) returned 1 [0092.221] CloseHandle (hObject=0x444) returned 1 [0092.221] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\messages.json", lpFilePart=0x0) returned 0x91 [0092.221] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\messages.json.xuy", lpFilePart=0x0) returned 0x95 [0092.221] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0092.221] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7912d9b4, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7912d922, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x22d14c81, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xc0)) returned 1 [0092.221] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0092.221] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\messages.json.xuy")) returned 1 [0092.222] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0092.222] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru", lpFilePart=0x0) returned 0x83 [0092.222] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\", lpFilePart=0x0) returned 0x84 [0092.222] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7370 [0092.222] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0092.222] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0092.223] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0092.223] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0092.223] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0092.223] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0092.223] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0092.223] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru", lpFilePart=0x0) returned 0x83 [0092.223] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\", lpFilePart=0x0) returned 0x84 [0092.223] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7550 [0092.223] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0092.223] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0092.223] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0092.224] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0092.224] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0092.224] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0092.224] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\messages.json", lpFilePart=0x0) returned 0x91 [0092.224] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0092.224] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x21c40d8 | out: lpFileInformation=0x21c40d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7916f87d, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7916f7d2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x79511c34, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1 [0092.224] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0092.224] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\messages.json", lpFilePart=0x0) returned 0x91 [0092.224] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0092.224] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0092.224] GetFileType (hFile=0x444) returned 0x1 [0092.224] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0092.224] GetFileType (hFile=0x444) returned 0x1 [0092.224] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xb3 [0092.224] ReadFile (in: hFile=0x444, lpBuffer=0x21c4568, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x21c4568*, lpNumberOfBytesRead=0x3be478*=0xb3, lpOverlapped=0x0) returned 1 [0092.225] CloseHandle (hObject=0x444) returned 1 [0092.236] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\messages.json", lpFilePart=0x0) returned 0x91 [0092.236] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0092.236] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0092.238] GetFileType (hFile=0x444) returned 0x1 [0092.238] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0092.238] GetFileType (hFile=0x444) returned 0x1 [0092.238] WriteFile (in: hFile=0x444, lpBuffer=0x223b878*, nNumberOfBytesToWrite=0xc0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x223b878*, lpNumberOfBytesWritten=0x3be388*=0xc0, lpOverlapped=0x0) returned 1 [0092.238] CloseHandle (hObject=0x444) returned 1 [0092.239] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\messages.json", lpFilePart=0x0) returned 0x91 [0092.239] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\messages.json.xuy", lpFilePart=0x0) returned 0x95 [0092.239] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0092.239] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7916f87d, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7916f7d2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x22d3a7e6, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xc0)) returned 1 [0092.239] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0092.239] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\messages.json.xuy")) returned 1 [0092.240] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0092.240] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk", lpFilePart=0x0) returned 0x83 [0092.240] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\", lpFilePart=0x0) returned 0x84 [0092.240] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d81b0 [0092.240] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0092.240] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0092.240] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0092.240] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0092.241] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0092.241] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0092.241] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0092.241] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk", lpFilePart=0x0) returned 0x83 [0092.241] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\", lpFilePart=0x0) returned 0x84 [0092.241] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7550 [0092.241] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0092.241] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0092.241] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0092.241] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0092.241] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0092.241] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0092.241] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\messages.json", lpFilePart=0x0) returned 0x91 [0092.241] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0092.242] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x223fa98 | out: lpFileInformation=0x223fa98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x791809ee, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x79180942, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x79514346, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1 [0092.243] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0092.243] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\messages.json", lpFilePart=0x0) returned 0x91 [0092.243] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0092.243] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0092.243] GetFileType (hFile=0x444) returned 0x1 [0092.243] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0092.243] GetFileType (hFile=0x444) returned 0x1 [0092.243] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xb3 [0092.244] ReadFile (in: hFile=0x444, lpBuffer=0x223ff28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x223ff28*, lpNumberOfBytesRead=0x3be478*=0xb3, lpOverlapped=0x0) returned 1 [0092.244] CloseHandle (hObject=0x444) returned 1 [0092.255] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\messages.json", lpFilePart=0x0) returned 0x91 [0092.255] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0092.255] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0092.259] GetFileType (hFile=0x444) returned 0x1 [0092.259] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0092.259] GetFileType (hFile=0x444) returned 0x1 [0092.259] WriteFile (in: hFile=0x444, lpBuffer=0x22b7238*, nNumberOfBytesToWrite=0xc0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x22b7238*, lpNumberOfBytesWritten=0x3be388*=0xc0, lpOverlapped=0x0) returned 1 [0092.260] CloseHandle (hObject=0x444) returned 1 [0092.260] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\messages.json", lpFilePart=0x0) returned 0x91 [0092.260] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\messages.json.xuy", lpFilePart=0x0) returned 0x95 [0092.260] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0092.260] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x791809ee, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x79180942, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x22d60a06, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xc0)) returned 1 [0092.260] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0092.260] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\messages.json.xuy")) returned 1 [0092.261] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0092.261] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl", lpFilePart=0x0) returned 0x83 [0092.261] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\", lpFilePart=0x0) returned 0x84 [0092.262] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7370 [0092.262] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0092.262] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0092.262] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0092.262] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0092.262] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0092.262] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0092.262] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0092.262] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl", lpFilePart=0x0) returned 0x83 [0092.262] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\", lpFilePart=0x0) returned 0x84 [0092.262] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7df0 [0092.263] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0092.263] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0092.266] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0092.266] FindClose (in: hFindFile=0x5d7df0 | out: hFindFile=0x5d7df0) returned 1 [0092.266] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0092.266] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0092.266] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\messages.json", lpFilePart=0x0) returned 0x91 [0092.266] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0092.266] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x22bb458 | out: lpFileInformation=0x22bb458*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x791a05dd, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x791a0512, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x79514346, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1 [0092.266] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0092.266] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\messages.json", lpFilePart=0x0) returned 0x91 [0092.266] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0092.266] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0092.266] GetFileType (hFile=0x444) returned 0x1 [0092.266] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0092.267] GetFileType (hFile=0x444) returned 0x1 [0092.267] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xb3 [0092.267] ReadFile (in: hFile=0x444, lpBuffer=0x22bb8e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x22bb8e8*, lpNumberOfBytesRead=0x3be478*=0xb3, lpOverlapped=0x0) returned 1 [0092.267] CloseHandle (hObject=0x444) returned 1 [0092.278] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\messages.json", lpFilePart=0x0) returned 0x91 [0092.278] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0092.278] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0092.280] GetFileType (hFile=0x444) returned 0x1 [0092.280] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0092.280] GetFileType (hFile=0x444) returned 0x1 [0092.280] WriteFile (in: hFile=0x444, lpBuffer=0x2332bf8*, nNumberOfBytesToWrite=0xc0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x2332bf8*, lpNumberOfBytesWritten=0x3be388*=0xc0, lpOverlapped=0x0) returned 1 [0092.281] CloseHandle (hObject=0x444) returned 1 [0092.281] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\messages.json", lpFilePart=0x0) returned 0x91 [0092.281] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\messages.json.xuy", lpFilePart=0x0) returned 0x95 [0092.281] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0092.281] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x791a05dd, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x791a0512, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x22dace7e, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xc0)) returned 1 [0092.281] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0092.281] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\messages.json.xuy")) returned 1 [0092.282] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0092.282] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr", lpFilePart=0x0) returned 0x83 [0092.282] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\", lpFilePart=0x0) returned 0x84 [0092.282] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7c70 [0092.282] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0092.282] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0092.282] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0092.282] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0092.283] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0092.283] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0092.283] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0092.283] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr", lpFilePart=0x0) returned 0x83 [0092.283] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\", lpFilePart=0x0) returned 0x84 [0092.283] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d79d0 [0092.283] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0092.283] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0092.283] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0092.283] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0092.283] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0092.283] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0092.283] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\messages.json", lpFilePart=0x0) returned 0x91 [0092.283] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0092.284] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x2336e18 | out: lpFileInformation=0x2336e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x791aa282, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x791c7612, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x79514346, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1 [0092.287] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0092.287] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\messages.json", lpFilePart=0x0) returned 0x91 [0092.287] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0092.287] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0092.287] GetFileType (hFile=0x444) returned 0x1 [0092.287] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0092.287] GetFileType (hFile=0x444) returned 0x1 [0092.287] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xb3 [0092.287] ReadFile (in: hFile=0x444, lpBuffer=0x23372a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x23372a8*, lpNumberOfBytesRead=0x3be478*=0xb3, lpOverlapped=0x0) returned 1 [0092.288] CloseHandle (hObject=0x444) returned 1 [0092.329] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\messages.json", lpFilePart=0x0) returned 0x91 [0092.329] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0092.329] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0092.331] GetFileType (hFile=0x444) returned 0x1 [0092.331] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0092.331] GetFileType (hFile=0x444) returned 0x1 [0092.331] WriteFile (in: hFile=0x444, lpBuffer=0x21ae5a8*, nNumberOfBytesToWrite=0xc0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x21ae5a8*, lpNumberOfBytesWritten=0x3be388*=0xc0, lpOverlapped=0x0) returned 1 [0092.331] CloseHandle (hObject=0x444) returned 1 [0092.332] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\messages.json", lpFilePart=0x0) returned 0x91 [0092.332] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\messages.json.xuy", lpFilePart=0x0) returned 0x95 [0092.332] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0092.332] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x791aa282, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x791c7612, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x22e1fc50, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xc0)) returned 1 [0092.332] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0092.332] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\messages.json.xuy")) returned 1 [0092.333] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0092.333] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv", lpFilePart=0x0) returned 0x83 [0092.333] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\", lpFilePart=0x0) returned 0x84 [0092.333] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7c70 [0092.333] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0092.333] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0092.333] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0092.334] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0092.334] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0092.334] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0092.334] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0092.334] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv", lpFilePart=0x0) returned 0x83 [0092.334] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\", lpFilePart=0x0) returned 0x84 [0092.334] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7af0 [0092.335] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0092.335] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0092.335] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0092.335] FindClose (in: hFindFile=0x5d7af0 | out: hFindFile=0x5d7af0) returned 1 [0092.335] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0092.335] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0092.335] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\messages.json", lpFilePart=0x0) returned 0x91 [0092.335] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0092.335] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x21b27c8 | out: lpFileInformation=0x21b27c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x791e2488, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x791e23c2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x79514346, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1 [0092.335] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0092.335] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\messages.json", lpFilePart=0x0) returned 0x91 [0092.336] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0092.336] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0092.336] GetFileType (hFile=0x444) returned 0x1 [0092.336] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0092.336] GetFileType (hFile=0x444) returned 0x1 [0092.336] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xb3 [0092.336] ReadFile (in: hFile=0x444, lpBuffer=0x21b2c58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x21b2c58*, lpNumberOfBytesRead=0x3be478*=0xb3, lpOverlapped=0x0) returned 1 [0092.337] CloseHandle (hObject=0x444) returned 1 [0092.347] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\messages.json", lpFilePart=0x0) returned 0x91 [0092.347] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0092.347] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0092.349] GetFileType (hFile=0x444) returned 0x1 [0092.349] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0092.349] GetFileType (hFile=0x444) returned 0x1 [0092.349] WriteFile (in: hFile=0x444, lpBuffer=0x2229f68*, nNumberOfBytesToWrite=0xc0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x2229f68*, lpNumberOfBytesWritten=0x3be388*=0xc0, lpOverlapped=0x0) returned 1 [0092.350] CloseHandle (hObject=0x444) returned 1 [0092.350] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\messages.json", lpFilePart=0x0) returned 0x91 [0092.350] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\messages.json.xuy", lpFilePart=0x0) returned 0x95 [0092.350] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0092.350] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x791e2488, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x791e23c2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x22e459ea, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xc0)) returned 1 [0092.350] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0092.350] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\messages.json.xuy")) returned 1 [0092.351] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0092.351] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th", lpFilePart=0x0) returned 0x83 [0092.351] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\", lpFilePart=0x0) returned 0x84 [0092.351] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7eb0 [0092.352] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0092.352] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0092.352] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0092.352] FindClose (in: hFindFile=0x5d7eb0 | out: hFindFile=0x5d7eb0) returned 1 [0092.352] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0092.352] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0092.352] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0092.352] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th", lpFilePart=0x0) returned 0x83 [0092.352] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\", lpFilePart=0x0) returned 0x84 [0092.352] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d78b0 [0092.352] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0092.352] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0092.353] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0092.353] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0092.353] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0092.353] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0092.353] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\messages.json", lpFilePart=0x0) returned 0x91 [0092.353] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0092.353] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x222e188 | out: lpFileInformation=0x222e188*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x791f0f11, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x791f3532, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x79514346, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1 [0092.355] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0092.355] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\messages.json", lpFilePart=0x0) returned 0x91 [0092.355] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0092.355] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0092.355] GetFileType (hFile=0x444) returned 0x1 [0092.355] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0092.355] GetFileType (hFile=0x444) returned 0x1 [0092.355] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xb3 [0092.355] ReadFile (in: hFile=0x444, lpBuffer=0x222e618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x222e618*, lpNumberOfBytesRead=0x3be478*=0xb3, lpOverlapped=0x0) returned 1 [0092.356] CloseHandle (hObject=0x444) returned 1 [0092.367] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\messages.json", lpFilePart=0x0) returned 0x91 [0092.367] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0092.367] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0092.368] GetFileType (hFile=0x444) returned 0x1 [0092.368] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0092.368] GetFileType (hFile=0x444) returned 0x1 [0092.368] WriteFile (in: hFile=0x444, lpBuffer=0x22a5928*, nNumberOfBytesToWrite=0xc0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x22a5928*, lpNumberOfBytesWritten=0x3be388*=0xc0, lpOverlapped=0x0) returned 1 [0092.370] CloseHandle (hObject=0x444) returned 1 [0092.370] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\messages.json", lpFilePart=0x0) returned 0x91 [0092.370] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\messages.json.xuy", lpFilePart=0x0) returned 0x95 [0092.370] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0092.370] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x791f0f11, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x791f3532, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x22e6ba2f, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xc0)) returned 1 [0092.370] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0092.370] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\messages.json.xuy")) returned 1 [0092.371] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0092.371] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr", lpFilePart=0x0) returned 0x83 [0092.372] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\", lpFilePart=0x0) returned 0x84 [0092.372] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d79d0 [0092.372] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0092.372] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0092.372] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0092.372] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0092.373] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0092.373] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0092.373] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0092.373] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr", lpFilePart=0x0) returned 0x83 [0092.373] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\", lpFilePart=0x0) returned 0x84 [0092.373] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7cd0 [0092.373] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0092.373] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0092.373] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0092.373] FindClose (in: hFindFile=0x5d7cd0 | out: hFindFile=0x5d7cd0) returned 1 [0092.373] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0092.374] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0092.374] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\messages.json", lpFilePart=0x0) returned 0x91 [0092.374] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0092.374] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x22a9b48 | out: lpFileInformation=0x22a9b48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79209597, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x792094c2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x79516a56, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1 [0092.374] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0092.374] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\messages.json", lpFilePart=0x0) returned 0x91 [0092.374] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0092.374] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0092.374] GetFileType (hFile=0x444) returned 0x1 [0092.374] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0092.374] GetFileType (hFile=0x444) returned 0x1 [0092.374] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xb3 [0092.374] ReadFile (in: hFile=0x444, lpBuffer=0x22a9fd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x22a9fd8*, lpNumberOfBytesRead=0x3be478*=0xb3, lpOverlapped=0x0) returned 1 [0092.375] CloseHandle (hObject=0x444) returned 1 [0092.385] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\messages.json", lpFilePart=0x0) returned 0x91 [0092.386] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0092.386] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0092.387] GetFileType (hFile=0x444) returned 0x1 [0092.387] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0092.387] GetFileType (hFile=0x444) returned 0x1 [0092.387] WriteFile (in: hFile=0x444, lpBuffer=0x23212e8*, nNumberOfBytesToWrite=0xc0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x23212e8*, lpNumberOfBytesWritten=0x3be388*=0xc0, lpOverlapped=0x0) returned 1 [0092.388] CloseHandle (hObject=0x444) returned 1 [0092.388] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\messages.json", lpFilePart=0x0) returned 0x91 [0092.390] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\messages.json.xuy", lpFilePart=0x0) returned 0x95 [0092.390] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0092.390] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79209597, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x792094c2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x22e91da8, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xc0)) returned 1 [0092.390] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0092.390] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\messages.json.xuy")) returned 1 [0092.391] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0092.391] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk", lpFilePart=0x0) returned 0x83 [0092.391] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\", lpFilePart=0x0) returned 0x84 [0092.392] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d73d0 [0092.392] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0092.392] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0092.392] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0092.392] FindClose (in: hFindFile=0x5d73d0 | out: hFindFile=0x5d73d0) returned 1 [0092.392] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0092.392] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0092.392] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0092.392] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk", lpFilePart=0x0) returned 0x83 [0092.392] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\", lpFilePart=0x0) returned 0x84 [0092.392] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d78b0 [0092.393] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0092.393] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0092.393] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0092.393] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0092.393] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0092.393] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0092.393] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\messages.json", lpFilePart=0x0) returned 0x91 [0092.393] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0092.393] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x2325508 | out: lpFileInformation=0x2325508*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7922916d, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7922b7a2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x79516a56, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1 [0092.395] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0092.395] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\messages.json", lpFilePart=0x0) returned 0x91 [0092.395] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0092.395] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0092.395] GetFileType (hFile=0x444) returned 0x1 [0092.395] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0092.395] GetFileType (hFile=0x444) returned 0x1 [0092.395] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xb3 [0092.395] ReadFile (in: hFile=0x444, lpBuffer=0x2325998, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x2325998*, lpNumberOfBytesRead=0x3be478*=0xb3, lpOverlapped=0x0) returned 1 [0092.396] CloseHandle (hObject=0x444) returned 1 [0092.431] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\messages.json", lpFilePart=0x0) returned 0x91 [0092.431] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0092.431] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0092.433] GetFileType (hFile=0x444) returned 0x1 [0092.433] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0092.433] GetFileType (hFile=0x444) returned 0x1 [0092.433] WriteFile (in: hFile=0x444, lpBuffer=0x219cc88*, nNumberOfBytesToWrite=0xc0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x219cc88*, lpNumberOfBytesWritten=0x3be388*=0xc0, lpOverlapped=0x0) returned 1 [0092.434] CloseHandle (hObject=0x444) returned 1 [0092.434] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\messages.json", lpFilePart=0x0) returned 0x91 [0092.434] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\messages.json.xuy", lpFilePart=0x0) returned 0x95 [0092.434] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0092.434] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7922916d, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7922b7a2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x22f04566, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xc0)) returned 1 [0092.434] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0092.434] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\messages.json.xuy")) returned 1 [0092.436] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0092.436] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi", lpFilePart=0x0) returned 0x83 [0092.436] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\", lpFilePart=0x0) returned 0x84 [0092.436] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7c70 [0092.436] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0092.436] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0092.436] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0092.436] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0092.437] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0092.437] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0092.437] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0092.437] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi", lpFilePart=0x0) returned 0x83 [0092.437] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\", lpFilePart=0x0) returned 0x84 [0092.437] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7fd0 [0092.437] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0092.437] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0092.437] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0092.437] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0092.437] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0092.437] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0092.437] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\messages.json", lpFilePart=0x0) returned 0x91 [0092.437] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0092.438] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x21a0ea8 | out: lpFileInformation=0x21a0ea8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7923a2de, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7923c912, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x79516a56, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1 [0092.438] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0092.438] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\messages.json", lpFilePart=0x0) returned 0x91 [0092.438] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0092.438] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0092.438] GetFileType (hFile=0x444) returned 0x1 [0092.438] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0092.438] GetFileType (hFile=0x444) returned 0x1 [0092.438] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xb3 [0092.438] ReadFile (in: hFile=0x444, lpBuffer=0x21a1338, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x21a1338*, lpNumberOfBytesRead=0x3be478*=0xb3, lpOverlapped=0x0) returned 1 [0092.439] CloseHandle (hObject=0x444) returned 1 [0092.459] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\messages.json", lpFilePart=0x0) returned 0x91 [0092.459] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0092.459] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0092.461] GetFileType (hFile=0x444) returned 0x1 [0092.461] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0092.461] GetFileType (hFile=0x444) returned 0x1 [0092.461] WriteFile (in: hFile=0x444, lpBuffer=0x2218648*, nNumberOfBytesToWrite=0xc0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x2218648*, lpNumberOfBytesWritten=0x3be388*=0xc0, lpOverlapped=0x0) returned 1 [0092.461] CloseHandle (hObject=0x444) returned 1 [0092.462] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\messages.json", lpFilePart=0x0) returned 0x91 [0092.462] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\messages.json.xuy", lpFilePart=0x0) returned 0x95 [0092.462] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0092.462] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7923a2de, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7923c912, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x22f50cd2, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xc0)) returned 1 [0092.462] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0092.462] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\messages.json.xuy")) returned 1 [0092.463] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0092.463] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN", lpFilePart=0x0) returned 0x86 [0092.463] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN\\", lpFilePart=0x0) returned 0x87 [0092.463] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d78b0 [0092.463] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0092.463] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0092.463] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0092.464] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0092.464] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0092.464] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0092.464] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0092.464] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN", lpFilePart=0x0) returned 0x86 [0092.464] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN\\", lpFilePart=0x0) returned 0x87 [0092.464] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7a90 [0092.464] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0092.464] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0092.464] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0092.464] FindClose (in: hFindFile=0x5d7a90 | out: hFindFile=0x5d7a90) returned 1 [0092.464] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0092.465] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0092.465] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN\\messages.json", lpFilePart=0x0) returned 0x94 [0092.465] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0092.465] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_cn\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x221c938 | out: lpFileInformation=0x221c938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7924662b, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x79246552, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x79516a56, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1 [0092.467] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0092.467] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN\\messages.json", lpFilePart=0x0) returned 0x94 [0092.467] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0092.467] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_cn\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0092.467] GetFileType (hFile=0x444) returned 0x1 [0092.467] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0092.467] GetFileType (hFile=0x444) returned 0x1 [0092.467] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xb3 [0092.467] ReadFile (in: hFile=0x444, lpBuffer=0x221cdd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x221cdd8*, lpNumberOfBytesRead=0x3be478*=0xb3, lpOverlapped=0x0) returned 1 [0092.468] CloseHandle (hObject=0x444) returned 1 [0092.489] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN\\messages.json", lpFilePart=0x0) returned 0x94 [0092.489] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0092.490] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_cn\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0092.491] GetFileType (hFile=0x444) returned 0x1 [0092.491] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0092.491] GetFileType (hFile=0x444) returned 0x1 [0092.491] WriteFile (in: hFile=0x444, lpBuffer=0x22940f0*, nNumberOfBytesToWrite=0xc0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x22940f0*, lpNumberOfBytesWritten=0x3be388*=0xc0, lpOverlapped=0x0) returned 1 [0092.492] CloseHandle (hObject=0x444) returned 1 [0092.492] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN\\messages.json", lpFilePart=0x0) returned 0x94 [0092.492] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN\\messages.json.xuy", lpFilePart=0x0) returned 0x98 [0092.492] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0092.492] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_cn\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7924662b, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x79246552, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x22f9cf28, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xc0)) returned 1 [0092.492] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0092.492] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_cn\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_cn\\messages.json.xuy")) returned 1 [0092.493] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0092.493] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW", lpFilePart=0x0) returned 0x86 [0092.493] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW\\", lpFilePart=0x0) returned 0x87 [0092.493] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7d90 [0092.493] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0092.493] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0092.494] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0092.494] FindClose (in: hFindFile=0x5d7d90 | out: hFindFile=0x5d7d90) returned 1 [0092.494] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0092.494] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0092.494] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0092.494] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW", lpFilePart=0x0) returned 0x86 [0092.494] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW\\", lpFilePart=0x0) returned 0x87 [0092.494] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d81b0 [0092.494] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0092.494] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0092.494] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0092.494] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0092.494] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0092.494] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0092.495] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW\\messages.json", lpFilePart=0x0) returned 0x94 [0092.495] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0092.495] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_tw\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x22983f8 | out: lpFileInformation=0x22983f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7925c5c1, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7925c4e2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x79516a56, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1 [0092.495] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0092.495] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW\\messages.json", lpFilePart=0x0) returned 0x94 [0092.495] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0092.495] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_tw\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0092.495] GetFileType (hFile=0x444) returned 0x1 [0092.495] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0092.495] GetFileType (hFile=0x444) returned 0x1 [0092.495] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xb3 [0092.495] ReadFile (in: hFile=0x444, lpBuffer=0x2298898, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x2298898*, lpNumberOfBytesRead=0x3be478*=0xb3, lpOverlapped=0x0) returned 1 [0092.496] CloseHandle (hObject=0x444) returned 1 [0092.508] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW\\messages.json", lpFilePart=0x0) returned 0x94 [0092.508] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0092.508] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_tw\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0092.510] GetFileType (hFile=0x444) returned 0x1 [0092.510] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0092.510] GetFileType (hFile=0x444) returned 0x1 [0092.510] WriteFile (in: hFile=0x444, lpBuffer=0x230fbb0*, nNumberOfBytesToWrite=0xc0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x230fbb0*, lpNumberOfBytesWritten=0x3be388*=0xc0, lpOverlapped=0x0) returned 1 [0092.511] CloseHandle (hObject=0x444) returned 1 [0092.511] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW\\messages.json", lpFilePart=0x0) returned 0x94 [0092.511] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW\\messages.json.xuy", lpFilePart=0x0) returned 0x98 [0092.511] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0092.511] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_tw\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7925c5c1, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7925c4e2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x22fc2fb6, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xc0)) returned 1 [0092.512] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0092.512] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_tw\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_tw\\messages.json.xuy")) returned 1 [0092.513] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0092.513] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata", nBufferLength=0x105, lpBuffer=0x3be0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata", lpFilePart=0x0) returned 0x81 [0092.513] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\", nBufferLength=0x105, lpBuffer=0x3be060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\", lpFilePart=0x0) returned 0x82 [0092.513] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\*", lpFindFileData=0x3be270 | out: lpFindFileData=0x3be270) returned 0x5d7550 [0092.513] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0092.514] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0092.514] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 0 [0092.514] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0092.514] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0092.514] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0092.514] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0092.514] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata", nBufferLength=0x105, lpBuffer=0x3be0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata", lpFilePart=0x0) returned 0x81 [0092.514] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\", nBufferLength=0x105, lpBuffer=0x3be060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\", lpFilePart=0x0) returned 0x82 [0092.514] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\*", lpFindFileData=0x3be270 | out: lpFindFileData=0x3be270) returned 0x5d81b0 [0092.514] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0092.514] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0092.514] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 0 [0092.515] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0092.515] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0092.515] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0092.515] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\verified_contents.json", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\verified_contents.json", lpFilePart=0x0) returned 0x98 [0092.515] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0092.515] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\verified_contents.json"), fInfoLevelId=0x0, lpFileInformation=0x2313dc8 | out: lpFileInformation=0x2313dc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7926d7b7, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x79277292, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x628aed00, ftLastWriteTime.dwHighDateTime=0x1d0f5b2, nFileSizeHigh=0x0, nFileSizeLow=0x2769)) returned 1 [0092.517] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0092.517] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\verified_contents.json", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\verified_contents.json", lpFilePart=0x0) returned 0x98 [0092.517] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0092.517] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\verified_contents.json"), fInfoLevelId=0x0, lpFileInformation=0x2313fc8 | out: lpFileInformation=0x2313fc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7926d7b7, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x79277292, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x628aed00, ftLastWriteTime.dwHighDateTime=0x1d0f5b2, nFileSizeHigh=0x0, nFileSizeLow=0x2769)) returned 1 [0092.518] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0092.518] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\verified_contents.json", nBufferLength=0x105, lpBuffer=0x3bdfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\verified_contents.json", lpFilePart=0x0) returned 0x98 [0092.518] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0092.518] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\verified_contents.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0092.518] GetFileType (hFile=0x444) returned 0x1 [0092.518] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be420) returned 1 [0092.518] GetFileType (hFile=0x444) returned 0x1 [0092.518] ReadFile (in: hFile=0x444, lpBuffer=0x23164f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be538, lpOverlapped=0x0 | out: lpBuffer=0x23164f8*, lpNumberOfBytesRead=0x3be538*=0x1000, lpOverlapped=0x0) returned 1 [0092.586] CloseHandle (hObject=0x444) returned 1 [0092.586] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\verified_contents.json", nBufferLength=0x105, lpBuffer=0x3bdfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\verified_contents.json", lpFilePart=0x0) returned 0x98 [0092.586] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0092.586] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\verified_contents.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0092.586] GetFileType (hFile=0x444) returned 0x1 [0092.586] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be420) returned 1 [0092.586] GetFileType (hFile=0x444) returned 0x1 [0092.586] WriteFile (in: hFile=0x444, lpBuffer=0x215ce30*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be5e8, lpOverlapped=0x0 | out: lpBuffer=0x215ce30*, lpNumberOfBytesWritten=0x3be5e8*=0x2000, lpOverlapped=0x0) returned 1 [0092.586] CloseHandle (hObject=0x444) returned 1 [0092.587] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\verified_contents.json", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\verified_contents.json", lpFilePart=0x0) returned 0x98 [0092.587] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\verified_contents.json.xuy", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\verified_contents.json.xuy", lpFilePart=0x0) returned 0x9c [0092.587] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0092.587] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\verified_contents.json"), fInfoLevelId=0x0, lpFileInformation=0x3be600 | out: lpFileInformation=0x3be600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7926d7b7, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x79277292, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x23081cf1, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2769)) returned 1 [0092.587] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0092.587] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\verified_contents.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\verified_contents.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\verified_contents.json.xuy")) returned 1 [0092.588] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0092.588] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap", lpFilePart=0x0) returned 0x6f [0092.588] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\", lpFilePart=0x0) returned 0x70 [0092.588] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d75b0 [0092.588] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0092.588] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0092.588] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0092.588] FindClose (in: hFindFile=0x5d75b0 | out: hFindFile=0x5d75b0) returned 1 [0092.588] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0092.588] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0092.589] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0092.589] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap", lpFilePart=0x0) returned 0x6f [0092.589] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\", lpFilePart=0x0) returned 0x70 [0092.589] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d7550 [0092.589] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0092.589] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0092.589] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0092.589] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0092.589] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0092.589] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0092.589] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0092.589] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0", nBufferLength=0x105, lpBuffer=0x3be130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0", lpFilePart=0x0) returned 0x75 [0092.589] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\", nBufferLength=0x105, lpBuffer=0x3be0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\", lpFilePart=0x0) returned 0x76 [0092.589] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\*", lpFindFileData=0x3be2e0 | out: lpFindFileData=0x3be2e0) returned 0x5d7370 [0092.602] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0092.603] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0092.603] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0092.603] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0092.603] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0092.603] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0092.603] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0092.603] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0092.603] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 0 [0092.603] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0092.604] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0092.604] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0092.604] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0092.604] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0", nBufferLength=0x105, lpBuffer=0x3be130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0", lpFilePart=0x0) returned 0x75 [0092.604] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\", nBufferLength=0x105, lpBuffer=0x3be0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\", lpFilePart=0x0) returned 0x76 [0092.604] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\*", lpFindFileData=0x3be2e0 | out: lpFindFileData=0x3be2e0) returned 0x5d7df0 [0092.605] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0092.605] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0092.605] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0092.605] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0092.605] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0092.606] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0092.606] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0092.606] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0092.606] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 0 [0092.606] FindClose (in: hFindFile=0x5d7df0 | out: hFindFile=0x5d7df0) returned 1 [0092.608] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0092.608] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0092.608] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_128.png", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_128.png", lpFilePart=0x0) returned 0x82 [0092.608] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0092.608] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_128.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_128.png"), fInfoLevelId=0x0, lpFileInformation=0x219d0d0 | out: lpFileInformation=0x219d0d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79bab524, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x79ffae66, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x79ffae66, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xd47)) returned 1 [0092.621] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0092.621] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_128.png", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_128.png", lpFilePart=0x0) returned 0x82 [0092.621] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0092.621] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_128.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_128.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0092.621] GetFileType (hFile=0x444) returned 0x1 [0092.621] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be400) returned 1 [0092.621] GetFileType (hFile=0x444) returned 0x1 [0092.621] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be628 | out: lpFileSizeHigh=0x3be628*=0x0) returned 0xd47 [0092.621] ReadFile (in: hFile=0x444, lpBuffer=0x219e1b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be558, lpOverlapped=0x0 | out: lpBuffer=0x219e1b0*, lpNumberOfBytesRead=0x3be558*=0xd47, lpOverlapped=0x0) returned 1 [0092.643] CloseHandle (hObject=0x444) returned 1 [0092.653] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_128.png", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_128.png", lpFilePart=0x0) returned 0x82 [0092.653] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0092.653] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_128.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_128.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0092.655] GetFileType (hFile=0x444) returned 0x1 [0092.655] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be400) returned 1 [0092.655] GetFileType (hFile=0x444) returned 0x1 [0092.655] WriteFile (in: hFile=0x444, lpBuffer=0x2219498*, nNumberOfBytesToWrite=0xd50, lpNumberOfBytesWritten=0x3be468, lpOverlapped=0x0 | out: lpBuffer=0x2219498*, lpNumberOfBytesWritten=0x3be468*=0xd50, lpOverlapped=0x0) returned 1 [0092.656] CloseHandle (hObject=0x444) returned 1 [0092.657] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_128.png", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_128.png", lpFilePart=0x0) returned 0x82 [0092.657] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_128.png.xuy", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_128.png.xuy", lpFilePart=0x0) returned 0x86 [0092.657] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0092.657] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_128.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_128.png"), fInfoLevelId=0x0, lpFileInformation=0x3be670 | out: lpFileInformation=0x3be670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79bab524, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x79ffae66, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x23140828, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xd50)) returned 1 [0092.657] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0092.657] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_128.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_128.png"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_128.png.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_128.png.xuy")) returned 1 [0092.658] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_16.png", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_16.png", lpFilePart=0x0) returned 0x81 [0092.658] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0092.658] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_16.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_16.png"), fInfoLevelId=0x0, lpFileInformation=0x221a868 | out: lpFileInformation=0x221a868*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79bb2a58, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x79ffae66, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x79ffd592, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x9d)) returned 1 [0092.659] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0092.659] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_16.png", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_16.png", lpFilePart=0x0) returned 0x81 [0092.659] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0092.659] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_16.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_16.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0092.659] GetFileType (hFile=0x444) returned 0x1 [0092.659] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be400) returned 1 [0092.659] GetFileType (hFile=0x444) returned 0x1 [0092.659] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be628 | out: lpFileSizeHigh=0x3be628*=0x0) returned 0x9d [0092.659] ReadFile (in: hFile=0x444, lpBuffer=0x221ac90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be558, lpOverlapped=0x0 | out: lpBuffer=0x221ac90*, lpNumberOfBytesRead=0x3be558*=0x9d, lpOverlapped=0x0) returned 1 [0092.660] CloseHandle (hObject=0x444) returned 1 [0092.673] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_16.png", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_16.png", lpFilePart=0x0) returned 0x81 [0092.673] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0092.673] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_16.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_16.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0092.674] GetFileType (hFile=0x444) returned 0x1 [0092.674] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be400) returned 1 [0092.674] GetFileType (hFile=0x444) returned 0x1 [0092.674] WriteFile (in: hFile=0x444, lpBuffer=0x2291f30*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x3be468, lpOverlapped=0x0 | out: lpBuffer=0x2291f30*, lpNumberOfBytesWritten=0x3be468*=0xa0, lpOverlapped=0x0) returned 1 [0092.675] CloseHandle (hObject=0x444) returned 1 [0092.675] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_16.png", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_16.png", lpFilePart=0x0) returned 0x81 [0092.675] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_16.png.xuy", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_16.png.xuy", lpFilePart=0x0) returned 0x85 [0092.675] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0092.675] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_16.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_16.png"), fInfoLevelId=0x0, lpFileInformation=0x3be670 | out: lpFileInformation=0x3be670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79bb2a58, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x79ffae66, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x23166a9c, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xa0)) returned 1 [0092.675] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0092.675] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_16.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_16.png"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_16.png.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_16.png.xuy")) returned 1 [0092.676] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.html", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.html", lpFilePart=0x0) returned 0x7f [0092.676] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0092.676] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.html" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.html"), fInfoLevelId=0x0, lpFileInformation=0x2293300 | out: lpFileInformation=0x2293300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79bbc69a, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x79bc3ada, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0xbcc13a00, ftLastWriteTime.dwHighDateTime=0x1d03f5e, nFileSizeHigh=0x0, nFileSizeLow=0x5c)) returned 1 [0092.676] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0092.677] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.html", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.html", lpFilePart=0x0) returned 0x7f [0092.677] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0092.677] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.html" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.html"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0092.677] GetFileType (hFile=0x444) returned 0x1 [0092.677] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be400) returned 1 [0092.677] GetFileType (hFile=0x444) returned 0x1 [0092.677] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be628 | out: lpFileSizeHigh=0x3be628*=0x0) returned 0x5c [0092.677] ReadFile (in: hFile=0x444, lpBuffer=0x22936d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be558, lpOverlapped=0x0 | out: lpBuffer=0x22936d8*, lpNumberOfBytesRead=0x3be558*=0x5c, lpOverlapped=0x0) returned 1 [0092.678] CloseHandle (hObject=0x444) returned 1 [0092.688] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.html", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.html", lpFilePart=0x0) returned 0x7f [0092.688] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0092.688] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.html" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0092.689] GetFileType (hFile=0x444) returned 0x1 [0092.689] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be400) returned 1 [0092.689] GetFileType (hFile=0x444) returned 0x1 [0092.689] WriteFile (in: hFile=0x444, lpBuffer=0x230a8f0*, nNumberOfBytesToWrite=0x60, lpNumberOfBytesWritten=0x3be468, lpOverlapped=0x0 | out: lpBuffer=0x230a8f0*, lpNumberOfBytesWritten=0x3be468*=0x60, lpOverlapped=0x0) returned 1 [0092.690] CloseHandle (hObject=0x444) returned 1 [0092.690] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.html", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.html", lpFilePart=0x0) returned 0x7f [0092.690] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.html.xuy", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.html.xuy", lpFilePart=0x0) returned 0x83 [0092.690] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0092.690] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.html" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.html"), fInfoLevelId=0x0, lpFileInformation=0x3be670 | out: lpFileInformation=0x3be670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79bbc69a, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x79bc3ada, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2318cd10, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x60)) returned 1 [0092.690] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0092.691] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.html" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.html"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.html.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.html.xuy")) returned 1 [0092.691] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.js", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.js", lpFilePart=0x0) returned 0x7d [0092.691] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0092.691] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.js"), fInfoLevelId=0x0, lpFileInformation=0x230bca0 | out: lpFileInformation=0x230bca0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79bc89de, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x79bcb00a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0xbcc13a00, ftLastWriteTime.dwHighDateTime=0x1d03f5e, nFileSizeHigh=0x0, nFileSizeLow=0x5f)) returned 1 [0092.691] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0092.692] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.js", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.js", lpFilePart=0x0) returned 0x7d [0092.692] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0092.692] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0092.692] GetFileType (hFile=0x444) returned 0x1 [0092.692] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be400) returned 1 [0092.692] GetFileType (hFile=0x444) returned 0x1 [0092.692] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be628 | out: lpFileSizeHigh=0x3be628*=0x0) returned 0x5f [0092.692] ReadFile (in: hFile=0x444, lpBuffer=0x230c068, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be558, lpOverlapped=0x0 | out: lpBuffer=0x230c068*, lpNumberOfBytesRead=0x3be558*=0x5f, lpOverlapped=0x0) returned 1 [0092.693] CloseHandle (hObject=0x444) returned 1 [0092.734] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.js", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.js", lpFilePart=0x0) returned 0x7d [0092.734] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0092.734] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0092.735] GetFileType (hFile=0x444) returned 0x1 [0092.735] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be400) returned 1 [0092.735] GetFileType (hFile=0x444) returned 0x1 [0092.735] WriteFile (in: hFile=0x444, lpBuffer=0x2180920*, nNumberOfBytesToWrite=0x60, lpNumberOfBytesWritten=0x3be468, lpOverlapped=0x0 | out: lpBuffer=0x2180920*, lpNumberOfBytesWritten=0x3be468*=0x60, lpOverlapped=0x0) returned 1 [0092.736] CloseHandle (hObject=0x444) returned 1 [0092.736] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.js", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.js", lpFilePart=0x0) returned 0x7d [0092.736] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.js.xuy", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.js.xuy", lpFilePart=0x0) returned 0x81 [0092.736] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0092.736] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.js"), fInfoLevelId=0x0, lpFileInformation=0x3be670 | out: lpFileInformation=0x3be670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79bc89de, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x79bcb00a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x231ff3cb, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x60)) returned 1 [0092.736] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0092.736] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.js"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.js.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.js.xuy")) returned 1 [0092.737] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\manifest.json", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\manifest.json", lpFilePart=0x0) returned 0x83 [0092.737] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0092.737] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\manifest.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\manifest.json"), fInfoLevelId=0x0, lpFileInformation=0x2181cd8 | out: lpFileInformation=0x2181cd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7984d73a, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x79c0327a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x79ff3941, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x2d6)) returned 1 [0092.737] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0092.737] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\manifest.json", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\manifest.json", lpFilePart=0x0) returned 0x83 [0092.737] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0092.738] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\manifest.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\manifest.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0092.738] GetFileType (hFile=0x444) returned 0x1 [0092.738] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be400) returned 1 [0092.738] GetFileType (hFile=0x444) returned 0x1 [0092.738] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be628 | out: lpFileSizeHigh=0x3be628*=0x0) returned 0x2d6 [0092.738] ReadFile (in: hFile=0x444, lpBuffer=0x2182348, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be558, lpOverlapped=0x0 | out: lpBuffer=0x2182348*, lpNumberOfBytesRead=0x3be558*=0x2d6, lpOverlapped=0x0) returned 1 [0092.744] CloseHandle (hObject=0x444) returned 1 [0092.755] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\manifest.json", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\manifest.json", lpFilePart=0x0) returned 0x83 [0092.755] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0092.755] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\manifest.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\manifest.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0092.757] GetFileType (hFile=0x444) returned 0x1 [0092.757] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be400) returned 1 [0092.757] GetFileType (hFile=0x444) returned 0x1 [0092.757] WriteFile (in: hFile=0x444, lpBuffer=0x21fa200*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x3be468, lpOverlapped=0x0 | out: lpBuffer=0x21fa200*, lpNumberOfBytesWritten=0x3be468*=0x2e0, lpOverlapped=0x0) returned 1 [0092.757] CloseHandle (hObject=0x444) returned 1 [0092.758] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\manifest.json", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\manifest.json", lpFilePart=0x0) returned 0x83 [0092.758] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\manifest.json.xuy", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\manifest.json.xuy", lpFilePart=0x0) returned 0x87 [0092.758] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0092.758] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\manifest.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\manifest.json"), fInfoLevelId=0x0, lpFileInformation=0x3be670 | out: lpFileInformation=0x3be670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7984d73a, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x79c0327a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x23225817, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2e0)) returned 1 [0092.758] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0092.758] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\manifest.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\manifest.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\manifest.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\manifest.json.xuy")) returned 1 [0092.759] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0092.759] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales", nBufferLength=0x105, lpBuffer=0x3be0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales", lpFilePart=0x0) returned 0x7e [0092.759] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\", nBufferLength=0x105, lpBuffer=0x3be060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\", lpFilePart=0x0) returned 0x7f [0092.759] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\*", lpFindFileData=0x3be270 | out: lpFindFileData=0x3be270) returned 0x5d7550 [0092.777] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0092.777] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0092.777] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0092.777] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0092.778] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0092.778] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0092.778] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0092.778] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0092.778] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0092.778] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0092.779] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0092.779] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0092.779] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0092.779] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0092.779] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0092.780] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0092.780] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0092.780] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0092.780] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0092.780] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0092.780] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0092.781] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0092.781] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0092.781] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0092.781] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0092.781] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0092.781] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0092.782] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0092.782] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0092.782] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0092.782] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0092.782] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0092.782] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0092.782] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0092.782] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0092.782] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0092.783] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0092.783] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0092.783] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0092.783] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0092.783] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0092.783] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0092.783] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0092.783] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 0 [0092.784] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0092.784] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0092.784] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0092.784] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0092.784] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales", nBufferLength=0x105, lpBuffer=0x3be0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales", lpFilePart=0x0) returned 0x7e [0092.784] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\", nBufferLength=0x105, lpBuffer=0x3be060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\", lpFilePart=0x0) returned 0x7f [0092.784] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\*", lpFindFileData=0x3be270 | out: lpFindFileData=0x3be270) returned 0x5d78b0 [0092.785] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0092.785] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0092.785] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0092.785] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0092.786] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0092.786] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0092.786] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0092.786] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0092.786] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0092.786] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0092.786] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0092.786] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0092.786] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0092.786] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0092.786] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0092.787] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0092.787] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0092.787] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0092.787] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0092.787] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0092.787] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0092.787] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0092.787] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0092.787] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0092.787] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0092.787] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0092.788] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0092.788] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0092.788] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0092.788] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0092.788] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0092.788] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0092.788] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0092.788] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0092.788] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0092.789] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0092.789] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0092.789] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0092.789] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0092.789] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0092.789] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0092.789] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0092.789] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0092.789] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 0 [0092.790] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0092.790] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0092.790] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0092.790] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0092.790] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar", lpFilePart=0x0) returned 0x81 [0092.791] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar\\", lpFilePart=0x0) returned 0x82 [0092.791] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7c70 [0092.792] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0092.792] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0092.792] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0092.792] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0092.792] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0092.792] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0092.792] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0092.792] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar", lpFilePart=0x0) returned 0x81 [0092.792] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar\\", lpFilePart=0x0) returned 0x82 [0092.792] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7370 [0092.793] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0092.793] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0092.793] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0092.793] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0092.793] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0092.793] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0092.793] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar\\messages.json", lpFilePart=0x0) returned 0x8f [0092.793] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0092.793] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x220f1c0 | out: lpFileInformation=0x220f1c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79860fc0, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x79860faa, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x79ffd592, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xfe)) returned 1 [0092.795] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0092.795] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar\\messages.json", lpFilePart=0x0) returned 0x8f [0092.795] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0092.795] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0092.795] GetFileType (hFile=0x444) returned 0x1 [0092.795] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0092.795] GetFileType (hFile=0x444) returned 0x1 [0092.795] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xfe [0092.795] ReadFile (in: hFile=0x444, lpBuffer=0x220f688, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x220f688*, lpNumberOfBytesRead=0x3be478*=0xfe, lpOverlapped=0x0) returned 1 [0092.796] CloseHandle (hObject=0x444) returned 1 [0092.809] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar\\messages.json", lpFilePart=0x0) returned 0x8f [0092.809] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0092.809] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0092.812] GetFileType (hFile=0x444) returned 0x1 [0092.812] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0092.812] GetFileType (hFile=0x444) returned 0x1 [0092.812] WriteFile (in: hFile=0x444, lpBuffer=0x2286a08*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x2286a08*, lpNumberOfBytesWritten=0x3be388*=0x100, lpOverlapped=0x0) returned 1 [0092.813] CloseHandle (hObject=0x444) returned 1 [0092.813] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar\\messages.json", lpFilePart=0x0) returned 0x8f [0092.813] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0092.813] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0092.813] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79860fc0, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x79860faa, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x232bdee4, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x100)) returned 1 [0092.813] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0092.813] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar\\messages.json.xuy")) returned 1 [0092.814] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0092.814] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg", lpFilePart=0x0) returned 0x81 [0092.814] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg\\", lpFilePart=0x0) returned 0x82 [0092.815] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7550 [0092.815] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0092.815] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0092.815] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0092.815] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0092.815] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0092.815] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0092.815] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0092.815] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg", lpFilePart=0x0) returned 0x81 [0092.816] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg\\", lpFilePart=0x0) returned 0x82 [0092.816] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7df0 [0092.816] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0092.816] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0092.816] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0092.816] FindClose (in: hFindFile=0x5d7df0 | out: hFindFile=0x5d7df0) returned 1 [0092.816] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0092.816] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0092.816] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg\\messages.json", lpFilePart=0x0) returned 0x8f [0092.816] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0092.816] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x228ab60 | out: lpFileInformation=0x228ab60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7987212a, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7987211a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x79ffd592, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x12f)) returned 1 [0092.817] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0092.817] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg\\messages.json", lpFilePart=0x0) returned 0x8f [0092.817] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0092.817] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0092.817] GetFileType (hFile=0x444) returned 0x1 [0092.817] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0092.817] GetFileType (hFile=0x444) returned 0x1 [0092.817] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x12f [0092.817] ReadFile (in: hFile=0x444, lpBuffer=0x228b058, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x228b058*, lpNumberOfBytesRead=0x3be478*=0x12f, lpOverlapped=0x0) returned 1 [0092.818] CloseHandle (hObject=0x444) returned 1 [0092.832] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg\\messages.json", lpFilePart=0x0) returned 0x8f [0092.832] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0092.832] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0092.833] GetFileType (hFile=0x444) returned 0x1 [0092.833] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0092.833] GetFileType (hFile=0x444) returned 0x1 [0092.833] WriteFile (in: hFile=0x444, lpBuffer=0x23026b0*, nNumberOfBytesToWrite=0x130, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x23026b0*, lpNumberOfBytesWritten=0x3be388*=0x130, lpOverlapped=0x0) returned 1 [0092.834] CloseHandle (hObject=0x444) returned 1 [0092.834] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg\\messages.json", lpFilePart=0x0) returned 0x8f [0092.834] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0092.834] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0092.835] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7987212a, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7987211a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x232e4164, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x130)) returned 1 [0092.835] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0092.835] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg\\messages.json.xuy")) returned 1 [0092.836] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0092.836] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca", lpFilePart=0x0) returned 0x81 [0092.836] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca\\", lpFilePart=0x0) returned 0x82 [0092.836] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7fd0 [0092.836] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0092.836] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0092.837] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0092.837] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0092.837] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0092.837] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0092.837] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0092.837] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca", lpFilePart=0x0) returned 0x81 [0092.837] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca\\", lpFilePart=0x0) returned 0x82 [0092.837] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7e50 [0092.837] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0092.837] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0092.838] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0092.838] FindClose (in: hFindFile=0x5d7e50 | out: hFindFile=0x5d7e50) returned 1 [0092.838] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0092.838] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0092.838] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca\\messages.json", lpFilePart=0x0) returned 0x8f [0092.838] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0092.838] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x2306808 | out: lpFileInformation=0x2306808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7987e487, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7987e46a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x79ffd592, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xe5)) returned 1 [0092.839] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0092.839] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca\\messages.json", lpFilePart=0x0) returned 0x8f [0092.839] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0092.840] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0092.840] GetFileType (hFile=0x444) returned 0x1 [0092.840] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0092.840] GetFileType (hFile=0x444) returned 0x1 [0092.840] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xe5 [0092.840] ReadFile (in: hFile=0x444, lpBuffer=0x2306cb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x2306cb8*, lpNumberOfBytesRead=0x3be478*=0xe5, lpOverlapped=0x0) returned 1 [0092.841] CloseHandle (hObject=0x444) returned 1 [0092.887] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca\\messages.json", lpFilePart=0x0) returned 0x8f [0092.887] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0092.887] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0092.889] GetFileType (hFile=0x444) returned 0x1 [0092.889] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0092.889] GetFileType (hFile=0x444) returned 0x1 [0092.889] WriteFile (in: hFile=0x444, lpBuffer=0x2180dd8*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x2180dd8*, lpNumberOfBytesWritten=0x3be388*=0xf0, lpOverlapped=0x0) returned 1 [0092.891] CloseHandle (hObject=0x444) returned 1 [0092.891] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca\\messages.json", lpFilePart=0x0) returned 0x8f [0092.891] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0092.891] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0092.891] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7987e487, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7987e46a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2337caa7, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xf0)) returned 1 [0092.891] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0092.891] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca\\messages.json.xuy")) returned 1 [0092.892] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0092.893] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs", lpFilePart=0x0) returned 0x81 [0092.893] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs\\", lpFilePart=0x0) returned 0x82 [0092.893] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d78b0 [0092.893] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0092.893] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0092.893] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0092.893] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0092.893] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0092.894] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0092.894] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0092.894] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs", lpFilePart=0x0) returned 0x81 [0092.894] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs\\", lpFilePart=0x0) returned 0x82 [0092.894] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7550 [0092.894] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0092.894] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0092.894] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0092.894] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0092.895] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0092.895] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0092.895] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs\\messages.json", lpFilePart=0x0) returned 0x8f [0092.895] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0092.895] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x2184f30 | out: lpFileInformation=0x2184f30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7988ceeb, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7988f5da, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x79fffc9e, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xda)) returned 1 [0092.895] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0092.895] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs\\messages.json", lpFilePart=0x0) returned 0x8f [0092.895] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0092.895] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0092.895] GetFileType (hFile=0x444) returned 0x1 [0092.895] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0092.895] GetFileType (hFile=0x444) returned 0x1 [0092.895] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xda [0092.895] ReadFile (in: hFile=0x444, lpBuffer=0x21853d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x21853d8*, lpNumberOfBytesRead=0x3be478*=0xda, lpOverlapped=0x0) returned 1 [0092.896] CloseHandle (hObject=0x444) returned 1 [0092.910] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs\\messages.json", lpFilePart=0x0) returned 0x8f [0092.910] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0092.910] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0092.912] GetFileType (hFile=0x444) returned 0x1 [0092.912] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0092.912] GetFileType (hFile=0x444) returned 0x1 [0092.912] WriteFile (in: hFile=0x444, lpBuffer=0x21fc718*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x21fc718*, lpNumberOfBytesWritten=0x3be388*=0xe0, lpOverlapped=0x0) returned 1 [0092.913] CloseHandle (hObject=0x444) returned 1 [0092.913] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs\\messages.json", lpFilePart=0x0) returned 0x8f [0092.913] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0092.913] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0092.913] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7988ceeb, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7988f5da, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x233a3140, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1 [0092.913] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0092.913] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs\\messages.json.xuy")) returned 1 [0092.914] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0092.914] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da", lpFilePart=0x0) returned 0x81 [0092.914] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da\\", lpFilePart=0x0) returned 0x82 [0092.914] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d8090 [0092.915] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0092.915] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0092.915] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0092.915] FindClose (in: hFindFile=0x5d8090 | out: hFindFile=0x5d8090) returned 1 [0092.915] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0092.915] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0092.915] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0092.915] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da", lpFilePart=0x0) returned 0x81 [0092.915] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da\\", lpFilePart=0x0) returned 0x82 [0092.915] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7550 [0092.916] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0092.916] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0092.916] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0092.916] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0092.916] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0092.916] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0092.916] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da\\messages.json", lpFilePart=0x0) returned 0x8f [0092.916] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0092.916] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x2200870 | out: lpFileInformation=0x2200870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7989923f, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7989921a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x79fffc9e, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xcf)) returned 1 [0092.918] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0092.918] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da\\messages.json", lpFilePart=0x0) returned 0x8f [0092.918] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0092.918] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0092.919] GetFileType (hFile=0x444) returned 0x1 [0092.919] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0092.919] GetFileType (hFile=0x444) returned 0x1 [0092.919] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xcf [0092.919] ReadFile (in: hFile=0x444, lpBuffer=0x2200d08, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x2200d08*, lpNumberOfBytesRead=0x3be478*=0xcf, lpOverlapped=0x0) returned 1 [0092.920] CloseHandle (hObject=0x444) returned 1 [0092.934] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da\\messages.json", lpFilePart=0x0) returned 0x8f [0092.934] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0092.934] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0092.937] GetFileType (hFile=0x444) returned 0x1 [0092.937] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0092.937] GetFileType (hFile=0x444) returned 0x1 [0092.937] WriteFile (in: hFile=0x444, lpBuffer=0x2278028*, nNumberOfBytesToWrite=0xd0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x2278028*, lpNumberOfBytesWritten=0x3be388*=0xd0, lpOverlapped=0x0) returned 1 [0092.938] CloseHandle (hObject=0x444) returned 1 [0092.938] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da\\messages.json", lpFilePart=0x0) returned 0x8f [0092.938] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0092.938] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0092.938] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7989923f, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7989921a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x233ef201, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xd0)) returned 1 [0092.938] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0092.938] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da\\messages.json.xuy")) returned 1 [0092.939] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0092.940] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de", lpFilePart=0x0) returned 0x81 [0092.940] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de\\", lpFilePart=0x0) returned 0x82 [0092.940] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7670 [0092.940] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0092.940] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0092.940] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0092.940] FindClose (in: hFindFile=0x5d7670 | out: hFindFile=0x5d7670) returned 1 [0092.940] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0092.941] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0092.941] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0092.941] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de", lpFilePart=0x0) returned 0x81 [0092.941] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de\\", lpFilePart=0x0) returned 0x82 [0092.941] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d78b0 [0092.941] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0092.941] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0092.941] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0092.941] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0092.942] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0092.942] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0092.942] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de\\messages.json", lpFilePart=0x0) returned 0x8f [0092.942] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0092.942] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x227c180 | out: lpFileInformation=0x227c180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x798a2e7d, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x79906fea, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x79fffc9e, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xdc)) returned 1 [0092.942] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0092.942] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de\\messages.json", lpFilePart=0x0) returned 0x8f [0092.942] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0092.942] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0092.942] GetFileType (hFile=0x444) returned 0x1 [0092.942] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0092.942] GetFileType (hFile=0x444) returned 0x1 [0092.942] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xdc [0092.942] ReadFile (in: hFile=0x444, lpBuffer=0x227c628, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x227c628*, lpNumberOfBytesRead=0x3be478*=0xdc, lpOverlapped=0x0) returned 1 [0092.943] CloseHandle (hObject=0x444) returned 1 [0092.971] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de\\messages.json", lpFilePart=0x0) returned 0x8f [0092.971] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0092.971] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0092.972] GetFileType (hFile=0x444) returned 0x1 [0092.972] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0092.972] GetFileType (hFile=0x444) returned 0x1 [0092.973] WriteFile (in: hFile=0x444, lpBuffer=0x22f3968*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x22f3968*, lpNumberOfBytesWritten=0x3be388*=0xe0, lpOverlapped=0x0) returned 1 [0092.973] CloseHandle (hObject=0x444) returned 1 [0092.973] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de\\messages.json", lpFilePart=0x0) returned 0x8f [0092.973] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0092.974] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0092.974] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x798a2e7d, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x79906fea, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2343b67a, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1 [0092.974] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0092.974] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de\\messages.json.xuy")) returned 1 [0092.975] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0092.975] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el", lpFilePart=0x0) returned 0x81 [0092.975] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el\\", lpFilePart=0x0) returned 0x82 [0092.975] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d78b0 [0092.975] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0092.975] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0092.976] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0092.976] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0092.976] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0092.976] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0092.976] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0092.976] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el", lpFilePart=0x0) returned 0x81 [0092.976] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el\\", lpFilePart=0x0) returned 0x82 [0092.976] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7370 [0092.976] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0092.977] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0092.977] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0092.977] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0092.977] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0092.977] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0092.977] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el\\messages.json", lpFilePart=0x0) returned 0x8f [0092.977] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0092.977] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x22f7ac0 | out: lpFileInformation=0x22f7ac0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79913375, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7991333a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x79fffc9e, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x130)) returned 1 [0092.979] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0092.979] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el\\messages.json", lpFilePart=0x0) returned 0x8f [0092.979] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0092.979] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0092.980] GetFileType (hFile=0x444) returned 0x1 [0092.980] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0092.980] GetFileType (hFile=0x444) returned 0x1 [0092.980] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x130 [0092.980] ReadFile (in: hFile=0x444, lpBuffer=0x22f7fb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x22f7fb8*, lpNumberOfBytesRead=0x3be478*=0x130, lpOverlapped=0x0) returned 1 [0092.981] CloseHandle (hObject=0x444) returned 1 [0093.022] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el\\messages.json", lpFilePart=0x0) returned 0x8f [0093.022] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0093.022] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0093.024] GetFileType (hFile=0x444) returned 0x1 [0093.024] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0093.024] GetFileType (hFile=0x444) returned 0x1 [0093.024] WriteFile (in: hFile=0x444, lpBuffer=0x216f680*, nNumberOfBytesToWrite=0x140, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x216f680*, lpNumberOfBytesWritten=0x3be388*=0x140, lpOverlapped=0x0) returned 1 [0093.025] CloseHandle (hObject=0x444) returned 1 [0093.025] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el\\messages.json", lpFilePart=0x0) returned 0x8f [0093.025] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0093.025] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0093.025] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79913375, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7991333a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x234addea, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x140)) returned 1 [0093.025] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0093.025] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el\\messages.json.xuy")) returned 1 [0093.026] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0093.026] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_GB", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_GB", lpFilePart=0x0) returned 0x84 [0093.026] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_GB\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_GB\\", lpFilePart=0x0) returned 0x85 [0093.026] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_GB\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7550 [0093.026] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0093.027] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0093.027] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0093.027] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0093.027] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0093.027] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0093.027] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0093.027] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_GB", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_GB", lpFilePart=0x0) returned 0x84 [0093.027] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_GB\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_GB\\", lpFilePart=0x0) returned 0x85 [0093.027] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_GB\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d78b0 [0093.027] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0093.027] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0093.028] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0093.028] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0093.028] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0093.028] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0093.028] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_GB\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_GB\\messages.json", lpFilePart=0x0) returned 0x92 [0093.028] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0093.028] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_GB\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_gb\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x21738a8 | out: lpFileInformation=0x21738a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7991f6cf, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x79921d9a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x79fffc9e, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xd5)) returned 1 [0093.028] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0093.028] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_GB\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_GB\\messages.json", lpFilePart=0x0) returned 0x92 [0093.028] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0093.028] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_GB\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_gb\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0093.028] GetFileType (hFile=0x444) returned 0x1 [0093.028] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0093.028] GetFileType (hFile=0x444) returned 0x1 [0093.028] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xd5 [0093.028] ReadFile (in: hFile=0x444, lpBuffer=0x2173d58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x2173d58*, lpNumberOfBytesRead=0x3be478*=0xd5, lpOverlapped=0x0) returned 1 [0093.031] CloseHandle (hObject=0x444) returned 1 [0093.041] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_GB\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_GB\\messages.json", lpFilePart=0x0) returned 0x92 [0093.041] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0093.041] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_GB\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_gb\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0093.043] GetFileType (hFile=0x444) returned 0x1 [0093.043] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0093.043] GetFileType (hFile=0x444) returned 0x1 [0093.043] WriteFile (in: hFile=0x444, lpBuffer=0x21eb0a8*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x21eb0a8*, lpNumberOfBytesWritten=0x3be388*=0xe0, lpOverlapped=0x0) returned 1 [0093.044] CloseHandle (hObject=0x444) returned 1 [0093.044] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_GB\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_GB\\messages.json", lpFilePart=0x0) returned 0x92 [0093.044] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_GB\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_GB\\messages.json.xuy", lpFilePart=0x0) returned 0x96 [0093.044] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0093.045] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_GB\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_gb\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7991f6cf, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x79921d9a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x234d4018, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1 [0093.045] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0093.045] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_GB\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_gb\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_GB\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_gb\\messages.json.xuy")) returned 1 [0093.046] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0093.046] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_US", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_US", lpFilePart=0x0) returned 0x84 [0093.046] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_US\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_US\\", lpFilePart=0x0) returned 0x85 [0093.046] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_US\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d78b0 [0093.046] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0093.046] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0093.046] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0093.046] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0093.046] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0093.046] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0093.046] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0093.046] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_US", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_US", lpFilePart=0x0) returned 0x84 [0093.046] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_US\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_US\\", lpFilePart=0x0) returned 0x85 [0093.047] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_US\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7550 [0093.047] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0093.047] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0093.047] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0093.047] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0093.047] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0093.047] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0093.047] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_US\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_US\\messages.json", lpFilePart=0x0) returned 0x92 [0093.047] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0093.047] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_US\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_us\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x21ef2e8 | out: lpFileInformation=0x21ef2e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79937d77, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7993a43a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7a002398, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xd5)) returned 1 [0093.048] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0093.048] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_US\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_US\\messages.json", lpFilePart=0x0) returned 0x92 [0093.048] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0093.048] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_US\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_us\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0093.049] GetFileType (hFile=0x444) returned 0x1 [0093.049] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0093.049] GetFileType (hFile=0x444) returned 0x1 [0093.049] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xd5 [0093.049] ReadFile (in: hFile=0x444, lpBuffer=0x21ef798, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x21ef798*, lpNumberOfBytesRead=0x3be478*=0xd5, lpOverlapped=0x0) returned 1 [0093.049] CloseHandle (hObject=0x444) returned 1 [0093.061] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_US\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_US\\messages.json", lpFilePart=0x0) returned 0x92 [0093.061] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0093.061] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_US\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_us\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0093.062] GetFileType (hFile=0x444) returned 0x1 [0093.062] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0093.062] GetFileType (hFile=0x444) returned 0x1 [0093.062] WriteFile (in: hFile=0x444, lpBuffer=0x2266ae8*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x2266ae8*, lpNumberOfBytesWritten=0x3be388*=0xe0, lpOverlapped=0x0) returned 1 [0093.063] CloseHandle (hObject=0x444) returned 1 [0093.063] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_US\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_US\\messages.json", lpFilePart=0x0) returned 0x92 [0093.063] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_US\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_US\\messages.json.xuy", lpFilePart=0x0) returned 0x96 [0093.063] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0093.063] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_US\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_us\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79937d77, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7993a43a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x23520842, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1 [0093.064] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0093.064] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_US\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_us\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_US\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_us\\messages.json.xuy")) returned 1 [0093.064] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0093.064] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es", lpFilePart=0x0) returned 0x81 [0093.064] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es\\", lpFilePart=0x0) returned 0x82 [0093.065] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7370 [0093.065] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0093.065] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0093.065] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0093.065] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0093.065] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0093.065] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0093.065] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0093.065] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es", lpFilePart=0x0) returned 0x81 [0093.065] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es\\", lpFilePart=0x0) returned 0x82 [0093.065] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d75b0 [0093.066] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0093.066] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0093.066] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0093.066] FindClose (in: hFindFile=0x5d75b0 | out: hFindFile=0x5d75b0) returned 1 [0093.066] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0093.066] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0093.066] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es\\messages.json", lpFilePart=0x0) returned 0x8f [0093.066] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0093.066] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x226ac58 | out: lpFileInformation=0x226ac58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x799440bf, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7994678a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7a002398, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xe5)) returned 1 [0093.066] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0093.066] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es\\messages.json", lpFilePart=0x0) returned 0x8f [0093.066] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0093.066] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0093.067] GetFileType (hFile=0x444) returned 0x1 [0093.067] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0093.067] GetFileType (hFile=0x444) returned 0x1 [0093.067] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xe5 [0093.067] ReadFile (in: hFile=0x444, lpBuffer=0x226b108, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x226b108*, lpNumberOfBytesRead=0x3be478*=0xe5, lpOverlapped=0x0) returned 1 [0093.069] CloseHandle (hObject=0x444) returned 1 [0093.079] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es\\messages.json", lpFilePart=0x0) returned 0x8f [0093.079] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0093.079] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0093.081] GetFileType (hFile=0x444) returned 0x1 [0093.081] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0093.081] GetFileType (hFile=0x444) returned 0x1 [0093.081] WriteFile (in: hFile=0x444, lpBuffer=0x22e2470*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x22e2470*, lpNumberOfBytesWritten=0x3be388*=0xf0, lpOverlapped=0x0) returned 1 [0093.081] CloseHandle (hObject=0x444) returned 1 [0093.081] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es\\messages.json", lpFilePart=0x0) returned 0x8f [0093.082] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0093.082] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0093.082] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x799440bf, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7994678a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x23546695, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xf0)) returned 1 [0093.082] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0093.082] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es\\messages.json.xuy")) returned 1 [0093.083] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0093.083] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419", lpFilePart=0x0) returned 0x85 [0093.083] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419\\", lpFilePart=0x0) returned 0x86 [0093.083] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d73d0 [0093.083] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0093.083] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0093.083] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0093.083] FindClose (in: hFindFile=0x5d73d0 | out: hFindFile=0x5d73d0) returned 1 [0093.083] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0093.083] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0093.083] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0093.083] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419", lpFilePart=0x0) returned 0x85 [0093.084] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419\\", lpFilePart=0x0) returned 0x86 [0093.084] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d79d0 [0093.084] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0093.084] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0093.084] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0093.084] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0093.084] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0093.084] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0093.084] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419\\messages.json", lpFilePart=0x0) returned 0x93 [0093.084] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0093.084] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x22e66b8 | out: lpFileInformation=0x22e66b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7996d8e3, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7996d88a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7a002398, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xe5)) returned 1 [0093.086] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0093.086] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419\\messages.json", lpFilePart=0x0) returned 0x93 [0093.086] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0093.086] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0093.087] GetFileType (hFile=0x444) returned 0x1 [0093.087] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0093.087] GetFileType (hFile=0x444) returned 0x1 [0093.087] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xe5 [0093.087] ReadFile (in: hFile=0x444, lpBuffer=0x22e6b78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x22e6b78*, lpNumberOfBytesRead=0x3be478*=0xe5, lpOverlapped=0x0) returned 1 [0093.088] CloseHandle (hObject=0x444) returned 1 [0093.099] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419\\messages.json", lpFilePart=0x0) returned 0x93 [0093.099] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0093.099] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0093.100] GetFileType (hFile=0x444) returned 0x1 [0093.100] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0093.100] GetFileType (hFile=0x444) returned 0x1 [0093.100] WriteFile (in: hFile=0x444, lpBuffer=0x235dee8*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x235dee8*, lpNumberOfBytesWritten=0x3be388*=0xf0, lpOverlapped=0x0) returned 1 [0093.102] CloseHandle (hObject=0x444) returned 1 [0093.102] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419\\messages.json", lpFilePart=0x0) returned 0x93 [0093.102] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419\\messages.json.xuy", lpFilePart=0x0) returned 0x97 [0093.102] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0093.102] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7996d8e3, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7996d88a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2356c903, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xf0)) returned 1 [0093.102] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0093.102] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419\\messages.json.xuy")) returned 1 [0093.103] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0093.103] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et", lpFilePart=0x0) returned 0x81 [0093.103] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et\\", lpFilePart=0x0) returned 0x82 [0093.103] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7610 [0093.103] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0093.103] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0093.104] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0093.104] FindClose (in: hFindFile=0x5d7610 | out: hFindFile=0x5d7610) returned 1 [0093.104] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0093.104] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0093.108] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0093.108] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et", lpFilePart=0x0) returned 0x81 [0093.108] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et\\", lpFilePart=0x0) returned 0x82 [0093.108] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d79d0 [0093.109] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0093.109] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0093.109] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0093.109] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0093.109] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0093.109] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0093.109] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et\\messages.json", lpFilePart=0x0) returned 0x8f [0093.109] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0093.109] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x2161a68 | out: lpFileInformation=0x2161a68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79983879, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7998381a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7a002398, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xe2)) returned 1 [0093.109] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0093.109] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et\\messages.json", lpFilePart=0x0) returned 0x8f [0093.109] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0093.110] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0093.110] GetFileType (hFile=0x444) returned 0x1 [0093.110] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0093.110] GetFileType (hFile=0x444) returned 0x1 [0093.110] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xe2 [0093.110] ReadFile (in: hFile=0x444, lpBuffer=0x2161f18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x2161f18*, lpNumberOfBytesRead=0x3be478*=0xe2, lpOverlapped=0x0) returned 1 [0093.111] CloseHandle (hObject=0x444) returned 1 [0093.148] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et\\messages.json", lpFilePart=0x0) returned 0x8f [0093.148] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0093.148] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0093.149] GetFileType (hFile=0x444) returned 0x1 [0093.149] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0093.149] GetFileType (hFile=0x444) returned 0x1 [0093.149] WriteFile (in: hFile=0x444, lpBuffer=0x21d9280*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x21d9280*, lpNumberOfBytesWritten=0x3be388*=0xf0, lpOverlapped=0x0) returned 1 [0093.150] CloseHandle (hObject=0x444) returned 1 [0093.150] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et\\messages.json", lpFilePart=0x0) returned 0x8f [0093.150] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0093.150] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0093.150] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79983879, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7998381a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x235df3cd, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xf0)) returned 1 [0093.150] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0093.150] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et\\messages.json.xuy")) returned 1 [0093.151] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0093.151] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi", lpFilePart=0x0) returned 0x81 [0093.151] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi\\", lpFilePart=0x0) returned 0x82 [0093.151] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7370 [0093.152] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0093.152] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0093.152] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0093.152] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0093.152] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0093.152] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0093.152] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0093.152] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi", lpFilePart=0x0) returned 0x81 [0093.152] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi\\", lpFilePart=0x0) returned 0x82 [0093.152] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7e50 [0093.152] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0093.152] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0093.153] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0093.153] FindClose (in: hFindFile=0x5d7e50 | out: hFindFile=0x5d7e50) returned 1 [0093.153] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0093.153] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0093.153] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi\\messages.json", lpFilePart=0x0) returned 0x8f [0093.153] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0093.153] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x21dd3d8 | out: lpFileInformation=0x21dd3d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7998fbbd, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7998fb6a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7a0071d0, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xdc)) returned 1 [0093.157] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0093.157] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi\\messages.json", lpFilePart=0x0) returned 0x8f [0093.157] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0093.157] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0093.158] GetFileType (hFile=0x444) returned 0x1 [0093.158] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0093.158] GetFileType (hFile=0x444) returned 0x1 [0093.158] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xdc [0093.158] ReadFile (in: hFile=0x444, lpBuffer=0x21dd880, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x21dd880*, lpNumberOfBytesRead=0x3be478*=0xdc, lpOverlapped=0x0) returned 1 [0093.159] CloseHandle (hObject=0x444) returned 1 [0093.172] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi\\messages.json", lpFilePart=0x0) returned 0x8f [0093.172] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0093.172] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0093.174] GetFileType (hFile=0x444) returned 0x1 [0093.174] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0093.174] GetFileType (hFile=0x444) returned 0x1 [0093.174] WriteFile (in: hFile=0x444, lpBuffer=0x2254bc0*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x2254bc0*, lpNumberOfBytesWritten=0x3be388*=0xe0, lpOverlapped=0x0) returned 1 [0093.174] CloseHandle (hObject=0x444) returned 1 [0093.175] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi\\messages.json", lpFilePart=0x0) returned 0x8f [0093.175] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0093.175] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0093.175] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7998fbbd, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7998fb6a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2362b42c, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1 [0093.175] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0093.175] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi\\messages.json.xuy")) returned 1 [0093.176] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0093.176] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil", lpFilePart=0x0) returned 0x82 [0093.176] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil\\", lpFilePart=0x0) returned 0x83 [0093.176] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d79d0 [0093.176] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0093.176] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0093.176] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0093.176] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0093.176] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0093.176] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0093.177] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0093.177] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil", lpFilePart=0x0) returned 0x82 [0093.177] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil\\", lpFilePart=0x0) returned 0x83 [0093.177] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7cd0 [0093.177] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0093.177] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0093.177] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0093.177] FindClose (in: hFindFile=0x5d7cd0 | out: hFindFile=0x5d7cd0) returned 1 [0093.177] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0093.177] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0093.177] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil\\messages.json", lpFilePart=0x0) returned 0x90 [0093.177] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0093.177] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x2258da8 | out: lpFileInformation=0x2258da8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79999811, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7999e5ca, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7a0071d0, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xdf)) returned 1 [0093.178] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0093.178] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil\\messages.json", lpFilePart=0x0) returned 0x90 [0093.178] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0093.178] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0093.178] GetFileType (hFile=0x444) returned 0x1 [0093.178] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0093.178] GetFileType (hFile=0x444) returned 0x1 [0093.178] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xdf [0093.178] ReadFile (in: hFile=0x444, lpBuffer=0x2259260, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x2259260*, lpNumberOfBytesRead=0x3be478*=0xdf, lpOverlapped=0x0) returned 1 [0093.179] CloseHandle (hObject=0x444) returned 1 [0093.189] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil\\messages.json", lpFilePart=0x0) returned 0x90 [0093.189] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0093.189] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0093.191] GetFileType (hFile=0x444) returned 0x1 [0093.191] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0093.191] GetFileType (hFile=0x444) returned 0x1 [0093.191] WriteFile (in: hFile=0x444, lpBuffer=0x22d05a8*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x22d05a8*, lpNumberOfBytesWritten=0x3be388*=0xe0, lpOverlapped=0x0) returned 1 [0093.191] CloseHandle (hObject=0x444) returned 1 [0093.192] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil\\messages.json", lpFilePart=0x0) returned 0x90 [0093.192] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil\\messages.json.xuy", lpFilePart=0x0) returned 0x94 [0093.192] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0093.192] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79999811, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7999e5ca, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x23651697, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1 [0093.192] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0093.192] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil\\messages.json.xuy")) returned 1 [0093.193] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0093.193] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr", lpFilePart=0x0) returned 0x81 [0093.193] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr\\", lpFilePart=0x0) returned 0x82 [0093.193] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7fd0 [0093.193] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0093.193] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0093.193] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0093.193] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0093.194] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0093.194] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0093.194] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0093.194] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr", lpFilePart=0x0) returned 0x81 [0093.194] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr\\", lpFilePart=0x0) returned 0x82 [0093.194] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7c70 [0093.194] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0093.194] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0093.194] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0093.194] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0093.194] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0093.194] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0093.194] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr\\messages.json", lpFilePart=0x0) returned 0x8f [0093.195] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0093.195] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x22d4718 | out: lpFileInformation=0x22d4718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x799b1eb6, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x799b1e4a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7a0071d0, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xe2)) returned 1 [0093.196] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0093.196] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr\\messages.json", lpFilePart=0x0) returned 0x8f [0093.196] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0093.196] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0093.197] GetFileType (hFile=0x444) returned 0x1 [0093.197] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0093.197] GetFileType (hFile=0x444) returned 0x1 [0093.197] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xe2 [0093.197] ReadFile (in: hFile=0x444, lpBuffer=0x22d4bc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x22d4bc8*, lpNumberOfBytesRead=0x3be478*=0xe2, lpOverlapped=0x0) returned 1 [0093.198] CloseHandle (hObject=0x444) returned 1 [0093.212] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr\\messages.json", lpFilePart=0x0) returned 0x8f [0093.212] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0093.212] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0093.213] GetFileType (hFile=0x444) returned 0x1 [0093.213] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0093.213] GetFileType (hFile=0x444) returned 0x1 [0093.214] WriteFile (in: hFile=0x444, lpBuffer=0x234bf30*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x234bf30*, lpNumberOfBytesWritten=0x3be388*=0xf0, lpOverlapped=0x0) returned 1 [0093.214] CloseHandle (hObject=0x444) returned 1 [0093.215] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr\\messages.json", lpFilePart=0x0) returned 0x8f [0093.215] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0093.215] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0093.215] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x799b1eb6, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x799b1e4a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x23699341, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xf0)) returned 1 [0093.215] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0093.215] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr\\messages.json.xuy")) returned 1 [0093.217] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0093.217] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he", lpFilePart=0x0) returned 0x81 [0093.217] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he\\", lpFilePart=0x0) returned 0x82 [0093.217] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7cd0 [0093.217] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0093.218] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0093.218] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0093.218] FindClose (in: hFindFile=0x5d7cd0 | out: hFindFile=0x5d7cd0) returned 1 [0093.218] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0093.218] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0093.218] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0093.218] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he", lpFilePart=0x0) returned 0x81 [0093.218] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he\\", lpFilePart=0x0) returned 0x82 [0093.218] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d79d0 [0093.218] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0093.218] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0093.219] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0093.219] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0093.219] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0093.219] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0093.220] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he\\messages.json", lpFilePart=0x0) returned 0x8f [0093.220] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0093.220] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x2350088 | out: lpFileInformation=0x2350088*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x799bbaf8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x799be19a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7a0098e3, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xee)) returned 1 [0093.220] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0093.220] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he\\messages.json", lpFilePart=0x0) returned 0x8f [0093.220] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0093.220] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0093.220] GetFileType (hFile=0x444) returned 0x1 [0093.220] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0093.220] GetFileType (hFile=0x444) returned 0x1 [0093.220] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xee [0093.220] ReadFile (in: hFile=0x444, lpBuffer=0x2350540, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x2350540*, lpNumberOfBytesRead=0x3be478*=0xee, lpOverlapped=0x0) returned 1 [0093.222] CloseHandle (hObject=0x444) returned 1 [0093.268] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he\\messages.json", lpFilePart=0x0) returned 0x8f [0093.268] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0093.268] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0093.269] GetFileType (hFile=0x444) returned 0x1 [0093.269] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0093.269] GetFileType (hFile=0x444) returned 0x1 [0093.269] WriteFile (in: hFile=0x444, lpBuffer=0x21c7dd8*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x21c7dd8*, lpNumberOfBytesWritten=0x3be388*=0xf0, lpOverlapped=0x0) returned 1 [0093.272] CloseHandle (hObject=0x444) returned 1 [0093.273] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he\\messages.json", lpFilePart=0x0) returned 0x8f [0093.273] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0093.273] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0093.273] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x799bbaf8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x799be19a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x23710f08, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xf0)) returned 1 [0093.273] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0093.273] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he\\messages.json.xuy")) returned 1 [0093.274] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0093.274] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi", lpFilePart=0x0) returned 0x81 [0093.274] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi\\", lpFilePart=0x0) returned 0x82 [0093.274] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7c70 [0093.274] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0093.274] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0093.274] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0093.274] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0093.275] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0093.275] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0093.275] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0093.275] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi", lpFilePart=0x0) returned 0x81 [0093.275] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi\\", lpFilePart=0x0) returned 0x82 [0093.275] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d79d0 [0093.275] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0093.275] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0093.275] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0093.275] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0093.275] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0093.275] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0093.275] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi\\messages.json", lpFilePart=0x0) returned 0x8f [0093.276] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0093.276] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x21cbf30 | out: lpFileInformation=0x21cbf30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x799d4197, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x799d412a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7a0098e3, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x11a)) returned 1 [0093.277] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0093.277] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi\\messages.json", lpFilePart=0x0) returned 0x8f [0093.277] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0093.277] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0093.277] GetFileType (hFile=0x444) returned 0x1 [0093.278] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0093.278] GetFileType (hFile=0x444) returned 0x1 [0093.278] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x11a [0093.278] ReadFile (in: hFile=0x444, lpBuffer=0x21cc418, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x21cc418*, lpNumberOfBytesRead=0x3be478*=0x11a, lpOverlapped=0x0) returned 1 [0093.279] CloseHandle (hObject=0x444) returned 1 [0093.289] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi\\messages.json", lpFilePart=0x0) returned 0x8f [0093.290] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0093.290] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0093.291] GetFileType (hFile=0x444) returned 0x1 [0093.291] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0093.291] GetFileType (hFile=0x444) returned 0x1 [0093.291] WriteFile (in: hFile=0x444, lpBuffer=0x2243a20*, nNumberOfBytesToWrite=0x120, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x2243a20*, lpNumberOfBytesWritten=0x3be388*=0x120, lpOverlapped=0x0) returned 1 [0093.292] CloseHandle (hObject=0x444) returned 1 [0093.292] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi\\messages.json", lpFilePart=0x0) returned 0x8f [0093.292] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0093.292] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0093.292] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x799d4197, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x799d412a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x23736d4e, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x120)) returned 1 [0093.292] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0093.292] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi\\messages.json.xuy")) returned 1 [0093.293] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0093.293] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu", lpFilePart=0x0) returned 0x81 [0093.293] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu\\", lpFilePart=0x0) returned 0x82 [0093.293] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7670 [0093.294] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0093.294] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0093.294] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0093.294] FindClose (in: hFindFile=0x5d7670 | out: hFindFile=0x5d7670) returned 1 [0093.294] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0093.294] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0093.294] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0093.294] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu", lpFilePart=0x0) returned 0x81 [0093.294] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu\\", lpFilePart=0x0) returned 0x82 [0093.294] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d78b0 [0093.295] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0093.295] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0093.295] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0093.295] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0093.296] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0093.296] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0093.296] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu\\messages.json", lpFilePart=0x0) returned 0x8f [0093.296] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0093.296] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x2247b78 | out: lpFileInformation=0x2247b78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x799e04ee, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x799e047a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7a0098e3, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xeb)) returned 1 [0093.296] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0093.296] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu\\messages.json", lpFilePart=0x0) returned 0x8f [0093.296] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0093.296] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0093.296] GetFileType (hFile=0x444) returned 0x1 [0093.296] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0093.296] GetFileType (hFile=0x444) returned 0x1 [0093.296] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xeb [0093.296] ReadFile (in: hFile=0x444, lpBuffer=0x2248030, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x2248030*, lpNumberOfBytesRead=0x3be478*=0xeb, lpOverlapped=0x0) returned 1 [0093.297] CloseHandle (hObject=0x444) returned 1 [0093.309] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu\\messages.json", lpFilePart=0x0) returned 0x8f [0093.309] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0093.309] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0093.311] GetFileType (hFile=0x444) returned 0x1 [0093.311] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0093.311] GetFileType (hFile=0x444) returned 0x1 [0093.311] WriteFile (in: hFile=0x444, lpBuffer=0x22bf390*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x22bf390*, lpNumberOfBytesWritten=0x3be388*=0xf0, lpOverlapped=0x0) returned 1 [0093.312] CloseHandle (hObject=0x444) returned 1 [0093.312] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu\\messages.json", lpFilePart=0x0) returned 0x8f [0093.312] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0093.312] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0093.312] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x799e04ee, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x799e047a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x23783248, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xf0)) returned 1 [0093.312] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0093.312] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu\\messages.json.xuy")) returned 1 [0093.313] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0093.314] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id", lpFilePart=0x0) returned 0x81 [0093.314] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id\\", lpFilePart=0x0) returned 0x82 [0093.314] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d78b0 [0093.314] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0093.314] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0093.314] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0093.314] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0093.314] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0093.314] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0093.314] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0093.315] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id", lpFilePart=0x0) returned 0x81 [0093.315] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id\\", lpFilePart=0x0) returned 0x82 [0093.315] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7e50 [0093.315] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0093.315] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0093.315] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0093.315] FindClose (in: hFindFile=0x5d7e50 | out: hFindFile=0x5d7e50) returned 1 [0093.315] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0093.315] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0093.315] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id\\messages.json", lpFilePart=0x0) returned 0x8f [0093.315] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0093.315] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x22c34e8 | out: lpFileInformation=0x22c34e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x799ec845, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x799f15ea, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7a0098e3, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xd8)) returned 1 [0093.317] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0093.317] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id\\messages.json", lpFilePart=0x0) returned 0x8f [0093.317] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0093.317] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0093.317] GetFileType (hFile=0x444) returned 0x1 [0093.317] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0093.317] GetFileType (hFile=0x444) returned 0x1 [0093.317] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xd8 [0093.317] ReadFile (in: hFile=0x444, lpBuffer=0x22c3988, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x22c3988*, lpNumberOfBytesRead=0x3be478*=0xd8, lpOverlapped=0x0) returned 1 [0093.318] CloseHandle (hObject=0x444) returned 1 [0093.329] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id\\messages.json", lpFilePart=0x0) returned 0x8f [0093.329] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0093.329] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0093.331] GetFileType (hFile=0x444) returned 0x1 [0093.331] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0093.331] GetFileType (hFile=0x444) returned 0x1 [0093.331] WriteFile (in: hFile=0x444, lpBuffer=0x233acc8*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x233acc8*, lpNumberOfBytesWritten=0x3be388*=0xe0, lpOverlapped=0x0) returned 1 [0093.332] CloseHandle (hObject=0x444) returned 1 [0093.332] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id\\messages.json", lpFilePart=0x0) returned 0x8f [0093.332] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0093.332] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0093.332] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x799ec845, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x799f15ea, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x237a95cb, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1 [0093.332] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0093.332] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id\\messages.json.xuy")) returned 1 [0093.333] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0093.333] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it", lpFilePart=0x0) returned 0x81 [0093.333] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it\\", lpFilePart=0x0) returned 0x82 [0093.334] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7fd0 [0093.334] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0093.334] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0093.334] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0093.334] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0093.334] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0093.334] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0093.334] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0093.334] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it", lpFilePart=0x0) returned 0x81 [0093.334] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it\\", lpFilePart=0x0) returned 0x82 [0093.335] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7d30 [0093.335] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0093.335] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0093.335] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0093.335] FindClose (in: hFindFile=0x5d7d30 | out: hFindFile=0x5d7d30) returned 1 [0093.335] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0093.335] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0093.335] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it\\messages.json", lpFilePart=0x0) returned 0x8f [0093.335] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0093.335] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x233ee20 | out: lpFileInformation=0x233ee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a1d582, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x79a1d50a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7a00c056, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xd7)) returned 1 [0093.335] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0093.336] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it\\messages.json", lpFilePart=0x0) returned 0x8f [0093.336] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0093.336] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0093.336] GetFileType (hFile=0x444) returned 0x1 [0093.336] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0093.336] GetFileType (hFile=0x444) returned 0x1 [0093.336] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xd7 [0093.336] ReadFile (in: hFile=0x444, lpBuffer=0x233f2c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x233f2c0*, lpNumberOfBytesRead=0x3be478*=0xd7, lpOverlapped=0x0) returned 1 [0093.339] CloseHandle (hObject=0x444) returned 1 [0093.472] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it\\messages.json", lpFilePart=0x0) returned 0x8f [0093.472] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0093.472] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0093.473] GetFileType (hFile=0x444) returned 0x1 [0093.473] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0093.473] GetFileType (hFile=0x444) returned 0x1 [0093.474] WriteFile (in: hFile=0x444, lpBuffer=0x21b65c8*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x21b65c8*, lpNumberOfBytesWritten=0x3be388*=0xe0, lpOverlapped=0x0) returned 1 [0093.474] CloseHandle (hObject=0x444) returned 1 [0093.474] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it\\messages.json", lpFilePart=0x0) returned 0x8f [0093.474] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0093.474] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0093.474] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a1d582, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x79a1d50a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x23900a26, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1 [0093.475] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0093.475] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it\\messages.json.xuy")) returned 1 [0093.475] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0093.476] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja", lpFilePart=0x0) returned 0x81 [0093.476] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja\\", lpFilePart=0x0) returned 0x82 [0093.476] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7c70 [0093.476] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0093.476] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0093.476] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0093.476] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0093.476] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0093.476] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0093.476] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0093.476] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja", lpFilePart=0x0) returned 0x81 [0093.476] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja\\", lpFilePart=0x0) returned 0x82 [0093.477] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7eb0 [0093.477] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0093.477] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0093.477] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0093.477] FindClose (in: hFindFile=0x5d7eb0 | out: hFindFile=0x5d7eb0) returned 1 [0093.477] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0093.477] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0093.477] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja\\messages.json", lpFilePart=0x0) returned 0x8f [0093.477] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0093.477] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x21ba720 | out: lpFileInformation=0x21ba720*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a30e15, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x79a30d8a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7a00c056, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xf5)) returned 1 [0093.479] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0093.479] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja\\messages.json", lpFilePart=0x0) returned 0x8f [0093.479] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0093.479] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0093.479] GetFileType (hFile=0x444) returned 0x1 [0093.479] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0093.479] GetFileType (hFile=0x444) returned 0x1 [0093.479] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xf5 [0093.479] ReadFile (in: hFile=0x444, lpBuffer=0x21babe0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x21babe0*, lpNumberOfBytesRead=0x3be478*=0xf5, lpOverlapped=0x0) returned 1 [0093.480] CloseHandle (hObject=0x444) returned 1 [0093.494] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja\\messages.json", lpFilePart=0x0) returned 0x8f [0093.494] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0093.494] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0093.495] GetFileType (hFile=0x444) returned 0x1 [0093.495] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0093.495] GetFileType (hFile=0x444) returned 0x1 [0093.495] WriteFile (in: hFile=0x444, lpBuffer=0x2231f68*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x2231f68*, lpNumberOfBytesWritten=0x3be388*=0x100, lpOverlapped=0x0) returned 1 [0093.496] CloseHandle (hObject=0x444) returned 1 [0093.496] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja\\messages.json", lpFilePart=0x0) returned 0x8f [0093.496] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0093.496] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0093.496] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a30e15, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x79a30d8a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x23926c46, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x100)) returned 1 [0093.497] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0093.497] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja\\messages.json.xuy")) returned 1 [0093.498] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0093.498] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko", lpFilePart=0x0) returned 0x81 [0093.498] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko\\", lpFilePart=0x0) returned 0x82 [0093.498] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7a90 [0093.498] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0093.499] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0093.499] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0093.499] FindClose (in: hFindFile=0x5d7a90 | out: hFindFile=0x5d7a90) returned 1 [0093.499] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0093.499] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0093.499] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0093.499] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko", lpFilePart=0x0) returned 0x81 [0093.499] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko\\", lpFilePart=0x0) returned 0x82 [0093.499] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d81b0 [0093.499] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0093.499] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0093.500] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0093.500] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0093.500] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0093.500] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0093.500] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko\\messages.json", lpFilePart=0x0) returned 0x8f [0093.500] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0093.500] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x22360c0 | out: lpFileInformation=0x22360c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a44698, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x79a4bb3a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7a00e6ec, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1 [0093.500] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0093.500] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko\\messages.json", lpFilePart=0x0) returned 0x8f [0093.500] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0093.500] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0093.500] GetFileType (hFile=0x444) returned 0x1 [0093.500] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0093.500] GetFileType (hFile=0x444) returned 0x1 [0093.500] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xe0 [0093.500] ReadFile (in: hFile=0x444, lpBuffer=0x2236568, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x2236568*, lpNumberOfBytesRead=0x3be478*=0xe0, lpOverlapped=0x0) returned 1 [0093.503] CloseHandle (hObject=0x444) returned 1 [0093.514] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko\\messages.json", lpFilePart=0x0) returned 0x8f [0093.514] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0093.514] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0093.515] GetFileType (hFile=0x444) returned 0x1 [0093.515] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0093.515] GetFileType (hFile=0x444) returned 0x1 [0093.516] WriteFile (in: hFile=0x444, lpBuffer=0x22ad8d0*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x22ad8d0*, lpNumberOfBytesWritten=0x3be388*=0xf0, lpOverlapped=0x0) returned 1 [0093.516] CloseHandle (hObject=0x444) returned 1 [0093.516] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko\\messages.json", lpFilePart=0x0) returned 0x8f [0093.516] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0093.516] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0093.517] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a44698, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x79a4bb3a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x239731b4, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xf0)) returned 1 [0093.517] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0093.517] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko\\messages.json.xuy")) returned 1 [0093.518] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0093.518] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt", lpFilePart=0x0) returned 0x81 [0093.518] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt\\", lpFilePart=0x0) returned 0x82 [0093.518] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7a30 [0093.518] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0093.518] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0093.518] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0093.518] FindClose (in: hFindFile=0x5d7a30 | out: hFindFile=0x5d7a30) returned 1 [0093.518] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0093.519] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0093.519] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0093.519] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt", lpFilePart=0x0) returned 0x81 [0093.519] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt\\", lpFilePart=0x0) returned 0x82 [0093.519] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d81b0 [0093.519] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0093.519] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0093.519] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0093.519] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0093.519] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0093.519] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0093.519] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt\\messages.json", lpFilePart=0x0) returned 0x8f [0093.520] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0093.520] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x22b1a28 | out: lpFileInformation=0x22b1a28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a57f21, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x79a57e8a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7a010e18, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xeb)) returned 1 [0093.521] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0093.521] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt\\messages.json", lpFilePart=0x0) returned 0x8f [0093.521] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0093.521] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0093.521] GetFileType (hFile=0x444) returned 0x1 [0093.521] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0093.521] GetFileType (hFile=0x444) returned 0x1 [0093.521] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xeb [0093.521] ReadFile (in: hFile=0x444, lpBuffer=0x22b1ee0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x22b1ee0*, lpNumberOfBytesRead=0x3be478*=0xeb, lpOverlapped=0x0) returned 1 [0093.523] CloseHandle (hObject=0x444) returned 1 [0093.534] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt\\messages.json", lpFilePart=0x0) returned 0x8f [0093.534] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0093.534] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0093.536] GetFileType (hFile=0x444) returned 0x1 [0093.536] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0093.536] GetFileType (hFile=0x444) returned 0x1 [0093.536] WriteFile (in: hFile=0x444, lpBuffer=0x2329240*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x2329240*, lpNumberOfBytesWritten=0x3be388*=0xf0, lpOverlapped=0x0) returned 1 [0093.536] CloseHandle (hObject=0x444) returned 1 [0093.537] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt\\messages.json", lpFilePart=0x0) returned 0x8f [0093.537] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0093.537] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0093.537] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a57f21, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x79a57e8a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x239993e3, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xf0)) returned 1 [0093.537] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0093.537] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt\\messages.json.xuy")) returned 1 [0093.538] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0093.538] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv", lpFilePart=0x0) returned 0x81 [0093.538] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv\\", lpFilePart=0x0) returned 0x82 [0093.538] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d78b0 [0093.538] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0093.538] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0093.538] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0093.539] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0093.539] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0093.539] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0093.539] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0093.539] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv", lpFilePart=0x0) returned 0x81 [0093.539] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv\\", lpFilePart=0x0) returned 0x82 [0093.539] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d81b0 [0093.539] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0093.539] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0093.539] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0093.539] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0093.539] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0093.540] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0093.540] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv\\messages.json", lpFilePart=0x0) returned 0x8f [0093.540] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0093.540] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x232d398 | out: lpFileInformation=0x232d398*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a6907e, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x79a68ffa, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7a010e18, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xe5)) returned 1 [0093.540] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0093.540] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv\\messages.json", lpFilePart=0x0) returned 0x8f [0093.540] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0093.540] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0093.540] GetFileType (hFile=0x444) returned 0x1 [0093.540] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0093.540] GetFileType (hFile=0x444) returned 0x1 [0093.540] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xe5 [0093.540] ReadFile (in: hFile=0x444, lpBuffer=0x232d848, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x232d848*, lpNumberOfBytesRead=0x3be478*=0xe5, lpOverlapped=0x0) returned 1 [0093.542] CloseHandle (hObject=0x444) returned 1 [0093.595] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv\\messages.json", lpFilePart=0x0) returned 0x8f [0093.595] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0093.595] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0093.597] GetFileType (hFile=0x444) returned 0x1 [0093.597] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0093.597] GetFileType (hFile=0x444) returned 0x1 [0093.597] WriteFile (in: hFile=0x444, lpBuffer=0x21a4ba8*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x21a4ba8*, lpNumberOfBytesWritten=0x3be388*=0xf0, lpOverlapped=0x0) returned 1 [0093.598] CloseHandle (hObject=0x444) returned 1 [0093.598] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv\\messages.json", lpFilePart=0x0) returned 0x8f [0093.598] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0093.598] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0093.598] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a6907e, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x79a68ffa, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x23a31c3a, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xf0)) returned 1 [0093.598] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0093.598] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv\\messages.json.xuy")) returned 1 [0093.599] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0093.599] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms", lpFilePart=0x0) returned 0x81 [0093.599] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms\\", lpFilePart=0x0) returned 0x82 [0093.599] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7c70 [0093.599] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0093.600] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0093.600] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0093.600] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0093.600] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0093.600] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0093.600] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0093.600] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms", lpFilePart=0x0) returned 0x81 [0093.600] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms\\", lpFilePart=0x0) returned 0x82 [0093.600] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7550 [0093.600] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0093.600] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0093.601] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0093.601] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0093.601] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0093.601] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0093.601] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms\\messages.json", lpFilePart=0x0) returned 0x8f [0093.601] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0093.601] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x21a8d00 | out: lpFileInformation=0x21a8d00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a7a20a, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x79a7c87a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7a010e18, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xd0)) returned 1 [0093.603] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0093.604] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms\\messages.json", lpFilePart=0x0) returned 0x8f [0093.604] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0093.604] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0093.604] GetFileType (hFile=0x444) returned 0x1 [0093.604] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0093.604] GetFileType (hFile=0x444) returned 0x1 [0093.604] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xd0 [0093.604] ReadFile (in: hFile=0x444, lpBuffer=0x21a9198, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x21a9198*, lpNumberOfBytesRead=0x3be478*=0xd0, lpOverlapped=0x0) returned 1 [0093.605] CloseHandle (hObject=0x444) returned 1 [0093.616] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms\\messages.json", lpFilePart=0x0) returned 0x8f [0093.616] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0093.616] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0093.617] GetFileType (hFile=0x444) returned 0x1 [0093.617] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0093.618] GetFileType (hFile=0x444) returned 0x1 [0093.618] WriteFile (in: hFile=0x444, lpBuffer=0x22204e0*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x22204e0*, lpNumberOfBytesWritten=0x3be388*=0xe0, lpOverlapped=0x0) returned 1 [0093.618] CloseHandle (hObject=0x444) returned 1 [0093.619] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms\\messages.json", lpFilePart=0x0) returned 0x8f [0093.619] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0093.619] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0093.619] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a7a20a, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x79a7c87a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x23a57f46, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1 [0093.619] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0093.619] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms\\messages.json.xuy")) returned 1 [0093.620] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0093.620] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl", lpFilePart=0x0) returned 0x81 [0093.620] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl\\", lpFilePart=0x0) returned 0x82 [0093.620] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d81b0 [0093.620] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0093.620] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0093.621] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0093.621] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0093.621] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0093.621] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0093.621] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0093.621] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl", lpFilePart=0x0) returned 0x81 [0093.621] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl\\", lpFilePart=0x0) returned 0x82 [0093.621] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7d30 [0093.621] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0093.621] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0093.621] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0093.622] FindClose (in: hFindFile=0x5d7d30 | out: hFindFile=0x5d7d30) returned 1 [0093.622] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0093.622] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0093.622] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl\\messages.json", lpFilePart=0x0) returned 0x8f [0093.622] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0093.622] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x2224638 | out: lpFileInformation=0x2224638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a8da6b, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x79a900fa, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7a013524, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xdd)) returned 1 [0093.622] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0093.622] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl\\messages.json", lpFilePart=0x0) returned 0x8f [0093.622] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0093.622] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0093.622] GetFileType (hFile=0x444) returned 0x1 [0093.622] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0093.622] GetFileType (hFile=0x444) returned 0x1 [0093.622] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xdd [0093.622] ReadFile (in: hFile=0x444, lpBuffer=0x2224ae0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x2224ae0*, lpNumberOfBytesRead=0x3be478*=0xdd, lpOverlapped=0x0) returned 1 [0093.623] CloseHandle (hObject=0x444) returned 1 [0093.634] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl\\messages.json", lpFilePart=0x0) returned 0x8f [0093.634] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0093.634] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0093.635] GetFileType (hFile=0x444) returned 0x1 [0093.635] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0093.635] GetFileType (hFile=0x444) returned 0x1 [0093.635] WriteFile (in: hFile=0x444, lpBuffer=0x229be20*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x229be20*, lpNumberOfBytesWritten=0x3be388*=0xe0, lpOverlapped=0x0) returned 1 [0093.636] CloseHandle (hObject=0x444) returned 1 [0093.637] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl\\messages.json", lpFilePart=0x0) returned 0x8f [0093.637] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0093.637] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0093.637] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a8da6b, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x79a900fa, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x23a7e1a4, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1 [0093.637] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0093.637] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl\\messages.json.xuy")) returned 1 [0093.638] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0093.638] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no", lpFilePart=0x0) returned 0x81 [0093.638] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no\\", lpFilePart=0x0) returned 0x82 [0093.638] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d78b0 [0093.640] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0093.640] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0093.641] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0093.641] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0093.641] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0093.641] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0093.641] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0093.641] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no", lpFilePart=0x0) returned 0x81 [0093.641] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no\\", lpFilePart=0x0) returned 0x82 [0093.641] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d73d0 [0093.641] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0093.641] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0093.641] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0093.642] FindClose (in: hFindFile=0x5d73d0 | out: hFindFile=0x5d73d0) returned 1 [0093.642] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0093.642] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0093.642] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no\\messages.json", lpFilePart=0x0) returned 0x8f [0093.642] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0093.642] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x229ff78 | out: lpFileInformation=0x229ff78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79aa3a03, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x79aa397a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0xbcc13a00, ftLastWriteTime.dwHighDateTime=0x1d03f5e, nFileSizeHigh=0x0, nFileSizeLow=0xbf)) returned 1 [0093.643] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0093.643] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no\\messages.json", lpFilePart=0x0) returned 0x8f [0093.643] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0093.643] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0093.643] GetFileType (hFile=0x444) returned 0x1 [0093.643] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0093.643] GetFileType (hFile=0x444) returned 0x1 [0093.643] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xbf [0093.643] ReadFile (in: hFile=0x444, lpBuffer=0x22a0400, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x22a0400*, lpNumberOfBytesRead=0x3be478*=0xbf, lpOverlapped=0x0) returned 1 [0093.644] CloseHandle (hObject=0x444) returned 1 [0093.656] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no\\messages.json", lpFilePart=0x0) returned 0x8f [0093.656] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0093.656] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0093.657] GetFileType (hFile=0x444) returned 0x1 [0093.657] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0093.658] GetFileType (hFile=0x444) returned 0x1 [0093.658] WriteFile (in: hFile=0x444, lpBuffer=0x2317700*, nNumberOfBytesToWrite=0xc0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x2317700*, lpNumberOfBytesWritten=0x3be388*=0xc0, lpOverlapped=0x0) returned 1 [0093.661] CloseHandle (hObject=0x444) returned 1 [0093.661] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no\\messages.json", lpFilePart=0x0) returned 0x8f [0093.661] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0093.661] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0093.661] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79aa3a03, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x79aa397a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x23aca710, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xc0)) returned 1 [0093.661] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0093.661] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no\\messages.json.xuy")) returned 1 [0093.662] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0093.662] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl", lpFilePart=0x0) returned 0x81 [0093.662] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl\\", lpFilePart=0x0) returned 0x82 [0093.662] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d81b0 [0093.663] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0093.663] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0093.663] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0093.663] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0093.663] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0093.663] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0093.663] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0093.663] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl", lpFilePart=0x0) returned 0x81 [0093.663] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl\\", lpFilePart=0x0) returned 0x82 [0093.663] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d79d0 [0093.663] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0093.664] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0093.664] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0093.664] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0093.664] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0093.664] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0093.664] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl\\messages.json", lpFilePart=0x0) returned 0x8f [0093.664] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0093.664] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x231b858 | out: lpFileInformation=0x231b858*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79ab4b99, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x79ab4aea, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7a013524, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xd1)) returned 1 [0093.664] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0093.664] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl\\messages.json", lpFilePart=0x0) returned 0x8f [0093.664] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0093.664] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0093.665] GetFileType (hFile=0x444) returned 0x1 [0093.665] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0093.665] GetFileType (hFile=0x444) returned 0x1 [0093.665] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xd1 [0093.665] ReadFile (in: hFile=0x444, lpBuffer=0x231bcf8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x231bcf8*, lpNumberOfBytesRead=0x3be478*=0xd1, lpOverlapped=0x0) returned 1 [0093.666] CloseHandle (hObject=0x444) returned 1 [0093.709] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl\\messages.json", lpFilePart=0x0) returned 0x8f [0093.709] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0093.709] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0093.711] GetFileType (hFile=0x444) returned 0x1 [0093.711] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0093.711] GetFileType (hFile=0x444) returned 0x1 [0093.711] WriteFile (in: hFile=0x444, lpBuffer=0x2193008*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x2193008*, lpNumberOfBytesWritten=0x3be388*=0xe0, lpOverlapped=0x0) returned 1 [0093.712] CloseHandle (hObject=0x444) returned 1 [0093.712] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl\\messages.json", lpFilePart=0x0) returned 0x8f [0093.712] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0093.712] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0093.712] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79ab4b99, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x79ab4aea, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x23b3ce32, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1 [0093.712] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0093.712] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl\\messages.json.xuy")) returned 1 [0093.713] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0093.713] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_BR", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_BR", lpFilePart=0x0) returned 0x84 [0093.713] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_BR\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_BR\\", lpFilePart=0x0) returned 0x85 [0093.713] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_BR\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7eb0 [0093.714] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0093.714] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0093.714] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0093.714] FindClose (in: hFindFile=0x5d7eb0 | out: hFindFile=0x5d7eb0) returned 1 [0093.714] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0093.714] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0093.714] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0093.714] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_BR", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_BR", lpFilePart=0x0) returned 0x84 [0093.714] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_BR\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_BR\\", lpFilePart=0x0) returned 0x85 [0093.714] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_BR\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d79d0 [0093.714] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0093.715] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0093.715] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0093.715] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0093.715] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0093.715] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0093.715] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_BR\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_BR\\messages.json", lpFilePart=0x0) returned 0x92 [0093.715] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0093.715] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_br\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x2197230 | out: lpFileInformation=0x2197230*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79abe7d7, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x79abe72a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7a013524, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xd5)) returned 1 [0093.719] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0093.719] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_BR\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_BR\\messages.json", lpFilePart=0x0) returned 0x92 [0093.719] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0093.719] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_br\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0093.719] GetFileType (hFile=0x444) returned 0x1 [0093.719] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0093.719] GetFileType (hFile=0x444) returned 0x1 [0093.719] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xd5 [0093.719] ReadFile (in: hFile=0x444, lpBuffer=0x21976e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x21976e0*, lpNumberOfBytesRead=0x3be478*=0xd5, lpOverlapped=0x0) returned 1 [0093.720] CloseHandle (hObject=0x444) returned 1 [0093.734] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_BR\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_BR\\messages.json", lpFilePart=0x0) returned 0x92 [0093.734] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0093.734] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_br\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0093.736] GetFileType (hFile=0x444) returned 0x1 [0093.736] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0093.736] GetFileType (hFile=0x444) returned 0x1 [0093.736] WriteFile (in: hFile=0x444, lpBuffer=0x220ea30*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x220ea30*, lpNumberOfBytesWritten=0x3be388*=0xe0, lpOverlapped=0x0) returned 1 [0093.736] CloseHandle (hObject=0x444) returned 1 [0093.737] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_BR\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_BR\\messages.json", lpFilePart=0x0) returned 0x92 [0093.737] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_BR\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_BR\\messages.json.xuy", lpFilePart=0x0) returned 0x96 [0093.737] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0093.737] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_br\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79abe7d7, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x79abe72a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x23b89746, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1 [0093.737] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0093.737] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_br\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_BR\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_br\\messages.json.xuy")) returned 1 [0093.738] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0093.738] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_PT", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_PT", lpFilePart=0x0) returned 0x84 [0093.738] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_PT\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_PT\\", lpFilePart=0x0) returned 0x85 [0093.738] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_PT\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7a90 [0093.738] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0093.738] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0093.738] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0093.738] FindClose (in: hFindFile=0x5d7a90 | out: hFindFile=0x5d7a90) returned 1 [0093.738] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0093.739] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0093.739] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0093.739] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_PT", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_PT", lpFilePart=0x0) returned 0x84 [0093.739] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_PT\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_PT\\", lpFilePart=0x0) returned 0x85 [0093.739] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_PT\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d73d0 [0093.739] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0093.739] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0093.739] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0093.739] FindClose (in: hFindFile=0x5d73d0 | out: hFindFile=0x5d73d0) returned 1 [0093.740] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0093.740] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0093.740] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_PT\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_PT\\messages.json", lpFilePart=0x0) returned 0x92 [0093.740] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0093.740] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_pt\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x2212c70 | out: lpFileInformation=0x2212c70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79acf94d, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x79acf89a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7a013524, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xe6)) returned 1 [0093.740] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0093.740] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_PT\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_PT\\messages.json", lpFilePart=0x0) returned 0x92 [0093.740] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0093.740] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_pt\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0093.740] GetFileType (hFile=0x444) returned 0x1 [0093.740] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0093.740] GetFileType (hFile=0x444) returned 0x1 [0093.740] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xe6 [0093.740] ReadFile (in: hFile=0x444, lpBuffer=0x2213130, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x2213130*, lpNumberOfBytesRead=0x3be478*=0xe6, lpOverlapped=0x0) returned 1 [0093.741] CloseHandle (hObject=0x444) returned 1 [0093.754] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_PT\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_PT\\messages.json", lpFilePart=0x0) returned 0x92 [0093.754] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0093.754] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_pt\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0093.755] GetFileType (hFile=0x444) returned 0x1 [0093.756] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0093.756] GetFileType (hFile=0x444) returned 0x1 [0093.756] WriteFile (in: hFile=0x444, lpBuffer=0x228a4a0*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x228a4a0*, lpNumberOfBytesWritten=0x3be388*=0xf0, lpOverlapped=0x0) returned 1 [0093.757] CloseHandle (hObject=0x444) returned 1 [0093.757] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_PT\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_PT\\messages.json", lpFilePart=0x0) returned 0x92 [0093.757] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_PT\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_PT\\messages.json.xuy", lpFilePart=0x0) returned 0x96 [0093.757] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0093.757] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_pt\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79acf94d, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x79acf89a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x23baf564, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xf0)) returned 1 [0093.757] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0093.757] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_pt\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_PT\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_pt\\messages.json.xuy")) returned 1 [0093.758] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0093.758] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ro", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ro", lpFilePart=0x0) returned 0x81 [0093.758] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ro\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ro\\", lpFilePart=0x0) returned 0x82 [0093.758] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ro\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d81b0 [0093.759] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0093.759] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0093.759] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0093.759] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0093.759] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0093.759] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0093.759] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0093.759] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ro", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ro", lpFilePart=0x0) returned 0x81 [0093.759] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ro\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ro\\", lpFilePart=0x0) returned 0x82 [0093.759] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ro\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7a90 [0093.759] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0093.759] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0093.760] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0093.760] FindClose (in: hFindFile=0x5d7a90 | out: hFindFile=0x5d7a90) returned 1 [0093.760] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0093.760] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0093.760] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ro\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ro\\messages.json", lpFilePart=0x0) returned 0x8f [0093.760] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0093.760] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ro\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x228e610 | out: lpFileInformation=0x228e610*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79ae0ac0, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x79ae311a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7a013524, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xe2)) returned 1 [0093.761] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0093.761] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ro\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ro\\messages.json", lpFilePart=0x0) returned 0x8f [0093.761] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0093.761] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ro\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0093.761] GetFileType (hFile=0x444) returned 0x1 [0093.761] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0093.761] GetFileType (hFile=0x444) returned 0x1 [0093.761] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xe2 [0093.761] ReadFile (in: hFile=0x444, lpBuffer=0x228eac0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x228eac0*, lpNumberOfBytesRead=0x3be478*=0xe2, lpOverlapped=0x0) returned 1 [0093.762] CloseHandle (hObject=0x444) returned 1 [0093.777] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ro\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ro\\messages.json", lpFilePart=0x0) returned 0x8f [0093.777] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0093.777] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ro\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0093.778] GetFileType (hFile=0x444) returned 0x1 [0093.778] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0093.778] GetFileType (hFile=0x444) returned 0x1 [0093.778] WriteFile (in: hFile=0x444, lpBuffer=0x2305e28*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x2305e28*, lpNumberOfBytesWritten=0x3be388*=0xf0, lpOverlapped=0x0) returned 1 [0093.780] CloseHandle (hObject=0x444) returned 1 [0093.780] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ro\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ro\\messages.json", lpFilePart=0x0) returned 0x8f [0093.780] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ro\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ro\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0093.780] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0093.780] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ro\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79ae0ac0, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x79ae311a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x23bfb986, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xf0)) returned 1 [0093.780] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0093.780] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ro\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ro\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ro\\messages.json.xuy")) returned 1 [0093.781] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0093.781] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ru", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ru", lpFilePart=0x0) returned 0x81 [0093.781] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ru\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ru\\", lpFilePart=0x0) returned 0x82 [0093.781] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ru\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d81b0 [0093.782] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0093.782] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0093.782] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0093.782] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0093.782] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0093.782] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0093.782] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0093.782] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ru", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ru", lpFilePart=0x0) returned 0x81 [0093.782] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ru\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ru\\", lpFilePart=0x0) returned 0x82 [0093.783] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ru\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7a30 [0093.783] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0093.783] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0093.783] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0093.783] FindClose (in: hFindFile=0x5d7a30 | out: hFindFile=0x5d7a30) returned 1 [0093.783] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0093.783] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0093.783] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ru\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ru\\messages.json", lpFilePart=0x0) returned 0x8f [0093.783] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0093.783] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ru\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x2309f80 | out: lpFileInformation=0x2309f80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79af4340, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x79af428a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7a015c37, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xfe)) returned 1 [0093.783] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0093.784] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ru\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ru\\messages.json", lpFilePart=0x0) returned 0x8f [0093.784] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0093.784] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ru\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0093.784] GetFileType (hFile=0x444) returned 0x1 [0093.784] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0093.784] GetFileType (hFile=0x444) returned 0x1 [0093.784] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xfe [0093.784] ReadFile (in: hFile=0x444, lpBuffer=0x230a448, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x230a448*, lpNumberOfBytesRead=0x3be478*=0xfe, lpOverlapped=0x0) returned 1 [0093.785] CloseHandle (hObject=0x444) returned 1 [0093.833] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ru\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ru\\messages.json", lpFilePart=0x0) returned 0x8f [0093.833] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0093.833] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ru\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0093.834] GetFileType (hFile=0x444) returned 0x1 [0093.834] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0093.834] GetFileType (hFile=0x444) returned 0x1 [0093.834] WriteFile (in: hFile=0x444, lpBuffer=0x21817f0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x21817f0*, lpNumberOfBytesWritten=0x3be388*=0x100, lpOverlapped=0x0) returned 1 [0093.835] CloseHandle (hObject=0x444) returned 1 [0093.835] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ru\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ru\\messages.json", lpFilePart=0x0) returned 0x8f [0093.835] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ru\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ru\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0093.836] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0093.836] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ru\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79af4340, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x79af428a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x23c6e13d, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x100)) returned 1 [0093.836] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0093.836] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ru\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ru\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ru\\messages.json.xuy")) returned 1 [0093.837] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0093.837] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sk", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sk", lpFilePart=0x0) returned 0x81 [0093.837] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sk\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sk\\", lpFilePart=0x0) returned 0x82 [0093.837] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sk\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7c70 [0093.838] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0093.838] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0093.838] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0093.838] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0093.838] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0093.838] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0093.838] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0093.838] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sk", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sk", lpFilePart=0x0) returned 0x81 [0093.838] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sk\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sk\\", lpFilePart=0x0) returned 0x82 [0093.838] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sk\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7370 [0093.839] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0093.839] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0093.839] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0093.839] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0093.839] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0093.839] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0093.839] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sk\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sk\\messages.json", lpFilePart=0x0) returned 0x8f [0093.839] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0093.839] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sk\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x2185948 | out: lpFileInformation=0x2185948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79b02d9d, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x79b02cea, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7a015c37, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xdb)) returned 1 [0093.843] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0093.843] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sk\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sk\\messages.json", lpFilePart=0x0) returned 0x8f [0093.843] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0093.843] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sk\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0093.843] GetFileType (hFile=0x444) returned 0x1 [0093.843] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0093.843] GetFileType (hFile=0x444) returned 0x1 [0093.843] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xdb [0093.843] ReadFile (in: hFile=0x444, lpBuffer=0x2185df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x2185df0*, lpNumberOfBytesRead=0x3be478*=0xdb, lpOverlapped=0x0) returned 1 [0093.844] CloseHandle (hObject=0x444) returned 1 [0093.860] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sk\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sk\\messages.json", lpFilePart=0x0) returned 0x8f [0093.860] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0093.860] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sk\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0093.861] GetFileType (hFile=0x444) returned 0x1 [0093.861] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0093.861] GetFileType (hFile=0x444) returned 0x1 [0093.861] WriteFile (in: hFile=0x444, lpBuffer=0x21fd130*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x21fd130*, lpNumberOfBytesWritten=0x3be388*=0xe0, lpOverlapped=0x0) returned 1 [0093.863] CloseHandle (hObject=0x444) returned 1 [0093.863] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sk\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sk\\messages.json", lpFilePart=0x0) returned 0x8f [0093.863] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sk\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sk\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0093.863] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0093.863] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sk\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79b02d9d, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x79b02cea, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x23cba82b, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1 [0093.863] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0093.863] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sk\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sk\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sk\\messages.json.xuy")) returned 1 [0093.864] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0093.864] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sl", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sl", lpFilePart=0x0) returned 0x81 [0093.864] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sl\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sl\\", lpFilePart=0x0) returned 0x82 [0093.864] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sl\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7550 [0093.865] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0093.865] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0093.865] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0093.865] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0093.865] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0093.865] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0093.865] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0093.865] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sl", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sl", lpFilePart=0x0) returned 0x81 [0093.865] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sl\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sl\\", lpFilePart=0x0) returned 0x82 [0093.866] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sl\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d81b0 [0093.866] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0093.866] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0093.866] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0093.866] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0093.866] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0093.866] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0093.866] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sl\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sl\\messages.json", lpFilePart=0x0) returned 0x8f [0093.866] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0093.866] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x2201288 | out: lpFileInformation=0x2201288*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79b0c9f5, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x79b0f03a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7a015c37, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xde)) returned 1 [0093.867] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0093.867] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sl\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sl\\messages.json", lpFilePart=0x0) returned 0x8f [0093.867] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0093.867] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sl\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0093.867] GetFileType (hFile=0x444) returned 0x1 [0093.867] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0093.867] GetFileType (hFile=0x444) returned 0x1 [0093.867] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xde [0093.867] ReadFile (in: hFile=0x444, lpBuffer=0x2201730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x2201730*, lpNumberOfBytesRead=0x3be478*=0xde, lpOverlapped=0x0) returned 1 [0093.868] CloseHandle (hObject=0x444) returned 1 [0093.882] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sl\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sl\\messages.json", lpFilePart=0x0) returned 0x8f [0093.882] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0093.882] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sl\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0093.884] GetFileType (hFile=0x444) returned 0x1 [0093.884] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0093.884] GetFileType (hFile=0x444) returned 0x1 [0093.884] WriteFile (in: hFile=0x444, lpBuffer=0x2278a70*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x2278a70*, lpNumberOfBytesWritten=0x3be388*=0xe0, lpOverlapped=0x0) returned 1 [0093.885] CloseHandle (hObject=0x444) returned 1 [0093.885] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sl\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sl\\messages.json", lpFilePart=0x0) returned 0x8f [0093.885] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sl\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sl\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0093.885] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0093.885] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79b0c9f5, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x79b0f03a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x23ce0cef, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1 [0093.885] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0093.885] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sl\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sl\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sl\\messages.json.xuy")) returned 1 [0093.886] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0093.886] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sr", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sr", lpFilePart=0x0) returned 0x81 [0093.886] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sr\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sr\\", lpFilePart=0x0) returned 0x82 [0093.886] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sr\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7fd0 [0093.886] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0093.886] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0093.887] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0093.887] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0093.887] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0093.887] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0093.887] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0093.887] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sr", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sr", lpFilePart=0x0) returned 0x81 [0093.887] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sr\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sr\\", lpFilePart=0x0) returned 0x82 [0093.887] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sr\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7e50 [0093.887] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0093.887] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0093.888] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0093.888] FindClose (in: hFindFile=0x5d7e50 | out: hFindFile=0x5d7e50) returned 1 [0093.888] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0093.888] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0093.888] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sr\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sr\\messages.json", lpFilePart=0x0) returned 0x8f [0093.888] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0093.888] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x227cbc8 | out: lpFileInformation=0x227cbc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79b2026b, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x79b2c4fa, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7a018337, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xec)) returned 1 [0093.891] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0093.891] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sr\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sr\\messages.json", lpFilePart=0x0) returned 0x8f [0093.891] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0093.891] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sr\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0093.891] GetFileType (hFile=0x444) returned 0x1 [0093.891] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0093.891] GetFileType (hFile=0x444) returned 0x1 [0093.891] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xec [0093.891] ReadFile (in: hFile=0x444, lpBuffer=0x227d080, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x227d080*, lpNumberOfBytesRead=0x3be478*=0xec, lpOverlapped=0x0) returned 1 [0093.892] CloseHandle (hObject=0x444) returned 1 [0093.905] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sr\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sr\\messages.json", lpFilePart=0x0) returned 0x8f [0093.905] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0093.905] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sr\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0093.907] GetFileType (hFile=0x444) returned 0x1 [0093.907] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0093.907] GetFileType (hFile=0x444) returned 0x1 [0093.907] WriteFile (in: hFile=0x444, lpBuffer=0x22f43e0*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x22f43e0*, lpNumberOfBytesWritten=0x3be388*=0xf0, lpOverlapped=0x0) returned 1 [0093.908] CloseHandle (hObject=0x444) returned 1 [0093.908] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sr\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sr\\messages.json", lpFilePart=0x0) returned 0x8f [0093.908] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sr\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sr\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0093.908] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0093.908] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79b2026b, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x79b2c4fa, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x23d2ccb2, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xf0)) returned 1 [0093.908] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0093.909] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sr\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sr\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sr\\messages.json.xuy")) returned 1 [0093.909] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0093.909] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sv", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sv", lpFilePart=0x0) returned 0x81 [0093.909] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sv\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sv\\", lpFilePart=0x0) returned 0x82 [0093.910] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sv\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d78b0 [0093.910] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0093.910] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0093.910] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0093.910] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0093.910] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0093.910] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0093.910] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0093.910] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sv", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sv", lpFilePart=0x0) returned 0x81 [0093.910] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sv\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sv\\", lpFilePart=0x0) returned 0x82 [0093.910] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sv\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7550 [0093.911] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0093.911] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0093.911] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0093.911] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0093.911] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0093.911] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0093.911] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sv\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sv\\messages.json", lpFilePart=0x0) returned 0x8f [0093.911] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0093.911] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sv\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x22f8538 | out: lpFileInformation=0x22f8538*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79b36200, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x79b3613a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7a018337, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xd8)) returned 1 [0093.911] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0093.911] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sv\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sv\\messages.json", lpFilePart=0x0) returned 0x8f [0093.911] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0093.911] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sv\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0093.912] GetFileType (hFile=0x444) returned 0x1 [0093.912] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0093.912] GetFileType (hFile=0x444) returned 0x1 [0093.912] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xd8 [0093.912] ReadFile (in: hFile=0x444, lpBuffer=0x22f89d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x22f89d8*, lpNumberOfBytesRead=0x3be478*=0xd8, lpOverlapped=0x0) returned 1 [0093.913] CloseHandle (hObject=0x444) returned 1 [0093.973] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sv\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sv\\messages.json", lpFilePart=0x0) returned 0x8f [0093.973] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0093.974] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sv\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0093.975] GetFileType (hFile=0x444) returned 0x1 [0093.975] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0093.975] GetFileType (hFile=0x444) returned 0x1 [0093.975] WriteFile (in: hFile=0x444, lpBuffer=0x216fce8*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x216fce8*, lpNumberOfBytesWritten=0x3be388*=0xe0, lpOverlapped=0x0) returned 1 [0093.976] CloseHandle (hObject=0x444) returned 1 [0093.976] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sv\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sv\\messages.json", lpFilePart=0x0) returned 0x8f [0093.976] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sv\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sv\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0093.976] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0093.976] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sv\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79b36200, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x79b3613a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x23dc55ca, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1 [0093.976] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0093.976] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sv\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sv\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sv\\messages.json.xuy")) returned 1 [0093.977] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0093.977] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\th", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\th", lpFilePart=0x0) returned 0x81 [0093.977] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\th\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\th\\", lpFilePart=0x0) returned 0x82 [0093.977] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\th\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d8090 [0093.977] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0093.977] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0093.978] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0093.978] FindClose (in: hFindFile=0x5d8090 | out: hFindFile=0x5d8090) returned 1 [0093.978] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0093.978] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0093.978] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0093.978] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\th", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\th", lpFilePart=0x0) returned 0x81 [0093.978] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\th\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\th\\", lpFilePart=0x0) returned 0x82 [0093.978] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\th\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7550 [0093.978] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0093.978] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0093.978] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0093.979] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0093.979] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0093.979] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0093.979] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\th\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\th\\messages.json", lpFilePart=0x0) returned 0x8f [0093.979] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0093.979] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\th\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x2173e40 | out: lpFileInformation=0x2173e40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79b4737d, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x79b472aa, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7a018337, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x10a)) returned 1 [0093.980] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0093.980] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\th\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\th\\messages.json", lpFilePart=0x0) returned 0x8f [0093.980] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0093.980] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\th\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0093.981] GetFileType (hFile=0x444) returned 0x1 [0093.981] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0093.981] GetFileType (hFile=0x444) returned 0x1 [0093.981] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x10a [0093.981] ReadFile (in: hFile=0x444, lpBuffer=0x2174318, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x2174318*, lpNumberOfBytesRead=0x3be478*=0x10a, lpOverlapped=0x0) returned 1 [0093.982] CloseHandle (hObject=0x444) returned 1 [0094.001] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\th\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\th\\messages.json", lpFilePart=0x0) returned 0x8f [0094.001] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0094.001] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\th\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0094.003] GetFileType (hFile=0x444) returned 0x1 [0094.003] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0094.003] GetFileType (hFile=0x444) returned 0x1 [0094.003] WriteFile (in: hFile=0x444, lpBuffer=0x21eb8d0*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x21eb8d0*, lpNumberOfBytesWritten=0x3be388*=0x110, lpOverlapped=0x0) returned 1 [0094.003] CloseHandle (hObject=0x444) returned 1 [0094.004] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\th\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\th\\messages.json", lpFilePart=0x0) returned 0x8f [0094.004] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\th\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\th\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0094.004] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0094.004] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\th\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79b4737d, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x79b472aa, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x23e11e8b, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x110)) returned 1 [0094.004] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0094.004] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\th\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\th\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\th\\messages.json.xuy")) returned 1 [0094.005] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0094.005] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\tr", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\tr", lpFilePart=0x0) returned 0x81 [0094.005] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\tr\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\tr\\", lpFilePart=0x0) returned 0x82 [0094.005] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\tr\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7670 [0094.005] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0094.005] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0094.005] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0094.005] FindClose (in: hFindFile=0x5d7670 | out: hFindFile=0x5d7670) returned 1 [0094.005] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0094.006] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0094.006] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0094.006] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\tr", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\tr", lpFilePart=0x0) returned 0x81 [0094.006] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\tr\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\tr\\", lpFilePart=0x0) returned 0x82 [0094.006] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\tr\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d78b0 [0094.006] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0094.006] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0094.006] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0094.006] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0094.006] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0094.006] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0094.006] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\tr\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\tr\\messages.json", lpFilePart=0x0) returned 0x8f [0094.006] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0094.006] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\tr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x21efa28 | out: lpFileInformation=0x21efa28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79b55de0, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x79b5841a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7a018337, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xe1)) returned 1 [0094.007] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0094.007] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\tr\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\tr\\messages.json", lpFilePart=0x0) returned 0x8f [0094.007] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0094.007] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\tr\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0094.007] GetFileType (hFile=0x444) returned 0x1 [0094.007] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0094.007] GetFileType (hFile=0x444) returned 0x1 [0094.007] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xe1 [0094.007] ReadFile (in: hFile=0x444, lpBuffer=0x21efed8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x21efed8*, lpNumberOfBytesRead=0x3be478*=0xe1, lpOverlapped=0x0) returned 1 [0094.008] CloseHandle (hObject=0x444) returned 1 [0094.024] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\tr\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\tr\\messages.json", lpFilePart=0x0) returned 0x8f [0094.024] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0094.024] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\tr\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0094.025] GetFileType (hFile=0x444) returned 0x1 [0094.025] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0094.025] GetFileType (hFile=0x444) returned 0x1 [0094.025] WriteFile (in: hFile=0x444, lpBuffer=0x2267240*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x2267240*, lpNumberOfBytesWritten=0x3be388*=0xf0, lpOverlapped=0x0) returned 1 [0094.027] CloseHandle (hObject=0x444) returned 1 [0094.027] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\tr\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\tr\\messages.json", lpFilePart=0x0) returned 0x8f [0094.028] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\tr\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\tr\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0094.028] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0094.028] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\tr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79b55de0, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x79b5841a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x23e37d16, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xf0)) returned 1 [0094.028] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0094.028] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\tr\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\tr\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\tr\\messages.json.xuy")) returned 1 [0094.029] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0094.029] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\uk", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\uk", lpFilePart=0x0) returned 0x81 [0094.029] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\uk\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\uk\\", lpFilePart=0x0) returned 0x82 [0094.029] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\uk\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d78b0 [0094.030] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0094.030] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0094.030] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0094.030] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0094.030] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0094.030] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0094.030] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0094.030] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\uk", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\uk", lpFilePart=0x0) returned 0x81 [0094.031] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\uk\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\uk\\", lpFilePart=0x0) returned 0x82 [0094.031] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\uk\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7370 [0094.031] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0094.031] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0094.031] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0094.032] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0094.032] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0094.032] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0094.032] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\uk\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\uk\\messages.json", lpFilePart=0x0) returned 0x8f [0094.032] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0094.032] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\uk\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x226b398 | out: lpFileInformation=0x226b398*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79b69666, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x79b6958a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7a01aa56, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xfe)) returned 1 [0094.035] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0094.035] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\uk\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\uk\\messages.json", lpFilePart=0x0) returned 0x8f [0094.035] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0094.035] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\uk\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0094.035] GetFileType (hFile=0x444) returned 0x1 [0094.035] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0094.035] GetFileType (hFile=0x444) returned 0x1 [0094.035] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xfe [0094.035] ReadFile (in: hFile=0x444, lpBuffer=0x226b860, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x226b860*, lpNumberOfBytesRead=0x3be478*=0xfe, lpOverlapped=0x0) returned 1 [0094.036] CloseHandle (hObject=0x444) returned 1 [0094.050] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\uk\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\uk\\messages.json", lpFilePart=0x0) returned 0x8f [0094.050] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0094.050] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\uk\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0094.052] GetFileType (hFile=0x444) returned 0x1 [0094.052] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0094.052] GetFileType (hFile=0x444) returned 0x1 [0094.052] WriteFile (in: hFile=0x444, lpBuffer=0x22e2be0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x22e2be0*, lpNumberOfBytesWritten=0x3be388*=0x100, lpOverlapped=0x0) returned 1 [0094.053] CloseHandle (hObject=0x444) returned 1 [0094.053] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\uk\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\uk\\messages.json", lpFilePart=0x0) returned 0x8f [0094.053] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\uk\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\uk\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0094.053] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0094.053] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\uk\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79b69666, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x79b6958a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x23e841ce, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x100)) returned 1 [0094.054] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0094.054] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\uk\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\uk\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\uk\\messages.json.xuy")) returned 1 [0094.055] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0094.055] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\vi", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\vi", lpFilePart=0x0) returned 0x81 [0094.055] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\vi\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\vi\\", lpFilePart=0x0) returned 0x82 [0094.055] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\vi\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7550 [0094.056] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0094.056] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0094.056] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0094.056] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0094.056] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0094.056] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0094.056] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0094.056] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\vi", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\vi", lpFilePart=0x0) returned 0x81 [0094.056] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\vi\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\vi\\", lpFilePart=0x0) returned 0x82 [0094.056] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\vi\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d78b0 [0094.057] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0094.057] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0094.057] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0094.057] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0094.057] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0094.057] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0094.057] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\vi\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\vi\\messages.json", lpFilePart=0x0) returned 0x8f [0094.057] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0094.057] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\vi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x22e6d38 | out: lpFileInformation=0x22e6d38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79b84446, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x79b8433a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7a01aa56, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xe3)) returned 1 [0094.057] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0094.057] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\vi\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\vi\\messages.json", lpFilePart=0x0) returned 0x8f [0094.058] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0094.058] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\vi\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0094.058] GetFileType (hFile=0x444) returned 0x1 [0094.058] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0094.058] GetFileType (hFile=0x444) returned 0x1 [0094.058] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xe3 [0094.058] ReadFile (in: hFile=0x444, lpBuffer=0x22e71e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x22e71e8*, lpNumberOfBytesRead=0x3be478*=0xe3, lpOverlapped=0x0) returned 1 [0094.059] CloseHandle (hObject=0x444) returned 1 [0094.073] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\vi\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\vi\\messages.json", lpFilePart=0x0) returned 0x8f [0094.073] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0094.073] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\vi\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0094.075] GetFileType (hFile=0x444) returned 0x1 [0094.075] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0094.075] GetFileType (hFile=0x444) returned 0x1 [0094.075] WriteFile (in: hFile=0x444, lpBuffer=0x235e550*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x235e550*, lpNumberOfBytesWritten=0x3be388*=0xf0, lpOverlapped=0x0) returned 1 [0094.075] CloseHandle (hObject=0x444) returned 1 [0094.077] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\vi\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\vi\\messages.json", lpFilePart=0x0) returned 0x8f [0094.077] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\vi\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\vi\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0094.077] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0094.077] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\vi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79b84446, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x79b8433a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x23eaa31f, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xf0)) returned 1 [0094.077] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0094.077] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\vi\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\vi\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\vi\\messages.json.xuy")) returned 1 [0094.078] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0094.078] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_CN", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_CN", lpFilePart=0x0) returned 0x84 [0094.078] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_CN\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_CN\\", lpFilePart=0x0) returned 0x85 [0094.078] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_CN\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7a30 [0094.078] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0094.081] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0094.082] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0094.082] FindClose (in: hFindFile=0x5d7a30 | out: hFindFile=0x5d7a30) returned 1 [0094.082] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0094.082] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0094.082] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0094.082] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_CN", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_CN", lpFilePart=0x0) returned 0x84 [0094.082] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_CN\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_CN\\", lpFilePart=0x0) returned 0x85 [0094.082] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_CN\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7df0 [0094.082] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0094.082] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0094.082] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0094.083] FindClose (in: hFindFile=0x5d7df0 | out: hFindFile=0x5d7df0) returned 1 [0094.083] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0094.083] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0094.083] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_CN\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_CN\\messages.json", lpFilePart=0x0) returned 0x92 [0094.083] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0094.083] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_cn\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x2162288 | out: lpFileInformation=0x2162288*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79b97c9e, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x79b9a2ca, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7a01aa56, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xd4)) returned 1 [0094.083] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0094.083] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_CN\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_CN\\messages.json", lpFilePart=0x0) returned 0x92 [0094.083] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0094.083] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_cn\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0094.083] GetFileType (hFile=0x444) returned 0x1 [0094.083] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0094.083] GetFileType (hFile=0x444) returned 0x1 [0094.083] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xd4 [0094.083] ReadFile (in: hFile=0x444, lpBuffer=0x2162738, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x2162738*, lpNumberOfBytesRead=0x3be478*=0xd4, lpOverlapped=0x0) returned 1 [0094.084] CloseHandle (hObject=0x444) returned 1 [0094.122] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_CN\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_CN\\messages.json", lpFilePart=0x0) returned 0x92 [0094.122] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0094.122] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_cn\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0094.124] GetFileType (hFile=0x444) returned 0x1 [0094.124] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0094.124] GetFileType (hFile=0x444) returned 0x1 [0094.124] WriteFile (in: hFile=0x444, lpBuffer=0x21d9a88*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x21d9a88*, lpNumberOfBytesWritten=0x3be388*=0xe0, lpOverlapped=0x0) returned 1 [0094.125] CloseHandle (hObject=0x444) returned 1 [0094.125] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_CN\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_CN\\messages.json", lpFilePart=0x0) returned 0x92 [0094.125] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_CN\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_CN\\messages.json.xuy", lpFilePart=0x0) returned 0x96 [0094.125] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0094.125] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_cn\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79b97c9e, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x79b9a2ca, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x23f42d3f, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1 [0094.125] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0094.125] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_cn\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_CN\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_cn\\messages.json.xuy")) returned 1 [0094.126] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0094.126] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_TW", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_TW", lpFilePart=0x0) returned 0x84 [0094.126] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_TW\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_TW\\", lpFilePart=0x0) returned 0x85 [0094.126] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_TW\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7c70 [0094.126] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0094.126] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0094.126] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0094.127] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0094.127] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0094.127] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0094.127] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0094.127] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_TW", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_TW", lpFilePart=0x0) returned 0x84 [0094.127] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_TW\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_TW\\", lpFilePart=0x0) returned 0x85 [0094.127] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_TW\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d81b0 [0094.127] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0094.127] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0094.127] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0094.127] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0094.127] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0094.127] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0094.127] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_TW\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_TW\\messages.json", lpFilePart=0x0) returned 0x92 [0094.127] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0094.128] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_tw\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x21ddcc8 | out: lpFileInformation=0x21ddcc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79ba3ff5, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x79ba661a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7a01d165, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xd4)) returned 1 [0094.128] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0094.128] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_TW\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_TW\\messages.json", lpFilePart=0x0) returned 0x92 [0094.128] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0094.128] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_tw\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0094.128] GetFileType (hFile=0x444) returned 0x1 [0094.128] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0094.128] GetFileType (hFile=0x444) returned 0x1 [0094.128] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xd4 [0094.128] ReadFile (in: hFile=0x444, lpBuffer=0x21de178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x21de178*, lpNumberOfBytesRead=0x3be478*=0xd4, lpOverlapped=0x0) returned 1 [0094.129] CloseHandle (hObject=0x444) returned 1 [0094.140] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_TW\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_TW\\messages.json", lpFilePart=0x0) returned 0x92 [0094.140] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0094.140] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_tw\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0094.141] GetFileType (hFile=0x444) returned 0x1 [0094.141] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0094.141] GetFileType (hFile=0x444) returned 0x1 [0094.141] WriteFile (in: hFile=0x444, lpBuffer=0x22554c8*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x22554c8*, lpNumberOfBytesWritten=0x3be388*=0xe0, lpOverlapped=0x0) returned 1 [0094.142] CloseHandle (hObject=0x444) returned 1 [0094.142] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_TW\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_TW\\messages.json", lpFilePart=0x0) returned 0x92 [0094.142] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_TW\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_TW\\messages.json.xuy", lpFilePart=0x0) returned 0x96 [0094.142] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0094.142] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_tw\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79ba3ff5, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x79ba661a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x23f693b4, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1 [0094.142] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0094.142] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_tw\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_TW\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_tw\\messages.json.xuy")) returned 1 [0094.143] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0094.143] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata", nBufferLength=0x105, lpBuffer=0x3be0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata", lpFilePart=0x0) returned 0x7f [0094.143] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\", nBufferLength=0x105, lpBuffer=0x3be060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\", lpFilePart=0x0) returned 0x80 [0094.143] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\*", lpFindFileData=0x3be270 | out: lpFindFileData=0x3be270) returned 0x5d79d0 [0094.143] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0094.143] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0094.144] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0094.144] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 0 [0094.144] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0094.144] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0094.144] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0094.144] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0094.144] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata", nBufferLength=0x105, lpBuffer=0x3be0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata", lpFilePart=0x0) returned 0x7f [0094.144] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\", nBufferLength=0x105, lpBuffer=0x3be060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\", lpFilePart=0x0) returned 0x80 [0094.144] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\*", lpFindFileData=0x3be270 | out: lpFindFileData=0x3be270) returned 0x5d7e50 [0094.144] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0094.144] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0094.144] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0094.144] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 0 [0094.145] FindClose (in: hFindFile=0x5d7e50 | out: hFindFile=0x5d7e50) returned 1 [0094.145] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0094.145] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0094.145] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\computed_hashes.json", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\computed_hashes.json", lpFilePart=0x0) returned 0x94 [0094.145] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0094.145] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\computed_hashes.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\computed_hashes.json"), fInfoLevelId=0x0, lpFileInformation=0x2259d30 | out: lpFileInformation=0x2259d30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a0af944, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a0af944, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7a0af944, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x160)) returned 1 [0094.145] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0094.145] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\computed_hashes.json", nBufferLength=0x105, lpBuffer=0x3bdf40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\computed_hashes.json", lpFilePart=0x0) returned 0x94 [0094.145] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be420) returned 1 [0094.145] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\computed_hashes.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\computed_hashes.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0094.145] GetFileType (hFile=0x444) returned 0x1 [0094.145] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be390) returned 1 [0094.145] GetFileType (hFile=0x444) returned 0x1 [0094.145] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be5b8 | out: lpFileSizeHigh=0x3be5b8*=0x0) returned 0x160 [0094.145] ReadFile (in: hFile=0x444, lpBuffer=0x225a298, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be4e8, lpOverlapped=0x0 | out: lpBuffer=0x225a298*, lpNumberOfBytesRead=0x3be4e8*=0x160, lpOverlapped=0x0) returned 1 [0094.148] CloseHandle (hObject=0x444) returned 1 [0094.159] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\computed_hashes.json", nBufferLength=0x105, lpBuffer=0x3bdf40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\computed_hashes.json", lpFilePart=0x0) returned 0x94 [0094.159] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be420) returned 1 [0094.159] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\computed_hashes.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\computed_hashes.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0094.161] GetFileType (hFile=0x444) returned 0x1 [0094.161] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be390) returned 1 [0094.161] GetFileType (hFile=0x444) returned 0x1 [0094.161] WriteFile (in: hFile=0x444, lpBuffer=0x22d1a58*, nNumberOfBytesToWrite=0x170, lpNumberOfBytesWritten=0x3be3f8, lpOverlapped=0x0 | out: lpBuffer=0x22d1a58*, lpNumberOfBytesWritten=0x3be3f8*=0x170, lpOverlapped=0x0) returned 1 [0094.162] CloseHandle (hObject=0x444) returned 1 [0094.162] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\computed_hashes.json", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\computed_hashes.json", lpFilePart=0x0) returned 0x94 [0094.162] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\computed_hashes.json.xuy", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\computed_hashes.json.xuy", lpFilePart=0x0) returned 0x98 [0094.162] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0094.162] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\computed_hashes.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\computed_hashes.json"), fInfoLevelId=0x0, lpFileInformation=0x3be600 | out: lpFileInformation=0x3be600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a0af944, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a0af944, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x23f906b4, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x170)) returned 1 [0094.162] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0094.162] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\computed_hashes.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\computed_hashes.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\computed_hashes.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\computed_hashes.json.xuy")) returned 1 [0094.163] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\verified_contents.json", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\verified_contents.json", lpFilePart=0x0) returned 0x96 [0094.163] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0094.163] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\verified_contents.json"), fInfoLevelId=0x0, lpFileInformation=0x22d2ea0 | out: lpFileInformation=0x22d2ea0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79c0a8ae, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x79c16afa, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0xbcc13a00, ftLastWriteTime.dwHighDateTime=0x1d03f5e, nFileSizeHigh=0x0, nFileSizeLow=0x2b56)) returned 1 [0094.163] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0094.163] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\verified_contents.json", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\verified_contents.json", lpFilePart=0x0) returned 0x96 [0094.164] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0094.164] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\verified_contents.json"), fInfoLevelId=0x0, lpFileInformation=0x22d3098 | out: lpFileInformation=0x22d3098*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79c0a8ae, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x79c16afa, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0xbcc13a00, ftLastWriteTime.dwHighDateTime=0x1d03f5e, nFileSizeHigh=0x0, nFileSizeLow=0x2b56)) returned 1 [0094.164] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0094.164] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\verified_contents.json", nBufferLength=0x105, lpBuffer=0x3bdfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\verified_contents.json", lpFilePart=0x0) returned 0x96 [0094.164] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0094.164] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\verified_contents.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0094.164] GetFileType (hFile=0x444) returned 0x1 [0094.164] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be420) returned 1 [0094.164] GetFileType (hFile=0x444) returned 0x1 [0094.164] ReadFile (in: hFile=0x444, lpBuffer=0x22d55b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be538, lpOverlapped=0x0 | out: lpBuffer=0x22d55b8*, lpNumberOfBytesRead=0x3be538*=0x1000, lpOverlapped=0x0) returned 1 [0094.177] CloseHandle (hObject=0x444) returned 1 [0094.177] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\verified_contents.json", nBufferLength=0x105, lpBuffer=0x3bdfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\verified_contents.json", lpFilePart=0x0) returned 0x96 [0094.177] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0094.177] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\verified_contents.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0094.178] GetFileType (hFile=0x444) returned 0x1 [0094.178] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be420) returned 1 [0094.178] GetFileType (hFile=0x444) returned 0x1 [0094.178] WriteFile (in: hFile=0x444, lpBuffer=0x22d3270*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be5e8, lpOverlapped=0x0 | out: lpBuffer=0x22d3270*, lpNumberOfBytesWritten=0x3be5e8*=0x2000, lpOverlapped=0x0) returned 1 [0094.178] CloseHandle (hObject=0x444) returned 1 [0094.178] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\verified_contents.json", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\verified_contents.json", lpFilePart=0x0) returned 0x96 [0094.178] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\verified_contents.json.xuy", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\verified_contents.json.xuy", lpFilePart=0x0) returned 0x9a [0094.178] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0094.178] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\verified_contents.json"), fInfoLevelId=0x0, lpFileInformation=0x3be600 | out: lpFileInformation=0x3be600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79c0a8ae, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x79c16afa, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x23fb53be, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2b56)) returned 1 [0094.178] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0094.178] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\verified_contents.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\verified_contents.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\verified_contents.json.xuy")) returned 1 [0094.179] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0094.179] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi", lpFilePart=0x0) returned 0x6f [0094.179] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\", lpFilePart=0x0) returned 0x70 [0094.179] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d7670 [0094.179] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0094.180] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0094.180] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0094.180] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0094.180] FindClose (in: hFindFile=0x5d7670 | out: hFindFile=0x5d7670) returned 1 [0094.180] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0094.180] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0094.180] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0094.180] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi", lpFilePart=0x0) returned 0x6f [0094.180] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\", lpFilePart=0x0) returned 0x70 [0094.180] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d78b0 [0094.180] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0094.180] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0094.181] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0094.181] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0094.181] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0094.181] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0094.181] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0094.181] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0094.181] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0", nBufferLength=0x105, lpBuffer=0x3be130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0", lpFilePart=0x0) returned 0x75 [0094.181] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\", nBufferLength=0x105, lpBuffer=0x3be0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\", lpFilePart=0x0) returned 0x76 [0094.181] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\*", lpFindFileData=0x3be2e0 | out: lpFindFileData=0x3be2e0) returned 0x5d7a30 [0094.184] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0094.184] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0094.185] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0094.185] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0094.185] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0094.185] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0094.185] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0094.185] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0094.185] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0094.186] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 0 [0094.186] FindClose (in: hFindFile=0x5d7a30 | out: hFindFile=0x5d7a30) returned 1 [0094.186] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0094.186] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0094.186] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0094.186] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0", nBufferLength=0x105, lpBuffer=0x3be130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0", lpFilePart=0x0) returned 0x75 [0094.186] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\", nBufferLength=0x105, lpBuffer=0x3be0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\", lpFilePart=0x0) returned 0x76 [0094.186] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\*", lpFindFileData=0x3be2e0 | out: lpFindFileData=0x3be2e0) returned 0x5d7cd0 [0094.187] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0094.187] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0094.187] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0094.188] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0094.188] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0094.188] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0094.188] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0094.188] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0094.188] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0094.188] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 0 [0094.188] FindClose (in: hFindFile=0x5d7cd0 | out: hFindFile=0x5d7cd0) returned 1 [0094.189] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0094.189] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0094.189] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png", lpFilePart=0x0) returned 0x7d [0094.189] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0094.189] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png"), fInfoLevelId=0x0, lpFileInformation=0x2359e68 | out: lpFileInformation=0x2359e68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7435059f, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x74d16f0f, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x74d16f0f, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x1378)) returned 1 [0094.191] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0094.191] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png", lpFilePart=0x0) returned 0x7d [0094.191] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0094.191] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png"), fInfoLevelId=0x0, lpFileInformation=0x235a010 | out: lpFileInformation=0x235a010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7435059f, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x74d16f0f, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x74d16f0f, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x1378)) returned 1 [0094.191] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0094.191] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png", nBufferLength=0x105, lpBuffer=0x3be040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png", lpFilePart=0x0) returned 0x7d [0094.191] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0094.191] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0094.192] GetFileType (hFile=0x444) returned 0x1 [0094.192] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be490) returned 1 [0094.192] GetFileType (hFile=0x444) returned 0x1 [0094.192] ReadFile (in: hFile=0x444, lpBuffer=0x235c490, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5a8, lpOverlapped=0x0 | out: lpBuffer=0x235c490*, lpNumberOfBytesRead=0x3be5a8*=0x1000, lpOverlapped=0x0) returned 1 [0094.253] CloseHandle (hObject=0x444) returned 1 [0094.253] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png", nBufferLength=0x105, lpBuffer=0x3be040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png", lpFilePart=0x0) returned 0x7d [0094.253] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0094.253] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0094.254] GetFileType (hFile=0x444) returned 0x1 [0094.254] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be490) returned 1 [0094.254] GetFileType (hFile=0x444) returned 0x1 [0094.254] WriteFile (in: hFile=0x444, lpBuffer=0x215d8b8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be658, lpOverlapped=0x0 | out: lpBuffer=0x215d8b8*, lpNumberOfBytesWritten=0x3be658*=0x2000, lpOverlapped=0x0) returned 1 [0094.254] CloseHandle (hObject=0x444) returned 1 [0094.254] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png", lpFilePart=0x0) returned 0x7d [0094.254] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png.xuy", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png.xuy", lpFilePart=0x0) returned 0x81 [0094.254] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0094.254] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png"), fInfoLevelId=0x0, lpFileInformation=0x3be670 | out: lpFileInformation=0x3be670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7435059f, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x74d16f0f, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x24074253, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0094.254] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0094.254] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png.xuy")) returned 1 [0094.255] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\contentscript_bin_prod.js", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\contentscript_bin_prod.js", lpFilePart=0x0) returned 0x8f [0094.255] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0094.255] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\contentscript_bin_prod.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\contentscript_bin_prod.js"), fInfoLevelId=0x0, lpFileInformation=0x21d93e8 | out: lpFileInformation=0x21d93e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x748ac811, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x748b14d2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x1103)) returned 1 [0094.256] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0094.256] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\contentscript_bin_prod.js", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\contentscript_bin_prod.js", lpFilePart=0x0) returned 0x8f [0094.256] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0094.256] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\contentscript_bin_prod.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\contentscript_bin_prod.js"), fInfoLevelId=0x0, lpFileInformation=0x21d95d8 | out: lpFileInformation=0x21d95d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x748ac811, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x748b14d2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x1103)) returned 1 [0094.256] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0094.256] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\contentscript_bin_prod.js", nBufferLength=0x105, lpBuffer=0x3be040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\contentscript_bin_prod.js", lpFilePart=0x0) returned 0x8f [0094.257] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0094.257] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\contentscript_bin_prod.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\contentscript_bin_prod.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0094.257] GetFileType (hFile=0x444) returned 0x1 [0094.257] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be490) returned 1 [0094.257] GetFileType (hFile=0x444) returned 0x1 [0094.257] ReadFile (in: hFile=0x444, lpBuffer=0x21dbae8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5a8, lpOverlapped=0x0 | out: lpBuffer=0x21dbae8*, lpNumberOfBytesRead=0x3be5a8*=0x1000, lpOverlapped=0x0) returned 1 [0094.288] CloseHandle (hObject=0x444) returned 1 [0094.288] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\contentscript_bin_prod.js", nBufferLength=0x105, lpBuffer=0x3be040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\contentscript_bin_prod.js", lpFilePart=0x0) returned 0x8f [0094.288] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0094.288] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\contentscript_bin_prod.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\contentscript_bin_prod.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0094.289] GetFileType (hFile=0x444) returned 0x1 [0094.289] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be490) returned 1 [0094.289] GetFileType (hFile=0x444) returned 0x1 [0094.289] WriteFile (in: hFile=0x444, lpBuffer=0x21d97a8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be658, lpOverlapped=0x0 | out: lpBuffer=0x21d97a8*, lpNumberOfBytesWritten=0x3be658*=0x2000, lpOverlapped=0x0) returned 1 [0094.289] CloseHandle (hObject=0x444) returned 1 [0094.289] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\contentscript_bin_prod.js", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\contentscript_bin_prod.js", lpFilePart=0x0) returned 0x8f [0094.289] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\contentscript_bin_prod.js.xuy", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\contentscript_bin_prod.js.xuy", lpFilePart=0x0) returned 0x93 [0094.289] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0094.289] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\contentscript_bin_prod.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\contentscript_bin_prod.js"), fInfoLevelId=0x0, lpFileInformation=0x3be670 | out: lpFileInformation=0x3be670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x748ac811, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x748b14d2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x240c095a, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0094.289] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0094.289] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\contentscript_bin_prod.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\contentscript_bin_prod.js"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\contentscript_bin_prod.js.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\contentscript_bin_prod.js.xuy")) returned 1 [0094.290] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\dasherSettingSchema.json", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\dasherSettingSchema.json", lpFilePart=0x0) returned 0x8e [0094.290] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0094.291] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\dasherSettingSchema.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\dashersettingschema.json"), fInfoLevelId=0x0, lpFileInformation=0x22580d8 | out: lpFileInformation=0x22580d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x748bb26f, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x748bff32, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x356)) returned 1 [0094.291] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0094.291] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\dasherSettingSchema.json", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\dasherSettingSchema.json", lpFilePart=0x0) returned 0x8e [0094.291] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0094.291] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\dasherSettingSchema.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\dashersettingschema.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0094.291] GetFileType (hFile=0x444) returned 0x1 [0094.291] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be400) returned 1 [0094.291] GetFileType (hFile=0x444) returned 0x1 [0094.291] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be628 | out: lpFileSizeHigh=0x3be628*=0x0) returned 0x356 [0094.291] ReadFile (in: hFile=0x444, lpBuffer=0x2258828, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be558, lpOverlapped=0x0 | out: lpBuffer=0x2258828*, lpNumberOfBytesRead=0x3be558*=0x356, lpOverlapped=0x0) returned 1 [0094.303] CloseHandle (hObject=0x444) returned 1 [0094.319] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\dasherSettingSchema.json", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\dasherSettingSchema.json", lpFilePart=0x0) returned 0x8e [0094.319] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0094.319] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\dasherSettingSchema.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\dashersettingschema.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0094.321] GetFileType (hFile=0x444) returned 0x1 [0094.321] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be400) returned 1 [0094.321] GetFileType (hFile=0x444) returned 0x1 [0094.321] WriteFile (in: hFile=0x444, lpBuffer=0x22d0990*, nNumberOfBytesToWrite=0x360, lpNumberOfBytesWritten=0x3be468, lpOverlapped=0x0 | out: lpBuffer=0x22d0990*, lpNumberOfBytesWritten=0x3be468*=0x360, lpOverlapped=0x0) returned 1 [0094.325] CloseHandle (hObject=0x444) returned 1 [0094.325] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\dasherSettingSchema.json", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\dasherSettingSchema.json", lpFilePart=0x0) returned 0x8e [0094.326] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\dasherSettingSchema.json.xuy", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\dasherSettingSchema.json.xuy", lpFilePart=0x0) returned 0x92 [0094.326] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0094.327] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\dasherSettingSchema.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\dashersettingschema.json"), fInfoLevelId=0x0, lpFileInformation=0x3be670 | out: lpFileInformation=0x3be670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x748bb26f, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x748bff32, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2410cbae, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x360)) returned 1 [0094.327] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0094.327] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\dasherSettingSchema.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\dashersettingschema.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\dasherSettingSchema.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\dashersettingschema.json.xuy")) returned 1 [0094.328] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\eventpage_bin_prod.js", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\eventpage_bin_prod.js", lpFilePart=0x0) returned 0x8b [0094.329] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0094.329] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\eventpage_bin_prod.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\eventpage_bin_prod.js"), fInfoLevelId=0x0, lpFileInformation=0x22d1da0 | out: lpFileInformation=0x22d1da0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x748c4ec0, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x748c9b72, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x5b6c)) returned 1 [0094.336] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0094.336] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\eventpage_bin_prod.js", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\eventpage_bin_prod.js", lpFilePart=0x0) returned 0x8b [0094.336] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0094.336] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\eventpage_bin_prod.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\eventpage_bin_prod.js"), fInfoLevelId=0x0, lpFileInformation=0x22d1f80 | out: lpFileInformation=0x22d1f80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x748c4ec0, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x748c9b72, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x5b6c)) returned 1 [0094.336] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0094.336] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\eventpage_bin_prod.js", nBufferLength=0x105, lpBuffer=0x3be040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\eventpage_bin_prod.js", lpFilePart=0x0) returned 0x8b [0094.336] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0094.336] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\eventpage_bin_prod.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\eventpage_bin_prod.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0094.337] GetFileType (hFile=0x444) returned 0x1 [0094.337] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be490) returned 1 [0094.337] GetFileType (hFile=0x444) returned 0x1 [0094.337] ReadFile (in: hFile=0x444, lpBuffer=0x22d4470, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5a8, lpOverlapped=0x0 | out: lpBuffer=0x22d4470*, lpNumberOfBytesRead=0x3be5a8*=0x1000, lpOverlapped=0x0) returned 1 [0094.362] CloseHandle (hObject=0x444) returned 1 [0094.362] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\eventpage_bin_prod.js", nBufferLength=0x105, lpBuffer=0x3be040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\eventpage_bin_prod.js", lpFilePart=0x0) returned 0x8b [0094.362] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0094.362] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\eventpage_bin_prod.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\eventpage_bin_prod.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0094.362] GetFileType (hFile=0x444) returned 0x1 [0094.362] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be490) returned 1 [0094.363] GetFileType (hFile=0x444) returned 0x1 [0094.363] WriteFile (in: hFile=0x444, lpBuffer=0x22d2140*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be658, lpOverlapped=0x0 | out: lpBuffer=0x22d2140*, lpNumberOfBytesWritten=0x3be658*=0x2000, lpOverlapped=0x0) returned 1 [0094.363] CloseHandle (hObject=0x444) returned 1 [0094.363] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\eventpage_bin_prod.js", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\eventpage_bin_prod.js", lpFilePart=0x0) returned 0x8b [0094.363] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\eventpage_bin_prod.js.xuy", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\eventpage_bin_prod.js.xuy", lpFilePart=0x0) returned 0x8f [0094.363] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0094.363] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\eventpage_bin_prod.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\eventpage_bin_prod.js"), fInfoLevelId=0x0, lpFileInformation=0x3be670 | out: lpFileInformation=0x3be670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x748c4ec0, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x748c9b72, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2417f0c7, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x5b6c)) returned 1 [0094.363] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0094.363] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\eventpage_bin_prod.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\eventpage_bin_prod.js"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\eventpage_bin_prod.js.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\eventpage_bin_prod.js.xuy")) returned 1 [0094.364] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\manifest.json", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\manifest.json", lpFilePart=0x0) returned 0x83 [0094.364] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0094.364] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\manifest.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\manifest.json"), fInfoLevelId=0x0, lpFileInformation=0x2350a38 | out: lpFileInformation=0x2350a38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7434695a, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x748d10a2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x74d0f9ed, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x5b1)) returned 1 [0094.364] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0094.364] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\manifest.json", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\manifest.json", lpFilePart=0x0) returned 0x83 [0094.364] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0094.364] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\manifest.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\manifest.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0094.365] GetFileType (hFile=0x444) returned 0x1 [0094.365] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be400) returned 1 [0094.365] GetFileType (hFile=0x444) returned 0x1 [0094.365] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be628 | out: lpFileSizeHigh=0x3be628*=0x0) returned 0x5b1 [0094.365] ReadFile (in: hFile=0x444, lpBuffer=0x2351388, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be558, lpOverlapped=0x0 | out: lpBuffer=0x2351388*, lpNumberOfBytesRead=0x3be558*=0x5b1, lpOverlapped=0x0) returned 1 [0094.374] CloseHandle (hObject=0x444) returned 1 [0094.415] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\manifest.json", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\manifest.json", lpFilePart=0x0) returned 0x83 [0094.415] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0094.415] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\manifest.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\manifest.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0094.417] GetFileType (hFile=0x444) returned 0x1 [0094.417] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be400) returned 1 [0094.417] GetFileType (hFile=0x444) returned 0x1 [0094.417] WriteFile (in: hFile=0x444, lpBuffer=0x21c7450*, nNumberOfBytesToWrite=0x5c0, lpNumberOfBytesWritten=0x3be468, lpOverlapped=0x0 | out: lpBuffer=0x21c7450*, lpNumberOfBytesWritten=0x3be468*=0x5c0, lpOverlapped=0x0) returned 1 [0094.418] CloseHandle (hObject=0x444) returned 1 [0094.418] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\manifest.json", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\manifest.json", lpFilePart=0x0) returned 0x83 [0094.418] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\manifest.json.xuy", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\manifest.json.xuy", lpFilePart=0x0) returned 0x87 [0094.419] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0094.419] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\manifest.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\manifest.json"), fInfoLevelId=0x0, lpFileInformation=0x3be670 | out: lpFileInformation=0x3be670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7434695a, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x748d10a2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x241f18b5, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x5c0)) returned 1 [0094.419] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0094.419] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\manifest.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\manifest.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\manifest.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\manifest.json.xuy")) returned 1 [0094.421] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\page_embed_script.js", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\page_embed_script.js", lpFilePart=0x0) returned 0x8a [0094.421] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0094.421] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\page_embed_script.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\page_embed_script.js"), fInfoLevelId=0x0, lpFileInformation=0x21c8818 | out: lpFileInformation=0x21c8818*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x748d6036, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x748d85d2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1 [0094.421] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0094.421] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\page_embed_script.js", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\page_embed_script.js", lpFilePart=0x0) returned 0x8a [0094.421] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0094.421] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\page_embed_script.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\page_embed_script.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0094.421] GetFileType (hFile=0x444) returned 0x1 [0094.421] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be400) returned 1 [0094.421] GetFileType (hFile=0x444) returned 0x1 [0094.421] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be628 | out: lpFileSizeHigh=0x3be628*=0x0) returned 0xe0 [0094.421] ReadFile (in: hFile=0x444, lpBuffer=0x21c8cd0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be558, lpOverlapped=0x0 | out: lpBuffer=0x21c8cd0*, lpNumberOfBytesRead=0x3be558*=0xe0, lpOverlapped=0x0) returned 1 [0094.422] CloseHandle (hObject=0x444) returned 1 [0094.432] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\page_embed_script.js", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\page_embed_script.js", lpFilePart=0x0) returned 0x8a [0094.432] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0094.432] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\page_embed_script.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\page_embed_script.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0094.434] GetFileType (hFile=0x444) returned 0x1 [0094.434] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be400) returned 1 [0094.434] GetFileType (hFile=0x444) returned 0x1 [0094.434] WriteFile (in: hFile=0x444, lpBuffer=0x2240040*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x3be468, lpOverlapped=0x0 | out: lpBuffer=0x2240040*, lpNumberOfBytesWritten=0x3be468*=0xf0, lpOverlapped=0x0) returned 1 [0094.435] CloseHandle (hObject=0x444) returned 1 [0094.435] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\page_embed_script.js", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\page_embed_script.js", lpFilePart=0x0) returned 0x8a [0094.435] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\page_embed_script.js.xuy", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\page_embed_script.js.xuy", lpFilePart=0x0) returned 0x8e [0094.435] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0094.435] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\page_embed_script.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\page_embed_script.js"), fInfoLevelId=0x0, lpFileInformation=0x3be670 | out: lpFileInformation=0x3be670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x748d6036, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x748d85d2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x24217f04, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xf0)) returned 1 [0094.435] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0094.435] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\page_embed_script.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\page_embed_script.js"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\page_embed_script.js.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\page_embed_script.js.xuy")) returned 1 [0094.436] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0094.436] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales", nBufferLength=0x105, lpBuffer=0x3be0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales", lpFilePart=0x0) returned 0x7e [0094.436] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\", nBufferLength=0x105, lpBuffer=0x3be060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\", lpFilePart=0x0) returned 0x7f [0094.436] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\*", lpFindFileData=0x3be270 | out: lpFindFileData=0x3be270) returned 0x5d7fd0 [0094.441] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0094.442] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0094.442] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0094.443] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0094.443] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0094.443] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0094.443] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0094.443] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0094.443] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0094.443] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0094.443] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0094.444] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0094.444] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0094.444] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0094.444] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0094.444] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0094.444] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0094.444] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0094.444] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0094.444] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0094.445] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0094.445] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0094.445] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0094.445] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0094.445] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0094.445] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0094.445] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0094.445] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0094.446] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0094.446] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0094.446] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0094.446] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0094.446] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0094.446] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0094.446] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0094.446] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0094.447] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0094.447] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0094.447] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0094.447] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0094.449] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0094.449] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0094.449] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0094.449] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0094.449] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0094.449] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0094.449] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0094.449] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0094.450] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0094.450] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0094.450] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0094.450] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0094.450] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0094.450] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0094.450] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0094.450] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0094.451] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0094.452] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0094.452] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0094.452] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0094.452] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0094.452] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0094.452] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0094.452] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0094.452] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0094.453] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0094.453] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0094.453] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0094.453] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0094.453] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0094.453] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 0 [0094.453] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0094.454] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0094.454] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0094.454] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0094.454] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales", nBufferLength=0x105, lpBuffer=0x3be0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales", lpFilePart=0x0) returned 0x7e [0094.454] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\", nBufferLength=0x105, lpBuffer=0x3be060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\", lpFilePart=0x0) returned 0x7f [0094.454] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\*", lpFindFileData=0x3be270 | out: lpFindFileData=0x3be270) returned 0x5d79d0 [0094.455] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0094.455] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0094.455] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0094.455] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0094.455] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0094.455] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0094.455] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0094.456] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0094.456] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0094.456] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0094.456] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0094.456] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0094.456] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0094.456] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0094.456] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0094.456] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0094.456] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0094.456] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0094.457] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0094.457] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0094.457] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0094.457] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0094.457] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0094.457] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0094.457] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0094.457] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0094.457] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0094.457] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0094.457] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0094.458] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0094.458] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0094.458] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0094.458] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0094.458] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0094.458] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0094.458] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0094.458] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0094.458] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0094.458] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0094.458] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0094.459] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0094.459] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0094.459] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0094.459] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0094.459] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0094.459] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0094.459] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0094.459] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0094.459] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0094.459] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0094.459] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0094.460] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0094.460] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0094.460] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0094.460] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0094.460] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0094.460] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0094.460] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0094.460] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0094.460] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0094.460] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0094.460] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0094.460] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0094.460] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0094.460] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0094.460] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0094.460] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0094.460] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0094.460] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0094.460] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0094.460] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 0 [0094.461] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0094.461] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0094.461] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0094.461] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0094.461] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af", lpFilePart=0x0) returned 0x81 [0094.461] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\", lpFilePart=0x0) returned 0x82 [0094.461] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7eb0 [0094.462] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0094.462] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0094.462] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0094.462] FindClose (in: hFindFile=0x5d7eb0 | out: hFindFile=0x5d7eb0) returned 1 [0094.462] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0094.463] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0094.463] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0094.463] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af", lpFilePart=0x0) returned 0x81 [0094.463] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\", lpFilePart=0x0) returned 0x82 [0094.463] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7c70 [0094.463] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0094.463] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0094.463] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0094.463] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0094.463] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0094.463] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0094.463] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\messages.json", lpFilePart=0x0) returned 0x8f [0094.463] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0094.463] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x225e698 | out: lpFileInformation=0x225e698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7435c8f0, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7435c8e2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x84)) returned 1 [0094.463] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0094.463] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\messages.json", lpFilePart=0x0) returned 0x8f [0094.464] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0094.464] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0094.464] GetFileType (hFile=0x444) returned 0x1 [0094.464] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0094.464] GetFileType (hFile=0x444) returned 0x1 [0094.464] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x84 [0094.464] ReadFile (in: hFile=0x444, lpBuffer=0x225eae8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x225eae8*, lpNumberOfBytesRead=0x3be478*=0x84, lpOverlapped=0x0) returned 1 [0094.465] CloseHandle (hObject=0x444) returned 1 [0094.476] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\messages.json", lpFilePart=0x0) returned 0x8f [0094.476] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0094.476] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0094.477] GetFileType (hFile=0x444) returned 0x1 [0094.477] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0094.477] GetFileType (hFile=0x444) returned 0x1 [0094.477] WriteFile (in: hFile=0x444, lpBuffer=0x22d5d90*, nNumberOfBytesToWrite=0x90, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x22d5d90*, lpNumberOfBytesWritten=0x3be388*=0x90, lpOverlapped=0x0) returned 1 [0094.478] CloseHandle (hObject=0x444) returned 1 [0094.478] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\messages.json", lpFilePart=0x0) returned 0x8f [0094.478] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0094.478] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0094.478] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7435c8f0, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7435c8e2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2428a5bc, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x90)) returned 1 [0094.478] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0094.478] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\messages.json.xuy")) returned 1 [0094.479] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0094.479] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am", lpFilePart=0x0) returned 0x81 [0094.479] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\", lpFilePart=0x0) returned 0x82 [0094.480] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7610 [0094.480] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0094.480] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0094.480] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0094.480] FindClose (in: hFindFile=0x5d7610 | out: hFindFile=0x5d7610) returned 1 [0094.480] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0094.480] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0094.480] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0094.480] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am", lpFilePart=0x0) returned 0x81 [0094.480] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\", lpFilePart=0x0) returned 0x82 [0094.480] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d79d0 [0094.480] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0094.480] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0094.480] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0094.481] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0094.481] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0094.481] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0094.481] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\messages.json", lpFilePart=0x0) returned 0x8f [0094.481] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0094.481] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x22d9ee8 | out: lpFileInformation=0x22d9ee8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7436b350, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7436b342, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x74d19634, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x103)) returned 1 [0094.481] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0094.481] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\messages.json", lpFilePart=0x0) returned 0x8f [0094.481] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0094.481] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0094.481] GetFileType (hFile=0x444) returned 0x1 [0094.481] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0094.481] GetFileType (hFile=0x444) returned 0x1 [0094.481] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x103 [0094.481] ReadFile (in: hFile=0x444, lpBuffer=0x22da3b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x22da3b8*, lpNumberOfBytesRead=0x3be478*=0x103, lpOverlapped=0x0) returned 1 [0094.482] CloseHandle (hObject=0x444) returned 1 [0094.492] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\messages.json", lpFilePart=0x0) returned 0x8f [0094.492] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0094.492] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0094.494] GetFileType (hFile=0x444) returned 0x1 [0094.494] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0094.494] GetFileType (hFile=0x444) returned 0x1 [0094.494] WriteFile (in: hFile=0x444, lpBuffer=0x2351978*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x2351978*, lpNumberOfBytesWritten=0x3be388*=0x110, lpOverlapped=0x0) returned 1 [0094.495] CloseHandle (hObject=0x444) returned 1 [0094.495] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\messages.json", lpFilePart=0x0) returned 0x8f [0094.495] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0094.495] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0094.495] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7436b350, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7436b342, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x242b02e9, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x110)) returned 1 [0094.495] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0094.495] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\messages.json.xuy")) returned 1 [0094.496] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0094.496] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar", lpFilePart=0x0) returned 0x81 [0094.496] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\", lpFilePart=0x0) returned 0x82 [0094.496] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7c70 [0094.496] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0094.496] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0094.496] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0094.496] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0094.497] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0094.497] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0094.497] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0094.497] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar", lpFilePart=0x0) returned 0x81 [0094.497] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\", lpFilePart=0x0) returned 0x82 [0094.497] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7fd0 [0094.497] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0094.497] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0094.497] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0094.497] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0094.497] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0094.497] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0094.497] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\messages.json", lpFilePart=0x0) returned 0x8f [0094.497] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0094.497] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x2355ad0 | out: lpFileInformation=0x2355ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74374f95, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x74374f82, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x74d19634, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xed)) returned 1 [0094.497] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0094.497] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\messages.json", lpFilePart=0x0) returned 0x8f [0094.497] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0094.497] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0094.747] GetFileType (hFile=0x444) returned 0x1 [0094.747] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0094.747] GetFileType (hFile=0x444) returned 0x1 [0094.747] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xed [0094.747] ReadFile (in: hFile=0x444, lpBuffer=0x2355f88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x2355f88*, lpNumberOfBytesRead=0x3be478*=0xed, lpOverlapped=0x0) returned 1 [0094.748] CloseHandle (hObject=0x444) returned 1 [0094.848] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\messages.json", lpFilePart=0x0) returned 0x8f [0094.848] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0094.848] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0094.849] GetFileType (hFile=0x444) returned 0x1 [0094.849] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0094.849] GetFileType (hFile=0x444) returned 0x1 [0094.849] WriteFile (in: hFile=0x444, lpBuffer=0x21d19f8*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x21d19f8*, lpNumberOfBytesWritten=0x3be388*=0xf0, lpOverlapped=0x0) returned 1 [0094.850] CloseHandle (hObject=0x444) returned 1 [0094.850] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\messages.json", lpFilePart=0x0) returned 0x8f [0094.850] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0094.850] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0094.850] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74374f95, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x74374f82, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2461dc70, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xf0)) returned 1 [0094.850] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0094.850] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\messages.json.xuy")) returned 1 [0094.851] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0094.851] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az", lpFilePart=0x0) returned 0x81 [0094.851] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\", lpFilePart=0x0) returned 0x82 [0094.851] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7670 [0094.854] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0094.854] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0094.854] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0094.854] FindClose (in: hFindFile=0x5d7670 | out: hFindFile=0x5d7670) returned 1 [0094.854] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0094.854] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0094.854] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0094.854] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az", lpFilePart=0x0) returned 0x81 [0094.854] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\", lpFilePart=0x0) returned 0x82 [0094.854] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d81b0 [0094.854] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0094.855] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0094.855] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0094.855] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0094.855] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0094.855] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0094.855] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\messages.json", lpFilePart=0x0) returned 0x8f [0094.855] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0094.855] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x21d5b50 | out: lpFileInformation=0x21d5b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7437c4c7, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7437ebc2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0xa7)) returned 1 [0094.855] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0094.855] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\messages.json", lpFilePart=0x0) returned 0x8f [0094.855] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0094.855] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0094.856] GetFileType (hFile=0x444) returned 0x1 [0094.856] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0094.856] GetFileType (hFile=0x444) returned 0x1 [0094.856] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xa7 [0094.856] ReadFile (in: hFile=0x444, lpBuffer=0x21d5fc0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x21d5fc0*, lpNumberOfBytesRead=0x3be478*=0xa7, lpOverlapped=0x0) returned 1 [0094.857] CloseHandle (hObject=0x444) returned 1 [0094.867] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\messages.json", lpFilePart=0x0) returned 0x8f [0094.867] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0094.868] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0094.869] GetFileType (hFile=0x444) returned 0x1 [0094.869] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0094.869] GetFileType (hFile=0x444) returned 0x1 [0094.869] WriteFile (in: hFile=0x444, lpBuffer=0x224d2a8*, nNumberOfBytesToWrite=0xb0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x224d2a8*, lpNumberOfBytesWritten=0x3be388*=0xb0, lpOverlapped=0x0) returned 1 [0094.870] CloseHandle (hObject=0x444) returned 1 [0094.870] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\messages.json", lpFilePart=0x0) returned 0x8f [0094.871] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0094.871] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0094.871] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7437c4c7, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7437ebc2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x24643be4, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xb0)) returned 1 [0094.871] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0094.871] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\messages.json.xuy")) returned 1 [0094.872] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0094.872] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg", lpFilePart=0x0) returned 0x81 [0094.872] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\", lpFilePart=0x0) returned 0x82 [0094.872] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7d30 [0094.874] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0094.874] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0094.874] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0094.874] FindClose (in: hFindFile=0x5d7d30 | out: hFindFile=0x5d7d30) returned 1 [0094.874] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0094.874] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0094.874] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0094.874] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg", lpFilePart=0x0) returned 0x81 [0094.874] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\", lpFilePart=0x0) returned 0x82 [0094.874] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7370 [0094.875] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0094.875] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0094.875] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0094.875] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0094.875] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0094.875] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0094.875] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\messages.json", lpFilePart=0x0) returned 0x8f [0094.875] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0094.875] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x2251400 | out: lpFileInformation=0x2251400*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7438d637, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7438d622, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x74d19634, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x114)) returned 1 [0094.875] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0094.876] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\messages.json", lpFilePart=0x0) returned 0x8f [0094.876] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0094.876] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0094.876] GetFileType (hFile=0x444) returned 0x1 [0094.876] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0094.876] GetFileType (hFile=0x444) returned 0x1 [0094.876] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x114 [0094.876] ReadFile (in: hFile=0x444, lpBuffer=0x22518e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x22518e0*, lpNumberOfBytesRead=0x3be478*=0x114, lpOverlapped=0x0) returned 1 [0094.877] CloseHandle (hObject=0x444) returned 1 [0094.887] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\messages.json", lpFilePart=0x0) returned 0x8f [0094.887] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0094.888] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0094.890] GetFileType (hFile=0x444) returned 0x1 [0094.890] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0094.890] GetFileType (hFile=0x444) returned 0x1 [0094.890] WriteFile (in: hFile=0x444, lpBuffer=0x22c8ef0*, nNumberOfBytesToWrite=0x120, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x22c8ef0*, lpNumberOfBytesWritten=0x3be388*=0x120, lpOverlapped=0x0) returned 1 [0094.891] CloseHandle (hObject=0x444) returned 1 [0094.892] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\messages.json", lpFilePart=0x0) returned 0x8f [0094.892] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0094.892] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0094.892] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7438d637, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7438d622, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x246901a6, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x120)) returned 1 [0094.892] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0094.892] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\messages.json.xuy")) returned 1 [0094.893] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0094.893] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn", lpFilePart=0x0) returned 0x81 [0094.893] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\", lpFilePart=0x0) returned 0x82 [0094.893] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7670 [0094.895] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0094.895] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0094.896] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0094.896] FindClose (in: hFindFile=0x5d7670 | out: hFindFile=0x5d7670) returned 1 [0094.896] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0094.896] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0094.896] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0094.896] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn", lpFilePart=0x0) returned 0x81 [0094.896] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\", lpFilePart=0x0) returned 0x82 [0094.896] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7f10 [0094.896] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0094.896] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0094.896] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0094.897] FindClose (in: hFindFile=0x5d7f10 | out: hFindFile=0x5d7f10) returned 1 [0094.897] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0094.897] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0094.897] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\messages.json", lpFilePart=0x0) returned 0x8f [0094.897] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0094.897] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x22cd048 | out: lpFileInformation=0x22cd048*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74397281, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x74397262, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x74d1bd44, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x14b)) returned 1 [0094.897] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0094.897] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\messages.json", lpFilePart=0x0) returned 0x8f [0094.897] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0094.897] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0094.897] GetFileType (hFile=0x444) returned 0x1 [0094.897] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0094.897] GetFileType (hFile=0x444) returned 0x1 [0094.897] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x14b [0094.897] ReadFile (in: hFile=0x444, lpBuffer=0x22cd560, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x22cd560*, lpNumberOfBytesRead=0x3be478*=0x14b, lpOverlapped=0x0) returned 1 [0094.899] CloseHandle (hObject=0x444) returned 1 [0094.910] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\messages.json", lpFilePart=0x0) returned 0x8f [0094.910] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0094.910] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0094.912] GetFileType (hFile=0x444) returned 0x1 [0094.912] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0094.912] GetFileType (hFile=0x444) returned 0x1 [0094.912] WriteFile (in: hFile=0x444, lpBuffer=0x2344c58*, nNumberOfBytesToWrite=0x150, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x2344c58*, lpNumberOfBytesWritten=0x3be388*=0x150, lpOverlapped=0x0) returned 1 [0094.913] CloseHandle (hObject=0x444) returned 1 [0094.913] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\messages.json", lpFilePart=0x0) returned 0x8f [0094.913] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0094.914] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0094.914] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74397281, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x74397262, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x246b9551, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x150)) returned 1 [0094.914] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0094.914] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\messages.json.xuy")) returned 1 [0094.915] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0094.915] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca", lpFilePart=0x0) returned 0x81 [0094.915] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\", lpFilePart=0x0) returned 0x82 [0094.915] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7550 [0094.915] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0094.915] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0094.916] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0094.916] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0094.916] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0094.916] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0094.916] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0094.916] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca", lpFilePart=0x0) returned 0x81 [0094.916] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\", lpFilePart=0x0) returned 0x82 [0094.916] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d78b0 [0094.916] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0094.916] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0094.916] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0094.917] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0094.917] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0094.917] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0094.917] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\messages.json", lpFilePart=0x0) returned 0x8f [0094.917] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0094.917] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x2348db0 | out: lpFileInformation=0x2348db0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d913f, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x743ddf32, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x74d1bd44, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xcf)) returned 1 [0094.917] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0094.917] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\messages.json", lpFilePart=0x0) returned 0x8f [0094.917] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0094.917] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0094.917] GetFileType (hFile=0x444) returned 0x1 [0094.917] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0094.917] GetFileType (hFile=0x444) returned 0x1 [0094.917] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xcf [0094.918] ReadFile (in: hFile=0x444, lpBuffer=0x2349248, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x2349248*, lpNumberOfBytesRead=0x3be478*=0xcf, lpOverlapped=0x0) returned 1 [0094.919] CloseHandle (hObject=0x444) returned 1 [0094.980] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\messages.json", lpFilePart=0x0) returned 0x8f [0094.980] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0094.980] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0094.981] GetFileType (hFile=0x444) returned 0x1 [0094.981] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0094.981] GetFileType (hFile=0x444) returned 0x1 [0094.982] WriteFile (in: hFile=0x444, lpBuffer=0x21c0510*, nNumberOfBytesToWrite=0xd0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x21c0510*, lpNumberOfBytesWritten=0x3be388*=0xd0, lpOverlapped=0x0) returned 1 [0094.983] CloseHandle (hObject=0x444) returned 1 [0094.983] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\messages.json", lpFilePart=0x0) returned 0x8f [0094.984] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0094.984] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0094.984] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d913f, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x743ddf32, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x24774ecc, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xd0)) returned 1 [0094.984] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0094.984] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\messages.json.xuy")) returned 1 [0094.985] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0094.985] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs", lpFilePart=0x0) returned 0x81 [0094.985] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\", lpFilePart=0x0) returned 0x82 [0094.985] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d79d0 [0094.987] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0094.988] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0094.988] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0094.988] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0094.988] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0094.988] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0094.988] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0094.988] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs", lpFilePart=0x0) returned 0x81 [0094.988] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\", lpFilePart=0x0) returned 0x82 [0094.988] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d81b0 [0094.989] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0094.989] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0094.989] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0094.989] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0094.989] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0094.989] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0094.989] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\messages.json", lpFilePart=0x0) returned 0x8f [0094.989] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0094.989] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x21c4668 | out: lpFileInformation=0x21c4668*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743e7ba5, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x743e7b72, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x74d1bd44, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xad)) returned 1 [0094.990] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0094.990] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\messages.json", lpFilePart=0x0) returned 0x8f [0094.990] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0094.990] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0094.990] GetFileType (hFile=0x444) returned 0x1 [0094.990] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0094.990] GetFileType (hFile=0x444) returned 0x1 [0094.990] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xad [0094.990] ReadFile (in: hFile=0x444, lpBuffer=0x21c4ae0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x21c4ae0*, lpNumberOfBytesRead=0x3be478*=0xad, lpOverlapped=0x0) returned 1 [0094.991] CloseHandle (hObject=0x444) returned 1 [0095.007] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\messages.json", lpFilePart=0x0) returned 0x8f [0095.007] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0095.007] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0095.009] GetFileType (hFile=0x444) returned 0x1 [0095.009] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0095.009] GetFileType (hFile=0x444) returned 0x1 [0095.009] WriteFile (in: hFile=0x444, lpBuffer=0x223bdc0*, nNumberOfBytesToWrite=0xb0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x223bdc0*, lpNumberOfBytesWritten=0x3be388*=0xb0, lpOverlapped=0x0) returned 1 [0095.010] CloseHandle (hObject=0x444) returned 1 [0095.010] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\messages.json", lpFilePart=0x0) returned 0x8f [0095.010] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0095.010] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0095.010] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743e7ba5, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x743e7b72, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2479b2e0, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xb0)) returned 1 [0095.010] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0095.010] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\messages.json.xuy")) returned 1 [0095.011] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0095.011] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da", lpFilePart=0x0) returned 0x81 [0095.011] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\", lpFilePart=0x0) returned 0x82 [0095.011] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d79d0 [0095.012] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0095.012] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0095.012] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0095.012] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0095.012] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0095.012] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0095.012] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0095.012] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da", lpFilePart=0x0) returned 0x81 [0095.012] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\", lpFilePart=0x0) returned 0x82 [0095.012] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7eb0 [0095.013] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0095.013] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0095.013] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0095.013] FindClose (in: hFindFile=0x5d7eb0 | out: hFindFile=0x5d7eb0) returned 1 [0095.013] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0095.014] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0095.014] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\messages.json", lpFilePart=0x0) returned 0x8f [0095.014] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0095.014] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x223ff18 | out: lpFileInformation=0x223ff18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743f17e0, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x743f17b2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x74d1bd44, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xac)) returned 1 [0095.014] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0095.015] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\messages.json", lpFilePart=0x0) returned 0x8f [0095.015] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0095.015] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0095.015] GetFileType (hFile=0x444) returned 0x1 [0095.015] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0095.015] GetFileType (hFile=0x444) returned 0x1 [0095.015] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xac [0095.015] ReadFile (in: hFile=0x444, lpBuffer=0x2240390, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x2240390*, lpNumberOfBytesRead=0x3be478*=0xac, lpOverlapped=0x0) returned 1 [0095.016] CloseHandle (hObject=0x444) returned 1 [0095.027] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\messages.json", lpFilePart=0x0) returned 0x8f [0095.027] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0095.027] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0095.031] GetFileType (hFile=0x444) returned 0x1 [0095.031] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0095.031] GetFileType (hFile=0x444) returned 0x1 [0095.031] WriteFile (in: hFile=0x444, lpBuffer=0x22b7670*, nNumberOfBytesToWrite=0xb0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x22b7670*, lpNumberOfBytesWritten=0x3be388*=0xb0, lpOverlapped=0x0) returned 1 [0095.031] CloseHandle (hObject=0x444) returned 1 [0095.032] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\messages.json", lpFilePart=0x0) returned 0x8f [0095.032] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0095.032] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0095.032] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743f17e0, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x743f17b2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x247e75e0, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xb0)) returned 1 [0095.032] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0095.032] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\messages.json.xuy")) returned 1 [0095.033] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0095.033] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de", lpFilePart=0x0) returned 0x81 [0095.033] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\", lpFilePart=0x0) returned 0x82 [0095.033] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7cd0 [0095.034] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0095.034] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0095.034] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0095.034] FindClose (in: hFindFile=0x5d7cd0 | out: hFindFile=0x5d7cd0) returned 1 [0095.035] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0095.035] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0095.035] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0095.035] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de", lpFilePart=0x0) returned 0x81 [0095.035] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\", lpFilePart=0x0) returned 0x82 [0095.035] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7af0 [0095.035] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0095.035] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0095.035] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0095.035] FindClose (in: hFindFile=0x5d7af0 | out: hFindFile=0x5d7af0) returned 1 [0095.035] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0095.035] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0095.036] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\messages.json", lpFilePart=0x0) returned 0x8f [0095.036] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0095.036] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x22bb7c8 | out: lpFileInformation=0x22bb7c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fdb34, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x74400212, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x74d1bd44, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xc1)) returned 1 [0095.036] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0095.036] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\messages.json", lpFilePart=0x0) returned 0x8f [0095.036] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0095.036] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0095.036] GetFileType (hFile=0x444) returned 0x1 [0095.036] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0095.036] GetFileType (hFile=0x444) returned 0x1 [0095.036] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xc1 [0095.036] ReadFile (in: hFile=0x444, lpBuffer=0x22bbc58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x22bbc58*, lpNumberOfBytesRead=0x3be478*=0xc1, lpOverlapped=0x0) returned 1 [0095.037] CloseHandle (hObject=0x444) returned 1 [0095.048] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\messages.json", lpFilePart=0x0) returned 0x8f [0095.048] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0095.048] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0095.049] GetFileType (hFile=0x444) returned 0x1 [0095.049] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0095.049] GetFileType (hFile=0x444) returned 0x1 [0095.049] WriteFile (in: hFile=0x444, lpBuffer=0x2332f80*, nNumberOfBytesToWrite=0xd0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x2332f80*, lpNumberOfBytesWritten=0x3be388*=0xd0, lpOverlapped=0x0) returned 1 [0095.050] CloseHandle (hObject=0x444) returned 1 [0095.050] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\messages.json", lpFilePart=0x0) returned 0x8f [0095.050] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0095.050] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0095.050] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fdb34, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x74400212, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2480da9f, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xd0)) returned 1 [0095.050] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0095.050] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\messages.json.xuy")) returned 1 [0095.051] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0095.051] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el", lpFilePart=0x0) returned 0x81 [0095.051] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\", lpFilePart=0x0) returned 0x82 [0095.051] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7d30 [0095.052] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0095.052] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0095.052] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0095.052] FindClose (in: hFindFile=0x5d7d30 | out: hFindFile=0x5d7d30) returned 1 [0095.052] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0095.052] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0095.052] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0095.052] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el", lpFilePart=0x0) returned 0x81 [0095.052] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\", lpFilePart=0x0) returned 0x82 [0095.052] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7370 [0095.052] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0095.053] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0095.053] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0095.053] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0095.053] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0095.053] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0095.053] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\messages.json", lpFilePart=0x0) returned 0x8f [0095.053] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0095.053] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x23370d8 | out: lpFileInformation=0x23370d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74409e8f, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x74409e52, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x74d1e456, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x12a)) returned 1 [0095.053] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0095.053] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\messages.json", lpFilePart=0x0) returned 0x8f [0095.053] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0095.053] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0095.054] GetFileType (hFile=0x444) returned 0x1 [0095.054] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0095.054] GetFileType (hFile=0x444) returned 0x1 [0095.054] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x12a [0095.054] ReadFile (in: hFile=0x444, lpBuffer=0x23375d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x23375d0*, lpNumberOfBytesRead=0x3be478*=0x12a, lpOverlapped=0x0) returned 1 [0095.066] CloseHandle (hObject=0x444) returned 1 [0095.106] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\messages.json", lpFilePart=0x0) returned 0x8f [0095.106] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0095.106] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0095.108] GetFileType (hFile=0x444) returned 0x1 [0095.108] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0095.108] GetFileType (hFile=0x444) returned 0x1 [0095.108] WriteFile (in: hFile=0x444, lpBuffer=0x21aec88*, nNumberOfBytesToWrite=0x130, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x21aec88*, lpNumberOfBytesWritten=0x3be388*=0x130, lpOverlapped=0x0) returned 1 [0095.109] CloseHandle (hObject=0x444) returned 1 [0095.109] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\messages.json", lpFilePart=0x0) returned 0x8f [0095.109] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0095.109] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0095.109] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74409e8f, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x74409e52, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x248a6265, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x130)) returned 1 [0095.110] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0095.110] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\messages.json.xuy")) returned 1 [0095.110] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0095.111] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB", lpFilePart=0x0) returned 0x84 [0095.111] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\", lpFilePart=0x0) returned 0x85 [0095.111] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7e50 [0095.112] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0095.113] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0095.113] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0095.113] FindClose (in: hFindFile=0x5d7e50 | out: hFindFile=0x5d7e50) returned 1 [0095.113] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0095.113] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0095.113] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0095.113] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB", lpFilePart=0x0) returned 0x84 [0095.113] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\", lpFilePart=0x0) returned 0x85 [0095.113] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7d90 [0095.113] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0095.114] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0095.114] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0095.114] FindClose (in: hFindFile=0x5d7d90 | out: hFindFile=0x5d7d90) returned 1 [0095.114] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0095.114] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0095.114] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\messages.json", lpFilePart=0x0) returned 0x92 [0095.114] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0095.114] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_gb\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x21b2eb0 | out: lpFileInformation=0x21b2eb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744113bd, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x74413a92, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x74d1e456, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xb2)) returned 1 [0095.114] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0095.114] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\messages.json", lpFilePart=0x0) returned 0x92 [0095.114] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0095.114] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_gb\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0095.115] GetFileType (hFile=0x444) returned 0x1 [0095.115] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0095.115] GetFileType (hFile=0x444) returned 0x1 [0095.115] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xb2 [0095.115] ReadFile (in: hFile=0x444, lpBuffer=0x21b3340, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x21b3340*, lpNumberOfBytesRead=0x3be478*=0xb2, lpOverlapped=0x0) returned 1 [0095.115] CloseHandle (hObject=0x444) returned 1 [0095.126] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\messages.json", lpFilePart=0x0) returned 0x92 [0095.126] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0095.127] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_gb\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0095.128] GetFileType (hFile=0x444) returned 0x1 [0095.128] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0095.128] GetFileType (hFile=0x444) returned 0x1 [0095.128] WriteFile (in: hFile=0x444, lpBuffer=0x222a650*, nNumberOfBytesToWrite=0xc0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x222a650*, lpNumberOfBytesWritten=0x3be388*=0xc0, lpOverlapped=0x0) returned 1 [0095.129] CloseHandle (hObject=0x444) returned 1 [0095.129] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\messages.json", lpFilePart=0x0) returned 0x92 [0095.129] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\messages.json.xuy", lpFilePart=0x0) returned 0x96 [0095.129] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0095.129] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_gb\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744113bd, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x74413a92, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x248cc8da, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xc0)) returned 1 [0095.129] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0095.130] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_gb\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_gb\\messages.json.xuy")) returned 1 [0095.130] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0095.130] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US", lpFilePart=0x0) returned 0x84 [0095.131] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\", lpFilePart=0x0) returned 0x85 [0095.131] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d79d0 [0095.131] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0095.131] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0095.131] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0095.131] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0095.131] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0095.131] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0095.131] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0095.131] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US", lpFilePart=0x0) returned 0x84 [0095.131] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\", lpFilePart=0x0) returned 0x85 [0095.131] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d79d0 [0095.132] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0095.132] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0095.132] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0095.132] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0095.132] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0095.132] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0095.132] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\messages.json", lpFilePart=0x0) returned 0x92 [0095.132] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0095.132] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_us\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x222e890 | out: lpFileInformation=0x222e890*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7441d715, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7441d6d2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x74d1e456, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x109)) returned 1 [0095.133] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0095.133] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\messages.json", lpFilePart=0x0) returned 0x92 [0095.133] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0095.133] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_us\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0095.133] GetFileType (hFile=0x444) returned 0x1 [0095.133] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0095.133] GetFileType (hFile=0x444) returned 0x1 [0095.133] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x109 [0095.133] ReadFile (in: hFile=0x444, lpBuffer=0x222ed78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x222ed78*, lpNumberOfBytesRead=0x3be478*=0x109, lpOverlapped=0x0) returned 1 [0095.134] CloseHandle (hObject=0x444) returned 1 [0095.147] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\messages.json", lpFilePart=0x0) returned 0x92 [0095.147] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0095.147] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_us\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0095.148] GetFileType (hFile=0x444) returned 0x1 [0095.148] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0095.149] GetFileType (hFile=0x444) returned 0x1 [0095.149] WriteFile (in: hFile=0x444, lpBuffer=0x22a6338*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x22a6338*, lpNumberOfBytesWritten=0x3be388*=0x110, lpOverlapped=0x0) returned 1 [0095.149] CloseHandle (hObject=0x444) returned 1 [0095.149] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\messages.json", lpFilePart=0x0) returned 0x92 [0095.149] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\messages.json.xuy", lpFilePart=0x0) returned 0x96 [0095.150] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0095.150] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_us\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7441d715, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7441d6d2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x248f2619, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x110)) returned 1 [0095.150] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0095.150] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_us\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_us\\messages.json.xuy")) returned 1 [0095.151] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0095.151] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es", lpFilePart=0x0) returned 0x81 [0095.151] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\", lpFilePart=0x0) returned 0x82 [0095.151] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7eb0 [0095.152] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0095.152] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0095.152] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0095.152] FindClose (in: hFindFile=0x5d7eb0 | out: hFindFile=0x5d7eb0) returned 1 [0095.152] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0095.152] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0095.152] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0095.152] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es", lpFilePart=0x0) returned 0x81 [0095.152] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\", lpFilePart=0x0) returned 0x82 [0095.152] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7cd0 [0095.153] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0095.153] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0095.153] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0095.153] FindClose (in: hFindFile=0x5d7cd0 | out: hFindFile=0x5d7cd0) returned 1 [0095.153] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0095.153] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0095.153] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\messages.json", lpFilePart=0x0) returned 0x8f [0095.153] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0095.153] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x22aa4a8 | out: lpFileInformation=0x22aa4a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7442e86f, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7442e842, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x74d1e456, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xcc)) returned 1 [0095.153] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0095.153] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\messages.json", lpFilePart=0x0) returned 0x8f [0095.153] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0095.153] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0095.154] GetFileType (hFile=0x444) returned 0x1 [0095.154] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0095.154] GetFileType (hFile=0x444) returned 0x1 [0095.154] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xcc [0095.154] ReadFile (in: hFile=0x444, lpBuffer=0x22aa940, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x22aa940*, lpNumberOfBytesRead=0x3be478*=0xcc, lpOverlapped=0x0) returned 1 [0095.155] CloseHandle (hObject=0x444) returned 1 [0095.165] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\messages.json", lpFilePart=0x0) returned 0x8f [0095.165] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0095.165] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0095.167] GetFileType (hFile=0x444) returned 0x1 [0095.167] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0095.167] GetFileType (hFile=0x444) returned 0x1 [0095.167] WriteFile (in: hFile=0x444, lpBuffer=0x2321c60*, nNumberOfBytesToWrite=0xd0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x2321c60*, lpNumberOfBytesWritten=0x3be388*=0xd0, lpOverlapped=0x0) returned 1 [0095.168] CloseHandle (hObject=0x444) returned 1 [0095.168] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\messages.json", lpFilePart=0x0) returned 0x8f [0095.168] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0095.168] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0095.168] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7442e86f, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7442e842, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x249187da, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xd0)) returned 1 [0095.168] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0095.168] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\messages.json.xuy")) returned 1 [0095.169] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0095.169] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419", lpFilePart=0x0) returned 0x85 [0095.169] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\", lpFilePart=0x0) returned 0x86 [0095.169] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7550 [0095.171] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0095.171] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0095.171] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0095.171] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0095.171] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0095.171] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0095.171] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0095.171] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419", lpFilePart=0x0) returned 0x85 [0095.171] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\", lpFilePart=0x0) returned 0x86 [0095.171] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7550 [0095.171] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0095.172] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0095.172] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0095.172] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0095.172] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0095.172] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0095.172] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\messages.json", lpFilePart=0x0) returned 0x93 [0095.172] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0095.172] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x2325ea8 | out: lpFileInformation=0x2325ea8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744384c9, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x74438482, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x74d1e456, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xe3)) returned 1 [0095.172] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0095.172] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\messages.json", lpFilePart=0x0) returned 0x93 [0095.172] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0095.172] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0095.172] GetFileType (hFile=0x444) returned 0x1 [0095.172] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0095.172] GetFileType (hFile=0x444) returned 0x1 [0095.172] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xe3 [0095.173] ReadFile (in: hFile=0x444, lpBuffer=0x2326368, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x2326368*, lpNumberOfBytesRead=0x3be478*=0xe3, lpOverlapped=0x0) returned 1 [0095.173] CloseHandle (hObject=0x444) returned 1 [0095.215] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\messages.json", lpFilePart=0x0) returned 0x93 [0095.215] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0095.215] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0095.216] GetFileType (hFile=0x444) returned 0x1 [0095.216] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0095.216] GetFileType (hFile=0x444) returned 0x1 [0095.216] WriteFile (in: hFile=0x444, lpBuffer=0x219d680*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x219d680*, lpNumberOfBytesWritten=0x3be388*=0xf0, lpOverlapped=0x0) returned 1 [0095.217] CloseHandle (hObject=0x444) returned 1 [0095.217] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\messages.json", lpFilePart=0x0) returned 0x93 [0095.217] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\messages.json.xuy", lpFilePart=0x0) returned 0x97 [0095.217] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0095.218] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744384c9, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x74438482, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x249b11fb, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xf0)) returned 1 [0095.218] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0095.218] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\messages.json.xuy")) returned 1 [0095.219] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0095.219] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et", lpFilePart=0x0) returned 0x81 [0095.219] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\", lpFilePart=0x0) returned 0x82 [0095.219] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7550 [0095.220] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0095.220] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0095.220] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0095.220] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0095.220] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0095.220] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0095.220] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0095.221] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et", lpFilePart=0x0) returned 0x81 [0095.221] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\", lpFilePart=0x0) returned 0x82 [0095.221] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d81b0 [0095.221] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0095.221] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0095.221] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0095.221] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0095.221] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0095.221] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0095.221] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\messages.json", lpFilePart=0x0) returned 0x8f [0095.221] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0095.221] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x21a17f0 | out: lpFileInformation=0x21a17f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74442107, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x744420c2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x74d20b69, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xd4)) returned 1 [0095.222] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0095.222] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\messages.json", lpFilePart=0x0) returned 0x8f [0095.222] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0095.222] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0095.222] GetFileType (hFile=0x444) returned 0x1 [0095.222] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0095.222] GetFileType (hFile=0x444) returned 0x1 [0095.222] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xd4 [0095.222] ReadFile (in: hFile=0x444, lpBuffer=0x21a1c90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x21a1c90*, lpNumberOfBytesRead=0x3be478*=0xd4, lpOverlapped=0x0) returned 1 [0095.223] CloseHandle (hObject=0x444) returned 1 [0095.238] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\messages.json", lpFilePart=0x0) returned 0x8f [0095.238] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0095.238] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0095.239] GetFileType (hFile=0x444) returned 0x1 [0095.239] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0095.239] GetFileType (hFile=0x444) returned 0x1 [0095.239] WriteFile (in: hFile=0x444, lpBuffer=0x2218fd8*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x2218fd8*, lpNumberOfBytesWritten=0x3be388*=0xe0, lpOverlapped=0x0) returned 1 [0095.240] CloseHandle (hObject=0x444) returned 1 [0095.240] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\messages.json", lpFilePart=0x0) returned 0x8f [0095.240] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0095.240] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0095.240] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74442107, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x744420c2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x249d7c60, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1 [0095.240] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0095.240] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\messages.json.xuy")) returned 1 [0095.241] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0095.241] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu", lpFilePart=0x0) returned 0x81 [0095.242] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\", lpFilePart=0x0) returned 0x82 [0095.242] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7fd0 [0095.242] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0095.242] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0095.242] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0095.242] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0095.242] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0095.242] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0095.242] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0095.242] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu", lpFilePart=0x0) returned 0x81 [0095.242] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\", lpFilePart=0x0) returned 0x82 [0095.242] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7e50 [0095.243] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0095.243] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0095.243] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0095.243] FindClose (in: hFindFile=0x5d7e50 | out: hFindFile=0x5d7e50) returned 1 [0095.243] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0095.243] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0095.243] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\messages.json", lpFilePart=0x0) returned 0x8f [0095.243] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0095.243] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x221d130 | out: lpFileInformation=0x221d130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7444e446, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7444e412, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x98)) returned 1 [0095.243] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0095.244] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\messages.json", lpFilePart=0x0) returned 0x8f [0095.244] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0095.244] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0095.244] GetFileType (hFile=0x444) returned 0x1 [0095.244] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0095.244] GetFileType (hFile=0x444) returned 0x1 [0095.244] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x98 [0095.244] ReadFile (in: hFile=0x444, lpBuffer=0x221d590, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x221d590*, lpNumberOfBytesRead=0x3be478*=0x98, lpOverlapped=0x0) returned 1 [0095.245] CloseHandle (hObject=0x444) returned 1 [0095.255] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\messages.json", lpFilePart=0x0) returned 0x8f [0095.255] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0095.255] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0095.256] GetFileType (hFile=0x444) returned 0x1 [0095.257] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0095.257] GetFileType (hFile=0x444) returned 0x1 [0095.257] WriteFile (in: hFile=0x444, lpBuffer=0x2294850*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x2294850*, lpNumberOfBytesWritten=0x3be388*=0xa0, lpOverlapped=0x0) returned 1 [0095.257] CloseHandle (hObject=0x444) returned 1 [0095.257] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\messages.json", lpFilePart=0x0) returned 0x8f [0095.257] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0095.258] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0095.258] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7444e446, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7444e412, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x249fd6e7, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xa0)) returned 1 [0095.258] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0095.258] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\messages.json.xuy")) returned 1 [0095.259] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0095.259] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa", lpFilePart=0x0) returned 0x81 [0095.259] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\", lpFilePart=0x0) returned 0x82 [0095.259] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d78b0 [0095.261] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0095.261] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0095.261] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0095.261] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0095.261] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0095.261] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0095.261] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0095.261] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa", lpFilePart=0x0) returned 0x81 [0095.262] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\", lpFilePart=0x0) returned 0x82 [0095.262] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7550 [0095.262] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0095.262] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0095.262] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0095.262] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0095.262] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0095.262] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0095.262] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\messages.json", lpFilePart=0x0) returned 0x8f [0095.262] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0095.262] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x22989a8 | out: lpFileInformation=0x22989a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744580a3, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x74458052, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x74d20b69, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xff)) returned 1 [0095.263] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0095.263] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\messages.json", lpFilePart=0x0) returned 0x8f [0095.263] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0095.263] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0095.263] GetFileType (hFile=0x444) returned 0x1 [0095.263] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0095.263] GetFileType (hFile=0x444) returned 0x1 [0095.263] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xff [0095.263] ReadFile (in: hFile=0x444, lpBuffer=0x2298e70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x2298e70*, lpNumberOfBytesRead=0x3be478*=0xff, lpOverlapped=0x0) returned 1 [0095.264] CloseHandle (hObject=0x444) returned 1 [0095.275] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\messages.json", lpFilePart=0x0) returned 0x8f [0095.275] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0095.275] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0095.276] GetFileType (hFile=0x444) returned 0x1 [0095.276] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0095.276] GetFileType (hFile=0x444) returned 0x1 [0095.276] WriteFile (in: hFile=0x444, lpBuffer=0x23101f0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x23101f0*, lpNumberOfBytesWritten=0x3be388*=0x100, lpOverlapped=0x0) returned 1 [0095.277] CloseHandle (hObject=0x444) returned 1 [0095.277] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\messages.json", lpFilePart=0x0) returned 0x8f [0095.277] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0095.277] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0095.277] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744580a3, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x74458052, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x24a2389d, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x100)) returned 1 [0095.277] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0095.277] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\messages.json.xuy")) returned 1 [0095.278] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0095.278] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi", lpFilePart=0x0) returned 0x81 [0095.278] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\", lpFilePart=0x0) returned 0x82 [0095.279] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d8090 [0095.279] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0095.279] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0095.279] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0095.280] FindClose (in: hFindFile=0x5d8090 | out: hFindFile=0x5d8090) returned 1 [0095.280] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0095.280] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0095.280] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0095.280] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi", lpFilePart=0x0) returned 0x81 [0095.280] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\", lpFilePart=0x0) returned 0x82 [0095.280] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7550 [0095.280] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0095.280] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0095.280] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0095.280] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0095.280] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0095.280] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0095.281] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\messages.json", lpFilePart=0x0) returned 0x8f [0095.281] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0095.281] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x2314348 | out: lpFileInformation=0x2314348*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74461ce1, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x74461c92, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x74d20b69, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xb7)) returned 1 [0095.281] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0095.281] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\messages.json", lpFilePart=0x0) returned 0x8f [0095.281] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0095.281] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0095.281] GetFileType (hFile=0x444) returned 0x1 [0095.281] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0095.281] GetFileType (hFile=0x444) returned 0x1 [0095.281] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xb7 [0095.281] ReadFile (in: hFile=0x444, lpBuffer=0x23147c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x23147c8*, lpNumberOfBytesRead=0x3be478*=0xb7, lpOverlapped=0x0) returned 1 [0095.282] CloseHandle (hObject=0x444) returned 1 [0095.320] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\messages.json", lpFilePart=0x0) returned 0x8f [0095.320] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0095.320] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0095.321] GetFileType (hFile=0x444) returned 0x1 [0095.321] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0095.321] GetFileType (hFile=0x444) returned 0x1 [0095.321] WriteFile (in: hFile=0x444, lpBuffer=0x218baa0*, nNumberOfBytesToWrite=0xc0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x218baa0*, lpNumberOfBytesWritten=0x3be388*=0xc0, lpOverlapped=0x0) returned 1 [0095.322] CloseHandle (hObject=0x444) returned 1 [0095.323] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\messages.json", lpFilePart=0x0) returned 0x8f [0095.323] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0095.323] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0095.323] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74461ce1, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x74461c92, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x24a961b5, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xc0)) returned 1 [0095.323] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0095.323] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\messages.json.xuy")) returned 1 [0095.336] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0095.336] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil", lpFilePart=0x0) returned 0x82 [0095.336] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\", lpFilePart=0x0) returned 0x83 [0095.336] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7670 [0095.339] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0095.339] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0095.339] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0095.339] FindClose (in: hFindFile=0x5d7670 | out: hFindFile=0x5d7670) returned 1 [0095.339] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0095.339] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0095.340] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0095.340] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil", lpFilePart=0x0) returned 0x82 [0095.340] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\", lpFilePart=0x0) returned 0x83 [0095.340] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d78b0 [0095.340] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0095.340] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0095.340] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0095.340] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0095.340] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0095.340] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0095.340] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\messages.json", lpFilePart=0x0) returned 0x90 [0095.340] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0095.341] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x218fc88 | out: lpFileInformation=0x218fc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74469213, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7446b8d2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x74d20b69, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xc7)) returned 1 [0095.341] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0095.341] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\messages.json", lpFilePart=0x0) returned 0x90 [0095.341] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0095.341] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0095.341] GetFileType (hFile=0x444) returned 0x1 [0095.341] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0095.341] GetFileType (hFile=0x444) returned 0x1 [0095.341] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xc7 [0095.341] ReadFile (in: hFile=0x444, lpBuffer=0x2190128, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x2190128*, lpNumberOfBytesRead=0x3be478*=0xc7, lpOverlapped=0x0) returned 1 [0095.343] CloseHandle (hObject=0x444) returned 1 [0095.357] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\messages.json", lpFilePart=0x0) returned 0x90 [0095.358] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0095.358] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0095.360] GetFileType (hFile=0x444) returned 0x1 [0095.360] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0095.360] GetFileType (hFile=0x444) returned 0x1 [0095.360] WriteFile (in: hFile=0x444, lpBuffer=0x2207458*, nNumberOfBytesToWrite=0xd0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x2207458*, lpNumberOfBytesWritten=0x3be388*=0xd0, lpOverlapped=0x0) returned 1 [0095.361] CloseHandle (hObject=0x444) returned 1 [0095.361] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\messages.json", lpFilePart=0x0) returned 0x90 [0095.361] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\messages.json.xuy", lpFilePart=0x0) returned 0x94 [0095.361] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0095.361] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74469213, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7446b8d2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x24b08872, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xd0)) returned 1 [0095.361] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0095.361] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\messages.json.xuy")) returned 1 [0095.362] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0095.362] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr", lpFilePart=0x0) returned 0x81 [0095.362] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\", lpFilePart=0x0) returned 0x82 [0095.362] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7550 [0095.362] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0095.363] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0095.363] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0095.363] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0095.363] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0095.363] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0095.363] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0095.363] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr", lpFilePart=0x0) returned 0x81 [0095.363] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\", lpFilePart=0x0) returned 0x82 [0095.363] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7d90 [0095.363] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0095.363] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0095.364] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0095.364] FindClose (in: hFindFile=0x5d7d90 | out: hFindFile=0x5d7d90) returned 1 [0095.364] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0095.364] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0095.364] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\messages.json", lpFilePart=0x0) returned 0x8f [0095.364] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0095.364] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x220b5c8 | out: lpFileInformation=0x220b5c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74477c7a, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x74477c22, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x74d2597f, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xbb)) returned 1 [0095.364] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0095.364] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\messages.json", lpFilePart=0x0) returned 0x8f [0095.364] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0095.364] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0095.364] GetFileType (hFile=0x444) returned 0x1 [0095.364] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0095.364] GetFileType (hFile=0x444) returned 0x1 [0095.364] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xbb [0095.364] ReadFile (in: hFile=0x444, lpBuffer=0x220ba50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x220ba50*, lpNumberOfBytesRead=0x3be478*=0xbb, lpOverlapped=0x0) returned 1 [0095.365] CloseHandle (hObject=0x444) returned 1 [0095.383] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\messages.json", lpFilePart=0x0) returned 0x8f [0095.383] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0095.383] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0095.384] GetFileType (hFile=0x444) returned 0x1 [0095.385] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0095.385] GetFileType (hFile=0x444) returned 0x1 [0095.385] WriteFile (in: hFile=0x444, lpBuffer=0x2282d50*, nNumberOfBytesToWrite=0xc0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x2282d50*, lpNumberOfBytesWritten=0x3be388*=0xc0, lpOverlapped=0x0) returned 1 [0095.386] CloseHandle (hObject=0x444) returned 1 [0095.386] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\messages.json", lpFilePart=0x0) returned 0x8f [0095.386] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0095.386] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0095.386] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74477c7a, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x74477c22, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x24b2ec4d, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xc0)) returned 1 [0095.386] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0095.386] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\messages.json.xuy")) returned 1 [0095.387] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0095.388] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA", lpFilePart=0x0) returned 0x84 [0095.388] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA\\", lpFilePart=0x0) returned 0x85 [0095.388] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d78b0 [0095.390] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0095.390] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0095.390] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0095.390] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0095.391] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0095.391] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0095.391] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0095.391] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA", lpFilePart=0x0) returned 0x84 [0095.391] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA\\", lpFilePart=0x0) returned 0x85 [0095.391] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7a90 [0095.391] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0095.391] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0095.392] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0095.392] FindClose (in: hFindFile=0x5d7a90 | out: hFindFile=0x5d7a90) returned 1 [0095.392] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0095.392] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0095.392] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA\\messages.json", lpFilePart=0x0) returned 0x92 [0095.392] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0095.392] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_ca\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x2286f78 | out: lpFileInformation=0x2286f78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744818b8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x74481862, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x74d2597f, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xd2)) returned 1 [0095.392] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0095.392] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA\\messages.json", lpFilePart=0x0) returned 0x92 [0095.392] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0095.392] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_ca\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0095.392] GetFileType (hFile=0x444) returned 0x1 [0095.392] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0095.393] GetFileType (hFile=0x444) returned 0x1 [0095.393] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xd2 [0095.393] ReadFile (in: hFile=0x444, lpBuffer=0x2287428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x2287428*, lpNumberOfBytesRead=0x3be478*=0xd2, lpOverlapped=0x0) returned 1 [0095.394] CloseHandle (hObject=0x444) returned 1 [0095.411] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA\\messages.json", lpFilePart=0x0) returned 0x92 [0095.411] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0095.411] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_ca\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0095.412] GetFileType (hFile=0x444) returned 0x1 [0095.412] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0095.412] GetFileType (hFile=0x444) returned 0x1 [0095.413] WriteFile (in: hFile=0x444, lpBuffer=0x22fe778*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x22fe778*, lpNumberOfBytesWritten=0x3be388*=0xe0, lpOverlapped=0x0) returned 1 [0095.413] CloseHandle (hObject=0x444) returned 1 [0095.414] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA\\messages.json", lpFilePart=0x0) returned 0x92 [0095.414] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA\\messages.json.xuy", lpFilePart=0x0) returned 0x96 [0095.414] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0095.414] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_ca\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744818b8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x74481862, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x24b7b3e9, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1 [0095.414] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0095.414] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_ca\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_ca\\messages.json.xuy")) returned 1 [0095.415] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0095.415] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl", lpFilePart=0x0) returned 0x81 [0095.415] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\", lpFilePart=0x0) returned 0x82 [0095.415] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7c70 [0095.415] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0095.415] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0095.416] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0095.416] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0095.416] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0095.416] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0095.416] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0095.416] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl", lpFilePart=0x0) returned 0x81 [0095.416] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\", lpFilePart=0x0) returned 0x82 [0095.416] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d81b0 [0095.416] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0095.416] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0095.416] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0095.417] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0095.417] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0095.417] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0095.417] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\messages.json", lpFilePart=0x0) returned 0x8f [0095.417] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0095.417] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x23028e8 | out: lpFileInformation=0x23028e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7448b500, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7448b4a2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0xac)) returned 1 [0095.417] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0095.417] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\messages.json", lpFilePart=0x0) returned 0x8f [0095.417] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0095.417] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0095.417] GetFileType (hFile=0x444) returned 0x1 [0095.417] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0095.417] GetFileType (hFile=0x444) returned 0x1 [0095.417] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xac [0095.417] ReadFile (in: hFile=0x444, lpBuffer=0x2302d60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x2302d60*, lpNumberOfBytesRead=0x3be478*=0xac, lpOverlapped=0x0) returned 1 [0095.420] CloseHandle (hObject=0x444) returned 1 [0095.460] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\messages.json", lpFilePart=0x0) returned 0x8f [0095.460] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0095.460] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0095.461] GetFileType (hFile=0x444) returned 0x1 [0095.461] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0095.461] GetFileType (hFile=0x444) returned 0x1 [0095.461] WriteFile (in: hFile=0x444, lpBuffer=0x217a038*, nNumberOfBytesToWrite=0xb0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x217a038*, lpNumberOfBytesWritten=0x3be388*=0xb0, lpOverlapped=0x0) returned 1 [0095.462] CloseHandle (hObject=0x444) returned 1 [0095.462] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\messages.json", lpFilePart=0x0) returned 0x8f [0095.462] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0095.462] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0095.462] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7448b500, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7448b4a2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x24bed5fc, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xb0)) returned 1 [0095.462] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0095.462] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\messages.json.xuy")) returned 1 [0095.463] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0095.463] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu", lpFilePart=0x0) returned 0x81 [0095.463] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\", lpFilePart=0x0) returned 0x82 [0095.463] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7370 [0095.468] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0095.468] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0095.468] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0095.468] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0095.468] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0095.468] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0095.468] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0095.468] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu", lpFilePart=0x0) returned 0x81 [0095.468] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\", lpFilePart=0x0) returned 0x82 [0095.468] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d75b0 [0095.469] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0095.469] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0095.469] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0095.469] FindClose (in: hFindFile=0x5d75b0 | out: hFindFile=0x5d75b0) returned 1 [0095.469] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0095.469] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0095.469] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\messages.json", lpFilePart=0x0) returned 0x8f [0095.469] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0095.469] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x217e190 | out: lpFileInformation=0x217e190*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74495141, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x744950e2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x74d2597f, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x11e)) returned 1 [0095.469] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0095.469] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\messages.json", lpFilePart=0x0) returned 0x8f [0095.469] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0095.470] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0095.470] GetFileType (hFile=0x444) returned 0x1 [0095.470] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0095.470] GetFileType (hFile=0x444) returned 0x1 [0095.470] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x11e [0095.470] ReadFile (in: hFile=0x444, lpBuffer=0x217e678, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x217e678*, lpNumberOfBytesRead=0x3be478*=0x11e, lpOverlapped=0x0) returned 1 [0095.471] CloseHandle (hObject=0x444) returned 1 [0095.481] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\messages.json", lpFilePart=0x0) returned 0x8f [0095.481] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0095.481] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0095.482] GetFileType (hFile=0x444) returned 0x1 [0095.482] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0095.482] GetFileType (hFile=0x444) returned 0x1 [0095.482] WriteFile (in: hFile=0x444, lpBuffer=0x21f5c80*, nNumberOfBytesToWrite=0x120, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x21f5c80*, lpNumberOfBytesWritten=0x3be388*=0x120, lpOverlapped=0x0) returned 1 [0095.483] CloseHandle (hObject=0x444) returned 1 [0095.483] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\messages.json", lpFilePart=0x0) returned 0x8f [0095.483] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0095.483] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0095.484] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74495141, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x744950e2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x24c3a182, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x120)) returned 1 [0095.484] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0095.484] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\messages.json.xuy")) returned 1 [0095.484] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0095.484] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi", lpFilePart=0x0) returned 0x81 [0095.485] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\", lpFilePart=0x0) returned 0x82 [0095.485] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d73d0 [0095.485] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0095.485] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0095.485] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0095.485] FindClose (in: hFindFile=0x5d73d0 | out: hFindFile=0x5d73d0) returned 1 [0095.485] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0095.485] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0095.485] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0095.485] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi", lpFilePart=0x0) returned 0x81 [0095.485] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\", lpFilePart=0x0) returned 0x82 [0095.486] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d79d0 [0095.486] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0095.486] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0095.486] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0095.486] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0095.486] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0095.486] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0095.486] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\messages.json", lpFilePart=0x0) returned 0x8f [0095.486] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0095.486] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x21f9dd8 | out: lpFileInformation=0x21f9dd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744a1492, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x744a1432, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x74d2597f, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x13e)) returned 1 [0095.489] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0095.489] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\messages.json", lpFilePart=0x0) returned 0x8f [0095.489] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0095.489] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0095.489] GetFileType (hFile=0x444) returned 0x1 [0095.489] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0095.489] GetFileType (hFile=0x444) returned 0x1 [0095.489] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x13e [0095.489] ReadFile (in: hFile=0x444, lpBuffer=0x21fa2e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x21fa2e0*, lpNumberOfBytesRead=0x3be478*=0x13e, lpOverlapped=0x0) returned 1 [0095.490] CloseHandle (hObject=0x444) returned 1 [0095.500] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\messages.json", lpFilePart=0x0) returned 0x8f [0095.500] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0095.500] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0095.502] GetFileType (hFile=0x444) returned 0x1 [0095.502] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0095.502] GetFileType (hFile=0x444) returned 0x1 [0095.502] WriteFile (in: hFile=0x444, lpBuffer=0x2271988*, nNumberOfBytesToWrite=0x140, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x2271988*, lpNumberOfBytesWritten=0x3be388*=0x140, lpOverlapped=0x0) returned 1 [0095.503] CloseHandle (hObject=0x444) returned 1 [0095.503] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\messages.json", lpFilePart=0x0) returned 0x8f [0095.503] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0095.503] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0095.503] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744a1492, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x744a1432, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x24c5fd14, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x140)) returned 1 [0095.503] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0095.503] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\messages.json.xuy")) returned 1 [0095.504] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0095.504] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr", lpFilePart=0x0) returned 0x81 [0095.504] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\", lpFilePart=0x0) returned 0x82 [0095.504] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d79d0 [0095.506] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0095.506] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0095.506] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0095.506] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0095.506] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0095.506] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0095.506] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0095.506] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr", lpFilePart=0x0) returned 0x81 [0095.506] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\", lpFilePart=0x0) returned 0x82 [0095.506] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7370 [0095.506] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0095.507] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0095.507] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0095.507] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0095.507] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0095.507] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0095.507] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\messages.json", lpFilePart=0x0) returned 0x8f [0095.507] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0095.507] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x2275ae0 | out: lpFileInformation=0x2275ae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744ad7e9, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x744ad782, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x74d2809e, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xc8)) returned 1 [0095.507] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0095.507] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\messages.json", lpFilePart=0x0) returned 0x8f [0095.507] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0095.507] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0095.507] GetFileType (hFile=0x444) returned 0x1 [0095.508] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0095.508] GetFileType (hFile=0x444) returned 0x1 [0095.508] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xc8 [0095.508] ReadFile (in: hFile=0x444, lpBuffer=0x2275f70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x2275f70*, lpNumberOfBytesRead=0x3be478*=0xc8, lpOverlapped=0x0) returned 1 [0095.509] CloseHandle (hObject=0x444) returned 1 [0095.520] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\messages.json", lpFilePart=0x0) returned 0x8f [0095.520] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0095.520] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0095.521] GetFileType (hFile=0x444) returned 0x1 [0095.521] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0095.521] GetFileType (hFile=0x444) returned 0x1 [0095.522] WriteFile (in: hFile=0x444, lpBuffer=0x22ed290*, nNumberOfBytesToWrite=0xd0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x22ed290*, lpNumberOfBytesWritten=0x3be388*=0xd0, lpOverlapped=0x0) returned 1 [0095.523] CloseHandle (hObject=0x444) returned 1 [0095.523] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\messages.json", lpFilePart=0x0) returned 0x8f [0095.523] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0095.523] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0095.523] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744ad7e9, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x744ad782, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x24c8620f, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xd0)) returned 1 [0095.523] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0095.523] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\messages.json.xuy")) returned 1 [0095.524] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0095.524] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu", lpFilePart=0x0) returned 0x81 [0095.524] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\", lpFilePart=0x0) returned 0x82 [0095.524] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d81b0 [0095.524] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0095.525] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0095.525] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0095.525] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0095.525] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0095.525] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0095.525] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0095.525] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu", lpFilePart=0x0) returned 0x81 [0095.525] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\", lpFilePart=0x0) returned 0x82 [0095.525] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d79d0 [0095.525] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0095.525] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0095.526] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0095.526] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0095.526] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0095.526] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0095.526] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\messages.json", lpFilePart=0x0) returned 0x8f [0095.526] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0095.526] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x22f13e8 | out: lpFileInformation=0x22f13e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744b742b, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x744b73c2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x74d2809e, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xc6)) returned 1 [0095.526] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0095.526] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\messages.json", lpFilePart=0x0) returned 0x8f [0095.526] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0095.526] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0095.527] GetFileType (hFile=0x444) returned 0x1 [0095.527] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0095.527] GetFileType (hFile=0x444) returned 0x1 [0095.527] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xc6 [0095.527] ReadFile (in: hFile=0x444, lpBuffer=0x22f1878, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x22f1878*, lpNumberOfBytesRead=0x3be478*=0xc6, lpOverlapped=0x0) returned 1 [0095.528] CloseHandle (hObject=0x444) returned 1 [0095.575] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\messages.json", lpFilePart=0x0) returned 0x8f [0095.575] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0095.575] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0095.582] GetFileType (hFile=0x444) returned 0x1 [0095.582] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0095.582] GetFileType (hFile=0x444) returned 0x1 [0095.582] WriteFile (in: hFile=0x444, lpBuffer=0x2168b98*, nNumberOfBytesToWrite=0xd0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x2168b98*, lpNumberOfBytesWritten=0x3be388*=0xd0, lpOverlapped=0x0) returned 1 [0095.583] CloseHandle (hObject=0x444) returned 1 [0095.583] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\messages.json", lpFilePart=0x0) returned 0x8f [0095.583] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0095.584] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0095.584] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744b742b, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x744b73c2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x24d1e83b, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xd0)) returned 1 [0095.584] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0095.584] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\messages.json.xuy")) returned 1 [0095.585] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0095.585] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy", lpFilePart=0x0) returned 0x81 [0095.585] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\", lpFilePart=0x0) returned 0x82 [0095.585] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7c70 [0095.585] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0095.585] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0095.585] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0095.585] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0095.585] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0095.585] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0095.586] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0095.586] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy", lpFilePart=0x0) returned 0x81 [0095.586] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\", lpFilePart=0x0) returned 0x82 [0095.586] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7af0 [0095.586] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0095.586] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0095.586] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0095.586] FindClose (in: hFindFile=0x5d7af0 | out: hFindFile=0x5d7af0) returned 1 [0095.586] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0095.586] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0095.587] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\messages.json", lpFilePart=0x0) returned 0x8f [0095.587] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0095.587] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x216ccf0 | out: lpFileInformation=0x216ccf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745203f7, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x74520372, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x299)) returned 1 [0095.587] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0095.587] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\messages.json", lpFilePart=0x0) returned 0x8f [0095.587] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0095.587] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0095.587] GetFileType (hFile=0x444) returned 0x1 [0095.587] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0095.587] GetFileType (hFile=0x444) returned 0x1 [0095.587] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x299 [0095.587] ReadFile (in: hFile=0x444, lpBuffer=0x216d358, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x216d358*, lpNumberOfBytesRead=0x3be478*=0x299, lpOverlapped=0x0) returned 1 [0095.591] CloseHandle (hObject=0x444) returned 1 [0095.604] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\messages.json", lpFilePart=0x0) returned 0x8f [0095.604] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0095.604] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0095.606] GetFileType (hFile=0x444) returned 0x1 [0095.606] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0095.606] GetFileType (hFile=0x444) returned 0x1 [0095.606] WriteFile (in: hFile=0x444, lpBuffer=0x21e50e0*, nNumberOfBytesToWrite=0x2a0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x21e50e0*, lpNumberOfBytesWritten=0x3be388*=0x2a0, lpOverlapped=0x0) returned 1 [0095.608] CloseHandle (hObject=0x444) returned 1 [0095.608] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\messages.json", lpFilePart=0x0) returned 0x8f [0095.608] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0095.608] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0095.608] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745203f7, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x74520372, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x24d6ad3a, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2a0)) returned 1 [0095.609] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0095.609] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\messages.json.xuy")) returned 1 [0095.610] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0095.610] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id", lpFilePart=0x0) returned 0x81 [0095.610] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\", lpFilePart=0x0) returned 0x82 [0095.610] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7e50 [0095.611] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0095.611] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0095.611] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0095.611] FindClose (in: hFindFile=0x5d7e50 | out: hFindFile=0x5d7e50) returned 1 [0095.611] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0095.611] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0095.611] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0095.611] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id", lpFilePart=0x0) returned 0x81 [0095.611] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\", lpFilePart=0x0) returned 0x82 [0095.612] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d78b0 [0095.612] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0095.612] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0095.612] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0095.612] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0095.612] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0095.612] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0095.612] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\messages.json", lpFilePart=0x0) returned 0x8f [0095.612] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0095.612] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x21e9238 | out: lpFileInformation=0x21e9238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7452a04e, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x74529fb2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x74d2809e, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xbb)) returned 1 [0095.613] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0095.613] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\messages.json", lpFilePart=0x0) returned 0x8f [0095.613] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0095.613] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0095.613] GetFileType (hFile=0x444) returned 0x1 [0095.613] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0095.613] GetFileType (hFile=0x444) returned 0x1 [0095.613] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xbb [0095.613] ReadFile (in: hFile=0x444, lpBuffer=0x21e96c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x21e96c0*, lpNumberOfBytesRead=0x3be478*=0xbb, lpOverlapped=0x0) returned 1 [0095.614] CloseHandle (hObject=0x444) returned 1 [0095.626] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\messages.json", lpFilePart=0x0) returned 0x8f [0095.626] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0095.626] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0095.627] GetFileType (hFile=0x444) returned 0x1 [0095.627] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0095.627] GetFileType (hFile=0x444) returned 0x1 [0095.627] WriteFile (in: hFile=0x444, lpBuffer=0x22609c0*, nNumberOfBytesToWrite=0xc0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x22609c0*, lpNumberOfBytesWritten=0x3be388*=0xc0, lpOverlapped=0x0) returned 1 [0095.628] CloseHandle (hObject=0x444) returned 1 [0095.628] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\messages.json", lpFilePart=0x0) returned 0x8f [0095.628] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0095.628] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0095.628] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7452a04e, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x74529fb2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x24d91311, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xc0)) returned 1 [0095.629] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0095.629] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\messages.json.xuy")) returned 1 [0095.630] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0095.630] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is", lpFilePart=0x0) returned 0x81 [0095.630] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\", lpFilePart=0x0) returned 0x82 [0095.630] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7a30 [0095.630] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0095.630] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0095.630] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0095.630] FindClose (in: hFindFile=0x5d7a30 | out: hFindFile=0x5d7a30) returned 1 [0095.631] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0095.631] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0095.631] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0095.631] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is", lpFilePart=0x0) returned 0x81 [0095.631] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\", lpFilePart=0x0) returned 0x82 [0095.631] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7cd0 [0095.631] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0095.631] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0095.631] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0095.631] FindClose (in: hFindFile=0x5d7cd0 | out: hFindFile=0x5d7cd0) returned 1 [0095.631] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0095.631] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0095.631] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\messages.json", lpFilePart=0x0) returned 0x8f [0095.631] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0095.632] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x2264b18 | out: lpFileInformation=0x2264b18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7453d8bb, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7453d832, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0xb2)) returned 1 [0095.632] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0095.632] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\messages.json", lpFilePart=0x0) returned 0x8f [0095.632] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0095.632] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0095.632] GetFileType (hFile=0x444) returned 0x1 [0095.632] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0095.632] GetFileType (hFile=0x444) returned 0x1 [0095.632] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xb2 [0095.632] ReadFile (in: hFile=0x444, lpBuffer=0x2264f98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x2264f98*, lpNumberOfBytesRead=0x3be478*=0xb2, lpOverlapped=0x0) returned 1 [0095.634] CloseHandle (hObject=0x444) returned 1 [0095.644] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\messages.json", lpFilePart=0x0) returned 0x8f [0095.644] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0095.645] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0095.646] GetFileType (hFile=0x444) returned 0x1 [0095.646] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0095.646] GetFileType (hFile=0x444) returned 0x1 [0095.646] WriteFile (in: hFile=0x444, lpBuffer=0x22dc2a0*, nNumberOfBytesToWrite=0xc0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x22dc2a0*, lpNumberOfBytesWritten=0x3be388*=0xc0, lpOverlapped=0x0) returned 1 [0095.647] CloseHandle (hObject=0x444) returned 1 [0095.647] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\messages.json", lpFilePart=0x0) returned 0x8f [0095.647] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0095.647] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0095.647] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7453d8bb, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7453d832, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x24db7117, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xc0)) returned 1 [0095.647] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0095.647] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\messages.json.xuy")) returned 1 [0095.648] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0095.648] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it", lpFilePart=0x0) returned 0x81 [0095.648] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\", lpFilePart=0x0) returned 0x82 [0095.648] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7c70 [0095.650] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0095.650] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0095.650] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0095.650] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0095.650] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0095.650] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0095.650] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0095.650] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it", lpFilePart=0x0) returned 0x81 [0095.650] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\", lpFilePart=0x0) returned 0x82 [0095.650] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7550 [0095.651] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0095.651] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0095.651] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0095.651] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0095.651] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0095.651] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0095.651] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\messages.json", lpFilePart=0x0) returned 0x8f [0095.651] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0095.651] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x22e03f8 | out: lpFileInformation=0x22e03f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745474fc, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x74547472, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x74d2809e, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xb6)) returned 1 [0095.651] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0095.651] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\messages.json", lpFilePart=0x0) returned 0x8f [0095.651] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0095.651] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0095.652] GetFileType (hFile=0x444) returned 0x1 [0095.652] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0095.652] GetFileType (hFile=0x444) returned 0x1 [0095.652] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xb6 [0095.652] ReadFile (in: hFile=0x444, lpBuffer=0x22e0878, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x22e0878*, lpNumberOfBytesRead=0x3be478*=0xb6, lpOverlapped=0x0) returned 1 [0095.653] CloseHandle (hObject=0x444) returned 1 [0095.663] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\messages.json", lpFilePart=0x0) returned 0x8f [0095.663] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0095.663] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0095.665] GetFileType (hFile=0x444) returned 0x1 [0095.665] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0095.665] GetFileType (hFile=0x444) returned 0x1 [0095.665] WriteFile (in: hFile=0x444, lpBuffer=0x2357b80*, nNumberOfBytesToWrite=0xc0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x2357b80*, lpNumberOfBytesWritten=0x3be388*=0xc0, lpOverlapped=0x0) returned 1 [0095.666] CloseHandle (hObject=0x444) returned 1 [0095.666] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\messages.json", lpFilePart=0x0) returned 0x8f [0095.666] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0095.666] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0095.666] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745474fc, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x74547472, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x24ddd3ee, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xc0)) returned 1 [0095.666] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0095.666] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\messages.json.xuy")) returned 1 [0095.667] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0095.667] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw", lpFilePart=0x0) returned 0x81 [0095.667] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\", lpFilePart=0x0) returned 0x82 [0095.667] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7550 [0095.667] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0095.667] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0095.668] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0095.668] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0095.668] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0095.668] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0095.668] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0095.668] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw", lpFilePart=0x0) returned 0x81 [0095.668] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\", lpFilePart=0x0) returned 0x82 [0095.668] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7610 [0095.668] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0095.668] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0095.668] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0095.669] FindClose (in: hFindFile=0x5d7610 | out: hFindFile=0x5d7610) returned 1 [0095.669] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0095.669] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0095.669] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\messages.json", lpFilePart=0x0) returned 0x8f [0095.669] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0095.669] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x235bcd8 | out: lpFileInformation=0x235bcd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74551141, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x745510b2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x16a)) returned 1 [0095.669] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0095.669] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\messages.json", lpFilePart=0x0) returned 0x8f [0095.669] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0095.669] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0095.669] GetFileType (hFile=0x444) returned 0x1 [0095.669] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0095.669] GetFileType (hFile=0x444) returned 0x1 [0095.669] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x16a [0095.669] ReadFile (in: hFile=0x444, lpBuffer=0x235c210, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x235c210*, lpNumberOfBytesRead=0x3be478*=0x16a, lpOverlapped=0x0) returned 1 [0095.671] CloseHandle (hObject=0x444) returned 1 [0095.713] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\messages.json", lpFilePart=0x0) returned 0x8f [0095.713] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0095.713] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0095.714] GetFileType (hFile=0x444) returned 0x1 [0095.714] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0095.714] GetFileType (hFile=0x444) returned 0x1 [0095.714] WriteFile (in: hFile=0x444, lpBuffer=0x21d3a58*, nNumberOfBytesToWrite=0x170, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x21d3a58*, lpNumberOfBytesWritten=0x3be388*=0x170, lpOverlapped=0x0) returned 1 [0095.715] CloseHandle (hObject=0x444) returned 1 [0095.715] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\messages.json", lpFilePart=0x0) returned 0x8f [0095.715] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0095.715] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0095.715] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74551141, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x745510b2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x24e4fb39, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x170)) returned 1 [0095.716] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0095.716] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\messages.json.xuy")) returned 1 [0095.717] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0095.717] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja", lpFilePart=0x0) returned 0x81 [0095.717] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\", lpFilePart=0x0) returned 0x82 [0095.718] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7af0 [0095.719] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0095.719] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0095.719] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0095.719] FindClose (in: hFindFile=0x5d7af0 | out: hFindFile=0x5d7af0) returned 1 [0095.719] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0095.719] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0095.719] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0095.719] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja", lpFilePart=0x0) returned 0x81 [0095.719] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\", lpFilePart=0x0) returned 0x82 [0095.719] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7fd0 [0095.720] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0095.720] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0095.720] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0095.720] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0095.720] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0095.720] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0095.720] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\messages.json", lpFilePart=0x0) returned 0x8f [0095.720] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0095.720] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x21d7bb0 | out: lpFileInformation=0x21d7bb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7455d492, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x74562222, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x74d2809e, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xfb)) returned 1 [0095.720] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0095.720] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\messages.json", lpFilePart=0x0) returned 0x8f [0095.720] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0095.720] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0095.721] GetFileType (hFile=0x444) returned 0x1 [0095.721] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0095.721] GetFileType (hFile=0x444) returned 0x1 [0095.721] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xfb [0095.721] ReadFile (in: hFile=0x444, lpBuffer=0x21d8078, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x21d8078*, lpNumberOfBytesRead=0x3be478*=0xfb, lpOverlapped=0x0) returned 1 [0095.722] CloseHandle (hObject=0x444) returned 1 [0095.732] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\messages.json", lpFilePart=0x0) returned 0x8f [0095.732] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0095.732] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0095.733] GetFileType (hFile=0x444) returned 0x1 [0095.733] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0095.733] GetFileType (hFile=0x444) returned 0x1 [0095.733] WriteFile (in: hFile=0x444, lpBuffer=0x224f3f8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x224f3f8*, lpNumberOfBytesWritten=0x3be388*=0x100, lpOverlapped=0x0) returned 1 [0095.734] CloseHandle (hObject=0x444) returned 1 [0095.735] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\messages.json", lpFilePart=0x0) returned 0x8f [0095.735] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0095.735] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0095.735] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7455d492, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x74562222, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x24e9bf97, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x100)) returned 1 [0095.735] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0095.735] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\messages.json.xuy")) returned 1 [0095.736] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0095.736] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka", lpFilePart=0x0) returned 0x81 [0095.736] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\", lpFilePart=0x0) returned 0x82 [0095.736] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d78b0 [0095.736] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0095.736] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0095.736] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0095.736] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0095.736] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0095.736] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0095.736] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0095.737] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka", lpFilePart=0x0) returned 0x81 [0095.737] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\", lpFilePart=0x0) returned 0x82 [0095.737] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d78b0 [0095.737] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0095.737] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0095.737] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0095.737] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0095.737] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0095.737] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0095.737] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\messages.json", lpFilePart=0x0) returned 0x8f [0095.737] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0095.737] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x2253550 | out: lpFileInformation=0x2253550*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7456bef8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7456be62, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x165)) returned 1 [0095.738] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0095.738] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\messages.json", lpFilePart=0x0) returned 0x8f [0095.738] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0095.738] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0095.738] GetFileType (hFile=0x444) returned 0x1 [0095.738] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0095.738] GetFileType (hFile=0x444) returned 0x1 [0095.738] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x165 [0095.738] ReadFile (in: hFile=0x444, lpBuffer=0x2253a80, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x2253a80*, lpNumberOfBytesRead=0x3be478*=0x165, lpOverlapped=0x0) returned 1 [0095.739] CloseHandle (hObject=0x444) returned 1 [0095.757] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\messages.json", lpFilePart=0x0) returned 0x8f [0095.757] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0095.757] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0095.759] GetFileType (hFile=0x444) returned 0x1 [0095.759] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0095.759] GetFileType (hFile=0x444) returned 0x1 [0095.759] WriteFile (in: hFile=0x444, lpBuffer=0x22cb220*, nNumberOfBytesToWrite=0x170, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x22cb220*, lpNumberOfBytesWritten=0x3be388*=0x170, lpOverlapped=0x0) returned 1 [0095.761] CloseHandle (hObject=0x444) returned 1 [0095.761] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\messages.json", lpFilePart=0x0) returned 0x8f [0095.761] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0095.761] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0095.761] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7456bef8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7456be62, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x24ec27cd, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x170)) returned 1 [0095.761] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0095.761] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\messages.json.xuy")) returned 1 [0095.762] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0095.762] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km", lpFilePart=0x0) returned 0x81 [0095.762] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\", lpFilePart=0x0) returned 0x82 [0095.762] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d81b0 [0095.764] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0095.764] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0095.765] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0095.765] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0095.765] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0095.765] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0095.765] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0095.765] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km", lpFilePart=0x0) returned 0x81 [0095.765] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\", lpFilePart=0x0) returned 0x82 [0095.765] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d8090 [0095.765] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0095.765] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0095.765] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0095.765] FindClose (in: hFindFile=0x5d8090 | out: hFindFile=0x5d8090) returned 1 [0095.766] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0095.766] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0095.766] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\messages.json", lpFilePart=0x0) returned 0x8f [0095.766] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0095.766] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x22cf378 | out: lpFileInformation=0x22cf378*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74575b3a, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x745781b2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x25f)) returned 1 [0095.766] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0095.766] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\messages.json", lpFilePart=0x0) returned 0x8f [0095.766] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0095.766] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0095.766] GetFileType (hFile=0x444) returned 0x1 [0095.766] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0095.766] GetFileType (hFile=0x444) returned 0x1 [0095.766] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x25f [0095.766] ReadFile (in: hFile=0x444, lpBuffer=0x22cf9a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x22cf9a0*, lpNumberOfBytesRead=0x3be478*=0x25f, lpOverlapped=0x0) returned 1 [0095.767] CloseHandle (hObject=0x444) returned 1 [0095.778] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\messages.json", lpFilePart=0x0) returned 0x8f [0095.779] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0095.779] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0095.780] GetFileType (hFile=0x444) returned 0x1 [0095.780] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0095.780] GetFileType (hFile=0x444) returned 0x1 [0095.780] WriteFile (in: hFile=0x444, lpBuffer=0x23475e8*, nNumberOfBytesToWrite=0x260, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x23475e8*, lpNumberOfBytesWritten=0x3be388*=0x260, lpOverlapped=0x0) returned 1 [0095.781] CloseHandle (hObject=0x444) returned 1 [0095.781] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\messages.json", lpFilePart=0x0) returned 0x8f [0095.781] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0095.781] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0095.781] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74575b3a, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x745781b2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x24f0e6f3, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x260)) returned 1 [0095.781] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0095.782] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\messages.json.xuy")) returned 1 [0095.782] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0095.782] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn", lpFilePart=0x0) returned 0x81 [0095.783] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\", lpFilePart=0x0) returned 0x82 [0095.783] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7370 [0095.783] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0095.783] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0095.783] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0095.783] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0095.783] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0095.783] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0095.783] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0095.783] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn", lpFilePart=0x0) returned 0x81 [0095.783] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\", lpFilePart=0x0) returned 0x82 [0095.783] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7670 [0095.784] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0095.784] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0095.784] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0095.784] FindClose (in: hFindFile=0x5d7670 | out: hFindFile=0x5d7670) returned 1 [0095.784] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0095.784] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0095.784] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\messages.json", lpFilePart=0x0) returned 0x8f [0095.784] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0095.784] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x234b740 | out: lpFileInformation=0x234b740*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7458bacc, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7458ba32, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x74d2a7ae, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x147)) returned 1 [0095.784] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0095.784] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\messages.json", lpFilePart=0x0) returned 0x8f [0095.784] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0095.784] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0095.784] GetFileType (hFile=0x444) returned 0x1 [0095.784] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0095.785] GetFileType (hFile=0x444) returned 0x1 [0095.785] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x147 [0095.785] ReadFile (in: hFile=0x444, lpBuffer=0x234bc50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x234bc50*, lpNumberOfBytesRead=0x3be478*=0x147, lpOverlapped=0x0) returned 1 [0095.785] CloseHandle (hObject=0x444) returned 1 [0095.825] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\messages.json", lpFilePart=0x0) returned 0x8f [0095.826] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0095.826] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0095.828] GetFileType (hFile=0x444) returned 0x1 [0095.828] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0095.828] GetFileType (hFile=0x444) returned 0x1 [0095.828] WriteFile (in: hFile=0x444, lpBuffer=0x21c32d8*, nNumberOfBytesToWrite=0x150, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x21c32d8*, lpNumberOfBytesWritten=0x3be388*=0x150, lpOverlapped=0x0) returned 1 [0095.828] CloseHandle (hObject=0x444) returned 1 [0095.829] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\messages.json", lpFilePart=0x0) returned 0x8f [0095.829] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0095.829] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0095.829] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7458bacc, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7458ba32, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x24f80f20, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x150)) returned 1 [0095.829] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0095.829] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\messages.json.xuy")) returned 1 [0095.830] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0095.830] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko", lpFilePart=0x0) returned 0x81 [0095.830] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\", lpFilePart=0x0) returned 0x82 [0095.830] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d79d0 [0095.832] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0095.832] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0095.832] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0095.832] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0095.833] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0095.833] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0095.833] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0095.833] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko", lpFilePart=0x0) returned 0x81 [0095.833] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\", lpFilePart=0x0) returned 0x82 [0095.833] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d78b0 [0095.833] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0095.833] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0095.833] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0095.833] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0095.833] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0095.833] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0095.833] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\messages.json", lpFilePart=0x0) returned 0x8f [0095.834] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0095.834] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x21c7430 | out: lpFileInformation=0x21c7430*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74597e23, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x74597d82, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x74d2a7ae, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xd9)) returned 1 [0095.834] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0095.834] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\messages.json", lpFilePart=0x0) returned 0x8f [0095.834] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0095.834] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0095.834] GetFileType (hFile=0x444) returned 0x1 [0095.834] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0095.834] GetFileType (hFile=0x444) returned 0x1 [0095.834] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xd9 [0095.834] ReadFile (in: hFile=0x444, lpBuffer=0x21c78d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x21c78d8*, lpNumberOfBytesRead=0x3be478*=0xd9, lpOverlapped=0x0) returned 1 [0095.835] CloseHandle (hObject=0x444) returned 1 [0095.855] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\messages.json", lpFilePart=0x0) returned 0x8f [0095.855] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0095.855] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0095.858] GetFileType (hFile=0x444) returned 0x1 [0095.858] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0095.858] GetFileType (hFile=0x444) returned 0x1 [0095.858] WriteFile (in: hFile=0x444, lpBuffer=0x223ec18*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x223ec18*, lpNumberOfBytesWritten=0x3be388*=0xe0, lpOverlapped=0x0) returned 1 [0095.860] CloseHandle (hObject=0x444) returned 1 [0095.860] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\messages.json", lpFilePart=0x0) returned 0x8f [0095.860] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0095.860] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0095.860] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74597e23, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x74597d82, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x24fce54a, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1 [0095.860] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0095.860] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\messages.json.xuy")) returned 1 [0095.862] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0095.862] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo", lpFilePart=0x0) returned 0x81 [0095.862] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\", lpFilePart=0x0) returned 0x82 [0095.862] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d81b0 [0095.863] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0095.863] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0095.863] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0095.863] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0095.863] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0095.863] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0095.863] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0095.863] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo", lpFilePart=0x0) returned 0x81 [0095.864] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\", lpFilePart=0x0) returned 0x82 [0095.864] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7550 [0095.864] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0095.864] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0095.864] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0095.864] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0095.865] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0095.865] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0095.865] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\messages.json", lpFilePart=0x0) returned 0x8f [0095.865] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0095.865] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x2242d70 | out: lpFileInformation=0x2242d70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745d9cda, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x745dc342, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x1c2)) returned 1 [0095.865] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0095.865] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\messages.json", lpFilePart=0x0) returned 0x8f [0095.865] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0095.865] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0095.866] GetFileType (hFile=0x444) returned 0x1 [0095.866] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0095.866] GetFileType (hFile=0x444) returned 0x1 [0095.866] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x1c2 [0095.866] ReadFile (in: hFile=0x444, lpBuffer=0x2243300, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x2243300*, lpNumberOfBytesRead=0x3be478*=0x1c2, lpOverlapped=0x0) returned 1 [0095.867] CloseHandle (hObject=0x444) returned 1 [0095.887] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\messages.json", lpFilePart=0x0) returned 0x8f [0095.887] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0095.887] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0095.890] GetFileType (hFile=0x444) returned 0x1 [0095.890] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0095.890] GetFileType (hFile=0x444) returned 0x1 [0095.890] WriteFile (in: hFile=0x444, lpBuffer=0x22bac80*, nNumberOfBytesToWrite=0x1d0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x22bac80*, lpNumberOfBytesWritten=0x3be388*=0x1d0, lpOverlapped=0x0) returned 1 [0095.891] CloseHandle (hObject=0x444) returned 1 [0095.892] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\messages.json", lpFilePart=0x0) returned 0x8f [0095.892] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0095.892] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0095.892] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745d9cda, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x745dc342, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x250198dd, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x1d0)) returned 1 [0095.892] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0095.892] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\messages.json.xuy")) returned 1 [0095.894] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0095.894] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt", lpFilePart=0x0) returned 0x81 [0095.894] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\", lpFilePart=0x0) returned 0x82 [0095.894] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7670 [0095.897] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0095.897] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0095.897] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0095.897] FindClose (in: hFindFile=0x5d7670 | out: hFindFile=0x5d7670) returned 1 [0095.897] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0095.897] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0095.897] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0095.897] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt", lpFilePart=0x0) returned 0x81 [0095.897] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\", lpFilePart=0x0) returned 0x82 [0095.898] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7c70 [0095.898] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0095.898] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0095.898] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0095.899] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0095.899] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0095.899] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0095.899] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\messages.json", lpFilePart=0x0) returned 0x8f [0095.899] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0095.899] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x22bedd8 | out: lpFileInformation=0x22bedd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74600dec, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7460a972, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x74d2a7ae, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xd5)) returned 1 [0095.899] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0095.899] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\messages.json", lpFilePart=0x0) returned 0x8f [0095.899] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0095.899] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0095.900] GetFileType (hFile=0x444) returned 0x1 [0095.900] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0095.900] GetFileType (hFile=0x444) returned 0x1 [0095.900] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xd5 [0095.900] ReadFile (in: hFile=0x444, lpBuffer=0x22bf278, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x22bf278*, lpNumberOfBytesRead=0x3be478*=0xd5, lpOverlapped=0x0) returned 1 [0095.901] CloseHandle (hObject=0x444) returned 1 [0095.926] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\messages.json", lpFilePart=0x0) returned 0x8f [0095.926] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0095.926] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0095.929] GetFileType (hFile=0x444) returned 0x1 [0095.929] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0095.929] GetFileType (hFile=0x444) returned 0x1 [0095.929] WriteFile (in: hFile=0x444, lpBuffer=0x23365c0*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x23365c0*, lpNumberOfBytesWritten=0x3be388*=0xe0, lpOverlapped=0x0) returned 1 [0095.930] CloseHandle (hObject=0x444) returned 1 [0095.931] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\messages.json", lpFilePart=0x0) returned 0x8f [0095.931] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0095.931] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0095.931] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74600dec, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7460a972, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2506d436, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1 [0095.931] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0095.931] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\messages.json.xuy")) returned 1 [0095.933] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0095.933] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv", lpFilePart=0x0) returned 0x81 [0095.933] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\", lpFilePart=0x0) returned 0x82 [0095.933] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d81b0 [0095.934] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0095.934] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0095.934] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0095.934] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0095.937] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0095.937] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0095.937] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0095.937] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv", lpFilePart=0x0) returned 0x81 [0095.937] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\", lpFilePart=0x0) returned 0x82 [0095.937] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7610 [0095.937] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0095.938] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0095.938] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0095.938] FindClose (in: hFindFile=0x5d7610 | out: hFindFile=0x5d7610) returned 1 [0095.938] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0095.938] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0095.938] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\messages.json", lpFilePart=0x0) returned 0x8f [0095.938] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0095.939] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x233a718 | out: lpFileInformation=0x233a718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74616d8e, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x74616cc2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x74d2a7ae, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xc6)) returned 1 [0095.939] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0095.939] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\messages.json", lpFilePart=0x0) returned 0x8f [0095.939] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0095.939] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0095.939] GetFileType (hFile=0x444) returned 0x1 [0095.939] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0095.940] GetFileType (hFile=0x444) returned 0x1 [0095.940] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xc6 [0095.940] ReadFile (in: hFile=0x444, lpBuffer=0x233aba8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x233aba8*, lpNumberOfBytesRead=0x3be478*=0xc6, lpOverlapped=0x0) returned 1 [0095.941] CloseHandle (hObject=0x444) returned 1 [0096.071] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\messages.json", lpFilePart=0x0) returned 0x8f [0096.071] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0096.071] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0096.073] GetFileType (hFile=0x444) returned 0x1 [0096.073] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0096.073] GetFileType (hFile=0x444) returned 0x1 [0096.073] WriteFile (in: hFile=0x444, lpBuffer=0x21b1e30*, nNumberOfBytesToWrite=0xd0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x21b1e30*, lpNumberOfBytesWritten=0x3be388*=0xd0, lpOverlapped=0x0) returned 1 [0096.074] CloseHandle (hObject=0x444) returned 1 [0096.074] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\messages.json", lpFilePart=0x0) returned 0x8f [0096.074] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0096.074] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0096.074] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74616d8e, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x74616cc2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x251bd26e, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xd0)) returned 1 [0096.075] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0096.075] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\messages.json.xuy")) returned 1 [0096.076] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0096.076] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml", lpFilePart=0x0) returned 0x81 [0096.076] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\", lpFilePart=0x0) returned 0x82 [0096.076] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7af0 [0096.078] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0096.078] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0096.078] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0096.078] FindClose (in: hFindFile=0x5d7af0 | out: hFindFile=0x5d7af0) returned 1 [0096.078] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0096.078] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0096.078] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0096.079] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml", lpFilePart=0x0) returned 0x81 [0096.079] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\", lpFilePart=0x0) returned 0x82 [0096.079] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d75b0 [0096.079] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0096.079] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0096.079] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0096.079] FindClose (in: hFindFile=0x5d75b0 | out: hFindFile=0x5d75b0) returned 1 [0096.079] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0096.079] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0096.079] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\messages.json", lpFilePart=0x0) returned 0x8f [0096.079] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0096.079] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x21b5f88 | out: lpFileInformation=0x21b5f88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7467af2c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7467d562, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x74d2a7ae, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x183)) returned 1 [0096.080] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0096.080] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\messages.json", lpFilePart=0x0) returned 0x8f [0096.080] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0096.080] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0096.080] GetFileType (hFile=0x444) returned 0x1 [0096.080] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0096.080] GetFileType (hFile=0x444) returned 0x1 [0096.080] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x183 [0096.080] ReadFile (in: hFile=0x444, lpBuffer=0x21b64d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x21b64d8*, lpNumberOfBytesRead=0x3be478*=0x183, lpOverlapped=0x0) returned 1 [0096.251] CloseHandle (hObject=0x444) returned 1 [0096.265] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\messages.json", lpFilePart=0x0) returned 0x8f [0096.265] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0096.265] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0096.267] GetFileType (hFile=0x444) returned 0x1 [0096.267] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0096.267] GetFileType (hFile=0x444) returned 0x1 [0096.267] WriteFile (in: hFile=0x444, lpBuffer=0x222dd18*, nNumberOfBytesToWrite=0x190, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x222dd18*, lpNumberOfBytesWritten=0x3be388*=0x190, lpOverlapped=0x0) returned 1 [0096.268] CloseHandle (hObject=0x444) returned 1 [0096.268] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\messages.json", lpFilePart=0x0) returned 0x8f [0096.268] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0096.268] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0096.269] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7467af2c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7467d562, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x253ad134, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x190)) returned 1 [0096.269] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0096.269] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\messages.json.xuy")) returned 1 [0096.270] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0096.270] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn", lpFilePart=0x0) returned 0x81 [0096.270] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\", lpFilePart=0x0) returned 0x82 [0096.270] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7550 [0096.270] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0096.270] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0096.271] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0096.271] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0096.271] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0096.271] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0096.271] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0096.271] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn", lpFilePart=0x0) returned 0x81 [0096.271] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\", lpFilePart=0x0) returned 0x82 [0096.271] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7370 [0096.271] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0096.271] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0096.271] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0096.271] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0096.272] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0096.272] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0096.272] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\messages.json", lpFilePart=0x0) returned 0x8f [0096.272] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0096.272] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x2231e70 | out: lpFileInformation=0x2231e70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x746b0a98, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x746b09b2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x1c3)) returned 1 [0096.272] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0096.272] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\messages.json", lpFilePart=0x0) returned 0x8f [0096.272] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0096.272] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0096.272] GetFileType (hFile=0x444) returned 0x1 [0096.272] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0096.272] GetFileType (hFile=0x444) returned 0x1 [0096.272] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x1c3 [0096.272] ReadFile (in: hFile=0x444, lpBuffer=0x2232400, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x2232400*, lpNumberOfBytesRead=0x3be478*=0x1c3, lpOverlapped=0x0) returned 1 [0096.273] CloseHandle (hObject=0x444) returned 1 [0096.284] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\messages.json", lpFilePart=0x0) returned 0x8f [0096.284] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0096.284] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0096.285] GetFileType (hFile=0x444) returned 0x1 [0096.285] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0096.285] GetFileType (hFile=0x444) returned 0x1 [0096.285] WriteFile (in: hFile=0x444, lpBuffer=0x22a9d80*, nNumberOfBytesToWrite=0x1d0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x22a9d80*, lpNumberOfBytesWritten=0x3be388*=0x1d0, lpOverlapped=0x0) returned 1 [0096.286] CloseHandle (hObject=0x444) returned 1 [0096.286] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\messages.json", lpFilePart=0x0) returned 0x8f [0096.286] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0096.286] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0096.286] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x746b0a98, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x746b09b2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x253d336e, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x1d0)) returned 1 [0096.286] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0096.286] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\messages.json.xuy")) returned 1 [0096.287] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0096.287] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr", lpFilePart=0x0) returned 0x81 [0096.287] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\", lpFilePart=0x0) returned 0x82 [0096.287] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7cd0 [0096.289] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0096.289] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0096.289] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0096.289] FindClose (in: hFindFile=0x5d7cd0 | out: hFindFile=0x5d7cd0) returned 1 [0096.289] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0096.289] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0096.289] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0096.289] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr", lpFilePart=0x0) returned 0x81 [0096.289] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\", lpFilePart=0x0) returned 0x82 [0096.289] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d8090 [0096.290] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0096.290] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0096.290] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0096.290] FindClose (in: hFindFile=0x5d8090 | out: hFindFile=0x5d8090) returned 1 [0096.290] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0096.290] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0096.290] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\messages.json", lpFilePart=0x0) returned 0x8f [0096.290] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0096.290] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x22aded8 | out: lpFileInformation=0x22aded8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x746cb850, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x746d0582, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x74d2cebd, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x12c)) returned 1 [0096.290] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0096.290] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\messages.json", lpFilePart=0x0) returned 0x8f [0096.290] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0096.290] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0096.291] GetFileType (hFile=0x444) returned 0x1 [0096.291] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0096.291] GetFileType (hFile=0x444) returned 0x1 [0096.291] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x12c [0096.291] ReadFile (in: hFile=0x444, lpBuffer=0x22ae3d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x22ae3d0*, lpNumberOfBytesRead=0x3be478*=0x12c, lpOverlapped=0x0) returned 1 [0096.292] CloseHandle (hObject=0x444) returned 1 [0096.302] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\messages.json", lpFilePart=0x0) returned 0x8f [0096.302] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0096.302] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0096.303] GetFileType (hFile=0x444) returned 0x1 [0096.304] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0096.304] GetFileType (hFile=0x444) returned 0x1 [0096.304] WriteFile (in: hFile=0x444, lpBuffer=0x2325a28*, nNumberOfBytesToWrite=0x130, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x2325a28*, lpNumberOfBytesWritten=0x3be388*=0x130, lpOverlapped=0x0) returned 1 [0096.304] CloseHandle (hObject=0x444) returned 1 [0096.304] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\messages.json", lpFilePart=0x0) returned 0x8f [0096.305] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0096.305] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0096.305] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x746cb850, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x746d0582, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x253f97d2, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x130)) returned 1 [0096.305] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0096.305] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\messages.json.xuy")) returned 1 [0096.306] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0096.306] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms", lpFilePart=0x0) returned 0x81 [0096.306] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\", lpFilePart=0x0) returned 0x82 [0096.306] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7c70 [0096.306] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0096.306] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0096.306] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0096.306] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0096.306] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0096.306] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0096.306] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0096.306] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms", lpFilePart=0x0) returned 0x81 [0096.307] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\", lpFilePart=0x0) returned 0x82 [0096.307] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d81b0 [0096.307] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0096.307] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0096.307] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0096.307] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0096.307] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0096.307] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0096.307] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\messages.json", lpFilePart=0x0) returned 0x8f [0096.307] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0096.307] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x2329b80 | out: lpFileInformation=0x2329b80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x746df0c9, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x746defe2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x74d2cebd, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xcb)) returned 1 [0096.307] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0096.308] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\messages.json", lpFilePart=0x0) returned 0x8f [0096.308] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0096.308] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0096.308] GetFileType (hFile=0x444) returned 0x1 [0096.308] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0096.308] GetFileType (hFile=0x444) returned 0x1 [0096.308] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xcb [0096.308] ReadFile (in: hFile=0x444, lpBuffer=0x232a018, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x232a018*, lpNumberOfBytesRead=0x3be478*=0xcb, lpOverlapped=0x0) returned 1 [0096.309] CloseHandle (hObject=0x444) returned 1 [0096.350] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\messages.json", lpFilePart=0x0) returned 0x8f [0096.350] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0096.350] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0096.351] GetFileType (hFile=0x444) returned 0x1 [0096.351] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0096.351] GetFileType (hFile=0x444) returned 0x1 [0096.351] WriteFile (in: hFile=0x444, lpBuffer=0x21a1330*, nNumberOfBytesToWrite=0xd0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x21a1330*, lpNumberOfBytesWritten=0x3be388*=0xd0, lpOverlapped=0x0) returned 1 [0096.352] CloseHandle (hObject=0x444) returned 1 [0096.352] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\messages.json", lpFilePart=0x0) returned 0x8f [0096.352] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0096.352] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0096.352] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x746df0c9, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x746defe2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2546bce3, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xd0)) returned 1 [0096.353] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0096.353] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\messages.json.xuy")) returned 1 [0096.353] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0096.353] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne", lpFilePart=0x0) returned 0x81 [0096.354] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\", lpFilePart=0x0) returned 0x82 [0096.354] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d78b0 [0096.355] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0096.355] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0096.355] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0096.355] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0096.355] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0096.355] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0096.355] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0096.355] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne", lpFilePart=0x0) returned 0x81 [0096.355] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\", lpFilePart=0x0) returned 0x82 [0096.355] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7550 [0096.356] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0096.356] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0096.356] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0096.356] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0096.356] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0096.356] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0096.356] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\messages.json", lpFilePart=0x0) returned 0x8f [0096.356] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0096.356] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x21a5488 | out: lpFileInformation=0x21a5488*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x746f5068, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x746f4f72, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x20b)) returned 1 [0096.356] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0096.356] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\messages.json", lpFilePart=0x0) returned 0x8f [0096.356] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0096.356] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0096.357] GetFileType (hFile=0x444) returned 0x1 [0096.357] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0096.357] GetFileType (hFile=0x444) returned 0x1 [0096.357] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x20b [0096.357] ReadFile (in: hFile=0x444, lpBuffer=0x21a5a60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x21a5a60*, lpNumberOfBytesRead=0x3be478*=0x20b, lpOverlapped=0x0) returned 1 [0096.358] CloseHandle (hObject=0x444) returned 1 [0096.368] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\messages.json", lpFilePart=0x0) returned 0x8f [0096.368] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0096.368] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0096.369] GetFileType (hFile=0x444) returned 0x1 [0096.369] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0096.369] GetFileType (hFile=0x444) returned 0x1 [0096.369] WriteFile (in: hFile=0x444, lpBuffer=0x221d518*, nNumberOfBytesToWrite=0x210, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x221d518*, lpNumberOfBytesWritten=0x3be388*=0x210, lpOverlapped=0x0) returned 1 [0096.370] CloseHandle (hObject=0x444) returned 1 [0096.370] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\messages.json", lpFilePart=0x0) returned 0x8f [0096.370] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0096.370] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0096.370] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x746f5068, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x746f4f72, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x25491cb7, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x210)) returned 1 [0096.371] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0096.371] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\messages.json.xuy")) returned 1 [0096.371] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0096.371] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl", lpFilePart=0x0) returned 0x81 [0096.372] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\", lpFilePart=0x0) returned 0x82 [0096.372] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7d90 [0096.372] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0096.372] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0096.372] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0096.372] FindClose (in: hFindFile=0x5d7d90 | out: hFindFile=0x5d7d90) returned 1 [0096.372] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0096.372] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0096.372] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0096.372] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl", lpFilePart=0x0) returned 0x81 [0096.372] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\", lpFilePart=0x0) returned 0x82 [0096.372] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7af0 [0096.375] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0096.375] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0096.375] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0096.375] FindClose (in: hFindFile=0x5d7af0 | out: hFindFile=0x5d7af0) returned 1 [0096.375] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0096.375] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0096.375] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\messages.json", lpFilePart=0x0) returned 0x8f [0096.375] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0096.375] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x2221670 | out: lpFileInformation=0x2221670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74703ace, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x747060e2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x74d2cebd, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xb1)) returned 1 [0096.376] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0096.376] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\messages.json", lpFilePart=0x0) returned 0x8f [0096.376] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0096.376] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0096.376] GetFileType (hFile=0x444) returned 0x1 [0096.376] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0096.376] GetFileType (hFile=0x444) returned 0x1 [0096.376] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xb1 [0096.376] ReadFile (in: hFile=0x444, lpBuffer=0x2221af0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x2221af0*, lpNumberOfBytesRead=0x3be478*=0xb1, lpOverlapped=0x0) returned 1 [0096.377] CloseHandle (hObject=0x444) returned 1 [0096.387] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\messages.json", lpFilePart=0x0) returned 0x8f [0096.387] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0096.387] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0096.389] GetFileType (hFile=0x444) returned 0x1 [0096.389] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0096.389] GetFileType (hFile=0x444) returned 0x1 [0096.389] WriteFile (in: hFile=0x444, lpBuffer=0x2298df8*, nNumberOfBytesToWrite=0xc0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x2298df8*, lpNumberOfBytesWritten=0x3be388*=0xc0, lpOverlapped=0x0) returned 1 [0096.390] CloseHandle (hObject=0x444) returned 1 [0096.390] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\messages.json", lpFilePart=0x0) returned 0x8f [0096.390] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0096.390] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0096.390] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74703ace, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x747060e2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x254dea54, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xc0)) returned 1 [0096.390] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0096.390] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\messages.json.xuy")) returned 1 [0096.391] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0096.391] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no", lpFilePart=0x0) returned 0x81 [0096.391] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\", lpFilePart=0x0) returned 0x82 [0096.391] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7a90 [0096.393] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0096.393] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0096.393] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0096.393] FindClose (in: hFindFile=0x5d7a90 | out: hFindFile=0x5d7a90) returned 1 [0096.393] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0096.393] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0096.393] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0096.393] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no", lpFilePart=0x0) returned 0x81 [0096.393] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\", lpFilePart=0x0) returned 0x82 [0096.393] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d73d0 [0096.393] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0096.394] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0096.394] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0096.394] FindClose (in: hFindFile=0x5d73d0 | out: hFindFile=0x5d73d0) returned 1 [0096.394] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0096.394] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0096.394] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\messages.json", lpFilePart=0x0) returned 0x8f [0096.394] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0096.394] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x229cf50 | out: lpFileInformation=0x229cf50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74717354, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x74719962, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x96)) returned 1 [0096.394] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0096.394] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\messages.json", lpFilePart=0x0) returned 0x8f [0096.394] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0096.394] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0096.394] GetFileType (hFile=0x444) returned 0x1 [0096.394] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0096.394] GetFileType (hFile=0x444) returned 0x1 [0096.394] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x96 [0096.394] ReadFile (in: hFile=0x444, lpBuffer=0x229d3b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x229d3b0*, lpNumberOfBytesRead=0x3be478*=0x96, lpOverlapped=0x0) returned 1 [0096.395] CloseHandle (hObject=0x444) returned 1 [0096.406] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\messages.json", lpFilePart=0x0) returned 0x8f [0096.406] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0096.407] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0096.408] GetFileType (hFile=0x444) returned 0x1 [0096.408] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0096.408] GetFileType (hFile=0x444) returned 0x1 [0096.408] WriteFile (in: hFile=0x444, lpBuffer=0x2314678*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x2314678*, lpNumberOfBytesWritten=0x3be388*=0xa0, lpOverlapped=0x0) returned 1 [0096.409] CloseHandle (hObject=0x444) returned 1 [0096.409] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\messages.json", lpFilePart=0x0) returned 0x8f [0096.409] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0096.409] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0096.409] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74717354, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x74719962, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x255045f5, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xa0)) returned 1 [0096.410] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0096.410] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\messages.json.xuy")) returned 1 [0096.410] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0096.410] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl", lpFilePart=0x0) returned 0x81 [0096.410] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\", lpFilePart=0x0) returned 0x82 [0096.411] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d81b0 [0096.411] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0096.411] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0096.411] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0096.411] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0096.411] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0096.411] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0096.411] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0096.411] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl", lpFilePart=0x0) returned 0x81 [0096.411] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\", lpFilePart=0x0) returned 0x82 [0096.411] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7370 [0096.411] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0096.412] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0096.412] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0096.412] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0096.412] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0096.412] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0096.412] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\messages.json", lpFilePart=0x0) returned 0x8f [0096.412] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0096.412] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x23187d0 | out: lpFileInformation=0x23187d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x747284c4, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x747283c2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x74d2cebd, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xb4)) returned 1 [0096.412] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0096.412] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\messages.json", lpFilePart=0x0) returned 0x8f [0096.412] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0096.412] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0096.412] GetFileType (hFile=0x444) returned 0x1 [0096.412] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0096.412] GetFileType (hFile=0x444) returned 0x1 [0096.412] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xb4 [0096.413] ReadFile (in: hFile=0x444, lpBuffer=0x2318c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x2318c50*, lpNumberOfBytesRead=0x3be478*=0xb4, lpOverlapped=0x0) returned 1 [0096.414] CloseHandle (hObject=0x444) returned 1 [0096.462] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\messages.json", lpFilePart=0x0) returned 0x8f [0096.462] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0096.463] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0096.464] GetFileType (hFile=0x444) returned 0x1 [0096.464] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0096.464] GetFileType (hFile=0x444) returned 0x1 [0096.464] WriteFile (in: hFile=0x444, lpBuffer=0x218ff30*, nNumberOfBytesToWrite=0xc0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x218ff30*, lpNumberOfBytesWritten=0x3be388*=0xc0, lpOverlapped=0x0) returned 1 [0096.465] CloseHandle (hObject=0x444) returned 1 [0096.465] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\messages.json", lpFilePart=0x0) returned 0x8f [0096.466] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0096.466] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0096.466] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x747284c4, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x747283c2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x25576f39, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xc0)) returned 1 [0096.466] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0096.466] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\messages.json.xuy")) returned 1 [0096.467] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0096.467] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR", lpFilePart=0x0) returned 0x84 [0096.467] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR\\", lpFilePart=0x0) returned 0x85 [0096.467] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7eb0 [0096.469] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0096.470] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0096.470] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0096.470] FindClose (in: hFindFile=0x5d7eb0 | out: hFindFile=0x5d7eb0) returned 1 [0096.470] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0096.470] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0096.470] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0096.470] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR", lpFilePart=0x0) returned 0x84 [0096.470] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR\\", lpFilePart=0x0) returned 0x85 [0096.470] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7cd0 [0096.470] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0096.470] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0096.471] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0096.471] FindClose (in: hFindFile=0x5d7cd0 | out: hFindFile=0x5d7cd0) returned 1 [0096.471] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0096.471] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0096.471] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR\\messages.json", lpFilePart=0x0) returned 0x92 [0096.471] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0096.471] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_br\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x2194158 | out: lpFileInformation=0x2194158*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7474a7ab, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7474a6a2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x74d2cebd, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xbb)) returned 1 [0096.471] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0096.471] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR\\messages.json", lpFilePart=0x0) returned 0x92 [0096.471] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0096.471] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_br\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0096.471] GetFileType (hFile=0x444) returned 0x1 [0096.471] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0096.471] GetFileType (hFile=0x444) returned 0x1 [0096.471] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xbb [0096.471] ReadFile (in: hFile=0x444, lpBuffer=0x21945f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x21945f0*, lpNumberOfBytesRead=0x3be478*=0xbb, lpOverlapped=0x0) returned 1 [0096.472] CloseHandle (hObject=0x444) returned 1 [0096.483] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR\\messages.json", lpFilePart=0x0) returned 0x92 [0096.483] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0096.483] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_br\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0096.485] GetFileType (hFile=0x444) returned 0x1 [0096.485] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0096.485] GetFileType (hFile=0x444) returned 0x1 [0096.485] WriteFile (in: hFile=0x444, lpBuffer=0x220b8f8*, nNumberOfBytesToWrite=0xc0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x220b8f8*, lpNumberOfBytesWritten=0x3be388*=0xc0, lpOverlapped=0x0) returned 1 [0096.486] CloseHandle (hObject=0x444) returned 1 [0096.486] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR\\messages.json", lpFilePart=0x0) returned 0x92 [0096.486] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR\\messages.json.xuy", lpFilePart=0x0) returned 0x96 [0096.486] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0096.486] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_br\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7474a7ab, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7474a6a2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x255c30c6, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xc0)) returned 1 [0096.486] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0096.486] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_br\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_br\\messages.json.xuy")) returned 1 [0096.490] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0096.490] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT", lpFilePart=0x0) returned 0x84 [0096.490] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT\\", lpFilePart=0x0) returned 0x85 [0096.490] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7c70 [0096.490] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0096.490] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0096.491] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0096.491] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0096.491] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0096.491] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0096.491] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0096.491] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT", lpFilePart=0x0) returned 0x84 [0096.491] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT\\", lpFilePart=0x0) returned 0x85 [0096.491] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7370 [0096.491] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0096.491] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0096.491] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0096.491] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0096.492] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0096.492] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0096.492] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT\\messages.json", lpFilePart=0x0) returned 0x92 [0096.492] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0096.492] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_pt\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x220fb38 | out: lpFileInformation=0x220fb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7476072e, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x74762d42, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x74d2f5c0, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xc6)) returned 1 [0096.492] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0096.492] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT\\messages.json", lpFilePart=0x0) returned 0x92 [0096.492] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0096.492] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_pt\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0096.492] GetFileType (hFile=0x444) returned 0x1 [0096.492] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0096.492] GetFileType (hFile=0x444) returned 0x1 [0096.492] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xc6 [0096.492] ReadFile (in: hFile=0x444, lpBuffer=0x220ffd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x220ffd8*, lpNumberOfBytesRead=0x3be478*=0xc6, lpOverlapped=0x0) returned 1 [0096.495] CloseHandle (hObject=0x444) returned 1 [0096.507] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT\\messages.json", lpFilePart=0x0) returned 0x92 [0096.507] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0096.507] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_pt\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0096.508] GetFileType (hFile=0x444) returned 0x1 [0096.508] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0096.508] GetFileType (hFile=0x444) returned 0x1 [0096.508] WriteFile (in: hFile=0x444, lpBuffer=0x2287308*, nNumberOfBytesToWrite=0xd0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x2287308*, lpNumberOfBytesWritten=0x3be388*=0xd0, lpOverlapped=0x0) returned 1 [0096.509] CloseHandle (hObject=0x444) returned 1 [0096.509] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT\\messages.json", lpFilePart=0x0) returned 0x92 [0096.509] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT\\messages.json.xuy", lpFilePart=0x0) returned 0x96 [0096.509] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0096.509] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_pt\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7476072e, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x74762d42, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x255e92c6, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xd0)) returned 1 [0096.509] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0096.509] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_pt\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_pt\\messages.json.xuy")) returned 1 [0096.510] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0096.510] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro", lpFilePart=0x0) returned 0x81 [0096.510] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\", lpFilePart=0x0) returned 0x82 [0096.510] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7d30 [0096.517] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0096.517] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0096.517] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0096.517] FindClose (in: hFindFile=0x5d7d30 | out: hFindFile=0x5d7d30) returned 1 [0096.517] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0096.517] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0096.517] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0096.517] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro", lpFilePart=0x0) returned 0x81 [0096.517] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\", lpFilePart=0x0) returned 0x82 [0096.517] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d78b0 [0096.517] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0096.518] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0096.518] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0096.518] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0096.518] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0096.518] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0096.518] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\messages.json", lpFilePart=0x0) returned 0x8f [0096.518] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0096.518] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x228b478 | out: lpFileInformation=0x228b478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7476f1c0, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7476f092, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x74d2f5c0, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xaf)) returned 1 [0096.518] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0096.518] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\messages.json", lpFilePart=0x0) returned 0x8f [0096.518] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0096.518] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0096.518] GetFileType (hFile=0x444) returned 0x1 [0096.518] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0096.518] GetFileType (hFile=0x444) returned 0x1 [0096.518] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xaf [0096.519] ReadFile (in: hFile=0x444, lpBuffer=0x228b8f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x228b8f0*, lpNumberOfBytesRead=0x3be478*=0xaf, lpOverlapped=0x0) returned 1 [0096.519] CloseHandle (hObject=0x444) returned 1 [0096.530] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\messages.json", lpFilePart=0x0) returned 0x8f [0096.530] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0096.530] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0096.531] GetFileType (hFile=0x444) returned 0x1 [0096.531] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0096.531] GetFileType (hFile=0x444) returned 0x1 [0096.531] WriteFile (in: hFile=0x444, lpBuffer=0x2302bd0*, nNumberOfBytesToWrite=0xb0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x2302bd0*, lpNumberOfBytesWritten=0x3be388*=0xb0, lpOverlapped=0x0) returned 1 [0096.532] CloseHandle (hObject=0x444) returned 1 [0096.532] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\messages.json", lpFilePart=0x0) returned 0x8f [0096.532] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0096.532] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0096.532] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7476f1c0, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7476f092, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2563581f, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xb0)) returned 1 [0096.532] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0096.532] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\messages.json.xuy")) returned 1 [0096.533] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0096.533] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru", lpFilePart=0x0) returned 0x81 [0096.533] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\", lpFilePart=0x0) returned 0x82 [0096.533] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7a30 [0096.534] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0096.534] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0096.534] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0096.534] FindClose (in: hFindFile=0x5d7a30 | out: hFindFile=0x5d7a30) returned 1 [0096.534] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0096.534] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0096.534] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0096.534] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru", lpFilePart=0x0) returned 0x81 [0096.534] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\", lpFilePart=0x0) returned 0x82 [0096.534] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d8090 [0096.534] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0096.534] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0096.535] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0096.535] FindClose (in: hFindFile=0x5d8090 | out: hFindFile=0x5d8090) returned 1 [0096.535] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0096.535] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0096.535] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\messages.json", lpFilePart=0x0) returned 0x8f [0096.535] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0096.535] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x2306d28 | out: lpFileInformation=0x2306d28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74782a24, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x74782912, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x74d2f5c0, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x119)) returned 1 [0096.535] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0096.535] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\messages.json", lpFilePart=0x0) returned 0x8f [0096.535] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0096.535] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0096.535] GetFileType (hFile=0x444) returned 0x1 [0096.535] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0096.535] GetFileType (hFile=0x444) returned 0x1 [0096.535] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x119 [0096.535] ReadFile (in: hFile=0x444, lpBuffer=0x2307210, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x2307210*, lpNumberOfBytesRead=0x3be478*=0x119, lpOverlapped=0x0) returned 1 [0096.537] CloseHandle (hObject=0x444) returned 1 [0096.583] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\messages.json", lpFilePart=0x0) returned 0x8f [0096.583] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0096.583] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0096.585] GetFileType (hFile=0x444) returned 0x1 [0096.585] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0096.585] GetFileType (hFile=0x444) returned 0x1 [0096.585] WriteFile (in: hFile=0x444, lpBuffer=0x217e890*, nNumberOfBytesToWrite=0x120, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x217e890*, lpNumberOfBytesWritten=0x3be388*=0x120, lpOverlapped=0x0) returned 1 [0096.586] CloseHandle (hObject=0x444) returned 1 [0096.586] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\messages.json", lpFilePart=0x0) returned 0x8f [0096.586] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0096.586] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0096.586] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74782a24, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x74782912, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x256a7e7c, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x120)) returned 1 [0096.586] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0096.586] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\messages.json.xuy")) returned 1 [0096.587] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0096.587] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si", lpFilePart=0x0) returned 0x81 [0096.587] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\", lpFilePart=0x0) returned 0x82 [0096.587] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d81b0 [0096.588] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0096.588] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0096.589] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0096.589] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0096.589] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0096.589] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0096.589] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0096.589] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si", lpFilePart=0x0) returned 0x81 [0096.589] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\", lpFilePart=0x0) returned 0x82 [0096.589] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7eb0 [0096.589] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0096.589] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0096.589] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0096.589] FindClose (in: hFindFile=0x5d7eb0 | out: hFindFile=0x5d7eb0) returned 1 [0096.589] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0096.589] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0096.589] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\messages.json", lpFilePart=0x0) returned 0x8f [0096.590] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0096.590] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x21829e8 | out: lpFileInformation=0x21829e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74791487, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x74791372, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x14e)) returned 1 [0096.590] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0096.590] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\messages.json", lpFilePart=0x0) returned 0x8f [0096.590] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0096.590] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0096.590] GetFileType (hFile=0x444) returned 0x1 [0096.590] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0096.590] GetFileType (hFile=0x444) returned 0x1 [0096.590] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x14e [0096.590] ReadFile (in: hFile=0x444, lpBuffer=0x2182f00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x2182f00*, lpNumberOfBytesRead=0x3be478*=0x14e, lpOverlapped=0x0) returned 1 [0096.591] CloseHandle (hObject=0x444) returned 1 [0096.601] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\messages.json", lpFilePart=0x0) returned 0x8f [0096.601] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0096.602] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0096.603] GetFileType (hFile=0x444) returned 0x1 [0096.603] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0096.603] GetFileType (hFile=0x444) returned 0x1 [0096.603] WriteFile (in: hFile=0x444, lpBuffer=0x21fa5f8*, nNumberOfBytesToWrite=0x150, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x21fa5f8*, lpNumberOfBytesWritten=0x3be388*=0x150, lpOverlapped=0x0) returned 1 [0096.604] CloseHandle (hObject=0x444) returned 1 [0096.604] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\messages.json", lpFilePart=0x0) returned 0x8f [0096.604] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0096.604] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0096.604] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74791487, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x74791372, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x256ce0f4, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x150)) returned 1 [0096.604] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0096.604] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\messages.json.xuy")) returned 1 [0096.605] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0096.605] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk", lpFilePart=0x0) returned 0x81 [0096.605] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\", lpFilePart=0x0) returned 0x82 [0096.605] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7a30 [0096.605] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0096.606] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0096.606] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0096.606] FindClose (in: hFindFile=0x5d7a30 | out: hFindFile=0x5d7a30) returned 1 [0096.606] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0096.606] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0096.606] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0096.606] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk", lpFilePart=0x0) returned 0x81 [0096.606] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\", lpFilePart=0x0) returned 0x82 [0096.606] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d81b0 [0096.606] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0096.606] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0096.606] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0096.606] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0096.607] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0096.607] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0096.607] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\messages.json", lpFilePart=0x0) returned 0x8f [0096.607] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0096.607] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x21fe750 | out: lpFileInformation=0x21fe750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7479d7e5, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7479d6c2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x74d2f5c0, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xc5)) returned 1 [0096.607] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0096.608] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\messages.json", lpFilePart=0x0) returned 0x8f [0096.608] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0096.608] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0096.608] GetFileType (hFile=0x444) returned 0x1 [0096.608] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0096.608] GetFileType (hFile=0x444) returned 0x1 [0096.608] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xc5 [0096.608] ReadFile (in: hFile=0x444, lpBuffer=0x21febe0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x21febe0*, lpNumberOfBytesRead=0x3be478*=0xc5, lpOverlapped=0x0) returned 1 [0096.609] CloseHandle (hObject=0x444) returned 1 [0096.619] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\messages.json", lpFilePart=0x0) returned 0x8f [0096.619] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0096.619] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0096.621] GetFileType (hFile=0x444) returned 0x1 [0096.621] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0096.621] GetFileType (hFile=0x444) returned 0x1 [0096.621] WriteFile (in: hFile=0x444, lpBuffer=0x2275f08*, nNumberOfBytesToWrite=0xd0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x2275f08*, lpNumberOfBytesWritten=0x3be388*=0xd0, lpOverlapped=0x0) returned 1 [0096.622] CloseHandle (hObject=0x444) returned 1 [0096.622] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\messages.json", lpFilePart=0x0) returned 0x8f [0096.622] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0096.622] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0096.622] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7479d7e5, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7479d6c2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x256f436b, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xd0)) returned 1 [0096.622] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0096.622] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\messages.json.xuy")) returned 1 [0096.625] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0096.625] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl", lpFilePart=0x0) returned 0x81 [0096.625] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\", lpFilePart=0x0) returned 0x82 [0096.625] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d78b0 [0096.626] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0096.626] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0096.626] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0096.627] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0096.627] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0096.627] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0096.627] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0096.627] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl", lpFilePart=0x0) returned 0x81 [0096.627] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\", lpFilePart=0x0) returned 0x82 [0096.627] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7370 [0096.627] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0096.627] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0096.627] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0096.627] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0096.627] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0096.627] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0096.627] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\messages.json", lpFilePart=0x0) returned 0x8f [0096.627] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0096.627] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x227a060 | out: lpFileInformation=0x227a060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x747b377a, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x747b3652, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x74d2f5c0, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xbe)) returned 1 [0096.628] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0096.628] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\messages.json", lpFilePart=0x0) returned 0x8f [0096.628] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0096.628] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0096.628] GetFileType (hFile=0x444) returned 0x1 [0096.628] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0096.628] GetFileType (hFile=0x444) returned 0x1 [0096.628] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xbe [0096.628] ReadFile (in: hFile=0x444, lpBuffer=0x227a4e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x227a4e8*, lpNumberOfBytesRead=0x3be478*=0xbe, lpOverlapped=0x0) returned 1 [0096.629] CloseHandle (hObject=0x444) returned 1 [0096.639] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\messages.json", lpFilePart=0x0) returned 0x8f [0096.639] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0096.639] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0096.641] GetFileType (hFile=0x444) returned 0x1 [0096.641] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0096.642] GetFileType (hFile=0x444) returned 0x1 [0096.642] WriteFile (in: hFile=0x444, lpBuffer=0x22f17e8*, nNumberOfBytesToWrite=0xc0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x22f17e8*, lpNumberOfBytesWritten=0x3be388*=0xc0, lpOverlapped=0x0) returned 1 [0096.643] CloseHandle (hObject=0x444) returned 1 [0096.643] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\messages.json", lpFilePart=0x0) returned 0x8f [0096.643] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0096.643] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0096.643] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x747b377a, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x747b3652, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x25744dbd, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xc0)) returned 1 [0096.643] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0096.643] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\messages.json.xuy")) returned 1 [0096.644] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0096.644] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr", lpFilePart=0x0) returned 0x81 [0096.644] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\", lpFilePart=0x0) returned 0x82 [0096.644] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7550 [0096.644] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0096.644] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0096.644] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0096.644] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0096.645] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0096.645] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0096.645] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0096.645] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr", lpFilePart=0x0) returned 0x81 [0096.645] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\", lpFilePart=0x0) returned 0x82 [0096.645] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7d90 [0096.645] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0096.645] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0096.645] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0096.645] FindClose (in: hFindFile=0x5d7d90 | out: hFindFile=0x5d7d90) returned 1 [0096.645] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0096.645] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0096.645] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\messages.json", lpFilePart=0x0) returned 0x8f [0096.645] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0096.645] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x22f5940 | out: lpFileInformation=0x22f5940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x747bfac2, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x747bf9a2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x74d31cd0, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x104)) returned 1 [0096.646] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0096.646] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\messages.json", lpFilePart=0x0) returned 0x8f [0096.646] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0096.646] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0096.646] GetFileType (hFile=0x444) returned 0x1 [0096.646] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0096.646] GetFileType (hFile=0x444) returned 0x1 [0096.646] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x104 [0096.646] ReadFile (in: hFile=0x444, lpBuffer=0x22f5e10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x22f5e10*, lpNumberOfBytesRead=0x3be478*=0x104, lpOverlapped=0x0) returned 1 [0096.647] CloseHandle (hObject=0x444) returned 1 [0096.688] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\messages.json", lpFilePart=0x0) returned 0x8f [0096.688] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0096.688] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0096.689] GetFileType (hFile=0x444) returned 0x1 [0096.689] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0096.689] GetFileType (hFile=0x444) returned 0x1 [0096.689] WriteFile (in: hFile=0x444, lpBuffer=0x216d3a0*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x216d3a0*, lpNumberOfBytesWritten=0x3be388*=0x110, lpOverlapped=0x0) returned 1 [0096.691] CloseHandle (hObject=0x444) returned 1 [0096.691] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\messages.json", lpFilePart=0x0) returned 0x8f [0096.691] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0096.691] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0096.691] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x747bfac2, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x747bf9a2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x257b331d, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x110)) returned 1 [0096.691] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0096.691] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\messages.json.xuy")) returned 1 [0096.692] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0096.692] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv", lpFilePart=0x0) returned 0x81 [0096.692] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\", lpFilePart=0x0) returned 0x82 [0096.692] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d78b0 [0096.695] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0096.695] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0096.695] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0096.695] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0096.695] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0096.695] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0096.695] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0096.695] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv", lpFilePart=0x0) returned 0x81 [0096.695] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\", lpFilePart=0x0) returned 0x82 [0096.696] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7a90 [0096.696] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0096.696] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0096.696] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0096.696] FindClose (in: hFindFile=0x5d7a90 | out: hFindFile=0x5d7a90) returned 1 [0096.696] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0096.696] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0096.696] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\messages.json", lpFilePart=0x0) returned 0x8f [0096.696] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0096.696] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x21714f8 | out: lpFileInformation=0x21714f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x747d5a63, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x747d8042, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x74d31cd0, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1 [0096.696] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0096.696] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\messages.json", lpFilePart=0x0) returned 0x8f [0096.697] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0096.697] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0096.697] GetFileType (hFile=0x444) returned 0x1 [0096.697] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0096.697] GetFileType (hFile=0x444) returned 0x1 [0096.697] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xb3 [0096.697] ReadFile (in: hFile=0x444, lpBuffer=0x2171978, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x2171978*, lpNumberOfBytesRead=0x3be478*=0xb3, lpOverlapped=0x0) returned 1 [0096.698] CloseHandle (hObject=0x444) returned 1 [0096.709] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\messages.json", lpFilePart=0x0) returned 0x8f [0096.709] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0096.709] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0096.710] GetFileType (hFile=0x444) returned 0x1 [0096.710] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0096.710] GetFileType (hFile=0x444) returned 0x1 [0096.710] WriteFile (in: hFile=0x444, lpBuffer=0x21e8c80*, nNumberOfBytesToWrite=0xc0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x21e8c80*, lpNumberOfBytesWritten=0x3be388*=0xc0, lpOverlapped=0x0) returned 1 [0096.711] CloseHandle (hObject=0x444) returned 1 [0096.711] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\messages.json", lpFilePart=0x0) returned 0x8f [0096.711] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0096.711] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0096.712] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x747d5a63, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x747d8042, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x257d9162, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xc0)) returned 1 [0096.712] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0096.712] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\messages.json.xuy")) returned 1 [0096.713] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0096.713] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw", lpFilePart=0x0) returned 0x81 [0096.713] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\", lpFilePart=0x0) returned 0x82 [0096.713] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d78b0 [0096.713] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0096.713] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0096.713] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0096.713] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0096.713] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0096.713] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0096.713] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0096.713] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw", lpFilePart=0x0) returned 0x81 [0096.714] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\", lpFilePart=0x0) returned 0x82 [0096.714] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d8090 [0096.714] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0096.714] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0096.714] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0096.714] FindClose (in: hFindFile=0x5d8090 | out: hFindFile=0x5d8090) returned 1 [0096.714] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0096.714] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0096.714] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\messages.json", lpFilePart=0x0) returned 0x8f [0096.714] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0096.714] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x21ecdd8 | out: lpFileInformation=0x21ecdd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x747e44be, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x747e4392, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x74d31cd0, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xc4)) returned 1 [0096.715] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0096.715] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\messages.json", lpFilePart=0x0) returned 0x8f [0096.715] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0096.715] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0096.715] GetFileType (hFile=0x444) returned 0x1 [0096.715] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0096.715] GetFileType (hFile=0x444) returned 0x1 [0096.715] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xc4 [0096.715] ReadFile (in: hFile=0x444, lpBuffer=0x21ed268, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x21ed268*, lpNumberOfBytesRead=0x3be478*=0xc4, lpOverlapped=0x0) returned 1 [0096.716] CloseHandle (hObject=0x444) returned 1 [0096.729] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\messages.json", lpFilePart=0x0) returned 0x8f [0096.729] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0096.729] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0096.730] GetFileType (hFile=0x444) returned 0x1 [0096.730] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0096.730] GetFileType (hFile=0x444) returned 0x1 [0096.731] WriteFile (in: hFile=0x444, lpBuffer=0x2264590*, nNumberOfBytesToWrite=0xd0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x2264590*, lpNumberOfBytesWritten=0x3be388*=0xd0, lpOverlapped=0x0) returned 1 [0096.731] CloseHandle (hObject=0x444) returned 1 [0096.731] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\messages.json", lpFilePart=0x0) returned 0x8f [0096.731] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0096.731] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0096.731] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x747e44be, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x747e4392, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x257ff510, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xd0)) returned 1 [0096.732] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0096.732] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\messages.json.xuy")) returned 1 [0096.733] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0096.733] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta", lpFilePart=0x0) returned 0x81 [0096.734] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\", lpFilePart=0x0) returned 0x82 [0096.734] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d79d0 [0096.735] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0096.735] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0096.735] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0096.735] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0096.736] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0096.736] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0096.736] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0096.736] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta", lpFilePart=0x0) returned 0x81 [0096.736] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\", lpFilePart=0x0) returned 0x82 [0096.736] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7c70 [0096.736] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0096.736] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0096.736] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0096.736] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0096.736] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0096.736] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0096.736] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\messages.json", lpFilePart=0x0) returned 0x8f [0096.736] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0096.737] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x22686e8 | out: lpFileInformation=0x22686e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x747f081b, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x747fa322, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x74d31cd0, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x150)) returned 1 [0096.737] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0096.737] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\messages.json", lpFilePart=0x0) returned 0x8f [0096.737] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0096.737] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0096.737] GetFileType (hFile=0x444) returned 0x1 [0096.737] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0096.737] GetFileType (hFile=0x444) returned 0x1 [0096.737] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x150 [0096.737] ReadFile (in: hFile=0x444, lpBuffer=0x2268c00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x2268c00*, lpNumberOfBytesRead=0x3be478*=0x150, lpOverlapped=0x0) returned 1 [0096.738] CloseHandle (hObject=0x444) returned 1 [0096.750] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\messages.json", lpFilePart=0x0) returned 0x8f [0096.750] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0096.750] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0096.752] GetFileType (hFile=0x444) returned 0x1 [0096.752] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0096.753] GetFileType (hFile=0x444) returned 0x1 [0096.753] WriteFile (in: hFile=0x444, lpBuffer=0x22e0350*, nNumberOfBytesToWrite=0x160, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x22e0350*, lpNumberOfBytesWritten=0x3be388*=0x160, lpOverlapped=0x0) returned 1 [0096.753] CloseHandle (hObject=0x444) returned 1 [0096.754] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\messages.json", lpFilePart=0x0) returned 0x8f [0096.754] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0096.754] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0096.754] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x747f081b, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x747fa322, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2584b9c7, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x160)) returned 1 [0096.754] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0096.754] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\messages.json.xuy")) returned 1 [0096.755] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0096.755] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te", lpFilePart=0x0) returned 0x81 [0096.755] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\", lpFilePart=0x0) returned 0x82 [0096.755] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7a90 [0096.755] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0096.756] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0096.756] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0096.756] FindClose (in: hFindFile=0x5d7a90 | out: hFindFile=0x5d7a90) returned 1 [0096.756] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0096.756] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0096.756] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0096.756] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te", lpFilePart=0x0) returned 0x81 [0096.756] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\", lpFilePart=0x0) returned 0x82 [0096.756] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7df0 [0096.756] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0096.756] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0096.757] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0096.757] FindClose (in: hFindFile=0x5d7df0 | out: hFindFile=0x5d7df0) returned 1 [0096.757] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0096.757] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0096.757] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\messages.json", lpFilePart=0x0) returned 0x8f [0096.757] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0096.757] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x22e44a8 | out: lpFileInformation=0x22e44a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74808eba, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x74808d82, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x74d31cd0, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x115)) returned 1 [0096.757] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0096.757] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\messages.json", lpFilePart=0x0) returned 0x8f [0096.757] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0096.757] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0096.757] GetFileType (hFile=0x444) returned 0x1 [0096.757] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0096.757] GetFileType (hFile=0x444) returned 0x1 [0096.757] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x115 [0096.757] ReadFile (in: hFile=0x444, lpBuffer=0x22e4988, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x22e4988*, lpNumberOfBytesRead=0x3be478*=0x115, lpOverlapped=0x0) returned 1 [0096.758] CloseHandle (hObject=0x444) returned 1 [0096.770] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\messages.json", lpFilePart=0x0) returned 0x8f [0096.770] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0096.770] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0096.771] GetFileType (hFile=0x444) returned 0x1 [0096.771] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0096.771] GetFileType (hFile=0x444) returned 0x1 [0096.772] WriteFile (in: hFile=0x444, lpBuffer=0x235bf98*, nNumberOfBytesToWrite=0x120, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x235bf98*, lpNumberOfBytesWritten=0x3be388*=0x120, lpOverlapped=0x0) returned 1 [0096.772] CloseHandle (hObject=0x444) returned 1 [0096.772] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\messages.json", lpFilePart=0x0) returned 0x8f [0096.773] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0096.773] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0096.773] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74808eba, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x74808d82, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x25873bfe, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x120)) returned 1 [0096.773] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0096.773] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\messages.json.xuy")) returned 1 [0096.774] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0096.774] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th", lpFilePart=0x0) returned 0x81 [0096.774] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\", lpFilePart=0x0) returned 0x82 [0096.774] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7550 [0096.775] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0096.775] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0096.775] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0096.775] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0096.776] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0096.776] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0096.776] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0096.776] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th", lpFilePart=0x0) returned 0x81 [0096.776] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\", lpFilePart=0x0) returned 0x82 [0096.776] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7550 [0096.776] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0096.776] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0096.776] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0096.776] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0096.776] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0096.776] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0096.776] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\messages.json", lpFilePart=0x0) returned 0x8f [0096.777] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0096.777] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x23600f0 | out: lpFileInformation=0x23600f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74815214, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x748177e2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x74d343d9, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x125)) returned 1 [0096.777] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0096.777] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\messages.json", lpFilePart=0x0) returned 0x8f [0096.777] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0096.777] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0096.777] GetFileType (hFile=0x444) returned 0x1 [0096.777] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0096.777] GetFileType (hFile=0x444) returned 0x1 [0096.777] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x125 [0096.777] ReadFile (in: hFile=0x444, lpBuffer=0x23605e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x23605e0*, lpNumberOfBytesRead=0x3be478*=0x125, lpOverlapped=0x0) returned 1 [0096.778] CloseHandle (hObject=0x444) returned 1 [0096.823] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\messages.json", lpFilePart=0x0) returned 0x8f [0096.823] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0096.823] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0096.825] GetFileType (hFile=0x444) returned 0x1 [0096.825] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0096.825] GetFileType (hFile=0x444) returned 0x1 [0096.825] WriteFile (in: hFile=0x444, lpBuffer=0x21d7c58*, nNumberOfBytesToWrite=0x130, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x21d7c58*, lpNumberOfBytesWritten=0x3be388*=0x130, lpOverlapped=0x0) returned 1 [0096.826] CloseHandle (hObject=0x444) returned 1 [0096.827] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\messages.json", lpFilePart=0x0) returned 0x8f [0096.827] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0096.827] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0096.827] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74815214, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x748177e2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x258e4352, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x130)) returned 1 [0096.827] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0096.827] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\messages.json.xuy")) returned 1 [0096.828] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0096.828] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr", lpFilePart=0x0) returned 0x81 [0096.828] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\", lpFilePart=0x0) returned 0x82 [0096.828] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7c70 [0096.829] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0096.829] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0096.829] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0096.829] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0096.829] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0096.829] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0096.829] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0096.829] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr", lpFilePart=0x0) returned 0x81 [0096.829] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\", lpFilePart=0x0) returned 0x82 [0096.829] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d79d0 [0096.830] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0096.830] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0096.830] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0096.830] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0096.830] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0096.830] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0096.830] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\messages.json", lpFilePart=0x0) returned 0x8f [0096.830] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0096.830] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x21dbdb0 | out: lpFileInformation=0x21dbdb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7482b1a7, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7482b062, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x74d343d9, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xcd)) returned 1 [0096.831] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0096.831] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\messages.json", lpFilePart=0x0) returned 0x8f [0096.831] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0096.831] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0096.831] GetFileType (hFile=0x444) returned 0x1 [0096.831] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0096.831] GetFileType (hFile=0x444) returned 0x1 [0096.831] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xcd [0096.831] ReadFile (in: hFile=0x444, lpBuffer=0x21dc248, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x21dc248*, lpNumberOfBytesRead=0x3be478*=0xcd, lpOverlapped=0x0) returned 1 [0096.832] CloseHandle (hObject=0x444) returned 1 [0096.844] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\messages.json", lpFilePart=0x0) returned 0x8f [0096.844] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0096.844] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0096.846] GetFileType (hFile=0x444) returned 0x1 [0096.846] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0096.846] GetFileType (hFile=0x444) returned 0x1 [0096.846] WriteFile (in: hFile=0x444, lpBuffer=0x2253568*, nNumberOfBytesToWrite=0xd0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x2253568*, lpNumberOfBytesWritten=0x3be388*=0xd0, lpOverlapped=0x0) returned 1 [0096.847] CloseHandle (hObject=0x444) returned 1 [0096.847] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\messages.json", lpFilePart=0x0) returned 0x8f [0096.847] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0096.847] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0096.847] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7482b1a7, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7482b062, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x25930c6c, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xd0)) returned 1 [0096.847] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0096.848] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\messages.json.xuy")) returned 1 [0096.849] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0096.849] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk", lpFilePart=0x0) returned 0x81 [0096.849] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\", lpFilePart=0x0) returned 0x82 [0096.849] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d78b0 [0096.851] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0096.851] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0096.851] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0096.851] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0096.851] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0096.851] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0096.851] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0096.851] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk", lpFilePart=0x0) returned 0x81 [0096.851] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\", lpFilePart=0x0) returned 0x82 [0096.851] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7d30 [0096.852] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0096.852] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0096.852] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0096.852] FindClose (in: hFindFile=0x5d7d30 | out: hFindFile=0x5d7d30) returned 1 [0096.852] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0096.852] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0096.852] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\messages.json", lpFilePart=0x0) returned 0x8f [0096.852] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0096.852] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x22576c0 | out: lpFileInformation=0x22576c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x748374fb, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x74839ac2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x74d343d9, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x115)) returned 1 [0096.852] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0096.853] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\messages.json", lpFilePart=0x0) returned 0x8f [0096.853] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0096.853] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0096.853] GetFileType (hFile=0x444) returned 0x1 [0096.853] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0096.853] GetFileType (hFile=0x444) returned 0x1 [0096.853] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x115 [0096.853] ReadFile (in: hFile=0x444, lpBuffer=0x2257ba0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x2257ba0*, lpNumberOfBytesRead=0x3be478*=0x115, lpOverlapped=0x0) returned 1 [0096.854] CloseHandle (hObject=0x444) returned 1 [0096.866] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\messages.json", lpFilePart=0x0) returned 0x8f [0096.866] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0096.866] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0096.867] GetFileType (hFile=0x444) returned 0x1 [0096.867] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0096.867] GetFileType (hFile=0x444) returned 0x1 [0096.867] WriteFile (in: hFile=0x444, lpBuffer=0x22cf1b0*, nNumberOfBytesToWrite=0x120, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x22cf1b0*, lpNumberOfBytesWritten=0x3be388*=0x120, lpOverlapped=0x0) returned 1 [0096.868] CloseHandle (hObject=0x444) returned 1 [0096.868] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\messages.json", lpFilePart=0x0) returned 0x8f [0096.868] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0096.868] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0096.868] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x748374fb, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x74839ac2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x25956a02, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x120)) returned 1 [0096.869] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0096.869] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\messages.json.xuy")) returned 1 [0096.870] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0096.870] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur", lpFilePart=0x0) returned 0x81 [0096.870] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\", lpFilePart=0x0) returned 0x82 [0096.870] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d78b0 [0096.870] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0096.870] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0096.870] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0096.870] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0096.871] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0096.871] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0096.871] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0096.871] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur", lpFilePart=0x0) returned 0x81 [0096.871] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\", lpFilePart=0x0) returned 0x82 [0096.871] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7550 [0096.871] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0096.871] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0096.871] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0096.871] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0096.871] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0096.872] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0096.872] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\messages.json", lpFilePart=0x0) returned 0x8f [0096.872] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0096.872] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x22d3308 | out: lpFileInformation=0x22d3308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7484fba3, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7484fa52, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x177)) returned 1 [0096.872] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0096.872] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\messages.json", lpFilePart=0x0) returned 0x8f [0096.872] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0096.872] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0096.872] GetFileType (hFile=0x444) returned 0x1 [0096.872] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0096.872] GetFileType (hFile=0x444) returned 0x1 [0096.872] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x177 [0096.872] ReadFile (in: hFile=0x444, lpBuffer=0x22d3848, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x22d3848*, lpNumberOfBytesRead=0x3be478*=0x177, lpOverlapped=0x0) returned 1 [0096.874] CloseHandle (hObject=0x444) returned 1 [0096.886] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\messages.json", lpFilePart=0x0) returned 0x8f [0096.886] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0096.886] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0096.889] GetFileType (hFile=0x444) returned 0x1 [0096.889] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0096.890] GetFileType (hFile=0x444) returned 0x1 [0096.890] WriteFile (in: hFile=0x444, lpBuffer=0x234b038*, nNumberOfBytesToWrite=0x180, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x234b038*, lpNumberOfBytesWritten=0x3be388*=0x180, lpOverlapped=0x0) returned 1 [0096.891] CloseHandle (hObject=0x444) returned 1 [0096.891] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\messages.json", lpFilePart=0x0) returned 0x8f [0096.892] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0096.892] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0096.892] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7484fba3, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7484fa52, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x259a2f11, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x180)) returned 1 [0096.892] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0096.892] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\messages.json.xuy")) returned 1 [0096.893] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0096.893] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi", lpFilePart=0x0) returned 0x81 [0096.894] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\", lpFilePart=0x0) returned 0x82 [0096.894] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7370 [0096.896] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0096.896] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0096.897] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0096.897] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0096.897] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0096.897] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0096.897] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0096.897] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi", lpFilePart=0x0) returned 0x81 [0096.897] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\", lpFilePart=0x0) returned 0x82 [0096.897] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d78b0 [0096.897] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0096.898] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0096.898] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0096.898] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0096.898] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0096.898] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0096.898] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\messages.json", lpFilePart=0x0) returned 0x8f [0096.898] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0096.898] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x234f190 | out: lpFileInformation=0x234f190*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x748597e1, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7485bda2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x74d343d9, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xdd)) returned 1 [0096.899] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0096.899] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\messages.json", lpFilePart=0x0) returned 0x8f [0096.899] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0096.899] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0096.899] GetFileType (hFile=0x444) returned 0x1 [0096.899] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0096.899] GetFileType (hFile=0x444) returned 0x1 [0096.899] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xdd [0096.899] ReadFile (in: hFile=0x444, lpBuffer=0x234f638, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x234f638*, lpNumberOfBytesRead=0x3be478*=0xdd, lpOverlapped=0x0) returned 1 [0096.901] CloseHandle (hObject=0x444) returned 1 [0096.969] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\messages.json", lpFilePart=0x0) returned 0x8f [0096.969] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0096.969] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0096.970] GetFileType (hFile=0x444) returned 0x1 [0096.970] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0096.970] GetFileType (hFile=0x444) returned 0x1 [0096.970] WriteFile (in: hFile=0x444, lpBuffer=0x21c68d0*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x21c68d0*, lpNumberOfBytesWritten=0x3be388*=0xe0, lpOverlapped=0x0) returned 1 [0096.971] CloseHandle (hObject=0x444) returned 1 [0096.971] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\messages.json", lpFilePart=0x0) returned 0x8f [0096.971] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0096.971] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0096.971] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x748597e1, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7485bda2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x25a61cd6, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1 [0096.972] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0096.972] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\messages.json.xuy")) returned 1 [0096.972] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0096.972] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN", lpFilePart=0x0) returned 0x84 [0096.972] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN\\", lpFilePart=0x0) returned 0x85 [0096.973] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7370 [0096.973] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0096.973] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0096.973] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0096.973] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0096.974] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0096.974] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0096.974] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0096.974] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN", lpFilePart=0x0) returned 0x84 [0096.974] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN\\", lpFilePart=0x0) returned 0x85 [0096.974] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d78b0 [0096.974] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0096.974] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0096.974] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0096.974] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0096.974] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0096.974] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0096.974] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN\\messages.json", lpFilePart=0x0) returned 0x92 [0096.974] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0096.975] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_cn\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x21caaf8 | out: lpFileInformation=0x21caaf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7486f77a, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x74871d32, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x74d36aff, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xb0)) returned 1 [0096.975] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0096.975] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN\\messages.json", lpFilePart=0x0) returned 0x92 [0096.975] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0096.975] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_cn\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0096.975] GetFileType (hFile=0x444) returned 0x1 [0096.975] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0096.975] GetFileType (hFile=0x444) returned 0x1 [0096.975] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xb0 [0096.975] ReadFile (in: hFile=0x444, lpBuffer=0x21caf80, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x21caf80*, lpNumberOfBytesRead=0x3be478*=0xb0, lpOverlapped=0x0) returned 1 [0096.976] CloseHandle (hObject=0x444) returned 1 [0096.986] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN\\messages.json", lpFilePart=0x0) returned 0x92 [0096.986] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0096.986] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_cn\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0096.988] GetFileType (hFile=0x444) returned 0x1 [0096.988] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0096.988] GetFileType (hFile=0x444) returned 0x1 [0096.988] WriteFile (in: hFile=0x444, lpBuffer=0x2242290*, nNumberOfBytesToWrite=0xc0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x2242290*, lpNumberOfBytesWritten=0x3be388*=0xc0, lpOverlapped=0x0) returned 1 [0096.988] CloseHandle (hObject=0x444) returned 1 [0096.989] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN\\messages.json", lpFilePart=0x0) returned 0x92 [0096.989] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN\\messages.json.xuy", lpFilePart=0x0) returned 0x96 [0096.989] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0096.989] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_cn\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7486f77a, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x74871d32, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x25a87c06, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xc0)) returned 1 [0096.989] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0096.989] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_cn\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_cn\\messages.json.xuy")) returned 1 [0096.990] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0096.990] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK", lpFilePart=0x0) returned 0x84 [0096.990] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK\\", lpFilePart=0x0) returned 0x85 [0096.990] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d78b0 [0096.992] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0096.992] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0096.992] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0096.992] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0096.992] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0096.992] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0096.992] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0096.993] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK", lpFilePart=0x0) returned 0x84 [0096.993] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK\\", lpFilePart=0x0) returned 0x85 [0096.993] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7550 [0096.993] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0096.993] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0096.993] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0096.993] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0096.993] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0096.993] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0096.993] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK\\messages.json", lpFilePart=0x0) returned 0x92 [0096.993] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0096.993] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_hk\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x22464d0 | out: lpFileInformation=0x22464d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x748808ed, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x74880792, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0xd2)) returned 1 [0096.994] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0096.994] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK\\messages.json", lpFilePart=0x0) returned 0x92 [0096.994] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0096.994] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_hk\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0096.994] GetFileType (hFile=0x444) returned 0x1 [0096.994] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0096.994] GetFileType (hFile=0x444) returned 0x1 [0096.994] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xd2 [0096.994] ReadFile (in: hFile=0x444, lpBuffer=0x2246980, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x2246980*, lpNumberOfBytesRead=0x3be478*=0xd2, lpOverlapped=0x0) returned 1 [0096.995] CloseHandle (hObject=0x444) returned 1 [0097.006] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK\\messages.json", lpFilePart=0x0) returned 0x92 [0097.006] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0097.006] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_hk\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0097.008] GetFileType (hFile=0x444) returned 0x1 [0097.008] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0097.008] GetFileType (hFile=0x444) returned 0x1 [0097.008] WriteFile (in: hFile=0x444, lpBuffer=0x22bdcd0*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x22bdcd0*, lpNumberOfBytesWritten=0x3be388*=0xe0, lpOverlapped=0x0) returned 1 [0097.009] CloseHandle (hObject=0x444) returned 1 [0097.009] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK\\messages.json", lpFilePart=0x0) returned 0x92 [0097.009] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK\\messages.json.xuy", lpFilePart=0x0) returned 0x96 [0097.009] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0097.009] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_hk\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x748808ed, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x74880792, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x25aade29, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1 [0097.009] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0097.009] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_hk\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_hk\\messages.json.xuy")) returned 1 [0097.010] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0097.010] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW", lpFilePart=0x0) returned 0x84 [0097.010] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW\\", lpFilePart=0x0) returned 0x85 [0097.011] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d79d0 [0097.011] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0097.011] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0097.011] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0097.011] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0097.011] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0097.011] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0097.011] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0097.011] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW", lpFilePart=0x0) returned 0x84 [0097.011] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW\\", lpFilePart=0x0) returned 0x85 [0097.012] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7eb0 [0097.012] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0097.012] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0097.012] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0097.012] FindClose (in: hFindFile=0x5d7eb0 | out: hFindFile=0x5d7eb0) returned 1 [0097.012] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0097.012] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0097.012] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW\\messages.json", lpFilePart=0x0) returned 0x92 [0097.013] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0097.013] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_tw\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x22c1f10 | out: lpFileInformation=0x22c1f10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7489687c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x74896722, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x74d36aff, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xaa)) returned 1 [0097.013] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0097.013] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW\\messages.json", lpFilePart=0x0) returned 0x92 [0097.013] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0097.013] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_tw\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0097.013] GetFileType (hFile=0x444) returned 0x1 [0097.013] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0097.013] GetFileType (hFile=0x444) returned 0x1 [0097.013] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xaa [0097.013] ReadFile (in: hFile=0x444, lpBuffer=0x22c2398, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x22c2398*, lpNumberOfBytesRead=0x3be478*=0xaa, lpOverlapped=0x0) returned 1 [0097.014] CloseHandle (hObject=0x444) returned 1 [0097.025] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW\\messages.json", lpFilePart=0x0) returned 0x92 [0097.025] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0097.025] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_tw\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0097.027] GetFileType (hFile=0x444) returned 0x1 [0097.027] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0097.027] GetFileType (hFile=0x444) returned 0x1 [0097.027] WriteFile (in: hFile=0x444, lpBuffer=0x2339680*, nNumberOfBytesToWrite=0xb0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x2339680*, lpNumberOfBytesWritten=0x3be388*=0xb0, lpOverlapped=0x0) returned 1 [0097.028] CloseHandle (hObject=0x444) returned 1 [0097.028] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW\\messages.json", lpFilePart=0x0) returned 0x92 [0097.028] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW\\messages.json.xuy", lpFilePart=0x0) returned 0x96 [0097.028] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0097.028] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_tw\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7489687c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x74896722, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x25ad414f, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xb0)) returned 1 [0097.029] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0097.029] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_tw\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_tw\\messages.json.xuy")) returned 1 [0097.030] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0097.030] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu", lpFilePart=0x0) returned 0x81 [0097.030] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\", lpFilePart=0x0) returned 0x82 [0097.030] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7a30 [0097.030] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0097.031] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0097.031] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0097.031] FindClose (in: hFindFile=0x5d7a30 | out: hFindFile=0x5d7a30) returned 1 [0097.031] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0097.031] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0097.031] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0097.031] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu", lpFilePart=0x0) returned 0x81 [0097.031] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\", lpFilePart=0x0) returned 0x82 [0097.032] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7fd0 [0097.032] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0097.032] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0097.032] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0097.032] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0097.032] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0097.032] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0097.032] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\messages.json", lpFilePart=0x0) returned 0x8f [0097.032] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0097.032] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x233d7f0 | out: lpFileInformation=0x233d7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x748a52e9, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x748a7892, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0xc2)) returned 1 [0097.033] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0097.033] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\messages.json", lpFilePart=0x0) returned 0x8f [0097.033] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0097.033] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0097.033] GetFileType (hFile=0x444) returned 0x1 [0097.033] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0097.033] GetFileType (hFile=0x444) returned 0x1 [0097.033] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xc2 [0097.033] ReadFile (in: hFile=0x444, lpBuffer=0x233dc80, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x233dc80*, lpNumberOfBytesRead=0x3be478*=0xc2, lpOverlapped=0x0) returned 1 [0097.034] CloseHandle (hObject=0x444) returned 1 [0097.082] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\messages.json", lpFilePart=0x0) returned 0x8f [0097.082] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0097.082] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0097.083] GetFileType (hFile=0x444) returned 0x1 [0097.083] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0097.083] GetFileType (hFile=0x444) returned 0x1 [0097.083] WriteFile (in: hFile=0x444, lpBuffer=0x21b4f90*, nNumberOfBytesToWrite=0xd0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x21b4f90*, lpNumberOfBytesWritten=0x3be388*=0xd0, lpOverlapped=0x0) returned 1 [0097.084] CloseHandle (hObject=0x444) returned 1 [0097.085] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\messages.json", lpFilePart=0x0) returned 0x8f [0097.085] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0097.085] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0097.085] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x748a52e9, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x748a7892, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x25b6cf21, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xd0)) returned 1 [0097.085] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0097.085] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\messages.json.xuy")) returned 1 [0097.086] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0097.086] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata", nBufferLength=0x105, lpBuffer=0x3be0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata", lpFilePart=0x0) returned 0x7f [0097.086] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\", nBufferLength=0x105, lpBuffer=0x3be060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\", lpFilePart=0x0) returned 0x80 [0097.086] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\*", lpFindFileData=0x3be270 | out: lpFindFileData=0x3be270) returned 0x5d78b0 [0097.086] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0097.086] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0097.087] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0097.087] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 0 [0097.087] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0097.087] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0097.087] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0097.087] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0097.087] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata", nBufferLength=0x105, lpBuffer=0x3be0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata", lpFilePart=0x0) returned 0x7f [0097.087] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\", nBufferLength=0x105, lpBuffer=0x3be060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\", lpFilePart=0x0) returned 0x80 [0097.087] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\*", lpFindFileData=0x3be270 | out: lpFindFileData=0x3be270) returned 0x5d7c70 [0097.087] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0097.087] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0097.087] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0097.088] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 0 [0097.088] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0097.088] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0097.088] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0097.088] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\computed_hashes.json", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\computed_hashes.json", lpFilePart=0x0) returned 0x94 [0097.088] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0097.088] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\computed_hashes.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\computed_hashes.json"), fInfoLevelId=0x0, lpFileInformation=0x21b97e0 | out: lpFileInformation=0x21b97e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74d9d3bb, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x74d9d3bb, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x74d9d3bb, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xaf3)) returned 1 [0097.090] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0097.090] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\computed_hashes.json", nBufferLength=0x105, lpBuffer=0x3bdf40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\computed_hashes.json", lpFilePart=0x0) returned 0x94 [0097.090] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be420) returned 1 [0097.090] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\computed_hashes.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\computed_hashes.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0097.090] GetFileType (hFile=0x444) returned 0x1 [0097.090] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be390) returned 1 [0097.090] GetFileType (hFile=0x444) returned 0x1 [0097.090] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be5b8 | out: lpFileSizeHigh=0x3be5b8*=0x0) returned 0xaf3 [0097.090] ReadFile (in: hFile=0x444, lpBuffer=0x21ba6e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be4e8, lpOverlapped=0x0 | out: lpBuffer=0x21ba6e0*, lpNumberOfBytesRead=0x3be4e8*=0xaf3, lpOverlapped=0x0) returned 1 [0097.107] CloseHandle (hObject=0x444) returned 1 [0097.122] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\computed_hashes.json", nBufferLength=0x105, lpBuffer=0x3bdf40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\computed_hashes.json", lpFilePart=0x0) returned 0x94 [0097.122] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be420) returned 1 [0097.122] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\computed_hashes.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\computed_hashes.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0097.124] GetFileType (hFile=0x444) returned 0x1 [0097.124] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be390) returned 1 [0097.124] GetFileType (hFile=0x444) returned 0x1 [0097.124] WriteFile (in: hFile=0x444, lpBuffer=0x2234e70*, nNumberOfBytesToWrite=0xb00, lpNumberOfBytesWritten=0x3be3f8, lpOverlapped=0x0 | out: lpBuffer=0x2234e70*, lpNumberOfBytesWritten=0x3be3f8*=0xb00, lpOverlapped=0x0) returned 1 [0097.125] CloseHandle (hObject=0x444) returned 1 [0097.125] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\computed_hashes.json", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\computed_hashes.json", lpFilePart=0x0) returned 0x94 [0097.125] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\computed_hashes.json.xuy", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\computed_hashes.json.xuy", lpFilePart=0x0) returned 0x98 [0097.125] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0097.125] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\computed_hashes.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\computed_hashes.json"), fInfoLevelId=0x0, lpFileInformation=0x3be600 | out: lpFileInformation=0x3be600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74d9d3bb, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x74d9d3bb, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x25bdf171, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xb00)) returned 1 [0097.125] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0097.125] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\computed_hashes.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\computed_hashes.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\computed_hashes.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\computed_hashes.json.xuy")) returned 1 [0097.126] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\verified_contents.json", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\verified_contents.json", lpFilePart=0x0) returned 0x96 [0097.126] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0097.126] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\verified_contents.json"), fInfoLevelId=0x0, lpFileInformation=0x22362b8 | out: lpFileInformation=0x22362b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x748ebfc8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x748ebe52, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x4454)) returned 1 [0097.126] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0097.126] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\verified_contents.json", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\verified_contents.json", lpFilePart=0x0) returned 0x96 [0097.126] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0097.126] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\verified_contents.json"), fInfoLevelId=0x0, lpFileInformation=0x22364b0 | out: lpFileInformation=0x22364b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x748ebfc8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x748ebe52, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x4454)) returned 1 [0097.126] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0097.127] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\verified_contents.json", nBufferLength=0x105, lpBuffer=0x3bdfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\verified_contents.json", lpFilePart=0x0) returned 0x96 [0097.127] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0097.127] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\verified_contents.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0097.127] GetFileType (hFile=0x444) returned 0x1 [0097.127] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be420) returned 1 [0097.127] GetFileType (hFile=0x444) returned 0x1 [0097.127] ReadFile (in: hFile=0x444, lpBuffer=0x22389d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be538, lpOverlapped=0x0 | out: lpBuffer=0x22389d0*, lpNumberOfBytesRead=0x3be538*=0x1000, lpOverlapped=0x0) returned 1 [0097.161] CloseHandle (hObject=0x444) returned 1 [0097.162] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\verified_contents.json", nBufferLength=0x105, lpBuffer=0x3bdfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\verified_contents.json", lpFilePart=0x0) returned 0x96 [0097.162] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0097.162] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\verified_contents.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0097.162] GetFileType (hFile=0x444) returned 0x1 [0097.162] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be420) returned 1 [0097.162] GetFileType (hFile=0x444) returned 0x1 [0097.162] WriteFile (in: hFile=0x444, lpBuffer=0x2236688*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be5e8, lpOverlapped=0x0 | out: lpBuffer=0x2236688*, lpNumberOfBytesWritten=0x3be5e8*=0x2000, lpOverlapped=0x0) returned 1 [0097.163] CloseHandle (hObject=0x444) returned 1 [0097.163] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\verified_contents.json", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\verified_contents.json", lpFilePart=0x0) returned 0x96 [0097.163] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\verified_contents.json.xuy", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\verified_contents.json.xuy", lpFilePart=0x0) returned 0x9a [0097.163] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0097.163] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\verified_contents.json"), fInfoLevelId=0x0, lpFileInformation=0x3be600 | out: lpFileInformation=0x3be600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x748ebfc8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x748ebe52, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x25c2b5f0, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x4454)) returned 1 [0097.163] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0097.163] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\verified_contents.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\verified_contents.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\verified_contents.json.xuy")) returned 1 [0097.164] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0097.164] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1", nBufferLength=0x105, lpBuffer=0x3be130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1", lpFilePart=0x0) returned 0x75 [0097.164] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\", nBufferLength=0x105, lpBuffer=0x3be0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\", lpFilePart=0x0) returned 0x76 [0097.164] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\*", lpFindFileData=0x3be2e0 | out: lpFindFileData=0x3be2e0) returned 0x5d78b0 [0097.178] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0097.178] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0097.178] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0097.178] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0097.178] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0097.178] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0097.178] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0097.178] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0097.179] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0097.179] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 0 [0097.179] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0097.180] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0097.180] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0097.180] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0097.180] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1", nBufferLength=0x105, lpBuffer=0x3be130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1", lpFilePart=0x0) returned 0x75 [0097.180] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\", nBufferLength=0x105, lpBuffer=0x3be0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\", lpFilePart=0x0) returned 0x76 [0097.180] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\*", lpFindFileData=0x3be2e0 | out: lpFindFileData=0x3be2e0) returned 0x5d81b0 [0097.181] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0097.181] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0097.181] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0097.181] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0097.181] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0097.182] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0097.182] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0097.182] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0097.182] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0097.182] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 0 [0097.182] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0097.183] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0097.183] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0097.183] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\128.png", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\128.png", lpFilePart=0x0) returned 0x7d [0097.183] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0097.183] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\128.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\128.png"), fInfoLevelId=0x0, lpFileInformation=0x22ba540 | out: lpFileInformation=0x22ba540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb786d6f4, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb891a5b8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0xb891a5b8, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x1378)) returned 1 [0097.184] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0097.184] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\128.png", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\128.png", lpFilePart=0x0) returned 0x7d [0097.184] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0097.184] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\128.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\128.png"), fInfoLevelId=0x0, lpFileInformation=0x22ba6e8 | out: lpFileInformation=0x22ba6e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb786d6f4, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb891a5b8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0xb891a5b8, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x1378)) returned 1 [0097.184] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0097.184] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\128.png", nBufferLength=0x105, lpBuffer=0x3be040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\128.png", lpFilePart=0x0) returned 0x7d [0097.184] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0097.185] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\128.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\128.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0097.186] GetFileType (hFile=0x444) returned 0x1 [0097.186] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be490) returned 1 [0097.186] GetFileType (hFile=0x444) returned 0x1 [0097.187] ReadFile (in: hFile=0x444, lpBuffer=0x22bcb68, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5a8, lpOverlapped=0x0 | out: lpBuffer=0x22bcb68*, lpNumberOfBytesRead=0x3be5a8*=0x1000, lpOverlapped=0x0) returned 1 [0097.229] CloseHandle (hObject=0x444) returned 1 [0097.229] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\128.png", nBufferLength=0x105, lpBuffer=0x3be040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\128.png", lpFilePart=0x0) returned 0x7d [0097.229] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0097.229] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\128.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\128.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0097.230] GetFileType (hFile=0x444) returned 0x1 [0097.230] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be490) returned 1 [0097.230] GetFileType (hFile=0x444) returned 0x1 [0097.230] WriteFile (in: hFile=0x444, lpBuffer=0x22ba870*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be658, lpOverlapped=0x0 | out: lpBuffer=0x22ba870*, lpNumberOfBytesWritten=0x3be658*=0x2000, lpOverlapped=0x0) returned 1 [0097.230] CloseHandle (hObject=0x444) returned 1 [0097.231] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\128.png", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\128.png", lpFilePart=0x0) returned 0x7d [0097.231] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\128.png.xuy", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\128.png.xuy", lpFilePart=0x0) returned 0x81 [0097.231] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0097.231] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\128.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\128.png"), fInfoLevelId=0x0, lpFileInformation=0x3be670 | out: lpFileInformation=0x3be670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb786d6f4, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb891a5b8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x25cc3e73, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0097.231] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0097.231] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\128.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\128.png"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\128.png.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\128.png.xuy")) returned 1 [0097.235] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\contentscript_bin_prod.js", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\contentscript_bin_prod.js", lpFilePart=0x0) returned 0x8f [0097.235] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0097.236] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\contentscript_bin_prod.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\contentscript_bin_prod.js"), fInfoLevelId=0x0, lpFileInformation=0x23390a8 | out: lpFileInformation=0x23390a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb862593b, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb864b38e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x1103)) returned 1 [0097.237] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0097.237] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\contentscript_bin_prod.js", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\contentscript_bin_prod.js", lpFilePart=0x0) returned 0x8f [0097.237] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0097.237] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\contentscript_bin_prod.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\contentscript_bin_prod.js"), fInfoLevelId=0x0, lpFileInformation=0x2339298 | out: lpFileInformation=0x2339298*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb862593b, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb864b38e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x1103)) returned 1 [0097.237] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0097.237] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\contentscript_bin_prod.js", nBufferLength=0x105, lpBuffer=0x3be040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\contentscript_bin_prod.js", lpFilePart=0x0) returned 0x8f [0097.237] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0097.237] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\contentscript_bin_prod.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\contentscript_bin_prod.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0097.238] GetFileType (hFile=0x444) returned 0x1 [0097.238] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be490) returned 1 [0097.238] GetFileType (hFile=0x444) returned 0x1 [0097.238] ReadFile (in: hFile=0x444, lpBuffer=0x233b7a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5a8, lpOverlapped=0x0 | out: lpBuffer=0x233b7a8*, lpNumberOfBytesRead=0x3be5a8*=0x1000, lpOverlapped=0x0) returned 1 [0097.348] CloseHandle (hObject=0x444) returned 1 [0097.348] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\contentscript_bin_prod.js", nBufferLength=0x105, lpBuffer=0x3be040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\contentscript_bin_prod.js", lpFilePart=0x0) returned 0x8f [0097.348] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0097.349] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\contentscript_bin_prod.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\contentscript_bin_prod.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0097.349] GetFileType (hFile=0x444) returned 0x1 [0097.349] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be490) returned 1 [0097.349] GetFileType (hFile=0x444) returned 0x1 [0097.349] WriteFile (in: hFile=0x444, lpBuffer=0x213c880*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be658, lpOverlapped=0x0 | out: lpBuffer=0x213c880*, lpNumberOfBytesWritten=0x3be658*=0x2000, lpOverlapped=0x0) returned 1 [0097.350] CloseHandle (hObject=0x444) returned 1 [0097.350] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\contentscript_bin_prod.js", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\contentscript_bin_prod.js", lpFilePart=0x0) returned 0x8f [0097.350] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\contentscript_bin_prod.js.xuy", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\contentscript_bin_prod.js.xuy", lpFilePart=0x0) returned 0x93 [0097.350] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0097.350] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\contentscript_bin_prod.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\contentscript_bin_prod.js"), fInfoLevelId=0x0, lpFileInformation=0x3be670 | out: lpFileInformation=0x3be670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb862593b, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb864b38e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x25df5689, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0097.350] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0097.350] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\contentscript_bin_prod.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\contentscript_bin_prod.js"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\contentscript_bin_prod.js.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\contentscript_bin_prod.js.xuy")) returned 1 [0097.352] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\dasherSettingSchema.json", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\dasherSettingSchema.json", lpFilePart=0x0) returned 0x8e [0097.352] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0097.352] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\dasherSettingSchema.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\dashersettingschema.json"), fInfoLevelId=0x0, lpFileInformation=0x2195298 | out: lpFileInformation=0x2195298*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb864bbb9, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb864b38e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x356)) returned 1 [0097.353] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0097.353] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\dasherSettingSchema.json", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\dasherSettingSchema.json", lpFilePart=0x0) returned 0x8e [0097.353] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0097.353] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\dasherSettingSchema.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\dashersettingschema.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0097.353] GetFileType (hFile=0x444) returned 0x1 [0097.353] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be400) returned 1 [0097.353] GetFileType (hFile=0x444) returned 0x1 [0097.353] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be628 | out: lpFileSizeHigh=0x3be628*=0x0) returned 0x356 [0097.353] ReadFile (in: hFile=0x444, lpBuffer=0x21959e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be558, lpOverlapped=0x0 | out: lpBuffer=0x21959e8*, lpNumberOfBytesRead=0x3be558*=0x356, lpOverlapped=0x0) returned 1 [0097.377] CloseHandle (hObject=0x444) returned 1 [0097.403] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\dasherSettingSchema.json", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\dasherSettingSchema.json", lpFilePart=0x0) returned 0x8e [0097.403] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0097.403] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\dasherSettingSchema.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\dashersettingschema.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0097.406] GetFileType (hFile=0x444) returned 0x1 [0097.406] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be400) returned 1 [0097.406] GetFileType (hFile=0x444) returned 0x1 [0097.406] WriteFile (in: hFile=0x444, lpBuffer=0x220db50*, nNumberOfBytesToWrite=0x360, lpNumberOfBytesWritten=0x3be468, lpOverlapped=0x0 | out: lpBuffer=0x220db50*, lpNumberOfBytesWritten=0x3be468*=0x360, lpOverlapped=0x0) returned 1 [0097.408] CloseHandle (hObject=0x444) returned 1 [0097.408] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\dasherSettingSchema.json", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\dasherSettingSchema.json", lpFilePart=0x0) returned 0x8e [0097.408] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\dasherSettingSchema.json.xuy", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\dasherSettingSchema.json.xuy", lpFilePart=0x0) returned 0x92 [0097.408] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0097.408] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\dasherSettingSchema.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\dashersettingschema.json"), fInfoLevelId=0x0, lpFileInformation=0x3be670 | out: lpFileInformation=0x3be670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb864bbb9, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb864b38e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x25e8dd4a, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x360)) returned 1 [0097.408] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0097.408] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\dasherSettingSchema.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\dashersettingschema.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\dasherSettingSchema.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\dashersettingschema.json.xuy")) returned 1 [0097.410] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\eventpage_bin_prod.js", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\eventpage_bin_prod.js", lpFilePart=0x0) returned 0x8b [0097.410] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0097.410] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\eventpage_bin_prod.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\eventpage_bin_prod.js"), fInfoLevelId=0x0, lpFileInformation=0x220ef60 | out: lpFileInformation=0x220ef60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb864bbb9, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb864b38e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x5b6c)) returned 1 [0097.412] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0097.412] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\eventpage_bin_prod.js", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\eventpage_bin_prod.js", lpFilePart=0x0) returned 0x8b [0097.412] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0097.413] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\eventpage_bin_prod.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\eventpage_bin_prod.js"), fInfoLevelId=0x0, lpFileInformation=0x220f140 | out: lpFileInformation=0x220f140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb864bbb9, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb864b38e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x5b6c)) returned 1 [0097.413] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0097.413] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\eventpage_bin_prod.js", nBufferLength=0x105, lpBuffer=0x3be040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\eventpage_bin_prod.js", lpFilePart=0x0) returned 0x8b [0097.413] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0097.413] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\eventpage_bin_prod.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\eventpage_bin_prod.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0097.414] GetFileType (hFile=0x444) returned 0x1 [0097.414] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be490) returned 1 [0097.414] GetFileType (hFile=0x444) returned 0x1 [0097.414] ReadFile (in: hFile=0x444, lpBuffer=0x2211630, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5a8, lpOverlapped=0x0 | out: lpBuffer=0x2211630*, lpNumberOfBytesRead=0x3be5a8*=0x1000, lpOverlapped=0x0) returned 1 [0097.463] CloseHandle (hObject=0x444) returned 1 [0097.463] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\eventpage_bin_prod.js", nBufferLength=0x105, lpBuffer=0x3be040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\eventpage_bin_prod.js", lpFilePart=0x0) returned 0x8b [0097.463] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0097.463] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\eventpage_bin_prod.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\eventpage_bin_prod.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0097.464] GetFileType (hFile=0x444) returned 0x1 [0097.464] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be490) returned 1 [0097.464] GetFileType (hFile=0x444) returned 0x1 [0097.464] WriteFile (in: hFile=0x444, lpBuffer=0x220f300*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be658, lpOverlapped=0x0 | out: lpBuffer=0x220f300*, lpNumberOfBytesWritten=0x3be658*=0x2000, lpOverlapped=0x0) returned 1 [0097.464] CloseHandle (hObject=0x444) returned 1 [0097.465] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\eventpage_bin_prod.js", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\eventpage_bin_prod.js", lpFilePart=0x0) returned 0x8b [0097.465] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\eventpage_bin_prod.js.xuy", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\eventpage_bin_prod.js.xuy", lpFilePart=0x0) returned 0x8f [0097.465] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0097.465] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\eventpage_bin_prod.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\eventpage_bin_prod.js"), fInfoLevelId=0x0, lpFileInformation=0x3be670 | out: lpFileInformation=0x3be670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb864bbb9, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb864b38e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x25f002d3, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x5b6c)) returned 1 [0097.465] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0097.465] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\eventpage_bin_prod.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\eventpage_bin_prod.js"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\eventpage_bin_prod.js.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\eventpage_bin_prod.js.xuy")) returned 1 [0097.471] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\manifest.json", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\manifest.json", lpFilePart=0x0) returned 0x83 [0097.471] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0097.471] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\manifest.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\manifest.json"), fInfoLevelId=0x0, lpFileInformation=0x228dbf8 | out: lpFileInformation=0x228dbf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7809515, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb864b38e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0xb8910996, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x5b1)) returned 1 [0097.471] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0097.471] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\manifest.json", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\manifest.json", lpFilePart=0x0) returned 0x83 [0097.472] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0097.472] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\manifest.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\manifest.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0097.472] GetFileType (hFile=0x444) returned 0x1 [0097.472] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be400) returned 1 [0097.472] GetFileType (hFile=0x444) returned 0x1 [0097.472] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be628 | out: lpFileSizeHigh=0x3be628*=0x0) returned 0x5b1 [0097.472] ReadFile (in: hFile=0x444, lpBuffer=0x228e548, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be558, lpOverlapped=0x0 | out: lpBuffer=0x228e548*, lpNumberOfBytesRead=0x3be558*=0x5b1, lpOverlapped=0x0) returned 1 [0097.479] CloseHandle (hObject=0x444) returned 1 [0097.509] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\manifest.json", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\manifest.json", lpFilePart=0x0) returned 0x83 [0097.509] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0097.509] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\manifest.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\manifest.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0097.511] GetFileType (hFile=0x444) returned 0x1 [0097.511] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be400) returned 1 [0097.511] GetFileType (hFile=0x444) returned 0x1 [0097.511] WriteFile (in: hFile=0x444, lpBuffer=0x2307260*, nNumberOfBytesToWrite=0x5c0, lpNumberOfBytesWritten=0x3be468, lpOverlapped=0x0 | out: lpBuffer=0x2307260*, lpNumberOfBytesWritten=0x3be468*=0x5c0, lpOverlapped=0x0) returned 1 [0097.513] CloseHandle (hObject=0x444) returned 1 [0097.513] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\manifest.json", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\manifest.json", lpFilePart=0x0) returned 0x83 [0097.513] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\manifest.json.xuy", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\manifest.json.xuy", lpFilePart=0x0) returned 0x87 [0097.513] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0097.516] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\manifest.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\manifest.json"), fInfoLevelId=0x0, lpFileInformation=0x3be670 | out: lpFileInformation=0x3be670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7809515, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb864b38e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x25f72aaf, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x5c0)) returned 1 [0097.516] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0097.516] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\manifest.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\manifest.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\manifest.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\manifest.json.xuy")) returned 1 [0097.518] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\page_embed_script.js", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\page_embed_script.js", lpFilePart=0x0) returned 0x8a [0097.518] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0097.518] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\page_embed_script.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\page_embed_script.js"), fInfoLevelId=0x0, lpFileInformation=0x2308628 | out: lpFileInformation=0x2308628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb864bbb9, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb864b38e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1 [0097.518] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0097.519] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\page_embed_script.js", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\page_embed_script.js", lpFilePart=0x0) returned 0x8a [0097.519] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0097.519] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\page_embed_script.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\page_embed_script.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0097.519] GetFileType (hFile=0x444) returned 0x1 [0097.519] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be400) returned 1 [0097.519] GetFileType (hFile=0x444) returned 0x1 [0097.519] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be628 | out: lpFileSizeHigh=0x3be628*=0x0) returned 0xe0 [0097.519] ReadFile (in: hFile=0x444, lpBuffer=0x2308ae0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be558, lpOverlapped=0x0 | out: lpBuffer=0x2308ae0*, lpNumberOfBytesRead=0x3be558*=0xe0, lpOverlapped=0x0) returned 1 [0097.521] CloseHandle (hObject=0x444) returned 1 [0097.666] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\page_embed_script.js", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\page_embed_script.js", lpFilePart=0x0) returned 0x8a [0097.666] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0097.666] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\page_embed_script.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\page_embed_script.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0097.668] GetFileType (hFile=0x444) returned 0x1 [0097.668] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be400) returned 1 [0097.668] GetFileType (hFile=0x444) returned 0x1 [0097.668] WriteFile (in: hFile=0x444, lpBuffer=0x2182568*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x3be468, lpOverlapped=0x0 | out: lpBuffer=0x2182568*, lpNumberOfBytesWritten=0x3be468*=0xf0, lpOverlapped=0x0) returned 1 [0097.670] CloseHandle (hObject=0x444) returned 1 [0097.670] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\page_embed_script.js", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\page_embed_script.js", lpFilePart=0x0) returned 0x8a [0097.670] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\page_embed_script.js.xuy", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\page_embed_script.js.xuy", lpFilePart=0x0) returned 0x8e [0097.670] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0097.670] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\page_embed_script.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\page_embed_script.js"), fInfoLevelId=0x0, lpFileInformation=0x3be670 | out: lpFileInformation=0x3be670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb864bbb9, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb864b38e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x26116480, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xf0)) returned 1 [0097.670] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0097.671] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\page_embed_script.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\page_embed_script.js"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\page_embed_script.js.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\page_embed_script.js.xuy")) returned 1 [0097.672] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0097.672] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales", nBufferLength=0x105, lpBuffer=0x3be0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales", lpFilePart=0x0) returned 0x7e [0097.672] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\", nBufferLength=0x105, lpBuffer=0x3be060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\", lpFilePart=0x0) returned 0x7f [0097.673] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\*", lpFindFileData=0x3be270 | out: lpFindFileData=0x3be270) returned 0x5d75b0 [0097.688] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0097.689] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0097.689] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0097.690] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0097.690] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0097.690] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0097.690] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0097.690] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0097.690] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0097.691] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0097.691] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0097.691] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0097.691] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0097.691] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0097.692] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0097.692] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0097.692] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0097.692] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0097.692] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0097.692] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0097.692] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0097.693] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0097.693] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0097.693] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0097.693] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0097.693] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0097.693] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0097.693] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0097.694] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0097.694] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0097.694] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0097.694] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0097.694] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0097.694] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0097.694] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0097.695] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0097.695] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0097.695] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0097.695] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0097.695] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0097.697] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0097.697] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0097.697] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0097.697] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0097.698] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0097.698] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0097.698] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0097.698] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0097.698] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0097.699] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0097.699] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0097.699] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0097.699] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0097.699] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0097.699] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0097.699] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0097.700] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0097.700] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0097.700] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0097.700] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0097.700] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0097.700] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0097.701] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0097.701] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0097.701] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0097.701] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0097.701] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0097.702] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0097.702] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0097.702] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0097.702] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 0 [0097.702] FindClose (in: hFindFile=0x5d75b0 | out: hFindFile=0x5d75b0) returned 1 [0097.703] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0097.703] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0097.703] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0097.703] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales", nBufferLength=0x105, lpBuffer=0x3be0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales", lpFilePart=0x0) returned 0x7e [0097.703] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\", nBufferLength=0x105, lpBuffer=0x3be060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\", lpFilePart=0x0) returned 0x7f [0097.704] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\*", lpFindFileData=0x3be270 | out: lpFindFileData=0x3be270) returned 0x5d7d30 [0097.704] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0097.705] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0097.705] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0097.705] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0097.705] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0097.705] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0097.705] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0097.705] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0097.706] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0097.706] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0097.706] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0097.706] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0097.706] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0097.706] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0097.706] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0097.706] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0097.706] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0097.706] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0097.707] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0097.707] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0097.707] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0097.707] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0097.707] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0097.707] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0097.707] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0097.707] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0097.707] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0097.708] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0097.708] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0097.708] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0097.708] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0097.708] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0097.708] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0097.708] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0097.708] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0097.709] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0097.709] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0097.709] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0097.709] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0097.709] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0097.709] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0097.709] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0097.709] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0097.709] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0097.710] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0097.710] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0097.710] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0097.710] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0097.710] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0097.710] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0097.710] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0097.710] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0097.710] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0097.710] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0097.711] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0097.711] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0097.711] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0097.711] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0097.711] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0097.711] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0097.711] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0097.711] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0097.711] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0097.711] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0097.711] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0097.711] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0097.711] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0097.711] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0097.711] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0097.711] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0097.711] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 0 [0097.711] FindClose (in: hFindFile=0x5d7d30 | out: hFindFile=0x5d7d30) returned 1 [0097.712] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0097.712] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0097.712] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0097.712] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\af", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\af", lpFilePart=0x0) returned 0x81 [0097.712] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\af\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\af\\", lpFilePart=0x0) returned 0x82 [0097.713] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\af\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7370 [0097.713] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0097.713] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0097.714] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0097.714] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0097.714] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0097.714] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0097.714] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0097.714] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\af", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\af", lpFilePart=0x0) returned 0x81 [0097.714] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\af\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\af\\", lpFilePart=0x0) returned 0x82 [0097.714] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\af\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7c70 [0097.714] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0097.714] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0097.714] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0097.714] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0097.714] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0097.714] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0097.714] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\af\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\af\\messages.json", lpFilePart=0x0) returned 0x8f [0097.715] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0097.715] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\af\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\af\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x21a0bc0 | out: lpFileInformation=0x21a0bc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7be3b7f, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb7be887e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x84)) returned 1 [0097.715] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0097.715] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\af\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\af\\messages.json", lpFilePart=0x0) returned 0x8f [0097.715] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0097.715] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\af\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\af\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0097.715] GetFileType (hFile=0x444) returned 0x1 [0097.715] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0097.715] GetFileType (hFile=0x444) returned 0x1 [0097.715] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x84 [0097.715] ReadFile (in: hFile=0x444, lpBuffer=0x21a1010, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x21a1010*, lpNumberOfBytesRead=0x3be478*=0x84, lpOverlapped=0x0) returned 1 [0097.721] CloseHandle (hObject=0x444) returned 1 [0097.738] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\af\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\af\\messages.json", lpFilePart=0x0) returned 0x8f [0097.738] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0097.738] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\af\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\af\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0097.740] GetFileType (hFile=0x444) returned 0x1 [0097.741] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0097.741] GetFileType (hFile=0x444) returned 0x1 [0097.741] WriteFile (in: hFile=0x444, lpBuffer=0x22182b8*, nNumberOfBytesToWrite=0x90, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x22182b8*, lpNumberOfBytesWritten=0x3be388*=0x90, lpOverlapped=0x0) returned 1 [0097.744] CloseHandle (hObject=0x444) returned 1 [0097.744] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\af\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\af\\messages.json", lpFilePart=0x0) returned 0x8f [0097.744] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\af\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\af\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0097.744] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0097.744] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\af\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\af\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7be3b7f, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb7be887e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x261aed9e, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x90)) returned 1 [0097.744] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0097.744] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\af\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\af\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\af\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\af\\messages.json.xuy")) returned 1 [0097.746] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0097.746] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\am", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\am", lpFilePart=0x0) returned 0x81 [0097.746] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\am\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\am\\", lpFilePart=0x0) returned 0x82 [0097.746] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\am\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7d90 [0097.750] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0097.750] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0097.750] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0097.750] FindClose (in: hFindFile=0x5d7d90 | out: hFindFile=0x5d7d90) returned 1 [0097.750] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0097.750] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0097.750] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0097.750] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\am", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\am", lpFilePart=0x0) returned 0x81 [0097.750] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\am\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\am\\", lpFilePart=0x0) returned 0x82 [0097.750] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\am\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d78b0 [0097.751] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0097.751] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0097.751] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0097.751] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0097.751] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0097.751] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0097.751] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\am\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\am\\messages.json", lpFilePart=0x0) returned 0x8f [0097.751] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0097.751] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\am\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\am\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x221c410 | out: lpFileInformation=0x221c410*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7c05e69, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb7c05d3e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0xb891a5b8, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x103)) returned 1 [0097.751] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0097.751] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\am\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\am\\messages.json", lpFilePart=0x0) returned 0x8f [0097.752] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0097.752] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\am\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\am\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0097.752] GetFileType (hFile=0x444) returned 0x1 [0097.752] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0097.752] GetFileType (hFile=0x444) returned 0x1 [0097.752] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x103 [0097.752] ReadFile (in: hFile=0x444, lpBuffer=0x221c8e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x221c8e0*, lpNumberOfBytesRead=0x3be478*=0x103, lpOverlapped=0x0) returned 1 [0097.753] CloseHandle (hObject=0x444) returned 1 [0097.770] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\am\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\am\\messages.json", lpFilePart=0x0) returned 0x8f [0097.771] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0097.771] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\am\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\am\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0097.773] GetFileType (hFile=0x444) returned 0x1 [0097.773] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0097.773] GetFileType (hFile=0x444) returned 0x1 [0097.773] WriteFile (in: hFile=0x444, lpBuffer=0x2293ea0*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x2293ea0*, lpNumberOfBytesWritten=0x3be388*=0x110, lpOverlapped=0x0) returned 1 [0097.774] CloseHandle (hObject=0x444) returned 1 [0097.774] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\am\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\am\\messages.json", lpFilePart=0x0) returned 0x8f [0097.774] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\am\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\am\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0097.774] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0097.774] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\am\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\am\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7c05e69, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb7c05d3e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x261fb27c, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x110)) returned 1 [0097.774] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0097.774] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\am\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\am\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\am\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\am\\messages.json.xuy")) returned 1 [0097.776] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0097.776] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ar", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ar", lpFilePart=0x0) returned 0x81 [0097.776] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ar\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ar\\", lpFilePart=0x0) returned 0x82 [0097.776] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ar\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d81b0 [0097.776] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0097.776] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0097.776] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0097.776] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0097.777] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0097.777] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0097.777] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0097.777] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ar", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ar", lpFilePart=0x0) returned 0x81 [0097.777] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ar\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ar\\", lpFilePart=0x0) returned 0x82 [0097.777] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ar\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d78b0 [0097.777] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0097.777] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0097.777] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0097.777] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0097.777] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0097.777] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0097.777] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ar\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ar\\messages.json", lpFilePart=0x0) returned 0x8f [0097.777] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0097.777] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ar\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ar\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x2297ff8 | out: lpFileInformation=0x2297ff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7cdf31a, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb7cf786e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0xb891a5b8, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xed)) returned 1 [0097.778] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0097.778] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ar\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ar\\messages.json", lpFilePart=0x0) returned 0x8f [0097.778] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0097.778] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ar\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ar\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0097.778] GetFileType (hFile=0x444) returned 0x1 [0097.778] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0097.778] GetFileType (hFile=0x444) returned 0x1 [0097.778] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xed [0097.778] ReadFile (in: hFile=0x444, lpBuffer=0x22984b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x22984b0*, lpNumberOfBytesRead=0x3be478*=0xed, lpOverlapped=0x0) returned 1 [0097.780] CloseHandle (hObject=0x444) returned 1 [0097.797] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ar\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ar\\messages.json", lpFilePart=0x0) returned 0x8f [0097.797] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0097.797] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ar\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ar\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0097.799] GetFileType (hFile=0x444) returned 0x1 [0097.799] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0097.799] GetFileType (hFile=0x444) returned 0x1 [0097.799] WriteFile (in: hFile=0x444, lpBuffer=0x230f810*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x230f810*, lpNumberOfBytesWritten=0x3be388*=0xf0, lpOverlapped=0x0) returned 1 [0097.800] CloseHandle (hObject=0x444) returned 1 [0097.800] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ar\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ar\\messages.json", lpFilePart=0x0) returned 0x8f [0097.800] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ar\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ar\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0097.800] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0097.800] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ar\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ar\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7cdf31a, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb7cf786e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x262476e1, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xf0)) returned 1 [0097.800] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0097.800] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ar\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ar\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ar\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ar\\messages.json.xuy")) returned 1 [0097.801] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0097.802] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\az", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\az", lpFilePart=0x0) returned 0x81 [0097.802] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\az\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\az\\", lpFilePart=0x0) returned 0x82 [0097.802] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\az\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7f10 [0097.804] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0097.804] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0097.804] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0097.804] FindClose (in: hFindFile=0x5d7f10 | out: hFindFile=0x5d7f10) returned 1 [0097.804] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0097.804] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0097.804] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0097.805] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\az", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\az", lpFilePart=0x0) returned 0x81 [0097.805] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\az\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\az\\", lpFilePart=0x0) returned 0x82 [0097.805] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\az\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7370 [0097.805] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0097.805] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0097.805] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0097.805] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0097.805] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0097.805] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0097.805] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\az\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\az\\messages.json", lpFilePart=0x0) returned 0x8f [0097.805] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0097.806] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\az\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\az\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x2313968 | out: lpFileInformation=0x2313968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb81891f3, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb8188f5e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0xa7)) returned 1 [0097.806] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0097.806] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\az\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\az\\messages.json", lpFilePart=0x0) returned 0x8f [0097.806] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0097.806] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\az\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\az\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0097.806] GetFileType (hFile=0x444) returned 0x1 [0097.806] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0097.806] GetFileType (hFile=0x444) returned 0x1 [0097.806] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xa7 [0097.806] ReadFile (in: hFile=0x444, lpBuffer=0x2313dd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x2313dd8*, lpNumberOfBytesRead=0x3be478*=0xa7, lpOverlapped=0x0) returned 1 [0097.808] CloseHandle (hObject=0x444) returned 1 [0097.866] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\az\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\az\\messages.json", lpFilePart=0x0) returned 0x8f [0097.866] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0097.866] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\az\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\az\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0097.873] GetFileType (hFile=0x444) returned 0x1 [0097.873] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0097.873] GetFileType (hFile=0x444) returned 0x1 [0097.873] WriteFile (in: hFile=0x444, lpBuffer=0x2190ba8*, nNumberOfBytesToWrite=0xb0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x2190ba8*, lpNumberOfBytesWritten=0x3be388*=0xb0, lpOverlapped=0x0) returned 1 [0097.874] CloseHandle (hObject=0x444) returned 1 [0097.874] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\az\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\az\\messages.json", lpFilePart=0x0) returned 0x8f [0097.875] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\az\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\az\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0097.875] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0097.875] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\az\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\az\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb81891f3, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb8188f5e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x263065f7, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xb0)) returned 1 [0097.875] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0097.875] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\az\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\az\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\az\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\az\\messages.json.xuy")) returned 1 [0097.876] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0097.876] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\bg", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\bg", lpFilePart=0x0) returned 0x81 [0097.876] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\bg\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\bg\\", lpFilePart=0x0) returned 0x82 [0097.876] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\bg\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d78b0 [0097.877] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0097.877] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0097.877] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0097.877] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0097.877] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0097.877] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0097.877] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0097.877] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\bg", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\bg", lpFilePart=0x0) returned 0x81 [0097.877] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\bg\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\bg\\", lpFilePart=0x0) returned 0x82 [0097.877] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\bg\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7370 [0097.878] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0097.878] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0097.878] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0097.878] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0097.878] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0097.878] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0097.878] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\bg\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\bg\\messages.json", lpFilePart=0x0) returned 0x8f [0097.878] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0097.878] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\bg\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\bg\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x2194d00 | out: lpFileInformation=0x2194d00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb828498b, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb82894ee, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0xb891cce7, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x114)) returned 1 [0097.879] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0097.879] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\bg\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\bg\\messages.json", lpFilePart=0x0) returned 0x8f [0097.879] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0097.879] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\bg\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\bg\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0097.879] GetFileType (hFile=0x444) returned 0x1 [0097.879] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0097.879] GetFileType (hFile=0x444) returned 0x1 [0097.879] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x114 [0097.880] ReadFile (in: hFile=0x444, lpBuffer=0x21951e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x21951e0*, lpNumberOfBytesRead=0x3be478*=0x114, lpOverlapped=0x0) returned 1 [0097.882] CloseHandle (hObject=0x444) returned 1 [0097.899] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\bg\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\bg\\messages.json", lpFilePart=0x0) returned 0x8f [0097.899] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0097.899] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\bg\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\bg\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0097.901] GetFileType (hFile=0x444) returned 0x1 [0097.901] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0097.901] GetFileType (hFile=0x444) returned 0x1 [0097.901] WriteFile (in: hFile=0x444, lpBuffer=0x220c7f0*, nNumberOfBytesToWrite=0x120, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x220c7f0*, lpNumberOfBytesWritten=0x3be388*=0x120, lpOverlapped=0x0) returned 1 [0097.902] CloseHandle (hObject=0x444) returned 1 [0097.902] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\bg\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\bg\\messages.json", lpFilePart=0x0) returned 0x8f [0097.902] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\bg\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\bg\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0097.903] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0097.903] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\bg\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\bg\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb828498b, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb82894ee, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2632c957, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x120)) returned 1 [0097.903] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0097.903] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\bg\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\bg\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\bg\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\bg\\messages.json.xuy")) returned 1 [0097.904] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0097.904] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\bn", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\bn", lpFilePart=0x0) returned 0x81 [0097.905] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\bn\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\bn\\", lpFilePart=0x0) returned 0x82 [0097.905] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\bn\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d81b0 [0097.905] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0097.905] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0097.905] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0097.905] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0097.905] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0097.905] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0097.905] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0097.906] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\bn", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\bn", lpFilePart=0x0) returned 0x81 [0097.906] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\bn\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\bn\\", lpFilePart=0x0) returned 0x82 [0097.906] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\bn\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7a90 [0097.906] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0097.906] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0097.906] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0097.906] FindClose (in: hFindFile=0x5d7a90 | out: hFindFile=0x5d7a90) returned 1 [0097.906] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0097.906] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0097.906] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\bn\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\bn\\messages.json", lpFilePart=0x0) returned 0x8f [0097.907] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0097.907] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\bn\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\bn\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x2210948 | out: lpFileInformation=0x2210948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb829a91d, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb829a65e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0xb891cce7, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x14b)) returned 1 [0097.907] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0097.907] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\bn\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\bn\\messages.json", lpFilePart=0x0) returned 0x8f [0097.907] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0097.907] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\bn\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\bn\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0097.907] GetFileType (hFile=0x444) returned 0x1 [0097.907] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0097.907] GetFileType (hFile=0x444) returned 0x1 [0097.907] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x14b [0097.907] ReadFile (in: hFile=0x444, lpBuffer=0x2210e60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x2210e60*, lpNumberOfBytesRead=0x3be478*=0x14b, lpOverlapped=0x0) returned 1 [0097.908] CloseHandle (hObject=0x444) returned 1 [0097.937] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\bn\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\bn\\messages.json", lpFilePart=0x0) returned 0x8f [0097.937] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0097.937] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\bn\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\bn\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0097.939] GetFileType (hFile=0x444) returned 0x1 [0097.939] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0097.939] GetFileType (hFile=0x444) returned 0x1 [0097.939] WriteFile (in: hFile=0x444, lpBuffer=0x2288558*, nNumberOfBytesToWrite=0x150, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x2288558*, lpNumberOfBytesWritten=0x3be388*=0x150, lpOverlapped=0x0) returned 1 [0097.940] CloseHandle (hObject=0x444) returned 1 [0097.940] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\bn\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\bn\\messages.json", lpFilePart=0x0) returned 0x8f [0097.940] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\bn\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\bn\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0097.941] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0097.941] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\bn\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\bn\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb829a91d, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb829a65e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2639eb8d, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x150)) returned 1 [0097.941] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0097.941] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\bn\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\bn\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\bn\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\bn\\messages.json.xuy")) returned 1 [0097.943] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0097.943] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ca", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ca", lpFilePart=0x0) returned 0x81 [0097.943] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ca\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ca\\", lpFilePart=0x0) returned 0x82 [0097.943] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ca\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d81b0 [0097.943] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0097.944] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0097.944] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0097.944] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0097.944] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0097.944] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0097.944] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0097.944] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ca", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ca", lpFilePart=0x0) returned 0x81 [0097.944] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ca\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ca\\", lpFilePart=0x0) returned 0x82 [0097.944] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ca\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7a30 [0097.944] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0097.945] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0097.945] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0097.945] FindClose (in: hFindFile=0x5d7a30 | out: hFindFile=0x5d7a30) returned 1 [0097.945] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0097.945] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0097.945] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ca\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ca\\messages.json", lpFilePart=0x0) returned 0x8f [0097.945] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0097.945] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ca\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ca\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x228c6b0 | out: lpFileInformation=0x228c6b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb82aba84, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb82b2cfe, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0xb891cce7, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xcf)) returned 1 [0097.948] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0097.948] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ca\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ca\\messages.json", lpFilePart=0x0) returned 0x8f [0097.948] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0097.948] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ca\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ca\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0097.948] GetFileType (hFile=0x444) returned 0x1 [0097.948] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0097.948] GetFileType (hFile=0x444) returned 0x1 [0097.948] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xcf [0097.948] ReadFile (in: hFile=0x444, lpBuffer=0x228cb48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x228cb48*, lpNumberOfBytesRead=0x3be478*=0xcf, lpOverlapped=0x0) returned 1 [0097.949] CloseHandle (hObject=0x444) returned 1 [0097.989] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ca\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ca\\messages.json", lpFilePart=0x0) returned 0x8f [0097.989] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0097.989] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ca\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ca\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0097.992] GetFileType (hFile=0x444) returned 0x1 [0097.992] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0097.992] GetFileType (hFile=0x444) returned 0x1 [0097.992] WriteFile (in: hFile=0x444, lpBuffer=0x2303e68*, nNumberOfBytesToWrite=0xd0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x2303e68*, lpNumberOfBytesWritten=0x3be388*=0xd0, lpOverlapped=0x0) returned 1 [0097.993] CloseHandle (hObject=0x444) returned 1 [0097.993] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ca\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ca\\messages.json", lpFilePart=0x0) returned 0x8f [0097.993] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ca\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ca\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0097.993] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0097.993] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ca\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ca\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb82aba84, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb82b2cfe, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x264113e4, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xd0)) returned 1 [0097.994] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0097.994] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ca\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ca\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ca\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ca\\messages.json.xuy")) returned 1 [0097.995] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0097.996] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\cs", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\cs", lpFilePart=0x0) returned 0x81 [0097.996] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\cs\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\cs\\", lpFilePart=0x0) returned 0x82 [0097.996] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\cs\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7c70 [0097.996] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0097.997] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0097.997] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0097.997] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0097.997] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0097.997] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0097.997] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0097.997] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\cs", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\cs", lpFilePart=0x0) returned 0x81 [0097.999] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\cs\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\cs\\", lpFilePart=0x0) returned 0x82 [0097.999] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\cs\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7370 [0097.999] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0097.999] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0098.000] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0098.000] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0098.000] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0098.000] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0098.000] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\cs\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\cs\\messages.json", lpFilePart=0x0) returned 0x8f [0098.000] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0098.000] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\cs\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\cs\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x2307fc0 | out: lpFileInformation=0x2307fc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb82bf319, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb82bf04e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0xb891cce7, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xad)) returned 1 [0098.001] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0098.001] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\cs\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\cs\\messages.json", lpFilePart=0x0) returned 0x8f [0098.001] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0098.001] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\cs\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\cs\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0098.001] GetFileType (hFile=0x444) returned 0x1 [0098.001] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0098.002] GetFileType (hFile=0x444) returned 0x1 [0098.002] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xad [0098.002] ReadFile (in: hFile=0x444, lpBuffer=0x2308438, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x2308438*, lpNumberOfBytesRead=0x3be478*=0xad, lpOverlapped=0x0) returned 1 [0098.004] CloseHandle (hObject=0x444) returned 1 [0098.073] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\cs\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\cs\\messages.json", lpFilePart=0x0) returned 0x8f [0098.073] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0098.073] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\cs\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\cs\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0098.077] GetFileType (hFile=0x444) returned 0x1 [0098.077] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0098.077] GetFileType (hFile=0x444) returned 0x1 [0098.078] WriteFile (in: hFile=0x444, lpBuffer=0x2180070*, nNumberOfBytesToWrite=0xb0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x2180070*, lpNumberOfBytesWritten=0x3be388*=0xb0, lpOverlapped=0x0) returned 1 [0098.079] CloseHandle (hObject=0x444) returned 1 [0098.079] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\cs\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\cs\\messages.json", lpFilePart=0x0) returned 0x8f [0098.079] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\cs\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\cs\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0098.079] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0098.079] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\cs\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\cs\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb82bf319, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb82bf04e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x264f61c7, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xb0)) returned 1 [0098.079] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0098.079] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\cs\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\cs\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\cs\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\cs\\messages.json.xuy")) returned 1 [0098.081] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0098.081] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\da", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\da", lpFilePart=0x0) returned 0x81 [0098.081] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\da\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\da\\", lpFilePart=0x0) returned 0x82 [0098.081] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\da\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7fd0 [0098.081] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0098.082] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0098.082] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0098.082] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0098.082] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0098.082] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0098.082] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0098.082] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\da", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\da", lpFilePart=0x0) returned 0x81 [0098.082] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\da\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\da\\", lpFilePart=0x0) returned 0x82 [0098.082] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\da\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d78b0 [0098.083] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0098.083] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0098.083] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0098.083] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0098.083] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0098.083] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0098.083] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\da\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\da\\messages.json", lpFilePart=0x0) returned 0x8f [0098.084] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0098.084] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\da\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\da\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x21841c8 | out: lpFileInformation=0x21841c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb82ffc4c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb82fe7ee, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0xb891f3f0, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xac)) returned 1 [0098.084] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0098.084] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\da\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\da\\messages.json", lpFilePart=0x0) returned 0x8f [0098.084] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0098.084] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\da\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\da\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0098.084] GetFileType (hFile=0x444) returned 0x1 [0098.084] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0098.084] GetFileType (hFile=0x444) returned 0x1 [0098.084] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xac [0098.084] ReadFile (in: hFile=0x444, lpBuffer=0x2184640, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x2184640*, lpNumberOfBytesRead=0x3be478*=0xac, lpOverlapped=0x0) returned 1 [0098.086] CloseHandle (hObject=0x444) returned 1 [0098.108] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\da\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\da\\messages.json", lpFilePart=0x0) returned 0x8f [0098.108] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0098.108] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\da\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\da\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0098.110] GetFileType (hFile=0x444) returned 0x1 [0098.110] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0098.110] GetFileType (hFile=0x444) returned 0x1 [0098.110] WriteFile (in: hFile=0x444, lpBuffer=0x21fb920*, nNumberOfBytesToWrite=0xb0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x21fb920*, lpNumberOfBytesWritten=0x3be388*=0xb0, lpOverlapped=0x0) returned 1 [0098.111] CloseHandle (hObject=0x444) returned 1 [0098.111] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\da\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\da\\messages.json", lpFilePart=0x0) returned 0x8f [0098.111] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\da\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\da\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0098.111] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0098.111] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\da\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\da\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb82ffc4c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb82fe7ee, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2654261e, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xb0)) returned 1 [0098.111] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0098.111] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\da\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\da\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\da\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\da\\messages.json.xuy")) returned 1 [0098.113] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0098.113] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\de", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\de", lpFilePart=0x0) returned 0x81 [0098.113] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\de\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\de\\", lpFilePart=0x0) returned 0x82 [0098.113] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\de\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7fd0 [0098.113] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0098.114] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0098.114] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0098.114] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0098.114] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0098.114] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0098.114] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0098.114] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\de", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\de", lpFilePart=0x0) returned 0x81 [0098.114] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\de\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\de\\", lpFilePart=0x0) returned 0x82 [0098.114] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\de\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7e50 [0098.114] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0098.115] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0098.115] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0098.115] FindClose (in: hFindFile=0x5d7e50 | out: hFindFile=0x5d7e50) returned 1 [0098.115] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0098.115] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0098.115] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\de\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\de\\messages.json", lpFilePart=0x0) returned 0x8f [0098.115] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0098.115] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\de\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\de\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x21ffa78 | out: lpFileInformation=0x21ffa78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb82ffc4c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb82fe7ee, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0xb891f3f0, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xc1)) returned 1 [0098.116] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0098.116] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\de\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\de\\messages.json", lpFilePart=0x0) returned 0x8f [0098.116] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0098.116] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\de\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\de\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0098.116] GetFileType (hFile=0x444) returned 0x1 [0098.116] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0098.116] GetFileType (hFile=0x444) returned 0x1 [0098.116] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xc1 [0098.116] ReadFile (in: hFile=0x444, lpBuffer=0x21fff08, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x21fff08*, lpNumberOfBytesRead=0x3be478*=0xc1, lpOverlapped=0x0) returned 1 [0098.120] CloseHandle (hObject=0x444) returned 1 [0098.140] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\de\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\de\\messages.json", lpFilePart=0x0) returned 0x8f [0098.140] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0098.140] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\de\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\de\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0098.141] GetFileType (hFile=0x444) returned 0x1 [0098.141] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0098.142] GetFileType (hFile=0x444) returned 0x1 [0098.142] WriteFile (in: hFile=0x444, lpBuffer=0x2277230*, nNumberOfBytesToWrite=0xd0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x2277230*, lpNumberOfBytesWritten=0x3be388*=0xd0, lpOverlapped=0x0) returned 1 [0098.142] CloseHandle (hObject=0x444) returned 1 [0098.143] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\de\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\de\\messages.json", lpFilePart=0x0) returned 0x8f [0098.143] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\de\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\de\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0098.143] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0098.143] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\de\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\de\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb82ffc4c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb82fe7ee, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2658ea08, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xd0)) returned 1 [0098.143] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0098.143] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\de\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\de\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\de\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\de\\messages.json.xuy")) returned 1 [0098.144] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0098.144] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\el", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\el", lpFilePart=0x0) returned 0x81 [0098.145] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\el\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\el\\", lpFilePart=0x0) returned 0x82 [0098.145] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\el\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d78b0 [0098.147] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0098.147] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0098.148] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0098.148] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0098.148] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0098.148] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0098.148] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0098.148] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\el", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\el", lpFilePart=0x0) returned 0x81 [0098.148] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\el\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\el\\", lpFilePart=0x0) returned 0x82 [0098.148] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\el\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7550 [0098.148] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0098.148] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0098.149] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0098.149] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0098.149] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0098.149] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0098.149] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\el\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\el\\messages.json", lpFilePart=0x0) returned 0x8f [0098.149] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0098.149] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\el\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\el\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x227b388 | out: lpFileInformation=0x227b388*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb82ffc4c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb82fe7ee, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0xb891f3f0, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x12a)) returned 1 [0098.149] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0098.149] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\el\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\el\\messages.json", lpFilePart=0x0) returned 0x8f [0098.149] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0098.149] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\el\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\el\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0098.150] GetFileType (hFile=0x444) returned 0x1 [0098.150] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0098.150] GetFileType (hFile=0x444) returned 0x1 [0098.150] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x12a [0098.150] ReadFile (in: hFile=0x444, lpBuffer=0x227b880, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x227b880*, lpNumberOfBytesRead=0x3be478*=0x12a, lpOverlapped=0x0) returned 1 [0098.161] CloseHandle (hObject=0x444) returned 1 [0098.179] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\el\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\el\\messages.json", lpFilePart=0x0) returned 0x8f [0098.180] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0098.180] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\el\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\el\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0098.181] GetFileType (hFile=0x444) returned 0x1 [0098.182] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0098.182] GetFileType (hFile=0x444) returned 0x1 [0098.182] WriteFile (in: hFile=0x444, lpBuffer=0x22f2ed8*, nNumberOfBytesToWrite=0x130, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x22f2ed8*, lpNumberOfBytesWritten=0x3be388*=0x130, lpOverlapped=0x0) returned 1 [0098.183] CloseHandle (hObject=0x444) returned 1 [0098.183] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\el\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\el\\messages.json", lpFilePart=0x0) returned 0x8f [0098.183] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\el\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\el\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0098.183] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0098.183] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\el\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\el\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb82ffc4c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb82fe7ee, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x265db19e, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x130)) returned 1 [0098.183] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0098.183] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\el\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\el\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\el\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\el\\messages.json.xuy")) returned 1 [0098.185] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0098.185] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\en_GB", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\en_GB", lpFilePart=0x0) returned 0x84 [0098.185] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\en_GB\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\en_GB\\", lpFilePart=0x0) returned 0x85 [0098.185] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\en_GB\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d8090 [0098.185] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0098.186] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0098.186] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0098.186] FindClose (in: hFindFile=0x5d8090 | out: hFindFile=0x5d8090) returned 1 [0098.186] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0098.186] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0098.186] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0098.186] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\en_GB", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\en_GB", lpFilePart=0x0) returned 0x84 [0098.186] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\en_GB\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\en_GB\\", lpFilePart=0x0) returned 0x85 [0098.186] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\en_GB\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7550 [0098.187] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0098.187] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0098.187] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0098.187] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0098.187] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0098.187] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0098.187] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\en_GB\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\en_GB\\messages.json", lpFilePart=0x0) returned 0x92 [0098.188] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0098.188] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\en_GB\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\en_gb\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x22f7100 | out: lpFileInformation=0x22f7100*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb82ffc4c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb82fe7ee, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0xb891f3f0, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xb2)) returned 1 [0098.188] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0098.188] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\en_GB\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\en_GB\\messages.json", lpFilePart=0x0) returned 0x92 [0098.188] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0098.188] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\en_GB\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\en_gb\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0098.188] GetFileType (hFile=0x444) returned 0x1 [0098.188] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0098.188] GetFileType (hFile=0x444) returned 0x1 [0098.188] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xb2 [0098.188] ReadFile (in: hFile=0x444, lpBuffer=0x22f7590, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x22f7590*, lpNumberOfBytesRead=0x3be478*=0xb2, lpOverlapped=0x0) returned 1 [0098.189] CloseHandle (hObject=0x444) returned 1 [0098.263] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\en_GB\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\en_GB\\messages.json", lpFilePart=0x0) returned 0x92 [0098.263] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0098.263] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\en_GB\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\en_gb\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0098.266] GetFileType (hFile=0x444) returned 0x1 [0098.266] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0098.266] GetFileType (hFile=0x444) returned 0x1 [0098.266] WriteFile (in: hFile=0x444, lpBuffer=0x216f208*, nNumberOfBytesToWrite=0xc0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x216f208*, lpNumberOfBytesWritten=0x3be388*=0xc0, lpOverlapped=0x0) returned 1 [0098.267] CloseHandle (hObject=0x444) returned 1 [0098.267] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\en_GB\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\en_GB\\messages.json", lpFilePart=0x0) returned 0x92 [0098.267] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\en_GB\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\en_GB\\messages.json.xuy", lpFilePart=0x0) returned 0x96 [0098.267] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0098.267] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\en_GB\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\en_gb\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb82ffc4c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb82fe7ee, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x266b2ab7, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xc0)) returned 1 [0098.267] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0098.268] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\en_GB\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\en_gb\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\en_GB\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\en_gb\\messages.json.xuy")) returned 1 [0098.269] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0098.269] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\en_US", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\en_US", lpFilePart=0x0) returned 0x84 [0098.269] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\en_US\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\en_US\\", lpFilePart=0x0) returned 0x85 [0098.269] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\en_US\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d78b0 [0098.279] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0098.279] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0098.279] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0098.279] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0098.279] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0098.279] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0098.279] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0098.280] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\en_US", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\en_US", lpFilePart=0x0) returned 0x84 [0098.280] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\en_US\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\en_US\\", lpFilePart=0x0) returned 0x85 [0098.280] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\en_US\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7370 [0098.280] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0098.280] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0098.280] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0098.280] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0098.280] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0098.280] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0098.281] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\en_US\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\en_US\\messages.json", lpFilePart=0x0) returned 0x92 [0098.281] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0098.281] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\en_US\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\en_us\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x2173448 | out: lpFileInformation=0x2173448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8325e28, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb83258ee, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0xb891f3f0, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x109)) returned 1 [0098.281] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0098.281] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\en_US\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\en_US\\messages.json", lpFilePart=0x0) returned 0x92 [0098.281] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0098.281] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\en_US\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\en_us\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0098.281] GetFileType (hFile=0x444) returned 0x1 [0098.281] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0098.281] GetFileType (hFile=0x444) returned 0x1 [0098.281] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x109 [0098.281] ReadFile (in: hFile=0x444, lpBuffer=0x2173930, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x2173930*, lpNumberOfBytesRead=0x3be478*=0x109, lpOverlapped=0x0) returned 1 [0098.283] CloseHandle (hObject=0x444) returned 1 [0098.314] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\en_US\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\en_US\\messages.json", lpFilePart=0x0) returned 0x92 [0098.314] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0098.314] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\en_US\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\en_us\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0098.316] GetFileType (hFile=0x444) returned 0x1 [0098.316] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0098.316] GetFileType (hFile=0x444) returned 0x1 [0098.316] WriteFile (in: hFile=0x444, lpBuffer=0x21eaef0*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x21eaef0*, lpNumberOfBytesWritten=0x3be388*=0x110, lpOverlapped=0x0) returned 1 [0098.317] CloseHandle (hObject=0x444) returned 1 [0098.318] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\en_US\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\en_US\\messages.json", lpFilePart=0x0) returned 0x92 [0098.318] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\en_US\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\en_US\\messages.json.xuy", lpFilePart=0x0) returned 0x96 [0098.318] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0098.318] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\en_US\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\en_us\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8325e28, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb83258ee, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x26725584, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x110)) returned 1 [0098.318] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0098.318] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\en_US\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\en_us\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\en_US\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\en_us\\messages.json.xuy")) returned 1 [0098.320] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0098.320] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\es", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\es", lpFilePart=0x0) returned 0x81 [0098.320] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\es\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\es\\", lpFilePart=0x0) returned 0x82 [0098.326] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\es\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7cd0 [0098.326] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0098.327] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0098.327] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0098.327] FindClose (in: hFindFile=0x5d7cd0 | out: hFindFile=0x5d7cd0) returned 1 [0098.327] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0098.327] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0098.327] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0098.327] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\es", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\es", lpFilePart=0x0) returned 0x81 [0098.327] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\es\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\es\\", lpFilePart=0x0) returned 0x82 [0098.327] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\es\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7d90 [0098.327] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0098.328] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0098.328] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0098.328] FindClose (in: hFindFile=0x5d7d90 | out: hFindFile=0x5d7d90) returned 1 [0098.328] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0098.328] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0098.328] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\es\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\es\\messages.json", lpFilePart=0x0) returned 0x8f [0098.328] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0098.328] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\es\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\es\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x21ef060 | out: lpFileInformation=0x21ef060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8325e28, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb83258ee, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0xb8921b09, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xcc)) returned 1 [0098.329] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0098.329] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\es\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\es\\messages.json", lpFilePart=0x0) returned 0x8f [0098.329] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0098.329] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\es\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\es\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0098.329] GetFileType (hFile=0x444) returned 0x1 [0098.329] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0098.329] GetFileType (hFile=0x444) returned 0x1 [0098.329] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xcc [0098.329] ReadFile (in: hFile=0x444, lpBuffer=0x21ef4f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x21ef4f8*, lpNumberOfBytesRead=0x3be478*=0xcc, lpOverlapped=0x0) returned 1 [0098.330] CloseHandle (hObject=0x444) returned 1 [0098.362] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\es\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\es\\messages.json", lpFilePart=0x0) returned 0x8f [0098.362] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0098.362] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\es\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\es\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0098.364] GetFileType (hFile=0x444) returned 0x1 [0098.364] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0098.364] GetFileType (hFile=0x444) returned 0x1 [0098.364] WriteFile (in: hFile=0x444, lpBuffer=0x2266818*, nNumberOfBytesToWrite=0xd0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x2266818*, lpNumberOfBytesWritten=0x3be388*=0xd0, lpOverlapped=0x0) returned 1 [0098.365] CloseHandle (hObject=0x444) returned 1 [0098.365] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\es\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\es\\messages.json", lpFilePart=0x0) returned 0x8f [0098.366] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\es\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\es\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0098.366] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0098.366] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\es\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\es\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8325e28, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb83258ee, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x26797ebe, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xd0)) returned 1 [0098.366] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0098.366] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\es\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\es\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\es\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\es\\messages.json.xuy")) returned 1 [0098.367] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0098.369] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\es_419", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\es_419", lpFilePart=0x0) returned 0x85 [0098.369] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\es_419\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\es_419\\", lpFilePart=0x0) returned 0x86 [0098.369] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\es_419\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7550 [0098.371] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0098.371] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0098.372] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0098.372] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0098.372] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0098.372] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0098.372] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0098.372] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\es_419", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\es_419", lpFilePart=0x0) returned 0x85 [0098.372] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\es_419\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\es_419\\", lpFilePart=0x0) returned 0x86 [0098.372] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\es_419\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d81b0 [0098.372] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0098.372] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0098.373] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0098.373] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0098.373] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0098.373] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0098.373] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\es_419\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\es_419\\messages.json", lpFilePart=0x0) returned 0x93 [0098.373] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0098.373] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\es_419\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\es_419\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x226aa60 | out: lpFileInformation=0x226aa60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8325e28, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb83258ee, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0xb8921b09, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xe3)) returned 1 [0098.373] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0098.373] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\es_419\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\es_419\\messages.json", lpFilePart=0x0) returned 0x93 [0098.373] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0098.373] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\es_419\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\es_419\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0098.374] GetFileType (hFile=0x444) returned 0x1 [0098.374] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0098.374] GetFileType (hFile=0x444) returned 0x1 [0098.374] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xe3 [0098.374] ReadFile (in: hFile=0x444, lpBuffer=0x226af20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x226af20*, lpNumberOfBytesRead=0x3be478*=0xe3, lpOverlapped=0x0) returned 1 [0098.375] CloseHandle (hObject=0x444) returned 1 [0098.392] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\es_419\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\es_419\\messages.json", lpFilePart=0x0) returned 0x93 [0098.393] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0098.393] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\es_419\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\es_419\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0098.394] GetFileType (hFile=0x444) returned 0x1 [0098.394] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0098.394] GetFileType (hFile=0x444) returned 0x1 [0098.394] WriteFile (in: hFile=0x444, lpBuffer=0x22e2290*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x22e2290*, lpNumberOfBytesWritten=0x3be388*=0xf0, lpOverlapped=0x0) returned 1 [0098.396] CloseHandle (hObject=0x444) returned 1 [0098.396] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\es_419\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\es_419\\messages.json", lpFilePart=0x0) returned 0x93 [0098.396] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\es_419\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\es_419\\messages.json.xuy", lpFilePart=0x0) returned 0x97 [0098.396] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0098.396] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\es_419\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\es_419\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8325e28, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb83258ee, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x267e4084, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xf0)) returned 1 [0098.396] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0098.396] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\es_419\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\es_419\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\es_419\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\es_419\\messages.json.xuy")) returned 1 [0098.398] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0098.398] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\et", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\et", lpFilePart=0x0) returned 0x81 [0098.398] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\et\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\et\\", lpFilePart=0x0) returned 0x82 [0098.398] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\et\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7df0 [0098.398] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0098.398] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0098.399] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0098.399] FindClose (in: hFindFile=0x5d7df0 | out: hFindFile=0x5d7df0) returned 1 [0098.399] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0098.399] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0098.399] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0098.399] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\et", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\et", lpFilePart=0x0) returned 0x81 [0098.399] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\et\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\et\\", lpFilePart=0x0) returned 0x82 [0098.399] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\et\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7eb0 [0098.400] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0098.400] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0098.400] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0098.400] FindClose (in: hFindFile=0x5d7eb0 | out: hFindFile=0x5d7eb0) returned 1 [0098.400] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0098.400] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0098.400] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\et\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\et\\messages.json", lpFilePart=0x0) returned 0x8f [0098.400] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0098.400] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\et\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\et\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x22e6400 | out: lpFileInformation=0x22e6400*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8325e28, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb83258ee, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0xb8921b09, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xd4)) returned 1 [0098.401] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0098.401] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\et\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\et\\messages.json", lpFilePart=0x0) returned 0x8f [0098.401] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0098.401] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\et\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\et\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0098.401] GetFileType (hFile=0x444) returned 0x1 [0098.401] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0098.401] GetFileType (hFile=0x444) returned 0x1 [0098.401] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xd4 [0098.401] ReadFile (in: hFile=0x444, lpBuffer=0x22e68a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x22e68a0*, lpNumberOfBytesRead=0x3be478*=0xd4, lpOverlapped=0x0) returned 1 [0098.402] CloseHandle (hObject=0x444) returned 1 [0098.552] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\et\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\et\\messages.json", lpFilePart=0x0) returned 0x8f [0098.552] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0098.552] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\et\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\et\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0098.554] GetFileType (hFile=0x444) returned 0x1 [0098.554] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0098.554] GetFileType (hFile=0x444) returned 0x1 [0098.554] WriteFile (in: hFile=0x444, lpBuffer=0x215e590*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x215e590*, lpNumberOfBytesWritten=0x3be388*=0xe0, lpOverlapped=0x0) returned 1 [0098.556] CloseHandle (hObject=0x444) returned 1 [0098.556] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\et\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\et\\messages.json", lpFilePart=0x0) returned 0x8f [0098.556] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\et\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\et\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0098.556] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0098.556] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\et\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\et\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8325e28, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb83258ee, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x26987a7f, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1 [0098.556] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0098.556] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\et\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\et\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\et\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\et\\messages.json.xuy")) returned 1 [0098.558] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0098.558] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\eu", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\eu", lpFilePart=0x0) returned 0x81 [0098.558] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\eu\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\eu\\", lpFilePart=0x0) returned 0x82 [0098.558] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\eu\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d79d0 [0098.560] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0098.560] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0098.560] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0098.561] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0098.561] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0098.561] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0098.561] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0098.561] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\eu", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\eu", lpFilePart=0x0) returned 0x81 [0098.561] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\eu\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\eu\\", lpFilePart=0x0) returned 0x82 [0098.561] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\eu\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d78b0 [0098.561] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0098.561] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0098.562] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0098.562] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0098.562] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0098.562] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0098.562] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\eu\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\eu\\messages.json", lpFilePart=0x0) returned 0x8f [0098.562] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0098.562] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\eu\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\eu\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x21626e8 | out: lpFileInformation=0x21626e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8383075, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb8384c5e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x98)) returned 1 [0098.562] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0098.562] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\eu\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\eu\\messages.json", lpFilePart=0x0) returned 0x8f [0098.562] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0098.562] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\eu\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\eu\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0098.563] GetFileType (hFile=0x444) returned 0x1 [0098.563] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0098.563] GetFileType (hFile=0x444) returned 0x1 [0098.563] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x98 [0098.563] ReadFile (in: hFile=0x444, lpBuffer=0x2162b48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x2162b48*, lpNumberOfBytesRead=0x3be478*=0x98, lpOverlapped=0x0) returned 1 [0098.564] CloseHandle (hObject=0x444) returned 1 [0098.583] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\eu\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\eu\\messages.json", lpFilePart=0x0) returned 0x8f [0098.583] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0098.583] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\eu\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\eu\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0098.585] GetFileType (hFile=0x444) returned 0x1 [0098.585] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0098.585] GetFileType (hFile=0x444) returned 0x1 [0098.585] WriteFile (in: hFile=0x444, lpBuffer=0x21d9e08*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x21d9e08*, lpNumberOfBytesWritten=0x3be388*=0xa0, lpOverlapped=0x0) returned 1 [0098.594] CloseHandle (hObject=0x444) returned 1 [0098.594] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\eu\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\eu\\messages.json", lpFilePart=0x0) returned 0x8f [0098.594] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\eu\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\eu\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0098.595] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0098.595] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\eu\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\eu\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8383075, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb8384c5e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x269d3fac, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xa0)) returned 1 [0098.595] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0098.595] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\eu\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\eu\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\eu\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\eu\\messages.json.xuy")) returned 1 [0098.596] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0098.596] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fa", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fa", lpFilePart=0x0) returned 0x81 [0098.596] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fa\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fa\\", lpFilePart=0x0) returned 0x82 [0098.596] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fa\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7eb0 [0098.597] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0098.597] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0098.597] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0098.597] FindClose (in: hFindFile=0x5d7eb0 | out: hFindFile=0x5d7eb0) returned 1 [0098.597] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0098.597] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0098.597] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0098.597] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fa", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fa", lpFilePart=0x0) returned 0x81 [0098.597] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fa\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fa\\", lpFilePart=0x0) returned 0x82 [0098.597] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fa\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7d90 [0098.598] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0098.598] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0098.598] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0098.598] FindClose (in: hFindFile=0x5d7d90 | out: hFindFile=0x5d7d90) returned 1 [0098.598] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0098.598] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0098.598] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fa\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fa\\messages.json", lpFilePart=0x0) returned 0x8f [0098.598] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0098.599] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fa\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fa\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x21ddf60 | out: lpFileInformation=0x21ddf60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb838f3c6, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb838e89e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0xb8921b09, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xff)) returned 1 [0098.599] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0098.599] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fa\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fa\\messages.json", lpFilePart=0x0) returned 0x8f [0098.600] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0098.600] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fa\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fa\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0098.600] GetFileType (hFile=0x444) returned 0x1 [0098.600] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0098.600] GetFileType (hFile=0x444) returned 0x1 [0098.600] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xff [0098.600] ReadFile (in: hFile=0x444, lpBuffer=0x21de428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x21de428*, lpNumberOfBytesRead=0x3be478*=0xff, lpOverlapped=0x0) returned 1 [0098.601] CloseHandle (hObject=0x444) returned 1 [0098.620] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fa\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fa\\messages.json", lpFilePart=0x0) returned 0x8f [0098.621] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0098.621] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fa\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fa\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0098.623] GetFileType (hFile=0x444) returned 0x1 [0098.623] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0098.623] GetFileType (hFile=0x444) returned 0x1 [0098.623] WriteFile (in: hFile=0x444, lpBuffer=0x22557a8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x22557a8*, lpNumberOfBytesWritten=0x3be388*=0x100, lpOverlapped=0x0) returned 1 [0098.624] CloseHandle (hObject=0x444) returned 1 [0098.624] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fa\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fa\\messages.json", lpFilePart=0x0) returned 0x8f [0098.624] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fa\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fa\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0098.624] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0098.624] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fa\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fa\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb838f3c6, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb838e89e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x26a20673, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x100)) returned 1 [0098.625] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0098.625] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fa\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fa\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fa\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fa\\messages.json.xuy")) returned 1 [0098.626] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0098.626] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fi", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fi", lpFilePart=0x0) returned 0x81 [0098.626] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fi\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fi\\", lpFilePart=0x0) returned 0x82 [0098.627] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fi\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7610 [0098.628] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0098.628] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0098.629] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0098.629] FindClose (in: hFindFile=0x5d7610 | out: hFindFile=0x5d7610) returned 1 [0098.629] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0098.629] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0098.629] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0098.629] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fi", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fi", lpFilePart=0x0) returned 0x81 [0098.629] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fi\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fi\\", lpFilePart=0x0) returned 0x82 [0098.629] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fi\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d79d0 [0098.629] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0098.630] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0098.630] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0098.630] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0098.630] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0098.630] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0098.630] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fi\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fi\\messages.json", lpFilePart=0x0) returned 0x8f [0098.630] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0098.630] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x2259900 | out: lpFileInformation=0x2259900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb83b3db2, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb83b328e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0xb8924212, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xb7)) returned 1 [0098.630] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0098.630] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fi\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fi\\messages.json", lpFilePart=0x0) returned 0x8f [0098.631] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0098.631] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fi\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0098.631] GetFileType (hFile=0x444) returned 0x1 [0098.631] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0098.631] GetFileType (hFile=0x444) returned 0x1 [0098.631] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xb7 [0098.631] ReadFile (in: hFile=0x444, lpBuffer=0x2259d80, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x2259d80*, lpNumberOfBytesRead=0x3be478*=0xb7, lpOverlapped=0x0) returned 1 [0098.635] CloseHandle (hObject=0x444) returned 1 [0098.662] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fi\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fi\\messages.json", lpFilePart=0x0) returned 0x8f [0098.662] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0098.662] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fi\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0098.664] GetFileType (hFile=0x444) returned 0x1 [0098.664] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0098.664] GetFileType (hFile=0x444) returned 0x1 [0098.664] WriteFile (in: hFile=0x444, lpBuffer=0x22d1088*, nNumberOfBytesToWrite=0xc0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x22d1088*, lpNumberOfBytesWritten=0x3be388*=0xc0, lpOverlapped=0x0) returned 1 [0098.665] CloseHandle (hObject=0x444) returned 1 [0098.665] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fi\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fi\\messages.json", lpFilePart=0x0) returned 0x8f [0098.665] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fi\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fi\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0098.665] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0098.665] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb83b3db2, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb83b328e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x26a92adc, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xc0)) returned 1 [0098.666] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0098.666] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fi\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fi\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fi\\messages.json.xuy")) returned 1 [0098.667] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0098.667] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fil", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fil", lpFilePart=0x0) returned 0x82 [0098.667] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fil\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fil\\", lpFilePart=0x0) returned 0x83 [0098.667] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fil\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7370 [0098.667] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0098.668] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0098.668] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0098.668] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0098.668] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0098.668] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0098.668] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0098.668] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fil", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fil", lpFilePart=0x0) returned 0x82 [0098.668] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fil\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fil\\", lpFilePart=0x0) returned 0x83 [0098.668] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fil\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7e50 [0098.668] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0098.669] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0098.669] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0098.669] FindClose (in: hFindFile=0x5d7e50 | out: hFindFile=0x5d7e50) returned 1 [0098.669] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0098.669] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0098.669] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fil\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fil\\messages.json", lpFilePart=0x0) returned 0x90 [0098.669] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0098.669] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fil\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fil\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x22d5270 | out: lpFileInformation=0x22d5270*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb83c281c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb83c43fe, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0xb8924212, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xc7)) returned 1 [0098.669] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0098.670] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fil\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fil\\messages.json", lpFilePart=0x0) returned 0x90 [0098.670] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0098.670] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fil\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fil\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0098.670] GetFileType (hFile=0x444) returned 0x1 [0098.670] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0098.670] GetFileType (hFile=0x444) returned 0x1 [0098.670] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xc7 [0098.670] ReadFile (in: hFile=0x444, lpBuffer=0x22d5710, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x22d5710*, lpNumberOfBytesRead=0x3be478*=0xc7, lpOverlapped=0x0) returned 1 [0098.674] CloseHandle (hObject=0x444) returned 1 [0098.722] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fil\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fil\\messages.json", lpFilePart=0x0) returned 0x90 [0098.722] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0098.722] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fil\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fil\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0098.724] GetFileType (hFile=0x444) returned 0x1 [0098.724] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0098.724] GetFileType (hFile=0x444) returned 0x1 [0098.724] WriteFile (in: hFile=0x444, lpBuffer=0x214d3d0*, nNumberOfBytesToWrite=0xd0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x214d3d0*, lpNumberOfBytesWritten=0x3be388*=0xd0, lpOverlapped=0x0) returned 1 [0098.725] CloseHandle (hObject=0x444) returned 1 [0098.725] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fil\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fil\\messages.json", lpFilePart=0x0) returned 0x90 [0098.725] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fil\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fil\\messages.json.xuy", lpFilePart=0x0) returned 0x94 [0098.725] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0098.725] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fil\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fil\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb83c281c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb83c43fe, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x26b052f6, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xd0)) returned 1 [0098.726] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0098.726] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fil\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fil\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fil\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fil\\messages.json.xuy")) returned 1 [0098.727] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0098.727] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fr", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fr", lpFilePart=0x0) returned 0x81 [0098.727] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fr\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fr\\", lpFilePart=0x0) returned 0x82 [0098.727] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fr\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d78b0 [0098.729] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0098.729] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0098.729] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0098.729] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0098.729] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0098.730] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0098.730] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0098.730] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fr", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fr", lpFilePart=0x0) returned 0x81 [0098.730] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fr\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fr\\", lpFilePart=0x0) returned 0x82 [0098.730] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fr\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d81b0 [0098.730] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0098.730] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0098.730] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0098.731] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0098.731] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0098.731] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0098.731] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fr\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fr\\messages.json", lpFilePart=0x0) returned 0x8f [0098.731] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0098.731] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x2151540 | out: lpFileInformation=0x2151540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb83c7a41, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb83c6b0e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0xb8924212, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xbb)) returned 1 [0098.731] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0098.731] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fr\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fr\\messages.json", lpFilePart=0x0) returned 0x8f [0098.731] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0098.731] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fr\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0098.731] GetFileType (hFile=0x444) returned 0x1 [0098.731] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0098.731] GetFileType (hFile=0x444) returned 0x1 [0098.731] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xbb [0098.732] ReadFile (in: hFile=0x444, lpBuffer=0x21519c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x21519c8*, lpNumberOfBytesRead=0x3be478*=0xbb, lpOverlapped=0x0) returned 1 [0098.733] CloseHandle (hObject=0x444) returned 1 [0098.766] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fr\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fr\\messages.json", lpFilePart=0x0) returned 0x8f [0098.766] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0098.766] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fr\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0098.769] GetFileType (hFile=0x444) returned 0x1 [0098.769] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0098.769] GetFileType (hFile=0x444) returned 0x1 [0098.769] WriteFile (in: hFile=0x444, lpBuffer=0x21c8cc8*, nNumberOfBytesToWrite=0xc0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x21c8cc8*, lpNumberOfBytesWritten=0x3be388*=0xc0, lpOverlapped=0x0) returned 1 [0098.770] CloseHandle (hObject=0x444) returned 1 [0098.770] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fr\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fr\\messages.json", lpFilePart=0x0) returned 0x8f [0098.770] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fr\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fr\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0098.770] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0098.770] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb83c7a41, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb83c6b0e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x26b77e85, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xc0)) returned 1 [0098.770] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0098.770] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fr\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fr\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fr\\messages.json.xuy")) returned 1 [0098.772] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0098.772] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fr_CA", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fr_CA", lpFilePart=0x0) returned 0x84 [0098.772] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fr_CA\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fr_CA\\", lpFilePart=0x0) returned 0x85 [0098.772] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fr_CA\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7fd0 [0098.773] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0098.773] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0098.773] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0098.773] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0098.773] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0098.773] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0098.773] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0098.773] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fr_CA", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fr_CA", lpFilePart=0x0) returned 0x84 [0098.774] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fr_CA\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fr_CA\\", lpFilePart=0x0) returned 0x85 [0098.774] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fr_CA\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7670 [0098.774] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0098.775] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0098.775] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0098.775] FindClose (in: hFindFile=0x5d7670 | out: hFindFile=0x5d7670) returned 1 [0098.775] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0098.775] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0098.775] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fr_CA\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fr_CA\\messages.json", lpFilePart=0x0) returned 0x92 [0098.775] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0098.775] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fr_CA\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fr_ca\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x21ccef0 | out: lpFileInformation=0x21ccef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb83c7a41, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb83c6b0e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0xb8924212, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xd2)) returned 1 [0098.776] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0098.776] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fr_CA\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fr_CA\\messages.json", lpFilePart=0x0) returned 0x92 [0098.776] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0098.776] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fr_CA\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fr_ca\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0098.776] GetFileType (hFile=0x444) returned 0x1 [0098.776] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0098.776] GetFileType (hFile=0x444) returned 0x1 [0098.776] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xd2 [0098.776] ReadFile (in: hFile=0x444, lpBuffer=0x21cd3a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x21cd3a0*, lpNumberOfBytesRead=0x3be478*=0xd2, lpOverlapped=0x0) returned 1 [0098.777] CloseHandle (hObject=0x444) returned 1 [0098.795] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fr_CA\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fr_CA\\messages.json", lpFilePart=0x0) returned 0x92 [0098.795] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0098.795] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fr_CA\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fr_ca\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0098.797] GetFileType (hFile=0x444) returned 0x1 [0098.797] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0098.797] GetFileType (hFile=0x444) returned 0x1 [0098.797] WriteFile (in: hFile=0x444, lpBuffer=0x22446f0*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x22446f0*, lpNumberOfBytesWritten=0x3be388*=0xe0, lpOverlapped=0x0) returned 1 [0098.798] CloseHandle (hObject=0x444) returned 1 [0098.799] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fr_CA\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fr_CA\\messages.json", lpFilePart=0x0) returned 0x92 [0098.799] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fr_CA\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fr_CA\\messages.json.xuy", lpFilePart=0x0) returned 0x96 [0098.799] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0098.799] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fr_CA\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fr_ca\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb83c7a41, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb83c6b0e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x26bc3f0e, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1 [0098.799] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0098.799] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fr_CA\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fr_ca\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fr_CA\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fr_ca\\messages.json.xuy")) returned 1 [0098.800] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0098.800] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\gl", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\gl", lpFilePart=0x0) returned 0x81 [0098.800] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\gl\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\gl\\", lpFilePart=0x0) returned 0x82 [0098.801] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\gl\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d79d0 [0098.803] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0098.804] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0098.804] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0098.804] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0098.804] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0098.804] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0098.804] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0098.804] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\gl", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\gl", lpFilePart=0x0) returned 0x81 [0098.804] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\gl\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\gl\\", lpFilePart=0x0) returned 0x82 [0098.804] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\gl\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7af0 [0098.805] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0098.805] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0098.805] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0098.806] FindClose (in: hFindFile=0x5d7af0 | out: hFindFile=0x5d7af0) returned 1 [0098.806] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0098.806] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0098.806] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\gl\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\gl\\messages.json", lpFilePart=0x0) returned 0x8f [0098.806] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0098.806] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\gl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\gl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x2248860 | out: lpFileInformation=0x2248860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb83c7a41, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb83c6b0e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0xac)) returned 1 [0098.806] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0098.806] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\gl\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\gl\\messages.json", lpFilePart=0x0) returned 0x8f [0098.806] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0098.806] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\gl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\gl\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0098.807] GetFileType (hFile=0x444) returned 0x1 [0098.807] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0098.807] GetFileType (hFile=0x444) returned 0x1 [0098.807] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xac [0098.807] ReadFile (in: hFile=0x444, lpBuffer=0x2248cd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x2248cd8*, lpNumberOfBytesRead=0x3be478*=0xac, lpOverlapped=0x0) returned 1 [0098.808] CloseHandle (hObject=0x444) returned 1 [0098.832] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\gl\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\gl\\messages.json", lpFilePart=0x0) returned 0x8f [0098.832] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0098.832] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\gl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\gl\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0098.834] GetFileType (hFile=0x444) returned 0x1 [0098.834] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0098.834] GetFileType (hFile=0x444) returned 0x1 [0098.834] WriteFile (in: hFile=0x444, lpBuffer=0x22bffb8*, nNumberOfBytesToWrite=0xb0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x22bffb8*, lpNumberOfBytesWritten=0x3be388*=0xb0, lpOverlapped=0x0) returned 1 [0098.835] CloseHandle (hObject=0x444) returned 1 [0098.836] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\gl\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\gl\\messages.json", lpFilePart=0x0) returned 0x8f [0098.836] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\gl\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\gl\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0098.836] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0098.836] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\gl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\gl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb83c7a41, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb83c6b0e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x26c1033f, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xb0)) returned 1 [0098.836] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0098.836] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\gl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\gl\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\gl\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\gl\\messages.json.xuy")) returned 1 [0098.838] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0098.838] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\gu", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\gu", lpFilePart=0x0) returned 0x81 [0098.838] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\gu\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\gu\\", lpFilePart=0x0) returned 0x82 [0098.838] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\gu\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d73d0 [0098.839] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0098.839] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0098.839] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0098.839] FindClose (in: hFindFile=0x5d73d0 | out: hFindFile=0x5d73d0) returned 1 [0098.839] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0098.839] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0098.839] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0098.839] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\gu", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\gu", lpFilePart=0x0) returned 0x81 [0098.839] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\gu\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\gu\\", lpFilePart=0x0) returned 0x82 [0098.840] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\gu\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d78b0 [0098.840] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0098.840] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0098.840] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0098.840] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0098.840] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0098.840] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0098.841] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\gu\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\gu\\messages.json", lpFilePart=0x0) returned 0x8f [0098.841] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0098.841] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\gu\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\gu\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x22c4110 | out: lpFileInformation=0x22c4110*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb83edc26, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb83edc0e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0xb8924212, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x11e)) returned 1 [0098.841] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0098.841] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\gu\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\gu\\messages.json", lpFilePart=0x0) returned 0x8f [0098.841] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0098.841] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\gu\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\gu\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0098.841] GetFileType (hFile=0x444) returned 0x1 [0098.841] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0098.841] GetFileType (hFile=0x444) returned 0x1 [0098.841] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x11e [0098.842] ReadFile (in: hFile=0x444, lpBuffer=0x22c45f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x22c45f8*, lpNumberOfBytesRead=0x3be478*=0x11e, lpOverlapped=0x0) returned 1 [0098.844] CloseHandle (hObject=0x444) returned 1 [0098.865] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\gu\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\gu\\messages.json", lpFilePart=0x0) returned 0x8f [0098.865] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0098.865] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\gu\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\gu\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0098.867] GetFileType (hFile=0x444) returned 0x1 [0098.867] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0098.867] GetFileType (hFile=0x444) returned 0x1 [0098.867] WriteFile (in: hFile=0x444, lpBuffer=0x233bc00*, nNumberOfBytesToWrite=0x120, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x233bc00*, lpNumberOfBytesWritten=0x3be388*=0x120, lpOverlapped=0x0) returned 1 [0098.870] CloseHandle (hObject=0x444) returned 1 [0098.870] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\gu\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\gu\\messages.json", lpFilePart=0x0) returned 0x8f [0098.870] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\gu\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\gu\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0098.870] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0098.870] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\gu\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\gu\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb83edc26, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb83edc0e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x26c82a73, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x120)) returned 1 [0098.870] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0098.870] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\gu\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\gu\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\gu\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\gu\\messages.json.xuy")) returned 1 [0098.872] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0098.872] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hi", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hi", lpFilePart=0x0) returned 0x81 [0098.872] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hi\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hi\\", lpFilePart=0x0) returned 0x82 [0098.872] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hi\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7af0 [0098.885] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0098.885] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0098.885] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0098.885] FindClose (in: hFindFile=0x5d7af0 | out: hFindFile=0x5d7af0) returned 1 [0098.885] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0098.885] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0098.885] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0098.885] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hi", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hi", lpFilePart=0x0) returned 0x81 [0098.885] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hi\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hi\\", lpFilePart=0x0) returned 0x82 [0098.885] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hi\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d81b0 [0098.886] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0098.886] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0098.886] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0098.886] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0098.886] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0098.886] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0098.886] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hi\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hi\\messages.json", lpFilePart=0x0) returned 0x8f [0098.886] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0098.887] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x233fd58 | out: lpFileInformation=0x233fd58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb83edc26, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb83edc0e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0xb8926922, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x13e)) returned 1 [0098.887] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0098.887] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hi\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hi\\messages.json", lpFilePart=0x0) returned 0x8f [0098.887] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0098.887] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hi\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0098.887] GetFileType (hFile=0x444) returned 0x1 [0098.887] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0098.887] GetFileType (hFile=0x444) returned 0x1 [0098.887] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x13e [0098.887] ReadFile (in: hFile=0x444, lpBuffer=0x2340260, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x2340260*, lpNumberOfBytesRead=0x3be478*=0x13e, lpOverlapped=0x0) returned 1 [0098.891] CloseHandle (hObject=0x444) returned 1 [0098.978] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hi\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hi\\messages.json", lpFilePart=0x0) returned 0x8f [0098.978] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0098.978] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hi\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0098.980] GetFileType (hFile=0x444) returned 0x1 [0098.980] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0098.980] GetFileType (hFile=0x444) returned 0x1 [0098.980] WriteFile (in: hFile=0x444, lpBuffer=0x21b8318*, nNumberOfBytesToWrite=0x140, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x21b8318*, lpNumberOfBytesWritten=0x3be388*=0x140, lpOverlapped=0x0) returned 1 [0098.981] CloseHandle (hObject=0x444) returned 1 [0098.982] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hi\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hi\\messages.json", lpFilePart=0x0) returned 0x8f [0098.982] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hi\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hi\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0098.982] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0098.982] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb83edc26, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb83edc0e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x26d8e24c, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x140)) returned 1 [0098.982] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0098.982] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hi\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hi\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hi\\messages.json.xuy")) returned 1 [0098.984] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0098.984] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hr", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hr", lpFilePart=0x0) returned 0x81 [0098.984] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hr\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hr\\", lpFilePart=0x0) returned 0x82 [0098.984] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hr\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7e50 [0098.984] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0098.985] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0098.985] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0098.985] FindClose (in: hFindFile=0x5d7e50 | out: hFindFile=0x5d7e50) returned 1 [0098.985] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0098.985] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0098.985] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0098.985] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hr", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hr", lpFilePart=0x0) returned 0x81 [0098.985] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hr\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hr\\", lpFilePart=0x0) returned 0x82 [0098.985] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hr\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7370 [0098.986] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0098.986] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0098.986] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0098.986] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0098.986] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0098.986] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0098.986] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hr\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hr\\messages.json", lpFilePart=0x0) returned 0x8f [0098.986] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0098.986] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x21bc470 | out: lpFileInformation=0x21bc470*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb83edc26, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb83edc0e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0xb8926922, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xc8)) returned 1 [0098.987] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0098.987] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hr\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hr\\messages.json", lpFilePart=0x0) returned 0x8f [0098.987] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0098.987] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hr\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0098.987] GetFileType (hFile=0x444) returned 0x1 [0098.987] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0098.987] GetFileType (hFile=0x444) returned 0x1 [0098.987] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xc8 [0098.987] ReadFile (in: hFile=0x444, lpBuffer=0x21bc900, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x21bc900*, lpNumberOfBytesRead=0x3be478*=0xc8, lpOverlapped=0x0) returned 1 [0098.997] CloseHandle (hObject=0x444) returned 1 [0099.015] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hr\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hr\\messages.json", lpFilePart=0x0) returned 0x8f [0099.015] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0099.015] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hr\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0099.017] GetFileType (hFile=0x444) returned 0x1 [0099.017] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0099.017] GetFileType (hFile=0x444) returned 0x1 [0099.017] WriteFile (in: hFile=0x444, lpBuffer=0x2233c20*, nNumberOfBytesToWrite=0xd0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x2233c20*, lpNumberOfBytesWritten=0x3be388*=0xd0, lpOverlapped=0x0) returned 1 [0099.018] CloseHandle (hObject=0x444) returned 1 [0099.019] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hr\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hr\\messages.json", lpFilePart=0x0) returned 0x8f [0099.019] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hr\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hr\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0099.019] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0099.019] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb83edc26, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb83edc0e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x26dd9f1e, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xd0)) returned 1 [0099.019] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0099.019] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hr\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hr\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hr\\messages.json.xuy")) returned 1 [0099.020] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0099.020] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hu", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hu", lpFilePart=0x0) returned 0x81 [0099.020] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hu\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hu\\", lpFilePart=0x0) returned 0x82 [0099.020] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hu\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d78b0 [0099.023] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0099.023] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0099.023] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0099.024] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0099.024] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0099.024] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0099.024] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0099.024] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hu", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hu", lpFilePart=0x0) returned 0x81 [0099.024] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hu\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hu\\", lpFilePart=0x0) returned 0x82 [0099.024] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hu\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d79d0 [0099.025] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0099.025] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0099.025] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0099.025] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0099.025] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0099.025] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0099.025] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hu\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hu\\messages.json", lpFilePart=0x0) returned 0x8f [0099.025] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0099.025] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hu\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hu\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x2237d78 | out: lpFileInformation=0x2237d78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8413e78, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb84125fe, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0xb8926922, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xc6)) returned 1 [0099.026] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0099.026] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hu\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hu\\messages.json", lpFilePart=0x0) returned 0x8f [0099.026] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0099.026] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hu\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hu\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0099.026] GetFileType (hFile=0x444) returned 0x1 [0099.026] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0099.026] GetFileType (hFile=0x444) returned 0x1 [0099.026] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xc6 [0099.026] ReadFile (in: hFile=0x444, lpBuffer=0x2238208, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x2238208*, lpNumberOfBytesRead=0x3be478*=0xc6, lpOverlapped=0x0) returned 1 [0099.027] CloseHandle (hObject=0x444) returned 1 [0099.049] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hu\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hu\\messages.json", lpFilePart=0x0) returned 0x8f [0099.049] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0099.049] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hu\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hu\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0099.051] GetFileType (hFile=0x444) returned 0x1 [0099.051] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0099.051] GetFileType (hFile=0x444) returned 0x1 [0099.051] WriteFile (in: hFile=0x444, lpBuffer=0x22af530*, nNumberOfBytesToWrite=0xd0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x22af530*, lpNumberOfBytesWritten=0x3be388*=0xd0, lpOverlapped=0x0) returned 1 [0099.052] CloseHandle (hObject=0x444) returned 1 [0099.052] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hu\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hu\\messages.json", lpFilePart=0x0) returned 0x8f [0099.052] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hu\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hu\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0099.052] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0099.052] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hu\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hu\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8413e78, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb84125fe, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x26e263b0, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xd0)) returned 1 [0099.052] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0099.052] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hu\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hu\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hu\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hu\\messages.json.xuy")) returned 1 [0099.054] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0099.054] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hy", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hy", lpFilePart=0x0) returned 0x81 [0099.054] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hy\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hy\\", lpFilePart=0x0) returned 0x82 [0099.054] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hy\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d78b0 [0099.054] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0099.055] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0099.056] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0099.056] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0099.056] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0099.056] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0099.056] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0099.056] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hy", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hy", lpFilePart=0x0) returned 0x81 [0099.056] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hy\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hy\\", lpFilePart=0x0) returned 0x82 [0099.056] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hy\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d81b0 [0099.057] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0099.057] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0099.057] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0099.057] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0099.057] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0099.057] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0099.057] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hy\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hy\\messages.json", lpFilePart=0x0) returned 0x8f [0099.057] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0099.057] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hy\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hy\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x22b3688 | out: lpFileInformation=0x22b3688*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8413e78, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb84125fe, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x299)) returned 1 [0099.058] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0099.058] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hy\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hy\\messages.json", lpFilePart=0x0) returned 0x8f [0099.058] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0099.058] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hy\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hy\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0099.058] GetFileType (hFile=0x444) returned 0x1 [0099.058] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0099.058] GetFileType (hFile=0x444) returned 0x1 [0099.058] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x299 [0099.058] ReadFile (in: hFile=0x444, lpBuffer=0x22b3cf0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x22b3cf0*, lpNumberOfBytesRead=0x3be478*=0x299, lpOverlapped=0x0) returned 1 [0099.073] CloseHandle (hObject=0x444) returned 1 [0099.090] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hy\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hy\\messages.json", lpFilePart=0x0) returned 0x8f [0099.090] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0099.090] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hy\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hy\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0099.092] GetFileType (hFile=0x444) returned 0x1 [0099.092] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0099.092] GetFileType (hFile=0x444) returned 0x1 [0099.092] WriteFile (in: hFile=0x444, lpBuffer=0x232ba78*, nNumberOfBytesToWrite=0x2a0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x232ba78*, lpNumberOfBytesWritten=0x3be388*=0x2a0, lpOverlapped=0x0) returned 1 [0099.093] CloseHandle (hObject=0x444) returned 1 [0099.094] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hy\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hy\\messages.json", lpFilePart=0x0) returned 0x8f [0099.094] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hy\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hy\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0099.094] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0099.094] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hy\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hy\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8413e78, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb84125fe, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x26e98ae0, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2a0)) returned 1 [0099.094] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0099.094] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hy\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hy\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hy\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hy\\messages.json.xuy")) returned 1 [0099.095] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0099.095] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\id", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\id", lpFilePart=0x0) returned 0x81 [0099.095] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\id\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\id\\", lpFilePart=0x0) returned 0x82 [0099.095] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\id\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7550 [0099.097] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0099.098] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0099.098] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0099.098] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0099.098] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0099.098] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0099.098] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0099.098] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\id", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\id", lpFilePart=0x0) returned 0x81 [0099.098] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\id\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\id\\", lpFilePart=0x0) returned 0x82 [0099.098] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\id\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7670 [0099.099] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0099.099] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0099.099] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0099.099] FindClose (in: hFindFile=0x5d7670 | out: hFindFile=0x5d7670) returned 1 [0099.099] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0099.099] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0099.099] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\id\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\id\\messages.json", lpFilePart=0x0) returned 0x8f [0099.099] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0099.099] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\id\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\id\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x232fbd0 | out: lpFileInformation=0x232fbd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8413e78, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb84125fe, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0xb8926922, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xbb)) returned 1 [0099.099] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0099.099] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\id\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\id\\messages.json", lpFilePart=0x0) returned 0x8f [0099.100] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0099.100] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\id\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\id\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0099.100] GetFileType (hFile=0x444) returned 0x1 [0099.100] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0099.100] GetFileType (hFile=0x444) returned 0x1 [0099.100] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xbb [0099.100] ReadFile (in: hFile=0x444, lpBuffer=0x2330058, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x2330058*, lpNumberOfBytesRead=0x3be478*=0xbb, lpOverlapped=0x0) returned 1 [0099.101] CloseHandle (hObject=0x444) returned 1 [0099.158] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\id\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\id\\messages.json", lpFilePart=0x0) returned 0x8f [0099.159] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0099.159] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\id\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\id\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0099.160] GetFileType (hFile=0x444) returned 0x1 [0099.160] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0099.161] GetFileType (hFile=0x444) returned 0x1 [0099.161] WriteFile (in: hFile=0x444, lpBuffer=0x21a7e20*, nNumberOfBytesToWrite=0xc0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x21a7e20*, lpNumberOfBytesWritten=0x3be388*=0xc0, lpOverlapped=0x0) returned 1 [0099.162] CloseHandle (hObject=0x444) returned 1 [0099.162] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\id\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\id\\messages.json", lpFilePart=0x0) returned 0x8f [0099.162] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\id\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\id\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0099.162] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0099.162] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\id\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\id\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8413e78, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb84125fe, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x26f319f6, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xc0)) returned 1 [0099.162] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0099.162] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\id\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\id\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\id\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\id\\messages.json.xuy")) returned 1 [0099.164] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0099.165] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\is", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\is", lpFilePart=0x0) returned 0x81 [0099.165] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\is\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\is\\", lpFilePart=0x0) returned 0x82 [0099.165] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\is\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d78b0 [0099.166] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0099.166] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0099.166] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0099.166] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0099.166] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0099.166] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0099.167] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0099.167] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\is", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\is", lpFilePart=0x0) returned 0x81 [0099.167] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\is\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\is\\", lpFilePart=0x0) returned 0x82 [0099.167] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\is\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d81b0 [0099.169] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0099.172] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0099.172] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0099.172] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0099.172] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0099.172] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0099.172] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\is\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\is\\messages.json", lpFilePart=0x0) returned 0x8f [0099.173] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0099.173] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\is\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\is\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x21abf78 | out: lpFileInformation=0x21abf78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8413e78, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb84125fe, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0xb2)) returned 1 [0099.173] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0099.173] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\is\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\is\\messages.json", lpFilePart=0x0) returned 0x8f [0099.173] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0099.174] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\is\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\is\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0099.174] GetFileType (hFile=0x444) returned 0x1 [0099.174] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0099.174] GetFileType (hFile=0x444) returned 0x1 [0099.174] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xb2 [0099.174] ReadFile (in: hFile=0x444, lpBuffer=0x21ac3f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x21ac3f8*, lpNumberOfBytesRead=0x3be478*=0xb2, lpOverlapped=0x0) returned 1 [0099.176] CloseHandle (hObject=0x444) returned 1 [0099.235] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\is\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\is\\messages.json", lpFilePart=0x0) returned 0x8f [0099.235] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0099.236] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\is\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\is\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0099.238] GetFileType (hFile=0x444) returned 0x1 [0099.238] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0099.238] GetFileType (hFile=0x444) returned 0x1 [0099.238] WriteFile (in: hFile=0x444, lpBuffer=0x2223700*, nNumberOfBytesToWrite=0xc0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x2223700*, lpNumberOfBytesWritten=0x3be388*=0xc0, lpOverlapped=0x0) returned 1 [0099.239] CloseHandle (hObject=0x444) returned 1 [0099.240] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\is\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\is\\messages.json", lpFilePart=0x0) returned 0x8f [0099.240] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\is\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\is\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0099.240] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0099.240] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\is\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\is\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8413e78, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb84125fe, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x26fed99e, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xc0)) returned 1 [0099.240] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0099.240] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\is\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\is\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\is\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\is\\messages.json.xuy")) returned 1 [0099.242] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0099.242] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\it", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\it", lpFilePart=0x0) returned 0x81 [0099.243] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\it\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\it\\", lpFilePart=0x0) returned 0x82 [0099.243] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\it\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7c70 [0099.245] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0099.245] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0099.245] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0099.246] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0099.246] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0099.246] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0099.246] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0099.246] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\it", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\it", lpFilePart=0x0) returned 0x81 [0099.246] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\it\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\it\\", lpFilePart=0x0) returned 0x82 [0099.246] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\it\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7af0 [0099.246] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0099.247] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0099.247] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0099.247] FindClose (in: hFindFile=0x5d7af0 | out: hFindFile=0x5d7af0) returned 1 [0099.247] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0099.247] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0099.247] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\it\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\it\\messages.json", lpFilePart=0x0) returned 0x8f [0099.247] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0099.247] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\it\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\it\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x2227858 | out: lpFileInformation=0x2227858*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb843a0d1, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb84396fe, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0xb8926922, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xb6)) returned 1 [0099.248] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0099.248] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\it\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\it\\messages.json", lpFilePart=0x0) returned 0x8f [0099.248] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0099.248] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\it\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\it\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0099.248] GetFileType (hFile=0x444) returned 0x1 [0099.248] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0099.248] GetFileType (hFile=0x444) returned 0x1 [0099.248] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xb6 [0099.248] ReadFile (in: hFile=0x444, lpBuffer=0x2227cd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x2227cd8*, lpNumberOfBytesRead=0x3be478*=0xb6, lpOverlapped=0x0) returned 1 [0099.250] CloseHandle (hObject=0x444) returned 1 [0099.269] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\it\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\it\\messages.json", lpFilePart=0x0) returned 0x8f [0099.270] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0099.270] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\it\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\it\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0099.272] GetFileType (hFile=0x444) returned 0x1 [0099.272] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0099.272] GetFileType (hFile=0x444) returned 0x1 [0099.272] WriteFile (in: hFile=0x444, lpBuffer=0x229efe0*, nNumberOfBytesToWrite=0xc0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x229efe0*, lpNumberOfBytesWritten=0x3be388*=0xc0, lpOverlapped=0x0) returned 1 [0099.274] CloseHandle (hObject=0x444) returned 1 [0099.274] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\it\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\it\\messages.json", lpFilePart=0x0) returned 0x8f [0099.274] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\it\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\it\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0099.274] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0099.274] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\it\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\it\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb843a0d1, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb84396fe, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x270600d7, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xc0)) returned 1 [0099.274] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0099.274] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\it\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\it\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\it\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\it\\messages.json.xuy")) returned 1 [0099.275] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0099.275] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\iw", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\iw", lpFilePart=0x0) returned 0x81 [0099.275] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\iw\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\iw\\", lpFilePart=0x0) returned 0x82 [0099.276] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\iw\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d75b0 [0099.276] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0099.276] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0099.276] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0099.276] FindClose (in: hFindFile=0x5d75b0 | out: hFindFile=0x5d75b0) returned 1 [0099.276] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0099.276] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0099.276] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0099.276] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\iw", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\iw", lpFilePart=0x0) returned 0x81 [0099.277] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\iw\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\iw\\", lpFilePart=0x0) returned 0x82 [0099.277] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\iw\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7550 [0099.277] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0099.277] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0099.277] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0099.277] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0099.277] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0099.277] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0099.277] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\iw\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\iw\\messages.json", lpFilePart=0x0) returned 0x8f [0099.278] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0099.278] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\iw\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\iw\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x22a3138 | out: lpFileInformation=0x22a3138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb843a0d1, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb84396fe, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x16a)) returned 1 [0099.278] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0099.278] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\iw\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\iw\\messages.json", lpFilePart=0x0) returned 0x8f [0099.278] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0099.278] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\iw\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\iw\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0099.278] GetFileType (hFile=0x444) returned 0x1 [0099.278] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0099.278] GetFileType (hFile=0x444) returned 0x1 [0099.278] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x16a [0099.279] ReadFile (in: hFile=0x444, lpBuffer=0x22a3670, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x22a3670*, lpNumberOfBytesRead=0x3be478*=0x16a, lpOverlapped=0x0) returned 1 [0099.280] CloseHandle (hObject=0x444) returned 1 [0099.298] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\iw\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\iw\\messages.json", lpFilePart=0x0) returned 0x8f [0099.298] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0099.298] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\iw\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\iw\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0099.300] GetFileType (hFile=0x444) returned 0x1 [0099.300] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0099.300] GetFileType (hFile=0x444) returned 0x1 [0099.300] WriteFile (in: hFile=0x444, lpBuffer=0x231ae08*, nNumberOfBytesToWrite=0x170, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x231ae08*, lpNumberOfBytesWritten=0x3be388*=0x170, lpOverlapped=0x0) returned 1 [0099.301] CloseHandle (hObject=0x444) returned 1 [0099.301] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\iw\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\iw\\messages.json", lpFilePart=0x0) returned 0x8f [0099.301] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\iw\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\iw\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0099.301] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0099.301] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\iw\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\iw\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb843a0d1, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb84396fe, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x270865ca, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x170)) returned 1 [0099.301] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0099.301] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\iw\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\iw\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\iw\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\iw\\messages.json.xuy")) returned 1 [0099.302] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0099.302] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ja", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ja", lpFilePart=0x0) returned 0x81 [0099.303] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ja\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ja\\", lpFilePart=0x0) returned 0x82 [0099.303] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ja\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d81b0 [0099.307] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0099.307] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0099.307] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0099.307] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0099.307] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0099.307] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0099.307] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0099.308] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ja", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ja", lpFilePart=0x0) returned 0x81 [0099.308] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ja\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ja\\", lpFilePart=0x0) returned 0x82 [0099.308] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ja\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7cd0 [0099.308] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0099.308] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0099.308] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0099.308] FindClose (in: hFindFile=0x5d7cd0 | out: hFindFile=0x5d7cd0) returned 1 [0099.309] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0099.309] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0099.309] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ja\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ja\\messages.json", lpFilePart=0x0) returned 0x8f [0099.309] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0099.309] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ja\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ja\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x231ef60 | out: lpFileInformation=0x231ef60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb843a0d1, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb84396fe, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0xb892903b, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xfb)) returned 1 [0099.309] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0099.309] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ja\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ja\\messages.json", lpFilePart=0x0) returned 0x8f [0099.309] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0099.309] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ja\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ja\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0099.309] GetFileType (hFile=0x444) returned 0x1 [0099.309] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0099.309] GetFileType (hFile=0x444) returned 0x1 [0099.310] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xfb [0099.310] ReadFile (in: hFile=0x444, lpBuffer=0x231f428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x231f428*, lpNumberOfBytesRead=0x3be478*=0xfb, lpOverlapped=0x0) returned 1 [0099.312] CloseHandle (hObject=0x444) returned 1 [0099.387] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ja\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ja\\messages.json", lpFilePart=0x0) returned 0x8f [0099.387] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0099.387] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ja\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ja\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0099.390] GetFileType (hFile=0x444) returned 0x1 [0099.390] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0099.390] GetFileType (hFile=0x444) returned 0x1 [0099.390] WriteFile (in: hFile=0x444, lpBuffer=0x2197140*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x2197140*, lpNumberOfBytesWritten=0x3be388*=0x100, lpOverlapped=0x0) returned 1 [0099.391] CloseHandle (hObject=0x444) returned 1 [0099.392] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ja\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ja\\messages.json", lpFilePart=0x0) returned 0x8f [0099.392] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ja\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ja\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0099.392] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0099.392] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ja\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ja\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb843a0d1, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb84396fe, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2717a61a, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x100)) returned 1 [0099.392] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0099.392] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ja\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ja\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ja\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ja\\messages.json.xuy")) returned 1 [0099.394] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0099.394] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ka", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ka", lpFilePart=0x0) returned 0x81 [0099.394] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ka\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ka\\", lpFilePart=0x0) returned 0x82 [0099.394] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ka\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7c70 [0099.394] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0099.395] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0099.395] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0099.395] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0099.395] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0099.395] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0099.395] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0099.395] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ka", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ka", lpFilePart=0x0) returned 0x81 [0099.395] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ka\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ka\\", lpFilePart=0x0) returned 0x82 [0099.395] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ka\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7c70 [0099.396] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0099.396] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0099.396] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0099.396] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0099.396] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0099.396] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0099.396] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ka\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ka\\messages.json", lpFilePart=0x0) returned 0x8f [0099.396] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0099.396] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ka\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ka\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x219b298 | out: lpFileInformation=0x219b298*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb846031c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb845e0ee, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x165)) returned 1 [0099.396] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0099.397] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ka\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ka\\messages.json", lpFilePart=0x0) returned 0x8f [0099.397] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0099.397] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ka\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ka\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0099.397] GetFileType (hFile=0x444) returned 0x1 [0099.397] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0099.397] GetFileType (hFile=0x444) returned 0x1 [0099.397] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x165 [0099.397] ReadFile (in: hFile=0x444, lpBuffer=0x219b7c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x219b7c8*, lpNumberOfBytesRead=0x3be478*=0x165, lpOverlapped=0x0) returned 1 [0099.398] CloseHandle (hObject=0x444) returned 1 [0099.422] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ka\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ka\\messages.json", lpFilePart=0x0) returned 0x8f [0099.422] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0099.422] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ka\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ka\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0099.428] GetFileType (hFile=0x444) returned 0x1 [0099.428] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0099.428] GetFileType (hFile=0x444) returned 0x1 [0099.428] WriteFile (in: hFile=0x444, lpBuffer=0x2212f68*, nNumberOfBytesToWrite=0x170, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x2212f68*, lpNumberOfBytesWritten=0x3be388*=0x170, lpOverlapped=0x0) returned 1 [0099.429] CloseHandle (hObject=0x444) returned 1 [0099.429] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ka\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ka\\messages.json", lpFilePart=0x0) returned 0x8f [0099.429] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ka\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ka\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0099.429] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0099.429] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ka\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ka\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb846031c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb845e0ee, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x271c6e4e, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x170)) returned 1 [0099.429] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0099.429] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ka\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ka\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ka\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ka\\messages.json.xuy")) returned 1 [0099.430] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0099.430] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\km", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\km", lpFilePart=0x0) returned 0x81 [0099.431] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\km\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\km\\", lpFilePart=0x0) returned 0x82 [0099.431] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\km\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7370 [0099.434] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0099.434] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0099.434] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0099.434] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0099.434] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0099.434] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0099.434] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0099.435] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\km", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\km", lpFilePart=0x0) returned 0x81 [0099.435] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\km\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\km\\", lpFilePart=0x0) returned 0x82 [0099.435] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\km\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d78b0 [0099.435] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0099.436] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0099.436] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0099.436] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0099.436] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0099.436] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0099.436] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\km\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\km\\messages.json", lpFilePart=0x0) returned 0x8f [0099.436] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0099.436] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\km\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\km\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x22170c0 | out: lpFileInformation=0x22170c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb846031c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb845e0ee, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x25f)) returned 1 [0099.437] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0099.437] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\km\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\km\\messages.json", lpFilePart=0x0) returned 0x8f [0099.437] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0099.437] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\km\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\km\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0099.437] GetFileType (hFile=0x444) returned 0x1 [0099.437] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0099.437] GetFileType (hFile=0x444) returned 0x1 [0099.437] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x25f [0099.437] ReadFile (in: hFile=0x444, lpBuffer=0x22176e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x22176e8*, lpNumberOfBytesRead=0x3be478*=0x25f, lpOverlapped=0x0) returned 1 [0099.448] CloseHandle (hObject=0x444) returned 1 [0099.462] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\km\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\km\\messages.json", lpFilePart=0x0) returned 0x8f [0099.462] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0099.462] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\km\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\km\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0099.464] GetFileType (hFile=0x444) returned 0x1 [0099.464] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0099.464] GetFileType (hFile=0x444) returned 0x1 [0099.464] WriteFile (in: hFile=0x444, lpBuffer=0x228f330*, nNumberOfBytesToWrite=0x260, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x228f330*, lpNumberOfBytesWritten=0x3be388*=0x260, lpOverlapped=0x0) returned 1 [0099.465] CloseHandle (hObject=0x444) returned 1 [0099.465] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\km\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\km\\messages.json", lpFilePart=0x0) returned 0x8f [0099.465] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\km\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\km\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0099.465] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0099.465] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\km\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\km\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb846031c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb845e0ee, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x27212f98, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x260)) returned 1 [0099.465] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0099.465] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\km\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\km\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\km\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\km\\messages.json.xuy")) returned 1 [0099.467] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0099.467] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\kn", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\kn", lpFilePart=0x0) returned 0x81 [0099.467] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\kn\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\kn\\", lpFilePart=0x0) returned 0x82 [0099.467] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\kn\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d81b0 [0099.467] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0099.468] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0099.468] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0099.468] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0099.468] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0099.468] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0099.468] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0099.468] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\kn", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\kn", lpFilePart=0x0) returned 0x81 [0099.468] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\kn\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\kn\\", lpFilePart=0x0) returned 0x82 [0099.468] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\kn\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7d90 [0099.468] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0099.469] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0099.469] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0099.469] FindClose (in: hFindFile=0x5d7d90 | out: hFindFile=0x5d7d90) returned 1 [0099.469] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0099.469] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0099.469] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\kn\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\kn\\messages.json", lpFilePart=0x0) returned 0x8f [0099.469] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0099.469] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\kn\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\kn\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x2293488 | out: lpFileInformation=0x2293488*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb846031c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb845e0ee, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0xb892903b, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x147)) returned 1 [0099.469] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0099.469] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\kn\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\kn\\messages.json", lpFilePart=0x0) returned 0x8f [0099.469] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0099.470] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\kn\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\kn\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0099.470] GetFileType (hFile=0x444) returned 0x1 [0099.470] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0099.470] GetFileType (hFile=0x444) returned 0x1 [0099.470] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x147 [0099.470] ReadFile (in: hFile=0x444, lpBuffer=0x2293998, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x2293998*, lpNumberOfBytesRead=0x3be478*=0x147, lpOverlapped=0x0) returned 1 [0099.471] CloseHandle (hObject=0x444) returned 1 [0099.486] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\kn\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\kn\\messages.json", lpFilePart=0x0) returned 0x8f [0099.486] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0099.486] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\kn\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\kn\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0099.488] GetFileType (hFile=0x444) returned 0x1 [0099.488] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0099.488] GetFileType (hFile=0x444) returned 0x1 [0099.488] WriteFile (in: hFile=0x444, lpBuffer=0x230b098*, nNumberOfBytesToWrite=0x150, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x230b098*, lpNumberOfBytesWritten=0x3be388*=0x150, lpOverlapped=0x0) returned 1 [0099.489] CloseHandle (hObject=0x444) returned 1 [0099.489] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\kn\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\kn\\messages.json", lpFilePart=0x0) returned 0x8f [0099.489] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\kn\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\kn\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0099.489] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0099.489] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\kn\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\kn\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb846031c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb845e0ee, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2725f53c, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x150)) returned 1 [0099.489] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0099.489] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\kn\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\kn\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\kn\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\kn\\messages.json.xuy")) returned 1 [0099.491] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0099.491] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ko", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ko", lpFilePart=0x0) returned 0x81 [0099.491] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ko\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ko\\", lpFilePart=0x0) returned 0x82 [0099.491] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ko\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d73d0 [0099.493] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0099.493] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0099.493] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0099.493] FindClose (in: hFindFile=0x5d73d0 | out: hFindFile=0x5d73d0) returned 1 [0099.493] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0099.493] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0099.493] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0099.493] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ko", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ko", lpFilePart=0x0) returned 0x81 [0099.493] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ko\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ko\\", lpFilePart=0x0) returned 0x82 [0099.493] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ko\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7a90 [0099.494] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0099.494] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0099.494] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0099.494] FindClose (in: hFindFile=0x5d7a90 | out: hFindFile=0x5d7a90) returned 1 [0099.494] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0099.494] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0099.494] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ko\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ko\\messages.json", lpFilePart=0x0) returned 0x8f [0099.495] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0099.495] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ko\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ko\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x230f1f0 | out: lpFileInformation=0x230f1f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb846031c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb845e0ee, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0xb892903b, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xd9)) returned 1 [0099.495] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0099.495] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ko\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ko\\messages.json", lpFilePart=0x0) returned 0x8f [0099.495] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0099.495] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ko\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ko\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0099.495] GetFileType (hFile=0x444) returned 0x1 [0099.495] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0099.495] GetFileType (hFile=0x444) returned 0x1 [0099.495] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xd9 [0099.495] ReadFile (in: hFile=0x444, lpBuffer=0x230f698, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x230f698*, lpNumberOfBytesRead=0x3be478*=0xd9, lpOverlapped=0x0) returned 1 [0099.497] CloseHandle (hObject=0x444) returned 1 [0099.543] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ko\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ko\\messages.json", lpFilePart=0x0) returned 0x8f [0099.543] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0099.543] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ko\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ko\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0099.545] GetFileType (hFile=0x444) returned 0x1 [0099.545] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0099.545] GetFileType (hFile=0x444) returned 0x1 [0099.546] WriteFile (in: hFile=0x444, lpBuffer=0x2187350*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x2187350*, lpNumberOfBytesWritten=0x3be388*=0xe0, lpOverlapped=0x0) returned 1 [0099.547] CloseHandle (hObject=0x444) returned 1 [0099.547] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ko\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ko\\messages.json", lpFilePart=0x0) returned 0x8f [0099.547] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ko\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ko\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0099.547] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0099.547] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ko\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ko\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb846031c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb845e0ee, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x272f8a4c, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1 [0099.547] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0099.547] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ko\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ko\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ko\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ko\\messages.json.xuy")) returned 1 [0099.548] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0099.548] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lo", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lo", lpFilePart=0x0) returned 0x81 [0099.548] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lo\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lo\\", lpFilePart=0x0) returned 0x82 [0099.548] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lo\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7fd0 [0099.548] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0099.549] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0099.549] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0099.549] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0099.549] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0099.549] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0099.549] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0099.549] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lo", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lo", lpFilePart=0x0) returned 0x81 [0099.549] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lo\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lo\\", lpFilePart=0x0) returned 0x82 [0099.549] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lo\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d81b0 [0099.549] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0099.550] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0099.550] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0099.550] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0099.550] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0099.550] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0099.550] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lo\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lo\\messages.json", lpFilePart=0x0) returned 0x8f [0099.550] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0099.550] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lo\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lo\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x218b4a8 | out: lpFileInformation=0x218b4a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb848658b, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb84851ee, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x1c2)) returned 1 [0099.550] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0099.550] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lo\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lo\\messages.json", lpFilePart=0x0) returned 0x8f [0099.551] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0099.551] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lo\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lo\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0099.551] GetFileType (hFile=0x444) returned 0x1 [0099.551] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0099.551] GetFileType (hFile=0x444) returned 0x1 [0099.551] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x1c2 [0099.551] ReadFile (in: hFile=0x444, lpBuffer=0x218ba38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x218ba38*, lpNumberOfBytesRead=0x3be478*=0x1c2, lpOverlapped=0x0) returned 1 [0099.552] CloseHandle (hObject=0x444) returned 1 [0099.565] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lo\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lo\\messages.json", lpFilePart=0x0) returned 0x8f [0099.565] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0099.565] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lo\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lo\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0099.567] GetFileType (hFile=0x444) returned 0x1 [0099.567] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0099.567] GetFileType (hFile=0x444) returned 0x1 [0099.567] WriteFile (in: hFile=0x444, lpBuffer=0x22033b8*, nNumberOfBytesToWrite=0x1d0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x22033b8*, lpNumberOfBytesWritten=0x3be388*=0x1d0, lpOverlapped=0x0) returned 1 [0099.568] CloseHandle (hObject=0x444) returned 1 [0099.568] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lo\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lo\\messages.json", lpFilePart=0x0) returned 0x8f [0099.568] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lo\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lo\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0099.568] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0099.568] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lo\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lo\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb848658b, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb84851ee, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2731e5e0, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x1d0)) returned 1 [0099.569] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0099.569] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lo\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lo\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lo\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lo\\messages.json.xuy")) returned 1 [0099.570] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0099.570] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lt", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lt", lpFilePart=0x0) returned 0x81 [0099.570] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lt\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lt\\", lpFilePart=0x0) returned 0x82 [0099.570] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lt\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7c70 [0099.572] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0099.572] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0099.572] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0099.573] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0099.573] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0099.573] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0099.573] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0099.573] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lt", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lt", lpFilePart=0x0) returned 0x81 [0099.573] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lt\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lt\\", lpFilePart=0x0) returned 0x82 [0099.573] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lt\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7eb0 [0099.573] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0099.573] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0099.573] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0099.574] FindClose (in: hFindFile=0x5d7eb0 | out: hFindFile=0x5d7eb0) returned 1 [0099.574] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0099.574] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0099.574] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lt\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lt\\messages.json", lpFilePart=0x0) returned 0x8f [0099.574] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0099.574] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lt\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lt\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x2207510 | out: lpFileInformation=0x2207510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb848658b, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb84851ee, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0xb892903b, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xd5)) returned 1 [0099.574] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0099.574] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lt\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lt\\messages.json", lpFilePart=0x0) returned 0x8f [0099.574] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0099.574] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lt\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lt\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0099.574] GetFileType (hFile=0x444) returned 0x1 [0099.574] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0099.574] GetFileType (hFile=0x444) returned 0x1 [0099.575] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xd5 [0099.575] ReadFile (in: hFile=0x444, lpBuffer=0x22079b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x22079b0*, lpNumberOfBytesRead=0x3be478*=0xd5, lpOverlapped=0x0) returned 1 [0099.577] CloseHandle (hObject=0x444) returned 1 [0099.590] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lt\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lt\\messages.json", lpFilePart=0x0) returned 0x8f [0099.590] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0099.590] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lt\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lt\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0099.599] GetFileType (hFile=0x444) returned 0x1 [0099.599] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0099.599] GetFileType (hFile=0x444) returned 0x1 [0099.599] WriteFile (in: hFile=0x444, lpBuffer=0x227ecf8*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x227ecf8*, lpNumberOfBytesWritten=0x3be388*=0xe0, lpOverlapped=0x0) returned 1 [0099.601] CloseHandle (hObject=0x444) returned 1 [0099.601] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lt\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lt\\messages.json", lpFilePart=0x0) returned 0x8f [0099.601] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lt\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lt\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0099.601] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0099.601] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lt\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lt\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb848658b, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb84851ee, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2736ab59, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1 [0099.601] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0099.602] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lt\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lt\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lt\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lt\\messages.json.xuy")) returned 1 [0099.603] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0099.603] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lv", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lv", lpFilePart=0x0) returned 0x81 [0099.603] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lv\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lv\\", lpFilePart=0x0) returned 0x82 [0099.603] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lv\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d81b0 [0099.604] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0099.604] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0099.604] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0099.604] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0099.604] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0099.604] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0099.604] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0099.604] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lv", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lv", lpFilePart=0x0) returned 0x81 [0099.604] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lv\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lv\\", lpFilePart=0x0) returned 0x82 [0099.604] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lv\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7550 [0099.604] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0099.605] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0099.605] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0099.605] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0099.605] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0099.605] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0099.605] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lv\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lv\\messages.json", lpFilePart=0x0) returned 0x8f [0099.605] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0099.605] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lv\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lv\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x2282e50 | out: lpFileInformation=0x2282e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb848658b, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb84851ee, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0xb892903b, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xc6)) returned 1 [0099.605] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0099.605] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lv\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lv\\messages.json", lpFilePart=0x0) returned 0x8f [0099.605] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0099.605] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lv\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lv\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0099.605] GetFileType (hFile=0x444) returned 0x1 [0099.605] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0099.606] GetFileType (hFile=0x444) returned 0x1 [0099.606] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xc6 [0099.606] ReadFile (in: hFile=0x444, lpBuffer=0x22832e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x22832e0*, lpNumberOfBytesRead=0x3be478*=0xc6, lpOverlapped=0x0) returned 1 [0099.606] CloseHandle (hObject=0x444) returned 1 [0099.620] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lv\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lv\\messages.json", lpFilePart=0x0) returned 0x8f [0099.620] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0099.620] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lv\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lv\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0099.622] GetFileType (hFile=0x444) returned 0x1 [0099.622] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0099.622] GetFileType (hFile=0x444) returned 0x1 [0099.622] WriteFile (in: hFile=0x444, lpBuffer=0x22fa608*, nNumberOfBytesToWrite=0xd0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x22fa608*, lpNumberOfBytesWritten=0x3be388*=0xd0, lpOverlapped=0x0) returned 1 [0099.671] CloseHandle (hObject=0x444) returned 1 [0099.672] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lv\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lv\\messages.json", lpFilePart=0x0) returned 0x8f [0099.672] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lv\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lv\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0099.672] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0099.672] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lv\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lv\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb848658b, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb84851ee, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x274291e7, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xd0)) returned 1 [0099.672] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0099.672] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lv\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lv\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lv\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lv\\messages.json.xuy")) returned 1 [0099.673] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0099.673] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ml", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ml", lpFilePart=0x0) returned 0x81 [0099.673] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ml\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ml\\", lpFilePart=0x0) returned 0x82 [0099.673] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ml\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7670 [0099.675] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0099.675] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0099.675] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0099.675] FindClose (in: hFindFile=0x5d7670 | out: hFindFile=0x5d7670) returned 1 [0099.676] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0099.676] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0099.676] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0099.676] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ml", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ml", lpFilePart=0x0) returned 0x81 [0099.676] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ml\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ml\\", lpFilePart=0x0) returned 0x82 [0099.676] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ml\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7c70 [0099.676] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0099.676] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0099.676] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0099.676] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0099.676] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0099.677] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0099.677] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ml\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ml\\messages.json", lpFilePart=0x0) returned 0x8f [0099.677] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0099.677] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ml\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ml\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x22fe760 | out: lpFileInformation=0x22fe760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb84ac7e3, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb84ac2ee, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0xb892b74a, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x183)) returned 1 [0099.677] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0099.677] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ml\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ml\\messages.json", lpFilePart=0x0) returned 0x8f [0099.677] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0099.677] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ml\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ml\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0099.677] GetFileType (hFile=0x444) returned 0x1 [0099.677] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0099.677] GetFileType (hFile=0x444) returned 0x1 [0099.677] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x183 [0099.677] ReadFile (in: hFile=0x444, lpBuffer=0x22fecb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x22fecb0*, lpNumberOfBytesRead=0x3be478*=0x183, lpOverlapped=0x0) returned 1 [0099.699] CloseHandle (hObject=0x444) returned 1 [0099.740] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ml\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ml\\messages.json", lpFilePart=0x0) returned 0x8f [0099.740] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0099.740] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ml\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ml\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0099.742] GetFileType (hFile=0x444) returned 0x1 [0099.742] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0099.742] GetFileType (hFile=0x444) returned 0x1 [0099.742] WriteFile (in: hFile=0x444, lpBuffer=0x2176f08*, nNumberOfBytesToWrite=0x190, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x2176f08*, lpNumberOfBytesWritten=0x3be388*=0x190, lpOverlapped=0x0) returned 1 [0099.743] CloseHandle (hObject=0x444) returned 1 [0099.743] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ml\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ml\\messages.json", lpFilePart=0x0) returned 0x8f [0099.743] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ml\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ml\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0099.743] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0099.743] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ml\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ml\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb84ac7e3, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb84ac2ee, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x274c1ab0, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x190)) returned 1 [0099.743] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0099.743] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ml\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ml\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ml\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ml\\messages.json.xuy")) returned 1 [0099.745] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0099.745] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\mn", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\mn", lpFilePart=0x0) returned 0x81 [0099.745] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\mn\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\mn\\", lpFilePart=0x0) returned 0x82 [0099.745] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\mn\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7cd0 [0099.745] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0099.745] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0099.746] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0099.746] FindClose (in: hFindFile=0x5d7cd0 | out: hFindFile=0x5d7cd0) returned 1 [0099.746] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0099.746] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0099.746] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0099.746] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\mn", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\mn", lpFilePart=0x0) returned 0x81 [0099.746] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\mn\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\mn\\", lpFilePart=0x0) returned 0x82 [0099.746] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\mn\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d79d0 [0099.746] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0099.746] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0099.746] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0099.746] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0099.747] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0099.747] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0099.747] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\mn\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\mn\\messages.json", lpFilePart=0x0) returned 0x8f [0099.747] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0099.747] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\mn\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\mn\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x217b060 | out: lpFileInformation=0x217b060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb84ac7e3, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb84ac2ee, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x1c3)) returned 1 [0099.747] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0099.747] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\mn\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\mn\\messages.json", lpFilePart=0x0) returned 0x8f [0099.747] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0099.747] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\mn\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\mn\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0099.747] GetFileType (hFile=0x444) returned 0x1 [0099.747] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0099.747] GetFileType (hFile=0x444) returned 0x1 [0099.747] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x1c3 [0099.747] ReadFile (in: hFile=0x444, lpBuffer=0x217b5f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x217b5f0*, lpNumberOfBytesRead=0x3be478*=0x1c3, lpOverlapped=0x0) returned 1 [0099.748] CloseHandle (hObject=0x444) returned 1 [0099.768] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\mn\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\mn\\messages.json", lpFilePart=0x0) returned 0x8f [0099.768] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0099.768] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\mn\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\mn\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0099.770] GetFileType (hFile=0x444) returned 0x1 [0099.770] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0099.770] GetFileType (hFile=0x444) returned 0x1 [0099.770] WriteFile (in: hFile=0x444, lpBuffer=0x21f2f70*, nNumberOfBytesToWrite=0x1d0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x21f2f70*, lpNumberOfBytesWritten=0x3be388*=0x1d0, lpOverlapped=0x0) returned 1 [0099.771] CloseHandle (hObject=0x444) returned 1 [0099.771] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\mn\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\mn\\messages.json", lpFilePart=0x0) returned 0x8f [0099.771] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\mn\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\mn\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0099.771] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0099.771] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\mn\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\mn\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb84ac7e3, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb84ac2ee, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2750e52c, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x1d0)) returned 1 [0099.772] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0099.772] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\mn\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\mn\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\mn\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\mn\\messages.json.xuy")) returned 1 [0099.773] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0099.773] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\mr", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\mr", lpFilePart=0x0) returned 0x81 [0099.773] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\mr\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\mr\\", lpFilePart=0x0) returned 0x82 [0099.773] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\mr\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7c70 [0099.775] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0099.775] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0099.775] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0099.775] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0099.775] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0099.775] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0099.775] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0099.775] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\mr", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\mr", lpFilePart=0x0) returned 0x81 [0099.775] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\mr\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\mr\\", lpFilePart=0x0) returned 0x82 [0099.775] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\mr\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d79d0 [0099.776] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0099.776] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0099.776] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0099.776] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0099.776] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0099.776] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0099.776] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\mr\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\mr\\messages.json", lpFilePart=0x0) returned 0x8f [0099.776] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0099.776] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\mr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\mr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x21f70c8 | out: lpFileInformation=0x21f70c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb84ac7e3, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb84ac2ee, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0xb892b74a, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x12c)) returned 1 [0099.777] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0099.777] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\mr\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\mr\\messages.json", lpFilePart=0x0) returned 0x8f [0099.777] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0099.777] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\mr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\mr\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0099.777] GetFileType (hFile=0x444) returned 0x1 [0099.777] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0099.777] GetFileType (hFile=0x444) returned 0x1 [0099.777] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x12c [0099.777] ReadFile (in: hFile=0x444, lpBuffer=0x21f75c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x21f75c0*, lpNumberOfBytesRead=0x3be478*=0x12c, lpOverlapped=0x0) returned 1 [0099.778] CloseHandle (hObject=0x444) returned 1 [0099.795] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\mr\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\mr\\messages.json", lpFilePart=0x0) returned 0x8f [0099.795] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0099.796] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\mr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\mr\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0099.797] GetFileType (hFile=0x444) returned 0x1 [0099.797] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0099.797] GetFileType (hFile=0x444) returned 0x1 [0099.797] WriteFile (in: hFile=0x444, lpBuffer=0x226ec18*, nNumberOfBytesToWrite=0x130, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x226ec18*, lpNumberOfBytesWritten=0x3be388*=0x130, lpOverlapped=0x0) returned 1 [0099.798] CloseHandle (hObject=0x444) returned 1 [0099.798] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\mr\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\mr\\messages.json", lpFilePart=0x0) returned 0x8f [0099.798] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\mr\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\mr\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0099.798] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0099.799] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\mr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\mr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb84ac7e3, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb84ac2ee, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2755a4df, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x130)) returned 1 [0099.799] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0099.799] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\mr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\mr\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\mr\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\mr\\messages.json.xuy")) returned 1 [0099.800] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0099.800] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ms", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ms", lpFilePart=0x0) returned 0x81 [0099.800] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ms\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ms\\", lpFilePart=0x0) returned 0x82 [0099.800] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ms\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7c70 [0099.800] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0099.800] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0099.801] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0099.801] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0099.801] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0099.801] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0099.801] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0099.801] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ms", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ms", lpFilePart=0x0) returned 0x81 [0099.801] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ms\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ms\\", lpFilePart=0x0) returned 0x82 [0099.801] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ms\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7c70 [0099.801] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0099.801] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0099.802] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0099.802] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0099.802] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0099.802] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0099.802] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ms\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ms\\messages.json", lpFilePart=0x0) returned 0x8f [0099.802] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0099.802] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ms\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ms\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x2272d70 | out: lpFileInformation=0x2272d70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb84ac7e3, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb84ac2ee, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0xb892b74a, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xcb)) returned 1 [0099.802] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0099.802] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ms\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ms\\messages.json", lpFilePart=0x0) returned 0x8f [0099.802] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0099.802] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ms\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ms\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0099.802] GetFileType (hFile=0x444) returned 0x1 [0099.802] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0099.803] GetFileType (hFile=0x444) returned 0x1 [0099.803] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xcb [0099.803] ReadFile (in: hFile=0x444, lpBuffer=0x2273208, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x2273208*, lpNumberOfBytesRead=0x3be478*=0xcb, lpOverlapped=0x0) returned 1 [0099.804] CloseHandle (hObject=0x444) returned 1 [0099.821] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ms\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ms\\messages.json", lpFilePart=0x0) returned 0x8f [0099.821] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0099.821] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ms\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ms\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0099.823] GetFileType (hFile=0x444) returned 0x1 [0099.823] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0099.823] GetFileType (hFile=0x444) returned 0x1 [0099.823] WriteFile (in: hFile=0x444, lpBuffer=0x22ea528*, nNumberOfBytesToWrite=0xd0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x22ea528*, lpNumberOfBytesWritten=0x3be388*=0xd0, lpOverlapped=0x0) returned 1 [0099.824] CloseHandle (hObject=0x444) returned 1 [0099.825] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ms\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ms\\messages.json", lpFilePart=0x0) returned 0x8f [0099.825] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ms\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ms\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0099.825] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0099.825] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ms\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ms\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb84ac7e3, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb84ac2ee, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x275806d9, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xd0)) returned 1 [0099.825] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0099.825] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ms\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ms\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ms\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ms\\messages.json.xuy")) returned 1 [0099.827] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0099.827] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ne", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ne", lpFilePart=0x0) returned 0x81 [0099.827] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ne\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ne\\", lpFilePart=0x0) returned 0x82 [0099.827] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ne\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d78b0 [0099.829] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0099.829] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0099.829] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0099.829] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0099.830] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0099.830] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0099.830] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0099.830] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ne", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ne", lpFilePart=0x0) returned 0x81 [0099.830] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ne\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ne\\", lpFilePart=0x0) returned 0x82 [0099.831] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ne\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7e50 [0099.831] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0099.831] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0099.831] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0099.831] FindClose (in: hFindFile=0x5d7e50 | out: hFindFile=0x5d7e50) returned 1 [0099.831] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0099.831] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0099.831] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ne\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ne\\messages.json", lpFilePart=0x0) returned 0x8f [0099.832] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0099.832] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ne\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ne\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x22ee680 | out: lpFileInformation=0x22ee680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb84d2a3e, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb84d0cde, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x20b)) returned 1 [0099.832] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0099.832] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ne\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ne\\messages.json", lpFilePart=0x0) returned 0x8f [0099.832] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0099.832] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ne\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ne\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0099.832] GetFileType (hFile=0x444) returned 0x1 [0099.832] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0099.832] GetFileType (hFile=0x444) returned 0x1 [0099.832] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x20b [0099.832] ReadFile (in: hFile=0x444, lpBuffer=0x22eec58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x22eec58*, lpNumberOfBytesRead=0x3be478*=0x20b, lpOverlapped=0x0) returned 1 [0099.834] CloseHandle (hObject=0x444) returned 1 [0099.884] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ne\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ne\\messages.json", lpFilePart=0x0) returned 0x8f [0099.884] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0099.884] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ne\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ne\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0099.886] GetFileType (hFile=0x444) returned 0x1 [0099.886] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0099.886] GetFileType (hFile=0x444) returned 0x1 [0099.886] WriteFile (in: hFile=0x444, lpBuffer=0x2167400*, nNumberOfBytesToWrite=0x210, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x2167400*, lpNumberOfBytesWritten=0x3be388*=0x210, lpOverlapped=0x0) returned 1 [0099.887] CloseHandle (hObject=0x444) returned 1 [0099.887] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ne\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ne\\messages.json", lpFilePart=0x0) returned 0x8f [0099.887] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ne\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ne\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0099.887] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0099.887] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ne\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ne\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb84d2a3e, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb84d0cde, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x27619022, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x210)) returned 1 [0099.887] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0099.887] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ne\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ne\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ne\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ne\\messages.json.xuy")) returned 1 [0099.890] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0099.890] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\nl", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\nl", lpFilePart=0x0) returned 0x81 [0099.890] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\nl\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\nl\\", lpFilePart=0x0) returned 0x82 [0099.890] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\nl\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7fd0 [0099.891] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0099.891] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0099.891] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0099.891] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0099.891] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0099.891] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0099.891] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0099.891] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\nl", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\nl", lpFilePart=0x0) returned 0x81 [0099.891] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\nl\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\nl\\", lpFilePart=0x0) returned 0x82 [0099.891] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\nl\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7d30 [0099.891] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0099.892] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0099.892] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0099.892] FindClose (in: hFindFile=0x5d7d30 | out: hFindFile=0x5d7d30) returned 1 [0099.892] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0099.892] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0099.892] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\nl\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\nl\\messages.json", lpFilePart=0x0) returned 0x8f [0099.892] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0099.892] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\nl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\nl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x216b558 | out: lpFileInformation=0x216b558*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb84d2a3e, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb84d0cde, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0xb892b74a, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xb1)) returned 1 [0099.892] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0099.892] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\nl\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\nl\\messages.json", lpFilePart=0x0) returned 0x8f [0099.892] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0099.892] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\nl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\nl\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0099.893] GetFileType (hFile=0x444) returned 0x1 [0099.893] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0099.893] GetFileType (hFile=0x444) returned 0x1 [0099.893] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xb1 [0099.893] ReadFile (in: hFile=0x444, lpBuffer=0x216b9d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x216b9d8*, lpNumberOfBytesRead=0x3be478*=0xb1, lpOverlapped=0x0) returned 1 [0099.894] CloseHandle (hObject=0x444) returned 1 [0099.907] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\nl\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\nl\\messages.json", lpFilePart=0x0) returned 0x8f [0099.907] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0099.907] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\nl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\nl\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0099.909] GetFileType (hFile=0x444) returned 0x1 [0099.909] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0099.909] GetFileType (hFile=0x444) returned 0x1 [0099.909] WriteFile (in: hFile=0x444, lpBuffer=0x21e2ce0*, nNumberOfBytesToWrite=0xc0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x21e2ce0*, lpNumberOfBytesWritten=0x3be388*=0xc0, lpOverlapped=0x0) returned 1 [0099.913] CloseHandle (hObject=0x444) returned 1 [0099.913] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\nl\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\nl\\messages.json", lpFilePart=0x0) returned 0x8f [0099.913] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\nl\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\nl\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0099.913] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0099.913] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\nl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\nl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb84d2a3e, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb84d0cde, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x27665603, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xc0)) returned 1 [0099.914] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0099.914] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\nl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\nl\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\nl\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\nl\\messages.json.xuy")) returned 1 [0099.915] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0099.915] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\no", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\no", lpFilePart=0x0) returned 0x81 [0099.915] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\no\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\no\\", lpFilePart=0x0) returned 0x82 [0099.915] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\no\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7c70 [0099.918] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0099.918] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0099.919] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0099.919] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0099.919] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0099.919] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0099.919] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0099.919] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\no", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\no", lpFilePart=0x0) returned 0x81 [0099.919] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\no\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\no\\", lpFilePart=0x0) returned 0x82 [0099.919] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\no\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7eb0 [0099.919] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0099.919] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0099.920] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0099.920] FindClose (in: hFindFile=0x5d7eb0 | out: hFindFile=0x5d7eb0) returned 1 [0099.920] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0099.920] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0099.920] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\no\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\no\\messages.json", lpFilePart=0x0) returned 0x8f [0099.920] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0099.920] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\no\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\no\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x21e6e38 | out: lpFileInformation=0x21e6e38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb84d2a3e, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb84d0cde, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x96)) returned 1 [0099.920] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0099.920] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\no\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\no\\messages.json", lpFilePart=0x0) returned 0x8f [0099.920] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0099.920] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\no\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\no\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0099.921] GetFileType (hFile=0x444) returned 0x1 [0099.921] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0099.921] GetFileType (hFile=0x444) returned 0x1 [0099.921] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x96 [0099.921] ReadFile (in: hFile=0x444, lpBuffer=0x21e7298, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x21e7298*, lpNumberOfBytesRead=0x3be478*=0x96, lpOverlapped=0x0) returned 1 [0099.922] CloseHandle (hObject=0x444) returned 1 [0099.932] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\no\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\no\\messages.json", lpFilePart=0x0) returned 0x8f [0099.932] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0099.932] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\no\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\no\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0099.934] GetFileType (hFile=0x444) returned 0x1 [0099.934] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0099.934] GetFileType (hFile=0x444) returned 0x1 [0099.934] WriteFile (in: hFile=0x444, lpBuffer=0x225e560*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x225e560*, lpNumberOfBytesWritten=0x3be388*=0xa0, lpOverlapped=0x0) returned 1 [0099.936] CloseHandle (hObject=0x444) returned 1 [0099.936] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\no\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\no\\messages.json", lpFilePart=0x0) returned 0x8f [0099.936] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\no\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\no\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0099.936] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0099.936] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\no\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\no\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb84d2a3e, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb84d0cde, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x276b19d1, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xa0)) returned 1 [0099.936] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0099.936] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\no\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\no\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\no\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\no\\messages.json.xuy")) returned 1 [0099.937] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0099.937] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\pl", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\pl", lpFilePart=0x0) returned 0x81 [0099.937] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\pl\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\pl\\", lpFilePart=0x0) returned 0x82 [0099.937] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\pl\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7a90 [0099.938] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0099.938] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0099.938] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0099.938] FindClose (in: hFindFile=0x5d7a90 | out: hFindFile=0x5d7a90) returned 1 [0099.938] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0099.938] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0099.938] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0099.938] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\pl", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\pl", lpFilePart=0x0) returned 0x81 [0099.938] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\pl\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\pl\\", lpFilePart=0x0) returned 0x82 [0099.938] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\pl\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d81b0 [0099.938] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0099.938] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0099.939] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0099.939] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0099.939] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0099.939] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0099.939] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\pl\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\pl\\messages.json", lpFilePart=0x0) returned 0x8f [0099.939] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0099.939] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\pl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\pl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x22626b8 | out: lpFileInformation=0x22626b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb84f8c93, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb84f7dde, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0xb8930551, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xb4)) returned 1 [0099.939] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0099.939] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\pl\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\pl\\messages.json", lpFilePart=0x0) returned 0x8f [0099.939] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0099.939] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\pl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\pl\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0099.939] GetFileType (hFile=0x444) returned 0x1 [0099.939] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0099.939] GetFileType (hFile=0x444) returned 0x1 [0099.939] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xb4 [0099.939] ReadFile (in: hFile=0x444, lpBuffer=0x2262b38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x2262b38*, lpNumberOfBytesRead=0x3be478*=0xb4, lpOverlapped=0x0) returned 1 [0099.940] CloseHandle (hObject=0x444) returned 1 [0099.951] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\pl\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\pl\\messages.json", lpFilePart=0x0) returned 0x8f [0099.951] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0099.968] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\pl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\pl\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0099.969] GetFileType (hFile=0x444) returned 0x1 [0099.969] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0099.969] GetFileType (hFile=0x444) returned 0x1 [0099.969] WriteFile (in: hFile=0x444, lpBuffer=0x22d9e40*, nNumberOfBytesToWrite=0xc0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x22d9e40*, lpNumberOfBytesWritten=0x3be388*=0xc0, lpOverlapped=0x0) returned 1 [0099.970] CloseHandle (hObject=0x444) returned 1 [0099.970] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\pl\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\pl\\messages.json", lpFilePart=0x0) returned 0x8f [0099.970] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\pl\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\pl\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0099.970] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0099.970] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\pl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\pl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb84f8c93, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb84f7dde, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x276fdd84, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xc0)) returned 1 [0099.970] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0099.970] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\pl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\pl\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\pl\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\pl\\messages.json.xuy")) returned 1 [0099.971] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0099.971] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\pt_BR", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\pt_BR", lpFilePart=0x0) returned 0x84 [0099.971] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\pt_BR\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\pt_BR\\", lpFilePart=0x0) returned 0x85 [0099.971] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\pt_BR\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7a30 [0099.973] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0099.973] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0099.973] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0099.973] FindClose (in: hFindFile=0x5d7a30 | out: hFindFile=0x5d7a30) returned 1 [0099.973] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0099.973] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0099.973] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0099.973] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\pt_BR", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\pt_BR", lpFilePart=0x0) returned 0x84 [0099.974] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\pt_BR\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\pt_BR\\", lpFilePart=0x0) returned 0x85 [0099.974] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\pt_BR\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d81b0 [0099.974] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0099.974] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0099.974] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0099.974] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0099.974] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0099.974] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0099.974] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\pt_BR\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\pt_BR\\messages.json", lpFilePart=0x0) returned 0x92 [0099.974] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0099.974] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\pt_br\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x22de068 | out: lpFileInformation=0x22de068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb84f8c93, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb84f7dde, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0xb8930551, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xbb)) returned 1 [0099.975] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0099.975] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\pt_BR\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\pt_BR\\messages.json", lpFilePart=0x0) returned 0x92 [0099.975] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0099.975] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\pt_br\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0099.975] GetFileType (hFile=0x444) returned 0x1 [0099.975] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0099.975] GetFileType (hFile=0x444) returned 0x1 [0099.975] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xbb [0099.975] ReadFile (in: hFile=0x444, lpBuffer=0x22de500, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x22de500*, lpNumberOfBytesRead=0x3be478*=0xbb, lpOverlapped=0x0) returned 1 [0099.976] CloseHandle (hObject=0x444) returned 1 [0100.019] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\pt_BR\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\pt_BR\\messages.json", lpFilePart=0x0) returned 0x92 [0100.019] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0100.019] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\pt_br\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0100.021] GetFileType (hFile=0x444) returned 0x1 [0100.021] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0100.021] GetFileType (hFile=0x444) returned 0x1 [0100.021] WriteFile (in: hFile=0x444, lpBuffer=0x21564b0*, nNumberOfBytesToWrite=0xc0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x21564b0*, lpNumberOfBytesWritten=0x3be388*=0xc0, lpOverlapped=0x0) returned 1 [0100.022] CloseHandle (hObject=0x444) returned 1 [0100.022] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\pt_BR\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\pt_BR\\messages.json", lpFilePart=0x0) returned 0x92 [0100.022] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\pt_BR\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\pt_BR\\messages.json.xuy", lpFilePart=0x0) returned 0x96 [0100.022] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0100.022] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\pt_br\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb84f8c93, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb84f7dde, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2777057b, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xc0)) returned 1 [0100.022] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0100.022] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\pt_br\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\pt_BR\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\pt_br\\messages.json.xuy")) returned 1 [0100.023] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0100.023] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\pt_PT", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\pt_PT", lpFilePart=0x0) returned 0x84 [0100.023] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\pt_PT\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\pt_PT\\", lpFilePart=0x0) returned 0x85 [0100.024] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\pt_PT\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7af0 [0100.024] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0100.024] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0100.024] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0100.024] FindClose (in: hFindFile=0x5d7af0 | out: hFindFile=0x5d7af0) returned 1 [0100.024] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0100.024] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0100.024] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0100.024] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\pt_PT", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\pt_PT", lpFilePart=0x0) returned 0x84 [0100.024] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\pt_PT\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\pt_PT\\", lpFilePart=0x0) returned 0x85 [0100.024] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\pt_PT\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d75b0 [0100.025] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0100.025] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0100.025] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0100.025] FindClose (in: hFindFile=0x5d75b0 | out: hFindFile=0x5d75b0) returned 1 [0100.025] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0100.025] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0100.025] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\pt_PT\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\pt_PT\\messages.json", lpFilePart=0x0) returned 0x92 [0100.025] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0100.025] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\pt_pt\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x215a6f0 | out: lpFileInformation=0x215a6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb84f8c93, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb84f7dde, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0xb8930551, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xc6)) returned 1 [0100.025] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0100.025] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\pt_PT\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\pt_PT\\messages.json", lpFilePart=0x0) returned 0x92 [0100.025] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0100.025] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\pt_pt\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0100.026] GetFileType (hFile=0x444) returned 0x1 [0100.026] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0100.026] GetFileType (hFile=0x444) returned 0x1 [0100.026] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xc6 [0100.026] ReadFile (in: hFile=0x444, lpBuffer=0x215ab90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x215ab90*, lpNumberOfBytesRead=0x3be478*=0xc6, lpOverlapped=0x0) returned 1 [0100.029] CloseHandle (hObject=0x444) returned 1 [0100.041] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\pt_PT\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\pt_PT\\messages.json", lpFilePart=0x0) returned 0x92 [0100.041] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0100.041] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\pt_pt\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0100.043] GetFileType (hFile=0x444) returned 0x1 [0100.043] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0100.043] GetFileType (hFile=0x444) returned 0x1 [0100.043] WriteFile (in: hFile=0x444, lpBuffer=0x21d1ec0*, nNumberOfBytesToWrite=0xd0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x21d1ec0*, lpNumberOfBytesWritten=0x3be388*=0xd0, lpOverlapped=0x0) returned 1 [0100.044] CloseHandle (hObject=0x444) returned 1 [0100.044] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\pt_PT\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\pt_PT\\messages.json", lpFilePart=0x0) returned 0x92 [0100.045] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\pt_PT\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\pt_PT\\messages.json.xuy", lpFilePart=0x0) returned 0x96 [0100.045] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0100.045] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\pt_pt\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb84f8c93, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb84f7dde, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x27796650, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xd0)) returned 1 [0100.045] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0100.045] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\pt_pt\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\pt_PT\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\pt_pt\\messages.json.xuy")) returned 1 [0100.046] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0100.046] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ro", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ro", lpFilePart=0x0) returned 0x81 [0100.046] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ro\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ro\\", lpFilePart=0x0) returned 0x82 [0100.046] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ro\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7af0 [0100.048] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0100.048] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0100.048] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0100.048] FindClose (in: hFindFile=0x5d7af0 | out: hFindFile=0x5d7af0) returned 1 [0100.048] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0100.048] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0100.048] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0100.048] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ro", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ro", lpFilePart=0x0) returned 0x81 [0100.048] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ro\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ro\\", lpFilePart=0x0) returned 0x82 [0100.048] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ro\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7550 [0100.048] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0100.049] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0100.049] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0100.049] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0100.049] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0100.049] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0100.049] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ro\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ro\\messages.json", lpFilePart=0x0) returned 0x8f [0100.049] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0100.049] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ro\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ro\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x21d6030 | out: lpFileInformation=0x21d6030*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb84f8c93, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb84f7dde, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0xb8930551, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xaf)) returned 1 [0100.049] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0100.049] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ro\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ro\\messages.json", lpFilePart=0x0) returned 0x8f [0100.049] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0100.049] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ro\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ro\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0100.049] GetFileType (hFile=0x444) returned 0x1 [0100.049] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0100.049] GetFileType (hFile=0x444) returned 0x1 [0100.049] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xaf [0100.050] ReadFile (in: hFile=0x444, lpBuffer=0x21d64a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x21d64a8*, lpNumberOfBytesRead=0x3be478*=0xaf, lpOverlapped=0x0) returned 1 [0100.050] CloseHandle (hObject=0x444) returned 1 [0100.063] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ro\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ro\\messages.json", lpFilePart=0x0) returned 0x8f [0100.063] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0100.063] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ro\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ro\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0100.064] GetFileType (hFile=0x444) returned 0x1 [0100.064] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0100.064] GetFileType (hFile=0x444) returned 0x1 [0100.064] WriteFile (in: hFile=0x444, lpBuffer=0x224d788*, nNumberOfBytesToWrite=0xb0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x224d788*, lpNumberOfBytesWritten=0x3be388*=0xb0, lpOverlapped=0x0) returned 1 [0100.065] CloseHandle (hObject=0x444) returned 1 [0100.065] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ro\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ro\\messages.json", lpFilePart=0x0) returned 0x8f [0100.065] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ro\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ro\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0100.065] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0100.065] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ro\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ro\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb84f8c93, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb84f7dde, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x277e3078, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xb0)) returned 1 [0100.065] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0100.066] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ro\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ro\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ro\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ro\\messages.json.xuy")) returned 1 [0100.066] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0100.066] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ru", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ru", lpFilePart=0x0) returned 0x81 [0100.067] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ru\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ru\\", lpFilePart=0x0) returned 0x82 [0100.067] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ru\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7370 [0100.067] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0100.067] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0100.067] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0100.067] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0100.067] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0100.067] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0100.067] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0100.067] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ru", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ru", lpFilePart=0x0) returned 0x81 [0100.067] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ru\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ru\\", lpFilePart=0x0) returned 0x82 [0100.068] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ru\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7c70 [0100.068] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0100.069] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0100.069] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0100.069] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0100.069] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0100.069] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0100.069] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ru\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ru\\messages.json", lpFilePart=0x0) returned 0x8f [0100.069] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0100.069] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ru\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ru\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x22518e0 | out: lpFileInformation=0x22518e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb851eeef, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb851eede, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0xb8930551, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x119)) returned 1 [0100.069] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0100.069] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ru\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ru\\messages.json", lpFilePart=0x0) returned 0x8f [0100.069] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0100.069] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ru\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ru\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0100.070] GetFileType (hFile=0x444) returned 0x1 [0100.070] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0100.070] GetFileType (hFile=0x444) returned 0x1 [0100.070] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x119 [0100.070] ReadFile (in: hFile=0x444, lpBuffer=0x2251dc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x2251dc8*, lpNumberOfBytesRead=0x3be478*=0x119, lpOverlapped=0x0) returned 1 [0100.075] CloseHandle (hObject=0x444) returned 1 [0100.088] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ru\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ru\\messages.json", lpFilePart=0x0) returned 0x8f [0100.088] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0100.088] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ru\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ru\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0100.090] GetFileType (hFile=0x444) returned 0x1 [0100.090] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0100.090] GetFileType (hFile=0x444) returned 0x1 [0100.090] WriteFile (in: hFile=0x444, lpBuffer=0x22c93d0*, nNumberOfBytesToWrite=0x120, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x22c93d0*, lpNumberOfBytesWritten=0x3be388*=0x120, lpOverlapped=0x0) returned 1 [0100.091] CloseHandle (hObject=0x444) returned 1 [0100.091] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ru\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ru\\messages.json", lpFilePart=0x0) returned 0x8f [0100.091] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ru\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ru\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0100.091] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0100.091] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ru\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ru\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb851eeef, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb851eede, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x27808e3f, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x120)) returned 1 [0100.091] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0100.091] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ru\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ru\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ru\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ru\\messages.json.xuy")) returned 1 [0100.093] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0100.093] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\si", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\si", lpFilePart=0x0) returned 0x81 [0100.093] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\si\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\si\\", lpFilePart=0x0) returned 0x82 [0100.094] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\si\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7d90 [0100.103] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0100.104] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0100.104] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0100.104] FindClose (in: hFindFile=0x5d7d90 | out: hFindFile=0x5d7d90) returned 1 [0100.104] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0100.104] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0100.104] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0100.104] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\si", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\si", lpFilePart=0x0) returned 0x81 [0100.104] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\si\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\si\\", lpFilePart=0x0) returned 0x82 [0100.104] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\si\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d78b0 [0100.104] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0100.105] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0100.105] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0100.105] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0100.105] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0100.105] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0100.105] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\si\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\si\\messages.json", lpFilePart=0x0) returned 0x8f [0100.105] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0100.105] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\si\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\si\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x22cd528 | out: lpFileInformation=0x22cd528*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8539597, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb853757e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x14e)) returned 1 [0100.105] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0100.105] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\si\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\si\\messages.json", lpFilePart=0x0) returned 0x8f [0100.105] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0100.105] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\si\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\si\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0100.105] GetFileType (hFile=0x444) returned 0x1 [0100.105] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0100.106] GetFileType (hFile=0x444) returned 0x1 [0100.106] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x14e [0100.106] ReadFile (in: hFile=0x444, lpBuffer=0x22cda40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x22cda40*, lpNumberOfBytesRead=0x3be478*=0x14e, lpOverlapped=0x0) returned 1 [0100.106] CloseHandle (hObject=0x444) returned 1 [0100.117] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\si\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\si\\messages.json", lpFilePart=0x0) returned 0x8f [0100.117] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0100.118] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\si\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\si\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0100.119] GetFileType (hFile=0x444) returned 0x1 [0100.119] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0100.119] GetFileType (hFile=0x444) returned 0x1 [0100.119] WriteFile (in: hFile=0x444, lpBuffer=0x2345138*, nNumberOfBytesToWrite=0x150, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x2345138*, lpNumberOfBytesWritten=0x3be388*=0x150, lpOverlapped=0x0) returned 1 [0100.120] CloseHandle (hObject=0x444) returned 1 [0100.120] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\si\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\si\\messages.json", lpFilePart=0x0) returned 0x8f [0100.120] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\si\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\si\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0100.120] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0100.120] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\si\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\si\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8539597, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb853757e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x278552d8, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x150)) returned 1 [0100.120] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0100.120] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\si\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\si\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\si\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\si\\messages.json.xuy")) returned 1 [0100.121] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0100.121] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sk", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sk", lpFilePart=0x0) returned 0x81 [0100.121] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sk\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sk\\", lpFilePart=0x0) returned 0x82 [0100.121] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sk\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d78b0 [0100.122] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0100.122] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0100.122] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0100.122] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0100.122] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0100.122] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0100.122] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0100.122] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sk", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sk", lpFilePart=0x0) returned 0x81 [0100.122] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sk\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sk\\", lpFilePart=0x0) returned 0x82 [0100.122] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sk\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7550 [0100.124] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0100.124] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0100.124] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0100.124] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0100.124] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0100.124] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0100.124] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sk\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sk\\messages.json", lpFilePart=0x0) returned 0x8f [0100.124] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0100.124] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sk\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sk\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x2349290 | out: lpFileInformation=0x2349290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb85431d9, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb85411be, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0xb8932c7c, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xc5)) returned 1 [0100.124] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0100.124] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sk\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sk\\messages.json", lpFilePart=0x0) returned 0x8f [0100.125] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0100.125] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sk\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sk\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0100.125] GetFileType (hFile=0x444) returned 0x1 [0100.125] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0100.125] GetFileType (hFile=0x444) returned 0x1 [0100.125] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xc5 [0100.125] ReadFile (in: hFile=0x444, lpBuffer=0x2349720, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x2349720*, lpNumberOfBytesRead=0x3be478*=0xc5, lpOverlapped=0x0) returned 1 [0100.126] CloseHandle (hObject=0x444) returned 1 [0100.175] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sk\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sk\\messages.json", lpFilePart=0x0) returned 0x8f [0100.175] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0100.175] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sk\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sk\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0100.176] GetFileType (hFile=0x444) returned 0x1 [0100.176] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0100.177] GetFileType (hFile=0x444) returned 0x1 [0100.177] WriteFile (in: hFile=0x444, lpBuffer=0x21c13e8*, nNumberOfBytesToWrite=0xd0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x21c13e8*, lpNumberOfBytesWritten=0x3be388*=0xd0, lpOverlapped=0x0) returned 1 [0100.177] CloseHandle (hObject=0x444) returned 1 [0100.177] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sk\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sk\\messages.json", lpFilePart=0x0) returned 0x8f [0100.177] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sk\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sk\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0100.178] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0100.178] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sk\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sk\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb85431d9, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb85411be, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x278edd74, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xd0)) returned 1 [0100.178] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0100.178] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sk\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sk\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sk\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sk\\messages.json.xuy")) returned 1 [0100.179] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0100.179] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sl", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sl", lpFilePart=0x0) returned 0x81 [0100.179] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sl\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sl\\", lpFilePart=0x0) returned 0x82 [0100.179] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sl\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7370 [0100.180] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0100.180] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0100.181] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0100.181] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0100.181] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0100.181] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0100.181] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0100.181] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sl", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sl", lpFilePart=0x0) returned 0x81 [0100.181] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sl\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sl\\", lpFilePart=0x0) returned 0x82 [0100.181] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sl\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d78b0 [0100.181] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0100.181] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0100.181] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0100.182] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0100.182] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0100.182] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0100.182] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sl\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sl\\messages.json", lpFilePart=0x0) returned 0x8f [0100.182] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0100.182] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x21c5540 | out: lpFileInformation=0x21c5540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb855434f, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb855232e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0xb8932c7c, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xbe)) returned 1 [0100.182] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0100.182] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sl\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sl\\messages.json", lpFilePart=0x0) returned 0x8f [0100.182] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0100.182] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sl\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0100.182] GetFileType (hFile=0x444) returned 0x1 [0100.183] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0100.183] GetFileType (hFile=0x444) returned 0x1 [0100.183] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xbe [0100.183] ReadFile (in: hFile=0x444, lpBuffer=0x21c59c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x21c59c8*, lpNumberOfBytesRead=0x3be478*=0xbe, lpOverlapped=0x0) returned 1 [0100.184] CloseHandle (hObject=0x444) returned 1 [0100.196] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sl\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sl\\messages.json", lpFilePart=0x0) returned 0x8f [0100.196] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0100.196] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sl\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0100.197] GetFileType (hFile=0x444) returned 0x1 [0100.198] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0100.198] GetFileType (hFile=0x444) returned 0x1 [0100.198] WriteFile (in: hFile=0x444, lpBuffer=0x223ccc8*, nNumberOfBytesToWrite=0xc0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x223ccc8*, lpNumberOfBytesWritten=0x3be388*=0xc0, lpOverlapped=0x0) returned 1 [0100.199] CloseHandle (hObject=0x444) returned 1 [0100.199] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sl\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sl\\messages.json", lpFilePart=0x0) returned 0x8f [0100.199] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sl\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sl\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0100.199] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0100.199] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb855434f, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb855232e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x27914211, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xc0)) returned 1 [0100.199] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0100.199] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sl\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sl\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sl\\messages.json.xuy")) returned 1 [0100.200] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0100.200] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sr", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sr", lpFilePart=0x0) returned 0x81 [0100.200] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sr\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sr\\", lpFilePart=0x0) returned 0x82 [0100.200] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sr\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d78b0 [0100.201] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0100.201] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0100.201] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0100.201] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0100.201] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0100.201] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0100.201] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0100.201] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sr", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sr", lpFilePart=0x0) returned 0x81 [0100.201] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sr\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sr\\", lpFilePart=0x0) returned 0x82 [0100.202] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sr\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7a30 [0100.202] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0100.202] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0100.202] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0100.202] FindClose (in: hFindFile=0x5d7a30 | out: hFindFile=0x5d7a30) returned 1 [0100.202] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0100.202] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0100.202] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sr\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sr\\messages.json", lpFilePart=0x0) returned 0x8f [0100.202] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0100.202] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x2240e20 | out: lpFileInformation=0x2240e20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8566e0b, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb8565bae, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0xb8932c7c, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x104)) returned 1 [0100.203] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0100.203] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sr\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sr\\messages.json", lpFilePart=0x0) returned 0x8f [0100.203] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0100.203] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sr\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0100.203] GetFileType (hFile=0x444) returned 0x1 [0100.203] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0100.203] GetFileType (hFile=0x444) returned 0x1 [0100.203] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x104 [0100.203] ReadFile (in: hFile=0x444, lpBuffer=0x22412f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x22412f0*, lpNumberOfBytesRead=0x3be478*=0x104, lpOverlapped=0x0) returned 1 [0100.204] CloseHandle (hObject=0x444) returned 1 [0100.214] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sr\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sr\\messages.json", lpFilePart=0x0) returned 0x8f [0100.214] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0100.214] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sr\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0100.216] GetFileType (hFile=0x444) returned 0x1 [0100.216] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0100.216] GetFileType (hFile=0x444) returned 0x1 [0100.216] WriteFile (in: hFile=0x444, lpBuffer=0x22b88b0*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x22b88b0*, lpNumberOfBytesWritten=0x3be388*=0x110, lpOverlapped=0x0) returned 1 [0100.218] CloseHandle (hObject=0x444) returned 1 [0100.218] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sr\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sr\\messages.json", lpFilePart=0x0) returned 0x8f [0100.218] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sr\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sr\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0100.218] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0100.218] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8566e0b, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb8565bae, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x27960352, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x110)) returned 1 [0100.218] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0100.218] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sr\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sr\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sr\\messages.json.xuy")) returned 1 [0100.219] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0100.220] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sv", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sv", lpFilePart=0x0) returned 0x81 [0100.220] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sv\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sv\\", lpFilePart=0x0) returned 0x82 [0100.220] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sv\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7a90 [0100.221] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0100.222] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0100.222] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0100.222] FindClose (in: hFindFile=0x5d7a90 | out: hFindFile=0x5d7a90) returned 1 [0100.222] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0100.222] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0100.222] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0100.222] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sv", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sv", lpFilePart=0x0) returned 0x81 [0100.222] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sv\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sv\\", lpFilePart=0x0) returned 0x82 [0100.222] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sv\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7fd0 [0100.222] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0100.222] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0100.223] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0100.223] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0100.223] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0100.223] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0100.223] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sv\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sv\\messages.json", lpFilePart=0x0) returned 0x8f [0100.223] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0100.223] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sv\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sv\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x22bca08 | out: lpFileInformation=0x22bca08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8566e0b, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb8565bae, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0xb8932c7c, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1 [0100.223] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0100.223] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sv\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sv\\messages.json", lpFilePart=0x0) returned 0x8f [0100.223] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0100.223] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sv\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sv\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0100.223] GetFileType (hFile=0x444) returned 0x1 [0100.223] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0100.223] GetFileType (hFile=0x444) returned 0x1 [0100.223] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xb3 [0100.223] ReadFile (in: hFile=0x444, lpBuffer=0x22bce88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x22bce88*, lpNumberOfBytesRead=0x3be478*=0xb3, lpOverlapped=0x0) returned 1 [0100.224] CloseHandle (hObject=0x444) returned 1 [0100.236] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sv\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sv\\messages.json", lpFilePart=0x0) returned 0x8f [0100.236] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0100.236] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sv\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sv\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0100.238] GetFileType (hFile=0x444) returned 0x1 [0100.238] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0100.238] GetFileType (hFile=0x444) returned 0x1 [0100.238] WriteFile (in: hFile=0x444, lpBuffer=0x2334190*, nNumberOfBytesToWrite=0xc0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x2334190*, lpNumberOfBytesWritten=0x3be388*=0xc0, lpOverlapped=0x0) returned 1 [0100.239] CloseHandle (hObject=0x444) returned 1 [0100.239] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sv\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sv\\messages.json", lpFilePart=0x0) returned 0x8f [0100.239] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sv\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sv\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0100.239] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0100.239] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sv\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sv\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8566e0b, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb8565bae, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2798664f, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xc0)) returned 1 [0100.239] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0100.239] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sv\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sv\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sv\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sv\\messages.json.xuy")) returned 1 [0100.240] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0100.240] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sw", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sw", lpFilePart=0x0) returned 0x81 [0100.240] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sw\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sw\\", lpFilePart=0x0) returned 0x82 [0100.240] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sw\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7a30 [0100.240] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0100.241] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0100.241] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0100.241] FindClose (in: hFindFile=0x5d7a30 | out: hFindFile=0x5d7a30) returned 1 [0100.241] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0100.241] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0100.241] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0100.241] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sw", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sw", lpFilePart=0x0) returned 0x81 [0100.241] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sw\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sw\\", lpFilePart=0x0) returned 0x82 [0100.241] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sw\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d79d0 [0100.241] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0100.241] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0100.242] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0100.242] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0100.242] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0100.242] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0100.242] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sw\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sw\\messages.json", lpFilePart=0x0) returned 0x8f [0100.242] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0100.242] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sw\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sw\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x23382e8 | out: lpFileInformation=0x23382e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb858cfd7, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb858ccae, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0xb893538c, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xc4)) returned 1 [0100.242] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0100.242] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sw\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sw\\messages.json", lpFilePart=0x0) returned 0x8f [0100.242] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0100.242] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sw\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sw\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0100.242] GetFileType (hFile=0x444) returned 0x1 [0100.242] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0100.243] GetFileType (hFile=0x444) returned 0x1 [0100.243] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xc4 [0100.243] ReadFile (in: hFile=0x444, lpBuffer=0x2338778, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x2338778*, lpNumberOfBytesRead=0x3be478*=0xc4, lpOverlapped=0x0) returned 1 [0100.243] CloseHandle (hObject=0x444) returned 1 [0100.281] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sw\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sw\\messages.json", lpFilePart=0x0) returned 0x8f [0100.281] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0100.282] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sw\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sw\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0100.283] GetFileType (hFile=0x444) returned 0x1 [0100.283] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0100.283] GetFileType (hFile=0x444) returned 0x1 [0100.283] WriteFile (in: hFile=0x444, lpBuffer=0x21b0420*, nNumberOfBytesToWrite=0xd0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x21b0420*, lpNumberOfBytesWritten=0x3be388*=0xd0, lpOverlapped=0x0) returned 1 [0100.284] CloseHandle (hObject=0x444) returned 1 [0100.284] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sw\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sw\\messages.json", lpFilePart=0x0) returned 0x8f [0100.284] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sw\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sw\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0100.284] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0100.284] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sw\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sw\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb858cfd7, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb858ccae, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x279f8d9a, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xd0)) returned 1 [0100.284] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0100.284] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sw\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sw\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sw\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sw\\messages.json.xuy")) returned 1 [0100.285] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0100.285] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ta", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ta", lpFilePart=0x0) returned 0x81 [0100.285] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ta\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ta\\", lpFilePart=0x0) returned 0x82 [0100.285] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ta\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7370 [0100.287] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0100.287] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0100.287] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0100.287] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0100.287] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0100.287] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0100.287] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0100.287] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ta", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ta", lpFilePart=0x0) returned 0x81 [0100.287] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ta\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ta\\", lpFilePart=0x0) returned 0x82 [0100.288] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ta\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7a30 [0100.288] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0100.288] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0100.288] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0100.288] FindClose (in: hFindFile=0x5d7a30 | out: hFindFile=0x5d7a30) returned 1 [0100.288] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0100.288] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0100.288] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ta\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ta\\messages.json", lpFilePart=0x0) returned 0x8f [0100.288] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0100.288] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ta\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ta\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x21b4578 | out: lpFileInformation=0x21b4578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb858cfd7, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb858ccae, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0xb893538c, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x150)) returned 1 [0100.289] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0100.289] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ta\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ta\\messages.json", lpFilePart=0x0) returned 0x8f [0100.289] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0100.289] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ta\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ta\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0100.289] GetFileType (hFile=0x444) returned 0x1 [0100.289] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0100.289] GetFileType (hFile=0x444) returned 0x1 [0100.289] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x150 [0100.289] ReadFile (in: hFile=0x444, lpBuffer=0x21b4a90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x21b4a90*, lpNumberOfBytesRead=0x3be478*=0x150, lpOverlapped=0x0) returned 1 [0100.290] CloseHandle (hObject=0x444) returned 1 [0100.304] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ta\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ta\\messages.json", lpFilePart=0x0) returned 0x8f [0100.304] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0100.304] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ta\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ta\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0100.307] GetFileType (hFile=0x444) returned 0x1 [0100.307] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0100.307] GetFileType (hFile=0x444) returned 0x1 [0100.307] WriteFile (in: hFile=0x444, lpBuffer=0x222c1e0*, nNumberOfBytesToWrite=0x160, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x222c1e0*, lpNumberOfBytesWritten=0x3be388*=0x160, lpOverlapped=0x0) returned 1 [0100.308] CloseHandle (hObject=0x444) returned 1 [0100.308] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ta\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ta\\messages.json", lpFilePart=0x0) returned 0x8f [0100.308] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ta\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ta\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0100.309] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0100.309] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ta\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ta\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb858cfd7, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb858ccae, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x27a1ef59, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x160)) returned 1 [0100.309] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0100.309] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ta\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ta\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ta\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ta\\messages.json.xuy")) returned 1 [0100.311] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0100.311] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\te", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\te", lpFilePart=0x0) returned 0x81 [0100.311] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\te\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\te\\", lpFilePart=0x0) returned 0x82 [0100.311] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\te\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d78b0 [0100.312] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0100.312] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0100.312] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0100.312] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0100.312] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0100.312] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0100.312] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0100.312] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\te", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\te", lpFilePart=0x0) returned 0x81 [0100.312] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\te\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\te\\", lpFilePart=0x0) returned 0x82 [0100.312] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\te\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d79d0 [0100.312] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0100.313] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0100.313] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0100.313] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0100.313] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0100.313] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0100.313] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\te\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\te\\messages.json", lpFilePart=0x0) returned 0x8f [0100.313] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0100.313] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\te\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\te\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x2230338 | out: lpFileInformation=0x2230338*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb85b3229, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb85b169e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0xb893538c, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x115)) returned 1 [0100.313] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0100.313] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\te\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\te\\messages.json", lpFilePart=0x0) returned 0x8f [0100.313] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0100.313] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\te\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\te\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0100.313] GetFileType (hFile=0x444) returned 0x1 [0100.313] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0100.313] GetFileType (hFile=0x444) returned 0x1 [0100.313] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x115 [0100.314] ReadFile (in: hFile=0x444, lpBuffer=0x2230818, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x2230818*, lpNumberOfBytesRead=0x3be478*=0x115, lpOverlapped=0x0) returned 1 [0100.314] CloseHandle (hObject=0x444) returned 1 [0100.324] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\te\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\te\\messages.json", lpFilePart=0x0) returned 0x8f [0100.324] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0100.325] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\te\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\te\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0100.326] GetFileType (hFile=0x444) returned 0x1 [0100.326] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0100.326] GetFileType (hFile=0x444) returned 0x1 [0100.326] WriteFile (in: hFile=0x444, lpBuffer=0x22a7e28*, nNumberOfBytesToWrite=0x120, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x22a7e28*, lpNumberOfBytesWritten=0x3be388*=0x120, lpOverlapped=0x0) returned 1 [0100.327] CloseHandle (hObject=0x444) returned 1 [0100.327] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\te\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\te\\messages.json", lpFilePart=0x0) returned 0x8f [0100.327] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\te\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\te\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0100.327] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0100.327] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\te\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\te\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb85b3229, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb85b169e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x27a6bffd, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x120)) returned 1 [0100.327] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0100.328] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\te\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\te\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\te\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\te\\messages.json.xuy")) returned 1 [0100.329] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0100.329] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\th", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\th", lpFilePart=0x0) returned 0x81 [0100.329] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\th\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\th\\", lpFilePart=0x0) returned 0x82 [0100.329] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\th\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7e50 [0100.331] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0100.331] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0100.331] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0100.331] FindClose (in: hFindFile=0x5d7e50 | out: hFindFile=0x5d7e50) returned 1 [0100.331] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0100.331] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0100.331] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0100.331] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\th", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\th", lpFilePart=0x0) returned 0x81 [0100.331] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\th\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\th\\", lpFilePart=0x0) returned 0x82 [0100.331] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\th\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7df0 [0100.332] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0100.332] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0100.332] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0100.332] FindClose (in: hFindFile=0x5d7df0 | out: hFindFile=0x5d7df0) returned 1 [0100.332] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0100.332] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0100.332] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\th\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\th\\messages.json", lpFilePart=0x0) returned 0x8f [0100.332] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0100.332] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\th\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\th\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x22abf80 | out: lpFileInformation=0x22abf80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb85b3229, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb85b169e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0xb893538c, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x125)) returned 1 [0100.332] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0100.332] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\th\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\th\\messages.json", lpFilePart=0x0) returned 0x8f [0100.332] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0100.332] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\th\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\th\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0100.332] GetFileType (hFile=0x444) returned 0x1 [0100.333] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0100.333] GetFileType (hFile=0x444) returned 0x1 [0100.333] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x125 [0100.333] ReadFile (in: hFile=0x444, lpBuffer=0x22ac470, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x22ac470*, lpNumberOfBytesRead=0x3be478*=0x125, lpOverlapped=0x0) returned 1 [0100.334] CloseHandle (hObject=0x444) returned 1 [0100.345] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\th\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\th\\messages.json", lpFilePart=0x0) returned 0x8f [0100.345] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0100.345] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\th\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\th\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0100.346] GetFileType (hFile=0x444) returned 0x1 [0100.346] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0100.347] GetFileType (hFile=0x444) returned 0x1 [0100.347] WriteFile (in: hFile=0x444, lpBuffer=0x2323ad0*, nNumberOfBytesToWrite=0x130, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x2323ad0*, lpNumberOfBytesWritten=0x3be388*=0x130, lpOverlapped=0x0) returned 1 [0100.347] CloseHandle (hObject=0x444) returned 1 [0100.348] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\th\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\th\\messages.json", lpFilePart=0x0) returned 0x8f [0100.348] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\th\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\th\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0100.348] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0100.348] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\th\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\th\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb85b3229, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb85b169e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x27a919f9, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x130)) returned 1 [0100.348] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0100.348] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\th\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\th\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\th\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\th\\messages.json.xuy")) returned 1 [0100.349] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0100.349] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\tr", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\tr", lpFilePart=0x0) returned 0x81 [0100.349] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\tr\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\tr\\", lpFilePart=0x0) returned 0x82 [0100.349] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\tr\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7550 [0100.349] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0100.349] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0100.350] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0100.350] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0100.350] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0100.350] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0100.350] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0100.350] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\tr", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\tr", lpFilePart=0x0) returned 0x81 [0100.350] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\tr\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\tr\\", lpFilePart=0x0) returned 0x82 [0100.350] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\tr\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7a30 [0100.350] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0100.350] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0100.350] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0100.350] FindClose (in: hFindFile=0x5d7a30 | out: hFindFile=0x5d7a30) returned 1 [0100.350] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0100.350] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0100.351] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\tr\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\tr\\messages.json", lpFilePart=0x0) returned 0x8f [0100.351] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0100.351] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\tr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\tr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x2327c28 | out: lpFileInformation=0x2327c28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb85b3229, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb85b169e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0xb893538c, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xcd)) returned 1 [0100.351] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0100.351] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\tr\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\tr\\messages.json", lpFilePart=0x0) returned 0x8f [0100.351] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0100.351] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\tr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\tr\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0100.351] GetFileType (hFile=0x444) returned 0x1 [0100.351] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0100.351] GetFileType (hFile=0x444) returned 0x1 [0100.351] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xcd [0100.351] ReadFile (in: hFile=0x444, lpBuffer=0x23280c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x23280c0*, lpNumberOfBytesRead=0x3be478*=0xcd, lpOverlapped=0x0) returned 1 [0100.352] CloseHandle (hObject=0x444) returned 1 [0100.395] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\tr\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\tr\\messages.json", lpFilePart=0x0) returned 0x8f [0100.395] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0100.395] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\tr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\tr\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0100.396] GetFileType (hFile=0x444) returned 0x1 [0100.396] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0100.396] GetFileType (hFile=0x444) returned 0x1 [0100.396] WriteFile (in: hFile=0x444, lpBuffer=0x219fd08*, nNumberOfBytesToWrite=0xd0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x219fd08*, lpNumberOfBytesWritten=0x3be388*=0xd0, lpOverlapped=0x0) returned 1 [0100.397] CloseHandle (hObject=0x444) returned 1 [0100.397] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\tr\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\tr\\messages.json", lpFilePart=0x0) returned 0x8f [0100.397] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\tr\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\tr\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0100.397] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0100.397] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\tr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\tr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb85b3229, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb85b169e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x27b0413d, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xd0)) returned 1 [0100.398] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0100.398] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\tr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\tr\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\tr\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\tr\\messages.json.xuy")) returned 1 [0100.398] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0100.398] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\uk", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\uk", lpFilePart=0x0) returned 0x81 [0100.399] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\uk\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\uk\\", lpFilePart=0x0) returned 0x82 [0100.399] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\uk\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7550 [0100.400] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0100.400] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0100.400] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0100.400] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0100.400] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0100.400] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0100.400] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0100.400] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\uk", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\uk", lpFilePart=0x0) returned 0x81 [0100.401] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\uk\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\uk\\", lpFilePart=0x0) returned 0x82 [0100.401] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\uk\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d78b0 [0100.401] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0100.401] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0100.401] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0100.401] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0100.401] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0100.401] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0100.401] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\uk\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\uk\\messages.json", lpFilePart=0x0) returned 0x8f [0100.401] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0100.401] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\uk\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\uk\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x21a3e60 | out: lpFileInformation=0x21a3e60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb85d947b, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb85d879e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0xb8937a9b, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x115)) returned 1 [0100.402] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0100.402] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\uk\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\uk\\messages.json", lpFilePart=0x0) returned 0x8f [0100.402] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0100.402] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\uk\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\uk\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0100.402] GetFileType (hFile=0x444) returned 0x1 [0100.402] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0100.402] GetFileType (hFile=0x444) returned 0x1 [0100.402] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x115 [0100.402] ReadFile (in: hFile=0x444, lpBuffer=0x21a4340, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x21a4340*, lpNumberOfBytesRead=0x3be478*=0x115, lpOverlapped=0x0) returned 1 [0100.403] CloseHandle (hObject=0x444) returned 1 [0100.414] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\uk\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\uk\\messages.json", lpFilePart=0x0) returned 0x8f [0100.414] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0100.414] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\uk\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\uk\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0100.416] GetFileType (hFile=0x444) returned 0x1 [0100.416] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0100.416] GetFileType (hFile=0x444) returned 0x1 [0100.416] WriteFile (in: hFile=0x444, lpBuffer=0x221b950*, nNumberOfBytesToWrite=0x120, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x221b950*, lpNumberOfBytesWritten=0x3be388*=0x120, lpOverlapped=0x0) returned 1 [0100.417] CloseHandle (hObject=0x444) returned 1 [0100.418] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\uk\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\uk\\messages.json", lpFilePart=0x0) returned 0x8f [0100.418] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\uk\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\uk\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0100.418] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0100.418] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\uk\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\uk\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb85d947b, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb85d879e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x27b29f0b, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x120)) returned 1 [0100.418] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0100.418] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\uk\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\uk\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\uk\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\uk\\messages.json.xuy")) returned 1 [0100.419] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0100.419] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ur", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ur", lpFilePart=0x0) returned 0x81 [0100.419] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ur\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ur\\", lpFilePart=0x0) returned 0x82 [0100.419] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ur\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d78b0 [0100.420] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0100.420] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0100.420] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0100.420] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0100.420] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0100.420] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0100.420] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0100.420] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ur", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ur", lpFilePart=0x0) returned 0x81 [0100.420] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ur\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ur\\", lpFilePart=0x0) returned 0x82 [0100.420] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ur\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7370 [0100.421] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0100.421] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0100.421] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0100.421] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0100.421] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0100.421] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0100.421] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ur\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ur\\messages.json", lpFilePart=0x0) returned 0x8f [0100.421] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0100.421] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ur\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ur\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x221faa8 | out: lpFileInformation=0x221faa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb85ff6ec, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb85fd18e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x177)) returned 1 [0100.421] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0100.421] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ur\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ur\\messages.json", lpFilePart=0x0) returned 0x8f [0100.421] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0100.421] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ur\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ur\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0100.422] GetFileType (hFile=0x444) returned 0x1 [0100.422] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0100.422] GetFileType (hFile=0x444) returned 0x1 [0100.422] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x177 [0100.422] ReadFile (in: hFile=0x444, lpBuffer=0x221ffe8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x221ffe8*, lpNumberOfBytesRead=0x3be478*=0x177, lpOverlapped=0x0) returned 1 [0100.422] CloseHandle (hObject=0x444) returned 1 [0100.433] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ur\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ur\\messages.json", lpFilePart=0x0) returned 0x8f [0100.433] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0100.433] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ur\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ur\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0100.444] GetFileType (hFile=0x444) returned 0x1 [0100.444] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0100.444] GetFileType (hFile=0x444) returned 0x1 [0100.444] WriteFile (in: hFile=0x444, lpBuffer=0x22977d8*, nNumberOfBytesToWrite=0x180, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x22977d8*, lpNumberOfBytesWritten=0x3be388*=0x180, lpOverlapped=0x0) returned 1 [0100.444] CloseHandle (hObject=0x444) returned 1 [0100.445] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ur\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ur\\messages.json", lpFilePart=0x0) returned 0x8f [0100.445] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ur\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ur\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0100.445] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0100.445] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ur\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ur\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb85ff6ec, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb85fd18e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x27b763de, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x180)) returned 1 [0100.445] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0100.445] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ur\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ur\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ur\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ur\\messages.json.xuy")) returned 1 [0100.446] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0100.446] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\vi", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\vi", lpFilePart=0x0) returned 0x81 [0100.446] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\vi\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\vi\\", lpFilePart=0x0) returned 0x82 [0100.446] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\vi\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7370 [0100.448] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0100.448] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0100.448] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0100.448] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0100.448] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0100.448] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0100.448] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0100.448] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\vi", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\vi", lpFilePart=0x0) returned 0x81 [0100.449] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\vi\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\vi\\", lpFilePart=0x0) returned 0x82 [0100.449] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\vi\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d79d0 [0100.449] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0100.449] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0100.449] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0100.449] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0100.449] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0100.449] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0100.449] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\vi\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\vi\\messages.json", lpFilePart=0x0) returned 0x8f [0100.449] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0100.449] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\vi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\vi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x229b930 | out: lpFileInformation=0x229b930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb85ff6ec, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb85fd18e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0xb8937a9b, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xdd)) returned 1 [0100.450] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0100.450] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\vi\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\vi\\messages.json", lpFilePart=0x0) returned 0x8f [0100.450] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0100.450] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\vi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\vi\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0100.450] GetFileType (hFile=0x444) returned 0x1 [0100.450] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0100.450] GetFileType (hFile=0x444) returned 0x1 [0100.450] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xdd [0100.450] ReadFile (in: hFile=0x444, lpBuffer=0x229bdd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x229bdd8*, lpNumberOfBytesRead=0x3be478*=0xdd, lpOverlapped=0x0) returned 1 [0100.451] CloseHandle (hObject=0x444) returned 1 [0100.463] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\vi\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\vi\\messages.json", lpFilePart=0x0) returned 0x8f [0100.463] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0100.463] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\vi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\vi\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0100.465] GetFileType (hFile=0x444) returned 0x1 [0100.465] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0100.465] GetFileType (hFile=0x444) returned 0x1 [0100.465] WriteFile (in: hFile=0x444, lpBuffer=0x2313118*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x2313118*, lpNumberOfBytesWritten=0x3be388*=0xe0, lpOverlapped=0x0) returned 1 [0100.466] CloseHandle (hObject=0x444) returned 1 [0100.466] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\vi\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\vi\\messages.json", lpFilePart=0x0) returned 0x8f [0100.466] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\vi\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\vi\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0100.466] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0100.466] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\vi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\vi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb85ff6ec, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb85fd18e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x27b9c644, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1 [0100.466] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0100.466] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\vi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\vi\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\vi\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\vi\\messages.json.xuy")) returned 1 [0100.468] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0100.468] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\zh_CN", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\zh_CN", lpFilePart=0x0) returned 0x84 [0100.468] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\zh_CN\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\zh_CN\\", lpFilePart=0x0) returned 0x85 [0100.468] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\zh_CN\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d78b0 [0100.469] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0100.469] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0100.469] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0100.469] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0100.469] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0100.469] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0100.469] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0100.469] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\zh_CN", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\zh_CN", lpFilePart=0x0) returned 0x84 [0100.469] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\zh_CN\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\zh_CN\\", lpFilePart=0x0) returned 0x85 [0100.469] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\zh_CN\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7fd0 [0100.469] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0100.470] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0100.470] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0100.470] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0100.470] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0100.470] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0100.470] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\zh_CN\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\zh_CN\\messages.json", lpFilePart=0x0) returned 0x92 [0100.470] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0100.470] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\zh_cn\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x2317340 | out: lpFileInformation=0x2317340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb862593b, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb862428e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0xb8937a9b, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xb0)) returned 1 [0100.470] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0100.470] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\zh_CN\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\zh_CN\\messages.json", lpFilePart=0x0) returned 0x92 [0100.470] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0100.470] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\zh_cn\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0100.471] GetFileType (hFile=0x444) returned 0x1 [0100.471] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0100.471] GetFileType (hFile=0x444) returned 0x1 [0100.471] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xb0 [0100.471] ReadFile (in: hFile=0x444, lpBuffer=0x23177c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x23177c8*, lpNumberOfBytesRead=0x3be478*=0xb0, lpOverlapped=0x0) returned 1 [0100.474] CloseHandle (hObject=0x444) returned 1 [0100.515] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\zh_CN\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\zh_CN\\messages.json", lpFilePart=0x0) returned 0x92 [0100.515] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0100.515] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\zh_cn\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0100.516] GetFileType (hFile=0x444) returned 0x1 [0100.516] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0100.516] GetFileType (hFile=0x444) returned 0x1 [0100.516] WriteFile (in: hFile=0x444, lpBuffer=0x218f430*, nNumberOfBytesToWrite=0xc0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x218f430*, lpNumberOfBytesWritten=0x3be388*=0xc0, lpOverlapped=0x0) returned 1 [0100.517] CloseHandle (hObject=0x444) returned 1 [0100.517] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\zh_CN\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\zh_CN\\messages.json", lpFilePart=0x0) returned 0x92 [0100.517] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\zh_CN\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\zh_CN\\messages.json.xuy", lpFilePart=0x0) returned 0x96 [0100.517] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0100.517] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\zh_cn\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb862593b, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb862428e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x27c35161, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xc0)) returned 1 [0100.518] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0100.518] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\zh_cn\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\zh_CN\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\zh_cn\\messages.json.xuy")) returned 1 [0100.519] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0100.519] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\zh_HK", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\zh_HK", lpFilePart=0x0) returned 0x84 [0100.519] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\zh_HK\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\zh_HK\\", lpFilePart=0x0) returned 0x85 [0100.519] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\zh_HK\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d8090 [0100.520] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0100.520] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0100.520] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0100.520] FindClose (in: hFindFile=0x5d8090 | out: hFindFile=0x5d8090) returned 1 [0100.520] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0100.520] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0100.520] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0100.520] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\zh_HK", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\zh_HK", lpFilePart=0x0) returned 0x84 [0100.520] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\zh_HK\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\zh_HK\\", lpFilePart=0x0) returned 0x85 [0100.520] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\zh_HK\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d75b0 [0100.521] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0100.521] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0100.521] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0100.521] FindClose (in: hFindFile=0x5d75b0 | out: hFindFile=0x5d75b0) returned 1 [0100.521] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0100.521] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0100.521] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\zh_HK\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\zh_HK\\messages.json", lpFilePart=0x0) returned 0x92 [0100.521] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0100.521] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\zh_HK\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\zh_hk\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x2193670 | out: lpFileInformation=0x2193670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb862593b, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb862428e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0xd2)) returned 1 [0100.521] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0100.521] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\zh_HK\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\zh_HK\\messages.json", lpFilePart=0x0) returned 0x92 [0100.522] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0100.522] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\zh_HK\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\zh_hk\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0100.522] GetFileType (hFile=0x444) returned 0x1 [0100.522] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0100.522] GetFileType (hFile=0x444) returned 0x1 [0100.522] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xd2 [0100.522] ReadFile (in: hFile=0x444, lpBuffer=0x2193b20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x2193b20*, lpNumberOfBytesRead=0x3be478*=0xd2, lpOverlapped=0x0) returned 1 [0100.523] CloseHandle (hObject=0x444) returned 1 [0100.536] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\zh_HK\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\zh_HK\\messages.json", lpFilePart=0x0) returned 0x92 [0100.536] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0100.536] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\zh_HK\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\zh_hk\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0100.537] GetFileType (hFile=0x444) returned 0x1 [0100.537] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0100.537] GetFileType (hFile=0x444) returned 0x1 [0100.537] WriteFile (in: hFile=0x444, lpBuffer=0x220ae70*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x220ae70*, lpNumberOfBytesWritten=0x3be388*=0xe0, lpOverlapped=0x0) returned 1 [0100.538] CloseHandle (hObject=0x444) returned 1 [0100.538] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\zh_HK\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\zh_HK\\messages.json", lpFilePart=0x0) returned 0x92 [0100.538] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\zh_HK\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\zh_HK\\messages.json.xuy", lpFilePart=0x0) returned 0x96 [0100.538] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0100.538] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\zh_HK\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\zh_hk\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb862593b, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb862428e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x27c5b5de, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1 [0100.538] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0100.538] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\zh_HK\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\zh_hk\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\zh_HK\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\zh_hk\\messages.json.xuy")) returned 1 [0100.539] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0100.539] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\zh_TW", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\zh_TW", lpFilePart=0x0) returned 0x84 [0100.539] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\zh_TW\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\zh_TW\\", lpFilePart=0x0) returned 0x85 [0100.539] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\zh_TW\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d75b0 [0100.540] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0100.540] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0100.540] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0100.540] FindClose (in: hFindFile=0x5d75b0 | out: hFindFile=0x5d75b0) returned 1 [0100.540] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0100.540] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0100.540] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0100.540] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\zh_TW", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\zh_TW", lpFilePart=0x0) returned 0x84 [0100.540] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\zh_TW\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\zh_TW\\", lpFilePart=0x0) returned 0x85 [0100.540] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\zh_TW\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7d30 [0100.541] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0100.541] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0100.541] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0100.541] FindClose (in: hFindFile=0x5d7d30 | out: hFindFile=0x5d7d30) returned 1 [0100.541] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0100.541] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0100.541] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\zh_TW\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\zh_TW\\messages.json", lpFilePart=0x0) returned 0x92 [0100.541] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0100.541] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\zh_tw\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x220f0b0 | out: lpFileInformation=0x220f0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb862593b, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb862428e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0xb8937a9b, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xaa)) returned 1 [0100.541] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0100.541] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\zh_TW\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\zh_TW\\messages.json", lpFilePart=0x0) returned 0x92 [0100.541] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0100.541] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\zh_tw\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0100.542] GetFileType (hFile=0x444) returned 0x1 [0100.542] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0100.542] GetFileType (hFile=0x444) returned 0x1 [0100.542] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xaa [0100.542] ReadFile (in: hFile=0x444, lpBuffer=0x220f538, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x220f538*, lpNumberOfBytesRead=0x3be478*=0xaa, lpOverlapped=0x0) returned 1 [0100.543] CloseHandle (hObject=0x444) returned 1 [0100.554] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\zh_TW\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\zh_TW\\messages.json", lpFilePart=0x0) returned 0x92 [0100.554] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0100.554] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\zh_tw\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0100.556] GetFileType (hFile=0x444) returned 0x1 [0100.556] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0100.556] GetFileType (hFile=0x444) returned 0x1 [0100.556] WriteFile (in: hFile=0x444, lpBuffer=0x2286820*, nNumberOfBytesToWrite=0xb0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x2286820*, lpNumberOfBytesWritten=0x3be388*=0xb0, lpOverlapped=0x0) returned 1 [0100.557] CloseHandle (hObject=0x444) returned 1 [0100.557] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\zh_TW\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\zh_TW\\messages.json", lpFilePart=0x0) returned 0x92 [0100.557] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\zh_TW\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\zh_TW\\messages.json.xuy", lpFilePart=0x0) returned 0x96 [0100.557] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0100.558] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\zh_tw\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb862593b, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb862428e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x27c814ca, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xb0)) returned 1 [0100.558] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0100.558] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\zh_tw\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\zh_TW\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\zh_tw\\messages.json.xuy")) returned 1 [0100.559] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0100.559] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\zu", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\zu", lpFilePart=0x0) returned 0x81 [0100.559] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\zu\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\zu\\", lpFilePart=0x0) returned 0x82 [0100.559] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\zu\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7d90 [0100.559] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0100.559] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0100.560] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0100.560] FindClose (in: hFindFile=0x5d7d90 | out: hFindFile=0x5d7d90) returned 1 [0100.560] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0100.560] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0100.560] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0100.560] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\zu", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\zu", lpFilePart=0x0) returned 0x81 [0100.560] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\zu\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\zu\\", lpFilePart=0x0) returned 0x82 [0100.560] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\zu\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d78b0 [0100.561] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0100.561] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0100.562] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0100.562] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0100.562] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0100.562] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0100.562] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\zu\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\zu\\messages.json", lpFilePart=0x0) returned 0x8f [0100.562] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0100.562] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\zu\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\zu\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x228a990 | out: lpFileInformation=0x228a990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb862593b, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb862428e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0xc2)) returned 1 [0100.562] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0100.562] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\zu\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\zu\\messages.json", lpFilePart=0x0) returned 0x8f [0100.562] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0100.562] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\zu\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\zu\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0100.562] GetFileType (hFile=0x444) returned 0x1 [0100.562] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0100.562] GetFileType (hFile=0x444) returned 0x1 [0100.562] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xc2 [0100.562] ReadFile (in: hFile=0x444, lpBuffer=0x228ae20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x228ae20*, lpNumberOfBytesRead=0x3be478*=0xc2, lpOverlapped=0x0) returned 1 [0100.563] CloseHandle (hObject=0x444) returned 1 [0100.573] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\zu\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\zu\\messages.json", lpFilePart=0x0) returned 0x8f [0100.573] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0100.573] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\zu\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\zu\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0100.575] GetFileType (hFile=0x444) returned 0x1 [0100.575] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0100.575] GetFileType (hFile=0x444) returned 0x1 [0100.575] WriteFile (in: hFile=0x444, lpBuffer=0x2302148*, nNumberOfBytesToWrite=0xd0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x2302148*, lpNumberOfBytesWritten=0x3be388*=0xd0, lpOverlapped=0x0) returned 1 [0100.576] CloseHandle (hObject=0x444) returned 1 [0100.576] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\zu\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\zu\\messages.json", lpFilePart=0x0) returned 0x8f [0100.576] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\zu\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\zu\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0100.576] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0100.576] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\zu\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\zu\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb862593b, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb862428e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x27ccda28, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xd0)) returned 1 [0100.576] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0100.576] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\zu\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\zu\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\zu\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\zu\\messages.json.xuy")) returned 1 [0100.577] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0100.577] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_metadata", nBufferLength=0x105, lpBuffer=0x3be0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_metadata", lpFilePart=0x0) returned 0x7f [0100.577] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_metadata\\", nBufferLength=0x105, lpBuffer=0x3be060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_metadata\\", lpFilePart=0x0) returned 0x80 [0100.577] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_metadata\\*", lpFindFileData=0x3be270 | out: lpFindFileData=0x3be270) returned 0x5d79d0 [0100.578] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0100.578] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0100.578] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0100.578] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 0 [0100.578] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0100.578] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0100.578] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0100.578] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0100.578] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_metadata", nBufferLength=0x105, lpBuffer=0x3be0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_metadata", lpFilePart=0x0) returned 0x7f [0100.578] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_metadata\\", nBufferLength=0x105, lpBuffer=0x3be060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_metadata\\", lpFilePart=0x0) returned 0x80 [0100.578] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_metadata\\*", lpFindFileData=0x3be270 | out: lpFindFileData=0x3be270) returned 0x5d79d0 [0100.579] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0100.579] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0100.579] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0100.579] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 0 [0100.579] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0100.579] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0100.579] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0100.579] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_metadata\\computed_hashes.json", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_metadata\\computed_hashes.json", lpFilePart=0x0) returned 0x94 [0100.579] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0100.579] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_metadata\\computed_hashes.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_metadata\\computed_hashes.json"), fInfoLevelId=0x0, lpFileInformation=0x2306998 | out: lpFileInformation=0x2306998*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb89a5887, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb89a5887, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0xb89a5887, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xaf3)) returned 1 [0100.580] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0100.580] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_metadata\\computed_hashes.json", nBufferLength=0x105, lpBuffer=0x3bdf40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_metadata\\computed_hashes.json", lpFilePart=0x0) returned 0x94 [0100.580] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be420) returned 1 [0100.580] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_metadata\\computed_hashes.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_metadata\\computed_hashes.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0100.580] GetFileType (hFile=0x444) returned 0x1 [0100.580] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be390) returned 1 [0100.580] GetFileType (hFile=0x444) returned 0x1 [0100.580] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be5b8 | out: lpFileSizeHigh=0x3be5b8*=0x0) returned 0xaf3 [0100.580] ReadFile (in: hFile=0x444, lpBuffer=0x2307898, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be4e8, lpOverlapped=0x0 | out: lpBuffer=0x2307898*, lpNumberOfBytesRead=0x3be4e8*=0xaf3, lpOverlapped=0x0) returned 1 [0100.581] CloseHandle (hObject=0x444) returned 1 [0100.630] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_metadata\\computed_hashes.json", nBufferLength=0x105, lpBuffer=0x3bdf40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_metadata\\computed_hashes.json", lpFilePart=0x0) returned 0x94 [0100.630] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be420) returned 1 [0100.630] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_metadata\\computed_hashes.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_metadata\\computed_hashes.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0100.632] GetFileType (hFile=0x444) returned 0x1 [0100.632] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be390) returned 1 [0100.632] GetFileType (hFile=0x444) returned 0x1 [0100.632] WriteFile (in: hFile=0x444, lpBuffer=0x2183508*, nNumberOfBytesToWrite=0xb00, lpNumberOfBytesWritten=0x3be3f8, lpOverlapped=0x0 | out: lpBuffer=0x2183508*, lpNumberOfBytesWritten=0x3be3f8*=0xb00, lpOverlapped=0x0) returned 1 [0100.632] CloseHandle (hObject=0x444) returned 1 [0100.632] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_metadata\\computed_hashes.json", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_metadata\\computed_hashes.json", lpFilePart=0x0) returned 0x94 [0100.633] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_metadata\\computed_hashes.json.xuy", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_metadata\\computed_hashes.json.xuy", lpFilePart=0x0) returned 0x98 [0100.633] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0100.633] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_metadata\\computed_hashes.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_metadata\\computed_hashes.json"), fInfoLevelId=0x0, lpFileInformation=0x3be600 | out: lpFileInformation=0x3be600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb89a5887, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb89a5887, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x27d400e9, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xb00)) returned 1 [0100.633] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0100.633] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_metadata\\computed_hashes.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_metadata\\computed_hashes.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_metadata\\computed_hashes.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_metadata\\computed_hashes.json.xuy")) returned 1 [0100.634] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_metadata\\verified_contents.json", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_metadata\\verified_contents.json", lpFilePart=0x0) returned 0x96 [0100.634] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0100.634] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_metadata\\verified_contents.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_metadata\\verified_contents.json"), fInfoLevelId=0x0, lpFileInformation=0x2184950 | out: lpFileInformation=0x2184950*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb864bbb9, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb864b38e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x4454)) returned 1 [0100.634] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0100.634] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_metadata\\verified_contents.json", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_metadata\\verified_contents.json", lpFilePart=0x0) returned 0x96 [0100.634] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0100.634] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_metadata\\verified_contents.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_metadata\\verified_contents.json"), fInfoLevelId=0x0, lpFileInformation=0x2184b48 | out: lpFileInformation=0x2184b48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb864bbb9, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb864b38e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x4454)) returned 1 [0100.634] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0100.634] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_metadata\\verified_contents.json", nBufferLength=0x105, lpBuffer=0x3bdfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_metadata\\verified_contents.json", lpFilePart=0x0) returned 0x96 [0100.634] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0100.634] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_metadata\\verified_contents.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_metadata\\verified_contents.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0100.635] GetFileType (hFile=0x444) returned 0x1 [0100.635] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be420) returned 1 [0100.635] GetFileType (hFile=0x444) returned 0x1 [0100.635] ReadFile (in: hFile=0x444, lpBuffer=0x2187068, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be538, lpOverlapped=0x0 | out: lpBuffer=0x2187068*, lpNumberOfBytesRead=0x3be538*=0x1000, lpOverlapped=0x0) returned 1 [0100.647] CloseHandle (hObject=0x444) returned 1 [0100.647] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_metadata\\verified_contents.json", nBufferLength=0x105, lpBuffer=0x3bdfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_metadata\\verified_contents.json", lpFilePart=0x0) returned 0x96 [0100.647] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0100.647] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_metadata\\verified_contents.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_metadata\\verified_contents.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0100.648] GetFileType (hFile=0x444) returned 0x1 [0100.648] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be420) returned 1 [0100.648] GetFileType (hFile=0x444) returned 0x1 [0100.648] WriteFile (in: hFile=0x444, lpBuffer=0x2184d20*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be5e8, lpOverlapped=0x0 | out: lpBuffer=0x2184d20*, lpNumberOfBytesWritten=0x3be5e8*=0x2000, lpOverlapped=0x0) returned 1 [0100.648] CloseHandle (hObject=0x444) returned 1 [0100.648] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_metadata\\verified_contents.json", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_metadata\\verified_contents.json", lpFilePart=0x0) returned 0x96 [0100.648] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_metadata\\verified_contents.json.xuy", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_metadata\\verified_contents.json.xuy", lpFilePart=0x0) returned 0x9a [0100.648] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0100.648] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_metadata\\verified_contents.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_metadata\\verified_contents.json"), fInfoLevelId=0x0, lpFileInformation=0x3be600 | out: lpFileInformation=0x3be600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb864bbb9, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb864b38e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x27d664ec, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x4454)) returned 1 [0100.648] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0100.648] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_metadata\\verified_contents.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_metadata\\verified_contents.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_metadata\\verified_contents.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_metadata\\verified_contents.json.xuy")) returned 1 [0100.649] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0100.649] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda", lpFilePart=0x0) returned 0x6f [0100.649] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\", lpFilePart=0x0) returned 0x70 [0100.649] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d81b0 [0100.651] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0100.651] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0100.651] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0100.651] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0100.652] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0100.652] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0100.652] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0100.652] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda", lpFilePart=0x0) returned 0x6f [0100.652] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\", lpFilePart=0x0) returned 0x70 [0100.652] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d7550 [0100.652] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0100.652] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0100.652] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0100.652] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0100.652] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0100.652] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0100.652] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0100.652] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0", nBufferLength=0x105, lpBuffer=0x3be130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0", lpFilePart=0x0) returned 0x79 [0100.653] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\", nBufferLength=0x105, lpBuffer=0x3be0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\", lpFilePart=0x0) returned 0x7a [0100.653] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\*", lpFindFileData=0x3be2e0 | out: lpFindFileData=0x3be2e0) returned 0x5d7550 [0100.666] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0100.666] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0100.667] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0100.667] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0100.667] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0100.667] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0100.667] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0100.667] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0100.667] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0100.667] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 0 [0100.667] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0100.668] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0100.668] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0100.668] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0100.668] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0", nBufferLength=0x105, lpBuffer=0x3be130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0", lpFilePart=0x0) returned 0x79 [0100.668] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\", nBufferLength=0x105, lpBuffer=0x3be0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\", lpFilePart=0x0) returned 0x7a [0100.668] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\*", lpFindFileData=0x3be2e0 | out: lpFindFileData=0x3be2e0) returned 0x5d7d90 [0100.669] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0100.669] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0100.670] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0100.670] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0100.670] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0100.670] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0100.670] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0100.670] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0100.670] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0100.670] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 0 [0100.670] FindClose (in: hFindFile=0x5d7d90 | out: hFindFile=0x5d7d90) returned 1 [0100.671] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0100.671] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0100.671] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_background.js", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_background.js", lpFilePart=0x0) returned 0x8c [0100.671] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0100.671] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_background.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_background.js"), fInfoLevelId=0x0, lpFileInformation=0x220b380 | out: lpFileInformation=0x220b380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73abfd45, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x73ac5e90, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0xba221600, ftLastWriteTime.dwHighDateTime=0x1d297b0, nFileSizeHigh=0x0, nFileSizeLow=0x32a2e)) returned 1 [0100.673] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0100.673] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_background.js", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_background.js", lpFilePart=0x0) returned 0x8c [0100.673] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0100.673] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_background.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_background.js"), fInfoLevelId=0x0, lpFileInformation=0x220b560 | out: lpFileInformation=0x220b560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73abfd45, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x73ac5e90, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0xba221600, ftLastWriteTime.dwHighDateTime=0x1d297b0, nFileSizeHigh=0x0, nFileSizeLow=0x32a2e)) returned 1 [0100.673] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0100.673] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_background.js", nBufferLength=0x105, lpBuffer=0x3be040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_background.js", lpFilePart=0x0) returned 0x8c [0100.673] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0100.673] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_background.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_background.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0100.674] GetFileType (hFile=0x444) returned 0x1 [0100.674] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be490) returned 1 [0100.674] GetFileType (hFile=0x444) returned 0x1 [0100.674] ReadFile (in: hFile=0x444, lpBuffer=0x220da50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5a8, lpOverlapped=0x0 | out: lpBuffer=0x220da50*, lpNumberOfBytesRead=0x3be5a8*=0x1000, lpOverlapped=0x0) returned 1 [0100.700] CloseHandle (hObject=0x444) returned 1 [0100.700] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_background.js", nBufferLength=0x105, lpBuffer=0x3be040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_background.js", lpFilePart=0x0) returned 0x8c [0100.700] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0100.700] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_background.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_background.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0100.701] GetFileType (hFile=0x444) returned 0x1 [0100.701] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be490) returned 1 [0100.701] GetFileType (hFile=0x444) returned 0x1 [0100.701] WriteFile (in: hFile=0x444, lpBuffer=0x220b720*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be658, lpOverlapped=0x0 | out: lpBuffer=0x220b720*, lpNumberOfBytesWritten=0x3be658*=0x2000, lpOverlapped=0x0) returned 1 [0100.701] CloseHandle (hObject=0x444) returned 1 [0100.701] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_background.js", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_background.js", lpFilePart=0x0) returned 0x8c [0100.701] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_background.js.xuy", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_background.js.xuy", lpFilePart=0x0) returned 0x90 [0100.701] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0100.701] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_background.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_background.js"), fInfoLevelId=0x0, lpFileInformation=0x3be670 | out: lpFileInformation=0x3be670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73abfd45, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x73ac5e90, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x27dfed39, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x32a2e)) returned 1 [0100.702] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0100.702] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_background.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_background.js"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_background.js.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_background.js.xuy")) returned 1 [0100.703] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_window.js", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_window.js", lpFilePart=0x0) returned 0x88 [0100.703] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0100.703] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_window.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_window.js"), fInfoLevelId=0x0, lpFileInformation=0x228a028 | out: lpFileInformation=0x228a028*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73ad0ec2, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x73ae0c40, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0xba221600, ftLastWriteTime.dwHighDateTime=0x1d297b0, nFileSizeHigh=0x0, nFileSizeLow=0x3b059)) returned 1 [0100.703] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0100.703] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_window.js", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_window.js", lpFilePart=0x0) returned 0x88 [0100.703] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0100.703] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_window.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_window.js"), fInfoLevelId=0x0, lpFileInformation=0x228a1f8 | out: lpFileInformation=0x228a1f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73ad0ec2, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x73ae0c40, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0xba221600, ftLastWriteTime.dwHighDateTime=0x1d297b0, nFileSizeHigh=0x0, nFileSizeLow=0x3b059)) returned 1 [0100.703] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0100.703] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_window.js", nBufferLength=0x105, lpBuffer=0x3be040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_window.js", lpFilePart=0x0) returned 0x88 [0100.703] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0100.703] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_window.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_window.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0100.704] GetFileType (hFile=0x444) returned 0x1 [0100.704] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be490) returned 1 [0100.704] GetFileType (hFile=0x444) returned 0x1 [0100.705] ReadFile (in: hFile=0x444, lpBuffer=0x228c6c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5a8, lpOverlapped=0x0 | out: lpBuffer=0x228c6c8*, lpNumberOfBytesRead=0x3be5a8*=0x1000, lpOverlapped=0x0) returned 1 [0100.727] CloseHandle (hObject=0x444) returned 1 [0100.728] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_window.js", nBufferLength=0x105, lpBuffer=0x3be040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_window.js", lpFilePart=0x0) returned 0x88 [0100.728] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0100.728] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_window.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_window.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0100.728] GetFileType (hFile=0x444) returned 0x1 [0100.728] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be490) returned 1 [0100.728] GetFileType (hFile=0x444) returned 0x1 [0100.728] WriteFile (in: hFile=0x444, lpBuffer=0x228a3a8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be658, lpOverlapped=0x0 | out: lpBuffer=0x228a3a8*, lpNumberOfBytesWritten=0x3be658*=0x2000, lpOverlapped=0x0) returned 1 [0100.729] CloseHandle (hObject=0x444) returned 1 [0100.729] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_window.js", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_window.js", lpFilePart=0x0) returned 0x88 [0100.729] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_window.js.xuy", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_window.js.xuy", lpFilePart=0x0) returned 0x8c [0100.729] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0100.729] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_window.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_window.js"), fInfoLevelId=0x0, lpFileInformation=0x3be670 | out: lpFileInformation=0x3be670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73ad0ec2, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x73ae0c40, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x27e24ed2, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x3b059)) returned 1 [0100.729] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0100.729] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_window.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_window.js"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_window.js.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_window.js.xuy")) returned 1 [0100.730] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\manifest.json", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\manifest.json", lpFilePart=0x0) returned 0x87 [0100.730] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0100.730] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\manifest.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\manifest.json"), fInfoLevelId=0x0, lpFileInformation=0x2308c80 | out: lpFileInformation=0x2308c80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x732972ee, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x73bd0060, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x74076533, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x52a)) returned 1 [0100.738] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0100.738] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\manifest.json", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\manifest.json", lpFilePart=0x0) returned 0x87 [0100.738] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0100.738] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\manifest.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\manifest.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0100.738] GetFileType (hFile=0x444) returned 0x1 [0100.738] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be400) returned 1 [0100.738] GetFileType (hFile=0x444) returned 0x1 [0100.738] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be628 | out: lpFileSizeHigh=0x3be628*=0x0) returned 0x52a [0100.738] ReadFile (in: hFile=0x444, lpBuffer=0x2309558, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be558, lpOverlapped=0x0 | out: lpBuffer=0x2309558*, lpNumberOfBytesRead=0x3be558*=0x52a, lpOverlapped=0x0) returned 1 [0100.749] CloseHandle (hObject=0x444) returned 1 [0100.796] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\manifest.json", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\manifest.json", lpFilePart=0x0) returned 0x87 [0100.796] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0100.796] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\manifest.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\manifest.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0100.798] GetFileType (hFile=0x444) returned 0x1 [0100.798] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be400) returned 1 [0100.798] GetFileType (hFile=0x444) returned 0x1 [0100.798] WriteFile (in: hFile=0x444, lpBuffer=0x2184bd0*, nNumberOfBytesToWrite=0x530, lpNumberOfBytesWritten=0x3be468, lpOverlapped=0x0 | out: lpBuffer=0x2184bd0*, lpNumberOfBytesWritten=0x3be468*=0x530, lpOverlapped=0x0) returned 1 [0100.799] CloseHandle (hObject=0x444) returned 1 [0100.799] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\manifest.json", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\manifest.json", lpFilePart=0x0) returned 0x87 [0100.799] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\manifest.json.xuy", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\manifest.json.xuy", lpFilePart=0x0) returned 0x8b [0100.800] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0100.800] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\manifest.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\manifest.json"), fInfoLevelId=0x0, lpFileInformation=0x3be670 | out: lpFileInformation=0x3be670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x732972ee, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x73bd0060, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x27ee3b52, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x530)) returned 1 [0100.800] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0100.800] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\manifest.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\manifest.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\manifest.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\manifest.json.xuy")) returned 1 [0100.801] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0100.801] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css", nBufferLength=0x105, lpBuffer=0x3be0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css", lpFilePart=0x0) returned 0x7d [0100.801] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\", nBufferLength=0x105, lpBuffer=0x3be060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\", lpFilePart=0x0) returned 0x7e [0100.801] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\*", lpFindFileData=0x3be270 | out: lpFindFileData=0x3be270) returned 0x5d73d0 [0100.804] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0100.804] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0100.805] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 0 [0100.805] FindClose (in: hFindFile=0x5d73d0 | out: hFindFile=0x5d73d0) returned 1 [0100.805] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0100.805] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0100.805] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0100.805] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css", nBufferLength=0x105, lpBuffer=0x3be0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css", lpFilePart=0x0) returned 0x7d [0100.805] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\", nBufferLength=0x105, lpBuffer=0x3be060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\", lpFilePart=0x0) returned 0x7e [0100.805] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\*", lpFindFileData=0x3be270 | out: lpFindFileData=0x3be270) returned 0x5d73d0 [0100.805] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0100.805] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0100.806] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 0 [0100.806] FindClose (in: hFindFile=0x5d73d0 | out: hFindFile=0x5d73d0) returned 1 [0100.806] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0100.806] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0100.806] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css", lpFilePart=0x0) returned 0x8d [0100.806] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0100.806] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css"), fInfoLevelId=0x0, lpFileInformation=0x2188c28 | out: lpFileInformation=0x2188c28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73aee38c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x73af1db0, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0xaae46e00, ftLastWriteTime.dwHighDateTime=0x1cec2fb, nFileSizeHigh=0x0, nFileSizeLow=0x6cd)) returned 1 [0100.806] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0100.806] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css", nBufferLength=0x105, lpBuffer=0x3bdf40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css", lpFilePart=0x0) returned 0x8d [0100.806] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be420) returned 1 [0100.807] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0100.807] GetFileType (hFile=0x444) returned 0x1 [0100.807] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be390) returned 1 [0100.807] GetFileType (hFile=0x444) returned 0x1 [0100.807] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be5b8 | out: lpFileSizeHigh=0x3be5b8*=0x0) returned 0x6cd [0100.807] ReadFile (in: hFile=0x444, lpBuffer=0x21896c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be4e8, lpOverlapped=0x0 | out: lpBuffer=0x21896c0*, lpNumberOfBytesRead=0x3be4e8*=0x6cd, lpOverlapped=0x0) returned 1 [0100.825] CloseHandle (hObject=0x444) returned 1 [0100.838] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css", nBufferLength=0x105, lpBuffer=0x3bdf40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css", lpFilePart=0x0) returned 0x8d [0100.838] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be420) returned 1 [0100.838] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0100.840] GetFileType (hFile=0x444) returned 0x1 [0100.840] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be390) returned 1 [0100.840] GetFileType (hFile=0x444) returned 0x1 [0100.840] WriteFile (in: hFile=0x444, lpBuffer=0x2202938*, nNumberOfBytesToWrite=0x6d0, lpNumberOfBytesWritten=0x3be3f8, lpOverlapped=0x0 | out: lpBuffer=0x2202938*, lpNumberOfBytesWritten=0x3be3f8*=0x6d0, lpOverlapped=0x0) returned 1 [0100.840] CloseHandle (hObject=0x444) returned 1 [0100.840] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css", lpFilePart=0x0) returned 0x8d [0100.841] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css.xuy", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css.xuy", lpFilePart=0x0) returned 0x91 [0100.841] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0100.841] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css"), fInfoLevelId=0x0, lpFileInformation=0x3be600 | out: lpFileInformation=0x3be600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73aee38c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x73af1db0, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x27f2fdc3, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x6d0)) returned 1 [0100.841] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0100.841] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css.xuy")) returned 1 [0100.862] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0100.862] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html", nBufferLength=0x105, lpBuffer=0x3be0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html", lpFilePart=0x0) returned 0x7e [0100.862] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\", nBufferLength=0x105, lpBuffer=0x3be060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\", lpFilePart=0x0) returned 0x7f [0100.863] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\*", lpFindFileData=0x3be270 | out: lpFindFileData=0x3be270) returned 0x5d78b0 [0100.866] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0100.867] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0100.867] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 0 [0100.867] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0100.867] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0100.867] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0100.867] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0100.867] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html", nBufferLength=0x105, lpBuffer=0x3be0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html", lpFilePart=0x0) returned 0x7e [0100.867] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\", nBufferLength=0x105, lpBuffer=0x3be060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\", lpFilePart=0x0) returned 0x7f [0100.867] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\*", lpFindFileData=0x3be270 | out: lpFindFileData=0x3be270) returned 0x5d7af0 [0100.867] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0100.867] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0100.867] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 0 [0100.868] FindClose (in: hFindFile=0x5d7af0 | out: hFindFile=0x5d7af0) returned 1 [0100.868] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0100.868] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0100.868] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html", lpFilePart=0x0) returned 0x8f [0100.868] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0100.868] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html"), fInfoLevelId=0x0, lpFileInformation=0x2206a48 | out: lpFileInformation=0x2206a48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73b06a34, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x73b0a450, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0xe7591500, ftLastWriteTime.dwHighDateTime=0x1ce931e, nFileSizeHigh=0x0, nFileSizeLow=0x32a)) returned 1 [0100.868] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0100.868] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html", nBufferLength=0x105, lpBuffer=0x3bdf40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html", lpFilePart=0x0) returned 0x8f [0100.868] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be420) returned 1 [0100.868] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0100.868] GetFileType (hFile=0x444) returned 0x1 [0100.868] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be390) returned 1 [0100.868] GetFileType (hFile=0x444) returned 0x1 [0100.868] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be5b8 | out: lpFileSizeHigh=0x3be5b8*=0x0) returned 0x32a [0100.868] ReadFile (in: hFile=0x444, lpBuffer=0x2207150, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be4e8, lpOverlapped=0x0 | out: lpBuffer=0x2207150*, lpNumberOfBytesRead=0x3be4e8*=0x32a, lpOverlapped=0x0) returned 1 [0100.881] CloseHandle (hObject=0x444) returned 1 [0100.891] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html", nBufferLength=0x105, lpBuffer=0x3bdf40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html", lpFilePart=0x0) returned 0x8f [0100.891] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be420) returned 1 [0100.891] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0100.892] GetFileType (hFile=0x444) returned 0x1 [0100.892] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be390) returned 1 [0100.893] GetFileType (hFile=0x444) returned 0x1 [0100.893] WriteFile (in: hFile=0x444, lpBuffer=0x227f1b0*, nNumberOfBytesToWrite=0x330, lpNumberOfBytesWritten=0x3be3f8, lpOverlapped=0x0 | out: lpBuffer=0x227f1b0*, lpNumberOfBytesWritten=0x3be3f8*=0x330, lpOverlapped=0x0) returned 1 [0100.893] CloseHandle (hObject=0x444) returned 1 [0100.893] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html", lpFilePart=0x0) returned 0x8f [0100.893] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html.xuy", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html.xuy", lpFilePart=0x0) returned 0x93 [0100.894] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0100.894] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html"), fInfoLevelId=0x0, lpFileInformation=0x3be600 | out: lpFileInformation=0x3be600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73b06a34, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x73b0a450, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x27fc88ae, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x330)) returned 1 [0100.894] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0100.894] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html.xuy")) returned 1 [0100.895] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0100.895] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images", nBufferLength=0x105, lpBuffer=0x3be0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images", lpFilePart=0x0) returned 0x80 [0100.895] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\", nBufferLength=0x105, lpBuffer=0x3be060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\", lpFilePart=0x0) returned 0x81 [0100.895] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\*", lpFindFileData=0x3be270 | out: lpFindFileData=0x3be270) returned 0x5d8090 [0100.903] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0100.903] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0100.904] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0100.904] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0100.904] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0100.904] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0100.904] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0100.904] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0100.904] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0100.904] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 0 [0100.905] FindClose (in: hFindFile=0x5d8090 | out: hFindFile=0x5d8090) returned 1 [0100.905] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0100.905] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0100.905] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0100.905] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images", nBufferLength=0x105, lpBuffer=0x3be0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images", lpFilePart=0x0) returned 0x80 [0100.905] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\", nBufferLength=0x105, lpBuffer=0x3be060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\", lpFilePart=0x0) returned 0x81 [0100.905] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\*", lpFindFileData=0x3be270 | out: lpFindFileData=0x3be270) returned 0x5d7e50 [0100.906] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0100.906] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0100.907] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0100.907] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0100.907] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0100.907] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0100.907] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0100.907] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0100.908] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0100.908] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 0 [0100.908] FindClose (in: hFindFile=0x5d7e50 | out: hFindFile=0x5d7e50) returned 1 [0100.908] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0100.908] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0100.909] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\flapper.gif", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\flapper.gif", lpFilePart=0x0) returned 0x8c [0100.909] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0100.909] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\flapper.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\flapper.gif"), fInfoLevelId=0x0, lpFileInformation=0x2286340 | out: lpFileInformation=0x2286340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73b60f96, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x73b670b0, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0xe7591500, ftLastWriteTime.dwHighDateTime=0x1ce931e, nFileSizeHigh=0x0, nFileSizeLow=0x112dc)) returned 1 [0100.909] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0100.909] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\flapper.gif", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\flapper.gif", lpFilePart=0x0) returned 0x8c [0100.909] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0100.909] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\flapper.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\flapper.gif"), fInfoLevelId=0x0, lpFileInformation=0x2286510 | out: lpFileInformation=0x2286510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73b60f96, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x73b670b0, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0xe7591500, ftLastWriteTime.dwHighDateTime=0x1ce931e, nFileSizeHigh=0x0, nFileSizeLow=0x112dc)) returned 1 [0100.909] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0100.910] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\flapper.gif", nBufferLength=0x105, lpBuffer=0x3bdfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\flapper.gif", lpFilePart=0x0) returned 0x8c [0100.910] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0100.910] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\flapper.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\flapper.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0100.910] GetFileType (hFile=0x444) returned 0x1 [0100.910] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be420) returned 1 [0100.910] GetFileType (hFile=0x444) returned 0x1 [0100.910] ReadFile (in: hFile=0x444, lpBuffer=0x22889e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be538, lpOverlapped=0x0 | out: lpBuffer=0x22889e0*, lpNumberOfBytesRead=0x3be538*=0x1000, lpOverlapped=0x0) returned 1 [0101.054] CloseHandle (hObject=0x444) returned 1 [0101.117] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\flapper.gif", nBufferLength=0x105, lpBuffer=0x3bdfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\flapper.gif", lpFilePart=0x0) returned 0x8c [0101.117] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0101.117] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\flapper.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\flapper.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0101.117] GetFileType (hFile=0x444) returned 0x1 [0101.117] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be420) returned 1 [0101.117] GetFileType (hFile=0x444) returned 0x1 [0101.117] WriteFile (in: hFile=0x444, lpBuffer=0x22866c0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be5e8, lpOverlapped=0x0 | out: lpBuffer=0x22866c0*, lpNumberOfBytesWritten=0x3be5e8*=0x2000, lpOverlapped=0x0) returned 1 [0101.117] CloseHandle (hObject=0x444) returned 1 [0101.117] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\flapper.gif", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\flapper.gif", lpFilePart=0x0) returned 0x8c [0101.117] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\flapper.gif.xuy", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\flapper.gif.xuy", lpFilePart=0x0) returned 0x90 [0101.117] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0101.118] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\flapper.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\flapper.gif"), fInfoLevelId=0x0, lpFileInformation=0x3be600 | out: lpFileInformation=0x3be600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73b60f96, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x73b670b0, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x281de8f6, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x112dc)) returned 1 [0101.118] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0101.118] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\flapper.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\flapper.gif"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\flapper.gif.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\flapper.gif.xuy")) returned 1 [0101.118] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png", lpFilePart=0x0) returned 0x8d [0101.119] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0101.119] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png"), fInfoLevelId=0x0, lpFileInformation=0x2304fb0 | out: lpFileInformation=0x2304fb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73b7487d, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7408016b, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7408288d, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x1109)) returned 1 [0101.119] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0101.119] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png", lpFilePart=0x0) returned 0x8d [0101.119] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0101.119] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png"), fInfoLevelId=0x0, lpFileInformation=0x2305188 | out: lpFileInformation=0x2305188*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73b7487d, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7408016b, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7408288d, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x1109)) returned 1 [0101.119] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0101.119] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png", nBufferLength=0x105, lpBuffer=0x3bdfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png", lpFilePart=0x0) returned 0x8d [0101.119] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0101.119] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0101.119] GetFileType (hFile=0x444) returned 0x1 [0101.120] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be420) returned 1 [0101.120] GetFileType (hFile=0x444) returned 0x1 [0101.120] ReadFile (in: hFile=0x444, lpBuffer=0x2307668, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be538, lpOverlapped=0x0 | out: lpBuffer=0x2307668*, lpNumberOfBytesRead=0x3be538*=0x1000, lpOverlapped=0x0) returned 1 [0101.194] CloseHandle (hObject=0x444) returned 1 [0101.205] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png", nBufferLength=0x105, lpBuffer=0x3bdfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png", lpFilePart=0x0) returned 0x8d [0101.205] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0101.205] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0101.206] GetFileType (hFile=0x444) returned 0x1 [0101.206] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be420) returned 1 [0101.206] GetFileType (hFile=0x444) returned 0x1 [0101.206] WriteFile (in: hFile=0x444, lpBuffer=0x21571c0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be5e8, lpOverlapped=0x0 | out: lpBuffer=0x21571c0*, lpNumberOfBytesWritten=0x3be5e8*=0x2000, lpOverlapped=0x0) returned 1 [0101.206] CloseHandle (hObject=0x444) returned 1 [0101.206] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png", lpFilePart=0x0) returned 0x8d [0101.206] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png.xuy", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png.xuy", lpFilePart=0x0) returned 0x91 [0101.206] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0101.206] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png"), fInfoLevelId=0x0, lpFileInformation=0x3be600 | out: lpFileInformation=0x3be600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73b7487d, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7408016b, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x282c36df, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0101.206] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0101.206] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png.xuy")) returned 1 [0101.207] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png", lpFilePart=0x0) returned 0x8c [0101.207] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0101.207] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png"), fInfoLevelId=0x0, lpFileInformation=0x2188980 | out: lpFileInformation=0x2188980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73b80b73, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7408288d, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7408288d, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x22c)) returned 1 [0101.208] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0101.208] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png", nBufferLength=0x105, lpBuffer=0x3bdf40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png", lpFilePart=0x0) returned 0x8c [0101.208] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be420) returned 1 [0101.208] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0101.209] GetFileType (hFile=0x444) returned 0x1 [0101.209] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be390) returned 1 [0101.209] GetFileType (hFile=0x444) returned 0x1 [0101.209] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be5b8 | out: lpFileSizeHigh=0x3be5b8*=0x0) returned 0x22c [0101.209] ReadFile (in: hFile=0x444, lpBuffer=0x2188f68, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be4e8, lpOverlapped=0x0 | out: lpBuffer=0x2188f68*, lpNumberOfBytesRead=0x3be4e8*=0x22c, lpOverlapped=0x0) returned 1 [0101.210] CloseHandle (hObject=0x444) returned 1 [0101.220] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png", nBufferLength=0x105, lpBuffer=0x3bdf40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png", lpFilePart=0x0) returned 0x8c [0101.220] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be420) returned 1 [0101.220] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0101.222] GetFileType (hFile=0x444) returned 0x1 [0101.222] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be390) returned 1 [0101.222] GetFileType (hFile=0x444) returned 0x1 [0101.222] WriteFile (in: hFile=0x444, lpBuffer=0x2200ab8*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x3be3f8, lpOverlapped=0x0 | out: lpBuffer=0x2200ab8*, lpNumberOfBytesWritten=0x3be3f8*=0x230, lpOverlapped=0x0) returned 1 [0101.223] CloseHandle (hObject=0x444) returned 1 [0101.223] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png", lpFilePart=0x0) returned 0x8c [0101.223] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png.xuy", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png.xuy", lpFilePart=0x0) returned 0x90 [0101.223] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0101.223] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png"), fInfoLevelId=0x0, lpFileInformation=0x3be600 | out: lpFileInformation=0x3be600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73b80b73, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7408288d, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x282e9d06, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x230)) returned 1 [0101.223] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0101.223] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png.xuy")) returned 1 [0101.224] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png", lpFilePart=0x0) returned 0x9b [0101.224] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0101.224] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png"), fInfoLevelId=0x0, lpFileInformation=0x2201ed0 | out: lpFileInformation=0x2201ed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73b8ceca, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x73b908c0, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0xe7591500, ftLastWriteTime.dwHighDateTime=0x1ce931e, nFileSizeHigh=0x0, nFileSizeLow=0xa0)) returned 1 [0101.225] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0101.225] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png", nBufferLength=0x105, lpBuffer=0x3bdf40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png", lpFilePart=0x0) returned 0x9b [0101.225] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be420) returned 1 [0101.225] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0101.225] GetFileType (hFile=0x444) returned 0x1 [0101.226] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be390) returned 1 [0101.226] GetFileType (hFile=0x444) returned 0x1 [0101.226] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be5b8 | out: lpFileSizeHigh=0x3be5b8*=0x0) returned 0xa0 [0101.226] ReadFile (in: hFile=0x444, lpBuffer=0x2202398, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be4e8, lpOverlapped=0x0 | out: lpBuffer=0x2202398*, lpNumberOfBytesRead=0x3be4e8*=0xa0, lpOverlapped=0x0) returned 1 [0101.226] CloseHandle (hObject=0x444) returned 1 [0101.237] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png", nBufferLength=0x105, lpBuffer=0x3bdf40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png", lpFilePart=0x0) returned 0x9b [0101.237] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be420) returned 1 [0101.237] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0101.238] GetFileType (hFile=0x444) returned 0x1 [0101.238] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be390) returned 1 [0101.238] GetFileType (hFile=0x444) returned 0x1 [0101.238] WriteFile (in: hFile=0x444, lpBuffer=0x22796b0*, nNumberOfBytesToWrite=0xb0, lpNumberOfBytesWritten=0x3be3f8, lpOverlapped=0x0 | out: lpBuffer=0x22796b0*, lpNumberOfBytesWritten=0x3be3f8*=0xb0, lpOverlapped=0x0) returned 1 [0101.239] CloseHandle (hObject=0x444) returned 1 [0101.239] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png", lpFilePart=0x0) returned 0x9b [0101.239] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png.xuy", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png.xuy", lpFilePart=0x0) returned 0x9f [0101.239] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0101.239] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png"), fInfoLevelId=0x0, lpFileInformation=0x3be600 | out: lpFileInformation=0x3be600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73b8ceca, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x73b908c0, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2830fbd5, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xb0)) returned 1 [0101.239] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0101.239] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png.xuy")) returned 1 [0101.240] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png", lpFilePart=0x0) returned 0xa1 [0101.240] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0101.240] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png"), fInfoLevelId=0x0, lpFileInformation=0x227ab10 | out: lpFileInformation=0x227ab10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73b9e03b, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x73ba1a30, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0xe7591500, ftLastWriteTime.dwHighDateTime=0x1ce931e, nFileSizeHigh=0x0, nFileSizeLow=0xfc)) returned 1 [0101.241] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0101.241] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png", nBufferLength=0x105, lpBuffer=0x3bdf40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png", lpFilePart=0x0) returned 0xa1 [0101.241] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be420) returned 1 [0101.242] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0101.242] GetFileType (hFile=0x444) returned 0x1 [0101.242] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be390) returned 1 [0101.242] GetFileType (hFile=0x444) returned 0x1 [0101.242] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be5b8 | out: lpFileSizeHigh=0x3be5b8*=0x0) returned 0xfc [0101.242] ReadFile (in: hFile=0x444, lpBuffer=0x227b078, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be4e8, lpOverlapped=0x0 | out: lpBuffer=0x227b078*, lpNumberOfBytesRead=0x3be4e8*=0xfc, lpOverlapped=0x0) returned 1 [0101.243] CloseHandle (hObject=0x444) returned 1 [0101.255] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png", nBufferLength=0x105, lpBuffer=0x3bdf40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png", lpFilePart=0x0) returned 0xa1 [0101.255] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be420) returned 1 [0101.255] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0101.257] GetFileType (hFile=0x444) returned 0x1 [0101.257] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be390) returned 1 [0101.257] GetFileType (hFile=0x444) returned 0x1 [0101.257] WriteFile (in: hFile=0x444, lpBuffer=0x22f2448*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3be3f8, lpOverlapped=0x0 | out: lpBuffer=0x22f2448*, lpNumberOfBytesWritten=0x3be3f8*=0x100, lpOverlapped=0x0) returned 1 [0101.258] CloseHandle (hObject=0x444) returned 1 [0101.258] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png", lpFilePart=0x0) returned 0xa1 [0101.258] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png.xuy", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png.xuy", lpFilePart=0x0) returned 0xa5 [0101.258] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0101.258] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png"), fInfoLevelId=0x0, lpFileInformation=0x3be600 | out: lpFileInformation=0x3be600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73b9e03b, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x73ba1a30, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x28335eab, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x100)) returned 1 [0101.258] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0101.258] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png.xuy")) returned 1 [0101.259] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png", lpFilePart=0x0) returned 0xa1 [0101.259] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0101.259] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png"), fInfoLevelId=0x0, lpFileInformation=0x22f38d8 | out: lpFileInformation=0x22f38d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73ba7c79, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x73bab670, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0xe7591500, ftLastWriteTime.dwHighDateTime=0x1ce931e, nFileSizeHigh=0x0, nFileSizeLow=0xa0)) returned 1 [0101.259] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0101.259] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png", nBufferLength=0x105, lpBuffer=0x3bdf40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png", lpFilePart=0x0) returned 0xa1 [0101.259] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be420) returned 1 [0101.259] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0101.259] GetFileType (hFile=0x444) returned 0x1 [0101.259] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be390) returned 1 [0101.259] GetFileType (hFile=0x444) returned 0x1 [0101.259] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be5b8 | out: lpFileSizeHigh=0x3be5b8*=0x0) returned 0xa0 [0101.260] ReadFile (in: hFile=0x444, lpBuffer=0x22f3de0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be4e8, lpOverlapped=0x0 | out: lpBuffer=0x22f3de0*, lpNumberOfBytesRead=0x3be4e8*=0xa0, lpOverlapped=0x0) returned 1 [0101.260] CloseHandle (hObject=0x444) returned 1 [0101.300] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png", nBufferLength=0x105, lpBuffer=0x3bdf40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png", lpFilePart=0x0) returned 0xa1 [0101.300] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be420) returned 1 [0101.300] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0101.302] GetFileType (hFile=0x444) returned 0x1 [0101.302] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be390) returned 1 [0101.302] GetFileType (hFile=0x444) returned 0x1 [0101.302] WriteFile (in: hFile=0x444, lpBuffer=0x216d808*, nNumberOfBytesToWrite=0xb0, lpNumberOfBytesWritten=0x3be3f8, lpOverlapped=0x0 | out: lpBuffer=0x216d808*, lpNumberOfBytesWritten=0x3be3f8*=0xb0, lpOverlapped=0x0) returned 1 [0101.302] CloseHandle (hObject=0x444) returned 1 [0101.303] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png", lpFilePart=0x0) returned 0xa1 [0101.303] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png.xuy", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png.xuy", lpFilePart=0x0) returned 0xa5 [0101.303] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0101.303] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png"), fInfoLevelId=0x0, lpFileInformation=0x3be600 | out: lpFileInformation=0x3be600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73ba7c79, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x73bab670, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x283a8576, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xb0)) returned 1 [0101.303] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0101.303] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png.xuy")) returned 1 [0101.304] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png", lpFilePart=0x0) returned 0xa4 [0101.304] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0101.304] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png"), fInfoLevelId=0x0, lpFileInformation=0x216ec98 | out: lpFileInformation=0x216ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73bb3fcd, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x73bb79c0, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0xe7591500, ftLastWriteTime.dwHighDateTime=0x1ce931e, nFileSizeHigh=0x0, nFileSizeLow=0xa6)) returned 1 [0101.305] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0101.305] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png", nBufferLength=0x105, lpBuffer=0x3bdf40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png", lpFilePart=0x0) returned 0xa4 [0101.305] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be420) returned 1 [0101.305] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0101.305] GetFileType (hFile=0x444) returned 0x1 [0101.306] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be390) returned 1 [0101.306] GetFileType (hFile=0x444) returned 0x1 [0101.306] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be5b8 | out: lpFileSizeHigh=0x3be5b8*=0x0) returned 0xa6 [0101.306] ReadFile (in: hFile=0x444, lpBuffer=0x216f1b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be4e8, lpOverlapped=0x0 | out: lpBuffer=0x216f1b8*, lpNumberOfBytesRead=0x3be4e8*=0xa6, lpOverlapped=0x0) returned 1 [0101.306] CloseHandle (hObject=0x444) returned 1 [0101.321] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png", nBufferLength=0x105, lpBuffer=0x3bdf40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png", lpFilePart=0x0) returned 0xa4 [0101.321] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be420) returned 1 [0101.321] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0101.322] GetFileType (hFile=0x444) returned 0x1 [0101.322] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be390) returned 1 [0101.322] GetFileType (hFile=0x444) returned 0x1 [0101.322] WriteFile (in: hFile=0x444, lpBuffer=0x21e64f8*, nNumberOfBytesToWrite=0xb0, lpNumberOfBytesWritten=0x3be3f8, lpOverlapped=0x0 | out: lpBuffer=0x21e64f8*, lpNumberOfBytesWritten=0x3be3f8*=0xb0, lpOverlapped=0x0) returned 1 [0101.323] CloseHandle (hObject=0x444) returned 1 [0101.323] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png", lpFilePart=0x0) returned 0xa4 [0101.323] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png.xuy", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png.xuy", lpFilePart=0x0) returned 0xa8 [0101.323] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0101.323] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png"), fInfoLevelId=0x0, lpFileInformation=0x3be600 | out: lpFileInformation=0x3be600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73bb3fcd, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x73bb79c0, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x283ce7a6, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xb0)) returned 1 [0101.324] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0101.324] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png.xuy")) returned 1 [0101.324] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png", lpFilePart=0x0) returned 0xa3 [0101.325] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0101.325] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png"), fInfoLevelId=0x0, lpFileInformation=0x21e79a0 | out: lpFileInformation=0x21e79a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73bc2a34, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x73bc6420, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0xe7591500, ftLastWriteTime.dwHighDateTime=0x1ce931e, nFileSizeHigh=0x0, nFileSizeLow=0xa0)) returned 1 [0101.325] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0101.325] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png", nBufferLength=0x105, lpBuffer=0x3bdf40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png", lpFilePart=0x0) returned 0xa3 [0101.325] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be420) returned 1 [0101.325] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0101.325] GetFileType (hFile=0x444) returned 0x1 [0101.325] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be390) returned 1 [0101.325] GetFileType (hFile=0x444) returned 0x1 [0101.325] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be5b8 | out: lpFileSizeHigh=0x3be5b8*=0x0) returned 0xa0 [0101.325] ReadFile (in: hFile=0x444, lpBuffer=0x21e7ea8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be4e8, lpOverlapped=0x0 | out: lpBuffer=0x21e7ea8*, lpNumberOfBytesRead=0x3be4e8*=0xa0, lpOverlapped=0x0) returned 1 [0101.327] CloseHandle (hObject=0x444) returned 1 [0101.337] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png", nBufferLength=0x105, lpBuffer=0x3bdf40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png", lpFilePart=0x0) returned 0xa3 [0101.337] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be420) returned 1 [0101.337] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0101.338] GetFileType (hFile=0x444) returned 0x1 [0101.338] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be390) returned 1 [0101.338] GetFileType (hFile=0x444) returned 0x1 [0101.338] WriteFile (in: hFile=0x444, lpBuffer=0x225f1e0*, nNumberOfBytesToWrite=0xb0, lpNumberOfBytesWritten=0x3be3f8, lpOverlapped=0x0 | out: lpBuffer=0x225f1e0*, lpNumberOfBytesWritten=0x3be3f8*=0xb0, lpOverlapped=0x0) returned 1 [0101.339] CloseHandle (hObject=0x444) returned 1 [0101.339] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png", lpFilePart=0x0) returned 0xa3 [0101.339] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png.xuy", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png.xuy", lpFilePart=0x0) returned 0xa7 [0101.339] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0101.339] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png"), fInfoLevelId=0x0, lpFileInformation=0x3be600 | out: lpFileInformation=0x3be600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73bc2a34, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x73bc6420, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x283f4a24, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xb0)) returned 1 [0101.339] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0101.339] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png.xuy")) returned 1 [0101.340] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0101.340] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales", nBufferLength=0x105, lpBuffer=0x3be0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales", lpFilePart=0x0) returned 0x82 [0101.340] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\", nBufferLength=0x105, lpBuffer=0x3be060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\", lpFilePart=0x0) returned 0x83 [0101.340] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\*", lpFindFileData=0x3be270 | out: lpFindFileData=0x3be270) returned 0x5d8090 [0101.367] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0101.368] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0101.368] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0101.368] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0101.368] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0101.368] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0101.368] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0101.368] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0101.368] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0101.368] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0101.369] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0101.369] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0101.369] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0101.369] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0101.369] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0101.369] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0101.369] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0101.369] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0101.370] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0101.370] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0101.370] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0101.370] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0101.370] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0101.370] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0101.370] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0101.370] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0101.370] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0101.371] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0101.371] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0101.371] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0101.371] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0101.371] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0101.371] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0101.371] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0101.371] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0101.372] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0101.372] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0101.372] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0101.372] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0101.372] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0101.372] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0101.372] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 0 [0101.372] FindClose (in: hFindFile=0x5d8090 | out: hFindFile=0x5d8090) returned 1 [0101.373] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0101.373] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0101.373] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0101.373] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales", nBufferLength=0x105, lpBuffer=0x3be0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales", lpFilePart=0x0) returned 0x82 [0101.374] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\", nBufferLength=0x105, lpBuffer=0x3be060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\", lpFilePart=0x0) returned 0x83 [0101.374] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\*", lpFindFileData=0x3be270 | out: lpFindFileData=0x3be270) returned 0x5d7550 [0101.374] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0101.375] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0101.375] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0101.375] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0101.375] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0101.375] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0101.375] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0101.375] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0101.375] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0101.375] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0101.375] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0101.375] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0101.376] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0101.376] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0101.376] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0101.376] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0101.376] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0101.376] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0101.376] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0101.376] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0101.376] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0101.376] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0101.376] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0101.377] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0101.377] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0101.377] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0101.377] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0101.377] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0101.377] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0101.377] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0101.377] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0101.377] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0101.377] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0101.377] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0101.378] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0101.378] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0101.378] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0101.378] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0101.378] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0101.378] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0101.378] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0101.378] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 0 [0101.378] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0101.379] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0101.379] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0101.379] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0101.379] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg", lpFilePart=0x0) returned 0x85 [0101.379] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\", lpFilePart=0x0) returned 0x86 [0101.379] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d78b0 [0101.380] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0101.380] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0101.380] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0101.380] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0101.380] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0101.380] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0101.380] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0101.380] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg", lpFilePart=0x0) returned 0x85 [0101.381] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\", lpFilePart=0x0) returned 0x86 [0101.381] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7c70 [0101.381] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0101.381] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0101.381] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0101.381] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0101.381] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0101.381] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0101.381] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\messages.json", lpFilePart=0x0) returned 0x93 [0101.381] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0101.381] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x2273e20 | out: lpFileInformation=0x2273e20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x733dcf7d, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x733de550, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x74084f99, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x376)) returned 1 [0101.382] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0101.382] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\messages.json", lpFilePart=0x0) returned 0x93 [0101.382] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0101.383] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0101.383] GetFileType (hFile=0x444) returned 0x1 [0101.383] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0101.383] GetFileType (hFile=0x444) returned 0x1 [0101.383] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x376 [0101.383] ReadFile (in: hFile=0x444, lpBuffer=0x2274570, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x2274570*, lpNumberOfBytesRead=0x3be478*=0x376, lpOverlapped=0x0) returned 1 [0101.397] CloseHandle (hObject=0x444) returned 1 [0101.408] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\messages.json", lpFilePart=0x0) returned 0x93 [0101.408] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0101.408] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0101.409] GetFileType (hFile=0x444) returned 0x1 [0101.409] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0101.409] GetFileType (hFile=0x444) returned 0x1 [0101.409] WriteFile (in: hFile=0x444, lpBuffer=0x22ec768*, nNumberOfBytesToWrite=0x380, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x22ec768*, lpNumberOfBytesWritten=0x3be388*=0x380, lpOverlapped=0x0) returned 1 [0101.410] CloseHandle (hObject=0x444) returned 1 [0101.410] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\messages.json", lpFilePart=0x0) returned 0x93 [0101.410] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\messages.json.xuy", lpFilePart=0x0) returned 0x97 [0101.410] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0101.410] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x733dcf7d, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x733de550, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x284b395c, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x380)) returned 1 [0101.411] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0101.411] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\messages.json.xuy")) returned 1 [0101.411] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0101.411] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca", lpFilePart=0x0) returned 0x85 [0101.412] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\", lpFilePart=0x0) returned 0x86 [0101.412] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7550 [0101.413] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0101.413] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0101.413] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0101.413] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0101.413] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0101.413] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0101.413] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0101.413] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca", lpFilePart=0x0) returned 0x85 [0101.413] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\", lpFilePart=0x0) returned 0x86 [0101.413] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7670 [0101.414] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0101.414] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0101.414] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0101.414] FindClose (in: hFindFile=0x5d7670 | out: hFindFile=0x5d7670) returned 1 [0101.414] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0101.414] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0101.414] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\messages.json", lpFilePart=0x0) returned 0x93 [0101.414] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0101.414] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x22f09c8 | out: lpFileInformation=0x22f09c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7341ef2a, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x73431570, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x74084f99, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x2c1)) returned 1 [0101.415] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0101.415] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\messages.json", lpFilePart=0x0) returned 0x93 [0101.415] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0101.415] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0101.415] GetFileType (hFile=0x444) returned 0x1 [0101.415] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0101.415] GetFileType (hFile=0x444) returned 0x1 [0101.415] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x2c1 [0101.415] ReadFile (in: hFile=0x444, lpBuffer=0x22f1068, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x22f1068*, lpNumberOfBytesRead=0x3be478*=0x2c1, lpOverlapped=0x0) returned 1 [0101.417] CloseHandle (hObject=0x444) returned 1 [0101.458] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\messages.json", lpFilePart=0x0) returned 0x93 [0101.458] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0101.458] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0101.460] GetFileType (hFile=0x444) returned 0x1 [0101.460] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0101.460] GetFileType (hFile=0x444) returned 0x1 [0101.460] WriteFile (in: hFile=0x444, lpBuffer=0x216cb38*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x216cb38*, lpNumberOfBytesWritten=0x3be388*=0x2d0, lpOverlapped=0x0) returned 1 [0101.461] CloseHandle (hObject=0x444) returned 1 [0101.461] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\messages.json", lpFilePart=0x0) returned 0x93 [0101.461] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\messages.json.xuy", lpFilePart=0x0) returned 0x97 [0101.461] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0101.461] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7341ef2a, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x73431570, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x28525ded, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2d0)) returned 1 [0101.461] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0101.461] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\messages.json.xuy")) returned 1 [0101.462] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0101.462] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs", lpFilePart=0x0) returned 0x85 [0101.462] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\", lpFilePart=0x0) returned 0x86 [0101.463] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d79d0 [0101.463] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0101.463] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0101.463] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0101.463] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0101.463] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0101.463] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0101.463] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0101.463] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs", lpFilePart=0x0) returned 0x85 [0101.463] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\", lpFilePart=0x0) returned 0x86 [0101.463] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d81b0 [0101.464] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0101.464] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0101.464] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0101.464] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0101.464] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0101.464] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0101.464] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\messages.json", lpFilePart=0x0) returned 0x93 [0101.464] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0101.464] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x2170d98 | out: lpFileInformation=0x2170d98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x734a53ba, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x734a6870, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x74084f99, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x297)) returned 1 [0101.466] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0101.466] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\messages.json", lpFilePart=0x0) returned 0x93 [0101.466] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0101.466] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0101.466] GetFileType (hFile=0x444) returned 0x1 [0101.466] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0101.466] GetFileType (hFile=0x444) returned 0x1 [0101.466] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x297 [0101.466] ReadFile (in: hFile=0x444, lpBuffer=0x2171408, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x2171408*, lpNumberOfBytesRead=0x3be478*=0x297, lpOverlapped=0x0) returned 1 [0101.468] CloseHandle (hObject=0x444) returned 1 [0101.478] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\messages.json", lpFilePart=0x0) returned 0x93 [0101.478] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0101.478] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0101.479] GetFileType (hFile=0x444) returned 0x1 [0101.479] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0101.479] GetFileType (hFile=0x444) returned 0x1 [0101.479] WriteFile (in: hFile=0x444, lpBuffer=0x21e91a0*, nNumberOfBytesToWrite=0x2a0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x21e91a0*, lpNumberOfBytesWritten=0x3be388*=0x2a0, lpOverlapped=0x0) returned 1 [0101.480] CloseHandle (hObject=0x444) returned 1 [0101.480] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\messages.json", lpFilePart=0x0) returned 0x93 [0101.480] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\messages.json.xuy", lpFilePart=0x0) returned 0x97 [0101.480] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0101.480] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x734a53ba, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x734a6870, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2854be83, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2a0)) returned 1 [0101.480] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0101.480] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\messages.json.xuy")) returned 1 [0101.481] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0101.481] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da", lpFilePart=0x0) returned 0x85 [0101.481] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\", lpFilePart=0x0) returned 0x86 [0101.482] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d78b0 [0101.483] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0101.483] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0101.483] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0101.483] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0101.483] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0101.483] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0101.483] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0101.483] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da", lpFilePart=0x0) returned 0x85 [0101.483] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\", lpFilePart=0x0) returned 0x86 [0101.483] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d73d0 [0101.483] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0101.483] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0101.483] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0101.484] FindClose (in: hFindFile=0x5d73d0 | out: hFindFile=0x5d73d0) returned 1 [0101.484] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0101.484] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0101.484] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\messages.json", lpFilePart=0x0) returned 0x93 [0101.484] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0101.484] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x21ed400 | out: lpFileInformation=0x21ed400*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73510a96, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7353b740, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x74084f99, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x282)) returned 1 [0101.484] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0101.484] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\messages.json", lpFilePart=0x0) returned 0x93 [0101.485] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0101.485] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0101.485] GetFileType (hFile=0x444) returned 0x1 [0101.485] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0101.485] GetFileType (hFile=0x444) returned 0x1 [0101.485] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x282 [0101.485] ReadFile (in: hFile=0x444, lpBuffer=0x21eda60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x21eda60*, lpNumberOfBytesRead=0x3be478*=0x282, lpOverlapped=0x0) returned 1 [0101.486] CloseHandle (hObject=0x444) returned 1 [0101.496] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\messages.json", lpFilePart=0x0) returned 0x93 [0101.496] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0101.497] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0101.498] GetFileType (hFile=0x444) returned 0x1 [0101.498] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0101.498] GetFileType (hFile=0x444) returned 0x1 [0101.498] WriteFile (in: hFile=0x444, lpBuffer=0x22657a8*, nNumberOfBytesToWrite=0x290, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x22657a8*, lpNumberOfBytesWritten=0x3be388*=0x290, lpOverlapped=0x0) returned 1 [0101.499] CloseHandle (hObject=0x444) returned 1 [0101.499] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\messages.json", lpFilePart=0x0) returned 0x93 [0101.499] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\messages.json.xuy", lpFilePart=0x0) returned 0x97 [0101.499] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0101.500] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73510a96, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7353b740, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2859840c, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x290)) returned 1 [0101.500] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0101.500] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\messages.json.xuy")) returned 1 [0101.501] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0101.501] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de", lpFilePart=0x0) returned 0x85 [0101.501] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\", lpFilePart=0x0) returned 0x86 [0101.501] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d78b0 [0101.503] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0101.503] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0101.503] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0101.503] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0101.503] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0101.503] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0101.504] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0101.504] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de", lpFilePart=0x0) returned 0x85 [0101.504] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\", lpFilePart=0x0) returned 0x86 [0101.504] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7550 [0101.504] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0101.504] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0101.504] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0101.504] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0101.504] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0101.504] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0101.504] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\messages.json", lpFilePart=0x0) returned 0x93 [0101.504] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0101.504] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x2269a08 | out: lpFileInformation=0x2269a08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x735bb925, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x735bcd90, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x74084f99, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x2bd)) returned 1 [0101.505] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0101.505] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\messages.json", lpFilePart=0x0) returned 0x93 [0101.505] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0101.505] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0101.505] GetFileType (hFile=0x444) returned 0x1 [0101.505] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0101.505] GetFileType (hFile=0x444) returned 0x1 [0101.505] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x2bd [0101.505] ReadFile (in: hFile=0x444, lpBuffer=0x226a0a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x226a0a0*, lpNumberOfBytesRead=0x3be478*=0x2bd, lpOverlapped=0x0) returned 1 [0101.507] CloseHandle (hObject=0x444) returned 1 [0101.518] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\messages.json", lpFilePart=0x0) returned 0x93 [0101.518] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0101.518] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0101.520] GetFileType (hFile=0x444) returned 0x1 [0101.520] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0101.520] GetFileType (hFile=0x444) returned 0x1 [0101.520] WriteFile (in: hFile=0x444, lpBuffer=0x22e1ed0*, nNumberOfBytesToWrite=0x2c0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x22e1ed0*, lpNumberOfBytesWritten=0x3be388*=0x2c0, lpOverlapped=0x0) returned 1 [0101.521] CloseHandle (hObject=0x444) returned 1 [0101.521] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\messages.json", lpFilePart=0x0) returned 0x93 [0101.521] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\messages.json.xuy", lpFilePart=0x0) returned 0x97 [0101.521] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0101.521] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x735bb925, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x735bcd90, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x285bea18, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2c0)) returned 1 [0101.521] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0101.521] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\messages.json.xuy")) returned 1 [0101.522] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0101.522] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el", lpFilePart=0x0) returned 0x85 [0101.522] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\", lpFilePart=0x0) returned 0x86 [0101.522] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7f10 [0101.524] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0101.524] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0101.524] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0101.524] FindClose (in: hFindFile=0x5d7f10 | out: hFindFile=0x5d7f10) returned 1 [0101.525] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0101.525] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0101.525] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0101.525] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el", lpFilePart=0x0) returned 0x85 [0101.525] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\", lpFilePart=0x0) returned 0x86 [0101.525] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7370 [0101.525] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0101.525] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0101.525] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0101.525] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0101.525] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0101.525] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0101.525] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\messages.json", lpFilePart=0x0) returned 0x93 [0101.525] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0101.525] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x22e6130 | out: lpFileInformation=0x22e6130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73604d1d, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x73782f30, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x740876ac, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x36b)) returned 1 [0101.526] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0101.526] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\messages.json", lpFilePart=0x0) returned 0x93 [0101.526] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0101.526] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0101.526] GetFileType (hFile=0x444) returned 0x1 [0101.526] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0101.526] GetFileType (hFile=0x444) returned 0x1 [0101.526] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x36b [0101.526] ReadFile (in: hFile=0x444, lpBuffer=0x22e6878, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x22e6878*, lpNumberOfBytesRead=0x3be478*=0x36b, lpOverlapped=0x0) returned 1 [0101.527] CloseHandle (hObject=0x444) returned 1 [0101.538] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\messages.json", lpFilePart=0x0) returned 0x93 [0101.538] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0101.538] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0101.539] GetFileType (hFile=0x444) returned 0x1 [0101.539] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0101.539] GetFileType (hFile=0x444) returned 0x1 [0101.540] WriteFile (in: hFile=0x444, lpBuffer=0x235ea18*, nNumberOfBytesToWrite=0x370, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x235ea18*, lpNumberOfBytesWritten=0x3be388*=0x370, lpOverlapped=0x0) returned 1 [0101.540] CloseHandle (hObject=0x444) returned 1 [0101.541] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\messages.json", lpFilePart=0x0) returned 0x93 [0101.541] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\messages.json.xuy", lpFilePart=0x0) returned 0x97 [0101.541] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0101.541] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73604d1d, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x73782f30, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x285e47cb, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x370)) returned 1 [0101.541] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0101.541] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\messages.json.xuy")) returned 1 [0101.542] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0101.542] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en", lpFilePart=0x0) returned 0x85 [0101.542] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\", lpFilePart=0x0) returned 0x86 [0101.542] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d73d0 [0101.558] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0101.559] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0101.559] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0101.559] FindClose (in: hFindFile=0x5d73d0 | out: hFindFile=0x5d73d0) returned 1 [0101.559] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0101.559] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0101.559] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0101.559] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en", lpFilePart=0x0) returned 0x85 [0101.559] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\", lpFilePart=0x0) returned 0x86 [0101.559] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7c70 [0101.559] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0101.559] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0101.560] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0101.560] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0101.560] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0101.560] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0101.560] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\messages.json", lpFilePart=0x0) returned 0x93 [0101.560] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0101.560] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x2162618 | out: lpFileInformation=0x2162618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x737b9dbb, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x737bb1a0, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x740876ac, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x269)) returned 1 [0101.560] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0101.560] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\messages.json", lpFilePart=0x0) returned 0x93 [0101.560] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0101.560] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0101.561] GetFileType (hFile=0x444) returned 0x1 [0101.561] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0101.561] GetFileType (hFile=0x444) returned 0x1 [0101.561] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x269 [0101.561] ReadFile (in: hFile=0x444, lpBuffer=0x2162c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x2162c60*, lpNumberOfBytesRead=0x3be478*=0x269, lpOverlapped=0x0) returned 1 [0101.562] CloseHandle (hObject=0x444) returned 1 [0101.605] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\messages.json", lpFilePart=0x0) returned 0x93 [0101.605] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0101.605] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0101.607] GetFileType (hFile=0x444) returned 0x1 [0101.607] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0101.608] GetFileType (hFile=0x444) returned 0x1 [0101.608] WriteFile (in: hFile=0x444, lpBuffer=0x21da900*, nNumberOfBytesToWrite=0x270, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x21da900*, lpNumberOfBytesWritten=0x3be388*=0x270, lpOverlapped=0x0) returned 1 [0101.609] CloseHandle (hObject=0x444) returned 1 [0101.609] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\messages.json", lpFilePart=0x0) returned 0x93 [0101.609] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\messages.json.xuy", lpFilePart=0x0) returned 0x97 [0101.609] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0101.609] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x737b9dbb, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x737bb1a0, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x286a3a95, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x270)) returned 1 [0101.609] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0101.609] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\messages.json.xuy")) returned 1 [0101.610] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0101.610] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB", lpFilePart=0x0) returned 0x88 [0101.610] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB\\", lpFilePart=0x0) returned 0x89 [0101.610] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7550 [0101.610] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0101.610] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0101.611] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0101.611] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0101.611] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0101.611] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0101.611] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0101.611] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB", lpFilePart=0x0) returned 0x88 [0101.611] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB\\", lpFilePart=0x0) returned 0x89 [0101.611] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7a90 [0101.611] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0101.611] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0101.611] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0101.611] FindClose (in: hFindFile=0x5d7a90 | out: hFindFile=0x5d7a90) returned 1 [0101.611] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0101.612] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0101.612] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB\\messages.json", lpFilePart=0x0) returned 0x96 [0101.612] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0101.612] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_gb\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x21dec30 | out: lpFileInformation=0x21dec30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x737cd640, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x737dad70, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x740876ac, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x269)) returned 1 [0101.612] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0101.612] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB\\messages.json", lpFilePart=0x0) returned 0x96 [0101.612] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0101.612] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_gb\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0101.612] GetFileType (hFile=0x444) returned 0x1 [0101.612] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0101.612] GetFileType (hFile=0x444) returned 0x1 [0101.612] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x269 [0101.612] ReadFile (in: hFile=0x444, lpBuffer=0x21df288, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x21df288*, lpNumberOfBytesRead=0x3be478*=0x269, lpOverlapped=0x0) returned 1 [0101.617] CloseHandle (hObject=0x444) returned 1 [0101.629] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB\\messages.json", lpFilePart=0x0) returned 0x96 [0101.629] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0101.629] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_gb\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0101.631] GetFileType (hFile=0x444) returned 0x1 [0101.631] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0101.631] GetFileType (hFile=0x444) returned 0x1 [0101.631] WriteFile (in: hFile=0x444, lpBuffer=0x2256f30*, nNumberOfBytesToWrite=0x270, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x2256f30*, lpNumberOfBytesWritten=0x3be388*=0x270, lpOverlapped=0x0) returned 1 [0101.632] CloseHandle (hObject=0x444) returned 1 [0101.632] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB\\messages.json", lpFilePart=0x0) returned 0x96 [0101.632] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB\\messages.json.xuy", lpFilePart=0x0) returned 0x9a [0101.632] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0101.632] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_gb\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x737cd640, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x737dad70, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x286c99f5, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x270)) returned 1 [0101.632] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0101.632] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_gb\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_gb\\messages.json.xuy")) returned 1 [0101.633] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0101.633] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es", lpFilePart=0x0) returned 0x85 [0101.633] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\", lpFilePart=0x0) returned 0x86 [0101.633] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d79d0 [0101.636] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0101.636] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0101.636] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0101.636] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0101.636] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0101.636] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0101.636] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0101.636] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es", lpFilePart=0x0) returned 0x85 [0101.636] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\", lpFilePart=0x0) returned 0x86 [0101.636] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7eb0 [0101.636] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0101.637] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0101.637] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0101.637] FindClose (in: hFindFile=0x5d7eb0 | out: hFindFile=0x5d7eb0) returned 1 [0101.637] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0101.637] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0101.637] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\messages.json", lpFilePart=0x0) returned 0x93 [0101.637] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0101.637] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x225b1a8 | out: lpFileInformation=0x225b1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x737fe38e, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x73801e70, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x740876ac, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x2b8)) returned 1 [0101.637] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0101.637] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\messages.json", lpFilePart=0x0) returned 0x93 [0101.637] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0101.637] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0101.637] GetFileType (hFile=0x444) returned 0x1 [0101.637] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0101.638] GetFileType (hFile=0x444) returned 0x1 [0101.638] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x2b8 [0101.638] ReadFile (in: hFile=0x444, lpBuffer=0x225b838, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x225b838*, lpNumberOfBytesRead=0x3be478*=0x2b8, lpOverlapped=0x0) returned 1 [0101.639] CloseHandle (hObject=0x444) returned 1 [0101.650] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\messages.json", lpFilePart=0x0) returned 0x93 [0101.650] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0101.650] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0101.652] GetFileType (hFile=0x444) returned 0x1 [0101.652] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0101.652] GetFileType (hFile=0x444) returned 0x1 [0101.652] WriteFile (in: hFile=0x444, lpBuffer=0x22d3668*, nNumberOfBytesToWrite=0x2c0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x22d3668*, lpNumberOfBytesWritten=0x3be388*=0x2c0, lpOverlapped=0x0) returned 1 [0101.653] CloseHandle (hObject=0x444) returned 1 [0101.653] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\messages.json", lpFilePart=0x0) returned 0x93 [0101.653] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\messages.json.xuy", lpFilePart=0x0) returned 0x97 [0101.653] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0101.653] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x737fe38e, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x73801e70, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x286ef859, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2c0)) returned 1 [0101.653] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0101.653] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\messages.json.xuy")) returned 1 [0101.654] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0101.654] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419", lpFilePart=0x0) returned 0x89 [0101.654] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\", lpFilePart=0x0) returned 0x8a [0101.654] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d79d0 [0101.655] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0101.655] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0101.655] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0101.655] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0101.655] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0101.655] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0101.655] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0101.655] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419", lpFilePart=0x0) returned 0x89 [0101.655] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\", lpFilePart=0x0) returned 0x8a [0101.655] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7a30 [0101.655] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0101.655] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0101.656] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0101.656] FindClose (in: hFindFile=0x5d7a30 | out: hFindFile=0x5d7a30) returned 1 [0101.656] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0101.656] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0101.656] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\messages.json", lpFilePart=0x0) returned 0x97 [0101.656] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0101.656] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x22d79b8 | out: lpFileInformation=0x22d79b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7381913f, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7381cc20, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x74089dbc, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x29b)) returned 1 [0101.656] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0101.656] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\messages.json", lpFilePart=0x0) returned 0x97 [0101.656] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0101.656] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0101.656] GetFileType (hFile=0x444) returned 0x1 [0101.656] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0101.656] GetFileType (hFile=0x444) returned 0x1 [0101.656] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x29b [0101.656] ReadFile (in: hFile=0x444, lpBuffer=0x22d8040, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x22d8040*, lpNumberOfBytesRead=0x3be478*=0x29b, lpOverlapped=0x0) returned 1 [0101.658] CloseHandle (hObject=0x444) returned 1 [0101.668] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\messages.json", lpFilePart=0x0) returned 0x97 [0101.668] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0101.668] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0101.671] GetFileType (hFile=0x444) returned 0x1 [0101.671] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0101.671] GetFileType (hFile=0x444) returned 0x1 [0101.672] WriteFile (in: hFile=0x444, lpBuffer=0x234fdd8*, nNumberOfBytesToWrite=0x2a0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x234fdd8*, lpNumberOfBytesWritten=0x3be388*=0x2a0, lpOverlapped=0x0) returned 1 [0101.673] CloseHandle (hObject=0x444) returned 1 [0101.673] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\messages.json", lpFilePart=0x0) returned 0x97 [0101.673] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\messages.json.xuy", lpFilePart=0x0) returned 0x9b [0101.673] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0101.673] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7381913f, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7381cc20, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2873c5c3, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2a0)) returned 1 [0101.673] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0101.673] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\messages.json.xuy")) returned 1 [0101.674] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0101.674] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et", lpFilePart=0x0) returned 0x85 [0101.674] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\", lpFilePart=0x0) returned 0x86 [0101.674] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7c70 [0101.677] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0101.677] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0101.677] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0101.677] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0101.677] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0101.677] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0101.677] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0101.677] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et", lpFilePart=0x0) returned 0x85 [0101.677] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\", lpFilePart=0x0) returned 0x86 [0101.677] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7eb0 [0101.678] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0101.678] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0101.678] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0101.678] FindClose (in: hFindFile=0x5d7eb0 | out: hFindFile=0x5d7eb0) returned 1 [0101.678] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0101.678] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0101.678] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\messages.json", lpFilePart=0x0) returned 0x93 [0101.678] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0101.678] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x2354050 | out: lpFileInformation=0x2354050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73890b72, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x73894630, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x74089dbc, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x261)) returned 1 [0101.678] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0101.678] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\messages.json", lpFilePart=0x0) returned 0x93 [0101.678] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0101.679] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0101.679] GetFileType (hFile=0x444) returned 0x1 [0101.679] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0101.679] GetFileType (hFile=0x444) returned 0x1 [0101.679] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x261 [0101.679] ReadFile (in: hFile=0x444, lpBuffer=0x2354690, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x2354690*, lpNumberOfBytesRead=0x3be478*=0x261, lpOverlapped=0x0) returned 1 [0101.680] CloseHandle (hObject=0x444) returned 1 [0101.720] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\messages.json", lpFilePart=0x0) returned 0x93 [0101.721] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0101.721] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0101.722] GetFileType (hFile=0x444) returned 0x1 [0101.722] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0101.722] GetFileType (hFile=0x444) returned 0x1 [0101.722] WriteFile (in: hFile=0x444, lpBuffer=0x21cc938*, nNumberOfBytesToWrite=0x270, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x21cc938*, lpNumberOfBytesWritten=0x3be388*=0x270, lpOverlapped=0x0) returned 1 [0101.723] CloseHandle (hObject=0x444) returned 1 [0101.726] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\messages.json", lpFilePart=0x0) returned 0x93 [0101.726] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\messages.json.xuy", lpFilePart=0x0) returned 0x97 [0101.726] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0101.726] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73890b72, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x73894630, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x287ae88b, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x270)) returned 1 [0101.726] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0101.726] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\messages.json.xuy")) returned 1 [0101.727] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0101.727] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi", lpFilePart=0x0) returned 0x85 [0101.727] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\", lpFilePart=0x0) returned 0x86 [0101.727] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7670 [0101.727] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0101.727] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0101.727] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0101.728] FindClose (in: hFindFile=0x5d7670 | out: hFindFile=0x5d7670) returned 1 [0101.728] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0101.728] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0101.728] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0101.728] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi", lpFilePart=0x0) returned 0x85 [0101.728] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\", lpFilePart=0x0) returned 0x86 [0101.728] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7c70 [0101.728] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0101.728] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0101.728] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0101.728] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0101.728] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0101.728] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0101.728] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\messages.json", lpFilePart=0x0) returned 0x93 [0101.729] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0101.729] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x21d0b98 | out: lpFileInformation=0x21d0b98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x738a43f5, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x738a7eb0, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x74089dbc, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x2a1)) returned 1 [0101.729] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0101.729] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\messages.json", lpFilePart=0x0) returned 0x93 [0101.729] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0101.729] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0101.729] GetFileType (hFile=0x444) returned 0x1 [0101.729] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0101.729] GetFileType (hFile=0x444) returned 0x1 [0101.729] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x2a1 [0101.729] ReadFile (in: hFile=0x444, lpBuffer=0x21d1218, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x21d1218*, lpNumberOfBytesRead=0x3be478*=0x2a1, lpOverlapped=0x0) returned 1 [0101.730] CloseHandle (hObject=0x444) returned 1 [0101.742] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\messages.json", lpFilePart=0x0) returned 0x93 [0101.742] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0101.742] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0101.744] GetFileType (hFile=0x444) returned 0x1 [0101.744] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0101.744] GetFileType (hFile=0x444) returned 0x1 [0101.744] WriteFile (in: hFile=0x444, lpBuffer=0x2249000*, nNumberOfBytesToWrite=0x2b0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x2249000*, lpNumberOfBytesWritten=0x3be388*=0x2b0, lpOverlapped=0x0) returned 1 [0101.744] CloseHandle (hObject=0x444) returned 1 [0101.744] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\messages.json", lpFilePart=0x0) returned 0x93 [0101.745] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\messages.json.xuy", lpFilePart=0x0) returned 0x97 [0101.745] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0101.745] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x738a43f5, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x738a7eb0, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x287d468b, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2b0)) returned 1 [0101.745] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0101.745] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\messages.json.xuy")) returned 1 [0101.746] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0101.746] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil", lpFilePart=0x0) returned 0x86 [0101.746] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\", lpFilePart=0x0) returned 0x87 [0101.746] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d79d0 [0101.746] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0101.746] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0101.747] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0101.747] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0101.747] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0101.747] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0101.747] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0101.747] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil", lpFilePart=0x0) returned 0x86 [0101.747] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\", lpFilePart=0x0) returned 0x87 [0101.747] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d81b0 [0101.747] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0101.747] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0101.747] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0101.748] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0101.748] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0101.748] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0101.748] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\messages.json", lpFilePart=0x0) returned 0x94 [0101.748] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0101.748] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x224d2f0 | out: lpFileInformation=0x224d2f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x738ba38d, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x738bb730, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x74089dbc, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x2b4)) returned 1 [0101.748] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0101.748] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\messages.json", lpFilePart=0x0) returned 0x94 [0101.748] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0101.748] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0101.748] GetFileType (hFile=0x444) returned 0x1 [0101.748] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0101.748] GetFileType (hFile=0x444) returned 0x1 [0101.748] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x2b4 [0101.749] ReadFile (in: hFile=0x444, lpBuffer=0x224d990, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x224d990*, lpNumberOfBytesRead=0x3be478*=0x2b4, lpOverlapped=0x0) returned 1 [0101.750] CloseHandle (hObject=0x444) returned 1 [0101.760] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\messages.json", lpFilePart=0x0) returned 0x94 [0101.760] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0101.760] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0101.762] GetFileType (hFile=0x444) returned 0x1 [0101.762] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0101.762] GetFileType (hFile=0x444) returned 0x1 [0101.762] WriteFile (in: hFile=0x444, lpBuffer=0x22c57d0*, nNumberOfBytesToWrite=0x2c0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x22c57d0*, lpNumberOfBytesWritten=0x3be388*=0x2c0, lpOverlapped=0x0) returned 1 [0101.763] CloseHandle (hObject=0x444) returned 1 [0101.763] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\messages.json", lpFilePart=0x0) returned 0x94 [0101.763] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\messages.json.xuy", lpFilePart=0x0) returned 0x98 [0101.763] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0101.763] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x738ba38d, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x738bb730, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x287fa9fb, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2c0)) returned 1 [0101.763] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0101.763] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\messages.json.xuy")) returned 1 [0101.765] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0101.765] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr", lpFilePart=0x0) returned 0x85 [0101.765] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\", lpFilePart=0x0) returned 0x86 [0101.766] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7a90 [0101.766] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0101.766] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0101.766] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0101.766] FindClose (in: hFindFile=0x5d7a90 | out: hFindFile=0x5d7a90) returned 1 [0101.766] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0101.766] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0101.766] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0101.766] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr", lpFilePart=0x0) returned 0x85 [0101.766] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\", lpFilePart=0x0) returned 0x86 [0101.766] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7df0 [0101.766] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0101.767] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0101.767] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0101.767] FindClose (in: hFindFile=0x5d7df0 | out: hFindFile=0x5d7df0) returned 1 [0101.767] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0101.767] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0101.767] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\messages.json", lpFilePart=0x0) returned 0x93 [0101.767] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0101.767] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x22c9a48 | out: lpFileInformation=0x22c9a48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x738d5145, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x738d64e0, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7408c4ce, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x2c4)) returned 1 [0101.767] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0101.767] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\messages.json", lpFilePart=0x0) returned 0x93 [0101.767] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0101.767] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0101.767] GetFileType (hFile=0x444) returned 0x1 [0101.767] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0101.768] GetFileType (hFile=0x444) returned 0x1 [0101.768] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x2c4 [0101.768] ReadFile (in: hFile=0x444, lpBuffer=0x22ca0e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x22ca0e8*, lpNumberOfBytesRead=0x3be478*=0x2c4, lpOverlapped=0x0) returned 1 [0101.769] CloseHandle (hObject=0x444) returned 1 [0101.779] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\messages.json", lpFilePart=0x0) returned 0x93 [0101.779] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0101.779] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0101.781] GetFileType (hFile=0x444) returned 0x1 [0101.781] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0101.781] GetFileType (hFile=0x444) returned 0x1 [0101.781] WriteFile (in: hFile=0x444, lpBuffer=0x2341f70*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x2341f70*, lpNumberOfBytesWritten=0x3be388*=0x2d0, lpOverlapped=0x0) returned 1 [0101.781] CloseHandle (hObject=0x444) returned 1 [0101.782] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\messages.json", lpFilePart=0x0) returned 0x93 [0101.782] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\messages.json.xuy", lpFilePart=0x0) returned 0x97 [0101.782] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0101.782] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x738d5145, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x738d64e0, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x28846e3c, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2d0)) returned 1 [0101.782] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0101.782] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\messages.json.xuy")) returned 1 [0101.783] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0101.783] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi", lpFilePart=0x0) returned 0x85 [0101.783] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\", lpFilePart=0x0) returned 0x86 [0101.783] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d79d0 [0101.784] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0101.784] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0101.784] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0101.784] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0101.784] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0101.784] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0101.784] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0101.784] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi", lpFilePart=0x0) returned 0x85 [0101.784] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\", lpFilePart=0x0) returned 0x86 [0101.784] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7370 [0101.784] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0101.784] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0101.785] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0101.785] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0101.785] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0101.785] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0101.785] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\messages.json", lpFilePart=0x0) returned 0x93 [0101.785] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0101.785] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x23461d0 | out: lpFileInformation=0x23461d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x738e3ba8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x738e4f40, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7408c4ce, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x3ad)) returned 1 [0101.785] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0101.785] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\messages.json", lpFilePart=0x0) returned 0x93 [0101.785] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0101.785] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0101.785] GetFileType (hFile=0x444) returned 0x1 [0101.785] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0101.785] GetFileType (hFile=0x444) returned 0x1 [0101.785] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x3ad [0101.785] ReadFile (in: hFile=0x444, lpBuffer=0x2346958, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x2346958*, lpNumberOfBytesRead=0x3be478*=0x3ad, lpOverlapped=0x0) returned 1 [0101.787] CloseHandle (hObject=0x444) returned 1 [0101.831] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\messages.json", lpFilePart=0x0) returned 0x93 [0101.831] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0101.831] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0101.833] GetFileType (hFile=0x444) returned 0x1 [0101.833] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0101.833] GetFileType (hFile=0x444) returned 0x1 [0101.833] WriteFile (in: hFile=0x444, lpBuffer=0x21bed58*, nNumberOfBytesToWrite=0x3b0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x21bed58*, lpNumberOfBytesWritten=0x3be388*=0x3b0, lpOverlapped=0x0) returned 1 [0101.833] CloseHandle (hObject=0x444) returned 1 [0101.834] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\messages.json", lpFilePart=0x0) returned 0x93 [0101.834] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\messages.json.xuy", lpFilePart=0x0) returned 0x97 [0101.834] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0101.834] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x738e3ba8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x738e4f40, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x288b9567, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x3b0)) returned 1 [0101.834] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0101.834] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\messages.json.xuy")) returned 1 [0101.835] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0101.835] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr", lpFilePart=0x0) returned 0x85 [0101.835] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\", lpFilePart=0x0) returned 0x86 [0101.835] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7370 [0101.835] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0101.835] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0101.835] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0101.835] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0101.836] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0101.836] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0101.836] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0101.836] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr", lpFilePart=0x0) returned 0x85 [0101.836] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\", lpFilePart=0x0) returned 0x86 [0101.836] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7e50 [0101.836] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0101.836] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0101.836] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0101.836] FindClose (in: hFindFile=0x5d7e50 | out: hFindFile=0x5d7e50) returned 1 [0101.836] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0101.836] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0101.836] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\messages.json", lpFilePart=0x0) returned 0x93 [0101.836] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0101.837] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x21c2fb8 | out: lpFileInformation=0x21c2fb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x738ed7ea, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x738f1290, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7408c4ce, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x279)) returned 1 [0101.837] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0101.837] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\messages.json", lpFilePart=0x0) returned 0x93 [0101.837] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0101.837] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0101.837] GetFileType (hFile=0x444) returned 0x1 [0101.837] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0101.837] GetFileType (hFile=0x444) returned 0x1 [0101.837] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x279 [0101.837] ReadFile (in: hFile=0x444, lpBuffer=0x21c3610, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x21c3610*, lpNumberOfBytesRead=0x3be478*=0x279, lpOverlapped=0x0) returned 1 [0101.838] CloseHandle (hObject=0x444) returned 1 [0101.849] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\messages.json", lpFilePart=0x0) returned 0x93 [0101.849] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0101.849] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0101.850] GetFileType (hFile=0x444) returned 0x1 [0101.850] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0101.850] GetFileType (hFile=0x444) returned 0x1 [0101.850] WriteFile (in: hFile=0x444, lpBuffer=0x223b300*, nNumberOfBytesToWrite=0x280, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x223b300*, lpNumberOfBytesWritten=0x3be388*=0x280, lpOverlapped=0x0) returned 1 [0101.851] CloseHandle (hObject=0x444) returned 1 [0101.851] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\messages.json", lpFilePart=0x0) returned 0x93 [0101.851] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\messages.json.xuy", lpFilePart=0x0) returned 0x97 [0101.851] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0101.852] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x738ed7ea, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x738f1290, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x288df710, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x280)) returned 1 [0101.852] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0101.852] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\messages.json.xuy")) returned 1 [0101.853] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0101.853] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu", lpFilePart=0x0) returned 0x85 [0101.853] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\", lpFilePart=0x0) returned 0x86 [0101.853] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7a30 [0101.853] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0101.854] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0101.854] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0101.854] FindClose (in: hFindFile=0x5d7a30 | out: hFindFile=0x5d7a30) returned 1 [0101.854] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0101.854] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0101.854] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0101.854] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu", lpFilePart=0x0) returned 0x85 [0101.854] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\", lpFilePart=0x0) returned 0x86 [0101.854] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d81b0 [0101.854] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0101.855] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0101.855] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0101.855] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0101.855] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0101.855] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0101.855] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\messages.json", lpFilePart=0x0) returned 0x93 [0101.855] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0101.855] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x223f560 | out: lpFileInformation=0x223f560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x738f742e, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x738f87c0, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7408c4ce, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x2c6)) returned 1 [0101.858] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0101.858] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\messages.json", lpFilePart=0x0) returned 0x93 [0101.858] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0101.858] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0101.858] GetFileType (hFile=0x444) returned 0x1 [0101.858] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0101.858] GetFileType (hFile=0x444) returned 0x1 [0101.858] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x2c6 [0101.858] ReadFile (in: hFile=0x444, lpBuffer=0x223fc00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x223fc00*, lpNumberOfBytesRead=0x3be478*=0x2c6, lpOverlapped=0x0) returned 1 [0101.860] CloseHandle (hObject=0x444) returned 1 [0101.878] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\messages.json", lpFilePart=0x0) returned 0x93 [0101.878] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0101.878] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0101.880] GetFileType (hFile=0x444) returned 0x1 [0101.880] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0101.880] GetFileType (hFile=0x444) returned 0x1 [0101.880] WriteFile (in: hFile=0x444, lpBuffer=0x22b7a88*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x22b7a88*, lpNumberOfBytesWritten=0x3be388*=0x2d0, lpOverlapped=0x0) returned 1 [0101.882] CloseHandle (hObject=0x444) returned 1 [0101.882] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\messages.json", lpFilePart=0x0) returned 0x93 [0101.882] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\messages.json.xuy", lpFilePart=0x0) returned 0x97 [0101.882] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0101.882] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x738f742e, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x738f87c0, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2892bcf7, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2d0)) returned 1 [0101.882] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0101.882] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\messages.json.xuy")) returned 1 [0101.884] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0101.884] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id", lpFilePart=0x0) returned 0x85 [0101.884] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\", lpFilePart=0x0) returned 0x86 [0101.884] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7550 [0101.884] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0101.884] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0101.885] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0101.885] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0101.885] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0101.885] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0101.885] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0101.885] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id", lpFilePart=0x0) returned 0x85 [0101.885] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\", lpFilePart=0x0) returned 0x86 [0101.885] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7610 [0101.885] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0101.885] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0101.886] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0101.886] FindClose (in: hFindFile=0x5d7610 | out: hFindFile=0x5d7610) returned 1 [0101.886] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0101.886] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0101.886] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\messages.json", lpFilePart=0x0) returned 0x93 [0101.886] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0101.886] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x22bbce8 | out: lpFileInformation=0x22bbce8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73905e8f, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x73907220, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7408ebde, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x269)) returned 1 [0101.886] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0101.886] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\messages.json", lpFilePart=0x0) returned 0x93 [0101.886] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0101.886] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0101.887] GetFileType (hFile=0x444) returned 0x1 [0101.887] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0101.887] GetFileType (hFile=0x444) returned 0x1 [0101.887] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x269 [0101.887] ReadFile (in: hFile=0x444, lpBuffer=0x22bc330, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x22bc330*, lpNumberOfBytesRead=0x3be478*=0x269, lpOverlapped=0x0) returned 1 [0101.889] CloseHandle (hObject=0x444) returned 1 [0101.906] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\messages.json", lpFilePart=0x0) returned 0x93 [0101.906] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0101.906] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0101.907] GetFileType (hFile=0x444) returned 0x1 [0101.908] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0101.908] GetFileType (hFile=0x444) returned 0x1 [0101.908] WriteFile (in: hFile=0x444, lpBuffer=0x2333fd0*, nNumberOfBytesToWrite=0x270, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x2333fd0*, lpNumberOfBytesWritten=0x3be388*=0x270, lpOverlapped=0x0) returned 1 [0101.908] CloseHandle (hObject=0x444) returned 1 [0101.908] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\messages.json", lpFilePart=0x0) returned 0x93 [0101.909] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\messages.json.xuy", lpFilePart=0x0) returned 0x97 [0101.909] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0101.909] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73905e8f, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x73907220, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x289781b4, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x270)) returned 1 [0101.909] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0101.909] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\messages.json.xuy")) returned 1 [0101.910] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0101.910] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it", lpFilePart=0x0) returned 0x85 [0101.910] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\", lpFilePart=0x0) returned 0x86 [0101.910] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7eb0 [0101.910] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0101.910] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0101.911] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0101.911] FindClose (in: hFindFile=0x5d7eb0 | out: hFindFile=0x5d7eb0) returned 1 [0101.911] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0101.911] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0101.911] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0101.911] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it", lpFilePart=0x0) returned 0x85 [0101.911] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\", lpFilePart=0x0) returned 0x86 [0101.911] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7c70 [0101.911] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0101.911] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0101.911] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0101.911] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0101.911] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0101.912] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0101.912] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\messages.json", lpFilePart=0x0) returned 0x93 [0101.912] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0101.912] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x2338230 | out: lpFileInformation=0x2338230*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7392f6aa, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x73930a30, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7408ebde, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x26e)) returned 1 [0101.912] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0101.912] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\messages.json", lpFilePart=0x0) returned 0x93 [0101.912] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0101.912] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0101.912] GetFileType (hFile=0x444) returned 0x1 [0101.912] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0101.912] GetFileType (hFile=0x444) returned 0x1 [0101.913] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x26e [0101.913] ReadFile (in: hFile=0x444, lpBuffer=0x2338878, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x2338878*, lpNumberOfBytesRead=0x3be478*=0x26e, lpOverlapped=0x0) returned 1 [0101.914] CloseHandle (hObject=0x444) returned 1 [0101.984] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\messages.json", lpFilePart=0x0) returned 0x93 [0101.984] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0101.984] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0101.986] GetFileType (hFile=0x444) returned 0x1 [0101.986] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0101.986] GetFileType (hFile=0x444) returned 0x1 [0101.986] WriteFile (in: hFile=0x444, lpBuffer=0x21b03b8*, nNumberOfBytesToWrite=0x270, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x21b03b8*, lpNumberOfBytesWritten=0x3be388*=0x270, lpOverlapped=0x0) returned 1 [0101.987] CloseHandle (hObject=0x444) returned 1 [0101.987] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\messages.json", lpFilePart=0x0) returned 0x93 [0101.987] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\messages.json.xuy", lpFilePart=0x0) returned 0x97 [0101.987] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0101.987] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7392f6aa, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x73930a30, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x28a371fa, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x270)) returned 1 [0101.987] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0101.987] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\messages.json.xuy")) returned 1 [0101.989] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0101.989] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja", lpFilePart=0x0) returned 0x85 [0101.989] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\", lpFilePart=0x0) returned 0x86 [0101.989] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7fd0 [0101.989] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0101.989] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0101.989] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0101.990] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0101.990] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0101.990] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0101.990] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0101.990] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja", lpFilePart=0x0) returned 0x85 [0101.990] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\", lpFilePart=0x0) returned 0x86 [0101.990] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7d30 [0101.990] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0101.990] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0101.991] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0101.991] FindClose (in: hFindFile=0x5d7d30 | out: hFindFile=0x5d7d30) returned 1 [0101.991] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0101.991] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0101.991] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\messages.json", lpFilePart=0x0) returned 0x93 [0101.991] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0101.991] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x21b4618 | out: lpFileInformation=0x21b4618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x739392ef, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7393a670, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7408ebde, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x30a)) returned 1 [0101.991] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0101.991] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\messages.json", lpFilePart=0x0) returned 0x93 [0101.991] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0101.991] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0101.991] GetFileType (hFile=0x444) returned 0x1 [0101.991] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0101.992] GetFileType (hFile=0x444) returned 0x1 [0101.992] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x30a [0101.992] ReadFile (in: hFile=0x444, lpBuffer=0x21b4d00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x21b4d00*, lpNumberOfBytesRead=0x3be478*=0x30a, lpOverlapped=0x0) returned 1 [0101.993] CloseHandle (hObject=0x444) returned 1 [0102.007] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\messages.json", lpFilePart=0x0) returned 0x93 [0102.007] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0102.008] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0102.010] GetFileType (hFile=0x444) returned 0x1 [0102.010] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0102.010] GetFileType (hFile=0x444) returned 0x1 [0102.010] WriteFile (in: hFile=0x444, lpBuffer=0x222ccc0*, nNumberOfBytesToWrite=0x310, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x222ccc0*, lpNumberOfBytesWritten=0x3be388*=0x310, lpOverlapped=0x0) returned 1 [0102.011] CloseHandle (hObject=0x444) returned 1 [0102.011] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\messages.json", lpFilePart=0x0) returned 0x93 [0102.011] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\messages.json.xuy", lpFilePart=0x0) returned 0x97 [0102.011] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0102.011] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x739392ef, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7393a670, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x28a5cf5f, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x310)) returned 1 [0102.011] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0102.011] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\messages.json.xuy")) returned 1 [0102.012] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0102.012] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko", lpFilePart=0x0) returned 0x85 [0102.013] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\", lpFilePart=0x0) returned 0x86 [0102.013] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d81b0 [0102.016] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0102.016] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0102.016] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0102.016] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0102.016] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0102.016] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0102.016] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0102.016] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko", lpFilePart=0x0) returned 0x85 [0102.016] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\", lpFilePart=0x0) returned 0x86 [0102.016] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7550 [0102.017] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0102.017] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0102.017] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0102.017] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0102.017] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0102.017] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0102.017] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\messages.json", lpFilePart=0x0) returned 0x93 [0102.018] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0102.018] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x2230f20 | out: lpFileInformation=0x2230f20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73940836, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x739442b0, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7408ebde, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x29d)) returned 1 [0102.018] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0102.018] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\messages.json", lpFilePart=0x0) returned 0x93 [0102.018] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0102.018] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0102.018] GetFileType (hFile=0x444) returned 0x1 [0102.018] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0102.018] GetFileType (hFile=0x444) returned 0x1 [0102.018] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x29d [0102.018] ReadFile (in: hFile=0x444, lpBuffer=0x2231598, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x2231598*, lpNumberOfBytesRead=0x3be478*=0x29d, lpOverlapped=0x0) returned 1 [0102.020] CloseHandle (hObject=0x444) returned 1 [0102.037] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\messages.json", lpFilePart=0x0) returned 0x93 [0102.037] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0102.037] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0102.039] GetFileType (hFile=0x444) returned 0x1 [0102.039] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0102.039] GetFileType (hFile=0x444) returned 0x1 [0102.039] WriteFile (in: hFile=0x444, lpBuffer=0x22a9328*, nNumberOfBytesToWrite=0x2a0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x22a9328*, lpNumberOfBytesWritten=0x3be388*=0x2a0, lpOverlapped=0x0) returned 1 [0102.040] CloseHandle (hObject=0x444) returned 1 [0102.040] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\messages.json", lpFilePart=0x0) returned 0x93 [0102.040] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\messages.json.xuy", lpFilePart=0x0) returned 0x97 [0102.040] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0102.040] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73940836, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x739442b0, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x28aa947b, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2a0)) returned 1 [0102.041] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0102.041] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\messages.json.xuy")) returned 1 [0102.042] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0102.042] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt", lpFilePart=0x0) returned 0x85 [0102.042] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\", lpFilePart=0x0) returned 0x86 [0102.042] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d78b0 [0102.042] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0102.043] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0102.043] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0102.043] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0102.043] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0102.043] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0102.043] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0102.043] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt", lpFilePart=0x0) returned 0x85 [0102.043] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\", lpFilePart=0x0) returned 0x86 [0102.043] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d78b0 [0102.043] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0102.044] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0102.044] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0102.044] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0102.044] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0102.044] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0102.044] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\messages.json", lpFilePart=0x0) returned 0x93 [0102.044] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0102.044] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x22ad588 | out: lpFileInformation=0x22ad588*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7394a45f, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7394def0, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x740912e7, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x2ae)) returned 1 [0102.045] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0102.045] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\messages.json", lpFilePart=0x0) returned 0x93 [0102.045] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0102.045] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0102.045] GetFileType (hFile=0x444) returned 0x1 [0102.045] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0102.045] GetFileType (hFile=0x444) returned 0x1 [0102.045] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x2ae [0102.045] ReadFile (in: hFile=0x444, lpBuffer=0x22adc10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x22adc10*, lpNumberOfBytesRead=0x3be478*=0x2ae, lpOverlapped=0x0) returned 1 [0102.047] CloseHandle (hObject=0x444) returned 1 [0102.079] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\messages.json", lpFilePart=0x0) returned 0x93 [0102.079] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0102.079] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0102.081] GetFileType (hFile=0x444) returned 0x1 [0102.081] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0102.081] GetFileType (hFile=0x444) returned 0x1 [0102.081] WriteFile (in: hFile=0x444, lpBuffer=0x23259f0*, nNumberOfBytesToWrite=0x2b0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x23259f0*, lpNumberOfBytesWritten=0x3be388*=0x2b0, lpOverlapped=0x0) returned 1 [0102.082] CloseHandle (hObject=0x444) returned 1 [0102.082] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\messages.json", lpFilePart=0x0) returned 0x93 [0102.082] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\messages.json.xuy", lpFilePart=0x0) returned 0x97 [0102.082] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0102.082] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7394a45f, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7394def0, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x28b1bb39, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2b0)) returned 1 [0102.083] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0102.083] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\messages.json.xuy")) returned 1 [0102.084] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0102.084] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv", lpFilePart=0x0) returned 0x85 [0102.084] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\", lpFilePart=0x0) returned 0x86 [0102.084] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7d30 [0102.084] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0102.084] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0102.084] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0102.084] FindClose (in: hFindFile=0x5d7d30 | out: hFindFile=0x5d7d30) returned 1 [0102.084] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0102.085] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0102.085] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0102.085] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv", lpFilePart=0x0) returned 0x85 [0102.085] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\", lpFilePart=0x0) returned 0x86 [0102.085] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7370 [0102.085] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0102.085] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0102.085] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0102.085] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0102.085] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0102.085] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0102.085] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\messages.json", lpFilePart=0x0) returned 0x93 [0102.085] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0102.086] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x2329c50 | out: lpFileInformation=0x2329c50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73958ec5, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7395a240, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x740912e7, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x2bb)) returned 1 [0102.087] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0102.087] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\messages.json", lpFilePart=0x0) returned 0x93 [0102.087] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0102.087] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0102.087] GetFileType (hFile=0x444) returned 0x1 [0102.087] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0102.087] GetFileType (hFile=0x444) returned 0x1 [0102.087] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x2bb [0102.087] ReadFile (in: hFile=0x444, lpBuffer=0x232a2e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x232a2e8*, lpNumberOfBytesRead=0x3be478*=0x2bb, lpOverlapped=0x0) returned 1 [0102.098] CloseHandle (hObject=0x444) returned 1 [0102.150] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\messages.json", lpFilePart=0x0) returned 0x93 [0102.150] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0102.150] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0102.152] GetFileType (hFile=0x444) returned 0x1 [0102.152] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0102.152] GetFileType (hFile=0x444) returned 0x1 [0102.152] WriteFile (in: hFile=0x444, lpBuffer=0x21a2138*, nNumberOfBytesToWrite=0x2c0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x21a2138*, lpNumberOfBytesWritten=0x3be388*=0x2c0, lpOverlapped=0x0) returned 1 [0102.153] CloseHandle (hObject=0x444) returned 1 [0102.153] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\messages.json", lpFilePart=0x0) returned 0x93 [0102.153] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\messages.json.xuy", lpFilePart=0x0) returned 0x97 [0102.153] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0102.153] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73958ec5, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7395a240, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x28bb4489, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2c0)) returned 1 [0102.153] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0102.153] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\messages.json.xuy")) returned 1 [0102.155] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0102.155] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb", lpFilePart=0x0) returned 0x85 [0102.155] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\", lpFilePart=0x0) returned 0x86 [0102.155] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d81b0 [0102.158] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0102.158] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0102.158] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0102.158] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0102.158] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0102.158] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0102.158] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0102.158] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb", lpFilePart=0x0) returned 0x85 [0102.158] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\", lpFilePart=0x0) returned 0x86 [0102.159] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7eb0 [0102.159] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0102.159] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0102.159] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0102.159] FindClose (in: hFindFile=0x5d7eb0 | out: hFindFile=0x5d7eb0) returned 1 [0102.159] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0102.159] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0102.159] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\messages.json", lpFilePart=0x0) returned 0x93 [0102.159] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0102.159] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x21a6398 | out: lpFileInformation=0x21a6398*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73962ade, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x73963e80, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x740912e7, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x284)) returned 1 [0102.160] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0102.160] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\messages.json", lpFilePart=0x0) returned 0x93 [0102.160] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0102.160] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0102.160] GetFileType (hFile=0x444) returned 0x1 [0102.160] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0102.160] GetFileType (hFile=0x444) returned 0x1 [0102.160] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x284 [0102.160] ReadFile (in: hFile=0x444, lpBuffer=0x21a69f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x21a69f8*, lpNumberOfBytesRead=0x3be478*=0x284, lpOverlapped=0x0) returned 1 [0102.162] CloseHandle (hObject=0x444) returned 1 [0102.173] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\messages.json", lpFilePart=0x0) returned 0x93 [0102.173] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0102.173] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0102.175] GetFileType (hFile=0x444) returned 0x1 [0102.175] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0102.175] GetFileType (hFile=0x444) returned 0x1 [0102.175] WriteFile (in: hFile=0x444, lpBuffer=0x221e740*, nNumberOfBytesToWrite=0x290, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x221e740*, lpNumberOfBytesWritten=0x3be388*=0x290, lpOverlapped=0x0) returned 1 [0102.176] CloseHandle (hObject=0x444) returned 1 [0102.176] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\messages.json", lpFilePart=0x0) returned 0x93 [0102.176] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\messages.json.xuy", lpFilePart=0x0) returned 0x97 [0102.176] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0102.176] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73962ade, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x73963e80, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x28c00a38, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x290)) returned 1 [0102.176] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0102.176] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\messages.json.xuy")) returned 1 [0102.177] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0102.177] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl", lpFilePart=0x0) returned 0x85 [0102.178] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\", lpFilePart=0x0) returned 0x86 [0102.178] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d78b0 [0102.178] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0102.178] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0102.178] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0102.178] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0102.178] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0102.178] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0102.178] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0102.179] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl", lpFilePart=0x0) returned 0x85 [0102.179] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\", lpFilePart=0x0) returned 0x86 [0102.179] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7550 [0102.179] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0102.179] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0102.179] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0102.179] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0102.179] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0102.179] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0102.179] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\messages.json", lpFilePart=0x0) returned 0x93 [0102.179] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0102.180] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x22229a0 | out: lpFileInformation=0x22229a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7396c74b, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7396dac0, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x740912e7, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x282)) returned 1 [0102.180] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0102.180] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\messages.json", lpFilePart=0x0) returned 0x93 [0102.180] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0102.180] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0102.180] GetFileType (hFile=0x444) returned 0x1 [0102.180] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0102.180] GetFileType (hFile=0x444) returned 0x1 [0102.180] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x282 [0102.180] ReadFile (in: hFile=0x444, lpBuffer=0x2223000, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x2223000*, lpNumberOfBytesRead=0x3be478*=0x282, lpOverlapped=0x0) returned 1 [0102.182] CloseHandle (hObject=0x444) returned 1 [0102.195] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\messages.json", lpFilePart=0x0) returned 0x93 [0102.195] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0102.195] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0102.196] GetFileType (hFile=0x444) returned 0x1 [0102.197] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0102.197] GetFileType (hFile=0x444) returned 0x1 [0102.197] WriteFile (in: hFile=0x444, lpBuffer=0x229ad48*, nNumberOfBytesToWrite=0x290, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x229ad48*, lpNumberOfBytesWritten=0x3be388*=0x290, lpOverlapped=0x0) returned 1 [0102.198] CloseHandle (hObject=0x444) returned 1 [0102.198] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\messages.json", lpFilePart=0x0) returned 0x93 [0102.198] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\messages.json.xuy", lpFilePart=0x0) returned 0x97 [0102.198] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0102.198] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7396c74b, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7396dac0, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x28c26fb0, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x290)) returned 1 [0102.198] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0102.199] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\messages.json.xuy")) returned 1 [0102.199] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0102.200] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl", lpFilePart=0x0) returned 0x85 [0102.200] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\", lpFilePart=0x0) returned 0x86 [0102.200] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7a30 [0102.202] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0102.202] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0102.202] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0102.202] FindClose (in: hFindFile=0x5d7a30 | out: hFindFile=0x5d7a30) returned 1 [0102.202] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0102.202] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0102.202] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0102.202] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl", lpFilePart=0x0) returned 0x85 [0102.202] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\", lpFilePart=0x0) returned 0x86 [0102.202] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7cd0 [0102.202] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0102.203] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0102.203] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0102.203] FindClose (in: hFindFile=0x5d7cd0 | out: hFindFile=0x5d7cd0) returned 1 [0102.203] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0102.203] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0102.203] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\messages.json", lpFilePart=0x0) returned 0x93 [0102.203] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0102.203] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x229efa8 | out: lpFileInformation=0x229efa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73978a9f, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7397c520, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x740939fa, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x29a)) returned 1 [0102.203] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0102.203] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\messages.json", lpFilePart=0x0) returned 0x93 [0102.203] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0102.204] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0102.204] GetFileType (hFile=0x444) returned 0x1 [0102.204] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0102.204] GetFileType (hFile=0x444) returned 0x1 [0102.204] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x29a [0102.204] ReadFile (in: hFile=0x444, lpBuffer=0x229f620, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x229f620*, lpNumberOfBytesRead=0x3be478*=0x29a, lpOverlapped=0x0) returned 1 [0102.205] CloseHandle (hObject=0x444) returned 1 [0102.216] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\messages.json", lpFilePart=0x0) returned 0x93 [0102.216] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0102.216] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0102.218] GetFileType (hFile=0x444) returned 0x1 [0102.218] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0102.218] GetFileType (hFile=0x444) returned 0x1 [0102.218] WriteFile (in: hFile=0x444, lpBuffer=0x23173b0*, nNumberOfBytesToWrite=0x2a0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x23173b0*, lpNumberOfBytesWritten=0x3be388*=0x2a0, lpOverlapped=0x0) returned 1 [0102.219] CloseHandle (hObject=0x444) returned 1 [0102.219] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\messages.json", lpFilePart=0x0) returned 0x93 [0102.219] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\messages.json.xuy", lpFilePart=0x0) returned 0x97 [0102.219] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0102.219] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73978a9f, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7397c520, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x28c73060, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2a0)) returned 1 [0102.219] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0102.219] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\messages.json.xuy")) returned 1 [0102.220] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0102.220] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR", lpFilePart=0x0) returned 0x88 [0102.220] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR\\", lpFilePart=0x0) returned 0x89 [0102.220] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d78b0 [0102.221] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0102.221] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0102.221] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0102.221] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0102.221] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0102.221] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0102.221] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0102.221] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR", lpFilePart=0x0) returned 0x88 [0102.221] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR\\", lpFilePart=0x0) returned 0x89 [0102.221] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7d90 [0102.222] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0102.222] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0102.222] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0102.222] FindClose (in: hFindFile=0x5d7d90 | out: hFindFile=0x5d7d90) returned 1 [0102.222] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0102.222] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0102.222] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR\\messages.json", lpFilePart=0x0) returned 0x96 [0102.222] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0102.222] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_br\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x231b6e0 | out: lpFileInformation=0x231b6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73984df0, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x73986160, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x740939fa, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x29b)) returned 1 [0102.223] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0102.223] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR\\messages.json", lpFilePart=0x0) returned 0x96 [0102.223] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0102.223] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_br\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0102.223] GetFileType (hFile=0x444) returned 0x1 [0102.223] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0102.223] GetFileType (hFile=0x444) returned 0x1 [0102.223] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x29b [0102.223] ReadFile (in: hFile=0x444, lpBuffer=0x231bd68, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x231bd68*, lpNumberOfBytesRead=0x3be478*=0x29b, lpOverlapped=0x0) returned 1 [0102.225] CloseHandle (hObject=0x444) returned 1 [0102.272] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR\\messages.json", lpFilePart=0x0) returned 0x96 [0102.273] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0102.273] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_br\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0102.274] GetFileType (hFile=0x444) returned 0x1 [0102.274] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0102.274] GetFileType (hFile=0x444) returned 0x1 [0102.275] WriteFile (in: hFile=0x444, lpBuffer=0x2193ad8*, nNumberOfBytesToWrite=0x2a0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x2193ad8*, lpNumberOfBytesWritten=0x3be388*=0x2a0, lpOverlapped=0x0) returned 1 [0102.275] CloseHandle (hObject=0x444) returned 1 [0102.275] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR\\messages.json", lpFilePart=0x0) returned 0x96 [0102.276] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR\\messages.json.xuy", lpFilePart=0x0) returned 0x9a [0102.276] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0102.276] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_br\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73984df0, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x73986160, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x28ce584c, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2a0)) returned 1 [0102.276] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0102.276] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_br\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_br\\messages.json.xuy")) returned 1 [0102.277] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0102.277] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT", lpFilePart=0x0) returned 0x88 [0102.277] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT\\", lpFilePart=0x0) returned 0x89 [0102.277] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7fd0 [0102.277] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0102.277] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0102.277] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0102.278] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0102.278] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0102.278] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0102.278] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0102.278] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT", lpFilePart=0x0) returned 0x88 [0102.278] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT\\", lpFilePart=0x0) returned 0x89 [0102.278] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7eb0 [0102.278] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0102.278] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0102.278] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0102.278] FindClose (in: hFindFile=0x5d7eb0 | out: hFindFile=0x5d7eb0) returned 1 [0102.278] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0102.278] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0102.279] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT\\messages.json", lpFilePart=0x0) returned 0x96 [0102.279] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0102.279] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_pt\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x2197e20 | out: lpFileInformation=0x2197e20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7398ea54, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7398fda0, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x740939fa, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x295)) returned 1 [0102.279] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0102.279] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT\\messages.json", lpFilePart=0x0) returned 0x96 [0102.279] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0102.279] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_pt\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0102.279] GetFileType (hFile=0x444) returned 0x1 [0102.279] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0102.279] GetFileType (hFile=0x444) returned 0x1 [0102.279] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x295 [0102.279] ReadFile (in: hFile=0x444, lpBuffer=0x21984a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x21984a0*, lpNumberOfBytesRead=0x3be478*=0x295, lpOverlapped=0x0) returned 1 [0102.281] CloseHandle (hObject=0x444) returned 1 [0102.291] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT\\messages.json", lpFilePart=0x0) returned 0x96 [0102.291] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0102.291] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_pt\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0102.292] GetFileType (hFile=0x444) returned 0x1 [0102.293] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0102.293] GetFileType (hFile=0x444) returned 0x1 [0102.293] WriteFile (in: hFile=0x444, lpBuffer=0x2210240*, nNumberOfBytesToWrite=0x2a0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x2210240*, lpNumberOfBytesWritten=0x3be388*=0x2a0, lpOverlapped=0x0) returned 1 [0102.293] CloseHandle (hObject=0x444) returned 1 [0102.293] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT\\messages.json", lpFilePart=0x0) returned 0x96 [0102.293] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT\\messages.json.xuy", lpFilePart=0x0) returned 0x9a [0102.294] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0102.294] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_pt\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7398ea54, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7398fda0, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x28d0bab5, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2a0)) returned 1 [0102.294] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0102.294] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_pt\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_pt\\messages.json.xuy")) returned 1 [0102.295] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0102.295] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro", lpFilePart=0x0) returned 0x85 [0102.295] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\", lpFilePart=0x0) returned 0x86 [0102.295] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7c70 [0102.296] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0102.296] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0102.296] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0102.296] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0102.296] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0102.296] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0102.296] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0102.296] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro", lpFilePart=0x0) returned 0x85 [0102.296] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\", lpFilePart=0x0) returned 0x86 [0102.296] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7a30 [0102.297] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0102.297] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0102.297] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0102.297] FindClose (in: hFindFile=0x5d7a30 | out: hFindFile=0x5d7a30) returned 1 [0102.297] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0102.297] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0102.297] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\messages.json", lpFilePart=0x0) returned 0x93 [0102.297] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0102.297] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x22144b8 | out: lpFileInformation=0x22144b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73998676, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x739999e0, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x740939fa, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x29c)) returned 1 [0102.297] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0102.297] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\messages.json", lpFilePart=0x0) returned 0x93 [0102.297] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0102.297] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0102.298] GetFileType (hFile=0x444) returned 0x1 [0102.298] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0102.298] GetFileType (hFile=0x444) returned 0x1 [0102.298] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x29c [0102.298] ReadFile (in: hFile=0x444, lpBuffer=0x2214b30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x2214b30*, lpNumberOfBytesRead=0x3be478*=0x29c, lpOverlapped=0x0) returned 1 [0102.308] CloseHandle (hObject=0x444) returned 1 [0102.319] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\messages.json", lpFilePart=0x0) returned 0x93 [0102.319] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0102.319] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0102.320] GetFileType (hFile=0x444) returned 0x1 [0102.320] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0102.320] GetFileType (hFile=0x444) returned 0x1 [0102.320] WriteFile (in: hFile=0x444, lpBuffer=0x228c8c0*, nNumberOfBytesToWrite=0x2a0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x228c8c0*, lpNumberOfBytesWritten=0x3be388*=0x2a0, lpOverlapped=0x0) returned 1 [0102.324] CloseHandle (hObject=0x444) returned 1 [0102.324] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\messages.json", lpFilePart=0x0) returned 0x93 [0102.324] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\messages.json.xuy", lpFilePart=0x0) returned 0x97 [0102.324] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0102.324] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73998676, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x739999e0, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x28d5814f, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2a0)) returned 1 [0102.325] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0102.325] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\messages.json.xuy")) returned 1 [0102.326] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0102.326] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru", lpFilePart=0x0) returned 0x85 [0102.326] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\", lpFilePart=0x0) returned 0x86 [0102.326] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7d30 [0102.326] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0102.327] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0102.327] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0102.327] FindClose (in: hFindFile=0x5d7d30 | out: hFindFile=0x5d7d30) returned 1 [0102.327] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0102.327] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0102.327] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0102.327] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru", lpFilePart=0x0) returned 0x85 [0102.327] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\", lpFilePart=0x0) returned 0x86 [0102.327] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d78b0 [0102.327] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0102.328] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0102.328] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0102.328] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0102.328] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0102.328] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0102.328] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\messages.json", lpFilePart=0x0) returned 0x93 [0102.328] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0102.328] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x2290b20 | out: lpFileInformation=0x2290b20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x739a49ca, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x739a8440, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x74096110, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x30f)) returned 1 [0102.329] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0102.329] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\messages.json", lpFilePart=0x0) returned 0x93 [0102.329] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0102.329] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0102.330] GetFileType (hFile=0x444) returned 0x1 [0102.330] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0102.330] GetFileType (hFile=0x444) returned 0x1 [0102.330] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x30f [0102.330] ReadFile (in: hFile=0x444, lpBuffer=0x2291208, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x2291208*, lpNumberOfBytesRead=0x3be478*=0x30f, lpOverlapped=0x0) returned 1 [0102.331] CloseHandle (hObject=0x444) returned 1 [0102.343] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\messages.json", lpFilePart=0x0) returned 0x93 [0102.343] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0102.344] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0102.345] GetFileType (hFile=0x444) returned 0x1 [0102.345] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0102.345] GetFileType (hFile=0x444) returned 0x1 [0102.345] WriteFile (in: hFile=0x444, lpBuffer=0x23091c8*, nNumberOfBytesToWrite=0x310, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x23091c8*, lpNumberOfBytesWritten=0x3be388*=0x310, lpOverlapped=0x0) returned 1 [0102.346] CloseHandle (hObject=0x444) returned 1 [0102.346] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\messages.json", lpFilePart=0x0) returned 0x93 [0102.346] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\messages.json.xuy", lpFilePart=0x0) returned 0x97 [0102.346] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0102.346] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x739a49ca, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x739a8440, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x28da42f6, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x310)) returned 1 [0102.346] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0102.346] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\messages.json.xuy")) returned 1 [0102.347] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0102.347] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk", lpFilePart=0x0) returned 0x85 [0102.347] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\", lpFilePart=0x0) returned 0x86 [0102.347] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7550 [0102.348] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0102.348] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0102.348] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0102.348] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0102.348] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0102.348] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0102.348] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0102.348] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk", lpFilePart=0x0) returned 0x85 [0102.348] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\", lpFilePart=0x0) returned 0x86 [0102.348] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d78b0 [0102.349] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0102.349] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0102.349] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0102.349] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0102.349] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0102.349] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0102.349] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\messages.json", lpFilePart=0x0) returned 0x93 [0102.349] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0102.349] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x230d428 | out: lpFileInformation=0x230d428*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x739ae612, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x739b2080, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x74096110, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x29f)) returned 1 [0102.349] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0102.349] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\messages.json", lpFilePart=0x0) returned 0x93 [0102.349] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0102.349] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0102.350] GetFileType (hFile=0x444) returned 0x1 [0102.350] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0102.350] GetFileType (hFile=0x444) returned 0x1 [0102.350] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x29f [0102.350] ReadFile (in: hFile=0x444, lpBuffer=0x230daa0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x230daa0*, lpNumberOfBytesRead=0x3be478*=0x29f, lpOverlapped=0x0) returned 1 [0102.351] CloseHandle (hObject=0x444) returned 1 [0102.392] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\messages.json", lpFilePart=0x0) returned 0x93 [0102.392] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0102.392] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0102.394] GetFileType (hFile=0x444) returned 0x1 [0102.394] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0102.394] GetFileType (hFile=0x444) returned 0x1 [0102.394] WriteFile (in: hFile=0x444, lpBuffer=0x2185858*, nNumberOfBytesToWrite=0x2a0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x2185858*, lpNumberOfBytesWritten=0x3be388*=0x2a0, lpOverlapped=0x0) returned 1 [0102.395] CloseHandle (hObject=0x444) returned 1 [0102.395] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\messages.json", lpFilePart=0x0) returned 0x93 [0102.395] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\messages.json.xuy", lpFilePart=0x0) returned 0x97 [0102.395] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0102.395] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x739ae612, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x739b2080, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x28e16a70, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2a0)) returned 1 [0102.395] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0102.395] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\messages.json.xuy")) returned 1 [0102.396] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0102.396] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl", lpFilePart=0x0) returned 0x85 [0102.396] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\", lpFilePart=0x0) returned 0x86 [0102.396] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d78b0 [0102.407] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0102.407] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0102.407] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0102.407] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0102.407] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0102.407] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0102.407] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0102.407] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl", lpFilePart=0x0) returned 0x85 [0102.407] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\", lpFilePart=0x0) returned 0x86 [0102.407] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d8090 [0102.408] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0102.408] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0102.408] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0102.408] FindClose (in: hFindFile=0x5d8090 | out: hFindFile=0x5d8090) returned 1 [0102.408] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0102.408] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0102.408] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\messages.json", lpFilePart=0x0) returned 0x93 [0102.408] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0102.408] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x2189ab8 | out: lpFileInformation=0x2189ab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x739b824d, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x739bbcc0, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x74096110, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x282)) returned 1 [0102.412] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0102.412] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\messages.json", lpFilePart=0x0) returned 0x93 [0102.412] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0102.413] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0102.413] GetFileType (hFile=0x444) returned 0x1 [0102.413] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0102.413] GetFileType (hFile=0x444) returned 0x1 [0102.413] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x282 [0102.413] ReadFile (in: hFile=0x444, lpBuffer=0x218a118, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x218a118*, lpNumberOfBytesRead=0x3be478*=0x282, lpOverlapped=0x0) returned 1 [0102.414] CloseHandle (hObject=0x444) returned 1 [0102.425] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\messages.json", lpFilePart=0x0) returned 0x93 [0102.425] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0102.425] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0102.426] GetFileType (hFile=0x444) returned 0x1 [0102.426] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0102.426] GetFileType (hFile=0x444) returned 0x1 [0102.426] WriteFile (in: hFile=0x444, lpBuffer=0x2201e60*, nNumberOfBytesToWrite=0x290, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x2201e60*, lpNumberOfBytesWritten=0x3be388*=0x290, lpOverlapped=0x0) returned 1 [0102.427] CloseHandle (hObject=0x444) returned 1 [0102.427] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\messages.json", lpFilePart=0x0) returned 0x93 [0102.427] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\messages.json.xuy", lpFilePart=0x0) returned 0x97 [0102.427] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0102.427] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x739b824d, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x739bbcc0, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x28e62fae, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x290)) returned 1 [0102.428] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0102.428] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\messages.json.xuy")) returned 1 [0102.429] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0102.429] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr", lpFilePart=0x0) returned 0x85 [0102.429] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\", lpFilePart=0x0) returned 0x86 [0102.429] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7370 [0102.429] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0102.429] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0102.430] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0102.430] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0102.430] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0102.430] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0102.430] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0102.430] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr", lpFilePart=0x0) returned 0x85 [0102.430] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\", lpFilePart=0x0) returned 0x86 [0102.430] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d75b0 [0102.430] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0102.430] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0102.430] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0102.430] FindClose (in: hFindFile=0x5d75b0 | out: hFindFile=0x5d75b0) returned 1 [0102.430] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0102.431] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0102.431] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\messages.json", lpFilePart=0x0) returned 0x93 [0102.431] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0102.431] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x22060c0 | out: lpFileInformation=0x22060c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x739c45a1, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x739c5900, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x74096110, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x32c)) returned 1 [0102.431] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0102.431] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\messages.json", lpFilePart=0x0) returned 0x93 [0102.431] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0102.431] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0102.431] GetFileType (hFile=0x444) returned 0x1 [0102.431] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0102.431] GetFileType (hFile=0x444) returned 0x1 [0102.431] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x32c [0102.431] ReadFile (in: hFile=0x444, lpBuffer=0x22067c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x22067c8*, lpNumberOfBytesRead=0x3be478*=0x32c, lpOverlapped=0x0) returned 1 [0102.433] CloseHandle (hObject=0x444) returned 1 [0102.444] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\messages.json", lpFilePart=0x0) returned 0x93 [0102.444] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0102.444] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0102.446] GetFileType (hFile=0x444) returned 0x1 [0102.446] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0102.446] GetFileType (hFile=0x444) returned 0x1 [0102.446] WriteFile (in: hFile=0x444, lpBuffer=0x227e828*, nNumberOfBytesToWrite=0x330, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x227e828*, lpNumberOfBytesWritten=0x3be388*=0x330, lpOverlapped=0x0) returned 1 [0102.447] CloseHandle (hObject=0x444) returned 1 [0102.447] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\messages.json", lpFilePart=0x0) returned 0x93 [0102.447] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\messages.json.xuy", lpFilePart=0x0) returned 0x97 [0102.447] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0102.447] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x739c45a1, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x739c5900, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x28e891f4, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x330)) returned 1 [0102.447] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0102.447] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\messages.json.xuy")) returned 1 [0102.448] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0102.448] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv", lpFilePart=0x0) returned 0x85 [0102.448] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\", lpFilePart=0x0) returned 0x86 [0102.448] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7eb0 [0102.448] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0102.449] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0102.449] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0102.449] FindClose (in: hFindFile=0x5d7eb0 | out: hFindFile=0x5d7eb0) returned 1 [0102.449] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0102.449] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0102.449] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0102.449] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv", lpFilePart=0x0) returned 0x85 [0102.449] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\", lpFilePart=0x0) returned 0x86 [0102.449] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7d90 [0102.449] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0102.449] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0102.449] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0102.450] FindClose (in: hFindFile=0x5d7d90 | out: hFindFile=0x5d7d90) returned 1 [0102.450] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0102.450] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0102.450] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\messages.json", lpFilePart=0x0) returned 0x93 [0102.450] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0102.450] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x2282a88 | out: lpFileInformation=0x2282a88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x739d090e, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x739d1c50, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x74096110, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x289)) returned 1 [0102.451] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0102.451] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\messages.json", lpFilePart=0x0) returned 0x93 [0102.451] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0102.452] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0102.452] GetFileType (hFile=0x444) returned 0x1 [0102.452] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0102.452] GetFileType (hFile=0x444) returned 0x1 [0102.452] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x289 [0102.452] ReadFile (in: hFile=0x444, lpBuffer=0x22830f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x22830f0*, lpNumberOfBytesRead=0x3be478*=0x289, lpOverlapped=0x0) returned 1 [0102.453] CloseHandle (hObject=0x444) returned 1 [0102.464] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\messages.json", lpFilePart=0x0) returned 0x93 [0102.464] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0102.464] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0102.465] GetFileType (hFile=0x444) returned 0x1 [0102.465] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0102.465] GetFileType (hFile=0x444) returned 0x1 [0102.465] WriteFile (in: hFile=0x444, lpBuffer=0x22fae30*, nNumberOfBytesToWrite=0x290, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x22fae30*, lpNumberOfBytesWritten=0x3be388*=0x290, lpOverlapped=0x0) returned 1 [0102.466] CloseHandle (hObject=0x444) returned 1 [0102.466] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\messages.json", lpFilePart=0x0) returned 0x93 [0102.466] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\messages.json.xuy", lpFilePart=0x0) returned 0x97 [0102.466] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0102.466] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x739d090e, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x739d1c50, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x28eaf26a, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x290)) returned 1 [0102.466] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0102.466] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\messages.json.xuy")) returned 1 [0102.468] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0102.468] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th", lpFilePart=0x0) returned 0x85 [0102.468] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\", lpFilePart=0x0) returned 0x86 [0102.468] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7550 [0102.468] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0102.468] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0102.468] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0102.468] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0102.468] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0102.469] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0102.469] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0102.469] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th", lpFilePart=0x0) returned 0x85 [0102.469] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\", lpFilePart=0x0) returned 0x86 [0102.469] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7fd0 [0102.469] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0102.469] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0102.469] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0102.469] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0102.469] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0102.469] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0102.469] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\messages.json", lpFilePart=0x0) returned 0x93 [0102.469] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0102.469] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x22ff090 | out: lpFileInformation=0x22ff090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x739da52d, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x739db890, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x74098838, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x44b)) returned 1 [0102.470] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0102.470] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\messages.json", lpFilePart=0x0) returned 0x93 [0102.470] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0102.470] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0102.470] GetFileType (hFile=0x444) returned 0x1 [0102.470] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0102.470] GetFileType (hFile=0x444) returned 0x1 [0102.470] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x44b [0102.470] ReadFile (in: hFile=0x444, lpBuffer=0x22ff8b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x22ff8b8*, lpNumberOfBytesRead=0x3be478*=0x44b, lpOverlapped=0x0) returned 1 [0102.472] CloseHandle (hObject=0x444) returned 1 [0102.513] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\messages.json", lpFilePart=0x0) returned 0x93 [0102.513] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0102.513] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0102.515] GetFileType (hFile=0x444) returned 0x1 [0102.515] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0102.515] GetFileType (hFile=0x444) returned 0x1 [0102.515] WriteFile (in: hFile=0x444, lpBuffer=0x2178038*, nNumberOfBytesToWrite=0x450, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x2178038*, lpNumberOfBytesWritten=0x3be388*=0x450, lpOverlapped=0x0) returned 1 [0102.516] CloseHandle (hObject=0x444) returned 1 [0102.516] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\messages.json", lpFilePart=0x0) returned 0x93 [0102.516] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\messages.json.xuy", lpFilePart=0x0) returned 0x97 [0102.516] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0102.516] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x739da52d, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x739db890, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x28f47d95, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x450)) returned 1 [0102.516] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0102.517] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\messages.json.xuy")) returned 1 [0102.517] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0102.518] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr", lpFilePart=0x0) returned 0x85 [0102.518] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\", lpFilePart=0x0) returned 0x86 [0102.518] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7cd0 [0102.518] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0102.518] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0102.518] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0102.518] FindClose (in: hFindFile=0x5d7cd0 | out: hFindFile=0x5d7cd0) returned 1 [0102.518] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0102.518] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0102.518] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0102.518] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr", lpFilePart=0x0) returned 0x85 [0102.518] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\", lpFilePart=0x0) returned 0x86 [0102.519] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d78b0 [0102.519] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0102.519] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0102.519] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0102.519] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0102.519] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0102.519] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0102.519] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\messages.json", lpFilePart=0x0) returned 0x93 [0102.519] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0102.519] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x217c298 | out: lpFileInformation=0x217c298*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x739e4178, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x739e54d0, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x74098838, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x28a)) returned 1 [0102.519] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0102.520] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\messages.json", lpFilePart=0x0) returned 0x93 [0102.520] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0102.520] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0102.520] GetFileType (hFile=0x444) returned 0x1 [0102.520] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0102.520] GetFileType (hFile=0x444) returned 0x1 [0102.520] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x28a [0102.520] ReadFile (in: hFile=0x444, lpBuffer=0x217c900, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x217c900*, lpNumberOfBytesRead=0x3be478*=0x28a, lpOverlapped=0x0) returned 1 [0102.521] CloseHandle (hObject=0x444) returned 1 [0102.533] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\messages.json", lpFilePart=0x0) returned 0x93 [0102.533] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0102.533] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0102.535] GetFileType (hFile=0x444) returned 0x1 [0102.535] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0102.535] GetFileType (hFile=0x444) returned 0x1 [0102.535] WriteFile (in: hFile=0x444, lpBuffer=0x21f4640*, nNumberOfBytesToWrite=0x290, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x21f4640*, lpNumberOfBytesWritten=0x3be388*=0x290, lpOverlapped=0x0) returned 1 [0102.536] CloseHandle (hObject=0x444) returned 1 [0102.536] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\messages.json", lpFilePart=0x0) returned 0x93 [0102.536] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\messages.json.xuy", lpFilePart=0x0) returned 0x97 [0102.536] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0102.536] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x739e4178, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x739e54d0, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x28f6e38a, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x290)) returned 1 [0102.536] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0102.536] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\messages.json.xuy")) returned 1 [0102.537] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0102.537] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk", lpFilePart=0x0) returned 0x85 [0102.537] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\", lpFilePart=0x0) returned 0x86 [0102.537] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d78b0 [0102.537] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0102.538] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0102.538] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0102.538] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0102.538] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0102.538] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0102.538] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0102.538] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk", lpFilePart=0x0) returned 0x85 [0102.538] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\", lpFilePart=0x0) returned 0x86 [0102.538] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d79d0 [0102.538] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0102.538] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0102.539] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0102.539] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0102.539] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0102.539] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0102.539] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\messages.json", lpFilePart=0x0) returned 0x93 [0102.539] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0102.539] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x21f88a0 | out: lpFileInformation=0x21f88a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x739f04cc, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x739f1820, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x74098838, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x315)) returned 1 [0102.539] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0102.539] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\messages.json", lpFilePart=0x0) returned 0x93 [0102.539] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0102.539] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0102.539] GetFileType (hFile=0x444) returned 0x1 [0102.539] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0102.539] GetFileType (hFile=0x444) returned 0x1 [0102.539] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x315 [0102.540] ReadFile (in: hFile=0x444, lpBuffer=0x21f8f90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x21f8f90*, lpNumberOfBytesRead=0x3be478*=0x315, lpOverlapped=0x0) returned 1 [0102.541] CloseHandle (hObject=0x444) returned 1 [0102.552] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\messages.json", lpFilePart=0x0) returned 0x93 [0102.552] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0102.552] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0102.554] GetFileType (hFile=0x444) returned 0x1 [0102.554] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0102.554] GetFileType (hFile=0x444) returned 0x1 [0102.554] WriteFile (in: hFile=0x444, lpBuffer=0x2270fa8*, nNumberOfBytesToWrite=0x320, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x2270fa8*, lpNumberOfBytesWritten=0x3be388*=0x320, lpOverlapped=0x0) returned 1 [0102.555] CloseHandle (hObject=0x444) returned 1 [0102.555] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\messages.json", lpFilePart=0x0) returned 0x93 [0102.555] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\messages.json.xuy", lpFilePart=0x0) returned 0x97 [0102.555] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0102.555] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x739f04cc, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x739f1820, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x28f9429a, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x320)) returned 1 [0102.555] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0102.555] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\messages.json.xuy")) returned 1 [0102.556] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0102.556] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi", lpFilePart=0x0) returned 0x85 [0102.556] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\", lpFilePart=0x0) returned 0x86 [0102.556] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7c70 [0102.559] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0102.559] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0102.559] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0102.559] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0102.559] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0102.559] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0102.559] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0102.559] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi", lpFilePart=0x0) returned 0x85 [0102.559] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\", lpFilePart=0x0) returned 0x86 [0102.559] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7c70 [0102.560] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0102.560] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0102.560] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0102.560] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0102.560] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0102.560] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0102.560] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\messages.json", lpFilePart=0x0) returned 0x93 [0102.560] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0102.560] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x2275208 | out: lpFileInformation=0x2275208*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x739fa114, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x739fb460, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x74098838, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x2d0)) returned 1 [0102.561] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0102.561] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\messages.json", lpFilePart=0x0) returned 0x93 [0102.561] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0102.561] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0102.561] GetFileType (hFile=0x444) returned 0x1 [0102.561] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0102.561] GetFileType (hFile=0x444) returned 0x1 [0102.561] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x2d0 [0102.561] ReadFile (in: hFile=0x444, lpBuffer=0x22758b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x22758b0*, lpNumberOfBytesRead=0x3be478*=0x2d0, lpOverlapped=0x0) returned 1 [0102.562] CloseHandle (hObject=0x444) returned 1 [0102.573] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\messages.json", lpFilePart=0x0) returned 0x93 [0102.573] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0102.573] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0102.575] GetFileType (hFile=0x444) returned 0x1 [0102.575] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0102.575] GetFileType (hFile=0x444) returned 0x1 [0102.575] WriteFile (in: hFile=0x444, lpBuffer=0x22ed788*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x22ed788*, lpNumberOfBytesWritten=0x3be388*=0x2e0, lpOverlapped=0x0) returned 1 [0102.576] CloseHandle (hObject=0x444) returned 1 [0102.576] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\messages.json", lpFilePart=0x0) returned 0x93 [0102.576] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\messages.json.xuy", lpFilePart=0x0) returned 0x97 [0102.576] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0102.576] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x739fa114, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x739fb460, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x28fe07b1, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2e0)) returned 1 [0102.576] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0102.577] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\messages.json.xuy")) returned 1 [0102.578] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0102.578] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN", lpFilePart=0x0) returned 0x88 [0102.578] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN\\", lpFilePart=0x0) returned 0x89 [0102.578] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d78b0 [0102.578] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0102.578] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0102.578] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0102.578] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0102.578] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0102.579] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0102.579] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0102.579] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN", lpFilePart=0x0) returned 0x88 [0102.579] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN\\", lpFilePart=0x0) returned 0x89 [0102.579] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7370 [0102.579] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0102.579] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0102.579] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0102.579] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0102.579] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0102.579] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0102.579] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN\\messages.json", lpFilePart=0x0) returned 0x96 [0102.580] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0102.580] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_cn\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x22f1ab8 | out: lpFileInformation=0x22f1ab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73a03d4f, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x73a77c90, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7409af26, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x253)) returned 1 [0102.580] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0102.580] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN\\messages.json", lpFilePart=0x0) returned 0x96 [0102.580] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0102.580] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_cn\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0102.580] GetFileType (hFile=0x444) returned 0x1 [0102.580] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0102.580] GetFileType (hFile=0x444) returned 0x1 [0102.580] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x253 [0102.580] ReadFile (in: hFile=0x444, lpBuffer=0x22f20f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x22f20f8*, lpNumberOfBytesRead=0x3be478*=0x253, lpOverlapped=0x0) returned 1 [0102.581] CloseHandle (hObject=0x444) returned 1 [0102.627] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN\\messages.json", lpFilePart=0x0) returned 0x96 [0102.627] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0102.627] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_cn\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0102.628] GetFileType (hFile=0x444) returned 0x1 [0102.628] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0102.628] GetFileType (hFile=0x444) returned 0x1 [0102.628] WriteFile (in: hFile=0x444, lpBuffer=0x2169b48*, nNumberOfBytesToWrite=0x260, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x2169b48*, lpNumberOfBytesWritten=0x3be388*=0x260, lpOverlapped=0x0) returned 1 [0102.629] CloseHandle (hObject=0x444) returned 1 [0102.630] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN\\messages.json", lpFilePart=0x0) returned 0x96 [0102.630] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN\\messages.json.xuy", lpFilePart=0x0) returned 0x9a [0102.630] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0102.630] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_cn\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73a03d4f, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x73a77c90, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x29052e09, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x260)) returned 1 [0102.630] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0102.630] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_cn\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_cn\\messages.json.xuy")) returned 1 [0102.631] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0102.631] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW", lpFilePart=0x0) returned 0x88 [0102.631] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW\\", lpFilePart=0x0) returned 0x89 [0102.631] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d78b0 [0102.631] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0102.632] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0102.632] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0102.632] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0102.632] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0102.632] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0102.632] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0102.632] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW", lpFilePart=0x0) returned 0x88 [0102.632] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW\\", lpFilePart=0x0) returned 0x89 [0102.632] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d78b0 [0102.632] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0102.632] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0102.633] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0102.633] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0102.633] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0102.633] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0102.633] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW\\messages.json", lpFilePart=0x0) returned 0x96 [0102.633] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0102.633] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_tw\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x216de90 | out: lpFileInformation=0x216de90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73aa9db9, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x73ab4d20, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7409af26, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x280)) returned 1 [0102.633] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0102.633] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW\\messages.json", lpFilePart=0x0) returned 0x96 [0102.633] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0102.633] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_tw\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0102.633] GetFileType (hFile=0x444) returned 0x1 [0102.633] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0102.633] GetFileType (hFile=0x444) returned 0x1 [0102.633] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x280 [0102.634] ReadFile (in: hFile=0x444, lpBuffer=0x216e4f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x216e4f8*, lpNumberOfBytesRead=0x3be478*=0x280, lpOverlapped=0x0) returned 1 [0102.635] CloseHandle (hObject=0x444) returned 1 [0102.650] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW\\messages.json", lpFilePart=0x0) returned 0x96 [0102.650] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0102.650] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_tw\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0102.651] GetFileType (hFile=0x444) returned 0x1 [0102.651] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0102.652] GetFileType (hFile=0x444) returned 0x1 [0102.652] WriteFile (in: hFile=0x444, lpBuffer=0x21e6248*, nNumberOfBytesToWrite=0x290, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x21e6248*, lpNumberOfBytesWritten=0x3be388*=0x290, lpOverlapped=0x0) returned 1 [0102.653] CloseHandle (hObject=0x444) returned 1 [0102.653] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW\\messages.json", lpFilePart=0x0) returned 0x96 [0102.653] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW\\messages.json.xuy", lpFilePart=0x0) returned 0x9a [0102.653] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0102.653] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_tw\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73aa9db9, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x73ab4d20, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x29078fb9, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x290)) returned 1 [0102.653] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0102.653] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_tw\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_tw\\messages.json.xuy")) returned 1 [0102.655] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0102.655] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata", nBufferLength=0x105, lpBuffer=0x3be0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata", lpFilePart=0x0) returned 0x83 [0102.655] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\", nBufferLength=0x105, lpBuffer=0x3be060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\", lpFilePart=0x0) returned 0x84 [0102.655] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\*", lpFindFileData=0x3be270 | out: lpFindFileData=0x3be270) returned 0x5d78b0 [0102.655] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0102.655] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0102.655] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 0 [0102.655] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0102.655] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0102.655] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0102.655] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0102.656] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata", nBufferLength=0x105, lpBuffer=0x3be0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata", lpFilePart=0x0) returned 0x83 [0102.656] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\", nBufferLength=0x105, lpBuffer=0x3be060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\", lpFilePart=0x0) returned 0x84 [0102.656] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\*", lpFindFileData=0x3be270 | out: lpFindFileData=0x3be270) returned 0x5d7fd0 [0102.656] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0102.656] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0102.656] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 0 [0102.656] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0102.656] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0102.656] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0102.656] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\verified_contents.json", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\verified_contents.json", lpFilePart=0x0) returned 0x9a [0102.656] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0102.656] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\verified_contents.json"), fInfoLevelId=0x0, lpFileInformation=0x21ea4f0 | out: lpFileInformation=0x21ea4f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73bdb0dc, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x73bdc3b0, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0xb7bfbc00, ftLastWriteTime.dwHighDateTime=0x1d297b0, nFileSizeHigh=0x0, nFileSizeLow=0x2dfa)) returned 1 [0102.657] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0102.657] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\verified_contents.json", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\verified_contents.json", lpFilePart=0x0) returned 0x9a [0102.657] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0102.657] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\verified_contents.json"), fInfoLevelId=0x0, lpFileInformation=0x21ea6f0 | out: lpFileInformation=0x21ea6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73bdb0dc, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x73bdc3b0, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0xb7bfbc00, ftLastWriteTime.dwHighDateTime=0x1d297b0, nFileSizeHigh=0x0, nFileSizeLow=0x2dfa)) returned 1 [0102.657] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0102.657] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\verified_contents.json", nBufferLength=0x105, lpBuffer=0x3bdfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\verified_contents.json", lpFilePart=0x0) returned 0x9a [0102.657] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0102.657] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\verified_contents.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0102.658] GetFileType (hFile=0x444) returned 0x1 [0102.658] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be420) returned 1 [0102.658] GetFileType (hFile=0x444) returned 0x1 [0102.658] ReadFile (in: hFile=0x444, lpBuffer=0x21ecc20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be538, lpOverlapped=0x0 | out: lpBuffer=0x21ecc20*, lpNumberOfBytesRead=0x3be538*=0x1000, lpOverlapped=0x0) returned 1 [0102.673] CloseHandle (hObject=0x444) returned 1 [0102.673] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\verified_contents.json", nBufferLength=0x105, lpBuffer=0x3bdfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\verified_contents.json", lpFilePart=0x0) returned 0x9a [0102.673] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0102.673] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\verified_contents.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0102.673] GetFileType (hFile=0x444) returned 0x1 [0102.673] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be420) returned 1 [0102.673] GetFileType (hFile=0x444) returned 0x1 [0102.673] WriteFile (in: hFile=0x444, lpBuffer=0x21ea8d0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be5e8, lpOverlapped=0x0 | out: lpBuffer=0x21ea8d0*, lpNumberOfBytesWritten=0x3be5e8*=0x2000, lpOverlapped=0x0) returned 1 [0102.676] CloseHandle (hObject=0x444) returned 1 [0102.676] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\verified_contents.json", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\verified_contents.json", lpFilePart=0x0) returned 0x9a [0102.676] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\verified_contents.json.xuy", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\verified_contents.json.xuy", lpFilePart=0x0) returned 0x9e [0102.676] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0102.676] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\verified_contents.json"), fInfoLevelId=0x0, lpFileInformation=0x3be600 | out: lpFileInformation=0x3be600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73bdb0dc, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x73bdc3b0, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x290c57ee, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2dfa)) returned 1 [0102.676] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0102.676] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\verified_contents.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\verified_contents.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\verified_contents.json.xuy")) returned 1 [0102.677] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0102.677] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia", lpFilePart=0x0) returned 0x6f [0102.677] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\", lpFilePart=0x0) returned 0x70 [0102.677] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d7550 [0102.677] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0102.677] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0102.678] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0102.678] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0102.678] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0102.678] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0102.678] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0102.678] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia", lpFilePart=0x0) returned 0x6f [0102.678] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\", lpFilePart=0x0) returned 0x70 [0102.678] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d78b0 [0102.678] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0102.678] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0102.678] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0102.678] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0102.679] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0102.679] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0102.679] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0102.679] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0", nBufferLength=0x105, lpBuffer=0x3be130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0", lpFilePart=0x0) returned 0x75 [0102.679] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\", nBufferLength=0x105, lpBuffer=0x3be0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\", lpFilePart=0x0) returned 0x76 [0102.679] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\*", lpFindFileData=0x3be2e0 | out: lpFindFileData=0x3be2e0) returned 0x5d78b0 [0102.689] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0102.689] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0102.690] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0102.690] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0102.690] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0102.690] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 0 [0102.690] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0102.691] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0102.691] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0102.691] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0102.691] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0", nBufferLength=0x105, lpBuffer=0x3be130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0", lpFilePart=0x0) returned 0x75 [0102.691] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\", nBufferLength=0x105, lpBuffer=0x3be0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\", lpFilePart=0x0) returned 0x76 [0102.691] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\*", lpFindFileData=0x3be2e0 | out: lpFindFileData=0x3be2e0) returned 0x5d8090 [0102.692] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0102.692] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0102.692] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0102.692] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0102.692] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0102.693] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 0 [0102.693] FindClose (in: hFindFile=0x5d8090 | out: hFindFile=0x5d8090) returned 1 [0102.693] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0102.693] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0102.693] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png", lpFilePart=0x0) returned 0x7d [0102.693] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0102.693] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png"), fInfoLevelId=0x0, lpFileInformation=0x226f5b0 | out: lpFileInformation=0x226f5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77b49d94, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x782bf24d, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x782bf24d, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x180f)) returned 1 [0102.694] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0102.694] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png", lpFilePart=0x0) returned 0x7d [0102.694] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0102.694] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png"), fInfoLevelId=0x0, lpFileInformation=0x226f758 | out: lpFileInformation=0x226f758*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77b49d94, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x782bf24d, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x782bf24d, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x180f)) returned 1 [0102.694] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0102.694] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png", nBufferLength=0x105, lpBuffer=0x3be040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png", lpFilePart=0x0) returned 0x7d [0102.694] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0102.695] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0102.695] GetFileType (hFile=0x444) returned 0x1 [0102.695] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be490) returned 1 [0102.695] GetFileType (hFile=0x444) returned 0x1 [0102.695] ReadFile (in: hFile=0x444, lpBuffer=0x2271bd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5a8, lpOverlapped=0x0 | out: lpBuffer=0x2271bd8*, lpNumberOfBytesRead=0x3be5a8*=0x1000, lpOverlapped=0x0) returned 1 [0102.712] CloseHandle (hObject=0x444) returned 1 [0102.712] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png", nBufferLength=0x105, lpBuffer=0x3be040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png", lpFilePart=0x0) returned 0x7d [0102.712] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0102.712] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0102.713] GetFileType (hFile=0x444) returned 0x1 [0102.713] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be490) returned 1 [0102.713] GetFileType (hFile=0x444) returned 0x1 [0102.713] WriteFile (in: hFile=0x444, lpBuffer=0x226f8e0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be658, lpOverlapped=0x0 | out: lpBuffer=0x226f8e0*, lpNumberOfBytesWritten=0x3be658*=0x2000, lpOverlapped=0x0) returned 1 [0102.713] CloseHandle (hObject=0x444) returned 1 [0102.713] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png", lpFilePart=0x0) returned 0x7d [0102.713] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png.xuy", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png.xuy", lpFilePart=0x0) returned 0x81 [0102.713] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0102.713] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png"), fInfoLevelId=0x0, lpFileInformation=0x3be670 | out: lpFileInformation=0x3be670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77b49d94, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x782bf24d, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x291118f8, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0102.713] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0102.713] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png.xuy")) returned 1 [0102.714] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\manifest.json", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\manifest.json", lpFilePart=0x0) returned 0x83 [0102.714] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0102.714] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\manifest.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\manifest.json"), fInfoLevelId=0x0, lpFileInformation=0x22ee120 | out: lpFileInformation=0x22ee120*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77a9c7fb, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x77b44f48, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x782b5619, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x310)) returned 1 [0102.714] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0102.715] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\manifest.json", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\manifest.json", lpFilePart=0x0) returned 0x83 [0102.715] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0102.715] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\manifest.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\manifest.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0102.715] GetFileType (hFile=0x444) returned 0x1 [0102.715] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be400) returned 1 [0102.715] GetFileType (hFile=0x444) returned 0x1 [0102.715] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be628 | out: lpFileSizeHigh=0x3be628*=0x0) returned 0x310 [0102.715] ReadFile (in: hFile=0x444, lpBuffer=0x22ee7c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be558, lpOverlapped=0x0 | out: lpBuffer=0x22ee7c8*, lpNumberOfBytesRead=0x3be558*=0x310, lpOverlapped=0x0) returned 1 [0102.716] CloseHandle (hObject=0x444) returned 1 [0102.758] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\manifest.json", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\manifest.json", lpFilePart=0x0) returned 0x83 [0102.758] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0102.758] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\manifest.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\manifest.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0102.760] GetFileType (hFile=0x444) returned 0x1 [0102.760] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be400) returned 1 [0102.760] GetFileType (hFile=0x444) returned 0x1 [0102.760] WriteFile (in: hFile=0x444, lpBuffer=0x2163c20*, nNumberOfBytesToWrite=0x320, lpNumberOfBytesWritten=0x3be468, lpOverlapped=0x0 | out: lpBuffer=0x2163c20*, lpNumberOfBytesWritten=0x3be468*=0x320, lpOverlapped=0x0) returned 1 [0102.761] CloseHandle (hObject=0x444) returned 1 [0102.761] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\manifest.json", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\manifest.json", lpFilePart=0x0) returned 0x83 [0102.761] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\manifest.json.xuy", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\manifest.json.xuy", lpFilePart=0x0) returned 0x87 [0102.761] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0102.761] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\manifest.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\manifest.json"), fInfoLevelId=0x0, lpFileInformation=0x3be670 | out: lpFileInformation=0x3be670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77a9c7fb, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x77b44f48, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x29184007, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x320)) returned 1 [0102.761] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0102.761] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\manifest.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\manifest.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\manifest.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\manifest.json.xuy")) returned 1 [0102.762] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0102.762] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales", nBufferLength=0x105, lpBuffer=0x3be0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales", lpFilePart=0x0) returned 0x7e [0102.762] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\", nBufferLength=0x105, lpBuffer=0x3be060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\", lpFilePart=0x0) returned 0x7f [0102.762] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\*", lpFindFileData=0x3be270 | out: lpFindFileData=0x3be270) returned 0x5d81b0 [0102.764] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0102.764] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0102.764] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0102.764] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0102.764] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0102.765] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0102.765] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0102.765] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0102.765] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0102.765] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0102.765] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0102.765] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0102.765] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0102.766] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0102.766] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0102.766] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0102.766] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0102.766] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0102.766] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0102.766] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0102.766] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0102.766] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0102.767] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0102.767] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0102.767] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0102.767] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0102.767] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0102.767] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0102.767] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0102.767] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0102.768] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0102.768] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0102.768] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0102.768] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0102.768] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0102.768] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0102.768] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0102.768] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0102.769] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0102.769] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 0 [0102.769] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0102.769] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0102.769] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0102.770] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0102.770] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales", nBufferLength=0x105, lpBuffer=0x3be0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales", lpFilePart=0x0) returned 0x7e [0102.770] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\", nBufferLength=0x105, lpBuffer=0x3be060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\", lpFilePart=0x0) returned 0x7f [0102.770] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\*", lpFindFileData=0x3be270 | out: lpFindFileData=0x3be270) returned 0x5d7eb0 [0102.770] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0102.771] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0102.771] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0102.771] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0102.771] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0102.771] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0102.771] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0102.771] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0102.771] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0102.771] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0102.771] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0102.772] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0102.772] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0102.772] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0102.772] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0102.772] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0102.772] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0102.772] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0102.772] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0102.772] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0102.772] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0102.772] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0102.773] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0102.773] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0102.773] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0102.773] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0102.773] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0102.773] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0102.773] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0102.773] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0102.773] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0102.773] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0102.773] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0102.774] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0102.774] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0102.774] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0102.774] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0102.774] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0102.774] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0102.774] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 0 [0102.774] FindClose (in: hFindFile=0x5d7eb0 | out: hFindFile=0x5d7eb0) returned 1 [0102.775] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0102.775] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0102.775] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0102.775] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar", lpFilePart=0x0) returned 0x81 [0102.775] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\", lpFilePart=0x0) returned 0x82 [0102.775] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7d90 [0102.777] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0102.777] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0102.777] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0102.777] FindClose (in: hFindFile=0x5d7d90 | out: hFindFile=0x5d7d90) returned 1 [0102.778] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0102.778] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0102.778] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0102.778] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar", lpFilePart=0x0) returned 0x81 [0102.778] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\", lpFilePart=0x0) returned 0x82 [0102.778] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d78b0 [0102.778] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0102.778] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0102.778] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0102.779] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0102.779] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0102.779] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0102.779] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\messages.json", lpFilePart=0x0) returned 0x8f [0102.779] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0102.779] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x21775b0 | out: lpFileInformation=0x21775b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77dcbfb0, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x77dcbed8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x782bf24d, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x138)) returned 1 [0102.780] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0102.780] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\messages.json", lpFilePart=0x0) returned 0x8f [0102.780] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0102.780] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0102.780] GetFileType (hFile=0x444) returned 0x1 [0102.780] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0102.780] GetFileType (hFile=0x444) returned 0x1 [0102.780] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x138 [0102.780] ReadFile (in: hFile=0x444, lpBuffer=0x2177ab0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x2177ab0*, lpNumberOfBytesRead=0x3be478*=0x138, lpOverlapped=0x0) returned 1 [0102.781] CloseHandle (hObject=0x444) returned 1 [0102.793] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\messages.json", lpFilePart=0x0) returned 0x8f [0102.793] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0102.793] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0102.795] GetFileType (hFile=0x444) returned 0x1 [0102.795] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0102.795] GetFileType (hFile=0x444) returned 0x1 [0102.795] WriteFile (in: hFile=0x444, lpBuffer=0x21ef158*, nNumberOfBytesToWrite=0x140, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x21ef158*, lpNumberOfBytesWritten=0x3be388*=0x140, lpOverlapped=0x0) returned 1 [0102.796] CloseHandle (hObject=0x444) returned 1 [0102.796] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\messages.json", lpFilePart=0x0) returned 0x8f [0102.796] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0102.796] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0102.796] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77dcbfb0, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x77dcbed8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x291f67b1, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x140)) returned 1 [0102.796] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0102.796] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\messages.json.xuy")) returned 1 [0102.797] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0102.797] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg", lpFilePart=0x0) returned 0x81 [0102.798] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\", lpFilePart=0x0) returned 0x82 [0102.798] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d79d0 [0102.798] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0102.798] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0102.798] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0102.798] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0102.798] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0102.798] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0102.798] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0102.798] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg", lpFilePart=0x0) returned 0x81 [0102.799] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\", lpFilePart=0x0) returned 0x82 [0102.799] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d79d0 [0102.799] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0102.799] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0102.799] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0102.799] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0102.799] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0102.799] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0102.799] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\messages.json", lpFilePart=0x0) returned 0x8f [0102.799] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0102.799] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x21f32b0 | out: lpFileInformation=0x21f32b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77dc4a7e, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x77dc49a8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x782bf24d, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x124)) returned 1 [0102.801] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0102.801] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\messages.json", lpFilePart=0x0) returned 0x8f [0102.801] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0102.801] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0102.801] GetFileType (hFile=0x444) returned 0x1 [0102.801] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0102.801] GetFileType (hFile=0x444) returned 0x1 [0102.801] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x124 [0102.802] ReadFile (in: hFile=0x444, lpBuffer=0x21f37a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x21f37a0*, lpNumberOfBytesRead=0x3be478*=0x124, lpOverlapped=0x0) returned 1 [0102.802] CloseHandle (hObject=0x444) returned 1 [0102.813] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\messages.json", lpFilePart=0x0) returned 0x8f [0102.813] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0102.813] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0102.815] GetFileType (hFile=0x444) returned 0x1 [0102.815] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0102.815] GetFileType (hFile=0x444) returned 0x1 [0102.815] WriteFile (in: hFile=0x444, lpBuffer=0x226ae00*, nNumberOfBytesToWrite=0x130, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x226ae00*, lpNumberOfBytesWritten=0x3be388*=0x130, lpOverlapped=0x0) returned 1 [0102.816] CloseHandle (hObject=0x444) returned 1 [0102.816] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\messages.json", lpFilePart=0x0) returned 0x8f [0102.816] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0102.817] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0102.817] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77dc4a7e, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x77dc49a8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2921ca2a, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x130)) returned 1 [0102.817] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0102.817] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\messages.json.xuy")) returned 1 [0102.818] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0102.818] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca", lpFilePart=0x0) returned 0x81 [0102.818] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\", lpFilePart=0x0) returned 0x82 [0102.818] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7e50 [0102.821] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0102.822] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0102.822] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0102.822] FindClose (in: hFindFile=0x5d7e50 | out: hFindFile=0x5d7e50) returned 1 [0102.822] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0102.822] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0102.822] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0102.822] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca", lpFilePart=0x0) returned 0x81 [0102.822] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\", lpFilePart=0x0) returned 0x82 [0102.822] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7670 [0102.822] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0102.822] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0102.823] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0102.823] FindClose (in: hFindFile=0x5d7670 | out: hFindFile=0x5d7670) returned 1 [0102.823] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0102.823] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0102.823] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\messages.json", lpFilePart=0x0) returned 0x8f [0102.823] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0102.823] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x226ef58 | out: lpFileInformation=0x226ef58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77cb5a64, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x77cb59b8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x782c1976, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xfe)) returned 1 [0102.825] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0102.825] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\messages.json", lpFilePart=0x0) returned 0x8f [0102.825] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0102.825] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0102.825] GetFileType (hFile=0x444) returned 0x1 [0102.825] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0102.825] GetFileType (hFile=0x444) returned 0x1 [0102.825] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xfe [0102.825] ReadFile (in: hFile=0x444, lpBuffer=0x226f420, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x226f420*, lpNumberOfBytesRead=0x3be478*=0xfe, lpOverlapped=0x0) returned 1 [0102.827] CloseHandle (hObject=0x444) returned 1 [0102.837] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\messages.json", lpFilePart=0x0) returned 0x8f [0102.837] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0102.837] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0102.839] GetFileType (hFile=0x444) returned 0x1 [0102.839] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0102.839] GetFileType (hFile=0x444) returned 0x1 [0102.839] WriteFile (in: hFile=0x444, lpBuffer=0x22e67a0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x22e67a0*, lpNumberOfBytesWritten=0x3be388*=0x100, lpOverlapped=0x0) returned 1 [0102.840] CloseHandle (hObject=0x444) returned 1 [0102.840] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\messages.json", lpFilePart=0x0) returned 0x8f [0102.840] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0102.840] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0102.840] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77cb5a64, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x77cb59b8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x29242b4c, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x100)) returned 1 [0102.840] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0102.840] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\messages.json.xuy")) returned 1 [0102.842] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0102.842] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs", lpFilePart=0x0) returned 0x81 [0102.842] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\", lpFilePart=0x0) returned 0x82 [0102.842] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d81b0 [0102.843] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0102.843] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0102.844] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0102.844] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0102.844] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0102.844] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0102.844] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0102.844] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs", lpFilePart=0x0) returned 0x81 [0102.844] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\", lpFilePart=0x0) returned 0x82 [0102.844] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d79d0 [0102.844] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0102.844] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0102.845] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0102.845] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0102.845] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0102.845] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0102.845] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\messages.json", lpFilePart=0x0) returned 0x8f [0102.845] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0102.845] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x22ea8f8 | out: lpFileInformation=0x22ea8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77c602ef, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x77c62998, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x782c1976, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xf9)) returned 1 [0102.846] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0102.846] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\messages.json", lpFilePart=0x0) returned 0x8f [0102.846] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0102.846] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0102.846] GetFileType (hFile=0x444) returned 0x1 [0102.846] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0102.846] GetFileType (hFile=0x444) returned 0x1 [0102.846] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xf9 [0102.846] ReadFile (in: hFile=0x444, lpBuffer=0x22eadc0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x22eadc0*, lpNumberOfBytesRead=0x3be478*=0xf9, lpOverlapped=0x0) returned 1 [0102.847] CloseHandle (hObject=0x444) returned 1 [0102.885] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\messages.json", lpFilePart=0x0) returned 0x8f [0102.885] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0102.885] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0102.887] GetFileType (hFile=0x444) returned 0x1 [0102.887] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0102.887] GetFileType (hFile=0x444) returned 0x1 [0102.887] WriteFile (in: hFile=0x444, lpBuffer=0x2164b48*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x2164b48*, lpNumberOfBytesWritten=0x3be388*=0x100, lpOverlapped=0x0) returned 1 [0102.887] CloseHandle (hObject=0x444) returned 1 [0102.888] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\messages.json", lpFilePart=0x0) returned 0x8f [0102.888] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0102.888] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0102.888] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77c602ef, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x77c62998, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x292b52e8, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x100)) returned 1 [0102.888] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0102.888] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\messages.json.xuy")) returned 1 [0102.889] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0102.889] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da", lpFilePart=0x0) returned 0x81 [0102.889] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\", lpFilePart=0x0) returned 0x82 [0102.889] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d78b0 [0102.891] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0102.891] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0102.891] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0102.891] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0102.891] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0102.891] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0102.891] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0102.891] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da", lpFilePart=0x0) returned 0x81 [0102.891] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\", lpFilePart=0x0) returned 0x82 [0102.892] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7cd0 [0102.892] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0102.892] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0102.892] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0102.892] FindClose (in: hFindFile=0x5d7cd0 | out: hFindFile=0x5d7cd0) returned 1 [0102.892] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0102.892] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0102.892] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\messages.json", lpFilePart=0x0) returned 0x8f [0102.892] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0102.892] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x2168ca0 | out: lpFileInformation=0x2168ca0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77db6015, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x77db8658, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x782c1976, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xec)) returned 1 [0102.893] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0102.893] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\messages.json", lpFilePart=0x0) returned 0x8f [0102.893] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0102.893] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0102.893] GetFileType (hFile=0x444) returned 0x1 [0102.893] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0102.893] GetFileType (hFile=0x444) returned 0x1 [0102.893] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xec [0102.893] ReadFile (in: hFile=0x444, lpBuffer=0x2169158, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x2169158*, lpNumberOfBytesRead=0x3be478*=0xec, lpOverlapped=0x0) returned 1 [0102.894] CloseHandle (hObject=0x444) returned 1 [0102.907] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\messages.json", lpFilePart=0x0) returned 0x8f [0102.907] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0102.907] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0102.909] GetFileType (hFile=0x444) returned 0x1 [0102.909] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0102.909] GetFileType (hFile=0x444) returned 0x1 [0102.909] WriteFile (in: hFile=0x444, lpBuffer=0x21e04b8*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x21e04b8*, lpNumberOfBytesWritten=0x3be388*=0xf0, lpOverlapped=0x0) returned 1 [0102.910] CloseHandle (hObject=0x444) returned 1 [0102.910] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\messages.json", lpFilePart=0x0) returned 0x8f [0102.910] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0102.910] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0102.910] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77db6015, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x77db8658, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x29301b64, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xf0)) returned 1 [0102.910] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0102.910] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\messages.json.xuy")) returned 1 [0102.911] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0102.911] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de", lpFilePart=0x0) returned 0x81 [0102.911] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\", lpFilePart=0x0) returned 0x82 [0102.911] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7df0 [0102.913] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0102.913] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0102.913] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0102.913] FindClose (in: hFindFile=0x5d7df0 | out: hFindFile=0x5d7df0) returned 1 [0102.913] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0102.913] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0102.913] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0102.913] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de", lpFilePart=0x0) returned 0x81 [0102.913] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\", lpFilePart=0x0) returned 0x82 [0102.913] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7370 [0102.913] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0102.914] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0102.914] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0102.914] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0102.914] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0102.914] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0102.914] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\messages.json", lpFilePart=0x0) returned 0x8f [0102.914] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0102.914] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x21e4610 | out: lpFileInformation=0x21e4610*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77ca6fe8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x77ca6f58, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x782c1976, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xef)) returned 1 [0102.914] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0102.914] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\messages.json", lpFilePart=0x0) returned 0x8f [0102.914] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0102.914] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0102.914] GetFileType (hFile=0x444) returned 0x1 [0102.914] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0102.914] GetFileType (hFile=0x444) returned 0x1 [0102.914] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xef [0102.914] ReadFile (in: hFile=0x444, lpBuffer=0x21e4ac8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x21e4ac8*, lpNumberOfBytesRead=0x3be478*=0xef, lpOverlapped=0x0) returned 1 [0102.915] CloseHandle (hObject=0x444) returned 1 [0102.927] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\messages.json", lpFilePart=0x0) returned 0x8f [0102.927] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0102.927] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0102.928] GetFileType (hFile=0x444) returned 0x1 [0102.929] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0102.929] GetFileType (hFile=0x444) returned 0x1 [0102.929] WriteFile (in: hFile=0x444, lpBuffer=0x225be28*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x225be28*, lpNumberOfBytesWritten=0x3be388*=0xf0, lpOverlapped=0x0) returned 1 [0102.929] CloseHandle (hObject=0x444) returned 1 [0102.929] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\messages.json", lpFilePart=0x0) returned 0x8f [0102.930] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0102.930] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0102.930] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77ca6fe8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x77ca6f58, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x29327a51, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xf0)) returned 1 [0102.930] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0102.930] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\messages.json.xuy")) returned 1 [0102.931] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0102.931] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el", lpFilePart=0x0) returned 0x81 [0102.931] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\", lpFilePart=0x0) returned 0x82 [0102.931] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d78b0 [0102.932] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0102.933] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0102.933] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0102.933] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0102.933] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0102.933] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0102.933] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0102.933] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el", lpFilePart=0x0) returned 0x81 [0102.933] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\", lpFilePart=0x0) returned 0x82 [0102.933] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d79d0 [0102.933] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0102.933] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0102.933] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0102.934] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0102.934] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0102.934] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0102.934] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\messages.json", lpFilePart=0x0) returned 0x8f [0102.934] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0102.934] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x225ff80 | out: lpFileInformation=0x225ff80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77cfa018, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x77cfc688, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x782c1976, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x14c)) returned 1 [0102.935] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0102.936] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\messages.json", lpFilePart=0x0) returned 0x8f [0102.936] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0102.936] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0102.936] GetFileType (hFile=0x444) returned 0x1 [0102.936] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0102.936] GetFileType (hFile=0x444) returned 0x1 [0102.936] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x14c [0102.936] ReadFile (in: hFile=0x444, lpBuffer=0x2260498, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x2260498*, lpNumberOfBytesRead=0x3be478*=0x14c, lpOverlapped=0x0) returned 1 [0102.937] CloseHandle (hObject=0x444) returned 1 [0102.947] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\messages.json", lpFilePart=0x0) returned 0x8f [0102.947] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0102.947] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0102.948] GetFileType (hFile=0x444) returned 0x1 [0102.948] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0102.948] GetFileType (hFile=0x444) returned 0x1 [0102.948] WriteFile (in: hFile=0x444, lpBuffer=0x22d7b90*, nNumberOfBytesToWrite=0x150, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x22d7b90*, lpNumberOfBytesWritten=0x3be388*=0x150, lpOverlapped=0x0) returned 1 [0102.949] CloseHandle (hObject=0x444) returned 1 [0102.949] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\messages.json", lpFilePart=0x0) returned 0x8f [0102.950] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0102.950] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0102.950] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77cfa018, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x77cfc688, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2934db37, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x150)) returned 1 [0102.950] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0102.950] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\messages.json.xuy")) returned 1 [0102.965] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0102.965] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en", lpFilePart=0x0) returned 0x81 [0102.965] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\", lpFilePart=0x0) returned 0x82 [0102.965] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7eb0 [0102.966] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0102.966] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0102.966] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0102.966] FindClose (in: hFindFile=0x5d7eb0 | out: hFindFile=0x5d7eb0) returned 1 [0102.967] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0102.967] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0102.967] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0102.967] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en", lpFilePart=0x0) returned 0x81 [0102.967] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\", lpFilePart=0x0) returned 0x82 [0102.967] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d8090 [0102.967] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0102.967] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0102.967] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0102.967] FindClose (in: hFindFile=0x5d8090 | out: hFindFile=0x5d8090) returned 1 [0102.967] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0102.967] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0102.967] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\messages.json", lpFilePart=0x0) returned 0x8f [0102.967] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0102.968] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x22dbce8 | out: lpFileInformation=0x22dbce8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77da9cc4, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x77db1128, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x782c4085, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xd7)) returned 1 [0102.968] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0102.968] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\messages.json", lpFilePart=0x0) returned 0x8f [0102.968] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0102.968] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0102.968] GetFileType (hFile=0x444) returned 0x1 [0102.968] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0102.968] GetFileType (hFile=0x444) returned 0x1 [0102.968] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xd7 [0102.968] ReadFile (in: hFile=0x444, lpBuffer=0x22dc188, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x22dc188*, lpNumberOfBytesRead=0x3be478*=0xd7, lpOverlapped=0x0) returned 1 [0102.969] CloseHandle (hObject=0x444) returned 1 [0102.981] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\messages.json", lpFilePart=0x0) returned 0x8f [0102.981] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0102.981] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0102.984] GetFileType (hFile=0x444) returned 0x1 [0102.984] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0102.984] GetFileType (hFile=0x444) returned 0x1 [0102.984] WriteFile (in: hFile=0x444, lpBuffer=0x23534d0*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x23534d0*, lpNumberOfBytesWritten=0x3be388*=0xe0, lpOverlapped=0x0) returned 1 [0102.985] CloseHandle (hObject=0x444) returned 1 [0102.985] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\messages.json", lpFilePart=0x0) returned 0x8f [0102.985] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0102.986] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0102.986] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77da9cc4, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x77db1128, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x293c0376, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1 [0102.986] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0102.986] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\messages.json.xuy")) returned 1 [0102.987] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0102.987] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es", lpFilePart=0x0) returned 0x81 [0102.987] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\", lpFilePart=0x0) returned 0x82 [0102.987] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7eb0 [0102.987] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0102.988] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0102.988] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0102.988] FindClose (in: hFindFile=0x5d7eb0 | out: hFindFile=0x5d7eb0) returned 1 [0102.988] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0102.988] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0102.988] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0102.988] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es", lpFilePart=0x0) returned 0x81 [0102.988] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\", lpFilePart=0x0) returned 0x82 [0102.988] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7c70 [0102.988] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0102.989] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0102.989] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0102.989] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0102.989] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0102.989] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0102.989] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\messages.json", lpFilePart=0x0) returned 0x8f [0102.989] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0102.989] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x2357628 | out: lpFileInformation=0x2357628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77c6ed69, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x77c713f8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x782c4085, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x10d)) returned 1 [0102.989] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0102.989] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\messages.json", lpFilePart=0x0) returned 0x8f [0102.989] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0102.989] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0102.990] GetFileType (hFile=0x444) returned 0x1 [0102.990] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0102.990] GetFileType (hFile=0x444) returned 0x1 [0102.990] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x10d [0102.990] ReadFile (in: hFile=0x444, lpBuffer=0x2357b00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x2357b00*, lpNumberOfBytesRead=0x3be478*=0x10d, lpOverlapped=0x0) returned 1 [0102.991] CloseHandle (hObject=0x444) returned 1 [0103.047] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\messages.json", lpFilePart=0x0) returned 0x8f [0103.047] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0103.047] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0103.049] GetFileType (hFile=0x444) returned 0x1 [0103.049] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0103.049] GetFileType (hFile=0x444) returned 0x1 [0103.049] WriteFile (in: hFile=0x444, lpBuffer=0x21cf0c8*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x21cf0c8*, lpNumberOfBytesWritten=0x3be388*=0x110, lpOverlapped=0x0) returned 1 [0103.050] CloseHandle (hObject=0x444) returned 1 [0103.050] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\messages.json", lpFilePart=0x0) returned 0x8f [0103.051] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0103.051] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0103.051] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77c6ed69, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x77c713f8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x29458e59, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x110)) returned 1 [0103.051] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0103.051] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\messages.json.xuy")) returned 1 [0103.052] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0103.052] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi", lpFilePart=0x0) returned 0x81 [0103.052] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\", lpFilePart=0x0) returned 0x82 [0103.053] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7610 [0103.055] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0103.055] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0103.055] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0103.055] FindClose (in: hFindFile=0x5d7610 | out: hFindFile=0x5d7610) returned 1 [0103.055] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0103.056] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0103.056] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0103.056] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi", lpFilePart=0x0) returned 0x81 [0103.056] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\", lpFilePart=0x0) returned 0x82 [0103.056] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d79d0 [0103.056] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0103.056] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0103.056] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0103.057] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0103.057] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0103.057] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0103.057] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\messages.json", lpFilePart=0x0) returned 0x8f [0103.057] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0103.057] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x21d3220 | out: lpFileInformation=0x21d3220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77ce678c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x77ce8e08, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x782c4085, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x100)) returned 1 [0103.057] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0103.057] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\messages.json", lpFilePart=0x0) returned 0x8f [0103.057] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0103.057] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0103.057] GetFileType (hFile=0x444) returned 0x1 [0103.057] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0103.057] GetFileType (hFile=0x444) returned 0x1 [0103.058] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x100 [0103.058] ReadFile (in: hFile=0x444, lpBuffer=0x21d36e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x21d36e8*, lpNumberOfBytesRead=0x3be478*=0x100, lpOverlapped=0x0) returned 1 [0103.059] CloseHandle (hObject=0x444) returned 1 [0103.075] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\messages.json", lpFilePart=0x0) returned 0x8f [0103.075] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0103.075] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0103.078] GetFileType (hFile=0x444) returned 0x1 [0103.078] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0103.078] GetFileType (hFile=0x444) returned 0x1 [0103.078] WriteFile (in: hFile=0x444, lpBuffer=0x224aca8*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x224aca8*, lpNumberOfBytesWritten=0x3be388*=0x110, lpOverlapped=0x0) returned 1 [0103.079] CloseHandle (hObject=0x444) returned 1 [0103.079] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\messages.json", lpFilePart=0x0) returned 0x8f [0103.079] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0103.079] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0103.079] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77ce678c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x77ce8e08, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x294a51e8, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x110)) returned 1 [0103.079] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0103.080] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\messages.json.xuy")) returned 1 [0103.081] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0103.081] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil", lpFilePart=0x0) returned 0x82 [0103.081] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\", lpFilePart=0x0) returned 0x83 [0103.081] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7c70 [0103.083] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0103.083] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0103.083] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0103.083] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0103.083] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0103.083] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0103.084] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0103.084] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil", lpFilePart=0x0) returned 0x82 [0103.084] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\", lpFilePart=0x0) returned 0x83 [0103.084] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7fd0 [0103.084] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0103.084] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0103.084] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0103.085] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0103.085] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0103.085] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0103.085] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\messages.json", lpFilePart=0x0) returned 0x90 [0103.085] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0103.085] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x224ee90 | out: lpFileInformation=0x224ee90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77d4340d, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x77d43358, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x782c6798, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xea)) returned 1 [0103.088] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0103.089] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\messages.json", lpFilePart=0x0) returned 0x90 [0103.089] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0103.089] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0103.089] GetFileType (hFile=0x444) returned 0x1 [0103.089] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0103.089] GetFileType (hFile=0x444) returned 0x1 [0103.089] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xea [0103.089] ReadFile (in: hFile=0x444, lpBuffer=0x224f358, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x224f358*, lpNumberOfBytesRead=0x3be478*=0xea, lpOverlapped=0x0) returned 1 [0103.090] CloseHandle (hObject=0x444) returned 1 [0103.109] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\messages.json", lpFilePart=0x0) returned 0x90 [0103.109] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0103.109] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0103.111] GetFileType (hFile=0x444) returned 0x1 [0103.111] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0103.111] GetFileType (hFile=0x444) returned 0x1 [0103.112] WriteFile (in: hFile=0x444, lpBuffer=0x22c66c0*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x22c66c0*, lpNumberOfBytesWritten=0x3be388*=0xf0, lpOverlapped=0x0) returned 1 [0103.113] CloseHandle (hObject=0x444) returned 1 [0103.113] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\messages.json", lpFilePart=0x0) returned 0x90 [0103.113] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\messages.json.xuy", lpFilePart=0x0) returned 0x94 [0103.113] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0103.113] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77d4340d, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x77d43358, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x294f1699, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xf0)) returned 1 [0103.113] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0103.113] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\messages.json.xuy")) returned 1 [0103.115] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0103.115] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr", lpFilePart=0x0) returned 0x81 [0103.115] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\", lpFilePart=0x0) returned 0x82 [0103.115] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7a90 [0103.115] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0103.115] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0103.116] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0103.116] FindClose (in: hFindFile=0x5d7a90 | out: hFindFile=0x5d7a90) returned 1 [0103.116] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0103.116] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0103.116] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0103.116] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr", lpFilePart=0x0) returned 0x81 [0103.116] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\", lpFilePart=0x0) returned 0x82 [0103.116] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d81b0 [0103.116] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0103.116] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0103.116] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0103.117] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0103.117] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0103.117] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0103.117] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\messages.json", lpFilePart=0x0) returned 0x8f [0103.117] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0103.117] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x22ca830 | out: lpFileInformation=0x22ca830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77cbcf7d, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x77cbcee8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x782c6798, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x10c)) returned 1 [0103.118] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0103.118] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\messages.json", lpFilePart=0x0) returned 0x8f [0103.118] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0103.118] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0103.118] GetFileType (hFile=0x444) returned 0x1 [0103.118] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0103.119] GetFileType (hFile=0x444) returned 0x1 [0103.119] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x10c [0103.119] ReadFile (in: hFile=0x444, lpBuffer=0x22cad08, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x22cad08*, lpNumberOfBytesRead=0x3be478*=0x10c, lpOverlapped=0x0) returned 1 [0103.119] CloseHandle (hObject=0x444) returned 1 [0103.131] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\messages.json", lpFilePart=0x0) returned 0x8f [0103.131] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0103.131] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0103.132] GetFileType (hFile=0x444) returned 0x1 [0103.132] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0103.132] GetFileType (hFile=0x444) returned 0x1 [0103.132] WriteFile (in: hFile=0x444, lpBuffer=0x23422c0*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x23422c0*, lpNumberOfBytesWritten=0x3be388*=0x110, lpOverlapped=0x0) returned 1 [0103.133] CloseHandle (hObject=0x444) returned 1 [0103.133] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\messages.json", lpFilePart=0x0) returned 0x8f [0103.134] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0103.134] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0103.134] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77cbcf7d, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x77cbcee8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2951784e, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x110)) returned 1 [0103.134] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0103.134] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\messages.json.xuy")) returned 1 [0103.135] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0103.135] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi", lpFilePart=0x0) returned 0x81 [0103.135] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\", lpFilePart=0x0) returned 0x82 [0103.135] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7a30 [0103.135] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0103.135] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0103.135] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0103.136] FindClose (in: hFindFile=0x5d7a30 | out: hFindFile=0x5d7a30) returned 1 [0103.136] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0103.136] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0103.136] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0103.136] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi", lpFilePart=0x0) returned 0x81 [0103.136] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\", lpFilePart=0x0) returned 0x82 [0103.136] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d81b0 [0103.136] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0103.136] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0103.136] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0103.136] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0103.137] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0103.137] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0103.137] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\messages.json", lpFilePart=0x0) returned 0x8f [0103.137] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0103.137] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x2346418 | out: lpFileInformation=0x2346418*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77c5b4e3, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x77c5b468, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x782c6798, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x121)) returned 1 [0103.139] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0103.139] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\messages.json", lpFilePart=0x0) returned 0x8f [0103.139] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0103.139] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0103.139] GetFileType (hFile=0x444) returned 0x1 [0103.139] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0103.139] GetFileType (hFile=0x444) returned 0x1 [0103.139] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x121 [0103.139] ReadFile (in: hFile=0x444, lpBuffer=0x2346908, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x2346908*, lpNumberOfBytesRead=0x3be478*=0x121, lpOverlapped=0x0) returned 1 [0103.140] CloseHandle (hObject=0x444) returned 1 [0103.182] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\messages.json", lpFilePart=0x0) returned 0x8f [0103.182] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0103.183] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0103.184] GetFileType (hFile=0x444) returned 0x1 [0103.184] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0103.184] GetFileType (hFile=0x444) returned 0x1 [0103.184] WriteFile (in: hFile=0x444, lpBuffer=0x21bdf48*, nNumberOfBytesToWrite=0x130, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x21bdf48*, lpNumberOfBytesWritten=0x3be388*=0x130, lpOverlapped=0x0) returned 1 [0103.185] CloseHandle (hObject=0x444) returned 1 [0103.185] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\messages.json", lpFilePart=0x0) returned 0x8f [0103.185] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0103.186] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0103.186] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77c5b4e3, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x77c5b468, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x29589fca, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x130)) returned 1 [0103.186] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0103.186] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\messages.json.xuy")) returned 1 [0103.187] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0103.187] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr", lpFilePart=0x0) returned 0x81 [0103.187] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\", lpFilePart=0x0) returned 0x82 [0103.187] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d78b0 [0103.187] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0103.187] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0103.187] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0103.187] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0103.187] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0103.187] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0103.187] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0103.188] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr", lpFilePart=0x0) returned 0x81 [0103.188] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\", lpFilePart=0x0) returned 0x82 [0103.188] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d81b0 [0103.188] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0103.188] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0103.188] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0103.188] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0103.188] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0103.188] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0103.188] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\messages.json", lpFilePart=0x0) returned 0x8f [0103.188] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0103.188] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x21c20a0 | out: lpFileInformation=0x21c20a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77cf51f9, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x77cf5158, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x782c6798, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xe6)) returned 1 [0103.189] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0103.189] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\messages.json", lpFilePart=0x0) returned 0x8f [0103.189] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0103.189] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0103.189] GetFileType (hFile=0x444) returned 0x1 [0103.189] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0103.189] GetFileType (hFile=0x444) returned 0x1 [0103.189] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xe6 [0103.189] ReadFile (in: hFile=0x444, lpBuffer=0x21c2550, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x21c2550*, lpNumberOfBytesRead=0x3be478*=0xe6, lpOverlapped=0x0) returned 1 [0103.190] CloseHandle (hObject=0x444) returned 1 [0103.203] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\messages.json", lpFilePart=0x0) returned 0x8f [0103.203] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0103.203] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0103.205] GetFileType (hFile=0x444) returned 0x1 [0103.205] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0103.205] GetFileType (hFile=0x444) returned 0x1 [0103.205] WriteFile (in: hFile=0x444, lpBuffer=0x22398b8*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x22398b8*, lpNumberOfBytesWritten=0x3be388*=0xf0, lpOverlapped=0x0) returned 1 [0103.206] CloseHandle (hObject=0x444) returned 1 [0103.206] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\messages.json", lpFilePart=0x0) returned 0x8f [0103.206] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0103.206] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0103.206] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77cf51f9, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x77cf5158, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x295d6928, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xf0)) returned 1 [0103.206] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0103.206] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\messages.json.xuy")) returned 1 [0103.207] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0103.207] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu", lpFilePart=0x0) returned 0x81 [0103.207] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\", lpFilePart=0x0) returned 0x82 [0103.207] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7cd0 [0103.208] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0103.208] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0103.208] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0103.208] FindClose (in: hFindFile=0x5d7cd0 | out: hFindFile=0x5d7cd0) returned 1 [0103.208] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0103.208] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0103.208] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0103.208] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu", lpFilePart=0x0) returned 0x81 [0103.208] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\", lpFilePart=0x0) returned 0x82 [0103.208] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7550 [0103.208] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0103.209] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0103.209] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0103.209] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0103.209] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0103.209] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0103.209] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\messages.json", lpFilePart=0x0) returned 0x8f [0103.209] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0103.209] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x223da10 | out: lpFileInformation=0x223da10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77c67831, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x77c69ec8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x782c8ea5, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xe2)) returned 1 [0103.209] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0103.209] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\messages.json", lpFilePart=0x0) returned 0x8f [0103.209] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0103.209] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0103.210] GetFileType (hFile=0x444) returned 0x1 [0103.210] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0103.210] GetFileType (hFile=0x444) returned 0x1 [0103.210] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xe2 [0103.210] ReadFile (in: hFile=0x444, lpBuffer=0x223dec0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x223dec0*, lpNumberOfBytesRead=0x3be478*=0xe2, lpOverlapped=0x0) returned 1 [0103.211] CloseHandle (hObject=0x444) returned 1 [0103.221] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\messages.json", lpFilePart=0x0) returned 0x8f [0103.221] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0103.222] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0103.223] GetFileType (hFile=0x444) returned 0x1 [0103.223] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0103.223] GetFileType (hFile=0x444) returned 0x1 [0103.223] WriteFile (in: hFile=0x444, lpBuffer=0x22b5228*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x22b5228*, lpNumberOfBytesWritten=0x3be388*=0xf0, lpOverlapped=0x0) returned 1 [0103.224] CloseHandle (hObject=0x444) returned 1 [0103.224] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\messages.json", lpFilePart=0x0) returned 0x8f [0103.224] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0103.224] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0103.224] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77c67831, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x77c69ec8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x295fc6dc, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xf0)) returned 1 [0103.224] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0103.224] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\messages.json.xuy")) returned 1 [0103.225] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0103.226] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id", lpFilePart=0x0) returned 0x81 [0103.226] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\", lpFilePart=0x0) returned 0x82 [0103.226] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d81b0 [0103.226] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0103.226] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0103.226] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0103.226] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0103.226] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0103.226] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0103.226] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0103.226] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id", lpFilePart=0x0) returned 0x81 [0103.226] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\", lpFilePart=0x0) returned 0x82 [0103.226] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7d30 [0103.227] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0103.227] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0103.227] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0103.227] FindClose (in: hFindFile=0x5d7d30 | out: hFindFile=0x5d7d30) returned 1 [0103.227] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0103.227] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0103.227] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\messages.json", lpFilePart=0x0) returned 0x8f [0103.227] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0103.227] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x22b9380 | out: lpFileInformation=0x22b9380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77dd0de5, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x77dd3408, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x782c8ea5, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xf2)) returned 1 [0103.227] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0103.227] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\messages.json", lpFilePart=0x0) returned 0x8f [0103.228] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0103.228] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0103.228] GetFileType (hFile=0x444) returned 0x1 [0103.228] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0103.228] GetFileType (hFile=0x444) returned 0x1 [0103.228] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xf2 [0103.228] ReadFile (in: hFile=0x444, lpBuffer=0x22b9840, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x22b9840*, lpNumberOfBytesRead=0x3be478*=0xf2, lpOverlapped=0x0) returned 1 [0103.231] CloseHandle (hObject=0x444) returned 1 [0103.243] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\messages.json", lpFilePart=0x0) returned 0x8f [0103.243] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0103.243] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0103.244] GetFileType (hFile=0x444) returned 0x1 [0103.244] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0103.244] GetFileType (hFile=0x444) returned 0x1 [0103.244] WriteFile (in: hFile=0x444, lpBuffer=0x2330bc8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x2330bc8*, lpNumberOfBytesWritten=0x3be388*=0x100, lpOverlapped=0x0) returned 1 [0103.245] CloseHandle (hObject=0x444) returned 1 [0103.245] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\messages.json", lpFilePart=0x0) returned 0x8f [0103.245] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0103.245] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0103.245] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77dd0de5, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x77dd3408, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2962285f, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x100)) returned 1 [0103.245] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0103.245] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\messages.json.xuy")) returned 1 [0103.246] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0103.246] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it", lpFilePart=0x0) returned 0x81 [0103.246] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\", lpFilePart=0x0) returned 0x82 [0103.246] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d78b0 [0103.247] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0103.247] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0103.247] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0103.247] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0103.247] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0103.247] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0103.247] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0103.247] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it", lpFilePart=0x0) returned 0x81 [0103.247] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\", lpFilePart=0x0) returned 0x82 [0103.247] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d73d0 [0103.248] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0103.248] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0103.248] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0103.248] FindClose (in: hFindFile=0x5d73d0 | out: hFindFile=0x5d73d0) returned 1 [0103.249] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0103.249] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0103.249] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\messages.json", lpFilePart=0x0) returned 0x8f [0103.249] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0103.249] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x2334d20 | out: lpFileInformation=0x2334d20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77de4652, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x77de4578, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x782c8ea5, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x100)) returned 1 [0103.249] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0103.249] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\messages.json", lpFilePart=0x0) returned 0x8f [0103.249] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0103.249] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0103.249] GetFileType (hFile=0x444) returned 0x1 [0103.249] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0103.249] GetFileType (hFile=0x444) returned 0x1 [0103.249] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x100 [0103.249] ReadFile (in: hFile=0x444, lpBuffer=0x23351e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x23351e8*, lpNumberOfBytesRead=0x3be478*=0x100, lpOverlapped=0x0) returned 1 [0103.250] CloseHandle (hObject=0x444) returned 1 [0103.558] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\messages.json", lpFilePart=0x0) returned 0x8f [0103.558] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0103.558] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0103.560] GetFileType (hFile=0x444) returned 0x1 [0103.560] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0103.560] GetFileType (hFile=0x444) returned 0x1 [0103.560] WriteFile (in: hFile=0x444, lpBuffer=0x21ac770*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x21ac770*, lpNumberOfBytesWritten=0x3be388*=0x110, lpOverlapped=0x0) returned 1 [0103.561] CloseHandle (hObject=0x444) returned 1 [0103.561] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\messages.json", lpFilePart=0x0) returned 0x8f [0103.561] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0103.561] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0103.561] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77de4652, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x77de4578, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x29922fd2, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x110)) returned 1 [0103.561] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0103.561] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\messages.json.xuy")) returned 1 [0103.562] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0103.562] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja", lpFilePart=0x0) returned 0x81 [0103.562] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\", lpFilePart=0x0) returned 0x82 [0103.562] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d81b0 [0103.563] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0103.563] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0103.563] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0103.563] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0103.563] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0103.563] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0103.563] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0103.563] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja", lpFilePart=0x0) returned 0x81 [0103.563] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\", lpFilePart=0x0) returned 0x82 [0103.563] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d79d0 [0103.564] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0103.564] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0103.564] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0103.564] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0103.564] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0103.564] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0103.564] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\messages.json", lpFilePart=0x0) returned 0x8f [0103.564] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0103.564] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x21b08c8 | out: lpFileInformation=0x21b08c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77dbd54d, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x77dbfb88, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x782c8ea5, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x10f)) returned 1 [0103.565] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0103.565] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\messages.json", lpFilePart=0x0) returned 0x8f [0103.565] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0103.565] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0103.565] GetFileType (hFile=0x444) returned 0x1 [0103.565] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0103.565] GetFileType (hFile=0x444) returned 0x1 [0103.565] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x10f [0103.565] ReadFile (in: hFile=0x444, lpBuffer=0x21b0da0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x21b0da0*, lpNumberOfBytesRead=0x3be478*=0x10f, lpOverlapped=0x0) returned 1 [0103.590] CloseHandle (hObject=0x444) returned 1 [0103.606] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\messages.json", lpFilePart=0x0) returned 0x8f [0103.606] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0103.606] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0103.607] GetFileType (hFile=0x444) returned 0x1 [0103.607] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0103.607] GetFileType (hFile=0x444) returned 0x1 [0103.607] WriteFile (in: hFile=0x444, lpBuffer=0x2228358*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x2228358*, lpNumberOfBytesWritten=0x3be388*=0x110, lpOverlapped=0x0) returned 1 [0103.608] CloseHandle (hObject=0x444) returned 1 [0103.608] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\messages.json", lpFilePart=0x0) returned 0x8f [0103.608] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0103.608] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0103.608] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77dbd54d, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x77dbfb88, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2999570e, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x110)) returned 1 [0103.609] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0103.609] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\messages.json.xuy")) returned 1 [0103.610] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0103.610] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko", lpFilePart=0x0) returned 0x81 [0103.610] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\", lpFilePart=0x0) returned 0x82 [0103.610] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7eb0 [0103.611] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0103.611] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0103.611] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0103.611] FindClose (in: hFindFile=0x5d7eb0 | out: hFindFile=0x5d7eb0) returned 1 [0103.611] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0103.611] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0103.611] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0103.611] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko", lpFilePart=0x0) returned 0x81 [0103.611] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\", lpFilePart=0x0) returned 0x82 [0103.611] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d79d0 [0103.611] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0103.611] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0103.612] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0103.612] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0103.612] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0103.612] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0103.612] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\messages.json", lpFilePart=0x0) returned 0x8f [0103.612] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0103.612] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x222c4b0 | out: lpFileInformation=0x222c4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77d1c305, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x77d1e968, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x782c8ea5, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x100)) returned 1 [0103.614] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0103.614] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\messages.json", lpFilePart=0x0) returned 0x8f [0103.614] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0103.614] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0103.615] GetFileType (hFile=0x444) returned 0x1 [0103.615] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0103.615] GetFileType (hFile=0x444) returned 0x1 [0103.615] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x100 [0103.615] ReadFile (in: hFile=0x444, lpBuffer=0x222c978, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x222c978*, lpNumberOfBytesRead=0x3be478*=0x100, lpOverlapped=0x0) returned 1 [0103.615] CloseHandle (hObject=0x444) returned 1 [0103.632] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\messages.json", lpFilePart=0x0) returned 0x8f [0103.632] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0103.632] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0103.633] GetFileType (hFile=0x444) returned 0x1 [0103.633] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0103.633] GetFileType (hFile=0x444) returned 0x1 [0103.633] WriteFile (in: hFile=0x444, lpBuffer=0x22a3f38*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x22a3f38*, lpNumberOfBytesWritten=0x3be388*=0x110, lpOverlapped=0x0) returned 1 [0103.634] CloseHandle (hObject=0x444) returned 1 [0103.634] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\messages.json", lpFilePart=0x0) returned 0x8f [0103.634] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0103.634] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0103.634] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77d1c305, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x77d1e968, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x299e1df5, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x110)) returned 1 [0103.634] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0103.634] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\messages.json.xuy")) returned 1 [0103.635] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0103.635] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt", lpFilePart=0x0) returned 0x81 [0103.635] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\", lpFilePart=0x0) returned 0x82 [0103.635] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d78b0 [0103.640] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0103.640] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0103.640] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0103.641] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0103.641] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0103.641] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0103.641] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0103.641] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt", lpFilePart=0x0) returned 0x81 [0103.641] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\", lpFilePart=0x0) returned 0x82 [0103.641] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7fd0 [0103.641] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0103.641] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0103.642] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0103.642] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0103.642] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0103.642] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0103.642] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\messages.json", lpFilePart=0x0) returned 0x8f [0103.642] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0103.642] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x22a8090 | out: lpFileInformation=0x22a8090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77d3bed2, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x77d3be28, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x782c8ea5, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xfd)) returned 1 [0103.642] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0103.642] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\messages.json", lpFilePart=0x0) returned 0x8f [0103.642] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0103.642] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0103.643] GetFileType (hFile=0x444) returned 0x1 [0103.643] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0103.643] GetFileType (hFile=0x444) returned 0x1 [0103.643] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xfd [0103.643] ReadFile (in: hFile=0x444, lpBuffer=0x22a8558, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x22a8558*, lpNumberOfBytesRead=0x3be478*=0xfd, lpOverlapped=0x0) returned 1 [0103.646] CloseHandle (hObject=0x444) returned 1 [0103.659] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\messages.json", lpFilePart=0x0) returned 0x8f [0103.659] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0103.659] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0103.661] GetFileType (hFile=0x444) returned 0x1 [0103.661] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0103.661] GetFileType (hFile=0x444) returned 0x1 [0103.661] WriteFile (in: hFile=0x444, lpBuffer=0x231f8d8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x231f8d8*, lpNumberOfBytesWritten=0x3be388*=0x100, lpOverlapped=0x0) returned 1 [0103.662] CloseHandle (hObject=0x444) returned 1 [0103.662] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\messages.json", lpFilePart=0x0) returned 0x8f [0103.662] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0103.662] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0103.662] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77d3bed2, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x77d3be28, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x29a2de93, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x100)) returned 1 [0103.662] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0103.662] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\messages.json.xuy")) returned 1 [0103.664] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0103.664] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv", lpFilePart=0x0) returned 0x81 [0103.664] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\", lpFilePart=0x0) returned 0x82 [0103.664] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d79d0 [0103.664] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0103.664] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0103.664] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0103.664] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0103.665] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0103.665] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0103.665] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0103.665] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv", lpFilePart=0x0) returned 0x81 [0103.665] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\", lpFilePart=0x0) returned 0x82 [0103.665] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d79d0 [0103.665] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0103.665] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0103.665] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0103.665] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0103.666] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0103.666] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0103.666] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\messages.json", lpFilePart=0x0) returned 0x8f [0103.666] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0103.666] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x2323a30 | out: lpFileInformation=0x2323a30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77d2ad68, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x77d2acb8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x782cb5d0, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xee)) returned 1 [0103.666] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0103.666] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\messages.json", lpFilePart=0x0) returned 0x8f [0103.666] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0103.666] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0103.666] GetFileType (hFile=0x444) returned 0x1 [0103.666] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0103.666] GetFileType (hFile=0x444) returned 0x1 [0103.666] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xee [0103.666] ReadFile (in: hFile=0x444, lpBuffer=0x2323ee8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x2323ee8*, lpNumberOfBytesRead=0x3be478*=0xee, lpOverlapped=0x0) returned 1 [0103.667] CloseHandle (hObject=0x444) returned 1 [0103.724] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\messages.json", lpFilePart=0x0) returned 0x8f [0103.724] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0103.724] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0103.726] GetFileType (hFile=0x444) returned 0x1 [0103.726] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0103.726] GetFileType (hFile=0x444) returned 0x1 [0103.726] WriteFile (in: hFile=0x444, lpBuffer=0x219b230*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x219b230*, lpNumberOfBytesWritten=0x3be388*=0xf0, lpOverlapped=0x0) returned 1 [0103.727] CloseHandle (hObject=0x444) returned 1 [0103.727] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\messages.json", lpFilePart=0x0) returned 0x8f [0103.727] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0103.727] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0103.727] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77d2ad68, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x77d2acb8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x29ac68ff, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xf0)) returned 1 [0103.727] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0103.727] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\messages.json.xuy")) returned 1 [0103.728] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0103.728] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl", lpFilePart=0x0) returned 0x81 [0103.728] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\", lpFilePart=0x0) returned 0x82 [0103.728] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7670 [0103.729] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0103.729] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0103.729] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0103.729] FindClose (in: hFindFile=0x5d7670 | out: hFindFile=0x5d7670) returned 1 [0103.729] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0103.729] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0103.729] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0103.729] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl", lpFilePart=0x0) returned 0x81 [0103.729] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\", lpFilePart=0x0) returned 0x82 [0103.729] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d78b0 [0103.730] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0103.730] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0103.730] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0103.730] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0103.730] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0103.730] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0103.730] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\messages.json", lpFilePart=0x0) returned 0x8f [0103.730] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0103.730] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x219f388 | out: lpFileInformation=0x219f388*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77c98571, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x77c9ac08, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x782cb5d0, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xe8)) returned 1 [0103.730] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0103.730] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\messages.json", lpFilePart=0x0) returned 0x8f [0103.730] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0103.730] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0103.731] GetFileType (hFile=0x444) returned 0x1 [0103.731] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0103.731] GetFileType (hFile=0x444) returned 0x1 [0103.731] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xe8 [0103.731] ReadFile (in: hFile=0x444, lpBuffer=0x219f838, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x219f838*, lpNumberOfBytesRead=0x3be478*=0xe8, lpOverlapped=0x0) returned 1 [0103.732] CloseHandle (hObject=0x444) returned 1 [0103.742] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\messages.json", lpFilePart=0x0) returned 0x8f [0103.742] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0103.742] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0103.744] GetFileType (hFile=0x444) returned 0x1 [0103.744] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0103.744] GetFileType (hFile=0x444) returned 0x1 [0103.744] WriteFile (in: hFile=0x444, lpBuffer=0x2216b98*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x2216b98*, lpNumberOfBytesWritten=0x3be388*=0xf0, lpOverlapped=0x0) returned 1 [0103.745] CloseHandle (hObject=0x444) returned 1 [0103.745] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\messages.json", lpFilePart=0x0) returned 0x8f [0103.745] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0103.745] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0103.745] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77c98571, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x77c9ac08, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x29aecacb, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xf0)) returned 1 [0103.745] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0103.745] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\messages.json.xuy")) returned 1 [0103.746] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0103.746] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no", lpFilePart=0x0) returned 0x81 [0103.746] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\", lpFilePart=0x0) returned 0x82 [0103.746] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d79d0 [0103.746] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0103.747] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0103.747] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0103.747] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0103.747] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0103.747] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0103.747] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0103.747] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no", lpFilePart=0x0) returned 0x81 [0103.747] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\", lpFilePart=0x0) returned 0x82 [0103.747] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d73d0 [0103.747] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0103.747] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0103.747] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0103.748] FindClose (in: hFindFile=0x5d73d0 | out: hFindFile=0x5d73d0) returned 1 [0103.748] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0103.748] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0103.748] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\messages.json", lpFilePart=0x0) returned 0x8f [0103.748] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0103.748] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x221acf0 | out: lpFileInformation=0x221acf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77d23830, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x77d23788, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x656b8f00, ftLastWriteTime.dwHighDateTime=0x1cccade, nFileSizeHigh=0x0, nFileSizeLow=0xd2)) returned 1 [0103.748] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0103.748] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\messages.json", lpFilePart=0x0) returned 0x8f [0103.748] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0103.748] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0103.748] GetFileType (hFile=0x444) returned 0x1 [0103.748] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0103.748] GetFileType (hFile=0x444) returned 0x1 [0103.748] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xd2 [0103.748] ReadFile (in: hFile=0x444, lpBuffer=0x221b190, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x221b190*, lpNumberOfBytesRead=0x3be478*=0xd2, lpOverlapped=0x0) returned 1 [0103.749] CloseHandle (hObject=0x444) returned 1 [0103.761] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\messages.json", lpFilePart=0x0) returned 0x8f [0103.761] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0103.761] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0103.763] GetFileType (hFile=0x444) returned 0x1 [0103.763] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0103.763] GetFileType (hFile=0x444) returned 0x1 [0103.763] WriteFile (in: hFile=0x444, lpBuffer=0x22924d8*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x22924d8*, lpNumberOfBytesWritten=0x3be388*=0xe0, lpOverlapped=0x0) returned 1 [0103.764] CloseHandle (hObject=0x444) returned 1 [0103.764] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\messages.json", lpFilePart=0x0) returned 0x8f [0103.764] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0103.764] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0103.764] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77d23830, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x77d23788, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x29b12e13, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1 [0103.764] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0103.764] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\messages.json.xuy")) returned 1 [0103.767] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0103.767] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl", lpFilePart=0x0) returned 0x81 [0103.767] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\", lpFilePart=0x0) returned 0x82 [0103.767] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7cd0 [0103.767] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0103.767] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0103.767] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0103.767] FindClose (in: hFindFile=0x5d7cd0 | out: hFindFile=0x5d7cd0) returned 1 [0103.768] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0103.768] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0103.768] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0103.768] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl", lpFilePart=0x0) returned 0x81 [0103.768] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\", lpFilePart=0x0) returned 0x82 [0103.768] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7e50 [0103.768] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0103.768] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0103.768] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0103.768] FindClose (in: hFindFile=0x5d7e50 | out: hFindFile=0x5d7e50) returned 1 [0103.768] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0103.768] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0103.768] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\messages.json", lpFilePart=0x0) returned 0x8f [0103.768] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0103.768] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x2296630 | out: lpFileInformation=0x2296630*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77d322b0, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x77d321e8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x782cb5d0, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x108)) returned 1 [0103.769] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0103.769] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\messages.json", lpFilePart=0x0) returned 0x8f [0103.769] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0103.769] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0103.769] GetFileType (hFile=0x444) returned 0x1 [0103.769] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0103.769] GetFileType (hFile=0x444) returned 0x1 [0103.769] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x108 [0103.769] ReadFile (in: hFile=0x444, lpBuffer=0x2296b00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x2296b00*, lpNumberOfBytesRead=0x3be478*=0x108, lpOverlapped=0x0) returned 1 [0103.770] CloseHandle (hObject=0x444) returned 1 [0103.780] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\messages.json", lpFilePart=0x0) returned 0x8f [0103.780] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0103.780] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0103.783] GetFileType (hFile=0x444) returned 0x1 [0103.783] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0103.783] GetFileType (hFile=0x444) returned 0x1 [0103.783] WriteFile (in: hFile=0x444, lpBuffer=0x230e0b8*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x230e0b8*, lpNumberOfBytesWritten=0x3be388*=0x110, lpOverlapped=0x0) returned 1 [0103.784] CloseHandle (hObject=0x444) returned 1 [0103.784] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\messages.json", lpFilePart=0x0) returned 0x8f [0103.784] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0103.784] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0103.784] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77d322b0, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x77d321e8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x29b5f153, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x110)) returned 1 [0103.784] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0103.784] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\messages.json.xuy")) returned 1 [0103.785] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0103.785] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR", lpFilePart=0x0) returned 0x84 [0103.785] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR\\", lpFilePart=0x0) returned 0x85 [0103.785] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7370 [0103.785] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0103.786] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0103.786] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0103.786] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0103.786] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0103.786] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0103.786] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0103.786] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR", lpFilePart=0x0) returned 0x84 [0103.786] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR\\", lpFilePart=0x0) returned 0x85 [0103.786] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7670 [0103.786] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0103.786] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0103.787] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0103.787] FindClose (in: hFindFile=0x5d7670 | out: hFindFile=0x5d7670) returned 1 [0103.787] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0103.787] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0103.787] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR\\messages.json", lpFilePart=0x0) returned 0x92 [0103.787] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0103.787] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_br\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x23122e0 | out: lpFileInformation=0x23122e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77d56c90, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x77d592e8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x782cb5d0, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xde)) returned 1 [0103.787] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0103.787] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR\\messages.json", lpFilePart=0x0) returned 0x92 [0103.788] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0103.788] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_br\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0103.788] GetFileType (hFile=0x444) returned 0x1 [0103.788] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0103.788] GetFileType (hFile=0x444) returned 0x1 [0103.788] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xde [0103.788] ReadFile (in: hFile=0x444, lpBuffer=0x2312798, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x2312798*, lpNumberOfBytesRead=0x3be478*=0xde, lpOverlapped=0x0) returned 1 [0103.789] CloseHandle (hObject=0x444) returned 1 [0103.837] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR\\messages.json", lpFilePart=0x0) returned 0x92 [0103.838] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0103.838] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_br\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0103.839] GetFileType (hFile=0x444) returned 0x1 [0103.839] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0103.839] GetFileType (hFile=0x444) returned 0x1 [0103.839] WriteFile (in: hFile=0x444, lpBuffer=0x2189ad0*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x2189ad0*, lpNumberOfBytesWritten=0x3be388*=0xe0, lpOverlapped=0x0) returned 1 [0103.840] CloseHandle (hObject=0x444) returned 1 [0103.840] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR\\messages.json", lpFilePart=0x0) returned 0x92 [0103.840] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR\\messages.json.xuy", lpFilePart=0x0) returned 0x96 [0103.840] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0103.840] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_br\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77d56c90, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x77d592e8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x29bd19b3, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1 [0103.840] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0103.840] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_br\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_br\\messages.json.xuy")) returned 1 [0103.845] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0103.845] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT", lpFilePart=0x0) returned 0x84 [0103.845] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT\\", lpFilePart=0x0) returned 0x85 [0103.845] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d79d0 [0103.845] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0103.845] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0103.845] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0103.845] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0103.845] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0103.845] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0103.846] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0103.846] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT", lpFilePart=0x0) returned 0x84 [0103.846] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT\\", lpFilePart=0x0) returned 0x85 [0103.846] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7370 [0103.846] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0103.846] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0103.846] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0103.846] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0103.846] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0103.846] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0103.846] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT\\messages.json", lpFilePart=0x0) returned 0x92 [0103.846] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0103.846] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_pt\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x218dd10 | out: lpFileInformation=0x218dd10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77cc1d9c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x77cc9238, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x782cdcc7, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xdf)) returned 1 [0103.847] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0103.847] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT\\messages.json", lpFilePart=0x0) returned 0x92 [0103.847] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0103.847] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_pt\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0103.847] GetFileType (hFile=0x444) returned 0x1 [0103.847] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0103.847] GetFileType (hFile=0x444) returned 0x1 [0103.847] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xdf [0103.847] ReadFile (in: hFile=0x444, lpBuffer=0x218e1c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x218e1c8*, lpNumberOfBytesRead=0x3be478*=0xdf, lpOverlapped=0x0) returned 1 [0103.848] CloseHandle (hObject=0x444) returned 1 [0103.863] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT\\messages.json", lpFilePart=0x0) returned 0x92 [0103.863] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0103.863] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_pt\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0103.864] GetFileType (hFile=0x444) returned 0x1 [0103.864] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0103.864] GetFileType (hFile=0x444) returned 0x1 [0103.864] WriteFile (in: hFile=0x444, lpBuffer=0x2205510*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x2205510*, lpNumberOfBytesWritten=0x3be388*=0xe0, lpOverlapped=0x0) returned 1 [0103.865] CloseHandle (hObject=0x444) returned 1 [0103.865] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT\\messages.json", lpFilePart=0x0) returned 0x92 [0103.865] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT\\messages.json.xuy", lpFilePart=0x0) returned 0x96 [0103.865] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0103.865] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_pt\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77cc1d9c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x77cc9238, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x29c1e2db, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1 [0103.866] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0103.866] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_pt\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_pt\\messages.json.xuy")) returned 1 [0103.867] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0103.867] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro", lpFilePart=0x0) returned 0x81 [0103.867] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\", lpFilePart=0x0) returned 0x82 [0103.867] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d8090 [0103.867] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0103.867] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0103.868] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0103.868] FindClose (in: hFindFile=0x5d8090 | out: hFindFile=0x5d8090) returned 1 [0103.868] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0103.868] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0103.868] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0103.868] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro", lpFilePart=0x0) returned 0x81 [0103.868] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\", lpFilePart=0x0) returned 0x82 [0103.868] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7550 [0103.868] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0103.868] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0103.868] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0103.869] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0103.869] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0103.869] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0103.869] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\messages.json", lpFilePart=0x0) returned 0x8f [0103.869] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0103.869] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x2209680 | out: lpFileInformation=0x2209680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77cae510, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x77cae488, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x782cdcc7, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x109)) returned 1 [0103.869] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0103.869] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\messages.json", lpFilePart=0x0) returned 0x8f [0103.869] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0103.869] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0103.869] GetFileType (hFile=0x444) returned 0x1 [0103.869] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0103.869] GetFileType (hFile=0x444) returned 0x1 [0103.869] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x109 [0103.869] ReadFile (in: hFile=0x444, lpBuffer=0x2209b58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x2209b58*, lpNumberOfBytesRead=0x3be478*=0x109, lpOverlapped=0x0) returned 1 [0103.870] CloseHandle (hObject=0x444) returned 1 [0103.881] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\messages.json", lpFilePart=0x0) returned 0x8f [0103.882] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0103.882] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0103.883] GetFileType (hFile=0x444) returned 0x1 [0103.883] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0103.883] GetFileType (hFile=0x444) returned 0x1 [0103.883] WriteFile (in: hFile=0x444, lpBuffer=0x2281110*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x2281110*, lpNumberOfBytesWritten=0x3be388*=0x110, lpOverlapped=0x0) returned 1 [0103.884] CloseHandle (hObject=0x444) returned 1 [0103.884] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\messages.json", lpFilePart=0x0) returned 0x8f [0103.884] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0103.884] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0103.884] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77cae510, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x77cae488, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x29c43f72, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x110)) returned 1 [0103.884] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0103.884] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\messages.json.xuy")) returned 1 [0103.885] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0103.885] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru", lpFilePart=0x0) returned 0x81 [0103.886] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\", lpFilePart=0x0) returned 0x82 [0103.886] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7670 [0103.886] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0103.886] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0103.886] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0103.886] FindClose (in: hFindFile=0x5d7670 | out: hFindFile=0x5d7670) returned 1 [0103.887] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0103.887] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0103.887] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0103.887] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru", lpFilePart=0x0) returned 0x81 [0103.887] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\", lpFilePart=0x0) returned 0x82 [0103.887] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d78b0 [0103.887] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0103.887] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0103.887] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0103.887] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0103.887] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0103.887] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0103.887] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\messages.json", lpFilePart=0x0) returned 0x8f [0103.888] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0103.888] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x2285268 | out: lpFileInformation=0x2285268*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77ce196d, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x77ce18d8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x782cdcc7, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x11e)) returned 1 [0103.888] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0103.888] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\messages.json", lpFilePart=0x0) returned 0x8f [0103.888] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0103.888] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0103.888] GetFileType (hFile=0x444) returned 0x1 [0103.888] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0103.888] GetFileType (hFile=0x444) returned 0x1 [0103.888] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x11e [0103.888] ReadFile (in: hFile=0x444, lpBuffer=0x2285750, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x2285750*, lpNumberOfBytesRead=0x3be478*=0x11e, lpOverlapped=0x0) returned 1 [0103.890] CloseHandle (hObject=0x444) returned 1 [0103.905] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\messages.json", lpFilePart=0x0) returned 0x8f [0103.905] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0103.905] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0103.923] GetFileType (hFile=0x444) returned 0x1 [0103.923] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0103.923] GetFileType (hFile=0x444) returned 0x1 [0103.923] WriteFile (in: hFile=0x444, lpBuffer=0x22fcd58*, nNumberOfBytesToWrite=0x120, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x22fcd58*, lpNumberOfBytesWritten=0x3be388*=0x120, lpOverlapped=0x0) returned 1 [0103.924] CloseHandle (hObject=0x444) returned 1 [0103.925] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\messages.json", lpFilePart=0x0) returned 0x8f [0103.925] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0103.925] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0103.925] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77ce196d, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x77ce18d8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x29cb6dc0, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x120)) returned 1 [0103.925] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0103.925] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\messages.json.xuy")) returned 1 [0103.926] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0103.926] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se", lpFilePart=0x0) returned 0x81 [0103.926] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\", lpFilePart=0x0) returned 0x82 [0103.926] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d78b0 [0103.927] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0103.927] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0103.927] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0103.927] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0103.927] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0103.927] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0103.927] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0103.927] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se", lpFilePart=0x0) returned 0x81 [0103.927] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\", lpFilePart=0x0) returned 0x82 [0103.928] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7370 [0103.928] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0103.928] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0103.928] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0103.928] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0103.928] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0103.928] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0103.929] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\messages.json", lpFilePart=0x0) returned 0x8f [0103.929] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0103.929] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x2300eb0 | out: lpFileInformation=0x2300eb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77cd7d32, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x77cd7c98, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x656b8f00, ftLastWriteTime.dwHighDateTime=0x1cccade, nFileSizeHigh=0x0, nFileSizeLow=0xd2)) returned 1 [0103.929] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0103.929] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\messages.json", lpFilePart=0x0) returned 0x8f [0103.929] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0103.929] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0103.929] GetFileType (hFile=0x444) returned 0x1 [0103.929] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0103.929] GetFileType (hFile=0x444) returned 0x1 [0103.929] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xd2 [0103.929] ReadFile (in: hFile=0x444, lpBuffer=0x2301350, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x2301350*, lpNumberOfBytesRead=0x3be478*=0xd2, lpOverlapped=0x0) returned 1 [0103.930] CloseHandle (hObject=0x444) returned 1 [0103.995] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\messages.json", lpFilePart=0x0) returned 0x8f [0103.995] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0103.995] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0103.996] GetFileType (hFile=0x444) returned 0x1 [0103.996] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0103.996] GetFileType (hFile=0x444) returned 0x1 [0103.996] WriteFile (in: hFile=0x444, lpBuffer=0x21786a8*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x21786a8*, lpNumberOfBytesWritten=0x3be388*=0xe0, lpOverlapped=0x0) returned 1 [0103.997] CloseHandle (hObject=0x444) returned 1 [0103.997] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\messages.json", lpFilePart=0x0) returned 0x8f [0103.998] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0103.998] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0103.998] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77cd7d32, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x77cd7c98, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x29d4efe0, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1 [0103.998] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0103.998] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\messages.json.xuy")) returned 1 [0103.999] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0103.999] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk", lpFilePart=0x0) returned 0x81 [0103.999] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\", lpFilePart=0x0) returned 0x82 [0103.999] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7550 [0104.000] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0104.000] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0104.000] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0104.000] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0104.000] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0104.000] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0104.000] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0104.001] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk", lpFilePart=0x0) returned 0x81 [0104.001] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\", lpFilePart=0x0) returned 0x82 [0104.001] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d78b0 [0104.001] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0104.001] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0104.001] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0104.001] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0104.001] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0104.002] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0104.002] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\messages.json", lpFilePart=0x0) returned 0x8f [0104.002] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0104.002] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x217c800 | out: lpFileInformation=0x217c800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77d126c3, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x77d17438, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x782cdcc7, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xde)) returned 1 [0104.002] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0104.002] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\messages.json", lpFilePart=0x0) returned 0x8f [0104.002] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0104.002] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0104.002] GetFileType (hFile=0x444) returned 0x1 [0104.002] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0104.002] GetFileType (hFile=0x444) returned 0x1 [0104.002] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xde [0104.002] ReadFile (in: hFile=0x444, lpBuffer=0x217cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x217cca8*, lpNumberOfBytesRead=0x3be478*=0xde, lpOverlapped=0x0) returned 1 [0104.003] CloseHandle (hObject=0x444) returned 1 [0104.018] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\messages.json", lpFilePart=0x0) returned 0x8f [0104.018] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0104.019] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0104.020] GetFileType (hFile=0x444) returned 0x1 [0104.020] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0104.020] GetFileType (hFile=0x444) returned 0x1 [0104.020] WriteFile (in: hFile=0x444, lpBuffer=0x21f3fe8*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x21f3fe8*, lpNumberOfBytesWritten=0x3be388*=0xe0, lpOverlapped=0x0) returned 1 [0104.021] CloseHandle (hObject=0x444) returned 1 [0104.021] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\messages.json", lpFilePart=0x0) returned 0x8f [0104.021] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0104.021] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0104.021] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77d126c3, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x77d17438, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x29d9ba8d, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1 [0104.021] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0104.021] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\messages.json.xuy")) returned 1 [0104.022] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0104.022] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl", lpFilePart=0x0) returned 0x81 [0104.022] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\", lpFilePart=0x0) returned 0x82 [0104.023] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7c70 [0104.023] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0104.023] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0104.023] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0104.023] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0104.023] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0104.023] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0104.023] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0104.024] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl", lpFilePart=0x0) returned 0x81 [0104.024] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\", lpFilePart=0x0) returned 0x82 [0104.024] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7a30 [0104.024] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0104.024] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0104.024] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0104.024] FindClose (in: hFindFile=0x5d7a30 | out: hFindFile=0x5d7a30) returned 1 [0104.024] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0104.024] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0104.024] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\messages.json", lpFilePart=0x0) returned 0x8f [0104.024] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0104.025] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x21f8140 | out: lpFileInformation=0x21f8140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77c91052, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x77c936d8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x782cdcc7, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xea)) returned 1 [0104.025] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0104.025] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\messages.json", lpFilePart=0x0) returned 0x8f [0104.025] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0104.025] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0104.025] GetFileType (hFile=0x444) returned 0x1 [0104.025] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0104.025] GetFileType (hFile=0x444) returned 0x1 [0104.025] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xea [0104.025] ReadFile (in: hFile=0x444, lpBuffer=0x21f85f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x21f85f8*, lpNumberOfBytesRead=0x3be478*=0xea, lpOverlapped=0x0) returned 1 [0104.029] CloseHandle (hObject=0x444) returned 1 [0104.040] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\messages.json", lpFilePart=0x0) returned 0x8f [0104.040] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0104.040] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0104.042] GetFileType (hFile=0x444) returned 0x1 [0104.042] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0104.042] GetFileType (hFile=0x444) returned 0x1 [0104.042] WriteFile (in: hFile=0x444, lpBuffer=0x226f958*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x226f958*, lpNumberOfBytesWritten=0x3be388*=0xf0, lpOverlapped=0x0) returned 1 [0104.043] CloseHandle (hObject=0x444) returned 1 [0104.043] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\messages.json", lpFilePart=0x0) returned 0x8f [0104.043] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0104.043] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0104.043] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77c91052, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x77c936d8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x29dc416a, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xf0)) returned 1 [0104.044] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0104.044] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\messages.json.xuy")) returned 1 [0104.045] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0104.045] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr", lpFilePart=0x0) returned 0x81 [0104.045] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\", lpFilePart=0x0) returned 0x82 [0104.045] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7610 [0104.045] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0104.045] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0104.045] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0104.045] FindClose (in: hFindFile=0x5d7610 | out: hFindFile=0x5d7610) returned 1 [0104.045] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0104.045] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0104.045] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0104.046] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr", lpFilePart=0x0) returned 0x81 [0104.046] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\", lpFilePart=0x0) returned 0x82 [0104.046] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d79d0 [0104.046] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0104.046] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0104.046] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0104.046] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0104.046] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0104.046] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0104.046] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\messages.json", lpFilePart=0x0) returned 0x8f [0104.046] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0104.046] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x2273ab0 | out: lpFileInformation=0x2273ab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77da2792, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x77da4dd8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x782d03d6, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x127)) returned 1 [0104.047] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0104.047] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\messages.json", lpFilePart=0x0) returned 0x8f [0104.047] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0104.047] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0104.048] GetFileType (hFile=0x444) returned 0x1 [0104.048] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0104.048] GetFileType (hFile=0x444) returned 0x1 [0104.048] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x127 [0104.048] ReadFile (in: hFile=0x444, lpBuffer=0x2273fa0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x2273fa0*, lpNumberOfBytesRead=0x3be478*=0x127, lpOverlapped=0x0) returned 1 [0104.049] CloseHandle (hObject=0x444) returned 1 [0104.061] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\messages.json", lpFilePart=0x0) returned 0x8f [0104.061] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0104.061] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0104.071] GetFileType (hFile=0x444) returned 0x1 [0104.071] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0104.071] GetFileType (hFile=0x444) returned 0x1 [0104.071] WriteFile (in: hFile=0x444, lpBuffer=0x22eb600*, nNumberOfBytesToWrite=0x130, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x22eb600*, lpNumberOfBytesWritten=0x3be388*=0x130, lpOverlapped=0x0) returned 1 [0104.072] CloseHandle (hObject=0x444) returned 1 [0104.072] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\messages.json", lpFilePart=0x0) returned 0x8f [0104.072] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0104.072] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0104.072] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77da2792, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x77da4dd8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x29e0e4fb, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x130)) returned 1 [0104.072] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0104.072] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\messages.json.xuy")) returned 1 [0104.073] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0104.073] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th", lpFilePart=0x0) returned 0x81 [0104.073] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\", lpFilePart=0x0) returned 0x82 [0104.074] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d75b0 [0104.074] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0104.074] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0104.074] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0104.074] FindClose (in: hFindFile=0x5d75b0 | out: hFindFile=0x5d75b0) returned 1 [0104.074] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0104.074] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0104.074] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0104.074] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th", lpFilePart=0x0) returned 0x81 [0104.074] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\", lpFilePart=0x0) returned 0x82 [0104.075] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d81b0 [0104.075] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0104.075] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0104.075] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0104.075] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0104.075] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0104.075] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0104.075] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\messages.json", lpFilePart=0x0) returned 0x8f [0104.075] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0104.075] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x22ef758 | out: lpFileInformation=0x22ef758*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77ddd127, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x77ddd048, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x782d03d6, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x144)) returned 1 [0104.076] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0104.076] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\messages.json", lpFilePart=0x0) returned 0x8f [0104.076] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0104.076] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0104.076] GetFileType (hFile=0x444) returned 0x1 [0104.076] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0104.076] GetFileType (hFile=0x444) returned 0x1 [0104.076] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x144 [0104.076] ReadFile (in: hFile=0x444, lpBuffer=0x22efc68, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x22efc68*, lpNumberOfBytesRead=0x3be478*=0x144, lpOverlapped=0x0) returned 1 [0104.077] CloseHandle (hObject=0x444) returned 1 [0104.140] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\messages.json", lpFilePart=0x0) returned 0x8f [0104.140] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0104.140] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0104.142] GetFileType (hFile=0x444) returned 0x1 [0104.142] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0104.142] GetFileType (hFile=0x444) returned 0x1 [0104.142] WriteFile (in: hFile=0x444, lpBuffer=0x21673c0*, nNumberOfBytesToWrite=0x150, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x21673c0*, lpNumberOfBytesWritten=0x3be388*=0x150, lpOverlapped=0x0) returned 1 [0104.143] CloseHandle (hObject=0x444) returned 1 [0104.143] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\messages.json", lpFilePart=0x0) returned 0x8f [0104.143] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0104.143] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0104.143] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77ddd127, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x77ddd048, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x29ecc780, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x150)) returned 1 [0104.143] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0104.143] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\messages.json.xuy")) returned 1 [0104.144] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0104.145] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr", lpFilePart=0x0) returned 0x81 [0104.145] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\", lpFilePart=0x0) returned 0x82 [0104.145] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7370 [0104.145] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0104.145] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0104.145] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0104.145] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0104.145] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0104.145] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0104.145] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0104.145] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr", lpFilePart=0x0) returned 0x81 [0104.146] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\", lpFilePart=0x0) returned 0x82 [0104.146] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7df0 [0104.146] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0104.146] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0104.146] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0104.146] FindClose (in: hFindFile=0x5d7df0 | out: hFindFile=0x5d7df0) returned 1 [0104.146] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0104.146] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0104.146] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\messages.json", lpFilePart=0x0) returned 0x8f [0104.146] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0104.146] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x216b518 | out: lpFileInformation=0x216b518*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77c4ca7f, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x77c4ca08, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x782d03d6, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xea)) returned 1 [0104.147] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0104.147] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\messages.json", lpFilePart=0x0) returned 0x8f [0104.147] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0104.147] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0104.147] GetFileType (hFile=0x444) returned 0x1 [0104.147] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0104.147] GetFileType (hFile=0x444) returned 0x1 [0104.147] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xea [0104.147] ReadFile (in: hFile=0x444, lpBuffer=0x216b9d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x216b9d0*, lpNumberOfBytesRead=0x3be478*=0xea, lpOverlapped=0x0) returned 1 [0104.148] CloseHandle (hObject=0x444) returned 1 [0104.246] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\messages.json", lpFilePart=0x0) returned 0x8f [0104.246] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0104.246] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0104.248] GetFileType (hFile=0x444) returned 0x1 [0104.248] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0104.248] GetFileType (hFile=0x444) returned 0x1 [0104.248] WriteFile (in: hFile=0x444, lpBuffer=0x21e2d30*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x21e2d30*, lpNumberOfBytesWritten=0x3be388*=0xf0, lpOverlapped=0x0) returned 1 [0104.249] CloseHandle (hObject=0x444) returned 1 [0104.249] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\messages.json", lpFilePart=0x0) returned 0x8f [0104.249] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0104.249] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0104.249] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77c4ca7f, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x77c4ca08, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x29fb15d1, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xf0)) returned 1 [0104.249] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0104.249] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\messages.json.xuy")) returned 1 [0104.252] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0104.252] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk", lpFilePart=0x0) returned 0x81 [0104.252] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\", lpFilePart=0x0) returned 0x82 [0104.252] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d8090 [0104.252] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0104.252] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0104.253] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0104.253] FindClose (in: hFindFile=0x5d8090 | out: hFindFile=0x5d8090) returned 1 [0104.253] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0104.253] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0104.253] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0104.253] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk", lpFilePart=0x0) returned 0x81 [0104.253] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\", lpFilePart=0x0) returned 0x82 [0104.253] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d79d0 [0104.253] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0104.253] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0104.253] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0104.254] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0104.254] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0104.254] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0104.254] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\messages.json", lpFilePart=0x0) returned 0x8f [0104.254] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0104.254] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x21e6e88 | out: lpFileInformation=0x21e6e88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77cd0800, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x77cd2e78, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x782d03d6, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x130)) returned 1 [0104.254] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0104.254] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\messages.json", lpFilePart=0x0) returned 0x8f [0104.254] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0104.254] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0104.254] GetFileType (hFile=0x444) returned 0x1 [0104.254] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0104.254] GetFileType (hFile=0x444) returned 0x1 [0104.254] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x130 [0104.255] ReadFile (in: hFile=0x444, lpBuffer=0x21e7380, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x21e7380*, lpNumberOfBytesRead=0x3be478*=0x130, lpOverlapped=0x0) returned 1 [0104.255] CloseHandle (hObject=0x444) returned 1 [0104.267] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\messages.json", lpFilePart=0x0) returned 0x8f [0104.267] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0104.267] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0104.269] GetFileType (hFile=0x444) returned 0x1 [0104.269] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0104.269] GetFileType (hFile=0x444) returned 0x1 [0104.269] WriteFile (in: hFile=0x444, lpBuffer=0x225ea30*, nNumberOfBytesToWrite=0x140, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x225ea30*, lpNumberOfBytesWritten=0x3be388*=0x140, lpOverlapped=0x0) returned 1 [0104.270] CloseHandle (hObject=0x444) returned 1 [0104.270] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\messages.json", lpFilePart=0x0) returned 0x8f [0104.270] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0104.270] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0104.270] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77cd0800, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x77cd2e78, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x29ffda7f, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x140)) returned 1 [0104.270] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0104.270] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\messages.json.xuy")) returned 1 [0104.271] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0104.271] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi", lpFilePart=0x0) returned 0x81 [0104.272] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\", lpFilePart=0x0) returned 0x82 [0104.272] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d81b0 [0104.272] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0104.272] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0104.272] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0104.272] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0104.272] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0104.272] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0104.272] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0104.272] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi", lpFilePart=0x0) returned 0x81 [0104.272] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\", lpFilePart=0x0) returned 0x82 [0104.273] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7eb0 [0104.273] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0104.273] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0104.273] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0104.273] FindClose (in: hFindFile=0x5d7eb0 | out: hFindFile=0x5d7eb0) returned 1 [0104.273] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0104.273] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0104.273] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\messages.json", lpFilePart=0x0) returned 0x8f [0104.273] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0104.273] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x2262b88 | out: lpFileInformation=0x2262b88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77d51e71, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x77d51db8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x782d03d6, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xe8)) returned 1 [0104.273] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0104.274] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\messages.json", lpFilePart=0x0) returned 0x8f [0104.274] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0104.274] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0104.274] GetFileType (hFile=0x444) returned 0x1 [0104.274] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0104.274] GetFileType (hFile=0x444) returned 0x1 [0104.274] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xe8 [0104.274] ReadFile (in: hFile=0x444, lpBuffer=0x2263038, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x2263038*, lpNumberOfBytesRead=0x3be478*=0xe8, lpOverlapped=0x0) returned 1 [0104.302] CloseHandle (hObject=0x444) returned 1 [0104.312] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\messages.json", lpFilePart=0x0) returned 0x8f [0104.312] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0104.312] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0104.314] GetFileType (hFile=0x444) returned 0x1 [0104.314] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0104.314] GetFileType (hFile=0x444) returned 0x1 [0104.315] WriteFile (in: hFile=0x444, lpBuffer=0x22da398*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x22da398*, lpNumberOfBytesWritten=0x3be388*=0xf0, lpOverlapped=0x0) returned 1 [0104.316] CloseHandle (hObject=0x444) returned 1 [0104.316] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\messages.json", lpFilePart=0x0) returned 0x8f [0104.316] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\messages.json.xuy", lpFilePart=0x0) returned 0x93 [0104.316] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0104.316] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77d51e71, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x77d51db8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2a072bce, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xf0)) returned 1 [0104.316] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0104.316] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\messages.json.xuy")) returned 1 [0104.317] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0104.317] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN", lpFilePart=0x0) returned 0x84 [0104.317] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN\\", lpFilePart=0x0) returned 0x85 [0104.317] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7550 [0104.318] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0104.318] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0104.318] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0104.318] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0104.318] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0104.318] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0104.318] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0104.318] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN", lpFilePart=0x0) returned 0x84 [0104.318] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN\\", lpFilePart=0x0) returned 0x85 [0104.318] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7610 [0104.318] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0104.319] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0104.319] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0104.319] FindClose (in: hFindFile=0x5d7610 | out: hFindFile=0x5d7610) returned 1 [0104.319] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0104.319] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0104.319] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN\\messages.json", lpFilePart=0x0) returned 0x92 [0104.319] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0104.319] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_cn\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x22de5c0 | out: lpFileInformation=0x22de5c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77d4a93f, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x77d4a888, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x782d2ae3, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x102)) returned 1 [0104.319] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0104.319] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN\\messages.json", lpFilePart=0x0) returned 0x92 [0104.319] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0104.320] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_cn\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0104.320] GetFileType (hFile=0x444) returned 0x1 [0104.320] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0104.320] GetFileType (hFile=0x444) returned 0x1 [0104.320] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x102 [0104.320] ReadFile (in: hFile=0x444, lpBuffer=0x22deaa0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x22deaa0*, lpNumberOfBytesRead=0x3be478*=0x102, lpOverlapped=0x0) returned 1 [0104.321] CloseHandle (hObject=0x444) returned 1 [0104.332] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN\\messages.json", lpFilePart=0x0) returned 0x92 [0104.332] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0104.332] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_cn\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0104.334] GetFileType (hFile=0x444) returned 0x1 [0104.334] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0104.334] GetFileType (hFile=0x444) returned 0x1 [0104.334] WriteFile (in: hFile=0x444, lpBuffer=0x2356068*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x2356068*, lpNumberOfBytesWritten=0x3be388*=0x110, lpOverlapped=0x0) returned 1 [0104.335] CloseHandle (hObject=0x444) returned 1 [0104.335] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN\\messages.json", lpFilePart=0x0) returned 0x92 [0104.335] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN\\messages.json.xuy", lpFilePart=0x0) returned 0x96 [0104.335] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0104.335] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_cn\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77d4a93f, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x77d4a888, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2a096446, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x110)) returned 1 [0104.335] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0104.335] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_cn\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_cn\\messages.json.xuy")) returned 1 [0104.336] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0104.336] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW", lpFilePart=0x0) returned 0x84 [0104.336] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW\\", lpFilePart=0x0) returned 0x85 [0104.337] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7370 [0104.337] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0104.337] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0104.337] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0104.337] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0104.337] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0104.337] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0104.337] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0104.338] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW", lpFilePart=0x0) returned 0x84 [0104.338] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW\\", lpFilePart=0x0) returned 0x85 [0104.338] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d78b0 [0104.338] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0104.338] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0104.338] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0104.338] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0104.338] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0104.338] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0104.339] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW\\messages.json", lpFilePart=0x0) returned 0x92 [0104.339] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0104.339] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_tw\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x235a2a8 | out: lpFileInformation=0x235a2a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77d9d976, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x77d9d8a8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x782d2ae3, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xf9)) returned 1 [0104.339] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0104.339] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW\\messages.json", lpFilePart=0x0) returned 0x92 [0104.339] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0104.339] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_tw\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0104.339] GetFileType (hFile=0x444) returned 0x1 [0104.339] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0104.339] GetFileType (hFile=0x444) returned 0x1 [0104.339] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0xf9 [0104.339] ReadFile (in: hFile=0x444, lpBuffer=0x235a780, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x235a780*, lpNumberOfBytesRead=0x3be478*=0xf9, lpOverlapped=0x0) returned 1 [0104.342] CloseHandle (hObject=0x444) returned 1 [0104.401] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW\\messages.json", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW\\messages.json", lpFilePart=0x0) returned 0x92 [0104.401] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0104.401] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_tw\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0104.403] GetFileType (hFile=0x444) returned 0x1 [0104.403] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0104.403] GetFileType (hFile=0x444) returned 0x1 [0104.403] WriteFile (in: hFile=0x444, lpBuffer=0x21d1ab0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x21d1ab0*, lpNumberOfBytesWritten=0x3be388*=0x100, lpOverlapped=0x0) returned 1 [0104.404] CloseHandle (hObject=0x444) returned 1 [0104.404] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW\\messages.json", lpFilePart=0x0) returned 0x92 [0104.404] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW\\messages.json.xuy", lpFilePart=0x0) returned 0x96 [0104.404] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0104.404] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_tw\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77d9d976, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x77d9d8a8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2a12f276, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x100)) returned 1 [0104.404] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0104.404] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_tw\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_tw\\messages.json.xuy")) returned 1 [0104.405] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0104.405] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata", nBufferLength=0x105, lpBuffer=0x3be0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata", lpFilePart=0x0) returned 0x7f [0104.405] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\", nBufferLength=0x105, lpBuffer=0x3be060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\", lpFilePart=0x0) returned 0x80 [0104.405] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\*", lpFindFileData=0x3be270 | out: lpFindFileData=0x3be270) returned 0x5d7c70 [0104.408] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0104.408] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0104.408] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 0 [0104.408] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0104.408] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0104.408] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0104.408] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0104.408] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata", nBufferLength=0x105, lpBuffer=0x3be0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata", lpFilePart=0x0) returned 0x7f [0104.408] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\", nBufferLength=0x105, lpBuffer=0x3be060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\", lpFilePart=0x0) returned 0x80 [0104.408] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\*", lpFindFileData=0x3be270 | out: lpFindFileData=0x3be270) returned 0x5d7550 [0104.409] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0104.409] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0104.409] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 0 [0104.409] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0104.409] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0104.409] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0104.409] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\verified_contents.json", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\verified_contents.json", lpFilePart=0x0) returned 0x96 [0104.409] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0104.409] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\verified_contents.json"), fInfoLevelId=0x0, lpFileInformation=0x21d5c50 | out: lpFileInformation=0x21d5c50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77df09ac, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x77df08c8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0xdd12c400, ftLastWriteTime.dwHighDateTime=0x1d0683e, nFileSizeHigh=0x0, nFileSizeLow=0x2686)) returned 1 [0104.410] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0104.410] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\verified_contents.json", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\verified_contents.json", lpFilePart=0x0) returned 0x96 [0104.410] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0104.410] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\verified_contents.json"), fInfoLevelId=0x0, lpFileInformation=0x21d5e48 | out: lpFileInformation=0x21d5e48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77df09ac, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x77df08c8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0xdd12c400, ftLastWriteTime.dwHighDateTime=0x1d0683e, nFileSizeHigh=0x0, nFileSizeLow=0x2686)) returned 1 [0104.410] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0104.410] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\verified_contents.json", nBufferLength=0x105, lpBuffer=0x3bdfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\verified_contents.json", lpFilePart=0x0) returned 0x96 [0104.410] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0104.410] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\verified_contents.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0104.411] GetFileType (hFile=0x444) returned 0x1 [0104.411] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be420) returned 1 [0104.411] GetFileType (hFile=0x444) returned 0x1 [0104.411] ReadFile (in: hFile=0x444, lpBuffer=0x21d8368, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be538, lpOverlapped=0x0 | out: lpBuffer=0x21d8368*, lpNumberOfBytesRead=0x3be538*=0x1000, lpOverlapped=0x0) returned 1 [0104.423] CloseHandle (hObject=0x444) returned 1 [0104.423] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\verified_contents.json", nBufferLength=0x105, lpBuffer=0x3bdfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\verified_contents.json", lpFilePart=0x0) returned 0x96 [0104.423] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0104.423] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\verified_contents.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0104.424] GetFileType (hFile=0x444) returned 0x1 [0104.424] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be420) returned 1 [0104.424] GetFileType (hFile=0x444) returned 0x1 [0104.424] WriteFile (in: hFile=0x444, lpBuffer=0x21d6020*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be5e8, lpOverlapped=0x0 | out: lpBuffer=0x21d6020*, lpNumberOfBytesWritten=0x3be5e8*=0x2000, lpOverlapped=0x0) returned 1 [0104.424] CloseHandle (hObject=0x444) returned 1 [0104.424] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\verified_contents.json", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\verified_contents.json", lpFilePart=0x0) returned 0x96 [0104.424] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\verified_contents.json.xuy", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\verified_contents.json.xuy", lpFilePart=0x0) returned 0x9a [0104.424] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0104.424] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\verified_contents.json"), fInfoLevelId=0x0, lpFileInformation=0x3be600 | out: lpFileInformation=0x3be600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77df09ac, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x77df08c8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2a17b1ea, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2686)) returned 1 [0104.424] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0104.424] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\verified_contents.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\verified_contents.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\verified_contents.json.xuy")) returned 1 [0104.426] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0104.426] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm", lpFilePart=0x0) returned 0x6f [0104.426] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\", lpFilePart=0x0) returned 0x70 [0104.426] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d7a90 [0104.426] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0104.426] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0104.426] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0104.426] FindClose (in: hFindFile=0x5d7a90 | out: hFindFile=0x5d7a90) returned 1 [0104.426] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0104.426] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0104.426] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0104.427] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm", lpFilePart=0x0) returned 0x6f [0104.427] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\", lpFilePart=0x0) returned 0x70 [0104.427] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d7eb0 [0104.427] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0104.427] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0104.427] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0104.427] FindClose (in: hFindFile=0x5d7eb0 | out: hFindFile=0x5d7eb0) returned 1 [0104.427] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0104.427] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0104.427] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0104.427] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0", nBufferLength=0x105, lpBuffer=0x3be130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0", lpFilePart=0x0) returned 0x7e [0104.427] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\", nBufferLength=0x105, lpBuffer=0x3be0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\", lpFilePart=0x0) returned 0x7f [0104.427] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\*", lpFindFileData=0x3be2e0 | out: lpFindFileData=0x3be2e0) returned 0x5d8090 [0104.431] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0104.433] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0104.433] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0104.433] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0104.433] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0104.433] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0104.433] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0104.433] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0104.433] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0104.433] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0104.434] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0104.434] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0104.434] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0104.434] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0104.434] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0104.434] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0104.434] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0104.434] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0104.434] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0104.434] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0104.435] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0104.435] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 0 [0104.435] FindClose (in: hFindFile=0x5d8090 | out: hFindFile=0x5d8090) returned 1 [0104.435] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0104.435] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0104.436] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0104.436] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0", nBufferLength=0x105, lpBuffer=0x3be130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0", lpFilePart=0x0) returned 0x7e [0104.436] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\", nBufferLength=0x105, lpBuffer=0x3be0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\", lpFilePart=0x0) returned 0x7f [0104.436] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\*", lpFindFileData=0x3be2e0 | out: lpFindFileData=0x3be2e0) returned 0x5d7d30 [0104.436] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0104.437] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0104.437] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0104.437] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0104.437] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0104.437] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0104.437] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0104.437] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0104.438] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0104.438] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0104.438] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0104.438] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0104.438] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0104.438] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0104.438] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0104.438] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0104.438] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0104.438] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0104.438] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0104.439] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0104.439] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0104.439] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 0 [0104.439] FindClose (in: hFindFile=0x5d7d30 | out: hFindFile=0x5d7d30) returned 1 [0104.439] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0104.439] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0104.440] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\angular.js", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\angular.js", lpFilePart=0x0) returned 0x89 [0104.440] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0104.440] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\angular.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\angular.js"), fInfoLevelId=0x0, lpFileInformation=0x22619e8 | out: lpFileInformation=0x22619e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7aad565d, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7aaf783a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x8c0bf)) returned 1 [0104.445] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0104.445] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\angular.js", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\angular.js", lpFilePart=0x0) returned 0x89 [0104.445] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0104.445] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\angular.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\angular.js"), fInfoLevelId=0x0, lpFileInformation=0x2261bb0 | out: lpFileInformation=0x2261bb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7aad565d, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7aaf783a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x8c0bf)) returned 1 [0104.445] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0104.445] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\angular.js", nBufferLength=0x105, lpBuffer=0x3be040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\angular.js", lpFilePart=0x0) returned 0x89 [0104.445] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0104.445] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\angular.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\angular.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0104.446] GetFileType (hFile=0x444) returned 0x1 [0104.446] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be490) returned 1 [0104.446] GetFileType (hFile=0x444) returned 0x1 [0104.446] ReadFile (in: hFile=0x444, lpBuffer=0x2264070, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5a8, lpOverlapped=0x0 | out: lpBuffer=0x2264070*, lpNumberOfBytesRead=0x3be5a8*=0x1000, lpOverlapped=0x0) returned 1 [0104.507] CloseHandle (hObject=0x444) returned 1 [0104.508] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\angular.js", nBufferLength=0x105, lpBuffer=0x3be040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\angular.js", lpFilePart=0x0) returned 0x89 [0104.508] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0104.508] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\angular.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\angular.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0104.508] GetFileType (hFile=0x444) returned 0x1 [0104.508] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be490) returned 1 [0104.508] GetFileType (hFile=0x444) returned 0x1 [0104.508] WriteFile (in: hFile=0x444, lpBuffer=0x2261d58*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be658, lpOverlapped=0x0 | out: lpBuffer=0x2261d58*, lpNumberOfBytesWritten=0x3be658*=0x2000, lpOverlapped=0x0) returned 1 [0104.508] CloseHandle (hObject=0x444) returned 1 [0104.508] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\angular.js", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\angular.js", lpFilePart=0x0) returned 0x89 [0104.508] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\angular.js.xuy", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\angular.js.xuy", lpFilePart=0x0) returned 0x8d [0104.508] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0104.508] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\angular.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\angular.js"), fInfoLevelId=0x0, lpFileInformation=0x3be670 | out: lpFileInformation=0x3be670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7aad565d, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7aaf783a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2a239d28, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x8c0bf)) returned 1 [0104.509] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0104.509] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\angular.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\angular.js"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\angular.js.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\angular.js.xuy")) returned 1 [0104.510] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\background_script.js", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\background_script.js", lpFilePart=0x0) returned 0x93 [0104.510] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0104.510] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\background_script.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\background_script.js"), fInfoLevelId=0x0, lpFileInformation=0x22e0618 | out: lpFileInformation=0x22e0618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ab01585, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7ac08f3a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0xa89c)) returned 1 [0104.510] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0104.510] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\background_script.js", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\background_script.js", lpFilePart=0x0) returned 0x93 [0104.510] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0104.510] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\background_script.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\background_script.js"), fInfoLevelId=0x0, lpFileInformation=0x22e0808 | out: lpFileInformation=0x22e0808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ab01585, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7ac08f3a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0xa89c)) returned 1 [0104.510] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0104.510] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\background_script.js", nBufferLength=0x105, lpBuffer=0x3be040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\background_script.js", lpFilePart=0x0) returned 0x93 [0104.510] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0104.510] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\background_script.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\background_script.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0104.511] GetFileType (hFile=0x444) returned 0x1 [0104.511] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be490) returned 1 [0104.511] GetFileType (hFile=0x444) returned 0x1 [0104.511] ReadFile (in: hFile=0x444, lpBuffer=0x22e2d18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5a8, lpOverlapped=0x0 | out: lpBuffer=0x22e2d18*, lpNumberOfBytesRead=0x3be5a8*=0x1000, lpOverlapped=0x0) returned 1 [0104.533] CloseHandle (hObject=0x444) returned 1 [0104.533] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\background_script.js", nBufferLength=0x105, lpBuffer=0x3be040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\background_script.js", lpFilePart=0x0) returned 0x93 [0104.533] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0104.533] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\background_script.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\background_script.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0104.533] GetFileType (hFile=0x444) returned 0x1 [0104.533] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be490) returned 1 [0104.533] GetFileType (hFile=0x444) returned 0x1 [0104.533] WriteFile (in: hFile=0x444, lpBuffer=0x22e09d8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be658, lpOverlapped=0x0 | out: lpBuffer=0x22e09d8*, lpNumberOfBytesWritten=0x3be658*=0x2000, lpOverlapped=0x0) returned 1 [0104.534] CloseHandle (hObject=0x444) returned 1 [0104.534] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\background_script.js", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\background_script.js", lpFilePart=0x0) returned 0x93 [0104.534] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\background_script.js.xuy", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\background_script.js.xuy", lpFilePart=0x0) returned 0x97 [0104.534] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0104.534] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\background_script.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\background_script.js"), fInfoLevelId=0x0, lpFileInformation=0x3be670 | out: lpFileInformation=0x3be670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ab01585, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7ac08f3a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2a286234, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xa89c)) returned 1 [0104.534] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0104.534] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\background_script.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\background_script.js"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\background_script.js.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\background_script.js.xuy")) returned 1 [0104.535] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_game_sender.js", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_game_sender.js", lpFilePart=0x0) returned 0x92 [0104.535] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0104.535] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_game_sender.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_game_sender.js"), fInfoLevelId=0x0, lpFileInformation=0x235f318 | out: lpFileInformation=0x235f318*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ac0dea6, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7ac1046a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x181aa)) returned 1 [0104.535] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0104.535] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_game_sender.js", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_game_sender.js", lpFilePart=0x0) returned 0x92 [0104.535] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0104.535] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_game_sender.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_game_sender.js"), fInfoLevelId=0x0, lpFileInformation=0x235f500 | out: lpFileInformation=0x235f500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ac0dea6, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7ac1046a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x181aa)) returned 1 [0104.535] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0104.536] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_game_sender.js", nBufferLength=0x105, lpBuffer=0x3be040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_game_sender.js", lpFilePart=0x0) returned 0x92 [0104.536] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0104.536] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_game_sender.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_game_sender.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0104.537] GetFileType (hFile=0x444) returned 0x1 [0104.537] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be490) returned 1 [0104.537] GetFileType (hFile=0x444) returned 0x1 [0104.537] ReadFile (in: hFile=0x444, lpBuffer=0x2361a00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5a8, lpOverlapped=0x0 | out: lpBuffer=0x2361a00*, lpNumberOfBytesRead=0x3be5a8*=0x1000, lpOverlapped=0x0) returned 1 [0104.585] CloseHandle (hObject=0x444) returned 1 [0104.585] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_game_sender.js", nBufferLength=0x105, lpBuffer=0x3be040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_game_sender.js", lpFilePart=0x0) returned 0x92 [0104.585] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0104.585] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_game_sender.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_game_sender.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0104.586] GetFileType (hFile=0x444) returned 0x1 [0104.586] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be490) returned 1 [0104.586] GetFileType (hFile=0x444) returned 0x1 [0104.586] WriteFile (in: hFile=0x444, lpBuffer=0x215ed40*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be658, lpOverlapped=0x0 | out: lpBuffer=0x215ed40*, lpNumberOfBytesWritten=0x3be658*=0x2000, lpOverlapped=0x0) returned 1 [0104.586] CloseHandle (hObject=0x444) returned 1 [0104.586] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_game_sender.js", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_game_sender.js", lpFilePart=0x0) returned 0x92 [0104.586] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_game_sender.js.xuy", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_game_sender.js.xuy", lpFilePart=0x0) returned 0x96 [0104.586] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0104.586] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_game_sender.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_game_sender.js"), fInfoLevelId=0x0, lpFileInformation=0x3be670 | out: lpFileInformation=0x3be670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ac0dea6, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7ac1046a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2a2f8d82, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x181aa)) returned 1 [0104.586] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0104.586] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_game_sender.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_game_sender.js"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_game_sender.js.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_game_sender.js.xuy")) returned 1 [0104.587] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.html", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.html", lpFilePart=0x0) returned 0x96 [0104.587] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0104.587] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.html" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.html"), fInfoLevelId=0x0, lpFileInformation=0x21dd510 | out: lpFileInformation=0x21dd510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ac1a1fa, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7ac1eeca, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x111e1)) returned 1 [0104.589] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0104.589] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.html", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.html", lpFilePart=0x0) returned 0x96 [0104.589] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0104.589] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.html" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.html"), fInfoLevelId=0x0, lpFileInformation=0x21dd708 | out: lpFileInformation=0x21dd708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ac1a1fa, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7ac1eeca, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x111e1)) returned 1 [0104.589] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0104.589] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.html", nBufferLength=0x105, lpBuffer=0x3be040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.html", lpFilePart=0x0) returned 0x96 [0104.589] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0104.589] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.html" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0104.590] GetFileType (hFile=0x444) returned 0x1 [0104.590] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be490) returned 1 [0104.590] GetFileType (hFile=0x444) returned 0x1 [0104.590] ReadFile (in: hFile=0x444, lpBuffer=0x21dfc28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5a8, lpOverlapped=0x0 | out: lpBuffer=0x21dfc28*, lpNumberOfBytesRead=0x3be5a8*=0x1000, lpOverlapped=0x0) returned 1 [0104.617] CloseHandle (hObject=0x444) returned 1 [0104.618] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.html", nBufferLength=0x105, lpBuffer=0x3be040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.html", lpFilePart=0x0) returned 0x96 [0104.618] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0104.618] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.html" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0104.618] GetFileType (hFile=0x444) returned 0x1 [0104.618] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be490) returned 1 [0104.618] GetFileType (hFile=0x444) returned 0x1 [0104.618] WriteFile (in: hFile=0x444, lpBuffer=0x21dd8e0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be658, lpOverlapped=0x0 | out: lpBuffer=0x21dd8e0*, lpNumberOfBytesWritten=0x3be658*=0x2000, lpOverlapped=0x0) returned 1 [0104.618] CloseHandle (hObject=0x444) returned 1 [0104.618] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.html", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.html", lpFilePart=0x0) returned 0x96 [0104.618] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.html.xuy", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.html.xuy", lpFilePart=0x0) returned 0x9a [0104.619] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0104.619] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.html" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.html"), fInfoLevelId=0x0, lpFileInformation=0x3be670 | out: lpFileInformation=0x3be670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ac1a1fa, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7ac1eeca, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2a344f66, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x111e1)) returned 1 [0104.619] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0104.619] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.html" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.html"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.html.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.html.xuy")) returned 1 [0104.620] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.js", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.js", lpFilePart=0x0) returned 0x94 [0104.620] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0104.620] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.js"), fInfoLevelId=0x0, lpFileInformation=0x225c248 | out: lpFileInformation=0x225c248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ac23e44, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7ac2b21a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x3a258)) returned 1 [0104.620] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0104.620] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.js", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.js", lpFilePart=0x0) returned 0x94 [0104.620] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0104.620] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.js"), fInfoLevelId=0x0, lpFileInformation=0x225c440 | out: lpFileInformation=0x225c440*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ac23e44, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7ac2b21a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x3a258)) returned 1 [0104.620] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0104.620] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.js", nBufferLength=0x105, lpBuffer=0x3be040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.js", lpFilePart=0x0) returned 0x94 [0104.620] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0104.620] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0104.621] GetFileType (hFile=0x444) returned 0x1 [0104.621] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be490) returned 1 [0104.621] GetFileType (hFile=0x444) returned 0x1 [0104.621] ReadFile (in: hFile=0x444, lpBuffer=0x225e960, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5a8, lpOverlapped=0x0 | out: lpBuffer=0x225e960*, lpNumberOfBytesRead=0x3be5a8*=0x1000, lpOverlapped=0x0) returned 1 [0104.637] CloseHandle (hObject=0x444) returned 1 [0104.637] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.js", nBufferLength=0x105, lpBuffer=0x3be040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.js", lpFilePart=0x0) returned 0x94 [0104.637] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0104.637] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0104.637] GetFileType (hFile=0x444) returned 0x1 [0104.637] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be490) returned 1 [0104.637] GetFileType (hFile=0x444) returned 0x1 [0104.637] WriteFile (in: hFile=0x444, lpBuffer=0x225c618*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be658, lpOverlapped=0x0 | out: lpBuffer=0x225c618*, lpNumberOfBytesWritten=0x3be658*=0x2000, lpOverlapped=0x0) returned 1 [0104.638] CloseHandle (hObject=0x444) returned 1 [0104.638] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.js", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.js", lpFilePart=0x0) returned 0x94 [0104.638] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.js.xuy", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.js.xuy", lpFilePart=0x0) returned 0x98 [0104.638] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0104.638] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.js"), fInfoLevelId=0x0, lpFileInformation=0x3be670 | out: lpFileInformation=0x3be670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ac23e44, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7ac2b21a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2a36afb6, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x3a258)) returned 1 [0104.638] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0104.638] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.js"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.js.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.js.xuy")) returned 1 [0104.639] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_sender.js", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_sender.js", lpFilePart=0x0) returned 0x8d [0104.639] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0104.639] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_sender.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_sender.js"), fInfoLevelId=0x0, lpFileInformation=0x22daf80 | out: lpFileInformation=0x22daf80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ac3289f, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7ac34e5a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0xce17)) returned 1 [0104.639] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0104.639] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_sender.js", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_sender.js", lpFilePart=0x0) returned 0x8d [0104.639] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0104.639] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_sender.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_sender.js"), fInfoLevelId=0x0, lpFileInformation=0x22db158 | out: lpFileInformation=0x22db158*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ac3289f, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7ac34e5a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0xce17)) returned 1 [0104.639] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0104.639] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_sender.js", nBufferLength=0x105, lpBuffer=0x3be040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_sender.js", lpFilePart=0x0) returned 0x8d [0104.639] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0104.639] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_sender.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_sender.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0104.640] GetFileType (hFile=0x444) returned 0x1 [0104.640] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be490) returned 1 [0104.640] GetFileType (hFile=0x444) returned 0x1 [0104.640] ReadFile (in: hFile=0x444, lpBuffer=0x22dd638, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5a8, lpOverlapped=0x0 | out: lpBuffer=0x22dd638*, lpNumberOfBytesRead=0x3be5a8*=0x1000, lpOverlapped=0x0) returned 1 [0104.665] CloseHandle (hObject=0x444) returned 1 [0104.665] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_sender.js", nBufferLength=0x105, lpBuffer=0x3be040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_sender.js", lpFilePart=0x0) returned 0x8d [0104.665] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0104.665] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_sender.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_sender.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0104.665] GetFileType (hFile=0x444) returned 0x1 [0104.665] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be490) returned 1 [0104.666] GetFileType (hFile=0x444) returned 0x1 [0104.666] WriteFile (in: hFile=0x444, lpBuffer=0x22db310*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be658, lpOverlapped=0x0 | out: lpBuffer=0x22db310*, lpNumberOfBytesWritten=0x3be658*=0x2000, lpOverlapped=0x0) returned 1 [0104.666] CloseHandle (hObject=0x444) returned 1 [0104.666] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_sender.js", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_sender.js", lpFilePart=0x0) returned 0x8d [0104.666] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_sender.js.xuy", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_sender.js.xuy", lpFilePart=0x0) returned 0x91 [0104.666] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0104.666] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_sender.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_sender.js"), fInfoLevelId=0x0, lpFileInformation=0x3be670 | out: lpFileInformation=0x3be670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ac3289f, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7ac34e5a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2a3b7478, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xce17)) returned 1 [0104.666] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0104.666] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_sender.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_sender.js"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_sender.js.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_sender.js.xuy")) returned 1 [0104.667] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\common.js", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\common.js", lpFilePart=0x0) returned 0x88 [0104.667] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0104.667] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\common.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\common.js"), fInfoLevelId=0x0, lpFileInformation=0x2359c08 | out: lpFileInformation=0x2359c08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ac9b86e, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7ac9de0a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0xc878)) returned 1 [0104.668] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0104.668] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\common.js", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\common.js", lpFilePart=0x0) returned 0x88 [0104.668] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0104.668] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\common.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\common.js"), fInfoLevelId=0x0, lpFileInformation=0x2359dd0 | out: lpFileInformation=0x2359dd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ac9b86e, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7ac9de0a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0xc878)) returned 1 [0104.669] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0104.669] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\common.js", nBufferLength=0x105, lpBuffer=0x3be040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\common.js", lpFilePart=0x0) returned 0x88 [0104.669] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0104.669] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\common.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\common.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0104.670] GetFileType (hFile=0x444) returned 0x1 [0104.670] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be490) returned 1 [0104.670] GetFileType (hFile=0x444) returned 0x1 [0104.670] ReadFile (in: hFile=0x444, lpBuffer=0x235c290, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5a8, lpOverlapped=0x0 | out: lpBuffer=0x235c290*, lpNumberOfBytesRead=0x3be5a8*=0x1000, lpOverlapped=0x0) returned 1 [0104.721] CloseHandle (hObject=0x444) returned 1 [0104.721] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\common.js", nBufferLength=0x105, lpBuffer=0x3be040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\common.js", lpFilePart=0x0) returned 0x88 [0104.721] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0104.721] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\common.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\common.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0104.722] GetFileType (hFile=0x444) returned 0x1 [0104.722] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be490) returned 1 [0104.722] GetFileType (hFile=0x444) returned 0x1 [0104.722] WriteFile (in: hFile=0x444, lpBuffer=0x215ed40*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be658, lpOverlapped=0x0 | out: lpBuffer=0x215ed40*, lpNumberOfBytesWritten=0x3be658*=0x2000, lpOverlapped=0x0) returned 1 [0104.722] CloseHandle (hObject=0x444) returned 1 [0104.722] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\common.js", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\common.js", lpFilePart=0x0) returned 0x88 [0104.722] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\common.js.xuy", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\common.js.xuy", lpFilePart=0x0) returned 0x8c [0104.722] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0104.722] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\common.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\common.js"), fInfoLevelId=0x0, lpFileInformation=0x3be670 | out: lpFileInformation=0x3be670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ac9b86e, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7ac9de0a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2a45001e, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xc878)) returned 1 [0104.722] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0104.722] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\common.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\common.js"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\common.js.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\common.js.xuy")) returned 1 [0104.723] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.css", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.css", lpFilePart=0x0) returned 0x8b [0104.724] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0104.724] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.css" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.css"), fInfoLevelId=0x0, lpFileInformation=0x21d8cc0 | out: lpFileInformation=0x21d8cc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7aca54a9, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7aca533a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0xc26)) returned 1 [0104.728] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0104.728] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.css", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.css", lpFilePart=0x0) returned 0x8b [0104.728] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0104.728] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.css" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.css"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0104.728] GetFileType (hFile=0x444) returned 0x1 [0104.728] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be400) returned 1 [0104.728] GetFileType (hFile=0x444) returned 0x1 [0104.728] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be628 | out: lpFileSizeHigh=0x3be628*=0x0) returned 0xc26 [0104.728] ReadFile (in: hFile=0x444, lpBuffer=0x21d9ca0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be558, lpOverlapped=0x0 | out: lpBuffer=0x21d9ca0*, lpNumberOfBytesRead=0x3be558*=0xc26, lpOverlapped=0x0) returned 1 [0104.729] CloseHandle (hObject=0x444) returned 1 [0104.741] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.css", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.css", lpFilePart=0x0) returned 0x8b [0104.741] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0104.741] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.css" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.css"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0104.743] GetFileType (hFile=0x444) returned 0x1 [0104.743] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be400) returned 1 [0104.743] GetFileType (hFile=0x444) returned 0x1 [0104.743] WriteFile (in: hFile=0x444, lpBuffer=0x22549f8*, nNumberOfBytesToWrite=0xc30, lpNumberOfBytesWritten=0x3be468, lpOverlapped=0x0 | out: lpBuffer=0x22549f8*, lpNumberOfBytesWritten=0x3be468*=0xc30, lpOverlapped=0x0) returned 1 [0104.744] CloseHandle (hObject=0x444) returned 1 [0104.744] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.css", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.css", lpFilePart=0x0) returned 0x8b [0104.744] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.css.xuy", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.css.xuy", lpFilePart=0x0) returned 0x8f [0104.744] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0104.744] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.css" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.css"), fInfoLevelId=0x0, lpFileInformation=0x3be670 | out: lpFileInformation=0x3be670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7aca54a9, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7aca533a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2a47657b, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xc30)) returned 1 [0104.744] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0104.744] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.css" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.css"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.css.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.css.xuy")) returned 1 [0104.746] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html", lpFilePart=0x0) returned 0x8c [0104.746] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0104.746] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html"), fInfoLevelId=0x0, lpFileInformation=0x2255df8 | out: lpFileInformation=0x2255df8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7acaa2c8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7acaa15a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x38a8)) returned 1 [0104.746] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0104.746] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html", lpFilePart=0x0) returned 0x8c [0104.746] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0104.746] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html"), fInfoLevelId=0x0, lpFileInformation=0x2255fd0 | out: lpFileInformation=0x2255fd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7acaa2c8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7acaa15a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x38a8)) returned 1 [0104.746] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0104.746] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html", nBufferLength=0x105, lpBuffer=0x3be040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html", lpFilePart=0x0) returned 0x8c [0104.746] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0104.746] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0104.747] GetFileType (hFile=0x444) returned 0x1 [0104.747] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be490) returned 1 [0104.747] GetFileType (hFile=0x444) returned 0x1 [0104.747] ReadFile (in: hFile=0x444, lpBuffer=0x22584b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5a8, lpOverlapped=0x0 | out: lpBuffer=0x22584b0*, lpNumberOfBytesRead=0x3be5a8*=0x1000, lpOverlapped=0x0) returned 1 [0104.784] CloseHandle (hObject=0x444) returned 1 [0104.784] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html", nBufferLength=0x105, lpBuffer=0x3be040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html", lpFilePart=0x0) returned 0x8c [0104.784] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0104.784] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0104.785] GetFileType (hFile=0x444) returned 0x1 [0104.785] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be490) returned 1 [0104.785] GetFileType (hFile=0x444) returned 0x1 [0104.785] WriteFile (in: hFile=0x444, lpBuffer=0x2256188*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be658, lpOverlapped=0x0 | out: lpBuffer=0x2256188*, lpNumberOfBytesWritten=0x3be658*=0x2000, lpOverlapped=0x0) returned 1 [0104.785] CloseHandle (hObject=0x444) returned 1 [0104.785] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html", lpFilePart=0x0) returned 0x8c [0104.785] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html.xuy", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html.xuy", lpFilePart=0x0) returned 0x90 [0104.785] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0104.785] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html"), fInfoLevelId=0x0, lpFileInformation=0x3be670 | out: lpFileInformation=0x3be670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7acaa2c8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7acaa15a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2a4e87e4, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x38a8)) returned 1 [0104.785] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0104.785] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html.xuy")) returned 1 [0104.786] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback_script.js", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback_script.js", lpFilePart=0x0) returned 0x91 [0104.786] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0104.786] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback_script.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback_script.js"), fInfoLevelId=0x0, lpFileInformation=0x22d4a80 | out: lpFileInformation=0x22d4a80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7acaf0ea, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7acb64aa, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x2b20)) returned 1 [0104.787] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0104.787] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback_script.js", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback_script.js", lpFilePart=0x0) returned 0x91 [0104.787] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0104.787] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback_script.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback_script.js"), fInfoLevelId=0x0, lpFileInformation=0x22d4c68 | out: lpFileInformation=0x22d4c68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7acaf0ea, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7acb64aa, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x2b20)) returned 1 [0104.787] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0104.787] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback_script.js", nBufferLength=0x105, lpBuffer=0x3be040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback_script.js", lpFilePart=0x0) returned 0x91 [0104.787] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0104.787] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback_script.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback_script.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0104.788] GetFileType (hFile=0x444) returned 0x1 [0104.788] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be490) returned 1 [0104.788] GetFileType (hFile=0x444) returned 0x1 [0104.788] ReadFile (in: hFile=0x444, lpBuffer=0x22d7168, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5a8, lpOverlapped=0x0 | out: lpBuffer=0x22d7168*, lpNumberOfBytesRead=0x3be5a8*=0x1000, lpOverlapped=0x0) returned 1 [0104.812] CloseHandle (hObject=0x444) returned 1 [0104.813] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback_script.js", nBufferLength=0x105, lpBuffer=0x3be040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback_script.js", lpFilePart=0x0) returned 0x91 [0104.813] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0104.813] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback_script.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback_script.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0104.813] GetFileType (hFile=0x444) returned 0x1 [0104.813] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be490) returned 1 [0104.813] GetFileType (hFile=0x444) returned 0x1 [0104.813] WriteFile (in: hFile=0x444, lpBuffer=0x22d4e30*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be658, lpOverlapped=0x0 | out: lpBuffer=0x22d4e30*, lpNumberOfBytesWritten=0x3be658*=0x2000, lpOverlapped=0x0) returned 1 [0104.813] CloseHandle (hObject=0x444) returned 1 [0104.814] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback_script.js", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback_script.js", lpFilePart=0x0) returned 0x91 [0104.814] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback_script.js.xuy", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback_script.js.xuy", lpFilePart=0x0) returned 0x95 [0104.814] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0104.814] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback_script.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback_script.js"), fInfoLevelId=0x0, lpFileInformation=0x3be670 | out: lpFileInformation=0x3be670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7acaf0ea, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7acb64aa, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2a534e9e, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2b20)) returned 1 [0104.814] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0104.814] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback_script.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback_script.js"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback_script.js.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback_script.js.xuy")) returned 1 [0104.815] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\manifest.json", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\manifest.json", lpFilePart=0x0) returned 0x8c [0104.815] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0104.815] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\manifest.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\manifest.json"), fInfoLevelId=0x0, lpFileInformation=0x2353768 | out: lpFileInformation=0x2353768*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a6ca2d5, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7acbd9da, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7bc9c6ef, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x8f8)) returned 1 [0104.815] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0104.815] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\manifest.json", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\manifest.json", lpFilePart=0x0) returned 0x8c [0104.815] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0104.815] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\manifest.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\manifest.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0104.815] GetFileType (hFile=0x444) returned 0x1 [0104.815] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be400) returned 1 [0104.815] GetFileType (hFile=0x444) returned 0x1 [0104.815] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be628 | out: lpFileSizeHigh=0x3be628*=0x0) returned 0x8f8 [0104.815] ReadFile (in: hFile=0x444, lpBuffer=0x2354428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be558, lpOverlapped=0x0 | out: lpBuffer=0x2354428*, lpNumberOfBytesRead=0x3be558*=0x8f8, lpOverlapped=0x0) returned 1 [0104.817] CloseHandle (hObject=0x444) returned 1 [0104.875] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\manifest.json", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\manifest.json", lpFilePart=0x0) returned 0x8c [0104.876] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0104.876] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\manifest.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\manifest.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0104.877] GetFileType (hFile=0x444) returned 0x1 [0104.877] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be400) returned 1 [0104.878] GetFileType (hFile=0x444) returned 0x1 [0104.878] WriteFile (in: hFile=0x444, lpBuffer=0x21cb8a0*, nNumberOfBytesToWrite=0x900, lpNumberOfBytesWritten=0x3be468, lpOverlapped=0x0 | out: lpBuffer=0x21cb8a0*, lpNumberOfBytesWritten=0x3be468*=0x900, lpOverlapped=0x0) returned 1 [0104.883] CloseHandle (hObject=0x444) returned 1 [0104.883] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\manifest.json", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\manifest.json", lpFilePart=0x0) returned 0x8c [0104.883] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\manifest.json.xuy", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\manifest.json.xuy", lpFilePart=0x0) returned 0x90 [0104.883] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0104.883] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\manifest.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\manifest.json"), fInfoLevelId=0x0, lpFileInformation=0x3be670 | out: lpFileInformation=0x3be670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a6ca2d5, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7acbd9da, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2a5cd869, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x900)) returned 1 [0104.883] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0104.883] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\manifest.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\manifest.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\manifest.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\manifest.json.xuy")) returned 1 [0104.885] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\material_css_min.css", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\material_css_min.css", lpFilePart=0x0) returned 0x93 [0104.885] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0104.885] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\material_css_min.css" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\material_css_min.css"), fInfoLevelId=0x0, lpFileInformation=0x21cccb8 | out: lpFileInformation=0x21cccb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7acc2977, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7acc9d2a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x46039)) returned 1 [0104.885] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0104.885] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\material_css_min.css", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\material_css_min.css", lpFilePart=0x0) returned 0x93 [0104.885] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0104.885] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\material_css_min.css" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\material_css_min.css"), fInfoLevelId=0x0, lpFileInformation=0x21ccea8 | out: lpFileInformation=0x21ccea8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7acc2977, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7acc9d2a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x46039)) returned 1 [0104.885] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0104.885] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\material_css_min.css", nBufferLength=0x105, lpBuffer=0x3be040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\material_css_min.css", lpFilePart=0x0) returned 0x93 [0104.885] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0104.885] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\material_css_min.css" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\material_css_min.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0104.886] GetFileType (hFile=0x444) returned 0x1 [0104.886] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be490) returned 1 [0104.886] GetFileType (hFile=0x444) returned 0x1 [0104.886] ReadFile (in: hFile=0x444, lpBuffer=0x21cf3b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5a8, lpOverlapped=0x0 | out: lpBuffer=0x21cf3b8*, lpNumberOfBytesRead=0x3be5a8*=0x1000, lpOverlapped=0x0) returned 1 [0104.923] CloseHandle (hObject=0x444) returned 1 [0104.923] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\material_css_min.css", nBufferLength=0x105, lpBuffer=0x3be040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\material_css_min.css", lpFilePart=0x0) returned 0x93 [0104.923] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0104.923] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\material_css_min.css" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\material_css_min.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0104.924] GetFileType (hFile=0x444) returned 0x1 [0104.924] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be490) returned 1 [0104.924] GetFileType (hFile=0x444) returned 0x1 [0104.924] WriteFile (in: hFile=0x444, lpBuffer=0x21cd078*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be658, lpOverlapped=0x0 | out: lpBuffer=0x21cd078*, lpNumberOfBytesWritten=0x3be658*=0x2000, lpOverlapped=0x0) returned 1 [0104.924] CloseHandle (hObject=0x444) returned 1 [0104.924] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\material_css_min.css", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\material_css_min.css", lpFilePart=0x0) returned 0x93 [0104.924] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\material_css_min.css.xuy", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\material_css_min.css.xuy", lpFilePart=0x0) returned 0x97 [0104.924] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0104.924] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\material_css_min.css" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\material_css_min.css"), fInfoLevelId=0x0, lpFileInformation=0x3be670 | out: lpFileInformation=0x3be670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7acc2977, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7acc9d2a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2a63fdda, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x46039)) returned 1 [0104.924] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0104.924] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\material_css_min.css" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\material_css_min.css"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\material_css_min.css.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\material_css_min.css.xuy")) returned 1 [0104.926] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_cast_streaming.js", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_cast_streaming.js", lpFilePart=0x0) returned 0x9a [0104.926] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0104.926] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_cast_streaming.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_cast_streaming.js"), fInfoLevelId=0x0, lpFileInformation=0x224b9b8 | out: lpFileInformation=0x224b9b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7accecc7, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7acd125a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x7c33)) returned 1 [0104.927] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0104.928] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_cast_streaming.js", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_cast_streaming.js", lpFilePart=0x0) returned 0x9a [0104.928] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0104.928] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_cast_streaming.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_cast_streaming.js"), fInfoLevelId=0x0, lpFileInformation=0x224bbc0 | out: lpFileInformation=0x224bbc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7accecc7, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7acd125a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x7c33)) returned 1 [0104.928] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0104.928] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_cast_streaming.js", nBufferLength=0x105, lpBuffer=0x3be040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_cast_streaming.js", lpFilePart=0x0) returned 0x9a [0104.928] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0104.928] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_cast_streaming.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_cast_streaming.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0104.929] GetFileType (hFile=0x444) returned 0x1 [0104.929] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be490) returned 1 [0104.929] GetFileType (hFile=0x444) returned 0x1 [0104.929] ReadFile (in: hFile=0x444, lpBuffer=0x224e100, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5a8, lpOverlapped=0x0 | out: lpBuffer=0x224e100*, lpNumberOfBytesRead=0x3be5a8*=0x1000, lpOverlapped=0x0) returned 1 [0104.981] CloseHandle (hObject=0x444) returned 1 [0104.981] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_cast_streaming.js", nBufferLength=0x105, lpBuffer=0x3be040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_cast_streaming.js", lpFilePart=0x0) returned 0x9a [0104.981] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0104.981] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_cast_streaming.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_cast_streaming.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0104.982] GetFileType (hFile=0x444) returned 0x1 [0104.982] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be490) returned 1 [0104.982] GetFileType (hFile=0x444) returned 0x1 [0104.982] WriteFile (in: hFile=0x444, lpBuffer=0x224bda8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be658, lpOverlapped=0x0 | out: lpBuffer=0x224bda8*, lpNumberOfBytesWritten=0x3be658*=0x2000, lpOverlapped=0x0) returned 1 [0104.982] CloseHandle (hObject=0x444) returned 1 [0104.982] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_cast_streaming.js", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_cast_streaming.js", lpFilePart=0x0) returned 0x9a [0104.983] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_cast_streaming.js.xuy", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_cast_streaming.js.xuy", lpFilePart=0x0) returned 0x9e [0104.983] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0104.983] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_cast_streaming.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_cast_streaming.js"), fInfoLevelId=0x0, lpFileInformation=0x3be670 | out: lpFileInformation=0x3be670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7accecc7, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7acd125a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2a6b2479, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x7c33)) returned 1 [0104.983] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0104.983] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_cast_streaming.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_cast_streaming.js"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_cast_streaming.js.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_cast_streaming.js.xuy")) returned 1 [0105.002] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_common.js", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_common.js", lpFilePart=0x0) returned 0x92 [0105.002] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0105.002] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_common.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_common.js"), fInfoLevelId=0x0, lpFileInformation=0x22ca748 | out: lpFileInformation=0x22ca748*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7acd61f9, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7acdd5aa, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x2adeb)) returned 1 [0105.002] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0105.003] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_common.js", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_common.js", lpFilePart=0x0) returned 0x92 [0105.003] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0105.003] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_common.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_common.js"), fInfoLevelId=0x0, lpFileInformation=0x22ca930 | out: lpFileInformation=0x22ca930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7acd61f9, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7acdd5aa, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x2adeb)) returned 1 [0105.003] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0105.003] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_common.js", nBufferLength=0x105, lpBuffer=0x3be040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_common.js", lpFilePart=0x0) returned 0x92 [0105.003] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0105.003] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_common.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_common.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0105.004] GetFileType (hFile=0x444) returned 0x1 [0105.004] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be490) returned 1 [0105.004] GetFileType (hFile=0x444) returned 0x1 [0105.004] ReadFile (in: hFile=0x444, lpBuffer=0x22cce30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5a8, lpOverlapped=0x0 | out: lpBuffer=0x22cce30*, lpNumberOfBytesRead=0x3be5a8*=0x1000, lpOverlapped=0x0) returned 1 [0105.039] CloseHandle (hObject=0x444) returned 1 [0105.039] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_common.js", nBufferLength=0x105, lpBuffer=0x3be040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_common.js", lpFilePart=0x0) returned 0x92 [0105.039] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0105.039] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_common.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_common.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0105.039] GetFileType (hFile=0x444) returned 0x1 [0105.039] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be490) returned 1 [0105.039] GetFileType (hFile=0x444) returned 0x1 [0105.040] WriteFile (in: hFile=0x444, lpBuffer=0x22caaf8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be658, lpOverlapped=0x0 | out: lpBuffer=0x22caaf8*, lpNumberOfBytesWritten=0x3be658*=0x2000, lpOverlapped=0x0) returned 1 [0105.040] CloseHandle (hObject=0x444) returned 1 [0105.040] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_common.js", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_common.js", lpFilePart=0x0) returned 0x92 [0105.040] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_common.js.xuy", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_common.js.xuy", lpFilePart=0x0) returned 0x96 [0105.040] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0105.040] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_common.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_common.js"), fInfoLevelId=0x0, lpFileInformation=0x3be670 | out: lpFileInformation=0x3be670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7acd61f9, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7acdd5aa, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2a74adca, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2adeb)) returned 1 [0105.040] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0105.040] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_common.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_common.js"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_common.js.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_common.js.xuy")) returned 1 [0105.042] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_hangouts.js", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_hangouts.js", lpFilePart=0x0) returned 0x94 [0105.042] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0105.042] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_hangouts.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_hangouts.js"), fInfoLevelId=0x0, lpFileInformation=0x2349428 | out: lpFileInformation=0x2349428*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ace4c5a, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7acee71a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x794cf)) returned 1 [0105.042] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0105.042] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_hangouts.js", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_hangouts.js", lpFilePart=0x0) returned 0x94 [0105.042] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0105.042] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_hangouts.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_hangouts.js"), fInfoLevelId=0x0, lpFileInformation=0x2349620 | out: lpFileInformation=0x2349620*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ace4c5a, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7acee71a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x794cf)) returned 1 [0105.042] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0105.042] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_hangouts.js", nBufferLength=0x105, lpBuffer=0x3be040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_hangouts.js", lpFilePart=0x0) returned 0x94 [0105.042] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0105.042] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_hangouts.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_hangouts.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0105.044] GetFileType (hFile=0x444) returned 0x1 [0105.044] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be490) returned 1 [0105.044] GetFileType (hFile=0x444) returned 0x1 [0105.044] ReadFile (in: hFile=0x444, lpBuffer=0x234bb40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5a8, lpOverlapped=0x0 | out: lpBuffer=0x234bb40*, lpNumberOfBytesRead=0x3be5a8*=0x1000, lpOverlapped=0x0) returned 1 [0105.114] CloseHandle (hObject=0x444) returned 1 [0105.114] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_hangouts.js", nBufferLength=0x105, lpBuffer=0x3be040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_hangouts.js", lpFilePart=0x0) returned 0x94 [0105.114] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0105.114] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_hangouts.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_hangouts.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0105.115] GetFileType (hFile=0x444) returned 0x1 [0105.115] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be490) returned 1 [0105.115] GetFileType (hFile=0x444) returned 0x1 [0105.115] WriteFile (in: hFile=0x444, lpBuffer=0x215ed40*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be658, lpOverlapped=0x0 | out: lpBuffer=0x215ed40*, lpNumberOfBytesWritten=0x3be658*=0x2000, lpOverlapped=0x0) returned 1 [0105.115] CloseHandle (hObject=0x444) returned 1 [0105.115] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_hangouts.js", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_hangouts.js", lpFilePart=0x0) returned 0x94 [0105.115] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_hangouts.js.xuy", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_hangouts.js.xuy", lpFilePart=0x0) returned 0x98 [0105.115] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0105.115] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_hangouts.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_hangouts.js"), fInfoLevelId=0x0, lpFileInformation=0x3be670 | out: lpFileInformation=0x3be670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ace4c5a, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7acee71a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2a809f01, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x794cf)) returned 1 [0105.115] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0105.115] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_hangouts.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_hangouts.js"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_hangouts.js.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_hangouts.js.xuy")) returned 1 [0105.117] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_webrtc.js", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_webrtc.js", lpFilePart=0x0) returned 0x92 [0105.117] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0105.117] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_webrtc.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_webrtc.js"), fInfoLevelId=0x0, lpFileInformation=0x21caa20 | out: lpFileInformation=0x21caa20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7acf5dd6, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7acf5c4a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x941)) returned 1 [0105.117] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0105.117] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_webrtc.js", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_webrtc.js", lpFilePart=0x0) returned 0x92 [0105.117] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0105.117] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_webrtc.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_webrtc.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0105.117] GetFileType (hFile=0x444) returned 0x1 [0105.117] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be400) returned 1 [0105.117] GetFileType (hFile=0x444) returned 0x1 [0105.117] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be628 | out: lpFileSizeHigh=0x3be628*=0x0) returned 0x941 [0105.117] ReadFile (in: hFile=0x444, lpBuffer=0x21cb750, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be558, lpOverlapped=0x0 | out: lpBuffer=0x21cb750*, lpNumberOfBytesRead=0x3be558*=0x941, lpOverlapped=0x0) returned 1 [0105.119] CloseHandle (hObject=0x444) returned 1 [0105.129] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_webrtc.js", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_webrtc.js", lpFilePart=0x0) returned 0x92 [0105.129] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0105.129] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_webrtc.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_webrtc.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0105.131] GetFileType (hFile=0x444) returned 0x1 [0105.131] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be400) returned 1 [0105.131] GetFileType (hFile=0x444) returned 0x1 [0105.131] WriteFile (in: hFile=0x444, lpBuffer=0x2245660*, nNumberOfBytesToWrite=0x950, lpNumberOfBytesWritten=0x3be468, lpOverlapped=0x0 | out: lpBuffer=0x2245660*, lpNumberOfBytesWritten=0x3be468*=0x950, lpOverlapped=0x0) returned 1 [0105.132] CloseHandle (hObject=0x444) returned 1 [0105.132] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_webrtc.js", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_webrtc.js", lpFilePart=0x0) returned 0x92 [0105.132] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_webrtc.js.xuy", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_webrtc.js.xuy", lpFilePart=0x0) returned 0x96 [0105.132] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0105.132] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_webrtc.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_webrtc.js"), fInfoLevelId=0x0, lpFileInformation=0x3be670 | out: lpFileInformation=0x3be670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7acf5dd6, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7acf5c4a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2a82fb9d, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x950)) returned 1 [0105.132] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0105.132] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_webrtc.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_webrtc.js"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_webrtc.js.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_webrtc.js.xuy")) returned 1 [0105.133] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0105.133] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup", nBufferLength=0x105, lpBuffer=0x3be0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup", lpFilePart=0x0) returned 0x89 [0105.133] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\", nBufferLength=0x105, lpBuffer=0x3be060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\", lpFilePart=0x0) returned 0x8a [0105.133] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\*", lpFindFileData=0x3be270 | out: lpFindFileData=0x3be270) returned 0x5d7610 [0105.145] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0105.145] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0105.145] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0105.146] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0105.146] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0105.146] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0105.146] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0105.146] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0105.146] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0105.146] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 0 [0105.146] FindClose (in: hFindFile=0x5d7610 | out: hFindFile=0x5d7610) returned 1 [0105.147] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0105.147] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0105.147] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0105.147] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup", nBufferLength=0x105, lpBuffer=0x3be0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup", lpFilePart=0x0) returned 0x89 [0105.147] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\", nBufferLength=0x105, lpBuffer=0x3be060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\", lpFilePart=0x0) returned 0x8a [0105.147] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\*", lpFindFileData=0x3be270 | out: lpFindFileData=0x3be270) returned 0x5d81b0 [0105.148] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0105.148] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0105.148] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0105.149] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0105.149] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0105.149] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0105.149] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0105.149] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0105.149] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0105.149] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 0 [0105.149] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0105.150] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0105.150] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0105.150] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.css", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.css", lpFilePart=0x0) returned 0x96 [0105.150] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0105.150] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.css" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.css"), fInfoLevelId=0x0, lpFileInformation=0x224c830 | out: lpFileInformation=0x224c830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ac41315, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7ac45fca, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x1a1d)) returned 1 [0105.153] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0105.153] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.css", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.css", lpFilePart=0x0) returned 0x96 [0105.153] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0105.153] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.css" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.css"), fInfoLevelId=0x0, lpFileInformation=0x224ca18 | out: lpFileInformation=0x224ca18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ac41315, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7ac45fca, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x1a1d)) returned 1 [0105.153] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0105.153] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.css", nBufferLength=0x105, lpBuffer=0x3bdfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.css", lpFilePart=0x0) returned 0x96 [0105.153] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0105.153] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.css" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0105.154] GetFileType (hFile=0x444) returned 0x1 [0105.154] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be420) returned 1 [0105.154] GetFileType (hFile=0x444) returned 0x1 [0105.154] ReadFile (in: hFile=0x444, lpBuffer=0x224ef18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be538, lpOverlapped=0x0 | out: lpBuffer=0x224ef18*, lpNumberOfBytesRead=0x3be538*=0x1000, lpOverlapped=0x0) returned 1 [0105.183] CloseHandle (hObject=0x444) returned 1 [0105.183] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.css", nBufferLength=0x105, lpBuffer=0x3bdfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.css", lpFilePart=0x0) returned 0x96 [0105.183] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0105.183] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.css" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0105.184] GetFileType (hFile=0x444) returned 0x1 [0105.184] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be420) returned 1 [0105.184] GetFileType (hFile=0x444) returned 0x1 [0105.184] WriteFile (in: hFile=0x444, lpBuffer=0x224cbe0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be5e8, lpOverlapped=0x0 | out: lpBuffer=0x224cbe0*, lpNumberOfBytesWritten=0x3be5e8*=0x2000, lpOverlapped=0x0) returned 1 [0105.184] CloseHandle (hObject=0x444) returned 1 [0105.184] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.css", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.css", lpFilePart=0x0) returned 0x96 [0105.184] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.css.xuy", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.css.xuy", lpFilePart=0x0) returned 0x9a [0105.184] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0105.184] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.css" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.css"), fInfoLevelId=0x0, lpFileInformation=0x3be600 | out: lpFileInformation=0x3be600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ac41315, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7ac45fca, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2a8a2256, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0105.184] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0105.185] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.css" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.css"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.css.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.css.xuy")) returned 1 [0105.186] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.js", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.js", lpFilePart=0x0) returned 0x95 [0105.186] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0105.186] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.js"), fInfoLevelId=0x0, lpFileInformation=0x22cb528 | out: lpFileInformation=0x22cb528*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ac4af4d, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7ac4d4fa, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x221da)) returned 1 [0105.186] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0105.186] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.js", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.js", lpFilePart=0x0) returned 0x95 [0105.186] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0105.186] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.js"), fInfoLevelId=0x0, lpFileInformation=0x22cb708 | out: lpFileInformation=0x22cb708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ac4af4d, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7ac4d4fa, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x221da)) returned 1 [0105.186] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0105.186] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.js", nBufferLength=0x105, lpBuffer=0x3bdfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.js", lpFilePart=0x0) returned 0x95 [0105.186] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0105.186] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0105.187] GetFileType (hFile=0x444) returned 0x1 [0105.187] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be420) returned 1 [0105.187] GetFileType (hFile=0x444) returned 0x1 [0105.187] ReadFile (in: hFile=0x444, lpBuffer=0x22cdbf8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be538, lpOverlapped=0x0 | out: lpBuffer=0x22cdbf8*, lpNumberOfBytesRead=0x3be538*=0x1000, lpOverlapped=0x0) returned 1 [0105.207] CloseHandle (hObject=0x444) returned 1 [0105.207] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.js", nBufferLength=0x105, lpBuffer=0x3bdfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.js", lpFilePart=0x0) returned 0x95 [0105.207] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0105.207] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0105.208] GetFileType (hFile=0x444) returned 0x1 [0105.208] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be420) returned 1 [0105.208] GetFileType (hFile=0x444) returned 0x1 [0105.208] WriteFile (in: hFile=0x444, lpBuffer=0x22cb8c8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be5e8, lpOverlapped=0x0 | out: lpBuffer=0x22cb8c8*, lpNumberOfBytesWritten=0x3be5e8*=0x2000, lpOverlapped=0x0) returned 1 [0105.208] CloseHandle (hObject=0x444) returned 1 [0105.208] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.js", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.js", lpFilePart=0x0) returned 0x95 [0105.208] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.js.xuy", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.js.xuy", lpFilePart=0x0) returned 0x99 [0105.208] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0105.208] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.js"), fInfoLevelId=0x0, lpFileInformation=0x3be600 | out: lpFileInformation=0x3be600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ac4af4d, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7ac4d4fa, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2a8ee761, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x221da)) returned 1 [0105.208] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0105.208] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.js"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.js.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.js.xuy")) returned 1 [0105.209] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app_redirect.js", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app_redirect.js", lpFilePart=0x0) returned 0x9e [0105.209] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0105.209] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app_redirect.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app_redirect.js"), fInfoLevelId=0x0, lpFileInformation=0x234a200 | out: lpFileInformation=0x234a200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ac54b7f, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7ac54a2a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0xf2)) returned 1 [0105.210] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0105.210] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app_redirect.js", nBufferLength=0x105, lpBuffer=0x3bdf40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app_redirect.js", lpFilePart=0x0) returned 0x9e [0105.210] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be420) returned 1 [0105.210] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app_redirect.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app_redirect.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0105.210] GetFileType (hFile=0x444) returned 0x1 [0105.210] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be390) returned 1 [0105.210] GetFileType (hFile=0x444) returned 0x1 [0105.210] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be5b8 | out: lpFileSizeHigh=0x3be5b8*=0x0) returned 0xf2 [0105.210] ReadFile (in: hFile=0x444, lpBuffer=0x234a720, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be4e8, lpOverlapped=0x0 | out: lpBuffer=0x234a720*, lpNumberOfBytesRead=0x3be4e8*=0xf2, lpOverlapped=0x0) returned 1 [0105.211] CloseHandle (hObject=0x444) returned 1 [0105.253] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app_redirect.js", nBufferLength=0x105, lpBuffer=0x3bdf40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app_redirect.js", lpFilePart=0x0) returned 0x9e [0105.253] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be420) returned 1 [0105.253] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app_redirect.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app_redirect.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0105.255] GetFileType (hFile=0x444) returned 0x1 [0105.255] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be390) returned 1 [0105.255] GetFileType (hFile=0x444) returned 0x1 [0105.255] WriteFile (in: hFile=0x444, lpBuffer=0x21bdfe8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3be3f8, lpOverlapped=0x0 | out: lpBuffer=0x21bdfe8*, lpNumberOfBytesWritten=0x3be3f8*=0x100, lpOverlapped=0x0) returned 1 [0105.256] CloseHandle (hObject=0x444) returned 1 [0105.256] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app_redirect.js", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app_redirect.js", lpFilePart=0x0) returned 0x9e [0105.256] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app_redirect.js.xuy", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app_redirect.js.xuy", lpFilePart=0x0) returned 0xa2 [0105.256] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0105.256] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app_redirect.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app_redirect.js"), fInfoLevelId=0x0, lpFileInformation=0x3be600 | out: lpFileInformation=0x3be600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ac54b7f, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7ac54a2a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2a961022, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x100)) returned 1 [0105.256] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0105.256] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app_redirect.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app_redirect.js"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app_redirect.js.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app_redirect.js.xuy")) returned 1 [0105.257] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png", lpFilePart=0x0) returned 0xa2 [0105.257] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0105.257] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png"), fInfoLevelId=0x0, lpFileInformation=0x21bf460 | out: lpFileInformation=0x21bf460*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ac599b1, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7ac5bf5a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x1bef)) returned 1 [0105.257] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0105.257] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png", lpFilePart=0x0) returned 0xa2 [0105.257] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0105.258] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png"), fInfoLevelId=0x0, lpFileInformation=0x21bf678 | out: lpFileInformation=0x21bf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ac599b1, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7ac5bf5a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x1bef)) returned 1 [0105.258] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0105.258] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png", nBufferLength=0x105, lpBuffer=0x3bdfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png", lpFilePart=0x0) returned 0xa2 [0105.258] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0105.258] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0105.259] GetFileType (hFile=0x444) returned 0x1 [0105.259] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be420) returned 1 [0105.259] GetFileType (hFile=0x444) returned 0x1 [0105.259] ReadFile (in: hFile=0x444, lpBuffer=0x21c1bd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be538, lpOverlapped=0x0 | out: lpBuffer=0x21c1bd8*, lpNumberOfBytesRead=0x3be538*=0x1000, lpOverlapped=0x0) returned 1 [0105.294] CloseHandle (hObject=0x444) returned 1 [0105.294] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png", nBufferLength=0x105, lpBuffer=0x3bdfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png", lpFilePart=0x0) returned 0xa2 [0105.294] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0105.294] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0105.294] GetFileType (hFile=0x444) returned 0x1 [0105.294] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be420) returned 1 [0105.294] GetFileType (hFile=0x444) returned 0x1 [0105.294] WriteFile (in: hFile=0x444, lpBuffer=0x21bf870*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be5e8, lpOverlapped=0x0 | out: lpBuffer=0x21bf870*, lpNumberOfBytesWritten=0x3be5e8*=0x2000, lpOverlapped=0x0) returned 1 [0105.295] CloseHandle (hObject=0x444) returned 1 [0105.295] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png", lpFilePart=0x0) returned 0xa2 [0105.295] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png.xuy", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png.xuy", lpFilePart=0x0) returned 0xa6 [0105.295] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0105.295] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png"), fInfoLevelId=0x0, lpFileInformation=0x3be600 | out: lpFileInformation=0x3be600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ac599b1, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7ac5bf5a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2a9ad499, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0105.295] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0105.295] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png.xuy")) returned 1 [0105.297] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\devices.html", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\devices.html", lpFilePart=0x0) returned 0x96 [0105.297] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0105.297] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\devices.html" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\devices.html"), fInfoLevelId=0x0, lpFileInformation=0x223e268 | out: lpFileInformation=0x223e268*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ac60edf, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7ac60d7a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x3b)) returned 1 [0105.298] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0105.298] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\devices.html", nBufferLength=0x105, lpBuffer=0x3bdf40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\devices.html", lpFilePart=0x0) returned 0x96 [0105.298] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be420) returned 1 [0105.298] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\devices.html" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\devices.html"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0105.299] GetFileType (hFile=0x444) returned 0x1 [0105.299] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be390) returned 1 [0105.299] GetFileType (hFile=0x444) returned 0x1 [0105.299] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be5b8 | out: lpFileSizeHigh=0x3be5b8*=0x0) returned 0x3b [0105.299] ReadFile (in: hFile=0x444, lpBuffer=0x223e690, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be4e8, lpOverlapped=0x0 | out: lpBuffer=0x223e690*, lpNumberOfBytesRead=0x3be4e8*=0x3b, lpOverlapped=0x0) returned 1 [0105.300] CloseHandle (hObject=0x444) returned 1 [0105.319] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\devices.html", nBufferLength=0x105, lpBuffer=0x3bdf40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\devices.html", lpFilePart=0x0) returned 0x96 [0105.320] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be420) returned 1 [0105.320] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\devices.html" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\devices.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0105.321] GetFileType (hFile=0x444) returned 0x1 [0105.322] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be390) returned 1 [0105.322] GetFileType (hFile=0x444) returned 0x1 [0105.322] WriteFile (in: hFile=0x444, lpBuffer=0x22b58a0*, nNumberOfBytesToWrite=0x40, lpNumberOfBytesWritten=0x3be3f8, lpOverlapped=0x0 | out: lpBuffer=0x22b58a0*, lpNumberOfBytesWritten=0x3be3f8*=0x40, lpOverlapped=0x0) returned 1 [0105.323] CloseHandle (hObject=0x444) returned 1 [0105.323] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\devices.html", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\devices.html", lpFilePart=0x0) returned 0x96 [0105.323] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\devices.html.xuy", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\devices.html.xuy", lpFilePart=0x0) returned 0x9a [0105.323] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0105.323] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\devices.html" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\devices.html"), fInfoLevelId=0x0, lpFileInformation=0x3be600 | out: lpFileInformation=0x3be600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ac60edf, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7ac60d7a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2a9f9d9a, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x40)) returned 1 [0105.323] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0105.323] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\devices.html" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\devices.html"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\devices.html.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\devices.html.xuy")) returned 1 [0105.325] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\index.html", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\index.html", lpFilePart=0x0) returned 0x94 [0105.325] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0105.325] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\index.html" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\index.html"), fInfoLevelId=0x0, lpFileInformation=0x22b6ce8 | out: lpFileInformation=0x22b6ce8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ac6f946, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7ac6f7da, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x828)) returned 1 [0105.325] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0105.325] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\index.html", nBufferLength=0x105, lpBuffer=0x3bdf40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\index.html", lpFilePart=0x0) returned 0x94 [0105.325] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be420) returned 1 [0105.325] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\index.html" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\index.html"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0105.325] GetFileType (hFile=0x444) returned 0x1 [0105.325] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be390) returned 1 [0105.325] GetFileType (hFile=0x444) returned 0x1 [0105.325] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be5b8 | out: lpFileSizeHigh=0x3be5b8*=0x0) returned 0x828 [0105.326] ReadFile (in: hFile=0x444, lpBuffer=0x22b78e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be4e8, lpOverlapped=0x0 | out: lpBuffer=0x22b78e8*, lpNumberOfBytesRead=0x3be4e8*=0x828, lpOverlapped=0x0) returned 1 [0105.327] CloseHandle (hObject=0x444) returned 1 [0105.342] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\index.html", nBufferLength=0x105, lpBuffer=0x3bdf40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\index.html", lpFilePart=0x0) returned 0x94 [0105.342] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be420) returned 1 [0105.342] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\index.html" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\index.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0105.343] GetFileType (hFile=0x444) returned 0x1 [0105.343] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be390) returned 1 [0105.344] GetFileType (hFile=0x444) returned 0x1 [0105.344] WriteFile (in: hFile=0x444, lpBuffer=0x2331248*, nNumberOfBytesToWrite=0x830, lpNumberOfBytesWritten=0x3be3f8, lpOverlapped=0x0 | out: lpBuffer=0x2331248*, lpNumberOfBytesWritten=0x3be3f8*=0x830, lpOverlapped=0x0) returned 1 [0105.345] CloseHandle (hObject=0x444) returned 1 [0105.345] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\index.html", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\index.html", lpFilePart=0x0) returned 0x94 [0105.345] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\index.html.xuy", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\index.html.xuy", lpFilePart=0x0) returned 0x98 [0105.345] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0105.346] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\index.html" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\index.html"), fInfoLevelId=0x0, lpFileInformation=0x3be600 | out: lpFileInformation=0x3be600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ac6f946, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7ac6f7da, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2aa45cfe, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x830)) returned 1 [0105.346] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0105.346] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\index.html" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\index.html"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\index.html.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\index.html.xuy")) returned 1 [0105.347] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\offers.html", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\offers.html", lpFilePart=0x0) returned 0x95 [0105.347] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0105.347] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\offers.html" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\offers.html"), fInfoLevelId=0x0, lpFileInformation=0x2332690 | out: lpFileInformation=0x2332690*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ac74772, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7ac745fa, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x3b)) returned 1 [0105.347] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0105.347] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\offers.html", nBufferLength=0x105, lpBuffer=0x3bdf40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\offers.html", lpFilePart=0x0) returned 0x95 [0105.347] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be420) returned 1 [0105.347] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\offers.html" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\offers.html"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0105.348] GetFileType (hFile=0x444) returned 0x1 [0105.348] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be390) returned 1 [0105.348] GetFileType (hFile=0x444) returned 0x1 [0105.348] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be5b8 | out: lpFileSizeHigh=0x3be5b8*=0x0) returned 0x3b [0105.348] ReadFile (in: hFile=0x444, lpBuffer=0x2332aa8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be4e8, lpOverlapped=0x0 | out: lpBuffer=0x2332aa8*, lpNumberOfBytesRead=0x3be4e8*=0x3b, lpOverlapped=0x0) returned 1 [0105.350] CloseHandle (hObject=0x444) returned 1 [0105.407] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\offers.html", nBufferLength=0x105, lpBuffer=0x3bdf40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\offers.html", lpFilePart=0x0) returned 0x95 [0105.407] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be420) returned 1 [0105.407] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\offers.html" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\offers.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0105.409] GetFileType (hFile=0x444) returned 0x1 [0105.409] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be390) returned 1 [0105.409] GetFileType (hFile=0x444) returned 0x1 [0105.409] WriteFile (in: hFile=0x444, lpBuffer=0x21a9c08*, nNumberOfBytesToWrite=0x40, lpNumberOfBytesWritten=0x3be3f8, lpOverlapped=0x0 | out: lpBuffer=0x21a9c08*, lpNumberOfBytesWritten=0x3be3f8*=0x40, lpOverlapped=0x0) returned 1 [0105.411] CloseHandle (hObject=0x444) returned 1 [0105.411] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\offers.html", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\offers.html", lpFilePart=0x0) returned 0x95 [0105.411] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\offers.html.xuy", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\offers.html.xuy", lpFilePart=0x0) returned 0x99 [0105.411] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0105.411] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\offers.html" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\offers.html"), fInfoLevelId=0x0, lpFileInformation=0x3be600 | out: lpFileInformation=0x3be600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ac74772, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7ac745fa, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2aadeb52, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x40)) returned 1 [0105.411] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0105.411] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\offers.html" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\offers.html"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\offers.html.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\offers.html.xuy")) returned 1 [0105.413] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\setup.html", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\setup.html", lpFilePart=0x0) returned 0x94 [0105.413] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0105.413] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\setup.html" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\setup.html"), fInfoLevelId=0x0, lpFileInformation=0x21ab050 | out: lpFileInformation=0x21ab050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ac7bc91, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7ac7e23a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x3b)) returned 1 [0105.413] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0105.413] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\setup.html", nBufferLength=0x105, lpBuffer=0x3bdf40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\setup.html", lpFilePart=0x0) returned 0x94 [0105.413] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be420) returned 1 [0105.413] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\setup.html" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\setup.html"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0105.413] GetFileType (hFile=0x444) returned 0x1 [0105.413] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be390) returned 1 [0105.413] GetFileType (hFile=0x444) returned 0x1 [0105.413] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be5b8 | out: lpFileSizeHigh=0x3be5b8*=0x0) returned 0x3b [0105.413] ReadFile (in: hFile=0x444, lpBuffer=0x21ab468, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be4e8, lpOverlapped=0x0 | out: lpBuffer=0x21ab468*, lpNumberOfBytesRead=0x3be4e8*=0x3b, lpOverlapped=0x0) returned 1 [0105.415] CloseHandle (hObject=0x444) returned 1 [0105.430] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\setup.html", nBufferLength=0x105, lpBuffer=0x3bdf40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\setup.html", lpFilePart=0x0) returned 0x94 [0105.430] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be420) returned 1 [0105.431] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\setup.html" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\setup.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0105.432] GetFileType (hFile=0x444) returned 0x1 [0105.432] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be390) returned 1 [0105.432] GetFileType (hFile=0x444) returned 0x1 [0105.432] WriteFile (in: hFile=0x444, lpBuffer=0x2222670*, nNumberOfBytesToWrite=0x40, lpNumberOfBytesWritten=0x3be3f8, lpOverlapped=0x0 | out: lpBuffer=0x2222670*, lpNumberOfBytesWritten=0x3be3f8*=0x40, lpOverlapped=0x0) returned 1 [0105.433] CloseHandle (hObject=0x444) returned 1 [0105.433] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\setup.html", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\setup.html", lpFilePart=0x0) returned 0x94 [0105.433] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\setup.html.xuy", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\setup.html.xuy", lpFilePart=0x0) returned 0x98 [0105.434] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0105.434] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\setup.html" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\setup.html"), fInfoLevelId=0x0, lpFileInformation=0x3be600 | out: lpFileInformation=0x3be600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ac7bc91, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7ac7e23a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2ab048cc, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x40)) returned 1 [0105.434] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0105.434] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\setup.html" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\setup.html"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\setup.html.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\setup.html.xuy")) returned 1 [0105.435] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0105.435] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details", nBufferLength=0x105, lpBuffer=0x3be0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details", lpFilePart=0x0) returned 0x92 [0105.435] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\", nBufferLength=0x105, lpBuffer=0x3be060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\", lpFilePart=0x0) returned 0x93 [0105.435] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\*", lpFindFileData=0x3be270 | out: lpFindFileData=0x3be270) returned 0x5d73d0 [0105.435] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0105.436] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0105.436] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0105.436] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 0 [0105.436] FindClose (in: hFindFile=0x5d73d0 | out: hFindFile=0x5d73d0) returned 1 [0105.436] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0105.436] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0105.436] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0105.436] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details", nBufferLength=0x105, lpBuffer=0x3be0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details", lpFilePart=0x0) returned 0x92 [0105.436] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\", nBufferLength=0x105, lpBuffer=0x3be060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\", lpFilePart=0x0) returned 0x93 [0105.436] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\*", lpFindFileData=0x3be270 | out: lpFindFileData=0x3be270) returned 0x5d73d0 [0105.437] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0105.437] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0105.437] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0105.437] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 0 [0105.437] FindClose (in: hFindFile=0x5d73d0 | out: hFindFile=0x5d73d0) returned 1 [0105.439] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0105.439] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0105.439] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html", lpFilePart=0x0) returned 0x9c [0105.439] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0105.439] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html"), fInfoLevelId=0x0, lpFileInformation=0x22271f8 | out: lpFileInformation=0x22271f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ac858dc, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7ac8576a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x174c)) returned 1 [0105.440] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0105.440] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html", lpFilePart=0x0) returned 0x9c [0105.440] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0105.440] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html"), fInfoLevelId=0x0, lpFileInformation=0x22273e8 | out: lpFileInformation=0x22273e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ac858dc, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7ac8576a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x174c)) returned 1 [0105.440] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0105.440] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html", nBufferLength=0x105, lpBuffer=0x3bdfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html", lpFilePart=0x0) returned 0x9c [0105.440] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0105.440] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0105.441] GetFileType (hFile=0x444) returned 0x1 [0105.441] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be420) returned 1 [0105.441] GetFileType (hFile=0x444) returned 0x1 [0105.441] ReadFile (in: hFile=0x444, lpBuffer=0x22298f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be538, lpOverlapped=0x0 | out: lpBuffer=0x22298f8*, lpNumberOfBytesRead=0x3be538*=0x1000, lpOverlapped=0x0) returned 1 [0105.457] CloseHandle (hObject=0x444) returned 1 [0105.457] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html", nBufferLength=0x105, lpBuffer=0x3bdfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html", lpFilePart=0x0) returned 0x9c [0105.457] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0105.457] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0105.458] GetFileType (hFile=0x444) returned 0x1 [0105.458] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be420) returned 1 [0105.458] GetFileType (hFile=0x444) returned 0x1 [0105.458] WriteFile (in: hFile=0x444, lpBuffer=0x22275b8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be5e8, lpOverlapped=0x0 | out: lpBuffer=0x22275b8*, lpNumberOfBytesWritten=0x3be5e8*=0x2000, lpOverlapped=0x0) returned 1 [0105.458] CloseHandle (hObject=0x444) returned 1 [0105.458] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html", lpFilePart=0x0) returned 0x9c [0105.458] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html.xuy", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html.xuy", lpFilePart=0x0) returned 0xa0 [0105.458] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0105.458] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html"), fInfoLevelId=0x0, lpFileInformation=0x3be600 | out: lpFileInformation=0x3be600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ac858dc, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7ac8576a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2ab53f2f, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0105.458] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0105.458] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html.xuy")) returned 1 [0105.459] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.js", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.js", lpFilePart=0x0) returned 0x9a [0105.459] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0105.459] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.js"), fInfoLevelId=0x0, lpFileInformation=0x22a5f40 | out: lpFileInformation=0x22a5f40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ac96a4f, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7ac968da, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x945)) returned 1 [0105.460] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0105.460] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.js", nBufferLength=0x105, lpBuffer=0x3bdf40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.js", lpFilePart=0x0) returned 0x9a [0105.460] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be420) returned 1 [0105.460] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0105.460] GetFileType (hFile=0x444) returned 0x1 [0105.460] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be390) returned 1 [0105.460] GetFileType (hFile=0x444) returned 0x1 [0105.460] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be5b8 | out: lpFileSizeHigh=0x3be5b8*=0x0) returned 0x945 [0105.460] ReadFile (in: hFile=0x444, lpBuffer=0x22a6c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be4e8, lpOverlapped=0x0 | out: lpBuffer=0x22a6c60*, lpNumberOfBytesRead=0x3be4e8*=0x945, lpOverlapped=0x0) returned 1 [0105.477] CloseHandle (hObject=0x444) returned 1 [0105.488] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.js", nBufferLength=0x105, lpBuffer=0x3bdf40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.js", lpFilePart=0x0) returned 0x9a [0105.488] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be420) returned 1 [0105.488] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0105.489] GetFileType (hFile=0x444) returned 0x1 [0105.489] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be390) returned 1 [0105.489] GetFileType (hFile=0x444) returned 0x1 [0105.489] WriteFile (in: hFile=0x444, lpBuffer=0x2320b68*, nNumberOfBytesToWrite=0x950, lpNumberOfBytesWritten=0x3be3f8, lpOverlapped=0x0 | out: lpBuffer=0x2320b68*, lpNumberOfBytesWritten=0x3be3f8*=0x950, lpOverlapped=0x0) returned 1 [0105.490] CloseHandle (hObject=0x444) returned 1 [0105.490] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.js", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.js", lpFilePart=0x0) returned 0x9a [0105.490] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.js.xuy", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.js.xuy", lpFilePart=0x0) returned 0x9e [0105.490] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0105.490] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.js"), fInfoLevelId=0x0, lpFileInformation=0x3be600 | out: lpFileInformation=0x3be600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ac96a4f, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7ac968da, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2ab9d1f6, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x950)) returned 1 [0105.491] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0105.491] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.js"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.js.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.js.xuy")) returned 1 [0105.492] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0105.492] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales", nBufferLength=0x105, lpBuffer=0x3be0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales", lpFilePart=0x0) returned 0x87 [0105.492] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\", nBufferLength=0x105, lpBuffer=0x3be060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\", lpFilePart=0x0) returned 0x88 [0105.492] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\*", lpFindFileData=0x3be270 | out: lpFindFileData=0x3be270) returned 0x5d7fd0 [0105.495] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0105.495] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0105.496] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0105.496] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0105.496] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0105.496] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0105.496] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0105.496] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0105.496] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0105.496] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0105.497] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0105.497] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0105.497] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0105.497] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0105.497] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0105.497] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0105.497] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0105.497] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0105.497] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0105.498] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0105.498] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0105.498] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0105.498] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0105.498] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0105.498] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0105.498] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0105.498] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0105.498] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0105.499] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0105.499] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0105.499] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0105.499] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0105.499] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0105.499] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0105.499] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0105.499] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0105.500] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0105.500] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0105.501] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0105.501] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0105.501] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0105.501] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0105.501] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0105.502] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0105.502] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0105.502] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0105.502] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0105.502] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0105.502] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0105.502] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0105.502] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0105.502] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0105.503] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0105.503] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 0 [0105.503] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0105.503] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0105.504] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0105.504] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0105.504] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales", nBufferLength=0x105, lpBuffer=0x3be0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales", lpFilePart=0x0) returned 0x87 [0105.504] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\", nBufferLength=0x105, lpBuffer=0x3be060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\", lpFilePart=0x0) returned 0x88 [0105.504] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\*", lpFindFileData=0x3be270 | out: lpFindFileData=0x3be270) returned 0x5d7eb0 [0105.504] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0105.505] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0105.505] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0105.505] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0105.505] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0105.505] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0105.505] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0105.505] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0105.505] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0105.505] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0105.505] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0105.505] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0105.506] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0105.506] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0105.506] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0105.506] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0105.506] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0105.506] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0105.506] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0105.506] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0105.506] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0105.506] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0105.506] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0105.506] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0105.506] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0105.507] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0105.507] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0105.507] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0105.507] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0105.507] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0105.507] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0105.507] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0105.507] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0105.507] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0105.507] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0105.507] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0105.507] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0105.508] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0105.508] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0105.508] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0105.508] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0105.508] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0105.508] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0105.508] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0105.508] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0105.508] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0105.508] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0105.508] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0105.509] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0105.509] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0105.509] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0105.509] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0105.509] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0105.509] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 0 [0105.509] FindClose (in: hFindFile=0x5d7eb0 | out: hFindFile=0x5d7eb0) returned 1 [0105.510] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0105.510] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0105.510] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0105.510] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am", lpFilePart=0x0) returned 0x8a [0105.510] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am\\", lpFilePart=0x0) returned 0x8b [0105.510] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7e50 [0105.511] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0105.511] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0105.511] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0105.511] FindClose (in: hFindFile=0x5d7e50 | out: hFindFile=0x5d7e50) returned 1 [0105.511] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0105.511] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0105.511] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0105.511] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am", lpFilePart=0x0) returned 0x8a [0105.511] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am\\", lpFilePart=0x0) returned 0x8b [0105.511] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7c70 [0105.512] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0105.512] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0105.512] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0105.512] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0105.512] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0105.512] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0105.512] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am\\messages.json", lpFilePart=0x0) returned 0x98 [0105.512] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0105.512] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x233a238 | out: lpFileInformation=0x233a238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a6f3af0, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a6f61fa, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7bcbe9bd, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x4827)) returned 1 [0105.512] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0105.512] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am\\messages.json", lpFilePart=0x0) returned 0x98 [0105.512] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0105.512] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x233a428 | out: lpFileInformation=0x233a428*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a6f3af0, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a6f61fa, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7bcbe9bd, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x4827)) returned 1 [0105.513] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0105.513] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am\\messages.json", nBufferLength=0x105, lpBuffer=0x3bdf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am\\messages.json", lpFilePart=0x0) returned 0x98 [0105.513] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be440) returned 1 [0105.513] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0105.513] GetFileType (hFile=0x444) returned 0x1 [0105.513] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be3b0) returned 1 [0105.513] GetFileType (hFile=0x444) returned 0x1 [0105.513] ReadFile (in: hFile=0x444, lpBuffer=0x233c938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be4c8, lpOverlapped=0x0 | out: lpBuffer=0x233c938*, lpNumberOfBytesRead=0x3be4c8*=0x1000, lpOverlapped=0x0) returned 1 [0105.561] CloseHandle (hObject=0x444) returned 1 [0105.561] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am\\messages.json", nBufferLength=0x105, lpBuffer=0x3bdf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am\\messages.json", lpFilePart=0x0) returned 0x98 [0105.562] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be440) returned 1 [0105.562] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0105.562] GetFileType (hFile=0x444) returned 0x1 [0105.562] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be3b0) returned 1 [0105.562] GetFileType (hFile=0x444) returned 0x1 [0105.562] WriteFile (in: hFile=0x444, lpBuffer=0x2161ab8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be578, lpOverlapped=0x0 | out: lpBuffer=0x2161ab8*, lpNumberOfBytesWritten=0x3be578*=0x2000, lpOverlapped=0x0) returned 1 [0105.563] CloseHandle (hObject=0x444) returned 1 [0105.564] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am\\messages.json", lpFilePart=0x0) returned 0x98 [0105.564] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am\\messages.json.xuy", lpFilePart=0x0) returned 0x9c [0105.564] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0105.564] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a6f3af0, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a6f61fa, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2ac5bd8d, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x4827)) returned 1 [0105.564] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0105.564] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am\\messages.json.xuy")) returned 1 [0105.565] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0105.565] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar", lpFilePart=0x0) returned 0x8a [0105.565] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar\\", lpFilePart=0x0) returned 0x8b [0105.565] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d79d0 [0105.565] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0105.565] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0105.566] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0105.566] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0105.566] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0105.566] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0105.566] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0105.566] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar", lpFilePart=0x0) returned 0x8a [0105.566] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar\\", lpFilePart=0x0) returned 0x8b [0105.566] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d78b0 [0105.566] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0105.566] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0105.566] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0105.567] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0105.567] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0105.567] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0105.567] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar\\messages.json", lpFilePart=0x0) returned 0x98 [0105.567] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0105.567] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x21c27f0 | out: lpFileInformation=0x21c27f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a702557, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a704c5a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7bcc10eb, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x45bf)) returned 1 [0105.568] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0105.568] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar\\messages.json", lpFilePart=0x0) returned 0x98 [0105.568] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0105.568] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x21c29e0 | out: lpFileInformation=0x21c29e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a702557, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a704c5a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7bcc10eb, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x45bf)) returned 1 [0105.568] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0105.568] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar\\messages.json", nBufferLength=0x105, lpBuffer=0x3bdf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar\\messages.json", lpFilePart=0x0) returned 0x98 [0105.568] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be440) returned 1 [0105.568] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0105.569] GetFileType (hFile=0x444) returned 0x1 [0105.569] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be3b0) returned 1 [0105.569] GetFileType (hFile=0x444) returned 0x1 [0105.569] ReadFile (in: hFile=0x444, lpBuffer=0x21c4ef0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be4c8, lpOverlapped=0x0 | out: lpBuffer=0x21c4ef0*, lpNumberOfBytesRead=0x3be4c8*=0x1000, lpOverlapped=0x0) returned 1 [0105.582] CloseHandle (hObject=0x444) returned 1 [0105.582] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar\\messages.json", nBufferLength=0x105, lpBuffer=0x3bdf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar\\messages.json", lpFilePart=0x0) returned 0x98 [0105.582] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be440) returned 1 [0105.582] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0105.582] GetFileType (hFile=0x444) returned 0x1 [0105.582] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be3b0) returned 1 [0105.582] GetFileType (hFile=0x444) returned 0x1 [0105.582] WriteFile (in: hFile=0x444, lpBuffer=0x21c2bb0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be578, lpOverlapped=0x0 | out: lpBuffer=0x21c2bb0*, lpNumberOfBytesWritten=0x3be578*=0x2000, lpOverlapped=0x0) returned 1 [0105.583] CloseHandle (hObject=0x444) returned 1 [0105.583] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar\\messages.json", lpFilePart=0x0) returned 0x98 [0105.583] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar\\messages.json.xuy", lpFilePart=0x0) returned 0x9c [0105.583] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0105.583] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a702557, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a704c5a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2ac823a9, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x45bf)) returned 1 [0105.583] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0105.583] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar\\messages.json.xuy")) returned 1 [0105.584] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0105.584] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg", lpFilePart=0x0) returned 0x8a [0105.584] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg\\", lpFilePart=0x0) returned 0x8b [0105.584] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7af0 [0105.585] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0105.585] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0105.585] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0105.585] FindClose (in: hFindFile=0x5d7af0 | out: hFindFile=0x5d7af0) returned 1 [0105.585] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0105.585] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0105.585] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0105.585] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg", lpFilePart=0x0) returned 0x8a [0105.585] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg\\", lpFilePart=0x0) returned 0x8b [0105.585] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d81b0 [0105.586] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0105.586] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0105.586] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0105.586] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0105.586] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0105.586] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0105.586] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg\\messages.json", lpFilePart=0x0) returned 0x98 [0105.586] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0105.586] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x22444d8 | out: lpFileInformation=0x22444d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a7136ca, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a715dca, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7bcc10eb, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x4b63)) returned 1 [0105.587] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0105.587] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg\\messages.json", lpFilePart=0x0) returned 0x98 [0105.587] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0105.587] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x22446c8 | out: lpFileInformation=0x22446c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a7136ca, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a715dca, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7bcc10eb, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x4b63)) returned 1 [0105.587] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0105.587] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg\\messages.json", nBufferLength=0x105, lpBuffer=0x3bdf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg\\messages.json", lpFilePart=0x0) returned 0x98 [0105.587] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be440) returned 1 [0105.587] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0105.588] GetFileType (hFile=0x444) returned 0x1 [0105.588] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be3b0) returned 1 [0105.588] GetFileType (hFile=0x444) returned 0x1 [0105.588] ReadFile (in: hFile=0x444, lpBuffer=0x2246bd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be4c8, lpOverlapped=0x0 | out: lpBuffer=0x2246bd8*, lpNumberOfBytesRead=0x3be4c8*=0x1000, lpOverlapped=0x0) returned 1 [0105.630] CloseHandle (hObject=0x444) returned 1 [0105.630] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg\\messages.json", nBufferLength=0x105, lpBuffer=0x3bdf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg\\messages.json", lpFilePart=0x0) returned 0x98 [0105.630] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be440) returned 1 [0105.630] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0105.631] GetFileType (hFile=0x444) returned 0x1 [0105.631] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be3b0) returned 1 [0105.631] GetFileType (hFile=0x444) returned 0x1 [0105.631] WriteFile (in: hFile=0x444, lpBuffer=0x2244898*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be578, lpOverlapped=0x0 | out: lpBuffer=0x2244898*, lpNumberOfBytesWritten=0x3be578*=0x2000, lpOverlapped=0x0) returned 1 [0105.631] CloseHandle (hObject=0x444) returned 1 [0105.631] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg\\messages.json", lpFilePart=0x0) returned 0x98 [0105.631] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg\\messages.json.xuy", lpFilePart=0x0) returned 0x9c [0105.631] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0105.631] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a7136ca, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a715dca, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2acf473e, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x4b63)) returned 1 [0105.631] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0105.631] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg\\messages.json.xuy")) returned 1 [0105.632] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0105.632] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn", lpFilePart=0x0) returned 0x8a [0105.632] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn\\", lpFilePart=0x0) returned 0x8b [0105.632] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d78b0 [0105.633] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0105.633] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0105.633] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0105.633] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0105.633] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0105.633] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0105.633] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0105.633] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn", lpFilePart=0x0) returned 0x8a [0105.633] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn\\", lpFilePart=0x0) returned 0x8b [0105.633] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d8090 [0105.634] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0105.634] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0105.634] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0105.634] FindClose (in: hFindFile=0x5d8090 | out: hFindFile=0x5d8090) returned 1 [0105.634] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0105.634] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0105.634] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn\\messages.json", lpFilePart=0x0) returned 0x98 [0105.634] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0105.634] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x22c61c0 | out: lpFileInformation=0x22c61c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a71fa1e, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a71fa0a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7bcc37fb, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x52cb)) returned 1 [0105.637] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0105.637] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn\\messages.json", lpFilePart=0x0) returned 0x98 [0105.637] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0105.637] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x22c63b0 | out: lpFileInformation=0x22c63b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a71fa1e, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a71fa0a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7bcc37fb, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x52cb)) returned 1 [0105.637] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0105.637] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn\\messages.json", nBufferLength=0x105, lpBuffer=0x3bdf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn\\messages.json", lpFilePart=0x0) returned 0x98 [0105.637] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be440) returned 1 [0105.637] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0105.638] GetFileType (hFile=0x444) returned 0x1 [0105.638] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be3b0) returned 1 [0105.638] GetFileType (hFile=0x444) returned 0x1 [0105.638] ReadFile (in: hFile=0x444, lpBuffer=0x22c88c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be4c8, lpOverlapped=0x0 | out: lpBuffer=0x22c88c0*, lpNumberOfBytesRead=0x3be4c8*=0x1000, lpOverlapped=0x0) returned 1 [0105.664] CloseHandle (hObject=0x444) returned 1 [0105.664] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn\\messages.json", nBufferLength=0x105, lpBuffer=0x3bdf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn\\messages.json", lpFilePart=0x0) returned 0x98 [0105.664] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be440) returned 1 [0105.664] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0105.665] GetFileType (hFile=0x444) returned 0x1 [0105.665] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be3b0) returned 1 [0105.665] GetFileType (hFile=0x444) returned 0x1 [0105.665] WriteFile (in: hFile=0x444, lpBuffer=0x22c6580*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be578, lpOverlapped=0x0 | out: lpBuffer=0x22c6580*, lpNumberOfBytesWritten=0x3be578*=0x2000, lpOverlapped=0x0) returned 1 [0105.665] CloseHandle (hObject=0x444) returned 1 [0105.665] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn\\messages.json", lpFilePart=0x0) returned 0x98 [0105.665] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn\\messages.json.xuy", lpFilePart=0x0) returned 0x9c [0105.665] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0105.665] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a71fa1e, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a71fa0a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2ad40ba9, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x52cb)) returned 1 [0105.666] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0105.666] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn\\messages.json.xuy")) returned 1 [0105.667] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0105.667] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca", lpFilePart=0x0) returned 0x8a [0105.667] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca\\", lpFilePart=0x0) returned 0x8b [0105.667] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d79d0 [0105.668] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0105.668] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0105.668] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0105.668] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0105.668] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0105.668] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0105.668] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0105.668] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca", lpFilePart=0x0) returned 0x8a [0105.668] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca\\", lpFilePart=0x0) returned 0x8b [0105.668] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7a30 [0105.669] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0105.669] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0105.669] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0105.669] FindClose (in: hFindFile=0x5d7a30 | out: hFindFile=0x5d7a30) returned 1 [0105.669] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0105.669] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0105.669] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca\\messages.json", lpFilePart=0x0) returned 0x98 [0105.669] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0105.669] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x2347ea8 | out: lpFileInformation=0x2347ea8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a72bd69, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a72bd5a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7bcc37fb, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x405d)) returned 1 [0105.670] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0105.670] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca\\messages.json", lpFilePart=0x0) returned 0x98 [0105.670] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0105.670] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x2348098 | out: lpFileInformation=0x2348098*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a72bd69, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a72bd5a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7bcc37fb, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x405d)) returned 1 [0105.670] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0105.670] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca\\messages.json", nBufferLength=0x105, lpBuffer=0x3bdf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca\\messages.json", lpFilePart=0x0) returned 0x98 [0105.670] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be440) returned 1 [0105.670] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0105.671] GetFileType (hFile=0x444) returned 0x1 [0105.671] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be3b0) returned 1 [0105.671] GetFileType (hFile=0x444) returned 0x1 [0105.671] ReadFile (in: hFile=0x444, lpBuffer=0x234a5a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be4c8, lpOverlapped=0x0 | out: lpBuffer=0x234a5a8*, lpNumberOfBytesRead=0x3be4c8*=0x1000, lpOverlapped=0x0) returned 1 [0105.728] CloseHandle (hObject=0x444) returned 1 [0105.729] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca\\messages.json", nBufferLength=0x105, lpBuffer=0x3bdf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca\\messages.json", lpFilePart=0x0) returned 0x98 [0105.729] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be440) returned 1 [0105.729] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0105.729] GetFileType (hFile=0x444) returned 0x1 [0105.729] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be3b0) returned 1 [0105.729] GetFileType (hFile=0x444) returned 0x1 [0105.729] WriteFile (in: hFile=0x444, lpBuffer=0x2161aa0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be578, lpOverlapped=0x0 | out: lpBuffer=0x2161aa0*, lpNumberOfBytesWritten=0x3be578*=0x2000, lpOverlapped=0x0) returned 1 [0105.730] CloseHandle (hObject=0x444) returned 1 [0105.730] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca\\messages.json", lpFilePart=0x0) returned 0x98 [0105.730] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca\\messages.json.xuy", lpFilePart=0x0) returned 0x9c [0105.730] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0105.730] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a72bd69, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a72bd5a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2add998b, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x405d)) returned 1 [0105.730] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0105.730] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca\\messages.json.xuy")) returned 1 [0105.731] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0105.731] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs", lpFilePart=0x0) returned 0x8a [0105.732] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs\\", lpFilePart=0x0) returned 0x8b [0105.732] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d8090 [0105.732] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0105.732] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0105.732] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0105.732] FindClose (in: hFindFile=0x5d8090 | out: hFindFile=0x5d8090) returned 1 [0105.732] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0105.733] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0105.733] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0105.733] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs", lpFilePart=0x0) returned 0x8a [0105.733] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs\\", lpFilePart=0x0) returned 0x8b [0105.733] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7c70 [0105.733] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0105.733] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0105.733] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0105.734] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0105.734] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0105.734] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0105.734] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs\\messages.json", lpFilePart=0x0) returned 0x98 [0105.734] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0105.734] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x21c9b58 | out: lpFileInformation=0x21c9b58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a741cfe, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a741cea, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7bcc5f01, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x4029)) returned 1 [0105.735] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0105.735] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs\\messages.json", lpFilePart=0x0) returned 0x98 [0105.735] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0105.735] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x21c9d48 | out: lpFileInformation=0x21c9d48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a741cfe, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a741cea, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7bcc5f01, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x4029)) returned 1 [0105.735] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0105.735] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs\\messages.json", nBufferLength=0x105, lpBuffer=0x3bdf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs\\messages.json", lpFilePart=0x0) returned 0x98 [0105.735] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be440) returned 1 [0105.735] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0105.736] GetFileType (hFile=0x444) returned 0x1 [0105.736] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be3b0) returned 1 [0105.736] GetFileType (hFile=0x444) returned 0x1 [0105.736] ReadFile (in: hFile=0x444, lpBuffer=0x21cc258, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be4c8, lpOverlapped=0x0 | out: lpBuffer=0x21cc258*, lpNumberOfBytesRead=0x3be4c8*=0x1000, lpOverlapped=0x0) returned 1 [0105.758] CloseHandle (hObject=0x444) returned 1 [0105.758] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs\\messages.json", nBufferLength=0x105, lpBuffer=0x3bdf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs\\messages.json", lpFilePart=0x0) returned 0x98 [0105.758] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be440) returned 1 [0105.758] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0105.758] GetFileType (hFile=0x444) returned 0x1 [0105.758] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be3b0) returned 1 [0105.758] GetFileType (hFile=0x444) returned 0x1 [0105.758] WriteFile (in: hFile=0x444, lpBuffer=0x21c9f18*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be578, lpOverlapped=0x0 | out: lpBuffer=0x21c9f18*, lpNumberOfBytesWritten=0x3be578*=0x2000, lpOverlapped=0x0) returned 1 [0105.759] CloseHandle (hObject=0x444) returned 1 [0105.759] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs\\messages.json", lpFilePart=0x0) returned 0x98 [0105.759] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs\\messages.json.xuy", lpFilePart=0x0) returned 0x9c [0105.759] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0105.759] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a741cfe, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a741cea, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2ae25a6b, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x4029)) returned 1 [0105.759] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0105.759] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs\\messages.json.xuy")) returned 1 [0105.760] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0105.760] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da", lpFilePart=0x0) returned 0x8a [0105.760] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da\\", lpFilePart=0x0) returned 0x8b [0105.760] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d78b0 [0105.760] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0105.761] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0105.761] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0105.761] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0105.761] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0105.761] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0105.761] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0105.761] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da", lpFilePart=0x0) returned 0x8a [0105.761] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da\\", lpFilePart=0x0) returned 0x8b [0105.761] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7370 [0105.761] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0105.761] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0105.762] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0105.762] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0105.762] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0105.762] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0105.762] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da\\messages.json", lpFilePart=0x0) returned 0x98 [0105.762] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0105.762] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x224b840 | out: lpFileInformation=0x224b840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a7889d1, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a78b0ca, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7bcc5f01, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x3f79)) returned 1 [0105.762] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0105.762] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da\\messages.json", lpFilePart=0x0) returned 0x98 [0105.762] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0105.762] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x224ba30 | out: lpFileInformation=0x224ba30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a7889d1, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a78b0ca, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7bcc5f01, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x3f79)) returned 1 [0105.762] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0105.762] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da\\messages.json", nBufferLength=0x105, lpBuffer=0x3bdf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da\\messages.json", lpFilePart=0x0) returned 0x98 [0105.762] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be440) returned 1 [0105.762] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0105.763] GetFileType (hFile=0x444) returned 0x1 [0105.763] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be3b0) returned 1 [0105.763] GetFileType (hFile=0x444) returned 0x1 [0105.763] ReadFile (in: hFile=0x444, lpBuffer=0x224df40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be4c8, lpOverlapped=0x0 | out: lpBuffer=0x224df40*, lpNumberOfBytesRead=0x3be4c8*=0x1000, lpOverlapped=0x0) returned 1 [0105.780] CloseHandle (hObject=0x444) returned 1 [0105.781] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da\\messages.json", nBufferLength=0x105, lpBuffer=0x3bdf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da\\messages.json", lpFilePart=0x0) returned 0x98 [0105.781] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be440) returned 1 [0105.781] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0105.782] GetFileType (hFile=0x444) returned 0x1 [0105.782] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be3b0) returned 1 [0105.782] GetFileType (hFile=0x444) returned 0x1 [0105.782] WriteFile (in: hFile=0x444, lpBuffer=0x224bc00*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be578, lpOverlapped=0x0 | out: lpBuffer=0x224bc00*, lpNumberOfBytesWritten=0x3be578*=0x2000, lpOverlapped=0x0) returned 1 [0105.782] CloseHandle (hObject=0x444) returned 1 [0105.783] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da\\messages.json", lpFilePart=0x0) returned 0x98 [0105.783] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da\\messages.json.xuy", lpFilePart=0x0) returned 0x9c [0105.783] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0105.783] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a7889d1, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a78b0ca, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2ae71dd6, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x3f79)) returned 1 [0105.783] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0105.783] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da\\messages.json.xuy")) returned 1 [0105.784] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0105.784] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de", lpFilePart=0x0) returned 0x8a [0105.784] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de\\", lpFilePart=0x0) returned 0x8b [0105.784] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7eb0 [0105.785] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0105.785] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0105.785] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0105.785] FindClose (in: hFindFile=0x5d7eb0 | out: hFindFile=0x5d7eb0) returned 1 [0105.785] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0105.785] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0105.785] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0105.785] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de", lpFilePart=0x0) returned 0x8a [0105.785] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de\\", lpFilePart=0x0) returned 0x8b [0105.785] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7d30 [0105.786] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0105.786] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0105.786] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0105.786] FindClose (in: hFindFile=0x5d7d30 | out: hFindFile=0x5d7d30) returned 1 [0105.786] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0105.786] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0105.786] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de\\messages.json", lpFilePart=0x0) returned 0x98 [0105.786] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0105.786] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x22cd528 | out: lpFileInformation=0x22cd528*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a794d3b, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a79741a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7bcc5f01, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x406f)) returned 1 [0105.790] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0105.790] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de\\messages.json", lpFilePart=0x0) returned 0x98 [0105.790] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0105.790] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x22cd718 | out: lpFileInformation=0x22cd718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a794d3b, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a79741a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7bcc5f01, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x406f)) returned 1 [0105.790] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0105.790] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de\\messages.json", nBufferLength=0x105, lpBuffer=0x3bdf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de\\messages.json", lpFilePart=0x0) returned 0x98 [0105.790] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be440) returned 1 [0105.790] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0105.791] GetFileType (hFile=0x444) returned 0x1 [0105.791] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be3b0) returned 1 [0105.791] GetFileType (hFile=0x444) returned 0x1 [0105.791] ReadFile (in: hFile=0x444, lpBuffer=0x22cfc28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be4c8, lpOverlapped=0x0 | out: lpBuffer=0x22cfc28*, lpNumberOfBytesRead=0x3be4c8*=0x1000, lpOverlapped=0x0) returned 1 [0105.815] CloseHandle (hObject=0x444) returned 1 [0105.816] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de\\messages.json", nBufferLength=0x105, lpBuffer=0x3bdf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de\\messages.json", lpFilePart=0x0) returned 0x98 [0105.816] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be440) returned 1 [0105.816] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0105.816] GetFileType (hFile=0x444) returned 0x1 [0105.816] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be3b0) returned 1 [0105.816] GetFileType (hFile=0x444) returned 0x1 [0105.816] WriteFile (in: hFile=0x444, lpBuffer=0x22cd8e8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be578, lpOverlapped=0x0 | out: lpBuffer=0x22cd8e8*, lpNumberOfBytesWritten=0x3be578*=0x2000, lpOverlapped=0x0) returned 1 [0105.816] CloseHandle (hObject=0x444) returned 1 [0105.816] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de\\messages.json", lpFilePart=0x0) returned 0x98 [0105.817] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de\\messages.json.xuy", lpFilePart=0x0) returned 0x9c [0105.817] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0105.817] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a794d3b, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a79741a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2aebe3c4, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x406f)) returned 1 [0105.817] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0105.817] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de\\messages.json.xuy")) returned 1 [0105.818] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0105.818] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el", lpFilePart=0x0) returned 0x8a [0105.818] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el\\", lpFilePart=0x0) returned 0x8b [0105.818] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d78b0 [0105.818] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0105.818] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0105.818] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0105.819] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0105.819] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0105.819] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0105.819] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0105.819] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el", lpFilePart=0x0) returned 0x8a [0105.819] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el\\", lpFilePart=0x0) returned 0x8b [0105.819] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7a30 [0105.819] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0105.819] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0105.819] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0105.819] FindClose (in: hFindFile=0x5d7a30 | out: hFindFile=0x5d7a30) returned 1 [0105.819] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0105.819] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0105.819] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el\\messages.json", lpFilePart=0x0) returned 0x98 [0105.820] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0105.820] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x234f210 | out: lpFileInformation=0x234f210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a7a379c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a7a5e7a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7bcc861a, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x4afe)) returned 1 [0105.820] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0105.820] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el\\messages.json", lpFilePart=0x0) returned 0x98 [0105.820] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0105.820] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x234f400 | out: lpFileInformation=0x234f400*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a7a379c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a7a5e7a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7bcc861a, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x4afe)) returned 1 [0105.820] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0105.820] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el\\messages.json", nBufferLength=0x105, lpBuffer=0x3bdf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el\\messages.json", lpFilePart=0x0) returned 0x98 [0105.820] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be440) returned 1 [0105.820] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0105.821] GetFileType (hFile=0x444) returned 0x1 [0105.821] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be3b0) returned 1 [0105.821] GetFileType (hFile=0x444) returned 0x1 [0105.821] ReadFile (in: hFile=0x444, lpBuffer=0x2351910, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be4c8, lpOverlapped=0x0 | out: lpBuffer=0x2351910*, lpNumberOfBytesRead=0x3be4c8*=0x1000, lpOverlapped=0x0) returned 1 [0105.867] CloseHandle (hObject=0x444) returned 1 [0105.867] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el\\messages.json", nBufferLength=0x105, lpBuffer=0x3bdf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el\\messages.json", lpFilePart=0x0) returned 0x98 [0105.867] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be440) returned 1 [0105.867] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0105.867] GetFileType (hFile=0x444) returned 0x1 [0105.867] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be3b0) returned 1 [0105.867] GetFileType (hFile=0x444) returned 0x1 [0105.867] WriteFile (in: hFile=0x444, lpBuffer=0x2161aa0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be578, lpOverlapped=0x0 | out: lpBuffer=0x2161aa0*, lpNumberOfBytesWritten=0x3be578*=0x2000, lpOverlapped=0x0) returned 1 [0105.868] CloseHandle (hObject=0x444) returned 1 [0105.868] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el\\messages.json", lpFilePart=0x0) returned 0x98 [0105.868] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el\\messages.json.xuy", lpFilePart=0x0) returned 0x9c [0105.868] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0105.868] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a7a379c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a7a5e7a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2af30b14, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x4afe)) returned 1 [0105.868] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0105.868] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el\\messages.json.xuy")) returned 1 [0105.869] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0105.869] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en", lpFilePart=0x0) returned 0x8a [0105.869] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en\\", lpFilePart=0x0) returned 0x8b [0105.869] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7670 [0105.869] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0105.870] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0105.870] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0105.870] FindClose (in: hFindFile=0x5d7670 | out: hFindFile=0x5d7670) returned 1 [0105.870] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0105.870] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0105.870] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0105.870] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en", lpFilePart=0x0) returned 0x8a [0105.870] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en\\", lpFilePart=0x0) returned 0x8b [0105.870] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d78b0 [0105.870] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0105.870] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0105.871] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0105.871] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0105.871] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0105.871] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0105.871] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en\\messages.json", lpFilePart=0x0) returned 0x98 [0105.871] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0105.871] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x21d0ef8 | out: lpFileInformation=0x21d0ef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a7b21f6, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a7b48da, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7bcc861a, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x3d7a)) returned 1 [0105.873] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0105.873] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en\\messages.json", lpFilePart=0x0) returned 0x98 [0105.873] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0105.873] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x21d10e8 | out: lpFileInformation=0x21d10e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a7b21f6, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a7b48da, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7bcc861a, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x3d7a)) returned 1 [0105.873] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0105.873] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en\\messages.json", nBufferLength=0x105, lpBuffer=0x3bdf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en\\messages.json", lpFilePart=0x0) returned 0x98 [0105.873] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be440) returned 1 [0105.873] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0105.874] GetFileType (hFile=0x444) returned 0x1 [0105.874] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be3b0) returned 1 [0105.874] GetFileType (hFile=0x444) returned 0x1 [0105.874] ReadFile (in: hFile=0x444, lpBuffer=0x21d35f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be4c8, lpOverlapped=0x0 | out: lpBuffer=0x21d35f8*, lpNumberOfBytesRead=0x3be4c8*=0x1000, lpOverlapped=0x0) returned 1 [0105.893] CloseHandle (hObject=0x444) returned 1 [0105.893] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en\\messages.json", nBufferLength=0x105, lpBuffer=0x3bdf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en\\messages.json", lpFilePart=0x0) returned 0x98 [0105.893] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be440) returned 1 [0105.893] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0105.894] GetFileType (hFile=0x444) returned 0x1 [0105.894] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be3b0) returned 1 [0105.894] GetFileType (hFile=0x444) returned 0x1 [0105.894] WriteFile (in: hFile=0x444, lpBuffer=0x21d12b8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be578, lpOverlapped=0x0 | out: lpBuffer=0x21d12b8*, lpNumberOfBytesWritten=0x3be578*=0x2000, lpOverlapped=0x0) returned 1 [0105.894] CloseHandle (hObject=0x444) returned 1 [0105.894] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en\\messages.json", lpFilePart=0x0) returned 0x98 [0105.894] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en\\messages.json.xuy", lpFilePart=0x0) returned 0x9c [0105.894] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0105.894] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a7b21f6, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a7b48da, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2af7d087, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x3d7a)) returned 1 [0105.894] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0105.895] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en\\messages.json.xuy")) returned 1 [0105.895] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0105.896] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es", lpFilePart=0x0) returned 0x8a [0105.896] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es\\", lpFilePart=0x0) returned 0x8b [0105.896] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d79d0 [0105.896] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0105.896] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0105.896] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0105.896] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0105.897] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0105.897] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0105.897] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0105.897] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es", lpFilePart=0x0) returned 0x8a [0105.897] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es\\", lpFilePart=0x0) returned 0x8b [0105.897] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d78b0 [0105.897] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0105.897] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0105.897] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0105.898] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0105.898] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0105.898] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0105.898] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es\\messages.json", lpFilePart=0x0) returned 0x98 [0105.898] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0105.898] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x2252be0 | out: lpFileInformation=0x2252be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a7be553, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a7c0c2a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7bccad2d, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x404b)) returned 1 [0105.898] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0105.898] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es\\messages.json", lpFilePart=0x0) returned 0x98 [0105.898] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0105.898] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x2252dd0 | out: lpFileInformation=0x2252dd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a7be553, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a7c0c2a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7bccad2d, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x404b)) returned 1 [0105.898] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0105.898] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es\\messages.json", nBufferLength=0x105, lpBuffer=0x3bdf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es\\messages.json", lpFilePart=0x0) returned 0x98 [0105.898] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be440) returned 1 [0105.899] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0105.899] GetFileType (hFile=0x444) returned 0x1 [0105.899] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be3b0) returned 1 [0105.899] GetFileType (hFile=0x444) returned 0x1 [0105.899] ReadFile (in: hFile=0x444, lpBuffer=0x22552e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be4c8, lpOverlapped=0x0 | out: lpBuffer=0x22552e0*, lpNumberOfBytesRead=0x3be4c8*=0x1000, lpOverlapped=0x0) returned 1 [0105.916] CloseHandle (hObject=0x444) returned 1 [0105.916] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es\\messages.json", nBufferLength=0x105, lpBuffer=0x3bdf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es\\messages.json", lpFilePart=0x0) returned 0x98 [0105.916] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be440) returned 1 [0105.916] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0105.917] GetFileType (hFile=0x444) returned 0x1 [0105.917] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be3b0) returned 1 [0105.917] GetFileType (hFile=0x444) returned 0x1 [0105.917] WriteFile (in: hFile=0x444, lpBuffer=0x2252fa0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be578, lpOverlapped=0x0 | out: lpBuffer=0x2252fa0*, lpNumberOfBytesWritten=0x3be578*=0x2000, lpOverlapped=0x0) returned 1 [0105.917] CloseHandle (hObject=0x444) returned 1 [0105.917] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es\\messages.json", lpFilePart=0x0) returned 0x98 [0105.917] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es\\messages.json.xuy", lpFilePart=0x0) returned 0x9c [0105.917] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0105.917] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a7be553, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a7c0c2a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2afa3607, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x404b)) returned 1 [0105.917] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0105.917] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es\\messages.json.xuy")) returned 1 [0105.919] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0105.919] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et", lpFilePart=0x0) returned 0x8a [0105.919] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et\\", lpFilePart=0x0) returned 0x8b [0105.919] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7eb0 [0105.919] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0105.919] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0105.919] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0105.920] FindClose (in: hFindFile=0x5d7eb0 | out: hFindFile=0x5d7eb0) returned 1 [0105.920] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0105.920] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0105.920] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0105.920] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et", lpFilePart=0x0) returned 0x8a [0105.920] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et\\", lpFilePart=0x0) returned 0x8b [0105.920] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d78b0 [0105.920] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0105.920] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0105.921] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0105.921] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0105.921] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0105.921] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0105.921] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et\\messages.json", lpFilePart=0x0) returned 0x98 [0105.921] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0105.921] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x22d48c8 | out: lpFileInformation=0x22d48c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a7ca8a1, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a7ccf7a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7bccd436, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x3e85)) returned 1 [0105.923] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0105.923] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et\\messages.json", lpFilePart=0x0) returned 0x98 [0105.924] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0105.924] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x22d4ab8 | out: lpFileInformation=0x22d4ab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a7ca8a1, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a7ccf7a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7bccd436, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x3e85)) returned 1 [0105.924] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0105.924] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et\\messages.json", nBufferLength=0x105, lpBuffer=0x3bdf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et\\messages.json", lpFilePart=0x0) returned 0x98 [0105.924] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be440) returned 1 [0105.924] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0105.925] GetFileType (hFile=0x444) returned 0x1 [0105.925] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be3b0) returned 1 [0105.925] GetFileType (hFile=0x444) returned 0x1 [0105.925] ReadFile (in: hFile=0x444, lpBuffer=0x22d6fc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be4c8, lpOverlapped=0x0 | out: lpBuffer=0x22d6fc8*, lpNumberOfBytesRead=0x3be4c8*=0x1000, lpOverlapped=0x0) returned 1 [0105.942] CloseHandle (hObject=0x444) returned 1 [0105.942] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et\\messages.json", nBufferLength=0x105, lpBuffer=0x3bdf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et\\messages.json", lpFilePart=0x0) returned 0x98 [0105.942] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be440) returned 1 [0105.942] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0105.942] GetFileType (hFile=0x444) returned 0x1 [0105.942] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be3b0) returned 1 [0105.942] GetFileType (hFile=0x444) returned 0x1 [0105.942] WriteFile (in: hFile=0x444, lpBuffer=0x22d4c88*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be578, lpOverlapped=0x0 | out: lpBuffer=0x22d4c88*, lpNumberOfBytesWritten=0x3be578*=0x2000, lpOverlapped=0x0) returned 1 [0105.943] CloseHandle (hObject=0x444) returned 1 [0105.943] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et\\messages.json", lpFilePart=0x0) returned 0x98 [0105.943] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et\\messages.json.xuy", lpFilePart=0x0) returned 0x9c [0105.943] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0105.943] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a7ca8a1, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a7ccf7a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2afef686, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x3e85)) returned 1 [0105.943] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0105.943] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et\\messages.json.xuy")) returned 1 [0105.944] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0105.944] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa", lpFilePart=0x0) returned 0x8a [0105.944] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa\\", lpFilePart=0x0) returned 0x8b [0105.945] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d78b0 [0105.945] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0105.945] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0105.945] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0105.945] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0105.945] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0105.945] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0105.945] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0105.945] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa", lpFilePart=0x0) returned 0x8a [0105.945] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa\\", lpFilePart=0x0) returned 0x8b [0105.946] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7a90 [0105.946] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0105.946] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0105.946] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0105.946] FindClose (in: hFindFile=0x5d7a90 | out: hFindFile=0x5d7a90) returned 1 [0105.946] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0105.946] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0105.946] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa\\messages.json", lpFilePart=0x0) returned 0x98 [0105.946] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0105.946] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x23565b0 | out: lpFileInformation=0x23565b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a7de12d, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a7e07fa, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7bccd436, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x46f5)) returned 1 [0105.946] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0105.947] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa\\messages.json", lpFilePart=0x0) returned 0x98 [0105.947] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0105.947] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x23567a0 | out: lpFileInformation=0x23567a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a7de12d, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a7e07fa, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7bccd436, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x46f5)) returned 1 [0105.947] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0105.947] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa\\messages.json", nBufferLength=0x105, lpBuffer=0x3bdf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa\\messages.json", lpFilePart=0x0) returned 0x98 [0105.947] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be440) returned 1 [0105.947] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0105.948] GetFileType (hFile=0x444) returned 0x1 [0105.948] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be3b0) returned 1 [0105.948] GetFileType (hFile=0x444) returned 0x1 [0105.948] ReadFile (in: hFile=0x444, lpBuffer=0x2358cb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be4c8, lpOverlapped=0x0 | out: lpBuffer=0x2358cb0*, lpNumberOfBytesRead=0x3be4c8*=0x1000, lpOverlapped=0x0) returned 1 [0106.020] CloseHandle (hObject=0x444) returned 1 [0106.020] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa\\messages.json", nBufferLength=0x105, lpBuffer=0x3bdf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa\\messages.json", lpFilePart=0x0) returned 0x98 [0106.020] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be440) returned 1 [0106.020] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0106.020] GetFileType (hFile=0x444) returned 0x1 [0106.020] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be3b0) returned 1 [0106.020] GetFileType (hFile=0x444) returned 0x1 [0106.021] WriteFile (in: hFile=0x444, lpBuffer=0x2161aa0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be578, lpOverlapped=0x0 | out: lpBuffer=0x2161aa0*, lpNumberOfBytesWritten=0x3be578*=0x2000, lpOverlapped=0x0) returned 1 [0106.021] CloseHandle (hObject=0x444) returned 1 [0106.021] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa\\messages.json", lpFilePart=0x0) returned 0x98 [0106.021] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa\\messages.json.xuy", lpFilePart=0x0) returned 0x9c [0106.021] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0106.021] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a7de12d, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a7e07fa, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2b0ae326, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x46f5)) returned 1 [0106.021] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0106.021] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa\\messages.json.xuy")) returned 1 [0106.023] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0106.023] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi", lpFilePart=0x0) returned 0x8a [0106.023] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi\\", lpFilePart=0x0) returned 0x8b [0106.023] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7370 [0106.023] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0106.023] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0106.024] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0106.024] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0106.024] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0106.024] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0106.024] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0106.024] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi", lpFilePart=0x0) returned 0x8a [0106.024] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi\\", lpFilePart=0x0) returned 0x8b [0106.024] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7370 [0106.024] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0106.025] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0106.025] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0106.025] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0106.025] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0106.025] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0106.025] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi\\messages.json", lpFilePart=0x0) returned 0x98 [0106.025] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0106.025] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x21d8298 | out: lpFileInformation=0x21d8298*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a7ea47b, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a7ea43a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7bccd436, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x3f4c)) returned 1 [0106.028] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0106.028] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi\\messages.json", lpFilePart=0x0) returned 0x98 [0106.028] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0106.028] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x21d8488 | out: lpFileInformation=0x21d8488*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a7ea47b, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a7ea43a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7bccd436, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x3f4c)) returned 1 [0106.028] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0106.028] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi\\messages.json", nBufferLength=0x105, lpBuffer=0x3bdf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi\\messages.json", lpFilePart=0x0) returned 0x98 [0106.028] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be440) returned 1 [0106.028] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0106.029] GetFileType (hFile=0x444) returned 0x1 [0106.029] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be3b0) returned 1 [0106.029] GetFileType (hFile=0x444) returned 0x1 [0106.029] ReadFile (in: hFile=0x444, lpBuffer=0x21da998, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be4c8, lpOverlapped=0x0 | out: lpBuffer=0x21da998*, lpNumberOfBytesRead=0x3be4c8*=0x1000, lpOverlapped=0x0) returned 1 [0106.176] CloseHandle (hObject=0x444) returned 1 [0106.272] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi\\messages.json", nBufferLength=0x105, lpBuffer=0x3bdf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi\\messages.json", lpFilePart=0x0) returned 0x98 [0106.272] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be440) returned 1 [0106.272] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0106.272] GetFileType (hFile=0x444) returned 0x1 [0106.272] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be3b0) returned 1 [0106.272] GetFileType (hFile=0x444) returned 0x1 [0106.272] WriteFile (in: hFile=0x444, lpBuffer=0x21d8658*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be578, lpOverlapped=0x0 | out: lpBuffer=0x21d8658*, lpNumberOfBytesWritten=0x3be578*=0x2000, lpOverlapped=0x0) returned 1 [0106.273] CloseHandle (hObject=0x444) returned 1 [0106.273] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi\\messages.json", lpFilePart=0x0) returned 0x98 [0106.273] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi\\messages.json.xuy", lpFilePart=0x0) returned 0x9c [0106.273] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0106.273] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a7ea47b, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a7ea43a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2b3107e2, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x3f4c)) returned 1 [0106.273] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0106.273] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi\\messages.json.xuy")) returned 1 [0106.274] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0106.274] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil", lpFilePart=0x0) returned 0x8b [0106.274] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil\\", lpFilePart=0x0) returned 0x8c [0106.274] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7f10 [0106.275] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0106.275] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0106.275] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0106.275] FindClose (in: hFindFile=0x5d7f10 | out: hFindFile=0x5d7f10) returned 1 [0106.275] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0106.275] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0106.275] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0106.275] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil", lpFilePart=0x0) returned 0x8b [0106.275] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil\\", lpFilePart=0x0) returned 0x8c [0106.275] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7550 [0106.276] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0106.276] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0106.276] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0106.276] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0106.276] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0106.276] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0106.276] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil\\messages.json", lpFilePart=0x0) returned 0x99 [0106.276] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0106.276] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x2259fa0 | out: lpFileInformation=0x2259fa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a7f67c9, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a7fb5aa, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7bccfb4f, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x4082)) returned 1 [0106.276] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0106.276] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil\\messages.json", lpFilePart=0x0) returned 0x99 [0106.276] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0106.276] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x225a190 | out: lpFileInformation=0x225a190*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a7f67c9, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a7fb5aa, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7bccfb4f, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x4082)) returned 1 [0106.277] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0106.277] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil\\messages.json", nBufferLength=0x105, lpBuffer=0x3bdf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil\\messages.json", lpFilePart=0x0) returned 0x99 [0106.277] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be440) returned 1 [0106.277] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0106.277] GetFileType (hFile=0x444) returned 0x1 [0106.277] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be3b0) returned 1 [0106.277] GetFileType (hFile=0x444) returned 0x1 [0106.278] ReadFile (in: hFile=0x444, lpBuffer=0x225c6a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be4c8, lpOverlapped=0x0 | out: lpBuffer=0x225c6a0*, lpNumberOfBytesRead=0x3be4c8*=0x1000, lpOverlapped=0x0) returned 1 [0106.341] CloseHandle (hObject=0x444) returned 1 [0106.399] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil\\messages.json", nBufferLength=0x105, lpBuffer=0x3bdf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil\\messages.json", lpFilePart=0x0) returned 0x99 [0106.399] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be440) returned 1 [0106.399] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0106.400] GetFileType (hFile=0x444) returned 0x1 [0106.400] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be3b0) returned 1 [0106.400] GetFileType (hFile=0x444) returned 0x1 [0106.400] WriteFile (in: hFile=0x444, lpBuffer=0x225a360*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be578, lpOverlapped=0x0 | out: lpBuffer=0x225a360*, lpNumberOfBytesWritten=0x3be578*=0x2000, lpOverlapped=0x0) returned 1 [0106.400] CloseHandle (hObject=0x444) returned 1 [0106.400] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil\\messages.json", lpFilePart=0x0) returned 0x99 [0106.400] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil\\messages.json.xuy", lpFilePart=0x0) returned 0x9d [0106.400] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0106.400] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a7f67c9, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a7fb5aa, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2b441a41, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x4082)) returned 1 [0106.400] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0106.401] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil\\messages.json.xuy")) returned 1 [0106.402] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0106.402] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr", lpFilePart=0x0) returned 0x8a [0106.402] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr\\", lpFilePart=0x0) returned 0x8b [0106.402] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7550 [0106.402] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0106.402] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0106.402] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0106.402] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0106.402] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0106.402] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0106.403] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0106.403] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr", lpFilePart=0x0) returned 0x8a [0106.403] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr\\", lpFilePart=0x0) returned 0x8b [0106.403] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7550 [0106.403] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0106.403] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0106.403] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0106.403] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0106.403] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0106.403] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0106.403] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr\\messages.json", lpFilePart=0x0) returned 0x98 [0106.403] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0106.403] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x22dbc88 | out: lpFileInformation=0x22dbc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a807942, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a8078fa, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7bccfb4f, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x419f)) returned 1 [0106.404] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0106.404] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr\\messages.json", lpFilePart=0x0) returned 0x98 [0106.404] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0106.404] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x22dbe78 | out: lpFileInformation=0x22dbe78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a807942, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a8078fa, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7bccfb4f, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x419f)) returned 1 [0106.404] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0106.405] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr\\messages.json", nBufferLength=0x105, lpBuffer=0x3bdf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr\\messages.json", lpFilePart=0x0) returned 0x98 [0106.405] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be440) returned 1 [0106.405] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0106.405] GetFileType (hFile=0x444) returned 0x1 [0106.405] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be3b0) returned 1 [0106.405] GetFileType (hFile=0x444) returned 0x1 [0106.405] ReadFile (in: hFile=0x444, lpBuffer=0x22de388, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be4c8, lpOverlapped=0x0 | out: lpBuffer=0x22de388*, lpNumberOfBytesRead=0x3be4c8*=0x1000, lpOverlapped=0x0) returned 1 [0106.478] CloseHandle (hObject=0x444) returned 1 [0106.520] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr\\messages.json", nBufferLength=0x105, lpBuffer=0x3bdf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr\\messages.json", lpFilePart=0x0) returned 0x98 [0106.521] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be440) returned 1 [0106.521] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0106.521] GetFileType (hFile=0x444) returned 0x1 [0106.521] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be3b0) returned 1 [0106.521] GetFileType (hFile=0x444) returned 0x1 [0106.521] WriteFile (in: hFile=0x444, lpBuffer=0x22dc048*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be578, lpOverlapped=0x0 | out: lpBuffer=0x22dc048*, lpNumberOfBytesWritten=0x3be578*=0x2000, lpOverlapped=0x0) returned 1 [0106.522] CloseHandle (hObject=0x444) returned 1 [0106.522] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr\\messages.json", lpFilePart=0x0) returned 0x98 [0106.522] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr\\messages.json.xuy", lpFilePart=0x0) returned 0x9c [0106.522] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0106.522] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a807942, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a8078fa, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2b572d07, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x419f)) returned 1 [0106.522] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0106.522] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr\\messages.json.xuy")) returned 1 [0106.523] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0106.523] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu", lpFilePart=0x0) returned 0x8a [0106.523] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu\\", lpFilePart=0x0) returned 0x8b [0106.524] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7a30 [0106.524] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0106.524] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0106.524] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0106.524] FindClose (in: hFindFile=0x5d7a30 | out: hFindFile=0x5d7a30) returned 1 [0106.524] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0106.524] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0106.524] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0106.524] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu", lpFilePart=0x0) returned 0x8a [0106.524] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu\\", lpFilePart=0x0) returned 0x8b [0106.524] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7d90 [0106.525] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0106.525] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0106.525] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0106.525] FindClose (in: hFindFile=0x5d7d90 | out: hFindFile=0x5d7d90) returned 1 [0106.525] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0106.525] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0106.525] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu\\messages.json", lpFilePart=0x0) returned 0x98 [0106.525] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0106.525] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x235d970 | out: lpFileInformation=0x235d970*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a811587, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a813c4a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7bcd225b, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x5079)) returned 1 [0106.525] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0106.525] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu\\messages.json", lpFilePart=0x0) returned 0x98 [0106.525] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0106.525] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x235db60 | out: lpFileInformation=0x235db60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a811587, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a813c4a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7bcd225b, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x5079)) returned 1 [0106.525] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0106.526] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu\\messages.json", nBufferLength=0x105, lpBuffer=0x3bdf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu\\messages.json", lpFilePart=0x0) returned 0x98 [0106.526] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be440) returned 1 [0106.526] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0106.526] GetFileType (hFile=0x444) returned 0x1 [0106.526] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be3b0) returned 1 [0106.526] GetFileType (hFile=0x444) returned 0x1 [0106.526] ReadFile (in: hFile=0x444, lpBuffer=0x2360070, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be4c8, lpOverlapped=0x0 | out: lpBuffer=0x2360070*, lpNumberOfBytesRead=0x3be4c8*=0x1000, lpOverlapped=0x0) returned 1 [0106.670] CloseHandle (hObject=0x444) returned 1 [0106.675] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu\\messages.json", nBufferLength=0x105, lpBuffer=0x3bdf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu\\messages.json", lpFilePart=0x0) returned 0x98 [0106.675] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be440) returned 1 [0106.675] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0106.676] GetFileType (hFile=0x444) returned 0x1 [0106.676] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be3b0) returned 1 [0106.676] GetFileType (hFile=0x444) returned 0x1 [0106.676] WriteFile (in: hFile=0x444, lpBuffer=0x2161aa0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be578, lpOverlapped=0x0 | out: lpBuffer=0x2161aa0*, lpNumberOfBytesWritten=0x3be578*=0x2000, lpOverlapped=0x0) returned 1 [0106.676] CloseHandle (hObject=0x444) returned 1 [0106.676] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu\\messages.json", lpFilePart=0x0) returned 0x98 [0106.676] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu\\messages.json.xuy", lpFilePart=0x0) returned 0x9c [0106.676] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0106.676] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a811587, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a813c4a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2b6f045a, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x5079)) returned 1 [0106.677] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0106.677] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu\\messages.json.xuy")) returned 1 [0106.678] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0106.678] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi", lpFilePart=0x0) returned 0x8a [0106.678] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi\\", lpFilePart=0x0) returned 0x8b [0106.678] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7f10 [0106.679] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0106.679] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0106.679] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0106.679] FindClose (in: hFindFile=0x5d7f10 | out: hFindFile=0x5d7f10) returned 1 [0106.679] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0106.679] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0106.679] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0106.679] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi", lpFilePart=0x0) returned 0x8a [0106.679] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi\\", lpFilePart=0x0) returned 0x8b [0106.679] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7fd0 [0106.680] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0106.680] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0106.680] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0106.680] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0106.680] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0106.680] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0106.680] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi\\messages.json", lpFilePart=0x0) returned 0x98 [0106.680] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0106.680] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x21df638 | out: lpFileInformation=0x21df638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a822716, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a824dba, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7bcd225b, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x50f7)) returned 1 [0106.681] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0106.681] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi\\messages.json", lpFilePart=0x0) returned 0x98 [0106.682] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0106.682] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x21df828 | out: lpFileInformation=0x21df828*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a822716, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a824dba, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7bcd225b, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x50f7)) returned 1 [0106.682] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0106.682] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi\\messages.json", nBufferLength=0x105, lpBuffer=0x3bdf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi\\messages.json", lpFilePart=0x0) returned 0x98 [0106.682] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be440) returned 1 [0106.682] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0106.683] GetFileType (hFile=0x444) returned 0x1 [0106.683] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be3b0) returned 1 [0106.683] GetFileType (hFile=0x444) returned 0x1 [0106.683] ReadFile (in: hFile=0x444, lpBuffer=0x21e1d38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be4c8, lpOverlapped=0x0 | out: lpBuffer=0x21e1d38*, lpNumberOfBytesRead=0x3be4c8*=0x1000, lpOverlapped=0x0) returned 1 [0106.801] CloseHandle (hObject=0x444) returned 1 [0106.845] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi\\messages.json", nBufferLength=0x105, lpBuffer=0x3bdf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi\\messages.json", lpFilePart=0x0) returned 0x98 [0106.845] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be440) returned 1 [0106.845] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0106.846] GetFileType (hFile=0x444) returned 0x1 [0106.846] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be3b0) returned 1 [0106.846] GetFileType (hFile=0x444) returned 0x1 [0106.846] WriteFile (in: hFile=0x444, lpBuffer=0x21df9f8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be578, lpOverlapped=0x0 | out: lpBuffer=0x21df9f8*, lpNumberOfBytesWritten=0x3be578*=0x2000, lpOverlapped=0x0) returned 1 [0106.846] CloseHandle (hObject=0x444) returned 1 [0106.846] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi\\messages.json", lpFilePart=0x0) returned 0x98 [0106.846] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi\\messages.json.xuy", lpFilePart=0x0) returned 0x9c [0106.846] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0106.847] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a822716, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a824dba, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2b893ead, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x50f7)) returned 1 [0106.847] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0106.847] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi\\messages.json.xuy")) returned 1 [0106.848] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0106.848] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr", lpFilePart=0x0) returned 0x8a [0106.848] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr\\", lpFilePart=0x0) returned 0x8b [0106.848] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7c70 [0106.848] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0106.849] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0106.849] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0106.849] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0106.849] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0106.849] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0106.849] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0106.849] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr", lpFilePart=0x0) returned 0x8a [0106.849] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr\\", lpFilePart=0x0) returned 0x8b [0106.849] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7550 [0106.849] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0106.850] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0106.850] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0106.850] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0106.850] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0106.850] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0106.850] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr\\messages.json", lpFilePart=0x0) returned 0x98 [0106.850] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0106.850] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x2261320 | out: lpFileInformation=0x2261320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a82c33f, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a82e9fa, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7bcd4971, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x3ff2)) returned 1 [0106.850] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0106.850] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr\\messages.json", lpFilePart=0x0) returned 0x98 [0106.850] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0106.851] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x2261510 | out: lpFileInformation=0x2261510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a82c33f, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a82e9fa, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7bcd4971, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x3ff2)) returned 1 [0106.851] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0106.851] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr\\messages.json", nBufferLength=0x105, lpBuffer=0x3bdf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr\\messages.json", lpFilePart=0x0) returned 0x98 [0106.851] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be440) returned 1 [0106.851] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0106.852] GetFileType (hFile=0x444) returned 0x1 [0106.852] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be3b0) returned 1 [0106.852] GetFileType (hFile=0x444) returned 0x1 [0106.852] ReadFile (in: hFile=0x444, lpBuffer=0x2263a20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be4c8, lpOverlapped=0x0 | out: lpBuffer=0x2263a20*, lpNumberOfBytesRead=0x3be4c8*=0x1000, lpOverlapped=0x0) returned 1 [0106.948] CloseHandle (hObject=0x444) returned 1 [0106.948] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr\\messages.json", nBufferLength=0x105, lpBuffer=0x3bdf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr\\messages.json", lpFilePart=0x0) returned 0x98 [0106.948] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be440) returned 1 [0106.948] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0106.949] GetFileType (hFile=0x444) returned 0x1 [0106.949] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be3b0) returned 1 [0106.949] GetFileType (hFile=0x444) returned 0x1 [0106.949] WriteFile (in: hFile=0x444, lpBuffer=0x22616e0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be578, lpOverlapped=0x0 | out: lpBuffer=0x22616e0*, lpNumberOfBytesWritten=0x3be578*=0x2000, lpOverlapped=0x0) returned 1 [0106.949] CloseHandle (hObject=0x444) returned 1 [0106.949] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr\\messages.json", lpFilePart=0x0) returned 0x98 [0106.949] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr\\messages.json.xuy", lpFilePart=0x0) returned 0x9c [0106.949] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0106.949] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a82c33f, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a82e9fa, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2b978b6a, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x3ff2)) returned 1 [0106.950] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0106.950] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr\\messages.json.xuy")) returned 1 [0106.951] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0106.951] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu", lpFilePart=0x0) returned 0x8a [0106.951] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu\\", lpFilePart=0x0) returned 0x8b [0106.951] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7cd0 [0106.951] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0106.951] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0106.951] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0106.951] FindClose (in: hFindFile=0x5d7cd0 | out: hFindFile=0x5d7cd0) returned 1 [0106.952] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0106.952] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0106.952] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0106.952] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu", lpFilePart=0x0) returned 0x8a [0106.952] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu\\", lpFilePart=0x0) returned 0x8b [0106.952] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d81b0 [0106.952] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0106.952] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0106.952] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0106.952] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0106.952] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0106.952] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0106.952] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu\\messages.json", lpFilePart=0x0) returned 0x98 [0106.952] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0106.952] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x22e3008 | out: lpFileInformation=0x22e3008*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a83867a, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a83863a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7bcd4971, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x40d4)) returned 1 [0106.974] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0106.974] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu\\messages.json", lpFilePart=0x0) returned 0x98 [0106.975] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0106.975] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x22e31f8 | out: lpFileInformation=0x22e31f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a83867a, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a83863a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7bcd4971, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x40d4)) returned 1 [0106.975] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0106.975] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu\\messages.json", nBufferLength=0x105, lpBuffer=0x3bdf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu\\messages.json", lpFilePart=0x0) returned 0x98 [0106.975] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be440) returned 1 [0106.975] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0106.976] GetFileType (hFile=0x444) returned 0x1 [0106.976] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be3b0) returned 1 [0106.976] GetFileType (hFile=0x444) returned 0x1 [0106.976] ReadFile (in: hFile=0x444, lpBuffer=0x22e5708, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be4c8, lpOverlapped=0x0 | out: lpBuffer=0x22e5708*, lpNumberOfBytesRead=0x3be4c8*=0x1000, lpOverlapped=0x0) returned 1 [0107.063] CloseHandle (hObject=0x444) returned 1 [0107.063] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu\\messages.json", nBufferLength=0x105, lpBuffer=0x3bdf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu\\messages.json", lpFilePart=0x0) returned 0x98 [0107.063] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be440) returned 1 [0107.063] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0107.064] GetFileType (hFile=0x444) returned 0x1 [0107.064] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be3b0) returned 1 [0107.064] GetFileType (hFile=0x444) returned 0x1 [0107.064] WriteFile (in: hFile=0x444, lpBuffer=0x22e33c8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be578, lpOverlapped=0x0 | out: lpBuffer=0x22e33c8*, lpNumberOfBytesWritten=0x3be578*=0x2000, lpOverlapped=0x0) returned 1 [0107.064] CloseHandle (hObject=0x444) returned 1 [0107.064] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu\\messages.json", lpFilePart=0x0) returned 0x98 [0107.064] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu\\messages.json.xuy", lpFilePart=0x0) returned 0x9c [0107.064] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0107.064] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a83867a, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a83863a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2baa9f36, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x40d4)) returned 1 [0107.064] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0107.064] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu\\messages.json.xuy")) returned 1 [0107.065] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0107.066] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id", lpFilePart=0x0) returned 0x8a [0107.066] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id\\", lpFilePart=0x0) returned 0x8b [0107.066] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7a90 [0107.066] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0107.066] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0107.066] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0107.066] FindClose (in: hFindFile=0x5d7a90 | out: hFindFile=0x5d7a90) returned 1 [0107.066] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0107.066] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0107.066] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0107.066] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id", lpFilePart=0x0) returned 0x8a [0107.066] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id\\", lpFilePart=0x0) returned 0x8b [0107.067] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d81b0 [0107.067] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0107.067] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0107.067] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0107.067] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0107.067] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0107.067] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0107.067] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id\\messages.json", lpFilePart=0x0) returned 0x98 [0107.067] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0107.067] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x2364cf0 | out: lpFileInformation=0x2364cf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a855b57, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a85820a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7bcd707a, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x3e5d)) returned 1 [0107.067] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0107.067] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id\\messages.json", lpFilePart=0x0) returned 0x98 [0107.068] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0107.068] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x2364ee0 | out: lpFileInformation=0x2364ee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a855b57, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a85820a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7bcd707a, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x3e5d)) returned 1 [0107.068] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0107.071] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id\\messages.json", nBufferLength=0x105, lpBuffer=0x3bdf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id\\messages.json", lpFilePart=0x0) returned 0x98 [0107.071] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be440) returned 1 [0107.071] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0107.071] GetFileType (hFile=0x444) returned 0x1 [0107.071] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be3b0) returned 1 [0107.072] GetFileType (hFile=0x444) returned 0x1 [0107.072] ReadFile (in: hFile=0x444, lpBuffer=0x2163de0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be4c8, lpOverlapped=0x0 | out: lpBuffer=0x2163de0*, lpNumberOfBytesRead=0x3be4c8*=0x1000, lpOverlapped=0x0) returned 1 [0107.171] CloseHandle (hObject=0x444) returned 1 [0107.204] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id\\messages.json", nBufferLength=0x105, lpBuffer=0x3bdf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id\\messages.json", lpFilePart=0x0) returned 0x98 [0107.204] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be440) returned 1 [0107.204] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0107.204] GetFileType (hFile=0x444) returned 0x1 [0107.204] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be3b0) returned 1 [0107.205] GetFileType (hFile=0x444) returned 0x1 [0107.205] WriteFile (in: hFile=0x444, lpBuffer=0x2161aa0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be578, lpOverlapped=0x0 | out: lpBuffer=0x2161aa0*, lpNumberOfBytesWritten=0x3be578*=0x2000, lpOverlapped=0x0) returned 1 [0107.205] CloseHandle (hObject=0x444) returned 1 [0107.205] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id\\messages.json", lpFilePart=0x0) returned 0x98 [0107.205] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id\\messages.json.xuy", lpFilePart=0x0) returned 0x9c [0107.205] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0107.205] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a855b57, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a85820a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2bc015f6, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x3e5d)) returned 1 [0107.205] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0107.205] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id\\messages.json.xuy")) returned 1 [0107.206] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0107.206] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it", lpFilePart=0x0) returned 0x8a [0107.206] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it\\", lpFilePart=0x0) returned 0x8b [0107.206] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7df0 [0107.207] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0107.207] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0107.207] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0107.207] FindClose (in: hFindFile=0x5d7df0 | out: hFindFile=0x5d7df0) returned 1 [0107.207] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0107.207] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0107.207] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0107.207] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it", lpFilePart=0x0) returned 0x8a [0107.207] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it\\", lpFilePart=0x0) returned 0x8b [0107.207] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d78b0 [0107.207] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0107.207] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0107.208] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0107.208] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0107.208] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0107.208] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0107.208] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it\\messages.json", lpFilePart=0x0) returned 0x98 [0107.208] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0107.208] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x21e33c8 | out: lpFileInformation=0x21e33c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a861eab, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a861e4a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7bcd707a, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x3f0c)) returned 1 [0107.209] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0107.209] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it\\messages.json", lpFilePart=0x0) returned 0x98 [0107.209] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0107.209] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x21e35b8 | out: lpFileInformation=0x21e35b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a861eab, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a861e4a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7bcd707a, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x3f0c)) returned 1 [0107.209] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0107.209] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it\\messages.json", nBufferLength=0x105, lpBuffer=0x3bdf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it\\messages.json", lpFilePart=0x0) returned 0x98 [0107.209] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be440) returned 1 [0107.209] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0107.210] GetFileType (hFile=0x444) returned 0x1 [0107.210] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be3b0) returned 1 [0107.210] GetFileType (hFile=0x444) returned 0x1 [0107.210] ReadFile (in: hFile=0x444, lpBuffer=0x21e5ac8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be4c8, lpOverlapped=0x0 | out: lpBuffer=0x21e5ac8*, lpNumberOfBytesRead=0x3be4c8*=0x1000, lpOverlapped=0x0) returned 1 [0107.261] CloseHandle (hObject=0x444) returned 1 [0107.298] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it\\messages.json", nBufferLength=0x105, lpBuffer=0x3bdf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it\\messages.json", lpFilePart=0x0) returned 0x98 [0107.298] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be440) returned 1 [0107.298] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0107.298] GetFileType (hFile=0x444) returned 0x1 [0107.298] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be3b0) returned 1 [0107.298] GetFileType (hFile=0x444) returned 0x1 [0107.298] WriteFile (in: hFile=0x444, lpBuffer=0x21e3788*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be578, lpOverlapped=0x0 | out: lpBuffer=0x21e3788*, lpNumberOfBytesWritten=0x3be578*=0x2000, lpOverlapped=0x0) returned 1 [0107.299] CloseHandle (hObject=0x444) returned 1 [0107.299] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it\\messages.json", lpFilePart=0x0) returned 0x98 [0107.299] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it\\messages.json.xuy", lpFilePart=0x0) returned 0x9c [0107.299] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0107.299] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a861eab, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a861e4a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2bce6418, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x3f0c)) returned 1 [0107.299] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0107.299] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it\\messages.json.xuy")) returned 1 [0107.300] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0107.300] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw", lpFilePart=0x0) returned 0x8a [0107.300] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw\\", lpFilePart=0x0) returned 0x8b [0107.300] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d79d0 [0107.300] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0107.300] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0107.301] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0107.301] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0107.301] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0107.301] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0107.301] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0107.301] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw", lpFilePart=0x0) returned 0x8a [0107.301] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw\\", lpFilePart=0x0) returned 0x8b [0107.301] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d79d0 [0107.301] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0107.301] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0107.301] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0107.302] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0107.302] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0107.302] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0107.302] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw\\messages.json", lpFilePart=0x0) returned 0x98 [0107.302] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0107.302] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x22650b0 | out: lpFileInformation=0x22650b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a870915, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a872fba, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x5074)) returned 1 [0107.302] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0107.302] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw\\messages.json", lpFilePart=0x0) returned 0x98 [0107.302] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0107.302] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x22652a0 | out: lpFileInformation=0x22652a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a870915, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a872fba, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x5074)) returned 1 [0107.302] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0107.302] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw\\messages.json", nBufferLength=0x105, lpBuffer=0x3bdf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw\\messages.json", lpFilePart=0x0) returned 0x98 [0107.302] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be440) returned 1 [0107.302] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0107.303] GetFileType (hFile=0x444) returned 0x1 [0107.303] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be3b0) returned 1 [0107.303] GetFileType (hFile=0x444) returned 0x1 [0107.303] ReadFile (in: hFile=0x444, lpBuffer=0x22677b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be4c8, lpOverlapped=0x0 | out: lpBuffer=0x22677b0*, lpNumberOfBytesRead=0x3be4c8*=0x1000, lpOverlapped=0x0) returned 1 [0107.316] CloseHandle (hObject=0x444) returned 1 [0107.316] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw\\messages.json", nBufferLength=0x105, lpBuffer=0x3bdf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw\\messages.json", lpFilePart=0x0) returned 0x98 [0107.316] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be440) returned 1 [0107.316] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0107.317] GetFileType (hFile=0x444) returned 0x1 [0107.317] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be3b0) returned 1 [0107.317] GetFileType (hFile=0x444) returned 0x1 [0107.317] WriteFile (in: hFile=0x444, lpBuffer=0x2265470*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be578, lpOverlapped=0x0 | out: lpBuffer=0x2265470*, lpNumberOfBytesWritten=0x3be578*=0x2000, lpOverlapped=0x0) returned 1 [0107.317] CloseHandle (hObject=0x444) returned 1 [0107.317] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw\\messages.json", lpFilePart=0x0) returned 0x98 [0107.317] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw\\messages.json.xuy", lpFilePart=0x0) returned 0x9c [0107.317] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0107.317] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a870915, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a872fba, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2bd0c9e4, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x5074)) returned 1 [0107.317] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0107.317] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw\\messages.json.xuy")) returned 1 [0107.318] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0107.319] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja", lpFilePart=0x0) returned 0x8a [0107.319] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja\\", lpFilePart=0x0) returned 0x8b [0107.319] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7af0 [0107.319] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0107.319] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0107.319] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0107.319] FindClose (in: hFindFile=0x5d7af0 | out: hFindFile=0x5d7af0) returned 1 [0107.319] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0107.319] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0107.319] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0107.319] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja", lpFilePart=0x0) returned 0x8a [0107.320] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja\\", lpFilePart=0x0) returned 0x8b [0107.320] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d81b0 [0107.320] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0107.320] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0107.320] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0107.320] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0107.320] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0107.320] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0107.320] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja\\messages.json", lpFilePart=0x0) returned 0x98 [0107.320] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0107.320] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x22e6d98 | out: lpFileInformation=0x22e6d98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a87a553, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a87cbfa, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7bcd707a, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x447a)) returned 1 [0107.321] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0107.321] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja\\messages.json", lpFilePart=0x0) returned 0x98 [0107.321] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0107.321] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x22e6f88 | out: lpFileInformation=0x22e6f88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a87a553, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a87cbfa, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7bcd707a, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x447a)) returned 1 [0107.322] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0107.322] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja\\messages.json", nBufferLength=0x105, lpBuffer=0x3bdf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja\\messages.json", lpFilePart=0x0) returned 0x98 [0107.322] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be440) returned 1 [0107.322] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0107.322] GetFileType (hFile=0x444) returned 0x1 [0107.322] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be3b0) returned 1 [0107.322] GetFileType (hFile=0x444) returned 0x1 [0107.322] ReadFile (in: hFile=0x444, lpBuffer=0x22e9498, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be4c8, lpOverlapped=0x0 | out: lpBuffer=0x22e9498*, lpNumberOfBytesRead=0x3be4c8*=0x1000, lpOverlapped=0x0) returned 1 [0107.441] CloseHandle (hObject=0x444) returned 1 [0107.504] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja\\messages.json", nBufferLength=0x105, lpBuffer=0x3bdf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja\\messages.json", lpFilePart=0x0) returned 0x98 [0107.504] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be440) returned 1 [0107.504] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0107.504] GetFileType (hFile=0x444) returned 0x1 [0107.504] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be3b0) returned 1 [0107.504] GetFileType (hFile=0x444) returned 0x1 [0107.505] WriteFile (in: hFile=0x444, lpBuffer=0x22e7158*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be578, lpOverlapped=0x0 | out: lpBuffer=0x22e7158*, lpNumberOfBytesWritten=0x3be578*=0x2000, lpOverlapped=0x0) returned 1 [0107.505] CloseHandle (hObject=0x444) returned 1 [0107.505] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja\\messages.json", lpFilePart=0x0) returned 0x98 [0107.505] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja\\messages.json.xuy", lpFilePart=0x0) returned 0x9c [0107.505] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0107.505] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a87a553, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a87cbfa, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2bed61ab, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x447a)) returned 1 [0107.505] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0107.505] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja\\messages.json.xuy")) returned 1 [0107.513] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0107.513] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\kn", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\kn", lpFilePart=0x0) returned 0x8a [0107.513] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\kn\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\kn\\", lpFilePart=0x0) returned 0x8b [0107.513] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\kn\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7550 [0107.514] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0107.514] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0107.514] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0107.514] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0107.514] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0107.514] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0107.514] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0107.514] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\kn", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\kn", lpFilePart=0x0) returned 0x8a [0107.514] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\kn\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\kn\\", lpFilePart=0x0) returned 0x8b [0107.515] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\kn\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d75b0 [0107.515] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0107.515] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0107.515] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0107.515] FindClose (in: hFindFile=0x5d75b0 | out: hFindFile=0x5d75b0) returned 1 [0107.515] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0107.515] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0107.515] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\kn\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\kn\\messages.json", lpFilePart=0x0) returned 0x98 [0107.515] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0107.516] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\kn\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\kn\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x21438f0 | out: lpFileInformation=0x21438f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a8868a4, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a888f4a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7bcd9790, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x55a3)) returned 1 [0107.516] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0107.516] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\kn\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\kn\\messages.json", lpFilePart=0x0) returned 0x98 [0107.516] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0107.516] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\kn\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\kn\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x2143ae0 | out: lpFileInformation=0x2143ae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a8868a4, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a888f4a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7bcd9790, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x55a3)) returned 1 [0107.517] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0107.517] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\kn\\messages.json", nBufferLength=0x105, lpBuffer=0x3bdf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\kn\\messages.json", lpFilePart=0x0) returned 0x98 [0107.517] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be440) returned 1 [0107.517] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\kn\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\kn\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0107.517] GetFileType (hFile=0x444) returned 0x1 [0107.517] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be3b0) returned 1 [0107.518] GetFileType (hFile=0x444) returned 0x1 [0107.518] ReadFile (in: hFile=0x444, lpBuffer=0x2145ff0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be4c8, lpOverlapped=0x0 | out: lpBuffer=0x2145ff0*, lpNumberOfBytesRead=0x3be4c8*=0x1000, lpOverlapped=0x0) returned 1 [0107.679] CloseHandle (hObject=0x444) returned 1 [0107.679] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\kn\\messages.json", nBufferLength=0x105, lpBuffer=0x3bdf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\kn\\messages.json", lpFilePart=0x0) returned 0x98 [0107.679] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be440) returned 1 [0107.679] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\kn\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\kn\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0107.679] GetFileType (hFile=0x444) returned 0x1 [0107.679] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be3b0) returned 1 [0107.679] GetFileType (hFile=0x444) returned 0x1 [0107.680] WriteFile (in: hFile=0x444, lpBuffer=0x2143cb0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be578, lpOverlapped=0x0 | out: lpBuffer=0x2143cb0*, lpNumberOfBytesWritten=0x3be578*=0x2000, lpOverlapped=0x0) returned 1 [0107.682] CloseHandle (hObject=0x444) returned 1 [0107.682] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\kn\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\kn\\messages.json", lpFilePart=0x0) returned 0x98 [0107.682] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\kn\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\kn\\messages.json.xuy", lpFilePart=0x0) returned 0x9c [0107.682] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0107.682] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\kn\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\kn\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a8868a4, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a888f4a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2c079a44, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x55a3)) returned 1 [0107.682] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0107.682] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\kn\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\kn\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\kn\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\kn\\messages.json.xuy")) returned 1 [0107.684] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0107.684] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ko", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ko", lpFilePart=0x0) returned 0x8a [0107.684] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ko\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ko\\", lpFilePart=0x0) returned 0x8b [0107.684] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ko\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d79d0 [0107.684] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0107.684] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0107.685] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0107.685] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0107.685] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0107.685] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0107.685] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0107.685] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ko", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ko", lpFilePart=0x0) returned 0x8a [0107.685] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ko\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ko\\", lpFilePart=0x0) returned 0x8b [0107.685] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ko\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d81b0 [0107.685] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0107.685] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0107.685] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0107.685] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0107.686] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0107.686] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0107.686] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ko\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ko\\messages.json", lpFilePart=0x0) returned 0x98 [0107.686] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0107.686] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ko\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x21c55d8 | out: lpFileInformation=0x21c55d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a89530b, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a8979aa, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7bcd9790, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x403a)) returned 1 [0107.687] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0107.687] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ko\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ko\\messages.json", lpFilePart=0x0) returned 0x98 [0107.687] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0107.687] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ko\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x21c57c8 | out: lpFileInformation=0x21c57c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a89530b, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a8979aa, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7bcd9790, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x403a)) returned 1 [0107.687] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0107.687] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ko\\messages.json", nBufferLength=0x105, lpBuffer=0x3bdf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ko\\messages.json", lpFilePart=0x0) returned 0x98 [0107.687] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be440) returned 1 [0107.687] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ko\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0107.689] GetFileType (hFile=0x444) returned 0x1 [0107.689] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be3b0) returned 1 [0107.689] GetFileType (hFile=0x444) returned 0x1 [0107.689] ReadFile (in: hFile=0x444, lpBuffer=0x21c7cd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be4c8, lpOverlapped=0x0 | out: lpBuffer=0x21c7cd8*, lpNumberOfBytesRead=0x3be4c8*=0x1000, lpOverlapped=0x0) returned 1 [0107.717] CloseHandle (hObject=0x444) returned 1 [0107.717] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ko\\messages.json", nBufferLength=0x105, lpBuffer=0x3bdf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ko\\messages.json", lpFilePart=0x0) returned 0x98 [0107.717] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be440) returned 1 [0107.717] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ko\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0107.717] GetFileType (hFile=0x444) returned 0x1 [0107.718] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be3b0) returned 1 [0107.718] GetFileType (hFile=0x444) returned 0x1 [0107.718] WriteFile (in: hFile=0x444, lpBuffer=0x21c5998*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be578, lpOverlapped=0x0 | out: lpBuffer=0x21c5998*, lpNumberOfBytesWritten=0x3be578*=0x2000, lpOverlapped=0x0) returned 1 [0107.718] CloseHandle (hObject=0x444) returned 1 [0107.718] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ko\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ko\\messages.json", lpFilePart=0x0) returned 0x98 [0107.718] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ko\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ko\\messages.json.xuy", lpFilePart=0x0) returned 0x9c [0107.718] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0107.718] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ko\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a89530b, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a8979aa, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2c0c6024, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x403a)) returned 1 [0107.718] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0107.718] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ko\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ko\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ko\\messages.json.xuy")) returned 1 [0107.720] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0107.720] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lt", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lt", lpFilePart=0x0) returned 0x8a [0107.720] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lt\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lt\\", lpFilePart=0x0) returned 0x8b [0107.720] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lt\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d81b0 [0107.720] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0107.721] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0107.721] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0107.721] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0107.721] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0107.721] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0107.721] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0107.721] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lt", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lt", lpFilePart=0x0) returned 0x8a [0107.721] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lt\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lt\\", lpFilePart=0x0) returned 0x8b [0107.721] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lt\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7eb0 [0107.721] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0107.721] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0107.722] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0107.722] FindClose (in: hFindFile=0x5d7eb0 | out: hFindFile=0x5d7eb0) returned 1 [0107.722] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0107.722] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0107.722] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lt\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lt\\messages.json", lpFilePart=0x0) returned 0x98 [0107.722] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0107.722] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lt\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x22472c0 | out: lpFileInformation=0x22472c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a8a165f, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a8a640a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7bcdbe90, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x416b)) returned 1 [0107.722] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0107.722] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lt\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lt\\messages.json", lpFilePart=0x0) returned 0x98 [0107.722] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0107.722] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lt\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x22474b0 | out: lpFileInformation=0x22474b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a8a165f, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a8a640a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7bcdbe90, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x416b)) returned 1 [0107.722] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0107.723] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lt\\messages.json", nBufferLength=0x105, lpBuffer=0x3bdf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lt\\messages.json", lpFilePart=0x0) returned 0x98 [0107.723] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be440) returned 1 [0107.723] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lt\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0107.723] GetFileType (hFile=0x444) returned 0x1 [0107.723] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be3b0) returned 1 [0107.724] GetFileType (hFile=0x444) returned 0x1 [0107.724] ReadFile (in: hFile=0x444, lpBuffer=0x22499c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be4c8, lpOverlapped=0x0 | out: lpBuffer=0x22499c0*, lpNumberOfBytesRead=0x3be4c8*=0x1000, lpOverlapped=0x0) returned 1 [0107.744] CloseHandle (hObject=0x444) returned 1 [0107.744] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lt\\messages.json", nBufferLength=0x105, lpBuffer=0x3bdf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lt\\messages.json", lpFilePart=0x0) returned 0x98 [0107.744] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be440) returned 1 [0107.744] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lt\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0107.744] GetFileType (hFile=0x444) returned 0x1 [0107.745] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be3b0) returned 1 [0107.745] GetFileType (hFile=0x444) returned 0x1 [0107.745] WriteFile (in: hFile=0x444, lpBuffer=0x2247680*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be578, lpOverlapped=0x0 | out: lpBuffer=0x2247680*, lpNumberOfBytesWritten=0x3be578*=0x2000, lpOverlapped=0x0) returned 1 [0107.745] CloseHandle (hObject=0x444) returned 1 [0107.745] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lt\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lt\\messages.json", lpFilePart=0x0) returned 0x98 [0107.745] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lt\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lt\\messages.json.xuy", lpFilePart=0x0) returned 0x9c [0107.745] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0107.745] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lt\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a8a165f, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a8a640a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2c11625a, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x416b)) returned 1 [0107.745] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0107.745] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lt\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lt\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lt\\messages.json.xuy")) returned 1 [0107.747] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0107.747] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lv", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lv", lpFilePart=0x0) returned 0x8a [0107.747] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lv\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lv\\", lpFilePart=0x0) returned 0x8b [0107.747] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lv\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d81b0 [0107.747] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0107.747] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0107.747] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0107.748] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0107.748] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0107.748] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0107.748] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0107.748] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lv", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lv", lpFilePart=0x0) returned 0x8a [0107.748] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lv\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lv\\", lpFilePart=0x0) returned 0x8b [0107.748] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lv\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7370 [0107.748] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0107.748] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0107.749] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0107.749] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0107.749] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0107.749] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0107.749] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lv\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lv\\messages.json", lpFilePart=0x0) returned 0x98 [0107.749] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0107.749] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lv\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x22c8fa8 | out: lpFileInformation=0x22c8fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a8b27d5, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a8b275a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7bcdbe90, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x41bf)) returned 1 [0107.750] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0107.750] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lv\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lv\\messages.json", lpFilePart=0x0) returned 0x98 [0107.750] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0107.750] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lv\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x22c9198 | out: lpFileInformation=0x22c9198*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a8b27d5, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a8b275a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7bcdbe90, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x41bf)) returned 1 [0107.750] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0107.750] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lv\\messages.json", nBufferLength=0x105, lpBuffer=0x3bdf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lv\\messages.json", lpFilePart=0x0) returned 0x98 [0107.750] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be440) returned 1 [0107.750] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lv\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0107.751] GetFileType (hFile=0x444) returned 0x1 [0107.751] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be3b0) returned 1 [0107.751] GetFileType (hFile=0x444) returned 0x1 [0107.751] ReadFile (in: hFile=0x444, lpBuffer=0x22cb6a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be4c8, lpOverlapped=0x0 | out: lpBuffer=0x22cb6a8*, lpNumberOfBytesRead=0x3be4c8*=0x1000, lpOverlapped=0x0) returned 1 [0107.803] CloseHandle (hObject=0x444) returned 1 [0107.804] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lv\\messages.json", nBufferLength=0x105, lpBuffer=0x3bdf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lv\\messages.json", lpFilePart=0x0) returned 0x98 [0107.804] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be440) returned 1 [0107.804] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lv\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0107.804] GetFileType (hFile=0x444) returned 0x1 [0107.804] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be3b0) returned 1 [0107.804] GetFileType (hFile=0x444) returned 0x1 [0107.804] WriteFile (in: hFile=0x444, lpBuffer=0x2140b58*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be578, lpOverlapped=0x0 | out: lpBuffer=0x2140b58*, lpNumberOfBytesWritten=0x3be578*=0x2000, lpOverlapped=0x0) returned 1 [0107.804] CloseHandle (hObject=0x444) returned 1 [0107.804] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lv\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lv\\messages.json", lpFilePart=0x0) returned 0x98 [0107.805] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lv\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lv\\messages.json.xuy", lpFilePart=0x0) returned 0x9c [0107.805] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0107.805] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lv\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a8b27d5, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a8b275a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2c1aae8a, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x41bf)) returned 1 [0107.805] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0107.805] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lv\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lv\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lv\\messages.json.xuy")) returned 1 [0107.806] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0107.806] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ml", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ml", lpFilePart=0x0) returned 0x8a [0107.806] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ml\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ml\\", lpFilePart=0x0) returned 0x8b [0107.806] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ml\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d81b0 [0107.807] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0107.807] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0107.807] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0107.807] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0107.807] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0107.807] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0107.807] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0107.807] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ml", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ml", lpFilePart=0x0) returned 0x8a [0107.807] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ml\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ml\\", lpFilePart=0x0) returned 0x8b [0107.807] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ml\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7370 [0107.808] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0107.808] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0107.808] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0107.808] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0107.808] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0107.808] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0107.808] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ml\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ml\\messages.json", lpFilePart=0x0) returned 0x98 [0107.808] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0107.808] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ml\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ml\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x214e550 | out: lpFileInformation=0x214e550*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a8beb26, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a8beaaa, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7bcde5af, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x583f)) returned 1 [0107.808] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0107.808] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ml\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ml\\messages.json", lpFilePart=0x0) returned 0x98 [0107.809] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0107.809] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ml\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ml\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x214e740 | out: lpFileInformation=0x214e740*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a8beb26, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a8beaaa, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7bcde5af, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x583f)) returned 1 [0107.809] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0107.809] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ml\\messages.json", nBufferLength=0x105, lpBuffer=0x3bdf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ml\\messages.json", lpFilePart=0x0) returned 0x98 [0107.809] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be440) returned 1 [0107.809] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ml\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ml\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0107.810] GetFileType (hFile=0x444) returned 0x1 [0107.810] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be3b0) returned 1 [0107.810] GetFileType (hFile=0x444) returned 0x1 [0107.810] ReadFile (in: hFile=0x444, lpBuffer=0x2150c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be4c8, lpOverlapped=0x0 | out: lpBuffer=0x2150c50*, lpNumberOfBytesRead=0x3be4c8*=0x1000, lpOverlapped=0x0) returned 1 [0107.870] CloseHandle (hObject=0x444) returned 1 [0107.870] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ml\\messages.json", nBufferLength=0x105, lpBuffer=0x3bdf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ml\\messages.json", lpFilePart=0x0) returned 0x98 [0107.870] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be440) returned 1 [0107.870] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ml\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ml\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0107.870] GetFileType (hFile=0x444) returned 0x1 [0107.870] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be3b0) returned 1 [0107.870] GetFileType (hFile=0x444) returned 0x1 [0107.870] WriteFile (in: hFile=0x444, lpBuffer=0x214e910*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be578, lpOverlapped=0x0 | out: lpBuffer=0x214e910*, lpNumberOfBytesWritten=0x3be578*=0x2000, lpOverlapped=0x0) returned 1 [0107.871] CloseHandle (hObject=0x444) returned 1 [0107.871] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ml\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ml\\messages.json", lpFilePart=0x0) returned 0x98 [0107.871] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ml\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ml\\messages.json.xuy", lpFilePart=0x0) returned 0x9c [0107.871] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0107.871] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ml\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ml\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a8beb26, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a8beaaa, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2c243840, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x583f)) returned 1 [0107.871] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0107.871] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ml\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ml\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ml\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ml\\messages.json.xuy")) returned 1 [0107.872] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0107.872] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\mr", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\mr", lpFilePart=0x0) returned 0x8a [0107.872] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\mr\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\mr\\", lpFilePart=0x0) returned 0x8b [0107.872] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\mr\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d78b0 [0107.873] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0107.873] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0107.873] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0107.873] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0107.873] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0107.873] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0107.873] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0107.873] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\mr", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\mr", lpFilePart=0x0) returned 0x8a [0107.873] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\mr\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\mr\\", lpFilePart=0x0) returned 0x8b [0107.873] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\mr\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7df0 [0107.874] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0107.874] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0107.874] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0107.874] FindClose (in: hFindFile=0x5d7df0 | out: hFindFile=0x5d7df0) returned 1 [0107.874] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0107.874] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0107.874] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\mr\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\mr\\messages.json", lpFilePart=0x0) returned 0x98 [0107.874] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0107.874] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\mr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\mr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x21d0238 | out: lpFileInformation=0x21d0238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a8c8767, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a8c86ea, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7bcde5af, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x5224)) returned 1 [0107.876] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0107.876] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\mr\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\mr\\messages.json", lpFilePart=0x0) returned 0x98 [0107.876] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0107.876] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\mr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\mr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x21d0428 | out: lpFileInformation=0x21d0428*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a8c8767, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a8c86ea, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7bcde5af, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x5224)) returned 1 [0107.876] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0107.876] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\mr\\messages.json", nBufferLength=0x105, lpBuffer=0x3bdf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\mr\\messages.json", lpFilePart=0x0) returned 0x98 [0107.876] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be440) returned 1 [0107.876] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\mr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\mr\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0107.877] GetFileType (hFile=0x444) returned 0x1 [0107.877] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be3b0) returned 1 [0107.877] GetFileType (hFile=0x444) returned 0x1 [0107.877] ReadFile (in: hFile=0x444, lpBuffer=0x21d2938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be4c8, lpOverlapped=0x0 | out: lpBuffer=0x21d2938*, lpNumberOfBytesRead=0x3be4c8*=0x1000, lpOverlapped=0x0) returned 1 [0107.890] CloseHandle (hObject=0x444) returned 1 [0107.890] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\mr\\messages.json", nBufferLength=0x105, lpBuffer=0x3bdf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\mr\\messages.json", lpFilePart=0x0) returned 0x98 [0107.890] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be440) returned 1 [0107.890] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\mr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\mr\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0107.890] GetFileType (hFile=0x444) returned 0x1 [0107.891] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be3b0) returned 1 [0107.891] GetFileType (hFile=0x444) returned 0x1 [0107.891] WriteFile (in: hFile=0x444, lpBuffer=0x21d05f8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be578, lpOverlapped=0x0 | out: lpBuffer=0x21d05f8*, lpNumberOfBytesWritten=0x3be578*=0x2000, lpOverlapped=0x0) returned 1 [0107.891] CloseHandle (hObject=0x444) returned 1 [0107.891] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\mr\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\mr\\messages.json", lpFilePart=0x0) returned 0x98 [0107.891] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\mr\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\mr\\messages.json.xuy", lpFilePart=0x0) returned 0x9c [0107.891] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0107.891] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\mr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\mr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a8c8767, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a8c86ea, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2c28fc18, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x5224)) returned 1 [0107.891] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0107.891] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\mr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\mr\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\mr\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\mr\\messages.json.xuy")) returned 1 [0107.892] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0107.892] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ms", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ms", lpFilePart=0x0) returned 0x8a [0107.892] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ms\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ms\\", lpFilePart=0x0) returned 0x8b [0107.893] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ms\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7af0 [0107.893] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0107.893] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0107.893] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0107.893] FindClose (in: hFindFile=0x5d7af0 | out: hFindFile=0x5d7af0) returned 1 [0107.893] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0107.893] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0107.893] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0107.893] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ms", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ms", lpFilePart=0x0) returned 0x8a [0107.893] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ms\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ms\\", lpFilePart=0x0) returned 0x8b [0107.893] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ms\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7eb0 [0107.894] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0107.894] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0107.894] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0107.894] FindClose (in: hFindFile=0x5d7eb0 | out: hFindFile=0x5d7eb0) returned 1 [0107.894] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0107.894] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0107.894] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ms\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ms\\messages.json", lpFilePart=0x0) returned 0x98 [0107.894] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0107.894] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ms\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ms\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x2251f20 | out: lpFileInformation=0x2251f20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a8d23a6, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a8d232a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7bce0cc2, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x3f8b)) returned 1 [0107.895] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0107.895] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ms\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ms\\messages.json", lpFilePart=0x0) returned 0x98 [0107.895] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0107.895] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ms\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ms\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x2252110 | out: lpFileInformation=0x2252110*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a8d23a6, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a8d232a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7bce0cc2, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x3f8b)) returned 1 [0107.895] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0107.895] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ms\\messages.json", nBufferLength=0x105, lpBuffer=0x3bdf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ms\\messages.json", lpFilePart=0x0) returned 0x98 [0107.895] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be440) returned 1 [0107.895] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ms\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ms\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0107.896] GetFileType (hFile=0x444) returned 0x1 [0107.896] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be3b0) returned 1 [0107.896] GetFileType (hFile=0x444) returned 0x1 [0107.896] ReadFile (in: hFile=0x444, lpBuffer=0x2254620, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be4c8, lpOverlapped=0x0 | out: lpBuffer=0x2254620*, lpNumberOfBytesRead=0x3be4c8*=0x1000, lpOverlapped=0x0) returned 1 [0107.912] CloseHandle (hObject=0x444) returned 1 [0107.912] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ms\\messages.json", nBufferLength=0x105, lpBuffer=0x3bdf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ms\\messages.json", lpFilePart=0x0) returned 0x98 [0107.912] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be440) returned 1 [0107.912] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ms\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ms\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0107.912] GetFileType (hFile=0x444) returned 0x1 [0107.912] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be3b0) returned 1 [0107.912] GetFileType (hFile=0x444) returned 0x1 [0107.912] WriteFile (in: hFile=0x444, lpBuffer=0x22522e0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be578, lpOverlapped=0x0 | out: lpBuffer=0x22522e0*, lpNumberOfBytesWritten=0x3be578*=0x2000, lpOverlapped=0x0) returned 1 [0107.912] CloseHandle (hObject=0x444) returned 1 [0107.913] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ms\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ms\\messages.json", lpFilePart=0x0) returned 0x98 [0107.913] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ms\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ms\\messages.json.xuy", lpFilePart=0x0) returned 0x9c [0107.913] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0107.913] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ms\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ms\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a8d23a6, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a8d232a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2c2b6280, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x3f8b)) returned 1 [0107.913] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0107.913] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ms\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ms\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ms\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ms\\messages.json.xuy")) returned 1 [0107.914] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0107.914] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nb", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nb", lpFilePart=0x0) returned 0x8a [0107.914] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nb\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nb\\", lpFilePart=0x0) returned 0x8b [0107.914] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nb\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d8090 [0107.914] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0107.914] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0107.914] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0107.914] FindClose (in: hFindFile=0x5d8090 | out: hFindFile=0x5d8090) returned 1 [0107.915] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0107.915] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0107.915] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0107.915] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nb", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nb", lpFilePart=0x0) returned 0x8a [0107.915] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nb\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nb\\", lpFilePart=0x0) returned 0x8b [0107.915] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nb\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7d30 [0107.915] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0107.915] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0107.915] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0107.915] FindClose (in: hFindFile=0x5d7d30 | out: hFindFile=0x5d7d30) returned 1 [0107.915] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0107.915] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0107.915] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nb\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nb\\messages.json", lpFilePart=0x0) returned 0x98 [0107.915] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0107.916] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nb\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nb\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x22d3c08 | out: lpFileInformation=0x22d3c08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a8dbfed, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a8dbf6a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7bce33cb, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x3ebc)) returned 1 [0107.917] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0107.917] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nb\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nb\\messages.json", lpFilePart=0x0) returned 0x98 [0107.917] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0107.917] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nb\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nb\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x22d3df8 | out: lpFileInformation=0x22d3df8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a8dbfed, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a8dbf6a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7bce33cb, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x3ebc)) returned 1 [0107.917] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0107.917] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nb\\messages.json", nBufferLength=0x105, lpBuffer=0x3bdf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nb\\messages.json", lpFilePart=0x0) returned 0x98 [0107.917] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be440) returned 1 [0107.917] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nb\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nb\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0107.918] GetFileType (hFile=0x444) returned 0x1 [0107.918] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be3b0) returned 1 [0107.918] GetFileType (hFile=0x444) returned 0x1 [0107.918] ReadFile (in: hFile=0x444, lpBuffer=0x22d6308, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be4c8, lpOverlapped=0x0 | out: lpBuffer=0x22d6308*, lpNumberOfBytesRead=0x3be4c8*=0x1000, lpOverlapped=0x0) returned 1 [0107.979] CloseHandle (hObject=0x444) returned 1 [0107.979] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nb\\messages.json", nBufferLength=0x105, lpBuffer=0x3bdf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nb\\messages.json", lpFilePart=0x0) returned 0x98 [0107.979] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be440) returned 1 [0107.979] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nb\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nb\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0107.979] GetFileType (hFile=0x444) returned 0x1 [0107.979] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be3b0) returned 1 [0107.979] GetFileType (hFile=0x444) returned 0x1 [0107.979] WriteFile (in: hFile=0x444, lpBuffer=0x2146518*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be578, lpOverlapped=0x0 | out: lpBuffer=0x2146518*, lpNumberOfBytesWritten=0x3be578*=0x2000, lpOverlapped=0x0) returned 1 [0107.980] CloseHandle (hObject=0x444) returned 1 [0107.980] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nb\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nb\\messages.json", lpFilePart=0x0) returned 0x98 [0107.980] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nb\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nb\\messages.json.xuy", lpFilePart=0x0) returned 0x9c [0107.980] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0107.980] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nb\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nb\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a8dbfed, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a8dbf6a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2c34e7c7, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x3ebc)) returned 1 [0107.980] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0107.980] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nb\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nb\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nb\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nb\\messages.json.xuy")) returned 1 [0107.981] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0107.981] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nl", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nl", lpFilePart=0x0) returned 0x8a [0107.981] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nl\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nl\\", lpFilePart=0x0) returned 0x8b [0107.981] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nl\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d73d0 [0107.981] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0107.981] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0107.982] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0107.982] FindClose (in: hFindFile=0x5d73d0 | out: hFindFile=0x5d73d0) returned 1 [0107.982] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0107.982] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0107.982] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0107.982] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nl", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nl", lpFilePart=0x0) returned 0x8a [0107.982] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nl\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nl\\", lpFilePart=0x0) returned 0x8b [0107.982] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nl\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7c70 [0107.982] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0107.982] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0107.982] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0107.982] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0107.983] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0107.983] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0107.983] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nl\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nl\\messages.json", lpFilePart=0x0) returned 0x98 [0107.983] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0107.983] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x215b2b0 | out: lpFileInformation=0x215b2b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a8e8332, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a8ea9ca, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7bce33cb, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x3f45)) returned 1 [0107.983] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0107.983] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nl\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nl\\messages.json", lpFilePart=0x0) returned 0x98 [0107.983] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0107.983] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x215b4a0 | out: lpFileInformation=0x215b4a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a8e8332, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a8ea9ca, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7bce33cb, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x3f45)) returned 1 [0107.983] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0107.983] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nl\\messages.json", nBufferLength=0x105, lpBuffer=0x3bdf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nl\\messages.json", lpFilePart=0x0) returned 0x98 [0107.983] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be440) returned 1 [0107.983] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nl\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0107.984] GetFileType (hFile=0x444) returned 0x1 [0107.984] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be3b0) returned 1 [0107.984] GetFileType (hFile=0x444) returned 0x1 [0107.984] ReadFile (in: hFile=0x444, lpBuffer=0x215d9b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be4c8, lpOverlapped=0x0 | out: lpBuffer=0x215d9b0*, lpNumberOfBytesRead=0x3be4c8*=0x1000, lpOverlapped=0x0) returned 1 [0107.996] CloseHandle (hObject=0x444) returned 1 [0107.996] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nl\\messages.json", nBufferLength=0x105, lpBuffer=0x3bdf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nl\\messages.json", lpFilePart=0x0) returned 0x98 [0107.996] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be440) returned 1 [0107.996] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nl\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0107.996] GetFileType (hFile=0x444) returned 0x1 [0107.996] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be3b0) returned 1 [0107.996] GetFileType (hFile=0x444) returned 0x1 [0107.996] WriteFile (in: hFile=0x444, lpBuffer=0x215b670*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be578, lpOverlapped=0x0 | out: lpBuffer=0x215b670*, lpNumberOfBytesWritten=0x3be578*=0x2000, lpOverlapped=0x0) returned 1 [0107.997] CloseHandle (hObject=0x444) returned 1 [0107.997] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nl\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nl\\messages.json", lpFilePart=0x0) returned 0x98 [0107.997] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nl\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nl\\messages.json.xuy", lpFilePart=0x0) returned 0x9c [0107.997] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0107.997] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a8e8332, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a8ea9ca, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2c374a32, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x3f45)) returned 1 [0107.997] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0107.997] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nl\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nl\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nl\\messages.json.xuy")) returned 1 [0107.998] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0107.998] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pl", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pl", lpFilePart=0x0) returned 0x8a [0107.998] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pl\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pl\\", lpFilePart=0x0) returned 0x8b [0107.998] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pl\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7550 [0107.998] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0107.999] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0107.999] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0107.999] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0107.999] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0107.999] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0107.999] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0107.999] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pl", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pl", lpFilePart=0x0) returned 0x8a [0107.999] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pl\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pl\\", lpFilePart=0x0) returned 0x8b [0107.999] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pl\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d79d0 [0107.999] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0107.999] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0107.999] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0108.000] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0108.000] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0108.000] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0108.000] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pl\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pl\\messages.json", lpFilePart=0x0) returned 0x98 [0108.000] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0108.000] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x21dcf98 | out: lpFileInformation=0x21dcf98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a8f1f79, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a8f460a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7bce33cb, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x3fd7)) returned 1 [0108.001] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0108.001] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pl\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pl\\messages.json", lpFilePart=0x0) returned 0x98 [0108.001] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0108.001] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x21dd188 | out: lpFileInformation=0x21dd188*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a8f1f79, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a8f460a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7bce33cb, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x3fd7)) returned 1 [0108.001] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0108.001] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pl\\messages.json", nBufferLength=0x105, lpBuffer=0x3bdf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pl\\messages.json", lpFilePart=0x0) returned 0x98 [0108.001] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be440) returned 1 [0108.001] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pl\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0108.002] GetFileType (hFile=0x444) returned 0x1 [0108.002] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be3b0) returned 1 [0108.002] GetFileType (hFile=0x444) returned 0x1 [0108.002] ReadFile (in: hFile=0x444, lpBuffer=0x21df698, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be4c8, lpOverlapped=0x0 | out: lpBuffer=0x21df698*, lpNumberOfBytesRead=0x3be4c8*=0x1000, lpOverlapped=0x0) returned 1 [0108.014] CloseHandle (hObject=0x444) returned 1 [0108.014] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pl\\messages.json", nBufferLength=0x105, lpBuffer=0x3bdf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pl\\messages.json", lpFilePart=0x0) returned 0x98 [0108.014] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be440) returned 1 [0108.014] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pl\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0108.015] GetFileType (hFile=0x444) returned 0x1 [0108.015] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be3b0) returned 1 [0108.015] GetFileType (hFile=0x444) returned 0x1 [0108.015] WriteFile (in: hFile=0x444, lpBuffer=0x21dd358*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be578, lpOverlapped=0x0 | out: lpBuffer=0x21dd358*, lpNumberOfBytesWritten=0x3be578*=0x2000, lpOverlapped=0x0) returned 1 [0108.015] CloseHandle (hObject=0x444) returned 1 [0108.015] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pl\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pl\\messages.json", lpFilePart=0x0) returned 0x98 [0108.015] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pl\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pl\\messages.json.xuy", lpFilePart=0x0) returned 0x9c [0108.015] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0108.015] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a8f1f79, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a8f460a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2c39abef, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x3fd7)) returned 1 [0108.015] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0108.015] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pl\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pl\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pl\\messages.json.xuy")) returned 1 [0108.017] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0108.017] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt", lpFilePart=0x0) returned 0x8a [0108.017] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt\\", lpFilePart=0x0) returned 0x8b [0108.017] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d78b0 [0108.017] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0108.017] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0108.018] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0108.018] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0108.018] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0108.018] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0108.018] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0108.018] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt", lpFilePart=0x0) returned 0x8a [0108.018] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt\\", lpFilePart=0x0) returned 0x8b [0108.018] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7c70 [0108.018] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0108.018] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0108.018] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0108.019] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0108.019] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0108.019] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0108.019] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt\\messages.json", lpFilePart=0x0) returned 0x98 [0108.019] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0108.019] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x225ec80 | out: lpFileInformation=0x225ec80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a905802, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a90577a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7bce5ae1, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x3fdc)) returned 1 [0108.019] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0108.019] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt\\messages.json", lpFilePart=0x0) returned 0x98 [0108.020] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0108.020] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x225ee70 | out: lpFileInformation=0x225ee70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a905802, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a90577a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7bce5ae1, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x3fdc)) returned 1 [0108.020] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0108.020] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt\\messages.json", nBufferLength=0x105, lpBuffer=0x3bdf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt\\messages.json", lpFilePart=0x0) returned 0x98 [0108.020] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be440) returned 1 [0108.020] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0108.020] GetFileType (hFile=0x444) returned 0x1 [0108.020] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be3b0) returned 1 [0108.020] GetFileType (hFile=0x444) returned 0x1 [0108.021] ReadFile (in: hFile=0x444, lpBuffer=0x2261380, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be4c8, lpOverlapped=0x0 | out: lpBuffer=0x2261380*, lpNumberOfBytesRead=0x3be4c8*=0x1000, lpOverlapped=0x0) returned 1 [0108.037] CloseHandle (hObject=0x444) returned 1 [0108.038] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt\\messages.json", nBufferLength=0x105, lpBuffer=0x3bdf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt\\messages.json", lpFilePart=0x0) returned 0x98 [0108.038] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be440) returned 1 [0108.038] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0108.038] GetFileType (hFile=0x444) returned 0x1 [0108.038] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be3b0) returned 1 [0108.038] GetFileType (hFile=0x444) returned 0x1 [0108.038] WriteFile (in: hFile=0x444, lpBuffer=0x225f040*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be578, lpOverlapped=0x0 | out: lpBuffer=0x225f040*, lpNumberOfBytesWritten=0x3be578*=0x2000, lpOverlapped=0x0) returned 1 [0108.039] CloseHandle (hObject=0x444) returned 1 [0108.039] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt\\messages.json", lpFilePart=0x0) returned 0x98 [0108.039] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt\\messages.json.xuy", lpFilePart=0x0) returned 0x9c [0108.039] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0108.039] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a905802, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a90577a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2c3e7238, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x3fdc)) returned 1 [0108.039] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0108.039] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt\\messages.json.xuy")) returned 1 [0108.040] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0108.041] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_BR", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_BR", lpFilePart=0x0) returned 0x8d [0108.041] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_BR\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_BR\\", lpFilePart=0x0) returned 0x8e [0108.041] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_BR\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7e50 [0108.041] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0108.041] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0108.041] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0108.041] FindClose (in: hFindFile=0x5d7e50 | out: hFindFile=0x5d7e50) returned 1 [0108.042] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0108.042] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0108.042] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0108.042] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_BR", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_BR", lpFilePart=0x0) returned 0x8d [0108.042] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_BR\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_BR\\", lpFilePart=0x0) returned 0x8e [0108.042] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_BR\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7eb0 [0108.042] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0108.042] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0108.042] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0108.043] FindClose (in: hFindFile=0x5d7eb0 | out: hFindFile=0x5d7eb0) returned 1 [0108.043] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0108.043] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0108.043] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_BR\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_BR\\messages.json", lpFilePart=0x0) returned 0x9b [0108.043] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0108.043] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_br\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x22e09c8 | out: lpFileInformation=0x22e09c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a90cd37, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a90ccaa, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7bce5ae1, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x3fdc)) returned 1 [0108.043] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0108.043] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_BR\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_BR\\messages.json", lpFilePart=0x0) returned 0x9b [0108.043] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0108.043] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_br\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x22e0bb8 | out: lpFileInformation=0x22e0bb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a90cd37, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a90ccaa, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7bce5ae1, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x3fdc)) returned 1 [0108.043] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0108.044] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_BR\\messages.json", nBufferLength=0x105, lpBuffer=0x3bdf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_BR\\messages.json", lpFilePart=0x0) returned 0x9b [0108.044] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be440) returned 1 [0108.044] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_br\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0108.045] GetFileType (hFile=0x444) returned 0x1 [0108.045] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be3b0) returned 1 [0108.045] GetFileType (hFile=0x444) returned 0x1 [0108.045] ReadFile (in: hFile=0x444, lpBuffer=0x22e30c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be4c8, lpOverlapped=0x0 | out: lpBuffer=0x22e30c8*, lpNumberOfBytesRead=0x3be4c8*=0x1000, lpOverlapped=0x0) returned 1 [0108.100] CloseHandle (hObject=0x444) returned 1 [0108.101] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_BR\\messages.json", nBufferLength=0x105, lpBuffer=0x3bdf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_BR\\messages.json", lpFilePart=0x0) returned 0x9b [0108.101] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be440) returned 1 [0108.101] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_br\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0108.101] GetFileType (hFile=0x444) returned 0x1 [0108.101] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be3b0) returned 1 [0108.101] GetFileType (hFile=0x444) returned 0x1 [0108.101] WriteFile (in: hFile=0x444, lpBuffer=0x214bed8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be578, lpOverlapped=0x0 | out: lpBuffer=0x214bed8*, lpNumberOfBytesWritten=0x3be578*=0x2000, lpOverlapped=0x0) returned 1 [0108.101] CloseHandle (hObject=0x444) returned 1 [0108.101] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_BR\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_BR\\messages.json", lpFilePart=0x0) returned 0x9b [0108.102] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_BR\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_BR\\messages.json.xuy", lpFilePart=0x0) returned 0x9f [0108.102] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0108.102] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_br\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a90cd37, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a90ccaa, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2c47fc7c, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x3fdc)) returned 1 [0108.102] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0108.102] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_br\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_BR\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_br\\messages.json.xuy")) returned 1 [0108.103] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0108.103] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_PT", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_PT", lpFilePart=0x0) returned 0x8d [0108.103] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_PT\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_PT\\", lpFilePart=0x0) returned 0x8e [0108.103] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_PT\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7550 [0108.103] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0108.103] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0108.104] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0108.104] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0108.104] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0108.104] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0108.104] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0108.104] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_PT", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_PT", lpFilePart=0x0) returned 0x8d [0108.104] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_PT\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_PT\\", lpFilePart=0x0) returned 0x8e [0108.104] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_PT\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7a30 [0108.104] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0108.104] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0108.104] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0108.105] FindClose (in: hFindFile=0x5d7a30 | out: hFindFile=0x5d7a30) returned 1 [0108.105] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0108.105] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0108.105] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_PT\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_PT\\messages.json", lpFilePart=0x0) returned 0x9b [0108.105] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0108.105] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_pt\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x21680b0 | out: lpFileInformation=0x21680b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a9142aa, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a9168ea, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7bce81f7, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x3fdc)) returned 1 [0108.105] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0108.105] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_PT\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_PT\\messages.json", lpFilePart=0x0) returned 0x9b [0108.105] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0108.105] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_pt\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x21682a0 | out: lpFileInformation=0x21682a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a9142aa, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a9168ea, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7bce81f7, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x3fdc)) returned 1 [0108.105] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0108.105] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_PT\\messages.json", nBufferLength=0x105, lpBuffer=0x3bdf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_PT\\messages.json", lpFilePart=0x0) returned 0x9b [0108.105] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be440) returned 1 [0108.105] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_pt\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0108.106] GetFileType (hFile=0x444) returned 0x1 [0108.106] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be3b0) returned 1 [0108.106] GetFileType (hFile=0x444) returned 0x1 [0108.106] ReadFile (in: hFile=0x444, lpBuffer=0x216a7b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be4c8, lpOverlapped=0x0 | out: lpBuffer=0x216a7b0*, lpNumberOfBytesRead=0x3be4c8*=0x1000, lpOverlapped=0x0) returned 1 [0108.121] CloseHandle (hObject=0x444) returned 1 [0108.121] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_PT\\messages.json", nBufferLength=0x105, lpBuffer=0x3bdf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_PT\\messages.json", lpFilePart=0x0) returned 0x9b [0108.121] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be440) returned 1 [0108.121] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_pt\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0108.122] GetFileType (hFile=0x444) returned 0x1 [0108.122] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be3b0) returned 1 [0108.122] GetFileType (hFile=0x444) returned 0x1 [0108.122] WriteFile (in: hFile=0x444, lpBuffer=0x2168470*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be578, lpOverlapped=0x0 | out: lpBuffer=0x2168470*, lpNumberOfBytesWritten=0x3be578*=0x2000, lpOverlapped=0x0) returned 1 [0108.122] CloseHandle (hObject=0x444) returned 1 [0108.122] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_PT\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_PT\\messages.json", lpFilePart=0x0) returned 0x9b [0108.122] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_PT\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_PT\\messages.json.xuy", lpFilePart=0x0) returned 0x9f [0108.122] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0108.122] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_pt\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a9142aa, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a9168ea, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2c4a619a, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x3fdc)) returned 1 [0108.122] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0108.122] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_pt\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_PT\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_pt\\messages.json.xuy")) returned 1 [0108.123] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0108.123] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ro", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ro", lpFilePart=0x0) returned 0x8a [0108.123] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ro\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ro\\", lpFilePart=0x0) returned 0x8b [0108.124] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ro\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d81b0 [0108.124] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0108.124] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0108.124] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0108.124] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0108.124] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0108.124] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0108.124] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0108.124] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ro", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ro", lpFilePart=0x0) returned 0x8a [0108.124] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ro\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ro\\", lpFilePart=0x0) returned 0x8b [0108.124] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ro\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7d90 [0108.125] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0108.125] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0108.125] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0108.125] FindClose (in: hFindFile=0x5d7d90 | out: hFindFile=0x5d7d90) returned 1 [0108.125] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0108.125] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0108.125] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ro\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ro\\messages.json", lpFilePart=0x0) returned 0x98 [0108.125] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0108.125] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ro\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x21e9d98 | out: lpFileInformation=0x21e9d98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a94c4dc, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a94eb5a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7bce81f7, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x40db)) returned 1 [0108.127] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0108.127] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ro\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ro\\messages.json", lpFilePart=0x0) returned 0x98 [0108.127] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0108.127] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ro\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x21e9f88 | out: lpFileInformation=0x21e9f88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a94c4dc, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a94eb5a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7bce81f7, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x40db)) returned 1 [0108.127] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0108.127] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ro\\messages.json", nBufferLength=0x105, lpBuffer=0x3bdf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ro\\messages.json", lpFilePart=0x0) returned 0x98 [0108.127] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be440) returned 1 [0108.127] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ro\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0108.128] GetFileType (hFile=0x444) returned 0x1 [0108.128] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be3b0) returned 1 [0108.128] GetFileType (hFile=0x444) returned 0x1 [0108.128] ReadFile (in: hFile=0x444, lpBuffer=0x21ec498, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be4c8, lpOverlapped=0x0 | out: lpBuffer=0x21ec498*, lpNumberOfBytesRead=0x3be4c8*=0x1000, lpOverlapped=0x0) returned 1 [0108.147] CloseHandle (hObject=0x444) returned 1 [0108.148] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ro\\messages.json", nBufferLength=0x105, lpBuffer=0x3bdf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ro\\messages.json", lpFilePart=0x0) returned 0x98 [0108.148] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be440) returned 1 [0108.148] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ro\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0108.148] GetFileType (hFile=0x444) returned 0x1 [0108.148] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be3b0) returned 1 [0108.148] GetFileType (hFile=0x444) returned 0x1 [0108.148] WriteFile (in: hFile=0x444, lpBuffer=0x21ea158*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be578, lpOverlapped=0x0 | out: lpBuffer=0x21ea158*, lpNumberOfBytesWritten=0x3be578*=0x2000, lpOverlapped=0x0) returned 1 [0108.149] CloseHandle (hObject=0x444) returned 1 [0108.149] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ro\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ro\\messages.json", lpFilePart=0x0) returned 0x98 [0108.149] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ro\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ro\\messages.json.xuy", lpFilePart=0x0) returned 0x9c [0108.149] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0108.149] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ro\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a94c4dc, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a94eb5a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2c4f2267, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x40db)) returned 1 [0108.149] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0108.149] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ro\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ro\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ro\\messages.json.xuy")) returned 1 [0108.151] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0108.151] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ru", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ru", lpFilePart=0x0) returned 0x8a [0108.151] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ru\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ru\\", lpFilePart=0x0) returned 0x8b [0108.151] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ru\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7f10 [0108.152] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0108.152] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0108.152] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0108.152] FindClose (in: hFindFile=0x5d7f10 | out: hFindFile=0x5d7f10) returned 1 [0108.152] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0108.152] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0108.152] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0108.152] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ru", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ru", lpFilePart=0x0) returned 0x8a [0108.152] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ru\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ru\\", lpFilePart=0x0) returned 0x8b [0108.152] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ru\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d79d0 [0108.153] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0108.153] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0108.153] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0108.153] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0108.153] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0108.153] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0108.153] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ru\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ru\\messages.json", lpFilePart=0x0) returned 0x98 [0108.153] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0108.154] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ru\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x226ba80 | out: lpFileInformation=0x226ba80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a95d65e, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a95fcca, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7bcea907, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x490e)) returned 1 [0108.154] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0108.154] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ru\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ru\\messages.json", lpFilePart=0x0) returned 0x98 [0108.154] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0108.154] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ru\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x226bc70 | out: lpFileInformation=0x226bc70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a95d65e, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a95fcca, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7bcea907, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x490e)) returned 1 [0108.154] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0108.154] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ru\\messages.json", nBufferLength=0x105, lpBuffer=0x3bdf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ru\\messages.json", lpFilePart=0x0) returned 0x98 [0108.154] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be440) returned 1 [0108.154] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ru\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0108.155] GetFileType (hFile=0x444) returned 0x1 [0108.155] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be3b0) returned 1 [0108.155] GetFileType (hFile=0x444) returned 0x1 [0108.155] ReadFile (in: hFile=0x444, lpBuffer=0x226e180, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be4c8, lpOverlapped=0x0 | out: lpBuffer=0x226e180*, lpNumberOfBytesRead=0x3be4c8*=0x1000, lpOverlapped=0x0) returned 1 [0108.181] CloseHandle (hObject=0x444) returned 1 [0108.181] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ru\\messages.json", nBufferLength=0x105, lpBuffer=0x3bdf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ru\\messages.json", lpFilePart=0x0) returned 0x98 [0108.181] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be440) returned 1 [0108.181] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ru\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0108.182] GetFileType (hFile=0x444) returned 0x1 [0108.182] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be3b0) returned 1 [0108.182] GetFileType (hFile=0x444) returned 0x1 [0108.182] WriteFile (in: hFile=0x444, lpBuffer=0x226be40*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be578, lpOverlapped=0x0 | out: lpBuffer=0x226be40*, lpNumberOfBytesWritten=0x3be578*=0x2000, lpOverlapped=0x0) returned 1 [0108.182] CloseHandle (hObject=0x444) returned 1 [0108.182] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ru\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ru\\messages.json", lpFilePart=0x0) returned 0x98 [0108.182] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ru\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ru\\messages.json.xuy", lpFilePart=0x0) returned 0x9c [0108.182] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0108.183] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ru\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a95d65e, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a95fcca, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2c53e660, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x490e)) returned 1 [0108.183] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0108.183] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ru\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ru\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ru\\messages.json.xuy")) returned 1 [0108.184] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0108.184] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sk", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sk", lpFilePart=0x0) returned 0x8a [0108.184] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sk\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sk\\", lpFilePart=0x0) returned 0x8b [0108.184] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sk\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d79d0 [0108.185] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0108.185] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0108.185] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0108.185] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0108.185] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0108.185] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0108.185] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0108.185] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sk", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sk", lpFilePart=0x0) returned 0x8a [0108.185] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sk\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sk\\", lpFilePart=0x0) returned 0x8b [0108.185] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sk\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d78b0 [0108.186] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0108.186] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0108.186] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0108.186] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0108.186] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0108.186] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0108.186] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sk\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sk\\messages.json", lpFilePart=0x0) returned 0x98 [0108.186] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0108.186] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sk\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x22ed768 | out: lpFileInformation=0x22ed768*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a9699b2, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a96990a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7bcea907, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x40fd)) returned 1 [0108.188] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0108.188] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sk\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sk\\messages.json", lpFilePart=0x0) returned 0x98 [0108.188] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0108.188] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sk\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x22ed958 | out: lpFileInformation=0x22ed958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a9699b2, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a96990a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7bcea907, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x40fd)) returned 1 [0108.188] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0108.188] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sk\\messages.json", nBufferLength=0x105, lpBuffer=0x3bdf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sk\\messages.json", lpFilePart=0x0) returned 0x98 [0108.188] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be440) returned 1 [0108.188] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sk\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0108.189] GetFileType (hFile=0x444) returned 0x1 [0108.189] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be3b0) returned 1 [0108.189] GetFileType (hFile=0x444) returned 0x1 [0108.189] ReadFile (in: hFile=0x444, lpBuffer=0x22efe68, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be4c8, lpOverlapped=0x0 | out: lpBuffer=0x22efe68*, lpNumberOfBytesRead=0x3be4c8*=0x1000, lpOverlapped=0x0) returned 1 [0108.252] CloseHandle (hObject=0x444) returned 1 [0108.252] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sk\\messages.json", nBufferLength=0x105, lpBuffer=0x3bdf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sk\\messages.json", lpFilePart=0x0) returned 0x98 [0108.253] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be440) returned 1 [0108.253] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sk\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0108.253] GetFileType (hFile=0x444) returned 0x1 [0108.253] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be3b0) returned 1 [0108.253] GetFileType (hFile=0x444) returned 0x1 [0108.253] WriteFile (in: hFile=0x444, lpBuffer=0x2151898*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be578, lpOverlapped=0x0 | out: lpBuffer=0x2151898*, lpNumberOfBytesWritten=0x3be578*=0x2000, lpOverlapped=0x0) returned 1 [0108.253] CloseHandle (hObject=0x444) returned 1 [0108.254] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sk\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sk\\messages.json", lpFilePart=0x0) returned 0x98 [0108.254] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sk\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sk\\messages.json.xuy", lpFilePart=0x0) returned 0x9c [0108.254] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0108.254] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sk\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a9699b2, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a96990a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2c5fd399, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x40fd)) returned 1 [0108.254] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0108.254] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sk\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sk\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sk\\messages.json.xuy")) returned 1 [0108.255] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0108.255] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sl", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sl", lpFilePart=0x0) returned 0x8a [0108.255] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sl\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sl\\", lpFilePart=0x0) returned 0x8b [0108.256] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sl\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7670 [0108.256] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0108.256] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0108.256] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0108.256] FindClose (in: hFindFile=0x5d7670 | out: hFindFile=0x5d7670) returned 1 [0108.256] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0108.256] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0108.256] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0108.257] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sl", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sl", lpFilePart=0x0) returned 0x8a [0108.257] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sl\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sl\\", lpFilePart=0x0) returned 0x8b [0108.257] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sl\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7370 [0108.257] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0108.257] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0108.257] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0108.257] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0108.257] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0108.258] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0108.258] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sl\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sl\\messages.json", lpFilePart=0x0) returned 0x98 [0108.258] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0108.258] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x2174e10 | out: lpFileInformation=0x2174e10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a975d03, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a97836a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7bced010, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x407a)) returned 1 [0108.258] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0108.258] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sl\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sl\\messages.json", lpFilePart=0x0) returned 0x98 [0108.258] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0108.258] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x2175000 | out: lpFileInformation=0x2175000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a975d03, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a97836a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7bced010, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x407a)) returned 1 [0108.258] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0108.258] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sl\\messages.json", nBufferLength=0x105, lpBuffer=0x3bdf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sl\\messages.json", lpFilePart=0x0) returned 0x98 [0108.258] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be440) returned 1 [0108.258] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sl\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0108.259] GetFileType (hFile=0x444) returned 0x1 [0108.259] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be3b0) returned 1 [0108.259] GetFileType (hFile=0x444) returned 0x1 [0108.259] ReadFile (in: hFile=0x444, lpBuffer=0x2177510, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be4c8, lpOverlapped=0x0 | out: lpBuffer=0x2177510*, lpNumberOfBytesRead=0x3be4c8*=0x1000, lpOverlapped=0x0) returned 1 [0108.286] CloseHandle (hObject=0x444) returned 1 [0108.286] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sl\\messages.json", nBufferLength=0x105, lpBuffer=0x3bdf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sl\\messages.json", lpFilePart=0x0) returned 0x98 [0108.286] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be440) returned 1 [0108.286] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sl\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0108.287] GetFileType (hFile=0x444) returned 0x1 [0108.287] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be3b0) returned 1 [0108.287] GetFileType (hFile=0x444) returned 0x1 [0108.287] WriteFile (in: hFile=0x444, lpBuffer=0x21751d0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be578, lpOverlapped=0x0 | out: lpBuffer=0x21751d0*, lpNumberOfBytesWritten=0x3be578*=0x2000, lpOverlapped=0x0) returned 1 [0108.287] CloseHandle (hObject=0x444) returned 1 [0108.287] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sl\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sl\\messages.json", lpFilePart=0x0) returned 0x98 [0108.287] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sl\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sl\\messages.json.xuy", lpFilePart=0x0) returned 0x9c [0108.287] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0108.287] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a975d03, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a97836a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2c649c03, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x407a)) returned 1 [0108.287] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0108.287] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sl\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sl\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sl\\messages.json.xuy")) returned 1 [0108.289] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0108.289] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sr", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sr", lpFilePart=0x0) returned 0x8a [0108.289] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sr\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sr\\", lpFilePart=0x0) returned 0x8b [0108.289] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sr\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d78b0 [0108.289] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0108.290] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0108.290] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0108.290] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0108.290] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0108.290] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0108.290] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0108.290] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sr", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sr", lpFilePart=0x0) returned 0x8a [0108.290] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sr\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sr\\", lpFilePart=0x0) returned 0x8b [0108.290] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sr\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d78b0 [0108.290] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0108.291] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0108.291] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0108.291] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0108.291] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0108.291] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0108.291] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sr\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sr\\messages.json", lpFilePart=0x0) returned 0x98 [0108.291] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0108.291] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x21f6af8 | out: lpFileInformation=0x21f6af8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a9931bb, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a99582a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7bced010, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x49c1)) returned 1 [0108.292] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0108.292] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sr\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sr\\messages.json", lpFilePart=0x0) returned 0x98 [0108.292] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0108.292] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x21f6ce8 | out: lpFileInformation=0x21f6ce8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a9931bb, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a99582a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7bced010, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x49c1)) returned 1 [0108.293] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0108.293] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sr\\messages.json", nBufferLength=0x105, lpBuffer=0x3bdf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sr\\messages.json", lpFilePart=0x0) returned 0x98 [0108.293] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be440) returned 1 [0108.293] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sr\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0108.294] GetFileType (hFile=0x444) returned 0x1 [0108.294] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be3b0) returned 1 [0108.294] GetFileType (hFile=0x444) returned 0x1 [0108.294] ReadFile (in: hFile=0x444, lpBuffer=0x21f91f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be4c8, lpOverlapped=0x0 | out: lpBuffer=0x21f91f8*, lpNumberOfBytesRead=0x3be4c8*=0x1000, lpOverlapped=0x0) returned 1 [0108.313] CloseHandle (hObject=0x444) returned 1 [0108.314] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sr\\messages.json", nBufferLength=0x105, lpBuffer=0x3bdf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sr\\messages.json", lpFilePart=0x0) returned 0x98 [0108.314] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be440) returned 1 [0108.314] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sr\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0108.314] GetFileType (hFile=0x444) returned 0x1 [0108.314] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be3b0) returned 1 [0108.314] GetFileType (hFile=0x444) returned 0x1 [0108.314] WriteFile (in: hFile=0x444, lpBuffer=0x21f6eb8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be578, lpOverlapped=0x0 | out: lpBuffer=0x21f6eb8*, lpNumberOfBytesWritten=0x3be578*=0x2000, lpOverlapped=0x0) returned 1 [0108.314] CloseHandle (hObject=0x444) returned 1 [0108.314] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sr\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sr\\messages.json", lpFilePart=0x0) returned 0x98 [0108.314] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sr\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sr\\messages.json.xuy", lpFilePart=0x0) returned 0x9c [0108.315] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0108.315] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a9931bb, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a99582a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2c695b9e, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x49c1)) returned 1 [0108.315] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0108.315] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sr\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sr\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sr\\messages.json.xuy")) returned 1 [0108.316] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0108.316] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sv", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sv", lpFilePart=0x0) returned 0x8a [0108.316] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sv\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sv\\", lpFilePart=0x0) returned 0x8b [0108.316] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sv\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d79d0 [0108.317] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0108.317] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0108.317] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0108.317] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0108.317] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0108.317] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0108.317] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0108.317] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sv", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sv", lpFilePart=0x0) returned 0x8a [0108.317] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sv\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sv\\", lpFilePart=0x0) returned 0x8b [0108.317] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sv\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7fd0 [0108.318] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0108.318] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0108.318] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0108.318] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0108.318] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0108.318] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0108.318] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sv\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sv\\messages.json", lpFilePart=0x0) returned 0x98 [0108.318] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0108.318] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sv\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x22787e0 | out: lpFileInformation=0x22787e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a99ce0c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7aa517fa, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7bced010, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x3e96)) returned 1 [0108.319] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0108.319] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sv\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sv\\messages.json", lpFilePart=0x0) returned 0x98 [0108.319] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0108.319] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sv\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x22789d0 | out: lpFileInformation=0x22789d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a99ce0c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7aa517fa, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7bced010, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x3e96)) returned 1 [0108.319] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0108.319] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sv\\messages.json", nBufferLength=0x105, lpBuffer=0x3bdf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sv\\messages.json", lpFilePart=0x0) returned 0x98 [0108.319] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be440) returned 1 [0108.319] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sv\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0108.320] GetFileType (hFile=0x444) returned 0x1 [0108.320] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be3b0) returned 1 [0108.320] GetFileType (hFile=0x444) returned 0x1 [0108.320] ReadFile (in: hFile=0x444, lpBuffer=0x227aee0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be4c8, lpOverlapped=0x0 | out: lpBuffer=0x227aee0*, lpNumberOfBytesRead=0x3be4c8*=0x1000, lpOverlapped=0x0) returned 1 [0108.335] CloseHandle (hObject=0x444) returned 1 [0108.335] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sv\\messages.json", nBufferLength=0x105, lpBuffer=0x3bdf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sv\\messages.json", lpFilePart=0x0) returned 0x98 [0108.335] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be440) returned 1 [0108.335] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sv\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0108.335] GetFileType (hFile=0x444) returned 0x1 [0108.335] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be3b0) returned 1 [0108.335] GetFileType (hFile=0x444) returned 0x1 [0108.335] WriteFile (in: hFile=0x444, lpBuffer=0x2278ba0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be578, lpOverlapped=0x0 | out: lpBuffer=0x2278ba0*, lpNumberOfBytesWritten=0x3be578*=0x2000, lpOverlapped=0x0) returned 1 [0108.335] CloseHandle (hObject=0x444) returned 1 [0108.336] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sv\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sv\\messages.json", lpFilePart=0x0) returned 0x98 [0108.336] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sv\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sv\\messages.json.xuy", lpFilePart=0x0) returned 0x9c [0108.336] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0108.336] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sv\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a99ce0c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7aa517fa, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2c6bbe08, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x3e96)) returned 1 [0108.336] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0108.336] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sv\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sv\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sv\\messages.json.xuy")) returned 1 [0108.337] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0108.337] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sw", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sw", lpFilePart=0x0) returned 0x8a [0108.337] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sw\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sw\\", lpFilePart=0x0) returned 0x8b [0108.337] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sw\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7370 [0108.337] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0108.337] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0108.337] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0108.338] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0108.338] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0108.338] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0108.338] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0108.338] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sw", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sw", lpFilePart=0x0) returned 0x8a [0108.338] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sw\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sw\\", lpFilePart=0x0) returned 0x8b [0108.338] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sw\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7670 [0108.338] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0108.338] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0108.338] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0108.338] FindClose (in: hFindFile=0x5d7670 | out: hFindFile=0x5d7670) returned 1 [0108.338] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0108.339] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0108.339] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sw\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sw\\messages.json", lpFilePart=0x0) returned 0x98 [0108.339] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0108.339] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sw\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sw\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x22fa4c8 | out: lpFileInformation=0x22fa4c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7aa5dc2e, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7aa6025a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7bcef726, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x3e8b)) returned 1 [0108.340] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0108.340] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sw\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sw\\messages.json", lpFilePart=0x0) returned 0x98 [0108.340] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0108.340] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sw\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sw\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x22fa6b8 | out: lpFileInformation=0x22fa6b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7aa5dc2e, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7aa6025a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7bcef726, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x3e8b)) returned 1 [0108.340] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0108.340] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sw\\messages.json", nBufferLength=0x105, lpBuffer=0x3bdf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sw\\messages.json", lpFilePart=0x0) returned 0x98 [0108.340] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be440) returned 1 [0108.340] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sw\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sw\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0108.341] GetFileType (hFile=0x444) returned 0x1 [0108.341] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be3b0) returned 1 [0108.341] GetFileType (hFile=0x444) returned 0x1 [0108.341] ReadFile (in: hFile=0x444, lpBuffer=0x22fcbc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be4c8, lpOverlapped=0x0 | out: lpBuffer=0x22fcbc8*, lpNumberOfBytesRead=0x3be4c8*=0x1000, lpOverlapped=0x0) returned 1 [0108.395] CloseHandle (hObject=0x444) returned 1 [0108.396] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sw\\messages.json", nBufferLength=0x105, lpBuffer=0x3bdf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sw\\messages.json", lpFilePart=0x0) returned 0x98 [0108.396] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be440) returned 1 [0108.396] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sw\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sw\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0108.396] GetFileType (hFile=0x444) returned 0x1 [0108.396] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be3b0) returned 1 [0108.396] GetFileType (hFile=0x444) returned 0x1 [0108.396] WriteFile (in: hFile=0x444, lpBuffer=0x2157258*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be578, lpOverlapped=0x0 | out: lpBuffer=0x2157258*, lpNumberOfBytesWritten=0x3be578*=0x2000, lpOverlapped=0x0) returned 1 [0108.396] CloseHandle (hObject=0x444) returned 1 [0108.396] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sw\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sw\\messages.json", lpFilePart=0x0) returned 0x98 [0108.396] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sw\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sw\\messages.json.xuy", lpFilePart=0x0) returned 0x9c [0108.397] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0108.397] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sw\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sw\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7aa5dc2e, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7aa6025a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2c73e8bb, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x3e8b)) returned 1 [0108.397] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0108.397] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sw\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sw\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sw\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sw\\messages.json.xuy")) returned 1 [0108.398] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0108.398] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ta", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ta", lpFilePart=0x0) returned 0x8a [0108.399] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ta\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ta\\", lpFilePart=0x0) returned 0x8b [0108.399] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ta\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7d30 [0108.399] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0108.399] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0108.399] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0108.399] FindClose (in: hFindFile=0x5d7d30 | out: hFindFile=0x5d7d30) returned 1 [0108.399] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0108.399] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0108.399] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0108.399] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ta", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ta", lpFilePart=0x0) returned 0x8a [0108.399] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ta\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ta\\", lpFilePart=0x0) returned 0x8b [0108.399] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ta\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d81b0 [0108.400] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0108.400] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0108.400] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0108.400] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0108.400] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0108.400] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0108.400] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ta\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ta\\messages.json", lpFilePart=0x0) returned 0x98 [0108.400] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0108.400] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ta\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ta\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x2181b70 | out: lpFileInformation=0x2181b70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7aa6ed9b, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7aa6ecba, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7bcef726, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x563d)) returned 1 [0108.400] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0108.400] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ta\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ta\\messages.json", lpFilePart=0x0) returned 0x98 [0108.400] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0108.401] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ta\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ta\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x2181d60 | out: lpFileInformation=0x2181d60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7aa6ed9b, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7aa6ecba, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7bcef726, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x563d)) returned 1 [0108.401] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0108.401] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ta\\messages.json", nBufferLength=0x105, lpBuffer=0x3bdf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ta\\messages.json", lpFilePart=0x0) returned 0x98 [0108.401] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be440) returned 1 [0108.401] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ta\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ta\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0108.402] GetFileType (hFile=0x444) returned 0x1 [0108.402] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be3b0) returned 1 [0108.402] GetFileType (hFile=0x444) returned 0x1 [0108.402] ReadFile (in: hFile=0x444, lpBuffer=0x2184270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be4c8, lpOverlapped=0x0 | out: lpBuffer=0x2184270*, lpNumberOfBytesRead=0x3be4c8*=0x1000, lpOverlapped=0x0) returned 1 [0108.427] CloseHandle (hObject=0x444) returned 1 [0108.427] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ta\\messages.json", nBufferLength=0x105, lpBuffer=0x3bdf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ta\\messages.json", lpFilePart=0x0) returned 0x98 [0108.427] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be440) returned 1 [0108.427] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ta\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ta\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0108.428] GetFileType (hFile=0x444) returned 0x1 [0108.428] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be3b0) returned 1 [0108.428] GetFileType (hFile=0x444) returned 0x1 [0108.428] WriteFile (in: hFile=0x444, lpBuffer=0x2181f30*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be578, lpOverlapped=0x0 | out: lpBuffer=0x2181f30*, lpNumberOfBytesWritten=0x3be578*=0x2000, lpOverlapped=0x0) returned 1 [0108.428] CloseHandle (hObject=0x444) returned 1 [0108.428] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ta\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ta\\messages.json", lpFilePart=0x0) returned 0x98 [0108.429] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ta\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ta\\messages.json.xuy", lpFilePart=0x0) returned 0x9c [0108.429] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0108.429] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ta\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ta\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7aa6ed9b, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7aa6ecba, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2c78b169, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x563d)) returned 1 [0108.430] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0108.430] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ta\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ta\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ta\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ta\\messages.json.xuy")) returned 1 [0108.431] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0108.431] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\te", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\te", lpFilePart=0x0) returned 0x8a [0108.431] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\te\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\te\\", lpFilePart=0x0) returned 0x8b [0108.431] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\te\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d78b0 [0108.431] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0108.431] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0108.431] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0108.431] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0108.431] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0108.432] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0108.432] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0108.432] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\te", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\te", lpFilePart=0x0) returned 0x8a [0108.432] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\te\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\te\\", lpFilePart=0x0) returned 0x8b [0108.432] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\te\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7370 [0108.432] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0108.432] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0108.432] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0108.432] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0108.432] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0108.432] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0108.432] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\te\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\te\\messages.json", lpFilePart=0x0) returned 0x98 [0108.432] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0108.432] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\te\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\te\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x2203858 | out: lpFileInformation=0x2203858*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7aa789e2, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7aa7b00a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7bcf1e38, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x5593)) returned 1 [0108.433] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0108.433] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\te\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\te\\messages.json", lpFilePart=0x0) returned 0x98 [0108.433] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0108.433] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\te\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\te\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x2203a48 | out: lpFileInformation=0x2203a48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7aa789e2, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7aa7b00a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7bcf1e38, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x5593)) returned 1 [0108.434] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0108.434] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\te\\messages.json", nBufferLength=0x105, lpBuffer=0x3bdf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\te\\messages.json", lpFilePart=0x0) returned 0x98 [0108.434] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be440) returned 1 [0108.434] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\te\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\te\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0108.434] GetFileType (hFile=0x444) returned 0x1 [0108.434] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be3b0) returned 1 [0108.434] GetFileType (hFile=0x444) returned 0x1 [0108.435] ReadFile (in: hFile=0x444, lpBuffer=0x2205f58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be4c8, lpOverlapped=0x0 | out: lpBuffer=0x2205f58*, lpNumberOfBytesRead=0x3be4c8*=0x1000, lpOverlapped=0x0) returned 1 [0108.484] CloseHandle (hObject=0x444) returned 1 [0108.484] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\te\\messages.json", nBufferLength=0x105, lpBuffer=0x3bdf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\te\\messages.json", lpFilePart=0x0) returned 0x98 [0108.484] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be440) returned 1 [0108.484] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\te\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\te\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0108.484] GetFileType (hFile=0x444) returned 0x1 [0108.484] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be3b0) returned 1 [0108.484] GetFileType (hFile=0x444) returned 0x1 [0108.484] WriteFile (in: hFile=0x444, lpBuffer=0x2203c18*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be578, lpOverlapped=0x0 | out: lpBuffer=0x2203c18*, lpNumberOfBytesWritten=0x3be578*=0x2000, lpOverlapped=0x0) returned 1 [0108.485] CloseHandle (hObject=0x444) returned 1 [0108.485] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\te\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\te\\messages.json", lpFilePart=0x0) returned 0x98 [0108.485] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\te\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\te\\messages.json.xuy", lpFilePart=0x0) returned 0x9c [0108.485] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0108.485] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\te\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\te\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7aa789e2, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7aa7b00a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2c824296, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x5593)) returned 1 [0108.485] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0108.485] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\te\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\te\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\te\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\te\\messages.json.xuy")) returned 1 [0108.486] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0108.486] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\th", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\th", lpFilePart=0x0) returned 0x8a [0108.486] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\th\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\th\\", lpFilePart=0x0) returned 0x8b [0108.486] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\th\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7c70 [0108.487] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0108.487] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0108.487] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0108.487] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0108.523] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0108.523] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0108.523] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0108.523] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\th", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\th", lpFilePart=0x0) returned 0x8a [0108.523] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\th\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\th\\", lpFilePart=0x0) returned 0x8b [0108.523] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\th\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7a30 [0108.524] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0108.524] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0108.524] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0108.524] FindClose (in: hFindFile=0x5d7a30 | out: hFindFile=0x5d7a30) returned 1 [0108.524] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0108.524] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0108.524] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\th\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\th\\messages.json", lpFilePart=0x0) returned 0x98 [0108.524] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0108.524] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\th\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x2285540 | out: lpFileInformation=0x2285540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7aa87449, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7aa89a6a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7bcf4542, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x4f64)) returned 1 [0108.524] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0108.524] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\th\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\th\\messages.json", lpFilePart=0x0) returned 0x98 [0108.524] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0108.524] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\th\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x2285730 | out: lpFileInformation=0x2285730*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7aa87449, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7aa89a6a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7bcf4542, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x4f64)) returned 1 [0108.525] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0108.525] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\th\\messages.json", nBufferLength=0x105, lpBuffer=0x3bdf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\th\\messages.json", lpFilePart=0x0) returned 0x98 [0108.525] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be440) returned 1 [0108.525] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\th\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0108.526] GetFileType (hFile=0x444) returned 0x1 [0108.526] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be3b0) returned 1 [0108.526] GetFileType (hFile=0x444) returned 0x1 [0108.526] ReadFile (in: hFile=0x444, lpBuffer=0x2287c40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be4c8, lpOverlapped=0x0 | out: lpBuffer=0x2287c40*, lpNumberOfBytesRead=0x3be4c8*=0x1000, lpOverlapped=0x0) returned 1 [0108.538] CloseHandle (hObject=0x444) returned 1 [0108.538] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\th\\messages.json", nBufferLength=0x105, lpBuffer=0x3bdf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\th\\messages.json", lpFilePart=0x0) returned 0x98 [0108.538] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be440) returned 1 [0108.539] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\th\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0108.539] GetFileType (hFile=0x444) returned 0x1 [0108.539] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be3b0) returned 1 [0108.539] GetFileType (hFile=0x444) returned 0x1 [0108.539] WriteFile (in: hFile=0x444, lpBuffer=0x2285900*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be578, lpOverlapped=0x0 | out: lpBuffer=0x2285900*, lpNumberOfBytesWritten=0x3be578*=0x2000, lpOverlapped=0x0) returned 1 [0108.539] CloseHandle (hObject=0x444) returned 1 [0108.539] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\th\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\th\\messages.json", lpFilePart=0x0) returned 0x98 [0108.539] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\th\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\th\\messages.json.xuy", lpFilePart=0x0) returned 0x9c [0108.539] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0108.539] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\th\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7aa87449, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7aa89a6a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2c8bc345, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x4f64)) returned 1 [0108.539] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0108.540] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\th\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\th\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\th\\messages.json.xuy")) returned 1 [0108.540] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0108.541] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\tr", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\tr", lpFilePart=0x0) returned 0x8a [0108.541] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\tr\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\tr\\", lpFilePart=0x0) returned 0x8b [0108.541] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\tr\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d79d0 [0108.541] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0108.541] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0108.541] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0108.541] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0108.541] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0108.542] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0108.542] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0108.542] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\tr", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\tr", lpFilePart=0x0) returned 0x8a [0108.542] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\tr\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\tr\\", lpFilePart=0x0) returned 0x8b [0108.542] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\tr\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7a30 [0108.542] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0108.542] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0108.542] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0108.542] FindClose (in: hFindFile=0x5d7a30 | out: hFindFile=0x5d7a30) returned 1 [0108.542] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0108.542] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0108.543] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\tr\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\tr\\messages.json", lpFilePart=0x0) returned 0x98 [0108.543] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0108.543] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\tr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x2307228 | out: lpFileInformation=0x2307228*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7aa9acc6, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7aa9abda, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7bcf4542, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x404e)) returned 1 [0108.544] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0108.544] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\tr\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\tr\\messages.json", lpFilePart=0x0) returned 0x98 [0108.544] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0108.544] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\tr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x2307418 | out: lpFileInformation=0x2307418*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7aa9acc6, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7aa9abda, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7bcf4542, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x404e)) returned 1 [0108.544] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0108.544] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\tr\\messages.json", nBufferLength=0x105, lpBuffer=0x3bdf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\tr\\messages.json", lpFilePart=0x0) returned 0x98 [0108.544] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be440) returned 1 [0108.544] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\tr\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0108.545] GetFileType (hFile=0x444) returned 0x1 [0108.545] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be3b0) returned 1 [0108.545] GetFileType (hFile=0x444) returned 0x1 [0108.545] ReadFile (in: hFile=0x444, lpBuffer=0x2309928, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be4c8, lpOverlapped=0x0 | out: lpBuffer=0x2309928*, lpNumberOfBytesRead=0x3be4c8*=0x1000, lpOverlapped=0x0) returned 1 [0108.596] CloseHandle (hObject=0x444) returned 1 [0108.596] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\tr\\messages.json", nBufferLength=0x105, lpBuffer=0x3bdf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\tr\\messages.json", lpFilePart=0x0) returned 0x98 [0108.596] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be440) returned 1 [0108.596] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\tr\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0108.597] GetFileType (hFile=0x444) returned 0x1 [0108.597] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be3b0) returned 1 [0108.597] GetFileType (hFile=0x444) returned 0x1 [0108.597] WriteFile (in: hFile=0x444, lpBuffer=0x215cc18*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be578, lpOverlapped=0x0 | out: lpBuffer=0x215cc18*, lpNumberOfBytesWritten=0x3be578*=0x2000, lpOverlapped=0x0) returned 1 [0108.597] CloseHandle (hObject=0x444) returned 1 [0108.597] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\tr\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\tr\\messages.json", lpFilePart=0x0) returned 0x98 [0108.597] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\tr\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\tr\\messages.json.xuy", lpFilePart=0x0) returned 0x9c [0108.597] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0108.597] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\tr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7aa9acc6, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7aa9abda, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2c92eac0, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x404e)) returned 1 [0108.598] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0108.598] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\tr\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\tr\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\tr\\messages.json.xuy")) returned 1 [0108.599] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0108.599] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\uk", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\uk", lpFilePart=0x0) returned 0x8a [0108.599] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\uk\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\uk\\", lpFilePart=0x0) returned 0x8b [0108.599] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\uk\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d81b0 [0108.599] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0108.599] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0108.599] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0108.599] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0108.599] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0108.599] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0108.599] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0108.599] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\uk", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\uk", lpFilePart=0x0) returned 0x8a [0108.600] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\uk\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\uk\\", lpFilePart=0x0) returned 0x8b [0108.600] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\uk\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d78b0 [0108.600] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0108.600] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0108.600] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0108.600] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0108.607] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0108.607] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0108.607] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\uk\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\uk\\messages.json", lpFilePart=0x0) returned 0x98 [0108.607] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0108.607] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\uk\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x218e8d0 | out: lpFileInformation=0x218e8d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7aaa702c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7aaa963a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7bcf4542, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x48f1)) returned 1 [0108.607] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0108.607] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\uk\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\uk\\messages.json", lpFilePart=0x0) returned 0x98 [0108.607] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0108.607] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\uk\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x218eac0 | out: lpFileInformation=0x218eac0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7aaa702c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7aaa963a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7bcf4542, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x48f1)) returned 1 [0108.607] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0108.607] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\uk\\messages.json", nBufferLength=0x105, lpBuffer=0x3bdf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\uk\\messages.json", lpFilePart=0x0) returned 0x98 [0108.607] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be440) returned 1 [0108.607] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\uk\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0108.608] GetFileType (hFile=0x444) returned 0x1 [0108.608] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be3b0) returned 1 [0108.608] GetFileType (hFile=0x444) returned 0x1 [0108.608] ReadFile (in: hFile=0x444, lpBuffer=0x2190fd0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be4c8, lpOverlapped=0x0 | out: lpBuffer=0x2190fd0*, lpNumberOfBytesRead=0x3be4c8*=0x1000, lpOverlapped=0x0) returned 1 [0108.621] CloseHandle (hObject=0x444) returned 1 [0108.621] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\uk\\messages.json", nBufferLength=0x105, lpBuffer=0x3bdf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\uk\\messages.json", lpFilePart=0x0) returned 0x98 [0108.621] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be440) returned 1 [0108.621] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\uk\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0108.621] GetFileType (hFile=0x444) returned 0x1 [0108.621] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be3b0) returned 1 [0108.621] GetFileType (hFile=0x444) returned 0x1 [0108.621] WriteFile (in: hFile=0x444, lpBuffer=0x218ec90*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be578, lpOverlapped=0x0 | out: lpBuffer=0x218ec90*, lpNumberOfBytesWritten=0x3be578*=0x2000, lpOverlapped=0x0) returned 1 [0108.622] CloseHandle (hObject=0x444) returned 1 [0108.622] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\uk\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\uk\\messages.json", lpFilePart=0x0) returned 0x98 [0108.622] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\uk\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\uk\\messages.json.xuy", lpFilePart=0x0) returned 0x9c [0108.622] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0108.622] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\uk\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7aaa702c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7aaa963a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2c97b01d, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x48f1)) returned 1 [0108.622] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0108.622] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\uk\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\uk\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\uk\\messages.json.xuy")) returned 1 [0108.623] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0108.623] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\vi", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\vi", lpFilePart=0x0) returned 0x8a [0108.623] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\vi\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\vi\\", lpFilePart=0x0) returned 0x8b [0108.623] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\vi\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7cd0 [0108.624] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0108.624] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0108.624] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0108.624] FindClose (in: hFindFile=0x5d7cd0 | out: hFindFile=0x5d7cd0) returned 1 [0108.624] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0108.624] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0108.624] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0108.624] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\vi", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\vi", lpFilePart=0x0) returned 0x8a [0108.624] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\vi\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\vi\\", lpFilePart=0x0) returned 0x8b [0108.624] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\vi\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d78b0 [0108.625] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0108.625] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0108.625] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0108.625] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0108.625] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0108.625] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0108.625] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\vi\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\vi\\messages.json", lpFilePart=0x0) returned 0x98 [0108.625] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0108.625] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\vi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x22105b8 | out: lpFileInformation=0x22105b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7aab0c61, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7aab327a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7bcf6c5b, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x426b)) returned 1 [0108.626] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0108.626] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\vi\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\vi\\messages.json", lpFilePart=0x0) returned 0x98 [0108.626] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0108.626] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\vi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x22107a8 | out: lpFileInformation=0x22107a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7aab0c61, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7aab327a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7bcf6c5b, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x426b)) returned 1 [0108.626] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0108.626] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\vi\\messages.json", nBufferLength=0x105, lpBuffer=0x3bdf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\vi\\messages.json", lpFilePart=0x0) returned 0x98 [0108.626] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be440) returned 1 [0108.626] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\vi\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0108.627] GetFileType (hFile=0x444) returned 0x1 [0108.627] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be3b0) returned 1 [0108.627] GetFileType (hFile=0x444) returned 0x1 [0108.627] ReadFile (in: hFile=0x444, lpBuffer=0x2212cb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be4c8, lpOverlapped=0x0 | out: lpBuffer=0x2212cb8*, lpNumberOfBytesRead=0x3be4c8*=0x1000, lpOverlapped=0x0) returned 1 [0108.640] CloseHandle (hObject=0x444) returned 1 [0108.640] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\vi\\messages.json", nBufferLength=0x105, lpBuffer=0x3bdf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\vi\\messages.json", lpFilePart=0x0) returned 0x98 [0108.640] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be440) returned 1 [0108.640] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\vi\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0108.642] GetFileType (hFile=0x444) returned 0x1 [0108.642] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be3b0) returned 1 [0108.642] GetFileType (hFile=0x444) returned 0x1 [0108.642] WriteFile (in: hFile=0x444, lpBuffer=0x2210978*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be578, lpOverlapped=0x0 | out: lpBuffer=0x2210978*, lpNumberOfBytesWritten=0x3be578*=0x2000, lpOverlapped=0x0) returned 1 [0108.642] CloseHandle (hObject=0x444) returned 1 [0108.642] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\vi\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\vi\\messages.json", lpFilePart=0x0) returned 0x98 [0108.642] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\vi\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\vi\\messages.json.xuy", lpFilePart=0x0) returned 0x9c [0108.642] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0108.642] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\vi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7aab0c61, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7aab327a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2c9a1b61, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x426b)) returned 1 [0108.642] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0108.642] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\vi\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\vi\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\vi\\messages.json.xuy")) returned 1 [0108.643] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0108.643] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh", lpFilePart=0x0) returned 0x8a [0108.644] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh\\", lpFilePart=0x0) returned 0x8b [0108.644] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7c70 [0108.644] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0108.644] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0108.644] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0108.644] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0108.644] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0108.644] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0108.644] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0108.644] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh", lpFilePart=0x0) returned 0x8a [0108.644] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh\\", lpFilePart=0x0) returned 0x8b [0108.645] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7550 [0108.645] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0108.645] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0108.645] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0108.645] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0108.645] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0108.645] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0108.645] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh\\messages.json", lpFilePart=0x0) returned 0x98 [0108.645] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0108.645] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x22922a0 | out: lpFileInformation=0x22922a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7aac1dd8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7aac43ea, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7bcf9364, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x3d11)) returned 1 [0108.645] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0108.646] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh\\messages.json", lpFilePart=0x0) returned 0x98 [0108.646] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0108.646] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x2292490 | out: lpFileInformation=0x2292490*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7aac1dd8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7aac43ea, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7bcf9364, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x3d11)) returned 1 [0108.646] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0108.646] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh\\messages.json", nBufferLength=0x105, lpBuffer=0x3bdf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh\\messages.json", lpFilePart=0x0) returned 0x98 [0108.646] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be440) returned 1 [0108.646] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0108.647] GetFileType (hFile=0x444) returned 0x1 [0108.647] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be3b0) returned 1 [0108.647] GetFileType (hFile=0x444) returned 0x1 [0108.647] ReadFile (in: hFile=0x444, lpBuffer=0x22949a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be4c8, lpOverlapped=0x0 | out: lpBuffer=0x22949a0*, lpNumberOfBytesRead=0x3be4c8*=0x1000, lpOverlapped=0x0) returned 1 [0108.665] CloseHandle (hObject=0x444) returned 1 [0108.665] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh\\messages.json", nBufferLength=0x105, lpBuffer=0x3bdf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh\\messages.json", lpFilePart=0x0) returned 0x98 [0108.665] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be440) returned 1 [0108.665] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0108.666] GetFileType (hFile=0x444) returned 0x1 [0108.666] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be3b0) returned 1 [0108.666] GetFileType (hFile=0x444) returned 0x1 [0108.666] WriteFile (in: hFile=0x444, lpBuffer=0x2292660*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be578, lpOverlapped=0x0 | out: lpBuffer=0x2292660*, lpNumberOfBytesWritten=0x3be578*=0x2000, lpOverlapped=0x0) returned 1 [0108.666] CloseHandle (hObject=0x444) returned 1 [0108.666] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh\\messages.json", lpFilePart=0x0) returned 0x98 [0108.666] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh\\messages.json.xuy", lpFilePart=0x0) returned 0x9c [0108.666] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0108.666] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7aac1dd8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7aac43ea, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2c9ed682, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x3d11)) returned 1 [0108.666] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0108.666] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh\\messages.json.xuy")) returned 1 [0108.667] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0108.667] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh_TW", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh_TW", lpFilePart=0x0) returned 0x8d [0108.667] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh_TW\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh_TW\\", lpFilePart=0x0) returned 0x8e [0108.667] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh_TW\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7fd0 [0108.668] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0108.668] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0108.668] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0108.668] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0108.668] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0108.668] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0108.668] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0108.668] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh_TW", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh_TW", lpFilePart=0x0) returned 0x8d [0108.668] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh_TW\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh_TW\\", lpFilePart=0x0) returned 0x8e [0108.668] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh_TW\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7e50 [0108.669] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0108.669] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0108.669] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0108.669] FindClose (in: hFindFile=0x5d7e50 | out: hFindFile=0x5d7e50) returned 1 [0108.669] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0108.669] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0108.669] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh_TW\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh_TW\\messages.json", lpFilePart=0x0) returned 0x9b [0108.669] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0108.669] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh_tw\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x2313fe8 | out: lpFileInformation=0x2313fe8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7aad0838, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7aad073a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7bcf9364, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x3d72)) returned 1 [0108.669] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0108.669] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh_TW\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh_TW\\messages.json", lpFilePart=0x0) returned 0x9b [0108.669] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0108.669] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh_tw\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x23141d8 | out: lpFileInformation=0x23141d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7aad0838, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7aad073a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7bcf9364, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x3d72)) returned 1 [0108.670] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0108.670] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh_TW\\messages.json", nBufferLength=0x105, lpBuffer=0x3bdf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh_TW\\messages.json", lpFilePart=0x0) returned 0x9b [0108.670] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be440) returned 1 [0108.670] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh_tw\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0108.670] GetFileType (hFile=0x444) returned 0x1 [0108.670] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be3b0) returned 1 [0108.670] GetFileType (hFile=0x444) returned 0x1 [0108.670] ReadFile (in: hFile=0x444, lpBuffer=0x23166e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be4c8, lpOverlapped=0x0 | out: lpBuffer=0x23166e8*, lpNumberOfBytesRead=0x3be4c8*=0x1000, lpOverlapped=0x0) returned 1 [0108.723] CloseHandle (hObject=0x444) returned 1 [0108.723] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh_TW\\messages.json", nBufferLength=0x105, lpBuffer=0x3bdf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh_TW\\messages.json", lpFilePart=0x0) returned 0x9b [0108.723] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be440) returned 1 [0108.724] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh_tw\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0108.724] GetFileType (hFile=0x444) returned 0x1 [0108.724] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be3b0) returned 1 [0108.724] GetFileType (hFile=0x444) returned 0x1 [0108.724] WriteFile (in: hFile=0x444, lpBuffer=0x21625d8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be578, lpOverlapped=0x0 | out: lpBuffer=0x21625d8*, lpNumberOfBytesWritten=0x3be578*=0x2000, lpOverlapped=0x0) returned 1 [0108.724] CloseHandle (hObject=0x444) returned 1 [0108.724] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh_TW\\messages.json", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh_TW\\messages.json", lpFilePart=0x0) returned 0x9b [0108.724] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh_TW\\messages.json.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh_TW\\messages.json.xuy", lpFilePart=0x0) returned 0x9f [0108.724] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0108.725] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh_tw\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7aad0838, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7aad073a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2ca5fe2d, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x3d72)) returned 1 [0108.725] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0108.725] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh_tw\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh_TW\\messages.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh_tw\\messages.json.xuy")) returned 1 [0108.727] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0108.727] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata", nBufferLength=0x105, lpBuffer=0x3be0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata", lpFilePart=0x0) returned 0x88 [0108.727] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\", nBufferLength=0x105, lpBuffer=0x3be060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\", lpFilePart=0x0) returned 0x89 [0108.727] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\*", lpFindFileData=0x3be270 | out: lpFindFileData=0x3be270) returned 0x5d7370 [0108.727] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0108.727] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0108.728] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0108.728] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 0 [0108.728] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0108.728] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0108.728] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0108.728] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0108.728] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata", nBufferLength=0x105, lpBuffer=0x3be0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata", lpFilePart=0x0) returned 0x88 [0108.728] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\", nBufferLength=0x105, lpBuffer=0x3be060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\", lpFilePart=0x0) returned 0x89 [0108.728] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\*", lpFindFileData=0x3be270 | out: lpFindFileData=0x3be270) returned 0x5d79d0 [0108.728] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0108.728] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0108.729] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0108.729] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 0 [0108.729] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0108.729] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0108.729] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0108.729] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\computed_hashes.json", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\computed_hashes.json", lpFilePart=0x0) returned 0x9d [0108.729] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0108.729] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\computed_hashes.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\computed_hashes.json"), fInfoLevelId=0x0, lpFileInformation=0x219bcf8 | out: lpFileInformation=0x219bcf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7bdade8c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7bdade8c, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7bdade8c, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x7299)) returned 1 [0108.729] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0108.729] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\computed_hashes.json", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\computed_hashes.json", lpFilePart=0x0) returned 0x9d [0108.729] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0108.729] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\computed_hashes.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\computed_hashes.json"), fInfoLevelId=0x0, lpFileInformation=0x219bf00 | out: lpFileInformation=0x219bf00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7bdade8c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7bdade8c, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7bdade8c, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x7299)) returned 1 [0108.730] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0108.730] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\computed_hashes.json", nBufferLength=0x105, lpBuffer=0x3bdfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\computed_hashes.json", lpFilePart=0x0) returned 0x9d [0108.730] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0108.730] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\computed_hashes.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\computed_hashes.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0108.731] GetFileType (hFile=0x444) returned 0x1 [0108.731] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be420) returned 1 [0108.731] GetFileType (hFile=0x444) returned 0x1 [0108.731] ReadFile (in: hFile=0x444, lpBuffer=0x219e440, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be538, lpOverlapped=0x0 | out: lpBuffer=0x219e440*, lpNumberOfBytesRead=0x3be538*=0x1000, lpOverlapped=0x0) returned 1 [0108.761] CloseHandle (hObject=0x444) returned 1 [0108.762] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\computed_hashes.json", nBufferLength=0x105, lpBuffer=0x3bdfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\computed_hashes.json", lpFilePart=0x0) returned 0x9d [0108.762] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0108.762] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\computed_hashes.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\computed_hashes.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0108.762] GetFileType (hFile=0x444) returned 0x1 [0108.762] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be420) returned 1 [0108.762] GetFileType (hFile=0x444) returned 0x1 [0108.762] WriteFile (in: hFile=0x444, lpBuffer=0x219c0e8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be5e8, lpOverlapped=0x0 | out: lpBuffer=0x219c0e8*, lpNumberOfBytesWritten=0x3be5e8*=0x2000, lpOverlapped=0x0) returned 1 [0108.763] CloseHandle (hObject=0x444) returned 1 [0108.763] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\computed_hashes.json", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\computed_hashes.json", lpFilePart=0x0) returned 0x9d [0108.763] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\computed_hashes.json.xuy", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\computed_hashes.json.xuy", lpFilePart=0x0) returned 0xa1 [0108.763] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0108.763] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\computed_hashes.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\computed_hashes.json"), fInfoLevelId=0x0, lpFileInformation=0x3be600 | out: lpFileInformation=0x3be600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7bdade8c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7bdade8c, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2cad2a10, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x7299)) returned 1 [0108.763] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0108.763] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\computed_hashes.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\computed_hashes.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\computed_hashes.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\computed_hashes.json.xuy")) returned 1 [0108.765] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\verified_contents.json", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\verified_contents.json", lpFilePart=0x0) returned 0x9f [0108.765] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0108.765] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\verified_contents.json"), fInfoLevelId=0x0, lpFileInformation=0x221aaa8 | out: lpFileInformation=0x221aaa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7acfd305, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7ad046aa, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x3e39)) returned 1 [0108.765] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0108.765] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\verified_contents.json", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\verified_contents.json", lpFilePart=0x0) returned 0x9f [0108.765] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0108.765] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\verified_contents.json"), fInfoLevelId=0x0, lpFileInformation=0x221acb0 | out: lpFileInformation=0x221acb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7acfd305, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7ad046aa, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x3e39)) returned 1 [0108.765] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0108.765] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\verified_contents.json", nBufferLength=0x105, lpBuffer=0x3bdfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\verified_contents.json", lpFilePart=0x0) returned 0x9f [0108.765] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0108.765] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\verified_contents.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0108.766] GetFileType (hFile=0x444) returned 0x1 [0108.766] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be420) returned 1 [0108.766] GetFileType (hFile=0x444) returned 0x1 [0108.766] ReadFile (in: hFile=0x444, lpBuffer=0x221d1f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be538, lpOverlapped=0x0 | out: lpBuffer=0x221d1f0*, lpNumberOfBytesRead=0x3be538*=0x1000, lpOverlapped=0x0) returned 1 [0108.782] CloseHandle (hObject=0x444) returned 1 [0108.782] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\verified_contents.json", nBufferLength=0x105, lpBuffer=0x3bdfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\verified_contents.json", lpFilePart=0x0) returned 0x9f [0108.782] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0108.782] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\verified_contents.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0108.783] GetFileType (hFile=0x444) returned 0x1 [0108.783] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be420) returned 1 [0108.783] GetFileType (hFile=0x444) returned 0x1 [0108.783] WriteFile (in: hFile=0x444, lpBuffer=0x221ae98*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be5e8, lpOverlapped=0x0 | out: lpBuffer=0x221ae98*, lpNumberOfBytesWritten=0x3be5e8*=0x2000, lpOverlapped=0x0) returned 1 [0108.783] CloseHandle (hObject=0x444) returned 1 [0108.783] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\verified_contents.json", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\verified_contents.json", lpFilePart=0x0) returned 0x9f [0108.783] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\verified_contents.json.xuy", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\verified_contents.json.xuy", lpFilePart=0x0) returned 0xa3 [0108.783] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0108.783] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\verified_contents.json"), fInfoLevelId=0x0, lpFileInformation=0x3be600 | out: lpFileInformation=0x3be600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7acfd305, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7ad046aa, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2caf86ae, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x3e39)) returned 1 [0108.783] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0108.783] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\verified_contents.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\verified_contents.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\verified_contents.json.xuy")) returned 1 [0108.784] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0108.784] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\Temp", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\Temp", lpFilePart=0x0) returned 0x53 [0108.784] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\Temp\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\Temp\\", lpFilePart=0x0) returned 0x54 [0108.785] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\Temp\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d7550 [0108.785] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0108.785] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0108.785] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0108.785] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0108.785] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0108.785] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0108.785] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\Temp", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\Temp", lpFilePart=0x0) returned 0x53 [0108.785] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\Temp\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\Temp\\", lpFilePart=0x0) returned 0x54 [0108.785] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\Temp\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d7f10 [0108.785] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0108.786] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0108.786] FindClose (in: hFindFile=0x5d7f10 | out: hFindFile=0x5d7f10) returned 1 [0108.786] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0108.786] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0108.786] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0108.786] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB", lpFilePart=0x0) returned 0x4d [0108.786] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\", lpFilePart=0x0) returned 0x4e [0108.786] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d78b0 [0108.786] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0108.786] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0108.786] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0108.787] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0108.787] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0108.787] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0108.787] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0108.787] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0108.787] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB", lpFilePart=0x0) returned 0x4d [0108.787] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\", lpFilePart=0x0) returned 0x4e [0108.787] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d78b0 [0108.787] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0108.787] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0108.787] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0108.788] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0108.788] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0108.788] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0108.788] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0108.788] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0108.788] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.com_0.indexeddb.leveldb", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.com_0.indexeddb.leveldb", lpFilePart=0x0) returned 0x76 [0108.788] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.com_0.indexeddb.leveldb\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.com_0.indexeddb.leveldb\\", lpFilePart=0x0) returned 0x77 [0108.788] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.com_0.indexeddb.leveldb\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d79d0 [0108.801] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0108.801] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0108.801] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0108.802] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0108.802] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0108.802] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0108.802] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0108.802] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0108.803] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0108.803] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0108.803] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0108.803] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.com_0.indexeddb.leveldb", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.com_0.indexeddb.leveldb", lpFilePart=0x0) returned 0x76 [0108.803] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.com_0.indexeddb.leveldb\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.com_0.indexeddb.leveldb\\", lpFilePart=0x0) returned 0x77 [0108.803] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.com_0.indexeddb.leveldb\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d7c70 [0108.804] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0108.804] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0108.804] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0108.804] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0108.805] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0108.805] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0108.805] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0108.805] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0108.805] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0108.806] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0108.806] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.com_0.indexeddb.leveldb\\000003.log", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.com_0.indexeddb.leveldb\\000003.log", lpFilePart=0x0) returned 0x81 [0108.806] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0108.806] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.com_0.indexeddb.leveldb\\000003.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\indexeddb\\https_www.google.com_0.indexeddb.leveldb\\000003.log"), fInfoLevelId=0x0, lpFileInformation=0x22a1eb0 | out: lpFileInformation=0x22a1eb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76727b97, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x76727b97, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x76d0065f, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x13e)) returned 1 [0108.806] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0108.806] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.com_0.indexeddb.leveldb\\000003.log", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.com_0.indexeddb.leveldb\\000003.log", lpFilePart=0x0) returned 0x81 [0108.807] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0108.807] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.com_0.indexeddb.leveldb\\000003.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\indexeddb\\https_www.google.com_0.indexeddb.leveldb\\000003.log"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0108.807] GetFileType (hFile=0x444) returned 0x1 [0108.807] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0108.807] GetFileType (hFile=0x444) returned 0x1 [0108.807] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x13e [0108.807] ReadFile (in: hFile=0x444, lpBuffer=0x22a2378, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x22a2378*, lpNumberOfBytesRead=0x3be5c8*=0x13e, lpOverlapped=0x0) returned 1 [0108.808] CloseHandle (hObject=0x444) returned 1 [0108.819] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.com_0.indexeddb.leveldb\\000003.log", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.com_0.indexeddb.leveldb\\000003.log", lpFilePart=0x0) returned 0x81 [0108.819] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0108.819] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.com_0.indexeddb.leveldb\\000003.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\indexeddb\\https_www.google.com_0.indexeddb.leveldb\\000003.log"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0108.821] GetFileType (hFile=0x444) returned 0x1 [0108.821] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0108.821] GetFileType (hFile=0x444) returned 0x1 [0108.821] WriteFile (in: hFile=0x444, lpBuffer=0x2319a00*, nNumberOfBytesToWrite=0x140, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x2319a00*, lpNumberOfBytesWritten=0x3be4d8*=0x140, lpOverlapped=0x0) returned 1 [0108.822] CloseHandle (hObject=0x444) returned 1 [0108.822] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.com_0.indexeddb.leveldb\\000003.log", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.com_0.indexeddb.leveldb\\000003.log", lpFilePart=0x0) returned 0x81 [0108.822] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.com_0.indexeddb.leveldb\\000003.log.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.com_0.indexeddb.leveldb\\000003.log.xuy", lpFilePart=0x0) returned 0x85 [0108.822] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0108.822] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.com_0.indexeddb.leveldb\\000003.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\indexeddb\\https_www.google.com_0.indexeddb.leveldb\\000003.log"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76727b97, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x76727b97, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2cb6ae6c, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x140)) returned 1 [0108.822] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0108.822] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.com_0.indexeddb.leveldb\\000003.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\indexeddb\\https_www.google.com_0.indexeddb.leveldb\\000003.log"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.com_0.indexeddb.leveldb\\000003.log.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\indexeddb\\https_www.google.com_0.indexeddb.leveldb\\000003.log.xuy")) returned 1 [0108.823] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.com_0.indexeddb.leveldb\\CURRENT", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.com_0.indexeddb.leveldb\\CURRENT", lpFilePart=0x0) returned 0x7e [0108.823] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0108.823] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.com_0.indexeddb.leveldb\\CURRENT" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\indexeddb\\https_www.google.com_0.indexeddb.leveldb\\current"), fInfoLevelId=0x0, lpFileInformation=0x231ada8 | out: lpFileInformation=0x231ada8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x765be5f9, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x765be5f9, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x765be5f9, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0108.824] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0108.824] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.com_0.indexeddb.leveldb\\CURRENT", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.com_0.indexeddb.leveldb\\CURRENT", lpFilePart=0x0) returned 0x7e [0108.824] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0108.824] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.com_0.indexeddb.leveldb\\CURRENT" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\indexeddb\\https_www.google.com_0.indexeddb.leveldb\\current"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0108.824] GetFileType (hFile=0x444) returned 0x1 [0108.824] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0108.824] GetFileType (hFile=0x444) returned 0x1 [0108.824] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x10 [0108.825] ReadFile (in: hFile=0x444, lpBuffer=0x231b120, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x231b120*, lpNumberOfBytesRead=0x3be5c8*=0x10, lpOverlapped=0x0) returned 1 [0108.825] CloseHandle (hObject=0x444) returned 1 [0108.871] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.com_0.indexeddb.leveldb\\CURRENT", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.com_0.indexeddb.leveldb\\CURRENT", lpFilePart=0x0) returned 0x7e [0108.871] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0108.871] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.com_0.indexeddb.leveldb\\CURRENT" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\indexeddb\\https_www.google.com_0.indexeddb.leveldb\\current"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0108.872] GetFileType (hFile=0x444) returned 0x1 [0108.873] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0108.873] GetFileType (hFile=0x444) returned 0x1 [0108.873] WriteFile (in: hFile=0x444, lpBuffer=0x218f7d8*, nNumberOfBytesToWrite=0x20, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x218f7d8*, lpNumberOfBytesWritten=0x3be4d8*=0x20, lpOverlapped=0x0) returned 1 [0108.873] CloseHandle (hObject=0x444) returned 1 [0108.873] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.com_0.indexeddb.leveldb\\CURRENT", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.com_0.indexeddb.leveldb\\CURRENT", lpFilePart=0x0) returned 0x7e [0108.874] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.com_0.indexeddb.leveldb\\CURRENT.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.com_0.indexeddb.leveldb\\CURRENT.xuy", lpFilePart=0x0) returned 0x82 [0108.874] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0108.874] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.com_0.indexeddb.leveldb\\CURRENT" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\indexeddb\\https_www.google.com_0.indexeddb.leveldb\\current"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x765be5f9, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x765be5f9, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2cbdd8e5, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x20)) returned 1 [0108.874] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0108.874] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.com_0.indexeddb.leveldb\\CURRENT" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\indexeddb\\https_www.google.com_0.indexeddb.leveldb\\current"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.com_0.indexeddb.leveldb\\CURRENT.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\indexeddb\\https_www.google.com_0.indexeddb.leveldb\\current.xuy")) returned 1 [0108.875] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.com_0.indexeddb.leveldb\\LOCK", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.com_0.indexeddb.leveldb\\LOCK", lpFilePart=0x0) returned 0x7b [0108.875] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0108.875] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.com_0.indexeddb.leveldb\\LOCK" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\indexeddb\\https_www.google.com_0.indexeddb.leveldb\\lock"), fInfoLevelId=0x0, lpFileInformation=0x2190b68 | out: lpFileInformation=0x2190b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x765bbee9, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x765bbee9, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x765bbee9, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0108.875] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0108.875] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.com_0.indexeddb.leveldb\\LOCK", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.com_0.indexeddb.leveldb\\LOCK", lpFilePart=0x0) returned 0x7b [0108.875] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0108.875] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.com_0.indexeddb.leveldb\\LOCK" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\indexeddb\\https_www.google.com_0.indexeddb.leveldb\\lock"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0108.875] GetFileType (hFile=0x444) returned 0x1 [0108.875] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0108.875] GetFileType (hFile=0x444) returned 0x1 [0108.875] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x0 [0108.875] CloseHandle (hObject=0x444) returned 1 [0108.888] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.com_0.indexeddb.leveldb\\LOCK", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.com_0.indexeddb.leveldb\\LOCK", lpFilePart=0x0) returned 0x7b [0108.888] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0108.888] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.com_0.indexeddb.leveldb\\LOCK" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\indexeddb\\https_www.google.com_0.indexeddb.leveldb\\lock"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0108.889] GetFileType (hFile=0x444) returned 0x1 [0108.889] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0108.889] GetFileType (hFile=0x444) returned 0x1 [0108.889] WriteFile (in: hFile=0x444, lpBuffer=0x2207000*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x2207000*, lpNumberOfBytesWritten=0x3be4d8*=0x10, lpOverlapped=0x0) returned 1 [0108.890] CloseHandle (hObject=0x444) returned 1 [0108.890] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.com_0.indexeddb.leveldb\\LOCK", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.com_0.indexeddb.leveldb\\LOCK", lpFilePart=0x0) returned 0x7b [0108.890] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.com_0.indexeddb.leveldb\\LOCK.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.com_0.indexeddb.leveldb\\LOCK.xuy", lpFilePart=0x0) returned 0x7f [0108.890] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0108.890] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.com_0.indexeddb.leveldb\\LOCK" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\indexeddb\\https_www.google.com_0.indexeddb.leveldb\\lock"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x765bbee9, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x765bbee9, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2cc03825, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0108.890] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0108.890] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.com_0.indexeddb.leveldb\\LOCK" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\indexeddb\\https_www.google.com_0.indexeddb.leveldb\\lock"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.com_0.indexeddb.leveldb\\LOCK.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\indexeddb\\https_www.google.com_0.indexeddb.leveldb\\lock.xuy")) returned 1 [0108.891] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.com_0.indexeddb.leveldb\\LOG", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.com_0.indexeddb.leveldb\\LOG", lpFilePart=0x0) returned 0x7a [0108.892] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0108.892] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.com_0.indexeddb.leveldb\\LOG" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\indexeddb\\https_www.google.com_0.indexeddb.leveldb\\log"), fInfoLevelId=0x0, lpFileInformation=0x2208378 | out: lpFileInformation=0x2208378*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x765bbee9, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x765bbee9, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7fbc51c3, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xb5)) returned 1 [0108.892] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0108.892] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.com_0.indexeddb.leveldb\\LOG", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.com_0.indexeddb.leveldb\\LOG", lpFilePart=0x0) returned 0x7a [0108.892] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0108.892] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.com_0.indexeddb.leveldb\\LOG" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\indexeddb\\https_www.google.com_0.indexeddb.leveldb\\log"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0108.892] GetFileType (hFile=0x444) returned 0x1 [0108.892] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0108.892] GetFileType (hFile=0x444) returned 0x1 [0108.892] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xb5 [0108.892] ReadFile (in: hFile=0x444, lpBuffer=0x2208778, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x2208778*, lpNumberOfBytesRead=0x3be5c8*=0xb5, lpOverlapped=0x0) returned 1 [0108.895] CloseHandle (hObject=0x444) returned 1 [0108.906] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.com_0.indexeddb.leveldb\\LOG", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.com_0.indexeddb.leveldb\\LOG", lpFilePart=0x0) returned 0x7a [0108.907] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0108.907] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.com_0.indexeddb.leveldb\\LOG" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\indexeddb\\https_www.google.com_0.indexeddb.leveldb\\log"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0108.908] GetFileType (hFile=0x444) returned 0x1 [0108.908] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0108.908] GetFileType (hFile=0x444) returned 0x1 [0108.908] WriteFile (in: hFile=0x444, lpBuffer=0x227fa40*, nNumberOfBytesToWrite=0xc0, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x227fa40*, lpNumberOfBytesWritten=0x3be4d8*=0xc0, lpOverlapped=0x0) returned 1 [0108.909] CloseHandle (hObject=0x444) returned 1 [0108.909] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.com_0.indexeddb.leveldb\\LOG", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.com_0.indexeddb.leveldb\\LOG", lpFilePart=0x0) returned 0x7a [0108.909] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.com_0.indexeddb.leveldb\\LOG.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.com_0.indexeddb.leveldb\\LOG.xuy", lpFilePart=0x0) returned 0x7e [0108.909] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0108.909] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.com_0.indexeddb.leveldb\\LOG" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\indexeddb\\https_www.google.com_0.indexeddb.leveldb\\log"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x765bbee9, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x765bbee9, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2cc299ef, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xc0)) returned 1 [0108.910] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0108.910] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.com_0.indexeddb.leveldb\\LOG" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\indexeddb\\https_www.google.com_0.indexeddb.leveldb\\log"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.com_0.indexeddb.leveldb\\LOG.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\indexeddb\\https_www.google.com_0.indexeddb.leveldb\\log.xuy")) returned 1 [0108.911] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.com_0.indexeddb.leveldb\\MANIFEST-000001", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.com_0.indexeddb.leveldb\\MANIFEST-000001", lpFilePart=0x0) returned 0x86 [0108.911] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0108.911] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.com_0.indexeddb.leveldb\\MANIFEST-000001" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\indexeddb\\https_www.google.com_0.indexeddb.leveldb\\manifest-000001"), fInfoLevelId=0x0, lpFileInformation=0x2280db8 | out: lpFileInformation=0x2280db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x765be5f9, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x765be5f9, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x765be5f9, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x17)) returned 1 [0108.911] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0108.911] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.com_0.indexeddb.leveldb\\MANIFEST-000001", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.com_0.indexeddb.leveldb\\MANIFEST-000001", lpFilePart=0x0) returned 0x86 [0108.911] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0108.911] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.com_0.indexeddb.leveldb\\MANIFEST-000001" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\indexeddb\\https_www.google.com_0.indexeddb.leveldb\\manifest-000001"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0108.911] GetFileType (hFile=0x444) returned 0x1 [0108.911] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0108.911] GetFileType (hFile=0x444) returned 0x1 [0108.911] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x17 [0108.912] ReadFile (in: hFile=0x444, lpBuffer=0x2281178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x2281178*, lpNumberOfBytesRead=0x3be5c8*=0x17, lpOverlapped=0x0) returned 1 [0108.912] CloseHandle (hObject=0x444) returned 1 [0108.926] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.com_0.indexeddb.leveldb\\MANIFEST-000001", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.com_0.indexeddb.leveldb\\MANIFEST-000001", lpFilePart=0x0) returned 0x86 [0108.926] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0108.926] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.com_0.indexeddb.leveldb\\MANIFEST-000001" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\indexeddb\\https_www.google.com_0.indexeddb.leveldb\\manifest-000001"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0108.927] GetFileType (hFile=0x444) returned 0x1 [0108.927] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0108.927] GetFileType (hFile=0x444) returned 0x1 [0108.927] WriteFile (in: hFile=0x444, lpBuffer=0x22f8330*, nNumberOfBytesToWrite=0x20, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x22f8330*, lpNumberOfBytesWritten=0x3be4d8*=0x20, lpOverlapped=0x0) returned 1 [0108.928] CloseHandle (hObject=0x444) returned 1 [0108.929] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.com_0.indexeddb.leveldb\\MANIFEST-000001", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.com_0.indexeddb.leveldb\\MANIFEST-000001", lpFilePart=0x0) returned 0x86 [0108.929] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.com_0.indexeddb.leveldb\\MANIFEST-000001.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.com_0.indexeddb.leveldb\\MANIFEST-000001.xuy", lpFilePart=0x0) returned 0x8a [0108.929] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0108.929] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.com_0.indexeddb.leveldb\\MANIFEST-000001" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\indexeddb\\https_www.google.com_0.indexeddb.leveldb\\manifest-000001"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x765be5f9, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x765be5f9, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2cc4fccd, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x20)) returned 1 [0108.929] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0108.929] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.com_0.indexeddb.leveldb\\MANIFEST-000001" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\indexeddb\\https_www.google.com_0.indexeddb.leveldb\\manifest-000001"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.com_0.indexeddb.leveldb\\MANIFEST-000001.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\indexeddb\\https_www.google.com_0.indexeddb.leveldb\\manifest-000001.xuy")) returned 1 [0108.931] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0108.931] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.de_0.indexeddb.leveldb", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.de_0.indexeddb.leveldb", lpFilePart=0x0) returned 0x75 [0108.931] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.de_0.indexeddb.leveldb\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.de_0.indexeddb.leveldb\\", lpFilePart=0x0) returned 0x76 [0108.931] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.de_0.indexeddb.leveldb\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d79d0 [0108.951] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0108.951] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0108.951] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0108.951] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0108.951] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0108.952] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0108.952] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0108.952] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0108.952] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0108.953] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0108.953] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0108.953] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0108.953] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.de_0.indexeddb.leveldb", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.de_0.indexeddb.leveldb", lpFilePart=0x0) returned 0x75 [0108.953] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.de_0.indexeddb.leveldb\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.de_0.indexeddb.leveldb\\", lpFilePart=0x0) returned 0x76 [0108.953] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.de_0.indexeddb.leveldb\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d81b0 [0108.954] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0108.954] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0108.955] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0108.955] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0108.955] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0108.955] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0108.955] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0108.956] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0108.956] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0108.957] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0108.957] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0108.957] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.de_0.indexeddb.leveldb\\000003.log", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.de_0.indexeddb.leveldb\\000003.log", lpFilePart=0x0) returned 0x80 [0108.957] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0108.957] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.de_0.indexeddb.leveldb\\000003.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\indexeddb\\https_www.google.de_0.indexeddb.leveldb\\000003.log"), fInfoLevelId=0x0, lpFileInformation=0x22fdc80 | out: lpFileInformation=0x22fdc80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb774fc44, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb774fc44, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7674a2ef, ftLastWriteTime.dwHighDateTime=0x1d2d59f, nFileSizeHigh=0x0, nFileSizeLow=0x1dc)) returned 1 [0108.969] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0108.969] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.de_0.indexeddb.leveldb\\000003.log", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.de_0.indexeddb.leveldb\\000003.log", lpFilePart=0x0) returned 0x80 [0108.969] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0108.969] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.de_0.indexeddb.leveldb\\000003.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\indexeddb\\https_www.google.de_0.indexeddb.leveldb\\000003.log"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0108.969] GetFileType (hFile=0x444) returned 0x1 [0108.969] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0108.969] GetFileType (hFile=0x444) returned 0x1 [0108.969] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x1dc [0108.969] ReadFile (in: hFile=0x444, lpBuffer=0x22fe1e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x22fe1e8*, lpNumberOfBytesRead=0x3be5c8*=0x1dc, lpOverlapped=0x0) returned 1 [0108.971] CloseHandle (hObject=0x444) returned 1 [0109.055] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.de_0.indexeddb.leveldb\\000003.log", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.de_0.indexeddb.leveldb\\000003.log", lpFilePart=0x0) returned 0x80 [0109.055] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0109.055] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.de_0.indexeddb.leveldb\\000003.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\indexeddb\\https_www.google.de_0.indexeddb.leveldb\\000003.log"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0109.057] GetFileType (hFile=0x444) returned 0x1 [0109.057] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0109.057] GetFileType (hFile=0x444) returned 0x1 [0109.057] WriteFile (in: hFile=0x444, lpBuffer=0x2175e80*, nNumberOfBytesToWrite=0x1e0, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x2175e80*, lpNumberOfBytesWritten=0x3be4d8*=0x1e0, lpOverlapped=0x0) returned 1 [0109.058] CloseHandle (hObject=0x444) returned 1 [0109.058] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.de_0.indexeddb.leveldb\\000003.log", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.de_0.indexeddb.leveldb\\000003.log", lpFilePart=0x0) returned 0x80 [0109.058] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.de_0.indexeddb.leveldb\\000003.log.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.de_0.indexeddb.leveldb\\000003.log.xuy", lpFilePart=0x0) returned 0x84 [0109.058] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0109.058] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.de_0.indexeddb.leveldb\\000003.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\indexeddb\\https_www.google.de_0.indexeddb.leveldb\\000003.log"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb774fc44, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb774fc44, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2cda7617, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x1e0)) returned 1 [0109.058] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0109.058] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.de_0.indexeddb.leveldb\\000003.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\indexeddb\\https_www.google.de_0.indexeddb.leveldb\\000003.log"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.de_0.indexeddb.leveldb\\000003.log.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\indexeddb\\https_www.google.de_0.indexeddb.leveldb\\000003.log.xuy")) returned 1 [0109.059] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.de_0.indexeddb.leveldb\\CURRENT", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.de_0.indexeddb.leveldb\\CURRENT", lpFilePart=0x0) returned 0x7d [0109.059] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0109.059] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.de_0.indexeddb.leveldb\\CURRENT" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\indexeddb\\https_www.google.de_0.indexeddb.leveldb\\current"), fInfoLevelId=0x0, lpFileInformation=0x2177228 | out: lpFileInformation=0x2177228*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb76e1e56, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb76e1e56, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0xb76e455c, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0109.061] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0109.062] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.de_0.indexeddb.leveldb\\CURRENT", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.de_0.indexeddb.leveldb\\CURRENT", lpFilePart=0x0) returned 0x7d [0109.062] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0109.062] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.de_0.indexeddb.leveldb\\CURRENT" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\indexeddb\\https_www.google.de_0.indexeddb.leveldb\\current"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0109.062] GetFileType (hFile=0x444) returned 0x1 [0109.062] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0109.062] GetFileType (hFile=0x444) returned 0x1 [0109.062] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x10 [0109.062] ReadFile (in: hFile=0x444, lpBuffer=0x21775a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x21775a0*, lpNumberOfBytesRead=0x3be5c8*=0x10, lpOverlapped=0x0) returned 1 [0109.063] CloseHandle (hObject=0x444) returned 1 [0109.078] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.de_0.indexeddb.leveldb\\CURRENT", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.de_0.indexeddb.leveldb\\CURRENT", lpFilePart=0x0) returned 0x7d [0109.078] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0109.078] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.de_0.indexeddb.leveldb\\CURRENT" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\indexeddb\\https_www.google.de_0.indexeddb.leveldb\\current"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0109.080] GetFileType (hFile=0x444) returned 0x1 [0109.080] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0109.080] GetFileType (hFile=0x444) returned 0x1 [0109.080] WriteFile (in: hFile=0x444, lpBuffer=0x21ee738*, nNumberOfBytesToWrite=0x20, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x21ee738*, lpNumberOfBytesWritten=0x3be4d8*=0x20, lpOverlapped=0x0) returned 1 [0109.081] CloseHandle (hObject=0x444) returned 1 [0109.081] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.de_0.indexeddb.leveldb\\CURRENT", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.de_0.indexeddb.leveldb\\CURRENT", lpFilePart=0x0) returned 0x7d [0109.081] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.de_0.indexeddb.leveldb\\CURRENT.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.de_0.indexeddb.leveldb\\CURRENT.xuy", lpFilePart=0x0) returned 0x81 [0109.081] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0109.081] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.de_0.indexeddb.leveldb\\CURRENT" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\indexeddb\\https_www.google.de_0.indexeddb.leveldb\\current"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb76e1e56, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb76e1e56, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2cdcd49b, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x20)) returned 1 [0109.081] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0109.081] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.de_0.indexeddb.leveldb\\CURRENT" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\indexeddb\\https_www.google.de_0.indexeddb.leveldb\\current"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.de_0.indexeddb.leveldb\\CURRENT.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\indexeddb\\https_www.google.de_0.indexeddb.leveldb\\current.xuy")) returned 1 [0109.086] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.de_0.indexeddb.leveldb\\LOCK", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.de_0.indexeddb.leveldb\\LOCK", lpFilePart=0x0) returned 0x7a [0109.086] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0109.086] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.de_0.indexeddb.leveldb\\LOCK" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\indexeddb\\https_www.google.de_0.indexeddb.leveldb\\lock"), fInfoLevelId=0x0, lpFileInformation=0x21efac8 | out: lpFileInformation=0x21efac8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb76e1e56, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb76e1e56, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0xb76e1e56, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0109.086] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0109.086] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.de_0.indexeddb.leveldb\\LOCK", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.de_0.indexeddb.leveldb\\LOCK", lpFilePart=0x0) returned 0x7a [0109.086] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0109.086] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.de_0.indexeddb.leveldb\\LOCK" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\indexeddb\\https_www.google.de_0.indexeddb.leveldb\\lock"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0109.087] GetFileType (hFile=0x444) returned 0x1 [0109.087] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0109.087] GetFileType (hFile=0x444) returned 0x1 [0109.087] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x0 [0109.087] CloseHandle (hObject=0x444) returned 1 [0109.102] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.de_0.indexeddb.leveldb\\LOCK", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.de_0.indexeddb.leveldb\\LOCK", lpFilePart=0x0) returned 0x7a [0109.102] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0109.102] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.de_0.indexeddb.leveldb\\LOCK" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\indexeddb\\https_www.google.de_0.indexeddb.leveldb\\lock"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0109.103] GetFileType (hFile=0x444) returned 0x1 [0109.103] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0109.103] GetFileType (hFile=0x444) returned 0x1 [0109.103] WriteFile (in: hFile=0x444, lpBuffer=0x2265f60*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x2265f60*, lpNumberOfBytesWritten=0x3be4d8*=0x10, lpOverlapped=0x0) returned 1 [0109.104] CloseHandle (hObject=0x444) returned 1 [0109.104] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.de_0.indexeddb.leveldb\\LOCK", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.de_0.indexeddb.leveldb\\LOCK", lpFilePart=0x0) returned 0x7a [0109.104] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.de_0.indexeddb.leveldb\\LOCK.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.de_0.indexeddb.leveldb\\LOCK.xuy", lpFilePart=0x0) returned 0x7e [0109.104] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0109.104] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.de_0.indexeddb.leveldb\\LOCK" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\indexeddb\\https_www.google.de_0.indexeddb.leveldb\\lock"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb76e1e56, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb76e1e56, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2ce198c8, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0109.104] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0109.104] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.de_0.indexeddb.leveldb\\LOCK" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\indexeddb\\https_www.google.de_0.indexeddb.leveldb\\lock"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.de_0.indexeddb.leveldb\\LOCK.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\indexeddb\\https_www.google.de_0.indexeddb.leveldb\\lock.xuy")) returned 1 [0109.105] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.de_0.indexeddb.leveldb\\LOG", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.de_0.indexeddb.leveldb\\LOG", lpFilePart=0x0) returned 0x79 [0109.105] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0109.106] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.de_0.indexeddb.leveldb\\LOG" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\indexeddb\\https_www.google.de_0.indexeddb.leveldb\\log"), fInfoLevelId=0x0, lpFileInformation=0x22672d8 | out: lpFileInformation=0x22672d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb76df73d, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x76245e85, ftLastAccessTime.dwHighDateTime=0x1d2d59f, ftLastWriteTime.dwLowDateTime=0x778372ca, ftLastWriteTime.dwHighDateTime=0x1d2d59f, nFileSizeHigh=0x0, nFileSizeLow=0x192)) returned 1 [0109.108] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0109.108] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.de_0.indexeddb.leveldb\\LOG", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.de_0.indexeddb.leveldb\\LOG", lpFilePart=0x0) returned 0x79 [0109.108] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0109.108] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.de_0.indexeddb.leveldb\\LOG" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\indexeddb\\https_www.google.de_0.indexeddb.leveldb\\log"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0109.108] GetFileType (hFile=0x444) returned 0x1 [0109.108] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0109.108] GetFileType (hFile=0x444) returned 0x1 [0109.108] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x192 [0109.108] ReadFile (in: hFile=0x444, lpBuffer=0x22677b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x22677b8*, lpNumberOfBytesRead=0x3be5c8*=0x192, lpOverlapped=0x0) returned 1 [0109.109] CloseHandle (hObject=0x444) returned 1 [0109.123] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.de_0.indexeddb.leveldb\\LOG", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.de_0.indexeddb.leveldb\\LOG", lpFilePart=0x0) returned 0x79 [0109.123] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0109.123] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.de_0.indexeddb.leveldb\\LOG" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\indexeddb\\https_www.google.de_0.indexeddb.leveldb\\log"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0109.125] GetFileType (hFile=0x444) returned 0x1 [0109.125] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0109.125] GetFileType (hFile=0x444) returned 0x1 [0109.125] WriteFile (in: hFile=0x444, lpBuffer=0x22df008*, nNumberOfBytesToWrite=0x1a0, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x22df008*, lpNumberOfBytesWritten=0x3be4d8*=0x1a0, lpOverlapped=0x0) returned 1 [0109.126] CloseHandle (hObject=0x444) returned 1 [0109.126] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.de_0.indexeddb.leveldb\\LOG", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.de_0.indexeddb.leveldb\\LOG", lpFilePart=0x0) returned 0x79 [0109.126] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.de_0.indexeddb.leveldb\\LOG.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.de_0.indexeddb.leveldb\\LOG.xuy", lpFilePart=0x0) returned 0x7d [0109.126] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0109.126] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.de_0.indexeddb.leveldb\\LOG" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\indexeddb\\https_www.google.de_0.indexeddb.leveldb\\log"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb76df73d, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x76245e85, ftLastAccessTime.dwHighDateTime=0x1d2d59f, ftLastWriteTime.dwLowDateTime=0x2ce3faf3, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x1a0)) returned 1 [0109.127] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0109.127] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.de_0.indexeddb.leveldb\\LOG" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\indexeddb\\https_www.google.de_0.indexeddb.leveldb\\log"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.de_0.indexeddb.leveldb\\LOG.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\indexeddb\\https_www.google.de_0.indexeddb.leveldb\\log.xuy")) returned 1 [0109.128] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.de_0.indexeddb.leveldb\\LOG.old", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.de_0.indexeddb.leveldb\\LOG.old", lpFilePart=0x0) returned 0x7d [0109.128] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0109.128] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.de_0.indexeddb.leveldb\\LOG.old" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\indexeddb\\https_www.google.de_0.indexeddb.leveldb\\log.old"), fInfoLevelId=0x0, lpFileInformation=0x22e03a8 | out: lpFileInformation=0x22e03a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb76df73d, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb76df73d, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0xb99ea613, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xb4)) returned 1 [0109.128] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0109.128] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.de_0.indexeddb.leveldb\\LOG.old", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.de_0.indexeddb.leveldb\\LOG.old", lpFilePart=0x0) returned 0x7d [0109.128] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0109.128] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.de_0.indexeddb.leveldb\\LOG.old" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\indexeddb\\https_www.google.de_0.indexeddb.leveldb\\log.old"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0109.129] GetFileType (hFile=0x444) returned 0x1 [0109.129] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0109.129] GetFileType (hFile=0x444) returned 0x1 [0109.129] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xb4 [0109.129] ReadFile (in: hFile=0x444, lpBuffer=0x22e07c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x22e07c8*, lpNumberOfBytesRead=0x3be5c8*=0xb4, lpOverlapped=0x0) returned 1 [0109.131] CloseHandle (hObject=0x444) returned 1 [0109.146] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.de_0.indexeddb.leveldb\\LOG.old", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.de_0.indexeddb.leveldb\\LOG.old", lpFilePart=0x0) returned 0x7d [0109.146] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0109.146] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.de_0.indexeddb.leveldb\\LOG.old" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\indexeddb\\https_www.google.de_0.indexeddb.leveldb\\log.old"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0109.148] GetFileType (hFile=0x444) returned 0x1 [0109.148] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0109.148] GetFileType (hFile=0x444) returned 0x1 [0109.148] WriteFile (in: hFile=0x444, lpBuffer=0x2357aa0*, nNumberOfBytesToWrite=0xc0, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x2357aa0*, lpNumberOfBytesWritten=0x3be4d8*=0xc0, lpOverlapped=0x0) returned 1 [0109.149] CloseHandle (hObject=0x444) returned 1 [0109.149] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.de_0.indexeddb.leveldb\\LOG.old", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.de_0.indexeddb.leveldb\\LOG.old", lpFilePart=0x0) returned 0x7d [0109.149] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.de_0.indexeddb.leveldb\\LOG.old.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.de_0.indexeddb.leveldb\\LOG.old.xuy", lpFilePart=0x0) returned 0x81 [0109.149] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0109.149] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.de_0.indexeddb.leveldb\\LOG.old" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\indexeddb\\https_www.google.de_0.indexeddb.leveldb\\log.old"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb76df73d, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb76df73d, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2ce8bf3e, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xc0)) returned 1 [0109.150] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0109.150] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.de_0.indexeddb.leveldb\\LOG.old" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\indexeddb\\https_www.google.de_0.indexeddb.leveldb\\log.old"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.de_0.indexeddb.leveldb\\LOG.old.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\indexeddb\\https_www.google.de_0.indexeddb.leveldb\\log.old.xuy")) returned 1 [0109.151] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.de_0.indexeddb.leveldb\\MANIFEST-000001", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.de_0.indexeddb.leveldb\\MANIFEST-000001", lpFilePart=0x0) returned 0x85 [0109.151] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0109.151] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.de_0.indexeddb.leveldb\\MANIFEST-000001" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\indexeddb\\https_www.google.de_0.indexeddb.leveldb\\manifest-000001"), fInfoLevelId=0x0, lpFileInformation=0x2358e30 | out: lpFileInformation=0x2358e30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb76e1e56, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb76e1e56, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0xb76e1e56, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x17)) returned 1 [0109.151] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0109.151] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.de_0.indexeddb.leveldb\\MANIFEST-000001", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.de_0.indexeddb.leveldb\\MANIFEST-000001", lpFilePart=0x0) returned 0x85 [0109.151] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0109.152] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.de_0.indexeddb.leveldb\\MANIFEST-000001" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\indexeddb\\https_www.google.de_0.indexeddb.leveldb\\manifest-000001"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0109.152] GetFileType (hFile=0x444) returned 0x1 [0109.152] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0109.152] GetFileType (hFile=0x444) returned 0x1 [0109.152] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x17 [0109.152] ReadFile (in: hFile=0x444, lpBuffer=0x23591f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x23591f0*, lpNumberOfBytesRead=0x3be5c8*=0x17, lpOverlapped=0x0) returned 1 [0109.153] CloseHandle (hObject=0x444) returned 1 [0109.201] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.de_0.indexeddb.leveldb\\MANIFEST-000001", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.de_0.indexeddb.leveldb\\MANIFEST-000001", lpFilePart=0x0) returned 0x85 [0109.201] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0109.201] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.de_0.indexeddb.leveldb\\MANIFEST-000001" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\indexeddb\\https_www.google.de_0.indexeddb.leveldb\\manifest-000001"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0109.203] GetFileType (hFile=0x444) returned 0x1 [0109.203] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0109.203] GetFileType (hFile=0x444) returned 0x1 [0109.203] WriteFile (in: hFile=0x444, lpBuffer=0x21d01e8*, nNumberOfBytesToWrite=0x20, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x21d01e8*, lpNumberOfBytesWritten=0x3be4d8*=0x20, lpOverlapped=0x0) returned 1 [0109.204] CloseHandle (hObject=0x444) returned 1 [0109.204] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.de_0.indexeddb.leveldb\\MANIFEST-000001", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.de_0.indexeddb.leveldb\\MANIFEST-000001", lpFilePart=0x0) returned 0x85 [0109.204] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.de_0.indexeddb.leveldb\\MANIFEST-000001.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.de_0.indexeddb.leveldb\\MANIFEST-000001.xuy", lpFilePart=0x0) returned 0x89 [0109.204] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0109.204] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.de_0.indexeddb.leveldb\\MANIFEST-000001" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\indexeddb\\https_www.google.de_0.indexeddb.leveldb\\manifest-000001"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb76e1e56, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb76e1e56, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2cefe67c, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x20)) returned 1 [0109.204] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0109.204] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.de_0.indexeddb.leveldb\\MANIFEST-000001" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\indexeddb\\https_www.google.de_0.indexeddb.leveldb\\manifest-000001"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.de_0.indexeddb.leveldb\\MANIFEST-000001.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\indexeddb\\https_www.google.de_0.indexeddb.leveldb\\manifest-000001.xuy")) returned 1 [0109.205] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0109.205] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons", lpFilePart=0x0) returned 0x51 [0109.205] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\", lpFilePart=0x0) returned 0x52 [0109.206] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d7eb0 [0109.209] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0109.209] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0109.209] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0109.209] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0109.210] FindClose (in: hFindFile=0x5d7eb0 | out: hFindFile=0x5d7eb0) returned 1 [0109.212] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0109.212] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0109.213] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0109.213] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons", lpFilePart=0x0) returned 0x51 [0109.213] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\", lpFilePart=0x0) returned 0x52 [0109.213] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d7cd0 [0109.213] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0109.213] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0109.213] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0109.213] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0109.213] FindClose (in: hFindFile=0x5d7cd0 | out: hFindFile=0x5d7cd0) returned 1 [0109.214] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0109.214] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0109.214] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\883.tmp", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\883.tmp", lpFilePart=0x0) returned 0x59 [0109.214] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0109.214] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\883.tmp" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\jumplisticons\\883.tmp"), fInfoLevelId=0x0, lpFileInformation=0x21d3b10 | out: lpFileInformation=0x21d3b10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77e224a9, ftCreationTime.dwHighDateTime=0x1d2d59f, ftLastAccessTime.dwLowDateTime=0x77e224a9, ftLastAccessTime.dwHighDateTime=0x1d2d59f, ftLastWriteTime.dwLowDateTime=0x77e224a9, ftLastWriteTime.dwHighDateTime=0x1d2d59f, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0109.214] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0109.214] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\883.tmp", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\883.tmp", lpFilePart=0x0) returned 0x59 [0109.214] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0109.214] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\883.tmp" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\jumplisticons\\883.tmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0109.214] GetFileType (hFile=0x444) returned 0x1 [0109.214] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0109.214] GetFileType (hFile=0x444) returned 0x1 [0109.214] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be708 | out: lpFileSizeHigh=0x3be708*=0x0) returned 0x0 [0109.214] CloseHandle (hObject=0x444) returned 1 [0109.229] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\883.tmp", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\883.tmp", lpFilePart=0x0) returned 0x59 [0109.229] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0109.229] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\883.tmp" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\jumplisticons\\883.tmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0109.230] GetFileType (hFile=0x444) returned 0x1 [0109.230] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0109.230] GetFileType (hFile=0x444) returned 0x1 [0109.230] WriteFile (in: hFile=0x444, lpBuffer=0x2249ee8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x3be548, lpOverlapped=0x0 | out: lpBuffer=0x2249ee8*, lpNumberOfBytesWritten=0x3be548*=0x10, lpOverlapped=0x0) returned 1 [0109.231] CloseHandle (hObject=0x444) returned 1 [0109.231] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\883.tmp", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\883.tmp", lpFilePart=0x0) returned 0x59 [0109.231] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\883.tmp.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\883.tmp.xuy", lpFilePart=0x0) returned 0x5d [0109.231] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0109.231] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\883.tmp" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\jumplisticons\\883.tmp"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77e224a9, ftCreationTime.dwHighDateTime=0x1d2d59f, ftLastAccessTime.dwLowDateTime=0x77e224a9, ftLastAccessTime.dwHighDateTime=0x1d2d59f, ftLastWriteTime.dwLowDateTime=0x2cf4ab25, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0109.231] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0109.232] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\883.tmp" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\jumplisticons\\883.tmp"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\883.tmp.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\jumplisticons\\883.tmp.xuy")) returned 1 [0109.232] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\884.tmp", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\884.tmp", lpFilePart=0x0) returned 0x59 [0109.233] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0109.233] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\884.tmp" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\jumplisticons\\884.tmp"), fInfoLevelId=0x0, lpFileInformation=0x224b1c8 | out: lpFileInformation=0x224b1c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77e224a9, ftCreationTime.dwHighDateTime=0x1d2d59f, ftLastAccessTime.dwLowDateTime=0x77e224a9, ftLastAccessTime.dwHighDateTime=0x1d2d59f, ftLastWriteTime.dwLowDateTime=0x77e224a9, ftLastWriteTime.dwHighDateTime=0x1d2d59f, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0109.233] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0109.233] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\884.tmp", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\884.tmp", lpFilePart=0x0) returned 0x59 [0109.233] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0109.233] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\884.tmp" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\jumplisticons\\884.tmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0109.233] GetFileType (hFile=0x444) returned 0x1 [0109.233] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0109.233] GetFileType (hFile=0x444) returned 0x1 [0109.233] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be708 | out: lpFileSizeHigh=0x3be708*=0x0) returned 0x0 [0109.233] CloseHandle (hObject=0x444) returned 1 [0109.245] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\884.tmp", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\884.tmp", lpFilePart=0x0) returned 0x59 [0109.245] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0109.245] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\884.tmp" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\jumplisticons\\884.tmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0109.246] GetFileType (hFile=0x444) returned 0x1 [0109.246] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0109.246] GetFileType (hFile=0x444) returned 0x1 [0109.246] WriteFile (in: hFile=0x444, lpBuffer=0x22c15a0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x3be548, lpOverlapped=0x0 | out: lpBuffer=0x22c15a0*, lpNumberOfBytesWritten=0x3be548*=0x10, lpOverlapped=0x0) returned 1 [0109.247] CloseHandle (hObject=0x444) returned 1 [0109.247] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\884.tmp", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\884.tmp", lpFilePart=0x0) returned 0x59 [0109.247] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\884.tmp.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\884.tmp.xuy", lpFilePart=0x0) returned 0x5d [0109.247] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0109.247] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\884.tmp" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\jumplisticons\\884.tmp"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77e224a9, ftCreationTime.dwHighDateTime=0x1d2d59f, ftLastAccessTime.dwLowDateTime=0x77e224a9, ftLastAccessTime.dwHighDateTime=0x1d2d59f, ftLastWriteTime.dwLowDateTime=0x2cf70dd3, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0109.247] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0109.247] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\884.tmp" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\jumplisticons\\884.tmp"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\884.tmp.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\jumplisticons\\884.tmp.xuy")) returned 1 [0109.248] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0109.248] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIconsOld", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIconsOld", lpFilePart=0x0) returned 0x54 [0109.248] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIconsOld\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIconsOld\\", lpFilePart=0x0) returned 0x55 [0109.248] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIconsOld\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d8090 [0109.250] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0109.250] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0109.250] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0109.250] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0109.250] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0109.250] FindClose (in: hFindFile=0x5d8090 | out: hFindFile=0x5d8090) returned 1 [0109.250] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0109.250] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0109.250] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0109.250] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIconsOld", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIconsOld", lpFilePart=0x0) returned 0x54 [0109.250] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIconsOld\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIconsOld\\", lpFilePart=0x0) returned 0x55 [0109.251] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIconsOld\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d7d30 [0109.251] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0109.251] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0109.251] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0109.251] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0109.251] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0109.251] FindClose (in: hFindFile=0x5d7d30 | out: hFindFile=0x5d7d30) returned 1 [0109.251] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0109.251] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0109.252] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIconsOld\\5D07.tmp", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIconsOld\\5D07.tmp", lpFilePart=0x0) returned 0x5d [0109.252] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0109.252] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIconsOld\\5D07.tmp" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\jumplisticonsold\\5d07.tmp"), fInfoLevelId=0x0, lpFileInformation=0x22c5340 | out: lpFileInformation=0x22c5340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90b8240a, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x90b8240a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x90b8240a, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0109.252] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0109.252] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIconsOld\\5D07.tmp", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIconsOld\\5D07.tmp", lpFilePart=0x0) returned 0x5d [0109.252] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0109.252] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIconsOld\\5D07.tmp" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\jumplisticonsold\\5d07.tmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0109.252] GetFileType (hFile=0x444) returned 0x1 [0109.252] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0109.253] GetFileType (hFile=0x444) returned 0x1 [0109.253] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be708 | out: lpFileSizeHigh=0x3be708*=0x0) returned 0x0 [0109.253] CloseHandle (hObject=0x444) returned 1 [0109.264] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIconsOld\\5D07.tmp", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIconsOld\\5D07.tmp", lpFilePart=0x0) returned 0x5d [0109.265] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0109.265] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIconsOld\\5D07.tmp" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\jumplisticonsold\\5d07.tmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0109.266] GetFileType (hFile=0x444) returned 0x1 [0109.266] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0109.266] GetFileType (hFile=0x444) returned 0x1 [0109.266] WriteFile (in: hFile=0x444, lpBuffer=0x233b748*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x3be548, lpOverlapped=0x0 | out: lpBuffer=0x233b748*, lpNumberOfBytesWritten=0x3be548*=0x10, lpOverlapped=0x0) returned 1 [0109.267] CloseHandle (hObject=0x444) returned 1 [0109.267] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIconsOld\\5D07.tmp", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIconsOld\\5D07.tmp", lpFilePart=0x0) returned 0x5d [0109.267] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIconsOld\\5D07.tmp.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIconsOld\\5D07.tmp.xuy", lpFilePart=0x0) returned 0x61 [0109.267] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0109.267] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIconsOld\\5D07.tmp" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\jumplisticonsold\\5d07.tmp"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90b8240a, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x90b8240a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2cf96fbb, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0109.267] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0109.267] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIconsOld\\5D07.tmp" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\jumplisticonsold\\5d07.tmp"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIconsOld\\5D07.tmp.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\jumplisticonsold\\5d07.tmp.xuy")) returned 1 [0109.269] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIconsOld\\5D08.tmp", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIconsOld\\5D08.tmp", lpFilePart=0x0) returned 0x5d [0109.269] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0109.269] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIconsOld\\5D08.tmp" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\jumplisticonsold\\5d08.tmp"), fInfoLevelId=0x0, lpFileInformation=0x233ca40 | out: lpFileInformation=0x233ca40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90b8240a, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x90b8240a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x90b8240a, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0109.269] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0109.269] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIconsOld\\5D08.tmp", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIconsOld\\5D08.tmp", lpFilePart=0x0) returned 0x5d [0109.269] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0109.269] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIconsOld\\5D08.tmp" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\jumplisticonsold\\5d08.tmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0109.269] GetFileType (hFile=0x444) returned 0x1 [0109.269] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0109.269] GetFileType (hFile=0x444) returned 0x1 [0109.269] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be708 | out: lpFileSizeHigh=0x3be708*=0x0) returned 0x0 [0109.269] CloseHandle (hObject=0x444) returned 1 [0109.333] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIconsOld\\5D08.tmp", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIconsOld\\5D08.tmp", lpFilePart=0x0) returned 0x5d [0109.333] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0109.333] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIconsOld\\5D08.tmp" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\jumplisticonsold\\5d08.tmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0109.334] GetFileType (hFile=0x444) returned 0x1 [0109.334] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0109.334] GetFileType (hFile=0x444) returned 0x1 [0109.334] WriteFile (in: hFile=0x444, lpBuffer=0x21b2760*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x3be548, lpOverlapped=0x0 | out: lpBuffer=0x21b2760*, lpNumberOfBytesWritten=0x3be548*=0x10, lpOverlapped=0x0) returned 1 [0109.336] CloseHandle (hObject=0x444) returned 1 [0109.336] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIconsOld\\5D08.tmp", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIconsOld\\5D08.tmp", lpFilePart=0x0) returned 0x5d [0109.336] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIconsOld\\5D08.tmp.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIconsOld\\5D08.tmp.xuy", lpFilePart=0x0) returned 0x61 [0109.336] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0109.336] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIconsOld\\5D08.tmp" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\jumplisticonsold\\5d08.tmp"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90b8240a, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x90b8240a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2d055bcb, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0109.336] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0109.337] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIconsOld\\5D08.tmp" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\jumplisticonsold\\5d08.tmp"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIconsOld\\5D08.tmp.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\jumplisticonsold\\5d08.tmp.xuy")) returned 1 [0109.354] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIconsOld\\5D19.tmp", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIconsOld\\5D19.tmp", lpFilePart=0x0) returned 0x5d [0109.354] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0109.354] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIconsOld\\5D19.tmp" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\jumplisticonsold\\5d19.tmp"), fInfoLevelId=0x0, lpFileInformation=0x21b3a58 | out: lpFileInformation=0x21b3a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90b84b32, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x90b84b32, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x90b84b32, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0109.354] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0109.354] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIconsOld\\5D19.tmp", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIconsOld\\5D19.tmp", lpFilePart=0x0) returned 0x5d [0109.354] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0109.354] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIconsOld\\5D19.tmp" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\jumplisticonsold\\5d19.tmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0109.355] GetFileType (hFile=0x444) returned 0x1 [0109.355] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0109.355] GetFileType (hFile=0x444) returned 0x1 [0109.355] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be708 | out: lpFileSizeHigh=0x3be708*=0x0) returned 0x0 [0109.355] CloseHandle (hObject=0x444) returned 1 [0109.371] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIconsOld\\5D19.tmp", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIconsOld\\5D19.tmp", lpFilePart=0x0) returned 0x5d [0109.371] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0109.371] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIconsOld\\5D19.tmp" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\jumplisticonsold\\5d19.tmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0109.372] GetFileType (hFile=0x444) returned 0x1 [0109.372] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0109.372] GetFileType (hFile=0x444) returned 0x1 [0109.372] WriteFile (in: hFile=0x444, lpBuffer=0x2229e60*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x3be548, lpOverlapped=0x0 | out: lpBuffer=0x2229e60*, lpNumberOfBytesWritten=0x3be548*=0x10, lpOverlapped=0x0) returned 1 [0109.374] CloseHandle (hObject=0x444) returned 1 [0109.374] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIconsOld\\5D19.tmp", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIconsOld\\5D19.tmp", lpFilePart=0x0) returned 0x5d [0109.374] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIconsOld\\5D19.tmp.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIconsOld\\5D19.tmp.xuy", lpFilePart=0x0) returned 0x61 [0109.374] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0109.374] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIconsOld\\5D19.tmp" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\jumplisticonsold\\5d19.tmp"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90b84b32, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x90b84b32, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2d0a21af, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0109.374] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0109.374] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIconsOld\\5D19.tmp" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\jumplisticonsold\\5d19.tmp"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIconsOld\\5D19.tmp.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\jumplisticonsold\\5d19.tmp.xuy")) returned 1 [0109.376] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0109.376] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings", lpFilePart=0x0) returned 0x5c [0109.376] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\", lpFilePart=0x0) returned 0x5d [0109.376] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d7550 [0109.376] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0109.376] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0109.377] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0109.377] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0109.377] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0109.377] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0109.377] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0109.377] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings", lpFilePart=0x0) returned 0x5c [0109.377] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\", lpFilePart=0x0) returned 0x5d [0109.377] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d78b0 [0109.377] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0109.377] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0109.378] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0109.378] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0109.378] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0109.378] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0109.378] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0109.378] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi", lpFilePart=0x0) returned 0x7d [0109.378] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\", lpFilePart=0x0) returned 0x7e [0109.378] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d7fd0 [0109.394] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0109.394] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0109.394] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0109.394] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0109.394] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0109.394] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0109.394] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0109.395] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0109.395] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0109.395] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0109.395] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0109.396] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0109.396] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi", lpFilePart=0x0) returned 0x7d [0109.396] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\", lpFilePart=0x0) returned 0x7e [0109.396] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d78b0 [0109.397] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0109.397] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0109.397] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0109.398] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0109.398] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0109.398] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0109.398] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0109.398] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0109.398] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0109.399] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0109.399] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0109.399] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\000003.log", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\000003.log", lpFilePart=0x0) returned 0x88 [0109.399] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0109.400] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\000003.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\000003.log"), fInfoLevelId=0x0, lpFileInformation=0x2231f90 | out: lpFileInformation=0x2231f90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78189124, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x78189124, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x78189124, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0109.402] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0109.402] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\000003.log", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\000003.log", lpFilePart=0x0) returned 0x88 [0109.402] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0109.402] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\000003.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\000003.log"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0109.402] GetFileType (hFile=0x444) returned 0x1 [0109.402] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0109.402] GetFileType (hFile=0x444) returned 0x1 [0109.402] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x0 [0109.403] CloseHandle (hObject=0x444) returned 1 [0109.420] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\000003.log", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\000003.log", lpFilePart=0x0) returned 0x88 [0109.420] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0109.420] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\000003.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\000003.log"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0109.421] GetFileType (hFile=0x444) returned 0x1 [0109.421] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0109.421] GetFileType (hFile=0x444) returned 0x1 [0109.421] WriteFile (in: hFile=0x444, lpBuffer=0x22a84a0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x22a84a0*, lpNumberOfBytesWritten=0x3be4d8*=0x10, lpOverlapped=0x0) returned 1 [0109.422] CloseHandle (hObject=0x444) returned 1 [0109.422] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\000003.log", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\000003.log", lpFilePart=0x0) returned 0x88 [0109.423] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\000003.log.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\000003.log.xuy", lpFilePart=0x0) returned 0x8c [0109.423] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0109.423] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\000003.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\000003.log"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78189124, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x78189124, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2d1191fb, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0109.423] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0109.423] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\000003.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\000003.log"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\000003.log.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\000003.log.xuy")) returned 1 [0109.424] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\CURRENT", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\CURRENT", lpFilePart=0x0) returned 0x85 [0109.424] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0109.424] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\CURRENT" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\current"), fInfoLevelId=0x0, lpFileInformation=0x22a9878 | out: lpFileInformation=0x22a9878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x780be6bb, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x780be6bb, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x780be6bb, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0109.425] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0109.425] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\CURRENT", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\CURRENT", lpFilePart=0x0) returned 0x85 [0109.425] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0109.425] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\CURRENT" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\current"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0109.425] GetFileType (hFile=0x444) returned 0x1 [0109.425] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0109.425] GetFileType (hFile=0x444) returned 0x1 [0109.425] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x10 [0109.425] ReadFile (in: hFile=0x444, lpBuffer=0x22a9c10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x22a9c10*, lpNumberOfBytesRead=0x3be5c8*=0x10, lpOverlapped=0x0) returned 1 [0109.427] CloseHandle (hObject=0x444) returned 1 [0109.443] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\CURRENT", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\CURRENT", lpFilePart=0x0) returned 0x85 [0109.443] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0109.443] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\CURRENT" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\current"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0109.445] GetFileType (hFile=0x444) returned 0x1 [0109.445] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0109.445] GetFileType (hFile=0x444) returned 0x1 [0109.445] WriteFile (in: hFile=0x444, lpBuffer=0x2320db8*, nNumberOfBytesToWrite=0x20, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x2320db8*, lpNumberOfBytesWritten=0x3be4d8*=0x20, lpOverlapped=0x0) returned 1 [0109.447] CloseHandle (hObject=0x444) returned 1 [0109.447] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\CURRENT", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\CURRENT", lpFilePart=0x0) returned 0x85 [0109.447] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\CURRENT.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\CURRENT.xuy", lpFilePart=0x0) returned 0x89 [0109.447] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0109.447] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\CURRENT" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\current"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x780be6bb, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x780be6bb, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2d160c76, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x20)) returned 1 [0109.447] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0109.447] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\CURRENT" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\current"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\CURRENT.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\current.xuy")) returned 1 [0109.448] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\LOCK", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\LOCK", lpFilePart=0x0) returned 0x82 [0109.448] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0109.448] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\LOCK" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\lock"), fInfoLevelId=0x0, lpFileInformation=0x2322178 | out: lpFileInformation=0x2322178*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x780be6bb, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x780be6bb, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x780be6bb, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0109.448] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0109.449] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\LOCK", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\LOCK", lpFilePart=0x0) returned 0x82 [0109.449] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0109.449] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\LOCK" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\lock"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0109.449] GetFileType (hFile=0x444) returned 0x1 [0109.449] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0109.449] GetFileType (hFile=0x444) returned 0x1 [0109.449] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x0 [0109.449] CloseHandle (hObject=0x444) returned 1 [0109.569] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\LOCK", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\LOCK", lpFilePart=0x0) returned 0x82 [0109.569] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0109.569] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\LOCK" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\lock"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0109.570] GetFileType (hFile=0x444) returned 0x1 [0109.570] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0109.570] GetFileType (hFile=0x444) returned 0x1 [0109.570] WriteFile (in: hFile=0x444, lpBuffer=0x2198c08*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x2198c08*, lpNumberOfBytesWritten=0x3be4d8*=0x10, lpOverlapped=0x0) returned 1 [0109.571] CloseHandle (hObject=0x444) returned 1 [0109.571] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\LOCK", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\LOCK", lpFilePart=0x0) returned 0x82 [0109.571] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\LOCK.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\LOCK.xuy", lpFilePart=0x0) returned 0x86 [0109.571] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0109.572] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\LOCK" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\lock"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x780be6bb, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x780be6bb, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2d27294d, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0109.572] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0109.573] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\LOCK" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\lock"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\LOCK.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\lock.xuy")) returned 1 [0109.574] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\LOG", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\LOG", lpFilePart=0x0) returned 0x81 [0109.575] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0109.575] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\LOG" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\log"), fInfoLevelId=0x0, lpFileInformation=0x2199fb0 | out: lpFileInformation=0x2199fb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x780bbfb2, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb8bf0597, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0xb9fe8183, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x1a2)) returned 1 [0109.575] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0109.575] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\LOG", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\LOG", lpFilePart=0x0) returned 0x81 [0109.575] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0109.575] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\LOG" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\log"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0109.575] GetFileType (hFile=0x444) returned 0x1 [0109.575] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0109.575] GetFileType (hFile=0x444) returned 0x1 [0109.575] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x1a2 [0109.575] ReadFile (in: hFile=0x444, lpBuffer=0x219a4c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x219a4c0*, lpNumberOfBytesRead=0x3be5c8*=0x1a2, lpOverlapped=0x0) returned 1 [0109.576] CloseHandle (hObject=0x444) returned 1 [0109.590] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\LOG", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\LOG", lpFilePart=0x0) returned 0x81 [0109.590] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0109.590] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\LOG" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\log"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0109.592] GetFileType (hFile=0x444) returned 0x1 [0109.592] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0109.592] GetFileType (hFile=0x444) returned 0x1 [0109.592] WriteFile (in: hFile=0x444, lpBuffer=0x2211d70*, nNumberOfBytesToWrite=0x1b0, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x2211d70*, lpNumberOfBytesWritten=0x3be4d8*=0x1b0, lpOverlapped=0x0) returned 1 [0109.593] CloseHandle (hObject=0x444) returned 1 [0109.594] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\LOG", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\LOG", lpFilePart=0x0) returned 0x81 [0109.594] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\LOG.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\LOG.xuy", lpFilePart=0x0) returned 0x85 [0109.594] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0109.594] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\LOG" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\log"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x780bbfb2, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb8bf0597, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2d2bf2b8, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x1b0)) returned 1 [0109.594] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0109.594] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\LOG" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\log"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\LOG.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\log.xuy")) returned 1 [0109.595] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\LOG.old", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\LOG.old", lpFilePart=0x0) returned 0x85 [0109.595] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0109.595] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\LOG.old" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\log.old"), fInfoLevelId=0x0, lpFileInformation=0x2213140 | out: lpFileInformation=0x2213140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x780bbfb2, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x780bbfb2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x818133c4, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xbc)) returned 1 [0109.596] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0109.596] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\LOG.old", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\LOG.old", lpFilePart=0x0) returned 0x85 [0109.596] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0109.596] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\LOG.old" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\log.old"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0109.596] GetFileType (hFile=0x444) returned 0x1 [0109.596] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0109.596] GetFileType (hFile=0x444) returned 0x1 [0109.596] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xbc [0109.596] ReadFile (in: hFile=0x444, lpBuffer=0x2213588, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x2213588*, lpNumberOfBytesRead=0x3be5c8*=0xbc, lpOverlapped=0x0) returned 1 [0109.597] CloseHandle (hObject=0x444) returned 1 [0109.617] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\LOG.old", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\LOG.old", lpFilePart=0x0) returned 0x85 [0109.617] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0109.617] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\LOG.old" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\log.old"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0109.619] GetFileType (hFile=0x444) returned 0x1 [0109.619] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0109.619] GetFileType (hFile=0x444) returned 0x1 [0109.619] WriteFile (in: hFile=0x444, lpBuffer=0x228a868*, nNumberOfBytesToWrite=0xc0, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x228a868*, lpNumberOfBytesWritten=0x3be4d8*=0xc0, lpOverlapped=0x0) returned 1 [0109.620] CloseHandle (hObject=0x444) returned 1 [0109.620] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\LOG.old", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\LOG.old", lpFilePart=0x0) returned 0x85 [0109.620] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\LOG.old.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\LOG.old.xuy", lpFilePart=0x0) returned 0x89 [0109.620] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0109.620] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\LOG.old" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\log.old"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x780bbfb2, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x780bbfb2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2d30b334, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xc0)) returned 1 [0109.621] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0109.621] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\LOG.old" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\log.old"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\LOG.old.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\log.old.xuy")) returned 1 [0109.622] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\MANIFEST-000001", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\MANIFEST-000001", lpFilePart=0x0) returned 0x8d [0109.622] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0109.622] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\MANIFEST-000001" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\manifest-000001"), fInfoLevelId=0x0, lpFileInformation=0x228bc28 | out: lpFileInformation=0x228bc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x780be6bb, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x780be6bb, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x780be6bb, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x29)) returned 1 [0109.622] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0109.622] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\MANIFEST-000001", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\MANIFEST-000001", lpFilePart=0x0) returned 0x8d [0109.622] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0109.623] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\MANIFEST-000001" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\manifest-000001"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0109.623] GetFileType (hFile=0x444) returned 0x1 [0109.623] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0109.623] GetFileType (hFile=0x444) returned 0x1 [0109.623] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x29 [0109.623] ReadFile (in: hFile=0x444, lpBuffer=0x228c020, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x228c020*, lpNumberOfBytesRead=0x3be5c8*=0x29, lpOverlapped=0x0) returned 1 [0109.624] CloseHandle (hObject=0x444) returned 1 [0109.641] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\MANIFEST-000001", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\MANIFEST-000001", lpFilePart=0x0) returned 0x8d [0109.641] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0109.641] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\MANIFEST-000001" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\manifest-000001"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0109.644] GetFileType (hFile=0x444) returned 0x1 [0109.644] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0109.644] GetFileType (hFile=0x444) returned 0x1 [0109.644] WriteFile (in: hFile=0x444, lpBuffer=0x2303200*, nNumberOfBytesToWrite=0x30, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x2303200*, lpNumberOfBytesWritten=0x3be4d8*=0x30, lpOverlapped=0x0) returned 1 [0109.645] CloseHandle (hObject=0x444) returned 1 [0109.645] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\MANIFEST-000001", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\MANIFEST-000001", lpFilePart=0x0) returned 0x8d [0109.645] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\MANIFEST-000001.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\MANIFEST-000001.xuy", lpFilePart=0x0) returned 0x91 [0109.645] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0109.645] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\MANIFEST-000001" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\manifest-000001"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x780be6bb, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x780be6bb, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2d33144f, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x30)) returned 1 [0109.646] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0109.646] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\MANIFEST-000001" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\manifest-000001"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\MANIFEST-000001.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\manifest-000001.xuy")) returned 1 [0109.647] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0109.648] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage", lpFilePart=0x0) returned 0x51 [0109.648] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\", lpFilePart=0x0) returned 0x52 [0109.648] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d7550 [0109.659] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0109.659] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0109.659] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0109.659] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0109.659] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0109.659] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0109.659] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0109.660] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0109.660] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0109.660] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0109.660] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage", lpFilePart=0x0) returned 0x51 [0109.660] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\", lpFilePart=0x0) returned 0x52 [0109.660] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d79d0 [0109.661] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0109.661] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0109.662] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0109.662] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0109.662] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0109.662] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0109.662] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0109.663] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0109.663] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0109.663] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage", lpFilePart=0x0) returned 0x92 [0109.663] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0109.663] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\local storage\\chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage"), fInfoLevelId=0x0, lpFileInformation=0x2307ed8 | out: lpFileInformation=0x2307ed8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8868fbec, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x8868fbec, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0xba37b9fc, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0109.664] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0109.664] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage", lpFilePart=0x0) returned 0x92 [0109.664] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0109.664] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\local storage\\chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage"), fInfoLevelId=0x0, lpFileInformation=0x2308120 | out: lpFileInformation=0x2308120*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8868fbec, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x8868fbec, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0xba37b9fc, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0109.664] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0109.664] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage", nBufferLength=0x105, lpBuffer=0x3be120, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage", lpFilePart=0x0) returned 0x92 [0109.664] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0109.664] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\local storage\\chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0109.665] GetFileType (hFile=0x444) returned 0x1 [0109.665] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be570) returned 1 [0109.665] GetFileType (hFile=0x444) returned 0x1 [0109.665] ReadFile (in: hFile=0x444, lpBuffer=0x230a6e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be688, lpOverlapped=0x0 | out: lpBuffer=0x230a6e0*, lpNumberOfBytesRead=0x3be688*=0x1000, lpOverlapped=0x0) returned 1 [0109.734] CloseHandle (hObject=0x444) returned 1 [0109.735] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage", nBufferLength=0x105, lpBuffer=0x3be120, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage", lpFilePart=0x0) returned 0x92 [0109.735] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0109.735] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\local storage\\chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0109.735] GetFileType (hFile=0x444) returned 0x1 [0109.735] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be570) returned 1 [0109.735] GetFileType (hFile=0x444) returned 0x1 [0109.736] WriteFile (in: hFile=0x444, lpBuffer=0x21629a8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be738, lpOverlapped=0x0 | out: lpBuffer=0x21629a8*, lpNumberOfBytesWritten=0x3be738*=0x2000, lpOverlapped=0x0) returned 1 [0109.736] CloseHandle (hObject=0x444) returned 1 [0109.736] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage", lpFilePart=0x0) returned 0x92 [0109.736] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage.xuy", lpFilePart=0x0) returned 0x96 [0109.736] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0109.736] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\local storage\\chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8868fbec, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x8868fbec, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2d4245d3, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0109.736] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0109.736] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\local storage\\chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\local storage\\chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage.xuy")) returned 1 [0109.737] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage-journal", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage-journal", lpFilePart=0x0) returned 0x9a [0109.737] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0109.737] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage-journal" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\local storage\\chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage-journal"), fInfoLevelId=0x0, lpFileInformation=0x2189b90 | out: lpFileInformation=0x2189b90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8868fbec, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x8868fbec, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0xba43a7cc, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0109.738] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0109.738] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage-journal", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage-journal", lpFilePart=0x0) returned 0x9a [0109.738] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0109.738] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage-journal" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\local storage\\chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage-journal"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0109.738] GetFileType (hFile=0x444) returned 0x1 [0109.738] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0109.738] GetFileType (hFile=0x444) returned 0x1 [0109.738] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be708 | out: lpFileSizeHigh=0x3be708*=0x0) returned 0x0 [0109.738] CloseHandle (hObject=0x444) returned 1 [0109.757] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage-journal", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage-journal", lpFilePart=0x0) returned 0x9a [0109.757] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0109.757] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage-journal" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\local storage\\chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage-journal"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0109.758] GetFileType (hFile=0x444) returned 0x1 [0109.758] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0109.758] GetFileType (hFile=0x444) returned 0x1 [0109.758] WriteFile (in: hFile=0x444, lpBuffer=0x2200280*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x3be548, lpOverlapped=0x0 | out: lpBuffer=0x2200280*, lpNumberOfBytesWritten=0x3be548*=0x10, lpOverlapped=0x0) returned 1 [0109.759] CloseHandle (hObject=0x444) returned 1 [0109.759] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage-journal", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage-journal", lpFilePart=0x0) returned 0x9a [0109.760] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage-journal.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage-journal.xuy", lpFilePart=0x0) returned 0x9e [0109.760] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0109.760] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage-journal" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\local storage\\chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage-journal"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8868fbec, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x8868fbec, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2d44aca8, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0109.760] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0109.760] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage-journal" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\local storage\\chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage-journal"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage-journal.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\local storage\\chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage-journal.xuy")) returned 1 [0109.761] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\https_www.google.de_0.localstorage", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\https_www.google.de_0.localstorage", lpFilePart=0x0) returned 0x74 [0109.761] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0109.761] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\https_www.google.de_0.localstorage" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\local storage\\https_www.google.de_0.localstorage"), fInfoLevelId=0x0, lpFileInformation=0x22016f0 | out: lpFileInformation=0x22016f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91ef7099, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x91ef7099, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0xba51f3da, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xc00)) returned 1 [0109.762] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0109.762] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\https_www.google.de_0.localstorage", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\https_www.google.de_0.localstorage", lpFilePart=0x0) returned 0x74 [0109.762] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0109.762] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\https_www.google.de_0.localstorage" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\local storage\\https_www.google.de_0.localstorage"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0109.762] GetFileType (hFile=0x444) returned 0x1 [0109.762] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0109.762] GetFileType (hFile=0x444) returned 0x1 [0109.762] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be708 | out: lpFileSizeHigh=0x3be708*=0x0) returned 0xc00 [0109.763] ReadFile (in: hFile=0x444, lpBuffer=0x22026a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be638, lpOverlapped=0x0 | out: lpBuffer=0x22026a8*, lpNumberOfBytesRead=0x3be638*=0xc00, lpOverlapped=0x0) returned 1 [0109.844] CloseHandle (hObject=0x444) returned 1 [0109.856] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\https_www.google.de_0.localstorage", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\https_www.google.de_0.localstorage", lpFilePart=0x0) returned 0x74 [0109.856] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0109.856] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\https_www.google.de_0.localstorage" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\local storage\\https_www.google.de_0.localstorage"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0109.858] GetFileType (hFile=0x444) returned 0x1 [0109.858] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0109.858] GetFileType (hFile=0x444) returned 0x1 [0109.858] WriteFile (in: hFile=0x444, lpBuffer=0x227d360*, nNumberOfBytesToWrite=0xc10, lpNumberOfBytesWritten=0x3be548, lpOverlapped=0x0 | out: lpBuffer=0x227d360*, lpNumberOfBytesWritten=0x3be548*=0xc10, lpOverlapped=0x0) returned 1 [0109.859] CloseHandle (hObject=0x444) returned 1 [0109.859] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\https_www.google.de_0.localstorage", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\https_www.google.de_0.localstorage", lpFilePart=0x0) returned 0x74 [0109.859] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\https_www.google.de_0.localstorage.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\https_www.google.de_0.localstorage.xuy", lpFilePart=0x0) returned 0x78 [0109.859] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0109.859] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\https_www.google.de_0.localstorage" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\local storage\\https_www.google.de_0.localstorage"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91ef7099, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x91ef7099, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2d555793, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xc10)) returned 1 [0109.859] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0109.859] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\https_www.google.de_0.localstorage" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\local storage\\https_www.google.de_0.localstorage"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\https_www.google.de_0.localstorage.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\local storage\\https_www.google.de_0.localstorage.xuy")) returned 1 [0109.860] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\https_www.google.de_0.localstorage-journal", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\https_www.google.de_0.localstorage-journal", lpFilePart=0x0) returned 0x7c [0109.860] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0109.860] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\https_www.google.de_0.localstorage-journal" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\local storage\\https_www.google.de_0.localstorage-journal"), fInfoLevelId=0x0, lpFileInformation=0x227e708 | out: lpFileInformation=0x227e708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91ef97a8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x91ef97a8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0xba5457bd, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0109.861] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0109.861] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\https_www.google.de_0.localstorage-journal", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\https_www.google.de_0.localstorage-journal", lpFilePart=0x0) returned 0x7c [0109.861] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0109.861] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\https_www.google.de_0.localstorage-journal" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\local storage\\https_www.google.de_0.localstorage-journal"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0109.861] GetFileType (hFile=0x444) returned 0x1 [0109.861] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0109.861] GetFileType (hFile=0x444) returned 0x1 [0109.861] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be708 | out: lpFileSizeHigh=0x3be708*=0x0) returned 0x0 [0109.861] CloseHandle (hObject=0x444) returned 1 [0109.872] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\https_www.google.de_0.localstorage-journal", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\https_www.google.de_0.localstorage-journal", lpFilePart=0x0) returned 0x7c [0109.872] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0109.872] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\https_www.google.de_0.localstorage-journal" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\local storage\\https_www.google.de_0.localstorage-journal"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0109.872] GetFileType (hFile=0x444) returned 0x1 [0109.872] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0109.872] GetFileType (hFile=0x444) returned 0x1 [0109.873] WriteFile (in: hFile=0x444, lpBuffer=0x22f4c90*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x3be548, lpOverlapped=0x0 | out: lpBuffer=0x22f4c90*, lpNumberOfBytesWritten=0x3be548*=0x10, lpOverlapped=0x0) returned 1 [0109.873] CloseHandle (hObject=0x444) returned 1 [0109.873] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\https_www.google.de_0.localstorage-journal", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\https_www.google.de_0.localstorage-journal", lpFilePart=0x0) returned 0x7c [0109.873] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\https_www.google.de_0.localstorage-journal.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\https_www.google.de_0.localstorage-journal.xuy", lpFilePart=0x0) returned 0x80 [0109.873] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0109.874] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\https_www.google.de_0.localstorage-journal" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\local storage\\https_www.google.de_0.localstorage-journal"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91ef97a8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x91ef97a8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2d555793, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0109.874] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0109.874] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\https_www.google.de_0.localstorage-journal" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\local storage\\https_www.google.de_0.localstorage-journal"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\https_www.google.de_0.localstorage-journal.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\local storage\\https_www.google.de_0.localstorage-journal.xuy")) returned 1 [0109.877] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0109.877] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker", lpFilePart=0x0) returned 0x52 [0109.877] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\", lpFilePart=0x0) returned 0x53 [0109.877] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d7c70 [0109.879] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0109.880] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0109.880] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0109.880] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0109.880] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0109.880] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0109.880] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0109.880] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0109.880] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0109.880] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker", lpFilePart=0x0) returned 0x52 [0109.880] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\", lpFilePart=0x0) returned 0x53 [0109.880] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d7550 [0109.881] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0109.881] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0109.881] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0109.881] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0109.881] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0109.881] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0109.881] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0109.881] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0109.881] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0109.881] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage", lpFilePart=0x0) returned 0x5f [0109.881] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\", lpFilePart=0x0) returned 0x60 [0109.882] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d7f10 [0109.883] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0109.883] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0109.883] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0109.883] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0109.883] FindClose (in: hFindFile=0x5d7f10 | out: hFindFile=0x5d7f10) returned 1 [0109.883] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0109.883] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0109.883] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0109.883] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage", lpFilePart=0x0) returned 0x5f [0109.883] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\", lpFilePart=0x0) returned 0x60 [0109.883] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d78b0 [0109.884] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0109.884] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0109.884] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0109.884] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0109.884] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0109.884] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0109.884] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0109.884] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0109.884] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8", nBufferLength=0x105, lpBuffer=0x3be130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8", lpFilePart=0x0) returned 0x88 [0109.884] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\", nBufferLength=0x105, lpBuffer=0x3be0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\", lpFilePart=0x0) returned 0x89 [0109.884] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\*", lpFindFileData=0x3be2e0 | out: lpFindFileData=0x3be2e0) returned 0x5d7eb0 [0109.891] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0109.891] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0109.891] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0109.891] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 0 [0109.891] FindClose (in: hFindFile=0x5d7eb0 | out: hFindFile=0x5d7eb0) returned 1 [0109.892] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0109.892] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0109.892] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0109.892] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8", nBufferLength=0x105, lpBuffer=0x3be130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8", lpFilePart=0x0) returned 0x88 [0109.892] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\", nBufferLength=0x105, lpBuffer=0x3be0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\", lpFilePart=0x0) returned 0x89 [0109.892] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\*", lpFindFileData=0x3be2e0 | out: lpFindFileData=0x3be2e0) returned 0x5d78b0 [0109.893] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0109.893] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0109.893] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0109.893] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 0 [0109.893] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0109.894] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0109.894] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0109.894] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\index.txt", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\index.txt", lpFilePart=0x0) returned 0x92 [0109.894] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0109.894] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\index.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\28da9c56fde4021055a681112c092453f74d8dd8\\index.txt"), fInfoLevelId=0x0, lpFileInformation=0x22fef50 | out: lpFileInformation=0x22fef50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d343208, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x805c0f94, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x805c0f94, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x5a)) returned 1 [0109.897] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0109.897] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\index.txt", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\index.txt", lpFilePart=0x0) returned 0x92 [0109.897] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0109.897] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\index.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\28da9c56fde4021055a681112c092453f74d8dd8\\index.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0109.897] GetFileType (hFile=0x444) returned 0x1 [0109.897] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be400) returned 1 [0109.897] GetFileType (hFile=0x444) returned 0x1 [0109.898] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be628 | out: lpFileSizeHigh=0x3be628*=0x0) returned 0x5a [0109.898] ReadFile (in: hFile=0x444, lpBuffer=0x22ff378, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be558, lpOverlapped=0x0 | out: lpBuffer=0x22ff378*, lpNumberOfBytesRead=0x3be558*=0x5a, lpOverlapped=0x0) returned 1 [0109.903] CloseHandle (hObject=0x444) returned 1 [0109.965] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\index.txt", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\index.txt", lpFilePart=0x0) returned 0x92 [0109.966] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0109.966] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\index.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\28da9c56fde4021055a681112c092453f74d8dd8\\index.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0109.967] GetFileType (hFile=0x444) returned 0x1 [0109.967] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be400) returned 1 [0109.968] GetFileType (hFile=0x444) returned 0x1 [0109.968] WriteFile (in: hFile=0x444, lpBuffer=0x2173788*, nNumberOfBytesToWrite=0x60, lpNumberOfBytesWritten=0x3be468, lpOverlapped=0x0 | out: lpBuffer=0x2173788*, lpNumberOfBytesWritten=0x3be468*=0x60, lpOverlapped=0x0) returned 1 [0109.970] CloseHandle (hObject=0x444) returned 1 [0109.970] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\index.txt", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\index.txt", lpFilePart=0x0) returned 0x92 [0109.970] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\index.txt.xuy", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\index.txt.xuy", lpFilePart=0x0) returned 0x96 [0109.970] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0109.970] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\index.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\28da9c56fde4021055a681112c092453f74d8dd8\\index.txt"), fInfoLevelId=0x0, lpFileInformation=0x3be670 | out: lpFileInformation=0x3be670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d343208, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x805c0f94, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2d660860, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x60)) returned 1 [0109.970] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0109.970] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\index.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\28da9c56fde4021055a681112c092453f74d8dd8\\index.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\index.txt.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\28da9c56fde4021055a681112c092453f74d8dd8\\index.txt.xuy")) returned 1 [0109.971] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0109.972] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025", nBufferLength=0x105, lpBuffer=0x3be0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025", lpFilePart=0x0) returned 0xad [0109.972] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\", nBufferLength=0x105, lpBuffer=0x3be060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\", lpFilePart=0x0) returned 0xae [0109.972] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\*", lpFindFileData=0x3be270 | out: lpFindFileData=0x3be270) returned 0x5d7df0 [0109.984] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0109.985] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0109.985] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0109.985] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0109.985] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0109.985] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0109.985] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0109.985] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 0 [0109.986] FindClose (in: hFindFile=0x5d7df0 | out: hFindFile=0x5d7df0) returned 1 [0109.986] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0109.987] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0109.987] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0109.987] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025", nBufferLength=0x105, lpBuffer=0x3be0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025", lpFilePart=0x0) returned 0xad [0109.987] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\", nBufferLength=0x105, lpBuffer=0x3be060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\", lpFilePart=0x0) returned 0xae [0109.987] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\*", lpFindFileData=0x3be270 | out: lpFindFileData=0x3be270) returned 0x5d7a30 [0109.988] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0109.988] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0109.988] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0109.988] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0109.989] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0109.989] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0109.989] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0109.989] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 0 [0109.989] FindClose (in: hFindFile=0x5d7a30 | out: hFindFile=0x5d7a30) returned 1 [0109.990] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0109.990] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0109.990] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\1dd0446e4b2b157b_0", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\1dd0446e4b2b157b_0", lpFilePart=0x0) returned 0xc0 [0109.990] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0109.990] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\1dd0446e4b2b157b_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\1dd0446e4b2b157b_0"), fInfoLevelId=0x0, lpFileInformation=0x217aa78 | out: lpFileInformation=0x217aa78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d5e01d0, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7d5e01d0, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7d5e2940, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x1ab9)) returned 1 [0109.992] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0109.993] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\1dd0446e4b2b157b_0", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\1dd0446e4b2b157b_0", lpFilePart=0x0) returned 0xc0 [0109.993] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0109.993] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\1dd0446e4b2b157b_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\1dd0446e4b2b157b_0"), fInfoLevelId=0x0, lpFileInformation=0x217acc0 | out: lpFileInformation=0x217acc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d5e01d0, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7d5e01d0, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7d5e2940, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x1ab9)) returned 1 [0109.993] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0109.993] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\1dd0446e4b2b157b_0", nBufferLength=0x105, lpBuffer=0x3bdfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\1dd0446e4b2b157b_0", lpFilePart=0x0) returned 0xc0 [0109.993] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0109.993] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\1dd0446e4b2b157b_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\1dd0446e4b2b157b_0"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0109.994] GetFileType (hFile=0x444) returned 0x1 [0109.994] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be420) returned 1 [0109.994] GetFileType (hFile=0x444) returned 0x1 [0109.994] ReadFile (in: hFile=0x444, lpBuffer=0x217d280, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be538, lpOverlapped=0x0 | out: lpBuffer=0x217d280*, lpNumberOfBytesRead=0x3be538*=0x1000, lpOverlapped=0x0) returned 1 [0110.024] CloseHandle (hObject=0x444) returned 1 [0110.024] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\1dd0446e4b2b157b_0", nBufferLength=0x105, lpBuffer=0x3bdfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\1dd0446e4b2b157b_0", lpFilePart=0x0) returned 0xc0 [0110.024] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0110.025] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\1dd0446e4b2b157b_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\1dd0446e4b2b157b_0"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0110.025] GetFileType (hFile=0x444) returned 0x1 [0110.025] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be420) returned 1 [0110.025] GetFileType (hFile=0x444) returned 0x1 [0110.025] WriteFile (in: hFile=0x444, lpBuffer=0x217aee8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be5e8, lpOverlapped=0x0 | out: lpBuffer=0x217aee8*, lpNumberOfBytesWritten=0x3be5e8*=0x2000, lpOverlapped=0x0) returned 1 [0110.026] CloseHandle (hObject=0x444) returned 1 [0110.026] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\1dd0446e4b2b157b_0", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\1dd0446e4b2b157b_0", lpFilePart=0x0) returned 0xc0 [0110.026] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\1dd0446e4b2b157b_0.xuy", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\1dd0446e4b2b157b_0.xuy", lpFilePart=0x0) returned 0xc4 [0110.026] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0110.026] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\1dd0446e4b2b157b_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\1dd0446e4b2b157b_0"), fInfoLevelId=0x0, lpFileInformation=0x3be600 | out: lpFileInformation=0x3be600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d5e01d0, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7d5e01d0, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2d6d3199, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0110.026] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0110.026] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\1dd0446e4b2b157b_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\1dd0446e4b2b157b_0"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\1dd0446e4b2b157b_0.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\1dd0446e4b2b157b_0.xuy")) returned 1 [0110.028] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\4c3d15a0a987ed15_0", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\4c3d15a0a987ed15_0", lpFilePart=0x0) returned 0xc0 [0110.028] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0110.028] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\4c3d15a0a987ed15_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\4c3d15a0a987ed15_0"), fInfoLevelId=0x0, lpFileInformation=0x21f99d8 | out: lpFileInformation=0x21f99d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d5f134f, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7d5f134f, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7d5f614f, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x36fc9)) returned 1 [0110.028] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0110.028] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\4c3d15a0a987ed15_0", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\4c3d15a0a987ed15_0", lpFilePart=0x0) returned 0xc0 [0110.028] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0110.028] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\4c3d15a0a987ed15_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\4c3d15a0a987ed15_0"), fInfoLevelId=0x0, lpFileInformation=0x21f9c20 | out: lpFileInformation=0x21f9c20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d5f134f, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7d5f134f, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7d5f614f, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x36fc9)) returned 1 [0110.028] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0110.028] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\4c3d15a0a987ed15_0", nBufferLength=0x105, lpBuffer=0x3bdfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\4c3d15a0a987ed15_0", lpFilePart=0x0) returned 0xc0 [0110.028] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0110.028] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\4c3d15a0a987ed15_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\4c3d15a0a987ed15_0"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0110.029] GetFileType (hFile=0x444) returned 0x1 [0110.029] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be420) returned 1 [0110.029] GetFileType (hFile=0x444) returned 0x1 [0110.029] ReadFile (in: hFile=0x444, lpBuffer=0x21fc1e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be538, lpOverlapped=0x0 | out: lpBuffer=0x21fc1e0*, lpNumberOfBytesRead=0x3be538*=0x1000, lpOverlapped=0x0) returned 1 [0110.060] CloseHandle (hObject=0x444) returned 1 [0110.060] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\4c3d15a0a987ed15_0", nBufferLength=0x105, lpBuffer=0x3bdfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\4c3d15a0a987ed15_0", lpFilePart=0x0) returned 0xc0 [0110.060] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0110.060] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\4c3d15a0a987ed15_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\4c3d15a0a987ed15_0"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0110.060] GetFileType (hFile=0x444) returned 0x1 [0110.060] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be420) returned 1 [0110.060] GetFileType (hFile=0x444) returned 0x1 [0110.060] WriteFile (in: hFile=0x444, lpBuffer=0x21f9e48*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be5e8, lpOverlapped=0x0 | out: lpBuffer=0x21f9e48*, lpNumberOfBytesWritten=0x3be5e8*=0x2000, lpOverlapped=0x0) returned 1 [0110.061] CloseHandle (hObject=0x444) returned 1 [0110.061] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\4c3d15a0a987ed15_0", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\4c3d15a0a987ed15_0", lpFilePart=0x0) returned 0xc0 [0110.061] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\4c3d15a0a987ed15_0.xuy", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\4c3d15a0a987ed15_0.xuy", lpFilePart=0x0) returned 0xc4 [0110.061] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0110.061] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\4c3d15a0a987ed15_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\4c3d15a0a987ed15_0"), fInfoLevelId=0x0, lpFileInformation=0x3be600 | out: lpFileInformation=0x3be600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d5f134f, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7d5f134f, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2d71f507, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x36fc9)) returned 1 [0110.061] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0110.061] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\4c3d15a0a987ed15_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\4c3d15a0a987ed15_0"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\4c3d15a0a987ed15_0.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\4c3d15a0a987ed15_0.xuy")) returned 1 [0110.063] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\d4a1768080ecf56d_0", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\d4a1768080ecf56d_0", lpFilePart=0x0) returned 0xc0 [0110.063] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0110.063] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\d4a1768080ecf56d_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\d4a1768080ecf56d_0"), fInfoLevelId=0x0, lpFileInformation=0x2278938 | out: lpFileInformation=0x2278938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d5d65a1, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7d5d65a1, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7d5ddaca, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x3460)) returned 1 [0110.064] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0110.064] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\d4a1768080ecf56d_0", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\d4a1768080ecf56d_0", lpFilePart=0x0) returned 0xc0 [0110.064] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0110.064] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\d4a1768080ecf56d_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\d4a1768080ecf56d_0"), fInfoLevelId=0x0, lpFileInformation=0x2278b80 | out: lpFileInformation=0x2278b80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d5d65a1, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7d5d65a1, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7d5ddaca, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x3460)) returned 1 [0110.064] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0110.064] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\d4a1768080ecf56d_0", nBufferLength=0x105, lpBuffer=0x3bdfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\d4a1768080ecf56d_0", lpFilePart=0x0) returned 0xc0 [0110.064] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0110.064] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\d4a1768080ecf56d_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\d4a1768080ecf56d_0"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0110.065] GetFileType (hFile=0x444) returned 0x1 [0110.065] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be420) returned 1 [0110.065] GetFileType (hFile=0x444) returned 0x1 [0110.065] ReadFile (in: hFile=0x444, lpBuffer=0x227b140, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be538, lpOverlapped=0x0 | out: lpBuffer=0x227b140*, lpNumberOfBytesRead=0x3be538*=0x1000, lpOverlapped=0x0) returned 1 [0110.088] CloseHandle (hObject=0x444) returned 1 [0110.088] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\d4a1768080ecf56d_0", nBufferLength=0x105, lpBuffer=0x3bdfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\d4a1768080ecf56d_0", lpFilePart=0x0) returned 0xc0 [0110.088] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0110.088] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\d4a1768080ecf56d_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\d4a1768080ecf56d_0"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0110.088] GetFileType (hFile=0x444) returned 0x1 [0110.088] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be420) returned 1 [0110.088] GetFileType (hFile=0x444) returned 0x1 [0110.089] WriteFile (in: hFile=0x444, lpBuffer=0x2278da8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be5e8, lpOverlapped=0x0 | out: lpBuffer=0x2278da8*, lpNumberOfBytesWritten=0x3be5e8*=0x2000, lpOverlapped=0x0) returned 1 [0110.089] CloseHandle (hObject=0x444) returned 1 [0110.089] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\d4a1768080ecf56d_0", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\d4a1768080ecf56d_0", lpFilePart=0x0) returned 0xc0 [0110.089] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\d4a1768080ecf56d_0.xuy", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\d4a1768080ecf56d_0.xuy", lpFilePart=0x0) returned 0xc4 [0110.089] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0110.089] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\d4a1768080ecf56d_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\d4a1768080ecf56d_0"), fInfoLevelId=0x0, lpFileInformation=0x3be600 | out: lpFileInformation=0x3be600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d5d65a1, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7d5d65a1, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2d76bf56, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x3460)) returned 1 [0110.089] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0110.089] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\d4a1768080ecf56d_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\d4a1768080ecf56d_0"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\d4a1768080ecf56d_0.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\d4a1768080ecf56d_0.xuy")) returned 1 [0110.090] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\fdf2cfeb8ad0eeac_0", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\fdf2cfeb8ad0eeac_0", lpFilePart=0x0) returned 0xc0 [0110.090] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0110.090] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\fdf2cfeb8ad0eeac_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\fdf2cfeb8ad0eeac_0"), fInfoLevelId=0x0, lpFileInformation=0x22f7898 | out: lpFileInformation=0x22f7898*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d5e5005, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7d5e5005, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7d5eec0e, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xab4)) returned 1 [0110.090] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0110.090] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\fdf2cfeb8ad0eeac_0", nBufferLength=0x105, lpBuffer=0x3bdf40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\fdf2cfeb8ad0eeac_0", lpFilePart=0x0) returned 0xc0 [0110.090] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be420) returned 1 [0110.090] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\fdf2cfeb8ad0eeac_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\fdf2cfeb8ad0eeac_0"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0110.091] GetFileType (hFile=0x444) returned 0x1 [0110.091] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be390) returned 1 [0110.091] GetFileType (hFile=0x444) returned 0x1 [0110.091] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be5b8 | out: lpFileSizeHigh=0x3be5b8*=0x0) returned 0xab4 [0110.091] ReadFile (in: hFile=0x444, lpBuffer=0x22f87f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be4e8, lpOverlapped=0x0 | out: lpBuffer=0x22f87f8*, lpNumberOfBytesRead=0x3be4e8*=0xab4, lpOverlapped=0x0) returned 1 [0110.109] CloseHandle (hObject=0x444) returned 1 [0110.165] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\fdf2cfeb8ad0eeac_0", nBufferLength=0x105, lpBuffer=0x3bdf40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\fdf2cfeb8ad0eeac_0", lpFilePart=0x0) returned 0xc0 [0110.165] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be420) returned 1 [0110.165] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\fdf2cfeb8ad0eeac_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\fdf2cfeb8ad0eeac_0"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0110.167] GetFileType (hFile=0x444) returned 0x1 [0110.167] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be390) returned 1 [0110.167] GetFileType (hFile=0x444) returned 0x1 [0110.167] WriteFile (in: hFile=0x444, lpBuffer=0x21741a0*, nNumberOfBytesToWrite=0xac0, lpNumberOfBytesWritten=0x3be3f8, lpOverlapped=0x0 | out: lpBuffer=0x21741a0*, lpNumberOfBytesWritten=0x3be3f8*=0xac0, lpOverlapped=0x0) returned 1 [0110.168] CloseHandle (hObject=0x444) returned 1 [0110.168] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\fdf2cfeb8ad0eeac_0", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\fdf2cfeb8ad0eeac_0", lpFilePart=0x0) returned 0xc0 [0110.168] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\fdf2cfeb8ad0eeac_0.xuy", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\fdf2cfeb8ad0eeac_0.xuy", lpFilePart=0x0) returned 0xc4 [0110.168] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0110.168] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\fdf2cfeb8ad0eeac_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\fdf2cfeb8ad0eeac_0"), fInfoLevelId=0x0, lpFileInformation=0x3be600 | out: lpFileInformation=0x3be600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d5e5005, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7d5e5005, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2d82a625, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xac0)) returned 1 [0110.168] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0110.168] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\fdf2cfeb8ad0eeac_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\fdf2cfeb8ad0eeac_0"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\fdf2cfeb8ad0eeac_0.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\fdf2cfeb8ad0eeac_0.xuy")) returned 1 [0110.170] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\index", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\index", lpFilePart=0x0) returned 0xb3 [0110.170] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0110.170] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\index" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\index"), fInfoLevelId=0x0, lpFileInformation=0x21756c8 | out: lpFileInformation=0x21756c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d35b8bd, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7d35b8bd, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7d35b8bd, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x18)) returned 1 [0110.170] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0110.170] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\index", nBufferLength=0x105, lpBuffer=0x3bdf40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\index", lpFilePart=0x0) returned 0xb3 [0110.170] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be420) returned 1 [0110.170] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\index" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\index"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0110.170] GetFileType (hFile=0x444) returned 0x1 [0110.170] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be390) returned 1 [0110.170] GetFileType (hFile=0x444) returned 0x1 [0110.170] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be5b8 | out: lpFileSizeHigh=0x3be5b8*=0x0) returned 0x18 [0110.170] ReadFile (in: hFile=0x444, lpBuffer=0x2175b18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be4e8, lpOverlapped=0x0 | out: lpBuffer=0x2175b18*, lpNumberOfBytesRead=0x3be4e8*=0x18, lpOverlapped=0x0) returned 1 [0110.172] CloseHandle (hObject=0x444) returned 1 [0110.184] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\index", nBufferLength=0x105, lpBuffer=0x3bdf40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\index", lpFilePart=0x0) returned 0xb3 [0110.184] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be420) returned 1 [0110.185] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\index" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\index"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0110.186] GetFileType (hFile=0x444) returned 0x1 [0110.186] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be390) returned 1 [0110.186] GetFileType (hFile=0x444) returned 0x1 [0110.186] WriteFile (in: hFile=0x444, lpBuffer=0x21ecd10*, nNumberOfBytesToWrite=0x20, lpNumberOfBytesWritten=0x3be3f8, lpOverlapped=0x0 | out: lpBuffer=0x21ecd10*, lpNumberOfBytesWritten=0x3be3f8*=0x20, lpOverlapped=0x0) returned 1 [0110.187] CloseHandle (hObject=0x444) returned 1 [0110.187] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\index", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\index", lpFilePart=0x0) returned 0xb3 [0110.187] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\index.xuy", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\index.xuy", lpFilePart=0x0) returned 0xb7 [0110.187] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0110.187] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\index" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\index"), fInfoLevelId=0x0, lpFileInformation=0x3be600 | out: lpFileInformation=0x3be600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d35b8bd, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7d35b8bd, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2d876944, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x20)) returned 1 [0110.188] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0110.188] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\index" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\index"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\index.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\index.xuy")) returned 1 [0110.189] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0110.189] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\index-dir", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\index-dir", lpFilePart=0x0) returned 0xb7 [0110.189] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\index-dir\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\index-dir\\", lpFilePart=0x0) returned 0xb8 [0110.189] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\index-dir\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7c70 [0110.219] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0110.219] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0110.219] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0110.219] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0110.220] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0110.220] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0110.220] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0110.220] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\index-dir", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\index-dir", lpFilePart=0x0) returned 0xb7 [0110.220] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\index-dir\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\index-dir\\", lpFilePart=0x0) returned 0xb8 [0110.220] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\index-dir\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7550 [0110.221] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0110.221] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0110.221] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0110.221] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0110.222] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0110.222] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0110.222] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\index-dir\\the-real-index", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\index-dir\\the-real-index", lpFilePart=0x0) returned 0xc6 [0110.222] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0110.222] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\index-dir\\the-real-index" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\index-dir\\the-real-index"), fInfoLevelId=0x0, lpFileInformation=0x21f1be0 | out: lpFileInformation=0x21f1be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d35dfd6, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x9acd0278, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x9acd0278, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x90)) returned 1 [0110.222] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0110.222] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\index-dir\\the-real-index", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\index-dir\\the-real-index", lpFilePart=0x0) returned 0xc6 [0110.223] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0110.223] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\index-dir\\the-real-index" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\index-dir\\the-real-index"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0110.223] GetFileType (hFile=0x444) returned 0x1 [0110.223] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0110.223] GetFileType (hFile=0x444) returned 0x1 [0110.223] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x90 [0110.223] ReadFile (in: hFile=0x444, lpBuffer=0x21f2118, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x21f2118*, lpNumberOfBytesRead=0x3be478*=0x90, lpOverlapped=0x0) returned 1 [0110.224] CloseHandle (hObject=0x444) returned 1 [0110.234] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\index-dir\\the-real-index", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\index-dir\\the-real-index", lpFilePart=0x0) returned 0xc6 [0110.234] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0110.234] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\index-dir\\the-real-index" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\index-dir\\the-real-index"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0110.235] GetFileType (hFile=0x444) returned 0x1 [0110.235] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0110.236] GetFileType (hFile=0x444) returned 0x1 [0110.236] WriteFile (in: hFile=0x444, lpBuffer=0x2269450*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x2269450*, lpNumberOfBytesWritten=0x3be388*=0xa0, lpOverlapped=0x0) returned 1 [0110.236] CloseHandle (hObject=0x444) returned 1 [0110.236] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\index-dir\\the-real-index", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\index-dir\\the-real-index", lpFilePart=0x0) returned 0xc6 [0110.236] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\index-dir\\the-real-index.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\index-dir\\the-real-index.xuy", lpFilePart=0x0) returned 0xca [0110.236] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0110.237] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\index-dir\\the-real-index" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\index-dir\\the-real-index"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d35dfd6, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x9acd0278, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2d8e9180, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xa0)) returned 1 [0110.237] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0110.237] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\index-dir\\the-real-index" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\index-dir\\the-real-index"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\index-dir\\the-real-index.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\index-dir\\the-real-index.xuy")) returned 1 [0110.238] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0110.238] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3", nBufferLength=0x105, lpBuffer=0x3be130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3", lpFilePart=0x0) returned 0x88 [0110.238] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\", nBufferLength=0x105, lpBuffer=0x3be0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\", lpFilePart=0x0) returned 0x89 [0110.238] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\*", lpFindFileData=0x3be2e0 | out: lpFindFileData=0x3be2e0) returned 0x5d7550 [0110.251] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0110.251] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0110.251] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0110.251] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0110.251] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 0 [0110.251] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0110.252] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0110.252] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0110.252] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0110.252] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3", nBufferLength=0x105, lpBuffer=0x3be130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3", lpFilePart=0x0) returned 0x88 [0110.252] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\", nBufferLength=0x105, lpBuffer=0x3be0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\", lpFilePart=0x0) returned 0x89 [0110.252] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\*", lpFindFileData=0x3be2e0 | out: lpFindFileData=0x3be2e0) returned 0x5d81b0 [0110.253] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0110.253] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0110.253] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0110.254] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0110.254] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 0 [0110.254] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0110.254] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0110.254] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0110.254] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\index.txt", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\index.txt", lpFilePart=0x0) returned 0x92 [0110.254] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0110.255] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\index.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\index.txt"), fInfoLevelId=0x0, lpFileInformation=0x226e780 | out: lpFileInformation=0x226e780*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb91b878c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7bb7abf8, ftLastAccessTime.dwHighDateTime=0x1d2d59f, ftLastWriteTime.dwLowDateTime=0x7bb7abf8, ftLastWriteTime.dwHighDateTime=0x1d2d59f, nFileSizeHigh=0x0, nFileSizeLow=0x5a)) returned 1 [0110.255] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0110.255] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\index.txt", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\index.txt", lpFilePart=0x0) returned 0x92 [0110.255] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0110.255] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\index.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\index.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0110.255] GetFileType (hFile=0x444) returned 0x1 [0110.255] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be400) returned 1 [0110.256] GetFileType (hFile=0x444) returned 0x1 [0110.256] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be628 | out: lpFileSizeHigh=0x3be628*=0x0) returned 0x5a [0110.256] ReadFile (in: hFile=0x444, lpBuffer=0x226eba8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be558, lpOverlapped=0x0 | out: lpBuffer=0x226eba8*, lpNumberOfBytesRead=0x3be558*=0x5a, lpOverlapped=0x0) returned 1 [0110.256] CloseHandle (hObject=0x444) returned 1 [0110.267] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\index.txt", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\index.txt", lpFilePart=0x0) returned 0x92 [0110.267] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0110.267] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\index.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\index.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0110.269] GetFileType (hFile=0x444) returned 0x1 [0110.269] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be400) returned 1 [0110.269] GetFileType (hFile=0x444) returned 0x1 [0110.269] WriteFile (in: hFile=0x444, lpBuffer=0x22e5de8*, nNumberOfBytesToWrite=0x60, lpNumberOfBytesWritten=0x3be468, lpOverlapped=0x0 | out: lpBuffer=0x22e5de8*, lpNumberOfBytesWritten=0x3be468*=0x60, lpOverlapped=0x0) returned 1 [0110.270] CloseHandle (hObject=0x444) returned 1 [0110.270] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\index.txt", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\index.txt", lpFilePart=0x0) returned 0x92 [0110.270] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\index.txt.xuy", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\index.txt.xuy", lpFilePart=0x0) returned 0x96 [0110.270] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0110.270] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\index.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\index.txt"), fInfoLevelId=0x0, lpFileInformation=0x3be670 | out: lpFileInformation=0x3be670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb91b878c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7bb7abf8, ftLastAccessTime.dwHighDateTime=0x1d2d59f, ftLastWriteTime.dwLowDateTime=0x2d93589b, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x60)) returned 1 [0110.270] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0110.270] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\index.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\index.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\index.txt.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\index.txt.xuy")) returned 1 [0110.271] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0110.271] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5", nBufferLength=0x105, lpBuffer=0x3be0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5", lpFilePart=0x0) returned 0xad [0110.271] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\", nBufferLength=0x105, lpBuffer=0x3be060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\", lpFilePart=0x0) returned 0xae [0110.271] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\*", lpFindFileData=0x3be270 | out: lpFindFileData=0x3be270) returned 0x5d7d30 [0110.281] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0110.281] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0110.281] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0110.281] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0110.281] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0110.281] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0110.282] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0110.282] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 0 [0110.282] FindClose (in: hFindFile=0x5d7d30 | out: hFindFile=0x5d7d30) returned 1 [0110.282] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0110.283] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0110.283] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0110.283] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5", nBufferLength=0x105, lpBuffer=0x3be0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5", lpFilePart=0x0) returned 0xad [0110.283] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\", nBufferLength=0x105, lpBuffer=0x3be060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\", lpFilePart=0x0) returned 0xae [0110.283] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\*", lpFindFileData=0x3be270 | out: lpFindFileData=0x3be270) returned 0x5d79d0 [0110.284] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0110.284] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0110.284] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0110.284] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0110.284] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0110.284] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0110.284] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0110.284] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 0 [0110.285] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0110.285] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0110.285] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0110.285] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\608d13fb70947f94_0", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\608d13fb70947f94_0", lpFilePart=0x0) returned 0xc0 [0110.285] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0110.285] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\608d13fb70947f94_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\608d13fb70947f94_0"), fInfoLevelId=0x0, lpFileInformation=0x22ed0d8 | out: lpFileInformation=0x22ed0d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ae70c92, ftCreationTime.dwHighDateTime=0x1d2d59f, ftLastAccessTime.dwLowDateTime=0x7ae70c92, ftLastAccessTime.dwHighDateTime=0x1d2d59f, ftLastWriteTime.dwLowDateTime=0x7ae75abe, ftLastWriteTime.dwHighDateTime=0x1d2d59f, nFileSizeHigh=0x0, nFileSizeLow=0x1ab7)) returned 1 [0110.287] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0110.287] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\608d13fb70947f94_0", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\608d13fb70947f94_0", lpFilePart=0x0) returned 0xc0 [0110.287] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0110.287] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\608d13fb70947f94_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\608d13fb70947f94_0"), fInfoLevelId=0x0, lpFileInformation=0x22ed320 | out: lpFileInformation=0x22ed320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ae70c92, ftCreationTime.dwHighDateTime=0x1d2d59f, ftLastAccessTime.dwLowDateTime=0x7ae70c92, ftLastAccessTime.dwHighDateTime=0x1d2d59f, ftLastWriteTime.dwLowDateTime=0x7ae75abe, ftLastWriteTime.dwHighDateTime=0x1d2d59f, nFileSizeHigh=0x0, nFileSizeLow=0x1ab7)) returned 1 [0110.287] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0110.287] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\608d13fb70947f94_0", nBufferLength=0x105, lpBuffer=0x3bdfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\608d13fb70947f94_0", lpFilePart=0x0) returned 0xc0 [0110.287] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0110.287] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\608d13fb70947f94_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\608d13fb70947f94_0"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0110.288] GetFileType (hFile=0x444) returned 0x1 [0110.288] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be420) returned 1 [0110.288] GetFileType (hFile=0x444) returned 0x1 [0110.288] ReadFile (in: hFile=0x444, lpBuffer=0x22ef8e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be538, lpOverlapped=0x0 | out: lpBuffer=0x22ef8e0*, lpNumberOfBytesRead=0x3be538*=0x1000, lpOverlapped=0x0) returned 1 [0110.319] CloseHandle (hObject=0x444) returned 1 [0110.319] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\608d13fb70947f94_0", nBufferLength=0x105, lpBuffer=0x3bdfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\608d13fb70947f94_0", lpFilePart=0x0) returned 0xc0 [0110.319] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0110.319] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\608d13fb70947f94_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\608d13fb70947f94_0"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0110.319] GetFileType (hFile=0x444) returned 0x1 [0110.319] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be420) returned 1 [0110.319] GetFileType (hFile=0x444) returned 0x1 [0110.320] WriteFile (in: hFile=0x444, lpBuffer=0x2163728*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be5e8, lpOverlapped=0x0 | out: lpBuffer=0x2163728*, lpNumberOfBytesWritten=0x3be5e8*=0x2000, lpOverlapped=0x0) returned 1 [0110.320] CloseHandle (hObject=0x444) returned 1 [0110.320] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\608d13fb70947f94_0", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\608d13fb70947f94_0", lpFilePart=0x0) returned 0xc0 [0110.320] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\608d13fb70947f94_0.xuy", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\608d13fb70947f94_0.xuy", lpFilePart=0x0) returned 0xc4 [0110.320] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0110.320] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\608d13fb70947f94_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\608d13fb70947f94_0"), fInfoLevelId=0x0, lpFileInformation=0x3be600 | out: lpFileInformation=0x3be600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ae70c92, ftCreationTime.dwHighDateTime=0x1d2d59f, ftLastAccessTime.dwLowDateTime=0x7ae70c92, ftLastAccessTime.dwHighDateTime=0x1d2d59f, ftLastWriteTime.dwLowDateTime=0x2d9a7d78, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0110.320] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0110.320] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\608d13fb70947f94_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\608d13fb70947f94_0"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\608d13fb70947f94_0.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\608d13fb70947f94_0.xuy")) returned 1 [0110.321] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\d2d7a4c029e7ff02_0", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\d2d7a4c029e7ff02_0", lpFilePart=0x0) returned 0xc0 [0110.321] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0110.321] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\d2d7a4c029e7ff02_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\d2d7a4c029e7ff02_0"), fInfoLevelId=0x0, lpFileInformation=0x216e8b8 | out: lpFileInformation=0x216e8b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ae7cfff, ftCreationTime.dwHighDateTime=0x1d2d59f, ftLastAccessTime.dwLowDateTime=0x7ae7cfff, ftLastAccessTime.dwHighDateTime=0x1d2d59f, ftLastWriteTime.dwLowDateTime=0x7ae7f6fc, ftLastWriteTime.dwHighDateTime=0x1d2d59f, nFileSizeHigh=0x0, nFileSizeLow=0x3068e)) returned 1 [0110.321] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0110.321] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\d2d7a4c029e7ff02_0", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\d2d7a4c029e7ff02_0", lpFilePart=0x0) returned 0xc0 [0110.321] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0110.321] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\d2d7a4c029e7ff02_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\d2d7a4c029e7ff02_0"), fInfoLevelId=0x0, lpFileInformation=0x216eb00 | out: lpFileInformation=0x216eb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ae7cfff, ftCreationTime.dwHighDateTime=0x1d2d59f, ftLastAccessTime.dwLowDateTime=0x7ae7cfff, ftLastAccessTime.dwHighDateTime=0x1d2d59f, ftLastWriteTime.dwLowDateTime=0x7ae7f6fc, ftLastWriteTime.dwHighDateTime=0x1d2d59f, nFileSizeHigh=0x0, nFileSizeLow=0x3068e)) returned 1 [0110.321] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0110.322] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\d2d7a4c029e7ff02_0", nBufferLength=0x105, lpBuffer=0x3bdfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\d2d7a4c029e7ff02_0", lpFilePart=0x0) returned 0xc0 [0110.322] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0110.322] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\d2d7a4c029e7ff02_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\d2d7a4c029e7ff02_0"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0110.322] GetFileType (hFile=0x444) returned 0x1 [0110.322] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be420) returned 1 [0110.322] GetFileType (hFile=0x444) returned 0x1 [0110.322] ReadFile (in: hFile=0x444, lpBuffer=0x21710c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be538, lpOverlapped=0x0 | out: lpBuffer=0x21710c0*, lpNumberOfBytesRead=0x3be538*=0x1000, lpOverlapped=0x0) returned 1 [0110.346] CloseHandle (hObject=0x444) returned 1 [0110.346] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\d2d7a4c029e7ff02_0", nBufferLength=0x105, lpBuffer=0x3bdfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\d2d7a4c029e7ff02_0", lpFilePart=0x0) returned 0xc0 [0110.346] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0110.346] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\d2d7a4c029e7ff02_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\d2d7a4c029e7ff02_0"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0110.347] GetFileType (hFile=0x444) returned 0x1 [0110.347] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be420) returned 1 [0110.347] GetFileType (hFile=0x444) returned 0x1 [0110.347] WriteFile (in: hFile=0x444, lpBuffer=0x216ed28*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be5e8, lpOverlapped=0x0 | out: lpBuffer=0x216ed28*, lpNumberOfBytesWritten=0x3be5e8*=0x2000, lpOverlapped=0x0) returned 1 [0110.347] CloseHandle (hObject=0x444) returned 1 [0110.347] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\d2d7a4c029e7ff02_0", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\d2d7a4c029e7ff02_0", lpFilePart=0x0) returned 0xc0 [0110.347] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\d2d7a4c029e7ff02_0.xuy", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\d2d7a4c029e7ff02_0.xuy", lpFilePart=0x0) returned 0xc4 [0110.347] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0110.347] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\d2d7a4c029e7ff02_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\d2d7a4c029e7ff02_0"), fInfoLevelId=0x0, lpFileInformation=0x3be600 | out: lpFileInformation=0x3be600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ae7cfff, ftCreationTime.dwHighDateTime=0x1d2d59f, ftLastAccessTime.dwLowDateTime=0x7ae7cfff, ftLastAccessTime.dwHighDateTime=0x1d2d59f, ftLastWriteTime.dwLowDateTime=0x2d9f44ae, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x3068e)) returned 1 [0110.347] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0110.347] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\d2d7a4c029e7ff02_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\d2d7a4c029e7ff02_0"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\d2d7a4c029e7ff02_0.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\d2d7a4c029e7ff02_0.xuy")) returned 1 [0110.348] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\e599dc5e24eb76d7_0", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\e599dc5e24eb76d7_0", lpFilePart=0x0) returned 0xc0 [0110.348] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0110.348] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\e599dc5e24eb76d7_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\e599dc5e24eb76d7_0"), fInfoLevelId=0x0, lpFileInformation=0x21ed818 | out: lpFileInformation=0x21ed818*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ae6976a, ftCreationTime.dwHighDateTime=0x1d2d59f, ftLastAccessTime.dwLowDateTime=0x7ae6976a, ftLastAccessTime.dwHighDateTime=0x1d2d59f, ftLastWriteTime.dwLowDateTime=0x7ae6e579, ftLastWriteTime.dwHighDateTime=0x1d2d59f, nFileSizeHigh=0x0, nFileSizeLow=0x345e)) returned 1 [0110.348] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0110.348] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\e599dc5e24eb76d7_0", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\e599dc5e24eb76d7_0", lpFilePart=0x0) returned 0xc0 [0110.349] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0110.349] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\e599dc5e24eb76d7_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\e599dc5e24eb76d7_0"), fInfoLevelId=0x0, lpFileInformation=0x21eda60 | out: lpFileInformation=0x21eda60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ae6976a, ftCreationTime.dwHighDateTime=0x1d2d59f, ftLastAccessTime.dwLowDateTime=0x7ae6976a, ftLastAccessTime.dwHighDateTime=0x1d2d59f, ftLastWriteTime.dwLowDateTime=0x7ae6e579, ftLastWriteTime.dwHighDateTime=0x1d2d59f, nFileSizeHigh=0x0, nFileSizeLow=0x345e)) returned 1 [0110.349] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0110.349] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\e599dc5e24eb76d7_0", nBufferLength=0x105, lpBuffer=0x3bdfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\e599dc5e24eb76d7_0", lpFilePart=0x0) returned 0xc0 [0110.349] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0110.349] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\e599dc5e24eb76d7_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\e599dc5e24eb76d7_0"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0110.350] GetFileType (hFile=0x444) returned 0x1 [0110.350] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be420) returned 1 [0110.350] GetFileType (hFile=0x444) returned 0x1 [0110.350] ReadFile (in: hFile=0x444, lpBuffer=0x21f0020, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be538, lpOverlapped=0x0 | out: lpBuffer=0x21f0020*, lpNumberOfBytesRead=0x3be538*=0x1000, lpOverlapped=0x0) returned 1 [0110.368] CloseHandle (hObject=0x444) returned 1 [0110.368] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\e599dc5e24eb76d7_0", nBufferLength=0x105, lpBuffer=0x3bdfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\e599dc5e24eb76d7_0", lpFilePart=0x0) returned 0xc0 [0110.368] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0110.368] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\e599dc5e24eb76d7_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\e599dc5e24eb76d7_0"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0110.368] GetFileType (hFile=0x444) returned 0x1 [0110.368] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be420) returned 1 [0110.368] GetFileType (hFile=0x444) returned 0x1 [0110.369] WriteFile (in: hFile=0x444, lpBuffer=0x21edc88*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be5e8, lpOverlapped=0x0 | out: lpBuffer=0x21edc88*, lpNumberOfBytesWritten=0x3be5e8*=0x2000, lpOverlapped=0x0) returned 1 [0110.369] CloseHandle (hObject=0x444) returned 1 [0110.369] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\e599dc5e24eb76d7_0", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\e599dc5e24eb76d7_0", lpFilePart=0x0) returned 0xc0 [0110.369] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\e599dc5e24eb76d7_0.xuy", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\e599dc5e24eb76d7_0.xuy", lpFilePart=0x0) returned 0xc4 [0110.369] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0110.369] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\e599dc5e24eb76d7_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\e599dc5e24eb76d7_0"), fInfoLevelId=0x0, lpFileInformation=0x3be600 | out: lpFileInformation=0x3be600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ae6976a, ftCreationTime.dwHighDateTime=0x1d2d59f, ftLastAccessTime.dwLowDateTime=0x7ae6976a, ftLastAccessTime.dwHighDateTime=0x1d2d59f, ftLastWriteTime.dwLowDateTime=0x2da1a1d3, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x345e)) returned 1 [0110.369] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0110.369] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\e599dc5e24eb76d7_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\e599dc5e24eb76d7_0"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\e599dc5e24eb76d7_0.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\e599dc5e24eb76d7_0.xuy")) returned 1 [0110.370] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\fdf2cfeb8ad0eeac_0", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\fdf2cfeb8ad0eeac_0", lpFilePart=0x0) returned 0xc0 [0110.370] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0110.370] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\fdf2cfeb8ad0eeac_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\fdf2cfeb8ad0eeac_0"), fInfoLevelId=0x0, lpFileInformation=0x226c778 | out: lpFileInformation=0x226c778*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ae781ce, ftCreationTime.dwHighDateTime=0x1d2d59f, ftLastAccessTime.dwLowDateTime=0x7ae781ce, ftLastAccessTime.dwHighDateTime=0x1d2d59f, ftLastWriteTime.dwLowDateTime=0x7ae7a8d7, ftLastWriteTime.dwHighDateTime=0x1d2d59f, nFileSizeHigh=0x0, nFileSizeLow=0xab7)) returned 1 [0110.370] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0110.370] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\fdf2cfeb8ad0eeac_0", nBufferLength=0x105, lpBuffer=0x3bdf40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\fdf2cfeb8ad0eeac_0", lpFilePart=0x0) returned 0xc0 [0110.370] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be420) returned 1 [0110.370] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\fdf2cfeb8ad0eeac_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\fdf2cfeb8ad0eeac_0"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0110.371] GetFileType (hFile=0x444) returned 0x1 [0110.371] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be390) returned 1 [0110.371] GetFileType (hFile=0x444) returned 0x1 [0110.371] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be5b8 | out: lpFileSizeHigh=0x3be5b8*=0x0) returned 0xab7 [0110.371] ReadFile (in: hFile=0x444, lpBuffer=0x226d6d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be4e8, lpOverlapped=0x0 | out: lpBuffer=0x226d6d8*, lpNumberOfBytesRead=0x3be4e8*=0xab7, lpOverlapped=0x0) returned 1 [0110.376] CloseHandle (hObject=0x444) returned 1 [0110.387] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\fdf2cfeb8ad0eeac_0", nBufferLength=0x105, lpBuffer=0x3bdf40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\fdf2cfeb8ad0eeac_0", lpFilePart=0x0) returned 0xc0 [0110.387] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be420) returned 1 [0110.387] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\fdf2cfeb8ad0eeac_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\fdf2cfeb8ad0eeac_0"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0110.388] GetFileType (hFile=0x444) returned 0x1 [0110.388] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be390) returned 1 [0110.388] GetFileType (hFile=0x444) returned 0x1 [0110.388] WriteFile (in: hFile=0x444, lpBuffer=0x22e7d78*, nNumberOfBytesToWrite=0xac0, lpNumberOfBytesWritten=0x3be3f8, lpOverlapped=0x0 | out: lpBuffer=0x22e7d78*, lpNumberOfBytesWritten=0x3be3f8*=0xac0, lpOverlapped=0x0) returned 1 [0110.389] CloseHandle (hObject=0x444) returned 1 [0110.389] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\fdf2cfeb8ad0eeac_0", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\fdf2cfeb8ad0eeac_0", lpFilePart=0x0) returned 0xc0 [0110.389] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\fdf2cfeb8ad0eeac_0.xuy", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\fdf2cfeb8ad0eeac_0.xuy", lpFilePart=0x0) returned 0xc4 [0110.389] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0110.389] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\fdf2cfeb8ad0eeac_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\fdf2cfeb8ad0eeac_0"), fInfoLevelId=0x0, lpFileInformation=0x3be600 | out: lpFileInformation=0x3be600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ae781ce, ftCreationTime.dwHighDateTime=0x1d2d59f, ftLastAccessTime.dwLowDateTime=0x7ae781ce, ftLastAccessTime.dwHighDateTime=0x1d2d59f, ftLastWriteTime.dwLowDateTime=0x2da40569, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xac0)) returned 1 [0110.390] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0110.390] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\fdf2cfeb8ad0eeac_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\fdf2cfeb8ad0eeac_0"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\fdf2cfeb8ad0eeac_0.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\fdf2cfeb8ad0eeac_0.xuy")) returned 1 [0110.391] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\index", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\index", lpFilePart=0x0) returned 0xb3 [0110.391] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0110.391] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\index" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\index"), fInfoLevelId=0x0, lpFileInformation=0x22e92a0 | out: lpFileInformation=0x22e92a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ad2fa36, ftCreationTime.dwHighDateTime=0x1d2d59f, ftLastAccessTime.dwLowDateTime=0x7ad2fa36, ftLastAccessTime.dwHighDateTime=0x1d2d59f, ftLastWriteTime.dwLowDateTime=0x7ad2fa36, ftLastWriteTime.dwHighDateTime=0x1d2d59f, nFileSizeHigh=0x0, nFileSizeLow=0x18)) returned 1 [0110.391] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0110.391] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\index", nBufferLength=0x105, lpBuffer=0x3bdf40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\index", lpFilePart=0x0) returned 0xb3 [0110.391] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be420) returned 1 [0110.391] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\index" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\index"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0110.392] GetFileType (hFile=0x444) returned 0x1 [0110.392] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be390) returned 1 [0110.392] GetFileType (hFile=0x444) returned 0x1 [0110.392] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be5b8 | out: lpFileSizeHigh=0x3be5b8*=0x0) returned 0x18 [0110.392] ReadFile (in: hFile=0x444, lpBuffer=0x22e96f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be4e8, lpOverlapped=0x0 | out: lpBuffer=0x22e96f0*, lpNumberOfBytesRead=0x3be4e8*=0x18, lpOverlapped=0x0) returned 1 [0110.392] CloseHandle (hObject=0x444) returned 1 [0110.402] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\index", nBufferLength=0x105, lpBuffer=0x3bdf40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\index", lpFilePart=0x0) returned 0xb3 [0110.402] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be420) returned 1 [0110.403] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\index" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\index"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0110.404] GetFileType (hFile=0x444) returned 0x1 [0110.404] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be390) returned 1 [0110.404] GetFileType (hFile=0x444) returned 0x1 [0110.404] WriteFile (in: hFile=0x444, lpBuffer=0x23608e8*, nNumberOfBytesToWrite=0x20, lpNumberOfBytesWritten=0x3be3f8, lpOverlapped=0x0 | out: lpBuffer=0x23608e8*, lpNumberOfBytesWritten=0x3be3f8*=0x20, lpOverlapped=0x0) returned 1 [0110.405] CloseHandle (hObject=0x444) returned 1 [0110.405] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\index", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\index", lpFilePart=0x0) returned 0xb3 [0110.405] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\index.xuy", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\index.xuy", lpFilePart=0x0) returned 0xb7 [0110.405] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0110.405] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\index" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\index"), fInfoLevelId=0x0, lpFileInformation=0x3be600 | out: lpFileInformation=0x3be600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ad2fa36, ftCreationTime.dwHighDateTime=0x1d2d59f, ftLastAccessTime.dwLowDateTime=0x7ad2fa36, ftLastAccessTime.dwHighDateTime=0x1d2d59f, ftLastWriteTime.dwLowDateTime=0x2da667d5, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x20)) returned 1 [0110.405] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0110.405] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\index" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\index"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\index.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\index.xuy")) returned 1 [0110.407] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0110.407] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\index-dir", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\index-dir", lpFilePart=0x0) returned 0xb7 [0110.407] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\index-dir\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\index-dir\\", lpFilePart=0x0) returned 0xb8 [0110.407] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\index-dir\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7cd0 [0110.408] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0110.408] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0110.408] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0110.408] FindClose (in: hFindFile=0x5d7cd0 | out: hFindFile=0x5d7cd0) returned 1 [0110.409] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0110.409] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0110.409] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0110.409] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\index-dir", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\index-dir", lpFilePart=0x0) returned 0xb7 [0110.409] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\index-dir\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\index-dir\\", lpFilePart=0x0) returned 0xb8 [0110.409] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\index-dir\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7fd0 [0110.410] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0110.410] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0110.410] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0110.410] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0110.411] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0110.411] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0110.411] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\index-dir\\the-real-index", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\index-dir\\the-real-index", lpFilePart=0x0) returned 0xc6 [0110.411] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0110.411] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\index-dir\\the-real-index" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\index-dir\\the-real-index"), fInfoLevelId=0x0, lpFileInformation=0x23657b8 | out: lpFileInformation=0x23657b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ad2fa36, ftCreationTime.dwHighDateTime=0x1d2d59f, ftLastAccessTime.dwLowDateTime=0x7d2690b2, ftLastAccessTime.dwHighDateTime=0x1d2d59f, ftLastWriteTime.dwLowDateTime=0x7d2690b2, ftLastWriteTime.dwHighDateTime=0x1d2d59f, nFileSizeHigh=0x0, nFileSizeLow=0x90)) returned 1 [0110.415] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0110.415] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\index-dir\\the-real-index", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\index-dir\\the-real-index", lpFilePart=0x0) returned 0xc6 [0110.415] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0110.415] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\index-dir\\the-real-index" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\index-dir\\the-real-index"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0110.415] GetFileType (hFile=0x444) returned 0x1 [0110.416] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0110.416] GetFileType (hFile=0x444) returned 0x1 [0110.416] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x90 [0110.416] ReadFile (in: hFile=0x444, lpBuffer=0x2365cf0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x2365cf0*, lpNumberOfBytesRead=0x3be478*=0x90, lpOverlapped=0x0) returned 1 [0110.416] CloseHandle (hObject=0x444) returned 1 [0110.459] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\index-dir\\the-real-index", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\index-dir\\the-real-index", lpFilePart=0x0) returned 0xc6 [0110.459] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0110.459] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\index-dir\\the-real-index" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\index-dir\\the-real-index"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0110.460] GetFileType (hFile=0x444) returned 0x1 [0110.460] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0110.460] GetFileType (hFile=0x444) returned 0x1 [0110.460] WriteFile (in: hFile=0x444, lpBuffer=0x21d9498*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x21d9498*, lpNumberOfBytesWritten=0x3be388*=0xa0, lpOverlapped=0x0) returned 1 [0110.461] CloseHandle (hObject=0x444) returned 1 [0110.461] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\index-dir\\the-real-index", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\index-dir\\the-real-index", lpFilePart=0x0) returned 0xc6 [0110.461] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\index-dir\\the-real-index.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\index-dir\\the-real-index.xuy", lpFilePart=0x0) returned 0xca [0110.461] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0110.461] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\index-dir\\the-real-index" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\index-dir\\the-real-index"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ad2fa36, ftCreationTime.dwHighDateTime=0x1d2d59f, ftLastAccessTime.dwLowDateTime=0x7d2690b2, ftLastAccessTime.dwHighDateTime=0x1d2d59f, ftLastWriteTime.dwLowDateTime=0x2daff654, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xa0)) returned 1 [0110.462] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0110.462] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\index-dir\\the-real-index" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\index-dir\\the-real-index"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\index-dir\\the-real-index.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\index-dir\\the-real-index.xuy")) returned 1 [0110.463] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0110.463] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32", nBufferLength=0x105, lpBuffer=0x3be0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32", lpFilePart=0x0) returned 0xad [0110.463] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\", nBufferLength=0x105, lpBuffer=0x3be060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\", lpFilePart=0x0) returned 0xae [0110.463] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\*", lpFindFileData=0x3be270 | out: lpFindFileData=0x3be270) returned 0x5d7670 [0110.477] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0110.477] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0110.477] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0110.478] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0110.478] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0110.478] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0110.478] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0110.478] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0110.478] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0110.478] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0110.478] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0110.478] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0110.479] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0110.479] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0110.479] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0110.479] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0110.479] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 0 [0110.479] FindClose (in: hFindFile=0x5d7670 | out: hFindFile=0x5d7670) returned 1 [0110.480] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0110.480] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0110.480] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0110.480] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32", nBufferLength=0x105, lpBuffer=0x3be0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32", lpFilePart=0x0) returned 0xad [0110.480] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\", nBufferLength=0x105, lpBuffer=0x3be060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\", lpFilePart=0x0) returned 0xae [0110.480] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\*", lpFindFileData=0x3be270 | out: lpFindFileData=0x3be270) returned 0x5d7cd0 [0110.481] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0110.481] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0110.481] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0110.481] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0110.481] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0110.481] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0110.481] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0110.481] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0110.481] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0110.482] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0110.482] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0110.482] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0110.482] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0110.482] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0110.482] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0110.482] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0110.482] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 0 [0110.482] FindClose (in: hFindFile=0x5d7cd0 | out: hFindFile=0x5d7cd0) returned 1 [0110.483] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0110.483] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0110.483] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\1157fee2e2dc1968_0", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\1157fee2e2dc1968_0", lpFilePart=0x0) returned 0xc0 [0110.483] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0110.483] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\1157fee2e2dc1968_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\1157fee2e2dc1968_0"), fInfoLevelId=0x0, lpFileInformation=0x21e51a0 | out: lpFileInformation=0x21e51a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75ead70e, ftCreationTime.dwHighDateTime=0x1d2d59f, ftLastAccessTime.dwLowDateTime=0x75ead70e, ftLastAccessTime.dwHighDateTime=0x1d2d59f, ftLastWriteTime.dwLowDateTime=0x75eafe24, ftLastWriteTime.dwHighDateTime=0x1d2d59f, nFileSizeHigh=0x0, nFileSizeLow=0xc08)) returned 1 [0110.488] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0110.488] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\1157fee2e2dc1968_0", nBufferLength=0x105, lpBuffer=0x3bdf40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\1157fee2e2dc1968_0", lpFilePart=0x0) returned 0xc0 [0110.488] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be420) returned 1 [0110.488] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\1157fee2e2dc1968_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\1157fee2e2dc1968_0"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0110.488] GetFileType (hFile=0x444) returned 0x1 [0110.488] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be390) returned 1 [0110.488] GetFileType (hFile=0x444) returned 0x1 [0110.488] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be5b8 | out: lpFileSizeHigh=0x3be5b8*=0x0) returned 0xc08 [0110.488] ReadFile (in: hFile=0x444, lpBuffer=0x21e6250, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be4e8, lpOverlapped=0x0 | out: lpBuffer=0x21e6250*, lpNumberOfBytesRead=0x3be4e8*=0xc08, lpOverlapped=0x0) returned 1 [0110.498] CloseHandle (hObject=0x444) returned 1 [0110.508] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\1157fee2e2dc1968_0", nBufferLength=0x105, lpBuffer=0x3bdf40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\1157fee2e2dc1968_0", lpFilePart=0x0) returned 0xc0 [0110.508] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be420) returned 1 [0110.508] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\1157fee2e2dc1968_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\1157fee2e2dc1968_0"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0110.510] GetFileType (hFile=0x444) returned 0x1 [0110.510] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be390) returned 1 [0110.510] GetFileType (hFile=0x444) returned 0x1 [0110.510] WriteFile (in: hFile=0x444, lpBuffer=0x2260f78*, nNumberOfBytesToWrite=0xc10, lpNumberOfBytesWritten=0x3be3f8, lpOverlapped=0x0 | out: lpBuffer=0x2260f78*, lpNumberOfBytesWritten=0x3be3f8*=0xc10, lpOverlapped=0x0) returned 1 [0110.520] CloseHandle (hObject=0x444) returned 1 [0110.520] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\1157fee2e2dc1968_0", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\1157fee2e2dc1968_0", lpFilePart=0x0) returned 0xc0 [0110.520] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\1157fee2e2dc1968_0.xuy", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\1157fee2e2dc1968_0.xuy", lpFilePart=0x0) returned 0xc4 [0110.520] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0110.520] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\1157fee2e2dc1968_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\1157fee2e2dc1968_0"), fInfoLevelId=0x0, lpFileInformation=0x3be600 | out: lpFileInformation=0x3be600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75ead70e, ftCreationTime.dwHighDateTime=0x1d2d59f, ftLastAccessTime.dwLowDateTime=0x75ead70e, ftLastAccessTime.dwHighDateTime=0x1d2d59f, ftLastWriteTime.dwLowDateTime=0x2db97b94, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xc10)) returned 1 [0110.520] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0110.520] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\1157fee2e2dc1968_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\1157fee2e2dc1968_0"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\1157fee2e2dc1968_0.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\1157fee2e2dc1968_0.xuy")) returned 1 [0110.521] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\1e16adeb2b036d0a_0", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\1e16adeb2b036d0a_0", lpFilePart=0x0) returned 0xc0 [0110.521] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0110.521] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\1e16adeb2b036d0a_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\1e16adeb2b036d0a_0"), fInfoLevelId=0x0, lpFileInformation=0x22624a0 | out: lpFileInformation=0x22624a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x768481a8, ftCreationTime.dwHighDateTime=0x1d2d59f, ftLastAccessTime.dwLowDateTime=0x768481a8, ftLastAccessTime.dwHighDateTime=0x1d2d59f, ftLastWriteTime.dwLowDateTime=0x7684cf98, ftLastWriteTime.dwHighDateTime=0x1d2d59f, nFileSizeHigh=0x0, nFileSizeLow=0xe608)) returned 1 [0110.522] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0110.522] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\1e16adeb2b036d0a_0", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\1e16adeb2b036d0a_0", lpFilePart=0x0) returned 0xc0 [0110.522] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0110.522] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\1e16adeb2b036d0a_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\1e16adeb2b036d0a_0"), fInfoLevelId=0x0, lpFileInformation=0x22626e8 | out: lpFileInformation=0x22626e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x768481a8, ftCreationTime.dwHighDateTime=0x1d2d59f, ftLastAccessTime.dwLowDateTime=0x768481a8, ftLastAccessTime.dwHighDateTime=0x1d2d59f, ftLastWriteTime.dwLowDateTime=0x7684cf98, ftLastWriteTime.dwHighDateTime=0x1d2d59f, nFileSizeHigh=0x0, nFileSizeLow=0xe608)) returned 1 [0110.522] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0110.522] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\1e16adeb2b036d0a_0", nBufferLength=0x105, lpBuffer=0x3bdfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\1e16adeb2b036d0a_0", lpFilePart=0x0) returned 0xc0 [0110.522] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0110.522] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\1e16adeb2b036d0a_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\1e16adeb2b036d0a_0"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0110.523] GetFileType (hFile=0x444) returned 0x1 [0110.523] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be420) returned 1 [0110.523] GetFileType (hFile=0x444) returned 0x1 [0110.523] ReadFile (in: hFile=0x444, lpBuffer=0x2264ca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be538, lpOverlapped=0x0 | out: lpBuffer=0x2264ca8*, lpNumberOfBytesRead=0x3be538*=0x1000, lpOverlapped=0x0) returned 1 [0110.549] CloseHandle (hObject=0x444) returned 1 [0110.549] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\1e16adeb2b036d0a_0", nBufferLength=0x105, lpBuffer=0x3bdfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\1e16adeb2b036d0a_0", lpFilePart=0x0) returned 0xc0 [0110.549] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0110.549] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\1e16adeb2b036d0a_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\1e16adeb2b036d0a_0"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0110.550] GetFileType (hFile=0x444) returned 0x1 [0110.550] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be420) returned 1 [0110.550] GetFileType (hFile=0x444) returned 0x1 [0110.550] WriteFile (in: hFile=0x444, lpBuffer=0x2262910*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be5e8, lpOverlapped=0x0 | out: lpBuffer=0x2262910*, lpNumberOfBytesWritten=0x3be5e8*=0x2000, lpOverlapped=0x0) returned 1 [0110.550] CloseHandle (hObject=0x444) returned 1 [0110.550] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\1e16adeb2b036d0a_0", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\1e16adeb2b036d0a_0", lpFilePart=0x0) returned 0xc0 [0110.550] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\1e16adeb2b036d0a_0.xuy", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\1e16adeb2b036d0a_0.xuy", lpFilePart=0x0) returned 0xc4 [0110.550] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0110.550] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\1e16adeb2b036d0a_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\1e16adeb2b036d0a_0"), fInfoLevelId=0x0, lpFileInformation=0x3be600 | out: lpFileInformation=0x3be600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x768481a8, ftCreationTime.dwHighDateTime=0x1d2d59f, ftLastAccessTime.dwLowDateTime=0x768481a8, ftLastAccessTime.dwHighDateTime=0x1d2d59f, ftLastWriteTime.dwLowDateTime=0x2dbe40ec, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xe608)) returned 1 [0110.550] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0110.550] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\1e16adeb2b036d0a_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\1e16adeb2b036d0a_0"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\1e16adeb2b036d0a_0.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\1e16adeb2b036d0a_0.xuy")) returned 1 [0110.551] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\40bba07c05914591_0", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\40bba07c05914591_0", lpFilePart=0x0) returned 0xc0 [0110.551] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0110.552] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\40bba07c05914591_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\40bba07c05914591_0"), fInfoLevelId=0x0, lpFileInformation=0x22e1400 | out: lpFileInformation=0x22e1400*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7639e2aa, ftCreationTime.dwHighDateTime=0x1d2d59f, ftLastAccessTime.dwLowDateTime=0x7639e2aa, ftLastAccessTime.dwHighDateTime=0x1d2d59f, ftLastWriteTime.dwLowDateTime=0x763a0b51, ftLastWriteTime.dwHighDateTime=0x1d2d59f, nFileSizeHigh=0x0, nFileSizeLow=0x1f3b)) returned 1 [0110.552] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0110.552] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\40bba07c05914591_0", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\40bba07c05914591_0", lpFilePart=0x0) returned 0xc0 [0110.552] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0110.552] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\40bba07c05914591_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\40bba07c05914591_0"), fInfoLevelId=0x0, lpFileInformation=0x22e1648 | out: lpFileInformation=0x22e1648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7639e2aa, ftCreationTime.dwHighDateTime=0x1d2d59f, ftLastAccessTime.dwLowDateTime=0x7639e2aa, ftLastAccessTime.dwHighDateTime=0x1d2d59f, ftLastWriteTime.dwLowDateTime=0x763a0b51, ftLastWriteTime.dwHighDateTime=0x1d2d59f, nFileSizeHigh=0x0, nFileSizeLow=0x1f3b)) returned 1 [0110.552] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0110.552] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\40bba07c05914591_0", nBufferLength=0x105, lpBuffer=0x3bdfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\40bba07c05914591_0", lpFilePart=0x0) returned 0xc0 [0110.552] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0110.552] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\40bba07c05914591_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\40bba07c05914591_0"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0110.553] GetFileType (hFile=0x444) returned 0x1 [0110.553] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be420) returned 1 [0110.553] GetFileType (hFile=0x444) returned 0x1 [0110.553] ReadFile (in: hFile=0x444, lpBuffer=0x22e3c08, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be538, lpOverlapped=0x0 | out: lpBuffer=0x22e3c08*, lpNumberOfBytesRead=0x3be538*=0x1000, lpOverlapped=0x0) returned 1 [0110.572] CloseHandle (hObject=0x444) returned 1 [0110.572] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\40bba07c05914591_0", nBufferLength=0x105, lpBuffer=0x3bdfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\40bba07c05914591_0", lpFilePart=0x0) returned 0xc0 [0110.572] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0110.572] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\40bba07c05914591_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\40bba07c05914591_0"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0110.572] GetFileType (hFile=0x444) returned 0x1 [0110.572] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be420) returned 1 [0110.572] GetFileType (hFile=0x444) returned 0x1 [0110.572] WriteFile (in: hFile=0x444, lpBuffer=0x22e1870*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be5e8, lpOverlapped=0x0 | out: lpBuffer=0x22e1870*, lpNumberOfBytesWritten=0x3be5e8*=0x2000, lpOverlapped=0x0) returned 1 [0110.573] CloseHandle (hObject=0x444) returned 1 [0110.573] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\40bba07c05914591_0", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\40bba07c05914591_0", lpFilePart=0x0) returned 0xc0 [0110.573] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\40bba07c05914591_0.xuy", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\40bba07c05914591_0.xuy", lpFilePart=0x0) returned 0xc4 [0110.573] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0110.573] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\40bba07c05914591_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\40bba07c05914591_0"), fInfoLevelId=0x0, lpFileInformation=0x3be600 | out: lpFileInformation=0x3be600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7639e2aa, ftCreationTime.dwHighDateTime=0x1d2d59f, ftLastAccessTime.dwLowDateTime=0x7639e2aa, ftLastAccessTime.dwHighDateTime=0x1d2d59f, ftLastWriteTime.dwLowDateTime=0x2dc0a034, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0110.573] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0110.573] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\40bba07c05914591_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\40bba07c05914591_0"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\40bba07c05914591_0.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\40bba07c05914591_0.xuy")) returned 1 [0110.574] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\50da1ec5d44a313d_0", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\50da1ec5d44a313d_0", lpFilePart=0x0) returned 0xc0 [0110.574] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0110.574] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\50da1ec5d44a313d_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\50da1ec5d44a313d_0"), fInfoLevelId=0x0, lpFileInformation=0x2360360 | out: lpFileInformation=0x2360360*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75e0ebd1, ftCreationTime.dwHighDateTime=0x1d2d59f, ftLastAccessTime.dwLowDateTime=0x75e0ebd1, ftLastAccessTime.dwHighDateTime=0x1d2d59f, ftLastWriteTime.dwLowDateTime=0x75e139cb, ftLastWriteTime.dwHighDateTime=0x1d2d59f, nFileSizeHigh=0x0, nFileSizeLow=0x382c)) returned 1 [0110.575] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0110.575] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\50da1ec5d44a313d_0", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\50da1ec5d44a313d_0", lpFilePart=0x0) returned 0xc0 [0110.575] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0110.575] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\50da1ec5d44a313d_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\50da1ec5d44a313d_0"), fInfoLevelId=0x0, lpFileInformation=0x23605a8 | out: lpFileInformation=0x23605a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75e0ebd1, ftCreationTime.dwHighDateTime=0x1d2d59f, ftLastAccessTime.dwLowDateTime=0x75e0ebd1, ftLastAccessTime.dwHighDateTime=0x1d2d59f, ftLastWriteTime.dwLowDateTime=0x75e139cb, ftLastWriteTime.dwHighDateTime=0x1d2d59f, nFileSizeHigh=0x0, nFileSizeLow=0x382c)) returned 1 [0110.575] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0110.575] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\50da1ec5d44a313d_0", nBufferLength=0x105, lpBuffer=0x3bdfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\50da1ec5d44a313d_0", lpFilePart=0x0) returned 0xc0 [0110.575] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0110.575] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\50da1ec5d44a313d_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\50da1ec5d44a313d_0"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0110.576] GetFileType (hFile=0x444) returned 0x1 [0110.576] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be420) returned 1 [0110.576] GetFileType (hFile=0x444) returned 0x1 [0110.579] ReadFile (in: hFile=0x444, lpBuffer=0x2166828, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be538, lpOverlapped=0x0 | out: lpBuffer=0x2166828*, lpNumberOfBytesRead=0x3be538*=0x1000, lpOverlapped=0x0) returned 1 [0110.623] CloseHandle (hObject=0x444) returned 1 [0110.623] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\50da1ec5d44a313d_0", nBufferLength=0x105, lpBuffer=0x3bdfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\50da1ec5d44a313d_0", lpFilePart=0x0) returned 0xc0 [0110.623] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0110.623] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\50da1ec5d44a313d_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\50da1ec5d44a313d_0"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0110.623] GetFileType (hFile=0x444) returned 0x1 [0110.623] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be420) returned 1 [0110.623] GetFileType (hFile=0x444) returned 0x1 [0110.623] WriteFile (in: hFile=0x444, lpBuffer=0x2164658*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be5e8, lpOverlapped=0x0 | out: lpBuffer=0x2164658*, lpNumberOfBytesWritten=0x3be5e8*=0x2000, lpOverlapped=0x0) returned 1 [0110.623] CloseHandle (hObject=0x444) returned 1 [0110.624] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\50da1ec5d44a313d_0", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\50da1ec5d44a313d_0", lpFilePart=0x0) returned 0xc0 [0110.624] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\50da1ec5d44a313d_0.xuy", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\50da1ec5d44a313d_0.xuy", lpFilePart=0x0) returned 0xc4 [0110.624] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0110.624] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\50da1ec5d44a313d_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\50da1ec5d44a313d_0"), fInfoLevelId=0x0, lpFileInformation=0x3be600 | out: lpFileInformation=0x3be600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75e0ebd1, ftCreationTime.dwHighDateTime=0x1d2d59f, ftLastAccessTime.dwLowDateTime=0x75e0ebd1, ftLastAccessTime.dwHighDateTime=0x1d2d59f, ftLastWriteTime.dwLowDateTime=0x2dc7cade, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x382c)) returned 1 [0110.624] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0110.624] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\50da1ec5d44a313d_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\50da1ec5d44a313d_0"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\50da1ec5d44a313d_0.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\50da1ec5d44a313d_0.xuy")) returned 1 [0110.625] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\54e8e10975acb34c_0", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\54e8e10975acb34c_0", lpFilePart=0x0) returned 0xc0 [0110.625] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0110.625] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\54e8e10975acb34c_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\54e8e10975acb34c_0"), fInfoLevelId=0x0, lpFileInformation=0x21e2f80 | out: lpFileInformation=0x21e2f80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7632b699, ftCreationTime.dwHighDateTime=0x1d2d59f, ftLastAccessTime.dwLowDateTime=0x7632b699, ftLastAccessTime.dwHighDateTime=0x1d2d59f, ftLastWriteTime.dwLowDateTime=0x7632dda8, ftLastWriteTime.dwHighDateTime=0x1d2d59f, nFileSizeHigh=0x0, nFileSizeLow=0x9ee0)) returned 1 [0110.626] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0110.626] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\54e8e10975acb34c_0", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\54e8e10975acb34c_0", lpFilePart=0x0) returned 0xc0 [0110.626] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0110.626] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\54e8e10975acb34c_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\54e8e10975acb34c_0"), fInfoLevelId=0x0, lpFileInformation=0x21e31c8 | out: lpFileInformation=0x21e31c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7632b699, ftCreationTime.dwHighDateTime=0x1d2d59f, ftLastAccessTime.dwLowDateTime=0x7632b699, ftLastAccessTime.dwHighDateTime=0x1d2d59f, ftLastWriteTime.dwLowDateTime=0x7632dda8, ftLastWriteTime.dwHighDateTime=0x1d2d59f, nFileSizeHigh=0x0, nFileSizeLow=0x9ee0)) returned 1 [0110.626] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0110.626] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\54e8e10975acb34c_0", nBufferLength=0x105, lpBuffer=0x3bdfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\54e8e10975acb34c_0", lpFilePart=0x0) returned 0xc0 [0110.626] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0110.626] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\54e8e10975acb34c_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\54e8e10975acb34c_0"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0110.627] GetFileType (hFile=0x444) returned 0x1 [0110.627] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be420) returned 1 [0110.627] GetFileType (hFile=0x444) returned 0x1 [0110.627] ReadFile (in: hFile=0x444, lpBuffer=0x21e5788, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be538, lpOverlapped=0x0 | out: lpBuffer=0x21e5788*, lpNumberOfBytesRead=0x3be538*=0x1000, lpOverlapped=0x0) returned 1 [0110.639] CloseHandle (hObject=0x444) returned 1 [0110.639] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\54e8e10975acb34c_0", nBufferLength=0x105, lpBuffer=0x3bdfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\54e8e10975acb34c_0", lpFilePart=0x0) returned 0xc0 [0110.639] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0110.639] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\54e8e10975acb34c_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\54e8e10975acb34c_0"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0110.639] GetFileType (hFile=0x444) returned 0x1 [0110.639] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be420) returned 1 [0110.639] GetFileType (hFile=0x444) returned 0x1 [0110.639] WriteFile (in: hFile=0x444, lpBuffer=0x21e33f0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be5e8, lpOverlapped=0x0 | out: lpBuffer=0x21e33f0*, lpNumberOfBytesWritten=0x3be5e8*=0x2000, lpOverlapped=0x0) returned 1 [0110.639] CloseHandle (hObject=0x444) returned 1 [0110.640] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\54e8e10975acb34c_0", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\54e8e10975acb34c_0", lpFilePart=0x0) returned 0xc0 [0110.640] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\54e8e10975acb34c_0.xuy", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\54e8e10975acb34c_0.xuy", lpFilePart=0x0) returned 0xc4 [0110.640] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0110.640] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\54e8e10975acb34c_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\54e8e10975acb34c_0"), fInfoLevelId=0x0, lpFileInformation=0x3be600 | out: lpFileInformation=0x3be600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7632b699, ftCreationTime.dwHighDateTime=0x1d2d59f, ftLastAccessTime.dwLowDateTime=0x7632b699, ftLastAccessTime.dwHighDateTime=0x1d2d59f, ftLastWriteTime.dwLowDateTime=0x2dca3819, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x9ee0)) returned 1 [0110.640] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0110.640] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\54e8e10975acb34c_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\54e8e10975acb34c_0"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\54e8e10975acb34c_0.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\54e8e10975acb34c_0.xuy")) returned 1 [0110.641] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\58c0fee6b0dfd5c3_0", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\58c0fee6b0dfd5c3_0", lpFilePart=0x0) returned 0xc0 [0110.641] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0110.641] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\58c0fee6b0dfd5c3_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\58c0fee6b0dfd5c3_0"), fInfoLevelId=0x0, lpFileInformation=0x2261ee0 | out: lpFileInformation=0x2261ee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x768e1eac, ftCreationTime.dwHighDateTime=0x1d2d59f, ftLastAccessTime.dwLowDateTime=0x768e1eac, ftLastAccessTime.dwHighDateTime=0x1d2d59f, ftLastWriteTime.dwLowDateTime=0x768f572c, ftLastWriteTime.dwHighDateTime=0x1d2d59f, nFileSizeHigh=0x0, nFileSizeLow=0x20689)) returned 1 [0110.641] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0110.641] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\58c0fee6b0dfd5c3_0", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\58c0fee6b0dfd5c3_0", lpFilePart=0x0) returned 0xc0 [0110.641] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0110.641] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\58c0fee6b0dfd5c3_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\58c0fee6b0dfd5c3_0"), fInfoLevelId=0x0, lpFileInformation=0x2262128 | out: lpFileInformation=0x2262128*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x768e1eac, ftCreationTime.dwHighDateTime=0x1d2d59f, ftLastAccessTime.dwLowDateTime=0x768e1eac, ftLastAccessTime.dwHighDateTime=0x1d2d59f, ftLastWriteTime.dwLowDateTime=0x768f572c, ftLastWriteTime.dwHighDateTime=0x1d2d59f, nFileSizeHigh=0x0, nFileSizeLow=0x20689)) returned 1 [0110.642] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0110.642] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\58c0fee6b0dfd5c3_0", nBufferLength=0x105, lpBuffer=0x3bdfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\58c0fee6b0dfd5c3_0", lpFilePart=0x0) returned 0xc0 [0110.642] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0110.642] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\58c0fee6b0dfd5c3_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\58c0fee6b0dfd5c3_0"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0110.643] GetFileType (hFile=0x444) returned 0x1 [0110.643] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be420) returned 1 [0110.643] GetFileType (hFile=0x444) returned 0x1 [0110.643] ReadFile (in: hFile=0x444, lpBuffer=0x22646e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be538, lpOverlapped=0x0 | out: lpBuffer=0x22646e8*, lpNumberOfBytesRead=0x3be538*=0x1000, lpOverlapped=0x0) returned 1 [0110.664] CloseHandle (hObject=0x444) returned 1 [0110.665] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\58c0fee6b0dfd5c3_0", nBufferLength=0x105, lpBuffer=0x3bdfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\58c0fee6b0dfd5c3_0", lpFilePart=0x0) returned 0xc0 [0110.665] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0110.665] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\58c0fee6b0dfd5c3_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\58c0fee6b0dfd5c3_0"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0110.665] GetFileType (hFile=0x444) returned 0x1 [0110.665] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be420) returned 1 [0110.665] GetFileType (hFile=0x444) returned 0x1 [0110.665] WriteFile (in: hFile=0x444, lpBuffer=0x2262350*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be5e8, lpOverlapped=0x0 | out: lpBuffer=0x2262350*, lpNumberOfBytesWritten=0x3be5e8*=0x2000, lpOverlapped=0x0) returned 1 [0110.665] CloseHandle (hObject=0x444) returned 1 [0110.666] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\58c0fee6b0dfd5c3_0", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\58c0fee6b0dfd5c3_0", lpFilePart=0x0) returned 0xc0 [0110.666] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\58c0fee6b0dfd5c3_0.xuy", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\58c0fee6b0dfd5c3_0.xuy", lpFilePart=0x0) returned 0xc4 [0110.666] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0110.666] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\58c0fee6b0dfd5c3_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\58c0fee6b0dfd5c3_0"), fInfoLevelId=0x0, lpFileInformation=0x3be600 | out: lpFileInformation=0x3be600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x768e1eac, ftCreationTime.dwHighDateTime=0x1d2d59f, ftLastAccessTime.dwLowDateTime=0x768e1eac, ftLastAccessTime.dwHighDateTime=0x1d2d59f, ftLastWriteTime.dwLowDateTime=0x2dcef089, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x20689)) returned 1 [0110.666] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0110.666] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\58c0fee6b0dfd5c3_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\58c0fee6b0dfd5c3_0"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\58c0fee6b0dfd5c3_0.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\58c0fee6b0dfd5c3_0.xuy")) returned 1 [0110.667] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\608d13fb70947f94_0", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\608d13fb70947f94_0", lpFilePart=0x0) returned 0xc0 [0110.667] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0110.667] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\608d13fb70947f94_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\608d13fb70947f94_0"), fInfoLevelId=0x0, lpFileInformation=0x22e0e40 | out: lpFileInformation=0x22e0e40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb92d8b21, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb92d8b21, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0xb92db224, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x1ab7)) returned 1 [0110.668] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0110.668] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\608d13fb70947f94_0", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\608d13fb70947f94_0", lpFilePart=0x0) returned 0xc0 [0110.668] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0110.668] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\608d13fb70947f94_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\608d13fb70947f94_0"), fInfoLevelId=0x0, lpFileInformation=0x22e1088 | out: lpFileInformation=0x22e1088*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb92d8b21, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb92d8b21, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0xb92db224, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x1ab7)) returned 1 [0110.668] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0110.668] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\608d13fb70947f94_0", nBufferLength=0x105, lpBuffer=0x3bdfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\608d13fb70947f94_0", lpFilePart=0x0) returned 0xc0 [0110.668] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0110.668] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\608d13fb70947f94_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\608d13fb70947f94_0"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0110.669] GetFileType (hFile=0x444) returned 0x1 [0110.669] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be420) returned 1 [0110.669] GetFileType (hFile=0x444) returned 0x1 [0110.669] ReadFile (in: hFile=0x444, lpBuffer=0x22e3648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be538, lpOverlapped=0x0 | out: lpBuffer=0x22e3648*, lpNumberOfBytesRead=0x3be538*=0x1000, lpOverlapped=0x0) returned 1 [0110.681] CloseHandle (hObject=0x444) returned 1 [0110.681] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\608d13fb70947f94_0", nBufferLength=0x105, lpBuffer=0x3bdfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\608d13fb70947f94_0", lpFilePart=0x0) returned 0xc0 [0110.681] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0110.681] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\608d13fb70947f94_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\608d13fb70947f94_0"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0110.681] GetFileType (hFile=0x444) returned 0x1 [0110.682] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be420) returned 1 [0110.682] GetFileType (hFile=0x444) returned 0x1 [0110.682] WriteFile (in: hFile=0x444, lpBuffer=0x22e12b0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be5e8, lpOverlapped=0x0 | out: lpBuffer=0x22e12b0*, lpNumberOfBytesWritten=0x3be5e8*=0x2000, lpOverlapped=0x0) returned 1 [0110.682] CloseHandle (hObject=0x444) returned 1 [0110.682] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\608d13fb70947f94_0", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\608d13fb70947f94_0", lpFilePart=0x0) returned 0xc0 [0110.682] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\608d13fb70947f94_0.xuy", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\608d13fb70947f94_0.xuy", lpFilePart=0x0) returned 0xc4 [0110.682] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0110.682] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\608d13fb70947f94_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\608d13fb70947f94_0"), fInfoLevelId=0x0, lpFileInformation=0x3be600 | out: lpFileInformation=0x3be600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb92d8b21, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb92d8b21, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2dd150b9, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0110.682] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0110.682] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\608d13fb70947f94_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\608d13fb70947f94_0"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\608d13fb70947f94_0.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\608d13fb70947f94_0.xuy")) returned 1 [0110.683] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\8020f636edb35252_0", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\8020f636edb35252_0", lpFilePart=0x0) returned 0xc0 [0110.683] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0110.683] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\8020f636edb35252_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\8020f636edb35252_0"), fInfoLevelId=0x0, lpFileInformation=0x235fda0 | out: lpFileInformation=0x235fda0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75d5ef63, ftCreationTime.dwHighDateTime=0x1d2d59f, ftLastAccessTime.dwLowDateTime=0x75d5ef63, ftLastAccessTime.dwHighDateTime=0x1d2d59f, ftLastWriteTime.dwLowDateTime=0x75d63d69, ftLastWriteTime.dwHighDateTime=0x1d2d59f, nFileSizeHigh=0x0, nFileSizeLow=0xba50)) returned 1 [0110.684] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0110.684] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\8020f636edb35252_0", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\8020f636edb35252_0", lpFilePart=0x0) returned 0xc0 [0110.684] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0110.684] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\8020f636edb35252_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\8020f636edb35252_0"), fInfoLevelId=0x0, lpFileInformation=0x235ffe8 | out: lpFileInformation=0x235ffe8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75d5ef63, ftCreationTime.dwHighDateTime=0x1d2d59f, ftLastAccessTime.dwLowDateTime=0x75d5ef63, ftLastAccessTime.dwHighDateTime=0x1d2d59f, ftLastWriteTime.dwLowDateTime=0x75d63d69, ftLastWriteTime.dwHighDateTime=0x1d2d59f, nFileSizeHigh=0x0, nFileSizeLow=0xba50)) returned 1 [0110.684] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0110.684] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\8020f636edb35252_0", nBufferLength=0x105, lpBuffer=0x3bdfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\8020f636edb35252_0", lpFilePart=0x0) returned 0xc0 [0110.684] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0110.684] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\8020f636edb35252_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\8020f636edb35252_0"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0110.685] GetFileType (hFile=0x444) returned 0x1 [0110.685] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be420) returned 1 [0110.685] GetFileType (hFile=0x444) returned 0x1 [0110.685] ReadFile (in: hFile=0x444, lpBuffer=0x23625a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be538, lpOverlapped=0x0 | out: lpBuffer=0x23625a8*, lpNumberOfBytesRead=0x3be538*=0x1000, lpOverlapped=0x0) returned 1 [0110.736] CloseHandle (hObject=0x444) returned 1 [0110.737] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\8020f636edb35252_0", nBufferLength=0x105, lpBuffer=0x3bdfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\8020f636edb35252_0", lpFilePart=0x0) returned 0xc0 [0110.737] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0110.737] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\8020f636edb35252_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\8020f636edb35252_0"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0110.737] GetFileType (hFile=0x444) returned 0x1 [0110.737] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be420) returned 1 [0110.737] GetFileType (hFile=0x444) returned 0x1 [0110.737] WriteFile (in: hFile=0x444, lpBuffer=0x2164658*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be5e8, lpOverlapped=0x0 | out: lpBuffer=0x2164658*, lpNumberOfBytesWritten=0x3be5e8*=0x2000, lpOverlapped=0x0) returned 1 [0110.737] CloseHandle (hObject=0x444) returned 1 [0110.737] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\8020f636edb35252_0", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\8020f636edb35252_0", lpFilePart=0x0) returned 0xc0 [0110.737] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\8020f636edb35252_0.xuy", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\8020f636edb35252_0.xuy", lpFilePart=0x0) returned 0xc4 [0110.737] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0110.737] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\8020f636edb35252_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\8020f636edb35252_0"), fInfoLevelId=0x0, lpFileInformation=0x3be600 | out: lpFileInformation=0x3be600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75d5ef63, ftCreationTime.dwHighDateTime=0x1d2d59f, ftLastAccessTime.dwLowDateTime=0x75d5ef63, ftLastAccessTime.dwHighDateTime=0x1d2d59f, ftLastWriteTime.dwLowDateTime=0x2ddae158, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xba50)) returned 1 [0110.738] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0110.738] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\8020f636edb35252_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\8020f636edb35252_0"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\8020f636edb35252_0.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\8020f636edb35252_0.xuy")) returned 1 [0110.739] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\99f80f27ba259469_0", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\99f80f27ba259469_0", lpFilePart=0x0) returned 0xc0 [0110.739] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0110.739] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\99f80f27ba259469_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\99f80f27ba259469_0"), fInfoLevelId=0x0, lpFileInformation=0x21e0190 | out: lpFileInformation=0x21e0190*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76a4b429, ftCreationTime.dwHighDateTime=0x1d2d59f, ftLastAccessTime.dwLowDateTime=0x76a4b429, ftLastAccessTime.dwHighDateTime=0x1d2d59f, ftLastWriteTime.dwLowDateTime=0x76a52955, ftLastWriteTime.dwHighDateTime=0x1d2d59f, nFileSizeHigh=0x0, nFileSizeLow=0x1e149)) returned 1 [0110.739] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0110.739] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\99f80f27ba259469_0", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\99f80f27ba259469_0", lpFilePart=0x0) returned 0xc0 [0110.739] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0110.739] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\99f80f27ba259469_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\99f80f27ba259469_0"), fInfoLevelId=0x0, lpFileInformation=0x21e03d8 | out: lpFileInformation=0x21e03d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76a4b429, ftCreationTime.dwHighDateTime=0x1d2d59f, ftLastAccessTime.dwLowDateTime=0x76a4b429, ftLastAccessTime.dwHighDateTime=0x1d2d59f, ftLastWriteTime.dwLowDateTime=0x76a52955, ftLastWriteTime.dwHighDateTime=0x1d2d59f, nFileSizeHigh=0x0, nFileSizeLow=0x1e149)) returned 1 [0110.739] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0110.739] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\99f80f27ba259469_0", nBufferLength=0x105, lpBuffer=0x3bdfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\99f80f27ba259469_0", lpFilePart=0x0) returned 0xc0 [0110.739] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0110.739] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\99f80f27ba259469_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\99f80f27ba259469_0"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0110.740] GetFileType (hFile=0x444) returned 0x1 [0110.740] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be420) returned 1 [0110.740] GetFileType (hFile=0x444) returned 0x1 [0110.740] ReadFile (in: hFile=0x444, lpBuffer=0x21e2998, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be538, lpOverlapped=0x0 | out: lpBuffer=0x21e2998*, lpNumberOfBytesRead=0x3be538*=0x1000, lpOverlapped=0x0) returned 1 [0110.759] CloseHandle (hObject=0x444) returned 1 [0110.759] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\99f80f27ba259469_0", nBufferLength=0x105, lpBuffer=0x3bdfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\99f80f27ba259469_0", lpFilePart=0x0) returned 0xc0 [0110.760] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0110.760] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\99f80f27ba259469_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\99f80f27ba259469_0"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0110.760] GetFileType (hFile=0x444) returned 0x1 [0110.760] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be420) returned 1 [0110.760] GetFileType (hFile=0x444) returned 0x1 [0110.760] WriteFile (in: hFile=0x444, lpBuffer=0x21e0600*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be5e8, lpOverlapped=0x0 | out: lpBuffer=0x21e0600*, lpNumberOfBytesWritten=0x3be5e8*=0x2000, lpOverlapped=0x0) returned 1 [0110.760] CloseHandle (hObject=0x444) returned 1 [0110.760] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\99f80f27ba259469_0", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\99f80f27ba259469_0", lpFilePart=0x0) returned 0xc0 [0110.760] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\99f80f27ba259469_0.xuy", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\99f80f27ba259469_0.xuy", lpFilePart=0x0) returned 0xc4 [0110.760] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0110.761] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\99f80f27ba259469_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\99f80f27ba259469_0"), fInfoLevelId=0x0, lpFileInformation=0x3be600 | out: lpFileInformation=0x3be600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76a4b429, ftCreationTime.dwHighDateTime=0x1d2d59f, ftLastAccessTime.dwLowDateTime=0x76a4b429, ftLastAccessTime.dwHighDateTime=0x1d2d59f, ftLastWriteTime.dwLowDateTime=0x2ddd3c32, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x1e149)) returned 1 [0110.761] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0110.761] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\99f80f27ba259469_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\99f80f27ba259469_0"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\99f80f27ba259469_0.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\99f80f27ba259469_0.xuy")) returned 1 [0110.762] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\d2d7a4c029e7ff02_0", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\d2d7a4c029e7ff02_0", lpFilePart=0x0) returned 0xc0 [0110.762] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0110.762] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\d2d7a4c029e7ff02_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\d2d7a4c029e7ff02_0"), fInfoLevelId=0x0, lpFileInformation=0x225f0f0 | out: lpFileInformation=0x225f0f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x760898ac, ftCreationTime.dwHighDateTime=0x1d2d59f, ftLastAccessTime.dwLowDateTime=0x760898ac, ftLastAccessTime.dwHighDateTime=0x1d2d59f, ftLastWriteTime.dwLowDateTime=0x76090da6, ftLastWriteTime.dwHighDateTime=0x1d2d59f, nFileSizeHigh=0x0, nFileSizeLow=0x30722)) returned 1 [0110.770] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0110.770] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\d2d7a4c029e7ff02_0", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\d2d7a4c029e7ff02_0", lpFilePart=0x0) returned 0xc0 [0110.771] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0110.771] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\d2d7a4c029e7ff02_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\d2d7a4c029e7ff02_0"), fInfoLevelId=0x0, lpFileInformation=0x225f338 | out: lpFileInformation=0x225f338*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x760898ac, ftCreationTime.dwHighDateTime=0x1d2d59f, ftLastAccessTime.dwLowDateTime=0x760898ac, ftLastAccessTime.dwHighDateTime=0x1d2d59f, ftLastWriteTime.dwLowDateTime=0x76090da6, ftLastWriteTime.dwHighDateTime=0x1d2d59f, nFileSizeHigh=0x0, nFileSizeLow=0x30722)) returned 1 [0110.771] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0110.771] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\d2d7a4c029e7ff02_0", nBufferLength=0x105, lpBuffer=0x3bdfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\d2d7a4c029e7ff02_0", lpFilePart=0x0) returned 0xc0 [0110.771] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0110.771] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\d2d7a4c029e7ff02_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\d2d7a4c029e7ff02_0"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0110.771] GetFileType (hFile=0x444) returned 0x1 [0110.771] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be420) returned 1 [0110.771] GetFileType (hFile=0x444) returned 0x1 [0110.772] ReadFile (in: hFile=0x444, lpBuffer=0x22618f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be538, lpOverlapped=0x0 | out: lpBuffer=0x22618f8*, lpNumberOfBytesRead=0x3be538*=0x1000, lpOverlapped=0x0) returned 1 [0110.793] CloseHandle (hObject=0x444) returned 1 [0110.793] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\d2d7a4c029e7ff02_0", nBufferLength=0x105, lpBuffer=0x3bdfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\d2d7a4c029e7ff02_0", lpFilePart=0x0) returned 0xc0 [0110.793] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0110.793] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\d2d7a4c029e7ff02_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\d2d7a4c029e7ff02_0"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0110.793] GetFileType (hFile=0x444) returned 0x1 [0110.793] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be420) returned 1 [0110.793] GetFileType (hFile=0x444) returned 0x1 [0110.793] WriteFile (in: hFile=0x444, lpBuffer=0x225f560*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be5e8, lpOverlapped=0x0 | out: lpBuffer=0x225f560*, lpNumberOfBytesWritten=0x3be5e8*=0x2000, lpOverlapped=0x0) returned 1 [0110.794] CloseHandle (hObject=0x444) returned 1 [0110.794] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\d2d7a4c029e7ff02_0", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\d2d7a4c029e7ff02_0", lpFilePart=0x0) returned 0xc0 [0110.794] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\d2d7a4c029e7ff02_0.xuy", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\d2d7a4c029e7ff02_0.xuy", lpFilePart=0x0) returned 0xc4 [0110.794] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0110.794] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\d2d7a4c029e7ff02_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\d2d7a4c029e7ff02_0"), fInfoLevelId=0x0, lpFileInformation=0x3be600 | out: lpFileInformation=0x3be600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x760898ac, ftCreationTime.dwHighDateTime=0x1d2d59f, ftLastAccessTime.dwLowDateTime=0x760898ac, ftLastAccessTime.dwHighDateTime=0x1d2d59f, ftLastWriteTime.dwLowDateTime=0x2de2027f, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x30722)) returned 1 [0110.794] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0110.794] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\d2d7a4c029e7ff02_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\d2d7a4c029e7ff02_0"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\d2d7a4c029e7ff02_0.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\d2d7a4c029e7ff02_0.xuy")) returned 1 [0110.795] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\e599dc5e24eb76d7_0", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\e599dc5e24eb76d7_0", lpFilePart=0x0) returned 0xc0 [0110.795] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0110.795] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\e599dc5e24eb76d7_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\e599dc5e24eb76d7_0"), fInfoLevelId=0x0, lpFileInformation=0x22de050 | out: lpFileInformation=0x22de050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb92b8f41, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb92b8f41, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0xb92d6414, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x345e)) returned 1 [0110.795] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0110.795] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\e599dc5e24eb76d7_0", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\e599dc5e24eb76d7_0", lpFilePart=0x0) returned 0xc0 [0110.795] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0110.795] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\e599dc5e24eb76d7_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\e599dc5e24eb76d7_0"), fInfoLevelId=0x0, lpFileInformation=0x22de298 | out: lpFileInformation=0x22de298*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb92b8f41, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb92b8f41, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0xb92d6414, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x345e)) returned 1 [0110.795] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0110.796] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\e599dc5e24eb76d7_0", nBufferLength=0x105, lpBuffer=0x3bdfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\e599dc5e24eb76d7_0", lpFilePart=0x0) returned 0xc0 [0110.796] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0110.796] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\e599dc5e24eb76d7_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\e599dc5e24eb76d7_0"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0110.796] GetFileType (hFile=0x444) returned 0x1 [0110.797] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be420) returned 1 [0110.797] GetFileType (hFile=0x444) returned 0x1 [0110.797] ReadFile (in: hFile=0x444, lpBuffer=0x22e0858, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be538, lpOverlapped=0x0 | out: lpBuffer=0x22e0858*, lpNumberOfBytesRead=0x3be538*=0x1000, lpOverlapped=0x0) returned 1 [0110.809] CloseHandle (hObject=0x444) returned 1 [0110.809] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\e599dc5e24eb76d7_0", nBufferLength=0x105, lpBuffer=0x3bdfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\e599dc5e24eb76d7_0", lpFilePart=0x0) returned 0xc0 [0110.809] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0110.809] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\e599dc5e24eb76d7_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\e599dc5e24eb76d7_0"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0110.809] GetFileType (hFile=0x444) returned 0x1 [0110.809] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be420) returned 1 [0110.809] GetFileType (hFile=0x444) returned 0x1 [0110.809] WriteFile (in: hFile=0x444, lpBuffer=0x22de4c0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be5e8, lpOverlapped=0x0 | out: lpBuffer=0x22de4c0*, lpNumberOfBytesWritten=0x3be5e8*=0x2000, lpOverlapped=0x0) returned 1 [0110.810] CloseHandle (hObject=0x444) returned 1 [0110.810] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\e599dc5e24eb76d7_0", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\e599dc5e24eb76d7_0", lpFilePart=0x0) returned 0xc0 [0110.810] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\e599dc5e24eb76d7_0.xuy", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\e599dc5e24eb76d7_0.xuy", lpFilePart=0x0) returned 0xc4 [0110.810] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0110.810] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\e599dc5e24eb76d7_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\e599dc5e24eb76d7_0"), fInfoLevelId=0x0, lpFileInformation=0x3be600 | out: lpFileInformation=0x3be600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb92b8f41, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb92b8f41, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2de46534, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x345e)) returned 1 [0110.810] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0110.810] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\e599dc5e24eb76d7_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\e599dc5e24eb76d7_0"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\e599dc5e24eb76d7_0.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\e599dc5e24eb76d7_0.xuy")) returned 1 [0110.811] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\e6fee29e34914471_0", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\e6fee29e34914471_0", lpFilePart=0x0) returned 0xc0 [0110.811] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0110.811] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\e6fee29e34914471_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\e6fee29e34914471_0"), fInfoLevelId=0x0, lpFileInformation=0x235cfb0 | out: lpFileInformation=0x235cfb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb92e14d5, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb92e14d5, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0xb92e14d5, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x36fc7)) returned 1 [0110.811] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0110.811] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\e6fee29e34914471_0", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\e6fee29e34914471_0", lpFilePart=0x0) returned 0xc0 [0110.811] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0110.811] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\e6fee29e34914471_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\e6fee29e34914471_0"), fInfoLevelId=0x0, lpFileInformation=0x235d1f8 | out: lpFileInformation=0x235d1f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb92e14d5, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb92e14d5, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0xb92e14d5, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x36fc7)) returned 1 [0110.811] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0110.811] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\e6fee29e34914471_0", nBufferLength=0x105, lpBuffer=0x3bdfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\e6fee29e34914471_0", lpFilePart=0x0) returned 0xc0 [0110.812] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0110.812] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\e6fee29e34914471_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\e6fee29e34914471_0"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0110.812] GetFileType (hFile=0x444) returned 0x1 [0110.812] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be420) returned 1 [0110.813] GetFileType (hFile=0x444) returned 0x1 [0110.813] ReadFile (in: hFile=0x444, lpBuffer=0x235f7b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be538, lpOverlapped=0x0 | out: lpBuffer=0x235f7b8*, lpNumberOfBytesRead=0x3be538*=0x1000, lpOverlapped=0x0) returned 1 [0110.916] CloseHandle (hObject=0x444) returned 1 [0110.916] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\e6fee29e34914471_0", nBufferLength=0x105, lpBuffer=0x3bdfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\e6fee29e34914471_0", lpFilePart=0x0) returned 0xc0 [0110.916] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0110.916] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\e6fee29e34914471_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\e6fee29e34914471_0"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0110.916] GetFileType (hFile=0x444) returned 0x1 [0110.916] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be420) returned 1 [0110.916] GetFileType (hFile=0x444) returned 0x1 [0110.916] WriteFile (in: hFile=0x444, lpBuffer=0x2164658*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be5e8, lpOverlapped=0x0 | out: lpBuffer=0x2164658*, lpNumberOfBytesWritten=0x3be5e8*=0x2000, lpOverlapped=0x0) returned 1 [0110.916] CloseHandle (hObject=0x444) returned 1 [0110.916] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\e6fee29e34914471_0", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\e6fee29e34914471_0", lpFilePart=0x0) returned 0xc0 [0110.917] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\e6fee29e34914471_0.xuy", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\e6fee29e34914471_0.xuy", lpFilePart=0x0) returned 0xc4 [0110.917] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0110.917] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\e6fee29e34914471_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\e6fee29e34914471_0"), fInfoLevelId=0x0, lpFileInformation=0x3be600 | out: lpFileInformation=0x3be600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb92e14d5, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb92e14d5, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2df5169b, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x36fc7)) returned 1 [0110.917] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0110.917] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\e6fee29e34914471_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\e6fee29e34914471_0"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\e6fee29e34914471_0.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\e6fee29e34914471_0.xuy")) returned 1 [0110.918] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\fdf2cfeb8ad0eeac_0", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\fdf2cfeb8ad0eeac_0", lpFilePart=0x0) returned 0xc0 [0110.918] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0110.918] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\fdf2cfeb8ad0eeac_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\fdf2cfeb8ad0eeac_0"), fInfoLevelId=0x0, lpFileInformation=0x21dbee0 | out: lpFileInformation=0x21dbee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb92dd943, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb92dd943, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0xb92e14d5, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xab4)) returned 1 [0110.918] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0110.918] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\fdf2cfeb8ad0eeac_0", nBufferLength=0x105, lpBuffer=0x3bdf40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\fdf2cfeb8ad0eeac_0", lpFilePart=0x0) returned 0xc0 [0110.918] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be420) returned 1 [0110.918] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\fdf2cfeb8ad0eeac_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\fdf2cfeb8ad0eeac_0"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0110.918] GetFileType (hFile=0x444) returned 0x1 [0110.918] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be390) returned 1 [0110.918] GetFileType (hFile=0x444) returned 0x1 [0110.918] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be5b8 | out: lpFileSizeHigh=0x3be5b8*=0x0) returned 0xab4 [0110.918] ReadFile (in: hFile=0x444, lpBuffer=0x21dce40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be4e8, lpOverlapped=0x0 | out: lpBuffer=0x21dce40*, lpNumberOfBytesRead=0x3be4e8*=0xab4, lpOverlapped=0x0) returned 1 [0110.920] CloseHandle (hObject=0x444) returned 1 [0110.930] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\fdf2cfeb8ad0eeac_0", nBufferLength=0x105, lpBuffer=0x3bdf40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\fdf2cfeb8ad0eeac_0", lpFilePart=0x0) returned 0xc0 [0110.930] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be420) returned 1 [0110.930] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\fdf2cfeb8ad0eeac_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\fdf2cfeb8ad0eeac_0"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0110.932] GetFileType (hFile=0x444) returned 0x1 [0110.932] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be390) returned 1 [0110.932] GetFileType (hFile=0x444) returned 0x1 [0110.932] WriteFile (in: hFile=0x444, lpBuffer=0x22574e0*, nNumberOfBytesToWrite=0xac0, lpNumberOfBytesWritten=0x3be3f8, lpOverlapped=0x0 | out: lpBuffer=0x22574e0*, lpNumberOfBytesWritten=0x3be3f8*=0xac0, lpOverlapped=0x0) returned 1 [0110.933] CloseHandle (hObject=0x444) returned 1 [0110.933] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\fdf2cfeb8ad0eeac_0", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\fdf2cfeb8ad0eeac_0", lpFilePart=0x0) returned 0xc0 [0110.933] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\fdf2cfeb8ad0eeac_0.xuy", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\fdf2cfeb8ad0eeac_0.xuy", lpFilePart=0x0) returned 0xc4 [0110.933] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0110.933] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\fdf2cfeb8ad0eeac_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\fdf2cfeb8ad0eeac_0"), fInfoLevelId=0x0, lpFileInformation=0x3be600 | out: lpFileInformation=0x3be600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb92dd943, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb92dd943, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2df77b38, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xac0)) returned 1 [0110.933] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0110.933] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\fdf2cfeb8ad0eeac_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\fdf2cfeb8ad0eeac_0"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\fdf2cfeb8ad0eeac_0.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\fdf2cfeb8ad0eeac_0.xuy")) returned 1 [0110.934] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\index", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\index", lpFilePart=0x0) returned 0xb3 [0110.934] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0110.934] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\index" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\index"), fInfoLevelId=0x0, lpFileInformation=0x2258a08 | out: lpFileInformation=0x2258a08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb91b878c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb91b878c, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0xb91b878c, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x18)) returned 1 [0110.934] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0110.934] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\index", nBufferLength=0x105, lpBuffer=0x3bdf40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\index", lpFilePart=0x0) returned 0xb3 [0110.934] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be420) returned 1 [0110.934] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\index" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\index"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0110.934] GetFileType (hFile=0x444) returned 0x1 [0110.934] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be390) returned 1 [0110.934] GetFileType (hFile=0x444) returned 0x1 [0110.934] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be5b8 | out: lpFileSizeHigh=0x3be5b8*=0x0) returned 0x18 [0110.935] ReadFile (in: hFile=0x444, lpBuffer=0x2258e58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be4e8, lpOverlapped=0x0 | out: lpBuffer=0x2258e58*, lpNumberOfBytesRead=0x3be4e8*=0x18, lpOverlapped=0x0) returned 1 [0110.936] CloseHandle (hObject=0x444) returned 1 [0110.946] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\index", nBufferLength=0x105, lpBuffer=0x3bdf40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\index", lpFilePart=0x0) returned 0xb3 [0110.946] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be420) returned 1 [0110.946] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\index" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\index"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0110.948] GetFileType (hFile=0x444) returned 0x1 [0110.948] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be390) returned 1 [0110.948] GetFileType (hFile=0x444) returned 0x1 [0110.948] WriteFile (in: hFile=0x444, lpBuffer=0x22d0050*, nNumberOfBytesToWrite=0x20, lpNumberOfBytesWritten=0x3be3f8, lpOverlapped=0x0 | out: lpBuffer=0x22d0050*, lpNumberOfBytesWritten=0x3be3f8*=0x20, lpOverlapped=0x0) returned 1 [0110.948] CloseHandle (hObject=0x444) returned 1 [0110.949] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\index", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\index", lpFilePart=0x0) returned 0xb3 [0110.949] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\index.xuy", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\index.xuy", lpFilePart=0x0) returned 0xb7 [0110.949] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0110.949] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\index" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\index"), fInfoLevelId=0x0, lpFileInformation=0x3be600 | out: lpFileInformation=0x3be600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb91b878c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb91b878c, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2df9da0d, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x20)) returned 1 [0110.949] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0110.949] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\index" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\index"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\index.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\index.xuy")) returned 1 [0110.950] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0110.950] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\index-dir", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\index-dir", lpFilePart=0x0) returned 0xb7 [0110.950] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\index-dir\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\index-dir\\", lpFilePart=0x0) returned 0xb8 [0110.950] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\index-dir\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7370 [0110.974] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0110.974] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0110.974] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0110.974] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0110.975] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0110.975] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0110.975] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0110.975] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\index-dir", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\index-dir", lpFilePart=0x0) returned 0xb7 [0110.975] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\index-dir\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\index-dir\\", lpFilePart=0x0) returned 0xb8 [0110.975] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\index-dir\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d79d0 [0110.976] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0110.976] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0110.976] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0110.976] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0110.977] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0110.977] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0110.977] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\index-dir\\the-real-index", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\index-dir\\the-real-index", lpFilePart=0x0) returned 0xc6 [0110.977] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0110.977] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\index-dir\\the-real-index" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\index-dir\\the-real-index"), fInfoLevelId=0x0, lpFileInformation=0x22d4f20 | out: lpFileInformation=0x22d4f20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb91b878c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7d2690b2, ftLastAccessTime.dwHighDateTime=0x1d2d59f, ftLastWriteTime.dwLowDateTime=0x7d2690b2, ftLastWriteTime.dwHighDateTime=0x1d2d59f, nFileSizeHigh=0x0, nFileSizeLow=0x168)) returned 1 [0110.978] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0110.978] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\index-dir\\the-real-index", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\index-dir\\the-real-index", lpFilePart=0x0) returned 0xc6 [0110.978] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0110.978] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\index-dir\\the-real-index" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\index-dir\\the-real-index"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0110.978] GetFileType (hFile=0x444) returned 0x1 [0110.978] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0110.978] GetFileType (hFile=0x444) returned 0x1 [0110.978] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x168 [0110.978] ReadFile (in: hFile=0x444, lpBuffer=0x22d5530, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x22d5530*, lpNumberOfBytesRead=0x3be478*=0x168, lpOverlapped=0x0) returned 1 [0110.980] CloseHandle (hObject=0x444) returned 1 [0110.992] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\index-dir\\the-real-index", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\index-dir\\the-real-index", lpFilePart=0x0) returned 0xc6 [0110.992] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0110.992] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\index-dir\\the-real-index" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\index-dir\\the-real-index"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0110.993] GetFileType (hFile=0x444) returned 0x1 [0110.993] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0110.993] GetFileType (hFile=0x444) returned 0x1 [0110.993] WriteFile (in: hFile=0x444, lpBuffer=0x234cd38*, nNumberOfBytesToWrite=0x170, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x234cd38*, lpNumberOfBytesWritten=0x3be388*=0x170, lpOverlapped=0x0) returned 1 [0110.994] CloseHandle (hObject=0x444) returned 1 [0110.994] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\index-dir\\the-real-index", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\index-dir\\the-real-index", lpFilePart=0x0) returned 0xc6 [0110.995] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\index-dir\\the-real-index.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\index-dir\\the-real-index.xuy", lpFilePart=0x0) returned 0xca [0110.995] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0110.995] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\index-dir\\the-real-index" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\index-dir\\the-real-index"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb91b878c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7d2690b2, ftLastAccessTime.dwHighDateTime=0x1d2d59f, ftLastWriteTime.dwLowDateTime=0x2e010219, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x170)) returned 1 [0110.995] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0110.995] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\index-dir\\the-real-index" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\index-dir\\the-real-index"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\index-dir\\the-real-index.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\index-dir\\the-real-index.xuy")) returned 1 [0110.996] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0110.996] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database", lpFilePart=0x0) returned 0x5b [0110.996] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\", lpFilePart=0x0) returned 0x5c [0110.996] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d7d30 [0111.018] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0111.018] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0111.018] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0111.018] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0111.018] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0111.018] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0111.018] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0111.018] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0111.018] FindClose (in: hFindFile=0x5d7d30 | out: hFindFile=0x5d7d30) returned 1 [0111.019] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0111.019] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0111.019] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0111.019] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database", lpFilePart=0x0) returned 0x5b [0111.019] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\", lpFilePart=0x0) returned 0x5c [0111.019] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d78b0 [0111.020] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0111.020] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0111.020] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0111.020] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0111.021] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0111.021] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0111.021] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0111.021] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0111.021] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0111.022] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0111.022] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0111.022] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\000003.log", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\000003.log", lpFilePart=0x0) returned 0x66 [0111.022] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0111.022] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\000003.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\database\\000003.log"), fInfoLevelId=0x0, lpFileInformation=0x2351dc8 | out: lpFileInformation=0x2351dc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d1e38ba, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7d1e38ba, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7ca850dc, ftLastWriteTime.dwHighDateTime=0x1d2d59f, nFileSizeHigh=0x0, nFileSizeLow=0x8b2)) returned 1 [0111.027] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0111.027] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\000003.log", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\000003.log", lpFilePart=0x0) returned 0x66 [0111.027] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0111.027] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\000003.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\database\\000003.log"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0111.027] GetFileType (hFile=0x444) returned 0x1 [0111.027] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0111.028] GetFileType (hFile=0x444) returned 0x1 [0111.028] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x8b2 [0111.028] ReadFile (in: hFile=0x444, lpBuffer=0x2352998, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x2352998*, lpNumberOfBytesRead=0x3be5c8*=0x8b2, lpOverlapped=0x0) returned 1 [0111.029] CloseHandle (hObject=0x444) returned 1 [0111.074] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\000003.log", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\000003.log", lpFilePart=0x0) returned 0x66 [0111.074] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0111.074] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\000003.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\database\\000003.log"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0111.076] GetFileType (hFile=0x444) returned 0x1 [0111.076] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0111.076] GetFileType (hFile=0x444) returned 0x1 [0111.076] WriteFile (in: hFile=0x444, lpBuffer=0x21c82f0*, nNumberOfBytesToWrite=0x8c0, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x21c82f0*, lpNumberOfBytesWritten=0x3be4d8*=0x8c0, lpOverlapped=0x0) returned 1 [0111.077] CloseHandle (hObject=0x444) returned 1 [0111.077] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\000003.log", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\000003.log", lpFilePart=0x0) returned 0x66 [0111.077] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\000003.log.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\000003.log.xuy", lpFilePart=0x0) returned 0x6a [0111.077] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0111.077] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\000003.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\database\\000003.log"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d1e38ba, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7d1e38ba, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2e0cec85, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x8c0)) returned 1 [0111.077] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0111.077] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\000003.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\database\\000003.log"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\000003.log.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\database\\000003.log.xuy")) returned 1 [0111.079] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\CURRENT", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\CURRENT", lpFilePart=0x0) returned 0x63 [0111.079] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0111.079] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\CURRENT" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\database\\current"), fInfoLevelId=0x0, lpFileInformation=0x21c95f0 | out: lpFileInformation=0x21c95f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d15ad21, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7d15ad21, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7d15ad21, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0111.080] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0111.080] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\CURRENT", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\CURRENT", lpFilePart=0x0) returned 0x63 [0111.081] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0111.081] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\CURRENT" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\database\\current"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0111.081] GetFileType (hFile=0x444) returned 0x1 [0111.081] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0111.081] GetFileType (hFile=0x444) returned 0x1 [0111.081] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x10 [0111.081] ReadFile (in: hFile=0x444, lpBuffer=0x21c98f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x21c98f8*, lpNumberOfBytesRead=0x3be5c8*=0x10, lpOverlapped=0x0) returned 1 [0111.082] CloseHandle (hObject=0x444) returned 1 [0111.099] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\CURRENT", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\CURRENT", lpFilePart=0x0) returned 0x63 [0111.099] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0111.099] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\CURRENT" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\database\\current"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0111.101] GetFileType (hFile=0x444) returned 0x1 [0111.101] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0111.101] GetFileType (hFile=0x444) returned 0x1 [0111.101] WriteFile (in: hFile=0x444, lpBuffer=0x2240a58*, nNumberOfBytesToWrite=0x20, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x2240a58*, lpNumberOfBytesWritten=0x3be4d8*=0x20, lpOverlapped=0x0) returned 1 [0111.102] CloseHandle (hObject=0x444) returned 1 [0111.102] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\CURRENT", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\CURRENT", lpFilePart=0x0) returned 0x63 [0111.102] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\CURRENT.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\CURRENT.xuy", lpFilePart=0x0) returned 0x67 [0111.102] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0111.102] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\CURRENT" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\database\\current"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d15ad21, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7d15ad21, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2e11b636, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x20)) returned 1 [0111.102] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0111.102] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\CURRENT" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\database\\current"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\CURRENT.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\database\\current.xuy")) returned 1 [0111.103] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\LOCK", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\LOCK", lpFilePart=0x0) returned 0x60 [0111.103] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0111.103] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\LOCK" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\database\\lock"), fInfoLevelId=0x0, lpFileInformation=0x2241d40 | out: lpFileInformation=0x2241d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d15860b, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7d15860b, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7d15860b, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0111.104] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0111.104] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\LOCK", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\LOCK", lpFilePart=0x0) returned 0x60 [0111.104] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0111.104] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\LOCK" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\database\\lock"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0111.104] GetFileType (hFile=0x444) returned 0x1 [0111.104] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0111.104] GetFileType (hFile=0x444) returned 0x1 [0111.104] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x0 [0111.104] CloseHandle (hObject=0x444) returned 1 [0111.381] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\LOCK", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\LOCK", lpFilePart=0x0) returned 0x60 [0111.381] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0111.381] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\LOCK" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\database\\lock"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0111.382] GetFileType (hFile=0x444) returned 0x1 [0111.382] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0111.382] GetFileType (hFile=0x444) returned 0x1 [0111.382] WriteFile (in: hFile=0x444, lpBuffer=0x22b8148*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x22b8148*, lpNumberOfBytesWritten=0x3be4d8*=0x10, lpOverlapped=0x0) returned 1 [0111.383] CloseHandle (hObject=0x444) returned 1 [0111.383] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\LOCK", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\LOCK", lpFilePart=0x0) returned 0x60 [0111.383] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\LOCK.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\LOCK.xuy", lpFilePart=0x0) returned 0x64 [0111.383] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0111.383] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\LOCK" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\database\\lock"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d15860b, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7d15860b, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2e3c9b97, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0111.383] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0111.383] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\LOCK" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\database\\lock"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\LOCK.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\database\\lock.xuy")) returned 1 [0111.384] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\LOG", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\LOG", lpFilePart=0x0) returned 0x5f [0111.384] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0111.384] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\LOG" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\database\\log"), fInfoLevelId=0x0, lpFileInformation=0x22b9430 | out: lpFileInformation=0x22b9430*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d15860b, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x74ec75a7, ftLastAccessTime.dwHighDateTime=0x1d2d59f, ftLastWriteTime.dwLowDateTime=0x7553ebfa, ftLastWriteTime.dwHighDateTime=0x1d2d59f, nFileSizeHigh=0x0, nFileSizeLow=0x15e)) returned 1 [0111.531] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0111.531] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\LOG", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\LOG", lpFilePart=0x0) returned 0x5f [0111.531] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0111.531] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\LOG" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\database\\log"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0111.532] GetFileType (hFile=0x444) returned 0x1 [0111.532] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0111.532] GetFileType (hFile=0x444) returned 0x1 [0111.532] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x15e [0111.532] ReadFile (in: hFile=0x444, lpBuffer=0x22b9868, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x22b9868*, lpNumberOfBytesRead=0x3be5c8*=0x15e, lpOverlapped=0x0) returned 1 [0111.533] CloseHandle (hObject=0x444) returned 1 [0111.542] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\LOG", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\LOG", lpFilePart=0x0) returned 0x5f [0111.543] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0111.543] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\LOG" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\database\\log"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0111.544] GetFileType (hFile=0x444) returned 0x1 [0111.544] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0111.544] GetFileType (hFile=0x444) returned 0x1 [0111.544] WriteFile (in: hFile=0x444, lpBuffer=0x2330f38*, nNumberOfBytesToWrite=0x160, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x2330f38*, lpNumberOfBytesWritten=0x3be4d8*=0x160, lpOverlapped=0x0) returned 1 [0111.545] CloseHandle (hObject=0x444) returned 1 [0111.545] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\LOG", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\LOG", lpFilePart=0x0) returned 0x5f [0111.545] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\LOG.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\LOG.xuy", lpFilePart=0x0) returned 0x63 [0111.545] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0111.545] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\LOG" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\database\\log"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d15860b, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x74ec75a7, ftLastAccessTime.dwHighDateTime=0x1d2d59f, ftLastWriteTime.dwLowDateTime=0x2e5472be, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x160)) returned 1 [0111.545] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0111.545] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\LOG" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\database\\log"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\LOG.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\database\\log.xuy")) returned 1 [0111.546] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\LOG.old", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\LOG.old", lpFilePart=0x0) returned 0x63 [0111.546] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0111.546] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\LOG.old" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\database\\log.old"), fInfoLevelId=0x0, lpFileInformation=0x2332230 | out: lpFileInformation=0x2332230*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d15860b, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xbf53095c, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0xbff33cc2, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x15e)) returned 1 [0111.546] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0111.546] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\LOG.old", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\LOG.old", lpFilePart=0x0) returned 0x63 [0111.547] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0111.547] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\LOG.old" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\database\\log.old"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0111.547] GetFileType (hFile=0x444) returned 0x1 [0111.547] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0111.547] GetFileType (hFile=0x444) returned 0x1 [0111.547] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x15e [0111.547] ReadFile (in: hFile=0x444, lpBuffer=0x2332688, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x2332688*, lpNumberOfBytesRead=0x3be5c8*=0x15e, lpOverlapped=0x0) returned 1 [0111.548] CloseHandle (hObject=0x444) returned 1 [0111.589] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\LOG.old", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\LOG.old", lpFilePart=0x0) returned 0x63 [0111.589] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0111.589] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\LOG.old" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\database\\log.old"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0111.590] GetFileType (hFile=0x444) returned 0x1 [0111.590] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0111.590] GetFileType (hFile=0x444) returned 0x1 [0111.590] WriteFile (in: hFile=0x444, lpBuffer=0x21a95c8*, nNumberOfBytesToWrite=0x160, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x21a95c8*, lpNumberOfBytesWritten=0x3be4d8*=0x160, lpOverlapped=0x0) returned 1 [0111.591] CloseHandle (hObject=0x444) returned 1 [0111.591] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\LOG.old", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\LOG.old", lpFilePart=0x0) returned 0x63 [0111.591] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\LOG.old.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\LOG.old.xuy", lpFilePart=0x0) returned 0x67 [0111.591] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0111.591] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\LOG.old" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\database\\log.old"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d15860b, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xbf53095c, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2e5b9ac8, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x160)) returned 1 [0111.591] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0111.591] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\LOG.old" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\database\\log.old"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\LOG.old.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\database\\log.old.xuy")) returned 1 [0111.592] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\MANIFEST-000001", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\MANIFEST-000001", lpFilePart=0x0) returned 0x6b [0111.592] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0111.592] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\MANIFEST-000001" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\database\\manifest-000001"), fInfoLevelId=0x0, lpFileInformation=0x21aa8b0 | out: lpFileInformation=0x21aa8b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d15860b, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7d15860b, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7d15860b, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x29)) returned 1 [0111.592] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0111.592] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\MANIFEST-000001", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\MANIFEST-000001", lpFilePart=0x0) returned 0x6b [0111.593] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0111.593] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\MANIFEST-000001" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\database\\manifest-000001"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0111.593] GetFileType (hFile=0x444) returned 0x1 [0111.593] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0111.593] GetFileType (hFile=0x444) returned 0x1 [0111.593] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x29 [0111.593] ReadFile (in: hFile=0x444, lpBuffer=0x21aac18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x21aac18*, lpNumberOfBytesRead=0x3be5c8*=0x29, lpOverlapped=0x0) returned 1 [0111.595] CloseHandle (hObject=0x444) returned 1 [0111.605] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\MANIFEST-000001", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\MANIFEST-000001", lpFilePart=0x0) returned 0x6b [0111.605] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0111.605] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\MANIFEST-000001" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\database\\manifest-000001"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0111.606] GetFileType (hFile=0x444) returned 0x1 [0111.606] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0111.606] GetFileType (hFile=0x444) returned 0x1 [0111.606] WriteFile (in: hFile=0x444, lpBuffer=0x2221db0*, nNumberOfBytesToWrite=0x30, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x2221db0*, lpNumberOfBytesWritten=0x3be4d8*=0x30, lpOverlapped=0x0) returned 1 [0111.607] CloseHandle (hObject=0x444) returned 1 [0111.607] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\MANIFEST-000001", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\MANIFEST-000001", lpFilePart=0x0) returned 0x6b [0111.607] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\MANIFEST-000001.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\MANIFEST-000001.xuy", lpFilePart=0x0) returned 0x6f [0111.607] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0111.607] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\MANIFEST-000001" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\database\\manifest-000001"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d15860b, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7d15860b, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2e5dfc8e, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x30)) returned 1 [0111.607] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0111.607] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\MANIFEST-000001" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\database\\manifest-000001"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\MANIFEST-000001.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\database\\manifest-000001.xuy")) returned 1 [0111.608] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0111.608] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache", lpFilePart=0x0) returned 0x5e [0111.608] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\", lpFilePart=0x0) returned 0x5f [0111.608] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d73d0 [0111.948] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0111.949] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0111.949] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0111.949] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0111.949] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0111.949] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0111.949] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0111.950] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0111.950] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0111.950] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0111.950] FindClose (in: hFindFile=0x5d73d0 | out: hFindFile=0x5d73d0) returned 1 [0111.951] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0111.951] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0111.951] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0111.951] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache", lpFilePart=0x0) returned 0x5e [0111.951] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\", lpFilePart=0x0) returned 0x5f [0111.951] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d73d0 [0111.952] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0111.952] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0111.953] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0111.953] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0111.953] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0111.953] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0111.954] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0111.954] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0111.954] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0111.954] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0111.954] FindClose (in: hFindFile=0x5d73d0 | out: hFindFile=0x5d73d0) returned 1 [0111.955] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0111.955] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0111.955] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\2cc80dabc69f58b6_0", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\2cc80dabc69f58b6_0", lpFilePart=0x0) returned 0x71 [0111.955] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0111.955] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\2cc80dabc69f58b6_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\scriptcache\\2cc80dabc69f58b6_0"), fInfoLevelId=0x0, lpFileInformation=0x2227c30 | out: lpFileInformation=0x2227c30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d29838b, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7d29838b, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7d29f8cd, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x20c7)) returned 1 [0111.956] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0111.956] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\2cc80dabc69f58b6_0", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\2cc80dabc69f58b6_0", lpFilePart=0x0) returned 0x71 [0111.956] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0111.956] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\2cc80dabc69f58b6_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\scriptcache\\2cc80dabc69f58b6_0"), fInfoLevelId=0x0, lpFileInformation=0x2227dd8 | out: lpFileInformation=0x2227dd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d29838b, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7d29838b, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7d29f8cd, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x20c7)) returned 1 [0111.956] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0111.957] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\2cc80dabc69f58b6_0", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\2cc80dabc69f58b6_0", lpFilePart=0x0) returned 0x71 [0111.957] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0111.957] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\2cc80dabc69f58b6_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\scriptcache\\2cc80dabc69f58b6_0"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0111.958] GetFileType (hFile=0x444) returned 0x1 [0111.958] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0111.958] GetFileType (hFile=0x444) returned 0x1 [0111.958] ReadFile (in: hFile=0x444, lpBuffer=0x222a258, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x222a258*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0111.979] CloseHandle (hObject=0x444) returned 1 [0111.980] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\2cc80dabc69f58b6_0", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\2cc80dabc69f58b6_0", lpFilePart=0x0) returned 0x71 [0111.980] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0111.980] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\2cc80dabc69f58b6_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\scriptcache\\2cc80dabc69f58b6_0"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0111.980] GetFileType (hFile=0x444) returned 0x1 [0111.980] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0111.980] GetFileType (hFile=0x444) returned 0x1 [0111.980] WriteFile (in: hFile=0x444, lpBuffer=0x2227f60*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x2227f60*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0111.980] CloseHandle (hObject=0x444) returned 1 [0111.981] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\2cc80dabc69f58b6_0", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\2cc80dabc69f58b6_0", lpFilePart=0x0) returned 0x71 [0111.981] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\2cc80dabc69f58b6_0.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\2cc80dabc69f58b6_0.xuy", lpFilePart=0x0) returned 0x75 [0111.981] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0111.981] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\2cc80dabc69f58b6_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\scriptcache\\2cc80dabc69f58b6_0"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d29838b, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7d29838b, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2e973c1d, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x20c7)) returned 1 [0111.981] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0111.981] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\2cc80dabc69f58b6_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\scriptcache\\2cc80dabc69f58b6_0"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\2cc80dabc69f58b6_0.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\scriptcache\\2cc80dabc69f58b6_0.xuy")) returned 1 [0111.982] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\2cc80dabc69f58b6_1", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\2cc80dabc69f58b6_1", lpFilePart=0x0) returned 0x71 [0111.982] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0111.982] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\2cc80dabc69f58b6_1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\scriptcache\\2cc80dabc69f58b6_1"), fInfoLevelId=0x0, lpFileInformation=0x22a6730 | out: lpFileInformation=0x22a6730*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d2f01e7, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7d2f01e7, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7d2f28ea, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x3d)) returned 1 [0111.983] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0111.983] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\2cc80dabc69f58b6_1", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\2cc80dabc69f58b6_1", lpFilePart=0x0) returned 0x71 [0111.983] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0111.983] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\2cc80dabc69f58b6_1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\scriptcache\\2cc80dabc69f58b6_1"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0111.983] GetFileType (hFile=0x444) returned 0x1 [0111.983] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0111.983] GetFileType (hFile=0x444) returned 0x1 [0111.983] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x3d [0111.983] ReadFile (in: hFile=0x444, lpBuffer=0x22a6ad8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x22a6ad8*, lpNumberOfBytesRead=0x3be5c8*=0x3d, lpOverlapped=0x0) returned 1 [0112.001] CloseHandle (hObject=0x444) returned 1 [0112.020] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\2cc80dabc69f58b6_1", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\2cc80dabc69f58b6_1", lpFilePart=0x0) returned 0x71 [0112.020] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0112.020] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\2cc80dabc69f58b6_1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\scriptcache\\2cc80dabc69f58b6_1"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0112.022] GetFileType (hFile=0x444) returned 0x1 [0112.022] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0112.022] GetFileType (hFile=0x444) returned 0x1 [0112.022] WriteFile (in: hFile=0x444, lpBuffer=0x231dca8*, nNumberOfBytesToWrite=0x40, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x231dca8*, lpNumberOfBytesWritten=0x3be4d8*=0x40, lpOverlapped=0x0) returned 1 [0112.023] CloseHandle (hObject=0x444) returned 1 [0112.023] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\2cc80dabc69f58b6_1", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\2cc80dabc69f58b6_1", lpFilePart=0x0) returned 0x71 [0112.023] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\2cc80dabc69f58b6_1.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\2cc80dabc69f58b6_1.xuy", lpFilePart=0x0) returned 0x75 [0112.023] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0112.023] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\2cc80dabc69f58b6_1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\scriptcache\\2cc80dabc69f58b6_1"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d2f01e7, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7d2f01e7, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2e9e5d6b, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x40)) returned 1 [0112.023] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0112.023] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\2cc80dabc69f58b6_1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\scriptcache\\2cc80dabc69f58b6_1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\2cc80dabc69f58b6_1.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\scriptcache\\2cc80dabc69f58b6_1.xuy")) returned 1 [0112.024] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\4cb013792b196a35_0", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\4cb013792b196a35_0", lpFilePart=0x0) returned 0x71 [0112.025] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0112.025] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\4cb013792b196a35_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\scriptcache\\4cb013792b196a35_0"), fInfoLevelId=0x0, lpFileInformation=0x231eff0 | out: lpFileInformation=0x231eff0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb919afb5, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb919afb5, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0xb919fdd7, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x20c8)) returned 1 [0112.025] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0112.025] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\4cb013792b196a35_0", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\4cb013792b196a35_0", lpFilePart=0x0) returned 0x71 [0112.025] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0112.025] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\4cb013792b196a35_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\scriptcache\\4cb013792b196a35_0"), fInfoLevelId=0x0, lpFileInformation=0x231f198 | out: lpFileInformation=0x231f198*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb919afb5, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb919afb5, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0xb919fdd7, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x20c8)) returned 1 [0112.025] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0112.025] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\4cb013792b196a35_0", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\4cb013792b196a35_0", lpFilePart=0x0) returned 0x71 [0112.025] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0112.025] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\4cb013792b196a35_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\scriptcache\\4cb013792b196a35_0"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0112.026] GetFileType (hFile=0x444) returned 0x1 [0112.026] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0112.026] GetFileType (hFile=0x444) returned 0x1 [0112.026] ReadFile (in: hFile=0x444, lpBuffer=0x2321618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x2321618*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0112.095] CloseHandle (hObject=0x444) returned 1 [0112.095] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\4cb013792b196a35_0", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\4cb013792b196a35_0", lpFilePart=0x0) returned 0x71 [0112.095] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0112.095] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\4cb013792b196a35_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\scriptcache\\4cb013792b196a35_0"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0112.095] GetFileType (hFile=0x444) returned 0x1 [0112.095] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0112.095] GetFileType (hFile=0x444) returned 0x1 [0112.095] WriteFile (in: hFile=0x444, lpBuffer=0x2162fb8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x2162fb8*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0112.096] CloseHandle (hObject=0x444) returned 1 [0112.096] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\4cb013792b196a35_0", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\4cb013792b196a35_0", lpFilePart=0x0) returned 0x71 [0112.096] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\4cb013792b196a35_0.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\4cb013792b196a35_0.xuy", lpFilePart=0x0) returned 0x75 [0112.096] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0112.096] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\4cb013792b196a35_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\scriptcache\\4cb013792b196a35_0"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb919afb5, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb919afb5, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2eaa4a72, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x20c8)) returned 1 [0112.096] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0112.096] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\4cb013792b196a35_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\scriptcache\\4cb013792b196a35_0"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\4cb013792b196a35_0.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\scriptcache\\4cb013792b196a35_0.xuy")) returned 1 [0112.097] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\4cb013792b196a35_1", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\4cb013792b196a35_1", lpFilePart=0x0) returned 0x71 [0112.097] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0112.097] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\4cb013792b196a35_1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\scriptcache\\4cb013792b196a35_1"), fInfoLevelId=0x0, lpFileInformation=0x21a0de0 | out: lpFileInformation=0x21a0de0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb91b878c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb91b878c, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0xbfb103ad, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x13d5)) returned 1 [0112.097] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0112.097] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\4cb013792b196a35_1", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\4cb013792b196a35_1", lpFilePart=0x0) returned 0x71 [0112.097] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0112.097] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\4cb013792b196a35_1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\scriptcache\\4cb013792b196a35_1"), fInfoLevelId=0x0, lpFileInformation=0x21a0f88 | out: lpFileInformation=0x21a0f88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb91b878c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb91b878c, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0xbfb103ad, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x13d5)) returned 1 [0112.097] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0112.097] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\4cb013792b196a35_1", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\4cb013792b196a35_1", lpFilePart=0x0) returned 0x71 [0112.097] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0112.097] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\4cb013792b196a35_1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\scriptcache\\4cb013792b196a35_1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0112.098] GetFileType (hFile=0x444) returned 0x1 [0112.098] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0112.098] GetFileType (hFile=0x444) returned 0x1 [0112.098] ReadFile (in: hFile=0x444, lpBuffer=0x21a3408, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x21a3408*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0112.117] CloseHandle (hObject=0x444) returned 1 [0112.117] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\4cb013792b196a35_1", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\4cb013792b196a35_1", lpFilePart=0x0) returned 0x71 [0112.117] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0112.117] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\4cb013792b196a35_1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\scriptcache\\4cb013792b196a35_1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0112.117] GetFileType (hFile=0x444) returned 0x1 [0112.117] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0112.118] GetFileType (hFile=0x444) returned 0x1 [0112.118] WriteFile (in: hFile=0x444, lpBuffer=0x21a1110*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x21a1110*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0112.118] CloseHandle (hObject=0x444) returned 1 [0112.118] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\4cb013792b196a35_1", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\4cb013792b196a35_1", lpFilePart=0x0) returned 0x71 [0112.118] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\4cb013792b196a35_1.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\4cb013792b196a35_1.xuy", lpFilePart=0x0) returned 0x75 [0112.118] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0112.118] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\4cb013792b196a35_1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\scriptcache\\4cb013792b196a35_1"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb91b878c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb91b878c, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2eacacee, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0112.118] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0112.118] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\4cb013792b196a35_1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\scriptcache\\4cb013792b196a35_1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\4cb013792b196a35_1.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\scriptcache\\4cb013792b196a35_1.xuy")) returned 1 [0112.119] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\f1cdccba37924bda_0", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\f1cdccba37924bda_0", lpFilePart=0x0) returned 0x71 [0112.119] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0112.119] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\f1cdccba37924bda_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\scriptcache\\f1cdccba37924bda_0"), fInfoLevelId=0x0, lpFileInformation=0x221f8e0 | out: lpFileInformation=0x221f8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7acf04a2, ftCreationTime.dwHighDateTime=0x1d2d59f, ftLastAccessTime.dwLowDateTime=0x7acf04a2, ftLastAccessTime.dwHighDateTime=0x1d2d59f, ftLastWriteTime.dwLowDateTime=0x7acf79e9, ftLastWriteTime.dwHighDateTime=0x1d2d59f, nFileSizeHigh=0x0, nFileSizeLow=0x20e4)) returned 1 [0112.119] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0112.119] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\f1cdccba37924bda_0", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\f1cdccba37924bda_0", lpFilePart=0x0) returned 0x71 [0112.119] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0112.119] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\f1cdccba37924bda_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\scriptcache\\f1cdccba37924bda_0"), fInfoLevelId=0x0, lpFileInformation=0x221fa88 | out: lpFileInformation=0x221fa88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7acf04a2, ftCreationTime.dwHighDateTime=0x1d2d59f, ftLastAccessTime.dwLowDateTime=0x7acf04a2, ftLastAccessTime.dwHighDateTime=0x1d2d59f, ftLastWriteTime.dwLowDateTime=0x7acf79e9, ftLastWriteTime.dwHighDateTime=0x1d2d59f, nFileSizeHigh=0x0, nFileSizeLow=0x20e4)) returned 1 [0112.119] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0112.120] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\f1cdccba37924bda_0", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\f1cdccba37924bda_0", lpFilePart=0x0) returned 0x71 [0112.120] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0112.120] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\f1cdccba37924bda_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\scriptcache\\f1cdccba37924bda_0"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0112.120] GetFileType (hFile=0x444) returned 0x1 [0112.120] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0112.120] GetFileType (hFile=0x444) returned 0x1 [0112.120] ReadFile (in: hFile=0x444, lpBuffer=0x2221f08, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x2221f08*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0112.133] CloseHandle (hObject=0x444) returned 1 [0112.133] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\f1cdccba37924bda_0", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\f1cdccba37924bda_0", lpFilePart=0x0) returned 0x71 [0112.133] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0112.133] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\f1cdccba37924bda_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\scriptcache\\f1cdccba37924bda_0"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0112.134] GetFileType (hFile=0x444) returned 0x1 [0112.134] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0112.134] GetFileType (hFile=0x444) returned 0x1 [0112.134] WriteFile (in: hFile=0x444, lpBuffer=0x221fc10*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x221fc10*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0112.134] CloseHandle (hObject=0x444) returned 1 [0112.134] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\f1cdccba37924bda_0", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\f1cdccba37924bda_0", lpFilePart=0x0) returned 0x71 [0112.134] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\f1cdccba37924bda_0.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\f1cdccba37924bda_0.xuy", lpFilePart=0x0) returned 0x75 [0112.134] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0112.134] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\f1cdccba37924bda_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\scriptcache\\f1cdccba37924bda_0"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7acf04a2, ftCreationTime.dwHighDateTime=0x1d2d59f, ftLastAccessTime.dwLowDateTime=0x7acf04a2, ftLastAccessTime.dwHighDateTime=0x1d2d59f, ftLastWriteTime.dwLowDateTime=0x2eaf0c7e, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x20e4)) returned 1 [0112.134] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0112.134] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\f1cdccba37924bda_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\scriptcache\\f1cdccba37924bda_0"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\f1cdccba37924bda_0.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\scriptcache\\f1cdccba37924bda_0.xuy")) returned 1 [0112.135] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\f1cdccba37924bda_1", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\f1cdccba37924bda_1", lpFilePart=0x0) returned 0x71 [0112.135] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0112.135] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\f1cdccba37924bda_1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\scriptcache\\f1cdccba37924bda_1"), fInfoLevelId=0x0, lpFileInformation=0x229e3e0 | out: lpFileInformation=0x229e3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ad15d0d, ftCreationTime.dwHighDateTime=0x1d2d59f, ftLastAccessTime.dwLowDateTime=0x7ad15d0d, ftLastAccessTime.dwHighDateTime=0x1d2d59f, ftLastWriteTime.dwLowDateTime=0x7ad15d0d, ftLastWriteTime.dwHighDateTime=0x1d2d59f, nFileSizeHigh=0x0, nFileSizeLow=0x3d)) returned 1 [0112.135] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0112.135] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\f1cdccba37924bda_1", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\f1cdccba37924bda_1", lpFilePart=0x0) returned 0x71 [0112.135] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0112.135] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\f1cdccba37924bda_1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\scriptcache\\f1cdccba37924bda_1"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0112.136] GetFileType (hFile=0x444) returned 0x1 [0112.136] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0112.136] GetFileType (hFile=0x444) returned 0x1 [0112.136] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x3d [0112.136] ReadFile (in: hFile=0x444, lpBuffer=0x229e788, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x229e788*, lpNumberOfBytesRead=0x3be5c8*=0x3d, lpOverlapped=0x0) returned 1 [0112.147] CloseHandle (hObject=0x444) returned 1 [0112.160] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\f1cdccba37924bda_1", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\f1cdccba37924bda_1", lpFilePart=0x0) returned 0x71 [0112.160] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0112.160] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\f1cdccba37924bda_1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\scriptcache\\f1cdccba37924bda_1"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0112.161] GetFileType (hFile=0x444) returned 0x1 [0112.161] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0112.161] GetFileType (hFile=0x444) returned 0x1 [0112.161] WriteFile (in: hFile=0x444, lpBuffer=0x2315958*, nNumberOfBytesToWrite=0x40, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x2315958*, lpNumberOfBytesWritten=0x3be4d8*=0x40, lpOverlapped=0x0) returned 1 [0112.162] CloseHandle (hObject=0x444) returned 1 [0112.162] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\f1cdccba37924bda_1", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\f1cdccba37924bda_1", lpFilePart=0x0) returned 0x71 [0112.162] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\f1cdccba37924bda_1.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\f1cdccba37924bda_1.xuy", lpFilePart=0x0) returned 0x75 [0112.162] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0112.162] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\f1cdccba37924bda_1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\scriptcache\\f1cdccba37924bda_1"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ad15d0d, ftCreationTime.dwHighDateTime=0x1d2d59f, ftLastAccessTime.dwLowDateTime=0x7ad15d0d, ftLastAccessTime.dwHighDateTime=0x1d2d59f, ftLastWriteTime.dwLowDateTime=0x2eb3d173, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x40)) returned 1 [0112.163] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0112.163] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\f1cdccba37924bda_1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\scriptcache\\f1cdccba37924bda_1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\f1cdccba37924bda_1.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\scriptcache\\f1cdccba37924bda_1.xuy")) returned 1 [0112.164] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\index", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\index", lpFilePart=0x0) returned 0x64 [0112.164] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0112.164] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\index" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\scriptcache\\index"), fInfoLevelId=0x0, lpFileInformation=0x2316ca0 | out: lpFileInformation=0x2316ca0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d1a8f2c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7d1a8f2c, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7d1a8f2c, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x18)) returned 1 [0112.164] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0112.164] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\index", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\index", lpFilePart=0x0) returned 0x64 [0112.164] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0112.164] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\index" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\scriptcache\\index"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0112.164] GetFileType (hFile=0x444) returned 0x1 [0112.164] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0112.164] GetFileType (hFile=0x444) returned 0x1 [0112.164] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x18 [0112.164] ReadFile (in: hFile=0x444, lpBuffer=0x2316fc0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x2316fc0*, lpNumberOfBytesRead=0x3be5c8*=0x18, lpOverlapped=0x0) returned 1 [0112.165] CloseHandle (hObject=0x444) returned 1 [0112.206] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\index", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\index", lpFilePart=0x0) returned 0x64 [0112.206] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0112.206] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\index" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\scriptcache\\index"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0112.207] GetFileType (hFile=0x444) returned 0x1 [0112.207] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0112.207] GetFileType (hFile=0x444) returned 0x1 [0112.207] WriteFile (in: hFile=0x444, lpBuffer=0x218af60*, nNumberOfBytesToWrite=0x20, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x218af60*, lpNumberOfBytesWritten=0x3be4d8*=0x20, lpOverlapped=0x0) returned 1 [0112.208] CloseHandle (hObject=0x444) returned 1 [0112.208] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\index", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\index", lpFilePart=0x0) returned 0x64 [0112.208] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\index.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\index.xuy", lpFilePart=0x0) returned 0x68 [0112.208] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0112.208] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\index" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\scriptcache\\index"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d1a8f2c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7d1a8f2c, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2ebafbc6, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x20)) returned 1 [0112.208] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0112.208] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\index" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\scriptcache\\index"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\index.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\scriptcache\\index.xuy")) returned 1 [0112.209] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0112.209] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\index-dir", nBufferLength=0x105, lpBuffer=0x3be130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\index-dir", lpFilePart=0x0) returned 0x68 [0112.209] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\index-dir\\", nBufferLength=0x105, lpBuffer=0x3be0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\index-dir\\", lpFilePart=0x0) returned 0x69 [0112.209] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\index-dir\\*", lpFindFileData=0x3be2e0 | out: lpFindFileData=0x3be2e0) returned 0x5d7370 [0112.251] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0112.251] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0112.251] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 0 [0112.251] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0112.252] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0112.252] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0112.252] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0112.252] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\index-dir", nBufferLength=0x105, lpBuffer=0x3be130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\index-dir", lpFilePart=0x0) returned 0x68 [0112.252] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\index-dir\\", nBufferLength=0x105, lpBuffer=0x3be0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\index-dir\\", lpFilePart=0x0) returned 0x69 [0112.252] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\index-dir\\*", lpFindFileData=0x3be2e0 | out: lpFindFileData=0x3be2e0) returned 0x5d7a30 [0112.253] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0112.253] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0112.254] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 0 [0112.254] FindClose (in: hFindFile=0x5d7a30 | out: hFindFile=0x5d7a30) returned 1 [0112.255] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0112.255] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0112.255] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\index-dir\\the-real-index", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\index-dir\\the-real-index", lpFilePart=0x0) returned 0x77 [0112.255] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0112.255] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\index-dir\\the-real-index" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\scriptcache\\index-dir\\the-real-index"), fInfoLevelId=0x0, lpFileInformation=0x218e9c8 | out: lpFileInformation=0x218e9c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d223071, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7d2690b2, ftLastAccessTime.dwHighDateTime=0x1d2d59f, ftLastWriteTime.dwLowDateTime=0x7d2690b2, ftLastWriteTime.dwHighDateTime=0x1d2d59f, nFileSizeHigh=0x0, nFileSizeLow=0x78)) returned 1 [0112.262] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0112.263] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\index-dir\\the-real-index", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\index-dir\\the-real-index", lpFilePart=0x0) returned 0x77 [0112.263] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0112.263] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\index-dir\\the-real-index" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\scriptcache\\index-dir\\the-real-index"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0112.263] GetFileType (hFile=0x444) returned 0x1 [0112.263] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be400) returned 1 [0112.263] GetFileType (hFile=0x444) returned 0x1 [0112.263] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be628 | out: lpFileSizeHigh=0x3be628*=0x0) returned 0x78 [0112.263] ReadFile (in: hFile=0x444, lpBuffer=0x218eda8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be558, lpOverlapped=0x0 | out: lpBuffer=0x218eda8*, lpNumberOfBytesRead=0x3be558*=0x78, lpOverlapped=0x0) returned 1 [0112.264] CloseHandle (hObject=0x444) returned 1 [0112.285] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\index-dir\\the-real-index", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\index-dir\\the-real-index", lpFilePart=0x0) returned 0x77 [0112.285] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0112.285] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\index-dir\\the-real-index" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\scriptcache\\index-dir\\the-real-index"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0112.287] GetFileType (hFile=0x444) returned 0x1 [0112.287] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be400) returned 1 [0112.287] GetFileType (hFile=0x444) returned 0x1 [0112.287] WriteFile (in: hFile=0x444, lpBuffer=0x2205ff8*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x3be468, lpOverlapped=0x0 | out: lpBuffer=0x2205ff8*, lpNumberOfBytesWritten=0x3be468*=0x80, lpOverlapped=0x0) returned 1 [0112.289] CloseHandle (hObject=0x444) returned 1 [0112.289] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\index-dir\\the-real-index", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\index-dir\\the-real-index", lpFilePart=0x0) returned 0x77 [0112.289] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\index-dir\\the-real-index.xuy", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\index-dir\\the-real-index.xuy", lpFilePart=0x0) returned 0x7b [0112.289] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0112.289] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\index-dir\\the-real-index" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\scriptcache\\index-dir\\the-real-index"), fInfoLevelId=0x0, lpFileInformation=0x3be670 | out: lpFileInformation=0x3be670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d223071, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7d2690b2, ftLastAccessTime.dwHighDateTime=0x1d2d59f, ftLastWriteTime.dwLowDateTime=0x2ec6e557, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x80)) returned 1 [0112.289] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0112.289] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\index-dir\\the-real-index" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\scriptcache\\index-dir\\the-real-index"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\index-dir\\the-real-index.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\scriptcache\\index-dir\\the-real-index.xuy")) returned 1 [0112.290] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0112.290] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage", lpFilePart=0x0) returned 0x53 [0112.291] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage\\", lpFilePart=0x0) returned 0x54 [0112.291] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d7370 [0112.294] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0112.294] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0112.294] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0112.294] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0112.295] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0112.295] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0112.295] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0112.295] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0112.295] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0112.295] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0112.296] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0112.296] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0112.296] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0112.296] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage", lpFilePart=0x0) returned 0x53 [0112.297] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage\\", lpFilePart=0x0) returned 0x54 [0112.297] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d7550 [0112.298] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0112.298] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0112.298] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0112.298] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0112.298] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0112.299] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0112.299] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0112.299] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0112.299] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0112.299] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0112.300] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0112.300] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0112.300] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage\\000003.ldb", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage\\000003.ldb", lpFilePart=0x0) returned 0x5e [0112.300] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0112.300] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage\\000003.ldb" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\session storage\\000003.ldb"), fInfoLevelId=0x0, lpFileInformation=0x220aff0 | out: lpFileInformation=0x220aff0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb75ba77e, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb75ba77e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0xb75c4394, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x1303f)) returned 1 [0112.301] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0112.301] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage\\000003.ldb", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage\\000003.ldb", lpFilePart=0x0) returned 0x5e [0112.301] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0112.301] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage\\000003.ldb" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\session storage\\000003.ldb"), fInfoLevelId=0x0, lpFileInformation=0x220b160 | out: lpFileInformation=0x220b160*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb75ba77e, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb75ba77e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0xb75c4394, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x1303f)) returned 1 [0112.302] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0112.302] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage\\000003.ldb", nBufferLength=0x105, lpBuffer=0x3be120, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage\\000003.ldb", lpFilePart=0x0) returned 0x5e [0112.302] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0112.302] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage\\000003.ldb" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\session storage\\000003.ldb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0112.303] GetFileType (hFile=0x444) returned 0x1 [0112.303] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be570) returned 1 [0112.303] GetFileType (hFile=0x444) returned 0x1 [0112.303] ReadFile (in: hFile=0x444, lpBuffer=0x220d570, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be688, lpOverlapped=0x0 | out: lpBuffer=0x220d570*, lpNumberOfBytesRead=0x3be688*=0x1000, lpOverlapped=0x0) returned 1 [0112.357] CloseHandle (hObject=0x444) returned 1 [0112.357] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage\\000003.ldb", nBufferLength=0x105, lpBuffer=0x3be120, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage\\000003.ldb", lpFilePart=0x0) returned 0x5e [0112.357] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0112.358] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage\\000003.ldb" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\session storage\\000003.ldb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0112.358] GetFileType (hFile=0x444) returned 0x1 [0112.358] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be570) returned 1 [0112.358] GetFileType (hFile=0x444) returned 0x1 [0112.358] WriteFile (in: hFile=0x444, lpBuffer=0x220b2b0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be738, lpOverlapped=0x0 | out: lpBuffer=0x220b2b0*, lpNumberOfBytesWritten=0x3be738*=0x2000, lpOverlapped=0x0) returned 1 [0112.358] CloseHandle (hObject=0x444) returned 1 [0112.359] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage\\000003.ldb", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage\\000003.ldb", lpFilePart=0x0) returned 0x5e [0112.359] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage\\000003.ldb.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage\\000003.ldb.xuy", lpFilePart=0x0) returned 0x62 [0112.359] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0112.386] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage\\000003.ldb" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\session storage\\000003.ldb"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb75ba77e, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb75ba77e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2ed06e71, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x1303f)) returned 1 [0112.386] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0112.386] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage\\000003.ldb" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\session storage\\000003.ldb"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage\\000003.ldb.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\session storage\\000003.ldb.xuy")) returned 1 [0112.388] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage\\000004.log", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage\\000004.log", lpFilePart=0x0) returned 0x5e [0112.388] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0112.388] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage\\000004.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\session storage\\000004.log"), fInfoLevelId=0x0, lpFileInformation=0x22899c0 | out: lpFileInformation=0x22899c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9af58bbb, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x9af58bbb, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7d53ded1, ftLastWriteTime.dwHighDateTime=0x1d2d59f, nFileSizeHigh=0x0, nFileSizeLow=0xb08)) returned 1 [0112.388] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0112.388] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage\\000004.log", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage\\000004.log", lpFilePart=0x0) returned 0x5e [0112.388] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0112.388] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage\\000004.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\session storage\\000004.log"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0112.388] GetFileType (hFile=0x444) returned 0x1 [0112.388] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0112.388] GetFileType (hFile=0x444) returned 0x1 [0112.388] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be708 | out: lpFileSizeHigh=0x3be708*=0x0) returned 0xb08 [0112.389] ReadFile (in: hFile=0x444, lpBuffer=0x228a7c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be638, lpOverlapped=0x0 | out: lpBuffer=0x228a7c0*, lpNumberOfBytesRead=0x3be638*=0xb08, lpOverlapped=0x0) returned 1 [0112.402] CloseHandle (hObject=0x444) returned 1 [0112.416] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage\\000004.log", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage\\000004.log", lpFilePart=0x0) returned 0x5e [0112.416] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0112.416] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage\\000004.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\session storage\\000004.log"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0112.417] GetFileType (hFile=0x444) returned 0x1 [0112.417] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0112.417] GetFileType (hFile=0x444) returned 0x1 [0112.417] WriteFile (in: hFile=0x444, lpBuffer=0x2304f10*, nNumberOfBytesToWrite=0xb10, lpNumberOfBytesWritten=0x3be548, lpOverlapped=0x0 | out: lpBuffer=0x2304f10*, lpNumberOfBytesWritten=0x3be548*=0xb10, lpOverlapped=0x0) returned 1 [0112.418] CloseHandle (hObject=0x444) returned 1 [0112.418] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage\\000004.log", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage\\000004.log", lpFilePart=0x0) returned 0x5e [0112.418] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage\\000004.log.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage\\000004.log.xuy", lpFilePart=0x0) returned 0x62 [0112.418] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0112.418] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage\\000004.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\session storage\\000004.log"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9af58bbb, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x9af58bbb, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2ed9f7ad, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xb10)) returned 1 [0112.418] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0112.419] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage\\000004.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\session storage\\000004.log"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage\\000004.log.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\session storage\\000004.log.xuy")) returned 1 [0112.419] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage\\CURRENT", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage\\CURRENT", lpFilePart=0x0) returned 0x5b [0112.419] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0112.420] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage\\CURRENT" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\session storage\\current"), fInfoLevelId=0x0, lpFileInformation=0x23061e0 | out: lpFileInformation=0x23061e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80063ae2, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x80063ae2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x80063ae2, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0112.420] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0112.420] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage\\CURRENT", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage\\CURRENT", lpFilePart=0x0) returned 0x5b [0112.420] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0112.420] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage\\CURRENT" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\session storage\\current"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0112.420] GetFileType (hFile=0x444) returned 0x1 [0112.420] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0112.420] GetFileType (hFile=0x444) returned 0x1 [0112.420] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be708 | out: lpFileSizeHigh=0x3be708*=0x0) returned 0x10 [0112.420] ReadFile (in: hFile=0x444, lpBuffer=0x23064c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be638, lpOverlapped=0x0 | out: lpBuffer=0x23064c8*, lpNumberOfBytesRead=0x3be638*=0x10, lpOverlapped=0x0) returned 1 [0112.421] CloseHandle (hObject=0x444) returned 1 [0112.464] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage\\CURRENT", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage\\CURRENT", lpFilePart=0x0) returned 0x5b [0112.464] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0112.464] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage\\CURRENT" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\session storage\\current"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0112.465] GetFileType (hFile=0x444) returned 0x1 [0112.465] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0112.465] GetFileType (hFile=0x444) returned 0x1 [0112.465] WriteFile (in: hFile=0x444, lpBuffer=0x217d140*, nNumberOfBytesToWrite=0x20, lpNumberOfBytesWritten=0x3be548, lpOverlapped=0x0 | out: lpBuffer=0x217d140*, lpNumberOfBytesWritten=0x3be548*=0x20, lpOverlapped=0x0) returned 1 [0112.466] CloseHandle (hObject=0x444) returned 1 [0112.466] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage\\CURRENT", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage\\CURRENT", lpFilePart=0x0) returned 0x5b [0112.466] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage\\CURRENT.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage\\CURRENT.xuy", lpFilePart=0x0) returned 0x5f [0112.466] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0112.467] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage\\CURRENT" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\session storage\\current"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80063ae2, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x80063ae2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2ee11e3b, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x20)) returned 1 [0112.467] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0112.467] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage\\CURRENT" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\session storage\\current"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage\\CURRENT.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\session storage\\current.xuy")) returned 1 [0112.468] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage\\LOCK", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage\\LOCK", lpFilePart=0x0) returned 0x58 [0112.468] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0112.468] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage\\LOCK" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\session storage\\lock"), fInfoLevelId=0x0, lpFileInformation=0x217e3f8 | out: lpFileInformation=0x217e3f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80063ae2, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x80063ae2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x80063ae2, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0112.521] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0112.521] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage\\LOCK", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage\\LOCK", lpFilePart=0x0) returned 0x58 [0112.521] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0112.521] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage\\LOCK" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\session storage\\lock"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0112.521] GetFileType (hFile=0x444) returned 0x1 [0112.521] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0112.521] GetFileType (hFile=0x444) returned 0x1 [0112.521] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be708 | out: lpFileSizeHigh=0x3be708*=0x0) returned 0x0 [0112.521] CloseHandle (hObject=0x444) returned 1 [0112.532] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage\\LOCK", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage\\LOCK", lpFilePart=0x0) returned 0x58 [0112.532] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0112.532] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage\\LOCK" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\session storage\\lock"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0112.533] GetFileType (hFile=0x444) returned 0x1 [0112.533] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0112.533] GetFileType (hFile=0x444) returned 0x1 [0112.533] WriteFile (in: hFile=0x444, lpBuffer=0x21f47d0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x3be548, lpOverlapped=0x0 | out: lpBuffer=0x21f47d0*, lpNumberOfBytesWritten=0x3be548*=0x10, lpOverlapped=0x0) returned 1 [0112.534] CloseHandle (hObject=0x444) returned 1 [0112.534] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage\\LOCK", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage\\LOCK", lpFilePart=0x0) returned 0x58 [0112.534] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage\\LOCK.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage\\LOCK.xuy", lpFilePart=0x0) returned 0x5c [0112.534] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0112.534] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage\\LOCK" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\session storage\\lock"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80063ae2, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x80063ae2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2eed0a61, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0112.534] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0112.534] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage\\LOCK" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\session storage\\lock"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage\\LOCK.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\session storage\\lock.xuy")) returned 1 [0112.535] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage\\LOG", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage\\LOG", lpFilePart=0x0) returned 0x57 [0112.535] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0112.535] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage\\LOG" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\session storage\\log"), fInfoLevelId=0x0, lpFileInformation=0x21f5a88 | out: lpFileInformation=0x21f5a88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80063ae2, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x761ae877, ftLastAccessTime.dwHighDateTime=0x1d2d59f, ftLastWriteTime.dwLowDateTime=0x778372ca, ftLastWriteTime.dwHighDateTime=0x1d2d59f, nFileSizeHigh=0x0, nFileSizeLow=0x14e)) returned 1 [0112.535] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0112.535] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage\\LOG", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage\\LOG", lpFilePart=0x0) returned 0x57 [0112.535] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0112.535] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage\\LOG" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\session storage\\log"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0112.535] GetFileType (hFile=0x444) returned 0x1 [0112.535] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0112.535] GetFileType (hFile=0x444) returned 0x1 [0112.535] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be708 | out: lpFileSizeHigh=0x3be708*=0x0) returned 0x14e [0112.535] ReadFile (in: hFile=0x444, lpBuffer=0x21f5e90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be638, lpOverlapped=0x0 | out: lpBuffer=0x21f5e90*, lpNumberOfBytesRead=0x3be638*=0x14e, lpOverlapped=0x0) returned 1 [0112.536] CloseHandle (hObject=0x444) returned 1 [0112.546] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage\\LOG", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage\\LOG", lpFilePart=0x0) returned 0x57 [0112.546] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0112.547] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage\\LOG" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\session storage\\log"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0112.548] GetFileType (hFile=0x444) returned 0x1 [0112.548] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0112.548] GetFileType (hFile=0x444) returned 0x1 [0112.548] WriteFile (in: hFile=0x444, lpBuffer=0x226d500*, nNumberOfBytesToWrite=0x150, lpNumberOfBytesWritten=0x3be548, lpOverlapped=0x0 | out: lpBuffer=0x226d500*, lpNumberOfBytesWritten=0x3be548*=0x150, lpOverlapped=0x0) returned 1 [0112.549] CloseHandle (hObject=0x444) returned 1 [0112.549] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage\\LOG", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage\\LOG", lpFilePart=0x0) returned 0x57 [0112.549] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage\\LOG.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage\\LOG.xuy", lpFilePart=0x0) returned 0x5b [0112.549] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0112.549] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage\\LOG" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\session storage\\log"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80063ae2, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x761ae877, ftLastAccessTime.dwHighDateTime=0x1d2d59f, ftLastWriteTime.dwLowDateTime=0x2eef6ccd, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x150)) returned 1 [0112.549] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0112.549] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage\\LOG" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\session storage\\log"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage\\LOG.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\session storage\\log.xuy")) returned 1 [0112.550] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage\\LOG.old", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage\\LOG.old", lpFilePart=0x0) returned 0x5b [0112.550] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0112.550] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage\\LOG.old" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\session storage\\log.old"), fInfoLevelId=0x0, lpFileInformation=0x226e7c8 | out: lpFileInformation=0x226e7c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80063ae2, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb75b0b9a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0xb99c4511, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x24e)) returned 1 [0112.550] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0112.550] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage\\LOG.old", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage\\LOG.old", lpFilePart=0x0) returned 0x5b [0112.550] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0112.550] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage\\LOG.old" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\session storage\\log.old"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0112.550] GetFileType (hFile=0x444) returned 0x1 [0112.550] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0112.550] GetFileType (hFile=0x444) returned 0x1 [0112.550] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be708 | out: lpFileSizeHigh=0x3be708*=0x0) returned 0x24e [0112.550] ReadFile (in: hFile=0x444, lpBuffer=0x226ecf0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be638, lpOverlapped=0x0 | out: lpBuffer=0x226ecf0*, lpNumberOfBytesRead=0x3be638*=0x24e, lpOverlapped=0x0) returned 1 [0112.551] CloseHandle (hObject=0x444) returned 1 [0112.561] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage\\LOG.old", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage\\LOG.old", lpFilePart=0x0) returned 0x5b [0112.561] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0112.561] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage\\LOG.old" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\session storage\\log.old"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0112.584] GetFileType (hFile=0x444) returned 0x1 [0112.584] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0112.584] GetFileType (hFile=0x444) returned 0x1 [0112.584] WriteFile (in: hFile=0x444, lpBuffer=0x22e6870*, nNumberOfBytesToWrite=0x250, lpNumberOfBytesWritten=0x3be548, lpOverlapped=0x0 | out: lpBuffer=0x22e6870*, lpNumberOfBytesWritten=0x3be548*=0x250, lpOverlapped=0x0) returned 1 [0112.585] CloseHandle (hObject=0x444) returned 1 [0112.585] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage\\LOG.old", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage\\LOG.old", lpFilePart=0x0) returned 0x5b [0112.585] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage\\LOG.old.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage\\LOG.old.xuy", lpFilePart=0x0) returned 0x5f [0112.585] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0112.585] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage\\LOG.old" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\session storage\\log.old"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80063ae2, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb75b0b9a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2ef43050, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x250)) returned 1 [0112.585] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0112.585] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage\\LOG.old" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\session storage\\log.old"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage\\LOG.old.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\session storage\\log.old.xuy")) returned 1 [0112.586] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage\\MANIFEST-000001", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage\\MANIFEST-000001", lpFilePart=0x0) returned 0x63 [0112.586] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0112.586] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage\\MANIFEST-000001" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\session storage\\manifest-000001"), fInfoLevelId=0x0, lpFileInformation=0x22e7b28 | out: lpFileInformation=0x22e7b28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80063ae2, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x80063ae2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0xb763e4fb, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x61)) returned 1 [0112.587] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0112.587] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage\\MANIFEST-000001", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage\\MANIFEST-000001", lpFilePart=0x0) returned 0x63 [0112.587] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0112.587] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage\\MANIFEST-000001" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\session storage\\manifest-000001"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0112.587] GetFileType (hFile=0x444) returned 0x1 [0112.587] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0112.587] GetFileType (hFile=0x444) returned 0x1 [0112.587] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be708 | out: lpFileSizeHigh=0x3be708*=0x0) returned 0x61 [0112.587] ReadFile (in: hFile=0x444, lpBuffer=0x22e7ea8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be638, lpOverlapped=0x0 | out: lpBuffer=0x22e7ea8*, lpNumberOfBytesRead=0x3be638*=0x61, lpOverlapped=0x0) returned 1 [0112.588] CloseHandle (hObject=0x444) returned 1 [0112.598] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage\\MANIFEST-000001", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage\\MANIFEST-000001", lpFilePart=0x0) returned 0x63 [0112.598] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0112.598] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage\\MANIFEST-000001" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\session storage\\manifest-000001"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0112.615] GetFileType (hFile=0x444) returned 0x1 [0112.615] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0112.615] GetFileType (hFile=0x444) returned 0x1 [0112.615] WriteFile (in: hFile=0x444, lpBuffer=0x235f0b8*, nNumberOfBytesToWrite=0x70, lpNumberOfBytesWritten=0x3be548, lpOverlapped=0x0 | out: lpBuffer=0x235f0b8*, lpNumberOfBytesWritten=0x3be548*=0x70, lpOverlapped=0x0) returned 1 [0112.616] CloseHandle (hObject=0x444) returned 1 [0112.616] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage\\MANIFEST-000001", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage\\MANIFEST-000001", lpFilePart=0x0) returned 0x63 [0112.616] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage\\MANIFEST-000001.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage\\MANIFEST-000001.xuy", lpFilePart=0x0) returned 0x67 [0112.616] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0112.616] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage\\MANIFEST-000001" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\session storage\\manifest-000001"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80063ae2, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x80063ae2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2ef8f5c4, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x70)) returned 1 [0112.616] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0112.617] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage\\MANIFEST-000001" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\session storage\\manifest-000001"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage\\MANIFEST-000001.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\session storage\\manifest-000001.xuy")) returned 1 [0112.617] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0112.617] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings", lpFilePart=0x0) returned 0x5b [0112.618] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\", lpFilePart=0x0) returned 0x5c [0112.618] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d7cd0 [0112.618] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0112.618] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0112.618] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0112.618] FindClose (in: hFindFile=0x5d7cd0 | out: hFindFile=0x5d7cd0) returned 1 [0112.618] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0112.618] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0112.618] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0112.618] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings", lpFilePart=0x0) returned 0x5b [0112.618] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\", lpFilePart=0x0) returned 0x5c [0112.618] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d7fd0 [0112.619] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0112.619] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0112.619] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0112.619] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0112.619] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0112.619] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0112.619] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0112.619] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm", lpFilePart=0x0) returned 0x7c [0112.619] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\", lpFilePart=0x0) returned 0x7d [0112.623] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d7df0 [0112.625] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0112.625] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0112.625] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0112.625] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0112.625] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0112.625] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0112.625] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0112.625] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0112.625] FindClose (in: hFindFile=0x5d7df0 | out: hFindFile=0x5d7df0) returned 1 [0112.626] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0112.626] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0112.626] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0112.626] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm", lpFilePart=0x0) returned 0x7c [0112.626] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\", lpFilePart=0x0) returned 0x7d [0112.626] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d7370 [0112.627] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0112.627] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0112.627] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0112.627] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0112.628] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0112.628] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0112.628] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0112.628] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0112.628] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0112.629] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0112.629] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0112.629] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\000003.log", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\000003.log", lpFilePart=0x0) returned 0x87 [0112.629] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0112.629] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\000003.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\000003.log"), fInfoLevelId=0x0, lpFileInformation=0x2166a50 | out: lpFileInformation=0x2166a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c4dc615, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7c4dc615, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7c4dc615, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0112.630] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0112.630] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\000003.log", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\000003.log", lpFilePart=0x0) returned 0x87 [0112.630] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0112.630] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\000003.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\000003.log"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0112.630] GetFileType (hFile=0x444) returned 0x1 [0112.630] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0112.630] GetFileType (hFile=0x444) returned 0x1 [0112.630] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x0 [0112.630] CloseHandle (hObject=0x444) returned 1 [0112.686] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\000003.log", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\000003.log", lpFilePart=0x0) returned 0x87 [0112.686] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0112.686] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\000003.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\000003.log"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0112.688] GetFileType (hFile=0x444) returned 0x1 [0112.688] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0112.688] GetFileType (hFile=0x444) returned 0x1 [0112.688] WriteFile (in: hFile=0x444, lpBuffer=0x21dcf48*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x21dcf48*, lpNumberOfBytesWritten=0x3be4d8*=0x10, lpOverlapped=0x0) returned 1 [0112.689] CloseHandle (hObject=0x444) returned 1 [0112.689] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\000003.log", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\000003.log", lpFilePart=0x0) returned 0x87 [0112.689] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\000003.log.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\000003.log.xuy", lpFilePart=0x0) returned 0x8b [0112.689] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0112.689] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\000003.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\000003.log"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c4dc615, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7c4dc615, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2f04e12c, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0112.689] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0112.689] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\000003.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\000003.log"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\000003.log.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\000003.log.xuy")) returned 1 [0112.691] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\CURRENT", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\CURRENT", lpFilePart=0x0) returned 0x84 [0112.691] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0112.691] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\CURRENT" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\current"), fInfoLevelId=0x0, lpFileInformation=0x21de308 | out: lpFileInformation=0x21de308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c46e821, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7c46e821, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7c471834, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0112.691] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0112.691] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\CURRENT", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\CURRENT", lpFilePart=0x0) returned 0x84 [0112.691] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0112.691] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\CURRENT" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\current"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0112.691] GetFileType (hFile=0x444) returned 0x1 [0112.691] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0112.691] GetFileType (hFile=0x444) returned 0x1 [0112.691] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x10 [0112.691] ReadFile (in: hFile=0x444, lpBuffer=0x21de6a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x21de6a0*, lpNumberOfBytesRead=0x3be5c8*=0x10, lpOverlapped=0x0) returned 1 [0112.692] CloseHandle (hObject=0x444) returned 1 [0112.702] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\CURRENT", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\CURRENT", lpFilePart=0x0) returned 0x84 [0112.702] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0112.702] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\CURRENT" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\current"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0112.715] GetFileType (hFile=0x444) returned 0x1 [0112.715] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0112.715] GetFileType (hFile=0x444) returned 0x1 [0112.715] WriteFile (in: hFile=0x444, lpBuffer=0x2255848*, nNumberOfBytesToWrite=0x20, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x2255848*, lpNumberOfBytesWritten=0x3be4d8*=0x20, lpOverlapped=0x0) returned 1 [0112.716] CloseHandle (hObject=0x444) returned 1 [0112.716] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\CURRENT", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\CURRENT", lpFilePart=0x0) returned 0x84 [0112.716] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\CURRENT.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\CURRENT.xuy", lpFilePart=0x0) returned 0x88 [0112.716] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0112.716] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\CURRENT" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\current"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c46e821, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7c46e821, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2f07438b, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x20)) returned 1 [0112.717] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0112.717] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\CURRENT" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\current"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\CURRENT.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\current.xuy")) returned 1 [0112.718] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\LOCK", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\LOCK", lpFilePart=0x0) returned 0x81 [0112.718] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0112.718] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\LOCK" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\lock"), fInfoLevelId=0x0, lpFileInformation=0x2256c08 | out: lpFileInformation=0x2256c08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c46c117, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7c46c117, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7c46c117, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0112.718] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0112.718] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\LOCK", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\LOCK", lpFilePart=0x0) returned 0x81 [0112.718] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0112.718] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\LOCK" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\lock"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0112.718] GetFileType (hFile=0x444) returned 0x1 [0112.718] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0112.718] GetFileType (hFile=0x444) returned 0x1 [0112.718] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x0 [0112.718] CloseHandle (hObject=0x444) returned 1 [0112.730] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\LOCK", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\LOCK", lpFilePart=0x0) returned 0x81 [0112.730] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0112.730] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\LOCK" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\lock"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0112.731] GetFileType (hFile=0x444) returned 0x1 [0112.731] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0112.731] GetFileType (hFile=0x444) returned 0x1 [0112.731] WriteFile (in: hFile=0x444, lpBuffer=0x22cd0d0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x22cd0d0*, lpNumberOfBytesWritten=0x3be4d8*=0x10, lpOverlapped=0x0) returned 1 [0112.732] CloseHandle (hObject=0x444) returned 1 [0112.732] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\LOCK", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\LOCK", lpFilePart=0x0) returned 0x81 [0112.732] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\LOCK.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\LOCK.xuy", lpFilePart=0x0) returned 0x85 [0112.732] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0112.732] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\LOCK" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\lock"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c46c117, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7c46c117, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2f09a672, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0112.732] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0112.732] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\LOCK" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\lock"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\LOCK.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\lock.xuy")) returned 1 [0112.733] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\LOG", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\LOG", lpFilePart=0x0) returned 0x80 [0112.733] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0112.733] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\LOG" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\log"), fInfoLevelId=0x0, lpFileInformation=0x22ce478 | out: lpFileInformation=0x22ce478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c46c117, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7619d70a, ftLastAccessTime.dwHighDateTime=0x1d2d59f, ftLastWriteTime.dwLowDateTime=0x778372ca, ftLastWriteTime.dwHighDateTime=0x1d2d59f, nFileSizeHigh=0x0, nFileSizeLow=0x1a0)) returned 1 [0112.733] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0112.733] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\LOG", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\LOG", lpFilePart=0x0) returned 0x80 [0112.733] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0112.733] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\LOG" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\log"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0112.734] GetFileType (hFile=0x444) returned 0x1 [0112.734] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0112.734] GetFileType (hFile=0x444) returned 0x1 [0112.734] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x1a0 [0112.734] ReadFile (in: hFile=0x444, lpBuffer=0x22ce980, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x22ce980*, lpNumberOfBytesRead=0x3be5c8*=0x1a0, lpOverlapped=0x0) returned 1 [0112.735] CloseHandle (hObject=0x444) returned 1 [0112.745] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\LOG", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\LOG", lpFilePart=0x0) returned 0x80 [0112.745] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0112.745] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\LOG" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\log"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0112.747] GetFileType (hFile=0x444) returned 0x1 [0112.747] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0112.747] GetFileType (hFile=0x444) returned 0x1 [0112.747] WriteFile (in: hFile=0x444, lpBuffer=0x2346230*, nNumberOfBytesToWrite=0x1b0, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x2346230*, lpNumberOfBytesWritten=0x3be4d8*=0x1b0, lpOverlapped=0x0) returned 1 [0112.748] CloseHandle (hObject=0x444) returned 1 [0112.749] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\LOG", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\LOG", lpFilePart=0x0) returned 0x80 [0112.749] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\LOG.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\LOG.xuy", lpFilePart=0x0) returned 0x84 [0112.749] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0112.749] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\LOG" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\log"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c46c117, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7619d70a, ftLastAccessTime.dwHighDateTime=0x1d2d59f, ftLastWriteTime.dwLowDateTime=0x2f0c0887, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x1b0)) returned 1 [0112.749] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0112.749] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\LOG" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\log"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\LOG.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\log.xuy")) returned 1 [0112.822] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\LOG.old", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\LOG.old", lpFilePart=0x0) returned 0x84 [0112.822] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0112.822] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\LOG.old" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\log.old"), fInfoLevelId=0x0, lpFileInformation=0x2347600 | out: lpFileInformation=0x2347600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c46c117, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xbfef1e11, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0xc0334ae6, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x1a0)) returned 1 [0112.823] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0112.823] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\LOG.old", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\LOG.old", lpFilePart=0x0) returned 0x84 [0112.823] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0112.823] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\LOG.old" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\log.old"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0112.823] GetFileType (hFile=0x444) returned 0x1 [0112.823] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0112.823] GetFileType (hFile=0x444) returned 0x1 [0112.823] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x1a0 [0112.823] ReadFile (in: hFile=0x444, lpBuffer=0x2347b28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x2347b28*, lpNumberOfBytesRead=0x3be5c8*=0x1a0, lpOverlapped=0x0) returned 1 [0112.824] CloseHandle (hObject=0x444) returned 1 [0112.894] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\LOG.old", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\LOG.old", lpFilePart=0x0) returned 0x84 [0112.894] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0112.894] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\LOG.old" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\log.old"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0112.896] GetFileType (hFile=0x444) returned 0x1 [0112.896] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0112.896] GetFileType (hFile=0x444) returned 0x1 [0112.896] WriteFile (in: hFile=0x444, lpBuffer=0x21bfe28*, nNumberOfBytesToWrite=0x1b0, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x21bfe28*, lpNumberOfBytesWritten=0x3be4d8*=0x1b0, lpOverlapped=0x0) returned 1 [0112.897] CloseHandle (hObject=0x444) returned 1 [0112.897] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\LOG.old", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\LOG.old", lpFilePart=0x0) returned 0x84 [0112.897] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\LOG.old.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\LOG.old.xuy", lpFilePart=0x0) returned 0x88 [0112.897] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0112.897] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\LOG.old" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\log.old"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c46c117, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xbfef1e11, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2f23e00b, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x1b0)) returned 1 [0112.897] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0112.897] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\LOG.old" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\log.old"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\LOG.old.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\log.old.xuy")) returned 1 [0112.898] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\MANIFEST-000001", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\MANIFEST-000001", lpFilePart=0x0) returned 0x8c [0112.898] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0112.898] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\MANIFEST-000001" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\manifest-000001"), fInfoLevelId=0x0, lpFileInformation=0x21c11e8 | out: lpFileInformation=0x21c11e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c46e821, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7c46e821, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7c46e821, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x29)) returned 1 [0112.898] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0112.898] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\MANIFEST-000001", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\MANIFEST-000001", lpFilePart=0x0) returned 0x8c [0112.898] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0112.898] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\MANIFEST-000001" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\manifest-000001"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0112.898] GetFileType (hFile=0x444) returned 0x1 [0112.898] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0112.898] GetFileType (hFile=0x444) returned 0x1 [0112.898] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x29 [0112.898] ReadFile (in: hFile=0x444, lpBuffer=0x21c15e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x21c15e0*, lpNumberOfBytesRead=0x3be5c8*=0x29, lpOverlapped=0x0) returned 1 [0112.899] CloseHandle (hObject=0x444) returned 1 [0112.910] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\MANIFEST-000001", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\MANIFEST-000001", lpFilePart=0x0) returned 0x8c [0112.910] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0112.910] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\MANIFEST-000001" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\manifest-000001"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0112.911] GetFileType (hFile=0x444) returned 0x1 [0112.911] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0112.911] GetFileType (hFile=0x444) returned 0x1 [0112.912] WriteFile (in: hFile=0x444, lpBuffer=0x22387c0*, nNumberOfBytesToWrite=0x30, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x22387c0*, lpNumberOfBytesWritten=0x3be4d8*=0x30, lpOverlapped=0x0) returned 1 [0112.912] CloseHandle (hObject=0x444) returned 1 [0112.912] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\MANIFEST-000001", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\MANIFEST-000001", lpFilePart=0x0) returned 0x8c [0112.912] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\MANIFEST-000001.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\MANIFEST-000001.xuy", lpFilePart=0x0) returned 0x90 [0112.912] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0112.913] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\MANIFEST-000001" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\manifest-000001"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c46e821, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7c46e821, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2f264254, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x30)) returned 1 [0112.913] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0112.913] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\MANIFEST-000001" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\manifest-000001"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\MANIFEST-000001.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\manifest-000001.xuy")) returned 1 [0112.914] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0112.914] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications", lpFilePart=0x0) returned 0x54 [0112.914] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\", lpFilePart=0x0) returned 0x55 [0112.914] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d7550 [0112.914] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0112.914] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0112.914] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0112.914] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0112.914] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0112.914] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0112.915] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0112.915] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications", lpFilePart=0x0) returned 0x54 [0112.915] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\", lpFilePart=0x0) returned 0x55 [0112.915] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d7670 [0112.915] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0112.915] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0112.915] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0112.915] FindClose (in: hFindFile=0x5d7670 | out: hFindFile=0x5d7670) returned 1 [0112.915] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0112.915] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0112.915] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0112.916] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake", lpFilePart=0x0) returned 0x7a [0112.916] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\", lpFilePart=0x0) returned 0x7b [0112.916] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d7c70 [0112.916] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0112.916] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0112.916] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0112.916] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0112.916] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0112.917] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0112.917] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0112.917] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0112.917] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake", lpFilePart=0x0) returned 0x7a [0112.917] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\", lpFilePart=0x0) returned 0x7b [0112.917] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d7a30 [0112.917] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0112.917] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0112.917] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0112.917] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0112.918] FindClose (in: hFindFile=0x5d7a30 | out: hFindFile=0x5d7a30) returned 1 [0112.918] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0112.918] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0112.918] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\Google Docs.ico", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\Google Docs.ico", lpFilePart=0x0) returned 0x8a [0112.918] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0112.918] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\Google Docs.ico" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\web applications\\_crx_aohghmighlieiainnegkcijnfilokake\\google docs.ico"), fInfoLevelId=0x0, lpFileInformation=0x223f250 | out: lpFileInformation=0x223f250*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76e1b9d7, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x76e1b9d7, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x76e22f15, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x28df6)) returned 1 [0112.918] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0112.918] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\Google Docs.ico", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\Google Docs.ico", lpFilePart=0x0) returned 0x8a [0112.918] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0112.918] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\Google Docs.ico" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\web applications\\_crx_aohghmighlieiainnegkcijnfilokake\\google docs.ico"), fInfoLevelId=0x0, lpFileInformation=0x223f420 | out: lpFileInformation=0x223f420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76e1b9d7, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x76e1b9d7, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x76e22f15, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x28df6)) returned 1 [0112.918] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0112.918] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\Google Docs.ico", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\Google Docs.ico", lpFilePart=0x0) returned 0x8a [0112.918] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0112.918] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\Google Docs.ico" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\web applications\\_crx_aohghmighlieiainnegkcijnfilokake\\google docs.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0112.919] GetFileType (hFile=0x444) returned 0x1 [0112.919] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0112.919] GetFileType (hFile=0x444) returned 0x1 [0112.919] ReadFile (in: hFile=0x444, lpBuffer=0x22418f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x22418f0*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0112.943] CloseHandle (hObject=0x444) returned 1 [0112.943] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\Google Docs.ico", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\Google Docs.ico", lpFilePart=0x0) returned 0x8a [0112.943] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0112.943] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\Google Docs.ico" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\web applications\\_crx_aohghmighlieiainnegkcijnfilokake\\google docs.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0112.944] GetFileType (hFile=0x444) returned 0x1 [0112.944] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0112.944] GetFileType (hFile=0x444) returned 0x1 [0112.944] WriteFile (in: hFile=0x444, lpBuffer=0x223f5d0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x223f5d0*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0112.944] CloseHandle (hObject=0x444) returned 1 [0112.944] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\Google Docs.ico", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\Google Docs.ico", lpFilePart=0x0) returned 0x8a [0112.944] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\Google Docs.ico.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\Google Docs.ico.xuy", lpFilePart=0x0) returned 0x8e [0112.944] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0112.944] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\Google Docs.ico" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\web applications\\_crx_aohghmighlieiainnegkcijnfilokake\\google docs.ico"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76e1b9d7, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x76e1b9d7, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2f2b065f, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x28df6)) returned 1 [0112.944] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0112.944] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\Google Docs.ico" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\web applications\\_crx_aohghmighlieiainnegkcijnfilokake\\google docs.ico"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\Google Docs.ico.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\web applications\\_crx_aohghmighlieiainnegkcijnfilokake\\google docs.ico.xuy")) returned 1 [0112.945] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\Google Docs.ico.md5", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\Google Docs.ico.md5", lpFilePart=0x0) returned 0x8e [0112.945] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0112.945] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\Google Docs.ico.md5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\web applications\\_crx_aohghmighlieiainnegkcijnfilokake\\google docs.ico.md5"), fInfoLevelId=0x0, lpFileInformation=0x22bdea8 | out: lpFileInformation=0x22bdea8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76e4c74f, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x76e4c74f, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x76e4c74f, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0112.945] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0112.946] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\Google Docs.ico.md5", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\Google Docs.ico.md5", lpFilePart=0x0) returned 0x8e [0112.946] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0112.946] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\Google Docs.ico.md5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\web applications\\_crx_aohghmighlieiainnegkcijnfilokake\\google docs.ico.md5"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0112.946] GetFileType (hFile=0x444) returned 0x1 [0112.946] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0112.946] GetFileType (hFile=0x444) returned 0x1 [0112.946] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x10 [0112.946] ReadFile (in: hFile=0x444, lpBuffer=0x22be290, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x22be290*, lpNumberOfBytesRead=0x3be5c8*=0x10, lpOverlapped=0x0) returned 1 [0112.947] CloseHandle (hObject=0x444) returned 1 [0112.959] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\Google Docs.ico.md5", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\Google Docs.ico.md5", lpFilePart=0x0) returned 0x8e [0112.959] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0112.959] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\Google Docs.ico.md5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\web applications\\_crx_aohghmighlieiainnegkcijnfilokake\\google docs.ico.md5"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0112.961] GetFileType (hFile=0x444) returned 0x1 [0112.961] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0112.961] GetFileType (hFile=0x444) returned 0x1 [0112.961] WriteFile (in: hFile=0x444, lpBuffer=0x2335460*, nNumberOfBytesToWrite=0x20, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x2335460*, lpNumberOfBytesWritten=0x3be4d8*=0x20, lpOverlapped=0x0) returned 1 [0112.961] CloseHandle (hObject=0x444) returned 1 [0112.962] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\Google Docs.ico.md5", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\Google Docs.ico.md5", lpFilePart=0x0) returned 0x8e [0112.962] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\Google Docs.ico.md5.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\Google Docs.ico.md5.xuy", lpFilePart=0x0) returned 0x92 [0112.962] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0112.962] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\Google Docs.ico.md5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\web applications\\_crx_aohghmighlieiainnegkcijnfilokake\\google docs.ico.md5"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76e4c74f, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x76e4c74f, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2f2d696b, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x20)) returned 1 [0112.962] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0112.962] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\Google Docs.ico.md5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\web applications\\_crx_aohghmighlieiainnegkcijnfilokake\\google docs.ico.md5"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\Google Docs.ico.md5.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\web applications\\_crx_aohghmighlieiainnegkcijnfilokake\\google docs.ico.md5.xuy")) returned 1 [0112.963] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0112.963] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist", lpFilePart=0x0) returned 0x47 [0112.963] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist\\", lpFilePart=0x0) returned 0x48 [0112.963] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d81b0 [0112.963] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0112.963] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0112.963] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0112.963] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0112.963] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0112.964] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0112.964] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist", lpFilePart=0x0) returned 0x47 [0112.964] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist\\", lpFilePart=0x0) returned 0x48 [0112.964] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7550 [0112.964] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0112.964] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0112.964] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0112.964] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0112.964] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0112.964] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0112.964] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies", lpFilePart=0x0) returned 0x4c [0112.964] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies\\", lpFilePart=0x0) returned 0x4d [0112.964] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d81b0 [0112.965] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0112.965] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0112.965] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0112.971] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0112.971] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0112.971] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0112.971] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies", lpFilePart=0x0) returned 0x4c [0112.971] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies\\", lpFilePart=0x0) returned 0x4d [0112.971] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d79d0 [0112.971] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0112.971] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0112.971] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0112.971] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0112.971] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0112.971] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0112.972] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials", lpFilePart=0x0) returned 0x48 [0112.972] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials\\", lpFilePart=0x0) returned 0x49 [0112.972] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7eb0 [0112.972] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0112.972] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0112.972] FindClose (in: hFindFile=0x5d7eb0 | out: hFindFile=0x5d7eb0) returned 1 [0112.972] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0112.972] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0112.972] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0112.972] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials", lpFilePart=0x0) returned 0x48 [0112.972] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials\\", lpFilePart=0x0) returned 0x49 [0112.972] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7a90 [0112.972] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0112.973] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0112.973] FindClose (in: hFindFile=0x5d7a90 | out: hFindFile=0x5d7a90) returned 1 [0112.973] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0112.973] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0112.973] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0112.973] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash", lpFilePart=0x0) returned 0x47 [0112.973] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash\\", lpFilePart=0x0) returned 0x48 [0112.973] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7df0 [0112.973] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0112.973] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0112.973] FindClose (in: hFindFile=0x5d7df0 | out: hFindFile=0x5d7df0) returned 1 [0112.973] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0112.973] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0112.974] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0112.974] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash", lpFilePart=0x0) returned 0x47 [0112.974] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash\\", lpFilePart=0x0) returned 0x48 [0112.974] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7c70 [0112.974] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0112.974] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0112.974] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0112.974] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0112.974] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0112.974] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0112.974] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl", lpFilePart=0x0) returned 0x41 [0112.974] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl\\", lpFilePart=0x0) returned 0x42 [0112.974] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7c70 [0112.975] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0112.975] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0112.975] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0112.975] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0112.975] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0112.975] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0112.975] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl", lpFilePart=0x0) returned 0x41 [0112.975] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl\\", lpFilePart=0x0) returned 0x42 [0112.975] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d81b0 [0112.975] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0112.975] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0112.975] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0112.975] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0112.975] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0112.976] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0112.976] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant", lpFilePart=0x0) returned 0x4d [0112.976] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant\\", lpFilePart=0x0) returned 0x4e [0112.976] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7eb0 [0112.976] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0112.976] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0112.976] FindClose (in: hFindFile=0x5d7eb0 | out: hFindFile=0x5d7eb0) returned 1 [0112.976] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0112.976] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0112.976] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0112.976] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant", lpFilePart=0x0) returned 0x4d [0112.976] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant\\", lpFilePart=0x0) returned 0x4e [0112.976] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7d90 [0112.977] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0112.977] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0112.977] FindClose (in: hFindFile=0x5d7d90 | out: hFindFile=0x5d7d90) returned 1 [0112.977] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0112.977] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0112.977] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0112.977] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Subresource Filter", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Subresource Filter", lpFilePart=0x0) returned 0x4e [0112.977] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Subresource Filter\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Subresource Filter\\", lpFilePart=0x0) returned 0x4f [0112.977] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Subresource Filter\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7550 [0112.977] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0112.977] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0112.977] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0112.978] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0112.978] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0112.978] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0112.978] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0112.978] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Subresource Filter", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Subresource Filter", lpFilePart=0x0) returned 0x4e [0112.978] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Subresource Filter\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Subresource Filter\\", lpFilePart=0x0) returned 0x4f [0112.978] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Subresource Filter\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d79d0 [0112.978] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0112.978] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0112.978] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0112.978] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0112.978] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0112.978] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0112.978] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0112.978] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Subresource Filter\\Unindexed Rules", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Subresource Filter\\Unindexed Rules", lpFilePart=0x0) returned 0x5e [0112.979] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Subresource Filter\\Unindexed Rules\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Subresource Filter\\Unindexed Rules\\", lpFilePart=0x0) returned 0x5f [0112.979] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Subresource Filter\\Unindexed Rules\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d7370 [0112.979] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0112.979] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0112.979] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0112.979] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0112.979] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0112.979] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0112.979] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Subresource Filter\\Unindexed Rules", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Subresource Filter\\Unindexed Rules", lpFilePart=0x0) returned 0x5e [0112.979] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Subresource Filter\\Unindexed Rules\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Subresource Filter\\Unindexed Rules\\", lpFilePart=0x0) returned 0x5f [0112.979] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Subresource Filter\\Unindexed Rules\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d78b0 [0112.979] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0112.980] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0112.980] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0112.980] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0112.980] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0112.980] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0112.980] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter", lpFilePart=0x0) returned 0x46 [0112.980] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter\\", lpFilePart=0x0) returned 0x47 [0112.980] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7fd0 [0112.980] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0112.980] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0112.980] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0112.980] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0112.980] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0112.980] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0112.980] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter", lpFilePart=0x0) returned 0x46 [0112.980] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter\\", lpFilePart=0x0) returned 0x47 [0112.981] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d81b0 [0112.981] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0112.981] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0112.981] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0112.981] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0112.981] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0112.981] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0112.981] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm", lpFilePart=0x0) returned 0x47 [0112.981] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm\\", lpFilePart=0x0) returned 0x48 [0112.981] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d78b0 [0112.981] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0112.981] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0112.982] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0112.982] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0112.982] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0112.982] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0112.982] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm", lpFilePart=0x0) returned 0x47 [0112.982] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm\\", lpFilePart=0x0) returned 0x48 [0112.982] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7a30 [0112.982] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0112.982] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0112.982] FindClose (in: hFindFile=0x5d7a30 | out: hFindFile=0x5d7a30) returned 1 [0112.982] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0112.982] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0112.982] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0112.983] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\CrashReports", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\CrashReports", lpFilePart=0x0) returned 0x37 [0112.983] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\CrashReports\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\CrashReports\\", lpFilePart=0x0) returned 0x38 [0112.983] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\CrashReports\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d81b0 [0112.983] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0112.983] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0112.983] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0112.983] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0112.983] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0112.983] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0112.983] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\CrashReports", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\CrashReports", lpFilePart=0x0) returned 0x37 [0112.983] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\CrashReports\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\CrashReports\\", lpFilePart=0x0) returned 0x38 [0112.983] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\CrashReports\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d7550 [0112.984] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0112.984] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0112.985] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0112.985] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0112.985] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0112.985] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0112.985] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\History", nBufferLength=0x105, lpBuffer=0x3be3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\History", lpFilePart=0x0) returned 0x2b [0112.985] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\History\\", nBufferLength=0x105, lpBuffer=0x3be370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\History\\", lpFilePart=0x0) returned 0x2c [0112.985] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\History\\*", lpFindFileData=0x3be580 | out: lpFindFileData=0x3be580) returned 0xffffffffffffffff [0112.985] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be810) returned 1 [0112.987] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0112.987] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft", nBufferLength=0x105, lpBuffer=0x3be3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft", lpFilePart=0x0) returned 0x2d [0112.987] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\", nBufferLength=0x105, lpBuffer=0x3be370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\", lpFilePart=0x0) returned 0x2e [0112.987] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\*", lpFindFileData=0x3be580 | out: lpFindFileData=0x3be580) returned 0x5d78b0 [0112.987] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0112.987] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0112.987] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0112.988] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0112.988] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0112.988] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0112.988] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0112.988] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0112.988] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0112.988] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0112.988] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0112.989] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0112.989] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0112.989] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0112.989] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0112.989] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0112.989] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0112.989] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0112.989] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0112.990] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0112.990] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0112.990] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0112.990] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0112.990] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0112.990] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0112.990] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0112.990] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 0 [0112.991] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0112.991] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0112.991] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7f0) returned 1 [0112.991] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0112.991] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft", nBufferLength=0x105, lpBuffer=0x3be3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft", lpFilePart=0x0) returned 0x2d [0112.991] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\", nBufferLength=0x105, lpBuffer=0x3be370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\", lpFilePart=0x0) returned 0x2e [0112.991] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\*", lpFindFileData=0x3be580 | out: lpFindFileData=0x3be580) returned 0x5d7c70 [0112.991] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0112.991] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0112.991] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0112.991] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0112.991] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0112.992] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0112.992] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0112.992] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0112.992] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0112.992] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0112.992] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0112.992] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0112.992] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0112.992] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0112.992] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0112.993] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0112.993] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0112.993] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0112.993] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0112.993] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0112.993] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0112.993] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0112.993] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0112.993] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0112.993] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0112.993] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0112.994] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 0 [0112.994] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0112.994] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0112.994] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7f0) returned 1 [0112.994] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0112.994] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v2.0", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v2.0", lpFilePart=0x0) returned 0x36 [0112.994] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v2.0\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v2.0\\", lpFilePart=0x0) returned 0x37 [0112.994] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v2.0\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d7370 [0112.994] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0112.994] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0112.994] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0112.995] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0112.995] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0112.995] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0112.995] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0112.995] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v2.0", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v2.0", lpFilePart=0x0) returned 0x36 [0112.995] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v2.0\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v2.0\\", lpFilePart=0x0) returned 0x37 [0112.995] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v2.0\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d7a30 [0112.995] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0112.995] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0112.995] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0112.995] FindClose (in: hFindFile=0x5d7a30 | out: hFindFile=0x5d7a30) returned 1 [0112.995] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0112.995] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0112.995] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0112.995] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v2.0\\UsageLogs", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v2.0\\UsageLogs", lpFilePart=0x0) returned 0x40 [0112.995] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v2.0\\UsageLogs\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v2.0\\UsageLogs\\", lpFilePart=0x0) returned 0x41 [0112.996] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v2.0\\UsageLogs\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7c70 [0112.996] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0112.996] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0112.996] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0112.996] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0112.996] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0112.996] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0112.996] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0112.996] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v2.0\\UsageLogs", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v2.0\\UsageLogs", lpFilePart=0x0) returned 0x40 [0112.996] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v2.0\\UsageLogs\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v2.0\\UsageLogs\\", lpFilePart=0x0) returned 0x41 [0112.997] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v2.0\\UsageLogs\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d79d0 [0112.997] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0112.997] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0112.997] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0112.997] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0112.997] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0112.997] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0112.997] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v2.0\\UsageLogs\\WINPROJ.EXE.log", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v2.0\\UsageLogs\\WINPROJ.EXE.log", lpFilePart=0x0) returned 0x50 [0112.997] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0112.997] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v2.0\\UsageLogs\\WINPROJ.EXE.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\clr_v2.0\\usagelogs\\winproj.exe.log"), fInfoLevelId=0x0, lpFileInformation=0x2354c98 | out: lpFileInformation=0x2354c98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa175e10b, ftCreationTime.dwHighDateTime=0x1d301cf, ftLastAccessTime.dwLowDateTime=0xa175e10b, ftLastAccessTime.dwHighDateTime=0x1d301cf, ftLastWriteTime.dwLowDateTime=0x71b49354, ftLastWriteTime.dwHighDateTime=0x1d3aaaf, nFileSizeHigh=0x0, nFileSizeLow=0x14)) returned 1 [0112.998] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0112.998] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v2.0\\UsageLogs\\WINPROJ.EXE.log", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v2.0\\UsageLogs\\WINPROJ.EXE.log", lpFilePart=0x0) returned 0x50 [0112.998] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0112.998] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v2.0\\UsageLogs\\WINPROJ.EXE.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\clr_v2.0\\usagelogs\\winproj.exe.log"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0112.998] GetFileType (hFile=0x444) returned 0x1 [0112.998] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0112.998] GetFileType (hFile=0x444) returned 0x1 [0112.998] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0x14 [0112.998] ReadFile (in: hFile=0x444, lpBuffer=0x2354f88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be718, lpOverlapped=0x0 | out: lpBuffer=0x2354f88*, lpNumberOfBytesRead=0x3be718*=0x14, lpOverlapped=0x0) returned 1 [0113.000] CloseHandle (hObject=0x444) returned 1 [0113.040] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v2.0\\UsageLogs\\WINPROJ.EXE.log", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v2.0\\UsageLogs\\WINPROJ.EXE.log", lpFilePart=0x0) returned 0x50 [0113.040] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0113.040] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v2.0\\UsageLogs\\WINPROJ.EXE.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\clr_v2.0\\usagelogs\\winproj.exe.log"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0113.042] GetFileType (hFile=0x444) returned 0x1 [0113.042] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0113.042] GetFileType (hFile=0x444) returned 0x1 [0113.042] WriteFile (in: hFile=0x444, lpBuffer=0x21cc720*, nNumberOfBytesToWrite=0x20, lpNumberOfBytesWritten=0x3be628, lpOverlapped=0x0 | out: lpBuffer=0x21cc720*, lpNumberOfBytesWritten=0x3be628*=0x20, lpOverlapped=0x0) returned 1 [0113.043] CloseHandle (hObject=0x444) returned 1 [0113.043] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v2.0\\UsageLogs\\WINPROJ.EXE.log", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v2.0\\UsageLogs\\WINPROJ.EXE.log", lpFilePart=0x0) returned 0x50 [0113.043] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v2.0\\UsageLogs\\WINPROJ.EXE.log.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v2.0\\UsageLogs\\WINPROJ.EXE.log.xuy", lpFilePart=0x0) returned 0x54 [0113.043] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0113.043] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v2.0\\UsageLogs\\WINPROJ.EXE.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\clr_v2.0\\usagelogs\\winproj.exe.log"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa175e10b, ftCreationTime.dwHighDateTime=0x1d301cf, ftLastAccessTime.dwLowDateTime=0xa175e10b, ftLastAccessTime.dwHighDateTime=0x1d301cf, ftLastWriteTime.dwLowDateTime=0x2f3955b0, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x20)) returned 1 [0113.043] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0113.043] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v2.0\\UsageLogs\\WINPROJ.EXE.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\clr_v2.0\\usagelogs\\winproj.exe.log"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v2.0\\UsageLogs\\WINPROJ.EXE.log.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\clr_v2.0\\usagelogs\\winproj.exe.log.xuy")) returned 1 [0113.044] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0113.044] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0", lpFilePart=0x0) returned 0x36 [0113.044] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0\\", lpFilePart=0x0) returned 0x37 [0113.044] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d78b0 [0113.045] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0113.045] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0113.045] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0113.045] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0113.045] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0113.045] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0113.045] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0113.045] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0113.045] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0", lpFilePart=0x0) returned 0x36 [0113.045] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0\\", lpFilePart=0x0) returned 0x37 [0113.045] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d7370 [0113.046] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0113.046] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0113.046] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0113.046] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0113.046] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0113.046] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0113.046] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0113.046] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0\\ngen.log", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0\\ngen.log", lpFilePart=0x0) returned 0x3f [0113.046] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0113.047] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0\\ngen.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\clr_v4.0\\ngen.log"), fInfoLevelId=0x0, lpFileInformation=0x21cf920 | out: lpFileInformation=0x21cf920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf481c19a, ftCreationTime.dwHighDateTime=0x1d2d40c, ftLastAccessTime.dwLowDateTime=0xf481c19a, ftLastAccessTime.dwHighDateTime=0x1d2d40c, ftLastWriteTime.dwLowDateTime=0xb1e23fe1, ftLastWriteTime.dwHighDateTime=0x1d2fc21, nFileSizeHigh=0x0, nFileSizeLow=0x2f4)) returned 1 [0113.047] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0113.047] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0\\ngen.log", nBufferLength=0x105, lpBuffer=0x3be1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0\\ngen.log", lpFilePart=0x0) returned 0x3f [0113.047] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6c0) returned 1 [0113.047] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0\\ngen.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\clr_v4.0\\ngen.log"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0113.047] GetFileType (hFile=0x444) returned 0x1 [0113.047] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0113.047] GetFileType (hFile=0x444) returned 0x1 [0113.047] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be858 | out: lpFileSizeHigh=0x3be858*=0x0) returned 0x2f4 [0113.047] ReadFile (in: hFile=0x444, lpBuffer=0x21cfe90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be788, lpOverlapped=0x0 | out: lpBuffer=0x21cfe90*, lpNumberOfBytesRead=0x3be788*=0x2f4, lpOverlapped=0x0) returned 1 [0113.051] CloseHandle (hObject=0x444) returned 1 [0113.085] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0\\ngen.log", nBufferLength=0x105, lpBuffer=0x3be1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0\\ngen.log", lpFilePart=0x0) returned 0x3f [0113.085] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6c0) returned 1 [0113.085] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0\\ngen.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\clr_v4.0\\ngen.log"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0113.087] GetFileType (hFile=0x444) returned 0x1 [0113.087] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0113.087] GetFileType (hFile=0x444) returned 0x1 [0113.087] WriteFile (in: hFile=0x444, lpBuffer=0x2247d58*, nNumberOfBytesToWrite=0x300, lpNumberOfBytesWritten=0x3be698, lpOverlapped=0x0 | out: lpBuffer=0x2247d58*, lpNumberOfBytesWritten=0x3be698*=0x300, lpOverlapped=0x0) returned 1 [0113.087] CloseHandle (hObject=0x444) returned 1 [0113.088] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0\\ngen.log", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0\\ngen.log", lpFilePart=0x0) returned 0x3f [0113.088] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0\\ngen.log.xuy", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0\\ngen.log.xuy", lpFilePart=0x0) returned 0x43 [0113.088] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0113.088] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0\\ngen.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\clr_v4.0\\ngen.log"), fInfoLevelId=0x0, lpFileInformation=0x3be8a0 | out: lpFileInformation=0x3be8a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf481c19a, ftCreationTime.dwHighDateTime=0x1d2d40c, ftLastAccessTime.dwLowDateTime=0xf481c19a, ftLastAccessTime.dwHighDateTime=0x1d2d40c, ftLastWriteTime.dwLowDateTime=0x2f408056, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x300)) returned 1 [0113.088] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0113.088] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0\\ngen.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\clr_v4.0\\ngen.log"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0\\ngen.log.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\clr_v4.0\\ngen.log.xuy")) returned 1 [0113.089] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0113.089] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs", lpFilePart=0x0) returned 0x40 [0113.089] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\", lpFilePart=0x0) returned 0x41 [0113.089] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d78b0 [0113.089] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0113.089] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0113.089] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0113.089] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0113.089] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0113.090] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0113.090] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0113.090] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0113.090] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0113.090] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0113.090] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs", lpFilePart=0x0) returned 0x40 [0113.090] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\", lpFilePart=0x0) returned 0x41 [0113.091] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7370 [0113.091] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0113.091] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0113.092] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0113.092] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0113.092] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0113.092] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0113.092] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0113.093] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0113.093] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0113.093] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\mmc.exe.log", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\mmc.exe.log", lpFilePart=0x0) returned 0x4c [0113.093] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0113.093] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\mmc.exe.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\clr_v4.0\\usagelogs\\mmc.exe.log"), fInfoLevelId=0x0, lpFileInformation=0x224bb70 | out: lpFileInformation=0x224bb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3068779, ftCreationTime.dwHighDateTime=0x1d2d432, ftLastAccessTime.dwLowDateTime=0xb3068779, ftLastAccessTime.dwHighDateTime=0x1d2d432, ftLastWriteTime.dwLowDateTime=0xcb804643, ftLastWriteTime.dwHighDateTime=0x1d3aaaf, nFileSizeHigh=0x0, nFileSizeLow=0x91e)) returned 1 [0113.095] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0113.095] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\mmc.exe.log", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\mmc.exe.log", lpFilePart=0x0) returned 0x4c [0113.095] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0113.095] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\mmc.exe.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\clr_v4.0\\usagelogs\\mmc.exe.log"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0113.095] GetFileType (hFile=0x444) returned 0x1 [0113.095] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0113.095] GetFileType (hFile=0x444) returned 0x1 [0113.096] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0x91e [0113.096] ReadFile (in: hFile=0x444, lpBuffer=0x224c748, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be718, lpOverlapped=0x0 | out: lpBuffer=0x224c748*, lpNumberOfBytesRead=0x3be718*=0x91e, lpOverlapped=0x0) returned 1 [0113.097] CloseHandle (hObject=0x444) returned 1 [0113.107] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\mmc.exe.log", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\mmc.exe.log", lpFilePart=0x0) returned 0x4c [0113.107] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0113.107] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\mmc.exe.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\clr_v4.0\\usagelogs\\mmc.exe.log"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0113.108] GetFileType (hFile=0x444) returned 0x1 [0113.108] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0113.108] GetFileType (hFile=0x444) returned 0x1 [0113.108] WriteFile (in: hFile=0x444, lpBuffer=0x22c64c8*, nNumberOfBytesToWrite=0x920, lpNumberOfBytesWritten=0x3be628, lpOverlapped=0x0 | out: lpBuffer=0x22c64c8*, lpNumberOfBytesWritten=0x3be628*=0x920, lpOverlapped=0x0) returned 1 [0113.109] CloseHandle (hObject=0x444) returned 1 [0113.109] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\mmc.exe.log", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\mmc.exe.log", lpFilePart=0x0) returned 0x4c [0113.109] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\mmc.exe.log.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\mmc.exe.log.xuy", lpFilePart=0x0) returned 0x50 [0113.110] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0113.110] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\mmc.exe.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\clr_v4.0\\usagelogs\\mmc.exe.log"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3068779, ftCreationTime.dwHighDateTime=0x1d2d432, ftLastAccessTime.dwLowDateTime=0xb3068779, ftLastAccessTime.dwHighDateTime=0x1d2d432, ftLastWriteTime.dwLowDateTime=0x2f45408c, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x920)) returned 1 [0113.110] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0113.110] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\mmc.exe.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\clr_v4.0\\usagelogs\\mmc.exe.log"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\mmc.exe.log.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\clr_v4.0\\usagelogs\\mmc.exe.log.xuy")) returned 1 [0113.111] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\NGenTask.exe.log", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\NGenTask.exe.log", lpFilePart=0x0) returned 0x51 [0113.111] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0113.111] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\NGenTask.exe.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\clr_v4.0\\usagelogs\\ngentask.exe.log"), fInfoLevelId=0x0, lpFileInformation=0x22c7760 | out: lpFileInformation=0x22c7760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4900fb5, ftCreationTime.dwHighDateTime=0x1d2d40c, ftLastAccessTime.dwLowDateTime=0xed4dd20d, ftLastAccessTime.dwHighDateTime=0x1d2fadb, ftLastWriteTime.dwLowDateTime=0xb1e4a239, ftLastWriteTime.dwHighDateTime=0x1d2fc21, nFileSizeHigh=0x0, nFileSizeLow=0x282)) returned 1 [0113.111] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0113.111] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\NGenTask.exe.log", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\NGenTask.exe.log", lpFilePart=0x0) returned 0x51 [0113.111] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0113.111] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\NGenTask.exe.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\clr_v4.0\\usagelogs\\ngentask.exe.log"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0113.111] GetFileType (hFile=0x444) returned 0x1 [0113.112] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0113.112] GetFileType (hFile=0x444) returned 0x1 [0113.112] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0x282 [0113.112] ReadFile (in: hFile=0x444, lpBuffer=0x22c7cd0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be718, lpOverlapped=0x0 | out: lpBuffer=0x22c7cd0*, lpNumberOfBytesRead=0x3be718*=0x282, lpOverlapped=0x0) returned 1 [0113.115] CloseHandle (hObject=0x444) returned 1 [0113.125] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\NGenTask.exe.log", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\NGenTask.exe.log", lpFilePart=0x0) returned 0x51 [0113.125] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0113.125] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\NGenTask.exe.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\clr_v4.0\\usagelogs\\ngentask.exe.log"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0113.127] GetFileType (hFile=0x444) returned 0x1 [0113.127] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0113.127] GetFileType (hFile=0x444) returned 0x1 [0113.127] WriteFile (in: hFile=0x444, lpBuffer=0x233f9a0*, nNumberOfBytesToWrite=0x290, lpNumberOfBytesWritten=0x3be628, lpOverlapped=0x0 | out: lpBuffer=0x233f9a0*, lpNumberOfBytesWritten=0x3be628*=0x290, lpOverlapped=0x0) returned 1 [0113.128] CloseHandle (hObject=0x444) returned 1 [0113.128] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\NGenTask.exe.log", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\NGenTask.exe.log", lpFilePart=0x0) returned 0x51 [0113.128] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\NGenTask.exe.log.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\NGenTask.exe.log.xuy", lpFilePart=0x0) returned 0x55 [0113.128] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0113.128] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\NGenTask.exe.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\clr_v4.0\\usagelogs\\ngentask.exe.log"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4900fb5, ftCreationTime.dwHighDateTime=0x1d2d40c, ftLastAccessTime.dwLowDateTime=0xed4dd20d, ftLastAccessTime.dwHighDateTime=0x1d2fadb, ftLastWriteTime.dwLowDateTime=0x2f47a306, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x290)) returned 1 [0113.128] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0113.128] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\NGenTask.exe.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\clr_v4.0\\usagelogs\\ngentask.exe.log"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\NGenTask.exe.log.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\clr_v4.0\\usagelogs\\ngentask.exe.log.xuy")) returned 1 [0113.129] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\powershell.exe.log", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\powershell.exe.log", lpFilePart=0x0) returned 0x53 [0113.129] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0113.129] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\powershell.exe.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\clr_v4.0\\usagelogs\\powershell.exe.log"), fInfoLevelId=0x0, lpFileInformation=0x2340c50 | out: lpFileInformation=0x2340c50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f4fa2ed, ftCreationTime.dwHighDateTime=0x1d2fc25, ftLastAccessTime.dwLowDateTime=0x1f4fa2ed, ftLastAccessTime.dwHighDateTime=0x1d2fc25, ftLastWriteTime.dwLowDateTime=0xd09e5e6b, ftLastWriteTime.dwHighDateTime=0x1d41fdc, nFileSizeHigh=0x0, nFileSizeLow=0xea4)) returned 1 [0113.129] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0113.130] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\powershell.exe.log", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\powershell.exe.log", lpFilePart=0x0) returned 0x53 [0113.130] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0113.130] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\powershell.exe.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\clr_v4.0\\usagelogs\\powershell.exe.log"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0113.130] GetFileType (hFile=0x444) returned 0x1 [0113.130] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0113.130] GetFileType (hFile=0x444) returned 0x1 [0113.130] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0xea4 [0113.130] ReadFile (in: hFile=0x444, lpBuffer=0x2341de0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be718, lpOverlapped=0x0 | out: lpBuffer=0x2341de0*, lpNumberOfBytesRead=0x3be718*=0xea4, lpOverlapped=0x0) returned 1 [0113.181] CloseHandle (hObject=0x444) returned 1 [0113.266] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\powershell.exe.log", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\powershell.exe.log", lpFilePart=0x0) returned 0x53 [0113.266] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0113.266] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\powershell.exe.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\clr_v4.0\\usagelogs\\powershell.exe.log"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0113.268] GetFileType (hFile=0x444) returned 0x1 [0113.270] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0113.270] GetFileType (hFile=0x444) returned 0x1 [0113.272] WriteFile (in: hFile=0x444, lpBuffer=0x21be820*, nNumberOfBytesToWrite=0xeb0, lpNumberOfBytesWritten=0x3be628, lpOverlapped=0x0 | out: lpBuffer=0x21be820*, lpNumberOfBytesWritten=0x3be628*=0xeb0, lpOverlapped=0x0) returned 1 [0113.273] CloseHandle (hObject=0x444) returned 1 [0113.274] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\powershell.exe.log", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\powershell.exe.log", lpFilePart=0x0) returned 0x53 [0113.274] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\powershell.exe.log.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\powershell.exe.log.xuy", lpFilePart=0x0) returned 0x57 [0113.274] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0113.274] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\powershell.exe.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\clr_v4.0\\usagelogs\\powershell.exe.log"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f4fa2ed, ftCreationTime.dwHighDateTime=0x1d2fc25, ftLastAccessTime.dwLowDateTime=0x1f4fa2ed, ftLastAccessTime.dwHighDateTime=0x1d2fc25, ftLastWriteTime.dwLowDateTime=0x2f5e5f3b, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xeb0)) returned 1 [0113.274] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0113.274] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\powershell.exe.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\clr_v4.0\\usagelogs\\powershell.exe.log"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\powershell.exe.log.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\clr_v4.0\\usagelogs\\powershell.exe.log.xuy")) returned 1 [0113.275] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\sdiagnhost.exe.log", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\sdiagnhost.exe.log", lpFilePart=0x0) returned 0x53 [0113.276] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0113.276] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\sdiagnhost.exe.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\clr_v4.0\\usagelogs\\sdiagnhost.exe.log"), fInfoLevelId=0x0, lpFileInformation=0x21bfad0 | out: lpFileInformation=0x21bfad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb902ac, ftCreationTime.dwHighDateTime=0x1d2d02b, ftLastAccessTime.dwLowDateTime=0xcb902ac, ftLastAccessTime.dwHighDateTime=0x1d2d02b, ftLastWriteTime.dwLowDateTime=0xaf6927ff, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x155a)) returned 1 [0113.276] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0113.276] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\sdiagnhost.exe.log", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\sdiagnhost.exe.log", lpFilePart=0x0) returned 0x53 [0113.276] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0113.276] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\sdiagnhost.exe.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\clr_v4.0\\usagelogs\\sdiagnhost.exe.log"), fInfoLevelId=0x0, lpFileInformation=0x21bfc38 | out: lpFileInformation=0x21bfc38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb902ac, ftCreationTime.dwHighDateTime=0x1d2d02b, ftLastAccessTime.dwLowDateTime=0xcb902ac, ftLastAccessTime.dwHighDateTime=0x1d2d02b, ftLastWriteTime.dwLowDateTime=0xaf6927ff, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x155a)) returned 1 [0113.276] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0113.276] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\sdiagnhost.exe.log", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\sdiagnhost.exe.log", lpFilePart=0x0) returned 0x53 [0113.276] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0113.276] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\sdiagnhost.exe.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\clr_v4.0\\usagelogs\\sdiagnhost.exe.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0113.277] GetFileType (hFile=0x444) returned 0x1 [0113.277] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0113.277] GetFileType (hFile=0x444) returned 0x1 [0113.277] ReadFile (in: hFile=0x444, lpBuffer=0x21c2038, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x21c2038*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0113.391] CloseHandle (hObject=0x444) returned 1 [0113.392] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\sdiagnhost.exe.log", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\sdiagnhost.exe.log", lpFilePart=0x0) returned 0x53 [0113.392] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0113.392] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\sdiagnhost.exe.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\clr_v4.0\\usagelogs\\sdiagnhost.exe.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0113.392] GetFileType (hFile=0x444) returned 0x1 [0113.392] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0113.392] GetFileType (hFile=0x444) returned 0x1 [0113.392] WriteFile (in: hFile=0x444, lpBuffer=0x21bfd80*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x21bfd80*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0113.392] CloseHandle (hObject=0x444) returned 1 [0113.393] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\sdiagnhost.exe.log", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\sdiagnhost.exe.log", lpFilePart=0x0) returned 0x53 [0113.393] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\sdiagnhost.exe.log.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\sdiagnhost.exe.log.xuy", lpFilePart=0x0) returned 0x57 [0113.393] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0113.393] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\sdiagnhost.exe.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\clr_v4.0\\usagelogs\\sdiagnhost.exe.log"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb902ac, ftCreationTime.dwHighDateTime=0x1d2d02b, ftLastAccessTime.dwLowDateTime=0xcb902ac, ftLastAccessTime.dwHighDateTime=0x1d2d02b, ftLastWriteTime.dwLowDateTime=0x2f6f038a, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0113.393] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0113.393] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\sdiagnhost.exe.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\clr_v4.0\\usagelogs\\sdiagnhost.exe.log"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\sdiagnhost.exe.log.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\clr_v4.0\\usagelogs\\sdiagnhost.exe.log.xuy")) returned 1 [0113.394] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0113.394] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0_32", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0_32", lpFilePart=0x0) returned 0x39 [0113.394] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\", lpFilePart=0x0) returned 0x3a [0113.394] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d7c70 [0113.395] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0113.395] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0113.395] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0113.395] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0113.395] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0113.395] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0113.395] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0113.395] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0113.395] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0_32", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0_32", lpFilePart=0x0) returned 0x39 [0113.395] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\", lpFilePart=0x0) returned 0x3a [0113.396] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d79d0 [0113.396] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0113.396] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0113.396] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0113.396] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0113.396] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0113.396] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0113.396] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0113.396] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\ngen.log", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\ngen.log", lpFilePart=0x0) returned 0x42 [0113.396] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0113.397] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\ngen.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\clr_v4.0_32\\ngen.log"), fInfoLevelId=0x0, lpFileInformation=0x2240408 | out: lpFileInformation=0x2240408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf408296e, ftCreationTime.dwHighDateTime=0x1d2d40c, ftLastAccessTime.dwLowDateTime=0xf408296e, ftLastAccessTime.dwHighDateTime=0x1d2d40c, ftLastWriteTime.dwLowDateTime=0xb166428f, ftLastWriteTime.dwHighDateTime=0x1d2fc21, nFileSizeHigh=0x0, nFileSizeLow=0x2ef)) returned 1 [0113.397] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0113.397] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\ngen.log", nBufferLength=0x105, lpBuffer=0x3be1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\ngen.log", lpFilePart=0x0) returned 0x42 [0113.397] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6c0) returned 1 [0113.397] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\ngen.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\clr_v4.0_32\\ngen.log"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0113.397] GetFileType (hFile=0x444) returned 0x1 [0113.397] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0113.397] GetFileType (hFile=0x444) returned 0x1 [0113.397] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be858 | out: lpFileSizeHigh=0x3be858*=0x0) returned 0x2ef [0113.397] ReadFile (in: hFile=0x444, lpBuffer=0x2240980, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be788, lpOverlapped=0x0 | out: lpBuffer=0x2240980*, lpNumberOfBytesRead=0x3be788*=0x2ef, lpOverlapped=0x0) returned 1 [0113.412] CloseHandle (hObject=0x444) returned 1 [0113.422] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\ngen.log", nBufferLength=0x105, lpBuffer=0x3be1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\ngen.log", lpFilePart=0x0) returned 0x42 [0113.422] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6c0) returned 1 [0113.422] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\ngen.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\clr_v4.0_32\\ngen.log"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0113.423] GetFileType (hFile=0x444) returned 0x1 [0113.423] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0113.423] GetFileType (hFile=0x444) returned 0x1 [0113.424] WriteFile (in: hFile=0x444, lpBuffer=0x22b87f8*, nNumberOfBytesToWrite=0x2f0, lpNumberOfBytesWritten=0x3be698, lpOverlapped=0x0 | out: lpBuffer=0x22b87f8*, lpNumberOfBytesWritten=0x3be698*=0x2f0, lpOverlapped=0x0) returned 1 [0113.424] CloseHandle (hObject=0x444) returned 1 [0113.424] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\ngen.log", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\ngen.log", lpFilePart=0x0) returned 0x42 [0113.425] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\ngen.log.xuy", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\ngen.log.xuy", lpFilePart=0x0) returned 0x46 [0113.425] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0113.425] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\ngen.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\clr_v4.0_32\\ngen.log"), fInfoLevelId=0x0, lpFileInformation=0x3be8a0 | out: lpFileInformation=0x3be8a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf408296e, ftCreationTime.dwHighDateTime=0x1d2d40c, ftLastAccessTime.dwLowDateTime=0xf408296e, ftLastAccessTime.dwHighDateTime=0x1d2d40c, ftLastWriteTime.dwLowDateTime=0x2f73c657, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2f0)) returned 1 [0113.425] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0113.425] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\ngen.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\clr_v4.0_32\\ngen.log"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\ngen.log.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\clr_v4.0_32\\ngen.log.xuy")) returned 1 [0113.426] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0113.426] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\UsageLogs", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\UsageLogs", lpFilePart=0x0) returned 0x43 [0113.426] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\UsageLogs\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\UsageLogs\\", lpFilePart=0x0) returned 0x44 [0113.426] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\UsageLogs\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d78b0 [0113.427] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0113.427] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0113.427] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0113.427] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0113.427] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0113.427] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0113.427] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0113.428] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0113.428] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\UsageLogs", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\UsageLogs", lpFilePart=0x0) returned 0x43 [0113.428] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\UsageLogs\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\UsageLogs\\", lpFilePart=0x0) returned 0x44 [0113.428] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\UsageLogs\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7370 [0113.428] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0113.428] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0113.428] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0113.428] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0113.429] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0113.429] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0113.429] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0113.429] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\UsageLogs\\NGenTask.exe.log", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\UsageLogs\\NGenTask.exe.log", lpFilePart=0x0) returned 0x54 [0113.429] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0113.429] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\UsageLogs\\NGenTask.exe.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\clr_v4.0_32\\usagelogs\\ngentask.exe.log"), fInfoLevelId=0x0, lpFileInformation=0x22bbe28 | out: lpFileInformation=0x22bbe28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecd69998, ftCreationTime.dwHighDateTime=0x1d2fadb, ftLastAccessTime.dwLowDateTime=0xecd69998, ftLastAccessTime.dwHighDateTime=0x1d2fadb, ftLastWriteTime.dwLowDateTime=0xb168a4ee, ftLastWriteTime.dwHighDateTime=0x1d2fc21, nFileSizeHigh=0x0, nFileSizeLow=0x205)) returned 1 [0113.439] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0113.439] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\UsageLogs\\NGenTask.exe.log", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\UsageLogs\\NGenTask.exe.log", lpFilePart=0x0) returned 0x54 [0113.439] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0113.439] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\UsageLogs\\NGenTask.exe.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\clr_v4.0_32\\usagelogs\\ngentask.exe.log"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0113.440] GetFileType (hFile=0x444) returned 0x1 [0113.440] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0113.440] GetFileType (hFile=0x444) returned 0x1 [0113.440] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0x205 [0113.440] ReadFile (in: hFile=0x444, lpBuffer=0x22bc328, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be718, lpOverlapped=0x0 | out: lpBuffer=0x22bc328*, lpNumberOfBytesRead=0x3be718*=0x205, lpOverlapped=0x0) returned 1 [0113.441] CloseHandle (hObject=0x444) returned 1 [0113.464] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\UsageLogs\\NGenTask.exe.log", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\UsageLogs\\NGenTask.exe.log", lpFilePart=0x0) returned 0x54 [0113.464] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0113.464] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\UsageLogs\\NGenTask.exe.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\clr_v4.0_32\\usagelogs\\ngentask.exe.log"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0113.466] GetFileType (hFile=0x444) returned 0x1 [0113.466] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0113.466] GetFileType (hFile=0x444) returned 0x1 [0113.466] WriteFile (in: hFile=0x444, lpBuffer=0x2333d80*, nNumberOfBytesToWrite=0x210, lpNumberOfBytesWritten=0x3be628, lpOverlapped=0x0 | out: lpBuffer=0x2333d80*, lpNumberOfBytesWritten=0x3be628*=0x210, lpOverlapped=0x0) returned 1 [0113.467] CloseHandle (hObject=0x444) returned 1 [0113.467] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\UsageLogs\\NGenTask.exe.log", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\UsageLogs\\NGenTask.exe.log", lpFilePart=0x0) returned 0x54 [0113.467] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\UsageLogs\\NGenTask.exe.log.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\UsageLogs\\NGenTask.exe.log.xuy", lpFilePart=0x0) returned 0x58 [0113.467] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0113.467] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\UsageLogs\\NGenTask.exe.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\clr_v4.0_32\\usagelogs\\ngentask.exe.log"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecd69998, ftCreationTime.dwHighDateTime=0x1d2fadb, ftLastAccessTime.dwLowDateTime=0xecd69998, ftLastAccessTime.dwHighDateTime=0x1d2fadb, ftLastWriteTime.dwLowDateTime=0x2f7aef75, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x210)) returned 1 [0113.467] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0113.467] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\UsageLogs\\NGenTask.exe.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\clr_v4.0_32\\usagelogs\\ngentask.exe.log"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\UsageLogs\\NGenTask.exe.log.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\clr_v4.0_32\\usagelogs\\ngentask.exe.log.xuy")) returned 1 [0113.469] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\UsageLogs\\powershell.exe.log", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\UsageLogs\\powershell.exe.log", lpFilePart=0x0) returned 0x56 [0113.469] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0113.469] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\UsageLogs\\powershell.exe.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\clr_v4.0_32\\usagelogs\\powershell.exe.log"), fInfoLevelId=0x0, lpFileInformation=0x2335048 | out: lpFileInformation=0x2335048*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x132e589a, ftCreationTime.dwHighDateTime=0x1d41fe0, ftLastAccessTime.dwLowDateTime=0x132e589a, ftLastAccessTime.dwHighDateTime=0x1d41fe0, ftLastWriteTime.dwLowDateTime=0x132e589a, ftLastWriteTime.dwHighDateTime=0x1d41fe0, nFileSizeHigh=0x0, nFileSizeLow=0xa11)) returned 1 [0113.469] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0113.469] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\UsageLogs\\powershell.exe.log", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\UsageLogs\\powershell.exe.log", lpFilePart=0x0) returned 0x56 [0113.469] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0113.469] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\UsageLogs\\powershell.exe.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\clr_v4.0_32\\usagelogs\\powershell.exe.log"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0113.470] GetFileType (hFile=0x444) returned 0x1 [0113.470] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0113.470] GetFileType (hFile=0x444) returned 0x1 [0113.470] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0xa11 [0113.470] ReadFile (in: hFile=0x444, lpBuffer=0x2335d58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be718, lpOverlapped=0x0 | out: lpBuffer=0x2335d58*, lpNumberOfBytesRead=0x3be718*=0xa11, lpOverlapped=0x0) returned 1 [0113.484] CloseHandle (hObject=0x444) returned 1 [0113.526] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\UsageLogs\\powershell.exe.log", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\UsageLogs\\powershell.exe.log", lpFilePart=0x0) returned 0x56 [0113.526] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0113.526] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\UsageLogs\\powershell.exe.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\clr_v4.0_32\\usagelogs\\powershell.exe.log"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0113.528] GetFileType (hFile=0x444) returned 0x1 [0113.528] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0113.528] GetFileType (hFile=0x444) returned 0x1 [0113.528] WriteFile (in: hFile=0x444, lpBuffer=0x21af9d8*, nNumberOfBytesToWrite=0xa20, lpNumberOfBytesWritten=0x3be628, lpOverlapped=0x0 | out: lpBuffer=0x21af9d8*, lpNumberOfBytesWritten=0x3be628*=0xa20, lpOverlapped=0x0) returned 1 [0113.528] CloseHandle (hObject=0x444) returned 1 [0113.529] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\UsageLogs\\powershell.exe.log", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\UsageLogs\\powershell.exe.log", lpFilePart=0x0) returned 0x56 [0113.529] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\UsageLogs\\powershell.exe.log.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\UsageLogs\\powershell.exe.log.xuy", lpFilePart=0x0) returned 0x5a [0113.529] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0113.529] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\UsageLogs\\powershell.exe.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\clr_v4.0_32\\usagelogs\\powershell.exe.log"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x132e589a, ftCreationTime.dwHighDateTime=0x1d41fe0, ftLastAccessTime.dwLowDateTime=0x132e589a, ftLastAccessTime.dwHighDateTime=0x1d41fe0, ftLastWriteTime.dwLowDateTime=0x2f8478b5, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xa20)) returned 1 [0113.529] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0113.529] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\UsageLogs\\powershell.exe.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\clr_v4.0_32\\usagelogs\\powershell.exe.log"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\UsageLogs\\powershell.exe.log.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\clr_v4.0_32\\usagelogs\\powershell.exe.log.xuy")) returned 1 [0113.530] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0113.530] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Credentials", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Credentials", lpFilePart=0x0) returned 0x39 [0113.530] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Credentials\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Credentials\\", lpFilePart=0x0) returned 0x3a [0113.530] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Credentials\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d7370 [0113.530] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0113.530] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0113.531] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0113.531] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0113.531] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0113.531] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0113.531] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0113.531] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Credentials", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Credentials", lpFilePart=0x0) returned 0x39 [0113.531] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Credentials\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Credentials\\", lpFilePart=0x0) returned 0x3a [0113.531] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Credentials\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d7670 [0113.531] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0113.531] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0113.531] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0113.531] FindClose (in: hFindFile=0x5d7670 | out: hFindFile=0x5d7670) returned 1 [0113.531] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0113.532] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0113.532] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Credentials\\DFBE70A7E5CC19A398EBF1B96859CE5D", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Credentials\\DFBE70A7E5CC19A398EBF1B96859CE5D", lpFilePart=0x0) returned 0x5a [0113.532] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0113.532] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Credentials\\DFBE70A7E5CC19A398EBF1B96859CE5D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\credentials\\dfbe70a7e5cc19a398ebf1b96859ce5d"), fInfoLevelId=0x0, lpFileInformation=0x21b29d8 | out: lpFileInformation=0x21b29d8*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28b8b973, ftCreationTime.dwHighDateTime=0x1d39f0d, ftLastAccessTime.dwLowDateTime=0xeaec3259, ftLastAccessTime.dwHighDateTime=0x1d41fd9, ftLastWriteTime.dwLowDateTime=0xeaec3259, ftLastWriteTime.dwHighDateTime=0x1d41fd9, nFileSizeHigh=0x0, nFileSizeLow=0x2c00)) returned 1 [0113.533] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0113.533] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Credentials\\DFBE70A7E5CC19A398EBF1B96859CE5D", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Credentials\\DFBE70A7E5CC19A398EBF1B96859CE5D", lpFilePart=0x0) returned 0x5a [0113.533] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0113.534] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Credentials\\DFBE70A7E5CC19A398EBF1B96859CE5D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\credentials\\dfbe70a7e5cc19a398ebf1b96859ce5d"), fInfoLevelId=0x0, lpFileInformation=0x21b2b70 | out: lpFileInformation=0x21b2b70*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28b8b973, ftCreationTime.dwHighDateTime=0x1d39f0d, ftLastAccessTime.dwLowDateTime=0xeaec3259, ftLastAccessTime.dwHighDateTime=0x1d41fd9, ftLastWriteTime.dwLowDateTime=0xeaec3259, ftLastWriteTime.dwHighDateTime=0x1d41fd9, nFileSizeHigh=0x0, nFileSizeLow=0x2c00)) returned 1 [0113.534] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0113.534] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Credentials\\DFBE70A7E5CC19A398EBF1B96859CE5D", nBufferLength=0x105, lpBuffer=0x3be270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Credentials\\DFBE70A7E5CC19A398EBF1B96859CE5D", lpFilePart=0x0) returned 0x5a [0113.534] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0113.534] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Credentials\\DFBE70A7E5CC19A398EBF1B96859CE5D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\credentials\\dfbe70a7e5cc19a398ebf1b96859ce5d"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0113.534] GetFileType (hFile=0x444) returned 0x1 [0113.534] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6c0) returned 1 [0113.535] GetFileType (hFile=0x444) returned 0x1 [0113.535] ReadFile (in: hFile=0x444, lpBuffer=0x21b4fd0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be7d8, lpOverlapped=0x0 | out: lpBuffer=0x21b4fd0*, lpNumberOfBytesRead=0x3be7d8*=0x1000, lpOverlapped=0x0) returned 1 [0113.547] CloseHandle (hObject=0x444) returned 1 [0113.547] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Credentials\\DFBE70A7E5CC19A398EBF1B96859CE5D", nBufferLength=0x105, lpBuffer=0x3be270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Credentials\\DFBE70A7E5CC19A398EBF1B96859CE5D", lpFilePart=0x0) returned 0x5a [0113.547] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0113.547] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Credentials\\DFBE70A7E5CC19A398EBF1B96859CE5D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\credentials\\dfbe70a7e5cc19a398ebf1b96859ce5d"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0113.547] GetFileType (hFile=0x444) returned 0x1 [0113.547] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6c0) returned 1 [0113.548] GetFileType (hFile=0x444) returned 0x1 [0113.548] WriteFile (in: hFile=0x444, lpBuffer=0x21b2ce8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be888, lpOverlapped=0x0 | out: lpBuffer=0x21b2ce8*, lpNumberOfBytesWritten=0x3be888*=0x2000, lpOverlapped=0x0) returned 1 [0113.548] CloseHandle (hObject=0x444) returned 1 [0113.548] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Credentials\\DFBE70A7E5CC19A398EBF1B96859CE5D", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Credentials\\DFBE70A7E5CC19A398EBF1B96859CE5D", lpFilePart=0x0) returned 0x5a [0113.548] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Credentials\\DFBE70A7E5CC19A398EBF1B96859CE5D.xuy", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Credentials\\DFBE70A7E5CC19A398EBF1B96859CE5D.xuy", lpFilePart=0x0) returned 0x5e [0113.548] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0113.548] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Credentials\\DFBE70A7E5CC19A398EBF1B96859CE5D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\credentials\\dfbe70a7e5cc19a398ebf1b96859ce5d"), fInfoLevelId=0x0, lpFileInformation=0x3be8a0 | out: lpFileInformation=0x3be8a0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28b8b973, ftCreationTime.dwHighDateTime=0x1d39f0d, ftLastAccessTime.dwLowDateTime=0xeaec3259, ftLastAccessTime.dwHighDateTime=0x1d41fd9, ftLastWriteTime.dwLowDateTime=0x2f86da48, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2c00)) returned 1 [0113.548] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0113.548] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Credentials\\DFBE70A7E5CC19A398EBF1B96859CE5D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\credentials\\dfbe70a7e5cc19a398ebf1b96859ce5d"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Credentials\\DFBE70A7E5CC19A398EBF1B96859CE5D.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\credentials\\dfbe70a7e5cc19a398ebf1b96859ce5d.xuy")) returned 1 [0113.549] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0113.549] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Event Viewer", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Event Viewer", lpFilePart=0x0) returned 0x3a [0113.549] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Event Viewer\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Event Viewer\\", lpFilePart=0x0) returned 0x3b [0113.549] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Event Viewer\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d7370 [0113.550] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0113.550] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0113.551] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0113.551] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0113.551] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0113.551] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0113.551] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Event Viewer", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Event Viewer", lpFilePart=0x0) returned 0x3a [0113.551] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Event Viewer\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Event Viewer\\", lpFilePart=0x0) returned 0x3b [0113.551] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Event Viewer\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d79d0 [0113.551] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0113.551] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0113.551] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0113.552] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0113.552] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0113.552] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0113.552] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds", lpFilePart=0x0) returned 0x33 [0113.552] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\", lpFilePart=0x0) returned 0x34 [0113.552] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d7610 [0113.552] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0113.552] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0113.552] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0113.552] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0113.552] FindClose (in: hFindFile=0x5d7610 | out: hFindFile=0x5d7610) returned 1 [0113.553] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0113.553] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0113.553] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0113.553] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds", lpFilePart=0x0) returned 0x33 [0113.553] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\", lpFilePart=0x0) returned 0x34 [0113.553] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d79d0 [0113.553] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0113.553] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0113.553] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0113.553] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0113.553] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0113.554] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0113.554] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0113.554] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\FeedsStore.feedsdb-ms", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\FeedsStore.feedsdb-ms", lpFilePart=0x0) returned 0x49 [0113.554] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0113.554] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\FeedsStore.feedsdb-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\feeds\\feedsstore.feedsdb-ms"), fInfoLevelId=0x0, lpFileInformation=0x2234d80 | out: lpFileInformation=0x2234d80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x989bd657, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x989bd657, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0xa706fd17, ftLastWriteTime.dwHighDateTime=0x1d41fd8, nFileSizeHigh=0x0, nFileSizeLow=0x1400)) returned 1 [0113.554] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0113.554] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\FeedsStore.feedsdb-ms", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\FeedsStore.feedsdb-ms", lpFilePart=0x0) returned 0x49 [0113.554] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0113.554] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\FeedsStore.feedsdb-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\feeds\\feedsstore.feedsdb-ms"), fInfoLevelId=0x0, lpFileInformation=0x2234ee0 | out: lpFileInformation=0x2234ee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x989bd657, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x989bd657, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0xa706fd17, ftLastWriteTime.dwHighDateTime=0x1d41fd8, nFileSizeHigh=0x0, nFileSizeLow=0x1400)) returned 1 [0113.554] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0113.554] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\FeedsStore.feedsdb-ms", nBufferLength=0x105, lpBuffer=0x3be270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\FeedsStore.feedsdb-ms", lpFilePart=0x0) returned 0x49 [0113.554] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0113.554] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\FeedsStore.feedsdb-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\feeds\\feedsstore.feedsdb-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0113.555] GetFileType (hFile=0x444) returned 0x1 [0113.555] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6c0) returned 1 [0113.555] GetFileType (hFile=0x444) returned 0x1 [0113.555] ReadFile (in: hFile=0x444, lpBuffer=0x22372d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be7d8, lpOverlapped=0x0 | out: lpBuffer=0x22372d0*, lpNumberOfBytesRead=0x3be7d8*=0x1000, lpOverlapped=0x0) returned 1 [0113.585] CloseHandle (hObject=0x444) returned 1 [0113.592] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\FeedsStore.feedsdb-ms", nBufferLength=0x105, lpBuffer=0x3be270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\FeedsStore.feedsdb-ms", lpFilePart=0x0) returned 0x49 [0113.592] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0113.592] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\FeedsStore.feedsdb-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\feeds\\feedsstore.feedsdb-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0113.592] GetFileType (hFile=0x444) returned 0x1 [0113.592] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6c0) returned 1 [0113.592] GetFileType (hFile=0x444) returned 0x1 [0113.592] WriteFile (in: hFile=0x444, lpBuffer=0x2235020*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be888, lpOverlapped=0x0 | out: lpBuffer=0x2235020*, lpNumberOfBytesWritten=0x3be888*=0x2000, lpOverlapped=0x0) returned 1 [0113.592] CloseHandle (hObject=0x444) returned 1 [0113.592] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\FeedsStore.feedsdb-ms", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\FeedsStore.feedsdb-ms", lpFilePart=0x0) returned 0x49 [0113.593] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\FeedsStore.feedsdb-ms.xuy", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\FeedsStore.feedsdb-ms.xuy", lpFilePart=0x0) returned 0x4d [0113.593] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0113.593] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\FeedsStore.feedsdb-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\feeds\\feedsstore.feedsdb-ms"), fInfoLevelId=0x0, lpFileInformation=0x3be8a0 | out: lpFileInformation=0x3be8a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x989bd657, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x989bd657, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x2f8e00cd, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0113.593] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0113.593] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\FeedsStore.feedsdb-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\feeds\\feedsstore.feedsdb-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\FeedsStore.feedsdb-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\feeds\\feedsstore.feedsdb-ms.xuy")) returned 1 [0113.594] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0113.624] GetLongPathNameW (in: lpszShortPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", lpszLongPath=0x3be2e0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~") returned 0x5b [0113.625] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", lpFilePart=0x0) returned 0x5b [0113.625] GetLongPathNameW (in: lpszShortPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", lpszLongPath=0x3be2e0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~") returned 0x5b [0113.634] GetLongPathNameW (in: lpszShortPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpszLongPath=0x3be2b0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\") returned 0x5c [0113.635] GetLongPathNameW (in: lpszShortPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpszLongPath=0x3be280, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\") returned 0x5c [0113.636] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpFilePart=0x0) returned 0x5c [0113.636] GetLongPathNameW (in: lpszShortPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpszLongPath=0x3be280, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\") returned 0x5c [0113.637] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7370 [0113.638] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0113.638] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0113.638] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0113.638] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0113.638] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0113.638] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0113.638] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0113.638] GetLongPathNameW (in: lpszShortPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", lpszLongPath=0x3be2e0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~") returned 0x5b [0113.639] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", lpFilePart=0x0) returned 0x5b [0113.639] GetLongPathNameW (in: lpszShortPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", lpszLongPath=0x3be2e0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~") returned 0x5b [0113.639] GetLongPathNameW (in: lpszShortPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpszLongPath=0x3be2b0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\") returned 0x5c [0113.640] GetLongPathNameW (in: lpszShortPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpszLongPath=0x3be280, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\") returned 0x5c [0113.640] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpFilePart=0x0) returned 0x5c [0113.640] GetLongPathNameW (in: lpszShortPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpszLongPath=0x3be280, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\") returned 0x5c [0113.641] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7df0 [0113.642] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0113.642] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0113.642] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0113.642] FindClose (in: hFindFile=0x5d7df0 | out: hFindFile=0x5d7df0) returned 1 [0113.642] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0113.642] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0113.642] GetLongPathNameW (in: lpszShortPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpszLongPath=0x3be300, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\") returned 0x5c [0113.643] GetLongPathNameW (in: lpszShortPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\Internet Explorer Suggested Sites~.feed-ms", lpszLongPath=0x3be300, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\Internet Explorer Suggested Sites~.feed-ms") returned 0x86 [0113.643] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\Internet Explorer Suggested Sites~.feed-ms", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\Internet Explorer Suggested Sites~.feed-ms", lpFilePart=0x0) returned 0x86 [0113.643] GetLongPathNameW (in: lpszShortPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\Internet Explorer Suggested Sites~.feed-ms", lpszLongPath=0x3be300, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\Internet Explorer Suggested Sites~.feed-ms") returned 0x86 [0113.644] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0113.644] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\Internet Explorer Suggested Sites~.feed-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\feeds\\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~\\internet explorer suggested sites~.feed-ms"), fInfoLevelId=0x0, lpFileInformation=0x22b6018 | out: lpFileInformation=0x22b6018*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x98805f1c, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x98805f1c, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0xa706fd17, ftLastWriteTime.dwHighDateTime=0x1d41fd8, nFileSizeHigh=0x0, nFileSizeLow=0x7000)) returned 1 [0113.644] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0113.644] GetLongPathNameW (in: lpszShortPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpszLongPath=0x3be300, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\") returned 0x5c [0113.644] GetLongPathNameW (in: lpszShortPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\Internet Explorer Suggested Sites~.feed-ms", lpszLongPath=0x3be300, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\Internet Explorer Suggested Sites~.feed-ms") returned 0x86 [0113.645] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\Internet Explorer Suggested Sites~.feed-ms", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\Internet Explorer Suggested Sites~.feed-ms", lpFilePart=0x0) returned 0x86 [0113.645] GetLongPathNameW (in: lpszShortPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\Internet Explorer Suggested Sites~.feed-ms", lpszLongPath=0x3be300, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\Internet Explorer Suggested Sites~.feed-ms") returned 0x86 [0113.645] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0113.645] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\Internet Explorer Suggested Sites~.feed-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\feeds\\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~\\internet explorer suggested sites~.feed-ms"), fInfoLevelId=0x0, lpFileInformation=0x22b6218 | out: lpFileInformation=0x22b6218*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x98805f1c, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x98805f1c, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0xa706fd17, ftLastWriteTime.dwHighDateTime=0x1d41fd8, nFileSizeHigh=0x0, nFileSizeLow=0x7000)) returned 1 [0113.646] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0113.646] GetLongPathNameW (in: lpszShortPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpszLongPath=0x3be1f0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\") returned 0x5c [0113.646] GetLongPathNameW (in: lpszShortPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\Internet Explorer Suggested Sites~.feed-ms", lpszLongPath=0x3be1f0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\Internet Explorer Suggested Sites~.feed-ms") returned 0x86 [0113.647] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\Internet Explorer Suggested Sites~.feed-ms", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\Internet Explorer Suggested Sites~.feed-ms", lpFilePart=0x0) returned 0x86 [0113.647] GetLongPathNameW (in: lpszShortPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\Internet Explorer Suggested Sites~.feed-ms", lpszLongPath=0x3be1f0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\Internet Explorer Suggested Sites~.feed-ms") returned 0x86 [0113.647] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0113.647] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\Internet Explorer Suggested Sites~.feed-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\feeds\\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~\\internet explorer suggested sites~.feed-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0113.648] GetFileType (hFile=0x444) returned 0x1 [0113.648] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0113.648] GetFileType (hFile=0x444) returned 0x1 [0113.648] ReadFile (in: hFile=0x444, lpBuffer=0x22b8748, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x22b8748*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0113.700] CloseHandle (hObject=0x444) returned 1 [0113.700] GetLongPathNameW (in: lpszShortPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpszLongPath=0x3be1f0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\") returned 0x5c [0113.701] GetLongPathNameW (in: lpszShortPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\Internet Explorer Suggested Sites~.feed-ms", lpszLongPath=0x3be1f0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\Internet Explorer Suggested Sites~.feed-ms") returned 0x86 [0113.701] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\Internet Explorer Suggested Sites~.feed-ms", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\Internet Explorer Suggested Sites~.feed-ms", lpFilePart=0x0) returned 0x86 [0113.701] GetLongPathNameW (in: lpszShortPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\Internet Explorer Suggested Sites~.feed-ms", lpszLongPath=0x3be1f0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\Internet Explorer Suggested Sites~.feed-ms") returned 0x86 [0113.701] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0113.702] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\Internet Explorer Suggested Sites~.feed-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\feeds\\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~\\internet explorer suggested sites~.feed-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0113.702] GetFileType (hFile=0x444) returned 0x1 [0113.702] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0113.702] GetFileType (hFile=0x444) returned 0x1 [0113.702] WriteFile (in: hFile=0x444, lpBuffer=0x22b63f8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x22b63f8*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0113.702] CloseHandle (hObject=0x444) returned 1 [0113.702] GetLongPathNameW (in: lpszShortPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpszLongPath=0x3be300, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\") returned 0x5c [0113.703] GetLongPathNameW (in: lpszShortPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\Internet Explorer Suggested Sites~.feed-ms", lpszLongPath=0x3be300, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\Internet Explorer Suggested Sites~.feed-ms") returned 0x86 [0113.703] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\Internet Explorer Suggested Sites~.feed-ms", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\Internet Explorer Suggested Sites~.feed-ms", lpFilePart=0x0) returned 0x86 [0113.703] GetLongPathNameW (in: lpszShortPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\Internet Explorer Suggested Sites~.feed-ms", lpszLongPath=0x3be300, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\Internet Explorer Suggested Sites~.feed-ms") returned 0x86 [0113.704] GetLongPathNameW (in: lpszShortPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpszLongPath=0x3be300, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\") returned 0x5c [0113.704] GetLongPathNameW (in: lpszShortPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\Internet Explorer Suggested Sites~.feed-ms.xuy", lpszLongPath=0x3be300, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0113.704] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\Internet Explorer Suggested Sites~.feed-ms.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\Internet Explorer Suggested Sites~.feed-ms.xuy", lpFilePart=0x0) returned 0x8a [0113.704] GetLongPathNameW (in: lpszShortPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\Internet Explorer Suggested Sites~.feed-ms.xuy", lpszLongPath=0x3be300, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0113.704] GetLongPathNameW (in: lpszShortPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", lpszLongPath=0x3be230, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~") returned 0x5b [0113.705] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0113.705] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\Internet Explorer Suggested Sites~.feed-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\feeds\\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~\\internet explorer suggested sites~.feed-ms"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x98805f1c, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x98805f1c, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x2f9eb609, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x7000)) returned 1 [0113.705] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0113.705] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\Internet Explorer Suggested Sites~.feed-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\feeds\\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~\\internet explorer suggested sites~.feed-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\Internet Explorer Suggested Sites~.feed-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\feeds\\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~\\internet explorer suggested sites~.feed-ms.xuy")) returned 1 [0113.706] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0113.706] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds Cache", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds Cache", lpFilePart=0x0) returned 0x39 [0113.706] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds Cache\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds Cache\\", lpFilePart=0x0) returned 0x3a [0113.706] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds Cache\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d78b0 [0113.707] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0113.707] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0113.707] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0113.707] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0113.708] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0113.708] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0113.708] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0113.708] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0113.709] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0113.709] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0113.709] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0113.709] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds Cache", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds Cache", lpFilePart=0x0) returned 0x39 [0113.709] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds Cache\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds Cache\\", lpFilePart=0x0) returned 0x3a [0113.709] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds Cache\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d78b0 [0113.710] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0113.710] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0113.710] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0113.710] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0113.710] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0113.710] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0113.710] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0113.710] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0113.712] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0113.712] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0113.712] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds Cache\\container.dat", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds Cache\\container.dat", lpFilePart=0x0) returned 0x47 [0113.713] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0113.713] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds Cache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\feeds cache\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x2337790 | out: lpFileInformation=0x2337790*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x987e8a6d, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x987e8a6d, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x987e8a6d, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0113.713] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0113.713] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds Cache\\container.dat", nBufferLength=0x105, lpBuffer=0x3be1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds Cache\\container.dat", lpFilePart=0x0) returned 0x47 [0113.713] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6c0) returned 1 [0113.713] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds Cache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\feeds cache\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0113.714] GetFileType (hFile=0x444) returned 0x1 [0113.714] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0113.714] GetFileType (hFile=0x444) returned 0x1 [0113.714] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be858 | out: lpFileSizeHigh=0x3be858*=0x0) returned 0x0 [0113.714] CloseHandle (hObject=0x444) returned 1 [0113.761] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds Cache\\container.dat", nBufferLength=0x105, lpBuffer=0x3be1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds Cache\\container.dat", lpFilePart=0x0) returned 0x47 [0113.761] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6c0) returned 1 [0113.761] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds Cache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\feeds cache\\container.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0113.763] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb150) returned 1 [0113.763] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds Cache\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbdd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds Cache\\container.dat", lpFilePart=0x0) returned 0x47 [0113.763] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc270) returned 1 [0113.764] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds Cache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\feeds cache\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x3bc350 | out: lpFileInformation=0x3bc350*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x987e8a6d, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x987e8a6d, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x987e8a6d, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0113.764] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc230) returned 1 [0113.764] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds Cache\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbdf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds Cache\\container.dat", lpFilePart=0x0) returned 0x47 [0113.764] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc270) returned 1 [0113.764] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds Cache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\feeds cache\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x21ada18 | out: lpFileInformation=0x21ada18*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x987e8a6d, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x987e8a6d, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x987e8a6d, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0113.764] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc230) returned 1 [0113.764] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds Cache\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbc50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds Cache\\container.dat", lpFilePart=0x0) returned 0x47 [0113.764] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc130) returned 1 [0113.764] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds Cache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\feeds cache\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0113.764] GetFileType (hFile=0x444) returned 0x1 [0113.764] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc0a0) returned 1 [0113.764] GetFileType (hFile=0x444) returned 0x1 [0113.764] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc2c8 | out: lpFileSizeHigh=0x3bc2c8*=0x0) returned 0x0 [0113.764] CloseHandle (hObject=0x444) returned 1 [0113.801] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds Cache\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbc50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds Cache\\container.dat", lpFilePart=0x0) returned 0x47 [0113.801] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc130) returned 1 [0113.801] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds Cache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\feeds cache\\container.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0113.803] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8bc0) returned 1 [0113.803] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0113.804] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds Cache\\6YGNCJW8", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds Cache\\6YGNCJW8", lpFilePart=0x0) returned 0x42 [0113.804] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds Cache\\6YGNCJW8\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds Cache\\6YGNCJW8\\", lpFilePart=0x0) returned 0x43 [0113.804] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds Cache\\6YGNCJW8\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7610 [0113.807] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0113.807] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0113.807] FindClose (in: hFindFile=0x5d7610 | out: hFindFile=0x5d7610) returned 1 [0113.807] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0113.807] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0113.807] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0113.808] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds Cache\\6YGNCJW8", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds Cache\\6YGNCJW8", lpFilePart=0x0) returned 0x42 [0113.808] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds Cache\\6YGNCJW8\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds Cache\\6YGNCJW8\\", lpFilePart=0x0) returned 0x43 [0113.808] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds Cache\\6YGNCJW8\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d79d0 [0113.808] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0113.808] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0113.808] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0113.808] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0113.808] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0113.808] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0113.808] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds Cache\\FZW2QEOY", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds Cache\\FZW2QEOY", lpFilePart=0x0) returned 0x42 [0113.808] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds Cache\\FZW2QEOY\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds Cache\\FZW2QEOY\\", lpFilePart=0x0) returned 0x43 [0113.808] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds Cache\\FZW2QEOY\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d81b0 [0113.809] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0113.809] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0113.809] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0113.809] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0113.809] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0113.809] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0113.809] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds Cache\\FZW2QEOY", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds Cache\\FZW2QEOY", lpFilePart=0x0) returned 0x42 [0113.809] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds Cache\\FZW2QEOY\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds Cache\\FZW2QEOY\\", lpFilePart=0x0) returned 0x43 [0113.809] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds Cache\\FZW2QEOY\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7eb0 [0113.809] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0113.809] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0113.809] FindClose (in: hFindFile=0x5d7eb0 | out: hFindFile=0x5d7eb0) returned 1 [0113.810] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0113.810] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0113.810] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0113.810] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds Cache\\O593F7EE", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds Cache\\O593F7EE", lpFilePart=0x0) returned 0x42 [0113.810] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds Cache\\O593F7EE\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds Cache\\O593F7EE\\", lpFilePart=0x0) returned 0x43 [0113.810] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds Cache\\O593F7EE\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d78b0 [0113.811] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0113.811] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0113.812] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0113.812] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0113.812] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0113.812] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0113.812] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0113.812] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds Cache\\O593F7EE", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds Cache\\O593F7EE", lpFilePart=0x0) returned 0x42 [0113.812] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds Cache\\O593F7EE\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds Cache\\O593F7EE\\", lpFilePart=0x0) returned 0x43 [0113.812] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds Cache\\O593F7EE\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d79d0 [0113.812] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0113.812] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0113.812] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0113.813] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0113.813] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0113.813] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0113.813] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds Cache\\O593F7EE\\ieonlinews.microsoft[1]", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds Cache\\O593F7EE\\ieonlinews.microsoft[1]", lpFilePart=0x0) returned 0x5a [0113.813] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0113.813] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds Cache\\O593F7EE\\ieonlinews.microsoft[1]" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\feeds cache\\o593f7ee\\ieonlinews.microsoft[1]"), fInfoLevelId=0x0, lpFileInformation=0x2229870 | out: lpFileInformation=0x2229870*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x990a00e3, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x990a00e3, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x990a00e3, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0113.813] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0113.813] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds Cache\\O593F7EE\\ieonlinews.microsoft[1]", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds Cache\\O593F7EE\\ieonlinews.microsoft[1]", lpFilePart=0x0) returned 0x5a [0113.813] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0113.813] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds Cache\\O593F7EE\\ieonlinews.microsoft[1]" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\feeds cache\\o593f7ee\\ieonlinews.microsoft[1]"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0113.813] GetFileType (hFile=0x444) returned 0x1 [0113.813] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0113.813] GetFileType (hFile=0x444) returned 0x1 [0113.813] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0x0 [0113.813] CloseHandle (hObject=0x444) returned 1 [0113.849] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds Cache\\O593F7EE\\ieonlinews.microsoft[1]", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds Cache\\O593F7EE\\ieonlinews.microsoft[1]", lpFilePart=0x0) returned 0x5a [0113.849] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0113.849] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds Cache\\O593F7EE\\ieonlinews.microsoft[1]" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\feeds cache\\o593f7ee\\ieonlinews.microsoft[1]"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0113.850] GetFileType (hFile=0x444) returned 0x1 [0113.850] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0113.850] GetFileType (hFile=0x444) returned 0x1 [0113.850] WriteFile (in: hFile=0x444, lpBuffer=0x229fca8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x3be628, lpOverlapped=0x0 | out: lpBuffer=0x229fca8*, lpNumberOfBytesWritten=0x3be628*=0x10, lpOverlapped=0x0) returned 1 [0113.851] CloseHandle (hObject=0x444) returned 1 [0113.851] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds Cache\\O593F7EE\\ieonlinews.microsoft[1]", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds Cache\\O593F7EE\\ieonlinews.microsoft[1]", lpFilePart=0x0) returned 0x5a [0113.851] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds Cache\\O593F7EE\\ieonlinews.microsoft[1].xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds Cache\\O593F7EE\\ieonlinews.microsoft[1].xuy", lpFilePart=0x0) returned 0x5e [0113.851] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0113.851] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds Cache\\O593F7EE\\ieonlinews.microsoft[1]" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\feeds cache\\o593f7ee\\ieonlinews.microsoft[1]"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x990a00e3, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x990a00e3, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x2fb4293c, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0113.851] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0113.852] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds Cache\\O593F7EE\\ieonlinews.microsoft[1]" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\feeds cache\\o593f7ee\\ieonlinews.microsoft[1]"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds Cache\\O593F7EE\\ieonlinews.microsoft[1].xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\feeds cache\\o593f7ee\\ieonlinews.microsoft[1].xuy")) returned 1 [0113.853] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0113.853] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds Cache\\PJ5H3B54", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds Cache\\PJ5H3B54", lpFilePart=0x0) returned 0x42 [0113.853] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds Cache\\PJ5H3B54\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds Cache\\PJ5H3B54\\", lpFilePart=0x0) returned 0x43 [0113.853] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds Cache\\PJ5H3B54\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d78b0 [0113.853] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0113.853] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0113.854] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0113.854] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0113.854] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0113.854] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0113.854] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds Cache\\PJ5H3B54", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds Cache\\PJ5H3B54", lpFilePart=0x0) returned 0x42 [0113.854] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds Cache\\PJ5H3B54\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds Cache\\PJ5H3B54\\", lpFilePart=0x0) returned 0x43 [0113.854] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds Cache\\PJ5H3B54\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7fd0 [0113.854] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0113.854] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0113.854] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0113.854] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0113.854] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0113.854] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0113.854] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\FORMS", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\FORMS", lpFilePart=0x0) returned 0x33 [0113.854] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\FORMS\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\FORMS\\", lpFilePart=0x0) returned 0x34 [0113.854] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\FORMS\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d78b0 [0113.855] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0113.855] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0113.856] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0113.856] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0113.856] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0113.856] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0113.856] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0113.856] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\FORMS", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\FORMS", lpFilePart=0x0) returned 0x33 [0113.856] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\FORMS\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\FORMS\\", lpFilePart=0x0) returned 0x34 [0113.856] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\FORMS\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d81b0 [0113.856] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0113.856] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0113.856] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0113.856] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0113.857] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0113.857] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0113.857] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\FORMS\\FRMDATA64.DAT", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\FORMS\\FRMDATA64.DAT", lpFilePart=0x0) returned 0x41 [0113.857] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0113.857] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\FORMS\\FRMDATA64.DAT" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\forms\\frmdata64.dat"), fInfoLevelId=0x0, lpFileInformation=0x22a4498 | out: lpFileInformation=0x22a4498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5e8b029d, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x5e8b029d, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x24294db, ftLastWriteTime.dwHighDateTime=0x1d2fc25, nFileSizeHigh=0x0, nFileSizeLow=0x3e3b4)) returned 1 [0113.857] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0113.857] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\FORMS\\FRMDATA64.DAT", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\FORMS\\FRMDATA64.DAT", lpFilePart=0x0) returned 0x41 [0113.857] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0113.857] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\FORMS\\FRMDATA64.DAT" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\forms\\frmdata64.dat"), fInfoLevelId=0x0, lpFileInformation=0x22a45d8 | out: lpFileInformation=0x22a45d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5e8b029d, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x5e8b029d, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x24294db, ftLastWriteTime.dwHighDateTime=0x1d2fc25, nFileSizeHigh=0x0, nFileSizeLow=0x3e3b4)) returned 1 [0113.858] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0113.858] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\FORMS\\FRMDATA64.DAT", nBufferLength=0x105, lpBuffer=0x3be270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\FORMS\\FRMDATA64.DAT", lpFilePart=0x0) returned 0x41 [0113.858] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0113.858] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\FORMS\\FRMDATA64.DAT" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\forms\\frmdata64.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0113.858] GetFileType (hFile=0x444) returned 0x1 [0113.858] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6c0) returned 1 [0113.858] GetFileType (hFile=0x444) returned 0x1 [0113.858] ReadFile (in: hFile=0x444, lpBuffer=0x22a6988, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be7d8, lpOverlapped=0x0 | out: lpBuffer=0x22a6988*, lpNumberOfBytesRead=0x3be7d8*=0x1000, lpOverlapped=0x0) returned 1 [0113.885] CloseHandle (hObject=0x444) returned 1 [0113.885] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\FORMS\\FRMDATA64.DAT", nBufferLength=0x105, lpBuffer=0x3be270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\FORMS\\FRMDATA64.DAT", lpFilePart=0x0) returned 0x41 [0113.885] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0113.885] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\FORMS\\FRMDATA64.DAT" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\forms\\frmdata64.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0113.885] GetFileType (hFile=0x444) returned 0x1 [0113.885] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6c0) returned 1 [0113.885] GetFileType (hFile=0x444) returned 0x1 [0113.885] WriteFile (in: hFile=0x444, lpBuffer=0x22a46f8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be888, lpOverlapped=0x0 | out: lpBuffer=0x22a46f8*, lpNumberOfBytesWritten=0x3be888*=0x2000, lpOverlapped=0x0) returned 1 [0113.885] CloseHandle (hObject=0x444) returned 1 [0113.886] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\FORMS\\FRMDATA64.DAT", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\FORMS\\FRMDATA64.DAT", lpFilePart=0x0) returned 0x41 [0113.886] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\FORMS\\FRMDATA64.DAT.xuy", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\FORMS\\FRMDATA64.DAT.xuy", lpFilePart=0x0) returned 0x45 [0113.886] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0113.886] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\FORMS\\FRMDATA64.DAT" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\forms\\frmdata64.dat"), fInfoLevelId=0x0, lpFileInformation=0x3be8a0 | out: lpFileInformation=0x3be8a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5e8b029d, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x5e8b029d, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x2fbb4fe7, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x3e3b4)) returned 1 [0113.886] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0113.886] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\FORMS\\FRMDATA64.DAT" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\forms\\frmdata64.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\FORMS\\FRMDATA64.DAT.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\forms\\frmdata64.dat.xuy")) returned 1 [0113.887] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0113.887] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\GameDVR", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\GameDVR", lpFilePart=0x0) returned 0x35 [0113.887] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\GameDVR\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\GameDVR\\", lpFilePart=0x0) returned 0x36 [0113.887] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\GameDVR\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d7550 [0113.887] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0113.887] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0113.887] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0113.888] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0113.888] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0113.888] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0113.888] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0113.888] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\GameDVR", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\GameDVR", lpFilePart=0x0) returned 0x35 [0113.888] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\GameDVR\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\GameDVR\\", lpFilePart=0x0) returned 0x36 [0113.888] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\GameDVR\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d78b0 [0113.888] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0113.888] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0113.888] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0113.888] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0113.888] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0113.888] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0113.888] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\GameDVR\\KnownGameList.bin", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\GameDVR\\KnownGameList.bin", lpFilePart=0x0) returned 0x47 [0113.888] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0113.888] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\GameDVR\\KnownGameList.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\gamedvr\\knowngamelist.bin"), fInfoLevelId=0x0, lpFileInformation=0x23248a8 | out: lpFileInformation=0x23248a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa613aa9, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0xa613aa9, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0xbe1a1ae6, ftLastWriteTime.dwHighDateTime=0x1d0bb12, nFileSizeHigh=0x0, nFileSizeLow=0x98d0)) returned 1 [0113.889] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0113.889] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\GameDVR\\KnownGameList.bin", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\GameDVR\\KnownGameList.bin", lpFilePart=0x0) returned 0x47 [0113.889] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0113.889] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\GameDVR\\KnownGameList.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\gamedvr\\knowngamelist.bin"), fInfoLevelId=0x0, lpFileInformation=0x23249f8 | out: lpFileInformation=0x23249f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa613aa9, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0xa613aa9, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0xbe1a1ae6, ftLastWriteTime.dwHighDateTime=0x1d0bb12, nFileSizeHigh=0x0, nFileSizeLow=0x98d0)) returned 1 [0113.889] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0113.889] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\GameDVR\\KnownGameList.bin", nBufferLength=0x105, lpBuffer=0x3be270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\GameDVR\\KnownGameList.bin", lpFilePart=0x0) returned 0x47 [0113.889] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0113.889] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\GameDVR\\KnownGameList.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\gamedvr\\knowngamelist.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0113.890] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb1e0) returned 1 [0113.891] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\GameDVR\\KnownGameList.bin", nBufferLength=0x105, lpBuffer=0x3bbe60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\GameDVR\\KnownGameList.bin", lpFilePart=0x0) returned 0x47 [0113.891] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc300) returned 1 [0113.891] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\GameDVR\\KnownGameList.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\gamedvr\\knowngamelist.bin"), fInfoLevelId=0x0, lpFileInformation=0x3bc3e0 | out: lpFileInformation=0x3bc3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa613aa9, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0xa613aa9, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0xbe1a1ae6, ftLastWriteTime.dwHighDateTime=0x1d0bb12, nFileSizeHigh=0x0, nFileSizeLow=0x98d0)) returned 1 [0113.891] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc2c0) returned 1 [0113.891] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\GameDVR\\KnownGameList.bin", nBufferLength=0x105, lpBuffer=0x3bbe80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\GameDVR\\KnownGameList.bin", lpFilePart=0x0) returned 0x47 [0113.891] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc300) returned 1 [0113.891] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\GameDVR\\KnownGameList.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\gamedvr\\knowngamelist.bin"), fInfoLevelId=0x0, lpFileInformation=0x2327558 | out: lpFileInformation=0x2327558*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa613aa9, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0xa613aa9, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0xbe1a1ae6, ftLastWriteTime.dwHighDateTime=0x1d0bb12, nFileSizeHigh=0x0, nFileSizeLow=0x98d0)) returned 1 [0113.891] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc2c0) returned 1 [0113.891] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\GameDVR\\KnownGameList.bin", nBufferLength=0x105, lpBuffer=0x3bbe80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\GameDVR\\KnownGameList.bin", lpFilePart=0x0) returned 0x47 [0113.891] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc300) returned 1 [0113.891] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\GameDVR\\KnownGameList.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\gamedvr\\knowngamelist.bin"), fInfoLevelId=0x0, lpFileInformation=0x23276a8 | out: lpFileInformation=0x23276a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa613aa9, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0xa613aa9, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0xbe1a1ae6, ftLastWriteTime.dwHighDateTime=0x1d0bb12, nFileSizeHigh=0x0, nFileSizeLow=0x98d0)) returned 1 [0113.891] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc2c0) returned 1 [0113.891] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\GameDVR\\KnownGameList.bin", nBufferLength=0x105, lpBuffer=0x3bbd20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\GameDVR\\KnownGameList.bin", lpFilePart=0x0) returned 0x47 [0113.891] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc200) returned 1 [0113.891] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\GameDVR\\KnownGameList.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\gamedvr\\knowngamelist.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0113.893] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8c90) returned 1 [0113.893] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0113.893] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\InputPersonalization", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\InputPersonalization", lpFilePart=0x0) returned 0x42 [0113.893] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\InputPersonalization\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\InputPersonalization\\", lpFilePart=0x0) returned 0x43 [0113.893] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\InputPersonalization\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d78b0 [0113.894] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0113.894] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0113.894] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0113.894] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0113.894] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0113.894] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0113.894] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0113.894] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\InputPersonalization", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\InputPersonalization", lpFilePart=0x0) returned 0x42 [0113.894] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\InputPersonalization\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\InputPersonalization\\", lpFilePart=0x0) returned 0x43 [0113.894] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\InputPersonalization\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d7550 [0113.895] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0113.895] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0113.895] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0113.895] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0113.895] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0113.895] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0113.895] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0113.895] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\InputPersonalization\\TrainedDataStore", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\InputPersonalization\\TrainedDataStore", lpFilePart=0x0) returned 0x53 [0113.895] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\InputPersonalization\\TrainedDataStore\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\InputPersonalization\\TrainedDataStore\\", lpFilePart=0x0) returned 0x54 [0113.895] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\InputPersonalization\\TrainedDataStore\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7610 [0113.895] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0113.895] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0113.896] FindClose (in: hFindFile=0x5d7610 | out: hFindFile=0x5d7610) returned 1 [0113.896] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0113.896] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0113.896] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0113.896] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\InputPersonalization\\TrainedDataStore", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\InputPersonalization\\TrainedDataStore", lpFilePart=0x0) returned 0x53 [0113.896] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\InputPersonalization\\TrainedDataStore\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\InputPersonalization\\TrainedDataStore\\", lpFilePart=0x0) returned 0x54 [0113.896] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\InputPersonalization\\TrainedDataStore\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d79d0 [0113.896] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0113.896] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0113.896] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0113.896] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0113.896] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0113.896] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0113.896] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer", lpFilePart=0x0) returned 0x3f [0113.897] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\", lpFilePart=0x0) returned 0x40 [0113.897] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d79d0 [0113.897] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0113.898] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0113.898] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0113.898] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0113.898] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0113.898] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0113.899] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0113.899] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0113.899] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0113.899] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0113.899] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0113.900] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0113.900] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0113.900] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0113.900] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0113.900] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0113.900] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0113.900] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0113.900] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0113.901] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0113.901] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0113.901] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0113.901] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0113.901] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer", lpFilePart=0x0) returned 0x3f [0113.901] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\", lpFilePart=0x0) returned 0x40 [0113.901] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d79d0 [0113.902] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0113.902] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0113.902] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0113.903] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0113.903] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0113.903] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0113.903] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0113.903] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0113.903] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0113.903] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0113.903] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0113.904] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0113.904] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0113.904] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0113.904] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0113.904] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0113.904] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0113.904] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0113.904] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0113.904] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0113.905] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0113.905] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0113.905] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt", lpFilePart=0x0) returned 0x4b [0113.905] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0113.905] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\brndlog.txt"), fInfoLevelId=0x0, lpFileInformation=0x2334110 | out: lpFileInformation=0x2334110*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xadada42f, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xadada42f, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xadca4072, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x19b7)) returned 1 [0113.906] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0113.906] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt", lpFilePart=0x0) returned 0x4b [0113.906] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0113.906] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\brndlog.txt"), fInfoLevelId=0x0, lpFileInformation=0x2334258 | out: lpFileInformation=0x2334258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xadada42f, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xadada42f, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xadca4072, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x19b7)) returned 1 [0113.906] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0113.906] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt", nBufferLength=0x105, lpBuffer=0x3be270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt", lpFilePart=0x0) returned 0x4b [0113.906] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0113.906] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\brndlog.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0113.907] GetFileType (hFile=0x444) returned 0x1 [0113.907] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6c0) returned 1 [0113.907] GetFileType (hFile=0x444) returned 0x1 [0113.907] ReadFile (in: hFile=0x444, lpBuffer=0x2336618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be7d8, lpOverlapped=0x0 | out: lpBuffer=0x2336618*, lpNumberOfBytesRead=0x3be7d8*=0x1000, lpOverlapped=0x0) returned 1 [0113.972] CloseHandle (hObject=0x444) returned 1 [0113.972] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt", nBufferLength=0x105, lpBuffer=0x3be270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt", lpFilePart=0x0) returned 0x4b [0113.972] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0113.972] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\brndlog.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0113.973] GetFileType (hFile=0x444) returned 0x1 [0113.973] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6c0) returned 1 [0113.973] GetFileType (hFile=0x444) returned 0x1 [0113.973] WriteFile (in: hFile=0x444, lpBuffer=0x2164438*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be888, lpOverlapped=0x0 | out: lpBuffer=0x2164438*, lpNumberOfBytesWritten=0x3be888*=0x2000, lpOverlapped=0x0) returned 1 [0113.973] CloseHandle (hObject=0x444) returned 1 [0113.973] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt", lpFilePart=0x0) returned 0x4b [0113.973] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt.xuy", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt.xuy", lpFilePart=0x0) returned 0x4f [0113.973] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0113.973] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\brndlog.txt"), fInfoLevelId=0x0, lpFileInformation=0x3be8a0 | out: lpFileInformation=0x3be8a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xadada42f, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xadada42f, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x2fc73a87, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0113.973] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0113.973] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\brndlog.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\brndlog.txt.xuy")) returned 1 [0113.974] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\ie4uinit-ClearIconCache.log", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\ie4uinit-ClearIconCache.log", lpFilePart=0x0) returned 0x5b [0113.974] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0113.974] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\ie4uinit-ClearIconCache.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\ie4uinit-cleariconcache.log"), fInfoLevelId=0x0, lpFileInformation=0x21b68b8 | out: lpFileInformation=0x21b68b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad8c4346, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xad8c4346, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xc5fdb28f, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x3aa)) returned 1 [0113.975] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0113.975] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\ie4uinit-ClearIconCache.log", nBufferLength=0x105, lpBuffer=0x3be1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\ie4uinit-ClearIconCache.log", lpFilePart=0x0) returned 0x5b [0113.975] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6c0) returned 1 [0113.975] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\ie4uinit-ClearIconCache.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\ie4uinit-cleariconcache.log"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0113.975] GetFileType (hFile=0x444) returned 0x1 [0113.975] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0113.975] GetFileType (hFile=0x444) returned 0x1 [0113.975] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be858 | out: lpFileSizeHigh=0x3be858*=0x0) returned 0x3aa [0113.975] ReadFile (in: hFile=0x444, lpBuffer=0x21b6f90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be788, lpOverlapped=0x0 | out: lpBuffer=0x21b6f90*, lpNumberOfBytesRead=0x3be788*=0x3aa, lpOverlapped=0x0) returned 1 [0113.987] CloseHandle (hObject=0x444) returned 1 [0114.021] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\ie4uinit-ClearIconCache.log", nBufferLength=0x105, lpBuffer=0x3be1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\ie4uinit-ClearIconCache.log", lpFilePart=0x0) returned 0x5b [0114.021] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6c0) returned 1 [0114.021] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\ie4uinit-ClearIconCache.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\ie4uinit-cleariconcache.log"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0114.023] GetFileType (hFile=0x444) returned 0x1 [0114.023] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0114.023] GetFileType (hFile=0x444) returned 0x1 [0114.023] WriteFile (in: hFile=0x444, lpBuffer=0x222f218*, nNumberOfBytesToWrite=0x3b0, lpNumberOfBytesWritten=0x3be698, lpOverlapped=0x0 | out: lpBuffer=0x222f218*, lpNumberOfBytesWritten=0x3be698*=0x3b0, lpOverlapped=0x0) returned 1 [0114.024] CloseHandle (hObject=0x444) returned 1 [0114.024] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\ie4uinit-ClearIconCache.log", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\ie4uinit-ClearIconCache.log", lpFilePart=0x0) returned 0x5b [0114.024] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\ie4uinit-ClearIconCache.log.xuy", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\ie4uinit-ClearIconCache.log.xuy", lpFilePart=0x0) returned 0x5f [0114.024] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0114.024] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\ie4uinit-ClearIconCache.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\ie4uinit-cleariconcache.log"), fInfoLevelId=0x0, lpFileInformation=0x3be8a0 | out: lpFileInformation=0x3be8a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad8c4346, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xad8c4346, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x2fd0c49f, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x3b0)) returned 1 [0114.024] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0114.024] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\ie4uinit-ClearIconCache.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\ie4uinit-cleariconcache.log"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\ie4uinit-ClearIconCache.log.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\ie4uinit-cleariconcache.log.xuy")) returned 1 [0114.025] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\ie4uinit-UserConfig.log", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\ie4uinit-UserConfig.log", lpFilePart=0x0) returned 0x57 [0114.025] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0114.025] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\ie4uinit-UserConfig.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\ie4uinit-userconfig.log"), fInfoLevelId=0x0, lpFileInformation=0x22304f8 | out: lpFileInformation=0x22304f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xacf149ee, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xacf149ee, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xadcf0534, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x514)) returned 1 [0114.025] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0114.025] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\ie4uinit-UserConfig.log", nBufferLength=0x105, lpBuffer=0x3be1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\ie4uinit-UserConfig.log", lpFilePart=0x0) returned 0x57 [0114.026] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6c0) returned 1 [0114.026] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\ie4uinit-UserConfig.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\ie4uinit-userconfig.log"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0114.026] GetFileType (hFile=0x444) returned 0x1 [0114.026] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0114.026] GetFileType (hFile=0x444) returned 0x1 [0114.026] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be858 | out: lpFileSizeHigh=0x3be858*=0x0) returned 0x514 [0114.026] ReadFile (in: hFile=0x444, lpBuffer=0x2230d18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be788, lpOverlapped=0x0 | out: lpBuffer=0x2230d18*, lpNumberOfBytesRead=0x3be788*=0x514, lpOverlapped=0x0) returned 1 [0114.034] CloseHandle (hObject=0x444) returned 1 [0114.044] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\ie4uinit-UserConfig.log", nBufferLength=0x105, lpBuffer=0x3be1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\ie4uinit-UserConfig.log", lpFilePart=0x0) returned 0x57 [0114.044] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6c0) returned 1 [0114.044] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\ie4uinit-UserConfig.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\ie4uinit-userconfig.log"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0114.046] GetFileType (hFile=0x444) returned 0x1 [0114.046] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0114.046] GetFileType (hFile=0x444) returned 0x1 [0114.046] WriteFile (in: hFile=0x444, lpBuffer=0x22a96c8*, nNumberOfBytesToWrite=0x520, lpNumberOfBytesWritten=0x3be698, lpOverlapped=0x0 | out: lpBuffer=0x22a96c8*, lpNumberOfBytesWritten=0x3be698*=0x520, lpOverlapped=0x0) returned 1 [0114.046] CloseHandle (hObject=0x444) returned 1 [0114.047] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\ie4uinit-UserConfig.log", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\ie4uinit-UserConfig.log", lpFilePart=0x0) returned 0x57 [0114.047] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\ie4uinit-UserConfig.log.xuy", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\ie4uinit-UserConfig.log.xuy", lpFilePart=0x0) returned 0x5b [0114.047] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0114.047] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\ie4uinit-UserConfig.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\ie4uinit-userconfig.log"), fInfoLevelId=0x0, lpFileInformation=0x3be8a0 | out: lpFileInformation=0x3be8a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xacf149ee, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xacf149ee, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x2fd327ca, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x520)) returned 1 [0114.047] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0114.047] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\ie4uinit-UserConfig.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\ie4uinit-userconfig.log"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\ie4uinit-UserConfig.log.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\ie4uinit-userconfig.log.xuy")) returned 1 [0114.048] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\MSIMGSIZ.DAT", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\MSIMGSIZ.DAT", lpFilePart=0x0) returned 0x4c [0114.048] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0114.048] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\MSIMGSIZ.DAT" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\msimgsiz.dat"), fInfoLevelId=0x0, lpFileInformation=0x22aa990 | out: lpFileInformation=0x22aa990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d1cec53, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x4d1cec53, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x4d1cec53, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0xbfe0)) returned 1 [0114.048] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0114.048] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\MSIMGSIZ.DAT", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\MSIMGSIZ.DAT", lpFilePart=0x0) returned 0x4c [0114.048] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0114.048] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\MSIMGSIZ.DAT" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\msimgsiz.dat"), fInfoLevelId=0x0, lpFileInformation=0x22aaae8 | out: lpFileInformation=0x22aaae8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d1cec53, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x4d1cec53, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x4d1cec53, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0xbfe0)) returned 1 [0114.048] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0114.048] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\MSIMGSIZ.DAT", nBufferLength=0x105, lpBuffer=0x3be270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\MSIMGSIZ.DAT", lpFilePart=0x0) returned 0x4c [0114.048] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0114.048] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\MSIMGSIZ.DAT" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\msimgsiz.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0114.049] GetFileType (hFile=0x444) returned 0x1 [0114.049] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6c0) returned 1 [0114.049] GetFileType (hFile=0x444) returned 0x1 [0114.049] ReadFile (in: hFile=0x444, lpBuffer=0x22acec8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be7d8, lpOverlapped=0x0 | out: lpBuffer=0x22acec8*, lpNumberOfBytesRead=0x3be7d8*=0x1000, lpOverlapped=0x0) returned 1 [0114.074] CloseHandle (hObject=0x444) returned 1 [0114.074] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\MSIMGSIZ.DAT", nBufferLength=0x105, lpBuffer=0x3be270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\MSIMGSIZ.DAT", lpFilePart=0x0) returned 0x4c [0114.074] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0114.074] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\MSIMGSIZ.DAT" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\msimgsiz.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0114.074] GetFileType (hFile=0x444) returned 0x1 [0114.074] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6c0) returned 1 [0114.074] GetFileType (hFile=0x444) returned 0x1 [0114.075] WriteFile (in: hFile=0x444, lpBuffer=0x22aac20*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be888, lpOverlapped=0x0 | out: lpBuffer=0x22aac20*, lpNumberOfBytesWritten=0x3be888*=0x2000, lpOverlapped=0x0) returned 1 [0114.075] CloseHandle (hObject=0x444) returned 1 [0114.075] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\MSIMGSIZ.DAT", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\MSIMGSIZ.DAT", lpFilePart=0x0) returned 0x4c [0114.075] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\MSIMGSIZ.DAT.xuy", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\MSIMGSIZ.DAT.xuy", lpFilePart=0x0) returned 0x50 [0114.075] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0114.075] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\MSIMGSIZ.DAT" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\msimgsiz.dat"), fInfoLevelId=0x0, lpFileInformation=0x3be8a0 | out: lpFileInformation=0x3be8a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d1cec53, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x4d1cec53, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x2fd7ebbd, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xbfe0)) returned 1 [0114.075] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0114.075] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\MSIMGSIZ.DAT" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\msimgsiz.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\MSIMGSIZ.DAT.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\msimgsiz.dat.xuy")) returned 1 [0114.076] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0114.076] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DomainSuggestions", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DomainSuggestions", lpFilePart=0x0) returned 0x51 [0114.076] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DomainSuggestions\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DomainSuggestions\\", lpFilePart=0x0) returned 0x52 [0114.076] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DomainSuggestions\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7df0 [0114.077] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0114.077] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0114.077] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0114.077] FindClose (in: hFindFile=0x5d7df0 | out: hFindFile=0x5d7df0) returned 1 [0114.077] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0114.077] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0114.078] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0114.078] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DomainSuggestions", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DomainSuggestions", lpFilePart=0x0) returned 0x51 [0114.078] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DomainSuggestions\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DomainSuggestions\\", lpFilePart=0x0) returned 0x52 [0114.078] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DomainSuggestions\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d78b0 [0114.078] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0114.078] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0114.078] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0114.078] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0114.078] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0114.078] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0114.078] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DomainSuggestions\\en-US.1", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DomainSuggestions\\en-US.1", lpFilePart=0x0) returned 0x59 [0114.078] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0114.079] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DomainSuggestions\\en-US.1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\domainsuggestions\\en-us.1"), fInfoLevelId=0x0, lpFileInformation=0x232b3a0 | out: lpFileInformation=0x232b3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7498cb6, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0xb7498cb6, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0xb7472a03, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0x4700)) returned 1 [0114.079] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0114.079] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DomainSuggestions\\en-US.1", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DomainSuggestions\\en-US.1", lpFilePart=0x0) returned 0x59 [0114.079] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0114.079] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DomainSuggestions\\en-US.1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\domainsuggestions\\en-us.1"), fInfoLevelId=0x0, lpFileInformation=0x232b500 | out: lpFileInformation=0x232b500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7498cb6, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0xb7498cb6, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0xb7472a03, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0x4700)) returned 1 [0114.079] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0114.079] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DomainSuggestions\\en-US.1", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DomainSuggestions\\en-US.1", lpFilePart=0x0) returned 0x59 [0114.079] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0114.079] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DomainSuggestions\\en-US.1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\domainsuggestions\\en-us.1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0114.080] GetFileType (hFile=0x444) returned 0x1 [0114.080] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0114.080] GetFileType (hFile=0x444) returned 0x1 [0114.080] ReadFile (in: hFile=0x444, lpBuffer=0x232d8f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x232d8f0*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0114.134] CloseHandle (hObject=0x444) returned 1 [0114.134] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DomainSuggestions\\en-US.1", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DomainSuggestions\\en-US.1", lpFilePart=0x0) returned 0x59 [0114.134] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0114.134] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DomainSuggestions\\en-US.1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\domainsuggestions\\en-us.1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0114.135] GetFileType (hFile=0x444) returned 0x1 [0114.135] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0114.135] GetFileType (hFile=0x444) returned 0x1 [0114.135] WriteFile (in: hFile=0x444, lpBuffer=0x2163e68*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x2163e68*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0114.135] CloseHandle (hObject=0x444) returned 1 [0114.135] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DomainSuggestions\\en-US.1", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DomainSuggestions\\en-US.1", lpFilePart=0x0) returned 0x59 [0114.135] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DomainSuggestions\\en-US.1.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DomainSuggestions\\en-US.1.xuy", lpFilePart=0x0) returned 0x5d [0114.135] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0114.135] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DomainSuggestions\\en-US.1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\domainsuggestions\\en-us.1"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7498cb6, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0xb7498cb6, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x2fe1757e, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x4700)) returned 1 [0114.135] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0114.135] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DomainSuggestions\\en-US.1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\domainsuggestions\\en-us.1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DomainSuggestions\\en-US.1.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\domainsuggestions\\en-us.1.xuy")) returned 1 [0114.137] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0114.137] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore", lpFilePart=0x0) returned 0x48 [0114.137] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\", lpFilePart=0x0) returned 0x49 [0114.137] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d79d0 [0114.137] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0114.137] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0114.137] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0114.137] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0114.138] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0114.138] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0114.138] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0114.138] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0114.138] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0114.138] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0114.138] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0114.138] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore", lpFilePart=0x0) returned 0x48 [0114.138] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\", lpFilePart=0x0) returned 0x49 [0114.138] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d78b0 [0114.139] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0114.139] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0114.139] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0114.139] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0114.139] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0114.139] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0114.139] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0114.139] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0114.140] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0114.140] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0114.140] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\container.dat", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\container.dat", lpFilePart=0x0) returned 0x56 [0114.140] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0114.140] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\domstore\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x21ac748 | out: lpFileInformation=0x21ac748*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x6e51cfa7, ftCreationTime.dwHighDateTime=0x1d2fc23, ftLastAccessTime.dwLowDateTime=0x6e51cfa7, ftLastAccessTime.dwHighDateTime=0x1d2fc23, ftLastWriteTime.dwLowDateTime=0x6e51cfa7, ftLastWriteTime.dwHighDateTime=0x1d2fc23, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0114.140] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0114.140] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\container.dat", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\container.dat", lpFilePart=0x0) returned 0x56 [0114.140] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0114.140] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\domstore\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0114.140] GetFileType (hFile=0x444) returned 0x1 [0114.140] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0114.140] GetFileType (hFile=0x444) returned 0x1 [0114.140] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0x0 [0114.140] CloseHandle (hObject=0x444) returned 1 [0114.152] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\container.dat", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\container.dat", lpFilePart=0x0) returned 0x56 [0114.152] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0114.152] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\domstore\\container.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0114.153] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb0e0) returned 1 [0114.154] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\container.dat", lpFilePart=0x0) returned 0x56 [0114.154] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc200) returned 1 [0114.154] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\domstore\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x3bc2e0 | out: lpFileInformation=0x3bc2e0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x6e51cfa7, ftCreationTime.dwHighDateTime=0x1d2fc23, ftLastAccessTime.dwLowDateTime=0x6e51cfa7, ftLastAccessTime.dwHighDateTime=0x1d2fc23, ftLastWriteTime.dwLowDateTime=0x6e51cfa7, ftLastWriteTime.dwHighDateTime=0x1d2fc23, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0114.154] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1c0) returned 1 [0114.154] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbd80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\container.dat", lpFilePart=0x0) returned 0x56 [0114.154] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc200) returned 1 [0114.154] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\domstore\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x22233b0 | out: lpFileInformation=0x22233b0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x6e51cfa7, ftCreationTime.dwHighDateTime=0x1d2fc23, ftLastAccessTime.dwLowDateTime=0x6e51cfa7, ftLastAccessTime.dwHighDateTime=0x1d2fc23, ftLastWriteTime.dwLowDateTime=0x6e51cfa7, ftLastWriteTime.dwHighDateTime=0x1d2fc23, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0114.154] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1c0) returned 1 [0114.154] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\container.dat", lpFilePart=0x0) returned 0x56 [0114.154] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0c0) returned 1 [0114.154] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\domstore\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0114.154] GetFileType (hFile=0x444) returned 0x1 [0114.154] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc030) returned 1 [0114.154] GetFileType (hFile=0x444) returned 0x1 [0114.154] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc258 | out: lpFileSizeHigh=0x3bc258*=0x0) returned 0x0 [0114.155] CloseHandle (hObject=0x444) returned 1 [0114.198] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\container.dat", lpFilePart=0x0) returned 0x56 [0114.198] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0c0) returned 1 [0114.198] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\domstore\\container.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0114.200] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8b50) returned 1 [0114.201] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0114.201] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\37JGORX3", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\37JGORX3", lpFilePart=0x0) returned 0x51 [0114.201] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\37JGORX3\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\37JGORX3\\", lpFilePart=0x0) returned 0x52 [0114.201] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\37JGORX3\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7fd0 [0114.204] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0114.204] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0114.204] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0114.204] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0114.204] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0114.204] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0114.204] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\37JGORX3", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\37JGORX3", lpFilePart=0x0) returned 0x51 [0114.204] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\37JGORX3\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\37JGORX3\\", lpFilePart=0x0) returned 0x52 [0114.204] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\37JGORX3\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7550 [0114.205] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0114.205] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0114.205] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0114.205] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0114.205] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0114.205] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0114.205] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\52UK17NV", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\52UK17NV", lpFilePart=0x0) returned 0x51 [0114.205] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\52UK17NV\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\52UK17NV\\", lpFilePart=0x0) returned 0x52 [0114.205] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\52UK17NV\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d78b0 [0114.205] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0114.205] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0114.205] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0114.206] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0114.206] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0114.206] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0114.206] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0114.206] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\52UK17NV", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\52UK17NV", lpFilePart=0x0) returned 0x51 [0114.206] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\52UK17NV\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\52UK17NV\\", lpFilePart=0x0) returned 0x52 [0114.206] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\52UK17NV\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d78b0 [0114.206] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0114.206] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0114.206] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0114.207] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0114.207] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0114.207] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0114.207] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\52UK17NV\\www.google[1].xml", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\52UK17NV\\www.google[1].xml", lpFilePart=0x0) returned 0x63 [0114.207] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0114.207] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\52UK17NV\\www.google[1].xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\domstore\\52uk17nv\\www.google[1].xml"), fInfoLevelId=0x0, lpFileInformation=0x229de60 | out: lpFileInformation=0x229de60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6e530817, ftCreationTime.dwHighDateTime=0x1d2fc23, ftLastAccessTime.dwLowDateTime=0x6e530817, ftLastAccessTime.dwHighDateTime=0x1d2fc23, ftLastWriteTime.dwLowDateTime=0x52c0ee0b, ftLastWriteTime.dwHighDateTime=0x1d35db9, nFileSizeHigh=0x0, nFileSizeLow=0xd)) returned 1 [0114.207] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0114.207] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\52UK17NV\\www.google[1].xml", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\52UK17NV\\www.google[1].xml", lpFilePart=0x0) returned 0x63 [0114.207] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0114.207] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\52UK17NV\\www.google[1].xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\domstore\\52uk17nv\\www.google[1].xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0114.207] GetFileType (hFile=0x444) returned 0x1 [0114.207] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0114.207] GetFileType (hFile=0x444) returned 0x1 [0114.207] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0xd [0114.207] ReadFile (in: hFile=0x444, lpBuffer=0x229e198, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x229e198*, lpNumberOfBytesRead=0x3be6a8*=0xd, lpOverlapped=0x0) returned 1 [0114.208] CloseHandle (hObject=0x444) returned 1 [0114.247] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\52UK17NV\\www.google[1].xml", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\52UK17NV\\www.google[1].xml", lpFilePart=0x0) returned 0x63 [0114.247] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0114.247] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\52UK17NV\\www.google[1].xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\domstore\\52uk17nv\\www.google[1].xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0114.248] GetFileType (hFile=0x444) returned 0x1 [0114.248] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0114.248] GetFileType (hFile=0x444) returned 0x1 [0114.248] WriteFile (in: hFile=0x444, lpBuffer=0x23152d0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x23152d0*, lpNumberOfBytesWritten=0x3be5b8*=0x10, lpOverlapped=0x0) returned 1 [0114.249] CloseHandle (hObject=0x444) returned 1 [0114.249] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\52UK17NV\\www.google[1].xml", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\52UK17NV\\www.google[1].xml", lpFilePart=0x0) returned 0x63 [0114.249] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\52UK17NV\\www.google[1].xml.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\52UK17NV\\www.google[1].xml.xuy", lpFilePart=0x0) returned 0x67 [0114.249] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0114.249] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\52UK17NV\\www.google[1].xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\domstore\\52uk17nv\\www.google[1].xml"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6e530817, ftCreationTime.dwHighDateTime=0x1d2fc23, ftLastAccessTime.dwLowDateTime=0x6e530817, ftLastAccessTime.dwHighDateTime=0x1d2fc23, ftLastWriteTime.dwLowDateTime=0x2ff224fd, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0114.249] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0114.249] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\52UK17NV\\www.google[1].xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\domstore\\52uk17nv\\www.google[1].xml"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\52UK17NV\\www.google[1].xml.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\domstore\\52uk17nv\\www.google[1].xml.xuy")) returned 1 [0114.250] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0114.250] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\L8OQST1L", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\L8OQST1L", lpFilePart=0x0) returned 0x51 [0114.250] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\L8OQST1L\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\L8OQST1L\\", lpFilePart=0x0) returned 0x52 [0114.250] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\L8OQST1L\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d81b0 [0114.251] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0114.251] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0114.251] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0114.251] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0114.252] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0114.252] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0114.252] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0114.252] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\L8OQST1L", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\L8OQST1L", lpFilePart=0x0) returned 0x51 [0114.252] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\L8OQST1L\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\L8OQST1L\\", lpFilePart=0x0) returned 0x52 [0114.252] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\L8OQST1L\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7cd0 [0114.253] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0114.253] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0114.253] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0114.253] FindClose (in: hFindFile=0x5d7cd0 | out: hFindFile=0x5d7cd0) returned 1 [0114.253] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0114.253] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0114.253] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\L8OQST1L\\consent.google[1].xml", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\L8OQST1L\\consent.google[1].xml", lpFilePart=0x0) returned 0x67 [0114.253] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0114.253] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\L8OQST1L\\consent.google[1].xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\domstore\\l8oqst1l\\consent.google[1].xml"), fInfoLevelId=0x0, lpFileInformation=0x2318850 | out: lpFileInformation=0x2318850*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x537e3208, ftCreationTime.dwHighDateTime=0x1d35db9, ftLastAccessTime.dwLowDateTime=0x537e3208, ftLastAccessTime.dwHighDateTime=0x1d35db9, ftLastWriteTime.dwLowDateTime=0x5384cfd8, ftLastWriteTime.dwHighDateTime=0x1d35db9, nFileSizeHigh=0x0, nFileSizeLow=0xd)) returned 1 [0114.253] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0114.253] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\L8OQST1L\\consent.google[1].xml", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\L8OQST1L\\consent.google[1].xml", lpFilePart=0x0) returned 0x67 [0114.254] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0114.254] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\L8OQST1L\\consent.google[1].xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\domstore\\l8oqst1l\\consent.google[1].xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0114.254] GetFileType (hFile=0x444) returned 0x1 [0114.254] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0114.254] GetFileType (hFile=0x444) returned 0x1 [0114.254] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0xd [0114.254] ReadFile (in: hFile=0x444, lpBuffer=0x2318ba8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x2318ba8*, lpNumberOfBytesRead=0x3be6a8*=0xd, lpOverlapped=0x0) returned 1 [0114.255] CloseHandle (hObject=0x444) returned 1 [0114.296] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\L8OQST1L\\consent.google[1].xml", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\L8OQST1L\\consent.google[1].xml", lpFilePart=0x0) returned 0x67 [0114.296] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0114.296] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\L8OQST1L\\consent.google[1].xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\domstore\\l8oqst1l\\consent.google[1].xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0114.298] GetFileType (hFile=0x444) returned 0x1 [0114.298] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0114.298] GetFileType (hFile=0x444) returned 0x1 [0114.298] WriteFile (in: hFile=0x444, lpBuffer=0x218d050*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x218d050*, lpNumberOfBytesWritten=0x3be5b8*=0x10, lpOverlapped=0x0) returned 1 [0114.298] CloseHandle (hObject=0x444) returned 1 [0114.299] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\L8OQST1L\\consent.google[1].xml", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\L8OQST1L\\consent.google[1].xml", lpFilePart=0x0) returned 0x67 [0114.299] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\L8OQST1L\\consent.google[1].xml.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\L8OQST1L\\consent.google[1].xml.xuy", lpFilePart=0x0) returned 0x6b [0114.299] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0114.299] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\L8OQST1L\\consent.google[1].xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\domstore\\l8oqst1l\\consent.google[1].xml"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x537e3208, ftCreationTime.dwHighDateTime=0x1d35db9, ftLastAccessTime.dwLowDateTime=0x537e3208, ftLastAccessTime.dwHighDateTime=0x1d35db9, ftLastWriteTime.dwLowDateTime=0x2ff94b46, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0114.299] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0114.299] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\L8OQST1L\\consent.google[1].xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\domstore\\l8oqst1l\\consent.google[1].xml"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\L8OQST1L\\consent.google[1].xml.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\domstore\\l8oqst1l\\consent.google[1].xml.xuy")) returned 1 [0114.300] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0114.300] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\Q6TJEFY5", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\Q6TJEFY5", lpFilePart=0x0) returned 0x51 [0114.300] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\Q6TJEFY5\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\Q6TJEFY5\\", lpFilePart=0x0) returned 0x52 [0114.300] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\Q6TJEFY5\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7eb0 [0114.301] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0114.301] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0114.301] FindClose (in: hFindFile=0x5d7eb0 | out: hFindFile=0x5d7eb0) returned 1 [0114.301] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0114.301] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0114.301] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0114.301] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\Q6TJEFY5", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\Q6TJEFY5", lpFilePart=0x0) returned 0x51 [0114.301] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\Q6TJEFY5\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\Q6TJEFY5\\", lpFilePart=0x0) returned 0x52 [0114.301] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\Q6TJEFY5\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7d90 [0114.301] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0114.301] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0114.302] FindClose (in: hFindFile=0x5d7d90 | out: hFindFile=0x5d7d90) returned 1 [0114.302] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0114.302] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0114.302] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0114.302] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieBrowserModeList", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieBrowserModeList", lpFilePart=0x0) returned 0x53 [0114.302] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieBrowserModeList\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieBrowserModeList\\", lpFilePart=0x0) returned 0x54 [0114.302] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieBrowserModeList\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7550 [0114.302] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0114.302] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0114.302] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0114.303] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0114.303] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0114.303] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0114.303] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0114.303] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieBrowserModeList", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieBrowserModeList", lpFilePart=0x0) returned 0x53 [0114.303] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieBrowserModeList\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieBrowserModeList\\", lpFilePart=0x0) returned 0x54 [0114.303] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieBrowserModeList\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d79d0 [0114.303] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0114.303] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0114.303] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0114.303] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0114.303] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0114.303] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0114.303] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieBrowserModeList\\container.dat", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieBrowserModeList\\container.dat", lpFilePart=0x0) returned 0x61 [0114.304] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0114.304] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieBrowserModeList\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\emiebrowsermodelist\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x21922d8 | out: lpFileInformation=0x21922d8*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x92986be4, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x92986be4, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x92986be4, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0114.304] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0114.304] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieBrowserModeList\\container.dat", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieBrowserModeList\\container.dat", lpFilePart=0x0) returned 0x61 [0114.304] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0114.304] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieBrowserModeList\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\emiebrowsermodelist\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0114.304] GetFileType (hFile=0x444) returned 0x1 [0114.304] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0114.304] GetFileType (hFile=0x444) returned 0x1 [0114.304] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0x0 [0114.304] CloseHandle (hObject=0x444) returned 1 [0114.315] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieBrowserModeList\\container.dat", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieBrowserModeList\\container.dat", lpFilePart=0x0) returned 0x61 [0114.315] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0114.315] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieBrowserModeList\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\emiebrowsermodelist\\container.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0114.316] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb0e0) returned 1 [0114.317] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieBrowserModeList\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieBrowserModeList\\container.dat", lpFilePart=0x0) returned 0x61 [0114.317] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc200) returned 1 [0114.317] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieBrowserModeList\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\emiebrowsermodelist\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x3bc2e0 | out: lpFileInformation=0x3bc2e0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x92986be4, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x92986be4, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x92986be4, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0114.317] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1c0) returned 1 [0114.317] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieBrowserModeList\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbd80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieBrowserModeList\\container.dat", lpFilePart=0x0) returned 0x61 [0114.317] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc200) returned 1 [0114.317] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieBrowserModeList\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\emiebrowsermodelist\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x2208fb8 | out: lpFileInformation=0x2208fb8*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x92986be4, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x92986be4, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x92986be4, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0114.317] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1c0) returned 1 [0114.317] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieBrowserModeList\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieBrowserModeList\\container.dat", lpFilePart=0x0) returned 0x61 [0114.317] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0c0) returned 1 [0114.317] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieBrowserModeList\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\emiebrowsermodelist\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0114.317] GetFileType (hFile=0x444) returned 0x1 [0114.317] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc030) returned 1 [0114.317] GetFileType (hFile=0x444) returned 0x1 [0114.317] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc258 | out: lpFileSizeHigh=0x3bc258*=0x0) returned 0x0 [0114.317] CloseHandle (hObject=0x444) returned 1 [0114.363] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieBrowserModeList\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieBrowserModeList\\container.dat", lpFilePart=0x0) returned 0x61 [0114.363] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0c0) returned 1 [0114.363] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieBrowserModeList\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\emiebrowsermodelist\\container.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0114.364] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8b50) returned 1 [0114.365] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0114.365] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieSiteList", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieSiteList", lpFilePart=0x0) returned 0x4c [0114.365] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieSiteList\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieSiteList\\", lpFilePart=0x0) returned 0x4d [0114.365] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieSiteList\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d78b0 [0114.366] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0114.366] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0114.366] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0114.366] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0114.366] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0114.366] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0114.366] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0114.366] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieSiteList", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieSiteList", lpFilePart=0x0) returned 0x4c [0114.366] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieSiteList\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieSiteList\\", lpFilePart=0x0) returned 0x4d [0114.366] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieSiteList\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7c70 [0114.366] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0114.367] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0114.367] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0114.367] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0114.367] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0114.367] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0114.367] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieSiteList\\container.dat", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieSiteList\\container.dat", lpFilePart=0x0) returned 0x5a [0114.367] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0114.367] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieSiteList\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\emiesitelist\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x2281cd0 | out: lpFileInformation=0x2281cd0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x9292edc2, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x9292edc2, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x9292edc2, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0114.368] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0114.368] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieSiteList\\container.dat", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieSiteList\\container.dat", lpFilePart=0x0) returned 0x5a [0114.368] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0114.368] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieSiteList\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\emiesitelist\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0114.368] GetFileType (hFile=0x444) returned 0x1 [0114.368] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0114.368] GetFileType (hFile=0x444) returned 0x1 [0114.368] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0x0 [0114.368] CloseHandle (hObject=0x444) returned 1 [0114.407] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieSiteList\\container.dat", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieSiteList\\container.dat", lpFilePart=0x0) returned 0x5a [0114.407] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0114.407] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieSiteList\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\emiesitelist\\container.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0114.409] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb0e0) returned 1 [0114.409] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieSiteList\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieSiteList\\container.dat", lpFilePart=0x0) returned 0x5a [0114.409] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc200) returned 1 [0114.409] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieSiteList\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\emiesitelist\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x3bc2e0 | out: lpFileInformation=0x3bc2e0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x9292edc2, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x9292edc2, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x9292edc2, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0114.409] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1c0) returned 1 [0114.409] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieSiteList\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbd80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieSiteList\\container.dat", lpFilePart=0x0) returned 0x5a [0114.409] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc200) returned 1 [0114.409] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieSiteList\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\emiesitelist\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x22f8960 | out: lpFileInformation=0x22f8960*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x9292edc2, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x9292edc2, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x9292edc2, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0114.410] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1c0) returned 1 [0114.410] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieSiteList\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieSiteList\\container.dat", lpFilePart=0x0) returned 0x5a [0114.410] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0c0) returned 1 [0114.410] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieSiteList\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\emiesitelist\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0114.410] GetFileType (hFile=0x444) returned 0x1 [0114.410] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc030) returned 1 [0114.410] GetFileType (hFile=0x444) returned 0x1 [0114.410] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc258 | out: lpFileSizeHigh=0x3bc258*=0x0) returned 0x0 [0114.410] CloseHandle (hObject=0x444) returned 1 [0114.451] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieSiteList\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieSiteList\\container.dat", lpFilePart=0x0) returned 0x5a [0114.452] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0c0) returned 1 [0114.452] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieSiteList\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\emiesitelist\\container.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0114.453] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8b50) returned 1 [0114.454] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0114.454] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieUserList", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieUserList", lpFilePart=0x0) returned 0x4c [0114.454] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieUserList\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieUserList\\", lpFilePart=0x0) returned 0x4d [0114.454] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieUserList\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7e50 [0114.454] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0114.454] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0114.455] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0114.455] FindClose (in: hFindFile=0x5d7e50 | out: hFindFile=0x5d7e50) returned 1 [0114.455] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0114.455] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0114.455] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0114.455] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieUserList", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieUserList", lpFilePart=0x0) returned 0x4c [0114.455] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieUserList\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieUserList\\", lpFilePart=0x0) returned 0x4d [0114.455] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieUserList\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7c70 [0114.455] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0114.455] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0114.455] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0114.455] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0114.456] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0114.456] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0114.456] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieUserList\\container.dat", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieUserList\\container.dat", lpFilePart=0x0) returned 0x5a [0114.456] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0114.456] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieUserList\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\emieuserlist\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x2171658 | out: lpFileInformation=0x2171658*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x92938a00, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x92938a00, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x92938a00, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0114.456] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0114.456] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieUserList\\container.dat", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieUserList\\container.dat", lpFilePart=0x0) returned 0x5a [0114.456] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0114.456] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieUserList\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\emieuserlist\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0114.456] GetFileType (hFile=0x444) returned 0x1 [0114.456] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0114.456] GetFileType (hFile=0x444) returned 0x1 [0114.456] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0x0 [0114.456] CloseHandle (hObject=0x444) returned 1 [0114.506] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieUserList\\container.dat", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieUserList\\container.dat", lpFilePart=0x0) returned 0x5a [0114.506] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0114.506] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieUserList\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\emieuserlist\\container.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0114.508] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb0e0) returned 1 [0114.509] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieUserList\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieUserList\\container.dat", lpFilePart=0x0) returned 0x5a [0114.509] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc200) returned 1 [0114.509] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieUserList\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\emieuserlist\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x3bc2e0 | out: lpFileInformation=0x3bc2e0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x92938a00, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x92938a00, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x92938a00, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0114.509] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1c0) returned 1 [0114.509] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieUserList\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbd80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieUserList\\container.dat", lpFilePart=0x0) returned 0x5a [0114.509] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc200) returned 1 [0114.509] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieUserList\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\emieuserlist\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x21e82e8 | out: lpFileInformation=0x21e82e8*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x92938a00, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x92938a00, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x92938a00, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0114.509] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1c0) returned 1 [0114.509] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieUserList\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieUserList\\container.dat", lpFilePart=0x0) returned 0x5a [0114.509] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0c0) returned 1 [0114.509] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieUserList\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\emieuserlist\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0114.509] GetFileType (hFile=0x444) returned 0x1 [0114.509] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc030) returned 1 [0114.509] GetFileType (hFile=0x444) returned 0x1 [0114.509] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc258 | out: lpFileSizeHigh=0x3bc258*=0x0) returned 0x0 [0114.510] CloseHandle (hObject=0x444) returned 1 [0114.553] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieUserList\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieUserList\\container.dat", lpFilePart=0x0) returned 0x5a [0114.553] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0c0) returned 1 [0114.553] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieUserList\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\emieuserlist\\container.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0114.555] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8b50) returned 1 [0114.556] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0114.556] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\IECompatData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\IECompatData", lpFilePart=0x0) returned 0x4c [0114.556] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\IECompatData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\IECompatData\\", lpFilePart=0x0) returned 0x4d [0114.556] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\IECompatData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7c70 [0114.558] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0114.558] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0114.558] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0114.558] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0114.558] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0114.558] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0114.558] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0114.558] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\IECompatData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\IECompatData", lpFilePart=0x0) returned 0x4c [0114.558] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\IECompatData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\IECompatData\\", lpFilePart=0x0) returned 0x4d [0114.559] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\IECompatData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d79d0 [0114.559] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0114.559] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0114.559] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0114.559] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0114.559] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0114.559] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0114.559] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\IECompatData\\iecompatdata.xml", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\IECompatData\\iecompatdata.xml", lpFilePart=0x0) returned 0x5d [0114.559] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0114.559] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\IECompatData\\iecompatdata.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\iecompatdata\\iecompatdata.xml"), fInfoLevelId=0x0, lpFileInformation=0x2260ff8 | out: lpFileInformation=0x2260ff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad76cdfa, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xad76cdfa, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xad79305d, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0xc10)) returned 1 [0114.559] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0114.560] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\IECompatData\\iecompatdata.xml", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\IECompatData\\iecompatdata.xml", lpFilePart=0x0) returned 0x5d [0114.560] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0114.560] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\IECompatData\\iecompatdata.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\iecompatdata\\iecompatdata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0114.560] GetFileType (hFile=0x444) returned 0x1 [0114.560] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0114.560] GetFileType (hFile=0x444) returned 0x1 [0114.560] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0xc10 [0114.560] ReadFile (in: hFile=0x444, lpBuffer=0x2261f20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be718, lpOverlapped=0x0 | out: lpBuffer=0x2261f20*, lpNumberOfBytesRead=0x3be718*=0xc10, lpOverlapped=0x0) returned 1 [0114.561] CloseHandle (hObject=0x444) returned 1 [0114.600] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\IECompatData\\iecompatdata.xml", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\IECompatData\\iecompatdata.xml", lpFilePart=0x0) returned 0x5d [0114.600] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0114.600] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\IECompatData\\iecompatdata.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\iecompatdata\\iecompatdata.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0114.602] GetFileType (hFile=0x444) returned 0x1 [0114.602] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0114.602] GetFileType (hFile=0x444) returned 0x1 [0114.602] WriteFile (in: hFile=0x444, lpBuffer=0x22dcbd8*, nNumberOfBytesToWrite=0xc20, lpNumberOfBytesWritten=0x3be628, lpOverlapped=0x0 | out: lpBuffer=0x22dcbd8*, lpNumberOfBytesWritten=0x3be628*=0xc20, lpOverlapped=0x0) returned 1 [0114.603] CloseHandle (hObject=0x444) returned 1 [0114.603] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\IECompatData\\iecompatdata.xml", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\IECompatData\\iecompatdata.xml", lpFilePart=0x0) returned 0x5d [0114.603] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\IECompatData\\iecompatdata.xml.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\IECompatData\\iecompatdata.xml.xuy", lpFilePart=0x0) returned 0x61 [0114.603] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0114.603] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\IECompatData\\iecompatdata.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\iecompatdata\\iecompatdata.xml"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad76cdfa, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xad76cdfa, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x3028ff38, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xc20)) returned 1 [0114.603] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0114.603] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\IECompatData\\iecompatdata.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\iecompatdata\\iecompatdata.xml"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\IECompatData\\iecompatdata.xml.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\iecompatdata\\iecompatdata.xml.xuy")) returned 1 [0114.604] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0114.604] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\IEFlipAheadCache", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\IEFlipAheadCache", lpFilePart=0x0) returned 0x50 [0114.604] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\IEFlipAheadCache\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\IEFlipAheadCache\\", lpFilePart=0x0) returned 0x51 [0114.605] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\IEFlipAheadCache\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d78b0 [0114.605] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0114.605] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0114.605] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0114.605] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0114.605] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0114.605] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0114.605] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0114.605] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\IEFlipAheadCache", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\IEFlipAheadCache", lpFilePart=0x0) returned 0x50 [0114.605] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\IEFlipAheadCache\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\IEFlipAheadCache\\", lpFilePart=0x0) returned 0x51 [0114.605] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\IEFlipAheadCache\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7370 [0114.606] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0114.606] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0114.606] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0114.606] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0114.606] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0114.606] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0114.606] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\IEFlipAheadCache\\container.dat", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\IEFlipAheadCache\\container.dat", lpFilePart=0x0) returned 0x5e [0114.606] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0114.606] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\IEFlipAheadCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\ieflipaheadcache\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x22e00b0 | out: lpFileInformation=0x22e00b0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xb7924e99, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0xb7924e99, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0xb7924e99, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0114.606] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0114.606] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\IEFlipAheadCache\\container.dat", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\IEFlipAheadCache\\container.dat", lpFilePart=0x0) returned 0x5e [0114.606] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0114.606] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\IEFlipAheadCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\ieflipaheadcache\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0114.607] GetFileType (hFile=0x444) returned 0x1 [0114.607] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0114.607] GetFileType (hFile=0x444) returned 0x1 [0114.607] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0x0 [0114.607] CloseHandle (hObject=0x444) returned 1 [0114.624] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\IEFlipAheadCache\\container.dat", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\IEFlipAheadCache\\container.dat", lpFilePart=0x0) returned 0x5e [0114.624] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0114.624] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\IEFlipAheadCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\ieflipaheadcache\\container.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0114.626] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb0e0) returned 1 [0114.626] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\IEFlipAheadCache\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\IEFlipAheadCache\\container.dat", lpFilePart=0x0) returned 0x5e [0114.626] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc200) returned 1 [0114.626] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\IEFlipAheadCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\ieflipaheadcache\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x3bc2e0 | out: lpFileInformation=0x3bc2e0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xb7924e99, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0xb7924e99, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0xb7924e99, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0114.627] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1c0) returned 1 [0114.627] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\IEFlipAheadCache\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbd80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\IEFlipAheadCache\\container.dat", lpFilePart=0x0) returned 0x5e [0114.627] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc200) returned 1 [0114.627] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\IEFlipAheadCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\ieflipaheadcache\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x2356d68 | out: lpFileInformation=0x2356d68*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xb7924e99, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0xb7924e99, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0xb7924e99, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0114.627] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1c0) returned 1 [0114.627] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\IEFlipAheadCache\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\IEFlipAheadCache\\container.dat", lpFilePart=0x0) returned 0x5e [0114.627] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0c0) returned 1 [0114.627] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\IEFlipAheadCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\ieflipaheadcache\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0114.627] GetFileType (hFile=0x444) returned 0x1 [0114.627] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc030) returned 1 [0114.627] GetFileType (hFile=0x444) returned 0x1 [0114.627] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc258 | out: lpFileSizeHigh=0x3bc258*=0x0) returned 0x0 [0114.627] CloseHandle (hObject=0x444) returned 1 [0114.670] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\IEFlipAheadCache\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\IEFlipAheadCache\\container.dat", lpFilePart=0x0) returned 0x5e [0114.670] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0c0) returned 1 [0114.670] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\IEFlipAheadCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\ieflipaheadcache\\container.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0114.672] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8b50) returned 1 [0114.672] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0114.672] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\imagestore", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\imagestore", lpFilePart=0x0) returned 0x4a [0114.673] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\imagestore\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\imagestore\\", lpFilePart=0x0) returned 0x4b [0114.673] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\imagestore\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d78b0 [0114.673] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0114.673] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0114.673] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0114.673] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0114.673] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0114.674] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0114.674] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0114.674] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0114.674] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\imagestore", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\imagestore", lpFilePart=0x0) returned 0x4a [0114.674] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\imagestore\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\imagestore\\", lpFilePart=0x0) returned 0x4b [0114.674] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\imagestore\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7370 [0114.674] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0114.674] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0114.674] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0114.674] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0114.674] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0114.674] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0114.674] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0114.674] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0114.675] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\imagestore\\dc8m5rh", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\imagestore\\dc8m5rh", lpFilePart=0x0) returned 0x52 [0114.675] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\imagestore\\dc8m5rh\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\imagestore\\dc8m5rh\\", lpFilePart=0x0) returned 0x53 [0114.675] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\imagestore\\dc8m5rh\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d79d0 [0114.675] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0114.675] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0114.675] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0114.675] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0114.675] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0114.675] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0114.675] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\imagestore\\dc8m5rh", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\imagestore\\dc8m5rh", lpFilePart=0x0) returned 0x52 [0114.675] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\imagestore\\dc8m5rh\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\imagestore\\dc8m5rh\\", lpFilePart=0x0) returned 0x53 [0114.675] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\imagestore\\dc8m5rh\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7a30 [0114.676] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0114.676] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0114.676] FindClose (in: hFindFile=0x5d7a30 | out: hFindFile=0x5d7a30) returned 1 [0114.676] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0114.676] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0114.676] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0114.676] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\imagestore\\sl72e5n", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\imagestore\\sl72e5n", lpFilePart=0x0) returned 0x52 [0114.676] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\imagestore\\sl72e5n\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\imagestore\\sl72e5n\\", lpFilePart=0x0) returned 0x53 [0114.676] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\imagestore\\sl72e5n\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d81b0 [0114.677] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0114.677] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0114.677] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0114.678] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0114.678] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0114.678] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0114.678] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0114.678] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\imagestore\\sl72e5n", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\imagestore\\sl72e5n", lpFilePart=0x0) returned 0x52 [0114.678] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\imagestore\\sl72e5n\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\imagestore\\sl72e5n\\", lpFilePart=0x0) returned 0x53 [0114.678] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\imagestore\\sl72e5n\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7cd0 [0114.678] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0114.678] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0114.678] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0114.678] FindClose (in: hFindFile=0x5d7cd0 | out: hFindFile=0x5d7cd0) returned 1 [0114.678] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0114.679] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0114.679] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\imagestore\\sl72e5n\\imagestore.dat", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\imagestore\\sl72e5n\\imagestore.dat", lpFilePart=0x0) returned 0x61 [0114.679] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0114.679] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\imagestore\\sl72e5n\\imagestore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\imagestore\\sl72e5n\\imagestore.dat"), fInfoLevelId=0x0, lpFileInformation=0x21d3e30 | out: lpFileInformation=0x21d3e30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x934c79cd, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x934c79cd, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x5caef8a1, ftLastWriteTime.dwHighDateTime=0x1d35db9, nFileSizeHigh=0x0, nFileSizeLow=0x1614)) returned 1 [0114.679] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0114.679] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\imagestore\\sl72e5n\\imagestore.dat", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\imagestore\\sl72e5n\\imagestore.dat", lpFilePart=0x0) returned 0x61 [0114.679] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0114.680] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\imagestore\\sl72e5n\\imagestore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\imagestore\\sl72e5n\\imagestore.dat"), fInfoLevelId=0x0, lpFileInformation=0x21d3fb0 | out: lpFileInformation=0x21d3fb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x934c79cd, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x934c79cd, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x5caef8a1, ftLastWriteTime.dwHighDateTime=0x1d35db9, nFileSizeHigh=0x0, nFileSizeLow=0x1614)) returned 1 [0114.680] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0114.680] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\imagestore\\sl72e5n\\imagestore.dat", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\imagestore\\sl72e5n\\imagestore.dat", lpFilePart=0x0) returned 0x61 [0114.680] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0114.680] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\imagestore\\sl72e5n\\imagestore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\imagestore\\sl72e5n\\imagestore.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0114.680] GetFileType (hFile=0x444) returned 0x1 [0114.680] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0114.680] GetFileType (hFile=0x444) returned 0x1 [0114.681] ReadFile (in: hFile=0x444, lpBuffer=0x21d63e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x21d63e0*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0114.749] CloseHandle (hObject=0x444) returned 1 [0114.750] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\imagestore\\sl72e5n\\imagestore.dat", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\imagestore\\sl72e5n\\imagestore.dat", lpFilePart=0x0) returned 0x61 [0114.750] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0114.750] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\imagestore\\sl72e5n\\imagestore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\imagestore\\sl72e5n\\imagestore.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0114.750] GetFileType (hFile=0x444) returned 0x1 [0114.750] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0114.750] GetFileType (hFile=0x444) returned 0x1 [0114.750] WriteFile (in: hFile=0x444, lpBuffer=0x21d4110*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x21d4110*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0114.750] CloseHandle (hObject=0x444) returned 1 [0114.750] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\imagestore\\sl72e5n\\imagestore.dat", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\imagestore\\sl72e5n\\imagestore.dat", lpFilePart=0x0) returned 0x61 [0114.751] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\imagestore\\sl72e5n\\imagestore.dat.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\imagestore\\sl72e5n\\imagestore.dat.xuy", lpFilePart=0x0) returned 0x65 [0114.751] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0114.751] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\imagestore\\sl72e5n\\imagestore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\imagestore\\sl72e5n\\imagestore.dat"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x934c79cd, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x934c79cd, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x303e6f2a, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0114.751] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0114.751] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\imagestore\\sl72e5n\\imagestore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\imagestore\\sl72e5n\\imagestore.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\imagestore\\sl72e5n\\imagestore.dat.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\imagestore\\sl72e5n\\imagestore.dat.xuy")) returned 1 [0114.752] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0114.752] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery", lpFilePart=0x0) returned 0x48 [0114.752] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\", lpFilePart=0x0) returned 0x49 [0114.752] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d81b0 [0114.754] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0114.755] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0114.755] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0114.755] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0114.755] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0114.755] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0114.755] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0114.755] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0114.755] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery", lpFilePart=0x0) returned 0x48 [0114.755] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\", lpFilePart=0x0) returned 0x49 [0114.755] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7a90 [0114.755] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0114.755] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0114.756] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0114.756] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0114.756] FindClose (in: hFindFile=0x5d7a90 | out: hFindFile=0x5d7a90) returned 1 [0114.756] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0114.756] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0114.756] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0114.756] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Active", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Active", lpFilePart=0x0) returned 0x4f [0114.756] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Active\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Active\\", lpFilePart=0x0) returned 0x50 [0114.756] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Active\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d78b0 [0114.756] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0114.756] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0114.756] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0114.756] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0114.757] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0114.757] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0114.757] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Active", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Active", lpFilePart=0x0) returned 0x4f [0114.757] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Active\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Active\\", lpFilePart=0x0) returned 0x50 [0114.757] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Active\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d73d0 [0114.757] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0114.757] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0114.757] FindClose (in: hFindFile=0x5d73d0 | out: hFindFile=0x5d73d0) returned 1 [0114.757] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0114.757] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0114.757] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0114.757] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active", lpFilePart=0x0) returned 0x54 [0114.757] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\", lpFilePart=0x0) returned 0x55 [0114.757] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d73d0 [0114.760] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0114.760] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0114.760] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0114.760] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0114.760] FindClose (in: hFindFile=0x5d73d0 | out: hFindFile=0x5d73d0) returned 1 [0114.761] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0114.761] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0114.761] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0114.761] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active", lpFilePart=0x0) returned 0x54 [0114.761] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\", lpFilePart=0x0) returned 0x55 [0114.761] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d79d0 [0114.762] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0114.762] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0114.762] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0114.762] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0114.762] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0114.763] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0114.763] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0114.763] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\RecoveryStore.{63E26EB7-6816-11E7-9BD2-C40142ECDE47}.dat", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\RecoveryStore.{63E26EB7-6816-11E7-9BD2-C40142ECDE47}.dat", lpFilePart=0x0) returned 0x8d [0114.763] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0114.763] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\RecoveryStore.{63E26EB7-6816-11E7-9BD2-C40142ECDE47}.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\recovery\\last active\\recoverystore.{63e26eb7-6816-11e7-9bd2-c40142ecde47}.dat"), fInfoLevelId=0x0, lpFileInformation=0x22593e0 | out: lpFileInformation=0x22593e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26af7b0c, ftCreationTime.dwHighDateTime=0x1d2fc23, ftLastAccessTime.dwLowDateTime=0x26af7b0c, ftLastAccessTime.dwHighDateTime=0x1d2fc23, ftLastWriteTime.dwLowDateTime=0x5c7ce725, ftLastWriteTime.dwHighDateTime=0x1d35db9, nFileSizeHigh=0x0, nFileSizeLow=0x1a00)) returned 1 [0114.764] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0114.764] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\RecoveryStore.{63E26EB7-6816-11E7-9BD2-C40142ECDE47}.dat", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\RecoveryStore.{63E26EB7-6816-11E7-9BD2-C40142ECDE47}.dat", lpFilePart=0x0) returned 0x8d [0114.764] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0114.764] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\RecoveryStore.{63E26EB7-6816-11E7-9BD2-C40142ECDE47}.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\recovery\\last active\\recoverystore.{63e26eb7-6816-11e7-9bd2-c40142ecde47}.dat"), fInfoLevelId=0x0, lpFileInformation=0x2259610 | out: lpFileInformation=0x2259610*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26af7b0c, ftCreationTime.dwHighDateTime=0x1d2fc23, ftLastAccessTime.dwLowDateTime=0x26af7b0c, ftLastAccessTime.dwHighDateTime=0x1d2fc23, ftLastWriteTime.dwLowDateTime=0x5c7ce725, ftLastWriteTime.dwHighDateTime=0x1d35db9, nFileSizeHigh=0x0, nFileSizeLow=0x1a00)) returned 1 [0114.764] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0114.764] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\RecoveryStore.{63E26EB7-6816-11E7-9BD2-C40142ECDE47}.dat", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\RecoveryStore.{63E26EB7-6816-11E7-9BD2-C40142ECDE47}.dat", lpFilePart=0x0) returned 0x8d [0114.764] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0114.764] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\RecoveryStore.{63E26EB7-6816-11E7-9BD2-C40142ECDE47}.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\recovery\\last active\\recoverystore.{63e26eb7-6816-11e7-9bd2-c40142ecde47}.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0114.765] GetFileType (hFile=0x444) returned 0x1 [0114.765] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0114.765] GetFileType (hFile=0x444) returned 0x1 [0114.765] ReadFile (in: hFile=0x444, lpBuffer=0x225bba0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x225bba0*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0114.787] CloseHandle (hObject=0x444) returned 1 [0114.788] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\RecoveryStore.{63E26EB7-6816-11E7-9BD2-C40142ECDE47}.dat", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\RecoveryStore.{63E26EB7-6816-11E7-9BD2-C40142ECDE47}.dat", lpFilePart=0x0) returned 0x8d [0114.788] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0114.788] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\RecoveryStore.{63E26EB7-6816-11E7-9BD2-C40142ECDE47}.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\recovery\\last active\\recoverystore.{63e26eb7-6816-11e7-9bd2-c40142ecde47}.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0114.788] GetFileType (hFile=0x444) returned 0x1 [0114.788] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0114.788] GetFileType (hFile=0x444) returned 0x1 [0114.788] WriteFile (in: hFile=0x444, lpBuffer=0x2259820*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x2259820*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0114.788] CloseHandle (hObject=0x444) returned 1 [0114.791] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\RecoveryStore.{63E26EB7-6816-11E7-9BD2-C40142ECDE47}.dat", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\RecoveryStore.{63E26EB7-6816-11E7-9BD2-C40142ECDE47}.dat", lpFilePart=0x0) returned 0x8d [0114.791] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\RecoveryStore.{63E26EB7-6816-11E7-9BD2-C40142ECDE47}.dat.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\RecoveryStore.{63E26EB7-6816-11E7-9BD2-C40142ECDE47}.dat.xuy", lpFilePart=0x0) returned 0x91 [0114.791] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0114.791] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\RecoveryStore.{63E26EB7-6816-11E7-9BD2-C40142ECDE47}.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\recovery\\last active\\recoverystore.{63e26eb7-6816-11e7-9bd2-c40142ecde47}.dat"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26af7b0c, ftCreationTime.dwHighDateTime=0x1d2fc23, ftLastAccessTime.dwLowDateTime=0x26af7b0c, ftLastAccessTime.dwHighDateTime=0x1d2fc23, ftLastWriteTime.dwLowDateTime=0x304333f0, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0114.791] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0114.791] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\RecoveryStore.{63E26EB7-6816-11E7-9BD2-C40142ECDE47}.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\recovery\\last active\\recoverystore.{63e26eb7-6816-11e7-9bd2-c40142ecde47}.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\RecoveryStore.{63E26EB7-6816-11E7-9BD2-C40142ECDE47}.dat.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\recovery\\last active\\recoverystore.{63e26eb7-6816-11e7-9bd2-c40142ecde47}.dat.xuy")) returned 1 [0114.792] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\{94C50253-C9AC-11E7-9BDD-C40142ECDE47}.dat", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\{94C50253-C9AC-11E7-9BDD-C40142ECDE47}.dat", lpFilePart=0x0) returned 0x7f [0114.792] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0114.793] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\{94C50253-C9AC-11E7-9BDD-C40142ECDE47}.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\recovery\\last active\\{94c50253-c9ac-11e7-9bdd-c40142ecde47}.dat"), fInfoLevelId=0x0, lpFileInformation=0x22d81d0 | out: lpFileInformation=0x22d81d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c782278, ftCreationTime.dwHighDateTime=0x1d35db9, ftLastAccessTime.dwLowDateTime=0x5c782278, ftLastAccessTime.dwHighDateTime=0x1d35db9, ftLastWriteTime.dwLowDateTime=0x5c7ce725, ftLastWriteTime.dwHighDateTime=0x1d35db9, nFileSizeHigh=0x0, nFileSizeLow=0x3200)) returned 1 [0114.793] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0114.793] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\{94C50253-C9AC-11E7-9BDD-C40142ECDE47}.dat", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\{94C50253-C9AC-11E7-9BDD-C40142ECDE47}.dat", lpFilePart=0x0) returned 0x7f [0114.793] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0114.793] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\{94C50253-C9AC-11E7-9BDD-C40142ECDE47}.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\recovery\\last active\\{94c50253-c9ac-11e7-9bdd-c40142ecde47}.dat"), fInfoLevelId=0x0, lpFileInformation=0x22d83c0 | out: lpFileInformation=0x22d83c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c782278, ftCreationTime.dwHighDateTime=0x1d35db9, ftLastAccessTime.dwLowDateTime=0x5c782278, ftLastAccessTime.dwHighDateTime=0x1d35db9, ftLastWriteTime.dwLowDateTime=0x5c7ce725, ftLastWriteTime.dwHighDateTime=0x1d35db9, nFileSizeHigh=0x0, nFileSizeLow=0x3200)) returned 1 [0114.793] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0114.793] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\{94C50253-C9AC-11E7-9BDD-C40142ECDE47}.dat", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\{94C50253-C9AC-11E7-9BDD-C40142ECDE47}.dat", lpFilePart=0x0) returned 0x7f [0114.793] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0114.793] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\{94C50253-C9AC-11E7-9BDD-C40142ECDE47}.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\recovery\\last active\\{94c50253-c9ac-11e7-9bdd-c40142ecde47}.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0114.794] GetFileType (hFile=0x444) returned 0x1 [0114.794] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0114.794] GetFileType (hFile=0x444) returned 0x1 [0114.794] ReadFile (in: hFile=0x444, lpBuffer=0x22da8d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x22da8d0*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0114.806] CloseHandle (hObject=0x444) returned 1 [0114.806] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\{94C50253-C9AC-11E7-9BDD-C40142ECDE47}.dat", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\{94C50253-C9AC-11E7-9BDD-C40142ECDE47}.dat", lpFilePart=0x0) returned 0x7f [0114.806] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0114.806] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\{94C50253-C9AC-11E7-9BDD-C40142ECDE47}.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\recovery\\last active\\{94c50253-c9ac-11e7-9bdd-c40142ecde47}.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0114.807] GetFileType (hFile=0x444) returned 0x1 [0114.807] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0114.807] GetFileType (hFile=0x444) returned 0x1 [0114.807] WriteFile (in: hFile=0x444, lpBuffer=0x22d8590*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x22d8590*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0114.807] CloseHandle (hObject=0x444) returned 1 [0114.807] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\{94C50253-C9AC-11E7-9BDD-C40142ECDE47}.dat", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\{94C50253-C9AC-11E7-9BDD-C40142ECDE47}.dat", lpFilePart=0x0) returned 0x7f [0114.807] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\{94C50253-C9AC-11E7-9BDD-C40142ECDE47}.dat.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\{94C50253-C9AC-11E7-9BDD-C40142ECDE47}.dat.xuy", lpFilePart=0x0) returned 0x83 [0114.807] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0114.807] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\{94C50253-C9AC-11E7-9BDD-C40142ECDE47}.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\recovery\\last active\\{94c50253-c9ac-11e7-9bdd-c40142ecde47}.dat"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c782278, ftCreationTime.dwHighDateTime=0x1d35db9, ftLastAccessTime.dwLowDateTime=0x5c782278, ftLastAccessTime.dwHighDateTime=0x1d35db9, ftLastWriteTime.dwLowDateTime=0x3047f963, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x3200)) returned 1 [0114.807] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0114.807] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\{94C50253-C9AC-11E7-9BDD-C40142ECDE47}.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\recovery\\last active\\{94c50253-c9ac-11e7-9bdd-c40142ecde47}.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\{94C50253-C9AC-11E7-9BDD-C40142ECDE47}.dat.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\recovery\\last active\\{94c50253-c9ac-11e7-9bdd-c40142ecde47}.dat.xuy")) returned 1 [0114.808] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0114.808] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\TabRoaming", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\TabRoaming", lpFilePart=0x0) returned 0x4a [0114.808] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\TabRoaming\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\TabRoaming\\", lpFilePart=0x0) returned 0x4b [0114.808] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\TabRoaming\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d79d0 [0114.809] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0114.809] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0114.809] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0114.809] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0114.809] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0114.809] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0114.809] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\TabRoaming", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\TabRoaming", lpFilePart=0x0) returned 0x4a [0114.809] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\TabRoaming\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\TabRoaming\\", lpFilePart=0x0) returned 0x4b [0114.809] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\TabRoaming\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7670 [0114.809] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0114.809] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0114.810] FindClose (in: hFindFile=0x5d7670 | out: hFindFile=0x5d7670) returned 1 [0114.810] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0114.810] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0114.810] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0114.810] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Tiles", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Tiles", lpFilePart=0x0) returned 0x45 [0114.810] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Tiles\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Tiles\\", lpFilePart=0x0) returned 0x46 [0114.810] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Tiles\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7f10 [0114.810] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0114.810] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0114.810] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0114.810] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0114.811] FindClose (in: hFindFile=0x5d7f10 | out: hFindFile=0x5d7f10) returned 1 [0114.811] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0114.811] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0114.811] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0114.811] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Tiles", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Tiles", lpFilePart=0x0) returned 0x45 [0114.811] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Tiles\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Tiles\\", lpFilePart=0x0) returned 0x46 [0114.811] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Tiles\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7370 [0114.811] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0114.811] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0114.811] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0114.811] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0114.811] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0114.812] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0114.812] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0114.812] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0114.812] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Tiles\\pin-314712940", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Tiles\\pin-314712940", lpFilePart=0x0) returned 0x53 [0114.812] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Tiles\\pin-314712940\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Tiles\\pin-314712940\\", lpFilePart=0x0) returned 0x54 [0114.812] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Tiles\\pin-314712940\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d78b0 [0114.812] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0114.812] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0114.812] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0114.812] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0114.812] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0114.812] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0114.812] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0114.812] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Tiles\\pin-314712940", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Tiles\\pin-314712940", lpFilePart=0x0) returned 0x53 [0114.813] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Tiles\\pin-314712940\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Tiles\\pin-314712940\\", lpFilePart=0x0) returned 0x54 [0114.813] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Tiles\\pin-314712940\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7c70 [0114.813] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0114.813] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0114.813] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0114.813] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0114.813] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0114.813] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0114.813] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Tiles\\pin-314712940\\msapplication.xml", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Tiles\\pin-314712940\\msapplication.xml", lpFilePart=0x0) returned 0x65 [0114.813] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0114.813] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Tiles\\pin-314712940\\msapplication.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\tiles\\pin-314712940\\msapplication.xml"), fInfoLevelId=0x0, lpFileInformation=0x235d058 | out: lpFileInformation=0x235d058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b47cb7c, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x9b47cb7c, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x6549e5a7, ftLastWriteTime.dwHighDateTime=0x1d35db9, nFileSizeHigh=0x0, nFileSizeLow=0x1a1)) returned 1 [0114.814] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0114.814] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Tiles\\pin-314712940\\msapplication.xml", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Tiles\\pin-314712940\\msapplication.xml", lpFilePart=0x0) returned 0x65 [0114.814] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0114.814] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Tiles\\pin-314712940\\msapplication.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\tiles\\pin-314712940\\msapplication.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0114.814] GetFileType (hFile=0x444) returned 0x1 [0114.814] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0114.814] GetFileType (hFile=0x444) returned 0x1 [0114.814] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x1a1 [0114.814] ReadFile (in: hFile=0x444, lpBuffer=0x235d538, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x235d538*, lpNumberOfBytesRead=0x3be6a8*=0x1a1, lpOverlapped=0x0) returned 1 [0114.818] CloseHandle (hObject=0x444) returned 1 [0114.866] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Tiles\\pin-314712940\\msapplication.xml", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Tiles\\pin-314712940\\msapplication.xml", lpFilePart=0x0) returned 0x65 [0114.866] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0114.866] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Tiles\\pin-314712940\\msapplication.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\tiles\\pin-314712940\\msapplication.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0114.868] GetFileType (hFile=0x444) returned 0x1 [0114.868] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0114.868] GetFileType (hFile=0x444) returned 0x1 [0114.868] WriteFile (in: hFile=0x444, lpBuffer=0x21d4b80*, nNumberOfBytesToWrite=0x1b0, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x21d4b80*, lpNumberOfBytesWritten=0x3be5b8*=0x1b0, lpOverlapped=0x0) returned 1 [0114.869] CloseHandle (hObject=0x444) returned 1 [0114.869] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Tiles\\pin-314712940\\msapplication.xml", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Tiles\\pin-314712940\\msapplication.xml", lpFilePart=0x0) returned 0x65 [0114.869] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Tiles\\pin-314712940\\msapplication.xml.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Tiles\\pin-314712940\\msapplication.xml.xuy", lpFilePart=0x0) returned 0x69 [0114.869] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0114.869] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Tiles\\pin-314712940\\msapplication.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\tiles\\pin-314712940\\msapplication.xml"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b47cb7c, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x9b47cb7c, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x305181e3, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x1b0)) returned 1 [0114.869] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0114.869] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Tiles\\pin-314712940\\msapplication.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\tiles\\pin-314712940\\msapplication.xml"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Tiles\\pin-314712940\\msapplication.xml.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\tiles\\pin-314712940\\msapplication.xml.xuy")) returned 1 [0114.870] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0114.870] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Tiles\\pin7226654530", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Tiles\\pin7226654530", lpFilePart=0x0) returned 0x53 [0114.871] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Tiles\\pin7226654530\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Tiles\\pin7226654530\\", lpFilePart=0x0) returned 0x54 [0114.871] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Tiles\\pin7226654530\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7550 [0114.871] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0114.871] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0114.871] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0114.871] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0114.871] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0114.871] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0114.871] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Tiles\\pin7226654530", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Tiles\\pin7226654530", lpFilePart=0x0) returned 0x53 [0114.871] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Tiles\\pin7226654530\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Tiles\\pin7226654530\\", lpFilePart=0x0) returned 0x54 [0114.872] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Tiles\\pin7226654530\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7d90 [0114.872] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0114.872] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0114.872] FindClose (in: hFindFile=0x5d7d90 | out: hFindFile=0x5d7d90) returned 1 [0114.872] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0114.872] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0114.872] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0114.872] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Tracking Protection", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Tracking Protection", lpFilePart=0x0) returned 0x53 [0114.872] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Tracking Protection\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Tracking Protection\\", lpFilePart=0x0) returned 0x54 [0114.872] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Tracking Protection\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d78b0 [0114.873] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0114.873] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0114.873] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0114.873] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0114.873] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0114.873] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0114.873] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Tracking Protection", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Tracking Protection", lpFilePart=0x0) returned 0x53 [0114.873] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Tracking Protection\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Tracking Protection\\", lpFilePart=0x0) returned 0x54 [0114.873] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Tracking Protection\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d79d0 [0114.873] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0114.873] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0114.873] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0114.874] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0114.874] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0114.874] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0114.874] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\VersionManager", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\VersionManager", lpFilePart=0x0) returned 0x4e [0114.874] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\VersionManager\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\VersionManager\\", lpFilePart=0x0) returned 0x4f [0114.874] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\VersionManager\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7d30 [0114.874] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0114.874] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0114.874] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0114.874] FindClose (in: hFindFile=0x5d7d30 | out: hFindFile=0x5d7d30) returned 1 [0114.874] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0114.874] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0114.874] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0114.874] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\VersionManager", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\VersionManager", lpFilePart=0x0) returned 0x4e [0114.874] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\VersionManager\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\VersionManager\\", lpFilePart=0x0) returned 0x4f [0114.875] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\VersionManager\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d73d0 [0114.875] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0114.875] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0114.875] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0114.875] FindClose (in: hFindFile=0x5d73d0 | out: hFindFile=0x5d73d0) returned 1 [0114.875] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0114.875] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0114.875] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\VersionManager\\versionlist.xml", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\VersionManager\\versionlist.xml", lpFilePart=0x0) returned 0x5e [0114.875] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0114.875] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\VersionManager\\versionlist.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\versionmanager\\versionlist.xml"), fInfoLevelId=0x0, lpFileInformation=0x21dbac8 | out: lpFileInformation=0x21dbac8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62ea748a, ftCreationTime.dwHighDateTime=0x1d35db9, ftLastAccessTime.dwLowDateTime=0x62ea748a, ftLastAccessTime.dwHighDateTime=0x1d35db9, ftLastWriteTime.dwLowDateTime=0x62ea748a, ftLastWriteTime.dwHighDateTime=0x1d35db9, nFileSizeHigh=0x0, nFileSizeLow=0x3866)) returned 1 [0114.875] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0114.875] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\VersionManager\\versionlist.xml", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\VersionManager\\versionlist.xml", lpFilePart=0x0) returned 0x5e [0114.875] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0114.876] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\VersionManager\\versionlist.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\versionmanager\\versionlist.xml"), fInfoLevelId=0x0, lpFileInformation=0x21dbc40 | out: lpFileInformation=0x21dbc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62ea748a, ftCreationTime.dwHighDateTime=0x1d35db9, ftLastAccessTime.dwLowDateTime=0x62ea748a, ftLastAccessTime.dwHighDateTime=0x1d35db9, ftLastWriteTime.dwLowDateTime=0x62ea748a, ftLastWriteTime.dwHighDateTime=0x1d35db9, nFileSizeHigh=0x0, nFileSizeLow=0x3866)) returned 1 [0114.876] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0114.876] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\VersionManager\\versionlist.xml", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\VersionManager\\versionlist.xml", lpFilePart=0x0) returned 0x5e [0114.876] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0114.876] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\VersionManager\\versionlist.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\versionmanager\\versionlist.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0114.876] GetFileType (hFile=0x444) returned 0x1 [0114.876] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0114.876] GetFileType (hFile=0x444) returned 0x1 [0114.876] ReadFile (in: hFile=0x444, lpBuffer=0x21de060, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x21de060*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0114.889] CloseHandle (hObject=0x444) returned 1 [0114.889] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\VersionManager\\versionlist.xml", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\VersionManager\\versionlist.xml", lpFilePart=0x0) returned 0x5e [0114.889] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0114.889] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\VersionManager\\versionlist.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\versionmanager\\versionlist.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0114.890] GetFileType (hFile=0x444) returned 0x1 [0114.890] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0114.890] GetFileType (hFile=0x444) returned 0x1 [0114.890] WriteFile (in: hFile=0x444, lpBuffer=0x21dbd98*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x21dbd98*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0114.890] CloseHandle (hObject=0x444) returned 1 [0114.890] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\VersionManager\\versionlist.xml", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\VersionManager\\versionlist.xml", lpFilePart=0x0) returned 0x5e [0114.890] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\VersionManager\\versionlist.xml.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\VersionManager\\versionlist.xml.xuy", lpFilePart=0x0) returned 0x62 [0114.890] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0114.890] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\VersionManager\\versionlist.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\versionmanager\\versionlist.xml"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62ea748a, ftCreationTime.dwHighDateTime=0x1d35db9, ftLastAccessTime.dwLowDateTime=0x62ea748a, ftLastAccessTime.dwHighDateTime=0x1d35db9, ftLastWriteTime.dwLowDateTime=0x3053e5ba, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x3866)) returned 1 [0114.890] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0114.890] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\VersionManager\\versionlist.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\versionmanager\\versionlist.xml"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\VersionManager\\versionlist.xml.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\versionmanager\\versionlist.xml.xuy")) returned 1 [0114.892] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0114.892] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player", lpFilePart=0x0) returned 0x3a [0114.892] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\", lpFilePart=0x0) returned 0x3b [0114.892] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d78b0 [0114.892] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0114.892] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0114.893] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0114.893] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0114.893] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0114.893] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0114.893] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0114.893] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0114.893] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player", lpFilePart=0x0) returned 0x3a [0114.893] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\", lpFilePart=0x0) returned 0x3b [0114.893] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d7370 [0114.893] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0114.893] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0114.893] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0114.894] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0114.894] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0114.894] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0114.894] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0114.894] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0114.894] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists", lpFilePart=0x0) returned 0x49 [0114.894] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\", lpFilePart=0x0) returned 0x4a [0114.894] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7a30 [0114.894] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0114.894] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0114.894] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0114.895] FindClose (in: hFindFile=0x5d7a30 | out: hFindFile=0x5d7a30) returned 1 [0114.895] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0114.895] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0114.895] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0114.895] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists", lpFilePart=0x0) returned 0x49 [0114.895] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\", lpFilePart=0x0) returned 0x4a [0114.895] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7a30 [0114.895] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0114.895] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0114.895] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0114.895] FindClose (in: hFindFile=0x5d7a30 | out: hFindFile=0x5d7a30) returned 1 [0114.895] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0114.895] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0114.895] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0114.895] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US", lpFilePart=0x0) returned 0x4f [0114.895] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\", lpFilePart=0x0) returned 0x50 [0114.896] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d81b0 [0114.898] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0114.898] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0114.898] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0114.898] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0114.898] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0114.898] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0114.898] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0114.899] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US", lpFilePart=0x0) returned 0x4f [0114.899] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\", lpFilePart=0x0) returned 0x50 [0114.899] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d78b0 [0114.899] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0114.899] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0114.899] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0114.899] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0114.899] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0114.899] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0114.899] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0114.899] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376", lpFilePart=0x0) returned 0x58 [0114.899] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\", lpFilePart=0x0) returned 0x59 [0114.899] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d81b0 [0114.906] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0114.906] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0114.906] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0114.906] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0114.906] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0114.906] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0114.907] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0114.907] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0114.907] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0114.907] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0114.907] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0114.907] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0114.907] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0114.907] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0114.907] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0114.908] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0114.908] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0114.908] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0114.908] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376", lpFilePart=0x0) returned 0x58 [0114.908] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\", lpFilePart=0x0) returned 0x59 [0114.908] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d7550 [0114.909] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0114.909] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0114.909] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0114.910] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0114.910] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0114.910] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0114.910] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0114.910] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0114.910] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0114.910] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0114.910] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0114.911] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0114.911] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0114.911] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0114.911] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0114.912] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0114.912] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0114.912] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\01_Music_auto_rated_at_5_stars.wpl", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\01_Music_auto_rated_at_5_stars.wpl", lpFilePart=0x0) returned 0x7b [0114.912] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0114.912] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\01_Music_auto_rated_at_5_stars.wpl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00009376\\01_music_auto_rated_at_5_stars.wpl"), fInfoLevelId=0x0, lpFileInformation=0x2266d50 | out: lpFileInformation=0x2266d50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xacc19ac7, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xacc19ac7, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xacc19ac7, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x414)) returned 1 [0114.913] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0114.913] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\01_Music_auto_rated_at_5_stars.wpl", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\01_Music_auto_rated_at_5_stars.wpl", lpFilePart=0x0) returned 0x7b [0114.913] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0114.913] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\01_Music_auto_rated_at_5_stars.wpl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00009376\\01_music_auto_rated_at_5_stars.wpl"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0114.913] GetFileType (hFile=0x444) returned 0x1 [0114.913] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0114.913] GetFileType (hFile=0x444) returned 0x1 [0114.913] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be708 | out: lpFileSizeHigh=0x3be708*=0x0) returned 0x414 [0114.913] ReadFile (in: hFile=0x444, lpBuffer=0x2267530, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be638, lpOverlapped=0x0 | out: lpBuffer=0x2267530*, lpNumberOfBytesRead=0x3be638*=0x414, lpOverlapped=0x0) returned 1 [0114.949] CloseHandle (hObject=0x444) returned 1 [0114.960] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\01_Music_auto_rated_at_5_stars.wpl", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\01_Music_auto_rated_at_5_stars.wpl", lpFilePart=0x0) returned 0x7b [0114.960] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0114.960] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\01_Music_auto_rated_at_5_stars.wpl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00009376\\01_music_auto_rated_at_5_stars.wpl"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0114.963] GetFileType (hFile=0x444) returned 0x1 [0114.963] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0114.963] GetFileType (hFile=0x444) returned 0x1 [0114.963] WriteFile (in: hFile=0x444, lpBuffer=0x22dfa40*, nNumberOfBytesToWrite=0x420, lpNumberOfBytesWritten=0x3be548, lpOverlapped=0x0 | out: lpBuffer=0x22dfa40*, lpNumberOfBytesWritten=0x3be548*=0x420, lpOverlapped=0x0) returned 1 [0114.964] CloseHandle (hObject=0x444) returned 1 [0114.964] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\01_Music_auto_rated_at_5_stars.wpl", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\01_Music_auto_rated_at_5_stars.wpl", lpFilePart=0x0) returned 0x7b [0114.964] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\01_Music_auto_rated_at_5_stars.wpl.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\01_Music_auto_rated_at_5_stars.wpl.xuy", lpFilePart=0x0) returned 0x7f [0114.964] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0114.964] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\01_Music_auto_rated_at_5_stars.wpl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00009376\\01_music_auto_rated_at_5_stars.wpl"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xacc19ac7, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xacc19ac7, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x305fd0a4, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x420)) returned 1 [0114.964] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0114.964] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\01_Music_auto_rated_at_5_stars.wpl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00009376\\01_music_auto_rated_at_5_stars.wpl"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\01_Music_auto_rated_at_5_stars.wpl.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00009376\\01_music_auto_rated_at_5_stars.wpl.xuy")) returned 1 [0114.965] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\02_Music_added_in_the_last_month.wpl", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\02_Music_added_in_the_last_month.wpl", lpFilePart=0x0) returned 0x7d [0114.965] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0114.965] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\02_Music_added_in_the_last_month.wpl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00009376\\02_music_added_in_the_last_month.wpl"), fInfoLevelId=0x0, lpFileInformation=0x22e0de0 | out: lpFileInformation=0x22e0de0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xacc19ac7, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xacc19ac7, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xacc19ac7, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x4ff)) returned 1 [0114.966] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0114.966] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\02_Music_added_in_the_last_month.wpl", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\02_Music_added_in_the_last_month.wpl", lpFilePart=0x0) returned 0x7d [0114.966] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0114.966] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\02_Music_added_in_the_last_month.wpl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00009376\\02_music_added_in_the_last_month.wpl"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0114.966] GetFileType (hFile=0x444) returned 0x1 [0114.966] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0114.966] GetFileType (hFile=0x444) returned 0x1 [0114.966] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be708 | out: lpFileSizeHigh=0x3be708*=0x0) returned 0x4ff [0114.966] ReadFile (in: hFile=0x444, lpBuffer=0x22e16c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be638, lpOverlapped=0x0 | out: lpBuffer=0x22e16c8*, lpNumberOfBytesRead=0x3be638*=0x4ff, lpOverlapped=0x0) returned 1 [0114.967] CloseHandle (hObject=0x444) returned 1 [0114.979] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\02_Music_added_in_the_last_month.wpl", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\02_Music_added_in_the_last_month.wpl", lpFilePart=0x0) returned 0x7d [0114.980] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0114.980] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\02_Music_added_in_the_last_month.wpl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00009376\\02_music_added_in_the_last_month.wpl"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0114.981] GetFileType (hFile=0x444) returned 0x1 [0114.981] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0114.981] GetFileType (hFile=0x444) returned 0x1 [0114.981] WriteFile (in: hFile=0x444, lpBuffer=0x235a040*, nNumberOfBytesToWrite=0x500, lpNumberOfBytesWritten=0x3be548, lpOverlapped=0x0 | out: lpBuffer=0x235a040*, lpNumberOfBytesWritten=0x3be548*=0x500, lpOverlapped=0x0) returned 1 [0114.982] CloseHandle (hObject=0x444) returned 1 [0114.982] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\02_Music_added_in_the_last_month.wpl", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\02_Music_added_in_the_last_month.wpl", lpFilePart=0x0) returned 0x7d [0114.982] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\02_Music_added_in_the_last_month.wpl.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\02_Music_added_in_the_last_month.wpl.xuy", lpFilePart=0x0) returned 0x81 [0114.982] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0114.982] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\02_Music_added_in_the_last_month.wpl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00009376\\02_music_added_in_the_last_month.wpl"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xacc19ac7, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xacc19ac7, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x30623761, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x500)) returned 1 [0114.983] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0114.983] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\02_Music_added_in_the_last_month.wpl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00009376\\02_music_added_in_the_last_month.wpl"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\02_Music_added_in_the_last_month.wpl.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00009376\\02_music_added_in_the_last_month.wpl.xuy")) returned 1 [0114.984] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\03_Music_rated_at_4_or_5_stars.wpl", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\03_Music_rated_at_4_or_5_stars.wpl", lpFilePart=0x0) returned 0x7b [0114.984] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0114.984] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\03_Music_rated_at_4_or_5_stars.wpl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00009376\\03_music_rated_at_4_or_5_stars.wpl"), fInfoLevelId=0x0, lpFileInformation=0x235b3f8 | out: lpFileInformation=0x235b3f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xacc19ac7, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xacc19ac7, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xacc19ac7, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x4f3)) returned 1 [0114.985] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0114.985] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\03_Music_rated_at_4_or_5_stars.wpl", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\03_Music_rated_at_4_or_5_stars.wpl", lpFilePart=0x0) returned 0x7b [0114.985] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0114.985] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\03_Music_rated_at_4_or_5_stars.wpl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00009376\\03_music_rated_at_4_or_5_stars.wpl"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0114.986] GetFileType (hFile=0x444) returned 0x1 [0114.986] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0114.986] GetFileType (hFile=0x444) returned 0x1 [0114.986] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be708 | out: lpFileSizeHigh=0x3be708*=0x0) returned 0x4f3 [0114.986] ReadFile (in: hFile=0x444, lpBuffer=0x235bcb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be638, lpOverlapped=0x0 | out: lpBuffer=0x235bcb8*, lpNumberOfBytesRead=0x3be638*=0x4f3, lpOverlapped=0x0) returned 1 [0114.987] CloseHandle (hObject=0x444) returned 1 [0115.028] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\03_Music_rated_at_4_or_5_stars.wpl", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\03_Music_rated_at_4_or_5_stars.wpl", lpFilePart=0x0) returned 0x7b [0115.028] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0115.028] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\03_Music_rated_at_4_or_5_stars.wpl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00009376\\03_music_rated_at_4_or_5_stars.wpl"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0115.029] GetFileType (hFile=0x444) returned 0x1 [0115.029] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0115.029] GetFileType (hFile=0x444) returned 0x1 [0115.030] WriteFile (in: hFile=0x444, lpBuffer=0x21d4be8*, nNumberOfBytesToWrite=0x500, lpNumberOfBytesWritten=0x3be548, lpOverlapped=0x0 | out: lpBuffer=0x21d4be8*, lpNumberOfBytesWritten=0x3be548*=0x500, lpOverlapped=0x0) returned 1 [0115.030] CloseHandle (hObject=0x444) returned 1 [0115.030] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\03_Music_rated_at_4_or_5_stars.wpl", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\03_Music_rated_at_4_or_5_stars.wpl", lpFilePart=0x0) returned 0x7b [0115.030] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\03_Music_rated_at_4_or_5_stars.wpl.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\03_Music_rated_at_4_or_5_stars.wpl.xuy", lpFilePart=0x0) returned 0x7f [0115.030] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0115.030] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\03_Music_rated_at_4_or_5_stars.wpl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00009376\\03_music_rated_at_4_or_5_stars.wpl"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xacc19ac7, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xacc19ac7, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x30695df4, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x500)) returned 1 [0115.031] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0115.031] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\03_Music_rated_at_4_or_5_stars.wpl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00009376\\03_music_rated_at_4_or_5_stars.wpl"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\03_Music_rated_at_4_or_5_stars.wpl.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00009376\\03_music_rated_at_4_or_5_stars.wpl.xuy")) returned 1 [0115.032] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\04_Music_played_in_the_last_month.wpl", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\04_Music_played_in_the_last_month.wpl", lpFilePart=0x0) returned 0x7e [0115.032] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0115.032] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\04_Music_played_in_the_last_month.wpl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00009376\\04_music_played_in_the_last_month.wpl"), fInfoLevelId=0x0, lpFileInformation=0x21d5f88 | out: lpFileInformation=0x21d5f88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xacc19ac7, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xacc19ac7, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xacc19ac7, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x504)) returned 1 [0115.032] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0115.032] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\04_Music_played_in_the_last_month.wpl", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\04_Music_played_in_the_last_month.wpl", lpFilePart=0x0) returned 0x7e [0115.032] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0115.032] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\04_Music_played_in_the_last_month.wpl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00009376\\04_music_played_in_the_last_month.wpl"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0115.032] GetFileType (hFile=0x444) returned 0x1 [0115.032] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0115.032] GetFileType (hFile=0x444) returned 0x1 [0115.032] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be708 | out: lpFileSizeHigh=0x3be708*=0x0) returned 0x504 [0115.032] ReadFile (in: hFile=0x444, lpBuffer=0x21d6878, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be638, lpOverlapped=0x0 | out: lpBuffer=0x21d6878*, lpNumberOfBytesRead=0x3be638*=0x504, lpOverlapped=0x0) returned 1 [0115.034] CloseHandle (hObject=0x444) returned 1 [0115.047] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\04_Music_played_in_the_last_month.wpl", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\04_Music_played_in_the_last_month.wpl", lpFilePart=0x0) returned 0x7e [0115.047] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0115.047] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\04_Music_played_in_the_last_month.wpl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00009376\\04_music_played_in_the_last_month.wpl"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0115.048] GetFileType (hFile=0x444) returned 0x1 [0115.048] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0115.048] GetFileType (hFile=0x444) returned 0x1 [0115.048] WriteFile (in: hFile=0x444, lpBuffer=0x224f248*, nNumberOfBytesToWrite=0x510, lpNumberOfBytesWritten=0x3be548, lpOverlapped=0x0 | out: lpBuffer=0x224f248*, lpNumberOfBytesWritten=0x3be548*=0x510, lpOverlapped=0x0) returned 1 [0115.049] CloseHandle (hObject=0x444) returned 1 [0115.049] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\04_Music_played_in_the_last_month.wpl", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\04_Music_played_in_the_last_month.wpl", lpFilePart=0x0) returned 0x7e [0115.049] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\04_Music_played_in_the_last_month.wpl.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\04_Music_played_in_the_last_month.wpl.xuy", lpFilePart=0x0) returned 0x82 [0115.049] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0115.050] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\04_Music_played_in_the_last_month.wpl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00009376\\04_music_played_in_the_last_month.wpl"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xacc19ac7, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xacc19ac7, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x306bbbe2, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x510)) returned 1 [0115.050] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0115.050] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\04_Music_played_in_the_last_month.wpl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00009376\\04_music_played_in_the_last_month.wpl"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\04_Music_played_in_the_last_month.wpl.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00009376\\04_music_played_in_the_last_month.wpl.xuy")) returned 1 [0115.051] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\05_Pictures_taken_in_the_last_month.wpl", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\05_Pictures_taken_in_the_last_month.wpl", lpFilePart=0x0) returned 0x80 [0115.051] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0115.051] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\05_Pictures_taken_in_the_last_month.wpl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00009376\\05_pictures_taken_in_the_last_month.wpl"), fInfoLevelId=0x0, lpFileInformation=0x2250600 | out: lpFileInformation=0x2250600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xacc19ac7, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xacc19ac7, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xacc19ac7, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x31d)) returned 1 [0115.051] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0115.051] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\05_Pictures_taken_in_the_last_month.wpl", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\05_Pictures_taken_in_the_last_month.wpl", lpFilePart=0x0) returned 0x80 [0115.051] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0115.051] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\05_Pictures_taken_in_the_last_month.wpl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00009376\\05_pictures_taken_in_the_last_month.wpl"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0115.051] GetFileType (hFile=0x444) returned 0x1 [0115.051] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0115.051] GetFileType (hFile=0x444) returned 0x1 [0115.051] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be708 | out: lpFileSizeHigh=0x3be708*=0x0) returned 0x31d [0115.051] ReadFile (in: hFile=0x444, lpBuffer=0x2250d18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be638, lpOverlapped=0x0 | out: lpBuffer=0x2250d18*, lpNumberOfBytesRead=0x3be638*=0x31d, lpOverlapped=0x0) returned 1 [0115.053] CloseHandle (hObject=0x444) returned 1 [0115.064] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\05_Pictures_taken_in_the_last_month.wpl", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\05_Pictures_taken_in_the_last_month.wpl", lpFilePart=0x0) returned 0x80 [0115.064] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0115.064] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\05_Pictures_taken_in_the_last_month.wpl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00009376\\05_pictures_taken_in_the_last_month.wpl"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0115.066] GetFileType (hFile=0x444) returned 0x1 [0115.066] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0115.066] GetFileType (hFile=0x444) returned 0x1 [0115.066] WriteFile (in: hFile=0x444, lpBuffer=0x22c8d38*, nNumberOfBytesToWrite=0x320, lpNumberOfBytesWritten=0x3be548, lpOverlapped=0x0 | out: lpBuffer=0x22c8d38*, lpNumberOfBytesWritten=0x3be548*=0x320, lpOverlapped=0x0) returned 1 [0115.067] CloseHandle (hObject=0x444) returned 1 [0115.067] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\05_Pictures_taken_in_the_last_month.wpl", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\05_Pictures_taken_in_the_last_month.wpl", lpFilePart=0x0) returned 0x80 [0115.067] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\05_Pictures_taken_in_the_last_month.wpl.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\05_Pictures_taken_in_the_last_month.wpl.xuy", lpFilePart=0x0) returned 0x84 [0115.067] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0115.067] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\05_Pictures_taken_in_the_last_month.wpl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00009376\\05_pictures_taken_in_the_last_month.wpl"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xacc19ac7, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xacc19ac7, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x306e1d67, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x320)) returned 1 [0115.067] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0115.067] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\05_Pictures_taken_in_the_last_month.wpl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00009376\\05_pictures_taken_in_the_last_month.wpl"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\05_Pictures_taken_in_the_last_month.wpl.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00009376\\05_pictures_taken_in_the_last_month.wpl.xuy")) returned 1 [0115.069] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\06_Pictures_rated_4_or_5_stars.wpl", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\06_Pictures_rated_4_or_5_stars.wpl", lpFilePart=0x0) returned 0x7b [0115.069] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0115.069] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\06_Pictures_rated_4_or_5_stars.wpl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00009376\\06_pictures_rated_4_or_5_stars.wpl"), fInfoLevelId=0x0, lpFileInformation=0x22ca108 | out: lpFileInformation=0x22ca108*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xacc19ac7, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xacc19ac7, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xacc3fd55, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x311)) returned 1 [0115.069] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0115.069] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\06_Pictures_rated_4_or_5_stars.wpl", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\06_Pictures_rated_4_or_5_stars.wpl", lpFilePart=0x0) returned 0x7b [0115.069] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0115.069] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\06_Pictures_rated_4_or_5_stars.wpl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00009376\\06_pictures_rated_4_or_5_stars.wpl"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0115.069] GetFileType (hFile=0x444) returned 0x1 [0115.069] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0115.069] GetFileType (hFile=0x444) returned 0x1 [0115.069] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be708 | out: lpFileSizeHigh=0x3be708*=0x0) returned 0x311 [0115.069] ReadFile (in: hFile=0x444, lpBuffer=0x22ca7e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be638, lpOverlapped=0x0 | out: lpBuffer=0x22ca7e8*, lpNumberOfBytesRead=0x3be638*=0x311, lpOverlapped=0x0) returned 1 [0115.071] CloseHandle (hObject=0x444) returned 1 [0115.081] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\06_Pictures_rated_4_or_5_stars.wpl", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\06_Pictures_rated_4_or_5_stars.wpl", lpFilePart=0x0) returned 0x7b [0115.081] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0115.081] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\06_Pictures_rated_4_or_5_stars.wpl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00009376\\06_pictures_rated_4_or_5_stars.wpl"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0115.083] GetFileType (hFile=0x444) returned 0x1 [0115.083] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0115.083] GetFileType (hFile=0x444) returned 0x1 [0115.083] WriteFile (in: hFile=0x444, lpBuffer=0x23427f8*, nNumberOfBytesToWrite=0x320, lpNumberOfBytesWritten=0x3be548, lpOverlapped=0x0 | out: lpBuffer=0x23427f8*, lpNumberOfBytesWritten=0x3be548*=0x320, lpOverlapped=0x0) returned 1 [0115.083] CloseHandle (hObject=0x444) returned 1 [0115.084] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\06_Pictures_rated_4_or_5_stars.wpl", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\06_Pictures_rated_4_or_5_stars.wpl", lpFilePart=0x0) returned 0x7b [0115.084] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\06_Pictures_rated_4_or_5_stars.wpl.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\06_Pictures_rated_4_or_5_stars.wpl.xuy", lpFilePart=0x0) returned 0x7f [0115.084] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0115.084] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\06_Pictures_rated_4_or_5_stars.wpl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00009376\\06_pictures_rated_4_or_5_stars.wpl"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xacc19ac7, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xacc19ac7, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x307080de, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x320)) returned 1 [0115.084] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0115.084] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\06_Pictures_rated_4_or_5_stars.wpl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00009376\\06_pictures_rated_4_or_5_stars.wpl"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\06_Pictures_rated_4_or_5_stars.wpl.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00009376\\06_pictures_rated_4_or_5_stars.wpl.xuy")) returned 1 [0115.085] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\07_TV_recorded_in_the_last_week.wpl", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\07_TV_recorded_in_the_last_week.wpl", lpFilePart=0x0) returned 0x7c [0115.085] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0115.085] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\07_TV_recorded_in_the_last_week.wpl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00009376\\07_tv_recorded_in_the_last_week.wpl"), fInfoLevelId=0x0, lpFileInformation=0x2343b98 | out: lpFileInformation=0x2343b98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xacc3fd55, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xacc3fd55, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xacc3fd55, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x410)) returned 1 [0115.085] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0115.086] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\07_TV_recorded_in_the_last_week.wpl", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\07_TV_recorded_in_the_last_week.wpl", lpFilePart=0x0) returned 0x7c [0115.086] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0115.086] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\07_TV_recorded_in_the_last_week.wpl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00009376\\07_tv_recorded_in_the_last_week.wpl"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0115.086] GetFileType (hFile=0x444) returned 0x1 [0115.086] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0115.086] GetFileType (hFile=0x444) returned 0x1 [0115.086] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be708 | out: lpFileSizeHigh=0x3be708*=0x0) returned 0x410 [0115.086] ReadFile (in: hFile=0x444, lpBuffer=0x2344380, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be638, lpOverlapped=0x0 | out: lpBuffer=0x2344380*, lpNumberOfBytesRead=0x3be638*=0x410, lpOverlapped=0x0) returned 1 [0115.087] CloseHandle (hObject=0x444) returned 1 [0115.124] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\07_TV_recorded_in_the_last_week.wpl", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\07_TV_recorded_in_the_last_week.wpl", lpFilePart=0x0) returned 0x7c [0115.124] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0115.124] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\07_TV_recorded_in_the_last_week.wpl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00009376\\07_tv_recorded_in_the_last_week.wpl"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0115.126] GetFileType (hFile=0x444) returned 0x1 [0115.126] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0115.126] GetFileType (hFile=0x444) returned 0x1 [0115.126] WriteFile (in: hFile=0x444, lpBuffer=0x21bc770*, nNumberOfBytesToWrite=0x420, lpNumberOfBytesWritten=0x3be548, lpOverlapped=0x0 | out: lpBuffer=0x21bc770*, lpNumberOfBytesWritten=0x3be548*=0x420, lpOverlapped=0x0) returned 1 [0115.127] CloseHandle (hObject=0x444) returned 1 [0115.127] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\07_TV_recorded_in_the_last_week.wpl", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\07_TV_recorded_in_the_last_week.wpl", lpFilePart=0x0) returned 0x7c [0115.127] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\07_TV_recorded_in_the_last_week.wpl.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\07_TV_recorded_in_the_last_week.wpl.xuy", lpFilePart=0x0) returned 0x80 [0115.127] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0115.127] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\07_TV_recorded_in_the_last_week.wpl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00009376\\07_tv_recorded_in_the_last_week.wpl"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xacc3fd55, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xacc3fd55, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x3077abbc, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x420)) returned 1 [0115.127] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0115.127] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\07_TV_recorded_in_the_last_week.wpl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00009376\\07_tv_recorded_in_the_last_week.wpl"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\07_TV_recorded_in_the_last_week.wpl.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00009376\\07_tv_recorded_in_the_last_week.wpl.xuy")) returned 1 [0115.128] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\08_Video_rated_at_4_or_5_stars.wpl", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\08_Video_rated_at_4_or_5_stars.wpl", lpFilePart=0x0) returned 0x7b [0115.128] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0115.128] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\08_Video_rated_at_4_or_5_stars.wpl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00009376\\08_video_rated_at_4_or_5_stars.wpl"), fInfoLevelId=0x0, lpFileInformation=0x21bdb28 | out: lpFileInformation=0x21bdb28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xacc3fd55, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xacc3fd55, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xacc3fd55, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x3fc)) returned 1 [0115.128] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0115.128] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\08_Video_rated_at_4_or_5_stars.wpl", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\08_Video_rated_at_4_or_5_stars.wpl", lpFilePart=0x0) returned 0x7b [0115.128] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0115.128] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\08_Video_rated_at_4_or_5_stars.wpl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00009376\\08_video_rated_at_4_or_5_stars.wpl"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0115.128] GetFileType (hFile=0x444) returned 0x1 [0115.128] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0115.128] GetFileType (hFile=0x444) returned 0x1 [0115.129] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be708 | out: lpFileSizeHigh=0x3be708*=0x0) returned 0x3fc [0115.129] ReadFile (in: hFile=0x444, lpBuffer=0x21be2f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be638, lpOverlapped=0x0 | out: lpBuffer=0x21be2f0*, lpNumberOfBytesRead=0x3be638*=0x3fc, lpOverlapped=0x0) returned 1 [0115.130] CloseHandle (hObject=0x444) returned 1 [0115.156] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\08_Video_rated_at_4_or_5_stars.wpl", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\08_Video_rated_at_4_or_5_stars.wpl", lpFilePart=0x0) returned 0x7b [0115.156] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0115.156] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\08_Video_rated_at_4_or_5_stars.wpl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00009376\\08_video_rated_at_4_or_5_stars.wpl"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0115.157] GetFileType (hFile=0x444) returned 0x1 [0115.157] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0115.157] GetFileType (hFile=0x444) returned 0x1 [0115.157] WriteFile (in: hFile=0x444, lpBuffer=0x2236758*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x3be548, lpOverlapped=0x0 | out: lpBuffer=0x2236758*, lpNumberOfBytesWritten=0x3be548*=0x400, lpOverlapped=0x0) returned 1 [0115.159] CloseHandle (hObject=0x444) returned 1 [0115.159] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\08_Video_rated_at_4_or_5_stars.wpl", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\08_Video_rated_at_4_or_5_stars.wpl", lpFilePart=0x0) returned 0x7b [0115.159] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\08_Video_rated_at_4_or_5_stars.wpl.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\08_Video_rated_at_4_or_5_stars.wpl.xuy", lpFilePart=0x0) returned 0x7f [0115.159] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0115.159] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\08_Video_rated_at_4_or_5_stars.wpl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00009376\\08_video_rated_at_4_or_5_stars.wpl"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xacc3fd55, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xacc3fd55, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x307c6cd0, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x400)) returned 1 [0115.159] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0115.159] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\08_Video_rated_at_4_or_5_stars.wpl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00009376\\08_video_rated_at_4_or_5_stars.wpl"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\08_Video_rated_at_4_or_5_stars.wpl.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00009376\\08_video_rated_at_4_or_5_stars.wpl.xuy")) returned 1 [0115.160] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\09_Music_played_the_most.wpl", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\09_Music_played_the_most.wpl", lpFilePart=0x0) returned 0x75 [0115.160] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0115.160] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\09_Music_played_the_most.wpl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00009376\\09_music_played_the_most.wpl"), fInfoLevelId=0x0, lpFileInformation=0x2237af8 | out: lpFileInformation=0x2237af8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xacc3fd55, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xacc3fd55, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xacc3fd55, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x401)) returned 1 [0115.160] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0115.160] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\09_Music_played_the_most.wpl", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\09_Music_played_the_most.wpl", lpFilePart=0x0) returned 0x75 [0115.161] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0115.161] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\09_Music_played_the_most.wpl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00009376\\09_music_played_the_most.wpl"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0115.161] GetFileType (hFile=0x444) returned 0x1 [0115.161] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0115.161] GetFileType (hFile=0x444) returned 0x1 [0115.161] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be708 | out: lpFileSizeHigh=0x3be708*=0x0) returned 0x401 [0115.161] ReadFile (in: hFile=0x444, lpBuffer=0x22382a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be638, lpOverlapped=0x0 | out: lpBuffer=0x22382a8*, lpNumberOfBytesRead=0x3be638*=0x401, lpOverlapped=0x0) returned 1 [0115.163] CloseHandle (hObject=0x444) returned 1 [0115.174] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\09_Music_played_the_most.wpl", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\09_Music_played_the_most.wpl", lpFilePart=0x0) returned 0x75 [0115.174] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0115.174] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\09_Music_played_the_most.wpl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00009376\\09_music_played_the_most.wpl"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0115.176] GetFileType (hFile=0x444) returned 0x1 [0115.176] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0115.176] GetFileType (hFile=0x444) returned 0x1 [0115.176] WriteFile (in: hFile=0x444, lpBuffer=0x22b0758*, nNumberOfBytesToWrite=0x410, lpNumberOfBytesWritten=0x3be548, lpOverlapped=0x0 | out: lpBuffer=0x22b0758*, lpNumberOfBytesWritten=0x3be548*=0x410, lpOverlapped=0x0) returned 1 [0115.177] CloseHandle (hObject=0x444) returned 1 [0115.177] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\09_Music_played_the_most.wpl", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\09_Music_played_the_most.wpl", lpFilePart=0x0) returned 0x75 [0115.177] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\09_Music_played_the_most.wpl.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\09_Music_played_the_most.wpl.xuy", lpFilePart=0x0) returned 0x79 [0115.177] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0115.177] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\09_Music_played_the_most.wpl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00009376\\09_music_played_the_most.wpl"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xacc3fd55, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xacc3fd55, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x307ecdf9, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x410)) returned 1 [0115.177] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0115.177] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\09_Music_played_the_most.wpl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00009376\\09_music_played_the_most.wpl"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\09_Music_played_the_most.wpl.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00009376\\09_music_played_the_most.wpl.xuy")) returned 1 [0115.178] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\10_All_Music.wpl", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\10_All_Music.wpl", lpFilePart=0x0) returned 0x69 [0115.178] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0115.179] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\10_All_Music.wpl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00009376\\10_all_music.wpl"), fInfoLevelId=0x0, lpFileInformation=0x22b1ae0 | out: lpFileInformation=0x22b1ae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xacc3fd55, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xacc3fd55, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xacc3fd55, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x427)) returned 1 [0115.179] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0115.179] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\10_All_Music.wpl", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\10_All_Music.wpl", lpFilePart=0x0) returned 0x69 [0115.179] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0115.179] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\10_All_Music.wpl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00009376\\10_all_music.wpl"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0115.179] GetFileType (hFile=0x444) returned 0x1 [0115.179] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0115.179] GetFileType (hFile=0x444) returned 0x1 [0115.179] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be708 | out: lpFileSizeHigh=0x3be708*=0x0) returned 0x427 [0115.179] ReadFile (in: hFile=0x444, lpBuffer=0x22b2250, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be638, lpOverlapped=0x0 | out: lpBuffer=0x22b2250*, lpNumberOfBytesRead=0x3be638*=0x427, lpOverlapped=0x0) returned 1 [0115.181] CloseHandle (hObject=0x444) returned 1 [0115.191] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\10_All_Music.wpl", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\10_All_Music.wpl", lpFilePart=0x0) returned 0x69 [0115.192] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0115.192] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\10_All_Music.wpl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00009376\\10_all_music.wpl"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0115.193] GetFileType (hFile=0x444) returned 0x1 [0115.193] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0115.193] GetFileType (hFile=0x444) returned 0x1 [0115.193] WriteFile (in: hFile=0x444, lpBuffer=0x232a770*, nNumberOfBytesToWrite=0x430, lpNumberOfBytesWritten=0x3be548, lpOverlapped=0x0 | out: lpBuffer=0x232a770*, lpNumberOfBytesWritten=0x3be548*=0x430, lpOverlapped=0x0) returned 1 [0115.194] CloseHandle (hObject=0x444) returned 1 [0115.194] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\10_All_Music.wpl", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\10_All_Music.wpl", lpFilePart=0x0) returned 0x69 [0115.194] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\10_All_Music.wpl.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\10_All_Music.wpl.xuy", lpFilePart=0x0) returned 0x6d [0115.194] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0115.194] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\10_All_Music.wpl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00009376\\10_all_music.wpl"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xacc3fd55, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xacc3fd55, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x3081313d, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x430)) returned 1 [0115.194] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0115.194] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\10_All_Music.wpl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00009376\\10_all_music.wpl"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\10_All_Music.wpl.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00009376\\10_all_music.wpl.xuy")) returned 1 [0115.195] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\11_All_Pictures.wpl", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\11_All_Pictures.wpl", lpFilePart=0x0) returned 0x6c [0115.195] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0115.196] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\11_All_Pictures.wpl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00009376\\11_all_pictures.wpl"), fInfoLevelId=0x0, lpFileInformation=0x232bab0 | out: lpFileInformation=0x232bab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xacc3fd55, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xacc3fd55, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xacc3fd55, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x249)) returned 1 [0115.196] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0115.196] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\11_All_Pictures.wpl", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\11_All_Pictures.wpl", lpFilePart=0x0) returned 0x6c [0115.196] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0115.196] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\11_All_Pictures.wpl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00009376\\11_all_pictures.wpl"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0115.196] GetFileType (hFile=0x444) returned 0x1 [0115.196] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0115.196] GetFileType (hFile=0x444) returned 0x1 [0115.196] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be708 | out: lpFileSizeHigh=0x3be708*=0x0) returned 0x249 [0115.196] ReadFile (in: hFile=0x444, lpBuffer=0x232c058, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be638, lpOverlapped=0x0 | out: lpBuffer=0x232c058*, lpNumberOfBytesRead=0x3be638*=0x249, lpOverlapped=0x0) returned 1 [0115.197] CloseHandle (hObject=0x444) returned 1 [0115.274] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\11_All_Pictures.wpl", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\11_All_Pictures.wpl", lpFilePart=0x0) returned 0x6c [0115.274] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0115.274] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\11_All_Pictures.wpl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00009376\\11_all_pictures.wpl"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0115.276] GetFileType (hFile=0x444) returned 0x1 [0115.276] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0115.276] GetFileType (hFile=0x444) returned 0x1 [0115.276] WriteFile (in: hFile=0x444, lpBuffer=0x21a3a48*, nNumberOfBytesToWrite=0x250, lpNumberOfBytesWritten=0x3be548, lpOverlapped=0x0 | out: lpBuffer=0x21a3a48*, lpNumberOfBytesWritten=0x3be548*=0x250, lpOverlapped=0x0) returned 1 [0115.277] CloseHandle (hObject=0x444) returned 1 [0115.277] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\11_All_Pictures.wpl", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\11_All_Pictures.wpl", lpFilePart=0x0) returned 0x6c [0115.277] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\11_All_Pictures.wpl.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\11_All_Pictures.wpl.xuy", lpFilePart=0x0) returned 0x70 [0115.277] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0115.277] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\11_All_Pictures.wpl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00009376\\11_all_pictures.wpl"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xacc3fd55, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xacc3fd55, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x308f7eb4, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x250)) returned 1 [0115.277] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0115.277] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\11_All_Pictures.wpl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00009376\\11_all_pictures.wpl"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\11_All_Pictures.wpl.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00009376\\11_all_pictures.wpl.xuy")) returned 1 [0115.282] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\12_All_Video.wpl", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\12_All_Video.wpl", lpFilePart=0x0) returned 0x69 [0115.282] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0115.282] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\12_All_Video.wpl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00009376\\12_all_video.wpl"), fInfoLevelId=0x0, lpFileInformation=0x21a4da0 | out: lpFileInformation=0x21a4da0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xacc3fd55, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xacc3fd55, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xacc3fd55, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x437)) returned 1 [0115.282] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0115.282] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\12_All_Video.wpl", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\12_All_Video.wpl", lpFilePart=0x0) returned 0x69 [0115.282] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0115.282] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\12_All_Video.wpl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00009376\\12_all_video.wpl"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0115.282] GetFileType (hFile=0x444) returned 0x1 [0115.282] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0115.282] GetFileType (hFile=0x444) returned 0x1 [0115.282] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be708 | out: lpFileSizeHigh=0x3be708*=0x0) returned 0x437 [0115.282] ReadFile (in: hFile=0x444, lpBuffer=0x21a5520, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be638, lpOverlapped=0x0 | out: lpBuffer=0x21a5520*, lpNumberOfBytesRead=0x3be638*=0x437, lpOverlapped=0x0) returned 1 [0115.292] CloseHandle (hObject=0x444) returned 1 [0115.301] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\12_All_Video.wpl", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\12_All_Video.wpl", lpFilePart=0x0) returned 0x69 [0115.302] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0115.302] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\12_All_Video.wpl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00009376\\12_all_video.wpl"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0115.303] GetFileType (hFile=0x444) returned 0x1 [0115.303] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0115.303] GetFileType (hFile=0x444) returned 0x1 [0115.303] WriteFile (in: hFile=0x444, lpBuffer=0x221da90*, nNumberOfBytesToWrite=0x440, lpNumberOfBytesWritten=0x3be548, lpOverlapped=0x0 | out: lpBuffer=0x221da90*, lpNumberOfBytesWritten=0x3be548*=0x440, lpOverlapped=0x0) returned 1 [0115.304] CloseHandle (hObject=0x444) returned 1 [0115.304] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\12_All_Video.wpl", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\12_All_Video.wpl", lpFilePart=0x0) returned 0x69 [0115.304] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\12_All_Video.wpl.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\12_All_Video.wpl.xuy", lpFilePart=0x0) returned 0x6d [0115.304] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0115.304] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\12_All_Video.wpl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00009376\\12_all_video.wpl"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xacc3fd55, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xacc3fd55, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x3091e15c, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x440)) returned 1 [0115.305] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0115.305] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\12_All_Video.wpl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00009376\\12_all_video.wpl"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\12_All_Video.wpl.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00009376\\12_all_video.wpl.xuy")) returned 1 [0115.305] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0115.305] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Transcoded Files Cache", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Transcoded Files Cache", lpFilePart=0x0) returned 0x51 [0115.306] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Transcoded Files Cache\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Transcoded Files Cache\\", lpFilePart=0x0) returned 0x52 [0115.306] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Transcoded Files Cache\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7550 [0115.306] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0115.306] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0115.307] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0115.307] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0115.307] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0115.307] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0115.307] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Transcoded Files Cache", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Transcoded Files Cache", lpFilePart=0x0) returned 0x51 [0115.307] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Transcoded Files Cache\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Transcoded Files Cache\\", lpFilePart=0x0) returned 0x52 [0115.307] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Transcoded Files Cache\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7a30 [0115.307] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0115.307] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0115.307] FindClose (in: hFindFile=0x5d7a30 | out: hFindFile=0x5d7a30) returned 1 [0115.307] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0115.307] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0115.307] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0115.307] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office", lpFilePart=0x0) returned 0x34 [0115.307] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\", lpFilePart=0x0) returned 0x35 [0115.307] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d7fd0 [0115.308] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0115.308] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0115.308] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0115.308] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0115.308] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0115.308] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0115.308] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0115.308] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0115.308] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0115.308] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0115.308] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office", lpFilePart=0x0) returned 0x34 [0115.309] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\", lpFilePart=0x0) returned 0x35 [0115.309] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d7d30 [0115.309] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0115.309] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0115.309] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0115.309] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0115.309] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0115.309] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0115.309] FindClose (in: hFindFile=0x5d7d30 | out: hFindFile=0x5d7d30) returned 1 [0115.310] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0115.310] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0115.310] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\PowerP16.customUI", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\PowerP16.customUI", lpFilePart=0x0) returned 0x46 [0115.310] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0115.310] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\PowerP16.customUI" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\powerp16.customui"), fInfoLevelId=0x0, lpFileInformation=0x22230d8 | out: lpFileInformation=0x22230d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc72dba4b, ftCreationTime.dwHighDateTime=0x1d2d439, ftLastAccessTime.dwLowDateTime=0xc72dba4b, ftLastAccessTime.dwHighDateTime=0x1d2d439, ftLastWriteTime.dwLowDateTime=0xc740cd2d, ftLastWriteTime.dwHighDateTime=0x1d2d439, nFileSizeHigh=0x0, nFileSizeLow=0xdc4)) returned 1 [0115.310] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0115.310] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\PowerP16.customUI", nBufferLength=0x105, lpBuffer=0x3be1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\PowerP16.customUI", lpFilePart=0x0) returned 0x46 [0115.310] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6c0) returned 1 [0115.310] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\PowerP16.customUI" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\powerp16.customui"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0115.310] GetFileType (hFile=0x444) returned 0x1 [0115.310] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0115.310] GetFileType (hFile=0x444) returned 0x1 [0115.310] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be858 | out: lpFileSizeHigh=0x3be858*=0x0) returned 0xdc4 [0115.310] ReadFile (in: hFile=0x444, lpBuffer=0x2224158, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be788, lpOverlapped=0x0 | out: lpBuffer=0x2224158*, lpNumberOfBytesRead=0x3be788*=0xdc4, lpOverlapped=0x0) returned 1 [0115.321] CloseHandle (hObject=0x444) returned 1 [0115.331] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\PowerP16.customUI", nBufferLength=0x105, lpBuffer=0x3be1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\PowerP16.customUI", lpFilePart=0x0) returned 0x46 [0115.331] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6c0) returned 1 [0115.331] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\PowerP16.customUI" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\powerp16.customui"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0115.333] GetFileType (hFile=0x444) returned 0x1 [0115.333] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0115.333] GetFileType (hFile=0x444) returned 0x1 [0115.333] WriteFile (in: hFile=0x444, lpBuffer=0x229f650*, nNumberOfBytesToWrite=0xdd0, lpNumberOfBytesWritten=0x3be698, lpOverlapped=0x0 | out: lpBuffer=0x229f650*, lpNumberOfBytesWritten=0x3be698*=0xdd0, lpOverlapped=0x0) returned 1 [0115.334] CloseHandle (hObject=0x444) returned 1 [0115.335] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\PowerP16.customUI", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\PowerP16.customUI", lpFilePart=0x0) returned 0x46 [0115.335] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\PowerP16.customUI.xuy", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\PowerP16.customUI.xuy", lpFilePart=0x0) returned 0x4a [0115.335] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0115.335] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\PowerP16.customUI" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\powerp16.customui"), fInfoLevelId=0x0, lpFileInformation=0x3be8a0 | out: lpFileInformation=0x3be8a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc72dba4b, ftCreationTime.dwHighDateTime=0x1d2d439, ftLastAccessTime.dwLowDateTime=0xc72dba4b, ftLastAccessTime.dwHighDateTime=0x1d2d439, ftLastWriteTime.dwLowDateTime=0x3096a699, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xdd0)) returned 1 [0115.335] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0115.335] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\PowerP16.customUI" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\powerp16.customui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\PowerP16.customUI.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\powerp16.customui.xuy")) returned 1 [0115.336] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\Word16.customUI", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\Word16.customUI", lpFilePart=0x0) returned 0x44 [0115.336] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0115.336] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\Word16.customUI" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\word16.customui"), fInfoLevelId=0x0, lpFileInformation=0x22a08c0 | out: lpFileInformation=0x22a08c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2764ab4, ftCreationTime.dwHighDateTime=0x1d2d438, ftLastAccessTime.dwLowDateTime=0xd2764ab4, ftLastAccessTime.dwHighDateTime=0x1d2d438, ftLastWriteTime.dwLowDateTime=0xd284b6d5, ftLastWriteTime.dwHighDateTime=0x1d2d438, nFileSizeHigh=0x0, nFileSizeLow=0xdba)) returned 1 [0115.337] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0115.337] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\Word16.customUI", nBufferLength=0x105, lpBuffer=0x3be1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\Word16.customUI", lpFilePart=0x0) returned 0x44 [0115.337] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6c0) returned 1 [0115.337] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\Word16.customUI" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\word16.customui"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0115.337] GetFileType (hFile=0x444) returned 0x1 [0115.337] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0115.337] GetFileType (hFile=0x444) returned 0x1 [0115.337] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be858 | out: lpFileSizeHigh=0x3be858*=0x0) returned 0xdba [0115.337] ReadFile (in: hFile=0x444, lpBuffer=0x22a1928, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be788, lpOverlapped=0x0 | out: lpBuffer=0x22a1928*, lpNumberOfBytesRead=0x3be788*=0xdba, lpOverlapped=0x0) returned 1 [0115.341] CloseHandle (hObject=0x444) returned 1 [0115.352] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\Word16.customUI", nBufferLength=0x105, lpBuffer=0x3be1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\Word16.customUI", lpFilePart=0x0) returned 0x44 [0115.352] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6c0) returned 1 [0115.352] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\Word16.customUI" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\word16.customui"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0115.354] GetFileType (hFile=0x444) returned 0x1 [0115.354] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0115.354] GetFileType (hFile=0x444) returned 0x1 [0115.354] WriteFile (in: hFile=0x444, lpBuffer=0x231cdc0*, nNumberOfBytesToWrite=0xdc0, lpNumberOfBytesWritten=0x3be698, lpOverlapped=0x0 | out: lpBuffer=0x231cdc0*, lpNumberOfBytesWritten=0x3be698*=0xdc0, lpOverlapped=0x0) returned 1 [0115.355] CloseHandle (hObject=0x444) returned 1 [0115.355] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\Word16.customUI", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\Word16.customUI", lpFilePart=0x0) returned 0x44 [0115.355] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\Word16.customUI.xuy", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\Word16.customUI.xuy", lpFilePart=0x0) returned 0x48 [0115.355] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0115.355] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\Word16.customUI" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\word16.customui"), fInfoLevelId=0x0, lpFileInformation=0x3be8a0 | out: lpFileInformation=0x3be8a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2764ab4, ftCreationTime.dwHighDateTime=0x1d2d438, ftLastAccessTime.dwLowDateTime=0xd2764ab4, ftLastAccessTime.dwHighDateTime=0x1d2d438, ftLastWriteTime.dwLowDateTime=0x309b6b0a, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xdc0)) returned 1 [0115.355] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0115.355] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\Word16.customUI" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\word16.customui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\Word16.customUI.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\word16.customui.xuy")) returned 1 [0115.356] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0115.356] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0", lpFilePart=0x0) returned 0x39 [0115.356] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\", lpFilePart=0x0) returned 0x3a [0115.356] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7550 [0115.356] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0115.356] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0115.357] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0115.357] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0115.357] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0115.357] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0115.357] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0115.357] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0115.357] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0115.357] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0115.357] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0115.357] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0115.358] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0115.358] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0115.358] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0115.358] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0115.358] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0115.358] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0115.358] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0115.358] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0115.358] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0115.359] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0115.359] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0115.359] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0115.359] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0", lpFilePart=0x0) returned 0x39 [0115.359] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\", lpFilePart=0x0) returned 0x3a [0115.359] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d78b0 [0115.359] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0115.359] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0115.359] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0115.359] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0115.360] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0115.360] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0115.360] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0115.360] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0115.360] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0115.360] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0115.360] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0115.361] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0115.361] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0115.361] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0115.361] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0115.361] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0115.361] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0115.361] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0115.361] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0115.361] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0115.362] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0115.362] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0115.362] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0115.362] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\excel.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\excel.exe_Rules.xml", lpFilePart=0x0) returned 0x4d [0115.362] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0115.362] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\excel.exe_Rules.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\excel.exe_rules.xml"), fInfoLevelId=0x0, lpFileInformation=0x2324ac8 | out: lpFileInformation=0x2324ac8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70ac1ad5, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x70ac1ad5, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x24a2c7b3, ftLastWriteTime.dwHighDateTime=0x1d3aaaf, nFileSizeHigh=0x0, nFileSizeLow=0x43e8b)) returned 1 [0115.362] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0115.362] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\excel.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\excel.exe_Rules.xml", lpFilePart=0x0) returned 0x4d [0115.362] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0115.362] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\excel.exe_Rules.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\excel.exe_rules.xml"), fInfoLevelId=0x0, lpFileInformation=0x2324c28 | out: lpFileInformation=0x2324c28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70ac1ad5, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x70ac1ad5, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x24a2c7b3, ftLastWriteTime.dwHighDateTime=0x1d3aaaf, nFileSizeHigh=0x0, nFileSizeLow=0x43e8b)) returned 1 [0115.362] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0115.362] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\excel.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\excel.exe_Rules.xml", lpFilePart=0x0) returned 0x4d [0115.362] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0115.362] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\excel.exe_Rules.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\excel.exe_rules.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0115.363] GetFileType (hFile=0x444) returned 0x1 [0115.363] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0115.363] GetFileType (hFile=0x444) returned 0x1 [0115.363] ReadFile (in: hFile=0x444, lpBuffer=0x2327018, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x2327018*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0115.423] CloseHandle (hObject=0x444) returned 1 [0115.424] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\excel.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\excel.exe_Rules.xml", lpFilePart=0x0) returned 0x4d [0115.424] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0115.424] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\excel.exe_Rules.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\excel.exe_rules.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0115.424] GetFileType (hFile=0x444) returned 0x1 [0115.424] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0115.424] GetFileType (hFile=0x444) returned 0x1 [0115.424] WriteFile (in: hFile=0x444, lpBuffer=0x21642d0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x21642d0*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0115.424] CloseHandle (hObject=0x444) returned 1 [0115.424] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\excel.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\excel.exe_Rules.xml", lpFilePart=0x0) returned 0x4d [0115.425] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\excel.exe_Rules.xml.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\excel.exe_Rules.xml.xuy", lpFilePart=0x0) returned 0x51 [0115.425] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0115.425] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\excel.exe_Rules.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\excel.exe_rules.xml"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70ac1ad5, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x70ac1ad5, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x30a4f4bd, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x43e8b)) returned 1 [0115.425] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0115.425] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\excel.exe_Rules.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\excel.exe_rules.xml"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\excel.exe_Rules.xml.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\excel.exe_rules.xml.xuy")) returned 1 [0115.426] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\msaccess.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\msaccess.exe_Rules.xml", lpFilePart=0x0) returned 0x50 [0115.426] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0115.426] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\msaccess.exe_Rules.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\msaccess.exe_rules.xml"), fInfoLevelId=0x0, lpFileInformation=0x21a6200 | out: lpFileInformation=0x21a6200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf54bdb08, ftCreationTime.dwHighDateTime=0x1d3aaae, ftLastAccessTime.dwLowDateTime=0xf54bdb08, ftLastAccessTime.dwHighDateTime=0x1d3aaae, ftLastWriteTime.dwLowDateTime=0xf54bdb08, ftLastWriteTime.dwHighDateTime=0x1d3aaae, nFileSizeHigh=0x0, nFileSizeLow=0x30d11)) returned 1 [0115.426] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0115.426] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\msaccess.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\msaccess.exe_Rules.xml", lpFilePart=0x0) returned 0x50 [0115.426] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0115.426] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\msaccess.exe_Rules.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\msaccess.exe_rules.xml"), fInfoLevelId=0x0, lpFileInformation=0x21a6370 | out: lpFileInformation=0x21a6370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf54bdb08, ftCreationTime.dwHighDateTime=0x1d3aaae, ftLastAccessTime.dwLowDateTime=0xf54bdb08, ftLastAccessTime.dwHighDateTime=0x1d3aaae, ftLastWriteTime.dwLowDateTime=0xf54bdb08, ftLastWriteTime.dwHighDateTime=0x1d3aaae, nFileSizeHigh=0x0, nFileSizeLow=0x30d11)) returned 1 [0115.426] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0115.426] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\msaccess.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\msaccess.exe_Rules.xml", lpFilePart=0x0) returned 0x50 [0115.426] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0115.426] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\msaccess.exe_Rules.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\msaccess.exe_rules.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0115.427] GetFileType (hFile=0x444) returned 0x1 [0115.427] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0115.427] GetFileType (hFile=0x444) returned 0x1 [0115.427] ReadFile (in: hFile=0x444, lpBuffer=0x21a8780, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x21a8780*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0115.454] CloseHandle (hObject=0x444) returned 1 [0115.454] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\msaccess.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\msaccess.exe_Rules.xml", lpFilePart=0x0) returned 0x50 [0115.455] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0115.455] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\msaccess.exe_Rules.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\msaccess.exe_rules.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0115.455] GetFileType (hFile=0x444) returned 0x1 [0115.455] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0115.455] GetFileType (hFile=0x444) returned 0x1 [0115.455] WriteFile (in: hFile=0x444, lpBuffer=0x21a64c0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x21a64c0*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0115.455] CloseHandle (hObject=0x444) returned 1 [0115.455] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\msaccess.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\msaccess.exe_Rules.xml", lpFilePart=0x0) returned 0x50 [0115.456] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\msaccess.exe_Rules.xml.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\msaccess.exe_Rules.xml.xuy", lpFilePart=0x0) returned 0x54 [0115.456] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0115.456] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\msaccess.exe_Rules.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\msaccess.exe_rules.xml"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf54bdb08, ftCreationTime.dwHighDateTime=0x1d3aaae, ftLastAccessTime.dwLowDateTime=0xf54bdb08, ftLastAccessTime.dwHighDateTime=0x1d3aaae, ftLastWriteTime.dwLowDateTime=0x30a9bbbc, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x30d11)) returned 1 [0115.456] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0115.456] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\msaccess.exe_Rules.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\msaccess.exe_rules.xml"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\msaccess.exe_Rules.xml.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\msaccess.exe_rules.xml.xuy")) returned 1 [0115.457] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\msoia.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\msoia.exe_Rules.xml", lpFilePart=0x0) returned 0x4d [0115.457] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0115.457] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\msoia.exe_Rules.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\msoia.exe_rules.xml"), fInfoLevelId=0x0, lpFileInformation=0x2224b88 | out: lpFileInformation=0x2224b88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96723353, ftCreationTime.dwHighDateTime=0x1d336e4, ftLastAccessTime.dwLowDateTime=0x96723353, ftLastAccessTime.dwHighDateTime=0x1d336e4, ftLastWriteTime.dwLowDateTime=0xe16460d0, ftLastWriteTime.dwHighDateTime=0x1d46685, nFileSizeHigh=0x0, nFileSizeLow=0x429)) returned 1 [0115.457] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0115.457] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\msoia.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\msoia.exe_Rules.xml", lpFilePart=0x0) returned 0x4d [0115.457] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0115.457] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\msoia.exe_Rules.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\msoia.exe_rules.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0115.457] GetFileType (hFile=0x444) returned 0x1 [0115.457] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0115.457] GetFileType (hFile=0x444) returned 0x1 [0115.457] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0x429 [0115.457] ReadFile (in: hFile=0x444, lpBuffer=0x2225290, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be718, lpOverlapped=0x0 | out: lpBuffer=0x2225290*, lpNumberOfBytesRead=0x3be718*=0x429, lpOverlapped=0x0) returned 1 [0115.458] CloseHandle (hObject=0x444) returned 1 [0115.471] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\msoia.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\msoia.exe_Rules.xml", lpFilePart=0x0) returned 0x4d [0115.471] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0115.471] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\msoia.exe_Rules.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\msoia.exe_rules.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0115.472] GetFileType (hFile=0x444) returned 0x1 [0115.472] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0115.472] GetFileType (hFile=0x444) returned 0x1 [0115.472] WriteFile (in: hFile=0x444, lpBuffer=0x229d770*, nNumberOfBytesToWrite=0x430, lpNumberOfBytesWritten=0x3be628, lpOverlapped=0x0 | out: lpBuffer=0x229d770*, lpNumberOfBytesWritten=0x3be628*=0x430, lpOverlapped=0x0) returned 1 [0115.473] CloseHandle (hObject=0x444) returned 1 [0115.473] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\msoia.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\msoia.exe_Rules.xml", lpFilePart=0x0) returned 0x4d [0115.473] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\msoia.exe_Rules.xml.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\msoia.exe_Rules.xml.xuy", lpFilePart=0x0) returned 0x51 [0115.473] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0115.473] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\msoia.exe_Rules.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\msoia.exe_rules.xml"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96723353, ftCreationTime.dwHighDateTime=0x1d336e4, ftLastAccessTime.dwLowDateTime=0x96723353, ftLastAccessTime.dwHighDateTime=0x1d336e4, ftLastWriteTime.dwLowDateTime=0x30ac1bbd, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x430)) returned 1 [0115.473] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0115.473] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\msoia.exe_Rules.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\msoia.exe_rules.xml"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\msoia.exe_Rules.xml.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\msoia.exe_rules.xml.xuy")) returned 1 [0115.474] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\mspub.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\mspub.exe_Rules.xml", lpFilePart=0x0) returned 0x4d [0115.474] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0115.474] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\mspub.exe_Rules.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\mspub.exe_rules.xml"), fInfoLevelId=0x0, lpFileInformation=0x229ea08 | out: lpFileInformation=0x229ea08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7991bc71, ftCreationTime.dwHighDateTime=0x1d3aaaf, ftLastAccessTime.dwLowDateTime=0x7991bc71, ftLastAccessTime.dwHighDateTime=0x1d3aaaf, ftLastWriteTime.dwLowDateTime=0x79924541, ftLastWriteTime.dwHighDateTime=0x1d3aaaf, nFileSizeHigh=0x0, nFileSizeLow=0x2abd8)) returned 1 [0115.474] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0115.474] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\mspub.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\mspub.exe_Rules.xml", lpFilePart=0x0) returned 0x4d [0115.475] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0115.475] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\mspub.exe_Rules.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\mspub.exe_rules.xml"), fInfoLevelId=0x0, lpFileInformation=0x229eb68 | out: lpFileInformation=0x229eb68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7991bc71, ftCreationTime.dwHighDateTime=0x1d3aaaf, ftLastAccessTime.dwLowDateTime=0x7991bc71, ftLastAccessTime.dwHighDateTime=0x1d3aaaf, ftLastWriteTime.dwLowDateTime=0x79924541, ftLastWriteTime.dwHighDateTime=0x1d3aaaf, nFileSizeHigh=0x0, nFileSizeLow=0x2abd8)) returned 1 [0115.475] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0115.475] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\mspub.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\mspub.exe_Rules.xml", lpFilePart=0x0) returned 0x4d [0115.475] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0115.475] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\mspub.exe_Rules.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\mspub.exe_rules.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0115.475] GetFileType (hFile=0x444) returned 0x1 [0115.476] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0115.476] GetFileType (hFile=0x444) returned 0x1 [0115.476] ReadFile (in: hFile=0x444, lpBuffer=0x22a0f58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x22a0f58*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0115.506] CloseHandle (hObject=0x444) returned 1 [0115.507] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\mspub.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\mspub.exe_Rules.xml", lpFilePart=0x0) returned 0x4d [0115.507] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0115.507] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\mspub.exe_Rules.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\mspub.exe_rules.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0115.507] GetFileType (hFile=0x444) returned 0x1 [0115.507] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0115.507] GetFileType (hFile=0x444) returned 0x1 [0115.507] WriteFile (in: hFile=0x444, lpBuffer=0x229eca8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x229eca8*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0115.508] CloseHandle (hObject=0x444) returned 1 [0115.508] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\mspub.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\mspub.exe_Rules.xml", lpFilePart=0x0) returned 0x4d [0115.508] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\mspub.exe_Rules.xml.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\mspub.exe_Rules.xml.xuy", lpFilePart=0x0) returned 0x51 [0115.508] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0115.508] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\mspub.exe_Rules.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\mspub.exe_rules.xml"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7991bc71, ftCreationTime.dwHighDateTime=0x1d3aaaf, ftLastAccessTime.dwLowDateTime=0x7991bc71, ftLastAccessTime.dwHighDateTime=0x1d3aaaf, ftLastWriteTime.dwLowDateTime=0x30b34317, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2abd8)) returned 1 [0115.508] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0115.508] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\mspub.exe_Rules.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\mspub.exe_rules.xml"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\mspub.exe_Rules.xml.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\mspub.exe_rules.xml.xuy")) returned 1 [0115.510] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\officec2rclient.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\officec2rclient.exe_Rules.xml", lpFilePart=0x0) returned 0x57 [0115.510] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0115.510] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\officec2rclient.exe_Rules.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\officec2rclient.exe_rules.xml"), fInfoLevelId=0x0, lpFileInformation=0x231d338 | out: lpFileInformation=0x231d338*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a8575d0, ftCreationTime.dwHighDateTime=0x1d2d426, ftLastAccessTime.dwLowDateTime=0x6a8575d0, ftLastAccessTime.dwHighDateTime=0x1d2d426, ftLastWriteTime.dwLowDateTime=0x1c643a13, ftLastWriteTime.dwHighDateTime=0x1d301c5, nFileSizeHigh=0x0, nFileSizeLow=0x61bb)) returned 1 [0115.510] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0115.510] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\officec2rclient.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\officec2rclient.exe_Rules.xml", lpFilePart=0x0) returned 0x57 [0115.510] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0115.510] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\officec2rclient.exe_Rules.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\officec2rclient.exe_rules.xml"), fInfoLevelId=0x0, lpFileInformation=0x231d4c0 | out: lpFileInformation=0x231d4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a8575d0, ftCreationTime.dwHighDateTime=0x1d2d426, ftLastAccessTime.dwLowDateTime=0x6a8575d0, ftLastAccessTime.dwHighDateTime=0x1d2d426, ftLastWriteTime.dwLowDateTime=0x1c643a13, ftLastWriteTime.dwHighDateTime=0x1d301c5, nFileSizeHigh=0x0, nFileSizeLow=0x61bb)) returned 1 [0115.510] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0115.510] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\officec2rclient.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\officec2rclient.exe_Rules.xml", lpFilePart=0x0) returned 0x57 [0115.510] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0115.510] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\officec2rclient.exe_Rules.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\officec2rclient.exe_rules.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0115.512] GetFileType (hFile=0x444) returned 0x1 [0115.512] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0115.512] GetFileType (hFile=0x444) returned 0x1 [0115.512] ReadFile (in: hFile=0x444, lpBuffer=0x231f900, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x231f900*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0115.569] CloseHandle (hObject=0x444) returned 1 [0115.569] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\officec2rclient.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\officec2rclient.exe_Rules.xml", lpFilePart=0x0) returned 0x57 [0115.569] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0115.569] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\officec2rclient.exe_Rules.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\officec2rclient.exe_rules.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0115.569] GetFileType (hFile=0x444) returned 0x1 [0115.569] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0115.569] GetFileType (hFile=0x444) returned 0x1 [0115.569] WriteFile (in: hFile=0x444, lpBuffer=0x21642d0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x21642d0*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0115.570] CloseHandle (hObject=0x444) returned 1 [0115.570] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\officec2rclient.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\officec2rclient.exe_Rules.xml", lpFilePart=0x0) returned 0x57 [0115.570] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\officec2rclient.exe_Rules.xml.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\officec2rclient.exe_Rules.xml.xuy", lpFilePart=0x0) returned 0x5b [0115.570] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0115.570] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\officec2rclient.exe_Rules.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\officec2rclient.exe_rules.xml"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a8575d0, ftCreationTime.dwHighDateTime=0x1d2d426, ftLastAccessTime.dwLowDateTime=0x6a8575d0, ftLastAccessTime.dwHighDateTime=0x1d2d426, ftLastWriteTime.dwLowDateTime=0x30ba6a5e, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x61bb)) returned 1 [0115.570] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0115.572] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\officec2rclient.exe_Rules.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\officec2rclient.exe_rules.xml"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\officec2rclient.exe_Rules.xml.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\officec2rclient.exe_rules.xml.xuy")) returned 1 [0115.573] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\officeclicktorun.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\officeclicktorun.exe_Rules.xml", lpFilePart=0x0) returned 0x58 [0115.573] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0115.573] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\officeclicktorun.exe_Rules.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\officeclicktorun.exe_rules.xml"), fInfoLevelId=0x0, lpFileInformation=0x219bd28 | out: lpFileInformation=0x219bd28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6513f054, ftCreationTime.dwHighDateTime=0x1d2d426, ftLastAccessTime.dwLowDateTime=0x6513f054, ftLastAccessTime.dwHighDateTime=0x1d2d426, ftLastWriteTime.dwLowDateTime=0x696758c6, ftLastWriteTime.dwHighDateTime=0x1d41fd9, nFileSizeHigh=0x0, nFileSizeLow=0x12821)) returned 1 [0115.573] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0115.573] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\officeclicktorun.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\officeclicktorun.exe_Rules.xml", lpFilePart=0x0) returned 0x58 [0115.573] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0115.573] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\officeclicktorun.exe_Rules.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\officeclicktorun.exe_rules.xml"), fInfoLevelId=0x0, lpFileInformation=0x219beb8 | out: lpFileInformation=0x219beb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6513f054, ftCreationTime.dwHighDateTime=0x1d2d426, ftLastAccessTime.dwLowDateTime=0x6513f054, ftLastAccessTime.dwHighDateTime=0x1d2d426, ftLastWriteTime.dwLowDateTime=0x696758c6, ftLastWriteTime.dwHighDateTime=0x1d41fd9, nFileSizeHigh=0x0, nFileSizeLow=0x12821)) returned 1 [0115.573] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0115.574] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\officeclicktorun.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\officeclicktorun.exe_Rules.xml", lpFilePart=0x0) returned 0x58 [0115.574] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0115.574] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\officeclicktorun.exe_Rules.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\officeclicktorun.exe_rules.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0115.574] GetFileType (hFile=0x444) returned 0x1 [0115.574] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0115.574] GetFileType (hFile=0x444) returned 0x1 [0115.574] ReadFile (in: hFile=0x444, lpBuffer=0x219e308, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x219e308*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0115.588] CloseHandle (hObject=0x444) returned 1 [0115.588] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\officeclicktorun.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\officeclicktorun.exe_Rules.xml", lpFilePart=0x0) returned 0x58 [0115.588] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0115.588] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\officeclicktorun.exe_Rules.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\officeclicktorun.exe_rules.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0115.588] GetFileType (hFile=0x444) returned 0x1 [0115.589] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0115.589] GetFileType (hFile=0x444) returned 0x1 [0115.589] WriteFile (in: hFile=0x444, lpBuffer=0x219c028*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x219c028*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0115.589] CloseHandle (hObject=0x444) returned 1 [0115.589] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\officeclicktorun.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\officeclicktorun.exe_Rules.xml", lpFilePart=0x0) returned 0x58 [0115.589] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\officeclicktorun.exe_Rules.xml.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\officeclicktorun.exe_Rules.xml.xuy", lpFilePart=0x0) returned 0x5c [0115.589] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0115.589] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\officeclicktorun.exe_Rules.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\officeclicktorun.exe_rules.xml"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6513f054, ftCreationTime.dwHighDateTime=0x1d2d426, ftLastAccessTime.dwLowDateTime=0x6513f054, ftLastAccessTime.dwHighDateTime=0x1d2d426, ftLastWriteTime.dwLowDateTime=0x30bf31f8, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x12821)) returned 1 [0115.589] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0115.589] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\officeclicktorun.exe_Rules.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\officeclicktorun.exe_rules.xml"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\officeclicktorun.exe_Rules.xml.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\officeclicktorun.exe_rules.xml.xuy")) returned 1 [0115.593] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\onenote.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\onenote.exe_Rules.xml", lpFilePart=0x0) returned 0x4f [0115.593] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0115.594] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\onenote.exe_Rules.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\onenote.exe_rules.xml"), fInfoLevelId=0x0, lpFileInformation=0x221a760 | out: lpFileInformation=0x221a760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65f99a5f, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x65f99a5f, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x65f99a5f, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x2cd1c)) returned 1 [0115.595] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0115.596] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\onenote.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\onenote.exe_Rules.xml", lpFilePart=0x0) returned 0x4f [0115.596] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0115.596] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\onenote.exe_Rules.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\onenote.exe_rules.xml"), fInfoLevelId=0x0, lpFileInformation=0x221a8c8 | out: lpFileInformation=0x221a8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65f99a5f, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x65f99a5f, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x65f99a5f, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x2cd1c)) returned 1 [0115.596] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0115.596] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\onenote.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\onenote.exe_Rules.xml", lpFilePart=0x0) returned 0x4f [0115.596] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0115.596] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\onenote.exe_Rules.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\onenote.exe_rules.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0115.597] GetFileType (hFile=0x444) returned 0x1 [0115.597] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0115.597] GetFileType (hFile=0x444) returned 0x1 [0115.597] ReadFile (in: hFile=0x444, lpBuffer=0x221ccc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x221ccc8*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0115.641] CloseHandle (hObject=0x444) returned 1 [0115.641] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\onenote.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\onenote.exe_Rules.xml", lpFilePart=0x0) returned 0x4f [0115.641] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0115.641] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\onenote.exe_Rules.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\onenote.exe_rules.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0115.642] GetFileType (hFile=0x444) returned 0x1 [0115.642] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0115.642] GetFileType (hFile=0x444) returned 0x1 [0115.642] WriteFile (in: hFile=0x444, lpBuffer=0x221aa10*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x221aa10*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0115.642] CloseHandle (hObject=0x444) returned 1 [0115.642] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\onenote.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\onenote.exe_Rules.xml", lpFilePart=0x0) returned 0x4f [0115.642] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\onenote.exe_Rules.xml.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\onenote.exe_Rules.xml.xuy", lpFilePart=0x0) returned 0x53 [0115.642] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0115.642] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\onenote.exe_Rules.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\onenote.exe_rules.xml"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65f99a5f, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x65f99a5f, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x30c655d3, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2cd1c)) returned 1 [0115.643] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0115.643] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\onenote.exe_Rules.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\onenote.exe_rules.xml"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\onenote.exe_Rules.xml.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\onenote.exe_rules.xml.xuy")) returned 1 [0115.644] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\osfinstaller.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\osfinstaller.exe_Rules.xml", lpFilePart=0x0) returned 0x54 [0115.644] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0115.644] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\osfinstaller.exe_Rules.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\osfinstaller.exe_rules.xml"), fInfoLevelId=0x0, lpFileInformation=0x22990b0 | out: lpFileInformation=0x22990b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x509abc95, ftCreationTime.dwHighDateTime=0x1d41fda, ftLastAccessTime.dwLowDateTime=0x509abc95, ftLastAccessTime.dwHighDateTime=0x1d41fda, ftLastWriteTime.dwLowDateTime=0x509abc95, ftLastWriteTime.dwHighDateTime=0x1d41fda, nFileSizeHigh=0x0, nFileSizeLow=0x148a2)) returned 1 [0115.644] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0115.644] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\osfinstaller.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\osfinstaller.exe_Rules.xml", lpFilePart=0x0) returned 0x54 [0115.644] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0115.644] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\osfinstaller.exe_Rules.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\osfinstaller.exe_rules.xml"), fInfoLevelId=0x0, lpFileInformation=0x2299230 | out: lpFileInformation=0x2299230*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x509abc95, ftCreationTime.dwHighDateTime=0x1d41fda, ftLastAccessTime.dwLowDateTime=0x509abc95, ftLastAccessTime.dwHighDateTime=0x1d41fda, ftLastWriteTime.dwLowDateTime=0x509abc95, ftLastWriteTime.dwHighDateTime=0x1d41fda, nFileSizeHigh=0x0, nFileSizeLow=0x148a2)) returned 1 [0115.644] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0115.644] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\osfinstaller.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\osfinstaller.exe_Rules.xml", lpFilePart=0x0) returned 0x54 [0115.645] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0115.645] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\osfinstaller.exe_Rules.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\osfinstaller.exe_rules.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0115.645] GetFileType (hFile=0x444) returned 0x1 [0115.645] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0115.645] GetFileType (hFile=0x444) returned 0x1 [0115.646] ReadFile (in: hFile=0x444, lpBuffer=0x229b660, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x229b660*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0115.668] CloseHandle (hObject=0x444) returned 1 [0115.668] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\osfinstaller.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\osfinstaller.exe_Rules.xml", lpFilePart=0x0) returned 0x54 [0115.668] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0115.669] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\osfinstaller.exe_Rules.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\osfinstaller.exe_rules.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0115.669] GetFileType (hFile=0x444) returned 0x1 [0115.669] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0115.669] GetFileType (hFile=0x444) returned 0x1 [0115.669] WriteFile (in: hFile=0x444, lpBuffer=0x2299390*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x2299390*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0115.669] CloseHandle (hObject=0x444) returned 1 [0115.669] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\osfinstaller.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\osfinstaller.exe_Rules.xml", lpFilePart=0x0) returned 0x54 [0115.669] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\osfinstaller.exe_Rules.xml.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\osfinstaller.exe_Rules.xml.xuy", lpFilePart=0x0) returned 0x58 [0115.670] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0115.670] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\osfinstaller.exe_Rules.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\osfinstaller.exe_rules.xml"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x509abc95, ftCreationTime.dwHighDateTime=0x1d41fda, ftLastAccessTime.dwLowDateTime=0x509abc95, ftLastAccessTime.dwHighDateTime=0x1d41fda, ftLastWriteTime.dwLowDateTime=0x30cb1a58, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x148a2)) returned 1 [0115.670] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0115.670] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\osfinstaller.exe_Rules.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\osfinstaller.exe_rules.xml"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\osfinstaller.exe_Rules.xml.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\osfinstaller.exe_rules.xml.xuy")) returned 1 [0115.671] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\outlook.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\outlook.exe_Rules.xml", lpFilePart=0x0) returned 0x4f [0115.671] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0115.671] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\outlook.exe_Rules.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\outlook.exe_rules.xml"), fInfoLevelId=0x0, lpFileInformation=0x2317a90 | out: lpFileInformation=0x2317a90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5e9e1587, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x5e9e1587, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x5e9e1587, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x38843)) returned 1 [0115.673] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0115.673] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\outlook.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\outlook.exe_Rules.xml", lpFilePart=0x0) returned 0x4f [0115.673] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0115.674] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\outlook.exe_Rules.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\outlook.exe_rules.xml"), fInfoLevelId=0x0, lpFileInformation=0x2317bf8 | out: lpFileInformation=0x2317bf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5e9e1587, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x5e9e1587, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x5e9e1587, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x38843)) returned 1 [0115.674] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0115.674] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\outlook.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\outlook.exe_Rules.xml", lpFilePart=0x0) returned 0x4f [0115.674] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0115.674] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\outlook.exe_Rules.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\outlook.exe_rules.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0115.675] GetFileType (hFile=0x444) returned 0x1 [0115.675] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0115.675] GetFileType (hFile=0x444) returned 0x1 [0115.675] ReadFile (in: hFile=0x444, lpBuffer=0x2319ff8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x2319ff8*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0115.750] CloseHandle (hObject=0x444) returned 1 [0115.751] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\outlook.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\outlook.exe_Rules.xml", lpFilePart=0x0) returned 0x4f [0115.751] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0115.751] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\outlook.exe_Rules.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\outlook.exe_rules.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0115.751] GetFileType (hFile=0x444) returned 0x1 [0115.751] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0115.751] GetFileType (hFile=0x444) returned 0x1 [0115.751] WriteFile (in: hFile=0x444, lpBuffer=0x21642d0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x21642d0*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0115.751] CloseHandle (hObject=0x444) returned 1 [0115.752] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\outlook.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\outlook.exe_Rules.xml", lpFilePart=0x0) returned 0x4f [0115.752] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\outlook.exe_Rules.xml.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\outlook.exe_Rules.xml.xuy", lpFilePart=0x0) returned 0x53 [0115.752] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0115.752] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\outlook.exe_Rules.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\outlook.exe_rules.xml"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5e9e1587, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x5e9e1587, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x30d709b2, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x38843)) returned 1 [0115.752] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0115.752] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\outlook.exe_Rules.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\outlook.exe_rules.xml"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\outlook.exe_Rules.xml.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\outlook.exe_rules.xml.xuy")) returned 1 [0115.753] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\powerpnt.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\powerpnt.exe_Rules.xml", lpFilePart=0x0) returned 0x50 [0115.753] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0115.753] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\powerpnt.exe_Rules.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\powerpnt.exe_rules.xml"), fInfoLevelId=0x0, lpFileInformation=0x21963c8 | out: lpFileInformation=0x21963c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x575e1cc8, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x575e1cc8, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0xf0d186df, ftLastWriteTime.dwHighDateTime=0x1d2d439, nFileSizeHigh=0x0, nFileSizeLow=0x32b10)) returned 1 [0115.767] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0115.767] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\powerpnt.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\powerpnt.exe_Rules.xml", lpFilePart=0x0) returned 0x50 [0115.768] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0115.768] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\powerpnt.exe_Rules.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\powerpnt.exe_rules.xml"), fInfoLevelId=0x0, lpFileInformation=0x2196538 | out: lpFileInformation=0x2196538*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x575e1cc8, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x575e1cc8, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0xf0d186df, ftLastWriteTime.dwHighDateTime=0x1d2d439, nFileSizeHigh=0x0, nFileSizeLow=0x32b10)) returned 1 [0115.768] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0115.768] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\powerpnt.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\powerpnt.exe_Rules.xml", lpFilePart=0x0) returned 0x50 [0115.768] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0115.768] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\powerpnt.exe_Rules.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\powerpnt.exe_rules.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0115.769] GetFileType (hFile=0x444) returned 0x1 [0115.769] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0115.769] GetFileType (hFile=0x444) returned 0x1 [0115.769] ReadFile (in: hFile=0x444, lpBuffer=0x2198948, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x2198948*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0115.788] CloseHandle (hObject=0x444) returned 1 [0115.789] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\powerpnt.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\powerpnt.exe_Rules.xml", lpFilePart=0x0) returned 0x50 [0115.789] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0115.789] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\powerpnt.exe_Rules.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\powerpnt.exe_rules.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0115.790] GetFileType (hFile=0x444) returned 0x1 [0115.790] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0115.790] GetFileType (hFile=0x444) returned 0x1 [0115.790] WriteFile (in: hFile=0x444, lpBuffer=0x2196688*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x2196688*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0115.790] CloseHandle (hObject=0x444) returned 1 [0115.790] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\powerpnt.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\powerpnt.exe_Rules.xml", lpFilePart=0x0) returned 0x50 [0115.790] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\powerpnt.exe_Rules.xml.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\powerpnt.exe_Rules.xml.xuy", lpFilePart=0x0) returned 0x54 [0115.790] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0115.790] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\powerpnt.exe_Rules.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\powerpnt.exe_rules.xml"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x575e1cc8, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x575e1cc8, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x30de2dff, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x32b10)) returned 1 [0115.790] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0115.790] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\powerpnt.exe_Rules.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\powerpnt.exe_rules.xml"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\powerpnt.exe_Rules.xml.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\powerpnt.exe_rules.xml.xuy")) returned 1 [0115.792] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\setup.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\setup.exe_Rules.xml", lpFilePart=0x0) returned 0x4d [0115.792] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0115.792] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\setup.exe_Rules.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\setup.exe_rules.xml"), fInfoLevelId=0x0, lpFileInformation=0x2214d50 | out: lpFileInformation=0x2214d50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x318562b6, ftCreationTime.dwHighDateTime=0x1d2d426, ftLastAccessTime.dwLowDateTime=0x318562b6, ftLastAccessTime.dwHighDateTime=0x1d2d426, ftLastWriteTime.dwLowDateTime=0x318562b6, ftLastWriteTime.dwHighDateTime=0x1d2d426, nFileSizeHigh=0x0, nFileSizeLow=0xfd13)) returned 1 [0115.792] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0115.792] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\setup.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\setup.exe_Rules.xml", lpFilePart=0x0) returned 0x4d [0115.792] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0115.792] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\setup.exe_Rules.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\setup.exe_rules.xml"), fInfoLevelId=0x0, lpFileInformation=0x2214eb0 | out: lpFileInformation=0x2214eb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x318562b6, ftCreationTime.dwHighDateTime=0x1d2d426, ftLastAccessTime.dwLowDateTime=0x318562b6, ftLastAccessTime.dwHighDateTime=0x1d2d426, ftLastWriteTime.dwLowDateTime=0x318562b6, ftLastWriteTime.dwHighDateTime=0x1d2d426, nFileSizeHigh=0x0, nFileSizeLow=0xfd13)) returned 1 [0115.792] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0115.792] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\setup.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\setup.exe_Rules.xml", lpFilePart=0x0) returned 0x4d [0115.792] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0115.792] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\setup.exe_Rules.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\setup.exe_rules.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0115.793] GetFileType (hFile=0x444) returned 0x1 [0115.793] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0115.793] GetFileType (hFile=0x444) returned 0x1 [0115.793] ReadFile (in: hFile=0x444, lpBuffer=0x22172a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x22172a0*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0115.816] CloseHandle (hObject=0x444) returned 1 [0115.816] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\setup.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\setup.exe_Rules.xml", lpFilePart=0x0) returned 0x4d [0115.816] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0115.816] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\setup.exe_Rules.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\setup.exe_rules.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0115.817] GetFileType (hFile=0x444) returned 0x1 [0115.817] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0115.817] GetFileType (hFile=0x444) returned 0x1 [0115.817] WriteFile (in: hFile=0x444, lpBuffer=0x2214ff0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x2214ff0*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0115.817] CloseHandle (hObject=0x444) returned 1 [0115.817] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\setup.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\setup.exe_Rules.xml", lpFilePart=0x0) returned 0x4d [0115.817] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\setup.exe_Rules.xml.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\setup.exe_Rules.xml.xuy", lpFilePart=0x0) returned 0x51 [0115.817] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0115.817] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\setup.exe_Rules.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\setup.exe_rules.xml"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x318562b6, ftCreationTime.dwHighDateTime=0x1d2d426, ftLastAccessTime.dwLowDateTime=0x318562b6, ftLastAccessTime.dwHighDateTime=0x1d2d426, ftLastWriteTime.dwLowDateTime=0x30e08e2d, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xfd13)) returned 1 [0115.817] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0115.818] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\setup.exe_Rules.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\setup.exe_rules.xml"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\setup.exe_Rules.xml.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\setup.exe_rules.xml.xuy")) returned 1 [0115.819] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\setup64.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\setup64.exe_Rules.xml", lpFilePart=0x0) returned 0x4f [0115.819] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0115.819] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\setup64.exe_Rules.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\setup64.exe_rules.xml"), fInfoLevelId=0x0, lpFileInformation=0x2293680 | out: lpFileInformation=0x2293680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf27a9dbd, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0xf27a9dbd, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0xf27a9dbd, ftLastWriteTime.dwHighDateTime=0x1d301c4, nFileSizeHigh=0x0, nFileSizeLow=0x61bb)) returned 1 [0115.819] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0115.819] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\setup64.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\setup64.exe_Rules.xml", lpFilePart=0x0) returned 0x4f [0115.820] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0115.820] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\setup64.exe_Rules.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\setup64.exe_rules.xml"), fInfoLevelId=0x0, lpFileInformation=0x22937e8 | out: lpFileInformation=0x22937e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf27a9dbd, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0xf27a9dbd, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0xf27a9dbd, ftLastWriteTime.dwHighDateTime=0x1d301c4, nFileSizeHigh=0x0, nFileSizeLow=0x61bb)) returned 1 [0115.820] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0115.820] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\setup64.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\setup64.exe_Rules.xml", lpFilePart=0x0) returned 0x4f [0115.820] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0115.820] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\setup64.exe_Rules.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\setup64.exe_rules.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0115.821] GetFileType (hFile=0x444) returned 0x1 [0115.821] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0115.821] GetFileType (hFile=0x444) returned 0x1 [0115.821] ReadFile (in: hFile=0x444, lpBuffer=0x2295be8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x2295be8*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0115.833] CloseHandle (hObject=0x444) returned 1 [0115.833] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\setup64.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\setup64.exe_Rules.xml", lpFilePart=0x0) returned 0x4f [0115.833] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0115.833] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\setup64.exe_Rules.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\setup64.exe_rules.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0115.834] GetFileType (hFile=0x444) returned 0x1 [0115.834] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0115.834] GetFileType (hFile=0x444) returned 0x1 [0115.834] WriteFile (in: hFile=0x444, lpBuffer=0x2293930*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x2293930*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0115.834] CloseHandle (hObject=0x444) returned 1 [0115.834] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\setup64.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\setup64.exe_Rules.xml", lpFilePart=0x0) returned 0x4f [0115.834] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\setup64.exe_Rules.xml.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\setup64.exe_Rules.xml.xuy", lpFilePart=0x0) returned 0x53 [0115.834] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0115.834] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\setup64.exe_Rules.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\setup64.exe_rules.xml"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf27a9dbd, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0xf27a9dbd, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x30e2f0fe, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x61bb)) returned 1 [0115.834] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0115.834] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\setup64.exe_Rules.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\setup64.exe_rules.xml"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\setup64.exe_Rules.xml.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\setup64.exe_rules.xml.xuy")) returned 1 [0115.835] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\visio.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\visio.exe_Rules.xml", lpFilePart=0x0) returned 0x4d [0115.835] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0115.835] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\visio.exe_Rules.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\visio.exe_rules.xml"), fInfoLevelId=0x0, lpFileInformation=0x2311fd0 | out: lpFileInformation=0x2311fd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60188f08, ftCreationTime.dwHighDateTime=0x1d301d2, ftLastAccessTime.dwLowDateTime=0x60188f08, ftLastAccessTime.dwHighDateTime=0x1d301d2, ftLastWriteTime.dwLowDateTime=0x60188f08, ftLastWriteTime.dwHighDateTime=0x1d301d2, nFileSizeHigh=0x0, nFileSizeLow=0x36e1b)) returned 1 [0115.835] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0115.835] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\visio.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\visio.exe_Rules.xml", lpFilePart=0x0) returned 0x4d [0115.836] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0115.836] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\visio.exe_Rules.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\visio.exe_rules.xml"), fInfoLevelId=0x0, lpFileInformation=0x2312130 | out: lpFileInformation=0x2312130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60188f08, ftCreationTime.dwHighDateTime=0x1d301d2, ftLastAccessTime.dwLowDateTime=0x60188f08, ftLastAccessTime.dwHighDateTime=0x1d301d2, ftLastWriteTime.dwLowDateTime=0x60188f08, ftLastWriteTime.dwHighDateTime=0x1d301d2, nFileSizeHigh=0x0, nFileSizeLow=0x36e1b)) returned 1 [0115.837] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0115.837] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\visio.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\visio.exe_Rules.xml", lpFilePart=0x0) returned 0x4d [0115.837] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0115.837] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\visio.exe_Rules.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\visio.exe_rules.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0115.837] GetFileType (hFile=0x444) returned 0x1 [0115.837] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0115.837] GetFileType (hFile=0x444) returned 0x1 [0115.838] ReadFile (in: hFile=0x444, lpBuffer=0x2314520, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x2314520*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0115.892] CloseHandle (hObject=0x444) returned 1 [0115.892] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\visio.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\visio.exe_Rules.xml", lpFilePart=0x0) returned 0x4d [0115.892] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0115.892] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\visio.exe_Rules.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\visio.exe_rules.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0115.893] GetFileType (hFile=0x444) returned 0x1 [0115.893] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0115.893] GetFileType (hFile=0x444) returned 0x1 [0115.893] WriteFile (in: hFile=0x444, lpBuffer=0x21642d0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x21642d0*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0115.893] CloseHandle (hObject=0x444) returned 1 [0115.893] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\visio.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\visio.exe_Rules.xml", lpFilePart=0x0) returned 0x4d [0115.893] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\visio.exe_Rules.xml.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\visio.exe_Rules.xml.xuy", lpFilePart=0x0) returned 0x51 [0115.893] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0115.893] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\visio.exe_Rules.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\visio.exe_rules.xml"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60188f08, ftCreationTime.dwHighDateTime=0x1d301d2, ftLastAccessTime.dwLowDateTime=0x60188f08, ftLastAccessTime.dwHighDateTime=0x1d301d2, ftLastWriteTime.dwLowDateTime=0x30ec7e98, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x36e1b)) returned 1 [0115.893] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0115.893] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\visio.exe_Rules.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\visio.exe_rules.xml"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\visio.exe_Rules.xml.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\visio.exe_rules.xml.xuy")) returned 1 [0115.894] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\winproj.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\winproj.exe_Rules.xml", lpFilePart=0x0) returned 0x4f [0115.894] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0115.894] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\winproj.exe_Rules.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\winproj.exe_rules.xml"), fInfoLevelId=0x0, lpFileInformation=0x2190928 | out: lpFileInformation=0x2190928*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64994be0, ftCreationTime.dwHighDateTime=0x1d301cf, ftLastAccessTime.dwLowDateTime=0x64994be0, ftLastAccessTime.dwHighDateTime=0x1d301cf, ftLastWriteTime.dwLowDateTime=0x64994be0, ftLastWriteTime.dwHighDateTime=0x1d301cf, nFileSizeHigh=0x0, nFileSizeLow=0x2324c)) returned 1 [0115.895] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0115.895] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\winproj.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\winproj.exe_Rules.xml", lpFilePart=0x0) returned 0x4f [0115.895] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0115.895] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\winproj.exe_Rules.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\winproj.exe_rules.xml"), fInfoLevelId=0x0, lpFileInformation=0x2190a90 | out: lpFileInformation=0x2190a90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64994be0, ftCreationTime.dwHighDateTime=0x1d301cf, ftLastAccessTime.dwLowDateTime=0x64994be0, ftLastAccessTime.dwHighDateTime=0x1d301cf, ftLastWriteTime.dwLowDateTime=0x64994be0, ftLastWriteTime.dwHighDateTime=0x1d301cf, nFileSizeHigh=0x0, nFileSizeLow=0x2324c)) returned 1 [0115.895] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0115.895] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\winproj.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\winproj.exe_Rules.xml", lpFilePart=0x0) returned 0x4f [0115.895] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0115.895] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\winproj.exe_Rules.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\winproj.exe_rules.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0115.896] GetFileType (hFile=0x444) returned 0x1 [0115.896] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0115.896] GetFileType (hFile=0x444) returned 0x1 [0115.896] ReadFile (in: hFile=0x444, lpBuffer=0x2192e90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x2192e90*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0115.942] CloseHandle (hObject=0x444) returned 1 [0115.942] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\winproj.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\winproj.exe_Rules.xml", lpFilePart=0x0) returned 0x4f [0115.942] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0115.943] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\winproj.exe_Rules.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\winproj.exe_rules.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0115.943] GetFileType (hFile=0x444) returned 0x1 [0115.943] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0115.943] GetFileType (hFile=0x444) returned 0x1 [0115.943] WriteFile (in: hFile=0x444, lpBuffer=0x2190bd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x2190bd8*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0115.943] CloseHandle (hObject=0x444) returned 1 [0115.943] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\winproj.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\winproj.exe_Rules.xml", lpFilePart=0x0) returned 0x4f [0115.943] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\winproj.exe_Rules.xml.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\winproj.exe_Rules.xml.xuy", lpFilePart=0x0) returned 0x53 [0115.943] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0115.943] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\winproj.exe_Rules.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\winproj.exe_rules.xml"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64994be0, ftCreationTime.dwHighDateTime=0x1d301cf, ftLastAccessTime.dwLowDateTime=0x64994be0, ftLastAccessTime.dwHighDateTime=0x1d301cf, ftLastWriteTime.dwLowDateTime=0x30f3a1da, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2324c)) returned 1 [0115.943] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0115.944] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\winproj.exe_Rules.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\winproj.exe_rules.xml"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\winproj.exe_Rules.xml.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\winproj.exe_rules.xml.xuy")) returned 1 [0115.944] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\winword.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\winword.exe_Rules.xml", lpFilePart=0x0) returned 0x4f [0115.945] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0115.945] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\winword.exe_Rules.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\winword.exe_rules.xml"), fInfoLevelId=0x0, lpFileInformation=0x220f278 | out: lpFileInformation=0x220f278*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x497e7df5, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x497e7df5, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0xfc60b260, ftLastWriteTime.dwHighDateTime=0x1d2d438, nFileSizeHigh=0x0, nFileSizeLow=0x4b3d2)) returned 1 [0115.945] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0115.945] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\winword.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\winword.exe_Rules.xml", lpFilePart=0x0) returned 0x4f [0115.945] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0115.945] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\winword.exe_Rules.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\winword.exe_rules.xml"), fInfoLevelId=0x0, lpFileInformation=0x220f3e0 | out: lpFileInformation=0x220f3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x497e7df5, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x497e7df5, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0xfc60b260, ftLastWriteTime.dwHighDateTime=0x1d2d438, nFileSizeHigh=0x0, nFileSizeLow=0x4b3d2)) returned 1 [0115.945] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0115.945] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\winword.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\winword.exe_Rules.xml", lpFilePart=0x0) returned 0x4f [0115.945] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0115.945] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\winword.exe_Rules.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\winword.exe_rules.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0115.946] GetFileType (hFile=0x444) returned 0x1 [0115.946] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0115.946] GetFileType (hFile=0x444) returned 0x1 [0115.946] ReadFile (in: hFile=0x444, lpBuffer=0x22117e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x22117e0*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0115.975] CloseHandle (hObject=0x444) returned 1 [0115.975] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\winword.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\winword.exe_Rules.xml", lpFilePart=0x0) returned 0x4f [0115.975] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0115.975] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\winword.exe_Rules.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\winword.exe_rules.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0115.975] GetFileType (hFile=0x444) returned 0x1 [0115.975] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0115.975] GetFileType (hFile=0x444) returned 0x1 [0115.975] WriteFile (in: hFile=0x444, lpBuffer=0x220f528*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x220f528*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0115.976] CloseHandle (hObject=0x444) returned 1 [0115.976] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\winword.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\winword.exe_Rules.xml", lpFilePart=0x0) returned 0x4f [0115.976] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\winword.exe_Rules.xml.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\winword.exe_Rules.xml.xuy", lpFilePart=0x0) returned 0x53 [0115.976] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0115.976] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\winword.exe_Rules.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\winword.exe_rules.xml"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x497e7df5, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x497e7df5, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x30f866bb, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x4b3d2)) returned 1 [0115.977] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0115.977] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\winword.exe_Rules.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\winword.exe_rules.xml"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\winword.exe_Rules.xml.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\winword.exe_rules.xml.xuy")) returned 1 [0115.978] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0115.978] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\BackstageInAppNavCache", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\BackstageInAppNavCache", lpFilePart=0x0) returned 0x50 [0115.978] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\BackstageInAppNavCache\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\BackstageInAppNavCache\\", lpFilePart=0x0) returned 0x51 [0115.978] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\BackstageInAppNavCache\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7f10 [0115.980] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0115.980] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0115.980] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0115.980] FindClose (in: hFindFile=0x5d7f10 | out: hFindFile=0x5d7f10) returned 1 [0115.980] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0115.980] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0115.980] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0115.980] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\BackstageInAppNavCache", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\BackstageInAppNavCache", lpFilePart=0x0) returned 0x50 [0115.981] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\BackstageInAppNavCache\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\BackstageInAppNavCache\\", lpFilePart=0x0) returned 0x51 [0115.981] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\BackstageInAppNavCache\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7c70 [0115.981] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0115.981] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0115.981] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0115.981] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0115.981] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0115.981] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0115.981] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0115.982] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\BackstageInAppNavCache\\MyComputer", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\BackstageInAppNavCache\\MyComputer", lpFilePart=0x0) returned 0x5b [0115.982] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\BackstageInAppNavCache\\MyComputer\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\BackstageInAppNavCache\\MyComputer\\", lpFilePart=0x0) returned 0x5c [0115.982] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\BackstageInAppNavCache\\MyComputer\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d78b0 [0115.982] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0115.982] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0115.982] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0115.982] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0115.982] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0115.983] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0115.983] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\BackstageInAppNavCache\\MyComputer", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\BackstageInAppNavCache\\MyComputer", lpFilePart=0x0) returned 0x5b [0115.983] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\BackstageInAppNavCache\\MyComputer\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\BackstageInAppNavCache\\MyComputer\\", lpFilePart=0x0) returned 0x5c [0115.983] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\BackstageInAppNavCache\\MyComputer\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d7370 [0115.983] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0115.983] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0115.983] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0115.984] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0115.984] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0115.984] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0115.984] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache", lpFilePart=0x0) returned 0x49 [0115.984] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\", lpFilePart=0x0) returned 0x4a [0115.984] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7d30 [0115.984] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0115.984] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0115.985] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0115.985] FindClose (in: hFindFile=0x5d7d30 | out: hFindFile=0x5d7d30) returned 1 [0115.985] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0115.985] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0115.985] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0115.985] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache", lpFilePart=0x0) returned 0x49 [0115.985] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\", lpFilePart=0x0) returned 0x4a [0115.985] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d81b0 [0115.985] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0115.985] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0115.986] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0115.986] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0115.986] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0115.986] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0115.986] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0115.986] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers", lpFilePart=0x0) returned 0x52 [0115.986] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\", lpFilePart=0x0) returned 0x53 [0115.986] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d79d0 [0115.986] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0115.987] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0115.987] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0115.987] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0115.987] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0115.987] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0115.987] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0115.987] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0115.987] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0115.987] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers", lpFilePart=0x0) returned 0x52 [0115.987] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\", lpFilePart=0x0) returned 0x53 [0115.987] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d73d0 [0115.988] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0115.988] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0115.988] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0115.988] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0115.988] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0115.988] FindClose (in: hFindFile=0x5d73d0 | out: hFindFile=0x5d73d0) returned 1 [0115.988] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0115.989] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0115.989] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0115.989] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\cdn.odc.officeapps.live.com", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\cdn.odc.officeapps.live.com", lpFilePart=0x0) returned 0x6e [0115.989] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\cdn.odc.officeapps.live.com\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\cdn.odc.officeapps.live.com\\", lpFilePart=0x0) returned 0x6f [0115.989] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\cdn.odc.officeapps.live.com\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d7c70 [0115.991] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0115.991] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0115.991] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0115.991] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0115.993] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0115.993] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0115.993] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0115.993] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\cdn.odc.officeapps.live.com", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\cdn.odc.officeapps.live.com", lpFilePart=0x0) returned 0x6e [0115.993] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\cdn.odc.officeapps.live.com\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\cdn.odc.officeapps.live.com\\", lpFilePart=0x0) returned 0x6f [0115.993] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\cdn.odc.officeapps.live.com\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d7550 [0115.994] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0115.994] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0115.994] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0115.994] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0115.995] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0115.995] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0115.995] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\cdn.odc.officeapps.live.com\\29598952-6912-4B4E-8754-D3E714F498C3", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\cdn.odc.officeapps.live.com\\29598952-6912-4B4E-8754-D3E714F498C3", lpFilePart=0x0) returned 0x93 [0115.995] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0115.995] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\cdn.odc.officeapps.live.com\\29598952-6912-4B4E-8754-D3E714F498C3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\cdn.odc.officeapps.live.com\\29598952-6912-4b4e-8754-d3e714f498c3"), fInfoLevelId=0x0, lpFileInformation=0x2299450 | out: lpFileInformation=0x2299450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5aecdd9a, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x5aecdd9a, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x5aecdd9a, ftLastWriteTime.dwHighDateTime=0x1d301c4, nFileSizeHigh=0x0, nFileSizeLow=0x2c1)) returned 1 [0115.996] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0115.996] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\cdn.odc.officeapps.live.com\\29598952-6912-4B4E-8754-D3E714F498C3", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\cdn.odc.officeapps.live.com\\29598952-6912-4B4E-8754-D3E714F498C3", lpFilePart=0x0) returned 0x93 [0115.996] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0115.996] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\cdn.odc.officeapps.live.com\\29598952-6912-4B4E-8754-D3E714F498C3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\cdn.odc.officeapps.live.com\\29598952-6912-4b4e-8754-d3e714f498c3"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0115.997] GetFileType (hFile=0x444) returned 0x1 [0115.997] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0115.997] GetFileType (hFile=0x444) returned 0x1 [0115.997] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x2c1 [0115.997] ReadFile (in: hFile=0x444, lpBuffer=0x2299b50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x2299b50*, lpNumberOfBytesRead=0x3be5c8*=0x2c1, lpOverlapped=0x0) returned 1 [0116.001] CloseHandle (hObject=0x444) returned 1 [0116.020] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\cdn.odc.officeapps.live.com\\29598952-6912-4B4E-8754-D3E714F498C3", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\cdn.odc.officeapps.live.com\\29598952-6912-4B4E-8754-D3E714F498C3", lpFilePart=0x0) returned 0x93 [0116.020] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0116.020] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\cdn.odc.officeapps.live.com\\29598952-6912-4B4E-8754-D3E714F498C3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\cdn.odc.officeapps.live.com\\29598952-6912-4b4e-8754-d3e714f498c3"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0116.022] GetFileType (hFile=0x444) returned 0x1 [0116.022] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0116.022] GetFileType (hFile=0x444) returned 0x1 [0116.022] WriteFile (in: hFile=0x444, lpBuffer=0x2311a08*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x2311a08*, lpNumberOfBytesWritten=0x3be4d8*=0x2d0, lpOverlapped=0x0) returned 1 [0116.023] CloseHandle (hObject=0x444) returned 1 [0116.023] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\cdn.odc.officeapps.live.com\\29598952-6912-4B4E-8754-D3E714F498C3", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\cdn.odc.officeapps.live.com\\29598952-6912-4B4E-8754-D3E714F498C3", lpFilePart=0x0) returned 0x93 [0116.023] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\cdn.odc.officeapps.live.com\\29598952-6912-4B4E-8754-D3E714F498C3.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\cdn.odc.officeapps.live.com\\29598952-6912-4B4E-8754-D3E714F498C3.xuy", lpFilePart=0x0) returned 0x97 [0116.023] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0116.023] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\cdn.odc.officeapps.live.com\\29598952-6912-4B4E-8754-D3E714F498C3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\cdn.odc.officeapps.live.com\\29598952-6912-4b4e-8754-d3e714f498c3"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5aecdd9a, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x5aecdd9a, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x30ff8dfc, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2d0)) returned 1 [0116.024] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0116.024] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\cdn.odc.officeapps.live.com\\29598952-6912-4B4E-8754-D3E714F498C3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\cdn.odc.officeapps.live.com\\29598952-6912-4b4e-8754-d3e714f498c3"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\cdn.odc.officeapps.live.com\\29598952-6912-4B4E-8754-D3E714F498C3.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\cdn.odc.officeapps.live.com\\29598952-6912-4b4e-8754-d3e714f498c3.xuy")) returned 1 [0116.025] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0116.025] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net", lpFilePart=0x0) returned 0x75 [0116.025] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\", lpFilePart=0x0) returned 0x76 [0116.025] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d7370 [0116.027] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0116.042] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0116.042] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0116.042] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0116.042] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0116.042] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0116.042] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0116.042] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0116.042] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0116.042] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0116.043] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0116.043] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0116.043] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0116.043] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0116.043] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0116.043] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0116.043] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0116.043] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0116.043] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0116.043] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0116.044] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0116.044] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0116.044] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0116.044] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0116.044] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0116.045] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0116.045] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0116.046] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0116.046] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0116.046] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0116.046] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0116.046] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0116.046] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0116.046] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0116.046] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0116.046] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0116.046] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0116.047] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0116.047] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0116.047] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0116.047] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0116.047] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0116.047] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0116.047] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0116.047] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0116.047] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0116.047] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0116.048] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0116.048] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0116.048] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0116.048] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0116.048] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0116.049] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0116.049] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0116.049] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0116.049] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0116.049] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0116.049] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0116.049] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0116.049] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0116.049] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0116.050] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0116.050] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0116.050] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0116.050] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net", lpFilePart=0x0) returned 0x75 [0116.050] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\", lpFilePart=0x0) returned 0x76 [0116.050] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d7eb0 [0116.051] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0116.051] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0116.051] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0116.052] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0116.052] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0116.052] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0116.052] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0116.052] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0116.052] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0116.052] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0116.052] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0116.052] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0116.052] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0116.053] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0116.053] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0116.053] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0116.053] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0116.053] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0116.053] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0116.053] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0116.053] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0116.053] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0116.053] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0116.053] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0116.053] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0116.054] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0116.054] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0116.054] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0116.054] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0116.054] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0116.054] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0116.054] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0116.054] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0116.054] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0116.054] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0116.054] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0116.054] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0116.054] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0116.054] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0116.054] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0116.054] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0116.054] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0116.054] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0116.054] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0116.054] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0116.054] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0116.055] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0116.055] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0116.055] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0116.055] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0116.055] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0116.055] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0116.055] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0116.055] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0116.055] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0116.055] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0116.055] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0116.055] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0116.055] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0116.055] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0116.055] FindClose (in: hFindFile=0x5d7eb0 | out: hFindFile=0x5d7eb0) returned 1 [0116.056] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0116.056] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0116.056] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\01A0C0A0-84FB-4EB4-A9A1-4BCABE4EFC24", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\01A0C0A0-84FB-4EB4-A9A1-4BCABE4EFC24", lpFilePart=0x0) returned 0x9a [0116.056] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0116.056] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\01A0C0A0-84FB-4EB4-A9A1-4BCABE4EFC24" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\01a0c0a0-84fb-4eb4-a9a1-4bcabe4efc24"), fInfoLevelId=0x0, lpFileInformation=0x232f230 | out: lpFileInformation=0x232f230*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7323dbd6, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x7323dbd6, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x7323ef66, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x4c01)) returned 1 [0116.057] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0116.057] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\01A0C0A0-84FB-4EB4-A9A1-4BCABE4EFC24", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\01A0C0A0-84FB-4EB4-A9A1-4BCABE4EFC24", lpFilePart=0x0) returned 0x9a [0116.057] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0116.057] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\01A0C0A0-84FB-4EB4-A9A1-4BCABE4EFC24" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\01a0c0a0-84fb-4eb4-a9a1-4bcabe4efc24"), fInfoLevelId=0x0, lpFileInformation=0x232f450 | out: lpFileInformation=0x232f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7323dbd6, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x7323dbd6, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x7323ef66, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x4c01)) returned 1 [0116.058] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0116.058] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\01A0C0A0-84FB-4EB4-A9A1-4BCABE4EFC24", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\01A0C0A0-84FB-4EB4-A9A1-4BCABE4EFC24", lpFilePart=0x0) returned 0x9a [0116.058] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0116.058] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\01A0C0A0-84FB-4EB4-A9A1-4BCABE4EFC24" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\01a0c0a0-84fb-4eb4-a9a1-4bcabe4efc24"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0116.058] GetFileType (hFile=0x444) returned 0x1 [0116.058] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0116.058] GetFileType (hFile=0x444) returned 0x1 [0116.058] ReadFile (in: hFile=0x444, lpBuffer=0x23319c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x23319c0*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0116.106] CloseHandle (hObject=0x444) returned 1 [0116.106] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\01A0C0A0-84FB-4EB4-A9A1-4BCABE4EFC24", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\01A0C0A0-84FB-4EB4-A9A1-4BCABE4EFC24", lpFilePart=0x0) returned 0x9a [0116.106] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0116.106] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\01A0C0A0-84FB-4EB4-A9A1-4BCABE4EFC24" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\01a0c0a0-84fb-4eb4-a9a1-4bcabe4efc24"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0116.107] GetFileType (hFile=0x444) returned 0x1 [0116.107] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0116.107] GetFileType (hFile=0x444) returned 0x1 [0116.107] WriteFile (in: hFile=0x444, lpBuffer=0x2168b08*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x2168b08*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0116.107] CloseHandle (hObject=0x444) returned 1 [0116.107] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\01A0C0A0-84FB-4EB4-A9A1-4BCABE4EFC24", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\01A0C0A0-84FB-4EB4-A9A1-4BCABE4EFC24", lpFilePart=0x0) returned 0x9a [0116.107] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\01A0C0A0-84FB-4EB4-A9A1-4BCABE4EFC24.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\01A0C0A0-84FB-4EB4-A9A1-4BCABE4EFC24.xuy", lpFilePart=0x0) returned 0x9e [0116.107] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0116.107] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\01A0C0A0-84FB-4EB4-A9A1-4BCABE4EFC24" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\01a0c0a0-84fb-4eb4-a9a1-4bcabe4efc24"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7323dbd6, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x7323dbd6, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x310ddf7f, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x4c01)) returned 1 [0116.107] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0116.107] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\01A0C0A0-84FB-4EB4-A9A1-4BCABE4EFC24" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\01a0c0a0-84fb-4eb4-a9a1-4bcabe4efc24"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\01A0C0A0-84FB-4EB4-A9A1-4BCABE4EFC24.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\01a0c0a0-84fb-4eb4-a9a1-4bcabe4efc24.xuy")) returned 1 [0116.109] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\04A54DF6-2C68-43B6-89EB-3B7958597AC7", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\04A54DF6-2C68-43B6-89EB-3B7958597AC7", lpFilePart=0x0) returned 0x9a [0116.109] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0116.109] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\04A54DF6-2C68-43B6-89EB-3B7958597AC7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\04a54df6-2c68-43b6-89eb-3b7958597ac7"), fInfoLevelId=0x0, lpFileInformation=0x21b27f8 | out: lpFileInformation=0x21b27f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7378960a, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x7378960a, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x7378a9d8, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x11da)) returned 1 [0116.109] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0116.109] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\04A54DF6-2C68-43B6-89EB-3B7958597AC7", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\04A54DF6-2C68-43B6-89EB-3B7958597AC7", lpFilePart=0x0) returned 0x9a [0116.109] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0116.109] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\04A54DF6-2C68-43B6-89EB-3B7958597AC7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\04a54df6-2c68-43b6-89eb-3b7958597ac7"), fInfoLevelId=0x0, lpFileInformation=0x21b2a18 | out: lpFileInformation=0x21b2a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7378960a, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x7378960a, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x7378a9d8, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x11da)) returned 1 [0116.109] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0116.109] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\04A54DF6-2C68-43B6-89EB-3B7958597AC7", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\04A54DF6-2C68-43B6-89EB-3B7958597AC7", lpFilePart=0x0) returned 0x9a [0116.109] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0116.109] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\04A54DF6-2C68-43B6-89EB-3B7958597AC7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\04a54df6-2c68-43b6-89eb-3b7958597ac7"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0116.110] GetFileType (hFile=0x444) returned 0x1 [0116.110] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0116.110] GetFileType (hFile=0x444) returned 0x1 [0116.110] ReadFile (in: hFile=0x444, lpBuffer=0x21b4f88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x21b4f88*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0116.131] CloseHandle (hObject=0x444) returned 1 [0116.132] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\04A54DF6-2C68-43B6-89EB-3B7958597AC7", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\04A54DF6-2C68-43B6-89EB-3B7958597AC7", lpFilePart=0x0) returned 0x9a [0116.132] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0116.132] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\04A54DF6-2C68-43B6-89EB-3B7958597AC7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\04a54df6-2c68-43b6-89eb-3b7958597ac7"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0116.132] GetFileType (hFile=0x444) returned 0x1 [0116.132] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0116.132] GetFileType (hFile=0x444) returned 0x1 [0116.132] WriteFile (in: hFile=0x444, lpBuffer=0x21b2c18*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x21b2c18*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0116.132] CloseHandle (hObject=0x444) returned 1 [0116.133] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\04A54DF6-2C68-43B6-89EB-3B7958597AC7", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\04A54DF6-2C68-43B6-89EB-3B7958597AC7", lpFilePart=0x0) returned 0x9a [0116.133] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\04A54DF6-2C68-43B6-89EB-3B7958597AC7.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\04A54DF6-2C68-43B6-89EB-3B7958597AC7.xuy", lpFilePart=0x0) returned 0x9e [0116.133] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0116.133] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\04A54DF6-2C68-43B6-89EB-3B7958597AC7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\04a54df6-2c68-43b6-89eb-3b7958597ac7"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7378960a, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x7378960a, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x31103d7b, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0116.133] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0116.133] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\04A54DF6-2C68-43B6-89EB-3B7958597AC7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\04a54df6-2c68-43b6-89eb-3b7958597ac7"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\04A54DF6-2C68-43B6-89EB-3B7958597AC7.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\04a54df6-2c68-43b6-89eb-3b7958597ac7.xuy")) returned 1 [0116.134] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\0552393D-14EB-4F89-8C21-8959A49968D2", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\0552393D-14EB-4F89-8C21-8959A49968D2", lpFilePart=0x0) returned 0x9a [0116.134] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0116.134] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\0552393D-14EB-4F89-8C21-8959A49968D2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\0552393d-14eb-4f89-8c21-8959a49968d2"), fInfoLevelId=0x0, lpFileInformation=0x22315c8 | out: lpFileInformation=0x22315c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x884aebe5, ftCreationTime.dwHighDateTime=0x1d301cf, ftLastAccessTime.dwLowDateTime=0x884aebe5, ftLastAccessTime.dwHighDateTime=0x1d301cf, ftLastWriteTime.dwLowDateTime=0x884aff7f, ftLastWriteTime.dwHighDateTime=0x1d301cf, nFileSizeHigh=0x0, nFileSizeLow=0x3765)) returned 1 [0116.135] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0116.135] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\0552393D-14EB-4F89-8C21-8959A49968D2", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\0552393D-14EB-4F89-8C21-8959A49968D2", lpFilePart=0x0) returned 0x9a [0116.135] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0116.135] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\0552393D-14EB-4F89-8C21-8959A49968D2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\0552393d-14eb-4f89-8c21-8959a49968d2"), fInfoLevelId=0x0, lpFileInformation=0x22317e8 | out: lpFileInformation=0x22317e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x884aebe5, ftCreationTime.dwHighDateTime=0x1d301cf, ftLastAccessTime.dwLowDateTime=0x884aebe5, ftLastAccessTime.dwHighDateTime=0x1d301cf, ftLastWriteTime.dwLowDateTime=0x884aff7f, ftLastWriteTime.dwHighDateTime=0x1d301cf, nFileSizeHigh=0x0, nFileSizeLow=0x3765)) returned 1 [0116.135] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0116.135] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\0552393D-14EB-4F89-8C21-8959A49968D2", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\0552393D-14EB-4F89-8C21-8959A49968D2", lpFilePart=0x0) returned 0x9a [0116.135] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0116.135] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\0552393D-14EB-4F89-8C21-8959A49968D2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\0552393d-14eb-4f89-8c21-8959a49968d2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0116.136] GetFileType (hFile=0x444) returned 0x1 [0116.136] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0116.136] GetFileType (hFile=0x444) returned 0x1 [0116.136] ReadFile (in: hFile=0x444, lpBuffer=0x2233d58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x2233d58*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0116.155] CloseHandle (hObject=0x444) returned 1 [0116.155] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\0552393D-14EB-4F89-8C21-8959A49968D2", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\0552393D-14EB-4F89-8C21-8959A49968D2", lpFilePart=0x0) returned 0x9a [0116.155] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0116.155] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\0552393D-14EB-4F89-8C21-8959A49968D2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\0552393d-14eb-4f89-8c21-8959a49968d2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0116.155] GetFileType (hFile=0x444) returned 0x1 [0116.155] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0116.155] GetFileType (hFile=0x444) returned 0x1 [0116.155] WriteFile (in: hFile=0x444, lpBuffer=0x22319e8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x22319e8*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0116.156] CloseHandle (hObject=0x444) returned 1 [0116.156] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\0552393D-14EB-4F89-8C21-8959A49968D2", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\0552393D-14EB-4F89-8C21-8959A49968D2", lpFilePart=0x0) returned 0x9a [0116.156] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\0552393D-14EB-4F89-8C21-8959A49968D2.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\0552393D-14EB-4F89-8C21-8959A49968D2.xuy", lpFilePart=0x0) returned 0x9e [0116.156] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0116.156] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\0552393D-14EB-4F89-8C21-8959A49968D2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\0552393d-14eb-4f89-8c21-8959a49968d2"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x884aebe5, ftCreationTime.dwHighDateTime=0x1d301cf, ftLastAccessTime.dwLowDateTime=0x884aebe5, ftLastAccessTime.dwHighDateTime=0x1d301cf, ftLastWriteTime.dwLowDateTime=0x31150255, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x3765)) returned 1 [0116.156] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0116.156] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\0552393D-14EB-4F89-8C21-8959A49968D2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\0552393d-14eb-4f89-8c21-8959a49968d2"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\0552393D-14EB-4F89-8C21-8959A49968D2.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\0552393d-14eb-4f89-8c21-8959a49968d2.xuy")) returned 1 [0116.157] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\07EC9290-11A1-4B7B-8542-424076F02838", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\07EC9290-11A1-4B7B-8542-424076F02838", lpFilePart=0x0) returned 0x9a [0116.157] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0116.157] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\07EC9290-11A1-4B7B-8542-424076F02838" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\07ec9290-11a1-4b7b-8542-424076f02838"), fInfoLevelId=0x0, lpFileInformation=0x22b0398 | out: lpFileInformation=0x22b0398*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73163316, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x73163316, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x73163316, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x3449)) returned 1 [0116.158] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0116.158] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\07EC9290-11A1-4B7B-8542-424076F02838", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\07EC9290-11A1-4B7B-8542-424076F02838", lpFilePart=0x0) returned 0x9a [0116.158] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0116.158] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\07EC9290-11A1-4B7B-8542-424076F02838" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\07ec9290-11a1-4b7b-8542-424076f02838"), fInfoLevelId=0x0, lpFileInformation=0x22b05b8 | out: lpFileInformation=0x22b05b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73163316, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x73163316, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x73163316, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x3449)) returned 1 [0116.158] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0116.158] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\07EC9290-11A1-4B7B-8542-424076F02838", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\07EC9290-11A1-4B7B-8542-424076F02838", lpFilePart=0x0) returned 0x9a [0116.158] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0116.158] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\07EC9290-11A1-4B7B-8542-424076F02838" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\07ec9290-11a1-4b7b-8542-424076f02838"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0116.159] GetFileType (hFile=0x444) returned 0x1 [0116.159] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0116.159] GetFileType (hFile=0x444) returned 0x1 [0116.159] ReadFile (in: hFile=0x444, lpBuffer=0x22b2b28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x22b2b28*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0116.178] CloseHandle (hObject=0x444) returned 1 [0116.178] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\07EC9290-11A1-4B7B-8542-424076F02838", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\07EC9290-11A1-4B7B-8542-424076F02838", lpFilePart=0x0) returned 0x9a [0116.178] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0116.178] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\07EC9290-11A1-4B7B-8542-424076F02838" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\07ec9290-11a1-4b7b-8542-424076f02838"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0116.178] GetFileType (hFile=0x444) returned 0x1 [0116.178] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0116.178] GetFileType (hFile=0x444) returned 0x1 [0116.178] WriteFile (in: hFile=0x444, lpBuffer=0x22b07b8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x22b07b8*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0116.179] CloseHandle (hObject=0x444) returned 1 [0116.179] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\07EC9290-11A1-4B7B-8542-424076F02838", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\07EC9290-11A1-4B7B-8542-424076F02838", lpFilePart=0x0) returned 0x9a [0116.179] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\07EC9290-11A1-4B7B-8542-424076F02838.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\07EC9290-11A1-4B7B-8542-424076F02838.xuy", lpFilePart=0x0) returned 0x9e [0116.179] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0116.179] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\07EC9290-11A1-4B7B-8542-424076F02838" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\07ec9290-11a1-4b7b-8542-424076f02838"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73163316, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x73163316, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x311764d6, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x3449)) returned 1 [0116.179] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0116.179] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\07EC9290-11A1-4B7B-8542-424076F02838" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\07ec9290-11a1-4b7b-8542-424076f02838"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\07EC9290-11A1-4B7B-8542-424076F02838.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\07ec9290-11a1-4b7b-8542-424076f02838.xuy")) returned 1 [0116.181] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\18E43682-B084-475D-AA0F-B94BD8888B3D", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\18E43682-B084-475D-AA0F-B94BD8888B3D", lpFilePart=0x0) returned 0x9a [0116.181] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0116.181] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\18E43682-B084-475D-AA0F-B94BD8888B3D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\18e43682-b084-475d-aa0f-b94bd8888b3d"), fInfoLevelId=0x0, lpFileInformation=0x232f168 | out: lpFileInformation=0x232f168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x880c321e, ftCreationTime.dwHighDateTime=0x1d301cf, ftLastAccessTime.dwLowDateTime=0x880c321e, ftLastAccessTime.dwHighDateTime=0x1d301cf, ftLastWriteTime.dwLowDateTime=0x8812608d, ftLastWriteTime.dwHighDateTime=0x1d301cf, nFileSizeHigh=0x0, nFileSizeLow=0x6454)) returned 1 [0116.182] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0116.182] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\18E43682-B084-475D-AA0F-B94BD8888B3D", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\18E43682-B084-475D-AA0F-B94BD8888B3D", lpFilePart=0x0) returned 0x9a [0116.182] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0116.182] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\18E43682-B084-475D-AA0F-B94BD8888B3D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\18e43682-b084-475d-aa0f-b94bd8888b3d"), fInfoLevelId=0x0, lpFileInformation=0x232f388 | out: lpFileInformation=0x232f388*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x880c321e, ftCreationTime.dwHighDateTime=0x1d301cf, ftLastAccessTime.dwLowDateTime=0x880c321e, ftLastAccessTime.dwHighDateTime=0x1d301cf, ftLastWriteTime.dwLowDateTime=0x8812608d, ftLastWriteTime.dwHighDateTime=0x1d301cf, nFileSizeHigh=0x0, nFileSizeLow=0x6454)) returned 1 [0116.182] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0116.182] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\18E43682-B084-475D-AA0F-B94BD8888B3D", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\18E43682-B084-475D-AA0F-B94BD8888B3D", lpFilePart=0x0) returned 0x9a [0116.182] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0116.182] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\18E43682-B084-475D-AA0F-B94BD8888B3D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\18e43682-b084-475d-aa0f-b94bd8888b3d"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0116.183] GetFileType (hFile=0x444) returned 0x1 [0116.183] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0116.183] GetFileType (hFile=0x444) returned 0x1 [0116.183] ReadFile (in: hFile=0x444, lpBuffer=0x23318f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x23318f8*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0116.245] CloseHandle (hObject=0x444) returned 1 [0116.245] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\18E43682-B084-475D-AA0F-B94BD8888B3D", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\18E43682-B084-475D-AA0F-B94BD8888B3D", lpFilePart=0x0) returned 0x9a [0116.245] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0116.245] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\18E43682-B084-475D-AA0F-B94BD8888B3D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\18e43682-b084-475d-aa0f-b94bd8888b3d"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0116.246] GetFileType (hFile=0x444) returned 0x1 [0116.246] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0116.246] GetFileType (hFile=0x444) returned 0x1 [0116.246] WriteFile (in: hFile=0x444, lpBuffer=0x2168af0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x2168af0*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0116.246] CloseHandle (hObject=0x444) returned 1 [0116.246] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\18E43682-B084-475D-AA0F-B94BD8888B3D", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\18E43682-B084-475D-AA0F-B94BD8888B3D", lpFilePart=0x0) returned 0x9a [0116.246] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\18E43682-B084-475D-AA0F-B94BD8888B3D.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\18E43682-B084-475D-AA0F-B94BD8888B3D.xuy", lpFilePart=0x0) returned 0x9e [0116.246] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0116.246] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\18E43682-B084-475D-AA0F-B94BD8888B3D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\18e43682-b084-475d-aa0f-b94bd8888b3d"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x880c321e, ftCreationTime.dwHighDateTime=0x1d301cf, ftLastAccessTime.dwLowDateTime=0x880c321e, ftLastAccessTime.dwHighDateTime=0x1d301cf, ftLastWriteTime.dwLowDateTime=0x312351f9, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x6454)) returned 1 [0116.246] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0116.246] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\18E43682-B084-475D-AA0F-B94BD8888B3D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\18e43682-b084-475d-aa0f-b94bd8888b3d"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\18E43682-B084-475D-AA0F-B94BD8888B3D.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\18e43682-b084-475d-aa0f-b94bd8888b3d.xuy")) returned 1 [0116.248] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\2378B1B3-B054-41CE-B565-01C50DF64F3A", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\2378B1B3-B054-41CE-B565-01C50DF64F3A", lpFilePart=0x0) returned 0x9a [0116.248] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0116.248] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\2378B1B3-B054-41CE-B565-01C50DF64F3A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\2378b1b3-b054-41ce-b565-01c50df64f3a"), fInfoLevelId=0x0, lpFileInformation=0x21adf20 | out: lpFileInformation=0x21adf20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x738ccec4, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x738ccec4, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x738ccec4, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x4a40)) returned 1 [0116.249] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0116.249] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\2378B1B3-B054-41CE-B565-01C50DF64F3A", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\2378B1B3-B054-41CE-B565-01C50DF64F3A", lpFilePart=0x0) returned 0x9a [0116.249] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0116.249] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\2378B1B3-B054-41CE-B565-01C50DF64F3A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\2378b1b3-b054-41ce-b565-01c50df64f3a"), fInfoLevelId=0x0, lpFileInformation=0x21ae140 | out: lpFileInformation=0x21ae140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x738ccec4, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x738ccec4, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x738ccec4, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x4a40)) returned 1 [0116.249] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0116.249] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\2378B1B3-B054-41CE-B565-01C50DF64F3A", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\2378B1B3-B054-41CE-B565-01C50DF64F3A", lpFilePart=0x0) returned 0x9a [0116.249] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0116.249] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\2378B1B3-B054-41CE-B565-01C50DF64F3A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\2378b1b3-b054-41ce-b565-01c50df64f3a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0116.250] GetFileType (hFile=0x444) returned 0x1 [0116.250] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0116.250] GetFileType (hFile=0x444) returned 0x1 [0116.250] ReadFile (in: hFile=0x444, lpBuffer=0x21b06b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x21b06b0*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0116.281] CloseHandle (hObject=0x444) returned 1 [0116.281] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\2378B1B3-B054-41CE-B565-01C50DF64F3A", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\2378B1B3-B054-41CE-B565-01C50DF64F3A", lpFilePart=0x0) returned 0x9a [0116.281] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0116.281] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\2378B1B3-B054-41CE-B565-01C50DF64F3A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\2378b1b3-b054-41ce-b565-01c50df64f3a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0116.282] GetFileType (hFile=0x444) returned 0x1 [0116.282] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0116.282] GetFileType (hFile=0x444) returned 0x1 [0116.282] WriteFile (in: hFile=0x444, lpBuffer=0x21ae340*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x21ae340*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0116.282] CloseHandle (hObject=0x444) returned 1 [0116.282] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\2378B1B3-B054-41CE-B565-01C50DF64F3A", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\2378B1B3-B054-41CE-B565-01C50DF64F3A", lpFilePart=0x0) returned 0x9a [0116.282] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\2378B1B3-B054-41CE-B565-01C50DF64F3A.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\2378B1B3-B054-41CE-B565-01C50DF64F3A.xuy", lpFilePart=0x0) returned 0x9e [0116.282] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0116.282] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\2378B1B3-B054-41CE-B565-01C50DF64F3A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\2378b1b3-b054-41ce-b565-01c50df64f3a"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x738ccec4, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x738ccec4, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x31281a5c, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x4a40)) returned 1 [0116.283] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0116.283] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\2378B1B3-B054-41CE-B565-01C50DF64F3A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\2378b1b3-b054-41ce-b565-01c50df64f3a"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\2378B1B3-B054-41CE-B565-01C50DF64F3A.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\2378b1b3-b054-41ce-b565-01c50df64f3a.xuy")) returned 1 [0116.284] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\24E98DA1-B779-4FAC-9144-3233D1979336", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\24E98DA1-B779-4FAC-9144-3233D1979336", lpFilePart=0x0) returned 0x9a [0116.284] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0116.284] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\24E98DA1-B779-4FAC-9144-3233D1979336" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\24e98da1-b779-4fac-9144-3233d1979336"), fInfoLevelId=0x0, lpFileInformation=0x222ccf0 | out: lpFileInformation=0x222ccf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73505f1a, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x73505f1a, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x735072a4, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x6754)) returned 1 [0116.292] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0116.292] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\24E98DA1-B779-4FAC-9144-3233D1979336", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\24E98DA1-B779-4FAC-9144-3233D1979336", lpFilePart=0x0) returned 0x9a [0116.292] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0116.292] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\24E98DA1-B779-4FAC-9144-3233D1979336" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\24e98da1-b779-4fac-9144-3233d1979336"), fInfoLevelId=0x0, lpFileInformation=0x222cf10 | out: lpFileInformation=0x222cf10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73505f1a, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x73505f1a, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x735072a4, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x6754)) returned 1 [0116.292] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0116.292] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\24E98DA1-B779-4FAC-9144-3233D1979336", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\24E98DA1-B779-4FAC-9144-3233D1979336", lpFilePart=0x0) returned 0x9a [0116.292] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0116.292] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\24E98DA1-B779-4FAC-9144-3233D1979336" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\24e98da1-b779-4fac-9144-3233d1979336"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0116.293] GetFileType (hFile=0x444) returned 0x1 [0116.293] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0116.293] GetFileType (hFile=0x444) returned 0x1 [0116.293] ReadFile (in: hFile=0x444, lpBuffer=0x222f480, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x222f480*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0116.316] CloseHandle (hObject=0x444) returned 1 [0116.316] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\24E98DA1-B779-4FAC-9144-3233D1979336", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\24E98DA1-B779-4FAC-9144-3233D1979336", lpFilePart=0x0) returned 0x9a [0116.316] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0116.316] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\24E98DA1-B779-4FAC-9144-3233D1979336" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\24e98da1-b779-4fac-9144-3233d1979336"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0116.317] GetFileType (hFile=0x444) returned 0x1 [0116.317] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0116.317] GetFileType (hFile=0x444) returned 0x1 [0116.317] WriteFile (in: hFile=0x444, lpBuffer=0x222d110*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x222d110*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0116.317] CloseHandle (hObject=0x444) returned 1 [0116.317] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\24E98DA1-B779-4FAC-9144-3233D1979336", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\24E98DA1-B779-4FAC-9144-3233D1979336", lpFilePart=0x0) returned 0x9a [0116.317] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\24E98DA1-B779-4FAC-9144-3233D1979336.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\24E98DA1-B779-4FAC-9144-3233D1979336.xuy", lpFilePart=0x0) returned 0x9e [0116.317] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0116.318] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\24E98DA1-B779-4FAC-9144-3233D1979336" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\24e98da1-b779-4fac-9144-3233d1979336"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73505f1a, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x73505f1a, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x312cd908, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x6754)) returned 1 [0116.318] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0116.318] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\24E98DA1-B779-4FAC-9144-3233D1979336" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\24e98da1-b779-4fac-9144-3233d1979336"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\24E98DA1-B779-4FAC-9144-3233D1979336.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\24e98da1-b779-4fac-9144-3233d1979336.xuy")) returned 1 [0116.319] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\2A9BD5FC-A11E-42DF-A867-B07EE85C6137", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\2A9BD5FC-A11E-42DF-A867-B07EE85C6137", lpFilePart=0x0) returned 0x9a [0116.319] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0116.319] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\2A9BD5FC-A11E-42DF-A867-B07EE85C6137" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\2a9bd5fc-a11e-42df-a867-b07ee85c6137"), fInfoLevelId=0x0, lpFileInformation=0x22abac0 | out: lpFileInformation=0x22abac0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x734d9fcd, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x734d9fcd, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x734db391, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x6f81)) returned 1 [0116.321] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0116.321] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\2A9BD5FC-A11E-42DF-A867-B07EE85C6137", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\2A9BD5FC-A11E-42DF-A867-B07EE85C6137", lpFilePart=0x0) returned 0x9a [0116.321] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0116.321] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\2A9BD5FC-A11E-42DF-A867-B07EE85C6137" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\2a9bd5fc-a11e-42df-a867-b07ee85c6137"), fInfoLevelId=0x0, lpFileInformation=0x22abce0 | out: lpFileInformation=0x22abce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x734d9fcd, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x734d9fcd, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x734db391, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x6f81)) returned 1 [0116.321] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0116.321] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\2A9BD5FC-A11E-42DF-A867-B07EE85C6137", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\2A9BD5FC-A11E-42DF-A867-B07EE85C6137", lpFilePart=0x0) returned 0x9a [0116.321] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0116.321] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\2A9BD5FC-A11E-42DF-A867-B07EE85C6137" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\2a9bd5fc-a11e-42df-a867-b07ee85c6137"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0116.322] GetFileType (hFile=0x444) returned 0x1 [0116.322] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0116.322] GetFileType (hFile=0x444) returned 0x1 [0116.322] ReadFile (in: hFile=0x444, lpBuffer=0x22ae250, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x22ae250*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0116.343] CloseHandle (hObject=0x444) returned 1 [0116.343] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\2A9BD5FC-A11E-42DF-A867-B07EE85C6137", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\2A9BD5FC-A11E-42DF-A867-B07EE85C6137", lpFilePart=0x0) returned 0x9a [0116.343] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0116.343] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\2A9BD5FC-A11E-42DF-A867-B07EE85C6137" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\2a9bd5fc-a11e-42df-a867-b07ee85c6137"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0116.343] GetFileType (hFile=0x444) returned 0x1 [0116.343] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0116.343] GetFileType (hFile=0x444) returned 0x1 [0116.343] WriteFile (in: hFile=0x444, lpBuffer=0x22abee0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x22abee0*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0116.343] CloseHandle (hObject=0x444) returned 1 [0116.344] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\2A9BD5FC-A11E-42DF-A867-B07EE85C6137", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\2A9BD5FC-A11E-42DF-A867-B07EE85C6137", lpFilePart=0x0) returned 0x9a [0116.344] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\2A9BD5FC-A11E-42DF-A867-B07EE85C6137.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\2A9BD5FC-A11E-42DF-A867-B07EE85C6137.xuy", lpFilePart=0x0) returned 0x9e [0116.344] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0116.344] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\2A9BD5FC-A11E-42DF-A867-B07EE85C6137" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\2a9bd5fc-a11e-42df-a867-b07ee85c6137"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x734d9fcd, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x734d9fcd, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x31319e68, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x6f81)) returned 1 [0116.344] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0116.344] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\2A9BD5FC-A11E-42DF-A867-B07EE85C6137" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\2a9bd5fc-a11e-42df-a867-b07ee85c6137"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\2A9BD5FC-A11E-42DF-A867-B07EE85C6137.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\2a9bd5fc-a11e-42df-a867-b07ee85c6137.xuy")) returned 1 [0116.345] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\3ECE84BD-CF61-4B84-85B4-BB9C029B1D34", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\3ECE84BD-CF61-4B84-85B4-BB9C029B1D34", lpFilePart=0x0) returned 0x9a [0116.345] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0116.345] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\3ECE84BD-CF61-4B84-85B4-BB9C029B1D34" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\3ece84bd-cf61-4b84-85b4-bb9c029b1d34"), fInfoLevelId=0x0, lpFileInformation=0x232a890 | out: lpFileInformation=0x232a890*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x731150db, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x731150db, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x73138752, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x5d49)) returned 1 [0116.346] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0116.346] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\3ECE84BD-CF61-4B84-85B4-BB9C029B1D34", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\3ECE84BD-CF61-4B84-85B4-BB9C029B1D34", lpFilePart=0x0) returned 0x9a [0116.346] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0116.346] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\3ECE84BD-CF61-4B84-85B4-BB9C029B1D34" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\3ece84bd-cf61-4b84-85b4-bb9c029b1d34"), fInfoLevelId=0x0, lpFileInformation=0x232aab0 | out: lpFileInformation=0x232aab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x731150db, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x731150db, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x73138752, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x5d49)) returned 1 [0116.346] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0116.346] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\3ECE84BD-CF61-4B84-85B4-BB9C029B1D34", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\3ECE84BD-CF61-4B84-85B4-BB9C029B1D34", lpFilePart=0x0) returned 0x9a [0116.346] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0116.346] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\3ECE84BD-CF61-4B84-85B4-BB9C029B1D34" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\3ece84bd-cf61-4b84-85b4-bb9c029b1d34"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0116.347] GetFileType (hFile=0x444) returned 0x1 [0116.347] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0116.347] GetFileType (hFile=0x444) returned 0x1 [0116.347] ReadFile (in: hFile=0x444, lpBuffer=0x232d020, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x232d020*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0116.392] CloseHandle (hObject=0x444) returned 1 [0116.392] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\3ECE84BD-CF61-4B84-85B4-BB9C029B1D34", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\3ECE84BD-CF61-4B84-85B4-BB9C029B1D34", lpFilePart=0x0) returned 0x9a [0116.392] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0116.392] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\3ECE84BD-CF61-4B84-85B4-BB9C029B1D34" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\3ece84bd-cf61-4b84-85b4-bb9c029b1d34"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0116.392] GetFileType (hFile=0x444) returned 0x1 [0116.393] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0116.393] GetFileType (hFile=0x444) returned 0x1 [0116.393] WriteFile (in: hFile=0x444, lpBuffer=0x2168af0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x2168af0*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0116.393] CloseHandle (hObject=0x444) returned 1 [0116.393] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\3ECE84BD-CF61-4B84-85B4-BB9C029B1D34", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\3ECE84BD-CF61-4B84-85B4-BB9C029B1D34", lpFilePart=0x0) returned 0x9a [0116.393] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\3ECE84BD-CF61-4B84-85B4-BB9C029B1D34.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\3ECE84BD-CF61-4B84-85B4-BB9C029B1D34.xuy", lpFilePart=0x0) returned 0x9e [0116.393] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0116.393] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\3ECE84BD-CF61-4B84-85B4-BB9C029B1D34" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\3ece84bd-cf61-4b84-85b4-bb9c029b1d34"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x731150db, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x731150db, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x3138c6b7, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x5d49)) returned 1 [0116.393] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0116.393] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\3ECE84BD-CF61-4B84-85B4-BB9C029B1D34" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\3ece84bd-cf61-4b84-85b4-bb9c029b1d34"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\3ECE84BD-CF61-4B84-85B4-BB9C029B1D34.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\3ece84bd-cf61-4b84-85b4-bb9c029b1d34.xuy")) returned 1 [0116.394] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\41D65FE9-AE28-4485-82A5-B9D59D0A0019", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\41D65FE9-AE28-4485-82A5-B9D59D0A0019", lpFilePart=0x0) returned 0x9a [0116.394] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0116.394] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\41D65FE9-AE28-4485-82A5-B9D59D0A0019" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\41d65fe9-ae28-4485-82a5-b9d59d0a0019"), fInfoLevelId=0x0, lpFileInformation=0x21a9640 | out: lpFileInformation=0x21a9640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x880ad29b, ftCreationTime.dwHighDateTime=0x1d301cf, ftLastAccessTime.dwLowDateTime=0x880ad29b, ftLastAccessTime.dwHighDateTime=0x1d301cf, ftLastWriteTime.dwLowDateTime=0x880ad29b, ftLastWriteTime.dwHighDateTime=0x1d301cf, nFileSizeHigh=0x0, nFileSizeLow=0x4faa)) returned 1 [0116.395] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0116.395] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\41D65FE9-AE28-4485-82A5-B9D59D0A0019", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\41D65FE9-AE28-4485-82A5-B9D59D0A0019", lpFilePart=0x0) returned 0x9a [0116.395] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0116.395] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\41D65FE9-AE28-4485-82A5-B9D59D0A0019" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\41d65fe9-ae28-4485-82a5-b9d59d0a0019"), fInfoLevelId=0x0, lpFileInformation=0x21a9860 | out: lpFileInformation=0x21a9860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x880ad29b, ftCreationTime.dwHighDateTime=0x1d301cf, ftLastAccessTime.dwLowDateTime=0x880ad29b, ftLastAccessTime.dwHighDateTime=0x1d301cf, ftLastWriteTime.dwLowDateTime=0x880ad29b, ftLastWriteTime.dwHighDateTime=0x1d301cf, nFileSizeHigh=0x0, nFileSizeLow=0x4faa)) returned 1 [0116.395] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0116.395] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\41D65FE9-AE28-4485-82A5-B9D59D0A0019", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\41D65FE9-AE28-4485-82A5-B9D59D0A0019", lpFilePart=0x0) returned 0x9a [0116.395] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0116.395] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\41D65FE9-AE28-4485-82A5-B9D59D0A0019" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\41d65fe9-ae28-4485-82a5-b9d59d0a0019"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0116.396] GetFileType (hFile=0x444) returned 0x1 [0116.396] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0116.396] GetFileType (hFile=0x444) returned 0x1 [0116.396] ReadFile (in: hFile=0x444, lpBuffer=0x21abdd0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x21abdd0*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0116.413] CloseHandle (hObject=0x444) returned 1 [0116.413] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\41D65FE9-AE28-4485-82A5-B9D59D0A0019", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\41D65FE9-AE28-4485-82A5-B9D59D0A0019", lpFilePart=0x0) returned 0x9a [0116.413] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0116.413] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\41D65FE9-AE28-4485-82A5-B9D59D0A0019" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\41d65fe9-ae28-4485-82a5-b9d59d0a0019"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0116.415] GetFileType (hFile=0x444) returned 0x1 [0116.415] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0116.415] GetFileType (hFile=0x444) returned 0x1 [0116.415] WriteFile (in: hFile=0x444, lpBuffer=0x21a9a60*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x21a9a60*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0116.415] CloseHandle (hObject=0x444) returned 1 [0116.415] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\41D65FE9-AE28-4485-82A5-B9D59D0A0019", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\41D65FE9-AE28-4485-82A5-B9D59D0A0019", lpFilePart=0x0) returned 0x9a [0116.415] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\41D65FE9-AE28-4485-82A5-B9D59D0A0019.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\41D65FE9-AE28-4485-82A5-B9D59D0A0019.xuy", lpFilePart=0x0) returned 0x9e [0116.415] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0116.415] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\41D65FE9-AE28-4485-82A5-B9D59D0A0019" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\41d65fe9-ae28-4485-82a5-b9d59d0a0019"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x880ad29b, ftCreationTime.dwHighDateTime=0x1d301cf, ftLastAccessTime.dwLowDateTime=0x880ad29b, ftLastAccessTime.dwHighDateTime=0x1d301cf, ftLastWriteTime.dwLowDateTime=0x313d8b4e, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x4faa)) returned 1 [0116.416] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0116.416] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\41D65FE9-AE28-4485-82A5-B9D59D0A0019" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\41d65fe9-ae28-4485-82a5-b9d59d0a0019"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\41D65FE9-AE28-4485-82A5-B9D59D0A0019.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\41d65fe9-ae28-4485-82a5-b9d59d0a0019.xuy")) returned 1 [0116.417] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\4558EE3B-BE9E-4DDA-A9E5-D74AA0D2D069", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\4558EE3B-BE9E-4DDA-A9E5-D74AA0D2D069", lpFilePart=0x0) returned 0x9a [0116.417] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0116.417] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\4558EE3B-BE9E-4DDA-A9E5-D74AA0D2D069" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\4558ee3b-be9e-4dda-a9e5-d74aa0d2d069"), fInfoLevelId=0x0, lpFileInformation=0x2228410 | out: lpFileInformation=0x2228410*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7362ea16, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x7362ea16, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x7362ea16, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x96f)) returned 1 [0116.417] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0116.417] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\4558EE3B-BE9E-4DDA-A9E5-D74AA0D2D069", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\4558EE3B-BE9E-4DDA-A9E5-D74AA0D2D069", lpFilePart=0x0) returned 0x9a [0116.417] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0116.417] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\4558EE3B-BE9E-4DDA-A9E5-D74AA0D2D069" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\4558ee3b-be9e-4dda-a9e5-d74aa0d2d069"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0116.417] GetFileType (hFile=0x444) returned 0x1 [0116.417] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0116.417] GetFileType (hFile=0x444) returned 0x1 [0116.417] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x96f [0116.418] ReadFile (in: hFile=0x444, lpBuffer=0x22291d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x22291d8*, lpNumberOfBytesRead=0x3be5c8*=0x96f, lpOverlapped=0x0) returned 1 [0116.419] CloseHandle (hObject=0x444) returned 1 [0116.432] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\4558EE3B-BE9E-4DDA-A9E5-D74AA0D2D069", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\4558EE3B-BE9E-4DDA-A9E5-D74AA0D2D069", lpFilePart=0x0) returned 0x9a [0116.433] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0116.433] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\4558EE3B-BE9E-4DDA-A9E5-D74AA0D2D069" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\4558ee3b-be9e-4dda-a9e5-d74aa0d2d069"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0116.434] GetFileType (hFile=0x444) returned 0x1 [0116.434] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0116.434] GetFileType (hFile=0x444) returned 0x1 [0116.434] WriteFile (in: hFile=0x444, lpBuffer=0x22a31b8*, nNumberOfBytesToWrite=0x970, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x22a31b8*, lpNumberOfBytesWritten=0x3be4d8*=0x970, lpOverlapped=0x0) returned 1 [0116.435] CloseHandle (hObject=0x444) returned 1 [0116.435] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\4558EE3B-BE9E-4DDA-A9E5-D74AA0D2D069", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\4558EE3B-BE9E-4DDA-A9E5-D74AA0D2D069", lpFilePart=0x0) returned 0x9a [0116.435] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\4558EE3B-BE9E-4DDA-A9E5-D74AA0D2D069.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\4558EE3B-BE9E-4DDA-A9E5-D74AA0D2D069.xuy", lpFilePart=0x0) returned 0x9e [0116.435] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0116.435] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\4558EE3B-BE9E-4DDA-A9E5-D74AA0D2D069" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\4558ee3b-be9e-4dda-a9e5-d74aa0d2d069"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7362ea16, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x7362ea16, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x313ff0c4, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x970)) returned 1 [0116.435] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0116.435] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\4558EE3B-BE9E-4DDA-A9E5-D74AA0D2D069" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\4558ee3b-be9e-4dda-a9e5-d74aa0d2d069"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\4558EE3B-BE9E-4DDA-A9E5-D74AA0D2D069.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\4558ee3b-be9e-4dda-a9e5-d74aa0d2d069.xuy")) returned 1 [0116.436] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\46DE614E-0C9B-46EB-84F0-89F985E8C156", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\46DE614E-0C9B-46EB-84F0-89F985E8C156", lpFilePart=0x0) returned 0x9a [0116.436] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0116.436] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\46DE614E-0C9B-46EB-84F0-89F985E8C156" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\46de614e-0c9b-46eb-84f0-89f985e8c156"), fInfoLevelId=0x0, lpFileInformation=0x22a45f0 | out: lpFileInformation=0x22a45f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73173100, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x73173100, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x731744dd, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x5294)) returned 1 [0116.437] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0116.437] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\46DE614E-0C9B-46EB-84F0-89F985E8C156", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\46DE614E-0C9B-46EB-84F0-89F985E8C156", lpFilePart=0x0) returned 0x9a [0116.437] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0116.437] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\46DE614E-0C9B-46EB-84F0-89F985E8C156" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\46de614e-0c9b-46eb-84f0-89f985e8c156"), fInfoLevelId=0x0, lpFileInformation=0x22a4810 | out: lpFileInformation=0x22a4810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73173100, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x73173100, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x731744dd, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x5294)) returned 1 [0116.437] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0116.437] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\46DE614E-0C9B-46EB-84F0-89F985E8C156", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\46DE614E-0C9B-46EB-84F0-89F985E8C156", lpFilePart=0x0) returned 0x9a [0116.437] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0116.437] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\46DE614E-0C9B-46EB-84F0-89F985E8C156" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\46de614e-0c9b-46eb-84f0-89f985e8c156"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0116.438] GetFileType (hFile=0x444) returned 0x1 [0116.438] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0116.438] GetFileType (hFile=0x444) returned 0x1 [0116.438] ReadFile (in: hFile=0x444, lpBuffer=0x22a6d80, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x22a6d80*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0116.452] CloseHandle (hObject=0x444) returned 1 [0116.452] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\46DE614E-0C9B-46EB-84F0-89F985E8C156", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\46DE614E-0C9B-46EB-84F0-89F985E8C156", lpFilePart=0x0) returned 0x9a [0116.453] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0116.453] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\46DE614E-0C9B-46EB-84F0-89F985E8C156" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\46de614e-0c9b-46eb-84f0-89f985e8c156"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0116.453] GetFileType (hFile=0x444) returned 0x1 [0116.453] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0116.453] GetFileType (hFile=0x444) returned 0x1 [0116.453] WriteFile (in: hFile=0x444, lpBuffer=0x22a4a10*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x22a4a10*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0116.453] CloseHandle (hObject=0x444) returned 1 [0116.453] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\46DE614E-0C9B-46EB-84F0-89F985E8C156", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\46DE614E-0C9B-46EB-84F0-89F985E8C156", lpFilePart=0x0) returned 0x9a [0116.453] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\46DE614E-0C9B-46EB-84F0-89F985E8C156.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\46DE614E-0C9B-46EB-84F0-89F985E8C156.xuy", lpFilePart=0x0) returned 0x9e [0116.453] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0116.453] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\46DE614E-0C9B-46EB-84F0-89F985E8C156" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\46de614e-0c9b-46eb-84f0-89f985e8c156"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73173100, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x73173100, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x31424f4e, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x5294)) returned 1 [0116.454] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0116.454] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\46DE614E-0C9B-46EB-84F0-89F985E8C156" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\46de614e-0c9b-46eb-84f0-89f985e8c156"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\46DE614E-0C9B-46EB-84F0-89F985E8C156.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\46de614e-0c9b-46eb-84f0-89f985e8c156.xuy")) returned 1 [0116.455] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\488F2960-8DBA-42A5-A6F9-DF66073E536D", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\488F2960-8DBA-42A5-A6F9-DF66073E536D", lpFilePart=0x0) returned 0x9a [0116.455] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0116.455] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\488F2960-8DBA-42A5-A6F9-DF66073E536D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\488f2960-8dba-42a5-a6f9-df66073e536d"), fInfoLevelId=0x0, lpFileInformation=0x23233c0 | out: lpFileInformation=0x23233c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7340a076, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x7340a076, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x7340b415, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x5edd)) returned 1 [0116.456] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0116.456] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\488F2960-8DBA-42A5-A6F9-DF66073E536D", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\488F2960-8DBA-42A5-A6F9-DF66073E536D", lpFilePart=0x0) returned 0x9a [0116.456] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0116.456] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\488F2960-8DBA-42A5-A6F9-DF66073E536D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\488f2960-8dba-42a5-a6f9-df66073e536d"), fInfoLevelId=0x0, lpFileInformation=0x23235e0 | out: lpFileInformation=0x23235e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7340a076, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x7340a076, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x7340b415, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x5edd)) returned 1 [0116.456] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0116.456] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\488F2960-8DBA-42A5-A6F9-DF66073E536D", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\488F2960-8DBA-42A5-A6F9-DF66073E536D", lpFilePart=0x0) returned 0x9a [0116.456] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0116.456] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\488F2960-8DBA-42A5-A6F9-DF66073E536D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\488f2960-8dba-42a5-a6f9-df66073e536d"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0116.457] GetFileType (hFile=0x444) returned 0x1 [0116.457] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0116.457] GetFileType (hFile=0x444) returned 0x1 [0116.457] ReadFile (in: hFile=0x444, lpBuffer=0x2325b50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x2325b50*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0116.516] CloseHandle (hObject=0x444) returned 1 [0116.516] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\488F2960-8DBA-42A5-A6F9-DF66073E536D", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\488F2960-8DBA-42A5-A6F9-DF66073E536D", lpFilePart=0x0) returned 0x9a [0116.516] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0116.516] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\488F2960-8DBA-42A5-A6F9-DF66073E536D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\488f2960-8dba-42a5-a6f9-df66073e536d"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0116.517] GetFileType (hFile=0x444) returned 0x1 [0116.517] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0116.517] GetFileType (hFile=0x444) returned 0x1 [0116.517] WriteFile (in: hFile=0x444, lpBuffer=0x2168af0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x2168af0*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0116.517] CloseHandle (hObject=0x444) returned 1 [0116.517] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\488F2960-8DBA-42A5-A6F9-DF66073E536D", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\488F2960-8DBA-42A5-A6F9-DF66073E536D", lpFilePart=0x0) returned 0x9a [0116.517] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\488F2960-8DBA-42A5-A6F9-DF66073E536D.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\488F2960-8DBA-42A5-A6F9-DF66073E536D.xuy", lpFilePart=0x0) returned 0x9e [0116.517] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0116.517] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\488F2960-8DBA-42A5-A6F9-DF66073E536D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\488f2960-8dba-42a5-a6f9-df66073e536d"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7340a076, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x7340a076, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x314bd983, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x5edd)) returned 1 [0116.517] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0116.517] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\488F2960-8DBA-42A5-A6F9-DF66073E536D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\488f2960-8dba-42a5-a6f9-df66073e536d"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\488F2960-8DBA-42A5-A6F9-DF66073E536D.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\488f2960-8dba-42a5-a6f9-df66073e536d.xuy")) returned 1 [0116.519] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\542AE9EC-2AAB-4A8D-86CE-BF36E018A365", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\542AE9EC-2AAB-4A8D-86CE-BF36E018A365", lpFilePart=0x0) returned 0x9a [0116.519] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0116.519] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\542AE9EC-2AAB-4A8D-86CE-BF36E018A365" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\542ae9ec-2aab-4a8d-86ce-bf36e018a365"), fInfoLevelId=0x0, lpFileInformation=0x21a2160 | out: lpFileInformation=0x21a2160*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x739483d6, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x739483d6, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x739483d6, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x1505)) returned 1 [0116.521] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0116.521] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\542AE9EC-2AAB-4A8D-86CE-BF36E018A365", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\542AE9EC-2AAB-4A8D-86CE-BF36E018A365", lpFilePart=0x0) returned 0x9a [0116.521] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0116.521] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\542AE9EC-2AAB-4A8D-86CE-BF36E018A365" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\542ae9ec-2aab-4a8d-86ce-bf36e018a365"), fInfoLevelId=0x0, lpFileInformation=0x21a2380 | out: lpFileInformation=0x21a2380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x739483d6, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x739483d6, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x739483d6, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x1505)) returned 1 [0116.521] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0116.522] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\542AE9EC-2AAB-4A8D-86CE-BF36E018A365", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\542AE9EC-2AAB-4A8D-86CE-BF36E018A365", lpFilePart=0x0) returned 0x9a [0116.522] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0116.522] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\542AE9EC-2AAB-4A8D-86CE-BF36E018A365" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\542ae9ec-2aab-4a8d-86ce-bf36e018a365"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0116.523] GetFileType (hFile=0x444) returned 0x1 [0116.523] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0116.523] GetFileType (hFile=0x444) returned 0x1 [0116.523] ReadFile (in: hFile=0x444, lpBuffer=0x21a48f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x21a48f0*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0116.545] CloseHandle (hObject=0x444) returned 1 [0116.613] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\542AE9EC-2AAB-4A8D-86CE-BF36E018A365", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\542AE9EC-2AAB-4A8D-86CE-BF36E018A365", lpFilePart=0x0) returned 0x9a [0116.613] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0116.613] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\542AE9EC-2AAB-4A8D-86CE-BF36E018A365" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\542ae9ec-2aab-4a8d-86ce-bf36e018a365"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0116.614] GetFileType (hFile=0x444) returned 0x1 [0116.614] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0116.614] GetFileType (hFile=0x444) returned 0x1 [0116.614] WriteFile (in: hFile=0x444, lpBuffer=0x21a2580*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x21a2580*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0116.614] CloseHandle (hObject=0x444) returned 1 [0116.614] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\542AE9EC-2AAB-4A8D-86CE-BF36E018A365", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\542AE9EC-2AAB-4A8D-86CE-BF36E018A365", lpFilePart=0x0) returned 0x9a [0116.614] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\542AE9EC-2AAB-4A8D-86CE-BF36E018A365.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\542AE9EC-2AAB-4A8D-86CE-BF36E018A365.xuy", lpFilePart=0x0) returned 0x9e [0116.614] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0116.614] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\542AE9EC-2AAB-4A8D-86CE-BF36E018A365" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\542ae9ec-2aab-4a8d-86ce-bf36e018a365"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x739483d6, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x739483d6, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x315a2722, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0116.614] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0116.614] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\542AE9EC-2AAB-4A8D-86CE-BF36E018A365" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\542ae9ec-2aab-4a8d-86ce-bf36e018a365"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\542AE9EC-2AAB-4A8D-86CE-BF36E018A365.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\542ae9ec-2aab-4a8d-86ce-bf36e018a365.xuy")) returned 1 [0116.616] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\5B8C44D4-2A63-481E-A1AB-5E6CF4501F02", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\5B8C44D4-2A63-481E-A1AB-5E6CF4501F02", lpFilePart=0x0) returned 0x9a [0116.616] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0116.616] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\5B8C44D4-2A63-481E-A1AB-5E6CF4501F02" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\5b8c44d4-2a63-481e-a1ab-5e6cf4501f02"), fInfoLevelId=0x0, lpFileInformation=0x2220f30 | out: lpFileInformation=0x2220f30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8815f6b0, ftCreationTime.dwHighDateTime=0x1d301cf, ftLastAccessTime.dwLowDateTime=0x8815f6b0, ftLastAccessTime.dwHighDateTime=0x1d301cf, ftLastWriteTime.dwLowDateTime=0x88161dcf, ftLastWriteTime.dwHighDateTime=0x1d301cf, nFileSizeHigh=0x0, nFileSizeLow=0x5dba)) returned 1 [0116.616] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0116.616] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\5B8C44D4-2A63-481E-A1AB-5E6CF4501F02", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\5B8C44D4-2A63-481E-A1AB-5E6CF4501F02", lpFilePart=0x0) returned 0x9a [0116.616] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0116.616] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\5B8C44D4-2A63-481E-A1AB-5E6CF4501F02" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\5b8c44d4-2a63-481e-a1ab-5e6cf4501f02"), fInfoLevelId=0x0, lpFileInformation=0x2221150 | out: lpFileInformation=0x2221150*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8815f6b0, ftCreationTime.dwHighDateTime=0x1d301cf, ftLastAccessTime.dwLowDateTime=0x8815f6b0, ftLastAccessTime.dwHighDateTime=0x1d301cf, ftLastWriteTime.dwLowDateTime=0x88161dcf, ftLastWriteTime.dwHighDateTime=0x1d301cf, nFileSizeHigh=0x0, nFileSizeLow=0x5dba)) returned 1 [0116.616] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0116.617] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\5B8C44D4-2A63-481E-A1AB-5E6CF4501F02", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\5B8C44D4-2A63-481E-A1AB-5E6CF4501F02", lpFilePart=0x0) returned 0x9a [0116.617] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0116.617] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\5B8C44D4-2A63-481E-A1AB-5E6CF4501F02" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\5b8c44d4-2a63-481e-a1ab-5e6cf4501f02"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0116.625] GetFileType (hFile=0x444) returned 0x1 [0116.625] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0116.625] GetFileType (hFile=0x444) returned 0x1 [0116.625] ReadFile (in: hFile=0x444, lpBuffer=0x22236c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x22236c0*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0116.642] CloseHandle (hObject=0x444) returned 1 [0116.642] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\5B8C44D4-2A63-481E-A1AB-5E6CF4501F02", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\5B8C44D4-2A63-481E-A1AB-5E6CF4501F02", lpFilePart=0x0) returned 0x9a [0116.642] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0116.642] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\5B8C44D4-2A63-481E-A1AB-5E6CF4501F02" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\5b8c44d4-2a63-481e-a1ab-5e6cf4501f02"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0116.643] GetFileType (hFile=0x444) returned 0x1 [0116.643] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0116.643] GetFileType (hFile=0x444) returned 0x1 [0116.643] WriteFile (in: hFile=0x444, lpBuffer=0x2221350*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x2221350*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0116.643] CloseHandle (hObject=0x444) returned 1 [0116.643] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\5B8C44D4-2A63-481E-A1AB-5E6CF4501F02", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\5B8C44D4-2A63-481E-A1AB-5E6CF4501F02", lpFilePart=0x0) returned 0x9a [0116.643] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\5B8C44D4-2A63-481E-A1AB-5E6CF4501F02.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\5B8C44D4-2A63-481E-A1AB-5E6CF4501F02.xuy", lpFilePart=0x0) returned 0x9e [0116.643] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0116.643] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\5B8C44D4-2A63-481E-A1AB-5E6CF4501F02" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\5b8c44d4-2a63-481e-a1ab-5e6cf4501f02"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8815f6b0, ftCreationTime.dwHighDateTime=0x1d301cf, ftLastAccessTime.dwLowDateTime=0x8815f6b0, ftLastAccessTime.dwHighDateTime=0x1d301cf, ftLastWriteTime.dwLowDateTime=0x315eebf2, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x5dba)) returned 1 [0116.643] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0116.643] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\5B8C44D4-2A63-481E-A1AB-5E6CF4501F02" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\5b8c44d4-2a63-481e-a1ab-5e6cf4501f02"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\5B8C44D4-2A63-481E-A1AB-5E6CF4501F02.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\5b8c44d4-2a63-481e-a1ab-5e6cf4501f02.xuy")) returned 1 [0116.645] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\5EABD895-1369-4673-B65E-C121C8F05C93", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\5EABD895-1369-4673-B65E-C121C8F05C93", lpFilePart=0x0) returned 0x9a [0116.645] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0116.645] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\5EABD895-1369-4673-B65E-C121C8F05C93" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\5eabd895-1369-4673-b65e-c121c8f05c93"), fInfoLevelId=0x0, lpFileInformation=0x229fd00 | out: lpFileInformation=0x229fd00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x733e42f0, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x733e42f0, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x733e42f0, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x44a9)) returned 1 [0116.649] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0116.649] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\5EABD895-1369-4673-B65E-C121C8F05C93", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\5EABD895-1369-4673-B65E-C121C8F05C93", lpFilePart=0x0) returned 0x9a [0116.649] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0116.649] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\5EABD895-1369-4673-B65E-C121C8F05C93" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\5eabd895-1369-4673-b65e-c121c8f05c93"), fInfoLevelId=0x0, lpFileInformation=0x229ff20 | out: lpFileInformation=0x229ff20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x733e42f0, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x733e42f0, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x733e42f0, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x44a9)) returned 1 [0116.649] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0116.650] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\5EABD895-1369-4673-B65E-C121C8F05C93", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\5EABD895-1369-4673-B65E-C121C8F05C93", lpFilePart=0x0) returned 0x9a [0116.650] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0116.650] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\5EABD895-1369-4673-B65E-C121C8F05C93" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\5eabd895-1369-4673-b65e-c121c8f05c93"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0116.650] GetFileType (hFile=0x444) returned 0x1 [0116.650] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0116.650] GetFileType (hFile=0x444) returned 0x1 [0116.650] ReadFile (in: hFile=0x444, lpBuffer=0x22a2490, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x22a2490*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0116.667] CloseHandle (hObject=0x444) returned 1 [0116.667] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\5EABD895-1369-4673-B65E-C121C8F05C93", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\5EABD895-1369-4673-B65E-C121C8F05C93", lpFilePart=0x0) returned 0x9a [0116.667] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0116.667] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\5EABD895-1369-4673-B65E-C121C8F05C93" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\5eabd895-1369-4673-b65e-c121c8f05c93"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0116.667] GetFileType (hFile=0x444) returned 0x1 [0116.668] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0116.668] GetFileType (hFile=0x444) returned 0x1 [0116.668] WriteFile (in: hFile=0x444, lpBuffer=0x22a0120*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x22a0120*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0116.668] CloseHandle (hObject=0x444) returned 1 [0116.668] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\5EABD895-1369-4673-B65E-C121C8F05C93", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\5EABD895-1369-4673-B65E-C121C8F05C93", lpFilePart=0x0) returned 0x9a [0116.668] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\5EABD895-1369-4673-B65E-C121C8F05C93.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\5EABD895-1369-4673-B65E-C121C8F05C93.xuy", lpFilePart=0x0) returned 0x9e [0116.668] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0116.668] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\5EABD895-1369-4673-B65E-C121C8F05C93" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\5eabd895-1369-4673-b65e-c121c8f05c93"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x733e42f0, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x733e42f0, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x3163b0dd, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x44a9)) returned 1 [0116.668] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0116.668] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\5EABD895-1369-4673-B65E-C121C8F05C93" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\5eabd895-1369-4673-b65e-c121c8f05c93"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\5EABD895-1369-4673-B65E-C121C8F05C93.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\5eabd895-1369-4673-b65e-c121c8f05c93.xuy")) returned 1 [0116.670] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\66172C59-AA66-47DE-BD2B-1B908C570062", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\66172C59-AA66-47DE-BD2B-1B908C570062", lpFilePart=0x0) returned 0x9a [0116.670] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0116.670] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\66172C59-AA66-47DE-BD2B-1B908C570062" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\66172c59-aa66-47de-bd2b-1b908c570062"), fInfoLevelId=0x0, lpFileInformation=0x231ead0 | out: lpFileInformation=0x231ead0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73288378, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x73288378, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x73288378, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x848d)) returned 1 [0116.670] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0116.670] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\66172C59-AA66-47DE-BD2B-1B908C570062", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\66172C59-AA66-47DE-BD2B-1B908C570062", lpFilePart=0x0) returned 0x9a [0116.670] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0116.670] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\66172C59-AA66-47DE-BD2B-1B908C570062" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\66172c59-aa66-47de-bd2b-1b908c570062"), fInfoLevelId=0x0, lpFileInformation=0x231ecf0 | out: lpFileInformation=0x231ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73288378, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x73288378, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x73288378, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x848d)) returned 1 [0116.670] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0116.670] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\66172C59-AA66-47DE-BD2B-1B908C570062", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\66172C59-AA66-47DE-BD2B-1B908C570062", lpFilePart=0x0) returned 0x9a [0116.670] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0116.670] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\66172C59-AA66-47DE-BD2B-1B908C570062" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\66172c59-aa66-47de-bd2b-1b908c570062"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0116.671] GetFileType (hFile=0x444) returned 0x1 [0116.671] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0116.671] GetFileType (hFile=0x444) returned 0x1 [0116.671] ReadFile (in: hFile=0x444, lpBuffer=0x2321260, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x2321260*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0116.736] CloseHandle (hObject=0x444) returned 1 [0116.736] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\66172C59-AA66-47DE-BD2B-1B908C570062", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\66172C59-AA66-47DE-BD2B-1B908C570062", lpFilePart=0x0) returned 0x9a [0116.736] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0116.737] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\66172C59-AA66-47DE-BD2B-1B908C570062" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\66172c59-aa66-47de-bd2b-1b908c570062"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0116.737] GetFileType (hFile=0x444) returned 0x1 [0116.737] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0116.737] GetFileType (hFile=0x444) returned 0x1 [0116.737] WriteFile (in: hFile=0x444, lpBuffer=0x2168af0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x2168af0*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0116.737] CloseHandle (hObject=0x444) returned 1 [0116.738] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\66172C59-AA66-47DE-BD2B-1B908C570062", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\66172C59-AA66-47DE-BD2B-1B908C570062", lpFilePart=0x0) returned 0x9a [0116.738] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\66172C59-AA66-47DE-BD2B-1B908C570062.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\66172C59-AA66-47DE-BD2B-1B908C570062.xuy", lpFilePart=0x0) returned 0x9e [0116.738] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0116.738] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\66172C59-AA66-47DE-BD2B-1B908C570062" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\66172c59-aa66-47de-bd2b-1b908c570062"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73288378, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x73288378, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x316d3ac9, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x848d)) returned 1 [0116.738] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0116.738] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\66172C59-AA66-47DE-BD2B-1B908C570062" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\66172c59-aa66-47de-bd2b-1b908c570062"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\66172C59-AA66-47DE-BD2B-1B908C570062.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\66172c59-aa66-47de-bd2b-1b908c570062.xuy")) returned 1 [0116.739] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\66408A6E-F696-44FA-B896-9073D83C9463", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\66408A6E-F696-44FA-B896-9073D83C9463", lpFilePart=0x0) returned 0x9a [0116.739] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0116.739] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\66408A6E-F696-44FA-B896-9073D83C9463" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\66408a6e-f696-44fa-b896-9073d83c9463"), fInfoLevelId=0x0, lpFileInformation=0x219d8a0 | out: lpFileInformation=0x219d8a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x733d3176, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x733d3176, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x733d58bb, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x465b)) returned 1 [0116.739] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0116.739] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\66408A6E-F696-44FA-B896-9073D83C9463", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\66408A6E-F696-44FA-B896-9073D83C9463", lpFilePart=0x0) returned 0x9a [0116.739] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0116.739] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\66408A6E-F696-44FA-B896-9073D83C9463" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\66408a6e-f696-44fa-b896-9073d83c9463"), fInfoLevelId=0x0, lpFileInformation=0x219dac0 | out: lpFileInformation=0x219dac0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x733d3176, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x733d3176, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x733d58bb, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x465b)) returned 1 [0116.739] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0116.739] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\66408A6E-F696-44FA-B896-9073D83C9463", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\66408A6E-F696-44FA-B896-9073D83C9463", lpFilePart=0x0) returned 0x9a [0116.739] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0116.739] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\66408A6E-F696-44FA-B896-9073D83C9463" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\66408a6e-f696-44fa-b896-9073d83c9463"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0116.740] GetFileType (hFile=0x444) returned 0x1 [0116.740] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0116.740] GetFileType (hFile=0x444) returned 0x1 [0116.740] ReadFile (in: hFile=0x444, lpBuffer=0x21a0030, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x21a0030*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0116.765] CloseHandle (hObject=0x444) returned 1 [0116.765] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\66408A6E-F696-44FA-B896-9073D83C9463", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\66408A6E-F696-44FA-B896-9073D83C9463", lpFilePart=0x0) returned 0x9a [0116.765] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0116.765] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\66408A6E-F696-44FA-B896-9073D83C9463" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\66408a6e-f696-44fa-b896-9073d83c9463"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0116.765] GetFileType (hFile=0x444) returned 0x1 [0116.766] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0116.766] GetFileType (hFile=0x444) returned 0x1 [0116.766] WriteFile (in: hFile=0x444, lpBuffer=0x219dcc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x219dcc0*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0116.766] CloseHandle (hObject=0x444) returned 1 [0116.766] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\66408A6E-F696-44FA-B896-9073D83C9463", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\66408A6E-F696-44FA-B896-9073D83C9463", lpFilePart=0x0) returned 0x9a [0116.766] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\66408A6E-F696-44FA-B896-9073D83C9463.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\66408A6E-F696-44FA-B896-9073D83C9463.xuy", lpFilePart=0x0) returned 0x9e [0116.766] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0116.766] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\66408A6E-F696-44FA-B896-9073D83C9463" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\66408a6e-f696-44fa-b896-9073d83c9463"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x733d3176, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x733d3176, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x31720064, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x465b)) returned 1 [0116.766] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0116.766] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\66408A6E-F696-44FA-B896-9073D83C9463" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\66408a6e-f696-44fa-b896-9073d83c9463"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\66408A6E-F696-44FA-B896-9073D83C9463.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\66408a6e-f696-44fa-b896-9073d83c9463.xuy")) returned 1 [0116.767] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\683C6C51-6FBE-4F12-8495-5B218743CC76", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\683C6C51-6FBE-4F12-8495-5B218743CC76", lpFilePart=0x0) returned 0x9a [0116.767] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0116.767] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\683C6C51-6FBE-4F12-8495-5B218743CC76" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\683c6c51-6fbe-4f12-8495-5b218743cc76"), fInfoLevelId=0x0, lpFileInformation=0x221c670 | out: lpFileInformation=0x221c670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7315bda3, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x7315bda3, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x7315d167, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x5ac9)) returned 1 [0116.768] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0116.768] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\683C6C51-6FBE-4F12-8495-5B218743CC76", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\683C6C51-6FBE-4F12-8495-5B218743CC76", lpFilePart=0x0) returned 0x9a [0116.768] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0116.768] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\683C6C51-6FBE-4F12-8495-5B218743CC76" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\683c6c51-6fbe-4f12-8495-5b218743cc76"), fInfoLevelId=0x0, lpFileInformation=0x221c890 | out: lpFileInformation=0x221c890*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7315bda3, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x7315bda3, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x7315d167, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x5ac9)) returned 1 [0116.768] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0116.768] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\683C6C51-6FBE-4F12-8495-5B218743CC76", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\683C6C51-6FBE-4F12-8495-5B218743CC76", lpFilePart=0x0) returned 0x9a [0116.768] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0116.769] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\683C6C51-6FBE-4F12-8495-5B218743CC76" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\683c6c51-6fbe-4f12-8495-5b218743cc76"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0116.769] GetFileType (hFile=0x444) returned 0x1 [0116.769] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0116.769] GetFileType (hFile=0x444) returned 0x1 [0116.769] ReadFile (in: hFile=0x444, lpBuffer=0x221ee00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x221ee00*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0116.800] CloseHandle (hObject=0x444) returned 1 [0116.801] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\683C6C51-6FBE-4F12-8495-5B218743CC76", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\683C6C51-6FBE-4F12-8495-5B218743CC76", lpFilePart=0x0) returned 0x9a [0116.801] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0116.801] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\683C6C51-6FBE-4F12-8495-5B218743CC76" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\683c6c51-6fbe-4f12-8495-5b218743cc76"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0116.801] GetFileType (hFile=0x444) returned 0x1 [0116.801] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0116.801] GetFileType (hFile=0x444) returned 0x1 [0116.801] WriteFile (in: hFile=0x444, lpBuffer=0x221ca90*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x221ca90*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0116.801] CloseHandle (hObject=0x444) returned 1 [0116.802] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\683C6C51-6FBE-4F12-8495-5B218743CC76", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\683C6C51-6FBE-4F12-8495-5B218743CC76", lpFilePart=0x0) returned 0x9a [0116.802] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\683C6C51-6FBE-4F12-8495-5B218743CC76.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\683C6C51-6FBE-4F12-8495-5B218743CC76.xuy", lpFilePart=0x0) returned 0x9e [0116.802] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0116.802] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\683C6C51-6FBE-4F12-8495-5B218743CC76" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\683c6c51-6fbe-4f12-8495-5b218743cc76"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7315bda3, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x7315bda3, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x3176c366, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x5ac9)) returned 1 [0116.802] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0116.802] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\683C6C51-6FBE-4F12-8495-5B218743CC76" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\683c6c51-6fbe-4f12-8495-5b218743cc76"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\683C6C51-6FBE-4F12-8495-5B218743CC76.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\683c6c51-6fbe-4f12-8495-5b218743cc76.xuy")) returned 1 [0116.803] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\77FD6918-29A5-4F0B-B1A7-EDEADD0A695F", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\77FD6918-29A5-4F0B-B1A7-EDEADD0A695F", lpFilePart=0x0) returned 0x9a [0116.803] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0116.803] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\77FD6918-29A5-4F0B-B1A7-EDEADD0A695F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\77fd6918-29a5-4f0b-b1a7-edeadd0a695f"), fInfoLevelId=0x0, lpFileInformation=0x229b440 | out: lpFileInformation=0x229b440*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7349947c, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x7349947c, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x7349947c, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x49f7)) returned 1 [0116.804] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0116.804] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\77FD6918-29A5-4F0B-B1A7-EDEADD0A695F", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\77FD6918-29A5-4F0B-B1A7-EDEADD0A695F", lpFilePart=0x0) returned 0x9a [0116.804] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0116.804] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\77FD6918-29A5-4F0B-B1A7-EDEADD0A695F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\77fd6918-29a5-4f0b-b1a7-edeadd0a695f"), fInfoLevelId=0x0, lpFileInformation=0x229b660 | out: lpFileInformation=0x229b660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7349947c, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x7349947c, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x7349947c, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x49f7)) returned 1 [0116.805] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0116.805] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\77FD6918-29A5-4F0B-B1A7-EDEADD0A695F", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\77FD6918-29A5-4F0B-B1A7-EDEADD0A695F", lpFilePart=0x0) returned 0x9a [0116.805] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0116.805] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\77FD6918-29A5-4F0B-B1A7-EDEADD0A695F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\77fd6918-29a5-4f0b-b1a7-edeadd0a695f"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0116.805] GetFileType (hFile=0x444) returned 0x1 [0116.805] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0116.805] GetFileType (hFile=0x444) returned 0x1 [0116.805] ReadFile (in: hFile=0x444, lpBuffer=0x229dbd0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x229dbd0*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0116.839] CloseHandle (hObject=0x444) returned 1 [0116.839] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\77FD6918-29A5-4F0B-B1A7-EDEADD0A695F", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\77FD6918-29A5-4F0B-B1A7-EDEADD0A695F", lpFilePart=0x0) returned 0x9a [0116.839] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0116.839] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\77FD6918-29A5-4F0B-B1A7-EDEADD0A695F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\77fd6918-29a5-4f0b-b1a7-edeadd0a695f"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0116.840] GetFileType (hFile=0x444) returned 0x1 [0116.840] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0116.840] GetFileType (hFile=0x444) returned 0x1 [0116.840] WriteFile (in: hFile=0x444, lpBuffer=0x229b860*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x229b860*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0116.840] CloseHandle (hObject=0x444) returned 1 [0116.840] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\77FD6918-29A5-4F0B-B1A7-EDEADD0A695F", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\77FD6918-29A5-4F0B-B1A7-EDEADD0A695F", lpFilePart=0x0) returned 0x9a [0116.840] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\77FD6918-29A5-4F0B-B1A7-EDEADD0A695F.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\77FD6918-29A5-4F0B-B1A7-EDEADD0A695F.xuy", lpFilePart=0x0) returned 0x9e [0116.840] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0116.840] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\77FD6918-29A5-4F0B-B1A7-EDEADD0A695F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\77fd6918-29a5-4f0b-b1a7-edeadd0a695f"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7349947c, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x7349947c, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x317de9a0, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x49f7)) returned 1 [0116.840] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0116.840] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\77FD6918-29A5-4F0B-B1A7-EDEADD0A695F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\77fd6918-29a5-4f0b-b1a7-edeadd0a695f"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\77FD6918-29A5-4F0B-B1A7-EDEADD0A695F.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\77fd6918-29a5-4f0b-b1a7-edeadd0a695f.xuy")) returned 1 [0116.841] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\797D396D-AC42-4AB5-A395-D4C7890DB4E6", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\797D396D-AC42-4AB5-A395-D4C7890DB4E6", lpFilePart=0x0) returned 0x9a [0116.841] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0116.841] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\797D396D-AC42-4AB5-A395-D4C7890DB4E6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\797d396d-ac42-4ab5-a395-d4c7890db4e6"), fInfoLevelId=0x0, lpFileInformation=0x231a210 | out: lpFileInformation=0x231a210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x734d78cd, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x734d78cd, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x734d8c56, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x133b)) returned 1 [0116.842] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0116.842] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\797D396D-AC42-4AB5-A395-D4C7890DB4E6", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\797D396D-AC42-4AB5-A395-D4C7890DB4E6", lpFilePart=0x0) returned 0x9a [0116.842] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0116.842] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\797D396D-AC42-4AB5-A395-D4C7890DB4E6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\797d396d-ac42-4ab5-a395-d4c7890db4e6"), fInfoLevelId=0x0, lpFileInformation=0x231a430 | out: lpFileInformation=0x231a430*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x734d78cd, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x734d78cd, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x734d8c56, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x133b)) returned 1 [0116.842] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0116.842] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\797D396D-AC42-4AB5-A395-D4C7890DB4E6", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\797D396D-AC42-4AB5-A395-D4C7890DB4E6", lpFilePart=0x0) returned 0x9a [0116.842] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0116.842] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\797D396D-AC42-4AB5-A395-D4C7890DB4E6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\797d396d-ac42-4ab5-a395-d4c7890db4e6"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0116.844] GetFileType (hFile=0x444) returned 0x1 [0116.844] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0116.844] GetFileType (hFile=0x444) returned 0x1 [0116.844] ReadFile (in: hFile=0x444, lpBuffer=0x231c9a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x231c9a0*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0116.911] CloseHandle (hObject=0x444) returned 1 [0116.911] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\797D396D-AC42-4AB5-A395-D4C7890DB4E6", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\797D396D-AC42-4AB5-A395-D4C7890DB4E6", lpFilePart=0x0) returned 0x9a [0116.911] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0116.911] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\797D396D-AC42-4AB5-A395-D4C7890DB4E6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\797d396d-ac42-4ab5-a395-d4c7890db4e6"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0116.912] GetFileType (hFile=0x444) returned 0x1 [0116.912] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0116.912] GetFileType (hFile=0x444) returned 0x1 [0116.912] WriteFile (in: hFile=0x444, lpBuffer=0x2168af0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x2168af0*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0116.912] CloseHandle (hObject=0x444) returned 1 [0116.912] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\797D396D-AC42-4AB5-A395-D4C7890DB4E6", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\797D396D-AC42-4AB5-A395-D4C7890DB4E6", lpFilePart=0x0) returned 0x9a [0116.912] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\797D396D-AC42-4AB5-A395-D4C7890DB4E6.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\797D396D-AC42-4AB5-A395-D4C7890DB4E6.xuy", lpFilePart=0x0) returned 0x9e [0116.912] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0116.912] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\797D396D-AC42-4AB5-A395-D4C7890DB4E6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\797d396d-ac42-4ab5-a395-d4c7890db4e6"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x734d78cd, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x734d78cd, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x3187769b, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0116.912] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0116.913] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\797D396D-AC42-4AB5-A395-D4C7890DB4E6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\797d396d-ac42-4ab5-a395-d4c7890db4e6"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\797D396D-AC42-4AB5-A395-D4C7890DB4E6.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\797d396d-ac42-4ab5-a395-d4c7890db4e6.xuy")) returned 1 [0116.946] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\7A123EA5-56EE-4596-A54E-8E612EE6B11E", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\7A123EA5-56EE-4596-A54E-8E612EE6B11E", lpFilePart=0x0) returned 0x9a [0116.946] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0116.946] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\7A123EA5-56EE-4596-A54E-8E612EE6B11E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\7a123ea5-56ee-4596-a54e-8e612ee6b11e"), fInfoLevelId=0x0, lpFileInformation=0x2198fb8 | out: lpFileInformation=0x2198fb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x882e61e3, ftCreationTime.dwHighDateTime=0x1d301cf, ftLastAccessTime.dwLowDateTime=0x882e61e3, ftLastAccessTime.dwHighDateTime=0x1d301cf, ftLastWriteTime.dwLowDateTime=0x882e757a, ftLastWriteTime.dwHighDateTime=0x1d301cf, nFileSizeHigh=0x0, nFileSizeLow=0x39f2b)) returned 1 [0116.948] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0116.948] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\7A123EA5-56EE-4596-A54E-8E612EE6B11E", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\7A123EA5-56EE-4596-A54E-8E612EE6B11E", lpFilePart=0x0) returned 0x9a [0116.948] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0116.948] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\7A123EA5-56EE-4596-A54E-8E612EE6B11E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\7a123ea5-56ee-4596-a54e-8e612ee6b11e"), fInfoLevelId=0x0, lpFileInformation=0x21991d8 | out: lpFileInformation=0x21991d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x882e61e3, ftCreationTime.dwHighDateTime=0x1d301cf, ftLastAccessTime.dwLowDateTime=0x882e61e3, ftLastAccessTime.dwHighDateTime=0x1d301cf, ftLastWriteTime.dwLowDateTime=0x882e757a, ftLastWriteTime.dwHighDateTime=0x1d301cf, nFileSizeHigh=0x0, nFileSizeLow=0x39f2b)) returned 1 [0116.948] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0116.948] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\7A123EA5-56EE-4596-A54E-8E612EE6B11E", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\7A123EA5-56EE-4596-A54E-8E612EE6B11E", lpFilePart=0x0) returned 0x9a [0116.948] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0116.948] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\7A123EA5-56EE-4596-A54E-8E612EE6B11E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\7a123ea5-56ee-4596-a54e-8e612ee6b11e"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0116.949] GetFileType (hFile=0x444) returned 0x1 [0116.949] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0116.949] GetFileType (hFile=0x444) returned 0x1 [0116.949] ReadFile (in: hFile=0x444, lpBuffer=0x219b748, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x219b748*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0116.983] CloseHandle (hObject=0x444) returned 1 [0116.983] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\7A123EA5-56EE-4596-A54E-8E612EE6B11E", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\7A123EA5-56EE-4596-A54E-8E612EE6B11E", lpFilePart=0x0) returned 0x9a [0116.983] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0116.983] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\7A123EA5-56EE-4596-A54E-8E612EE6B11E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\7a123ea5-56ee-4596-a54e-8e612ee6b11e"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0116.984] GetFileType (hFile=0x444) returned 0x1 [0116.984] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0116.984] GetFileType (hFile=0x444) returned 0x1 [0116.984] WriteFile (in: hFile=0x444, lpBuffer=0x21993d8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x21993d8*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0116.984] CloseHandle (hObject=0x444) returned 1 [0116.984] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\7A123EA5-56EE-4596-A54E-8E612EE6B11E", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\7A123EA5-56EE-4596-A54E-8E612EE6B11E", lpFilePart=0x0) returned 0x9a [0116.984] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\7A123EA5-56EE-4596-A54E-8E612EE6B11E.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\7A123EA5-56EE-4596-A54E-8E612EE6B11E.xuy", lpFilePart=0x0) returned 0x9e [0116.984] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0116.984] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\7A123EA5-56EE-4596-A54E-8E612EE6B11E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\7a123ea5-56ee-4596-a54e-8e612ee6b11e"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x882e61e3, ftCreationTime.dwHighDateTime=0x1d301cf, ftLastAccessTime.dwLowDateTime=0x882e61e3, ftLastAccessTime.dwHighDateTime=0x1d301cf, ftLastWriteTime.dwLowDateTime=0x31935f47, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x39f2b)) returned 1 [0116.984] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0116.984] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\7A123EA5-56EE-4596-A54E-8E612EE6B11E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\7a123ea5-56ee-4596-a54e-8e612ee6b11e"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\7A123EA5-56EE-4596-A54E-8E612EE6B11E.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\7a123ea5-56ee-4596-a54e-8e612ee6b11e.xuy")) returned 1 [0116.985] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\7CDC9D9C-BADA-4EA1-8A7A-91189CBCBB42", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\7CDC9D9C-BADA-4EA1-8A7A-91189CBCBB42", lpFilePart=0x0) returned 0x9a [0116.985] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0116.985] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\7CDC9D9C-BADA-4EA1-8A7A-91189CBCBB42" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\7cdc9d9c-bada-4ea1-8a7a-91189cbcbb42"), fInfoLevelId=0x0, lpFileInformation=0x2217d88 | out: lpFileInformation=0x2217d88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x738121fa, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x738121fa, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x738121fa, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x5e8f)) returned 1 [0116.986] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0116.986] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\7CDC9D9C-BADA-4EA1-8A7A-91189CBCBB42", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\7CDC9D9C-BADA-4EA1-8A7A-91189CBCBB42", lpFilePart=0x0) returned 0x9a [0116.986] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0116.986] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\7CDC9D9C-BADA-4EA1-8A7A-91189CBCBB42" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\7cdc9d9c-bada-4ea1-8a7a-91189cbcbb42"), fInfoLevelId=0x0, lpFileInformation=0x2217fa8 | out: lpFileInformation=0x2217fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x738121fa, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x738121fa, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x738121fa, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x5e8f)) returned 1 [0116.986] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0116.986] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\7CDC9D9C-BADA-4EA1-8A7A-91189CBCBB42", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\7CDC9D9C-BADA-4EA1-8A7A-91189CBCBB42", lpFilePart=0x0) returned 0x9a [0116.987] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0116.987] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\7CDC9D9C-BADA-4EA1-8A7A-91189CBCBB42" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\7cdc9d9c-bada-4ea1-8a7a-91189cbcbb42"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0116.987] GetFileType (hFile=0x444) returned 0x1 [0116.987] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0116.987] GetFileType (hFile=0x444) returned 0x1 [0116.987] ReadFile (in: hFile=0x444, lpBuffer=0x221a518, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x221a518*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0117.001] CloseHandle (hObject=0x444) returned 1 [0117.001] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\7CDC9D9C-BADA-4EA1-8A7A-91189CBCBB42", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\7CDC9D9C-BADA-4EA1-8A7A-91189CBCBB42", lpFilePart=0x0) returned 0x9a [0117.001] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0117.001] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\7CDC9D9C-BADA-4EA1-8A7A-91189CBCBB42" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\7cdc9d9c-bada-4ea1-8a7a-91189cbcbb42"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0117.002] GetFileType (hFile=0x444) returned 0x1 [0117.002] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0117.002] GetFileType (hFile=0x444) returned 0x1 [0117.002] WriteFile (in: hFile=0x444, lpBuffer=0x22181a8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x22181a8*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0117.002] CloseHandle (hObject=0x444) returned 1 [0117.002] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\7CDC9D9C-BADA-4EA1-8A7A-91189CBCBB42", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\7CDC9D9C-BADA-4EA1-8A7A-91189CBCBB42", lpFilePart=0x0) returned 0x9a [0117.002] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\7CDC9D9C-BADA-4EA1-8A7A-91189CBCBB42.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\7CDC9D9C-BADA-4EA1-8A7A-91189CBCBB42.xuy", lpFilePart=0x0) returned 0x9e [0117.002] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0117.002] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\7CDC9D9C-BADA-4EA1-8A7A-91189CBCBB42" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\7cdc9d9c-bada-4ea1-8a7a-91189cbcbb42"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x738121fa, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x738121fa, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x3195c161, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x5e8f)) returned 1 [0117.002] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0117.002] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\7CDC9D9C-BADA-4EA1-8A7A-91189CBCBB42" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\7cdc9d9c-bada-4ea1-8a7a-91189cbcbb42"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\7CDC9D9C-BADA-4EA1-8A7A-91189CBCBB42.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\7cdc9d9c-bada-4ea1-8a7a-91189cbcbb42.xuy")) returned 1 [0117.003] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\7E661E9F-0FFD-4BF6-A6A9-A33E185C9131", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\7E661E9F-0FFD-4BF6-A6A9-A33E185C9131", lpFilePart=0x0) returned 0x9a [0117.004] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0117.004] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\7E661E9F-0FFD-4BF6-A6A9-A33E185C9131" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\7e661e9f-0ffd-4bf6-a6a9-a33e185c9131"), fInfoLevelId=0x0, lpFileInformation=0x2296b58 | out: lpFileInformation=0x2296b58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x880b5b35, ftCreationTime.dwHighDateTime=0x1d301cf, ftLastAccessTime.dwLowDateTime=0x880b5b35, ftLastAccessTime.dwHighDateTime=0x1d301cf, ftLastWriteTime.dwLowDateTime=0x880b6eaf, ftLastWriteTime.dwHighDateTime=0x1d301cf, nFileSizeHigh=0x0, nFileSizeLow=0x376e)) returned 1 [0117.004] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0117.004] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\7E661E9F-0FFD-4BF6-A6A9-A33E185C9131", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\7E661E9F-0FFD-4BF6-A6A9-A33E185C9131", lpFilePart=0x0) returned 0x9a [0117.004] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0117.004] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\7E661E9F-0FFD-4BF6-A6A9-A33E185C9131" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\7e661e9f-0ffd-4bf6-a6a9-a33e185c9131"), fInfoLevelId=0x0, lpFileInformation=0x2296d78 | out: lpFileInformation=0x2296d78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x880b5b35, ftCreationTime.dwHighDateTime=0x1d301cf, ftLastAccessTime.dwLowDateTime=0x880b5b35, ftLastAccessTime.dwHighDateTime=0x1d301cf, ftLastWriteTime.dwLowDateTime=0x880b6eaf, ftLastWriteTime.dwHighDateTime=0x1d301cf, nFileSizeHigh=0x0, nFileSizeLow=0x376e)) returned 1 [0117.004] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0117.004] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\7E661E9F-0FFD-4BF6-A6A9-A33E185C9131", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\7E661E9F-0FFD-4BF6-A6A9-A33E185C9131", lpFilePart=0x0) returned 0x9a [0117.004] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0117.004] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\7E661E9F-0FFD-4BF6-A6A9-A33E185C9131" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\7e661e9f-0ffd-4bf6-a6a9-a33e185c9131"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0117.005] GetFileType (hFile=0x444) returned 0x1 [0117.005] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0117.005] GetFileType (hFile=0x444) returned 0x1 [0117.005] ReadFile (in: hFile=0x444, lpBuffer=0x22992e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x22992e8*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0117.020] CloseHandle (hObject=0x444) returned 1 [0117.020] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\7E661E9F-0FFD-4BF6-A6A9-A33E185C9131", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\7E661E9F-0FFD-4BF6-A6A9-A33E185C9131", lpFilePart=0x0) returned 0x9a [0117.020] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0117.020] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\7E661E9F-0FFD-4BF6-A6A9-A33E185C9131" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\7e661e9f-0ffd-4bf6-a6a9-a33e185c9131"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0117.020] GetFileType (hFile=0x444) returned 0x1 [0117.020] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0117.020] GetFileType (hFile=0x444) returned 0x1 [0117.021] WriteFile (in: hFile=0x444, lpBuffer=0x2296f78*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x2296f78*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0117.021] CloseHandle (hObject=0x444) returned 1 [0117.021] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\7E661E9F-0FFD-4BF6-A6A9-A33E185C9131", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\7E661E9F-0FFD-4BF6-A6A9-A33E185C9131", lpFilePart=0x0) returned 0x9a [0117.021] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\7E661E9F-0FFD-4BF6-A6A9-A33E185C9131.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\7E661E9F-0FFD-4BF6-A6A9-A33E185C9131.xuy", lpFilePart=0x0) returned 0x9e [0117.021] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0117.021] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\7E661E9F-0FFD-4BF6-A6A9-A33E185C9131" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\7e661e9f-0ffd-4bf6-a6a9-a33e185c9131"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x880b5b35, ftCreationTime.dwHighDateTime=0x1d301cf, ftLastAccessTime.dwLowDateTime=0x880b5b35, ftLastAccessTime.dwHighDateTime=0x1d301cf, ftLastWriteTime.dwLowDateTime=0x31982432, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x376e)) returned 1 [0117.021] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0117.021] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\7E661E9F-0FFD-4BF6-A6A9-A33E185C9131" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\7e661e9f-0ffd-4bf6-a6a9-a33e185c9131"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\7E661E9F-0FFD-4BF6-A6A9-A33E185C9131.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\7e661e9f-0ffd-4bf6-a6a9-a33e185c9131.xuy")) returned 1 [0117.022] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\7E7F2D4D-7FEC-45D5-9242-391C5BBDCE7E", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\7E7F2D4D-7FEC-45D5-9242-391C5BBDCE7E", lpFilePart=0x0) returned 0x9a [0117.022] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0117.022] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\7E7F2D4D-7FEC-45D5-9242-391C5BBDCE7E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\7e7f2d4d-7fec-45d5-9242-391c5bbdce7e"), fInfoLevelId=0x0, lpFileInformation=0x2315928 | out: lpFileInformation=0x2315928*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7340796d, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x7340796d, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x73408cf9, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x2f9a)) returned 1 [0117.023] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0117.023] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\7E7F2D4D-7FEC-45D5-9242-391C5BBDCE7E", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\7E7F2D4D-7FEC-45D5-9242-391C5BBDCE7E", lpFilePart=0x0) returned 0x9a [0117.023] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0117.024] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\7E7F2D4D-7FEC-45D5-9242-391C5BBDCE7E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\7e7f2d4d-7fec-45d5-9242-391c5bbdce7e"), fInfoLevelId=0x0, lpFileInformation=0x2315b48 | out: lpFileInformation=0x2315b48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7340796d, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x7340796d, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x73408cf9, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x2f9a)) returned 1 [0117.024] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0117.024] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\7E7F2D4D-7FEC-45D5-9242-391C5BBDCE7E", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\7E7F2D4D-7FEC-45D5-9242-391C5BBDCE7E", lpFilePart=0x0) returned 0x9a [0117.024] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0117.024] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\7E7F2D4D-7FEC-45D5-9242-391C5BBDCE7E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\7e7f2d4d-7fec-45d5-9242-391c5bbdce7e"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0117.024] GetFileType (hFile=0x444) returned 0x1 [0117.024] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0117.025] GetFileType (hFile=0x444) returned 0x1 [0117.025] ReadFile (in: hFile=0x444, lpBuffer=0x23180b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x23180b8*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0117.084] CloseHandle (hObject=0x444) returned 1 [0117.084] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\7E7F2D4D-7FEC-45D5-9242-391C5BBDCE7E", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\7E7F2D4D-7FEC-45D5-9242-391C5BBDCE7E", lpFilePart=0x0) returned 0x9a [0117.084] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0117.084] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\7E7F2D4D-7FEC-45D5-9242-391C5BBDCE7E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\7e7f2d4d-7fec-45d5-9242-391c5bbdce7e"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0117.084] GetFileType (hFile=0x444) returned 0x1 [0117.085] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0117.085] GetFileType (hFile=0x444) returned 0x1 [0117.085] WriteFile (in: hFile=0x444, lpBuffer=0x2168af0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x2168af0*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0117.085] CloseHandle (hObject=0x444) returned 1 [0117.085] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\7E7F2D4D-7FEC-45D5-9242-391C5BBDCE7E", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\7E7F2D4D-7FEC-45D5-9242-391C5BBDCE7E", lpFilePart=0x0) returned 0x9a [0117.085] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\7E7F2D4D-7FEC-45D5-9242-391C5BBDCE7E.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\7E7F2D4D-7FEC-45D5-9242-391C5BBDCE7E.xuy", lpFilePart=0x0) returned 0x9e [0117.085] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0117.085] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\7E7F2D4D-7FEC-45D5-9242-391C5BBDCE7E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\7e7f2d4d-7fec-45d5-9242-391c5bbdce7e"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7340796d, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x7340796d, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x31a1aec3, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2f9a)) returned 1 [0117.085] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0117.085] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\7E7F2D4D-7FEC-45D5-9242-391C5BBDCE7E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\7e7f2d4d-7fec-45d5-9242-391c5bbdce7e"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\7E7F2D4D-7FEC-45D5-9242-391C5BBDCE7E.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\7e7f2d4d-7fec-45d5-9242-391c5bbdce7e.xuy")) returned 1 [0117.087] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\804C4A29-C626-4EB0-9A5A-CEC3A687FD1B", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\804C4A29-C626-4EB0-9A5A-CEC3A687FD1B", lpFilePart=0x0) returned 0x9a [0117.087] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0117.087] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\804C4A29-C626-4EB0-9A5A-CEC3A687FD1B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\804c4a29-c626-4eb0-9a5a-cec3a687fd1b"), fInfoLevelId=0x0, lpFileInformation=0x2194728 | out: lpFileInformation=0x2194728*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8814d1a4, ftCreationTime.dwHighDateTime=0x1d301cf, ftLastAccessTime.dwLowDateTime=0x8814d1a4, ftLastAccessTime.dwHighDateTime=0x1d301cf, ftLastWriteTime.dwLowDateTime=0x8814e519, ftLastWriteTime.dwHighDateTime=0x1d301cf, nFileSizeHigh=0x0, nFileSizeLow=0x189b4)) returned 1 [0117.087] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0117.087] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\804C4A29-C626-4EB0-9A5A-CEC3A687FD1B", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\804C4A29-C626-4EB0-9A5A-CEC3A687FD1B", lpFilePart=0x0) returned 0x9a [0117.087] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0117.087] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\804C4A29-C626-4EB0-9A5A-CEC3A687FD1B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\804c4a29-c626-4eb0-9a5a-cec3a687fd1b"), fInfoLevelId=0x0, lpFileInformation=0x2194948 | out: lpFileInformation=0x2194948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8814d1a4, ftCreationTime.dwHighDateTime=0x1d301cf, ftLastAccessTime.dwLowDateTime=0x8814d1a4, ftLastAccessTime.dwHighDateTime=0x1d301cf, ftLastWriteTime.dwLowDateTime=0x8814e519, ftLastWriteTime.dwHighDateTime=0x1d301cf, nFileSizeHigh=0x0, nFileSizeLow=0x189b4)) returned 1 [0117.087] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0117.087] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\804C4A29-C626-4EB0-9A5A-CEC3A687FD1B", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\804C4A29-C626-4EB0-9A5A-CEC3A687FD1B", lpFilePart=0x0) returned 0x9a [0117.087] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0117.087] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\804C4A29-C626-4EB0-9A5A-CEC3A687FD1B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\804c4a29-c626-4eb0-9a5a-cec3a687fd1b"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0117.088] GetFileType (hFile=0x444) returned 0x1 [0117.088] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0117.088] GetFileType (hFile=0x444) returned 0x1 [0117.088] ReadFile (in: hFile=0x444, lpBuffer=0x2196eb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x2196eb8*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0117.110] CloseHandle (hObject=0x444) returned 1 [0117.111] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\804C4A29-C626-4EB0-9A5A-CEC3A687FD1B", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\804C4A29-C626-4EB0-9A5A-CEC3A687FD1B", lpFilePart=0x0) returned 0x9a [0117.111] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0117.111] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\804C4A29-C626-4EB0-9A5A-CEC3A687FD1B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\804c4a29-c626-4eb0-9a5a-cec3a687fd1b"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0117.111] GetFileType (hFile=0x444) returned 0x1 [0117.111] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0117.111] GetFileType (hFile=0x444) returned 0x1 [0117.111] WriteFile (in: hFile=0x444, lpBuffer=0x2194b48*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x2194b48*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0117.111] CloseHandle (hObject=0x444) returned 1 [0117.111] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\804C4A29-C626-4EB0-9A5A-CEC3A687FD1B", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\804C4A29-C626-4EB0-9A5A-CEC3A687FD1B", lpFilePart=0x0) returned 0x9a [0117.111] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\804C4A29-C626-4EB0-9A5A-CEC3A687FD1B.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\804C4A29-C626-4EB0-9A5A-CEC3A687FD1B.xuy", lpFilePart=0x0) returned 0x9e [0117.111] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0117.111] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\804C4A29-C626-4EB0-9A5A-CEC3A687FD1B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\804c4a29-c626-4eb0-9a5a-cec3a687fd1b"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8814d1a4, ftCreationTime.dwHighDateTime=0x1d301cf, ftLastAccessTime.dwLowDateTime=0x8814d1a4, ftLastAccessTime.dwHighDateTime=0x1d301cf, ftLastWriteTime.dwLowDateTime=0x31a6729d, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x189b4)) returned 1 [0117.112] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0117.112] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\804C4A29-C626-4EB0-9A5A-CEC3A687FD1B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\804c4a29-c626-4eb0-9a5a-cec3a687fd1b"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\804C4A29-C626-4EB0-9A5A-CEC3A687FD1B.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\804c4a29-c626-4eb0-9a5a-cec3a687fd1b.xuy")) returned 1 [0117.115] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\8377A58B-6BB9-496C-A6DF-9A7A076B4B41", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\8377A58B-6BB9-496C-A6DF-9A7A076B4B41", lpFilePart=0x0) returned 0x9a [0117.115] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0117.115] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\8377A58B-6BB9-496C-A6DF-9A7A076B4B41" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\8377a58b-6bb9-496c-a6df-9a7a076b4b41"), fInfoLevelId=0x0, lpFileInformation=0x22134f8 | out: lpFileInformation=0x22134f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x883c4535, ftCreationTime.dwHighDateTime=0x1d301cf, ftLastAccessTime.dwLowDateTime=0x883c4535, ftLastAccessTime.dwHighDateTime=0x1d301cf, ftLastWriteTime.dwLowDateTime=0x883c4535, ftLastWriteTime.dwHighDateTime=0x1d301cf, nFileSizeHigh=0x0, nFileSizeLow=0x6c49)) returned 1 [0117.115] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0117.115] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\8377A58B-6BB9-496C-A6DF-9A7A076B4B41", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\8377A58B-6BB9-496C-A6DF-9A7A076B4B41", lpFilePart=0x0) returned 0x9a [0117.115] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0117.115] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\8377A58B-6BB9-496C-A6DF-9A7A076B4B41" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\8377a58b-6bb9-496c-a6df-9a7a076b4b41"), fInfoLevelId=0x0, lpFileInformation=0x2213718 | out: lpFileInformation=0x2213718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x883c4535, ftCreationTime.dwHighDateTime=0x1d301cf, ftLastAccessTime.dwLowDateTime=0x883c4535, ftLastAccessTime.dwHighDateTime=0x1d301cf, ftLastWriteTime.dwLowDateTime=0x883c4535, ftLastWriteTime.dwHighDateTime=0x1d301cf, nFileSizeHigh=0x0, nFileSizeLow=0x6c49)) returned 1 [0117.115] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0117.115] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\8377A58B-6BB9-496C-A6DF-9A7A076B4B41", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\8377A58B-6BB9-496C-A6DF-9A7A076B4B41", lpFilePart=0x0) returned 0x9a [0117.115] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0117.115] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\8377A58B-6BB9-496C-A6DF-9A7A076B4B41" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\8377a58b-6bb9-496c-a6df-9a7a076b4b41"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0117.116] GetFileType (hFile=0x444) returned 0x1 [0117.116] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0117.116] GetFileType (hFile=0x444) returned 0x1 [0117.116] ReadFile (in: hFile=0x444, lpBuffer=0x2215c88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x2215c88*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0117.138] CloseHandle (hObject=0x444) returned 1 [0117.138] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\8377A58B-6BB9-496C-A6DF-9A7A076B4B41", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\8377A58B-6BB9-496C-A6DF-9A7A076B4B41", lpFilePart=0x0) returned 0x9a [0117.138] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0117.138] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\8377A58B-6BB9-496C-A6DF-9A7A076B4B41" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\8377a58b-6bb9-496c-a6df-9a7a076b4b41"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0117.139] GetFileType (hFile=0x444) returned 0x1 [0117.139] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0117.139] GetFileType (hFile=0x444) returned 0x1 [0117.139] WriteFile (in: hFile=0x444, lpBuffer=0x2213918*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x2213918*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0117.139] CloseHandle (hObject=0x444) returned 1 [0117.139] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\8377A58B-6BB9-496C-A6DF-9A7A076B4B41", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\8377A58B-6BB9-496C-A6DF-9A7A076B4B41", lpFilePart=0x0) returned 0x9a [0117.139] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\8377A58B-6BB9-496C-A6DF-9A7A076B4B41.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\8377A58B-6BB9-496C-A6DF-9A7A076B4B41.xuy", lpFilePart=0x0) returned 0x9e [0117.139] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0117.139] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\8377A58B-6BB9-496C-A6DF-9A7A076B4B41" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\8377a58b-6bb9-496c-a6df-9a7a076b4b41"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x883c4535, ftCreationTime.dwHighDateTime=0x1d301cf, ftLastAccessTime.dwLowDateTime=0x883c4535, ftLastAccessTime.dwHighDateTime=0x1d301cf, ftLastWriteTime.dwLowDateTime=0x31ab3a8f, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x6c49)) returned 1 [0117.139] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0117.139] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\8377A58B-6BB9-496C-A6DF-9A7A076B4B41" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\8377a58b-6bb9-496c-a6df-9a7a076b4b41"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\8377A58B-6BB9-496C-A6DF-9A7A076B4B41.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\8377a58b-6bb9-496c-a6df-9a7a076b4b41.xuy")) returned 1 [0117.141] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\8BE6D37C-5753-4A96-817E-B3C94B03A82D", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\8BE6D37C-5753-4A96-817E-B3C94B03A82D", lpFilePart=0x0) returned 0x9a [0117.141] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0117.141] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\8BE6D37C-5753-4A96-817E-B3C94B03A82D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\8be6d37c-5753-4a96-817e-b3c94b03a82d"), fInfoLevelId=0x0, lpFileInformation=0x22922c8 | out: lpFileInformation=0x22922c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x735c5a07, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x735c5a07, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x735c5a07, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x4cd5)) returned 1 [0117.141] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0117.141] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\8BE6D37C-5753-4A96-817E-B3C94B03A82D", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\8BE6D37C-5753-4A96-817E-B3C94B03A82D", lpFilePart=0x0) returned 0x9a [0117.141] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0117.141] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\8BE6D37C-5753-4A96-817E-B3C94B03A82D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\8be6d37c-5753-4a96-817e-b3c94b03a82d"), fInfoLevelId=0x0, lpFileInformation=0x22924e8 | out: lpFileInformation=0x22924e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x735c5a07, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x735c5a07, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x735c5a07, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x4cd5)) returned 1 [0117.141] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0117.141] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\8BE6D37C-5753-4A96-817E-B3C94B03A82D", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\8BE6D37C-5753-4A96-817E-B3C94B03A82D", lpFilePart=0x0) returned 0x9a [0117.141] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0117.141] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\8BE6D37C-5753-4A96-817E-B3C94B03A82D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\8be6d37c-5753-4a96-817e-b3c94b03a82d"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0117.142] GetFileType (hFile=0x444) returned 0x1 [0117.142] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0117.142] GetFileType (hFile=0x444) returned 0x1 [0117.142] ReadFile (in: hFile=0x444, lpBuffer=0x2294a58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x2294a58*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0117.154] CloseHandle (hObject=0x444) returned 1 [0117.154] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\8BE6D37C-5753-4A96-817E-B3C94B03A82D", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\8BE6D37C-5753-4A96-817E-B3C94B03A82D", lpFilePart=0x0) returned 0x9a [0117.154] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0117.155] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\8BE6D37C-5753-4A96-817E-B3C94B03A82D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\8be6d37c-5753-4a96-817e-b3c94b03a82d"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0117.155] GetFileType (hFile=0x444) returned 0x1 [0117.155] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0117.155] GetFileType (hFile=0x444) returned 0x1 [0117.155] WriteFile (in: hFile=0x444, lpBuffer=0x22926e8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x22926e8*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0117.155] CloseHandle (hObject=0x444) returned 1 [0117.155] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\8BE6D37C-5753-4A96-817E-B3C94B03A82D", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\8BE6D37C-5753-4A96-817E-B3C94B03A82D", lpFilePart=0x0) returned 0x9a [0117.155] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\8BE6D37C-5753-4A96-817E-B3C94B03A82D.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\8BE6D37C-5753-4A96-817E-B3C94B03A82D.xuy", lpFilePart=0x0) returned 0x9e [0117.155] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0117.155] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\8BE6D37C-5753-4A96-817E-B3C94B03A82D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\8be6d37c-5753-4a96-817e-b3c94b03a82d"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x735c5a07, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x735c5a07, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x31ad9921, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x4cd5)) returned 1 [0117.156] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0117.156] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\8BE6D37C-5753-4A96-817E-B3C94B03A82D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\8be6d37c-5753-4a96-817e-b3c94b03a82d"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\8BE6D37C-5753-4A96-817E-B3C94B03A82D.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\8be6d37c-5753-4a96-817e-b3c94b03a82d.xuy")) returned 1 [0117.157] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\8C065BBF-7AD9-42C4-9735-9EEE5F756EA9", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\8C065BBF-7AD9-42C4-9735-9EEE5F756EA9", lpFilePart=0x0) returned 0x9a [0117.157] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0117.157] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\8C065BBF-7AD9-42C4-9735-9EEE5F756EA9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\8c065bbf-7ad9-42c4-9735-9eee5f756ea9"), fInfoLevelId=0x0, lpFileInformation=0x2311098 | out: lpFileInformation=0x2311098*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7317581f, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x7317581f, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x73177f1f, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x3fab)) returned 1 [0117.157] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0117.157] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\8C065BBF-7AD9-42C4-9735-9EEE5F756EA9", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\8C065BBF-7AD9-42C4-9735-9EEE5F756EA9", lpFilePart=0x0) returned 0x9a [0117.157] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0117.157] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\8C065BBF-7AD9-42C4-9735-9EEE5F756EA9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\8c065bbf-7ad9-42c4-9735-9eee5f756ea9"), fInfoLevelId=0x0, lpFileInformation=0x23112b8 | out: lpFileInformation=0x23112b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7317581f, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x7317581f, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x73177f1f, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x3fab)) returned 1 [0117.157] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0117.157] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\8C065BBF-7AD9-42C4-9735-9EEE5F756EA9", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\8C065BBF-7AD9-42C4-9735-9EEE5F756EA9", lpFilePart=0x0) returned 0x9a [0117.157] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0117.157] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\8C065BBF-7AD9-42C4-9735-9EEE5F756EA9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\8c065bbf-7ad9-42c4-9735-9eee5f756ea9"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0117.158] GetFileType (hFile=0x444) returned 0x1 [0117.158] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0117.158] GetFileType (hFile=0x444) returned 0x1 [0117.158] ReadFile (in: hFile=0x444, lpBuffer=0x2313828, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x2313828*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0117.213] CloseHandle (hObject=0x444) returned 1 [0117.213] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\8C065BBF-7AD9-42C4-9735-9EEE5F756EA9", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\8C065BBF-7AD9-42C4-9735-9EEE5F756EA9", lpFilePart=0x0) returned 0x9a [0117.213] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0117.213] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\8C065BBF-7AD9-42C4-9735-9EEE5F756EA9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\8c065bbf-7ad9-42c4-9735-9eee5f756ea9"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0117.213] GetFileType (hFile=0x444) returned 0x1 [0117.213] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0117.214] GetFileType (hFile=0x444) returned 0x1 [0117.214] WriteFile (in: hFile=0x444, lpBuffer=0x2168af0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x2168af0*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0117.214] CloseHandle (hObject=0x444) returned 1 [0117.214] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\8C065BBF-7AD9-42C4-9735-9EEE5F756EA9", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\8C065BBF-7AD9-42C4-9735-9EEE5F756EA9", lpFilePart=0x0) returned 0x9a [0117.214] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\8C065BBF-7AD9-42C4-9735-9EEE5F756EA9.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\8C065BBF-7AD9-42C4-9735-9EEE5F756EA9.xuy", lpFilePart=0x0) returned 0x9e [0117.214] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0117.214] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\8C065BBF-7AD9-42C4-9735-9EEE5F756EA9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\8c065bbf-7ad9-42c4-9735-9eee5f756ea9"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7317581f, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x7317581f, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x31b7266f, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x3fab)) returned 1 [0117.214] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0117.214] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\8C065BBF-7AD9-42C4-9735-9EEE5F756EA9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\8c065bbf-7ad9-42c4-9735-9eee5f756ea9"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\8C065BBF-7AD9-42C4-9735-9EEE5F756EA9.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\8c065bbf-7ad9-42c4-9735-9eee5f756ea9.xuy")) returned 1 [0117.215] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\8C607B24-1BCC-4C57-8CE9-EC64CDD7114B", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\8C607B24-1BCC-4C57-8CE9-EC64CDD7114B", lpFilePart=0x0) returned 0x9a [0117.215] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0117.215] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\8C607B24-1BCC-4C57-8CE9-EC64CDD7114B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\8c607b24-1bcc-4c57-8ce9-ec64cdd7114b"), fInfoLevelId=0x0, lpFileInformation=0x218fe48 | out: lpFileInformation=0x218fe48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x734dc6e6, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x734dc6e6, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x734dda78, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x32c1)) returned 1 [0117.217] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0117.217] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\8C607B24-1BCC-4C57-8CE9-EC64CDD7114B", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\8C607B24-1BCC-4C57-8CE9-EC64CDD7114B", lpFilePart=0x0) returned 0x9a [0117.217] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0117.217] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\8C607B24-1BCC-4C57-8CE9-EC64CDD7114B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\8c607b24-1bcc-4c57-8ce9-ec64cdd7114b"), fInfoLevelId=0x0, lpFileInformation=0x2190068 | out: lpFileInformation=0x2190068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x734dc6e6, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x734dc6e6, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x734dda78, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x32c1)) returned 1 [0117.217] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0117.217] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\8C607B24-1BCC-4C57-8CE9-EC64CDD7114B", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\8C607B24-1BCC-4C57-8CE9-EC64CDD7114B", lpFilePart=0x0) returned 0x9a [0117.217] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0117.217] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\8C607B24-1BCC-4C57-8CE9-EC64CDD7114B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\8c607b24-1bcc-4c57-8ce9-ec64cdd7114b"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0117.218] GetFileType (hFile=0x444) returned 0x1 [0117.218] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0117.218] GetFileType (hFile=0x444) returned 0x1 [0117.218] ReadFile (in: hFile=0x444, lpBuffer=0x21925d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x21925d8*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0117.237] CloseHandle (hObject=0x444) returned 1 [0117.237] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\8C607B24-1BCC-4C57-8CE9-EC64CDD7114B", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\8C607B24-1BCC-4C57-8CE9-EC64CDD7114B", lpFilePart=0x0) returned 0x9a [0117.237] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0117.237] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\8C607B24-1BCC-4C57-8CE9-EC64CDD7114B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\8c607b24-1bcc-4c57-8ce9-ec64cdd7114b"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0117.238] GetFileType (hFile=0x444) returned 0x1 [0117.238] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0117.238] GetFileType (hFile=0x444) returned 0x1 [0117.238] WriteFile (in: hFile=0x444, lpBuffer=0x2190268*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x2190268*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0117.238] CloseHandle (hObject=0x444) returned 1 [0117.238] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\8C607B24-1BCC-4C57-8CE9-EC64CDD7114B", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\8C607B24-1BCC-4C57-8CE9-EC64CDD7114B", lpFilePart=0x0) returned 0x9a [0117.238] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\8C607B24-1BCC-4C57-8CE9-EC64CDD7114B.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\8C607B24-1BCC-4C57-8CE9-EC64CDD7114B.xuy", lpFilePart=0x0) returned 0x9e [0117.238] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0117.238] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\8C607B24-1BCC-4C57-8CE9-EC64CDD7114B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\8c607b24-1bcc-4c57-8ce9-ec64cdd7114b"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x734dc6e6, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x734dc6e6, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x31b983ca, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x32c1)) returned 1 [0117.238] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0117.238] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\8C607B24-1BCC-4C57-8CE9-EC64CDD7114B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\8c607b24-1bcc-4c57-8ce9-ec64cdd7114b"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\8C607B24-1BCC-4C57-8CE9-EC64CDD7114B.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\8c607b24-1bcc-4c57-8ce9-ec64cdd7114b.xuy")) returned 1 [0117.239] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\9403D050-B4D3-428F-920D-D3B5F01FD272", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\9403D050-B4D3-428F-920D-D3B5F01FD272", lpFilePart=0x0) returned 0x9a [0117.239] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0117.240] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\9403D050-B4D3-428F-920D-D3B5F01FD272" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\9403d050-b4d3-428f-920d-d3b5f01fd272"), fInfoLevelId=0x0, lpFileInformation=0x220ec18 | out: lpFileInformation=0x220ec18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8822efb2, ftCreationTime.dwHighDateTime=0x1d301cf, ftLastAccessTime.dwLowDateTime=0x8822efb2, ftLastAccessTime.dwHighDateTime=0x1d301cf, ftLastWriteTime.dwLowDateTime=0x8822efb2, ftLastWriteTime.dwHighDateTime=0x1d301cf, nFileSizeHigh=0x0, nFileSizeLow=0x4150)) returned 1 [0117.240] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0117.240] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\9403D050-B4D3-428F-920D-D3B5F01FD272", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\9403D050-B4D3-428F-920D-D3B5F01FD272", lpFilePart=0x0) returned 0x9a [0117.240] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0117.241] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\9403D050-B4D3-428F-920D-D3B5F01FD272" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\9403d050-b4d3-428f-920d-d3b5f01fd272"), fInfoLevelId=0x0, lpFileInformation=0x220ee38 | out: lpFileInformation=0x220ee38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8822efb2, ftCreationTime.dwHighDateTime=0x1d301cf, ftLastAccessTime.dwLowDateTime=0x8822efb2, ftLastAccessTime.dwHighDateTime=0x1d301cf, ftLastWriteTime.dwLowDateTime=0x8822efb2, ftLastWriteTime.dwHighDateTime=0x1d301cf, nFileSizeHigh=0x0, nFileSizeLow=0x4150)) returned 1 [0117.241] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0117.241] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\9403D050-B4D3-428F-920D-D3B5F01FD272", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\9403D050-B4D3-428F-920D-D3B5F01FD272", lpFilePart=0x0) returned 0x9a [0117.241] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0117.241] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\9403D050-B4D3-428F-920D-D3B5F01FD272" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\9403d050-b4d3-428f-920d-d3b5f01fd272"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0117.242] GetFileType (hFile=0x444) returned 0x1 [0117.242] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0117.242] GetFileType (hFile=0x444) returned 0x1 [0117.242] ReadFile (in: hFile=0x444, lpBuffer=0x22113a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x22113a8*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0117.261] CloseHandle (hObject=0x444) returned 1 [0117.261] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\9403D050-B4D3-428F-920D-D3B5F01FD272", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\9403D050-B4D3-428F-920D-D3B5F01FD272", lpFilePart=0x0) returned 0x9a [0117.261] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0117.261] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\9403D050-B4D3-428F-920D-D3B5F01FD272" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\9403d050-b4d3-428f-920d-d3b5f01fd272"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0117.262] GetFileType (hFile=0x444) returned 0x1 [0117.262] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0117.262] GetFileType (hFile=0x444) returned 0x1 [0117.262] WriteFile (in: hFile=0x444, lpBuffer=0x220f038*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x220f038*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0117.262] CloseHandle (hObject=0x444) returned 1 [0117.262] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\9403D050-B4D3-428F-920D-D3B5F01FD272", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\9403D050-B4D3-428F-920D-D3B5F01FD272", lpFilePart=0x0) returned 0x9a [0117.262] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\9403D050-B4D3-428F-920D-D3B5F01FD272.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\9403D050-B4D3-428F-920D-D3B5F01FD272.xuy", lpFilePart=0x0) returned 0x9e [0117.262] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0117.262] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\9403D050-B4D3-428F-920D-D3B5F01FD272" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\9403d050-b4d3-428f-920d-d3b5f01fd272"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8822efb2, ftCreationTime.dwHighDateTime=0x1d301cf, ftLastAccessTime.dwLowDateTime=0x8822efb2, ftLastAccessTime.dwHighDateTime=0x1d301cf, ftLastWriteTime.dwLowDateTime=0x31be49c8, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x4150)) returned 1 [0117.262] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0117.262] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\9403D050-B4D3-428F-920D-D3B5F01FD272" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\9403d050-b4d3-428f-920d-d3b5f01fd272"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\9403D050-B4D3-428F-920D-D3B5F01FD272.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\9403d050-b4d3-428f-920d-d3b5f01fd272.xuy")) returned 1 [0117.264] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\94D14502-E144-414C-89AE-0998D2709D89", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\94D14502-E144-414C-89AE-0998D2709D89", lpFilePart=0x0) returned 0x9a [0117.264] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0117.264] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\94D14502-E144-414C-89AE-0998D2709D89" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\94d14502-e144-414c-89ae-0998d2709d89"), fInfoLevelId=0x0, lpFileInformation=0x228d9e8 | out: lpFileInformation=0x228d9e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88198cce, ftCreationTime.dwHighDateTime=0x1d301cf, ftLastAccessTime.dwLowDateTime=0x88198cce, ftLastAccessTime.dwHighDateTime=0x1d301cf, ftLastWriteTime.dwLowDateTime=0x88198cce, ftLastWriteTime.dwHighDateTime=0x1d301cf, nFileSizeHigh=0x0, nFileSizeLow=0x18008)) returned 1 [0117.264] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0117.264] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\94D14502-E144-414C-89AE-0998D2709D89", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\94D14502-E144-414C-89AE-0998D2709D89", lpFilePart=0x0) returned 0x9a [0117.264] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0117.264] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\94D14502-E144-414C-89AE-0998D2709D89" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\94d14502-e144-414c-89ae-0998d2709d89"), fInfoLevelId=0x0, lpFileInformation=0x228dc08 | out: lpFileInformation=0x228dc08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88198cce, ftCreationTime.dwHighDateTime=0x1d301cf, ftLastAccessTime.dwLowDateTime=0x88198cce, ftLastAccessTime.dwHighDateTime=0x1d301cf, ftLastWriteTime.dwLowDateTime=0x88198cce, ftLastWriteTime.dwHighDateTime=0x1d301cf, nFileSizeHigh=0x0, nFileSizeLow=0x18008)) returned 1 [0117.264] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0117.264] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\94D14502-E144-414C-89AE-0998D2709D89", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\94D14502-E144-414C-89AE-0998D2709D89", lpFilePart=0x0) returned 0x9a [0117.264] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0117.264] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\94D14502-E144-414C-89AE-0998D2709D89" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\94d14502-e144-414c-89ae-0998d2709d89"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0117.265] GetFileType (hFile=0x444) returned 0x1 [0117.265] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0117.265] GetFileType (hFile=0x444) returned 0x1 [0117.265] ReadFile (in: hFile=0x444, lpBuffer=0x2290178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x2290178*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0117.293] CloseHandle (hObject=0x444) returned 1 [0117.293] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\94D14502-E144-414C-89AE-0998D2709D89", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\94D14502-E144-414C-89AE-0998D2709D89", lpFilePart=0x0) returned 0x9a [0117.293] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0117.293] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\94D14502-E144-414C-89AE-0998D2709D89" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\94d14502-e144-414c-89ae-0998d2709d89"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0117.293] GetFileType (hFile=0x444) returned 0x1 [0117.293] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0117.293] GetFileType (hFile=0x444) returned 0x1 [0117.293] WriteFile (in: hFile=0x444, lpBuffer=0x228de08*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x228de08*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0117.293] CloseHandle (hObject=0x444) returned 1 [0117.293] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\94D14502-E144-414C-89AE-0998D2709D89", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\94D14502-E144-414C-89AE-0998D2709D89", lpFilePart=0x0) returned 0x9a [0117.294] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\94D14502-E144-414C-89AE-0998D2709D89.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\94D14502-E144-414C-89AE-0998D2709D89.xuy", lpFilePart=0x0) returned 0x9e [0117.294] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0117.294] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\94D14502-E144-414C-89AE-0998D2709D89" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\94d14502-e144-414c-89ae-0998d2709d89"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88198cce, ftCreationTime.dwHighDateTime=0x1d301cf, ftLastAccessTime.dwLowDateTime=0x88198cce, ftLastAccessTime.dwHighDateTime=0x1d301cf, ftLastWriteTime.dwLowDateTime=0x31c30d55, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x18008)) returned 1 [0117.294] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0117.294] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\94D14502-E144-414C-89AE-0998D2709D89" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\94d14502-e144-414c-89ae-0998d2709d89"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\94D14502-E144-414C-89AE-0998D2709D89.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\94d14502-e144-414c-89ae-0998d2709d89.xuy")) returned 1 [0117.295] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\9854EE7B-727A-4189-BCA8-C1A2F7C3ED6D", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\9854EE7B-727A-4189-BCA8-C1A2F7C3ED6D", lpFilePart=0x0) returned 0x9a [0117.295] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0117.295] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\9854EE7B-727A-4189-BCA8-C1A2F7C3ED6D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\9854ee7b-727a-4189-bca8-c1a2f7c3ed6d"), fInfoLevelId=0x0, lpFileInformation=0x230c7b8 | out: lpFileInformation=0x230c7b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7313c1f1, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x7313c1f1, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x7313d56b, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x22a8)) returned 1 [0117.296] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0117.296] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\9854EE7B-727A-4189-BCA8-C1A2F7C3ED6D", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\9854EE7B-727A-4189-BCA8-C1A2F7C3ED6D", lpFilePart=0x0) returned 0x9a [0117.296] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0117.296] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\9854EE7B-727A-4189-BCA8-C1A2F7C3ED6D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\9854ee7b-727a-4189-bca8-c1a2f7c3ed6d"), fInfoLevelId=0x0, lpFileInformation=0x230c9d8 | out: lpFileInformation=0x230c9d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7313c1f1, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x7313c1f1, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x7313d56b, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x22a8)) returned 1 [0117.296] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0117.296] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\9854EE7B-727A-4189-BCA8-C1A2F7C3ED6D", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\9854EE7B-727A-4189-BCA8-C1A2F7C3ED6D", lpFilePart=0x0) returned 0x9a [0117.296] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0117.296] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\9854EE7B-727A-4189-BCA8-C1A2F7C3ED6D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\9854ee7b-727a-4189-bca8-c1a2f7c3ed6d"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0117.297] GetFileType (hFile=0x444) returned 0x1 [0117.297] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0117.297] GetFileType (hFile=0x444) returned 0x1 [0117.297] ReadFile (in: hFile=0x444, lpBuffer=0x230ef48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x230ef48*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0117.351] CloseHandle (hObject=0x444) returned 1 [0117.352] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\9854EE7B-727A-4189-BCA8-C1A2F7C3ED6D", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\9854EE7B-727A-4189-BCA8-C1A2F7C3ED6D", lpFilePart=0x0) returned 0x9a [0117.352] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0117.352] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\9854EE7B-727A-4189-BCA8-C1A2F7C3ED6D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\9854ee7b-727a-4189-bca8-c1a2f7c3ed6d"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0117.352] GetFileType (hFile=0x444) returned 0x1 [0117.352] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0117.352] GetFileType (hFile=0x444) returned 0x1 [0117.352] WriteFile (in: hFile=0x444, lpBuffer=0x2168af0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x2168af0*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0117.352] CloseHandle (hObject=0x444) returned 1 [0117.352] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\9854EE7B-727A-4189-BCA8-C1A2F7C3ED6D", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\9854EE7B-727A-4189-BCA8-C1A2F7C3ED6D", lpFilePart=0x0) returned 0x9a [0117.353] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\9854EE7B-727A-4189-BCA8-C1A2F7C3ED6D.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\9854EE7B-727A-4189-BCA8-C1A2F7C3ED6D.xuy", lpFilePart=0x0) returned 0x9e [0117.353] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0117.353] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\9854EE7B-727A-4189-BCA8-C1A2F7C3ED6D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\9854ee7b-727a-4189-bca8-c1a2f7c3ed6d"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7313c1f1, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x7313c1f1, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x31cc980a, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x22a8)) returned 1 [0117.353] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0117.353] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\9854EE7B-727A-4189-BCA8-C1A2F7C3ED6D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\9854ee7b-727a-4189-bca8-c1a2f7c3ed6d"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\9854EE7B-727A-4189-BCA8-C1A2F7C3ED6D.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\9854ee7b-727a-4189-bca8-c1a2f7c3ed6d.xuy")) returned 1 [0117.354] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\9B5E72BE-B516-4DBE-8414-EC40CCF98DF5", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\9B5E72BE-B516-4DBE-8414-EC40CCF98DF5", lpFilePart=0x0) returned 0x9a [0117.354] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0117.354] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\9B5E72BE-B516-4DBE-8414-EC40CCF98DF5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\9b5e72be-b516-4dbe-8414-ec40ccf98df5"), fInfoLevelId=0x0, lpFileInformation=0x218b588 | out: lpFileInformation=0x218b588*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88129b1b, ftCreationTime.dwHighDateTime=0x1d301cf, ftLastAccessTime.dwLowDateTime=0x88129b1b, ftLastAccessTime.dwHighDateTime=0x1d301cf, ftLastWriteTime.dwLowDateTime=0x8812c23a, ftLastWriteTime.dwHighDateTime=0x1d301cf, nFileSizeHigh=0x0, nFileSizeLow=0x3dd2)) returned 1 [0117.354] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0117.354] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\9B5E72BE-B516-4DBE-8414-EC40CCF98DF5", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\9B5E72BE-B516-4DBE-8414-EC40CCF98DF5", lpFilePart=0x0) returned 0x9a [0117.354] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0117.354] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\9B5E72BE-B516-4DBE-8414-EC40CCF98DF5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\9b5e72be-b516-4dbe-8414-ec40ccf98df5"), fInfoLevelId=0x0, lpFileInformation=0x218b7a8 | out: lpFileInformation=0x218b7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88129b1b, ftCreationTime.dwHighDateTime=0x1d301cf, ftLastAccessTime.dwLowDateTime=0x88129b1b, ftLastAccessTime.dwHighDateTime=0x1d301cf, ftLastWriteTime.dwLowDateTime=0x8812c23a, ftLastWriteTime.dwHighDateTime=0x1d301cf, nFileSizeHigh=0x0, nFileSizeLow=0x3dd2)) returned 1 [0117.354] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0117.354] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\9B5E72BE-B516-4DBE-8414-EC40CCF98DF5", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\9B5E72BE-B516-4DBE-8414-EC40CCF98DF5", lpFilePart=0x0) returned 0x9a [0117.354] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0117.354] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\9B5E72BE-B516-4DBE-8414-EC40CCF98DF5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\9b5e72be-b516-4dbe-8414-ec40ccf98df5"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0117.355] GetFileType (hFile=0x444) returned 0x1 [0117.355] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0117.355] GetFileType (hFile=0x444) returned 0x1 [0117.355] ReadFile (in: hFile=0x444, lpBuffer=0x218dd18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x218dd18*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0117.378] CloseHandle (hObject=0x444) returned 1 [0117.378] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\9B5E72BE-B516-4DBE-8414-EC40CCF98DF5", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\9B5E72BE-B516-4DBE-8414-EC40CCF98DF5", lpFilePart=0x0) returned 0x9a [0117.378] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0117.378] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\9B5E72BE-B516-4DBE-8414-EC40CCF98DF5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\9b5e72be-b516-4dbe-8414-ec40ccf98df5"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0117.378] GetFileType (hFile=0x444) returned 0x1 [0117.378] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0117.378] GetFileType (hFile=0x444) returned 0x1 [0117.379] WriteFile (in: hFile=0x444, lpBuffer=0x218b9a8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x218b9a8*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0117.379] CloseHandle (hObject=0x444) returned 1 [0117.379] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\9B5E72BE-B516-4DBE-8414-EC40CCF98DF5", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\9B5E72BE-B516-4DBE-8414-EC40CCF98DF5", lpFilePart=0x0) returned 0x9a [0117.379] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\9B5E72BE-B516-4DBE-8414-EC40CCF98DF5.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\9B5E72BE-B516-4DBE-8414-EC40CCF98DF5.xuy", lpFilePart=0x0) returned 0x9e [0117.379] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0117.379] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\9B5E72BE-B516-4DBE-8414-EC40CCF98DF5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\9b5e72be-b516-4dbe-8414-ec40ccf98df5"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88129b1b, ftCreationTime.dwHighDateTime=0x1d301cf, ftLastAccessTime.dwLowDateTime=0x88129b1b, ftLastAccessTime.dwHighDateTime=0x1d301cf, ftLastWriteTime.dwLowDateTime=0x31cef92d, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x3dd2)) returned 1 [0117.379] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0117.379] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\9B5E72BE-B516-4DBE-8414-EC40CCF98DF5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\9b5e72be-b516-4dbe-8414-ec40ccf98df5"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\9B5E72BE-B516-4DBE-8414-EC40CCF98DF5.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\9b5e72be-b516-4dbe-8414-ec40ccf98df5.xuy")) returned 1 [0117.380] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\9CDDC916-A2AC-41E6-B1B9-CA1B9971F195", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\9CDDC916-A2AC-41E6-B1B9-CA1B9971F195", lpFilePart=0x0) returned 0x9a [0117.380] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0117.380] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\9CDDC916-A2AC-41E6-B1B9-CA1B9971F195" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\9cddc916-a2ac-41e6-b1b9-ca1b9971f195"), fInfoLevelId=0x0, lpFileInformation=0x220a358 | out: lpFileInformation=0x220a358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88512ddf, ftCreationTime.dwHighDateTime=0x1d301cf, ftLastAccessTime.dwLowDateTime=0x88512ddf, ftLastAccessTime.dwHighDateTime=0x1d301cf, ftLastWriteTime.dwLowDateTime=0x88514173, ftLastWriteTime.dwHighDateTime=0x1d301cf, nFileSizeHigh=0x0, nFileSizeLow=0xd5c9)) returned 1 [0117.380] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0117.380] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\9CDDC916-A2AC-41E6-B1B9-CA1B9971F195", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\9CDDC916-A2AC-41E6-B1B9-CA1B9971F195", lpFilePart=0x0) returned 0x9a [0117.381] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0117.381] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\9CDDC916-A2AC-41E6-B1B9-CA1B9971F195" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\9cddc916-a2ac-41e6-b1b9-ca1b9971f195"), fInfoLevelId=0x0, lpFileInformation=0x220a578 | out: lpFileInformation=0x220a578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88512ddf, ftCreationTime.dwHighDateTime=0x1d301cf, ftLastAccessTime.dwLowDateTime=0x88512ddf, ftLastAccessTime.dwHighDateTime=0x1d301cf, ftLastWriteTime.dwLowDateTime=0x88514173, ftLastWriteTime.dwHighDateTime=0x1d301cf, nFileSizeHigh=0x0, nFileSizeLow=0xd5c9)) returned 1 [0117.381] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0117.381] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\9CDDC916-A2AC-41E6-B1B9-CA1B9971F195", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\9CDDC916-A2AC-41E6-B1B9-CA1B9971F195", lpFilePart=0x0) returned 0x9a [0117.381] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0117.381] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\9CDDC916-A2AC-41E6-B1B9-CA1B9971F195" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\9cddc916-a2ac-41e6-b1b9-ca1b9971f195"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0117.382] GetFileType (hFile=0x444) returned 0x1 [0117.382] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0117.382] GetFileType (hFile=0x444) returned 0x1 [0117.382] ReadFile (in: hFile=0x444, lpBuffer=0x220cae8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x220cae8*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0117.407] CloseHandle (hObject=0x444) returned 1 [0117.407] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\9CDDC916-A2AC-41E6-B1B9-CA1B9971F195", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\9CDDC916-A2AC-41E6-B1B9-CA1B9971F195", lpFilePart=0x0) returned 0x9a [0117.407] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0117.407] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\9CDDC916-A2AC-41E6-B1B9-CA1B9971F195" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\9cddc916-a2ac-41e6-b1b9-ca1b9971f195"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0117.408] GetFileType (hFile=0x444) returned 0x1 [0117.408] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0117.408] GetFileType (hFile=0x444) returned 0x1 [0117.408] WriteFile (in: hFile=0x444, lpBuffer=0x220a778*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x220a778*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0117.408] CloseHandle (hObject=0x444) returned 1 [0117.408] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\9CDDC916-A2AC-41E6-B1B9-CA1B9971F195", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\9CDDC916-A2AC-41E6-B1B9-CA1B9971F195", lpFilePart=0x0) returned 0x9a [0117.408] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\9CDDC916-A2AC-41E6-B1B9-CA1B9971F195.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\9CDDC916-A2AC-41E6-B1B9-CA1B9971F195.xuy", lpFilePart=0x0) returned 0x9e [0117.408] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0117.408] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\9CDDC916-A2AC-41E6-B1B9-CA1B9971F195" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\9cddc916-a2ac-41e6-b1b9-ca1b9971f195"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88512ddf, ftCreationTime.dwHighDateTime=0x1d301cf, ftLastAccessTime.dwLowDateTime=0x88512ddf, ftLastAccessTime.dwHighDateTime=0x1d301cf, ftLastWriteTime.dwLowDateTime=0x31d3c1d0, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xd5c9)) returned 1 [0117.408] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0117.408] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\9CDDC916-A2AC-41E6-B1B9-CA1B9971F195" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\9cddc916-a2ac-41e6-b1b9-ca1b9971f195"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\9CDDC916-A2AC-41E6-B1B9-CA1B9971F195.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\9cddc916-a2ac-41e6-b1b9-ca1b9971f195.xuy")) returned 1 [0117.409] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\A20B85A3-C624-401C-946D-7F2C8C9E0EB0", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\A20B85A3-C624-401C-946D-7F2C8C9E0EB0", lpFilePart=0x0) returned 0x9a [0117.409] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0117.410] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\A20B85A3-C624-401C-946D-7F2C8C9E0EB0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\a20b85a3-c624-401c-946d-7f2c8c9e0eb0"), fInfoLevelId=0x0, lpFileInformation=0x2289128 | out: lpFileInformation=0x2289128*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8827be59, ftCreationTime.dwHighDateTime=0x1d301cf, ftLastAccessTime.dwLowDateTime=0x8827be59, ftLastAccessTime.dwHighDateTime=0x1d301cf, ftLastWriteTime.dwLowDateTime=0x8827d1f2, ftLastWriteTime.dwHighDateTime=0x1d301cf, nFileSizeHigh=0x0, nFileSizeLow=0x1e096)) returned 1 [0117.410] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0117.410] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\A20B85A3-C624-401C-946D-7F2C8C9E0EB0", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\A20B85A3-C624-401C-946D-7F2C8C9E0EB0", lpFilePart=0x0) returned 0x9a [0117.410] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0117.410] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\A20B85A3-C624-401C-946D-7F2C8C9E0EB0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\a20b85a3-c624-401c-946d-7f2c8c9e0eb0"), fInfoLevelId=0x0, lpFileInformation=0x2289348 | out: lpFileInformation=0x2289348*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8827be59, ftCreationTime.dwHighDateTime=0x1d301cf, ftLastAccessTime.dwLowDateTime=0x8827be59, ftLastAccessTime.dwHighDateTime=0x1d301cf, ftLastWriteTime.dwLowDateTime=0x8827d1f2, ftLastWriteTime.dwHighDateTime=0x1d301cf, nFileSizeHigh=0x0, nFileSizeLow=0x1e096)) returned 1 [0117.410] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0117.410] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\A20B85A3-C624-401C-946D-7F2C8C9E0EB0", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\A20B85A3-C624-401C-946D-7F2C8C9E0EB0", lpFilePart=0x0) returned 0x9a [0117.410] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0117.410] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\A20B85A3-C624-401C-946D-7F2C8C9E0EB0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\a20b85a3-c624-401c-946d-7f2c8c9e0eb0"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0117.411] GetFileType (hFile=0x444) returned 0x1 [0117.411] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0117.411] GetFileType (hFile=0x444) returned 0x1 [0117.411] ReadFile (in: hFile=0x444, lpBuffer=0x228b8b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x228b8b8*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0117.436] CloseHandle (hObject=0x444) returned 1 [0117.436] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\A20B85A3-C624-401C-946D-7F2C8C9E0EB0", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\A20B85A3-C624-401C-946D-7F2C8C9E0EB0", lpFilePart=0x0) returned 0x9a [0117.436] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0117.436] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\A20B85A3-C624-401C-946D-7F2C8C9E0EB0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\a20b85a3-c624-401c-946d-7f2c8c9e0eb0"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0117.437] GetFileType (hFile=0x444) returned 0x1 [0117.437] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0117.437] GetFileType (hFile=0x444) returned 0x1 [0117.437] WriteFile (in: hFile=0x444, lpBuffer=0x2289548*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x2289548*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0117.437] CloseHandle (hObject=0x444) returned 1 [0117.437] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\A20B85A3-C624-401C-946D-7F2C8C9E0EB0", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\A20B85A3-C624-401C-946D-7F2C8C9E0EB0", lpFilePart=0x0) returned 0x9a [0117.437] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\A20B85A3-C624-401C-946D-7F2C8C9E0EB0.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\A20B85A3-C624-401C-946D-7F2C8C9E0EB0.xuy", lpFilePart=0x0) returned 0x9e [0117.437] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0117.437] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\A20B85A3-C624-401C-946D-7F2C8C9E0EB0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\a20b85a3-c624-401c-946d-7f2c8c9e0eb0"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8827be59, ftCreationTime.dwHighDateTime=0x1d301cf, ftLastAccessTime.dwLowDateTime=0x8827be59, ftLastAccessTime.dwHighDateTime=0x1d301cf, ftLastWriteTime.dwLowDateTime=0x31d8cb12, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x1e096)) returned 1 [0117.438] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0117.438] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\A20B85A3-C624-401C-946D-7F2C8C9E0EB0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\a20b85a3-c624-401c-946d-7f2c8c9e0eb0"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\A20B85A3-C624-401C-946D-7F2C8C9E0EB0.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\a20b85a3-c624-401c-946d-7f2c8c9e0eb0.xuy")) returned 1 [0117.439] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\A3899EB7-943F-45BF-9B62-7976C872C7D6", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\A3899EB7-943F-45BF-9B62-7976C872C7D6", lpFilePart=0x0) returned 0x9a [0117.439] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0117.439] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\A3899EB7-943F-45BF-9B62-7976C872C7D6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\a3899eb7-943f-45bf-9b62-7976c872c7d6"), fInfoLevelId=0x0, lpFileInformation=0x2307ef8 | out: lpFileInformation=0x2307ef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x885008de, ftCreationTime.dwHighDateTime=0x1d301cf, ftLastAccessTime.dwLowDateTime=0x885008de, ftLastAccessTime.dwHighDateTime=0x1d301cf, ftLastWriteTime.dwLowDateTime=0x885008de, ftLastWriteTime.dwHighDateTime=0x1d301cf, nFileSizeHigh=0x0, nFileSizeLow=0xe6eb)) returned 1 [0117.439] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0117.439] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\A3899EB7-943F-45BF-9B62-7976C872C7D6", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\A3899EB7-943F-45BF-9B62-7976C872C7D6", lpFilePart=0x0) returned 0x9a [0117.439] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0117.439] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\A3899EB7-943F-45BF-9B62-7976C872C7D6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\a3899eb7-943f-45bf-9b62-7976c872c7d6"), fInfoLevelId=0x0, lpFileInformation=0x2308118 | out: lpFileInformation=0x2308118*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x885008de, ftCreationTime.dwHighDateTime=0x1d301cf, ftLastAccessTime.dwLowDateTime=0x885008de, ftLastAccessTime.dwHighDateTime=0x1d301cf, ftLastWriteTime.dwLowDateTime=0x885008de, ftLastWriteTime.dwHighDateTime=0x1d301cf, nFileSizeHigh=0x0, nFileSizeLow=0xe6eb)) returned 1 [0117.439] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0117.439] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\A3899EB7-943F-45BF-9B62-7976C872C7D6", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\A3899EB7-943F-45BF-9B62-7976C872C7D6", lpFilePart=0x0) returned 0x9a [0117.439] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0117.439] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\A3899EB7-943F-45BF-9B62-7976C872C7D6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\a3899eb7-943f-45bf-9b62-7976c872c7d6"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0117.440] GetFileType (hFile=0x444) returned 0x1 [0117.440] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0117.440] GetFileType (hFile=0x444) returned 0x1 [0117.440] ReadFile (in: hFile=0x444, lpBuffer=0x230a688, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x230a688*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0117.498] CloseHandle (hObject=0x444) returned 1 [0117.498] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\A3899EB7-943F-45BF-9B62-7976C872C7D6", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\A3899EB7-943F-45BF-9B62-7976C872C7D6", lpFilePart=0x0) returned 0x9a [0117.498] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0117.498] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\A3899EB7-943F-45BF-9B62-7976C872C7D6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\a3899eb7-943f-45bf-9b62-7976c872c7d6"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0117.498] GetFileType (hFile=0x444) returned 0x1 [0117.498] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0117.498] GetFileType (hFile=0x444) returned 0x1 [0117.498] WriteFile (in: hFile=0x444, lpBuffer=0x2168af0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x2168af0*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0117.498] CloseHandle (hObject=0x444) returned 1 [0117.499] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\A3899EB7-943F-45BF-9B62-7976C872C7D6", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\A3899EB7-943F-45BF-9B62-7976C872C7D6", lpFilePart=0x0) returned 0x9a [0117.499] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\A3899EB7-943F-45BF-9B62-7976C872C7D6.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\A3899EB7-943F-45BF-9B62-7976C872C7D6.xuy", lpFilePart=0x0) returned 0x9e [0117.499] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0117.499] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\A3899EB7-943F-45BF-9B62-7976C872C7D6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\a3899eb7-943f-45bf-9b62-7976c872c7d6"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x885008de, ftCreationTime.dwHighDateTime=0x1d301cf, ftLastAccessTime.dwLowDateTime=0x885008de, ftLastAccessTime.dwHighDateTime=0x1d301cf, ftLastWriteTime.dwLowDateTime=0x31e20d05, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xe6eb)) returned 1 [0117.499] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0117.499] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\A3899EB7-943F-45BF-9B62-7976C872C7D6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\a3899eb7-943f-45bf-9b62-7976c872c7d6"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\A3899EB7-943F-45BF-9B62-7976C872C7D6.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\a3899eb7-943f-45bf-9b62-7976c872c7d6.xuy")) returned 1 [0117.500] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\A590259A-C20F-4378-9A6C-F9556FC0CBA6", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\A590259A-C20F-4378-9A6C-F9556FC0CBA6", lpFilePart=0x0) returned 0x9a [0117.500] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0117.500] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\A590259A-C20F-4378-9A6C-F9556FC0CBA6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\a590259a-c20f-4378-9a6c-f9556fc0cba6"), fInfoLevelId=0x0, lpFileInformation=0x2186ca8 | out: lpFileInformation=0x2186ca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88140e32, ftCreationTime.dwHighDateTime=0x1d301cf, ftLastAccessTime.dwLowDateTime=0x88140e32, ftLastAccessTime.dwHighDateTime=0x1d301cf, ftLastWriteTime.dwLowDateTime=0x8814353e, ftLastWriteTime.dwHighDateTime=0x1d301cf, nFileSizeHigh=0x0, nFileSizeLow=0x19c7)) returned 1 [0117.500] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0117.500] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\A590259A-C20F-4378-9A6C-F9556FC0CBA6", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\A590259A-C20F-4378-9A6C-F9556FC0CBA6", lpFilePart=0x0) returned 0x9a [0117.500] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0117.500] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\A590259A-C20F-4378-9A6C-F9556FC0CBA6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\a590259a-c20f-4378-9a6c-f9556fc0cba6"), fInfoLevelId=0x0, lpFileInformation=0x2186ec8 | out: lpFileInformation=0x2186ec8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88140e32, ftCreationTime.dwHighDateTime=0x1d301cf, ftLastAccessTime.dwLowDateTime=0x88140e32, ftLastAccessTime.dwHighDateTime=0x1d301cf, ftLastWriteTime.dwLowDateTime=0x8814353e, ftLastWriteTime.dwHighDateTime=0x1d301cf, nFileSizeHigh=0x0, nFileSizeLow=0x19c7)) returned 1 [0117.500] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0117.501] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\A590259A-C20F-4378-9A6C-F9556FC0CBA6", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\A590259A-C20F-4378-9A6C-F9556FC0CBA6", lpFilePart=0x0) returned 0x9a [0117.501] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0117.501] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\A590259A-C20F-4378-9A6C-F9556FC0CBA6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\a590259a-c20f-4378-9a6c-f9556fc0cba6"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0117.501] GetFileType (hFile=0x444) returned 0x1 [0117.501] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0117.501] GetFileType (hFile=0x444) returned 0x1 [0117.501] ReadFile (in: hFile=0x444, lpBuffer=0x2189438, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x2189438*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0117.520] CloseHandle (hObject=0x444) returned 1 [0117.520] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\A590259A-C20F-4378-9A6C-F9556FC0CBA6", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\A590259A-C20F-4378-9A6C-F9556FC0CBA6", lpFilePart=0x0) returned 0x9a [0117.521] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0117.521] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\A590259A-C20F-4378-9A6C-F9556FC0CBA6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\a590259a-c20f-4378-9a6c-f9556fc0cba6"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0117.521] GetFileType (hFile=0x444) returned 0x1 [0117.521] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0117.521] GetFileType (hFile=0x444) returned 0x1 [0117.521] WriteFile (in: hFile=0x444, lpBuffer=0x21870c8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x21870c8*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0117.521] CloseHandle (hObject=0x444) returned 1 [0117.521] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\A590259A-C20F-4378-9A6C-F9556FC0CBA6", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\A590259A-C20F-4378-9A6C-F9556FC0CBA6", lpFilePart=0x0) returned 0x9a [0117.521] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\A590259A-C20F-4378-9A6C-F9556FC0CBA6.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\A590259A-C20F-4378-9A6C-F9556FC0CBA6.xuy", lpFilePart=0x0) returned 0x9e [0117.522] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0117.522] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\A590259A-C20F-4378-9A6C-F9556FC0CBA6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\a590259a-c20f-4378-9a6c-f9556fc0cba6"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88140e32, ftCreationTime.dwHighDateTime=0x1d301cf, ftLastAccessTime.dwLowDateTime=0x88140e32, ftLastAccessTime.dwHighDateTime=0x1d301cf, ftLastWriteTime.dwLowDateTime=0x31e46fae, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0117.522] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0117.522] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\A590259A-C20F-4378-9A6C-F9556FC0CBA6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\a590259a-c20f-4378-9a6c-f9556fc0cba6"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\A590259A-C20F-4378-9A6C-F9556FC0CBA6.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\a590259a-c20f-4378-9a6c-f9556fc0cba6.xuy")) returned 1 [0117.523] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\A6B97942-B79F-460B-AEB5-87B754D40071", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\A6B97942-B79F-460B-AEB5-87B754D40071", lpFilePart=0x0) returned 0x9a [0117.523] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0117.523] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\A6B97942-B79F-460B-AEB5-87B754D40071" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\a6b97942-b79f-460b-aeb5-87b754d40071"), fInfoLevelId=0x0, lpFileInformation=0x2205a78 | out: lpFileInformation=0x2205a78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x883bd013, ftCreationTime.dwHighDateTime=0x1d301cf, ftLastAccessTime.dwLowDateTime=0x883bd013, ftLastAccessTime.dwHighDateTime=0x1d301cf, ftLastWriteTime.dwLowDateTime=0x883be399, ftLastWriteTime.dwHighDateTime=0x1d301cf, nFileSizeHigh=0x0, nFileSizeLow=0xd055)) returned 1 [0117.523] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0117.523] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\A6B97942-B79F-460B-AEB5-87B754D40071", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\A6B97942-B79F-460B-AEB5-87B754D40071", lpFilePart=0x0) returned 0x9a [0117.523] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0117.524] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\A6B97942-B79F-460B-AEB5-87B754D40071" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\a6b97942-b79f-460b-aeb5-87b754d40071"), fInfoLevelId=0x0, lpFileInformation=0x2205c98 | out: lpFileInformation=0x2205c98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x883bd013, ftCreationTime.dwHighDateTime=0x1d301cf, ftLastAccessTime.dwLowDateTime=0x883bd013, ftLastAccessTime.dwHighDateTime=0x1d301cf, ftLastWriteTime.dwLowDateTime=0x883be399, ftLastWriteTime.dwHighDateTime=0x1d301cf, nFileSizeHigh=0x0, nFileSizeLow=0xd055)) returned 1 [0117.524] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0117.524] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\A6B97942-B79F-460B-AEB5-87B754D40071", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\A6B97942-B79F-460B-AEB5-87B754D40071", lpFilePart=0x0) returned 0x9a [0117.524] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0117.524] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\A6B97942-B79F-460B-AEB5-87B754D40071" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\a6b97942-b79f-460b-aeb5-87b754d40071"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0117.524] GetFileType (hFile=0x444) returned 0x1 [0117.524] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0117.525] GetFileType (hFile=0x444) returned 0x1 [0117.525] ReadFile (in: hFile=0x444, lpBuffer=0x2208208, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x2208208*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0117.549] CloseHandle (hObject=0x444) returned 1 [0117.549] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\A6B97942-B79F-460B-AEB5-87B754D40071", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\A6B97942-B79F-460B-AEB5-87B754D40071", lpFilePart=0x0) returned 0x9a [0117.549] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0117.549] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\A6B97942-B79F-460B-AEB5-87B754D40071" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\a6b97942-b79f-460b-aeb5-87b754d40071"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0117.549] GetFileType (hFile=0x444) returned 0x1 [0117.549] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0117.549] GetFileType (hFile=0x444) returned 0x1 [0117.549] WriteFile (in: hFile=0x444, lpBuffer=0x2205e98*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x2205e98*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0117.550] CloseHandle (hObject=0x444) returned 1 [0117.550] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\A6B97942-B79F-460B-AEB5-87B754D40071", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\A6B97942-B79F-460B-AEB5-87B754D40071", lpFilePart=0x0) returned 0x9a [0117.550] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\A6B97942-B79F-460B-AEB5-87B754D40071.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\A6B97942-B79F-460B-AEB5-87B754D40071.xuy", lpFilePart=0x0) returned 0x9e [0117.550] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0117.550] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\A6B97942-B79F-460B-AEB5-87B754D40071" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\a6b97942-b79f-460b-aeb5-87b754d40071"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x883bd013, ftCreationTime.dwHighDateTime=0x1d301cf, ftLastAccessTime.dwLowDateTime=0x883bd013, ftLastAccessTime.dwHighDateTime=0x1d301cf, ftLastWriteTime.dwLowDateTime=0x31e9385b, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xd055)) returned 1 [0117.550] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0117.550] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\A6B97942-B79F-460B-AEB5-87B754D40071" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\a6b97942-b79f-460b-aeb5-87b754d40071"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\A6B97942-B79F-460B-AEB5-87B754D40071.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\a6b97942-b79f-460b-aeb5-87b754d40071.xuy")) returned 1 [0117.551] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\AD0C61F1-C301-4A56-8793-549CFDE8A507", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\AD0C61F1-C301-4A56-8793-549CFDE8A507", lpFilePart=0x0) returned 0x9a [0117.551] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0117.551] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\AD0C61F1-C301-4A56-8793-549CFDE8A507" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\ad0c61f1-c301-4a56-8793-549cfde8a507"), fInfoLevelId=0x0, lpFileInformation=0x2284848 | out: lpFileInformation=0x2284848*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x881398e5, ftCreationTime.dwHighDateTime=0x1d301cf, ftLastAccessTime.dwLowDateTime=0x881398e5, ftLastAccessTime.dwHighDateTime=0x1d301cf, ftLastWriteTime.dwLowDateTime=0x8813acaa, ftLastWriteTime.dwHighDateTime=0x1d301cf, nFileSizeHigh=0x0, nFileSizeLow=0x500c)) returned 1 [0117.551] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0117.551] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\AD0C61F1-C301-4A56-8793-549CFDE8A507", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\AD0C61F1-C301-4A56-8793-549CFDE8A507", lpFilePart=0x0) returned 0x9a [0117.551] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0117.551] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\AD0C61F1-C301-4A56-8793-549CFDE8A507" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\ad0c61f1-c301-4a56-8793-549cfde8a507"), fInfoLevelId=0x0, lpFileInformation=0x2284a68 | out: lpFileInformation=0x2284a68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x881398e5, ftCreationTime.dwHighDateTime=0x1d301cf, ftLastAccessTime.dwLowDateTime=0x881398e5, ftLastAccessTime.dwHighDateTime=0x1d301cf, ftLastWriteTime.dwLowDateTime=0x8813acaa, ftLastWriteTime.dwHighDateTime=0x1d301cf, nFileSizeHigh=0x0, nFileSizeLow=0x500c)) returned 1 [0117.551] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0117.551] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\AD0C61F1-C301-4A56-8793-549CFDE8A507", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\AD0C61F1-C301-4A56-8793-549CFDE8A507", lpFilePart=0x0) returned 0x9a [0117.551] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0117.552] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\AD0C61F1-C301-4A56-8793-549CFDE8A507" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\ad0c61f1-c301-4a56-8793-549cfde8a507"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0117.552] GetFileType (hFile=0x444) returned 0x1 [0117.552] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0117.552] GetFileType (hFile=0x444) returned 0x1 [0117.552] ReadFile (in: hFile=0x444, lpBuffer=0x2286fd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x2286fd8*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0117.565] CloseHandle (hObject=0x444) returned 1 [0117.565] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\AD0C61F1-C301-4A56-8793-549CFDE8A507", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\AD0C61F1-C301-4A56-8793-549CFDE8A507", lpFilePart=0x0) returned 0x9a [0117.565] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0117.565] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\AD0C61F1-C301-4A56-8793-549CFDE8A507" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\ad0c61f1-c301-4a56-8793-549cfde8a507"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0117.565] GetFileType (hFile=0x444) returned 0x1 [0117.565] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0117.565] GetFileType (hFile=0x444) returned 0x1 [0117.565] WriteFile (in: hFile=0x444, lpBuffer=0x2284c68*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x2284c68*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0117.566] CloseHandle (hObject=0x444) returned 1 [0117.566] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\AD0C61F1-C301-4A56-8793-549CFDE8A507", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\AD0C61F1-C301-4A56-8793-549CFDE8A507", lpFilePart=0x0) returned 0x9a [0117.566] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\AD0C61F1-C301-4A56-8793-549CFDE8A507.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\AD0C61F1-C301-4A56-8793-549CFDE8A507.xuy", lpFilePart=0x0) returned 0x9e [0117.566] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0117.566] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\AD0C61F1-C301-4A56-8793-549CFDE8A507" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\ad0c61f1-c301-4a56-8793-549cfde8a507"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x881398e5, ftCreationTime.dwHighDateTime=0x1d301cf, ftLastAccessTime.dwLowDateTime=0x881398e5, ftLastAccessTime.dwHighDateTime=0x1d301cf, ftLastWriteTime.dwLowDateTime=0x31eb9593, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x500c)) returned 1 [0117.566] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0117.566] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\AD0C61F1-C301-4A56-8793-549CFDE8A507" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\ad0c61f1-c301-4a56-8793-549cfde8a507"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\AD0C61F1-C301-4A56-8793-549CFDE8A507.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\ad0c61f1-c301-4a56-8793-549cfde8a507.xuy")) returned 1 [0117.567] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\B8FFF45C-0C8F-4785-B42F-24711207C09E", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\B8FFF45C-0C8F-4785-B42F-24711207C09E", lpFilePart=0x0) returned 0x9a [0117.567] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0117.567] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\B8FFF45C-0C8F-4785-B42F-24711207C09E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\b8fff45c-0c8f-4785-b42f-24711207c09e"), fInfoLevelId=0x0, lpFileInformation=0x2303618 | out: lpFileInformation=0x2303618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8819b3f6, ftCreationTime.dwHighDateTime=0x1d301cf, ftLastAccessTime.dwLowDateTime=0x8819b3f6, ftLastAccessTime.dwHighDateTime=0x1d301cf, ftLastWriteTime.dwLowDateTime=0x8819b3f6, ftLastWriteTime.dwHighDateTime=0x1d301cf, nFileSizeHigh=0x0, nFileSizeLow=0x6a60)) returned 1 [0117.568] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0117.568] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\B8FFF45C-0C8F-4785-B42F-24711207C09E", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\B8FFF45C-0C8F-4785-B42F-24711207C09E", lpFilePart=0x0) returned 0x9a [0117.568] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0117.568] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\B8FFF45C-0C8F-4785-B42F-24711207C09E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\b8fff45c-0c8f-4785-b42f-24711207c09e"), fInfoLevelId=0x0, lpFileInformation=0x2303838 | out: lpFileInformation=0x2303838*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8819b3f6, ftCreationTime.dwHighDateTime=0x1d301cf, ftLastAccessTime.dwLowDateTime=0x8819b3f6, ftLastAccessTime.dwHighDateTime=0x1d301cf, ftLastWriteTime.dwLowDateTime=0x8819b3f6, ftLastWriteTime.dwHighDateTime=0x1d301cf, nFileSizeHigh=0x0, nFileSizeLow=0x6a60)) returned 1 [0117.568] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0117.568] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\B8FFF45C-0C8F-4785-B42F-24711207C09E", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\B8FFF45C-0C8F-4785-B42F-24711207C09E", lpFilePart=0x0) returned 0x9a [0117.568] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0117.568] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\B8FFF45C-0C8F-4785-B42F-24711207C09E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\b8fff45c-0c8f-4785-b42f-24711207c09e"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0117.569] GetFileType (hFile=0x444) returned 0x1 [0117.569] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0117.569] GetFileType (hFile=0x444) returned 0x1 [0117.569] ReadFile (in: hFile=0x444, lpBuffer=0x2305da8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x2305da8*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0117.640] CloseHandle (hObject=0x444) returned 1 [0117.640] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\B8FFF45C-0C8F-4785-B42F-24711207C09E", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\B8FFF45C-0C8F-4785-B42F-24711207C09E", lpFilePart=0x0) returned 0x9a [0117.640] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0117.640] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\B8FFF45C-0C8F-4785-B42F-24711207C09E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\b8fff45c-0c8f-4785-b42f-24711207c09e"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0117.640] GetFileType (hFile=0x444) returned 0x1 [0117.640] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0117.640] GetFileType (hFile=0x444) returned 0x1 [0117.640] WriteFile (in: hFile=0x444, lpBuffer=0x2142980*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x2142980*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0117.641] CloseHandle (hObject=0x444) returned 1 [0117.641] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\B8FFF45C-0C8F-4785-B42F-24711207C09E", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\B8FFF45C-0C8F-4785-B42F-24711207C09E", lpFilePart=0x0) returned 0x9a [0117.641] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\B8FFF45C-0C8F-4785-B42F-24711207C09E.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\B8FFF45C-0C8F-4785-B42F-24711207C09E.xuy", lpFilePart=0x0) returned 0x9e [0117.641] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0117.641] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\B8FFF45C-0C8F-4785-B42F-24711207C09E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\b8fff45c-0c8f-4785-b42f-24711207c09e"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8819b3f6, ftCreationTime.dwHighDateTime=0x1d301cf, ftLastAccessTime.dwLowDateTime=0x8819b3f6, ftLastAccessTime.dwHighDateTime=0x1d301cf, ftLastWriteTime.dwLowDateTime=0x31f78290, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x6a60)) returned 1 [0117.641] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0117.641] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\B8FFF45C-0C8F-4785-B42F-24711207C09E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\b8fff45c-0c8f-4785-b42f-24711207c09e"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\B8FFF45C-0C8F-4785-B42F-24711207C09E.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\b8fff45c-0c8f-4785-b42f-24711207c09e.xuy")) returned 1 [0117.642] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\BA1A7D9C-8B77-4E7D-97E6-EFCC062E7F93", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\BA1A7D9C-8B77-4E7D-97E6-EFCC062E7F93", lpFilePart=0x0) returned 0x9a [0117.642] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0117.642] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\BA1A7D9C-8B77-4E7D-97E6-EFCC062E7F93" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\ba1a7d9c-8b77-4e7d-97e6-efcc062e7f93"), fInfoLevelId=0x0, lpFileInformation=0x215c290 | out: lpFileInformation=0x215c290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8819c77e, ftCreationTime.dwHighDateTime=0x1d301cf, ftLastAccessTime.dwLowDateTime=0x8819c77e, ftLastAccessTime.dwHighDateTime=0x1d301cf, ftLastWriteTime.dwLowDateTime=0x8819c77e, ftLastWriteTime.dwHighDateTime=0x1d301cf, nFileSizeHigh=0x0, nFileSizeLow=0x2a173)) returned 1 [0117.643] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0117.643] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\BA1A7D9C-8B77-4E7D-97E6-EFCC062E7F93", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\BA1A7D9C-8B77-4E7D-97E6-EFCC062E7F93", lpFilePart=0x0) returned 0x9a [0117.643] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0117.643] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\BA1A7D9C-8B77-4E7D-97E6-EFCC062E7F93" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\ba1a7d9c-8b77-4e7d-97e6-efcc062e7f93"), fInfoLevelId=0x0, lpFileInformation=0x215c4b0 | out: lpFileInformation=0x215c4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8819c77e, ftCreationTime.dwHighDateTime=0x1d301cf, ftLastAccessTime.dwLowDateTime=0x8819c77e, ftLastAccessTime.dwHighDateTime=0x1d301cf, ftLastWriteTime.dwLowDateTime=0x8819c77e, ftLastWriteTime.dwHighDateTime=0x1d301cf, nFileSizeHigh=0x0, nFileSizeLow=0x2a173)) returned 1 [0117.643] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0117.643] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\BA1A7D9C-8B77-4E7D-97E6-EFCC062E7F93", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\BA1A7D9C-8B77-4E7D-97E6-EFCC062E7F93", lpFilePart=0x0) returned 0x9a [0117.643] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0117.643] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\BA1A7D9C-8B77-4E7D-97E6-EFCC062E7F93" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\ba1a7d9c-8b77-4e7d-97e6-efcc062e7f93"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0117.644] GetFileType (hFile=0x444) returned 0x1 [0117.644] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0117.644] GetFileType (hFile=0x444) returned 0x1 [0117.644] ReadFile (in: hFile=0x444, lpBuffer=0x215ea20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x215ea20*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0117.665] CloseHandle (hObject=0x444) returned 1 [0117.665] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\BA1A7D9C-8B77-4E7D-97E6-EFCC062E7F93", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\BA1A7D9C-8B77-4E7D-97E6-EFCC062E7F93", lpFilePart=0x0) returned 0x9a [0117.665] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0117.665] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\BA1A7D9C-8B77-4E7D-97E6-EFCC062E7F93" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\ba1a7d9c-8b77-4e7d-97e6-efcc062e7f93"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0117.665] GetFileType (hFile=0x444) returned 0x1 [0117.665] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0117.665] GetFileType (hFile=0x444) returned 0x1 [0117.665] WriteFile (in: hFile=0x444, lpBuffer=0x215c6b0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x215c6b0*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0117.666] CloseHandle (hObject=0x444) returned 1 [0117.666] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\BA1A7D9C-8B77-4E7D-97E6-EFCC062E7F93", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\BA1A7D9C-8B77-4E7D-97E6-EFCC062E7F93", lpFilePart=0x0) returned 0x9a [0117.666] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\BA1A7D9C-8B77-4E7D-97E6-EFCC062E7F93.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\BA1A7D9C-8B77-4E7D-97E6-EFCC062E7F93.xuy", lpFilePart=0x0) returned 0x9e [0117.666] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0117.666] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\BA1A7D9C-8B77-4E7D-97E6-EFCC062E7F93" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\ba1a7d9c-8b77-4e7d-97e6-efcc062e7f93"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8819c77e, ftCreationTime.dwHighDateTime=0x1d301cf, ftLastAccessTime.dwLowDateTime=0x8819c77e, ftLastAccessTime.dwHighDateTime=0x1d301cf, ftLastWriteTime.dwLowDateTime=0x31fc483e, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2a173)) returned 1 [0117.666] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0117.666] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\BA1A7D9C-8B77-4E7D-97E6-EFCC062E7F93" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\ba1a7d9c-8b77-4e7d-97e6-efcc062e7f93"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\BA1A7D9C-8B77-4E7D-97E6-EFCC062E7F93.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\ba1a7d9c-8b77-4e7d-97e6-efcc062e7f93.xuy")) returned 1 [0117.667] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\BAB84B72-0292-47C4-A0B3-39B2FB0A440D", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\BAB84B72-0292-47C4-A0B3-39B2FB0A440D", lpFilePart=0x0) returned 0x9a [0117.667] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0117.667] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\BAB84B72-0292-47C4-A0B3-39B2FB0A440D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\bab84b72-0292-47c4-a0b3-39b2fb0a440d"), fInfoLevelId=0x0, lpFileInformation=0x21db060 | out: lpFileInformation=0x21db060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x884fa739, ftCreationTime.dwHighDateTime=0x1d301cf, ftLastAccessTime.dwLowDateTime=0x884fa739, ftLastAccessTime.dwHighDateTime=0x1d301cf, ftLastWriteTime.dwLowDateTime=0x884fa739, ftLastWriteTime.dwHighDateTime=0x1d301cf, nFileSizeHigh=0x0, nFileSizeLow=0x131d3)) returned 1 [0117.667] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0117.667] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\BAB84B72-0292-47C4-A0B3-39B2FB0A440D", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\BAB84B72-0292-47C4-A0B3-39B2FB0A440D", lpFilePart=0x0) returned 0x9a [0117.667] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0117.667] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\BAB84B72-0292-47C4-A0B3-39B2FB0A440D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\bab84b72-0292-47c4-a0b3-39b2fb0a440d"), fInfoLevelId=0x0, lpFileInformation=0x21db280 | out: lpFileInformation=0x21db280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x884fa739, ftCreationTime.dwHighDateTime=0x1d301cf, ftLastAccessTime.dwLowDateTime=0x884fa739, ftLastAccessTime.dwHighDateTime=0x1d301cf, ftLastWriteTime.dwLowDateTime=0x884fa739, ftLastWriteTime.dwHighDateTime=0x1d301cf, nFileSizeHigh=0x0, nFileSizeLow=0x131d3)) returned 1 [0117.667] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0117.667] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\BAB84B72-0292-47C4-A0B3-39B2FB0A440D", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\BAB84B72-0292-47C4-A0B3-39B2FB0A440D", lpFilePart=0x0) returned 0x9a [0117.667] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0117.668] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\BAB84B72-0292-47C4-A0B3-39B2FB0A440D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\bab84b72-0292-47c4-a0b3-39b2fb0a440d"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0117.668] GetFileType (hFile=0x444) returned 0x1 [0117.668] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0117.668] GetFileType (hFile=0x444) returned 0x1 [0117.668] ReadFile (in: hFile=0x444, lpBuffer=0x21dd7f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x21dd7f0*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0117.693] CloseHandle (hObject=0x444) returned 1 [0117.693] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\BAB84B72-0292-47C4-A0B3-39B2FB0A440D", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\BAB84B72-0292-47C4-A0B3-39B2FB0A440D", lpFilePart=0x0) returned 0x9a [0117.693] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0117.693] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\BAB84B72-0292-47C4-A0B3-39B2FB0A440D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\bab84b72-0292-47c4-a0b3-39b2fb0a440d"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0117.694] GetFileType (hFile=0x444) returned 0x1 [0117.694] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0117.694] GetFileType (hFile=0x444) returned 0x1 [0117.694] WriteFile (in: hFile=0x444, lpBuffer=0x21db480*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x21db480*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0117.694] CloseHandle (hObject=0x444) returned 1 [0117.694] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\BAB84B72-0292-47C4-A0B3-39B2FB0A440D", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\BAB84B72-0292-47C4-A0B3-39B2FB0A440D", lpFilePart=0x0) returned 0x9a [0117.694] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\BAB84B72-0292-47C4-A0B3-39B2FB0A440D.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\BAB84B72-0292-47C4-A0B3-39B2FB0A440D.xuy", lpFilePart=0x0) returned 0x9e [0117.694] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0117.694] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\BAB84B72-0292-47C4-A0B3-39B2FB0A440D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\bab84b72-0292-47c4-a0b3-39b2fb0a440d"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x884fa739, ftCreationTime.dwHighDateTime=0x1d301cf, ftLastAccessTime.dwLowDateTime=0x884fa739, ftLastAccessTime.dwHighDateTime=0x1d301cf, ftLastWriteTime.dwLowDateTime=0x31fea9f1, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x131d3)) returned 1 [0117.694] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0117.694] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\BAB84B72-0292-47C4-A0B3-39B2FB0A440D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\bab84b72-0292-47c4-a0b3-39b2fb0a440d"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\BAB84B72-0292-47C4-A0B3-39B2FB0A440D.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\bab84b72-0292-47c4-a0b3-39b2fb0a440d.xuy")) returned 1 [0117.696] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\BCBCE985-2A13-4141-A7A2-2395FC5BAD3E", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\BCBCE985-2A13-4141-A7A2-2395FC5BAD3E", lpFilePart=0x0) returned 0x9a [0117.696] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0117.696] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\BCBCE985-2A13-4141-A7A2-2395FC5BAD3E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\bcbce985-2a13-4141-a7a2-2395fc5bad3e"), fInfoLevelId=0x0, lpFileInformation=0x2259e30 | out: lpFileInformation=0x2259e30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8809e829, ftCreationTime.dwHighDateTime=0x1d301cf, ftLastAccessTime.dwLowDateTime=0x8809e829, ftLastAccessTime.dwHighDateTime=0x1d301cf, ftLastWriteTime.dwLowDateTime=0x8809e829, ftLastWriteTime.dwHighDateTime=0x1d301cf, nFileSizeHigh=0x0, nFileSizeLow=0x3ae9)) returned 1 [0117.696] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0117.697] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\BCBCE985-2A13-4141-A7A2-2395FC5BAD3E", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\BCBCE985-2A13-4141-A7A2-2395FC5BAD3E", lpFilePart=0x0) returned 0x9a [0117.697] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0117.697] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\BCBCE985-2A13-4141-A7A2-2395FC5BAD3E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\bcbce985-2a13-4141-a7a2-2395fc5bad3e"), fInfoLevelId=0x0, lpFileInformation=0x225a050 | out: lpFileInformation=0x225a050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8809e829, ftCreationTime.dwHighDateTime=0x1d301cf, ftLastAccessTime.dwLowDateTime=0x8809e829, ftLastAccessTime.dwHighDateTime=0x1d301cf, ftLastWriteTime.dwLowDateTime=0x8809e829, ftLastWriteTime.dwHighDateTime=0x1d301cf, nFileSizeHigh=0x0, nFileSizeLow=0x3ae9)) returned 1 [0117.697] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0117.697] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\BCBCE985-2A13-4141-A7A2-2395FC5BAD3E", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\BCBCE985-2A13-4141-A7A2-2395FC5BAD3E", lpFilePart=0x0) returned 0x9a [0117.697] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0117.697] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\BCBCE985-2A13-4141-A7A2-2395FC5BAD3E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\bcbce985-2a13-4141-a7a2-2395fc5bad3e"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0117.697] GetFileType (hFile=0x444) returned 0x1 [0117.698] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0117.698] GetFileType (hFile=0x444) returned 0x1 [0117.698] ReadFile (in: hFile=0x444, lpBuffer=0x225c5c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x225c5c0*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0117.709] CloseHandle (hObject=0x444) returned 1 [0117.709] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\BCBCE985-2A13-4141-A7A2-2395FC5BAD3E", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\BCBCE985-2A13-4141-A7A2-2395FC5BAD3E", lpFilePart=0x0) returned 0x9a [0117.709] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0117.709] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\BCBCE985-2A13-4141-A7A2-2395FC5BAD3E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\bcbce985-2a13-4141-a7a2-2395fc5bad3e"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0117.710] GetFileType (hFile=0x444) returned 0x1 [0117.710] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0117.710] GetFileType (hFile=0x444) returned 0x1 [0117.710] WriteFile (in: hFile=0x444, lpBuffer=0x225a250*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x225a250*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0117.710] CloseHandle (hObject=0x444) returned 1 [0117.710] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\BCBCE985-2A13-4141-A7A2-2395FC5BAD3E", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\BCBCE985-2A13-4141-A7A2-2395FC5BAD3E", lpFilePart=0x0) returned 0x9a [0117.710] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\BCBCE985-2A13-4141-A7A2-2395FC5BAD3E.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\BCBCE985-2A13-4141-A7A2-2395FC5BAD3E.xuy", lpFilePart=0x0) returned 0x9e [0117.710] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0117.710] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\BCBCE985-2A13-4141-A7A2-2395FC5BAD3E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\bcbce985-2a13-4141-a7a2-2395fc5bad3e"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8809e829, ftCreationTime.dwHighDateTime=0x1d301cf, ftLastAccessTime.dwLowDateTime=0x8809e829, ftLastAccessTime.dwHighDateTime=0x1d301cf, ftLastWriteTime.dwLowDateTime=0x32010b56, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x3ae9)) returned 1 [0117.710] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0117.710] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\BCBCE985-2A13-4141-A7A2-2395FC5BAD3E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\bcbce985-2a13-4141-a7a2-2395fc5bad3e"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\BCBCE985-2A13-4141-A7A2-2395FC5BAD3E.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\bcbce985-2a13-4141-a7a2-2395fc5bad3e.xuy")) returned 1 [0117.712] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\C8E2BE08-3214-419E-98CF-7DB7BAFDF7AF", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\C8E2BE08-3214-419E-98CF-7DB7BAFDF7AF", lpFilePart=0x0) returned 0x9a [0117.712] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0117.712] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\C8E2BE08-3214-419E-98CF-7DB7BAFDF7AF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\c8e2be08-3214-419e-98cf-7db7bafdf7af"), fInfoLevelId=0x0, lpFileInformation=0x22d8c00 | out: lpFileInformation=0x22d8c00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7314fa99, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x7314fa99, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x7315700c, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x534f)) returned 1 [0117.714] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0117.714] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\C8E2BE08-3214-419E-98CF-7DB7BAFDF7AF", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\C8E2BE08-3214-419E-98CF-7DB7BAFDF7AF", lpFilePart=0x0) returned 0x9a [0117.714] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0117.714] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\C8E2BE08-3214-419E-98CF-7DB7BAFDF7AF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\c8e2be08-3214-419e-98cf-7db7bafdf7af"), fInfoLevelId=0x0, lpFileInformation=0x22d8e20 | out: lpFileInformation=0x22d8e20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7314fa99, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x7314fa99, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x7315700c, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x534f)) returned 1 [0117.714] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0117.714] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\C8E2BE08-3214-419E-98CF-7DB7BAFDF7AF", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\C8E2BE08-3214-419E-98CF-7DB7BAFDF7AF", lpFilePart=0x0) returned 0x9a [0117.714] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0117.714] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\C8E2BE08-3214-419E-98CF-7DB7BAFDF7AF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\c8e2be08-3214-419e-98cf-7db7bafdf7af"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0117.715] GetFileType (hFile=0x444) returned 0x1 [0117.715] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0117.715] GetFileType (hFile=0x444) returned 0x1 [0117.715] ReadFile (in: hFile=0x444, lpBuffer=0x22db390, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x22db390*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0117.768] CloseHandle (hObject=0x444) returned 1 [0117.768] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\C8E2BE08-3214-419E-98CF-7DB7BAFDF7AF", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\C8E2BE08-3214-419E-98CF-7DB7BAFDF7AF", lpFilePart=0x0) returned 0x9a [0117.768] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0117.768] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\C8E2BE08-3214-419E-98CF-7DB7BAFDF7AF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\c8e2be08-3214-419e-98cf-7db7bafdf7af"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0117.768] GetFileType (hFile=0x444) returned 0x1 [0117.769] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0117.769] GetFileType (hFile=0x444) returned 0x1 [0117.769] WriteFile (in: hFile=0x444, lpBuffer=0x21481b8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x21481b8*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0117.769] CloseHandle (hObject=0x444) returned 1 [0117.769] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\C8E2BE08-3214-419E-98CF-7DB7BAFDF7AF", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\C8E2BE08-3214-419E-98CF-7DB7BAFDF7AF", lpFilePart=0x0) returned 0x9a [0117.769] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\C8E2BE08-3214-419E-98CF-7DB7BAFDF7AF.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\C8E2BE08-3214-419E-98CF-7DB7BAFDF7AF.xuy", lpFilePart=0x0) returned 0x9e [0117.769] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0117.769] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\C8E2BE08-3214-419E-98CF-7DB7BAFDF7AF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\c8e2be08-3214-419e-98cf-7db7bafdf7af"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7314fa99, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x7314fa99, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x320a9509, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x534f)) returned 1 [0117.769] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0117.769] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\C8E2BE08-3214-419E-98CF-7DB7BAFDF7AF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\c8e2be08-3214-419e-98cf-7db7bafdf7af"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\C8E2BE08-3214-419E-98CF-7DB7BAFDF7AF.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\c8e2be08-3214-419e-98cf-7db7bafdf7af.xuy")) returned 1 [0117.770] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\CA21D7B1-0D7B-41BF-A409-4B77C898A44F", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\CA21D7B1-0D7B-41BF-A409-4B77C898A44F", lpFilePart=0x0) returned 0x9a [0117.770] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0117.770] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\CA21D7B1-0D7B-41BF-A409-4B77C898A44F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\ca21d7b1-0d7b-41bf-a409-4b77c898a44f"), fInfoLevelId=0x0, lpFileInformation=0x215d1e8 | out: lpFileInformation=0x215d1e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73753a7b, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x73753a7b, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x73753a7b, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x1a6f)) returned 1 [0117.770] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0117.770] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\CA21D7B1-0D7B-41BF-A409-4B77C898A44F", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\CA21D7B1-0D7B-41BF-A409-4B77C898A44F", lpFilePart=0x0) returned 0x9a [0117.770] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0117.771] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\CA21D7B1-0D7B-41BF-A409-4B77C898A44F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\ca21d7b1-0d7b-41bf-a409-4b77c898a44f"), fInfoLevelId=0x0, lpFileInformation=0x215d408 | out: lpFileInformation=0x215d408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73753a7b, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x73753a7b, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x73753a7b, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x1a6f)) returned 1 [0117.771] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0117.771] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\CA21D7B1-0D7B-41BF-A409-4B77C898A44F", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\CA21D7B1-0D7B-41BF-A409-4B77C898A44F", lpFilePart=0x0) returned 0x9a [0117.771] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0117.771] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\CA21D7B1-0D7B-41BF-A409-4B77C898A44F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\ca21d7b1-0d7b-41bf-a409-4b77c898a44f"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0117.771] GetFileType (hFile=0x444) returned 0x1 [0117.772] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0117.772] GetFileType (hFile=0x444) returned 0x1 [0117.772] ReadFile (in: hFile=0x444, lpBuffer=0x215f978, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x215f978*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0117.786] CloseHandle (hObject=0x444) returned 1 [0117.787] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\CA21D7B1-0D7B-41BF-A409-4B77C898A44F", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\CA21D7B1-0D7B-41BF-A409-4B77C898A44F", lpFilePart=0x0) returned 0x9a [0117.787] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0117.787] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\CA21D7B1-0D7B-41BF-A409-4B77C898A44F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\ca21d7b1-0d7b-41bf-a409-4b77c898a44f"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0117.787] GetFileType (hFile=0x444) returned 0x1 [0117.787] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0117.787] GetFileType (hFile=0x444) returned 0x1 [0117.787] WriteFile (in: hFile=0x444, lpBuffer=0x215d608*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x215d608*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0117.787] CloseHandle (hObject=0x444) returned 1 [0117.787] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\CA21D7B1-0D7B-41BF-A409-4B77C898A44F", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\CA21D7B1-0D7B-41BF-A409-4B77C898A44F", lpFilePart=0x0) returned 0x9a [0117.787] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\CA21D7B1-0D7B-41BF-A409-4B77C898A44F.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\CA21D7B1-0D7B-41BF-A409-4B77C898A44F.xuy", lpFilePart=0x0) returned 0x9e [0117.788] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0117.788] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\CA21D7B1-0D7B-41BF-A409-4B77C898A44F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\ca21d7b1-0d7b-41bf-a409-4b77c898a44f"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73753a7b, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x73753a7b, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x320cf779, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0117.788] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0117.788] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\CA21D7B1-0D7B-41BF-A409-4B77C898A44F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\ca21d7b1-0d7b-41bf-a409-4b77c898a44f"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\CA21D7B1-0D7B-41BF-A409-4B77C898A44F.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\ca21d7b1-0d7b-41bf-a409-4b77c898a44f.xuy")) returned 1 [0117.789] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\CF1CC7BF-A425-4541-8A36-51BFF9F38CBF", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\CF1CC7BF-A425-4541-8A36-51BFF9F38CBF", lpFilePart=0x0) returned 0x9a [0117.789] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0117.789] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\CF1CC7BF-A425-4541-8A36-51BFF9F38CBF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\cf1cc7bf-a425-4541-8a36-51bff9f38cbf"), fInfoLevelId=0x0, lpFileInformation=0x21dbfb8 | out: lpFileInformation=0x21dbfb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x737a43c6, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x737a43c6, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x737a43c6, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x851)) returned 1 [0117.789] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0117.789] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\CF1CC7BF-A425-4541-8A36-51BFF9F38CBF", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\CF1CC7BF-A425-4541-8A36-51BFF9F38CBF", lpFilePart=0x0) returned 0x9a [0117.789] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0117.789] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\CF1CC7BF-A425-4541-8A36-51BFF9F38CBF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\cf1cc7bf-a425-4541-8a36-51bff9f38cbf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0117.790] GetFileType (hFile=0x444) returned 0x1 [0117.790] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0117.790] GetFileType (hFile=0x444) returned 0x1 [0117.790] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x851 [0117.790] ReadFile (in: hFile=0x444, lpBuffer=0x21dcc68, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x21dcc68*, lpNumberOfBytesRead=0x3be5c8*=0x851, lpOverlapped=0x0) returned 1 [0117.791] CloseHandle (hObject=0x444) returned 1 [0117.801] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\CF1CC7BF-A425-4541-8A36-51BFF9F38CBF", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\CF1CC7BF-A425-4541-8A36-51BFF9F38CBF", lpFilePart=0x0) returned 0x9a [0117.801] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0117.801] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\CF1CC7BF-A425-4541-8A36-51BFF9F38CBF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\cf1cc7bf-a425-4541-8a36-51bff9f38cbf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0117.803] GetFileType (hFile=0x444) returned 0x1 [0117.803] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0117.803] GetFileType (hFile=0x444) returned 0x1 [0117.803] WriteFile (in: hFile=0x444, lpBuffer=0x2256700*, nNumberOfBytesToWrite=0x860, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x2256700*, lpNumberOfBytesWritten=0x3be4d8*=0x860, lpOverlapped=0x0) returned 1 [0117.804] CloseHandle (hObject=0x444) returned 1 [0117.805] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\CF1CC7BF-A425-4541-8A36-51BFF9F38CBF", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\CF1CC7BF-A425-4541-8A36-51BFF9F38CBF", lpFilePart=0x0) returned 0x9a [0117.805] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\CF1CC7BF-A425-4541-8A36-51BFF9F38CBF.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\CF1CC7BF-A425-4541-8A36-51BFF9F38CBF.xuy", lpFilePart=0x0) returned 0x9e [0117.805] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0117.805] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\CF1CC7BF-A425-4541-8A36-51BFF9F38CBF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\cf1cc7bf-a425-4541-8a36-51bff9f38cbf"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x737a43c6, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x737a43c6, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x320f59c0, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x860)) returned 1 [0117.805] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0117.805] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\CF1CC7BF-A425-4541-8A36-51BFF9F38CBF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\cf1cc7bf-a425-4541-8a36-51bff9f38cbf"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\CF1CC7BF-A425-4541-8A36-51BFF9F38CBF.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\cf1cc7bf-a425-4541-8a36-51bff9f38cbf.xuy")) returned 1 [0117.806] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\D377C338-B3B0-4E63-9CD5-EE0A4AFF13CD", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\D377C338-B3B0-4E63-9CD5-EE0A4AFF13CD", lpFilePart=0x0) returned 0x9a [0117.806] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0117.806] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\D377C338-B3B0-4E63-9CD5-EE0A4AFF13CD" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\d377c338-b3b0-4e63-9cd5-ee0a4aff13cd"), fInfoLevelId=0x0, lpFileInformation=0x2257b38 | out: lpFileInformation=0x2257b38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x738c80b7, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x738c80b7, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x738c80b7, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x2260)) returned 1 [0117.806] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0117.806] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\D377C338-B3B0-4E63-9CD5-EE0A4AFF13CD", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\D377C338-B3B0-4E63-9CD5-EE0A4AFF13CD", lpFilePart=0x0) returned 0x9a [0117.806] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0117.806] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\D377C338-B3B0-4E63-9CD5-EE0A4AFF13CD" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\d377c338-b3b0-4e63-9cd5-ee0a4aff13cd"), fInfoLevelId=0x0, lpFileInformation=0x2257d58 | out: lpFileInformation=0x2257d58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x738c80b7, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x738c80b7, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x738c80b7, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x2260)) returned 1 [0117.807] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0117.807] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\D377C338-B3B0-4E63-9CD5-EE0A4AFF13CD", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\D377C338-B3B0-4E63-9CD5-EE0A4AFF13CD", lpFilePart=0x0) returned 0x9a [0117.807] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0117.807] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\D377C338-B3B0-4E63-9CD5-EE0A4AFF13CD" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\d377c338-b3b0-4e63-9cd5-ee0a4aff13cd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0117.807] GetFileType (hFile=0x444) returned 0x1 [0117.807] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0117.807] GetFileType (hFile=0x444) returned 0x1 [0117.807] ReadFile (in: hFile=0x444, lpBuffer=0x225a2c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x225a2c8*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0117.823] CloseHandle (hObject=0x444) returned 1 [0117.823] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\D377C338-B3B0-4E63-9CD5-EE0A4AFF13CD", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\D377C338-B3B0-4E63-9CD5-EE0A4AFF13CD", lpFilePart=0x0) returned 0x9a [0117.823] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0117.823] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\D377C338-B3B0-4E63-9CD5-EE0A4AFF13CD" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\d377c338-b3b0-4e63-9cd5-ee0a4aff13cd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0117.824] GetFileType (hFile=0x444) returned 0x1 [0117.824] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0117.824] GetFileType (hFile=0x444) returned 0x1 [0117.824] WriteFile (in: hFile=0x444, lpBuffer=0x2257f58*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x2257f58*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0117.824] CloseHandle (hObject=0x444) returned 1 [0117.824] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\D377C338-B3B0-4E63-9CD5-EE0A4AFF13CD", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\D377C338-B3B0-4E63-9CD5-EE0A4AFF13CD", lpFilePart=0x0) returned 0x9a [0117.824] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\D377C338-B3B0-4E63-9CD5-EE0A4AFF13CD.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\D377C338-B3B0-4E63-9CD5-EE0A4AFF13CD.xuy", lpFilePart=0x0) returned 0x9e [0117.824] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0117.824] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\D377C338-B3B0-4E63-9CD5-EE0A4AFF13CD" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\d377c338-b3b0-4e63-9cd5-ee0a4aff13cd"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x738c80b7, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x738c80b7, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x32145471, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2260)) returned 1 [0117.824] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0117.824] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\D377C338-B3B0-4E63-9CD5-EE0A4AFF13CD" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\d377c338-b3b0-4e63-9cd5-ee0a4aff13cd"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\D377C338-B3B0-4E63-9CD5-EE0A4AFF13CD.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\d377c338-b3b0-4e63-9cd5-ee0a4aff13cd.xuy")) returned 1 [0117.825] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\D99D1198-2688-447D-9BF2-F9F9C1375AFD", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\D99D1198-2688-447D-9BF2-F9F9C1375AFD", lpFilePart=0x0) returned 0x9a [0117.825] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0117.825] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\D99D1198-2688-447D-9BF2-F9F9C1375AFD" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\d99d1198-2688-447d-9bf2-f9f9c1375afd"), fInfoLevelId=0x0, lpFileInformation=0x22d6908 | out: lpFileInformation=0x22d6908*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x883f79c7, ftCreationTime.dwHighDateTime=0x1d301cf, ftLastAccessTime.dwLowDateTime=0x883f79c7, ftLastAccessTime.dwHighDateTime=0x1d301cf, ftLastWriteTime.dwLowDateTime=0x883f79c7, ftLastWriteTime.dwHighDateTime=0x1d301cf, nFileSizeHigh=0x0, nFileSizeLow=0x8e3d)) returned 1 [0117.826] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0117.826] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\D99D1198-2688-447D-9BF2-F9F9C1375AFD", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\D99D1198-2688-447D-9BF2-F9F9C1375AFD", lpFilePart=0x0) returned 0x9a [0117.826] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0117.826] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\D99D1198-2688-447D-9BF2-F9F9C1375AFD" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\d99d1198-2688-447d-9bf2-f9f9c1375afd"), fInfoLevelId=0x0, lpFileInformation=0x22d6b28 | out: lpFileInformation=0x22d6b28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x883f79c7, ftCreationTime.dwHighDateTime=0x1d301cf, ftLastAccessTime.dwLowDateTime=0x883f79c7, ftLastAccessTime.dwHighDateTime=0x1d301cf, ftLastWriteTime.dwLowDateTime=0x883f79c7, ftLastWriteTime.dwHighDateTime=0x1d301cf, nFileSizeHigh=0x0, nFileSizeLow=0x8e3d)) returned 1 [0117.826] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0117.826] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\D99D1198-2688-447D-9BF2-F9F9C1375AFD", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\D99D1198-2688-447D-9BF2-F9F9C1375AFD", lpFilePart=0x0) returned 0x9a [0117.826] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0117.826] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\D99D1198-2688-447D-9BF2-F9F9C1375AFD" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\d99d1198-2688-447d-9bf2-f9f9c1375afd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0117.826] GetFileType (hFile=0x444) returned 0x1 [0117.827] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0117.827] GetFileType (hFile=0x444) returned 0x1 [0117.827] ReadFile (in: hFile=0x444, lpBuffer=0x22d9098, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x22d9098*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0117.878] CloseHandle (hObject=0x444) returned 1 [0117.878] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\D99D1198-2688-447D-9BF2-F9F9C1375AFD", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\D99D1198-2688-447D-9BF2-F9F9C1375AFD", lpFilePart=0x0) returned 0x9a [0117.878] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0117.878] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\D99D1198-2688-447D-9BF2-F9F9C1375AFD" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\d99d1198-2688-447d-9bf2-f9f9c1375afd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0117.879] GetFileType (hFile=0x444) returned 0x1 [0117.879] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0117.879] GetFileType (hFile=0x444) returned 0x1 [0117.879] WriteFile (in: hFile=0x444, lpBuffer=0x214d9f0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x214d9f0*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0117.879] CloseHandle (hObject=0x444) returned 1 [0117.879] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\D99D1198-2688-447D-9BF2-F9F9C1375AFD", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\D99D1198-2688-447D-9BF2-F9F9C1375AFD", lpFilePart=0x0) returned 0x9a [0117.879] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\D99D1198-2688-447D-9BF2-F9F9C1375AFD.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\D99D1198-2688-447D-9BF2-F9F9C1375AFD.xuy", lpFilePart=0x0) returned 0x9e [0117.879] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0117.879] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\D99D1198-2688-447D-9BF2-F9F9C1375AFD" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\d99d1198-2688-447d-9bf2-f9f9c1375afd"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x883f79c7, ftCreationTime.dwHighDateTime=0x1d301cf, ftLastAccessTime.dwLowDateTime=0x883f79c7, ftLastAccessTime.dwHighDateTime=0x1d301cf, ftLastWriteTime.dwLowDateTime=0x321b45c6, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x8e3d)) returned 1 [0117.879] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0117.879] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\D99D1198-2688-447D-9BF2-F9F9C1375AFD" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\d99d1198-2688-447d-9bf2-f9f9c1375afd"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\D99D1198-2688-447D-9BF2-F9F9C1375AFD.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\d99d1198-2688-447d-9bf2-f9f9c1375afd.xuy")) returned 1 [0117.880] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\D9C1BAAC-9EDD-4EBD-BD8A-5B53E9904C13", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\D9C1BAAC-9EDD-4EBD-BD8A-5B53E9904C13", lpFilePart=0x0) returned 0x9a [0117.881] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0117.881] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\D9C1BAAC-9EDD-4EBD-BD8A-5B53E9904C13" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\d9c1baac-9edd-4ebd-bd8a-5b53e9904c13"), fInfoLevelId=0x0, lpFileInformation=0x215aee0 | out: lpFileInformation=0x215aee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x884fce31, ftCreationTime.dwHighDateTime=0x1d301cf, ftLastAccessTime.dwLowDateTime=0x884fce31, ftLastAccessTime.dwHighDateTime=0x1d301cf, ftLastWriteTime.dwLowDateTime=0x884fce31, ftLastWriteTime.dwHighDateTime=0x1d301cf, nFileSizeHigh=0x0, nFileSizeLow=0xa8d4)) returned 1 [0117.881] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0117.881] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\D9C1BAAC-9EDD-4EBD-BD8A-5B53E9904C13", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\D9C1BAAC-9EDD-4EBD-BD8A-5B53E9904C13", lpFilePart=0x0) returned 0x9a [0117.881] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0117.881] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\D9C1BAAC-9EDD-4EBD-BD8A-5B53E9904C13" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\d9c1baac-9edd-4ebd-bd8a-5b53e9904c13"), fInfoLevelId=0x0, lpFileInformation=0x215b100 | out: lpFileInformation=0x215b100*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x884fce31, ftCreationTime.dwHighDateTime=0x1d301cf, ftLastAccessTime.dwLowDateTime=0x884fce31, ftLastAccessTime.dwHighDateTime=0x1d301cf, ftLastWriteTime.dwLowDateTime=0x884fce31, ftLastWriteTime.dwHighDateTime=0x1d301cf, nFileSizeHigh=0x0, nFileSizeLow=0xa8d4)) returned 1 [0117.881] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0117.881] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\D9C1BAAC-9EDD-4EBD-BD8A-5B53E9904C13", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\D9C1BAAC-9EDD-4EBD-BD8A-5B53E9904C13", lpFilePart=0x0) returned 0x9a [0117.881] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0117.881] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\D9C1BAAC-9EDD-4EBD-BD8A-5B53E9904C13" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\d9c1baac-9edd-4ebd-bd8a-5b53e9904c13"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0117.882] GetFileType (hFile=0x444) returned 0x1 [0117.882] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0117.882] GetFileType (hFile=0x444) returned 0x1 [0117.882] ReadFile (in: hFile=0x444, lpBuffer=0x215d670, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x215d670*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0117.908] CloseHandle (hObject=0x444) returned 1 [0117.908] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\D9C1BAAC-9EDD-4EBD-BD8A-5B53E9904C13", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\D9C1BAAC-9EDD-4EBD-BD8A-5B53E9904C13", lpFilePart=0x0) returned 0x9a [0117.908] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0117.908] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\D9C1BAAC-9EDD-4EBD-BD8A-5B53E9904C13" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\d9c1baac-9edd-4ebd-bd8a-5b53e9904c13"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0117.908] GetFileType (hFile=0x444) returned 0x1 [0117.908] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0117.908] GetFileType (hFile=0x444) returned 0x1 [0117.908] WriteFile (in: hFile=0x444, lpBuffer=0x215b300*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x215b300*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0117.909] CloseHandle (hObject=0x444) returned 1 [0117.909] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\D9C1BAAC-9EDD-4EBD-BD8A-5B53E9904C13", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\D9C1BAAC-9EDD-4EBD-BD8A-5B53E9904C13", lpFilePart=0x0) returned 0x9a [0117.909] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\D9C1BAAC-9EDD-4EBD-BD8A-5B53E9904C13.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\D9C1BAAC-9EDD-4EBD-BD8A-5B53E9904C13.xuy", lpFilePart=0x0) returned 0x9e [0117.909] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0117.909] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\D9C1BAAC-9EDD-4EBD-BD8A-5B53E9904C13" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\d9c1baac-9edd-4ebd-bd8a-5b53e9904c13"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x884fce31, ftCreationTime.dwHighDateTime=0x1d301cf, ftLastAccessTime.dwLowDateTime=0x884fce31, ftLastAccessTime.dwHighDateTime=0x1d301cf, ftLastWriteTime.dwLowDateTime=0x32200a38, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xa8d4)) returned 1 [0117.909] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0117.909] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\D9C1BAAC-9EDD-4EBD-BD8A-5B53E9904C13" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\d9c1baac-9edd-4ebd-bd8a-5b53e9904c13"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\D9C1BAAC-9EDD-4EBD-BD8A-5B53E9904C13.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\d9c1baac-9edd-4ebd-bd8a-5b53e9904c13.xuy")) returned 1 [0117.910] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\E00BE78D-CFF7-47B9-8E8C-37ADF516B28A", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\E00BE78D-CFF7-47B9-8E8C-37ADF516B28A", lpFilePart=0x0) returned 0x9a [0117.910] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0117.910] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\E00BE78D-CFF7-47B9-8E8C-37ADF516B28A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\e00be78d-cff7-47b9-8e8c-37adf516b28a"), fInfoLevelId=0x0, lpFileInformation=0x21d9cb0 | out: lpFileInformation=0x21d9cb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x739533a7, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x739533a7, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x739533a7, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x4eb4)) returned 1 [0117.910] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0117.911] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\E00BE78D-CFF7-47B9-8E8C-37ADF516B28A", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\E00BE78D-CFF7-47B9-8E8C-37ADF516B28A", lpFilePart=0x0) returned 0x9a [0117.911] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0117.911] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\E00BE78D-CFF7-47B9-8E8C-37ADF516B28A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\e00be78d-cff7-47b9-8e8c-37adf516b28a"), fInfoLevelId=0x0, lpFileInformation=0x21d9ed0 | out: lpFileInformation=0x21d9ed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x739533a7, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x739533a7, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x739533a7, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x4eb4)) returned 1 [0117.911] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0117.911] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\E00BE78D-CFF7-47B9-8E8C-37ADF516B28A", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\E00BE78D-CFF7-47B9-8E8C-37ADF516B28A", lpFilePart=0x0) returned 0x9a [0117.911] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0117.911] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\E00BE78D-CFF7-47B9-8E8C-37ADF516B28A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\e00be78d-cff7-47b9-8e8c-37adf516b28a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0117.912] GetFileType (hFile=0x444) returned 0x1 [0117.912] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0117.912] GetFileType (hFile=0x444) returned 0x1 [0117.912] ReadFile (in: hFile=0x444, lpBuffer=0x21dc440, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x21dc440*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0117.948] CloseHandle (hObject=0x444) returned 1 [0117.948] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\E00BE78D-CFF7-47B9-8E8C-37ADF516B28A", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\E00BE78D-CFF7-47B9-8E8C-37ADF516B28A", lpFilePart=0x0) returned 0x9a [0117.949] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0117.949] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\E00BE78D-CFF7-47B9-8E8C-37ADF516B28A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\e00be78d-cff7-47b9-8e8c-37adf516b28a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0117.949] GetFileType (hFile=0x444) returned 0x1 [0117.949] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0117.949] GetFileType (hFile=0x444) returned 0x1 [0117.949] WriteFile (in: hFile=0x444, lpBuffer=0x21da0d0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x21da0d0*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0117.949] CloseHandle (hObject=0x444) returned 1 [0117.949] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\E00BE78D-CFF7-47B9-8E8C-37ADF516B28A", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\E00BE78D-CFF7-47B9-8E8C-37ADF516B28A", lpFilePart=0x0) returned 0x9a [0117.949] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\E00BE78D-CFF7-47B9-8E8C-37ADF516B28A.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\E00BE78D-CFF7-47B9-8E8C-37ADF516B28A.xuy", lpFilePart=0x0) returned 0x9e [0117.949] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0117.950] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\E00BE78D-CFF7-47B9-8E8C-37ADF516B28A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\e00be78d-cff7-47b9-8e8c-37adf516b28a"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x739533a7, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x739533a7, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x322735c3, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x4eb4)) returned 1 [0117.950] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0117.950] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\E00BE78D-CFF7-47B9-8E8C-37ADF516B28A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\e00be78d-cff7-47b9-8e8c-37adf516b28a"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\E00BE78D-CFF7-47B9-8E8C-37ADF516B28A.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\e00be78d-cff7-47b9-8e8c-37adf516b28a.xuy")) returned 1 [0117.951] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\E164F0A7-B014-475B-BC5C-1C1285127D5A", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\E164F0A7-B014-475B-BC5C-1C1285127D5A", lpFilePart=0x0) returned 0x9a [0117.951] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0117.951] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\E164F0A7-B014-475B-BC5C-1C1285127D5A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\e164f0a7-b014-475b-bc5c-1c1285127d5a"), fInfoLevelId=0x0, lpFileInformation=0x2258a80 | out: lpFileInformation=0x2258a80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x881965ba, ftCreationTime.dwHighDateTime=0x1d301cf, ftLastAccessTime.dwLowDateTime=0x881965ba, ftLastAccessTime.dwHighDateTime=0x1d301cf, ftLastWriteTime.dwLowDateTime=0x881965ba, ftLastWriteTime.dwHighDateTime=0x1d301cf, nFileSizeHigh=0x0, nFileSizeLow=0x5491)) returned 1 [0117.951] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0117.951] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\E164F0A7-B014-475B-BC5C-1C1285127D5A", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\E164F0A7-B014-475B-BC5C-1C1285127D5A", lpFilePart=0x0) returned 0x9a [0117.951] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0117.951] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\E164F0A7-B014-475B-BC5C-1C1285127D5A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\e164f0a7-b014-475b-bc5c-1c1285127d5a"), fInfoLevelId=0x0, lpFileInformation=0x2258ca0 | out: lpFileInformation=0x2258ca0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x881965ba, ftCreationTime.dwHighDateTime=0x1d301cf, ftLastAccessTime.dwLowDateTime=0x881965ba, ftLastAccessTime.dwHighDateTime=0x1d301cf, ftLastWriteTime.dwLowDateTime=0x881965ba, ftLastWriteTime.dwHighDateTime=0x1d301cf, nFileSizeHigh=0x0, nFileSizeLow=0x5491)) returned 1 [0117.951] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0117.951] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\E164F0A7-B014-475B-BC5C-1C1285127D5A", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\E164F0A7-B014-475B-BC5C-1C1285127D5A", lpFilePart=0x0) returned 0x9a [0117.951] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0117.952] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\E164F0A7-B014-475B-BC5C-1C1285127D5A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\e164f0a7-b014-475b-bc5c-1c1285127d5a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0117.952] GetFileType (hFile=0x444) returned 0x1 [0117.953] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0117.953] GetFileType (hFile=0x444) returned 0x1 [0117.953] ReadFile (in: hFile=0x444, lpBuffer=0x225b210, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x225b210*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0117.987] CloseHandle (hObject=0x444) returned 1 [0117.987] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\E164F0A7-B014-475B-BC5C-1C1285127D5A", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\E164F0A7-B014-475B-BC5C-1C1285127D5A", lpFilePart=0x0) returned 0x9a [0117.987] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0117.987] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\E164F0A7-B014-475B-BC5C-1C1285127D5A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\e164f0a7-b014-475b-bc5c-1c1285127d5a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0117.987] GetFileType (hFile=0x444) returned 0x1 [0117.987] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0117.987] GetFileType (hFile=0x444) returned 0x1 [0117.987] WriteFile (in: hFile=0x444, lpBuffer=0x2258ea0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x2258ea0*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0117.988] CloseHandle (hObject=0x444) returned 1 [0117.988] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\E164F0A7-B014-475B-BC5C-1C1285127D5A", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\E164F0A7-B014-475B-BC5C-1C1285127D5A", lpFilePart=0x0) returned 0x9a [0117.988] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\E164F0A7-B014-475B-BC5C-1C1285127D5A.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\E164F0A7-B014-475B-BC5C-1C1285127D5A.xuy", lpFilePart=0x0) returned 0x9e [0117.988] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0117.988] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\E164F0A7-B014-475B-BC5C-1C1285127D5A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\e164f0a7-b014-475b-bc5c-1c1285127d5a"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x881965ba, ftCreationTime.dwHighDateTime=0x1d301cf, ftLastAccessTime.dwLowDateTime=0x881965ba, ftLastAccessTime.dwHighDateTime=0x1d301cf, ftLastWriteTime.dwLowDateTime=0x322bf516, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x5491)) returned 1 [0117.988] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0117.988] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\E164F0A7-B014-475B-BC5C-1C1285127D5A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\e164f0a7-b014-475b-bc5c-1c1285127d5a"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\E164F0A7-B014-475B-BC5C-1C1285127D5A.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\e164f0a7-b014-475b-bc5c-1c1285127d5a.xuy")) returned 1 [0117.989] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\E277E429-138B-4461-B716-C03D493C22D0", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\E277E429-138B-4461-B716-C03D493C22D0", lpFilePart=0x0) returned 0x9a [0117.989] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0117.989] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\E277E429-138B-4461-B716-C03D493C22D0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\e277e429-138b-4461-b716-c03d493c22d0"), fInfoLevelId=0x0, lpFileInformation=0x22d7850 | out: lpFileInformation=0x22d7850*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7380fade, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x7380fade, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x7380fade, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x4d5d)) returned 1 [0117.989] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0117.989] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\E277E429-138B-4461-B716-C03D493C22D0", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\E277E429-138B-4461-B716-C03D493C22D0", lpFilePart=0x0) returned 0x9a [0117.990] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0117.990] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\E277E429-138B-4461-B716-C03D493C22D0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\e277e429-138b-4461-b716-c03d493c22d0"), fInfoLevelId=0x0, lpFileInformation=0x22d7a70 | out: lpFileInformation=0x22d7a70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7380fade, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x7380fade, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x7380fade, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x4d5d)) returned 1 [0117.990] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0117.990] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\E277E429-138B-4461-B716-C03D493C22D0", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\E277E429-138B-4461-B716-C03D493C22D0", lpFilePart=0x0) returned 0x9a [0117.990] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0117.990] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\E277E429-138B-4461-B716-C03D493C22D0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\e277e429-138b-4461-b716-c03d493c22d0"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0117.991] GetFileType (hFile=0x444) returned 0x1 [0117.991] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0117.991] GetFileType (hFile=0x444) returned 0x1 [0117.991] ReadFile (in: hFile=0x444, lpBuffer=0x22d9fe0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x22d9fe0*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0118.022] CloseHandle (hObject=0x444) returned 1 [0118.023] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\E277E429-138B-4461-B716-C03D493C22D0", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\E277E429-138B-4461-B716-C03D493C22D0", lpFilePart=0x0) returned 0x9a [0118.023] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0118.023] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\E277E429-138B-4461-B716-C03D493C22D0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\e277e429-138b-4461-b716-c03d493c22d0"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0118.023] GetFileType (hFile=0x444) returned 0x1 [0118.023] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0118.023] GetFileType (hFile=0x444) returned 0x1 [0118.023] WriteFile (in: hFile=0x444, lpBuffer=0x2153228*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x2153228*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0118.024] CloseHandle (hObject=0x444) returned 1 [0118.024] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\E277E429-138B-4461-B716-C03D493C22D0", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\E277E429-138B-4461-B716-C03D493C22D0", lpFilePart=0x0) returned 0x9a [0118.024] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\E277E429-138B-4461-B716-C03D493C22D0.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\E277E429-138B-4461-B716-C03D493C22D0.xuy", lpFilePart=0x0) returned 0x9e [0118.024] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0118.024] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\E277E429-138B-4461-B716-C03D493C22D0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\e277e429-138b-4461-b716-c03d493c22d0"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7380fade, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x7380fade, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x32331c7c, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x4d5d)) returned 1 [0118.024] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0118.024] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\E277E429-138B-4461-B716-C03D493C22D0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\e277e429-138b-4461-b716-c03d493c22d0"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\E277E429-138B-4461-B716-C03D493C22D0.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\e277e429-138b-4461-b716-c03d493c22d0.xuy")) returned 1 [0118.025] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\E4FDC49F-730A-46D4-9B3E-AE4CD4D8873A", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\E4FDC49F-730A-46D4-9B3E-AE4CD4D8873A", lpFilePart=0x0) returned 0x9a [0118.025] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0118.025] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\E4FDC49F-730A-46D4-9B3E-AE4CD4D8873A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\e4fdc49f-730a-46d4-9b3e-ae4cd4d8873a"), fInfoLevelId=0x0, lpFileInformation=0x215c1e0 | out: lpFileInformation=0x215c1e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7314bfe1, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x7314bfe1, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x7314bfe1, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x2cf6)) returned 1 [0118.026] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0118.026] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\E4FDC49F-730A-46D4-9B3E-AE4CD4D8873A", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\E4FDC49F-730A-46D4-9B3E-AE4CD4D8873A", lpFilePart=0x0) returned 0x9a [0118.026] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0118.026] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\E4FDC49F-730A-46D4-9B3E-AE4CD4D8873A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\e4fdc49f-730a-46d4-9b3e-ae4cd4d8873a"), fInfoLevelId=0x0, lpFileInformation=0x215c400 | out: lpFileInformation=0x215c400*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7314bfe1, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x7314bfe1, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x7314bfe1, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x2cf6)) returned 1 [0118.026] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0118.026] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\E4FDC49F-730A-46D4-9B3E-AE4CD4D8873A", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\E4FDC49F-730A-46D4-9B3E-AE4CD4D8873A", lpFilePart=0x0) returned 0x9a [0118.026] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0118.026] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\E4FDC49F-730A-46D4-9B3E-AE4CD4D8873A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\e4fdc49f-730a-46d4-9b3e-ae4cd4d8873a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0118.027] GetFileType (hFile=0x444) returned 0x1 [0118.027] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0118.027] GetFileType (hFile=0x444) returned 0x1 [0118.027] ReadFile (in: hFile=0x444, lpBuffer=0x215e970, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x215e970*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0118.067] CloseHandle (hObject=0x444) returned 1 [0118.067] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\E4FDC49F-730A-46D4-9B3E-AE4CD4D8873A", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\E4FDC49F-730A-46D4-9B3E-AE4CD4D8873A", lpFilePart=0x0) returned 0x9a [0118.067] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0118.067] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\E4FDC49F-730A-46D4-9B3E-AE4CD4D8873A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\e4fdc49f-730a-46d4-9b3e-ae4cd4d8873a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0118.067] GetFileType (hFile=0x444) returned 0x1 [0118.067] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0118.067] GetFileType (hFile=0x444) returned 0x1 [0118.067] WriteFile (in: hFile=0x444, lpBuffer=0x215c600*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x215c600*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0118.068] CloseHandle (hObject=0x444) returned 1 [0118.068] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\E4FDC49F-730A-46D4-9B3E-AE4CD4D8873A", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\E4FDC49F-730A-46D4-9B3E-AE4CD4D8873A", lpFilePart=0x0) returned 0x9a [0118.068] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\E4FDC49F-730A-46D4-9B3E-AE4CD4D8873A.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\E4FDC49F-730A-46D4-9B3E-AE4CD4D8873A.xuy", lpFilePart=0x0) returned 0x9e [0118.068] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0118.068] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\E4FDC49F-730A-46D4-9B3E-AE4CD4D8873A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\e4fdc49f-730a-46d4-9b3e-ae4cd4d8873a"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7314bfe1, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x7314bfe1, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x3237e322, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2cf6)) returned 1 [0118.068] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0118.068] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\E4FDC49F-730A-46D4-9B3E-AE4CD4D8873A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\e4fdc49f-730a-46d4-9b3e-ae4cd4d8873a"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\E4FDC49F-730A-46D4-9B3E-AE4CD4D8873A.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\e4fdc49f-730a-46d4-9b3e-ae4cd4d8873a.xuy")) returned 1 [0118.069] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\F1AC218A-8D02-402C-876E-4B0E2A662BFA", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\F1AC218A-8D02-402C-876E-4B0E2A662BFA", lpFilePart=0x0) returned 0x9a [0118.069] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0118.069] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\F1AC218A-8D02-402C-876E-4B0E2A662BFA" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\f1ac218a-8d02-402c-876e-4b0e2a662bfa"), fInfoLevelId=0x0, lpFileInformation=0x21dafb0 | out: lpFileInformation=0x21dafb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88193ea9, ftCreationTime.dwHighDateTime=0x1d301cf, ftLastAccessTime.dwLowDateTime=0x88193ea9, ftLastAccessTime.dwHighDateTime=0x1d301cf, ftLastWriteTime.dwLowDateTime=0x88193ea9, ftLastWriteTime.dwHighDateTime=0x1d301cf, nFileSizeHigh=0x0, nFileSizeLow=0x52ce)) returned 1 [0118.069] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0118.069] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\F1AC218A-8D02-402C-876E-4B0E2A662BFA", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\F1AC218A-8D02-402C-876E-4B0E2A662BFA", lpFilePart=0x0) returned 0x9a [0118.069] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0118.069] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\F1AC218A-8D02-402C-876E-4B0E2A662BFA" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\f1ac218a-8d02-402c-876e-4b0e2a662bfa"), fInfoLevelId=0x0, lpFileInformation=0x21db1d0 | out: lpFileInformation=0x21db1d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88193ea9, ftCreationTime.dwHighDateTime=0x1d301cf, ftLastAccessTime.dwLowDateTime=0x88193ea9, ftLastAccessTime.dwHighDateTime=0x1d301cf, ftLastWriteTime.dwLowDateTime=0x88193ea9, ftLastWriteTime.dwHighDateTime=0x1d301cf, nFileSizeHigh=0x0, nFileSizeLow=0x52ce)) returned 1 [0118.070] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0118.070] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\F1AC218A-8D02-402C-876E-4B0E2A662BFA", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\F1AC218A-8D02-402C-876E-4B0E2A662BFA", lpFilePart=0x0) returned 0x9a [0118.070] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0118.070] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\F1AC218A-8D02-402C-876E-4B0E2A662BFA" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\f1ac218a-8d02-402c-876e-4b0e2a662bfa"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0118.071] GetFileType (hFile=0x444) returned 0x1 [0118.071] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0118.071] GetFileType (hFile=0x444) returned 0x1 [0118.071] ReadFile (in: hFile=0x444, lpBuffer=0x21dd740, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x21dd740*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0118.095] CloseHandle (hObject=0x444) returned 1 [0118.095] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\F1AC218A-8D02-402C-876E-4B0E2A662BFA", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\F1AC218A-8D02-402C-876E-4B0E2A662BFA", lpFilePart=0x0) returned 0x9a [0118.095] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0118.095] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\F1AC218A-8D02-402C-876E-4B0E2A662BFA" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\f1ac218a-8d02-402c-876e-4b0e2a662bfa"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0118.095] GetFileType (hFile=0x444) returned 0x1 [0118.095] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0118.095] GetFileType (hFile=0x444) returned 0x1 [0118.095] WriteFile (in: hFile=0x444, lpBuffer=0x21db3d0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x21db3d0*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0118.095] CloseHandle (hObject=0x444) returned 1 [0118.095] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\F1AC218A-8D02-402C-876E-4B0E2A662BFA", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\F1AC218A-8D02-402C-876E-4B0E2A662BFA", lpFilePart=0x0) returned 0x9a [0118.096] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\F1AC218A-8D02-402C-876E-4B0E2A662BFA.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\F1AC218A-8D02-402C-876E-4B0E2A662BFA.xuy", lpFilePart=0x0) returned 0x9e [0118.096] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0118.096] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\F1AC218A-8D02-402C-876E-4B0E2A662BFA" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\f1ac218a-8d02-402c-876e-4b0e2a662bfa"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88193ea9, ftCreationTime.dwHighDateTime=0x1d301cf, ftLastAccessTime.dwLowDateTime=0x88193ea9, ftLastAccessTime.dwHighDateTime=0x1d301cf, ftLastWriteTime.dwLowDateTime=0x323ca960, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x52ce)) returned 1 [0118.096] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0118.096] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\F1AC218A-8D02-402C-876E-4B0E2A662BFA" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\f1ac218a-8d02-402c-876e-4b0e2a662bfa"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\F1AC218A-8D02-402C-876E-4B0E2A662BFA.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\f1ac218a-8d02-402c-876e-4b0e2a662bfa.xuy")) returned 1 [0118.097] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\F442332F-BE2E-45C6-B52A-9FA2F82F4F72", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\F442332F-BE2E-45C6-B52A-9FA2F82F4F72", lpFilePart=0x0) returned 0x9a [0118.097] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0118.097] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\F442332F-BE2E-45C6-B52A-9FA2F82F4F72" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\f442332f-be2e-45c6-b52a-9fa2f82f4f72"), fInfoLevelId=0x0, lpFileInformation=0x2259d80 | out: lpFileInformation=0x2259d80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7315e4e7, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x7315e4e7, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x7315f87d, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x4ef5)) returned 1 [0118.098] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0118.098] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\F442332F-BE2E-45C6-B52A-9FA2F82F4F72", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\F442332F-BE2E-45C6-B52A-9FA2F82F4F72", lpFilePart=0x0) returned 0x9a [0118.098] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0118.098] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\F442332F-BE2E-45C6-B52A-9FA2F82F4F72" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\f442332f-be2e-45c6-b52a-9fa2f82f4f72"), fInfoLevelId=0x0, lpFileInformation=0x2259fa0 | out: lpFileInformation=0x2259fa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7315e4e7, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x7315e4e7, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x7315f87d, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x4ef5)) returned 1 [0118.098] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0118.098] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\F442332F-BE2E-45C6-B52A-9FA2F82F4F72", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\F442332F-BE2E-45C6-B52A-9FA2F82F4F72", lpFilePart=0x0) returned 0x9a [0118.098] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0118.098] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\F442332F-BE2E-45C6-B52A-9FA2F82F4F72" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\f442332f-be2e-45c6-b52a-9fa2f82f4f72"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0118.099] GetFileType (hFile=0x444) returned 0x1 [0118.099] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0118.099] GetFileType (hFile=0x444) returned 0x1 [0118.099] ReadFile (in: hFile=0x444, lpBuffer=0x225c510, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x225c510*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0118.126] CloseHandle (hObject=0x444) returned 1 [0118.126] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\F442332F-BE2E-45C6-B52A-9FA2F82F4F72", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\F442332F-BE2E-45C6-B52A-9FA2F82F4F72", lpFilePart=0x0) returned 0x9a [0118.126] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0118.126] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\F442332F-BE2E-45C6-B52A-9FA2F82F4F72" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\f442332f-be2e-45c6-b52a-9fa2f82f4f72"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0118.126] GetFileType (hFile=0x444) returned 0x1 [0118.126] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0118.126] GetFileType (hFile=0x444) returned 0x1 [0118.126] WriteFile (in: hFile=0x444, lpBuffer=0x225a1a0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x225a1a0*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0118.127] CloseHandle (hObject=0x444) returned 1 [0118.127] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\F442332F-BE2E-45C6-B52A-9FA2F82F4F72", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\F442332F-BE2E-45C6-B52A-9FA2F82F4F72", lpFilePart=0x0) returned 0x9a [0118.127] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\F442332F-BE2E-45C6-B52A-9FA2F82F4F72.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\F442332F-BE2E-45C6-B52A-9FA2F82F4F72.xuy", lpFilePart=0x0) returned 0x9e [0118.127] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0118.127] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\F442332F-BE2E-45C6-B52A-9FA2F82F4F72" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\f442332f-be2e-45c6-b52a-9fa2f82f4f72"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7315e4e7, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x7315e4e7, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x32416a6a, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x4ef5)) returned 1 [0118.127] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0118.127] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\F442332F-BE2E-45C6-B52A-9FA2F82F4F72" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\f442332f-be2e-45c6-b52a-9fa2f82f4f72"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\F442332F-BE2E-45C6-B52A-9FA2F82F4F72.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\f442332f-be2e-45c6-b52a-9fa2f82f4f72.xuy")) returned 1 [0118.128] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\F85AB5DD-848A-4CA1-A9F0-ECCF7052094F", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\F85AB5DD-848A-4CA1-A9F0-ECCF7052094F", lpFilePart=0x0) returned 0x9a [0118.128] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0118.128] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\F85AB5DD-848A-4CA1-A9F0-ECCF7052094F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\f85ab5dd-848a-4ca1-a9f0-eccf7052094f"), fInfoLevelId=0x0, lpFileInformation=0x22d8b50 | out: lpFileInformation=0x22d8b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x738d4402, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x738d4402, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x738d577c, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x7776)) returned 1 [0118.128] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0118.128] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\F85AB5DD-848A-4CA1-A9F0-ECCF7052094F", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\F85AB5DD-848A-4CA1-A9F0-ECCF7052094F", lpFilePart=0x0) returned 0x9a [0118.128] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0118.128] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\F85AB5DD-848A-4CA1-A9F0-ECCF7052094F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\f85ab5dd-848a-4ca1-a9f0-eccf7052094f"), fInfoLevelId=0x0, lpFileInformation=0x22d8d70 | out: lpFileInformation=0x22d8d70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x738d4402, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x738d4402, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x738d577c, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x7776)) returned 1 [0118.129] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0118.129] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\F85AB5DD-848A-4CA1-A9F0-ECCF7052094F", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\F85AB5DD-848A-4CA1-A9F0-ECCF7052094F", lpFilePart=0x0) returned 0x9a [0118.129] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0118.129] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\F85AB5DD-848A-4CA1-A9F0-ECCF7052094F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\f85ab5dd-848a-4ca1-a9f0-eccf7052094f"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0118.129] GetFileType (hFile=0x444) returned 0x1 [0118.129] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0118.129] GetFileType (hFile=0x444) returned 0x1 [0118.129] ReadFile (in: hFile=0x444, lpBuffer=0x22db2e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x22db2e0*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0118.142] CloseHandle (hObject=0x444) returned 1 [0118.142] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\F85AB5DD-848A-4CA1-A9F0-ECCF7052094F", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\F85AB5DD-848A-4CA1-A9F0-ECCF7052094F", lpFilePart=0x0) returned 0x9a [0118.142] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0118.142] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\F85AB5DD-848A-4CA1-A9F0-ECCF7052094F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\f85ab5dd-848a-4ca1-a9f0-eccf7052094f"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0118.143] GetFileType (hFile=0x444) returned 0x1 [0118.143] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0118.143] GetFileType (hFile=0x444) returned 0x1 [0118.143] WriteFile (in: hFile=0x444, lpBuffer=0x22d8f70*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x22d8f70*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0118.143] CloseHandle (hObject=0x444) returned 1 [0118.143] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\F85AB5DD-848A-4CA1-A9F0-ECCF7052094F", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\F85AB5DD-848A-4CA1-A9F0-ECCF7052094F", lpFilePart=0x0) returned 0x9a [0118.143] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\F85AB5DD-848A-4CA1-A9F0-ECCF7052094F.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\F85AB5DD-848A-4CA1-A9F0-ECCF7052094F.xuy", lpFilePart=0x0) returned 0x9e [0118.143] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0118.143] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\F85AB5DD-848A-4CA1-A9F0-ECCF7052094F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\f85ab5dd-848a-4ca1-a9f0-eccf7052094f"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x738d4402, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x738d4402, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x3243cc88, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x7776)) returned 1 [0118.143] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0118.143] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\F85AB5DD-848A-4CA1-A9F0-ECCF7052094F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\f85ab5dd-848a-4ca1-a9f0-eccf7052094f"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\F85AB5DD-848A-4CA1-A9F0-ECCF7052094F.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\f85ab5dd-848a-4ca1-a9f0-eccf7052094f.xuy")) returned 1 [0118.144] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\FA975BDF-A96C-4D1C-A93C-60FD5D97AC90", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\FA975BDF-A96C-4D1C-A93C-60FD5D97AC90", lpFilePart=0x0) returned 0x9a [0118.144] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0118.144] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\FA975BDF-A96C-4D1C-A93C-60FD5D97AC90" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\fa975bdf-a96c-4d1c-a93c-60fd5d97ac90"), fInfoLevelId=0x0, lpFileInformation=0x2357920 | out: lpFileInformation=0x2357920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b8afb3a, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x5b8afb3a, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x5b8b0ed0, ftLastWriteTime.dwHighDateTime=0x1d301c4, nFileSizeHigh=0x0, nFileSizeLow=0xa92c)) returned 1 [0118.144] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0118.149] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\FA975BDF-A96C-4D1C-A93C-60FD5D97AC90", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\FA975BDF-A96C-4D1C-A93C-60FD5D97AC90", lpFilePart=0x0) returned 0x9a [0118.149] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0118.149] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\FA975BDF-A96C-4D1C-A93C-60FD5D97AC90" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\fa975bdf-a96c-4d1c-a93c-60fd5d97ac90"), fInfoLevelId=0x0, lpFileInformation=0x2159b28 | out: lpFileInformation=0x2159b28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b8afb3a, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x5b8afb3a, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x5b8b0ed0, ftLastWriteTime.dwHighDateTime=0x1d301c4, nFileSizeHigh=0x0, nFileSizeLow=0xa92c)) returned 1 [0118.149] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0118.149] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\FA975BDF-A96C-4D1C-A93C-60FD5D97AC90", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\FA975BDF-A96C-4D1C-A93C-60FD5D97AC90", lpFilePart=0x0) returned 0x9a [0118.149] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0118.149] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\FA975BDF-A96C-4D1C-A93C-60FD5D97AC90" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\fa975bdf-a96c-4d1c-a93c-60fd5d97ac90"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0118.150] GetFileType (hFile=0x444) returned 0x1 [0118.150] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0118.150] GetFileType (hFile=0x444) returned 0x1 [0118.150] ReadFile (in: hFile=0x444, lpBuffer=0x215c098, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x215c098*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0118.194] CloseHandle (hObject=0x444) returned 1 [0118.194] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\FA975BDF-A96C-4D1C-A93C-60FD5D97AC90", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\FA975BDF-A96C-4D1C-A93C-60FD5D97AC90", lpFilePart=0x0) returned 0x9a [0118.194] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0118.194] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\FA975BDF-A96C-4D1C-A93C-60FD5D97AC90" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\fa975bdf-a96c-4d1c-a93c-60fd5d97ac90"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0118.195] GetFileType (hFile=0x444) returned 0x1 [0118.195] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0118.195] GetFileType (hFile=0x444) returned 0x1 [0118.195] WriteFile (in: hFile=0x444, lpBuffer=0x2159d28*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x2159d28*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0118.195] CloseHandle (hObject=0x444) returned 1 [0118.196] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\FA975BDF-A96C-4D1C-A93C-60FD5D97AC90", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\FA975BDF-A96C-4D1C-A93C-60FD5D97AC90", lpFilePart=0x0) returned 0x9a [0118.197] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\FA975BDF-A96C-4D1C-A93C-60FD5D97AC90.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\FA975BDF-A96C-4D1C-A93C-60FD5D97AC90.xuy", lpFilePart=0x0) returned 0x9e [0118.197] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0118.197] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\FA975BDF-A96C-4D1C-A93C-60FD5D97AC90" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\fa975bdf-a96c-4d1c-a93c-60fd5d97ac90"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b8afb3a, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x5b8afb3a, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x324d5795, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xa92c)) returned 1 [0118.197] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0118.197] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\FA975BDF-A96C-4D1C-A93C-60FD5D97AC90" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\fa975bdf-a96c-4d1c-a93c-60fd5d97ac90"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\FA975BDF-A96C-4D1C-A93C-60FD5D97AC90.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\fa975bdf-a96c-4d1c-a93c-60fd5d97ac90.xuy")) returned 1 [0118.198] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0118.199] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com", lpFilePart=0x0) returned 0x6d [0118.199] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\", lpFilePart=0x0) returned 0x6e [0118.199] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d79d0 [0118.200] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0118.200] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0118.200] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0118.200] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0118.200] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0118.200] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0118.201] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0118.201] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0118.201] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0118.201] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0118.201] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0118.201] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com", lpFilePart=0x0) returned 0x6d [0118.202] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\", lpFilePart=0x0) returned 0x6e [0118.202] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d78b0 [0118.202] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0118.203] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0118.203] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0118.203] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0118.203] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0118.203] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0118.203] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0118.203] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0118.204] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0118.204] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0118.204] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\03E95D48-EBA7-4D0E-895B-1582FC40EC0D", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\03E95D48-EBA7-4D0E-895B-1582FC40EC0D", lpFilePart=0x0) returned 0x92 [0118.204] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0118.204] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\03E95D48-EBA7-4D0E-895B-1582FC40EC0D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\officeclient.microsoft.com\\03e95d48-eba7-4d0e-895b-1582fc40ec0d"), fInfoLevelId=0x0, lpFileInformation=0x21dcc58 | out: lpFileInformation=0x21dcc58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f76b494, ftCreationTime.dwHighDateTime=0x1d336e2, ftLastAccessTime.dwLowDateTime=0x8f76b494, ftLastAccessTime.dwHighDateTime=0x1d336e2, ftLastWriteTime.dwLowDateTime=0x8f76b494, ftLastWriteTime.dwHighDateTime=0x1d336e2, nFileSizeHigh=0x0, nFileSizeLow=0xff6d)) returned 1 [0118.205] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0118.205] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\03E95D48-EBA7-4D0E-895B-1582FC40EC0D", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\03E95D48-EBA7-4D0E-895B-1582FC40EC0D", lpFilePart=0x0) returned 0x92 [0118.205] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0118.205] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\03E95D48-EBA7-4D0E-895B-1582FC40EC0D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\officeclient.microsoft.com\\03e95d48-eba7-4d0e-895b-1582fc40ec0d"), fInfoLevelId=0x0, lpFileInformation=0x21dce68 | out: lpFileInformation=0x21dce68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f76b494, ftCreationTime.dwHighDateTime=0x1d336e2, ftLastAccessTime.dwLowDateTime=0x8f76b494, ftLastAccessTime.dwHighDateTime=0x1d336e2, ftLastWriteTime.dwLowDateTime=0x8f76b494, ftLastWriteTime.dwHighDateTime=0x1d336e2, nFileSizeHigh=0x0, nFileSizeLow=0xff6d)) returned 1 [0118.205] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0118.205] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\03E95D48-EBA7-4D0E-895B-1582FC40EC0D", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\03E95D48-EBA7-4D0E-895B-1582FC40EC0D", lpFilePart=0x0) returned 0x92 [0118.205] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0118.205] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\03E95D48-EBA7-4D0E-895B-1582FC40EC0D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\officeclient.microsoft.com\\03e95d48-eba7-4d0e-895b-1582fc40ec0d"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0118.206] GetFileType (hFile=0x444) returned 0x1 [0118.206] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0118.206] GetFileType (hFile=0x444) returned 0x1 [0118.206] ReadFile (in: hFile=0x444, lpBuffer=0x21df3b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x21df3b8*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0118.230] CloseHandle (hObject=0x444) returned 1 [0118.230] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\03E95D48-EBA7-4D0E-895B-1582FC40EC0D", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\03E95D48-EBA7-4D0E-895B-1582FC40EC0D", lpFilePart=0x0) returned 0x92 [0118.230] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0118.230] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\03E95D48-EBA7-4D0E-895B-1582FC40EC0D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\officeclient.microsoft.com\\03e95d48-eba7-4d0e-895b-1582fc40ec0d"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0118.230] GetFileType (hFile=0x444) returned 0x1 [0118.230] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0118.230] GetFileType (hFile=0x444) returned 0x1 [0118.230] WriteFile (in: hFile=0x444, lpBuffer=0x21dd058*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x21dd058*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0118.231] CloseHandle (hObject=0x444) returned 1 [0118.231] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\03E95D48-EBA7-4D0E-895B-1582FC40EC0D", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\03E95D48-EBA7-4D0E-895B-1582FC40EC0D", lpFilePart=0x0) returned 0x92 [0118.231] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\03E95D48-EBA7-4D0E-895B-1582FC40EC0D.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\03E95D48-EBA7-4D0E-895B-1582FC40EC0D.xuy", lpFilePart=0x0) returned 0x96 [0118.231] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0118.231] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\03E95D48-EBA7-4D0E-895B-1582FC40EC0D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\officeclient.microsoft.com\\03e95d48-eba7-4d0e-895b-1582fc40ec0d"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f76b494, ftCreationTime.dwHighDateTime=0x1d336e2, ftLastAccessTime.dwLowDateTime=0x8f76b494, ftLastAccessTime.dwHighDateTime=0x1d336e2, ftLastWriteTime.dwLowDateTime=0x32521c7b, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xff6d)) returned 1 [0118.231] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0118.231] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\03E95D48-EBA7-4D0E-895B-1582FC40EC0D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\officeclient.microsoft.com\\03e95d48-eba7-4d0e-895b-1582fc40ec0d"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\03E95D48-EBA7-4D0E-895B-1582FC40EC0D.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\officeclient.microsoft.com\\03e95d48-eba7-4d0e-895b-1582fc40ec0d.xuy")) returned 1 [0118.232] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\82BD62FD-974C-42F4-866A-5C738238984B", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\82BD62FD-974C-42F4-866A-5C738238984B", lpFilePart=0x0) returned 0x92 [0118.232] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0118.232] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\82BD62FD-974C-42F4-866A-5C738238984B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\officeclient.microsoft.com\\82bd62fd-974c-42f4-866a-5c738238984b"), fInfoLevelId=0x0, lpFileInformation=0x225b9b8 | out: lpFileInformation=0x225b9b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64361dda, ftCreationTime.dwHighDateTime=0x1d301c7, ftLastAccessTime.dwLowDateTime=0x64361dda, ftLastAccessTime.dwHighDateTime=0x1d301c7, ftLastWriteTime.dwLowDateTime=0x64361dda, ftLastWriteTime.dwHighDateTime=0x1d301c7, nFileSizeHigh=0x0, nFileSizeLow=0xfac5)) returned 1 [0118.233] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0118.233] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\82BD62FD-974C-42F4-866A-5C738238984B", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\82BD62FD-974C-42F4-866A-5C738238984B", lpFilePart=0x0) returned 0x92 [0118.233] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0118.233] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\82BD62FD-974C-42F4-866A-5C738238984B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\officeclient.microsoft.com\\82bd62fd-974c-42f4-866a-5c738238984b"), fInfoLevelId=0x0, lpFileInformation=0x225bbc8 | out: lpFileInformation=0x225bbc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64361dda, ftCreationTime.dwHighDateTime=0x1d301c7, ftLastAccessTime.dwLowDateTime=0x64361dda, ftLastAccessTime.dwHighDateTime=0x1d301c7, ftLastWriteTime.dwLowDateTime=0x64361dda, ftLastWriteTime.dwHighDateTime=0x1d301c7, nFileSizeHigh=0x0, nFileSizeLow=0xfac5)) returned 1 [0118.233] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0118.233] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\82BD62FD-974C-42F4-866A-5C738238984B", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\82BD62FD-974C-42F4-866A-5C738238984B", lpFilePart=0x0) returned 0x92 [0118.233] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0118.233] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\82BD62FD-974C-42F4-866A-5C738238984B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\officeclient.microsoft.com\\82bd62fd-974c-42f4-866a-5c738238984b"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0118.234] GetFileType (hFile=0x444) returned 0x1 [0118.234] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0118.234] GetFileType (hFile=0x444) returned 0x1 [0118.234] ReadFile (in: hFile=0x444, lpBuffer=0x225e118, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x225e118*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0118.254] CloseHandle (hObject=0x444) returned 1 [0118.257] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\82BD62FD-974C-42F4-866A-5C738238984B", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\82BD62FD-974C-42F4-866A-5C738238984B", lpFilePart=0x0) returned 0x92 [0118.257] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0118.257] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\82BD62FD-974C-42F4-866A-5C738238984B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\officeclient.microsoft.com\\82bd62fd-974c-42f4-866a-5c738238984b"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0118.257] GetFileType (hFile=0x444) returned 0x1 [0118.257] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0118.257] GetFileType (hFile=0x444) returned 0x1 [0118.257] WriteFile (in: hFile=0x444, lpBuffer=0x225bdb8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x225bdb8*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0118.258] CloseHandle (hObject=0x444) returned 1 [0118.258] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\82BD62FD-974C-42F4-866A-5C738238984B", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\82BD62FD-974C-42F4-866A-5C738238984B", lpFilePart=0x0) returned 0x92 [0118.258] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\82BD62FD-974C-42F4-866A-5C738238984B.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\82BD62FD-974C-42F4-866A-5C738238984B.xuy", lpFilePart=0x0) returned 0x96 [0118.258] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0118.258] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\82BD62FD-974C-42F4-866A-5C738238984B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\officeclient.microsoft.com\\82bd62fd-974c-42f4-866a-5c738238984b"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64361dda, ftCreationTime.dwHighDateTime=0x1d301c7, ftLastAccessTime.dwLowDateTime=0x64361dda, ftLastAccessTime.dwHighDateTime=0x1d301c7, ftLastWriteTime.dwLowDateTime=0x3256e1f7, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xfac5)) returned 1 [0118.258] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0118.258] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\82BD62FD-974C-42F4-866A-5C738238984B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\officeclient.microsoft.com\\82bd62fd-974c-42f4-866a-5c738238984b"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\82BD62FD-974C-42F4-866A-5C738238984B.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\officeclient.microsoft.com\\82bd62fd-974c-42f4-866a-5c738238984b.xuy")) returned 1 [0118.260] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\8BD876A5-9C43-4F45-9565-3FAF3AC71A0B", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\8BD876A5-9C43-4F45-9565-3FAF3AC71A0B", lpFilePart=0x0) returned 0x92 [0118.260] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0118.260] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\8BD876A5-9C43-4F45-9565-3FAF3AC71A0B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\officeclient.microsoft.com\\8bd876a5-9c43-4f45-9565-3faf3ac71a0b"), fInfoLevelId=0x0, lpFileInformation=0x22da718 | out: lpFileInformation=0x22da718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae6eef07, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0xae6eef07, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0xae6eef07, ftLastWriteTime.dwHighDateTime=0x1d301c4, nFileSizeHigh=0x0, nFileSizeLow=0x1000b)) returned 1 [0118.261] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0118.261] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\8BD876A5-9C43-4F45-9565-3FAF3AC71A0B", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\8BD876A5-9C43-4F45-9565-3FAF3AC71A0B", lpFilePart=0x0) returned 0x92 [0118.261] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0118.261] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\8BD876A5-9C43-4F45-9565-3FAF3AC71A0B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\officeclient.microsoft.com\\8bd876a5-9c43-4f45-9565-3faf3ac71a0b"), fInfoLevelId=0x0, lpFileInformation=0x22da928 | out: lpFileInformation=0x22da928*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae6eef07, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0xae6eef07, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0xae6eef07, ftLastWriteTime.dwHighDateTime=0x1d301c4, nFileSizeHigh=0x0, nFileSizeLow=0x1000b)) returned 1 [0118.261] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0118.261] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\8BD876A5-9C43-4F45-9565-3FAF3AC71A0B", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\8BD876A5-9C43-4F45-9565-3FAF3AC71A0B", lpFilePart=0x0) returned 0x92 [0118.261] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0118.261] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\8BD876A5-9C43-4F45-9565-3FAF3AC71A0B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\officeclient.microsoft.com\\8bd876a5-9c43-4f45-9565-3faf3ac71a0b"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0118.262] GetFileType (hFile=0x444) returned 0x1 [0118.262] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0118.262] GetFileType (hFile=0x444) returned 0x1 [0118.262] ReadFile (in: hFile=0x444, lpBuffer=0x22dce78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x22dce78*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0118.283] CloseHandle (hObject=0x444) returned 1 [0118.284] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\8BD876A5-9C43-4F45-9565-3FAF3AC71A0B", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\8BD876A5-9C43-4F45-9565-3FAF3AC71A0B", lpFilePart=0x0) returned 0x92 [0118.284] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0118.284] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\8BD876A5-9C43-4F45-9565-3FAF3AC71A0B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\officeclient.microsoft.com\\8bd876a5-9c43-4f45-9565-3faf3ac71a0b"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0118.284] GetFileType (hFile=0x444) returned 0x1 [0118.284] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0118.284] GetFileType (hFile=0x444) returned 0x1 [0118.284] WriteFile (in: hFile=0x444, lpBuffer=0x22dab18*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x22dab18*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0118.284] CloseHandle (hObject=0x444) returned 1 [0118.285] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\8BD876A5-9C43-4F45-9565-3FAF3AC71A0B", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\8BD876A5-9C43-4F45-9565-3FAF3AC71A0B", lpFilePart=0x0) returned 0x92 [0118.285] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\8BD876A5-9C43-4F45-9565-3FAF3AC71A0B.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\8BD876A5-9C43-4F45-9565-3FAF3AC71A0B.xuy", lpFilePart=0x0) returned 0x96 [0118.285] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0118.285] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\8BD876A5-9C43-4F45-9565-3FAF3AC71A0B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\officeclient.microsoft.com\\8bd876a5-9c43-4f45-9565-3faf3ac71a0b"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae6eef07, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0xae6eef07, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x325942ad, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x1000b)) returned 1 [0118.285] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0118.285] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\8BD876A5-9C43-4F45-9565-3FAF3AC71A0B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\officeclient.microsoft.com\\8bd876a5-9c43-4f45-9565-3faf3ac71a0b"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\8BD876A5-9C43-4F45-9565-3FAF3AC71A0B.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\officeclient.microsoft.com\\8bd876a5-9c43-4f45-9565-3faf3ac71a0b.xuy")) returned 1 [0118.286] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\9097A298-E9C2-4AFF-8C46-428E8A30E31C", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\9097A298-E9C2-4AFF-8C46-428E8A30E31C", lpFilePart=0x0) returned 0x92 [0118.286] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0118.287] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\9097A298-E9C2-4AFF-8C46-428E8A30E31C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\officeclient.microsoft.com\\9097a298-e9c2-4aff-8c46-428e8a30e31c"), fInfoLevelId=0x0, lpFileInformation=0x2359478 | out: lpFileInformation=0x2359478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a2b7007, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x4a2b7007, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x4a2b7007, ftLastWriteTime.dwHighDateTime=0x1d301c4, nFileSizeHigh=0x0, nFileSizeLow=0x1000b)) returned 1 [0118.287] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0118.287] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\9097A298-E9C2-4AFF-8C46-428E8A30E31C", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\9097A298-E9C2-4AFF-8C46-428E8A30E31C", lpFilePart=0x0) returned 0x92 [0118.287] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0118.287] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\9097A298-E9C2-4AFF-8C46-428E8A30E31C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\officeclient.microsoft.com\\9097a298-e9c2-4aff-8c46-428e8a30e31c"), fInfoLevelId=0x0, lpFileInformation=0x2359688 | out: lpFileInformation=0x2359688*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a2b7007, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x4a2b7007, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x4a2b7007, ftLastWriteTime.dwHighDateTime=0x1d301c4, nFileSizeHigh=0x0, nFileSizeLow=0x1000b)) returned 1 [0118.287] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0118.291] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\9097A298-E9C2-4AFF-8C46-428E8A30E31C", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\9097A298-E9C2-4AFF-8C46-428E8A30E31C", lpFilePart=0x0) returned 0x92 [0118.291] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0118.291] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\9097A298-E9C2-4AFF-8C46-428E8A30E31C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\officeclient.microsoft.com\\9097a298-e9c2-4aff-8c46-428e8a30e31c"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0118.292] GetFileType (hFile=0x444) returned 0x1 [0118.292] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0118.292] GetFileType (hFile=0x444) returned 0x1 [0118.292] ReadFile (in: hFile=0x444, lpBuffer=0x215c630, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x215c630*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0118.368] CloseHandle (hObject=0x444) returned 1 [0118.368] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\9097A298-E9C2-4AFF-8C46-428E8A30E31C", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\9097A298-E9C2-4AFF-8C46-428E8A30E31C", lpFilePart=0x0) returned 0x92 [0118.368] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0118.368] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\9097A298-E9C2-4AFF-8C46-428E8A30E31C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\officeclient.microsoft.com\\9097a298-e9c2-4aff-8c46-428e8a30e31c"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0118.369] GetFileType (hFile=0x444) returned 0x1 [0118.369] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0118.369] GetFileType (hFile=0x444) returned 0x1 [0118.369] WriteFile (in: hFile=0x444, lpBuffer=0x215a2d0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x215a2d0*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0118.369] CloseHandle (hObject=0x444) returned 1 [0118.371] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\9097A298-E9C2-4AFF-8C46-428E8A30E31C", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\9097A298-E9C2-4AFF-8C46-428E8A30E31C", lpFilePart=0x0) returned 0x92 [0118.371] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\9097A298-E9C2-4AFF-8C46-428E8A30E31C.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\9097A298-E9C2-4AFF-8C46-428E8A30E31C.xuy", lpFilePart=0x0) returned 0x96 [0118.371] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0118.371] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\9097A298-E9C2-4AFF-8C46-428E8A30E31C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\officeclient.microsoft.com\\9097a298-e9c2-4aff-8c46-428e8a30e31c"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a2b7007, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x4a2b7007, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x326788f6, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x1000b)) returned 1 [0118.371] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0118.371] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\9097A298-E9C2-4AFF-8C46-428E8A30E31C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\officeclient.microsoft.com\\9097a298-e9c2-4aff-8c46-428e8a30e31c"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\9097A298-E9C2-4AFF-8C46-428E8A30E31C.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\officeclient.microsoft.com\\9097a298-e9c2-4aff-8c46-428e8a30e31c.xuy")) returned 1 [0118.387] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\C246F9AB-D3D8-41D6-AD9F-FDA8F3368F67", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\C246F9AB-D3D8-41D6-AD9F-FDA8F3368F67", lpFilePart=0x0) returned 0x92 [0118.387] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0118.387] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\C246F9AB-D3D8-41D6-AD9F-FDA8F3368F67" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\officeclient.microsoft.com\\c246f9ab-d3d8-41d6-ad9f-fda8f3368f67"), fInfoLevelId=0x0, lpFileInformation=0x21d8c30 | out: lpFileInformation=0x21d8c30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4754713, ftCreationTime.dwHighDateTime=0x1d3aaae, ftLastAccessTime.dwLowDateTime=0xf4754713, ftLastAccessTime.dwHighDateTime=0x1d3aaae, ftLastWriteTime.dwLowDateTime=0xf4754713, ftLastWriteTime.dwHighDateTime=0x1d3aaae, nFileSizeHigh=0x0, nFileSizeLow=0x11db2)) returned 1 [0118.388] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0118.388] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\C246F9AB-D3D8-41D6-AD9F-FDA8F3368F67", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\C246F9AB-D3D8-41D6-AD9F-FDA8F3368F67", lpFilePart=0x0) returned 0x92 [0118.388] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0118.388] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\C246F9AB-D3D8-41D6-AD9F-FDA8F3368F67" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\officeclient.microsoft.com\\c246f9ab-d3d8-41d6-ad9f-fda8f3368f67"), fInfoLevelId=0x0, lpFileInformation=0x21d8e40 | out: lpFileInformation=0x21d8e40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4754713, ftCreationTime.dwHighDateTime=0x1d3aaae, ftLastAccessTime.dwLowDateTime=0xf4754713, ftLastAccessTime.dwHighDateTime=0x1d3aaae, ftLastWriteTime.dwLowDateTime=0xf4754713, ftLastWriteTime.dwHighDateTime=0x1d3aaae, nFileSizeHigh=0x0, nFileSizeLow=0x11db2)) returned 1 [0118.388] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0118.388] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\C246F9AB-D3D8-41D6-AD9F-FDA8F3368F67", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\C246F9AB-D3D8-41D6-AD9F-FDA8F3368F67", lpFilePart=0x0) returned 0x92 [0118.388] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0118.388] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\C246F9AB-D3D8-41D6-AD9F-FDA8F3368F67" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\officeclient.microsoft.com\\c246f9ab-d3d8-41d6-ad9f-fda8f3368f67"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0118.389] GetFileType (hFile=0x444) returned 0x1 [0118.389] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0118.389] GetFileType (hFile=0x444) returned 0x1 [0118.389] ReadFile (in: hFile=0x444, lpBuffer=0x21db390, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x21db390*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0118.411] CloseHandle (hObject=0x444) returned 1 [0118.411] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\C246F9AB-D3D8-41D6-AD9F-FDA8F3368F67", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\C246F9AB-D3D8-41D6-AD9F-FDA8F3368F67", lpFilePart=0x0) returned 0x92 [0118.411] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0118.411] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\C246F9AB-D3D8-41D6-AD9F-FDA8F3368F67" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\officeclient.microsoft.com\\c246f9ab-d3d8-41d6-ad9f-fda8f3368f67"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0118.412] GetFileType (hFile=0x444) returned 0x1 [0118.412] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0118.412] GetFileType (hFile=0x444) returned 0x1 [0118.412] WriteFile (in: hFile=0x444, lpBuffer=0x21d9030*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x21d9030*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0118.412] CloseHandle (hObject=0x444) returned 1 [0118.412] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\C246F9AB-D3D8-41D6-AD9F-FDA8F3368F67", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\C246F9AB-D3D8-41D6-AD9F-FDA8F3368F67", lpFilePart=0x0) returned 0x92 [0118.414] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\C246F9AB-D3D8-41D6-AD9F-FDA8F3368F67.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\C246F9AB-D3D8-41D6-AD9F-FDA8F3368F67.xuy", lpFilePart=0x0) returned 0x96 [0118.414] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0118.414] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\C246F9AB-D3D8-41D6-AD9F-FDA8F3368F67" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\officeclient.microsoft.com\\c246f9ab-d3d8-41d6-ad9f-fda8f3368f67"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4754713, ftCreationTime.dwHighDateTime=0x1d3aaae, ftLastAccessTime.dwLowDateTime=0xf4754713, ftLastAccessTime.dwHighDateTime=0x1d3aaae, ftLastWriteTime.dwLowDateTime=0x326c1b85, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x11db2)) returned 1 [0118.414] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0118.414] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\C246F9AB-D3D8-41D6-AD9F-FDA8F3368F67" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\officeclient.microsoft.com\\c246f9ab-d3d8-41d6-ad9f-fda8f3368f67"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\C246F9AB-D3D8-41D6-AD9F-FDA8F3368F67.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\officeclient.microsoft.com\\c246f9ab-d3d8-41d6-ad9f-fda8f3368f67.xuy")) returned 1 [0118.415] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0118.415] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\Wef", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\Wef", lpFilePart=0x0) returned 0x3d [0118.415] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\Wef\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\Wef\\", lpFilePart=0x0) returned 0x3e [0118.415] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\Wef\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d78b0 [0118.415] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0118.416] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0118.416] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0118.416] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0118.416] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0118.416] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0118.416] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0118.416] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\Wef", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\Wef", lpFilePart=0x0) returned 0x3d [0118.416] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\Wef\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\Wef\\", lpFilePart=0x0) returned 0x3e [0118.416] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\Wef\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d78b0 [0118.416] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0118.416] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0118.416] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0118.417] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0118.417] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0118.417] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0118.417] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0118.417] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\Wef\\AppCommands", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\Wef\\AppCommands", lpFilePart=0x0) returned 0x49 [0118.417] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\Wef\\AppCommands\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\Wef\\AppCommands\\", lpFilePart=0x0) returned 0x4a [0118.417] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\Wef\\AppCommands\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d79d0 [0118.418] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0118.418] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0118.418] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0118.418] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0118.418] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0118.418] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0118.418] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\Wef\\AppCommands", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\Wef\\AppCommands", lpFilePart=0x0) returned 0x49 [0118.418] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\Wef\\AppCommands\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\Wef\\AppCommands\\", lpFilePart=0x0) returned 0x4a [0118.418] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\Wef\\AppCommands\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d7c70 [0118.419] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0118.419] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0118.419] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0118.419] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0118.419] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0118.419] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0118.419] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\OTele", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\OTele", lpFilePart=0x0) returned 0x3a [0118.419] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\OTele\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\OTele\\", lpFilePart=0x0) returned 0x3b [0118.419] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\OTele\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7c70 [0118.419] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0118.420] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0118.420] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0118.420] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0118.420] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0118.420] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0118.420] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\OTele", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\OTele", lpFilePart=0x0) returned 0x3a [0118.420] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\OTele\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\OTele\\", lpFilePart=0x0) returned 0x3b [0118.420] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\OTele\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d75b0 [0118.420] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0118.420] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0118.421] FindClose (in: hFindFile=0x5d75b0 | out: hFindFile=0x5d75b0) returned 1 [0118.421] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0118.421] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0118.421] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0118.421] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive", lpFilePart=0x0) returned 0x36 [0118.421] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\", lpFilePart=0x0) returned 0x37 [0118.421] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d78b0 [0118.421] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0118.421] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0118.422] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0118.422] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0118.422] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0118.422] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0118.422] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0118.422] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0118.422] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0118.423] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0118.423] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0118.423] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0118.423] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0118.423] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0118.423] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0118.423] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive", lpFilePart=0x0) returned 0x36 [0118.423] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\", lpFilePart=0x0) returned 0x37 [0118.423] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d7370 [0118.423] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0118.423] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0118.424] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0118.424] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0118.424] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0118.424] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0118.424] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0118.424] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0118.424] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0118.424] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0118.424] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0118.424] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0118.425] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0118.425] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0118.425] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\OneDrive.exe", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\OneDrive.exe", lpFilePart=0x0) returned 0x43 [0118.425] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0118.425] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\OneDrive.exe" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\onedrive.exe"), fInfoLevelId=0x0, lpFileInformation=0x22606d8 | out: lpFileInformation=0x22606d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x321003c4, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x5f7bfd67, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x30ac9bbc, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x19bcd0)) returned 1 [0118.425] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0118.425] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\OneDrive.exe", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\OneDrive.exe", lpFilePart=0x0) returned 0x43 [0118.425] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0118.425] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\OneDrive.exe" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\onedrive.exe"), fInfoLevelId=0x0, lpFileInformation=0x2260818 | out: lpFileInformation=0x2260818*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x321003c4, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x5f7bfd67, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x30ac9bbc, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x19bcd0)) returned 1 [0118.425] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0118.425] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\OneDrive.exe", nBufferLength=0x105, lpBuffer=0x3be270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\OneDrive.exe", lpFilePart=0x0) returned 0x43 [0118.425] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0118.425] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\OneDrive.exe" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\onedrive.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0118.426] GetFileType (hFile=0x444) returned 0x1 [0118.426] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6c0) returned 1 [0118.426] GetFileType (hFile=0x444) returned 0x1 [0118.426] ReadFile (in: hFile=0x444, lpBuffer=0x2262bc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be7d8, lpOverlapped=0x0 | out: lpBuffer=0x2262bc8*, lpNumberOfBytesRead=0x3be7d8*=0x1000, lpOverlapped=0x0) returned 1 [0118.450] CloseHandle (hObject=0x444) returned 1 [0118.450] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\OneDrive.exe", nBufferLength=0x105, lpBuffer=0x3be270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\OneDrive.exe", lpFilePart=0x0) returned 0x43 [0118.450] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0118.450] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\OneDrive.exe" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\onedrive.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0118.451] GetFileType (hFile=0x444) returned 0x1 [0118.451] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6c0) returned 1 [0118.451] GetFileType (hFile=0x444) returned 0x1 [0118.451] WriteFile (in: hFile=0x444, lpBuffer=0x2260938*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be888, lpOverlapped=0x0 | out: lpBuffer=0x2260938*, lpNumberOfBytesWritten=0x3be888*=0x2000, lpOverlapped=0x0) returned 1 [0118.451] CloseHandle (hObject=0x444) returned 1 [0118.451] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\OneDrive.exe", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\OneDrive.exe", lpFilePart=0x0) returned 0x43 [0118.451] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\OneDrive.exe.xuy", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\OneDrive.exe.xuy", lpFilePart=0x0) returned 0x47 [0118.451] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0118.452] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\OneDrive.exe" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\onedrive.exe"), fInfoLevelId=0x0, lpFileInformation=0x3be8a0 | out: lpFileInformation=0x3be8a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x321003c4, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x5f7bfd67, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x32734384, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x19bcd0)) returned 1 [0118.452] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0118.452] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\OneDrive.exe" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\onedrive.exe"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\OneDrive.exe.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\onedrive.exe.xuy")) returned 1 [0118.453] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\OneDrivePersonal.cmd", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\OneDrivePersonal.cmd", lpFilePart=0x0) returned 0x4b [0118.453] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0118.453] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\OneDrivePersonal.cmd" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\onedrivepersonal.cmd"), fInfoLevelId=0x0, lpFileInformation=0x22def40 | out: lpFileInformation=0x22def40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c51810a, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x3c51810a, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x1f699a13, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x4d)) returned 1 [0118.453] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0118.453] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\OneDrivePersonal.cmd", nBufferLength=0x105, lpBuffer=0x3be1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\OneDrivePersonal.cmd", lpFilePart=0x0) returned 0x4b [0118.453] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6c0) returned 1 [0118.453] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\OneDrivePersonal.cmd" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\onedrivepersonal.cmd"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0118.453] GetFileType (hFile=0x444) returned 0x1 [0118.453] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0118.453] GetFileType (hFile=0x444) returned 0x1 [0118.453] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be858 | out: lpFileSizeHigh=0x3be858*=0x0) returned 0x4d [0118.453] ReadFile (in: hFile=0x444, lpBuffer=0x22df268, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be788, lpOverlapped=0x0 | out: lpBuffer=0x22df268*, lpNumberOfBytesRead=0x3be788*=0x4d, lpOverlapped=0x0) returned 1 [0118.454] CloseHandle (hObject=0x444) returned 1 [0118.465] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\OneDrivePersonal.cmd", nBufferLength=0x105, lpBuffer=0x3be1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\OneDrivePersonal.cmd", lpFilePart=0x0) returned 0x4b [0118.465] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6c0) returned 1 [0118.465] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\OneDrivePersonal.cmd" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\onedrivepersonal.cmd"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0118.467] GetFileType (hFile=0x444) returned 0x1 [0118.467] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0118.467] GetFileType (hFile=0x444) returned 0x1 [0118.467] WriteFile (in: hFile=0x444, lpBuffer=0x2356410*, nNumberOfBytesToWrite=0x50, lpNumberOfBytesWritten=0x3be698, lpOverlapped=0x0 | out: lpBuffer=0x2356410*, lpNumberOfBytesWritten=0x3be698*=0x50, lpOverlapped=0x0) returned 1 [0118.468] CloseHandle (hObject=0x444) returned 1 [0118.468] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\OneDrivePersonal.cmd", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\OneDrivePersonal.cmd", lpFilePart=0x0) returned 0x4b [0118.468] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\OneDrivePersonal.cmd.xuy", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\OneDrivePersonal.cmd.xuy", lpFilePart=0x0) returned 0x4f [0118.468] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0118.468] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\OneDrivePersonal.cmd" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\onedrivepersonal.cmd"), fInfoLevelId=0x0, lpFileInformation=0x3be8a0 | out: lpFileInformation=0x3be8a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c51810a, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x3c51810a, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x3275a4d4, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x50)) returned 1 [0118.468] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0118.468] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\OneDrivePersonal.cmd" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\onedrivepersonal.cmd"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\OneDrivePersonal.cmd.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\onedrivepersonal.cmd.xuy")) returned 1 [0118.469] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\OneDriveStandaloneUpdater.exe", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\OneDriveStandaloneUpdater.exe", lpFilePart=0x0) returned 0x54 [0118.469] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0118.469] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\OneDriveStandaloneUpdater.exe" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\onedrivestandaloneupdater.exe"), fInfoLevelId=0x0, lpFileInformation=0x2357690 | out: lpFileInformation=0x2357690*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c51810a, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x5f7bfd67, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x31024c4a, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x2ae4d0)) returned 1 [0118.469] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0118.469] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\OneDriveStandaloneUpdater.exe", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\OneDriveStandaloneUpdater.exe", lpFilePart=0x0) returned 0x54 [0118.469] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0118.469] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\OneDriveStandaloneUpdater.exe" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\onedrivestandaloneupdater.exe"), fInfoLevelId=0x0, lpFileInformation=0x2357818 | out: lpFileInformation=0x2357818*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c51810a, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x5f7bfd67, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x31024c4a, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x2ae4d0)) returned 1 [0118.470] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0118.470] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\OneDriveStandaloneUpdater.exe", nBufferLength=0x105, lpBuffer=0x3be270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\OneDriveStandaloneUpdater.exe", lpFilePart=0x0) returned 0x54 [0118.470] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0118.470] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\OneDriveStandaloneUpdater.exe" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\onedrivestandaloneupdater.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0118.470] GetFileType (hFile=0x444) returned 0x1 [0118.470] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6c0) returned 1 [0118.470] GetFileType (hFile=0x444) returned 0x1 [0118.473] ReadFile (in: hFile=0x444, lpBuffer=0x215cc30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be7d8, lpOverlapped=0x0 | out: lpBuffer=0x215cc30*, lpNumberOfBytesRead=0x3be7d8*=0x1000, lpOverlapped=0x0) returned 1 [0118.520] CloseHandle (hObject=0x444) returned 1 [0118.520] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\OneDriveStandaloneUpdater.exe", nBufferLength=0x105, lpBuffer=0x3be270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\OneDriveStandaloneUpdater.exe", lpFilePart=0x0) returned 0x54 [0118.520] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0118.520] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\OneDriveStandaloneUpdater.exe" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\onedrivestandaloneupdater.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0118.521] GetFileType (hFile=0x444) returned 0x1 [0118.521] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6c0) returned 1 [0118.521] GetFileType (hFile=0x444) returned 0x1 [0118.521] WriteFile (in: hFile=0x444, lpBuffer=0x215aa48*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be888, lpOverlapped=0x0 | out: lpBuffer=0x215aa48*, lpNumberOfBytesWritten=0x3be888*=0x2000, lpOverlapped=0x0) returned 1 [0118.521] CloseHandle (hObject=0x444) returned 1 [0118.521] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\OneDriveStandaloneUpdater.exe", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\OneDriveStandaloneUpdater.exe", lpFilePart=0x0) returned 0x54 [0118.521] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\OneDriveStandaloneUpdater.exe.xuy", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\OneDriveStandaloneUpdater.exe.xuy", lpFilePart=0x0) returned 0x58 [0118.521] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0118.521] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\OneDriveStandaloneUpdater.exe" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\onedrivestandaloneupdater.exe"), fInfoLevelId=0x0, lpFileInformation=0x3be8a0 | out: lpFileInformation=0x3be8a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c51810a, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x5f7bfd67, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x327ccc36, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2ae4d0)) returned 1 [0118.521] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0118.521] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\OneDriveStandaloneUpdater.exe" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\onedrivestandaloneupdater.exe"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\OneDriveStandaloneUpdater.exe.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\onedrivestandaloneupdater.exe.xuy")) returned 1 [0118.523] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0118.523] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626", lpFilePart=0x0) returned 0x45 [0118.523] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\", lpFilePart=0x0) returned 0x46 [0118.523] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7af0 [0118.531] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0118.531] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0118.532] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0118.532] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0118.532] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0118.532] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0118.532] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0118.532] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0118.532] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0118.532] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0118.532] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0118.533] FindClose (in: hFindFile=0x5d7af0 | out: hFindFile=0x5d7af0) returned 1 [0118.533] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0118.533] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0118.533] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0118.533] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626", lpFilePart=0x0) returned 0x45 [0118.533] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\", lpFilePart=0x0) returned 0x46 [0118.533] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d75b0 [0118.534] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0118.534] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0118.535] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0118.535] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0118.535] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0118.535] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0118.535] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0118.535] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0118.535] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0118.535] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0118.535] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0118.536] FindClose (in: hFindFile=0x5d75b0 | out: hFindFile=0x5d75b0) returned 1 [0118.536] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0118.536] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0118.536] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\AutoPlayLogo.png", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\AutoPlayLogo.png", lpFilePart=0x0) returned 0x56 [0118.536] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0118.536] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\AutoPlayLogo.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\autoplaylogo.png"), fInfoLevelId=0x0, lpFileInformation=0x21dd238 | out: lpFileInformation=0x21dd238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x63aa9fbc, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x63aa9fbc, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x63b68b67, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x123c)) returned 1 [0118.537] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0118.538] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\AutoPlayLogo.png", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\AutoPlayLogo.png", lpFilePart=0x0) returned 0x56 [0118.538] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0118.538] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\AutoPlayLogo.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\autoplaylogo.png"), fInfoLevelId=0x0, lpFileInformation=0x21dd3a8 | out: lpFileInformation=0x21dd3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x63aa9fbc, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x63aa9fbc, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x63b68b67, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x123c)) returned 1 [0118.538] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0118.538] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\AutoPlayLogo.png", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\AutoPlayLogo.png", lpFilePart=0x0) returned 0x56 [0118.538] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0118.538] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\AutoPlayLogo.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\autoplaylogo.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0118.539] GetFileType (hFile=0x444) returned 0x1 [0118.539] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0118.539] GetFileType (hFile=0x444) returned 0x1 [0118.539] ReadFile (in: hFile=0x444, lpBuffer=0x21df7b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x21df7b8*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0118.557] CloseHandle (hObject=0x444) returned 1 [0118.557] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\AutoPlayLogo.png", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\AutoPlayLogo.png", lpFilePart=0x0) returned 0x56 [0118.557] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0118.557] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\AutoPlayLogo.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\autoplaylogo.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0118.558] GetFileType (hFile=0x444) returned 0x1 [0118.558] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0118.558] GetFileType (hFile=0x444) returned 0x1 [0118.558] WriteFile (in: hFile=0x444, lpBuffer=0x21dd4f8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x21dd4f8*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0118.558] CloseHandle (hObject=0x444) returned 1 [0118.558] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\AutoPlayLogo.png", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\AutoPlayLogo.png", lpFilePart=0x0) returned 0x56 [0118.558] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\AutoPlayLogo.png.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\AutoPlayLogo.png.xuy", lpFilePart=0x0) returned 0x5a [0118.558] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0118.558] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\AutoPlayLogo.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\autoplaylogo.png"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x63aa9fbc, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x63aa9fbc, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x3283f70d, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0118.558] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0118.558] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\AutoPlayLogo.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\autoplaylogo.png"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\AutoPlayLogo.png.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\autoplaylogo.png.xuy")) returned 1 [0118.560] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\AutoPlayOptIn.gif", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\AutoPlayOptIn.gif", lpFilePart=0x0) returned 0x57 [0118.560] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0118.560] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\AutoPlayOptIn.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\autoplayoptin.gif"), fInfoLevelId=0x0, lpFileInformation=0x225bbd8 | out: lpFileInformation=0x225bbd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66a7f3a6, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x66a7f3a6, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x68361cde, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x5d8f6)) returned 1 [0118.561] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0118.561] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\AutoPlayOptIn.gif", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\AutoPlayOptIn.gif", lpFilePart=0x0) returned 0x57 [0118.561] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0118.561] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\AutoPlayOptIn.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\autoplayoptin.gif"), fInfoLevelId=0x0, lpFileInformation=0x225bd48 | out: lpFileInformation=0x225bd48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66a7f3a6, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x66a7f3a6, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x68361cde, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x5d8f6)) returned 1 [0118.561] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0118.561] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\AutoPlayOptIn.gif", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\AutoPlayOptIn.gif", lpFilePart=0x0) returned 0x57 [0118.562] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0118.562] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\AutoPlayOptIn.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\autoplayoptin.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0118.562] GetFileType (hFile=0x444) returned 0x1 [0118.562] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0118.562] GetFileType (hFile=0x444) returned 0x1 [0118.563] ReadFile (in: hFile=0x444, lpBuffer=0x225e158, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x225e158*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0118.581] CloseHandle (hObject=0x444) returned 1 [0118.581] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\AutoPlayOptIn.gif", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\AutoPlayOptIn.gif", lpFilePart=0x0) returned 0x57 [0118.581] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0118.581] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\AutoPlayOptIn.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\autoplayoptin.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0118.581] GetFileType (hFile=0x444) returned 0x1 [0118.582] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0118.582] GetFileType (hFile=0x444) returned 0x1 [0118.582] WriteFile (in: hFile=0x444, lpBuffer=0x225be98*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x225be98*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0118.582] CloseHandle (hObject=0x444) returned 1 [0118.582] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\AutoPlayOptIn.gif", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\AutoPlayOptIn.gif", lpFilePart=0x0) returned 0x57 [0118.582] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\AutoPlayOptIn.gif.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\AutoPlayOptIn.gif.xuy", lpFilePart=0x0) returned 0x5b [0118.582] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0118.582] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\AutoPlayOptIn.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\autoplayoptin.gif"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66a7f3a6, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x66a7f3a6, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x32865442, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x5d8f6)) returned 1 [0118.582] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0118.582] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\AutoPlayOptIn.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\autoplayoptin.gif"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\AutoPlayOptIn.gif.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\autoplayoptin.gif.xuy")) returned 1 [0118.583] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\AutoPlayOptIn.png", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\AutoPlayOptIn.png", lpFilePart=0x0) returned 0x57 [0118.583] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0118.583] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\AutoPlayOptIn.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\autoplayoptin.png"), fInfoLevelId=0x0, lpFileInformation=0x22da578 | out: lpFileInformation=0x22da578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69923516, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x69923516, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x69f19337, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x27f2)) returned 1 [0118.583] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0118.583] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\AutoPlayOptIn.png", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\AutoPlayOptIn.png", lpFilePart=0x0) returned 0x57 [0118.583] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0118.584] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\AutoPlayOptIn.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\autoplayoptin.png"), fInfoLevelId=0x0, lpFileInformation=0x22da6e8 | out: lpFileInformation=0x22da6e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69923516, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x69923516, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x69f19337, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x27f2)) returned 1 [0118.584] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0118.584] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\AutoPlayOptIn.png", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\AutoPlayOptIn.png", lpFilePart=0x0) returned 0x57 [0118.584] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0118.584] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\AutoPlayOptIn.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\autoplayoptin.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0118.585] GetFileType (hFile=0x444) returned 0x1 [0118.585] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0118.585] GetFileType (hFile=0x444) returned 0x1 [0118.585] ReadFile (in: hFile=0x444, lpBuffer=0x22dcaf8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x22dcaf8*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0118.600] CloseHandle (hObject=0x444) returned 1 [0118.600] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\AutoPlayOptIn.png", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\AutoPlayOptIn.png", lpFilePart=0x0) returned 0x57 [0118.600] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0118.600] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\AutoPlayOptIn.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\autoplayoptin.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0118.601] GetFileType (hFile=0x444) returned 0x1 [0118.601] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0118.601] GetFileType (hFile=0x444) returned 0x1 [0118.601] WriteFile (in: hFile=0x444, lpBuffer=0x22da838*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x22da838*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0118.601] CloseHandle (hObject=0x444) returned 1 [0118.601] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\AutoPlayOptIn.png", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\AutoPlayOptIn.png", lpFilePart=0x0) returned 0x57 [0118.601] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\AutoPlayOptIn.png.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\AutoPlayOptIn.png.xuy", lpFilePart=0x0) returned 0x5b [0118.601] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0118.601] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\AutoPlayOptIn.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\autoplayoptin.png"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69923516, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x69923516, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x328b1b53, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x27f2)) returned 1 [0118.601] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0118.601] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\AutoPlayOptIn.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\autoplayoptin.png"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\AutoPlayOptIn.png.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\autoplayoptin.png.xuy")) returned 1 [0118.602] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\CollectOneDriveLogs.bat", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\CollectOneDriveLogs.bat", lpFilePart=0x0) returned 0x5d [0118.602] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0118.602] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\CollectOneDriveLogs.bat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\collectonedrivelogs.bat"), fInfoLevelId=0x0, lpFileInformation=0x2358f18 | out: lpFileInformation=0x2358f18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6db39c83, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x6db39c83, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x6dbd25e5, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x16da)) returned 1 [0118.603] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0118.603] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\CollectOneDriveLogs.bat", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\CollectOneDriveLogs.bat", lpFilePart=0x0) returned 0x5d [0118.603] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0118.603] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\CollectOneDriveLogs.bat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\collectonedrivelogs.bat"), fInfoLevelId=0x0, lpFileInformation=0x23590a0 | out: lpFileInformation=0x23590a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6db39c83, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x6db39c83, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x6dbd25e5, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x16da)) returned 1 [0118.603] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0118.604] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\CollectOneDriveLogs.bat", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\CollectOneDriveLogs.bat", lpFilePart=0x0) returned 0x5d [0118.604] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0118.604] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\CollectOneDriveLogs.bat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\collectonedrivelogs.bat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0118.604] GetFileType (hFile=0x444) returned 0x1 [0118.604] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0118.604] GetFileType (hFile=0x444) returned 0x1 [0118.604] ReadFile (in: hFile=0x444, lpBuffer=0x235b4e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x235b4e0*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0118.659] CloseHandle (hObject=0x444) returned 1 [0118.660] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\CollectOneDriveLogs.bat", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\CollectOneDriveLogs.bat", lpFilePart=0x0) returned 0x5d [0118.660] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0118.660] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\CollectOneDriveLogs.bat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\collectonedrivelogs.bat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0118.660] GetFileType (hFile=0x444) returned 0x1 [0118.660] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0118.660] GetFileType (hFile=0x444) returned 0x1 [0118.660] WriteFile (in: hFile=0x444, lpBuffer=0x215d4a0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x215d4a0*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0118.660] CloseHandle (hObject=0x444) returned 1 [0118.660] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\CollectOneDriveLogs.bat", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\CollectOneDriveLogs.bat", lpFilePart=0x0) returned 0x5d [0118.660] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\CollectOneDriveLogs.bat.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\CollectOneDriveLogs.bat.xuy", lpFilePart=0x0) returned 0x61 [0118.661] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0118.661] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\CollectOneDriveLogs.bat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\collectonedrivelogs.bat"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6db39c83, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x6db39c83, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x32923fe0, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0118.661] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0118.661] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\CollectOneDriveLogs.bat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\collectonedrivelogs.bat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\CollectOneDriveLogs.bat.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\collectonedrivelogs.bat.xuy")) returned 1 [0118.662] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\ETWlog.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\ETWlog.dll", lpFilePart=0x0) returned 0x50 [0118.662] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0118.662] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\ETWlog.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\etwlog.dll"), fInfoLevelId=0x0, lpFileInformation=0x21db6c8 | out: lpFileInformation=0x21db6c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x715efc49, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x715efc49, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x71720f0b, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x72c0)) returned 1 [0118.663] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0118.663] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\ETWlog.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\ETWlog.dll", lpFilePart=0x0) returned 0x50 [0118.663] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0118.663] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\ETWlog.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\etwlog.dll"), fInfoLevelId=0x0, lpFileInformation=0x21db820 | out: lpFileInformation=0x21db820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x715efc49, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x715efc49, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x71720f0b, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x72c0)) returned 1 [0118.663] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0118.663] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\ETWlog.dll", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\ETWlog.dll", lpFilePart=0x0) returned 0x50 [0118.663] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0118.663] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\ETWlog.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\etwlog.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0118.664] GetFileType (hFile=0x444) returned 0x1 [0118.664] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0118.664] GetFileType (hFile=0x444) returned 0x1 [0118.664] ReadFile (in: hFile=0x444, lpBuffer=0x21ddc00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x21ddc00*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0118.676] CloseHandle (hObject=0x444) returned 1 [0118.676] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\ETWlog.dll", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\ETWlog.dll", lpFilePart=0x0) returned 0x50 [0118.676] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0118.676] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\ETWlog.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\etwlog.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0118.677] GetFileType (hFile=0x444) returned 0x1 [0118.677] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0118.677] GetFileType (hFile=0x444) returned 0x1 [0118.677] WriteFile (in: hFile=0x444, lpBuffer=0x21db958*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x21db958*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0118.677] CloseHandle (hObject=0x444) returned 1 [0118.677] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\ETWlog.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\ETWlog.dll", lpFilePart=0x0) returned 0x50 [0118.677] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\ETWlog.dll.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\ETWlog.dll.xuy", lpFilePart=0x0) returned 0x54 [0118.677] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0118.677] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\ETWlog.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\etwlog.dll"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x715efc49, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x715efc49, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x3294a1e3, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x72c0)) returned 1 [0118.677] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0118.677] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\ETWlog.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\etwlog.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\ETWlog.dll.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\etwlog.dll.xuy")) returned 1 [0118.679] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\ExclusionList.xml", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\ExclusionList.xml", lpFilePart=0x0) returned 0x57 [0118.679] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0118.679] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\ExclusionList.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\exclusionlist.xml"), fInfoLevelId=0x0, lpFileInformation=0x2259ff0 | out: lpFileInformation=0x2259ff0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78519925, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x78519925, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x785fe765, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x4e5f)) returned 1 [0118.680] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0118.680] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\ExclusionList.xml", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\ExclusionList.xml", lpFilePart=0x0) returned 0x57 [0118.681] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0118.681] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\ExclusionList.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\exclusionlist.xml"), fInfoLevelId=0x0, lpFileInformation=0x225a160 | out: lpFileInformation=0x225a160*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78519925, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x78519925, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x785fe765, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x4e5f)) returned 1 [0118.681] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0118.681] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\ExclusionList.xml", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\ExclusionList.xml", lpFilePart=0x0) returned 0x57 [0118.681] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0118.681] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\ExclusionList.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\exclusionlist.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0118.682] GetFileType (hFile=0x444) returned 0x1 [0118.682] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0118.682] GetFileType (hFile=0x444) returned 0x1 [0118.682] ReadFile (in: hFile=0x444, lpBuffer=0x225c570, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x225c570*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0118.695] CloseHandle (hObject=0x444) returned 1 [0118.695] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\ExclusionList.xml", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\ExclusionList.xml", lpFilePart=0x0) returned 0x57 [0118.695] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0118.695] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\ExclusionList.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\exclusionlist.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0118.696] GetFileType (hFile=0x444) returned 0x1 [0118.696] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0118.696] GetFileType (hFile=0x444) returned 0x1 [0118.696] WriteFile (in: hFile=0x444, lpBuffer=0x225a2b0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x225a2b0*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0118.696] CloseHandle (hObject=0x444) returned 1 [0118.696] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\ExclusionList.xml", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\ExclusionList.xml", lpFilePart=0x0) returned 0x57 [0118.696] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\ExclusionList.xml.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\ExclusionList.xml.xuy", lpFilePart=0x0) returned 0x5b [0118.696] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0118.696] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\ExclusionList.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\exclusionlist.xml"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78519925, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x78519925, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x329968c4, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x4e5f)) returned 1 [0118.696] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0118.696] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\ExclusionList.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\exclusionlist.xml"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\ExclusionList.xml.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\exclusionlist.xml.xuy")) returned 1 [0118.697] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0118.697] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\is", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\is", lpFilePart=0x0) returned 0x48 [0118.697] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\is\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\is\\", lpFilePart=0x0) returned 0x49 [0118.697] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\is\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7a30 [0118.698] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0118.698] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0118.698] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0118.698] FindClose (in: hFindFile=0x5d7a30 | out: hFindFile=0x5d7a30) returned 1 [0118.698] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0118.698] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0118.698] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0118.698] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\is", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\is", lpFilePart=0x0) returned 0x48 [0118.698] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\is\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\is\\", lpFilePart=0x0) returned 0x49 [0118.698] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\is\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7c70 [0118.698] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0118.699] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0118.699] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0118.699] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0118.699] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0118.699] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0118.699] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\is\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\is\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0118.699] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0118.699] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\is\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\is\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x22daac8 | out: lpFileInformation=0x22daac8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x686369d6, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x686369d6, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x69b395f5, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x152c0)) returned 1 [0118.700] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0118.700] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\is\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\is\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0118.700] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0118.700] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\is\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\is\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x22dac88 | out: lpFileInformation=0x22dac88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x686369d6, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x686369d6, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x69b395f5, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x152c0)) returned 1 [0118.700] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0118.700] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\is\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\is\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0118.700] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0118.700] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\is\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\is\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0118.701] GetFileType (hFile=0x444) returned 0x1 [0118.701] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0118.701] GetFileType (hFile=0x444) returned 0x1 [0118.701] ReadFile (in: hFile=0x444, lpBuffer=0x22dd138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x22dd138*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0118.714] CloseHandle (hObject=0x444) returned 1 [0118.714] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\is\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\is\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0118.715] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0118.715] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\is\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\is\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0118.715] GetFileType (hFile=0x444) returned 0x1 [0118.715] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0118.715] GetFileType (hFile=0x444) returned 0x1 [0118.715] WriteFile (in: hFile=0x444, lpBuffer=0x22dae28*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x22dae28*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0118.715] CloseHandle (hObject=0x444) returned 1 [0118.715] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\is\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\is\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0118.715] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\is\\FileSync.LocalizedResources.dll.mui.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\is\\FileSync.LocalizedResources.dll.mui.xuy", lpFilePart=0x0) returned 0x70 [0118.715] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0118.715] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\is\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\is\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x686369d6, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x686369d6, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x329bce06, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x152c0)) returned 1 [0118.715] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0118.716] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\is\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\is\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\is\\FileSync.LocalizedResources.dll.mui.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\is\\filesync.localizedresources.dll.mui.xuy")) returned 1 [0118.716] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0118.716] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\it", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\it", lpFilePart=0x0) returned 0x48 [0118.716] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\it\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\it\\", lpFilePart=0x0) returned 0x49 [0118.717] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\it\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d78b0 [0118.717] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0118.717] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0118.718] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0118.718] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0118.718] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0118.718] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0118.718] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0118.718] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\it", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\it", lpFilePart=0x0) returned 0x48 [0118.718] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\it\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\it\\", lpFilePart=0x0) returned 0x49 [0118.718] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\it\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d81b0 [0118.718] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0118.718] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0118.718] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0118.718] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0118.719] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0118.719] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0118.719] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\it\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\it\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0118.719] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0118.719] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\it\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\it\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x235b770 | out: lpFileInformation=0x235b770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ab8aba9, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x6ab8aba9, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x6dbd25e5, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x160c0)) returned 1 [0118.719] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0118.719] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\it\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\it\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0118.719] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0118.719] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\it\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\it\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x235b930 | out: lpFileInformation=0x235b930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ab8aba9, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x6ab8aba9, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x6dbd25e5, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x160c0)) returned 1 [0118.719] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0118.719] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\it\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\it\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0118.719] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0118.719] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\it\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\it\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0118.720] GetFileType (hFile=0x444) returned 0x1 [0118.720] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0118.720] GetFileType (hFile=0x444) returned 0x1 [0118.720] ReadFile (in: hFile=0x444, lpBuffer=0x235dde0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x235dde0*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0118.762] CloseHandle (hObject=0x444) returned 1 [0118.762] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\it\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\it\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0118.762] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0118.762] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\it\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\it\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0118.763] GetFileType (hFile=0x444) returned 0x1 [0118.763] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0118.763] GetFileType (hFile=0x444) returned 0x1 [0118.763] WriteFile (in: hFile=0x444, lpBuffer=0x215d0b8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x215d0b8*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0118.763] CloseHandle (hObject=0x444) returned 1 [0118.763] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\it\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\it\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0118.763] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\it\\FileSync.LocalizedResources.dll.mui.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\it\\FileSync.LocalizedResources.dll.mui.xuy", lpFilePart=0x0) returned 0x70 [0118.763] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0118.763] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\it\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\it\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ab8aba9, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x6ab8aba9, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x32a2f4ac, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x160c0)) returned 1 [0118.763] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0118.763] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\it\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\it\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\it\\FileSync.LocalizedResources.dll.mui.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\it\\filesync.localizedresources.dll.mui.xuy")) returned 1 [0118.764] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0118.764] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\ja", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\ja", lpFilePart=0x0) returned 0x48 [0118.765] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\ja\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\ja\\", lpFilePart=0x0) returned 0x49 [0118.765] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\ja\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d78b0 [0118.765] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0118.765] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0118.765] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0118.765] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0118.765] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0118.765] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0118.765] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\ja", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\ja", lpFilePart=0x0) returned 0x48 [0118.765] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\ja\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\ja\\", lpFilePart=0x0) returned 0x49 [0118.765] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\ja\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7370 [0118.766] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0118.766] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0118.766] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0118.766] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0118.766] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0118.766] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0118.766] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1", lpFilePart=0x0) returned 0x47 [0118.766] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\", lpFilePart=0x0) returned 0x48 [0118.766] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7550 [0118.774] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0118.774] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0118.774] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0118.774] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0118.774] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0118.775] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0118.775] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0118.775] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0118.775] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0118.775] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0118.775] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0118.775] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0118.775] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0118.775] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0118.775] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0118.776] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0118.776] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0118.776] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0118.776] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0118.776] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0118.776] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0118.777] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0118.777] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0118.777] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0118.777] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1", lpFilePart=0x0) returned 0x47 [0118.777] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\", lpFilePart=0x0) returned 0x48 [0118.777] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7670 [0118.778] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0118.778] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0118.778] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0118.778] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0118.778] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0118.778] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0118.778] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0118.779] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0118.779] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0118.779] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0118.779] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0118.779] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0118.779] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0118.779] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0118.779] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0118.779] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0118.779] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0118.780] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0118.780] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0118.780] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0118.780] FindClose (in: hFindFile=0x5d7670 | out: hFindFile=0x5d7670) returned 1 [0118.780] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0118.780] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0118.780] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\AutoPlayLogo.png", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\AutoPlayLogo.png", lpFilePart=0x0) returned 0x58 [0118.781] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0118.781] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\AutoPlayLogo.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\autoplaylogo.png"), fInfoLevelId=0x0, lpFileInformation=0x21e2698 | out: lpFileInformation=0x21e2698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2bce98b0, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x2bce98b0, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x2bd8220c, ftLastWriteTime.dwHighDateTime=0x1d2d028, nFileSizeHigh=0x0, nFileSizeLow=0x123c)) returned 1 [0118.782] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0118.782] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\AutoPlayLogo.png", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\AutoPlayLogo.png", lpFilePart=0x0) returned 0x58 [0118.782] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0118.782] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\AutoPlayLogo.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\autoplaylogo.png"), fInfoLevelId=0x0, lpFileInformation=0x21e2810 | out: lpFileInformation=0x21e2810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2bce98b0, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x2bce98b0, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x2bd8220c, ftLastWriteTime.dwHighDateTime=0x1d2d028, nFileSizeHigh=0x0, nFileSizeLow=0x123c)) returned 1 [0118.782] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0118.782] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\AutoPlayLogo.png", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\AutoPlayLogo.png", lpFilePart=0x0) returned 0x58 [0118.782] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0118.782] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\AutoPlayLogo.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\autoplaylogo.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0118.783] GetFileType (hFile=0x444) returned 0x1 [0118.783] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0118.783] GetFileType (hFile=0x444) returned 0x1 [0118.783] ReadFile (in: hFile=0x444, lpBuffer=0x21e4c30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x21e4c30*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0118.808] CloseHandle (hObject=0x444) returned 1 [0118.808] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\AutoPlayLogo.png", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\AutoPlayLogo.png", lpFilePart=0x0) returned 0x58 [0118.808] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0118.808] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\AutoPlayLogo.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\autoplaylogo.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0118.809] GetFileType (hFile=0x444) returned 0x1 [0118.809] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0118.809] GetFileType (hFile=0x444) returned 0x1 [0118.809] WriteFile (in: hFile=0x444, lpBuffer=0x21e2968*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x21e2968*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0118.809] CloseHandle (hObject=0x444) returned 1 [0118.809] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\AutoPlayLogo.png", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\AutoPlayLogo.png", lpFilePart=0x0) returned 0x58 [0118.809] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\AutoPlayLogo.png.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\AutoPlayLogo.png.xuy", lpFilePart=0x0) returned 0x5c [0118.809] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0118.809] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\AutoPlayLogo.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\autoplaylogo.png"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2bce98b0, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x2bce98b0, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x32aa1822, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0118.809] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0118.809] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\AutoPlayLogo.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\autoplaylogo.png"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\AutoPlayLogo.png.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\autoplaylogo.png.xuy")) returned 1 [0118.810] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\AutoPlayOptIn.gif", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\AutoPlayOptIn.gif", lpFilePart=0x0) returned 0x59 [0118.810] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0118.810] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\AutoPlayOptIn.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\autoplayoptin.gif"), fInfoLevelId=0x0, lpFileInformation=0x2261070 | out: lpFileInformation=0x2261070*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ec5b0b5, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x2ec5b0b5, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x2ecf3a27, ftLastWriteTime.dwHighDateTime=0x1d2d028, nFileSizeHigh=0x0, nFileSizeLow=0x5d8f6)) returned 1 [0118.811] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0118.811] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\AutoPlayOptIn.gif", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\AutoPlayOptIn.gif", lpFilePart=0x0) returned 0x59 [0118.811] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0118.811] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\AutoPlayOptIn.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\autoplayoptin.gif"), fInfoLevelId=0x0, lpFileInformation=0x22611e8 | out: lpFileInformation=0x22611e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ec5b0b5, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x2ec5b0b5, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x2ecf3a27, ftLastWriteTime.dwHighDateTime=0x1d2d028, nFileSizeHigh=0x0, nFileSizeLow=0x5d8f6)) returned 1 [0118.811] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0118.811] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\AutoPlayOptIn.gif", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\AutoPlayOptIn.gif", lpFilePart=0x0) returned 0x59 [0118.811] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0118.811] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\AutoPlayOptIn.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\autoplayoptin.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0118.812] GetFileType (hFile=0x444) returned 0x1 [0118.812] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0118.812] GetFileType (hFile=0x444) returned 0x1 [0118.812] ReadFile (in: hFile=0x444, lpBuffer=0x2263608, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x2263608*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0118.826] CloseHandle (hObject=0x444) returned 1 [0118.826] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\AutoPlayOptIn.gif", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\AutoPlayOptIn.gif", lpFilePart=0x0) returned 0x59 [0118.826] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0118.826] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\AutoPlayOptIn.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\autoplayoptin.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0118.827] GetFileType (hFile=0x444) returned 0x1 [0118.827] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0118.827] GetFileType (hFile=0x444) returned 0x1 [0118.827] WriteFile (in: hFile=0x444, lpBuffer=0x2261340*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x2261340*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0118.827] CloseHandle (hObject=0x444) returned 1 [0118.827] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\AutoPlayOptIn.gif", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\AutoPlayOptIn.gif", lpFilePart=0x0) returned 0x59 [0118.827] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\AutoPlayOptIn.gif.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\AutoPlayOptIn.gif.xuy", lpFilePart=0x0) returned 0x5d [0118.827] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0118.827] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\AutoPlayOptIn.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\autoplayoptin.gif"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ec5b0b5, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x2ec5b0b5, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x32ac79e8, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x5d8f6)) returned 1 [0118.827] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0118.827] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\AutoPlayOptIn.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\autoplayoptin.gif"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\AutoPlayOptIn.gif.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\autoplayoptin.gif.xuy")) returned 1 [0118.828] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\AutoPlayOptIn.png", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\AutoPlayOptIn.png", lpFilePart=0x0) returned 0x59 [0118.828] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0118.828] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\AutoPlayOptIn.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\autoplayoptin.png"), fInfoLevelId=0x0, lpFileInformation=0x22dfa48 | out: lpFileInformation=0x22dfa48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x325bb05c, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x325bb05c, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x326539bb, ftLastWriteTime.dwHighDateTime=0x1d2d028, nFileSizeHigh=0x0, nFileSizeLow=0x27f2)) returned 1 [0118.829] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0118.829] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\AutoPlayOptIn.png", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\AutoPlayOptIn.png", lpFilePart=0x0) returned 0x59 [0118.829] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0118.829] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\AutoPlayOptIn.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\autoplayoptin.png"), fInfoLevelId=0x0, lpFileInformation=0x22dfbc0 | out: lpFileInformation=0x22dfbc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x325bb05c, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x325bb05c, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x326539bb, ftLastWriteTime.dwHighDateTime=0x1d2d028, nFileSizeHigh=0x0, nFileSizeLow=0x27f2)) returned 1 [0118.829] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0118.829] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\AutoPlayOptIn.png", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\AutoPlayOptIn.png", lpFilePart=0x0) returned 0x59 [0118.829] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0118.829] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\AutoPlayOptIn.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\autoplayoptin.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0118.830] GetFileType (hFile=0x444) returned 0x1 [0118.830] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0118.830] GetFileType (hFile=0x444) returned 0x1 [0118.830] ReadFile (in: hFile=0x444, lpBuffer=0x22e1fe0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x22e1fe0*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0118.843] CloseHandle (hObject=0x444) returned 1 [0118.843] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\AutoPlayOptIn.png", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\AutoPlayOptIn.png", lpFilePart=0x0) returned 0x59 [0118.843] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0118.843] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\AutoPlayOptIn.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\autoplayoptin.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0118.843] GetFileType (hFile=0x444) returned 0x1 [0118.843] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0118.843] GetFileType (hFile=0x444) returned 0x1 [0118.843] WriteFile (in: hFile=0x444, lpBuffer=0x22dfd18*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x22dfd18*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0118.843] CloseHandle (hObject=0x444) returned 1 [0118.843] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\AutoPlayOptIn.png", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\AutoPlayOptIn.png", lpFilePart=0x0) returned 0x59 [0118.844] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\AutoPlayOptIn.png.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\AutoPlayOptIn.png.xuy", lpFilePart=0x0) returned 0x5d [0118.844] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0118.844] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\AutoPlayOptIn.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\autoplayoptin.png"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x325bb05c, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x325bb05c, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x32aedc86, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x27f2)) returned 1 [0118.844] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0118.844] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\AutoPlayOptIn.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\autoplayoptin.png"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\AutoPlayOptIn.png.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\autoplayoptin.png.xuy")) returned 1 [0118.845] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\CollectOneDriveLogs.bat", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\CollectOneDriveLogs.bat", lpFilePart=0x0) returned 0x5f [0118.845] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0118.845] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\CollectOneDriveLogs.bat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\collectonedrivelogs.bat"), fInfoLevelId=0x0, lpFileInformation=0x235e420 | out: lpFileInformation=0x235e420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35e5af50, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x35e5af50, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x35f3fd5d, ftLastWriteTime.dwHighDateTime=0x1d2d028, nFileSizeHigh=0x0, nFileSizeLow=0x16da)) returned 1 [0118.846] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0118.846] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\CollectOneDriveLogs.bat", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\CollectOneDriveLogs.bat", lpFilePart=0x0) returned 0x5f [0118.846] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0118.846] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\CollectOneDriveLogs.bat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\collectonedrivelogs.bat"), fInfoLevelId=0x0, lpFileInformation=0x235e5a8 | out: lpFileInformation=0x235e5a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35e5af50, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x35e5af50, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x35f3fd5d, ftLastWriteTime.dwHighDateTime=0x1d2d028, nFileSizeHigh=0x0, nFileSizeLow=0x16da)) returned 1 [0118.846] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0118.846] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\CollectOneDriveLogs.bat", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\CollectOneDriveLogs.bat", lpFilePart=0x0) returned 0x5f [0118.849] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0118.849] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\CollectOneDriveLogs.bat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\collectonedrivelogs.bat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0118.850] GetFileType (hFile=0x444) returned 0x1 [0118.851] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0118.851] GetFileType (hFile=0x444) returned 0x1 [0118.851] ReadFile (in: hFile=0x444, lpBuffer=0x215ff10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x215ff10*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0118.890] CloseHandle (hObject=0x444) returned 1 [0118.890] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\CollectOneDriveLogs.bat", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\CollectOneDriveLogs.bat", lpFilePart=0x0) returned 0x5f [0118.890] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0118.890] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\CollectOneDriveLogs.bat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\collectonedrivelogs.bat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0118.890] GetFileType (hFile=0x444) returned 0x1 [0118.890] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0118.890] GetFileType (hFile=0x444) returned 0x1 [0118.890] WriteFile (in: hFile=0x444, lpBuffer=0x215dc38*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x215dc38*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0118.890] CloseHandle (hObject=0x444) returned 1 [0118.891] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\CollectOneDriveLogs.bat", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\CollectOneDriveLogs.bat", lpFilePart=0x0) returned 0x5f [0118.891] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\CollectOneDriveLogs.bat.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\CollectOneDriveLogs.bat.xuy", lpFilePart=0x0) returned 0x63 [0118.891] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0118.891] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\CollectOneDriveLogs.bat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\collectonedrivelogs.bat"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35e5af50, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x35e5af50, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x32b604ce, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0118.891] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0118.891] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\CollectOneDriveLogs.bat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\collectonedrivelogs.bat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\CollectOneDriveLogs.bat.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\collectonedrivelogs.bat.xuy")) returned 1 [0118.892] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ETWlog.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ETWlog.dll", lpFilePart=0x0) returned 0x52 [0118.892] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0118.892] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ETWlog.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\etwlog.dll"), fInfoLevelId=0x0, lpFileInformation=0x21dc378 | out: lpFileInformation=0x21dc378*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39765f09, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x39765f09, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x3a3ea4cf, ftLastWriteTime.dwHighDateTime=0x1d2d028, nFileSizeHigh=0x0, nFileSizeLow=0x72c0)) returned 1 [0118.892] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0118.892] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ETWlog.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ETWlog.dll", lpFilePart=0x0) returned 0x52 [0118.892] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0118.892] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ETWlog.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\etwlog.dll"), fInfoLevelId=0x0, lpFileInformation=0x21dc4d0 | out: lpFileInformation=0x21dc4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39765f09, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x39765f09, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x3a3ea4cf, ftLastWriteTime.dwHighDateTime=0x1d2d028, nFileSizeHigh=0x0, nFileSizeLow=0x72c0)) returned 1 [0118.892] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0118.892] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ETWlog.dll", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ETWlog.dll", lpFilePart=0x0) returned 0x52 [0118.892] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0118.892] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ETWlog.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\etwlog.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0118.893] GetFileType (hFile=0x444) returned 0x1 [0118.893] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0118.893] GetFileType (hFile=0x444) returned 0x1 [0118.893] ReadFile (in: hFile=0x444, lpBuffer=0x21de8b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x21de8b0*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0118.908] CloseHandle (hObject=0x444) returned 1 [0118.908] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ETWlog.dll", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ETWlog.dll", lpFilePart=0x0) returned 0x52 [0118.908] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0118.908] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ETWlog.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\etwlog.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0118.909] GetFileType (hFile=0x444) returned 0x1 [0118.909] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0118.909] GetFileType (hFile=0x444) returned 0x1 [0118.909] WriteFile (in: hFile=0x444, lpBuffer=0x21dc608*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x21dc608*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0118.909] CloseHandle (hObject=0x444) returned 1 [0118.909] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ETWlog.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ETWlog.dll", lpFilePart=0x0) returned 0x52 [0118.909] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ETWlog.dll.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ETWlog.dll.xuy", lpFilePart=0x0) returned 0x56 [0118.909] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0118.909] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ETWlog.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\etwlog.dll"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39765f09, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x39765f09, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x32b865db, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x72c0)) returned 1 [0118.909] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0118.909] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ETWlog.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\etwlog.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ETWlog.dll.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\etwlog.dll.xuy")) returned 1 [0118.910] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ExclusionList.xml", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ExclusionList.xml", lpFilePart=0x0) returned 0x59 [0118.910] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0118.910] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ExclusionList.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\exclusionlist.xml"), fInfoLevelId=0x0, lpFileInformation=0x225aca0 | out: lpFileInformation=0x225aca0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x478b90e7, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x478b90e7, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x47acf1de, ftLastWriteTime.dwHighDateTime=0x1d2d028, nFileSizeHigh=0x0, nFileSizeLow=0x4e5f)) returned 1 [0118.912] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0118.912] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ExclusionList.xml", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ExclusionList.xml", lpFilePart=0x0) returned 0x59 [0118.912] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0118.912] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ExclusionList.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\exclusionlist.xml"), fInfoLevelId=0x0, lpFileInformation=0x225ae18 | out: lpFileInformation=0x225ae18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x478b90e7, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x478b90e7, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x47acf1de, ftLastWriteTime.dwHighDateTime=0x1d2d028, nFileSizeHigh=0x0, nFileSizeLow=0x4e5f)) returned 1 [0118.912] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0118.912] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ExclusionList.xml", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ExclusionList.xml", lpFilePart=0x0) returned 0x59 [0118.912] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0118.912] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ExclusionList.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\exclusionlist.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0118.913] GetFileType (hFile=0x444) returned 0x1 [0118.913] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0118.913] GetFileType (hFile=0x444) returned 0x1 [0118.913] ReadFile (in: hFile=0x444, lpBuffer=0x225d238, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x225d238*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0118.954] CloseHandle (hObject=0x444) returned 1 [0118.954] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ExclusionList.xml", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ExclusionList.xml", lpFilePart=0x0) returned 0x59 [0118.954] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0118.954] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ExclusionList.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\exclusionlist.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0118.955] GetFileType (hFile=0x444) returned 0x1 [0118.955] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0118.955] GetFileType (hFile=0x444) returned 0x1 [0118.955] WriteFile (in: hFile=0x444, lpBuffer=0x225af70*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x225af70*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0118.955] CloseHandle (hObject=0x444) returned 1 [0118.955] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ExclusionList.xml", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ExclusionList.xml", lpFilePart=0x0) returned 0x59 [0118.955] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ExclusionList.xml.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ExclusionList.xml.xuy", lpFilePart=0x0) returned 0x5d [0118.955] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0118.955] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ExclusionList.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\exclusionlist.xml"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x478b90e7, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x478b90e7, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x32bf8d75, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x4e5f)) returned 1 [0118.955] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0118.956] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ExclusionList.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\exclusionlist.xml"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ExclusionList.xml.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\exclusionlist.xml.xuy")) returned 1 [0118.957] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSync.LocalizedResources.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSync.LocalizedResources.dll", lpFilePart=0x0) returned 0x67 [0118.957] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0118.957] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSync.LocalizedResources.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\filesync.localizedresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x22d9678 | out: lpFileInformation=0x22d9678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b393a97, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x4b393a97, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x4b45272b, ftLastWriteTime.dwHighDateTime=0x1d2d028, nFileSizeHigh=0x0, nFileSizeLow=0x140c0)) returned 1 [0118.957] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0118.957] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSync.LocalizedResources.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSync.LocalizedResources.dll", lpFilePart=0x0) returned 0x67 [0118.958] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0118.958] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSync.LocalizedResources.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\filesync.localizedresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x22d9820 | out: lpFileInformation=0x22d9820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b393a97, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x4b393a97, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x4b45272b, ftLastWriteTime.dwHighDateTime=0x1d2d028, nFileSizeHigh=0x0, nFileSizeLow=0x140c0)) returned 1 [0118.958] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0118.958] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSync.LocalizedResources.dll", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSync.LocalizedResources.dll", lpFilePart=0x0) returned 0x67 [0118.958] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0118.958] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSync.LocalizedResources.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\filesync.localizedresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0118.959] GetFileType (hFile=0x444) returned 0x1 [0118.959] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0118.959] GetFileType (hFile=0x444) returned 0x1 [0118.959] ReadFile (in: hFile=0x444, lpBuffer=0x22dbca0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x22dbca0*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0118.986] CloseHandle (hObject=0x444) returned 1 [0118.986] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSync.LocalizedResources.dll", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSync.LocalizedResources.dll", lpFilePart=0x0) returned 0x67 [0118.986] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0118.986] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSync.LocalizedResources.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\filesync.localizedresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0118.987] GetFileType (hFile=0x444) returned 0x1 [0118.987] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0118.987] GetFileType (hFile=0x444) returned 0x1 [0118.987] WriteFile (in: hFile=0x444, lpBuffer=0x22d99a8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x22d99a8*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0118.987] CloseHandle (hObject=0x444) returned 1 [0118.987] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSync.LocalizedResources.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSync.LocalizedResources.dll", lpFilePart=0x0) returned 0x67 [0118.987] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSync.LocalizedResources.dll.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSync.LocalizedResources.dll.xuy", lpFilePart=0x0) returned 0x6b [0118.987] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0118.987] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSync.LocalizedResources.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\filesync.localizedresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b393a97, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x4b393a97, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x32c450e8, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x140c0)) returned 1 [0118.987] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0118.987] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSync.LocalizedResources.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\filesync.localizedresources.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSync.LocalizedResources.dll.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\filesync.localizedresources.dll.xuy")) returned 1 [0118.988] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSync.Resources.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSync.Resources.dll", lpFilePart=0x0) returned 0x5e [0118.988] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0118.988] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSync.Resources.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\filesync.resources.dll"), fInfoLevelId=0x0, lpFileInformation=0x2358158 | out: lpFileInformation=0x2358158*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4eb02f85, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x4eb02f85, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x4ee4a34a, ftLastWriteTime.dwHighDateTime=0x1d2d028, nFileSizeHigh=0x0, nFileSizeLow=0x28d8c0)) returned 1 [0118.988] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0118.989] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSync.Resources.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSync.Resources.dll", lpFilePart=0x0) returned 0x5e [0118.989] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0118.989] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSync.Resources.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\filesync.resources.dll"), fInfoLevelId=0x0, lpFileInformation=0x23582e0 | out: lpFileInformation=0x23582e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4eb02f85, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x4eb02f85, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x4ee4a34a, ftLastWriteTime.dwHighDateTime=0x1d2d028, nFileSizeHigh=0x0, nFileSizeLow=0x28d8c0)) returned 1 [0118.989] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0118.989] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSync.Resources.dll", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSync.Resources.dll", lpFilePart=0x0) returned 0x5e [0118.989] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0118.989] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSync.Resources.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\filesync.resources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0118.989] GetFileType (hFile=0x444) returned 0x1 [0118.990] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0118.990] GetFileType (hFile=0x444) returned 0x1 [0118.990] ReadFile (in: hFile=0x444, lpBuffer=0x235a720, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x235a720*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0119.047] CloseHandle (hObject=0x444) returned 1 [0119.047] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSync.Resources.dll", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSync.Resources.dll", lpFilePart=0x0) returned 0x5e [0119.047] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0119.047] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSync.Resources.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\filesync.resources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0119.047] GetFileType (hFile=0x444) returned 0x1 [0119.047] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0119.047] GetFileType (hFile=0x444) returned 0x1 [0119.047] WriteFile (in: hFile=0x444, lpBuffer=0x215dc38*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x215dc38*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0119.047] CloseHandle (hObject=0x444) returned 1 [0119.048] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSync.Resources.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSync.Resources.dll", lpFilePart=0x0) returned 0x5e [0119.048] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSync.Resources.dll.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSync.Resources.dll.xuy", lpFilePart=0x0) returned 0x62 [0119.048] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0119.048] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSync.Resources.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\filesync.resources.dll"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4eb02f85, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x4eb02f85, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x32cddd20, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x28d8c0)) returned 1 [0119.048] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0119.048] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSync.Resources.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\filesync.resources.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSync.Resources.dll.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\filesync.resources.dll.xuy")) returned 1 [0119.049] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSyncApi.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSyncApi.dll", lpFilePart=0x0) returned 0x57 [0119.049] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0119.049] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSyncApi.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\filesyncapi.dll"), fInfoLevelId=0x0, lpFileInformation=0x21d8120 | out: lpFileInformation=0x21d8120*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5507d320, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x5507d320, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x55409333, ftLastWriteTime.dwHighDateTime=0x1d2d028, nFileSizeHigh=0x0, nFileSizeLow=0x362c0)) returned 1 [0119.049] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0119.049] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSyncApi.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSyncApi.dll", lpFilePart=0x0) returned 0x57 [0119.049] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0119.049] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSyncApi.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\filesyncapi.dll"), fInfoLevelId=0x0, lpFileInformation=0x21d8288 | out: lpFileInformation=0x21d8288*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5507d320, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x5507d320, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x55409333, ftLastWriteTime.dwHighDateTime=0x1d2d028, nFileSizeHigh=0x0, nFileSizeLow=0x362c0)) returned 1 [0119.049] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0119.049] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSyncApi.dll", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSyncApi.dll", lpFilePart=0x0) returned 0x57 [0119.049] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0119.049] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSyncApi.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\filesyncapi.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0119.050] GetFileType (hFile=0x444) returned 0x1 [0119.050] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0119.050] GetFileType (hFile=0x444) returned 0x1 [0119.050] ReadFile (in: hFile=0x444, lpBuffer=0x21da688, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x21da688*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0119.070] CloseHandle (hObject=0x444) returned 1 [0119.070] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSyncApi.dll", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSyncApi.dll", lpFilePart=0x0) returned 0x57 [0119.070] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0119.070] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSyncApi.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\filesyncapi.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0119.070] GetFileType (hFile=0x444) returned 0x1 [0119.070] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0119.070] GetFileType (hFile=0x444) returned 0x1 [0119.070] WriteFile (in: hFile=0x444, lpBuffer=0x21d83d0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x21d83d0*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0119.071] CloseHandle (hObject=0x444) returned 1 [0119.071] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSyncApi.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSyncApi.dll", lpFilePart=0x0) returned 0x57 [0119.071] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSyncApi.dll.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSyncApi.dll.xuy", lpFilePart=0x0) returned 0x5b [0119.071] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0119.071] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSyncApi.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\filesyncapi.dll"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5507d320, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x5507d320, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x32d2a4f4, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x362c0)) returned 1 [0119.071] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0119.071] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSyncApi.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\filesyncapi.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSyncApi.dll.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\filesyncapi.dll.xuy")) returned 1 [0119.072] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSyncClient.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSyncClient.dll", lpFilePart=0x0) returned 0x5a [0119.072] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0119.072] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSyncClient.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\filesyncclient.dll"), fInfoLevelId=0x0, lpFileInformation=0x2256aa0 | out: lpFileInformation=0x2256aa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x588ade05, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x588ade05, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5896c9cf, ftLastWriteTime.dwHighDateTime=0x1d2d028, nFileSizeHigh=0x0, nFileSizeLow=0x1d9ec0)) returned 1 [0119.073] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0119.073] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSyncClient.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSyncClient.dll", lpFilePart=0x0) returned 0x5a [0119.073] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0119.073] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSyncClient.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\filesyncclient.dll"), fInfoLevelId=0x0, lpFileInformation=0x2256c18 | out: lpFileInformation=0x2256c18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x588ade05, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x588ade05, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5896c9cf, ftLastWriteTime.dwHighDateTime=0x1d2d028, nFileSizeHigh=0x0, nFileSizeLow=0x1d9ec0)) returned 1 [0119.073] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0119.073] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSyncClient.dll", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSyncClient.dll", lpFilePart=0x0) returned 0x5a [0119.073] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0119.073] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSyncClient.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\filesyncclient.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0119.074] GetFileType (hFile=0x444) returned 0x1 [0119.074] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0119.074] GetFileType (hFile=0x444) returned 0x1 [0119.074] ReadFile (in: hFile=0x444, lpBuffer=0x2259038, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x2259038*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0119.099] CloseHandle (hObject=0x444) returned 1 [0119.099] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSyncClient.dll", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSyncClient.dll", lpFilePart=0x0) returned 0x5a [0119.099] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0119.099] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSyncClient.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\filesyncclient.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0119.100] GetFileType (hFile=0x444) returned 0x1 [0119.100] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0119.100] GetFileType (hFile=0x444) returned 0x1 [0119.100] WriteFile (in: hFile=0x444, lpBuffer=0x2256d70*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x2256d70*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0119.100] CloseHandle (hObject=0x444) returned 1 [0119.100] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSyncClient.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSyncClient.dll", lpFilePart=0x0) returned 0x5a [0119.100] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSyncClient.dll.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSyncClient.dll.xuy", lpFilePart=0x0) returned 0x5e [0119.100] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0119.100] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSyncClient.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\filesyncclient.dll"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x588ade05, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x588ade05, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x32d76a76, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x1d9ec0)) returned 1 [0119.100] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0119.101] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSyncClient.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\filesyncclient.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSyncClient.dll.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\filesyncclient.dll.xuy")) returned 1 [0119.101] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSyncConfig.exe", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSyncConfig.exe", lpFilePart=0x0) returned 0x5a [0119.101] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0119.101] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSyncConfig.exe" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\filesyncconfig.exe"), fInfoLevelId=0x0, lpFileInformation=0x22d5478 | out: lpFileInformation=0x22d5478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f015ea7, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x5f015ea7, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5f3a973d, ftLastWriteTime.dwHighDateTime=0x1d2d028, nFileSizeHigh=0x0, nFileSizeLow=0x238c0)) returned 1 [0119.102] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0119.102] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSyncConfig.exe", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSyncConfig.exe", lpFilePart=0x0) returned 0x5a [0119.102] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0119.102] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSyncConfig.exe" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\filesyncconfig.exe"), fInfoLevelId=0x0, lpFileInformation=0x22d55f0 | out: lpFileInformation=0x22d55f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f015ea7, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x5f015ea7, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5f3a973d, ftLastWriteTime.dwHighDateTime=0x1d2d028, nFileSizeHigh=0x0, nFileSizeLow=0x238c0)) returned 1 [0119.102] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0119.102] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSyncConfig.exe", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSyncConfig.exe", lpFilePart=0x0) returned 0x5a [0119.102] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0119.102] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSyncConfig.exe" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\filesyncconfig.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0119.103] GetFileType (hFile=0x444) returned 0x1 [0119.103] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0119.103] GetFileType (hFile=0x444) returned 0x1 [0119.103] ReadFile (in: hFile=0x444, lpBuffer=0x22d7a10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x22d7a10*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0119.139] CloseHandle (hObject=0x444) returned 1 [0119.139] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSyncConfig.exe", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSyncConfig.exe", lpFilePart=0x0) returned 0x5a [0119.139] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0119.139] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSyncConfig.exe" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\filesyncconfig.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0119.140] GetFileType (hFile=0x444) returned 0x1 [0119.140] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0119.140] GetFileType (hFile=0x444) returned 0x1 [0119.140] WriteFile (in: hFile=0x444, lpBuffer=0x22d5748*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x22d5748*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0119.140] CloseHandle (hObject=0x444) returned 1 [0119.140] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSyncConfig.exe", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSyncConfig.exe", lpFilePart=0x0) returned 0x5a [0119.140] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSyncConfig.exe.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSyncConfig.exe.xuy", lpFilePart=0x0) returned 0x5e [0119.140] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0119.140] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSyncConfig.exe" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\filesyncconfig.exe"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f015ea7, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x5f015ea7, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x32dc2d48, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x238c0)) returned 1 [0119.140] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0119.140] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSyncConfig.exe" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\filesyncconfig.exe"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSyncConfig.exe.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\filesyncconfig.exe.xuy")) returned 1 [0119.142] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSyncSessions.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSyncSessions.dll", lpFilePart=0x0) returned 0x5c [0119.142] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0119.142] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSyncSessions.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\filesyncsessions.dll"), fInfoLevelId=0x0, lpFileInformation=0x2353e50 | out: lpFileInformation=0x2353e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x628698f9, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x628698f9, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x62a0d2c1, ftLastWriteTime.dwHighDateTime=0x1d2d028, nFileSizeHigh=0x0, nFileSizeLow=0x1464c0)) returned 1 [0119.142] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0119.142] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSyncSessions.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSyncSessions.dll", lpFilePart=0x0) returned 0x5c [0119.142] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0119.142] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSyncSessions.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\filesyncsessions.dll"), fInfoLevelId=0x0, lpFileInformation=0x2353fd8 | out: lpFileInformation=0x2353fd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x628698f9, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x628698f9, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x62a0d2c1, ftLastWriteTime.dwHighDateTime=0x1d2d028, nFileSizeHigh=0x0, nFileSizeLow=0x1464c0)) returned 1 [0119.143] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0119.143] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSyncSessions.dll", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSyncSessions.dll", lpFilePart=0x0) returned 0x5c [0119.143] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0119.143] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSyncSessions.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\filesyncsessions.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0119.144] GetFileType (hFile=0x444) returned 0x1 [0119.144] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0119.144] GetFileType (hFile=0x444) returned 0x1 [0119.144] ReadFile (in: hFile=0x444, lpBuffer=0x2356418, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x2356418*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0119.201] CloseHandle (hObject=0x444) returned 1 [0119.201] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSyncSessions.dll", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSyncSessions.dll", lpFilePart=0x0) returned 0x5c [0119.202] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0119.202] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSyncSessions.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\filesyncsessions.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0119.202] GetFileType (hFile=0x444) returned 0x1 [0119.202] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0119.202] GetFileType (hFile=0x444) returned 0x1 [0119.202] WriteFile (in: hFile=0x444, lpBuffer=0x215dc38*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x215dc38*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0119.202] CloseHandle (hObject=0x444) returned 1 [0119.202] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSyncSessions.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSyncSessions.dll", lpFilePart=0x0) returned 0x5c [0119.202] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSyncSessions.dll.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSyncSessions.dll.xuy", lpFilePart=0x0) returned 0x60 [0119.202] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0119.202] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSyncSessions.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\filesyncsessions.dll"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x628698f9, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x628698f9, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x32e69a9b, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x1464c0)) returned 1 [0119.203] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0119.203] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSyncSessions.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\filesyncsessions.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSyncSessions.dll.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\filesyncsessions.dll.xuy")) returned 1 [0119.203] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0119.204] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\is", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\is", lpFilePart=0x0) returned 0x4a [0119.204] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\is\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\is\\", lpFilePart=0x0) returned 0x4b [0119.204] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\is\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7a90 [0119.204] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0119.204] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0119.204] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0119.204] FindClose (in: hFindFile=0x5d7a90 | out: hFindFile=0x5d7a90) returned 1 [0119.204] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0119.204] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0119.204] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0119.204] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\is", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\is", lpFilePart=0x0) returned 0x4a [0119.205] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\is\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\is\\", lpFilePart=0x0) returned 0x4b [0119.205] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\is\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7c70 [0119.205] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0119.205] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0119.205] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0119.205] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0119.205] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0119.205] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0119.205] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\is\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\is\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6e [0119.205] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0119.205] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\is\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\is\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x21d4a28 | out: lpFileInformation=0x21d4a28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32522700, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x32522700, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x326539bb, ftLastWriteTime.dwHighDateTime=0x1d2d028, nFileSizeHigh=0x0, nFileSizeLow=0x152c0)) returned 1 [0119.206] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0119.206] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\is\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\is\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6e [0119.206] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0119.206] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\is\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\is\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x21d4be8 | out: lpFileInformation=0x21d4be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32522700, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x32522700, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x326539bb, ftLastWriteTime.dwHighDateTime=0x1d2d028, nFileSizeHigh=0x0, nFileSizeLow=0x152c0)) returned 1 [0119.206] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0119.206] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\is\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\is\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6e [0119.206] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0119.206] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\is\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\is\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0119.207] GetFileType (hFile=0x444) returned 0x1 [0119.207] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0119.207] GetFileType (hFile=0x444) returned 0x1 [0119.207] ReadFile (in: hFile=0x444, lpBuffer=0x21d7098, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x21d7098*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0119.236] CloseHandle (hObject=0x444) returned 1 [0119.237] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\is\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\is\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6e [0119.237] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0119.237] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\is\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\is\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0119.237] GetFileType (hFile=0x444) returned 0x1 [0119.237] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0119.237] GetFileType (hFile=0x444) returned 0x1 [0119.237] WriteFile (in: hFile=0x444, lpBuffer=0x21d4d88*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x21d4d88*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0119.237] CloseHandle (hObject=0x444) returned 1 [0119.237] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\is\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\is\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6e [0119.238] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\is\\FileSync.LocalizedResources.dll.mui.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\is\\FileSync.LocalizedResources.dll.mui.xuy", lpFilePart=0x0) returned 0x72 [0119.238] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0119.238] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\is\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\is\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32522700, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x32522700, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x32eb604c, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x152c0)) returned 1 [0119.238] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0119.238] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\is\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\is\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\is\\FileSync.LocalizedResources.dll.mui.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\is\\filesync.localizedresources.dll.mui.xuy")) returned 1 [0119.240] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0119.240] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\it", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\it", lpFilePart=0x0) returned 0x4a [0119.240] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\it\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\it\\", lpFilePart=0x0) returned 0x4b [0119.240] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\it\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7670 [0119.240] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0119.241] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0119.241] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0119.241] FindClose (in: hFindFile=0x5d7670 | out: hFindFile=0x5d7670) returned 1 [0119.241] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0119.241] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0119.241] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0119.241] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\it", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\it", lpFilePart=0x0) returned 0x4a [0119.241] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\it\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\it\\", lpFilePart=0x0) returned 0x4b [0119.241] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\it\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7af0 [0119.241] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0119.242] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0119.242] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0119.242] FindClose (in: hFindFile=0x5d7af0 | out: hFindFile=0x5d7af0) returned 1 [0119.242] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0119.242] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0119.242] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\it\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\it\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6e [0119.242] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0119.242] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\it\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\it\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x2255760 | out: lpFileInformation=0x2255760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4077621c, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x4077621c, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x4088126f, ftLastWriteTime.dwHighDateTime=0x1d2d028, nFileSizeHigh=0x0, nFileSizeLow=0x160c0)) returned 1 [0119.242] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0119.243] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\it\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\it\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6e [0119.243] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0119.243] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\it\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\it\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x2255920 | out: lpFileInformation=0x2255920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4077621c, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x4077621c, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x4088126f, ftLastWriteTime.dwHighDateTime=0x1d2d028, nFileSizeHigh=0x0, nFileSizeLow=0x160c0)) returned 1 [0119.243] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0119.243] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\it\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\it\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6e [0119.243] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0119.243] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\it\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\it\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0119.244] GetFileType (hFile=0x444) returned 0x1 [0119.244] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0119.244] GetFileType (hFile=0x444) returned 0x1 [0119.244] ReadFile (in: hFile=0x444, lpBuffer=0x2257dd0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x2257dd0*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0119.272] CloseHandle (hObject=0x444) returned 1 [0119.272] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\it\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\it\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6e [0119.272] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0119.272] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\it\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\it\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0119.273] GetFileType (hFile=0x444) returned 0x1 [0119.273] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0119.273] GetFileType (hFile=0x444) returned 0x1 [0119.273] WriteFile (in: hFile=0x444, lpBuffer=0x2255ac0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x2255ac0*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0119.273] CloseHandle (hObject=0x444) returned 1 [0119.273] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\it\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\it\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6e [0119.273] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\it\\FileSync.LocalizedResources.dll.mui.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\it\\FileSync.LocalizedResources.dll.mui.xuy", lpFilePart=0x0) returned 0x72 [0119.273] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0119.273] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\it\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\it\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4077621c, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x4077621c, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x32f02178, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x160c0)) returned 1 [0119.273] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0119.273] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\it\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\it\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\it\\FileSync.LocalizedResources.dll.mui.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\it\\filesync.localizedresources.dll.mui.xuy")) returned 1 [0119.274] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0119.274] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ja", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ja", lpFilePart=0x0) returned 0x4a [0119.274] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ja\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ja\\", lpFilePart=0x0) returned 0x4b [0119.274] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ja\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d79d0 [0119.275] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0119.275] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0119.275] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0119.275] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0119.275] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0119.275] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0119.275] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0119.275] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ja", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ja", lpFilePart=0x0) returned 0x4a [0119.275] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ja\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ja\\", lpFilePart=0x0) returned 0x4b [0119.276] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ja\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d81b0 [0119.276] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0119.276] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0119.276] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0119.276] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0119.276] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0119.276] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0119.276] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ja\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ja\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6e [0119.276] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0119.276] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ja\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\ja\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x22d6498 | out: lpFileInformation=0x22d6498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d351916, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x4d351916, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x4d436739, ftLastWriteTime.dwHighDateTime=0x1d2d028, nFileSizeHigh=0x0, nFileSizeLow=0xfcc0)) returned 1 [0119.277] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0119.277] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ja\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ja\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6e [0119.277] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0119.277] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ja\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\ja\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x22d6658 | out: lpFileInformation=0x22d6658*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d351916, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x4d351916, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x4d436739, ftLastWriteTime.dwHighDateTime=0x1d2d028, nFileSizeHigh=0x0, nFileSizeLow=0xfcc0)) returned 1 [0119.277] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0119.277] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ja\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ja\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6e [0119.277] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0119.277] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ja\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\ja\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0119.278] GetFileType (hFile=0x444) returned 0x1 [0119.278] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0119.278] GetFileType (hFile=0x444) returned 0x1 [0119.278] ReadFile (in: hFile=0x444, lpBuffer=0x22d8b08, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x22d8b08*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0119.295] CloseHandle (hObject=0x444) returned 1 [0119.295] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ja\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ja\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6e [0119.295] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0119.295] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ja\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\ja\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0119.296] GetFileType (hFile=0x444) returned 0x1 [0119.296] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0119.296] GetFileType (hFile=0x444) returned 0x1 [0119.296] WriteFile (in: hFile=0x444, lpBuffer=0x22d67f8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x22d67f8*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0119.296] CloseHandle (hObject=0x444) returned 1 [0119.296] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ja\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ja\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6e [0119.296] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ja\\FileSync.LocalizedResources.dll.mui.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ja\\FileSync.LocalizedResources.dll.mui.xuy", lpFilePart=0x0) returned 0x72 [0119.296] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0119.296] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ja\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\ja\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d351916, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x4d351916, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x32f4e6cd, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xfcc0)) returned 1 [0119.296] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0119.296] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ja\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\ja\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ja\\FileSync.LocalizedResources.dll.mui.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\ja\\filesync.localizedresources.dll.mui.xuy")) returned 1 [0119.297] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0119.297] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ka", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ka", lpFilePart=0x0) returned 0x4a [0119.297] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ka\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ka\\", lpFilePart=0x0) returned 0x4b [0119.297] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ka\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7d30 [0119.298] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0119.298] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0119.298] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0119.298] FindClose (in: hFindFile=0x5d7d30 | out: hFindFile=0x5d7d30) returned 1 [0119.298] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0119.298] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0119.298] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0119.298] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ka", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ka", lpFilePart=0x0) returned 0x4a [0119.298] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ka\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ka\\", lpFilePart=0x0) returned 0x4b [0119.298] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ka\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d81b0 [0119.298] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0119.299] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0119.299] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0119.299] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0119.299] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0119.299] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0119.299] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ka\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ka\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6e [0119.299] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0119.299] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ka\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\ka\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x23571d0 | out: lpFileInformation=0x23571d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57d761ee, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x57d761ee, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x57e0eb2e, ftLastWriteTime.dwHighDateTime=0x1d2d028, nFileSizeHigh=0x0, nFileSizeLow=0x164c0)) returned 1 [0119.300] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0119.301] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ka\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ka\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6e [0119.301] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0119.301] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ka\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\ka\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x2357390 | out: lpFileInformation=0x2357390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57d761ee, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x57d761ee, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x57e0eb2e, ftLastWriteTime.dwHighDateTime=0x1d2d028, nFileSizeHigh=0x0, nFileSizeLow=0x164c0)) returned 1 [0119.301] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0119.301] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ka\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ka\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6e [0119.301] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0119.301] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ka\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\ka\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0119.302] GetFileType (hFile=0x444) returned 0x1 [0119.302] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0119.302] GetFileType (hFile=0x444) returned 0x1 [0119.302] ReadFile (in: hFile=0x444, lpBuffer=0x2359840, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x2359840*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0119.352] CloseHandle (hObject=0x444) returned 1 [0119.352] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ka\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ka\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6e [0119.352] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0119.352] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ka\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\ka\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0119.352] GetFileType (hFile=0x444) returned 0x1 [0119.352] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0119.352] GetFileType (hFile=0x444) returned 0x1 [0119.352] WriteFile (in: hFile=0x444, lpBuffer=0x215d2e8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x215d2e8*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0119.353] CloseHandle (hObject=0x444) returned 1 [0119.353] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ka\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ka\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6e [0119.353] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ka\\FileSync.LocalizedResources.dll.mui.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ka\\FileSync.LocalizedResources.dll.mui.xuy", lpFilePart=0x0) returned 0x72 [0119.353] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0119.353] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ka\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\ka\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57d761ee, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x57d761ee, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x32fc11f3, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x164c0)) returned 1 [0119.353] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0119.353] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ka\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\ka\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ka\\FileSync.LocalizedResources.dll.mui.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\ka\\filesync.localizedresources.dll.mui.xuy")) returned 1 [0119.354] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0119.354] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\kk", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\kk", lpFilePart=0x0) returned 0x4a [0119.354] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\kk\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\kk\\", lpFilePart=0x0) returned 0x4b [0119.354] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\kk\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d75b0 [0119.354] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0119.354] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0119.355] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0119.355] FindClose (in: hFindFile=0x5d75b0 | out: hFindFile=0x5d75b0) returned 1 [0119.355] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0119.355] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0119.355] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0119.355] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\kk", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\kk", lpFilePart=0x0) returned 0x4a [0119.355] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\kk\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\kk\\", lpFilePart=0x0) returned 0x4b [0119.355] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\kk\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7550 [0119.355] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0119.355] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0119.355] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0119.358] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0119.358] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0119.358] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0119.358] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\kk\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\kk\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6e [0119.358] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0119.358] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\kk\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\kk\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x21d75a0 | out: lpFileInformation=0x21d75a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f310dd1, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x5f310dd1, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5f3a973d, ftLastWriteTime.dwHighDateTime=0x1d2d028, nFileSizeHigh=0x0, nFileSizeLow=0x160c0)) returned 1 [0119.359] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0119.359] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\kk\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\kk\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6e [0119.359] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0119.359] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\kk\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\kk\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x21d7760 | out: lpFileInformation=0x21d7760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f310dd1, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x5f310dd1, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5f3a973d, ftLastWriteTime.dwHighDateTime=0x1d2d028, nFileSizeHigh=0x0, nFileSizeLow=0x160c0)) returned 1 [0119.360] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0119.360] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\kk\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\kk\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6e [0119.360] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0119.360] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\kk\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\kk\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0119.361] GetFileType (hFile=0x444) returned 0x1 [0119.361] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0119.361] GetFileType (hFile=0x444) returned 0x1 [0119.361] ReadFile (in: hFile=0x444, lpBuffer=0x21d9c10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x21d9c10*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0119.378] CloseHandle (hObject=0x444) returned 1 [0119.378] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\kk\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\kk\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6e [0119.378] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0119.378] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\kk\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\kk\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0119.379] GetFileType (hFile=0x444) returned 0x1 [0119.379] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0119.379] GetFileType (hFile=0x444) returned 0x1 [0119.379] WriteFile (in: hFile=0x444, lpBuffer=0x21d7900*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x21d7900*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0119.379] CloseHandle (hObject=0x444) returned 1 [0119.379] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\kk\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\kk\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6e [0119.379] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\kk\\FileSync.LocalizedResources.dll.mui.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\kk\\FileSync.LocalizedResources.dll.mui.xuy", lpFilePart=0x0) returned 0x72 [0119.379] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0119.379] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\kk\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\kk\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f310dd1, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x5f310dd1, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x3300d1cb, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x160c0)) returned 1 [0119.379] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0119.379] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\kk\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\kk\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\kk\\FileSync.LocalizedResources.dll.mui.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\kk\\filesync.localizedresources.dll.mui.xuy")) returned 1 [0119.381] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0119.381] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\km-kh", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\km-kh", lpFilePart=0x0) returned 0x4d [0119.381] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\km-kh\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\km-kh\\", lpFilePart=0x0) returned 0x4e [0119.381] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\km-kh\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7fd0 [0119.381] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0119.381] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0119.381] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0119.381] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0119.381] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0119.382] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0119.382] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\km-kh", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\km-kh", lpFilePart=0x0) returned 0x4d [0119.382] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\km-kh\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\km-kh\\", lpFilePart=0x0) returned 0x4e [0119.382] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\km-kh\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7e50 [0119.382] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0119.382] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0119.382] FindClose (in: hFindFile=0x5d7e50 | out: hFindFile=0x5d7e50) returned 1 [0119.382] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0119.382] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0119.382] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0119.382] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830", lpFilePart=0x0) returned 0x45 [0119.382] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\", lpFilePart=0x0) returned 0x46 [0119.383] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7df0 [0119.383] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.395] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.395] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.395] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.395] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.395] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.395] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.396] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.396] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.396] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.396] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.396] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.396] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.396] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.397] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.397] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.397] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.397] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.397] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.397] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.397] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.397] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.398] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.398] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.398] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.398] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.398] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.399] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.399] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.400] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.400] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.400] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.400] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.400] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.400] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.400] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.400] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.400] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.401] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.401] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.401] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.401] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.401] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.401] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.401] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.401] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.401] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.402] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.402] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.402] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.402] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.402] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.402] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.403] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.403] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.403] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.404] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.404] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.404] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.404] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.404] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.404] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.404] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.405] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.405] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.405] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.405] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.405] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.405] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.405] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.406] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.406] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.406] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.406] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.406] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.406] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.406] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.406] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.407] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.407] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.407] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.407] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.407] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.407] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.407] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.407] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.407] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.408] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.408] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.409] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.409] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.409] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.409] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.409] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.409] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.409] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.409] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.409] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.410] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.410] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.410] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.410] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.410] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.410] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.410] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.410] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.410] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.410] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.410] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.410] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.411] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.411] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.411] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.411] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.411] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.411] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.411] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.411] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.411] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.411] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.411] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.411] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.411] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.411] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.412] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.412] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.412] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.412] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.412] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.412] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.412] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.412] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.412] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.412] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.412] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.412] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.412] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.412] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.412] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.412] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.413] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.413] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.413] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.413] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.413] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.413] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.413] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.413] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.413] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.413] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.413] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.413] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.413] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.413] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.413] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.413] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.413] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.413] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.414] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.414] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.415] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.415] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.415] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.415] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.415] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.415] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.416] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.416] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.416] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.416] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.416] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.416] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.416] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.416] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.416] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.416] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.416] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.416] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.416] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.416] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.416] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.416] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.416] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.416] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.416] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.416] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.416] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.416] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.417] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.417] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.417] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.417] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.417] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.417] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.417] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.417] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.417] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.417] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.417] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.417] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.417] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.417] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.417] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.417] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.417] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.417] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.417] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.417] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.417] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.417] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.417] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.418] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.418] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.418] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.418] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.418] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0119.418] FindClose (in: hFindFile=0x5d7df0 | out: hFindFile=0x5d7df0) returned 1 [0119.418] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0119.418] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0119.418] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0119.418] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830", lpFilePart=0x0) returned 0x45 [0119.419] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\", lpFilePart=0x0) returned 0x46 [0119.419] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d78b0 [0119.419] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.419] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.419] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.419] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.419] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.419] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.419] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.419] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.419] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.419] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.419] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.419] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.419] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.419] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.419] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.419] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.420] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.420] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.420] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.420] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.420] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.420] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.420] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0119.421] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0119.421] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0119.421] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0119.422] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0119.423] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0119.423] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0119.423] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0119.424] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0119.445] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0119.445] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0119.446] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0119.446] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0119.446] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\adal.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\adal.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\adal.dll.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\adal.dll.xuy")) returned 1 [0119.447] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0119.447] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0119.447] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0119.447] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0119.472] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0119.473] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0119.474] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0119.474] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0119.474] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\alertIcon.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\alerticon.png"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\alertIcon.png.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\alerticon.png.xuy")) returned 1 [0119.476] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0119.477] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0119.477] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0119.477] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0119.477] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0119.477] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0119.505] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0119.505] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0119.505] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0119.505] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0119.505] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-console-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-console-l1-1-0.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-console-l1-1-0.dll.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-console-l1-1-0.dll.xuy")) returned 1 [0119.507] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0119.507] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0119.507] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0119.507] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0119.507] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0119.507] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0119.539] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0119.540] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0119.540] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0119.540] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0119.540] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-datetime-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-datetime-l1-1-0.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-datetime-l1-1-0.dll.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-datetime-l1-1-0.dll.xuy")) returned 1 [0119.542] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0119.542] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0119.542] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0119.542] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0119.542] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0119.542] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0119.560] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0119.561] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0119.561] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0119.561] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0119.561] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-debug-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-debug-l1-1-0.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-debug-l1-1-0.dll.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-debug-l1-1-0.dll.xuy")) returned 1 [0119.563] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0119.564] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0119.564] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0119.564] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0119.564] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0119.565] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0119.628] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0119.629] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0119.630] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0119.630] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0119.630] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-errorhandling-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-errorhandling-l1-1-0.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-errorhandling-l1-1-0.dll.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-errorhandling-l1-1-0.dll.xuy")) returned 1 [0119.632] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0119.644] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0119.645] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0119.645] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0119.645] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0119.645] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0119.672] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0119.672] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0119.673] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0119.673] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0119.673] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-file-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-file-l1-1-0.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-file-l1-1-0.dll.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-file-l1-1-0.dll.xuy")) returned 1 [0119.675] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0119.675] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0119.675] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0119.675] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0119.675] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0119.675] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0119.702] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0119.702] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0119.702] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0119.702] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0119.703] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-file-l1-2-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-file-l1-2-0.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-file-l1-2-0.dll.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-file-l1-2-0.dll.xuy")) returned 1 [0119.707] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0119.709] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0119.709] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0119.709] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0119.709] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0119.710] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0119.727] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0119.727] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0119.728] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0119.728] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0119.728] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-file-l2-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-file-l2-1-0.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-file-l2-1-0.dll.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-file-l2-1-0.dll.xuy")) returned 1 [0119.730] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0119.730] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0119.730] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0119.730] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0119.730] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0119.730] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0119.764] CloseHandle (hObject=0x444) returned 1 [0119.764] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-handle-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-handle-l1-1-0.dll", lpFilePart=0x0) returned 0x67 [0119.764] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0119.764] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-handle-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-handle-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0119.765] GetFileType (hFile=0x444) returned 0x1 [0119.766] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0119.766] GetFileType (hFile=0x444) returned 0x1 [0119.766] WriteFile (in: hFile=0x444, lpBuffer=0x2167b30*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x2167b30*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0119.766] CloseHandle (hObject=0x444) returned 1 [0119.766] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-handle-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-handle-l1-1-0.dll", lpFilePart=0x0) returned 0x67 [0119.766] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-handle-l1-1-0.dll.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-handle-l1-1-0.dll.xuy", lpFilePart=0x0) returned 0x6b [0119.766] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0119.766] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-handle-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-handle-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2daf5e28, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2daf5e28, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x333c70b7, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x46d0)) returned 1 [0119.766] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0119.766] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-handle-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-handle-l1-1-0.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-handle-l1-1-0.dll.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-handle-l1-1-0.dll.xuy")) returned 1 [0119.768] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-heap-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-heap-l1-1-0.dll", lpFilePart=0x0) returned 0x65 [0119.768] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0119.768] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-heap-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-heap-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x218c678 | out: lpFileInformation=0x218c678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2db52ab2, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2db52ab2, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x2db52ab2, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x46d0)) returned 1 [0119.769] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0119.769] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-heap-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-heap-l1-1-0.dll", lpFilePart=0x0) returned 0x65 [0119.769] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0119.769] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-heap-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-heap-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x218c820 | out: lpFileInformation=0x218c820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2db52ab2, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2db52ab2, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x2db52ab2, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x46d0)) returned 1 [0119.769] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0119.769] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-heap-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-heap-l1-1-0.dll", lpFilePart=0x0) returned 0x65 [0119.769] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0119.770] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-heap-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-heap-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0119.770] GetFileType (hFile=0x444) returned 0x1 [0119.770] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0119.770] GetFileType (hFile=0x444) returned 0x1 [0119.770] ReadFile (in: hFile=0x444, lpBuffer=0x218eca0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x218eca0*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0119.829] CloseHandle (hObject=0x444) returned 1 [0119.830] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-heap-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-heap-l1-1-0.dll", lpFilePart=0x0) returned 0x65 [0119.830] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0119.830] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-heap-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-heap-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0119.830] GetFileType (hFile=0x444) returned 0x1 [0119.830] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0119.830] GetFileType (hFile=0x444) returned 0x1 [0119.830] WriteFile (in: hFile=0x444, lpBuffer=0x218c9a8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x218c9a8*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0119.830] CloseHandle (hObject=0x444) returned 1 [0119.830] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-heap-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-heap-l1-1-0.dll", lpFilePart=0x0) returned 0x65 [0119.831] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-heap-l1-1-0.dll.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-heap-l1-1-0.dll.xuy", lpFilePart=0x0) returned 0x69 [0119.831] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0119.831] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-heap-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-heap-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2db52ab2, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2db52ab2, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3345f84f, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x46d0)) returned 1 [0119.831] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0119.831] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-heap-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-heap-l1-1-0.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-heap-l1-1-0.dll.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-heap-l1-1-0.dll.xuy")) returned 1 [0119.832] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-interlocked-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-interlocked-l1-1-0.dll", lpFilePart=0x0) returned 0x6c [0119.832] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0119.832] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-interlocked-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-interlocked-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x220b158 | out: lpFileInformation=0x220b158*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2db6b144, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2db6b144, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x2db6d87b, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x48d0)) returned 1 [0119.832] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0119.832] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-interlocked-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-interlocked-l1-1-0.dll", lpFilePart=0x0) returned 0x6c [0119.832] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0119.833] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-interlocked-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-interlocked-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x220b320 | out: lpFileInformation=0x220b320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2db6b144, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2db6b144, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x2db6d87b, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x48d0)) returned 1 [0119.833] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0119.833] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-interlocked-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-interlocked-l1-1-0.dll", lpFilePart=0x0) returned 0x6c [0119.833] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0119.833] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-interlocked-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-interlocked-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0119.834] GetFileType (hFile=0x444) returned 0x1 [0119.834] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0119.834] GetFileType (hFile=0x444) returned 0x1 [0119.834] ReadFile (in: hFile=0x444, lpBuffer=0x220d7e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x220d7e0*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0119.853] CloseHandle (hObject=0x444) returned 1 [0119.854] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-interlocked-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-interlocked-l1-1-0.dll", lpFilePart=0x0) returned 0x6c [0119.854] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0119.854] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-interlocked-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-interlocked-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0119.854] GetFileType (hFile=0x444) returned 0x1 [0119.854] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0119.854] GetFileType (hFile=0x444) returned 0x1 [0119.854] WriteFile (in: hFile=0x444, lpBuffer=0x220b4c8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x220b4c8*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0119.855] CloseHandle (hObject=0x444) returned 1 [0119.855] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-interlocked-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-interlocked-l1-1-0.dll", lpFilePart=0x0) returned 0x6c [0119.855] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-interlocked-l1-1-0.dll.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-interlocked-l1-1-0.dll.xuy", lpFilePart=0x0) returned 0x70 [0119.855] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0119.855] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-interlocked-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-interlocked-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2db6b144, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2db6b144, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x33485865, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x48d0)) returned 1 [0119.855] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0119.855] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-interlocked-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-interlocked-l1-1-0.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-interlocked-l1-1-0.dll.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-interlocked-l1-1-0.dll.xuy")) returned 1 [0119.861] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-libraryloader-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-libraryloader-l1-1-0.dll", lpFilePart=0x0) returned 0x6e [0119.861] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0119.861] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-libraryloader-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-libraryloader-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x2289ce8 | out: lpFileInformation=0x2289ce8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2db837eb, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2db837eb, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x2db85f10, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x48d0)) returned 1 [0119.862] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0119.862] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-libraryloader-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-libraryloader-l1-1-0.dll", lpFilePart=0x0) returned 0x6e [0119.862] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0119.862] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-libraryloader-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-libraryloader-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x2289eb8 | out: lpFileInformation=0x2289eb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2db837eb, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2db837eb, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x2db85f10, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x48d0)) returned 1 [0119.862] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0119.862] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-libraryloader-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-libraryloader-l1-1-0.dll", lpFilePart=0x0) returned 0x6e [0119.862] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0119.862] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-libraryloader-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-libraryloader-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0119.863] GetFileType (hFile=0x444) returned 0x1 [0119.863] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0119.863] GetFileType (hFile=0x444) returned 0x1 [0119.863] ReadFile (in: hFile=0x444, lpBuffer=0x228c388, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x228c388*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0119.888] CloseHandle (hObject=0x444) returned 1 [0119.888] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-libraryloader-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-libraryloader-l1-1-0.dll", lpFilePart=0x0) returned 0x6e [0119.888] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0119.888] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-libraryloader-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-libraryloader-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0119.888] GetFileType (hFile=0x444) returned 0x1 [0119.888] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0119.888] GetFileType (hFile=0x444) returned 0x1 [0119.888] WriteFile (in: hFile=0x444, lpBuffer=0x228a068*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x228a068*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0119.888] CloseHandle (hObject=0x444) returned 1 [0119.889] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-libraryloader-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-libraryloader-l1-1-0.dll", lpFilePart=0x0) returned 0x6e [0119.889] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-libraryloader-l1-1-0.dll.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-libraryloader-l1-1-0.dll.xuy", lpFilePart=0x0) returned 0x72 [0119.889] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0119.889] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-libraryloader-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-libraryloader-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2db837eb, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2db837eb, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x334f8145, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x48d0)) returned 1 [0119.889] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0119.889] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-libraryloader-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-libraryloader-l1-1-0.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-libraryloader-l1-1-0.dll.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-libraryloader-l1-1-0.dll.xuy")) returned 1 [0119.890] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-localization-l1-2-0.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-localization-l1-2-0.dll", lpFilePart=0x0) returned 0x6d [0119.890] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0119.890] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-localization-l1-2-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-localization-l1-2-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x2308898 | out: lpFileInformation=0x2308898*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dba0cbe, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2dba0cbe, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x2dba0cbe, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x50d0)) returned 1 [0119.890] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0119.890] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-localization-l1-2-0.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-localization-l1-2-0.dll", lpFilePart=0x0) returned 0x6d [0119.890] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0119.891] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-localization-l1-2-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-localization-l1-2-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x2308a60 | out: lpFileInformation=0x2308a60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dba0cbe, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2dba0cbe, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x2dba0cbe, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x50d0)) returned 1 [0119.891] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0119.891] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-localization-l1-2-0.dll", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-localization-l1-2-0.dll", lpFilePart=0x0) returned 0x6d [0119.891] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0119.891] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-localization-l1-2-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-localization-l1-2-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0119.892] GetFileType (hFile=0x444) returned 0x1 [0119.892] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0119.892] GetFileType (hFile=0x444) returned 0x1 [0119.892] ReadFile (in: hFile=0x444, lpBuffer=0x230af20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x230af20*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0119.982] CloseHandle (hObject=0x444) returned 1 [0119.982] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-localization-l1-2-0.dll", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-localization-l1-2-0.dll", lpFilePart=0x0) returned 0x6d [0119.982] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0119.982] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-localization-l1-2-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-localization-l1-2-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0119.983] GetFileType (hFile=0x444) returned 0x1 [0119.983] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0119.983] GetFileType (hFile=0x444) returned 0x1 [0119.983] WriteFile (in: hFile=0x444, lpBuffer=0x2167b30*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x2167b30*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0119.983] CloseHandle (hObject=0x444) returned 1 [0119.983] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-localization-l1-2-0.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-localization-l1-2-0.dll", lpFilePart=0x0) returned 0x6d [0119.983] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-localization-l1-2-0.dll.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-localization-l1-2-0.dll.xuy", lpFilePart=0x0) returned 0x71 [0119.983] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0119.983] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-localization-l1-2-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-localization-l1-2-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dba0cbe, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2dba0cbe, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x335dcf08, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x50d0)) returned 1 [0119.983] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0119.983] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-localization-l1-2-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-localization-l1-2-0.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-localization-l1-2-0.dll.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-localization-l1-2-0.dll.xuy")) returned 1 [0119.984] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-memory-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-memory-l1-1-0.dll", lpFilePart=0x0) returned 0x67 [0119.984] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0119.985] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-memory-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-memory-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x2187410 | out: lpFileInformation=0x2187410*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dbbba61, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2dbbba61, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x2dbbe18d, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x48d0)) returned 1 [0119.985] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0119.985] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-memory-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-memory-l1-1-0.dll", lpFilePart=0x0) returned 0x67 [0119.985] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0119.985] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-memory-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-memory-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x21875c0 | out: lpFileInformation=0x21875c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dbbba61, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2dbbba61, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x2dbbe18d, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x48d0)) returned 1 [0119.986] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0119.986] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-memory-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-memory-l1-1-0.dll", lpFilePart=0x0) returned 0x67 [0119.986] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0119.986] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-memory-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-memory-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0119.987] GetFileType (hFile=0x444) returned 0x1 [0119.987] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0119.987] GetFileType (hFile=0x444) returned 0x1 [0119.987] ReadFile (in: hFile=0x444, lpBuffer=0x2189a50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x2189a50*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0120.008] CloseHandle (hObject=0x444) returned 1 [0120.008] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-memory-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-memory-l1-1-0.dll", lpFilePart=0x0) returned 0x67 [0120.008] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0120.008] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-memory-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-memory-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0120.008] GetFileType (hFile=0x444) returned 0x1 [0120.008] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0120.009] GetFileType (hFile=0x444) returned 0x1 [0120.009] WriteFile (in: hFile=0x444, lpBuffer=0x2187750*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x2187750*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0120.009] CloseHandle (hObject=0x444) returned 1 [0120.009] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-memory-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-memory-l1-1-0.dll", lpFilePart=0x0) returned 0x67 [0120.009] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-memory-l1-1-0.dll.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-memory-l1-1-0.dll.xuy", lpFilePart=0x0) returned 0x6b [0120.009] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0120.009] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-memory-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-memory-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dbbba61, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2dbbba61, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3360307f, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x48d0)) returned 1 [0120.009] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0120.009] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-memory-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-memory-l1-1-0.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-memory-l1-1-0.dll.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-memory-l1-1-0.dll.xuy")) returned 1 [0120.010] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-namedpipe-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-namedpipe-l1-1-0.dll", lpFilePart=0x0) returned 0x6a [0120.010] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0120.010] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-namedpipe-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-namedpipe-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x2205f10 | out: lpFileInformation=0x2205f10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dbf15e8, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2dbf15e8, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x2dc6ad04, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x46d0)) returned 1 [0120.010] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0120.010] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-namedpipe-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-namedpipe-l1-1-0.dll", lpFilePart=0x0) returned 0x6a [0120.010] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0120.011] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-namedpipe-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-namedpipe-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x22060d0 | out: lpFileInformation=0x22060d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dbf15e8, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2dbf15e8, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x2dc6ad04, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x46d0)) returned 1 [0120.011] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0120.011] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-namedpipe-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-namedpipe-l1-1-0.dll", lpFilePart=0x0) returned 0x6a [0120.011] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0120.011] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-namedpipe-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-namedpipe-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0120.012] GetFileType (hFile=0x444) returned 0x1 [0120.012] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0120.012] GetFileType (hFile=0x444) returned 0x1 [0120.012] ReadFile (in: hFile=0x444, lpBuffer=0x2208580, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x2208580*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0120.035] CloseHandle (hObject=0x444) returned 1 [0120.035] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-namedpipe-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-namedpipe-l1-1-0.dll", lpFilePart=0x0) returned 0x6a [0120.035] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0120.035] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-namedpipe-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-namedpipe-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0120.035] GetFileType (hFile=0x444) returned 0x1 [0120.035] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0120.035] GetFileType (hFile=0x444) returned 0x1 [0120.035] WriteFile (in: hFile=0x444, lpBuffer=0x2206270*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x2206270*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0120.036] CloseHandle (hObject=0x444) returned 1 [0120.036] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-namedpipe-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-namedpipe-l1-1-0.dll", lpFilePart=0x0) returned 0x6a [0120.036] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-namedpipe-l1-1-0.dll.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-namedpipe-l1-1-0.dll.xuy", lpFilePart=0x0) returned 0x6e [0120.036] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0120.036] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-namedpipe-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-namedpipe-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dbf15e8, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2dbf15e8, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3364f5a2, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x46d0)) returned 1 [0120.036] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0120.036] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-namedpipe-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-namedpipe-l1-1-0.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-namedpipe-l1-1-0.dll.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-namedpipe-l1-1-0.dll.xuy")) returned 1 [0120.037] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-processenvironment-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-processenvironment-l1-1-0.dll", lpFilePart=0x0) returned 0x73 [0120.037] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0120.037] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-processenvironment-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-processenvironment-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x2284a68 | out: lpFileInformation=0x2284a68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dc90e63, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2dc90e63, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x2dc90e63, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x4ad0)) returned 1 [0120.038] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0120.038] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-processenvironment-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-processenvironment-l1-1-0.dll", lpFilePart=0x0) returned 0x73 [0120.038] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0120.038] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-processenvironment-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-processenvironment-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x2284c48 | out: lpFileInformation=0x2284c48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dc90e63, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2dc90e63, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x2dc90e63, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x4ad0)) returned 1 [0120.038] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0120.038] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-processenvironment-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-processenvironment-l1-1-0.dll", lpFilePart=0x0) returned 0x73 [0120.038] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0120.038] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-processenvironment-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-processenvironment-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0120.039] GetFileType (hFile=0x444) returned 0x1 [0120.039] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0120.039] GetFileType (hFile=0x444) returned 0x1 [0120.039] ReadFile (in: hFile=0x444, lpBuffer=0x2287138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x2287138*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0120.061] CloseHandle (hObject=0x444) returned 1 [0120.061] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-processenvironment-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-processenvironment-l1-1-0.dll", lpFilePart=0x0) returned 0x73 [0120.061] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0120.061] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-processenvironment-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-processenvironment-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0120.061] GetFileType (hFile=0x444) returned 0x1 [0120.061] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0120.061] GetFileType (hFile=0x444) returned 0x1 [0120.061] WriteFile (in: hFile=0x444, lpBuffer=0x2284e08*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x2284e08*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0120.062] CloseHandle (hObject=0x444) returned 1 [0120.062] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-processenvironment-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-processenvironment-l1-1-0.dll", lpFilePart=0x0) returned 0x73 [0120.062] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-processenvironment-l1-1-0.dll.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-processenvironment-l1-1-0.dll.xuy", lpFilePart=0x0) returned 0x77 [0120.062] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0120.062] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-processenvironment-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-processenvironment-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dc90e63, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2dc90e63, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3369b99d, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x4ad0)) returned 1 [0120.062] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0120.062] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-processenvironment-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-processenvironment-l1-1-0.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-processenvironment-l1-1-0.dll.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-processenvironment-l1-1-0.dll.xuy")) returned 1 [0120.063] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-processthreads-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-processthreads-l1-1-0.dll", lpFilePart=0x0) returned 0x6f [0120.064] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0120.064] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-processthreads-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-processthreads-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x2303670 | out: lpFileInformation=0x2303670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dcdd319, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2dcdd319, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x2dcdd319, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x4ed0)) returned 1 [0120.064] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0120.064] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-processthreads-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-processthreads-l1-1-0.dll", lpFilePart=0x0) returned 0x6f [0120.064] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0120.064] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-processthreads-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-processthreads-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x2303840 | out: lpFileInformation=0x2303840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dcdd319, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2dcdd319, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x2dcdd319, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x4ed0)) returned 1 [0120.064] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0120.064] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-processthreads-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-processthreads-l1-1-0.dll", lpFilePart=0x0) returned 0x6f [0120.064] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0120.064] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-processthreads-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-processthreads-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0120.065] GetFileType (hFile=0x444) returned 0x1 [0120.065] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0120.065] GetFileType (hFile=0x444) returned 0x1 [0120.065] ReadFile (in: hFile=0x444, lpBuffer=0x2305d10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x2305d10*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0120.133] CloseHandle (hObject=0x444) returned 1 [0120.133] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-processthreads-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-processthreads-l1-1-0.dll", lpFilePart=0x0) returned 0x6f [0120.133] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0120.133] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-processthreads-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-processthreads-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0120.133] GetFileType (hFile=0x444) returned 0x1 [0120.133] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0120.133] GetFileType (hFile=0x444) returned 0x1 [0120.133] WriteFile (in: hFile=0x444, lpBuffer=0x2167b30*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x2167b30*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0120.134] CloseHandle (hObject=0x444) returned 1 [0120.134] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-processthreads-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-processthreads-l1-1-0.dll", lpFilePart=0x0) returned 0x6f [0120.134] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-processthreads-l1-1-0.dll.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-processthreads-l1-1-0.dll.xuy", lpFilePart=0x0) returned 0x73 [0120.134] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0120.134] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-processthreads-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-processthreads-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dcdd319, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2dcdd319, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x33734375, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x4ed0)) returned 1 [0120.134] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0120.134] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-processthreads-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-processthreads-l1-1-0.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-processthreads-l1-1-0.dll.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-processthreads-l1-1-0.dll.xuy")) returned 1 [0120.135] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-processthreads-l1-1-1.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-processthreads-l1-1-1.dll", lpFilePart=0x0) returned 0x6f [0120.135] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0120.136] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-processthreads-l1-1-1.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-processthreads-l1-1-1.dll"), fInfoLevelId=0x0, lpFileInformation=0x2182218 | out: lpFileInformation=0x2182218*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd0356e, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2dd0356e, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x2dd0356e, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x48d0)) returned 1 [0120.137] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0120.137] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-processthreads-l1-1-1.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-processthreads-l1-1-1.dll", lpFilePart=0x0) returned 0x6f [0120.137] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0120.137] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-processthreads-l1-1-1.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-processthreads-l1-1-1.dll"), fInfoLevelId=0x0, lpFileInformation=0x21823e8 | out: lpFileInformation=0x21823e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd0356e, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2dd0356e, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x2dd0356e, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x48d0)) returned 1 [0120.138] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0120.138] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-processthreads-l1-1-1.dll", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-processthreads-l1-1-1.dll", lpFilePart=0x0) returned 0x6f [0120.138] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0120.138] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-processthreads-l1-1-1.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-processthreads-l1-1-1.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0120.138] GetFileType (hFile=0x444) returned 0x1 [0120.138] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0120.139] GetFileType (hFile=0x444) returned 0x1 [0120.139] ReadFile (in: hFile=0x444, lpBuffer=0x21848b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x21848b8*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0120.151] CloseHandle (hObject=0x444) returned 1 [0120.151] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-processthreads-l1-1-1.dll", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-processthreads-l1-1-1.dll", lpFilePart=0x0) returned 0x6f [0120.151] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0120.151] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-processthreads-l1-1-1.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-processthreads-l1-1-1.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0120.152] GetFileType (hFile=0x444) returned 0x1 [0120.152] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0120.152] GetFileType (hFile=0x444) returned 0x1 [0120.152] WriteFile (in: hFile=0x444, lpBuffer=0x2182598*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x2182598*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0120.152] CloseHandle (hObject=0x444) returned 1 [0120.152] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-processthreads-l1-1-1.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-processthreads-l1-1-1.dll", lpFilePart=0x0) returned 0x6f [0120.152] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-processthreads-l1-1-1.dll.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-processthreads-l1-1-1.dll.xuy", lpFilePart=0x0) returned 0x73 [0120.152] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0120.152] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-processthreads-l1-1-1.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-processthreads-l1-1-1.dll"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd0356e, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2dd0356e, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3375a485, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x48d0)) returned 1 [0120.152] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0120.152] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-processthreads-l1-1-1.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-processthreads-l1-1-1.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-processthreads-l1-1-1.dll.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-processthreads-l1-1-1.dll.xuy")) returned 1 [0120.154] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-profile-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-profile-l1-1-0.dll", lpFilePart=0x0) returned 0x68 [0120.154] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0120.154] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-profile-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-profile-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x2200dc8 | out: lpFileInformation=0x2200dc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dde841d, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2dde841d, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x2dde841d, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x44d0)) returned 1 [0120.154] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0120.154] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-profile-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-profile-l1-1-0.dll", lpFilePart=0x0) returned 0x68 [0120.154] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0120.154] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-profile-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-profile-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x2200f80 | out: lpFileInformation=0x2200f80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dde841d, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2dde841d, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x2dde841d, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x44d0)) returned 1 [0120.154] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0120.154] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-profile-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-profile-l1-1-0.dll", lpFilePart=0x0) returned 0x68 [0120.154] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0120.154] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-profile-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-profile-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0120.155] GetFileType (hFile=0x444) returned 0x1 [0120.155] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0120.155] GetFileType (hFile=0x444) returned 0x1 [0120.155] ReadFile (in: hFile=0x444, lpBuffer=0x2203420, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x2203420*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0120.181] CloseHandle (hObject=0x444) returned 1 [0120.182] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-profile-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-profile-l1-1-0.dll", lpFilePart=0x0) returned 0x68 [0120.182] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0120.182] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-profile-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-profile-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0120.182] GetFileType (hFile=0x444) returned 0x1 [0120.182] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0120.182] GetFileType (hFile=0x444) returned 0x1 [0120.182] WriteFile (in: hFile=0x444, lpBuffer=0x2201118*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x2201118*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0120.182] CloseHandle (hObject=0x444) returned 1 [0120.183] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-profile-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-profile-l1-1-0.dll", lpFilePart=0x0) returned 0x68 [0120.183] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-profile-l1-1-0.dll.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-profile-l1-1-0.dll.xuy", lpFilePart=0x0) returned 0x6c [0120.183] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0120.183] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-profile-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-profile-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dde841d, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2dde841d, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x337a69ed, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x44d0)) returned 1 [0120.183] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0120.183] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-profile-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-profile-l1-1-0.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-profile-l1-1-0.dll.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-profile-l1-1-0.dll.xuy")) returned 1 [0120.185] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-rtlsupport-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-rtlsupport-l1-1-0.dll", lpFilePart=0x0) returned 0x6b [0120.185] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0120.185] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-rtlsupport-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-rtlsupport-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x227f900 | out: lpFileInformation=0x227f900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2de0e5df, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2de0e5df, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x2de0e5df, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x44c8)) returned 1 [0120.185] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0120.185] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-rtlsupport-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-rtlsupport-l1-1-0.dll", lpFilePart=0x0) returned 0x6b [0120.185] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0120.185] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-rtlsupport-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-rtlsupport-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x227fac0 | out: lpFileInformation=0x227fac0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2de0e5df, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2de0e5df, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x2de0e5df, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x44c8)) returned 1 [0120.185] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0120.185] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-rtlsupport-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-rtlsupport-l1-1-0.dll", lpFilePart=0x0) returned 0x6b [0120.185] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0120.185] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-rtlsupport-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-rtlsupport-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0120.186] GetFileType (hFile=0x444) returned 0x1 [0120.186] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0120.186] GetFileType (hFile=0x444) returned 0x1 [0120.186] ReadFile (in: hFile=0x444, lpBuffer=0x2281f70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x2281f70*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0120.211] CloseHandle (hObject=0x444) returned 1 [0120.211] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-rtlsupport-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-rtlsupport-l1-1-0.dll", lpFilePart=0x0) returned 0x6b [0120.211] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0120.211] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-rtlsupport-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-rtlsupport-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0120.211] GetFileType (hFile=0x444) returned 0x1 [0120.211] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0120.211] GetFileType (hFile=0x444) returned 0x1 [0120.212] WriteFile (in: hFile=0x444, lpBuffer=0x227fc60*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x227fc60*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0120.212] CloseHandle (hObject=0x444) returned 1 [0120.212] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-rtlsupport-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-rtlsupport-l1-1-0.dll", lpFilePart=0x0) returned 0x6b [0120.212] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-rtlsupport-l1-1-0.dll.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-rtlsupport-l1-1-0.dll.xuy", lpFilePart=0x0) returned 0x6f [0120.212] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0120.212] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-rtlsupport-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-rtlsupport-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2de0e5df, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2de0e5df, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x337f2f83, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x44c8)) returned 1 [0120.212] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0120.212] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-rtlsupport-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-rtlsupport-l1-1-0.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-rtlsupport-l1-1-0.dll.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-rtlsupport-l1-1-0.dll.xuy")) returned 1 [0120.214] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-string-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-string-l1-1-0.dll", lpFilePart=0x0) returned 0x67 [0120.214] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0120.214] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-string-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-string-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x22fe458 | out: lpFileInformation=0x22fe458*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dea419e, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2dea419e, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x2dea419e, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x46d0)) returned 1 [0120.215] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0120.215] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-string-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-string-l1-1-0.dll", lpFilePart=0x0) returned 0x67 [0120.216] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0120.216] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-string-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-string-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x22fe608 | out: lpFileInformation=0x22fe608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dea419e, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2dea419e, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x2dea419e, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x46d0)) returned 1 [0120.216] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0120.216] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-string-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-string-l1-1-0.dll", lpFilePart=0x0) returned 0x67 [0120.216] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0120.216] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-string-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-string-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0120.217] GetFileType (hFile=0x444) returned 0x1 [0120.217] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0120.217] GetFileType (hFile=0x444) returned 0x1 [0120.217] ReadFile (in: hFile=0x444, lpBuffer=0x2300a98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x2300a98*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0120.282] CloseHandle (hObject=0x444) returned 1 [0120.282] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-string-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-string-l1-1-0.dll", lpFilePart=0x0) returned 0x67 [0120.282] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0120.282] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-string-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-string-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0120.282] GetFileType (hFile=0x444) returned 0x1 [0120.282] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0120.282] GetFileType (hFile=0x444) returned 0x1 [0120.282] WriteFile (in: hFile=0x444, lpBuffer=0x2167b30*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x2167b30*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0120.283] CloseHandle (hObject=0x444) returned 1 [0120.283] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-string-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-string-l1-1-0.dll", lpFilePart=0x0) returned 0x67 [0120.283] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-string-l1-1-0.dll.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-string-l1-1-0.dll.xuy", lpFilePart=0x0) returned 0x6b [0120.283] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0120.283] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-string-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-string-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dea419e, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2dea419e, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x338b3d5e, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x46d0)) returned 1 [0120.283] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0120.283] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-string-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-string-l1-1-0.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-string-l1-1-0.dll.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-string-l1-1-0.dll.xuy")) returned 1 [0120.284] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-synch-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-synch-l1-1-0.dll", lpFilePart=0x0) returned 0x66 [0120.284] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0120.284] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-synch-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-synch-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x217cf28 | out: lpFileInformation=0x217cf28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2df405b9, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2df405b9, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x2df405b9, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x4ec8)) returned 1 [0120.284] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0120.284] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-synch-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-synch-l1-1-0.dll", lpFilePart=0x0) returned 0x66 [0120.284] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0120.284] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-synch-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-synch-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x217d0d8 | out: lpFileInformation=0x217d0d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2df405b9, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2df405b9, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x2df405b9, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x4ec8)) returned 1 [0120.285] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0120.285] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-synch-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-synch-l1-1-0.dll", lpFilePart=0x0) returned 0x66 [0120.285] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0120.285] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-synch-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-synch-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0120.286] GetFileType (hFile=0x444) returned 0x1 [0120.286] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0120.286] GetFileType (hFile=0x444) returned 0x1 [0120.286] ReadFile (in: hFile=0x444, lpBuffer=0x217f568, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x217f568*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0120.301] CloseHandle (hObject=0x444) returned 1 [0120.301] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-synch-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-synch-l1-1-0.dll", lpFilePart=0x0) returned 0x66 [0120.301] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0120.301] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-synch-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-synch-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0120.302] GetFileType (hFile=0x444) returned 0x1 [0120.302] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0120.302] GetFileType (hFile=0x444) returned 0x1 [0120.302] WriteFile (in: hFile=0x444, lpBuffer=0x217d268*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x217d268*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0120.302] CloseHandle (hObject=0x444) returned 1 [0120.302] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-synch-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-synch-l1-1-0.dll", lpFilePart=0x0) returned 0x66 [0120.302] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-synch-l1-1-0.dll.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-synch-l1-1-0.dll.xuy", lpFilePart=0x0) returned 0x6a [0120.302] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0120.302] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-synch-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-synch-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2df405b9, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2df405b9, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x338d7df6, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x4ec8)) returned 1 [0120.303] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0120.303] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-synch-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-synch-l1-1-0.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-synch-l1-1-0.dll.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-synch-l1-1-0.dll.xuy")) returned 1 [0120.304] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-synch-l1-2-0.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-synch-l1-2-0.dll", lpFilePart=0x0) returned 0x66 [0120.304] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0120.304] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-synch-l1-2-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-synch-l1-2-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x21fba28 | out: lpFileInformation=0x21fba28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2df90ed6, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2df90ed6, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x2df935ff, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x48d0)) returned 1 [0120.304] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0120.304] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-synch-l1-2-0.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-synch-l1-2-0.dll", lpFilePart=0x0) returned 0x66 [0120.304] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0120.304] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-synch-l1-2-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-synch-l1-2-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x21fbbd8 | out: lpFileInformation=0x21fbbd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2df90ed6, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2df90ed6, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x2df935ff, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x48d0)) returned 1 [0120.305] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0120.305] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-synch-l1-2-0.dll", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-synch-l1-2-0.dll", lpFilePart=0x0) returned 0x66 [0120.305] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0120.305] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-synch-l1-2-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-synch-l1-2-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0120.306] GetFileType (hFile=0x444) returned 0x1 [0120.306] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0120.306] GetFileType (hFile=0x444) returned 0x1 [0120.306] ReadFile (in: hFile=0x444, lpBuffer=0x21fe068, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x21fe068*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0120.320] CloseHandle (hObject=0x444) returned 1 [0120.321] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-synch-l1-2-0.dll", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-synch-l1-2-0.dll", lpFilePart=0x0) returned 0x66 [0120.321] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0120.321] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-synch-l1-2-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-synch-l1-2-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0120.321] GetFileType (hFile=0x444) returned 0x1 [0120.321] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0120.321] GetFileType (hFile=0x444) returned 0x1 [0120.321] WriteFile (in: hFile=0x444, lpBuffer=0x21fbd68*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x21fbd68*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0120.321] CloseHandle (hObject=0x444) returned 1 [0120.321] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-synch-l1-2-0.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-synch-l1-2-0.dll", lpFilePart=0x0) returned 0x66 [0120.321] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-synch-l1-2-0.dll.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-synch-l1-2-0.dll.xuy", lpFilePart=0x0) returned 0x6a [0120.321] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0120.322] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-synch-l1-2-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-synch-l1-2-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2df90ed6, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2df90ed6, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x338fe1e3, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x48d0)) returned 1 [0120.322] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0120.322] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-synch-l1-2-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-synch-l1-2-0.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-synch-l1-2-0.dll.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-synch-l1-2-0.dll.xuy")) returned 1 [0120.323] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-sysinfo-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-sysinfo-l1-1-0.dll", lpFilePart=0x0) returned 0x68 [0120.323] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0120.323] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-sysinfo-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-sysinfo-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x227a528 | out: lpFileInformation=0x227a528*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e032124, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2e032124, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x2e034843, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x4ac8)) returned 1 [0120.323] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0120.323] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-sysinfo-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-sysinfo-l1-1-0.dll", lpFilePart=0x0) returned 0x68 [0120.323] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0120.323] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-sysinfo-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-sysinfo-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x227a6e0 | out: lpFileInformation=0x227a6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e032124, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2e032124, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x2e034843, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x4ac8)) returned 1 [0120.323] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0120.323] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-sysinfo-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-sysinfo-l1-1-0.dll", lpFilePart=0x0) returned 0x68 [0120.323] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0120.323] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-sysinfo-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-sysinfo-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0120.324] GetFileType (hFile=0x444) returned 0x1 [0120.324] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0120.324] GetFileType (hFile=0x444) returned 0x1 [0120.324] ReadFile (in: hFile=0x444, lpBuffer=0x227cb80, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x227cb80*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0120.339] CloseHandle (hObject=0x444) returned 1 [0120.340] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-sysinfo-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-sysinfo-l1-1-0.dll", lpFilePart=0x0) returned 0x68 [0120.340] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0120.340] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-sysinfo-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-sysinfo-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0120.340] GetFileType (hFile=0x444) returned 0x1 [0120.341] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0120.341] GetFileType (hFile=0x444) returned 0x1 [0120.341] WriteFile (in: hFile=0x444, lpBuffer=0x227a878*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x227a878*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0120.341] CloseHandle (hObject=0x444) returned 1 [0120.341] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-sysinfo-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-sysinfo-l1-1-0.dll", lpFilePart=0x0) returned 0x68 [0120.341] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-sysinfo-l1-1-0.dll.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-sysinfo-l1-1-0.dll.xuy", lpFilePart=0x0) returned 0x6c [0120.341] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0120.341] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-sysinfo-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-sysinfo-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e032124, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2e032124, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3394a406, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x4ac8)) returned 1 [0120.341] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0120.341] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-sysinfo-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-sysinfo-l1-1-0.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-sysinfo-l1-1-0.dll.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-sysinfo-l1-1-0.dll.xuy")) returned 1 [0120.342] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-timezone-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-timezone-l1-1-0.dll", lpFilePart=0x0) returned 0x69 [0120.343] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0120.343] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-timezone-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-timezone-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x22f9060 | out: lpFileInformation=0x22f9060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e073ff0, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2e073ff0, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x2e073ff0, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x46d0)) returned 1 [0120.343] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0120.343] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-timezone-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-timezone-l1-1-0.dll", lpFilePart=0x0) returned 0x69 [0120.343] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0120.343] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-timezone-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-timezone-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x22f9218 | out: lpFileInformation=0x22f9218*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e073ff0, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2e073ff0, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x2e073ff0, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x46d0)) returned 1 [0120.343] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0120.343] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-timezone-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-timezone-l1-1-0.dll", lpFilePart=0x0) returned 0x69 [0120.344] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0120.344] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-timezone-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-timezone-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0120.344] GetFileType (hFile=0x444) returned 0x1 [0120.344] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0120.344] GetFileType (hFile=0x444) returned 0x1 [0120.344] ReadFile (in: hFile=0x444, lpBuffer=0x22fb6b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x22fb6b8*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0120.393] CloseHandle (hObject=0x444) returned 1 [0120.393] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-timezone-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-timezone-l1-1-0.dll", lpFilePart=0x0) returned 0x69 [0120.393] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0120.393] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-timezone-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-timezone-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0120.393] GetFileType (hFile=0x444) returned 0x1 [0120.393] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0120.393] GetFileType (hFile=0x444) returned 0x1 [0120.393] WriteFile (in: hFile=0x444, lpBuffer=0x2167b30*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x2167b30*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0120.393] CloseHandle (hObject=0x444) returned 1 [0120.394] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-timezone-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-timezone-l1-1-0.dll", lpFilePart=0x0) returned 0x69 [0120.394] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-timezone-l1-1-0.dll.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-timezone-l1-1-0.dll.xuy", lpFilePart=0x0) returned 0x6d [0120.394] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0120.394] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-timezone-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-timezone-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e073ff0, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2e073ff0, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x339bcee6, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x46d0)) returned 1 [0120.394] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0120.394] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-timezone-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-timezone-l1-1-0.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-timezone-l1-1-0.dll.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-timezone-l1-1-0.dll.xuy")) returned 1 [0120.395] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-util-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-util-l1-1-0.dll", lpFilePart=0x0) returned 0x65 [0120.395] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0120.395] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-util-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-util-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x2177b88 | out: lpFileInformation=0x2177b88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e0a9b36, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2e0a9b36, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x2e0a9b36, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x46d0)) returned 1 [0120.395] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0120.395] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-util-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-util-l1-1-0.dll", lpFilePart=0x0) returned 0x65 [0120.395] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0120.395] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-util-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-util-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x2177d30 | out: lpFileInformation=0x2177d30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e0a9b36, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2e0a9b36, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x2e0a9b36, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x46d0)) returned 1 [0120.395] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0120.395] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-util-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-util-l1-1-0.dll", lpFilePart=0x0) returned 0x65 [0120.395] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0120.395] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-util-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-util-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0120.396] GetFileType (hFile=0x444) returned 0x1 [0120.396] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0120.396] GetFileType (hFile=0x444) returned 0x1 [0120.396] ReadFile (in: hFile=0x444, lpBuffer=0x217a1b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x217a1b0*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0120.409] CloseHandle (hObject=0x444) returned 1 [0120.409] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-util-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-util-l1-1-0.dll", lpFilePart=0x0) returned 0x65 [0120.409] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0120.409] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-util-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-util-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0120.410] GetFileType (hFile=0x444) returned 0x1 [0120.410] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0120.410] GetFileType (hFile=0x444) returned 0x1 [0120.410] WriteFile (in: hFile=0x444, lpBuffer=0x2177eb8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x2177eb8*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0120.410] CloseHandle (hObject=0x444) returned 1 [0120.410] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-util-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-util-l1-1-0.dll", lpFilePart=0x0) returned 0x65 [0120.410] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-util-l1-1-0.dll.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-util-l1-1-0.dll.xuy", lpFilePart=0x0) returned 0x69 [0120.410] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0120.410] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-util-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-util-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e0a9b36, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2e0a9b36, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x339e2c58, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x46d0)) returned 1 [0120.410] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0120.410] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-util-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-util-l1-1-0.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-util-l1-1-0.dll.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-util-l1-1-0.dll.xuy")) returned 1 [0120.411] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-conio-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-conio-l1-1-0.dll", lpFilePart=0x0) returned 0x65 [0120.411] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0120.411] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-conio-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-crt-conio-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x21f6668 | out: lpFileInformation=0x21f6668*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e0f563b, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2e0f563b, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x2e0f7d61, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x4ad0)) returned 1 [0120.411] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0120.411] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-conio-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-conio-l1-1-0.dll", lpFilePart=0x0) returned 0x65 [0120.411] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0120.411] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-conio-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-crt-conio-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x21f6810 | out: lpFileInformation=0x21f6810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e0f563b, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2e0f563b, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x2e0f7d61, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x4ad0)) returned 1 [0120.412] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0120.412] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-conio-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-conio-l1-1-0.dll", lpFilePart=0x0) returned 0x65 [0120.412] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0120.412] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-conio-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-crt-conio-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0120.412] GetFileType (hFile=0x444) returned 0x1 [0120.412] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0120.412] GetFileType (hFile=0x444) returned 0x1 [0120.412] ReadFile (in: hFile=0x444, lpBuffer=0x21f8c90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x21f8c90*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0120.437] CloseHandle (hObject=0x444) returned 1 [0120.437] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-conio-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-conio-l1-1-0.dll", lpFilePart=0x0) returned 0x65 [0120.437] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0120.437] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-conio-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-crt-conio-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0120.437] GetFileType (hFile=0x444) returned 0x1 [0120.437] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0120.437] GetFileType (hFile=0x444) returned 0x1 [0120.437] WriteFile (in: hFile=0x444, lpBuffer=0x21f6998*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x21f6998*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0120.437] CloseHandle (hObject=0x444) returned 1 [0120.438] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-conio-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-conio-l1-1-0.dll", lpFilePart=0x0) returned 0x65 [0120.438] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-conio-l1-1-0.dll.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-conio-l1-1-0.dll.xuy", lpFilePart=0x0) returned 0x69 [0120.438] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0120.438] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-conio-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-crt-conio-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e0f563b, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2e0f563b, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x33a2f1eb, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x4ad0)) returned 1 [0120.438] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0120.438] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-conio-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-crt-conio-l1-1-0.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-conio-l1-1-0.dll.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-crt-conio-l1-1-0.dll.xuy")) returned 1 [0120.439] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-convert-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-convert-l1-1-0.dll", lpFilePart=0x0) returned 0x67 [0120.439] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0120.439] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-convert-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-crt-convert-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x2275148 | out: lpFileInformation=0x2275148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e148670, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2e148670, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x2e14fbbb, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x56d0)) returned 1 [0120.439] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0120.439] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-convert-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-convert-l1-1-0.dll", lpFilePart=0x0) returned 0x67 [0120.439] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0120.439] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-convert-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-crt-convert-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x22752f8 | out: lpFileInformation=0x22752f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e148670, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2e148670, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x2e14fbbb, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x56d0)) returned 1 [0120.439] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0120.439] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-convert-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-convert-l1-1-0.dll", lpFilePart=0x0) returned 0x67 [0120.439] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0120.439] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-convert-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-crt-convert-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0120.440] GetFileType (hFile=0x444) returned 0x1 [0120.440] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0120.440] GetFileType (hFile=0x444) returned 0x1 [0120.440] ReadFile (in: hFile=0x444, lpBuffer=0x2277788, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x2277788*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0120.460] CloseHandle (hObject=0x444) returned 1 [0120.460] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-convert-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-convert-l1-1-0.dll", lpFilePart=0x0) returned 0x67 [0120.461] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0120.461] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-convert-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-crt-convert-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0120.461] GetFileType (hFile=0x444) returned 0x1 [0120.461] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0120.461] GetFileType (hFile=0x444) returned 0x1 [0120.461] WriteFile (in: hFile=0x444, lpBuffer=0x2275488*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x2275488*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0120.461] CloseHandle (hObject=0x444) returned 1 [0120.461] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-convert-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-convert-l1-1-0.dll", lpFilePart=0x0) returned 0x67 [0120.461] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-convert-l1-1-0.dll.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-convert-l1-1-0.dll.xuy", lpFilePart=0x0) returned 0x6b [0120.461] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0120.461] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-convert-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-crt-convert-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e148670, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2e148670, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x33a552ff, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x56d0)) returned 1 [0120.462] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0120.462] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-convert-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-crt-convert-l1-1-0.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-convert-l1-1-0.dll.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-crt-convert-l1-1-0.dll.xuy")) returned 1 [0120.463] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-environment-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-environment-l1-1-0.dll", lpFilePart=0x0) returned 0x6b [0120.463] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0120.463] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-environment-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-crt-environment-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x22f3c48 | out: lpFileInformation=0x22f3c48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e16f779, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2e16f779, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x2e183019, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x48d0)) returned 1 [0120.463] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0120.463] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-environment-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-environment-l1-1-0.dll", lpFilePart=0x0) returned 0x6b [0120.464] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0120.464] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-environment-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-crt-environment-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x22f3e08 | out: lpFileInformation=0x22f3e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e16f779, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2e16f779, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x2e183019, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x48d0)) returned 1 [0120.464] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0120.464] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-environment-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-environment-l1-1-0.dll", lpFilePart=0x0) returned 0x6b [0120.464] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0120.464] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-environment-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-crt-environment-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0120.464] GetFileType (hFile=0x444) returned 0x1 [0120.464] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0120.465] GetFileType (hFile=0x444) returned 0x1 [0120.465] ReadFile (in: hFile=0x444, lpBuffer=0x22f62b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x22f62b8*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0120.503] CloseHandle (hObject=0x444) returned 1 [0120.504] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-environment-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-environment-l1-1-0.dll", lpFilePart=0x0) returned 0x6b [0120.504] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0120.504] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-environment-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-crt-environment-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0120.504] GetFileType (hFile=0x444) returned 0x1 [0120.504] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0120.504] GetFileType (hFile=0x444) returned 0x1 [0120.504] WriteFile (in: hFile=0x444, lpBuffer=0x2167b30*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x2167b30*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0120.504] CloseHandle (hObject=0x444) returned 1 [0120.504] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-environment-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-environment-l1-1-0.dll", lpFilePart=0x0) returned 0x6b [0120.504] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-environment-l1-1-0.dll.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-environment-l1-1-0.dll.xuy", lpFilePart=0x0) returned 0x6f [0120.504] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0120.505] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-environment-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-crt-environment-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e16f779, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2e16f779, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x33ac7aca, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x48d0)) returned 1 [0120.505] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0120.505] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-environment-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-crt-environment-l1-1-0.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-environment-l1-1-0.dll.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-crt-environment-l1-1-0.dll.xuy")) returned 1 [0120.506] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-filesystem-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-filesystem-l1-1-0.dll", lpFilePart=0x0) returned 0x6a [0120.506] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0120.506] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-filesystem-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-crt-filesystem-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x2172770 | out: lpFileInformation=0x2172770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e1ceb1b, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2e1ceb1b, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x2e1d392c, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x4ed0)) returned 1 [0120.506] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0120.506] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-filesystem-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-filesystem-l1-1-0.dll", lpFilePart=0x0) returned 0x6a [0120.506] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0120.506] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-filesystem-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-crt-filesystem-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x2172930 | out: lpFileInformation=0x2172930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e1ceb1b, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2e1ceb1b, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x2e1d392c, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x4ed0)) returned 1 [0120.506] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0120.506] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-filesystem-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-filesystem-l1-1-0.dll", lpFilePart=0x0) returned 0x6a [0120.506] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0120.506] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-filesystem-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-crt-filesystem-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0120.507] GetFileType (hFile=0x444) returned 0x1 [0120.507] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0120.507] GetFileType (hFile=0x444) returned 0x1 [0120.507] ReadFile (in: hFile=0x444, lpBuffer=0x2174de0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x2174de0*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0120.543] CloseHandle (hObject=0x444) returned 1 [0120.543] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-filesystem-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-filesystem-l1-1-0.dll", lpFilePart=0x0) returned 0x6a [0120.543] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0120.543] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-filesystem-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-crt-filesystem-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0120.543] GetFileType (hFile=0x444) returned 0x1 [0120.544] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0120.544] GetFileType (hFile=0x444) returned 0x1 [0120.544] WriteFile (in: hFile=0x444, lpBuffer=0x2172ad0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x2172ad0*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0120.544] CloseHandle (hObject=0x444) returned 1 [0120.544] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-filesystem-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-filesystem-l1-1-0.dll", lpFilePart=0x0) returned 0x6a [0120.544] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-filesystem-l1-1-0.dll.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-filesystem-l1-1-0.dll.xuy", lpFilePart=0x0) returned 0x6e [0120.544] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0120.544] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-filesystem-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-crt-filesystem-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e1ceb1b, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2e1ceb1b, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x33b3a284, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x4ed0)) returned 1 [0120.544] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0120.544] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-filesystem-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-crt-filesystem-l1-1-0.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-filesystem-l1-1-0.dll.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-crt-filesystem-l1-1-0.dll.xuy")) returned 1 [0120.546] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-heap-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-heap-l1-1-0.dll", lpFilePart=0x0) returned 0x64 [0120.546] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0120.546] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-heap-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-crt-heap-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x21f12c8 | out: lpFileInformation=0x21f12c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e232cab, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2e232cab, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x2e232cab, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x4ad0)) returned 1 [0120.546] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0120.546] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-heap-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-heap-l1-1-0.dll", lpFilePart=0x0) returned 0x64 [0120.546] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0120.546] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-heap-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-crt-heap-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x21f1470 | out: lpFileInformation=0x21f1470*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e232cab, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2e232cab, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x2e232cab, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x4ad0)) returned 1 [0120.546] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0120.546] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-heap-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-heap-l1-1-0.dll", lpFilePart=0x0) returned 0x64 [0120.546] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0120.546] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-heap-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-crt-heap-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0120.547] GetFileType (hFile=0x444) returned 0x1 [0120.547] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0120.547] GetFileType (hFile=0x444) returned 0x1 [0120.547] ReadFile (in: hFile=0x444, lpBuffer=0x21f38f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x21f38f0*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0120.566] CloseHandle (hObject=0x444) returned 1 [0120.566] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-heap-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-heap-l1-1-0.dll", lpFilePart=0x0) returned 0x64 [0120.566] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0120.566] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-heap-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-crt-heap-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0120.567] GetFileType (hFile=0x444) returned 0x1 [0120.567] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0120.567] GetFileType (hFile=0x444) returned 0x1 [0120.567] WriteFile (in: hFile=0x444, lpBuffer=0x21f15f8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x21f15f8*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0120.567] CloseHandle (hObject=0x444) returned 1 [0120.567] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-heap-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-heap-l1-1-0.dll", lpFilePart=0x0) returned 0x64 [0120.567] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-heap-l1-1-0.dll.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-heap-l1-1-0.dll.xuy", lpFilePart=0x0) returned 0x68 [0120.567] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0120.567] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-heap-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-crt-heap-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e232cab, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2e232cab, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x33b60867, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x4ad0)) returned 1 [0120.568] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0120.568] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-heap-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-crt-heap-l1-1-0.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-heap-l1-1-0.dll.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-crt-heap-l1-1-0.dll.xuy")) returned 1 [0120.569] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-locale-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-locale-l1-1-0.dll", lpFilePart=0x0) returned 0x66 [0120.569] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0120.570] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-locale-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-crt-locale-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x226fda8 | out: lpFileInformation=0x226fda8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e2d3f0b, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2e2d3f0b, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x2e2d661c, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x48d0)) returned 1 [0120.570] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0120.570] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-locale-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-locale-l1-1-0.dll", lpFilePart=0x0) returned 0x66 [0120.570] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0120.570] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-locale-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-crt-locale-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x226ff58 | out: lpFileInformation=0x226ff58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e2d3f0b, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2e2d3f0b, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x2e2d661c, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x48d0)) returned 1 [0120.570] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0120.570] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-locale-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-locale-l1-1-0.dll", lpFilePart=0x0) returned 0x66 [0120.570] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0120.570] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-locale-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-crt-locale-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0120.571] GetFileType (hFile=0x444) returned 0x1 [0120.571] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0120.571] GetFileType (hFile=0x444) returned 0x1 [0120.571] ReadFile (in: hFile=0x444, lpBuffer=0x22723e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x22723e8*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0120.587] CloseHandle (hObject=0x444) returned 1 [0120.587] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-locale-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-locale-l1-1-0.dll", lpFilePart=0x0) returned 0x66 [0120.587] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0120.587] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-locale-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-crt-locale-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0120.587] GetFileType (hFile=0x444) returned 0x1 [0120.587] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0120.587] GetFileType (hFile=0x444) returned 0x1 [0120.587] WriteFile (in: hFile=0x444, lpBuffer=0x22700e8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x22700e8*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0120.587] CloseHandle (hObject=0x444) returned 1 [0120.588] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-locale-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-locale-l1-1-0.dll", lpFilePart=0x0) returned 0x66 [0120.588] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-locale-l1-1-0.dll.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-locale-l1-1-0.dll.xuy", lpFilePart=0x0) returned 0x6a [0120.588] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0120.588] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-locale-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-crt-locale-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e2d3f0b, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2e2d3f0b, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x33b8671e, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x48d0)) returned 1 [0120.588] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0120.588] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-locale-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-crt-locale-l1-1-0.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-locale-l1-1-0.dll.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-crt-locale-l1-1-0.dll.xuy")) returned 1 [0120.589] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-math-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-math-l1-1-0.dll", lpFilePart=0x0) returned 0x64 [0120.589] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0120.589] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-math-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-crt-math-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x22ee8a8 | out: lpFileInformation=0x22ee8a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e2f3ac6, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2e2f3ac6, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x2e307362, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x70d0)) returned 1 [0120.590] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0120.590] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-math-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-math-l1-1-0.dll", lpFilePart=0x0) returned 0x64 [0120.590] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0120.590] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-math-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-crt-math-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x22eea50 | out: lpFileInformation=0x22eea50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e2f3ac6, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2e2f3ac6, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x2e307362, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x70d0)) returned 1 [0120.590] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0120.590] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-math-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-math-l1-1-0.dll", lpFilePart=0x0) returned 0x64 [0120.590] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0120.590] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-math-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-crt-math-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0120.591] GetFileType (hFile=0x444) returned 0x1 [0120.591] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0120.591] GetFileType (hFile=0x444) returned 0x1 [0120.591] ReadFile (in: hFile=0x444, lpBuffer=0x22f0ed0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x22f0ed0*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0120.604] CloseHandle (hObject=0x444) returned 1 [0120.604] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-math-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-math-l1-1-0.dll", lpFilePart=0x0) returned 0x64 [0120.604] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0120.604] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-math-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-crt-math-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0120.604] GetFileType (hFile=0x444) returned 0x1 [0120.604] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0120.604] GetFileType (hFile=0x444) returned 0x1 [0120.604] WriteFile (in: hFile=0x444, lpBuffer=0x22eebd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x22eebd8*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0120.604] CloseHandle (hObject=0x444) returned 1 [0120.605] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-math-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-math-l1-1-0.dll", lpFilePart=0x0) returned 0x64 [0120.608] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-math-l1-1-0.dll.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-math-l1-1-0.dll.xuy", lpFilePart=0x0) returned 0x68 [0120.608] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0120.608] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-math-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-crt-math-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e2f3ac6, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2e2f3ac6, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x33bac818, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x70d0)) returned 1 [0120.608] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0120.608] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-math-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-crt-math-l1-1-0.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-math-l1-1-0.dll.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-crt-math-l1-1-0.dll.xuy")) returned 1 [0120.609] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-multibyte-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-multibyte-l1-1-0.dll", lpFilePart=0x0) returned 0x69 [0120.609] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0120.609] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-multibyte-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-crt-multibyte-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x2167e80 | out: lpFileInformation=0x2167e80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e326f21, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2e326f21, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x2e326f21, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x66d0)) returned 1 [0120.610] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0120.610] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-multibyte-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-multibyte-l1-1-0.dll", lpFilePart=0x0) returned 0x69 [0120.610] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0120.610] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-multibyte-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-crt-multibyte-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x2168038 | out: lpFileInformation=0x2168038*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e326f21, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2e326f21, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x2e326f21, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x66d0)) returned 1 [0120.610] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0120.610] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-multibyte-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-multibyte-l1-1-0.dll", lpFilePart=0x0) returned 0x69 [0120.610] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0120.610] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-multibyte-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-crt-multibyte-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0120.611] GetFileType (hFile=0x444) returned 0x1 [0120.611] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0120.611] GetFileType (hFile=0x444) returned 0x1 [0120.611] ReadFile (in: hFile=0x444, lpBuffer=0x216a4d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x216a4d8*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0120.663] CloseHandle (hObject=0x444) returned 1 [0120.663] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-multibyte-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-multibyte-l1-1-0.dll", lpFilePart=0x0) returned 0x69 [0120.663] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0120.663] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-multibyte-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-crt-multibyte-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0120.664] GetFileType (hFile=0x444) returned 0x1 [0120.664] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0120.664] GetFileType (hFile=0x444) returned 0x1 [0120.664] WriteFile (in: hFile=0x444, lpBuffer=0x21681d0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x21681d0*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0120.664] CloseHandle (hObject=0x444) returned 1 [0120.664] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-multibyte-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-multibyte-l1-1-0.dll", lpFilePart=0x0) returned 0x69 [0120.664] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-multibyte-l1-1-0.dll.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-multibyte-l1-1-0.dll.xuy", lpFilePart=0x0) returned 0x6d [0120.664] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0120.664] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-multibyte-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-crt-multibyte-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e326f21, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2e326f21, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x33c45392, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x66d0)) returned 1 [0120.664] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0120.664] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-multibyte-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-crt-multibyte-l1-1-0.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-multibyte-l1-1-0.dll.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-crt-multibyte-l1-1-0.dll.xuy")) returned 1 [0120.665] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-private-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-private-l1-1-0.dll", lpFilePart=0x0) returned 0x67 [0120.665] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0120.665] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-private-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-crt-private-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x21e69b8 | out: lpFileInformation=0x21e69b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e349219, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2e349219, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x2e349219, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x11cc8)) returned 1 [0120.666] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0120.666] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-private-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-private-l1-1-0.dll", lpFilePart=0x0) returned 0x67 [0120.666] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0120.666] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-private-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-crt-private-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x21e6b68 | out: lpFileInformation=0x21e6b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e349219, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2e349219, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x2e349219, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x11cc8)) returned 1 [0120.666] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0120.666] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-private-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-private-l1-1-0.dll", lpFilePart=0x0) returned 0x67 [0120.666] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0120.666] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-private-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-crt-private-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0120.667] GetFileType (hFile=0x444) returned 0x1 [0120.667] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0120.667] GetFileType (hFile=0x444) returned 0x1 [0120.667] ReadFile (in: hFile=0x444, lpBuffer=0x21e8ff8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x21e8ff8*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0120.687] CloseHandle (hObject=0x444) returned 1 [0120.687] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-private-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-private-l1-1-0.dll", lpFilePart=0x0) returned 0x67 [0120.687] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0120.687] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-private-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-crt-private-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0120.687] GetFileType (hFile=0x444) returned 0x1 [0120.687] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0120.687] GetFileType (hFile=0x444) returned 0x1 [0120.687] WriteFile (in: hFile=0x444, lpBuffer=0x21e6cf8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x21e6cf8*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0120.687] CloseHandle (hObject=0x444) returned 1 [0120.688] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-private-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-private-l1-1-0.dll", lpFilePart=0x0) returned 0x67 [0120.688] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-private-l1-1-0.dll.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-private-l1-1-0.dll.xuy", lpFilePart=0x0) returned 0x6b [0120.688] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0120.688] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-private-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-crt-private-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e349219, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2e349219, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x33c91b41, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x11cc8)) returned 1 [0120.688] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0120.688] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-private-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-crt-private-l1-1-0.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-private-l1-1-0.dll.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-crt-private-l1-1-0.dll.xuy")) returned 1 [0120.689] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-process-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-process-l1-1-0.dll", lpFilePart=0x0) returned 0x67 [0120.689] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0120.689] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-process-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-crt-process-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x22654b8 | out: lpFileInformation=0x22654b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e3666cd, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2e3666cd, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x2e368df6, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x4ad0)) returned 1 [0120.689] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0120.689] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-process-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-process-l1-1-0.dll", lpFilePart=0x0) returned 0x67 [0120.689] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0120.689] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-process-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-crt-process-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x2265668 | out: lpFileInformation=0x2265668*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e3666cd, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2e3666cd, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x2e368df6, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x4ad0)) returned 1 [0120.689] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0120.689] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-process-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-process-l1-1-0.dll", lpFilePart=0x0) returned 0x67 [0120.689] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0120.689] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-process-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-crt-process-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0120.690] GetFileType (hFile=0x444) returned 0x1 [0120.690] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0120.690] GetFileType (hFile=0x444) returned 0x1 [0120.690] ReadFile (in: hFile=0x444, lpBuffer=0x2267af8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x2267af8*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0120.712] CloseHandle (hObject=0x444) returned 1 [0120.712] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-process-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-process-l1-1-0.dll", lpFilePart=0x0) returned 0x67 [0120.712] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0120.712] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-process-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-crt-process-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0120.713] GetFileType (hFile=0x444) returned 0x1 [0120.713] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0120.713] GetFileType (hFile=0x444) returned 0x1 [0120.713] WriteFile (in: hFile=0x444, lpBuffer=0x22657f8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x22657f8*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0120.713] CloseHandle (hObject=0x444) returned 1 [0120.713] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-process-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-process-l1-1-0.dll", lpFilePart=0x0) returned 0x67 [0120.713] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-process-l1-1-0.dll.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-process-l1-1-0.dll.xuy", lpFilePart=0x0) returned 0x6b [0120.713] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0120.713] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-process-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-crt-process-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e3666cd, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2e3666cd, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x33cb7997, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x4ad0)) returned 1 [0120.713] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0120.713] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-process-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-crt-process-l1-1-0.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-process-l1-1-0.dll.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-crt-process-l1-1-0.dll.xuy")) returned 1 [0120.714] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-runtime-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-runtime-l1-1-0.dll", lpFilePart=0x0) returned 0x67 [0120.714] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0120.714] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-runtime-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-crt-runtime-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x22e3fb8 | out: lpFileInformation=0x22e3fb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e388a00, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2e388a00, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x2e388a00, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x58d0)) returned 1 [0120.715] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0120.715] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-runtime-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-runtime-l1-1-0.dll", lpFilePart=0x0) returned 0x67 [0120.715] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0120.715] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-runtime-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-crt-runtime-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x22e4168 | out: lpFileInformation=0x22e4168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e388a00, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2e388a00, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x2e388a00, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x58d0)) returned 1 [0120.716] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0120.716] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-runtime-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-runtime-l1-1-0.dll", lpFilePart=0x0) returned 0x67 [0120.716] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0120.716] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-runtime-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-crt-runtime-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0120.716] GetFileType (hFile=0x444) returned 0x1 [0120.716] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0120.716] GetFileType (hFile=0x444) returned 0x1 [0120.717] ReadFile (in: hFile=0x444, lpBuffer=0x22e65f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x22e65f8*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0120.745] CloseHandle (hObject=0x444) returned 1 [0120.745] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-runtime-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-runtime-l1-1-0.dll", lpFilePart=0x0) returned 0x67 [0120.745] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0120.745] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-runtime-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-crt-runtime-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0120.746] GetFileType (hFile=0x444) returned 0x1 [0120.746] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0120.746] GetFileType (hFile=0x444) returned 0x1 [0120.746] WriteFile (in: hFile=0x444, lpBuffer=0x22e42f8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x22e42f8*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0120.746] CloseHandle (hObject=0x444) returned 1 [0120.746] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-runtime-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-runtime-l1-1-0.dll", lpFilePart=0x0) returned 0x67 [0120.746] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-runtime-l1-1-0.dll.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-runtime-l1-1-0.dll.xuy", lpFilePart=0x0) returned 0x6b [0120.746] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0120.746] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-runtime-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-crt-runtime-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e388a00, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2e388a00, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x33d03e98, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x58d0)) returned 1 [0120.747] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0120.747] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-runtime-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-crt-runtime-l1-1-0.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-runtime-l1-1-0.dll.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-crt-runtime-l1-1-0.dll.xuy")) returned 1 [0120.748] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-stdio-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-stdio-l1-1-0.dll", lpFilePart=0x0) returned 0x65 [0120.748] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0120.748] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-stdio-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-crt-stdio-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x2362ab8 | out: lpFileInformation=0x2362ab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e3aacad, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2e3aacad, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x2e3aacad, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x5ed0)) returned 1 [0120.748] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0120.748] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-stdio-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-stdio-l1-1-0.dll", lpFilePart=0x0) returned 0x65 [0120.748] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0120.748] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-stdio-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-crt-stdio-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x2362c60 | out: lpFileInformation=0x2362c60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e3aacad, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2e3aacad, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x2e3aacad, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x5ed0)) returned 1 [0120.748] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0120.748] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-stdio-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-stdio-l1-1-0.dll", lpFilePart=0x0) returned 0x65 [0120.748] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0120.748] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-stdio-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-crt-stdio-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0120.749] GetFileType (hFile=0x444) returned 0x1 [0120.749] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0120.749] GetFileType (hFile=0x444) returned 0x1 [0120.749] ReadFile (in: hFile=0x444, lpBuffer=0x23650e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x23650e0*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0120.795] CloseHandle (hObject=0x444) returned 1 [0120.795] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-stdio-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-stdio-l1-1-0.dll", lpFilePart=0x0) returned 0x65 [0120.795] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0120.795] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-stdio-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-crt-stdio-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0120.795] GetFileType (hFile=0x444) returned 0x1 [0120.795] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0120.795] GetFileType (hFile=0x444) returned 0x1 [0120.795] WriteFile (in: hFile=0x444, lpBuffer=0x2167b30*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x2167b30*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0120.796] CloseHandle (hObject=0x444) returned 1 [0120.796] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-stdio-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-stdio-l1-1-0.dll", lpFilePart=0x0) returned 0x65 [0120.796] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-stdio-l1-1-0.dll.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-stdio-l1-1-0.dll.xuy", lpFilePart=0x0) returned 0x69 [0120.796] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0120.796] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-stdio-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-crt-stdio-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e3aacad, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2e3aacad, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x33d9c94d, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x5ed0)) returned 1 [0120.796] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0120.796] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-stdio-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-crt-stdio-l1-1-0.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-stdio-l1-1-0.dll.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-crt-stdio-l1-1-0.dll.xuy")) returned 1 [0120.797] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-string-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-string-l1-1-0.dll", lpFilePart=0x0) returned 0x66 [0120.797] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0120.797] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-string-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-crt-string-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x21e4ab8 | out: lpFileInformation=0x21e4ab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e3ccf94, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2e3ccf94, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x2e3ccf94, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x5ed0)) returned 1 [0120.797] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0120.797] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-string-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-string-l1-1-0.dll", lpFilePart=0x0) returned 0x66 [0120.797] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0120.797] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-string-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-crt-string-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x21e4c68 | out: lpFileInformation=0x21e4c68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e3ccf94, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2e3ccf94, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x2e3ccf94, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x5ed0)) returned 1 [0120.797] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0120.798] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-string-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-string-l1-1-0.dll", lpFilePart=0x0) returned 0x66 [0120.798] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0120.798] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-string-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-crt-string-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0120.798] GetFileType (hFile=0x444) returned 0x1 [0120.798] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0120.798] GetFileType (hFile=0x444) returned 0x1 [0120.798] ReadFile (in: hFile=0x444, lpBuffer=0x21e70f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x21e70f8*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0120.824] CloseHandle (hObject=0x444) returned 1 [0120.825] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-string-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-string-l1-1-0.dll", lpFilePart=0x0) returned 0x66 [0120.825] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0120.825] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-string-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-crt-string-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0120.825] GetFileType (hFile=0x444) returned 0x1 [0120.825] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0120.825] GetFileType (hFile=0x444) returned 0x1 [0120.825] WriteFile (in: hFile=0x444, lpBuffer=0x21e4df8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x21e4df8*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0120.825] CloseHandle (hObject=0x444) returned 1 [0120.825] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-string-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-string-l1-1-0.dll", lpFilePart=0x0) returned 0x66 [0120.825] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-string-l1-1-0.dll.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-string-l1-1-0.dll.xuy", lpFilePart=0x0) returned 0x6a [0120.825] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0120.826] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-string-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-crt-string-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e3ccf94, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2e3ccf94, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x33de8cff, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x5ed0)) returned 1 [0120.826] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0120.826] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-string-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-crt-string-l1-1-0.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-string-l1-1-0.dll.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-crt-string-l1-1-0.dll.xuy")) returned 1 [0120.827] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-time-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-time-l1-1-0.dll", lpFilePart=0x0) returned 0x64 [0120.827] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0120.827] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-time-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-crt-time-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x22635b8 | out: lpFileInformation=0x22635b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e3ef267, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2e3ef267, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x2e3ef267, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x50d0)) returned 1 [0120.827] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0120.827] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-time-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-time-l1-1-0.dll", lpFilePart=0x0) returned 0x64 [0120.827] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0120.827] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-time-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-crt-time-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x2263760 | out: lpFileInformation=0x2263760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e3ef267, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2e3ef267, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x2e3ef267, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x50d0)) returned 1 [0120.827] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0120.827] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-time-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-time-l1-1-0.dll", lpFilePart=0x0) returned 0x64 [0120.827] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0120.827] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-time-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-crt-time-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0120.828] GetFileType (hFile=0x444) returned 0x1 [0120.828] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0120.828] GetFileType (hFile=0x444) returned 0x1 [0120.828] ReadFile (in: hFile=0x444, lpBuffer=0x2265be0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x2265be0*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0120.840] CloseHandle (hObject=0x444) returned 1 [0120.841] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-time-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-time-l1-1-0.dll", lpFilePart=0x0) returned 0x64 [0120.841] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0120.841] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-time-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-crt-time-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0120.841] GetFileType (hFile=0x444) returned 0x1 [0120.841] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0120.841] GetFileType (hFile=0x444) returned 0x1 [0120.841] WriteFile (in: hFile=0x444, lpBuffer=0x22638e8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x22638e8*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0120.841] CloseHandle (hObject=0x444) returned 1 [0120.841] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-time-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-time-l1-1-0.dll", lpFilePart=0x0) returned 0x64 [0120.841] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-time-l1-1-0.dll.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-time-l1-1-0.dll.xuy", lpFilePart=0x0) returned 0x68 [0120.841] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0120.842] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-time-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-crt-time-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e3ef267, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2e3ef267, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x33e0f004, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x50d0)) returned 1 [0120.842] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0120.842] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-time-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-crt-time-l1-1-0.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-time-l1-1-0.dll.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-crt-time-l1-1-0.dll.xuy")) returned 1 [0120.843] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-utility-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-utility-l1-1-0.dll", lpFilePart=0x0) returned 0x67 [0120.843] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0120.843] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-utility-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-crt-utility-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x22e2098 | out: lpFileInformation=0x22e2098*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e427503, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2e427503, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x2e429c17, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x48d0)) returned 1 [0120.843] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0120.844] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-utility-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-utility-l1-1-0.dll", lpFilePart=0x0) returned 0x67 [0120.844] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0120.844] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-utility-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-crt-utility-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x22e2248 | out: lpFileInformation=0x22e2248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e427503, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2e427503, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x2e429c17, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x48d0)) returned 1 [0120.844] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0120.844] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-utility-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-utility-l1-1-0.dll", lpFilePart=0x0) returned 0x67 [0120.844] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0120.844] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-utility-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-crt-utility-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0120.845] GetFileType (hFile=0x444) returned 0x1 [0120.845] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0120.845] GetFileType (hFile=0x444) returned 0x1 [0120.845] ReadFile (in: hFile=0x444, lpBuffer=0x22e46d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x22e46d8*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0120.857] CloseHandle (hObject=0x444) returned 1 [0120.857] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-utility-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-utility-l1-1-0.dll", lpFilePart=0x0) returned 0x67 [0120.857] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0120.857] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-utility-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-crt-utility-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0120.858] GetFileType (hFile=0x444) returned 0x1 [0120.858] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0120.858] GetFileType (hFile=0x444) returned 0x1 [0120.858] WriteFile (in: hFile=0x444, lpBuffer=0x22e23d8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x22e23d8*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0120.858] CloseHandle (hObject=0x444) returned 1 [0120.858] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-utility-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-utility-l1-1-0.dll", lpFilePart=0x0) returned 0x67 [0120.858] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-utility-l1-1-0.dll.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-utility-l1-1-0.dll.xuy", lpFilePart=0x0) returned 0x6b [0120.858] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0120.858] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-utility-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-crt-utility-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e427503, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2e427503, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x33e352ce, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x48d0)) returned 1 [0120.858] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0120.858] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-utility-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-crt-utility-l1-1-0.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-utility-l1-1-0.dll.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-crt-utility-l1-1-0.dll.xuy")) returned 1 [0120.859] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AppBlue.png", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AppBlue.png", lpFilePart=0x0) returned 0x51 [0120.859] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0120.859] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AppBlue.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\appblue.png"), fInfoLevelId=0x0, lpFileInformation=0x2360b98 | out: lpFileInformation=0x2360b98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e4b9ce4, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2e4b9ce4, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x2e4bc3ff, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x157b)) returned 1 [0120.860] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0120.860] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AppBlue.png", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AppBlue.png", lpFilePart=0x0) returned 0x51 [0120.860] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0120.860] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AppBlue.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\appblue.png"), fInfoLevelId=0x0, lpFileInformation=0x2360cf0 | out: lpFileInformation=0x2360cf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e4b9ce4, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2e4b9ce4, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x2e4bc3ff, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x157b)) returned 1 [0120.860] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0120.860] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AppBlue.png", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AppBlue.png", lpFilePart=0x0) returned 0x51 [0120.860] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0120.860] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AppBlue.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\appblue.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0120.861] GetFileType (hFile=0x444) returned 0x1 [0120.861] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0120.861] GetFileType (hFile=0x444) returned 0x1 [0120.861] ReadFile (in: hFile=0x444, lpBuffer=0x23630d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x23630d0*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0120.905] CloseHandle (hObject=0x444) returned 1 [0120.905] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AppBlue.png", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AppBlue.png", lpFilePart=0x0) returned 0x51 [0120.905] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0120.905] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AppBlue.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\appblue.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0120.905] GetFileType (hFile=0x444) returned 0x1 [0120.905] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0120.905] GetFileType (hFile=0x444) returned 0x1 [0120.905] WriteFile (in: hFile=0x444, lpBuffer=0x2167b30*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x2167b30*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0120.906] CloseHandle (hObject=0x444) returned 1 [0120.906] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AppBlue.png", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AppBlue.png", lpFilePart=0x0) returned 0x51 [0120.906] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AppBlue.png.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AppBlue.png.xuy", lpFilePart=0x0) returned 0x55 [0120.906] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0120.906] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AppBlue.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\appblue.png"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e4b9ce4, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2e4b9ce4, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x33ea7ca2, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0120.906] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0120.906] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AppBlue.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\appblue.png"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AppBlue.png.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\appblue.png.xuy")) returned 1 [0120.907] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AppErrorBlue.png", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AppErrorBlue.png", lpFilePart=0x0) returned 0x56 [0120.907] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0120.907] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AppErrorBlue.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\apperrorblue.png"), fInfoLevelId=0x0, lpFileInformation=0x21df4b0 | out: lpFileInformation=0x21df4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e51424f, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2e51424f, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x2e567284, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x1d96)) returned 1 [0120.907] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0120.908] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AppErrorBlue.png", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AppErrorBlue.png", lpFilePart=0x0) returned 0x56 [0120.908] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0120.908] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AppErrorBlue.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\apperrorblue.png"), fInfoLevelId=0x0, lpFileInformation=0x21df620 | out: lpFileInformation=0x21df620*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e51424f, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2e51424f, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x2e567284, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x1d96)) returned 1 [0120.908] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0120.908] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AppErrorBlue.png", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AppErrorBlue.png", lpFilePart=0x0) returned 0x56 [0120.908] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0120.908] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AppErrorBlue.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\apperrorblue.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0120.908] GetFileType (hFile=0x444) returned 0x1 [0120.909] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0120.909] GetFileType (hFile=0x444) returned 0x1 [0120.909] ReadFile (in: hFile=0x444, lpBuffer=0x21e1a30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x21e1a30*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0120.942] CloseHandle (hObject=0x444) returned 1 [0120.943] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AppErrorBlue.png", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AppErrorBlue.png", lpFilePart=0x0) returned 0x56 [0120.943] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0120.943] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AppErrorBlue.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\apperrorblue.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0120.943] GetFileType (hFile=0x444) returned 0x1 [0120.943] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0120.943] GetFileType (hFile=0x444) returned 0x1 [0120.943] WriteFile (in: hFile=0x444, lpBuffer=0x21df770*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x21df770*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0120.943] CloseHandle (hObject=0x444) returned 1 [0120.943] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AppErrorBlue.png", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AppErrorBlue.png", lpFilePart=0x0) returned 0x56 [0120.943] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AppErrorBlue.png.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AppErrorBlue.png.xuy", lpFilePart=0x0) returned 0x5a [0120.943] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0120.944] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AppErrorBlue.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\apperrorblue.png"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e51424f, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2e51424f, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x33ef3d49, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0120.944] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0120.944] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AppErrorBlue.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\apperrorblue.png"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AppErrorBlue.png.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\apperrorblue.png.xuy")) returned 1 [0120.945] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AppErrorWhite.png", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AppErrorWhite.png", lpFilePart=0x0) returned 0x57 [0120.945] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0120.945] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AppErrorWhite.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\apperrorwhite.png"), fInfoLevelId=0x0, lpFileInformation=0x225de50 | out: lpFileInformation=0x225de50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e631d78, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2e631d78, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x2e6343f0, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x2062)) returned 1 [0120.945] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0120.945] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AppErrorWhite.png", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AppErrorWhite.png", lpFilePart=0x0) returned 0x57 [0120.945] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0120.945] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AppErrorWhite.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\apperrorwhite.png"), fInfoLevelId=0x0, lpFileInformation=0x225dfc0 | out: lpFileInformation=0x225dfc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e631d78, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2e631d78, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x2e6343f0, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x2062)) returned 1 [0120.945] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0120.945] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AppErrorWhite.png", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AppErrorWhite.png", lpFilePart=0x0) returned 0x57 [0120.945] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0120.945] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AppErrorWhite.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\apperrorwhite.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0120.946] GetFileType (hFile=0x444) returned 0x1 [0120.946] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0120.946] GetFileType (hFile=0x444) returned 0x1 [0120.946] ReadFile (in: hFile=0x444, lpBuffer=0x22603d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x22603d0*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0120.958] CloseHandle (hObject=0x444) returned 1 [0120.958] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AppErrorWhite.png", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AppErrorWhite.png", lpFilePart=0x0) returned 0x57 [0120.958] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0120.958] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AppErrorWhite.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\apperrorwhite.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0120.959] GetFileType (hFile=0x444) returned 0x1 [0120.959] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0120.959] GetFileType (hFile=0x444) returned 0x1 [0120.959] WriteFile (in: hFile=0x444, lpBuffer=0x225e110*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x225e110*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0120.959] CloseHandle (hObject=0x444) returned 1 [0120.959] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AppErrorWhite.png", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AppErrorWhite.png", lpFilePart=0x0) returned 0x57 [0120.959] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AppErrorWhite.png.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AppErrorWhite.png.xuy", lpFilePart=0x0) returned 0x5b [0120.959] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0120.959] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AppErrorWhite.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\apperrorwhite.png"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e631d78, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2e631d78, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x33f19e99, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2062)) returned 1 [0120.960] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0120.960] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AppErrorWhite.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\apperrorwhite.png"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AppErrorWhite.png.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\apperrorwhite.png.xuy")) returned 1 [0120.961] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AppWhite.png", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AppWhite.png", lpFilePart=0x0) returned 0x52 [0120.961] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0120.961] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AppWhite.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\appwhite.png"), fInfoLevelId=0x0, lpFileInformation=0x22dc7f0 | out: lpFileInformation=0x22dc7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e6b333f, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2e6b333f, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x2e6b333f, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0xbeb)) returned 1 [0120.961] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0120.961] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AppWhite.png", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AppWhite.png", lpFilePart=0x0) returned 0x52 [0120.961] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0120.961] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AppWhite.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\appwhite.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0120.962] GetFileType (hFile=0x444) returned 0x1 [0120.962] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0120.962] GetFileType (hFile=0x444) returned 0x1 [0120.962] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0xbeb [0120.962] ReadFile (in: hFile=0x444, lpBuffer=0x22dd6b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be718, lpOverlapped=0x0 | out: lpBuffer=0x22dd6b8*, lpNumberOfBytesRead=0x3be718*=0xbeb, lpOverlapped=0x0) returned 1 [0120.979] CloseHandle (hObject=0x444) returned 1 [0120.990] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AppWhite.png", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AppWhite.png", lpFilePart=0x0) returned 0x52 [0120.990] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0120.990] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AppWhite.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\appwhite.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0120.993] GetFileType (hFile=0x444) returned 0x1 [0120.993] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0120.994] GetFileType (hFile=0x444) returned 0x1 [0120.994] WriteFile (in: hFile=0x444, lpBuffer=0x2358258*, nNumberOfBytesToWrite=0xbf0, lpNumberOfBytesWritten=0x3be628, lpOverlapped=0x0 | out: lpBuffer=0x2358258*, lpNumberOfBytesWritten=0x3be628*=0xbf0, lpOverlapped=0x0) returned 1 [0120.994] CloseHandle (hObject=0x444) returned 1 [0120.995] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AppWhite.png", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AppWhite.png", lpFilePart=0x0) returned 0x52 [0120.995] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AppWhite.png.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AppWhite.png.xuy", lpFilePart=0x0) returned 0x56 [0120.995] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0120.995] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AppWhite.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\appwhite.png"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e6b333f, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2e6b333f, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x33f66332, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xbf0)) returned 1 [0120.995] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0120.995] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AppWhite.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\appwhite.png"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AppWhite.png.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\appwhite.png.xuy")) returned 1 [0120.996] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AutoPlayOptIn.gif", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AutoPlayOptIn.gif", lpFilePart=0x0) returned 0x57 [0120.996] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0120.996] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AutoPlayOptIn.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\autoplayoptin.gif"), fInfoLevelId=0x0, lpFileInformation=0x2359508 | out: lpFileInformation=0x2359508*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e6df26e, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2e6df26e, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x2e6e1990, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x5d8f6)) returned 1 [0120.996] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0120.996] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AutoPlayOptIn.gif", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AutoPlayOptIn.gif", lpFilePart=0x0) returned 0x57 [0120.997] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0120.997] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AutoPlayOptIn.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\autoplayoptin.gif"), fInfoLevelId=0x0, lpFileInformation=0x2359678 | out: lpFileInformation=0x2359678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e6df26e, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2e6df26e, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x2e6e1990, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x5d8f6)) returned 1 [0120.997] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0120.997] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AutoPlayOptIn.gif", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AutoPlayOptIn.gif", lpFilePart=0x0) returned 0x57 [0120.997] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0120.997] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AutoPlayOptIn.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\autoplayoptin.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0120.998] GetFileType (hFile=0x444) returned 0x1 [0120.998] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0120.998] GetFileType (hFile=0x444) returned 0x1 [0120.998] ReadFile (in: hFile=0x444, lpBuffer=0x235ba88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x235ba88*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0121.058] CloseHandle (hObject=0x444) returned 1 [0121.058] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AutoPlayOptIn.gif", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AutoPlayOptIn.gif", lpFilePart=0x0) returned 0x57 [0121.058] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0121.058] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AutoPlayOptIn.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\autoplayoptin.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0121.059] GetFileType (hFile=0x444) returned 0x1 [0121.059] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0121.059] GetFileType (hFile=0x444) returned 0x1 [0121.059] WriteFile (in: hFile=0x444, lpBuffer=0x2167b30*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x2167b30*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0121.059] CloseHandle (hObject=0x444) returned 1 [0121.059] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AutoPlayOptIn.gif", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AutoPlayOptIn.gif", lpFilePart=0x0) returned 0x57 [0121.060] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AutoPlayOptIn.gif.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AutoPlayOptIn.gif.xuy", lpFilePart=0x0) returned 0x5b [0121.060] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0121.060] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AutoPlayOptIn.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\autoplayoptin.gif"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e6df26e, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2e6df26e, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x34025006, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x5d8f6)) returned 1 [0121.060] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0121.060] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AutoPlayOptIn.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\autoplayoptin.gif"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AutoPlayOptIn.gif.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\autoplayoptin.gif.xuy")) returned 1 [0121.061] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AutoPlayOptIn.png", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AutoPlayOptIn.png", lpFilePart=0x0) returned 0x57 [0121.061] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0121.061] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AutoPlayOptIn.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\autoplayoptin.png"), fInfoLevelId=0x0, lpFileInformation=0x21d7e90 | out: lpFileInformation=0x21d7e90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e706362, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2e706362, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x2e706362, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x27f2)) returned 1 [0121.061] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0121.061] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AutoPlayOptIn.png", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AutoPlayOptIn.png", lpFilePart=0x0) returned 0x57 [0121.061] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0121.061] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AutoPlayOptIn.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\autoplayoptin.png"), fInfoLevelId=0x0, lpFileInformation=0x21d8000 | out: lpFileInformation=0x21d8000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e706362, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2e706362, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x2e706362, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x27f2)) returned 1 [0121.061] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0121.061] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AutoPlayOptIn.png", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AutoPlayOptIn.png", lpFilePart=0x0) returned 0x57 [0121.061] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0121.061] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AutoPlayOptIn.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\autoplayoptin.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0121.062] GetFileType (hFile=0x444) returned 0x1 [0121.062] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0121.062] GetFileType (hFile=0x444) returned 0x1 [0121.062] ReadFile (in: hFile=0x444, lpBuffer=0x21da410, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x21da410*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0121.087] CloseHandle (hObject=0x444) returned 1 [0121.088] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AutoPlayOptIn.png", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AutoPlayOptIn.png", lpFilePart=0x0) returned 0x57 [0121.088] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0121.088] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AutoPlayOptIn.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\autoplayoptin.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0121.088] GetFileType (hFile=0x444) returned 0x1 [0121.088] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0121.088] GetFileType (hFile=0x444) returned 0x1 [0121.088] WriteFile (in: hFile=0x444, lpBuffer=0x21d8150*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x21d8150*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0121.088] CloseHandle (hObject=0x444) returned 1 [0121.088] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AutoPlayOptIn.png", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AutoPlayOptIn.png", lpFilePart=0x0) returned 0x57 [0121.089] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AutoPlayOptIn.png.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AutoPlayOptIn.png.xuy", lpFilePart=0x0) returned 0x5b [0121.089] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0121.089] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AutoPlayOptIn.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\autoplayoptin.png"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e706362, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2e706362, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3404b2e8, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x27f2)) returned 1 [0121.089] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0121.089] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AutoPlayOptIn.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\autoplayoptin.png"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AutoPlayOptIn.png.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\autoplayoptin.png.xuy")) returned 1 [0121.090] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\CollectSyncLogs.bat", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\CollectSyncLogs.bat", lpFilePart=0x0) returned 0x59 [0121.090] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0121.090] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\CollectSyncLogs.bat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\collectsynclogs.bat"), fInfoLevelId=0x0, lpFileInformation=0x2256830 | out: lpFileInformation=0x2256830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e72ad5b, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2e72ad5b, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x2e72d484, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x1914)) returned 1 [0121.090] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0121.090] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\CollectSyncLogs.bat", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\CollectSyncLogs.bat", lpFilePart=0x0) returned 0x59 [0121.090] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0121.090] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\CollectSyncLogs.bat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\collectsynclogs.bat"), fInfoLevelId=0x0, lpFileInformation=0x22569a8 | out: lpFileInformation=0x22569a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e72ad5b, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2e72ad5b, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x2e72d484, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x1914)) returned 1 [0121.091] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0121.091] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\CollectSyncLogs.bat", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\CollectSyncLogs.bat", lpFilePart=0x0) returned 0x59 [0121.091] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0121.091] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\CollectSyncLogs.bat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\collectsynclogs.bat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0121.091] GetFileType (hFile=0x444) returned 0x1 [0121.091] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0121.091] GetFileType (hFile=0x444) returned 0x1 [0121.092] ReadFile (in: hFile=0x444, lpBuffer=0x2258dc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x2258dc8*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0121.116] CloseHandle (hObject=0x444) returned 1 [0121.116] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\CollectSyncLogs.bat", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\CollectSyncLogs.bat", lpFilePart=0x0) returned 0x59 [0121.116] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0121.116] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\CollectSyncLogs.bat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\collectsynclogs.bat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0121.116] GetFileType (hFile=0x444) returned 0x1 [0121.116] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0121.116] GetFileType (hFile=0x444) returned 0x1 [0121.116] WriteFile (in: hFile=0x444, lpBuffer=0x2256b00*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x2256b00*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0121.117] CloseHandle (hObject=0x444) returned 1 [0121.117] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\CollectSyncLogs.bat", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\CollectSyncLogs.bat", lpFilePart=0x0) returned 0x59 [0121.117] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\CollectSyncLogs.bat.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\CollectSyncLogs.bat.xuy", lpFilePart=0x0) returned 0x5d [0121.117] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0121.117] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\CollectSyncLogs.bat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\collectsynclogs.bat"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e72ad5b, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2e72ad5b, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x34097719, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0121.117] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0121.117] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\CollectSyncLogs.bat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\collectsynclogs.bat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\CollectSyncLogs.bat.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\collectsynclogs.bat.xuy")) returned 1 [0121.118] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ElevatedAppBlue.png", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ElevatedAppBlue.png", lpFilePart=0x0) returned 0x59 [0121.118] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0121.118] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ElevatedAppBlue.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\elevatedappblue.png"), fInfoLevelId=0x0, lpFileInformation=0x22d5208 | out: lpFileInformation=0x22d5208*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e7bfc6f, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2e7bfc6f, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x2e7c2380, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x1cd7)) returned 1 [0121.119] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0121.119] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ElevatedAppBlue.png", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ElevatedAppBlue.png", lpFilePart=0x0) returned 0x59 [0121.119] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0121.119] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ElevatedAppBlue.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\elevatedappblue.png"), fInfoLevelId=0x0, lpFileInformation=0x22d5380 | out: lpFileInformation=0x22d5380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e7bfc6f, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2e7bfc6f, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x2e7c2380, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x1cd7)) returned 1 [0121.119] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0121.119] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ElevatedAppBlue.png", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ElevatedAppBlue.png", lpFilePart=0x0) returned 0x59 [0121.119] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0121.119] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ElevatedAppBlue.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\elevatedappblue.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0121.120] GetFileType (hFile=0x444) returned 0x1 [0121.120] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0121.120] GetFileType (hFile=0x444) returned 0x1 [0121.120] ReadFile (in: hFile=0x444, lpBuffer=0x22d77a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x22d77a0*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0121.135] CloseHandle (hObject=0x444) returned 1 [0121.135] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ElevatedAppBlue.png", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ElevatedAppBlue.png", lpFilePart=0x0) returned 0x59 [0121.135] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0121.135] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ElevatedAppBlue.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\elevatedappblue.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0121.135] GetFileType (hFile=0x444) returned 0x1 [0121.135] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0121.135] GetFileType (hFile=0x444) returned 0x1 [0121.135] WriteFile (in: hFile=0x444, lpBuffer=0x22d54d8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x22d54d8*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0121.136] CloseHandle (hObject=0x444) returned 1 [0121.136] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ElevatedAppBlue.png", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ElevatedAppBlue.png", lpFilePart=0x0) returned 0x59 [0121.136] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ElevatedAppBlue.png.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ElevatedAppBlue.png.xuy", lpFilePart=0x0) returned 0x5d [0121.136] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0121.136] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ElevatedAppBlue.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\elevatedappblue.png"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e7bfc6f, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2e7bfc6f, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x340bd904, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0121.136] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0121.136] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ElevatedAppBlue.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\elevatedappblue.png"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ElevatedAppBlue.png.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\elevatedappblue.png.xuy")) returned 1 [0121.138] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ElevatedAppWhite.png", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ElevatedAppWhite.png", lpFilePart=0x0) returned 0x5a [0121.138] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0121.138] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ElevatedAppWhite.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\elevatedappwhite.png"), fInfoLevelId=0x0, lpFileInformation=0x2353be0 | out: lpFileInformation=0x2353be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e7e6d56, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2e7e6d56, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x2e7e6d56, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x13cc)) returned 1 [0121.138] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0121.138] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ElevatedAppWhite.png", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ElevatedAppWhite.png", lpFilePart=0x0) returned 0x5a [0121.138] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0121.138] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ElevatedAppWhite.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\elevatedappwhite.png"), fInfoLevelId=0x0, lpFileInformation=0x2353d60 | out: lpFileInformation=0x2353d60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e7e6d56, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2e7e6d56, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x2e7e6d56, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x13cc)) returned 1 [0121.138] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0121.138] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ElevatedAppWhite.png", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ElevatedAppWhite.png", lpFilePart=0x0) returned 0x5a [0121.138] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0121.138] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ElevatedAppWhite.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\elevatedappwhite.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0121.139] GetFileType (hFile=0x444) returned 0x1 [0121.139] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0121.139] GetFileType (hFile=0x444) returned 0x1 [0121.139] ReadFile (in: hFile=0x444, lpBuffer=0x2356190, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x2356190*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0121.185] CloseHandle (hObject=0x444) returned 1 [0121.185] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ElevatedAppWhite.png", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ElevatedAppWhite.png", lpFilePart=0x0) returned 0x5a [0121.185] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0121.185] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ElevatedAppWhite.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\elevatedappwhite.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0121.185] GetFileType (hFile=0x444) returned 0x1 [0121.185] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0121.185] GetFileType (hFile=0x444) returned 0x1 [0121.185] WriteFile (in: hFile=0x444, lpBuffer=0x2167b30*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x2167b30*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0121.185] CloseHandle (hObject=0x444) returned 1 [0121.185] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ElevatedAppWhite.png", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ElevatedAppWhite.png", lpFilePart=0x0) returned 0x5a [0121.186] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ElevatedAppWhite.png.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ElevatedAppWhite.png.xuy", lpFilePart=0x0) returned 0x5e [0121.186] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0121.186] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ElevatedAppWhite.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\elevatedappwhite.png"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e7e6d56, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2e7e6d56, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x341563c4, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0121.186] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0121.186] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ElevatedAppWhite.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\elevatedappwhite.png"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ElevatedAppWhite.png.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\elevatedappwhite.png.xuy")) returned 1 [0121.187] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Error.png", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Error.png", lpFilePart=0x0) returned 0x4f [0121.187] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0121.187] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Error.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\error.png"), fInfoLevelId=0x0, lpFileInformation=0x21d25a8 | out: lpFileInformation=0x21d25a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e80de7b, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2e80de7b, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x2e80de7b, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x1e64)) returned 1 [0121.187] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0121.187] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Error.png", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Error.png", lpFilePart=0x0) returned 0x4f [0121.187] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0121.187] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Error.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\error.png"), fInfoLevelId=0x0, lpFileInformation=0x21d26f8 | out: lpFileInformation=0x21d26f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e80de7b, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2e80de7b, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x2e80de7b, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x1e64)) returned 1 [0121.187] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0121.187] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Error.png", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Error.png", lpFilePart=0x0) returned 0x4f [0121.187] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0121.188] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Error.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\error.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0121.188] GetFileType (hFile=0x444) returned 0x1 [0121.188] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0121.188] GetFileType (hFile=0x444) returned 0x1 [0121.188] ReadFile (in: hFile=0x444, lpBuffer=0x21d4ac8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x21d4ac8*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0121.210] CloseHandle (hObject=0x444) returned 1 [0121.210] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Error.png", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Error.png", lpFilePart=0x0) returned 0x4f [0121.211] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0121.211] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Error.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\error.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0121.211] GetFileType (hFile=0x444) returned 0x1 [0121.211] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0121.211] GetFileType (hFile=0x444) returned 0x1 [0121.211] WriteFile (in: hFile=0x444, lpBuffer=0x21d2828*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x21d2828*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0121.211] CloseHandle (hObject=0x444) returned 1 [0121.211] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Error.png", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Error.png", lpFilePart=0x0) returned 0x4f [0121.211] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Error.png.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Error.png.xuy", lpFilePart=0x0) returned 0x53 [0121.211] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0121.211] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Error.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\error.png"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e80de7b, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2e80de7b, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3417c3ad, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0121.212] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0121.212] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Error.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\error.png"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Error.png.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\error.png.xuy")) returned 1 [0121.213] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ErrorPage.html", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ErrorPage.html", lpFilePart=0x0) returned 0x54 [0121.213] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0121.213] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ErrorPage.html" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\errorpage.html"), fInfoLevelId=0x0, lpFileInformation=0x2250e98 | out: lpFileInformation=0x2250e98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e832858, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2e832858, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x2e832858, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x13c4)) returned 1 [0121.213] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0121.213] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ErrorPage.html", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ErrorPage.html", lpFilePart=0x0) returned 0x54 [0121.213] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0121.213] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ErrorPage.html" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\errorpage.html"), fInfoLevelId=0x0, lpFileInformation=0x2251000 | out: lpFileInformation=0x2251000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e832858, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2e832858, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x2e832858, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x13c4)) returned 1 [0121.213] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0121.213] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ErrorPage.html", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ErrorPage.html", lpFilePart=0x0) returned 0x54 [0121.213] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0121.213] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ErrorPage.html" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\errorpage.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0121.214] GetFileType (hFile=0x444) returned 0x1 [0121.214] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0121.214] GetFileType (hFile=0x444) returned 0x1 [0121.214] ReadFile (in: hFile=0x444, lpBuffer=0x2253400, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x2253400*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0121.227] CloseHandle (hObject=0x444) returned 1 [0121.228] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ErrorPage.html", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ErrorPage.html", lpFilePart=0x0) returned 0x54 [0121.228] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0121.228] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ErrorPage.html" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\errorpage.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0121.228] GetFileType (hFile=0x444) returned 0x1 [0121.228] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0121.228] GetFileType (hFile=0x444) returned 0x1 [0121.228] WriteFile (in: hFile=0x444, lpBuffer=0x2251148*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x2251148*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0121.229] CloseHandle (hObject=0x444) returned 1 [0121.229] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ErrorPage.html", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ErrorPage.html", lpFilePart=0x0) returned 0x54 [0121.229] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ErrorPage.html.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ErrorPage.html.xuy", lpFilePart=0x0) returned 0x58 [0121.229] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0121.229] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ErrorPage.html" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\errorpage.html"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e832858, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2e832858, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x341a26fe, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0121.229] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0121.229] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ErrorPage.html" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\errorpage.html"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ErrorPage.html.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\errorpage.html.xuy")) returned 1 [0121.231] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ETWlog.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ETWlog.dll", lpFilePart=0x0) returned 0x50 [0121.231] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0121.231] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ETWlog.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\etwlog.dll"), fInfoLevelId=0x0, lpFileInformation=0x22cf818 | out: lpFileInformation=0x22cf818*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e8af0b8, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2e8af0b8, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x2e8b17d0, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x78d0)) returned 1 [0121.232] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0121.232] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ETWlog.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ETWlog.dll", lpFilePart=0x0) returned 0x50 [0121.232] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0121.232] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ETWlog.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\etwlog.dll"), fInfoLevelId=0x0, lpFileInformation=0x22cf970 | out: lpFileInformation=0x22cf970*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e8af0b8, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2e8af0b8, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x2e8b17d0, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x78d0)) returned 1 [0121.232] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0121.232] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ETWlog.dll", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ETWlog.dll", lpFilePart=0x0) returned 0x50 [0121.232] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0121.232] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ETWlog.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\etwlog.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0121.233] GetFileType (hFile=0x444) returned 0x1 [0121.233] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0121.233] GetFileType (hFile=0x444) returned 0x1 [0121.233] ReadFile (in: hFile=0x444, lpBuffer=0x22d1d50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x22d1d50*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0121.247] CloseHandle (hObject=0x444) returned 1 [0121.247] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ETWlog.dll", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ETWlog.dll", lpFilePart=0x0) returned 0x50 [0121.247] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0121.247] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ETWlog.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\etwlog.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0121.247] GetFileType (hFile=0x444) returned 0x1 [0121.247] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0121.247] GetFileType (hFile=0x444) returned 0x1 [0121.247] WriteFile (in: hFile=0x444, lpBuffer=0x22cfaa8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x22cfaa8*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0121.247] CloseHandle (hObject=0x444) returned 1 [0121.248] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ETWlog.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ETWlog.dll", lpFilePart=0x0) returned 0x50 [0121.248] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ETWlog.dll.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ETWlog.dll.xuy", lpFilePart=0x0) returned 0x54 [0121.248] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0121.248] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ETWlog.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\etwlog.dll"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e8af0b8, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2e8af0b8, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x341eed72, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x78d0)) returned 1 [0121.248] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0121.248] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ETWlog.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\etwlog.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ETWlog.dll.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\etwlog.dll.xuy")) returned 1 [0121.249] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileCoAuth.exe", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileCoAuth.exe", lpFilePart=0x0) returned 0x54 [0121.249] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0121.249] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileCoAuth.exe" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\filecoauth.exe"), fInfoLevelId=0x0, lpFileInformation=0x234e140 | out: lpFileInformation=0x234e140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e8dfdfb, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2e8dfdfb, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x2e95c658, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x424c8)) returned 1 [0121.249] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0121.249] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileCoAuth.exe", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileCoAuth.exe", lpFilePart=0x0) returned 0x54 [0121.249] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0121.249] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileCoAuth.exe" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\filecoauth.exe"), fInfoLevelId=0x0, lpFileInformation=0x234e2a8 | out: lpFileInformation=0x234e2a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e8dfdfb, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2e8dfdfb, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x2e95c658, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x424c8)) returned 1 [0121.249] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0121.249] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileCoAuth.exe", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileCoAuth.exe", lpFilePart=0x0) returned 0x54 [0121.249] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0121.249] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileCoAuth.exe" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\filecoauth.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0121.250] GetFileType (hFile=0x444) returned 0x1 [0121.250] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0121.250] GetFileType (hFile=0x444) returned 0x1 [0121.250] ReadFile (in: hFile=0x444, lpBuffer=0x23506a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x23506a8*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0121.301] CloseHandle (hObject=0x444) returned 1 [0121.301] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileCoAuth.exe", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileCoAuth.exe", lpFilePart=0x0) returned 0x54 [0121.301] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0121.301] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileCoAuth.exe" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\filecoauth.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0121.301] GetFileType (hFile=0x444) returned 0x1 [0121.301] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0121.301] GetFileType (hFile=0x444) returned 0x1 [0121.301] WriteFile (in: hFile=0x444, lpBuffer=0x2167b30*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x2167b30*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0121.302] CloseHandle (hObject=0x444) returned 1 [0121.302] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileCoAuth.exe", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileCoAuth.exe", lpFilePart=0x0) returned 0x54 [0121.302] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileCoAuth.exe.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileCoAuth.exe.xuy", lpFilePart=0x0) returned 0x58 [0121.302] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0121.302] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileCoAuth.exe" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\filecoauth.exe"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e8dfdfb, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2e8dfdfb, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3426142e, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x424c8)) returned 1 [0121.302] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0121.302] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileCoAuth.exe" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\filecoauth.exe"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileCoAuth.exe.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\filecoauth.exe.xuy")) returned 1 [0121.303] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileCoAuthLib.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileCoAuthLib.dll", lpFilePart=0x0) returned 0x57 [0121.303] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0121.303] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileCoAuthLib.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\filecoauthlib.dll"), fInfoLevelId=0x0, lpFileInformation=0x21ccab8 | out: lpFileInformation=0x21ccab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e9f1551, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2e9f1551, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x2e9f1551, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x262d0)) returned 1 [0121.303] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0121.303] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileCoAuthLib.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileCoAuthLib.dll", lpFilePart=0x0) returned 0x57 [0121.303] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0121.303] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileCoAuthLib.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\filecoauthlib.dll"), fInfoLevelId=0x0, lpFileInformation=0x21ccc28 | out: lpFileInformation=0x21ccc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e9f1551, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2e9f1551, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x2e9f1551, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x262d0)) returned 1 [0121.303] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0121.303] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileCoAuthLib.dll", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileCoAuthLib.dll", lpFilePart=0x0) returned 0x57 [0121.304] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0121.304] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileCoAuthLib.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\filecoauthlib.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0121.304] GetFileType (hFile=0x444) returned 0x1 [0121.304] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0121.304] GetFileType (hFile=0x444) returned 0x1 [0121.304] ReadFile (in: hFile=0x444, lpBuffer=0x21cf038, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x21cf038*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0121.318] CloseHandle (hObject=0x444) returned 1 [0121.318] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileCoAuthLib.dll", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileCoAuthLib.dll", lpFilePart=0x0) returned 0x57 [0121.318] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0121.318] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileCoAuthLib.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\filecoauthlib.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0121.318] GetFileType (hFile=0x444) returned 0x1 [0121.318] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0121.319] GetFileType (hFile=0x444) returned 0x1 [0121.319] WriteFile (in: hFile=0x444, lpBuffer=0x21ccd78*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x21ccd78*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0121.319] CloseHandle (hObject=0x444) returned 1 [0121.319] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileCoAuthLib.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileCoAuthLib.dll", lpFilePart=0x0) returned 0x57 [0121.319] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileCoAuthLib.dll.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileCoAuthLib.dll.xuy", lpFilePart=0x0) returned 0x5b [0121.319] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0121.319] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileCoAuthLib.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\filecoauthlib.dll"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e9f1551, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2e9f1551, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x34287875, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x262d0)) returned 1 [0121.319] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0121.319] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileCoAuthLib.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\filecoauthlib.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileCoAuthLib.dll.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\filecoauthlib.dll.xuy")) returned 1 [0121.320] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSync.LocalizedResources.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSync.LocalizedResources.dll", lpFilePart=0x0) returned 0x65 [0121.320] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0121.320] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSync.LocalizedResources.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\filesync.localizedresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x224b458 | out: lpFileInformation=0x224b458*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ea2227c, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2ea2227c, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x2ea249a5, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x1f6d0)) returned 1 [0121.321] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0121.321] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSync.LocalizedResources.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSync.LocalizedResources.dll", lpFilePart=0x0) returned 0x65 [0121.321] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0121.321] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSync.LocalizedResources.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\filesync.localizedresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x224b600 | out: lpFileInformation=0x224b600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ea2227c, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2ea2227c, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x2ea249a5, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x1f6d0)) returned 1 [0121.321] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0121.321] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSync.LocalizedResources.dll", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSync.LocalizedResources.dll", lpFilePart=0x0) returned 0x65 [0121.321] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0121.321] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSync.LocalizedResources.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\filesync.localizedresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0121.322] GetFileType (hFile=0x444) returned 0x1 [0121.322] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0121.322] GetFileType (hFile=0x444) returned 0x1 [0121.322] ReadFile (in: hFile=0x444, lpBuffer=0x224da80, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x224da80*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0121.342] CloseHandle (hObject=0x444) returned 1 [0121.342] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSync.LocalizedResources.dll", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSync.LocalizedResources.dll", lpFilePart=0x0) returned 0x65 [0121.342] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0121.342] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSync.LocalizedResources.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\filesync.localizedresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0121.342] GetFileType (hFile=0x444) returned 0x1 [0121.342] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0121.342] GetFileType (hFile=0x444) returned 0x1 [0121.342] WriteFile (in: hFile=0x444, lpBuffer=0x224b788*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x224b788*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0121.343] CloseHandle (hObject=0x444) returned 1 [0121.343] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSync.LocalizedResources.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSync.LocalizedResources.dll", lpFilePart=0x0) returned 0x65 [0121.343] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSync.LocalizedResources.dll.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSync.LocalizedResources.dll.xuy", lpFilePart=0x0) returned 0x69 [0121.343] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0121.343] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSync.LocalizedResources.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\filesync.localizedresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ea2227c, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2ea2227c, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x342d3ace, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x1f6d0)) returned 1 [0121.343] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0121.343] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSync.LocalizedResources.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\filesync.localizedresources.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSync.LocalizedResources.dll.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\filesync.localizedresources.dll.xuy")) returned 1 [0121.344] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSync.Resources.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSync.Resources.dll", lpFilePart=0x0) returned 0x5c [0121.344] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0121.344] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSync.Resources.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\filesync.resources.dll"), fInfoLevelId=0x0, lpFileInformation=0x22c9f38 | out: lpFileInformation=0x22c9f38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eafb748, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2eafb748, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x2eb0056a, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0xab4d0)) returned 1 [0121.345] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0121.345] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSync.Resources.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSync.Resources.dll", lpFilePart=0x0) returned 0x5c [0121.345] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0121.345] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSync.Resources.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\filesync.resources.dll"), fInfoLevelId=0x0, lpFileInformation=0x22ca0c0 | out: lpFileInformation=0x22ca0c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eafb748, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2eafb748, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x2eb0056a, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0xab4d0)) returned 1 [0121.345] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0121.345] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSync.Resources.dll", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSync.Resources.dll", lpFilePart=0x0) returned 0x5c [0121.345] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0121.345] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSync.Resources.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\filesync.resources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0121.346] GetFileType (hFile=0x444) returned 0x1 [0121.346] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0121.346] GetFileType (hFile=0x444) returned 0x1 [0121.346] ReadFile (in: hFile=0x444, lpBuffer=0x22cc500, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x22cc500*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0121.378] CloseHandle (hObject=0x444) returned 1 [0121.378] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSync.Resources.dll", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSync.Resources.dll", lpFilePart=0x0) returned 0x5c [0121.378] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0121.379] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSync.Resources.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\filesync.resources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0121.379] GetFileType (hFile=0x444) returned 0x1 [0121.379] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0121.379] GetFileType (hFile=0x444) returned 0x1 [0121.379] WriteFile (in: hFile=0x444, lpBuffer=0x22ca228*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x22ca228*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0121.379] CloseHandle (hObject=0x444) returned 1 [0121.379] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSync.Resources.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSync.Resources.dll", lpFilePart=0x0) returned 0x5c [0121.379] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSync.Resources.dll.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSync.Resources.dll.xuy", lpFilePart=0x0) returned 0x60 [0121.380] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0121.380] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSync.Resources.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\filesync.resources.dll"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eafb748, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2eafb748, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3431ff2c, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xab4d0)) returned 1 [0121.380] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0121.380] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSync.Resources.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\filesync.resources.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSync.Resources.dll.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\filesync.resources.dll.xuy")) returned 1 [0121.381] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncApi.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncApi.dll", lpFilePart=0x0) returned 0x55 [0121.381] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0121.381] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncApi.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\filesyncapi.dll"), fInfoLevelId=0x0, lpFileInformation=0x2348968 | out: lpFileInformation=0x2348968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ebd9a43, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2ebd9a43, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x2ebde865, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0xba0d0)) returned 1 [0121.381] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0121.381] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncApi.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncApi.dll", lpFilePart=0x0) returned 0x55 [0121.381] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0121.381] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncApi.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\filesyncapi.dll"), fInfoLevelId=0x0, lpFileInformation=0x2348ad0 | out: lpFileInformation=0x2348ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ebd9a43, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2ebd9a43, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x2ebde865, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0xba0d0)) returned 1 [0121.381] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0121.381] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncApi.dll", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncApi.dll", lpFilePart=0x0) returned 0x55 [0121.381] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0121.381] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncApi.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\filesyncapi.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0121.382] GetFileType (hFile=0x444) returned 0x1 [0121.382] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0121.382] GetFileType (hFile=0x444) returned 0x1 [0121.382] ReadFile (in: hFile=0x444, lpBuffer=0x234aed0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x234aed0*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0121.455] CloseHandle (hObject=0x444) returned 1 [0121.456] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncApi.dll", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncApi.dll", lpFilePart=0x0) returned 0x55 [0121.456] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0121.456] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncApi.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\filesyncapi.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0121.456] GetFileType (hFile=0x444) returned 0x1 [0121.456] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0121.456] GetFileType (hFile=0x444) returned 0x1 [0121.456] WriteFile (in: hFile=0x444, lpBuffer=0x2167b30*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x2167b30*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0121.457] CloseHandle (hObject=0x444) returned 1 [0121.457] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncApi.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncApi.dll", lpFilePart=0x0) returned 0x55 [0121.457] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncApi.dll.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncApi.dll.xuy", lpFilePart=0x0) returned 0x59 [0121.457] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0121.457] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncApi.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\filesyncapi.dll"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ebd9a43, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2ebd9a43, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x343decd7, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xba0d0)) returned 1 [0121.457] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0121.457] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncApi.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\filesyncapi.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncApi.dll.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\filesyncapi.dll.xuy")) returned 1 [0121.459] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncClient.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncClient.dll", lpFilePart=0x0) returned 0x58 [0121.459] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0121.459] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncClient.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\filesyncclient.dll"), fInfoLevelId=0x0, lpFileInformation=0x21c72b8 | out: lpFileInformation=0x21c72b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ed8c3b0, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2ed8c3b0, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x2ed9fc2a, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x2f6ad0)) returned 1 [0121.460] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0121.460] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncClient.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncClient.dll", lpFilePart=0x0) returned 0x58 [0121.460] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0121.460] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncClient.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\filesyncclient.dll"), fInfoLevelId=0x0, lpFileInformation=0x21c7430 | out: lpFileInformation=0x21c7430*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ed8c3b0, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2ed8c3b0, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x2ed9fc2a, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x2f6ad0)) returned 1 [0121.460] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0121.460] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncClient.dll", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncClient.dll", lpFilePart=0x0) returned 0x58 [0121.460] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0121.460] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncClient.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\filesyncclient.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0121.461] GetFileType (hFile=0x444) returned 0x1 [0121.461] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0121.462] GetFileType (hFile=0x444) returned 0x1 [0121.462] ReadFile (in: hFile=0x444, lpBuffer=0x21c9850, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x21c9850*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0121.491] CloseHandle (hObject=0x444) returned 1 [0121.491] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncClient.dll", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncClient.dll", lpFilePart=0x0) returned 0x58 [0121.491] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0121.491] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncClient.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\filesyncclient.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0121.492] GetFileType (hFile=0x444) returned 0x1 [0121.492] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0121.492] GetFileType (hFile=0x444) returned 0x1 [0121.492] WriteFile (in: hFile=0x444, lpBuffer=0x21c7588*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x21c7588*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0121.492] CloseHandle (hObject=0x444) returned 1 [0121.492] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncClient.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncClient.dll", lpFilePart=0x0) returned 0x58 [0121.492] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncClient.dll.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncClient.dll.xuy", lpFilePart=0x0) returned 0x5c [0121.492] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0121.493] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncClient.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\filesyncclient.dll"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ed8c3b0, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2ed8c3b0, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3442b4e6, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2f6ad0)) returned 1 [0121.493] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0121.493] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncClient.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\filesyncclient.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncClient.dll.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\filesyncclient.dll.xuy")) returned 1 [0121.494] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncConfig.exe", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncConfig.exe", lpFilePart=0x0) returned 0x58 [0121.494] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0121.494] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncConfig.exe" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\filesyncconfig.exe"), fInfoLevelId=0x0, lpFileInformation=0x2245c90 | out: lpFileInformation=0x2245c90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2efffb61, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2efffb61, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x2f002283, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x3e2d0)) returned 1 [0121.495] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0121.495] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncConfig.exe", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncConfig.exe", lpFilePart=0x0) returned 0x58 [0121.495] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0121.495] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncConfig.exe" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\filesyncconfig.exe"), fInfoLevelId=0x0, lpFileInformation=0x2245e08 | out: lpFileInformation=0x2245e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2efffb61, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2efffb61, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x2f002283, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x3e2d0)) returned 1 [0121.495] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0121.495] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncConfig.exe", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncConfig.exe", lpFilePart=0x0) returned 0x58 [0121.495] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0121.495] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncConfig.exe" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\filesyncconfig.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0121.497] GetFileType (hFile=0x444) returned 0x1 [0121.497] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0121.497] GetFileType (hFile=0x444) returned 0x1 [0121.497] ReadFile (in: hFile=0x444, lpBuffer=0x2248228, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x2248228*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0121.521] CloseHandle (hObject=0x444) returned 1 [0121.521] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncConfig.exe", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncConfig.exe", lpFilePart=0x0) returned 0x58 [0121.521] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0121.521] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncConfig.exe" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\filesyncconfig.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0121.522] GetFileType (hFile=0x444) returned 0x1 [0121.522] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0121.522] GetFileType (hFile=0x444) returned 0x1 [0121.522] WriteFile (in: hFile=0x444, lpBuffer=0x2245f60*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x2245f60*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0121.522] CloseHandle (hObject=0x444) returned 1 [0121.523] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncConfig.exe", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncConfig.exe", lpFilePart=0x0) returned 0x58 [0121.523] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncConfig.exe.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncConfig.exe.xuy", lpFilePart=0x0) returned 0x5c [0121.523] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0121.523] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncConfig.exe" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\filesyncconfig.exe"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2efffb61, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2efffb61, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3447746f, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x3e2d0)) returned 1 [0121.523] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0121.523] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncConfig.exe" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\filesyncconfig.exe"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncConfig.exe.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\filesyncconfig.exe.xuy")) returned 1 [0121.524] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncFAL.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncFAL.dll", lpFilePart=0x0) returned 0x55 [0121.524] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0121.524] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncFAL.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\filesyncfal.dll"), fInfoLevelId=0x0, lpFileInformation=0x22c4668 | out: lpFileInformation=0x22c4668*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f0fb37d, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2f0fb37d, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x2f0fda1a, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x120d0)) returned 1 [0121.525] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0121.525] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncFAL.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncFAL.dll", lpFilePart=0x0) returned 0x55 [0121.525] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0121.525] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncFAL.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\filesyncfal.dll"), fInfoLevelId=0x0, lpFileInformation=0x22c47d0 | out: lpFileInformation=0x22c47d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f0fb37d, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2f0fb37d, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x2f0fda1a, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x120d0)) returned 1 [0121.525] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0121.525] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncFAL.dll", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncFAL.dll", lpFilePart=0x0) returned 0x55 [0121.525] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0121.525] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncFAL.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\filesyncfal.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0121.526] GetFileType (hFile=0x444) returned 0x1 [0121.526] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0121.526] GetFileType (hFile=0x444) returned 0x1 [0121.526] ReadFile (in: hFile=0x444, lpBuffer=0x22c6bd0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x22c6bd0*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0121.545] CloseHandle (hObject=0x444) returned 1 [0121.545] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncFAL.dll", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncFAL.dll", lpFilePart=0x0) returned 0x55 [0121.545] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0121.545] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncFAL.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\filesyncfal.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0121.546] GetFileType (hFile=0x444) returned 0x1 [0121.546] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0121.546] GetFileType (hFile=0x444) returned 0x1 [0121.546] WriteFile (in: hFile=0x444, lpBuffer=0x22c4918*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x22c4918*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0121.546] CloseHandle (hObject=0x444) returned 1 [0121.546] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncFAL.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncFAL.dll", lpFilePart=0x0) returned 0x55 [0121.546] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncFAL.dll.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncFAL.dll.xuy", lpFilePart=0x0) returned 0x59 [0121.546] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0121.546] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncFAL.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\filesyncfal.dll"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f0fb37d, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2f0fb37d, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x344c383c, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x120d0)) returned 1 [0121.546] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0121.546] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncFAL.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\filesyncfal.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncFAL.dll.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\filesyncfal.dll.xuy")) returned 1 [0121.547] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncFALWB.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncFALWB.dll", lpFilePart=0x0) returned 0x57 [0121.548] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0121.548] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncFALWB.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\filesyncfalwb.dll"), fInfoLevelId=0x0, lpFileInformation=0x2342fe8 | out: lpFileInformation=0x2342fe8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f199e32, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2f199e32, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x2f20a347, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x33ad0)) returned 1 [0121.548] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0121.548] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncFALWB.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncFALWB.dll", lpFilePart=0x0) returned 0x57 [0121.548] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0121.548] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncFALWB.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\filesyncfalwb.dll"), fInfoLevelId=0x0, lpFileInformation=0x2343158 | out: lpFileInformation=0x2343158*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f199e32, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2f199e32, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x2f20a347, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x33ad0)) returned 1 [0121.548] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0121.548] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncFALWB.dll", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncFALWB.dll", lpFilePart=0x0) returned 0x57 [0121.548] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0121.548] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncFALWB.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\filesyncfalwb.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0121.549] GetFileType (hFile=0x444) returned 0x1 [0121.549] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0121.549] GetFileType (hFile=0x444) returned 0x1 [0121.549] ReadFile (in: hFile=0x444, lpBuffer=0x2345568, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x2345568*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0121.615] CloseHandle (hObject=0x444) returned 1 [0121.615] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncFALWB.dll", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncFALWB.dll", lpFilePart=0x0) returned 0x57 [0121.615] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0121.615] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncFALWB.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\filesyncfalwb.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0121.615] GetFileType (hFile=0x444) returned 0x1 [0121.615] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0121.615] GetFileType (hFile=0x444) returned 0x1 [0121.615] WriteFile (in: hFile=0x444, lpBuffer=0x2167b30*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x2167b30*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0121.616] CloseHandle (hObject=0x444) returned 1 [0121.616] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncFALWB.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncFALWB.dll", lpFilePart=0x0) returned 0x57 [0121.616] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncFALWB.dll.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncFALWB.dll.xuy", lpFilePart=0x0) returned 0x5b [0121.616] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0121.616] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncFALWB.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\filesyncfalwb.dll"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f199e32, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2f199e32, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3455c5ff, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x33ad0)) returned 1 [0121.616] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0121.616] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncFALWB.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\filesyncfalwb.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncFALWB.dll.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\filesyncfalwb.dll.xuy")) returned 1 [0121.617] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncSessions.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncSessions.dll", lpFilePart=0x0) returned 0x5a [0121.617] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0121.617] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncSessions.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\filesyncsessions.dll"), fInfoLevelId=0x0, lpFileInformation=0x21c1960 | out: lpFileInformation=0x21c1960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f462d21, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2f462d21, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x2f478cb0, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x176ed0)) returned 1 [0121.619] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0121.619] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncSessions.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncSessions.dll", lpFilePart=0x0) returned 0x5a [0121.619] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0121.619] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncSessions.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\filesyncsessions.dll"), fInfoLevelId=0x0, lpFileInformation=0x21c1ae0 | out: lpFileInformation=0x21c1ae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f462d21, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2f462d21, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x2f478cb0, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x176ed0)) returned 1 [0121.619] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0121.619] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncSessions.dll", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncSessions.dll", lpFilePart=0x0) returned 0x5a [0121.619] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0121.619] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncSessions.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\filesyncsessions.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0121.620] GetFileType (hFile=0x444) returned 0x1 [0121.620] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0121.620] GetFileType (hFile=0x444) returned 0x1 [0121.620] ReadFile (in: hFile=0x444, lpBuffer=0x21c3f10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x21c3f10*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0121.655] CloseHandle (hObject=0x444) returned 1 [0121.655] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncSessions.dll", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncSessions.dll", lpFilePart=0x0) returned 0x5a [0121.655] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0121.656] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncSessions.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\filesyncsessions.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0121.656] GetFileType (hFile=0x444) returned 0x1 [0121.656] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0121.656] GetFileType (hFile=0x444) returned 0x1 [0121.656] WriteFile (in: hFile=0x444, lpBuffer=0x21c1c40*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x21c1c40*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0121.656] CloseHandle (hObject=0x444) returned 1 [0121.656] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncSessions.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncSessions.dll", lpFilePart=0x0) returned 0x5a [0121.656] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncSessions.dll.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncSessions.dll.xuy", lpFilePart=0x0) returned 0x5e [0121.656] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0121.656] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncSessions.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\filesyncsessions.dll"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f462d21, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2f462d21, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x345ce9da, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x176ed0)) returned 1 [0121.656] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0121.657] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncSessions.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\filesyncsessions.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncSessions.dll.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\filesyncsessions.dll.xuy")) returned 1 [0121.658] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncShell.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncShell.dll", lpFilePart=0x0) returned 0x57 [0121.658] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0121.658] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncShell.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\filesyncshell.dll"), fInfoLevelId=0x0, lpFileInformation=0x2240358 | out: lpFileInformation=0x2240358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f768c8e, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2f768c8e, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x2f77c512, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x27b6d0)) returned 1 [0121.658] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0121.658] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncShell.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncShell.dll", lpFilePart=0x0) returned 0x57 [0121.658] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0121.658] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncShell.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\filesyncshell.dll"), fInfoLevelId=0x0, lpFileInformation=0x22404c8 | out: lpFileInformation=0x22404c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f768c8e, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2f768c8e, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x2f77c512, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x27b6d0)) returned 1 [0121.658] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0121.658] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncShell.dll", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncShell.dll", lpFilePart=0x0) returned 0x57 [0121.658] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0121.658] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncShell.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\filesyncshell.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0121.659] GetFileType (hFile=0x444) returned 0x1 [0121.659] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0121.659] GetFileType (hFile=0x444) returned 0x1 [0121.659] ReadFile (in: hFile=0x444, lpBuffer=0x22428d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x22428d8*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0121.688] CloseHandle (hObject=0x444) returned 1 [0121.688] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncShell.dll", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncShell.dll", lpFilePart=0x0) returned 0x57 [0121.688] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0121.689] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncShell.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\filesyncshell.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0121.689] GetFileType (hFile=0x444) returned 0x1 [0121.689] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0121.689] GetFileType (hFile=0x444) returned 0x1 [0121.689] WriteFile (in: hFile=0x444, lpBuffer=0x2240618*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x2240618*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0121.689] CloseHandle (hObject=0x444) returned 1 [0121.689] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncShell.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncShell.dll", lpFilePart=0x0) returned 0x57 [0121.689] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncShell.dll.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncShell.dll.xuy", lpFilePart=0x0) returned 0x5b [0121.689] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0121.689] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncShell.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\filesyncshell.dll"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f768c8e, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2f768c8e, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3461aea4, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x27b6d0)) returned 1 [0121.689] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0121.689] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncShell.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\filesyncshell.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncShell.dll.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\filesyncshell.dll.xuy")) returned 1 [0121.691] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncViews.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncViews.dll", lpFilePart=0x0) returned 0x57 [0121.691] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0121.691] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncViews.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\filesyncviews.dll"), fInfoLevelId=0x0, lpFileInformation=0x22becf8 | out: lpFileInformation=0x22becf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2fa7132a, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2fa7132a, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x2fa76145, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0xc36c8)) returned 1 [0121.691] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0121.692] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncViews.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncViews.dll", lpFilePart=0x0) returned 0x57 [0121.692] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0121.692] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncViews.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\filesyncviews.dll"), fInfoLevelId=0x0, lpFileInformation=0x22bee68 | out: lpFileInformation=0x22bee68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2fa7132a, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2fa7132a, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x2fa76145, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0xc36c8)) returned 1 [0121.692] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0121.692] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncViews.dll", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncViews.dll", lpFilePart=0x0) returned 0x57 [0121.692] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0121.692] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncViews.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\filesyncviews.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0121.693] GetFileType (hFile=0x444) returned 0x1 [0121.693] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0121.693] GetFileType (hFile=0x444) returned 0x1 [0121.693] ReadFile (in: hFile=0x444, lpBuffer=0x22c1278, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x22c1278*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0121.712] CloseHandle (hObject=0x444) returned 1 [0121.713] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncViews.dll", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncViews.dll", lpFilePart=0x0) returned 0x57 [0121.713] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0121.713] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncViews.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\filesyncviews.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0121.713] GetFileType (hFile=0x444) returned 0x1 [0121.713] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0121.713] GetFileType (hFile=0x444) returned 0x1 [0121.713] WriteFile (in: hFile=0x444, lpBuffer=0x22befb8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x22befb8*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0121.713] CloseHandle (hObject=0x444) returned 1 [0121.713] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncViews.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncViews.dll", lpFilePart=0x0) returned 0x57 [0121.713] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncViews.dll.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncViews.dll.xuy", lpFilePart=0x0) returned 0x5b [0121.713] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0121.714] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncViews.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\filesyncviews.dll"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2fa7132a, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2fa7132a, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x34640f56, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xc36c8)) returned 1 [0121.714] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0121.714] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncViews.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\filesyncviews.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncViews.dll.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\filesyncviews.dll.xuy")) returned 1 [0121.715] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\libeay32.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\libeay32.dll", lpFilePart=0x0) returned 0x52 [0121.715] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0121.715] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\libeay32.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\libeay32.dll"), fInfoLevelId=0x0, lpFileInformation=0x233d698 | out: lpFileInformation=0x233d698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2fc3ea78, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2fc3ea78, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x2fc486b2, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x13a0d0)) returned 1 [0121.716] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0121.716] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\libeay32.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\libeay32.dll", lpFilePart=0x0) returned 0x52 [0121.716] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0121.716] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\libeay32.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\libeay32.dll"), fInfoLevelId=0x0, lpFileInformation=0x233d7f8 | out: lpFileInformation=0x233d7f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2fc3ea78, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2fc3ea78, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x2fc486b2, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x13a0d0)) returned 1 [0121.716] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0121.716] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\libeay32.dll", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\libeay32.dll", lpFilePart=0x0) returned 0x52 [0121.716] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0121.716] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\libeay32.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\libeay32.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0121.717] GetFileType (hFile=0x444) returned 0x1 [0121.717] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0121.717] GetFileType (hFile=0x444) returned 0x1 [0121.717] ReadFile (in: hFile=0x444, lpBuffer=0x233fbe8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x233fbe8*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0121.768] CloseHandle (hObject=0x444) returned 1 [0121.768] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\libeay32.dll", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\libeay32.dll", lpFilePart=0x0) returned 0x52 [0121.768] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0121.768] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\libeay32.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\libeay32.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0121.769] GetFileType (hFile=0x444) returned 0x1 [0121.769] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0121.769] GetFileType (hFile=0x444) returned 0x1 [0121.769] WriteFile (in: hFile=0x444, lpBuffer=0x2167b30*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x2167b30*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0121.769] CloseHandle (hObject=0x444) returned 1 [0121.769] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\libeay32.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\libeay32.dll", lpFilePart=0x0) returned 0x52 [0121.769] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\libeay32.dll.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\libeay32.dll.xuy", lpFilePart=0x0) returned 0x56 [0121.769] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0121.769] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\libeay32.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\libeay32.dll"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2fc3ea78, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2fc3ea78, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x346d9fbb, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x13a0d0)) returned 1 [0121.769] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0121.769] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\libeay32.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\libeay32.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\libeay32.dll.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\libeay32.dll.xuy")) returned 1 [0121.770] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\libEGL.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\libEGL.dll", lpFilePart=0x0) returned 0x50 [0121.770] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0121.770] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\libEGL.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\libegl.dll"), fInfoLevelId=0x0, lpFileInformation=0x21bbfb8 | out: lpFileInformation=0x21bbfb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2fe2bd7e, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2fe2bd7e, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x2fe2bd7e, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x74d0)) returned 1 [0121.771] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0121.771] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\libEGL.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\libEGL.dll", lpFilePart=0x0) returned 0x50 [0121.771] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0121.771] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\libEGL.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\libegl.dll"), fInfoLevelId=0x0, lpFileInformation=0x21bc110 | out: lpFileInformation=0x21bc110*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2fe2bd7e, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2fe2bd7e, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x2fe2bd7e, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x74d0)) returned 1 [0121.771] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0121.771] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\libEGL.dll", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\libEGL.dll", lpFilePart=0x0) returned 0x50 [0121.771] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0121.771] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\libEGL.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\libegl.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0121.772] GetFileType (hFile=0x444) returned 0x1 [0121.772] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0121.772] GetFileType (hFile=0x444) returned 0x1 [0121.772] ReadFile (in: hFile=0x444, lpBuffer=0x21be4f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x21be4f0*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0121.791] CloseHandle (hObject=0x444) returned 1 [0121.791] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\libEGL.dll", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\libEGL.dll", lpFilePart=0x0) returned 0x50 [0121.791] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0121.791] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\libEGL.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\libegl.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0121.792] GetFileType (hFile=0x444) returned 0x1 [0121.792] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0121.792] GetFileType (hFile=0x444) returned 0x1 [0121.792] WriteFile (in: hFile=0x444, lpBuffer=0x21bc248*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x21bc248*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0121.792] CloseHandle (hObject=0x444) returned 1 [0121.792] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\libEGL.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\libEGL.dll", lpFilePart=0x0) returned 0x50 [0121.792] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\libEGL.dll.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\libEGL.dll.xuy", lpFilePart=0x0) returned 0x54 [0121.792] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0121.792] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\libEGL.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\libegl.dll"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2fe2bd7e, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2fe2bd7e, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x346ffbd4, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x74d0)) returned 1 [0121.792] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0121.792] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\libEGL.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\libegl.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\libEGL.dll.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\libegl.dll.xuy")) returned 1 [0121.793] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\libGLESv2.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\libGLESv2.dll", lpFilePart=0x0) returned 0x53 [0121.793] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0121.793] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\libGLESv2.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\libglesv2.dll"), fInfoLevelId=0x0, lpFileInformation=0x223a8e0 | out: lpFileInformation=0x223a8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ffbeb1c, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2ffbeb1c, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x2ffcd593, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x1e06d0)) returned 1 [0121.794] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0121.794] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\libGLESv2.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\libGLESv2.dll", lpFilePart=0x0) returned 0x53 [0121.794] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0121.794] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\libGLESv2.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\libglesv2.dll"), fInfoLevelId=0x0, lpFileInformation=0x223aa40 | out: lpFileInformation=0x223aa40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ffbeb1c, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2ffbeb1c, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x2ffcd593, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x1e06d0)) returned 1 [0121.794] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0121.794] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\libGLESv2.dll", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\libGLESv2.dll", lpFilePart=0x0) returned 0x53 [0121.794] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0121.794] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\libGLESv2.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\libglesv2.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0121.795] GetFileType (hFile=0x444) returned 0x1 [0121.795] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0121.795] GetFileType (hFile=0x444) returned 0x1 [0121.795] ReadFile (in: hFile=0x444, lpBuffer=0x223ce30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x223ce30*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0121.836] CloseHandle (hObject=0x444) returned 1 [0121.836] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\libGLESv2.dll", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\libGLESv2.dll", lpFilePart=0x0) returned 0x53 [0121.836] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0121.837] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\libGLESv2.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\libglesv2.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0121.837] GetFileType (hFile=0x444) returned 0x1 [0121.837] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0121.837] GetFileType (hFile=0x444) returned 0x1 [0121.837] WriteFile (in: hFile=0x444, lpBuffer=0x223ab80*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x223ab80*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0121.837] CloseHandle (hObject=0x444) returned 1 [0121.837] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\libGLESv2.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\libGLESv2.dll", lpFilePart=0x0) returned 0x53 [0121.838] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\libGLESv2.dll.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\libGLESv2.dll.xuy", lpFilePart=0x0) returned 0x57 [0121.838] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0121.838] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\libGLESv2.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\libglesv2.dll"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ffbeb1c, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2ffbeb1c, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x34772383, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x1e06d0)) returned 1 [0121.838] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0121.838] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\libGLESv2.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\libglesv2.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\libGLESv2.dll.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\libglesv2.dll.xuy")) returned 1 [0121.839] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\LoadingPage.html", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\LoadingPage.html", lpFilePart=0x0) returned 0x56 [0121.839] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0121.839] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\LoadingPage.html" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\loadingpage.html"), fInfoLevelId=0x0, lpFileInformation=0x22b9228 | out: lpFileInformation=0x22b9228*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3017b0d7, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x3017b0d7, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3017b0d7, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x1900)) returned 1 [0121.840] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0121.841] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\LoadingPage.html", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\LoadingPage.html", lpFilePart=0x0) returned 0x56 [0121.841] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0121.841] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\LoadingPage.html" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\loadingpage.html"), fInfoLevelId=0x0, lpFileInformation=0x22b9398 | out: lpFileInformation=0x22b9398*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3017b0d7, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x3017b0d7, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3017b0d7, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x1900)) returned 1 [0121.841] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0121.841] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\LoadingPage.html", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\LoadingPage.html", lpFilePart=0x0) returned 0x56 [0121.841] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0121.841] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\LoadingPage.html" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\loadingpage.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0121.842] GetFileType (hFile=0x444) returned 0x1 [0121.842] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0121.842] GetFileType (hFile=0x444) returned 0x1 [0121.842] ReadFile (in: hFile=0x444, lpBuffer=0x22bb7a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x22bb7a8*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0121.866] CloseHandle (hObject=0x444) returned 1 [0121.866] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\LoadingPage.html", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\LoadingPage.html", lpFilePart=0x0) returned 0x56 [0121.866] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0121.866] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\LoadingPage.html" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\loadingpage.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0121.867] GetFileType (hFile=0x444) returned 0x1 [0121.867] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0121.867] GetFileType (hFile=0x444) returned 0x1 [0121.867] WriteFile (in: hFile=0x444, lpBuffer=0x22b94e8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x22b94e8*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0121.867] CloseHandle (hObject=0x444) returned 1 [0121.867] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\LoadingPage.html", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\LoadingPage.html", lpFilePart=0x0) returned 0x56 [0121.867] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\LoadingPage.html.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\LoadingPage.html.xuy", lpFilePart=0x0) returned 0x5a [0121.867] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0121.867] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\LoadingPage.html" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\loadingpage.html"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3017b0d7, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x3017b0d7, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x347be733, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0121.867] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0121.867] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\LoadingPage.html" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\loadingpage.html"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\LoadingPage.html.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\loadingpage.html.xuy")) returned 1 [0121.868] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\LoggingPlatform.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\LoggingPlatform.dll", lpFilePart=0x0) returned 0x59 [0121.868] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0121.868] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\LoggingPlatform.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\loggingplatform.dll"), fInfoLevelId=0x0, lpFileInformation=0x2337bc8 | out: lpFileInformation=0x2337bc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3058b904, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x3058b904, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3058b904, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x14e6d0)) returned 1 [0121.869] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0121.869] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\LoggingPlatform.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\LoggingPlatform.dll", lpFilePart=0x0) returned 0x59 [0121.869] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0121.869] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\LoggingPlatform.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\loggingplatform.dll"), fInfoLevelId=0x0, lpFileInformation=0x2337d40 | out: lpFileInformation=0x2337d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3058b904, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x3058b904, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3058b904, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x14e6d0)) returned 1 [0121.869] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0121.869] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\LoggingPlatform.dll", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\LoggingPlatform.dll", lpFilePart=0x0) returned 0x59 [0121.869] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0121.870] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\LoggingPlatform.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\loggingplatform.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0121.870] GetFileType (hFile=0x444) returned 0x1 [0121.870] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0121.870] GetFileType (hFile=0x444) returned 0x1 [0121.870] ReadFile (in: hFile=0x444, lpBuffer=0x233a160, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x233a160*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0121.947] CloseHandle (hObject=0x444) returned 1 [0121.947] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\LoggingPlatform.dll", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\LoggingPlatform.dll", lpFilePart=0x0) returned 0x59 [0121.947] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0121.947] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\LoggingPlatform.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\loggingplatform.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0121.947] GetFileType (hFile=0x444) returned 0x1 [0121.947] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0121.947] GetFileType (hFile=0x444) returned 0x1 [0121.947] WriteFile (in: hFile=0x444, lpBuffer=0x2167b30*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x2167b30*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0121.948] CloseHandle (hObject=0x444) returned 1 [0121.948] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\LoggingPlatform.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\LoggingPlatform.dll", lpFilePart=0x0) returned 0x59 [0121.948] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\LoggingPlatform.dll.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\LoggingPlatform.dll.xuy", lpFilePart=0x0) returned 0x5d [0121.948] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0121.948] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\LoggingPlatform.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\loggingplatform.dll"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3058b904, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x3058b904, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3487d506, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x14e6d0)) returned 1 [0121.948] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0121.948] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\LoggingPlatform.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\loggingplatform.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\LoggingPlatform.dll.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\loggingplatform.dll.xuy")) returned 1 [0121.949] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\msvcp140.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\msvcp140.dll", lpFilePart=0x0) returned 0x52 [0121.949] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0121.949] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\msvcp140.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\msvcp140.dll"), fInfoLevelId=0x0, lpFileInformation=0x21b6580 | out: lpFileInformation=0x21b6580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3081418e, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x3081418e, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3083a33b, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x6acd0)) returned 1 [0121.949] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0121.949] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\msvcp140.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\msvcp140.dll", lpFilePart=0x0) returned 0x52 [0121.949] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0121.951] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\msvcp140.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\msvcp140.dll"), fInfoLevelId=0x0, lpFileInformation=0x21b66e0 | out: lpFileInformation=0x21b66e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3081418e, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x3081418e, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3083a33b, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x6acd0)) returned 1 [0121.952] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0121.952] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\msvcp140.dll", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\msvcp140.dll", lpFilePart=0x0) returned 0x52 [0121.952] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0121.952] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\msvcp140.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\msvcp140.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0121.953] GetFileType (hFile=0x444) returned 0x1 [0121.953] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0121.953] GetFileType (hFile=0x444) returned 0x1 [0121.953] ReadFile (in: hFile=0x444, lpBuffer=0x21b8ad0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x21b8ad0*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0121.968] CloseHandle (hObject=0x444) returned 1 [0121.968] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\msvcp140.dll", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\msvcp140.dll", lpFilePart=0x0) returned 0x52 [0121.969] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0121.969] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\msvcp140.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\msvcp140.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0121.969] GetFileType (hFile=0x444) returned 0x1 [0121.969] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0121.969] GetFileType (hFile=0x444) returned 0x1 [0121.969] WriteFile (in: hFile=0x444, lpBuffer=0x21b6820*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x21b6820*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0121.969] CloseHandle (hObject=0x444) returned 1 [0121.969] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\msvcp140.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\msvcp140.dll", lpFilePart=0x0) returned 0x52 [0121.969] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\msvcp140.dll.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\msvcp140.dll.xuy", lpFilePart=0x0) returned 0x56 [0121.969] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0121.969] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\msvcp140.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\msvcp140.dll"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3081418e, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x3081418e, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x348c980a, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x6acd0)) returned 1 [0121.970] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0121.970] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\msvcp140.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\msvcp140.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\msvcp140.dll.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\msvcp140.dll.xuy")) returned 1 [0121.971] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\OneDriveLogo.png", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\OneDriveLogo.png", lpFilePart=0x0) returned 0x56 [0121.971] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0121.971] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\OneDriveLogo.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\onedrivelogo.png"), fInfoLevelId=0x0, lpFileInformation=0x2234ec8 | out: lpFileInformation=0x2234ec8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30d4bf06, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x30d4bf06, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x30d9ef6a, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x123c)) returned 1 [0121.971] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0121.971] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\OneDriveLogo.png", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\OneDriveLogo.png", lpFilePart=0x0) returned 0x56 [0121.971] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0121.971] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\OneDriveLogo.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\onedrivelogo.png"), fInfoLevelId=0x0, lpFileInformation=0x2235038 | out: lpFileInformation=0x2235038*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30d4bf06, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x30d4bf06, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x30d9ef6a, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x123c)) returned 1 [0121.971] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0121.971] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\OneDriveLogo.png", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\OneDriveLogo.png", lpFilePart=0x0) returned 0x56 [0121.971] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0121.971] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\OneDriveLogo.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\onedrivelogo.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0121.972] GetFileType (hFile=0x444) returned 0x1 [0121.972] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0121.972] GetFileType (hFile=0x444) returned 0x1 [0121.972] ReadFile (in: hFile=0x444, lpBuffer=0x2237448, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x2237448*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0121.985] CloseHandle (hObject=0x444) returned 1 [0121.986] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\OneDriveLogo.png", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\OneDriveLogo.png", lpFilePart=0x0) returned 0x56 [0121.986] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0121.986] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\OneDriveLogo.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\onedrivelogo.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0121.986] GetFileType (hFile=0x444) returned 0x1 [0121.986] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0121.986] GetFileType (hFile=0x444) returned 0x1 [0121.986] WriteFile (in: hFile=0x444, lpBuffer=0x2235188*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x2235188*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0121.986] CloseHandle (hObject=0x444) returned 1 [0121.986] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\OneDriveLogo.png", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\OneDriveLogo.png", lpFilePart=0x0) returned 0x56 [0121.986] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\OneDriveLogo.png.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\OneDriveLogo.png.xuy", lpFilePart=0x0) returned 0x5a [0121.987] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0121.987] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\OneDriveLogo.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\onedrivelogo.png"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30d4bf06, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x30d4bf06, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x348efbec, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0121.987] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0121.987] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\OneDriveLogo.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\onedrivelogo.png"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\OneDriveLogo.png.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\onedrivelogo.png.xuy")) returned 1 [0121.988] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\OneDriveSetup.exe", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\OneDriveSetup.exe", lpFilePart=0x0) returned 0x57 [0121.988] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0121.988] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\OneDriveSetup.exe" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\onedrivesetup.exe"), fInfoLevelId=0x0, lpFileInformation=0x22b3868 | out: lpFileInformation=0x22b3868*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f6688ba, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x5f6688ba, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x270f7ff3, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x174a4d0)) returned 1 [0121.988] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0121.988] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\OneDriveSetup.exe", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\OneDriveSetup.exe", lpFilePart=0x0) returned 0x57 [0121.988] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0121.988] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\OneDriveSetup.exe" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\onedrivesetup.exe"), fInfoLevelId=0x0, lpFileInformation=0x22b39d8 | out: lpFileInformation=0x22b39d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f6688ba, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x5f6688ba, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x270f7ff3, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x174a4d0)) returned 1 [0121.988] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0121.988] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\OneDriveSetup.exe", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\OneDriveSetup.exe", lpFilePart=0x0) returned 0x57 [0121.988] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0121.988] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\OneDriveSetup.exe" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\onedrivesetup.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0121.989] GetFileType (hFile=0x444) returned 0x1 [0121.989] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0121.989] GetFileType (hFile=0x444) returned 0x1 [0121.989] ReadFile (in: hFile=0x444, lpBuffer=0x22b5de8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x22b5de8*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0122.001] CloseHandle (hObject=0x444) returned 1 [0122.003] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\OneDriveSetup.exe", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\OneDriveSetup.exe", lpFilePart=0x0) returned 0x57 [0122.003] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0122.003] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\OneDriveSetup.exe" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\onedrivesetup.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0122.004] GetFileType (hFile=0x444) returned 0x1 [0122.004] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0122.004] GetFileType (hFile=0x444) returned 0x1 [0122.004] WriteFile (in: hFile=0x444, lpBuffer=0x22b3b28*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x22b3b28*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0122.004] CloseHandle (hObject=0x444) returned 1 [0122.004] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\OneDriveSetup.exe", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\OneDriveSetup.exe", lpFilePart=0x0) returned 0x57 [0122.004] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\OneDriveSetup.exe.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\OneDriveSetup.exe.xuy", lpFilePart=0x0) returned 0x5b [0122.004] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0122.004] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\OneDriveSetup.exe" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\onedrivesetup.exe"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f6688ba, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x5f6688ba, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x349160a1, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x174a4d0)) returned 1 [0122.004] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0122.004] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\OneDriveSetup.exe" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\onedrivesetup.exe"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\OneDriveSetup.exe.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\onedrivesetup.exe.xuy")) returned 1 [0122.005] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Core.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Core.dll", lpFilePart=0x0) returned 0x51 [0122.005] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0122.005] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Core.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qt5core.dll"), fInfoLevelId=0x0, lpFileInformation=0x2332208 | out: lpFileInformation=0x2332208*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x312f98f5, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x312f98f5, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3131fb4d, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x48ead0)) returned 1 [0122.006] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0122.006] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Core.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Core.dll", lpFilePart=0x0) returned 0x51 [0122.006] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0122.006] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Core.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qt5core.dll"), fInfoLevelId=0x0, lpFileInformation=0x2332360 | out: lpFileInformation=0x2332360*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x312f98f5, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x312f98f5, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3131fb4d, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x48ead0)) returned 1 [0122.006] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0122.006] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Core.dll", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Core.dll", lpFilePart=0x0) returned 0x51 [0122.006] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0122.006] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Core.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qt5core.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0122.007] GetFileType (hFile=0x444) returned 0x1 [0122.007] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0122.007] GetFileType (hFile=0x444) returned 0x1 [0122.007] ReadFile (in: hFile=0x444, lpBuffer=0x2334740, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x2334740*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0122.054] CloseHandle (hObject=0x444) returned 1 [0122.054] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Core.dll", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Core.dll", lpFilePart=0x0) returned 0x51 [0122.054] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0122.054] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Core.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qt5core.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0122.055] GetFileType (hFile=0x444) returned 0x1 [0122.055] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0122.055] GetFileType (hFile=0x444) returned 0x1 [0122.055] WriteFile (in: hFile=0x444, lpBuffer=0x2167b30*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x2167b30*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0122.055] CloseHandle (hObject=0x444) returned 1 [0122.055] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Core.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Core.dll", lpFilePart=0x0) returned 0x51 [0122.055] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Core.dll.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Core.dll.xuy", lpFilePart=0x0) returned 0x55 [0122.055] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0122.055] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Core.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qt5core.dll"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x312f98f5, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x312f98f5, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x34988437, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x48ead0)) returned 1 [0122.056] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0122.056] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Core.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qt5core.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Core.dll.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qt5core.dll.xuy")) returned 1 [0122.057] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5DBus.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5DBus.dll", lpFilePart=0x0) returned 0x51 [0122.057] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0122.057] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5DBus.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qt5dbus.dll"), fInfoLevelId=0x0, lpFileInformation=0x21b0b10 | out: lpFileInformation=0x21b0b10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3181881b, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x3181881b, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x31819bbc, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x53ed0)) returned 1 [0122.057] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0122.057] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5DBus.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5DBus.dll", lpFilePart=0x0) returned 0x51 [0122.057] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0122.057] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5DBus.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qt5dbus.dll"), fInfoLevelId=0x0, lpFileInformation=0x21b0c68 | out: lpFileInformation=0x21b0c68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3181881b, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x3181881b, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x31819bbc, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x53ed0)) returned 1 [0122.057] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0122.057] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5DBus.dll", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5DBus.dll", lpFilePart=0x0) returned 0x51 [0122.057] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0122.057] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5DBus.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qt5dbus.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0122.058] GetFileType (hFile=0x444) returned 0x1 [0122.058] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0122.058] GetFileType (hFile=0x444) returned 0x1 [0122.058] ReadFile (in: hFile=0x444, lpBuffer=0x21b3048, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x21b3048*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0122.086] CloseHandle (hObject=0x444) returned 1 [0122.086] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5DBus.dll", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5DBus.dll", lpFilePart=0x0) returned 0x51 [0122.086] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0122.087] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5DBus.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qt5dbus.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0122.087] GetFileType (hFile=0x444) returned 0x1 [0122.087] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0122.087] GetFileType (hFile=0x444) returned 0x1 [0122.087] WriteFile (in: hFile=0x444, lpBuffer=0x21b0da0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x21b0da0*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0122.087] CloseHandle (hObject=0x444) returned 1 [0122.087] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5DBus.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5DBus.dll", lpFilePart=0x0) returned 0x51 [0122.087] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5DBus.dll.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5DBus.dll.xuy", lpFilePart=0x0) returned 0x55 [0122.087] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0122.088] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5DBus.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qt5dbus.dll"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3181881b, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x3181881b, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x349d4c51, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x53ed0)) returned 1 [0122.088] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0122.088] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5DBus.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qt5dbus.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5DBus.dll.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qt5dbus.dll.xuy")) returned 1 [0122.089] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Gui.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Gui.dll", lpFilePart=0x0) returned 0x50 [0122.089] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0122.089] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Gui.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qt5gui.dll"), fInfoLevelId=0x0, lpFileInformation=0x222f438 | out: lpFileInformation=0x222f438*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32038f96, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x32038f96, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x320bb9b5, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x4becd0)) returned 1 [0122.090] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0122.090] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Gui.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Gui.dll", lpFilePart=0x0) returned 0x50 [0122.090] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0122.091] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Gui.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qt5gui.dll"), fInfoLevelId=0x0, lpFileInformation=0x222f590 | out: lpFileInformation=0x222f590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32038f96, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x32038f96, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x320bb9b5, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x4becd0)) returned 1 [0122.091] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0122.091] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Gui.dll", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Gui.dll", lpFilePart=0x0) returned 0x50 [0122.091] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0122.091] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Gui.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qt5gui.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0122.092] GetFileType (hFile=0x444) returned 0x1 [0122.092] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0122.092] GetFileType (hFile=0x444) returned 0x1 [0122.092] ReadFile (in: hFile=0x444, lpBuffer=0x2231970, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x2231970*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0122.114] CloseHandle (hObject=0x444) returned 1 [0122.114] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Gui.dll", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Gui.dll", lpFilePart=0x0) returned 0x50 [0122.114] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0122.114] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Gui.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qt5gui.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0122.115] GetFileType (hFile=0x444) returned 0x1 [0122.115] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0122.115] GetFileType (hFile=0x444) returned 0x1 [0122.115] WriteFile (in: hFile=0x444, lpBuffer=0x222f6c8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x222f6c8*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0122.115] CloseHandle (hObject=0x444) returned 1 [0122.115] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Gui.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Gui.dll", lpFilePart=0x0) returned 0x50 [0122.115] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Gui.dll.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Gui.dll.xuy", lpFilePart=0x0) returned 0x54 [0122.115] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0122.115] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Gui.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qt5gui.dll"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32038f96, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x32038f96, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x34a20e2c, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x4becd0)) returned 1 [0122.116] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0122.116] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Gui.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qt5gui.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Gui.dll.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qt5gui.dll.xuy")) returned 1 [0122.117] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Network.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Network.dll", lpFilePart=0x0) returned 0x54 [0122.117] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0122.118] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Network.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qt5network.dll"), fInfoLevelId=0x0, lpFileInformation=0x22add60 | out: lpFileInformation=0x22add60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3259b173, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x3259b173, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3259b173, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0xe4ad0)) returned 1 [0122.118] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0122.118] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Network.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Network.dll", lpFilePart=0x0) returned 0x54 [0122.118] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0122.119] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Network.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qt5network.dll"), fInfoLevelId=0x0, lpFileInformation=0x22adec8 | out: lpFileInformation=0x22adec8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3259b173, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x3259b173, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3259b173, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0xe4ad0)) returned 1 [0122.119] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0122.119] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Network.dll", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Network.dll", lpFilePart=0x0) returned 0x54 [0122.119] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0122.119] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Network.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qt5network.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0122.120] GetFileType (hFile=0x444) returned 0x1 [0122.120] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0122.120] GetFileType (hFile=0x444) returned 0x1 [0122.120] ReadFile (in: hFile=0x444, lpBuffer=0x22b02c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x22b02c8*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0122.142] CloseHandle (hObject=0x444) returned 1 [0122.142] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Network.dll", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Network.dll", lpFilePart=0x0) returned 0x54 [0122.143] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0122.143] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Network.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qt5network.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0122.143] GetFileType (hFile=0x444) returned 0x1 [0122.143] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0122.143] GetFileType (hFile=0x444) returned 0x1 [0122.143] WriteFile (in: hFile=0x444, lpBuffer=0x22ae010*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x22ae010*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0122.143] CloseHandle (hObject=0x444) returned 1 [0122.144] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Network.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Network.dll", lpFilePart=0x0) returned 0x54 [0122.144] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Network.dll.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Network.dll.xuy", lpFilePart=0x0) returned 0x58 [0122.144] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0122.144] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Network.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qt5network.dll"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3259b173, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x3259b173, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x34a6d2fd, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xe4ad0)) returned 1 [0122.144] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0122.144] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Network.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qt5network.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Network.dll.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qt5network.dll.xuy")) returned 1 [0122.145] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5PrintSupport.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5PrintSupport.dll", lpFilePart=0x0) returned 0x59 [0122.145] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0122.145] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5PrintSupport.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qt5printsupport.dll"), fInfoLevelId=0x0, lpFileInformation=0x232c6e0 | out: lpFileInformation=0x232c6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32a8dd9a, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x32a8dd9a, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x32a904ab, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x450d0)) returned 1 [0122.145] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0122.145] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5PrintSupport.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5PrintSupport.dll", lpFilePart=0x0) returned 0x59 [0122.145] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0122.146] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5PrintSupport.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qt5printsupport.dll"), fInfoLevelId=0x0, lpFileInformation=0x232c858 | out: lpFileInformation=0x232c858*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32a8dd9a, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x32a8dd9a, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x32a904ab, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x450d0)) returned 1 [0122.146] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0122.146] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5PrintSupport.dll", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5PrintSupport.dll", lpFilePart=0x0) returned 0x59 [0122.146] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0122.146] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5PrintSupport.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qt5printsupport.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0122.147] GetFileType (hFile=0x444) returned 0x1 [0122.147] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0122.147] GetFileType (hFile=0x444) returned 0x1 [0122.147] ReadFile (in: hFile=0x444, lpBuffer=0x232ec78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x232ec78*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0122.213] CloseHandle (hObject=0x444) returned 1 [0122.213] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5PrintSupport.dll", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5PrintSupport.dll", lpFilePart=0x0) returned 0x59 [0122.213] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0122.213] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5PrintSupport.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qt5printsupport.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0122.214] GetFileType (hFile=0x444) returned 0x1 [0122.214] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0122.214] GetFileType (hFile=0x444) returned 0x1 [0122.214] WriteFile (in: hFile=0x444, lpBuffer=0x2167b30*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x2167b30*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0122.214] CloseHandle (hObject=0x444) returned 1 [0122.214] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5PrintSupport.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5PrintSupport.dll", lpFilePart=0x0) returned 0x59 [0122.214] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5PrintSupport.dll.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5PrintSupport.dll.xuy", lpFilePart=0x0) returned 0x5d [0122.214] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0122.214] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5PrintSupport.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qt5printsupport.dll"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32a8dd9a, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x32a8dd9a, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x34b05e10, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x450d0)) returned 1 [0122.214] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0122.215] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5PrintSupport.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qt5printsupport.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5PrintSupport.dll.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qt5printsupport.dll.xuy")) returned 1 [0122.217] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Qml.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Qml.dll", lpFilePart=0x0) returned 0x50 [0122.217] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0122.217] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Qml.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qt5qml.dll"), fInfoLevelId=0x0, lpFileInformation=0x21ab0a0 | out: lpFileInformation=0x21ab0a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32f031b3, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x32f031b3, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x32f031b3, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x280cd0)) returned 1 [0122.218] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0122.218] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Qml.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Qml.dll", lpFilePart=0x0) returned 0x50 [0122.218] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0122.218] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Qml.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qt5qml.dll"), fInfoLevelId=0x0, lpFileInformation=0x21ab1f8 | out: lpFileInformation=0x21ab1f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32f031b3, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x32f031b3, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x32f031b3, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x280cd0)) returned 1 [0122.218] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0122.218] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Qml.dll", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Qml.dll", lpFilePart=0x0) returned 0x50 [0122.218] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0122.219] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Qml.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qt5qml.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0122.219] GetFileType (hFile=0x444) returned 0x1 [0122.219] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0122.219] GetFileType (hFile=0x444) returned 0x1 [0122.219] ReadFile (in: hFile=0x444, lpBuffer=0x21ad5d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x21ad5d8*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0122.247] CloseHandle (hObject=0x444) returned 1 [0122.248] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Qml.dll", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Qml.dll", lpFilePart=0x0) returned 0x50 [0122.248] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0122.248] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Qml.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qt5qml.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0122.248] GetFileType (hFile=0x444) returned 0x1 [0122.248] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0122.248] GetFileType (hFile=0x444) returned 0x1 [0122.248] WriteFile (in: hFile=0x444, lpBuffer=0x21ab330*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x21ab330*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0122.248] CloseHandle (hObject=0x444) returned 1 [0122.249] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Qml.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Qml.dll", lpFilePart=0x0) returned 0x50 [0122.249] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Qml.dll.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Qml.dll.xuy", lpFilePart=0x0) returned 0x54 [0122.249] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0122.249] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Qml.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qt5qml.dll"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32f031b3, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x32f031b3, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x34b782d0, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x280cd0)) returned 1 [0122.249] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0122.249] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Qml.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qt5qml.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Qml.dll.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qt5qml.dll.xuy")) returned 1 [0122.250] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Quick.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Quick.dll", lpFilePart=0x0) returned 0x52 [0122.250] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0122.250] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Quick.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qt5quick.dll"), fInfoLevelId=0x0, lpFileInformation=0x22299c8 | out: lpFileInformation=0x22299c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x333c7ce8, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x333c7ce8, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x333edf3d, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x2b9ad0)) returned 1 [0122.250] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0122.250] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Quick.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Quick.dll", lpFilePart=0x0) returned 0x52 [0122.251] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0122.251] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Quick.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qt5quick.dll"), fInfoLevelId=0x0, lpFileInformation=0x2229b28 | out: lpFileInformation=0x2229b28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x333c7ce8, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x333c7ce8, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x333edf3d, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x2b9ad0)) returned 1 [0122.251] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0122.251] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Quick.dll", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Quick.dll", lpFilePart=0x0) returned 0x52 [0122.251] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0122.251] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Quick.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qt5quick.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0122.252] GetFileType (hFile=0x444) returned 0x1 [0122.252] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0122.252] GetFileType (hFile=0x444) returned 0x1 [0122.252] ReadFile (in: hFile=0x444, lpBuffer=0x222bf18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x222bf18*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0122.276] CloseHandle (hObject=0x444) returned 1 [0122.276] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Quick.dll", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Quick.dll", lpFilePart=0x0) returned 0x52 [0122.276] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0122.276] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Quick.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qt5quick.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0122.277] GetFileType (hFile=0x444) returned 0x1 [0122.277] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0122.277] GetFileType (hFile=0x444) returned 0x1 [0122.277] WriteFile (in: hFile=0x444, lpBuffer=0x2229c68*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x2229c68*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0122.277] CloseHandle (hObject=0x444) returned 1 [0122.277] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Quick.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Quick.dll", lpFilePart=0x0) returned 0x52 [0122.277] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Quick.dll.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Quick.dll.xuy", lpFilePart=0x0) returned 0x56 [0122.277] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0122.277] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Quick.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qt5quick.dll"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x333c7ce8, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x333c7ce8, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x34b9e7ce, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2b9ad0)) returned 1 [0122.277] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0122.277] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Quick.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qt5quick.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Quick.dll.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qt5quick.dll.xuy")) returned 1 [0122.279] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5QuickControls2.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5QuickControls2.dll", lpFilePart=0x0) returned 0x5b [0122.279] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0122.279] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5QuickControls2.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qt5quickcontrols2.dll"), fInfoLevelId=0x0, lpFileInformation=0x22a8310 | out: lpFileInformation=0x22a8310*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33925232, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x33925232, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3394b3dc, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x192d0)) returned 1 [0122.280] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0122.280] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5QuickControls2.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5QuickControls2.dll", lpFilePart=0x0) returned 0x5b [0122.280] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0122.280] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5QuickControls2.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qt5quickcontrols2.dll"), fInfoLevelId=0x0, lpFileInformation=0x22a8490 | out: lpFileInformation=0x22a8490*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33925232, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x33925232, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3394b3dc, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x192d0)) returned 1 [0122.281] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0122.281] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5QuickControls2.dll", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5QuickControls2.dll", lpFilePart=0x0) returned 0x5b [0122.281] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0122.281] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5QuickControls2.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qt5quickcontrols2.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0122.282] GetFileType (hFile=0x444) returned 0x1 [0122.282] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0122.282] GetFileType (hFile=0x444) returned 0x1 [0122.282] ReadFile (in: hFile=0x444, lpBuffer=0x22aa8c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x22aa8c0*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0122.312] CloseHandle (hObject=0x444) returned 1 [0122.313] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5QuickControls2.dll", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5QuickControls2.dll", lpFilePart=0x0) returned 0x5b [0122.313] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0122.313] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5QuickControls2.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qt5quickcontrols2.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0122.313] GetFileType (hFile=0x444) returned 0x1 [0122.313] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0122.313] GetFileType (hFile=0x444) returned 0x1 [0122.313] WriteFile (in: hFile=0x444, lpBuffer=0x22a85f0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x22a85f0*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0122.313] CloseHandle (hObject=0x444) returned 1 [0122.313] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5QuickControls2.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5QuickControls2.dll", lpFilePart=0x0) returned 0x5b [0122.314] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5QuickControls2.dll.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5QuickControls2.dll.xuy", lpFilePart=0x0) returned 0x5f [0122.314] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0122.314] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5QuickControls2.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qt5quickcontrols2.dll"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33925232, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x33925232, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x34c10c51, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x192d0)) returned 1 [0122.314] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0122.314] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5QuickControls2.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qt5quickcontrols2.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5QuickControls2.dll.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qt5quickcontrols2.dll.xuy")) returned 1 [0122.315] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5QuickTemplates2.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5QuickTemplates2.dll", lpFilePart=0x0) returned 0x5c [0122.315] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0122.315] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5QuickTemplates2.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qt5quicktemplates2.dll"), fInfoLevelId=0x0, lpFileInformation=0x2326d08 | out: lpFileInformation=0x2326d08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33ef4d40, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x33ef4d40, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x33ef4d40, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x9b2d0)) returned 1 [0122.315] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0122.315] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5QuickTemplates2.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5QuickTemplates2.dll", lpFilePart=0x0) returned 0x5c [0122.315] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0122.315] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5QuickTemplates2.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qt5quicktemplates2.dll"), fInfoLevelId=0x0, lpFileInformation=0x2326e90 | out: lpFileInformation=0x2326e90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33ef4d40, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x33ef4d40, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x33ef4d40, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x9b2d0)) returned 1 [0122.316] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0122.316] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5QuickTemplates2.dll", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5QuickTemplates2.dll", lpFilePart=0x0) returned 0x5c [0122.316] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0122.316] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5QuickTemplates2.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qt5quicktemplates2.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0122.316] GetFileType (hFile=0x444) returned 0x1 [0122.316] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0122.317] GetFileType (hFile=0x444) returned 0x1 [0122.317] ReadFile (in: hFile=0x444, lpBuffer=0x23292d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x23292d0*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0122.378] CloseHandle (hObject=0x444) returned 1 [0122.378] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5QuickTemplates2.dll", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5QuickTemplates2.dll", lpFilePart=0x0) returned 0x5c [0122.378] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0122.378] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5QuickTemplates2.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qt5quicktemplates2.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0122.378] GetFileType (hFile=0x444) returned 0x1 [0122.378] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0122.378] GetFileType (hFile=0x444) returned 0x1 [0122.378] WriteFile (in: hFile=0x444, lpBuffer=0x2167b30*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x2167b30*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0122.379] CloseHandle (hObject=0x444) returned 1 [0122.379] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5QuickTemplates2.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5QuickTemplates2.dll", lpFilePart=0x0) returned 0x5c [0122.379] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5QuickTemplates2.dll.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5QuickTemplates2.dll.xuy", lpFilePart=0x0) returned 0x60 [0122.379] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0122.379] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5QuickTemplates2.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qt5quicktemplates2.dll"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33ef4d40, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x33ef4d40, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x34ca95c4, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x9b2d0)) returned 1 [0122.379] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0122.379] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5QuickTemplates2.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qt5quicktemplates2.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5QuickTemplates2.dll.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qt5quicktemplates2.dll.xuy")) returned 1 [0122.380] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Svg.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Svg.dll", lpFilePart=0x0) returned 0x50 [0122.380] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0122.380] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Svg.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qt5svg.dll"), fInfoLevelId=0x0, lpFileInformation=0x21a5708 | out: lpFileInformation=0x21a5708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x344c48d9, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x344c48d9, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x344c48d9, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x44ad0)) returned 1 [0122.382] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0122.382] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Svg.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Svg.dll", lpFilePart=0x0) returned 0x50 [0122.382] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0122.382] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Svg.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qt5svg.dll"), fInfoLevelId=0x0, lpFileInformation=0x21a5860 | out: lpFileInformation=0x21a5860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x344c48d9, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x344c48d9, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x344c48d9, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x44ad0)) returned 1 [0122.382] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0122.382] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Svg.dll", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Svg.dll", lpFilePart=0x0) returned 0x50 [0122.382] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0122.382] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Svg.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qt5svg.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0122.383] GetFileType (hFile=0x444) returned 0x1 [0122.383] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0122.383] GetFileType (hFile=0x444) returned 0x1 [0122.383] ReadFile (in: hFile=0x444, lpBuffer=0x21a7c40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x21a7c40*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0122.412] CloseHandle (hObject=0x444) returned 1 [0122.412] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Svg.dll", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Svg.dll", lpFilePart=0x0) returned 0x50 [0122.412] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0122.412] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Svg.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qt5svg.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0122.413] GetFileType (hFile=0x444) returned 0x1 [0122.413] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0122.413] GetFileType (hFile=0x444) returned 0x1 [0122.413] WriteFile (in: hFile=0x444, lpBuffer=0x21a5998*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x21a5998*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0122.413] CloseHandle (hObject=0x444) returned 1 [0122.413] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Svg.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Svg.dll", lpFilePart=0x0) returned 0x50 [0122.413] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Svg.dll.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Svg.dll.xuy", lpFilePart=0x0) returned 0x54 [0122.413] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0122.413] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Svg.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qt5svg.dll"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x344c48d9, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x344c48d9, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x34cf5be9, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x44ad0)) returned 1 [0122.414] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0122.414] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Svg.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qt5svg.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Svg.dll.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qt5svg.dll.xuy")) returned 1 [0122.415] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Widgets.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Widgets.dll", lpFilePart=0x0) returned 0x54 [0122.415] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0122.415] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Widgets.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qt5widgets.dll"), fInfoLevelId=0x0, lpFileInformation=0x2224030 | out: lpFileInformation=0x2224030*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x349fbb1a, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x349fbb1a, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x34a21d79, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x442cd0)) returned 1 [0122.415] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0122.415] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Widgets.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Widgets.dll", lpFilePart=0x0) returned 0x54 [0122.415] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0122.415] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Widgets.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qt5widgets.dll"), fInfoLevelId=0x0, lpFileInformation=0x2224198 | out: lpFileInformation=0x2224198*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x349fbb1a, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x349fbb1a, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x34a21d79, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x442cd0)) returned 1 [0122.415] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0122.415] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Widgets.dll", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Widgets.dll", lpFilePart=0x0) returned 0x54 [0122.415] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0122.415] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Widgets.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qt5widgets.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0122.416] GetFileType (hFile=0x444) returned 0x1 [0122.416] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0122.416] GetFileType (hFile=0x444) returned 0x1 [0122.416] ReadFile (in: hFile=0x444, lpBuffer=0x2226598, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x2226598*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0122.432] CloseHandle (hObject=0x444) returned 1 [0122.432] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Widgets.dll", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Widgets.dll", lpFilePart=0x0) returned 0x54 [0122.432] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0122.432] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Widgets.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qt5widgets.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0122.433] GetFileType (hFile=0x444) returned 0x1 [0122.433] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0122.433] GetFileType (hFile=0x444) returned 0x1 [0122.433] WriteFile (in: hFile=0x444, lpBuffer=0x22242e0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x22242e0*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0122.433] CloseHandle (hObject=0x444) returned 1 [0122.433] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Widgets.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Widgets.dll", lpFilePart=0x0) returned 0x54 [0122.433] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Widgets.dll.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Widgets.dll.xuy", lpFilePart=0x0) returned 0x58 [0122.433] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0122.433] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Widgets.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qt5widgets.dll"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x349fbb1a, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x349fbb1a, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x34d1bc4c, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x442cd0)) returned 1 [0122.433] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0122.433] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Widgets.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qt5widgets.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Widgets.dll.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qt5widgets.dll.xuy")) returned 1 [0122.437] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5WinExtras.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5WinExtras.dll", lpFilePart=0x0) returned 0x56 [0122.437] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0122.437] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5WinExtras.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qt5winextras.dll"), fInfoLevelId=0x0, lpFileInformation=0x22a29b0 | out: lpFileInformation=0x22a29b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3546a01d, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x3546a01d, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x354dc6e4, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x3d0d0)) returned 1 [0122.438] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0122.438] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5WinExtras.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5WinExtras.dll", lpFilePart=0x0) returned 0x56 [0122.438] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0122.438] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5WinExtras.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qt5winextras.dll"), fInfoLevelId=0x0, lpFileInformation=0x22a2b20 | out: lpFileInformation=0x22a2b20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3546a01d, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x3546a01d, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x354dc6e4, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x3d0d0)) returned 1 [0122.438] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0122.439] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5WinExtras.dll", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5WinExtras.dll", lpFilePart=0x0) returned 0x56 [0122.439] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0122.439] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5WinExtras.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qt5winextras.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0122.439] GetFileType (hFile=0x444) returned 0x1 [0122.439] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0122.439] GetFileType (hFile=0x444) returned 0x1 [0122.439] ReadFile (in: hFile=0x444, lpBuffer=0x22a4f30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x22a4f30*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0122.462] CloseHandle (hObject=0x444) returned 1 [0122.462] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5WinExtras.dll", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5WinExtras.dll", lpFilePart=0x0) returned 0x56 [0122.462] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0122.462] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5WinExtras.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qt5winextras.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0122.463] GetFileType (hFile=0x444) returned 0x1 [0122.463] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0122.463] GetFileType (hFile=0x444) returned 0x1 [0122.463] WriteFile (in: hFile=0x444, lpBuffer=0x22a2c70*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x22a2c70*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0122.463] CloseHandle (hObject=0x444) returned 1 [0122.463] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5WinExtras.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5WinExtras.dll", lpFilePart=0x0) returned 0x56 [0122.463] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5WinExtras.dll.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5WinExtras.dll.xuy", lpFilePart=0x0) returned 0x5a [0122.463] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0122.463] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5WinExtras.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qt5winextras.dll"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3546a01d, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x3546a01d, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x34d680d0, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x3d0d0)) returned 1 [0122.463] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0122.463] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5WinExtras.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qt5winextras.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5WinExtras.dll.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qt5winextras.dll.xuy")) returned 1 [0122.465] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\QuotaCritical.png", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\QuotaCritical.png", lpFilePart=0x0) returned 0x57 [0122.465] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0122.465] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\QuotaCritical.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\quotacritical.png"), fInfoLevelId=0x0, lpFileInformation=0x2321350 | out: lpFileInformation=0x2321350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35da714a, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x35da714a, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x35da714a, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x2266)) returned 1 [0122.465] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0122.465] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\QuotaCritical.png", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\QuotaCritical.png", lpFilePart=0x0) returned 0x57 [0122.465] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0122.465] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\QuotaCritical.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\quotacritical.png"), fInfoLevelId=0x0, lpFileInformation=0x23214c0 | out: lpFileInformation=0x23214c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35da714a, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x35da714a, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x35da714a, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x2266)) returned 1 [0122.465] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0122.465] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\QuotaCritical.png", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\QuotaCritical.png", lpFilePart=0x0) returned 0x57 [0122.465] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0122.466] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\QuotaCritical.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\quotacritical.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0122.466] GetFileType (hFile=0x444) returned 0x1 [0122.466] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0122.466] GetFileType (hFile=0x444) returned 0x1 [0122.466] ReadFile (in: hFile=0x444, lpBuffer=0x23238d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x23238d0*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0122.514] CloseHandle (hObject=0x444) returned 1 [0122.514] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\QuotaCritical.png", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\QuotaCritical.png", lpFilePart=0x0) returned 0x57 [0122.514] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0122.514] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\QuotaCritical.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\quotacritical.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0122.515] GetFileType (hFile=0x444) returned 0x1 [0122.515] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0122.515] GetFileType (hFile=0x444) returned 0x1 [0122.515] WriteFile (in: hFile=0x444, lpBuffer=0x2167b30*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x2167b30*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0122.515] CloseHandle (hObject=0x444) returned 1 [0122.515] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\QuotaCritical.png", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\QuotaCritical.png", lpFilePart=0x0) returned 0x57 [0122.515] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\QuotaCritical.png.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\QuotaCritical.png.xuy", lpFilePart=0x0) returned 0x5b [0122.515] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0122.515] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\QuotaCritical.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\quotacritical.png"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35da714a, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x35da714a, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x34e00e18, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2266)) returned 1 [0122.515] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0122.515] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\QuotaCritical.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\quotacritical.png"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\QuotaCritical.png.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\quotacritical.png.xuy")) returned 1 [0122.517] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\QuotaError.png", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\QuotaError.png", lpFilePart=0x0) returned 0x54 [0122.517] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0122.517] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\QuotaError.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\quotaerror.png"), fInfoLevelId=0x0, lpFileInformation=0x219fcc0 | out: lpFileInformation=0x219fcc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36291edb, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x36291edb, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x362b8133, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x244a)) returned 1 [0122.518] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0122.518] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\QuotaError.png", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\QuotaError.png", lpFilePart=0x0) returned 0x54 [0122.518] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0122.518] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\QuotaError.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\quotaerror.png"), fInfoLevelId=0x0, lpFileInformation=0x219fe28 | out: lpFileInformation=0x219fe28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36291edb, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x36291edb, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x362b8133, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x244a)) returned 1 [0122.518] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0122.518] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\QuotaError.png", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\QuotaError.png", lpFilePart=0x0) returned 0x54 [0122.518] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0122.519] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\QuotaError.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\quotaerror.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0122.519] GetFileType (hFile=0x444) returned 0x1 [0122.519] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0122.520] GetFileType (hFile=0x444) returned 0x1 [0122.520] ReadFile (in: hFile=0x444, lpBuffer=0x21a2228, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x21a2228*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0122.553] CloseHandle (hObject=0x444) returned 1 [0122.553] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\QuotaError.png", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\QuotaError.png", lpFilePart=0x0) returned 0x54 [0122.553] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0122.553] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\QuotaError.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\quotaerror.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0122.554] GetFileType (hFile=0x444) returned 0x1 [0122.554] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0122.554] GetFileType (hFile=0x444) returned 0x1 [0122.554] WriteFile (in: hFile=0x444, lpBuffer=0x219ff70*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x219ff70*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0122.554] CloseHandle (hObject=0x444) returned 1 [0122.554] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\QuotaError.png", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\QuotaError.png", lpFilePart=0x0) returned 0x54 [0122.554] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\QuotaError.png.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\QuotaError.png.xuy", lpFilePart=0x0) returned 0x58 [0122.554] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0122.554] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\QuotaError.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\quotaerror.png"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36291edb, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x36291edb, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x34e4cf93, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x244a)) returned 1 [0122.555] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0122.555] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\QuotaError.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\quotaerror.png"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\QuotaError.png.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\quotaerror.png.xuy")) returned 1 [0122.556] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\QuotaNearing.png", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\QuotaNearing.png", lpFilePart=0x0) returned 0x56 [0122.556] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0122.556] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\QuotaNearing.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\quotanearing.png"), fInfoLevelId=0x0, lpFileInformation=0x221e640 | out: lpFileInformation=0x221e640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3696cb0b, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x3696cb0b, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3696cb0b, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x1d59)) returned 1 [0122.556] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0122.556] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\QuotaNearing.png", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\QuotaNearing.png", lpFilePart=0x0) returned 0x56 [0122.556] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0122.556] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\QuotaNearing.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\quotanearing.png"), fInfoLevelId=0x0, lpFileInformation=0x221e7b0 | out: lpFileInformation=0x221e7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3696cb0b, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x3696cb0b, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3696cb0b, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x1d59)) returned 1 [0122.556] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0122.556] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\QuotaNearing.png", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\QuotaNearing.png", lpFilePart=0x0) returned 0x56 [0122.556] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0122.557] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\QuotaNearing.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\quotanearing.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0122.557] GetFileType (hFile=0x444) returned 0x1 [0122.557] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0122.557] GetFileType (hFile=0x444) returned 0x1 [0122.557] ReadFile (in: hFile=0x444, lpBuffer=0x2220bc0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x2220bc0*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0122.577] CloseHandle (hObject=0x444) returned 1 [0122.577] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\QuotaNearing.png", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\QuotaNearing.png", lpFilePart=0x0) returned 0x56 [0122.577] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0122.577] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\QuotaNearing.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\quotanearing.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0122.578] GetFileType (hFile=0x444) returned 0x1 [0122.578] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0122.578] GetFileType (hFile=0x444) returned 0x1 [0122.578] WriteFile (in: hFile=0x444, lpBuffer=0x221e900*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x221e900*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0122.578] CloseHandle (hObject=0x444) returned 1 [0122.578] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\QuotaNearing.png", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\QuotaNearing.png", lpFilePart=0x0) returned 0x56 [0122.578] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\QuotaNearing.png.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\QuotaNearing.png.xuy", lpFilePart=0x0) returned 0x5a [0122.578] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0122.578] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\QuotaNearing.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\quotanearing.png"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3696cb0b, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x3696cb0b, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x34e99445, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0122.578] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0122.578] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\QuotaNearing.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\quotanearing.png"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\QuotaNearing.png.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\quotanearing.png.xuy")) returned 1 [0122.580] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\RemoteAccess.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\RemoteAccess.dll", lpFilePart=0x0) returned 0x56 [0122.580] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0122.580] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\RemoteAccess.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\remoteaccess.dll"), fInfoLevelId=0x0, lpFileInformation=0x229cfe0 | out: lpFileInformation=0x229cfe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36ef01ee, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x36ef01ee, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x36ef01ee, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x9e4d0)) returned 1 [0122.581] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0122.581] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\RemoteAccess.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\RemoteAccess.dll", lpFilePart=0x0) returned 0x56 [0122.581] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0122.581] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\RemoteAccess.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\remoteaccess.dll"), fInfoLevelId=0x0, lpFileInformation=0x229d150 | out: lpFileInformation=0x229d150*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36ef01ee, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x36ef01ee, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x36ef01ee, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x9e4d0)) returned 1 [0122.582] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0122.582] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\RemoteAccess.dll", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\RemoteAccess.dll", lpFilePart=0x0) returned 0x56 [0122.582] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0122.582] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\RemoteAccess.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\remoteaccess.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0122.583] GetFileType (hFile=0x444) returned 0x1 [0122.583] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0122.583] GetFileType (hFile=0x444) returned 0x1 [0122.583] ReadFile (in: hFile=0x444, lpBuffer=0x229f560, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x229f560*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0122.597] CloseHandle (hObject=0x444) returned 1 [0122.598] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\RemoteAccess.dll", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\RemoteAccess.dll", lpFilePart=0x0) returned 0x56 [0122.598] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0122.598] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\RemoteAccess.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\remoteaccess.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0122.598] GetFileType (hFile=0x444) returned 0x1 [0122.598] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0122.598] GetFileType (hFile=0x444) returned 0x1 [0122.598] WriteFile (in: hFile=0x444, lpBuffer=0x229d2a0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x229d2a0*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0122.599] CloseHandle (hObject=0x444) returned 1 [0122.599] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\RemoteAccess.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\RemoteAccess.dll", lpFilePart=0x0) returned 0x56 [0122.599] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\RemoteAccess.dll.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\RemoteAccess.dll.xuy", lpFilePart=0x0) returned 0x5a [0122.599] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0122.599] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\RemoteAccess.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\remoteaccess.dll"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36ef01ee, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x36ef01ee, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x34ebf55c, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x9e4d0)) returned 1 [0122.599] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0122.599] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\RemoteAccess.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\remoteaccess.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\RemoteAccess.dll.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\remoteaccess.dll.xuy")) returned 1 [0122.601] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\SaveApplicationEventLogs.wsf", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\SaveApplicationEventLogs.wsf", lpFilePart=0x0) returned 0x62 [0122.601] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0122.601] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\SaveApplicationEventLogs.wsf" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\saveapplicationeventlogs.wsf"), fInfoLevelId=0x0, lpFileInformation=0x231b980 | out: lpFileInformation=0x231b980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3734261c, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x3734261c, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x373dafa4, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x5d5)) returned 1 [0122.601] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0122.601] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\SaveApplicationEventLogs.wsf", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\SaveApplicationEventLogs.wsf", lpFilePart=0x0) returned 0x62 [0122.601] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0122.601] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\SaveApplicationEventLogs.wsf" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\saveapplicationeventlogs.wsf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0122.601] GetFileType (hFile=0x444) returned 0x1 [0122.601] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0122.601] GetFileType (hFile=0x444) returned 0x1 [0122.601] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0x5d5 [0122.601] ReadFile (in: hFile=0x444, lpBuffer=0x231c2b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be718, lpOverlapped=0x0 | out: lpBuffer=0x231c2b0*, lpNumberOfBytesRead=0x3be718*=0x5d5, lpOverlapped=0x0) returned 1 [0122.616] CloseHandle (hObject=0x444) returned 1 [0122.671] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\SaveApplicationEventLogs.wsf", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\SaveApplicationEventLogs.wsf", lpFilePart=0x0) returned 0x62 [0122.671] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0122.671] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\SaveApplicationEventLogs.wsf" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\saveapplicationeventlogs.wsf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0122.672] GetFileType (hFile=0x444) returned 0x1 [0122.672] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0122.672] GetFileType (hFile=0x444) returned 0x1 [0122.672] WriteFile (in: hFile=0x444, lpBuffer=0x2192420*, nNumberOfBytesToWrite=0x5e0, lpNumberOfBytesWritten=0x3be628, lpOverlapped=0x0 | out: lpBuffer=0x2192420*, lpNumberOfBytesWritten=0x3be628*=0x5e0, lpOverlapped=0x0) returned 1 [0122.673] CloseHandle (hObject=0x444) returned 1 [0122.673] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\SaveApplicationEventLogs.wsf", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\SaveApplicationEventLogs.wsf", lpFilePart=0x0) returned 0x62 [0122.673] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\SaveApplicationEventLogs.wsf.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\SaveApplicationEventLogs.wsf.xuy", lpFilePart=0x0) returned 0x66 [0122.673] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0122.673] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\SaveApplicationEventLogs.wsf" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\saveapplicationeventlogs.wsf"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3734261c, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x3734261c, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x34f7e28f, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x5e0)) returned 1 [0122.673] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0122.673] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\SaveApplicationEventLogs.wsf" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\saveapplicationeventlogs.wsf"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\SaveApplicationEventLogs.wsf.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\saveapplicationeventlogs.wsf.xuy")) returned 1 [0122.674] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ScreenshotOptIn.gif", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ScreenshotOptIn.gif", lpFilePart=0x0) returned 0x59 [0122.674] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0122.674] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ScreenshotOptIn.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\screenshotoptin.gif"), fInfoLevelId=0x0, lpFileInformation=0x2193730 | out: lpFileInformation=0x2193730*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x378535fe, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x378535fe, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x378535fe, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x3b721)) returned 1 [0122.675] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0122.675] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ScreenshotOptIn.gif", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ScreenshotOptIn.gif", lpFilePart=0x0) returned 0x59 [0122.675] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0122.676] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ScreenshotOptIn.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\screenshotoptin.gif"), fInfoLevelId=0x0, lpFileInformation=0x21938a8 | out: lpFileInformation=0x21938a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x378535fe, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x378535fe, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x378535fe, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x3b721)) returned 1 [0122.676] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0122.676] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ScreenshotOptIn.gif", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ScreenshotOptIn.gif", lpFilePart=0x0) returned 0x59 [0122.676] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0122.676] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ScreenshotOptIn.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\screenshotoptin.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0122.676] GetFileType (hFile=0x444) returned 0x1 [0122.676] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0122.677] GetFileType (hFile=0x444) returned 0x1 [0122.677] ReadFile (in: hFile=0x444, lpBuffer=0x2195cc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x2195cc8*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0122.695] CloseHandle (hObject=0x444) returned 1 [0122.695] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ScreenshotOptIn.gif", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ScreenshotOptIn.gif", lpFilePart=0x0) returned 0x59 [0122.695] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0122.695] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ScreenshotOptIn.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\screenshotoptin.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0122.695] GetFileType (hFile=0x444) returned 0x1 [0122.695] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0122.695] GetFileType (hFile=0x444) returned 0x1 [0122.695] WriteFile (in: hFile=0x444, lpBuffer=0x2193a00*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x2193a00*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0122.695] CloseHandle (hObject=0x444) returned 1 [0122.696] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ScreenshotOptIn.gif", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ScreenshotOptIn.gif", lpFilePart=0x0) returned 0x59 [0122.696] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ScreenshotOptIn.gif.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ScreenshotOptIn.gif.xuy", lpFilePart=0x0) returned 0x5d [0122.696] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0122.696] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ScreenshotOptIn.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\screenshotoptin.gif"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x378535fe, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x378535fe, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x34fa43d3, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x3b721)) returned 1 [0122.696] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0122.696] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ScreenshotOptIn.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\screenshotoptin.gif"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ScreenshotOptIn.gif.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\screenshotoptin.gif.xuy")) returned 1 [0122.697] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sqmapi.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sqmapi.dll", lpFilePart=0x0) returned 0x50 [0122.697] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0122.697] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sqmapi.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\sqmapi.dll"), fInfoLevelId=0x0, lpFileInformation=0x2212108 | out: lpFileInformation=0x2212108*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37cf1ed5, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x37cf1ed5, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x37cf1ed5, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x320d0)) returned 1 [0122.697] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0122.697] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sqmapi.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sqmapi.dll", lpFilePart=0x0) returned 0x50 [0122.697] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0122.697] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sqmapi.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\sqmapi.dll"), fInfoLevelId=0x0, lpFileInformation=0x2212260 | out: lpFileInformation=0x2212260*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37cf1ed5, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x37cf1ed5, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x37cf1ed5, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x320d0)) returned 1 [0122.697] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0122.697] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sqmapi.dll", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sqmapi.dll", lpFilePart=0x0) returned 0x50 [0122.697] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0122.697] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sqmapi.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\sqmapi.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0122.698] GetFileType (hFile=0x444) returned 0x1 [0122.698] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0122.698] GetFileType (hFile=0x444) returned 0x1 [0122.698] ReadFile (in: hFile=0x444, lpBuffer=0x2214640, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x2214640*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0122.726] CloseHandle (hObject=0x444) returned 1 [0122.727] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sqmapi.dll", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sqmapi.dll", lpFilePart=0x0) returned 0x50 [0122.727] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0122.727] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sqmapi.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\sqmapi.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0122.727] GetFileType (hFile=0x444) returned 0x1 [0122.727] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0122.727] GetFileType (hFile=0x444) returned 0x1 [0122.727] WriteFile (in: hFile=0x444, lpBuffer=0x2212398*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x2212398*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0122.727] CloseHandle (hObject=0x444) returned 1 [0122.727] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sqmapi.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sqmapi.dll", lpFilePart=0x0) returned 0x50 [0122.727] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sqmapi.dll.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sqmapi.dll.xuy", lpFilePart=0x0) returned 0x54 [0122.727] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0122.728] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sqmapi.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\sqmapi.dll"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37cf1ed5, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x37cf1ed5, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x34ff07ad, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x320d0)) returned 1 [0122.728] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0122.728] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sqmapi.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\sqmapi.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sqmapi.dll.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\sqmapi.dll.xuy")) returned 1 [0122.729] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ssleay32.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ssleay32.dll", lpFilePart=0x0) returned 0x52 [0122.729] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0122.729] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ssleay32.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ssleay32.dll"), fInfoLevelId=0x0, lpFileInformation=0x2290a30 | out: lpFileInformation=0x2290a30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38229164, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x38229164, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x38229164, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x478d0)) returned 1 [0122.729] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0122.729] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ssleay32.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ssleay32.dll", lpFilePart=0x0) returned 0x52 [0122.729] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0122.729] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ssleay32.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ssleay32.dll"), fInfoLevelId=0x0, lpFileInformation=0x2290b90 | out: lpFileInformation=0x2290b90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38229164, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x38229164, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x38229164, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x478d0)) returned 1 [0122.729] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0122.729] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ssleay32.dll", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ssleay32.dll", lpFilePart=0x0) returned 0x52 [0122.729] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0122.729] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ssleay32.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ssleay32.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0122.730] GetFileType (hFile=0x444) returned 0x1 [0122.730] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0122.730] GetFileType (hFile=0x444) returned 0x1 [0122.730] ReadFile (in: hFile=0x444, lpBuffer=0x2292f80, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x2292f80*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0122.746] CloseHandle (hObject=0x444) returned 1 [0122.746] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ssleay32.dll", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ssleay32.dll", lpFilePart=0x0) returned 0x52 [0122.747] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0122.747] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ssleay32.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ssleay32.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0122.747] GetFileType (hFile=0x444) returned 0x1 [0122.747] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0122.747] GetFileType (hFile=0x444) returned 0x1 [0122.747] WriteFile (in: hFile=0x444, lpBuffer=0x2290cd0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x2290cd0*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0122.747] CloseHandle (hObject=0x444) returned 1 [0122.747] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ssleay32.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ssleay32.dll", lpFilePart=0x0) returned 0x52 [0122.747] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ssleay32.dll.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ssleay32.dll.xuy", lpFilePart=0x0) returned 0x56 [0122.747] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0122.747] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ssleay32.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ssleay32.dll"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38229164, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x38229164, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3503ce6f, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x478d0)) returned 1 [0122.748] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0122.748] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ssleay32.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ssleay32.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ssleay32.dll.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ssleay32.dll.xuy")) returned 1 [0122.749] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\SyncEngine.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\SyncEngine.dll", lpFilePart=0x0) returned 0x54 [0122.749] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0122.749] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\SyncEngine.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\syncengine.dll"), fInfoLevelId=0x0, lpFileInformation=0x230f378 | out: lpFileInformation=0x230f378*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38845163, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x38845163, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3886b3d2, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x51b0d0)) returned 1 [0122.749] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0122.750] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\SyncEngine.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\SyncEngine.dll", lpFilePart=0x0) returned 0x54 [0122.750] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0122.750] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\SyncEngine.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\syncengine.dll"), fInfoLevelId=0x0, lpFileInformation=0x230f4e0 | out: lpFileInformation=0x230f4e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38845163, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x38845163, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3886b3d2, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x51b0d0)) returned 1 [0122.750] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0122.750] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\SyncEngine.dll", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\SyncEngine.dll", lpFilePart=0x0) returned 0x54 [0122.750] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0122.750] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\SyncEngine.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\syncengine.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0122.751] GetFileType (hFile=0x444) returned 0x1 [0122.751] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0122.751] GetFileType (hFile=0x444) returned 0x1 [0122.751] ReadFile (in: hFile=0x444, lpBuffer=0x23118e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x23118e0*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0122.810] CloseHandle (hObject=0x444) returned 1 [0122.810] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\SyncEngine.dll", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\SyncEngine.dll", lpFilePart=0x0) returned 0x54 [0122.810] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0122.810] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\SyncEngine.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\syncengine.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0122.811] GetFileType (hFile=0x444) returned 0x1 [0122.811] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0122.811] GetFileType (hFile=0x444) returned 0x1 [0122.811] WriteFile (in: hFile=0x444, lpBuffer=0x2167b30*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x2167b30*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0122.811] CloseHandle (hObject=0x444) returned 1 [0122.811] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\SyncEngine.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\SyncEngine.dll", lpFilePart=0x0) returned 0x54 [0122.811] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\SyncEngine.dll.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\SyncEngine.dll.xuy", lpFilePart=0x0) returned 0x58 [0122.811] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0122.811] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\SyncEngine.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\syncengine.dll"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38845163, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x38845163, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x350d57a6, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x51b0d0)) returned 1 [0122.811] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0122.811] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\SyncEngine.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\syncengine.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\SyncEngine.dll.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\syncengine.dll.xuy")) returned 1 [0122.812] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Telemetry.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Telemetry.dll", lpFilePart=0x0) returned 0x53 [0122.812] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0122.812] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Telemetry.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\telemetry.dll"), fInfoLevelId=0x0, lpFileInformation=0x2190900 | out: lpFileInformation=0x2190900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38e87422, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x38e87422, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x38e87422, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x560d0)) returned 1 [0122.812] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0122.812] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Telemetry.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Telemetry.dll", lpFilePart=0x0) returned 0x53 [0122.812] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0122.813] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Telemetry.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\telemetry.dll"), fInfoLevelId=0x0, lpFileInformation=0x2190a60 | out: lpFileInformation=0x2190a60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38e87422, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x38e87422, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x38e87422, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x560d0)) returned 1 [0122.813] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0122.813] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Telemetry.dll", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Telemetry.dll", lpFilePart=0x0) returned 0x53 [0122.813] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0122.813] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Telemetry.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\telemetry.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0122.813] GetFileType (hFile=0x444) returned 0x1 [0122.813] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0122.813] GetFileType (hFile=0x444) returned 0x1 [0122.813] ReadFile (in: hFile=0x444, lpBuffer=0x2192e50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x2192e50*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0122.839] CloseHandle (hObject=0x444) returned 1 [0122.839] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Telemetry.dll", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Telemetry.dll", lpFilePart=0x0) returned 0x53 [0122.839] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0122.839] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Telemetry.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\telemetry.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0122.839] GetFileType (hFile=0x444) returned 0x1 [0122.839] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0122.840] GetFileType (hFile=0x444) returned 0x1 [0122.840] WriteFile (in: hFile=0x444, lpBuffer=0x2190ba0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x2190ba0*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0122.840] CloseHandle (hObject=0x444) returned 1 [0122.840] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Telemetry.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Telemetry.dll", lpFilePart=0x0) returned 0x53 [0122.840] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Telemetry.dll.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Telemetry.dll.xuy", lpFilePart=0x0) returned 0x57 [0122.840] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0122.840] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Telemetry.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\telemetry.dll"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38e87422, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x38e87422, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x350fb932, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x560d0)) returned 1 [0122.841] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0122.841] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Telemetry.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\telemetry.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Telemetry.dll.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\telemetry.dll.xuy")) returned 1 [0122.842] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\TestSharePage.html", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\TestSharePage.html", lpFilePart=0x0) returned 0x58 [0122.842] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0122.842] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\TestSharePage.html" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\testsharepage.html"), fInfoLevelId=0x0, lpFileInformation=0x220f248 | out: lpFileInformation=0x220f248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39456fd7, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x39456fd7, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x39456fd7, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x484)) returned 1 [0122.843] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0122.843] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\TestSharePage.html", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\TestSharePage.html", lpFilePart=0x0) returned 0x58 [0122.843] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0122.843] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\TestSharePage.html" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\testsharepage.html"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0122.843] GetFileType (hFile=0x444) returned 0x1 [0122.843] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0122.843] GetFileType (hFile=0x444) returned 0x1 [0122.843] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0x484 [0122.843] ReadFile (in: hFile=0x444, lpBuffer=0x220f9d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be718, lpOverlapped=0x0 | out: lpBuffer=0x220f9d8*, lpNumberOfBytesRead=0x3be718*=0x484, lpOverlapped=0x0) returned 1 [0122.854] CloseHandle (hObject=0x444) returned 1 [0122.866] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\TestSharePage.html", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\TestSharePage.html", lpFilePart=0x0) returned 0x58 [0122.866] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0122.866] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\TestSharePage.html" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\testsharepage.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0122.867] GetFileType (hFile=0x444) returned 0x1 [0122.867] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0122.867] GetFileType (hFile=0x444) returned 0x1 [0122.867] WriteFile (in: hFile=0x444, lpBuffer=0x22880b8*, nNumberOfBytesToWrite=0x490, lpNumberOfBytesWritten=0x3be628, lpOverlapped=0x0 | out: lpBuffer=0x22880b8*, lpNumberOfBytesWritten=0x3be628*=0x490, lpOverlapped=0x0) returned 1 [0122.868] CloseHandle (hObject=0x444) returned 1 [0122.868] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\TestSharePage.html", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\TestSharePage.html", lpFilePart=0x0) returned 0x58 [0122.868] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\TestSharePage.html.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\TestSharePage.html.xuy", lpFilePart=0x0) returned 0x5c [0122.868] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0122.868] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\TestSharePage.html" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\testsharepage.html"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39456fd7, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x39456fd7, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x35147e1b, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x490)) returned 1 [0122.869] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0122.869] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\TestSharePage.html" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\testsharepage.html"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\TestSharePage.html.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\testsharepage.html.xuy")) returned 1 [0122.870] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", lpFilePart=0x0) returned 0x5b [0122.870] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0122.870] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt"), fInfoLevelId=0x0, lpFileInformation=0x2289398 | out: lpFileInformation=0x2289398*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39a0095d, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x39a0095d, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x39a0095d, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0xbfe9)) returned 1 [0122.870] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0122.870] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", lpFilePart=0x0) returned 0x5b [0122.870] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0122.870] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt"), fInfoLevelId=0x0, lpFileInformation=0x2289518 | out: lpFileInformation=0x2289518*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39a0095d, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x39a0095d, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x39a0095d, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0xbfe9)) returned 1 [0122.870] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0122.870] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", lpFilePart=0x0) returned 0x5b [0122.870] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0122.870] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0122.871] GetFileType (hFile=0x444) returned 0x1 [0122.871] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0122.871] GetFileType (hFile=0x444) returned 0x1 [0122.871] ReadFile (in: hFile=0x444, lpBuffer=0x228b948, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x228b948*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0122.886] CloseHandle (hObject=0x444) returned 1 [0122.886] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", lpFilePart=0x0) returned 0x5b [0122.886] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0122.886] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0122.886] GetFileType (hFile=0x444) returned 0x1 [0122.886] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0122.886] GetFileType (hFile=0x444) returned 0x1 [0122.886] WriteFile (in: hFile=0x444, lpBuffer=0x2289678*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x2289678*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0122.886] CloseHandle (hObject=0x444) returned 1 [0122.886] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", lpFilePart=0x0) returned 0x5b [0122.887] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt.xuy", lpFilePart=0x0) returned 0x5f [0122.887] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0122.887] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39a0095d, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x39a0095d, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3516e0b4, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xbfe9)) returned 1 [0122.887] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0122.888] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt.xuy")) returned 1 [0122.889] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ucrtbase.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ucrtbase.dll", lpFilePart=0x0) returned 0x52 [0122.889] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0122.889] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ucrtbase.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ucrtbase.dll"), fInfoLevelId=0x0, lpFileInformation=0x2307d90 | out: lpFileInformation=0x2307d90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a042c72, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x3a042c72, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3a042c72, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x11ccc8)) returned 1 [0122.890] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0122.890] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ucrtbase.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ucrtbase.dll", lpFilePart=0x0) returned 0x52 [0122.890] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0122.890] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ucrtbase.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ucrtbase.dll"), fInfoLevelId=0x0, lpFileInformation=0x2307ef0 | out: lpFileInformation=0x2307ef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a042c72, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x3a042c72, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3a042c72, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x11ccc8)) returned 1 [0122.890] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0122.890] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ucrtbase.dll", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ucrtbase.dll", lpFilePart=0x0) returned 0x52 [0122.890] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0122.890] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ucrtbase.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ucrtbase.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0122.891] GetFileType (hFile=0x444) returned 0x1 [0122.891] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0122.891] GetFileType (hFile=0x444) returned 0x1 [0122.891] ReadFile (in: hFile=0x444, lpBuffer=0x230a2e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x230a2e0*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0122.968] CloseHandle (hObject=0x444) returned 1 [0122.969] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ucrtbase.dll", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ucrtbase.dll", lpFilePart=0x0) returned 0x52 [0122.969] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0122.969] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ucrtbase.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ucrtbase.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0122.969] GetFileType (hFile=0x444) returned 0x1 [0122.969] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0122.969] GetFileType (hFile=0x444) returned 0x1 [0122.969] WriteFile (in: hFile=0x444, lpBuffer=0x2167b30*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x2167b30*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0122.969] CloseHandle (hObject=0x444) returned 1 [0122.969] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ucrtbase.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ucrtbase.dll", lpFilePart=0x0) returned 0x52 [0122.969] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ucrtbase.dll.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ucrtbase.dll.xuy", lpFilePart=0x0) returned 0x56 [0122.969] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0122.970] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ucrtbase.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ucrtbase.dll"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a042c72, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x3a042c72, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x35252f4d, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x11ccc8)) returned 1 [0122.970] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0122.970] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ucrtbase.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ucrtbase.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ucrtbase.dll.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ucrtbase.dll.xuy")) returned 1 [0122.971] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\vcruntime140.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\vcruntime140.dll", lpFilePart=0x0) returned 0x56 [0122.971] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0122.971] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\vcruntime140.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\vcruntime140.dll"), fInfoLevelId=0x0, lpFileInformation=0x21866e0 | out: lpFileInformation=0x21866e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a612790, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x3a612790, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3a612790, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x144d0)) returned 1 [0122.971] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0122.971] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\vcruntime140.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\vcruntime140.dll", lpFilePart=0x0) returned 0x56 [0122.971] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0122.971] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\vcruntime140.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\vcruntime140.dll"), fInfoLevelId=0x0, lpFileInformation=0x2186850 | out: lpFileInformation=0x2186850*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a612790, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x3a612790, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3a612790, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x144d0)) returned 1 [0122.971] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0122.971] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\vcruntime140.dll", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\vcruntime140.dll", lpFilePart=0x0) returned 0x56 [0122.971] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0122.972] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\vcruntime140.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\vcruntime140.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0122.972] GetFileType (hFile=0x444) returned 0x1 [0122.972] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0122.972] GetFileType (hFile=0x444) returned 0x1 [0122.972] ReadFile (in: hFile=0x444, lpBuffer=0x2188c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x2188c60*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0122.996] CloseHandle (hObject=0x444) returned 1 [0122.996] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\vcruntime140.dll", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\vcruntime140.dll", lpFilePart=0x0) returned 0x56 [0122.996] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0122.996] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\vcruntime140.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\vcruntime140.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0122.997] GetFileType (hFile=0x444) returned 0x1 [0122.997] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0122.997] GetFileType (hFile=0x444) returned 0x1 [0122.997] WriteFile (in: hFile=0x444, lpBuffer=0x21869a0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x21869a0*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0122.997] CloseHandle (hObject=0x444) returned 1 [0122.997] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\vcruntime140.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\vcruntime140.dll", lpFilePart=0x0) returned 0x56 [0122.997] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\vcruntime140.dll.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\vcruntime140.dll.xuy", lpFilePart=0x0) returned 0x5a [0122.997] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0122.997] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\vcruntime140.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\vcruntime140.dll"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a612790, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x3a612790, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3529f338, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x144d0)) returned 1 [0122.997] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0122.997] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\vcruntime140.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\vcruntime140.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\vcruntime140.dll.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\vcruntime140.dll.xuy")) returned 1 [0122.998] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Warning.png", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Warning.png", lpFilePart=0x0) returned 0x51 [0122.998] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0122.998] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Warning.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\warning.png"), fInfoLevelId=0x0, lpFileInformation=0x2205080 | out: lpFileInformation=0x2205080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ab6fc11, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x3ab6fc11, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3ab6fc11, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0xa21)) returned 1 [0122.999] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0122.999] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Warning.png", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Warning.png", lpFilePart=0x0) returned 0x51 [0122.999] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0122.999] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Warning.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\warning.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0122.999] GetFileType (hFile=0x444) returned 0x1 [0122.999] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0122.999] GetFileType (hFile=0x444) returned 0x1 [0122.999] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0xa21 [0122.999] ReadFile (in: hFile=0x444, lpBuffer=0x2205d70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be718, lpOverlapped=0x0 | out: lpBuffer=0x2205d70*, lpNumberOfBytesRead=0x3be718*=0xa21, lpOverlapped=0x0) returned 1 [0123.017] CloseHandle (hObject=0x444) returned 1 [0123.029] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Warning.png", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Warning.png", lpFilePart=0x0) returned 0x51 [0123.029] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0123.029] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Warning.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\warning.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0123.031] GetFileType (hFile=0x444) returned 0x1 [0123.031] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0123.031] GetFileType (hFile=0x444) returned 0x1 [0123.031] WriteFile (in: hFile=0x444, lpBuffer=0x2280050*, nNumberOfBytesToWrite=0xa30, lpNumberOfBytesWritten=0x3be628, lpOverlapped=0x0 | out: lpBuffer=0x2280050*, lpNumberOfBytesWritten=0x3be628*=0xa30, lpOverlapped=0x0) returned 1 [0123.032] CloseHandle (hObject=0x444) returned 1 [0123.032] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Warning.png", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Warning.png", lpFilePart=0x0) returned 0x51 [0123.032] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Warning.png.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Warning.png.xuy", lpFilePart=0x0) returned 0x55 [0123.032] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0123.032] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Warning.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\warning.png"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ab6fc11, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x3ab6fc11, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x352eb8b7, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xa30)) returned 1 [0123.032] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0123.032] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Warning.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\warning.png"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Warning.png.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\warning.png.xuy")) returned 1 [0123.033] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\WnsClientApi.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\WnsClientApi.dll", lpFilePart=0x0) returned 0x56 [0123.033] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0123.033] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\WnsClientApi.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\wnsclientapi.dll"), fInfoLevelId=0x0, lpFileInformation=0x2281300 | out: lpFileInformation=0x2281300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b1b1ec3, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x3b1b1ec3, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3b1b1ec3, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x5fcd0)) returned 1 [0123.033] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0123.034] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\WnsClientApi.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\WnsClientApi.dll", lpFilePart=0x0) returned 0x56 [0123.034] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0123.034] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\WnsClientApi.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\wnsclientapi.dll"), fInfoLevelId=0x0, lpFileInformation=0x2281470 | out: lpFileInformation=0x2281470*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b1b1ec3, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x3b1b1ec3, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3b1b1ec3, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x5fcd0)) returned 1 [0123.034] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0123.034] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\WnsClientApi.dll", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\WnsClientApi.dll", lpFilePart=0x0) returned 0x56 [0123.034] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0123.034] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\WnsClientApi.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\wnsclientapi.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0123.035] GetFileType (hFile=0x444) returned 0x1 [0123.035] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0123.035] GetFileType (hFile=0x444) returned 0x1 [0123.035] ReadFile (in: hFile=0x444, lpBuffer=0x2283880, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x2283880*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0123.058] CloseHandle (hObject=0x444) returned 1 [0123.058] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\WnsClientApi.dll", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\WnsClientApi.dll", lpFilePart=0x0) returned 0x56 [0123.058] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0123.059] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\WnsClientApi.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\wnsclientapi.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0123.059] GetFileType (hFile=0x444) returned 0x1 [0123.059] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0123.059] GetFileType (hFile=0x444) returned 0x1 [0123.059] WriteFile (in: hFile=0x444, lpBuffer=0x22815c0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x22815c0*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0123.060] CloseHandle (hObject=0x444) returned 1 [0123.060] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\WnsClientApi.dll", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\WnsClientApi.dll", lpFilePart=0x0) returned 0x56 [0123.060] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\WnsClientApi.dll.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\WnsClientApi.dll.xuy", lpFilePart=0x0) returned 0x5a [0123.060] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0123.060] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\WnsClientApi.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\wnsclientapi.dll"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b1b1ec3, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x3b1b1ec3, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x35337d9c, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x5fcd0)) returned 1 [0123.060] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0123.060] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\WnsClientApi.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\wnsclientapi.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\WnsClientApi.dll.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\wnsclientapi.dll.xuy")) returned 1 [0123.062] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0123.062] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\adm", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\adm", lpFilePart=0x0) returned 0x49 [0123.062] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\adm\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\adm\\", lpFilePart=0x0) returned 0x4a [0123.062] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\adm\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7cd0 [0123.062] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0123.062] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0123.062] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0123.063] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0123.063] FindClose (in: hFindFile=0x5d7cd0 | out: hFindFile=0x5d7cd0) returned 1 [0123.063] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0123.063] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0123.063] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0123.063] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\adm", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\adm", lpFilePart=0x0) returned 0x49 [0123.063] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\adm\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\adm\\", lpFilePart=0x0) returned 0x4a [0123.063] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\adm\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d78b0 [0123.063] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0123.064] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0123.064] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0123.064] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0123.064] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0123.064] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0123.064] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0123.064] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\adm\\OneDrive.adml", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\adm\\OneDrive.adml", lpFilePart=0x0) returned 0x57 [0123.064] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0123.064] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\adm\\OneDrive.adml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\adm\\onedrive.adml"), fInfoLevelId=0x0, lpFileInformation=0x2302168 | out: lpFileInformation=0x2302168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b7a7cc9, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x3b7a7cc9, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3b7a7cc9, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x4c9e)) returned 1 [0123.065] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0123.065] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\adm\\OneDrive.adml", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\adm\\OneDrive.adml", lpFilePart=0x0) returned 0x57 [0123.065] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0123.065] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\adm\\OneDrive.adml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\adm\\onedrive.adml"), fInfoLevelId=0x0, lpFileInformation=0x23022d0 | out: lpFileInformation=0x23022d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b7a7cc9, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x3b7a7cc9, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3b7a7cc9, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x4c9e)) returned 1 [0123.065] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0123.065] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\adm\\OneDrive.adml", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\adm\\OneDrive.adml", lpFilePart=0x0) returned 0x57 [0123.065] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0123.066] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\adm\\OneDrive.adml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\adm\\onedrive.adml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0123.066] GetFileType (hFile=0x444) returned 0x1 [0123.066] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0123.066] GetFileType (hFile=0x444) returned 0x1 [0123.067] ReadFile (in: hFile=0x444, lpBuffer=0x23046d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x23046d0*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0123.156] CloseHandle (hObject=0x444) returned 1 [0123.157] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\adm\\OneDrive.adml", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\adm\\OneDrive.adml", lpFilePart=0x0) returned 0x57 [0123.157] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0123.157] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\adm\\OneDrive.adml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\adm\\onedrive.adml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0123.157] GetFileType (hFile=0x444) returned 0x1 [0123.157] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0123.157] GetFileType (hFile=0x444) returned 0x1 [0123.157] WriteFile (in: hFile=0x444, lpBuffer=0x2162260*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x2162260*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0123.157] CloseHandle (hObject=0x444) returned 1 [0123.157] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\adm\\OneDrive.adml", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\adm\\OneDrive.adml", lpFilePart=0x0) returned 0x57 [0123.158] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\adm\\OneDrive.adml.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\adm\\OneDrive.adml.xuy", lpFilePart=0x0) returned 0x5b [0123.158] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0123.158] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\adm\\OneDrive.adml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\adm\\onedrive.adml"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b7a7cc9, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x3b7a7cc9, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3541cb44, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x4c9e)) returned 1 [0123.158] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0123.158] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\adm\\OneDrive.adml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\adm\\onedrive.adml"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\adm\\OneDrive.adml.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\adm\\onedrive.adml.xuy")) returned 1 [0123.159] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\adm\\OneDrive.admx", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\adm\\OneDrive.admx", lpFilePart=0x0) returned 0x57 [0123.159] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0123.159] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\adm\\OneDrive.admx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\adm\\onedrive.admx"), fInfoLevelId=0x0, lpFileInformation=0x217b1f0 | out: lpFileInformation=0x217b1f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bd5161f, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x3bd5161f, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3bd5161f, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x266c)) returned 1 [0123.159] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0123.159] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\adm\\OneDrive.admx", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\adm\\OneDrive.admx", lpFilePart=0x0) returned 0x57 [0123.159] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0123.159] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\adm\\OneDrive.admx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\adm\\onedrive.admx"), fInfoLevelId=0x0, lpFileInformation=0x217b358 | out: lpFileInformation=0x217b358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bd5161f, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x3bd5161f, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3bd5161f, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x266c)) returned 1 [0123.159] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0123.159] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\adm\\OneDrive.admx", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\adm\\OneDrive.admx", lpFilePart=0x0) returned 0x57 [0123.159] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0123.159] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\adm\\OneDrive.admx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\adm\\onedrive.admx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0123.160] GetFileType (hFile=0x444) returned 0x1 [0123.160] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0123.160] GetFileType (hFile=0x444) returned 0x1 [0123.160] ReadFile (in: hFile=0x444, lpBuffer=0x217d758, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x217d758*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0123.230] CloseHandle (hObject=0x444) returned 1 [0123.230] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\adm\\OneDrive.admx", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\adm\\OneDrive.admx", lpFilePart=0x0) returned 0x57 [0123.230] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0123.231] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\adm\\OneDrive.admx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\adm\\onedrive.admx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0123.231] GetFileType (hFile=0x444) returned 0x1 [0123.231] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0123.231] GetFileType (hFile=0x444) returned 0x1 [0123.231] WriteFile (in: hFile=0x444, lpBuffer=0x217b4a0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x217b4a0*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0123.231] CloseHandle (hObject=0x444) returned 1 [0123.232] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\adm\\OneDrive.admx", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\adm\\OneDrive.admx", lpFilePart=0x0) returned 0x57 [0123.232] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\adm\\OneDrive.admx.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\adm\\OneDrive.admx.xuy", lpFilePart=0x0) returned 0x5b [0123.232] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0123.232] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\adm\\OneDrive.admx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\adm\\onedrive.admx"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bd5161f, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x3bd5161f, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x354db684, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x266c)) returned 1 [0123.232] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0123.232] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\adm\\OneDrive.admx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\adm\\onedrive.admx"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\adm\\OneDrive.admx.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\adm\\onedrive.admx.xuy")) returned 1 [0123.233] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0123.233] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\af", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\af", lpFilePart=0x0) returned 0x48 [0123.233] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\af\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\af\\", lpFilePart=0x0) returned 0x49 [0123.233] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\af\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7c70 [0123.234] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0123.235] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0123.235] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0123.235] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0123.235] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0123.235] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0123.235] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0123.235] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\af", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\af", lpFilePart=0x0) returned 0x48 [0123.235] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\af\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\af\\", lpFilePart=0x0) returned 0x49 [0123.235] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\af\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7c70 [0123.235] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0123.235] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0123.236] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0123.236] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0123.236] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0123.236] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0123.236] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\af\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\af\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0123.236] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0123.236] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\af\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\af\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x21fbca8 | out: lpFileInformation=0x21fbca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c4786eb, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x3c4786eb, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3c4786eb, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x226d0)) returned 1 [0123.236] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0123.236] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\af\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\af\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0123.236] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0123.236] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\af\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\af\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x21fbe68 | out: lpFileInformation=0x21fbe68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c4786eb, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x3c4786eb, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3c4786eb, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x226d0)) returned 1 [0123.236] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0123.236] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\af\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\af\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0123.236] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0123.237] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\af\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\af\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0123.237] GetFileType (hFile=0x444) returned 0x1 [0123.237] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0123.237] GetFileType (hFile=0x444) returned 0x1 [0123.237] ReadFile (in: hFile=0x444, lpBuffer=0x21fe318, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x21fe318*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0123.275] CloseHandle (hObject=0x444) returned 1 [0123.275] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\af\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\af\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0123.275] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0123.275] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\af\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\af\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0123.276] GetFileType (hFile=0x444) returned 0x1 [0123.276] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0123.276] GetFileType (hFile=0x444) returned 0x1 [0123.276] WriteFile (in: hFile=0x444, lpBuffer=0x21fc008*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x21fc008*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0123.276] CloseHandle (hObject=0x444) returned 1 [0123.276] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\af\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\af\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0123.276] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\af\\FileSync.LocalizedResources.dll.mui.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\af\\FileSync.LocalizedResources.dll.mui.xuy", lpFilePart=0x0) returned 0x70 [0123.276] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0123.276] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\af\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\af\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c4786eb, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x3c4786eb, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x35549169, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x226d0)) returned 1 [0123.276] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0123.276] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\af\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\af\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\af\\FileSync.LocalizedResources.dll.mui.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\af\\filesync.localizedresources.dll.mui.xuy")) returned 1 [0123.279] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0123.279] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\am-et", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\am-et", lpFilePart=0x0) returned 0x4b [0123.279] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\am-et\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\am-et\\", lpFilePart=0x0) returned 0x4c [0123.279] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\am-et\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7550 [0123.279] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0123.279] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0123.280] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0123.280] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0123.280] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0123.280] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0123.280] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0123.280] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\am-et", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\am-et", lpFilePart=0x0) returned 0x4b [0123.280] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\am-et\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\am-et\\", lpFilePart=0x0) returned 0x4c [0123.280] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\am-et\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7550 [0123.280] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0123.281] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0123.281] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0123.282] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0123.282] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0123.282] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0123.282] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\am-et\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\am-et\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0123.282] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0123.282] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\am-et\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\am-et\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x227ca00 | out: lpFileInformation=0x227ca00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cbebc69, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x3cbebc69, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3cbebc69, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x198d0)) returned 1 [0123.282] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0123.282] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\am-et\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\am-et\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0123.282] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0123.282] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\am-et\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\am-et\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x227cbc0 | out: lpFileInformation=0x227cbc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cbebc69, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x3cbebc69, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3cbebc69, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x198d0)) returned 1 [0123.282] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0123.282] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\am-et\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\am-et\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0123.282] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0123.282] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\am-et\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\am-et\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0123.284] GetFileType (hFile=0x444) returned 0x1 [0123.284] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0123.284] GetFileType (hFile=0x444) returned 0x1 [0123.284] ReadFile (in: hFile=0x444, lpBuffer=0x227f070, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x227f070*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0123.302] CloseHandle (hObject=0x444) returned 1 [0123.302] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\am-et\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\am-et\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0123.302] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0123.302] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\am-et\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\am-et\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0123.302] GetFileType (hFile=0x444) returned 0x1 [0123.302] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0123.303] GetFileType (hFile=0x444) returned 0x1 [0123.303] WriteFile (in: hFile=0x444, lpBuffer=0x227cd60*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x227cd60*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0123.303] CloseHandle (hObject=0x444) returned 1 [0123.303] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\am-et\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\am-et\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0123.303] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\am-et\\FileSync.LocalizedResources.dll.mui.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\am-et\\FileSync.LocalizedResources.dll.mui.xuy", lpFilePart=0x0) returned 0x73 [0123.303] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0123.303] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\am-et\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\am-et\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cbebc69, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x3cbebc69, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3557cc64, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x198d0)) returned 1 [0123.303] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0123.303] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\am-et\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\am-et\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\am-et\\FileSync.LocalizedResources.dll.mui.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\am-et\\filesync.localizedresources.dll.mui.xuy")) returned 1 [0123.304] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0123.304] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\amd64", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\amd64", lpFilePart=0x0) returned 0x4b [0123.304] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\amd64\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\amd64\\", lpFilePart=0x0) returned 0x4c [0123.304] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\amd64\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7d90 [0123.304] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0123.305] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0123.305] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0123.305] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0123.305] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0123.305] FindClose (in: hFindFile=0x5d7d90 | out: hFindFile=0x5d7d90) returned 1 [0123.305] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0123.305] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0123.305] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0123.305] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\amd64", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\amd64", lpFilePart=0x0) returned 0x4b [0123.305] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\amd64\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\amd64\\", lpFilePart=0x0) returned 0x4c [0123.305] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\amd64\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d78b0 [0123.306] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0123.306] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0123.306] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0123.306] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0123.306] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0123.306] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0123.306] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0123.306] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0123.306] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\amd64\\FileCoAuthLib64.dll", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\amd64\\FileCoAuthLib64.dll", lpFilePart=0x0) returned 0x5f [0123.306] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0123.306] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\amd64\\FileCoAuthLib64.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\amd64\\filecoauthlib64.dll"), fInfoLevelId=0x0, lpFileInformation=0x22fe068 | out: lpFileInformation=0x22fe068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d35f1eb, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x3d35f1eb, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3d35f1eb, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x296c8)) returned 1 [0123.307] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0123.307] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\amd64\\FileCoAuthLib64.dll", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\amd64\\FileCoAuthLib64.dll", lpFilePart=0x0) returned 0x5f [0123.307] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0123.307] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\amd64\\FileCoAuthLib64.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\amd64\\filecoauthlib64.dll"), fInfoLevelId=0x0, lpFileInformation=0x22fe1e8 | out: lpFileInformation=0x22fe1e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d35f1eb, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x3d35f1eb, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3d35f1eb, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x296c8)) returned 1 [0123.308] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0123.308] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\amd64\\FileCoAuthLib64.dll", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\amd64\\FileCoAuthLib64.dll", lpFilePart=0x0) returned 0x5f [0123.308] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0123.308] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\amd64\\FileCoAuthLib64.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\amd64\\filecoauthlib64.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0123.309] GetFileType (hFile=0x444) returned 0x1 [0123.309] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0123.309] GetFileType (hFile=0x444) returned 0x1 [0123.309] ReadFile (in: hFile=0x444, lpBuffer=0x2300618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x2300618*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0123.367] CloseHandle (hObject=0x444) returned 1 [0123.367] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\amd64\\FileCoAuthLib64.dll", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\amd64\\FileCoAuthLib64.dll", lpFilePart=0x0) returned 0x5f [0123.367] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0123.367] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\amd64\\FileCoAuthLib64.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\amd64\\filecoauthlib64.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0123.368] GetFileType (hFile=0x444) returned 0x1 [0123.368] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0123.368] GetFileType (hFile=0x444) returned 0x1 [0123.368] WriteFile (in: hFile=0x444, lpBuffer=0x2162378*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x2162378*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0123.368] CloseHandle (hObject=0x444) returned 1 [0123.368] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\amd64\\FileCoAuthLib64.dll", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\amd64\\FileCoAuthLib64.dll", lpFilePart=0x0) returned 0x5f [0123.368] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\amd64\\FileCoAuthLib64.dll.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\amd64\\FileCoAuthLib64.dll.xuy", lpFilePart=0x0) returned 0x63 [0123.368] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0123.368] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\amd64\\FileCoAuthLib64.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\amd64\\filecoauthlib64.dll"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d35f1eb, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x3d35f1eb, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x356157d5, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x296c8)) returned 1 [0123.368] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0123.368] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\amd64\\FileCoAuthLib64.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\amd64\\filecoauthlib64.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\amd64\\FileCoAuthLib64.dll.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\amd64\\filecoauthlib64.dll.xuy")) returned 1 [0123.369] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\amd64\\FileSyncApi64.dll", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\amd64\\FileSyncApi64.dll", lpFilePart=0x0) returned 0x5d [0123.369] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0123.369] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\amd64\\FileSyncApi64.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\amd64\\filesyncapi64.dll"), fInfoLevelId=0x0, lpFileInformation=0x217cb70 | out: lpFileInformation=0x217cb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d954fe0, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x3d954fe0, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3d954fe0, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0xfeec8)) returned 1 [0123.370] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0123.370] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\amd64\\FileSyncApi64.dll", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\amd64\\FileSyncApi64.dll", lpFilePart=0x0) returned 0x5d [0123.370] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0123.370] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\amd64\\FileSyncApi64.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\amd64\\filesyncapi64.dll"), fInfoLevelId=0x0, lpFileInformation=0x217ccf0 | out: lpFileInformation=0x217ccf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d954fe0, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x3d954fe0, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3d954fe0, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0xfeec8)) returned 1 [0123.370] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0123.370] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\amd64\\FileSyncApi64.dll", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\amd64\\FileSyncApi64.dll", lpFilePart=0x0) returned 0x5d [0123.370] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0123.370] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\amd64\\FileSyncApi64.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\amd64\\filesyncapi64.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0123.371] GetFileType (hFile=0x444) returned 0x1 [0123.371] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0123.371] GetFileType (hFile=0x444) returned 0x1 [0123.371] ReadFile (in: hFile=0x444, lpBuffer=0x217f120, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x217f120*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0123.436] CloseHandle (hObject=0x444) returned 1 [0123.436] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\amd64\\FileSyncApi64.dll", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\amd64\\FileSyncApi64.dll", lpFilePart=0x0) returned 0x5d [0123.436] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0123.436] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\amd64\\FileSyncApi64.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\amd64\\filesyncapi64.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0123.436] GetFileType (hFile=0x444) returned 0x1 [0123.436] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0123.436] GetFileType (hFile=0x444) returned 0x1 [0123.436] WriteFile (in: hFile=0x444, lpBuffer=0x217ce50*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x217ce50*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0123.436] CloseHandle (hObject=0x444) returned 1 [0123.437] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\amd64\\FileSyncApi64.dll", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\amd64\\FileSyncApi64.dll", lpFilePart=0x0) returned 0x5d [0123.437] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\amd64\\FileSyncApi64.dll.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\amd64\\FileSyncApi64.dll.xuy", lpFilePart=0x0) returned 0x61 [0123.437] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0123.437] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\amd64\\FileSyncApi64.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\amd64\\filesyncapi64.dll"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d954fe0, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x3d954fe0, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x356ae12b, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xfeec8)) returned 1 [0123.437] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0123.437] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\amd64\\FileSyncApi64.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\amd64\\filesyncapi64.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\amd64\\FileSyncApi64.dll.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\amd64\\filesyncapi64.dll.xuy")) returned 1 [0123.438] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\amd64\\FileSyncShell64.dll", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\amd64\\FileSyncShell64.dll", lpFilePart=0x0) returned 0x5f [0123.438] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0123.438] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\amd64\\FileSyncShell64.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\amd64\\filesyncshell64.dll"), fInfoLevelId=0x0, lpFileInformation=0x21fb580 | out: lpFileInformation=0x21fb580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3df71044, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x3df71044, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3df71044, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x2bb2d0)) returned 1 [0123.438] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0123.438] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\amd64\\FileSyncShell64.dll", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\amd64\\FileSyncShell64.dll", lpFilePart=0x0) returned 0x5f [0123.438] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0123.438] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\amd64\\FileSyncShell64.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\amd64\\filesyncshell64.dll"), fInfoLevelId=0x0, lpFileInformation=0x21fb700 | out: lpFileInformation=0x21fb700*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3df71044, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x3df71044, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3df71044, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x2bb2d0)) returned 1 [0123.438] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0123.439] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\amd64\\FileSyncShell64.dll", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\amd64\\FileSyncShell64.dll", lpFilePart=0x0) returned 0x5f [0123.439] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0123.439] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\amd64\\FileSyncShell64.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\amd64\\filesyncshell64.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0123.440] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb100) returned 1 [0123.440] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\amd64\\FileSyncShell64.dll", nBufferLength=0x105, lpBuffer=0x3bbd80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\amd64\\FileSyncShell64.dll", lpFilePart=0x0) returned 0x5f [0123.440] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc220) returned 1 [0123.440] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\amd64\\FileSyncShell64.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\amd64\\filesyncshell64.dll"), fInfoLevelId=0x0, lpFileInformation=0x3bc300 | out: lpFileInformation=0x3bc300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3df71044, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x3df71044, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3df71044, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x2bb2d0)) returned 1 [0123.440] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1e0) returned 1 [0123.440] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\amd64\\FileSyncShell64.dll", nBufferLength=0x105, lpBuffer=0x3bbda0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\amd64\\FileSyncShell64.dll", lpFilePart=0x0) returned 0x5f [0123.440] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc220) returned 1 [0123.441] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\amd64\\FileSyncShell64.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\amd64\\filesyncshell64.dll"), fInfoLevelId=0x0, lpFileInformation=0x21fe320 | out: lpFileInformation=0x21fe320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3df71044, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x3df71044, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3df71044, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x2bb2d0)) returned 1 [0123.441] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1e0) returned 1 [0123.441] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\amd64\\FileSyncShell64.dll", nBufferLength=0x105, lpBuffer=0x3bbda0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\amd64\\FileSyncShell64.dll", lpFilePart=0x0) returned 0x5f [0123.441] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc220) returned 1 [0123.441] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\amd64\\FileSyncShell64.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\amd64\\filesyncshell64.dll"), fInfoLevelId=0x0, lpFileInformation=0x21fe4a0 | out: lpFileInformation=0x21fe4a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3df71044, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x3df71044, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3df71044, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x2bb2d0)) returned 1 [0123.441] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1e0) returned 1 [0123.441] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\amd64\\FileSyncShell64.dll", nBufferLength=0x105, lpBuffer=0x3bbc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\amd64\\FileSyncShell64.dll", lpFilePart=0x0) returned 0x5f [0123.441] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc120) returned 1 [0123.441] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\amd64\\FileSyncShell64.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\amd64\\filesyncshell64.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0123.442] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8bb0) returned 1 [0123.443] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0123.443] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ar", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ar", lpFilePart=0x0) returned 0x48 [0123.443] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ar\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ar\\", lpFilePart=0x0) returned 0x49 [0123.443] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ar\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d78b0 [0123.443] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0123.444] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0123.444] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0123.444] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0123.444] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0123.444] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0123.444] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0123.444] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ar", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ar", lpFilePart=0x0) returned 0x48 [0123.444] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ar\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ar\\", lpFilePart=0x0) returned 0x49 [0123.444] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ar\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7550 [0123.444] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0123.444] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0123.444] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0123.445] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0123.445] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0123.445] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0123.445] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ar\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ar\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0123.445] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0123.445] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ar\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ar\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x2203190 | out: lpFileInformation=0x2203190*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e5ff7ad, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x3e5ff7ad, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3e5ff7ad, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x1e6d0)) returned 1 [0123.445] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0123.445] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ar\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ar\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0123.445] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0123.445] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ar\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ar\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x2203350 | out: lpFileInformation=0x2203350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e5ff7ad, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x3e5ff7ad, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3e5ff7ad, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x1e6d0)) returned 1 [0123.445] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0123.445] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ar\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ar\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0123.445] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0123.445] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ar\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ar\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0123.446] GetFileType (hFile=0x444) returned 0x1 [0123.446] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0123.446] GetFileType (hFile=0x444) returned 0x1 [0123.446] ReadFile (in: hFile=0x444, lpBuffer=0x2205800, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x2205800*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0123.489] CloseHandle (hObject=0x444) returned 1 [0123.489] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ar\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ar\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0123.489] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0123.489] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ar\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ar\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0123.490] GetFileType (hFile=0x444) returned 0x1 [0123.490] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0123.490] GetFileType (hFile=0x444) returned 0x1 [0123.490] WriteFile (in: hFile=0x444, lpBuffer=0x22034f0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x22034f0*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0123.490] CloseHandle (hObject=0x444) returned 1 [0123.490] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ar\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ar\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0123.490] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ar\\FileSync.LocalizedResources.dll.mui.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ar\\FileSync.LocalizedResources.dll.mui.xuy", lpFilePart=0x0) returned 0x70 [0123.490] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0123.490] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ar\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ar\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e5ff7ad, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x3e5ff7ad, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x35746d07, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x1e6d0)) returned 1 [0123.490] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0123.490] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ar\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ar\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ar\\FileSync.LocalizedResources.dll.mui.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ar\\filesync.localizedresources.dll.mui.xuy")) returned 1 [0123.491] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0123.491] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\as-in", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\as-in", lpFilePart=0x0) returned 0x4b [0123.491] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\as-in\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\as-in\\", lpFilePart=0x0) returned 0x4c [0123.491] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\as-in\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7370 [0123.493] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0123.493] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0123.493] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0123.493] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0123.493] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0123.493] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0123.493] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0123.493] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\as-in", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\as-in", lpFilePart=0x0) returned 0x4b [0123.493] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\as-in\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\as-in\\", lpFilePart=0x0) returned 0x4c [0123.493] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\as-in\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d78b0 [0123.493] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0123.493] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0123.494] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0123.494] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0123.494] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0123.494] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0123.494] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\as-in\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\as-in\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0123.494] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0123.494] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\as-in\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\as-in\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x2283ee8 | out: lpFileInformation=0x2283ee8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ec1b7fd, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x3ec1b7fd, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3ec1b7fd, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x230d0)) returned 1 [0123.494] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0123.494] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\as-in\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\as-in\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0123.494] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0123.494] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\as-in\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\as-in\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x22840a8 | out: lpFileInformation=0x22840a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ec1b7fd, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x3ec1b7fd, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3ec1b7fd, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x230d0)) returned 1 [0123.494] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0123.494] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\as-in\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\as-in\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0123.494] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0123.494] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\as-in\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\as-in\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0123.495] GetFileType (hFile=0x444) returned 0x1 [0123.495] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0123.495] GetFileType (hFile=0x444) returned 0x1 [0123.495] ReadFile (in: hFile=0x444, lpBuffer=0x2286558, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x2286558*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0123.521] CloseHandle (hObject=0x444) returned 1 [0123.522] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\as-in\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\as-in\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0123.522] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0123.522] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\as-in\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\as-in\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0123.522] GetFileType (hFile=0x444) returned 0x1 [0123.522] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0123.522] GetFileType (hFile=0x444) returned 0x1 [0123.522] WriteFile (in: hFile=0x444, lpBuffer=0x2284248*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x2284248*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0123.522] CloseHandle (hObject=0x444) returned 1 [0123.522] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\as-in\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\as-in\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0123.522] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\as-in\\FileSync.LocalizedResources.dll.mui.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\as-in\\FileSync.LocalizedResources.dll.mui.xuy", lpFilePart=0x0) returned 0x73 [0123.522] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0123.522] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\as-in\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\as-in\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ec1b7fd, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x3ec1b7fd, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x35792dc9, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x230d0)) returned 1 [0123.523] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0123.523] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\as-in\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\as-in\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\as-in\\FileSync.LocalizedResources.dll.mui.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\as-in\\filesync.localizedresources.dll.mui.xuy")) returned 1 [0123.524] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0123.524] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\az-latn-az", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\az-latn-az", lpFilePart=0x0) returned 0x50 [0123.524] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\az-latn-az\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\az-latn-az\\", lpFilePart=0x0) returned 0x51 [0123.524] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\az-latn-az\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7550 [0123.524] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0123.524] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0123.524] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0123.524] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0123.524] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0123.524] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0123.524] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0123.524] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\az-latn-az", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\az-latn-az", lpFilePart=0x0) returned 0x50 [0123.524] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\az-latn-az\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\az-latn-az\\", lpFilePart=0x0) returned 0x51 [0123.525] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\az-latn-az\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d78b0 [0123.525] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0123.525] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0123.525] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0123.525] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0123.525] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0123.525] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0123.525] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\az-latn-az\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\az-latn-az\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x74 [0123.525] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0123.525] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\az-latn-az\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\az-latn-az\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x2304d70 | out: lpFileInformation=0x2304d70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f2115ff, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x3f2115ff, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3f237854, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x22cd0)) returned 1 [0123.526] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0123.526] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\az-latn-az\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\az-latn-az\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x74 [0123.526] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0123.526] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\az-latn-az\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\az-latn-az\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x2304f40 | out: lpFileInformation=0x2304f40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f2115ff, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x3f2115ff, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3f237854, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x22cd0)) returned 1 [0123.526] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0123.526] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\az-latn-az\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\az-latn-az\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x74 [0123.526] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0123.526] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\az-latn-az\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\az-latn-az\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0123.527] GetFileType (hFile=0x444) returned 0x1 [0123.527] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0123.527] GetFileType (hFile=0x444) returned 0x1 [0123.527] ReadFile (in: hFile=0x444, lpBuffer=0x2307410, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x2307410*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0123.577] CloseHandle (hObject=0x444) returned 1 [0123.578] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\az-latn-az\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\az-latn-az\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x74 [0123.578] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0123.578] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\az-latn-az\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\az-latn-az\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0123.579] GetFileType (hFile=0x444) returned 0x1 [0123.579] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0123.579] GetFileType (hFile=0x444) returned 0x1 [0123.579] WriteFile (in: hFile=0x444, lpBuffer=0x21623d0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x21623d0*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0123.580] CloseHandle (hObject=0x444) returned 1 [0123.580] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\az-latn-az\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\az-latn-az\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x74 [0123.580] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\az-latn-az\\FileSync.LocalizedResources.dll.mui.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\az-latn-az\\FileSync.LocalizedResources.dll.mui.xuy", lpFilePart=0x0) returned 0x78 [0123.580] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0123.580] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\az-latn-az\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\az-latn-az\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f2115ff, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x3f2115ff, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3582b7f7, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x22cd0)) returned 1 [0123.580] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0123.580] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\az-latn-az\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\az-latn-az\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\az-latn-az\\FileSync.LocalizedResources.dll.mui.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\az-latn-az\\filesync.localizedresources.dll.mui.xuy")) returned 1 [0123.581] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0123.581] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\be", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\be", lpFilePart=0x0) returned 0x48 [0123.581] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\be\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\be\\", lpFilePart=0x0) returned 0x49 [0123.581] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\be\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d8090 [0123.581] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0123.581] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0123.582] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0123.582] FindClose (in: hFindFile=0x5d8090 | out: hFindFile=0x5d8090) returned 1 [0123.582] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0123.582] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0123.582] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0123.582] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\be", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\be", lpFilePart=0x0) returned 0x48 [0123.582] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\be\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\be\\", lpFilePart=0x0) returned 0x49 [0123.582] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\be\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7d30 [0123.582] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0123.582] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0123.582] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0123.583] FindClose (in: hFindFile=0x5d7d30 | out: hFindFile=0x5d7d30) returned 1 [0123.583] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0123.583] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0123.583] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\be\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\be\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0123.583] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0123.583] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\be\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\be\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x2185ac0 | out: lpFileInformation=0x2185ac0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f7e119c, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x3f7e119c, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3f8538b5, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x21ec8)) returned 1 [0123.583] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0123.583] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\be\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\be\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0123.583] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0123.583] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\be\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\be\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x2185c80 | out: lpFileInformation=0x2185c80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f7e119c, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x3f7e119c, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3f8538b5, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x21ec8)) returned 1 [0123.583] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0123.583] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\be\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\be\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0123.583] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0123.583] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\be\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\be\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0123.584] GetFileType (hFile=0x444) returned 0x1 [0123.584] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0123.584] GetFileType (hFile=0x444) returned 0x1 [0123.584] ReadFile (in: hFile=0x444, lpBuffer=0x2188130, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x2188130*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0123.597] CloseHandle (hObject=0x444) returned 1 [0123.597] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\be\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\be\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0123.597] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0123.597] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\be\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\be\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0123.597] GetFileType (hFile=0x444) returned 0x1 [0123.597] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0123.597] GetFileType (hFile=0x444) returned 0x1 [0123.597] WriteFile (in: hFile=0x444, lpBuffer=0x2185e20*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x2185e20*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0123.598] CloseHandle (hObject=0x444) returned 1 [0123.598] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\be\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\be\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0123.598] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\be\\FileSync.LocalizedResources.dll.mui.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\be\\FileSync.LocalizedResources.dll.mui.xuy", lpFilePart=0x0) returned 0x70 [0123.598] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0123.598] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\be\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\be\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f7e119c, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x3f7e119c, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x35851de1, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x21ec8)) returned 1 [0123.598] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0123.598] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\be\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\be\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\be\\FileSync.LocalizedResources.dll.mui.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\be\\filesync.localizedresources.dll.mui.xuy")) returned 1 [0123.599] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0123.599] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bg", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bg", lpFilePart=0x0) returned 0x48 [0123.599] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bg\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bg\\", lpFilePart=0x0) returned 0x49 [0123.600] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bg\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7c70 [0123.600] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0123.601] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0123.601] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0123.601] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0123.601] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0123.601] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0123.601] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0123.601] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bg", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bg", lpFilePart=0x0) returned 0x48 [0123.601] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bg\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bg\\", lpFilePart=0x0) returned 0x49 [0123.601] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bg\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d79d0 [0123.601] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0123.602] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0123.602] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0123.602] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0123.602] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0123.602] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0123.602] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bg\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bg\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0123.602] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0123.602] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bg\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\bg\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x2206768 | out: lpFileInformation=0x2206768*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fdfd1fa, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x3fdfd1fa, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3fdfd1fa, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x23ed0)) returned 1 [0123.602] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0123.602] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bg\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bg\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0123.602] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0123.602] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bg\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\bg\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x2206928 | out: lpFileInformation=0x2206928*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fdfd1fa, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x3fdfd1fa, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3fdfd1fa, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x23ed0)) returned 1 [0123.603] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0123.603] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bg\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bg\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0123.603] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0123.603] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bg\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\bg\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0123.604] GetFileType (hFile=0x444) returned 0x1 [0123.604] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0123.604] GetFileType (hFile=0x444) returned 0x1 [0123.604] ReadFile (in: hFile=0x444, lpBuffer=0x2208dd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x2208dd8*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0123.625] CloseHandle (hObject=0x444) returned 1 [0123.625] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bg\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bg\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0123.625] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0123.626] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bg\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\bg\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0123.626] GetFileType (hFile=0x444) returned 0x1 [0123.626] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0123.626] GetFileType (hFile=0x444) returned 0x1 [0123.626] WriteFile (in: hFile=0x444, lpBuffer=0x2206ac8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x2206ac8*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0123.626] CloseHandle (hObject=0x444) returned 1 [0123.626] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bg\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bg\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0123.626] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bg\\FileSync.LocalizedResources.dll.mui.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bg\\FileSync.LocalizedResources.dll.mui.xuy", lpFilePart=0x0) returned 0x70 [0123.626] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0123.626] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bg\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\bg\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fdfd1fa, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x3fdfd1fa, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3589dee0, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x23ed0)) returned 1 [0123.627] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0123.627] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bg\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\bg\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bg\\FileSync.LocalizedResources.dll.mui.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\bg\\filesync.localizedresources.dll.mui.xuy")) returned 1 [0123.628] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0123.628] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bn-bd", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bn-bd", lpFilePart=0x0) returned 0x4b [0123.628] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bn-bd\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bn-bd\\", lpFilePart=0x0) returned 0x4c [0123.628] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bn-bd\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d79d0 [0123.628] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0123.629] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0123.629] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0123.629] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0123.629] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0123.629] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0123.629] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0123.629] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bn-bd", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bn-bd", lpFilePart=0x0) returned 0x4b [0123.629] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bn-bd\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bn-bd\\", lpFilePart=0x0) returned 0x4c [0123.629] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bn-bd\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7a30 [0123.629] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0123.629] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0123.629] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0123.630] FindClose (in: hFindFile=0x5d7a30 | out: hFindFile=0x5d7a30) returned 1 [0123.630] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0123.630] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0123.630] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bn-bd\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bn-bd\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0123.630] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0123.630] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bn-bd\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\bn-bd\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x22874c0 | out: lpFileInformation=0x22874c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x403a6b49, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x403a6b49, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x403a6b49, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x230d0)) returned 1 [0123.631] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0123.631] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bn-bd\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bn-bd\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0123.631] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0123.631] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bn-bd\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\bn-bd\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x2287680 | out: lpFileInformation=0x2287680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x403a6b49, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x403a6b49, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x403a6b49, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x230d0)) returned 1 [0123.631] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0123.631] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bn-bd\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bn-bd\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0123.631] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0123.631] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bn-bd\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\bn-bd\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0123.632] GetFileType (hFile=0x444) returned 0x1 [0123.632] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0123.632] GetFileType (hFile=0x444) returned 0x1 [0123.632] ReadFile (in: hFile=0x444, lpBuffer=0x2289b30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x2289b30*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0123.652] CloseHandle (hObject=0x444) returned 1 [0123.653] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bn-bd\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bn-bd\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0123.653] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0123.653] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bn-bd\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\bn-bd\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0123.653] GetFileType (hFile=0x444) returned 0x1 [0123.653] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0123.653] GetFileType (hFile=0x444) returned 0x1 [0123.653] WriteFile (in: hFile=0x444, lpBuffer=0x2287820*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x2287820*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0123.653] CloseHandle (hObject=0x444) returned 1 [0123.653] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bn-bd\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bn-bd\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0123.654] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bn-bd\\FileSync.LocalizedResources.dll.mui.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bn-bd\\FileSync.LocalizedResources.dll.mui.xuy", lpFilePart=0x0) returned 0x73 [0123.654] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0123.654] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bn-bd\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\bn-bd\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x403a6b49, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x403a6b49, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x358c8b2e, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x230d0)) returned 1 [0123.654] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0123.654] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bn-bd\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\bn-bd\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bn-bd\\FileSync.LocalizedResources.dll.mui.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\bn-bd\\filesync.localizedresources.dll.mui.xuy")) returned 1 [0123.655] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0123.655] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bn-in", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bn-in", lpFilePart=0x0) returned 0x4b [0123.655] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bn-in\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bn-in\\", lpFilePart=0x0) returned 0x4c [0123.655] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bn-in\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7af0 [0123.655] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0123.655] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0123.655] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0123.655] FindClose (in: hFindFile=0x5d7af0 | out: hFindFile=0x5d7af0) returned 1 [0123.656] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0123.656] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0123.656] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0123.656] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bn-in", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bn-in", lpFilePart=0x0) returned 0x4b [0123.656] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bn-in\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bn-in\\", lpFilePart=0x0) returned 0x4c [0123.656] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bn-in\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d75b0 [0123.656] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0123.656] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0123.657] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0123.657] FindClose (in: hFindFile=0x5d75b0 | out: hFindFile=0x5d75b0) returned 1 [0123.657] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0123.657] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0123.657] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bn-in\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bn-in\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0123.657] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0123.657] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bn-in\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\bn-in\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x2308218 | out: lpFileInformation=0x2308218*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x409e8dfb, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x409e8dfb, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x409e8dfb, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x22ed0)) returned 1 [0123.657] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0123.658] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bn-in\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bn-in\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0123.658] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0123.658] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bn-in\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\bn-in\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x23083d8 | out: lpFileInformation=0x23083d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x409e8dfb, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x409e8dfb, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x409e8dfb, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x22ed0)) returned 1 [0123.658] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0123.658] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bn-in\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bn-in\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0123.658] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0123.658] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bn-in\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\bn-in\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0123.659] GetFileType (hFile=0x444) returned 0x1 [0123.659] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0123.659] GetFileType (hFile=0x444) returned 0x1 [0123.659] ReadFile (in: hFile=0x444, lpBuffer=0x230a888, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x230a888*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0123.716] CloseHandle (hObject=0x444) returned 1 [0123.716] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bn-in\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bn-in\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0123.716] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0123.717] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bn-in\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\bn-in\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0123.717] GetFileType (hFile=0x444) returned 0x1 [0123.717] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0123.717] GetFileType (hFile=0x444) returned 0x1 [0123.717] WriteFile (in: hFile=0x444, lpBuffer=0x21621c0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x21621c0*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0123.717] CloseHandle (hObject=0x444) returned 1 [0123.717] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bn-in\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bn-in\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0123.717] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bn-in\\FileSync.LocalizedResources.dll.mui.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bn-in\\FileSync.LocalizedResources.dll.mui.xuy", lpFilePart=0x0) returned 0x73 [0123.717] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0123.717] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bn-in\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\bn-in\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x409e8dfb, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x409e8dfb, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3595e80c, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x22ed0)) returned 1 [0123.717] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0123.717] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bn-in\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\bn-in\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bn-in\\FileSync.LocalizedResources.dll.mui.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\bn-in\\filesync.localizedresources.dll.mui.xuy")) returned 1 [0123.719] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0123.719] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bs-latn-ba", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bs-latn-ba", lpFilePart=0x0) returned 0x50 [0123.719] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bs-latn-ba\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bs-latn-ba\\", lpFilePart=0x0) returned 0x51 [0123.719] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bs-latn-ba\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7550 [0123.719] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0123.720] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0123.720] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0123.720] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0123.720] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0123.720] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0123.720] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0123.720] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bs-latn-ba", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bs-latn-ba", lpFilePart=0x0) returned 0x50 [0123.720] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bs-latn-ba\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bs-latn-ba\\", lpFilePart=0x0) returned 0x51 [0123.720] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bs-latn-ba\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7550 [0123.720] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0123.720] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0123.720] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0123.721] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0123.721] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0123.721] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0123.721] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bs-latn-ba\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bs-latn-ba\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x74 [0123.721] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0123.721] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bs-latn-ba\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\bs-latn-ba\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x2188e80 | out: lpFileInformation=0x2188e80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x410c3a21, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x410c3a21, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x410c3a21, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x234d0)) returned 1 [0123.721] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0123.721] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bs-latn-ba\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bs-latn-ba\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x74 [0123.721] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0123.721] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bs-latn-ba\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\bs-latn-ba\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x2189050 | out: lpFileInformation=0x2189050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x410c3a21, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x410c3a21, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x410c3a21, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x234d0)) returned 1 [0123.721] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0123.721] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bs-latn-ba\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bs-latn-ba\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x74 [0123.721] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0123.721] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bs-latn-ba\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\bs-latn-ba\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0123.722] GetFileType (hFile=0x444) returned 0x1 [0123.722] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0123.722] GetFileType (hFile=0x444) returned 0x1 [0123.722] ReadFile (in: hFile=0x444, lpBuffer=0x218b520, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x218b520*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0123.753] CloseHandle (hObject=0x444) returned 1 [0123.753] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bs-latn-ba\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bs-latn-ba\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x74 [0123.753] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0123.753] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bs-latn-ba\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\bs-latn-ba\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0123.754] GetFileType (hFile=0x444) returned 0x1 [0123.754] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0123.754] GetFileType (hFile=0x444) returned 0x1 [0123.754] WriteFile (in: hFile=0x444, lpBuffer=0x2189200*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x2189200*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0123.754] CloseHandle (hObject=0x444) returned 1 [0123.754] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bs-latn-ba\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bs-latn-ba\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x74 [0123.754] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bs-latn-ba\\FileSync.LocalizedResources.dll.mui.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bs-latn-ba\\FileSync.LocalizedResources.dll.mui.xuy", lpFilePart=0x0) returned 0x78 [0123.754] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0123.754] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bs-latn-ba\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\bs-latn-ba\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x410c3a21, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x410c3a21, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x359cf30a, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x234d0)) returned 1 [0123.754] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0123.754] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bs-latn-ba\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\bs-latn-ba\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bs-latn-ba\\FileSync.LocalizedResources.dll.mui.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\bs-latn-ba\\filesync.localizedresources.dll.mui.xuy")) returned 1 [0123.755] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0123.755] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ca", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ca", lpFilePart=0x0) returned 0x48 [0123.755] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ca\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ca\\", lpFilePart=0x0) returned 0x49 [0123.755] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ca\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d79d0 [0123.756] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0123.756] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0123.756] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0123.756] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0123.757] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0123.757] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0123.757] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0123.757] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ca", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ca", lpFilePart=0x0) returned 0x48 [0123.757] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ca\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ca\\", lpFilePart=0x0) returned 0x49 [0123.757] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ca\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7670 [0123.757] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0123.757] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0123.757] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0123.757] FindClose (in: hFindFile=0x5d7670 | out: hFindFile=0x5d7670) returned 1 [0123.757] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0123.757] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0123.757] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ca\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ca\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0123.757] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0123.758] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ca\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ca\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x2209b98 | out: lpFileInformation=0x2209b98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4172bf28, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x4172bf28, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x4172bf28, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x24ed0)) returned 1 [0123.758] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0123.758] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ca\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ca\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0123.758] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0123.758] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ca\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ca\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x2209d58 | out: lpFileInformation=0x2209d58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4172bf28, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x4172bf28, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x4172bf28, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x24ed0)) returned 1 [0123.758] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0123.758] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ca\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ca\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0123.758] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0123.758] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ca\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ca\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0123.759] GetFileType (hFile=0x444) returned 0x1 [0123.759] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0123.759] GetFileType (hFile=0x444) returned 0x1 [0123.759] ReadFile (in: hFile=0x444, lpBuffer=0x220c208, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x220c208*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0123.779] CloseHandle (hObject=0x444) returned 1 [0123.780] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ca\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ca\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0123.780] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0123.780] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ca\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ca\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0123.780] GetFileType (hFile=0x444) returned 0x1 [0123.780] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0123.780] GetFileType (hFile=0x444) returned 0x1 [0123.780] WriteFile (in: hFile=0x444, lpBuffer=0x2209ef8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x2209ef8*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0123.780] CloseHandle (hObject=0x444) returned 1 [0123.780] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ca\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ca\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0123.780] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ca\\FileSync.LocalizedResources.dll.mui.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ca\\FileSync.LocalizedResources.dll.mui.xuy", lpFilePart=0x0) returned 0x70 [0123.780] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0123.781] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ca\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ca\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4172bf28, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x4172bf28, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x359f537d, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x24ed0)) returned 1 [0123.781] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0123.781] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ca\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ca\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ca\\FileSync.LocalizedResources.dll.mui.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ca\\filesync.localizedresources.dll.mui.xuy")) returned 1 [0123.782] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0123.782] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ca-es-valencia", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ca-es-valencia", lpFilePart=0x0) returned 0x54 [0123.782] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ca-es-valencia\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ca-es-valencia\\", lpFilePart=0x0) returned 0x55 [0123.782] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ca-es-valencia\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d79d0 [0123.782] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0123.782] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0123.783] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0123.783] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0123.783] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0123.783] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0123.783] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0123.783] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ca-es-valencia", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ca-es-valencia", lpFilePart=0x0) returned 0x54 [0123.783] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ca-es-valencia\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ca-es-valencia\\", lpFilePart=0x0) returned 0x55 [0123.783] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ca-es-valencia\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d73d0 [0123.783] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0123.783] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0123.783] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0123.783] FindClose (in: hFindFile=0x5d73d0 | out: hFindFile=0x5d73d0) returned 1 [0123.783] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0123.783] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0123.784] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ca-es-valencia\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ca-es-valencia\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x78 [0123.784] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0123.784] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ca-es-valencia\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ca-es-valencia\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x228ab10 | out: lpFileInformation=0x228ab10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41d47f78, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x41d47f78, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x41d47f78, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x24ac8)) returned 1 [0123.785] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0123.785] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ca-es-valencia\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ca-es-valencia\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x78 [0123.785] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0123.785] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ca-es-valencia\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ca-es-valencia\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x228ace8 | out: lpFileInformation=0x228ace8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41d47f78, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x41d47f78, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x41d47f78, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x24ac8)) returned 1 [0123.785] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0123.785] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ca-es-valencia\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ca-es-valencia\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x78 [0123.785] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0123.785] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ca-es-valencia\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ca-es-valencia\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0123.786] GetFileType (hFile=0x444) returned 0x1 [0123.786] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0123.786] GetFileType (hFile=0x444) returned 0x1 [0123.786] ReadFile (in: hFile=0x444, lpBuffer=0x228d1c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x228d1c8*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0123.809] CloseHandle (hObject=0x444) returned 1 [0123.810] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ca-es-valencia\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ca-es-valencia\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x78 [0123.810] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0123.810] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ca-es-valencia\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ca-es-valencia\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0123.810] GetFileType (hFile=0x444) returned 0x1 [0123.810] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0123.810] GetFileType (hFile=0x444) returned 0x1 [0123.810] WriteFile (in: hFile=0x444, lpBuffer=0x228aea0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x228aea0*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0123.810] CloseHandle (hObject=0x444) returned 1 [0123.810] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ca-es-valencia\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ca-es-valencia\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x78 [0123.811] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ca-es-valencia\\FileSync.LocalizedResources.dll.mui.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ca-es-valencia\\FileSync.LocalizedResources.dll.mui.xuy", lpFilePart=0x0) returned 0x7c [0123.811] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0123.811] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ca-es-valencia\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ca-es-valencia\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41d47f78, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x41d47f78, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x35a418df, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x24ac8)) returned 1 [0123.811] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0123.811] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ca-es-valencia\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ca-es-valencia\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ca-es-valencia\\FileSync.LocalizedResources.dll.mui.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ca-es-valencia\\filesync.localizedresources.dll.mui.xuy")) returned 1 [0123.812] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0123.812] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\cs", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\cs", lpFilePart=0x0) returned 0x48 [0123.812] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\cs\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\cs\\", lpFilePart=0x0) returned 0x49 [0123.812] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\cs\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7eb0 [0123.812] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0123.812] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0123.813] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0123.813] FindClose (in: hFindFile=0x5d7eb0 | out: hFindFile=0x5d7eb0) returned 1 [0123.813] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0123.813] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0123.813] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0123.813] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\cs", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\cs", lpFilePart=0x0) returned 0x48 [0123.813] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\cs\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\cs\\", lpFilePart=0x0) returned 0x49 [0123.813] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\cs\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7370 [0123.813] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0123.813] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0123.813] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0123.813] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0123.813] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0123.813] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0123.814] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\cs\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\cs\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0123.814] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0123.814] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\cs\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\cs\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x230b860 | out: lpFileInformation=0x230b860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42363fd2, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x42363fd2, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x42363fd2, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x222d0)) returned 1 [0123.814] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0123.814] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\cs\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\cs\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0123.814] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0123.814] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\cs\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\cs\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x230ba20 | out: lpFileInformation=0x230ba20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42363fd2, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x42363fd2, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x42363fd2, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x222d0)) returned 1 [0123.814] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0123.815] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\cs\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\cs\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0123.815] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0123.815] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\cs\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\cs\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0123.815] GetFileType (hFile=0x444) returned 0x1 [0123.815] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0123.815] GetFileType (hFile=0x444) returned 0x1 [0123.815] ReadFile (in: hFile=0x444, lpBuffer=0x230ded0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x230ded0*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0123.857] CloseHandle (hObject=0x444) returned 1 [0123.857] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\cs\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\cs\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0123.857] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0123.857] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\cs\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\cs\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0123.857] GetFileType (hFile=0x444) returned 0x1 [0123.857] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0123.857] GetFileType (hFile=0x444) returned 0x1 [0123.857] WriteFile (in: hFile=0x444, lpBuffer=0x21621c0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x21621c0*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0123.858] CloseHandle (hObject=0x444) returned 1 [0123.858] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\cs\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\cs\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0123.858] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\cs\\FileSync.LocalizedResources.dll.mui.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\cs\\FileSync.LocalizedResources.dll.mui.xuy", lpFilePart=0x0) returned 0x70 [0123.858] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0123.858] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\cs\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\cs\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42363fd2, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x42363fd2, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x35ab3fc6, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x222d0)) returned 1 [0123.858] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0123.858] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\cs\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\cs\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\cs\\FileSync.LocalizedResources.dll.mui.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\cs\\filesync.localizedresources.dll.mui.xuy")) returned 1 [0123.859] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0123.859] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\cy-gb", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\cy-gb", lpFilePart=0x0) returned 0x4b [0123.859] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\cy-gb\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\cy-gb\\", lpFilePart=0x0) returned 0x4c [0123.859] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\cy-gb\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7df0 [0123.860] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0123.860] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0123.860] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0123.860] FindClose (in: hFindFile=0x5d7df0 | out: hFindFile=0x5d7df0) returned 1 [0123.860] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0123.860] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0123.860] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0123.860] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\cy-gb", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\cy-gb", lpFilePart=0x0) returned 0x4b [0123.860] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\cy-gb\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\cy-gb\\", lpFilePart=0x0) returned 0x4c [0123.860] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\cy-gb\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d78b0 [0123.860] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0123.861] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0123.861] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0123.861] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0123.861] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0123.861] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0123.861] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\cy-gb\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\cy-gb\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0123.861] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0123.861] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\cy-gb\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\cy-gb\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x218c5c0 | out: lpFileInformation=0x218c5c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42a64e49, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x42a64e49, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x42a64e49, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x23ad0)) returned 1 [0123.861] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0123.861] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\cy-gb\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\cy-gb\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0123.861] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0123.861] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\cy-gb\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\cy-gb\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x218c780 | out: lpFileInformation=0x218c780*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42a64e49, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x42a64e49, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x42a64e49, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x23ad0)) returned 1 [0123.861] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0123.861] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\cy-gb\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\cy-gb\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0123.861] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0123.861] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\cy-gb\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\cy-gb\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0123.862] GetFileType (hFile=0x444) returned 0x1 [0123.862] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0123.862] GetFileType (hFile=0x444) returned 0x1 [0123.862] ReadFile (in: hFile=0x444, lpBuffer=0x218ec30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x218ec30*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0123.875] CloseHandle (hObject=0x444) returned 1 [0123.876] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\cy-gb\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\cy-gb\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0123.876] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0123.876] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\cy-gb\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\cy-gb\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0123.876] GetFileType (hFile=0x444) returned 0x1 [0123.876] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0123.876] GetFileType (hFile=0x444) returned 0x1 [0123.876] WriteFile (in: hFile=0x444, lpBuffer=0x218c920*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x218c920*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0123.876] CloseHandle (hObject=0x444) returned 1 [0123.876] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\cy-gb\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\cy-gb\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0123.876] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\cy-gb\\FileSync.LocalizedResources.dll.mui.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\cy-gb\\FileSync.LocalizedResources.dll.mui.xuy", lpFilePart=0x0) returned 0x73 [0123.876] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0123.876] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\cy-gb\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\cy-gb\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42a64e49, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x42a64e49, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x35b00451, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x23ad0)) returned 1 [0123.877] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0123.877] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\cy-gb\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\cy-gb\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\cy-gb\\FileSync.LocalizedResources.dll.mui.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\cy-gb\\filesync.localizedresources.dll.mui.xuy")) returned 1 [0123.878] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0123.878] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\da", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\da", lpFilePart=0x0) returned 0x48 [0123.878] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\da\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\da\\", lpFilePart=0x0) returned 0x49 [0123.878] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\da\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d79d0 [0123.878] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0123.879] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0123.879] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0123.879] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0123.879] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0123.879] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0123.879] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0123.879] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\da", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\da", lpFilePart=0x0) returned 0x48 [0123.879] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\da\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\da\\", lpFilePart=0x0) returned 0x49 [0123.879] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\da\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d78b0 [0123.879] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0123.879] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0123.879] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0123.880] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0123.880] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0123.880] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0123.880] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\da\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\da\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0123.880] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0123.880] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\da\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\da\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x220d268 | out: lpFileInformation=0x220d268*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4318bf30, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x4318bf30, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x4318bf30, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x21ed0)) returned 1 [0123.880] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0123.880] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\da\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\da\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0123.880] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0123.880] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\da\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\da\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x220d428 | out: lpFileInformation=0x220d428*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4318bf30, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x4318bf30, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x4318bf30, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x21ed0)) returned 1 [0123.880] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0123.880] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\da\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\da\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0123.880] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0123.880] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\da\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\da\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0123.881] GetFileType (hFile=0x444) returned 0x1 [0123.881] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0123.881] GetFileType (hFile=0x444) returned 0x1 [0123.881] ReadFile (in: hFile=0x444, lpBuffer=0x220f8d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x220f8d8*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0123.900] CloseHandle (hObject=0x444) returned 1 [0123.901] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\da\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\da\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0123.901] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0123.901] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\da\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\da\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0123.901] GetFileType (hFile=0x444) returned 0x1 [0123.901] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0123.901] GetFileType (hFile=0x444) returned 0x1 [0123.901] WriteFile (in: hFile=0x444, lpBuffer=0x220d5c8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x220d5c8*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0123.902] CloseHandle (hObject=0x444) returned 1 [0123.902] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\da\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\da\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0123.902] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\da\\FileSync.LocalizedResources.dll.mui.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\da\\FileSync.LocalizedResources.dll.mui.xuy", lpFilePart=0x0) returned 0x70 [0123.902] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0123.902] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\da\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\da\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4318bf30, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x4318bf30, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x35b267e7, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x21ed0)) returned 1 [0123.902] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0123.902] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\da\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\da\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\da\\FileSync.LocalizedResources.dll.mui.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\da\\filesync.localizedresources.dll.mui.xuy")) returned 1 [0123.903] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0123.903] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\de", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\de", lpFilePart=0x0) returned 0x48 [0123.904] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\de\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\de\\", lpFilePart=0x0) returned 0x49 [0123.904] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\de\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d78b0 [0123.905] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0123.905] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0123.905] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0123.905] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0123.905] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0123.905] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0123.905] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0123.905] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\de", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\de", lpFilePart=0x0) returned 0x48 [0123.905] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\de\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\de\\", lpFilePart=0x0) returned 0x49 [0123.905] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\de\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7a90 [0123.906] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0123.906] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0123.906] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0123.906] FindClose (in: hFindFile=0x5d7a90 | out: hFindFile=0x5d7a90) returned 1 [0123.906] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0123.906] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0123.907] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\de\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\de\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0123.907] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0123.907] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\de\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\de\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x228df10 | out: lpFileInformation=0x228df10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43997e00, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x43997e00, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x43997e00, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x278d0)) returned 1 [0123.907] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0123.907] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\de\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\de\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0123.907] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0123.907] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\de\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\de\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x228e0d0 | out: lpFileInformation=0x228e0d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43997e00, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x43997e00, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x43997e00, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x278d0)) returned 1 [0123.907] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0123.907] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\de\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\de\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0123.907] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0123.907] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\de\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\de\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0123.908] GetFileType (hFile=0x444) returned 0x1 [0123.908] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0123.908] GetFileType (hFile=0x444) returned 0x1 [0123.908] ReadFile (in: hFile=0x444, lpBuffer=0x2290580, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x2290580*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0123.951] CloseHandle (hObject=0x444) returned 1 [0123.951] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\de\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\de\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0123.951] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0123.951] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\de\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\de\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0123.952] GetFileType (hFile=0x444) returned 0x1 [0123.952] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0123.952] GetFileType (hFile=0x444) returned 0x1 [0123.952] WriteFile (in: hFile=0x444, lpBuffer=0x228e270*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x228e270*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0123.952] CloseHandle (hObject=0x444) returned 1 [0123.955] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\de\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\de\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0123.955] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\de\\FileSync.LocalizedResources.dll.mui.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\de\\FileSync.LocalizedResources.dll.mui.xuy", lpFilePart=0x0) returned 0x70 [0123.955] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0123.955] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\de\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\de\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43997e00, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x43997e00, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x35b98f6c, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x278d0)) returned 1 [0123.955] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0123.955] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\de\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\de\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\de\\FileSync.LocalizedResources.dll.mui.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\de\\filesync.localizedresources.dll.mui.xuy")) returned 1 [0123.956] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0123.956] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\el", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\el", lpFilePart=0x0) returned 0x48 [0123.956] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\el\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\el\\", lpFilePart=0x0) returned 0x49 [0123.956] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\el\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7c70 [0123.957] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0123.957] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0123.957] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0123.958] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0123.958] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0123.958] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0123.958] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0123.958] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\el", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\el", lpFilePart=0x0) returned 0x48 [0123.958] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\el\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\el\\", lpFilePart=0x0) returned 0x49 [0123.958] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\el\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7670 [0123.958] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0123.958] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0123.958] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0123.958] FindClose (in: hFindFile=0x5d7670 | out: hFindFile=0x5d7670) returned 1 [0123.958] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0123.958] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0123.958] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\el\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\el\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0123.958] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0123.959] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\el\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\el\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x230ebb8 | out: lpFileInformation=0x230ebb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x445f60ff, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x445f60ff, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x445f60ff, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x278d0)) returned 1 [0123.959] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0123.959] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\el\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\el\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0123.959] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0123.959] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\el\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\el\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x230ed78 | out: lpFileInformation=0x230ed78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x445f60ff, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x445f60ff, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x445f60ff, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x278d0)) returned 1 [0123.959] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0123.959] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\el\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\el\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0123.960] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0123.960] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\el\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\el\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0123.960] GetFileType (hFile=0x444) returned 0x1 [0123.960] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0123.960] GetFileType (hFile=0x444) returned 0x1 [0123.960] ReadFile (in: hFile=0x444, lpBuffer=0x2311228, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x2311228*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0124.013] CloseHandle (hObject=0x444) returned 1 [0124.013] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\el\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\el\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0124.013] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0124.013] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\el\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\el\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0124.013] GetFileType (hFile=0x444) returned 0x1 [0124.013] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0124.013] GetFileType (hFile=0x444) returned 0x1 [0124.013] WriteFile (in: hFile=0x444, lpBuffer=0x21621c0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x21621c0*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0124.014] CloseHandle (hObject=0x444) returned 1 [0124.014] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\el\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\el\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0124.014] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\el\\FileSync.LocalizedResources.dll.mui.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\el\\FileSync.LocalizedResources.dll.mui.xuy", lpFilePart=0x0) returned 0x70 [0124.014] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0124.014] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\el\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\el\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x445f60ff, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x445f60ff, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x35c317c6, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x278d0)) returned 1 [0124.014] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0124.014] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\el\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\el\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\el\\FileSync.LocalizedResources.dll.mui.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\el\\filesync.localizedresources.dll.mui.xuy")) returned 1 [0124.015] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0124.015] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\en", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\en", lpFilePart=0x0) returned 0x48 [0124.015] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\en\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\en\\", lpFilePart=0x0) returned 0x49 [0124.015] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\en\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7eb0 [0124.015] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0124.016] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0124.016] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0124.016] FindClose (in: hFindFile=0x5d7eb0 | out: hFindFile=0x5d7eb0) returned 1 [0124.016] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0124.016] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0124.016] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0124.016] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\en", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\en", lpFilePart=0x0) returned 0x48 [0124.016] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\en\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\en\\", lpFilePart=0x0) returned 0x49 [0124.016] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\en\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d79d0 [0124.016] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0124.016] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0124.017] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0124.017] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0124.017] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0124.017] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0124.017] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\en\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\en\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0124.017] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0124.017] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\en\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\en\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x218f850 | out: lpFileInformation=0x218f850*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44d43429, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x44d43429, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x44d43429, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x1f6c8)) returned 1 [0124.017] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0124.017] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\en\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\en\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0124.018] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0124.018] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\en\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\en\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x218fa10 | out: lpFileInformation=0x218fa10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44d43429, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x44d43429, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x44d43429, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x1f6c8)) returned 1 [0124.018] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0124.018] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\en\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\en\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0124.018] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0124.018] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\en\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\en\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0124.018] GetFileType (hFile=0x444) returned 0x1 [0124.018] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0124.019] GetFileType (hFile=0x444) returned 0x1 [0124.019] ReadFile (in: hFile=0x444, lpBuffer=0x2191ec0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x2191ec0*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0124.042] CloseHandle (hObject=0x444) returned 1 [0124.042] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\en\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\en\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0124.042] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0124.042] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\en\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\en\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0124.043] GetFileType (hFile=0x444) returned 0x1 [0124.043] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0124.043] GetFileType (hFile=0x444) returned 0x1 [0124.043] WriteFile (in: hFile=0x444, lpBuffer=0x218fbb0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x218fbb0*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0124.043] CloseHandle (hObject=0x444) returned 1 [0124.043] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\en\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\en\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0124.043] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\en\\FileSync.LocalizedResources.dll.mui.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\en\\FileSync.LocalizedResources.dll.mui.xuy", lpFilePart=0x0) returned 0x70 [0124.043] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0124.043] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\en\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\en\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44d43429, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x44d43429, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x35c7dee9, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x1f6c8)) returned 1 [0124.043] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0124.043] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\en\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\en\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\en\\FileSync.LocalizedResources.dll.mui.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\en\\filesync.localizedresources.dll.mui.xuy")) returned 1 [0124.044] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0124.044] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\en-gb", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\en-gb", lpFilePart=0x0) returned 0x4b [0124.044] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\en-gb\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\en-gb\\", lpFilePart=0x0) returned 0x4c [0124.044] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\en-gb\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7370 [0124.044] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0124.045] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0124.045] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0124.045] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0124.045] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0124.045] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0124.045] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0124.045] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\en-gb", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\en-gb", lpFilePart=0x0) returned 0x4b [0124.045] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\en-gb\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\en-gb\\", lpFilePart=0x0) returned 0x4c [0124.045] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\en-gb\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7d30 [0124.045] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0124.045] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0124.045] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0124.046] FindClose (in: hFindFile=0x5d7d30 | out: hFindFile=0x5d7d30) returned 1 [0124.046] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0124.046] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0124.046] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\en-gb\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\en-gb\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0124.046] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0124.046] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\en-gb\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\en-gb\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x22105a8 | out: lpFileInformation=0x22105a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x453856d1, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x453856d1, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x453856d1, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x1f6d0)) returned 1 [0124.048] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0124.048] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\en-gb\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\en-gb\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0124.048] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0124.048] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\en-gb\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\en-gb\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x2210768 | out: lpFileInformation=0x2210768*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x453856d1, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x453856d1, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x453856d1, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x1f6d0)) returned 1 [0124.048] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0124.048] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\en-gb\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\en-gb\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0124.048] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0124.048] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\en-gb\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\en-gb\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0124.048] GetFileType (hFile=0x444) returned 0x1 [0124.048] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0124.048] GetFileType (hFile=0x444) returned 0x1 [0124.049] ReadFile (in: hFile=0x444, lpBuffer=0x2212c18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x2212c18*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0124.069] CloseHandle (hObject=0x444) returned 1 [0124.069] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\en-gb\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\en-gb\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0124.069] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0124.069] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\en-gb\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\en-gb\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0124.069] GetFileType (hFile=0x444) returned 0x1 [0124.069] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0124.069] GetFileType (hFile=0x444) returned 0x1 [0124.069] WriteFile (in: hFile=0x444, lpBuffer=0x2210908*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x2210908*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0124.069] CloseHandle (hObject=0x444) returned 1 [0124.070] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\en-gb\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\en-gb\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0124.070] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\en-gb\\FileSync.LocalizedResources.dll.mui.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\en-gb\\FileSync.LocalizedResources.dll.mui.xuy", lpFilePart=0x0) returned 0x73 [0124.070] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0124.070] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\en-gb\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\en-gb\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x453856d1, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x453856d1, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x35cc9fa6, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x1f6d0)) returned 1 [0124.070] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0124.070] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\en-gb\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\en-gb\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\en-gb\\FileSync.LocalizedResources.dll.mui.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\en-gb\\filesync.localizedresources.dll.mui.xuy")) returned 1 [0124.071] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0124.071] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\es", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\es", lpFilePart=0x0) returned 0x48 [0124.071] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\es\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\es\\", lpFilePart=0x0) returned 0x49 [0124.071] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\es\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7fd0 [0124.071] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0124.071] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0124.071] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0124.071] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0124.071] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0124.071] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0124.071] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0124.071] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\es", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\es", lpFilePart=0x0) returned 0x48 [0124.072] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\es\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\es\\", lpFilePart=0x0) returned 0x49 [0124.072] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\es\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d75b0 [0124.072] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0124.072] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0124.072] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0124.072] FindClose (in: hFindFile=0x5d75b0 | out: hFindFile=0x5d75b0) returned 1 [0124.072] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0124.072] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0124.072] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\es\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\es\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0124.072] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0124.072] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\es\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\es\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x2291250 | out: lpFileInformation=0x2291250*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x459edbde, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x459edbde, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x459edbde, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x246d0)) returned 1 [0124.073] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0124.073] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\es\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\es\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0124.073] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0124.073] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\es\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\es\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x2291410 | out: lpFileInformation=0x2291410*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x459edbde, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x459edbde, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x459edbde, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x246d0)) returned 1 [0124.073] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0124.073] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\es\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\es\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0124.073] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0124.073] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\es\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\es\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0124.074] GetFileType (hFile=0x444) returned 0x1 [0124.074] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0124.074] GetFileType (hFile=0x444) returned 0x1 [0124.074] ReadFile (in: hFile=0x444, lpBuffer=0x22938c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x22938c0*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0124.101] CloseHandle (hObject=0x444) returned 1 [0124.101] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\es\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\es\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0124.101] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0124.101] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\es\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\es\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0124.102] GetFileType (hFile=0x444) returned 0x1 [0124.102] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0124.102] GetFileType (hFile=0x444) returned 0x1 [0124.102] WriteFile (in: hFile=0x444, lpBuffer=0x22915b0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x22915b0*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0124.102] CloseHandle (hObject=0x444) returned 1 [0124.102] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\es\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\es\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0124.102] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\es\\FileSync.LocalizedResources.dll.mui.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\es\\FileSync.LocalizedResources.dll.mui.xuy", lpFilePart=0x0) returned 0x70 [0124.102] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0124.102] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\es\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\es\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x459edbde, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x459edbde, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x35d164be, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x246d0)) returned 1 [0124.102] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0124.102] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\es\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\es\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\es\\FileSync.LocalizedResources.dll.mui.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\es\\filesync.localizedresources.dll.mui.xuy")) returned 1 [0124.103] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0124.103] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\et", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\et", lpFilePart=0x0) returned 0x48 [0124.103] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\et\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\et\\", lpFilePart=0x0) returned 0x49 [0124.103] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\et\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7af0 [0124.104] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0124.104] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0124.104] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0124.104] FindClose (in: hFindFile=0x5d7af0 | out: hFindFile=0x5d7af0) returned 1 [0124.104] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0124.104] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0124.104] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0124.104] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\et", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\et", lpFilePart=0x0) returned 0x48 [0124.104] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\et\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\et\\", lpFilePart=0x0) returned 0x49 [0124.104] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\et\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7fd0 [0124.105] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0124.105] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0124.105] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0124.105] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0124.105] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0124.105] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0124.105] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\et\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\et\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0124.105] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0124.105] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\et\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\et\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x2311ef8 | out: lpFileInformation=0x2311ef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x464ce76b, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x464ce76b, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x464ce76b, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x216d0)) returned 1 [0124.106] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0124.106] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\et\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\et\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0124.106] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0124.106] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\et\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\et\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x23120b8 | out: lpFileInformation=0x23120b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x464ce76b, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x464ce76b, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x464ce76b, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x216d0)) returned 1 [0124.106] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0124.106] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\et\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\et\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0124.106] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0124.106] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\et\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\et\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0124.107] GetFileType (hFile=0x444) returned 0x1 [0124.107] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0124.107] GetFileType (hFile=0x444) returned 0x1 [0124.107] ReadFile (in: hFile=0x444, lpBuffer=0x2314568, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x2314568*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0124.149] CloseHandle (hObject=0x444) returned 1 [0124.149] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\et\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\et\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0124.149] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0124.149] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\et\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\et\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0124.150] GetFileType (hFile=0x444) returned 0x1 [0124.150] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0124.150] GetFileType (hFile=0x444) returned 0x1 [0124.150] WriteFile (in: hFile=0x444, lpBuffer=0x21621c0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x21621c0*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0124.150] CloseHandle (hObject=0x444) returned 1 [0124.150] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\et\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\et\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0124.150] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\et\\FileSync.LocalizedResources.dll.mui.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\et\\FileSync.LocalizedResources.dll.mui.xuy", lpFilePart=0x0) returned 0x70 [0124.150] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0124.150] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\et\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\et\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x464ce76b, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x464ce76b, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x35d88b93, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x216d0)) returned 1 [0124.150] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0124.151] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\et\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\et\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\et\\FileSync.LocalizedResources.dll.mui.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\et\\filesync.localizedresources.dll.mui.xuy")) returned 1 [0124.151] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0124.152] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\eu", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\eu", lpFilePart=0x0) returned 0x48 [0124.152] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\eu\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\eu\\", lpFilePart=0x0) returned 0x49 [0124.152] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\eu\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d81b0 [0124.152] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0124.152] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0124.152] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0124.152] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0124.152] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0124.152] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0124.152] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0124.152] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\eu", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\eu", lpFilePart=0x0) returned 0x48 [0124.152] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\eu\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\eu\\", lpFilePart=0x0) returned 0x49 [0124.152] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\eu\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7eb0 [0124.153] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0124.153] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0124.153] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0124.153] FindClose (in: hFindFile=0x5d7eb0 | out: hFindFile=0x5d7eb0) returned 1 [0124.153] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0124.153] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0124.153] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\eu\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\eu\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0124.153] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0124.153] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\eu\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\eu\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x2192b90 | out: lpFileInformation=0x2192b90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46c1ba95, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x46c1ba95, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x46c1ba95, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x230d0)) returned 1 [0124.154] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0124.154] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\eu\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\eu\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0124.154] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0124.154] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\eu\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\eu\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x2192d50 | out: lpFileInformation=0x2192d50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46c1ba95, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x46c1ba95, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x46c1ba95, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x230d0)) returned 1 [0124.154] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0124.155] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\eu\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\eu\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0124.155] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0124.155] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\eu\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\eu\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0124.155] GetFileType (hFile=0x444) returned 0x1 [0124.155] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0124.155] GetFileType (hFile=0x444) returned 0x1 [0124.155] ReadFile (in: hFile=0x444, lpBuffer=0x2195200, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x2195200*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0124.169] CloseHandle (hObject=0x444) returned 1 [0124.169] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\eu\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\eu\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0124.169] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0124.169] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\eu\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\eu\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0124.169] GetFileType (hFile=0x444) returned 0x1 [0124.169] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0124.169] GetFileType (hFile=0x444) returned 0x1 [0124.169] WriteFile (in: hFile=0x444, lpBuffer=0x2192ef0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x2192ef0*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0124.170] CloseHandle (hObject=0x444) returned 1 [0124.170] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\eu\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\eu\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0124.170] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\eu\\FileSync.LocalizedResources.dll.mui.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\eu\\FileSync.LocalizedResources.dll.mui.xuy", lpFilePart=0x0) returned 0x70 [0124.170] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0124.170] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\eu\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\eu\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46c1ba95, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x46c1ba95, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x35daee5c, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x230d0)) returned 1 [0124.170] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0124.170] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\eu\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\eu\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\eu\\FileSync.LocalizedResources.dll.mui.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\eu\\filesync.localizedresources.dll.mui.xuy")) returned 1 [0124.171] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0124.171] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fa", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fa", lpFilePart=0x0) returned 0x48 [0124.171] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fa\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fa\\", lpFilePart=0x0) returned 0x49 [0124.171] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fa\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7f10 [0124.171] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0124.171] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0124.171] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0124.172] FindClose (in: hFindFile=0x5d7f10 | out: hFindFile=0x5d7f10) returned 1 [0124.172] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0124.172] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0124.172] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0124.172] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fa", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fa", lpFilePart=0x0) returned 0x48 [0124.172] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fa\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fa\\", lpFilePart=0x0) returned 0x49 [0124.172] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fa\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7670 [0124.172] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0124.172] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0124.173] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0124.173] FindClose (in: hFindFile=0x5d7670 | out: hFindFile=0x5d7670) returned 1 [0124.173] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0124.173] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0124.173] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fa\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fa\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0124.173] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0124.173] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fa\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\fa\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x2213838 | out: lpFileInformation=0x2213838*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47342b61, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x47342b61, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x47342b61, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x222c8)) returned 1 [0124.173] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0124.173] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fa\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fa\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0124.174] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0124.174] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fa\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\fa\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x22139f8 | out: lpFileInformation=0x22139f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47342b61, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x47342b61, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x47342b61, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x222c8)) returned 1 [0124.174] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0124.174] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fa\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fa\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0124.174] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0124.174] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fa\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\fa\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0124.174] GetFileType (hFile=0x444) returned 0x1 [0124.174] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0124.175] GetFileType (hFile=0x444) returned 0x1 [0124.175] ReadFile (in: hFile=0x444, lpBuffer=0x2215ea8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x2215ea8*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0124.197] CloseHandle (hObject=0x444) returned 1 [0124.197] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fa\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fa\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0124.197] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0124.197] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fa\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\fa\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0124.198] GetFileType (hFile=0x444) returned 0x1 [0124.198] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0124.198] GetFileType (hFile=0x444) returned 0x1 [0124.198] WriteFile (in: hFile=0x444, lpBuffer=0x2213b98*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x2213b98*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0124.198] CloseHandle (hObject=0x444) returned 1 [0124.198] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fa\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fa\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0124.198] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fa\\FileSync.LocalizedResources.dll.mui.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fa\\FileSync.LocalizedResources.dll.mui.xuy", lpFilePart=0x0) returned 0x70 [0124.198] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0124.198] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fa\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\fa\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47342b61, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x47342b61, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x35dfb39c, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x222c8)) returned 1 [0124.198] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0124.198] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fa\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\fa\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fa\\FileSync.LocalizedResources.dll.mui.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\fa\\filesync.localizedresources.dll.mui.xuy")) returned 1 [0124.199] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0124.199] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fi", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fi", lpFilePart=0x0) returned 0x48 [0124.200] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fi\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fi\\", lpFilePart=0x0) returned 0x49 [0124.200] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fi\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7cd0 [0124.200] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0124.200] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0124.200] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0124.200] FindClose (in: hFindFile=0x5d7cd0 | out: hFindFile=0x5d7cd0) returned 1 [0124.200] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0124.200] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0124.200] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0124.200] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fi", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fi", lpFilePart=0x0) returned 0x48 [0124.200] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fi\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fi\\", lpFilePart=0x0) returned 0x49 [0124.200] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fi\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d81b0 [0124.201] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0124.201] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0124.201] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0124.201] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0124.201] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0124.201] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0124.201] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fi\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fi\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0124.201] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0124.201] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fi\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\fi\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x22944e0 | out: lpFileInformation=0x22944e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47ab60d8, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x47ab60d8, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x47ab60d8, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x220d0)) returned 1 [0124.202] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0124.202] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fi\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fi\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0124.202] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0124.202] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fi\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\fi\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x22946a0 | out: lpFileInformation=0x22946a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47ab60d8, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x47ab60d8, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x47ab60d8, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x220d0)) returned 1 [0124.202] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0124.202] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fi\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fi\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0124.202] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0124.202] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fi\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\fi\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0124.203] GetFileType (hFile=0x444) returned 0x1 [0124.203] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0124.203] GetFileType (hFile=0x444) returned 0x1 [0124.203] ReadFile (in: hFile=0x444, lpBuffer=0x2296b50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x2296b50*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0124.215] CloseHandle (hObject=0x444) returned 1 [0124.216] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fi\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fi\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0124.216] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0124.216] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fi\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\fi\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0124.216] GetFileType (hFile=0x444) returned 0x1 [0124.216] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0124.216] GetFileType (hFile=0x444) returned 0x1 [0124.216] WriteFile (in: hFile=0x444, lpBuffer=0x2294840*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x2294840*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0124.216] CloseHandle (hObject=0x444) returned 1 [0124.216] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fi\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fi\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0124.217] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fi\\FileSync.LocalizedResources.dll.mui.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fi\\FileSync.LocalizedResources.dll.mui.xuy", lpFilePart=0x0) returned 0x70 [0124.217] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0124.217] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fi\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\fi\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47ab60d8, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x47ab60d8, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x35e215a5, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x220d0)) returned 1 [0124.217] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0124.217] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fi\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\fi\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fi\\FileSync.LocalizedResources.dll.mui.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\fi\\filesync.localizedresources.dll.mui.xuy")) returned 1 [0124.218] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0124.218] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fil-ph", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fil-ph", lpFilePart=0x0) returned 0x4c [0124.218] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fil-ph\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fil-ph\\", lpFilePart=0x0) returned 0x4d [0124.218] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fil-ph\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d8090 [0124.218] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0124.218] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0124.218] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0124.219] FindClose (in: hFindFile=0x5d8090 | out: hFindFile=0x5d8090) returned 1 [0124.219] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0124.219] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0124.219] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0124.219] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fil-ph", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fil-ph", lpFilePart=0x0) returned 0x4c [0124.219] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fil-ph\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fil-ph\\", lpFilePart=0x0) returned 0x4d [0124.219] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fil-ph\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d79d0 [0124.220] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0124.220] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0124.220] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0124.220] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0124.220] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0124.220] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0124.220] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fil-ph\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fil-ph\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x70 [0124.220] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0124.220] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fil-ph\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\fil-ph\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x2315278 | out: lpFileInformation=0x2315278*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48326db4, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x48326db4, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x4832a832, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x25cd0)) returned 1 [0124.221] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0124.221] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fil-ph\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fil-ph\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x70 [0124.221] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0124.221] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fil-ph\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\fil-ph\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x2315440 | out: lpFileInformation=0x2315440*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48326db4, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x48326db4, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x4832a832, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x25cd0)) returned 1 [0124.221] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0124.221] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fil-ph\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fil-ph\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x70 [0124.221] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0124.221] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fil-ph\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\fil-ph\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0124.222] GetFileType (hFile=0x444) returned 0x1 [0124.222] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0124.222] GetFileType (hFile=0x444) returned 0x1 [0124.222] ReadFile (in: hFile=0x444, lpBuffer=0x2317900, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x2317900*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0124.265] CloseHandle (hObject=0x444) returned 1 [0124.265] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fil-ph\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fil-ph\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x70 [0124.265] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0124.265] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fil-ph\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\fil-ph\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0124.265] GetFileType (hFile=0x444) returned 0x1 [0124.265] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0124.266] GetFileType (hFile=0x444) returned 0x1 [0124.266] WriteFile (in: hFile=0x444, lpBuffer=0x21621c8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x21621c8*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0124.266] CloseHandle (hObject=0x444) returned 1 [0124.266] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fil-ph\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fil-ph\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x70 [0124.266] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fil-ph\\FileSync.LocalizedResources.dll.mui.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fil-ph\\FileSync.LocalizedResources.dll.mui.xuy", lpFilePart=0x0) returned 0x74 [0124.266] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0124.266] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fil-ph\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\fil-ph\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48326db4, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x48326db4, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x35e93d6c, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x25cd0)) returned 1 [0124.266] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0124.266] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fil-ph\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\fil-ph\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fil-ph\\FileSync.LocalizedResources.dll.mui.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\fil-ph\\filesync.localizedresources.dll.mui.xuy")) returned 1 [0124.268] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0124.268] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fr", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fr", lpFilePart=0x0) returned 0x48 [0124.268] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fr\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fr\\", lpFilePart=0x0) returned 0x49 [0124.268] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fr\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7f10 [0124.268] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0124.268] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0124.268] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0124.268] FindClose (in: hFindFile=0x5d7f10 | out: hFindFile=0x5d7f10) returned 1 [0124.269] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0124.269] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0124.269] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0124.269] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fr", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fr", lpFilePart=0x0) returned 0x48 [0124.269] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fr\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fr\\", lpFilePart=0x0) returned 0x49 [0124.269] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fr\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7c70 [0124.269] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0124.269] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0124.269] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0124.269] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0124.269] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0124.269] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0124.269] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fr\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fr\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0124.269] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0124.270] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fr\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\fr\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x2195f10 | out: lpFileInformation=0x2195f10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48992a36, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x48992a36, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x48992a36, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x26ed0)) returned 1 [0124.270] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0124.270] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fr\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fr\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0124.270] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0124.270] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fr\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\fr\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x21960d0 | out: lpFileInformation=0x21960d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48992a36, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x48992a36, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x48992a36, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x26ed0)) returned 1 [0124.270] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0124.270] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fr\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fr\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0124.271] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0124.271] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fr\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\fr\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0124.271] GetFileType (hFile=0x444) returned 0x1 [0124.271] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0124.271] GetFileType (hFile=0x444) returned 0x1 [0124.271] ReadFile (in: hFile=0x444, lpBuffer=0x2198580, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x2198580*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0124.292] CloseHandle (hObject=0x444) returned 1 [0124.292] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fr\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fr\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0124.292] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0124.292] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fr\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\fr\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0124.292] GetFileType (hFile=0x444) returned 0x1 [0124.292] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0124.293] GetFileType (hFile=0x444) returned 0x1 [0124.293] WriteFile (in: hFile=0x444, lpBuffer=0x2196270*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x2196270*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0124.293] CloseHandle (hObject=0x444) returned 1 [0124.293] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fr\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fr\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0124.293] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fr\\FileSync.LocalizedResources.dll.mui.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fr\\FileSync.LocalizedResources.dll.mui.xuy", lpFilePart=0x0) returned 0x70 [0124.293] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0124.293] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fr\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\fr\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48992a36, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x48992a36, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x35ee0137, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x26ed0)) returned 1 [0124.293] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0124.293] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fr\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\fr\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fr\\FileSync.LocalizedResources.dll.mui.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\fr\\filesync.localizedresources.dll.mui.xuy")) returned 1 [0124.294] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0124.294] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ga-ie", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ga-ie", lpFilePart=0x0) returned 0x4b [0124.294] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ga-ie\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ga-ie\\", lpFilePart=0x0) returned 0x4c [0124.294] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ga-ie\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7550 [0124.295] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0124.295] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0124.295] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0124.295] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0124.295] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0124.295] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0124.295] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0124.295] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ga-ie", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ga-ie", lpFilePart=0x0) returned 0x4b [0124.295] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ga-ie\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ga-ie\\", lpFilePart=0x0) returned 0x4c [0124.295] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ga-ie\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d81b0 [0124.295] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0124.296] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0124.296] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0124.296] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0124.296] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0124.296] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0124.296] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ga-ie\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ga-ie\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0124.296] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0124.296] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ga-ie\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ga-ie\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x2216c68 | out: lpFileInformation=0x2216c68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48ffaf43, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x48ffaf43, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x48ffaf43, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x24ad0)) returned 1 [0124.297] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0124.297] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ga-ie\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ga-ie\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0124.297] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0124.298] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ga-ie\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ga-ie\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x2216e28 | out: lpFileInformation=0x2216e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48ffaf43, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x48ffaf43, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x48ffaf43, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x24ad0)) returned 1 [0124.298] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0124.298] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ga-ie\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ga-ie\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0124.298] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0124.298] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ga-ie\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ga-ie\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0124.298] GetFileType (hFile=0x444) returned 0x1 [0124.299] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0124.299] GetFileType (hFile=0x444) returned 0x1 [0124.299] ReadFile (in: hFile=0x444, lpBuffer=0x22192d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x22192d8*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0124.316] CloseHandle (hObject=0x444) returned 1 [0124.316] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ga-ie\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ga-ie\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0124.316] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0124.316] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ga-ie\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ga-ie\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0124.317] GetFileType (hFile=0x444) returned 0x1 [0124.317] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0124.317] GetFileType (hFile=0x444) returned 0x1 [0124.317] WriteFile (in: hFile=0x444, lpBuffer=0x2216fc8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x2216fc8*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0124.317] CloseHandle (hObject=0x444) returned 1 [0124.317] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ga-ie\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ga-ie\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0124.317] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ga-ie\\FileSync.LocalizedResources.dll.mui.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ga-ie\\FileSync.LocalizedResources.dll.mui.xuy", lpFilePart=0x0) returned 0x73 [0124.317] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0124.317] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ga-ie\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ga-ie\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48ffaf43, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x48ffaf43, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x35f2c588, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x24ad0)) returned 1 [0124.317] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0124.317] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ga-ie\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ga-ie\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ga-ie\\FileSync.LocalizedResources.dll.mui.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ga-ie\\filesync.localizedresources.dll.mui.xuy")) returned 1 [0124.318] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0124.318] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\gd-latn", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\gd-latn", lpFilePart=0x0) returned 0x4d [0124.318] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\gd-latn\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\gd-latn\\", lpFilePart=0x0) returned 0x4e [0124.318] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\gd-latn\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7670 [0124.319] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0124.319] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0124.319] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0124.319] FindClose (in: hFindFile=0x5d7670 | out: hFindFile=0x5d7670) returned 1 [0124.319] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0124.319] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0124.319] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0124.319] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\gd-latn", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\gd-latn", lpFilePart=0x0) returned 0x4d [0124.319] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\gd-latn\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\gd-latn\\", lpFilePart=0x0) returned 0x4e [0124.319] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\gd-latn\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d78b0 [0124.319] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0124.320] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0124.320] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0124.320] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0124.320] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0124.320] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0124.320] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\gd-latn\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\gd-latn\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x71 [0124.320] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0124.320] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\gd-latn\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\gd-latn\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x2297a20 | out: lpFileInformation=0x2297a20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4963d1f5, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x4963d1f5, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x4963d1f5, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x27ed0)) returned 1 [0124.326] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0124.326] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\gd-latn\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\gd-latn\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x71 [0124.326] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0124.326] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\gd-latn\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\gd-latn\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x2297be8 | out: lpFileInformation=0x2297be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4963d1f5, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x4963d1f5, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x4963d1f5, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x27ed0)) returned 1 [0124.326] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0124.326] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\gd-latn\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\gd-latn\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x71 [0124.326] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0124.326] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\gd-latn\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\gd-latn\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0124.327] GetFileType (hFile=0x444) returned 0x1 [0124.327] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0124.327] GetFileType (hFile=0x444) returned 0x1 [0124.327] ReadFile (in: hFile=0x444, lpBuffer=0x229a0a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x229a0a8*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0124.357] CloseHandle (hObject=0x444) returned 1 [0124.357] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\gd-latn\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\gd-latn\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x71 [0124.357] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0124.357] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\gd-latn\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\gd-latn\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0124.358] GetFileType (hFile=0x444) returned 0x1 [0124.358] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0124.358] GetFileType (hFile=0x444) returned 0x1 [0124.358] WriteFile (in: hFile=0x444, lpBuffer=0x2297d90*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x2297d90*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0124.358] CloseHandle (hObject=0x444) returned 1 [0124.358] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\gd-latn\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\gd-latn\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x71 [0124.358] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\gd-latn\\FileSync.LocalizedResources.dll.mui.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\gd-latn\\FileSync.LocalizedResources.dll.mui.xuy", lpFilePart=0x0) returned 0x75 [0124.358] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0124.358] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\gd-latn\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\gd-latn\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4963d1f5, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x4963d1f5, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x35f78a78, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x27ed0)) returned 1 [0124.358] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0124.358] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\gd-latn\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\gd-latn\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\gd-latn\\FileSync.LocalizedResources.dll.mui.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\gd-latn\\filesync.localizedresources.dll.mui.xuy")) returned 1 [0124.359] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0124.360] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\gl", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\gl", lpFilePart=0x0) returned 0x48 [0124.360] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\gl\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\gl\\", lpFilePart=0x0) returned 0x49 [0124.360] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\gl\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d79d0 [0124.360] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0124.360] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0124.360] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0124.360] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0124.360] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0124.360] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0124.360] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0124.360] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\gl", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\gl", lpFilePart=0x0) returned 0x48 [0124.360] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\gl\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\gl\\", lpFilePart=0x0) returned 0x49 [0124.360] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\gl\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7610 [0124.361] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0124.361] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0124.361] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0124.361] FindClose (in: hFindFile=0x5d7610 | out: hFindFile=0x5d7610) returned 1 [0124.361] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0124.361] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0124.361] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\gl\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\gl\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0124.361] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0124.361] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\gl\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\gl\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x2318700 | out: lpFileInformation=0x2318700*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49d3e065, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x49d3e065, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x49d6431d, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x236d0)) returned 1 [0124.362] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0124.362] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\gl\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\gl\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0124.362] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0124.362] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\gl\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\gl\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x23188c0 | out: lpFileInformation=0x23188c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49d3e065, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x49d3e065, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x49d6431d, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x236d0)) returned 1 [0124.362] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0124.362] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\gl\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\gl\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0124.362] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0124.362] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\gl\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\gl\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0124.363] GetFileType (hFile=0x444) returned 0x1 [0124.363] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0124.363] GetFileType (hFile=0x444) returned 0x1 [0124.363] ReadFile (in: hFile=0x444, lpBuffer=0x231ad70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x231ad70*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0124.424] CloseHandle (hObject=0x444) returned 1 [0124.424] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\gl\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\gl\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0124.424] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0124.424] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\gl\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\gl\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0124.424] GetFileType (hFile=0x444) returned 0x1 [0124.424] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0124.424] GetFileType (hFile=0x444) returned 0x1 [0124.424] WriteFile (in: hFile=0x444, lpBuffer=0x21621c0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x21621c0*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0124.425] CloseHandle (hObject=0x444) returned 1 [0124.425] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\gl\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\gl\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0124.425] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\gl\\FileSync.LocalizedResources.dll.mui.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\gl\\FileSync.LocalizedResources.dll.mui.xuy", lpFilePart=0x0) returned 0x70 [0124.425] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0124.425] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\gl\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\gl\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49d3e065, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x49d3e065, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3603789d, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x236d0)) returned 1 [0124.425] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0124.425] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\gl\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\gl\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\gl\\FileSync.LocalizedResources.dll.mui.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\gl\\filesync.localizedresources.dll.mui.xuy")) returned 1 [0124.426] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0124.426] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\gu", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\gu", lpFilePart=0x0) returned 0x48 [0124.426] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\gu\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\gu\\", lpFilePart=0x0) returned 0x49 [0124.426] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\gu\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7c70 [0124.426] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0124.426] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0124.426] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0124.427] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0124.427] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0124.427] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0124.427] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0124.427] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\gu", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\gu", lpFilePart=0x0) returned 0x48 [0124.427] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\gu\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\gu\\", lpFilePart=0x0) returned 0x49 [0124.427] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\gu\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7eb0 [0124.427] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0124.427] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0124.427] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0124.427] FindClose (in: hFindFile=0x5d7eb0 | out: hFindFile=0x5d7eb0) returned 1 [0124.427] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0124.427] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0124.427] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\gu\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\gu\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0124.428] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0124.428] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\gu\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\gu\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x2199398 | out: lpFileInformation=0x2199398*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ee4f8e6, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2ee4f8e6, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x2ee4f8e6, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x224d0)) returned 1 [0124.428] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0124.428] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\gu\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\gu\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0124.428] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0124.428] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\gu\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\gu\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x2199558 | out: lpFileInformation=0x2199558*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ee4f8e6, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2ee4f8e6, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x2ee4f8e6, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x224d0)) returned 1 [0124.428] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0124.428] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\gu\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\gu\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0124.428] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0124.428] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\gu\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\gu\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0124.429] GetFileType (hFile=0x444) returned 0x1 [0124.429] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0124.429] GetFileType (hFile=0x444) returned 0x1 [0124.429] ReadFile (in: hFile=0x444, lpBuffer=0x219ba08, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x219ba08*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0124.451] CloseHandle (hObject=0x444) returned 1 [0124.451] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\gu\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\gu\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0124.451] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0124.451] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\gu\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\gu\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0124.451] GetFileType (hFile=0x444) returned 0x1 [0124.451] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0124.452] GetFileType (hFile=0x444) returned 0x1 [0124.452] WriteFile (in: hFile=0x444, lpBuffer=0x21996f8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x21996f8*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0124.452] CloseHandle (hObject=0x444) returned 1 [0124.452] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\gu\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\gu\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0124.452] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\gu\\FileSync.LocalizedResources.dll.mui.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\gu\\FileSync.LocalizedResources.dll.mui.xuy", lpFilePart=0x0) returned 0x70 [0124.452] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0124.452] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\gu\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\gu\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ee4f8e6, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2ee4f8e6, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3605d95b, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x224d0)) returned 1 [0124.452] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0124.452] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\gu\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\gu\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\gu\\FileSync.LocalizedResources.dll.mui.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\gu\\filesync.localizedresources.dll.mui.xuy")) returned 1 [0124.489] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0124.489] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ha-latn-ng", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ha-latn-ng", lpFilePart=0x0) returned 0x50 [0124.489] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ha-latn-ng\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ha-latn-ng\\", lpFilePart=0x0) returned 0x51 [0124.490] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ha-latn-ng\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7c70 [0124.490] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0124.490] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0124.490] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0124.490] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0124.490] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0124.490] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0124.490] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0124.490] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ha-latn-ng", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ha-latn-ng", lpFilePart=0x0) returned 0x50 [0124.490] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ha-latn-ng\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ha-latn-ng\\", lpFilePart=0x0) returned 0x51 [0124.490] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ha-latn-ng\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7a30 [0124.491] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0124.491] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0124.491] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0124.491] FindClose (in: hFindFile=0x5d7a30 | out: hFindFile=0x5d7a30) returned 1 [0124.491] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0124.491] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0124.491] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ha-latn-ng\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ha-latn-ng\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x74 [0124.491] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0124.491] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ha-latn-ng\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ha-latn-ng\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x221a220 | out: lpFileInformation=0x221a220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f95117c, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2f95117c, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x2f9538af, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x226c8)) returned 1 [0124.491] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0124.491] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ha-latn-ng\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ha-latn-ng\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x74 [0124.491] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0124.491] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ha-latn-ng\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ha-latn-ng\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x221a3f0 | out: lpFileInformation=0x221a3f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f95117c, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2f95117c, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x2f9538af, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x226c8)) returned 1 [0124.492] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0124.492] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ha-latn-ng\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ha-latn-ng\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x74 [0124.492] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0124.492] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ha-latn-ng\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ha-latn-ng\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0124.492] GetFileType (hFile=0x444) returned 0x1 [0124.492] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0124.493] GetFileType (hFile=0x444) returned 0x1 [0124.493] ReadFile (in: hFile=0x444, lpBuffer=0x221c8c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x221c8c0*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0124.521] CloseHandle (hObject=0x444) returned 1 [0124.521] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ha-latn-ng\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ha-latn-ng\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x74 [0124.521] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0124.521] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ha-latn-ng\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ha-latn-ng\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0124.521] GetFileType (hFile=0x444) returned 0x1 [0124.521] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0124.521] GetFileType (hFile=0x444) returned 0x1 [0124.521] WriteFile (in: hFile=0x444, lpBuffer=0x221a5a0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x221a5a0*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0124.521] CloseHandle (hObject=0x444) returned 1 [0124.522] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ha-latn-ng\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ha-latn-ng\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x74 [0124.522] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ha-latn-ng\\FileSync.LocalizedResources.dll.mui.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ha-latn-ng\\FileSync.LocalizedResources.dll.mui.xuy", lpFilePart=0x0) returned 0x78 [0124.522] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0124.522] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ha-latn-ng\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ha-latn-ng\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f95117c, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2f95117c, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3611c624, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x226c8)) returned 1 [0124.522] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0124.522] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ha-latn-ng\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ha-latn-ng\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ha-latn-ng\\FileSync.LocalizedResources.dll.mui.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ha-latn-ng\\filesync.localizedresources.dll.mui.xuy")) returned 1 [0124.523] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0124.523] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\he", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\he", lpFilePart=0x0) returned 0x48 [0124.523] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\he\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\he\\", lpFilePart=0x0) returned 0x49 [0124.523] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\he\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7c70 [0124.523] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0124.523] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0124.523] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0124.524] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0124.524] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0124.524] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0124.524] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0124.524] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\he", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\he", lpFilePart=0x0) returned 0x48 [0124.524] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\he\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\he\\", lpFilePart=0x0) returned 0x49 [0124.524] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\he\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d81b0 [0124.524] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0124.524] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0124.524] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0124.524] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0124.524] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0124.524] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0124.524] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\he\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\he\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0124.525] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0124.525] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\he\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\he\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x229af38 | out: lpFileInformation=0x229af38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x300672a7, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x300672a7, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x300699b8, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x1c2d0)) returned 1 [0124.525] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0124.525] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\he\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\he\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0124.525] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0124.525] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\he\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\he\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x229b0f8 | out: lpFileInformation=0x229b0f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x300672a7, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x300672a7, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x300699b8, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x1c2d0)) returned 1 [0124.525] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0124.525] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\he\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\he\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0124.525] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0124.525] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\he\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\he\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0124.526] GetFileType (hFile=0x444) returned 0x1 [0124.526] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0124.526] GetFileType (hFile=0x444) returned 0x1 [0124.526] ReadFile (in: hFile=0x444, lpBuffer=0x229d5a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x229d5a8*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0124.550] CloseHandle (hObject=0x444) returned 1 [0124.550] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\he\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\he\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0124.550] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0124.550] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\he\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\he\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0124.551] GetFileType (hFile=0x444) returned 0x1 [0124.551] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0124.551] GetFileType (hFile=0x444) returned 0x1 [0124.551] WriteFile (in: hFile=0x444, lpBuffer=0x229b298*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x229b298*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0124.551] CloseHandle (hObject=0x444) returned 1 [0124.551] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\he\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\he\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0124.551] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\he\\FileSync.LocalizedResources.dll.mui.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\he\\FileSync.LocalizedResources.dll.mui.xuy", lpFilePart=0x0) returned 0x70 [0124.551] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0124.551] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\he\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\he\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x300672a7, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x300672a7, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x36168896, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x1c2d0)) returned 1 [0124.551] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0124.551] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\he\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\he\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\he\\FileSync.LocalizedResources.dll.mui.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\he\\filesync.localizedresources.dll.mui.xuy")) returned 1 [0124.552] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0124.552] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hi", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hi", lpFilePart=0x0) returned 0x48 [0124.552] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hi\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hi\\", lpFilePart=0x0) returned 0x49 [0124.552] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hi\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7e50 [0124.553] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0124.553] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0124.553] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0124.553] FindClose (in: hFindFile=0x5d7e50 | out: hFindFile=0x5d7e50) returned 1 [0124.553] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0124.553] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0124.553] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0124.553] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hi", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hi", lpFilePart=0x0) returned 0x48 [0124.553] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hi\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hi\\", lpFilePart=0x0) returned 0x49 [0124.553] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hi\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7d90 [0124.553] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0124.554] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0124.554] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0124.554] FindClose (in: hFindFile=0x5d7d90 | out: hFindFile=0x5d7d90) returned 1 [0124.554] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0124.554] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0124.554] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hi\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hi\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0124.554] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0124.554] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hi\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\hi\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x231bbe0 | out: lpFileInformation=0x231bbe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30a55bcf, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x30a55bcf, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x30a5835b, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x232d0)) returned 1 [0124.554] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0124.554] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hi\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hi\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0124.554] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0124.554] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hi\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\hi\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x231bda0 | out: lpFileInformation=0x231bda0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30a55bcf, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x30a55bcf, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x30a5835b, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x232d0)) returned 1 [0124.554] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0124.554] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hi\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hi\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0124.554] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0124.555] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hi\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\hi\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0124.555] GetFileType (hFile=0x444) returned 0x1 [0124.555] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0124.555] GetFileType (hFile=0x444) returned 0x1 [0124.555] ReadFile (in: hFile=0x444, lpBuffer=0x231e250, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x231e250*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0124.599] CloseHandle (hObject=0x444) returned 1 [0124.599] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hi\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hi\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0124.599] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0124.599] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hi\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\hi\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0124.600] GetFileType (hFile=0x444) returned 0x1 [0124.600] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0124.600] GetFileType (hFile=0x444) returned 0x1 [0124.600] WriteFile (in: hFile=0x444, lpBuffer=0x21621c0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x21621c0*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0124.600] CloseHandle (hObject=0x444) returned 1 [0124.600] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hi\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hi\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0124.600] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hi\\FileSync.LocalizedResources.dll.mui.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hi\\FileSync.LocalizedResources.dll.mui.xuy", lpFilePart=0x0) returned 0x70 [0124.600] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0124.600] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hi\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\hi\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30a55bcf, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x30a55bcf, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x361db266, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x232d0)) returned 1 [0124.600] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0124.600] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hi\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\hi\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hi\\FileSync.LocalizedResources.dll.mui.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\hi\\filesync.localizedresources.dll.mui.xuy")) returned 1 [0124.601] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0124.601] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hr", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hr", lpFilePart=0x0) returned 0x48 [0124.601] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hr\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hr\\", lpFilePart=0x0) returned 0x49 [0124.601] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hr\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d79d0 [0124.602] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0124.602] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0124.602] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0124.602] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0124.602] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0124.602] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0124.602] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0124.602] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hr", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hr", lpFilePart=0x0) returned 0x48 [0124.602] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hr\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hr\\", lpFilePart=0x0) returned 0x49 [0124.602] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hr\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7e50 [0124.603] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0124.603] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0124.603] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0124.603] FindClose (in: hFindFile=0x5d7e50 | out: hFindFile=0x5d7e50) returned 1 [0124.603] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0124.603] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0124.603] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hr\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hr\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0124.603] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0124.603] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hr\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\hr\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x219c868 | out: lpFileInformation=0x219c868*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31109a56, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x31109a56, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x31109a56, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x22ec8)) returned 1 [0124.603] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0124.603] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hr\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hr\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0124.603] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0124.603] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hr\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\hr\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x219ca28 | out: lpFileInformation=0x219ca28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31109a56, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x31109a56, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x31109a56, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x22ec8)) returned 1 [0124.603] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0124.603] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hr\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hr\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0124.604] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0124.604] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hr\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\hr\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0124.604] GetFileType (hFile=0x444) returned 0x1 [0124.604] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0124.604] GetFileType (hFile=0x444) returned 0x1 [0124.604] ReadFile (in: hFile=0x444, lpBuffer=0x219eed8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x219eed8*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0124.625] CloseHandle (hObject=0x444) returned 1 [0124.625] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hr\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hr\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0124.625] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0124.626] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hr\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\hr\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0124.626] GetFileType (hFile=0x444) returned 0x1 [0124.626] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0124.626] GetFileType (hFile=0x444) returned 0x1 [0124.626] WriteFile (in: hFile=0x444, lpBuffer=0x219cbc8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x219cbc8*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0124.626] CloseHandle (hObject=0x444) returned 1 [0124.627] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hr\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hr\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0124.627] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hr\\FileSync.LocalizedResources.dll.mui.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hr\\FileSync.LocalizedResources.dll.mui.xuy", lpFilePart=0x0) returned 0x70 [0124.627] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0124.627] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hr\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\hr\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31109a56, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x31109a56, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x36227680, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x22ec8)) returned 1 [0124.627] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0124.627] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hr\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\hr\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hr\\FileSync.LocalizedResources.dll.mui.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\hr\\filesync.localizedresources.dll.mui.xuy")) returned 1 [0124.628] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0124.628] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hu", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hu", lpFilePart=0x0) returned 0x48 [0124.628] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hu\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hu\\", lpFilePart=0x0) returned 0x49 [0124.628] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hu\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7fd0 [0124.629] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0124.629] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0124.629] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0124.629] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0124.629] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0124.629] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0124.629] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0124.629] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hu", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hu", lpFilePart=0x0) returned 0x48 [0124.629] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hu\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hu\\", lpFilePart=0x0) returned 0x49 [0124.629] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hu\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7df0 [0124.630] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0124.630] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0124.630] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0124.630] FindClose (in: hFindFile=0x5d7df0 | out: hFindFile=0x5d7df0) returned 1 [0124.630] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0124.630] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0124.630] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hu\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hu\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0124.630] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0124.630] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hu\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\hu\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x221d510 | out: lpFileInformation=0x221d510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3199a50f, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x3199a50f, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x319a2ddb, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x23ed0)) returned 1 [0124.630] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0124.630] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hu\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hu\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0124.630] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0124.630] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hu\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\hu\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x221d6d0 | out: lpFileInformation=0x221d6d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3199a50f, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x3199a50f, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x319a2ddb, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x23ed0)) returned 1 [0124.631] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0124.631] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hu\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hu\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0124.631] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0124.631] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hu\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\hu\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0124.631] GetFileType (hFile=0x444) returned 0x1 [0124.631] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0124.631] GetFileType (hFile=0x444) returned 0x1 [0124.631] ReadFile (in: hFile=0x444, lpBuffer=0x221fb80, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x221fb80*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0124.654] CloseHandle (hObject=0x444) returned 1 [0124.654] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hu\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hu\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0124.654] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0124.654] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hu\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\hu\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0124.654] GetFileType (hFile=0x444) returned 0x1 [0124.654] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0124.654] GetFileType (hFile=0x444) returned 0x1 [0124.654] WriteFile (in: hFile=0x444, lpBuffer=0x221d870*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x221d870*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0124.655] CloseHandle (hObject=0x444) returned 1 [0124.655] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hu\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hu\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0124.655] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hu\\FileSync.LocalizedResources.dll.mui.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hu\\FileSync.LocalizedResources.dll.mui.xuy", lpFilePart=0x0) returned 0x70 [0124.655] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0124.655] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hu\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\hu\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3199a50f, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x3199a50f, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x36251ee3, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x23ed0)) returned 1 [0124.655] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0124.655] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hu\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\hu\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hu\\FileSync.LocalizedResources.dll.mui.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\hu\\filesync.localizedresources.dll.mui.xuy")) returned 1 [0124.656] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0124.656] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hy", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hy", lpFilePart=0x0) returned 0x48 [0124.656] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hy\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hy\\", lpFilePart=0x0) returned 0x49 [0124.657] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hy\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7c70 [0124.657] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0124.658] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0124.658] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0124.658] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0124.658] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0124.658] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0124.658] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0124.658] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hy", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hy", lpFilePart=0x0) returned 0x48 [0124.658] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hy\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hy\\", lpFilePart=0x0) returned 0x49 [0124.658] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hy\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d79d0 [0124.658] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0124.658] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0124.659] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0124.659] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0124.659] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0124.659] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0124.659] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hy\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hy\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0124.659] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0124.659] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hy\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\hy\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x229e1b8 | out: lpFileInformation=0x229e1b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32528a5a, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x32528a5a, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x32528a5a, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x21ed0)) returned 1 [0124.659] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0124.659] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hy\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hy\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0124.659] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0124.659] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hy\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\hy\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x229e378 | out: lpFileInformation=0x229e378*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32528a5a, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x32528a5a, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x32528a5a, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x21ed0)) returned 1 [0124.659] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0124.659] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hy\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hy\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0124.659] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0124.659] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hy\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\hy\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0124.660] GetFileType (hFile=0x444) returned 0x1 [0124.660] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0124.660] GetFileType (hFile=0x444) returned 0x1 [0124.660] ReadFile (in: hFile=0x444, lpBuffer=0x22a0828, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x22a0828*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0124.672] CloseHandle (hObject=0x444) returned 1 [0124.672] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hy\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hy\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0124.673] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0124.673] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hy\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\hy\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0124.673] GetFileType (hFile=0x444) returned 0x1 [0124.673] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0124.673] GetFileType (hFile=0x444) returned 0x1 [0124.673] WriteFile (in: hFile=0x444, lpBuffer=0x229e518*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x229e518*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0124.673] CloseHandle (hObject=0x444) returned 1 [0124.673] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hy\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hy\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0124.673] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hy\\FileSync.LocalizedResources.dll.mui.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hy\\FileSync.LocalizedResources.dll.mui.xuy", lpFilePart=0x0) returned 0x70 [0124.673] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0124.673] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hy\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\hy\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32528a5a, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x32528a5a, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x36299cc3, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x21ed0)) returned 1 [0124.673] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0124.673] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hy\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\hy\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hy\\FileSync.LocalizedResources.dll.mui.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\hy\\filesync.localizedresources.dll.mui.xuy")) returned 1 [0124.674] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0124.675] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\id", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\id", lpFilePart=0x0) returned 0x48 [0124.675] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\id\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\id\\", lpFilePart=0x0) returned 0x49 [0124.675] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\id\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d81b0 [0124.675] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0124.675] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0124.675] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0124.675] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0124.675] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0124.675] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0124.675] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0124.675] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\id", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\id", lpFilePart=0x0) returned 0x48 [0124.675] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\id\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\id\\", lpFilePart=0x0) returned 0x49 [0124.675] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\id\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7550 [0124.676] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0124.676] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0124.676] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0124.676] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0124.676] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0124.676] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0124.676] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\id\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\id\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0124.676] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0124.676] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\id\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\id\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x231ee60 | out: lpFileInformation=0x231ee60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32d6f4ae, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x32d6f4ae, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x32d71bc6, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x21cd0)) returned 1 [0124.676] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0124.676] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\id\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\id\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0124.676] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0124.677] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\id\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\id\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x231f020 | out: lpFileInformation=0x231f020*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32d6f4ae, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x32d6f4ae, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x32d71bc6, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x21cd0)) returned 1 [0124.677] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0124.677] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\id\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\id\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0124.677] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0124.677] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\id\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\id\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0124.677] GetFileType (hFile=0x444) returned 0x1 [0124.677] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0124.678] GetFileType (hFile=0x444) returned 0x1 [0124.678] ReadFile (in: hFile=0x444, lpBuffer=0x23214d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x23214d0*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0124.716] CloseHandle (hObject=0x444) returned 1 [0124.716] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\id\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\id\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0124.716] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0124.716] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\id\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\id\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0124.717] GetFileType (hFile=0x444) returned 0x1 [0124.717] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0124.717] GetFileType (hFile=0x444) returned 0x1 [0124.717] WriteFile (in: hFile=0x444, lpBuffer=0x21621c0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x21621c0*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0124.717] CloseHandle (hObject=0x444) returned 1 [0124.717] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\id\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\id\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0124.717] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\id\\FileSync.LocalizedResources.dll.mui.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\id\\FileSync.LocalizedResources.dll.mui.xuy", lpFilePart=0x0) returned 0x70 [0124.717] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0124.717] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\id\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\id\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32d6f4ae, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x32d6f4ae, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x362e6129, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x21cd0)) returned 1 [0124.717] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0124.717] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\id\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\id\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\id\\FileSync.LocalizedResources.dll.mui.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\id\\filesync.localizedresources.dll.mui.xuy")) returned 1 [0124.718] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0124.718] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ig-ng", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ig-ng", lpFilePart=0x0) returned 0x4b [0124.718] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ig-ng\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ig-ng\\", lpFilePart=0x0) returned 0x4c [0124.718] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ig-ng\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7370 [0124.720] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0124.720] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0124.720] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0124.720] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0124.720] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0124.720] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0124.720] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0124.720] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ig-ng", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ig-ng", lpFilePart=0x0) returned 0x4b [0124.720] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ig-ng\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ig-ng\\", lpFilePart=0x0) returned 0x4c [0124.720] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ig-ng\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7550 [0124.720] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0124.721] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0124.721] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0124.721] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0124.721] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0124.721] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0124.721] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ig-ng\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ig-ng\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0124.721] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0124.721] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ig-ng\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ig-ng\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x219fb98 | out: lpFileInformation=0x219fb98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3346064b, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x3346064b, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3346064b, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x1e8d0)) returned 1 [0124.721] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0124.721] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ig-ng\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ig-ng\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0124.721] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0124.721] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ig-ng\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ig-ng\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x219fd58 | out: lpFileInformation=0x219fd58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3346064b, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x3346064b, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3346064b, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x1e8d0)) returned 1 [0124.721] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0124.722] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ig-ng\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ig-ng\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0124.722] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0124.722] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ig-ng\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ig-ng\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0124.723] GetFileType (hFile=0x444) returned 0x1 [0124.723] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0124.723] GetFileType (hFile=0x444) returned 0x1 [0124.723] ReadFile (in: hFile=0x444, lpBuffer=0x21a2208, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x21a2208*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0124.746] CloseHandle (hObject=0x444) returned 1 [0124.746] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ig-ng\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ig-ng\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0124.746] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0124.746] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ig-ng\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ig-ng\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0124.747] GetFileType (hFile=0x444) returned 0x1 [0124.747] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0124.747] GetFileType (hFile=0x444) returned 0x1 [0124.747] WriteFile (in: hFile=0x444, lpBuffer=0x219fef8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x219fef8*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0124.747] CloseHandle (hObject=0x444) returned 1 [0124.747] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ig-ng\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ig-ng\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0124.747] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ig-ng\\FileSync.LocalizedResources.dll.mui.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ig-ng\\FileSync.LocalizedResources.dll.mui.xuy", lpFilePart=0x0) returned 0x73 [0124.747] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0124.747] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ig-ng\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ig-ng\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3346064b, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x3346064b, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x36332522, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x1e8d0)) returned 1 [0124.747] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0124.747] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ig-ng\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ig-ng\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ig-ng\\FileSync.LocalizedResources.dll.mui.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ig-ng\\filesync.localizedresources.dll.mui.xuy")) returned 1 [0124.749] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0124.749] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\imageformats", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\imageformats", lpFilePart=0x0) returned 0x52 [0124.749] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\imageformats\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\imageformats\\", lpFilePart=0x0) returned 0x53 [0124.749] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\imageformats\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d79d0 [0124.749] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0124.749] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0124.749] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0124.750] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0124.750] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0124.750] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0124.750] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0124.750] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0124.750] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\imageformats", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\imageformats", lpFilePart=0x0) returned 0x52 [0124.752] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\imageformats\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\imageformats\\", lpFilePart=0x0) returned 0x53 [0124.752] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\imageformats\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d81b0 [0124.752] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0124.752] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0124.753] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0124.753] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0124.753] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0124.753] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0124.753] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0124.753] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\imageformats\\qjpeg.dll", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\imageformats\\qjpeg.dll", lpFilePart=0x0) returned 0x5c [0124.753] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0124.753] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\imageformats\\qjpeg.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\imageformats\\qjpeg.dll"), fInfoLevelId=0x0, lpFileInformation=0x2220d00 | out: lpFileInformation=0x2220d00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33d513cb, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x33d513cb, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x33d513cb, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x3f4d0)) returned 1 [0124.753] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0124.753] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\imageformats\\qjpeg.dll", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\imageformats\\qjpeg.dll", lpFilePart=0x0) returned 0x5c [0124.753] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0124.753] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\imageformats\\qjpeg.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\imageformats\\qjpeg.dll"), fInfoLevelId=0x0, lpFileInformation=0x2220e70 | out: lpFileInformation=0x2220e70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33d513cb, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x33d513cb, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x33d513cb, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x3f4d0)) returned 1 [0124.753] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0124.753] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\imageformats\\qjpeg.dll", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\imageformats\\qjpeg.dll", lpFilePart=0x0) returned 0x5c [0124.753] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0124.753] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\imageformats\\qjpeg.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\imageformats\\qjpeg.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0124.754] GetFileType (hFile=0x444) returned 0x1 [0124.754] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0124.754] GetFileType (hFile=0x444) returned 0x1 [0124.754] ReadFile (in: hFile=0x444, lpBuffer=0x2223280, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x2223280*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0124.768] CloseHandle (hObject=0x444) returned 1 [0124.768] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\imageformats\\qjpeg.dll", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\imageformats\\qjpeg.dll", lpFilePart=0x0) returned 0x5c [0124.768] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0124.768] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\imageformats\\qjpeg.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\imageformats\\qjpeg.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0124.769] GetFileType (hFile=0x444) returned 0x1 [0124.769] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0124.769] GetFileType (hFile=0x444) returned 0x1 [0124.769] WriteFile (in: hFile=0x444, lpBuffer=0x2220fc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x2220fc0*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0124.769] CloseHandle (hObject=0x444) returned 1 [0124.769] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\imageformats\\qjpeg.dll", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\imageformats\\qjpeg.dll", lpFilePart=0x0) returned 0x5c [0124.769] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\imageformats\\qjpeg.dll.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\imageformats\\qjpeg.dll.xuy", lpFilePart=0x0) returned 0x60 [0124.769] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0124.769] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\imageformats\\qjpeg.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\imageformats\\qjpeg.dll"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33d513cb, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x33d513cb, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3637ebe2, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x3f4d0)) returned 1 [0124.769] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0124.769] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\imageformats\\qjpeg.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\imageformats\\qjpeg.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\imageformats\\qjpeg.dll.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\imageformats\\qjpeg.dll.xuy")) returned 1 [0124.770] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\imageformats\\qsvg.dll", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\imageformats\\qsvg.dll", lpFilePart=0x0) returned 0x5b [0124.770] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0124.770] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\imageformats\\qsvg.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\imageformats\\qsvg.dll"), fInfoLevelId=0x0, lpFileInformation=0x229f6d0 | out: lpFileInformation=0x229f6d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34536fe1, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x34536fe1, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x34536fe1, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x8ed0)) returned 1 [0124.770] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0124.770] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\imageformats\\qsvg.dll", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\imageformats\\qsvg.dll", lpFilePart=0x0) returned 0x5b [0124.770] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0124.770] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\imageformats\\qsvg.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\imageformats\\qsvg.dll"), fInfoLevelId=0x0, lpFileInformation=0x229f838 | out: lpFileInformation=0x229f838*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34536fe1, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x34536fe1, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x34536fe1, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x8ed0)) returned 1 [0124.771] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0124.771] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\imageformats\\qsvg.dll", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\imageformats\\qsvg.dll", lpFilePart=0x0) returned 0x5b [0124.771] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0124.771] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\imageformats\\qsvg.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\imageformats\\qsvg.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0124.771] GetFileType (hFile=0x444) returned 0x1 [0124.771] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0124.771] GetFileType (hFile=0x444) returned 0x1 [0124.771] ReadFile (in: hFile=0x444, lpBuffer=0x22a1c38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x22a1c38*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0124.795] CloseHandle (hObject=0x444) returned 1 [0124.795] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\imageformats\\qsvg.dll", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\imageformats\\qsvg.dll", lpFilePart=0x0) returned 0x5b [0124.795] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0124.795] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\imageformats\\qsvg.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\imageformats\\qsvg.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0124.796] GetFileType (hFile=0x444) returned 0x1 [0124.796] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0124.796] GetFileType (hFile=0x444) returned 0x1 [0124.796] WriteFile (in: hFile=0x444, lpBuffer=0x229f980*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x229f980*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0124.796] CloseHandle (hObject=0x444) returned 1 [0124.796] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\imageformats\\qsvg.dll", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\imageformats\\qsvg.dll", lpFilePart=0x0) returned 0x5b [0124.796] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\imageformats\\qsvg.dll.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\imageformats\\qsvg.dll.xuy", lpFilePart=0x0) returned 0x5f [0124.796] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0124.796] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\imageformats\\qsvg.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\imageformats\\qsvg.dll"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34536fe1, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x34536fe1, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x363a4d07, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x8ed0)) returned 1 [0124.796] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0124.796] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\imageformats\\qsvg.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\imageformats\\qsvg.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\imageformats\\qsvg.dll.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\imageformats\\qsvg.dll.xuy")) returned 1 [0124.798] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0124.798] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images", lpFilePart=0x0) returned 0x4c [0124.798] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\", lpFilePart=0x0) returned 0x4d [0124.798] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d78b0 [0124.799] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0124.800] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0124.800] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0124.800] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0124.800] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0124.800] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0124.800] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0124.800] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0124.800] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0124.800] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0124.801] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0124.801] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0124.801] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0124.801] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0124.801] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0124.801] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0124.801] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0124.801] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0124.801] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0124.801] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0124.802] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0124.802] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0124.802] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0124.802] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0124.802] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0124.802] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0124.802] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0124.802] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0124.802] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0124.803] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0124.803] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0124.803] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0124.803] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0124.803] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0124.803] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0124.803] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images", lpFilePart=0x0) returned 0x4c [0124.804] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\", lpFilePart=0x0) returned 0x4d [0124.804] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7550 [0124.804] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0124.805] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0124.805] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0124.805] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0124.805] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0124.805] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0124.805] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0124.805] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0124.805] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0124.806] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0124.806] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0124.806] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0124.806] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0124.806] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0124.806] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0124.806] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0124.807] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0124.807] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0124.807] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0124.807] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0124.807] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0124.807] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0124.808] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0124.808] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0124.808] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0124.808] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0124.808] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0124.808] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0124.808] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0124.809] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0124.809] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0124.809] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0124.810] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0124.810] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0124.810] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\acmDismissIcon.svg", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\acmDismissIcon.svg", lpFilePart=0x0) returned 0x5f [0124.810] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0124.810] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\acmDismissIcon.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\acmdismissicon.svg"), fInfoLevelId=0x0, lpFileInformation=0x2328c40 | out: lpFileInformation=0x2328c40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x351e17ab, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x351e17ab, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3546a01d, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x8f1)) returned 1 [0124.811] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0124.811] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\acmDismissIcon.svg", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\acmDismissIcon.svg", lpFilePart=0x0) returned 0x5f [0124.811] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0124.811] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\acmDismissIcon.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\acmdismissicon.svg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0124.811] GetFileType (hFile=0x444) returned 0x1 [0124.811] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0124.811] GetFileType (hFile=0x444) returned 0x1 [0124.811] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x8f1 [0124.811] ReadFile (in: hFile=0x444, lpBuffer=0x2329850, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x2329850*, lpNumberOfBytesRead=0x3be6a8*=0x8f1, lpOverlapped=0x0) returned 1 [0124.812] CloseHandle (hObject=0x444) returned 1 [0124.854] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\acmDismissIcon.svg", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\acmDismissIcon.svg", lpFilePart=0x0) returned 0x5f [0124.854] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0124.854] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\acmDismissIcon.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\acmdismissicon.svg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0124.855] GetFileType (hFile=0x444) returned 0x1 [0124.855] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0124.856] GetFileType (hFile=0x444) returned 0x1 [0124.856] WriteFile (in: hFile=0x444, lpBuffer=0x21a2588*, nNumberOfBytesToWrite=0x900, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x21a2588*, lpNumberOfBytesWritten=0x3be5b8*=0x900, lpOverlapped=0x0) returned 1 [0124.856] CloseHandle (hObject=0x444) returned 1 [0124.857] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\acmDismissIcon.svg", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\acmDismissIcon.svg", lpFilePart=0x0) returned 0x5f [0124.857] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\acmDismissIcon.svg.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\acmDismissIcon.svg.xuy", lpFilePart=0x0) returned 0x63 [0124.857] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0124.857] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\acmDismissIcon.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\acmdismissicon.svg"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x351e17ab, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x351e17ab, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3643d884, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x900)) returned 1 [0124.857] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0124.857] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\acmDismissIcon.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\acmdismissicon.svg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\acmDismissIcon.svg.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\acmdismissicon.svg.xuy")) returned 1 [0124.858] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\blurrect.png", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\blurrect.png", lpFilePart=0x0) returned 0x59 [0124.858] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0124.858] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\blurrect.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\blurrect.png"), fInfoLevelId=0x0, lpFileInformation=0x21a3880 | out: lpFileInformation=0x21a3880*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3607bdf1, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x3607bdf1, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3607bdf1, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x321)) returned 1 [0124.858] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0124.858] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\blurrect.png", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\blurrect.png", lpFilePart=0x0) returned 0x59 [0124.858] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0124.858] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\blurrect.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\blurrect.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0124.859] GetFileType (hFile=0x444) returned 0x1 [0124.859] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0124.859] GetFileType (hFile=0x444) returned 0x1 [0124.859] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x321 [0124.859] ReadFile (in: hFile=0x444, lpBuffer=0x21a3ea0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x21a3ea0*, lpNumberOfBytesRead=0x3be6a8*=0x321, lpOverlapped=0x0) returned 1 [0124.890] CloseHandle (hObject=0x444) returned 1 [0124.901] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\blurrect.png", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\blurrect.png", lpFilePart=0x0) returned 0x59 [0124.901] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0124.901] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\blurrect.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\blurrect.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0124.902] GetFileType (hFile=0x444) returned 0x1 [0124.902] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0124.902] GetFileType (hFile=0x444) returned 0x1 [0124.902] WriteFile (in: hFile=0x444, lpBuffer=0x221be98*, nNumberOfBytesToWrite=0x330, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x221be98*, lpNumberOfBytesWritten=0x3be5b8*=0x330, lpOverlapped=0x0) returned 1 [0124.903] CloseHandle (hObject=0x444) returned 1 [0124.903] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\blurrect.png", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\blurrect.png", lpFilePart=0x0) returned 0x59 [0124.903] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\blurrect.png.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\blurrect.png.xuy", lpFilePart=0x0) returned 0x5d [0124.903] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0124.903] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\blurrect.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\blurrect.png"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3607bdf1, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x3607bdf1, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x364b0182, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x330)) returned 1 [0124.903] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0124.903] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\blurrect.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\blurrect.png"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\blurrect.png.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\blurrect.png.xuy")) returned 1 [0124.904] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_finished.svg", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_finished.svg", lpFilePart=0x0) returned 0x63 [0124.904] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0124.904] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_finished.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_finished.svg"), fInfoLevelId=0x0, lpFileInformation=0x221d178 | out: lpFileInformation=0x221d178*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x368d4234, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x368d4234, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x368d4234, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0xd3)) returned 1 [0124.905] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0124.905] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_finished.svg", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_finished.svg", lpFilePart=0x0) returned 0x63 [0124.905] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0124.905] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_finished.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_finished.svg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0124.905] GetFileType (hFile=0x444) returned 0x1 [0124.905] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0124.905] GetFileType (hFile=0x444) returned 0x1 [0124.905] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0xd3 [0124.905] ReadFile (in: hFile=0x444, lpBuffer=0x221d588, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x221d588*, lpNumberOfBytesRead=0x3be6a8*=0xd3, lpOverlapped=0x0) returned 1 [0124.906] CloseHandle (hObject=0x444) returned 1 [0124.917] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_finished.svg", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_finished.svg", lpFilePart=0x0) returned 0x63 [0124.917] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0124.918] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_finished.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_finished.svg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0124.919] GetFileType (hFile=0x444) returned 0x1 [0124.919] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0124.919] GetFileType (hFile=0x444) returned 0x1 [0124.919] WriteFile (in: hFile=0x444, lpBuffer=0x2294888*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x2294888*, lpNumberOfBytesWritten=0x3be5b8*=0xe0, lpOverlapped=0x0) returned 1 [0124.920] CloseHandle (hObject=0x444) returned 1 [0124.920] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_finished.svg", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_finished.svg", lpFilePart=0x0) returned 0x63 [0124.920] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_finished.svg.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_finished.svg.xuy", lpFilePart=0x0) returned 0x67 [0124.920] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0124.920] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_finished.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_finished.svg"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x368d4234, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x368d4234, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x364d5fdf, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1 [0124.920] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0124.920] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_finished.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_finished.svg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_finished.svg.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_finished.svg.xuy")) returned 1 [0124.921] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_hovered.svg", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_hovered.svg", lpFilePart=0x0) returned 0x62 [0124.921] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0124.921] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_hovered.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_hovered.svg"), fInfoLevelId=0x0, lpFileInformation=0x2295b98 | out: lpFileInformation=0x2295b98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36f88b5b, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x36f88b5b, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x36ffb263, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x186)) returned 1 [0124.921] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0124.921] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_hovered.svg", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_hovered.svg", lpFilePart=0x0) returned 0x62 [0124.921] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0124.922] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_hovered.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_hovered.svg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0124.922] GetFileType (hFile=0x444) returned 0x1 [0124.947] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0124.947] GetFileType (hFile=0x444) returned 0x1 [0124.947] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x186 [0124.948] ReadFile (in: hFile=0x444, lpBuffer=0x2296058, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x2296058*, lpNumberOfBytesRead=0x3be6a8*=0x186, lpOverlapped=0x0) returned 1 [0124.948] CloseHandle (hObject=0x444) returned 1 [0124.959] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_hovered.svg", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_hovered.svg", lpFilePart=0x0) returned 0x62 [0124.959] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0124.959] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_hovered.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_hovered.svg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0124.960] GetFileType (hFile=0x444) returned 0x1 [0124.960] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0124.960] GetFileType (hFile=0x444) returned 0x1 [0124.961] WriteFile (in: hFile=0x444, lpBuffer=0x230d850*, nNumberOfBytesToWrite=0x190, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x230d850*, lpNumberOfBytesWritten=0x3be5b8*=0x190, lpOverlapped=0x0) returned 1 [0124.961] CloseHandle (hObject=0x444) returned 1 [0124.961] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_hovered.svg", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_hovered.svg", lpFilePart=0x0) returned 0x62 [0124.961] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_hovered.svg.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_hovered.svg.xuy", lpFilePart=0x0) returned 0x66 [0124.961] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0124.962] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_hovered.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_hovered.svg"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36f88b5b, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x36f88b5b, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x36548818, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x190)) returned 1 [0124.962] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0124.962] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_hovered.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_hovered.svg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_hovered.svg.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_hovered.svg.xuy")) returned 1 [0124.963] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x66 [0124.963] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0124.963] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x230eb60 | out: lpFileInformation=0x230eb60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376d5e82, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x376d5e82, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x376d5e82, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0124.963] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0124.963] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x66 [0124.963] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0124.963] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0124.963] GetFileType (hFile=0x444) returned 0x1 [0124.963] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0124.963] GetFileType (hFile=0x444) returned 0x1 [0124.964] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x187 [0124.964] ReadFile (in: hFile=0x444, lpBuffer=0x230f040, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x230f040*, lpNumberOfBytesRead=0x3be6a8*=0x187, lpOverlapped=0x0) returned 1 [0124.965] CloseHandle (hObject=0x444) returned 1 [0125.006] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x66 [0125.006] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0125.006] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0125.008] GetFileType (hFile=0x444) returned 0x1 [0125.008] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0125.008] GetFileType (hFile=0x444) returned 0x1 [0125.008] WriteFile (in: hFile=0x444, lpBuffer=0x21860b8*, nNumberOfBytesToWrite=0x190, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x21860b8*, lpNumberOfBytesWritten=0x3be5b8*=0x190, lpOverlapped=0x0) returned 1 [0125.009] CloseHandle (hObject=0x444) returned 1 [0125.009] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x66 [0125.009] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg.xuy", lpFilePart=0x0) returned 0x6a [0125.009] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0125.009] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376d5e82, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x376d5e82, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x365baffa, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x190)) returned 1 [0125.009] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0125.009] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg.xuy")) returned 1 [0125.010] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_selected.svg", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_selected.svg", lpFilePart=0x0) returned 0x63 [0125.010] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0125.010] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_selected.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_selected.svg"), fInfoLevelId=0x0, lpFileInformation=0x21873e0 | out: lpFileInformation=0x21873e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37d3e388, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x37d3e388, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x37d3e388, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x184)) returned 1 [0125.010] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0125.010] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_selected.svg", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_selected.svg", lpFilePart=0x0) returned 0x63 [0125.010] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0125.010] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_selected.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_selected.svg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0125.010] GetFileType (hFile=0x444) returned 0x1 [0125.010] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0125.010] GetFileType (hFile=0x444) returned 0x1 [0125.010] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x184 [0125.011] ReadFile (in: hFile=0x444, lpBuffer=0x21878a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x21878a0*, lpNumberOfBytesRead=0x3be6a8*=0x184, lpOverlapped=0x0) returned 1 [0125.012] CloseHandle (hObject=0x444) returned 1 [0125.022] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_selected.svg", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_selected.svg", lpFilePart=0x0) returned 0x63 [0125.022] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0125.022] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_selected.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_selected.svg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0125.023] GetFileType (hFile=0x444) returned 0x1 [0125.023] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0125.024] GetFileType (hFile=0x444) returned 0x1 [0125.024] WriteFile (in: hFile=0x444, lpBuffer=0x21ff098*, nNumberOfBytesToWrite=0x190, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x21ff098*, lpNumberOfBytesWritten=0x3be5b8*=0x190, lpOverlapped=0x0) returned 1 [0125.025] CloseHandle (hObject=0x444) returned 1 [0125.025] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_selected.svg", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_selected.svg", lpFilePart=0x0) returned 0x63 [0125.025] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_selected.svg.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_selected.svg.xuy", lpFilePart=0x0) returned 0x67 [0125.025] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0125.025] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_selected.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_selected.svg"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37d3e388, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x37d3e388, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x365e1082, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x190)) returned 1 [0125.025] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0125.025] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_selected.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_selected.svg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_selected.svg.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_selected.svg.xuy")) returned 1 [0125.026] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\chevron.svg", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\chevron.svg", lpFilePart=0x0) returned 0x58 [0125.026] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0125.026] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\chevron.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\chevron.svg"), fInfoLevelId=0x0, lpFileInformation=0x22003a8 | out: lpFileInformation=0x22003a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3843f20a, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x3843f20a, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3843f20a, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x127)) returned 1 [0125.026] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0125.026] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\chevron.svg", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\chevron.svg", lpFilePart=0x0) returned 0x58 [0125.026] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0125.026] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\chevron.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\chevron.svg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0125.027] GetFileType (hFile=0x444) returned 0x1 [0125.027] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0125.027] GetFileType (hFile=0x444) returned 0x1 [0125.027] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x127 [0125.027] ReadFile (in: hFile=0x444, lpBuffer=0x22007b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x22007b8*, lpNumberOfBytesRead=0x3be6a8*=0x127, lpOverlapped=0x0) returned 1 [0125.028] CloseHandle (hObject=0x444) returned 1 [0125.039] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\chevron.svg", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\chevron.svg", lpFilePart=0x0) returned 0x58 [0125.039] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0125.039] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\chevron.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\chevron.svg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0125.040] GetFileType (hFile=0x444) returned 0x1 [0125.040] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0125.040] GetFileType (hFile=0x444) returned 0x1 [0125.040] WriteFile (in: hFile=0x444, lpBuffer=0x2277da8*, nNumberOfBytesToWrite=0x130, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x2277da8*, lpNumberOfBytesWritten=0x3be5b8*=0x130, lpOverlapped=0x0) returned 1 [0125.041] CloseHandle (hObject=0x444) returned 1 [0125.041] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\chevron.svg", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\chevron.svg", lpFilePart=0x0) returned 0x58 [0125.041] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\chevron.svg.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\chevron.svg.xuy", lpFilePart=0x0) returned 0x5c [0125.042] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0125.042] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\chevron.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\chevron.svg"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3843f20a, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x3843f20a, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x366075c2, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x130)) returned 1 [0125.042] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0125.042] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\chevron.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\chevron.svg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\chevron.svg.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\chevron.svg.xuy")) returned 1 [0125.043] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\chevronUp.svg", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\chevronUp.svg", lpFilePart=0x0) returned 0x5a [0125.043] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0125.043] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\chevronUp.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\chevronup.svg"), fInfoLevelId=0x0, lpFileInformation=0x2279088 | out: lpFileInformation=0x2279088*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38b4008e, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x38b4008e, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x38b4008e, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x108)) returned 1 [0125.043] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0125.043] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\chevronUp.svg", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\chevronUp.svg", lpFilePart=0x0) returned 0x5a [0125.043] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0125.044] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\chevronUp.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\chevronup.svg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0125.044] GetFileType (hFile=0x444) returned 0x1 [0125.044] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0125.044] GetFileType (hFile=0x444) returned 0x1 [0125.044] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x108 [0125.044] ReadFile (in: hFile=0x444, lpBuffer=0x2279488, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x2279488*, lpNumberOfBytesRead=0x3be6a8*=0x108, lpOverlapped=0x0) returned 1 [0125.045] CloseHandle (hObject=0x444) returned 1 [0125.055] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\chevronUp.svg", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\chevronUp.svg", lpFilePart=0x0) returned 0x5a [0125.055] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0125.055] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\chevronUp.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\chevronup.svg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0125.057] GetFileType (hFile=0x444) returned 0x1 [0125.057] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0125.057] GetFileType (hFile=0x444) returned 0x1 [0125.057] WriteFile (in: hFile=0x444, lpBuffer=0x22f09d8*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x22f09d8*, lpNumberOfBytesWritten=0x3be5b8*=0x110, lpOverlapped=0x0) returned 1 [0125.058] CloseHandle (hObject=0x444) returned 1 [0125.058] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\chevronUp.svg", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\chevronUp.svg", lpFilePart=0x0) returned 0x5a [0125.058] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\chevronUp.svg.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\chevronUp.svg.xuy", lpFilePart=0x0) returned 0x5e [0125.058] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0125.058] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\chevronUp.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\chevronup.svg"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38b4008e, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x38b4008e, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3662d514, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x110)) returned 1 [0125.058] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0125.058] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\chevronUp.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\chevronup.svg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\chevronUp.svg.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\chevronup.svg.xuy")) returned 1 [0125.059] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\cloud.svg", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\cloud.svg", lpFilePart=0x0) returned 0x56 [0125.059] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0125.059] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\cloud.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\cloud.svg"), fInfoLevelId=0x0, lpFileInformation=0x22f1cb8 | out: lpFileInformation=0x22f1cb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39240ef4, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x39240ef4, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x39240ef4, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x6c7)) returned 1 [0125.059] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0125.059] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\cloud.svg", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\cloud.svg", lpFilePart=0x0) returned 0x56 [0125.059] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0125.059] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\cloud.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\cloud.svg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0125.059] GetFileType (hFile=0x444) returned 0x1 [0125.059] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0125.059] GetFileType (hFile=0x444) returned 0x1 [0125.059] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x6c7 [0125.060] ReadFile (in: hFile=0x444, lpBuffer=0x22f2658, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x22f2658*, lpNumberOfBytesRead=0x3be6a8*=0x6c7, lpOverlapped=0x0) returned 1 [0125.071] CloseHandle (hObject=0x444) returned 1 [0125.113] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\cloud.svg", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\cloud.svg", lpFilePart=0x0) returned 0x56 [0125.113] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0125.113] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\cloud.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\cloud.svg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0125.114] GetFileType (hFile=0x444) returned 0x1 [0125.114] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0125.114] GetFileType (hFile=0x444) returned 0x1 [0125.114] WriteFile (in: hFile=0x444, lpBuffer=0x216bd90*, nNumberOfBytesToWrite=0x6d0, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x216bd90*, lpNumberOfBytesWritten=0x3be5b8*=0x6d0, lpOverlapped=0x0) returned 1 [0125.115] CloseHandle (hObject=0x444) returned 1 [0125.115] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\cloud.svg", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\cloud.svg", lpFilePart=0x0) returned 0x56 [0125.115] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\cloud.svg.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\cloud.svg.xuy", lpFilePart=0x0) returned 0x5a [0125.115] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0125.115] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\cloud.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\cloud.svg"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39240ef4, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x39240ef4, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x366c5e8c, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x6d0)) returned 1 [0125.116] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0125.116] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\cloud.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\cloud.svg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\cloud.svg.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\cloud.svg.xuy")) returned 1 [0125.117] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\done_graphic.svg", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\done_graphic.svg", lpFilePart=0x0) returned 0x5d [0125.117] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0125.117] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\done_graphic.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\done_graphic.svg"), fInfoLevelId=0x0, lpFileInformation=0x216d058 | out: lpFileInformation=0x216d058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x398a93f4, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x398a93f4, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x398a93f4, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x7e75)) returned 1 [0125.117] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0125.117] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\done_graphic.svg", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\done_graphic.svg", lpFilePart=0x0) returned 0x5d [0125.117] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0125.117] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\done_graphic.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\done_graphic.svg"), fInfoLevelId=0x0, lpFileInformation=0x216d1d8 | out: lpFileInformation=0x216d1d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x398a93f4, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x398a93f4, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x398a93f4, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x7e75)) returned 1 [0125.117] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0125.117] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\done_graphic.svg", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\done_graphic.svg", lpFilePart=0x0) returned 0x5d [0125.117] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0125.117] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\done_graphic.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\done_graphic.svg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0125.118] GetFileType (hFile=0x444) returned 0x1 [0125.118] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0125.118] GetFileType (hFile=0x444) returned 0x1 [0125.118] ReadFile (in: hFile=0x444, lpBuffer=0x216f608, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x216f608*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0125.139] CloseHandle (hObject=0x444) returned 1 [0125.139] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\done_graphic.svg", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\done_graphic.svg", lpFilePart=0x0) returned 0x5d [0125.139] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0125.139] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\done_graphic.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\done_graphic.svg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0125.140] GetFileType (hFile=0x444) returned 0x1 [0125.140] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0125.140] GetFileType (hFile=0x444) returned 0x1 [0125.140] WriteFile (in: hFile=0x444, lpBuffer=0x216d338*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x216d338*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0125.140] CloseHandle (hObject=0x444) returned 1 [0125.140] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\done_graphic.svg", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\done_graphic.svg", lpFilePart=0x0) returned 0x5d [0125.140] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\done_graphic.svg.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\done_graphic.svg.xuy", lpFilePart=0x0) returned 0x61 [0125.140] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0125.140] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\done_graphic.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\done_graphic.svg"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x398a93f4, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x398a93f4, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x366ec093, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x7e75)) returned 1 [0125.140] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0125.140] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\done_graphic.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\done_graphic.svg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\done_graphic.svg.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\done_graphic.svg.xuy")) returned 1 [0125.142] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\errorIcon.svg", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\errorIcon.svg", lpFilePart=0x0) returned 0x5a [0125.142] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0125.142] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\errorIcon.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\erroricon.svg"), fInfoLevelId=0x0, lpFileInformation=0x21eba68 | out: lpFileInformation=0x21eba68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39eeb6b0, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x39eeb6b0, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x39eeb6b0, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x31d)) returned 1 [0125.142] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0125.142] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\errorIcon.svg", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\errorIcon.svg", lpFilePart=0x0) returned 0x5a [0125.142] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0125.142] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\errorIcon.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\erroricon.svg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0125.142] GetFileType (hFile=0x444) returned 0x1 [0125.142] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0125.142] GetFileType (hFile=0x444) returned 0x1 [0125.142] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x31d [0125.142] ReadFile (in: hFile=0x444, lpBuffer=0x21ec080, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x21ec080*, lpNumberOfBytesRead=0x3be6a8*=0x31d, lpOverlapped=0x0) returned 1 [0125.157] CloseHandle (hObject=0x444) returned 1 [0125.168] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\errorIcon.svg", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\errorIcon.svg", lpFilePart=0x0) returned 0x5a [0125.168] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0125.168] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\errorIcon.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\erroricon.svg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0125.169] GetFileType (hFile=0x444) returned 0x1 [0125.169] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0125.169] GetFileType (hFile=0x444) returned 0x1 [0125.169] WriteFile (in: hFile=0x444, lpBuffer=0x2264020*, nNumberOfBytesToWrite=0x320, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x2264020*, lpNumberOfBytesWritten=0x3be5b8*=0x320, lpOverlapped=0x0) returned 1 [0125.170] CloseHandle (hObject=0x444) returned 1 [0125.170] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\errorIcon.svg", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\errorIcon.svg", lpFilePart=0x0) returned 0x5a [0125.170] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\errorIcon.svg.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\errorIcon.svg.xuy", lpFilePart=0x0) returned 0x5e [0125.170] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0125.170] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\errorIcon.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\erroricon.svg"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39eeb6b0, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x39eeb6b0, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3673970c, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x320)) returned 1 [0125.170] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0125.170] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\errorIcon.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\erroricon.svg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\errorIcon.svg.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\erroricon.svg.xuy")) returned 1 [0125.172] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\folder.svg", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\folder.svg", lpFilePart=0x0) returned 0x57 [0125.172] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0125.172] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\folder.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\folder.svg"), fInfoLevelId=0x0, lpFileInformation=0x2265300 | out: lpFileInformation=0x2265300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a579e12, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x3a579e12, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3a579e12, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x123)) returned 1 [0125.173] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0125.173] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\folder.svg", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\folder.svg", lpFilePart=0x0) returned 0x57 [0125.173] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0125.173] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\folder.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\folder.svg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0125.173] GetFileType (hFile=0x444) returned 0x1 [0125.173] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0125.173] GetFileType (hFile=0x444) returned 0x1 [0125.173] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x123 [0125.173] ReadFile (in: hFile=0x444, lpBuffer=0x2265700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x2265700*, lpNumberOfBytesRead=0x3be6a8*=0x123, lpOverlapped=0x0) returned 1 [0125.174] CloseHandle (hObject=0x444) returned 1 [0125.184] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\folder.svg", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\folder.svg", lpFilePart=0x0) returned 0x57 [0125.184] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0125.184] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\folder.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\folder.svg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0125.186] GetFileType (hFile=0x444) returned 0x1 [0125.186] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0125.186] GetFileType (hFile=0x444) returned 0x1 [0125.186] WriteFile (in: hFile=0x444, lpBuffer=0x22dcce8*, nNumberOfBytesToWrite=0x130, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x22dcce8*, lpNumberOfBytesWritten=0x3be5b8*=0x130, lpOverlapped=0x0) returned 1 [0125.187] CloseHandle (hObject=0x444) returned 1 [0125.187] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\folder.svg", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\folder.svg", lpFilePart=0x0) returned 0x57 [0125.187] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\folder.svg.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\folder.svg.xuy", lpFilePart=0x0) returned 0x5b [0125.187] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0125.187] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\folder.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\folder.svg"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a579e12, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x3a579e12, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3675e916, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x130)) returned 1 [0125.187] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0125.187] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\folder.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\folder.svg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\folder.svg.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\folder.svg.xuy")) returned 1 [0125.199] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\folder_image_desktop.svg", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\folder_image_desktop.svg", lpFilePart=0x0) returned 0x65 [0125.199] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0125.199] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\folder_image_desktop.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\folder_image_desktop.svg"), fInfoLevelId=0x0, lpFileInformation=0x22ddfb0 | out: lpFileInformation=0x22ddfb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3abbc0cf, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x3abbc0cf, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3abbc0cf, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x79b)) returned 1 [0125.199] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0125.199] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\folder_image_desktop.svg", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\folder_image_desktop.svg", lpFilePart=0x0) returned 0x65 [0125.199] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0125.200] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\folder_image_desktop.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\folder_image_desktop.svg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0125.200] GetFileType (hFile=0x444) returned 0x1 [0125.200] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0125.200] GetFileType (hFile=0x444) returned 0x1 [0125.200] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x79b [0125.200] ReadFile (in: hFile=0x444, lpBuffer=0x22deaa8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x22deaa8*, lpNumberOfBytesRead=0x3be6a8*=0x79b, lpOverlapped=0x0) returned 1 [0125.214] CloseHandle (hObject=0x444) returned 1 [0125.224] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\folder_image_desktop.svg", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\folder_image_desktop.svg", lpFilePart=0x0) returned 0x65 [0125.224] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0125.225] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\folder_image_desktop.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\folder_image_desktop.svg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0125.226] GetFileType (hFile=0x444) returned 0x1 [0125.226] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0125.226] GetFileType (hFile=0x444) returned 0x1 [0125.226] WriteFile (in: hFile=0x444, lpBuffer=0x23580f8*, nNumberOfBytesToWrite=0x7a0, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x23580f8*, lpNumberOfBytesWritten=0x3be5b8*=0x7a0, lpOverlapped=0x0) returned 1 [0125.227] CloseHandle (hObject=0x444) returned 1 [0125.227] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\folder_image_desktop.svg", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\folder_image_desktop.svg", lpFilePart=0x0) returned 0x65 [0125.227] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\folder_image_desktop.svg.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\folder_image_desktop.svg.xuy", lpFilePart=0x0) returned 0x69 [0125.227] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0125.227] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\folder_image_desktop.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\folder_image_desktop.svg"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3abbc0cf, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x3abbc0cf, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x367d0f35, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x7a0)) returned 1 [0125.227] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0125.227] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\folder_image_desktop.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\folder_image_desktop.svg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\folder_image_desktop.svg.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\folder_image_desktop.svg.xuy")) returned 1 [0125.228] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\folder_image_documents.svg", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\folder_image_documents.svg", lpFilePart=0x0) returned 0x67 [0125.228] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0125.228] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\folder_image_documents.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\folder_image_documents.svg"), fInfoLevelId=0x0, lpFileInformation=0x2359420 | out: lpFileInformation=0x2359420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b24a830, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x3b24a830, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3b24a830, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x5031)) returned 1 [0125.228] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0125.229] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\folder_image_documents.svg", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\folder_image_documents.svg", lpFilePart=0x0) returned 0x67 [0125.229] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0125.229] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\folder_image_documents.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\folder_image_documents.svg"), fInfoLevelId=0x0, lpFileInformation=0x23595c0 | out: lpFileInformation=0x23595c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b24a830, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x3b24a830, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3b24a830, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x5031)) returned 1 [0125.229] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0125.229] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\folder_image_documents.svg", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\folder_image_documents.svg", lpFilePart=0x0) returned 0x67 [0125.229] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0125.229] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\folder_image_documents.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\folder_image_documents.svg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0125.229] GetFileType (hFile=0x444) returned 0x1 [0125.229] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0125.229] GetFileType (hFile=0x444) returned 0x1 [0125.230] ReadFile (in: hFile=0x444, lpBuffer=0x235ba30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x235ba30*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0125.283] CloseHandle (hObject=0x444) returned 1 [0125.283] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\folder_image_documents.svg", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\folder_image_documents.svg", lpFilePart=0x0) returned 0x67 [0125.283] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0125.284] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\folder_image_documents.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\folder_image_documents.svg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0125.284] GetFileType (hFile=0x444) returned 0x1 [0125.284] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0125.284] GetFileType (hFile=0x444) returned 0x1 [0125.284] WriteFile (in: hFile=0x444, lpBuffer=0x2163b00*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x2163b00*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0125.284] CloseHandle (hObject=0x444) returned 1 [0125.284] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\folder_image_documents.svg", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\folder_image_documents.svg", lpFilePart=0x0) returned 0x67 [0125.284] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\folder_image_documents.svg.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\folder_image_documents.svg.xuy", lpFilePart=0x0) returned 0x6b [0125.284] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0125.284] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\folder_image_documents.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\folder_image_documents.svg"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b24a830, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x3b24a830, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3686b25d, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x5031)) returned 1 [0125.285] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0125.285] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\folder_image_documents.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\folder_image_documents.svg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\folder_image_documents.svg.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\folder_image_documents.svg.xuy")) returned 1 [0125.286] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\folder_image_pictures.svg", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\folder_image_pictures.svg", lpFilePart=0x0) returned 0x66 [0125.286] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0125.286] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\folder_image_pictures.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\folder_image_pictures.svg"), fInfoLevelId=0x0, lpFileInformation=0x21da9d0 | out: lpFileInformation=0x21da9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b8ff1f8, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x3b8ff1f8, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3b925479, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x3100)) returned 1 [0125.286] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0125.286] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\folder_image_pictures.svg", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\folder_image_pictures.svg", lpFilePart=0x0) returned 0x66 [0125.286] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0125.286] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\folder_image_pictures.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\folder_image_pictures.svg"), fInfoLevelId=0x0, lpFileInformation=0x21dab70 | out: lpFileInformation=0x21dab70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b8ff1f8, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x3b8ff1f8, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3b925479, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x3100)) returned 1 [0125.286] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0125.286] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\folder_image_pictures.svg", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\folder_image_pictures.svg", lpFilePart=0x0) returned 0x66 [0125.287] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0125.287] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\folder_image_pictures.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\folder_image_pictures.svg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0125.287] GetFileType (hFile=0x444) returned 0x1 [0125.287] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0125.288] GetFileType (hFile=0x444) returned 0x1 [0125.288] ReadFile (in: hFile=0x444, lpBuffer=0x21dcfe0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x21dcfe0*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0125.306] CloseHandle (hObject=0x444) returned 1 [0125.306] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\folder_image_pictures.svg", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\folder_image_pictures.svg", lpFilePart=0x0) returned 0x66 [0125.306] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0125.306] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\folder_image_pictures.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\folder_image_pictures.svg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0125.306] GetFileType (hFile=0x444) returned 0x1 [0125.306] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0125.306] GetFileType (hFile=0x444) returned 0x1 [0125.306] WriteFile (in: hFile=0x444, lpBuffer=0x21dacf0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x21dacf0*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0125.307] CloseHandle (hObject=0x444) returned 1 [0125.307] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\folder_image_pictures.svg", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\folder_image_pictures.svg", lpFilePart=0x0) returned 0x66 [0125.307] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\folder_image_pictures.svg.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\folder_image_pictures.svg.xuy", lpFilePart=0x0) returned 0x6a [0125.307] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0125.307] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\folder_image_pictures.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\folder_image_pictures.svg"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b8ff1f8, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x3b8ff1f8, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3688fb27, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x3100)) returned 1 [0125.307] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0125.307] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\folder_image_pictures.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\folder_image_pictures.svg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\folder_image_pictures.svg.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\folder_image_pictures.svg.xuy")) returned 1 [0125.308] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\iceBucket.svg", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\iceBucket.svg", lpFilePart=0x0) returned 0x5a [0125.308] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0125.308] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\iceBucket.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\icebucket.svg"), fInfoLevelId=0x0, lpFileInformation=0x2259490 | out: lpFileInformation=0x2259490*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bfd9e02, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x3bfd9e02, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3bfd9e02, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x172e)) returned 1 [0125.308] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0125.308] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\iceBucket.svg", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\iceBucket.svg", lpFilePart=0x0) returned 0x5a [0125.308] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0125.308] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\iceBucket.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\icebucket.svg"), fInfoLevelId=0x0, lpFileInformation=0x2259600 | out: lpFileInformation=0x2259600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bfd9e02, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x3bfd9e02, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3bfd9e02, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x172e)) returned 1 [0125.308] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0125.308] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\iceBucket.svg", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\iceBucket.svg", lpFilePart=0x0) returned 0x5a [0125.308] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0125.309] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\iceBucket.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\icebucket.svg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0125.309] GetFileType (hFile=0x444) returned 0x1 [0125.309] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0125.309] GetFileType (hFile=0x444) returned 0x1 [0125.309] ReadFile (in: hFile=0x444, lpBuffer=0x225ba10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x225ba10*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0125.340] CloseHandle (hObject=0x444) returned 1 [0125.340] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\iceBucket.svg", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\iceBucket.svg", lpFilePart=0x0) returned 0x5a [0125.340] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0125.340] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\iceBucket.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\icebucket.svg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0125.341] GetFileType (hFile=0x444) returned 0x1 [0125.341] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0125.341] GetFileType (hFile=0x444) returned 0x1 [0125.341] WriteFile (in: hFile=0x444, lpBuffer=0x2259750*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x2259750*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0125.341] CloseHandle (hObject=0x444) returned 1 [0125.341] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\iceBucket.svg", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\iceBucket.svg", lpFilePart=0x0) returned 0x5a [0125.341] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\iceBucket.svg.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\iceBucket.svg.xuy", lpFilePart=0x0) returned 0x5e [0125.341] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0125.342] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\iceBucket.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\icebucket.svg"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bfd9e02, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x3bfd9e02, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x368dbe11, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0125.342] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0125.342] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\iceBucket.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\icebucket.svg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\iceBucket.svg.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\icebucket.svg.xuy")) returned 1 [0125.343] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\loading.svg", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\loading.svg", lpFilePart=0x0) returned 0x58 [0125.343] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0125.343] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\loading.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\loading.svg"), fInfoLevelId=0x0, lpFileInformation=0x22d7e48 | out: lpFileInformation=0x22d7e48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c68e7db, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x3c68e7db, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3c68e7db, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x2ce)) returned 1 [0125.343] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0125.343] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\loading.svg", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\loading.svg", lpFilePart=0x0) returned 0x58 [0125.343] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0125.343] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\loading.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\loading.svg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0125.344] GetFileType (hFile=0x444) returned 0x1 [0125.344] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0125.344] GetFileType (hFile=0x444) returned 0x1 [0125.344] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x2ce [0125.344] ReadFile (in: hFile=0x444, lpBuffer=0x22d8400, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x22d8400*, lpNumberOfBytesRead=0x3be6a8*=0x2ce, lpOverlapped=0x0) returned 1 [0125.345] CloseHandle (hObject=0x444) returned 1 [0125.358] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\loading.svg", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\loading.svg", lpFilePart=0x0) returned 0x58 [0125.359] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0125.359] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\loading.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\loading.svg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0125.360] GetFileType (hFile=0x444) returned 0x1 [0125.360] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0125.360] GetFileType (hFile=0x444) returned 0x1 [0125.360] WriteFile (in: hFile=0x444, lpBuffer=0x2350208*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x2350208*, lpNumberOfBytesWritten=0x3be5b8*=0x2d0, lpOverlapped=0x0) returned 1 [0125.361] CloseHandle (hObject=0x444) returned 1 [0125.361] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\loading.svg", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\loading.svg", lpFilePart=0x0) returned 0x58 [0125.361] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\loading.svg.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\loading.svg.xuy", lpFilePart=0x0) returned 0x5c [0125.361] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0125.361] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\loading.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\loading.svg"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c68e7db, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x3c68e7db, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x369283cf, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2d0)) returned 1 [0125.362] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0125.362] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\loading.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\loading.svg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\loading.svg.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\loading.svg.xuy")) returned 1 [0125.368] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\loading_spinner.svg", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\loading_spinner.svg", lpFilePart=0x0) returned 0x60 [0125.368] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0125.368] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\loading_spinner.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\loading_spinner.svg"), fInfoLevelId=0x0, lpFileInformation=0x23514e8 | out: lpFileInformation=0x23514e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cdb58a6, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x3cdb58a6, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3cdb58a6, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x1b0)) returned 1 [0125.368] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0125.368] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\loading_spinner.svg", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\loading_spinner.svg", lpFilePart=0x0) returned 0x60 [0125.368] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0125.368] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\loading_spinner.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\loading_spinner.svg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0125.368] GetFileType (hFile=0x444) returned 0x1 [0125.368] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0125.368] GetFileType (hFile=0x444) returned 0x1 [0125.368] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x1b0 [0125.368] ReadFile (in: hFile=0x444, lpBuffer=0x23519c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x23519c0*, lpNumberOfBytesRead=0x3be6a8*=0x1b0, lpOverlapped=0x0) returned 1 [0125.369] CloseHandle (hObject=0x444) returned 1 [0125.409] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\loading_spinner.svg", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\loading_spinner.svg", lpFilePart=0x0) returned 0x60 [0125.409] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0125.409] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\loading_spinner.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\loading_spinner.svg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0125.410] GetFileType (hFile=0x444) returned 0x1 [0125.410] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0125.410] GetFileType (hFile=0x444) returned 0x1 [0125.411] WriteFile (in: hFile=0x444, lpBuffer=0x21c6210*, nNumberOfBytesToWrite=0x1c0, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x21c6210*, lpNumberOfBytesWritten=0x3be5b8*=0x1c0, lpOverlapped=0x0) returned 1 [0125.411] CloseHandle (hObject=0x444) returned 1 [0125.411] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\loading_spinner.svg", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\loading_spinner.svg", lpFilePart=0x0) returned 0x60 [0125.411] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\loading_spinner.svg.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\loading_spinner.svg.xuy", lpFilePart=0x0) returned 0x64 [0125.411] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0125.412] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\loading_spinner.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\loading_spinner.svg"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cdb58a6, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x3cdb58a6, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3699afa7, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x1c0)) returned 1 [0125.412] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0125.412] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\loading_spinner.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\loading_spinner.svg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\loading_spinner.svg.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\loading_spinner.svg.xuy")) returned 1 [0125.413] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\onDemandFiles.svg", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\onDemandFiles.svg", lpFilePart=0x0) returned 0x5e [0125.413] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0125.413] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\onDemandFiles.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\ondemandfiles.svg"), fInfoLevelId=0x0, lpFileInformation=0x21c7520 | out: lpFileInformation=0x21c7520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d54f06c, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x3d54f06c, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3d54f06c, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x1d50)) returned 1 [0125.413] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0125.413] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\onDemandFiles.svg", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\onDemandFiles.svg", lpFilePart=0x0) returned 0x5e [0125.413] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0125.413] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\onDemandFiles.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\ondemandfiles.svg"), fInfoLevelId=0x0, lpFileInformation=0x21c76a0 | out: lpFileInformation=0x21c76a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d54f06c, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x3d54f06c, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3d54f06c, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x1d50)) returned 1 [0125.413] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0125.413] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\onDemandFiles.svg", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\onDemandFiles.svg", lpFilePart=0x0) returned 0x5e [0125.413] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0125.413] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\onDemandFiles.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\ondemandfiles.svg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0125.414] GetFileType (hFile=0x444) returned 0x1 [0125.414] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0125.414] GetFileType (hFile=0x444) returned 0x1 [0125.414] ReadFile (in: hFile=0x444, lpBuffer=0x21c9ad0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x21c9ad0*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0125.441] CloseHandle (hObject=0x444) returned 1 [0125.441] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\onDemandFiles.svg", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\onDemandFiles.svg", lpFilePart=0x0) returned 0x5e [0125.441] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0125.441] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\onDemandFiles.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\ondemandfiles.svg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0125.441] GetFileType (hFile=0x444) returned 0x1 [0125.442] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0125.442] GetFileType (hFile=0x444) returned 0x1 [0125.442] WriteFile (in: hFile=0x444, lpBuffer=0x21c7800*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x21c7800*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0125.442] CloseHandle (hObject=0x444) returned 1 [0125.442] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\onDemandFiles.svg", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\onDemandFiles.svg", lpFilePart=0x0) returned 0x5e [0125.442] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\onDemandFiles.svg.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\onDemandFiles.svg.xuy", lpFilePart=0x0) returned 0x62 [0125.442] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0125.442] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\onDemandFiles.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\ondemandfiles.svg"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d54f06c, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x3d54f06c, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x369e70e4, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0125.442] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0125.442] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\onDemandFiles.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\ondemandfiles.svg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\onDemandFiles.svg.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\ondemandfiles.svg.xuy")) returned 1 [0125.443] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\onDemandSelectiveSync.svg", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\onDemandSelectiveSync.svg", lpFilePart=0x0) returned 0x66 [0125.443] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0125.443] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\onDemandSelectiveSync.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\ondemandselectivesync.svg"), fInfoLevelId=0x0, lpFileInformation=0x2245f30 | out: lpFileInformation=0x2245f30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dbdd7ce, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x3dbdd7ce, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3dc4fedc, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0xa54)) returned 1 [0125.443] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0125.443] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\onDemandSelectiveSync.svg", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\onDemandSelectiveSync.svg", lpFilePart=0x0) returned 0x66 [0125.443] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0125.444] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\onDemandSelectiveSync.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\ondemandselectivesync.svg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0125.444] GetFileType (hFile=0x444) returned 0x1 [0125.444] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0125.444] GetFileType (hFile=0x444) returned 0x1 [0125.444] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0xa54 [0125.444] ReadFile (in: hFile=0x444, lpBuffer=0x2246ce0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x2246ce0*, lpNumberOfBytesRead=0x3be6a8*=0xa54, lpOverlapped=0x0) returned 1 [0125.457] CloseHandle (hObject=0x444) returned 1 [0125.467] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\onDemandSelectiveSync.svg", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\onDemandSelectiveSync.svg", lpFilePart=0x0) returned 0x66 [0125.467] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0125.467] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\onDemandSelectiveSync.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\ondemandselectivesync.svg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0125.468] GetFileType (hFile=0x444) returned 0x1 [0125.468] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0125.468] GetFileType (hFile=0x444) returned 0x1 [0125.469] WriteFile (in: hFile=0x444, lpBuffer=0x22c10f8*, nNumberOfBytesToWrite=0xa60, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x22c10f8*, lpNumberOfBytesWritten=0x3be5b8*=0xa60, lpOverlapped=0x0) returned 1 [0125.470] CloseHandle (hObject=0x444) returned 1 [0125.470] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\onDemandSelectiveSync.svg", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\onDemandSelectiveSync.svg", lpFilePart=0x0) returned 0x66 [0125.470] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\onDemandSelectiveSync.svg.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\onDemandSelectiveSync.svg.xuy", lpFilePart=0x0) returned 0x6a [0125.470] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0125.470] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\onDemandSelectiveSync.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\ondemandselectivesync.svg"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dbdd7ce, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x3dbdd7ce, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x36a3344c, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xa60)) returned 1 [0125.470] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0125.470] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\onDemandSelectiveSync.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\ondemandselectivesync.svg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\onDemandSelectiveSync.svg.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\ondemandselectivesync.svg.xuy")) returned 1 [0125.471] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\onedrivePremium.svg", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\onedrivePremium.svg", lpFilePart=0x0) returned 0x60 [0125.471] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0125.471] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\onedrivePremium.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\onedrivepremium.svg"), fInfoLevelId=0x0, lpFileInformation=0x22c2420 | out: lpFileInformation=0x22c2420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3c3473, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x3e3c3473, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3e3c3473, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x46c)) returned 1 [0125.471] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0125.471] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\onedrivePremium.svg", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\onedrivePremium.svg", lpFilePart=0x0) returned 0x60 [0125.471] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0125.471] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\onedrivePremium.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\onedrivepremium.svg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0125.472] GetFileType (hFile=0x444) returned 0x1 [0125.472] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0125.472] GetFileType (hFile=0x444) returned 0x1 [0125.472] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x46c [0125.472] ReadFile (in: hFile=0x444, lpBuffer=0x22c2bb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x22c2bb8*, lpNumberOfBytesRead=0x3be6a8*=0x46c, lpOverlapped=0x0) returned 1 [0125.488] CloseHandle (hObject=0x444) returned 1 [0125.499] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\onedrivePremium.svg", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\onedrivePremium.svg", lpFilePart=0x0) returned 0x60 [0125.499] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0125.499] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\onedrivePremium.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\onedrivepremium.svg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0125.501] GetFileType (hFile=0x444) returned 0x1 [0125.501] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0125.501] GetFileType (hFile=0x444) returned 0x1 [0125.501] WriteFile (in: hFile=0x444, lpBuffer=0x233b200*, nNumberOfBytesToWrite=0x470, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x233b200*, lpNumberOfBytesWritten=0x3be5b8*=0x470, lpOverlapped=0x0) returned 1 [0125.502] CloseHandle (hObject=0x444) returned 1 [0125.502] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\onedrivePremium.svg", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\onedrivePremium.svg", lpFilePart=0x0) returned 0x60 [0125.502] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\onedrivePremium.svg.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\onedrivePremium.svg.xuy", lpFilePart=0x0) returned 0x64 [0125.502] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0125.502] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\onedrivePremium.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\onedrivepremium.svg"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3c3473, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x3e3c3473, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x36a80f03, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x470)) returned 1 [0125.502] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0125.502] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\onedrivePremium.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\onedrivepremium.svg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\onedrivePremium.svg.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\onedrivepremium.svg.xuy")) returned 1 [0125.503] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\overflowIcon.svg", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\overflowIcon.svg", lpFilePart=0x0) returned 0x5d [0125.503] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0125.503] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\overflowIcon.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\overflowicon.svg"), fInfoLevelId=0x0, lpFileInformation=0x233c510 | out: lpFileInformation=0x233c510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ea9e081, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x3ea9e081, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3ea9e081, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x3db)) returned 1 [0125.503] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0125.503] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\overflowIcon.svg", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\overflowIcon.svg", lpFilePart=0x0) returned 0x5d [0125.503] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0125.503] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\overflowIcon.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\overflowicon.svg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0125.503] GetFileType (hFile=0x444) returned 0x1 [0125.503] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0125.504] GetFileType (hFile=0x444) returned 0x1 [0125.504] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x3db [0125.504] ReadFile (in: hFile=0x444, lpBuffer=0x233cc08, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x233cc08*, lpNumberOfBytesRead=0x3be6a8*=0x3db, lpOverlapped=0x0) returned 1 [0125.514] CloseHandle (hObject=0x444) returned 1 [0125.551] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\overflowIcon.svg", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\overflowIcon.svg", lpFilePart=0x0) returned 0x5d [0125.551] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0125.551] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\overflowIcon.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\overflowicon.svg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0125.552] GetFileType (hFile=0x444) returned 0x1 [0125.552] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0125.552] GetFileType (hFile=0x444) returned 0x1 [0125.552] WriteFile (in: hFile=0x444, lpBuffer=0x21b51a0*, nNumberOfBytesToWrite=0x3e0, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x21b51a0*, lpNumberOfBytesWritten=0x3be5b8*=0x3e0, lpOverlapped=0x0) returned 1 [0125.553] CloseHandle (hObject=0x444) returned 1 [0125.553] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\overflowIcon.svg", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\overflowIcon.svg", lpFilePart=0x0) returned 0x5d [0125.553] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\overflowIcon.svg.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\overflowIcon.svg.xuy", lpFilePart=0x0) returned 0x61 [0125.553] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0125.554] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\overflowIcon.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\overflowicon.svg"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ea9e081, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x3ea9e081, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x36af2377, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x3e0)) returned 1 [0125.554] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0125.554] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\overflowIcon.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\overflowicon.svg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\overflowIcon.svg.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\overflowicon.svg.xuy")) returned 1 [0125.555] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\overflowIconWhite.svg", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\overflowIconWhite.svg", lpFilePart=0x0) returned 0x62 [0125.555] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0125.555] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\overflowIconWhite.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\overflowiconwhite.svg"), fInfoLevelId=0x0, lpFileInformation=0x21b6498 | out: lpFileInformation=0x21b6498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f152a3e, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x3f152a3e, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3f152a3e, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x390)) returned 1 [0125.555] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0125.555] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\overflowIconWhite.svg", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\overflowIconWhite.svg", lpFilePart=0x0) returned 0x62 [0125.555] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0125.555] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\overflowIconWhite.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\overflowiconwhite.svg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0125.555] GetFileType (hFile=0x444) returned 0x1 [0125.555] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0125.555] GetFileType (hFile=0x444) returned 0x1 [0125.555] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x390 [0125.555] ReadFile (in: hFile=0x444, lpBuffer=0x21b6b60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x21b6b60*, lpNumberOfBytesRead=0x3be6a8*=0x390, lpOverlapped=0x0) returned 1 [0125.560] CloseHandle (hObject=0x444) returned 1 [0125.571] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\overflowIconWhite.svg", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\overflowIconWhite.svg", lpFilePart=0x0) returned 0x62 [0125.571] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0125.571] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\overflowIconWhite.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\overflowiconwhite.svg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0125.573] GetFileType (hFile=0x444) returned 0x1 [0125.573] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0125.573] GetFileType (hFile=0x444) returned 0x1 [0125.573] WriteFile (in: hFile=0x444, lpBuffer=0x222eda8*, nNumberOfBytesToWrite=0x3a0, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x222eda8*, lpNumberOfBytesWritten=0x3be5b8*=0x3a0, lpOverlapped=0x0) returned 1 [0125.574] CloseHandle (hObject=0x444) returned 1 [0125.574] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\overflowIconWhite.svg", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\overflowIconWhite.svg", lpFilePart=0x0) returned 0x62 [0125.574] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\overflowIconWhite.svg.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\overflowIconWhite.svg.xuy", lpFilePart=0x0) returned 0x66 [0125.574] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0125.574] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\overflowIconWhite.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\overflowiconwhite.svg"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f152a3e, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x3f152a3e, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x36b181e6, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x3a0)) returned 1 [0125.574] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0125.574] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\overflowIconWhite.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\overflowiconwhite.svg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\overflowIconWhite.svg.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\overflowiconwhite.svg.xuy")) returned 1 [0125.575] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\partiallyFreezing.svg", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\partiallyFreezing.svg", lpFilePart=0x0) returned 0x62 [0125.576] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0125.576] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\partiallyFreezing.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\partiallyfreezing.svg"), fInfoLevelId=0x0, lpFileInformation=0x22300b8 | out: lpFileInformation=0x22300b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f7e119c, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x3f7e119c, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3f7e119c, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x1137)) returned 1 [0125.576] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0125.576] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\partiallyFreezing.svg", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\partiallyFreezing.svg", lpFilePart=0x0) returned 0x62 [0125.576] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0125.576] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\partiallyFreezing.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\partiallyfreezing.svg"), fInfoLevelId=0x0, lpFileInformation=0x2230248 | out: lpFileInformation=0x2230248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f7e119c, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x3f7e119c, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3f7e119c, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x1137)) returned 1 [0125.576] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0125.576] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\partiallyFreezing.svg", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\partiallyFreezing.svg", lpFilePart=0x0) returned 0x62 [0125.576] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0125.576] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\partiallyFreezing.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\partiallyfreezing.svg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0125.577] GetFileType (hFile=0x444) returned 0x1 [0125.577] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0125.577] GetFileType (hFile=0x444) returned 0x1 [0125.577] ReadFile (in: hFile=0x444, lpBuffer=0x2232698, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x2232698*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0125.600] CloseHandle (hObject=0x444) returned 1 [0125.600] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\partiallyFreezing.svg", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\partiallyFreezing.svg", lpFilePart=0x0) returned 0x62 [0125.600] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0125.600] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\partiallyFreezing.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\partiallyfreezing.svg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0125.601] GetFileType (hFile=0x444) returned 0x1 [0125.601] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0125.601] GetFileType (hFile=0x444) returned 0x1 [0125.601] WriteFile (in: hFile=0x444, lpBuffer=0x22303b8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x22303b8*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0125.601] CloseHandle (hObject=0x444) returned 1 [0125.601] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\partiallyFreezing.svg", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\partiallyFreezing.svg", lpFilePart=0x0) returned 0x62 [0125.601] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\partiallyFreezing.svg.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\partiallyFreezing.svg.xuy", lpFilePart=0x0) returned 0x66 [0125.601] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0125.601] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\partiallyFreezing.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\partiallyfreezing.svg"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f7e119c, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x3f7e119c, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x36b646ab, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0125.601] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0125.601] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\partiallyFreezing.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\partiallyfreezing.svg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\partiallyFreezing.svg.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\partiallyfreezing.svg.xuy")) returned 1 [0125.602] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\settings.svg", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\settings.svg", lpFilePart=0x0) returned 0x59 [0125.602] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0125.602] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\settings.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\settings.svg"), fInfoLevelId=0x0, lpFileInformation=0x22aeb20 | out: lpFileInformation=0x22aeb20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fe95b60, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x3fe95b60, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3fe95b60, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x56d)) returned 1 [0125.603] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0125.603] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\settings.svg", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\settings.svg", lpFilePart=0x0) returned 0x59 [0125.603] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0125.603] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\settings.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\settings.svg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0125.603] GetFileType (hFile=0x444) returned 0x1 [0125.603] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0125.603] GetFileType (hFile=0x444) returned 0x1 [0125.603] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x56d [0125.603] ReadFile (in: hFile=0x444, lpBuffer=0x22af388, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x22af388*, lpNumberOfBytesRead=0x3be6a8*=0x56d, lpOverlapped=0x0) returned 1 [0125.615] CloseHandle (hObject=0x444) returned 1 [0125.625] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\settings.svg", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\settings.svg", lpFilePart=0x0) returned 0x59 [0125.625] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0125.626] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\settings.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\settings.svg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0125.627] GetFileType (hFile=0x444) returned 0x1 [0125.627] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0125.627] GetFileType (hFile=0x444) returned 0x1 [0125.627] WriteFile (in: hFile=0x444, lpBuffer=0x2327eb8*, nNumberOfBytesToWrite=0x570, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x2327eb8*, lpNumberOfBytesWritten=0x3be5b8*=0x570, lpOverlapped=0x0) returned 1 [0125.628] CloseHandle (hObject=0x444) returned 1 [0125.628] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\settings.svg", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\settings.svg", lpFilePart=0x0) returned 0x59 [0125.628] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\settings.svg.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\settings.svg.xuy", lpFilePart=0x0) returned 0x5d [0125.628] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0125.628] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\settings.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\settings.svg"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fe95b60, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x3fe95b60, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x36bb0bf5, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x570)) returned 1 [0125.628] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0125.628] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\settings.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\settings.svg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\settings.svg.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\settings.svg.xuy")) returned 1 [0125.629] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\settingsdisabled.svg", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\settingsdisabled.svg", lpFilePart=0x0) returned 0x61 [0125.630] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0125.630] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\settingsdisabled.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\settingsdisabled.svg"), fInfoLevelId=0x0, lpFileInformation=0x2329198 | out: lpFileInformation=0x2329198*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4054a579, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x4054a579, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x4054a579, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x56f)) returned 1 [0125.630] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0125.630] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\settingsdisabled.svg", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\settingsdisabled.svg", lpFilePart=0x0) returned 0x61 [0125.630] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0125.630] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\settingsdisabled.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\settingsdisabled.svg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0125.630] GetFileType (hFile=0x444) returned 0x1 [0125.630] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0125.630] GetFileType (hFile=0x444) returned 0x1 [0125.630] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x56f [0125.630] ReadFile (in: hFile=0x444, lpBuffer=0x2329a40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x2329a40*, lpNumberOfBytesRead=0x3be6a8*=0x56f, lpOverlapped=0x0) returned 1 [0125.631] CloseHandle (hObject=0x444) returned 1 [0125.678] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\settingsdisabled.svg", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\settingsdisabled.svg", lpFilePart=0x0) returned 0x61 [0125.678] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0125.678] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\settingsdisabled.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\settingsdisabled.svg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0125.679] GetFileType (hFile=0x444) returned 0x1 [0125.679] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0125.679] GetFileType (hFile=0x444) returned 0x1 [0125.679] WriteFile (in: hFile=0x444, lpBuffer=0x21a2700*, nNumberOfBytesToWrite=0x570, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x21a2700*, lpNumberOfBytesWritten=0x3be5b8*=0x570, lpOverlapped=0x0) returned 1 [0125.680] CloseHandle (hObject=0x444) returned 1 [0125.680] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\settingsdisabled.svg", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\settingsdisabled.svg", lpFilePart=0x0) returned 0x61 [0125.680] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\settingsdisabled.svg.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\settingsdisabled.svg.xuy", lpFilePart=0x0) returned 0x65 [0125.680] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0125.681] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\settingsdisabled.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\settingsdisabled.svg"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4054a579, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x4054a579, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x36c232a3, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x570)) returned 1 [0125.681] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0125.681] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\settingsdisabled.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\settingsdisabled.svg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\settingsdisabled.svg.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\settingsdisabled.svg.xuy")) returned 1 [0125.682] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\signIn.svg", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\signIn.svg", lpFilePart=0x0) returned 0x57 [0125.682] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0125.682] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\signIn.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\signin.svg"), fInfoLevelId=0x0, lpFileInformation=0x21a3a10 | out: lpFileInformation=0x21a3a10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40bb2a3c, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x40bb2a3c, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x40bb2a3c, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x2ab4)) returned 1 [0125.682] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0125.682] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\signIn.svg", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\signIn.svg", lpFilePart=0x0) returned 0x57 [0125.682] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0125.682] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\signIn.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\signin.svg"), fInfoLevelId=0x0, lpFileInformation=0x21a3b70 | out: lpFileInformation=0x21a3b70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40bb2a3c, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x40bb2a3c, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x40bb2a3c, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x2ab4)) returned 1 [0125.682] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0125.682] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\signIn.svg", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\signIn.svg", lpFilePart=0x0) returned 0x57 [0125.682] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0125.682] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\signIn.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\signin.svg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0125.683] GetFileType (hFile=0x444) returned 0x1 [0125.683] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0125.683] GetFileType (hFile=0x444) returned 0x1 [0125.683] ReadFile (in: hFile=0x444, lpBuffer=0x21a5f60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x21a5f60*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0125.705] CloseHandle (hObject=0x444) returned 1 [0125.705] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\signIn.svg", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\signIn.svg", lpFilePart=0x0) returned 0x57 [0125.705] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0125.705] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\signIn.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\signin.svg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0125.705] GetFileType (hFile=0x444) returned 0x1 [0125.706] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0125.706] GetFileType (hFile=0x444) returned 0x1 [0125.706] WriteFile (in: hFile=0x444, lpBuffer=0x21a3cb0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x21a3cb0*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0125.706] CloseHandle (hObject=0x444) returned 1 [0125.706] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\signIn.svg", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\signIn.svg", lpFilePart=0x0) returned 0x57 [0125.706] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\signIn.svg.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\signIn.svg.xuy", lpFilePart=0x0) returned 0x5b [0125.706] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0125.706] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\signIn.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\signin.svg"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40bb2a3c, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x40bb2a3c, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x36c6f89c, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2ab4)) returned 1 [0125.706] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0125.706] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\signIn.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\signin.svg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\signIn.svg.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\signin.svg.xuy")) returned 1 [0125.707] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\stackedIceCubes.svg", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\stackedIceCubes.svg", lpFilePart=0x0) returned 0x60 [0125.707] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0125.707] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\stackedIceCubes.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\stackedicecubes.svg"), fInfoLevelId=0x0, lpFileInformation=0x2222370 | out: lpFileInformation=0x2222370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41325fa9, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x41325fa9, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x41325fa9, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x12c7)) returned 1 [0125.707] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0125.708] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\stackedIceCubes.svg", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\stackedIceCubes.svg", lpFilePart=0x0) returned 0x60 [0125.708] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0125.708] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\stackedIceCubes.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\stackedicecubes.svg"), fInfoLevelId=0x0, lpFileInformation=0x22224f8 | out: lpFileInformation=0x22224f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41325fa9, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x41325fa9, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x41325fa9, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x12c7)) returned 1 [0125.708] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0125.708] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\stackedIceCubes.svg", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\stackedIceCubes.svg", lpFilePart=0x0) returned 0x60 [0125.708] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0125.708] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\stackedIceCubes.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\stackedicecubes.svg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0125.709] GetFileType (hFile=0x444) returned 0x1 [0125.709] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0125.709] GetFileType (hFile=0x444) returned 0x1 [0125.709] ReadFile (in: hFile=0x444, lpBuffer=0x2224938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x2224938*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0125.722] CloseHandle (hObject=0x444) returned 1 [0125.722] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\stackedIceCubes.svg", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\stackedIceCubes.svg", lpFilePart=0x0) returned 0x60 [0125.722] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0125.722] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\stackedIceCubes.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\stackedicecubes.svg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0125.722] GetFileType (hFile=0x444) returned 0x1 [0125.722] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0125.722] GetFileType (hFile=0x444) returned 0x1 [0125.722] WriteFile (in: hFile=0x444, lpBuffer=0x2222660*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x2222660*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0125.723] CloseHandle (hObject=0x444) returned 1 [0125.723] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\stackedIceCubes.svg", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\stackedIceCubes.svg", lpFilePart=0x0) returned 0x60 [0125.723] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\stackedIceCubes.svg.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\stackedIceCubes.svg.xuy", lpFilePart=0x0) returned 0x64 [0125.723] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0125.723] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\stackedIceCubes.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\stackedicecubes.svg"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41325fa9, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x41325fa9, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x36c95d50, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0125.723] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0125.723] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\stackedIceCubes.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\stackedicecubes.svg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\stackedIceCubes.svg.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\stackedicecubes.svg.xuy")) returned 1 [0125.724] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\waterGlass.svg", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\waterGlass.svg", lpFilePart=0x0) returned 0x5b [0125.724] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0125.724] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\waterGlass.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\waterglass.svg"), fInfoLevelId=0x0, lpFileInformation=0x22a0db8 | out: lpFileInformation=0x22a0db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41a00bc2, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x41a00bc2, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x41a00bc2, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x72d)) returned 1 [0125.724] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0125.724] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\waterGlass.svg", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\waterGlass.svg", lpFilePart=0x0) returned 0x5b [0125.724] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0125.724] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\waterGlass.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\waterglass.svg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0125.724] GetFileType (hFile=0x444) returned 0x1 [0125.724] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0125.724] GetFileType (hFile=0x444) returned 0x1 [0125.724] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x72d [0125.725] ReadFile (in: hFile=0x444, lpBuffer=0x22a17e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x22a17e0*, lpNumberOfBytesRead=0x3be6a8*=0x72d, lpOverlapped=0x0) returned 1 [0125.733] CloseHandle (hObject=0x444) returned 1 [0125.743] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\waterGlass.svg", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\waterGlass.svg", lpFilePart=0x0) returned 0x5b [0125.743] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0125.743] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\waterGlass.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\waterglass.svg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0125.745] GetFileType (hFile=0x444) returned 0x1 [0125.745] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0125.745] GetFileType (hFile=0x444) returned 0x1 [0125.745] WriteFile (in: hFile=0x444, lpBuffer=0x231abd0*, nNumberOfBytesToWrite=0x730, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x231abd0*, lpNumberOfBytesWritten=0x3be5b8*=0x730, lpOverlapped=0x0) returned 1 [0125.745] CloseHandle (hObject=0x444) returned 1 [0125.746] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\waterGlass.svg", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\waterGlass.svg", lpFilePart=0x0) returned 0x5b [0125.746] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\waterGlass.svg.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\waterGlass.svg.xuy", lpFilePart=0x0) returned 0x5f [0125.746] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0125.746] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\waterGlass.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\waterglass.svg"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41a00bc2, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x41a00bc2, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x36cc1840, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x730)) returned 1 [0125.746] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0125.746] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\waterGlass.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\waterglass.svg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\waterGlass.svg.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\waterglass.svg.xuy")) returned 1 [0125.747] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0125.747] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\is", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\is", lpFilePart=0x0) returned 0x48 [0125.747] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\is\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\is\\", lpFilePart=0x0) returned 0x49 [0125.747] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\is\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7c70 [0125.747] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0125.747] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0125.747] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0125.747] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0125.748] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0125.748] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0125.748] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0125.748] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\is", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\is", lpFilePart=0x0) returned 0x48 [0125.748] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\is\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\is\\", lpFilePart=0x0) returned 0x49 [0125.748] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\is\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7550 [0125.748] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0125.748] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0125.748] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0125.748] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0125.748] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0125.748] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0125.748] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\is\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\is\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0125.748] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0125.748] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\is\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\is\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x231dfe8 | out: lpFileInformation=0x231dfe8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41faa50a, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x41faa50a, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x41faa50a, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x220d0)) returned 1 [0125.749] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0125.749] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\is\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\is\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0125.749] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0125.749] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\is\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\is\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x231e1a8 | out: lpFileInformation=0x231e1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41faa50a, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x41faa50a, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x41faa50a, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x220d0)) returned 1 [0125.749] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0125.749] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\is\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\is\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0125.749] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0125.749] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\is\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\is\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0125.750] GetFileType (hFile=0x444) returned 0x1 [0125.750] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0125.750] GetFileType (hFile=0x444) returned 0x1 [0125.750] ReadFile (in: hFile=0x444, lpBuffer=0x2320658, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x2320658*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0125.804] CloseHandle (hObject=0x444) returned 1 [0125.804] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\is\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\is\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0125.804] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0125.804] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\is\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\is\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0125.805] GetFileType (hFile=0x444) returned 0x1 [0125.805] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0125.805] GetFileType (hFile=0x444) returned 0x1 [0125.805] WriteFile (in: hFile=0x444, lpBuffer=0x21621c0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x21621c0*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0125.805] CloseHandle (hObject=0x444) returned 1 [0125.805] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\is\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\is\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0125.805] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\is\\FileSync.LocalizedResources.dll.mui.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\is\\FileSync.LocalizedResources.dll.mui.xuy", lpFilePart=0x0) returned 0x70 [0125.805] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0125.805] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\is\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\is\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41faa50a, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x41faa50a, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x36d54600, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x220d0)) returned 1 [0125.805] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0125.805] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\is\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\is\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\is\\FileSync.LocalizedResources.dll.mui.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\is\\filesync.localizedresources.dll.mui.xuy")) returned 1 [0125.806] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0125.806] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\it", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\it", lpFilePart=0x0) returned 0x48 [0125.806] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\it\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\it\\", lpFilePart=0x0) returned 0x49 [0125.806] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\it\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7eb0 [0125.807] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0125.807] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0125.807] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0125.807] FindClose (in: hFindFile=0x5d7eb0 | out: hFindFile=0x5d7eb0) returned 1 [0125.807] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0125.807] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0125.807] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0125.807] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\it", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\it", lpFilePart=0x0) returned 0x48 [0125.807] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\it\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\it\\", lpFilePart=0x0) returned 0x49 [0125.807] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\it\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7c70 [0125.807] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0125.808] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0125.808] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0125.808] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0125.808] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0125.808] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0125.808] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\it\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\it\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0125.808] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0125.808] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\it\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\it\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x219ffe8 | out: lpFileInformation=0x219ffe8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42612a1e, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x42612a1e, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x42612a1e, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x23cd0)) returned 1 [0125.808] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0125.808] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\it\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\it\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0125.808] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0125.808] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\it\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\it\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x21a01a8 | out: lpFileInformation=0x21a01a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42612a1e, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x42612a1e, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x42612a1e, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x23cd0)) returned 1 [0125.808] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0125.808] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\it\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\it\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0125.808] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0125.808] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\it\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\it\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0125.809] GetFileType (hFile=0x444) returned 0x1 [0125.809] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0125.809] GetFileType (hFile=0x444) returned 0x1 [0125.809] ReadFile (in: hFile=0x444, lpBuffer=0x21a2658, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x21a2658*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0125.830] CloseHandle (hObject=0x444) returned 1 [0125.830] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\it\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\it\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0125.830] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0125.831] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\it\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\it\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0125.831] GetFileType (hFile=0x444) returned 0x1 [0125.831] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0125.831] GetFileType (hFile=0x444) returned 0x1 [0125.831] WriteFile (in: hFile=0x444, lpBuffer=0x21a0348*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x21a0348*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0125.831] CloseHandle (hObject=0x444) returned 1 [0125.831] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\it\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\it\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0125.831] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\it\\FileSync.LocalizedResources.dll.mui.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\it\\FileSync.LocalizedResources.dll.mui.xuy", lpFilePart=0x0) returned 0x70 [0125.831] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0125.831] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\it\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\it\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42612a1e, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x42612a1e, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x36da0af4, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x23cd0)) returned 1 [0125.831] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0125.831] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\it\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\it\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\it\\FileSync.LocalizedResources.dll.mui.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\it\\filesync.localizedresources.dll.mui.xuy")) returned 1 [0125.832] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0125.833] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ja", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ja", lpFilePart=0x0) returned 0x48 [0125.833] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ja\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ja\\", lpFilePart=0x0) returned 0x49 [0125.833] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ja\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7d30 [0125.833] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0125.833] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0125.833] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0125.833] FindClose (in: hFindFile=0x5d7d30 | out: hFindFile=0x5d7d30) returned 1 [0125.833] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0125.833] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0125.833] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0125.833] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ja", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ja", lpFilePart=0x0) returned 0x48 [0125.833] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ja\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ja\\", lpFilePart=0x0) returned 0x49 [0125.833] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ja\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d78b0 [0125.834] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0125.834] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0125.834] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0125.834] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0125.834] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0125.834] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0125.834] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ja\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ja\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0125.834] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0125.834] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ja\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ja\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x2220c90 | out: lpFileInformation=0x2220c90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42d39b76, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x42d39b76, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x42d39b76, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x168c8)) returned 1 [0125.834] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0125.834] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ja\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ja\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0125.834] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0125.834] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ja\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ja\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x2220e50 | out: lpFileInformation=0x2220e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42d39b76, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x42d39b76, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x42d39b76, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x168c8)) returned 1 [0125.834] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0125.834] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ja\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ja\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0125.834] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0125.834] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ja\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ja\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0125.835] GetFileType (hFile=0x444) returned 0x1 [0125.835] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0125.835] GetFileType (hFile=0x444) returned 0x1 [0125.835] ReadFile (in: hFile=0x444, lpBuffer=0x2223300, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x2223300*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0125.849] CloseHandle (hObject=0x444) returned 1 [0125.850] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ja\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ja\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0125.850] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0125.850] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ja\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ja\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0125.850] GetFileType (hFile=0x444) returned 0x1 [0125.850] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0125.850] GetFileType (hFile=0x444) returned 0x1 [0125.850] WriteFile (in: hFile=0x444, lpBuffer=0x2220ff0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x2220ff0*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0125.850] CloseHandle (hObject=0x444) returned 1 [0125.850] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ja\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ja\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0125.850] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ja\\FileSync.LocalizedResources.dll.mui.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ja\\FileSync.LocalizedResources.dll.mui.xuy", lpFilePart=0x0) returned 0x70 [0125.850] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0125.850] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ja\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ja\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42d39b76, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x42d39b76, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x36dc7133, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x168c8)) returned 1 [0125.850] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0125.851] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ja\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ja\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ja\\FileSync.LocalizedResources.dll.mui.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ja\\filesync.localizedresources.dll.mui.xuy")) returned 1 [0125.852] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0125.852] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ka", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ka", lpFilePart=0x0) returned 0x48 [0125.852] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ka\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ka\\", lpFilePart=0x0) returned 0x49 [0125.852] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ka\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d78b0 [0125.852] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0125.852] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0125.852] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0125.852] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0125.852] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0125.852] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0125.852] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0125.852] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ka", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ka", lpFilePart=0x0) returned 0x48 [0125.852] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ka\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ka\\", lpFilePart=0x0) returned 0x49 [0125.852] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ka\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7fd0 [0125.853] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0125.853] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0125.853] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0125.853] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0125.853] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0125.853] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0125.853] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ka\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ka\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0125.853] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0125.853] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ka\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ka\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x22a1938 | out: lpFileInformation=0x22a1938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4343a950, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x4343a950, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x4343a950, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x240d0)) returned 1 [0125.853] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0125.853] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ka\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ka\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0125.853] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0125.853] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ka\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ka\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x22a1af8 | out: lpFileInformation=0x22a1af8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4343a950, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x4343a950, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x4343a950, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x240d0)) returned 1 [0125.854] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0125.854] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ka\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ka\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0125.854] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0125.854] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ka\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ka\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0125.854] GetFileType (hFile=0x444) returned 0x1 [0125.854] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0125.854] GetFileType (hFile=0x444) returned 0x1 [0125.854] ReadFile (in: hFile=0x444, lpBuffer=0x22a3fa8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x22a3fa8*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0125.880] CloseHandle (hObject=0x444) returned 1 [0125.880] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ka\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ka\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0125.880] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0125.880] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ka\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ka\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0125.880] GetFileType (hFile=0x444) returned 0x1 [0125.880] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0125.880] GetFileType (hFile=0x444) returned 0x1 [0125.880] WriteFile (in: hFile=0x444, lpBuffer=0x22a1c98*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x22a1c98*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0125.881] CloseHandle (hObject=0x444) returned 1 [0125.881] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ka\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ka\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0125.881] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ka\\FileSync.LocalizedResources.dll.mui.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ka\\FileSync.LocalizedResources.dll.mui.xuy", lpFilePart=0x0) returned 0x70 [0125.881] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0125.881] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ka\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ka\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4343a950, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x4343a950, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x36e131c8, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x240d0)) returned 1 [0125.881] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0125.881] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ka\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ka\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ka\\FileSync.LocalizedResources.dll.mui.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ka\\filesync.localizedresources.dll.mui.xuy")) returned 1 [0125.885] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0125.885] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\kk", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\kk", lpFilePart=0x0) returned 0x48 [0125.885] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\kk\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\kk\\", lpFilePart=0x0) returned 0x49 [0125.885] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\kk\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d75b0 [0125.885] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0125.885] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0125.886] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0125.886] FindClose (in: hFindFile=0x5d75b0 | out: hFindFile=0x5d75b0) returned 1 [0125.886] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0125.886] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0125.886] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0125.886] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\kk", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\kk", lpFilePart=0x0) returned 0x48 [0125.886] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\kk\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\kk\\", lpFilePart=0x0) returned 0x49 [0125.886] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\kk\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7c70 [0125.886] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0125.886] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0125.886] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0125.886] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0125.886] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0125.887] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0125.887] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\kk\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\kk\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0125.887] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0125.887] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\kk\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\kk\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x23225e0 | out: lpFileInformation=0x23225e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x442d4fb5, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x442d4fb5, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x442d4fb5, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x23ed0)) returned 1 [0125.887] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0125.887] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\kk\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\kk\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0125.887] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0125.887] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\kk\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\kk\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x23227a0 | out: lpFileInformation=0x23227a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x442d4fb5, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x442d4fb5, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x442d4fb5, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x23ed0)) returned 1 [0125.887] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0125.887] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\kk\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\kk\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0125.887] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0125.887] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\kk\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\kk\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0125.888] GetFileType (hFile=0x444) returned 0x1 [0125.888] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0125.888] GetFileType (hFile=0x444) returned 0x1 [0125.888] ReadFile (in: hFile=0x444, lpBuffer=0x2324c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x2324c50*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0125.967] CloseHandle (hObject=0x444) returned 1 [0125.967] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\kk\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\kk\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0125.967] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0125.967] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\kk\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\kk\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0125.967] GetFileType (hFile=0x444) returned 0x1 [0125.967] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0125.967] GetFileType (hFile=0x444) returned 0x1 [0125.967] WriteFile (in: hFile=0x444, lpBuffer=0x21621c0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x21621c0*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0125.968] CloseHandle (hObject=0x444) returned 1 [0125.968] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\kk\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\kk\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0125.968] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\kk\\FileSync.LocalizedResources.dll.mui.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\kk\\FileSync.LocalizedResources.dll.mui.xuy", lpFilePart=0x0) returned 0x70 [0125.968] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0125.968] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\kk\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\kk\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x442d4fb5, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x442d4fb5, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x36ed1ca4, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x23ed0)) returned 1 [0125.968] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0125.968] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\kk\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\kk\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\kk\\FileSync.LocalizedResources.dll.mui.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\kk\\filesync.localizedresources.dll.mui.xuy")) returned 1 [0125.971] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0125.971] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\km-kh", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\km-kh", lpFilePart=0x0) returned 0x4b [0125.971] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\km-kh\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\km-kh\\", lpFilePart=0x0) returned 0x4c [0125.971] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\km-kh\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7370 [0125.971] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0125.971] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0125.972] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0125.972] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0125.972] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0125.972] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0125.972] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0125.972] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\km-kh", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\km-kh", lpFilePart=0x0) returned 0x4b [0125.972] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\km-kh\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\km-kh\\", lpFilePart=0x0) returned 0x4c [0125.972] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\km-kh\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7c70 [0125.972] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0125.972] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0125.972] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0125.973] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0125.973] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0125.973] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0125.973] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\km-kh\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\km-kh\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0125.973] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0125.973] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\km-kh\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\km-kh\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x21a3338 | out: lpFileInformation=0x21a3338*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x449afbc7, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x449afbc7, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x449afbc7, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x21cd0)) returned 1 [0125.973] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0125.973] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\km-kh\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\km-kh\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0125.973] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0125.973] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\km-kh\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\km-kh\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x21a34f8 | out: lpFileInformation=0x21a34f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x449afbc7, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x449afbc7, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x449afbc7, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x21cd0)) returned 1 [0125.973] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0125.973] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\km-kh\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\km-kh\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0125.973] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0125.973] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\km-kh\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\km-kh\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0125.974] GetFileType (hFile=0x444) returned 0x1 [0125.974] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0125.974] GetFileType (hFile=0x444) returned 0x1 [0125.974] ReadFile (in: hFile=0x444, lpBuffer=0x21a59a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x21a59a8*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0125.997] CloseHandle (hObject=0x444) returned 1 [0125.997] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\km-kh\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\km-kh\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0125.997] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0125.997] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\km-kh\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\km-kh\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0125.997] GetFileType (hFile=0x444) returned 0x1 [0125.997] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0125.997] GetFileType (hFile=0x444) returned 0x1 [0125.997] WriteFile (in: hFile=0x444, lpBuffer=0x21a3698*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x21a3698*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0125.997] CloseHandle (hObject=0x444) returned 1 [0125.997] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\km-kh\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\km-kh\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0125.998] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\km-kh\\FileSync.LocalizedResources.dll.mui.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\km-kh\\FileSync.LocalizedResources.dll.mui.xuy", lpFilePart=0x0) returned 0x73 [0125.998] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0125.998] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\km-kh\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\km-kh\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x449afbc7, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x449afbc7, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x36f1e226, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x21cd0)) returned 1 [0125.998] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0125.998] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\km-kh\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\km-kh\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\km-kh\\FileSync.LocalizedResources.dll.mui.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\km-kh\\filesync.localizedresources.dll.mui.xuy")) returned 1 [0125.999] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0125.999] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\kn", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\kn", lpFilePart=0x0) returned 0x48 [0125.999] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\kn\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\kn\\", lpFilePart=0x0) returned 0x49 [0125.999] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\kn\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7370 [0125.999] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0125.999] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0125.999] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0125.999] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0125.999] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0125.999] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0126.000] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0126.000] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\kn", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\kn", lpFilePart=0x0) returned 0x48 [0126.000] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\kn\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\kn\\", lpFilePart=0x0) returned 0x49 [0126.000] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\kn\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d78b0 [0126.000] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0126.000] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0126.000] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0126.001] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0126.001] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0126.001] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0126.001] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\kn\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\kn\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0126.001] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0126.001] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\kn\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\kn\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x2223fe0 | out: lpFileInformation=0x2223fe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x450fcedc, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x450fcedc, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x450fcedc, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x252d0)) returned 1 [0126.001] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0126.001] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\kn\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\kn\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0126.001] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0126.001] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\kn\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\kn\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x22241a0 | out: lpFileInformation=0x22241a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x450fcedc, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x450fcedc, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x450fcedc, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x252d0)) returned 1 [0126.001] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0126.001] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\kn\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\kn\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0126.001] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0126.001] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\kn\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\kn\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0126.002] GetFileType (hFile=0x444) returned 0x1 [0126.002] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0126.002] GetFileType (hFile=0x444) returned 0x1 [0126.002] ReadFile (in: hFile=0x444, lpBuffer=0x2226650, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x2226650*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0126.036] CloseHandle (hObject=0x444) returned 1 [0126.036] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\kn\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\kn\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0126.036] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0126.036] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\kn\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\kn\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0126.036] GetFileType (hFile=0x444) returned 0x1 [0126.036] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0126.036] GetFileType (hFile=0x444) returned 0x1 [0126.037] WriteFile (in: hFile=0x444, lpBuffer=0x2224340*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x2224340*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0126.037] CloseHandle (hObject=0x444) returned 1 [0126.037] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\kn\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\kn\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0126.037] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\kn\\FileSync.LocalizedResources.dll.mui.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\kn\\FileSync.LocalizedResources.dll.mui.xuy", lpFilePart=0x0) returned 0x70 [0126.037] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0126.037] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\kn\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\kn\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x450fcedc, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x450fcedc, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x36f90963, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x252d0)) returned 1 [0126.037] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0126.037] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\kn\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\kn\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\kn\\FileSync.LocalizedResources.dll.mui.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\kn\\filesync.localizedresources.dll.mui.xuy")) returned 1 [0126.038] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0126.038] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ko", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ko", lpFilePart=0x0) returned 0x48 [0126.038] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ko\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ko\\", lpFilePart=0x0) returned 0x49 [0126.038] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ko\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d78b0 [0126.039] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0126.039] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0126.039] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0126.039] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0126.039] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0126.039] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0126.039] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0126.039] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ko", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ko", lpFilePart=0x0) returned 0x48 [0126.039] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ko\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ko\\", lpFilePart=0x0) returned 0x49 [0126.039] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ko\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7cd0 [0126.039] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0126.040] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0126.040] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0126.040] FindClose (in: hFindFile=0x5d7cd0 | out: hFindFile=0x5d7cd0) returned 1 [0126.040] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0126.040] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0126.040] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ko\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ko\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0126.040] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0126.040] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ko\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ko\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x22a4c88 | out: lpFileInformation=0x22a4c88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4578b64c, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x4578b64c, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x4578b64c, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x158d0)) returned 1 [0126.040] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0126.040] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ko\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ko\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0126.040] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0126.040] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ko\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ko\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x22a4e48 | out: lpFileInformation=0x22a4e48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4578b64c, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x4578b64c, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x4578b64c, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x158d0)) returned 1 [0126.040] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0126.040] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ko\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ko\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0126.041] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0126.041] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ko\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ko\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0126.041] GetFileType (hFile=0x444) returned 0x1 [0126.041] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0126.041] GetFileType (hFile=0x444) returned 0x1 [0126.041] ReadFile (in: hFile=0x444, lpBuffer=0x22a72f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x22a72f8*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0126.074] CloseHandle (hObject=0x444) returned 1 [0126.075] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ko\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ko\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0126.075] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0126.075] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ko\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ko\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0126.075] GetFileType (hFile=0x444) returned 0x1 [0126.075] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0126.075] GetFileType (hFile=0x444) returned 0x1 [0126.075] WriteFile (in: hFile=0x444, lpBuffer=0x22a4fe8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x22a4fe8*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0126.076] CloseHandle (hObject=0x444) returned 1 [0126.076] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ko\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ko\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0126.076] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ko\\FileSync.LocalizedResources.dll.mui.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ko\\FileSync.LocalizedResources.dll.mui.xuy", lpFilePart=0x0) returned 0x70 [0126.076] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0126.076] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ko\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ko\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4578b64c, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x4578b64c, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x36fe062b, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x158d0)) returned 1 [0126.076] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0126.076] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ko\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ko\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ko\\FileSync.LocalizedResources.dll.mui.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ko\\filesync.localizedresources.dll.mui.xuy")) returned 1 [0126.077] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0126.077] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\kok", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\kok", lpFilePart=0x0) returned 0x49 [0126.077] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\kok\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\kok\\", lpFilePart=0x0) returned 0x4a [0126.077] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\kok\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d79d0 [0126.077] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0126.078] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0126.078] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0126.078] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0126.078] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0126.078] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0126.078] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0126.078] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\kok", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\kok", lpFilePart=0x0) returned 0x49 [0126.078] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\kok\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\kok\\", lpFilePart=0x0) returned 0x4a [0126.078] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\kok\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7fd0 [0126.079] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0126.079] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0126.079] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0126.079] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0126.079] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0126.079] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0126.079] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\kok\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\kok\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6d [0126.079] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0126.079] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\kok\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\kok\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x2325950 | out: lpFileInformation=0x2325950*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4629242a, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x4629242a, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x4629242a, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x222d0)) returned 1 [0126.079] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0126.079] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\kok\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\kok\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6d [0126.079] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0126.079] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\kok\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\kok\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x2325b10 | out: lpFileInformation=0x2325b10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4629242a, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x4629242a, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x4629242a, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x222d0)) returned 1 [0126.080] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0126.080] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\kok\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\kok\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6d [0126.080] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0126.080] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\kok\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\kok\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0126.080] GetFileType (hFile=0x444) returned 0x1 [0126.080] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0126.080] GetFileType (hFile=0x444) returned 0x1 [0126.080] ReadFile (in: hFile=0x444, lpBuffer=0x2327fc0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x2327fc0*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0126.133] CloseHandle (hObject=0x444) returned 1 [0126.133] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\kok\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\kok\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6d [0126.133] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0126.133] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\kok\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\kok\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0126.133] GetFileType (hFile=0x444) returned 0x1 [0126.133] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0126.133] GetFileType (hFile=0x444) returned 0x1 [0126.133] WriteFile (in: hFile=0x444, lpBuffer=0x21621c0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x21621c0*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0126.134] CloseHandle (hObject=0x444) returned 1 [0126.134] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\kok\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\kok\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6d [0126.134] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\kok\\FileSync.LocalizedResources.dll.mui.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\kok\\FileSync.LocalizedResources.dll.mui.xuy", lpFilePart=0x0) returned 0x71 [0126.134] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0126.134] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\kok\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\kok\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4629242a, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x4629242a, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3707578d, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x222d0)) returned 1 [0126.134] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0126.134] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\kok\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\kok\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\kok\\FileSync.LocalizedResources.dll.mui.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\kok\\filesync.localizedresources.dll.mui.xuy")) returned 1 [0126.135] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0126.135] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ku-arab", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ku-arab", lpFilePart=0x0) returned 0x4d [0126.135] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ku-arab\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ku-arab\\", lpFilePart=0x0) returned 0x4e [0126.135] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ku-arab\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7550 [0126.135] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0126.136] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0126.136] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0126.136] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0126.136] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0126.136] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0126.136] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0126.136] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ku-arab", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ku-arab", lpFilePart=0x0) returned 0x4d [0126.136] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ku-arab\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ku-arab\\", lpFilePart=0x0) returned 0x4e [0126.136] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ku-arab\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7a30 [0126.136] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0126.136] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0126.137] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0126.137] FindClose (in: hFindFile=0x5d7a30 | out: hFindFile=0x5d7a30) returned 1 [0126.137] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0126.137] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0126.137] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ku-arab\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ku-arab\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x71 [0126.137] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0126.137] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ku-arab\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ku-arab\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x21a66d8 | out: lpFileInformation=0x21a66d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46946de7, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x46946de7, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x46946de7, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x22cc8)) returned 1 [0126.137] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0126.137] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ku-arab\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ku-arab\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x71 [0126.137] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0126.137] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ku-arab\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ku-arab\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x21a68a0 | out: lpFileInformation=0x21a68a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46946de7, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x46946de7, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x46946de7, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x22cc8)) returned 1 [0126.137] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0126.137] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ku-arab\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ku-arab\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x71 [0126.137] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0126.137] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ku-arab\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ku-arab\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0126.138] GetFileType (hFile=0x444) returned 0x1 [0126.138] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0126.138] GetFileType (hFile=0x444) returned 0x1 [0126.138] ReadFile (in: hFile=0x444, lpBuffer=0x21a8d60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x21a8d60*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0126.151] CloseHandle (hObject=0x444) returned 1 [0126.151] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ku-arab\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ku-arab\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x71 [0126.151] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0126.151] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ku-arab\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ku-arab\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0126.152] GetFileType (hFile=0x444) returned 0x1 [0126.152] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0126.152] GetFileType (hFile=0x444) returned 0x1 [0126.152] WriteFile (in: hFile=0x444, lpBuffer=0x21a6a48*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x21a6a48*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0126.152] CloseHandle (hObject=0x444) returned 1 [0126.152] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ku-arab\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ku-arab\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x71 [0126.152] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ku-arab\\FileSync.LocalizedResources.dll.mui.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ku-arab\\FileSync.LocalizedResources.dll.mui.xuy", lpFilePart=0x0) returned 0x75 [0126.152] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0126.152] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ku-arab\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ku-arab\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46946de7, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x46946de7, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3709b9df, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x22cc8)) returned 1 [0126.152] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0126.152] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ku-arab\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ku-arab\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ku-arab\\FileSync.LocalizedResources.dll.mui.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ku-arab\\filesync.localizedresources.dll.mui.xuy")) returned 1 [0126.153] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0126.153] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ky", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ky", lpFilePart=0x0) returned 0x48 [0126.153] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ky\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ky\\", lpFilePart=0x0) returned 0x49 [0126.153] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ky\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d78b0 [0126.154] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0126.154] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0126.154] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0126.154] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0126.154] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0126.154] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0126.154] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0126.154] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ky", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ky", lpFilePart=0x0) returned 0x48 [0126.154] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ky\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ky\\", lpFilePart=0x0) returned 0x49 [0126.154] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ky\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d81b0 [0126.154] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0126.154] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0126.155] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0126.155] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0126.155] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0126.155] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0126.155] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ky\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ky\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0126.155] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0126.155] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ky\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ky\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x22273b8 | out: lpFileInformation=0x22273b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4706deb9, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x4706deb9, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x4706deb9, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x226d0)) returned 1 [0126.155] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0126.155] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ky\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ky\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0126.155] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0126.155] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ky\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ky\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x2227578 | out: lpFileInformation=0x2227578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4706deb9, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x4706deb9, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x4706deb9, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x226d0)) returned 1 [0126.155] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0126.155] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ky\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ky\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0126.155] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0126.155] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ky\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ky\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0126.157] GetFileType (hFile=0x444) returned 0x1 [0126.157] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0126.157] GetFileType (hFile=0x444) returned 0x1 [0126.157] ReadFile (in: hFile=0x444, lpBuffer=0x2229a28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x2229a28*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0126.169] CloseHandle (hObject=0x444) returned 1 [0126.169] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ky\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ky\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0126.169] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0126.169] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ky\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ky\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0126.169] GetFileType (hFile=0x444) returned 0x1 [0126.170] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0126.170] GetFileType (hFile=0x444) returned 0x1 [0126.170] WriteFile (in: hFile=0x444, lpBuffer=0x2227718*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x2227718*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0126.170] CloseHandle (hObject=0x444) returned 1 [0126.170] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ky\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ky\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0126.170] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ky\\FileSync.LocalizedResources.dll.mui.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ky\\FileSync.LocalizedResources.dll.mui.xuy", lpFilePart=0x0) returned 0x70 [0126.170] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0126.170] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ky\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ky\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4706deb9, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x4706deb9, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x370c23fc, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x226d0)) returned 1 [0126.170] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0126.170] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ky\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ky\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ky\\FileSync.LocalizedResources.dll.mui.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ky\\filesync.localizedresources.dll.mui.xuy")) returned 1 [0126.171] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0126.171] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\lb-lu", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\lb-lu", lpFilePart=0x0) returned 0x4b [0126.171] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\lb-lu\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\lb-lu\\", lpFilePart=0x0) returned 0x4c [0126.171] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\lb-lu\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d78b0 [0126.171] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0126.171] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0126.172] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0126.173] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0126.173] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0126.173] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0126.173] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0126.173] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\lb-lu", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\lb-lu", lpFilePart=0x0) returned 0x4b [0126.173] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\lb-lu\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\lb-lu\\", lpFilePart=0x0) returned 0x4c [0126.173] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\lb-lu\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d78b0 [0126.173] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0126.173] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0126.173] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0126.173] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0126.173] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0126.173] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0126.173] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\lb-lu\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\lb-lu\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0126.174] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0126.174] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\lb-lu\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\lb-lu\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x22a8110 | out: lpFileInformation=0x22a8110*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4779501b, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x4779501b, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x4779501b, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x25ad0)) returned 1 [0126.174] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0126.174] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\lb-lu\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\lb-lu\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0126.174] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0126.174] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\lb-lu\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\lb-lu\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x22a82d0 | out: lpFileInformation=0x22a82d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4779501b, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x4779501b, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x4779501b, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x25ad0)) returned 1 [0126.174] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0126.174] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\lb-lu\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\lb-lu\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0126.174] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0126.174] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\lb-lu\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\lb-lu\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0126.175] GetFileType (hFile=0x444) returned 0x1 [0126.175] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0126.175] GetFileType (hFile=0x444) returned 0x1 [0126.175] ReadFile (in: hFile=0x444, lpBuffer=0x22aa780, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x22aa780*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0126.186] CloseHandle (hObject=0x444) returned 1 [0126.190] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\lb-lu\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\lb-lu\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0126.190] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0126.190] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\lb-lu\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\lb-lu\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0126.190] GetFileType (hFile=0x444) returned 0x1 [0126.190] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0126.190] GetFileType (hFile=0x444) returned 0x1 [0126.190] WriteFile (in: hFile=0x444, lpBuffer=0x22a8470*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x22a8470*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0126.190] CloseHandle (hObject=0x444) returned 1 [0126.190] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\lb-lu\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\lb-lu\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0126.190] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\lb-lu\\FileSync.LocalizedResources.dll.mui.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\lb-lu\\FileSync.LocalizedResources.dll.mui.xuy", lpFilePart=0x0) returned 0x73 [0126.190] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0126.191] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\lb-lu\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\lb-lu\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4779501b, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x4779501b, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3710e040, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x25ad0)) returned 1 [0126.191] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0126.191] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\lb-lu\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\lb-lu\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\lb-lu\\FileSync.LocalizedResources.dll.mui.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\lb-lu\\filesync.localizedresources.dll.mui.xuy")) returned 1 [0126.192] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0126.192] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\lt", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\lt", lpFilePart=0x0) returned 0x48 [0126.192] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\lt\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\lt\\", lpFilePart=0x0) returned 0x49 [0126.192] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\lt\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7370 [0126.192] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0126.192] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0126.192] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0126.192] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0126.192] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0126.193] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0126.193] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0126.193] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\lt", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\lt", lpFilePart=0x0) returned 0x48 [0126.193] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\lt\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\lt\\", lpFilePart=0x0) returned 0x49 [0126.193] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\lt\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d75b0 [0126.193] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0126.193] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0126.193] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0126.193] FindClose (in: hFindFile=0x5d75b0 | out: hFindFile=0x5d75b0) returned 1 [0126.193] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0126.193] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0126.193] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\lt\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\lt\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0126.193] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0126.193] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\lt\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\lt\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x2328db8 | out: lpFileInformation=0x2328db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47fffd34, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x47fffd34, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x48002453, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x234d0)) returned 1 [0126.194] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0126.194] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\lt\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\lt\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0126.194] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0126.194] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\lt\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\lt\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x2328f78 | out: lpFileInformation=0x2328f78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47fffd34, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x47fffd34, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x48002453, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x234d0)) returned 1 [0126.194] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0126.194] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\lt\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\lt\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0126.194] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0126.194] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\lt\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\lt\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0126.194] GetFileType (hFile=0x444) returned 0x1 [0126.195] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0126.195] GetFileType (hFile=0x444) returned 0x1 [0126.195] ReadFile (in: hFile=0x444, lpBuffer=0x232b428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x232b428*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0126.236] CloseHandle (hObject=0x444) returned 1 [0126.236] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\lt\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\lt\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0126.236] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0126.236] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\lt\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\lt\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0126.236] GetFileType (hFile=0x444) returned 0x1 [0126.236] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0126.236] GetFileType (hFile=0x444) returned 0x1 [0126.236] WriteFile (in: hFile=0x444, lpBuffer=0x21621c0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x21621c0*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0126.237] CloseHandle (hObject=0x444) returned 1 [0126.237] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\lt\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\lt\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0126.237] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\lt\\FileSync.LocalizedResources.dll.mui.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\lt\\FileSync.LocalizedResources.dll.mui.xuy", lpFilePart=0x0) returned 0x70 [0126.237] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0126.237] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\lt\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\lt\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47fffd34, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x47fffd34, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x37180826, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x234d0)) returned 1 [0126.237] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0126.237] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\lt\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\lt\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\lt\\FileSync.LocalizedResources.dll.mui.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\lt\\filesync.localizedresources.dll.mui.xuy")) returned 1 [0126.238] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0126.238] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\lv", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\lv", lpFilePart=0x0) returned 0x48 [0126.238] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\lv\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\lv\\", lpFilePart=0x0) returned 0x49 [0126.238] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\lv\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7d90 [0126.238] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0126.238] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0126.239] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0126.239] FindClose (in: hFindFile=0x5d7d90 | out: hFindFile=0x5d7d90) returned 1 [0126.239] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0126.239] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0126.239] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0126.239] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\lv", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\lv", lpFilePart=0x0) returned 0x48 [0126.239] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\lv\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\lv\\", lpFilePart=0x0) returned 0x49 [0126.239] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\lv\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7550 [0126.239] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0126.239] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0126.239] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0126.240] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0126.240] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0126.240] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0126.240] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\lv\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\lv\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0126.240] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0126.240] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\lv\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\lv\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x21a9a48 | out: lpFileInformation=0x21a9a48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4870a24b, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x4870a24b, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x4870a24b, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x22ed0)) returned 1 [0126.240] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0126.240] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\lv\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\lv\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0126.240] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0126.240] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\lv\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\lv\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x21a9c08 | out: lpFileInformation=0x21a9c08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4870a24b, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x4870a24b, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x4870a24b, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x22ed0)) returned 1 [0126.240] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0126.240] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\lv\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\lv\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0126.240] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0126.240] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\lv\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\lv\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0126.241] GetFileType (hFile=0x444) returned 0x1 [0126.241] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0126.241] GetFileType (hFile=0x444) returned 0x1 [0126.241] ReadFile (in: hFile=0x444, lpBuffer=0x21ac0b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x21ac0b8*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0126.258] CloseHandle (hObject=0x444) returned 1 [0126.258] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\lv\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\lv\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0126.258] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0126.258] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\lv\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\lv\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0126.258] GetFileType (hFile=0x444) returned 0x1 [0126.258] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0126.258] GetFileType (hFile=0x444) returned 0x1 [0126.258] WriteFile (in: hFile=0x444, lpBuffer=0x21a9da8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x21a9da8*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0126.259] CloseHandle (hObject=0x444) returned 1 [0126.259] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\lv\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\lv\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0126.259] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\lv\\FileSync.LocalizedResources.dll.mui.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\lv\\FileSync.LocalizedResources.dll.mui.xuy", lpFilePart=0x0) returned 0x70 [0126.259] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0126.259] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\lv\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\lv\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4870a24b, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x4870a24b, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x371a6985, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x22ed0)) returned 1 [0126.259] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0126.259] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\lv\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\lv\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\lv\\FileSync.LocalizedResources.dll.mui.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\lv\\filesync.localizedresources.dll.mui.xuy")) returned 1 [0126.260] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0126.260] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mi-nz", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mi-nz", lpFilePart=0x0) returned 0x4b [0126.260] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mi-nz\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mi-nz\\", lpFilePart=0x0) returned 0x4c [0126.261] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mi-nz\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d81b0 [0126.261] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0126.261] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0126.261] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0126.261] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0126.261] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0126.261] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0126.261] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0126.261] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mi-nz", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mi-nz", lpFilePart=0x0) returned 0x4b [0126.261] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mi-nz\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mi-nz\\", lpFilePart=0x0) returned 0x4c [0126.261] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mi-nz\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7370 [0126.262] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0126.262] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0126.262] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0126.262] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0126.262] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0126.262] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0126.262] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mi-nz\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mi-nz\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0126.262] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0126.262] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mi-nz\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\mi-nz\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x222a7a0 | out: lpFileInformation=0x222a7a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48dbebfb, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x48dbebfb, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x48dbebfb, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x222d0)) returned 1 [0126.263] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0126.263] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mi-nz\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mi-nz\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0126.263] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0126.263] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mi-nz\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\mi-nz\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x222a960 | out: lpFileInformation=0x222a960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48dbebfb, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x48dbebfb, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x48dbebfb, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x222d0)) returned 1 [0126.263] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0126.263] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mi-nz\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mi-nz\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0126.263] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0126.263] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mi-nz\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\mi-nz\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0126.264] GetFileType (hFile=0x444) returned 0x1 [0126.264] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0126.264] GetFileType (hFile=0x444) returned 0x1 [0126.264] ReadFile (in: hFile=0x444, lpBuffer=0x222ce10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x222ce10*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0126.283] CloseHandle (hObject=0x444) returned 1 [0126.283] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mi-nz\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mi-nz\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0126.283] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0126.283] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mi-nz\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\mi-nz\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0126.283] GetFileType (hFile=0x444) returned 0x1 [0126.283] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0126.284] GetFileType (hFile=0x444) returned 0x1 [0126.284] WriteFile (in: hFile=0x444, lpBuffer=0x222ab00*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x222ab00*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0126.284] CloseHandle (hObject=0x444) returned 1 [0126.284] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mi-nz\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mi-nz\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0126.284] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mi-nz\\FileSync.LocalizedResources.dll.mui.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mi-nz\\FileSync.LocalizedResources.dll.mui.xuy", lpFilePart=0x0) returned 0x73 [0126.284] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0126.284] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mi-nz\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\mi-nz\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48dbebfb, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x48dbebfb, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x371f2e66, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x222d0)) returned 1 [0126.284] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0126.284] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mi-nz\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\mi-nz\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mi-nz\\FileSync.LocalizedResources.dll.mui.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\mi-nz\\filesync.localizedresources.dll.mui.xuy")) returned 1 [0126.285] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0126.285] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mk", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mk", lpFilePart=0x0) returned 0x48 [0126.285] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mk\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mk\\", lpFilePart=0x0) returned 0x49 [0126.285] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mk\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7a30 [0126.286] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0126.286] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0126.286] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0126.286] FindClose (in: hFindFile=0x5d7a30 | out: hFindFile=0x5d7a30) returned 1 [0126.286] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0126.286] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0126.286] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0126.286] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mk", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mk", lpFilePart=0x0) returned 0x48 [0126.286] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mk\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mk\\", lpFilePart=0x0) returned 0x49 [0126.286] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mk\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d79d0 [0126.286] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0126.286] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0126.287] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0126.287] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0126.287] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0126.287] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0126.287] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mk\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mk\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0126.287] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0126.287] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mk\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\mk\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x22ab448 | out: lpFileInformation=0x22ab448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4944d363, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x4944d363, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x4944d363, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x238d0)) returned 1 [0126.287] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0126.287] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mk\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mk\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0126.287] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0126.287] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mk\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\mk\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x22ab608 | out: lpFileInformation=0x22ab608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4944d363, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x4944d363, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x4944d363, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x238d0)) returned 1 [0126.287] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0126.287] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mk\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mk\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0126.287] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0126.287] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mk\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\mk\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0126.288] GetFileType (hFile=0x444) returned 0x1 [0126.288] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0126.288] GetFileType (hFile=0x444) returned 0x1 [0126.288] ReadFile (in: hFile=0x444, lpBuffer=0x22adab8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x22adab8*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0126.308] CloseHandle (hObject=0x444) returned 1 [0126.308] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mk\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mk\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0126.308] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0126.308] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mk\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\mk\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0126.308] GetFileType (hFile=0x444) returned 0x1 [0126.308] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0126.308] GetFileType (hFile=0x444) returned 0x1 [0126.308] WriteFile (in: hFile=0x444, lpBuffer=0x22ab7a8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x22ab7a8*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0126.309] CloseHandle (hObject=0x444) returned 1 [0126.309] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mk\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mk\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0126.309] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mk\\FileSync.LocalizedResources.dll.mui.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mk\\FileSync.LocalizedResources.dll.mui.xuy", lpFilePart=0x0) returned 0x70 [0126.309] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0126.309] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mk\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\mk\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4944d363, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x4944d363, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x37218f7f, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x238d0)) returned 1 [0126.309] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0126.309] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mk\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\mk\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mk\\FileSync.LocalizedResources.dll.mui.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\mk\\filesync.localizedresources.dll.mui.xuy")) returned 1 [0126.310] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0126.310] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ml-in", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ml-in", lpFilePart=0x0) returned 0x4b [0126.310] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ml-in\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ml-in\\", lpFilePart=0x0) returned 0x4c [0126.310] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ml-in\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d73d0 [0126.310] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0126.311] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0126.311] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0126.311] FindClose (in: hFindFile=0x5d73d0 | out: hFindFile=0x5d73d0) returned 1 [0126.311] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0126.311] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0126.311] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0126.311] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ml-in", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ml-in", lpFilePart=0x0) returned 0x4b [0126.311] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ml-in\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ml-in\\", lpFilePart=0x0) returned 0x4c [0126.311] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ml-in\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d78b0 [0126.311] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0126.311] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0126.311] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0126.311] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0126.312] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0126.312] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0126.312] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ml-in\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ml-in\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0126.312] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0126.312] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ml-in\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ml-in\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x232c1a0 | out: lpFileInformation=0x232c1a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49b4e266, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x49b4e266, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x49b4e266, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x268d0)) returned 1 [0126.312] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0126.312] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ml-in\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ml-in\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0126.312] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0126.312] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ml-in\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ml-in\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x232c360 | out: lpFileInformation=0x232c360*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49b4e266, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x49b4e266, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x49b4e266, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x268d0)) returned 1 [0126.312] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0126.312] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ml-in\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ml-in\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0126.312] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0126.312] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ml-in\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ml-in\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0126.313] GetFileType (hFile=0x444) returned 0x1 [0126.313] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0126.313] GetFileType (hFile=0x444) returned 0x1 [0126.313] ReadFile (in: hFile=0x444, lpBuffer=0x232e810, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x232e810*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0126.356] CloseHandle (hObject=0x444) returned 1 [0126.356] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ml-in\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ml-in\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0126.356] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0126.356] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ml-in\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ml-in\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0126.357] GetFileType (hFile=0x444) returned 0x1 [0126.357] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0126.357] GetFileType (hFile=0x444) returned 0x1 [0126.357] WriteFile (in: hFile=0x444, lpBuffer=0x21621c0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x21621c0*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0126.357] CloseHandle (hObject=0x444) returned 1 [0126.357] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ml-in\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ml-in\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0126.357] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ml-in\\FileSync.LocalizedResources.dll.mui.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ml-in\\FileSync.LocalizedResources.dll.mui.xuy", lpFilePart=0x0) returned 0x73 [0126.357] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0126.357] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ml-in\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ml-in\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49b4e266, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x49b4e266, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3728ba3e, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x268d0)) returned 1 [0126.357] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0126.357] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ml-in\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ml-in\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ml-in\\FileSync.LocalizedResources.dll.mui.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ml-in\\filesync.localizedresources.dll.mui.xuy")) returned 1 [0126.358] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0126.358] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mn", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mn", lpFilePart=0x0) returned 0x48 [0126.358] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mn\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mn\\", lpFilePart=0x0) returned 0x49 [0126.358] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mn\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7a30 [0126.359] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0126.359] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0126.359] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0126.359] FindClose (in: hFindFile=0x5d7a30 | out: hFindFile=0x5d7a30) returned 1 [0126.359] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0126.359] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0126.359] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0126.359] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mn", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mn", lpFilePart=0x0) returned 0x48 [0126.359] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mn\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mn\\", lpFilePart=0x0) returned 0x49 [0126.359] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mn\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7a30 [0126.360] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0126.360] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0126.361] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0126.361] FindClose (in: hFindFile=0x5d7a30 | out: hFindFile=0x5d7a30) returned 1 [0126.361] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0126.361] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0126.361] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mn\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mn\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0126.361] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0126.361] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mn\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\mn\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x21ace28 | out: lpFileInformation=0x21ace28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49fecab5, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x49fecab5, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x49fecab5, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x224d0)) returned 1 [0126.361] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0126.361] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mn\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mn\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0126.361] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0126.361] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mn\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\mn\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x21acfe8 | out: lpFileInformation=0x21acfe8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49fecab5, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x49fecab5, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x49fecab5, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x224d0)) returned 1 [0126.361] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0126.361] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mn\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mn\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0126.361] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0126.361] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mn\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\mn\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0126.362] GetFileType (hFile=0x444) returned 0x1 [0126.362] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0126.362] GetFileType (hFile=0x444) returned 0x1 [0126.362] ReadFile (in: hFile=0x444, lpBuffer=0x21af498, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x21af498*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0126.374] CloseHandle (hObject=0x444) returned 1 [0126.375] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mn\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mn\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0126.375] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0126.375] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mn\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\mn\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0126.375] GetFileType (hFile=0x444) returned 0x1 [0126.375] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0126.375] GetFileType (hFile=0x444) returned 0x1 [0126.375] WriteFile (in: hFile=0x444, lpBuffer=0x21ad188*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x21ad188*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0126.375] CloseHandle (hObject=0x444) returned 1 [0126.376] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mn\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mn\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0126.376] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mn\\FileSync.LocalizedResources.dll.mui.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mn\\FileSync.LocalizedResources.dll.mui.xuy", lpFilePart=0x0) returned 0x70 [0126.376] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0126.376] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mn\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\mn\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49fecab5, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x49fecab5, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x372d7ca7, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x224d0)) returned 1 [0126.376] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0126.376] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mn\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\mn\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mn\\FileSync.LocalizedResources.dll.mui.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\mn\\filesync.localizedresources.dll.mui.xuy")) returned 1 [0126.377] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0126.377] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mr", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mr", lpFilePart=0x0) returned 0x48 [0126.377] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mr\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mr\\", lpFilePart=0x0) returned 0x49 [0126.377] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mr\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7550 [0126.377] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0126.377] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0126.378] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0126.378] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0126.378] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0126.378] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0126.378] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0126.378] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mr", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mr", lpFilePart=0x0) returned 0x48 [0126.378] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mr\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mr\\", lpFilePart=0x0) returned 0x49 [0126.378] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mr\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7fd0 [0126.378] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0126.378] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0126.378] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0126.378] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0126.379] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0126.379] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0126.379] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mr\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mr\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0126.379] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0126.379] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mr\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\mr\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x222dad0 | out: lpFileInformation=0x222dad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a35a0bc, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x4a35a0bc, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x4a35a0bc, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x224d0)) returned 1 [0126.379] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0126.379] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mr\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mr\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0126.379] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0126.379] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mr\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\mr\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x222dc90 | out: lpFileInformation=0x222dc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a35a0bc, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x4a35a0bc, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x4a35a0bc, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x224d0)) returned 1 [0126.379] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0126.379] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mr\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mr\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0126.379] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0126.379] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mr\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\mr\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0126.380] GetFileType (hFile=0x444) returned 0x1 [0126.380] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0126.380] GetFileType (hFile=0x444) returned 0x1 [0126.380] ReadFile (in: hFile=0x444, lpBuffer=0x2230140, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x2230140*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0126.401] CloseHandle (hObject=0x444) returned 1 [0126.401] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mr\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mr\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0126.401] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0126.401] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mr\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\mr\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0126.401] GetFileType (hFile=0x444) returned 0x1 [0126.401] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0126.401] GetFileType (hFile=0x444) returned 0x1 [0126.401] WriteFile (in: hFile=0x444, lpBuffer=0x222de30*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x222de30*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0126.402] CloseHandle (hObject=0x444) returned 1 [0126.402] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mr\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mr\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0126.402] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mr\\FileSync.LocalizedResources.dll.mui.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mr\\FileSync.LocalizedResources.dll.mui.xuy", lpFilePart=0x0) returned 0x70 [0126.402] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0126.402] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mr\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\mr\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a35a0bc, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x4a35a0bc, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x372fe43d, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x224d0)) returned 1 [0126.402] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0126.402] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mr\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\mr\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mr\\FileSync.LocalizedResources.dll.mui.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\mr\\filesync.localizedresources.dll.mui.xuy")) returned 1 [0126.403] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0126.403] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ms", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ms", lpFilePart=0x0) returned 0x48 [0126.403] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ms\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ms\\", lpFilePart=0x0) returned 0x49 [0126.403] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ms\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7a90 [0126.404] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0126.404] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0126.404] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0126.405] FindClose (in: hFindFile=0x5d7a90 | out: hFindFile=0x5d7a90) returned 1 [0126.405] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0126.405] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0126.405] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0126.405] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ms", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ms", lpFilePart=0x0) returned 0x48 [0126.405] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ms\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ms\\", lpFilePart=0x0) returned 0x49 [0126.405] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ms\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d81b0 [0126.405] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0126.405] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0126.405] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0126.406] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0126.406] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0126.406] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0126.406] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ms\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ms\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0126.406] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0126.406] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ms\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ms\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x22ae778 | out: lpFileInformation=0x22ae778*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b1f43d0, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x4b1f43d0, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x4b1f5777, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x232d0)) returned 1 [0126.406] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0126.406] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ms\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ms\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0126.406] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0126.406] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ms\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ms\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x22ae938 | out: lpFileInformation=0x22ae938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b1f43d0, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x4b1f43d0, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x4b1f5777, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x232d0)) returned 1 [0126.406] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0126.407] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ms\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ms\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0126.407] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0126.407] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ms\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ms\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0126.407] GetFileType (hFile=0x444) returned 0x1 [0126.407] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0126.408] GetFileType (hFile=0x444) returned 0x1 [0126.408] ReadFile (in: hFile=0x444, lpBuffer=0x22b0de8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x22b0de8*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0126.445] CloseHandle (hObject=0x444) returned 1 [0126.445] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ms\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ms\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0126.445] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0126.445] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ms\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ms\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0126.446] GetFileType (hFile=0x444) returned 0x1 [0126.446] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0126.446] GetFileType (hFile=0x444) returned 0x1 [0126.446] WriteFile (in: hFile=0x444, lpBuffer=0x22aead8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x22aead8*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0126.446] CloseHandle (hObject=0x444) returned 1 [0126.446] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ms\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ms\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0126.446] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ms\\FileSync.LocalizedResources.dll.mui.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ms\\FileSync.LocalizedResources.dll.mui.xuy", lpFilePart=0x0) returned 0x70 [0126.446] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0126.446] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ms\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ms\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b1f43d0, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x4b1f43d0, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x37370747, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x232d0)) returned 1 [0126.446] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0126.447] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ms\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ms\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ms\\FileSync.LocalizedResources.dll.mui.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ms\\filesync.localizedresources.dll.mui.xuy")) returned 1 [0126.448] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0126.448] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mt-mt", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mt-mt", lpFilePart=0x0) returned 0x4b [0126.448] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mt-mt\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mt-mt\\", lpFilePart=0x0) returned 0x4c [0126.448] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mt-mt\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7c70 [0126.448] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0126.448] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0126.448] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0126.448] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0126.448] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0126.448] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0126.448] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0126.448] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mt-mt", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mt-mt", lpFilePart=0x0) returned 0x4b [0126.449] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mt-mt\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mt-mt\\", lpFilePart=0x0) returned 0x4c [0126.449] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mt-mt\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d81b0 [0126.449] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0126.449] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0126.449] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0126.449] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0126.449] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0126.449] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0126.449] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mt-mt\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mt-mt\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0126.449] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0126.449] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mt-mt\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\mt-mt\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x232f4d0 | out: lpFileInformation=0x232f4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b631a5e, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x4b631a5e, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x4b631a5e, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x236d0)) returned 1 [0126.450] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0126.450] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mt-mt\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mt-mt\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0126.450] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0126.450] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mt-mt\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\mt-mt\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x232f690 | out: lpFileInformation=0x232f690*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b631a5e, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x4b631a5e, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x4b631a5e, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x236d0)) returned 1 [0126.450] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0126.450] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mt-mt\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mt-mt\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0126.450] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0126.450] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mt-mt\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\mt-mt\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0126.451] GetFileType (hFile=0x444) returned 0x1 [0126.451] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0126.451] GetFileType (hFile=0x444) returned 0x1 [0126.451] ReadFile (in: hFile=0x444, lpBuffer=0x2331b40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x2331b40*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0126.495] CloseHandle (hObject=0x444) returned 1 [0126.495] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mt-mt\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mt-mt\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0126.496] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0126.496] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mt-mt\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\mt-mt\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0126.496] GetFileType (hFile=0x444) returned 0x1 [0126.496] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0126.496] GetFileType (hFile=0x444) returned 0x1 [0126.496] WriteFile (in: hFile=0x444, lpBuffer=0x21621c0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x21621c0*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0126.496] CloseHandle (hObject=0x444) returned 1 [0126.496] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mt-mt\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mt-mt\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0126.497] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mt-mt\\FileSync.LocalizedResources.dll.mui.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mt-mt\\FileSync.LocalizedResources.dll.mui.xuy", lpFilePart=0x0) returned 0x73 [0126.497] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0126.497] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mt-mt\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\mt-mt\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b631a5e, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x4b631a5e, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x373e2eba, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x236d0)) returned 1 [0126.497] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0126.497] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mt-mt\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\mt-mt\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mt-mt\\FileSync.LocalizedResources.dll.mui.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\mt-mt\\filesync.localizedresources.dll.mui.xuy")) returned 1 [0126.498] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0126.498] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nb-no", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nb-no", lpFilePart=0x0) returned 0x4b [0126.498] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nb-no\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nb-no\\", lpFilePart=0x0) returned 0x4c [0126.498] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nb-no\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d78b0 [0126.500] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0126.500] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0126.500] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0126.500] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0126.501] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0126.501] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0126.501] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0126.501] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nb-no", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nb-no", lpFilePart=0x0) returned 0x4b [0126.501] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nb-no\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nb-no\\", lpFilePart=0x0) returned 0x4c [0126.501] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nb-no\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7550 [0126.501] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0126.501] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0126.501] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0126.501] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0126.501] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0126.501] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0126.501] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nb-no\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nb-no\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0126.501] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0126.502] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nb-no\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\nb-no\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x21b0218 | out: lpFileInformation=0x21b0218*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b9c537f, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x4b9c537f, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x4b9eb5de, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x212d0)) returned 1 [0126.502] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0126.502] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nb-no\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nb-no\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0126.502] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0126.502] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nb-no\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\nb-no\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x21b03d8 | out: lpFileInformation=0x21b03d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b9c537f, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x4b9c537f, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x4b9eb5de, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x212d0)) returned 1 [0126.502] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0126.502] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nb-no\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nb-no\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0126.502] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0126.502] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nb-no\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\nb-no\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0126.503] GetFileType (hFile=0x444) returned 0x1 [0126.503] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0126.503] GetFileType (hFile=0x444) returned 0x1 [0126.503] ReadFile (in: hFile=0x444, lpBuffer=0x21b2888, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x21b2888*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0126.531] CloseHandle (hObject=0x444) returned 1 [0126.531] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nb-no\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nb-no\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0126.531] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0126.531] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nb-no\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\nb-no\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0126.532] GetFileType (hFile=0x444) returned 0x1 [0126.532] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0126.532] GetFileType (hFile=0x444) returned 0x1 [0126.532] WriteFile (in: hFile=0x444, lpBuffer=0x21b0578*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x21b0578*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0126.532] CloseHandle (hObject=0x444) returned 1 [0126.532] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nb-no\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nb-no\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0126.532] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nb-no\\FileSync.LocalizedResources.dll.mui.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nb-no\\FileSync.LocalizedResources.dll.mui.xuy", lpFilePart=0x0) returned 0x73 [0126.532] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0126.532] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nb-no\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\nb-no\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b9c537f, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x4b9c537f, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x37455491, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x212d0)) returned 1 [0126.532] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0126.532] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nb-no\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\nb-no\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nb-no\\FileSync.LocalizedResources.dll.mui.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\nb-no\\filesync.localizedresources.dll.mui.xuy")) returned 1 [0126.533] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0126.533] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ne-np", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ne-np", lpFilePart=0x0) returned 0x4b [0126.533] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ne-np\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ne-np\\", lpFilePart=0x0) returned 0x4c [0126.533] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ne-np\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7cd0 [0126.533] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0126.534] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0126.534] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0126.534] FindClose (in: hFindFile=0x5d7cd0 | out: hFindFile=0x5d7cd0) returned 1 [0126.534] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0126.534] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0126.534] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0126.534] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ne-np", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ne-np", lpFilePart=0x0) returned 0x4b [0126.534] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ne-np\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ne-np\\", lpFilePart=0x0) returned 0x4c [0126.534] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ne-np\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d78b0 [0126.534] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0126.534] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0126.534] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0126.535] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0126.535] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0126.535] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0126.535] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ne-np\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ne-np\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0126.535] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0126.535] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ne-np\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ne-np\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x2230f70 | out: lpFileInformation=0x2230f70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4beafea3, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x4beafea3, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x4beafea3, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x240d0)) returned 1 [0126.535] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0126.535] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ne-np\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ne-np\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0126.535] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0126.535] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ne-np\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ne-np\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x2231130 | out: lpFileInformation=0x2231130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4beafea3, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x4beafea3, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x4beafea3, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x240d0)) returned 1 [0126.535] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0126.535] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ne-np\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ne-np\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0126.535] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0126.535] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ne-np\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ne-np\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0126.536] GetFileType (hFile=0x444) returned 0x1 [0126.536] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0126.536] GetFileType (hFile=0x444) returned 0x1 [0126.536] ReadFile (in: hFile=0x444, lpBuffer=0x22335e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x22335e0*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0126.560] CloseHandle (hObject=0x444) returned 1 [0126.561] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ne-np\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ne-np\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0126.561] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0126.561] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ne-np\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ne-np\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0126.561] GetFileType (hFile=0x444) returned 0x1 [0126.561] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0126.561] GetFileType (hFile=0x444) returned 0x1 [0126.561] WriteFile (in: hFile=0x444, lpBuffer=0x22312d0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x22312d0*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0126.561] CloseHandle (hObject=0x444) returned 1 [0126.561] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ne-np\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ne-np\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0126.561] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ne-np\\FileSync.LocalizedResources.dll.mui.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ne-np\\FileSync.LocalizedResources.dll.mui.xuy", lpFilePart=0x0) returned 0x73 [0126.561] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0126.562] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ne-np\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ne-np\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4beafea3, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x4beafea3, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3747b70e, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x240d0)) returned 1 [0126.562] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0126.562] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ne-np\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ne-np\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ne-np\\FileSync.LocalizedResources.dll.mui.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ne-np\\filesync.localizedresources.dll.mui.xuy")) returned 1 [0126.564] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0126.564] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nl", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nl", lpFilePart=0x0) returned 0x48 [0126.564] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nl\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nl\\", lpFilePart=0x0) returned 0x49 [0126.564] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nl\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d79d0 [0126.564] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0126.565] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0126.565] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0126.565] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0126.565] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0126.565] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0126.565] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0126.565] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nl", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nl", lpFilePart=0x0) returned 0x48 [0126.565] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nl\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nl\\", lpFilePart=0x0) returned 0x49 [0126.565] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nl\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7d30 [0126.565] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0126.565] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0126.565] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0126.566] FindClose (in: hFindFile=0x5d7d30 | out: hFindFile=0x5d7d30) returned 1 [0126.566] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0126.566] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0126.566] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nl\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nl\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0126.566] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0126.566] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nl\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\nl\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x22b1c18 | out: lpFileInformation=0x22b1c18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c28fbc3, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x4c28fbc3, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x4c28fbc3, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x240d0)) returned 1 [0126.568] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0126.568] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nl\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nl\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0126.568] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0126.568] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nl\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\nl\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x22b1dd8 | out: lpFileInformation=0x22b1dd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c28fbc3, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x4c28fbc3, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x4c28fbc3, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x240d0)) returned 1 [0126.568] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0126.568] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nl\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nl\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0126.568] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0126.568] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nl\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\nl\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0126.569] GetFileType (hFile=0x444) returned 0x1 [0126.569] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0126.569] GetFileType (hFile=0x444) returned 0x1 [0126.569] ReadFile (in: hFile=0x444, lpBuffer=0x22b4288, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x22b4288*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0126.581] CloseHandle (hObject=0x444) returned 1 [0126.581] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nl\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nl\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0126.581] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0126.581] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nl\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\nl\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0126.582] GetFileType (hFile=0x444) returned 0x1 [0126.582] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0126.582] GetFileType (hFile=0x444) returned 0x1 [0126.582] WriteFile (in: hFile=0x444, lpBuffer=0x22b1f78*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x22b1f78*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0126.582] CloseHandle (hObject=0x444) returned 1 [0126.582] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nl\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nl\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0126.582] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nl\\FileSync.LocalizedResources.dll.mui.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nl\\FileSync.LocalizedResources.dll.mui.xuy", lpFilePart=0x0) returned 0x70 [0126.582] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0126.582] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nl\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\nl\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c28fbc3, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x4c28fbc3, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x374c7c5b, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x240d0)) returned 1 [0126.582] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0126.582] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nl\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\nl\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nl\\FileSync.LocalizedResources.dll.mui.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\nl\\filesync.localizedresources.dll.mui.xuy")) returned 1 [0126.583] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0126.583] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nn-no", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nn-no", lpFilePart=0x0) returned 0x4b [0126.583] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nn-no\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nn-no\\", lpFilePart=0x0) returned 0x4c [0126.583] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nn-no\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d75b0 [0126.584] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0126.584] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0126.584] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0126.584] FindClose (in: hFindFile=0x5d75b0 | out: hFindFile=0x5d75b0) returned 1 [0126.584] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0126.584] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0126.584] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0126.584] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nn-no", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nn-no", lpFilePart=0x0) returned 0x4b [0126.584] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nn-no\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nn-no\\", lpFilePart=0x0) returned 0x4c [0126.584] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nn-no\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d78b0 [0126.585] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0126.585] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0126.585] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0126.585] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0126.585] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0126.585] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0126.585] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nn-no\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nn-no\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0126.585] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0126.585] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nn-no\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\nn-no\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x2332970 | out: lpFileInformation=0x2332970*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c649684, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x4c649684, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x4c649684, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x210d0)) returned 1 [0126.585] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0126.585] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nn-no\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nn-no\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0126.585] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0126.586] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nn-no\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\nn-no\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x2332b30 | out: lpFileInformation=0x2332b30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c649684, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x4c649684, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x4c649684, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x210d0)) returned 1 [0126.586] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0126.586] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nn-no\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nn-no\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0126.586] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0126.586] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nn-no\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\nn-no\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0126.586] GetFileType (hFile=0x444) returned 0x1 [0126.586] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0126.586] GetFileType (hFile=0x444) returned 0x1 [0126.587] ReadFile (in: hFile=0x444, lpBuffer=0x2334fe0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x2334fe0*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0126.651] CloseHandle (hObject=0x444) returned 1 [0126.651] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nn-no\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nn-no\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0126.651] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0126.651] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nn-no\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\nn-no\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0126.652] GetFileType (hFile=0x444) returned 0x1 [0126.652] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0126.652] GetFileType (hFile=0x444) returned 0x1 [0126.652] WriteFile (in: hFile=0x444, lpBuffer=0x21621c0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x21621c0*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0126.652] CloseHandle (hObject=0x444) returned 1 [0126.652] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nn-no\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nn-no\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0126.652] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nn-no\\FileSync.LocalizedResources.dll.mui.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nn-no\\FileSync.LocalizedResources.dll.mui.xuy", lpFilePart=0x0) returned 0x73 [0126.652] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0126.652] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nn-no\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\nn-no\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c649684, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x4c649684, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x37560908, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x210d0)) returned 1 [0126.653] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0126.653] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nn-no\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\nn-no\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nn-no\\FileSync.LocalizedResources.dll.mui.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\nn-no\\filesync.localizedresources.dll.mui.xuy")) returned 1 [0126.654] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0126.654] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nso-za", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nso-za", lpFilePart=0x0) returned 0x4c [0126.654] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nso-za\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nso-za\\", lpFilePart=0x0) returned 0x4d [0126.654] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nso-za\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d81b0 [0126.655] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0126.655] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0126.655] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0126.655] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0126.655] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0126.655] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0126.655] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0126.655] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nso-za", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nso-za", lpFilePart=0x0) returned 0x4c [0126.655] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nso-za\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nso-za\\", lpFilePart=0x0) returned 0x4d [0126.655] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nso-za\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7a90 [0126.656] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0126.656] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0126.656] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0126.656] FindClose (in: hFindFile=0x5d7a90 | out: hFindFile=0x5d7a90) returned 1 [0126.659] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0126.659] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0126.659] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nso-za\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nso-za\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x70 [0126.659] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0126.659] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nso-za\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\nso-za\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x21b36d8 | out: lpFileInformation=0x21b36d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c9b6c84, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x4c9b6c84, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x4c9b6c84, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x246c8)) returned 1 [0126.661] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0126.661] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nso-za\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nso-za\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x70 [0126.661] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0126.661] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nso-za\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\nso-za\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x21b38a0 | out: lpFileInformation=0x21b38a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c9b6c84, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x4c9b6c84, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x4c9b6c84, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x246c8)) returned 1 [0126.661] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0126.661] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nso-za\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nso-za\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x70 [0126.661] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0126.661] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nso-za\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\nso-za\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0126.662] GetFileType (hFile=0x444) returned 0x1 [0126.662] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0126.662] GetFileType (hFile=0x444) returned 0x1 [0126.662] ReadFile (in: hFile=0x444, lpBuffer=0x21b5d60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x21b5d60*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0126.675] CloseHandle (hObject=0x444) returned 1 [0126.676] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nso-za\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nso-za\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x70 [0126.676] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0126.676] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nso-za\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\nso-za\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0126.676] GetFileType (hFile=0x444) returned 0x1 [0126.676] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0126.676] GetFileType (hFile=0x444) returned 0x1 [0126.676] WriteFile (in: hFile=0x444, lpBuffer=0x21b3a48*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x21b3a48*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0126.676] CloseHandle (hObject=0x444) returned 1 [0126.676] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nso-za\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nso-za\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x70 [0126.676] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nso-za\\FileSync.LocalizedResources.dll.mui.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nso-za\\FileSync.LocalizedResources.dll.mui.xuy", lpFilePart=0x0) returned 0x74 [0126.676] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0126.676] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nso-za\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\nso-za\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c9b6c84, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x4c9b6c84, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x375ac886, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x246c8)) returned 1 [0126.676] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0126.677] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nso-za\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\nso-za\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nso-za\\FileSync.LocalizedResources.dll.mui.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\nso-za\\filesync.localizedresources.dll.mui.xuy")) returned 1 [0126.677] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0126.678] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\or-in", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\or-in", lpFilePart=0x0) returned 0x4b [0126.678] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\or-in\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\or-in\\", lpFilePart=0x0) returned 0x4c [0126.678] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\or-in\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d81b0 [0126.678] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0126.678] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0126.678] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0126.678] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0126.678] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0126.678] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0126.678] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0126.678] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\or-in", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\or-in", lpFilePart=0x0) returned 0x4b [0126.678] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\or-in\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\or-in\\", lpFilePart=0x0) returned 0x4c [0126.679] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\or-in\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7610 [0126.679] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0126.679] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0126.679] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0126.679] FindClose (in: hFindFile=0x5d7610 | out: hFindFile=0x5d7610) returned 1 [0126.679] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0126.679] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0126.679] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\or-in\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\or-in\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0126.679] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0126.679] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\or-in\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\or-in\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x2234468 | out: lpFileInformation=0x2234468*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4cff8f40, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x4cff8f40, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x4cff8f40, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x25ec8)) returned 1 [0126.679] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0126.679] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\or-in\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\or-in\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0126.679] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0126.680] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\or-in\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\or-in\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x2234628 | out: lpFileInformation=0x2234628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4cff8f40, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x4cff8f40, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x4cff8f40, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x25ec8)) returned 1 [0126.680] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0126.680] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\or-in\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\or-in\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0126.680] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0126.680] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\or-in\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\or-in\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0126.680] GetFileType (hFile=0x444) returned 0x1 [0126.680] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0126.680] GetFileType (hFile=0x444) returned 0x1 [0126.680] ReadFile (in: hFile=0x444, lpBuffer=0x2236ad8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x2236ad8*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0126.694] CloseHandle (hObject=0x444) returned 1 [0126.694] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\or-in\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\or-in\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0126.694] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0126.694] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\or-in\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\or-in\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0126.694] GetFileType (hFile=0x444) returned 0x1 [0126.694] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0126.694] GetFileType (hFile=0x444) returned 0x1 [0126.694] WriteFile (in: hFile=0x444, lpBuffer=0x22347c8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x22347c8*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0126.694] CloseHandle (hObject=0x444) returned 1 [0126.694] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\or-in\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\or-in\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0126.695] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\or-in\\FileSync.LocalizedResources.dll.mui.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\or-in\\FileSync.LocalizedResources.dll.mui.xuy", lpFilePart=0x0) returned 0x73 [0126.695] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0126.695] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\or-in\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\or-in\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4cff8f40, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x4cff8f40, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x375d2ad2, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x25ec8)) returned 1 [0126.695] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0126.695] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\or-in\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\or-in\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\or-in\\FileSync.LocalizedResources.dll.mui.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\or-in\\filesync.localizedresources.dll.mui.xuy")) returned 1 [0126.696] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0126.696] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pa", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pa", lpFilePart=0x0) returned 0x48 [0126.696] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pa\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pa\\", lpFilePart=0x0) returned 0x49 [0126.696] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pa\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7a90 [0126.696] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0126.696] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0126.696] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0126.696] FindClose (in: hFindFile=0x5d7a90 | out: hFindFile=0x5d7a90) returned 1 [0126.696] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0126.696] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0126.696] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0126.696] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pa", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pa", lpFilePart=0x0) returned 0x48 [0126.696] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pa\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pa\\", lpFilePart=0x0) returned 0x49 [0126.696] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pa\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7df0 [0126.697] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0126.697] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0126.697] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0126.697] FindClose (in: hFindFile=0x5d7df0 | out: hFindFile=0x5d7df0) returned 1 [0126.697] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0126.697] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0126.697] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pa\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pa\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0126.697] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0126.697] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pa\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\pa\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x22b5110 | out: lpFileInformation=0x22b5110*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d4715af, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x4d4715af, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x4d4715af, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x232d0)) returned 1 [0126.698] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0126.698] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pa\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pa\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0126.698] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0126.698] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pa\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\pa\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x22b52d0 | out: lpFileInformation=0x22b52d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d4715af, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x4d4715af, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x4d4715af, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x232d0)) returned 1 [0126.698] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0126.698] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pa\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pa\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0126.698] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0126.698] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pa\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\pa\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0126.699] GetFileType (hFile=0x444) returned 0x1 [0126.699] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0126.699] GetFileType (hFile=0x444) returned 0x1 [0126.699] ReadFile (in: hFile=0x444, lpBuffer=0x22b7780, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x22b7780*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0126.711] CloseHandle (hObject=0x444) returned 1 [0126.711] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pa\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pa\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0126.711] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0126.711] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pa\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\pa\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0126.712] GetFileType (hFile=0x444) returned 0x1 [0126.712] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0126.712] GetFileType (hFile=0x444) returned 0x1 [0126.712] WriteFile (in: hFile=0x444, lpBuffer=0x22b5470*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x22b5470*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0126.712] CloseHandle (hObject=0x444) returned 1 [0126.712] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pa\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pa\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0126.712] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pa\\FileSync.LocalizedResources.dll.mui.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pa\\FileSync.LocalizedResources.dll.mui.xuy", lpFilePart=0x0) returned 0x70 [0126.712] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0126.712] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pa\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\pa\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d4715af, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x4d4715af, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x375f8cf9, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x232d0)) returned 1 [0126.712] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0126.712] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pa\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\pa\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pa\\FileSync.LocalizedResources.dll.mui.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\pa\\filesync.localizedresources.dll.mui.xuy")) returned 1 [0126.713] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0126.713] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pa-arab", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pa-arab", lpFilePart=0x0) returned 0x4d [0126.713] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pa-arab\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pa-arab\\", lpFilePart=0x0) returned 0x4e [0126.713] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pa-arab\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7370 [0126.713] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0126.714] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0126.714] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0126.714] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0126.714] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0126.714] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0126.714] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0126.714] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pa-arab", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pa-arab", lpFilePart=0x0) returned 0x4d [0126.714] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pa-arab\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pa-arab\\", lpFilePart=0x0) returned 0x4e [0126.714] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pa-arab\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7a30 [0126.714] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0126.714] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0126.714] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0126.715] FindClose (in: hFindFile=0x5d7a30 | out: hFindFile=0x5d7a30) returned 1 [0126.715] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0126.715] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0126.715] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pa-arab\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pa-arab\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x71 [0126.715] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0126.715] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pa-arab\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\pa-arab\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x2335ec8 | out: lpFileInformation=0x2335ec8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d7b8961, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x4d7b8961, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x4d7b8961, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x22ac8)) returned 1 [0126.715] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0126.715] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pa-arab\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pa-arab\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x71 [0126.715] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0126.715] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pa-arab\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\pa-arab\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x2336090 | out: lpFileInformation=0x2336090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d7b8961, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x4d7b8961, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x4d7b8961, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x22ac8)) returned 1 [0126.715] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0126.715] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pa-arab\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pa-arab\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x71 [0126.715] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0126.715] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pa-arab\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\pa-arab\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0126.716] GetFileType (hFile=0x444) returned 0x1 [0126.716] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0126.716] GetFileType (hFile=0x444) returned 0x1 [0126.716] ReadFile (in: hFile=0x444, lpBuffer=0x2338550, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x2338550*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0126.757] CloseHandle (hObject=0x444) returned 1 [0126.757] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pa-arab\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pa-arab\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x71 [0126.757] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0126.757] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pa-arab\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\pa-arab\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0126.757] GetFileType (hFile=0x444) returned 0x1 [0126.757] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0126.757] GetFileType (hFile=0x444) returned 0x1 [0126.757] WriteFile (in: hFile=0x444, lpBuffer=0x21621c8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x21621c8*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0126.758] CloseHandle (hObject=0x444) returned 1 [0126.758] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pa-arab\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pa-arab\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x71 [0126.758] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pa-arab\\FileSync.LocalizedResources.dll.mui.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pa-arab\\FileSync.LocalizedResources.dll.mui.xuy", lpFilePart=0x0) returned 0x75 [0126.758] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0126.758] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pa-arab\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\pa-arab\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d7b8961, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x4d7b8961, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3766b4d2, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x22ac8)) returned 1 [0126.758] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0126.758] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pa-arab\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\pa-arab\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pa-arab\\FileSync.LocalizedResources.dll.mui.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\pa-arab\\filesync.localizedresources.dll.mui.xuy")) returned 1 [0126.759] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0126.759] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pl", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pl", lpFilePart=0x0) returned 0x48 [0126.759] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pl\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pl\\", lpFilePart=0x0) returned 0x49 [0126.759] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pl\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7670 [0126.759] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0126.759] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0126.760] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0126.760] FindClose (in: hFindFile=0x5d7670 | out: hFindFile=0x5d7670) returned 1 [0126.760] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0126.760] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0126.760] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0126.760] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pl", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pl", lpFilePart=0x0) returned 0x48 [0126.760] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pl\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pl\\", lpFilePart=0x0) returned 0x49 [0126.760] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pl\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d78b0 [0126.760] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0126.760] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0126.760] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0126.760] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0126.761] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0126.761] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0126.761] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pl\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pl\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0126.761] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0126.761] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pl\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\pl\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x21b6ba0 | out: lpFileInformation=0x21b6ba0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4db4c1d5, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x4db4c1d5, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x4db4c1d5, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x24ed0)) returned 1 [0126.762] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0126.762] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pl\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pl\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0126.762] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0126.762] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pl\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\pl\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x21b6d60 | out: lpFileInformation=0x21b6d60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4db4c1d5, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x4db4c1d5, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x4db4c1d5, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x24ed0)) returned 1 [0126.762] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0126.762] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pl\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pl\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0126.762] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0126.762] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pl\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\pl\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0126.763] GetFileType (hFile=0x444) returned 0x1 [0126.763] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0126.763] GetFileType (hFile=0x444) returned 0x1 [0126.763] ReadFile (in: hFile=0x444, lpBuffer=0x21b9210, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x21b9210*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0126.776] CloseHandle (hObject=0x444) returned 1 [0127.107] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pl\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pl\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0127.107] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0127.107] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pl\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\pl\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0127.107] GetFileType (hFile=0x444) returned 0x1 [0127.107] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0127.107] GetFileType (hFile=0x444) returned 0x1 [0127.107] WriteFile (in: hFile=0x444, lpBuffer=0x21b6f00*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x21b6f00*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0127.107] CloseHandle (hObject=0x444) returned 1 [0127.108] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pl\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pl\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0127.108] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pl\\FileSync.LocalizedResources.dll.mui.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pl\\FileSync.LocalizedResources.dll.mui.xuy", lpFilePart=0x0) returned 0x70 [0127.108] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0127.108] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pl\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\pl\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4db4c1d5, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x4db4c1d5, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x379b28d9, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x24ed0)) returned 1 [0127.108] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0127.108] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pl\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\pl\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pl\\FileSync.LocalizedResources.dll.mui.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\pl\\filesync.localizedresources.dll.mui.xuy")) returned 1 [0127.109] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0127.110] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\platforms", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\platforms", lpFilePart=0x0) returned 0x4f [0127.110] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\platforms\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\platforms\\", lpFilePart=0x0) returned 0x50 [0127.110] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\platforms\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7550 [0127.110] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0127.110] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0127.110] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0127.110] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0127.110] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0127.110] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0127.110] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0127.110] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\platforms", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\platforms", lpFilePart=0x0) returned 0x4f [0127.110] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\platforms\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\platforms\\", lpFilePart=0x0) returned 0x50 [0127.110] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\platforms\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7d90 [0127.111] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0127.111] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0127.111] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0127.111] FindClose (in: hFindFile=0x5d7d90 | out: hFindFile=0x5d7d90) returned 1 [0127.111] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0127.111] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0127.111] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\platforms\\qwindows.dll", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\platforms\\qwindows.dll", lpFilePart=0x0) returned 0x5c [0127.111] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0127.111] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\platforms\\qwindows.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\platforms\\qwindows.dll"), fInfoLevelId=0x0, lpFileInformation=0x2237828 | out: lpFileInformation=0x2237828*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4deb97ce, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x4deb97ce, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x4deb97ce, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x10c4d0)) returned 1 [0127.111] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0127.111] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\platforms\\qwindows.dll", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\platforms\\qwindows.dll", lpFilePart=0x0) returned 0x5c [0127.111] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0127.111] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\platforms\\qwindows.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\platforms\\qwindows.dll"), fInfoLevelId=0x0, lpFileInformation=0x22379a0 | out: lpFileInformation=0x22379a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4deb97ce, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x4deb97ce, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x4deb97ce, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x10c4d0)) returned 1 [0127.111] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0127.111] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\platforms\\qwindows.dll", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\platforms\\qwindows.dll", lpFilePart=0x0) returned 0x5c [0127.112] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0127.112] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\platforms\\qwindows.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\platforms\\qwindows.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0127.112] GetFileType (hFile=0x444) returned 0x1 [0127.112] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0127.112] GetFileType (hFile=0x444) returned 0x1 [0127.112] ReadFile (in: hFile=0x444, lpBuffer=0x2239dc0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x2239dc0*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0127.138] CloseHandle (hObject=0x444) returned 1 [0127.138] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\platforms\\qwindows.dll", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\platforms\\qwindows.dll", lpFilePart=0x0) returned 0x5c [0127.138] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0127.138] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\platforms\\qwindows.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\platforms\\qwindows.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0127.139] GetFileType (hFile=0x444) returned 0x1 [0127.139] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0127.139] GetFileType (hFile=0x444) returned 0x1 [0127.139] WriteFile (in: hFile=0x444, lpBuffer=0x2237af8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x2237af8*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0127.139] CloseHandle (hObject=0x444) returned 1 [0127.139] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\platforms\\qwindows.dll", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\platforms\\qwindows.dll", lpFilePart=0x0) returned 0x5c [0127.139] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\platforms\\qwindows.dll.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\platforms\\qwindows.dll.xuy", lpFilePart=0x0) returned 0x60 [0127.139] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0127.139] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\platforms\\qwindows.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\platforms\\qwindows.dll"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4deb97ce, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x4deb97ce, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x379fee1a, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x10c4d0)) returned 1 [0127.139] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0127.139] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\platforms\\qwindows.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\platforms\\qwindows.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\platforms\\qwindows.dll.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\platforms\\qwindows.dll.xuy")) returned 1 [0127.140] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0127.140] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\prs-af", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\prs-af", lpFilePart=0x0) returned 0x4c [0127.140] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\prs-af\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\prs-af\\", lpFilePart=0x0) returned 0x4d [0127.141] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\prs-af\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d79d0 [0127.141] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0127.141] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0127.141] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0127.141] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0127.141] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0127.141] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0127.141] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0127.141] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\prs-af", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\prs-af", lpFilePart=0x0) returned 0x4c [0127.142] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\prs-af\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\prs-af\\", lpFilePart=0x0) returned 0x4d [0127.142] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\prs-af\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7c70 [0127.142] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0127.142] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0127.142] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0127.142] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0127.142] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0127.142] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0127.142] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\prs-af\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\prs-af\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x70 [0127.142] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0127.142] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\prs-af\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\prs-af\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x22b8440 | out: lpFileInformation=0x22b8440*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e273296, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x4e273296, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x4e273296, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x220d0)) returned 1 [0127.143] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0127.143] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\prs-af\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\prs-af\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x70 [0127.143] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0127.143] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\prs-af\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\prs-af\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x22b8608 | out: lpFileInformation=0x22b8608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e273296, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x4e273296, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x4e273296, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x220d0)) returned 1 [0127.143] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0127.143] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\prs-af\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\prs-af\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x70 [0127.143] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0127.143] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\prs-af\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\prs-af\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0127.144] GetFileType (hFile=0x444) returned 0x1 [0127.144] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0127.144] GetFileType (hFile=0x444) returned 0x1 [0127.144] ReadFile (in: hFile=0x444, lpBuffer=0x22baac8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x22baac8*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0127.187] CloseHandle (hObject=0x444) returned 1 [0127.208] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\prs-af\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\prs-af\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x70 [0127.208] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0127.208] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\prs-af\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\prs-af\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0127.209] GetFileType (hFile=0x444) returned 0x1 [0127.209] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0127.209] GetFileType (hFile=0x444) returned 0x1 [0127.209] WriteFile (in: hFile=0x444, lpBuffer=0x22b87b0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x22b87b0*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0127.209] CloseHandle (hObject=0x444) returned 1 [0127.209] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\prs-af\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\prs-af\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x70 [0127.209] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\prs-af\\FileSync.LocalizedResources.dll.mui.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\prs-af\\FileSync.LocalizedResources.dll.mui.xuy", lpFilePart=0x0) returned 0x74 [0127.209] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0127.209] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\prs-af\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\prs-af\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e273296, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x4e273296, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x37abd8d9, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x220d0)) returned 1 [0127.209] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0127.209] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\prs-af\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\prs-af\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\prs-af\\FileSync.LocalizedResources.dll.mui.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\prs-af\\filesync.localizedresources.dll.mui.xuy")) returned 1 [0127.210] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0127.210] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pt-br", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pt-br", lpFilePart=0x0) returned 0x4b [0127.210] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pt-br\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pt-br\\", lpFilePart=0x0) returned 0x4c [0127.210] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pt-br\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7c70 [0127.211] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0127.211] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0127.211] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0127.211] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0127.211] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0127.211] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0127.211] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0127.211] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pt-br", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pt-br", lpFilePart=0x0) returned 0x4b [0127.211] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pt-br\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pt-br\\", lpFilePart=0x0) returned 0x4c [0127.211] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pt-br\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7550 [0127.211] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0127.212] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0127.212] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0127.212] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0127.212] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0127.212] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0127.212] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pt-br\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pt-br\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0127.212] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0127.212] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pt-br\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\pt-br\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x23391d0 | out: lpFileInformation=0x23391d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e62cd57, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x4e62cd57, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x4e62cd57, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x236d0)) returned 1 [0127.212] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0127.212] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pt-br\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pt-br\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0127.212] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0127.212] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pt-br\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\pt-br\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x2339390 | out: lpFileInformation=0x2339390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e62cd57, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x4e62cd57, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x4e62cd57, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x236d0)) returned 1 [0127.212] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0127.212] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pt-br\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pt-br\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0127.212] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0127.212] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pt-br\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\pt-br\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0127.213] GetFileType (hFile=0x444) returned 0x1 [0127.213] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0127.213] GetFileType (hFile=0x444) returned 0x1 [0127.213] ReadFile (in: hFile=0x444, lpBuffer=0x233b840, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x233b840*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0127.302] CloseHandle (hObject=0x444) returned 1 [0127.302] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pt-br\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pt-br\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0127.302] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0127.302] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pt-br\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\pt-br\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0127.302] GetFileType (hFile=0x444) returned 0x1 [0127.302] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0127.302] GetFileType (hFile=0x444) returned 0x1 [0127.302] WriteFile (in: hFile=0x444, lpBuffer=0x21621c0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x21621c0*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0127.302] CloseHandle (hObject=0x444) returned 1 [0127.303] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pt-br\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pt-br\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0127.303] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pt-br\\FileSync.LocalizedResources.dll.mui.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pt-br\\FileSync.LocalizedResources.dll.mui.xuy", lpFilePart=0x0) returned 0x73 [0127.303] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0127.303] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pt-br\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\pt-br\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e62cd57, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x4e62cd57, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x37ba2af1, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x236d0)) returned 1 [0127.303] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0127.303] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pt-br\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\pt-br\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pt-br\\FileSync.LocalizedResources.dll.mui.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\pt-br\\filesync.localizedresources.dll.mui.xuy")) returned 1 [0127.304] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0127.304] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pt-pt", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pt-pt", lpFilePart=0x0) returned 0x4b [0127.304] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pt-pt\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pt-pt\\", lpFilePart=0x0) returned 0x4c [0127.304] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pt-pt\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7550 [0127.304] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0127.304] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0127.305] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0127.305] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0127.305] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0127.305] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0127.305] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0127.305] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pt-pt", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pt-pt", lpFilePart=0x0) returned 0x4b [0127.305] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pt-pt\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pt-pt\\", lpFilePart=0x0) returned 0x4c [0127.305] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pt-pt\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7d90 [0127.305] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0127.305] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0127.305] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0127.305] FindClose (in: hFindFile=0x5d7d90 | out: hFindFile=0x5d7d90) returned 1 [0127.305] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0127.305] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0127.306] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pt-pt\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pt-pt\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0127.306] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0127.306] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pt-pt\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\pt-pt\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x21b9f18 | out: lpFileInformation=0x21b9f18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e9e680e, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x4e9e680e, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x4e9e680e, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x242d0)) returned 1 [0127.306] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0127.306] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pt-pt\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pt-pt\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0127.306] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0127.307] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pt-pt\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\pt-pt\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x21ba0d8 | out: lpFileInformation=0x21ba0d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e9e680e, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x4e9e680e, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x4e9e680e, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x242d0)) returned 1 [0127.307] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0127.307] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pt-pt\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pt-pt\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0127.307] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0127.307] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pt-pt\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\pt-pt\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0127.307] GetFileType (hFile=0x444) returned 0x1 [0127.307] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0127.307] GetFileType (hFile=0x444) returned 0x1 [0127.307] ReadFile (in: hFile=0x444, lpBuffer=0x21bc588, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x21bc588*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0127.320] CloseHandle (hObject=0x444) returned 1 [0127.320] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pt-pt\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pt-pt\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0127.320] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0127.320] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pt-pt\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\pt-pt\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0127.320] GetFileType (hFile=0x444) returned 0x1 [0127.320] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0127.320] GetFileType (hFile=0x444) returned 0x1 [0127.320] WriteFile (in: hFile=0x444, lpBuffer=0x21ba278*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x21ba278*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0127.320] CloseHandle (hObject=0x444) returned 1 [0127.321] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pt-pt\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pt-pt\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0127.321] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pt-pt\\FileSync.LocalizedResources.dll.mui.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pt-pt\\FileSync.LocalizedResources.dll.mui.xuy", lpFilePart=0x0) returned 0x73 [0127.321] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0127.321] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pt-pt\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\pt-pt\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e9e680e, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x4e9e680e, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x37bc888b, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x242d0)) returned 1 [0127.321] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0127.321] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pt-pt\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\pt-pt\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pt-pt\\FileSync.LocalizedResources.dll.mui.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\pt-pt\\filesync.localizedresources.dll.mui.xuy")) returned 1 [0127.322] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0127.322] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml", lpFilePart=0x0) returned 0x49 [0127.322] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\", lpFilePart=0x0) returned 0x4a [0127.322] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d81b0 [0127.322] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0127.322] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0127.322] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0127.322] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0127.322] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0127.323] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0127.323] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0127.323] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0127.323] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0127.323] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml", lpFilePart=0x0) returned 0x49 [0127.323] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\", lpFilePart=0x0) returned 0x4a [0127.323] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d79d0 [0127.323] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0127.323] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0127.323] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0127.323] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0127.323] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0127.323] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0127.323] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0127.323] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0127.323] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\fabricmdl2.ttf", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\fabricmdl2.ttf", lpFilePart=0x0) returned 0x58 [0127.324] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0127.324] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\fabricmdl2.ttf" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\fabricmdl2.ttf"), fInfoLevelId=0x0, lpFileInformation=0x223b2c0 | out: lpFileInformation=0x223b2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4eda03b7, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x4eda03b7, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x4eda03b7, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x1a05c)) returned 1 [0127.324] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0127.324] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\fabricmdl2.ttf", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\fabricmdl2.ttf", lpFilePart=0x0) returned 0x58 [0127.324] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0127.324] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\fabricmdl2.ttf" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\fabricmdl2.ttf"), fInfoLevelId=0x0, lpFileInformation=0x223b430 | out: lpFileInformation=0x223b430*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4eda03b7, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x4eda03b7, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x4eda03b7, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x1a05c)) returned 1 [0127.324] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0127.324] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\fabricmdl2.ttf", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\fabricmdl2.ttf", lpFilePart=0x0) returned 0x58 [0127.324] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0127.324] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\fabricmdl2.ttf" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\fabricmdl2.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0127.325] GetFileType (hFile=0x444) returned 0x1 [0127.325] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0127.325] GetFileType (hFile=0x444) returned 0x1 [0127.325] ReadFile (in: hFile=0x444, lpBuffer=0x223d840, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x223d840*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0127.407] CloseHandle (hObject=0x444) returned 1 [0127.414] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\fabricmdl2.ttf", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\fabricmdl2.ttf", lpFilePart=0x0) returned 0x58 [0127.414] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0127.414] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\fabricmdl2.ttf" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\fabricmdl2.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0127.414] GetFileType (hFile=0x444) returned 0x1 [0127.414] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0127.414] GetFileType (hFile=0x444) returned 0x1 [0127.414] WriteFile (in: hFile=0x444, lpBuffer=0x223b580*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x223b580*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0127.415] CloseHandle (hObject=0x444) returned 1 [0127.415] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\fabricmdl2.ttf", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\fabricmdl2.ttf", lpFilePart=0x0) returned 0x58 [0127.415] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\fabricmdl2.ttf.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\fabricmdl2.ttf.xuy", lpFilePart=0x0) returned 0x5c [0127.415] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0127.415] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\fabricmdl2.ttf" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\fabricmdl2.ttf"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4eda03b7, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x4eda03b7, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x37cad81a, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x1a05c)) returned 1 [0127.415] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0127.415] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\fabricmdl2.ttf" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\fabricmdl2.ttf"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\fabricmdl2.ttf.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\fabricmdl2.ttf.xuy")) returned 1 [0127.416] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0127.416] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick", lpFilePart=0x0) returned 0x51 [0127.416] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\", lpFilePart=0x0) returned 0x52 [0127.416] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d81b0 [0127.421] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0127.421] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0127.421] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0127.421] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0127.421] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0127.421] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0127.421] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0127.421] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0127.421] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0127.422] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0127.422] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0127.422] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0127.423] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick", lpFilePart=0x0) returned 0x51 [0127.423] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\", lpFilePart=0x0) returned 0x52 [0127.423] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d79d0 [0127.423] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0127.423] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0127.424] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0127.424] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0127.424] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0127.424] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0127.424] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0127.424] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0127.424] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0127.425] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0127.425] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0127.425] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0127.425] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls", lpFilePart=0x0) returned 0x5a [0127.425] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls\\", lpFilePart=0x0) returned 0x5b [0127.425] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d79d0 [0127.426] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0127.426] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0127.426] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0127.426] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0127.426] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0127.426] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0127.426] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0127.426] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls", lpFilePart=0x0) returned 0x5a [0127.426] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls\\", lpFilePart=0x0) returned 0x5b [0127.426] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d7370 [0127.426] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0127.426] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0127.426] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0127.427] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0127.427] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0127.427] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0127.427] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0127.427] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls\\Styles", nBufferLength=0x105, lpBuffer=0x3be130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls\\Styles", lpFilePart=0x0) returned 0x61 [0127.427] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls\\Styles\\", nBufferLength=0x105, lpBuffer=0x3be0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls\\Styles\\", lpFilePart=0x0) returned 0x62 [0127.427] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls\\Styles\\*", lpFindFileData=0x3be2e0 | out: lpFindFileData=0x3be2e0) returned 0x5d7a30 [0127.427] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0127.427] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0127.427] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0127.427] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 0 [0127.427] FindClose (in: hFindFile=0x5d7a30 | out: hFindFile=0x5d7a30) returned 1 [0127.427] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0127.427] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0127.427] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0127.427] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls\\Styles", nBufferLength=0x105, lpBuffer=0x3be130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls\\Styles", lpFilePart=0x0) returned 0x61 [0127.428] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls\\Styles\\", nBufferLength=0x105, lpBuffer=0x3be0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls\\Styles\\", lpFilePart=0x0) returned 0x62 [0127.428] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls\\Styles\\*", lpFindFileData=0x3be2e0 | out: lpFindFileData=0x3be2e0) returned 0x5d81b0 [0127.428] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0127.428] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0127.428] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0127.428] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 0 [0127.428] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0127.428] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0127.428] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0127.428] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls\\Styles\\qmldir", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls\\Styles\\qmldir", lpFilePart=0x0) returned 0x68 [0127.428] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0127.428] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls\\Styles\\qmldir" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\controls\\styles\\qmldir"), fInfoLevelId=0x0, lpFileInformation=0x22c20a0 | out: lpFileInformation=0x22c20a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5e2181fb, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x5e2181fb, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x5e2181fb, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x627)) returned 1 [0127.428] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0127.428] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls\\Styles\\qmldir", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls\\Styles\\qmldir", lpFilePart=0x0) returned 0x68 [0127.428] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0127.429] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls\\Styles\\qmldir" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\controls\\styles\\qmldir"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0127.429] GetFileType (hFile=0x444) returned 0x1 [0127.429] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be400) returned 1 [0127.429] GetFileType (hFile=0x444) returned 0x1 [0127.429] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be628 | out: lpFileSizeHigh=0x3be628*=0x0) returned 0x627 [0127.429] ReadFile (in: hFile=0x444, lpBuffer=0x22c29e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be558, lpOverlapped=0x0 | out: lpBuffer=0x22c29e0*, lpNumberOfBytesRead=0x3be558*=0x627, lpOverlapped=0x0) returned 1 [0127.497] CloseHandle (hObject=0x444) returned 1 [0127.507] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls\\Styles\\qmldir", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls\\Styles\\qmldir", lpFilePart=0x0) returned 0x68 [0127.508] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0127.508] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls\\Styles\\qmldir" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\controls\\styles\\qmldir"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0127.509] GetFileType (hFile=0x444) returned 0x1 [0127.509] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be400) returned 1 [0127.509] GetFileType (hFile=0x444) returned 0x1 [0127.509] WriteFile (in: hFile=0x444, lpBuffer=0x233b8e8*, nNumberOfBytesToWrite=0x630, lpNumberOfBytesWritten=0x3be468, lpOverlapped=0x0 | out: lpBuffer=0x233b8e8*, lpNumberOfBytesWritten=0x3be468*=0x630, lpOverlapped=0x0) returned 1 [0127.510] CloseHandle (hObject=0x444) returned 1 [0127.510] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls\\Styles\\qmldir", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls\\Styles\\qmldir", lpFilePart=0x0) returned 0x68 [0127.510] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls\\Styles\\qmldir.xuy", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls\\Styles\\qmldir.xuy", lpFilePart=0x0) returned 0x6c [0127.510] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0127.510] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls\\Styles\\qmldir" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\controls\\styles\\qmldir"), fInfoLevelId=0x0, lpFileInformation=0x3be670 | out: lpFileInformation=0x3be670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5e2181fb, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x5e2181fb, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x37d926bb, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x630)) returned 1 [0127.510] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0127.510] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls\\Styles\\qmldir" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\controls\\styles\\qmldir"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls\\Styles\\qmldir.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\controls\\styles\\qmldir.xuy")) returned 1 [0127.512] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0127.512] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls\\Styles\\Flat", nBufferLength=0x105, lpBuffer=0x3be0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls\\Styles\\Flat", lpFilePart=0x0) returned 0x66 [0127.512] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls\\Styles\\Flat\\", nBufferLength=0x105, lpBuffer=0x3be060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls\\Styles\\Flat\\", lpFilePart=0x0) returned 0x67 [0127.512] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls\\Styles\\Flat\\*", lpFindFileData=0x3be270 | out: lpFindFileData=0x3be270) returned 0x5d78b0 [0127.512] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0127.512] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0127.512] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0127.512] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 0 [0127.512] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0127.512] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0127.512] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0127.513] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0127.513] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls\\Styles\\Flat", nBufferLength=0x105, lpBuffer=0x3be0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls\\Styles\\Flat", lpFilePart=0x0) returned 0x66 [0127.513] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls\\Styles\\Flat\\", nBufferLength=0x105, lpBuffer=0x3be060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls\\Styles\\Flat\\", lpFilePart=0x0) returned 0x67 [0127.513] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls\\Styles\\Flat\\*", lpFindFileData=0x3be270 | out: lpFindFileData=0x3be270) returned 0x5d7c70 [0127.513] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0127.513] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0127.513] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0127.513] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 0 [0127.513] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0127.513] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0127.513] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0127.513] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls\\Styles\\Flat\\qmldir", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls\\Styles\\Flat\\qmldir", lpFilePart=0x0) returned 0x6d [0127.513] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0127.513] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls\\Styles\\Flat\\qmldir" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\controls\\styles\\flat\\qmldir"), fInfoLevelId=0x0, lpFileInformation=0x233f8c0 | out: lpFileInformation=0x233f8c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5e5aba6b, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x5e5aba6b, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x5e5aba6b, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x6a)) returned 1 [0127.514] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0127.514] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls\\Styles\\Flat\\qmldir", nBufferLength=0x105, lpBuffer=0x3bdf40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls\\Styles\\Flat\\qmldir", lpFilePart=0x0) returned 0x6d [0127.514] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be420) returned 1 [0127.514] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls\\Styles\\Flat\\qmldir" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\controls\\styles\\flat\\qmldir"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0127.514] GetFileType (hFile=0x444) returned 0x1 [0127.514] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be390) returned 1 [0127.514] GetFileType (hFile=0x444) returned 0x1 [0127.514] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be5b8 | out: lpFileSizeHigh=0x3be5b8*=0x0) returned 0x6a [0127.514] ReadFile (in: hFile=0x444, lpBuffer=0x233fc58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be4e8, lpOverlapped=0x0 | out: lpBuffer=0x233fc58*, lpNumberOfBytesRead=0x3be4e8*=0x6a, lpOverlapped=0x0) returned 1 [0127.515] CloseHandle (hObject=0x444) returned 1 [0127.554] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls\\Styles\\Flat\\qmldir", nBufferLength=0x105, lpBuffer=0x3bdf40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls\\Styles\\Flat\\qmldir", lpFilePart=0x0) returned 0x6d [0127.554] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be420) returned 1 [0127.554] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls\\Styles\\Flat\\qmldir" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\controls\\styles\\flat\\qmldir"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0127.556] GetFileType (hFile=0x444) returned 0x1 [0127.556] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be390) returned 1 [0127.556] GetFileType (hFile=0x444) returned 0x1 [0127.556] WriteFile (in: hFile=0x444, lpBuffer=0x21b4740*, nNumberOfBytesToWrite=0x70, lpNumberOfBytesWritten=0x3be3f8, lpOverlapped=0x0 | out: lpBuffer=0x21b4740*, lpNumberOfBytesWritten=0x3be3f8*=0x70, lpOverlapped=0x0) returned 1 [0127.557] CloseHandle (hObject=0x444) returned 1 [0127.557] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls\\Styles\\Flat\\qmldir", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls\\Styles\\Flat\\qmldir", lpFilePart=0x0) returned 0x6d [0127.557] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls\\Styles\\Flat\\qmldir.xuy", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls\\Styles\\Flat\\qmldir.xuy", lpFilePart=0x0) returned 0x71 [0127.557] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0127.557] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls\\Styles\\Flat\\qmldir" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\controls\\styles\\flat\\qmldir"), fInfoLevelId=0x0, lpFileInformation=0x3be600 | out: lpFileInformation=0x3be600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5e5aba6b, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x5e5aba6b, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x37e04e31, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x70)) returned 1 [0127.557] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0127.557] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls\\Styles\\Flat\\qmldir" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\controls\\styles\\flat\\qmldir"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls\\Styles\\Flat\\qmldir.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\controls\\styles\\flat\\qmldir.xuy")) returned 1 [0127.558] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls\\Styles\\Flat\\qtquickextrasflatplugin.dll", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls\\Styles\\Flat\\qtquickextrasflatplugin.dll", lpFilePart=0x0) returned 0x82 [0127.558] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0127.558] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls\\Styles\\Flat\\qtquickextrasflatplugin.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\controls\\styles\\flat\\qtquickextrasflatplugin.dll"), fInfoLevelId=0x0, lpFileInformation=0x21b5a98 | out: lpFileInformation=0x21b5a98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5e965522, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x5e965522, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x5e965522, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0xcb6d0)) returned 1 [0127.558] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0127.558] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls\\Styles\\Flat\\qtquickextrasflatplugin.dll", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls\\Styles\\Flat\\qtquickextrasflatplugin.dll", lpFilePart=0x0) returned 0x82 [0127.558] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0127.558] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls\\Styles\\Flat\\qtquickextrasflatplugin.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\controls\\styles\\flat\\qtquickextrasflatplugin.dll"), fInfoLevelId=0x0, lpFileInformation=0x21b5c70 | out: lpFileInformation=0x21b5c70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5e965522, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x5e965522, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x5e965522, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0xcb6d0)) returned 1 [0127.558] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0127.558] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls\\Styles\\Flat\\qtquickextrasflatplugin.dll", nBufferLength=0x105, lpBuffer=0x3bdfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls\\Styles\\Flat\\qtquickextrasflatplugin.dll", lpFilePart=0x0) returned 0x82 [0127.558] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0127.558] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls\\Styles\\Flat\\qtquickextrasflatplugin.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\controls\\styles\\flat\\qtquickextrasflatplugin.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0127.559] GetFileType (hFile=0x444) returned 0x1 [0127.559] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be420) returned 1 [0127.559] GetFileType (hFile=0x444) returned 0x1 [0127.559] ReadFile (in: hFile=0x444, lpBuffer=0x21b8150, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be538, lpOverlapped=0x0 | out: lpBuffer=0x21b8150*, lpNumberOfBytesRead=0x3be538*=0x1000, lpOverlapped=0x0) returned 1 [0127.614] CloseHandle (hObject=0x444) returned 1 [0127.614] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls\\Styles\\Flat\\qtquickextrasflatplugin.dll", nBufferLength=0x105, lpBuffer=0x3bdfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls\\Styles\\Flat\\qtquickextrasflatplugin.dll", lpFilePart=0x0) returned 0x82 [0127.614] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0127.614] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls\\Styles\\Flat\\qtquickextrasflatplugin.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\controls\\styles\\flat\\qtquickextrasflatplugin.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0127.614] GetFileType (hFile=0x444) returned 0x1 [0127.614] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be420) returned 1 [0127.614] GetFileType (hFile=0x444) returned 0x1 [0127.614] WriteFile (in: hFile=0x444, lpBuffer=0x21b5e28*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be5e8, lpOverlapped=0x0 | out: lpBuffer=0x21b5e28*, lpNumberOfBytesWritten=0x3be5e8*=0x2000, lpOverlapped=0x0) returned 1 [0127.615] CloseHandle (hObject=0x444) returned 1 [0127.615] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls\\Styles\\Flat\\qtquickextrasflatplugin.dll", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls\\Styles\\Flat\\qtquickextrasflatplugin.dll", lpFilePart=0x0) returned 0x82 [0127.615] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls\\Styles\\Flat\\qtquickextrasflatplugin.dll.xuy", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls\\Styles\\Flat\\qtquickextrasflatplugin.dll.xuy", lpFilePart=0x0) returned 0x86 [0127.615] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0127.615] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls\\Styles\\Flat\\qtquickextrasflatplugin.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\controls\\styles\\flat\\qtquickextrasflatplugin.dll"), fInfoLevelId=0x0, lpFileInformation=0x3be600 | out: lpFileInformation=0x3be600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5e965522, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x5e965522, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x37e9d6dc, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xcb6d0)) returned 1 [0127.615] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0127.615] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls\\Styles\\Flat\\qtquickextrasflatplugin.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\controls\\styles\\flat\\qtquickextrasflatplugin.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls\\Styles\\Flat\\qtquickextrasflatplugin.dll.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\controls\\styles\\flat\\qtquickextrasflatplugin.dll.xuy")) returned 1 [0127.616] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0127.616] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2", lpFilePart=0x0) returned 0x5c [0127.616] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\", lpFilePart=0x0) returned 0x5d [0127.616] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d78b0 [0127.707] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0127.707] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0127.707] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0127.707] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0127.707] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0127.708] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0127.708] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0127.708] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0127.708] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0127.708] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0127.708] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0127.708] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0127.709] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0127.709] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0127.709] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0127.709] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2", lpFilePart=0x0) returned 0x5c [0127.709] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\", lpFilePart=0x0) returned 0x5d [0127.709] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d78b0 [0127.710] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0127.710] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0127.710] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0127.710] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0127.711] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0127.711] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0127.711] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0127.711] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0127.711] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0127.711] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0127.711] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0127.711] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0127.712] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0127.712] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0127.712] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\Button.qml", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\Button.qml", lpFilePart=0x0) returned 0x67 [0127.712] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0127.712] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\Button.qml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\controls.2\\button.qml"), fInfoLevelId=0x0, lpFileInformation=0x2239578 | out: lpFileInformation=0x2239578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x594032f1, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x594032f1, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x594032f1, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0xe00)) returned 1 [0127.713] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0127.713] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\Button.qml", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\Button.qml", lpFilePart=0x0) returned 0x67 [0127.713] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0127.713] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\Button.qml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\controls.2\\button.qml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0127.713] GetFileType (hFile=0x444) returned 0x1 [0127.713] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0127.713] GetFileType (hFile=0x444) returned 0x1 [0127.713] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xe00 [0127.713] ReadFile (in: hFile=0x444, lpBuffer=0x223a690, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x223a690*, lpNumberOfBytesRead=0x3be5c8*=0xe00, lpOverlapped=0x0) returned 1 [0127.815] CloseHandle (hObject=0x444) returned 1 [0127.825] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\Button.qml", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\Button.qml", lpFilePart=0x0) returned 0x67 [0127.825] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0127.825] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\Button.qml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\controls.2\\button.qml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0127.827] GetFileType (hFile=0x444) returned 0x1 [0127.827] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0127.827] GetFileType (hFile=0x444) returned 0x1 [0127.827] WriteFile (in: hFile=0x444, lpBuffer=0x22b5cf8*, nNumberOfBytesToWrite=0xe10, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x22b5cf8*, lpNumberOfBytesWritten=0x3be4d8*=0xe10, lpOverlapped=0x0) returned 1 [0127.827] CloseHandle (hObject=0x444) returned 1 [0127.828] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\Button.qml", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\Button.qml", lpFilePart=0x0) returned 0x67 [0127.828] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\Button.qml.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\Button.qml.xuy", lpFilePart=0x0) returned 0x6b [0127.828] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0127.828] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\Button.qml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\controls.2\\button.qml"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x594032f1, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x594032f1, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3808d66c, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xe10)) returned 1 [0127.828] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0127.828] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\Button.qml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\controls.2\\button.qml"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\Button.qml.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\controls.2\\button.qml.xuy")) returned 1 [0127.829] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\Menu.qml", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\Menu.qml", lpFilePart=0x0) returned 0x65 [0127.829] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0127.829] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\Menu.qml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\controls.2\\menu.qml"), fInfoLevelId=0x0, lpFileInformation=0x22b7020 | out: lpFileInformation=0x22b7020*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x597bcdac, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x597bcdac, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x597bcdac, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0xb31)) returned 1 [0127.829] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0127.829] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\Menu.qml", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\Menu.qml", lpFilePart=0x0) returned 0x65 [0127.829] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0127.829] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\Menu.qml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\controls.2\\menu.qml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0127.830] GetFileType (hFile=0x444) returned 0x1 [0127.830] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0127.830] GetFileType (hFile=0x444) returned 0x1 [0127.830] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xb31 [0127.830] ReadFile (in: hFile=0x444, lpBuffer=0x22b7e70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x22b7e70*, lpNumberOfBytesRead=0x3be5c8*=0xb31, lpOverlapped=0x0) returned 1 [0127.831] CloseHandle (hObject=0x444) returned 1 [0127.841] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\Menu.qml", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\Menu.qml", lpFilePart=0x0) returned 0x65 [0127.841] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0127.841] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\Menu.qml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\controls.2\\menu.qml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0127.842] GetFileType (hFile=0x444) returned 0x1 [0127.842] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0127.842] GetFileType (hFile=0x444) returned 0x1 [0127.842] WriteFile (in: hFile=0x444, lpBuffer=0x23326c8*, nNumberOfBytesToWrite=0xb40, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x23326c8*, lpNumberOfBytesWritten=0x3be4d8*=0xb40, lpOverlapped=0x0) returned 1 [0127.845] CloseHandle (hObject=0x444) returned 1 [0127.845] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\Menu.qml", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\Menu.qml", lpFilePart=0x0) returned 0x65 [0127.845] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\Menu.qml.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\Menu.qml.xuy", lpFilePart=0x0) returned 0x69 [0127.846] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0127.846] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\Menu.qml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\controls.2\\menu.qml"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x597bcdac, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x597bcdac, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x380d9983, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xb40)) returned 1 [0127.846] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0127.846] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\Menu.qml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\controls.2\\menu.qml"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\Menu.qml.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\controls.2\\menu.qml.xuy")) returned 1 [0127.847] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\MenuItem.qml", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\MenuItem.qml", lpFilePart=0x0) returned 0x69 [0127.847] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0127.847] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\MenuItem.qml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\controls.2\\menuitem.qml"), fInfoLevelId=0x0, lpFileInformation=0x23339f0 | out: lpFileInformation=0x23339f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59b76870, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x59b76870, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x59b76870, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0xe3e)) returned 1 [0127.847] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0127.847] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\MenuItem.qml", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\MenuItem.qml", lpFilePart=0x0) returned 0x69 [0127.847] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0127.847] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\MenuItem.qml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\controls.2\\menuitem.qml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0127.848] GetFileType (hFile=0x444) returned 0x1 [0127.848] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0127.848] GetFileType (hFile=0x444) returned 0x1 [0127.848] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xe3e [0127.848] ReadFile (in: hFile=0x444, lpBuffer=0x2334b68, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x2334b68*, lpNumberOfBytesRead=0x3be5c8*=0xe3e, lpOverlapped=0x0) returned 1 [0127.913] CloseHandle (hObject=0x444) returned 1 [0127.993] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\MenuItem.qml", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\MenuItem.qml", lpFilePart=0x0) returned 0x69 [0127.993] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0127.993] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\MenuItem.qml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\controls.2\\menuitem.qml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0127.995] GetFileType (hFile=0x444) returned 0x1 [0127.995] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0127.995] GetFileType (hFile=0x444) returned 0x1 [0127.995] WriteFile (in: hFile=0x444, lpBuffer=0x2191ed8*, nNumberOfBytesToWrite=0xe40, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x2191ed8*, lpNumberOfBytesWritten=0x3be4d8*=0xe40, lpOverlapped=0x0) returned 1 [0127.996] CloseHandle (hObject=0x444) returned 1 [0127.996] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\MenuItem.qml", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\MenuItem.qml", lpFilePart=0x0) returned 0x69 [0127.996] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\MenuItem.qml.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\MenuItem.qml.xuy", lpFilePart=0x0) returned 0x6d [0127.996] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0127.996] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\MenuItem.qml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\controls.2\\menuitem.qml"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59b76870, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x59b76870, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x38231361, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xe40)) returned 1 [0127.996] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0127.996] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\MenuItem.qml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\controls.2\\menuitem.qml"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\MenuItem.qml.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\controls.2\\menuitem.qml.xuy")) returned 1 [0127.998] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\plugins.qmltypes", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\plugins.qmltypes", lpFilePart=0x0) returned 0x6d [0127.998] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0127.998] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\plugins.qmltypes" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\controls.2\\plugins.qmltypes"), fInfoLevelId=0x0, lpFileInformation=0x2193220 | out: lpFileInformation=0x2193220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59fa2a39, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x59fa2a39, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x59fa2a39, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x11437)) returned 1 [0127.998] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0127.998] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\plugins.qmltypes", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\plugins.qmltypes", lpFilePart=0x0) returned 0x6d [0127.998] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0127.998] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\plugins.qmltypes" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\controls.2\\plugins.qmltypes"), fInfoLevelId=0x0, lpFileInformation=0x21933c0 | out: lpFileInformation=0x21933c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59fa2a39, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x59fa2a39, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x59fa2a39, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x11437)) returned 1 [0127.998] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0127.998] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\plugins.qmltypes", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\plugins.qmltypes", lpFilePart=0x0) returned 0x6d [0127.998] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0127.998] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\plugins.qmltypes" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\controls.2\\plugins.qmltypes"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0127.999] GetFileType (hFile=0x444) returned 0x1 [0128.000] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0128.000] GetFileType (hFile=0x444) returned 0x1 [0128.000] ReadFile (in: hFile=0x444, lpBuffer=0x2195830, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x2195830*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0128.018] CloseHandle (hObject=0x444) returned 1 [0128.018] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\plugins.qmltypes", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\plugins.qmltypes", lpFilePart=0x0) returned 0x6d [0128.018] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0128.018] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\plugins.qmltypes" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\controls.2\\plugins.qmltypes"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0128.018] GetFileType (hFile=0x444) returned 0x1 [0128.018] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0128.018] GetFileType (hFile=0x444) returned 0x1 [0128.018] WriteFile (in: hFile=0x444, lpBuffer=0x2193540*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x2193540*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0128.018] CloseHandle (hObject=0x444) returned 1 [0128.018] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\plugins.qmltypes", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\plugins.qmltypes", lpFilePart=0x0) returned 0x6d [0128.019] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\plugins.qmltypes.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\plugins.qmltypes.xuy", lpFilePart=0x0) returned 0x71 [0128.019] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0128.019] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\plugins.qmltypes" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\controls.2\\plugins.qmltypes"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59fa2a39, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x59fa2a39, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x382807c9, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x11437)) returned 1 [0128.019] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0128.019] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\plugins.qmltypes" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\controls.2\\plugins.qmltypes"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\plugins.qmltypes.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\controls.2\\plugins.qmltypes.xuy")) returned 1 [0128.020] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\ProgressBar.qml", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\ProgressBar.qml", lpFilePart=0x0) returned 0x6c [0128.020] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0128.020] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\ProgressBar.qml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\controls.2\\progressbar.qml"), fInfoLevelId=0x0, lpFileInformation=0x2211d10 | out: lpFileInformation=0x2211d10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a310043, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x5a310043, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x5a310043, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0xae7)) returned 1 [0128.020] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0128.020] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\ProgressBar.qml", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\ProgressBar.qml", lpFilePart=0x0) returned 0x6c [0128.020] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0128.020] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\ProgressBar.qml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\controls.2\\progressbar.qml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0128.020] GetFileType (hFile=0x444) returned 0x1 [0128.020] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0128.020] GetFileType (hFile=0x444) returned 0x1 [0128.020] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xae7 [0128.020] ReadFile (in: hFile=0x444, lpBuffer=0x2212b40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x2212b40*, lpNumberOfBytesRead=0x3be5c8*=0xae7, lpOverlapped=0x0) returned 1 [0128.053] CloseHandle (hObject=0x444) returned 1 [0128.065] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\ProgressBar.qml", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\ProgressBar.qml", lpFilePart=0x0) returned 0x6c [0128.065] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0128.065] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\ProgressBar.qml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\controls.2\\progressbar.qml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0128.066] GetFileType (hFile=0x444) returned 0x1 [0128.066] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0128.066] GetFileType (hFile=0x444) returned 0x1 [0128.067] WriteFile (in: hFile=0x444, lpBuffer=0x228d220*, nNumberOfBytesToWrite=0xaf0, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x228d220*, lpNumberOfBytesWritten=0x3be4d8*=0xaf0, lpOverlapped=0x0) returned 1 [0128.067] CloseHandle (hObject=0x444) returned 1 [0128.067] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\ProgressBar.qml", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\ProgressBar.qml", lpFilePart=0x0) returned 0x6c [0128.067] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\ProgressBar.qml.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\ProgressBar.qml.xuy", lpFilePart=0x0) returned 0x70 [0128.067] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0128.067] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\ProgressBar.qml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\controls.2\\progressbar.qml"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a310043, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x5a310043, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x382efbdf, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xaf0)) returned 1 [0128.068] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0128.068] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\ProgressBar.qml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\controls.2\\progressbar.qml"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\ProgressBar.qml.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\controls.2\\progressbar.qml.xuy")) returned 1 [0128.069] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\qmldir", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\qmldir", lpFilePart=0x0) returned 0x63 [0128.069] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0128.069] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\qmldir" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\controls.2\\qmldir"), fInfoLevelId=0x0, lpFileInformation=0x228e550 | out: lpFileInformation=0x228e550*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a6efd59, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x5a6efd59, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x5a6efd59, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x8c)) returned 1 [0128.069] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0128.069] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\qmldir", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\qmldir", lpFilePart=0x0) returned 0x63 [0128.069] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0128.069] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\qmldir" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\controls.2\\qmldir"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0128.069] GetFileType (hFile=0x444) returned 0x1 [0128.069] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0128.069] GetFileType (hFile=0x444) returned 0x1 [0128.069] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x8c [0128.069] ReadFile (in: hFile=0x444, lpBuffer=0x228e8d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x228e8d8*, lpNumberOfBytesRead=0x3be5c8*=0x8c, lpOverlapped=0x0) returned 1 [0128.070] CloseHandle (hObject=0x444) returned 1 [0128.080] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\qmldir", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\qmldir", lpFilePart=0x0) returned 0x63 [0128.080] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0128.080] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\qmldir" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\controls.2\\qmldir"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0128.082] GetFileType (hFile=0x444) returned 0x1 [0128.082] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0128.082] GetFileType (hFile=0x444) returned 0x1 [0128.082] WriteFile (in: hFile=0x444, lpBuffer=0x2305b10*, nNumberOfBytesToWrite=0x90, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x2305b10*, lpNumberOfBytesWritten=0x3be4d8*=0x90, lpOverlapped=0x0) returned 1 [0128.083] CloseHandle (hObject=0x444) returned 1 [0128.083] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\qmldir", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\qmldir", lpFilePart=0x0) returned 0x63 [0128.083] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\qmldir.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\qmldir.xuy", lpFilePart=0x0) returned 0x67 [0128.083] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0128.083] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\qmldir" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\controls.2\\qmldir"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a6efd59, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x5a6efd59, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x38315e3d, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x90)) returned 1 [0128.083] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0128.083] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\qmldir" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\controls.2\\qmldir"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\qmldir.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\controls.2\\qmldir.xuy")) returned 1 [0128.084] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\qtquickcontrols2plugin.dll", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\qtquickcontrols2plugin.dll", lpFilePart=0x0) returned 0x77 [0128.084] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0128.084] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\qtquickcontrols2plugin.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\controls.2\\qtquickcontrols2plugin.dll"), fInfoLevelId=0x0, lpFileInformation=0x2306e20 | out: lpFileInformation=0x2306e20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5aacfa67, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x5aacfa67, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x5aacfa67, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x162d0)) returned 1 [0128.084] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0128.084] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\qtquickcontrols2plugin.dll", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\qtquickcontrols2plugin.dll", lpFilePart=0x0) returned 0x77 [0128.084] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0128.084] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\qtquickcontrols2plugin.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\controls.2\\qtquickcontrols2plugin.dll"), fInfoLevelId=0x0, lpFileInformation=0x2306fe0 | out: lpFileInformation=0x2306fe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5aacfa67, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x5aacfa67, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x5aacfa67, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x162d0)) returned 1 [0128.084] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0128.084] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\qtquickcontrols2plugin.dll", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\qtquickcontrols2plugin.dll", lpFilePart=0x0) returned 0x77 [0128.084] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0128.084] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\qtquickcontrols2plugin.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\controls.2\\qtquickcontrols2plugin.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0128.085] GetFileType (hFile=0x444) returned 0x1 [0128.085] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0128.085] GetFileType (hFile=0x444) returned 0x1 [0128.085] ReadFile (in: hFile=0x444, lpBuffer=0x2309490, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x2309490*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0128.211] CloseHandle (hObject=0x444) returned 1 [0128.211] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\qtquickcontrols2plugin.dll", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\qtquickcontrols2plugin.dll", lpFilePart=0x0) returned 0x77 [0128.211] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0128.211] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\qtquickcontrols2plugin.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\controls.2\\qtquickcontrols2plugin.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0128.211] GetFileType (hFile=0x444) returned 0x1 [0128.211] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0128.211] GetFileType (hFile=0x444) returned 0x1 [0128.211] WriteFile (in: hFile=0x444, lpBuffer=0x2146b10*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x2146b10*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0128.211] CloseHandle (hObject=0x444) returned 1 [0128.212] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\qtquickcontrols2plugin.dll", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\qtquickcontrols2plugin.dll", lpFilePart=0x0) returned 0x77 [0128.212] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\qtquickcontrols2plugin.dll.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\qtquickcontrols2plugin.dll.xuy", lpFilePart=0x0) returned 0x7b [0128.212] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0128.212] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\qtquickcontrols2plugin.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\controls.2\\qtquickcontrols2plugin.dll"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5aacfa67, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x5aacfa67, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x38446fdf, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x162d0)) returned 1 [0128.212] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0128.212] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\qtquickcontrols2plugin.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\controls.2\\qtquickcontrols2plugin.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\qtquickcontrols2plugin.dll.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\controls.2\\qtquickcontrols2plugin.dll.xuy")) returned 1 [0128.213] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\ScrollBar.qml", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\ScrollBar.qml", lpFilePart=0x0) returned 0x6a [0128.213] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0128.213] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\ScrollBar.qml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\controls.2\\scrollbar.qml"), fInfoLevelId=0x0, lpFileInformation=0x218ae28 | out: lpFileInformation=0x218ae28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5ae895cc, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x5ae895cc, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x5ae895cc, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0xc3a)) returned 1 [0128.213] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0128.213] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\ScrollBar.qml", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\ScrollBar.qml", lpFilePart=0x0) returned 0x6a [0128.213] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0128.213] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\ScrollBar.qml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\controls.2\\scrollbar.qml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0128.213] GetFileType (hFile=0x444) returned 0x1 [0128.213] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0128.213] GetFileType (hFile=0x444) returned 0x1 [0128.213] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xc3a [0128.213] ReadFile (in: hFile=0x444, lpBuffer=0x218bda0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x218bda0*, lpNumberOfBytesRead=0x3be5c8*=0xc3a, lpOverlapped=0x0) returned 1 [0128.216] CloseHandle (hObject=0x444) returned 1 [0128.226] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\ScrollBar.qml", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\ScrollBar.qml", lpFilePart=0x0) returned 0x6a [0128.226] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0128.226] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\ScrollBar.qml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\controls.2\\scrollbar.qml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0128.228] GetFileType (hFile=0x444) returned 0x1 [0128.228] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0128.228] GetFileType (hFile=0x444) returned 0x1 [0128.228] WriteFile (in: hFile=0x444, lpBuffer=0x2206b00*, nNumberOfBytesToWrite=0xc40, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x2206b00*, lpNumberOfBytesWritten=0x3be4d8*=0xc40, lpOverlapped=0x0) returned 1 [0128.229] CloseHandle (hObject=0x444) returned 1 [0128.229] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\ScrollBar.qml", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\ScrollBar.qml", lpFilePart=0x0) returned 0x6a [0128.229] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\ScrollBar.qml.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\ScrollBar.qml.xuy", lpFilePart=0x0) returned 0x6e [0128.229] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0128.229] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\ScrollBar.qml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\controls.2\\scrollbar.qml"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5ae895cc, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x5ae895cc, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3846d656, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xc40)) returned 1 [0128.229] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0128.229] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\ScrollBar.qml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\controls.2\\scrollbar.qml"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\ScrollBar.qml.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\controls.2\\scrollbar.qml.xuy")) returned 1 [0128.230] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\ScrollIndicator.qml", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\ScrollIndicator.qml", lpFilePart=0x0) returned 0x70 [0128.230] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0128.230] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\ScrollIndicator.qml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\controls.2\\scrollindicator.qml"), fInfoLevelId=0x0, lpFileInformation=0x2207e40 | out: lpFileInformation=0x2207e40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b26923e, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x5b26923e, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x5b26923e, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0xba5)) returned 1 [0128.230] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0128.230] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\ScrollIndicator.qml", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\ScrollIndicator.qml", lpFilePart=0x0) returned 0x70 [0128.230] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0128.230] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\ScrollIndicator.qml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\controls.2\\scrollindicator.qml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0128.230] GetFileType (hFile=0x444) returned 0x1 [0128.230] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0128.230] GetFileType (hFile=0x444) returned 0x1 [0128.230] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xba5 [0128.230] ReadFile (in: hFile=0x444, lpBuffer=0x2208d50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x2208d50*, lpNumberOfBytesRead=0x3be5c8*=0xba5, lpOverlapped=0x0) returned 1 [0128.261] CloseHandle (hObject=0x444) returned 1 [0128.272] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\ScrollIndicator.qml", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\ScrollIndicator.qml", lpFilePart=0x0) returned 0x70 [0128.272] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0128.272] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\ScrollIndicator.qml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\controls.2\\scrollindicator.qml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0128.274] GetFileType (hFile=0x444) returned 0x1 [0128.274] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0128.274] GetFileType (hFile=0x444) returned 0x1 [0128.274] WriteFile (in: hFile=0x444, lpBuffer=0x2283800*, nNumberOfBytesToWrite=0xbb0, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x2283800*, lpNumberOfBytesWritten=0x3be4d8*=0xbb0, lpOverlapped=0x0) returned 1 [0128.274] CloseHandle (hObject=0x444) returned 1 [0128.274] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\ScrollIndicator.qml", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\ScrollIndicator.qml", lpFilePart=0x0) returned 0x70 [0128.275] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\ScrollIndicator.qml.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\ScrollIndicator.qml.xuy", lpFilePart=0x0) returned 0x74 [0128.275] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0128.275] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\ScrollIndicator.qml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\controls.2\\scrollindicator.qml"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b26923e, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x5b26923e, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x384df8ce, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xbb0)) returned 1 [0128.275] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0128.275] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\ScrollIndicator.qml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\controls.2\\scrollindicator.qml"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\ScrollIndicator.qml.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\controls.2\\scrollindicator.qml.xuy")) returned 1 [0128.276] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0128.276] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Extras", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Extras", lpFilePart=0x0) returned 0x58 [0128.276] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Extras\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Extras\\", lpFilePart=0x0) returned 0x59 [0128.276] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Extras\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d78b0 [0128.276] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0128.276] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0128.276] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0128.276] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0128.277] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0128.277] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0128.277] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0128.277] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0128.277] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0128.277] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Extras", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Extras", lpFilePart=0x0) returned 0x58 [0128.277] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Extras\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Extras\\", lpFilePart=0x0) returned 0x59 [0128.277] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Extras\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d7370 [0128.277] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0128.277] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0128.277] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0128.278] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0128.278] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0128.278] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0128.278] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0128.278] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0128.278] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Extras\\plugins.qmltypes", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Extras\\plugins.qmltypes", lpFilePart=0x0) returned 0x69 [0128.278] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0128.278] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Extras\\plugins.qmltypes" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\extras\\plugins.qmltypes"), fInfoLevelId=0x0, lpFileInformation=0x2287978 | out: lpFileInformation=0x2287978*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b66f1a1, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x5b66f1a1, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x5b66f1a1, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x74b7)) returned 1 [0128.278] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0128.278] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Extras\\plugins.qmltypes", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Extras\\plugins.qmltypes", lpFilePart=0x0) returned 0x69 [0128.278] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0128.278] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Extras\\plugins.qmltypes" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\extras\\plugins.qmltypes"), fInfoLevelId=0x0, lpFileInformation=0x2287b10 | out: lpFileInformation=0x2287b10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b66f1a1, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x5b66f1a1, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x5b66f1a1, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x74b7)) returned 1 [0128.278] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0128.278] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Extras\\plugins.qmltypes", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Extras\\plugins.qmltypes", lpFilePart=0x0) returned 0x69 [0128.278] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0128.279] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Extras\\plugins.qmltypes" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\extras\\plugins.qmltypes"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0128.279] GetFileType (hFile=0x444) returned 0x1 [0128.279] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0128.279] GetFileType (hFile=0x444) returned 0x1 [0128.279] ReadFile (in: hFile=0x444, lpBuffer=0x2289f70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x2289f70*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0128.307] CloseHandle (hObject=0x444) returned 1 [0128.307] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Extras\\plugins.qmltypes", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Extras\\plugins.qmltypes", lpFilePart=0x0) returned 0x69 [0128.307] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0128.307] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Extras\\plugins.qmltypes" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\extras\\plugins.qmltypes"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0128.307] GetFileType (hFile=0x444) returned 0x1 [0128.307] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0128.307] GetFileType (hFile=0x444) returned 0x1 [0128.307] WriteFile (in: hFile=0x444, lpBuffer=0x2287c88*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x2287c88*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0128.309] CloseHandle (hObject=0x444) returned 1 [0128.309] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Extras\\plugins.qmltypes", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Extras\\plugins.qmltypes", lpFilePart=0x0) returned 0x69 [0128.309] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Extras\\plugins.qmltypes.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Extras\\plugins.qmltypes.xuy", lpFilePart=0x0) returned 0x6d [0128.309] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0128.309] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Extras\\plugins.qmltypes" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\extras\\plugins.qmltypes"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b66f1a1, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x5b66f1a1, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x38547d6a, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x74b7)) returned 1 [0128.309] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0128.309] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Extras\\plugins.qmltypes" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\extras\\plugins.qmltypes"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Extras\\plugins.qmltypes.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\extras\\plugins.qmltypes.xuy")) returned 1 [0128.310] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Extras\\qmldir", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Extras\\qmldir", lpFilePart=0x0) returned 0x5f [0128.310] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0128.310] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Extras\\qmldir" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\extras\\qmldir"), fInfoLevelId=0x0, lpFileInformation=0x2306408 | out: lpFileInformation=0x2306408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b9dc7b2, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x5b9dc7b2, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x5b9dc7b2, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x90)) returned 1 [0128.311] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0128.311] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Extras\\qmldir", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Extras\\qmldir", lpFilePart=0x0) returned 0x5f [0128.311] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0128.311] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Extras\\qmldir" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\extras\\qmldir"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0128.311] GetFileType (hFile=0x444) returned 0x1 [0128.311] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0128.311] GetFileType (hFile=0x444) returned 0x1 [0128.311] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x90 [0128.312] ReadFile (in: hFile=0x444, lpBuffer=0x2306780, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x2306780*, lpNumberOfBytesRead=0x3be5c8*=0x90, lpOverlapped=0x0) returned 1 [0128.312] CloseHandle (hObject=0x444) returned 1 [0128.355] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Extras\\qmldir", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Extras\\qmldir", lpFilePart=0x0) returned 0x5f [0128.355] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0128.355] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Extras\\qmldir" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\extras\\qmldir"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0128.356] GetFileType (hFile=0x444) returned 0x1 [0128.356] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0128.356] GetFileType (hFile=0x444) returned 0x1 [0128.356] WriteFile (in: hFile=0x444, lpBuffer=0x21803c8*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x21803c8*, lpNumberOfBytesWritten=0x3be4d8*=0xa0, lpOverlapped=0x0) returned 1 [0128.357] CloseHandle (hObject=0x444) returned 1 [0128.357] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Extras\\qmldir", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Extras\\qmldir", lpFilePart=0x0) returned 0x5f [0128.357] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Extras\\qmldir.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Extras\\qmldir.xuy", lpFilePart=0x0) returned 0x63 [0128.357] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0128.357] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Extras\\qmldir" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\extras\\qmldir"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b9dc7b2, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x5b9dc7b2, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x385ae3ce, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xa0)) returned 1 [0128.357] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0128.357] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Extras\\qmldir" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\extras\\qmldir"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Extras\\qmldir.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\extras\\qmldir.xuy")) returned 1 [0128.358] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Extras\\qtquickextrasplugin.dll", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Extras\\qtquickextrasplugin.dll", lpFilePart=0x0) returned 0x70 [0128.358] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0128.358] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Extras\\qtquickextrasplugin.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\extras\\qtquickextrasplugin.dll"), fInfoLevelId=0x0, lpFileInformation=0x21816c0 | out: lpFileInformation=0x21816c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5bd49db9, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x5bd49db9, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x5bd49db9, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x122d0)) returned 1 [0128.359] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0128.359] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Extras\\qtquickextrasplugin.dll", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Extras\\qtquickextrasplugin.dll", lpFilePart=0x0) returned 0x70 [0128.359] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0128.359] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Extras\\qtquickextrasplugin.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\extras\\qtquickextrasplugin.dll"), fInfoLevelId=0x0, lpFileInformation=0x2181870 | out: lpFileInformation=0x2181870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5bd49db9, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x5bd49db9, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x5bd49db9, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x122d0)) returned 1 [0128.359] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0128.359] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Extras\\qtquickextrasplugin.dll", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Extras\\qtquickextrasplugin.dll", lpFilePart=0x0) returned 0x70 [0128.359] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0128.359] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Extras\\qtquickextrasplugin.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\extras\\qtquickextrasplugin.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0128.359] GetFileType (hFile=0x444) returned 0x1 [0128.359] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0128.359] GetFileType (hFile=0x444) returned 0x1 [0128.359] ReadFile (in: hFile=0x444, lpBuffer=0x2183d00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x2183d00*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0128.375] CloseHandle (hObject=0x444) returned 1 [0128.375] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Extras\\qtquickextrasplugin.dll", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Extras\\qtquickextrasplugin.dll", lpFilePart=0x0) returned 0x70 [0128.375] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0128.375] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Extras\\qtquickextrasplugin.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\extras\\qtquickextrasplugin.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0128.375] GetFileType (hFile=0x444) returned 0x1 [0128.375] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0128.375] GetFileType (hFile=0x444) returned 0x1 [0128.375] WriteFile (in: hFile=0x444, lpBuffer=0x2181a00*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x2181a00*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0128.375] CloseHandle (hObject=0x444) returned 1 [0128.376] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Extras\\qtquickextrasplugin.dll", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Extras\\qtquickextrasplugin.dll", lpFilePart=0x0) returned 0x70 [0128.376] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Extras\\qtquickextrasplugin.dll.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Extras\\qtquickextrasplugin.dll.xuy", lpFilePart=0x0) returned 0x74 [0128.376] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0128.376] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Extras\\qtquickextrasplugin.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\extras\\qtquickextrasplugin.dll"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5bd49db9, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x5bd49db9, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x385d44b9, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x122d0)) returned 1 [0128.376] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0128.376] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Extras\\qtquickextrasplugin.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\extras\\qtquickextrasplugin.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Extras\\qtquickextrasplugin.dll.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\extras\\qtquickextrasplugin.dll.xuy")) returned 1 [0128.377] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0128.377] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Layouts", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Layouts", lpFilePart=0x0) returned 0x59 [0128.377] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Layouts\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Layouts\\", lpFilePart=0x0) returned 0x5a [0128.377] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Layouts\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d73d0 [0128.377] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0128.377] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0128.377] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0128.378] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0128.378] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0128.378] FindClose (in: hFindFile=0x5d73d0 | out: hFindFile=0x5d73d0) returned 1 [0128.378] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0128.378] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0128.378] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0128.378] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Layouts", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Layouts", lpFilePart=0x0) returned 0x59 [0128.378] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Layouts\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Layouts\\", lpFilePart=0x0) returned 0x5a [0128.378] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Layouts\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d73d0 [0128.378] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0128.378] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0128.378] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0128.379] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0128.379] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0128.379] FindClose (in: hFindFile=0x5d73d0 | out: hFindFile=0x5d73d0) returned 1 [0128.379] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0128.379] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0128.379] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Layouts\\plugins.qmltypes", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Layouts\\plugins.qmltypes", lpFilePart=0x0) returned 0x6a [0128.379] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0128.379] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Layouts\\plugins.qmltypes" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\layouts\\plugins.qmltypes"), fInfoLevelId=0x0, lpFileInformation=0x2203050 | out: lpFileInformation=0x2203050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c0dd615, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x5c0dd615, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x5c0dd615, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0xece)) returned 1 [0128.379] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0128.379] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Layouts\\plugins.qmltypes", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Layouts\\plugins.qmltypes", lpFilePart=0x0) returned 0x6a [0128.379] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0128.379] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Layouts\\plugins.qmltypes" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\layouts\\plugins.qmltypes"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0128.379] GetFileType (hFile=0x444) returned 0x1 [0128.379] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0128.379] GetFileType (hFile=0x444) returned 0x1 [0128.379] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xece [0128.380] ReadFile (in: hFile=0x444, lpBuffer=0x2204268, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x2204268*, lpNumberOfBytesRead=0x3be5c8*=0xece, lpOverlapped=0x0) returned 1 [0128.387] CloseHandle (hObject=0x444) returned 1 [0128.398] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Layouts\\plugins.qmltypes", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Layouts\\plugins.qmltypes", lpFilePart=0x0) returned 0x6a [0128.398] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0128.398] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Layouts\\plugins.qmltypes" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\layouts\\plugins.qmltypes"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0128.400] GetFileType (hFile=0x444) returned 0x1 [0128.400] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0128.400] GetFileType (hFile=0x444) returned 0x1 [0128.400] WriteFile (in: hFile=0x444, lpBuffer=0x227fca0*, nNumberOfBytesToWrite=0xed0, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x227fca0*, lpNumberOfBytesWritten=0x3be4d8*=0xed0, lpOverlapped=0x0) returned 1 [0128.401] CloseHandle (hObject=0x444) returned 1 [0128.401] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Layouts\\plugins.qmltypes", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Layouts\\plugins.qmltypes", lpFilePart=0x0) returned 0x6a [0128.401] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Layouts\\plugins.qmltypes.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Layouts\\plugins.qmltypes.xuy", lpFilePart=0x0) returned 0x6e [0128.401] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0128.401] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Layouts\\plugins.qmltypes" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\layouts\\plugins.qmltypes"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c0dd615, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x5c0dd615, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x38620b0d, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xed0)) returned 1 [0128.401] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0128.401] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Layouts\\plugins.qmltypes" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\layouts\\plugins.qmltypes"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Layouts\\plugins.qmltypes.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\layouts\\plugins.qmltypes.xuy")) returned 1 [0128.402] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Layouts\\qmldir", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Layouts\\qmldir", lpFilePart=0x0) returned 0x60 [0128.402] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0128.402] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Layouts\\qmldir" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\layouts\\qmldir"), fInfoLevelId=0x0, lpFileInformation=0x2280fb8 | out: lpFileInformation=0x2280fb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c470e77, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x5c470e77, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x5c470e77, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x82)) returned 1 [0128.402] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0128.402] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Layouts\\qmldir", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Layouts\\qmldir", lpFilePart=0x0) returned 0x60 [0128.402] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0128.402] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Layouts\\qmldir" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\layouts\\qmldir"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0128.402] GetFileType (hFile=0x444) returned 0x1 [0128.402] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0128.403] GetFileType (hFile=0x444) returned 0x1 [0128.403] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x82 [0128.403] ReadFile (in: hFile=0x444, lpBuffer=0x2281338, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x2281338*, lpNumberOfBytesRead=0x3be5c8*=0x82, lpOverlapped=0x0) returned 1 [0128.403] CloseHandle (hObject=0x444) returned 1 [0128.414] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Layouts\\qmldir", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Layouts\\qmldir", lpFilePart=0x0) returned 0x60 [0128.414] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0128.414] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Layouts\\qmldir" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\layouts\\qmldir"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0128.416] GetFileType (hFile=0x444) returned 0x1 [0128.416] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0128.416] GetFileType (hFile=0x444) returned 0x1 [0128.416] WriteFile (in: hFile=0x444, lpBuffer=0x22f8578*, nNumberOfBytesToWrite=0x90, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x22f8578*, lpNumberOfBytesWritten=0x3be4d8*=0x90, lpOverlapped=0x0) returned 1 [0128.417] CloseHandle (hObject=0x444) returned 1 [0128.417] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Layouts\\qmldir", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Layouts\\qmldir", lpFilePart=0x0) returned 0x60 [0128.417] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Layouts\\qmldir.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Layouts\\qmldir.xuy", lpFilePart=0x0) returned 0x64 [0128.417] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0128.417] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Layouts\\qmldir" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\layouts\\qmldir"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c470e77, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x5c470e77, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x38647840, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x90)) returned 1 [0128.417] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0128.417] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Layouts\\qmldir" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\layouts\\qmldir"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Layouts\\qmldir.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\layouts\\qmldir.xuy")) returned 1 [0128.418] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Layouts\\qquicklayoutsplugin.dll", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Layouts\\qquicklayoutsplugin.dll", lpFilePart=0x0) returned 0x71 [0128.418] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0128.418] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Layouts\\qquicklayoutsplugin.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\layouts\\qquicklayoutsplugin.dll"), fInfoLevelId=0x0, lpFileInformation=0x22f9888 | out: lpFileInformation=0x22f9888*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c8046d6, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x5c8046d6, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x5c8046d6, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x154d0)) returned 1 [0128.418] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0128.418] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Layouts\\qquicklayoutsplugin.dll", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Layouts\\qquicklayoutsplugin.dll", lpFilePart=0x0) returned 0x71 [0128.418] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0128.418] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Layouts\\qquicklayoutsplugin.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\layouts\\qquicklayoutsplugin.dll"), fInfoLevelId=0x0, lpFileInformation=0x22f9a38 | out: lpFileInformation=0x22f9a38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c8046d6, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x5c8046d6, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x5c8046d6, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x154d0)) returned 1 [0128.419] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0128.419] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Layouts\\qquicklayoutsplugin.dll", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Layouts\\qquicklayoutsplugin.dll", lpFilePart=0x0) returned 0x71 [0128.419] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0128.419] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Layouts\\qquicklayoutsplugin.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\layouts\\qquicklayoutsplugin.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0128.419] GetFileType (hFile=0x444) returned 0x1 [0128.419] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0128.419] GetFileType (hFile=0x444) returned 0x1 [0128.419] ReadFile (in: hFile=0x444, lpBuffer=0x22fbec8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x22fbec8*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0128.489] CloseHandle (hObject=0x444) returned 1 [0128.489] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Layouts\\qquicklayoutsplugin.dll", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Layouts\\qquicklayoutsplugin.dll", lpFilePart=0x0) returned 0x71 [0128.489] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0128.489] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Layouts\\qquicklayoutsplugin.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\layouts\\qquicklayoutsplugin.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0128.490] GetFileType (hFile=0x444) returned 0x1 [0128.490] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0128.490] GetFileType (hFile=0x444) returned 0x1 [0128.490] WriteFile (in: hFile=0x444, lpBuffer=0x214d130*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x214d130*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0128.490] CloseHandle (hObject=0x444) returned 1 [0128.490] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Layouts\\qquicklayoutsplugin.dll", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Layouts\\qquicklayoutsplugin.dll", lpFilePart=0x0) returned 0x71 [0128.490] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Layouts\\qquicklayoutsplugin.dll.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Layouts\\qquicklayoutsplugin.dll.xuy", lpFilePart=0x0) returned 0x75 [0128.490] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0128.490] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Layouts\\qquicklayoutsplugin.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\layouts\\qquicklayoutsplugin.dll"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c8046d6, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x5c8046d6, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x386df694, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x154d0)) returned 1 [0128.490] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0128.490] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Layouts\\qquicklayoutsplugin.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\layouts\\qquicklayoutsplugin.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Layouts\\qquicklayoutsplugin.dll.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\layouts\\qquicklayoutsplugin.dll.xuy")) returned 1 [0128.493] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0128.493] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Templates.2", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Templates.2", lpFilePart=0x0) returned 0x5d [0128.493] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Templates.2\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Templates.2\\", lpFilePart=0x0) returned 0x5e [0128.493] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Templates.2\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d7550 [0128.509] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0128.509] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0128.509] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0128.509] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0128.509] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0128.510] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0128.510] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0128.510] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0128.510] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0128.510] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Templates.2", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Templates.2", lpFilePart=0x0) returned 0x5d [0128.510] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Templates.2\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Templates.2\\", lpFilePart=0x0) returned 0x5e [0128.510] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Templates.2\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d7d90 [0128.511] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0128.511] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0128.511] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0128.512] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0128.512] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0128.512] FindClose (in: hFindFile=0x5d7d90 | out: hFindFile=0x5d7d90) returned 1 [0128.512] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0128.512] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0128.512] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Templates.2\\plugins.qmltypes", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Templates.2\\plugins.qmltypes", lpFilePart=0x0) returned 0x6e [0128.512] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0128.513] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Templates.2\\plugins.qmltypes" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\templates.2\\plugins.qmltypes"), fInfoLevelId=0x0, lpFileInformation=0x217efd8 | out: lpFileInformation=0x217efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5cb97f46, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x5cb97f46, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x5cb97f46, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0xc82a)) returned 1 [0128.513] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0128.513] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Templates.2\\plugins.qmltypes", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Templates.2\\plugins.qmltypes", lpFilePart=0x0) returned 0x6e [0128.513] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0128.513] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Templates.2\\plugins.qmltypes" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\templates.2\\plugins.qmltypes"), fInfoLevelId=0x0, lpFileInformation=0x217f178 | out: lpFileInformation=0x217f178*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5cb97f46, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x5cb97f46, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x5cb97f46, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0xc82a)) returned 1 [0128.513] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0128.513] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Templates.2\\plugins.qmltypes", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Templates.2\\plugins.qmltypes", lpFilePart=0x0) returned 0x6e [0128.514] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0128.514] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Templates.2\\plugins.qmltypes" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\templates.2\\plugins.qmltypes"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0128.514] GetFileType (hFile=0x444) returned 0x1 [0128.514] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0128.514] GetFileType (hFile=0x444) returned 0x1 [0128.514] ReadFile (in: hFile=0x444, lpBuffer=0x21815e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x21815e8*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0128.549] CloseHandle (hObject=0x444) returned 1 [0128.549] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Templates.2\\plugins.qmltypes", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Templates.2\\plugins.qmltypes", lpFilePart=0x0) returned 0x6e [0128.549] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0128.549] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Templates.2\\plugins.qmltypes" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\templates.2\\plugins.qmltypes"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0128.549] GetFileType (hFile=0x444) returned 0x1 [0128.549] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0128.549] GetFileType (hFile=0x444) returned 0x1 [0128.549] WriteFile (in: hFile=0x444, lpBuffer=0x217f2f8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x217f2f8*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0128.549] CloseHandle (hObject=0x444) returned 1 [0128.549] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Templates.2\\plugins.qmltypes", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Templates.2\\plugins.qmltypes", lpFilePart=0x0) returned 0x6e [0128.550] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Templates.2\\plugins.qmltypes.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Templates.2\\plugins.qmltypes.xuy", lpFilePart=0x0) returned 0x72 [0128.550] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0128.550] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Templates.2\\plugins.qmltypes" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\templates.2\\plugins.qmltypes"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5cb97f46, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x5cb97f46, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x38777def, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xc82a)) returned 1 [0128.550] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0128.550] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Templates.2\\plugins.qmltypes" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\templates.2\\plugins.qmltypes"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Templates.2\\plugins.qmltypes.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\templates.2\\plugins.qmltypes.xuy")) returned 1 [0128.551] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Templates.2\\qmldir", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Templates.2\\qmldir", lpFilePart=0x0) returned 0x64 [0128.551] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0128.551] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Templates.2\\qmldir" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\templates.2\\qmldir"), fInfoLevelId=0x0, lpFileInformation=0x21fdaa0 | out: lpFileInformation=0x21fdaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5cf2b7a2, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x5cf2b7a2, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x5cf2b7a2, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x79)) returned 1 [0128.551] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0128.551] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Templates.2\\qmldir", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Templates.2\\qmldir", lpFilePart=0x0) returned 0x64 [0128.551] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0128.551] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Templates.2\\qmldir" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\templates.2\\qmldir"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0128.551] GetFileType (hFile=0x444) returned 0x1 [0128.551] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0128.551] GetFileType (hFile=0x444) returned 0x1 [0128.551] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x79 [0128.551] ReadFile (in: hFile=0x444, lpBuffer=0x21fde28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x21fde28*, lpNumberOfBytesRead=0x3be5c8*=0x79, lpOverlapped=0x0) returned 1 [0128.552] CloseHandle (hObject=0x444) returned 1 [0128.563] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Templates.2\\qmldir", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Templates.2\\qmldir", lpFilePart=0x0) returned 0x64 [0128.563] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0128.563] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Templates.2\\qmldir" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\templates.2\\qmldir"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0128.564] GetFileType (hFile=0x444) returned 0x1 [0128.564] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0128.564] GetFileType (hFile=0x444) returned 0x1 [0128.564] WriteFile (in: hFile=0x444, lpBuffer=0x2275048*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x2275048*, lpNumberOfBytesWritten=0x3be4d8*=0x80, lpOverlapped=0x0) returned 1 [0128.565] CloseHandle (hObject=0x444) returned 1 [0128.565] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Templates.2\\qmldir", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Templates.2\\qmldir", lpFilePart=0x0) returned 0x64 [0128.565] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Templates.2\\qmldir.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Templates.2\\qmldir.xuy", lpFilePart=0x0) returned 0x68 [0128.565] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0128.565] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Templates.2\\qmldir" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\templates.2\\qmldir"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5cf2b7a2, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x5cf2b7a2, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3879e5b5, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x80)) returned 1 [0128.565] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0128.565] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Templates.2\\qmldir" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\templates.2\\qmldir"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Templates.2\\qmldir.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\templates.2\\qmldir.xuy")) returned 1 [0128.566] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Templates.2\\qtquicktemplates2plugin.dll", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Templates.2\\qtquicktemplates2plugin.dll", lpFilePart=0x0) returned 0x79 [0128.566] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0128.566] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Templates.2\\qtquicktemplates2plugin.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\templates.2\\qtquicktemplates2plugin.dll"), fInfoLevelId=0x0, lpFileInformation=0x2276370 | out: lpFileInformation=0x2276370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d30b4aa, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x5d30b4aa, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x5d30b4aa, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x3a8d0)) returned 1 [0128.567] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0128.567] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Templates.2\\qtquicktemplates2plugin.dll", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Templates.2\\qtquicktemplates2plugin.dll", lpFilePart=0x0) returned 0x79 [0128.567] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0128.567] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Templates.2\\qtquicktemplates2plugin.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\templates.2\\qtquicktemplates2plugin.dll"), fInfoLevelId=0x0, lpFileInformation=0x2276538 | out: lpFileInformation=0x2276538*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d30b4aa, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x5d30b4aa, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x5d30b4aa, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x3a8d0)) returned 1 [0128.567] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0128.567] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Templates.2\\qtquicktemplates2plugin.dll", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Templates.2\\qtquicktemplates2plugin.dll", lpFilePart=0x0) returned 0x79 [0128.567] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0128.567] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Templates.2\\qtquicktemplates2plugin.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\templates.2\\qtquicktemplates2plugin.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0128.568] GetFileType (hFile=0x444) returned 0x1 [0128.568] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0128.568] GetFileType (hFile=0x444) returned 0x1 [0128.568] ReadFile (in: hFile=0x444, lpBuffer=0x22789f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x22789f8*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0128.614] CloseHandle (hObject=0x444) returned 1 [0128.614] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Templates.2\\qtquicktemplates2plugin.dll", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Templates.2\\qtquicktemplates2plugin.dll", lpFilePart=0x0) returned 0x79 [0128.614] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0128.614] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Templates.2\\qtquicktemplates2plugin.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\templates.2\\qtquicktemplates2plugin.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0128.614] GetFileType (hFile=0x444) returned 0x1 [0128.614] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0128.614] GetFileType (hFile=0x444) returned 0x1 [0128.614] WriteFile (in: hFile=0x444, lpBuffer=0x22766e0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x22766e0*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0128.615] CloseHandle (hObject=0x444) returned 1 [0128.615] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Templates.2\\qtquicktemplates2plugin.dll", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Templates.2\\qtquicktemplates2plugin.dll", lpFilePart=0x0) returned 0x79 [0128.615] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Templates.2\\qtquicktemplates2plugin.dll.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Templates.2\\qtquicktemplates2plugin.dll.xuy", lpFilePart=0x0) returned 0x7d [0128.615] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0128.615] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Templates.2\\qtquicktemplates2plugin.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\templates.2\\qtquicktemplates2plugin.dll"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d30b4aa, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x5d30b4aa, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3881092e, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x3a8d0)) returned 1 [0128.615] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0128.615] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Templates.2\\qtquicktemplates2plugin.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\templates.2\\qtquicktemplates2plugin.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Templates.2\\qtquicktemplates2plugin.dll.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\templates.2\\qtquicktemplates2plugin.dll.xuy")) returned 1 [0128.617] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0128.617] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Window.2", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Window.2", lpFilePart=0x0) returned 0x5a [0128.617] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Window.2\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Window.2\\", lpFilePart=0x0) returned 0x5b [0128.617] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Window.2\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d7370 [0128.617] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0128.617] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0128.617] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0128.618] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0128.618] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0128.618] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0128.618] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0128.618] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0128.618] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0128.618] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Window.2", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Window.2", lpFilePart=0x0) returned 0x5a [0128.618] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Window.2\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Window.2\\", lpFilePart=0x0) returned 0x5b [0128.618] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Window.2\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d7c70 [0128.618] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0128.618] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0128.618] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0128.619] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0128.619] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0128.619] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0128.619] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0128.619] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0128.619] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Window.2\\plugins.qmltypes", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Window.2\\plugins.qmltypes", lpFilePart=0x0) returned 0x6b [0128.619] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0128.619] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Window.2\\plugins.qmltypes" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\window.2\\plugins.qmltypes"), fInfoLevelId=0x0, lpFileInformation=0x22f7da8 | out: lpFileInformation=0x22f7da8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d6eb1c6, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x5d6eb1c6, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x5d6eb1c6, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x2dfc)) returned 1 [0128.619] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0128.619] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Window.2\\plugins.qmltypes", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Window.2\\plugins.qmltypes", lpFilePart=0x0) returned 0x6b [0128.619] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0128.619] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Window.2\\plugins.qmltypes" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\window.2\\plugins.qmltypes"), fInfoLevelId=0x0, lpFileInformation=0x22f7f40 | out: lpFileInformation=0x22f7f40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d6eb1c6, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x5d6eb1c6, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x5d6eb1c6, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x2dfc)) returned 1 [0128.619] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0128.619] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Window.2\\plugins.qmltypes", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Window.2\\plugins.qmltypes", lpFilePart=0x0) returned 0x6b [0128.619] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0128.620] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Window.2\\plugins.qmltypes" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\window.2\\plugins.qmltypes"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0128.620] GetFileType (hFile=0x444) returned 0x1 [0128.620] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0128.620] GetFileType (hFile=0x444) returned 0x1 [0128.620] ReadFile (in: hFile=0x444, lpBuffer=0x22fa3a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x22fa3a0*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0128.701] CloseHandle (hObject=0x444) returned 1 [0128.701] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Window.2\\plugins.qmltypes", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Window.2\\plugins.qmltypes", lpFilePart=0x0) returned 0x6b [0128.701] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0128.702] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Window.2\\plugins.qmltypes" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\window.2\\plugins.qmltypes"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0128.702] GetFileType (hFile=0x444) returned 0x1 [0128.702] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0128.702] GetFileType (hFile=0x444) returned 0x1 [0128.702] WriteFile (in: hFile=0x444, lpBuffer=0x2152c70*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x2152c70*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0128.702] CloseHandle (hObject=0x444) returned 1 [0128.702] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Window.2\\plugins.qmltypes", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Window.2\\plugins.qmltypes", lpFilePart=0x0) returned 0x6b [0128.703] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Window.2\\plugins.qmltypes.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Window.2\\plugins.qmltypes.xuy", lpFilePart=0x0) returned 0x6f [0128.703] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0128.703] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Window.2\\plugins.qmltypes" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\window.2\\plugins.qmltypes"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d6eb1c6, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x5d6eb1c6, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x388f5ab3, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2dfc)) returned 1 [0128.703] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0128.703] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Window.2\\plugins.qmltypes" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\window.2\\plugins.qmltypes"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Window.2\\plugins.qmltypes.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\window.2\\plugins.qmltypes.xuy")) returned 1 [0128.704] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Window.2\\qmldir", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Window.2\\qmldir", lpFilePart=0x0) returned 0x61 [0128.704] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0128.704] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Window.2\\qmldir" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\window.2\\qmldir"), fInfoLevelId=0x0, lpFileInformation=0x217c378 | out: lpFileInformation=0x217c378*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5daa4c8a, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x5daa4c8a, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x5daa4c8a, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x7a)) returned 1 [0128.704] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0128.704] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Window.2\\qmldir", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Window.2\\qmldir", lpFilePart=0x0) returned 0x61 [0128.704] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0128.704] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Window.2\\qmldir" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\window.2\\qmldir"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0128.705] GetFileType (hFile=0x444) returned 0x1 [0128.705] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0128.705] GetFileType (hFile=0x444) returned 0x1 [0128.705] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x7a [0128.705] ReadFile (in: hFile=0x444, lpBuffer=0x217c6f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x217c6f0*, lpNumberOfBytesRead=0x3be5c8*=0x7a, lpOverlapped=0x0) returned 1 [0128.706] CloseHandle (hObject=0x444) returned 1 [0128.718] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Window.2\\qmldir", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Window.2\\qmldir", lpFilePart=0x0) returned 0x61 [0128.718] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0128.718] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Window.2\\qmldir" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\window.2\\qmldir"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0128.720] GetFileType (hFile=0x444) returned 0x1 [0128.720] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0128.720] GetFileType (hFile=0x444) returned 0x1 [0128.720] WriteFile (in: hFile=0x444, lpBuffer=0x21f3908*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x21f3908*, lpNumberOfBytesWritten=0x3be4d8*=0x80, lpOverlapped=0x0) returned 1 [0128.721] CloseHandle (hObject=0x444) returned 1 [0128.721] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Window.2\\qmldir", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Window.2\\qmldir", lpFilePart=0x0) returned 0x61 [0128.721] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Window.2\\qmldir.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Window.2\\qmldir.xuy", lpFilePart=0x0) returned 0x65 [0128.721] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0128.721] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Window.2\\qmldir" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\window.2\\qmldir"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5daa4c8a, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x5daa4c8a, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3891b903, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x80)) returned 1 [0128.721] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0128.721] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Window.2\\qmldir" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\window.2\\qmldir"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Window.2\\qmldir.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\window.2\\qmldir.xuy")) returned 1 [0128.722] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Window.2\\windowplugin.dll", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Window.2\\windowplugin.dll", lpFilePart=0x0) returned 0x6b [0128.722] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0128.722] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Window.2\\windowplugin.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\window.2\\windowplugin.dll"), fInfoLevelId=0x0, lpFileInformation=0x21f4c18 | out: lpFileInformation=0x21f4c18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5de5e778, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x5de5e778, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x5de5e778, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x7ad0)) returned 1 [0128.722] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0128.722] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Window.2\\windowplugin.dll", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Window.2\\windowplugin.dll", lpFilePart=0x0) returned 0x6b [0128.722] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0128.722] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Window.2\\windowplugin.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\window.2\\windowplugin.dll"), fInfoLevelId=0x0, lpFileInformation=0x21f4db0 | out: lpFileInformation=0x21f4db0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5de5e778, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x5de5e778, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x5de5e778, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x7ad0)) returned 1 [0128.722] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0128.723] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Window.2\\windowplugin.dll", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Window.2\\windowplugin.dll", lpFilePart=0x0) returned 0x6b [0128.723] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0128.723] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Window.2\\windowplugin.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\window.2\\windowplugin.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0128.723] GetFileType (hFile=0x444) returned 0x1 [0128.723] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0128.723] GetFileType (hFile=0x444) returned 0x1 [0128.723] ReadFile (in: hFile=0x444, lpBuffer=0x21f7210, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x21f7210*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0128.735] CloseHandle (hObject=0x444) returned 1 [0128.736] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Window.2\\windowplugin.dll", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Window.2\\windowplugin.dll", lpFilePart=0x0) returned 0x6b [0128.736] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0128.736] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Window.2\\windowplugin.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\window.2\\windowplugin.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0128.736] GetFileType (hFile=0x444) returned 0x1 [0128.736] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0128.736] GetFileType (hFile=0x444) returned 0x1 [0128.736] WriteFile (in: hFile=0x444, lpBuffer=0x21f4f28*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x21f4f28*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0128.736] CloseHandle (hObject=0x444) returned 1 [0128.736] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Window.2\\windowplugin.dll", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Window.2\\windowplugin.dll", lpFilePart=0x0) returned 0x6b [0128.736] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Window.2\\windowplugin.dll.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Window.2\\windowplugin.dll.xuy", lpFilePart=0x0) returned 0x6f [0128.736] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0128.736] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Window.2\\windowplugin.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\window.2\\windowplugin.dll"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5de5e778, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x5de5e778, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x38941a37, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x7ad0)) returned 1 [0128.736] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0128.737] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Window.2\\windowplugin.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\window.2\\windowplugin.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Window.2\\windowplugin.dll.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\window.2\\windowplugin.dll.xuy")) returned 1 [0128.738] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0128.738] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick.2", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick.2", lpFilePart=0x0) returned 0x53 [0128.738] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick.2\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick.2\\", lpFilePart=0x0) returned 0x54 [0128.738] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick.2\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d7fd0 [0128.738] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0128.738] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0128.738] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0128.738] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0128.738] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0128.739] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0128.739] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0128.739] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0128.739] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0128.739] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick.2", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick.2", lpFilePart=0x0) returned 0x53 [0128.739] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick.2\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick.2\\", lpFilePart=0x0) returned 0x54 [0128.739] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick.2\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d7df0 [0128.739] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0128.739] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0128.739] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0128.739] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0128.740] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0128.740] FindClose (in: hFindFile=0x5d7df0 | out: hFindFile=0x5d7df0) returned 1 [0128.740] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0128.740] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0128.740] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick.2\\plugins.qmltypes", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick.2\\plugins.qmltypes", lpFilePart=0x0) returned 0x64 [0128.740] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0128.740] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick.2\\plugins.qmltypes" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick.2\\plugins.qmltypes"), fInfoLevelId=0x0, lpFileInformation=0x2276330 | out: lpFileInformation=0x2276330*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58889e13, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x58889e13, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x58889e13, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x2d552)) returned 1 [0128.740] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0128.740] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick.2\\plugins.qmltypes", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick.2\\plugins.qmltypes", lpFilePart=0x0) returned 0x64 [0128.740] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0128.740] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick.2\\plugins.qmltypes" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick.2\\plugins.qmltypes"), fInfoLevelId=0x0, lpFileInformation=0x22764c0 | out: lpFileInformation=0x22764c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58889e13, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x58889e13, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x58889e13, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x2d552)) returned 1 [0128.740] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0128.740] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick.2\\plugins.qmltypes", nBufferLength=0x105, lpBuffer=0x3be120, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick.2\\plugins.qmltypes", lpFilePart=0x0) returned 0x64 [0128.740] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0128.740] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick.2\\plugins.qmltypes" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick.2\\plugins.qmltypes"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0128.742] GetFileType (hFile=0x444) returned 0x1 [0128.742] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be570) returned 1 [0128.742] GetFileType (hFile=0x444) returned 0x1 [0128.742] ReadFile (in: hFile=0x444, lpBuffer=0x2278910, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be688, lpOverlapped=0x0 | out: lpBuffer=0x2278910*, lpNumberOfBytesRead=0x3be688*=0x1000, lpOverlapped=0x0) returned 1 [0128.771] CloseHandle (hObject=0x444) returned 1 [0128.771] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick.2\\plugins.qmltypes", nBufferLength=0x105, lpBuffer=0x3be120, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick.2\\plugins.qmltypes", lpFilePart=0x0) returned 0x64 [0128.771] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0128.771] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick.2\\plugins.qmltypes" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick.2\\plugins.qmltypes"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0128.771] GetFileType (hFile=0x444) returned 0x1 [0128.771] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be570) returned 1 [0128.771] GetFileType (hFile=0x444) returned 0x1 [0128.771] WriteFile (in: hFile=0x444, lpBuffer=0x2276630*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be738, lpOverlapped=0x0 | out: lpBuffer=0x2276630*, lpNumberOfBytesWritten=0x3be738*=0x2000, lpOverlapped=0x0) returned 1 [0128.772] CloseHandle (hObject=0x444) returned 1 [0128.772] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick.2\\plugins.qmltypes", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick.2\\plugins.qmltypes", lpFilePart=0x0) returned 0x64 [0128.772] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick.2\\plugins.qmltypes.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick.2\\plugins.qmltypes.xuy", lpFilePart=0x0) returned 0x68 [0128.772] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0128.772] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick.2\\plugins.qmltypes" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick.2\\plugins.qmltypes"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58889e13, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x58889e13, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3898ded9, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2d552)) returned 1 [0128.772] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0128.772] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick.2\\plugins.qmltypes" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick.2\\plugins.qmltypes"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick.2\\plugins.qmltypes.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick.2\\plugins.qmltypes.xuy")) returned 1 [0128.773] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick.2\\qmldir", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick.2\\qmldir", lpFilePart=0x0) returned 0x5a [0128.773] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0128.773] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick.2\\qmldir" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick.2\\qmldir"), fInfoLevelId=0x0, lpFileInformation=0x22f4d88 | out: lpFileInformation=0x22f4d88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58c438ca, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x58c438ca, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x58c438ca, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x6f)) returned 1 [0128.773] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0128.774] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick.2\\qmldir", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick.2\\qmldir", lpFilePart=0x0) returned 0x5a [0128.774] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0128.774] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick.2\\qmldir" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick.2\\qmldir"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0128.774] GetFileType (hFile=0x444) returned 0x1 [0128.774] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0128.774] GetFileType (hFile=0x444) returned 0x1 [0128.774] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be708 | out: lpFileSizeHigh=0x3be708*=0x0) returned 0x6f [0128.774] ReadFile (in: hFile=0x444, lpBuffer=0x22f50d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be638, lpOverlapped=0x0 | out: lpBuffer=0x22f50d0*, lpNumberOfBytesRead=0x3be638*=0x6f, lpOverlapped=0x0) returned 1 [0128.775] CloseHandle (hObject=0x444) returned 1 [0128.816] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick.2\\qmldir", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick.2\\qmldir", lpFilePart=0x0) returned 0x5a [0128.816] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0128.816] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick.2\\qmldir" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick.2\\qmldir"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0128.817] GetFileType (hFile=0x444) returned 0x1 [0128.817] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0128.817] GetFileType (hFile=0x444) returned 0x1 [0128.817] WriteFile (in: hFile=0x444, lpBuffer=0x216ec60*, nNumberOfBytesToWrite=0x70, lpNumberOfBytesWritten=0x3be548, lpOverlapped=0x0 | out: lpBuffer=0x216ec60*, lpNumberOfBytesWritten=0x3be548*=0x70, lpOverlapped=0x0) returned 1 [0128.818] CloseHandle (hObject=0x444) returned 1 [0128.818] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick.2\\qmldir", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick.2\\qmldir", lpFilePart=0x0) returned 0x5a [0128.818] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick.2\\qmldir.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick.2\\qmldir.xuy", lpFilePart=0x0) returned 0x5e [0128.818] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0128.818] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick.2\\qmldir" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick.2\\qmldir"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58c438ca, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x58c438ca, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x38a007a0, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x70)) returned 1 [0128.818] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0128.819] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick.2\\qmldir" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick.2\\qmldir"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick.2\\qmldir.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick.2\\qmldir.xuy")) returned 1 [0128.820] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick.2\\qtquick2plugin.dll", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick.2\\qtquick2plugin.dll", lpFilePart=0x0) returned 0x66 [0128.820] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0128.820] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick.2\\qtquick2plugin.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick.2\\qtquick2plugin.dll"), fInfoLevelId=0x0, lpFileInformation=0x216ff40 | out: lpFileInformation=0x216ff40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x590235e3, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x590235e3, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x590235e3, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x7ad0)) returned 1 [0128.820] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0128.821] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick.2\\qtquick2plugin.dll", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick.2\\qtquick2plugin.dll", lpFilePart=0x0) returned 0x66 [0128.821] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0128.821] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick.2\\qtquick2plugin.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick.2\\qtquick2plugin.dll"), fInfoLevelId=0x0, lpFileInformation=0x21700d0 | out: lpFileInformation=0x21700d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x590235e3, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x590235e3, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x590235e3, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x7ad0)) returned 1 [0128.821] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0128.821] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick.2\\qtquick2plugin.dll", nBufferLength=0x105, lpBuffer=0x3be120, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick.2\\qtquick2plugin.dll", lpFilePart=0x0) returned 0x66 [0128.821] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0128.821] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick.2\\qtquick2plugin.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick.2\\qtquick2plugin.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0128.822] GetFileType (hFile=0x444) returned 0x1 [0128.822] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be570) returned 1 [0128.822] GetFileType (hFile=0x444) returned 0x1 [0128.822] ReadFile (in: hFile=0x444, lpBuffer=0x2172520, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be688, lpOverlapped=0x0 | out: lpBuffer=0x2172520*, lpNumberOfBytesRead=0x3be688*=0x1000, lpOverlapped=0x0) returned 1 [0128.844] CloseHandle (hObject=0x444) returned 1 [0128.844] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick.2\\qtquick2plugin.dll", nBufferLength=0x105, lpBuffer=0x3be120, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick.2\\qtquick2plugin.dll", lpFilePart=0x0) returned 0x66 [0128.844] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0128.844] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick.2\\qtquick2plugin.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick.2\\qtquick2plugin.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0128.844] GetFileType (hFile=0x444) returned 0x1 [0128.844] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be570) returned 1 [0128.844] GetFileType (hFile=0x444) returned 0x1 [0128.844] WriteFile (in: hFile=0x444, lpBuffer=0x2170240*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be738, lpOverlapped=0x0 | out: lpBuffer=0x2170240*, lpNumberOfBytesWritten=0x3be738*=0x2000, lpOverlapped=0x0) returned 1 [0128.845] CloseHandle (hObject=0x444) returned 1 [0128.845] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick.2\\qtquick2plugin.dll", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick.2\\qtquick2plugin.dll", lpFilePart=0x0) returned 0x66 [0128.845] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick.2\\qtquick2plugin.dll.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick.2\\qtquick2plugin.dll.xuy", lpFilePart=0x0) returned 0x6a [0128.845] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0128.845] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick.2\\qtquick2plugin.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick.2\\qtquick2plugin.dll"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x590235e3, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x590235e3, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x38a4cb6f, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x7ad0)) returned 1 [0128.845] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0128.845] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick.2\\qtquick2plugin.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick.2\\qtquick2plugin.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick.2\\qtquick2plugin.dll.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick.2\\qtquick2plugin.dll.xuy")) returned 1 [0128.847] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0128.847] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qut-latn", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qut-latn", lpFilePart=0x0) returned 0x4e [0128.847] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qut-latn\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qut-latn\\", lpFilePart=0x0) returned 0x4f [0128.847] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qut-latn\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7c70 [0128.847] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0128.847] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0128.848] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0128.848] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0128.848] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0128.848] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0128.848] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0128.848] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qut-latn", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qut-latn", lpFilePart=0x0) returned 0x4e [0128.848] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qut-latn\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qut-latn\\", lpFilePart=0x0) returned 0x4f [0128.848] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qut-latn\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7550 [0128.848] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0128.848] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0128.848] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0128.849] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0128.849] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0128.849] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0128.849] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qut-latn\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qut-latn\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x72 [0128.849] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0128.849] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qut-latn\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qut-latn\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x21f0c78 | out: lpFileInformation=0x21f0c78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f10d8cc, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x4f10d8cc, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x4f10d8cc, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x1f6d0)) returned 1 [0128.849] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0128.849] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qut-latn\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qut-latn\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x72 [0128.850] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0128.850] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qut-latn\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qut-latn\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x21f0e40 | out: lpFileInformation=0x21f0e40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f10d8cc, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x4f10d8cc, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x4f10d8cc, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x1f6d0)) returned 1 [0128.850] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0128.850] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qut-latn\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qut-latn\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x72 [0128.850] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0128.850] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qut-latn\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qut-latn\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0128.851] GetFileType (hFile=0x444) returned 0x1 [0128.851] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0128.851] GetFileType (hFile=0x444) returned 0x1 [0128.851] ReadFile (in: hFile=0x444, lpBuffer=0x21f3300, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x21f3300*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0128.877] CloseHandle (hObject=0x444) returned 1 [0128.877] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qut-latn\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qut-latn\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x72 [0128.877] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0128.877] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qut-latn\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qut-latn\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0128.877] GetFileType (hFile=0x444) returned 0x1 [0128.877] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0128.877] GetFileType (hFile=0x444) returned 0x1 [0128.877] WriteFile (in: hFile=0x444, lpBuffer=0x21f0fe8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x21f0fe8*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0128.877] CloseHandle (hObject=0x444) returned 1 [0128.878] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qut-latn\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qut-latn\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x72 [0128.878] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qut-latn\\FileSync.LocalizedResources.dll.mui.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qut-latn\\FileSync.LocalizedResources.dll.mui.xuy", lpFilePart=0x0) returned 0x76 [0128.878] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0128.878] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qut-latn\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qut-latn\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f10d8cc, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x4f10d8cc, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x38a98f85, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x1f6d0)) returned 1 [0128.878] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0128.878] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qut-latn\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qut-latn\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qut-latn\\FileSync.LocalizedResources.dll.mui.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qut-latn\\filesync.localizedresources.dll.mui.xuy")) returned 1 [0128.879] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0128.879] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\quz-pe", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\quz-pe", lpFilePart=0x0) returned 0x4c [0128.879] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\quz-pe\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\quz-pe\\", lpFilePart=0x0) returned 0x4d [0128.879] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\quz-pe\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7550 [0128.879] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0128.879] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0128.879] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0128.880] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0128.880] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0128.880] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0128.880] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0128.880] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\quz-pe", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\quz-pe", lpFilePart=0x0) returned 0x4c [0128.880] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\quz-pe\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\quz-pe\\", lpFilePart=0x0) returned 0x4d [0128.880] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\quz-pe\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7d90 [0128.880] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0128.880] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0128.880] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0128.880] FindClose (in: hFindFile=0x5d7d90 | out: hFindFile=0x5d7d90) returned 1 [0128.880] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0128.881] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0128.881] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\quz-pe\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\quz-pe\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x70 [0128.881] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0128.881] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\quz-pe\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\quz-pe\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x2271a48 | out: lpFileInformation=0x2271a48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f454c7b, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x4f454c7b, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x4f454c7b, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x246d0)) returned 1 [0128.881] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0128.881] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\quz-pe\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\quz-pe\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x70 [0128.881] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0128.881] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\quz-pe\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\quz-pe\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x2271c10 | out: lpFileInformation=0x2271c10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f454c7b, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x4f454c7b, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x4f454c7b, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x246d0)) returned 1 [0128.881] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0128.881] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\quz-pe\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\quz-pe\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x70 [0128.881] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0128.881] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\quz-pe\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\quz-pe\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0128.882] GetFileType (hFile=0x444) returned 0x1 [0128.882] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0128.882] GetFileType (hFile=0x444) returned 0x1 [0128.882] ReadFile (in: hFile=0x444, lpBuffer=0x22740d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x22740d0*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0128.947] CloseHandle (hObject=0x444) returned 1 [0128.948] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\quz-pe\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\quz-pe\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x70 [0128.948] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0128.948] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\quz-pe\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\quz-pe\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0128.948] GetFileType (hFile=0x444) returned 0x1 [0128.948] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0128.948] GetFileType (hFile=0x444) returned 0x1 [0128.948] WriteFile (in: hFile=0x444, lpBuffer=0x2271db8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x2271db8*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0128.948] CloseHandle (hObject=0x444) returned 1 [0128.949] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\quz-pe\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\quz-pe\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x70 [0128.949] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\quz-pe\\FileSync.LocalizedResources.dll.mui.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\quz-pe\\FileSync.LocalizedResources.dll.mui.xuy", lpFilePart=0x0) returned 0x74 [0128.949] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0128.949] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\quz-pe\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\quz-pe\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f454c7b, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x4f454c7b, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x38b57d3e, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x246d0)) returned 1 [0128.949] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0128.949] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\quz-pe\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\quz-pe\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\quz-pe\\FileSync.LocalizedResources.dll.mui.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\quz-pe\\filesync.localizedresources.dll.mui.xuy")) returned 1 [0128.950] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0128.951] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ro", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ro", lpFilePart=0x0) returned 0x48 [0128.951] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ro\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ro\\", lpFilePart=0x0) returned 0x49 [0128.951] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ro\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d81b0 [0128.951] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0128.951] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0128.951] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0128.951] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0128.951] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0128.951] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0128.951] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0128.951] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ro", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ro", lpFilePart=0x0) returned 0x48 [0128.951] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ro\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ro\\", lpFilePart=0x0) returned 0x49 [0128.951] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ro\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d79d0 [0128.952] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0128.952] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0128.952] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0128.952] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0128.952] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0128.952] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0128.952] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ro\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ro\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0128.952] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0128.952] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ro\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ro\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x22f2728 | out: lpFileInformation=0x22f2728*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f83499e, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x4f83499e, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x4f83499e, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x23ac8)) returned 1 [0128.953] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0128.953] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ro\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ro\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0128.953] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0128.953] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ro\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ro\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x22f28e8 | out: lpFileInformation=0x22f28e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f83499e, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x4f83499e, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x4f83499e, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x23ac8)) returned 1 [0128.953] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0128.953] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ro\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ro\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0128.953] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0128.954] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ro\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ro\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0128.954] GetFileType (hFile=0x444) returned 0x1 [0128.954] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0128.954] GetFileType (hFile=0x444) returned 0x1 [0128.955] ReadFile (in: hFile=0x444, lpBuffer=0x22f4d98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x22f4d98*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0129.027] CloseHandle (hObject=0x444) returned 1 [0129.027] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ro\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ro\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0129.028] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0129.028] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ro\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ro\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0129.028] GetFileType (hFile=0x444) returned 0x1 [0129.028] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0129.028] GetFileType (hFile=0x444) returned 0x1 [0129.028] WriteFile (in: hFile=0x444, lpBuffer=0x2159098*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x2159098*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0129.028] CloseHandle (hObject=0x444) returned 1 [0129.028] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ro\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ro\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0129.028] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ro\\FileSync.LocalizedResources.dll.mui.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ro\\FileSync.LocalizedResources.dll.mui.xuy", lpFilePart=0x0) returned 0x70 [0129.028] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0129.029] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ro\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ro\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f83499e, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x4f83499e, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x38c168ec, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x23ac8)) returned 1 [0129.029] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0129.029] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ro\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ro\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ro\\FileSync.LocalizedResources.dll.mui.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ro\\filesync.localizedresources.dll.mui.xuy")) returned 1 [0129.030] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0129.030] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ru", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ru", lpFilePart=0x0) returned 0x48 [0129.030] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ru\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ru\\", lpFilePart=0x0) returned 0x49 [0129.030] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ru\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d81b0 [0129.030] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0129.030] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0129.030] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0129.030] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0129.030] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0129.030] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0129.031] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0129.031] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ru", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ru", lpFilePart=0x0) returned 0x48 [0129.031] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ru\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ru\\", lpFilePart=0x0) returned 0x49 [0129.031] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ru\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d79d0 [0129.031] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0129.031] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0129.031] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0129.031] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0129.031] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0129.031] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0129.031] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ru\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ru\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0129.031] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0129.031] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ru\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ru\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x2176e00 | out: lpFileInformation=0x2176e00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4fbc8207, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x4fbc8207, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x4fbc8207, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x230d0)) returned 1 [0129.032] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0129.032] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ru\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ru\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0129.032] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0129.032] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ru\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ru\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x2176fc0 | out: lpFileInformation=0x2176fc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4fbc8207, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x4fbc8207, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x4fbc8207, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x230d0)) returned 1 [0129.032] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0129.032] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ru\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ru\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0129.032] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0129.032] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ru\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ru\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0129.033] GetFileType (hFile=0x444) returned 0x1 [0129.033] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0129.033] GetFileType (hFile=0x444) returned 0x1 [0129.033] ReadFile (in: hFile=0x444, lpBuffer=0x2179470, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x2179470*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0129.064] CloseHandle (hObject=0x444) returned 1 [0129.064] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ru\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ru\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0129.064] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0129.064] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ru\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ru\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0129.064] GetFileType (hFile=0x444) returned 0x1 [0129.064] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0129.064] GetFileType (hFile=0x444) returned 0x1 [0129.065] WriteFile (in: hFile=0x444, lpBuffer=0x2177160*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x2177160*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0129.065] CloseHandle (hObject=0x444) returned 1 [0129.065] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ru\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ru\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0129.065] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ru\\FileSync.LocalizedResources.dll.mui.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ru\\FileSync.LocalizedResources.dll.mui.xuy", lpFilePart=0x0) returned 0x70 [0129.065] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0129.065] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ru\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ru\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4fbc8207, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x4fbc8207, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x38c62eef, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x230d0)) returned 1 [0129.065] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0129.065] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ru\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ru\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ru\\FileSync.LocalizedResources.dll.mui.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ru\\filesync.localizedresources.dll.mui.xuy")) returned 1 [0129.066] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0129.066] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\rw", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\rw", lpFilePart=0x0) returned 0x48 [0129.066] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\rw\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\rw\\", lpFilePart=0x0) returned 0x49 [0129.066] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\rw\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7af0 [0129.067] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0129.067] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0129.067] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0129.067] FindClose (in: hFindFile=0x5d7af0 | out: hFindFile=0x5d7af0) returned 1 [0129.067] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0129.067] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0129.067] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0129.067] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\rw", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\rw", lpFilePart=0x0) returned 0x48 [0129.067] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\rw\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\rw\\", lpFilePart=0x0) returned 0x49 [0129.067] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\rw\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7370 [0129.067] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0129.068] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0129.068] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0129.068] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0129.068] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0129.068] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0129.068] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\rw\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\rw\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0129.068] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0129.068] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\rw\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\rw\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x21f7aa8 | out: lpFileInformation=0x21f7aa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ffce16e, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x4ffce16e, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x4ffce16e, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x222d0)) returned 1 [0129.070] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0129.070] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\rw\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\rw\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0129.070] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0129.070] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\rw\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\rw\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x21f7c68 | out: lpFileInformation=0x21f7c68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ffce16e, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x4ffce16e, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x4ffce16e, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x222d0)) returned 1 [0129.070] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0129.070] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\rw\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\rw\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0129.070] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0129.070] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\rw\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\rw\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0129.071] GetFileType (hFile=0x444) returned 0x1 [0129.071] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0129.071] GetFileType (hFile=0x444) returned 0x1 [0129.071] ReadFile (in: hFile=0x444, lpBuffer=0x21fa118, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x21fa118*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0129.087] CloseHandle (hObject=0x444) returned 1 [0129.087] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\rw\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\rw\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0129.087] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0129.088] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\rw\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\rw\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0129.088] GetFileType (hFile=0x444) returned 0x1 [0129.088] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0129.088] GetFileType (hFile=0x444) returned 0x1 [0129.088] WriteFile (in: hFile=0x444, lpBuffer=0x21f7e08*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x21f7e08*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0129.088] CloseHandle (hObject=0x444) returned 1 [0129.088] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\rw\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\rw\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0129.088] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\rw\\FileSync.LocalizedResources.dll.mui.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\rw\\FileSync.LocalizedResources.dll.mui.xuy", lpFilePart=0x0) returned 0x70 [0129.089] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0129.090] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\rw\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\rw\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ffce16e, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x4ffce16e, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x38caf1f7, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x222d0)) returned 1 [0129.090] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0129.090] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\rw\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\rw\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\rw\\FileSync.LocalizedResources.dll.mui.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\rw\\filesync.localizedresources.dll.mui.xuy")) returned 1 [0129.091] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0129.091] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sd-arab", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sd-arab", lpFilePart=0x0) returned 0x4d [0129.091] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sd-arab\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sd-arab\\", lpFilePart=0x0) returned 0x4e [0129.091] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sd-arab\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7a30 [0129.091] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0129.091] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0129.091] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0129.092] FindClose (in: hFindFile=0x5d7a30 | out: hFindFile=0x5d7a30) returned 1 [0129.092] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0129.092] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0129.092] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0129.092] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sd-arab", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sd-arab", lpFilePart=0x0) returned 0x4d [0129.092] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sd-arab\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sd-arab\\", lpFilePart=0x0) returned 0x4e [0129.092] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sd-arab\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d81b0 [0129.092] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0129.092] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0129.092] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0129.092] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0129.092] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0129.092] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0129.093] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sd-arab\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sd-arab\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x71 [0129.093] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0129.093] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sd-arab\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\sd-arab\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x2278860 | out: lpFileInformation=0x2278860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x503ade87, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x503ade87, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x503ade87, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x22cd0)) returned 1 [0129.093] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0129.093] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sd-arab\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sd-arab\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x71 [0129.093] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0129.093] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sd-arab\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\sd-arab\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x2278a28 | out: lpFileInformation=0x2278a28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x503ade87, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x503ade87, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x503ade87, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x22cd0)) returned 1 [0129.093] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0129.093] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sd-arab\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sd-arab\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x71 [0129.093] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0129.093] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sd-arab\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\sd-arab\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0129.094] GetFileType (hFile=0x444) returned 0x1 [0129.094] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0129.094] GetFileType (hFile=0x444) returned 0x1 [0129.094] ReadFile (in: hFile=0x444, lpBuffer=0x227aee8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x227aee8*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0129.109] CloseHandle (hObject=0x444) returned 1 [0129.109] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sd-arab\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sd-arab\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x71 [0129.109] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0129.109] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sd-arab\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\sd-arab\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0129.109] GetFileType (hFile=0x444) returned 0x1 [0129.109] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0129.109] GetFileType (hFile=0x444) returned 0x1 [0129.109] WriteFile (in: hFile=0x444, lpBuffer=0x2278bd0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x2278bd0*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0129.109] CloseHandle (hObject=0x444) returned 1 [0129.109] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sd-arab\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sd-arab\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x71 [0129.110] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sd-arab\\FileSync.LocalizedResources.dll.mui.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sd-arab\\FileSync.LocalizedResources.dll.mui.xuy", lpFilePart=0x0) returned 0x75 [0129.110] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0129.110] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sd-arab\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\sd-arab\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x503ade87, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x503ade87, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x38cd5346, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x22cd0)) returned 1 [0129.110] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0129.110] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sd-arab\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\sd-arab\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sd-arab\\FileSync.LocalizedResources.dll.mui.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\sd-arab\\filesync.localizedresources.dll.mui.xuy")) returned 1 [0129.111] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0129.111] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\si-lk", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\si-lk", lpFilePart=0x0) returned 0x4b [0129.111] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\si-lk\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\si-lk\\", lpFilePart=0x0) returned 0x4c [0129.111] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\si-lk\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7f10 [0129.111] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0129.111] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0129.111] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0129.112] FindClose (in: hFindFile=0x5d7f10 | out: hFindFile=0x5d7f10) returned 1 [0129.112] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0129.112] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0129.112] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0129.112] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\si-lk", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\si-lk", lpFilePart=0x0) returned 0x4b [0129.112] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\si-lk\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\si-lk\\", lpFilePart=0x0) returned 0x4c [0129.112] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\si-lk\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d78b0 [0129.112] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0129.112] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0129.112] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0129.112] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0129.112] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0129.113] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0129.113] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\si-lk\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\si-lk\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0129.113] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0129.113] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\si-lk\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\si-lk\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x22f95f0 | out: lpFileInformation=0x22f95f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50767948, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x50767948, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x50767948, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x216d0)) returned 1 [0129.113] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0129.113] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\si-lk\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\si-lk\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0129.113] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0129.113] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\si-lk\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\si-lk\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x22f97b0 | out: lpFileInformation=0x22f97b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50767948, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x50767948, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x50767948, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x216d0)) returned 1 [0129.114] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0129.114] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\si-lk\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\si-lk\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0129.114] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0129.114] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\si-lk\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\si-lk\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0129.114] GetFileType (hFile=0x444) returned 0x1 [0129.114] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0129.115] GetFileType (hFile=0x444) returned 0x1 [0129.115] ReadFile (in: hFile=0x444, lpBuffer=0x22fbc60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x22fbc60*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0129.173] CloseHandle (hObject=0x444) returned 1 [0129.173] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\si-lk\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\si-lk\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0129.173] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0129.173] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\si-lk\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\si-lk\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0129.174] GetFileType (hFile=0x444) returned 0x1 [0129.174] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0129.174] GetFileType (hFile=0x444) returned 0x1 [0129.174] WriteFile (in: hFile=0x444, lpBuffer=0x215ea00*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x215ea00*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0129.174] CloseHandle (hObject=0x444) returned 1 [0129.174] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\si-lk\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\si-lk\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0129.174] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\si-lk\\FileSync.LocalizedResources.dll.mui.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\si-lk\\FileSync.LocalizedResources.dll.mui.xuy", lpFilePart=0x0) returned 0x73 [0129.175] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0129.175] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\si-lk\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\si-lk\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50767948, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x50767948, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x38d6dda9, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x216d0)) returned 1 [0129.175] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0129.175] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\si-lk\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\si-lk\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\si-lk\\FileSync.LocalizedResources.dll.mui.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\si-lk\\filesync.localizedresources.dll.mui.xuy")) returned 1 [0129.176] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0129.176] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sk", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sk", lpFilePart=0x0) returned 0x48 [0129.176] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sk\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sk\\", lpFilePart=0x0) returned 0x49 [0129.176] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sk\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7a30 [0129.177] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0129.177] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0129.177] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0129.177] FindClose (in: hFindFile=0x5d7a30 | out: hFindFile=0x5d7a30) returned 1 [0129.177] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0129.177] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0129.177] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0129.177] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sk", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sk", lpFilePart=0x0) returned 0x48 [0129.177] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sk\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sk\\", lpFilePart=0x0) returned 0x49 [0129.177] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sk\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d8090 [0129.177] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0129.178] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0129.178] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0129.178] FindClose (in: hFindFile=0x5d8090 | out: hFindFile=0x5d8090) returned 1 [0129.178] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0129.178] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0129.178] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sk\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sk\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0129.178] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0129.178] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sk\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\sk\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x217fbd0 | out: lpFileInformation=0x217fbd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50afb1b1, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x50afb1b1, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x50afb1b1, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x23ad0)) returned 1 [0129.178] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0129.179] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sk\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sk\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0129.179] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0129.179] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sk\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\sk\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x217fd90 | out: lpFileInformation=0x217fd90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50afb1b1, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x50afb1b1, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x50afb1b1, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x23ad0)) returned 1 [0129.179] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0129.179] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sk\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sk\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0129.179] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0129.179] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sk\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\sk\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0129.180] GetFileType (hFile=0x444) returned 0x1 [0129.180] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0129.180] GetFileType (hFile=0x444) returned 0x1 [0129.180] ReadFile (in: hFile=0x444, lpBuffer=0x2182240, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x2182240*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0129.193] CloseHandle (hObject=0x444) returned 1 [0129.193] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sk\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sk\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0129.193] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0129.193] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sk\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\sk\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0129.194] GetFileType (hFile=0x444) returned 0x1 [0129.194] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0129.194] GetFileType (hFile=0x444) returned 0x1 [0129.194] WriteFile (in: hFile=0x444, lpBuffer=0x217ff30*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x217ff30*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0129.194] CloseHandle (hObject=0x444) returned 1 [0129.194] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sk\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sk\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0129.194] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sk\\FileSync.LocalizedResources.dll.mui.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sk\\FileSync.LocalizedResources.dll.mui.xuy", lpFilePart=0x0) returned 0x70 [0129.194] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0129.194] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sk\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\sk\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50afb1b1, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x50afb1b1, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x38dba20d, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x23ad0)) returned 1 [0129.194] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0129.194] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sk\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\sk\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sk\\FileSync.LocalizedResources.dll.mui.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\sk\\filesync.localizedresources.dll.mui.xuy")) returned 1 [0129.195] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0129.195] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sl", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sl", lpFilePart=0x0) returned 0x48 [0129.196] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sl\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sl\\", lpFilePart=0x0) returned 0x49 [0129.196] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sl\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d78b0 [0129.196] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0129.196] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0129.196] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0129.196] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0129.196] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0129.196] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0129.196] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0129.196] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sl", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sl", lpFilePart=0x0) returned 0x48 [0129.196] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sl\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sl\\", lpFilePart=0x0) returned 0x49 [0129.196] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sl\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7d30 [0129.197] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0129.197] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0129.197] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0129.197] FindClose (in: hFindFile=0x5d7d30 | out: hFindFile=0x5d7d30) returned 1 [0129.197] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0129.197] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0129.197] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sl\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sl\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0129.197] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0129.197] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sl\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\sl\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x2200878 | out: lpFileInformation=0x2200878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5158f887, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x5158f887, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x5158f887, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x234d0)) returned 1 [0129.198] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0129.198] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sl\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sl\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0129.198] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0129.198] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sl\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\sl\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x2200a38 | out: lpFileInformation=0x2200a38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5158f887, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x5158f887, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x5158f887, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x234d0)) returned 1 [0129.198] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0129.198] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sl\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sl\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0129.198] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0129.198] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sl\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\sl\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0129.199] GetFileType (hFile=0x444) returned 0x1 [0129.199] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0129.199] GetFileType (hFile=0x444) returned 0x1 [0129.199] ReadFile (in: hFile=0x444, lpBuffer=0x2202ee8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x2202ee8*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0129.212] CloseHandle (hObject=0x444) returned 1 [0129.213] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sl\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sl\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0129.213] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0129.213] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sl\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\sl\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0129.213] GetFileType (hFile=0x444) returned 0x1 [0129.213] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0129.213] GetFileType (hFile=0x444) returned 0x1 [0129.213] WriteFile (in: hFile=0x444, lpBuffer=0x2200bd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x2200bd8*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0129.213] CloseHandle (hObject=0x444) returned 1 [0129.213] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sl\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sl\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0129.213] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sl\\FileSync.LocalizedResources.dll.mui.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sl\\FileSync.LocalizedResources.dll.mui.xuy", lpFilePart=0x0) returned 0x70 [0129.213] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0129.214] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sl\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\sl\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5158f887, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x5158f887, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x38de0504, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x234d0)) returned 1 [0129.214] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0129.214] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sl\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\sl\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sl\\FileSync.LocalizedResources.dll.mui.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\sl\\filesync.localizedresources.dll.mui.xuy")) returned 1 [0129.215] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0129.215] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sq", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sq", lpFilePart=0x0) returned 0x48 [0129.215] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sq\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sq\\", lpFilePart=0x0) returned 0x49 [0129.215] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sq\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d78b0 [0129.215] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0129.215] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0129.215] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0129.215] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0129.215] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0129.215] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0129.216] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0129.216] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sq", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sq", lpFilePart=0x0) returned 0x48 [0129.216] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sq\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sq\\", lpFilePart=0x0) returned 0x49 [0129.216] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sq\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d81b0 [0129.216] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0129.216] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0129.216] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0129.216] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0129.216] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0129.216] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0129.216] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sq\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sq\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0129.216] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0129.216] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sq\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\sq\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x2281520 | out: lpFileInformation=0x2281520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5196f58f, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x5196f58f, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x5196f58f, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x242d0)) returned 1 [0129.217] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0129.217] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sq\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sq\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0129.217] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0129.217] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sq\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\sq\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x22816e0 | out: lpFileInformation=0x22816e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5196f58f, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x5196f58f, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x5196f58f, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x242d0)) returned 1 [0129.217] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0129.217] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sq\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sq\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0129.217] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0129.217] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sq\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\sq\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0129.218] GetFileType (hFile=0x444) returned 0x1 [0129.218] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0129.218] GetFileType (hFile=0x444) returned 0x1 [0129.218] ReadFile (in: hFile=0x444, lpBuffer=0x2283b90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x2283b90*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0129.234] CloseHandle (hObject=0x444) returned 1 [0129.234] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sq\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sq\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0129.234] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0129.234] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sq\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\sq\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0129.234] GetFileType (hFile=0x444) returned 0x1 [0129.234] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0129.234] GetFileType (hFile=0x444) returned 0x1 [0129.234] WriteFile (in: hFile=0x444, lpBuffer=0x2281880*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x2281880*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0129.235] CloseHandle (hObject=0x444) returned 1 [0129.241] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sq\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sq\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0129.241] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sq\\FileSync.LocalizedResources.dll.mui.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sq\\FileSync.LocalizedResources.dll.mui.xuy", lpFilePart=0x0) returned 0x70 [0129.241] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0129.241] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sq\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\sq\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5196f58f, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x5196f58f, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x38e1cba2, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x242d0)) returned 1 [0129.241] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0129.241] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sq\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\sq\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sq\\FileSync.LocalizedResources.dll.mui.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\sq\\filesync.localizedresources.dll.mui.xuy")) returned 1 [0129.242] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0129.243] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sr-cyrl-ba", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sr-cyrl-ba", lpFilePart=0x0) returned 0x50 [0129.243] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sr-cyrl-ba\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sr-cyrl-ba\\", lpFilePart=0x0) returned 0x51 [0129.243] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sr-cyrl-ba\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7550 [0129.243] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0129.243] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0129.243] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0129.244] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0129.244] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0129.244] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0129.244] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0129.244] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sr-cyrl-ba", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sr-cyrl-ba", lpFilePart=0x0) returned 0x50 [0129.244] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sr-cyrl-ba\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sr-cyrl-ba\\", lpFilePart=0x0) returned 0x51 [0129.244] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sr-cyrl-ba\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d78b0 [0129.245] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0129.245] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0129.245] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0129.245] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0129.245] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0129.245] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0129.245] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sr-cyrl-ba\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sr-cyrl-ba\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x74 [0129.245] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0129.245] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sr-cyrl-ba\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\sr-cyrl-ba\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x23023a8 | out: lpFileInformation=0x23023a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51d02df8, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x51d02df8, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x51d02df8, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x236c8)) returned 1 [0129.249] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0129.249] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sr-cyrl-ba\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sr-cyrl-ba\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x74 [0129.249] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0129.249] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sr-cyrl-ba\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\sr-cyrl-ba\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x2302578 | out: lpFileInformation=0x2302578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51d02df8, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x51d02df8, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x51d02df8, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x236c8)) returned 1 [0129.249] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0129.249] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sr-cyrl-ba\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sr-cyrl-ba\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x74 [0129.249] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0129.249] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sr-cyrl-ba\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\sr-cyrl-ba\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0129.250] GetFileType (hFile=0x444) returned 0x1 [0129.250] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0129.250] GetFileType (hFile=0x444) returned 0x1 [0129.250] ReadFile (in: hFile=0x444, lpBuffer=0x2304a48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x2304a48*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0129.294] CloseHandle (hObject=0x444) returned 1 [0129.294] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sr-cyrl-ba\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sr-cyrl-ba\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x74 [0129.294] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0129.294] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sr-cyrl-ba\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\sr-cyrl-ba\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0129.295] GetFileType (hFile=0x444) returned 0x1 [0129.295] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0129.295] GetFileType (hFile=0x444) returned 0x1 [0129.295] WriteFile (in: hFile=0x444, lpBuffer=0x215ea50*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x215ea50*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0129.295] CloseHandle (hObject=0x444) returned 1 [0129.295] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sr-cyrl-ba\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sr-cyrl-ba\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x74 [0129.295] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sr-cyrl-ba\\FileSync.LocalizedResources.dll.mui.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sr-cyrl-ba\\FileSync.LocalizedResources.dll.mui.xuy", lpFilePart=0x0) returned 0x78 [0129.295] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0129.295] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sr-cyrl-ba\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\sr-cyrl-ba\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51d02df8, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x51d02df8, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x38ea159b, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x236c8)) returned 1 [0129.295] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0129.295] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sr-cyrl-ba\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\sr-cyrl-ba\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sr-cyrl-ba\\FileSync.LocalizedResources.dll.mui.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\sr-cyrl-ba\\filesync.localizedresources.dll.mui.xuy")) returned 1 [0129.296] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0129.296] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sr-cyrl-rs", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sr-cyrl-rs", lpFilePart=0x0) returned 0x50 [0129.296] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sr-cyrl-rs\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sr-cyrl-rs\\", lpFilePart=0x0) returned 0x51 [0129.296] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sr-cyrl-rs\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d79d0 [0129.297] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0129.297] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0129.297] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0129.297] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0129.297] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0129.297] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0129.297] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0129.297] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sr-cyrl-rs", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sr-cyrl-rs", lpFilePart=0x0) returned 0x50 [0129.297] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sr-cyrl-rs\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sr-cyrl-rs\\", lpFilePart=0x0) returned 0x51 [0129.297] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sr-cyrl-rs\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d81b0 [0129.297] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0129.298] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0129.298] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0129.298] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0129.298] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0129.298] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0129.298] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sr-cyrl-rs\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sr-cyrl-rs\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x74 [0129.298] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0129.298] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sr-cyrl-rs\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\sr-cyrl-rs\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x21832c0 | out: lpFileInformation=0x21832c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x520703fb, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x520703fb, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x520703fb, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x238d0)) returned 1 [0129.298] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0129.298] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sr-cyrl-rs\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sr-cyrl-rs\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x74 [0129.298] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0129.298] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sr-cyrl-rs\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\sr-cyrl-rs\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x2183490 | out: lpFileInformation=0x2183490*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x520703fb, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x520703fb, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x520703fb, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x238d0)) returned 1 [0129.298] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0129.299] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sr-cyrl-rs\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sr-cyrl-rs\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x74 [0129.299] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0129.299] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sr-cyrl-rs\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\sr-cyrl-rs\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0129.299] GetFileType (hFile=0x444) returned 0x1 [0129.299] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0129.299] GetFileType (hFile=0x444) returned 0x1 [0129.299] ReadFile (in: hFile=0x444, lpBuffer=0x2185960, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x2185960*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0129.313] CloseHandle (hObject=0x444) returned 1 [0129.313] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sr-cyrl-rs\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sr-cyrl-rs\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x74 [0129.313] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0129.313] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sr-cyrl-rs\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\sr-cyrl-rs\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0129.313] GetFileType (hFile=0x444) returned 0x1 [0129.313] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0129.313] GetFileType (hFile=0x444) returned 0x1 [0129.313] WriteFile (in: hFile=0x444, lpBuffer=0x2183640*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x2183640*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0129.314] CloseHandle (hObject=0x444) returned 1 [0129.314] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sr-cyrl-rs\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sr-cyrl-rs\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x74 [0129.314] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sr-cyrl-rs\\FileSync.LocalizedResources.dll.mui.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sr-cyrl-rs\\FileSync.LocalizedResources.dll.mui.xuy", lpFilePart=0x0) returned 0x78 [0129.314] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0129.314] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sr-cyrl-rs\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\sr-cyrl-rs\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x520703fb, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x520703fb, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x38ec770b, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x238d0)) returned 1 [0129.314] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0129.314] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sr-cyrl-rs\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\sr-cyrl-rs\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sr-cyrl-rs\\FileSync.LocalizedResources.dll.mui.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\sr-cyrl-rs\\filesync.localizedresources.dll.mui.xuy")) returned 1 [0129.315] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0129.315] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sr-latn-rs", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sr-latn-rs", lpFilePart=0x0) returned 0x50 [0129.315] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sr-latn-rs\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sr-latn-rs\\", lpFilePart=0x0) returned 0x51 [0129.315] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sr-latn-rs\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7fd0 [0129.316] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0129.316] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0129.316] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0129.316] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0129.316] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0129.316] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0129.316] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0129.316] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sr-latn-rs", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sr-latn-rs", lpFilePart=0x0) returned 0x50 [0129.316] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sr-latn-rs\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sr-latn-rs\\", lpFilePart=0x0) returned 0x51 [0129.316] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sr-latn-rs\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d81b0 [0129.316] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0129.317] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0129.317] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0129.317] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0129.317] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0129.317] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0129.317] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sr-latn-rs\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sr-latn-rs\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x74 [0129.317] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0129.317] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sr-latn-rs\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\sr-latn-rs\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x22041b8 | out: lpFileInformation=0x22041b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5247637a, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x5247637a, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x5247637a, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x238d0)) returned 1 [0129.319] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0129.319] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sr-latn-rs\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sr-latn-rs\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x74 [0129.319] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0129.319] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sr-latn-rs\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\sr-latn-rs\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x2204388 | out: lpFileInformation=0x2204388*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5247637a, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x5247637a, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x5247637a, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x238d0)) returned 1 [0129.319] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0129.319] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sr-latn-rs\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sr-latn-rs\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x74 [0129.319] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0129.319] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sr-latn-rs\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\sr-latn-rs\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0129.320] GetFileType (hFile=0x444) returned 0x1 [0129.320] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0129.320] GetFileType (hFile=0x444) returned 0x1 [0129.320] ReadFile (in: hFile=0x444, lpBuffer=0x2206858, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x2206858*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0129.343] CloseHandle (hObject=0x444) returned 1 [0129.345] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sr-latn-rs\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sr-latn-rs\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x74 [0129.346] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0129.346] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sr-latn-rs\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\sr-latn-rs\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0129.346] GetFileType (hFile=0x444) returned 0x1 [0129.346] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0129.346] GetFileType (hFile=0x444) returned 0x1 [0129.346] WriteFile (in: hFile=0x444, lpBuffer=0x2204538*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x2204538*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0129.346] CloseHandle (hObject=0x444) returned 1 [0129.346] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sr-latn-rs\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sr-latn-rs\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x74 [0129.346] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sr-latn-rs\\FileSync.LocalizedResources.dll.mui.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sr-latn-rs\\FileSync.LocalizedResources.dll.mui.xuy", lpFilePart=0x0) returned 0x78 [0129.346] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0129.346] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sr-latn-rs\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\sr-latn-rs\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5247637a, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x5247637a, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x38f13d6a, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x238d0)) returned 1 [0129.347] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0129.347] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sr-latn-rs\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\sr-latn-rs\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sr-latn-rs\\FileSync.LocalizedResources.dll.mui.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\sr-latn-rs\\filesync.localizedresources.dll.mui.xuy")) returned 1 [0129.348] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0129.348] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sv", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sv", lpFilePart=0x0) returned 0x48 [0129.348] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sv\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sv\\", lpFilePart=0x0) returned 0x49 [0129.348] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sv\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7e50 [0129.348] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0129.348] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0129.349] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0129.349] FindClose (in: hFindFile=0x5d7e50 | out: hFindFile=0x5d7e50) returned 1 [0129.349] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0129.349] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0129.349] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0129.349] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sv", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sv", lpFilePart=0x0) returned 0x48 [0129.349] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sv\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sv\\", lpFilePart=0x0) returned 0x49 [0129.349] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sv\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7c70 [0129.349] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0129.349] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0129.349] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0129.350] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0129.350] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0129.350] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0129.350] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sv\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sv\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0129.350] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0129.350] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sv\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\sv\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x2284ed0 | out: lpFileInformation=0x2284ed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5285608f, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x5285608f, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x5285608f, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x21ac8)) returned 1 [0129.350] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0129.350] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sv\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sv\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0129.350] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0129.350] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sv\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\sv\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x2285090 | out: lpFileInformation=0x2285090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5285608f, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x5285608f, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x5285608f, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x21ac8)) returned 1 [0129.350] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0129.350] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sv\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sv\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0129.350] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0129.350] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sv\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\sv\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0129.351] GetFileType (hFile=0x444) returned 0x1 [0129.351] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0129.351] GetFileType (hFile=0x444) returned 0x1 [0129.352] ReadFile (in: hFile=0x444, lpBuffer=0x2287540, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x2287540*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0129.368] CloseHandle (hObject=0x444) returned 1 [0129.368] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sv\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sv\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0129.368] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0129.368] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sv\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\sv\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0129.369] GetFileType (hFile=0x444) returned 0x1 [0129.369] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0129.369] GetFileType (hFile=0x444) returned 0x1 [0129.369] WriteFile (in: hFile=0x444, lpBuffer=0x2285230*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x2285230*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0129.388] CloseHandle (hObject=0x444) returned 1 [0129.388] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sv\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sv\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0129.389] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sv\\FileSync.LocalizedResources.dll.mui.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sv\\FileSync.LocalizedResources.dll.mui.xuy", lpFilePart=0x0) returned 0x70 [0129.389] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0129.389] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sv\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\sv\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5285608f, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x5285608f, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x38f929bd, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x21ac8)) returned 1 [0129.389] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0129.389] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sv\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\sv\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sv\\FileSync.LocalizedResources.dll.mui.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\sv\\filesync.localizedresources.dll.mui.xuy")) returned 1 [0129.391] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0129.391] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sw", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sw", lpFilePart=0x0) returned 0x48 [0129.391] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sw\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sw\\", lpFilePart=0x0) returned 0x49 [0129.391] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sw\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d79d0 [0129.392] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0129.392] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0129.392] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0129.392] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0129.392] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0129.392] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0129.392] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0129.393] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sw", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sw", lpFilePart=0x0) returned 0x48 [0129.393] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sw\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sw\\", lpFilePart=0x0) returned 0x49 [0129.393] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sw\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7eb0 [0129.393] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0129.394] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0129.394] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0129.394] FindClose (in: hFindFile=0x5d7eb0 | out: hFindFile=0x5d7eb0) returned 1 [0129.394] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0129.394] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0129.394] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sw\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sw\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0129.394] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0129.394] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sw\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\sw\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x2305b78 | out: lpFileInformation=0x2305b78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52c5bff9, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x52c5bff9, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x52c5bff9, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x218d0)) returned 1 [0129.395] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0129.395] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sw\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sw\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0129.395] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0129.395] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sw\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\sw\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x2305d38 | out: lpFileInformation=0x2305d38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52c5bff9, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x52c5bff9, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x52c5bff9, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x218d0)) returned 1 [0129.396] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0129.396] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sw\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sw\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0129.396] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0129.396] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sw\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\sw\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0129.397] GetFileType (hFile=0x444) returned 0x1 [0129.397] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0129.397] GetFileType (hFile=0x444) returned 0x1 [0129.397] ReadFile (in: hFile=0x444, lpBuffer=0x23081e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x23081e8*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0129.456] CloseHandle (hObject=0x444) returned 1 [0129.456] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sw\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sw\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0129.456] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0129.456] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sw\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\sw\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0129.457] GetFileType (hFile=0x444) returned 0x1 [0129.457] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0129.457] GetFileType (hFile=0x444) returned 0x1 [0129.457] WriteFile (in: hFile=0x444, lpBuffer=0x215ea40*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x215ea40*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0129.457] CloseHandle (hObject=0x444) returned 1 [0129.457] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sw\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sw\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0129.457] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sw\\FileSync.LocalizedResources.dll.mui.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sw\\FileSync.LocalizedResources.dll.mui.xuy", lpFilePart=0x0) returned 0x70 [0129.457] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0129.457] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sw\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\sw\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52c5bff9, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x52c5bff9, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3902d9ca, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x218d0)) returned 1 [0129.457] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0129.457] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sw\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\sw\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sw\\FileSync.LocalizedResources.dll.mui.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\sw\\filesync.localizedresources.dll.mui.xuy")) returned 1 [0129.459] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0129.459] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ta", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ta", lpFilePart=0x0) returned 0x48 [0129.459] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ta\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ta\\", lpFilePart=0x0) returned 0x49 [0129.459] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ta\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7fd0 [0129.459] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0129.459] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0129.460] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0129.460] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0129.460] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0129.460] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0129.460] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0129.460] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ta", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ta", lpFilePart=0x0) returned 0x48 [0129.460] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ta\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ta\\", lpFilePart=0x0) returned 0x49 [0129.460] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ta\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7d30 [0129.460] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0129.460] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0129.461] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0129.461] FindClose (in: hFindFile=0x5d7d30 | out: hFindFile=0x5d7d30) returned 1 [0129.461] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0129.461] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0129.461] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ta\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ta\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0129.461] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0129.461] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ta\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ta\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x2186810 | out: lpFileInformation=0x2186810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x538d14f4, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x538d14f4, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x538d14f4, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x262d0)) returned 1 [0129.461] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0129.461] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ta\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ta\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0129.461] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0129.461] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ta\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ta\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x21869d0 | out: lpFileInformation=0x21869d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x538d14f4, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x538d14f4, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x538d14f4, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x262d0)) returned 1 [0129.461] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0129.462] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ta\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ta\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0129.462] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0129.462] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ta\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ta\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0129.462] GetFileType (hFile=0x444) returned 0x1 [0129.463] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0129.463] GetFileType (hFile=0x444) returned 0x1 [0129.463] ReadFile (in: hFile=0x444, lpBuffer=0x2188e80, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x2188e80*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0129.502] CloseHandle (hObject=0x444) returned 1 [0129.502] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ta\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ta\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0129.502] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0129.502] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ta\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ta\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0129.502] GetFileType (hFile=0x444) returned 0x1 [0129.502] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0129.502] GetFileType (hFile=0x444) returned 0x1 [0129.502] WriteFile (in: hFile=0x444, lpBuffer=0x2186b70*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x2186b70*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0129.502] CloseHandle (hObject=0x444) returned 1 [0129.502] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ta\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ta\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0129.502] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ta\\FileSync.LocalizedResources.dll.mui.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ta\\FileSync.LocalizedResources.dll.mui.xuy", lpFilePart=0x0) returned 0x70 [0129.503] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0129.503] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ta\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ta\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x538d14f4, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x538d14f4, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x390a0062, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x262d0)) returned 1 [0129.503] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0129.503] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ta\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ta\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ta\\FileSync.LocalizedResources.dll.mui.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ta\\filesync.localizedresources.dll.mui.xuy")) returned 1 [0129.504] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0129.504] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\te", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\te", lpFilePart=0x0) returned 0x48 [0129.504] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\te\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\te\\", lpFilePart=0x0) returned 0x49 [0129.504] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\te\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7550 [0129.504] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0129.504] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0129.504] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0129.504] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0129.504] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0129.504] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0129.505] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0129.505] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\te", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\te", lpFilePart=0x0) returned 0x48 [0129.505] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\te\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\te\\", lpFilePart=0x0) returned 0x49 [0129.505] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\te\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d78b0 [0129.505] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0129.505] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0129.505] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0129.505] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0129.505] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0129.505] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0129.505] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\te\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\te\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0129.505] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0129.505] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\te\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\te\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x22074b8 | out: lpFileInformation=0x22074b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53ea10bd, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x53ea10bd, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x53ea10bd, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x23ad0)) returned 1 [0129.506] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0129.506] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\te\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\te\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0129.506] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0129.506] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\te\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\te\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x2207678 | out: lpFileInformation=0x2207678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53ea10bd, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x53ea10bd, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x53ea10bd, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x23ad0)) returned 1 [0129.506] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0129.506] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\te\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\te\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0129.506] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0129.506] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\te\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\te\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0129.507] GetFileType (hFile=0x444) returned 0x1 [0129.507] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0129.507] GetFileType (hFile=0x444) returned 0x1 [0129.507] ReadFile (in: hFile=0x444, lpBuffer=0x2209b28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x2209b28*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0129.520] CloseHandle (hObject=0x444) returned 1 [0129.520] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\te\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\te\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0129.520] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0129.520] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\te\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\te\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0129.520] GetFileType (hFile=0x444) returned 0x1 [0129.521] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0129.521] GetFileType (hFile=0x444) returned 0x1 [0129.521] WriteFile (in: hFile=0x444, lpBuffer=0x2207818*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x2207818*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0129.521] CloseHandle (hObject=0x444) returned 1 [0129.521] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\te\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\te\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0129.521] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\te\\FileSync.LocalizedResources.dll.mui.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\te\\FileSync.LocalizedResources.dll.mui.xuy", lpFilePart=0x0) returned 0x70 [0129.521] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0129.521] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\te\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\te\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53ea10bd, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x53ea10bd, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x390c6695, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x23ad0)) returned 1 [0129.521] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0129.521] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\te\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\te\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\te\\FileSync.LocalizedResources.dll.mui.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\te\\filesync.localizedresources.dll.mui.xuy")) returned 1 [0129.522] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0129.522] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tg-cyrl", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tg-cyrl", lpFilePart=0x0) returned 0x4d [0129.522] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tg-cyrl\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tg-cyrl\\", lpFilePart=0x0) returned 0x4e [0129.522] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tg-cyrl\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d8090 [0129.523] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0129.523] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0129.523] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0129.523] FindClose (in: hFindFile=0x5d8090 | out: hFindFile=0x5d8090) returned 1 [0129.523] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0129.523] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0129.523] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0129.523] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tg-cyrl", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tg-cyrl", lpFilePart=0x0) returned 0x4d [0129.523] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tg-cyrl\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tg-cyrl\\", lpFilePart=0x0) returned 0x4e [0129.523] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tg-cyrl\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d75b0 [0129.523] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0129.523] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0129.524] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0129.524] FindClose (in: hFindFile=0x5d75b0 | out: hFindFile=0x5d75b0) returned 1 [0129.524] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0129.524] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0129.524] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tg-cyrl\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tg-cyrl\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x71 [0129.524] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0129.524] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tg-cyrl\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\tg-cyrl\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x2288270 | out: lpFileInformation=0x2288270*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54280dcf, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x54280dcf, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x54280dcf, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x254d0)) returned 1 [0129.524] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0129.524] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tg-cyrl\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tg-cyrl\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x71 [0129.524] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0129.524] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tg-cyrl\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\tg-cyrl\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x2288438 | out: lpFileInformation=0x2288438*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54280dcf, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x54280dcf, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x54280dcf, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x254d0)) returned 1 [0129.524] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0129.524] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tg-cyrl\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tg-cyrl\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x71 [0129.524] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0129.524] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tg-cyrl\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\tg-cyrl\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0129.525] GetFileType (hFile=0x444) returned 0x1 [0129.525] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0129.525] GetFileType (hFile=0x444) returned 0x1 [0129.525] ReadFile (in: hFile=0x444, lpBuffer=0x228a8f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x228a8f8*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0129.553] CloseHandle (hObject=0x444) returned 1 [0129.553] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tg-cyrl\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tg-cyrl\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x71 [0129.553] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0129.553] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tg-cyrl\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\tg-cyrl\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0129.553] GetFileType (hFile=0x444) returned 0x1 [0129.553] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0129.553] GetFileType (hFile=0x444) returned 0x1 [0129.553] WriteFile (in: hFile=0x444, lpBuffer=0x22885e0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x22885e0*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0129.554] CloseHandle (hObject=0x444) returned 1 [0129.554] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tg-cyrl\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tg-cyrl\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x71 [0129.554] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tg-cyrl\\FileSync.LocalizedResources.dll.mui.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tg-cyrl\\FileSync.LocalizedResources.dll.mui.xuy", lpFilePart=0x0) returned 0x75 [0129.554] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0129.554] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tg-cyrl\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\tg-cyrl\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54280dcf, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x54280dcf, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x39112596, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x254d0)) returned 1 [0129.554] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0129.554] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tg-cyrl\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\tg-cyrl\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tg-cyrl\\FileSync.LocalizedResources.dll.mui.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\tg-cyrl\\filesync.localizedresources.dll.mui.xuy")) returned 1 [0129.555] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0129.555] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\th", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\th", lpFilePart=0x0) returned 0x48 [0129.556] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\th\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\th\\", lpFilePart=0x0) returned 0x49 [0129.556] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\th\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7d30 [0129.556] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0129.556] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0129.556] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0129.556] FindClose (in: hFindFile=0x5d7d30 | out: hFindFile=0x5d7d30) returned 1 [0129.556] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0129.556] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0129.556] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0129.556] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\th", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\th", lpFilePart=0x0) returned 0x48 [0129.556] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\th\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\th\\", lpFilePart=0x0) returned 0x49 [0129.556] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\th\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7370 [0129.556] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0129.557] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0129.557] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0129.557] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0129.557] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0129.557] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0129.557] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\th\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\th\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0129.557] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0129.557] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\th\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\th\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x2308f50 | out: lpFileInformation=0x2308f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5463a88d, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x5463a88d, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x5463a88d, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x1fad0)) returned 1 [0129.558] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0129.558] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\th\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\th\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0129.558] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0129.558] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\th\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\th\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x2309110 | out: lpFileInformation=0x2309110*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5463a88d, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x5463a88d, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x5463a88d, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x1fad0)) returned 1 [0129.558] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0129.558] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\th\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\th\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0129.558] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0129.558] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\th\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\th\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0129.559] GetFileType (hFile=0x444) returned 0x1 [0129.559] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0129.559] GetFileType (hFile=0x444) returned 0x1 [0129.559] ReadFile (in: hFile=0x444, lpBuffer=0x230b5c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x230b5c0*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0129.601] CloseHandle (hObject=0x444) returned 1 [0129.601] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\th\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\th\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0129.601] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0129.601] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\th\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\th\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0129.602] GetFileType (hFile=0x444) returned 0x1 [0129.602] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0129.602] GetFileType (hFile=0x444) returned 0x1 [0129.602] WriteFile (in: hFile=0x444, lpBuffer=0x215ea40*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x215ea40*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0129.602] CloseHandle (hObject=0x444) returned 1 [0129.602] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\th\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\th\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0129.602] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\th\\FileSync.LocalizedResources.dll.mui.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\th\\FileSync.LocalizedResources.dll.mui.xuy", lpFilePart=0x0) returned 0x70 [0129.602] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0129.602] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\th\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\th\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5463a88d, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x5463a88d, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x39184d79, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x1fad0)) returned 1 [0129.602] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0129.602] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\th\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\th\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\th\\FileSync.LocalizedResources.dll.mui.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\th\\filesync.localizedresources.dll.mui.xuy")) returned 1 [0129.603] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0129.603] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ti", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ti", lpFilePart=0x0) returned 0x48 [0129.603] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ti\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ti\\", lpFilePart=0x0) returned 0x49 [0129.604] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ti\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d79d0 [0129.604] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0129.604] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0129.604] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0129.604] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0129.604] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0129.604] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0129.604] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0129.604] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ti", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ti", lpFilePart=0x0) returned 0x48 [0129.604] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ti\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ti\\", lpFilePart=0x0) returned 0x49 [0129.605] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ti\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7370 [0129.605] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0129.605] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0129.605] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0129.605] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0129.605] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0129.605] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0129.605] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ti\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ti\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0129.605] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0129.605] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ti\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ti\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x2189bf0 | out: lpFileInformation=0x2189bf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x549f4385, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x549f4385, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x549f4385, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x19ed0)) returned 1 [0129.605] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0129.605] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ti\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ti\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0129.605] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0129.606] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ti\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ti\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x2189db0 | out: lpFileInformation=0x2189db0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x549f4385, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x549f4385, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x549f4385, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x19ed0)) returned 1 [0129.606] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0129.606] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ti\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ti\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0129.606] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0129.606] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ti\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ti\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0129.606] GetFileType (hFile=0x444) returned 0x1 [0129.606] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0129.607] GetFileType (hFile=0x444) returned 0x1 [0129.607] ReadFile (in: hFile=0x444, lpBuffer=0x218c260, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x218c260*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0129.628] CloseHandle (hObject=0x444) returned 1 [0129.628] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ti\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ti\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0129.628] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0129.628] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ti\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ti\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0129.629] GetFileType (hFile=0x444) returned 0x1 [0129.629] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0129.629] GetFileType (hFile=0x444) returned 0x1 [0129.629] WriteFile (in: hFile=0x444, lpBuffer=0x2189f50*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x2189f50*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0129.629] CloseHandle (hObject=0x444) returned 1 [0129.629] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ti\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ti\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0129.629] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ti\\FileSync.LocalizedResources.dll.mui.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ti\\FileSync.LocalizedResources.dll.mui.xuy", lpFilePart=0x0) returned 0x70 [0129.629] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0129.629] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ti\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ti\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x549f4385, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x549f4385, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x391d1200, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x19ed0)) returned 1 [0129.629] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0129.629] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ti\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ti\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ti\\FileSync.LocalizedResources.dll.mui.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ti\\filesync.localizedresources.dll.mui.xuy")) returned 1 [0129.631] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0129.631] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tk-tm", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tk-tm", lpFilePart=0x0) returned 0x4b [0129.631] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tk-tm\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tk-tm\\", lpFilePart=0x0) returned 0x4c [0129.631] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tk-tm\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7eb0 [0129.631] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0129.631] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0129.631] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0129.631] FindClose (in: hFindFile=0x5d7eb0 | out: hFindFile=0x5d7eb0) returned 1 [0129.631] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0129.631] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0129.631] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0129.631] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tk-tm", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tk-tm", lpFilePart=0x0) returned 0x4b [0129.631] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tk-tm\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tk-tm\\", lpFilePart=0x0) returned 0x4c [0129.631] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tk-tm\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d78b0 [0129.632] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0129.632] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0129.632] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0129.632] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0129.632] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0129.632] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0129.632] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tk-tm\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tk-tm\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0129.632] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0129.632] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tk-tm\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\tk-tm\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x220a948 | out: lpFileInformation=0x220a948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54eb8f10, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x54eb8f10, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x54eb8f10, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x210d0)) returned 1 [0129.633] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0129.633] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tk-tm\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tk-tm\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0129.633] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0129.633] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tk-tm\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\tk-tm\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x220ab08 | out: lpFileInformation=0x220ab08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54eb8f10, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x54eb8f10, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x54eb8f10, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x210d0)) returned 1 [0129.633] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0129.633] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tk-tm\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tk-tm\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0129.633] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0129.633] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tk-tm\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\tk-tm\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0129.634] GetFileType (hFile=0x444) returned 0x1 [0129.634] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0129.634] GetFileType (hFile=0x444) returned 0x1 [0129.634] ReadFile (in: hFile=0x444, lpBuffer=0x220cfb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x220cfb8*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0129.651] CloseHandle (hObject=0x444) returned 1 [0129.651] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tk-tm\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tk-tm\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0129.651] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0129.651] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tk-tm\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\tk-tm\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0129.651] GetFileType (hFile=0x444) returned 0x1 [0129.651] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0129.651] GetFileType (hFile=0x444) returned 0x1 [0129.652] WriteFile (in: hFile=0x444, lpBuffer=0x220aca8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x220aca8*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0129.652] CloseHandle (hObject=0x444) returned 1 [0129.652] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tk-tm\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tk-tm\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0129.652] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tk-tm\\FileSync.LocalizedResources.dll.mui.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tk-tm\\FileSync.LocalizedResources.dll.mui.xuy", lpFilePart=0x0) returned 0x73 [0129.652] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0129.652] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tk-tm\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\tk-tm\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54eb8f10, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x54eb8f10, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x391f7574, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x210d0)) returned 1 [0129.652] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0129.652] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tk-tm\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\tk-tm\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tk-tm\\FileSync.LocalizedResources.dll.mui.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\tk-tm\\filesync.localizedresources.dll.mui.xuy")) returned 1 [0129.653] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0129.653] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tn-za", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tn-za", lpFilePart=0x0) returned 0x4b [0129.653] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tn-za\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tn-za\\", lpFilePart=0x0) returned 0x4c [0129.653] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tn-za\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7cd0 [0129.653] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0129.654] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0129.654] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0129.654] FindClose (in: hFindFile=0x5d7cd0 | out: hFindFile=0x5d7cd0) returned 1 [0129.660] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0129.660] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0129.660] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0129.660] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tn-za", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tn-za", lpFilePart=0x0) returned 0x4b [0129.660] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tn-za\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tn-za\\", lpFilePart=0x0) returned 0x4c [0129.660] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tn-za\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d79d0 [0129.661] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0129.661] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0129.661] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0129.661] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0129.661] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0129.661] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0129.661] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tn-za\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tn-za\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0129.661] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0129.661] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tn-za\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\tn-za\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x228b6a0 | out: lpFileInformation=0x228b6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55272929, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x55272929, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x55272929, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x26ed0)) returned 1 [0129.661] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0129.661] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tn-za\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tn-za\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0129.661] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0129.662] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tn-za\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\tn-za\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x228b860 | out: lpFileInformation=0x228b860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55272929, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x55272929, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x55272929, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x26ed0)) returned 1 [0129.662] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0129.662] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tn-za\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tn-za\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0129.662] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0129.662] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tn-za\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\tn-za\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0129.663] GetFileType (hFile=0x444) returned 0x1 [0129.663] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0129.663] GetFileType (hFile=0x444) returned 0x1 [0129.663] ReadFile (in: hFile=0x444, lpBuffer=0x228dd10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x228dd10*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0129.682] CloseHandle (hObject=0x444) returned 1 [0129.682] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tn-za\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tn-za\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0129.682] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0129.682] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tn-za\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\tn-za\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0129.683] GetFileType (hFile=0x444) returned 0x1 [0129.683] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0129.683] GetFileType (hFile=0x444) returned 0x1 [0129.683] WriteFile (in: hFile=0x444, lpBuffer=0x228ba00*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x228ba00*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0129.683] CloseHandle (hObject=0x444) returned 1 [0129.683] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tn-za\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tn-za\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0129.683] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tn-za\\FileSync.LocalizedResources.dll.mui.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tn-za\\FileSync.LocalizedResources.dll.mui.xuy", lpFilePart=0x0) returned 0x73 [0129.683] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0129.683] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tn-za\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\tn-za\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55272929, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x55272929, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x39243907, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x26ed0)) returned 1 [0129.683] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0129.683] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tn-za\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\tn-za\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tn-za\\FileSync.LocalizedResources.dll.mui.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\tn-za\\filesync.localizedresources.dll.mui.xuy")) returned 1 [0129.684] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0129.684] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tr", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tr", lpFilePart=0x0) returned 0x48 [0129.685] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tr\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tr\\", lpFilePart=0x0) returned 0x49 [0129.685] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tr\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d78b0 [0129.688] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0129.688] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0129.688] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0129.688] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0129.688] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0129.688] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0129.688] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0129.688] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tr", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tr", lpFilePart=0x0) returned 0x48 [0129.688] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tr\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tr\\", lpFilePart=0x0) returned 0x49 [0129.688] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tr\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7550 [0129.688] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0129.689] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0129.689] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0129.689] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0129.689] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0129.689] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0129.689] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tr\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tr\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0129.689] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0129.689] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tr\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\tr\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x230c348 | out: lpFileInformation=0x230c348*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x556526d2, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x556526d2, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x556526d2, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x222d0)) returned 1 [0129.698] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0129.698] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tr\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tr\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0129.698] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0129.698] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tr\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\tr\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x230c508 | out: lpFileInformation=0x230c508*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x556526d2, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x556526d2, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x556526d2, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x222d0)) returned 1 [0129.698] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0129.698] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tr\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tr\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0129.699] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0129.699] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tr\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\tr\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0129.699] GetFileType (hFile=0x444) returned 0x1 [0129.699] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0129.699] GetFileType (hFile=0x444) returned 0x1 [0129.699] ReadFile (in: hFile=0x444, lpBuffer=0x230e9b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x230e9b8*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0129.744] CloseHandle (hObject=0x444) returned 1 [0129.744] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tr\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tr\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0129.744] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0129.744] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tr\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\tr\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0129.744] GetFileType (hFile=0x444) returned 0x1 [0129.744] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0129.744] GetFileType (hFile=0x444) returned 0x1 [0129.744] WriteFile (in: hFile=0x444, lpBuffer=0x215ea40*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x215ea40*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0129.745] CloseHandle (hObject=0x444) returned 1 [0129.745] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tr\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tr\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0129.745] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tr\\FileSync.LocalizedResources.dll.mui.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tr\\FileSync.LocalizedResources.dll.mui.xuy", lpFilePart=0x0) returned 0x70 [0129.745] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0129.745] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tr\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\tr\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x556526d2, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x556526d2, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x392dc32d, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x222d0)) returned 1 [0129.745] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0129.745] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tr\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\tr\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tr\\FileSync.LocalizedResources.dll.mui.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\tr\\filesync.localizedresources.dll.mui.xuy")) returned 1 [0129.746] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0129.746] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tt", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tt", lpFilePart=0x0) returned 0x48 [0129.746] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tt\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tt\\", lpFilePart=0x0) returned 0x49 [0129.746] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tt\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d81b0 [0129.747] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0129.747] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0129.747] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0129.747] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0129.747] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0129.747] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0129.748] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0129.748] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tt", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tt", lpFilePart=0x0) returned 0x48 [0129.748] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tt\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tt\\", lpFilePart=0x0) returned 0x49 [0129.748] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tt\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d78b0 [0129.749] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0129.749] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0129.749] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0129.749] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0129.749] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0129.749] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0129.749] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tt\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tt\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0129.749] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0129.749] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tt\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\tt\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x218cfd0 | out: lpFileInformation=0x218cfd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55aa4a71, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x55aa4a71, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x55aa4a71, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x228d0)) returned 1 [0129.749] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0129.749] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tt\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tt\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0129.749] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0129.749] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tt\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\tt\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x218d190 | out: lpFileInformation=0x218d190*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55aa4a71, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x55aa4a71, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x55aa4a71, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x228d0)) returned 1 [0129.750] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0129.750] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tt\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tt\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0129.750] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0129.750] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tt\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\tt\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0129.750] GetFileType (hFile=0x444) returned 0x1 [0129.750] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0129.750] GetFileType (hFile=0x444) returned 0x1 [0129.751] ReadFile (in: hFile=0x444, lpBuffer=0x218f640, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x218f640*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0129.764] CloseHandle (hObject=0x444) returned 1 [0129.764] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tt\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tt\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0129.764] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0129.764] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tt\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\tt\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0129.764] GetFileType (hFile=0x444) returned 0x1 [0129.764] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0129.764] GetFileType (hFile=0x444) returned 0x1 [0129.764] WriteFile (in: hFile=0x444, lpBuffer=0x218d330*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x218d330*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0129.765] CloseHandle (hObject=0x444) returned 1 [0129.765] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tt\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tt\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0129.765] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tt\\FileSync.LocalizedResources.dll.mui.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tt\\FileSync.LocalizedResources.dll.mui.xuy", lpFilePart=0x0) returned 0x70 [0129.765] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0129.765] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tt\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\tt\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55aa4a71, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x55aa4a71, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x39328752, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x228d0)) returned 1 [0129.765] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0129.765] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tt\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\tt\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tt\\FileSync.LocalizedResources.dll.mui.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\tt\\filesync.localizedresources.dll.mui.xuy")) returned 1 [0129.766] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0129.766] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ug-arab", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ug-arab", lpFilePart=0x0) returned 0x4d [0129.766] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ug-arab\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ug-arab\\", lpFilePart=0x0) returned 0x4e [0129.766] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ug-arab\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7550 [0129.767] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0129.767] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0129.767] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0129.767] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0129.767] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0129.767] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0129.767] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0129.767] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ug-arab", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ug-arab", lpFilePart=0x0) returned 0x4d [0129.767] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ug-arab\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ug-arab\\", lpFilePart=0x0) returned 0x4e [0129.767] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ug-arab\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d78b0 [0129.767] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0129.767] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0129.768] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0129.768] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0129.768] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0129.768] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0129.768] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ug-arab\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ug-arab\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x71 [0129.768] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0129.768] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ug-arab\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ug-arab\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x220dd88 | out: lpFileInformation=0x220dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55eaaa74, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x55eaaa74, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x55eaaa74, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x214d0)) returned 1 [0129.769] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0129.769] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ug-arab\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ug-arab\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x71 [0129.769] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0129.769] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ug-arab\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ug-arab\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x220df50 | out: lpFileInformation=0x220df50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55eaaa74, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x55eaaa74, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x55eaaa74, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x214d0)) returned 1 [0129.769] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0129.769] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ug-arab\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ug-arab\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x71 [0129.769] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0129.769] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ug-arab\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ug-arab\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0129.770] GetFileType (hFile=0x444) returned 0x1 [0129.770] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0129.770] GetFileType (hFile=0x444) returned 0x1 [0129.770] ReadFile (in: hFile=0x444, lpBuffer=0x2210410, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x2210410*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0129.787] CloseHandle (hObject=0x444) returned 1 [0129.787] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ug-arab\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ug-arab\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x71 [0129.787] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0129.787] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ug-arab\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ug-arab\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0129.787] GetFileType (hFile=0x444) returned 0x1 [0129.787] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0129.787] GetFileType (hFile=0x444) returned 0x1 [0129.787] WriteFile (in: hFile=0x444, lpBuffer=0x220e0f8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x220e0f8*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0129.787] CloseHandle (hObject=0x444) returned 1 [0129.788] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ug-arab\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ug-arab\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x71 [0129.788] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ug-arab\\FileSync.LocalizedResources.dll.mui.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ug-arab\\FileSync.LocalizedResources.dll.mui.xuy", lpFilePart=0x0) returned 0x75 [0129.788] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0129.788] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ug-arab\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ug-arab\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55eaaa74, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x55eaaa74, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3934ea82, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x214d0)) returned 1 [0129.788] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0129.788] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ug-arab\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ug-arab\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ug-arab\\FileSync.LocalizedResources.dll.mui.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ug-arab\\filesync.localizedresources.dll.mui.xuy")) returned 1 [0129.789] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0129.789] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\uk", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\uk", lpFilePart=0x0) returned 0x48 [0129.789] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\uk\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\uk\\", lpFilePart=0x0) returned 0x49 [0129.789] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\uk\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7d30 [0129.790] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0129.790] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0129.790] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0129.790] FindClose (in: hFindFile=0x5d7d30 | out: hFindFile=0x5d7d30) returned 1 [0129.790] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0129.790] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0129.790] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0129.790] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\uk", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\uk", lpFilePart=0x0) returned 0x48 [0129.790] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\uk\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\uk\\", lpFilePart=0x0) returned 0x49 [0129.790] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\uk\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7370 [0129.790] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0129.790] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0129.791] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0129.791] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0129.791] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0129.791] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0129.791] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\uk\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\uk\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0129.791] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0129.791] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\uk\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\uk\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x228ea68 | out: lpFileInformation=0x228ea68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x562d6ba3, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x562d6ba3, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x562d6ba3, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x23cd0)) returned 1 [0129.792] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0129.792] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\uk\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\uk\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0129.792] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0129.792] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\uk\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\uk\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x228ec28 | out: lpFileInformation=0x228ec28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x562d6ba3, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x562d6ba3, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x562d6ba3, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x23cd0)) returned 1 [0129.792] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0129.792] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\uk\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\uk\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0129.792] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0129.792] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\uk\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\uk\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0129.793] GetFileType (hFile=0x444) returned 0x1 [0129.793] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0129.793] GetFileType (hFile=0x444) returned 0x1 [0129.793] ReadFile (in: hFile=0x444, lpBuffer=0x22910d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x22910d8*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0129.805] CloseHandle (hObject=0x444) returned 1 [0129.806] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\uk\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\uk\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0129.806] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0129.806] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\uk\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\uk\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0129.806] GetFileType (hFile=0x444) returned 0x1 [0129.806] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0129.806] GetFileType (hFile=0x444) returned 0x1 [0129.806] WriteFile (in: hFile=0x444, lpBuffer=0x228edc8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x228edc8*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0129.807] CloseHandle (hObject=0x444) returned 1 [0129.807] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\uk\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\uk\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0129.807] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\uk\\FileSync.LocalizedResources.dll.mui.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\uk\\FileSync.LocalizedResources.dll.mui.xuy", lpFilePart=0x0) returned 0x70 [0129.807] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0129.807] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\uk\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\uk\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x562d6ba3, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x562d6ba3, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x39374b35, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x23cd0)) returned 1 [0129.807] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0129.807] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\uk\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\uk\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\uk\\FileSync.LocalizedResources.dll.mui.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\uk\\filesync.localizedresources.dll.mui.xuy")) returned 1 [0129.808] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0129.808] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ur", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ur", lpFilePart=0x0) returned 0x48 [0129.808] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ur\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ur\\", lpFilePart=0x0) returned 0x49 [0129.808] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ur\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7eb0 [0129.808] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0129.808] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0129.809] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0129.809] FindClose (in: hFindFile=0x5d7eb0 | out: hFindFile=0x5d7eb0) returned 1 [0129.809] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0129.809] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0129.809] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0129.809] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ur", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ur", lpFilePart=0x0) returned 0x48 [0129.809] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ur\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ur\\", lpFilePart=0x0) returned 0x49 [0129.809] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ur\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7d90 [0129.809] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0129.809] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0129.809] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0129.809] FindClose (in: hFindFile=0x5d7d90 | out: hFindFile=0x5d7d90) returned 1 [0129.809] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0129.809] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0129.809] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ur\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ur\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0129.810] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0129.810] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ur\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ur\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x230f710 | out: lpFileInformation=0x230f710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x566b68bf, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x566b68bf, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x566b68bf, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x238d0)) returned 1 [0129.810] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0129.810] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ur\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ur\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0129.810] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0129.810] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ur\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ur\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x230f8d0 | out: lpFileInformation=0x230f8d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x566b68bf, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x566b68bf, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x566b68bf, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x238d0)) returned 1 [0129.810] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0129.810] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ur\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ur\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0129.810] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0129.810] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ur\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ur\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0129.811] GetFileType (hFile=0x444) returned 0x1 [0129.811] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0129.811] GetFileType (hFile=0x444) returned 0x1 [0129.811] ReadFile (in: hFile=0x444, lpBuffer=0x2311d80, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x2311d80*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0129.853] CloseHandle (hObject=0x444) returned 1 [0129.853] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ur\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ur\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0129.853] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0129.853] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ur\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ur\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0129.854] GetFileType (hFile=0x444) returned 0x1 [0129.854] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0129.854] GetFileType (hFile=0x444) returned 0x1 [0129.854] WriteFile (in: hFile=0x444, lpBuffer=0x215ea40*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x215ea40*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0129.854] CloseHandle (hObject=0x444) returned 1 [0129.854] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ur\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ur\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0129.854] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ur\\FileSync.LocalizedResources.dll.mui.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ur\\FileSync.LocalizedResources.dll.mui.xuy", lpFilePart=0x0) returned 0x70 [0129.854] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0129.854] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ur\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ur\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x566b68bf, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x566b68bf, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x393e746b, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x238d0)) returned 1 [0129.854] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0129.854] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ur\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ur\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ur\\FileSync.LocalizedResources.dll.mui.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ur\\filesync.localizedresources.dll.mui.xuy")) returned 1 [0129.855] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0129.855] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\uz-latn-uz", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\uz-latn-uz", lpFilePart=0x0) returned 0x50 [0129.855] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\uz-latn-uz\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\uz-latn-uz\\", lpFilePart=0x0) returned 0x51 [0129.855] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\uz-latn-uz\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7fd0 [0129.856] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0129.856] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0129.856] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0129.856] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0129.856] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0129.856] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0129.856] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0129.856] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\uz-latn-uz", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\uz-latn-uz", lpFilePart=0x0) returned 0x50 [0129.856] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\uz-latn-uz\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\uz-latn-uz\\", lpFilePart=0x0) returned 0x51 [0129.856] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\uz-latn-uz\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d81b0 [0129.856] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0129.856] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0129.857] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0129.857] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0129.857] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0129.857] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0129.857] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\uz-latn-uz\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\uz-latn-uz\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x74 [0129.857] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0129.857] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\uz-latn-uz\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\uz-latn-uz\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x2190590 | out: lpFileInformation=0x2190590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56a7037a, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x56a7037a, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x56a7037a, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x244d0)) returned 1 [0129.859] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0129.859] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\uz-latn-uz\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\uz-latn-uz\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x74 [0129.859] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0129.859] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\uz-latn-uz\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\uz-latn-uz\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x2190760 | out: lpFileInformation=0x2190760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56a7037a, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x56a7037a, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x56a7037a, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x244d0)) returned 1 [0129.859] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0129.859] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\uz-latn-uz\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\uz-latn-uz\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x74 [0129.859] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0129.859] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\uz-latn-uz\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\uz-latn-uz\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0129.860] GetFileType (hFile=0x444) returned 0x1 [0129.860] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0129.860] GetFileType (hFile=0x444) returned 0x1 [0129.860] ReadFile (in: hFile=0x444, lpBuffer=0x2192c30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x2192c30*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0129.881] CloseHandle (hObject=0x444) returned 1 [0129.881] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\uz-latn-uz\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\uz-latn-uz\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x74 [0129.881] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0129.881] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\uz-latn-uz\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\uz-latn-uz\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0129.881] GetFileType (hFile=0x444) returned 0x1 [0129.881] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0129.882] GetFileType (hFile=0x444) returned 0x1 [0129.882] WriteFile (in: hFile=0x444, lpBuffer=0x2190910*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x2190910*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0129.882] CloseHandle (hObject=0x444) returned 1 [0129.882] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\uz-latn-uz\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\uz-latn-uz\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x74 [0129.882] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\uz-latn-uz\\FileSync.LocalizedResources.dll.mui.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\uz-latn-uz\\FileSync.LocalizedResources.dll.mui.xuy", lpFilePart=0x0) returned 0x78 [0129.882] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0129.882] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\uz-latn-uz\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\uz-latn-uz\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56a7037a, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x56a7037a, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x39433844, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x244d0)) returned 1 [0129.882] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0129.882] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\uz-latn-uz\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\uz-latn-uz\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\uz-latn-uz\\FileSync.LocalizedResources.dll.mui.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\uz-latn-uz\\filesync.localizedresources.dll.mui.xuy")) returned 1 [0129.883] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0129.883] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\vi", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\vi", lpFilePart=0x0) returned 0x48 [0129.883] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\vi\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\vi\\", lpFilePart=0x0) returned 0x49 [0129.883] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\vi\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d81b0 [0129.884] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0129.884] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0129.884] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0129.884] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0129.884] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0129.884] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0129.884] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0129.884] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\vi", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\vi", lpFilePart=0x0) returned 0x48 [0129.885] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\vi\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\vi\\", lpFilePart=0x0) returned 0x49 [0129.885] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\vi\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7a30 [0129.885] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0129.885] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0129.885] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0129.885] FindClose (in: hFindFile=0x5d7a30 | out: hFindFile=0x5d7a30) returned 1 [0129.885] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0129.885] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0129.885] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\vi\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\vi\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0129.885] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0129.885] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\vi\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\vi\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x22112a8 | out: lpFileInformation=0x22112a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56e03bd9, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x56e03bd9, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x56e03bd9, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x224d0)) returned 1 [0129.885] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0129.885] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\vi\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\vi\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0129.885] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0129.886] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\vi\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\vi\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x2211468 | out: lpFileInformation=0x2211468*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56e03bd9, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x56e03bd9, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x56e03bd9, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x224d0)) returned 1 [0129.886] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0129.886] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\vi\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\vi\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0129.886] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0129.886] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\vi\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\vi\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0129.887] GetFileType (hFile=0x444) returned 0x1 [0129.887] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0129.887] GetFileType (hFile=0x444) returned 0x1 [0129.887] ReadFile (in: hFile=0x444, lpBuffer=0x2213918, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x2213918*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0129.907] CloseHandle (hObject=0x444) returned 1 [0129.907] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\vi\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\vi\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0129.907] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0129.907] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\vi\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\vi\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0129.907] GetFileType (hFile=0x444) returned 0x1 [0129.907] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0129.908] GetFileType (hFile=0x444) returned 0x1 [0129.908] WriteFile (in: hFile=0x444, lpBuffer=0x2211608*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x2211608*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0129.908] CloseHandle (hObject=0x444) returned 1 [0129.908] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\vi\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\vi\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0129.908] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\vi\\FileSync.LocalizedResources.dll.mui.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\vi\\FileSync.LocalizedResources.dll.mui.xuy", lpFilePart=0x0) returned 0x70 [0129.908] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0129.908] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\vi\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\vi\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56e03bd9, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x56e03bd9, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3947fc33, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x224d0)) returned 1 [0129.908] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0129.908] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\vi\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\vi\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\vi\\FileSync.LocalizedResources.dll.mui.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\vi\\filesync.localizedresources.dll.mui.xuy")) returned 1 [0129.909] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0129.909] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\wo", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\wo", lpFilePart=0x0) returned 0x48 [0129.909] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\wo\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\wo\\", lpFilePart=0x0) returned 0x49 [0129.909] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\wo\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d73d0 [0129.910] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0129.910] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0129.910] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0129.910] FindClose (in: hFindFile=0x5d73d0 | out: hFindFile=0x5d73d0) returned 1 [0129.910] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0129.910] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0129.910] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0129.910] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\wo", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\wo", lpFilePart=0x0) returned 0x48 [0129.910] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\wo\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\wo\\", lpFilePart=0x0) returned 0x49 [0129.910] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\wo\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d73d0 [0129.910] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0129.910] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0129.910] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0129.911] FindClose (in: hFindFile=0x5d73d0 | out: hFindFile=0x5d73d0) returned 1 [0129.911] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0129.911] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0129.911] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\wo\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\wo\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0129.911] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0129.911] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\wo\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\wo\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x2291f50 | out: lpFileInformation=0x2291f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x571e38ee, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x571e38ee, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x571e38ee, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x1f6d0)) returned 1 [0129.911] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0129.911] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\wo\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\wo\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0129.911] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0129.911] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\wo\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\wo\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x2292110 | out: lpFileInformation=0x2292110*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x571e38ee, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x571e38ee, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x571e38ee, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x1f6d0)) returned 1 [0129.911] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0129.911] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\wo\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\wo\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0129.911] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0129.911] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\wo\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\wo\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0129.912] GetFileType (hFile=0x444) returned 0x1 [0129.912] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0129.912] GetFileType (hFile=0x444) returned 0x1 [0129.912] ReadFile (in: hFile=0x444, lpBuffer=0x22945c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x22945c0*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0129.933] CloseHandle (hObject=0x444) returned 1 [0129.933] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\wo\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\wo\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0129.934] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0129.934] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\wo\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\wo\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0129.934] GetFileType (hFile=0x444) returned 0x1 [0129.934] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0129.934] GetFileType (hFile=0x444) returned 0x1 [0129.934] WriteFile (in: hFile=0x444, lpBuffer=0x22922b0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x22922b0*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0129.934] CloseHandle (hObject=0x444) returned 1 [0129.934] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\wo\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\wo\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0129.934] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\wo\\FileSync.LocalizedResources.dll.mui.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\wo\\FileSync.LocalizedResources.dll.mui.xuy", lpFilePart=0x0) returned 0x70 [0129.934] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0129.934] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\wo\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\wo\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x571e38ee, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x571e38ee, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x394a5e8f, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x1f6d0)) returned 1 [0129.935] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0129.935] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\wo\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\wo\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\wo\\FileSync.LocalizedResources.dll.mui.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\wo\\filesync.localizedresources.dll.mui.xuy")) returned 1 [0129.936] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0129.936] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\xh-za", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\xh-za", lpFilePart=0x0) returned 0x4b [0129.936] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\xh-za\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\xh-za\\", lpFilePart=0x0) returned 0x4c [0129.936] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\xh-za\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7370 [0129.937] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0129.937] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0129.937] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0129.937] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0129.937] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0129.937] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0129.937] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0129.937] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\xh-za", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\xh-za", lpFilePart=0x0) returned 0x4b [0129.937] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\xh-za\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\xh-za\\", lpFilePart=0x0) returned 0x4c [0129.937] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\xh-za\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7a30 [0129.937] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0129.938] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0129.938] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0129.938] FindClose (in: hFindFile=0x5d7a30 | out: hFindFile=0x5d7a30) returned 1 [0129.938] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0129.938] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0129.938] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\xh-za\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\xh-za\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0129.938] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0129.938] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\xh-za\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\xh-za\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x2312ca8 | out: lpFileInformation=0x2312ca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5759d401, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x5759d401, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x5759d401, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x22ad0)) returned 1 [0129.938] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0129.938] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\xh-za\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\xh-za\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0129.938] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0129.938] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\xh-za\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\xh-za\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x2312e68 | out: lpFileInformation=0x2312e68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5759d401, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x5759d401, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x5759d401, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x22ad0)) returned 1 [0129.938] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0129.938] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\xh-za\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\xh-za\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0129.938] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0129.939] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\xh-za\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\xh-za\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0129.939] GetFileType (hFile=0x444) returned 0x1 [0129.939] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0129.939] GetFileType (hFile=0x444) returned 0x1 [0129.939] ReadFile (in: hFile=0x444, lpBuffer=0x2315318, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x2315318*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0130.015] CloseHandle (hObject=0x444) returned 1 [0130.016] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\xh-za\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\xh-za\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0130.016] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0130.016] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\xh-za\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\xh-za\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0130.016] GetFileType (hFile=0x444) returned 0x1 [0130.016] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0130.016] GetFileType (hFile=0x444) returned 0x1 [0130.016] WriteFile (in: hFile=0x444, lpBuffer=0x215ea40*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x215ea40*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0130.016] CloseHandle (hObject=0x444) returned 1 [0130.017] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\xh-za\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\xh-za\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0130.017] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\xh-za\\FileSync.LocalizedResources.dll.mui.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\xh-za\\FileSync.LocalizedResources.dll.mui.xuy", lpFilePart=0x0) returned 0x73 [0130.017] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0130.017] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\xh-za\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\xh-za\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5759d401, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x5759d401, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3958b016, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x22ad0)) returned 1 [0130.017] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0130.017] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\xh-za\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\xh-za\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\xh-za\\FileSync.LocalizedResources.dll.mui.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\xh-za\\filesync.localizedresources.dll.mui.xuy")) returned 1 [0130.018] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0130.018] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\yo-ng", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\yo-ng", lpFilePart=0x0) returned 0x4b [0130.018] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\yo-ng\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\yo-ng\\", lpFilePart=0x0) returned 0x4c [0130.018] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\yo-ng\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d81b0 [0130.018] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0130.018] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0130.018] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0130.019] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0130.019] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0130.019] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0130.019] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0130.019] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\yo-ng", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\yo-ng", lpFilePart=0x0) returned 0x4b [0130.019] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\yo-ng\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\yo-ng\\", lpFilePart=0x0) returned 0x4c [0130.019] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\yo-ng\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7550 [0130.019] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0130.019] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0130.019] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0130.019] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0130.019] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0130.019] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0130.019] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\yo-ng\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\yo-ng\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0130.020] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0130.020] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\yo-ng\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\yo-ng\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x21939c8 | out: lpFileInformation=0x21939c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5797d0d2, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x5797d0d2, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x5797d0d2, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x216d0)) returned 1 [0130.020] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0130.020] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\yo-ng\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\yo-ng\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0130.020] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0130.020] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\yo-ng\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\yo-ng\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x2193b88 | out: lpFileInformation=0x2193b88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5797d0d2, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x5797d0d2, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x5797d0d2, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x216d0)) returned 1 [0130.020] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0130.020] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\yo-ng\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\yo-ng\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0130.020] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0130.020] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\yo-ng\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\yo-ng\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0130.021] GetFileType (hFile=0x444) returned 0x1 [0130.021] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0130.021] GetFileType (hFile=0x444) returned 0x1 [0130.021] ReadFile (in: hFile=0x444, lpBuffer=0x2196038, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x2196038*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0130.034] CloseHandle (hObject=0x444) returned 1 [0130.034] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\yo-ng\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\yo-ng\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0130.034] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0130.034] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\yo-ng\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\yo-ng\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0130.035] GetFileType (hFile=0x444) returned 0x1 [0130.035] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0130.035] GetFileType (hFile=0x444) returned 0x1 [0130.035] WriteFile (in: hFile=0x444, lpBuffer=0x2193d28*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x2193d28*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0130.035] CloseHandle (hObject=0x444) returned 1 [0130.035] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\yo-ng\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\yo-ng\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0130.035] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\yo-ng\\FileSync.LocalizedResources.dll.mui.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\yo-ng\\FileSync.LocalizedResources.dll.mui.xuy", lpFilePart=0x0) returned 0x73 [0130.035] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0130.035] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\yo-ng\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\yo-ng\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5797d0d2, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x5797d0d2, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x395b0fc1, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x216d0)) returned 1 [0130.035] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0130.035] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\yo-ng\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\yo-ng\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\yo-ng\\FileSync.LocalizedResources.dll.mui.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\yo-ng\\filesync.localizedresources.dll.mui.xuy")) returned 1 [0130.036] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0130.036] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\zh-cn", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\zh-cn", lpFilePart=0x0) returned 0x4b [0130.036] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\zh-cn\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\zh-cn\\", lpFilePart=0x0) returned 0x4c [0130.036] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\zh-cn\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d79d0 [0130.037] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0130.037] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0130.037] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0130.037] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0130.037] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0130.037] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0130.037] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0130.037] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\zh-cn", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\zh-cn", lpFilePart=0x0) returned 0x4b [0130.037] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\zh-cn\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\zh-cn\\", lpFilePart=0x0) returned 0x4c [0130.037] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\zh-cn\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7a90 [0130.037] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0130.038] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0130.038] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0130.038] FindClose (in: hFindFile=0x5d7a90 | out: hFindFile=0x5d7a90) returned 1 [0130.038] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0130.038] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0130.038] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\zh-cn\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\zh-cn\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0130.038] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0130.038] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\zh-cn\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\zh-cn\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x2214720 | out: lpFileInformation=0x2214720*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57d36b78, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x57d36b78, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x57d36b78, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x114c8)) returned 1 [0130.038] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0130.038] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\zh-cn\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\zh-cn\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0130.038] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0130.038] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\zh-cn\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\zh-cn\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x22148e0 | out: lpFileInformation=0x22148e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57d36b78, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x57d36b78, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x57d36b78, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x114c8)) returned 1 [0130.038] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0130.038] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\zh-cn\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\zh-cn\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0130.038] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0130.038] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\zh-cn\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\zh-cn\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0130.039] GetFileType (hFile=0x444) returned 0x1 [0130.039] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0130.039] GetFileType (hFile=0x444) returned 0x1 [0130.039] ReadFile (in: hFile=0x444, lpBuffer=0x2216d90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x2216d90*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0130.051] CloseHandle (hObject=0x444) returned 1 [0130.051] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\zh-cn\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\zh-cn\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0130.051] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0130.051] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\zh-cn\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\zh-cn\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0130.052] GetFileType (hFile=0x444) returned 0x1 [0130.052] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0130.052] GetFileType (hFile=0x444) returned 0x1 [0130.052] WriteFile (in: hFile=0x444, lpBuffer=0x2214a80*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x2214a80*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0130.052] CloseHandle (hObject=0x444) returned 1 [0130.052] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\zh-cn\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\zh-cn\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0130.052] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\zh-cn\\FileSync.LocalizedResources.dll.mui.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\zh-cn\\FileSync.LocalizedResources.dll.mui.xuy", lpFilePart=0x0) returned 0x73 [0130.052] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0130.052] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\zh-cn\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\zh-cn\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57d36b78, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x57d36b78, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x395d7208, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x114c8)) returned 1 [0130.052] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0130.052] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\zh-cn\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\zh-cn\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\zh-cn\\FileSync.LocalizedResources.dll.mui.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\zh-cn\\filesync.localizedresources.dll.mui.xuy")) returned 1 [0130.053] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0130.053] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\zh-tw", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\zh-tw", lpFilePart=0x0) returned 0x4b [0130.053] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\zh-tw\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\zh-tw\\", lpFilePart=0x0) returned 0x4c [0130.053] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\zh-tw\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7c70 [0130.054] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0130.054] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0130.054] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0130.054] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0130.054] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0130.054] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0130.054] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0130.054] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\zh-tw", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\zh-tw", lpFilePart=0x0) returned 0x4b [0130.054] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\zh-tw\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\zh-tw\\", lpFilePart=0x0) returned 0x4c [0130.054] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\zh-tw\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7c70 [0130.054] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0130.054] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0130.055] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0130.055] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0130.055] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0130.055] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0130.055] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\zh-tw\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\zh-tw\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0130.055] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0130.055] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\zh-tw\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\zh-tw\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x2295478 | out: lpFileInformation=0x2295478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5811689b, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x5811689b, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x5811689b, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x11ac8)) returned 1 [0130.055] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0130.055] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\zh-tw\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\zh-tw\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0130.055] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0130.055] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\zh-tw\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\zh-tw\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x2295638 | out: lpFileInformation=0x2295638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5811689b, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x5811689b, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x5811689b, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x11ac8)) returned 1 [0130.055] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0130.055] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\zh-tw\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\zh-tw\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0130.055] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0130.055] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\zh-tw\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\zh-tw\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0130.056] GetFileType (hFile=0x444) returned 0x1 [0130.056] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0130.056] GetFileType (hFile=0x444) returned 0x1 [0130.056] ReadFile (in: hFile=0x444, lpBuffer=0x2297ae8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x2297ae8*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0130.070] CloseHandle (hObject=0x444) returned 1 [0130.070] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\zh-tw\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\zh-tw\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0130.070] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0130.070] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\zh-tw\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\zh-tw\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0130.071] GetFileType (hFile=0x444) returned 0x1 [0130.071] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0130.071] GetFileType (hFile=0x444) returned 0x1 [0130.071] WriteFile (in: hFile=0x444, lpBuffer=0x22957d8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x22957d8*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0130.071] CloseHandle (hObject=0x444) returned 1 [0130.071] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\zh-tw\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\zh-tw\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0130.071] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\zh-tw\\FileSync.LocalizedResources.dll.mui.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\zh-tw\\FileSync.LocalizedResources.dll.mui.xuy", lpFilePart=0x0) returned 0x73 [0130.071] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0130.071] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\zh-tw\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\zh-tw\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5811689b, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x5811689b, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x395fd369, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x11ac8)) returned 1 [0130.071] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0130.071] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\zh-tw\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\zh-tw\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\zh-tw\\FileSync.LocalizedResources.dll.mui.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\zh-tw\\filesync.localizedresources.dll.mui.xuy")) returned 1 [0130.073] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0130.073] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\zu-za", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\zu-za", lpFilePart=0x0) returned 0x4b [0130.073] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\zu-za\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\zu-za\\", lpFilePart=0x0) returned 0x4c [0130.073] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\zu-za\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d81b0 [0130.073] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0130.073] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0130.073] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0130.073] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0130.073] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0130.073] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0130.073] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0130.073] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\zu-za", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\zu-za", lpFilePart=0x0) returned 0x4b [0130.074] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\zu-za\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\zu-za\\", lpFilePart=0x0) returned 0x4c [0130.074] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\zu-za\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d78b0 [0130.074] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0130.074] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0130.074] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0130.074] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0130.074] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0130.074] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0130.074] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\zu-za\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\zu-za\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0130.074] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0130.074] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\zu-za\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\zu-za\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x23161d0 | out: lpFileInformation=0x23161d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x584d034b, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x584d034b, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x584d034b, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x24ad0)) returned 1 [0130.074] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0130.074] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\zu-za\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\zu-za\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0130.075] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0130.075] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\zu-za\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\zu-za\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x2316390 | out: lpFileInformation=0x2316390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x584d034b, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x584d034b, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x584d034b, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x24ad0)) returned 1 [0130.075] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0130.075] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\zu-za\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\zu-za\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0130.075] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0130.075] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\zu-za\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\zu-za\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0130.075] GetFileType (hFile=0x444) returned 0x1 [0130.075] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0130.075] GetFileType (hFile=0x444) returned 0x1 [0130.076] ReadFile (in: hFile=0x444, lpBuffer=0x2318840, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x2318840*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0130.118] CloseHandle (hObject=0x444) returned 1 [0130.118] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\zu-za\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\zu-za\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0130.118] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0130.118] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\zu-za\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\zu-za\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0130.118] GetFileType (hFile=0x444) returned 0x1 [0130.118] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0130.119] GetFileType (hFile=0x444) returned 0x1 [0130.119] WriteFile (in: hFile=0x444, lpBuffer=0x215ea40*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x215ea40*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0130.119] CloseHandle (hObject=0x444) returned 1 [0130.119] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\zu-za\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\zu-za\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0130.119] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\zu-za\\FileSync.LocalizedResources.dll.mui.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\zu-za\\FileSync.LocalizedResources.dll.mui.xuy", lpFilePart=0x0) returned 0x73 [0130.119] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0130.119] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\zu-za\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\zu-za\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x584d034b, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x584d034b, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3966fb9c, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x24ad0)) returned 1 [0130.119] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0130.119] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\zu-za\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\zu-za\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\zu-za\\FileSync.LocalizedResources.dll.mui.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\zu-za\\filesync.localizedresources.dll.mui.xuy")) returned 1 [0130.120] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0130.120] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs", lpFilePart=0x0) returned 0x3b [0130.120] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\", lpFilePart=0x0) returned 0x3c [0130.121] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7a30 [0130.122] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0130.122] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0130.122] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0130.122] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0130.122] FindClose (in: hFindFile=0x5d7a30 | out: hFindFile=0x5d7a30) returned 1 [0130.122] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0130.122] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0130.123] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0130.123] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs", lpFilePart=0x0) returned 0x3b [0130.123] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\", lpFilePart=0x0) returned 0x3c [0130.123] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7cd0 [0130.123] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0130.123] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0130.123] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0130.123] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0130.124] FindClose (in: hFindFile=0x5d7cd0 | out: hFindFile=0x5d7cd0) returned 1 [0130.124] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0130.124] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0130.124] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0130.124] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common", lpFilePart=0x0) returned 0x42 [0130.124] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\", lpFilePart=0x0) returned 0x43 [0130.124] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d78b0 [0130.140] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0130.140] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0130.140] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0130.140] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0130.140] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0130.141] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0130.141] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0130.141] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0130.141] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0130.141] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0130.141] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0130.141] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0130.141] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0130.142] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0130.142] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0130.142] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0130.142] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0130.143] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common", lpFilePart=0x0) returned 0x42 [0130.143] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\", lpFilePart=0x0) returned 0x43 [0130.143] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d81b0 [0130.144] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0130.144] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0130.144] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0130.144] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0130.144] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0130.144] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0130.145] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0130.145] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0130.145] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0130.145] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0130.145] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0130.145] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0130.145] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0130.146] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0130.146] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0130.146] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0130.146] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-12.641.736.1.odl", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-12.641.736.1.odl", lpFilePart=0x0) returned 0x6c [0130.146] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0130.146] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-12.641.736.1.odl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\common\\standaloneupdater-2017-7-12.641.736.1.odl"), fInfoLevelId=0x0, lpFileInformation=0x219c630 | out: lpFileInformation=0x219c630*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0xe46218c7, ftCreationTime.dwHighDateTime=0x1d2fad9, ftLastAccessTime.dwLowDateTime=0xe46218c7, ftLastAccessTime.dwHighDateTime=0x1d2fad9, ftLastWriteTime.dwLowDateTime=0xecb82788, ftLastWriteTime.dwHighDateTime=0x1d2fad9, nFileSizeHigh=0x0, nFileSizeLow=0x3ba3)) returned 1 [0130.148] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0130.148] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-12.641.736.1.odl", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-12.641.736.1.odl", lpFilePart=0x0) returned 0x6c [0130.148] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0130.148] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-12.641.736.1.odl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\common\\standaloneupdater-2017-7-12.641.736.1.odl"), fInfoLevelId=0x0, lpFileInformation=0x219c800 | out: lpFileInformation=0x219c800*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0xe46218c7, ftCreationTime.dwHighDateTime=0x1d2fad9, ftLastAccessTime.dwLowDateTime=0xe46218c7, ftLastAccessTime.dwHighDateTime=0x1d2fad9, ftLastWriteTime.dwLowDateTime=0xecb82788, ftLastWriteTime.dwHighDateTime=0x1d2fad9, nFileSizeHigh=0x0, nFileSizeLow=0x3ba3)) returned 1 [0130.148] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0130.148] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-12.641.736.1.odl", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-12.641.736.1.odl", lpFilePart=0x0) returned 0x6c [0130.148] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0130.148] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-12.641.736.1.odl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\common\\standaloneupdater-2017-7-12.641.736.1.odl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0130.149] GetFileType (hFile=0x444) returned 0x1 [0130.149] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0130.149] GetFileType (hFile=0x444) returned 0x1 [0130.149] ReadFile (in: hFile=0x444, lpBuffer=0x219ecd0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x219ecd0*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0130.172] CloseHandle (hObject=0x444) returned 1 [0130.172] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-12.641.736.1.odl", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-12.641.736.1.odl", lpFilePart=0x0) returned 0x6c [0130.172] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0130.172] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-12.641.736.1.odl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\common\\standaloneupdater-2017-7-12.641.736.1.odl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0130.173] GetFileType (hFile=0x444) returned 0x1 [0130.173] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0130.173] GetFileType (hFile=0x444) returned 0x1 [0130.173] WriteFile (in: hFile=0x444, lpBuffer=0x219c9b0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x219c9b0*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0130.173] CloseHandle (hObject=0x444) returned 1 [0130.173] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-12.641.736.1.odl", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-12.641.736.1.odl", lpFilePart=0x0) returned 0x6c [0130.173] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-12.641.736.1.odl.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-12.641.736.1.odl.xuy", lpFilePart=0x0) returned 0x70 [0130.173] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0130.173] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-12.641.736.1.odl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\common\\standaloneupdater-2017-7-12.641.736.1.odl"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0xe46218c7, ftCreationTime.dwHighDateTime=0x1d2fad9, ftLastAccessTime.dwLowDateTime=0xe46218c7, ftLastAccessTime.dwHighDateTime=0x1d2fad9, ftLastWriteTime.dwLowDateTime=0x397088b1, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x3ba3)) returned 1 [0130.173] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0130.173] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-12.641.736.1.odl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\common\\standaloneupdater-2017-7-12.641.736.1.odl"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-12.641.736.1.odl.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\common\\standaloneupdater-2017-7-12.641.736.1.odl.xuy")) returned 1 [0130.175] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-13.114.4068.1.odl", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-13.114.4068.1.odl", lpFilePart=0x0) returned 0x6d [0130.175] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0130.175] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-13.114.4068.1.odl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\common\\standaloneupdater-2017-7-13.114.4068.1.odl"), fInfoLevelId=0x0, lpFileInformation=0x221b1e0 | out: lpFileInformation=0x221b1e0*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x5d275a09, ftCreationTime.dwHighDateTime=0x1d2fb75, ftLastAccessTime.dwLowDateTime=0x5d275a09, ftLastAccessTime.dwHighDateTime=0x1d2fb75, ftLastWriteTime.dwLowDateTime=0x62bdff8d, ftLastWriteTime.dwHighDateTime=0x1d2fb75, nFileSizeHigh=0x0, nFileSizeLow=0x2c10)) returned 1 [0130.175] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0130.175] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-13.114.4068.1.odl", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-13.114.4068.1.odl", lpFilePart=0x0) returned 0x6d [0130.175] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0130.175] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-13.114.4068.1.odl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\common\\standaloneupdater-2017-7-13.114.4068.1.odl"), fInfoLevelId=0x0, lpFileInformation=0x221b3b0 | out: lpFileInformation=0x221b3b0*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x5d275a09, ftCreationTime.dwHighDateTime=0x1d2fb75, ftLastAccessTime.dwLowDateTime=0x5d275a09, ftLastAccessTime.dwHighDateTime=0x1d2fb75, ftLastWriteTime.dwLowDateTime=0x62bdff8d, ftLastWriteTime.dwHighDateTime=0x1d2fb75, nFileSizeHigh=0x0, nFileSizeLow=0x2c10)) returned 1 [0130.175] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0130.175] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-13.114.4068.1.odl", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-13.114.4068.1.odl", lpFilePart=0x0) returned 0x6d [0130.175] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0130.175] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-13.114.4068.1.odl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\common\\standaloneupdater-2017-7-13.114.4068.1.odl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0130.176] GetFileType (hFile=0x444) returned 0x1 [0130.176] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0130.176] GetFileType (hFile=0x444) returned 0x1 [0130.177] ReadFile (in: hFile=0x444, lpBuffer=0x221d880, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x221d880*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0130.207] CloseHandle (hObject=0x444) returned 1 [0130.207] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-13.114.4068.1.odl", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-13.114.4068.1.odl", lpFilePart=0x0) returned 0x6d [0130.207] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0130.207] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-13.114.4068.1.odl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\common\\standaloneupdater-2017-7-13.114.4068.1.odl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0130.208] GetFileType (hFile=0x444) returned 0x1 [0130.208] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0130.208] GetFileType (hFile=0x444) returned 0x1 [0130.208] WriteFile (in: hFile=0x444, lpBuffer=0x221b560*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x221b560*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0130.208] CloseHandle (hObject=0x444) returned 1 [0130.208] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-13.114.4068.1.odl", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-13.114.4068.1.odl", lpFilePart=0x0) returned 0x6d [0130.208] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-13.114.4068.1.odl.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-13.114.4068.1.odl.xuy", lpFilePart=0x0) returned 0x71 [0130.208] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0130.208] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-13.114.4068.1.odl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\common\\standaloneupdater-2017-7-13.114.4068.1.odl"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x5d275a09, ftCreationTime.dwHighDateTime=0x1d2fb75, ftLastAccessTime.dwLowDateTime=0x5d275a09, ftLastAccessTime.dwHighDateTime=0x1d2fb75, ftLastWriteTime.dwLowDateTime=0x397549e9, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2c10)) returned 1 [0130.209] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0130.209] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-13.114.4068.1.odl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\common\\standaloneupdater-2017-7-13.114.4068.1.odl"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-13.114.4068.1.odl.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\common\\standaloneupdater-2017-7-13.114.4068.1.odl.xuy")) returned 1 [0130.210] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-13.2154.3480.1.odl", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-13.2154.3480.1.odl", lpFilePart=0x0) returned 0x6e [0130.210] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0130.210] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-13.2154.3480.1.odl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\common\\standaloneupdater-2017-7-13.2154.3480.1.odl"), fInfoLevelId=0x0, lpFileInformation=0x2299d90 | out: lpFileInformation=0x2299d90*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0xac307d57, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0xac307d57, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0xba0888fd, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0x2c10)) returned 1 [0130.210] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0130.210] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-13.2154.3480.1.odl", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-13.2154.3480.1.odl", lpFilePart=0x0) returned 0x6e [0130.210] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0130.211] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-13.2154.3480.1.odl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\common\\standaloneupdater-2017-7-13.2154.3480.1.odl"), fInfoLevelId=0x0, lpFileInformation=0x2299f60 | out: lpFileInformation=0x2299f60*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0xac307d57, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0xac307d57, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0xba0888fd, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0x2c10)) returned 1 [0130.211] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0130.211] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-13.2154.3480.1.odl", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-13.2154.3480.1.odl", lpFilePart=0x0) returned 0x6e [0130.211] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0130.211] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-13.2154.3480.1.odl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\common\\standaloneupdater-2017-7-13.2154.3480.1.odl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0130.212] GetFileType (hFile=0x444) returned 0x1 [0130.212] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0130.212] GetFileType (hFile=0x444) returned 0x1 [0130.212] ReadFile (in: hFile=0x444, lpBuffer=0x229c430, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x229c430*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0130.232] CloseHandle (hObject=0x444) returned 1 [0130.233] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-13.2154.3480.1.odl", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-13.2154.3480.1.odl", lpFilePart=0x0) returned 0x6e [0130.233] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0130.233] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-13.2154.3480.1.odl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\common\\standaloneupdater-2017-7-13.2154.3480.1.odl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0130.233] GetFileType (hFile=0x444) returned 0x1 [0130.233] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0130.233] GetFileType (hFile=0x444) returned 0x1 [0130.233] WriteFile (in: hFile=0x444, lpBuffer=0x229a110*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x229a110*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0130.233] CloseHandle (hObject=0x444) returned 1 [0130.233] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-13.2154.3480.1.odl", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-13.2154.3480.1.odl", lpFilePart=0x0) returned 0x6e [0130.234] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-13.2154.3480.1.odl.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-13.2154.3480.1.odl.xuy", lpFilePart=0x0) returned 0x72 [0130.234] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0130.234] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-13.2154.3480.1.odl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\common\\standaloneupdater-2017-7-13.2154.3480.1.odl"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0xac307d57, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0xac307d57, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x397a0eef, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2c10)) returned 1 [0130.234] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0130.234] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-13.2154.3480.1.odl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\common\\standaloneupdater-2017-7-13.2154.3480.1.odl"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-13.2154.3480.1.odl.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\common\\standaloneupdater-2017-7-13.2154.3480.1.odl.xuy")) returned 1 [0130.235] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-18.2324.2928.1.odl", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-18.2324.2928.1.odl", lpFilePart=0x0) returned 0x6e [0130.235] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0130.235] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-18.2324.2928.1.odl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\common\\standaloneupdater-2017-7-18.2324.2928.1.odl"), fInfoLevelId=0x0, lpFileInformation=0x2318940 | out: lpFileInformation=0x2318940*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0xa5031e9, ftCreationTime.dwHighDateTime=0x1d3001d, ftLastAccessTime.dwLowDateTime=0xa5031e9, ftLastAccessTime.dwHighDateTime=0x1d3001d, ftLastWriteTime.dwLowDateTime=0xff7fd3b, ftLastWriteTime.dwHighDateTime=0x1d3001d, nFileSizeHigh=0x0, nFileSizeLow=0x2c10)) returned 1 [0130.235] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0130.235] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-18.2324.2928.1.odl", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-18.2324.2928.1.odl", lpFilePart=0x0) returned 0x6e [0130.235] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0130.235] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-18.2324.2928.1.odl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\common\\standaloneupdater-2017-7-18.2324.2928.1.odl"), fInfoLevelId=0x0, lpFileInformation=0x2318b10 | out: lpFileInformation=0x2318b10*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0xa5031e9, ftCreationTime.dwHighDateTime=0x1d3001d, ftLastAccessTime.dwLowDateTime=0xa5031e9, ftLastAccessTime.dwHighDateTime=0x1d3001d, ftLastWriteTime.dwLowDateTime=0xff7fd3b, ftLastWriteTime.dwHighDateTime=0x1d3001d, nFileSizeHigh=0x0, nFileSizeLow=0x2c10)) returned 1 [0130.235] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0130.235] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-18.2324.2928.1.odl", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-18.2324.2928.1.odl", lpFilePart=0x0) returned 0x6e [0130.235] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0130.235] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-18.2324.2928.1.odl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\common\\standaloneupdater-2017-7-18.2324.2928.1.odl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0130.236] GetFileType (hFile=0x444) returned 0x1 [0130.236] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0130.236] GetFileType (hFile=0x444) returned 0x1 [0130.236] ReadFile (in: hFile=0x444, lpBuffer=0x231afe0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x231afe0*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0130.293] CloseHandle (hObject=0x444) returned 1 [0130.293] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-18.2324.2928.1.odl", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-18.2324.2928.1.odl", lpFilePart=0x0) returned 0x6e [0130.293] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0130.294] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-18.2324.2928.1.odl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\common\\standaloneupdater-2017-7-18.2324.2928.1.odl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0130.294] GetFileType (hFile=0x444) returned 0x1 [0130.294] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0130.294] GetFileType (hFile=0x444) returned 0x1 [0130.294] WriteFile (in: hFile=0x444, lpBuffer=0x215f598*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x215f598*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0130.294] CloseHandle (hObject=0x444) returned 1 [0130.294] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-18.2324.2928.1.odl", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-18.2324.2928.1.odl", lpFilePart=0x0) returned 0x6e [0130.294] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-18.2324.2928.1.odl.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-18.2324.2928.1.odl.xuy", lpFilePart=0x0) returned 0x72 [0130.294] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0130.294] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-18.2324.2928.1.odl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\common\\standaloneupdater-2017-7-18.2324.2928.1.odl"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0xa5031e9, ftCreationTime.dwHighDateTime=0x1d3001d, ftLastAccessTime.dwLowDateTime=0xa5031e9, ftLastAccessTime.dwHighDateTime=0x1d3001d, ftLastWriteTime.dwLowDateTime=0x398134e7, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2c10)) returned 1 [0130.295] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0130.295] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-18.2324.2928.1.odl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\common\\standaloneupdater-2017-7-18.2324.2928.1.odl"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-18.2324.2928.1.odl.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\common\\standaloneupdater-2017-7-18.2324.2928.1.odl.xuy")) returned 1 [0130.297] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-21.155.3700.1.odl", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-21.155.3700.1.odl", lpFilePart=0x0) returned 0x6d [0130.297] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0130.297] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-21.155.3700.1.odl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\common\\standaloneupdater-2017-7-21.155.3700.1.odl"), fInfoLevelId=0x0, lpFileInformation=0x2198018 | out: lpFileInformation=0x2198018*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x7cad81c7, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x7cad81c7, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x8462418c, ftLastWriteTime.dwHighDateTime=0x1d301c4, nFileSizeHigh=0x0, nFileSizeLow=0x2c10)) returned 1 [0130.298] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0130.298] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-21.155.3700.1.odl", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-21.155.3700.1.odl", lpFilePart=0x0) returned 0x6d [0130.298] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0130.298] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-21.155.3700.1.odl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\common\\standaloneupdater-2017-7-21.155.3700.1.odl"), fInfoLevelId=0x0, lpFileInformation=0x21981e8 | out: lpFileInformation=0x21981e8*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x7cad81c7, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x7cad81c7, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x8462418c, ftLastWriteTime.dwHighDateTime=0x1d301c4, nFileSizeHigh=0x0, nFileSizeLow=0x2c10)) returned 1 [0130.298] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0130.298] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-21.155.3700.1.odl", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-21.155.3700.1.odl", lpFilePart=0x0) returned 0x6d [0130.298] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0130.298] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-21.155.3700.1.odl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\common\\standaloneupdater-2017-7-21.155.3700.1.odl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0130.299] GetFileType (hFile=0x444) returned 0x1 [0130.299] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0130.299] GetFileType (hFile=0x444) returned 0x1 [0130.299] ReadFile (in: hFile=0x444, lpBuffer=0x219a6b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x219a6b8*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0130.317] CloseHandle (hObject=0x444) returned 1 [0130.317] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-21.155.3700.1.odl", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-21.155.3700.1.odl", lpFilePart=0x0) returned 0x6d [0130.317] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0130.317] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-21.155.3700.1.odl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\common\\standaloneupdater-2017-7-21.155.3700.1.odl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0130.317] GetFileType (hFile=0x444) returned 0x1 [0130.317] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0130.317] GetFileType (hFile=0x444) returned 0x1 [0130.317] WriteFile (in: hFile=0x444, lpBuffer=0x2198398*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x2198398*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0130.317] CloseHandle (hObject=0x444) returned 1 [0130.317] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-21.155.3700.1.odl", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-21.155.3700.1.odl", lpFilePart=0x0) returned 0x6d [0130.318] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-21.155.3700.1.odl.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-21.155.3700.1.odl.xuy", lpFilePart=0x0) returned 0x71 [0130.318] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0130.318] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-21.155.3700.1.odl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\common\\standaloneupdater-2017-7-21.155.3700.1.odl"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x7cad81c7, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x7cad81c7, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x3985f98a, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2c10)) returned 1 [0130.318] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0130.318] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-21.155.3700.1.odl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\common\\standaloneupdater-2017-7-21.155.3700.1.odl"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-21.155.3700.1.odl.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\common\\standaloneupdater-2017-7-21.155.3700.1.odl.xuy")) returned 1 [0130.319] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-9-26.2241.1252.1.odl", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-9-26.2241.1252.1.odl", lpFilePart=0x0) returned 0x6e [0130.319] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0130.319] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-9-26.2241.1252.1.odl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\common\\standaloneupdater-2017-9-26.2241.1252.1.odl"), fInfoLevelId=0x0, lpFileInformation=0x2216bc8 | out: lpFileInformation=0x2216bc8*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0xa9558ba8, ftCreationTime.dwHighDateTime=0x1d33718, ftLastAccessTime.dwLowDateTime=0xa9558ba8, ftLastAccessTime.dwHighDateTime=0x1d33718, ftLastWriteTime.dwLowDateTime=0xad69ac2d, ftLastWriteTime.dwHighDateTime=0x1d33718, nFileSizeHigh=0x0, nFileSizeLow=0x2ad5)) returned 1 [0130.319] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0130.319] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-9-26.2241.1252.1.odl", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-9-26.2241.1252.1.odl", lpFilePart=0x0) returned 0x6e [0130.319] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0130.319] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-9-26.2241.1252.1.odl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\common\\standaloneupdater-2017-9-26.2241.1252.1.odl"), fInfoLevelId=0x0, lpFileInformation=0x2216d98 | out: lpFileInformation=0x2216d98*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0xa9558ba8, ftCreationTime.dwHighDateTime=0x1d33718, ftLastAccessTime.dwLowDateTime=0xa9558ba8, ftLastAccessTime.dwHighDateTime=0x1d33718, ftLastWriteTime.dwLowDateTime=0xad69ac2d, ftLastWriteTime.dwHighDateTime=0x1d33718, nFileSizeHigh=0x0, nFileSizeLow=0x2ad5)) returned 1 [0130.319] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0130.319] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-9-26.2241.1252.1.odl", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-9-26.2241.1252.1.odl", lpFilePart=0x0) returned 0x6e [0130.319] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0130.319] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-9-26.2241.1252.1.odl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\common\\standaloneupdater-2017-9-26.2241.1252.1.odl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0130.320] GetFileType (hFile=0x444) returned 0x1 [0130.320] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0130.320] GetFileType (hFile=0x444) returned 0x1 [0130.320] ReadFile (in: hFile=0x444, lpBuffer=0x2219268, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x2219268*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0130.333] CloseHandle (hObject=0x444) returned 1 [0130.333] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-9-26.2241.1252.1.odl", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-9-26.2241.1252.1.odl", lpFilePart=0x0) returned 0x6e [0130.333] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0130.333] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-9-26.2241.1252.1.odl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\common\\standaloneupdater-2017-9-26.2241.1252.1.odl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0130.334] GetFileType (hFile=0x444) returned 0x1 [0130.334] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0130.334] GetFileType (hFile=0x444) returned 0x1 [0130.334] WriteFile (in: hFile=0x444, lpBuffer=0x2216f48*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x2216f48*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0130.334] CloseHandle (hObject=0x444) returned 1 [0130.334] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-9-26.2241.1252.1.odl", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-9-26.2241.1252.1.odl", lpFilePart=0x0) returned 0x6e [0130.334] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-9-26.2241.1252.1.odl.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-9-26.2241.1252.1.odl.xuy", lpFilePart=0x0) returned 0x72 [0130.334] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0130.334] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-9-26.2241.1252.1.odl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\common\\standaloneupdater-2017-9-26.2241.1252.1.odl"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0xa9558ba8, ftCreationTime.dwHighDateTime=0x1d33718, ftLastAccessTime.dwLowDateTime=0xa9558ba8, ftLastAccessTime.dwHighDateTime=0x1d33718, ftLastWriteTime.dwLowDateTime=0x398860a3, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2ad5)) returned 1 [0130.334] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0130.335] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-9-26.2241.1252.1.odl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\common\\standaloneupdater-2017-9-26.2241.1252.1.odl"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-9-26.2241.1252.1.odl.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\common\\standaloneupdater-2017-9-26.2241.1252.1.odl.xuy")) returned 1 [0130.336] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-9-26.63.3668.1.odl", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-9-26.63.3668.1.odl", lpFilePart=0x0) returned 0x6c [0130.336] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0130.336] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-9-26.63.3668.1.odl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\common\\standaloneupdater-2017-9-26.63.3668.1.odl"), fInfoLevelId=0x0, lpFileInformation=0x2295778 | out: lpFileInformation=0x2295778*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x20afd31a, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x20afd31a, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x2c0d0629, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x3cee)) returned 1 [0130.336] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0130.336] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-9-26.63.3668.1.odl", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-9-26.63.3668.1.odl", lpFilePart=0x0) returned 0x6c [0130.336] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0130.336] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-9-26.63.3668.1.odl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\common\\standaloneupdater-2017-9-26.63.3668.1.odl"), fInfoLevelId=0x0, lpFileInformation=0x2295948 | out: lpFileInformation=0x2295948*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x20afd31a, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x20afd31a, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x2c0d0629, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x3cee)) returned 1 [0130.336] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0130.336] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-9-26.63.3668.1.odl", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-9-26.63.3668.1.odl", lpFilePart=0x0) returned 0x6c [0130.336] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0130.336] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-9-26.63.3668.1.odl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\common\\standaloneupdater-2017-9-26.63.3668.1.odl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0130.337] GetFileType (hFile=0x444) returned 0x1 [0130.337] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0130.337] GetFileType (hFile=0x444) returned 0x1 [0130.337] ReadFile (in: hFile=0x444, lpBuffer=0x2297e18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x2297e18*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0130.372] CloseHandle (hObject=0x444) returned 1 [0130.372] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-9-26.63.3668.1.odl", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-9-26.63.3668.1.odl", lpFilePart=0x0) returned 0x6c [0130.372] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0130.372] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-9-26.63.3668.1.odl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\common\\standaloneupdater-2017-9-26.63.3668.1.odl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0130.372] GetFileType (hFile=0x444) returned 0x1 [0130.372] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0130.372] GetFileType (hFile=0x444) returned 0x1 [0130.372] WriteFile (in: hFile=0x444, lpBuffer=0x2295af8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x2295af8*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0130.372] CloseHandle (hObject=0x444) returned 1 [0130.373] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-9-26.63.3668.1.odl", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-9-26.63.3668.1.odl", lpFilePart=0x0) returned 0x6c [0130.373] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-9-26.63.3668.1.odl.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-9-26.63.3668.1.odl.xuy", lpFilePart=0x0) returned 0x70 [0130.373] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0130.373] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-9-26.63.3668.1.odl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\common\\standaloneupdater-2017-9-26.63.3668.1.odl"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x20afd31a, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x20afd31a, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x398d20d6, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x3cee)) returned 1 [0130.373] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0130.373] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-9-26.63.3668.1.odl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\common\\standaloneupdater-2017-9-26.63.3668.1.odl"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-9-26.63.3668.1.odl.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\common\\standaloneupdater-2017-9-26.63.3668.1.odl.xuy")) returned 1 [0130.374] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\standaloneUpdaterTelemetryCache.otc", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\standaloneUpdaterTelemetryCache.otc", lpFilePart=0x0) returned 0x66 [0130.374] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0130.374] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\standaloneUpdaterTelemetryCache.otc" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\common\\standaloneupdatertelemetrycache.otc"), fInfoLevelId=0x0, lpFileInformation=0x2314328 | out: lpFileInformation=0x2314328*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x5de15648, ftCreationTime.dwHighDateTime=0x1d2fb75, ftLastAccessTime.dwLowDateTime=0x5de15648, ftLastAccessTime.dwHighDateTime=0x1d2fb75, ftLastWriteTime.dwLowDateTime=0xac3d4381, ftLastWriteTime.dwHighDateTime=0x1d33718, nFileSizeHigh=0x0, nFileSizeLow=0x5000)) returned 1 [0130.374] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0130.375] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\standaloneUpdaterTelemetryCache.otc", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\standaloneUpdaterTelemetryCache.otc", lpFilePart=0x0) returned 0x66 [0130.375] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0130.375] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\standaloneUpdaterTelemetryCache.otc" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\common\\standaloneupdatertelemetrycache.otc"), fInfoLevelId=0x0, lpFileInformation=0x23144d8 | out: lpFileInformation=0x23144d8*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x5de15648, ftCreationTime.dwHighDateTime=0x1d2fb75, ftLastAccessTime.dwLowDateTime=0x5de15648, ftLastAccessTime.dwHighDateTime=0x1d2fb75, ftLastWriteTime.dwLowDateTime=0xac3d4381, ftLastWriteTime.dwHighDateTime=0x1d33718, nFileSizeHigh=0x0, nFileSizeLow=0x5000)) returned 1 [0130.375] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0130.375] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\standaloneUpdaterTelemetryCache.otc", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\standaloneUpdaterTelemetryCache.otc", lpFilePart=0x0) returned 0x66 [0130.375] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0130.375] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\standaloneUpdaterTelemetryCache.otc" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\common\\standaloneupdatertelemetrycache.otc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0130.375] GetFileType (hFile=0x444) returned 0x1 [0130.375] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0130.376] GetFileType (hFile=0x444) returned 0x1 [0130.376] ReadFile (in: hFile=0x444, lpBuffer=0x2316968, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x2316968*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0130.426] CloseHandle (hObject=0x444) returned 1 [0130.426] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\standaloneUpdaterTelemetryCache.otc", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\standaloneUpdaterTelemetryCache.otc", lpFilePart=0x0) returned 0x66 [0130.427] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0130.427] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\standaloneUpdaterTelemetryCache.otc" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\common\\standaloneupdatertelemetrycache.otc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0130.427] GetFileType (hFile=0x444) returned 0x1 [0130.427] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0130.427] GetFileType (hFile=0x444) returned 0x1 [0130.427] WriteFile (in: hFile=0x444, lpBuffer=0x215f598*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x215f598*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0130.427] CloseHandle (hObject=0x444) returned 1 [0130.427] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\standaloneUpdaterTelemetryCache.otc", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\standaloneUpdaterTelemetryCache.otc", lpFilePart=0x0) returned 0x66 [0130.428] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\standaloneUpdaterTelemetryCache.otc.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\standaloneUpdaterTelemetryCache.otc.xuy", lpFilePart=0x0) returned 0x6a [0130.428] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0130.428] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\standaloneUpdaterTelemetryCache.otc" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\common\\standaloneupdatertelemetrycache.otc"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x5de15648, ftCreationTime.dwHighDateTime=0x1d2fb75, ftLastAccessTime.dwLowDateTime=0x5de15648, ftLastAccessTime.dwHighDateTime=0x1d2fb75, ftLastWriteTime.dwLowDateTime=0x3996aa2b, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x5000)) returned 1 [0130.428] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0130.428] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\standaloneUpdaterTelemetryCache.otc" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\common\\standaloneupdatertelemetrycache.otc"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\standaloneUpdaterTelemetryCache.otc.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\common\\standaloneupdatertelemetrycache.otc.xuy")) returned 1 [0130.429] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\standaloneUpdaterTelemetryCache.otc.session", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\standaloneUpdaterTelemetryCache.otc.session", lpFilePart=0x0) returned 0x6e [0130.429] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0130.429] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\standaloneUpdaterTelemetryCache.otc.session" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\common\\standaloneupdatertelemetrycache.otc.session"), fInfoLevelId=0x0, lpFileInformation=0x2192e10 | out: lpFileInformation=0x2192e10*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x5d2c1f43, ftCreationTime.dwHighDateTime=0x1d2fb75, ftLastAccessTime.dwLowDateTime=0x5d2c1f43, ftLastAccessTime.dwHighDateTime=0x1d2fb75, ftLastWriteTime.dwLowDateTime=0x5dda2f10, ftLastWriteTime.dwHighDateTime=0x1d2fb75, nFileSizeHigh=0x0, nFileSizeLow=0x5000)) returned 1 [0130.429] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0130.429] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\standaloneUpdaterTelemetryCache.otc.session", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\standaloneUpdaterTelemetryCache.otc.session", lpFilePart=0x0) returned 0x6e [0130.429] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0130.429] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\standaloneUpdaterTelemetryCache.otc.session" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\common\\standaloneupdatertelemetrycache.otc.session"), fInfoLevelId=0x0, lpFileInformation=0x2192fe0 | out: lpFileInformation=0x2192fe0*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x5d2c1f43, ftCreationTime.dwHighDateTime=0x1d2fb75, ftLastAccessTime.dwLowDateTime=0x5d2c1f43, ftLastAccessTime.dwHighDateTime=0x1d2fb75, ftLastWriteTime.dwLowDateTime=0x5dda2f10, ftLastWriteTime.dwHighDateTime=0x1d2fb75, nFileSizeHigh=0x0, nFileSizeLow=0x5000)) returned 1 [0130.429] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0130.430] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\standaloneUpdaterTelemetryCache.otc.session", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\standaloneUpdaterTelemetryCache.otc.session", lpFilePart=0x0) returned 0x6e [0130.430] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0130.430] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\standaloneUpdaterTelemetryCache.otc.session" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\common\\standaloneupdatertelemetrycache.otc.session"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0130.430] GetFileType (hFile=0x444) returned 0x1 [0130.430] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0130.430] GetFileType (hFile=0x444) returned 0x1 [0130.430] ReadFile (in: hFile=0x444, lpBuffer=0x21954b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x21954b0*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0130.449] CloseHandle (hObject=0x444) returned 1 [0130.449] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\standaloneUpdaterTelemetryCache.otc.session", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\standaloneUpdaterTelemetryCache.otc.session", lpFilePart=0x0) returned 0x6e [0130.450] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0130.450] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\standaloneUpdaterTelemetryCache.otc.session" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\common\\standaloneupdatertelemetrycache.otc.session"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0130.450] GetFileType (hFile=0x444) returned 0x1 [0130.450] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0130.450] GetFileType (hFile=0x444) returned 0x1 [0130.450] WriteFile (in: hFile=0x444, lpBuffer=0x2193190*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x2193190*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0130.450] CloseHandle (hObject=0x444) returned 1 [0130.450] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\standaloneUpdaterTelemetryCache.otc.session", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\standaloneUpdaterTelemetryCache.otc.session", lpFilePart=0x0) returned 0x6e [0130.450] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\standaloneUpdaterTelemetryCache.otc.session.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\standaloneUpdaterTelemetryCache.otc.session.xuy", lpFilePart=0x0) returned 0x72 [0130.450] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0130.450] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\standaloneUpdaterTelemetryCache.otc.session" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\common\\standaloneupdatertelemetrycache.otc.session"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x5d2c1f43, ftCreationTime.dwHighDateTime=0x1d2fb75, ftLastAccessTime.dwLowDateTime=0x5d2c1f43, ftLastAccessTime.dwHighDateTime=0x1d2fb75, ftLastWriteTime.dwLowDateTime=0x39990c1e, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x5000)) returned 1 [0130.450] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0130.450] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\standaloneUpdaterTelemetryCache.otc.session" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\common\\standaloneupdatertelemetrycache.otc.session"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\standaloneUpdaterTelemetryCache.otc.session.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\common\\standaloneupdatertelemetrycache.otc.session.xuy")) returned 1 [0130.452] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\telemetryCache.otc", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\telemetryCache.otc", lpFilePart=0x0) returned 0x55 [0130.452] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0130.452] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\telemetryCache.otc" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\common\\telemetrycache.otc"), fInfoLevelId=0x0, lpFileInformation=0x22119c0 | out: lpFileInformation=0x22119c0*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0xe4ba51ac, ftCreationTime.dwHighDateTime=0x1d2fad9, ftLastAccessTime.dwLowDateTime=0xe4ba51ac, ftLastAccessTime.dwHighDateTime=0x1d2fad9, ftLastWriteTime.dwLowDateTime=0xfc98ebad, ftLastWriteTime.dwHighDateTime=0x1d2fad9, nFileSizeHigh=0x0, nFileSizeLow=0xa079b8)) returned 1 [0130.491] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0130.491] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\telemetryCache.otc", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\telemetryCache.otc", lpFilePart=0x0) returned 0x55 [0130.491] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0130.491] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\telemetryCache.otc" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\common\\telemetrycache.otc"), fInfoLevelId=0x0, lpFileInformation=0x2211b30 | out: lpFileInformation=0x2211b30*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0xe4ba51ac, ftCreationTime.dwHighDateTime=0x1d2fad9, ftLastAccessTime.dwLowDateTime=0xe4ba51ac, ftLastAccessTime.dwHighDateTime=0x1d2fad9, ftLastWriteTime.dwLowDateTime=0xfc98ebad, ftLastWriteTime.dwHighDateTime=0x1d2fad9, nFileSizeHigh=0x0, nFileSizeLow=0xa079b8)) returned 1 [0130.492] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0130.492] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\telemetryCache.otc", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\telemetryCache.otc", lpFilePart=0x0) returned 0x55 [0130.492] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0130.492] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\telemetryCache.otc" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\common\\telemetrycache.otc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0130.492] GetFileType (hFile=0x444) returned 0x1 [0130.492] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0130.492] GetFileType (hFile=0x444) returned 0x1 [0130.492] ReadFile (in: hFile=0x444, lpBuffer=0x2213f40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x2213f40*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0130.507] CloseHandle (hObject=0x444) returned 1 [0130.507] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\telemetryCache.otc", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\telemetryCache.otc", lpFilePart=0x0) returned 0x55 [0130.507] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0130.507] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\telemetryCache.otc" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\common\\telemetrycache.otc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0130.507] GetFileType (hFile=0x444) returned 0x1 [0130.507] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0130.507] GetFileType (hFile=0x444) returned 0x1 [0130.507] WriteFile (in: hFile=0x444, lpBuffer=0x2211c80*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x2211c80*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0130.507] CloseHandle (hObject=0x444) returned 1 [0130.507] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\telemetryCache.otc", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\telemetryCache.otc", lpFilePart=0x0) returned 0x55 [0130.507] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\telemetryCache.otc.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\telemetryCache.otc.xuy", lpFilePart=0x0) returned 0x59 [0130.507] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0130.507] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\telemetryCache.otc" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\common\\telemetrycache.otc"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0xe4ba51ac, ftCreationTime.dwHighDateTime=0x1d2fad9, ftLastAccessTime.dwLowDateTime=0xe4ba51ac, ftLastAccessTime.dwHighDateTime=0x1d2fad9, ftLastWriteTime.dwLowDateTime=0x39a298b1, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xa079b8)) returned 1 [0130.508] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0130.508] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\telemetryCache.otc" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\common\\telemetrycache.otc"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\telemetryCache.otc.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\common\\telemetrycache.otc.xuy")) returned 1 [0130.509] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\telemetryCache.otc.session", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\telemetryCache.otc.session", lpFilePart=0x0) returned 0x5d [0130.509] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0130.509] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\telemetryCache.otc.session" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\common\\telemetrycache.otc.session"), fInfoLevelId=0x0, lpFileInformation=0x2290368 | out: lpFileInformation=0x2290368*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0xe4647ad7, ftCreationTime.dwHighDateTime=0x1d2fad9, ftLastAccessTime.dwLowDateTime=0xe4647ad7, ftLastAccessTime.dwHighDateTime=0x1d2fad9, ftLastWriteTime.dwLowDateTime=0xe4778f4b, ftLastWriteTime.dwHighDateTime=0x1d2fad9, nFileSizeHigh=0x0, nFileSizeLow=0x10278)) returned 1 [0130.509] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0130.509] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\telemetryCache.otc.session", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\telemetryCache.otc.session", lpFilePart=0x0) returned 0x5d [0130.509] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0130.509] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\telemetryCache.otc.session" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\common\\telemetrycache.otc.session"), fInfoLevelId=0x0, lpFileInformation=0x22904f8 | out: lpFileInformation=0x22904f8*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0xe4647ad7, ftCreationTime.dwHighDateTime=0x1d2fad9, ftLastAccessTime.dwLowDateTime=0xe4647ad7, ftLastAccessTime.dwHighDateTime=0x1d2fad9, ftLastWriteTime.dwLowDateTime=0xe4778f4b, ftLastWriteTime.dwHighDateTime=0x1d2fad9, nFileSizeHigh=0x0, nFileSizeLow=0x10278)) returned 1 [0130.509] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0130.509] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\telemetryCache.otc.session", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\telemetryCache.otc.session", lpFilePart=0x0) returned 0x5d [0130.509] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0130.509] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\telemetryCache.otc.session" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\common\\telemetrycache.otc.session"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0130.510] GetFileType (hFile=0x444) returned 0x1 [0130.510] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0130.510] GetFileType (hFile=0x444) returned 0x1 [0130.510] ReadFile (in: hFile=0x444, lpBuffer=0x2292948, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x2292948*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0130.530] CloseHandle (hObject=0x444) returned 1 [0130.530] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\telemetryCache.otc.session", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\telemetryCache.otc.session", lpFilePart=0x0) returned 0x5d [0130.530] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0130.531] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\telemetryCache.otc.session" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\common\\telemetrycache.otc.session"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0130.531] GetFileType (hFile=0x444) returned 0x1 [0130.531] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0130.531] GetFileType (hFile=0x444) returned 0x1 [0130.531] WriteFile (in: hFile=0x444, lpBuffer=0x2290668*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x2290668*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0130.531] CloseHandle (hObject=0x444) returned 1 [0130.531] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\telemetryCache.otc.session", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\telemetryCache.otc.session", lpFilePart=0x0) returned 0x5d [0130.531] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\telemetryCache.otc.session.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\telemetryCache.otc.session.xuy", lpFilePart=0x0) returned 0x61 [0130.532] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0130.532] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\telemetryCache.otc.session" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\common\\telemetrycache.otc.session"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0xe4647ad7, ftCreationTime.dwHighDateTime=0x1d2fad9, ftLastAccessTime.dwLowDateTime=0xe4647ad7, ftLastAccessTime.dwHighDateTime=0x1d2fad9, ftLastWriteTime.dwLowDateTime=0x39a75b38, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x10278)) returned 1 [0130.532] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0130.532] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\telemetryCache.otc.session" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\common\\telemetrycache.otc.session"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\telemetryCache.otc.session.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\common\\telemetrycache.otc.session.xuy")) returned 1 [0130.533] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0130.533] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Personal", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Personal", lpFilePart=0x0) returned 0x44 [0130.533] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Personal\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Personal\\", lpFilePart=0x0) returned 0x45 [0130.533] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Personal\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d81b0 [0130.546] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0130.547] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0130.547] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0130.547] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0130.547] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0130.547] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0130.548] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0130.548] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0130.548] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0130.548] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Personal", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Personal", lpFilePart=0x0) returned 0x44 [0130.548] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Personal\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Personal\\", lpFilePart=0x0) returned 0x45 [0130.548] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Personal\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7550 [0130.549] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0130.549] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0130.550] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0130.550] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0130.550] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0130.550] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0130.551] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0130.551] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0130.551] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Personal\\TraceArchive.5892.0626-0.etl", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Personal\\TraceArchive.5892.0626-0.etl", lpFilePart=0x0) returned 0x61 [0130.551] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0130.551] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Personal\\TraceArchive.5892.0626-0.etl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\personal\\tracearchive.5892.0626-0.etl"), fInfoLevelId=0x0, lpFileInformation=0x2311800 | out: lpFileInformation=0x2311800*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x32447738, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x32447738, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x3246d972, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0130.552] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0130.552] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Personal\\TraceArchive.5892.0626-0.etl", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Personal\\TraceArchive.5892.0626-0.etl", lpFilePart=0x0) returned 0x61 [0130.552] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0130.552] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Personal\\TraceArchive.5892.0626-0.etl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\personal\\tracearchive.5892.0626-0.etl"), fInfoLevelId=0x0, lpFileInformation=0x23119a0 | out: lpFileInformation=0x23119a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x32447738, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x32447738, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x3246d972, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0130.552] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0130.552] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Personal\\TraceArchive.5892.0626-0.etl", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Personal\\TraceArchive.5892.0626-0.etl", lpFilePart=0x0) returned 0x61 [0130.552] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0130.552] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Personal\\TraceArchive.5892.0626-0.etl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\personal\\tracearchive.5892.0626-0.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0130.553] GetFileType (hFile=0x444) returned 0x1 [0130.553] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0130.553] GetFileType (hFile=0x444) returned 0x1 [0130.554] ReadFile (in: hFile=0x444, lpBuffer=0x2313e10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x2313e10*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0130.614] CloseHandle (hObject=0x444) returned 1 [0130.614] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Personal\\TraceArchive.5892.0626-0.etl", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Personal\\TraceArchive.5892.0626-0.etl", lpFilePart=0x0) returned 0x61 [0130.614] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0130.614] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Personal\\TraceArchive.5892.0626-0.etl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\personal\\tracearchive.5892.0626-0.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0130.614] GetFileType (hFile=0x444) returned 0x1 [0130.614] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0130.614] GetFileType (hFile=0x444) returned 0x1 [0130.614] WriteFile (in: hFile=0x444, lpBuffer=0x215ed78*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x215ed78*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0130.614] CloseHandle (hObject=0x444) returned 1 [0130.615] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Personal\\TraceArchive.5892.0626-0.etl", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Personal\\TraceArchive.5892.0626-0.etl", lpFilePart=0x0) returned 0x61 [0130.615] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Personal\\TraceArchive.5892.0626-0.etl.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Personal\\TraceArchive.5892.0626-0.etl.xuy", lpFilePart=0x0) returned 0x65 [0130.615] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0130.615] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Personal\\TraceArchive.5892.0626-0.etl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\personal\\tracearchive.5892.0626-0.etl"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x32447738, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x32447738, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x39b346a6, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0130.615] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0130.615] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Personal\\TraceArchive.5892.0626-0.etl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\personal\\tracearchive.5892.0626-0.etl"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Personal\\TraceArchive.5892.0626-0.etl.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\personal\\tracearchive.5892.0626-0.etl.xuy")) returned 1 [0130.616] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Personal\\TraceArchive.6917.0607-1.etl", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Personal\\TraceArchive.6917.0607-1.etl", lpFilePart=0x0) returned 0x61 [0130.616] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0130.616] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Personal\\TraceArchive.6917.0607-1.etl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\personal\\tracearchive.6917.0607-1.etl"), fInfoLevelId=0x0, lpFileInformation=0x218fa80 | out: lpFileInformation=0x218fa80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x17f4329a, ftCreationTime.dwHighDateTime=0x1d2fada, ftLastAccessTime.dwLowDateTime=0x17f4329a, ftLastAccessTime.dwHighDateTime=0x1d2fada, ftLastWriteTime.dwLowDateTime=0x1809a9c7, ftLastWriteTime.dwHighDateTime=0x1d2fada, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0130.619] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0130.619] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Personal\\TraceArchive.6917.0607-1.etl", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Personal\\TraceArchive.6917.0607-1.etl", lpFilePart=0x0) returned 0x61 [0130.619] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0130.619] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Personal\\TraceArchive.6917.0607-1.etl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\personal\\tracearchive.6917.0607-1.etl"), fInfoLevelId=0x0, lpFileInformation=0x218fc20 | out: lpFileInformation=0x218fc20*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x17f4329a, ftCreationTime.dwHighDateTime=0x1d2fada, ftLastAccessTime.dwLowDateTime=0x17f4329a, ftLastAccessTime.dwHighDateTime=0x1d2fada, ftLastWriteTime.dwLowDateTime=0x1809a9c7, ftLastWriteTime.dwHighDateTime=0x1d2fada, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0130.620] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0130.620] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Personal\\TraceArchive.6917.0607-1.etl", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Personal\\TraceArchive.6917.0607-1.etl", lpFilePart=0x0) returned 0x61 [0130.620] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0130.620] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Personal\\TraceArchive.6917.0607-1.etl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\personal\\tracearchive.6917.0607-1.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0130.621] GetFileType (hFile=0x444) returned 0x1 [0130.621] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0130.621] GetFileType (hFile=0x444) returned 0x1 [0130.621] ReadFile (in: hFile=0x444, lpBuffer=0x2192090, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x2192090*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0130.646] CloseHandle (hObject=0x444) returned 1 [0130.647] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Personal\\TraceArchive.6917.0607-1.etl", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Personal\\TraceArchive.6917.0607-1.etl", lpFilePart=0x0) returned 0x61 [0130.647] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0130.647] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Personal\\TraceArchive.6917.0607-1.etl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\personal\\tracearchive.6917.0607-1.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0130.647] GetFileType (hFile=0x444) returned 0x1 [0130.647] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0130.647] GetFileType (hFile=0x444) returned 0x1 [0130.647] WriteFile (in: hFile=0x444, lpBuffer=0x218fda0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x218fda0*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0130.647] CloseHandle (hObject=0x444) returned 1 [0130.647] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Personal\\TraceArchive.6917.0607-1.etl", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Personal\\TraceArchive.6917.0607-1.etl", lpFilePart=0x0) returned 0x61 [0130.647] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Personal\\TraceArchive.6917.0607-1.etl.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Personal\\TraceArchive.6917.0607-1.etl.xuy", lpFilePart=0x0) returned 0x65 [0130.647] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0130.647] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Personal\\TraceArchive.6917.0607-1.etl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\personal\\tracearchive.6917.0607-1.etl"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x17f4329a, ftCreationTime.dwHighDateTime=0x1d2fada, ftLastAccessTime.dwLowDateTime=0x17f4329a, ftLastAccessTime.dwHighDateTime=0x1d2fada, ftLastWriteTime.dwLowDateTime=0x39b80a7b, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0130.648] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0130.648] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Personal\\TraceArchive.6917.0607-1.etl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\personal\\tracearchive.6917.0607-1.etl"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Personal\\TraceArchive.6917.0607-1.etl.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\personal\\tracearchive.6917.0607-1.etl.xuy")) returned 1 [0130.649] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Personal\\TraceCurrent.6998.0830.etl", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Personal\\TraceCurrent.6998.0830.etl", lpFilePart=0x0) returned 0x5f [0130.649] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0130.649] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Personal\\TraceCurrent.6998.0830.etl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\personal\\tracecurrent.6998.0830.etl"), fInfoLevelId=0x0, lpFileInformation=0x220e528 | out: lpFileInformation=0x220e528*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x632c211c, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x632c211c, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x633f34a4, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0130.649] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0130.649] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Personal\\TraceCurrent.6998.0830.etl", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Personal\\TraceCurrent.6998.0830.etl", lpFilePart=0x0) returned 0x5f [0130.649] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0130.649] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Personal\\TraceCurrent.6998.0830.etl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\personal\\tracecurrent.6998.0830.etl"), fInfoLevelId=0x0, lpFileInformation=0x220e6b8 | out: lpFileInformation=0x220e6b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x632c211c, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x632c211c, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x633f34a4, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0130.649] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0130.649] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Personal\\TraceCurrent.6998.0830.etl", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Personal\\TraceCurrent.6998.0830.etl", lpFilePart=0x0) returned 0x5f [0130.649] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0130.649] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Personal\\TraceCurrent.6998.0830.etl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\personal\\tracecurrent.6998.0830.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0130.650] GetFileType (hFile=0x444) returned 0x1 [0130.650] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0130.650] GetFileType (hFile=0x444) returned 0x1 [0130.650] ReadFile (in: hFile=0x444, lpBuffer=0x2210b08, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x2210b08*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0130.667] CloseHandle (hObject=0x444) returned 1 [0130.667] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Personal\\TraceCurrent.6998.0830.etl", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Personal\\TraceCurrent.6998.0830.etl", lpFilePart=0x0) returned 0x5f [0130.667] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0130.668] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Personal\\TraceCurrent.6998.0830.etl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\personal\\tracecurrent.6998.0830.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0130.668] GetFileType (hFile=0x444) returned 0x1 [0130.668] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0130.668] GetFileType (hFile=0x444) returned 0x1 [0130.668] WriteFile (in: hFile=0x444, lpBuffer=0x220e828*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x220e828*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0130.668] CloseHandle (hObject=0x444) returned 1 [0130.668] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Personal\\TraceCurrent.6998.0830.etl", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Personal\\TraceCurrent.6998.0830.etl", lpFilePart=0x0) returned 0x5f [0130.668] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Personal\\TraceCurrent.6998.0830.etl.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Personal\\TraceCurrent.6998.0830.etl.xuy", lpFilePart=0x0) returned 0x63 [0130.668] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0130.668] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Personal\\TraceCurrent.6998.0830.etl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\personal\\tracecurrent.6998.0830.etl"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x632c211c, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x632c211c, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x39ba6d01, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0130.668] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0130.669] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Personal\\TraceCurrent.6998.0830.etl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\personal\\tracecurrent.6998.0830.etl"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Personal\\TraceCurrent.6998.0830.etl.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\personal\\tracecurrent.6998.0830.etl.xuy")) returned 1 [0130.670] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0130.670] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup", lpFilePart=0x0) returned 0x3c [0130.670] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\", lpFilePart=0x0) returned 0x3d [0130.670] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7fd0 [0130.670] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0130.670] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0130.671] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0130.671] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0130.671] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0130.671] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0130.671] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0130.671] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup", lpFilePart=0x0) returned 0x3c [0130.671] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\", lpFilePart=0x0) returned 0x3d [0130.671] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7d30 [0130.671] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0130.671] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0130.672] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0130.672] FindClose (in: hFindFile=0x5d7d30 | out: hFindFile=0x5d7d30) returned 1 [0130.672] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0130.672] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0130.672] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0130.672] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs", lpFilePart=0x0) returned 0x41 [0130.672] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\", lpFilePart=0x0) returned 0x42 [0130.672] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d78b0 [0130.674] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0130.675] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0130.675] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0130.675] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0130.675] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0130.675] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0130.675] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0130.675] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0130.675] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0130.676] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0130.676] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0130.676] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0130.676] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0130.676] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0130.676] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0130.676] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0130.676] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0130.676] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0130.677] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0130.677] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0130.677] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0130.677] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0130.677] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0130.677] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0130.677] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0130.677] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0130.678] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0130.678] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0130.678] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0130.678] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs", lpFilePart=0x0) returned 0x41 [0130.678] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\", lpFilePart=0x0) returned 0x42 [0130.678] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d78b0 [0130.679] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0130.679] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0130.679] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0130.679] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0130.680] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0130.680] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0130.680] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0130.680] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0130.680] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0130.680] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0130.680] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0130.680] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0130.680] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0130.680] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0130.681] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0130.681] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0130.681] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0130.681] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0130.681] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0130.681] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0130.681] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0130.681] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0130.681] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0130.681] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0130.681] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0130.682] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0130.682] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0130.682] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0130.682] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_121120_934-848.log", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_121120_934-848.log", lpFilePart=0x0) returned 0x5f [0130.682] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0130.682] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_121120_934-848.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\2017-07-21_121120_934-848.log"), fInfoLevelId=0x0, lpFileInformation=0x2298788 | out: lpFileInformation=0x2298788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa504dbd7, ftCreationTime.dwHighDateTime=0x1d301c6, ftLastAccessTime.dwLowDateTime=0xa504dbd7, ftLastAccessTime.dwHighDateTime=0x1d301c6, ftLastWriteTime.dwLowDateTime=0xa6df45a3, ftLastWriteTime.dwHighDateTime=0x1d301c6, nFileSizeHigh=0x0, nFileSizeLow=0x2490)) returned 1 [0130.683] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0130.683] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_121120_934-848.log", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_121120_934-848.log", lpFilePart=0x0) returned 0x5f [0130.683] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0130.683] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_121120_934-848.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\2017-07-21_121120_934-848.log"), fInfoLevelId=0x0, lpFileInformation=0x2298920 | out: lpFileInformation=0x2298920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa504dbd7, ftCreationTime.dwHighDateTime=0x1d301c6, ftLastAccessTime.dwLowDateTime=0xa504dbd7, ftLastAccessTime.dwHighDateTime=0x1d301c6, ftLastWriteTime.dwLowDateTime=0xa6df45a3, ftLastWriteTime.dwHighDateTime=0x1d301c6, nFileSizeHigh=0x0, nFileSizeLow=0x2490)) returned 1 [0130.683] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0130.683] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_121120_934-848.log", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_121120_934-848.log", lpFilePart=0x0) returned 0x5f [0130.683] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0130.683] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_121120_934-848.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\2017-07-21_121120_934-848.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0130.684] GetFileType (hFile=0x444) returned 0x1 [0130.684] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0130.684] GetFileType (hFile=0x444) returned 0x1 [0130.684] ReadFile (in: hFile=0x444, lpBuffer=0x229ad80, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x229ad80*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0130.711] CloseHandle (hObject=0x444) returned 1 [0130.711] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_121120_934-848.log", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_121120_934-848.log", lpFilePart=0x0) returned 0x5f [0130.711] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0130.711] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_121120_934-848.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\2017-07-21_121120_934-848.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0130.712] GetFileType (hFile=0x444) returned 0x1 [0130.712] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0130.712] GetFileType (hFile=0x444) returned 0x1 [0130.712] WriteFile (in: hFile=0x444, lpBuffer=0x2298a98*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x2298a98*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0130.712] CloseHandle (hObject=0x444) returned 1 [0130.712] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_121120_934-848.log", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_121120_934-848.log", lpFilePart=0x0) returned 0x5f [0130.712] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_121120_934-848.log.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_121120_934-848.log.xuy", lpFilePart=0x0) returned 0x63 [0130.712] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0130.713] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_121120_934-848.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\2017-07-21_121120_934-848.log"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa504dbd7, ftCreationTime.dwHighDateTime=0x1d301c6, ftLastAccessTime.dwLowDateTime=0xa504dbd7, ftLastAccessTime.dwHighDateTime=0x1d301c6, ftLastWriteTime.dwLowDateTime=0x39c1953d, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2490)) returned 1 [0130.713] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0130.713] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_121120_934-848.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\2017-07-21_121120_934-848.log"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_121120_934-848.log.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\2017-07-21_121120_934-848.log.xuy")) returned 1 [0130.718] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_121121_d68-ddc.log", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_121121_d68-ddc.log", lpFilePart=0x0) returned 0x5f [0130.718] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0130.718] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_121121_d68-ddc.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\2017-07-21_121121_d68-ddc.log"), fInfoLevelId=0x0, lpFileInformation=0x23171f8 | out: lpFileInformation=0x23171f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa58cbee9, ftCreationTime.dwHighDateTime=0x1d301c6, ftLastAccessTime.dwLowDateTime=0xa58cbee9, ftLastAccessTime.dwHighDateTime=0x1d301c6, ftLastWriteTime.dwLowDateTime=0xa69ee8c8, ftLastWriteTime.dwHighDateTime=0x1d301c6, nFileSizeHigh=0x0, nFileSizeLow=0x220a)) returned 1 [0130.718] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0130.718] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_121121_d68-ddc.log", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_121121_d68-ddc.log", lpFilePart=0x0) returned 0x5f [0130.718] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0130.718] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_121121_d68-ddc.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\2017-07-21_121121_d68-ddc.log"), fInfoLevelId=0x0, lpFileInformation=0x2317390 | out: lpFileInformation=0x2317390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa58cbee9, ftCreationTime.dwHighDateTime=0x1d301c6, ftLastAccessTime.dwLowDateTime=0xa58cbee9, ftLastAccessTime.dwHighDateTime=0x1d301c6, ftLastWriteTime.dwLowDateTime=0xa69ee8c8, ftLastWriteTime.dwHighDateTime=0x1d301c6, nFileSizeHigh=0x0, nFileSizeLow=0x220a)) returned 1 [0130.718] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0130.718] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_121121_d68-ddc.log", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_121121_d68-ddc.log", lpFilePart=0x0) returned 0x5f [0130.718] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0130.718] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_121121_d68-ddc.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\2017-07-21_121121_d68-ddc.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0130.719] GetFileType (hFile=0x444) returned 0x1 [0130.719] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0130.719] GetFileType (hFile=0x444) returned 0x1 [0130.719] ReadFile (in: hFile=0x444, lpBuffer=0x23197f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x23197f0*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0130.776] CloseHandle (hObject=0x444) returned 1 [0130.776] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_121121_d68-ddc.log", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_121121_d68-ddc.log", lpFilePart=0x0) returned 0x5f [0130.776] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0130.776] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_121121_d68-ddc.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\2017-07-21_121121_d68-ddc.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0130.776] GetFileType (hFile=0x444) returned 0x1 [0130.777] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0130.777] GetFileType (hFile=0x444) returned 0x1 [0130.777] WriteFile (in: hFile=0x444, lpBuffer=0x2160040*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x2160040*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0130.777] CloseHandle (hObject=0x444) returned 1 [0130.777] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_121121_d68-ddc.log", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_121121_d68-ddc.log", lpFilePart=0x0) returned 0x5f [0130.777] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_121121_d68-ddc.log.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_121121_d68-ddc.log.xuy", lpFilePart=0x0) returned 0x63 [0130.777] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0130.777] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_121121_d68-ddc.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\2017-07-21_121121_d68-ddc.log"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa58cbee9, ftCreationTime.dwHighDateTime=0x1d301c6, ftLastAccessTime.dwLowDateTime=0xa58cbee9, ftLastAccessTime.dwHighDateTime=0x1d301c6, ftLastWriteTime.dwLowDateTime=0x39cb1e9e, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x220a)) returned 1 [0130.777] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0130.777] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_121121_d68-ddc.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\2017-07-21_121121_d68-ddc.log"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_121121_d68-ddc.log.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\2017-07-21_121121_d68-ddc.log.xuy")) returned 1 [0130.779] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_123817_760-808.log", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_123817_760-808.log", lpFilePart=0x0) returned 0x5f [0130.779] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0130.779] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_123817_760-808.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\2017-07-21_123817_760-808.log"), fInfoLevelId=0x0, lpFileInformation=0x2196f28 | out: lpFileInformation=0x2196f28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68e2fe3f, ftCreationTime.dwHighDateTime=0x1d301ca, ftLastAccessTime.dwLowDateTime=0x68e2fe3f, ftLastAccessTime.dwHighDateTime=0x1d301ca, ftLastWriteTime.dwLowDateTime=0x69f78f79, ftLastWriteTime.dwHighDateTime=0x1d301ca, nFileSizeHigh=0x0, nFileSizeLow=0x2490)) returned 1 [0130.780] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0130.780] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_123817_760-808.log", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_123817_760-808.log", lpFilePart=0x0) returned 0x5f [0130.780] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0130.780] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_123817_760-808.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\2017-07-21_123817_760-808.log"), fInfoLevelId=0x0, lpFileInformation=0x21970c0 | out: lpFileInformation=0x21970c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68e2fe3f, ftCreationTime.dwHighDateTime=0x1d301ca, ftLastAccessTime.dwLowDateTime=0x68e2fe3f, ftLastAccessTime.dwHighDateTime=0x1d301ca, ftLastWriteTime.dwLowDateTime=0x69f78f79, ftLastWriteTime.dwHighDateTime=0x1d301ca, nFileSizeHigh=0x0, nFileSizeLow=0x2490)) returned 1 [0130.780] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0130.780] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_123817_760-808.log", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_123817_760-808.log", lpFilePart=0x0) returned 0x5f [0130.780] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0130.780] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_123817_760-808.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\2017-07-21_123817_760-808.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0130.781] GetFileType (hFile=0x444) returned 0x1 [0130.781] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0130.781] GetFileType (hFile=0x444) returned 0x1 [0130.781] ReadFile (in: hFile=0x444, lpBuffer=0x2199520, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x2199520*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0130.811] CloseHandle (hObject=0x444) returned 1 [0130.811] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_123817_760-808.log", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_123817_760-808.log", lpFilePart=0x0) returned 0x5f [0130.811] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0130.811] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_123817_760-808.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\2017-07-21_123817_760-808.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0130.812] GetFileType (hFile=0x444) returned 0x1 [0130.812] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0130.812] GetFileType (hFile=0x444) returned 0x1 [0130.812] WriteFile (in: hFile=0x444, lpBuffer=0x2197238*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x2197238*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0130.812] CloseHandle (hObject=0x444) returned 1 [0130.812] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_123817_760-808.log", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_123817_760-808.log", lpFilePart=0x0) returned 0x5f [0130.812] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_123817_760-808.log.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_123817_760-808.log.xuy", lpFilePart=0x0) returned 0x63 [0130.812] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0130.812] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_123817_760-808.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\2017-07-21_123817_760-808.log"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68e2fe3f, ftCreationTime.dwHighDateTime=0x1d301ca, ftLastAccessTime.dwLowDateTime=0x68e2fe3f, ftLastAccessTime.dwHighDateTime=0x1d301ca, ftLastWriteTime.dwLowDateTime=0x39d24931, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2490)) returned 1 [0130.812] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0130.812] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_123817_760-808.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\2017-07-21_123817_760-808.log"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_123817_760-808.log.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\2017-07-21_123817_760-808.log.xuy")) returned 1 [0130.814] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_123818_e38-824.log", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_123818_e38-824.log", lpFilePart=0x0) returned 0x5f [0130.814] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0130.814] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_123818_e38-824.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\2017-07-21_123818_e38-824.log"), fInfoLevelId=0x0, lpFileInformation=0x2215998 | out: lpFileInformation=0x2215998*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x693d97e2, ftCreationTime.dwHighDateTime=0x1d301ca, ftLastAccessTime.dwLowDateTime=0x693d97e2, ftLastAccessTime.dwHighDateTime=0x1d301ca, ftLastWriteTime.dwLowDateTime=0x69b72fe8, ftLastWriteTime.dwHighDateTime=0x1d301ca, nFileSizeHigh=0x0, nFileSizeLow=0x220a)) returned 1 [0130.814] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0130.814] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_123818_e38-824.log", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_123818_e38-824.log", lpFilePart=0x0) returned 0x5f [0130.814] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0130.814] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_123818_e38-824.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\2017-07-21_123818_e38-824.log"), fInfoLevelId=0x0, lpFileInformation=0x2215b30 | out: lpFileInformation=0x2215b30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x693d97e2, ftCreationTime.dwHighDateTime=0x1d301ca, ftLastAccessTime.dwLowDateTime=0x693d97e2, ftLastAccessTime.dwHighDateTime=0x1d301ca, ftLastWriteTime.dwLowDateTime=0x69b72fe8, ftLastWriteTime.dwHighDateTime=0x1d301ca, nFileSizeHigh=0x0, nFileSizeLow=0x220a)) returned 1 [0130.814] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0130.814] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_123818_e38-824.log", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_123818_e38-824.log", lpFilePart=0x0) returned 0x5f [0130.814] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0130.814] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_123818_e38-824.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\2017-07-21_123818_e38-824.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0130.815] GetFileType (hFile=0x444) returned 0x1 [0130.815] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0130.815] GetFileType (hFile=0x444) returned 0x1 [0130.815] ReadFile (in: hFile=0x444, lpBuffer=0x2217f90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x2217f90*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0130.838] CloseHandle (hObject=0x444) returned 1 [0130.838] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_123818_e38-824.log", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_123818_e38-824.log", lpFilePart=0x0) returned 0x5f [0130.838] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0130.838] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_123818_e38-824.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\2017-07-21_123818_e38-824.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0130.839] GetFileType (hFile=0x444) returned 0x1 [0130.839] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0130.839] GetFileType (hFile=0x444) returned 0x1 [0130.839] WriteFile (in: hFile=0x444, lpBuffer=0x2215ca8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x2215ca8*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0130.839] CloseHandle (hObject=0x444) returned 1 [0130.839] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_123818_e38-824.log", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_123818_e38-824.log", lpFilePart=0x0) returned 0x5f [0130.839] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_123818_e38-824.log.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_123818_e38-824.log.xuy", lpFilePart=0x0) returned 0x63 [0130.839] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0130.839] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_123818_e38-824.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\2017-07-21_123818_e38-824.log"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x693d97e2, ftCreationTime.dwHighDateTime=0x1d301ca, ftLastAccessTime.dwLowDateTime=0x693d97e2, ftLastAccessTime.dwHighDateTime=0x1d301ca, ftLastWriteTime.dwLowDateTime=0x39d4a68b, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x220a)) returned 1 [0130.840] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0130.840] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_123818_e38-824.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\2017-07-21_123818_e38-824.log"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_123818_e38-824.log.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\2017-07-21_123818_e38-824.log.xuy")) returned 1 [0130.841] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_133220_864-704.log", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_133220_864-704.log", lpFilePart=0x0) returned 0x5f [0130.841] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0130.841] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_133220_864-704.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\2017-07-21_133220_864-704.log"), fInfoLevelId=0x0, lpFileInformation=0x2294408 | out: lpFileInformation=0x2294408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf56edb56, ftCreationTime.dwHighDateTime=0x1d301d1, ftLastAccessTime.dwLowDateTime=0xf56edb56, ftLastAccessTime.dwHighDateTime=0x1d301d1, ftLastWriteTime.dwLowDateTime=0xf6751d7c, ftLastWriteTime.dwHighDateTime=0x1d301d1, nFileSizeHigh=0x0, nFileSizeLow=0x249e)) returned 1 [0130.843] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0130.843] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_133220_864-704.log", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_133220_864-704.log", lpFilePart=0x0) returned 0x5f [0130.843] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0130.843] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_133220_864-704.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\2017-07-21_133220_864-704.log"), fInfoLevelId=0x0, lpFileInformation=0x22945a0 | out: lpFileInformation=0x22945a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf56edb56, ftCreationTime.dwHighDateTime=0x1d301d1, ftLastAccessTime.dwLowDateTime=0xf56edb56, ftLastAccessTime.dwHighDateTime=0x1d301d1, ftLastWriteTime.dwLowDateTime=0xf6751d7c, ftLastWriteTime.dwHighDateTime=0x1d301d1, nFileSizeHigh=0x0, nFileSizeLow=0x249e)) returned 1 [0130.843] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0130.843] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_133220_864-704.log", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_133220_864-704.log", lpFilePart=0x0) returned 0x5f [0130.843] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0130.843] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_133220_864-704.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\2017-07-21_133220_864-704.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0130.844] GetFileType (hFile=0x444) returned 0x1 [0130.844] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0130.844] GetFileType (hFile=0x444) returned 0x1 [0130.844] ReadFile (in: hFile=0x444, lpBuffer=0x2296a00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x2296a00*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0130.864] CloseHandle (hObject=0x444) returned 1 [0130.864] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_133220_864-704.log", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_133220_864-704.log", lpFilePart=0x0) returned 0x5f [0130.864] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0130.864] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_133220_864-704.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\2017-07-21_133220_864-704.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0130.864] GetFileType (hFile=0x444) returned 0x1 [0130.864] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0130.865] GetFileType (hFile=0x444) returned 0x1 [0130.865] WriteFile (in: hFile=0x444, lpBuffer=0x2294718*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x2294718*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0130.865] CloseHandle (hObject=0x444) returned 1 [0130.865] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_133220_864-704.log", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_133220_864-704.log", lpFilePart=0x0) returned 0x5f [0130.865] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_133220_864-704.log.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_133220_864-704.log.xuy", lpFilePart=0x0) returned 0x63 [0130.865] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0130.865] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_133220_864-704.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\2017-07-21_133220_864-704.log"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf56edb56, ftCreationTime.dwHighDateTime=0x1d301d1, ftLastAccessTime.dwLowDateTime=0xf56edb56, ftLastAccessTime.dwHighDateTime=0x1d301d1, ftLastWriteTime.dwLowDateTime=0x39d96b61, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x249e)) returned 1 [0130.865] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0130.865] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_133220_864-704.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\2017-07-21_133220_864-704.log"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_133220_864-704.log.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\2017-07-21_133220_864-704.log.xuy")) returned 1 [0130.866] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_133220_ae0-29c.log", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_133220_ae0-29c.log", lpFilePart=0x0) returned 0x5f [0130.866] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0130.866] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_133220_ae0-29c.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\2017-07-21_133220_ae0-29c.log"), fInfoLevelId=0x0, lpFileInformation=0x2312e78 | out: lpFileInformation=0x2312e78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5c711b1, ftCreationTime.dwHighDateTime=0x1d301d1, ftLastAccessTime.dwLowDateTime=0xf5c711b1, ftLastAccessTime.dwHighDateTime=0x1d301d1, ftLastWriteTime.dwLowDateTime=0xf63983ce, ftLastWriteTime.dwHighDateTime=0x1d301d1, nFileSizeHigh=0x0, nFileSizeLow=0x21f8)) returned 1 [0130.867] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0130.867] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_133220_ae0-29c.log", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_133220_ae0-29c.log", lpFilePart=0x0) returned 0x5f [0130.867] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0130.867] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_133220_ae0-29c.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\2017-07-21_133220_ae0-29c.log"), fInfoLevelId=0x0, lpFileInformation=0x2313010 | out: lpFileInformation=0x2313010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5c711b1, ftCreationTime.dwHighDateTime=0x1d301d1, ftLastAccessTime.dwLowDateTime=0xf5c711b1, ftLastAccessTime.dwHighDateTime=0x1d301d1, ftLastWriteTime.dwLowDateTime=0xf63983ce, ftLastWriteTime.dwHighDateTime=0x1d301d1, nFileSizeHigh=0x0, nFileSizeLow=0x21f8)) returned 1 [0130.867] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0130.867] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_133220_ae0-29c.log", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_133220_ae0-29c.log", lpFilePart=0x0) returned 0x5f [0130.867] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0130.867] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_133220_ae0-29c.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\2017-07-21_133220_ae0-29c.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0130.868] GetFileType (hFile=0x444) returned 0x1 [0130.868] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0130.868] GetFileType (hFile=0x444) returned 0x1 [0130.868] ReadFile (in: hFile=0x444, lpBuffer=0x2315470, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x2315470*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0130.910] CloseHandle (hObject=0x444) returned 1 [0130.910] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_133220_ae0-29c.log", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_133220_ae0-29c.log", lpFilePart=0x0) returned 0x5f [0130.910] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0130.910] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_133220_ae0-29c.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\2017-07-21_133220_ae0-29c.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0130.911] GetFileType (hFile=0x444) returned 0x1 [0130.911] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0130.911] GetFileType (hFile=0x444) returned 0x1 [0130.911] WriteFile (in: hFile=0x444, lpBuffer=0x2160028*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x2160028*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0130.911] CloseHandle (hObject=0x444) returned 1 [0130.911] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_133220_ae0-29c.log", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_133220_ae0-29c.log", lpFilePart=0x0) returned 0x5f [0130.911] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_133220_ae0-29c.log.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_133220_ae0-29c.log.xuy", lpFilePart=0x0) returned 0x63 [0130.911] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0130.911] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_133220_ae0-29c.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\2017-07-21_133220_ae0-29c.log"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5c711b1, ftCreationTime.dwHighDateTime=0x1d301d1, ftLastAccessTime.dwLowDateTime=0xf5c711b1, ftLastAccessTime.dwHighDateTime=0x1d301d1, ftLastWriteTime.dwLowDateTime=0x39e0931d, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x21f8)) returned 1 [0130.911] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0130.911] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_133220_ae0-29c.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\2017-07-21_133220_ae0-29c.log"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_133220_ae0-29c.log.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\2017-07-21_133220_ae0-29c.log.xuy")) returned 1 [0130.912] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install-PerUser_2017-05-24_104601_b30-494.log", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install-PerUser_2017-05-24_104601_b30-494.log", lpFilePart=0x0) returned 0x6f [0130.913] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0130.913] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install-PerUser_2017-05-24_104601_b30-494.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\install-peruser_2017-05-24_104601_b30-494.log"), fInfoLevelId=0x0, lpFileInformation=0x21918d0 | out: lpFileInformation=0x21918d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1da6fd59, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x1da6fd59, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x3d857ba8, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x7170c)) returned 1 [0130.913] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0130.913] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install-PerUser_2017-05-24_104601_b30-494.log", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install-PerUser_2017-05-24_104601_b30-494.log", lpFilePart=0x0) returned 0x6f [0130.913] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0130.913] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install-PerUser_2017-05-24_104601_b30-494.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\install-peruser_2017-05-24_104601_b30-494.log"), fInfoLevelId=0x0, lpFileInformation=0x2191aa8 | out: lpFileInformation=0x2191aa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1da6fd59, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x1da6fd59, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x3d857ba8, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x7170c)) returned 1 [0130.913] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0130.913] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install-PerUser_2017-05-24_104601_b30-494.log", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install-PerUser_2017-05-24_104601_b30-494.log", lpFilePart=0x0) returned 0x6f [0130.913] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0130.913] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install-PerUser_2017-05-24_104601_b30-494.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\install-peruser_2017-05-24_104601_b30-494.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0130.914] GetFileType (hFile=0x444) returned 0x1 [0130.914] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0130.914] GetFileType (hFile=0x444) returned 0x1 [0130.914] ReadFile (in: hFile=0x444, lpBuffer=0x2193f88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x2193f88*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0130.941] CloseHandle (hObject=0x444) returned 1 [0130.941] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install-PerUser_2017-05-24_104601_b30-494.log", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install-PerUser_2017-05-24_104601_b30-494.log", lpFilePart=0x0) returned 0x6f [0130.941] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0130.941] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install-PerUser_2017-05-24_104601_b30-494.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\install-peruser_2017-05-24_104601_b30-494.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0130.941] GetFileType (hFile=0x444) returned 0x1 [0130.941] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0130.941] GetFileType (hFile=0x444) returned 0x1 [0130.941] WriteFile (in: hFile=0x444, lpBuffer=0x2191c60*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x2191c60*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0130.941] CloseHandle (hObject=0x444) returned 1 [0130.942] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install-PerUser_2017-05-24_104601_b30-494.log", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install-PerUser_2017-05-24_104601_b30-494.log", lpFilePart=0x0) returned 0x6f [0130.942] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install-PerUser_2017-05-24_104601_b30-494.log.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install-PerUser_2017-05-24_104601_b30-494.log.xuy", lpFilePart=0x0) returned 0x73 [0130.942] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0130.942] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install-PerUser_2017-05-24_104601_b30-494.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\install-peruser_2017-05-24_104601_b30-494.log"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1da6fd59, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x1da6fd59, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x39e55784, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x7170c)) returned 1 [0130.942] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0130.942] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install-PerUser_2017-05-24_104601_b30-494.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\install-peruser_2017-05-24_104601_b30-494.log"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install-PerUser_2017-05-24_104601_b30-494.log.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\install-peruser_2017-05-24_104601_b30-494.log.xuy")) returned 1 [0130.943] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install-PerUser_2017-07-12_164141_b14-7f0.log", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install-PerUser_2017-07-12_164141_b14-7f0.log", lpFilePart=0x0) returned 0x6f [0130.943] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0130.943] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install-PerUser_2017-07-12_164141_b14-7f0.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\install-peruser_2017-07-12_164141_b14-7f0.log"), fInfoLevelId=0x0, lpFileInformation=0x22104a0 | out: lpFileInformation=0x22104a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb92ddff, ftCreationTime.dwHighDateTime=0x1d2fad9, ftLastAccessTime.dwLowDateTime=0xeb92ddff, ftLastAccessTime.dwHighDateTime=0x1d2fad9, ftLastWriteTime.dwLowDateTime=0x1f7478a4, ftLastWriteTime.dwHighDateTime=0x1d2fada, nFileSizeHigh=0x0, nFileSizeLow=0x8d2d4)) returned 1 [0130.943] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0130.943] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install-PerUser_2017-07-12_164141_b14-7f0.log", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install-PerUser_2017-07-12_164141_b14-7f0.log", lpFilePart=0x0) returned 0x6f [0130.943] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0130.943] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install-PerUser_2017-07-12_164141_b14-7f0.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\install-peruser_2017-07-12_164141_b14-7f0.log"), fInfoLevelId=0x0, lpFileInformation=0x2210678 | out: lpFileInformation=0x2210678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb92ddff, ftCreationTime.dwHighDateTime=0x1d2fad9, ftLastAccessTime.dwLowDateTime=0xeb92ddff, ftLastAccessTime.dwHighDateTime=0x1d2fad9, ftLastWriteTime.dwLowDateTime=0x1f7478a4, ftLastWriteTime.dwHighDateTime=0x1d2fada, nFileSizeHigh=0x0, nFileSizeLow=0x8d2d4)) returned 1 [0130.944] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0130.944] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install-PerUser_2017-07-12_164141_b14-7f0.log", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install-PerUser_2017-07-12_164141_b14-7f0.log", lpFilePart=0x0) returned 0x6f [0130.944] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0130.944] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install-PerUser_2017-07-12_164141_b14-7f0.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\install-peruser_2017-07-12_164141_b14-7f0.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0130.944] GetFileType (hFile=0x444) returned 0x1 [0130.944] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0130.944] GetFileType (hFile=0x444) returned 0x1 [0130.945] ReadFile (in: hFile=0x444, lpBuffer=0x2212b58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x2212b58*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0130.975] CloseHandle (hObject=0x444) returned 1 [0130.975] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install-PerUser_2017-07-12_164141_b14-7f0.log", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install-PerUser_2017-07-12_164141_b14-7f0.log", lpFilePart=0x0) returned 0x6f [0130.975] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0130.976] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install-PerUser_2017-07-12_164141_b14-7f0.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\install-peruser_2017-07-12_164141_b14-7f0.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0130.977] GetFileType (hFile=0x444) returned 0x1 [0130.977] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0130.977] GetFileType (hFile=0x444) returned 0x1 [0130.977] WriteFile (in: hFile=0x444, lpBuffer=0x2210830*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x2210830*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0130.977] CloseHandle (hObject=0x444) returned 1 [0130.977] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install-PerUser_2017-07-12_164141_b14-7f0.log", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install-PerUser_2017-07-12_164141_b14-7f0.log", lpFilePart=0x0) returned 0x6f [0130.977] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install-PerUser_2017-07-12_164141_b14-7f0.log.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install-PerUser_2017-07-12_164141_b14-7f0.log.xuy", lpFilePart=0x0) returned 0x73 [0130.977] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0130.977] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install-PerUser_2017-07-12_164141_b14-7f0.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\install-peruser_2017-07-12_164141_b14-7f0.log"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb92ddff, ftCreationTime.dwHighDateTime=0x1d2fad9, ftLastAccessTime.dwLowDateTime=0xeb92ddff, ftLastAccessTime.dwHighDateTime=0x1d2fad9, ftLastWriteTime.dwLowDateTime=0x39ea1bac, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x8d2d4)) returned 1 [0130.977] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0130.977] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install-PerUser_2017-07-12_164141_b14-7f0.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\install-peruser_2017-07-12_164141_b14-7f0.log"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install-PerUser_2017-07-12_164141_b14-7f0.log.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\install-peruser_2017-07-12_164141_b14-7f0.log.xuy")) returned 1 [0130.979] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install-PerUser_2017-09-26_160326_bb4-8e8.log", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install-PerUser_2017-09-26_160326_bb4-8e8.log", lpFilePart=0x0) returned 0x6f [0130.979] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0130.979] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install-PerUser_2017-09-26_160326_bb4-8e8.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\install-peruser_2017-09-26_160326_bb4-8e8.log"), fInfoLevelId=0x0, lpFileInformation=0x228f070 | out: lpFileInformation=0x228f070*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b4b6e03, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2b4b6e03, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x6a6d659e, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x938cc)) returned 1 [0130.980] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0130.980] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install-PerUser_2017-09-26_160326_bb4-8e8.log", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install-PerUser_2017-09-26_160326_bb4-8e8.log", lpFilePart=0x0) returned 0x6f [0130.980] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0130.980] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install-PerUser_2017-09-26_160326_bb4-8e8.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\install-peruser_2017-09-26_160326_bb4-8e8.log"), fInfoLevelId=0x0, lpFileInformation=0x228f248 | out: lpFileInformation=0x228f248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b4b6e03, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2b4b6e03, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x6a6d659e, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x938cc)) returned 1 [0130.980] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0130.980] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install-PerUser_2017-09-26_160326_bb4-8e8.log", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install-PerUser_2017-09-26_160326_bb4-8e8.log", lpFilePart=0x0) returned 0x6f [0130.980] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0130.980] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install-PerUser_2017-09-26_160326_bb4-8e8.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\install-peruser_2017-09-26_160326_bb4-8e8.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0130.981] GetFileType (hFile=0x444) returned 0x1 [0130.981] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0130.981] GetFileType (hFile=0x444) returned 0x1 [0130.981] ReadFile (in: hFile=0x444, lpBuffer=0x2291728, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x2291728*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0131.032] CloseHandle (hObject=0x444) returned 1 [0131.032] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install-PerUser_2017-09-26_160326_bb4-8e8.log", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install-PerUser_2017-09-26_160326_bb4-8e8.log", lpFilePart=0x0) returned 0x6f [0131.032] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0131.032] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install-PerUser_2017-09-26_160326_bb4-8e8.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\install-peruser_2017-09-26_160326_bb4-8e8.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0131.032] GetFileType (hFile=0x444) returned 0x1 [0131.032] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0131.032] GetFileType (hFile=0x444) returned 0x1 [0131.032] WriteFile (in: hFile=0x444, lpBuffer=0x228f400*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x228f400*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0131.032] CloseHandle (hObject=0x444) returned 1 [0131.032] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install-PerUser_2017-09-26_160326_bb4-8e8.log", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install-PerUser_2017-09-26_160326_bb4-8e8.log", lpFilePart=0x0) returned 0x6f [0131.033] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install-PerUser_2017-09-26_160326_bb4-8e8.log.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install-PerUser_2017-09-26_160326_bb4-8e8.log.xuy", lpFilePart=0x0) returned 0x73 [0131.033] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0131.033] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install-PerUser_2017-09-26_160326_bb4-8e8.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\install-peruser_2017-09-26_160326_bb4-8e8.log"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b4b6e03, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2b4b6e03, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x39f3a5a6, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x938cc)) returned 1 [0131.033] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0131.033] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install-PerUser_2017-09-26_160326_bb4-8e8.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\install-peruser_2017-09-26_160326_bb4-8e8.log"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install-PerUser_2017-09-26_160326_bb4-8e8.log.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\install-peruser_2017-09-26_160326_bb4-8e8.log.xuy")) returned 1 [0131.034] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install_2017-05-24_104600_528-57c.log", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install_2017-05-24_104600_528-57c.log", lpFilePart=0x0) returned 0x67 [0131.034] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0131.034] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install_2017-05-24_104600_528-57c.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\install_2017-05-24_104600_528-57c.log"), fInfoLevelId=0x0, lpFileInformation=0x230dc40 | out: lpFileInformation=0x230dc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d161897, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x1d161897, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x3db78c09, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x16ee6)) returned 1 [0131.034] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0131.034] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install_2017-05-24_104600_528-57c.log", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install_2017-05-24_104600_528-57c.log", lpFilePart=0x0) returned 0x67 [0131.034] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0131.034] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install_2017-05-24_104600_528-57c.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\install_2017-05-24_104600_528-57c.log"), fInfoLevelId=0x0, lpFileInformation=0x230ddf8 | out: lpFileInformation=0x230ddf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d161897, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x1d161897, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x3db78c09, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x16ee6)) returned 1 [0131.035] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0131.035] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install_2017-05-24_104600_528-57c.log", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install_2017-05-24_104600_528-57c.log", lpFilePart=0x0) returned 0x67 [0131.035] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0131.035] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install_2017-05-24_104600_528-57c.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\install_2017-05-24_104600_528-57c.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0131.036] GetFileType (hFile=0x444) returned 0x1 [0131.036] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0131.036] GetFileType (hFile=0x444) returned 0x1 [0131.036] ReadFile (in: hFile=0x444, lpBuffer=0x2310298, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x2310298*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0131.095] CloseHandle (hObject=0x444) returned 1 [0131.095] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install_2017-05-24_104600_528-57c.log", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install_2017-05-24_104600_528-57c.log", lpFilePart=0x0) returned 0x67 [0131.095] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0131.095] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install_2017-05-24_104600_528-57c.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\install_2017-05-24_104600_528-57c.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0131.096] GetFileType (hFile=0x444) returned 0x1 [0131.096] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0131.096] GetFileType (hFile=0x444) returned 0x1 [0131.096] WriteFile (in: hFile=0x444, lpBuffer=0x2160028*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x2160028*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0131.096] CloseHandle (hObject=0x444) returned 1 [0131.096] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install_2017-05-24_104600_528-57c.log", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install_2017-05-24_104600_528-57c.log", lpFilePart=0x0) returned 0x67 [0131.096] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install_2017-05-24_104600_528-57c.log.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install_2017-05-24_104600_528-57c.log.xuy", lpFilePart=0x0) returned 0x6b [0131.096] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0131.096] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install_2017-05-24_104600_528-57c.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\install_2017-05-24_104600_528-57c.log"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d161897, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x1d161897, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x39fd2fa4, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x16ee6)) returned 1 [0131.096] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0131.096] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install_2017-05-24_104600_528-57c.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\install_2017-05-24_104600_528-57c.log"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install_2017-05-24_104600_528-57c.log.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\install_2017-05-24_104600_528-57c.log.xuy")) returned 1 [0131.097] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install_2017-07-12_164138_904-4d0.log", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install_2017-07-12_164138_904-4d0.log", lpFilePart=0x0) returned 0x67 [0131.097] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0131.098] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install_2017-07-12_164138_904-4d0.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\install_2017-07-12_164138_904-4d0.log"), fInfoLevelId=0x0, lpFileInformation=0x218c768 | out: lpFileInformation=0x218c768*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe9c1f2ea, ftCreationTime.dwHighDateTime=0x1d2fad9, ftLastAccessTime.dwLowDateTime=0xe9c1f2ea, ftLastAccessTime.dwHighDateTime=0x1d2fad9, ftLastWriteTime.dwLowDateTime=0x21266ec8, ftLastWriteTime.dwHighDateTime=0x1d2fada, nFileSizeHigh=0x0, nFileSizeLow=0x1b89a)) returned 1 [0131.098] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0131.098] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install_2017-07-12_164138_904-4d0.log", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install_2017-07-12_164138_904-4d0.log", lpFilePart=0x0) returned 0x67 [0131.098] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0131.098] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install_2017-07-12_164138_904-4d0.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\install_2017-07-12_164138_904-4d0.log"), fInfoLevelId=0x0, lpFileInformation=0x218c920 | out: lpFileInformation=0x218c920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe9c1f2ea, ftCreationTime.dwHighDateTime=0x1d2fad9, ftLastAccessTime.dwLowDateTime=0xe9c1f2ea, ftLastAccessTime.dwHighDateTime=0x1d2fad9, ftLastWriteTime.dwLowDateTime=0x21266ec8, ftLastWriteTime.dwHighDateTime=0x1d2fada, nFileSizeHigh=0x0, nFileSizeLow=0x1b89a)) returned 1 [0131.098] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0131.098] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install_2017-07-12_164138_904-4d0.log", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install_2017-07-12_164138_904-4d0.log", lpFilePart=0x0) returned 0x67 [0131.098] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0131.098] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install_2017-07-12_164138_904-4d0.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\install_2017-07-12_164138_904-4d0.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0131.099] GetFileType (hFile=0x444) returned 0x1 [0131.099] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0131.099] GetFileType (hFile=0x444) returned 0x1 [0131.099] ReadFile (in: hFile=0x444, lpBuffer=0x218edc0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x218edc0*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0131.126] CloseHandle (hObject=0x444) returned 1 [0131.126] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install_2017-07-12_164138_904-4d0.log", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install_2017-07-12_164138_904-4d0.log", lpFilePart=0x0) returned 0x67 [0131.126] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0131.126] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install_2017-07-12_164138_904-4d0.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\install_2017-07-12_164138_904-4d0.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0131.127] GetFileType (hFile=0x444) returned 0x1 [0131.127] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0131.127] GetFileType (hFile=0x444) returned 0x1 [0131.127] WriteFile (in: hFile=0x444, lpBuffer=0x218cab8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x218cab8*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0131.127] CloseHandle (hObject=0x444) returned 1 [0131.127] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install_2017-07-12_164138_904-4d0.log", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install_2017-07-12_164138_904-4d0.log", lpFilePart=0x0) returned 0x67 [0131.127] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install_2017-07-12_164138_904-4d0.log.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install_2017-07-12_164138_904-4d0.log.xuy", lpFilePart=0x0) returned 0x6b [0131.127] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0131.127] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install_2017-07-12_164138_904-4d0.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\install_2017-07-12_164138_904-4d0.log"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe9c1f2ea, ftCreationTime.dwHighDateTime=0x1d2fad9, ftLastAccessTime.dwLowDateTime=0xe9c1f2ea, ftLastAccessTime.dwHighDateTime=0x1d2fad9, ftLastWriteTime.dwLowDateTime=0x3a01f557, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x1b89a)) returned 1 [0131.127] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0131.127] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install_2017-07-12_164138_904-4d0.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\install_2017-07-12_164138_904-4d0.log"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install_2017-07-12_164138_904-4d0.log.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\install_2017-07-12_164138_904-4d0.log.xuy")) returned 1 [0131.129] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install_2017-09-26_160323_3a0-354.log", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install_2017-09-26_160323_3a0-354.log", lpFilePart=0x0) returned 0x67 [0131.129] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0131.129] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install_2017-09-26_160323_3a0-354.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\install_2017-09-26_160323_3a0-354.log"), fInfoLevelId=0x0, lpFileInformation=0x220b288 | out: lpFileInformation=0x220b288*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2950a8b0, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2950a8b0, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x6bdc9176, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x1d2e0)) returned 1 [0131.129] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0131.130] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install_2017-09-26_160323_3a0-354.log", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install_2017-09-26_160323_3a0-354.log", lpFilePart=0x0) returned 0x67 [0131.130] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0131.130] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install_2017-09-26_160323_3a0-354.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\install_2017-09-26_160323_3a0-354.log"), fInfoLevelId=0x0, lpFileInformation=0x220b440 | out: lpFileInformation=0x220b440*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2950a8b0, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2950a8b0, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x6bdc9176, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x1d2e0)) returned 1 [0131.130] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0131.130] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install_2017-09-26_160323_3a0-354.log", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install_2017-09-26_160323_3a0-354.log", lpFilePart=0x0) returned 0x67 [0131.130] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0131.130] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install_2017-09-26_160323_3a0-354.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\install_2017-09-26_160323_3a0-354.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0131.131] GetFileType (hFile=0x444) returned 0x1 [0131.131] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0131.131] GetFileType (hFile=0x444) returned 0x1 [0131.131] ReadFile (in: hFile=0x444, lpBuffer=0x220d8e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x220d8e0*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0131.160] CloseHandle (hObject=0x444) returned 1 [0131.160] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install_2017-09-26_160323_3a0-354.log", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install_2017-09-26_160323_3a0-354.log", lpFilePart=0x0) returned 0x67 [0131.160] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0131.160] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install_2017-09-26_160323_3a0-354.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\install_2017-09-26_160323_3a0-354.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0131.161] GetFileType (hFile=0x444) returned 0x1 [0131.161] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0131.161] GetFileType (hFile=0x444) returned 0x1 [0131.161] WriteFile (in: hFile=0x444, lpBuffer=0x220b5d8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x220b5d8*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0131.161] CloseHandle (hObject=0x444) returned 1 [0131.161] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install_2017-09-26_160323_3a0-354.log", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install_2017-09-26_160323_3a0-354.log", lpFilePart=0x0) returned 0x67 [0131.161] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install_2017-09-26_160323_3a0-354.log.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install_2017-09-26_160323_3a0-354.log.xuy", lpFilePart=0x0) returned 0x6b [0131.161] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0131.161] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install_2017-09-26_160323_3a0-354.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\install_2017-09-26_160323_3a0-354.log"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2950a8b0, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2950a8b0, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3a06b7cf, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x1d2e0)) returned 1 [0131.161] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0131.161] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install_2017-09-26_160323_3a0-354.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\install_2017-09-26_160323_3a0-354.log"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install_2017-09-26_160323_3a0-354.log.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\install_2017-09-26_160323_3a0-354.log.xuy")) returned 1 [0131.162] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\parentTelemetryCache.otc", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\parentTelemetryCache.otc", lpFilePart=0x0) returned 0x5a [0131.162] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0131.162] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\parentTelemetryCache.otc" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\parenttelemetrycache.otc"), fInfoLevelId=0x0, lpFileInformation=0x2289da8 | out: lpFileInformation=0x2289da8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb116c64, ftCreationTime.dwHighDateTime=0x1d2fad9, ftLastAccessTime.dwLowDateTime=0xeb116c64, ftLastAccessTime.dwHighDateTime=0x1d2fad9, ftLastWriteTime.dwLowDateTime=0x6bb1a723, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x5000)) returned 1 [0131.163] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0131.163] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\parentTelemetryCache.otc", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\parentTelemetryCache.otc", lpFilePart=0x0) returned 0x5a [0131.163] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0131.163] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\parentTelemetryCache.otc" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\parenttelemetrycache.otc"), fInfoLevelId=0x0, lpFileInformation=0x2289f30 | out: lpFileInformation=0x2289f30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb116c64, ftCreationTime.dwHighDateTime=0x1d2fad9, ftLastAccessTime.dwLowDateTime=0xeb116c64, ftLastAccessTime.dwHighDateTime=0x1d2fad9, ftLastWriteTime.dwLowDateTime=0x6bb1a723, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x5000)) returned 1 [0131.163] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0131.163] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\parentTelemetryCache.otc", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\parentTelemetryCache.otc", lpFilePart=0x0) returned 0x5a [0131.163] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0131.163] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\parentTelemetryCache.otc" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\parenttelemetrycache.otc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0131.164] GetFileType (hFile=0x444) returned 0x1 [0131.164] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0131.164] GetFileType (hFile=0x444) returned 0x1 [0131.164] ReadFile (in: hFile=0x444, lpBuffer=0x228c370, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x228c370*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0131.182] CloseHandle (hObject=0x444) returned 1 [0131.182] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\parentTelemetryCache.otc", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\parentTelemetryCache.otc", lpFilePart=0x0) returned 0x5a [0131.182] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0131.182] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\parentTelemetryCache.otc" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\parenttelemetrycache.otc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0131.183] GetFileType (hFile=0x444) returned 0x1 [0131.183] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0131.183] GetFileType (hFile=0x444) returned 0x1 [0131.183] WriteFile (in: hFile=0x444, lpBuffer=0x228a098*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x228a098*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0131.183] CloseHandle (hObject=0x444) returned 1 [0131.183] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\parentTelemetryCache.otc", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\parentTelemetryCache.otc", lpFilePart=0x0) returned 0x5a [0131.183] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\parentTelemetryCache.otc.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\parentTelemetryCache.otc.xuy", lpFilePart=0x0) returned 0x5e [0131.183] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0131.183] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\parentTelemetryCache.otc" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\parenttelemetrycache.otc"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb116c64, ftCreationTime.dwHighDateTime=0x1d2fad9, ftLastAccessTime.dwLowDateTime=0xeb116c64, ftLastAccessTime.dwHighDateTime=0x1d2fad9, ftLastWriteTime.dwLowDateTime=0x3a091abe, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x5000)) returned 1 [0131.183] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0131.183] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\parentTelemetryCache.otc" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\parenttelemetrycache.otc"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\parentTelemetryCache.otc.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\parenttelemetrycache.otc.xuy")) returned 1 [0131.185] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\parentTelemetryCache.otc.session", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\parentTelemetryCache.otc.session", lpFilePart=0x0) returned 0x62 [0131.185] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0131.185] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\parentTelemetryCache.otc.session" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\parenttelemetrycache.otc.session"), fInfoLevelId=0x0, lpFileInformation=0x23087c8 | out: lpFileInformation=0x23087c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe9ead03c, ftCreationTime.dwHighDateTime=0x1d2fad9, ftLastAccessTime.dwLowDateTime=0xe9ead03c, ftLastAccessTime.dwHighDateTime=0x1d2fad9, ftLastWriteTime.dwLowDateTime=0x2a2afdb5, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x5000)) returned 1 [0131.185] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0131.185] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\parentTelemetryCache.otc.session", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\parentTelemetryCache.otc.session", lpFilePart=0x0) returned 0x62 [0131.185] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0131.185] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\parentTelemetryCache.otc.session" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\parenttelemetrycache.otc.session"), fInfoLevelId=0x0, lpFileInformation=0x2308970 | out: lpFileInformation=0x2308970*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe9ead03c, ftCreationTime.dwHighDateTime=0x1d2fad9, ftLastAccessTime.dwLowDateTime=0xe9ead03c, ftLastAccessTime.dwHighDateTime=0x1d2fad9, ftLastWriteTime.dwLowDateTime=0x2a2afdb5, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x5000)) returned 1 [0131.185] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0131.185] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\parentTelemetryCache.otc.session", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\parentTelemetryCache.otc.session", lpFilePart=0x0) returned 0x62 [0131.185] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0131.185] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\parentTelemetryCache.otc.session" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\parenttelemetrycache.otc.session"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0131.186] GetFileType (hFile=0x444) returned 0x1 [0131.186] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0131.186] GetFileType (hFile=0x444) returned 0x1 [0131.186] ReadFile (in: hFile=0x444, lpBuffer=0x230adf0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x230adf0*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0131.244] CloseHandle (hObject=0x444) returned 1 [0131.244] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\parentTelemetryCache.otc.session", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\parentTelemetryCache.otc.session", lpFilePart=0x0) returned 0x62 [0131.244] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0131.244] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\parentTelemetryCache.otc.session" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\parenttelemetrycache.otc.session"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0131.244] GetFileType (hFile=0x444) returned 0x1 [0131.245] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0131.245] GetFileType (hFile=0x444) returned 0x1 [0131.245] WriteFile (in: hFile=0x444, lpBuffer=0x2160028*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x2160028*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0131.245] CloseHandle (hObject=0x444) returned 1 [0131.245] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\parentTelemetryCache.otc.session", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\parentTelemetryCache.otc.session", lpFilePart=0x0) returned 0x62 [0131.245] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\parentTelemetryCache.otc.session.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\parentTelemetryCache.otc.session.xuy", lpFilePart=0x0) returned 0x66 [0131.245] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0131.245] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\parentTelemetryCache.otc.session" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\parenttelemetrycache.otc.session"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe9ead03c, ftCreationTime.dwHighDateTime=0x1d2fad9, ftLastAccessTime.dwLowDateTime=0xe9ead03c, ftLastAccessTime.dwHighDateTime=0x1d2fad9, ftLastWriteTime.dwLowDateTime=0x3a12a4ce, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x5000)) returned 1 [0131.245] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0131.245] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\parentTelemetryCache.otc.session" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\parenttelemetrycache.otc.session"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\parentTelemetryCache.otc.session.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\parenttelemetrycache.otc.session.xuy")) returned 1 [0131.247] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-12_164130_2e0-2c8.log", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-12_164130_2e0-2c8.log", lpFilePart=0x0) returned 0x70 [0131.247] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0131.247] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-12_164130_2e0-2c8.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\standaloneupdate_2017-07-12_164130_2e0-2c8.log"), fInfoLevelId=0x0, lpFileInformation=0x2187260 | out: lpFileInformation=0x2187260*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe538b27e, ftCreationTime.dwHighDateTime=0x1d2fad9, ftLastAccessTime.dwLowDateTime=0xe538b27e, ftLastAccessTime.dwHighDateTime=0x1d2fad9, ftLastWriteTime.dwLowDateTime=0xe9e35692, ftLastWriteTime.dwHighDateTime=0x1d2fad9, nFileSizeHigh=0x0, nFileSizeLow=0x10de)) returned 1 [0131.247] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0131.247] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-12_164130_2e0-2c8.log", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-12_164130_2e0-2c8.log", lpFilePart=0x0) returned 0x70 [0131.247] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0131.247] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-12_164130_2e0-2c8.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\standaloneupdate_2017-07-12_164130_2e0-2c8.log"), fInfoLevelId=0x0, lpFileInformation=0x2187440 | out: lpFileInformation=0x2187440*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe538b27e, ftCreationTime.dwHighDateTime=0x1d2fad9, ftLastAccessTime.dwLowDateTime=0xe538b27e, ftLastAccessTime.dwHighDateTime=0x1d2fad9, ftLastWriteTime.dwLowDateTime=0xe9e35692, ftLastWriteTime.dwHighDateTime=0x1d2fad9, nFileSizeHigh=0x0, nFileSizeLow=0x10de)) returned 1 [0131.247] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0131.248] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-12_164130_2e0-2c8.log", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-12_164130_2e0-2c8.log", lpFilePart=0x0) returned 0x70 [0131.249] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0131.249] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-12_164130_2e0-2c8.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\standaloneupdate_2017-07-12_164130_2e0-2c8.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0131.250] GetFileType (hFile=0x444) returned 0x1 [0131.250] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0131.250] GetFileType (hFile=0x444) returned 0x1 [0131.250] ReadFile (in: hFile=0x444, lpBuffer=0x2189930, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x2189930*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0131.279] CloseHandle (hObject=0x444) returned 1 [0131.279] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-12_164130_2e0-2c8.log", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-12_164130_2e0-2c8.log", lpFilePart=0x0) returned 0x70 [0131.279] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0131.280] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-12_164130_2e0-2c8.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\standaloneupdate_2017-07-12_164130_2e0-2c8.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0131.280] GetFileType (hFile=0x444) returned 0x1 [0131.280] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0131.280] GetFileType (hFile=0x444) returned 0x1 [0131.280] WriteFile (in: hFile=0x444, lpBuffer=0x2187600*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x2187600*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0131.280] CloseHandle (hObject=0x444) returned 1 [0131.281] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-12_164130_2e0-2c8.log", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-12_164130_2e0-2c8.log", lpFilePart=0x0) returned 0x70 [0131.281] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-12_164130_2e0-2c8.log.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-12_164130_2e0-2c8.log.xuy", lpFilePart=0x0) returned 0x74 [0131.281] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0131.281] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-12_164130_2e0-2c8.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\standaloneupdate_2017-07-12_164130_2e0-2c8.log"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe538b27e, ftCreationTime.dwHighDateTime=0x1d2fad9, ftLastAccessTime.dwLowDateTime=0xe538b27e, ftLastAccessTime.dwHighDateTime=0x1d2fad9, ftLastWriteTime.dwLowDateTime=0x3a19cd83, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0131.281] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0131.281] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-12_164130_2e0-2c8.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\standaloneupdate_2017-07-12_164130_2e0-2c8.log"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-12_164130_2e0-2c8.log.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\standaloneupdate_2017-07-12_164130_2e0-2c8.log.xuy")) returned 1 [0131.283] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-13_111425_fe4-f74.log", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-13_111425_fe4-f74.log", lpFilePart=0x0) returned 0x70 [0131.283] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0131.283] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-13_111425_fe4-f74.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\standaloneupdate_2017-07-13_111425_fe4-f74.log"), fInfoLevelId=0x0, lpFileInformation=0x2205e68 | out: lpFileInformation=0x2205e68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5e53ca2b, ftCreationTime.dwHighDateTime=0x1d2fb75, ftLastAccessTime.dwLowDateTime=0x5e53ca2b, ftLastAccessTime.dwHighDateTime=0x1d2fb75, ftLastWriteTime.dwLowDateTime=0x5f19b1ca, ftLastWriteTime.dwHighDateTime=0x1d2fb75, nFileSizeHigh=0x0, nFileSizeLow=0x7d4)) returned 1 [0131.283] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0131.283] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-13_111425_fe4-f74.log", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-13_111425_fe4-f74.log", lpFilePart=0x0) returned 0x70 [0131.283] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0131.283] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-13_111425_fe4-f74.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\standaloneupdate_2017-07-13_111425_fe4-f74.log"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0131.283] GetFileType (hFile=0x444) returned 0x1 [0131.283] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0131.283] GetFileType (hFile=0x444) returned 0x1 [0131.283] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x7d4 [0131.284] ReadFile (in: hFile=0x444, lpBuffer=0x2206a18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x2206a18*, lpNumberOfBytesRead=0x3be6a8*=0x7d4, lpOverlapped=0x0) returned 1 [0131.300] CloseHandle (hObject=0x444) returned 1 [0131.313] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-13_111425_fe4-f74.log", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-13_111425_fe4-f74.log", lpFilePart=0x0) returned 0x70 [0131.313] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0131.313] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-13_111425_fe4-f74.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\standaloneupdate_2017-07-13_111425_fe4-f74.log"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0131.315] GetFileType (hFile=0x444) returned 0x1 [0131.315] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0131.315] GetFileType (hFile=0x444) returned 0x1 [0131.315] WriteFile (in: hFile=0x444, lpBuffer=0x22801f0*, nNumberOfBytesToWrite=0x7e0, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x22801f0*, lpNumberOfBytesWritten=0x3be5b8*=0x7e0, lpOverlapped=0x0) returned 1 [0131.316] CloseHandle (hObject=0x444) returned 1 [0131.316] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-13_111425_fe4-f74.log", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-13_111425_fe4-f74.log", lpFilePart=0x0) returned 0x70 [0131.316] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-13_111425_fe4-f74.log.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-13_111425_fe4-f74.log.xuy", lpFilePart=0x0) returned 0x74 [0131.316] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0131.316] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-13_111425_fe4-f74.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\standaloneupdate_2017-07-13_111425_fe4-f74.log"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5e53ca2b, ftCreationTime.dwHighDateTime=0x1d2fb75, ftLastAccessTime.dwLowDateTime=0x5e53ca2b, ftLastAccessTime.dwHighDateTime=0x1d2fb75, ftLastWriteTime.dwLowDateTime=0x3a1e940b, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x7e0)) returned 1 [0131.316] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0131.316] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-13_111425_fe4-f74.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\standaloneupdate_2017-07-13_111425_fe4-f74.log"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-13_111425_fe4-f74.log.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\standaloneupdate_2017-07-13_111425_fe4-f74.log.xuy")) returned 1 [0131.317] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-14_075507_d98-d94.log", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-14_075507_d98-d94.log", lpFilePart=0x0) returned 0x70 [0131.317] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0131.317] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-14_075507_d98-d94.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\standaloneupdate_2017-07-14_075507_d98-d94.log"), fInfoLevelId=0x0, lpFileInformation=0x2281560 | out: lpFileInformation=0x2281560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0ee0c79, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0xb0ee0c79, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0xc2672a94, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0x7d6)) returned 1 [0131.318] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0131.318] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-14_075507_d98-d94.log", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-14_075507_d98-d94.log", lpFilePart=0x0) returned 0x70 [0131.318] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0131.318] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-14_075507_d98-d94.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\standaloneupdate_2017-07-14_075507_d98-d94.log"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0131.318] GetFileType (hFile=0x444) returned 0x1 [0131.318] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0131.318] GetFileType (hFile=0x444) returned 0x1 [0131.318] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x7d6 [0131.318] ReadFile (in: hFile=0x444, lpBuffer=0x2282110, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x2282110*, lpNumberOfBytesRead=0x3be6a8*=0x7d6, lpOverlapped=0x0) returned 1 [0131.340] CloseHandle (hObject=0x444) returned 1 [0131.355] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-14_075507_d98-d94.log", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-14_075507_d98-d94.log", lpFilePart=0x0) returned 0x70 [0131.355] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0131.355] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-14_075507_d98-d94.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\standaloneupdate_2017-07-14_075507_d98-d94.log"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0131.357] GetFileType (hFile=0x444) returned 0x1 [0131.357] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0131.357] GetFileType (hFile=0x444) returned 0x1 [0131.357] WriteFile (in: hFile=0x444, lpBuffer=0x22fb8e8*, nNumberOfBytesToWrite=0x7e0, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x22fb8e8*, lpNumberOfBytesWritten=0x3be5b8*=0x7e0, lpOverlapped=0x0) returned 1 [0131.358] CloseHandle (hObject=0x444) returned 1 [0131.358] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-14_075507_d98-d94.log", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-14_075507_d98-d94.log", lpFilePart=0x0) returned 0x70 [0131.358] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-14_075507_d98-d94.log.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-14_075507_d98-d94.log.xuy", lpFilePart=0x0) returned 0x74 [0131.358] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0131.358] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-14_075507_d98-d94.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\standaloneupdate_2017-07-14_075507_d98-d94.log"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0ee0c79, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0xb0ee0c79, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x3a25b752, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x7e0)) returned 1 [0131.359] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0131.359] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-14_075507_d98-d94.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\standaloneupdate_2017-07-14_075507_d98-d94.log"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-14_075507_d98-d94.log.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\standaloneupdate_2017-07-14_075507_d98-d94.log.xuy")) returned 1 [0131.360] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-19_092447_b70-3a8.log", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-19_092447_b70-3a8.log", lpFilePart=0x0) returned 0x70 [0131.360] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0131.360] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-19_092447_b70-3a8.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\standaloneupdate_2017-07-19_092447_b70-3a8.log"), fInfoLevelId=0x0, lpFileInformation=0x22fcc58 | out: lpFileInformation=0x22fcc58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7818d8, ftCreationTime.dwHighDateTime=0x1d3001d, ftLastAccessTime.dwLowDateTime=0xb7818d8, ftLastAccessTime.dwHighDateTime=0x1d3001d, ftLastWriteTime.dwLowDateTime=0xc8a44c7, ftLastWriteTime.dwHighDateTime=0x1d3001d, nFileSizeHigh=0x0, nFileSizeLow=0x7d6)) returned 1 [0131.360] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0131.360] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-19_092447_b70-3a8.log", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-19_092447_b70-3a8.log", lpFilePart=0x0) returned 0x70 [0131.360] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0131.360] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-19_092447_b70-3a8.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\standaloneupdate_2017-07-19_092447_b70-3a8.log"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0131.360] GetFileType (hFile=0x444) returned 0x1 [0131.360] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0131.361] GetFileType (hFile=0x444) returned 0x1 [0131.361] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x7d6 [0131.361] ReadFile (in: hFile=0x444, lpBuffer=0x22fd808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x22fd808*, lpNumberOfBytesRead=0x3be6a8*=0x7d6, lpOverlapped=0x0) returned 1 [0131.369] CloseHandle (hObject=0x444) returned 1 [0131.412] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-19_092447_b70-3a8.log", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-19_092447_b70-3a8.log", lpFilePart=0x0) returned 0x70 [0131.413] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0131.413] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-19_092447_b70-3a8.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\standaloneupdate_2017-07-19_092447_b70-3a8.log"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0131.414] GetFileType (hFile=0x444) returned 0x1 [0131.414] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0131.414] GetFileType (hFile=0x444) returned 0x1 [0131.414] WriteFile (in: hFile=0x444, lpBuffer=0x21745f8*, nNumberOfBytesToWrite=0x7e0, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x21745f8*, lpNumberOfBytesWritten=0x3be5b8*=0x7e0, lpOverlapped=0x0) returned 1 [0131.415] CloseHandle (hObject=0x444) returned 1 [0131.415] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-19_092447_b70-3a8.log", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-19_092447_b70-3a8.log", lpFilePart=0x0) returned 0x70 [0131.415] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-19_092447_b70-3a8.log.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-19_092447_b70-3a8.log.xuy", lpFilePart=0x0) returned 0x74 [0131.415] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0131.415] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-19_092447_b70-3a8.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\standaloneupdate_2017-07-19_092447_b70-3a8.log"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7818d8, ftCreationTime.dwHighDateTime=0x1d3001d, ftLastAccessTime.dwLowDateTime=0xb7818d8, ftLastAccessTime.dwHighDateTime=0x1d3001d, ftLastWriteTime.dwLowDateTime=0x3a2cde7e, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x7e0)) returned 1 [0131.415] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0131.415] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-19_092447_b70-3a8.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\standaloneupdate_2017-07-19_092447_b70-3a8.log"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-19_092447_b70-3a8.log.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\standaloneupdate_2017-07-19_092447_b70-3a8.log.xuy")) returned 1 [0131.416] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-21_115555_e74-e78.log", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-21_115555_e74-e78.log", lpFilePart=0x0) returned 0x70 [0131.416] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0131.417] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-21_115555_e74-e78.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\standaloneupdate_2017-07-21_115555_e74-e78.log"), fInfoLevelId=0x0, lpFileInformation=0x2175968 | out: lpFileInformation=0x2175968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d894ca0, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x7d894ca0, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x85f13302, ftLastWriteTime.dwHighDateTime=0x1d301c4, nFileSizeHigh=0x0, nFileSizeLow=0x7d6)) returned 1 [0131.417] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0131.417] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-21_115555_e74-e78.log", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-21_115555_e74-e78.log", lpFilePart=0x0) returned 0x70 [0131.417] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0131.417] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-21_115555_e74-e78.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\standaloneupdate_2017-07-21_115555_e74-e78.log"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0131.417] GetFileType (hFile=0x444) returned 0x1 [0131.417] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0131.417] GetFileType (hFile=0x444) returned 0x1 [0131.417] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x7d6 [0131.417] ReadFile (in: hFile=0x444, lpBuffer=0x2176518, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x2176518*, lpNumberOfBytesRead=0x3be6a8*=0x7d6, lpOverlapped=0x0) returned 1 [0131.437] CloseHandle (hObject=0x444) returned 1 [0131.449] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-21_115555_e74-e78.log", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-21_115555_e74-e78.log", lpFilePart=0x0) returned 0x70 [0131.449] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0131.449] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-21_115555_e74-e78.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\standaloneupdate_2017-07-21_115555_e74-e78.log"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0131.450] GetFileType (hFile=0x444) returned 0x1 [0131.450] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0131.450] GetFileType (hFile=0x444) returned 0x1 [0131.450] WriteFile (in: hFile=0x444, lpBuffer=0x21efcf0*, nNumberOfBytesToWrite=0x7e0, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x21efcf0*, lpNumberOfBytesWritten=0x3be5b8*=0x7e0, lpOverlapped=0x0) returned 1 [0131.451] CloseHandle (hObject=0x444) returned 1 [0131.452] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-21_115555_e74-e78.log", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-21_115555_e74-e78.log", lpFilePart=0x0) returned 0x70 [0131.452] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-21_115555_e74-e78.log.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-21_115555_e74-e78.log.xuy", lpFilePart=0x0) returned 0x74 [0131.452] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0131.452] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-21_115555_e74-e78.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\standaloneupdate_2017-07-21_115555_e74-e78.log"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d894ca0, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x7d894ca0, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x3a3404d8, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x7e0)) returned 1 [0131.452] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0131.452] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-21_115555_e74-e78.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\standaloneupdate_2017-07-21_115555_e74-e78.log"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-21_115555_e74-e78.log.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\standaloneupdate_2017-07-21_115555_e74-e78.log.xuy")) returned 1 [0131.453] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-09-26_160311_e54-e58.log", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-09-26_160311_e54-e58.log", lpFilePart=0x0) returned 0x70 [0131.453] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0131.453] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-09-26_160311_e54-e58.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\standaloneupdate_2017-09-26_160311_e54-e58.log"), fInfoLevelId=0x0, lpFileInformation=0x21f1060 | out: lpFileInformation=0x21f1060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21f213a3, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x21f213a3, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x304b92f1, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x10ce)) returned 1 [0131.453] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0131.453] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-09-26_160311_e54-e58.log", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-09-26_160311_e54-e58.log", lpFilePart=0x0) returned 0x70 [0131.454] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0131.454] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-09-26_160311_e54-e58.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\standaloneupdate_2017-09-26_160311_e54-e58.log"), fInfoLevelId=0x0, lpFileInformation=0x21f1240 | out: lpFileInformation=0x21f1240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21f213a3, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x21f213a3, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x304b92f1, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x10ce)) returned 1 [0131.454] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0131.454] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-09-26_160311_e54-e58.log", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-09-26_160311_e54-e58.log", lpFilePart=0x0) returned 0x70 [0131.454] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0131.454] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-09-26_160311_e54-e58.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\standaloneupdate_2017-09-26_160311_e54-e58.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0131.455] GetFileType (hFile=0x444) returned 0x1 [0131.455] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0131.455] GetFileType (hFile=0x444) returned 0x1 [0131.455] ReadFile (in: hFile=0x444, lpBuffer=0x21f3730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x21f3730*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0131.473] CloseHandle (hObject=0x444) returned 1 [0131.473] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-09-26_160311_e54-e58.log", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-09-26_160311_e54-e58.log", lpFilePart=0x0) returned 0x70 [0131.473] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0131.473] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-09-26_160311_e54-e58.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\standaloneupdate_2017-09-26_160311_e54-e58.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0131.474] GetFileType (hFile=0x444) returned 0x1 [0131.474] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0131.474] GetFileType (hFile=0x444) returned 0x1 [0131.474] WriteFile (in: hFile=0x444, lpBuffer=0x21f1400*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x21f1400*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0131.474] CloseHandle (hObject=0x444) returned 1 [0131.474] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-09-26_160311_e54-e58.log", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-09-26_160311_e54-e58.log", lpFilePart=0x0) returned 0x70 [0131.474] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-09-26_160311_e54-e58.log.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-09-26_160311_e54-e58.log.xuy", lpFilePart=0x0) returned 0x74 [0131.474] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0131.474] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-09-26_160311_e54-e58.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\standaloneupdate_2017-09-26_160311_e54-e58.log"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21f213a3, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x21f213a3, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3a366c5b, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0131.474] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0131.474] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-09-26_160311_e54-e58.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\standaloneupdate_2017-09-26_160311_e54-e58.log"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-09-26_160311_e54-e58.log.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\standaloneupdate_2017-09-26_160311_e54-e58.log.xuy")) returned 1 [0131.476] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-09-27_084159_4e4-594.log", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-09-27_084159_4e4-594.log", lpFilePart=0x0) returned 0x70 [0131.476] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0131.476] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-09-27_084159_4e4-594.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\standaloneupdate_2017-09-27_084159_4e4-594.log"), fInfoLevelId=0x0, lpFileInformation=0x226fc68 | out: lpFileInformation=0x226fc68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9d18820, ftCreationTime.dwHighDateTime=0x1d33718, ftLastAccessTime.dwLowDateTime=0xa9d18820, ftLastAccessTime.dwHighDateTime=0x1d33718, ftLastWriteTime.dwLowDateTime=0xab9daeac, ftLastWriteTime.dwHighDateTime=0x1d33718, nFileSizeHigh=0x0, nFileSizeLow=0x7d8)) returned 1 [0131.476] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0131.476] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-09-27_084159_4e4-594.log", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-09-27_084159_4e4-594.log", lpFilePart=0x0) returned 0x70 [0131.476] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0131.476] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-09-27_084159_4e4-594.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\standaloneupdate_2017-09-27_084159_4e4-594.log"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0131.476] GetFileType (hFile=0x444) returned 0x1 [0131.476] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0131.476] GetFileType (hFile=0x444) returned 0x1 [0131.476] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x7d8 [0131.477] ReadFile (in: hFile=0x444, lpBuffer=0x2270818, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x2270818*, lpNumberOfBytesRead=0x3be6a8*=0x7d8, lpOverlapped=0x0) returned 1 [0131.497] CloseHandle (hObject=0x444) returned 1 [0131.513] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-09-27_084159_4e4-594.log", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-09-27_084159_4e4-594.log", lpFilePart=0x0) returned 0x70 [0131.513] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0131.513] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-09-27_084159_4e4-594.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\standaloneupdate_2017-09-27_084159_4e4-594.log"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0131.516] GetFileType (hFile=0x444) returned 0x1 [0131.516] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0131.516] GetFileType (hFile=0x444) returned 0x1 [0131.516] WriteFile (in: hFile=0x444, lpBuffer=0x22e9fe8*, nNumberOfBytesToWrite=0x7e0, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x22e9fe8*, lpNumberOfBytesWritten=0x3be5b8*=0x7e0, lpOverlapped=0x0) returned 1 [0131.517] CloseHandle (hObject=0x444) returned 1 [0131.517] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-09-27_084159_4e4-594.log", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-09-27_084159_4e4-594.log", lpFilePart=0x0) returned 0x70 [0131.517] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-09-27_084159_4e4-594.log.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-09-27_084159_4e4-594.log.xuy", lpFilePart=0x0) returned 0x74 [0131.517] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0131.517] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-09-27_084159_4e4-594.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\standaloneupdate_2017-09-27_084159_4e4-594.log"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9d18820, ftCreationTime.dwHighDateTime=0x1d33718, ftLastAccessTime.dwLowDateTime=0xa9d18820, ftLastAccessTime.dwHighDateTime=0x1d33718, ftLastWriteTime.dwLowDateTime=0x3a3d8ee1, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x7e0)) returned 1 [0131.517] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0131.517] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-09-27_084159_4e4-594.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\standaloneupdate_2017-09-27_084159_4e4-594.log"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-09-27_084159_4e4-594.log.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\standaloneupdate_2017-09-27_084159_4e4-594.log.xuy")) returned 1 [0131.518] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\userTelemetryCache.otc", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\userTelemetryCache.otc", lpFilePart=0x0) returned 0x58 [0131.519] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0131.519] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\userTelemetryCache.otc" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\usertelemetrycache.otc"), fInfoLevelId=0x0, lpFileInformation=0x22eb358 | out: lpFileInformation=0x22eb358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c301fff, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x15f5ac9d, ftLastAccessTime.dwHighDateTime=0x1d2fada, ftLastWriteTime.dwLowDateTime=0x69e0bd6f, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x5000)) returned 1 [0131.519] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0131.519] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\userTelemetryCache.otc", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\userTelemetryCache.otc", lpFilePart=0x0) returned 0x58 [0131.519] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0131.519] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\userTelemetryCache.otc" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\usertelemetrycache.otc"), fInfoLevelId=0x0, lpFileInformation=0x22eb4d8 | out: lpFileInformation=0x22eb4d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c301fff, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x15f5ac9d, ftLastAccessTime.dwHighDateTime=0x1d2fada, ftLastWriteTime.dwLowDateTime=0x69e0bd6f, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x5000)) returned 1 [0131.519] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0131.519] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\userTelemetryCache.otc", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\userTelemetryCache.otc", lpFilePart=0x0) returned 0x58 [0131.519] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0131.519] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\userTelemetryCache.otc" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\usertelemetrycache.otc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0131.520] GetFileType (hFile=0x444) returned 0x1 [0131.520] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0131.520] GetFileType (hFile=0x444) returned 0x1 [0131.520] ReadFile (in: hFile=0x444, lpBuffer=0x22ed908, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x22ed908*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0131.584] CloseHandle (hObject=0x444) returned 1 [0131.584] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\userTelemetryCache.otc", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\userTelemetryCache.otc", lpFilePart=0x0) returned 0x58 [0131.584] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0131.584] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\userTelemetryCache.otc" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\usertelemetrycache.otc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0131.585] GetFileType (hFile=0x444) returned 0x1 [0131.585] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0131.585] GetFileType (hFile=0x444) returned 0x1 [0131.585] WriteFile (in: hFile=0x444, lpBuffer=0x2160028*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x2160028*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0131.585] CloseHandle (hObject=0x444) returned 1 [0131.585] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\userTelemetryCache.otc", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\userTelemetryCache.otc", lpFilePart=0x0) returned 0x58 [0131.585] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\userTelemetryCache.otc.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\userTelemetryCache.otc.xuy", lpFilePart=0x0) returned 0x5c [0131.585] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0131.585] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\userTelemetryCache.otc" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\usertelemetrycache.otc"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c301fff, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x15f5ac9d, ftLastAccessTime.dwHighDateTime=0x1d2fada, ftLastWriteTime.dwLowDateTime=0x3a47183d, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x5000)) returned 1 [0131.585] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0131.585] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\userTelemetryCache.otc" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\usertelemetrycache.otc"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\userTelemetryCache.otc.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\usertelemetrycache.otc.xuy")) returned 1 [0131.587] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\userTelemetryCache.otc.session", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\userTelemetryCache.otc.session", lpFilePart=0x0) returned 0x60 [0131.587] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0131.587] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\userTelemetryCache.otc.session" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\usertelemetrycache.otc.session"), fInfoLevelId=0x0, lpFileInformation=0x216c730 | out: lpFileInformation=0x216c730*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1dc13853, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0xebb9055f, ftLastAccessTime.dwHighDateTime=0x1d2fad9, ftLastWriteTime.dwLowDateTime=0x2ced6bfc, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x5000)) returned 1 [0131.587] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0131.587] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\userTelemetryCache.otc.session", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\userTelemetryCache.otc.session", lpFilePart=0x0) returned 0x60 [0131.587] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0131.587] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\userTelemetryCache.otc.session" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\usertelemetrycache.otc.session"), fInfoLevelId=0x0, lpFileInformation=0x216c8d0 | out: lpFileInformation=0x216c8d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1dc13853, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0xebb9055f, ftLastAccessTime.dwHighDateTime=0x1d2fad9, ftLastWriteTime.dwLowDateTime=0x2ced6bfc, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x5000)) returned 1 [0131.587] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0131.587] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\userTelemetryCache.otc.session", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\userTelemetryCache.otc.session", lpFilePart=0x0) returned 0x60 [0131.587] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0131.587] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\userTelemetryCache.otc.session" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\usertelemetrycache.otc.session"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0131.588] GetFileType (hFile=0x444) returned 0x1 [0131.588] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0131.588] GetFileType (hFile=0x444) returned 0x1 [0131.588] ReadFile (in: hFile=0x444, lpBuffer=0x216ed40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x216ed40*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0131.625] CloseHandle (hObject=0x444) returned 1 [0131.625] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\userTelemetryCache.otc.session", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\userTelemetryCache.otc.session", lpFilePart=0x0) returned 0x60 [0131.625] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0131.625] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\userTelemetryCache.otc.session" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\usertelemetrycache.otc.session"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0131.626] GetFileType (hFile=0x444) returned 0x1 [0131.626] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0131.626] GetFileType (hFile=0x444) returned 0x1 [0131.626] WriteFile (in: hFile=0x444, lpBuffer=0x216ca50*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x216ca50*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0131.626] CloseHandle (hObject=0x444) returned 1 [0131.626] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\userTelemetryCache.otc.session", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\userTelemetryCache.otc.session", lpFilePart=0x0) returned 0x60 [0131.626] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\userTelemetryCache.otc.session.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\userTelemetryCache.otc.session.xuy", lpFilePart=0x0) returned 0x64 [0131.626] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0131.626] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\userTelemetryCache.otc.session" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\usertelemetrycache.otc.session"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1dc13853, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0xebb9055f, ftLastAccessTime.dwHighDateTime=0x1d2fad9, ftLastWriteTime.dwLowDateTime=0x3a4e441c, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x5000)) returned 1 [0131.626] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0131.626] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\userTelemetryCache.otc.session" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\usertelemetrycache.otc.session"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\userTelemetryCache.otc.session.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\usertelemetrycache.otc.session.xuy")) returned 1 [0131.628] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0131.628] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\StandaloneUpdater", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\StandaloneUpdater", lpFilePart=0x0) returned 0x48 [0131.628] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\StandaloneUpdater\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\StandaloneUpdater\\", lpFilePart=0x0) returned 0x49 [0131.628] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\StandaloneUpdater\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7eb0 [0131.628] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0131.628] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0131.628] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0131.628] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0131.629] FindClose (in: hFindFile=0x5d7eb0 | out: hFindFile=0x5d7eb0) returned 1 [0131.629] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0131.629] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0131.629] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0131.629] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\StandaloneUpdater", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\StandaloneUpdater", lpFilePart=0x0) returned 0x48 [0131.629] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\StandaloneUpdater\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\StandaloneUpdater\\", lpFilePart=0x0) returned 0x49 [0131.629] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\StandaloneUpdater\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d78b0 [0131.629] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0131.629] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0131.629] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0131.630] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0131.630] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0131.630] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0131.630] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0131.630] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\StandaloneUpdater\\OneDriveSetup.exe", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\StandaloneUpdater\\OneDriveSetup.exe", lpFilePart=0x0) returned 0x5a [0131.630] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0131.630] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\StandaloneUpdater\\OneDriveSetup.exe" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\standaloneupdater\\onedrivesetup.exe"), fInfoLevelId=0x0, lpFileInformation=0x21ed5d0 | out: lpFileInformation=0x21ed5d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f668800, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0xe91501f4, ftLastAccessTime.dwHighDateTime=0x1d2fad9, ftLastWriteTime.dwLowDateTime=0x270f7ff3, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x174a4d0)) returned 1 [0131.630] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0131.630] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\StandaloneUpdater\\OneDriveSetup.exe", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\StandaloneUpdater\\OneDriveSetup.exe", lpFilePart=0x0) returned 0x5a [0131.630] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0131.630] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\StandaloneUpdater\\OneDriveSetup.exe" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\standaloneupdater\\onedrivesetup.exe"), fInfoLevelId=0x0, lpFileInformation=0x21ed748 | out: lpFileInformation=0x21ed748*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f668800, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0xe91501f4, ftLastAccessTime.dwHighDateTime=0x1d2fad9, ftLastWriteTime.dwLowDateTime=0x270f7ff3, ftLastWriteTime.dwHighDateTime=0x1d3368d, nFileSizeHigh=0x0, nFileSizeLow=0x174a4d0)) returned 1 [0131.630] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0131.631] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\StandaloneUpdater\\OneDriveSetup.exe", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\StandaloneUpdater\\OneDriveSetup.exe", lpFilePart=0x0) returned 0x5a [0131.631] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0131.631] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\StandaloneUpdater\\OneDriveSetup.exe" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\standaloneupdater\\onedrivesetup.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0131.632] GetFileType (hFile=0x444) returned 0x1 [0131.632] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0131.632] GetFileType (hFile=0x444) returned 0x1 [0131.632] ReadFile (in: hFile=0x444, lpBuffer=0x21efb68, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x21efb68*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0131.653] CloseHandle (hObject=0x444) returned 1 [0131.653] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\StandaloneUpdater\\OneDriveSetup.exe", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\StandaloneUpdater\\OneDriveSetup.exe", lpFilePart=0x0) returned 0x5a [0131.653] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0131.654] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\StandaloneUpdater\\OneDriveSetup.exe" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\standaloneupdater\\onedrivesetup.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0131.661] GetFileType (hFile=0x444) returned 0x1 [0131.661] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0131.661] GetFileType (hFile=0x444) returned 0x1 [0131.661] WriteFile (in: hFile=0x444, lpBuffer=0x21ed8a0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x21ed8a0*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0131.662] CloseHandle (hObject=0x444) returned 1 [0131.662] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\StandaloneUpdater\\OneDriveSetup.exe", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\StandaloneUpdater\\OneDriveSetup.exe", lpFilePart=0x0) returned 0x5a [0131.662] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\StandaloneUpdater\\OneDriveSetup.exe.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\StandaloneUpdater\\OneDriveSetup.exe.xuy", lpFilePart=0x0) returned 0x5e [0131.662] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0131.662] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\StandaloneUpdater\\OneDriveSetup.exe" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\standaloneupdater\\onedrivesetup.exe"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f668800, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0xe91501f4, ftLastAccessTime.dwHighDateTime=0x1d2fad9, ftLastWriteTime.dwLowDateTime=0x3a530479, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x174a4d0)) returned 1 [0131.662] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0131.662] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\StandaloneUpdater\\OneDriveSetup.exe" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\standaloneupdater\\onedrivesetup.exe"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\StandaloneUpdater\\OneDriveSetup.exe.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\standaloneupdater\\onedrivesetup.exe.xuy")) returned 1 [0131.663] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\StandaloneUpdater\\Update.xml", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\StandaloneUpdater\\Update.xml", lpFilePart=0x0) returned 0x53 [0131.663] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0131.664] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\StandaloneUpdater\\Update.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\standaloneupdater\\update.xml"), fInfoLevelId=0x0, lpFileInformation=0x226bfa8 | out: lpFileInformation=0x226bfa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe58c2553, ftCreationTime.dwHighDateTime=0x1d2fad9, ftLastAccessTime.dwLowDateTime=0xe58c2553, ftLastAccessTime.dwHighDateTime=0x1d2fad9, ftLastWriteTime.dwLowDateTime=0xaa54a7ee, ftLastWriteTime.dwHighDateTime=0x1d33718, nFileSizeHigh=0x0, nFileSizeLow=0x183)) returned 1 [0131.664] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0131.664] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\StandaloneUpdater\\Update.xml", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\StandaloneUpdater\\Update.xml", lpFilePart=0x0) returned 0x53 [0131.664] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0131.664] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\StandaloneUpdater\\Update.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\standaloneupdater\\update.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0131.664] GetFileType (hFile=0x444) returned 0x1 [0131.664] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0131.664] GetFileType (hFile=0x444) returned 0x1 [0131.664] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0x183 [0131.664] ReadFile (in: hFile=0x444, lpBuffer=0x226c3f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be718, lpOverlapped=0x0 | out: lpBuffer=0x226c3f8*, lpNumberOfBytesRead=0x3be718*=0x183, lpOverlapped=0x0) returned 1 [0131.665] CloseHandle (hObject=0x444) returned 1 [0131.681] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\StandaloneUpdater\\Update.xml", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\StandaloneUpdater\\Update.xml", lpFilePart=0x0) returned 0x53 [0131.681] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0131.681] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\StandaloneUpdater\\Update.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\standaloneupdater\\update.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0131.683] GetFileType (hFile=0x444) returned 0x1 [0131.683] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0131.683] GetFileType (hFile=0x444) returned 0x1 [0131.683] WriteFile (in: hFile=0x444, lpBuffer=0x22e3bb8*, nNumberOfBytesToWrite=0x190, lpNumberOfBytesWritten=0x3be628, lpOverlapped=0x0 | out: lpBuffer=0x22e3bb8*, lpNumberOfBytesWritten=0x3be628*=0x190, lpOverlapped=0x0) returned 1 [0131.684] CloseHandle (hObject=0x444) returned 1 [0131.684] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\StandaloneUpdater\\Update.xml", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\StandaloneUpdater\\Update.xml", lpFilePart=0x0) returned 0x53 [0131.684] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\StandaloneUpdater\\Update.xml.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\StandaloneUpdater\\Update.xml.xuy", lpFilePart=0x0) returned 0x57 [0131.684] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0131.684] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\StandaloneUpdater\\Update.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\standaloneupdater\\update.xml"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe58c2553, ftCreationTime.dwHighDateTime=0x1d2fad9, ftLastAccessTime.dwLowDateTime=0xe58c2553, ftLastAccessTime.dwHighDateTime=0x1d2fad9, ftLastWriteTime.dwLowDateTime=0x3a55667c, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x190)) returned 1 [0131.684] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0131.684] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\StandaloneUpdater\\Update.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\standaloneupdater\\update.xml"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\StandaloneUpdater\\Update.xml.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\standaloneupdater\\update.xml.xuy")) returned 1 [0131.685] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0131.691] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote", lpFilePart=0x0) returned 0x35 [0131.691] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\", lpFilePart=0x0) returned 0x36 [0131.691] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d78b0 [0131.692] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0131.692] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0131.692] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0131.692] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0131.692] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0131.692] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0131.692] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0131.692] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote", lpFilePart=0x0) returned 0x35 [0131.692] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\", lpFilePart=0x0) returned 0x36 [0131.693] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d78b0 [0131.693] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0131.693] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0131.693] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0131.693] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0131.693] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0131.693] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0131.693] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0131.693] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0", lpFilePart=0x0) returned 0x3a [0131.693] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\", lpFilePart=0x0) returned 0x3b [0131.693] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d8090 [0131.718] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0131.718] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0131.718] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0131.718] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0131.718] FindClose (in: hFindFile=0x5d8090 | out: hFindFile=0x5d8090) returned 1 [0131.718] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0131.718] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0131.718] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0131.719] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0", lpFilePart=0x0) returned 0x3a [0131.719] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\", lpFilePart=0x0) returned 0x3b [0131.719] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d75b0 [0131.719] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0131.719] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0131.719] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0131.719] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0131.719] FindClose (in: hFindFile=0x5d75b0 | out: hFindFile=0x5d75b0) returned 1 [0131.720] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0131.720] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0131.720] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0131.720] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\Backup", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\Backup", lpFilePart=0x0) returned 0x41 [0131.720] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\Backup\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\Backup\\", lpFilePart=0x0) returned 0x42 [0131.720] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\Backup\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7c70 [0131.724] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0131.724] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0131.724] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0131.724] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0131.724] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0131.724] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0131.724] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\Backup", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\Backup", lpFilePart=0x0) returned 0x41 [0131.725] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\Backup\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\Backup\\", lpFilePart=0x0) returned 0x42 [0131.725] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\Backup\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7550 [0131.725] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0131.725] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0131.725] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0131.725] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0131.725] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0131.725] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0131.725] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache", lpFilePart=0x0) returned 0x40 [0131.725] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\", lpFilePart=0x0) returned 0x41 [0131.726] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d78b0 [0131.746] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0131.747] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0131.747] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0131.747] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0131.747] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0131.747] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0131.748] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0131.748] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0131.748] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0131.748] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0131.748] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0131.749] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0131.749] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0131.749] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0131.749] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0131.749] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0131.749] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0131.749] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0131.749] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0131.749] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0131.750] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0131.750] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0131.750] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0131.750] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0131.750] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0131.750] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0131.750] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0131.750] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0131.751] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0131.751] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0131.751] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0131.751] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0131.751] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0131.751] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0131.751] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0131.751] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0131.752] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0131.752] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0131.752] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0131.752] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0131.752] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0131.752] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0131.752] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0131.752] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0131.752] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0131.753] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0131.753] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0131.753] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0131.753] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0131.753] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache", lpFilePart=0x0) returned 0x40 [0131.753] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\", lpFilePart=0x0) returned 0x41 [0131.754] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7eb0 [0131.755] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0131.755] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0131.755] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0131.755] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0131.755] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0131.755] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0131.755] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0131.756] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0131.756] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0131.756] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0131.756] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0131.756] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0131.756] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0131.756] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0131.757] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0131.757] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0131.757] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0131.757] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0131.757] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0131.757] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0131.758] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0131.758] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0131.758] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0131.758] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0131.758] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0131.758] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0131.758] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0131.759] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0131.759] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0131.759] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0131.759] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0131.759] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0131.759] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0131.759] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0131.760] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0131.760] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0131.760] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0131.760] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0131.760] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0131.760] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0131.760] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0131.761] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0131.761] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0131.761] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0131.761] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0131.761] FindClose (in: hFindFile=0x5d7eb0 | out: hFindFile=0x5d7eb0) returned 1 [0131.762] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0131.762] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0131.762] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000000.bin", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000000.bin", lpFilePart=0x0) returned 0x4d [0131.762] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0131.762] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000000.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000000.bin"), fInfoLevelId=0x0, lpFileInformation=0x22f6918 | out: lpFileInformation=0x22f6918*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65e91167, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x65e91167, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6ea6bb6c, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0131.764] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0131.764] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000000.bin", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000000.bin", lpFilePart=0x0) returned 0x4d [0131.764] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0131.764] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000000.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000000.bin"), fInfoLevelId=0x0, lpFileInformation=0x22f6a70 | out: lpFileInformation=0x22f6a70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65e91167, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x65e91167, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6ea6bb6c, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0131.764] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0131.764] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000000.bin", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000000.bin", lpFilePart=0x0) returned 0x4d [0131.764] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0131.764] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000000.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000000.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0131.765] GetFileType (hFile=0x444) returned 0x1 [0131.765] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0131.765] GetFileType (hFile=0x444) returned 0x1 [0131.765] ReadFile (in: hFile=0x444, lpBuffer=0x22f8e50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x22f8e50*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0131.821] CloseHandle (hObject=0x444) returned 1 [0131.821] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000000.bin", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000000.bin", lpFilePart=0x0) returned 0x4d [0131.822] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0131.822] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000000.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000000.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0131.822] GetFileType (hFile=0x444) returned 0x1 [0131.822] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0131.822] GetFileType (hFile=0x444) returned 0x1 [0131.822] WriteFile (in: hFile=0x444, lpBuffer=0x2160c38*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x2160c38*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0131.822] CloseHandle (hObject=0x444) returned 1 [0131.822] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000000.bin", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000000.bin", lpFilePart=0x0) returned 0x4d [0131.823] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000000.bin.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000000.bin.xuy", lpFilePart=0x0) returned 0x51 [0131.823] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0131.823] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000000.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000000.bin"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65e91167, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x65e91167, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x3a6adb87, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0131.823] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0131.823] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000000.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000000.bin"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000000.bin.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000000.bin.xuy")) returned 1 [0131.824] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000001.bin", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000001.bin", lpFilePart=0x0) returned 0x4d [0131.824] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0131.824] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000001.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000001.bin"), fInfoLevelId=0x0, lpFileInformation=0x2175e08 | out: lpFileInformation=0x2175e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65f0111e, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x65f0111e, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6b13db56, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x5000)) returned 1 [0131.825] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0131.825] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000001.bin", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000001.bin", lpFilePart=0x0) returned 0x4d [0131.825] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0131.825] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000001.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000001.bin"), fInfoLevelId=0x0, lpFileInformation=0x2175f60 | out: lpFileInformation=0x2175f60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65f0111e, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x65f0111e, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6b13db56, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x5000)) returned 1 [0131.825] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0131.825] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000001.bin", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000001.bin", lpFilePart=0x0) returned 0x4d [0131.825] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0131.825] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000001.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000001.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0131.826] GetFileType (hFile=0x444) returned 0x1 [0131.826] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0131.826] GetFileType (hFile=0x444) returned 0x1 [0131.826] ReadFile (in: hFile=0x444, lpBuffer=0x2178340, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x2178340*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0131.845] CloseHandle (hObject=0x444) returned 1 [0131.845] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000001.bin", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000001.bin", lpFilePart=0x0) returned 0x4d [0131.845] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0131.845] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000001.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000001.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0131.845] GetFileType (hFile=0x444) returned 0x1 [0131.845] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0131.845] GetFileType (hFile=0x444) returned 0x1 [0131.845] WriteFile (in: hFile=0x444, lpBuffer=0x2176098*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x2176098*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0131.846] CloseHandle (hObject=0x444) returned 1 [0131.846] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000001.bin", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000001.bin", lpFilePart=0x0) returned 0x4d [0131.846] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000001.bin.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000001.bin.xuy", lpFilePart=0x0) returned 0x51 [0131.846] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0131.846] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000001.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000001.bin"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65f0111e, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x65f0111e, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x3a6fa03e, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x5000)) returned 1 [0131.846] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0131.846] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000001.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000001.bin"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000001.bin.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000001.bin.xuy")) returned 1 [0131.847] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000004.bin", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000004.bin", lpFilePart=0x0) returned 0x4d [0131.847] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0131.847] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000004.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000004.bin"), fInfoLevelId=0x0, lpFileInformation=0x21f4718 | out: lpFileInformation=0x21f4718*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x6aa3cd20, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6aa3cd20, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6aa3cd20, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x387a)) returned 1 [0131.847] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0131.847] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000004.bin", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000004.bin", lpFilePart=0x0) returned 0x4d [0131.847] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0131.847] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000004.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000004.bin"), fInfoLevelId=0x0, lpFileInformation=0x21f4870 | out: lpFileInformation=0x21f4870*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x6aa3cd20, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6aa3cd20, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6aa3cd20, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x387a)) returned 1 [0131.847] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0131.847] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000004.bin", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000004.bin", lpFilePart=0x0) returned 0x4d [0131.847] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0131.847] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000004.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000004.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0131.849] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb100) returned 1 [0131.849] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000004.bin", nBufferLength=0x105, lpBuffer=0x3bbd80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000004.bin", lpFilePart=0x0) returned 0x4d [0131.849] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc220) returned 1 [0131.849] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000004.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000004.bin"), fInfoLevelId=0x0, lpFileInformation=0x3bc300 | out: lpFileInformation=0x3bc300*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x6aa3cd20, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6aa3cd20, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6aa3cd20, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x387a)) returned 1 [0131.849] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1e0) returned 1 [0131.851] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000004.bin", nBufferLength=0x105, lpBuffer=0x3bbda0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000004.bin", lpFilePart=0x0) returned 0x4d [0131.851] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000004.bin", dwFileAttributes=0x20) returned 1 [0131.851] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000004.bin", nBufferLength=0x105, lpBuffer=0x3bbda0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000004.bin", lpFilePart=0x0) returned 0x4d [0131.851] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc220) returned 1 [0131.852] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000004.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000004.bin"), fInfoLevelId=0x0, lpFileInformation=0x21f7448 | out: lpFileInformation=0x21f7448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6aa3cd20, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6aa3cd20, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6aa3cd20, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x387a)) returned 1 [0131.852] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1e0) returned 1 [0131.852] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000004.bin", nBufferLength=0x105, lpBuffer=0x3bbda0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000004.bin", lpFilePart=0x0) returned 0x4d [0131.852] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc220) returned 1 [0131.852] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000004.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000004.bin"), fInfoLevelId=0x0, lpFileInformation=0x21f75a0 | out: lpFileInformation=0x21f75a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6aa3cd20, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6aa3cd20, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6aa3cd20, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x387a)) returned 1 [0131.852] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1e0) returned 1 [0131.852] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000004.bin", nBufferLength=0x105, lpBuffer=0x3bbc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000004.bin", lpFilePart=0x0) returned 0x4d [0131.852] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc120) returned 1 [0131.852] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000004.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000004.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0131.853] GetFileType (hFile=0x444) returned 0x1 [0131.853] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc090) returned 1 [0131.853] GetFileType (hFile=0x444) returned 0x1 [0131.859] ReadFile (in: hFile=0x444, lpBuffer=0x21f9980, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bc1f8, lpOverlapped=0x0 | out: lpBuffer=0x21f9980*, lpNumberOfBytesRead=0x3bc1f8*=0x1000, lpOverlapped=0x0) returned 1 [0131.904] CloseHandle (hObject=0x444) returned 1 [0131.904] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000004.bin", nBufferLength=0x105, lpBuffer=0x3bbc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000004.bin", lpFilePart=0x0) returned 0x4d [0131.904] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc120) returned 1 [0131.904] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000004.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000004.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0131.905] GetFileType (hFile=0x444) returned 0x1 [0131.905] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc090) returned 1 [0131.905] GetFileType (hFile=0x444) returned 0x1 [0131.905] WriteFile (in: hFile=0x444, lpBuffer=0x2274820*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x3bc2a8, lpOverlapped=0x0 | out: lpBuffer=0x2274820*, lpNumberOfBytesWritten=0x3bc2a8*=0x1010, lpOverlapped=0x0) returned 1 [0131.905] CloseHandle (hObject=0x444) returned 1 [0131.905] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000004.bin", nBufferLength=0x105, lpBuffer=0x3bbda0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000004.bin", lpFilePart=0x0) returned 0x4d [0131.905] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000004.bin.xuy", nBufferLength=0x105, lpBuffer=0x3bbda0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000004.bin.xuy", lpFilePart=0x0) returned 0x51 [0131.905] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc1e0) returned 1 [0131.905] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000004.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000004.bin"), fInfoLevelId=0x0, lpFileInformation=0x3bc2c0 | out: lpFileInformation=0x3bc2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6aa3cd20, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6aa3cd20, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x3a7929d4, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x387a)) returned 1 [0131.906] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1a0) returned 1 [0131.906] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000004.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000004.bin"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000004.bin.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000004.bin.xuy")) returned 1 [0131.907] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000005.bin", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000005.bin", lpFilePart=0x0) returned 0x4d [0131.907] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0131.907] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000005.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000005.bin"), fInfoLevelId=0x0, lpFileInformation=0x2275d58 | out: lpFileInformation=0x2275d58*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x6aa8916b, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6aa8916b, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6aa8916b, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x4b23)) returned 1 [0131.907] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0131.907] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000005.bin", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000005.bin", lpFilePart=0x0) returned 0x4d [0131.907] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0131.907] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000005.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000005.bin"), fInfoLevelId=0x0, lpFileInformation=0x2275eb0 | out: lpFileInformation=0x2275eb0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x6aa8916b, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6aa8916b, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6aa8916b, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x4b23)) returned 1 [0131.907] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0131.907] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000005.bin", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000005.bin", lpFilePart=0x0) returned 0x4d [0131.907] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0131.907] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000005.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000005.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0131.909] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb100) returned 1 [0131.909] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000005.bin", nBufferLength=0x105, lpBuffer=0x3bbd80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000005.bin", lpFilePart=0x0) returned 0x4d [0131.909] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc220) returned 1 [0131.909] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000005.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000005.bin"), fInfoLevelId=0x0, lpFileInformation=0x3bc300 | out: lpFileInformation=0x3bc300*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x6aa8916b, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6aa8916b, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6aa8916b, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x4b23)) returned 1 [0131.909] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1e0) returned 1 [0131.909] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000005.bin", nBufferLength=0x105, lpBuffer=0x3bbda0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000005.bin", lpFilePart=0x0) returned 0x4d [0131.909] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000005.bin", dwFileAttributes=0x20) returned 1 [0131.910] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000005.bin", nBufferLength=0x105, lpBuffer=0x3bbda0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000005.bin", lpFilePart=0x0) returned 0x4d [0131.910] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc220) returned 1 [0131.910] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000005.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000005.bin"), fInfoLevelId=0x0, lpFileInformation=0x2278a88 | out: lpFileInformation=0x2278a88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6aa8916b, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6aa8916b, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6aa8916b, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x4b23)) returned 1 [0131.910] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1e0) returned 1 [0131.910] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000005.bin", nBufferLength=0x105, lpBuffer=0x3bbda0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000005.bin", lpFilePart=0x0) returned 0x4d [0131.910] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc220) returned 1 [0131.910] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000005.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000005.bin"), fInfoLevelId=0x0, lpFileInformation=0x2278be0 | out: lpFileInformation=0x2278be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6aa8916b, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6aa8916b, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6aa8916b, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x4b23)) returned 1 [0131.910] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1e0) returned 1 [0131.910] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000005.bin", nBufferLength=0x105, lpBuffer=0x3bbc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000005.bin", lpFilePart=0x0) returned 0x4d [0131.910] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc120) returned 1 [0131.910] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000005.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000005.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0131.911] GetFileType (hFile=0x444) returned 0x1 [0131.911] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc090) returned 1 [0131.911] GetFileType (hFile=0x444) returned 0x1 [0131.911] ReadFile (in: hFile=0x444, lpBuffer=0x227afc0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bc1f8, lpOverlapped=0x0 | out: lpBuffer=0x227afc0*, lpNumberOfBytesRead=0x3bc1f8*=0x1000, lpOverlapped=0x0) returned 1 [0132.060] CloseHandle (hObject=0x444) returned 1 [0132.060] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000005.bin", nBufferLength=0x105, lpBuffer=0x3bbc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000005.bin", lpFilePart=0x0) returned 0x4d [0132.060] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc120) returned 1 [0132.060] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000005.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000005.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0132.061] GetFileType (hFile=0x444) returned 0x1 [0132.061] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc090) returned 1 [0132.061] GetFileType (hFile=0x444) returned 0x1 [0132.061] WriteFile (in: hFile=0x444, lpBuffer=0x22f5e60*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x3bc2a8, lpOverlapped=0x0 | out: lpBuffer=0x22f5e60*, lpNumberOfBytesWritten=0x3bc2a8*=0x1010, lpOverlapped=0x0) returned 1 [0132.061] CloseHandle (hObject=0x444) returned 1 [0132.061] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000005.bin", nBufferLength=0x105, lpBuffer=0x3bbda0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000005.bin", lpFilePart=0x0) returned 0x4d [0132.061] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000005.bin.xuy", nBufferLength=0x105, lpBuffer=0x3bbda0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000005.bin.xuy", lpFilePart=0x0) returned 0x51 [0132.061] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc1e0) returned 1 [0132.061] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000005.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000005.bin"), fInfoLevelId=0x0, lpFileInformation=0x3bc2c0 | out: lpFileInformation=0x3bc2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6aa8916b, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6aa8916b, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x3a910194, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x4b23)) returned 1 [0132.061] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1a0) returned 1 [0132.061] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000005.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000005.bin"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000005.bin.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000005.bin.xuy")) returned 1 [0132.063] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000006.bin", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000006.bin", lpFilePart=0x0) returned 0x4d [0132.063] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0132.063] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000006.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000006.bin"), fInfoLevelId=0x0, lpFileInformation=0x22f7398 | out: lpFileInformation=0x22f7398*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x6aaaf41b, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6aaaf41b, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6aaaf41b, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x644)) returned 1 [0132.063] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0132.063] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000006.bin", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000006.bin", lpFilePart=0x0) returned 0x4d [0132.063] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0132.063] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000006.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000006.bin"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0132.063] GetFileType (hFile=0x444) returned 0x1 [0132.063] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0132.063] GetFileType (hFile=0x444) returned 0x1 [0132.063] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x644 [0132.063] ReadFile (in: hFile=0x444, lpBuffer=0x22f7ca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x22f7ca8*, lpNumberOfBytesRead=0x3be6a8*=0x644, lpOverlapped=0x0) returned 1 [0132.076] CloseHandle (hObject=0x444) returned 1 [0132.132] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000006.bin", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000006.bin", lpFilePart=0x0) returned 0x4d [0132.132] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0132.132] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000006.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000006.bin"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0132.134] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb070) returned 1 [0132.134] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000006.bin", nBufferLength=0x105, lpBuffer=0x3bbcf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000006.bin", lpFilePart=0x0) returned 0x4d [0132.134] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0132.134] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000006.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000006.bin"), fInfoLevelId=0x0, lpFileInformation=0x3bc270 | out: lpFileInformation=0x3bc270*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x6aaaf41b, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6aaaf41b, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6aaaf41b, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x644)) returned 1 [0132.134] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc150) returned 1 [0132.134] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000006.bin", nBufferLength=0x105, lpBuffer=0x3bbd10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000006.bin", lpFilePart=0x0) returned 0x4d [0132.135] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000006.bin", dwFileAttributes=0x20) returned 1 [0132.135] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000006.bin", nBufferLength=0x105, lpBuffer=0x3bbd10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000006.bin", lpFilePart=0x0) returned 0x4d [0132.135] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0132.135] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000006.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000006.bin"), fInfoLevelId=0x0, lpFileInformation=0x216eab8 | out: lpFileInformation=0x216eab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6aaaf41b, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6aaaf41b, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6aaaf41b, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x644)) returned 1 [0132.135] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc150) returned 1 [0132.135] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000006.bin", nBufferLength=0x105, lpBuffer=0x3bbb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000006.bin", lpFilePart=0x0) returned 0x4d [0132.135] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc050) returned 1 [0132.135] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000006.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000006.bin"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0132.135] GetFileType (hFile=0x444) returned 0x1 [0132.135] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbfc0) returned 1 [0132.136] GetFileType (hFile=0x444) returned 0x1 [0132.136] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc1e8 | out: lpFileSizeHigh=0x3bc1e8*=0x0) returned 0x644 [0132.136] ReadFile (in: hFile=0x444, lpBuffer=0x216f3c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bc118, lpOverlapped=0x0 | out: lpBuffer=0x216f3c8*, lpNumberOfBytesRead=0x3bc118*=0x644, lpOverlapped=0x0) returned 1 [0132.136] CloseHandle (hObject=0x444) returned 1 [0132.188] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000006.bin", nBufferLength=0x105, lpBuffer=0x3bbb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000006.bin", lpFilePart=0x0) returned 0x4d [0132.188] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc050) returned 1 [0132.188] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000006.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000006.bin"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0132.190] GetFileType (hFile=0x444) returned 0x1 [0132.190] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbfc0) returned 1 [0132.190] GetFileType (hFile=0x444) returned 0x1 [0132.190] WriteFile (in: hFile=0x444, lpBuffer=0x21e8348*, nNumberOfBytesToWrite=0x650, lpNumberOfBytesWritten=0x3bc028, lpOverlapped=0x0 | out: lpBuffer=0x21e8348*, lpNumberOfBytesWritten=0x3bc028*=0x650, lpOverlapped=0x0) returned 1 [0132.191] CloseHandle (hObject=0x444) returned 1 [0132.191] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000006.bin", nBufferLength=0x105, lpBuffer=0x3bbd10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000006.bin", lpFilePart=0x0) returned 0x4d [0132.191] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000006.bin.xuy", nBufferLength=0x105, lpBuffer=0x3bbd10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000006.bin.xuy", lpFilePart=0x0) returned 0x51 [0132.191] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc150) returned 1 [0132.191] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000006.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000006.bin"), fInfoLevelId=0x0, lpFileInformation=0x3bc230 | out: lpFileInformation=0x3bc230*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6aaaf41b, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6aaaf41b, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x3aa4146e, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x650)) returned 1 [0132.191] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc110) returned 1 [0132.191] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000006.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000006.bin"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000006.bin.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000006.bin.xuy")) returned 1 [0132.193] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000007.bin", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000007.bin", lpFilePart=0x0) returned 0x4d [0132.193] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0132.193] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000007.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000007.bin"), fInfoLevelId=0x0, lpFileInformation=0x21e95e0 | out: lpFileInformation=0x21e95e0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x6aaaf41b, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6aaaf41b, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6aad566b, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x8b8)) returned 1 [0132.194] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0132.194] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000007.bin", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000007.bin", lpFilePart=0x0) returned 0x4d [0132.194] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0132.194] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000007.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000007.bin"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0132.194] GetFileType (hFile=0x444) returned 0x1 [0132.194] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0132.194] GetFileType (hFile=0x444) returned 0x1 [0132.194] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x8b8 [0132.194] ReadFile (in: hFile=0x444, lpBuffer=0x21ea160, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x21ea160*, lpNumberOfBytesRead=0x3be6a8*=0x8b8, lpOverlapped=0x0) returned 1 [0132.196] CloseHandle (hObject=0x444) returned 1 [0132.211] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000007.bin", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000007.bin", lpFilePart=0x0) returned 0x4d [0132.211] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0132.212] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000007.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000007.bin"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0132.213] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb070) returned 1 [0132.214] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000007.bin", nBufferLength=0x105, lpBuffer=0x3bbcf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000007.bin", lpFilePart=0x0) returned 0x4d [0132.214] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0132.214] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000007.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000007.bin"), fInfoLevelId=0x0, lpFileInformation=0x3bc270 | out: lpFileInformation=0x3bc270*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x6aaaf41b, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6aaaf41b, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6aad566b, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x8b8)) returned 1 [0132.214] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc150) returned 1 [0132.214] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000007.bin", nBufferLength=0x105, lpBuffer=0x3bbd10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000007.bin", lpFilePart=0x0) returned 0x4d [0132.214] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000007.bin", dwFileAttributes=0x20) returned 1 [0132.215] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000007.bin", nBufferLength=0x105, lpBuffer=0x3bbd10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000007.bin", lpFilePart=0x0) returned 0x4d [0132.215] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0132.215] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000007.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000007.bin"), fInfoLevelId=0x0, lpFileInformation=0x2264618 | out: lpFileInformation=0x2264618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6aaaf41b, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6aaaf41b, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6aad566b, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x8b8)) returned 1 [0132.215] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc150) returned 1 [0132.215] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000007.bin", nBufferLength=0x105, lpBuffer=0x3bbb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000007.bin", lpFilePart=0x0) returned 0x4d [0132.215] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc050) returned 1 [0132.215] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000007.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000007.bin"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0132.215] GetFileType (hFile=0x444) returned 0x1 [0132.215] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbfc0) returned 1 [0132.215] GetFileType (hFile=0x444) returned 0x1 [0132.215] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc1e8 | out: lpFileSizeHigh=0x3bc1e8*=0x0) returned 0x8b8 [0132.215] ReadFile (in: hFile=0x444, lpBuffer=0x2265198, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bc118, lpOverlapped=0x0 | out: lpBuffer=0x2265198*, lpNumberOfBytesRead=0x3bc118*=0x8b8, lpOverlapped=0x0) returned 1 [0132.215] CloseHandle (hObject=0x444) returned 1 [0132.268] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000007.bin", nBufferLength=0x105, lpBuffer=0x3bbb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000007.bin", lpFilePart=0x0) returned 0x4d [0132.268] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc050) returned 1 [0132.269] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000007.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000007.bin"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0132.270] GetFileType (hFile=0x444) returned 0x1 [0132.270] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbfc0) returned 1 [0132.270] GetFileType (hFile=0x444) returned 0x1 [0132.270] WriteFile (in: hFile=0x444, lpBuffer=0x22ded40*, nNumberOfBytesToWrite=0x8c0, lpNumberOfBytesWritten=0x3bc028, lpOverlapped=0x0 | out: lpBuffer=0x22ded40*, lpNumberOfBytesWritten=0x3bc028*=0x8c0, lpOverlapped=0x0) returned 1 [0132.271] CloseHandle (hObject=0x444) returned 1 [0132.271] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000007.bin", nBufferLength=0x105, lpBuffer=0x3bbd10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000007.bin", lpFilePart=0x0) returned 0x4d [0132.271] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000007.bin.xuy", nBufferLength=0x105, lpBuffer=0x3bbd10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000007.bin.xuy", lpFilePart=0x0) returned 0x51 [0132.271] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc150) returned 1 [0132.271] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000007.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000007.bin"), fInfoLevelId=0x0, lpFileInformation=0x3bc230 | out: lpFileInformation=0x3bc230*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6aaaf41b, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6aaaf41b, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x3aafffd8, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x8c0)) returned 1 [0132.271] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc110) returned 1 [0132.271] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000007.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000007.bin"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000007.bin.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000007.bin.xuy")) returned 1 [0132.273] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000008.bin", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000008.bin", lpFilePart=0x0) returned 0x4d [0132.273] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0132.273] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000008.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000008.bin"), fInfoLevelId=0x0, lpFileInformation=0x22dffd8 | out: lpFileInformation=0x22dffd8*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x6aad566b, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6aad566b, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6aad566b, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0xe5f)) returned 1 [0132.274] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0132.274] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000008.bin", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000008.bin", lpFilePart=0x0) returned 0x4d [0132.274] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0132.274] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000008.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000008.bin"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0132.274] GetFileType (hFile=0x444) returned 0x1 [0132.274] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0132.274] GetFileType (hFile=0x444) returned 0x1 [0132.274] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0xe5f [0132.274] ReadFile (in: hFile=0x444, lpBuffer=0x22e1100, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x22e1100*, lpNumberOfBytesRead=0x3be6a8*=0xe5f, lpOverlapped=0x0) returned 1 [0132.276] CloseHandle (hObject=0x444) returned 1 [0132.292] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000008.bin", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000008.bin", lpFilePart=0x0) returned 0x4d [0132.292] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0132.292] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000008.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000008.bin"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0132.294] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb070) returned 1 [0132.295] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000008.bin", nBufferLength=0x105, lpBuffer=0x3bbcf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000008.bin", lpFilePart=0x0) returned 0x4d [0132.295] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0132.295] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000008.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000008.bin"), fInfoLevelId=0x0, lpFileInformation=0x3bc270 | out: lpFileInformation=0x3bc270*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x6aad566b, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6aad566b, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6aad566b, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0xe5f)) returned 1 [0132.295] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc150) returned 1 [0132.295] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000008.bin", nBufferLength=0x105, lpBuffer=0x3bbd10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000008.bin", lpFilePart=0x0) returned 0x4d [0132.295] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000008.bin", dwFileAttributes=0x20) returned 1 [0132.296] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000008.bin", nBufferLength=0x105, lpBuffer=0x3bbd10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000008.bin", lpFilePart=0x0) returned 0x4d [0132.296] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0132.296] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000008.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000008.bin"), fInfoLevelId=0x0, lpFileInformation=0x235d1d8 | out: lpFileInformation=0x235d1d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6aad566b, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6aad566b, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6aad566b, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0xe5f)) returned 1 [0132.296] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc150) returned 1 [0132.296] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000008.bin", nBufferLength=0x105, lpBuffer=0x3bbb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000008.bin", lpFilePart=0x0) returned 0x4d [0132.296] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc050) returned 1 [0132.296] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000008.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000008.bin"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0132.296] GetFileType (hFile=0x444) returned 0x1 [0132.296] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbfc0) returned 1 [0132.297] GetFileType (hFile=0x444) returned 0x1 [0132.297] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc1e8 | out: lpFileSizeHigh=0x3bc1e8*=0x0) returned 0xe5f [0132.297] ReadFile (in: hFile=0x444, lpBuffer=0x235e300, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bc118, lpOverlapped=0x0 | out: lpBuffer=0x235e300*, lpNumberOfBytesRead=0x3bc118*=0xe5f, lpOverlapped=0x0) returned 1 [0132.297] CloseHandle (hObject=0x444) returned 1 [0132.348] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000008.bin", nBufferLength=0x105, lpBuffer=0x3bbb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000008.bin", lpFilePart=0x0) returned 0x4d [0132.348] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc050) returned 1 [0132.348] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000008.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000008.bin"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0132.350] GetFileType (hFile=0x444) returned 0x1 [0132.350] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbfc0) returned 1 [0132.350] GetFileType (hFile=0x444) returned 0x1 [0132.350] WriteFile (in: hFile=0x444, lpBuffer=0x21da610*, nNumberOfBytesToWrite=0xe60, lpNumberOfBytesWritten=0x3bc028, lpOverlapped=0x0 | out: lpBuffer=0x21da610*, lpNumberOfBytesWritten=0x3bc028*=0xe60, lpOverlapped=0x0) returned 1 [0132.351] CloseHandle (hObject=0x444) returned 1 [0132.351] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000008.bin", nBufferLength=0x105, lpBuffer=0x3bbd10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000008.bin", lpFilePart=0x0) returned 0x4d [0132.351] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000008.bin.xuy", nBufferLength=0x105, lpBuffer=0x3bbd10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000008.bin.xuy", lpFilePart=0x0) returned 0x51 [0132.351] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc150) returned 1 [0132.351] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000008.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000008.bin"), fInfoLevelId=0x0, lpFileInformation=0x3bc230 | out: lpFileInformation=0x3bc230*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6aad566b, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6aad566b, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x3abbef90, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xe60)) returned 1 [0132.351] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc110) returned 1 [0132.351] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000008.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000008.bin"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000008.bin.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000008.bin.xuy")) returned 1 [0132.353] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000009.bin", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000009.bin", lpFilePart=0x0) returned 0x4d [0132.353] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0132.353] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000009.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000009.bin"), fInfoLevelId=0x0, lpFileInformation=0x21db8a8 | out: lpFileInformation=0x21db8a8*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x6aad566b, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6aad566b, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6aad566b, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x32e6)) returned 1 [0132.354] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0132.355] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000009.bin", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000009.bin", lpFilePart=0x0) returned 0x4d [0132.355] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0132.355] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000009.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000009.bin"), fInfoLevelId=0x0, lpFileInformation=0x21dba00 | out: lpFileInformation=0x21dba00*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x6aad566b, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6aad566b, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6aad566b, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x32e6)) returned 1 [0132.355] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0132.355] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000009.bin", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000009.bin", lpFilePart=0x0) returned 0x4d [0132.355] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0132.355] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000009.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000009.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0132.356] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb100) returned 1 [0132.357] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000009.bin", nBufferLength=0x105, lpBuffer=0x3bbd80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000009.bin", lpFilePart=0x0) returned 0x4d [0132.357] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc220) returned 1 [0132.357] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000009.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000009.bin"), fInfoLevelId=0x0, lpFileInformation=0x3bc300 | out: lpFileInformation=0x3bc300*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x6aad566b, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6aad566b, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6aad566b, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x32e6)) returned 1 [0132.357] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1e0) returned 1 [0132.358] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000009.bin", nBufferLength=0x105, lpBuffer=0x3bbda0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000009.bin", lpFilePart=0x0) returned 0x4d [0132.358] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000009.bin", dwFileAttributes=0x20) returned 1 [0132.358] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000009.bin", nBufferLength=0x105, lpBuffer=0x3bbda0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000009.bin", lpFilePart=0x0) returned 0x4d [0132.358] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc220) returned 1 [0132.358] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000009.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000009.bin"), fInfoLevelId=0x0, lpFileInformation=0x21de5d8 | out: lpFileInformation=0x21de5d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6aad566b, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6aad566b, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6aad566b, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x32e6)) returned 1 [0132.358] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1e0) returned 1 [0132.358] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000009.bin", nBufferLength=0x105, lpBuffer=0x3bbda0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000009.bin", lpFilePart=0x0) returned 0x4d [0132.358] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc220) returned 1 [0132.358] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000009.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000009.bin"), fInfoLevelId=0x0, lpFileInformation=0x21de730 | out: lpFileInformation=0x21de730*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6aad566b, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6aad566b, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6aad566b, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x32e6)) returned 1 [0132.359] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1e0) returned 1 [0132.359] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000009.bin", nBufferLength=0x105, lpBuffer=0x3bbc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000009.bin", lpFilePart=0x0) returned 0x4d [0132.359] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc120) returned 1 [0132.359] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000009.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000009.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0132.360] GetFileType (hFile=0x444) returned 0x1 [0132.360] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc090) returned 1 [0132.360] GetFileType (hFile=0x444) returned 0x1 [0132.360] ReadFile (in: hFile=0x444, lpBuffer=0x21e0b10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bc1f8, lpOverlapped=0x0 | out: lpBuffer=0x21e0b10*, lpNumberOfBytesRead=0x3bc1f8*=0x1000, lpOverlapped=0x0) returned 1 [0132.410] CloseHandle (hObject=0x444) returned 1 [0132.410] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000009.bin", nBufferLength=0x105, lpBuffer=0x3bbc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000009.bin", lpFilePart=0x0) returned 0x4d [0132.410] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc120) returned 1 [0132.410] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000009.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000009.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0132.411] GetFileType (hFile=0x444) returned 0x1 [0132.411] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc090) returned 1 [0132.411] GetFileType (hFile=0x444) returned 0x1 [0132.411] WriteFile (in: hFile=0x444, lpBuffer=0x225b9b0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x3bc2a8, lpOverlapped=0x0 | out: lpBuffer=0x225b9b0*, lpNumberOfBytesWritten=0x3bc2a8*=0x1010, lpOverlapped=0x0) returned 1 [0132.411] CloseHandle (hObject=0x444) returned 1 [0132.411] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000009.bin", nBufferLength=0x105, lpBuffer=0x3bbda0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000009.bin", lpFilePart=0x0) returned 0x4d [0132.411] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000009.bin.xuy", nBufferLength=0x105, lpBuffer=0x3bbda0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000009.bin.xuy", lpFilePart=0x0) returned 0x51 [0132.411] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc1e0) returned 1 [0132.411] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000009.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000009.bin"), fInfoLevelId=0x0, lpFileInformation=0x3bc2c0 | out: lpFileInformation=0x3bc2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6aad566b, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6aad566b, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x3ac57592, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x32e6)) returned 1 [0132.411] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1a0) returned 1 [0132.411] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000009.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000009.bin"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000009.bin.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000009.bin.xuy")) returned 1 [0132.413] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000C.bin", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000C.bin", lpFilePart=0x0) returned 0x4d [0132.413] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0132.413] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000C.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000c.bin"), fInfoLevelId=0x0, lpFileInformation=0x225cee8 | out: lpFileInformation=0x225cee8*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x6ab21b10, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6ab21b10, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6ab21b10, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x150a)) returned 1 [0132.413] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0132.413] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000C.bin", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000C.bin", lpFilePart=0x0) returned 0x4d [0132.413] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0132.413] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000C.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000c.bin"), fInfoLevelId=0x0, lpFileInformation=0x225d040 | out: lpFileInformation=0x225d040*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x6ab21b10, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6ab21b10, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6ab21b10, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x150a)) returned 1 [0132.413] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0132.413] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000C.bin", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000C.bin", lpFilePart=0x0) returned 0x4d [0132.413] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0132.413] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000C.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000c.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0132.415] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb100) returned 1 [0132.415] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000C.bin", nBufferLength=0x105, lpBuffer=0x3bbd80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000C.bin", lpFilePart=0x0) returned 0x4d [0132.415] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc220) returned 1 [0132.415] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000C.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000c.bin"), fInfoLevelId=0x0, lpFileInformation=0x3bc300 | out: lpFileInformation=0x3bc300*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x6ab21b10, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6ab21b10, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6ab21b10, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x150a)) returned 1 [0132.415] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1e0) returned 1 [0132.415] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000C.bin", nBufferLength=0x105, lpBuffer=0x3bbda0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000C.bin", lpFilePart=0x0) returned 0x4d [0132.415] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000C.bin", dwFileAttributes=0x20) returned 1 [0132.415] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000C.bin", nBufferLength=0x105, lpBuffer=0x3bbda0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000C.bin", lpFilePart=0x0) returned 0x4d [0132.416] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc220) returned 1 [0132.416] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000C.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000c.bin"), fInfoLevelId=0x0, lpFileInformation=0x225fc18 | out: lpFileInformation=0x225fc18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ab21b10, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6ab21b10, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6ab21b10, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x150a)) returned 1 [0132.416] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1e0) returned 1 [0132.416] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000C.bin", nBufferLength=0x105, lpBuffer=0x3bbda0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000C.bin", lpFilePart=0x0) returned 0x4d [0132.416] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc220) returned 1 [0132.416] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000C.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000c.bin"), fInfoLevelId=0x0, lpFileInformation=0x225fd70 | out: lpFileInformation=0x225fd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ab21b10, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6ab21b10, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6ab21b10, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x150a)) returned 1 [0132.416] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1e0) returned 1 [0132.416] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000C.bin", nBufferLength=0x105, lpBuffer=0x3bbc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000C.bin", lpFilePart=0x0) returned 0x4d [0132.416] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc120) returned 1 [0132.416] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000C.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000c.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0132.417] GetFileType (hFile=0x444) returned 0x1 [0132.417] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc090) returned 1 [0132.417] GetFileType (hFile=0x444) returned 0x1 [0132.417] ReadFile (in: hFile=0x444, lpBuffer=0x2262150, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bc1f8, lpOverlapped=0x0 | out: lpBuffer=0x2262150*, lpNumberOfBytesRead=0x3bc1f8*=0x1000, lpOverlapped=0x0) returned 1 [0132.489] CloseHandle (hObject=0x444) returned 1 [0132.490] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000C.bin", nBufferLength=0x105, lpBuffer=0x3bbc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000C.bin", lpFilePart=0x0) returned 0x4d [0132.490] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc120) returned 1 [0132.490] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000C.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000c.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0132.490] GetFileType (hFile=0x444) returned 0x1 [0132.490] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc090) returned 1 [0132.490] GetFileType (hFile=0x444) returned 0x1 [0132.490] WriteFile (in: hFile=0x444, lpBuffer=0x22dcff0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x3bc2a8, lpOverlapped=0x0 | out: lpBuffer=0x22dcff0*, lpNumberOfBytesWritten=0x3bc2a8*=0x1010, lpOverlapped=0x0) returned 1 [0132.491] CloseHandle (hObject=0x444) returned 1 [0132.491] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000C.bin", nBufferLength=0x105, lpBuffer=0x3bbda0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000C.bin", lpFilePart=0x0) returned 0x4d [0132.491] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000C.bin.xuy", nBufferLength=0x105, lpBuffer=0x3bbda0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000C.bin.xuy", lpFilePart=0x0) returned 0x51 [0132.491] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc1e0) returned 1 [0132.491] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000C.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000c.bin"), fInfoLevelId=0x0, lpFileInformation=0x3bc2c0 | out: lpFileInformation=0x3bc2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ab21b10, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6ab21b10, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x3ad1642e, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x150a)) returned 1 [0132.491] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1a0) returned 1 [0132.491] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000C.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000c.bin"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000C.bin.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000c.bin.xuy")) returned 1 [0132.493] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000D.bin", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000D.bin", lpFilePart=0x0) returned 0x4d [0132.493] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0132.493] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000D.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000d.bin"), fInfoLevelId=0x0, lpFileInformation=0x22de528 | out: lpFileInformation=0x22de528*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x6ab21b10, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6ab21b10, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6ab21b10, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x1cce)) returned 1 [0132.493] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0132.493] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000D.bin", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000D.bin", lpFilePart=0x0) returned 0x4d [0132.493] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0132.493] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000D.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000d.bin"), fInfoLevelId=0x0, lpFileInformation=0x22de680 | out: lpFileInformation=0x22de680*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x6ab21b10, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6ab21b10, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6ab21b10, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x1cce)) returned 1 [0132.493] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0132.493] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000D.bin", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000D.bin", lpFilePart=0x0) returned 0x4d [0132.493] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0132.493] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000D.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000d.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0132.495] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb100) returned 1 [0132.495] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000D.bin", nBufferLength=0x105, lpBuffer=0x3bbd80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000D.bin", lpFilePart=0x0) returned 0x4d [0132.495] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc220) returned 1 [0132.495] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000D.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000d.bin"), fInfoLevelId=0x0, lpFileInformation=0x3bc300 | out: lpFileInformation=0x3bc300*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x6ab21b10, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6ab21b10, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6ab21b10, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x1cce)) returned 1 [0132.495] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1e0) returned 1 [0132.495] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000D.bin", nBufferLength=0x105, lpBuffer=0x3bbda0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000D.bin", lpFilePart=0x0) returned 0x4d [0132.495] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000D.bin", dwFileAttributes=0x20) returned 1 [0132.496] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000D.bin", nBufferLength=0x105, lpBuffer=0x3bbda0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000D.bin", lpFilePart=0x0) returned 0x4d [0132.496] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc220) returned 1 [0132.496] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000D.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000d.bin"), fInfoLevelId=0x0, lpFileInformation=0x22e1258 | out: lpFileInformation=0x22e1258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ab21b10, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6ab21b10, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6ab21b10, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x1cce)) returned 1 [0132.496] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1e0) returned 1 [0132.496] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000D.bin", nBufferLength=0x105, lpBuffer=0x3bbda0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000D.bin", lpFilePart=0x0) returned 0x4d [0132.496] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc220) returned 1 [0132.496] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000D.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000d.bin"), fInfoLevelId=0x0, lpFileInformation=0x22e13b0 | out: lpFileInformation=0x22e13b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ab21b10, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6ab21b10, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6ab21b10, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x1cce)) returned 1 [0132.496] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1e0) returned 1 [0132.496] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000D.bin", nBufferLength=0x105, lpBuffer=0x3bbc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000D.bin", lpFilePart=0x0) returned 0x4d [0132.496] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc120) returned 1 [0132.496] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000D.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000d.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0132.497] GetFileType (hFile=0x444) returned 0x1 [0132.497] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc090) returned 1 [0132.497] GetFileType (hFile=0x444) returned 0x1 [0132.497] ReadFile (in: hFile=0x444, lpBuffer=0x22e3790, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bc1f8, lpOverlapped=0x0 | out: lpBuffer=0x22e3790*, lpNumberOfBytesRead=0x3bc1f8*=0x1000, lpOverlapped=0x0) returned 1 [0132.548] CloseHandle (hObject=0x444) returned 1 [0132.548] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000D.bin", nBufferLength=0x105, lpBuffer=0x3bbc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000D.bin", lpFilePart=0x0) returned 0x4d [0132.549] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc120) returned 1 [0132.549] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000D.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000d.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0132.549] GetFileType (hFile=0x444) returned 0x1 [0132.549] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc090) returned 1 [0132.549] GetFileType (hFile=0x444) returned 0x1 [0132.549] WriteFile (in: hFile=0x444, lpBuffer=0x235e630*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x3bc2a8, lpOverlapped=0x0 | out: lpBuffer=0x235e630*, lpNumberOfBytesWritten=0x3bc2a8*=0x1010, lpOverlapped=0x0) returned 1 [0132.549] CloseHandle (hObject=0x444) returned 1 [0132.549] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000D.bin", nBufferLength=0x105, lpBuffer=0x3bbda0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000D.bin", lpFilePart=0x0) returned 0x4d [0132.549] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000D.bin.xuy", nBufferLength=0x105, lpBuffer=0x3bbda0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000D.bin.xuy", lpFilePart=0x0) returned 0x51 [0132.549] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc1e0) returned 1 [0132.549] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000D.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000d.bin"), fInfoLevelId=0x0, lpFileInformation=0x3bc2c0 | out: lpFileInformation=0x3bc2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ab21b10, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6ab21b10, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x3adaeaec, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x1cce)) returned 1 [0132.549] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1a0) returned 1 [0132.549] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000D.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000d.bin"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000D.bin.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000d.bin.xuy")) returned 1 [0132.554] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000F.bin", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000F.bin", lpFilePart=0x0) returned 0x4d [0132.554] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0132.554] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000F.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000f.bin"), fInfoLevelId=0x0, lpFileInformation=0x235fb68 | out: lpFileInformation=0x235fb68*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x6ab47d5d, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6ab47d5d, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6ab47d5d, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x12ef)) returned 1 [0132.556] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0132.556] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000F.bin", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000F.bin", lpFilePart=0x0) returned 0x4d [0132.556] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0132.556] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000F.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000f.bin"), fInfoLevelId=0x0, lpFileInformation=0x235fcc0 | out: lpFileInformation=0x235fcc0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x6ab47d5d, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6ab47d5d, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6ab47d5d, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x12ef)) returned 1 [0132.556] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0132.556] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000F.bin", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000F.bin", lpFilePart=0x0) returned 0x4d [0132.556] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0132.556] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000F.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000f.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0132.561] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb100) returned 1 [0132.562] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000F.bin", nBufferLength=0x105, lpBuffer=0x3bbd80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000F.bin", lpFilePart=0x0) returned 0x4d [0132.562] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc220) returned 1 [0132.562] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000F.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000f.bin"), fInfoLevelId=0x0, lpFileInformation=0x3bc300 | out: lpFileInformation=0x3bc300*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x6ab47d5d, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6ab47d5d, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6ab47d5d, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x12ef)) returned 1 [0132.562] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1e0) returned 1 [0132.562] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000F.bin", nBufferLength=0x105, lpBuffer=0x3bbda0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000F.bin", lpFilePart=0x0) returned 0x4d [0132.562] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000F.bin", dwFileAttributes=0x20) returned 1 [0132.562] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000F.bin", nBufferLength=0x105, lpBuffer=0x3bbda0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000F.bin", lpFilePart=0x0) returned 0x4d [0132.562] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc220) returned 1 [0132.562] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000F.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000f.bin"), fInfoLevelId=0x0, lpFileInformation=0x21633a0 | out: lpFileInformation=0x21633a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ab47d5d, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6ab47d5d, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6ab47d5d, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x12ef)) returned 1 [0132.562] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1e0) returned 1 [0132.562] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000F.bin", nBufferLength=0x105, lpBuffer=0x3bbda0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000F.bin", lpFilePart=0x0) returned 0x4d [0132.562] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc220) returned 1 [0132.563] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000F.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000f.bin"), fInfoLevelId=0x0, lpFileInformation=0x21634f8 | out: lpFileInformation=0x21634f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ab47d5d, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6ab47d5d, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6ab47d5d, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x12ef)) returned 1 [0132.563] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1e0) returned 1 [0132.563] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000F.bin", nBufferLength=0x105, lpBuffer=0x3bbc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000F.bin", lpFilePart=0x0) returned 0x4d [0132.563] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc120) returned 1 [0132.563] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000F.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000f.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0132.563] GetFileType (hFile=0x444) returned 0x1 [0132.563] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc090) returned 1 [0132.564] GetFileType (hFile=0x444) returned 0x1 [0132.564] ReadFile (in: hFile=0x444, lpBuffer=0x21658d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bc1f8, lpOverlapped=0x0 | out: lpBuffer=0x21658d8*, lpNumberOfBytesRead=0x3bc1f8*=0x1000, lpOverlapped=0x0) returned 1 [0132.610] CloseHandle (hObject=0x444) returned 1 [0132.610] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000F.bin", nBufferLength=0x105, lpBuffer=0x3bbc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000F.bin", lpFilePart=0x0) returned 0x4d [0132.610] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc120) returned 1 [0132.610] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000F.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000f.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0132.610] GetFileType (hFile=0x444) returned 0x1 [0132.610] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc090) returned 1 [0132.610] GetFileType (hFile=0x444) returned 0x1 [0132.610] WriteFile (in: hFile=0x444, lpBuffer=0x21e0778*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x3bc2a8, lpOverlapped=0x0 | out: lpBuffer=0x21e0778*, lpNumberOfBytesWritten=0x3bc2a8*=0x1010, lpOverlapped=0x0) returned 1 [0132.611] CloseHandle (hObject=0x444) returned 1 [0132.611] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000F.bin", nBufferLength=0x105, lpBuffer=0x3bbda0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000F.bin", lpFilePart=0x0) returned 0x4d [0132.611] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000F.bin.xuy", nBufferLength=0x105, lpBuffer=0x3bbda0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000F.bin.xuy", lpFilePart=0x0) returned 0x51 [0132.611] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc1e0) returned 1 [0132.611] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000F.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000f.bin"), fInfoLevelId=0x0, lpFileInformation=0x3bc2c0 | out: lpFileInformation=0x3bc2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ab47d5d, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6ab47d5d, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x3ae4742b, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x12ef)) returned 1 [0132.611] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1a0) returned 1 [0132.611] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000F.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000f.bin"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000F.bin.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000f.bin.xuy")) returned 1 [0132.613] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000G.bin", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000G.bin", lpFilePart=0x0) returned 0x4d [0132.613] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0132.613] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000G.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000g.bin"), fInfoLevelId=0x0, lpFileInformation=0x21e1cb0 | out: lpFileInformation=0x21e1cb0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x6ab47d5d, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6ab47d5d, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6ab6dfb5, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x8a2)) returned 1 [0132.613] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0132.613] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000G.bin", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000G.bin", lpFilePart=0x0) returned 0x4d [0132.613] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0132.613] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000G.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000g.bin"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0132.613] GetFileType (hFile=0x444) returned 0x1 [0132.613] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0132.613] GetFileType (hFile=0x444) returned 0x1 [0132.613] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x8a2 [0132.613] ReadFile (in: hFile=0x444, lpBuffer=0x21e2820, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x21e2820*, lpNumberOfBytesRead=0x3be6a8*=0x8a2, lpOverlapped=0x0) returned 1 [0132.615] CloseHandle (hObject=0x444) returned 1 [0132.631] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000G.bin", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000G.bin", lpFilePart=0x0) returned 0x4d [0132.631] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0132.631] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000G.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000g.bin"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0132.633] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb070) returned 1 [0132.633] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000G.bin", nBufferLength=0x105, lpBuffer=0x3bbcf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000G.bin", lpFilePart=0x0) returned 0x4d [0132.633] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0132.633] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000G.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000g.bin"), fInfoLevelId=0x0, lpFileInformation=0x3bc270 | out: lpFileInformation=0x3bc270*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x6ab47d5d, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6ab47d5d, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6ab6dfb5, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x8a2)) returned 1 [0132.633] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc150) returned 1 [0132.633] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000G.bin", nBufferLength=0x105, lpBuffer=0x3bbd10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000G.bin", lpFilePart=0x0) returned 0x4d [0132.633] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000G.bin", dwFileAttributes=0x20) returned 1 [0132.634] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000G.bin", nBufferLength=0x105, lpBuffer=0x3bbd10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000G.bin", lpFilePart=0x0) returned 0x4d [0132.634] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0132.634] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000G.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000g.bin"), fInfoLevelId=0x0, lpFileInformation=0x225cc90 | out: lpFileInformation=0x225cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ab47d5d, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6ab47d5d, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6ab6dfb5, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x8a2)) returned 1 [0132.634] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc150) returned 1 [0132.634] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000G.bin", nBufferLength=0x105, lpBuffer=0x3bbb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000G.bin", lpFilePart=0x0) returned 0x4d [0132.634] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc050) returned 1 [0132.634] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000G.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000g.bin"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0132.634] GetFileType (hFile=0x444) returned 0x1 [0132.634] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbfc0) returned 1 [0132.634] GetFileType (hFile=0x444) returned 0x1 [0132.634] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc1e8 | out: lpFileSizeHigh=0x3bc1e8*=0x0) returned 0x8a2 [0132.634] ReadFile (in: hFile=0x444, lpBuffer=0x225d800, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bc118, lpOverlapped=0x0 | out: lpBuffer=0x225d800*, lpNumberOfBytesRead=0x3bc118*=0x8a2, lpOverlapped=0x0) returned 1 [0132.634] CloseHandle (hObject=0x444) returned 1 [0132.689] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000G.bin", nBufferLength=0x105, lpBuffer=0x3bbb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000G.bin", lpFilePart=0x0) returned 0x4d [0132.689] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc050) returned 1 [0132.689] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000G.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000g.bin"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0132.691] GetFileType (hFile=0x444) returned 0x1 [0132.691] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbfc0) returned 1 [0132.691] GetFileType (hFile=0x444) returned 0x1 [0132.691] WriteFile (in: hFile=0x444, lpBuffer=0x22d7360*, nNumberOfBytesToWrite=0x8b0, lpNumberOfBytesWritten=0x3bc028, lpOverlapped=0x0 | out: lpBuffer=0x22d7360*, lpNumberOfBytesWritten=0x3bc028*=0x8b0, lpOverlapped=0x0) returned 1 [0132.692] CloseHandle (hObject=0x444) returned 1 [0132.692] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000G.bin", nBufferLength=0x105, lpBuffer=0x3bbd10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000G.bin", lpFilePart=0x0) returned 0x4d [0132.692] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000G.bin.xuy", nBufferLength=0x105, lpBuffer=0x3bbd10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000G.bin.xuy", lpFilePart=0x0) returned 0x51 [0132.692] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc150) returned 1 [0132.692] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000G.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000g.bin"), fInfoLevelId=0x0, lpFileInformation=0x3bc230 | out: lpFileInformation=0x3bc230*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ab47d5d, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6ab47d5d, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x3af05f16, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x8b0)) returned 1 [0132.693] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc110) returned 1 [0132.693] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000G.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000g.bin"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000G.bin.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000g.bin.xuy")) returned 1 [0132.707] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000H.bin", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000H.bin", lpFilePart=0x0) returned 0x4d [0132.707] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0132.707] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000H.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000h.bin"), fInfoLevelId=0x0, lpFileInformation=0x22d85f8 | out: lpFileInformation=0x22d85f8*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x6ab6dfb5, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6ab6dfb5, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6ab6dfb5, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x679)) returned 1 [0132.708] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0132.708] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000H.bin", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000H.bin", lpFilePart=0x0) returned 0x4d [0132.708] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0132.708] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000H.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000h.bin"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0132.708] GetFileType (hFile=0x444) returned 0x1 [0132.708] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0132.708] GetFileType (hFile=0x444) returned 0x1 [0132.708] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x679 [0132.708] ReadFile (in: hFile=0x444, lpBuffer=0x22d8f40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x22d8f40*, lpNumberOfBytesRead=0x3be6a8*=0x679, lpOverlapped=0x0) returned 1 [0132.710] CloseHandle (hObject=0x444) returned 1 [0132.726] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000H.bin", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000H.bin", lpFilePart=0x0) returned 0x4d [0132.726] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0132.727] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000H.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000h.bin"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0132.728] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb070) returned 1 [0132.729] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000H.bin", nBufferLength=0x105, lpBuffer=0x3bbcf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000H.bin", lpFilePart=0x0) returned 0x4d [0132.729] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0132.729] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000H.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000h.bin"), fInfoLevelId=0x0, lpFileInformation=0x3bc270 | out: lpFileInformation=0x3bc270*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x6ab6dfb5, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6ab6dfb5, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6ab6dfb5, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x679)) returned 1 [0132.729] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc150) returned 1 [0132.729] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000H.bin", nBufferLength=0x105, lpBuffer=0x3bbd10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000H.bin", lpFilePart=0x0) returned 0x4d [0132.729] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000H.bin", dwFileAttributes=0x20) returned 1 [0132.730] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000H.bin", nBufferLength=0x105, lpBuffer=0x3bbd10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000H.bin", lpFilePart=0x0) returned 0x4d [0132.730] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0132.730] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000H.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000h.bin"), fInfoLevelId=0x0, lpFileInformation=0x23528b8 | out: lpFileInformation=0x23528b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ab6dfb5, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6ab6dfb5, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6ab6dfb5, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x679)) returned 1 [0132.730] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc150) returned 1 [0132.730] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000H.bin", nBufferLength=0x105, lpBuffer=0x3bbb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000H.bin", lpFilePart=0x0) returned 0x4d [0132.730] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc050) returned 1 [0132.730] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000H.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000h.bin"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0132.730] GetFileType (hFile=0x444) returned 0x1 [0132.730] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbfc0) returned 1 [0132.730] GetFileType (hFile=0x444) returned 0x1 [0132.730] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc1e8 | out: lpFileSizeHigh=0x3bc1e8*=0x0) returned 0x679 [0132.730] ReadFile (in: hFile=0x444, lpBuffer=0x2353200, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bc118, lpOverlapped=0x0 | out: lpBuffer=0x2353200*, lpNumberOfBytesRead=0x3bc118*=0x679, lpOverlapped=0x0) returned 1 [0132.731] CloseHandle (hObject=0x444) returned 1 [0132.786] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000H.bin", nBufferLength=0x105, lpBuffer=0x3bbb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000H.bin", lpFilePart=0x0) returned 0x4d [0132.786] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc050) returned 1 [0132.786] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000H.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000h.bin"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0132.788] GetFileType (hFile=0x444) returned 0x1 [0132.788] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbfc0) returned 1 [0132.788] GetFileType (hFile=0x444) returned 0x1 [0132.788] WriteFile (in: hFile=0x444, lpBuffer=0x21cad80*, nNumberOfBytesToWrite=0x680, lpNumberOfBytesWritten=0x3bc028, lpOverlapped=0x0 | out: lpBuffer=0x21cad80*, lpNumberOfBytesWritten=0x3bc028*=0x680, lpOverlapped=0x0) returned 1 [0132.789] CloseHandle (hObject=0x444) returned 1 [0132.789] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000H.bin", nBufferLength=0x105, lpBuffer=0x3bbd10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000H.bin", lpFilePart=0x0) returned 0x4d [0132.789] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000H.bin.xuy", nBufferLength=0x105, lpBuffer=0x3bbd10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000H.bin.xuy", lpFilePart=0x0) returned 0x51 [0132.789] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc150) returned 1 [0132.789] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000H.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000h.bin"), fInfoLevelId=0x0, lpFileInformation=0x3bc230 | out: lpFileInformation=0x3bc230*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ab6dfb5, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6ab6dfb5, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x3afeae04, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x680)) returned 1 [0132.789] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc110) returned 1 [0132.789] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000H.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000h.bin"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000H.bin.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000h.bin.xuy")) returned 1 [0132.791] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000I.bin", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000I.bin", lpFilePart=0x0) returned 0x4d [0132.791] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0132.791] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000I.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000i.bin"), fInfoLevelId=0x0, lpFileInformation=0x21cc018 | out: lpFileInformation=0x21cc018*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x6ab6dfb5, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6ab6dfb5, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6ab94205, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0xf27)) returned 1 [0132.791] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0132.791] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000I.bin", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000I.bin", lpFilePart=0x0) returned 0x4d [0132.791] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0132.791] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000I.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000i.bin"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0132.791] GetFileType (hFile=0x444) returned 0x1 [0132.791] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0132.791] GetFileType (hFile=0x444) returned 0x1 [0132.791] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0xf27 [0132.791] ReadFile (in: hFile=0x444, lpBuffer=0x21cd208, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x21cd208*, lpNumberOfBytesRead=0x3be6a8*=0xf27, lpOverlapped=0x0) returned 1 [0132.793] CloseHandle (hObject=0x444) returned 1 [0132.844] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000I.bin", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000I.bin", lpFilePart=0x0) returned 0x4d [0132.844] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0132.844] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000I.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000i.bin"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0132.846] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb070) returned 1 [0132.847] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000I.bin", nBufferLength=0x105, lpBuffer=0x3bbcf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000I.bin", lpFilePart=0x0) returned 0x4d [0132.847] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0132.847] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000I.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000i.bin"), fInfoLevelId=0x0, lpFileInformation=0x3bc270 | out: lpFileInformation=0x3bc270*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x6ab6dfb5, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6ab6dfb5, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6ab94205, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0xf27)) returned 1 [0132.847] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc150) returned 1 [0132.847] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000I.bin", nBufferLength=0x105, lpBuffer=0x3bbd10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000I.bin", lpFilePart=0x0) returned 0x4d [0132.847] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000I.bin", dwFileAttributes=0x20) returned 1 [0132.848] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000I.bin", nBufferLength=0x105, lpBuffer=0x3bbd10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000I.bin", lpFilePart=0x0) returned 0x4d [0132.848] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0132.848] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000I.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000i.bin"), fInfoLevelId=0x0, lpFileInformation=0x22496f8 | out: lpFileInformation=0x22496f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ab6dfb5, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6ab6dfb5, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6ab94205, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0xf27)) returned 1 [0132.848] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc150) returned 1 [0132.848] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000I.bin", nBufferLength=0x105, lpBuffer=0x3bbb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000I.bin", lpFilePart=0x0) returned 0x4d [0132.848] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc050) returned 1 [0132.848] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000I.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000i.bin"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0132.848] GetFileType (hFile=0x444) returned 0x1 [0132.848] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbfc0) returned 1 [0132.848] GetFileType (hFile=0x444) returned 0x1 [0132.848] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc1e8 | out: lpFileSizeHigh=0x3bc1e8*=0x0) returned 0xf27 [0132.848] ReadFile (in: hFile=0x444, lpBuffer=0x224a8e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bc118, lpOverlapped=0x0 | out: lpBuffer=0x224a8e8*, lpNumberOfBytesRead=0x3bc118*=0xf27, lpOverlapped=0x0) returned 1 [0132.848] CloseHandle (hObject=0x444) returned 1 [0132.898] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000I.bin", nBufferLength=0x105, lpBuffer=0x3bbb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000I.bin", lpFilePart=0x0) returned 0x4d [0132.898] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc050) returned 1 [0132.898] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000I.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000i.bin"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0132.900] GetFileType (hFile=0x444) returned 0x1 [0132.900] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbfc0) returned 1 [0132.900] GetFileType (hFile=0x444) returned 0x1 [0132.900] WriteFile (in: hFile=0x444, lpBuffer=0x22c64c8*, nNumberOfBytesToWrite=0xf30, lpNumberOfBytesWritten=0x3bc028, lpOverlapped=0x0 | out: lpBuffer=0x22c64c8*, lpNumberOfBytesWritten=0x3bc028*=0xf30, lpOverlapped=0x0) returned 1 [0132.901] CloseHandle (hObject=0x444) returned 1 [0132.901] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000I.bin", nBufferLength=0x105, lpBuffer=0x3bbd10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000I.bin", lpFilePart=0x0) returned 0x4d [0132.901] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000I.bin.xuy", nBufferLength=0x105, lpBuffer=0x3bbd10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000I.bin.xuy", lpFilePart=0x0) returned 0x51 [0132.901] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc150) returned 1 [0132.901] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000I.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000i.bin"), fInfoLevelId=0x0, lpFileInformation=0x3bc230 | out: lpFileInformation=0x3bc230*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ab6dfb5, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6ab6dfb5, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x3b0f5eb8, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xf30)) returned 1 [0132.901] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc110) returned 1 [0132.901] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000I.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000i.bin"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000I.bin.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000i.bin.xuy")) returned 1 [0132.904] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000J.bin", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000J.bin", lpFilePart=0x0) returned 0x4d [0132.904] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0132.904] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000J.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000j.bin"), fInfoLevelId=0x0, lpFileInformation=0x22c7760 | out: lpFileInformation=0x22c7760*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x6ab94205, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6ab94205, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6ab94205, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x331c)) returned 1 [0132.905] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0132.905] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000J.bin", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000J.bin", lpFilePart=0x0) returned 0x4d [0132.905] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0132.905] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000J.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000j.bin"), fInfoLevelId=0x0, lpFileInformation=0x22c78b8 | out: lpFileInformation=0x22c78b8*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x6ab94205, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6ab94205, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6ab94205, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x331c)) returned 1 [0132.905] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0132.905] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000J.bin", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000J.bin", lpFilePart=0x0) returned 0x4d [0132.905] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0132.906] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000J.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000j.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0132.907] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb100) returned 1 [0132.907] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000J.bin", nBufferLength=0x105, lpBuffer=0x3bbd80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000J.bin", lpFilePart=0x0) returned 0x4d [0132.908] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc220) returned 1 [0132.908] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000J.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000j.bin"), fInfoLevelId=0x0, lpFileInformation=0x3bc300 | out: lpFileInformation=0x3bc300*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x6ab94205, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6ab94205, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6ab94205, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x331c)) returned 1 [0132.908] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1e0) returned 1 [0132.908] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000J.bin", nBufferLength=0x105, lpBuffer=0x3bbda0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000J.bin", lpFilePart=0x0) returned 0x4d [0132.908] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000J.bin", dwFileAttributes=0x20) returned 1 [0132.908] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000J.bin", nBufferLength=0x105, lpBuffer=0x3bbda0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000J.bin", lpFilePart=0x0) returned 0x4d [0132.908] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc220) returned 1 [0132.908] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000J.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000j.bin"), fInfoLevelId=0x0, lpFileInformation=0x22ca490 | out: lpFileInformation=0x22ca490*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ab94205, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6ab94205, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6ab94205, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x331c)) returned 1 [0132.909] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1e0) returned 1 [0132.909] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000J.bin", nBufferLength=0x105, lpBuffer=0x3bbda0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000J.bin", lpFilePart=0x0) returned 0x4d [0132.909] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc220) returned 1 [0132.909] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000J.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000j.bin"), fInfoLevelId=0x0, lpFileInformation=0x22ca5e8 | out: lpFileInformation=0x22ca5e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ab94205, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6ab94205, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6ab94205, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x331c)) returned 1 [0132.909] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1e0) returned 1 [0132.909] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000J.bin", nBufferLength=0x105, lpBuffer=0x3bbc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000J.bin", lpFilePart=0x0) returned 0x4d [0132.909] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc120) returned 1 [0132.909] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000J.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000j.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0132.910] GetFileType (hFile=0x444) returned 0x1 [0132.910] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc090) returned 1 [0132.910] GetFileType (hFile=0x444) returned 0x1 [0132.910] ReadFile (in: hFile=0x444, lpBuffer=0x22cc9c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bc1f8, lpOverlapped=0x0 | out: lpBuffer=0x22cc9c8*, lpNumberOfBytesRead=0x3bc1f8*=0x1000, lpOverlapped=0x0) returned 1 [0132.978] CloseHandle (hObject=0x444) returned 1 [0132.978] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000J.bin", nBufferLength=0x105, lpBuffer=0x3bbc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000J.bin", lpFilePart=0x0) returned 0x4d [0132.978] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc120) returned 1 [0132.978] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000J.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000j.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0132.979] GetFileType (hFile=0x444) returned 0x1 [0132.979] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc090) returned 1 [0132.979] GetFileType (hFile=0x444) returned 0x1 [0132.979] WriteFile (in: hFile=0x444, lpBuffer=0x2347868*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x3bc2a8, lpOverlapped=0x0 | out: lpBuffer=0x2347868*, lpNumberOfBytesWritten=0x3bc2a8*=0x1010, lpOverlapped=0x0) returned 1 [0132.980] CloseHandle (hObject=0x444) returned 1 [0132.980] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000J.bin", nBufferLength=0x105, lpBuffer=0x3bbda0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000J.bin", lpFilePart=0x0) returned 0x4d [0132.980] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000J.bin.xuy", nBufferLength=0x105, lpBuffer=0x3bbda0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000J.bin.xuy", lpFilePart=0x0) returned 0x51 [0132.980] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc1e0) returned 1 [0132.980] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000J.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000j.bin"), fInfoLevelId=0x0, lpFileInformation=0x3bc2c0 | out: lpFileInformation=0x3bc2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ab94205, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6ab94205, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x3b1b4ab0, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x331c)) returned 1 [0132.980] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1a0) returned 1 [0132.980] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000J.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000j.bin"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000J.bin.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000j.bin.xuy")) returned 1 [0132.982] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000L.bin", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000L.bin", lpFilePart=0x0) returned 0x4d [0132.982] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0132.982] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000L.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000l.bin"), fInfoLevelId=0x0, lpFileInformation=0x2348da0 | out: lpFileInformation=0x2348da0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x6abba4f3, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6abba4f3, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6abe06b7, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x91c)) returned 1 [0133.013] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0133.013] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000L.bin", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000L.bin", lpFilePart=0x0) returned 0x4d [0133.013] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0133.013] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000L.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000l.bin"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0133.013] GetFileType (hFile=0x444) returned 0x1 [0133.013] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0133.013] GetFileType (hFile=0x444) returned 0x1 [0133.013] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x91c [0133.014] ReadFile (in: hFile=0x444, lpBuffer=0x2349988, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x2349988*, lpNumberOfBytesRead=0x3be6a8*=0x91c, lpOverlapped=0x0) returned 1 [0133.015] CloseHandle (hObject=0x444) returned 1 [0133.073] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000L.bin", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000L.bin", lpFilePart=0x0) returned 0x4d [0133.073] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0133.073] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000L.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000l.bin"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0133.074] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb070) returned 1 [0133.075] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000L.bin", nBufferLength=0x105, lpBuffer=0x3bbcf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000L.bin", lpFilePart=0x0) returned 0x4d [0133.075] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0133.075] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000L.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000l.bin"), fInfoLevelId=0x0, lpFileInformation=0x3bc270 | out: lpFileInformation=0x3bc270*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x6abba4f3, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6abba4f3, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6abe06b7, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x91c)) returned 1 [0133.075] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc150) returned 1 [0133.075] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000L.bin", nBufferLength=0x105, lpBuffer=0x3bbd10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000L.bin", lpFilePart=0x0) returned 0x4d [0133.075] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000L.bin", dwFileAttributes=0x20) returned 1 [0133.076] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000L.bin", nBufferLength=0x105, lpBuffer=0x3bbd10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000L.bin", lpFilePart=0x0) returned 0x4d [0133.076] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0133.076] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000L.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000l.bin"), fInfoLevelId=0x0, lpFileInformation=0x21c3f48 | out: lpFileInformation=0x21c3f48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6abba4f3, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6abba4f3, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6abe06b7, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x91c)) returned 1 [0133.077] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc150) returned 1 [0133.077] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000L.bin", nBufferLength=0x105, lpBuffer=0x3bbb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000L.bin", lpFilePart=0x0) returned 0x4d [0133.077] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc050) returned 1 [0133.077] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000L.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000l.bin"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0133.077] GetFileType (hFile=0x444) returned 0x1 [0133.077] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbfc0) returned 1 [0133.077] GetFileType (hFile=0x444) returned 0x1 [0133.077] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc1e8 | out: lpFileSizeHigh=0x3bc1e8*=0x0) returned 0x91c [0133.077] ReadFile (in: hFile=0x444, lpBuffer=0x21c4b30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bc118, lpOverlapped=0x0 | out: lpBuffer=0x21c4b30*, lpNumberOfBytesRead=0x3bc118*=0x91c, lpOverlapped=0x0) returned 1 [0133.077] CloseHandle (hObject=0x444) returned 1 [0133.121] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000L.bin", nBufferLength=0x105, lpBuffer=0x3bbb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000L.bin", lpFilePart=0x0) returned 0x4d [0133.121] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc050) returned 1 [0133.121] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000L.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000l.bin"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0133.123] GetFileType (hFile=0x444) returned 0x1 [0133.123] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbfc0) returned 1 [0133.123] GetFileType (hFile=0x444) returned 0x1 [0133.123] WriteFile (in: hFile=0x444, lpBuffer=0x223e8b8*, nNumberOfBytesToWrite=0x920, lpNumberOfBytesWritten=0x3bc028, lpOverlapped=0x0 | out: lpBuffer=0x223e8b8*, lpNumberOfBytesWritten=0x3bc028*=0x920, lpOverlapped=0x0) returned 1 [0133.124] CloseHandle (hObject=0x444) returned 1 [0133.124] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000L.bin", nBufferLength=0x105, lpBuffer=0x3bbd10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000L.bin", lpFilePart=0x0) returned 0x4d [0133.124] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000L.bin.xuy", nBufferLength=0x105, lpBuffer=0x3bbd10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000L.bin.xuy", lpFilePart=0x0) returned 0x51 [0133.124] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc150) returned 1 [0133.124] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000L.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000l.bin"), fInfoLevelId=0x0, lpFileInformation=0x3bc230 | out: lpFileInformation=0x3bc230*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6abba4f3, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6abba4f3, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x3b3328bc, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x920)) returned 1 [0133.125] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc110) returned 1 [0133.125] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000L.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000l.bin"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000L.bin.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000l.bin.xuy")) returned 1 [0133.126] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000M.bin", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000M.bin", lpFilePart=0x0) returned 0x4d [0133.126] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0133.126] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000M.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000m.bin"), fInfoLevelId=0x0, lpFileInformation=0x223fb50 | out: lpFileInformation=0x223fb50*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x6abe06b7, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6abe06b7, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6abe06b7, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x1055)) returned 1 [0133.127] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0133.127] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000M.bin", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000M.bin", lpFilePart=0x0) returned 0x4d [0133.127] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0133.127] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000M.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000m.bin"), fInfoLevelId=0x0, lpFileInformation=0x223fca8 | out: lpFileInformation=0x223fca8*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x6abe06b7, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6abe06b7, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6abe06b7, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x1055)) returned 1 [0133.127] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0133.127] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000M.bin", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000M.bin", lpFilePart=0x0) returned 0x4d [0133.127] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0133.127] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000M.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000m.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0133.128] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb100) returned 1 [0133.128] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000M.bin", nBufferLength=0x105, lpBuffer=0x3bbd80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000M.bin", lpFilePart=0x0) returned 0x4d [0133.128] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc220) returned 1 [0133.129] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000M.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000m.bin"), fInfoLevelId=0x0, lpFileInformation=0x3bc300 | out: lpFileInformation=0x3bc300*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x6abe06b7, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6abe06b7, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6abe06b7, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x1055)) returned 1 [0133.129] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1e0) returned 1 [0133.129] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000M.bin", nBufferLength=0x105, lpBuffer=0x3bbda0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000M.bin", lpFilePart=0x0) returned 0x4d [0133.129] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000M.bin", dwFileAttributes=0x20) returned 1 [0133.129] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000M.bin", nBufferLength=0x105, lpBuffer=0x3bbda0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000M.bin", lpFilePart=0x0) returned 0x4d [0133.129] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc220) returned 1 [0133.129] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000M.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000m.bin"), fInfoLevelId=0x0, lpFileInformation=0x2242880 | out: lpFileInformation=0x2242880*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6abe06b7, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6abe06b7, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6abe06b7, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x1055)) returned 1 [0133.129] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1e0) returned 1 [0133.129] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000M.bin", nBufferLength=0x105, lpBuffer=0x3bbda0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000M.bin", lpFilePart=0x0) returned 0x4d [0133.129] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc220) returned 1 [0133.129] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000M.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000m.bin"), fInfoLevelId=0x0, lpFileInformation=0x22429d8 | out: lpFileInformation=0x22429d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6abe06b7, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6abe06b7, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6abe06b7, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x1055)) returned 1 [0133.129] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1e0) returned 1 [0133.129] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000M.bin", nBufferLength=0x105, lpBuffer=0x3bbc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000M.bin", lpFilePart=0x0) returned 0x4d [0133.129] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc120) returned 1 [0133.130] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000M.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000m.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0133.130] GetFileType (hFile=0x444) returned 0x1 [0133.130] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc090) returned 1 [0133.130] GetFileType (hFile=0x444) returned 0x1 [0133.130] ReadFile (in: hFile=0x444, lpBuffer=0x2244db8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bc1f8, lpOverlapped=0x0 | out: lpBuffer=0x2244db8*, lpNumberOfBytesRead=0x3bc1f8*=0x1000, lpOverlapped=0x0) returned 1 [0133.183] CloseHandle (hObject=0x444) returned 1 [0133.183] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000M.bin", nBufferLength=0x105, lpBuffer=0x3bbc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000M.bin", lpFilePart=0x0) returned 0x4d [0133.183] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc120) returned 1 [0133.183] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000M.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000m.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0133.183] GetFileType (hFile=0x444) returned 0x1 [0133.183] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc090) returned 1 [0133.183] GetFileType (hFile=0x444) returned 0x1 [0133.183] WriteFile (in: hFile=0x444, lpBuffer=0x22bfc58*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x3bc2a8, lpOverlapped=0x0 | out: lpBuffer=0x22bfc58*, lpNumberOfBytesWritten=0x3bc2a8*=0x1010, lpOverlapped=0x0) returned 1 [0133.184] CloseHandle (hObject=0x444) returned 1 [0133.184] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000M.bin", nBufferLength=0x105, lpBuffer=0x3bbda0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000M.bin", lpFilePart=0x0) returned 0x4d [0133.184] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000M.bin.xuy", nBufferLength=0x105, lpBuffer=0x3bbda0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000M.bin.xuy", lpFilePart=0x0) returned 0x51 [0133.184] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc1e0) returned 1 [0133.184] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000M.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000m.bin"), fInfoLevelId=0x0, lpFileInformation=0x3bc2c0 | out: lpFileInformation=0x3bc2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6abe06b7, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6abe06b7, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x3b3a4c78, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x1055)) returned 1 [0133.184] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1a0) returned 1 [0133.184] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000M.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000m.bin"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000M.bin.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000m.bin.xuy")) returned 1 [0133.186] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000N.bin", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000N.bin", lpFilePart=0x0) returned 0x4d [0133.186] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0133.186] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000N.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000n.bin"), fInfoLevelId=0x0, lpFileInformation=0x22c1190 | out: lpFileInformation=0x22c1190*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x6abe06b7, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6abe06b7, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6abe06b7, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x586a)) returned 1 [0133.187] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0133.187] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000N.bin", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000N.bin", lpFilePart=0x0) returned 0x4d [0133.187] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0133.187] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000N.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000n.bin"), fInfoLevelId=0x0, lpFileInformation=0x22c12e8 | out: lpFileInformation=0x22c12e8*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x6abe06b7, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6abe06b7, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6abe06b7, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x586a)) returned 1 [0133.187] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0133.187] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000N.bin", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000N.bin", lpFilePart=0x0) returned 0x4d [0133.187] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0133.188] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000N.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000n.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0133.189] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb100) returned 1 [0133.189] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000N.bin", nBufferLength=0x105, lpBuffer=0x3bbd80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000N.bin", lpFilePart=0x0) returned 0x4d [0133.189] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc220) returned 1 [0133.189] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000N.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000n.bin"), fInfoLevelId=0x0, lpFileInformation=0x3bc300 | out: lpFileInformation=0x3bc300*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x6abe06b7, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6abe06b7, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6abe06b7, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x586a)) returned 1 [0133.189] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1e0) returned 1 [0133.189] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000N.bin", nBufferLength=0x105, lpBuffer=0x3bbda0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000N.bin", lpFilePart=0x0) returned 0x4d [0133.190] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000N.bin", dwFileAttributes=0x20) returned 1 [0133.190] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000N.bin", nBufferLength=0x105, lpBuffer=0x3bbda0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000N.bin", lpFilePart=0x0) returned 0x4d [0133.190] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc220) returned 1 [0133.190] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000N.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000n.bin"), fInfoLevelId=0x0, lpFileInformation=0x22c3ec0 | out: lpFileInformation=0x22c3ec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6abe06b7, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6abe06b7, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6abe06b7, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x586a)) returned 1 [0133.190] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1e0) returned 1 [0133.190] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000N.bin", nBufferLength=0x105, lpBuffer=0x3bbda0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000N.bin", lpFilePart=0x0) returned 0x4d [0133.190] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc220) returned 1 [0133.190] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000N.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000n.bin"), fInfoLevelId=0x0, lpFileInformation=0x22c4018 | out: lpFileInformation=0x22c4018*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6abe06b7, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6abe06b7, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6abe06b7, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x586a)) returned 1 [0133.191] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1e0) returned 1 [0133.191] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000N.bin", nBufferLength=0x105, lpBuffer=0x3bbc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000N.bin", lpFilePart=0x0) returned 0x4d [0133.191] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc120) returned 1 [0133.191] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000N.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000n.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0133.191] GetFileType (hFile=0x444) returned 0x1 [0133.191] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc090) returned 1 [0133.192] GetFileType (hFile=0x444) returned 0x1 [0133.192] ReadFile (in: hFile=0x444, lpBuffer=0x22c63f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bc1f8, lpOverlapped=0x0 | out: lpBuffer=0x22c63f8*, lpNumberOfBytesRead=0x3bc1f8*=0x1000, lpOverlapped=0x0) returned 1 [0133.236] CloseHandle (hObject=0x444) returned 1 [0133.237] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000N.bin", nBufferLength=0x105, lpBuffer=0x3bbc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000N.bin", lpFilePart=0x0) returned 0x4d [0133.237] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc120) returned 1 [0133.237] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000N.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000n.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0133.237] GetFileType (hFile=0x444) returned 0x1 [0133.237] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc090) returned 1 [0133.237] GetFileType (hFile=0x444) returned 0x1 [0133.237] WriteFile (in: hFile=0x444, lpBuffer=0x2341298*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x3bc2a8, lpOverlapped=0x0 | out: lpBuffer=0x2341298*, lpNumberOfBytesWritten=0x3bc2a8*=0x1010, lpOverlapped=0x0) returned 1 [0133.237] CloseHandle (hObject=0x444) returned 1 [0133.237] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000N.bin", nBufferLength=0x105, lpBuffer=0x3bbda0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000N.bin", lpFilePart=0x0) returned 0x4d [0133.237] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000N.bin.xuy", nBufferLength=0x105, lpBuffer=0x3bbda0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000N.bin.xuy", lpFilePart=0x0) returned 0x51 [0133.237] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc1e0) returned 1 [0133.237] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000N.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000n.bin"), fInfoLevelId=0x0, lpFileInformation=0x3bc2c0 | out: lpFileInformation=0x3bc2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6abe06b7, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6abe06b7, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x3b43d1f7, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x586a)) returned 1 [0133.238] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1a0) returned 1 [0133.238] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000N.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000n.bin"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000N.bin.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000n.bin.xuy")) returned 1 [0133.239] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000O.bin", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000O.bin", lpFilePart=0x0) returned 0x4d [0133.239] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0133.239] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000O.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000o.bin"), fInfoLevelId=0x0, lpFileInformation=0x23427d0 | out: lpFileInformation=0x23427d0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x6ac06910, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6ac06910, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6ac06910, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x3e83)) returned 1 [0133.240] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0133.240] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000O.bin", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000O.bin", lpFilePart=0x0) returned 0x4d [0133.240] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0133.240] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000O.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000o.bin"), fInfoLevelId=0x0, lpFileInformation=0x2342928 | out: lpFileInformation=0x2342928*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x6ac06910, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6ac06910, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6ac06910, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x3e83)) returned 1 [0133.240] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0133.240] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000O.bin", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000O.bin", lpFilePart=0x0) returned 0x4d [0133.240] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0133.240] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000O.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000o.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0133.241] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb100) returned 1 [0133.241] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000O.bin", nBufferLength=0x105, lpBuffer=0x3bbd80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000O.bin", lpFilePart=0x0) returned 0x4d [0133.241] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc220) returned 1 [0133.242] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000O.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000o.bin"), fInfoLevelId=0x0, lpFileInformation=0x3bc300 | out: lpFileInformation=0x3bc300*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x6ac06910, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6ac06910, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6ac06910, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x3e83)) returned 1 [0133.242] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1e0) returned 1 [0133.242] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000O.bin", nBufferLength=0x105, lpBuffer=0x3bbda0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000O.bin", lpFilePart=0x0) returned 0x4d [0133.242] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000O.bin", dwFileAttributes=0x20) returned 1 [0133.242] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000O.bin", nBufferLength=0x105, lpBuffer=0x3bbda0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000O.bin", lpFilePart=0x0) returned 0x4d [0133.242] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc220) returned 1 [0133.242] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000O.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000o.bin"), fInfoLevelId=0x0, lpFileInformation=0x2345500 | out: lpFileInformation=0x2345500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ac06910, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6ac06910, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6ac06910, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x3e83)) returned 1 [0133.242] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1e0) returned 1 [0133.242] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000O.bin", nBufferLength=0x105, lpBuffer=0x3bbda0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000O.bin", lpFilePart=0x0) returned 0x4d [0133.242] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc220) returned 1 [0133.242] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000O.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000o.bin"), fInfoLevelId=0x0, lpFileInformation=0x2345658 | out: lpFileInformation=0x2345658*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ac06910, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6ac06910, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6ac06910, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x3e83)) returned 1 [0133.242] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1e0) returned 1 [0133.243] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000O.bin", nBufferLength=0x105, lpBuffer=0x3bbc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000O.bin", lpFilePart=0x0) returned 0x4d [0133.243] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc120) returned 1 [0133.243] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000O.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000o.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0133.243] GetFileType (hFile=0x444) returned 0x1 [0133.243] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc090) returned 1 [0133.243] GetFileType (hFile=0x444) returned 0x1 [0133.243] ReadFile (in: hFile=0x444, lpBuffer=0x2347a38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bc1f8, lpOverlapped=0x0 | out: lpBuffer=0x2347a38*, lpNumberOfBytesRead=0x3bc1f8*=0x1000, lpOverlapped=0x0) returned 1 [0133.287] CloseHandle (hObject=0x444) returned 1 [0133.287] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000O.bin", nBufferLength=0x105, lpBuffer=0x3bbc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000O.bin", lpFilePart=0x0) returned 0x4d [0133.287] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc120) returned 1 [0133.288] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000O.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000o.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0133.288] GetFileType (hFile=0x444) returned 0x1 [0133.288] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc090) returned 1 [0133.288] GetFileType (hFile=0x444) returned 0x1 [0133.288] WriteFile (in: hFile=0x444, lpBuffer=0x21c5530*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x3bc2a8, lpOverlapped=0x0 | out: lpBuffer=0x21c5530*, lpNumberOfBytesWritten=0x3bc2a8*=0x1010, lpOverlapped=0x0) returned 1 [0133.288] CloseHandle (hObject=0x444) returned 1 [0133.288] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000O.bin", nBufferLength=0x105, lpBuffer=0x3bbda0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000O.bin", lpFilePart=0x0) returned 0x4d [0133.288] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000O.bin.xuy", nBufferLength=0x105, lpBuffer=0x3bbda0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000O.bin.xuy", lpFilePart=0x0) returned 0x51 [0133.288] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc1e0) returned 1 [0133.288] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000O.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000o.bin"), fInfoLevelId=0x0, lpFileInformation=0x3bc2c0 | out: lpFileInformation=0x3bc2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ac06910, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6ac06910, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x3b4af834, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x3e83)) returned 1 [0133.288] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1a0) returned 1 [0133.288] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000O.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000o.bin"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000O.bin.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000o.bin.xuy")) returned 1 [0133.290] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000P.bin", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000P.bin", lpFilePart=0x0) returned 0x4d [0133.290] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0133.290] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000P.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000p.bin"), fInfoLevelId=0x0, lpFileInformation=0x21c6a68 | out: lpFileInformation=0x21c6a68*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x6ac06910, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6ac06910, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6ac06910, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x4389)) returned 1 [0133.290] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0133.290] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000P.bin", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000P.bin", lpFilePart=0x0) returned 0x4d [0133.290] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0133.290] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000P.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000p.bin"), fInfoLevelId=0x0, lpFileInformation=0x21c6bc0 | out: lpFileInformation=0x21c6bc0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x6ac06910, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6ac06910, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6ac06910, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x4389)) returned 1 [0133.290] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0133.290] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000P.bin", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000P.bin", lpFilePart=0x0) returned 0x4d [0133.290] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0133.290] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000P.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000p.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0133.291] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb100) returned 1 [0133.292] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000P.bin", nBufferLength=0x105, lpBuffer=0x3bbd80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000P.bin", lpFilePart=0x0) returned 0x4d [0133.292] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc220) returned 1 [0133.292] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000P.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000p.bin"), fInfoLevelId=0x0, lpFileInformation=0x3bc300 | out: lpFileInformation=0x3bc300*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x6ac06910, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6ac06910, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6ac06910, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x4389)) returned 1 [0133.292] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1e0) returned 1 [0133.292] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000P.bin", nBufferLength=0x105, lpBuffer=0x3bbda0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000P.bin", lpFilePart=0x0) returned 0x4d [0133.292] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000P.bin", dwFileAttributes=0x20) returned 1 [0133.292] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000P.bin", nBufferLength=0x105, lpBuffer=0x3bbda0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000P.bin", lpFilePart=0x0) returned 0x4d [0133.292] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc220) returned 1 [0133.292] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000P.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000p.bin"), fInfoLevelId=0x0, lpFileInformation=0x21c9798 | out: lpFileInformation=0x21c9798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ac06910, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6ac06910, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6ac06910, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x4389)) returned 1 [0133.292] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1e0) returned 1 [0133.292] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000P.bin", nBufferLength=0x105, lpBuffer=0x3bbda0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000P.bin", lpFilePart=0x0) returned 0x4d [0133.292] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc220) returned 1 [0133.292] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000P.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000p.bin"), fInfoLevelId=0x0, lpFileInformation=0x21c98f0 | out: lpFileInformation=0x21c98f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ac06910, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6ac06910, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6ac06910, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x4389)) returned 1 [0133.293] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1e0) returned 1 [0133.293] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000P.bin", nBufferLength=0x105, lpBuffer=0x3bbc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000P.bin", lpFilePart=0x0) returned 0x4d [0133.293] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc120) returned 1 [0133.293] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000P.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000p.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0133.293] GetFileType (hFile=0x444) returned 0x1 [0133.293] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc090) returned 1 [0133.293] GetFileType (hFile=0x444) returned 0x1 [0133.293] ReadFile (in: hFile=0x444, lpBuffer=0x21cbcd0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bc1f8, lpOverlapped=0x0 | out: lpBuffer=0x21cbcd0*, lpNumberOfBytesRead=0x3bc1f8*=0x1000, lpOverlapped=0x0) returned 1 [0133.344] CloseHandle (hObject=0x444) returned 1 [0133.345] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000P.bin", nBufferLength=0x105, lpBuffer=0x3bbc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000P.bin", lpFilePart=0x0) returned 0x4d [0133.345] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc120) returned 1 [0133.345] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000P.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000p.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0133.345] GetFileType (hFile=0x444) returned 0x1 [0133.345] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc090) returned 1 [0133.345] GetFileType (hFile=0x444) returned 0x1 [0133.345] WriteFile (in: hFile=0x444, lpBuffer=0x2246b70*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x3bc2a8, lpOverlapped=0x0 | out: lpBuffer=0x2246b70*, lpNumberOfBytesWritten=0x3bc2a8*=0x1010, lpOverlapped=0x0) returned 1 [0133.345] CloseHandle (hObject=0x444) returned 1 [0133.345] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000P.bin", nBufferLength=0x105, lpBuffer=0x3bbda0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000P.bin", lpFilePart=0x0) returned 0x4d [0133.345] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000P.bin.xuy", nBufferLength=0x105, lpBuffer=0x3bbda0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000P.bin.xuy", lpFilePart=0x0) returned 0x51 [0133.346] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc1e0) returned 1 [0133.346] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000P.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000p.bin"), fInfoLevelId=0x0, lpFileInformation=0x3bc2c0 | out: lpFileInformation=0x3bc2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ac06910, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6ac06910, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x3b541fdc, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x4389)) returned 1 [0133.346] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1a0) returned 1 [0133.346] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000P.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000p.bin"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000P.bin.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000p.bin.xuy")) returned 1 [0133.347] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000Q.bin", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000Q.bin", lpFilePart=0x0) returned 0x4d [0133.347] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0133.347] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000Q.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000q.bin"), fInfoLevelId=0x0, lpFileInformation=0x22480a8 | out: lpFileInformation=0x22480a8*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x6ac06910, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6ac06910, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6ac2cb5f, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x118a)) returned 1 [0133.348] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0133.348] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000Q.bin", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000Q.bin", lpFilePart=0x0) returned 0x4d [0133.348] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0133.348] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000Q.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000q.bin"), fInfoLevelId=0x0, lpFileInformation=0x2248200 | out: lpFileInformation=0x2248200*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x6ac06910, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6ac06910, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6ac2cb5f, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x118a)) returned 1 [0133.348] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0133.348] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000Q.bin", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000Q.bin", lpFilePart=0x0) returned 0x4d [0133.348] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0133.348] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000Q.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000q.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0133.350] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb100) returned 1 [0133.350] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000Q.bin", nBufferLength=0x105, lpBuffer=0x3bbd80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000Q.bin", lpFilePart=0x0) returned 0x4d [0133.350] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc220) returned 1 [0133.350] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000Q.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000q.bin"), fInfoLevelId=0x0, lpFileInformation=0x3bc300 | out: lpFileInformation=0x3bc300*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x6ac06910, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6ac06910, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6ac2cb5f, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x118a)) returned 1 [0133.350] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1e0) returned 1 [0133.350] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000Q.bin", nBufferLength=0x105, lpBuffer=0x3bbda0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000Q.bin", lpFilePart=0x0) returned 0x4d [0133.350] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000Q.bin", dwFileAttributes=0x20) returned 1 [0133.350] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000Q.bin", nBufferLength=0x105, lpBuffer=0x3bbda0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000Q.bin", lpFilePart=0x0) returned 0x4d [0133.351] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc220) returned 1 [0133.351] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000Q.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000q.bin"), fInfoLevelId=0x0, lpFileInformation=0x224add8 | out: lpFileInformation=0x224add8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ac06910, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6ac06910, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6ac2cb5f, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x118a)) returned 1 [0133.351] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1e0) returned 1 [0133.351] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000Q.bin", nBufferLength=0x105, lpBuffer=0x3bbda0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000Q.bin", lpFilePart=0x0) returned 0x4d [0133.351] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc220) returned 1 [0133.351] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000Q.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000q.bin"), fInfoLevelId=0x0, lpFileInformation=0x224af30 | out: lpFileInformation=0x224af30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ac06910, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6ac06910, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6ac2cb5f, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x118a)) returned 1 [0133.351] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1e0) returned 1 [0133.351] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000Q.bin", nBufferLength=0x105, lpBuffer=0x3bbc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000Q.bin", lpFilePart=0x0) returned 0x4d [0133.351] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc120) returned 1 [0133.351] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000Q.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000q.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0133.352] GetFileType (hFile=0x444) returned 0x1 [0133.352] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc090) returned 1 [0133.352] GetFileType (hFile=0x444) returned 0x1 [0133.352] ReadFile (in: hFile=0x444, lpBuffer=0x224d310, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bc1f8, lpOverlapped=0x0 | out: lpBuffer=0x224d310*, lpNumberOfBytesRead=0x3bc1f8*=0x1000, lpOverlapped=0x0) returned 1 [0133.391] CloseHandle (hObject=0x444) returned 1 [0133.392] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000Q.bin", nBufferLength=0x105, lpBuffer=0x3bbc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000Q.bin", lpFilePart=0x0) returned 0x4d [0133.392] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc120) returned 1 [0133.392] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000Q.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000q.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0133.392] GetFileType (hFile=0x444) returned 0x1 [0133.392] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc090) returned 1 [0133.392] GetFileType (hFile=0x444) returned 0x1 [0133.392] WriteFile (in: hFile=0x444, lpBuffer=0x22c81b0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x3bc2a8, lpOverlapped=0x0 | out: lpBuffer=0x22c81b0*, lpNumberOfBytesWritten=0x3bc2a8*=0x1010, lpOverlapped=0x0) returned 1 [0133.392] CloseHandle (hObject=0x444) returned 1 [0133.392] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000Q.bin", nBufferLength=0x105, lpBuffer=0x3bbda0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000Q.bin", lpFilePart=0x0) returned 0x4d [0133.392] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000Q.bin.xuy", nBufferLength=0x105, lpBuffer=0x3bbda0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000Q.bin.xuy", lpFilePart=0x0) returned 0x51 [0133.392] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc1e0) returned 1 [0133.393] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000Q.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000q.bin"), fInfoLevelId=0x0, lpFileInformation=0x3bc2c0 | out: lpFileInformation=0x3bc2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ac06910, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6ac06910, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x3b5b43d8, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x118a)) returned 1 [0133.393] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1a0) returned 1 [0133.393] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000Q.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000q.bin"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000Q.bin.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000q.bin.xuy")) returned 1 [0133.394] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000R.bin", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000R.bin", lpFilePart=0x0) returned 0x4d [0133.394] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0133.394] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000R.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000r.bin"), fInfoLevelId=0x0, lpFileInformation=0x22c96e8 | out: lpFileInformation=0x22c96e8*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x6ac2cb5f, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6ac2cb5f, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6ac2cb5f, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x1ff8)) returned 1 [0133.396] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0133.396] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000R.bin", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000R.bin", lpFilePart=0x0) returned 0x4d [0133.396] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0133.396] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000R.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000r.bin"), fInfoLevelId=0x0, lpFileInformation=0x22c9840 | out: lpFileInformation=0x22c9840*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x6ac2cb5f, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6ac2cb5f, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6ac2cb5f, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x1ff8)) returned 1 [0133.396] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0133.396] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000R.bin", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000R.bin", lpFilePart=0x0) returned 0x4d [0133.396] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0133.396] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000R.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000r.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0133.398] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb100) returned 1 [0133.398] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000R.bin", nBufferLength=0x105, lpBuffer=0x3bbd80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000R.bin", lpFilePart=0x0) returned 0x4d [0133.398] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc220) returned 1 [0133.398] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000R.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000r.bin"), fInfoLevelId=0x0, lpFileInformation=0x3bc300 | out: lpFileInformation=0x3bc300*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x6ac2cb5f, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6ac2cb5f, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6ac2cb5f, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x1ff8)) returned 1 [0133.398] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1e0) returned 1 [0133.398] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000R.bin", nBufferLength=0x105, lpBuffer=0x3bbda0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000R.bin", lpFilePart=0x0) returned 0x4d [0133.398] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000R.bin", dwFileAttributes=0x20) returned 1 [0133.399] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000R.bin", nBufferLength=0x105, lpBuffer=0x3bbda0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000R.bin", lpFilePart=0x0) returned 0x4d [0133.399] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc220) returned 1 [0133.399] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000R.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000r.bin"), fInfoLevelId=0x0, lpFileInformation=0x22cc418 | out: lpFileInformation=0x22cc418*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ac2cb5f, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6ac2cb5f, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6ac2cb5f, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x1ff8)) returned 1 [0133.399] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1e0) returned 1 [0133.399] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000R.bin", nBufferLength=0x105, lpBuffer=0x3bbda0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000R.bin", lpFilePart=0x0) returned 0x4d [0133.399] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc220) returned 1 [0133.399] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000R.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000r.bin"), fInfoLevelId=0x0, lpFileInformation=0x22cc570 | out: lpFileInformation=0x22cc570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ac2cb5f, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6ac2cb5f, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6ac2cb5f, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x1ff8)) returned 1 [0133.399] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1e0) returned 1 [0133.399] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000R.bin", nBufferLength=0x105, lpBuffer=0x3bbc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000R.bin", lpFilePart=0x0) returned 0x4d [0133.400] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc120) returned 1 [0133.400] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000R.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000r.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0133.400] GetFileType (hFile=0x444) returned 0x1 [0133.400] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc090) returned 1 [0133.400] GetFileType (hFile=0x444) returned 0x1 [0133.401] ReadFile (in: hFile=0x444, lpBuffer=0x22ce950, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bc1f8, lpOverlapped=0x0 | out: lpBuffer=0x22ce950*, lpNumberOfBytesRead=0x3bc1f8*=0x1000, lpOverlapped=0x0) returned 1 [0133.442] CloseHandle (hObject=0x444) returned 1 [0133.442] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000R.bin", nBufferLength=0x105, lpBuffer=0x3bbc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000R.bin", lpFilePart=0x0) returned 0x4d [0133.442] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc120) returned 1 [0133.442] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000R.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000r.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0133.442] GetFileType (hFile=0x444) returned 0x1 [0133.442] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc090) returned 1 [0133.442] GetFileType (hFile=0x444) returned 0x1 [0133.442] WriteFile (in: hFile=0x444, lpBuffer=0x23497f0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x3bc2a8, lpOverlapped=0x0 | out: lpBuffer=0x23497f0*, lpNumberOfBytesWritten=0x3bc2a8*=0x1010, lpOverlapped=0x0) returned 1 [0133.443] CloseHandle (hObject=0x444) returned 1 [0133.443] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000R.bin", nBufferLength=0x105, lpBuffer=0x3bbda0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000R.bin", lpFilePart=0x0) returned 0x4d [0133.443] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000R.bin.xuy", nBufferLength=0x105, lpBuffer=0x3bbda0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000R.bin.xuy", lpFilePart=0x0) returned 0x51 [0133.443] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc1e0) returned 1 [0133.443] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000R.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000r.bin"), fInfoLevelId=0x0, lpFileInformation=0x3bc2c0 | out: lpFileInformation=0x3bc2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ac2cb5f, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6ac2cb5f, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x3b626ca6, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x1ff8)) returned 1 [0133.443] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1a0) returned 1 [0133.443] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000R.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000r.bin"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000R.bin.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000r.bin.xuy")) returned 1 [0133.444] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000S.bin", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000S.bin", lpFilePart=0x0) returned 0x4d [0133.444] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0133.444] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000S.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000s.bin"), fInfoLevelId=0x0, lpFileInformation=0x234ad28 | out: lpFileInformation=0x234ad28*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x6ac2cb5f, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6ac2cb5f, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6ac52dc8, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x1055)) returned 1 [0133.444] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0133.444] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000S.bin", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000S.bin", lpFilePart=0x0) returned 0x4d [0133.444] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0133.445] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000S.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000s.bin"), fInfoLevelId=0x0, lpFileInformation=0x234ae80 | out: lpFileInformation=0x234ae80*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x6ac2cb5f, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6ac2cb5f, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6ac52dc8, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x1055)) returned 1 [0133.445] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0133.445] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000S.bin", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000S.bin", lpFilePart=0x0) returned 0x4d [0133.445] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0133.445] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000S.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000s.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0133.446] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb100) returned 1 [0133.446] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000S.bin", nBufferLength=0x105, lpBuffer=0x3bbd80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000S.bin", lpFilePart=0x0) returned 0x4d [0133.446] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc220) returned 1 [0133.446] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000S.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000s.bin"), fInfoLevelId=0x0, lpFileInformation=0x3bc300 | out: lpFileInformation=0x3bc300*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x6ac2cb5f, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6ac2cb5f, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6ac52dc8, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x1055)) returned 1 [0133.446] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1e0) returned 1 [0133.446] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000S.bin", nBufferLength=0x105, lpBuffer=0x3bbda0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000S.bin", lpFilePart=0x0) returned 0x4d [0133.446] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000S.bin", dwFileAttributes=0x20) returned 1 [0133.447] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000S.bin", nBufferLength=0x105, lpBuffer=0x3bbda0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000S.bin", lpFilePart=0x0) returned 0x4d [0133.447] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc220) returned 1 [0133.447] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000S.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000s.bin"), fInfoLevelId=0x0, lpFileInformation=0x234da58 | out: lpFileInformation=0x234da58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ac2cb5f, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6ac2cb5f, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6ac52dc8, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x1055)) returned 1 [0133.447] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1e0) returned 1 [0133.447] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000S.bin", nBufferLength=0x105, lpBuffer=0x3bbda0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000S.bin", lpFilePart=0x0) returned 0x4d [0133.447] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc220) returned 1 [0133.447] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000S.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000s.bin"), fInfoLevelId=0x0, lpFileInformation=0x234dbb0 | out: lpFileInformation=0x234dbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ac2cb5f, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6ac2cb5f, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6ac52dc8, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x1055)) returned 1 [0133.447] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1e0) returned 1 [0133.447] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000S.bin", nBufferLength=0x105, lpBuffer=0x3bbc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000S.bin", lpFilePart=0x0) returned 0x4d [0133.447] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc120) returned 1 [0133.447] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000S.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000s.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0133.448] GetFileType (hFile=0x444) returned 0x1 [0133.448] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc090) returned 1 [0133.448] GetFileType (hFile=0x444) returned 0x1 [0133.448] ReadFile (in: hFile=0x444, lpBuffer=0x234ff90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bc1f8, lpOverlapped=0x0 | out: lpBuffer=0x234ff90*, lpNumberOfBytesRead=0x3bc1f8*=0x1000, lpOverlapped=0x0) returned 1 [0133.491] CloseHandle (hObject=0x444) returned 1 [0133.491] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000S.bin", nBufferLength=0x105, lpBuffer=0x3bbc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000S.bin", lpFilePart=0x0) returned 0x4d [0133.491] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc120) returned 1 [0133.492] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000S.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000s.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0133.492] GetFileType (hFile=0x444) returned 0x1 [0133.492] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc090) returned 1 [0133.492] GetFileType (hFile=0x444) returned 0x1 [0133.492] WriteFile (in: hFile=0x444, lpBuffer=0x21cae10*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x3bc2a8, lpOverlapped=0x0 | out: lpBuffer=0x21cae10*, lpNumberOfBytesWritten=0x3bc2a8*=0x1010, lpOverlapped=0x0) returned 1 [0133.492] CloseHandle (hObject=0x444) returned 1 [0133.492] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000S.bin", nBufferLength=0x105, lpBuffer=0x3bbda0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000S.bin", lpFilePart=0x0) returned 0x4d [0133.492] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000S.bin.xuy", nBufferLength=0x105, lpBuffer=0x3bbda0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000S.bin.xuy", lpFilePart=0x0) returned 0x51 [0133.492] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc1e0) returned 1 [0133.492] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000S.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000s.bin"), fInfoLevelId=0x0, lpFileInformation=0x3bc2c0 | out: lpFileInformation=0x3bc2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ac2cb5f, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6ac2cb5f, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x3b6991ba, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x1055)) returned 1 [0133.492] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1a0) returned 1 [0133.492] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000S.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000s.bin"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000S.bin.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000s.bin.xuy")) returned 1 [0133.494] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000T.bin", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000T.bin", lpFilePart=0x0) returned 0x4d [0133.494] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0133.494] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000T.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000t.bin"), fInfoLevelId=0x0, lpFileInformation=0x21cc348 | out: lpFileInformation=0x21cc348*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x6ac52dc8, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6ac52dc8, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6ac52dc8, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x105e)) returned 1 [0133.494] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0133.494] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000T.bin", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000T.bin", lpFilePart=0x0) returned 0x4d [0133.494] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0133.494] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000T.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000t.bin"), fInfoLevelId=0x0, lpFileInformation=0x21cc4a0 | out: lpFileInformation=0x21cc4a0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x6ac52dc8, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6ac52dc8, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6ac52dc8, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x105e)) returned 1 [0133.494] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0133.494] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000T.bin", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000T.bin", lpFilePart=0x0) returned 0x4d [0133.494] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0133.494] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000T.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000t.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0133.496] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb100) returned 1 [0133.496] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000T.bin", nBufferLength=0x105, lpBuffer=0x3bbd80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000T.bin", lpFilePart=0x0) returned 0x4d [0133.496] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc220) returned 1 [0133.496] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000T.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000t.bin"), fInfoLevelId=0x0, lpFileInformation=0x3bc300 | out: lpFileInformation=0x3bc300*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x6ac52dc8, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6ac52dc8, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6ac52dc8, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x105e)) returned 1 [0133.496] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1e0) returned 1 [0133.496] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000T.bin", nBufferLength=0x105, lpBuffer=0x3bbda0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000T.bin", lpFilePart=0x0) returned 0x4d [0133.496] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000T.bin", dwFileAttributes=0x20) returned 1 [0133.496] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000T.bin", nBufferLength=0x105, lpBuffer=0x3bbda0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000T.bin", lpFilePart=0x0) returned 0x4d [0133.496] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc220) returned 1 [0133.497] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000T.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000t.bin"), fInfoLevelId=0x0, lpFileInformation=0x21cf078 | out: lpFileInformation=0x21cf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ac52dc8, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6ac52dc8, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6ac52dc8, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x105e)) returned 1 [0133.497] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1e0) returned 1 [0133.497] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000T.bin", nBufferLength=0x105, lpBuffer=0x3bbda0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000T.bin", lpFilePart=0x0) returned 0x4d [0133.497] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc220) returned 1 [0133.497] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000T.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000t.bin"), fInfoLevelId=0x0, lpFileInformation=0x21cf1d0 | out: lpFileInformation=0x21cf1d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ac52dc8, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6ac52dc8, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6ac52dc8, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x105e)) returned 1 [0133.497] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1e0) returned 1 [0133.497] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000T.bin", nBufferLength=0x105, lpBuffer=0x3bbc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000T.bin", lpFilePart=0x0) returned 0x4d [0133.497] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc120) returned 1 [0133.497] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000T.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000t.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0133.498] GetFileType (hFile=0x444) returned 0x1 [0133.498] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc090) returned 1 [0133.498] GetFileType (hFile=0x444) returned 0x1 [0133.498] ReadFile (in: hFile=0x444, lpBuffer=0x21d15b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bc1f8, lpOverlapped=0x0 | out: lpBuffer=0x21d15b0*, lpNumberOfBytesRead=0x3bc1f8*=0x1000, lpOverlapped=0x0) returned 1 [0133.546] CloseHandle (hObject=0x444) returned 1 [0133.546] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000T.bin", nBufferLength=0x105, lpBuffer=0x3bbc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000T.bin", lpFilePart=0x0) returned 0x4d [0133.546] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc120) returned 1 [0133.546] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000T.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000t.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0133.546] GetFileType (hFile=0x444) returned 0x1 [0133.546] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc090) returned 1 [0133.546] GetFileType (hFile=0x444) returned 0x1 [0133.546] WriteFile (in: hFile=0x444, lpBuffer=0x224c450*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x3bc2a8, lpOverlapped=0x0 | out: lpBuffer=0x224c450*, lpNumberOfBytesWritten=0x3bc2a8*=0x1010, lpOverlapped=0x0) returned 1 [0133.547] CloseHandle (hObject=0x444) returned 1 [0133.547] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000T.bin", nBufferLength=0x105, lpBuffer=0x3bbda0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000T.bin", lpFilePart=0x0) returned 0x4d [0133.547] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000T.bin.xuy", nBufferLength=0x105, lpBuffer=0x3bbda0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000T.bin.xuy", lpFilePart=0x0) returned 0x51 [0133.547] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc1e0) returned 1 [0133.547] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000T.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000t.bin"), fInfoLevelId=0x0, lpFileInformation=0x3bc2c0 | out: lpFileInformation=0x3bc2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ac52dc8, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6ac52dc8, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x3b731e78, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x105e)) returned 1 [0133.547] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1a0) returned 1 [0133.547] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000T.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000t.bin"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000T.bin.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000t.bin.xuy")) returned 1 [0133.548] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000U.bin", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000U.bin", lpFilePart=0x0) returned 0x4d [0133.548] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0133.548] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000U.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000u.bin"), fInfoLevelId=0x0, lpFileInformation=0x224d988 | out: lpFileInformation=0x224d988*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x6ac52dc8, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6ac52dc8, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6ac79004, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x35a9)) returned 1 [0133.550] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0133.550] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000U.bin", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000U.bin", lpFilePart=0x0) returned 0x4d [0133.550] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0133.550] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000U.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000u.bin"), fInfoLevelId=0x0, lpFileInformation=0x224dae0 | out: lpFileInformation=0x224dae0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x6ac52dc8, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6ac52dc8, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6ac79004, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x35a9)) returned 1 [0133.550] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0133.550] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000U.bin", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000U.bin", lpFilePart=0x0) returned 0x4d [0133.550] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0133.550] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000U.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000u.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0133.551] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb100) returned 1 [0133.552] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000U.bin", nBufferLength=0x105, lpBuffer=0x3bbd80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000U.bin", lpFilePart=0x0) returned 0x4d [0133.552] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc220) returned 1 [0133.552] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000U.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000u.bin"), fInfoLevelId=0x0, lpFileInformation=0x3bc300 | out: lpFileInformation=0x3bc300*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x6ac52dc8, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6ac52dc8, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6ac79004, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x35a9)) returned 1 [0133.552] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1e0) returned 1 [0133.552] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000U.bin", nBufferLength=0x105, lpBuffer=0x3bbda0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000U.bin", lpFilePart=0x0) returned 0x4d [0133.552] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000U.bin", dwFileAttributes=0x20) returned 1 [0133.552] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000U.bin", nBufferLength=0x105, lpBuffer=0x3bbda0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000U.bin", lpFilePart=0x0) returned 0x4d [0133.552] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc220) returned 1 [0133.552] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000U.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000u.bin"), fInfoLevelId=0x0, lpFileInformation=0x22506b8 | out: lpFileInformation=0x22506b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ac52dc8, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6ac52dc8, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6ac79004, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x35a9)) returned 1 [0133.552] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1e0) returned 1 [0133.552] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000U.bin", nBufferLength=0x105, lpBuffer=0x3bbda0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000U.bin", lpFilePart=0x0) returned 0x4d [0133.552] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc220) returned 1 [0133.552] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000U.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000u.bin"), fInfoLevelId=0x0, lpFileInformation=0x2250810 | out: lpFileInformation=0x2250810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ac52dc8, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6ac52dc8, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6ac79004, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x35a9)) returned 1 [0133.553] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1e0) returned 1 [0133.553] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000U.bin", nBufferLength=0x105, lpBuffer=0x3bbc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000U.bin", lpFilePart=0x0) returned 0x4d [0133.553] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc120) returned 1 [0133.553] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000U.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000u.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0133.553] GetFileType (hFile=0x444) returned 0x1 [0133.553] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc090) returned 1 [0133.554] GetFileType (hFile=0x444) returned 0x1 [0133.554] ReadFile (in: hFile=0x444, lpBuffer=0x2252bf0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bc1f8, lpOverlapped=0x0 | out: lpBuffer=0x2252bf0*, lpNumberOfBytesRead=0x3bc1f8*=0x1000, lpOverlapped=0x0) returned 1 [0133.616] CloseHandle (hObject=0x444) returned 1 [0133.616] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000U.bin", nBufferLength=0x105, lpBuffer=0x3bbc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000U.bin", lpFilePart=0x0) returned 0x4d [0133.616] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc120) returned 1 [0133.616] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000U.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000u.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0133.617] GetFileType (hFile=0x444) returned 0x1 [0133.617] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc090) returned 1 [0133.617] GetFileType (hFile=0x444) returned 0x1 [0133.617] WriteFile (in: hFile=0x444, lpBuffer=0x22cda90*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x3bc2a8, lpOverlapped=0x0 | out: lpBuffer=0x22cda90*, lpNumberOfBytesWritten=0x3bc2a8*=0x1010, lpOverlapped=0x0) returned 1 [0133.617] CloseHandle (hObject=0x444) returned 1 [0133.617] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000U.bin", nBufferLength=0x105, lpBuffer=0x3bbda0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000U.bin", lpFilePart=0x0) returned 0x4d [0133.617] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000U.bin.xuy", nBufferLength=0x105, lpBuffer=0x3bbda0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000U.bin.xuy", lpFilePart=0x0) returned 0x51 [0133.617] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc1e0) returned 1 [0133.617] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000U.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000u.bin"), fInfoLevelId=0x0, lpFileInformation=0x3bc2c0 | out: lpFileInformation=0x3bc2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ac52dc8, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6ac52dc8, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x3b7ca4cf, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x35a9)) returned 1 [0133.617] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1a0) returned 1 [0133.617] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000U.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000u.bin"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000U.bin.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000u.bin.xuy")) returned 1 [0133.619] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000V.bin", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000V.bin", lpFilePart=0x0) returned 0x4d [0133.619] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0133.619] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000V.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000v.bin"), fInfoLevelId=0x0, lpFileInformation=0x22cefc8 | out: lpFileInformation=0x22cefc8*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x6ac79004, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6ac79004, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6ac79004, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0xff1)) returned 1 [0133.619] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0133.619] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000V.bin", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000V.bin", lpFilePart=0x0) returned 0x4d [0133.619] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0133.619] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000V.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000v.bin"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0133.619] GetFileType (hFile=0x444) returned 0x1 [0133.619] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0133.619] GetFileType (hFile=0x444) returned 0x1 [0133.619] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0xff1 [0133.619] ReadFile (in: hFile=0x444, lpBuffer=0x22d0288, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x22d0288*, lpNumberOfBytesRead=0x3be6a8*=0xff1, lpOverlapped=0x0) returned 1 [0133.621] CloseHandle (hObject=0x444) returned 1 [0133.634] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000V.bin", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000V.bin", lpFilePart=0x0) returned 0x4d [0133.635] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0133.635] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000V.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000v.bin"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0133.637] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb070) returned 1 [0133.637] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000V.bin", nBufferLength=0x105, lpBuffer=0x3bbcf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000V.bin", lpFilePart=0x0) returned 0x4d [0133.638] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0133.638] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000V.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000v.bin"), fInfoLevelId=0x0, lpFileInformation=0x3bc270 | out: lpFileInformation=0x3bc270*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x6ac79004, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6ac79004, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6ac79004, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0xff1)) returned 1 [0133.638] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc150) returned 1 [0133.638] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000V.bin", nBufferLength=0x105, lpBuffer=0x3bbd10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000V.bin", lpFilePart=0x0) returned 0x4d [0133.638] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000V.bin", dwFileAttributes=0x20) returned 1 [0133.639] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000V.bin", nBufferLength=0x105, lpBuffer=0x3bbd10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000V.bin", lpFilePart=0x0) returned 0x4d [0133.639] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0133.639] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000V.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000v.bin"), fInfoLevelId=0x0, lpFileInformation=0x234cb88 | out: lpFileInformation=0x234cb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ac79004, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6ac79004, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6ac79004, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0xff1)) returned 1 [0133.639] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc150) returned 1 [0133.639] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000V.bin", nBufferLength=0x105, lpBuffer=0x3bbb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000V.bin", lpFilePart=0x0) returned 0x4d [0133.639] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc050) returned 1 [0133.639] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000V.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000v.bin"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0133.639] GetFileType (hFile=0x444) returned 0x1 [0133.639] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbfc0) returned 1 [0133.639] GetFileType (hFile=0x444) returned 0x1 [0133.639] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc1e8 | out: lpFileSizeHigh=0x3bc1e8*=0x0) returned 0xff1 [0133.640] ReadFile (in: hFile=0x444, lpBuffer=0x234de48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bc118, lpOverlapped=0x0 | out: lpBuffer=0x234de48*, lpNumberOfBytesRead=0x3bc118*=0xff1, lpOverlapped=0x0) returned 1 [0133.640] CloseHandle (hObject=0x444) returned 1 [0133.695] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000V.bin", nBufferLength=0x105, lpBuffer=0x3bbb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000V.bin", lpFilePart=0x0) returned 0x4d [0133.695] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc050) returned 1 [0133.695] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000V.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000v.bin"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0133.697] GetFileType (hFile=0x444) returned 0x1 [0133.697] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbfc0) returned 1 [0133.697] GetFileType (hFile=0x444) returned 0x1 [0133.697] WriteFile (in: hFile=0x444, lpBuffer=0x21c6a30*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x3bc178, lpOverlapped=0x0 | out: lpBuffer=0x21c6a30*, lpNumberOfBytesWritten=0x3bc178*=0x1000, lpOverlapped=0x0) returned 1 [0133.698] CloseHandle (hObject=0x444) returned 1 [0133.698] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000V.bin", nBufferLength=0x105, lpBuffer=0x3bbd10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000V.bin", lpFilePart=0x0) returned 0x4d [0133.698] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000V.bin.xuy", nBufferLength=0x105, lpBuffer=0x3bbd10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000V.bin.xuy", lpFilePart=0x0) returned 0x51 [0133.698] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc150) returned 1 [0133.698] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000V.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000v.bin"), fInfoLevelId=0x0, lpFileInformation=0x3bc230 | out: lpFileInformation=0x3bc230*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ac79004, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6ac79004, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x3b88906b, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0133.698] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc110) returned 1 [0133.698] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000V.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000v.bin"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000V.bin.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000v.bin.xuy")) returned 1 [0133.700] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000010.bin", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000010.bin", lpFilePart=0x0) returned 0x4d [0133.700] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0133.700] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000010.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000010.bin"), fInfoLevelId=0x0, lpFileInformation=0x21c7e40 | out: lpFileInformation=0x21c7e40*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x6ac79004, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6ac79004, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6ac79004, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x784)) returned 1 [0133.700] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0133.700] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000010.bin", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000010.bin", lpFilePart=0x0) returned 0x4d [0133.700] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0133.700] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000010.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000010.bin"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0133.700] GetFileType (hFile=0x444) returned 0x1 [0133.700] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0133.700] GetFileType (hFile=0x444) returned 0x1 [0133.700] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x784 [0133.700] ReadFile (in: hFile=0x444, lpBuffer=0x21c8890, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x21c8890*, lpNumberOfBytesRead=0x3be6a8*=0x784, lpOverlapped=0x0) returned 1 [0133.718] CloseHandle (hObject=0x444) returned 1 [0133.755] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000010.bin", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000010.bin", lpFilePart=0x0) returned 0x4d [0133.755] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0133.755] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000010.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000010.bin"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0133.757] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb070) returned 1 [0133.757] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000010.bin", nBufferLength=0x105, lpBuffer=0x3bbcf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000010.bin", lpFilePart=0x0) returned 0x4d [0133.757] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0133.757] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000010.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000010.bin"), fInfoLevelId=0x0, lpFileInformation=0x3bc270 | out: lpFileInformation=0x3bc270*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x6ac79004, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6ac79004, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6ac79004, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x784)) returned 1 [0133.757] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc150) returned 1 [0133.758] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000010.bin", nBufferLength=0x105, lpBuffer=0x3bbd10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000010.bin", lpFilePart=0x0) returned 0x4d [0133.758] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000010.bin", dwFileAttributes=0x20) returned 1 [0133.758] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000010.bin", nBufferLength=0x105, lpBuffer=0x3bbd10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000010.bin", lpFilePart=0x0) returned 0x4d [0133.758] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0133.758] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000010.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000010.bin"), fInfoLevelId=0x0, lpFileInformation=0x2242760 | out: lpFileInformation=0x2242760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ac79004, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6ac79004, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6ac79004, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x784)) returned 1 [0133.758] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc150) returned 1 [0133.758] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000010.bin", nBufferLength=0x105, lpBuffer=0x3bbb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000010.bin", lpFilePart=0x0) returned 0x4d [0133.758] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc050) returned 1 [0133.758] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000010.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000010.bin"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0133.759] GetFileType (hFile=0x444) returned 0x1 [0133.759] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbfc0) returned 1 [0133.759] GetFileType (hFile=0x444) returned 0x1 [0133.759] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc1e8 | out: lpFileSizeHigh=0x3bc1e8*=0x0) returned 0x784 [0133.759] ReadFile (in: hFile=0x444, lpBuffer=0x22431b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bc118, lpOverlapped=0x0 | out: lpBuffer=0x22431b0*, lpNumberOfBytesRead=0x3bc118*=0x784, lpOverlapped=0x0) returned 1 [0133.759] CloseHandle (hObject=0x444) returned 1 [0133.798] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000010.bin", nBufferLength=0x105, lpBuffer=0x3bbb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000010.bin", lpFilePart=0x0) returned 0x4d [0133.798] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc050) returned 1 [0133.798] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000010.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000010.bin"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0133.800] GetFileType (hFile=0x444) returned 0x1 [0133.800] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbfc0) returned 1 [0133.800] GetFileType (hFile=0x444) returned 0x1 [0133.800] WriteFile (in: hFile=0x444, lpBuffer=0x22bc770*, nNumberOfBytesToWrite=0x790, lpNumberOfBytesWritten=0x3bc028, lpOverlapped=0x0 | out: lpBuffer=0x22bc770*, lpNumberOfBytesWritten=0x3bc028*=0x790, lpOverlapped=0x0) returned 1 [0133.801] CloseHandle (hObject=0x444) returned 1 [0133.801] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000010.bin", nBufferLength=0x105, lpBuffer=0x3bbd10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000010.bin", lpFilePart=0x0) returned 0x4d [0133.801] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000010.bin.xuy", nBufferLength=0x105, lpBuffer=0x3bbd10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000010.bin.xuy", lpFilePart=0x0) returned 0x51 [0133.801] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc150) returned 1 [0133.801] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000010.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000010.bin"), fInfoLevelId=0x0, lpFileInformation=0x3bc230 | out: lpFileInformation=0x3bc230*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ac79004, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6ac79004, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x3b994097, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x790)) returned 1 [0133.801] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc110) returned 1 [0133.801] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000010.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000010.bin"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000010.bin.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000010.bin.xuy")) returned 1 [0133.802] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000011.bin", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000011.bin", lpFilePart=0x0) returned 0x4d [0133.802] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0133.803] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000011.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000011.bin"), fInfoLevelId=0x0, lpFileInformation=0x22bda08 | out: lpFileInformation=0x22bda08*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x6ac79004, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6ac79004, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6ac9f7f1, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0xa27)) returned 1 [0133.803] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0133.803] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000011.bin", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000011.bin", lpFilePart=0x0) returned 0x4d [0133.803] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0133.803] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000011.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000011.bin"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0133.803] GetFileType (hFile=0x444) returned 0x1 [0133.803] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0133.803] GetFileType (hFile=0x444) returned 0x1 [0133.803] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0xa27 [0133.803] ReadFile (in: hFile=0x444, lpBuffer=0x22be6f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x22be6f8*, lpNumberOfBytesRead=0x3be6a8*=0xa27, lpOverlapped=0x0) returned 1 [0133.811] CloseHandle (hObject=0x444) returned 1 [0133.826] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000011.bin", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000011.bin", lpFilePart=0x0) returned 0x4d [0133.826] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0133.826] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000011.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000011.bin"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0133.828] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb070) returned 1 [0133.828] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000011.bin", nBufferLength=0x105, lpBuffer=0x3bbcf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000011.bin", lpFilePart=0x0) returned 0x4d [0133.828] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0133.828] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000011.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000011.bin"), fInfoLevelId=0x0, lpFileInformation=0x3bc270 | out: lpFileInformation=0x3bc270*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x6ac79004, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6ac79004, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6ac9f7f1, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0xa27)) returned 1 [0133.828] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc150) returned 1 [0133.828] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000011.bin", nBufferLength=0x105, lpBuffer=0x3bbd10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000011.bin", lpFilePart=0x0) returned 0x4d [0133.828] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000011.bin", dwFileAttributes=0x20) returned 1 [0133.829] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000011.bin", nBufferLength=0x105, lpBuffer=0x3bbd10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000011.bin", lpFilePart=0x0) returned 0x4d [0133.829] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0133.829] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000011.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000011.bin"), fInfoLevelId=0x0, lpFileInformation=0x23392e8 | out: lpFileInformation=0x23392e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ac79004, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6ac79004, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6ac9f7f1, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0xa27)) returned 1 [0133.829] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc150) returned 1 [0133.829] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000011.bin", nBufferLength=0x105, lpBuffer=0x3bbb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000011.bin", lpFilePart=0x0) returned 0x4d [0133.829] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc050) returned 1 [0133.829] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000011.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000011.bin"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0133.829] GetFileType (hFile=0x444) returned 0x1 [0133.829] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbfc0) returned 1 [0133.829] GetFileType (hFile=0x444) returned 0x1 [0133.829] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc1e8 | out: lpFileSizeHigh=0x3bc1e8*=0x0) returned 0xa27 [0133.830] ReadFile (in: hFile=0x444, lpBuffer=0x2339fd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bc118, lpOverlapped=0x0 | out: lpBuffer=0x2339fd8*, lpNumberOfBytesRead=0x3bc118*=0xa27, lpOverlapped=0x0) returned 1 [0133.830] CloseHandle (hObject=0x444) returned 1 [0133.888] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000011.bin", nBufferLength=0x105, lpBuffer=0x3bbb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000011.bin", lpFilePart=0x0) returned 0x4d [0133.888] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc050) returned 1 [0133.888] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000011.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000011.bin"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0133.890] GetFileType (hFile=0x444) returned 0x1 [0133.890] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbfc0) returned 1 [0133.890] GetFileType (hFile=0x444) returned 0x1 [0133.890] WriteFile (in: hFile=0x444, lpBuffer=0x21b3c48*, nNumberOfBytesToWrite=0xa30, lpNumberOfBytesWritten=0x3bc028, lpOverlapped=0x0 | out: lpBuffer=0x21b3c48*, lpNumberOfBytesWritten=0x3bc028*=0xa30, lpOverlapped=0x0) returned 1 [0133.891] CloseHandle (hObject=0x444) returned 1 [0133.891] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000011.bin", nBufferLength=0x105, lpBuffer=0x3bbd10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000011.bin", lpFilePart=0x0) returned 0x4d [0133.892] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000011.bin.xuy", nBufferLength=0x105, lpBuffer=0x3bbd10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000011.bin.xuy", lpFilePart=0x0) returned 0x51 [0133.892] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc150) returned 1 [0133.892] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000011.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000011.bin"), fInfoLevelId=0x0, lpFileInformation=0x3bc230 | out: lpFileInformation=0x3bc230*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ac79004, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6ac79004, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x3ba7936a, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xa30)) returned 1 [0133.892] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc110) returned 1 [0133.892] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000011.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000011.bin"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000011.bin.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000011.bin.xuy")) returned 1 [0133.893] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000012.bin", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000012.bin", lpFilePart=0x0) returned 0x4d [0133.893] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0133.893] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000012.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000012.bin"), fInfoLevelId=0x0, lpFileInformation=0x21b4ee0 | out: lpFileInformation=0x21b4ee0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x6ac9f7f1, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6ac9f7f1, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6ac9f7f1, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x2cb9)) returned 1 [0133.894] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0133.894] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000012.bin", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000012.bin", lpFilePart=0x0) returned 0x4d [0133.894] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0133.894] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000012.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000012.bin"), fInfoLevelId=0x0, lpFileInformation=0x21b5038 | out: lpFileInformation=0x21b5038*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x6ac9f7f1, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6ac9f7f1, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6ac9f7f1, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x2cb9)) returned 1 [0133.894] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0133.894] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000012.bin", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000012.bin", lpFilePart=0x0) returned 0x4d [0133.894] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0133.894] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000012.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000012.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0133.896] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb100) returned 1 [0133.896] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000012.bin", nBufferLength=0x105, lpBuffer=0x3bbd80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000012.bin", lpFilePart=0x0) returned 0x4d [0133.896] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc220) returned 1 [0133.896] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000012.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000012.bin"), fInfoLevelId=0x0, lpFileInformation=0x3bc300 | out: lpFileInformation=0x3bc300*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x6ac9f7f1, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6ac9f7f1, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6ac9f7f1, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x2cb9)) returned 1 [0133.896] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1e0) returned 1 [0133.896] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000012.bin", nBufferLength=0x105, lpBuffer=0x3bbda0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000012.bin", lpFilePart=0x0) returned 0x4d [0133.896] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000012.bin", dwFileAttributes=0x20) returned 1 [0133.897] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000012.bin", nBufferLength=0x105, lpBuffer=0x3bbda0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000012.bin", lpFilePart=0x0) returned 0x4d [0133.897] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc220) returned 1 [0133.897] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000012.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000012.bin"), fInfoLevelId=0x0, lpFileInformation=0x21b7c10 | out: lpFileInformation=0x21b7c10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ac9f7f1, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6ac9f7f1, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6ac9f7f1, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x2cb9)) returned 1 [0133.897] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1e0) returned 1 [0133.897] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000012.bin", nBufferLength=0x105, lpBuffer=0x3bbda0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000012.bin", lpFilePart=0x0) returned 0x4d [0133.897] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc220) returned 1 [0133.897] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000012.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000012.bin"), fInfoLevelId=0x0, lpFileInformation=0x21b7d68 | out: lpFileInformation=0x21b7d68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ac9f7f1, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6ac9f7f1, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6ac9f7f1, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x2cb9)) returned 1 [0133.897] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1e0) returned 1 [0133.897] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000012.bin", nBufferLength=0x105, lpBuffer=0x3bbc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000012.bin", lpFilePart=0x0) returned 0x4d [0133.897] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc120) returned 1 [0133.897] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000012.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000012.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0133.898] GetFileType (hFile=0x444) returned 0x1 [0133.898] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc090) returned 1 [0133.898] GetFileType (hFile=0x444) returned 0x1 [0133.898] ReadFile (in: hFile=0x444, lpBuffer=0x21ba148, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bc1f8, lpOverlapped=0x0 | out: lpBuffer=0x21ba148*, lpNumberOfBytesRead=0x3bc1f8*=0x1000, lpOverlapped=0x0) returned 1 [0133.953] CloseHandle (hObject=0x444) returned 1 [0133.954] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000012.bin", nBufferLength=0x105, lpBuffer=0x3bbc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000012.bin", lpFilePart=0x0) returned 0x4d [0133.954] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc120) returned 1 [0133.954] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000012.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000012.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0133.954] GetFileType (hFile=0x444) returned 0x1 [0133.954] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc090) returned 1 [0133.954] GetFileType (hFile=0x444) returned 0x1 [0133.954] WriteFile (in: hFile=0x444, lpBuffer=0x2234fe8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x3bc2a8, lpOverlapped=0x0 | out: lpBuffer=0x2234fe8*, lpNumberOfBytesWritten=0x3bc2a8*=0x1010, lpOverlapped=0x0) returned 1 [0133.954] CloseHandle (hObject=0x444) returned 1 [0133.955] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000012.bin", nBufferLength=0x105, lpBuffer=0x3bbda0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000012.bin", lpFilePart=0x0) returned 0x4d [0133.955] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000012.bin.xuy", nBufferLength=0x105, lpBuffer=0x3bbda0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000012.bin.xuy", lpFilePart=0x0) returned 0x51 [0133.955] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc1e0) returned 1 [0133.955] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000012.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000012.bin"), fInfoLevelId=0x0, lpFileInformation=0x3bc2c0 | out: lpFileInformation=0x3bc2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ac9f7f1, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6ac9f7f1, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x3bb11929, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2cb9)) returned 1 [0133.955] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1a0) returned 1 [0133.955] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000012.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000012.bin"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000012.bin.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000012.bin.xuy")) returned 1 [0133.956] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000013.bin", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000013.bin", lpFilePart=0x0) returned 0x4d [0133.957] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0133.957] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000013.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000013.bin"), fInfoLevelId=0x0, lpFileInformation=0x2236520 | out: lpFileInformation=0x2236520*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x6ac9f7f1, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6ac9f7f1, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6ac9f7f1, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x38d9)) returned 1 [0133.958] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0133.958] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000013.bin", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000013.bin", lpFilePart=0x0) returned 0x4d [0133.958] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0133.958] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000013.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000013.bin"), fInfoLevelId=0x0, lpFileInformation=0x2236678 | out: lpFileInformation=0x2236678*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x6ac9f7f1, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6ac9f7f1, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6ac9f7f1, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x38d9)) returned 1 [0133.958] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0133.958] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000013.bin", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000013.bin", lpFilePart=0x0) returned 0x4d [0133.958] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0133.958] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000013.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000013.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0133.960] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb100) returned 1 [0133.960] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000013.bin", nBufferLength=0x105, lpBuffer=0x3bbd80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000013.bin", lpFilePart=0x0) returned 0x4d [0133.960] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc220) returned 1 [0133.960] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000013.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000013.bin"), fInfoLevelId=0x0, lpFileInformation=0x3bc300 | out: lpFileInformation=0x3bc300*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x6ac9f7f1, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6ac9f7f1, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6ac9f7f1, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x38d9)) returned 1 [0133.960] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1e0) returned 1 [0133.960] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000013.bin", nBufferLength=0x105, lpBuffer=0x3bbda0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000013.bin", lpFilePart=0x0) returned 0x4d [0133.960] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000013.bin", dwFileAttributes=0x20) returned 1 [0133.961] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000013.bin", nBufferLength=0x105, lpBuffer=0x3bbda0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000013.bin", lpFilePart=0x0) returned 0x4d [0133.961] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc220) returned 1 [0133.961] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000013.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000013.bin"), fInfoLevelId=0x0, lpFileInformation=0x2239250 | out: lpFileInformation=0x2239250*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ac9f7f1, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6ac9f7f1, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6ac9f7f1, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x38d9)) returned 1 [0133.961] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1e0) returned 1 [0133.961] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000013.bin", nBufferLength=0x105, lpBuffer=0x3bbda0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000013.bin", lpFilePart=0x0) returned 0x4d [0133.961] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc220) returned 1 [0133.961] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000013.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000013.bin"), fInfoLevelId=0x0, lpFileInformation=0x22393a8 | out: lpFileInformation=0x22393a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ac9f7f1, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6ac9f7f1, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6ac9f7f1, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x38d9)) returned 1 [0133.961] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1e0) returned 1 [0133.961] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000013.bin", nBufferLength=0x105, lpBuffer=0x3bbc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000013.bin", lpFilePart=0x0) returned 0x4d [0133.961] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc120) returned 1 [0133.961] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000013.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000013.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0133.962] GetFileType (hFile=0x444) returned 0x1 [0133.962] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc090) returned 1 [0133.962] GetFileType (hFile=0x444) returned 0x1 [0133.962] ReadFile (in: hFile=0x444, lpBuffer=0x223b788, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bc1f8, lpOverlapped=0x0 | out: lpBuffer=0x223b788*, lpNumberOfBytesRead=0x3bc1f8*=0x1000, lpOverlapped=0x0) returned 1 [0134.051] CloseHandle (hObject=0x444) returned 1 [0134.051] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000013.bin", nBufferLength=0x105, lpBuffer=0x3bbc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000013.bin", lpFilePart=0x0) returned 0x4d [0134.051] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc120) returned 1 [0134.051] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000013.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000013.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0134.051] GetFileType (hFile=0x444) returned 0x1 [0134.051] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc090) returned 1 [0134.051] GetFileType (hFile=0x444) returned 0x1 [0134.051] WriteFile (in: hFile=0x444, lpBuffer=0x22b6628*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x3bc2a8, lpOverlapped=0x0 | out: lpBuffer=0x22b6628*, lpNumberOfBytesWritten=0x3bc2a8*=0x1010, lpOverlapped=0x0) returned 1 [0134.051] CloseHandle (hObject=0x444) returned 1 [0134.052] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000013.bin", nBufferLength=0x105, lpBuffer=0x3bbda0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000013.bin", lpFilePart=0x0) returned 0x4d [0134.052] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000013.bin.xuy", nBufferLength=0x105, lpBuffer=0x3bbda0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000013.bin.xuy", lpFilePart=0x0) returned 0x51 [0134.052] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc1e0) returned 1 [0134.052] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000013.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000013.bin"), fInfoLevelId=0x0, lpFileInformation=0x3bc2c0 | out: lpFileInformation=0x3bc2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ac9f7f1, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6ac9f7f1, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x3bbf6a00, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x38d9)) returned 1 [0134.052] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1a0) returned 1 [0134.052] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000013.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000013.bin"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000013.bin.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000013.bin.xuy")) returned 1 [0134.054] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000014.bin", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000014.bin", lpFilePart=0x0) returned 0x4d [0134.054] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0134.054] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000014.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000014.bin"), fInfoLevelId=0x0, lpFileInformation=0x22b7b60 | out: lpFileInformation=0x22b7b60*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x6acc54cf, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6acc54cf, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6acc54cf, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x2c44)) returned 1 [0134.054] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0134.054] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000014.bin", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000014.bin", lpFilePart=0x0) returned 0x4d [0134.054] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0134.054] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000014.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000014.bin"), fInfoLevelId=0x0, lpFileInformation=0x22b7cb8 | out: lpFileInformation=0x22b7cb8*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x6acc54cf, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6acc54cf, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6acc54cf, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x2c44)) returned 1 [0134.054] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0134.055] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000014.bin", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000014.bin", lpFilePart=0x0) returned 0x4d [0134.055] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0134.055] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000014.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000014.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0134.056] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb100) returned 1 [0134.056] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000014.bin", nBufferLength=0x105, lpBuffer=0x3bbd80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000014.bin", lpFilePart=0x0) returned 0x4d [0134.056] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc220) returned 1 [0134.056] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000014.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000014.bin"), fInfoLevelId=0x0, lpFileInformation=0x3bc300 | out: lpFileInformation=0x3bc300*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x6acc54cf, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6acc54cf, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6acc54cf, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x2c44)) returned 1 [0134.056] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1e0) returned 1 [0134.056] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000014.bin", nBufferLength=0x105, lpBuffer=0x3bbda0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000014.bin", lpFilePart=0x0) returned 0x4d [0134.056] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000014.bin", dwFileAttributes=0x20) returned 1 [0134.057] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000014.bin", nBufferLength=0x105, lpBuffer=0x3bbda0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000014.bin", lpFilePart=0x0) returned 0x4d [0134.057] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc220) returned 1 [0134.057] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000014.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000014.bin"), fInfoLevelId=0x0, lpFileInformation=0x22ba890 | out: lpFileInformation=0x22ba890*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6acc54cf, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6acc54cf, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6acc54cf, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x2c44)) returned 1 [0134.057] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1e0) returned 1 [0134.057] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000014.bin", nBufferLength=0x105, lpBuffer=0x3bbda0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000014.bin", lpFilePart=0x0) returned 0x4d [0134.057] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc220) returned 1 [0134.057] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000014.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000014.bin"), fInfoLevelId=0x0, lpFileInformation=0x22ba9e8 | out: lpFileInformation=0x22ba9e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6acc54cf, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6acc54cf, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6acc54cf, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x2c44)) returned 1 [0134.057] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1e0) returned 1 [0134.057] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000014.bin", nBufferLength=0x105, lpBuffer=0x3bbc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000014.bin", lpFilePart=0x0) returned 0x4d [0134.057] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc120) returned 1 [0134.057] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000014.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000014.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0134.058] GetFileType (hFile=0x444) returned 0x1 [0134.058] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc090) returned 1 [0134.058] GetFileType (hFile=0x444) returned 0x1 [0134.058] ReadFile (in: hFile=0x444, lpBuffer=0x22bcdc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bc1f8, lpOverlapped=0x0 | out: lpBuffer=0x22bcdc8*, lpNumberOfBytesRead=0x3bc1f8*=0x1000, lpOverlapped=0x0) returned 1 [0134.133] CloseHandle (hObject=0x444) returned 1 [0134.133] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000014.bin", nBufferLength=0x105, lpBuffer=0x3bbc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000014.bin", lpFilePart=0x0) returned 0x4d [0134.133] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc120) returned 1 [0134.133] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000014.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000014.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0134.134] GetFileType (hFile=0x444) returned 0x1 [0134.134] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc090) returned 1 [0134.134] GetFileType (hFile=0x444) returned 0x1 [0134.134] WriteFile (in: hFile=0x444, lpBuffer=0x2337c68*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x3bc2a8, lpOverlapped=0x0 | out: lpBuffer=0x2337c68*, lpNumberOfBytesWritten=0x3bc2a8*=0x1010, lpOverlapped=0x0) returned 1 [0134.134] CloseHandle (hObject=0x444) returned 1 [0134.134] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000014.bin", nBufferLength=0x105, lpBuffer=0x3bbda0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000014.bin", lpFilePart=0x0) returned 0x4d [0134.134] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000014.bin.xuy", nBufferLength=0x105, lpBuffer=0x3bbda0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000014.bin.xuy", lpFilePart=0x0) returned 0x51 [0134.134] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc1e0) returned 1 [0134.134] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000014.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000014.bin"), fInfoLevelId=0x0, lpFileInformation=0x3bc2c0 | out: lpFileInformation=0x3bc2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6acc54cf, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6acc54cf, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x3bcb5705, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2c44)) returned 1 [0134.134] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1a0) returned 1 [0134.135] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000014.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000014.bin"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000014.bin.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000014.bin.xuy")) returned 1 [0134.137] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000015.bin", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000015.bin", lpFilePart=0x0) returned 0x4d [0134.137] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0134.138] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000015.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000015.bin"), fInfoLevelId=0x0, lpFileInformation=0x23391a0 | out: lpFileInformation=0x23391a0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x6acc54cf, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6acc54cf, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6acc54cf, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x33b9)) returned 1 [0134.139] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0134.140] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000015.bin", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000015.bin", lpFilePart=0x0) returned 0x4d [0134.140] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0134.140] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000015.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000015.bin"), fInfoLevelId=0x0, lpFileInformation=0x23392f8 | out: lpFileInformation=0x23392f8*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x6acc54cf, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6acc54cf, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6acc54cf, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x33b9)) returned 1 [0134.140] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0134.140] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000015.bin", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000015.bin", lpFilePart=0x0) returned 0x4d [0134.140] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0134.140] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000015.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000015.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0134.142] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb100) returned 1 [0134.142] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000015.bin", nBufferLength=0x105, lpBuffer=0x3bbd80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000015.bin", lpFilePart=0x0) returned 0x4d [0134.142] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc220) returned 1 [0134.142] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000015.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000015.bin"), fInfoLevelId=0x0, lpFileInformation=0x3bc300 | out: lpFileInformation=0x3bc300*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x6acc54cf, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6acc54cf, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6acc54cf, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x33b9)) returned 1 [0134.142] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1e0) returned 1 [0134.143] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000015.bin", nBufferLength=0x105, lpBuffer=0x3bbda0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000015.bin", lpFilePart=0x0) returned 0x4d [0134.143] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000015.bin", dwFileAttributes=0x20) returned 1 [0134.143] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000015.bin", nBufferLength=0x105, lpBuffer=0x3bbda0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000015.bin", lpFilePart=0x0) returned 0x4d [0134.143] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc220) returned 1 [0134.143] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000015.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000015.bin"), fInfoLevelId=0x0, lpFileInformation=0x233bed0 | out: lpFileInformation=0x233bed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6acc54cf, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6acc54cf, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6acc54cf, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x33b9)) returned 1 [0134.143] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1e0) returned 1 [0134.143] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000015.bin", nBufferLength=0x105, lpBuffer=0x3bbda0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000015.bin", lpFilePart=0x0) returned 0x4d [0134.144] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc220) returned 1 [0134.144] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000015.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000015.bin"), fInfoLevelId=0x0, lpFileInformation=0x233c028 | out: lpFileInformation=0x233c028*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6acc54cf, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6acc54cf, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6acc54cf, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x33b9)) returned 1 [0134.144] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1e0) returned 1 [0134.144] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000015.bin", nBufferLength=0x105, lpBuffer=0x3bbc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000015.bin", lpFilePart=0x0) returned 0x4d [0134.144] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc120) returned 1 [0134.144] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000015.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000015.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0134.145] GetFileType (hFile=0x444) returned 0x1 [0134.145] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc090) returned 1 [0134.145] GetFileType (hFile=0x444) returned 0x1 [0134.145] ReadFile (in: hFile=0x444, lpBuffer=0x233e408, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bc1f8, lpOverlapped=0x0 | out: lpBuffer=0x233e408*, lpNumberOfBytesRead=0x3bc1f8*=0x1000, lpOverlapped=0x0) returned 1 [0134.205] CloseHandle (hObject=0x444) returned 1 [0134.205] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000015.bin", nBufferLength=0x105, lpBuffer=0x3bbc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000015.bin", lpFilePart=0x0) returned 0x4d [0134.205] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc120) returned 1 [0134.205] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000015.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000015.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0134.205] GetFileType (hFile=0x444) returned 0x1 [0134.205] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc090) returned 1 [0134.206] GetFileType (hFile=0x444) returned 0x1 [0134.206] WriteFile (in: hFile=0x444, lpBuffer=0x21bbb50*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x3bc2a8, lpOverlapped=0x0 | out: lpBuffer=0x21bbb50*, lpNumberOfBytesWritten=0x3bc2a8*=0x1010, lpOverlapped=0x0) returned 1 [0134.206] CloseHandle (hObject=0x444) returned 1 [0134.206] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000015.bin", nBufferLength=0x105, lpBuffer=0x3bbda0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000015.bin", lpFilePart=0x0) returned 0x4d [0134.206] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000015.bin.xuy", nBufferLength=0x105, lpBuffer=0x3bbda0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000015.bin.xuy", lpFilePart=0x0) returned 0x51 [0134.206] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc1e0) returned 1 [0134.206] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000015.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000015.bin"), fInfoLevelId=0x0, lpFileInformation=0x3bc2c0 | out: lpFileInformation=0x3bc2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6acc54cf, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6acc54cf, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x3bd743fb, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x33b9)) returned 1 [0134.206] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1a0) returned 1 [0134.206] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000015.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000015.bin"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000015.bin.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000015.bin.xuy")) returned 1 [0134.208] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000016.bin", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000016.bin", lpFilePart=0x0) returned 0x4d [0134.208] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0134.208] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000016.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000016.bin"), fInfoLevelId=0x0, lpFileInformation=0x21bd088 | out: lpFileInformation=0x21bd088*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x6acc54cf, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6acc54cf, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6acc54cf, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x622)) returned 1 [0134.208] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0134.208] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000016.bin", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000016.bin", lpFilePart=0x0) returned 0x4d [0134.208] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0134.208] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000016.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000016.bin"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0134.209] GetFileType (hFile=0x444) returned 0x1 [0134.209] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0134.209] GetFileType (hFile=0x444) returned 0x1 [0134.209] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x622 [0134.209] ReadFile (in: hFile=0x444, lpBuffer=0x21bd978, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x21bd978*, lpNumberOfBytesRead=0x3be6a8*=0x622, lpOverlapped=0x0) returned 1 [0134.211] CloseHandle (hObject=0x444) returned 1 [0134.250] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000016.bin", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000016.bin", lpFilePart=0x0) returned 0x4d [0134.250] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0134.250] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000016.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000016.bin"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0134.252] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb070) returned 1 [0134.252] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000016.bin", nBufferLength=0x105, lpBuffer=0x3bbcf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000016.bin", lpFilePart=0x0) returned 0x4d [0134.252] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0134.252] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000016.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000016.bin"), fInfoLevelId=0x0, lpFileInformation=0x3bc270 | out: lpFileInformation=0x3bc270*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x6acc54cf, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6acc54cf, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6acc54cf, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x622)) returned 1 [0134.252] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc150) returned 1 [0134.252] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000016.bin", nBufferLength=0x105, lpBuffer=0x3bbd10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000016.bin", lpFilePart=0x0) returned 0x4d [0134.253] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000016.bin", dwFileAttributes=0x20) returned 1 [0134.253] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000016.bin", nBufferLength=0x105, lpBuffer=0x3bbd10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000016.bin", lpFilePart=0x0) returned 0x4d [0134.253] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0134.253] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000016.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000016.bin"), fInfoLevelId=0x0, lpFileInformation=0x2237168 | out: lpFileInformation=0x2237168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6acc54cf, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6acc54cf, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6acc54cf, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x622)) returned 1 [0134.253] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc150) returned 1 [0134.253] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000016.bin", nBufferLength=0x105, lpBuffer=0x3bbb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000016.bin", lpFilePart=0x0) returned 0x4d [0134.253] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc050) returned 1 [0134.253] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000016.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000016.bin"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0134.253] GetFileType (hFile=0x444) returned 0x1 [0134.253] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbfc0) returned 1 [0134.253] GetFileType (hFile=0x444) returned 0x1 [0134.253] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc1e8 | out: lpFileSizeHigh=0x3bc1e8*=0x0) returned 0x622 [0134.253] ReadFile (in: hFile=0x444, lpBuffer=0x2237a58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bc118, lpOverlapped=0x0 | out: lpBuffer=0x2237a58*, lpNumberOfBytesRead=0x3bc118*=0x622, lpOverlapped=0x0) returned 1 [0134.253] CloseHandle (hObject=0x444) returned 1 [0134.290] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000016.bin", nBufferLength=0x105, lpBuffer=0x3bbb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000016.bin", lpFilePart=0x0) returned 0x4d [0134.290] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc050) returned 1 [0134.290] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000016.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000016.bin"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0134.291] GetFileType (hFile=0x444) returned 0x1 [0134.291] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbfc0) returned 1 [0134.292] GetFileType (hFile=0x444) returned 0x1 [0134.292] WriteFile (in: hFile=0x444, lpBuffer=0x22b0938*, nNumberOfBytesToWrite=0x630, lpNumberOfBytesWritten=0x3bc028, lpOverlapped=0x0 | out: lpBuffer=0x22b0938*, lpNumberOfBytesWritten=0x3bc028*=0x630, lpOverlapped=0x0) returned 1 [0134.292] CloseHandle (hObject=0x444) returned 1 [0134.292] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000016.bin", nBufferLength=0x105, lpBuffer=0x3bbd10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000016.bin", lpFilePart=0x0) returned 0x4d [0134.292] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000016.bin.xuy", nBufferLength=0x105, lpBuffer=0x3bbd10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000016.bin.xuy", lpFilePart=0x0) returned 0x51 [0134.293] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc150) returned 1 [0134.293] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000016.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000016.bin"), fInfoLevelId=0x0, lpFileInformation=0x3bc230 | out: lpFileInformation=0x3bc230*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6acc54cf, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6acc54cf, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x3be329d3, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x630)) returned 1 [0134.293] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc110) returned 1 [0134.293] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000016.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000016.bin"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000016.bin.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000016.bin.xuy")) returned 1 [0134.294] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000017.bin", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000017.bin", lpFilePart=0x0) returned 0x4d [0134.294] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0134.295] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000017.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000017.bin"), fInfoLevelId=0x0, lpFileInformation=0x22b1bd0 | out: lpFileInformation=0x22b1bd0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x6aceb722, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6aceb722, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6aceb722, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x2e6e)) returned 1 [0134.296] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0134.296] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000017.bin", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000017.bin", lpFilePart=0x0) returned 0x4d [0134.296] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0134.296] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000017.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000017.bin"), fInfoLevelId=0x0, lpFileInformation=0x22b1d28 | out: lpFileInformation=0x22b1d28*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x6aceb722, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6aceb722, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6aceb722, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x2e6e)) returned 1 [0134.296] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0134.296] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000017.bin", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000017.bin", lpFilePart=0x0) returned 0x4d [0134.296] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0134.296] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000017.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000017.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0134.298] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb100) returned 1 [0134.298] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000017.bin", nBufferLength=0x105, lpBuffer=0x3bbd80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000017.bin", lpFilePart=0x0) returned 0x4d [0134.298] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc220) returned 1 [0134.298] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000017.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000017.bin"), fInfoLevelId=0x0, lpFileInformation=0x3bc300 | out: lpFileInformation=0x3bc300*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x6aceb722, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6aceb722, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6aceb722, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x2e6e)) returned 1 [0134.298] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1e0) returned 1 [0134.298] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000017.bin", nBufferLength=0x105, lpBuffer=0x3bbda0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000017.bin", lpFilePart=0x0) returned 0x4d [0134.298] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000017.bin", dwFileAttributes=0x20) returned 1 [0134.299] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000017.bin", nBufferLength=0x105, lpBuffer=0x3bbda0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000017.bin", lpFilePart=0x0) returned 0x4d [0134.299] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc220) returned 1 [0134.299] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000017.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000017.bin"), fInfoLevelId=0x0, lpFileInformation=0x22b4900 | out: lpFileInformation=0x22b4900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6aceb722, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6aceb722, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6aceb722, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x2e6e)) returned 1 [0134.299] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1e0) returned 1 [0134.299] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000017.bin", nBufferLength=0x105, lpBuffer=0x3bbda0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000017.bin", lpFilePart=0x0) returned 0x4d [0134.299] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc220) returned 1 [0134.299] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000017.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000017.bin"), fInfoLevelId=0x0, lpFileInformation=0x22b4a58 | out: lpFileInformation=0x22b4a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6aceb722, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6aceb722, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6aceb722, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x2e6e)) returned 1 [0134.299] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1e0) returned 1 [0134.299] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000017.bin", nBufferLength=0x105, lpBuffer=0x3bbc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000017.bin", lpFilePart=0x0) returned 0x4d [0134.299] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc120) returned 1 [0134.299] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000017.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000017.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0134.300] GetFileType (hFile=0x444) returned 0x1 [0134.300] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc090) returned 1 [0134.300] GetFileType (hFile=0x444) returned 0x1 [0134.300] ReadFile (in: hFile=0x444, lpBuffer=0x22b6e38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bc1f8, lpOverlapped=0x0 | out: lpBuffer=0x22b6e38*, lpNumberOfBytesRead=0x3bc1f8*=0x1000, lpOverlapped=0x0) returned 1 [0134.341] CloseHandle (hObject=0x444) returned 1 [0134.341] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000017.bin", nBufferLength=0x105, lpBuffer=0x3bbc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000017.bin", lpFilePart=0x0) returned 0x4d [0134.341] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc120) returned 1 [0134.341] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000017.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000017.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0134.341] GetFileType (hFile=0x444) returned 0x1 [0134.341] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc090) returned 1 [0134.341] GetFileType (hFile=0x444) returned 0x1 [0134.341] WriteFile (in: hFile=0x444, lpBuffer=0x2331cd8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x3bc2a8, lpOverlapped=0x0 | out: lpBuffer=0x2331cd8*, lpNumberOfBytesWritten=0x3bc2a8*=0x1010, lpOverlapped=0x0) returned 1 [0134.341] CloseHandle (hObject=0x444) returned 1 [0134.342] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000017.bin", nBufferLength=0x105, lpBuffer=0x3bbda0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000017.bin", lpFilePart=0x0) returned 0x4d [0134.342] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000017.bin.xuy", nBufferLength=0x105, lpBuffer=0x3bbda0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000017.bin.xuy", lpFilePart=0x0) returned 0x51 [0134.342] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc1e0) returned 1 [0134.342] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000017.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000017.bin"), fInfoLevelId=0x0, lpFileInformation=0x3bc2c0 | out: lpFileInformation=0x3bc2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6aceb722, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6aceb722, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x3becb5d4, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2e6e)) returned 1 [0134.342] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1a0) returned 1 [0134.342] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000017.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000017.bin"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000017.bin.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000017.bin.xuy")) returned 1 [0134.343] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000018.bin", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000018.bin", lpFilePart=0x0) returned 0x4d [0134.343] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0134.343] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000018.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000018.bin"), fInfoLevelId=0x0, lpFileInformation=0x2333210 | out: lpFileInformation=0x2333210*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x6aceb722, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6aceb722, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6aceb722, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x8de)) returned 1 [0134.343] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0134.343] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000018.bin", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000018.bin", lpFilePart=0x0) returned 0x4d [0134.343] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0134.343] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000018.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000018.bin"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0134.343] GetFileType (hFile=0x444) returned 0x1 [0134.343] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0134.343] GetFileType (hFile=0x444) returned 0x1 [0134.343] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x8de [0134.344] ReadFile (in: hFile=0x444, lpBuffer=0x2333db8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x2333db8*, lpNumberOfBytesRead=0x3be6a8*=0x8de, lpOverlapped=0x0) returned 1 [0134.355] CloseHandle (hObject=0x444) returned 1 [0134.395] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000018.bin", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000018.bin", lpFilePart=0x0) returned 0x4d [0134.395] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0134.395] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000018.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000018.bin"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0134.397] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb070) returned 1 [0134.397] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000018.bin", nBufferLength=0x105, lpBuffer=0x3bbcf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000018.bin", lpFilePart=0x0) returned 0x4d [0134.397] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0134.397] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000018.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000018.bin"), fInfoLevelId=0x0, lpFileInformation=0x3bc270 | out: lpFileInformation=0x3bc270*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x6aceb722, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6aceb722, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6aceb722, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x8de)) returned 1 [0134.397] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc150) returned 1 [0134.397] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000018.bin", nBufferLength=0x105, lpBuffer=0x3bbd10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000018.bin", lpFilePart=0x0) returned 0x4d [0134.397] SetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000018.bin", dwFileAttributes=0x20) returned 1 [0134.398] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000018.bin", nBufferLength=0x105, lpBuffer=0x3bbd10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000018.bin", lpFilePart=0x0) returned 0x4d [0134.398] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0134.398] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000018.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000018.bin"), fInfoLevelId=0x0, lpFileInformation=0x21ab648 | out: lpFileInformation=0x21ab648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6aceb722, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6aceb722, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6aceb722, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x8de)) returned 1 [0134.398] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc150) returned 1 [0134.398] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000018.bin", nBufferLength=0x105, lpBuffer=0x3bbb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000018.bin", lpFilePart=0x0) returned 0x4d [0134.398] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc050) returned 1 [0134.398] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000018.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000018.bin"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0134.398] GetFileType (hFile=0x444) returned 0x1 [0134.398] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbfc0) returned 1 [0134.398] GetFileType (hFile=0x444) returned 0x1 [0134.398] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc1e8 | out: lpFileSizeHigh=0x3bc1e8*=0x0) returned 0x8de [0134.398] ReadFile (in: hFile=0x444, lpBuffer=0x21ac1f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bc118, lpOverlapped=0x0 | out: lpBuffer=0x21ac1f0*, lpNumberOfBytesRead=0x3bc118*=0x8de, lpOverlapped=0x0) returned 1 [0134.398] CloseHandle (hObject=0x444) returned 1 [0134.437] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000018.bin", nBufferLength=0x105, lpBuffer=0x3bbb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000018.bin", lpFilePart=0x0) returned 0x4d [0134.437] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc050) returned 1 [0134.437] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000018.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000018.bin"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0134.439] GetFileType (hFile=0x444) returned 0x1 [0134.439] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbfc0) returned 1 [0134.439] GetFileType (hFile=0x444) returned 0x1 [0134.439] WriteFile (in: hFile=0x444, lpBuffer=0x2225e38*, nNumberOfBytesToWrite=0x8e0, lpNumberOfBytesWritten=0x3bc028, lpOverlapped=0x0 | out: lpBuffer=0x2225e38*, lpNumberOfBytesWritten=0x3bc028*=0x8e0, lpOverlapped=0x0) returned 1 [0134.440] CloseHandle (hObject=0x444) returned 1 [0134.440] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000018.bin", nBufferLength=0x105, lpBuffer=0x3bbd10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000018.bin", lpFilePart=0x0) returned 0x4d [0134.440] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000018.bin.xuy", nBufferLength=0x105, lpBuffer=0x3bbd10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000018.bin.xuy", lpFilePart=0x0) returned 0x51 [0134.440] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc150) returned 1 [0134.440] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000018.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000018.bin"), fInfoLevelId=0x0, lpFileInformation=0x3bc230 | out: lpFileInformation=0x3bc230*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6aceb722, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6aceb722, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x3bfb0158, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x8e0)) returned 1 [0134.440] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc110) returned 1 [0134.440] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000018.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000018.bin"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000018.bin.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000018.bin.xuy")) returned 1 [0134.441] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000003K.bin", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000003K.bin", lpFilePart=0x0) returned 0x4d [0134.441] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0134.441] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000003K.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000003k.bin"), fInfoLevelId=0x0, lpFileInformation=0x22270d0 | out: lpFileInformation=0x22270d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b222987, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6b222987, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6ea6bb6c, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0134.441] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0134.441] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000003K.bin", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000003K.bin", lpFilePart=0x0) returned 0x4d [0134.441] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0134.442] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000003K.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000003k.bin"), fInfoLevelId=0x0, lpFileInformation=0x2227228 | out: lpFileInformation=0x2227228*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b222987, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6b222987, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6ea6bb6c, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0134.442] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0134.442] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000003K.bin", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000003K.bin", lpFilePart=0x0) returned 0x4d [0134.442] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0134.442] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000003K.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000003k.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0134.442] GetFileType (hFile=0x444) returned 0x1 [0134.442] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0134.442] GetFileType (hFile=0x444) returned 0x1 [0134.442] ReadFile (in: hFile=0x444, lpBuffer=0x2229608, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x2229608*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0134.461] CloseHandle (hObject=0x444) returned 1 [0134.461] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000003K.bin", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000003K.bin", lpFilePart=0x0) returned 0x4d [0134.461] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0134.461] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000003K.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000003k.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0134.461] GetFileType (hFile=0x444) returned 0x1 [0134.461] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0134.461] GetFileType (hFile=0x444) returned 0x1 [0134.461] WriteFile (in: hFile=0x444, lpBuffer=0x2227360*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x2227360*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0134.462] CloseHandle (hObject=0x444) returned 1 [0134.462] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000003K.bin", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000003K.bin", lpFilePart=0x0) returned 0x4d [0134.462] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000003K.bin.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000003K.bin.xuy", lpFilePart=0x0) returned 0x51 [0134.462] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0134.462] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000003K.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000003k.bin"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b222987, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6b222987, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x3bfd6220, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0134.462] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0134.462] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000003K.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000003k.bin"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000003K.bin.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000003k.bin.xuy")) returned 1 [0134.463] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000003L.bin", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000003L.bin", lpFilePart=0x0) returned 0x4d [0134.463] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0134.463] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000003L.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000003l.bin"), fInfoLevelId=0x0, lpFileInformation=0x22a59e0 | out: lpFileInformation=0x22a59e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b222987, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6b222987, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6ea6bb6c, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0134.463] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0134.463] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000003L.bin", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000003L.bin", lpFilePart=0x0) returned 0x4d [0134.463] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0134.463] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000003L.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000003l.bin"), fInfoLevelId=0x0, lpFileInformation=0x22a5b38 | out: lpFileInformation=0x22a5b38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b222987, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6b222987, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6ea6bb6c, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0134.463] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0134.464] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000003L.bin", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000003L.bin", lpFilePart=0x0) returned 0x4d [0134.464] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0134.464] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000003L.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000003l.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0134.465] GetFileType (hFile=0x444) returned 0x1 [0134.465] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0134.465] GetFileType (hFile=0x444) returned 0x1 [0134.465] ReadFile (in: hFile=0x444, lpBuffer=0x22a7f18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x22a7f18*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0134.478] CloseHandle (hObject=0x444) returned 1 [0134.478] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000003L.bin", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000003L.bin", lpFilePart=0x0) returned 0x4d [0134.478] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0134.478] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000003L.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000003l.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0134.478] GetFileType (hFile=0x444) returned 0x1 [0134.478] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0134.479] GetFileType (hFile=0x444) returned 0x1 [0134.479] WriteFile (in: hFile=0x444, lpBuffer=0x22a5c70*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x22a5c70*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0134.479] CloseHandle (hObject=0x444) returned 1 [0134.479] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000003L.bin", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000003L.bin", lpFilePart=0x0) returned 0x4d [0134.479] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000003L.bin.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000003L.bin.xuy", lpFilePart=0x0) returned 0x51 [0134.479] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0134.479] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000003L.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000003l.bin"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b222987, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6b222987, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x3bffc5a6, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0134.479] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0134.479] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000003L.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000003l.bin"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000003L.bin.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000003l.bin.xuy")) returned 1 [0134.480] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000003M.bin", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000003M.bin", lpFilePart=0x0) returned 0x4d [0134.480] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0134.480] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000003M.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000003m.bin"), fInfoLevelId=0x0, lpFileInformation=0x23242f0 | out: lpFileInformation=0x23242f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b222987, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6b222987, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6b222987, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0134.481] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0134.481] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000003M.bin", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000003M.bin", lpFilePart=0x0) returned 0x4d [0134.481] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0134.481] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000003M.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000003m.bin"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0134.481] GetFileType (hFile=0x444) returned 0x1 [0134.481] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0134.481] GetFileType (hFile=0x444) returned 0x1 [0134.481] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x1000 [0134.481] ReadFile (in: hFile=0x444, lpBuffer=0x23245a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x23245a0*, lpNumberOfBytesRead=0x3be6a8*=0x1000, lpOverlapped=0x0) returned 1 [0134.490] CloseHandle (hObject=0x444) returned 1 [0134.531] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000003M.bin", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000003M.bin", lpFilePart=0x0) returned 0x4d [0134.531] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0134.531] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000003M.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000003m.bin"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0134.533] GetFileType (hFile=0x444) returned 0x1 [0134.533] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0134.533] GetFileType (hFile=0x444) returned 0x1 [0134.533] WriteFile (in: hFile=0x444, lpBuffer=0x219faa8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x3be708, lpOverlapped=0x0 | out: lpBuffer=0x219faa8*, lpNumberOfBytesWritten=0x3be708*=0x1010, lpOverlapped=0x0) returned 1 [0134.534] CloseHandle (hObject=0x444) returned 1 [0134.534] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000003M.bin", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000003M.bin", lpFilePart=0x0) returned 0x4d [0134.534] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000003M.bin.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000003M.bin.xuy", lpFilePart=0x0) returned 0x51 [0134.534] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0134.534] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000003M.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000003m.bin"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b222987, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6b222987, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x3c095291, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x1010)) returned 1 [0134.535] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0134.535] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000003M.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000003m.bin"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000003M.bin.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000003m.bin.xuy")) returned 1 [0134.536] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000003N.bin", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000003N.bin", lpFilePart=0x0) returned 0x4d [0134.536] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0134.536] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000003N.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000003n.bin"), fInfoLevelId=0x0, lpFileInformation=0x21a0ec8 | out: lpFileInformation=0x21a0ec8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b222987, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6b222987, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6b2e1521, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x8000)) returned 1 [0134.536] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0134.536] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000003N.bin", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000003N.bin", lpFilePart=0x0) returned 0x4d [0134.536] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0134.536] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000003N.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000003n.bin"), fInfoLevelId=0x0, lpFileInformation=0x21a1020 | out: lpFileInformation=0x21a1020*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b222987, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6b222987, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6b2e1521, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x8000)) returned 1 [0134.536] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0134.536] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000003N.bin", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000003N.bin", lpFilePart=0x0) returned 0x4d [0134.536] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0134.536] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000003N.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000003n.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0134.537] GetFileType (hFile=0x444) returned 0x1 [0134.537] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0134.537] GetFileType (hFile=0x444) returned 0x1 [0134.537] ReadFile (in: hFile=0x444, lpBuffer=0x21a3400, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x21a3400*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0134.563] CloseHandle (hObject=0x444) returned 1 [0134.563] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000003N.bin", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000003N.bin", lpFilePart=0x0) returned 0x4d [0134.563] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0134.564] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000003N.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000003n.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0134.564] GetFileType (hFile=0x444) returned 0x1 [0134.564] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0134.564] GetFileType (hFile=0x444) returned 0x1 [0134.564] WriteFile (in: hFile=0x444, lpBuffer=0x21a1158*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x21a1158*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0134.564] CloseHandle (hObject=0x444) returned 1 [0134.564] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000003N.bin", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000003N.bin", lpFilePart=0x0) returned 0x4d [0134.564] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000003N.bin.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000003N.bin.xuy", lpFilePart=0x0) returned 0x51 [0134.564] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0134.564] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000003N.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000003n.bin"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b222987, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6b222987, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x3c0e12ff, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x8000)) returned 1 [0134.564] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0134.565] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000003N.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000003n.bin"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000003N.bin.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000003n.bin.xuy")) returned 1 [0134.566] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000048.bin", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000048.bin", lpFilePart=0x0) returned 0x4d [0134.566] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0134.566] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000048.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000048.bin"), fInfoLevelId=0x0, lpFileInformation=0x221f7d8 | out: lpFileInformation=0x221f7d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b3077a6, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6b3077a6, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6b438ac1, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0xc000)) returned 1 [0134.566] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0134.566] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000048.bin", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000048.bin", lpFilePart=0x0) returned 0x4d [0134.566] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0134.566] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000048.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000048.bin"), fInfoLevelId=0x0, lpFileInformation=0x221f930 | out: lpFileInformation=0x221f930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b3077a6, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6b3077a6, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6b438ac1, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0xc000)) returned 1 [0134.566] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0134.566] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000048.bin", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000048.bin", lpFilePart=0x0) returned 0x4d [0134.566] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0134.566] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000048.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000048.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0134.567] GetFileType (hFile=0x444) returned 0x1 [0134.567] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0134.567] GetFileType (hFile=0x444) returned 0x1 [0134.567] ReadFile (in: hFile=0x444, lpBuffer=0x2221d10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x2221d10*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0134.598] CloseHandle (hObject=0x444) returned 1 [0134.598] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000048.bin", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000048.bin", lpFilePart=0x0) returned 0x4d [0134.598] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0134.598] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000048.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000048.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0134.599] GetFileType (hFile=0x444) returned 0x1 [0134.599] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0134.599] GetFileType (hFile=0x444) returned 0x1 [0134.599] WriteFile (in: hFile=0x444, lpBuffer=0x221fa68*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x221fa68*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0134.599] CloseHandle (hObject=0x444) returned 1 [0134.599] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000048.bin", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000048.bin", lpFilePart=0x0) returned 0x4d [0134.599] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000048.bin.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000048.bin.xuy", lpFilePart=0x0) returned 0x51 [0134.599] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0134.599] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000048.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000048.bin"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b3077a6, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6b3077a6, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x3c12d998, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xc000)) returned 1 [0134.599] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0134.599] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000048.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000048.bin"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000048.bin.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000048.bin.xuy")) returned 1 [0134.601] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000004U.bin", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000004U.bin", lpFilePart=0x0) returned 0x4d [0134.601] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0134.601] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000004U.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000004u.bin"), fInfoLevelId=0x0, lpFileInformation=0x229e0e8 | out: lpFileInformation=0x229e0e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ea6bb6c, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6ea6bb6c, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6ea6bb6c, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0134.602] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0134.602] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000004U.bin", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000004U.bin", lpFilePart=0x0) returned 0x4d [0134.602] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0134.602] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000004U.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000004u.bin"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0134.602] GetFileType (hFile=0x444) returned 0x1 [0134.602] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0134.602] GetFileType (hFile=0x444) returned 0x1 [0134.602] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x1000 [0134.602] ReadFile (in: hFile=0x444, lpBuffer=0x229e398, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x229e398*, lpNumberOfBytesRead=0x3be6a8*=0x1000, lpOverlapped=0x0) returned 1 [0134.610] CloseHandle (hObject=0x444) returned 1 [0134.631] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000004U.bin", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000004U.bin", lpFilePart=0x0) returned 0x4d [0134.631] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0134.631] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000004U.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000004u.bin"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0134.633] GetFileType (hFile=0x444) returned 0x1 [0134.633] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0134.633] GetFileType (hFile=0x444) returned 0x1 [0134.633] WriteFile (in: hFile=0x444, lpBuffer=0x2319238*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x3be708, lpOverlapped=0x0 | out: lpBuffer=0x2319238*, lpNumberOfBytesWritten=0x3be708*=0x1010, lpOverlapped=0x0) returned 1 [0134.634] CloseHandle (hObject=0x444) returned 1 [0134.634] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000004U.bin", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000004U.bin", lpFilePart=0x0) returned 0x4d [0134.634] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000004U.bin.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000004U.bin.xuy", lpFilePart=0x0) returned 0x51 [0134.634] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0134.634] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000004U.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000004u.bin"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ea6bb6c, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6ea6bb6c, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x3c179dc1, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x1010)) returned 1 [0134.634] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0134.634] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000004U.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000004u.bin"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000004U.bin.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000004u.bin.xuy")) returned 1 [0134.640] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\header", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\header", lpFilePart=0x0) returned 0x47 [0134.640] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0134.640] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\header" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\header"), fInfoLevelId=0x0, lpFileInformation=0x231a630 | out: lpFileInformation=0x231a630*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65e91167, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x65e91167, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6f716544, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x48)) returned 1 [0134.640] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0134.640] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\header", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\header", lpFilePart=0x0) returned 0x47 [0134.641] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0134.641] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\header" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\header"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0134.641] GetFileType (hFile=0x444) returned 0x1 [0134.641] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0134.641] GetFileType (hFile=0x444) returned 0x1 [0134.641] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x48 [0134.641] ReadFile (in: hFile=0x444, lpBuffer=0x231a900, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x231a900*, lpNumberOfBytesRead=0x3be6a8*=0x48, lpOverlapped=0x0) returned 1 [0134.642] CloseHandle (hObject=0x444) returned 1 [0134.689] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\header", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\header", lpFilePart=0x0) returned 0x47 [0134.689] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0134.689] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\header" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\header"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0134.691] GetFileType (hFile=0x444) returned 0x1 [0134.691] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0134.691] GetFileType (hFile=0x444) returned 0x1 [0134.691] WriteFile (in: hFile=0x444, lpBuffer=0x2190a28*, nNumberOfBytesToWrite=0x50, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x2190a28*, lpNumberOfBytesWritten=0x3be5b8*=0x50, lpOverlapped=0x0) returned 1 [0134.691] CloseHandle (hObject=0x444) returned 1 [0134.692] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\header", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\header", lpFilePart=0x0) returned 0x47 [0134.692] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\header.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\header.xuy", lpFilePart=0x0) returned 0x4b [0134.692] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0134.692] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\header" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\header"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65e91167, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x65e91167, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x3c2126ee, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x50)) returned 1 [0134.692] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0134.692] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\header" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\header"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\header.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\header.xuy")) returned 1 [0134.693] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0134.693] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\tmp", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\tmp", lpFilePart=0x0) returned 0x44 [0134.693] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\tmp\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\tmp\\", lpFilePart=0x0) returned 0x45 [0134.693] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\tmp\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d81b0 [0134.694] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0134.694] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0134.694] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0134.694] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0134.694] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0134.694] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0134.694] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\tmp", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\tmp", lpFilePart=0x0) returned 0x44 [0134.694] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\tmp\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\tmp\\", lpFilePart=0x0) returned 0x45 [0134.694] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\tmp\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d7a30 [0134.695] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0134.695] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0134.695] FindClose (in: hFindFile=0x5d7a30 | out: hFindFile=0x5d7a30) returned 1 [0134.695] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0134.695] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0134.695] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0134.695] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Outlook", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Outlook", lpFilePart=0x0) returned 0x35 [0134.695] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Outlook\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Outlook\\", lpFilePart=0x0) returned 0x36 [0134.695] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Outlook\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d79d0 [0134.695] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0134.695] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0134.696] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0134.696] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0134.696] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0134.696] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0134.696] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0134.696] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Outlook", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Outlook", lpFilePart=0x0) returned 0x35 [0134.696] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Outlook\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Outlook\\", lpFilePart=0x0) returned 0x36 [0134.696] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Outlook\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d7cd0 [0134.696] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0134.696] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0134.696] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0134.696] FindClose (in: hFindFile=0x5d7cd0 | out: hFindFile=0x5d7cd0) returned 1 [0134.696] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0134.696] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0134.696] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0134.697] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Outlook\\Gliding", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Outlook\\Gliding", lpFilePart=0x0) returned 0x3d [0134.697] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Outlook\\Gliding\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Outlook\\Gliding\\", lpFilePart=0x0) returned 0x3e [0134.697] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Outlook\\Gliding\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d79d0 [0134.697] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0134.697] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0134.697] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0134.697] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0134.697] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0134.697] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0134.697] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Outlook\\Gliding", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Outlook\\Gliding", lpFilePart=0x0) returned 0x3d [0134.697] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Outlook\\Gliding\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Outlook\\Gliding\\", lpFilePart=0x0) returned 0x3e [0134.697] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Outlook\\Gliding\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7fd0 [0134.697] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0134.698] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0134.698] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0134.698] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0134.698] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0134.698] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0134.698] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\PlayReady", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\PlayReady", lpFilePart=0x0) returned 0x37 [0134.698] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\PlayReady\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\PlayReady\\", lpFilePart=0x0) returned 0x38 [0134.698] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\PlayReady\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d79d0 [0134.698] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0134.699] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0134.699] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0134.699] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0134.699] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0134.699] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0134.699] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0134.699] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\PlayReady", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\PlayReady", lpFilePart=0x0) returned 0x37 [0134.699] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\PlayReady\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\PlayReady\\", lpFilePart=0x0) returned 0x38 [0134.699] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\PlayReady\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d7eb0 [0134.699] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0134.699] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0134.699] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0134.700] FindClose (in: hFindFile=0x5d7eb0 | out: hFindFile=0x5d7eb0) returned 1 [0134.700] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0134.700] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0134.700] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0134.700] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\PlayReady\\Internet Explorer", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\PlayReady\\Internet Explorer", lpFilePart=0x0) returned 0x49 [0134.700] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\PlayReady\\Internet Explorer\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\PlayReady\\Internet Explorer\\", lpFilePart=0x0) returned 0x4a [0134.700] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\PlayReady\\Internet Explorer\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7c70 [0134.700] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0134.700] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0134.700] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0134.700] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0134.700] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0134.700] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0134.700] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0134.701] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\PlayReady\\Internet Explorer", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\PlayReady\\Internet Explorer", lpFilePart=0x0) returned 0x49 [0134.701] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\PlayReady\\Internet Explorer\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\PlayReady\\Internet Explorer\\", lpFilePart=0x0) returned 0x4a [0134.701] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\PlayReady\\Internet Explorer\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7a30 [0134.701] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0134.701] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0134.701] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0134.701] FindClose (in: hFindFile=0x5d7a30 | out: hFindFile=0x5d7a30) returned 1 [0134.701] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0134.701] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0134.701] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0134.701] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\PlayReady\\Internet Explorer\\Desktop", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\PlayReady\\Internet Explorer\\Desktop", lpFilePart=0x0) returned 0x51 [0134.701] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\PlayReady\\Internet Explorer\\Desktop\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\PlayReady\\Internet Explorer\\Desktop\\", lpFilePart=0x0) returned 0x52 [0134.701] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\PlayReady\\Internet Explorer\\Desktop\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d8090 [0134.702] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0134.702] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0134.702] FindClose (in: hFindFile=0x5d8090 | out: hFindFile=0x5d8090) returned 1 [0134.702] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0134.702] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0134.702] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0134.702] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\PlayReady\\Internet Explorer\\Desktop", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\PlayReady\\Internet Explorer\\Desktop", lpFilePart=0x0) returned 0x51 [0134.702] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\PlayReady\\Internet Explorer\\Desktop\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\PlayReady\\Internet Explorer\\Desktop\\", lpFilePart=0x0) returned 0x52 [0134.702] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\PlayReady\\Internet Explorer\\Desktop\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7e50 [0134.702] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0134.702] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0134.702] FindClose (in: hFindFile=0x5d7e50 | out: hFindFile=0x5d7e50) returned 1 [0134.702] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0134.703] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0134.703] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0134.703] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Publisher", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Publisher", lpFilePart=0x0) returned 0x37 [0134.703] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Publisher\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Publisher\\", lpFilePart=0x0) returned 0x38 [0134.703] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Publisher\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d7c70 [0134.703] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0134.704] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0134.704] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0134.704] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0134.704] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0134.704] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0134.704] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Publisher", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Publisher", lpFilePart=0x0) returned 0x37 [0134.704] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Publisher\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Publisher\\", lpFilePart=0x0) returned 0x38 [0134.704] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Publisher\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d7550 [0134.704] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0134.704] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0134.704] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0134.704] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0134.704] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0134.704] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0134.705] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\TaskSchedulerConfig", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\TaskSchedulerConfig", lpFilePart=0x0) returned 0x41 [0134.705] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\TaskSchedulerConfig\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\TaskSchedulerConfig\\", lpFilePart=0x0) returned 0x42 [0134.705] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\TaskSchedulerConfig\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d7550 [0134.705] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0134.705] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0134.705] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0134.705] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0134.705] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0134.705] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0134.705] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\TaskSchedulerConfig", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\TaskSchedulerConfig", lpFilePart=0x0) returned 0x41 [0134.705] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\TaskSchedulerConfig\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\TaskSchedulerConfig\\", lpFilePart=0x0) returned 0x42 [0134.705] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\TaskSchedulerConfig\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d81b0 [0134.706] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0134.706] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0134.706] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0134.706] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0134.706] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0134.706] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0134.706] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\TokenBroker", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\TokenBroker", lpFilePart=0x0) returned 0x39 [0134.706] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\TokenBroker\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\TokenBroker\\", lpFilePart=0x0) returned 0x3a [0134.706] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\TokenBroker\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d7a90 [0134.706] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0134.706] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0134.707] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0134.707] FindClose (in: hFindFile=0x5d7a90 | out: hFindFile=0x5d7a90) returned 1 [0134.707] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0134.707] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0134.707] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0134.707] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\TokenBroker", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\TokenBroker", lpFilePart=0x0) returned 0x39 [0134.707] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\TokenBroker\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\TokenBroker\\", lpFilePart=0x0) returned 0x3a [0134.707] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\TokenBroker\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d81b0 [0134.707] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0134.707] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0134.707] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0134.707] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0134.708] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0134.708] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0134.708] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0134.708] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\TokenBroker\\Cache", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\TokenBroker\\Cache", lpFilePart=0x0) returned 0x3f [0134.708] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\TokenBroker\\Cache\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\TokenBroker\\Cache\\", lpFilePart=0x0) returned 0x40 [0134.708] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\TokenBroker\\Cache\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7550 [0134.708] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0134.708] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0134.708] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0134.708] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0134.708] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0134.708] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0134.708] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0134.708] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\TokenBroker\\Cache", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\TokenBroker\\Cache", lpFilePart=0x0) returned 0x3f [0134.708] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\TokenBroker\\Cache\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\TokenBroker\\Cache\\", lpFilePart=0x0) returned 0x40 [0134.709] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\TokenBroker\\Cache\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7fd0 [0134.709] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0134.709] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0134.709] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0134.709] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0134.709] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0134.709] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0134.709] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\TokenBroker\\Cache\\8d68c2e8263ce2da4efc5fc5f9a0c85c16c38ae4.tbres", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\TokenBroker\\Cache\\8d68c2e8263ce2da4efc5fc5f9a0c85c16c38ae4.tbres", lpFilePart=0x0) returned 0x6e [0134.709] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0134.709] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\TokenBroker\\Cache\\8d68c2e8263ce2da4efc5fc5f9a0c85c16c38ae4.tbres" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\tokenbroker\\cache\\8d68c2e8263ce2da4efc5fc5f9a0c85c16c38ae4.tbres"), fInfoLevelId=0x0, lpFileInformation=0x21a2de8 | out: lpFileInformation=0x21a2de8*(dwFileAttributes=0x24, ftCreationTime.dwLowDateTime=0x3742660b, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x3742660b, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x3742660b, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x7a4)) returned 1 [0134.709] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0134.710] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\TokenBroker\\Cache\\8d68c2e8263ce2da4efc5fc5f9a0c85c16c38ae4.tbres", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\TokenBroker\\Cache\\8d68c2e8263ce2da4efc5fc5f9a0c85c16c38ae4.tbres", lpFilePart=0x0) returned 0x6e [0134.710] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0134.710] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\TokenBroker\\Cache\\8d68c2e8263ce2da4efc5fc5f9a0c85c16c38ae4.tbres" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\tokenbroker\\cache\\8d68c2e8263ce2da4efc5fc5f9a0c85c16c38ae4.tbres"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0134.710] GetFileType (hFile=0x444) returned 0x1 [0134.710] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0134.710] GetFileType (hFile=0x444) returned 0x1 [0134.710] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0x7a4 [0134.710] ReadFile (in: hFile=0x444, lpBuffer=0x21a3958, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be718, lpOverlapped=0x0 | out: lpBuffer=0x21a3958*, lpNumberOfBytesRead=0x3be718*=0x7a4, lpOverlapped=0x0) returned 1 [0134.711] CloseHandle (hObject=0x444) returned 1 [0134.722] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\TokenBroker\\Cache\\8d68c2e8263ce2da4efc5fc5f9a0c85c16c38ae4.tbres", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\TokenBroker\\Cache\\8d68c2e8263ce2da4efc5fc5f9a0c85c16c38ae4.tbres", lpFilePart=0x0) returned 0x6e [0134.722] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0134.722] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\TokenBroker\\Cache\\8d68c2e8263ce2da4efc5fc5f9a0c85c16c38ae4.tbres" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\tokenbroker\\cache\\8d68c2e8263ce2da4efc5fc5f9a0c85c16c38ae4.tbres"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0134.723] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb0e0) returned 1 [0134.724] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\TokenBroker\\Cache\\8d68c2e8263ce2da4efc5fc5f9a0c85c16c38ae4.tbres", nBufferLength=0x105, lpBuffer=0x3bbd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\TokenBroker\\Cache\\8d68c2e8263ce2da4efc5fc5f9a0c85c16c38ae4.tbres", lpFilePart=0x0) returned 0x6e [0134.724] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc200) returned 1 [0134.724] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\TokenBroker\\Cache\\8d68c2e8263ce2da4efc5fc5f9a0c85c16c38ae4.tbres" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\tokenbroker\\cache\\8d68c2e8263ce2da4efc5fc5f9a0c85c16c38ae4.tbres"), fInfoLevelId=0x0, lpFileInformation=0x3bc2e0 | out: lpFileInformation=0x3bc2e0*(dwFileAttributes=0x24, ftCreationTime.dwLowDateTime=0x3742660b, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x3742660b, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x3742660b, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x7a4)) returned 1 [0134.724] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1c0) returned 1 [0134.724] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\TokenBroker\\Cache\\8d68c2e8263ce2da4efc5fc5f9a0c85c16c38ae4.tbres", nBufferLength=0x105, lpBuffer=0x3bbd80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\TokenBroker\\Cache\\8d68c2e8263ce2da4efc5fc5f9a0c85c16c38ae4.tbres", lpFilePart=0x0) returned 0x6e [0134.724] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc200) returned 1 [0134.724] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\TokenBroker\\Cache\\8d68c2e8263ce2da4efc5fc5f9a0c85c16c38ae4.tbres" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\tokenbroker\\cache\\8d68c2e8263ce2da4efc5fc5f9a0c85c16c38ae4.tbres"), fInfoLevelId=0x0, lpFileInformation=0x221d910 | out: lpFileInformation=0x221d910*(dwFileAttributes=0x24, ftCreationTime.dwLowDateTime=0x3742660b, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x3742660b, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x3742660b, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x7a4)) returned 1 [0134.724] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1c0) returned 1 [0134.724] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\TokenBroker\\Cache\\8d68c2e8263ce2da4efc5fc5f9a0c85c16c38ae4.tbres", nBufferLength=0x105, lpBuffer=0x3bbbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\TokenBroker\\Cache\\8d68c2e8263ce2da4efc5fc5f9a0c85c16c38ae4.tbres", lpFilePart=0x0) returned 0x6e [0134.724] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0c0) returned 1 [0134.724] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\TokenBroker\\Cache\\8d68c2e8263ce2da4efc5fc5f9a0c85c16c38ae4.tbres" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\tokenbroker\\cache\\8d68c2e8263ce2da4efc5fc5f9a0c85c16c38ae4.tbres"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0134.724] GetFileType (hFile=0x444) returned 0x1 [0134.724] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc030) returned 1 [0134.724] GetFileType (hFile=0x444) returned 0x1 [0134.724] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc258 | out: lpFileSizeHigh=0x3bc258*=0x0) returned 0x7a4 [0134.725] ReadFile (in: hFile=0x444, lpBuffer=0x221e480, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bc188, lpOverlapped=0x0 | out: lpBuffer=0x221e480*, lpNumberOfBytesRead=0x3bc188*=0x7a4, lpOverlapped=0x0) returned 1 [0134.725] CloseHandle (hObject=0x444) returned 1 [0134.764] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\TokenBroker\\Cache\\8d68c2e8263ce2da4efc5fc5f9a0c85c16c38ae4.tbres", nBufferLength=0x105, lpBuffer=0x3bbbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\TokenBroker\\Cache\\8d68c2e8263ce2da4efc5fc5f9a0c85c16c38ae4.tbres", lpFilePart=0x0) returned 0x6e [0134.764] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0c0) returned 1 [0134.764] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\TokenBroker\\Cache\\8d68c2e8263ce2da4efc5fc5f9a0c85c16c38ae4.tbres" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\tokenbroker\\cache\\8d68c2e8263ce2da4efc5fc5f9a0c85c16c38ae4.tbres"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0134.765] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8b50) returned 1 [0134.766] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0134.766] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Vault", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Vault", lpFilePart=0x0) returned 0x33 [0134.766] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Vault\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Vault\\", lpFilePart=0x0) returned 0x34 [0134.766] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Vault\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d7af0 [0134.766] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0134.766] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0134.767] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0134.767] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0134.767] FindClose (in: hFindFile=0x5d7af0 | out: hFindFile=0x5d7af0) returned 1 [0134.767] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0134.767] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0134.767] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0134.767] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Vault", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Vault", lpFilePart=0x0) returned 0x33 [0134.767] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Vault\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Vault\\", lpFilePart=0x0) returned 0x34 [0134.767] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Vault\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d75b0 [0134.767] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0134.767] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0134.768] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0134.768] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0134.768] FindClose (in: hFindFile=0x5d75b0 | out: hFindFile=0x5d75b0) returned 1 [0134.768] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0134.768] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0134.768] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0134.768] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Vault\\4BF4C442-9B8A-41A0-B380-DD4A704DDB28", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Vault\\4BF4C442-9B8A-41A0-B380-DD4A704DDB28", lpFilePart=0x0) returned 0x58 [0134.768] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Vault\\4BF4C442-9B8A-41A0-B380-DD4A704DDB28\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Vault\\4BF4C442-9B8A-41A0-B380-DD4A704DDB28\\", lpFilePart=0x0) returned 0x59 [0134.768] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Vault\\4BF4C442-9B8A-41A0-B380-DD4A704DDB28\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d81b0 [0134.768] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0134.768] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0134.769] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0134.769] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0134.769] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0134.769] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0134.769] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0134.769] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Vault\\4BF4C442-9B8A-41A0-B380-DD4A704DDB28", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Vault\\4BF4C442-9B8A-41A0-B380-DD4A704DDB28", lpFilePart=0x0) returned 0x58 [0134.769] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Vault\\4BF4C442-9B8A-41A0-B380-DD4A704DDB28\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Vault\\4BF4C442-9B8A-41A0-B380-DD4A704DDB28\\", lpFilePart=0x0) returned 0x59 [0134.769] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Vault\\4BF4C442-9B8A-41A0-B380-DD4A704DDB28\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7a90 [0134.769] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0134.769] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0134.769] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0134.769] FindClose (in: hFindFile=0x5d7a90 | out: hFindFile=0x5d7a90) returned 1 [0134.769] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0134.770] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0134.770] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Vault\\4BF4C442-9B8A-41A0-B380-DD4A704DDB28\\Policy.vpol", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Vault\\4BF4C442-9B8A-41A0-B380-DD4A704DDB28\\Policy.vpol", lpFilePart=0x0) returned 0x64 [0134.770] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0134.770] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Vault\\4BF4C442-9B8A-41A0-B380-DD4A704DDB28\\Policy.vpol" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\vault\\4bf4c442-9b8a-41a0-b380-dd4a704ddb28\\policy.vpol"), fInfoLevelId=0x0, lpFileInformation=0x229c778 | out: lpFileInformation=0x229c778*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfab7f004, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xfab7f004, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0xfab7f004, ftLastWriteTime.dwHighDateTime=0x1d2d028, nFileSizeHigh=0x0, nFileSizeLow=0x1b4)) returned 1 [0134.770] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0134.770] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Vault\\4BF4C442-9B8A-41A0-B380-DD4A704DDB28\\Policy.vpol", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Vault\\4BF4C442-9B8A-41A0-B380-DD4A704DDB28\\Policy.vpol", lpFilePart=0x0) returned 0x64 [0134.770] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0134.770] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Vault\\4BF4C442-9B8A-41A0-B380-DD4A704DDB28\\Policy.vpol" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\vault\\4bf4c442-9b8a-41a0-b380-dd4a704ddb28\\policy.vpol"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0134.770] GetFileType (hFile=0x444) returned 0x1 [0134.770] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0134.770] GetFileType (hFile=0x444) returned 0x1 [0134.770] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0x1b4 [0134.770] ReadFile (in: hFile=0x444, lpBuffer=0x229cc48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be718, lpOverlapped=0x0 | out: lpBuffer=0x229cc48*, lpNumberOfBytesRead=0x3be718*=0x1b4, lpOverlapped=0x0) returned 1 [0134.771] CloseHandle (hObject=0x444) returned 1 [0134.809] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Vault\\4BF4C442-9B8A-41A0-B380-DD4A704DDB28\\Policy.vpol", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Vault\\4BF4C442-9B8A-41A0-B380-DD4A704DDB28\\Policy.vpol", lpFilePart=0x0) returned 0x64 [0134.809] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0134.809] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Vault\\4BF4C442-9B8A-41A0-B380-DD4A704DDB28\\Policy.vpol" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\vault\\4bf4c442-9b8a-41a0-b380-dd4a704ddb28\\policy.vpol"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0134.811] GetFileType (hFile=0x444) returned 0x1 [0134.811] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0134.811] GetFileType (hFile=0x444) returned 0x1 [0134.811] WriteFile (in: hFile=0x444, lpBuffer=0x2314520*, nNumberOfBytesToWrite=0x1c0, lpNumberOfBytesWritten=0x3be628, lpOverlapped=0x0 | out: lpBuffer=0x2314520*, lpNumberOfBytesWritten=0x3be628*=0x1c0, lpOverlapped=0x0) returned 1 [0134.812] CloseHandle (hObject=0x444) returned 1 [0134.812] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Vault\\4BF4C442-9B8A-41A0-B380-DD4A704DDB28\\Policy.vpol", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Vault\\4BF4C442-9B8A-41A0-B380-DD4A704DDB28\\Policy.vpol", lpFilePart=0x0) returned 0x64 [0134.812] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Vault\\4BF4C442-9B8A-41A0-B380-DD4A704DDB28\\Policy.vpol.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Vault\\4BF4C442-9B8A-41A0-B380-DD4A704DDB28\\Policy.vpol.xuy", lpFilePart=0x0) returned 0x68 [0134.812] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0134.812] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Vault\\4BF4C442-9B8A-41A0-B380-DD4A704DDB28\\Policy.vpol" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\vault\\4bf4c442-9b8a-41a0-b380-dd4a704ddb28\\policy.vpol"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfab7f004, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xfab7f004, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x3c343a55, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x1c0)) returned 1 [0134.812] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0134.813] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Vault\\4BF4C442-9B8A-41A0-B380-DD4A704DDB28\\Policy.vpol" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\vault\\4bf4c442-9b8a-41a0-b380-dd4a704ddb28\\policy.vpol"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Vault\\4BF4C442-9B8A-41A0-B380-DD4A704DDB28\\Policy.vpol.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\vault\\4bf4c442-9b8a-41a0-b380-dd4a704ddb28\\policy.vpol.xuy")) returned 1 [0134.814] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0134.814] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Vault\\UserProfileRoaming", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Vault\\UserProfileRoaming", lpFilePart=0x0) returned 0x46 [0134.814] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Vault\\UserProfileRoaming\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Vault\\UserProfileRoaming\\", lpFilePart=0x0) returned 0x47 [0134.814] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Vault\\UserProfileRoaming\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d79d0 [0134.814] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0134.814] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0134.814] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0134.814] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0134.814] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0134.814] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0134.814] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0134.814] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Vault\\UserProfileRoaming", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Vault\\UserProfileRoaming", lpFilePart=0x0) returned 0x46 [0134.815] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Vault\\UserProfileRoaming\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Vault\\UserProfileRoaming\\", lpFilePart=0x0) returned 0x47 [0134.815] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Vault\\UserProfileRoaming\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d79d0 [0134.815] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0134.815] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0134.815] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0134.815] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0134.815] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0134.815] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0134.815] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Vault\\UserProfileRoaming\\Latest.dat", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Vault\\UserProfileRoaming\\Latest.dat", lpFilePart=0x0) returned 0x51 [0134.815] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0134.815] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Vault\\UserProfileRoaming\\Latest.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\vault\\userprofileroaming\\latest.dat"), fInfoLevelId=0x0, lpFileInformation=0x2317728 | out: lpFileInformation=0x2317728*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfac3dd13, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xfac3dd13, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x158210cd, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x1)) returned 1 [0134.816] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0134.816] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Vault\\UserProfileRoaming\\Latest.dat", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Vault\\UserProfileRoaming\\Latest.dat", lpFilePart=0x0) returned 0x51 [0134.816] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0134.816] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Vault\\UserProfileRoaming\\Latest.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\vault\\userprofileroaming\\latest.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0134.816] GetFileType (hFile=0x444) returned 0x1 [0134.816] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0134.816] GetFileType (hFile=0x444) returned 0x1 [0134.816] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0x1 [0134.816] ReadFile (in: hFile=0x444, lpBuffer=0x23179f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be718, lpOverlapped=0x0 | out: lpBuffer=0x23179f8*, lpNumberOfBytesRead=0x3be718*=0x1, lpOverlapped=0x0) returned 1 [0134.816] CloseHandle (hObject=0x444) returned 1 [0134.857] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Vault\\UserProfileRoaming\\Latest.dat", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Vault\\UserProfileRoaming\\Latest.dat", lpFilePart=0x0) returned 0x51 [0134.857] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0134.857] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Vault\\UserProfileRoaming\\Latest.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\vault\\userprofileroaming\\latest.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0134.858] GetFileType (hFile=0x444) returned 0x1 [0134.858] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0134.858] GetFileType (hFile=0x444) returned 0x1 [0134.859] WriteFile (in: hFile=0x444, lpBuffer=0x218cc40*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x3be628, lpOverlapped=0x0 | out: lpBuffer=0x218cc40*, lpNumberOfBytesWritten=0x3be628*=0x10, lpOverlapped=0x0) returned 1 [0134.859] CloseHandle (hObject=0x444) returned 1 [0134.859] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Vault\\UserProfileRoaming\\Latest.dat", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Vault\\UserProfileRoaming\\Latest.dat", lpFilePart=0x0) returned 0x51 [0134.859] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Vault\\UserProfileRoaming\\Latest.dat.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Vault\\UserProfileRoaming\\Latest.dat.xuy", lpFilePart=0x0) returned 0x55 [0134.859] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0134.859] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Vault\\UserProfileRoaming\\Latest.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\vault\\userprofileroaming\\latest.dat"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfac3dd13, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xfac3dd13, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x3c3b6086, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0134.860] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0134.860] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Vault\\UserProfileRoaming\\Latest.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\vault\\userprofileroaming\\latest.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Vault\\UserProfileRoaming\\Latest.dat.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\vault\\userprofileroaming\\latest.dat.xuy")) returned 1 [0134.860] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0134.861] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Visio", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Visio", lpFilePart=0x0) returned 0x33 [0134.861] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Visio\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Visio\\", lpFilePart=0x0) returned 0x34 [0134.861] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Visio\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d7670 [0134.861] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0134.861] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0134.862] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0134.862] FindClose (in: hFindFile=0x5d7670 | out: hFindFile=0x5d7670) returned 1 [0134.862] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0134.862] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0134.862] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0134.862] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Visio", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Visio", lpFilePart=0x0) returned 0x33 [0134.862] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Visio\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Visio\\", lpFilePart=0x0) returned 0x34 [0134.862] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Visio\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d7f10 [0134.862] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0134.862] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0134.862] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0134.863] FindClose (in: hFindFile=0x5d7f10 | out: hFindFile=0x5d7f10) returned 1 [0134.863] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0134.863] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0134.863] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Visio\\content16.dat", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Visio\\content16.dat", lpFilePart=0x0) returned 0x41 [0134.863] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0134.863] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Visio\\content16.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\visio\\content16.dat"), fInfoLevelId=0x0, lpFileInformation=0x218fa20 | out: lpFileInformation=0x218fa20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ca58556, ftCreationTime.dwHighDateTime=0x1d3aaaf, ftLastAccessTime.dwLowDateTime=0x9ca58556, ftLastAccessTime.dwHighDateTime=0x1d3aaaf, ftLastWriteTime.dwLowDateTime=0x9ca9695b, ftLastWriteTime.dwHighDateTime=0x1d3aaaf, nFileSizeHigh=0x0, nFileSizeLow=0x43580)) returned 1 [0134.863] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0134.863] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Visio\\content16.dat", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Visio\\content16.dat", lpFilePart=0x0) returned 0x41 [0134.863] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0134.863] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Visio\\content16.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\visio\\content16.dat"), fInfoLevelId=0x0, lpFileInformation=0x218fb60 | out: lpFileInformation=0x218fb60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ca58556, ftCreationTime.dwHighDateTime=0x1d3aaaf, ftLastAccessTime.dwLowDateTime=0x9ca58556, ftLastAccessTime.dwHighDateTime=0x1d3aaaf, ftLastWriteTime.dwLowDateTime=0x9ca9695b, ftLastWriteTime.dwHighDateTime=0x1d3aaaf, nFileSizeHigh=0x0, nFileSizeLow=0x43580)) returned 1 [0134.863] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0134.864] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Visio\\content16.dat", nBufferLength=0x105, lpBuffer=0x3be270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Visio\\content16.dat", lpFilePart=0x0) returned 0x41 [0134.864] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0134.864] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Visio\\content16.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\visio\\content16.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0134.864] GetFileType (hFile=0x444) returned 0x1 [0134.864] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6c0) returned 1 [0134.864] GetFileType (hFile=0x444) returned 0x1 [0134.864] ReadFile (in: hFile=0x444, lpBuffer=0x2191f10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be7d8, lpOverlapped=0x0 | out: lpBuffer=0x2191f10*, lpNumberOfBytesRead=0x3be7d8*=0x1000, lpOverlapped=0x0) returned 1 [0134.889] CloseHandle (hObject=0x444) returned 1 [0134.890] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Visio\\content16.dat", nBufferLength=0x105, lpBuffer=0x3be270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Visio\\content16.dat", lpFilePart=0x0) returned 0x41 [0134.890] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0134.890] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Visio\\content16.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\visio\\content16.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0134.890] GetFileType (hFile=0x444) returned 0x1 [0134.890] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6c0) returned 1 [0134.890] GetFileType (hFile=0x444) returned 0x1 [0134.890] WriteFile (in: hFile=0x444, lpBuffer=0x218fc80*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be888, lpOverlapped=0x0 | out: lpBuffer=0x218fc80*, lpNumberOfBytesWritten=0x3be888*=0x2000, lpOverlapped=0x0) returned 1 [0134.890] CloseHandle (hObject=0x444) returned 1 [0134.890] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Visio\\content16.dat", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Visio\\content16.dat", lpFilePart=0x0) returned 0x41 [0134.890] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Visio\\content16.dat.xuy", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Visio\\content16.dat.xuy", lpFilePart=0x0) returned 0x45 [0134.890] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0134.890] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Visio\\content16.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\visio\\content16.dat"), fInfoLevelId=0x0, lpFileInformation=0x3be8a0 | out: lpFileInformation=0x3be8a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ca58556, ftCreationTime.dwHighDateTime=0x1d3aaaf, ftLastAccessTime.dwLowDateTime=0x9ca58556, ftLastAccessTime.dwHighDateTime=0x1d3aaaf, ftLastWriteTime.dwLowDateTime=0x3c4024f8, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x43580)) returned 1 [0134.891] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0134.891] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Visio\\content16.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\visio\\content16.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Visio\\content16.dat.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\visio\\content16.dat.xuy")) returned 1 [0134.892] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0134.892] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows", lpFilePart=0x0) returned 0x35 [0134.892] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\", lpFilePart=0x0) returned 0x36 [0134.892] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d73d0 [0134.892] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0134.892] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0134.892] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0134.892] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0134.892] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0134.892] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0134.893] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0134.893] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0134.893] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0134.893] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0134.893] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0134.893] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0134.893] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0134.893] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0134.894] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0134.894] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0134.894] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0134.894] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0134.894] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0134.894] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0134.894] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0134.894] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0134.895] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0134.895] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0134.895] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0134.895] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0134.895] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0134.895] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0134.895] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0134.895] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0134.895] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0134.896] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0134.896] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0134.896] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0134.896] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0134.896] FindClose (in: hFindFile=0x5d73d0 | out: hFindFile=0x5d73d0) returned 1 [0134.896] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0134.896] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0134.896] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0134.896] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows", lpFilePart=0x0) returned 0x35 [0134.896] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\", lpFilePart=0x0) returned 0x36 [0134.896] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d7c70 [0134.896] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0134.898] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0134.898] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0134.898] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0134.898] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0134.898] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0134.898] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0134.898] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0134.898] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0134.899] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0134.899] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0134.899] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0134.899] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0134.899] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0134.899] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0134.899] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0134.899] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0134.899] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0134.900] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0134.900] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0134.900] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0134.900] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0134.900] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0134.900] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0134.900] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0134.900] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0134.900] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0134.901] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0134.901] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0134.901] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0134.901] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0134.901] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0134.901] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0134.910] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0134.910] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0134.910] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0134.910] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0134.910] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0134.910] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat", lpFilePart=0x0) returned 0x42 [0134.910] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0134.910] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\usrclass.dat"), fInfoLevelId=0x0, lpFileInformation=0x22182d8 | out: lpFileInformation=0x22182d8*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0xa8ae4b98, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0x82f8a99d, ftLastAccessTime.dwHighDateTime=0x1d46680, ftLastWriteTime.dwLowDateTime=0x82f8a99d, ftLastWriteTime.dwHighDateTime=0x1d46680, nFileSizeHigh=0x0, nFileSizeLow=0x1c0000)) returned 1 [0134.910] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0134.910] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat", lpFilePart=0x0) returned 0x42 [0134.910] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0134.910] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\usrclass.dat"), fInfoLevelId=0x0, lpFileInformation=0x2218418 | out: lpFileInformation=0x2218418*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0xa8ae4b98, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0x82f8a99d, ftLastAccessTime.dwHighDateTime=0x1d46680, ftLastWriteTime.dwLowDateTime=0x82f8a99d, ftLastWriteTime.dwHighDateTime=0x1d46680, nFileSizeHigh=0x0, nFileSizeLow=0x1c0000)) returned 1 [0134.911] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0134.911] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat", nBufferLength=0x105, lpBuffer=0x3be270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat", lpFilePart=0x0) returned 0x42 [0134.911] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0134.911] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\usrclass.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0134.912] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb1e0) returned 1 [0134.912] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat", nBufferLength=0x105, lpBuffer=0x3bbe60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat", lpFilePart=0x0) returned 0x42 [0134.912] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc300) returned 1 [0134.912] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\usrclass.dat"), fInfoLevelId=0x0, lpFileInformation=0x3bc3e0 | out: lpFileInformation=0x3bc3e0*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0xa8ae4b98, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0x82f8a99d, ftLastAccessTime.dwHighDateTime=0x1d46680, ftLastWriteTime.dwLowDateTime=0x82f8a99d, ftLastWriteTime.dwHighDateTime=0x1d46680, nFileSizeHigh=0x0, nFileSizeLow=0x1c0000)) returned 1 [0134.913] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc2c0) returned 1 [0134.913] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat", nBufferLength=0x105, lpBuffer=0x3bbe80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat", lpFilePart=0x0) returned 0x42 [0134.913] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc300) returned 1 [0134.913] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\usrclass.dat"), fInfoLevelId=0x0, lpFileInformation=0x221af48 | out: lpFileInformation=0x221af48*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0xa8ae4b98, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0x82f8a99d, ftLastAccessTime.dwHighDateTime=0x1d46680, ftLastWriteTime.dwLowDateTime=0x82f8a99d, ftLastWriteTime.dwHighDateTime=0x1d46680, nFileSizeHigh=0x0, nFileSizeLow=0x1c0000)) returned 1 [0134.913] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc2c0) returned 1 [0134.913] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat", nBufferLength=0x105, lpBuffer=0x3bbe80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat", lpFilePart=0x0) returned 0x42 [0134.913] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc300) returned 1 [0134.913] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\usrclass.dat"), fInfoLevelId=0x0, lpFileInformation=0x221b088 | out: lpFileInformation=0x221b088*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0xa8ae4b98, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0x82f8a99d, ftLastAccessTime.dwHighDateTime=0x1d46680, ftLastWriteTime.dwLowDateTime=0x82f8a99d, ftLastWriteTime.dwHighDateTime=0x1d46680, nFileSizeHigh=0x0, nFileSizeLow=0x1c0000)) returned 1 [0134.913] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc2c0) returned 1 [0134.913] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat", nBufferLength=0x105, lpBuffer=0x3bbd20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat", lpFilePart=0x0) returned 0x42 [0134.913] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc200) returned 1 [0134.913] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\usrclass.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0134.914] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8c90) returned 1 [0134.915] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat.LOG1", lpFilePart=0x0) returned 0x47 [0134.916] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0134.916] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\usrclass.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x221db88 | out: lpFileInformation=0x221db88*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xa8ae4b98, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa8ae4b98, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xa8ae4b98, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x44000)) returned 1 [0134.916] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0134.916] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat.LOG1", lpFilePart=0x0) returned 0x47 [0134.916] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0134.916] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\usrclass.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x221dcd8 | out: lpFileInformation=0x221dcd8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xa8ae4b98, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa8ae4b98, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xa8ae4b98, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x44000)) returned 1 [0134.916] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0134.916] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat.LOG1", lpFilePart=0x0) returned 0x47 [0134.916] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0134.916] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\usrclass.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0134.923] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb1e0) returned 1 [0134.923] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3bbe60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat.LOG1", lpFilePart=0x0) returned 0x47 [0134.924] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc300) returned 1 [0134.924] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\usrclass.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x3bc3e0 | out: lpFileInformation=0x3bc3e0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xa8ae4b98, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa8ae4b98, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xa8ae4b98, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x44000)) returned 1 [0134.924] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc2c0) returned 1 [0134.924] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3bbe80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat.LOG1", lpFilePart=0x0) returned 0x47 [0134.924] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc300) returned 1 [0134.924] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\usrclass.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x2220838 | out: lpFileInformation=0x2220838*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xa8ae4b98, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa8ae4b98, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xa8ae4b98, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x44000)) returned 1 [0134.924] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc2c0) returned 1 [0134.924] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3bbe80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat.LOG1", lpFilePart=0x0) returned 0x47 [0134.924] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc300) returned 1 [0134.924] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\usrclass.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x2220988 | out: lpFileInformation=0x2220988*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xa8ae4b98, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa8ae4b98, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xa8ae4b98, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x44000)) returned 1 [0134.924] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc2c0) returned 1 [0134.924] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3bbd20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat.LOG1", lpFilePart=0x0) returned 0x47 [0134.924] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc200) returned 1 [0134.924] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\usrclass.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0134.926] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8c90) returned 1 [0134.926] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat.LOG2", lpFilePart=0x0) returned 0x47 [0134.926] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0134.926] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\usrclass.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x22234b0 | out: lpFileInformation=0x22234b0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xa8ae4b98, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa8ae4b98, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xa8ae4b98, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0134.927] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0134.927] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat.LOG2", lpFilePart=0x0) returned 0x47 [0134.927] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0134.927] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\usrclass.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x2223600 | out: lpFileInformation=0x2223600*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xa8ae4b98, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa8ae4b98, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xa8ae4b98, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0134.927] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0134.927] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat.LOG2", lpFilePart=0x0) returned 0x47 [0134.927] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0134.927] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\usrclass.dat.log2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0134.928] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb1e0) returned 1 [0134.928] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbe60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat.LOG2", lpFilePart=0x0) returned 0x47 [0134.929] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc300) returned 1 [0134.929] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\usrclass.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x3bc3e0 | out: lpFileInformation=0x3bc3e0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xa8ae4b98, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa8ae4b98, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xa8ae4b98, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0134.929] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc2c0) returned 1 [0134.929] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbe80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat.LOG2", lpFilePart=0x0) returned 0x47 [0134.929] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc300) returned 1 [0134.929] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\usrclass.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x2226160 | out: lpFileInformation=0x2226160*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xa8ae4b98, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa8ae4b98, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xa8ae4b98, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0134.929] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc2c0) returned 1 [0134.929] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbe80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat.LOG2", lpFilePart=0x0) returned 0x47 [0134.929] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc300) returned 1 [0134.929] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\usrclass.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x22262b0 | out: lpFileInformation=0x22262b0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xa8ae4b98, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa8ae4b98, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xa8ae4b98, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0134.929] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc2c0) returned 1 [0134.929] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbd20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat.LOG2", lpFilePart=0x0) returned 0x47 [0134.929] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc200) returned 1 [0134.929] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\usrclass.dat.log2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0134.930] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8c90) returned 1 [0134.931] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat{02173fa4-3c19-11e7-9bc4-c40142ecde47}.TM.blf", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat{02173fa4-3c19-11e7-9bc4-c40142ecde47}.TM.blf", lpFilePart=0x0) returned 0x6f [0134.931] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0134.931] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat{02173fa4-3c19-11e7-9bc4-c40142ecde47}.TM.blf" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\usrclass.dat{02173fa4-3c19-11e7-9bc4-c40142ecde47}.tm.blf"), fInfoLevelId=0x0, lpFileInformation=0x2228dd8 | out: lpFileInformation=0x2228dd8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xa8ae4b98, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa8ae4b98, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xd406b186, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x10000)) returned 1 [0134.931] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0134.931] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat{02173fa4-3c19-11e7-9bc4-c40142ecde47}.TM.blf", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat{02173fa4-3c19-11e7-9bc4-c40142ecde47}.TM.blf", lpFilePart=0x0) returned 0x6f [0134.931] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0134.931] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat{02173fa4-3c19-11e7-9bc4-c40142ecde47}.TM.blf" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\usrclass.dat{02173fa4-3c19-11e7-9bc4-c40142ecde47}.tm.blf"), fInfoLevelId=0x0, lpFileInformation=0x2228fc8 | out: lpFileInformation=0x2228fc8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xa8ae4b98, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa8ae4b98, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xd406b186, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x10000)) returned 1 [0134.932] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0134.932] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat{02173fa4-3c19-11e7-9bc4-c40142ecde47}.TM.blf", nBufferLength=0x105, lpBuffer=0x3be270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat{02173fa4-3c19-11e7-9bc4-c40142ecde47}.TM.blf", lpFilePart=0x0) returned 0x6f [0134.932] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0134.932] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat{02173fa4-3c19-11e7-9bc4-c40142ecde47}.TM.blf" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\usrclass.dat{02173fa4-3c19-11e7-9bc4-c40142ecde47}.tm.blf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0134.933] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb1e0) returned 1 [0134.933] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat{02173fa4-3c19-11e7-9bc4-c40142ecde47}.TM.blf", nBufferLength=0x105, lpBuffer=0x3bbe60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat{02173fa4-3c19-11e7-9bc4-c40142ecde47}.TM.blf", lpFilePart=0x0) returned 0x6f [0134.934] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc300) returned 1 [0134.934] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat{02173fa4-3c19-11e7-9bc4-c40142ecde47}.TM.blf" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\usrclass.dat{02173fa4-3c19-11e7-9bc4-c40142ecde47}.tm.blf"), fInfoLevelId=0x0, lpFileInformation=0x3bc3e0 | out: lpFileInformation=0x3bc3e0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xa8ae4b98, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa8ae4b98, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xd406b186, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x10000)) returned 1 [0134.934] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc2c0) returned 1 [0134.934] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat{02173fa4-3c19-11e7-9bc4-c40142ecde47}.TM.blf", nBufferLength=0x105, lpBuffer=0x3bbe80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat{02173fa4-3c19-11e7-9bc4-c40142ecde47}.TM.blf", lpFilePart=0x0) returned 0x6f [0134.934] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc300) returned 1 [0134.934] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat{02173fa4-3c19-11e7-9bc4-c40142ecde47}.TM.blf" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\usrclass.dat{02173fa4-3c19-11e7-9bc4-c40142ecde47}.tm.blf"), fInfoLevelId=0x0, lpFileInformation=0x222bd08 | out: lpFileInformation=0x222bd08*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xa8ae4b98, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa8ae4b98, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xd406b186, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x10000)) returned 1 [0134.934] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc2c0) returned 1 [0134.934] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat{02173fa4-3c19-11e7-9bc4-c40142ecde47}.TM.blf", nBufferLength=0x105, lpBuffer=0x3bbe80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat{02173fa4-3c19-11e7-9bc4-c40142ecde47}.TM.blf", lpFilePart=0x0) returned 0x6f [0134.934] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc300) returned 1 [0134.934] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat{02173fa4-3c19-11e7-9bc4-c40142ecde47}.TM.blf" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\usrclass.dat{02173fa4-3c19-11e7-9bc4-c40142ecde47}.tm.blf"), fInfoLevelId=0x0, lpFileInformation=0x222bef8 | out: lpFileInformation=0x222bef8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xa8ae4b98, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa8ae4b98, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xd406b186, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x10000)) returned 1 [0134.934] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc2c0) returned 1 [0134.934] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat{02173fa4-3c19-11e7-9bc4-c40142ecde47}.TM.blf", nBufferLength=0x105, lpBuffer=0x3bbd20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat{02173fa4-3c19-11e7-9bc4-c40142ecde47}.TM.blf", lpFilePart=0x0) returned 0x6f [0134.934] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc200) returned 1 [0134.934] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat{02173fa4-3c19-11e7-9bc4-c40142ecde47}.TM.blf" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\usrclass.dat{02173fa4-3c19-11e7-9bc4-c40142ecde47}.tm.blf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0134.936] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8c90) returned 1 [0134.936] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat{02173fa4-3c19-11e7-9bc4-c40142ecde47}.TMContainer00000000000000000001.regtrans-ms", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat{02173fa4-3c19-11e7-9bc4-c40142ecde47}.TMContainer00000000000000000001.regtrans-ms", lpFilePart=0x0) returned 0x94 [0134.936] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0134.937] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat{02173fa4-3c19-11e7-9bc4-c40142ecde47}.TMContainer00000000000000000001.regtrans-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\usrclass.dat{02173fa4-3c19-11e7-9bc4-c40142ecde47}.tmcontainer00000000000000000001.regtrans-ms"), fInfoLevelId=0x0, lpFileInformation=0x222ebc0 | out: lpFileInformation=0x222ebc0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xa8ae4b98, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa8ae4b98, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xd406b186, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x80000)) returned 1 [0134.937] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0134.937] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat{02173fa4-3c19-11e7-9bc4-c40142ecde47}.TMContainer00000000000000000001.regtrans-ms", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat{02173fa4-3c19-11e7-9bc4-c40142ecde47}.TMContainer00000000000000000001.regtrans-ms", lpFilePart=0x0) returned 0x94 [0134.937] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0134.937] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat{02173fa4-3c19-11e7-9bc4-c40142ecde47}.TMContainer00000000000000000001.regtrans-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\usrclass.dat{02173fa4-3c19-11e7-9bc4-c40142ecde47}.tmcontainer00000000000000000001.regtrans-ms"), fInfoLevelId=0x0, lpFileInformation=0x222ee48 | out: lpFileInformation=0x222ee48*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xa8ae4b98, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa8ae4b98, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xd406b186, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x80000)) returned 1 [0134.937] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0134.937] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat{02173fa4-3c19-11e7-9bc4-c40142ecde47}.TMContainer00000000000000000001.regtrans-ms", nBufferLength=0x105, lpBuffer=0x3be270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat{02173fa4-3c19-11e7-9bc4-c40142ecde47}.TMContainer00000000000000000001.regtrans-ms", lpFilePart=0x0) returned 0x94 [0134.937] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0134.937] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat{02173fa4-3c19-11e7-9bc4-c40142ecde47}.TMContainer00000000000000000001.regtrans-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\usrclass.dat{02173fa4-3c19-11e7-9bc4-c40142ecde47}.tmcontainer00000000000000000001.regtrans-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0134.938] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb1e0) returned 1 [0134.939] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat{02173fa4-3c19-11e7-9bc4-c40142ecde47}.TMContainer00000000000000000001.regtrans-ms", nBufferLength=0x105, lpBuffer=0x3bbe60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat{02173fa4-3c19-11e7-9bc4-c40142ecde47}.TMContainer00000000000000000001.regtrans-ms", lpFilePart=0x0) returned 0x94 [0134.939] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc300) returned 1 [0134.939] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat{02173fa4-3c19-11e7-9bc4-c40142ecde47}.TMContainer00000000000000000001.regtrans-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\usrclass.dat{02173fa4-3c19-11e7-9bc4-c40142ecde47}.tmcontainer00000000000000000001.regtrans-ms"), fInfoLevelId=0x0, lpFileInformation=0x3bc3e0 | out: lpFileInformation=0x3bc3e0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xa8ae4b98, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa8ae4b98, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xd406b186, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x80000)) returned 1 [0134.939] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc2c0) returned 1 [0134.939] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat{02173fa4-3c19-11e7-9bc4-c40142ecde47}.TMContainer00000000000000000001.regtrans-ms", nBufferLength=0x105, lpBuffer=0x3bbe80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat{02173fa4-3c19-11e7-9bc4-c40142ecde47}.TMContainer00000000000000000001.regtrans-ms", lpFilePart=0x0) returned 0x94 [0134.939] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc300) returned 1 [0134.939] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat{02173fa4-3c19-11e7-9bc4-c40142ecde47}.TMContainer00000000000000000001.regtrans-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\usrclass.dat{02173fa4-3c19-11e7-9bc4-c40142ecde47}.tmcontainer00000000000000000001.regtrans-ms"), fInfoLevelId=0x0, lpFileInformation=0x2231d50 | out: lpFileInformation=0x2231d50*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xa8ae4b98, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa8ae4b98, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xd406b186, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x80000)) returned 1 [0134.939] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc2c0) returned 1 [0134.939] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat{02173fa4-3c19-11e7-9bc4-c40142ecde47}.TMContainer00000000000000000001.regtrans-ms", nBufferLength=0x105, lpBuffer=0x3bbe80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat{02173fa4-3c19-11e7-9bc4-c40142ecde47}.TMContainer00000000000000000001.regtrans-ms", lpFilePart=0x0) returned 0x94 [0134.939] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc300) returned 1 [0134.939] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat{02173fa4-3c19-11e7-9bc4-c40142ecde47}.TMContainer00000000000000000001.regtrans-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\usrclass.dat{02173fa4-3c19-11e7-9bc4-c40142ecde47}.tmcontainer00000000000000000001.regtrans-ms"), fInfoLevelId=0x0, lpFileInformation=0x2231fd8 | out: lpFileInformation=0x2231fd8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xa8ae4b98, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa8ae4b98, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xd406b186, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x80000)) returned 1 [0134.939] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc2c0) returned 1 [0134.939] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat{02173fa4-3c19-11e7-9bc4-c40142ecde47}.TMContainer00000000000000000001.regtrans-ms", nBufferLength=0x105, lpBuffer=0x3bbd20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat{02173fa4-3c19-11e7-9bc4-c40142ecde47}.TMContainer00000000000000000001.regtrans-ms", lpFilePart=0x0) returned 0x94 [0134.939] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc200) returned 1 [0134.939] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat{02173fa4-3c19-11e7-9bc4-c40142ecde47}.TMContainer00000000000000000001.regtrans-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\usrclass.dat{02173fa4-3c19-11e7-9bc4-c40142ecde47}.tmcontainer00000000000000000001.regtrans-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0134.941] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8c90) returned 1 [0134.941] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat{02173fa4-3c19-11e7-9bc4-c40142ecde47}.TMContainer00000000000000000002.regtrans-ms", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat{02173fa4-3c19-11e7-9bc4-c40142ecde47}.TMContainer00000000000000000002.regtrans-ms", lpFilePart=0x0) returned 0x94 [0134.941] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0134.941] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat{02173fa4-3c19-11e7-9bc4-c40142ecde47}.TMContainer00000000000000000002.regtrans-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\usrclass.dat{02173fa4-3c19-11e7-9bc4-c40142ecde47}.tmcontainer00000000000000000002.regtrans-ms"), fInfoLevelId=0x0, lpFileInformation=0x2234e18 | out: lpFileInformation=0x2234e18*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xa8b0adf1, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa8b0adf1, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xd406b186, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x80000)) returned 1 [0134.941] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0134.941] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat{02173fa4-3c19-11e7-9bc4-c40142ecde47}.TMContainer00000000000000000002.regtrans-ms", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat{02173fa4-3c19-11e7-9bc4-c40142ecde47}.TMContainer00000000000000000002.regtrans-ms", lpFilePart=0x0) returned 0x94 [0134.942] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0134.942] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat{02173fa4-3c19-11e7-9bc4-c40142ecde47}.TMContainer00000000000000000002.regtrans-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\usrclass.dat{02173fa4-3c19-11e7-9bc4-c40142ecde47}.tmcontainer00000000000000000002.regtrans-ms"), fInfoLevelId=0x0, lpFileInformation=0x22350a0 | out: lpFileInformation=0x22350a0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xa8b0adf1, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa8b0adf1, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xd406b186, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x80000)) returned 1 [0134.942] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0134.942] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat{02173fa4-3c19-11e7-9bc4-c40142ecde47}.TMContainer00000000000000000002.regtrans-ms", nBufferLength=0x105, lpBuffer=0x3be270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat{02173fa4-3c19-11e7-9bc4-c40142ecde47}.TMContainer00000000000000000002.regtrans-ms", lpFilePart=0x0) returned 0x94 [0134.942] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0134.942] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat{02173fa4-3c19-11e7-9bc4-c40142ecde47}.TMContainer00000000000000000002.regtrans-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\usrclass.dat{02173fa4-3c19-11e7-9bc4-c40142ecde47}.tmcontainer00000000000000000002.regtrans-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0134.943] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb1e0) returned 1 [0134.943] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat{02173fa4-3c19-11e7-9bc4-c40142ecde47}.TMContainer00000000000000000002.regtrans-ms", nBufferLength=0x105, lpBuffer=0x3bbe60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat{02173fa4-3c19-11e7-9bc4-c40142ecde47}.TMContainer00000000000000000002.regtrans-ms", lpFilePart=0x0) returned 0x94 [0134.943] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc300) returned 1 [0134.943] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat{02173fa4-3c19-11e7-9bc4-c40142ecde47}.TMContainer00000000000000000002.regtrans-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\usrclass.dat{02173fa4-3c19-11e7-9bc4-c40142ecde47}.tmcontainer00000000000000000002.regtrans-ms"), fInfoLevelId=0x0, lpFileInformation=0x3bc3e0 | out: lpFileInformation=0x3bc3e0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xa8b0adf1, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa8b0adf1, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xd406b186, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x80000)) returned 1 [0134.943] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc2c0) returned 1 [0134.943] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat{02173fa4-3c19-11e7-9bc4-c40142ecde47}.TMContainer00000000000000000002.regtrans-ms", nBufferLength=0x105, lpBuffer=0x3bbe80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat{02173fa4-3c19-11e7-9bc4-c40142ecde47}.TMContainer00000000000000000002.regtrans-ms", lpFilePart=0x0) returned 0x94 [0134.943] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc300) returned 1 [0134.944] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat{02173fa4-3c19-11e7-9bc4-c40142ecde47}.TMContainer00000000000000000002.regtrans-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\usrclass.dat{02173fa4-3c19-11e7-9bc4-c40142ecde47}.tmcontainer00000000000000000002.regtrans-ms"), fInfoLevelId=0x0, lpFileInformation=0x2237fa8 | out: lpFileInformation=0x2237fa8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xa8b0adf1, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa8b0adf1, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xd406b186, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x80000)) returned 1 [0134.944] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc2c0) returned 1 [0134.944] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat{02173fa4-3c19-11e7-9bc4-c40142ecde47}.TMContainer00000000000000000002.regtrans-ms", nBufferLength=0x105, lpBuffer=0x3bbe80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat{02173fa4-3c19-11e7-9bc4-c40142ecde47}.TMContainer00000000000000000002.regtrans-ms", lpFilePart=0x0) returned 0x94 [0134.944] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc300) returned 1 [0134.944] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat{02173fa4-3c19-11e7-9bc4-c40142ecde47}.TMContainer00000000000000000002.regtrans-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\usrclass.dat{02173fa4-3c19-11e7-9bc4-c40142ecde47}.tmcontainer00000000000000000002.regtrans-ms"), fInfoLevelId=0x0, lpFileInformation=0x2238230 | out: lpFileInformation=0x2238230*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xa8b0adf1, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa8b0adf1, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xd406b186, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x80000)) returned 1 [0134.944] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc2c0) returned 1 [0134.944] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat{02173fa4-3c19-11e7-9bc4-c40142ecde47}.TMContainer00000000000000000002.regtrans-ms", nBufferLength=0x105, lpBuffer=0x3bbd20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat{02173fa4-3c19-11e7-9bc4-c40142ecde47}.TMContainer00000000000000000002.regtrans-ms", lpFilePart=0x0) returned 0x94 [0134.944] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc200) returned 1 [0134.944] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat{02173fa4-3c19-11e7-9bc4-c40142ecde47}.TMContainer00000000000000000002.regtrans-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\usrclass.dat{02173fa4-3c19-11e7-9bc4-c40142ecde47}.tmcontainer00000000000000000002.regtrans-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0134.945] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8c90) returned 1 [0134.946] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCacheLock.dat", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCacheLock.dat", lpFilePart=0x0) returned 0x46 [0134.946] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0134.946] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCacheLock.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcachelock.dat"), fInfoLevelId=0x0, lpFileInformation=0x223b060 | out: lpFileInformation=0x223b060*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xaa901f6d, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xaa901f6d, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xaa901f6d, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0134.946] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0134.946] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCacheLock.dat", nBufferLength=0x105, lpBuffer=0x3be1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCacheLock.dat", lpFilePart=0x0) returned 0x46 [0134.946] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6c0) returned 1 [0134.946] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCacheLock.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcachelock.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0134.947] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb150) returned 1 [0134.948] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCacheLock.dat", nBufferLength=0x105, lpBuffer=0x3bbdd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCacheLock.dat", lpFilePart=0x0) returned 0x46 [0134.948] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc270) returned 1 [0134.948] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCacheLock.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcachelock.dat"), fInfoLevelId=0x0, lpFileInformation=0x3bc350 | out: lpFileInformation=0x3bc350*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xaa901f6d, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xaa901f6d, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xaa901f6d, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0134.948] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc230) returned 1 [0134.948] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCacheLock.dat", nBufferLength=0x105, lpBuffer=0x3bbdf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCacheLock.dat", lpFilePart=0x0) returned 0x46 [0134.948] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc270) returned 1 [0134.948] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCacheLock.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcachelock.dat"), fInfoLevelId=0x0, lpFileInformation=0x223bba8 | out: lpFileInformation=0x223bba8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xaa901f6d, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xaa901f6d, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xaa901f6d, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0134.948] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc230) returned 1 [0134.949] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCacheLock.dat", nBufferLength=0x105, lpBuffer=0x3bbc50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCacheLock.dat", lpFilePart=0x0) returned 0x46 [0134.949] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc130) returned 1 [0134.949] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCacheLock.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcachelock.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0134.951] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8bc0) returned 1 [0134.951] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0134.951] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\0", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\0", lpFilePart=0x0) returned 0x37 [0134.951] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\0\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\0\\", lpFilePart=0x0) returned 0x38 [0134.951] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\0\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7c70 [0134.952] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0134.952] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0134.952] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0134.952] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0134.952] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0134.952] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0134.952] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\0", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\0", lpFilePart=0x0) returned 0x37 [0134.952] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\0\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\0\\", lpFilePart=0x0) returned 0x38 [0134.952] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\0\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7370 [0134.952] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0134.953] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0134.953] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0134.953] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0134.953] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0134.953] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0134.953] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\1024", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\1024", lpFilePart=0x0) returned 0x3a [0134.953] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\1024\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\1024\\", lpFilePart=0x0) returned 0x3b [0134.953] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\1024\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d8090 [0134.954] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0134.954] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0134.954] FindClose (in: hFindFile=0x5d8090 | out: hFindFile=0x5d8090) returned 1 [0134.954] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0134.954] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0134.954] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0134.954] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\1024", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\1024", lpFilePart=0x0) returned 0x3a [0134.954] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\1024\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\1024\\", lpFilePart=0x0) returned 0x3b [0134.954] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\1024\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7370 [0134.955] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0134.955] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0134.955] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0134.955] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0134.955] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0134.955] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0134.955] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\1033", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\1033", lpFilePart=0x0) returned 0x3a [0134.955] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\1033\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\1033\\", lpFilePart=0x0) returned 0x3b [0134.955] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\1033\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7eb0 [0134.955] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0134.955] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0134.956] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0134.956] FindClose (in: hFindFile=0x5d7eb0 | out: hFindFile=0x5d7eb0) returned 1 [0134.956] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0134.956] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0134.956] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0134.956] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\1033", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\1033", lpFilePart=0x0) returned 0x3a [0134.956] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\1033\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\1033\\", lpFilePart=0x0) returned 0x3b [0134.956] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\1033\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d81b0 [0134.956] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0134.956] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0134.956] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0134.956] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0134.957] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0134.957] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0134.957] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\1033\\StructuredQuerySchema.bin", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\1033\\StructuredQuerySchema.bin", lpFilePart=0x0) returned 0x54 [0134.957] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0134.957] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\1033\\StructuredQuerySchema.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\1033\\structuredqueryschema.bin"), fInfoLevelId=0x0, lpFileInformation=0x22413d8 | out: lpFileInformation=0x22413d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37789d2b, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x37789d2b, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0xb3f60fcb, ftLastWriteTime.dwHighDateTime=0x1d336e4, nFileSizeHigh=0x0, nFileSizeLow=0x61068)) returned 1 [0134.957] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0134.957] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\1033\\StructuredQuerySchema.bin", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\1033\\StructuredQuerySchema.bin", lpFilePart=0x0) returned 0x54 [0134.957] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0134.957] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\1033\\StructuredQuerySchema.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\1033\\structuredqueryschema.bin"), fInfoLevelId=0x0, lpFileInformation=0x2241558 | out: lpFileInformation=0x2241558*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37789d2b, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x37789d2b, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0xb3f60fcb, ftLastWriteTime.dwHighDateTime=0x1d336e4, nFileSizeHigh=0x0, nFileSizeLow=0x61068)) returned 1 [0134.957] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0134.957] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\1033\\StructuredQuerySchema.bin", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\1033\\StructuredQuerySchema.bin", lpFilePart=0x0) returned 0x54 [0134.957] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0134.957] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\1033\\StructuredQuerySchema.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\1033\\structuredqueryschema.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0134.958] GetFileType (hFile=0x444) returned 0x1 [0134.958] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0134.958] GetFileType (hFile=0x444) returned 0x1 [0134.958] ReadFile (in: hFile=0x444, lpBuffer=0x2243988, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x2243988*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0135.031] CloseHandle (hObject=0x444) returned 1 [0135.031] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\1033\\StructuredQuerySchema.bin", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\1033\\StructuredQuerySchema.bin", lpFilePart=0x0) returned 0x54 [0135.032] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0135.032] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\1033\\StructuredQuerySchema.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\1033\\structuredqueryschema.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0135.032] GetFileType (hFile=0x444) returned 0x1 [0135.032] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0135.032] GetFileType (hFile=0x444) returned 0x1 [0135.032] WriteFile (in: hFile=0x444, lpBuffer=0x22416b8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x22416b8*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0135.032] CloseHandle (hObject=0x444) returned 1 [0135.032] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\1033\\StructuredQuerySchema.bin", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\1033\\StructuredQuerySchema.bin", lpFilePart=0x0) returned 0x54 [0135.032] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\1033\\StructuredQuerySchema.bin.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\1033\\StructuredQuerySchema.bin.xuy", lpFilePart=0x0) returned 0x58 [0135.032] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0135.032] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\1033\\StructuredQuerySchema.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\1033\\structuredqueryschema.bin"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37789d2b, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x37789d2b, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x3c559d3f, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x61068)) returned 1 [0135.032] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0135.033] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\1033\\StructuredQuerySchema.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\1033\\structuredqueryschema.bin"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\1033\\StructuredQuerySchema.bin.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\1033\\structuredqueryschema.bin.xuy")) returned 1 [0135.034] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0135.034] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache", lpFilePart=0x0) returned 0x47 [0135.034] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\", lpFilePart=0x0) returned 0x48 [0135.034] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7d30 [0135.035] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0135.035] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0135.036] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0135.036] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0135.036] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0135.036] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0135.036] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0135.036] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0135.036] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0135.036] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0135.037] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0135.037] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0135.037] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0135.037] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0135.037] FindClose (in: hFindFile=0x5d7d30 | out: hFindFile=0x5d7d30) returned 1 [0135.038] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0135.038] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0135.038] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0135.038] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache", lpFilePart=0x0) returned 0x47 [0135.038] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\", lpFilePart=0x0) returned 0x48 [0135.038] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d78b0 [0135.039] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0135.039] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0135.039] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0135.039] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0135.039] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0135.039] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0135.039] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0135.040] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0135.040] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0135.040] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0135.040] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0135.040] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0135.040] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0135.040] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0135.040] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0135.041] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0135.041] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0135.041] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{219D4102-8477-4DA3-B68D-CBEB50436A31}.png", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{219D4102-8477-4DA3-B68D-CBEB50436A31}.png", lpFilePart=0x0) returned 0x72 [0135.041] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0135.041] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{219D4102-8477-4DA3-B68D-CBEB50436A31}.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\actioncentercache\\{219d4102-8477-4da3-b68d-cbeb50436a31}.png"), fInfoLevelId=0x0, lpFileInformation=0x22c61b8 | out: lpFileInformation=0x22c61b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8601055c, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x8601055c, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0xbb9ac460, ftLastWriteTime.dwHighDateTime=0x1d0baff, nFileSizeHigh=0x0, nFileSizeLow=0xa42)) returned 1 [0135.042] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0135.042] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{219D4102-8477-4DA3-B68D-CBEB50436A31}.png", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{219D4102-8477-4DA3-B68D-CBEB50436A31}.png", lpFilePart=0x0) returned 0x72 [0135.042] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0135.042] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{219D4102-8477-4DA3-B68D-CBEB50436A31}.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\actioncentercache\\{219d4102-8477-4da3-b68d-cbeb50436a31}.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0135.042] GetFileType (hFile=0x444) returned 0x1 [0135.042] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0135.042] GetFileType (hFile=0x444) returned 0x1 [0135.042] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0xa42 [0135.043] ReadFile (in: hFile=0x444, lpBuffer=0x22c6fc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be718, lpOverlapped=0x0 | out: lpBuffer=0x22c6fc8*, lpNumberOfBytesRead=0x3be718*=0xa42, lpOverlapped=0x0) returned 1 [0135.044] CloseHandle (hObject=0x444) returned 1 [0135.054] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{219D4102-8477-4DA3-B68D-CBEB50436A31}.png", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{219D4102-8477-4DA3-B68D-CBEB50436A31}.png", lpFilePart=0x0) returned 0x72 [0135.054] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0135.054] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{219D4102-8477-4DA3-B68D-CBEB50436A31}.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\actioncentercache\\{219d4102-8477-4da3-b68d-cbeb50436a31}.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0135.055] GetFileType (hFile=0x444) returned 0x1 [0135.055] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0135.055] GetFileType (hFile=0x444) returned 0x1 [0135.055] WriteFile (in: hFile=0x444, lpBuffer=0x23413c8*, nNumberOfBytesToWrite=0xa50, lpNumberOfBytesWritten=0x3be628, lpOverlapped=0x0 | out: lpBuffer=0x23413c8*, lpNumberOfBytesWritten=0x3be628*=0xa50, lpOverlapped=0x0) returned 1 [0135.056] CloseHandle (hObject=0x444) returned 1 [0135.056] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{219D4102-8477-4DA3-B68D-CBEB50436A31}.png", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{219D4102-8477-4DA3-B68D-CBEB50436A31}.png", lpFilePart=0x0) returned 0x72 [0135.056] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{219D4102-8477-4DA3-B68D-CBEB50436A31}.png.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{219D4102-8477-4DA3-B68D-CBEB50436A31}.png.xuy", lpFilePart=0x0) returned 0x76 [0135.056] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0135.056] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{219D4102-8477-4DA3-B68D-CBEB50436A31}.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\actioncentercache\\{219d4102-8477-4da3-b68d-cbeb50436a31}.png"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8601055c, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x8601055c, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x3c57fc0e, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xa50)) returned 1 [0135.057] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0135.057] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{219D4102-8477-4DA3-B68D-CBEB50436A31}.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\actioncentercache\\{219d4102-8477-4da3-b68d-cbeb50436a31}.png"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{219D4102-8477-4DA3-B68D-CBEB50436A31}.png.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\actioncentercache\\{219d4102-8477-4da3-b68d-cbeb50436a31}.png.xuy")) returned 1 [0135.058] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{3142F004-AD96-48E4-B756-4D6F73D1B9C8}.png", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{3142F004-AD96-48E4-B756-4D6F73D1B9C8}.png", lpFilePart=0x0) returned 0x72 [0135.058] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0135.058] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{3142F004-AD96-48E4-B756-4D6F73D1B9C8}.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\actioncentercache\\{3142f004-ad96-48e4-b756-4d6f73d1b9c8}.png"), fInfoLevelId=0x0, lpFileInformation=0x2342738 | out: lpFileInformation=0x2342738*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5fa53b6b, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x5fa53b6b, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0xbb9ac460, ftLastWriteTime.dwHighDateTime=0x1d0baff, nFileSizeHigh=0x0, nFileSizeLow=0xa42)) returned 1 [0135.058] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0135.058] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{3142F004-AD96-48E4-B756-4D6F73D1B9C8}.png", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{3142F004-AD96-48E4-B756-4D6F73D1B9C8}.png", lpFilePart=0x0) returned 0x72 [0135.058] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0135.058] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{3142F004-AD96-48E4-B756-4D6F73D1B9C8}.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\actioncentercache\\{3142f004-ad96-48e4-b756-4d6f73d1b9c8}.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0135.058] GetFileType (hFile=0x444) returned 0x1 [0135.058] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0135.059] GetFileType (hFile=0x444) returned 0x1 [0135.059] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0xa42 [0135.059] ReadFile (in: hFile=0x444, lpBuffer=0x2343548, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be718, lpOverlapped=0x0 | out: lpBuffer=0x2343548*, lpNumberOfBytesRead=0x3be718*=0xa42, lpOverlapped=0x0) returned 1 [0135.069] CloseHandle (hObject=0x444) returned 1 [0135.109] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{3142F004-AD96-48E4-B756-4D6F73D1B9C8}.png", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{3142F004-AD96-48E4-B756-4D6F73D1B9C8}.png", lpFilePart=0x0) returned 0x72 [0135.109] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0135.109] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{3142F004-AD96-48E4-B756-4D6F73D1B9C8}.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\actioncentercache\\{3142f004-ad96-48e4-b756-4d6f73d1b9c8}.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0135.111] GetFileType (hFile=0x444) returned 0x1 [0135.111] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0135.111] GetFileType (hFile=0x444) returned 0x1 [0135.111] WriteFile (in: hFile=0x444, lpBuffer=0x21c0ac0*, nNumberOfBytesToWrite=0xa50, lpNumberOfBytesWritten=0x3be628, lpOverlapped=0x0 | out: lpBuffer=0x21c0ac0*, lpNumberOfBytesWritten=0x3be628*=0xa50, lpOverlapped=0x0) returned 1 [0135.112] CloseHandle (hObject=0x444) returned 1 [0135.112] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{3142F004-AD96-48E4-B756-4D6F73D1B9C8}.png", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{3142F004-AD96-48E4-B756-4D6F73D1B9C8}.png", lpFilePart=0x0) returned 0x72 [0135.112] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{3142F004-AD96-48E4-B756-4D6F73D1B9C8}.png.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{3142F004-AD96-48E4-B756-4D6F73D1B9C8}.png.xuy", lpFilePart=0x0) returned 0x76 [0135.112] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0135.112] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{3142F004-AD96-48E4-B756-4D6F73D1B9C8}.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\actioncentercache\\{3142f004-ad96-48e4-b756-4d6f73d1b9c8}.png"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5fa53b6b, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x5fa53b6b, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x3c618659, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xa50)) returned 1 [0135.112] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0135.112] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{3142F004-AD96-48E4-B756-4D6F73D1B9C8}.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\actioncentercache\\{3142f004-ad96-48e4-b756-4d6f73d1b9c8}.png"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{3142F004-AD96-48E4-B756-4D6F73D1B9C8}.png.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\actioncentercache\\{3142f004-ad96-48e4-b756-4d6f73d1b9c8}.png.xuy")) returned 1 [0135.113] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{46F14CBA-A8C3-4AB0-8748-F3A8C35622B4}.png", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{46F14CBA-A8C3-4AB0-8748-F3A8C35622B4}.png", lpFilePart=0x0) returned 0x72 [0135.113] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0135.113] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{46F14CBA-A8C3-4AB0-8748-F3A8C35622B4}.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\actioncentercache\\{46f14cba-a8c3-4ab0-8748-f3a8c35622b4}.png"), fInfoLevelId=0x0, lpFileInformation=0x21c1e30 | out: lpFileInformation=0x21c1e30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5bb2b9b4, ftCreationTime.dwHighDateTime=0x1d3001c, ftLastAccessTime.dwLowDateTime=0x5bb2b9b4, ftLastAccessTime.dwHighDateTime=0x1d3001c, ftLastWriteTime.dwLowDateTime=0xbb9ac460, ftLastWriteTime.dwHighDateTime=0x1d0baff, nFileSizeHigh=0x0, nFileSizeLow=0xa42)) returned 1 [0135.113] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0135.114] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{46F14CBA-A8C3-4AB0-8748-F3A8C35622B4}.png", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{46F14CBA-A8C3-4AB0-8748-F3A8C35622B4}.png", lpFilePart=0x0) returned 0x72 [0135.114] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0135.114] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{46F14CBA-A8C3-4AB0-8748-F3A8C35622B4}.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\actioncentercache\\{46f14cba-a8c3-4ab0-8748-f3a8c35622b4}.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0135.114] GetFileType (hFile=0x444) returned 0x1 [0135.114] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0135.114] GetFileType (hFile=0x444) returned 0x1 [0135.114] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0xa42 [0135.114] ReadFile (in: hFile=0x444, lpBuffer=0x21c2c40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be718, lpOverlapped=0x0 | out: lpBuffer=0x21c2c40*, lpNumberOfBytesRead=0x3be718*=0xa42, lpOverlapped=0x0) returned 1 [0135.115] CloseHandle (hObject=0x444) returned 1 [0135.125] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{46F14CBA-A8C3-4AB0-8748-F3A8C35622B4}.png", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{46F14CBA-A8C3-4AB0-8748-F3A8C35622B4}.png", lpFilePart=0x0) returned 0x72 [0135.126] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0135.126] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{46F14CBA-A8C3-4AB0-8748-F3A8C35622B4}.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\actioncentercache\\{46f14cba-a8c3-4ab0-8748-f3a8c35622b4}.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0135.127] GetFileType (hFile=0x444) returned 0x1 [0135.127] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0135.127] GetFileType (hFile=0x444) returned 0x1 [0135.127] WriteFile (in: hFile=0x444, lpBuffer=0x223d040*, nNumberOfBytesToWrite=0xa50, lpNumberOfBytesWritten=0x3be628, lpOverlapped=0x0 | out: lpBuffer=0x223d040*, lpNumberOfBytesWritten=0x3be628*=0xa50, lpOverlapped=0x0) returned 1 [0135.128] CloseHandle (hObject=0x444) returned 1 [0135.128] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{46F14CBA-A8C3-4AB0-8748-F3A8C35622B4}.png", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{46F14CBA-A8C3-4AB0-8748-F3A8C35622B4}.png", lpFilePart=0x0) returned 0x72 [0135.128] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{46F14CBA-A8C3-4AB0-8748-F3A8C35622B4}.png.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{46F14CBA-A8C3-4AB0-8748-F3A8C35622B4}.png.xuy", lpFilePart=0x0) returned 0x76 [0135.128] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0135.128] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{46F14CBA-A8C3-4AB0-8748-F3A8C35622B4}.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\actioncentercache\\{46f14cba-a8c3-4ab0-8748-f3a8c35622b4}.png"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5bb2b9b4, ftCreationTime.dwHighDateTime=0x1d3001c, ftLastAccessTime.dwLowDateTime=0x5bb2b9b4, ftLastAccessTime.dwHighDateTime=0x1d3001c, ftLastWriteTime.dwLowDateTime=0x3c643738, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xa50)) returned 1 [0135.128] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0135.128] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{46F14CBA-A8C3-4AB0-8748-F3A8C35622B4}.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\actioncentercache\\{46f14cba-a8c3-4ab0-8748-f3a8c35622b4}.png"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{46F14CBA-A8C3-4AB0-8748-F3A8C35622B4}.png.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\actioncentercache\\{46f14cba-a8c3-4ab0-8748-f3a8c35622b4}.png.xuy")) returned 1 [0135.129] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{5C217167-4731-4AFD-B181-6274E3DFBF25}.png", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{5C217167-4731-4AFD-B181-6274E3DFBF25}.png", lpFilePart=0x0) returned 0x72 [0135.129] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0135.129] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{5C217167-4731-4AFD-B181-6274E3DFBF25}.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\actioncentercache\\{5c217167-4731-4afd-b181-6274e3dfbf25}.png"), fInfoLevelId=0x0, lpFileInformation=0x223e3b0 | out: lpFileInformation=0x223e3b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5feb673c, ftCreationTime.dwHighDateTime=0x1d301d0, ftLastAccessTime.dwLowDateTime=0x5feb673c, ftLastAccessTime.dwHighDateTime=0x1d301d0, ftLastWriteTime.dwLowDateTime=0xbb9ac460, ftLastWriteTime.dwHighDateTime=0x1d0baff, nFileSizeHigh=0x0, nFileSizeLow=0xa42)) returned 1 [0135.130] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0135.130] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{5C217167-4731-4AFD-B181-6274E3DFBF25}.png", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{5C217167-4731-4AFD-B181-6274E3DFBF25}.png", lpFilePart=0x0) returned 0x72 [0135.130] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0135.130] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{5C217167-4731-4AFD-B181-6274E3DFBF25}.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\actioncentercache\\{5c217167-4731-4afd-b181-6274e3dfbf25}.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0135.130] GetFileType (hFile=0x444) returned 0x1 [0135.130] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0135.130] GetFileType (hFile=0x444) returned 0x1 [0135.130] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0xa42 [0135.130] ReadFile (in: hFile=0x444, lpBuffer=0x223f1c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be718, lpOverlapped=0x0 | out: lpBuffer=0x223f1c0*, lpNumberOfBytesRead=0x3be718*=0xa42, lpOverlapped=0x0) returned 1 [0135.137] CloseHandle (hObject=0x444) returned 1 [0135.147] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{5C217167-4731-4AFD-B181-6274E3DFBF25}.png", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{5C217167-4731-4AFD-B181-6274E3DFBF25}.png", lpFilePart=0x0) returned 0x72 [0135.147] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0135.147] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{5C217167-4731-4AFD-B181-6274E3DFBF25}.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\actioncentercache\\{5c217167-4731-4afd-b181-6274e3dfbf25}.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0135.148] GetFileType (hFile=0x444) returned 0x1 [0135.148] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0135.148] GetFileType (hFile=0x444) returned 0x1 [0135.149] WriteFile (in: hFile=0x444, lpBuffer=0x22b95c0*, nNumberOfBytesToWrite=0xa50, lpNumberOfBytesWritten=0x3be628, lpOverlapped=0x0 | out: lpBuffer=0x22b95c0*, lpNumberOfBytesWritten=0x3be628*=0xa50, lpOverlapped=0x0) returned 1 [0135.149] CloseHandle (hObject=0x444) returned 1 [0135.149] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{5C217167-4731-4AFD-B181-6274E3DFBF25}.png", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{5C217167-4731-4AFD-B181-6274E3DFBF25}.png", lpFilePart=0x0) returned 0x72 [0135.149] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{5C217167-4731-4AFD-B181-6274E3DFBF25}.png.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{5C217167-4731-4AFD-B181-6274E3DFBF25}.png.xuy", lpFilePart=0x0) returned 0x76 [0135.149] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0135.149] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{5C217167-4731-4AFD-B181-6274E3DFBF25}.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\actioncentercache\\{5c217167-4731-4afd-b181-6274e3dfbf25}.png"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5feb673c, ftCreationTime.dwHighDateTime=0x1d301d0, ftLastAccessTime.dwLowDateTime=0x5feb673c, ftLastAccessTime.dwHighDateTime=0x1d301d0, ftLastWriteTime.dwLowDateTime=0x3c664a66, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xa50)) returned 1 [0135.150] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0135.150] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{5C217167-4731-4AFD-B181-6274E3DFBF25}.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\actioncentercache\\{5c217167-4731-4afd-b181-6274e3dfbf25}.png"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{5C217167-4731-4AFD-B181-6274E3DFBF25}.png.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\actioncentercache\\{5c217167-4731-4afd-b181-6274e3dfbf25}.png.xuy")) returned 1 [0135.151] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{708686A3-2087-4B70-81FB-7F608AD7F5D4}.png", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{708686A3-2087-4B70-81FB-7F608AD7F5D4}.png", lpFilePart=0x0) returned 0x72 [0135.151] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0135.151] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{708686A3-2087-4B70-81FB-7F608AD7F5D4}.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\actioncentercache\\{708686a3-2087-4b70-81fb-7f608ad7f5d4}.png"), fInfoLevelId=0x0, lpFileInformation=0x22ba930 | out: lpFileInformation=0x22ba930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ace0677, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x6ace0677, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0xbb9ac460, ftLastWriteTime.dwHighDateTime=0x1d0baff, nFileSizeHigh=0x0, nFileSizeLow=0x1ae6)) returned 1 [0135.151] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0135.151] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{708686A3-2087-4B70-81FB-7F608AD7F5D4}.png", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{708686A3-2087-4B70-81FB-7F608AD7F5D4}.png", lpFilePart=0x0) returned 0x72 [0135.151] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0135.151] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{708686A3-2087-4B70-81FB-7F608AD7F5D4}.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\actioncentercache\\{708686a3-2087-4b70-81fb-7f608ad7f5d4}.png"), fInfoLevelId=0x0, lpFileInformation=0x22bab08 | out: lpFileInformation=0x22bab08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ace0677, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x6ace0677, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0xbb9ac460, ftLastWriteTime.dwHighDateTime=0x1d0baff, nFileSizeHigh=0x0, nFileSizeLow=0x1ae6)) returned 1 [0135.151] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0135.151] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{708686A3-2087-4B70-81FB-7F608AD7F5D4}.png", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{708686A3-2087-4B70-81FB-7F608AD7F5D4}.png", lpFilePart=0x0) returned 0x72 [0135.151] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0135.151] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{708686A3-2087-4B70-81FB-7F608AD7F5D4}.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\actioncentercache\\{708686a3-2087-4b70-81fb-7f608ad7f5d4}.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0135.152] GetFileType (hFile=0x444) returned 0x1 [0135.152] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0135.152] GetFileType (hFile=0x444) returned 0x1 [0135.152] ReadFile (in: hFile=0x444, lpBuffer=0x22bcfe8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x22bcfe8*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0135.168] CloseHandle (hObject=0x444) returned 1 [0135.168] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{708686A3-2087-4B70-81FB-7F608AD7F5D4}.png", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{708686A3-2087-4B70-81FB-7F608AD7F5D4}.png", lpFilePart=0x0) returned 0x72 [0135.168] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0135.168] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{708686A3-2087-4B70-81FB-7F608AD7F5D4}.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\actioncentercache\\{708686a3-2087-4b70-81fb-7f608ad7f5d4}.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0135.168] GetFileType (hFile=0x444) returned 0x1 [0135.168] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0135.168] GetFileType (hFile=0x444) returned 0x1 [0135.168] WriteFile (in: hFile=0x444, lpBuffer=0x22bacc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x22bacc0*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0135.169] CloseHandle (hObject=0x444) returned 1 [0135.169] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{708686A3-2087-4B70-81FB-7F608AD7F5D4}.png", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{708686A3-2087-4B70-81FB-7F608AD7F5D4}.png", lpFilePart=0x0) returned 0x72 [0135.169] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{708686A3-2087-4B70-81FB-7F608AD7F5D4}.png.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{708686A3-2087-4B70-81FB-7F608AD7F5D4}.png.xuy", lpFilePart=0x0) returned 0x76 [0135.169] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0135.169] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{708686A3-2087-4B70-81FB-7F608AD7F5D4}.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\actioncentercache\\{708686a3-2087-4b70-81fb-7f608ad7f5d4}.png"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ace0677, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x6ace0677, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x3c6b0fce, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0135.169] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0135.169] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{708686A3-2087-4B70-81FB-7F608AD7F5D4}.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\actioncentercache\\{708686a3-2087-4b70-81fb-7f608ad7f5d4}.png"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{708686A3-2087-4B70-81FB-7F608AD7F5D4}.png.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\actioncentercache\\{708686a3-2087-4b70-81fb-7f608ad7f5d4}.png.xuy")) returned 1 [0135.170] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{A90EDA99-693C-4259-AF53-D06F3BBAEEAB}.png", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{A90EDA99-693C-4259-AF53-D06F3BBAEEAB}.png", lpFilePart=0x0) returned 0x72 [0135.170] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0135.170] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{A90EDA99-693C-4259-AF53-D06F3BBAEEAB}.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\actioncentercache\\{a90eda99-693c-4259-af53-d06f3bbaeeab}.png"), fInfoLevelId=0x0, lpFileInformation=0x2339518 | out: lpFileInformation=0x2339518*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfcebec96, ftCreationTime.dwHighDateTime=0x1d2fc24, ftLastAccessTime.dwLowDateTime=0xfcebec96, ftLastAccessTime.dwHighDateTime=0x1d2fc24, ftLastWriteTime.dwLowDateTime=0xbb9ac460, ftLastWriteTime.dwHighDateTime=0x1d0baff, nFileSizeHigh=0x0, nFileSizeLow=0xa42)) returned 1 [0135.170] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0135.170] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{A90EDA99-693C-4259-AF53-D06F3BBAEEAB}.png", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{A90EDA99-693C-4259-AF53-D06F3BBAEEAB}.png", lpFilePart=0x0) returned 0x72 [0135.170] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0135.170] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{A90EDA99-693C-4259-AF53-D06F3BBAEEAB}.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\actioncentercache\\{a90eda99-693c-4259-af53-d06f3bbaeeab}.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0135.170] GetFileType (hFile=0x444) returned 0x1 [0135.170] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0135.170] GetFileType (hFile=0x444) returned 0x1 [0135.171] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0xa42 [0135.171] ReadFile (in: hFile=0x444, lpBuffer=0x233a328, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be718, lpOverlapped=0x0 | out: lpBuffer=0x233a328*, lpNumberOfBytesRead=0x3be718*=0xa42, lpOverlapped=0x0) returned 1 [0135.172] CloseHandle (hObject=0x444) returned 1 [0135.212] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{A90EDA99-693C-4259-AF53-D06F3BBAEEAB}.png", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{A90EDA99-693C-4259-AF53-D06F3BBAEEAB}.png", lpFilePart=0x0) returned 0x72 [0135.212] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0135.212] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{A90EDA99-693C-4259-AF53-D06F3BBAEEAB}.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\actioncentercache\\{a90eda99-693c-4259-af53-d06f3bbaeeab}.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0135.213] GetFileType (hFile=0x444) returned 0x1 [0135.214] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0135.214] GetFileType (hFile=0x444) returned 0x1 [0135.214] WriteFile (in: hFile=0x444, lpBuffer=0x21b3930*, nNumberOfBytesToWrite=0xa50, lpNumberOfBytesWritten=0x3be628, lpOverlapped=0x0 | out: lpBuffer=0x21b3930*, lpNumberOfBytesWritten=0x3be628*=0xa50, lpOverlapped=0x0) returned 1 [0135.215] CloseHandle (hObject=0x444) returned 1 [0135.215] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{A90EDA99-693C-4259-AF53-D06F3BBAEEAB}.png", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{A90EDA99-693C-4259-AF53-D06F3BBAEEAB}.png", lpFilePart=0x0) returned 0x72 [0135.215] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{A90EDA99-693C-4259-AF53-D06F3BBAEEAB}.png.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{A90EDA99-693C-4259-AF53-D06F3BBAEEAB}.png.xuy", lpFilePart=0x0) returned 0x76 [0135.215] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0135.215] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{A90EDA99-693C-4259-AF53-D06F3BBAEEAB}.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\actioncentercache\\{a90eda99-693c-4259-af53-d06f3bbaeeab}.png"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfcebec96, ftCreationTime.dwHighDateTime=0x1d2fc24, ftLastAccessTime.dwLowDateTime=0xfcebec96, ftLastAccessTime.dwHighDateTime=0x1d2fc24, ftLastWriteTime.dwLowDateTime=0x3c723673, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xa50)) returned 1 [0135.215] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0135.215] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{A90EDA99-693C-4259-AF53-D06F3BBAEEAB}.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\actioncentercache\\{a90eda99-693c-4259-af53-d06f3bbaeeab}.png"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{A90EDA99-693C-4259-AF53-D06F3BBAEEAB}.png.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\actioncentercache\\{a90eda99-693c-4259-af53-d06f3bbaeeab}.png.xuy")) returned 1 [0135.216] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{A95B47FD-465D-4ACE-A006-DCCC9033E6DB}.png", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{A95B47FD-465D-4ACE-A006-DCCC9033E6DB}.png", lpFilePart=0x0) returned 0x72 [0135.216] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0135.216] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{A95B47FD-465D-4ACE-A006-DCCC9033E6DB}.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\actioncentercache\\{a95b47fd-465d-4ace-a006-dccc9033e6db}.png"), fInfoLevelId=0x0, lpFileInformation=0x21b4ca0 | out: lpFileInformation=0x21b4ca0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc78f6647, ftCreationTime.dwHighDateTime=0x1d2fad9, ftLastAccessTime.dwLowDateTime=0xc78f6647, ftLastAccessTime.dwHighDateTime=0x1d2fad9, ftLastWriteTime.dwLowDateTime=0xbb9ac460, ftLastWriteTime.dwHighDateTime=0x1d0baff, nFileSizeHigh=0x0, nFileSizeLow=0xa42)) returned 1 [0135.216] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0135.216] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{A95B47FD-465D-4ACE-A006-DCCC9033E6DB}.png", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{A95B47FD-465D-4ACE-A006-DCCC9033E6DB}.png", lpFilePart=0x0) returned 0x72 [0135.216] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0135.216] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{A95B47FD-465D-4ACE-A006-DCCC9033E6DB}.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\actioncentercache\\{a95b47fd-465d-4ace-a006-dccc9033e6db}.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0135.217] GetFileType (hFile=0x444) returned 0x1 [0135.217] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0135.217] GetFileType (hFile=0x444) returned 0x1 [0135.217] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0xa42 [0135.217] ReadFile (in: hFile=0x444, lpBuffer=0x21b5ab0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be718, lpOverlapped=0x0 | out: lpBuffer=0x21b5ab0*, lpNumberOfBytesRead=0x3be718*=0xa42, lpOverlapped=0x0) returned 1 [0135.225] CloseHandle (hObject=0x444) returned 1 [0135.236] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{A95B47FD-465D-4ACE-A006-DCCC9033E6DB}.png", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{A95B47FD-465D-4ACE-A006-DCCC9033E6DB}.png", lpFilePart=0x0) returned 0x72 [0135.236] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0135.236] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{A95B47FD-465D-4ACE-A006-DCCC9033E6DB}.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\actioncentercache\\{a95b47fd-465d-4ace-a006-dccc9033e6db}.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0135.238] GetFileType (hFile=0x444) returned 0x1 [0135.238] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0135.238] GetFileType (hFile=0x444) returned 0x1 [0135.238] WriteFile (in: hFile=0x444, lpBuffer=0x222feb0*, nNumberOfBytesToWrite=0xa50, lpNumberOfBytesWritten=0x3be628, lpOverlapped=0x0 | out: lpBuffer=0x222feb0*, lpNumberOfBytesWritten=0x3be628*=0xa50, lpOverlapped=0x0) returned 1 [0135.239] CloseHandle (hObject=0x444) returned 1 [0135.239] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{A95B47FD-465D-4ACE-A006-DCCC9033E6DB}.png", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{A95B47FD-465D-4ACE-A006-DCCC9033E6DB}.png", lpFilePart=0x0) returned 0x72 [0135.239] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{A95B47FD-465D-4ACE-A006-DCCC9033E6DB}.png.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{A95B47FD-465D-4ACE-A006-DCCC9033E6DB}.png.xuy", lpFilePart=0x0) returned 0x76 [0135.239] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0135.239] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{A95B47FD-465D-4ACE-A006-DCCC9033E6DB}.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\actioncentercache\\{a95b47fd-465d-4ace-a006-dccc9033e6db}.png"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc78f6647, ftCreationTime.dwHighDateTime=0x1d2fad9, ftLastAccessTime.dwLowDateTime=0xc78f6647, ftLastAccessTime.dwHighDateTime=0x1d2fad9, ftLastWriteTime.dwLowDateTime=0x3c7498b5, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xa50)) returned 1 [0135.239] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0135.239] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{A95B47FD-465D-4ACE-A006-DCCC9033E6DB}.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\actioncentercache\\{a95b47fd-465d-4ace-a006-dccc9033e6db}.png"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{A95B47FD-465D-4ACE-A006-DCCC9033E6DB}.png.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\actioncentercache\\{a95b47fd-465d-4ace-a006-dccc9033e6db}.png.xuy")) returned 1 [0135.240] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{AE613841-F649-4CD7-AF4A-2E7B7D99E12E}.png", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{AE613841-F649-4CD7-AF4A-2E7B7D99E12E}.png", lpFilePart=0x0) returned 0x72 [0135.240] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0135.240] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{AE613841-F649-4CD7-AF4A-2E7B7D99E12E}.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\actioncentercache\\{ae613841-f649-4cd7-af4a-2e7b7d99e12e}.png"), fInfoLevelId=0x0, lpFileInformation=0x2231220 | out: lpFileInformation=0x2231220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5fe90541, ftCreationTime.dwHighDateTime=0x1d301d0, ftLastAccessTime.dwLowDateTime=0x5fe90541, ftLastAccessTime.dwHighDateTime=0x1d301d0, ftLastWriteTime.dwLowDateTime=0xbb9ac460, ftLastWriteTime.dwHighDateTime=0x1d0baff, nFileSizeHigh=0x0, nFileSizeLow=0xa42)) returned 1 [0135.240] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0135.240] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{AE613841-F649-4CD7-AF4A-2E7B7D99E12E}.png", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{AE613841-F649-4CD7-AF4A-2E7B7D99E12E}.png", lpFilePart=0x0) returned 0x72 [0135.240] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0135.240] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{AE613841-F649-4CD7-AF4A-2E7B7D99E12E}.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\actioncentercache\\{ae613841-f649-4cd7-af4a-2e7b7d99e12e}.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0135.240] GetFileType (hFile=0x444) returned 0x1 [0135.240] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0135.240] GetFileType (hFile=0x444) returned 0x1 [0135.240] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0xa42 [0135.240] ReadFile (in: hFile=0x444, lpBuffer=0x2232030, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be718, lpOverlapped=0x0 | out: lpBuffer=0x2232030*, lpNumberOfBytesRead=0x3be718*=0xa42, lpOverlapped=0x0) returned 1 [0135.248] CloseHandle (hObject=0x444) returned 1 [0135.258] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{AE613841-F649-4CD7-AF4A-2E7B7D99E12E}.png", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{AE613841-F649-4CD7-AF4A-2E7B7D99E12E}.png", lpFilePart=0x0) returned 0x72 [0135.258] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0135.259] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{AE613841-F649-4CD7-AF4A-2E7B7D99E12E}.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\actioncentercache\\{ae613841-f649-4cd7-af4a-2e7b7d99e12e}.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0135.260] GetFileType (hFile=0x444) returned 0x1 [0135.260] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0135.260] GetFileType (hFile=0x444) returned 0x1 [0135.260] WriteFile (in: hFile=0x444, lpBuffer=0x22ac430*, nNumberOfBytesToWrite=0xa50, lpNumberOfBytesWritten=0x3be628, lpOverlapped=0x0 | out: lpBuffer=0x22ac430*, lpNumberOfBytesWritten=0x3be628*=0xa50, lpOverlapped=0x0) returned 1 [0135.261] CloseHandle (hObject=0x444) returned 1 [0135.261] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{AE613841-F649-4CD7-AF4A-2E7B7D99E12E}.png", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{AE613841-F649-4CD7-AF4A-2E7B7D99E12E}.png", lpFilePart=0x0) returned 0x72 [0135.262] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{AE613841-F649-4CD7-AF4A-2E7B7D99E12E}.png.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{AE613841-F649-4CD7-AF4A-2E7B7D99E12E}.png.xuy", lpFilePart=0x0) returned 0x76 [0135.262] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0135.262] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{AE613841-F649-4CD7-AF4A-2E7B7D99E12E}.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\actioncentercache\\{ae613841-f649-4cd7-af4a-2e7b7d99e12e}.png"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5fe90541, ftCreationTime.dwHighDateTime=0x1d301d0, ftLastAccessTime.dwLowDateTime=0x5fe90541, ftLastAccessTime.dwHighDateTime=0x1d301d0, ftLastWriteTime.dwLowDateTime=0x3c795d2d, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xa50)) returned 1 [0135.262] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0135.262] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{AE613841-F649-4CD7-AF4A-2E7B7D99E12E}.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\actioncentercache\\{ae613841-f649-4cd7-af4a-2e7b7d99e12e}.png"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{AE613841-F649-4CD7-AF4A-2E7B7D99E12E}.png.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\actioncentercache\\{ae613841-f649-4cd7-af4a-2e7b7d99e12e}.png.xuy")) returned 1 [0135.263] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{B5D14E8C-339B-4360-B40C-A274F460B417}.png", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{B5D14E8C-339B-4360-B40C-A274F460B417}.png", lpFilePart=0x0) returned 0x72 [0135.263] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0135.263] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{B5D14E8C-339B-4360-B40C-A274F460B417}.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\actioncentercache\\{b5d14e8c-339b-4360-b40c-a274f460b417}.png"), fInfoLevelId=0x0, lpFileInformation=0x22ad7a0 | out: lpFileInformation=0x22ad7a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1d002af, ftCreationTime.dwHighDateTime=0x1d2d446, ftLastAccessTime.dwLowDateTime=0xa1d002af, ftLastAccessTime.dwHighDateTime=0x1d2d446, ftLastWriteTime.dwLowDateTime=0xbb9ac460, ftLastWriteTime.dwHighDateTime=0x1d0baff, nFileSizeHigh=0x0, nFileSizeLow=0xa42)) returned 1 [0135.263] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0135.263] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{B5D14E8C-339B-4360-B40C-A274F460B417}.png", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{B5D14E8C-339B-4360-B40C-A274F460B417}.png", lpFilePart=0x0) returned 0x72 [0135.263] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0135.263] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{B5D14E8C-339B-4360-B40C-A274F460B417}.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\actioncentercache\\{b5d14e8c-339b-4360-b40c-a274f460b417}.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0135.263] GetFileType (hFile=0x444) returned 0x1 [0135.263] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0135.263] GetFileType (hFile=0x444) returned 0x1 [0135.263] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0xa42 [0135.263] ReadFile (in: hFile=0x444, lpBuffer=0x22ae5b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be718, lpOverlapped=0x0 | out: lpBuffer=0x22ae5b0*, lpNumberOfBytesRead=0x3be718*=0xa42, lpOverlapped=0x0) returned 1 [0135.273] CloseHandle (hObject=0x444) returned 1 [0135.283] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{B5D14E8C-339B-4360-B40C-A274F460B417}.png", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{B5D14E8C-339B-4360-B40C-A274F460B417}.png", lpFilePart=0x0) returned 0x72 [0135.283] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0135.283] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{B5D14E8C-339B-4360-B40C-A274F460B417}.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\actioncentercache\\{b5d14e8c-339b-4360-b40c-a274f460b417}.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0135.285] GetFileType (hFile=0x444) returned 0x1 [0135.285] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0135.285] GetFileType (hFile=0x444) returned 0x1 [0135.285] WriteFile (in: hFile=0x444, lpBuffer=0x23289b0*, nNumberOfBytesToWrite=0xa50, lpNumberOfBytesWritten=0x3be628, lpOverlapped=0x0 | out: lpBuffer=0x23289b0*, lpNumberOfBytesWritten=0x3be628*=0xa50, lpOverlapped=0x0) returned 1 [0135.286] CloseHandle (hObject=0x444) returned 1 [0135.286] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{B5D14E8C-339B-4360-B40C-A274F460B417}.png", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{B5D14E8C-339B-4360-B40C-A274F460B417}.png", lpFilePart=0x0) returned 0x72 [0135.286] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{B5D14E8C-339B-4360-B40C-A274F460B417}.png.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{B5D14E8C-339B-4360-B40C-A274F460B417}.png.xuy", lpFilePart=0x0) returned 0x76 [0135.286] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0135.286] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{B5D14E8C-339B-4360-B40C-A274F460B417}.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\actioncentercache\\{b5d14e8c-339b-4360-b40c-a274f460b417}.png"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1d002af, ftCreationTime.dwHighDateTime=0x1d2d446, ftLastAccessTime.dwLowDateTime=0xa1d002af, ftLastAccessTime.dwHighDateTime=0x1d2d446, ftLastWriteTime.dwLowDateTime=0x3c7bc2b5, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xa50)) returned 1 [0135.286] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0135.286] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{B5D14E8C-339B-4360-B40C-A274F460B417}.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\actioncentercache\\{b5d14e8c-339b-4360-b40c-a274f460b417}.png"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{B5D14E8C-339B-4360-B40C-A274F460B417}.png.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\actioncentercache\\{b5d14e8c-339b-4360-b40c-a274f460b417}.png.xuy")) returned 1 [0135.287] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{B6815740-F01E-4E9E-AA05-D3CDE47C3DDC}.png", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{B6815740-F01E-4E9E-AA05-D3CDE47C3DDC}.png", lpFilePart=0x0) returned 0x72 [0135.287] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0135.287] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{B6815740-F01E-4E9E-AA05-D3CDE47C3DDC}.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\actioncentercache\\{b6815740-f01e-4e9e-aa05-d3cde47c3ddc}.png"), fInfoLevelId=0x0, lpFileInformation=0x2329d20 | out: lpFileInformation=0x2329d20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15ebc63d, ftCreationTime.dwHighDateTime=0x1d2d438, ftLastAccessTime.dwLowDateTime=0x15ebc63d, ftLastAccessTime.dwHighDateTime=0x1d2d438, ftLastWriteTime.dwLowDateTime=0xbb9ac460, ftLastWriteTime.dwHighDateTime=0x1d0baff, nFileSizeHigh=0x0, nFileSizeLow=0xa42)) returned 1 [0135.287] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0135.287] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{B6815740-F01E-4E9E-AA05-D3CDE47C3DDC}.png", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{B6815740-F01E-4E9E-AA05-D3CDE47C3DDC}.png", lpFilePart=0x0) returned 0x72 [0135.287] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0135.287] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{B6815740-F01E-4E9E-AA05-D3CDE47C3DDC}.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\actioncentercache\\{b6815740-f01e-4e9e-aa05-d3cde47c3ddc}.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0135.288] GetFileType (hFile=0x444) returned 0x1 [0135.288] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0135.288] GetFileType (hFile=0x444) returned 0x1 [0135.288] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0xa42 [0135.288] ReadFile (in: hFile=0x444, lpBuffer=0x232ab30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be718, lpOverlapped=0x0 | out: lpBuffer=0x232ab30*, lpNumberOfBytesRead=0x3be718*=0xa42, lpOverlapped=0x0) returned 1 [0135.302] CloseHandle (hObject=0x444) returned 1 [0135.345] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{B6815740-F01E-4E9E-AA05-D3CDE47C3DDC}.png", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{B6815740-F01E-4E9E-AA05-D3CDE47C3DDC}.png", lpFilePart=0x0) returned 0x72 [0135.345] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0135.345] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{B6815740-F01E-4E9E-AA05-D3CDE47C3DDC}.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\actioncentercache\\{b6815740-f01e-4e9e-aa05-d3cde47c3ddc}.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0135.347] GetFileType (hFile=0x444) returned 0x1 [0135.347] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0135.347] GetFileType (hFile=0x444) returned 0x1 [0135.347] WriteFile (in: hFile=0x444, lpBuffer=0x21a4f20*, nNumberOfBytesToWrite=0xa50, lpNumberOfBytesWritten=0x3be628, lpOverlapped=0x0 | out: lpBuffer=0x21a4f20*, lpNumberOfBytesWritten=0x3be628*=0xa50, lpOverlapped=0x0) returned 1 [0135.348] CloseHandle (hObject=0x444) returned 1 [0135.348] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{B6815740-F01E-4E9E-AA05-D3CDE47C3DDC}.png", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{B6815740-F01E-4E9E-AA05-D3CDE47C3DDC}.png", lpFilePart=0x0) returned 0x72 [0135.348] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{B6815740-F01E-4E9E-AA05-D3CDE47C3DDC}.png.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{B6815740-F01E-4E9E-AA05-D3CDE47C3DDC}.png.xuy", lpFilePart=0x0) returned 0x76 [0135.348] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0135.348] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{B6815740-F01E-4E9E-AA05-D3CDE47C3DDC}.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\actioncentercache\\{b6815740-f01e-4e9e-aa05-d3cde47c3ddc}.png"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15ebc63d, ftCreationTime.dwHighDateTime=0x1d2d438, ftLastAccessTime.dwLowDateTime=0x15ebc63d, ftLastAccessTime.dwHighDateTime=0x1d2d438, ftLastWriteTime.dwLowDateTime=0x3c854d49, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xa50)) returned 1 [0135.348] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0135.348] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{B6815740-F01E-4E9E-AA05-D3CDE47C3DDC}.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\actioncentercache\\{b6815740-f01e-4e9e-aa05-d3cde47c3ddc}.png"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{B6815740-F01E-4E9E-AA05-D3CDE47C3DDC}.png.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\actioncentercache\\{b6815740-f01e-4e9e-aa05-d3cde47c3ddc}.png.xuy")) returned 1 [0135.349] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{C20F58C1-CDD0-45F9-9954-BDF0782633CB}.png", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{C20F58C1-CDD0-45F9-9954-BDF0782633CB}.png", lpFilePart=0x0) returned 0x72 [0135.349] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0135.349] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{C20F58C1-CDD0-45F9-9954-BDF0782633CB}.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\actioncentercache\\{c20f58c1-cdd0-45f9-9954-bdf0782633cb}.png"), fInfoLevelId=0x0, lpFileInformation=0x21a6290 | out: lpFileInformation=0x21a6290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8268a7fa, ftCreationTime.dwHighDateTime=0x1d301c8, ftLastAccessTime.dwLowDateTime=0x8268a7fa, ftLastAccessTime.dwHighDateTime=0x1d301c8, ftLastWriteTime.dwLowDateTime=0xbb9ac460, ftLastWriteTime.dwHighDateTime=0x1d0baff, nFileSizeHigh=0x0, nFileSizeLow=0xa42)) returned 1 [0135.349] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0135.349] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{C20F58C1-CDD0-45F9-9954-BDF0782633CB}.png", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{C20F58C1-CDD0-45F9-9954-BDF0782633CB}.png", lpFilePart=0x0) returned 0x72 [0135.350] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0135.350] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{C20F58C1-CDD0-45F9-9954-BDF0782633CB}.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\actioncentercache\\{c20f58c1-cdd0-45f9-9954-bdf0782633cb}.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0135.350] GetFileType (hFile=0x444) returned 0x1 [0135.350] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0135.350] GetFileType (hFile=0x444) returned 0x1 [0135.350] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0xa42 [0135.350] ReadFile (in: hFile=0x444, lpBuffer=0x21a70a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be718, lpOverlapped=0x0 | out: lpBuffer=0x21a70a0*, lpNumberOfBytesRead=0x3be718*=0xa42, lpOverlapped=0x0) returned 1 [0135.357] CloseHandle (hObject=0x444) returned 1 [0135.368] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{C20F58C1-CDD0-45F9-9954-BDF0782633CB}.png", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{C20F58C1-CDD0-45F9-9954-BDF0782633CB}.png", lpFilePart=0x0) returned 0x72 [0135.368] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0135.368] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{C20F58C1-CDD0-45F9-9954-BDF0782633CB}.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\actioncentercache\\{c20f58c1-cdd0-45f9-9954-bdf0782633cb}.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0135.370] GetFileType (hFile=0x444) returned 0x1 [0135.370] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0135.370] GetFileType (hFile=0x444) returned 0x1 [0135.370] WriteFile (in: hFile=0x444, lpBuffer=0x22214a0*, nNumberOfBytesToWrite=0xa50, lpNumberOfBytesWritten=0x3be628, lpOverlapped=0x0 | out: lpBuffer=0x22214a0*, lpNumberOfBytesWritten=0x3be628*=0xa50, lpOverlapped=0x0) returned 1 [0135.371] CloseHandle (hObject=0x444) returned 1 [0135.371] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{C20F58C1-CDD0-45F9-9954-BDF0782633CB}.png", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{C20F58C1-CDD0-45F9-9954-BDF0782633CB}.png", lpFilePart=0x0) returned 0x72 [0135.371] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{C20F58C1-CDD0-45F9-9954-BDF0782633CB}.png.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{C20F58C1-CDD0-45F9-9954-BDF0782633CB}.png.xuy", lpFilePart=0x0) returned 0x76 [0135.371] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0135.371] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{C20F58C1-CDD0-45F9-9954-BDF0782633CB}.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\actioncentercache\\{c20f58c1-cdd0-45f9-9954-bdf0782633cb}.png"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8268a7fa, ftCreationTime.dwHighDateTime=0x1d301c8, ftLastAccessTime.dwLowDateTime=0x8268a7fa, ftLastAccessTime.dwHighDateTime=0x1d301c8, ftLastWriteTime.dwLowDateTime=0x3c87aaea, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xa50)) returned 1 [0135.372] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0135.372] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{C20F58C1-CDD0-45F9-9954-BDF0782633CB}.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\actioncentercache\\{c20f58c1-cdd0-45f9-9954-bdf0782633cb}.png"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{C20F58C1-CDD0-45F9-9954-BDF0782633CB}.png.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\actioncentercache\\{c20f58c1-cdd0-45f9-9954-bdf0782633cb}.png.xuy")) returned 1 [0135.373] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{D1CC3A2E-2BC2-4715-AD4C-90B4CA0868C0}.png", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{D1CC3A2E-2BC2-4715-AD4C-90B4CA0868C0}.png", lpFilePart=0x0) returned 0x72 [0135.373] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0135.373] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{D1CC3A2E-2BC2-4715-AD4C-90B4CA0868C0}.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\actioncentercache\\{d1cc3a2e-2bc2-4715-ad4c-90b4ca0868c0}.png"), fInfoLevelId=0x0, lpFileInformation=0x2222810 | out: lpFileInformation=0x2222810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfda493b2, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xfda493b2, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0xbb9ac460, ftLastWriteTime.dwHighDateTime=0x1d0baff, nFileSizeHigh=0x0, nFileSizeLow=0xa42)) returned 1 [0135.374] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0135.374] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{D1CC3A2E-2BC2-4715-AD4C-90B4CA0868C0}.png", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{D1CC3A2E-2BC2-4715-AD4C-90B4CA0868C0}.png", lpFilePart=0x0) returned 0x72 [0135.374] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0135.374] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{D1CC3A2E-2BC2-4715-AD4C-90B4CA0868C0}.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\actioncentercache\\{d1cc3a2e-2bc2-4715-ad4c-90b4ca0868c0}.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0135.374] GetFileType (hFile=0x444) returned 0x1 [0135.374] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0135.374] GetFileType (hFile=0x444) returned 0x1 [0135.374] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0xa42 [0135.374] ReadFile (in: hFile=0x444, lpBuffer=0x2223620, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be718, lpOverlapped=0x0 | out: lpBuffer=0x2223620*, lpNumberOfBytesRead=0x3be718*=0xa42, lpOverlapped=0x0) returned 1 [0135.376] CloseHandle (hObject=0x444) returned 1 [0135.388] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{D1CC3A2E-2BC2-4715-AD4C-90B4CA0868C0}.png", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{D1CC3A2E-2BC2-4715-AD4C-90B4CA0868C0}.png", lpFilePart=0x0) returned 0x72 [0135.389] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0135.389] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{D1CC3A2E-2BC2-4715-AD4C-90B4CA0868C0}.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\actioncentercache\\{d1cc3a2e-2bc2-4715-ad4c-90b4ca0868c0}.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0135.390] GetFileType (hFile=0x444) returned 0x1 [0135.390] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0135.390] GetFileType (hFile=0x444) returned 0x1 [0135.390] WriteFile (in: hFile=0x444, lpBuffer=0x229da20*, nNumberOfBytesToWrite=0xa50, lpNumberOfBytesWritten=0x3be628, lpOverlapped=0x0 | out: lpBuffer=0x229da20*, lpNumberOfBytesWritten=0x3be628*=0xa50, lpOverlapped=0x0) returned 1 [0135.391] CloseHandle (hObject=0x444) returned 1 [0135.391] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{D1CC3A2E-2BC2-4715-AD4C-90B4CA0868C0}.png", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{D1CC3A2E-2BC2-4715-AD4C-90B4CA0868C0}.png", lpFilePart=0x0) returned 0x72 [0135.391] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{D1CC3A2E-2BC2-4715-AD4C-90B4CA0868C0}.png.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{D1CC3A2E-2BC2-4715-AD4C-90B4CA0868C0}.png.xuy", lpFilePart=0x0) returned 0x76 [0135.391] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0135.391] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{D1CC3A2E-2BC2-4715-AD4C-90B4CA0868C0}.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\actioncentercache\\{d1cc3a2e-2bc2-4715-ad4c-90b4ca0868c0}.png"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfda493b2, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xfda493b2, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x3c8c7221, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xa50)) returned 1 [0135.392] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0135.392] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{D1CC3A2E-2BC2-4715-AD4C-90B4CA0868C0}.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\actioncentercache\\{d1cc3a2e-2bc2-4715-ad4c-90b4ca0868c0}.png"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{D1CC3A2E-2BC2-4715-AD4C-90B4CA0868C0}.png.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\actioncentercache\\{d1cc3a2e-2bc2-4715-ad4c-90b4ca0868c0}.png.xuy")) returned 1 [0135.393] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0135.393] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\AppCache", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\AppCache", lpFilePart=0x0) returned 0x3e [0135.393] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\AppCache\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\AppCache\\", lpFilePart=0x0) returned 0x3f [0135.393] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\AppCache\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7e50 [0135.393] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0135.393] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0135.393] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0135.394] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0135.394] FindClose (in: hFindFile=0x5d7e50 | out: hFindFile=0x5d7e50) returned 1 [0135.394] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0135.394] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0135.394] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0135.394] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\AppCache", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\AppCache", lpFilePart=0x0) returned 0x3e [0135.394] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\AppCache\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\AppCache\\", lpFilePart=0x0) returned 0x3f [0135.394] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\AppCache\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d78b0 [0135.394] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0135.394] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0135.394] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0135.395] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0135.395] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0135.395] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0135.395] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0135.395] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\AppCache\\container.dat", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\AppCache\\container.dat", lpFilePart=0x0) returned 0x4c [0135.395] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0135.395] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\AppCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\appcache\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x22a0f10 | out: lpFileInformation=0x22a0f10*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x4c83fe3a, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x4c83fe3a, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x4c83fe3a, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0135.396] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0135.396] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\AppCache\\container.dat", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\AppCache\\container.dat", lpFilePart=0x0) returned 0x4c [0135.396] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0135.396] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\AppCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\appcache\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0135.396] GetFileType (hFile=0x444) returned 0x1 [0135.396] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0135.396] GetFileType (hFile=0x444) returned 0x1 [0135.396] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0x0 [0135.396] CloseHandle (hObject=0x444) returned 1 [0135.407] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\AppCache\\container.dat", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\AppCache\\container.dat", lpFilePart=0x0) returned 0x4c [0135.407] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0135.407] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\AppCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\appcache\\container.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0135.408] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb0e0) returned 1 [0135.409] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\AppCache\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\AppCache\\container.dat", lpFilePart=0x0) returned 0x4c [0135.409] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc200) returned 1 [0135.409] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\AppCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\appcache\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x3bc2e0 | out: lpFileInformation=0x3bc2e0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x4c83fe3a, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x4c83fe3a, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x4c83fe3a, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0135.409] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1c0) returned 1 [0135.409] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\AppCache\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbd80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\AppCache\\container.dat", lpFilePart=0x0) returned 0x4c [0135.409] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc200) returned 1 [0135.409] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\AppCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\appcache\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x2317b28 | out: lpFileInformation=0x2317b28*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x4c83fe3a, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x4c83fe3a, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x4c83fe3a, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0135.409] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1c0) returned 1 [0135.409] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\AppCache\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\AppCache\\container.dat", lpFilePart=0x0) returned 0x4c [0135.409] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0c0) returned 1 [0135.409] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\AppCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\appcache\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0135.410] GetFileType (hFile=0x444) returned 0x1 [0135.410] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc030) returned 1 [0135.410] GetFileType (hFile=0x444) returned 0x1 [0135.410] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc258 | out: lpFileSizeHigh=0x3bc258*=0x0) returned 0x0 [0135.410] CloseHandle (hObject=0x444) returned 1 [0135.453] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\AppCache\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\AppCache\\container.dat", lpFilePart=0x0) returned 0x4c [0135.453] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0c0) returned 1 [0135.453] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\AppCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\appcache\\container.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0135.454] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8b50) returned 1 [0135.455] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0135.455] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\AppCache\\YGIEUWA9", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\AppCache\\YGIEUWA9", lpFilePart=0x0) returned 0x47 [0135.455] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\AppCache\\YGIEUWA9\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\AppCache\\YGIEUWA9\\", lpFilePart=0x0) returned 0x48 [0135.455] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\AppCache\\YGIEUWA9\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7fd0 [0135.456] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0135.456] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0135.456] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0135.456] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0135.456] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0135.456] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0135.456] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0135.456] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\AppCache\\YGIEUWA9", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\AppCache\\YGIEUWA9", lpFilePart=0x0) returned 0x47 [0135.456] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\AppCache\\YGIEUWA9\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\AppCache\\YGIEUWA9\\", lpFilePart=0x0) returned 0x48 [0135.456] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\AppCache\\YGIEUWA9\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7c70 [0135.456] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0135.457] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0135.457] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0135.457] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0135.457] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0135.457] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0135.457] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\AppCache\\YGIEUWA9\\container.dat", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\AppCache\\YGIEUWA9\\container.dat", lpFilePart=0x0) returned 0x55 [0135.457] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0135.457] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\AppCache\\YGIEUWA9\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\appcache\\ygieuwa9\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x218f450 | out: lpFileInformation=0x218f450*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x4c83fe3a, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x4c83fe3a, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x4c83fe3a, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0135.457] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0135.457] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\AppCache\\YGIEUWA9\\container.dat", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\AppCache\\YGIEUWA9\\container.dat", lpFilePart=0x0) returned 0x55 [0135.457] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0135.457] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\AppCache\\YGIEUWA9\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\appcache\\ygieuwa9\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0135.458] GetFileType (hFile=0x444) returned 0x1 [0135.458] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0135.458] GetFileType (hFile=0x444) returned 0x1 [0135.458] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x0 [0135.458] CloseHandle (hObject=0x444) returned 1 [0135.496] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\AppCache\\YGIEUWA9\\container.dat", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\AppCache\\YGIEUWA9\\container.dat", lpFilePart=0x0) returned 0x55 [0135.496] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0135.496] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\AppCache\\YGIEUWA9\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\appcache\\ygieuwa9\\container.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0135.498] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb070) returned 1 [0135.498] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\AppCache\\YGIEUWA9\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbcf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\AppCache\\YGIEUWA9\\container.dat", lpFilePart=0x0) returned 0x55 [0135.498] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0135.498] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\AppCache\\YGIEUWA9\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\appcache\\ygieuwa9\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x3bc270 | out: lpFileInformation=0x3bc270*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x4c83fe3a, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x4c83fe3a, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x4c83fe3a, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0135.498] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc150) returned 1 [0135.498] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\AppCache\\YGIEUWA9\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbd10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\AppCache\\YGIEUWA9\\container.dat", lpFilePart=0x0) returned 0x55 [0135.498] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0135.498] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\AppCache\\YGIEUWA9\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\appcache\\ygieuwa9\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x22060b8 | out: lpFileInformation=0x22060b8*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x4c83fe3a, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x4c83fe3a, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x4c83fe3a, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0135.498] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc150) returned 1 [0135.498] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\AppCache\\YGIEUWA9\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\AppCache\\YGIEUWA9\\container.dat", lpFilePart=0x0) returned 0x55 [0135.498] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc050) returned 1 [0135.498] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\AppCache\\YGIEUWA9\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\appcache\\ygieuwa9\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0135.499] GetFileType (hFile=0x444) returned 0x1 [0135.499] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbfc0) returned 1 [0135.499] GetFileType (hFile=0x444) returned 0x1 [0135.499] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc1e8 | out: lpFileSizeHigh=0x3bc1e8*=0x0) returned 0x0 [0135.499] CloseHandle (hObject=0x444) returned 1 [0135.543] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\AppCache\\YGIEUWA9\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\AppCache\\YGIEUWA9\\container.dat", lpFilePart=0x0) returned 0x55 [0135.543] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc050) returned 1 [0135.543] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\AppCache\\YGIEUWA9\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\appcache\\ygieuwa9\\container.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0135.545] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8ae0) returned 1 [0135.546] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0135.546] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts", lpFilePart=0x0) returned 0x4b [0135.546] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\", lpFilePart=0x0) returned 0x4c [0135.546] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d73d0 [0135.547] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0135.551] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0135.551] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0135.551] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0135.551] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0135.551] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0135.552] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0135.552] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0135.552] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0135.552] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0135.552] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0135.552] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0135.552] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0135.552] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0135.553] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0135.553] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0135.553] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0135.553] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0135.553] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0135.553] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0135.553] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0135.554] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0135.554] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0135.554] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0135.554] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0135.554] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0135.555] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0135.555] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0135.555] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0135.555] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0135.555] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0135.555] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0135.555] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0135.555] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0135.556] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0135.556] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0135.556] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0135.556] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0135.556] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0135.556] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0135.556] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0135.557] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0135.557] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0135.557] FindClose (in: hFindFile=0x5d73d0 | out: hFindFile=0x5d73d0) returned 1 [0135.557] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0135.557] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0135.557] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0135.557] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts", lpFilePart=0x0) returned 0x4b [0135.557] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\", lpFilePart=0x0) returned 0x4c [0135.557] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7370 [0135.557] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0135.558] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0135.558] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0135.559] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0135.559] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0135.559] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0135.559] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0135.559] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0135.559] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0135.559] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0135.559] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0135.559] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0135.559] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0135.560] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0135.560] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0135.560] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0135.560] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0135.560] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0135.560] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0135.560] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0135.560] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0135.560] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0135.561] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0135.561] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0135.561] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0135.561] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0135.561] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0135.561] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0135.561] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0135.562] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0135.562] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0135.562] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0135.562] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0135.562] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0135.562] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0135.562] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0135.562] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0135.562] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0135.563] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0135.563] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0135.563] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0135.563] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0135.563] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0135.563] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0135.563] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0135.563] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0135.563] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\desktop.ini", lpFilePart=0x0) returned 0x57 [0135.563] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0135.563] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x228e078 | out: lpFileInformation=0x228e078*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0xab2d7ac4, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xab2d7ac4, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xae18ee32, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0xae)) returned 1 [0135.563] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0135.563] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\desktop.ini", lpFilePart=0x0) returned 0x57 [0135.564] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0135.564] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0135.564] GetFileType (hFile=0x444) returned 0x1 [0135.564] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0135.564] GetFileType (hFile=0x444) returned 0x1 [0135.564] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0xae [0135.564] ReadFile (in: hFile=0x444, lpBuffer=0x228e400, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be718, lpOverlapped=0x0 | out: lpBuffer=0x228e400*, lpNumberOfBytesRead=0x3be718*=0xae, lpOverlapped=0x0) returned 1 [0135.564] CloseHandle (hObject=0x444) returned 1 [0135.601] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\desktop.ini", lpFilePart=0x0) returned 0x57 [0135.602] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0135.602] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\desktop.ini"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0135.603] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb0e0) returned 1 [0135.603] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3bbd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\desktop.ini", lpFilePart=0x0) returned 0x57 [0135.603] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc200) returned 1 [0135.604] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x3bc2e0 | out: lpFileInformation=0x3bc2e0*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0xab2d7ac4, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xab2d7ac4, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xae18ee32, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0xae)) returned 1 [0135.604] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1c0) returned 1 [0135.604] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3bbd80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\desktop.ini", lpFilePart=0x0) returned 0x57 [0135.604] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc200) returned 1 [0135.604] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x2305ee0 | out: lpFileInformation=0x2305ee0*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0xab2d7ac4, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xab2d7ac4, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xae18ee32, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0xae)) returned 1 [0135.604] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1c0) returned 1 [0135.604] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3bbbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\desktop.ini", lpFilePart=0x0) returned 0x57 [0135.604] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0c0) returned 1 [0135.604] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0135.604] GetFileType (hFile=0x444) returned 0x1 [0135.604] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc030) returned 1 [0135.604] GetFileType (hFile=0x444) returned 0x1 [0135.604] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc258 | out: lpFileSizeHigh=0x3bc258*=0x0) returned 0xae [0135.604] ReadFile (in: hFile=0x444, lpBuffer=0x2306268, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bc188, lpOverlapped=0x0 | out: lpBuffer=0x2306268*, lpNumberOfBytesRead=0x3bc188*=0xae, lpOverlapped=0x0) returned 1 [0135.604] CloseHandle (hObject=0x444) returned 1 [0135.645] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3bbbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\desktop.ini", lpFilePart=0x0) returned 0x57 [0135.645] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0c0) returned 1 [0135.645] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\desktop.ini"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0135.647] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8b50) returned 1 [0135.647] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0135.648] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.3DBuilder_8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.3DBuilder_8wekyb3d8bbwe", lpFilePart=0x0) returned 0x6d [0135.648] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.3DBuilder_8wekyb3d8bbwe\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.3DBuilder_8wekyb3d8bbwe\\", lpFilePart=0x0) returned 0x6e [0135.648] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.3DBuilder_8wekyb3d8bbwe\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7c70 [0135.648] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0135.648] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0135.648] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0135.648] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0135.648] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0135.648] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0135.648] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0135.648] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.3DBuilder_8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.3DBuilder_8wekyb3d8bbwe", lpFilePart=0x0) returned 0x6d [0135.648] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.3DBuilder_8wekyb3d8bbwe\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.3DBuilder_8wekyb3d8bbwe\\", lpFilePart=0x0) returned 0x6e [0135.649] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.3DBuilder_8wekyb3d8bbwe\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7550 [0135.649] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0135.649] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0135.649] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0135.649] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0135.649] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0135.649] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0135.649] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.3DBuilder_8wekyb3d8bbwe\\App.lnk", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.3DBuilder_8wekyb3d8bbwe\\App.lnk", lpFilePart=0x0) returned 0x75 [0135.649] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0135.649] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.3DBuilder_8wekyb3d8bbwe\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.3dbuilder_8wekyb3d8bbwe\\app.lnk"), fInfoLevelId=0x0, lpFileInformation=0x2183238 | out: lpFileInformation=0x2183238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d6cae06, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x2d6cae06, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x2d763764, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x548)) returned 1 [0135.649] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0135.649] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.3DBuilder_8wekyb3d8bbwe\\App.lnk", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.3DBuilder_8wekyb3d8bbwe\\App.lnk", lpFilePart=0x0) returned 0x75 [0135.649] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0135.650] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.3DBuilder_8wekyb3d8bbwe\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.3dbuilder_8wekyb3d8bbwe\\app.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0135.650] GetFileType (hFile=0x444) returned 0x1 [0135.650] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0135.650] GetFileType (hFile=0x444) returned 0x1 [0135.650] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x548 [0135.650] ReadFile (in: hFile=0x444, lpBuffer=0x2183ac8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x2183ac8*, lpNumberOfBytesRead=0x3be6a8*=0x548, lpOverlapped=0x0) returned 1 [0135.703] CloseHandle (hObject=0x444) returned 1 [0135.806] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.3DBuilder_8wekyb3d8bbwe\\App.lnk", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.3DBuilder_8wekyb3d8bbwe\\App.lnk", lpFilePart=0x0) returned 0x75 [0135.806] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0135.806] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.3DBuilder_8wekyb3d8bbwe\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.3dbuilder_8wekyb3d8bbwe\\app.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0135.807] GetFileType (hFile=0x444) returned 0x1 [0135.807] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0135.807] GetFileType (hFile=0x444) returned 0x1 [0135.807] WriteFile (in: hFile=0x444, lpBuffer=0x21fc580*, nNumberOfBytesToWrite=0x550, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x21fc580*, lpNumberOfBytesWritten=0x3be5b8*=0x550, lpOverlapped=0x0) returned 1 [0135.819] CloseHandle (hObject=0x444) returned 1 [0135.819] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.3DBuilder_8wekyb3d8bbwe\\App.lnk", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.3DBuilder_8wekyb3d8bbwe\\App.lnk", lpFilePart=0x0) returned 0x75 [0135.819] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.3DBuilder_8wekyb3d8bbwe\\App.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.3DBuilder_8wekyb3d8bbwe\\App.lnk.xuy", lpFilePart=0x0) returned 0x79 [0135.819] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0135.819] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.3DBuilder_8wekyb3d8bbwe\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.3dbuilder_8wekyb3d8bbwe\\app.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d6cae06, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x2d6cae06, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x3cccd01e, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x550)) returned 1 [0135.819] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0135.819] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.3DBuilder_8wekyb3d8bbwe\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.3dbuilder_8wekyb3d8bbwe\\app.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.3DBuilder_8wekyb3d8bbwe\\App.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.3dbuilder_8wekyb3d8bbwe\\app.lnk.xuy")) returned 1 [0135.820] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0135.820] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy", lpFilePart=0x0) returned 0x74 [0135.820] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\", lpFilePart=0x0) returned 0x75 [0135.820] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7550 [0135.824] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0135.824] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0135.824] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0135.824] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0135.824] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0135.824] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0135.824] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0135.824] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy", lpFilePart=0x0) returned 0x74 [0135.824] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\", lpFilePart=0x0) returned 0x75 [0135.824] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d81b0 [0135.825] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0135.825] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0135.825] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0135.825] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0135.825] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0135.825] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0135.825] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\App.lnk", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\App.lnk", lpFilePart=0x0) returned 0x7c [0135.825] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0135.825] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\app.lnk"), fInfoLevelId=0x0, lpFileInformation=0x2200260 | out: lpFileInformation=0x2200260*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xafddedda, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xafddedda, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xafe0504c, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x481)) returned 1 [0135.825] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0135.826] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\App.lnk", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\App.lnk", lpFilePart=0x0) returned 0x7c [0135.826] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0135.826] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\app.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0135.826] GetFileType (hFile=0x444) returned 0x1 [0135.826] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0135.826] GetFileType (hFile=0x444) returned 0x1 [0135.826] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x481 [0135.826] ReadFile (in: hFile=0x444, lpBuffer=0x2200a50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x2200a50*, lpNumberOfBytesRead=0x3be6a8*=0x481, lpOverlapped=0x0) returned 1 [0135.828] CloseHandle (hObject=0x444) returned 1 [0135.839] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\App.lnk", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\App.lnk", lpFilePart=0x0) returned 0x7c [0135.839] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0135.839] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\app.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0135.841] GetFileType (hFile=0x444) returned 0x1 [0135.841] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0135.841] GetFileType (hFile=0x444) returned 0x1 [0135.841] WriteFile (in: hFile=0x444, lpBuffer=0x2279160*, nNumberOfBytesToWrite=0x490, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x2279160*, lpNumberOfBytesWritten=0x3be5b8*=0x490, lpOverlapped=0x0) returned 1 [0135.842] CloseHandle (hObject=0x444) returned 1 [0135.842] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\App.lnk", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\App.lnk", lpFilePart=0x0) returned 0x7c [0135.842] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\App.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\App.lnk.xuy", lpFilePart=0x0) returned 0x80 [0135.842] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0135.842] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\app.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xafddedda, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xafddedda, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x3cd194c6, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x490)) returned 1 [0135.842] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0135.843] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\app.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\App.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\app.lnk.xuy")) returned 1 [0135.844] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0135.844] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.AccountsControl_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.AccountsControl_cw5n1h2txyewy", lpFilePart=0x0) returned 0x73 [0135.844] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.AccountsControl_cw5n1h2txyewy\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.AccountsControl_cw5n1h2txyewy\\", lpFilePart=0x0) returned 0x74 [0135.844] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.AccountsControl_cw5n1h2txyewy\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d81b0 [0135.845] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0135.845] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0135.845] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0135.845] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0135.845] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0135.845] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0135.845] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0135.845] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.AccountsControl_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.AccountsControl_cw5n1h2txyewy", lpFilePart=0x0) returned 0x73 [0135.845] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.AccountsControl_cw5n1h2txyewy\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.AccountsControl_cw5n1h2txyewy\\", lpFilePart=0x0) returned 0x74 [0135.846] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.AccountsControl_cw5n1h2txyewy\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d81b0 [0135.846] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0135.846] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0135.846] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0135.846] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0135.846] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0135.846] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0135.846] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.AccountsControl_cw5n1h2txyewy\\App.lnk", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.AccountsControl_cw5n1h2txyewy\\App.lnk", lpFilePart=0x0) returned 0x7b [0135.846] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0135.846] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.AccountsControl_cw5n1h2txyewy\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.accountscontrol_cw5n1h2txyewy\\app.lnk"), fInfoLevelId=0x0, lpFileInformation=0x227ce30 | out: lpFileInformation=0x227ce30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0ad5a94, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb0ad5a94, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xb0ad5a94, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x441)) returned 1 [0135.847] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0135.847] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.AccountsControl_cw5n1h2txyewy\\App.lnk", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.AccountsControl_cw5n1h2txyewy\\App.lnk", lpFilePart=0x0) returned 0x7b [0135.847] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0135.847] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.AccountsControl_cw5n1h2txyewy\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.accountscontrol_cw5n1h2txyewy\\app.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0135.847] GetFileType (hFile=0x444) returned 0x1 [0135.847] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0135.847] GetFileType (hFile=0x444) returned 0x1 [0135.847] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x441 [0135.847] ReadFile (in: hFile=0x444, lpBuffer=0x227d5d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x227d5d0*, lpNumberOfBytesRead=0x3be6a8*=0x441, lpOverlapped=0x0) returned 1 [0135.862] CloseHandle (hObject=0x444) returned 1 [0135.874] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.AccountsControl_cw5n1h2txyewy\\App.lnk", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.AccountsControl_cw5n1h2txyewy\\App.lnk", lpFilePart=0x0) returned 0x7b [0135.874] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0135.874] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.AccountsControl_cw5n1h2txyewy\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.accountscontrol_cw5n1h2txyewy\\app.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0135.876] GetFileType (hFile=0x444) returned 0x1 [0135.876] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0135.876] GetFileType (hFile=0x444) returned 0x1 [0135.876] WriteFile (in: hFile=0x444, lpBuffer=0x22f5b98*, nNumberOfBytesToWrite=0x450, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x22f5b98*, lpNumberOfBytesWritten=0x3be5b8*=0x450, lpOverlapped=0x0) returned 1 [0135.876] CloseHandle (hObject=0x444) returned 1 [0135.877] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.AccountsControl_cw5n1h2txyewy\\App.lnk", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.AccountsControl_cw5n1h2txyewy\\App.lnk", lpFilePart=0x0) returned 0x7b [0135.877] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.AccountsControl_cw5n1h2txyewy\\App.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.AccountsControl_cw5n1h2txyewy\\App.lnk.xuy", lpFilePart=0x0) returned 0x7f [0135.877] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0135.877] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.AccountsControl_cw5n1h2txyewy\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.accountscontrol_cw5n1h2txyewy\\app.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0ad5a94, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb0ad5a94, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x3cd65998, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x450)) returned 1 [0135.877] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0135.877] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.AccountsControl_cw5n1h2txyewy\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.accountscontrol_cw5n1h2txyewy\\app.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.AccountsControl_cw5n1h2txyewy\\App.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.accountscontrol_cw5n1h2txyewy\\app.lnk.xuy")) returned 1 [0135.878] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0135.878] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Appconnector_8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Appconnector_8wekyb3d8bbwe", lpFilePart=0x0) returned 0x70 [0135.878] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Appconnector_8wekyb3d8bbwe\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Appconnector_8wekyb3d8bbwe\\", lpFilePart=0x0) returned 0x71 [0135.878] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Appconnector_8wekyb3d8bbwe\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d81b0 [0135.880] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0135.880] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0135.880] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0135.880] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0135.880] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0135.880] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0135.880] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0135.880] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Appconnector_8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Appconnector_8wekyb3d8bbwe", lpFilePart=0x0) returned 0x70 [0135.880] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Appconnector_8wekyb3d8bbwe\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Appconnector_8wekyb3d8bbwe\\", lpFilePart=0x0) returned 0x71 [0135.880] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Appconnector_8wekyb3d8bbwe\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7370 [0135.880] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0135.881] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0135.881] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0135.881] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0135.881] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0135.881] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0135.881] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Appconnector_8wekyb3d8bbwe\\App.lnk", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Appconnector_8wekyb3d8bbwe\\App.lnk", lpFilePart=0x0) returned 0x78 [0135.881] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0135.881] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Appconnector_8wekyb3d8bbwe\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.appconnector_8wekyb3d8bbwe\\app.lnk"), fInfoLevelId=0x0, lpFileInformation=0x22f97a0 | out: lpFileInformation=0x22f97a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a931d2c, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x2a931d2c, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x2a9ca670, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x469)) returned 1 [0135.881] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0135.881] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Appconnector_8wekyb3d8bbwe\\App.lnk", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Appconnector_8wekyb3d8bbwe\\App.lnk", lpFilePart=0x0) returned 0x78 [0135.881] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0135.881] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Appconnector_8wekyb3d8bbwe\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.appconnector_8wekyb3d8bbwe\\app.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0135.881] GetFileType (hFile=0x444) returned 0x1 [0135.881] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0135.882] GetFileType (hFile=0x444) returned 0x1 [0135.882] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x469 [0135.882] ReadFile (in: hFile=0x444, lpBuffer=0x22f9f68, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x22f9f68*, lpNumberOfBytesRead=0x3be6a8*=0x469, lpOverlapped=0x0) returned 1 [0135.883] CloseHandle (hObject=0x444) returned 1 [0135.924] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Appconnector_8wekyb3d8bbwe\\App.lnk", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Appconnector_8wekyb3d8bbwe\\App.lnk", lpFilePart=0x0) returned 0x78 [0135.924] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0135.924] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Appconnector_8wekyb3d8bbwe\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.appconnector_8wekyb3d8bbwe\\app.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0135.941] GetFileType (hFile=0x444) returned 0x1 [0135.941] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0135.941] GetFileType (hFile=0x444) returned 0x1 [0135.941] WriteFile (in: hFile=0x444, lpBuffer=0x21724b8*, nNumberOfBytesToWrite=0x470, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x21724b8*, lpNumberOfBytesWritten=0x3be5b8*=0x470, lpOverlapped=0x0) returned 1 [0135.942] CloseHandle (hObject=0x444) returned 1 [0135.942] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Appconnector_8wekyb3d8bbwe\\App.lnk", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Appconnector_8wekyb3d8bbwe\\App.lnk", lpFilePart=0x0) returned 0x78 [0135.942] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Appconnector_8wekyb3d8bbwe\\App.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Appconnector_8wekyb3d8bbwe\\App.lnk.xuy", lpFilePart=0x0) returned 0x7c [0135.942] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0135.942] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Appconnector_8wekyb3d8bbwe\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.appconnector_8wekyb3d8bbwe\\app.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a931d2c, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x2a931d2c, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x3cdfe2cf, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x470)) returned 1 [0135.942] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0135.942] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Appconnector_8wekyb3d8bbwe\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.appconnector_8wekyb3d8bbwe\\app.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Appconnector_8wekyb3d8bbwe\\App.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.appconnector_8wekyb3d8bbwe\\app.lnk.xuy")) returned 1 [0135.943] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0135.943] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BingFinance_8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BingFinance_8wekyb3d8bbwe", lpFilePart=0x0) returned 0x6f [0135.943] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BingFinance_8wekyb3d8bbwe\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BingFinance_8wekyb3d8bbwe\\", lpFilePart=0x0) returned 0x70 [0135.943] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BingFinance_8wekyb3d8bbwe\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7670 [0135.946] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0135.946] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0135.946] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0135.946] FindClose (in: hFindFile=0x5d7670 | out: hFindFile=0x5d7670) returned 1 [0135.947] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0135.947] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0135.947] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0135.947] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BingFinance_8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BingFinance_8wekyb3d8bbwe", lpFilePart=0x0) returned 0x6f [0135.947] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BingFinance_8wekyb3d8bbwe\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BingFinance_8wekyb3d8bbwe\\", lpFilePart=0x0) returned 0x70 [0135.947] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BingFinance_8wekyb3d8bbwe\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7e50 [0135.948] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0135.948] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0135.949] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0135.949] FindClose (in: hFindFile=0x5d7e50 | out: hFindFile=0x5d7e50) returned 1 [0135.950] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0135.950] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0135.950] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BingFinance_8wekyb3d8bbwe\\AppexFinance.lnk", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BingFinance_8wekyb3d8bbwe\\AppexFinance.lnk", lpFilePart=0x0) returned 0x80 [0135.950] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0135.950] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BingFinance_8wekyb3d8bbwe\\AppexFinance.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.bingfinance_8wekyb3d8bbwe\\appexfinance.lnk"), fInfoLevelId=0x0, lpFileInformation=0x21761d0 | out: lpFileInformation=0x21761d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x289c0d7d, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x289c0d7d, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x289c0d7d, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x5c4)) returned 1 [0135.957] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0135.957] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BingFinance_8wekyb3d8bbwe\\AppexFinance.lnk", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BingFinance_8wekyb3d8bbwe\\AppexFinance.lnk", lpFilePart=0x0) returned 0x80 [0135.957] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0135.957] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BingFinance_8wekyb3d8bbwe\\AppexFinance.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.bingfinance_8wekyb3d8bbwe\\appexfinance.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0135.957] GetFileType (hFile=0x444) returned 0x1 [0135.957] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0135.957] GetFileType (hFile=0x444) returned 0x1 [0135.957] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x5c4 [0135.957] ReadFile (in: hFile=0x444, lpBuffer=0x2176b40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x2176b40*, lpNumberOfBytesRead=0x3be6a8*=0x5c4, lpOverlapped=0x0) returned 1 [0135.958] CloseHandle (hObject=0x444) returned 1 [0135.969] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BingFinance_8wekyb3d8bbwe\\AppexFinance.lnk", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BingFinance_8wekyb3d8bbwe\\AppexFinance.lnk", lpFilePart=0x0) returned 0x80 [0135.969] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0135.969] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BingFinance_8wekyb3d8bbwe\\AppexFinance.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.bingfinance_8wekyb3d8bbwe\\appexfinance.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0135.970] GetFileType (hFile=0x444) returned 0x1 [0135.970] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0135.970] GetFileType (hFile=0x444) returned 0x1 [0135.970] WriteFile (in: hFile=0x444, lpBuffer=0x21ef8b0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x21ef8b0*, lpNumberOfBytesWritten=0x3be5b8*=0x5d0, lpOverlapped=0x0) returned 1 [0135.971] CloseHandle (hObject=0x444) returned 1 [0135.971] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BingFinance_8wekyb3d8bbwe\\AppexFinance.lnk", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BingFinance_8wekyb3d8bbwe\\AppexFinance.lnk", lpFilePart=0x0) returned 0x80 [0135.971] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BingFinance_8wekyb3d8bbwe\\AppexFinance.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BingFinance_8wekyb3d8bbwe\\AppexFinance.lnk.xuy", lpFilePart=0x0) returned 0x84 [0135.971] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0135.971] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BingFinance_8wekyb3d8bbwe\\AppexFinance.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.bingfinance_8wekyb3d8bbwe\\appexfinance.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x289c0d7d, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x289c0d7d, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x3ce4a74d, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x5d0)) returned 1 [0135.971] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0135.971] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BingFinance_8wekyb3d8bbwe\\AppexFinance.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.bingfinance_8wekyb3d8bbwe\\appexfinance.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BingFinance_8wekyb3d8bbwe\\AppexFinance.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.bingfinance_8wekyb3d8bbwe\\appexfinance.lnk.xuy")) returned 1 [0135.972] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0135.972] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BingNews_8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BingNews_8wekyb3d8bbwe", lpFilePart=0x0) returned 0x6c [0135.972] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BingNews_8wekyb3d8bbwe\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BingNews_8wekyb3d8bbwe\\", lpFilePart=0x0) returned 0x6d [0135.973] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BingNews_8wekyb3d8bbwe\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7610 [0136.055] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0136.055] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0136.055] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0136.056] FindClose (in: hFindFile=0x5d7610 | out: hFindFile=0x5d7610) returned 1 [0136.056] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0136.056] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0136.056] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0136.056] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BingNews_8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BingNews_8wekyb3d8bbwe", lpFilePart=0x0) returned 0x6c [0136.056] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BingNews_8wekyb3d8bbwe\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BingNews_8wekyb3d8bbwe\\", lpFilePart=0x0) returned 0x6d [0136.057] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BingNews_8wekyb3d8bbwe\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7550 [0136.057] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0136.057] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0136.058] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0136.058] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0136.059] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0136.059] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0136.059] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BingNews_8wekyb3d8bbwe\\AppexNews.lnk", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BingNews_8wekyb3d8bbwe\\AppexNews.lnk", lpFilePart=0x0) returned 0x7a [0136.059] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0136.059] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BingNews_8wekyb3d8bbwe\\AppexNews.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.bingnews_8wekyb3d8bbwe\\appexnews.lnk"), fInfoLevelId=0x0, lpFileInformation=0x21f34f0 | out: lpFileInformation=0x21f34f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x271c30e4, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x271c30e4, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x271c30e4, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x5a0)) returned 1 [0136.061] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0136.061] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BingNews_8wekyb3d8bbwe\\AppexNews.lnk", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BingNews_8wekyb3d8bbwe\\AppexNews.lnk", lpFilePart=0x0) returned 0x7a [0136.061] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0136.061] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BingNews_8wekyb3d8bbwe\\AppexNews.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.bingnews_8wekyb3d8bbwe\\appexnews.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0136.061] GetFileType (hFile=0x444) returned 0x1 [0136.061] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0136.061] GetFileType (hFile=0x444) returned 0x1 [0136.061] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x5a0 [0136.061] ReadFile (in: hFile=0x444, lpBuffer=0x21f3e08, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x21f3e08*, lpNumberOfBytesRead=0x3be6a8*=0x5a0, lpOverlapped=0x0) returned 1 [0136.062] CloseHandle (hObject=0x444) returned 1 [0136.072] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BingNews_8wekyb3d8bbwe\\AppexNews.lnk", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BingNews_8wekyb3d8bbwe\\AppexNews.lnk", lpFilePart=0x0) returned 0x7a [0136.073] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0136.073] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BingNews_8wekyb3d8bbwe\\AppexNews.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.bingnews_8wekyb3d8bbwe\\appexnews.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0136.074] GetFileType (hFile=0x444) returned 0x1 [0136.074] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0136.074] GetFileType (hFile=0x444) returned 0x1 [0136.074] WriteFile (in: hFile=0x444, lpBuffer=0x226cac0*, nNumberOfBytesToWrite=0x5b0, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x226cac0*, lpNumberOfBytesWritten=0x3be5b8*=0x5b0, lpOverlapped=0x0) returned 1 [0136.075] CloseHandle (hObject=0x444) returned 1 [0136.075] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BingNews_8wekyb3d8bbwe\\AppexNews.lnk", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BingNews_8wekyb3d8bbwe\\AppexNews.lnk", lpFilePart=0x0) returned 0x7a [0136.075] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BingNews_8wekyb3d8bbwe\\AppexNews.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BingNews_8wekyb3d8bbwe\\AppexNews.lnk.xuy", lpFilePart=0x0) returned 0x7e [0136.075] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0136.076] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BingNews_8wekyb3d8bbwe\\AppexNews.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.bingnews_8wekyb3d8bbwe\\appexnews.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x271c30e4, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x271c30e4, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x3cf55707, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x5b0)) returned 1 [0136.076] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0136.076] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BingNews_8wekyb3d8bbwe\\AppexNews.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.bingnews_8wekyb3d8bbwe\\appexnews.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BingNews_8wekyb3d8bbwe\\AppexNews.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.bingnews_8wekyb3d8bbwe\\appexnews.lnk.xuy")) returned 1 [0136.077] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0136.077] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BingSports_8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BingSports_8wekyb3d8bbwe", lpFilePart=0x0) returned 0x6e [0136.077] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BingSports_8wekyb3d8bbwe\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BingSports_8wekyb3d8bbwe\\", lpFilePart=0x0) returned 0x6f [0136.077] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BingSports_8wekyb3d8bbwe\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7370 [0136.243] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0136.243] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0136.243] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0136.243] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0136.244] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0136.244] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0136.244] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0136.244] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BingSports_8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BingSports_8wekyb3d8bbwe", lpFilePart=0x0) returned 0x6e [0136.244] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BingSports_8wekyb3d8bbwe\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BingSports_8wekyb3d8bbwe\\", lpFilePart=0x0) returned 0x6f [0136.244] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BingSports_8wekyb3d8bbwe\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d78b0 [0136.245] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0136.246] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0136.246] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0136.246] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0136.247] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0136.247] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0136.247] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BingSports_8wekyb3d8bbwe\\AppexSports.lnk", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BingSports_8wekyb3d8bbwe\\AppexSports.lnk", lpFilePart=0x0) returned 0x7e [0136.247] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0136.247] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BingSports_8wekyb3d8bbwe\\AppexSports.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.bingsports_8wekyb3d8bbwe\\appexsports.lnk"), fInfoLevelId=0x0, lpFileInformation=0x2270780 | out: lpFileInformation=0x2270780*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23c907a3, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x23c907a3, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x23d292ae, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x5d8)) returned 1 [0136.247] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0136.247] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BingSports_8wekyb3d8bbwe\\AppexSports.lnk", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BingSports_8wekyb3d8bbwe\\AppexSports.lnk", lpFilePart=0x0) returned 0x7e [0136.248] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0136.248] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BingSports_8wekyb3d8bbwe\\AppexSports.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.bingsports_8wekyb3d8bbwe\\appexsports.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0136.248] GetFileType (hFile=0x444) returned 0x1 [0136.248] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0136.248] GetFileType (hFile=0x444) returned 0x1 [0136.248] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x5d8 [0136.248] ReadFile (in: hFile=0x444, lpBuffer=0x22710e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x22710e0*, lpNumberOfBytesRead=0x3be6a8*=0x5d8, lpOverlapped=0x0) returned 1 [0136.249] CloseHandle (hObject=0x444) returned 1 [0136.260] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BingSports_8wekyb3d8bbwe\\AppexSports.lnk", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BingSports_8wekyb3d8bbwe\\AppexSports.lnk", lpFilePart=0x0) returned 0x7e [0136.260] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0136.260] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BingSports_8wekyb3d8bbwe\\AppexSports.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.bingsports_8wekyb3d8bbwe\\appexsports.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0136.262] GetFileType (hFile=0x444) returned 0x1 [0136.262] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0136.262] GetFileType (hFile=0x444) returned 0x1 [0136.262] WriteFile (in: hFile=0x444, lpBuffer=0x22e9e88*, nNumberOfBytesToWrite=0x5e0, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x22e9e88*, lpNumberOfBytesWritten=0x3be5b8*=0x5e0, lpOverlapped=0x0) returned 1 [0136.263] CloseHandle (hObject=0x444) returned 1 [0136.263] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BingSports_8wekyb3d8bbwe\\AppexSports.lnk", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BingSports_8wekyb3d8bbwe\\AppexSports.lnk", lpFilePart=0x0) returned 0x7e [0136.263] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BingSports_8wekyb3d8bbwe\\AppexSports.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BingSports_8wekyb3d8bbwe\\AppexSports.lnk.xuy", lpFilePart=0x0) returned 0x82 [0136.263] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0136.263] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BingSports_8wekyb3d8bbwe\\AppexSports.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.bingsports_8wekyb3d8bbwe\\appexsports.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23c907a3, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x23c907a3, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x3d11f425, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x5e0)) returned 1 [0136.263] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0136.263] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BingSports_8wekyb3d8bbwe\\AppexSports.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.bingsports_8wekyb3d8bbwe\\appexsports.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BingSports_8wekyb3d8bbwe\\AppexSports.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.bingsports_8wekyb3d8bbwe\\appexsports.lnk.xuy")) returned 1 [0136.264] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0136.264] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BingWeather_8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BingWeather_8wekyb3d8bbwe", lpFilePart=0x0) returned 0x6f [0136.265] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BingWeather_8wekyb3d8bbwe\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BingWeather_8wekyb3d8bbwe\\", lpFilePart=0x0) returned 0x70 [0136.265] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BingWeather_8wekyb3d8bbwe\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d78b0 [0136.265] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0136.265] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0136.266] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0136.266] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0136.266] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0136.266] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0136.266] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0136.266] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BingWeather_8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BingWeather_8wekyb3d8bbwe", lpFilePart=0x0) returned 0x6f [0136.266] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BingWeather_8wekyb3d8bbwe\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BingWeather_8wekyb3d8bbwe\\", lpFilePart=0x0) returned 0x70 [0136.266] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BingWeather_8wekyb3d8bbwe\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7e50 [0136.266] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0136.266] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0136.266] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0136.266] FindClose (in: hFindFile=0x5d7e50 | out: hFindFile=0x5d7e50) returned 1 [0136.267] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0136.267] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0136.267] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BingWeather_8wekyb3d8bbwe\\App.lnk", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BingWeather_8wekyb3d8bbwe\\App.lnk", lpFilePart=0x0) returned 0x77 [0136.267] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0136.267] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BingWeather_8wekyb3d8bbwe\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.bingweather_8wekyb3d8bbwe\\app.lnk"), fInfoLevelId=0x0, lpFileInformation=0x22eda68 | out: lpFileInformation=0x22eda68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20f43cd0, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x20f43cd0, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x20f43cd0, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x5d4)) returned 1 [0136.267] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0136.267] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BingWeather_8wekyb3d8bbwe\\App.lnk", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BingWeather_8wekyb3d8bbwe\\App.lnk", lpFilePart=0x0) returned 0x77 [0136.267] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0136.268] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BingWeather_8wekyb3d8bbwe\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.bingweather_8wekyb3d8bbwe\\app.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0136.268] GetFileType (hFile=0x444) returned 0x1 [0136.268] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0136.268] GetFileType (hFile=0x444) returned 0x1 [0136.268] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x5d4 [0136.268] ReadFile (in: hFile=0x444, lpBuffer=0x22ee388, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x22ee388*, lpNumberOfBytesRead=0x3be6a8*=0x5d4, lpOverlapped=0x0) returned 1 [0136.285] CloseHandle (hObject=0x444) returned 1 [0136.314] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BingWeather_8wekyb3d8bbwe\\App.lnk", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BingWeather_8wekyb3d8bbwe\\App.lnk", lpFilePart=0x0) returned 0x77 [0136.314] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0136.314] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BingWeather_8wekyb3d8bbwe\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.bingweather_8wekyb3d8bbwe\\app.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0136.315] GetFileType (hFile=0x444) returned 0x1 [0136.315] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0136.315] GetFileType (hFile=0x444) returned 0x1 [0136.315] WriteFile (in: hFile=0x444, lpBuffer=0x21670e0*, nNumberOfBytesToWrite=0x5e0, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x21670e0*, lpNumberOfBytesWritten=0x3be5b8*=0x5e0, lpOverlapped=0x0) returned 1 [0136.316] CloseHandle (hObject=0x444) returned 1 [0136.316] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BingWeather_8wekyb3d8bbwe\\App.lnk", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BingWeather_8wekyb3d8bbwe\\App.lnk", lpFilePart=0x0) returned 0x77 [0136.316] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BingWeather_8wekyb3d8bbwe\\App.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BingWeather_8wekyb3d8bbwe\\App.lnk.xuy", lpFilePart=0x0) returned 0x7b [0136.316] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0136.316] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BingWeather_8wekyb3d8bbwe\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.bingweather_8wekyb3d8bbwe\\app.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20f43cd0, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x20f43cd0, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x3d191b74, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x5e0)) returned 1 [0136.316] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0136.316] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BingWeather_8wekyb3d8bbwe\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.bingweather_8wekyb3d8bbwe\\app.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BingWeather_8wekyb3d8bbwe\\App.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.bingweather_8wekyb3d8bbwe\\app.lnk.xuy")) returned 1 [0136.317] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0136.317] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BioEnrollment_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BioEnrollment_cw5n1h2txyewy", lpFilePart=0x0) returned 0x71 [0136.317] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BioEnrollment_cw5n1h2txyewy\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BioEnrollment_cw5n1h2txyewy\\", lpFilePart=0x0) returned 0x72 [0136.317] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BioEnrollment_cw5n1h2txyewy\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7d30 [0136.318] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0136.318] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0136.318] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0136.319] FindClose (in: hFindFile=0x5d7d30 | out: hFindFile=0x5d7d30) returned 1 [0136.319] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0136.319] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0136.319] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0136.319] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BioEnrollment_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BioEnrollment_cw5n1h2txyewy", lpFilePart=0x0) returned 0x71 [0136.319] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BioEnrollment_cw5n1h2txyewy\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BioEnrollment_cw5n1h2txyewy\\", lpFilePart=0x0) returned 0x72 [0136.319] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BioEnrollment_cw5n1h2txyewy\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d79d0 [0136.319] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0136.319] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0136.319] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0136.319] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0136.319] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0136.319] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0136.319] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BioEnrollment_cw5n1h2txyewy\\App.lnk", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BioEnrollment_cw5n1h2txyewy\\App.lnk", lpFilePart=0x0) returned 0x79 [0136.320] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0136.320] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BioEnrollment_cw5n1h2txyewy\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.bioenrollment_cw5n1h2txyewy\\app.lnk"), fInfoLevelId=0x0, lpFileInformation=0x216acf0 | out: lpFileInformation=0x216acf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0f9a60b, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb0f9a60b, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xb0f9a60b, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x441)) returned 1 [0136.320] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0136.320] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BioEnrollment_cw5n1h2txyewy\\App.lnk", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BioEnrollment_cw5n1h2txyewy\\App.lnk", lpFilePart=0x0) returned 0x79 [0136.320] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0136.320] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BioEnrollment_cw5n1h2txyewy\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.bioenrollment_cw5n1h2txyewy\\app.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0136.320] GetFileType (hFile=0x444) returned 0x1 [0136.320] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0136.320] GetFileType (hFile=0x444) returned 0x1 [0136.320] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x441 [0136.320] ReadFile (in: hFile=0x444, lpBuffer=0x216b490, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x216b490*, lpNumberOfBytesRead=0x3be6a8*=0x441, lpOverlapped=0x0) returned 1 [0136.358] CloseHandle (hObject=0x444) returned 1 [0136.380] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BioEnrollment_cw5n1h2txyewy\\App.lnk", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BioEnrollment_cw5n1h2txyewy\\App.lnk", lpFilePart=0x0) returned 0x79 [0136.380] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0136.380] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BioEnrollment_cw5n1h2txyewy\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.bioenrollment_cw5n1h2txyewy\\app.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0136.382] GetFileType (hFile=0x444) returned 0x1 [0136.382] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0136.382] GetFileType (hFile=0x444) returned 0x1 [0136.382] WriteFile (in: hFile=0x444, lpBuffer=0x21e3a58*, nNumberOfBytesToWrite=0x450, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x21e3a58*, lpNumberOfBytesWritten=0x3be5b8*=0x450, lpOverlapped=0x0) returned 1 [0136.383] CloseHandle (hObject=0x444) returned 1 [0136.383] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BioEnrollment_cw5n1h2txyewy\\App.lnk", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BioEnrollment_cw5n1h2txyewy\\App.lnk", lpFilePart=0x0) returned 0x79 [0136.383] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BioEnrollment_cw5n1h2txyewy\\App.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BioEnrollment_cw5n1h2txyewy\\App.lnk.xuy", lpFilePart=0x0) returned 0x7d [0136.383] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0136.383] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BioEnrollment_cw5n1h2txyewy\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.bioenrollment_cw5n1h2txyewy\\app.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0f9a60b, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb0f9a60b, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x3d22a791, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x450)) returned 1 [0136.383] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0136.384] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BioEnrollment_cw5n1h2txyewy\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.bioenrollment_cw5n1h2txyewy\\app.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BioEnrollment_cw5n1h2txyewy\\App.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.bioenrollment_cw5n1h2txyewy\\app.lnk.xuy")) returned 1 [0136.385] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0136.385] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Getstarted_8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Getstarted_8wekyb3d8bbwe", lpFilePart=0x0) returned 0x6e [0136.385] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Getstarted_8wekyb3d8bbwe\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Getstarted_8wekyb3d8bbwe\\", lpFilePart=0x0) returned 0x6f [0136.385] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Getstarted_8wekyb3d8bbwe\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d81b0 [0136.386] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0136.386] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0136.386] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0136.386] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0136.386] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0136.386] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0136.386] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0136.386] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Getstarted_8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Getstarted_8wekyb3d8bbwe", lpFilePart=0x0) returned 0x6e [0136.387] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Getstarted_8wekyb3d8bbwe\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Getstarted_8wekyb3d8bbwe\\", lpFilePart=0x0) returned 0x6f [0136.387] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Getstarted_8wekyb3d8bbwe\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7af0 [0136.387] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0136.387] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0136.387] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0136.387] FindClose (in: hFindFile=0x5d7af0 | out: hFindFile=0x5d7af0) returned 1 [0136.387] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0136.387] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0136.387] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Getstarted_8wekyb3d8bbwe\\App.lnk", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Getstarted_8wekyb3d8bbwe\\App.lnk", lpFilePart=0x0) returned 0x76 [0136.387] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0136.387] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Getstarted_8wekyb3d8bbwe\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.getstarted_8wekyb3d8bbwe\\app.lnk"), fInfoLevelId=0x0, lpFileInformation=0x21e7600 | out: lpFileInformation=0x21e7600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f36647b, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x1f36647b, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x1f36647b, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x538)) returned 1 [0136.388] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0136.388] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Getstarted_8wekyb3d8bbwe\\App.lnk", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Getstarted_8wekyb3d8bbwe\\App.lnk", lpFilePart=0x0) returned 0x76 [0136.388] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0136.388] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Getstarted_8wekyb3d8bbwe\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.getstarted_8wekyb3d8bbwe\\app.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0136.388] GetFileType (hFile=0x444) returned 0x1 [0136.388] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0136.388] GetFileType (hFile=0x444) returned 0x1 [0136.388] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x538 [0136.388] ReadFile (in: hFile=0x444, lpBuffer=0x21e7e80, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x21e7e80*, lpNumberOfBytesRead=0x3be6a8*=0x538, lpOverlapped=0x0) returned 1 [0136.415] CloseHandle (hObject=0x444) returned 1 [0136.425] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Getstarted_8wekyb3d8bbwe\\App.lnk", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Getstarted_8wekyb3d8bbwe\\App.lnk", lpFilePart=0x0) returned 0x76 [0136.425] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0136.425] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Getstarted_8wekyb3d8bbwe\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.getstarted_8wekyb3d8bbwe\\app.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0136.427] GetFileType (hFile=0x444) returned 0x1 [0136.427] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0136.427] GetFileType (hFile=0x444) returned 0x1 [0136.427] WriteFile (in: hFile=0x444, lpBuffer=0x22608e8*, nNumberOfBytesToWrite=0x540, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x22608e8*, lpNumberOfBytesWritten=0x3be5b8*=0x540, lpOverlapped=0x0) returned 1 [0136.428] CloseHandle (hObject=0x444) returned 1 [0136.428] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Getstarted_8wekyb3d8bbwe\\App.lnk", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Getstarted_8wekyb3d8bbwe\\App.lnk", lpFilePart=0x0) returned 0x76 [0136.428] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Getstarted_8wekyb3d8bbwe\\App.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Getstarted_8wekyb3d8bbwe\\App.lnk.xuy", lpFilePart=0x0) returned 0x7a [0136.428] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0136.428] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Getstarted_8wekyb3d8bbwe\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.getstarted_8wekyb3d8bbwe\\app.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f36647b, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x1f36647b, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x3d29cabc, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x540)) returned 1 [0136.428] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0136.428] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Getstarted_8wekyb3d8bbwe\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.getstarted_8wekyb3d8bbwe\\app.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Getstarted_8wekyb3d8bbwe\\App.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.getstarted_8wekyb3d8bbwe\\app.lnk.xuy")) returned 1 [0136.430] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0136.430] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.LockApp_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.LockApp_cw5n1h2txyewy", lpFilePart=0x0) returned 0x6b [0136.430] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.LockApp_cw5n1h2txyewy\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.LockApp_cw5n1h2txyewy\\", lpFilePart=0x0) returned 0x6c [0136.430] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.LockApp_cw5n1h2txyewy\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7af0 [0136.466] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0136.466] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0136.466] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0136.466] FindClose (in: hFindFile=0x5d7af0 | out: hFindFile=0x5d7af0) returned 1 [0136.467] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0136.467] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0136.467] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0136.467] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.LockApp_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.LockApp_cw5n1h2txyewy", lpFilePart=0x0) returned 0x6b [0136.467] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.LockApp_cw5n1h2txyewy\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.LockApp_cw5n1h2txyewy\\", lpFilePart=0x0) returned 0x6c [0136.467] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.LockApp_cw5n1h2txyewy\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d81b0 [0136.468] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0136.468] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0136.468] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0136.468] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0136.469] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0136.469] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0136.469] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.LockApp_cw5n1h2txyewy\\WindowsDefaultLockScreen.lnk", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.LockApp_cw5n1h2txyewy\\WindowsDefaultLockScreen.lnk", lpFilePart=0x0) returned 0x88 [0136.469] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0136.469] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.LockApp_cw5n1h2txyewy\\WindowsDefaultLockScreen.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.lockapp_cw5n1h2txyewy\\windowsdefaultlockscreen.lnk"), fInfoLevelId=0x0, lpFileInformation=0x22645a0 | out: lpFileInformation=0x22645a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb151dd31, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb151dd31, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xb151dd31, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x43d)) returned 1 [0136.470] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0136.470] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.LockApp_cw5n1h2txyewy\\WindowsDefaultLockScreen.lnk", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.LockApp_cw5n1h2txyewy\\WindowsDefaultLockScreen.lnk", lpFilePart=0x0) returned 0x88 [0136.470] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0136.470] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.LockApp_cw5n1h2txyewy\\WindowsDefaultLockScreen.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.lockapp_cw5n1h2txyewy\\windowsdefaultlockscreen.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0136.470] GetFileType (hFile=0x444) returned 0x1 [0136.470] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0136.470] GetFileType (hFile=0x444) returned 0x1 [0136.470] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x43d [0136.471] ReadFile (in: hFile=0x444, lpBuffer=0x2264dd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x2264dd8*, lpNumberOfBytesRead=0x3be6a8*=0x43d, lpOverlapped=0x0) returned 1 [0136.539] CloseHandle (hObject=0x444) returned 1 [0136.549] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.LockApp_cw5n1h2txyewy\\WindowsDefaultLockScreen.lnk", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.LockApp_cw5n1h2txyewy\\WindowsDefaultLockScreen.lnk", lpFilePart=0x0) returned 0x88 [0136.549] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0136.550] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.LockApp_cw5n1h2txyewy\\WindowsDefaultLockScreen.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.lockapp_cw5n1h2txyewy\\windowsdefaultlockscreen.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0136.551] GetFileType (hFile=0x444) returned 0x1 [0136.551] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0136.551] GetFileType (hFile=0x444) returned 0x1 [0136.551] WriteFile (in: hFile=0x444, lpBuffer=0x22dd398*, nNumberOfBytesToWrite=0x440, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x22dd398*, lpNumberOfBytesWritten=0x3be5b8*=0x440, lpOverlapped=0x0) returned 1 [0136.552] CloseHandle (hObject=0x444) returned 1 [0136.552] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.LockApp_cw5n1h2txyewy\\WindowsDefaultLockScreen.lnk", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.LockApp_cw5n1h2txyewy\\WindowsDefaultLockScreen.lnk", lpFilePart=0x0) returned 0x88 [0136.552] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.LockApp_cw5n1h2txyewy\\WindowsDefaultLockScreen.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.LockApp_cw5n1h2txyewy\\WindowsDefaultLockScreen.lnk.xuy", lpFilePart=0x0) returned 0x8c [0136.552] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0136.552] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.LockApp_cw5n1h2txyewy\\WindowsDefaultLockScreen.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.lockapp_cw5n1h2txyewy\\windowsdefaultlockscreen.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb151dd31, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb151dd31, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x3d3d2aa9, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x440)) returned 1 [0136.552] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0136.552] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.LockApp_cw5n1h2txyewy\\WindowsDefaultLockScreen.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.lockapp_cw5n1h2txyewy\\windowsdefaultlockscreen.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.LockApp_cw5n1h2txyewy\\WindowsDefaultLockScreen.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.lockapp_cw5n1h2txyewy\\windowsdefaultlockscreen.lnk.xuy")) returned 1 [0136.553] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0136.553] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe", lpFilePart=0x0) returned 0x71 [0136.553] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\", lpFilePart=0x0) returned 0x72 [0136.553] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7c70 [0136.604] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0136.605] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0136.605] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0136.605] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0136.606] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0136.606] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0136.606] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0136.606] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe", lpFilePart=0x0) returned 0x71 [0136.606] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\", lpFilePart=0x0) returned 0x72 [0136.606] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d79d0 [0136.607] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0136.607] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0136.607] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0136.607] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0136.608] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0136.608] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0136.608] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\MicrosoftEdge.lnk", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\MicrosoftEdge.lnk", lpFilePart=0x0) returned 0x83 [0136.608] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0136.608] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\MicrosoftEdge.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.microsoftedge_8wekyb3d8bbwe\\microsoftedge.lnk"), fInfoLevelId=0x0, lpFileInformation=0x22e1150 | out: lpFileInformation=0x22e1150*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1c6b0b1, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb1c6b0b1, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xb1c6b0b1, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x574)) returned 1 [0136.609] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0136.609] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\MicrosoftEdge.lnk", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\MicrosoftEdge.lnk", lpFilePart=0x0) returned 0x83 [0136.609] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0136.609] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\MicrosoftEdge.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.microsoftedge_8wekyb3d8bbwe\\microsoftedge.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0136.609] GetFileType (hFile=0x444) returned 0x1 [0136.609] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0136.609] GetFileType (hFile=0x444) returned 0x1 [0136.609] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x574 [0136.609] ReadFile (in: hFile=0x444, lpBuffer=0x22e1a70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x22e1a70*, lpNumberOfBytesRead=0x3be6a8*=0x574, lpOverlapped=0x0) returned 1 [0136.681] CloseHandle (hObject=0x444) returned 1 [0136.692] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\MicrosoftEdge.lnk", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\MicrosoftEdge.lnk", lpFilePart=0x0) returned 0x83 [0136.692] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0136.692] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\MicrosoftEdge.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.microsoftedge_8wekyb3d8bbwe\\microsoftedge.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0136.693] GetFileType (hFile=0x444) returned 0x1 [0136.693] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0136.693] GetFileType (hFile=0x444) returned 0x1 [0136.693] WriteFile (in: hFile=0x444, lpBuffer=0x235a650*, nNumberOfBytesToWrite=0x580, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x235a650*, lpNumberOfBytesWritten=0x3be5b8*=0x580, lpOverlapped=0x0) returned 1 [0136.705] CloseHandle (hObject=0x444) returned 1 [0136.705] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\MicrosoftEdge.lnk", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\MicrosoftEdge.lnk", lpFilePart=0x0) returned 0x83 [0136.705] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\MicrosoftEdge.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\MicrosoftEdge.lnk.xuy", lpFilePart=0x0) returned 0x87 [0136.705] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0136.705] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\MicrosoftEdge.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.microsoftedge_8wekyb3d8bbwe\\microsoftedge.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1c6b0b1, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb1c6b0b1, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x3d54b595, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x580)) returned 1 [0136.705] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0136.705] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\MicrosoftEdge.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.microsoftedge_8wekyb3d8bbwe\\microsoftedge.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\MicrosoftEdge.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.microsoftedge_8wekyb3d8bbwe\\microsoftedge.lnk.xuy")) returned 1 [0136.707] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0136.707] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe", lpFilePart=0x0) returned 0x76 [0136.707] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\", lpFilePart=0x0) returned 0x77 [0136.707] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7370 [0136.767] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0136.767] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0136.767] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0136.767] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0136.768] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0136.768] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0136.768] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0136.768] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe", lpFilePart=0x0) returned 0x76 [0136.768] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\", lpFilePart=0x0) returned 0x77 [0136.768] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d81b0 [0136.769] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0136.769] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0136.769] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0136.769] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0136.770] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0136.770] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0136.770] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Microsoft.MicrosoftOfficeHub.lnk", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Microsoft.MicrosoftOfficeHub.lnk", lpFilePart=0x0) returned 0x97 [0136.770] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0136.770] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Microsoft.MicrosoftOfficeHub.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.microsoftofficehub_8wekyb3d8bbwe\\microsoft.microsoftofficehub.lnk"), fInfoLevelId=0x0, lpFileInformation=0x235e618 | out: lpFileInformation=0x235e618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d2c40c7, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x1d2c40c7, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x1d35c8b3, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x5ac)) returned 1 [0136.771] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0136.771] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Microsoft.MicrosoftOfficeHub.lnk", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Microsoft.MicrosoftOfficeHub.lnk", lpFilePart=0x0) returned 0x97 [0136.771] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0136.771] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Microsoft.MicrosoftOfficeHub.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.microsoftofficehub_8wekyb3d8bbwe\\microsoft.microsoftofficehub.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0136.771] GetFileType (hFile=0x444) returned 0x1 [0136.771] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0136.771] GetFileType (hFile=0x444) returned 0x1 [0136.771] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x5ac [0136.771] ReadFile (in: hFile=0x444, lpBuffer=0x235f000, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x235f000*, lpNumberOfBytesRead=0x3be6a8*=0x5ac, lpOverlapped=0x0) returned 1 [0136.819] CloseHandle (hObject=0x444) returned 1 [0136.862] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Microsoft.MicrosoftOfficeHub.lnk", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Microsoft.MicrosoftOfficeHub.lnk", lpFilePart=0x0) returned 0x97 [0136.862] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0136.862] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Microsoft.MicrosoftOfficeHub.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.microsoftofficehub_8wekyb3d8bbwe\\microsoft.microsoftofficehub.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0136.863] GetFileType (hFile=0x444) returned 0x1 [0136.863] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0136.863] GetFileType (hFile=0x444) returned 0x1 [0136.863] WriteFile (in: hFile=0x444, lpBuffer=0x21d7cf8*, nNumberOfBytesToWrite=0x5b0, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x21d7cf8*, lpNumberOfBytesWritten=0x3be5b8*=0x5b0, lpOverlapped=0x0) returned 1 [0136.864] CloseHandle (hObject=0x444) returned 1 [0136.864] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Microsoft.MicrosoftOfficeHub.lnk", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Microsoft.MicrosoftOfficeHub.lnk", lpFilePart=0x0) returned 0x97 [0136.864] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Microsoft.MicrosoftOfficeHub.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Microsoft.MicrosoftOfficeHub.lnk.xuy", lpFilePart=0x0) returned 0x9b [0136.864] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0136.864] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Microsoft.MicrosoftOfficeHub.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.microsoftofficehub_8wekyb3d8bbwe\\microsoft.microsoftofficehub.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d2c40c7, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x1d2c40c7, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x3d6c8d7b, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x5b0)) returned 1 [0136.864] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0136.865] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Microsoft.MicrosoftOfficeHub.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.microsoftofficehub_8wekyb3d8bbwe\\microsoft.microsoftofficehub.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Microsoft.MicrosoftOfficeHub.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.microsoftofficehub_8wekyb3d8bbwe\\microsoft.microsoftofficehub.lnk.xuy")) returned 1 [0136.865] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0136.866] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe", lpFilePart=0x0) returned 0x80 [0136.866] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\", lpFilePart=0x0) returned 0x81 [0136.866] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7cd0 [0136.867] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0136.867] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0136.867] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0136.867] FindClose (in: hFindFile=0x5d7cd0 | out: hFindFile=0x5d7cd0) returned 1 [0136.867] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0136.867] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0136.867] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0136.867] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe", lpFilePart=0x0) returned 0x80 [0136.867] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\", lpFilePart=0x0) returned 0x81 [0136.867] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d75b0 [0136.868] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0136.868] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0136.868] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0136.868] FindClose (in: hFindFile=0x5d75b0 | out: hFindFile=0x5d75b0) returned 1 [0136.868] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0136.868] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0136.868] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\App.lnk", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\App.lnk", lpFilePart=0x0) returned 0x88 [0136.868] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0136.868] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.microsoftsolitairecollection_8wekyb3d8bbwe\\app.lnk"), fInfoLevelId=0x0, lpFileInformation=0x21dbd68 | out: lpFileInformation=0x21dbd68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19e2a0da, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x19e2a0da, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x19ee8c6b, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x69c)) returned 1 [0136.868] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0136.868] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\App.lnk", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\App.lnk", lpFilePart=0x0) returned 0x88 [0136.868] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0136.868] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.microsoftsolitairecollection_8wekyb3d8bbwe\\app.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0136.869] GetFileType (hFile=0x444) returned 0x1 [0136.869] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0136.869] GetFileType (hFile=0x444) returned 0x1 [0136.869] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x69c [0136.869] ReadFile (in: hFile=0x444, lpBuffer=0x21dc7a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x21dc7a0*, lpNumberOfBytesRead=0x3be6a8*=0x69c, lpOverlapped=0x0) returned 1 [0136.936] CloseHandle (hObject=0x444) returned 1 [0136.946] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\App.lnk", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\App.lnk", lpFilePart=0x0) returned 0x88 [0136.946] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0136.946] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.microsoftsolitairecollection_8wekyb3d8bbwe\\app.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0136.948] GetFileType (hFile=0x444) returned 0x1 [0136.948] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0136.948] GetFileType (hFile=0x444) returned 0x1 [0136.948] WriteFile (in: hFile=0x444, lpBuffer=0x2255910*, nNumberOfBytesToWrite=0x6a0, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x2255910*, lpNumberOfBytesWritten=0x3be5b8*=0x6a0, lpOverlapped=0x0) returned 1 [0136.949] CloseHandle (hObject=0x444) returned 1 [0136.949] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\App.lnk", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\App.lnk", lpFilePart=0x0) returned 0x88 [0136.949] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\App.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\App.lnk.xuy", lpFilePart=0x0) returned 0x8c [0136.949] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0136.949] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.microsoftsolitairecollection_8wekyb3d8bbwe\\app.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19e2a0da, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x19e2a0da, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x3d7adaf0, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x6a0)) returned 1 [0136.949] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0136.949] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.microsoftsolitairecollection_8wekyb3d8bbwe\\app.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\App.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.microsoftsolitairecollection_8wekyb3d8bbwe\\app.lnk.xuy")) returned 1 [0136.950] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0136.950] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Office.OneNote_8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Office.OneNote_8wekyb3d8bbwe", lpFilePart=0x0) returned 0x72 [0136.950] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\", lpFilePart=0x0) returned 0x73 [0136.951] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7670 [0137.017] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0137.017] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0137.017] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0137.017] FindClose (in: hFindFile=0x5d7670 | out: hFindFile=0x5d7670) returned 1 [0137.018] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0137.018] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0137.018] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0137.018] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Office.OneNote_8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Office.OneNote_8wekyb3d8bbwe", lpFilePart=0x0) returned 0x72 [0137.018] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\", lpFilePart=0x0) returned 0x73 [0137.018] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d79d0 [0137.019] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0137.019] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0137.019] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0137.020] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0137.020] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0137.020] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0137.020] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\microsoft.onenoteim.lnk", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\microsoft.onenoteim.lnk", lpFilePart=0x0) returned 0x8a [0137.020] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0137.020] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\microsoft.onenoteim.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.office.onenote_8wekyb3d8bbwe\\microsoft.onenoteim.lnk"), fInfoLevelId=0x0, lpFileInformation=0x2259790 | out: lpFileInformation=0x2259790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17129970, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x17129970, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x171c2318, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x534)) returned 1 [0137.021] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0137.021] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\microsoft.onenoteim.lnk", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\microsoft.onenoteim.lnk", lpFilePart=0x0) returned 0x8a [0137.021] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0137.021] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\microsoft.onenoteim.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.office.onenote_8wekyb3d8bbwe\\microsoft.onenoteim.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0137.021] GetFileType (hFile=0x444) returned 0x1 [0137.021] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0137.021] GetFileType (hFile=0x444) returned 0x1 [0137.021] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x534 [0137.021] ReadFile (in: hFile=0x444, lpBuffer=0x225a0a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x225a0a0*, lpNumberOfBytesRead=0x3be6a8*=0x534, lpOverlapped=0x0) returned 1 [0137.140] CloseHandle (hObject=0x444) returned 1 [0137.150] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\microsoft.onenoteim.lnk", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\microsoft.onenoteim.lnk", lpFilePart=0x0) returned 0x8a [0137.150] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0137.150] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\microsoft.onenoteim.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.office.onenote_8wekyb3d8bbwe\\microsoft.onenoteim.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0137.152] GetFileType (hFile=0x444) returned 0x1 [0137.152] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0137.152] GetFileType (hFile=0x444) returned 0x1 [0137.152] WriteFile (in: hFile=0x444, lpBuffer=0x22d2b58*, nNumberOfBytesToWrite=0x540, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x22d2b58*, lpNumberOfBytesWritten=0x3be5b8*=0x540, lpOverlapped=0x0) returned 1 [0137.153] CloseHandle (hObject=0x444) returned 1 [0137.153] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\microsoft.onenoteim.lnk", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\microsoft.onenoteim.lnk", lpFilePart=0x0) returned 0x8a [0137.153] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\microsoft.onenoteim.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\microsoft.onenoteim.lnk.xuy", lpFilePart=0x0) returned 0x8e [0137.153] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0137.153] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\microsoft.onenoteim.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.office.onenote_8wekyb3d8bbwe\\microsoft.onenoteim.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17129970, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x17129970, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x3d99e55b, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x540)) returned 1 [0137.153] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0137.153] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\microsoft.onenoteim.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.office.onenote_8wekyb3d8bbwe\\microsoft.onenoteim.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\microsoft.onenoteim.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.office.onenote_8wekyb3d8bbwe\\microsoft.onenoteim.lnk.xuy")) returned 1 [0137.154] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0137.154] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.People_8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.People_8wekyb3d8bbwe", lpFilePart=0x0) returned 0x6a [0137.154] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.People_8wekyb3d8bbwe\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.People_8wekyb3d8bbwe\\", lpFilePart=0x0) returned 0x6b [0137.154] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.People_8wekyb3d8bbwe\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7c70 [0137.258] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0137.258] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0137.258] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0137.258] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0137.259] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0137.259] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0137.259] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0137.259] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.People_8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.People_8wekyb3d8bbwe", lpFilePart=0x0) returned 0x6a [0137.259] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.People_8wekyb3d8bbwe\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.People_8wekyb3d8bbwe\\", lpFilePart=0x0) returned 0x6b [0137.259] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.People_8wekyb3d8bbwe\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d73d0 [0137.260] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0137.260] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0137.261] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0137.261] FindClose (in: hFindFile=0x5d73d0 | out: hFindFile=0x5d73d0) returned 1 [0137.262] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0137.262] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0137.262] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.People_8wekyb3d8bbwe\\x4c7a3b7dy2188y46d4ya362y19ac5a5805e5x.lnk", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.People_8wekyb3d8bbwe\\x4c7a3b7dy2188y46d4ya362y19ac5a5805e5x.lnk", lpFilePart=0x0) returned 0x95 [0137.262] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0137.262] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.People_8wekyb3d8bbwe\\x4c7a3b7dy2188y46d4ya362y19ac5a5805e5x.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.people_8wekyb3d8bbwe\\x4c7a3b7dy2188y46d4ya362y19ac5a5805e5x.lnk"), fInfoLevelId=0x0, lpFileInformation=0x22d6910 | out: lpFileInformation=0x22d6910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1300b3a4, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x1300b3a4, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x130a3d3d, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x5c9)) returned 1 [0137.263] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0137.263] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.People_8wekyb3d8bbwe\\x4c7a3b7dy2188y46d4ya362y19ac5a5805e5x.lnk", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.People_8wekyb3d8bbwe\\x4c7a3b7dy2188y46d4ya362y19ac5a5805e5x.lnk", lpFilePart=0x0) returned 0x95 [0137.263] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0137.263] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.People_8wekyb3d8bbwe\\x4c7a3b7dy2188y46d4ya362y19ac5a5805e5x.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.people_8wekyb3d8bbwe\\x4c7a3b7dy2188y46d4ya362y19ac5a5805e5x.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0137.263] GetFileType (hFile=0x444) returned 0x1 [0137.263] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0137.263] GetFileType (hFile=0x444) returned 0x1 [0137.263] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x5c9 [0137.263] ReadFile (in: hFile=0x444, lpBuffer=0x22d7338, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x22d7338*, lpNumberOfBytesRead=0x3be6a8*=0x5c9, lpOverlapped=0x0) returned 1 [0137.328] CloseHandle (hObject=0x444) returned 1 [0137.338] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.People_8wekyb3d8bbwe\\x4c7a3b7dy2188y46d4ya362y19ac5a5805e5x.lnk", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.People_8wekyb3d8bbwe\\x4c7a3b7dy2188y46d4ya362y19ac5a5805e5x.lnk", lpFilePart=0x0) returned 0x95 [0137.338] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0137.338] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.People_8wekyb3d8bbwe\\x4c7a3b7dy2188y46d4ya362y19ac5a5805e5x.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.people_8wekyb3d8bbwe\\x4c7a3b7dy2188y46d4ya362y19ac5a5805e5x.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0137.340] GetFileType (hFile=0x444) returned 0x1 [0137.340] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0137.340] GetFileType (hFile=0x444) returned 0x1 [0137.340] WriteFile (in: hFile=0x444, lpBuffer=0x23500f8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x23500f8*, lpNumberOfBytesWritten=0x3be5b8*=0x5d0, lpOverlapped=0x0) returned 1 [0137.342] CloseHandle (hObject=0x444) returned 1 [0137.342] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.People_8wekyb3d8bbwe\\x4c7a3b7dy2188y46d4ya362y19ac5a5805e5x.lnk", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.People_8wekyb3d8bbwe\\x4c7a3b7dy2188y46d4ya362y19ac5a5805e5x.lnk", lpFilePart=0x0) returned 0x95 [0137.342] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.People_8wekyb3d8bbwe\\x4c7a3b7dy2188y46d4ya362y19ac5a5805e5x.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.People_8wekyb3d8bbwe\\x4c7a3b7dy2188y46d4ya362y19ac5a5805e5x.lnk.xuy", lpFilePart=0x0) returned 0x99 [0137.342] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0137.342] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.People_8wekyb3d8bbwe\\x4c7a3b7dy2188y46d4ya362y19ac5a5805e5x.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.people_8wekyb3d8bbwe\\x4c7a3b7dy2188y46d4ya362y19ac5a5805e5x.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1300b3a4, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x1300b3a4, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x3db67615, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x5d0)) returned 1 [0137.342] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0137.342] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.People_8wekyb3d8bbwe\\x4c7a3b7dy2188y46d4ya362y19ac5a5805e5x.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.people_8wekyb3d8bbwe\\x4c7a3b7dy2188y46d4ya362y19ac5a5805e5x.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.People_8wekyb3d8bbwe\\x4c7a3b7dy2188y46d4ya362y19ac5a5805e5x.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.people_8wekyb3d8bbwe\\x4c7a3b7dy2188y46d4ya362y19ac5a5805e5x.lnk.xuy")) returned 1 [0137.343] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0137.343] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.SkypeApp_kzf8qxf38zg5c", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.SkypeApp_kzf8qxf38zg5c", lpFilePart=0x0) returned 0x6c [0137.343] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.SkypeApp_kzf8qxf38zg5c\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.SkypeApp_kzf8qxf38zg5c\\", lpFilePart=0x0) returned 0x6d [0137.343] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.SkypeApp_kzf8qxf38zg5c\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d78b0 [0137.344] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0137.344] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0137.344] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0137.344] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0137.344] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0137.344] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0137.344] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0137.344] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.SkypeApp_kzf8qxf38zg5c", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.SkypeApp_kzf8qxf38zg5c", lpFilePart=0x0) returned 0x6c [0137.344] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.SkypeApp_kzf8qxf38zg5c\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.SkypeApp_kzf8qxf38zg5c\\", lpFilePart=0x0) returned 0x6d [0137.344] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.SkypeApp_kzf8qxf38zg5c\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7550 [0137.344] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0137.345] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0137.345] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0137.345] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0137.345] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0137.345] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0137.345] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.SkypeApp_kzf8qxf38zg5c\\App.lnk", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.SkypeApp_kzf8qxf38zg5c\\App.lnk", lpFilePart=0x0) returned 0x74 [0137.345] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0137.345] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.SkypeApp_kzf8qxf38zg5c\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.skypeapp_kzf8qxf38zg5c\\app.lnk"), fInfoLevelId=0x0, lpFileInformation=0x2353cb8 | out: lpFileInformation=0x2353cb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe46192a2, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xe46192a2, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0xe48090dd, ftLastWriteTime.dwHighDateTime=0x1d2d028, nFileSizeHigh=0x0, nFileSizeLow=0x524)) returned 1 [0137.346] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0137.346] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.SkypeApp_kzf8qxf38zg5c\\App.lnk", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.SkypeApp_kzf8qxf38zg5c\\App.lnk", lpFilePart=0x0) returned 0x74 [0137.346] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0137.346] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.SkypeApp_kzf8qxf38zg5c\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.skypeapp_kzf8qxf38zg5c\\app.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0137.346] GetFileType (hFile=0x444) returned 0x1 [0137.346] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0137.346] GetFileType (hFile=0x444) returned 0x1 [0137.346] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x524 [0137.346] ReadFile (in: hFile=0x444, lpBuffer=0x2354528, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x2354528*, lpNumberOfBytesRead=0x3be6a8*=0x524, lpOverlapped=0x0) returned 1 [0137.820] CloseHandle (hObject=0x444) returned 1 [0138.188] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.SkypeApp_kzf8qxf38zg5c\\App.lnk", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.SkypeApp_kzf8qxf38zg5c\\App.lnk", lpFilePart=0x0) returned 0x74 [0138.188] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0138.188] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.SkypeApp_kzf8qxf38zg5c\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.skypeapp_kzf8qxf38zg5c\\app.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0138.190] GetFileType (hFile=0x444) returned 0x1 [0138.190] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0138.190] GetFileType (hFile=0x444) returned 0x1 [0138.190] WriteFile (in: hFile=0x444, lpBuffer=0x219ff90*, nNumberOfBytesToWrite=0x530, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x219ff90*, lpNumberOfBytesWritten=0x3be5b8*=0x530, lpOverlapped=0x0) returned 1 [0138.190] CloseHandle (hObject=0x444) returned 1 [0138.190] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.SkypeApp_kzf8qxf38zg5c\\App.lnk", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.SkypeApp_kzf8qxf38zg5c\\App.lnk", lpFilePart=0x0) returned 0x74 [0138.191] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.SkypeApp_kzf8qxf38zg5c\\App.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.SkypeApp_kzf8qxf38zg5c\\App.lnk.xuy", lpFilePart=0x0) returned 0x78 [0138.191] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0138.191] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.SkypeApp_kzf8qxf38zg5c\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.skypeapp_kzf8qxf38zg5c\\app.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe46192a2, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xe46192a2, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x3e3735d6, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x530)) returned 1 [0138.191] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0138.191] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.SkypeApp_kzf8qxf38zg5c\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.skypeapp_kzf8qxf38zg5c\\app.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.SkypeApp_kzf8qxf38zg5c\\App.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.skypeapp_kzf8qxf38zg5c\\app.lnk.xuy")) returned 1 [0138.192] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0138.192] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy", lpFilePart=0x0) returned 0x81 [0138.192] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\", lpFilePart=0x0) returned 0x82 [0138.192] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7370 [0138.193] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0138.193] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0138.193] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0138.193] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0138.193] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0138.193] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0138.193] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0138.193] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy", lpFilePart=0x0) returned 0x81 [0138.193] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\", lpFilePart=0x0) returned 0x82 [0138.194] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7550 [0138.194] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0138.194] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0138.194] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0138.194] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0138.194] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0138.194] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0138.194] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\App.lnk", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\App.lnk", lpFilePart=0x0) returned 0x89 [0138.194] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0138.194] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windows.assignedaccesslockapp_cw5n1h2txyewy\\app.lnk"), fInfoLevelId=0x0, lpFileInformation=0x21a3f60 | out: lpFileInformation=0x21a3f60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3aaaef5, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb3aaaef5, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xb3aaaef5, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x4e5)) returned 1 [0138.195] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0138.195] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\App.lnk", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\App.lnk", lpFilePart=0x0) returned 0x89 [0138.195] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0138.195] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windows.assignedaccesslockapp_cw5n1h2txyewy\\app.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0138.195] GetFileType (hFile=0x444) returned 0x1 [0138.195] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0138.195] GetFileType (hFile=0x444) returned 0x1 [0138.195] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x4e5 [0138.195] ReadFile (in: hFile=0x444, lpBuffer=0x21a47e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x21a47e0*, lpNumberOfBytesRead=0x3be6a8*=0x4e5, lpOverlapped=0x0) returned 1 [0138.196] CloseHandle (hObject=0x444) returned 1 [0138.207] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\App.lnk", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\App.lnk", lpFilePart=0x0) returned 0x89 [0138.207] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0138.207] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windows.assignedaccesslockapp_cw5n1h2txyewy\\app.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0138.209] GetFileType (hFile=0x444) returned 0x1 [0138.209] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0138.209] GetFileType (hFile=0x444) returned 0x1 [0138.209] WriteFile (in: hFile=0x444, lpBuffer=0x221d0e8*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x221d0e8*, lpNumberOfBytesWritten=0x3be5b8*=0x4f0, lpOverlapped=0x0) returned 1 [0138.210] CloseHandle (hObject=0x444) returned 1 [0138.210] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\App.lnk", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\App.lnk", lpFilePart=0x0) returned 0x89 [0138.210] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\App.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\App.lnk.xuy", lpFilePart=0x0) returned 0x8d [0138.210] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0138.210] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windows.assignedaccesslockapp_cw5n1h2txyewy\\app.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3aaaef5, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb3aaaef5, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x3e399a5d, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x4f0)) returned 1 [0138.210] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0138.210] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windows.assignedaccesslockapp_cw5n1h2txyewy\\app.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\App.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windows.assignedaccesslockapp_cw5n1h2txyewy\\app.lnk.xuy")) returned 1 [0138.211] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0138.211] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy", lpFilePart=0x0) returned 0x7f [0138.211] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\", lpFilePart=0x0) returned 0x80 [0138.211] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d81b0 [0138.211] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0138.211] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0138.212] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0138.212] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0138.212] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0138.212] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0138.212] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0138.212] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy", lpFilePart=0x0) returned 0x7f [0138.212] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\", lpFilePart=0x0) returned 0x80 [0138.212] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d81b0 [0138.212] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0138.212] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0138.212] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0138.212] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0138.213] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0138.213] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0138.213] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\App.lnk", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\App.lnk", lpFilePart=0x0) returned 0x87 [0138.213] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0138.213] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\app.lnk"), fInfoLevelId=0x0, lpFileInformation=0x22210d0 | out: lpFileInformation=0x22210d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0316033, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb0316033, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xb0316033, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x4c1)) returned 1 [0138.213] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0138.214] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\App.lnk", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\App.lnk", lpFilePart=0x0) returned 0x87 [0138.214] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0138.214] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\app.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0138.214] GetFileType (hFile=0x444) returned 0x1 [0138.214] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0138.214] GetFileType (hFile=0x444) returned 0x1 [0138.214] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x4c1 [0138.214] ReadFile (in: hFile=0x444, lpBuffer=0x2221920, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x2221920*, lpNumberOfBytesRead=0x3be6a8*=0x4c1, lpOverlapped=0x0) returned 1 [0138.269] CloseHandle (hObject=0x444) returned 1 [0138.279] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\App.lnk", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\App.lnk", lpFilePart=0x0) returned 0x87 [0138.279] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0138.279] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\app.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0138.281] GetFileType (hFile=0x444) returned 0x1 [0138.281] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0138.281] GetFileType (hFile=0x444) returned 0x1 [0138.281] WriteFile (in: hFile=0x444, lpBuffer=0x229a180*, nNumberOfBytesToWrite=0x4d0, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x229a180*, lpNumberOfBytesWritten=0x3be5b8*=0x4d0, lpOverlapped=0x0) returned 1 [0138.282] CloseHandle (hObject=0x444) returned 1 [0138.282] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\App.lnk", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\App.lnk", lpFilePart=0x0) returned 0x87 [0138.282] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\App.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\App.lnk.xuy", lpFilePart=0x0) returned 0x8b [0138.282] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0138.282] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\app.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0316033, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb0316033, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x3e4582e1, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x4d0)) returned 1 [0138.282] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0138.282] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\app.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\App.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\app.lnk.xuy")) returned 1 [0138.283] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0138.283] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy", lpFilePart=0x0) returned 0x82 [0138.283] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\", lpFilePart=0x0) returned 0x83 [0138.283] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d81b0 [0138.284] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0138.284] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0138.284] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0138.284] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0138.284] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0138.284] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0138.284] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0138.284] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy", lpFilePart=0x0) returned 0x82 [0138.284] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\", lpFilePart=0x0) returned 0x83 [0138.284] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7a90 [0138.285] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0138.285] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0138.285] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0138.285] FindClose (in: hFindFile=0x5d7a90 | out: hFindFile=0x5d7a90) returned 1 [0138.285] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0138.285] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0138.285] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\App.lnk", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\App.lnk", lpFilePart=0x0) returned 0x8a [0138.285] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0138.285] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\app.lnk"), fInfoLevelId=0x0, lpFileInformation=0x229e220 | out: lpFileInformation=0x229e220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4cff099, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb4cff099, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xb4cff099, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x51a)) returned 1 [0138.285] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0138.285] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\App.lnk", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\App.lnk", lpFilePart=0x0) returned 0x8a [0138.285] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0138.285] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\app.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0138.286] GetFileType (hFile=0x444) returned 0x1 [0138.286] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0138.286] GetFileType (hFile=0x444) returned 0x1 [0138.286] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x51a [0138.286] ReadFile (in: hFile=0x444, lpBuffer=0x229ead8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x229ead8*, lpNumberOfBytesRead=0x3be6a8*=0x51a, lpOverlapped=0x0) returned 1 [0138.287] CloseHandle (hObject=0x444) returned 1 [0138.298] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\App.lnk", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\App.lnk", lpFilePart=0x0) returned 0x8a [0138.298] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0138.298] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\app.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0138.299] GetFileType (hFile=0x444) returned 0x1 [0138.299] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0138.299] GetFileType (hFile=0x444) returned 0x1 [0138.299] WriteFile (in: hFile=0x444, lpBuffer=0x23174c8*, nNumberOfBytesToWrite=0x520, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x23174c8*, lpNumberOfBytesWritten=0x3be5b8*=0x520, lpOverlapped=0x0) returned 1 [0138.300] CloseHandle (hObject=0x444) returned 1 [0138.300] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\App.lnk", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\App.lnk", lpFilePart=0x0) returned 0x8a [0138.300] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\App.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\App.lnk.xuy", lpFilePart=0x0) returned 0x8e [0138.300] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0138.300] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\app.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4cff099, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb4cff099, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x3e47e507, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x520)) returned 1 [0138.300] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0138.301] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\app.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\App.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\app.lnk.xuy")) returned 1 [0138.302] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0138.302] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.Cortana_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.Cortana_cw5n1h2txyewy", lpFilePart=0x0) returned 0x73 [0138.302] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\", lpFilePart=0x0) returned 0x74 [0138.302] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7af0 [0138.352] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0138.352] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0138.352] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0138.352] FindClose (in: hFindFile=0x5d7af0 | out: hFindFile=0x5d7af0) returned 1 [0138.353] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0138.353] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0138.353] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0138.353] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.Cortana_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.Cortana_cw5n1h2txyewy", lpFilePart=0x0) returned 0x73 [0138.353] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\", lpFilePart=0x0) returned 0x74 [0138.353] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d81b0 [0138.354] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0138.354] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0138.354] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0138.355] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0138.355] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0138.355] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0138.355] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\CortanaUI.lnk", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\CortanaUI.lnk", lpFilePart=0x0) returned 0x81 [0138.355] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0138.355] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\CortanaUI.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windows.cortana_cw5n1h2txyewy\\cortanaui.lnk"), fInfoLevelId=0x0, lpFileInformation=0x231b2f8 | out: lpFileInformation=0x231b2f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb715af90, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb715af90, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xb715af90, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x4ff)) returned 1 [0138.356] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0138.356] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\CortanaUI.lnk", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\CortanaUI.lnk", lpFilePart=0x0) returned 0x81 [0138.356] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0138.356] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\CortanaUI.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windows.cortana_cw5n1h2txyewy\\cortanaui.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0138.357] GetFileType (hFile=0x444) returned 0x1 [0138.357] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0138.357] GetFileType (hFile=0x444) returned 0x1 [0138.357] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x4ff [0138.357] ReadFile (in: hFile=0x444, lpBuffer=0x231bb90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x231bb90*, lpNumberOfBytesRead=0x3be6a8*=0x4ff, lpOverlapped=0x0) returned 1 [0138.403] CloseHandle (hObject=0x444) returned 1 [0138.442] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\CortanaUI.lnk", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\CortanaUI.lnk", lpFilePart=0x0) returned 0x81 [0138.442] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0138.442] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\CortanaUI.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windows.cortana_cw5n1h2txyewy\\cortanaui.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0138.444] GetFileType (hFile=0x444) returned 0x1 [0138.444] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0138.444] GetFileType (hFile=0x444) returned 0x1 [0138.444] WriteFile (in: hFile=0x444, lpBuffer=0x2195b88*, nNumberOfBytesToWrite=0x500, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x2195b88*, lpNumberOfBytesWritten=0x3be5b8*=0x500, lpOverlapped=0x0) returned 1 [0138.445] CloseHandle (hObject=0x444) returned 1 [0138.445] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\CortanaUI.lnk", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\CortanaUI.lnk", lpFilePart=0x0) returned 0x81 [0138.445] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\CortanaUI.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\CortanaUI.lnk.xuy", lpFilePart=0x0) returned 0x85 [0138.445] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0138.445] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\CortanaUI.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windows.cortana_cw5n1h2txyewy\\cortanaui.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb715af90, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb715af90, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x3e5d1361, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x500)) returned 1 [0138.445] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0138.445] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\CortanaUI.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windows.cortana_cw5n1h2txyewy\\cortanaui.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\CortanaUI.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windows.cortana_cw5n1h2txyewy\\cortanaui.lnk.xuy")) returned 1 [0138.447] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0138.447] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy", lpFilePart=0x0) returned 0x7c [0138.447] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\", lpFilePart=0x0) returned 0x7d [0138.447] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7d90 [0138.447] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0138.448] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0138.448] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0138.448] FindClose (in: hFindFile=0x5d7d90 | out: hFindFile=0x5d7d90) returned 1 [0138.448] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0138.448] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0138.448] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0138.448] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy", lpFilePart=0x0) returned 0x7c [0138.448] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\", lpFilePart=0x0) returned 0x7d [0138.448] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7670 [0138.448] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0138.448] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0138.448] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0138.449] FindClose (in: hFindFile=0x5d7670 | out: hFindFile=0x5d7670) returned 1 [0138.449] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0138.449] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0138.449] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\App.lnk", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\App.lnk", lpFilePart=0x0) returned 0x84 [0138.449] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0138.449] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windows.parentalcontrols_cw5n1h2txyewy\\app.lnk"), fInfoLevelId=0x0, lpFileInformation=0x2199a90 | out: lpFileInformation=0x2199a90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8199019, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb8199019, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xb8199019, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x47d)) returned 1 [0138.450] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0138.450] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\App.lnk", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\App.lnk", lpFilePart=0x0) returned 0x84 [0138.450] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0138.450] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windows.parentalcontrols_cw5n1h2txyewy\\app.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0138.450] GetFileType (hFile=0x444) returned 0x1 [0138.450] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0138.450] GetFileType (hFile=0x444) returned 0x1 [0138.450] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x47d [0138.450] ReadFile (in: hFile=0x444, lpBuffer=0x219a298, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x219a298*, lpNumberOfBytesRead=0x3be6a8*=0x47d, lpOverlapped=0x0) returned 1 [0138.520] CloseHandle (hObject=0x444) returned 1 [0138.530] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\App.lnk", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\App.lnk", lpFilePart=0x0) returned 0x84 [0138.530] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0138.530] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windows.parentalcontrols_cw5n1h2txyewy\\app.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0138.532] GetFileType (hFile=0x444) returned 0x1 [0138.532] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0138.532] GetFileType (hFile=0x444) returned 0x1 [0138.532] WriteFile (in: hFile=0x444, lpBuffer=0x2212960*, nNumberOfBytesToWrite=0x480, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x2212960*, lpNumberOfBytesWritten=0x3be5b8*=0x480, lpOverlapped=0x0) returned 1 [0138.532] CloseHandle (hObject=0x444) returned 1 [0138.533] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\App.lnk", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\App.lnk", lpFilePart=0x0) returned 0x84 [0138.533] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\App.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\App.lnk.xuy", lpFilePart=0x0) returned 0x88 [0138.533] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0138.533] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windows.parentalcontrols_cw5n1h2txyewy\\app.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8199019, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb8199019, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x3e6b6164, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x480)) returned 1 [0138.533] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0138.533] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windows.parentalcontrols_cw5n1h2txyewy\\app.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\App.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windows.parentalcontrols_cw5n1h2txyewy\\app.lnk.xuy")) returned 1 [0138.534] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0138.534] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.Photos_8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.Photos_8wekyb3d8bbwe", lpFilePart=0x0) returned 0x72 [0138.534] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\", lpFilePart=0x0) returned 0x73 [0138.534] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d78b0 [0138.535] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0138.535] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0138.535] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0138.535] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0138.535] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0138.535] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0138.535] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0138.535] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.Photos_8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.Photos_8wekyb3d8bbwe", lpFilePart=0x0) returned 0x72 [0138.535] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\", lpFilePart=0x0) returned 0x73 [0138.535] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7610 [0138.535] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0138.536] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0138.536] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0138.536] FindClose (in: hFindFile=0x5d7610 | out: hFindFile=0x5d7610) returned 1 [0138.536] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0138.536] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0138.536] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\App.lnk", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\App.lnk", lpFilePart=0x0) returned 0x7a [0138.536] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0138.536] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windows.photos_8wekyb3d8bbwe\\app.lnk"), fInfoLevelId=0x0, lpFileInformation=0x2216640 | out: lpFileInformation=0x2216640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1053af18, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x1053af18, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x1053af18, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x554)) returned 1 [0138.537] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0138.537] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\App.lnk", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\App.lnk", lpFilePart=0x0) returned 0x7a [0138.537] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0138.537] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windows.photos_8wekyb3d8bbwe\\app.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0138.537] GetFileType (hFile=0x444) returned 0x1 [0138.537] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0138.537] GetFileType (hFile=0x444) returned 0x1 [0138.537] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x554 [0138.537] ReadFile (in: hFile=0x444, lpBuffer=0x2216ef0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x2216ef0*, lpNumberOfBytesRead=0x3be6a8*=0x554, lpOverlapped=0x0) returned 1 [0138.575] CloseHandle (hObject=0x444) returned 1 [0138.585] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\App.lnk", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\App.lnk", lpFilePart=0x0) returned 0x7a [0138.585] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0138.586] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windows.photos_8wekyb3d8bbwe\\app.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0138.587] GetFileType (hFile=0x444) returned 0x1 [0138.587] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0138.588] GetFileType (hFile=0x444) returned 0x1 [0138.588] WriteFile (in: hFile=0x444, lpBuffer=0x228fa08*, nNumberOfBytesToWrite=0x560, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x228fa08*, lpNumberOfBytesWritten=0x3be5b8*=0x560, lpOverlapped=0x0) returned 1 [0138.589] CloseHandle (hObject=0x444) returned 1 [0138.589] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\App.lnk", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\App.lnk", lpFilePart=0x0) returned 0x7a [0138.589] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\App.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\App.lnk.xuy", lpFilePart=0x0) returned 0x7e [0138.590] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0138.590] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windows.photos_8wekyb3d8bbwe\\app.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1053af18, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x1053af18, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x3e74ef8e, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x560)) returned 1 [0138.590] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0138.590] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windows.photos_8wekyb3d8bbwe\\app.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\App.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windows.photos_8wekyb3d8bbwe\\app.lnk.xuy")) returned 1 [0138.591] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0138.591] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy", lpFilePart=0x0) returned 0x7f [0138.591] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\", lpFilePart=0x0) returned 0x80 [0138.591] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7550 [0138.592] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0138.592] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0138.592] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0138.592] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0138.592] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0138.592] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0138.592] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0138.592] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy", lpFilePart=0x0) returned 0x7f [0138.592] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\", lpFilePart=0x0) returned 0x80 [0138.592] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7370 [0138.592] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0138.593] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0138.593] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0138.593] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0138.593] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0138.593] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0138.593] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\App.lnk", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\App.lnk", lpFilePart=0x0) returned 0x87 [0138.593] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0138.593] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\app.lnk"), fInfoLevelId=0x0, lpFileInformation=0x2293990 | out: lpFileInformation=0x2293990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba831236, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xba831236, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xba8574f8, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x495)) returned 1 [0138.593] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0138.593] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\App.lnk", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\App.lnk", lpFilePart=0x0) returned 0x87 [0138.593] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0138.593] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\app.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0138.593] GetFileType (hFile=0x444) returned 0x1 [0138.593] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0138.593] GetFileType (hFile=0x444) returned 0x1 [0138.593] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x495 [0138.594] ReadFile (in: hFile=0x444, lpBuffer=0x22941b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x22941b0*, lpNumberOfBytesRead=0x3be6a8*=0x495, lpOverlapped=0x0) returned 1 [0138.596] CloseHandle (hObject=0x444) returned 1 [0138.607] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\App.lnk", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\App.lnk", lpFilePart=0x0) returned 0x87 [0138.607] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0138.607] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\app.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0138.609] GetFileType (hFile=0x444) returned 0x1 [0138.609] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0138.609] GetFileType (hFile=0x444) returned 0x1 [0138.609] WriteFile (in: hFile=0x444, lpBuffer=0x230c920*, nNumberOfBytesToWrite=0x4a0, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x230c920*, lpNumberOfBytesWritten=0x3be5b8*=0x4a0, lpOverlapped=0x0) returned 1 [0138.610] CloseHandle (hObject=0x444) returned 1 [0138.610] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\App.lnk", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\App.lnk", lpFilePart=0x0) returned 0x87 [0138.610] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\App.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\App.lnk.xuy", lpFilePart=0x0) returned 0x8b [0138.610] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0138.611] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\app.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba831236, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xba831236, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x3e7750dc, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x4a0)) returned 1 [0138.611] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0138.611] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\app.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\App.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\app.lnk.xuy")) returned 1 [0138.612] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0138.612] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsAlarms_8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsAlarms_8wekyb3d8bbwe", lpFilePart=0x0) returned 0x71 [0138.612] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\", lpFilePart=0x0) returned 0x72 [0138.612] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7c70 [0138.612] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0138.612] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0138.612] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0138.613] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0138.613] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0138.613] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0138.613] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0138.613] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsAlarms_8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsAlarms_8wekyb3d8bbwe", lpFilePart=0x0) returned 0x71 [0138.613] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\", lpFilePart=0x0) returned 0x72 [0138.613] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d78b0 [0138.613] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0138.613] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0138.613] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0138.613] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0138.613] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0138.613] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0138.613] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\App.lnk", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\App.lnk", lpFilePart=0x0) returned 0x79 [0138.613] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0138.613] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windowsalarms_8wekyb3d8bbwe\\app.lnk"), fInfoLevelId=0x0, lpFileInformation=0x2310590 | out: lpFileInformation=0x2310590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6516ca6, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xd6516ca6, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0xd65fbc1e, ftLastWriteTime.dwHighDateTime=0x1d2d028, nFileSizeHigh=0x0, nFileSizeLow=0x4f8)) returned 1 [0138.614] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0138.614] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\App.lnk", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\App.lnk", lpFilePart=0x0) returned 0x79 [0138.614] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0138.614] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windowsalarms_8wekyb3d8bbwe\\app.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0138.614] GetFileType (hFile=0x444) returned 0x1 [0138.614] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0138.614] GetFileType (hFile=0x444) returned 0x1 [0138.614] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x4f8 [0138.614] ReadFile (in: hFile=0x444, lpBuffer=0x2310de0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x2310de0*, lpNumberOfBytesRead=0x3be6a8*=0x4f8, lpOverlapped=0x0) returned 1 [0138.652] CloseHandle (hObject=0x444) returned 1 [0138.699] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\App.lnk", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\App.lnk", lpFilePart=0x0) returned 0x79 [0138.699] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0138.699] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windowsalarms_8wekyb3d8bbwe\\app.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0138.700] GetFileType (hFile=0x444) returned 0x1 [0138.700] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0138.700] GetFileType (hFile=0x444) returned 0x1 [0138.700] WriteFile (in: hFile=0x444, lpBuffer=0x218ad58*, nNumberOfBytesToWrite=0x500, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x218ad58*, lpNumberOfBytesWritten=0x3be5b8*=0x500, lpOverlapped=0x0) returned 1 [0138.701] CloseHandle (hObject=0x444) returned 1 [0138.701] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\App.lnk", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\App.lnk", lpFilePart=0x0) returned 0x79 [0138.701] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\App.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\App.lnk.xuy", lpFilePart=0x0) returned 0x7d [0138.701] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0138.701] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windowsalarms_8wekyb3d8bbwe\\app.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6516ca6, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xd6516ca6, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x3e859e4a, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x500)) returned 1 [0138.701] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0138.701] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windowsalarms_8wekyb3d8bbwe\\app.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\App.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windowsalarms_8wekyb3d8bbwe\\app.lnk.xuy")) returned 1 [0138.703] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0138.703] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsCalculator_8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsCalculator_8wekyb3d8bbwe", lpFilePart=0x0) returned 0x75 [0138.703] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\", lpFilePart=0x0) returned 0x76 [0138.703] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d78b0 [0138.703] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0138.704] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0138.704] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0138.704] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0138.704] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0138.704] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0138.704] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0138.704] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsCalculator_8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsCalculator_8wekyb3d8bbwe", lpFilePart=0x0) returned 0x75 [0138.704] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\", lpFilePart=0x0) returned 0x76 [0138.704] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d78b0 [0138.704] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0138.704] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0138.704] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0138.705] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0138.705] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0138.705] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0138.705] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\App.lnk", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\App.lnk", lpFilePart=0x0) returned 0x7d [0138.705] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0138.705] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windowscalculator_8wekyb3d8bbwe\\app.lnk"), fInfoLevelId=0x0, lpFileInformation=0x218ea70 | out: lpFileInformation=0x218ea70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdfdcff, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0xdfdcff, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0xe9669e, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x574)) returned 1 [0138.705] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0138.705] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\App.lnk", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\App.lnk", lpFilePart=0x0) returned 0x7d [0138.705] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0138.705] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windowscalculator_8wekyb3d8bbwe\\app.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0138.705] GetFileType (hFile=0x444) returned 0x1 [0138.705] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0138.705] GetFileType (hFile=0x444) returned 0x1 [0138.705] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x574 [0138.705] ReadFile (in: hFile=0x444, lpBuffer=0x218f350, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x218f350*, lpNumberOfBytesRead=0x3be6a8*=0x574, lpOverlapped=0x0) returned 1 [0138.706] CloseHandle (hObject=0x444) returned 1 [0138.717] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\App.lnk", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\App.lnk", lpFilePart=0x0) returned 0x7d [0138.718] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0138.718] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windowscalculator_8wekyb3d8bbwe\\app.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0138.719] GetFileType (hFile=0x444) returned 0x1 [0138.719] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0138.719] GetFileType (hFile=0x444) returned 0x1 [0138.719] WriteFile (in: hFile=0x444, lpBuffer=0x2207f10*, nNumberOfBytesToWrite=0x580, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x2207f10*, lpNumberOfBytesWritten=0x3be5b8*=0x580, lpOverlapped=0x0) returned 1 [0138.720] CloseHandle (hObject=0x444) returned 1 [0138.720] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\App.lnk", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\App.lnk", lpFilePart=0x0) returned 0x7d [0138.720] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\App.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\App.lnk.xuy", lpFilePart=0x0) returned 0x81 [0138.720] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0138.720] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windowscalculator_8wekyb3d8bbwe\\app.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdfdcff, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0xdfdcff, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x3e87fd13, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x580)) returned 1 [0138.720] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0138.720] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windowscalculator_8wekyb3d8bbwe\\app.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\App.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windowscalculator_8wekyb3d8bbwe\\app.lnk.xuy")) returned 1 [0138.721] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0138.721] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsCamera_8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsCamera_8wekyb3d8bbwe", lpFilePart=0x0) returned 0x71 [0138.721] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\", lpFilePart=0x0) returned 0x72 [0138.721] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7fd0 [0138.722] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0138.722] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0138.722] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0138.723] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0138.723] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0138.723] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0138.723] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0138.723] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsCamera_8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsCamera_8wekyb3d8bbwe", lpFilePart=0x0) returned 0x71 [0138.723] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\", lpFilePart=0x0) returned 0x72 [0138.723] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7a90 [0138.723] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0138.723] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0138.723] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0138.723] FindClose (in: hFindFile=0x5d7a90 | out: hFindFile=0x5d7a90) returned 1 [0138.723] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0138.723] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0138.723] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\App.lnk", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\App.lnk", lpFilePart=0x0) returned 0x79 [0138.724] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0138.724] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windowscamera_8wekyb3d8bbwe\\app.lnk"), fInfoLevelId=0x0, lpFileInformation=0x220bb50 | out: lpFileInformation=0x220bb50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe313f05, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xfe313f05, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0xfe33a190, ftLastWriteTime.dwHighDateTime=0x1d2d028, nFileSizeHigh=0x0, nFileSizeLow=0x61c)) returned 1 [0138.724] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0138.724] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\App.lnk", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\App.lnk", lpFilePart=0x0) returned 0x79 [0138.724] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0138.724] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windowscamera_8wekyb3d8bbwe\\app.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0138.724] GetFileType (hFile=0x444) returned 0x1 [0138.724] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0138.724] GetFileType (hFile=0x444) returned 0x1 [0138.724] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x61c [0138.724] ReadFile (in: hFile=0x444, lpBuffer=0x220c4c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x220c4c8*, lpNumberOfBytesRead=0x3be6a8*=0x61c, lpOverlapped=0x0) returned 1 [0138.741] CloseHandle (hObject=0x444) returned 1 [0138.752] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\App.lnk", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\App.lnk", lpFilePart=0x0) returned 0x79 [0138.752] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0138.752] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windowscamera_8wekyb3d8bbwe\\app.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0138.754] GetFileType (hFile=0x444) returned 0x1 [0138.754] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0138.754] GetFileType (hFile=0x444) returned 0x1 [0138.754] WriteFile (in: hFile=0x444, lpBuffer=0x2285398*, nNumberOfBytesToWrite=0x620, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x2285398*, lpNumberOfBytesWritten=0x3be5b8*=0x620, lpOverlapped=0x0) returned 1 [0138.755] CloseHandle (hObject=0x444) returned 1 [0138.755] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\App.lnk", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\App.lnk", lpFilePart=0x0) returned 0x79 [0138.755] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\App.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\App.lnk.xuy", lpFilePart=0x0) returned 0x7d [0138.755] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0138.755] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windowscamera_8wekyb3d8bbwe\\app.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe313f05, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xfe313f05, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x3e8cc1ff, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x620)) returned 1 [0138.755] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0138.755] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windowscamera_8wekyb3d8bbwe\\app.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\App.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windowscamera_8wekyb3d8bbwe\\app.lnk.xuy")) returned 1 [0138.756] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0138.756] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe", lpFilePart=0x0) returned 0x7d [0138.756] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\", lpFilePart=0x0) returned 0x7e [0138.756] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7c70 [0138.759] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0138.760] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0138.760] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0138.760] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0138.760] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0138.761] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0138.761] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0138.761] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0138.761] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe", lpFilePart=0x0) returned 0x7d [0138.761] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\", lpFilePart=0x0) returned 0x7e [0138.761] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7670 [0138.762] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0138.762] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0138.762] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0138.762] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0138.762] FindClose (in: hFindFile=0x5d7670 | out: hFindFile=0x5d7670) returned 1 [0138.763] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0138.763] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0138.763] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowslive.calendar.lnk", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowslive.calendar.lnk", lpFilePart=0x0) returned 0xa0 [0138.763] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0138.763] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowslive.calendar.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowslive.calendar.lnk"), fInfoLevelId=0x0, lpFileInformation=0x2289be0 | out: lpFileInformation=0x2289be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e994c5f, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x7e997375, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x7e997375, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x781)) returned 1 [0138.764] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0138.764] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowslive.calendar.lnk", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowslive.calendar.lnk", lpFilePart=0x0) returned 0xa0 [0138.764] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0138.764] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowslive.calendar.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowslive.calendar.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0138.764] GetFileType (hFile=0x444) returned 0x1 [0138.764] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0138.764] GetFileType (hFile=0x444) returned 0x1 [0138.764] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x781 [0138.764] ReadFile (in: hFile=0x444, lpBuffer=0x228a7d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x228a7d0*, lpNumberOfBytesRead=0x3be6a8*=0x781, lpOverlapped=0x0) returned 1 [0138.778] CloseHandle (hObject=0x444) returned 1 [0138.789] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowslive.calendar.lnk", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowslive.calendar.lnk", lpFilePart=0x0) returned 0xa0 [0138.789] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0138.789] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowslive.calendar.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowslive.calendar.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0138.792] GetFileType (hFile=0x444) returned 0x1 [0138.792] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0138.792] GetFileType (hFile=0x444) returned 0x1 [0138.792] WriteFile (in: hFile=0x444, lpBuffer=0x2303e60*, nNumberOfBytesToWrite=0x790, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x2303e60*, lpNumberOfBytesWritten=0x3be5b8*=0x790, lpOverlapped=0x0) returned 1 [0138.793] CloseHandle (hObject=0x444) returned 1 [0138.793] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowslive.calendar.lnk", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowslive.calendar.lnk", lpFilePart=0x0) returned 0xa0 [0138.794] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowslive.calendar.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowslive.calendar.lnk.xuy", lpFilePart=0x0) returned 0xa4 [0138.794] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0138.794] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowslive.calendar.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowslive.calendar.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e994c5f, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x7e997375, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x3e93e9a1, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x790)) returned 1 [0138.794] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0138.794] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowslive.calendar.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowslive.calendar.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowslive.calendar.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowslive.calendar.lnk.xuy")) returned 1 [0138.795] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowslive.mail.lnk", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowslive.mail.lnk", lpFilePart=0x0) returned 0x9c [0138.795] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0138.795] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowslive.mail.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowslive.mail.lnk"), fInfoLevelId=0x0, lpFileInformation=0x23052f0 | out: lpFileInformation=0x23052f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e98b01b, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x7e98d72e, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x7e98fe3a, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x739)) returned 1 [0138.795] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0138.795] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowslive.mail.lnk", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowslive.mail.lnk", lpFilePart=0x0) returned 0x9c [0138.796] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0138.796] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowslive.mail.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowslive.mail.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0138.796] GetFileType (hFile=0x444) returned 0x1 [0138.796] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0138.796] GetFileType (hFile=0x444) returned 0x1 [0138.796] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x739 [0138.796] ReadFile (in: hFile=0x444, lpBuffer=0x2305e78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x2305e78*, lpNumberOfBytesRead=0x3be6a8*=0x739, lpOverlapped=0x0) returned 1 [0138.797] CloseHandle (hObject=0x444) returned 1 [0138.835] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowslive.mail.lnk", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowslive.mail.lnk", lpFilePart=0x0) returned 0x9c [0138.836] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0138.836] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowslive.mail.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowslive.mail.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0138.839] GetFileType (hFile=0x444) returned 0x1 [0138.839] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0138.839] GetFileType (hFile=0x444) returned 0x1 [0138.839] WriteFile (in: hFile=0x444, lpBuffer=0x2180d98*, nNumberOfBytesToWrite=0x740, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x2180d98*, lpNumberOfBytesWritten=0x3be5b8*=0x740, lpOverlapped=0x0) returned 1 [0138.840] CloseHandle (hObject=0x444) returned 1 [0138.840] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowslive.mail.lnk", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowslive.mail.lnk", lpFilePart=0x0) returned 0x9c [0138.840] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowslive.mail.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowslive.mail.lnk.xuy", lpFilePart=0x0) returned 0xa0 [0138.840] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0138.840] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowslive.mail.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowslive.mail.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e98b01b, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x7e98d72e, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x3e9b13bc, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x740)) returned 1 [0138.840] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0138.840] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowslive.mail.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowslive.mail.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowslive.mail.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowslive.mail.lnk.xuy")) returned 1 [0138.841] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0138.841] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsFeedback_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsFeedback_cw5n1h2txyewy", lpFilePart=0x0) returned 0x73 [0138.841] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\", lpFilePart=0x0) returned 0x74 [0138.841] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7df0 [0138.843] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0138.843] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0138.843] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0138.844] FindClose (in: hFindFile=0x5d7df0 | out: hFindFile=0x5d7df0) returned 1 [0138.844] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0138.844] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0138.844] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0138.844] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsFeedback_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsFeedback_cw5n1h2txyewy", lpFilePart=0x0) returned 0x73 [0138.844] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\", lpFilePart=0x0) returned 0x74 [0138.844] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d73d0 [0138.844] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0138.844] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0138.844] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0138.845] FindClose (in: hFindFile=0x5d73d0 | out: hFindFile=0x5d73d0) returned 1 [0138.845] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0138.845] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0138.845] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\App.lnk", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\App.lnk", lpFilePart=0x0) returned 0x7b [0138.845] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0138.845] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windowsfeedback_cw5n1h2txyewy\\app.lnk"), fInfoLevelId=0x0, lpFileInformation=0x2184b28 | out: lpFileInformation=0x2184b28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc83ac9e, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xbc860f1d, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xbc860f1d, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x584)) returned 1 [0138.845] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0138.845] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\App.lnk", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\App.lnk", lpFilePart=0x0) returned 0x7b [0138.845] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0138.845] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windowsfeedback_cw5n1h2txyewy\\app.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0138.845] GetFileType (hFile=0x444) returned 0x1 [0138.845] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0138.845] GetFileType (hFile=0x444) returned 0x1 [0138.845] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x584 [0138.845] ReadFile (in: hFile=0x444, lpBuffer=0x2185408, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x2185408*, lpNumberOfBytesRead=0x3be6a8*=0x584, lpOverlapped=0x0) returned 1 [0138.858] CloseHandle (hObject=0x444) returned 1 [0138.874] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\App.lnk", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\App.lnk", lpFilePart=0x0) returned 0x7b [0138.874] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0138.874] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windowsfeedback_cw5n1h2txyewy\\app.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0138.876] GetFileType (hFile=0x444) returned 0x1 [0138.876] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0138.876] GetFileType (hFile=0x444) returned 0x1 [0138.876] WriteFile (in: hFile=0x444, lpBuffer=0x21fe010*, nNumberOfBytesToWrite=0x590, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x21fe010*, lpNumberOfBytesWritten=0x3be5b8*=0x590, lpOverlapped=0x0) returned 1 [0138.878] CloseHandle (hObject=0x444) returned 1 [0138.878] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\App.lnk", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\App.lnk", lpFilePart=0x0) returned 0x7b [0138.878] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\App.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\App.lnk.xuy", lpFilePart=0x0) returned 0x7f [0138.878] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0138.878] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windowsfeedback_cw5n1h2txyewy\\app.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc83ac9e, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xbc860f1d, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x3e9fd906, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x590)) returned 1 [0138.878] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0138.878] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windowsfeedback_cw5n1h2txyewy\\app.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\App.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windowsfeedback_cw5n1h2txyewy\\app.lnk.xuy")) returned 1 [0138.879] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0138.879] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsMaps_8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsMaps_8wekyb3d8bbwe", lpFilePart=0x0) returned 0x6f [0138.880] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\", lpFilePart=0x0) returned 0x70 [0138.880] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7a30 [0138.881] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0138.881] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0138.881] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0138.881] FindClose (in: hFindFile=0x5d7a30 | out: hFindFile=0x5d7a30) returned 1 [0138.881] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0138.881] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0138.881] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0138.881] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsMaps_8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsMaps_8wekyb3d8bbwe", lpFilePart=0x0) returned 0x6f [0138.881] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\", lpFilePart=0x0) returned 0x70 [0138.881] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d79d0 [0138.882] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0138.882] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0138.882] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0138.882] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0138.882] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0138.882] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0138.882] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\App.lnk", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\App.lnk", lpFilePart=0x0) returned 0x77 [0138.882] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0138.882] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windowsmaps_8wekyb3d8bbwe\\app.lnk"), fInfoLevelId=0x0, lpFileInformation=0x2201bd8 | out: lpFileInformation=0x2201bd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfae53d4e, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xfae53d4e, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0xfaeec78e, ftLastWriteTime.dwHighDateTime=0x1d2d028, nFileSizeHigh=0x0, nFileSizeLow=0x554)) returned 1 [0138.883] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0138.883] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\App.lnk", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\App.lnk", lpFilePart=0x0) returned 0x77 [0138.883] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0138.883] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windowsmaps_8wekyb3d8bbwe\\app.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0138.883] GetFileType (hFile=0x444) returned 0x1 [0138.883] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0138.883] GetFileType (hFile=0x444) returned 0x1 [0138.883] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x554 [0138.883] ReadFile (in: hFile=0x444, lpBuffer=0x2202478, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x2202478*, lpNumberOfBytesRead=0x3be6a8*=0x554, lpOverlapped=0x0) returned 1 [0138.895] CloseHandle (hObject=0x444) returned 1 [0138.908] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\App.lnk", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\App.lnk", lpFilePart=0x0) returned 0x77 [0138.909] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0138.909] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windowsmaps_8wekyb3d8bbwe\\app.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0138.910] GetFileType (hFile=0x444) returned 0x1 [0138.910] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0138.910] GetFileType (hFile=0x444) returned 0x1 [0138.910] WriteFile (in: hFile=0x444, lpBuffer=0x227af88*, nNumberOfBytesToWrite=0x560, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x227af88*, lpNumberOfBytesWritten=0x3be5b8*=0x560, lpOverlapped=0x0) returned 1 [0138.912] CloseHandle (hObject=0x444) returned 1 [0138.912] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\App.lnk", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\App.lnk", lpFilePart=0x0) returned 0x77 [0138.912] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\App.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\App.lnk.xuy", lpFilePart=0x0) returned 0x7b [0138.912] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0138.912] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windowsmaps_8wekyb3d8bbwe\\app.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfae53d4e, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xfae53d4e, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x3ea49974, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x560)) returned 1 [0138.912] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0138.912] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windowsmaps_8wekyb3d8bbwe\\app.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\App.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windowsmaps_8wekyb3d8bbwe\\app.lnk.xuy")) returned 1 [0138.913] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0138.913] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsPhone_8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsPhone_8wekyb3d8bbwe", lpFilePart=0x0) returned 0x70 [0138.913] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\", lpFilePart=0x0) returned 0x71 [0138.913] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7c70 [0138.927] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0138.927] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0138.927] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0138.927] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0138.928] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0138.928] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0138.928] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0138.928] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsPhone_8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsPhone_8wekyb3d8bbwe", lpFilePart=0x0) returned 0x70 [0138.928] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\", lpFilePart=0x0) returned 0x71 [0138.928] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7cd0 [0138.929] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0138.929] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0138.929] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0138.929] FindClose (in: hFindFile=0x5d7cd0 | out: hFindFile=0x5d7cd0) returned 1 [0138.930] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0138.930] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0138.930] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\CompanionApp.App.lnk", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\CompanionApp.App.lnk", lpFilePart=0x0) returned 0x85 [0138.930] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0138.930] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\CompanionApp.App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windowsphone_8wekyb3d8bbwe\\companionapp.app.lnk"), fInfoLevelId=0x0, lpFileInformation=0x227ece0 | out: lpFileInformation=0x227ece0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf799cdb7, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xf799cdb7, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0xf7a357f1, ftLastWriteTime.dwHighDateTime=0x1d2d028, nFileSizeHigh=0x0, nFileSizeLow=0x4bf)) returned 1 [0138.930] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0138.930] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\CompanionApp.App.lnk", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\CompanionApp.App.lnk", lpFilePart=0x0) returned 0x85 [0138.931] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0138.931] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\CompanionApp.App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windowsphone_8wekyb3d8bbwe\\companionapp.app.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0138.931] GetFileType (hFile=0x444) returned 0x1 [0138.931] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0138.932] GetFileType (hFile=0x444) returned 0x1 [0138.932] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x4bf [0138.932] ReadFile (in: hFile=0x444, lpBuffer=0x227f568, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x227f568*, lpNumberOfBytesRead=0x3be6a8*=0x4bf, lpOverlapped=0x0) returned 1 [0138.938] CloseHandle (hObject=0x444) returned 1 [0138.948] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\CompanionApp.App.lnk", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\CompanionApp.App.lnk", lpFilePart=0x0) returned 0x85 [0138.949] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0138.949] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\CompanionApp.App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windowsphone_8wekyb3d8bbwe\\companionapp.app.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0138.950] GetFileType (hFile=0x444) returned 0x1 [0138.950] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0138.950] GetFileType (hFile=0x444) returned 0x1 [0138.950] WriteFile (in: hFile=0x444, lpBuffer=0x22f7d90*, nNumberOfBytesToWrite=0x4c0, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x22f7d90*, lpNumberOfBytesWritten=0x3be5b8*=0x4c0, lpOverlapped=0x0) returned 1 [0138.951] CloseHandle (hObject=0x444) returned 1 [0138.951] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\CompanionApp.App.lnk", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\CompanionApp.App.lnk", lpFilePart=0x0) returned 0x85 [0138.951] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\CompanionApp.App.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\CompanionApp.App.lnk.xuy", lpFilePart=0x0) returned 0x89 [0138.951] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0138.951] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\CompanionApp.App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windowsphone_8wekyb3d8bbwe\\companionapp.app.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf799cdb7, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xf799cdb7, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x3eabc172, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x4c0)) returned 1 [0138.951] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0138.951] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\CompanionApp.App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windowsphone_8wekyb3d8bbwe\\companionapp.app.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\CompanionApp.App.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windowsphone_8wekyb3d8bbwe\\companionapp.app.lnk.xuy")) returned 1 [0138.952] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0138.952] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe", lpFilePart=0x0) returned 0x78 [0138.952] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\", lpFilePart=0x0) returned 0x79 [0138.953] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7c70 [0138.953] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0138.953] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0138.953] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0138.953] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0138.953] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0138.953] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0138.953] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0138.953] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe", lpFilePart=0x0) returned 0x78 [0138.953] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\", lpFilePart=0x0) returned 0x79 [0138.953] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d79d0 [0138.954] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0138.954] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0138.954] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0138.954] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0138.954] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0138.954] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0138.954] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\App.lnk", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\App.lnk", lpFilePart=0x0) returned 0x80 [0138.954] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0138.954] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windowssoundrecorder_8wekyb3d8bbwe\\app.lnk"), fInfoLevelId=0x0, lpFileInformation=0x22fbbc0 | out: lpFileInformation=0x22fbbc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4a13ede, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xf4a13ede, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0xf4aac75c, ftLastWriteTime.dwHighDateTime=0x1d2d028, nFileSizeHigh=0x0, nFileSizeLow=0x5c0)) returned 1 [0138.954] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0138.954] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\App.lnk", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\App.lnk", lpFilePart=0x0) returned 0x80 [0138.954] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0138.955] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windowssoundrecorder_8wekyb3d8bbwe\\app.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0138.955] GetFileType (hFile=0x444) returned 0x1 [0138.955] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0138.955] GetFileType (hFile=0x444) returned 0x1 [0138.955] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x5c0 [0138.955] ReadFile (in: hFile=0x444, lpBuffer=0x22fc4f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x22fc4f8*, lpNumberOfBytesRead=0x3be6a8*=0x5c0, lpOverlapped=0x0) returned 1 [0138.961] CloseHandle (hObject=0x444) returned 1 [0139.013] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\App.lnk", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\App.lnk", lpFilePart=0x0) returned 0x80 [0139.013] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0139.013] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windowssoundrecorder_8wekyb3d8bbwe\\app.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0139.014] GetFileType (hFile=0x444) returned 0x1 [0139.014] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0139.014] GetFileType (hFile=0x444) returned 0x1 [0139.014] WriteFile (in: hFile=0x444, lpBuffer=0x2176df0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x2176df0*, lpNumberOfBytesWritten=0x3be5b8*=0x5d0, lpOverlapped=0x0) returned 1 [0139.015] CloseHandle (hObject=0x444) returned 1 [0139.015] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\App.lnk", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\App.lnk", lpFilePart=0x0) returned 0x80 [0139.015] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\App.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\App.lnk.xuy", lpFilePart=0x0) returned 0x84 [0139.015] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0139.015] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windowssoundrecorder_8wekyb3d8bbwe\\app.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4a13ede, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xf4a13ede, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x3eb54d65, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x5d0)) returned 1 [0139.015] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0139.016] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windowssoundrecorder_8wekyb3d8bbwe\\app.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\App.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windowssoundrecorder_8wekyb3d8bbwe\\app.lnk.xuy")) returned 1 [0139.016] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0139.017] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsStore_8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsStore_8wekyb3d8bbwe", lpFilePart=0x0) returned 0x70 [0139.017] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsStore_8wekyb3d8bbwe\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsStore_8wekyb3d8bbwe\\", lpFilePart=0x0) returned 0x71 [0139.017] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsStore_8wekyb3d8bbwe\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d78b0 [0139.017] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0139.017] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0139.017] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0139.017] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0139.017] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0139.017] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0139.018] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0139.018] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsStore_8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsStore_8wekyb3d8bbwe", lpFilePart=0x0) returned 0x70 [0139.018] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsStore_8wekyb3d8bbwe\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsStore_8wekyb3d8bbwe\\", lpFilePart=0x0) returned 0x71 [0139.018] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsStore_8wekyb3d8bbwe\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d75b0 [0139.018] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0139.018] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0139.018] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0139.018] FindClose (in: hFindFile=0x5d75b0 | out: hFindFile=0x5d75b0) returned 1 [0139.018] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0139.018] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0139.018] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsStore_8wekyb3d8bbwe\\App.lnk", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsStore_8wekyb3d8bbwe\\App.lnk", lpFilePart=0x0) returned 0x78 [0139.018] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0139.018] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsStore_8wekyb3d8bbwe\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windowsstore_8wekyb3d8bbwe\\app.lnk"), fInfoLevelId=0x0, lpFileInformation=0x217aa28 | out: lpFileInformation=0x217aa28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf25b7eab, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xf25b7eab, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0xf25b7eab, ftLastWriteTime.dwHighDateTime=0x1d2d028, nFileSizeHigh=0x0, nFileSizeLow=0x551)) returned 1 [0139.019] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0139.019] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsStore_8wekyb3d8bbwe\\App.lnk", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsStore_8wekyb3d8bbwe\\App.lnk", lpFilePart=0x0) returned 0x78 [0139.019] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0139.019] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsStore_8wekyb3d8bbwe\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windowsstore_8wekyb3d8bbwe\\app.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0139.019] GetFileType (hFile=0x444) returned 0x1 [0139.019] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0139.019] GetFileType (hFile=0x444) returned 0x1 [0139.019] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x551 [0139.019] ReadFile (in: hFile=0x444, lpBuffer=0x217b2d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x217b2d8*, lpNumberOfBytesRead=0x3be6a8*=0x551, lpOverlapped=0x0) returned 1 [0139.080] CloseHandle (hObject=0x444) returned 1 [0139.093] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsStore_8wekyb3d8bbwe\\App.lnk", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsStore_8wekyb3d8bbwe\\App.lnk", lpFilePart=0x0) returned 0x78 [0139.093] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0139.093] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsStore_8wekyb3d8bbwe\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windowsstore_8wekyb3d8bbwe\\app.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0139.097] GetFileType (hFile=0x444) returned 0x1 [0139.097] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0139.097] GetFileType (hFile=0x444) returned 0x1 [0139.098] WriteFile (in: hFile=0x444, lpBuffer=0x21f3df0*, nNumberOfBytesToWrite=0x560, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x21f3df0*, lpNumberOfBytesWritten=0x3be5b8*=0x560, lpOverlapped=0x0) returned 1 [0139.098] CloseHandle (hObject=0x444) returned 1 [0139.098] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsStore_8wekyb3d8bbwe\\App.lnk", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsStore_8wekyb3d8bbwe\\App.lnk", lpFilePart=0x0) returned 0x78 [0139.098] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsStore_8wekyb3d8bbwe\\App.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsStore_8wekyb3d8bbwe\\App.lnk.xuy", lpFilePart=0x0) returned 0x7c [0139.099] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0139.099] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsStore_8wekyb3d8bbwe\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windowsstore_8wekyb3d8bbwe\\app.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf25b7eab, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xf25b7eab, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x3ec1356d, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x560)) returned 1 [0139.099] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0139.099] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsStore_8wekyb3d8bbwe\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windowsstore_8wekyb3d8bbwe\\app.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsStore_8wekyb3d8bbwe\\App.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windowsstore_8wekyb3d8bbwe\\app.lnk.xuy")) returned 1 [0139.100] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0139.100] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.XboxApp_8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.XboxApp_8wekyb3d8bbwe", lpFilePart=0x0) returned 0x6b [0139.100] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.XboxApp_8wekyb3d8bbwe\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.XboxApp_8wekyb3d8bbwe\\", lpFilePart=0x0) returned 0x6c [0139.100] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.XboxApp_8wekyb3d8bbwe\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7550 [0139.118] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0139.119] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0139.119] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0139.119] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0139.119] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0139.120] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0139.120] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0139.120] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.XboxApp_8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.XboxApp_8wekyb3d8bbwe", lpFilePart=0x0) returned 0x6b [0139.120] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.XboxApp_8wekyb3d8bbwe\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.XboxApp_8wekyb3d8bbwe\\", lpFilePart=0x0) returned 0x6c [0139.120] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.XboxApp_8wekyb3d8bbwe\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d78b0 [0139.120] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0139.121] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0139.121] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0139.121] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0139.121] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0139.122] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0139.122] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.XboxApp_8wekyb3d8bbwe\\Microsoft.XboxApp.lnk", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.XboxApp_8wekyb3d8bbwe\\Microsoft.XboxApp.lnk", lpFilePart=0x0) returned 0x81 [0139.122] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0139.122] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.XboxApp_8wekyb3d8bbwe\\Microsoft.XboxApp.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.xboxapp_8wekyb3d8bbwe\\microsoft.xboxapp.lnk"), fInfoLevelId=0x0, lpFileInformation=0x21f7a50 | out: lpFileInformation=0x21f7a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf10be700, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xf10be700, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0xf10be700, ftLastWriteTime.dwHighDateTime=0x1d2d028, nFileSizeHigh=0x0, nFileSizeLow=0x508)) returned 1 [0139.123] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0139.123] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.XboxApp_8wekyb3d8bbwe\\Microsoft.XboxApp.lnk", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.XboxApp_8wekyb3d8bbwe\\Microsoft.XboxApp.lnk", lpFilePart=0x0) returned 0x81 [0139.123] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0139.123] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.XboxApp_8wekyb3d8bbwe\\Microsoft.XboxApp.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.xboxapp_8wekyb3d8bbwe\\microsoft.xboxapp.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0139.123] GetFileType (hFile=0x444) returned 0x1 [0139.123] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0139.124] GetFileType (hFile=0x444) returned 0x1 [0139.124] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x508 [0139.124] ReadFile (in: hFile=0x444, lpBuffer=0x21f8310, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x21f8310*, lpNumberOfBytesRead=0x3be6a8*=0x508, lpOverlapped=0x0) returned 1 [0139.125] CloseHandle (hObject=0x444) returned 1 [0139.136] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.XboxApp_8wekyb3d8bbwe\\Microsoft.XboxApp.lnk", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.XboxApp_8wekyb3d8bbwe\\Microsoft.XboxApp.lnk", lpFilePart=0x0) returned 0x81 [0139.136] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0139.136] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.XboxApp_8wekyb3d8bbwe\\Microsoft.XboxApp.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.xboxapp_8wekyb3d8bbwe\\microsoft.xboxapp.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0139.138] GetFileType (hFile=0x444) returned 0x1 [0139.138] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0139.138] GetFileType (hFile=0x444) returned 0x1 [0139.138] WriteFile (in: hFile=0x444, lpBuffer=0x2270cc0*, nNumberOfBytesToWrite=0x510, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x2270cc0*, lpNumberOfBytesWritten=0x3be5b8*=0x510, lpOverlapped=0x0) returned 1 [0139.139] CloseHandle (hObject=0x444) returned 1 [0139.139] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.XboxApp_8wekyb3d8bbwe\\Microsoft.XboxApp.lnk", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.XboxApp_8wekyb3d8bbwe\\Microsoft.XboxApp.lnk", lpFilePart=0x0) returned 0x81 [0139.139] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.XboxApp_8wekyb3d8bbwe\\Microsoft.XboxApp.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.XboxApp_8wekyb3d8bbwe\\Microsoft.XboxApp.lnk.xuy", lpFilePart=0x0) returned 0x85 [0139.139] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0139.139] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.XboxApp_8wekyb3d8bbwe\\Microsoft.XboxApp.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.xboxapp_8wekyb3d8bbwe\\microsoft.xboxapp.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf10be700, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xf10be700, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x3ec85caf, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x510)) returned 1 [0139.139] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0139.140] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.XboxApp_8wekyb3d8bbwe\\Microsoft.XboxApp.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.xboxapp_8wekyb3d8bbwe\\microsoft.xboxapp.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.XboxApp_8wekyb3d8bbwe\\Microsoft.XboxApp.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.xboxapp_8wekyb3d8bbwe\\microsoft.xboxapp.lnk.xuy")) returned 1 [0139.141] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0139.141] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy", lpFilePart=0x0) returned 0x76 [0139.141] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\", lpFilePart=0x0) returned 0x77 [0139.141] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7cd0 [0139.143] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0139.143] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0139.143] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0139.143] FindClose (in: hFindFile=0x5d7cd0 | out: hFindFile=0x5d7cd0) returned 1 [0139.144] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0139.144] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0139.144] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0139.144] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy", lpFilePart=0x0) returned 0x76 [0139.144] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\", lpFilePart=0x0) returned 0x77 [0139.144] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7610 [0139.145] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0139.145] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0139.145] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0139.145] FindClose (in: hFindFile=0x5d7610 | out: hFindFile=0x5d7610) returned 1 [0139.146] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0139.146] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0139.146] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Microsoft.XboxGameCallableUI.lnk", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Microsoft.XboxGameCallableUI.lnk", lpFilePart=0x0) returned 0x97 [0139.146] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0139.146] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Microsoft.XboxGameCallableUI.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\microsoft.xboxgamecallableui.lnk"), fInfoLevelId=0x0, lpFileInformation=0x2274c88 | out: lpFileInformation=0x2274c88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbeb15fc, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xbbeb15fc, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xbbeb15fc, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x479)) returned 1 [0139.147] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0139.147] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Microsoft.XboxGameCallableUI.lnk", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Microsoft.XboxGameCallableUI.lnk", lpFilePart=0x0) returned 0x97 [0139.147] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0139.147] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Microsoft.XboxGameCallableUI.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\microsoft.xboxgamecallableui.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0139.147] GetFileType (hFile=0x444) returned 0x1 [0139.147] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0139.147] GetFileType (hFile=0x444) returned 0x1 [0139.147] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x479 [0139.148] ReadFile (in: hFile=0x444, lpBuffer=0x2275540, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x2275540*, lpNumberOfBytesRead=0x3be6a8*=0x479, lpOverlapped=0x0) returned 1 [0139.149] CloseHandle (hObject=0x444) returned 1 [0139.159] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Microsoft.XboxGameCallableUI.lnk", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Microsoft.XboxGameCallableUI.lnk", lpFilePart=0x0) returned 0x97 [0139.159] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0139.159] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Microsoft.XboxGameCallableUI.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\microsoft.xboxgamecallableui.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0139.161] GetFileType (hFile=0x444) returned 0x1 [0139.161] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0139.161] GetFileType (hFile=0x444) returned 0x1 [0139.161] WriteFile (in: hFile=0x444, lpBuffer=0x22edc60*, nNumberOfBytesToWrite=0x480, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x22edc60*, lpNumberOfBytesWritten=0x3be5b8*=0x480, lpOverlapped=0x0) returned 1 [0139.163] CloseHandle (hObject=0x444) returned 1 [0139.163] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Microsoft.XboxGameCallableUI.lnk", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Microsoft.XboxGameCallableUI.lnk", lpFilePart=0x0) returned 0x97 [0139.163] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Microsoft.XboxGameCallableUI.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Microsoft.XboxGameCallableUI.lnk.xuy", lpFilePart=0x0) returned 0x9b [0139.163] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0139.163] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Microsoft.XboxGameCallableUI.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\microsoft.xboxgamecallableui.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbeb15fc, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xbbeb15fc, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x3ecabec6, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x480)) returned 1 [0139.163] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0139.163] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Microsoft.XboxGameCallableUI.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\microsoft.xboxgamecallableui.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Microsoft.XboxGameCallableUI.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\microsoft.xboxgamecallableui.lnk.xuy")) returned 1 [0139.164] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0139.164] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy", lpFilePart=0x0) returned 0x78 [0139.164] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\", lpFilePart=0x0) returned 0x79 [0139.164] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7eb0 [0139.185] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0139.186] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0139.186] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0139.186] FindClose (in: hFindFile=0x5d7eb0 | out: hFindFile=0x5d7eb0) returned 1 [0139.187] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0139.187] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0139.187] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0139.187] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy", lpFilePart=0x0) returned 0x78 [0139.187] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\", lpFilePart=0x0) returned 0x79 [0139.187] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d78b0 [0139.188] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0139.188] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0139.188] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0139.188] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0139.189] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0139.189] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0139.189] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Microsoft.XboxIdentityProvider.lnk", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Microsoft.XboxIdentityProvider.lnk", lpFilePart=0x0) returned 0x9b [0139.189] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0139.189] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Microsoft.XboxIdentityProvider.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\microsoft.xboxidentityprovider.lnk"), fInfoLevelId=0x0, lpFileInformation=0x22f1d00 | out: lpFileInformation=0x22f1d00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd12ba2e, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xbd12ba2e, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xbd12ba2e, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x4b5)) returned 1 [0139.190] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0139.190] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Microsoft.XboxIdentityProvider.lnk", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Microsoft.XboxIdentityProvider.lnk", lpFilePart=0x0) returned 0x9b [0139.190] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0139.190] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Microsoft.XboxIdentityProvider.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\microsoft.xboxidentityprovider.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0139.190] GetFileType (hFile=0x444) returned 0x1 [0139.190] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0139.190] GetFileType (hFile=0x444) returned 0x1 [0139.190] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x4b5 [0139.190] ReadFile (in: hFile=0x444, lpBuffer=0x22f2600, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x22f2600*, lpNumberOfBytesRead=0x3be6a8*=0x4b5, lpOverlapped=0x0) returned 1 [0139.195] CloseHandle (hObject=0x444) returned 1 [0139.234] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Microsoft.XboxIdentityProvider.lnk", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Microsoft.XboxIdentityProvider.lnk", lpFilePart=0x0) returned 0x9b [0139.234] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0139.234] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Microsoft.XboxIdentityProvider.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\microsoft.xboxidentityprovider.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0139.236] GetFileType (hFile=0x444) returned 0x1 [0139.236] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0139.236] GetFileType (hFile=0x444) returned 0x1 [0139.236] WriteFile (in: hFile=0x444, lpBuffer=0x216c658*, nNumberOfBytesToWrite=0x4c0, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x216c658*, lpNumberOfBytesWritten=0x3be5b8*=0x4c0, lpOverlapped=0x0) returned 1 [0139.237] CloseHandle (hObject=0x444) returned 1 [0139.237] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Microsoft.XboxIdentityProvider.lnk", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Microsoft.XboxIdentityProvider.lnk", lpFilePart=0x0) returned 0x9b [0139.237] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Microsoft.XboxIdentityProvider.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Microsoft.XboxIdentityProvider.lnk.xuy", lpFilePart=0x0) returned 0x9f [0139.237] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0139.237] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Microsoft.XboxIdentityProvider.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\microsoft.xboxidentityprovider.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd12ba2e, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xbd12ba2e, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x3ed6ab0c, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x4c0)) returned 1 [0139.237] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0139.237] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Microsoft.XboxIdentityProvider.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\microsoft.xboxidentityprovider.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Microsoft.XboxIdentityProvider.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\microsoft.xboxidentityprovider.lnk.xuy")) returned 1 [0139.238] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0139.238] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.ZuneMusic_8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.ZuneMusic_8wekyb3d8bbwe", lpFilePart=0x0) returned 0x6d [0139.238] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\", lpFilePart=0x0) returned 0x6e [0139.238] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7eb0 [0139.252] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0139.252] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0139.253] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0139.253] FindClose (in: hFindFile=0x5d7eb0 | out: hFindFile=0x5d7eb0) returned 1 [0139.253] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0139.253] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0139.253] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0139.253] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.ZuneMusic_8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.ZuneMusic_8wekyb3d8bbwe", lpFilePart=0x0) returned 0x6d [0139.253] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\", lpFilePart=0x0) returned 0x6e [0139.254] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7550 [0139.254] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0139.254] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0139.255] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0139.255] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0139.255] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0139.255] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0139.255] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Microsoft.ZuneMusic.lnk", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Microsoft.ZuneMusic.lnk", lpFilePart=0x0) returned 0x85 [0139.255] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0139.256] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Microsoft.ZuneMusic.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.zunemusic_8wekyb3d8bbwe\\microsoft.zunemusic.lnk"), fInfoLevelId=0x0, lpFileInformation=0x21703d8 | out: lpFileInformation=0x21703d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb77f2ef, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xeb77f2ef, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0xeb817c3d, ftLastWriteTime.dwHighDateTime=0x1d2d028, nFileSizeHigh=0x0, nFileSizeLow=0x5d4)) returned 1 [0139.256] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0139.256] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Microsoft.ZuneMusic.lnk", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Microsoft.ZuneMusic.lnk", lpFilePart=0x0) returned 0x85 [0139.256] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0139.256] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Microsoft.ZuneMusic.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.zunemusic_8wekyb3d8bbwe\\microsoft.zunemusic.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0139.256] GetFileType (hFile=0x444) returned 0x1 [0139.256] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0139.257] GetFileType (hFile=0x444) returned 0x1 [0139.257] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x5d4 [0139.257] ReadFile (in: hFile=0x444, lpBuffer=0x2170d78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x2170d78*, lpNumberOfBytesRead=0x3be6a8*=0x5d4, lpOverlapped=0x0) returned 1 [0139.262] CloseHandle (hObject=0x444) returned 1 [0139.272] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Microsoft.ZuneMusic.lnk", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Microsoft.ZuneMusic.lnk", lpFilePart=0x0) returned 0x85 [0139.272] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0139.272] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Microsoft.ZuneMusic.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.zunemusic_8wekyb3d8bbwe\\microsoft.zunemusic.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0139.273] GetFileType (hFile=0x444) returned 0x1 [0139.274] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0139.274] GetFileType (hFile=0x444) returned 0x1 [0139.274] WriteFile (in: hFile=0x444, lpBuffer=0x21e9b48*, nNumberOfBytesToWrite=0x5e0, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x21e9b48*, lpNumberOfBytesWritten=0x3be5b8*=0x5e0, lpOverlapped=0x0) returned 1 [0139.274] CloseHandle (hObject=0x444) returned 1 [0139.275] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Microsoft.ZuneMusic.lnk", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Microsoft.ZuneMusic.lnk", lpFilePart=0x0) returned 0x85 [0139.275] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Microsoft.ZuneMusic.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Microsoft.ZuneMusic.lnk.xuy", lpFilePart=0x0) returned 0x89 [0139.275] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0139.275] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Microsoft.ZuneMusic.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.zunemusic_8wekyb3d8bbwe\\microsoft.zunemusic.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb77f2ef, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xeb77f2ef, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x3eddd26a, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x5e0)) returned 1 [0139.275] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0139.275] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Microsoft.ZuneMusic.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.zunemusic_8wekyb3d8bbwe\\microsoft.zunemusic.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Microsoft.ZuneMusic.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.zunemusic_8wekyb3d8bbwe\\microsoft.zunemusic.lnk.xuy")) returned 1 [0139.276] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0139.276] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.ZuneVideo_8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.ZuneVideo_8wekyb3d8bbwe", lpFilePart=0x0) returned 0x6d [0139.276] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\", lpFilePart=0x0) returned 0x6e [0139.276] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7d90 [0139.278] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0139.278] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0139.278] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0139.278] FindClose (in: hFindFile=0x5d7d90 | out: hFindFile=0x5d7d90) returned 1 [0139.279] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0139.279] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0139.279] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0139.279] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.ZuneVideo_8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.ZuneVideo_8wekyb3d8bbwe", lpFilePart=0x0) returned 0x6d [0139.279] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\", lpFilePart=0x0) returned 0x6e [0139.279] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7670 [0139.280] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0139.280] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0139.280] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0139.280] FindClose (in: hFindFile=0x5d7670 | out: hFindFile=0x5d7670) returned 1 [0139.281] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0139.281] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0139.281] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Microsoft.ZuneVideo.lnk", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Microsoft.ZuneVideo.lnk", lpFilePart=0x0) returned 0x85 [0139.281] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0139.281] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Microsoft.ZuneVideo.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.zunevideo_8wekyb3d8bbwe\\microsoft.zunevideo.lnk"), fInfoLevelId=0x0, lpFileInformation=0x21ed850 | out: lpFileInformation=0x21ed850*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7edf540, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xe7edf540, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0xe7f77eb9, ftLastWriteTime.dwHighDateTime=0x1d2d028, nFileSizeHigh=0x0, nFileSizeLow=0x528)) returned 1 [0139.281] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0139.281] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Microsoft.ZuneVideo.lnk", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Microsoft.ZuneVideo.lnk", lpFilePart=0x0) returned 0x85 [0139.281] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0139.282] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Microsoft.ZuneVideo.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.zunevideo_8wekyb3d8bbwe\\microsoft.zunevideo.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0139.282] GetFileType (hFile=0x444) returned 0x1 [0139.282] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0139.282] GetFileType (hFile=0x444) returned 0x1 [0139.282] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x528 [0139.282] ReadFile (in: hFile=0x444, lpBuffer=0x21ee140, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x21ee140*, lpNumberOfBytesRead=0x3be6a8*=0x528, lpOverlapped=0x0) returned 1 [0139.300] CloseHandle (hObject=0x444) returned 1 [0139.310] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Microsoft.ZuneVideo.lnk", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Microsoft.ZuneVideo.lnk", lpFilePart=0x0) returned 0x85 [0139.310] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0139.310] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Microsoft.ZuneVideo.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.zunevideo_8wekyb3d8bbwe\\microsoft.zunevideo.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0139.312] GetFileType (hFile=0x444) returned 0x1 [0139.312] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0139.312] GetFileType (hFile=0x444) returned 0x1 [0139.312] WriteFile (in: hFile=0x444, lpBuffer=0x2266b98*, nNumberOfBytesToWrite=0x530, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x2266b98*, lpNumberOfBytesWritten=0x3be5b8*=0x530, lpOverlapped=0x0) returned 1 [0139.313] CloseHandle (hObject=0x444) returned 1 [0139.313] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Microsoft.ZuneVideo.lnk", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Microsoft.ZuneVideo.lnk", lpFilePart=0x0) returned 0x85 [0139.313] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Microsoft.ZuneVideo.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Microsoft.ZuneVideo.lnk.xuy", lpFilePart=0x0) returned 0x89 [0139.313] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0139.313] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Microsoft.ZuneVideo.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.zunevideo_8wekyb3d8bbwe\\microsoft.zunevideo.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7edf540, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xe7edf540, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x3ee29a31, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x530)) returned 1 [0139.313] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0139.313] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Microsoft.ZuneVideo.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.zunevideo_8wekyb3d8bbwe\\microsoft.zunevideo.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Microsoft.ZuneVideo.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.zunevideo_8wekyb3d8bbwe\\microsoft.zunevideo.lnk.xuy")) returned 1 [0139.314] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0139.314] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Windows.ContactSupport_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Windows.ContactSupport_cw5n1h2txyewy", lpFilePart=0x0) returned 0x70 [0139.314] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Windows.ContactSupport_cw5n1h2txyewy\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Windows.ContactSupport_cw5n1h2txyewy\\", lpFilePart=0x0) returned 0x71 [0139.314] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Windows.ContactSupport_cw5n1h2txyewy\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d78b0 [0139.315] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0139.315] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0139.315] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0139.315] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0139.315] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0139.315] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0139.315] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0139.316] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Windows.ContactSupport_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Windows.ContactSupport_cw5n1h2txyewy", lpFilePart=0x0) returned 0x70 [0139.316] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Windows.ContactSupport_cw5n1h2txyewy\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Windows.ContactSupport_cw5n1h2txyewy\\", lpFilePart=0x0) returned 0x71 [0139.316] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Windows.ContactSupport_cw5n1h2txyewy\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7610 [0139.316] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0139.316] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0139.316] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0139.316] FindClose (in: hFindFile=0x5d7610 | out: hFindFile=0x5d7610) returned 1 [0139.316] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0139.316] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0139.316] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Windows.ContactSupport_cw5n1h2txyewy\\App.lnk", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Windows.ContactSupport_cw5n1h2txyewy\\App.lnk", lpFilePart=0x0) returned 0x78 [0139.316] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0139.316] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Windows.ContactSupport_cw5n1h2txyewy\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\windows.contactsupport_cw5n1h2txyewy\\app.lnk"), fInfoLevelId=0x0, lpFileInformation=0x226a7e8 | out: lpFileInformation=0x226a7e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbdb015aa, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xbdb015aa, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xbdb015aa, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x4e0)) returned 1 [0139.317] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0139.317] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Windows.ContactSupport_cw5n1h2txyewy\\App.lnk", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Windows.ContactSupport_cw5n1h2txyewy\\App.lnk", lpFilePart=0x0) returned 0x78 [0139.317] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0139.317] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Windows.ContactSupport_cw5n1h2txyewy\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\windows.contactsupport_cw5n1h2txyewy\\app.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0139.317] GetFileType (hFile=0x444) returned 0x1 [0139.317] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0139.317] GetFileType (hFile=0x444) returned 0x1 [0139.317] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x4e0 [0139.317] ReadFile (in: hFile=0x444, lpBuffer=0x226b020, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x226b020*, lpNumberOfBytesRead=0x3be6a8*=0x4e0, lpOverlapped=0x0) returned 1 [0139.322] CloseHandle (hObject=0x444) returned 1 [0139.332] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Windows.ContactSupport_cw5n1h2txyewy\\App.lnk", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Windows.ContactSupport_cw5n1h2txyewy\\App.lnk", lpFilePart=0x0) returned 0x78 [0139.332] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0139.332] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Windows.ContactSupport_cw5n1h2txyewy\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\windows.contactsupport_cw5n1h2txyewy\\app.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0139.334] GetFileType (hFile=0x444) returned 0x1 [0139.334] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0139.334] GetFileType (hFile=0x444) returned 0x1 [0139.334] WriteFile (in: hFile=0x444, lpBuffer=0x22e3908*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x22e3908*, lpNumberOfBytesWritten=0x3be5b8*=0x4f0, lpOverlapped=0x0) returned 1 [0139.335] CloseHandle (hObject=0x444) returned 1 [0139.335] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Windows.ContactSupport_cw5n1h2txyewy\\App.lnk", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Windows.ContactSupport_cw5n1h2txyewy\\App.lnk", lpFilePart=0x0) returned 0x78 [0139.335] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Windows.ContactSupport_cw5n1h2txyewy\\App.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Windows.ContactSupport_cw5n1h2txyewy\\App.lnk.xuy", lpFilePart=0x0) returned 0x7c [0139.335] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0139.335] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Windows.ContactSupport_cw5n1h2txyewy\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\windows.contactsupport_cw5n1h2txyewy\\app.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbdb015aa, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xbdb015aa, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x3ee4f9e0, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x4f0)) returned 1 [0139.335] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0139.335] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Windows.ContactSupport_cw5n1h2txyewy\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\windows.contactsupport_cw5n1h2txyewy\\app.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Windows.ContactSupport_cw5n1h2txyewy\\App.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\windows.contactsupport_cw5n1h2txyewy\\app.lnk.xuy")) returned 1 [0139.338] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0139.338] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Windows.PurchaseDialog_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Windows.PurchaseDialog_cw5n1h2txyewy", lpFilePart=0x0) returned 0x70 [0139.338] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Windows.PurchaseDialog_cw5n1h2txyewy\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Windows.PurchaseDialog_cw5n1h2txyewy\\", lpFilePart=0x0) returned 0x71 [0139.338] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Windows.PurchaseDialog_cw5n1h2txyewy\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7eb0 [0139.340] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0139.341] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0139.341] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0139.341] FindClose (in: hFindFile=0x5d7eb0 | out: hFindFile=0x5d7eb0) returned 1 [0139.342] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0139.342] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0139.342] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0139.342] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Windows.PurchaseDialog_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Windows.PurchaseDialog_cw5n1h2txyewy", lpFilePart=0x0) returned 0x70 [0139.342] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Windows.PurchaseDialog_cw5n1h2txyewy\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Windows.PurchaseDialog_cw5n1h2txyewy\\", lpFilePart=0x0) returned 0x71 [0139.342] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Windows.PurchaseDialog_cw5n1h2txyewy\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d78b0 [0139.343] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0139.343] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0139.343] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0139.343] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0139.344] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0139.344] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0139.344] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Windows.PurchaseDialog_cw5n1h2txyewy\\Microsoft.Windows.PurchaseDialog.lnk", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Windows.PurchaseDialog_cw5n1h2txyewy\\Microsoft.Windows.PurchaseDialog.lnk", lpFilePart=0x0) returned 0x95 [0139.344] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0139.344] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Windows.PurchaseDialog_cw5n1h2txyewy\\Microsoft.Windows.PurchaseDialog.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\windows.purchasedialog_cw5n1h2txyewy\\microsoft.windows.purchasedialog.lnk"), fInfoLevelId=0x0, lpFileInformation=0x22e7758 | out: lpFileInformation=0x22e7758*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbee86a57, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xbee86a57, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xbee86a57, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x435)) returned 1 [0139.345] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0139.345] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Windows.PurchaseDialog_cw5n1h2txyewy\\Microsoft.Windows.PurchaseDialog.lnk", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Windows.PurchaseDialog_cw5n1h2txyewy\\Microsoft.Windows.PurchaseDialog.lnk", lpFilePart=0x0) returned 0x95 [0139.345] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0139.345] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Windows.PurchaseDialog_cw5n1h2txyewy\\Microsoft.Windows.PurchaseDialog.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\windows.purchasedialog_cw5n1h2txyewy\\microsoft.windows.purchasedialog.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0139.345] GetFileType (hFile=0x444) returned 0x1 [0139.345] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0139.345] GetFileType (hFile=0x444) returned 0x1 [0139.345] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x435 [0139.345] ReadFile (in: hFile=0x444, lpBuffer=0x22e7fd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x22e7fd8*, lpNumberOfBytesRead=0x3be6a8*=0x435, lpOverlapped=0x0) returned 1 [0139.347] CloseHandle (hObject=0x444) returned 1 [0139.394] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Windows.PurchaseDialog_cw5n1h2txyewy\\Microsoft.Windows.PurchaseDialog.lnk", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Windows.PurchaseDialog_cw5n1h2txyewy\\Microsoft.Windows.PurchaseDialog.lnk", lpFilePart=0x0) returned 0x95 [0139.394] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0139.394] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Windows.PurchaseDialog_cw5n1h2txyewy\\Microsoft.Windows.PurchaseDialog.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\windows.purchasedialog_cw5n1h2txyewy\\microsoft.windows.purchasedialog.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0139.396] GetFileType (hFile=0x444) returned 0x1 [0139.396] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0139.396] GetFileType (hFile=0x444) returned 0x1 [0139.397] WriteFile (in: hFile=0x444, lpBuffer=0x2161b40*, nNumberOfBytesToWrite=0x440, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x2161b40*, lpNumberOfBytesWritten=0x3be5b8*=0x440, lpOverlapped=0x0) returned 1 [0139.398] CloseHandle (hObject=0x444) returned 1 [0139.398] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Windows.PurchaseDialog_cw5n1h2txyewy\\Microsoft.Windows.PurchaseDialog.lnk", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Windows.PurchaseDialog_cw5n1h2txyewy\\Microsoft.Windows.PurchaseDialog.lnk", lpFilePart=0x0) returned 0x95 [0139.398] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Windows.PurchaseDialog_cw5n1h2txyewy\\Microsoft.Windows.PurchaseDialog.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Windows.PurchaseDialog_cw5n1h2txyewy\\Microsoft.Windows.PurchaseDialog.lnk.xuy", lpFilePart=0x0) returned 0x99 [0139.398] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0139.398] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Windows.PurchaseDialog_cw5n1h2txyewy\\Microsoft.Windows.PurchaseDialog.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\windows.purchasedialog_cw5n1h2txyewy\\microsoft.windows.purchasedialog.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbee86a57, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xbee86a57, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x3ef094ff, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x440)) returned 1 [0139.398] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0139.398] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Windows.PurchaseDialog_cw5n1h2txyewy\\Microsoft.Windows.PurchaseDialog.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\windows.purchasedialog_cw5n1h2txyewy\\microsoft.windows.purchasedialog.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Windows.PurchaseDialog_cw5n1h2txyewy\\Microsoft.Windows.PurchaseDialog.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\windows.purchasedialog_cw5n1h2txyewy\\microsoft.windows.purchasedialog.lnk.xuy")) returned 1 [0139.400] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0139.400] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Burn", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Burn", lpFilePart=0x0) returned 0x3a [0139.400] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Burn\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Burn\\", lpFilePart=0x0) returned 0x3b [0139.401] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Burn\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7a30 [0139.401] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0139.401] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0139.401] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0139.401] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0139.401] FindClose (in: hFindFile=0x5d7a30 | out: hFindFile=0x5d7a30) returned 1 [0139.401] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0139.401] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0139.401] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0139.401] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Burn", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Burn", lpFilePart=0x0) returned 0x3a [0139.401] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Burn\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Burn\\", lpFilePart=0x0) returned 0x3b [0139.401] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Burn\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7e50 [0139.402] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0139.402] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0139.402] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0139.402] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0139.402] FindClose (in: hFindFile=0x5d7e50 | out: hFindFile=0x5d7e50) returned 1 [0139.402] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0139.402] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0139.402] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0139.402] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn", lpFilePart=0x0) returned 0x3f [0139.402] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn\\", lpFilePart=0x0) returned 0x40 [0139.402] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7c70 [0139.403] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0139.403] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0139.404] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0139.404] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0139.404] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0139.404] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0139.404] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0139.404] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn", lpFilePart=0x0) returned 0x3f [0139.404] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn\\", lpFilePart=0x0) returned 0x40 [0139.404] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7cd0 [0139.404] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0139.404] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0139.404] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0139.405] FindClose (in: hFindFile=0x5d7cd0 | out: hFindFile=0x5d7cd0) returned 1 [0139.405] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0139.405] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0139.405] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn\\desktop.ini", lpFilePart=0x0) returned 0x4b [0139.405] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0139.405] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\burn\\burn\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x2166bd8 | out: lpFileInformation=0x2166bd8*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x572120bd, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x572120bd, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x572120bd, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0xae)) returned 1 [0139.405] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0139.405] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn\\desktop.ini", lpFilePart=0x0) returned 0x4b [0139.405] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0139.405] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\burn\\burn\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0139.405] GetFileType (hFile=0x444) returned 0x1 [0139.405] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0139.405] GetFileType (hFile=0x444) returned 0x1 [0139.405] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0xae [0139.405] ReadFile (in: hFile=0x444, lpBuffer=0x2166f30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x2166f30*, lpNumberOfBytesRead=0x3be6a8*=0xae, lpOverlapped=0x0) returned 1 [0139.406] CloseHandle (hObject=0x444) returned 1 [0139.418] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn\\desktop.ini", lpFilePart=0x0) returned 0x4b [0139.418] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0139.418] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\burn\\burn\\desktop.ini"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0139.420] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb070) returned 1 [0139.420] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3bbcf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn\\desktop.ini", lpFilePart=0x0) returned 0x4b [0139.420] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0139.420] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\burn\\burn\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x3bc270 | out: lpFileInformation=0x3bc270*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x572120bd, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x572120bd, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x572120bd, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0xae)) returned 1 [0139.420] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc150) returned 1 [0139.420] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3bbd10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn\\desktop.ini", lpFilePart=0x0) returned 0x4b [0139.420] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0139.420] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\burn\\burn\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x21de9c8 | out: lpFileInformation=0x21de9c8*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x572120bd, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x572120bd, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x572120bd, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0xae)) returned 1 [0139.420] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc150) returned 1 [0139.420] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3bbb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn\\desktop.ini", lpFilePart=0x0) returned 0x4b [0139.420] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc050) returned 1 [0139.421] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\burn\\burn\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0139.421] GetFileType (hFile=0x444) returned 0x1 [0139.421] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbfc0) returned 1 [0139.421] GetFileType (hFile=0x444) returned 0x1 [0139.421] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc1e8 | out: lpFileSizeHigh=0x3bc1e8*=0x0) returned 0xae [0139.421] ReadFile (in: hFile=0x444, lpBuffer=0x21ded20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bc118, lpOverlapped=0x0 | out: lpBuffer=0x21ded20*, lpNumberOfBytesRead=0x3bc118*=0xae, lpOverlapped=0x0) returned 1 [0139.421] CloseHandle (hObject=0x444) returned 1 [0139.456] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3bbb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn\\desktop.ini", lpFilePart=0x0) returned 0x4b [0139.456] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc050) returned 1 [0139.456] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\burn\\burn\\desktop.ini"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0139.458] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8ae0) returned 1 [0139.459] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0139.459] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn1", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn1", lpFilePart=0x0) returned 0x40 [0139.459] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn1\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn1\\", lpFilePart=0x0) returned 0x41 [0139.459] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn1\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7670 [0139.459] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0139.459] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0139.459] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0139.459] FindClose (in: hFindFile=0x5d7670 | out: hFindFile=0x5d7670) returned 1 [0139.459] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0139.459] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0139.459] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0139.459] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn1", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn1", lpFilePart=0x0) returned 0x40 [0139.459] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn1\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn1\\", lpFilePart=0x0) returned 0x41 [0139.459] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn1\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7fd0 [0139.460] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0139.460] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0139.460] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0139.460] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0139.460] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0139.460] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0139.460] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn1\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn1\\desktop.ini", lpFilePart=0x0) returned 0x4c [0139.460] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0139.460] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn1\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\burn\\burn1\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x2258490 | out: lpFileInformation=0x2258490*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x21fb1af2, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x21fb1af2, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x21fb1af2, ftLastWriteTime.dwHighDateTime=0x1d2d028, nFileSizeHigh=0x0, nFileSizeLow=0xae)) returned 1 [0139.460] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0139.460] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn1\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn1\\desktop.ini", lpFilePart=0x0) returned 0x4c [0139.460] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0139.460] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn1\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\burn\\burn1\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0139.461] GetFileType (hFile=0x444) returned 0x1 [0139.461] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0139.461] GetFileType (hFile=0x444) returned 0x1 [0139.461] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0xae [0139.461] ReadFile (in: hFile=0x444, lpBuffer=0x22587f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x22587f8*, lpNumberOfBytesRead=0x3be6a8*=0xae, lpOverlapped=0x0) returned 1 [0139.462] CloseHandle (hObject=0x444) returned 1 [0139.498] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn1\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn1\\desktop.ini", lpFilePart=0x0) returned 0x4c [0139.498] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0139.498] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn1\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\burn\\burn1\\desktop.ini"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0139.499] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb070) returned 1 [0139.500] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn1\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3bbcf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn1\\desktop.ini", lpFilePart=0x0) returned 0x4c [0139.500] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0139.500] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn1\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\burn\\burn1\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x3bc270 | out: lpFileInformation=0x3bc270*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x21fb1af2, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x21fb1af2, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x21fb1af2, ftLastWriteTime.dwHighDateTime=0x1d2d028, nFileSizeHigh=0x0, nFileSizeLow=0xae)) returned 1 [0139.500] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc150) returned 1 [0139.500] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn1\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3bbd10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn1\\desktop.ini", lpFilePart=0x0) returned 0x4c [0139.500] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0139.500] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn1\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\burn\\burn1\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x22d02a8 | out: lpFileInformation=0x22d02a8*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x21fb1af2, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x21fb1af2, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x21fb1af2, ftLastWriteTime.dwHighDateTime=0x1d2d028, nFileSizeHigh=0x0, nFileSizeLow=0xae)) returned 1 [0139.500] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc150) returned 1 [0139.500] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn1\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3bbb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn1\\desktop.ini", lpFilePart=0x0) returned 0x4c [0139.500] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc050) returned 1 [0139.500] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn1\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\burn\\burn1\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0139.500] GetFileType (hFile=0x444) returned 0x1 [0139.500] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbfc0) returned 1 [0139.500] GetFileType (hFile=0x444) returned 0x1 [0139.500] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc1e8 | out: lpFileSizeHigh=0x3bc1e8*=0x0) returned 0xae [0139.500] ReadFile (in: hFile=0x444, lpBuffer=0x22d0610, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bc118, lpOverlapped=0x0 | out: lpBuffer=0x22d0610*, lpNumberOfBytesRead=0x3bc118*=0xae, lpOverlapped=0x0) returned 1 [0139.500] CloseHandle (hObject=0x444) returned 1 [0139.541] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn1\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3bbb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn1\\desktop.ini", lpFilePart=0x0) returned 0x4c [0139.541] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc050) returned 1 [0139.541] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn1\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\burn\\burn1\\desktop.ini"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0139.544] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8ae0) returned 1 [0139.545] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0139.545] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches", lpFilePart=0x0) returned 0x3c [0139.545] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\", lpFilePart=0x0) returned 0x3d [0139.545] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7a90 [0139.545] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0139.545] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0139.545] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0139.546] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0139.546] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0139.546] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0139.546] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0139.546] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0139.546] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0139.546] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0139.546] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0139.547] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0139.547] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0139.547] FindClose (in: hFindFile=0x5d7a90 | out: hFindFile=0x5d7a90) returned 1 [0139.547] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0139.547] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0139.547] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0139.547] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches", lpFilePart=0x0) returned 0x3c [0139.547] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\", lpFilePart=0x0) returned 0x3d [0139.547] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7c70 [0139.548] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0139.548] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0139.548] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0139.548] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0139.548] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0139.549] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0139.549] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0139.549] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0139.549] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0139.550] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0139.550] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0139.550] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0139.550] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0139.550] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0139.550] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0139.550] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0139.550] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\cversions.1.db", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\cversions.1.db", lpFilePart=0x0) returned 0x4b [0139.550] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0139.550] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\cversions.1.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\caches\\cversions.1.db"), fInfoLevelId=0x0, lpFileInformation=0x214f580 | out: lpFileInformation=0x214f580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xacde373f, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xacde373f, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xacde373f, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x4000)) returned 1 [0139.551] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0139.551] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\cversions.1.db", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\cversions.1.db", lpFilePart=0x0) returned 0x4b [0139.551] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0139.551] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\cversions.1.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\caches\\cversions.1.db"), fInfoLevelId=0x0, lpFileInformation=0x214f6d0 | out: lpFileInformation=0x214f6d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xacde373f, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xacde373f, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xacde373f, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x4000)) returned 1 [0139.551] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0139.551] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\cversions.1.db", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\cversions.1.db", lpFilePart=0x0) returned 0x4b [0139.551] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0139.551] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\cversions.1.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\caches\\cversions.1.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0139.552] GetFileType (hFile=0x444) returned 0x1 [0139.552] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0139.552] GetFileType (hFile=0x444) returned 0x1 [0139.552] ReadFile (in: hFile=0x444, lpBuffer=0x2151aa0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x2151aa0*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0139.590] CloseHandle (hObject=0x444) returned 1 [0139.590] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\cversions.1.db", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\cversions.1.db", lpFilePart=0x0) returned 0x4b [0139.590] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0139.590] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\cversions.1.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\caches\\cversions.1.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0139.591] GetFileType (hFile=0x444) returned 0x1 [0139.591] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0139.591] GetFileType (hFile=0x444) returned 0x1 [0139.591] WriteFile (in: hFile=0x444, lpBuffer=0x214f800*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x214f800*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0139.591] CloseHandle (hObject=0x444) returned 1 [0139.591] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\cversions.1.db", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\cversions.1.db", lpFilePart=0x0) returned 0x4b [0139.591] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\cversions.1.db.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\cversions.1.db.xuy", lpFilePart=0x0) returned 0x4f [0139.591] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0139.591] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\cversions.1.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\caches\\cversions.1.db"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xacde373f, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xacde373f, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x3f0bc977, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x4000)) returned 1 [0139.591] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0139.591] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\cversions.1.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\caches\\cversions.1.db"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\cversions.1.db.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\caches\\cversions.1.db.xuy")) returned 1 [0139.594] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\cversions.3.db", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\cversions.3.db", lpFilePart=0x0) returned 0x4b [0139.594] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0139.594] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\cversions.3.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\caches\\cversions.3.db"), fInfoLevelId=0x0, lpFileInformation=0x21cde50 | out: lpFileInformation=0x21cde50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x377d61d0, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x377d61d0, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x377d61d0, ftLastWriteTime.dwHighDateTime=0x1d2d028, nFileSizeHigh=0x0, nFileSizeLow=0x4000)) returned 1 [0139.594] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0139.594] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\cversions.3.db", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\cversions.3.db", lpFilePart=0x0) returned 0x4b [0139.594] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0139.594] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\cversions.3.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\caches\\cversions.3.db"), fInfoLevelId=0x0, lpFileInformation=0x21cdfa0 | out: lpFileInformation=0x21cdfa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x377d61d0, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x377d61d0, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x377d61d0, ftLastWriteTime.dwHighDateTime=0x1d2d028, nFileSizeHigh=0x0, nFileSizeLow=0x4000)) returned 1 [0139.595] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0139.595] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\cversions.3.db", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\cversions.3.db", lpFilePart=0x0) returned 0x4b [0139.595] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0139.595] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\cversions.3.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\caches\\cversions.3.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0139.595] GetFileType (hFile=0x444) returned 0x1 [0139.595] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0139.595] GetFileType (hFile=0x444) returned 0x1 [0139.595] ReadFile (in: hFile=0x444, lpBuffer=0x21d0370, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x21d0370*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0139.621] CloseHandle (hObject=0x444) returned 1 [0139.621] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\cversions.3.db", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\cversions.3.db", lpFilePart=0x0) returned 0x4b [0139.621] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0139.621] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\cversions.3.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\caches\\cversions.3.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0139.621] GetFileType (hFile=0x444) returned 0x1 [0139.621] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0139.621] GetFileType (hFile=0x444) returned 0x1 [0139.621] WriteFile (in: hFile=0x444, lpBuffer=0x21ce0d0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x21ce0d0*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0139.621] CloseHandle (hObject=0x444) returned 1 [0139.622] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\cversions.3.db", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\cversions.3.db", lpFilePart=0x0) returned 0x4b [0139.622] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\cversions.3.db.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\cversions.3.db.xuy", lpFilePart=0x0) returned 0x4f [0139.622] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0139.622] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\cversions.3.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\caches\\cversions.3.db"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x377d61d0, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x377d61d0, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x3f108d63, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x4000)) returned 1 [0139.622] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0139.622] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\cversions.3.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\caches\\cversions.3.db"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\cversions.3.db.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\caches\\cversions.3.db.xuy")) returned 1 [0139.623] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{2546D910-B905-4D30-88C9-B63C603DA134}.3.ver0x0000000000000001.db", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{2546D910-B905-4D30-88C9-B63C603DA134}.3.ver0x0000000000000001.db", lpFilePart=0x0) returned 0x7e [0139.623] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0139.623] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{2546D910-B905-4D30-88C9-B63C603DA134}.3.ver0x0000000000000001.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\caches\\{2546d910-b905-4d30-88c9-b63c603da134}.3.ver0x0000000000000001.db"), fInfoLevelId=0x0, lpFileInformation=0x224c720 | out: lpFileInformation=0x224c720*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d3d7331, ftCreationTime.dwHighDateTime=0x1d301c7, ftLastAccessTime.dwLowDateTime=0xb917748c, ftLastAccessTime.dwHighDateTime=0x1d336e4, ftLastWriteTime.dwLowDateTime=0xb917748c, ftLastWriteTime.dwHighDateTime=0x1d336e4, nFileSizeHigh=0x0, nFileSizeLow=0x61088)) returned 1 [0139.623] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0139.623] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{2546D910-B905-4D30-88C9-B63C603DA134}.3.ver0x0000000000000001.db", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{2546D910-B905-4D30-88C9-B63C603DA134}.3.ver0x0000000000000001.db", lpFilePart=0x0) returned 0x7e [0139.623] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0139.624] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{2546D910-B905-4D30-88C9-B63C603DA134}.3.ver0x0000000000000001.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\caches\\{2546d910-b905-4d30-88c9-b63c603da134}.3.ver0x0000000000000001.db"), fInfoLevelId=0x0, lpFileInformation=0x224c940 | out: lpFileInformation=0x224c940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d3d7331, ftCreationTime.dwHighDateTime=0x1d301c7, ftLastAccessTime.dwLowDateTime=0xb917748c, ftLastAccessTime.dwHighDateTime=0x1d336e4, ftLastWriteTime.dwLowDateTime=0xb917748c, ftLastWriteTime.dwHighDateTime=0x1d336e4, nFileSizeHigh=0x0, nFileSizeLow=0x61088)) returned 1 [0139.624] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0139.624] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{2546D910-B905-4D30-88C9-B63C603DA134}.3.ver0x0000000000000001.db", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{2546D910-B905-4D30-88C9-B63C603DA134}.3.ver0x0000000000000001.db", lpFilePart=0x0) returned 0x7e [0139.624] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0139.624] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{2546D910-B905-4D30-88C9-B63C603DA134}.3.ver0x0000000000000001.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\caches\\{2546d910-b905-4d30-88c9-b63c603da134}.3.ver0x0000000000000001.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0139.624] GetFileType (hFile=0x444) returned 0x1 [0139.625] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0139.625] GetFileType (hFile=0x444) returned 0x1 [0139.625] ReadFile (in: hFile=0x444, lpBuffer=0x224eeb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x224eeb0*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0139.649] CloseHandle (hObject=0x444) returned 1 [0139.649] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{2546D910-B905-4D30-88C9-B63C603DA134}.3.ver0x0000000000000001.db", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{2546D910-B905-4D30-88C9-B63C603DA134}.3.ver0x0000000000000001.db", lpFilePart=0x0) returned 0x7e [0139.649] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0139.649] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{2546D910-B905-4D30-88C9-B63C603DA134}.3.ver0x0000000000000001.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\caches\\{2546d910-b905-4d30-88c9-b63c603da134}.3.ver0x0000000000000001.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0139.649] GetFileType (hFile=0x444) returned 0x1 [0139.649] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0139.649] GetFileType (hFile=0x444) returned 0x1 [0139.649] WriteFile (in: hFile=0x444, lpBuffer=0x224cb40*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x224cb40*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0139.650] CloseHandle (hObject=0x444) returned 1 [0139.650] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{2546D910-B905-4D30-88C9-B63C603DA134}.3.ver0x0000000000000001.db", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{2546D910-B905-4D30-88C9-B63C603DA134}.3.ver0x0000000000000001.db", lpFilePart=0x0) returned 0x7e [0139.650] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{2546D910-B905-4D30-88C9-B63C603DA134}.3.ver0x0000000000000001.db.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{2546D910-B905-4D30-88C9-B63C603DA134}.3.ver0x0000000000000001.db.xuy", lpFilePart=0x0) returned 0x82 [0139.650] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0139.650] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{2546D910-B905-4D30-88C9-B63C603DA134}.3.ver0x0000000000000001.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\caches\\{2546d910-b905-4d30-88c9-b63c603da134}.3.ver0x0000000000000001.db"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d3d7331, ftCreationTime.dwHighDateTime=0x1d301c7, ftLastAccessTime.dwLowDateTime=0xb917748c, ftLastAccessTime.dwHighDateTime=0x1d336e4, ftLastWriteTime.dwLowDateTime=0x3f155661, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x61088)) returned 1 [0139.650] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0139.650] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{2546D910-B905-4D30-88C9-B63C603DA134}.3.ver0x0000000000000001.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\caches\\{2546d910-b905-4d30-88c9-b63c603da134}.3.ver0x0000000000000001.db"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{2546D910-B905-4D30-88C9-B63C603DA134}.3.ver0x0000000000000001.db.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\caches\\{2546d910-b905-4d30-88c9-b63c603da134}.3.ver0x0000000000000001.db.xuy")) returned 1 [0139.651] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.1.ver0x0000000000000034.db", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.1.ver0x0000000000000034.db", lpFilePart=0x0) returned 0x7e [0139.651] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0139.651] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.1.ver0x0000000000000034.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\caches\\{3da71d5a-20cc-432f-a115-dfe92379e91f}.1.ver0x0000000000000034.db"), fInfoLevelId=0x0, lpFileInformation=0x22cb468 | out: lpFileInformation=0x22cb468*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdad24007, ftCreationTime.dwHighDateTime=0x1d46685, ftLastAccessTime.dwLowDateTime=0xdad24007, ftLastAccessTime.dwHighDateTime=0x1d46685, ftLastWriteTime.dwLowDateTime=0xdad24007, ftLastWriteTime.dwHighDateTime=0x1d46685, nFileSizeHigh=0x0, nFileSizeLow=0x1d338)) returned 1 [0139.651] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0139.651] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.1.ver0x0000000000000034.db", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.1.ver0x0000000000000034.db", lpFilePart=0x0) returned 0x7e [0139.651] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0139.651] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.1.ver0x0000000000000034.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\caches\\{3da71d5a-20cc-432f-a115-dfe92379e91f}.1.ver0x0000000000000034.db"), fInfoLevelId=0x0, lpFileInformation=0x22cb688 | out: lpFileInformation=0x22cb688*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdad24007, ftCreationTime.dwHighDateTime=0x1d46685, ftLastAccessTime.dwLowDateTime=0xdad24007, ftLastAccessTime.dwHighDateTime=0x1d46685, ftLastWriteTime.dwLowDateTime=0xdad24007, ftLastWriteTime.dwHighDateTime=0x1d46685, nFileSizeHigh=0x0, nFileSizeLow=0x1d338)) returned 1 [0139.651] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0139.652] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.1.ver0x0000000000000034.db", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.1.ver0x0000000000000034.db", lpFilePart=0x0) returned 0x7e [0139.652] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0139.652] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.1.ver0x0000000000000034.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\caches\\{3da71d5a-20cc-432f-a115-dfe92379e91f}.1.ver0x0000000000000034.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0139.652] GetFileType (hFile=0x444) returned 0x1 [0139.652] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0139.652] GetFileType (hFile=0x444) returned 0x1 [0139.652] ReadFile (in: hFile=0x444, lpBuffer=0x22cdbf8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x22cdbf8*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0139.695] CloseHandle (hObject=0x444) returned 1 [0139.696] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.1.ver0x0000000000000034.db", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.1.ver0x0000000000000034.db", lpFilePart=0x0) returned 0x7e [0139.696] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0139.696] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.1.ver0x0000000000000034.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\caches\\{3da71d5a-20cc-432f-a115-dfe92379e91f}.1.ver0x0000000000000034.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0139.696] GetFileType (hFile=0x444) returned 0x1 [0139.696] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0139.696] GetFileType (hFile=0x444) returned 0x1 [0139.696] WriteFile (in: hFile=0x444, lpBuffer=0x2141828*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x2141828*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0139.696] CloseHandle (hObject=0x444) returned 1 [0139.696] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.1.ver0x0000000000000034.db", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.1.ver0x0000000000000034.db", lpFilePart=0x0) returned 0x7e [0139.697] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.1.ver0x0000000000000034.db.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.1.ver0x0000000000000034.db.xuy", lpFilePart=0x0) returned 0x82 [0139.697] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0139.697] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.1.ver0x0000000000000034.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\caches\\{3da71d5a-20cc-432f-a115-dfe92379e91f}.1.ver0x0000000000000034.db"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdad24007, ftCreationTime.dwHighDateTime=0x1d46685, ftLastAccessTime.dwLowDateTime=0xdad24007, ftLastAccessTime.dwHighDateTime=0x1d46685, ftLastWriteTime.dwLowDateTime=0x3f1c7a9d, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x1d338)) returned 1 [0139.697] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0139.697] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.1.ver0x0000000000000034.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\caches\\{3da71d5a-20cc-432f-a115-dfe92379e91f}.1.ver0x0000000000000034.db"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.1.ver0x0000000000000034.db.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\caches\\{3da71d5a-20cc-432f-a115-dfe92379e91f}.1.ver0x0000000000000034.db.xuy")) returned 1 [0139.698] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.1.ver0x0000000000000035.db", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.1.ver0x0000000000000035.db", lpFilePart=0x0) returned 0x7e [0139.698] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0139.698] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.1.ver0x0000000000000035.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\caches\\{3da71d5a-20cc-432f-a115-dfe92379e91f}.1.ver0x0000000000000035.db"), fInfoLevelId=0x0, lpFileInformation=0x214e740 | out: lpFileInformation=0x214e740*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0a6a56c, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf0a6a56c, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0xf0a6a56c, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x1bfb0)) returned 1 [0139.698] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0139.698] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.1.ver0x0000000000000035.db", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.1.ver0x0000000000000035.db", lpFilePart=0x0) returned 0x7e [0139.698] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0139.698] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.1.ver0x0000000000000035.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\caches\\{3da71d5a-20cc-432f-a115-dfe92379e91f}.1.ver0x0000000000000035.db"), fInfoLevelId=0x0, lpFileInformation=0x214e960 | out: lpFileInformation=0x214e960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0a6a56c, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf0a6a56c, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0xf0a6a56c, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x1bfb0)) returned 1 [0139.698] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0139.698] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.1.ver0x0000000000000035.db", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.1.ver0x0000000000000035.db", lpFilePart=0x0) returned 0x7e [0139.698] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0139.698] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.1.ver0x0000000000000035.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\caches\\{3da71d5a-20cc-432f-a115-dfe92379e91f}.1.ver0x0000000000000035.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0139.699] GetFileType (hFile=0x444) returned 0x1 [0139.699] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0139.699] GetFileType (hFile=0x444) returned 0x1 [0139.699] ReadFile (in: hFile=0x444, lpBuffer=0x2150ed0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x2150ed0*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0139.715] CloseHandle (hObject=0x444) returned 1 [0139.715] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.1.ver0x0000000000000035.db", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.1.ver0x0000000000000035.db", lpFilePart=0x0) returned 0x7e [0139.715] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0139.715] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.1.ver0x0000000000000035.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\caches\\{3da71d5a-20cc-432f-a115-dfe92379e91f}.1.ver0x0000000000000035.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0139.716] GetFileType (hFile=0x444) returned 0x1 [0139.716] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0139.716] GetFileType (hFile=0x444) returned 0x1 [0139.716] WriteFile (in: hFile=0x444, lpBuffer=0x214eb60*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x214eb60*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0139.716] CloseHandle (hObject=0x444) returned 1 [0139.716] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.1.ver0x0000000000000035.db", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.1.ver0x0000000000000035.db", lpFilePart=0x0) returned 0x7e [0139.716] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.1.ver0x0000000000000035.db.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.1.ver0x0000000000000035.db.xuy", lpFilePart=0x0) returned 0x82 [0139.716] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0139.716] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.1.ver0x0000000000000035.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\caches\\{3da71d5a-20cc-432f-a115-dfe92379e91f}.1.ver0x0000000000000035.db"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0a6a56c, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf0a6a56c, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0x3f1edd37, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x1bfb0)) returned 1 [0139.716] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0139.716] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.1.ver0x0000000000000035.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\caches\\{3da71d5a-20cc-432f-a115-dfe92379e91f}.1.ver0x0000000000000035.db"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.1.ver0x0000000000000035.db.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\caches\\{3da71d5a-20cc-432f-a115-dfe92379e91f}.1.ver0x0000000000000035.db.xuy")) returned 1 [0139.718] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.1.ver0x0000000000000036.db", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.1.ver0x0000000000000036.db", lpFilePart=0x0) returned 0x7e [0139.718] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0139.718] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.1.ver0x0000000000000036.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\caches\\{3da71d5a-20cc-432f-a115-dfe92379e91f}.1.ver0x0000000000000036.db"), fInfoLevelId=0x0, lpFileInformation=0x21cd488 | out: lpFileInformation=0x21cd488*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf9fa6263, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf9fa6263, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0xf9fa6263, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x1bc48)) returned 1 [0139.718] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0139.718] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.1.ver0x0000000000000036.db", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.1.ver0x0000000000000036.db", lpFilePart=0x0) returned 0x7e [0139.718] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0139.718] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.1.ver0x0000000000000036.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\caches\\{3da71d5a-20cc-432f-a115-dfe92379e91f}.1.ver0x0000000000000036.db"), fInfoLevelId=0x0, lpFileInformation=0x21cd6a8 | out: lpFileInformation=0x21cd6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf9fa6263, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf9fa6263, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0xf9fa6263, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x1bc48)) returned 1 [0139.718] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0139.718] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.1.ver0x0000000000000036.db", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.1.ver0x0000000000000036.db", lpFilePart=0x0) returned 0x7e [0139.718] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0139.718] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.1.ver0x0000000000000036.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\caches\\{3da71d5a-20cc-432f-a115-dfe92379e91f}.1.ver0x0000000000000036.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0139.719] GetFileType (hFile=0x444) returned 0x1 [0139.719] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0139.719] GetFileType (hFile=0x444) returned 0x1 [0139.719] ReadFile (in: hFile=0x444, lpBuffer=0x21cfc18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x21cfc18*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0139.730] CloseHandle (hObject=0x444) returned 1 [0139.730] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.1.ver0x0000000000000036.db", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.1.ver0x0000000000000036.db", lpFilePart=0x0) returned 0x7e [0139.730] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0139.730] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.1.ver0x0000000000000036.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\caches\\{3da71d5a-20cc-432f-a115-dfe92379e91f}.1.ver0x0000000000000036.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0139.730] GetFileType (hFile=0x444) returned 0x1 [0139.730] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0139.730] GetFileType (hFile=0x444) returned 0x1 [0139.730] WriteFile (in: hFile=0x444, lpBuffer=0x21cd8a8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x21cd8a8*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0139.730] CloseHandle (hObject=0x444) returned 1 [0139.730] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.1.ver0x0000000000000036.db", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.1.ver0x0000000000000036.db", lpFilePart=0x0) returned 0x7e [0139.730] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.1.ver0x0000000000000036.db.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.1.ver0x0000000000000036.db.xuy", lpFilePart=0x0) returned 0x82 [0139.731] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0139.731] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.1.ver0x0000000000000036.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\caches\\{3da71d5a-20cc-432f-a115-dfe92379e91f}.1.ver0x0000000000000036.db"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf9fa6263, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf9fa6263, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0x3f213f25, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x1bc48)) returned 1 [0139.731] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0139.731] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.1.ver0x0000000000000036.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\caches\\{3da71d5a-20cc-432f-a115-dfe92379e91f}.1.ver0x0000000000000036.db"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.1.ver0x0000000000000036.db.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\caches\\{3da71d5a-20cc-432f-a115-dfe92379e91f}.1.ver0x0000000000000036.db.xuy")) returned 1 [0139.732] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.1.ver0x0000000000000037.db", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.1.ver0x0000000000000037.db", lpFilePart=0x0) returned 0x7e [0139.732] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0139.732] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.1.ver0x0000000000000037.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\caches\\{3da71d5a-20cc-432f-a115-dfe92379e91f}.1.ver0x0000000000000037.db"), fInfoLevelId=0x0, lpFileInformation=0x224c1d0 | out: lpFileInformation=0x224c1d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x101b7058, ftCreationTime.dwHighDateTime=0x1d47903, ftLastAccessTime.dwLowDateTime=0x101b7058, ftLastAccessTime.dwHighDateTime=0x1d47903, ftLastWriteTime.dwLowDateTime=0x101b7058, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x1b380)) returned 1 [0139.732] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0139.732] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.1.ver0x0000000000000037.db", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.1.ver0x0000000000000037.db", lpFilePart=0x0) returned 0x7e [0139.733] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0139.733] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.1.ver0x0000000000000037.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\caches\\{3da71d5a-20cc-432f-a115-dfe92379e91f}.1.ver0x0000000000000037.db"), fInfoLevelId=0x0, lpFileInformation=0x224c3f0 | out: lpFileInformation=0x224c3f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x101b7058, ftCreationTime.dwHighDateTime=0x1d47903, ftLastAccessTime.dwLowDateTime=0x101b7058, ftLastAccessTime.dwHighDateTime=0x1d47903, ftLastWriteTime.dwLowDateTime=0x101b7058, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x1b380)) returned 1 [0139.733] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0139.733] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.1.ver0x0000000000000037.db", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.1.ver0x0000000000000037.db", lpFilePart=0x0) returned 0x7e [0139.733] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0139.733] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.1.ver0x0000000000000037.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\caches\\{3da71d5a-20cc-432f-a115-dfe92379e91f}.1.ver0x0000000000000037.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0139.733] GetFileType (hFile=0x444) returned 0x1 [0139.733] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0139.734] GetFileType (hFile=0x444) returned 0x1 [0139.734] ReadFile (in: hFile=0x444, lpBuffer=0x224e960, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x224e960*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0139.744] CloseHandle (hObject=0x444) returned 1 [0139.744] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.1.ver0x0000000000000037.db", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.1.ver0x0000000000000037.db", lpFilePart=0x0) returned 0x7e [0139.744] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0139.744] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.1.ver0x0000000000000037.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\caches\\{3da71d5a-20cc-432f-a115-dfe92379e91f}.1.ver0x0000000000000037.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0139.744] GetFileType (hFile=0x444) returned 0x1 [0139.745] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0139.745] GetFileType (hFile=0x444) returned 0x1 [0139.745] WriteFile (in: hFile=0x444, lpBuffer=0x224c5f0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x224c5f0*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0139.745] CloseHandle (hObject=0x444) returned 1 [0139.745] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.1.ver0x0000000000000037.db", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.1.ver0x0000000000000037.db", lpFilePart=0x0) returned 0x7e [0139.745] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.1.ver0x0000000000000037.db.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.1.ver0x0000000000000037.db.xuy", lpFilePart=0x0) returned 0x82 [0139.745] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0139.745] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.1.ver0x0000000000000037.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\caches\\{3da71d5a-20cc-432f-a115-dfe92379e91f}.1.ver0x0000000000000037.db"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x101b7058, ftCreationTime.dwHighDateTime=0x1d47903, ftLastAccessTime.dwLowDateTime=0x101b7058, ftLastAccessTime.dwHighDateTime=0x1d47903, ftLastWriteTime.dwLowDateTime=0x3f23a284, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x1b380)) returned 1 [0139.745] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0139.745] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.1.ver0x0000000000000037.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\caches\\{3da71d5a-20cc-432f-a115-dfe92379e91f}.1.ver0x0000000000000037.db"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.1.ver0x0000000000000037.db.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\caches\\{3da71d5a-20cc-432f-a115-dfe92379e91f}.1.ver0x0000000000000037.db.xuy")) returned 1 [0139.746] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.1.ver0x0000000000000038.db", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.1.ver0x0000000000000038.db", lpFilePart=0x0) returned 0x7e [0139.746] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0139.746] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.1.ver0x0000000000000038.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\caches\\{3da71d5a-20cc-432f-a115-dfe92379e91f}.1.ver0x0000000000000038.db"), fInfoLevelId=0x0, lpFileInformation=0x22caf18 | out: lpFileInformation=0x22caf18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x142b2141, ftCreationTime.dwHighDateTime=0x1d47903, ftLastAccessTime.dwLowDateTime=0x142b2141, ftLastAccessTime.dwHighDateTime=0x1d47903, ftLastWriteTime.dwLowDateTime=0x142b2141, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x19e70)) returned 1 [0139.746] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0139.746] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.1.ver0x0000000000000038.db", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.1.ver0x0000000000000038.db", lpFilePart=0x0) returned 0x7e [0139.746] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0139.747] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.1.ver0x0000000000000038.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\caches\\{3da71d5a-20cc-432f-a115-dfe92379e91f}.1.ver0x0000000000000038.db"), fInfoLevelId=0x0, lpFileInformation=0x22cb138 | out: lpFileInformation=0x22cb138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x142b2141, ftCreationTime.dwHighDateTime=0x1d47903, ftLastAccessTime.dwLowDateTime=0x142b2141, ftLastAccessTime.dwHighDateTime=0x1d47903, ftLastWriteTime.dwLowDateTime=0x142b2141, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x19e70)) returned 1 [0139.747] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0139.747] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.1.ver0x0000000000000038.db", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.1.ver0x0000000000000038.db", lpFilePart=0x0) returned 0x7e [0139.747] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0139.747] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.1.ver0x0000000000000038.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\caches\\{3da71d5a-20cc-432f-a115-dfe92379e91f}.1.ver0x0000000000000038.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0139.747] GetFileType (hFile=0x444) returned 0x1 [0139.747] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0139.747] GetFileType (hFile=0x444) returned 0x1 [0139.747] ReadFile (in: hFile=0x444, lpBuffer=0x22cd6a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x22cd6a8*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0139.762] CloseHandle (hObject=0x444) returned 1 [0139.762] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.1.ver0x0000000000000038.db", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.1.ver0x0000000000000038.db", lpFilePart=0x0) returned 0x7e [0139.762] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0139.762] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.1.ver0x0000000000000038.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\caches\\{3da71d5a-20cc-432f-a115-dfe92379e91f}.1.ver0x0000000000000038.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0139.762] GetFileType (hFile=0x444) returned 0x1 [0139.762] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0139.762] GetFileType (hFile=0x444) returned 0x1 [0139.763] WriteFile (in: hFile=0x444, lpBuffer=0x2147060*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x2147060*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0139.763] CloseHandle (hObject=0x444) returned 1 [0139.763] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.1.ver0x0000000000000038.db", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.1.ver0x0000000000000038.db", lpFilePart=0x0) returned 0x7e [0139.763] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.1.ver0x0000000000000038.db.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.1.ver0x0000000000000038.db.xuy", lpFilePart=0x0) returned 0x82 [0139.763] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0139.763] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.1.ver0x0000000000000038.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\caches\\{3da71d5a-20cc-432f-a115-dfe92379e91f}.1.ver0x0000000000000038.db"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x142b2141, ftCreationTime.dwHighDateTime=0x1d47903, ftLastAccessTime.dwLowDateTime=0x142b2141, ftLastAccessTime.dwHighDateTime=0x1d47903, ftLastWriteTime.dwLowDateTime=0x3f2603d7, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x19e70)) returned 1 [0139.763] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0139.763] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.1.ver0x0000000000000038.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\caches\\{3da71d5a-20cc-432f-a115-dfe92379e91f}.1.ver0x0000000000000038.db"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.1.ver0x0000000000000038.db.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\caches\\{3da71d5a-20cc-432f-a115-dfe92379e91f}.1.ver0x0000000000000038.db.xuy")) returned 1 [0139.765] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.1.ver0x0000000000000039.db", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.1.ver0x0000000000000039.db", lpFilePart=0x0) returned 0x7e [0139.765] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0139.765] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.1.ver0x0000000000000039.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\caches\\{3da71d5a-20cc-432f-a115-dfe92379e91f}.1.ver0x0000000000000039.db"), fInfoLevelId=0x0, lpFileInformation=0x214ff90 | out: lpFileInformation=0x214ff90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b026fa1, ftCreationTime.dwHighDateTime=0x1d47903, ftLastAccessTime.dwLowDateTime=0x1b026fa1, ftLastAccessTime.dwHighDateTime=0x1d47903, ftLastWriteTime.dwLowDateTime=0x1b026fa1, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x16660)) returned 1 [0139.765] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0139.765] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.1.ver0x0000000000000039.db", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.1.ver0x0000000000000039.db", lpFilePart=0x0) returned 0x7e [0139.765] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0139.765] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.1.ver0x0000000000000039.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\caches\\{3da71d5a-20cc-432f-a115-dfe92379e91f}.1.ver0x0000000000000039.db"), fInfoLevelId=0x0, lpFileInformation=0x21501b0 | out: lpFileInformation=0x21501b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b026fa1, ftCreationTime.dwHighDateTime=0x1d47903, ftLastAccessTime.dwLowDateTime=0x1b026fa1, ftLastAccessTime.dwHighDateTime=0x1d47903, ftLastWriteTime.dwLowDateTime=0x1b026fa1, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x16660)) returned 1 [0139.765] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0139.765] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.1.ver0x0000000000000039.db", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.1.ver0x0000000000000039.db", lpFilePart=0x0) returned 0x7e [0139.765] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0139.765] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.1.ver0x0000000000000039.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\caches\\{3da71d5a-20cc-432f-a115-dfe92379e91f}.1.ver0x0000000000000039.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0139.766] GetFileType (hFile=0x444) returned 0x1 [0139.766] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0139.766] GetFileType (hFile=0x444) returned 0x1 [0139.766] ReadFile (in: hFile=0x444, lpBuffer=0x2152720, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x2152720*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0139.807] CloseHandle (hObject=0x444) returned 1 [0139.807] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.1.ver0x0000000000000039.db", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.1.ver0x0000000000000039.db", lpFilePart=0x0) returned 0x7e [0139.807] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0139.807] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.1.ver0x0000000000000039.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\caches\\{3da71d5a-20cc-432f-a115-dfe92379e91f}.1.ver0x0000000000000039.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0139.808] GetFileType (hFile=0x444) returned 0x1 [0139.808] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0139.808] GetFileType (hFile=0x444) returned 0x1 [0139.808] WriteFile (in: hFile=0x444, lpBuffer=0x21503b0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x21503b0*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0139.808] CloseHandle (hObject=0x444) returned 1 [0139.808] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.1.ver0x0000000000000039.db", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.1.ver0x0000000000000039.db", lpFilePart=0x0) returned 0x7e [0139.808] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.1.ver0x0000000000000039.db.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.1.ver0x0000000000000039.db.xuy", lpFilePart=0x0) returned 0x82 [0139.808] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0139.808] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.1.ver0x0000000000000039.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\caches\\{3da71d5a-20cc-432f-a115-dfe92379e91f}.1.ver0x0000000000000039.db"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b026fa1, ftCreationTime.dwHighDateTime=0x1d47903, ftLastAccessTime.dwLowDateTime=0x1b026fa1, ftLastAccessTime.dwHighDateTime=0x1d47903, ftLastWriteTime.dwLowDateTime=0x3f2d2ea4, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x16660)) returned 1 [0139.808] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0139.808] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.1.ver0x0000000000000039.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\caches\\{3da71d5a-20cc-432f-a115-dfe92379e91f}.1.ver0x0000000000000039.db"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.1.ver0x0000000000000039.db.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\caches\\{3da71d5a-20cc-432f-a115-dfe92379e91f}.1.ver0x0000000000000039.db.xuy")) returned 1 [0139.810] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x000000000000001b.db", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x000000000000001b.db", lpFilePart=0x0) returned 0x7e [0139.810] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0139.810] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x000000000000001b.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\caches\\{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x000000000000001b.db"), fInfoLevelId=0x0, lpFileInformation=0x21cecd8 | out: lpFileInformation=0x21cecd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xff16f5ad, ftCreationTime.dwHighDateTime=0x1d41fbe, ftLastAccessTime.dwLowDateTime=0xff16f5ad, ftLastAccessTime.dwHighDateTime=0x1d41fbe, ftLastWriteTime.dwLowDateTime=0xff16f5ad, ftLastWriteTime.dwHighDateTime=0x1d41fbe, nFileSizeHigh=0x0, nFileSizeLow=0x12c68)) returned 1 [0139.810] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0139.810] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x000000000000001b.db", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x000000000000001b.db", lpFilePart=0x0) returned 0x7e [0139.810] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0139.810] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x000000000000001b.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\caches\\{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x000000000000001b.db"), fInfoLevelId=0x0, lpFileInformation=0x21ceef8 | out: lpFileInformation=0x21ceef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xff16f5ad, ftCreationTime.dwHighDateTime=0x1d41fbe, ftLastAccessTime.dwLowDateTime=0xff16f5ad, ftLastAccessTime.dwHighDateTime=0x1d41fbe, ftLastWriteTime.dwLowDateTime=0xff16f5ad, ftLastWriteTime.dwHighDateTime=0x1d41fbe, nFileSizeHigh=0x0, nFileSizeLow=0x12c68)) returned 1 [0139.810] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0139.810] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x000000000000001b.db", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x000000000000001b.db", lpFilePart=0x0) returned 0x7e [0139.811] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0139.811] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x000000000000001b.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\caches\\{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x000000000000001b.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0139.811] GetFileType (hFile=0x444) returned 0x1 [0139.811] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0139.811] GetFileType (hFile=0x444) returned 0x1 [0139.811] ReadFile (in: hFile=0x444, lpBuffer=0x21d1468, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x21d1468*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0139.842] CloseHandle (hObject=0x444) returned 1 [0139.842] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x000000000000001b.db", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x000000000000001b.db", lpFilePart=0x0) returned 0x7e [0139.842] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0139.842] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x000000000000001b.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\caches\\{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x000000000000001b.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0139.843] GetFileType (hFile=0x444) returned 0x1 [0139.843] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0139.843] GetFileType (hFile=0x444) returned 0x1 [0139.843] WriteFile (in: hFile=0x444, lpBuffer=0x21cf0f8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x21cf0f8*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0139.843] CloseHandle (hObject=0x444) returned 1 [0139.843] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x000000000000001b.db", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x000000000000001b.db", lpFilePart=0x0) returned 0x7e [0139.843] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x000000000000001b.db.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x000000000000001b.db.xuy", lpFilePart=0x0) returned 0x82 [0139.843] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0139.843] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x000000000000001b.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\caches\\{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x000000000000001b.db"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xff16f5ad, ftCreationTime.dwHighDateTime=0x1d41fbe, ftLastAccessTime.dwLowDateTime=0xff16f5ad, ftLastAccessTime.dwHighDateTime=0x1d41fbe, ftLastWriteTime.dwLowDateTime=0x3f345148, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x12c68)) returned 1 [0139.843] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0139.843] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x000000000000001b.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\caches\\{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x000000000000001b.db"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x000000000000001b.db.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\caches\\{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x000000000000001b.db.xuy")) returned 1 [0139.844] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x000000000000001c.db", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x000000000000001c.db", lpFilePart=0x0) returned 0x7e [0139.844] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0139.844] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x000000000000001c.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\caches\\{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x000000000000001c.db"), fInfoLevelId=0x0, lpFileInformation=0x224da20 | out: lpFileInformation=0x224da20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef9841ad, ftCreationTime.dwHighDateTime=0x1d46685, ftLastAccessTime.dwLowDateTime=0xef9841ad, ftLastAccessTime.dwHighDateTime=0x1d46685, ftLastWriteTime.dwLowDateTime=0xef9841ad, ftLastWriteTime.dwHighDateTime=0x1d46685, nFileSizeHigh=0x0, nFileSizeLow=0x12d00)) returned 1 [0139.845] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0139.845] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x000000000000001c.db", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x000000000000001c.db", lpFilePart=0x0) returned 0x7e [0139.845] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0139.845] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x000000000000001c.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\caches\\{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x000000000000001c.db"), fInfoLevelId=0x0, lpFileInformation=0x224dc40 | out: lpFileInformation=0x224dc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef9841ad, ftCreationTime.dwHighDateTime=0x1d46685, ftLastAccessTime.dwLowDateTime=0xef9841ad, ftLastAccessTime.dwHighDateTime=0x1d46685, ftLastWriteTime.dwLowDateTime=0xef9841ad, ftLastWriteTime.dwHighDateTime=0x1d46685, nFileSizeHigh=0x0, nFileSizeLow=0x12d00)) returned 1 [0139.845] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0139.845] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x000000000000001c.db", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x000000000000001c.db", lpFilePart=0x0) returned 0x7e [0139.845] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0139.845] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x000000000000001c.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\caches\\{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x000000000000001c.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0139.846] GetFileType (hFile=0x444) returned 0x1 [0139.846] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0139.846] GetFileType (hFile=0x444) returned 0x1 [0139.846] ReadFile (in: hFile=0x444, lpBuffer=0x22501b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x22501b0*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0139.856] CloseHandle (hObject=0x444) returned 1 [0139.856] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x000000000000001c.db", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x000000000000001c.db", lpFilePart=0x0) returned 0x7e [0139.856] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0139.856] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x000000000000001c.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\caches\\{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x000000000000001c.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0139.856] GetFileType (hFile=0x444) returned 0x1 [0139.856] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0139.856] GetFileType (hFile=0x444) returned 0x1 [0139.856] WriteFile (in: hFile=0x444, lpBuffer=0x224de40*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x224de40*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0139.857] CloseHandle (hObject=0x444) returned 1 [0139.857] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x000000000000001c.db", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x000000000000001c.db", lpFilePart=0x0) returned 0x7e [0139.857] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x000000000000001c.db.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x000000000000001c.db.xuy", lpFilePart=0x0) returned 0x82 [0139.857] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0139.857] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x000000000000001c.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\caches\\{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x000000000000001c.db"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef9841ad, ftCreationTime.dwHighDateTime=0x1d46685, ftLastAccessTime.dwLowDateTime=0xef9841ad, ftLastAccessTime.dwHighDateTime=0x1d46685, ftLastWriteTime.dwLowDateTime=0x3f345148, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x12d00)) returned 1 [0139.858] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0139.858] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x000000000000001c.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\caches\\{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x000000000000001c.db"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x000000000000001c.db.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\caches\\{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x000000000000001c.db.xuy")) returned 1 [0139.859] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0139.859] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer", lpFilePart=0x0) returned 0x3e [0139.859] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\", lpFilePart=0x0) returned 0x3f [0139.859] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d78b0 [0139.859] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0139.860] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0139.860] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0139.860] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0139.860] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0139.860] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0139.860] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0139.860] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0139.860] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0139.860] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0139.861] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0139.861] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0139.861] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0139.861] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0139.861] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0139.861] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0139.861] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0139.861] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0139.861] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0139.861] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0139.862] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0139.862] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0139.862] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0139.862] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0139.862] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0139.862] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0139.862] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0139.862] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0139.862] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0139.863] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0139.863] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0139.863] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0139.863] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0139.863] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0139.863] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0139.863] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0139.863] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0139.863] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0139.863] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer", lpFilePart=0x0) returned 0x3e [0139.863] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\", lpFilePart=0x0) returned 0x3f [0139.863] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d81b0 [0139.863] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0139.864] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0139.864] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0139.864] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0139.864] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0139.864] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0139.864] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0139.865] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0139.865] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0139.865] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0139.865] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0139.865] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0139.865] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0139.865] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0139.866] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0139.866] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0139.866] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0139.866] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0139.866] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0139.866] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0139.867] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0139.867] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0139.867] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0139.867] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0139.867] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0139.867] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0139.867] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0139.868] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0139.868] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0139.868] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0139.868] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0139.868] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0139.868] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0139.868] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0139.869] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0139.869] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0139.869] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0139.869] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\ExplorerStartupLog.etl", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\ExplorerStartupLog.etl", lpFilePart=0x0) returned 0x55 [0139.869] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0139.869] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\ExplorerStartupLog.etl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\explorerstartuplog.etl"), fInfoLevelId=0x0, lpFileInformation=0x22d7488 | out: lpFileInformation=0x22d7488*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xab04f2ab, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xab04f2ab, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xd42d0ed2, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x6e000)) returned 1 [0139.869] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0139.869] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\ExplorerStartupLog.etl", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\ExplorerStartupLog.etl", lpFilePart=0x0) returned 0x55 [0139.869] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0139.869] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\ExplorerStartupLog.etl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\explorerstartuplog.etl"), fInfoLevelId=0x0, lpFileInformation=0x22d7600 | out: lpFileInformation=0x22d7600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xab04f2ab, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xab04f2ab, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xd42d0ed2, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x6e000)) returned 1 [0139.869] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0139.869] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\ExplorerStartupLog.etl", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\ExplorerStartupLog.etl", lpFilePart=0x0) returned 0x55 [0139.869] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0139.869] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\ExplorerStartupLog.etl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\explorerstartuplog.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0139.870] GetFileType (hFile=0x444) returned 0x1 [0139.870] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0139.870] GetFileType (hFile=0x444) returned 0x1 [0139.870] ReadFile (in: hFile=0x444, lpBuffer=0x22d9a20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x22d9a20*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0139.913] CloseHandle (hObject=0x444) returned 1 [0139.913] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\ExplorerStartupLog.etl", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\ExplorerStartupLog.etl", lpFilePart=0x0) returned 0x55 [0139.913] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0139.913] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\ExplorerStartupLog.etl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\explorerstartuplog.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0139.913] GetFileType (hFile=0x444) returned 0x1 [0139.913] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0139.913] GetFileType (hFile=0x444) returned 0x1 [0139.913] WriteFile (in: hFile=0x444, lpBuffer=0x214f2a0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x214f2a0*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0139.913] CloseHandle (hObject=0x444) returned 1 [0139.914] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\ExplorerStartupLog.etl", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\ExplorerStartupLog.etl", lpFilePart=0x0) returned 0x55 [0139.914] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\ExplorerStartupLog.etl.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\ExplorerStartupLog.etl.xuy", lpFilePart=0x0) returned 0x59 [0139.914] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0139.914] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\ExplorerStartupLog.etl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\explorerstartuplog.etl"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xab04f2ab, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xab04f2ab, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x3f3dda4f, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x6e000)) returned 1 [0139.914] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0139.914] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\ExplorerStartupLog.etl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\explorerstartuplog.etl"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\ExplorerStartupLog.etl.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\explorerstartuplog.etl.xuy")) returned 1 [0139.915] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\ExplorerStartupLog_RunOnce.etl", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\ExplorerStartupLog_RunOnce.etl", lpFilePart=0x0) returned 0x5d [0139.915] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0139.915] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\ExplorerStartupLog_RunOnce.etl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\explorerstartuplog_runonce.etl"), fInfoLevelId=0x0, lpFileInformation=0x215cf78 | out: lpFileInformation=0x215cf78*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xacbf38ac, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xacbf38ac, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xb71107e1, ftLastWriteTime.dwHighDateTime=0x1d46683, nFileSizeHigh=0x0, nFileSizeLow=0x4000)) returned 1 [0139.915] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0139.915] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\ExplorerStartupLog_RunOnce.etl", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\ExplorerStartupLog_RunOnce.etl", lpFilePart=0x0) returned 0x5d [0139.915] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0139.915] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\ExplorerStartupLog_RunOnce.etl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\explorerstartuplog_runonce.etl"), fInfoLevelId=0x0, lpFileInformation=0x215d110 | out: lpFileInformation=0x215d110*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xacbf38ac, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xacbf38ac, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xb71107e1, ftLastWriteTime.dwHighDateTime=0x1d46683, nFileSizeHigh=0x0, nFileSizeLow=0x4000)) returned 1 [0139.915] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0139.915] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\ExplorerStartupLog_RunOnce.etl", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\ExplorerStartupLog_RunOnce.etl", lpFilePart=0x0) returned 0x5d [0139.915] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0139.915] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\ExplorerStartupLog_RunOnce.etl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\explorerstartuplog_runonce.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0139.916] GetFileType (hFile=0x444) returned 0x1 [0139.916] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0139.916] GetFileType (hFile=0x444) returned 0x1 [0139.916] ReadFile (in: hFile=0x444, lpBuffer=0x215f570, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x215f570*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0139.933] CloseHandle (hObject=0x444) returned 1 [0139.933] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\ExplorerStartupLog_RunOnce.etl", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\ExplorerStartupLog_RunOnce.etl", lpFilePart=0x0) returned 0x5d [0139.933] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0139.934] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\ExplorerStartupLog_RunOnce.etl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\explorerstartuplog_runonce.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0139.934] GetFileType (hFile=0x444) returned 0x1 [0139.934] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0139.934] GetFileType (hFile=0x444) returned 0x1 [0139.934] WriteFile (in: hFile=0x444, lpBuffer=0x215d288*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x215d288*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0139.934] CloseHandle (hObject=0x444) returned 1 [0139.936] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\ExplorerStartupLog_RunOnce.etl", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\ExplorerStartupLog_RunOnce.etl", lpFilePart=0x0) returned 0x5d [0139.936] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\ExplorerStartupLog_RunOnce.etl.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\ExplorerStartupLog_RunOnce.etl.xuy", lpFilePart=0x0) returned 0x61 [0139.936] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0139.936] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\ExplorerStartupLog_RunOnce.etl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\explorerstartuplog_runonce.etl"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xacbf38ac, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xacbf38ac, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x3f403f17, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x4000)) returned 1 [0139.936] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0139.936] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\ExplorerStartupLog_RunOnce.etl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\explorerstartuplog_runonce.etl"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\ExplorerStartupLog_RunOnce.etl.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\explorerstartuplog_runonce.etl.xuy")) returned 1 [0139.937] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_1280.db", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_1280.db", lpFilePart=0x0) returned 0x50 [0139.937] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0139.937] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_1280.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_1280.db"), fInfoLevelId=0x0, lpFileInformation=0x21db9e0 | out: lpFileInformation=0x21db9e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xad5a31c7, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xad5a31c7, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xad5a31c7, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x18)) returned 1 [0139.938] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0139.938] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_1280.db", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_1280.db", lpFilePart=0x0) returned 0x50 [0139.938] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0139.938] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_1280.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_1280.db"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0139.938] GetFileType (hFile=0x444) returned 0x1 [0139.938] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0139.938] GetFileType (hFile=0x444) returned 0x1 [0139.938] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0x18 [0139.938] ReadFile (in: hFile=0x444, lpBuffer=0x21dbce0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be718, lpOverlapped=0x0 | out: lpBuffer=0x21dbce0*, lpNumberOfBytesRead=0x3be718*=0x18, lpOverlapped=0x0) returned 1 [0139.939] CloseHandle (hObject=0x444) returned 1 [0139.949] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_1280.db", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_1280.db", lpFilePart=0x0) returned 0x50 [0139.949] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0139.949] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_1280.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_1280.db"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0139.950] GetFileType (hFile=0x444) returned 0x1 [0139.950] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0139.950] GetFileType (hFile=0x444) returned 0x1 [0139.950] WriteFile (in: hFile=0x444, lpBuffer=0x2252e30*, nNumberOfBytesToWrite=0x20, lpNumberOfBytesWritten=0x3be628, lpOverlapped=0x0 | out: lpBuffer=0x2252e30*, lpNumberOfBytesWritten=0x3be628*=0x20, lpOverlapped=0x0) returned 1 [0139.953] CloseHandle (hObject=0x444) returned 1 [0139.953] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_1280.db", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_1280.db", lpFilePart=0x0) returned 0x50 [0139.954] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_1280.db.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_1280.db.xuy", lpFilePart=0x0) returned 0x54 [0139.954] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0139.954] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_1280.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_1280.db"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xad5a31c7, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xad5a31c7, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x3f4500dd, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x20)) returned 1 [0139.954] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0139.954] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_1280.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_1280.db"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_1280.db.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_1280.db.xuy")) returned 1 [0139.955] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_16.db", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_16.db", lpFilePart=0x0) returned 0x4e [0139.955] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0139.955] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_16.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_16.db"), fInfoLevelId=0x0, lpFileInformation=0x22540d8 | out: lpFileInformation=0x22540d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xad5a31c7, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xad5a31c7, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x45e0cb7a, ftLastWriteTime.dwHighDateTime=0x1d2d028, nFileSizeHigh=0x0, nFileSizeLow=0x100000)) returned 1 [0139.955] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0139.955] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_16.db", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_16.db", lpFilePart=0x0) returned 0x4e [0139.955] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0139.955] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_16.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_16.db"), fInfoLevelId=0x0, lpFileInformation=0x2254230 | out: lpFileInformation=0x2254230*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xad5a31c7, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xad5a31c7, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x45e0cb7a, ftLastWriteTime.dwHighDateTime=0x1d2d028, nFileSizeHigh=0x0, nFileSizeLow=0x100000)) returned 1 [0139.955] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0139.955] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_16.db", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_16.db", lpFilePart=0x0) returned 0x4e [0139.955] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0139.955] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_16.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_16.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0139.956] GetFileType (hFile=0x444) returned 0x1 [0139.956] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0139.956] GetFileType (hFile=0x444) returned 0x1 [0139.956] ReadFile (in: hFile=0x444, lpBuffer=0x2256610, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x2256610*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0139.968] CloseHandle (hObject=0x444) returned 1 [0139.975] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_16.db", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_16.db", lpFilePart=0x0) returned 0x4e [0139.975] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0139.975] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_16.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_16.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0139.975] GetFileType (hFile=0x444) returned 0x1 [0139.975] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0139.975] GetFileType (hFile=0x444) returned 0x1 [0139.975] WriteFile (in: hFile=0x444, lpBuffer=0x2254368*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x2254368*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0139.975] CloseHandle (hObject=0x444) returned 1 [0139.975] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_16.db", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_16.db", lpFilePart=0x0) returned 0x4e [0139.975] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_16.db.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_16.db.xuy", lpFilePart=0x0) returned 0x52 [0139.975] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0139.976] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_16.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_16.db"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xad5a31c7, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xad5a31c7, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x3f4762f5, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x100000)) returned 1 [0139.976] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0139.976] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_16.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_16.db"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_16.db.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_16.db.xuy")) returned 1 [0139.977] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_1920.db", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_1920.db", lpFilePart=0x0) returned 0x50 [0139.977] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0139.977] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_1920.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_1920.db"), fInfoLevelId=0x0, lpFileInformation=0x22d29e0 | out: lpFileInformation=0x22d29e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xad5a31c7, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xad5a31c7, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xad5a31c7, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x18)) returned 1 [0139.977] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0139.977] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_1920.db", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_1920.db", lpFilePart=0x0) returned 0x50 [0139.977] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0139.977] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_1920.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_1920.db"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0139.978] GetFileType (hFile=0x444) returned 0x1 [0139.978] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0139.978] GetFileType (hFile=0x444) returned 0x1 [0139.978] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0x18 [0139.978] ReadFile (in: hFile=0x444, lpBuffer=0x22d2ce0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be718, lpOverlapped=0x0 | out: lpBuffer=0x22d2ce0*, lpNumberOfBytesRead=0x3be718*=0x18, lpOverlapped=0x0) returned 1 [0139.979] CloseHandle (hObject=0x444) returned 1 [0139.989] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_1920.db", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_1920.db", lpFilePart=0x0) returned 0x50 [0139.989] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0139.989] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_1920.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_1920.db"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0139.991] GetFileType (hFile=0x444) returned 0x1 [0139.991] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0139.991] GetFileType (hFile=0x444) returned 0x1 [0139.991] WriteFile (in: hFile=0x444, lpBuffer=0x2349e30*, nNumberOfBytesToWrite=0x20, lpNumberOfBytesWritten=0x3be628, lpOverlapped=0x0 | out: lpBuffer=0x2349e30*, lpNumberOfBytesWritten=0x3be628*=0x20, lpOverlapped=0x0) returned 1 [0139.992] CloseHandle (hObject=0x444) returned 1 [0139.992] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_1920.db", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_1920.db", lpFilePart=0x0) returned 0x50 [0139.992] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_1920.db.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_1920.db.xuy", lpFilePart=0x0) returned 0x54 [0139.992] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0139.992] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_1920.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_1920.db"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xad5a31c7, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xad5a31c7, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x3f49c598, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x20)) returned 1 [0139.992] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0139.992] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_1920.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_1920.db"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_1920.db.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_1920.db.xuy")) returned 1 [0139.994] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_256.db", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_256.db", lpFilePart=0x0) returned 0x4f [0139.994] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0139.994] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_256.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_256.db"), fInfoLevelId=0x0, lpFileInformation=0x234b0d8 | out: lpFileInformation=0x234b0d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xad5a31c7, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xad5a31c7, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xad5a31c7, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x18)) returned 1 [0139.994] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0139.994] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_256.db", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_256.db", lpFilePart=0x0) returned 0x4f [0139.994] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0139.994] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_256.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_256.db"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0139.994] GetFileType (hFile=0x444) returned 0x1 [0139.994] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0139.994] GetFileType (hFile=0x444) returned 0x1 [0139.994] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0x18 [0139.994] ReadFile (in: hFile=0x444, lpBuffer=0x234b3c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be718, lpOverlapped=0x0 | out: lpBuffer=0x234b3c8*, lpNumberOfBytesRead=0x3be718*=0x18, lpOverlapped=0x0) returned 1 [0139.995] CloseHandle (hObject=0x444) returned 1 [0140.081] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_256.db", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_256.db", lpFilePart=0x0) returned 0x4f [0140.081] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0140.081] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_256.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_256.db"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0140.082] GetFileType (hFile=0x444) returned 0x1 [0140.082] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0140.082] GetFileType (hFile=0x444) returned 0x1 [0140.082] WriteFile (in: hFile=0x444, lpBuffer=0x21c4b78*, nNumberOfBytesToWrite=0x20, lpNumberOfBytesWritten=0x3be628, lpOverlapped=0x0 | out: lpBuffer=0x21c4b78*, lpNumberOfBytesWritten=0x3be628*=0x20, lpOverlapped=0x0) returned 1 [0140.083] CloseHandle (hObject=0x444) returned 1 [0140.083] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_256.db", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_256.db", lpFilePart=0x0) returned 0x4f [0140.083] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_256.db.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_256.db.xuy", lpFilePart=0x0) returned 0x53 [0140.084] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0140.084] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_256.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_256.db"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xad5a31c7, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xad5a31c7, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x3f58138a, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x20)) returned 1 [0140.084] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0140.084] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_256.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_256.db"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_256.db.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_256.db.xuy")) returned 1 [0140.085] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_2560.db", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_2560.db", lpFilePart=0x0) returned 0x50 [0140.085] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0140.085] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_2560.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_2560.db"), fInfoLevelId=0x0, lpFileInformation=0x21c5e08 | out: lpFileInformation=0x21c5e08*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xad5a31c7, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xad5a31c7, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xad5a31c7, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x18)) returned 1 [0140.085] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0140.085] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_2560.db", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_2560.db", lpFilePart=0x0) returned 0x50 [0140.085] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0140.085] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_2560.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_2560.db"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0140.085] GetFileType (hFile=0x444) returned 0x1 [0140.085] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0140.085] GetFileType (hFile=0x444) returned 0x1 [0140.085] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0x18 [0140.085] ReadFile (in: hFile=0x444, lpBuffer=0x21c6108, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be718, lpOverlapped=0x0 | out: lpBuffer=0x21c6108*, lpNumberOfBytesRead=0x3be718*=0x18, lpOverlapped=0x0) returned 1 [0140.086] CloseHandle (hObject=0x444) returned 1 [0140.100] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_2560.db", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_2560.db", lpFilePart=0x0) returned 0x50 [0140.100] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0140.100] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_2560.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_2560.db"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0140.101] GetFileType (hFile=0x444) returned 0x1 [0140.101] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0140.101] GetFileType (hFile=0x444) returned 0x1 [0140.101] WriteFile (in: hFile=0x444, lpBuffer=0x223d258*, nNumberOfBytesToWrite=0x20, lpNumberOfBytesWritten=0x3be628, lpOverlapped=0x0 | out: lpBuffer=0x223d258*, lpNumberOfBytesWritten=0x3be628*=0x20, lpOverlapped=0x0) returned 1 [0140.102] CloseHandle (hObject=0x444) returned 1 [0140.102] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_2560.db", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_2560.db", lpFilePart=0x0) returned 0x50 [0140.102] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_2560.db.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_2560.db.xuy", lpFilePart=0x0) returned 0x54 [0140.102] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0140.102] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_2560.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_2560.db"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xad5a31c7, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xad5a31c7, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x3f5a7691, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x20)) returned 1 [0140.102] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0140.102] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_2560.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_2560.db"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_2560.db.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_2560.db.xuy")) returned 1 [0140.103] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_32.db", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_32.db", lpFilePart=0x0) returned 0x4e [0140.103] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0140.103] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_32.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_32.db"), fInfoLevelId=0x0, lpFileInformation=0x223e500 | out: lpFileInformation=0x223e500*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xad5a31c7, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xad5a31c7, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x47d7dc54, ftLastWriteTime.dwHighDateTime=0x1d2d028, nFileSizeHigh=0x0, nFileSizeLow=0x100000)) returned 1 [0140.103] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0140.104] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_32.db", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_32.db", lpFilePart=0x0) returned 0x4e [0140.104] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0140.104] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_32.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_32.db"), fInfoLevelId=0x0, lpFileInformation=0x223e658 | out: lpFileInformation=0x223e658*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xad5a31c7, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xad5a31c7, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x47d7dc54, ftLastWriteTime.dwHighDateTime=0x1d2d028, nFileSizeHigh=0x0, nFileSizeLow=0x100000)) returned 1 [0140.104] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0140.104] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_32.db", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_32.db", lpFilePart=0x0) returned 0x4e [0140.104] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0140.104] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_32.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_32.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0140.104] GetFileType (hFile=0x444) returned 0x1 [0140.104] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0140.104] GetFileType (hFile=0x444) returned 0x1 [0140.104] ReadFile (in: hFile=0x444, lpBuffer=0x2240a38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x2240a38*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0140.116] CloseHandle (hObject=0x444) returned 1 [0140.116] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_32.db", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_32.db", lpFilePart=0x0) returned 0x4e [0140.116] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0140.116] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_32.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_32.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0140.116] GetFileType (hFile=0x444) returned 0x1 [0140.116] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0140.116] GetFileType (hFile=0x444) returned 0x1 [0140.116] WriteFile (in: hFile=0x444, lpBuffer=0x223e790*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x223e790*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0140.116] CloseHandle (hObject=0x444) returned 1 [0140.117] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_32.db", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_32.db", lpFilePart=0x0) returned 0x4e [0140.117] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_32.db.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_32.db.xuy", lpFilePart=0x0) returned 0x52 [0140.117] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0140.117] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_32.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_32.db"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xad5a31c7, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xad5a31c7, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x3f5cd90b, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x100000)) returned 1 [0140.117] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0140.117] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_32.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_32.db"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_32.db.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_32.db.xuy")) returned 1 [0140.118] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_48.db", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_48.db", lpFilePart=0x0) returned 0x4e [0140.118] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0140.118] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_48.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_48.db"), fInfoLevelId=0x0, lpFileInformation=0x22bce08 | out: lpFileInformation=0x22bce08*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xad5a31c7, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xad5a31c7, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xad5a31c7, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x100000)) returned 1 [0140.118] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0140.118] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_48.db", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_48.db", lpFilePart=0x0) returned 0x4e [0140.118] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0140.118] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_48.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_48.db"), fInfoLevelId=0x0, lpFileInformation=0x22bcf60 | out: lpFileInformation=0x22bcf60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xad5a31c7, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xad5a31c7, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xad5a31c7, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x100000)) returned 1 [0140.118] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0140.118] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_48.db", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_48.db", lpFilePart=0x0) returned 0x4e [0140.118] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0140.118] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_48.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_48.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0140.119] GetFileType (hFile=0x444) returned 0x1 [0140.119] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0140.119] GetFileType (hFile=0x444) returned 0x1 [0140.119] ReadFile (in: hFile=0x444, lpBuffer=0x22bf340, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x22bf340*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0140.132] CloseHandle (hObject=0x444) returned 1 [0140.132] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_48.db", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_48.db", lpFilePart=0x0) returned 0x4e [0140.132] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0140.132] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_48.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_48.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0140.132] GetFileType (hFile=0x444) returned 0x1 [0140.132] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0140.132] GetFileType (hFile=0x444) returned 0x1 [0140.132] WriteFile (in: hFile=0x444, lpBuffer=0x22bd098*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x22bd098*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0140.133] CloseHandle (hObject=0x444) returned 1 [0140.133] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_48.db", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_48.db", lpFilePart=0x0) returned 0x4e [0140.133] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_48.db.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_48.db.xuy", lpFilePart=0x0) returned 0x52 [0140.133] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0140.133] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_48.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_48.db"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xad5a31c7, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xad5a31c7, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x3f5f3b66, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x100000)) returned 1 [0140.133] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0140.133] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_48.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_48.db"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_48.db.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_48.db.xuy")) returned 1 [0140.134] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_768.db", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_768.db", lpFilePart=0x0) returned 0x4f [0140.134] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0140.134] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_768.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_768.db"), fInfoLevelId=0x0, lpFileInformation=0x233b710 | out: lpFileInformation=0x233b710*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xad5a31c7, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xad5a31c7, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xad5a31c7, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x18)) returned 1 [0140.135] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0140.135] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_768.db", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_768.db", lpFilePart=0x0) returned 0x4f [0140.135] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0140.135] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_768.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_768.db"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0140.135] GetFileType (hFile=0x444) returned 0x1 [0140.135] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0140.135] GetFileType (hFile=0x444) returned 0x1 [0140.135] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0x18 [0140.135] ReadFile (in: hFile=0x444, lpBuffer=0x233ba00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be718, lpOverlapped=0x0 | out: lpBuffer=0x233ba00*, lpNumberOfBytesRead=0x3be718*=0x18, lpOverlapped=0x0) returned 1 [0140.136] CloseHandle (hObject=0x444) returned 1 [0140.175] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_768.db", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_768.db", lpFilePart=0x0) returned 0x4f [0140.175] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0140.176] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_768.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_768.db"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0140.177] GetFileType (hFile=0x444) returned 0x1 [0140.177] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0140.177] GetFileType (hFile=0x444) returned 0x1 [0140.177] WriteFile (in: hFile=0x444, lpBuffer=0x21b2b28*, nNumberOfBytesToWrite=0x20, lpNumberOfBytesWritten=0x3be628, lpOverlapped=0x0 | out: lpBuffer=0x21b2b28*, lpNumberOfBytesWritten=0x3be628*=0x20, lpOverlapped=0x0) returned 1 [0140.178] CloseHandle (hObject=0x444) returned 1 [0140.178] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_768.db", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_768.db", lpFilePart=0x0) returned 0x4f [0140.178] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_768.db.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_768.db.xuy", lpFilePart=0x0) returned 0x53 [0140.178] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0140.178] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_768.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_768.db"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xad5a31c7, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xad5a31c7, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x3f6663d7, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x20)) returned 1 [0140.178] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0140.179] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_768.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_768.db"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_768.db.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_768.db.xuy")) returned 1 [0140.180] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_96.db", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_96.db", lpFilePart=0x0) returned 0x4e [0140.180] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0140.180] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_96.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_96.db"), fInfoLevelId=0x0, lpFileInformation=0x21b3db8 | out: lpFileInformation=0x21b3db8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xad5a31c7, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xad5a31c7, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xad5a31c7, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x18)) returned 1 [0140.180] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0140.180] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_96.db", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_96.db", lpFilePart=0x0) returned 0x4e [0140.180] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0140.180] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_96.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_96.db"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0140.180] GetFileType (hFile=0x444) returned 0x1 [0140.180] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0140.180] GetFileType (hFile=0x444) returned 0x1 [0140.180] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0x18 [0140.180] ReadFile (in: hFile=0x444, lpBuffer=0x21b4098, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be718, lpOverlapped=0x0 | out: lpBuffer=0x21b4098*, lpNumberOfBytesRead=0x3be718*=0x18, lpOverlapped=0x0) returned 1 [0140.181] CloseHandle (hObject=0x444) returned 1 [0140.192] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_96.db", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_96.db", lpFilePart=0x0) returned 0x4e [0140.192] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0140.193] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_96.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_96.db"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0140.194] GetFileType (hFile=0x444) returned 0x1 [0140.194] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0140.194] GetFileType (hFile=0x444) returned 0x1 [0140.194] WriteFile (in: hFile=0x444, lpBuffer=0x222b1d8*, nNumberOfBytesToWrite=0x20, lpNumberOfBytesWritten=0x3be628, lpOverlapped=0x0 | out: lpBuffer=0x222b1d8*, lpNumberOfBytesWritten=0x3be628*=0x20, lpOverlapped=0x0) returned 1 [0140.195] CloseHandle (hObject=0x444) returned 1 [0140.195] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_96.db", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_96.db", lpFilePart=0x0) returned 0x4e [0140.195] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_96.db.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_96.db.xuy", lpFilePart=0x0) returned 0x52 [0140.195] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0140.195] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_96.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_96.db"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xad5a31c7, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xad5a31c7, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x3f68c63a, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x20)) returned 1 [0140.195] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0140.195] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_96.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_96.db"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_96.db.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_96.db.xuy")) returned 1 [0140.197] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_custom_stream.db", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_custom_stream.db", lpFilePart=0x0) returned 0x59 [0140.197] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0140.197] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_custom_stream.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_custom_stream.db"), fInfoLevelId=0x0, lpFileInformation=0x222c468 | out: lpFileInformation=0x222c468*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xad5a31c7, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xad5a31c7, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xad5a31c7, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x18)) returned 1 [0140.198] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0140.198] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_custom_stream.db", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_custom_stream.db", lpFilePart=0x0) returned 0x59 [0140.198] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0140.198] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_custom_stream.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_custom_stream.db"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0140.198] GetFileType (hFile=0x444) returned 0x1 [0140.198] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0140.198] GetFileType (hFile=0x444) returned 0x1 [0140.198] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0x18 [0140.199] ReadFile (in: hFile=0x444, lpBuffer=0x222c7a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be718, lpOverlapped=0x0 | out: lpBuffer=0x222c7a8*, lpNumberOfBytesRead=0x3be718*=0x18, lpOverlapped=0x0) returned 1 [0140.200] CloseHandle (hObject=0x444) returned 1 [0140.211] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_custom_stream.db", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_custom_stream.db", lpFilePart=0x0) returned 0x59 [0140.211] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0140.211] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_custom_stream.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_custom_stream.db"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0140.213] GetFileType (hFile=0x444) returned 0x1 [0140.213] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0140.213] GetFileType (hFile=0x444) returned 0x1 [0140.213] WriteFile (in: hFile=0x444, lpBuffer=0x22a3918*, nNumberOfBytesToWrite=0x20, lpNumberOfBytesWritten=0x3be628, lpOverlapped=0x0 | out: lpBuffer=0x22a3918*, lpNumberOfBytesWritten=0x3be628*=0x20, lpOverlapped=0x0) returned 1 [0140.214] CloseHandle (hObject=0x444) returned 1 [0140.214] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_custom_stream.db", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_custom_stream.db", lpFilePart=0x0) returned 0x59 [0140.214] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_custom_stream.db.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_custom_stream.db.xuy", lpFilePart=0x0) returned 0x5d [0140.214] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0140.214] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_custom_stream.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_custom_stream.db"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xad5a31c7, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xad5a31c7, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x3f6b27aa, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x20)) returned 1 [0140.214] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0140.215] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_custom_stream.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_custom_stream.db"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_custom_stream.db.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_custom_stream.db.xuy")) returned 1 [0140.216] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_exif.db", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_exif.db", lpFilePart=0x0) returned 0x50 [0140.216] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0140.216] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_exif.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_exif.db"), fInfoLevelId=0x0, lpFileInformation=0x22a4bf0 | out: lpFileInformation=0x22a4bf0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xad5a31c7, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xad5a31c7, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xad5a31c7, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x18)) returned 1 [0140.216] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0140.216] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_exif.db", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_exif.db", lpFilePart=0x0) returned 0x50 [0140.216] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0140.216] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_exif.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_exif.db"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0140.217] GetFileType (hFile=0x444) returned 0x1 [0140.217] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0140.217] GetFileType (hFile=0x444) returned 0x1 [0140.217] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0x18 [0140.217] ReadFile (in: hFile=0x444, lpBuffer=0x22a4ef0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be718, lpOverlapped=0x0 | out: lpBuffer=0x22a4ef0*, lpNumberOfBytesRead=0x3be718*=0x18, lpOverlapped=0x0) returned 1 [0140.218] CloseHandle (hObject=0x444) returned 1 [0140.228] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_exif.db", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_exif.db", lpFilePart=0x0) returned 0x50 [0140.228] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0140.228] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_exif.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_exif.db"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0140.230] GetFileType (hFile=0x444) returned 0x1 [0140.230] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0140.230] GetFileType (hFile=0x444) returned 0x1 [0140.230] WriteFile (in: hFile=0x444, lpBuffer=0x231c040*, nNumberOfBytesToWrite=0x20, lpNumberOfBytesWritten=0x3be628, lpOverlapped=0x0 | out: lpBuffer=0x231c040*, lpNumberOfBytesWritten=0x3be628*=0x20, lpOverlapped=0x0) returned 1 [0140.230] CloseHandle (hObject=0x444) returned 1 [0140.230] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_exif.db", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_exif.db", lpFilePart=0x0) returned 0x50 [0140.231] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_exif.db.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_exif.db.xuy", lpFilePart=0x0) returned 0x54 [0140.231] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0140.231] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_exif.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_exif.db"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xad5a31c7, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xad5a31c7, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x3f6d898c, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x20)) returned 1 [0140.231] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0140.231] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_exif.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_exif.db"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_exif.db.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_exif.db.xuy")) returned 1 [0140.232] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_idx.db", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_idx.db", lpFilePart=0x0) returned 0x4f [0140.232] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0140.232] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_idx.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_idx.db"), fInfoLevelId=0x0, lpFileInformation=0x231d2e8 | out: lpFileInformation=0x231d2e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xad5a31c7, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xad5a31c7, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xad5a31c7, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x1cf8)) returned 1 [0140.232] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0140.232] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_idx.db", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_idx.db", lpFilePart=0x0) returned 0x4f [0140.232] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0140.232] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_idx.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_idx.db"), fInfoLevelId=0x0, lpFileInformation=0x231d448 | out: lpFileInformation=0x231d448*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xad5a31c7, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xad5a31c7, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xad5a31c7, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x1cf8)) returned 1 [0140.232] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0140.232] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_idx.db", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_idx.db", lpFilePart=0x0) returned 0x4f [0140.233] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0140.233] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_idx.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_idx.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0140.233] GetFileType (hFile=0x444) returned 0x1 [0140.233] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0140.233] GetFileType (hFile=0x444) returned 0x1 [0140.233] ReadFile (in: hFile=0x444, lpBuffer=0x231f838, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x231f838*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0140.276] CloseHandle (hObject=0x444) returned 1 [0140.276] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_idx.db", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_idx.db", lpFilePart=0x0) returned 0x4f [0140.276] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0140.276] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_idx.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_idx.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0140.277] GetFileType (hFile=0x444) returned 0x1 [0140.277] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0140.277] GetFileType (hFile=0x444) returned 0x1 [0140.277] WriteFile (in: hFile=0x444, lpBuffer=0x2154b18*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x2154b18*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0140.277] CloseHandle (hObject=0x444) returned 1 [0140.277] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_idx.db", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_idx.db", lpFilePart=0x0) returned 0x4f [0140.277] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_idx.db.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_idx.db.xuy", lpFilePart=0x0) returned 0x53 [0140.277] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0140.277] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_idx.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_idx.db"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xad5a31c7, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xad5a31c7, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x3f74b281, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0140.277] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0140.277] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_idx.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_idx.db"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_idx.db.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_idx.db.xuy")) returned 1 [0140.278] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_sr.db", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_sr.db", lpFilePart=0x0) returned 0x4e [0140.278] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0140.279] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_sr.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_sr.db"), fInfoLevelId=0x0, lpFileInformation=0x219eda0 | out: lpFileInformation=0x219eda0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xad5a31c7, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xad5a31c7, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xad5a31c7, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x18)) returned 1 [0140.279] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0140.279] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_sr.db", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_sr.db", lpFilePart=0x0) returned 0x4e [0140.279] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0140.279] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_sr.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_sr.db"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0140.279] GetFileType (hFile=0x444) returned 0x1 [0140.279] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0140.279] GetFileType (hFile=0x444) returned 0x1 [0140.279] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0x18 [0140.279] ReadFile (in: hFile=0x444, lpBuffer=0x219f080, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be718, lpOverlapped=0x0 | out: lpBuffer=0x219f080*, lpNumberOfBytesRead=0x3be718*=0x18, lpOverlapped=0x0) returned 1 [0140.280] CloseHandle (hObject=0x444) returned 1 [0140.290] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_sr.db", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_sr.db", lpFilePart=0x0) returned 0x4e [0140.290] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0140.290] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_sr.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_sr.db"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0140.292] GetFileType (hFile=0x444) returned 0x1 [0140.292] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0140.292] GetFileType (hFile=0x444) returned 0x1 [0140.292] WriteFile (in: hFile=0x444, lpBuffer=0x22161c0*, nNumberOfBytesToWrite=0x20, lpNumberOfBytesWritten=0x3be628, lpOverlapped=0x0 | out: lpBuffer=0x22161c0*, lpNumberOfBytesWritten=0x3be628*=0x20, lpOverlapped=0x0) returned 1 [0140.293] CloseHandle (hObject=0x444) returned 1 [0140.293] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_sr.db", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_sr.db", lpFilePart=0x0) returned 0x4e [0140.293] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_sr.db.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_sr.db.xuy", lpFilePart=0x0) returned 0x52 [0140.293] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0140.293] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_sr.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_sr.db"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xad5a31c7, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xad5a31c7, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x3f771333, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x20)) returned 1 [0140.293] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0140.293] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_sr.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_sr.db"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_sr.db.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_sr.db.xuy")) returned 1 [0140.294] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_wide.db", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_wide.db", lpFilePart=0x0) returned 0x50 [0140.294] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0140.294] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_wide.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_wide.db"), fInfoLevelId=0x0, lpFileInformation=0x2217450 | out: lpFileInformation=0x2217450*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xad5a31c7, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xad5a31c7, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xad5a31c7, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x18)) returned 1 [0140.294] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0140.294] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_wide.db", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_wide.db", lpFilePart=0x0) returned 0x50 [0140.294] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0140.294] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_wide.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_wide.db"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0140.295] GetFileType (hFile=0x444) returned 0x1 [0140.295] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0140.295] GetFileType (hFile=0x444) returned 0x1 [0140.295] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0x18 [0140.295] ReadFile (in: hFile=0x444, lpBuffer=0x2217750, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be718, lpOverlapped=0x0 | out: lpBuffer=0x2217750*, lpNumberOfBytesRead=0x3be718*=0x18, lpOverlapped=0x0) returned 1 [0140.296] CloseHandle (hObject=0x444) returned 1 [0140.306] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_wide.db", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_wide.db", lpFilePart=0x0) returned 0x50 [0140.306] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0140.306] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_wide.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_wide.db"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0140.308] GetFileType (hFile=0x444) returned 0x1 [0140.308] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0140.308] GetFileType (hFile=0x444) returned 0x1 [0140.308] WriteFile (in: hFile=0x444, lpBuffer=0x228e8a0*, nNumberOfBytesToWrite=0x20, lpNumberOfBytesWritten=0x3be628, lpOverlapped=0x0 | out: lpBuffer=0x228e8a0*, lpNumberOfBytesWritten=0x3be628*=0x20, lpOverlapped=0x0) returned 1 [0140.308] CloseHandle (hObject=0x444) returned 1 [0140.309] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_wide.db", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_wide.db", lpFilePart=0x0) returned 0x50 [0140.309] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_wide.db.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_wide.db.xuy", lpFilePart=0x0) returned 0x54 [0140.309] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0140.309] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_wide.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_wide.db"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xad5a31c7, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xad5a31c7, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x3f7975d6, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x20)) returned 1 [0140.309] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0140.309] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_wide.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_wide.db"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_wide.db.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_wide.db.xuy")) returned 1 [0140.313] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_wide_alternate.db", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_wide_alternate.db", lpFilePart=0x0) returned 0x5a [0140.313] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0140.313] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_wide_alternate.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_wide_alternate.db"), fInfoLevelId=0x0, lpFileInformation=0x228fb48 | out: lpFileInformation=0x228fb48*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xad5a31c7, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xad5a31c7, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xad5a31c7, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x18)) returned 1 [0140.314] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0140.314] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_wide_alternate.db", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_wide_alternate.db", lpFilePart=0x0) returned 0x5a [0140.314] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0140.314] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_wide_alternate.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_wide_alternate.db"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0140.314] GetFileType (hFile=0x444) returned 0x1 [0140.314] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0140.314] GetFileType (hFile=0x444) returned 0x1 [0140.314] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0x18 [0140.314] ReadFile (in: hFile=0x444, lpBuffer=0x228fe88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be718, lpOverlapped=0x0 | out: lpBuffer=0x228fe88*, lpNumberOfBytesRead=0x3be718*=0x18, lpOverlapped=0x0) returned 1 [0140.315] CloseHandle (hObject=0x444) returned 1 [0140.325] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_wide_alternate.db", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_wide_alternate.db", lpFilePart=0x0) returned 0x5a [0140.325] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0140.325] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_wide_alternate.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_wide_alternate.db"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0140.327] GetFileType (hFile=0x444) returned 0x1 [0140.327] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0140.327] GetFileType (hFile=0x444) returned 0x1 [0140.327] WriteFile (in: hFile=0x444, lpBuffer=0x2306ff8*, nNumberOfBytesToWrite=0x20, lpNumberOfBytesWritten=0x3be628, lpOverlapped=0x0 | out: lpBuffer=0x2306ff8*, lpNumberOfBytesWritten=0x3be628*=0x20, lpOverlapped=0x0) returned 1 [0140.328] CloseHandle (hObject=0x444) returned 1 [0140.328] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_wide_alternate.db", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_wide_alternate.db", lpFilePart=0x0) returned 0x5a [0140.328] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_wide_alternate.db.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_wide_alternate.db.xuy", lpFilePart=0x0) returned 0x5e [0140.328] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0140.328] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_wide_alternate.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_wide_alternate.db"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xad5a31c7, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xad5a31c7, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x3f7e3a42, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x20)) returned 1 [0140.328] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0140.328] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_wide_alternate.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_wide_alternate.db"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_wide_alternate.db.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_wide_alternate.db.xuy")) returned 1 [0140.330] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_1280.db", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_1280.db", lpFilePart=0x0) returned 0x51 [0140.330] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0140.330] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_1280.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_1280.db"), fInfoLevelId=0x0, lpFileInformation=0x23082d0 | out: lpFileInformation=0x23082d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xad95dc38, ftCreationTime.dwHighDateTime=0x1d46683, ftLastAccessTime.dwLowDateTime=0xad95dc38, ftLastAccessTime.dwHighDateTime=0x1d46683, ftLastWriteTime.dwLowDateTime=0xad95dc38, ftLastWriteTime.dwHighDateTime=0x1d46683, nFileSizeHigh=0x0, nFileSizeLow=0x18)) returned 1 [0140.330] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0140.330] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_1280.db", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_1280.db", lpFilePart=0x0) returned 0x51 [0140.330] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0140.330] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_1280.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_1280.db"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0140.330] GetFileType (hFile=0x444) returned 0x1 [0140.330] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0140.330] GetFileType (hFile=0x444) returned 0x1 [0140.330] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0x18 [0140.330] ReadFile (in: hFile=0x444, lpBuffer=0x23085d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be718, lpOverlapped=0x0 | out: lpBuffer=0x23085d0*, lpNumberOfBytesRead=0x3be718*=0x18, lpOverlapped=0x0) returned 1 [0140.331] CloseHandle (hObject=0x444) returned 1 [0140.371] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_1280.db", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_1280.db", lpFilePart=0x0) returned 0x51 [0140.371] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0140.371] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_1280.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_1280.db"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0140.373] GetFileType (hFile=0x444) returned 0x1 [0140.373] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0140.373] GetFileType (hFile=0x444) returned 0x1 [0140.373] WriteFile (in: hFile=0x444, lpBuffer=0x217c588*, nNumberOfBytesToWrite=0x20, lpNumberOfBytesWritten=0x3be628, lpOverlapped=0x0 | out: lpBuffer=0x217c588*, lpNumberOfBytesWritten=0x3be628*=0x20, lpOverlapped=0x0) returned 1 [0140.374] CloseHandle (hObject=0x444) returned 1 [0140.374] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_1280.db", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_1280.db", lpFilePart=0x0) returned 0x51 [0140.374] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_1280.db.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_1280.db.xuy", lpFilePart=0x0) returned 0x55 [0140.374] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0140.374] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_1280.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_1280.db"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xad95dc38, ftCreationTime.dwHighDateTime=0x1d46683, ftLastAccessTime.dwLowDateTime=0xad95dc38, ftLastAccessTime.dwHighDateTime=0x1d46683, ftLastWriteTime.dwLowDateTime=0x3f856b3e, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x20)) returned 1 [0140.374] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0140.375] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_1280.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_1280.db"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_1280.db.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_1280.db.xuy")) returned 1 [0140.376] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_16.db", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_16.db", lpFilePart=0x0) returned 0x4f [0140.376] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0140.376] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_16.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_16.db"), fInfoLevelId=0x0, lpFileInformation=0x217d830 | out: lpFileInformation=0x217d830*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xad95dc38, ftCreationTime.dwHighDateTime=0x1d46683, ftLastAccessTime.dwLowDateTime=0xad95dc38, ftLastAccessTime.dwHighDateTime=0x1d46683, ftLastWriteTime.dwLowDateTime=0xad95dc38, ftLastWriteTime.dwHighDateTime=0x1d46683, nFileSizeHigh=0x0, nFileSizeLow=0x18)) returned 1 [0140.376] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0140.376] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_16.db", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_16.db", lpFilePart=0x0) returned 0x4f [0140.376] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0140.376] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_16.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_16.db"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0140.376] GetFileType (hFile=0x444) returned 0x1 [0140.376] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0140.376] GetFileType (hFile=0x444) returned 0x1 [0140.376] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0x18 [0140.376] ReadFile (in: hFile=0x444, lpBuffer=0x217db20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be718, lpOverlapped=0x0 | out: lpBuffer=0x217db20*, lpNumberOfBytesRead=0x3be718*=0x18, lpOverlapped=0x0) returned 1 [0140.377] CloseHandle (hObject=0x444) returned 1 [0140.387] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_16.db", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_16.db", lpFilePart=0x0) returned 0x4f [0140.387] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0140.387] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_16.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_16.db"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0140.389] GetFileType (hFile=0x444) returned 0x1 [0140.389] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0140.389] GetFileType (hFile=0x444) returned 0x1 [0140.390] WriteFile (in: hFile=0x444, lpBuffer=0x21f4c68*, nNumberOfBytesToWrite=0x20, lpNumberOfBytesWritten=0x3be628, lpOverlapped=0x0 | out: lpBuffer=0x21f4c68*, lpNumberOfBytesWritten=0x3be628*=0x20, lpOverlapped=0x0) returned 1 [0140.391] CloseHandle (hObject=0x444) returned 1 [0140.391] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_16.db", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_16.db", lpFilePart=0x0) returned 0x4f [0140.391] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_16.db.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_16.db.xuy", lpFilePart=0x0) returned 0x53 [0140.391] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0140.391] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_16.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_16.db"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xad95dc38, ftCreationTime.dwHighDateTime=0x1d46683, ftLastAccessTime.dwLowDateTime=0xad95dc38, ftLastAccessTime.dwHighDateTime=0x1d46683, ftLastWriteTime.dwLowDateTime=0x3f87c30e, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x20)) returned 1 [0140.391] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0140.391] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_16.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_16.db"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_16.db.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_16.db.xuy")) returned 1 [0140.392] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_1920.db", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_1920.db", lpFilePart=0x0) returned 0x51 [0140.392] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0140.392] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_1920.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_1920.db"), fInfoLevelId=0x0, lpFileInformation=0x21f5ef8 | out: lpFileInformation=0x21f5ef8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xad95dc38, ftCreationTime.dwHighDateTime=0x1d46683, ftLastAccessTime.dwLowDateTime=0xad95dc38, ftLastAccessTime.dwHighDateTime=0x1d46683, ftLastWriteTime.dwLowDateTime=0xad95dc38, ftLastWriteTime.dwHighDateTime=0x1d46683, nFileSizeHigh=0x0, nFileSizeLow=0x18)) returned 1 [0140.392] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0140.393] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_1920.db", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_1920.db", lpFilePart=0x0) returned 0x51 [0140.393] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0140.393] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_1920.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_1920.db"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0140.393] GetFileType (hFile=0x444) returned 0x1 [0140.393] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0140.393] GetFileType (hFile=0x444) returned 0x1 [0140.393] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0x18 [0140.393] ReadFile (in: hFile=0x444, lpBuffer=0x21f61f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be718, lpOverlapped=0x0 | out: lpBuffer=0x21f61f8*, lpNumberOfBytesRead=0x3be718*=0x18, lpOverlapped=0x0) returned 1 [0140.393] CloseHandle (hObject=0x444) returned 1 [0140.403] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_1920.db", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_1920.db", lpFilePart=0x0) returned 0x51 [0140.404] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0140.404] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_1920.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_1920.db"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0140.405] GetFileType (hFile=0x444) returned 0x1 [0140.405] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0140.405] GetFileType (hFile=0x444) returned 0x1 [0140.405] WriteFile (in: hFile=0x444, lpBuffer=0x226d348*, nNumberOfBytesToWrite=0x20, lpNumberOfBytesWritten=0x3be628, lpOverlapped=0x0 | out: lpBuffer=0x226d348*, lpNumberOfBytesWritten=0x3be628*=0x20, lpOverlapped=0x0) returned 1 [0140.406] CloseHandle (hObject=0x444) returned 1 [0140.406] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_1920.db", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_1920.db", lpFilePart=0x0) returned 0x51 [0140.406] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_1920.db.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_1920.db.xuy", lpFilePart=0x0) returned 0x55 [0140.406] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0140.406] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_1920.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_1920.db"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xad95dc38, ftCreationTime.dwHighDateTime=0x1d46683, ftLastAccessTime.dwLowDateTime=0xad95dc38, ftLastAccessTime.dwHighDateTime=0x1d46683, ftLastWriteTime.dwLowDateTime=0x3f8a2556, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x20)) returned 1 [0140.406] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0140.406] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_1920.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_1920.db"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_1920.db.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_1920.db.xuy")) returned 1 [0140.407] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_256.db", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_256.db", lpFilePart=0x0) returned 0x50 [0140.407] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0140.408] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_256.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_256.db"), fInfoLevelId=0x0, lpFileInformation=0x226e5f0 | out: lpFileInformation=0x226e5f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xad95dc38, ftCreationTime.dwHighDateTime=0x1d46683, ftLastAccessTime.dwLowDateTime=0xad95dc38, ftLastAccessTime.dwHighDateTime=0x1d46683, ftLastWriteTime.dwLowDateTime=0xad95dc38, ftLastWriteTime.dwHighDateTime=0x1d46683, nFileSizeHigh=0x0, nFileSizeLow=0x100000)) returned 1 [0140.408] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0140.408] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_256.db", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_256.db", lpFilePart=0x0) returned 0x50 [0140.408] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0140.408] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_256.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_256.db"), fInfoLevelId=0x0, lpFileInformation=0x226e758 | out: lpFileInformation=0x226e758*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xad95dc38, ftCreationTime.dwHighDateTime=0x1d46683, ftLastAccessTime.dwLowDateTime=0xad95dc38, ftLastAccessTime.dwHighDateTime=0x1d46683, ftLastWriteTime.dwLowDateTime=0xad95dc38, ftLastWriteTime.dwHighDateTime=0x1d46683, nFileSizeHigh=0x0, nFileSizeLow=0x100000)) returned 1 [0140.408] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0140.408] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_256.db", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_256.db", lpFilePart=0x0) returned 0x50 [0140.408] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0140.408] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_256.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_256.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0140.408] GetFileType (hFile=0x444) returned 0x1 [0140.408] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0140.408] GetFileType (hFile=0x444) returned 0x1 [0140.409] ReadFile (in: hFile=0x444, lpBuffer=0x2270b58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x2270b58*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0140.419] CloseHandle (hObject=0x444) returned 1 [0140.419] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_256.db", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_256.db", lpFilePart=0x0) returned 0x50 [0140.419] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0140.419] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_256.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_256.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0140.420] GetFileType (hFile=0x444) returned 0x1 [0140.420] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0140.420] GetFileType (hFile=0x444) returned 0x1 [0140.420] WriteFile (in: hFile=0x444, lpBuffer=0x226e8a0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x226e8a0*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0140.420] CloseHandle (hObject=0x444) returned 1 [0140.420] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_256.db", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_256.db", lpFilePart=0x0) returned 0x50 [0140.420] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_256.db.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_256.db.xuy", lpFilePart=0x0) returned 0x54 [0140.421] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0140.421] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_256.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_256.db"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xad95dc38, ftCreationTime.dwHighDateTime=0x1d46683, ftLastAccessTime.dwLowDateTime=0xad95dc38, ftLastAccessTime.dwHighDateTime=0x1d46683, ftLastWriteTime.dwLowDateTime=0x3f8c8812, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x100000)) returned 1 [0140.421] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0140.421] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_256.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_256.db"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_256.db.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_256.db.xuy")) returned 1 [0140.422] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_2560.db", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_2560.db", lpFilePart=0x0) returned 0x51 [0140.422] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0140.422] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_2560.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_2560.db"), fInfoLevelId=0x0, lpFileInformation=0x22ecf50 | out: lpFileInformation=0x22ecf50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xad95dc38, ftCreationTime.dwHighDateTime=0x1d46683, ftLastAccessTime.dwLowDateTime=0xad95dc38, ftLastAccessTime.dwHighDateTime=0x1d46683, ftLastWriteTime.dwLowDateTime=0xad95dc38, ftLastWriteTime.dwHighDateTime=0x1d46683, nFileSizeHigh=0x0, nFileSizeLow=0x18)) returned 1 [0140.422] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0140.422] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_2560.db", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_2560.db", lpFilePart=0x0) returned 0x51 [0140.422] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0140.422] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_2560.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_2560.db"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0140.422] GetFileType (hFile=0x444) returned 0x1 [0140.422] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0140.422] GetFileType (hFile=0x444) returned 0x1 [0140.422] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0x18 [0140.422] ReadFile (in: hFile=0x444, lpBuffer=0x22ed250, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be718, lpOverlapped=0x0 | out: lpBuffer=0x22ed250*, lpNumberOfBytesRead=0x3be718*=0x18, lpOverlapped=0x0) returned 1 [0140.423] CloseHandle (hObject=0x444) returned 1 [0140.463] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_2560.db", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_2560.db", lpFilePart=0x0) returned 0x51 [0140.463] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0140.463] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_2560.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_2560.db"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0140.464] GetFileType (hFile=0x444) returned 0x1 [0140.464] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0140.464] GetFileType (hFile=0x444) returned 0x1 [0140.464] WriteFile (in: hFile=0x444, lpBuffer=0x2164398*, nNumberOfBytesToWrite=0x20, lpNumberOfBytesWritten=0x3be628, lpOverlapped=0x0 | out: lpBuffer=0x2164398*, lpNumberOfBytesWritten=0x3be628*=0x20, lpOverlapped=0x0) returned 1 [0140.465] CloseHandle (hObject=0x444) returned 1 [0140.465] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_2560.db", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_2560.db", lpFilePart=0x0) returned 0x51 [0140.465] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_2560.db.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_2560.db.xuy", lpFilePart=0x0) returned 0x55 [0140.466] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0140.466] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_2560.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_2560.db"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xad95dc38, ftCreationTime.dwHighDateTime=0x1d46683, ftLastAccessTime.dwLowDateTime=0xad95dc38, ftLastAccessTime.dwHighDateTime=0x1d46683, ftLastWriteTime.dwLowDateTime=0x3f914d61, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x20)) returned 1 [0140.466] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0140.466] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_2560.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_2560.db"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_2560.db.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_2560.db.xuy")) returned 1 [0140.467] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_32.db", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_32.db", lpFilePart=0x0) returned 0x4f [0140.467] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0140.467] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_32.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_32.db"), fInfoLevelId=0x0, lpFileInformation=0x2165640 | out: lpFileInformation=0x2165640*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xad95dc38, ftCreationTime.dwHighDateTime=0x1d46683, ftLastAccessTime.dwLowDateTime=0xad95dc38, ftLastAccessTime.dwHighDateTime=0x1d46683, ftLastWriteTime.dwLowDateTime=0xad95dc38, ftLastWriteTime.dwHighDateTime=0x1d46683, nFileSizeHigh=0x0, nFileSizeLow=0x100000)) returned 1 [0140.467] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0140.467] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_32.db", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_32.db", lpFilePart=0x0) returned 0x4f [0140.467] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0140.467] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_32.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_32.db"), fInfoLevelId=0x0, lpFileInformation=0x21657a0 | out: lpFileInformation=0x21657a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xad95dc38, ftCreationTime.dwHighDateTime=0x1d46683, ftLastAccessTime.dwLowDateTime=0xad95dc38, ftLastAccessTime.dwHighDateTime=0x1d46683, ftLastWriteTime.dwLowDateTime=0xad95dc38, ftLastWriteTime.dwHighDateTime=0x1d46683, nFileSizeHigh=0x0, nFileSizeLow=0x100000)) returned 1 [0140.467] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0140.467] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_32.db", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_32.db", lpFilePart=0x0) returned 0x4f [0140.468] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0140.468] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_32.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_32.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0140.468] GetFileType (hFile=0x444) returned 0x1 [0140.468] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0140.468] GetFileType (hFile=0x444) returned 0x1 [0140.468] ReadFile (in: hFile=0x444, lpBuffer=0x2167b90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x2167b90*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0140.479] CloseHandle (hObject=0x444) returned 1 [0140.479] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_32.db", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_32.db", lpFilePart=0x0) returned 0x4f [0140.479] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0140.479] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_32.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_32.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0140.479] GetFileType (hFile=0x444) returned 0x1 [0140.479] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0140.479] GetFileType (hFile=0x444) returned 0x1 [0140.479] WriteFile (in: hFile=0x444, lpBuffer=0x21658e0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x21658e0*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0140.479] CloseHandle (hObject=0x444) returned 1 [0140.480] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_32.db", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_32.db", lpFilePart=0x0) returned 0x4f [0140.480] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_32.db.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_32.db.xuy", lpFilePart=0x0) returned 0x53 [0140.480] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0140.480] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_32.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_32.db"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xad95dc38, ftCreationTime.dwHighDateTime=0x1d46683, ftLastAccessTime.dwLowDateTime=0xad95dc38, ftLastAccessTime.dwHighDateTime=0x1d46683, ftLastWriteTime.dwLowDateTime=0x3f93c086, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x100000)) returned 1 [0140.480] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0140.480] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_32.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_32.db"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_32.db.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_32.db.xuy")) returned 1 [0140.481] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_48.db", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_48.db", lpFilePart=0x0) returned 0x4f [0140.481] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0140.481] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_48.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_48.db"), fInfoLevelId=0x0, lpFileInformation=0x21e3f68 | out: lpFileInformation=0x21e3f68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xad95dc38, ftCreationTime.dwHighDateTime=0x1d46683, ftLastAccessTime.dwLowDateTime=0xad95dc38, ftLastAccessTime.dwHighDateTime=0x1d46683, ftLastWriteTime.dwLowDateTime=0xad95dc38, ftLastWriteTime.dwHighDateTime=0x1d46683, nFileSizeHigh=0x0, nFileSizeLow=0x100000)) returned 1 [0140.481] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0140.481] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_48.db", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_48.db", lpFilePart=0x0) returned 0x4f [0140.481] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0140.481] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_48.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_48.db"), fInfoLevelId=0x0, lpFileInformation=0x21e40c8 | out: lpFileInformation=0x21e40c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xad95dc38, ftCreationTime.dwHighDateTime=0x1d46683, ftLastAccessTime.dwLowDateTime=0xad95dc38, ftLastAccessTime.dwHighDateTime=0x1d46683, ftLastWriteTime.dwLowDateTime=0xad95dc38, ftLastWriteTime.dwHighDateTime=0x1d46683, nFileSizeHigh=0x0, nFileSizeLow=0x100000)) returned 1 [0140.481] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0140.481] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_48.db", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_48.db", lpFilePart=0x0) returned 0x4f [0140.481] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0140.481] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_48.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_48.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0140.483] GetFileType (hFile=0x444) returned 0x1 [0140.483] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0140.483] GetFileType (hFile=0x444) returned 0x1 [0140.483] ReadFile (in: hFile=0x444, lpBuffer=0x21e64b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x21e64b8*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0140.494] CloseHandle (hObject=0x444) returned 1 [0140.494] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_48.db", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_48.db", lpFilePart=0x0) returned 0x4f [0140.494] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0140.494] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_48.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_48.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0140.494] GetFileType (hFile=0x444) returned 0x1 [0140.494] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0140.494] GetFileType (hFile=0x444) returned 0x1 [0140.494] WriteFile (in: hFile=0x444, lpBuffer=0x21e4208*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x21e4208*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0140.494] CloseHandle (hObject=0x444) returned 1 [0140.494] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_48.db", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_48.db", lpFilePart=0x0) returned 0x4f [0140.494] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_48.db.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_48.db.xuy", lpFilePart=0x0) returned 0x53 [0140.494] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0140.495] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_48.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_48.db"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xad95dc38, ftCreationTime.dwHighDateTime=0x1d46683, ftLastAccessTime.dwLowDateTime=0xad95dc38, ftLastAccessTime.dwHighDateTime=0x1d46683, ftLastWriteTime.dwLowDateTime=0x3f9615e1, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x100000)) returned 1 [0140.495] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0140.495] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_48.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_48.db"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_48.db.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_48.db.xuy")) returned 1 [0140.496] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_768.db", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_768.db", lpFilePart=0x0) returned 0x50 [0140.496] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0140.496] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_768.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_768.db"), fInfoLevelId=0x0, lpFileInformation=0x2262890 | out: lpFileInformation=0x2262890*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xad95dc38, ftCreationTime.dwHighDateTime=0x1d46683, ftLastAccessTime.dwLowDateTime=0xad95dc38, ftLastAccessTime.dwHighDateTime=0x1d46683, ftLastWriteTime.dwLowDateTime=0xad95dc38, ftLastWriteTime.dwHighDateTime=0x1d46683, nFileSizeHigh=0x0, nFileSizeLow=0x18)) returned 1 [0140.496] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0140.496] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_768.db", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_768.db", lpFilePart=0x0) returned 0x50 [0140.496] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0140.496] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_768.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_768.db"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0140.496] GetFileType (hFile=0x444) returned 0x1 [0140.496] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0140.496] GetFileType (hFile=0x444) returned 0x1 [0140.496] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0x18 [0140.496] ReadFile (in: hFile=0x444, lpBuffer=0x2262b90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be718, lpOverlapped=0x0 | out: lpBuffer=0x2262b90*, lpNumberOfBytesRead=0x3be718*=0x18, lpOverlapped=0x0) returned 1 [0140.497] CloseHandle (hObject=0x444) returned 1 [0140.508] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_768.db", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_768.db", lpFilePart=0x0) returned 0x50 [0140.508] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0140.508] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_768.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_768.db"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0140.509] GetFileType (hFile=0x444) returned 0x1 [0140.509] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0140.509] GetFileType (hFile=0x444) returned 0x1 [0140.510] WriteFile (in: hFile=0x444, lpBuffer=0x22d9ce0*, nNumberOfBytesToWrite=0x20, lpNumberOfBytesWritten=0x3be628, lpOverlapped=0x0 | out: lpBuffer=0x22d9ce0*, lpNumberOfBytesWritten=0x3be628*=0x20, lpOverlapped=0x0) returned 1 [0140.511] CloseHandle (hObject=0x444) returned 1 [0140.511] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_768.db", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_768.db", lpFilePart=0x0) returned 0x50 [0140.511] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_768.db.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_768.db.xuy", lpFilePart=0x0) returned 0x54 [0140.511] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0140.511] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_768.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_768.db"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xad95dc38, ftCreationTime.dwHighDateTime=0x1d46683, ftLastAccessTime.dwLowDateTime=0xad95dc38, ftLastAccessTime.dwHighDateTime=0x1d46683, ftLastWriteTime.dwLowDateTime=0x3f9876e1, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x20)) returned 1 [0140.511] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0140.511] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_768.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_768.db"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_768.db.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_768.db.xuy")) returned 1 [0140.512] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_96.db", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_96.db", lpFilePart=0x0) returned 0x4f [0140.512] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0140.512] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_96.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_96.db"), fInfoLevelId=0x0, lpFileInformation=0x22daf88 | out: lpFileInformation=0x22daf88*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xad95dc38, ftCreationTime.dwHighDateTime=0x1d46683, ftLastAccessTime.dwLowDateTime=0xad95dc38, ftLastAccessTime.dwHighDateTime=0x1d46683, ftLastWriteTime.dwLowDateTime=0xad95dc38, ftLastWriteTime.dwHighDateTime=0x1d46683, nFileSizeHigh=0x0, nFileSizeLow=0x18)) returned 1 [0140.512] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0140.512] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_96.db", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_96.db", lpFilePart=0x0) returned 0x4f [0140.513] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0140.513] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_96.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_96.db"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0140.513] GetFileType (hFile=0x444) returned 0x1 [0140.513] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0140.513] GetFileType (hFile=0x444) returned 0x1 [0140.513] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0x18 [0140.513] ReadFile (in: hFile=0x444, lpBuffer=0x22db278, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be718, lpOverlapped=0x0 | out: lpBuffer=0x22db278*, lpNumberOfBytesRead=0x3be718*=0x18, lpOverlapped=0x0) returned 1 [0140.514] CloseHandle (hObject=0x444) returned 1 [0140.524] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_96.db", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_96.db", lpFilePart=0x0) returned 0x4f [0140.524] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0140.524] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_96.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_96.db"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0140.525] GetFileType (hFile=0x444) returned 0x1 [0140.525] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0140.525] GetFileType (hFile=0x444) returned 0x1 [0140.525] WriteFile (in: hFile=0x444, lpBuffer=0x23523c0*, nNumberOfBytesToWrite=0x20, lpNumberOfBytesWritten=0x3be628, lpOverlapped=0x0 | out: lpBuffer=0x23523c0*, lpNumberOfBytesWritten=0x3be628*=0x20, lpOverlapped=0x0) returned 1 [0140.526] CloseHandle (hObject=0x444) returned 1 [0140.526] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_96.db", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_96.db", lpFilePart=0x0) returned 0x4f [0140.526] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_96.db.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_96.db.xuy", lpFilePart=0x0) returned 0x53 [0140.526] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0140.527] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_96.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_96.db"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xad95dc38, ftCreationTime.dwHighDateTime=0x1d46683, ftLastAccessTime.dwLowDateTime=0xad95dc38, ftLastAccessTime.dwHighDateTime=0x1d46683, ftLastWriteTime.dwLowDateTime=0x3f9ad595, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x20)) returned 1 [0140.527] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0140.527] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_96.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_96.db"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_96.db.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_96.db.xuy")) returned 1 [0140.528] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_custom_stream.db", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_custom_stream.db", lpFilePart=0x0) returned 0x5a [0140.528] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0140.528] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_custom_stream.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_custom_stream.db"), fInfoLevelId=0x0, lpFileInformation=0x2353650 | out: lpFileInformation=0x2353650*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xad95dc38, ftCreationTime.dwHighDateTime=0x1d46683, ftLastAccessTime.dwLowDateTime=0xad95dc38, ftLastAccessTime.dwHighDateTime=0x1d46683, ftLastWriteTime.dwLowDateTime=0xad95dc38, ftLastWriteTime.dwHighDateTime=0x1d46683, nFileSizeHigh=0x0, nFileSizeLow=0x18)) returned 1 [0140.528] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0140.528] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_custom_stream.db", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_custom_stream.db", lpFilePart=0x0) returned 0x5a [0140.528] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0140.528] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_custom_stream.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_custom_stream.db"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0140.528] GetFileType (hFile=0x444) returned 0x1 [0140.528] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0140.528] GetFileType (hFile=0x444) returned 0x1 [0140.528] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0x18 [0140.528] ReadFile (in: hFile=0x444, lpBuffer=0x2353990, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be718, lpOverlapped=0x0 | out: lpBuffer=0x2353990*, lpNumberOfBytesRead=0x3be718*=0x18, lpOverlapped=0x0) returned 1 [0140.529] CloseHandle (hObject=0x444) returned 1 [0140.569] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_custom_stream.db", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_custom_stream.db", lpFilePart=0x0) returned 0x5a [0140.569] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0140.570] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_custom_stream.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_custom_stream.db"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0140.571] GetFileType (hFile=0x444) returned 0x1 [0140.571] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0140.571] GetFileType (hFile=0x444) returned 0x1 [0140.571] WriteFile (in: hFile=0x444, lpBuffer=0x21cab00*, nNumberOfBytesToWrite=0x20, lpNumberOfBytesWritten=0x3be628, lpOverlapped=0x0 | out: lpBuffer=0x21cab00*, lpNumberOfBytesWritten=0x3be628*=0x20, lpOverlapped=0x0) returned 1 [0140.572] CloseHandle (hObject=0x444) returned 1 [0140.573] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_custom_stream.db", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_custom_stream.db", lpFilePart=0x0) returned 0x5a [0140.573] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_custom_stream.db.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_custom_stream.db.xuy", lpFilePart=0x0) returned 0x5e [0140.573] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0140.573] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_custom_stream.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_custom_stream.db"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xad95dc38, ftCreationTime.dwHighDateTime=0x1d46683, ftLastAccessTime.dwLowDateTime=0xad95dc38, ftLastAccessTime.dwHighDateTime=0x1d46683, ftLastWriteTime.dwLowDateTime=0x3fa201cd, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x20)) returned 1 [0140.573] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0140.573] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_custom_stream.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_custom_stream.db"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_custom_stream.db.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_custom_stream.db.xuy")) returned 1 [0140.574] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_exif.db", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_exif.db", lpFilePart=0x0) returned 0x51 [0140.574] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0140.574] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_exif.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_exif.db"), fInfoLevelId=0x0, lpFileInformation=0x21cbdd8 | out: lpFileInformation=0x21cbdd8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xad95dc38, ftCreationTime.dwHighDateTime=0x1d46683, ftLastAccessTime.dwLowDateTime=0xad95dc38, ftLastAccessTime.dwHighDateTime=0x1d46683, ftLastWriteTime.dwLowDateTime=0xad95dc38, ftLastWriteTime.dwHighDateTime=0x1d46683, nFileSizeHigh=0x0, nFileSizeLow=0x18)) returned 1 [0140.574] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0140.574] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_exif.db", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_exif.db", lpFilePart=0x0) returned 0x51 [0140.574] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0140.574] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_exif.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_exif.db"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0140.574] GetFileType (hFile=0x444) returned 0x1 [0140.574] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0140.574] GetFileType (hFile=0x444) returned 0x1 [0140.575] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0x18 [0140.575] ReadFile (in: hFile=0x444, lpBuffer=0x21cc0d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be718, lpOverlapped=0x0 | out: lpBuffer=0x21cc0d8*, lpNumberOfBytesRead=0x3be718*=0x18, lpOverlapped=0x0) returned 1 [0140.575] CloseHandle (hObject=0x444) returned 1 [0140.586] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_exif.db", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_exif.db", lpFilePart=0x0) returned 0x51 [0140.586] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0140.586] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_exif.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_exif.db"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0140.587] GetFileType (hFile=0x444) returned 0x1 [0140.587] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0140.587] GetFileType (hFile=0x444) returned 0x1 [0140.587] WriteFile (in: hFile=0x444, lpBuffer=0x2243228*, nNumberOfBytesToWrite=0x20, lpNumberOfBytesWritten=0x3be628, lpOverlapped=0x0 | out: lpBuffer=0x2243228*, lpNumberOfBytesWritten=0x3be628*=0x20, lpOverlapped=0x0) returned 1 [0140.588] CloseHandle (hObject=0x444) returned 1 [0140.588] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_exif.db", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_exif.db", lpFilePart=0x0) returned 0x51 [0140.588] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_exif.db.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_exif.db.xuy", lpFilePart=0x0) returned 0x55 [0140.588] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0140.588] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_exif.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_exif.db"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xad95dc38, ftCreationTime.dwHighDateTime=0x1d46683, ftLastAccessTime.dwLowDateTime=0xad95dc38, ftLastAccessTime.dwHighDateTime=0x1d46683, ftLastWriteTime.dwLowDateTime=0x3fa45f4a, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x20)) returned 1 [0140.588] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0140.588] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_exif.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_exif.db"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_exif.db.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_exif.db.xuy")) returned 1 [0140.589] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_idx.db", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_idx.db", lpFilePart=0x0) returned 0x50 [0140.589] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0140.589] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_idx.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_idx.db"), fInfoLevelId=0x0, lpFileInformation=0x22444d0 | out: lpFileInformation=0x22444d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xad95dc38, ftCreationTime.dwHighDateTime=0x1d46683, ftLastAccessTime.dwLowDateTime=0xad95dc38, ftLastAccessTime.dwHighDateTime=0x1d46683, ftLastWriteTime.dwLowDateTime=0xad95dc38, ftLastWriteTime.dwHighDateTime=0x1d46683, nFileSizeHigh=0x0, nFileSizeLow=0x1cf8)) returned 1 [0140.590] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0140.590] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_idx.db", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_idx.db", lpFilePart=0x0) returned 0x50 [0140.590] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0140.590] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_idx.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_idx.db"), fInfoLevelId=0x0, lpFileInformation=0x2244638 | out: lpFileInformation=0x2244638*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xad95dc38, ftCreationTime.dwHighDateTime=0x1d46683, ftLastAccessTime.dwLowDateTime=0xad95dc38, ftLastAccessTime.dwHighDateTime=0x1d46683, ftLastWriteTime.dwLowDateTime=0xad95dc38, ftLastWriteTime.dwHighDateTime=0x1d46683, nFileSizeHigh=0x0, nFileSizeLow=0x1cf8)) returned 1 [0140.590] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0140.590] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_idx.db", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_idx.db", lpFilePart=0x0) returned 0x50 [0140.590] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0140.590] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_idx.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_idx.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0140.590] GetFileType (hFile=0x444) returned 0x1 [0140.590] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0140.590] GetFileType (hFile=0x444) returned 0x1 [0140.591] ReadFile (in: hFile=0x444, lpBuffer=0x2246a38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x2246a38*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0140.601] CloseHandle (hObject=0x444) returned 1 [0140.601] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_idx.db", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_idx.db", lpFilePart=0x0) returned 0x50 [0140.601] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0140.602] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_idx.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_idx.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0140.602] GetFileType (hFile=0x444) returned 0x1 [0140.602] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0140.602] GetFileType (hFile=0x444) returned 0x1 [0140.602] WriteFile (in: hFile=0x444, lpBuffer=0x2244780*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x2244780*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0140.602] CloseHandle (hObject=0x444) returned 1 [0140.602] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_idx.db", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_idx.db", lpFilePart=0x0) returned 0x50 [0140.602] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_idx.db.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_idx.db.xuy", lpFilePart=0x0) returned 0x54 [0140.602] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0140.602] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_idx.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_idx.db"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xad95dc38, ftCreationTime.dwHighDateTime=0x1d46683, ftLastAccessTime.dwLowDateTime=0xad95dc38, ftLastAccessTime.dwHighDateTime=0x1d46683, ftLastWriteTime.dwLowDateTime=0x3fa6c1aa, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0140.602] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0140.602] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_idx.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_idx.db"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_idx.db.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_idx.db.xuy")) returned 1 [0140.603] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_sr.db", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_sr.db", lpFilePart=0x0) returned 0x4f [0140.603] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0140.603] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_sr.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_sr.db"), fInfoLevelId=0x0, lpFileInformation=0x22c2e30 | out: lpFileInformation=0x22c2e30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xad95dc38, ftCreationTime.dwHighDateTime=0x1d46683, ftLastAccessTime.dwLowDateTime=0xad95dc38, ftLastAccessTime.dwHighDateTime=0x1d46683, ftLastWriteTime.dwLowDateTime=0xad95dc38, ftLastWriteTime.dwHighDateTime=0x1d46683, nFileSizeHigh=0x0, nFileSizeLow=0x18)) returned 1 [0140.603] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0140.603] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_sr.db", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_sr.db", lpFilePart=0x0) returned 0x4f [0140.604] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0140.604] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_sr.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_sr.db"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0140.604] GetFileType (hFile=0x444) returned 0x1 [0140.604] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0140.604] GetFileType (hFile=0x444) returned 0x1 [0140.604] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0x18 [0140.604] ReadFile (in: hFile=0x444, lpBuffer=0x22c3120, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be718, lpOverlapped=0x0 | out: lpBuffer=0x22c3120*, lpNumberOfBytesRead=0x3be718*=0x18, lpOverlapped=0x0) returned 1 [0140.604] CloseHandle (hObject=0x444) returned 1 [0140.615] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_sr.db", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_sr.db", lpFilePart=0x0) returned 0x4f [0140.615] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0140.615] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_sr.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_sr.db"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0140.617] GetFileType (hFile=0x444) returned 0x1 [0140.617] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0140.617] GetFileType (hFile=0x444) returned 0x1 [0140.617] WriteFile (in: hFile=0x444, lpBuffer=0x233a268*, nNumberOfBytesToWrite=0x20, lpNumberOfBytesWritten=0x3be628, lpOverlapped=0x0 | out: lpBuffer=0x233a268*, lpNumberOfBytesWritten=0x3be628*=0x20, lpOverlapped=0x0) returned 1 [0140.617] CloseHandle (hObject=0x444) returned 1 [0140.618] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_sr.db", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_sr.db", lpFilePart=0x0) returned 0x4f [0140.618] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_sr.db.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_sr.db.xuy", lpFilePart=0x0) returned 0x53 [0140.618] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0140.618] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_sr.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_sr.db"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xad95dc38, ftCreationTime.dwHighDateTime=0x1d46683, ftLastAccessTime.dwLowDateTime=0xad95dc38, ftLastAccessTime.dwHighDateTime=0x1d46683, ftLastWriteTime.dwLowDateTime=0x3fa923f4, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x20)) returned 1 [0140.618] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0140.618] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_sr.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_sr.db"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_sr.db.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_sr.db.xuy")) returned 1 [0140.619] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_wide.db", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_wide.db", lpFilePart=0x0) returned 0x51 [0140.619] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0140.619] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_wide.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_wide.db"), fInfoLevelId=0x0, lpFileInformation=0x233b4f8 | out: lpFileInformation=0x233b4f8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xad95dc38, ftCreationTime.dwHighDateTime=0x1d46683, ftLastAccessTime.dwLowDateTime=0xad95dc38, ftLastAccessTime.dwHighDateTime=0x1d46683, ftLastWriteTime.dwLowDateTime=0xad95dc38, ftLastWriteTime.dwHighDateTime=0x1d46683, nFileSizeHigh=0x0, nFileSizeLow=0x18)) returned 1 [0140.619] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0140.619] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_wide.db", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_wide.db", lpFilePart=0x0) returned 0x51 [0140.619] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0140.619] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_wide.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_wide.db"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0140.619] GetFileType (hFile=0x444) returned 0x1 [0140.619] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0140.620] GetFileType (hFile=0x444) returned 0x1 [0140.620] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0x18 [0140.620] ReadFile (in: hFile=0x444, lpBuffer=0x233b7f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be718, lpOverlapped=0x0 | out: lpBuffer=0x233b7f8*, lpNumberOfBytesRead=0x3be718*=0x18, lpOverlapped=0x0) returned 1 [0140.620] CloseHandle (hObject=0x444) returned 1 [0140.660] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_wide.db", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_wide.db", lpFilePart=0x0) returned 0x51 [0140.660] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0140.660] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_wide.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_wide.db"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0140.662] GetFileType (hFile=0x444) returned 0x1 [0140.662] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0140.662] GetFileType (hFile=0x444) returned 0x1 [0140.662] WriteFile (in: hFile=0x444, lpBuffer=0x21b2900*, nNumberOfBytesToWrite=0x20, lpNumberOfBytesWritten=0x3be628, lpOverlapped=0x0 | out: lpBuffer=0x21b2900*, lpNumberOfBytesWritten=0x3be628*=0x20, lpOverlapped=0x0) returned 1 [0140.662] CloseHandle (hObject=0x444) returned 1 [0140.663] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_wide.db", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_wide.db", lpFilePart=0x0) returned 0x51 [0140.663] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_wide.db.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_wide.db.xuy", lpFilePart=0x0) returned 0x55 [0140.663] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0140.663] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_wide.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_wide.db"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xad95dc38, ftCreationTime.dwHighDateTime=0x1d46683, ftLastAccessTime.dwLowDateTime=0xad95dc38, ftLastAccessTime.dwHighDateTime=0x1d46683, ftLastWriteTime.dwLowDateTime=0x3fb04c3d, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x20)) returned 1 [0140.663] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0140.663] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_wide.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_wide.db"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_wide.db.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_wide.db.xuy")) returned 1 [0140.664] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_wide_alternate.db", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_wide_alternate.db", lpFilePart=0x0) returned 0x5b [0140.664] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0140.664] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_wide_alternate.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_wide_alternate.db"), fInfoLevelId=0x0, lpFileInformation=0x21b3ba8 | out: lpFileInformation=0x21b3ba8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xad95dc38, ftCreationTime.dwHighDateTime=0x1d46683, ftLastAccessTime.dwLowDateTime=0xad95dc38, ftLastAccessTime.dwHighDateTime=0x1d46683, ftLastWriteTime.dwLowDateTime=0xad95dc38, ftLastWriteTime.dwHighDateTime=0x1d46683, nFileSizeHigh=0x0, nFileSizeLow=0x18)) returned 1 [0140.664] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0140.664] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_wide_alternate.db", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_wide_alternate.db", lpFilePart=0x0) returned 0x5b [0140.664] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0140.664] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_wide_alternate.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_wide_alternate.db"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0140.665] GetFileType (hFile=0x444) returned 0x1 [0140.665] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0140.665] GetFileType (hFile=0x444) returned 0x1 [0140.665] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0x18 [0140.665] ReadFile (in: hFile=0x444, lpBuffer=0x21b3ef8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be718, lpOverlapped=0x0 | out: lpBuffer=0x21b3ef8*, lpNumberOfBytesRead=0x3be718*=0x18, lpOverlapped=0x0) returned 1 [0140.665] CloseHandle (hObject=0x444) returned 1 [0140.676] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_wide_alternate.db", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_wide_alternate.db", lpFilePart=0x0) returned 0x5b [0140.676] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0140.676] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_wide_alternate.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_wide_alternate.db"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0140.677] GetFileType (hFile=0x444) returned 0x1 [0140.678] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0140.678] GetFileType (hFile=0x444) returned 0x1 [0140.678] WriteFile (in: hFile=0x444, lpBuffer=0x222b070*, nNumberOfBytesToWrite=0x20, lpNumberOfBytesWritten=0x3be628, lpOverlapped=0x0 | out: lpBuffer=0x222b070*, lpNumberOfBytesWritten=0x3be628*=0x20, lpOverlapped=0x0) returned 1 [0140.678] CloseHandle (hObject=0x444) returned 1 [0140.679] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_wide_alternate.db", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_wide_alternate.db", lpFilePart=0x0) returned 0x5b [0140.679] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_wide_alternate.db.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_wide_alternate.db.xuy", lpFilePart=0x0) returned 0x5f [0140.679] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0140.679] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_wide_alternate.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_wide_alternate.db"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xad95dc38, ftCreationTime.dwHighDateTime=0x1d46683, ftLastAccessTime.dwLowDateTime=0xad95dc38, ftLastAccessTime.dwHighDateTime=0x1d46683, ftLastWriteTime.dwLowDateTime=0x3fb2ae82, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x20)) returned 1 [0140.679] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0140.679] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_wide_alternate.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_wide_alternate.db"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_wide_alternate.db.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_wide_alternate.db.xuy")) returned 1 [0140.680] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0140.680] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\GameExplorer", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\GameExplorer", lpFilePart=0x0) returned 0x42 [0140.680] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\GameExplorer\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\GameExplorer\\", lpFilePart=0x0) returned 0x43 [0140.680] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\GameExplorer\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7670 [0140.680] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0140.680] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0140.681] FindClose (in: hFindFile=0x5d7670 | out: hFindFile=0x5d7670) returned 1 [0140.681] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0140.681] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0140.681] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0140.681] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\GameExplorer", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\GameExplorer", lpFilePart=0x0) returned 0x42 [0140.681] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\GameExplorer\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\GameExplorer\\", lpFilePart=0x0) returned 0x43 [0140.681] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\GameExplorer\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d78b0 [0140.681] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0140.681] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0140.681] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0140.681] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0140.681] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0140.681] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0140.681] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\History", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\History", lpFilePart=0x0) returned 0x3d [0140.681] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\History\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\History\\", lpFilePart=0x0) returned 0x3e [0140.681] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\History\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7a30 [0140.682] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0140.682] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0140.682] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0140.682] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0140.682] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0140.682] FindClose (in: hFindFile=0x5d7a30 | out: hFindFile=0x5d7a30) returned 1 [0140.682] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0140.682] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0140.682] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0140.682] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\History", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\History", lpFilePart=0x0) returned 0x3d [0140.682] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\History\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\History\\", lpFilePart=0x0) returned 0x3e [0140.682] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\History\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d73d0 [0140.683] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0140.683] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0140.683] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0140.683] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0140.683] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0140.683] FindClose (in: hFindFile=0x5d73d0 | out: hFindFile=0x5d73d0) returned 1 [0140.683] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0140.683] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0140.683] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\History\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\History\\desktop.ini", lpFilePart=0x0) returned 0x49 [0140.683] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0140.683] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\History\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\history\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x2230118 | out: lpFileInformation=0x2230118*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c2ed337, ftCreationTime.dwHighDateTime=0x1d2d426, ftLastAccessTime.dwLowDateTime=0x3c2ed337, ftLastAccessTime.dwHighDateTime=0x1d2d426, ftLastWriteTime.dwLowDateTime=0x3c2ed337, ftLastWriteTime.dwHighDateTime=0x1d2d426, nFileSizeHigh=0x0, nFileSizeLow=0x82)) returned 1 [0140.683] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0140.683] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\History\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\History\\desktop.ini", lpFilePart=0x0) returned 0x49 [0140.684] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0140.684] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\History\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\history\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0140.684] GetFileType (hFile=0x444) returned 0x1 [0140.684] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0140.684] GetFileType (hFile=0x444) returned 0x1 [0140.684] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0x82 [0140.684] ReadFile (in: hFile=0x444, lpBuffer=0x2230448, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be718, lpOverlapped=0x0 | out: lpBuffer=0x2230448*, lpNumberOfBytesRead=0x3be718*=0x82, lpOverlapped=0x0) returned 1 [0140.684] CloseHandle (hObject=0x444) returned 1 [0140.700] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\History\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\History\\desktop.ini", lpFilePart=0x0) returned 0x49 [0140.700] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0140.700] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\History\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\history\\desktop.ini"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0140.702] GetFileType (hFile=0x444) returned 0x1 [0140.702] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0140.702] GetFileType (hFile=0x444) returned 0x1 [0140.702] WriteFile (in: hFile=0x444, lpBuffer=0x22a7660*, nNumberOfBytesToWrite=0x90, lpNumberOfBytesWritten=0x3be628, lpOverlapped=0x0 | out: lpBuffer=0x22a7660*, lpNumberOfBytesWritten=0x3be628*=0x90, lpOverlapped=0x0) returned 1 [0140.703] CloseHandle (hObject=0x444) returned 1 [0140.703] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\History\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\History\\desktop.ini", lpFilePart=0x0) returned 0x49 [0140.703] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\History\\desktop.ini.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\History\\desktop.ini.xuy", lpFilePart=0x0) returned 0x4d [0140.703] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0140.703] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\History\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\history\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c2ed337, ftCreationTime.dwHighDateTime=0x1d2d426, ftLastAccessTime.dwLowDateTime=0x3c2ed337, ftLastAccessTime.dwHighDateTime=0x1d2d426, ftLastWriteTime.dwLowDateTime=0x3fb7731c, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x90)) returned 1 [0140.703] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0140.703] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\History\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\history\\desktop.ini"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\History\\desktop.ini.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\history\\desktop.ini.xuy")) returned 1 [0140.705] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0140.705] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5", lpFilePart=0x0) returned 0x49 [0140.705] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\", lpFilePart=0x0) returned 0x4a [0140.705] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d78b0 [0140.705] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0140.706] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0140.706] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0140.706] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0140.706] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0140.706] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0140.707] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0140.707] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0140.707] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5", lpFilePart=0x0) returned 0x49 [0140.707] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\", lpFilePart=0x0) returned 0x4a [0140.707] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7550 [0140.707] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0140.708] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0140.708] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0140.708] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0140.708] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0140.708] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0140.709] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0140.709] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\container.dat", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\container.dat", lpFilePart=0x0) returned 0x57 [0140.709] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0140.709] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\history\\history.ie5\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x22aae70 | out: lpFileInformation=0x22aae70*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xae11c718, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xae11c718, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xae11c718, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0140.709] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0140.709] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\container.dat", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\container.dat", lpFilePart=0x0) returned 0x57 [0140.709] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0140.710] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\history\\history.ie5\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0140.710] GetFileType (hFile=0x444) returned 0x1 [0140.710] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0140.710] GetFileType (hFile=0x444) returned 0x1 [0140.710] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x0 [0140.710] CloseHandle (hObject=0x444) returned 1 [0140.721] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\container.dat", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\container.dat", lpFilePart=0x0) returned 0x57 [0140.721] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0140.721] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\history\\history.ie5\\container.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0140.722] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb070) returned 1 [0140.723] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbcf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\container.dat", lpFilePart=0x0) returned 0x57 [0140.723] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0140.723] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\history\\history.ie5\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x3bc270 | out: lpFileInformation=0x3bc270*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xae11c718, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xae11c718, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xae11c718, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0140.723] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc150) returned 1 [0140.723] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbd10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\container.dat", lpFilePart=0x0) returned 0x57 [0140.723] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0140.723] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\history\\history.ie5\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x2321ad8 | out: lpFileInformation=0x2321ad8*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xae11c718, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xae11c718, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xae11c718, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0140.723] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc150) returned 1 [0140.723] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\container.dat", lpFilePart=0x0) returned 0x57 [0140.723] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc050) returned 1 [0140.723] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\history\\history.ie5\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0140.723] GetFileType (hFile=0x444) returned 0x1 [0140.723] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbfc0) returned 1 [0140.723] GetFileType (hFile=0x444) returned 0x1 [0140.723] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc1e8 | out: lpFileSizeHigh=0x3bc1e8*=0x0) returned 0x0 [0140.723] CloseHandle (hObject=0x444) returned 1 [0140.763] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\container.dat", lpFilePart=0x0) returned 0x57 [0140.763] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc050) returned 1 [0140.763] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\history\\history.ie5\\container.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0140.765] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8ae0) returned 1 [0140.766] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0140.766] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012018111120181112", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012018111120181112", lpFilePart=0x0) returned 0x62 [0140.766] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012018111120181112\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012018111120181112\\", lpFilePart=0x0) returned 0x63 [0140.766] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012018111120181112\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d7370 [0140.766] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0140.767] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0140.767] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0140.767] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0140.767] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0140.767] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0140.767] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0140.767] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012018111120181112", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012018111120181112", lpFilePart=0x0) returned 0x62 [0140.767] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012018111120181112\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012018111120181112\\", lpFilePart=0x0) returned 0x63 [0140.767] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012018111120181112\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d7550 [0140.767] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0140.767] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0140.768] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0140.768] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0140.768] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0140.768] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0140.768] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012018111120181112\\container.dat", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012018111120181112\\container.dat", lpFilePart=0x0) returned 0x70 [0140.768] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0140.768] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012018111120181112\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\history\\history.ie5\\mshist012018111120181112\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x219b388 | out: lpFileInformation=0x219b388*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xf1b670e8, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf1b670e8, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0xf1b670e8, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0140.768] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0140.768] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012018111120181112\\container.dat", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012018111120181112\\container.dat", lpFilePart=0x0) returned 0x70 [0140.768] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0140.768] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012018111120181112\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\history\\history.ie5\\mshist012018111120181112\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0140.768] GetFileType (hFile=0x444) returned 0x1 [0140.768] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0140.768] GetFileType (hFile=0x444) returned 0x1 [0140.768] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be708 | out: lpFileSizeHigh=0x3be708*=0x0) returned 0x0 [0140.769] CloseHandle (hObject=0x444) returned 1 [0140.806] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012018111120181112\\container.dat", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012018111120181112\\container.dat", lpFilePart=0x0) returned 0x70 [0140.806] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0140.806] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012018111120181112\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\history\\history.ie5\\mshist012018111120181112\\container.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0140.807] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb000) returned 1 [0140.808] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012018111120181112\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbc80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012018111120181112\\container.dat", lpFilePart=0x0) returned 0x70 [0140.808] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc120) returned 1 [0140.808] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012018111120181112\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\history\\history.ie5\\mshist012018111120181112\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x3bc200 | out: lpFileInformation=0x3bc200*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xf1b670e8, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf1b670e8, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0xf1b670e8, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0140.808] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc0e0) returned 1 [0140.808] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012018111120181112\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012018111120181112\\container.dat", lpFilePart=0x0) returned 0x70 [0140.808] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc120) returned 1 [0140.808] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012018111120181112\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\history\\history.ie5\\mshist012018111120181112\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x2212108 | out: lpFileInformation=0x2212108*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xf1b670e8, ftCreationTime.dwHighDateTime=0x1d47902, ftLastAccessTime.dwLowDateTime=0xf1b670e8, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0xf1b670e8, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0140.808] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc0e0) returned 1 [0140.808] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012018111120181112\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbb00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012018111120181112\\container.dat", lpFilePart=0x0) returned 0x70 [0140.808] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbfe0) returned 1 [0140.808] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012018111120181112\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\history\\history.ie5\\mshist012018111120181112\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0140.808] GetFileType (hFile=0x444) returned 0x1 [0140.808] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbf50) returned 1 [0140.808] GetFileType (hFile=0x444) returned 0x1 [0140.808] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc178 | out: lpFileSizeHigh=0x3bc178*=0x0) returned 0x0 [0140.808] CloseHandle (hObject=0x444) returned 1 [0140.847] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012018111120181112\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbb00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012018111120181112\\container.dat", lpFilePart=0x0) returned 0x70 [0140.847] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbfe0) returned 1 [0140.847] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012018111120181112\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\history\\history.ie5\\mshist012018111120181112\\container.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0140.849] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8a70) returned 1 [0140.850] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0140.850] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\History\\Low", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\History\\Low", lpFilePart=0x0) returned 0x41 [0140.850] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\", lpFilePart=0x0) returned 0x42 [0140.850] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d78b0 [0140.850] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0140.850] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0140.850] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0140.850] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0140.850] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0140.851] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0140.851] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0140.851] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\History\\Low", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\History\\Low", lpFilePart=0x0) returned 0x41 [0140.851] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\", lpFilePart=0x0) returned 0x42 [0140.851] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d81b0 [0140.851] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0140.851] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0140.851] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0140.851] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0140.851] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0140.851] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0140.851] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0140.851] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5", lpFilePart=0x0) returned 0x4d [0140.851] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\", lpFilePart=0x0) returned 0x4e [0140.851] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d7c70 [0140.852] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0140.852] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0140.852] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0140.852] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0140.852] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0140.852] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0140.852] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0140.852] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5", lpFilePart=0x0) returned 0x4d [0140.852] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\", lpFilePart=0x0) returned 0x4e [0140.852] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d7670 [0140.852] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0140.853] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0140.853] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0140.853] FindClose (in: hFindFile=0x5d7670 | out: hFindFile=0x5d7670) returned 1 [0140.853] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0140.853] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0140.853] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\container.dat", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\container.dat", lpFilePart=0x0) returned 0x5b [0140.853] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0140.853] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\history\\low\\history.ie5\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x228cc40 | out: lpFileInformation=0x228cc40*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x90ebcf2f, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x90ebcf2f, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x90ebcf2f, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0140.853] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0140.853] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\container.dat", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\container.dat", lpFilePart=0x0) returned 0x5b [0140.853] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0140.853] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\history\\low\\history.ie5\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0140.853] GetFileType (hFile=0x444) returned 0x1 [0140.853] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0140.853] GetFileType (hFile=0x444) returned 0x1 [0140.854] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be708 | out: lpFileSizeHigh=0x3be708*=0x0) returned 0x0 [0140.854] CloseHandle (hObject=0x444) returned 1 [0140.891] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\container.dat", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\container.dat", lpFilePart=0x0) returned 0x5b [0140.891] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0140.891] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\history\\low\\history.ie5\\container.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0140.892] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb000) returned 1 [0140.893] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbc80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\container.dat", lpFilePart=0x0) returned 0x5b [0140.893] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc120) returned 1 [0140.893] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\history\\low\\history.ie5\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x3bc200 | out: lpFileInformation=0x3bc200*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x90ebcf2f, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x90ebcf2f, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x90ebcf2f, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0140.893] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc0e0) returned 1 [0140.893] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\container.dat", lpFilePart=0x0) returned 0x5b [0140.893] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc120) returned 1 [0140.893] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\history\\low\\history.ie5\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x23038d0 | out: lpFileInformation=0x23038d0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x90ebcf2f, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x90ebcf2f, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x90ebcf2f, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0140.893] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc0e0) returned 1 [0140.893] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbb00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\container.dat", lpFilePart=0x0) returned 0x5b [0140.893] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbfe0) returned 1 [0140.893] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\history\\low\\history.ie5\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0140.893] GetFileType (hFile=0x444) returned 0x1 [0140.893] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbf50) returned 1 [0140.893] GetFileType (hFile=0x444) returned 0x1 [0140.893] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc178 | out: lpFileSizeHigh=0x3bc178*=0x0) returned 0x0 [0140.893] CloseHandle (hObject=0x444) returned 1 [0140.933] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbb00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\container.dat", lpFilePart=0x0) returned 0x5b [0140.933] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbfe0) returned 1 [0140.933] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\history\\low\\history.ie5\\container.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0140.935] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8a70) returned 1 [0140.935] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0140.936] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IECompatCache", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IECompatCache", lpFilePart=0x0) returned 0x43 [0140.936] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IECompatCache\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IECompatCache\\", lpFilePart=0x0) returned 0x44 [0140.936] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IECompatCache\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7e50 [0140.936] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0140.936] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0140.936] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0140.936] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0140.936] FindClose (in: hFindFile=0x5d7e50 | out: hFindFile=0x5d7e50) returned 1 [0140.936] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0140.936] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0140.936] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0140.937] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IECompatCache", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IECompatCache", lpFilePart=0x0) returned 0x43 [0140.937] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IECompatCache\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IECompatCache\\", lpFilePart=0x0) returned 0x44 [0140.937] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IECompatCache\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7d90 [0140.937] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0140.937] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0140.937] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0140.937] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0140.937] FindClose (in: hFindFile=0x5d7d90 | out: hFindFile=0x5d7d90) returned 1 [0140.937] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0140.937] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0140.937] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IECompatCache\\container.dat", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IECompatCache\\container.dat", lpFilePart=0x0) returned 0x51 [0140.937] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0140.937] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IECompatCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\iecompatcache\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x217cab8 | out: lpFileInformation=0x217cab8*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x4cefcd44, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x4cefcd44, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x4cefcd44, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0140.938] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0140.938] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IECompatCache\\container.dat", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IECompatCache\\container.dat", lpFilePart=0x0) returned 0x51 [0140.938] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0140.938] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IECompatCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\iecompatcache\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0140.938] GetFileType (hFile=0x444) returned 0x1 [0140.938] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0140.938] GetFileType (hFile=0x444) returned 0x1 [0140.938] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0x0 [0140.938] CloseHandle (hObject=0x444) returned 1 [0140.976] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IECompatCache\\container.dat", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IECompatCache\\container.dat", lpFilePart=0x0) returned 0x51 [0140.976] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0140.976] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IECompatCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\iecompatcache\\container.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0140.977] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb0e0) returned 1 [0140.978] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IECompatCache\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IECompatCache\\container.dat", lpFilePart=0x0) returned 0x51 [0140.978] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc200) returned 1 [0140.978] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IECompatCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\iecompatcache\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x3bc2e0 | out: lpFileInformation=0x3bc2e0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x4cefcd44, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x4cefcd44, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x4cefcd44, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0140.978] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1c0) returned 1 [0140.978] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IECompatCache\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbd80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IECompatCache\\container.dat", lpFilePart=0x0) returned 0x51 [0140.978] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc200) returned 1 [0140.978] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IECompatCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\iecompatcache\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x21f36f8 | out: lpFileInformation=0x21f36f8*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x4cefcd44, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x4cefcd44, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x4cefcd44, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0140.978] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1c0) returned 1 [0140.978] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IECompatCache\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IECompatCache\\container.dat", lpFilePart=0x0) returned 0x51 [0140.978] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0c0) returned 1 [0140.978] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IECompatCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\iecompatcache\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0140.978] GetFileType (hFile=0x444) returned 0x1 [0140.978] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc030) returned 1 [0140.978] GetFileType (hFile=0x444) returned 0x1 [0140.978] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc258 | out: lpFileSizeHigh=0x3bc258*=0x0) returned 0x0 [0140.979] CloseHandle (hObject=0x444) returned 1 [0141.018] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IECompatCache\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IECompatCache\\container.dat", lpFilePart=0x0) returned 0x51 [0141.018] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0c0) returned 1 [0141.018] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IECompatCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\iecompatcache\\container.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0141.020] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8b50) returned 1 [0141.020] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0141.020] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IECompatCache\\Low", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IECompatCache\\Low", lpFilePart=0x0) returned 0x47 [0141.020] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IECompatCache\\Low\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IECompatCache\\Low\\", lpFilePart=0x0) returned 0x48 [0141.020] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IECompatCache\\Low\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7e50 [0141.021] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0141.021] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0141.021] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0141.021] FindClose (in: hFindFile=0x5d7e50 | out: hFindFile=0x5d7e50) returned 1 [0141.021] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0141.021] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0141.021] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0141.021] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IECompatCache\\Low", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IECompatCache\\Low", lpFilePart=0x0) returned 0x47 [0141.021] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IECompatCache\\Low\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IECompatCache\\Low\\", lpFilePart=0x0) returned 0x48 [0141.021] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IECompatCache\\Low\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d78b0 [0141.022] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0141.022] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0141.022] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0141.022] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0141.022] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0141.022] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0141.022] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IECompatCache\\Low\\container.dat", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IECompatCache\\Low\\container.dat", lpFilePart=0x0) returned 0x55 [0141.022] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0141.022] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IECompatCache\\Low\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\iecompatcache\\low\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x226c280 | out: lpFileInformation=0x226c280*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x90b9bcea, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x90b9bcea, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x90b9bcea, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0141.022] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0141.022] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IECompatCache\\Low\\container.dat", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IECompatCache\\Low\\container.dat", lpFilePart=0x0) returned 0x55 [0141.022] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0141.022] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IECompatCache\\Low\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\iecompatcache\\low\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0141.023] GetFileType (hFile=0x444) returned 0x1 [0141.023] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0141.023] GetFileType (hFile=0x444) returned 0x1 [0141.023] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x0 [0141.023] CloseHandle (hObject=0x444) returned 1 [0141.101] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IECompatCache\\Low\\container.dat", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IECompatCache\\Low\\container.dat", lpFilePart=0x0) returned 0x55 [0141.101] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0141.101] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IECompatCache\\Low\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\iecompatcache\\low\\container.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0141.103] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb070) returned 1 [0141.103] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IECompatCache\\Low\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbcf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IECompatCache\\Low\\container.dat", lpFilePart=0x0) returned 0x55 [0141.103] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0141.103] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IECompatCache\\Low\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\iecompatcache\\low\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x3bc270 | out: lpFileInformation=0x3bc270*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x90b9bcea, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x90b9bcea, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x90b9bcea, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0141.103] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc150) returned 1 [0141.103] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IECompatCache\\Low\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbd10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IECompatCache\\Low\\container.dat", lpFilePart=0x0) returned 0x55 [0141.103] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0141.103] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IECompatCache\\Low\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\iecompatcache\\low\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x22e2ee8 | out: lpFileInformation=0x22e2ee8*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x90b9bcea, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x90b9bcea, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x90b9bcea, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0141.103] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc150) returned 1 [0141.103] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IECompatCache\\Low\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IECompatCache\\Low\\container.dat", lpFilePart=0x0) returned 0x55 [0141.104] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc050) returned 1 [0141.104] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IECompatCache\\Low\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\iecompatcache\\low\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0141.104] GetFileType (hFile=0x444) returned 0x1 [0141.104] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbfc0) returned 1 [0141.104] GetFileType (hFile=0x444) returned 0x1 [0141.104] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc1e8 | out: lpFileSizeHigh=0x3bc1e8*=0x0) returned 0x0 [0141.104] CloseHandle (hObject=0x444) returned 1 [0141.143] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IECompatCache\\Low\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IECompatCache\\Low\\container.dat", lpFilePart=0x0) returned 0x55 [0141.143] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc050) returned 1 [0141.143] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IECompatCache\\Low\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\iecompatcache\\low\\container.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0141.145] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8ae0) returned 1 [0141.146] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0141.146] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IECompatUaCache", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IECompatUaCache", lpFilePart=0x0) returned 0x45 [0141.146] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IECompatUaCache\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IECompatUaCache\\", lpFilePart=0x0) returned 0x46 [0141.146] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IECompatUaCache\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7fd0 [0141.146] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0141.146] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0141.146] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0141.147] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0141.147] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0141.147] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0141.147] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0141.147] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0141.147] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IECompatUaCache", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IECompatUaCache", lpFilePart=0x0) returned 0x45 [0141.147] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IECompatUaCache\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IECompatUaCache\\", lpFilePart=0x0) returned 0x46 [0141.147] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IECompatUaCache\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7c70 [0141.147] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0141.147] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0141.147] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0141.148] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0141.148] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0141.148] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0141.148] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0141.148] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IECompatUaCache\\container.dat", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IECompatUaCache\\container.dat", lpFilePart=0x0) returned 0x53 [0141.148] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0141.148] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IECompatUaCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\iecompatuacache\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x215bb98 | out: lpFileInformation=0x215bb98*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x4cf007f6, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x4cf007f6, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x4cf007f6, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0141.148] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0141.148] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IECompatUaCache\\container.dat", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IECompatUaCache\\container.dat", lpFilePart=0x0) returned 0x53 [0141.148] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0141.148] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IECompatUaCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\iecompatuacache\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0141.148] GetFileType (hFile=0x444) returned 0x1 [0141.148] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0141.148] GetFileType (hFile=0x444) returned 0x1 [0141.148] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0x0 [0141.148] CloseHandle (hObject=0x444) returned 1 [0141.187] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IECompatUaCache\\container.dat", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IECompatUaCache\\container.dat", lpFilePart=0x0) returned 0x53 [0141.187] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0141.187] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IECompatUaCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\iecompatuacache\\container.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0141.188] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb0e0) returned 1 [0141.189] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IECompatUaCache\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IECompatUaCache\\container.dat", lpFilePart=0x0) returned 0x53 [0141.189] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc200) returned 1 [0141.189] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IECompatUaCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\iecompatuacache\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x3bc2e0 | out: lpFileInformation=0x3bc2e0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x4cf007f6, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x4cf007f6, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x4cf007f6, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0141.189] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1c0) returned 1 [0141.189] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IECompatUaCache\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbd80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IECompatUaCache\\container.dat", lpFilePart=0x0) returned 0x53 [0141.189] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc200) returned 1 [0141.189] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IECompatUaCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\iecompatuacache\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x21d27d8 | out: lpFileInformation=0x21d27d8*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x4cf007f6, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x4cf007f6, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x4cf007f6, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0141.189] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1c0) returned 1 [0141.189] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IECompatUaCache\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IECompatUaCache\\container.dat", lpFilePart=0x0) returned 0x53 [0141.189] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0c0) returned 1 [0141.189] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IECompatUaCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\iecompatuacache\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0141.190] GetFileType (hFile=0x444) returned 0x1 [0141.190] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc030) returned 1 [0141.190] GetFileType (hFile=0x444) returned 0x1 [0141.190] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc258 | out: lpFileSizeHigh=0x3bc258*=0x0) returned 0x0 [0141.190] CloseHandle (hObject=0x444) returned 1 [0141.225] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IECompatUaCache\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IECompatUaCache\\container.dat", lpFilePart=0x0) returned 0x53 [0141.226] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0c0) returned 1 [0141.226] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IECompatUaCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\iecompatuacache\\container.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0141.227] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8b50) returned 1 [0141.228] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0141.228] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IECompatUaCache\\Low", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IECompatUaCache\\Low", lpFilePart=0x0) returned 0x49 [0141.228] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IECompatUaCache\\Low\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IECompatUaCache\\Low\\", lpFilePart=0x0) returned 0x4a [0141.228] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IECompatUaCache\\Low\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d73d0 [0141.228] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0141.229] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0141.229] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0141.229] FindClose (in: hFindFile=0x5d73d0 | out: hFindFile=0x5d73d0) returned 1 [0141.229] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0141.229] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0141.229] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0141.229] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IECompatUaCache\\Low", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IECompatUaCache\\Low", lpFilePart=0x0) returned 0x49 [0141.229] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IECompatUaCache\\Low\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IECompatUaCache\\Low\\", lpFilePart=0x0) returned 0x4a [0141.229] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IECompatUaCache\\Low\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7370 [0141.229] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0141.229] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0141.229] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0141.230] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0141.230] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0141.230] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0141.230] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IECompatUaCache\\Low\\container.dat", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IECompatUaCache\\Low\\container.dat", lpFilePart=0x0) returned 0x57 [0141.230] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0141.230] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IECompatUaCache\\Low\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\iecompatuacache\\low\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x224b3a0 | out: lpFileInformation=0x224b3a0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x90b9bcea, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x90b9bcea, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x90b9bcea, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0141.230] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0141.230] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IECompatUaCache\\Low\\container.dat", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IECompatUaCache\\Low\\container.dat", lpFilePart=0x0) returned 0x57 [0141.230] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0141.230] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IECompatUaCache\\Low\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\iecompatuacache\\low\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0141.230] GetFileType (hFile=0x444) returned 0x1 [0141.230] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0141.230] GetFileType (hFile=0x444) returned 0x1 [0141.230] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x0 [0141.230] CloseHandle (hObject=0x444) returned 1 [0141.267] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IECompatUaCache\\Low\\container.dat", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IECompatUaCache\\Low\\container.dat", lpFilePart=0x0) returned 0x57 [0141.267] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0141.267] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IECompatUaCache\\Low\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\iecompatuacache\\low\\container.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0141.269] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb070) returned 1 [0141.269] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IECompatUaCache\\Low\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbcf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IECompatUaCache\\Low\\container.dat", lpFilePart=0x0) returned 0x57 [0141.269] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0141.269] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IECompatUaCache\\Low\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\iecompatuacache\\low\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x3bc270 | out: lpFileInformation=0x3bc270*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x90b9bcea, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x90b9bcea, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x90b9bcea, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0141.269] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc150) returned 1 [0141.269] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IECompatUaCache\\Low\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbd10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IECompatUaCache\\Low\\container.dat", lpFilePart=0x0) returned 0x57 [0141.269] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0141.269] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IECompatUaCache\\Low\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\iecompatuacache\\low\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x22c2008 | out: lpFileInformation=0x22c2008*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x90b9bcea, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x90b9bcea, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x90b9bcea, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0141.269] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc150) returned 1 [0141.269] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IECompatUaCache\\Low\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IECompatUaCache\\Low\\container.dat", lpFilePart=0x0) returned 0x57 [0141.270] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc050) returned 1 [0141.270] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IECompatUaCache\\Low\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\iecompatuacache\\low\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0141.270] GetFileType (hFile=0x444) returned 0x1 [0141.270] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbfc0) returned 1 [0141.270] GetFileType (hFile=0x444) returned 0x1 [0141.270] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc1e8 | out: lpFileSizeHigh=0x3bc1e8*=0x0) returned 0x0 [0141.270] CloseHandle (hObject=0x444) returned 1 [0141.308] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IECompatUaCache\\Low\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IECompatUaCache\\Low\\container.dat", lpFilePart=0x0) returned 0x57 [0141.308] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc050) returned 1 [0141.308] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IECompatUaCache\\Low\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\iecompatuacache\\low\\container.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0141.310] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8ae0) returned 1 [0141.311] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0141.311] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IEDownloadHistory", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IEDownloadHistory", lpFilePart=0x0) returned 0x47 [0141.311] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IEDownloadHistory\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IEDownloadHistory\\", lpFilePart=0x0) returned 0x48 [0141.311] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IEDownloadHistory\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7c70 [0141.311] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0141.312] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0141.312] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0141.312] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0141.312] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0141.312] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0141.312] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0141.312] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IEDownloadHistory", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IEDownloadHistory", lpFilePart=0x0) returned 0x47 [0141.312] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IEDownloadHistory\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IEDownloadHistory\\", lpFilePart=0x0) returned 0x48 [0141.312] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IEDownloadHistory\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7550 [0141.312] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0141.312] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0141.312] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0141.313] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0141.313] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0141.313] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0141.313] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IEDownloadHistory\\container.dat", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IEDownloadHistory\\container.dat", lpFilePart=0x0) returned 0x55 [0141.313] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0141.313] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IEDownloadHistory\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\iedownloadhistory\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x233abb0 | out: lpFileInformation=0x233abb0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x29a52a61, ftCreationTime.dwHighDateTime=0x1d2fc23, ftLastAccessTime.dwLowDateTime=0x29a52a61, ftLastAccessTime.dwHighDateTime=0x1d2fc23, ftLastWriteTime.dwLowDateTime=0x29a52a61, ftLastWriteTime.dwHighDateTime=0x1d2fc23, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0141.313] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0141.313] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IEDownloadHistory\\container.dat", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IEDownloadHistory\\container.dat", lpFilePart=0x0) returned 0x55 [0141.313] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0141.313] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IEDownloadHistory\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\iedownloadhistory\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0141.313] GetFileType (hFile=0x444) returned 0x1 [0141.313] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0141.313] GetFileType (hFile=0x444) returned 0x1 [0141.313] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0x0 [0141.313] CloseHandle (hObject=0x444) returned 1 [0141.354] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IEDownloadHistory\\container.dat", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IEDownloadHistory\\container.dat", lpFilePart=0x0) returned 0x55 [0141.355] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0141.355] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IEDownloadHistory\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\iedownloadhistory\\container.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0141.356] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb0e0) returned 1 [0141.357] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IEDownloadHistory\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IEDownloadHistory\\container.dat", lpFilePart=0x0) returned 0x55 [0141.357] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc200) returned 1 [0141.357] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IEDownloadHistory\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\iedownloadhistory\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x3bc2e0 | out: lpFileInformation=0x3bc2e0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x29a52a61, ftCreationTime.dwHighDateTime=0x1d2fc23, ftLastAccessTime.dwLowDateTime=0x29a52a61, ftLastAccessTime.dwHighDateTime=0x1d2fc23, ftLastWriteTime.dwLowDateTime=0x29a52a61, ftLastWriteTime.dwHighDateTime=0x1d2fc23, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0141.357] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1c0) returned 1 [0141.357] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IEDownloadHistory\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbd80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IEDownloadHistory\\container.dat", lpFilePart=0x0) returned 0x55 [0141.357] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc200) returned 1 [0141.357] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IEDownloadHistory\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\iedownloadhistory\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x21b15c0 | out: lpFileInformation=0x21b15c0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x29a52a61, ftCreationTime.dwHighDateTime=0x1d2fc23, ftLastAccessTime.dwLowDateTime=0x29a52a61, ftLastAccessTime.dwHighDateTime=0x1d2fc23, ftLastWriteTime.dwLowDateTime=0x29a52a61, ftLastWriteTime.dwHighDateTime=0x1d2fc23, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0141.357] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1c0) returned 1 [0141.357] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IEDownloadHistory\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IEDownloadHistory\\container.dat", lpFilePart=0x0) returned 0x55 [0141.357] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0c0) returned 1 [0141.357] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IEDownloadHistory\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\iedownloadhistory\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0141.358] GetFileType (hFile=0x444) returned 0x1 [0141.358] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc030) returned 1 [0141.358] GetFileType (hFile=0x444) returned 0x1 [0141.358] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc258 | out: lpFileSizeHigh=0x3bc258*=0x0) returned 0x0 [0141.358] CloseHandle (hObject=0x444) returned 1 [0141.397] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IEDownloadHistory\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IEDownloadHistory\\container.dat", lpFilePart=0x0) returned 0x55 [0141.397] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0c0) returned 1 [0141.397] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IEDownloadHistory\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\iedownloadhistory\\container.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0141.399] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8b50) returned 1 [0141.399] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0141.399] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache", lpFilePart=0x0) returned 0x3f [0141.400] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\", lpFilePart=0x0) returned 0x40 [0141.400] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7550 [0141.400] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0141.400] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0141.400] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0141.400] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0141.400] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0141.400] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0141.401] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0141.401] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0141.401] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0141.401] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0141.401] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0141.401] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0141.401] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0141.401] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache", lpFilePart=0x0) returned 0x3f [0141.401] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\", lpFilePart=0x0) returned 0x40 [0141.401] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7f10 [0141.401] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0141.402] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0141.402] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0141.402] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0141.402] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0141.402] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0141.402] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0141.402] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0141.402] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0141.402] FindClose (in: hFindFile=0x5d7f10 | out: hFindFile=0x5d7f10) returned 1 [0141.402] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0141.402] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0141.403] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\counters.dat", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\counters.dat", lpFilePart=0x0) returned 0x4c [0141.403] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0141.403] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\counters.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcache\\counters.dat"), fInfoLevelId=0x0, lpFileInformation=0x222b688 | out: lpFileInformation=0x222b688*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xadb0068e, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xadb0068e, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xadb268c5, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x80)) returned 1 [0141.403] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0141.403] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\counters.dat", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\counters.dat", lpFilePart=0x0) returned 0x4c [0141.403] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0141.403] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\counters.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcache\\counters.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0141.404] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb0e0) returned 1 [0141.405] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\counters.dat", nBufferLength=0x105, lpBuffer=0x3bbd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\counters.dat", lpFilePart=0x0) returned 0x4c [0141.405] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc200) returned 1 [0141.405] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\counters.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcache\\counters.dat"), fInfoLevelId=0x0, lpFileInformation=0x3bc2e0 | out: lpFileInformation=0x3bc2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xadb0068e, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xadb0068e, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xadb268c5, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x80)) returned 1 [0141.405] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1c0) returned 1 [0141.405] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\counters.dat", nBufferLength=0x105, lpBuffer=0x3bbd80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\counters.dat", lpFilePart=0x0) returned 0x4c [0141.405] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc200) returned 1 [0141.405] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\counters.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcache\\counters.dat"), fInfoLevelId=0x0, lpFileInformation=0x222c1f8 | out: lpFileInformation=0x222c1f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xadb0068e, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xadb0068e, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xadb268c5, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x80)) returned 1 [0141.405] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1c0) returned 1 [0141.405] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\counters.dat", nBufferLength=0x105, lpBuffer=0x3bbbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\counters.dat", lpFilePart=0x0) returned 0x4c [0141.405] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0c0) returned 1 [0141.405] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\counters.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcache\\counters.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0141.406] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8b50) returned 1 [0141.407] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0141.407] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Content.IE5", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Content.IE5", lpFilePart=0x0) returned 0x4b [0141.407] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Content.IE5\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Content.IE5\\", lpFilePart=0x0) returned 0x4c [0141.407] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Content.IE5\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0xffffffffffffffff [0141.407] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6c0) returned 1 [0141.409] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0141.409] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Content.MSO", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Content.MSO", lpFilePart=0x0) returned 0x4b [0141.409] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Content.MSO\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Content.MSO\\", lpFilePart=0x0) returned 0x4c [0141.409] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Content.MSO\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d81b0 [0141.409] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0141.409] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0141.409] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0141.410] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0141.410] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0141.410] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0141.410] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0141.410] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Content.MSO", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Content.MSO", lpFilePart=0x0) returned 0x4b [0141.410] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Content.MSO\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Content.MSO\\", lpFilePart=0x0) returned 0x4c [0141.410] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Content.MSO\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d81b0 [0141.410] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0141.410] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0141.410] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0141.410] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0141.410] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0141.410] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0141.411] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0141.411] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Content.MSO\\VisioLogFiles", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Content.MSO\\VisioLogFiles", lpFilePart=0x0) returned 0x59 [0141.411] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Content.MSO\\VisioLogFiles\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Content.MSO\\VisioLogFiles\\", lpFilePart=0x0) returned 0x5a [0141.411] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Content.MSO\\VisioLogFiles\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d7a90 [0141.411] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0141.411] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0141.411] FindClose (in: hFindFile=0x5d7a90 | out: hFindFile=0x5d7a90) returned 1 [0141.411] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0141.411] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0141.411] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0141.411] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Content.MSO\\VisioLogFiles", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Content.MSO\\VisioLogFiles", lpFilePart=0x0) returned 0x59 [0141.411] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Content.MSO\\VisioLogFiles\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Content.MSO\\VisioLogFiles\\", lpFilePart=0x0) returned 0x5a [0141.411] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Content.MSO\\VisioLogFiles\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d73d0 [0141.412] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0141.412] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0141.412] FindClose (in: hFindFile=0x5d73d0 | out: hFindFile=0x5d73d0) returned 1 [0141.412] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0141.412] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0141.412] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0141.412] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Content.Word", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Content.Word", lpFilePart=0x0) returned 0x4c [0141.412] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Content.Word\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Content.Word\\", lpFilePart=0x0) returned 0x4d [0141.412] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Content.Word\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7c70 [0141.412] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0141.412] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0141.412] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0141.413] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0141.413] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0141.413] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0141.413] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Content.Word", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Content.Word", lpFilePart=0x0) returned 0x4c [0141.413] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Content.Word\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Content.Word\\", lpFilePart=0x0) returned 0x4d [0141.413] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Content.Word\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7e50 [0141.413] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0141.413] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0141.413] FindClose (in: hFindFile=0x5d7e50 | out: hFindFile=0x5d7e50) returned 1 [0141.413] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0141.413] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0141.413] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0141.413] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\IE", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\IE", lpFilePart=0x0) returned 0x42 [0141.413] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\IE\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\IE\\", lpFilePart=0x0) returned 0x43 [0141.413] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\IE\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7d90 [0141.414] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0141.414] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0141.414] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0141.414] FindClose (in: hFindFile=0x5d7d90 | out: hFindFile=0x5d7d90) returned 1 [0141.414] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0141.414] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0141.414] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0141.414] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\IE", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\IE", lpFilePart=0x0) returned 0x42 [0141.414] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\IE\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\IE\\", lpFilePart=0x0) returned 0x43 [0141.414] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\IE\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7f10 [0141.414] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0141.415] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0141.415] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0141.415] FindClose (in: hFindFile=0x5d7f10 | out: hFindFile=0x5d7f10) returned 1 [0141.415] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0141.415] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0141.415] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\IE\\container.dat", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\IE\\container.dat", lpFilePart=0x0) returned 0x50 [0141.415] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0141.415] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\IE\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcache\\ie\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x22355f8 | out: lpFileInformation=0x22355f8*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xadcf0534, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xadcf0534, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xadcf0534, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0141.415] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0141.415] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\IE\\container.dat", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\IE\\container.dat", lpFilePart=0x0) returned 0x50 [0141.415] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0141.415] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\IE\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcache\\ie\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0141.415] GetFileType (hFile=0x444) returned 0x1 [0141.415] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0141.415] GetFileType (hFile=0x444) returned 0x1 [0141.415] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x0 [0141.416] CloseHandle (hObject=0x444) returned 1 [0141.453] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\IE\\container.dat", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\IE\\container.dat", lpFilePart=0x0) returned 0x50 [0141.453] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0141.453] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\IE\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcache\\ie\\container.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0141.455] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb070) returned 1 [0141.455] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\IE\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbcf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\IE\\container.dat", lpFilePart=0x0) returned 0x50 [0141.455] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0141.455] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\IE\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcache\\ie\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x3bc270 | out: lpFileInformation=0x3bc270*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xadcf0534, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xadcf0534, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xadcf0534, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0141.456] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc150) returned 1 [0141.456] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\IE\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbd10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\IE\\container.dat", lpFilePart=0x0) returned 0x50 [0141.456] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0141.456] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\IE\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcache\\ie\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x22ac238 | out: lpFileInformation=0x22ac238*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xadcf0534, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xadcf0534, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xadcf0534, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0141.456] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc150) returned 1 [0141.456] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\IE\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\IE\\container.dat", lpFilePart=0x0) returned 0x50 [0141.456] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc050) returned 1 [0141.456] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\IE\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcache\\ie\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0141.456] GetFileType (hFile=0x444) returned 0x1 [0141.456] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbfc0) returned 1 [0141.456] GetFileType (hFile=0x444) returned 0x1 [0141.456] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc1e8 | out: lpFileSizeHigh=0x3bc1e8*=0x0) returned 0x0 [0141.456] CloseHandle (hObject=0x444) returned 1 [0141.495] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\IE\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\IE\\container.dat", lpFilePart=0x0) returned 0x50 [0141.495] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc050) returned 1 [0141.495] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\IE\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcache\\ie\\container.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0141.497] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8ae0) returned 1 [0141.497] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0141.497] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low", lpFilePart=0x0) returned 0x43 [0141.497] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low\\", lpFilePart=0x0) returned 0x44 [0141.497] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d78b0 [0141.499] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0141.499] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0141.499] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0141.499] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0141.499] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0141.499] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0141.499] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0141.499] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0141.500] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0141.500] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0141.500] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0141.500] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low", lpFilePart=0x0) returned 0x43 [0141.500] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low\\", lpFilePart=0x0) returned 0x44 [0141.500] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7a30 [0141.501] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0141.501] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0141.502] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0141.502] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0141.502] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0141.502] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0141.502] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0141.502] FindClose (in: hFindFile=0x5d7a30 | out: hFindFile=0x5d7a30) returned 1 [0141.503] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0141.503] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0141.503] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low\\MSIMGSIZ.DAT", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low\\MSIMGSIZ.DAT", lpFilePart=0x0) returned 0x50 [0141.503] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0141.503] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low\\MSIMGSIZ.DAT" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcache\\low\\msimgsiz.dat"), fInfoLevelId=0x0, lpFileInformation=0x2325db0 | out: lpFileInformation=0x2325db0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x91af4f68, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x91af4f68, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x91af4f68, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0xbfe0)) returned 1 [0141.505] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0141.505] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low\\MSIMGSIZ.DAT", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low\\MSIMGSIZ.DAT", lpFilePart=0x0) returned 0x50 [0141.505] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0141.505] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low\\MSIMGSIZ.DAT" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcache\\low\\msimgsiz.dat"), fInfoLevelId=0x0, lpFileInformation=0x2325f10 | out: lpFileInformation=0x2325f10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x91af4f68, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x91af4f68, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x91af4f68, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0xbfe0)) returned 1 [0141.505] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0141.505] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low\\MSIMGSIZ.DAT", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low\\MSIMGSIZ.DAT", lpFilePart=0x0) returned 0x50 [0141.505] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0141.505] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low\\MSIMGSIZ.DAT" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcache\\low\\msimgsiz.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0141.506] GetFileType (hFile=0x444) returned 0x1 [0141.506] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0141.506] GetFileType (hFile=0x444) returned 0x1 [0141.506] ReadFile (in: hFile=0x444, lpBuffer=0x2328300, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x2328300*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0141.547] CloseHandle (hObject=0x444) returned 1 [0141.547] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low\\MSIMGSIZ.DAT", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low\\MSIMGSIZ.DAT", lpFilePart=0x0) returned 0x50 [0141.547] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0141.547] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low\\MSIMGSIZ.DAT" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcache\\low\\msimgsiz.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0141.548] GetFileType (hFile=0x444) returned 0x1 [0141.548] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0141.548] GetFileType (hFile=0x444) returned 0x1 [0141.548] WriteFile (in: hFile=0x444, lpBuffer=0x2155930*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x2155930*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0141.548] CloseHandle (hObject=0x444) returned 1 [0141.548] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low\\MSIMGSIZ.DAT", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low\\MSIMGSIZ.DAT", lpFilePart=0x0) returned 0x50 [0141.548] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low\\MSIMGSIZ.DAT.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low\\MSIMGSIZ.DAT.xuy", lpFilePart=0x0) returned 0x54 [0141.548] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0141.548] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low\\MSIMGSIZ.DAT" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcache\\low\\msimgsiz.dat"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x91af4f68, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x91af4f68, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x40383308, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xbfe0)) returned 1 [0141.548] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0141.548] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low\\MSIMGSIZ.DAT" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcache\\low\\msimgsiz.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low\\MSIMGSIZ.DAT.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcache\\low\\msimgsiz.dat.xuy")) returned 1 [0141.549] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low\\SmartScreenCache.dat", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low\\SmartScreenCache.dat", lpFilePart=0x0) returned 0x58 [0141.549] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0141.550] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low\\SmartScreenCache.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcache\\low\\smartscreencache.dat"), fInfoLevelId=0x0, lpFileInformation=0x21a8078 | out: lpFileInformation=0x21a8078*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x919c3c5e, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x919c3c5e, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x919c3c5e, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0x1e088)) returned 1 [0141.551] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0141.551] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low\\SmartScreenCache.dat", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low\\SmartScreenCache.dat", lpFilePart=0x0) returned 0x58 [0141.551] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0141.551] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low\\SmartScreenCache.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcache\\low\\smartscreencache.dat"), fInfoLevelId=0x0, lpFileInformation=0x21a81f8 | out: lpFileInformation=0x21a81f8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x919c3c5e, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x919c3c5e, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x919c3c5e, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0x1e088)) returned 1 [0141.551] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0141.551] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low\\SmartScreenCache.dat", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low\\SmartScreenCache.dat", lpFilePart=0x0) returned 0x58 [0141.551] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0141.551] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low\\SmartScreenCache.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcache\\low\\smartscreencache.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0141.552] GetFileType (hFile=0x444) returned 0x1 [0141.552] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0141.552] GetFileType (hFile=0x444) returned 0x1 [0141.552] ReadFile (in: hFile=0x444, lpBuffer=0x21aa628, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x21aa628*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0141.612] CloseHandle (hObject=0x444) returned 1 [0141.612] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low\\SmartScreenCache.dat", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low\\SmartScreenCache.dat", lpFilePart=0x0) returned 0x58 [0141.612] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0141.612] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low\\SmartScreenCache.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcache\\low\\smartscreencache.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0141.612] GetFileType (hFile=0x444) returned 0x1 [0141.612] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0141.612] GetFileType (hFile=0x444) returned 0x1 [0141.612] WriteFile (in: hFile=0x444, lpBuffer=0x21a8358*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x21a8358*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0141.612] CloseHandle (hObject=0x444) returned 1 [0141.613] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low\\SmartScreenCache.dat", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low\\SmartScreenCache.dat", lpFilePart=0x0) returned 0x58 [0141.613] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low\\SmartScreenCache.dat.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low\\SmartScreenCache.dat.xuy", lpFilePart=0x0) returned 0x5c [0141.613] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0141.613] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low\\SmartScreenCache.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcache\\low\\smartscreencache.dat"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x919c3c5e, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x919c3c5e, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x4041ba95, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x1e088)) returned 1 [0141.613] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0141.613] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low\\SmartScreenCache.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcache\\low\\smartscreencache.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low\\SmartScreenCache.dat.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcache\\low\\smartscreencache.dat.xuy")) returned 1 [0141.614] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low\\SuggestedSites.dat", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low\\SuggestedSites.dat", lpFilePart=0x0) returned 0x56 [0141.614] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0141.614] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low\\SuggestedSites.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcache\\low\\suggestedsites.dat"), fInfoLevelId=0x0, lpFileInformation=0x2226a70 | out: lpFileInformation=0x2226a70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xdc26ac0, ftCreationTime.dwHighDateTime=0x1d39f0e, ftLastAccessTime.dwLowDateTime=0xdc26ac0, ftLastAccessTime.dwHighDateTime=0x1d39f0e, ftLastWriteTime.dwLowDateTime=0xdc26ac0, ftLastWriteTime.dwHighDateTime=0x1d39f0e, nFileSizeHigh=0x0, nFileSizeLow=0x500084)) returned 1 [0141.614] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0141.614] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low\\SuggestedSites.dat", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low\\SuggestedSites.dat", lpFilePart=0x0) returned 0x56 [0141.614] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0141.614] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low\\SuggestedSites.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcache\\low\\suggestedsites.dat"), fInfoLevelId=0x0, lpFileInformation=0x2226be0 | out: lpFileInformation=0x2226be0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xdc26ac0, ftCreationTime.dwHighDateTime=0x1d39f0e, ftLastAccessTime.dwLowDateTime=0xdc26ac0, ftLastAccessTime.dwHighDateTime=0x1d39f0e, ftLastWriteTime.dwLowDateTime=0xdc26ac0, ftLastWriteTime.dwHighDateTime=0x1d39f0e, nFileSizeHigh=0x0, nFileSizeLow=0x500084)) returned 1 [0141.614] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0141.614] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low\\SuggestedSites.dat", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low\\SuggestedSites.dat", lpFilePart=0x0) returned 0x56 [0141.614] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0141.615] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low\\SuggestedSites.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcache\\low\\suggestedsites.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0141.615] GetFileType (hFile=0x444) returned 0x1 [0141.615] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0141.615] GetFileType (hFile=0x444) returned 0x1 [0141.615] ReadFile (in: hFile=0x444, lpBuffer=0x2228ff0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x2228ff0*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0141.642] CloseHandle (hObject=0x444) returned 1 [0141.642] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low\\SuggestedSites.dat", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low\\SuggestedSites.dat", lpFilePart=0x0) returned 0x56 [0141.642] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0141.642] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low\\SuggestedSites.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcache\\low\\suggestedsites.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0141.642] GetFileType (hFile=0x444) returned 0x1 [0141.642] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0141.642] GetFileType (hFile=0x444) returned 0x1 [0141.642] WriteFile (in: hFile=0x444, lpBuffer=0x2226d30*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x2226d30*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0141.642] CloseHandle (hObject=0x444) returned 1 [0141.643] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low\\SuggestedSites.dat", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low\\SuggestedSites.dat", lpFilePart=0x0) returned 0x56 [0141.643] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low\\SuggestedSites.dat.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low\\SuggestedSites.dat.xuy", lpFilePart=0x0) returned 0x5a [0141.643] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0141.643] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low\\SuggestedSites.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcache\\low\\suggestedsites.dat"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xdc26ac0, ftCreationTime.dwHighDateTime=0x1d39f0e, ftLastAccessTime.dwLowDateTime=0xdc26ac0, ftLastAccessTime.dwHighDateTime=0x1d39f0e, ftLastWriteTime.dwLowDateTime=0x4046841b, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x500084)) returned 1 [0141.643] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0141.643] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low\\SuggestedSites.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcache\\low\\suggestedsites.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low\\SuggestedSites.dat.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcache\\low\\suggestedsites.dat.xuy")) returned 1 [0141.644] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0141.644] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low\\Content.IE5", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low\\Content.IE5", lpFilePart=0x0) returned 0x4f [0141.644] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low\\Content.IE5\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low\\Content.IE5\\", lpFilePart=0x0) returned 0x50 [0141.644] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low\\Content.IE5\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0xffffffffffffffff [0141.644] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0141.646] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0141.646] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low\\IE", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low\\IE", lpFilePart=0x0) returned 0x46 [0141.646] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low\\IE\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low\\IE\\", lpFilePart=0x0) returned 0x47 [0141.646] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low\\IE\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d8090 [0141.646] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0141.646] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0141.646] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0141.646] FindClose (in: hFindFile=0x5d8090 | out: hFindFile=0x5d8090) returned 1 [0141.647] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0141.647] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0141.647] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0141.647] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low\\IE", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low\\IE", lpFilePart=0x0) returned 0x46 [0141.647] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low\\IE\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low\\IE\\", lpFilePart=0x0) returned 0x47 [0141.647] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low\\IE\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d7c70 [0141.647] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0141.647] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0141.648] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0141.648] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0141.648] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0141.648] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0141.648] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low\\IE\\container.dat", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low\\IE\\container.dat", lpFilePart=0x0) returned 0x54 [0141.648] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0141.648] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low\\IE\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcache\\low\\ie\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x22a83a8 | out: lpFileInformation=0x22a83a8*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x90f7ba13, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x90f7ba13, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x90f7ba13, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0141.648] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0141.648] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low\\IE\\container.dat", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low\\IE\\container.dat", lpFilePart=0x0) returned 0x54 [0141.648] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0141.648] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low\\IE\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcache\\low\\ie\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0141.648] GetFileType (hFile=0x444) returned 0x1 [0141.648] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0141.648] GetFileType (hFile=0x444) returned 0x1 [0141.648] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be708 | out: lpFileSizeHigh=0x3be708*=0x0) returned 0x0 [0141.648] CloseHandle (hObject=0x444) returned 1 [0141.684] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low\\IE\\container.dat", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low\\IE\\container.dat", lpFilePart=0x0) returned 0x54 [0141.684] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0141.684] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low\\IE\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcache\\low\\ie\\container.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0141.694] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb000) returned 1 [0141.694] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low\\IE\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbc80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low\\IE\\container.dat", lpFilePart=0x0) returned 0x54 [0141.694] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc120) returned 1 [0141.694] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low\\IE\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcache\\low\\ie\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x3bc200 | out: lpFileInformation=0x3bc200*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x90f7ba13, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x90f7ba13, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x90f7ba13, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0141.694] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc0e0) returned 1 [0141.694] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low\\IE\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low\\IE\\container.dat", lpFilePart=0x0) returned 0x54 [0141.694] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc120) returned 1 [0141.694] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low\\IE\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcache\\low\\ie\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x231f010 | out: lpFileInformation=0x231f010*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x90f7ba13, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x90f7ba13, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x90f7ba13, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0141.694] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc0e0) returned 1 [0141.694] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low\\IE\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbb00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low\\IE\\container.dat", lpFilePart=0x0) returned 0x54 [0141.694] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbfe0) returned 1 [0141.695] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low\\IE\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcache\\low\\ie\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0141.695] GetFileType (hFile=0x444) returned 0x1 [0141.695] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbf50) returned 1 [0141.695] GetFileType (hFile=0x444) returned 0x1 [0141.695] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc178 | out: lpFileSizeHigh=0x3bc178*=0x0) returned 0x0 [0141.695] CloseHandle (hObject=0x444) returned 1 [0141.734] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low\\IE\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbb00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low\\IE\\container.dat", lpFilePart=0x0) returned 0x54 [0141.734] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbfe0) returned 1 [0141.734] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low\\IE\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcache\\low\\ie\\container.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0141.735] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8a70) returned 1 [0141.736] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0141.736] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Virtualized", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Virtualized", lpFilePart=0x0) returned 0x4b [0141.736] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Virtualized\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Virtualized\\", lpFilePart=0x0) returned 0x4c [0141.736] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Virtualized\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d78b0 [0141.736] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0141.737] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0141.737] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0141.737] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0141.737] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0141.737] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0141.737] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0141.737] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Virtualized", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Virtualized", lpFilePart=0x0) returned 0x4b [0141.737] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Virtualized\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Virtualized\\", lpFilePart=0x0) returned 0x4c [0141.737] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Virtualized\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7550 [0141.737] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0141.737] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0141.738] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0141.738] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0141.738] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0141.738] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0141.738] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0141.738] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Virtualized\\C", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Virtualized\\C", lpFilePart=0x0) returned 0x4d [0141.738] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Virtualized\\C\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Virtualized\\C\\", lpFilePart=0x0) returned 0x4e [0141.738] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Virtualized\\C\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d7f10 [0141.739] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0141.739] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0141.739] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0141.739] FindClose (in: hFindFile=0x5d7f10 | out: hFindFile=0x5d7f10) returned 1 [0141.739] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0141.739] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0141.739] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0141.739] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Virtualized\\C", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Virtualized\\C", lpFilePart=0x0) returned 0x4d [0141.739] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Virtualized\\C\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Virtualized\\C\\", lpFilePart=0x0) returned 0x4e [0141.739] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Virtualized\\C\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d78b0 [0141.739] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0141.740] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0141.740] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0141.740] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0141.740] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0141.740] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0141.740] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0141.740] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Virtualized\\C\\Users", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Virtualized\\C\\Users", lpFilePart=0x0) returned 0x53 [0141.740] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Virtualized\\C\\Users\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Virtualized\\C\\Users\\", lpFilePart=0x0) returned 0x54 [0141.740] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Virtualized\\C\\Users\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d7c70 [0141.740] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0141.740] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0141.740] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0141.740] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0141.741] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0141.741] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0141.741] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0141.741] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Virtualized\\C\\Users", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Virtualized\\C\\Users", lpFilePart=0x0) returned 0x53 [0141.741] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Virtualized\\C\\Users\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Virtualized\\C\\Users\\", lpFilePart=0x0) returned 0x54 [0141.741] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Virtualized\\C\\Users\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d81b0 [0141.741] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0141.741] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0141.741] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0141.741] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0141.741] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0141.741] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0141.741] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0141.741] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Virtualized\\C\\Users\\CIiHmnxMn6Ps", nBufferLength=0x105, lpBuffer=0x3be130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Virtualized\\C\\Users\\CIiHmnxMn6Ps", lpFilePart=0x0) returned 0x60 [0141.741] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Virtualized\\C\\Users\\CIiHmnxMn6Ps\\", nBufferLength=0x105, lpBuffer=0x3be0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Virtualized\\C\\Users\\CIiHmnxMn6Ps\\", lpFilePart=0x0) returned 0x61 [0141.742] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Virtualized\\C\\Users\\CIiHmnxMn6Ps\\*", lpFindFileData=0x3be2e0 | out: lpFindFileData=0x3be2e0) returned 0x5d81b0 [0141.742] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0141.742] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0141.742] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 0 [0141.742] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0141.742] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0141.742] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0141.742] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0141.742] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Virtualized\\C\\Users\\CIiHmnxMn6Ps", nBufferLength=0x105, lpBuffer=0x3be130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Virtualized\\C\\Users\\CIiHmnxMn6Ps", lpFilePart=0x0) returned 0x60 [0141.742] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Virtualized\\C\\Users\\CIiHmnxMn6Ps\\", nBufferLength=0x105, lpBuffer=0x3be0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Virtualized\\C\\Users\\CIiHmnxMn6Ps\\", lpFilePart=0x0) returned 0x61 [0141.742] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Virtualized\\C\\Users\\CIiHmnxMn6Ps\\*", lpFindFileData=0x3be2e0 | out: lpFindFileData=0x3be2e0) returned 0x5d7a90 [0141.743] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0141.743] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0141.743] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 0 [0141.743] FindClose (in: hFindFile=0x5d7a90 | out: hFindFile=0x5d7a90) returned 1 [0141.743] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0141.743] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0141.743] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0141.743] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Virtualized\\C\\Users\\CIiHmnxMn6Ps\\AppData", nBufferLength=0x105, lpBuffer=0x3be0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Virtualized\\C\\Users\\CIiHmnxMn6Ps\\AppData", lpFilePart=0x0) returned 0x68 [0141.743] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Virtualized\\C\\Users\\CIiHmnxMn6Ps\\AppData\\", nBufferLength=0x105, lpBuffer=0x3be060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Virtualized\\C\\Users\\CIiHmnxMn6Ps\\AppData\\", lpFilePart=0x0) returned 0x69 [0141.743] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Virtualized\\C\\Users\\CIiHmnxMn6Ps\\AppData\\*", lpFindFileData=0x3be270 | out: lpFindFileData=0x3be270) returned 0x5d73d0 [0141.743] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0141.743] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0141.744] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 0 [0141.744] FindClose (in: hFindFile=0x5d73d0 | out: hFindFile=0x5d73d0) returned 1 [0141.744] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0141.744] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0141.744] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0141.744] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Virtualized\\C\\Users\\CIiHmnxMn6Ps\\AppData", nBufferLength=0x105, lpBuffer=0x3be0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Virtualized\\C\\Users\\CIiHmnxMn6Ps\\AppData", lpFilePart=0x0) returned 0x68 [0141.744] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Virtualized\\C\\Users\\CIiHmnxMn6Ps\\AppData\\", nBufferLength=0x105, lpBuffer=0x3be060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Virtualized\\C\\Users\\CIiHmnxMn6Ps\\AppData\\", lpFilePart=0x0) returned 0x69 [0141.744] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Virtualized\\C\\Users\\CIiHmnxMn6Ps\\AppData\\*", lpFindFileData=0x3be270 | out: lpFindFileData=0x3be270) returned 0x5d7c70 [0141.744] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0141.744] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0141.744] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 0 [0141.744] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0141.744] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0141.744] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0141.744] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0141.745] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Virtualized\\C\\Users\\CIiHmnxMn6Ps\\AppData\\Local", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Virtualized\\C\\Users\\CIiHmnxMn6Ps\\AppData\\Local", lpFilePart=0x0) returned 0x6e [0141.745] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Virtualized\\C\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Virtualized\\C\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\", lpFilePart=0x0) returned 0x6f [0141.745] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Virtualized\\C\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7e50 [0141.745] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0141.745] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0141.746] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0141.746] FindClose (in: hFindFile=0x5d7e50 | out: hFindFile=0x5d7e50) returned 1 [0141.746] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0141.746] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0141.746] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0141.746] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Virtualized\\C\\Users\\CIiHmnxMn6Ps\\AppData\\Local", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Virtualized\\C\\Users\\CIiHmnxMn6Ps\\AppData\\Local", lpFilePart=0x0) returned 0x6e [0141.746] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Virtualized\\C\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Virtualized\\C\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\", lpFilePart=0x0) returned 0x6f [0141.746] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Virtualized\\C\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7d90 [0141.746] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0141.746] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0141.746] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0141.746] FindClose (in: hFindFile=0x5d7d90 | out: hFindFile=0x5d7d90) returned 1 [0141.746] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0141.746] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0141.747] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0141.747] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Virtualized\\C\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft", nBufferLength=0x105, lpBuffer=0x3bdfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Virtualized\\C\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft", lpFilePart=0x0) returned 0x78 [0141.747] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Virtualized\\C\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\", nBufferLength=0x105, lpBuffer=0x3bdf80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Virtualized\\C\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\", lpFilePart=0x0) returned 0x79 [0141.747] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Virtualized\\C\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\*", lpFindFileData=0x3be190 | out: lpFindFileData=0x3be190) returned 0x5d7f10 [0141.747] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be1e0 | out: lpFindFileData=0x3be1e0) returned 1 [0141.747] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be1e0 | out: lpFindFileData=0x3be1e0) returned 1 [0141.747] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be1e0 | out: lpFindFileData=0x3be1e0) returned 0 [0141.747] FindClose (in: hFindFile=0x5d7f10 | out: hFindFile=0x5d7f10) returned 1 [0141.747] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be440) returned 1 [0141.747] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be400) returned 1 [0141.747] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0141.747] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Virtualized\\C\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft", nBufferLength=0x105, lpBuffer=0x3bdfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Virtualized\\C\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft", lpFilePart=0x0) returned 0x78 [0141.747] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Virtualized\\C\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\", nBufferLength=0x105, lpBuffer=0x3bdf80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Virtualized\\C\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\", lpFilePart=0x0) returned 0x79 [0141.747] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Virtualized\\C\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\*", lpFindFileData=0x3be190 | out: lpFindFileData=0x3be190) returned 0x5d7370 [0141.748] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be1e0 | out: lpFindFileData=0x3be1e0) returned 1 [0141.748] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be1e0 | out: lpFindFileData=0x3be1e0) returned 1 [0141.748] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be1e0 | out: lpFindFileData=0x3be1e0) returned 0 [0141.748] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0141.748] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be440) returned 1 [0141.748] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be400) returned 1 [0141.748] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be480) returned 1 [0141.748] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Virtualized\\C\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows", nBufferLength=0x105, lpBuffer=0x3bdf70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Virtualized\\C\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows", lpFilePart=0x0) returned 0x80 [0141.749] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Virtualized\\C\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\", nBufferLength=0x105, lpBuffer=0x3bdf10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Virtualized\\C\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\", lpFilePart=0x0) returned 0x81 [0141.749] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Virtualized\\C\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\*", lpFindFileData=0x3be120 | out: lpFindFileData=0x3be120) returned 0x5d7370 [0141.749] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be170 | out: lpFindFileData=0x3be170) returned 1 [0141.749] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be170 | out: lpFindFileData=0x3be170) returned 1 [0141.749] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be170 | out: lpFindFileData=0x3be170) returned 1 [0141.749] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be170 | out: lpFindFileData=0x3be170) returned 0 [0141.749] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0141.749] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be3d0) returned 1 [0141.749] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be390) returned 1 [0141.749] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be480) returned 1 [0141.750] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Virtualized\\C\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows", nBufferLength=0x105, lpBuffer=0x3bdf70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Virtualized\\C\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows", lpFilePart=0x0) returned 0x80 [0141.750] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Virtualized\\C\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\", nBufferLength=0x105, lpBuffer=0x3bdf10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Virtualized\\C\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\", lpFilePart=0x0) returned 0x81 [0141.750] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Virtualized\\C\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\*", lpFindFileData=0x3be120 | out: lpFindFileData=0x3be120) returned 0x5d81b0 [0141.750] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be170 | out: lpFindFileData=0x3be170) returned 1 [0141.750] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be170 | out: lpFindFileData=0x3be170) returned 1 [0141.750] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be170 | out: lpFindFileData=0x3be170) returned 1 [0141.750] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be170 | out: lpFindFileData=0x3be170) returned 0 [0141.750] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0141.750] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be3d0) returned 1 [0141.750] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be390) returned 1 [0141.750] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be410) returned 1 [0141.750] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Virtualized\\C\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache", nBufferLength=0x105, lpBuffer=0x3bdf00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Virtualized\\C\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache", lpFilePart=0x0) returned 0x8a [0141.750] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Virtualized\\C\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\", nBufferLength=0x105, lpBuffer=0x3bdea0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Virtualized\\C\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\", lpFilePart=0x0) returned 0x8b [0141.750] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Virtualized\\C\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\*", lpFindFileData=0x3be0b0 | out: lpFindFileData=0x3be0b0) returned 0x5d78b0 [0141.751] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be100 | out: lpFindFileData=0x3be100) returned 1 [0141.751] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be100 | out: lpFindFileData=0x3be100) returned 0 [0141.751] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0141.751] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be360) returned 1 [0141.751] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0141.751] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be410) returned 1 [0141.751] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Virtualized\\C\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache", nBufferLength=0x105, lpBuffer=0x3bdf00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Virtualized\\C\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache", lpFilePart=0x0) returned 0x8a [0141.751] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Virtualized\\C\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\", nBufferLength=0x105, lpBuffer=0x3bdea0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Virtualized\\C\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\", lpFilePart=0x0) returned 0x8b [0141.751] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Virtualized\\C\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\*", lpFindFileData=0x3be0b0 | out: lpFindFileData=0x3be0b0) returned 0x5d7a30 [0141.751] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be100 | out: lpFindFileData=0x3be100) returned 1 [0141.751] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be100 | out: lpFindFileData=0x3be100) returned 0 [0141.752] FindClose (in: hFindFile=0x5d7a30 | out: hFindFile=0x5d7a30) returned 1 [0141.752] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be360) returned 1 [0141.752] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0141.752] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be410) returned 1 [0141.752] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Virtualized\\C\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies", nBufferLength=0x105, lpBuffer=0x3bdf00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Virtualized\\C\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies", lpFilePart=0x0) returned 0x8c [0141.752] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Virtualized\\C\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\", nBufferLength=0x105, lpBuffer=0x3bdea0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Virtualized\\C\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\", lpFilePart=0x0) returned 0x8d [0141.752] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Virtualized\\C\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\*", lpFindFileData=0x3be0b0 | out: lpFindFileData=0x3be0b0) returned 0x5d7e50 [0141.752] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be100 | out: lpFindFileData=0x3be100) returned 1 [0141.752] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be100 | out: lpFindFileData=0x3be100) returned 0 [0141.752] FindClose (in: hFindFile=0x5d7e50 | out: hFindFile=0x5d7e50) returned 1 [0141.752] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be360) returned 1 [0141.752] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0141.752] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be410) returned 1 [0141.752] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Virtualized\\C\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies", nBufferLength=0x105, lpBuffer=0x3bdf00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Virtualized\\C\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies", lpFilePart=0x0) returned 0x8c [0141.753] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Virtualized\\C\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\", nBufferLength=0x105, lpBuffer=0x3bdea0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Virtualized\\C\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\", lpFilePart=0x0) returned 0x8d [0141.753] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Virtualized\\C\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\*", lpFindFileData=0x3be0b0 | out: lpFindFileData=0x3be0b0) returned 0x5d7550 [0141.753] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be100 | out: lpFindFileData=0x3be100) returned 1 [0141.753] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be100 | out: lpFindFileData=0x3be100) returned 0 [0141.753] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0141.753] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be360) returned 1 [0141.753] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0141.753] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0141.753] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies", lpFilePart=0x0) returned 0x41 [0141.753] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\", lpFilePart=0x0) returned 0x42 [0141.753] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7670 [0141.754] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0141.754] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0141.754] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0141.754] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0141.754] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0141.754] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0141.754] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0141.755] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0141.755] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0141.755] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0141.755] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0141.755] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0141.755] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0141.755] FindClose (in: hFindFile=0x5d7670 | out: hFindFile=0x5d7670) returned 1 [0141.755] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0141.755] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0141.755] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0141.755] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies", lpFilePart=0x0) returned 0x41 [0141.756] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\", lpFilePart=0x0) returned 0x42 [0141.756] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d78b0 [0141.756] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0141.756] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0141.756] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0141.756] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0141.756] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0141.756] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0141.756] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0141.757] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0141.757] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0141.757] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0141.757] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0141.757] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0141.757] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0141.757] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0141.757] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0141.757] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0141.757] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\2XBM2EDN.txt", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\2XBM2EDN.txt", lpFilePart=0x0) returned 0x4e [0141.757] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0141.757] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\2XBM2EDN.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\2xbm2edn.txt"), fInfoLevelId=0x0, lpFileInformation=0x21af0b0 | out: lpFileInformation=0x21af0b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53fe710e, ftCreationTime.dwHighDateTime=0x1d35db9, ftLastAccessTime.dwLowDateTime=0x53fe710e, ftLastAccessTime.dwHighDateTime=0x1d35db9, ftLastWriteTime.dwLowDateTime=0x53fe9815, ftLastWriteTime.dwHighDateTime=0x1d35db9, nFileSizeHigh=0x0, nFileSizeLow=0xca)) returned 1 [0141.759] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0141.759] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\2XBM2EDN.txt", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\2XBM2EDN.txt", lpFilePart=0x0) returned 0x4e [0141.759] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0141.759] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\2XBM2EDN.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\2xbm2edn.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0141.759] GetFileType (hFile=0x444) returned 0x1 [0141.759] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0141.759] GetFileType (hFile=0x444) returned 0x1 [0141.759] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0xca [0141.759] ReadFile (in: hFile=0x444, lpBuffer=0x21af448, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be718, lpOverlapped=0x0 | out: lpBuffer=0x21af448*, lpNumberOfBytesRead=0x3be718*=0xca, lpOverlapped=0x0) returned 1 [0141.760] CloseHandle (hObject=0x444) returned 1 [0141.796] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\2XBM2EDN.txt", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\2XBM2EDN.txt", lpFilePart=0x0) returned 0x4e [0141.796] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0141.796] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\2XBM2EDN.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\2xbm2edn.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0141.797] GetFileType (hFile=0x444) returned 0x1 [0141.797] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0141.797] GetFileType (hFile=0x444) returned 0x1 [0141.797] WriteFile (in: hFile=0x444, lpBuffer=0x22266e8*, nNumberOfBytesToWrite=0xd0, lpNumberOfBytesWritten=0x3be628, lpOverlapped=0x0 | out: lpBuffer=0x22266e8*, lpNumberOfBytesWritten=0x3be628*=0xd0, lpOverlapped=0x0) returned 1 [0141.798] CloseHandle (hObject=0x444) returned 1 [0141.798] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\2XBM2EDN.txt", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\2XBM2EDN.txt", lpFilePart=0x0) returned 0x4e [0141.798] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\2XBM2EDN.txt.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\2XBM2EDN.txt.xuy", lpFilePart=0x0) returned 0x52 [0141.798] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0141.798] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\2XBM2EDN.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\2xbm2edn.txt"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53fe710e, ftCreationTime.dwHighDateTime=0x1d35db9, ftLastAccessTime.dwLowDateTime=0x53fe710e, ftLastAccessTime.dwHighDateTime=0x1d35db9, ftLastWriteTime.dwLowDateTime=0x405e56c9, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xd0)) returned 1 [0141.798] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0141.798] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\2XBM2EDN.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\2xbm2edn.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\2XBM2EDN.txt.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\2xbm2edn.txt.xuy")) returned 1 [0141.799] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\8489XH4E.txt", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\8489XH4E.txt", lpFilePart=0x0) returned 0x4e [0141.799] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0141.799] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\8489XH4E.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\8489xh4e.txt"), fInfoLevelId=0x0, lpFileInformation=0x2227980 | out: lpFileInformation=0x2227980*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9540a754, ftCreationTime.dwHighDateTime=0x1d2d438, ftLastAccessTime.dwLowDateTime=0x9540a754, ftLastAccessTime.dwHighDateTime=0x1d2d438, ftLastWriteTime.dwLowDateTime=0x9540a754, ftLastWriteTime.dwHighDateTime=0x1d2d438, nFileSizeHigh=0x0, nFileSizeLow=0x69)) returned 1 [0141.800] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0141.800] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\8489XH4E.txt", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\8489XH4E.txt", lpFilePart=0x0) returned 0x4e [0141.800] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0141.800] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\8489XH4E.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\8489xh4e.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0141.800] GetFileType (hFile=0x444) returned 0x1 [0141.800] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0141.800] GetFileType (hFile=0x444) returned 0x1 [0141.800] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0x69 [0141.800] ReadFile (in: hFile=0x444, lpBuffer=0x2227cb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be718, lpOverlapped=0x0 | out: lpBuffer=0x2227cb8*, lpNumberOfBytesRead=0x3be718*=0x69, lpOverlapped=0x0) returned 1 [0141.801] CloseHandle (hObject=0x444) returned 1 [0141.811] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\8489XH4E.txt", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\8489XH4E.txt", lpFilePart=0x0) returned 0x4e [0141.811] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0141.811] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\8489XH4E.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\8489xh4e.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0141.813] GetFileType (hFile=0x444) returned 0x1 [0141.813] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0141.813] GetFileType (hFile=0x444) returned 0x1 [0141.813] WriteFile (in: hFile=0x444, lpBuffer=0x229ee98*, nNumberOfBytesToWrite=0x70, lpNumberOfBytesWritten=0x3be628, lpOverlapped=0x0 | out: lpBuffer=0x229ee98*, lpNumberOfBytesWritten=0x3be628*=0x70, lpOverlapped=0x0) returned 1 [0141.813] CloseHandle (hObject=0x444) returned 1 [0141.814] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\8489XH4E.txt", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\8489XH4E.txt", lpFilePart=0x0) returned 0x4e [0141.814] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\8489XH4E.txt.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\8489XH4E.txt.xuy", lpFilePart=0x0) returned 0x52 [0141.814] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0141.814] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\8489XH4E.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\8489xh4e.txt"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9540a754, ftCreationTime.dwHighDateTime=0x1d2d438, ftLastAccessTime.dwLowDateTime=0x9540a754, ftLastAccessTime.dwHighDateTime=0x1d2d438, ftLastWriteTime.dwLowDateTime=0x4060bc75, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x70)) returned 1 [0141.814] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0141.814] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\8489XH4E.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\8489xh4e.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\8489XH4E.txt.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\8489xh4e.txt.xuy")) returned 1 [0141.815] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\B4K109K7.txt", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\B4K109K7.txt", lpFilePart=0x0) returned 0x4e [0141.815] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0141.815] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\B4K109K7.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\b4k109k7.txt"), fInfoLevelId=0x0, lpFileInformation=0x22a0130 | out: lpFileInformation=0x22a0130*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52bca84a, ftCreationTime.dwHighDateTime=0x1d35db9, ftLastAccessTime.dwLowDateTime=0x52bca84a, ftLastAccessTime.dwHighDateTime=0x1d35db9, ftLastWriteTime.dwLowDateTime=0x52bd4485, ftLastWriteTime.dwHighDateTime=0x1d35db9, nFileSizeHigh=0x0, nFileSizeLow=0x169)) returned 1 [0141.816] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0141.816] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\B4K109K7.txt", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\B4K109K7.txt", lpFilePart=0x0) returned 0x4e [0141.816] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0141.816] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\B4K109K7.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\b4k109k7.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0141.816] GetFileType (hFile=0x444) returned 0x1 [0141.816] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0141.816] GetFileType (hFile=0x444) returned 0x1 [0141.816] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0x169 [0141.816] ReadFile (in: hFile=0x444, lpBuffer=0x22a0568, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be718, lpOverlapped=0x0 | out: lpBuffer=0x22a0568*, lpNumberOfBytesRead=0x3be718*=0x169, lpOverlapped=0x0) returned 1 [0141.817] CloseHandle (hObject=0x444) returned 1 [0141.829] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\B4K109K7.txt", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\B4K109K7.txt", lpFilePart=0x0) returned 0x4e [0141.829] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0141.829] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\B4K109K7.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\b4k109k7.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0141.831] GetFileType (hFile=0x444) returned 0x1 [0141.831] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0141.831] GetFileType (hFile=0x444) returned 0x1 [0141.831] WriteFile (in: hFile=0x444, lpBuffer=0x2317c80*, nNumberOfBytesToWrite=0x170, lpNumberOfBytesWritten=0x3be628, lpOverlapped=0x0 | out: lpBuffer=0x2317c80*, lpNumberOfBytesWritten=0x3be628*=0x170, lpOverlapped=0x0) returned 1 [0141.831] CloseHandle (hObject=0x444) returned 1 [0141.832] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\B4K109K7.txt", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\B4K109K7.txt", lpFilePart=0x0) returned 0x4e [0141.832] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\B4K109K7.txt.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\B4K109K7.txt.xuy", lpFilePart=0x0) returned 0x52 [0141.832] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0141.832] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\B4K109K7.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\b4k109k7.txt"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52bca84a, ftCreationTime.dwHighDateTime=0x1d35db9, ftLastAccessTime.dwLowDateTime=0x52bca84a, ftLastAccessTime.dwHighDateTime=0x1d35db9, ftLastWriteTime.dwLowDateTime=0x40631b8e, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x170)) returned 1 [0141.832] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0141.832] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\B4K109K7.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\b4k109k7.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\B4K109K7.txt.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\b4k109k7.txt.xuy")) returned 1 [0141.833] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\B67M68H4.txt", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\B67M68H4.txt", lpFilePart=0x0) returned 0x4e [0141.833] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0141.833] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\B67M68H4.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\b67m68h4.txt"), fInfoLevelId=0x0, lpFileInformation=0x2318f18 | out: lpFileInformation=0x2318f18*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5397a907, ftCreationTime.dwHighDateTime=0x1d35db9, ftLastAccessTime.dwLowDateTime=0x5397a907, ftLastAccessTime.dwHighDateTime=0x1d35db9, ftLastWriteTime.dwLowDateTime=0x5397bc9a, ftLastWriteTime.dwHighDateTime=0x1d35db9, nFileSizeHigh=0x0, nFileSizeLow=0x65)) returned 1 [0141.833] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0141.833] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\B67M68H4.txt", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\B67M68H4.txt", lpFilePart=0x0) returned 0x4e [0141.833] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0141.833] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\B67M68H4.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\b67m68h4.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0141.833] GetFileType (hFile=0x444) returned 0x1 [0141.834] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0141.834] GetFileType (hFile=0x444) returned 0x1 [0141.834] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0x65 [0141.834] ReadFile (in: hFile=0x444, lpBuffer=0x2319248, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be718, lpOverlapped=0x0 | out: lpBuffer=0x2319248*, lpNumberOfBytesRead=0x3be718*=0x65, lpOverlapped=0x0) returned 1 [0141.835] CloseHandle (hObject=0x444) returned 1 [0141.874] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\B67M68H4.txt", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\B67M68H4.txt", lpFilePart=0x0) returned 0x4e [0141.874] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0141.874] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\B67M68H4.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\b67m68h4.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0141.876] GetFileType (hFile=0x444) returned 0x1 [0141.876] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0141.876] GetFileType (hFile=0x444) returned 0x1 [0141.876] WriteFile (in: hFile=0x444, lpBuffer=0x2190420*, nNumberOfBytesToWrite=0x70, lpNumberOfBytesWritten=0x3be628, lpOverlapped=0x0 | out: lpBuffer=0x2190420*, lpNumberOfBytesWritten=0x3be628*=0x70, lpOverlapped=0x0) returned 1 [0141.877] CloseHandle (hObject=0x444) returned 1 [0141.877] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\B67M68H4.txt", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\B67M68H4.txt", lpFilePart=0x0) returned 0x4e [0141.877] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\B67M68H4.txt.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\B67M68H4.txt.xuy", lpFilePart=0x0) returned 0x52 [0141.877] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0141.877] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\B67M68H4.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\b67m68h4.txt"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5397a907, ftCreationTime.dwHighDateTime=0x1d35db9, ftLastAccessTime.dwLowDateTime=0x5397a907, ftLastAccessTime.dwHighDateTime=0x1d35db9, ftLastWriteTime.dwLowDateTime=0x406a46bc, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x70)) returned 1 [0141.877] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0141.877] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\B67M68H4.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\b67m68h4.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\B67M68H4.txt.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\b67m68h4.txt.xuy")) returned 1 [0141.878] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\container.dat", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\container.dat", lpFilePart=0x0) returned 0x4f [0141.878] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0141.878] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x21916b8 | out: lpFileInformation=0x21916b8*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x3e6d7cfc, ftCreationTime.dwHighDateTime=0x1d2d02b, ftLastAccessTime.dwLowDateTime=0x3e6d7cfc, ftLastAccessTime.dwHighDateTime=0x1d2d02b, ftLastWriteTime.dwLowDateTime=0x3e6d7cfc, ftLastWriteTime.dwHighDateTime=0x1d2d02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0141.878] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0141.878] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\container.dat", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\container.dat", lpFilePart=0x0) returned 0x4f [0141.878] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0141.879] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0141.879] GetFileType (hFile=0x444) returned 0x1 [0141.879] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0141.879] GetFileType (hFile=0x444) returned 0x1 [0141.879] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0x0 [0141.879] CloseHandle (hObject=0x444) returned 1 [0141.890] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\container.dat", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\container.dat", lpFilePart=0x0) returned 0x4f [0141.891] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0141.891] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\container.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0141.892] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb0e0) returned 1 [0141.893] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\container.dat", lpFilePart=0x0) returned 0x4f [0141.893] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc200) returned 1 [0141.893] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x3bc2e0 | out: lpFileInformation=0x3bc2e0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x3e6d7cfc, ftCreationTime.dwHighDateTime=0x1d2d02b, ftLastAccessTime.dwLowDateTime=0x3e6d7cfc, ftLastAccessTime.dwHighDateTime=0x1d2d02b, ftLastWriteTime.dwLowDateTime=0x3e6d7cfc, ftLastWriteTime.dwHighDateTime=0x1d2d02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0141.893] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1c0) returned 1 [0141.893] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbd80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\container.dat", lpFilePart=0x0) returned 0x4f [0141.893] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc200) returned 1 [0141.893] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x22082d0 | out: lpFileInformation=0x22082d0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x3e6d7cfc, ftCreationTime.dwHighDateTime=0x1d2d02b, ftLastAccessTime.dwLowDateTime=0x3e6d7cfc, ftLastAccessTime.dwHighDateTime=0x1d2d02b, ftLastWriteTime.dwLowDateTime=0x3e6d7cfc, ftLastWriteTime.dwHighDateTime=0x1d2d02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0141.893] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1c0) returned 1 [0141.893] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\container.dat", lpFilePart=0x0) returned 0x4f [0141.893] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0c0) returned 1 [0141.893] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0141.893] GetFileType (hFile=0x444) returned 0x1 [0141.893] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc030) returned 1 [0141.893] GetFileType (hFile=0x444) returned 0x1 [0141.893] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc258 | out: lpFileSizeHigh=0x3bc258*=0x0) returned 0x0 [0141.893] CloseHandle (hObject=0x444) returned 1 [0141.930] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\container.dat", lpFilePart=0x0) returned 0x4f [0141.930] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0c0) returned 1 [0141.931] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\container.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0141.932] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8b50) returned 1 [0141.933] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\OOUVZSZN.txt", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\OOUVZSZN.txt", lpFilePart=0x0) returned 0x4e [0141.933] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0141.933] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\OOUVZSZN.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\oouvzszn.txt"), fInfoLevelId=0x0, lpFileInformation=0x227ee58 | out: lpFileInformation=0x227ee58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb744c667, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0xb744c667, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0xb744c667, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0xa1)) returned 1 [0141.933] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0141.933] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\OOUVZSZN.txt", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\OOUVZSZN.txt", lpFilePart=0x0) returned 0x4e [0141.933] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0141.933] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\OOUVZSZN.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\oouvzszn.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0141.933] GetFileType (hFile=0x444) returned 0x1 [0141.933] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0141.934] GetFileType (hFile=0x444) returned 0x1 [0141.934] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0xa1 [0141.934] ReadFile (in: hFile=0x444, lpBuffer=0x227f1c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be718, lpOverlapped=0x0 | out: lpBuffer=0x227f1c8*, lpNumberOfBytesRead=0x3be718*=0xa1, lpOverlapped=0x0) returned 1 [0141.935] CloseHandle (hObject=0x444) returned 1 [0141.973] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\OOUVZSZN.txt", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\OOUVZSZN.txt", lpFilePart=0x0) returned 0x4e [0141.973] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0141.973] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\OOUVZSZN.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\oouvzszn.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0141.975] GetFileType (hFile=0x444) returned 0x1 [0141.975] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0141.975] GetFileType (hFile=0x444) returned 0x1 [0141.975] WriteFile (in: hFile=0x444, lpBuffer=0x22f6430*, nNumberOfBytesToWrite=0xb0, lpNumberOfBytesWritten=0x3be628, lpOverlapped=0x0 | out: lpBuffer=0x22f6430*, lpNumberOfBytesWritten=0x3be628*=0xb0, lpOverlapped=0x0) returned 1 [0141.976] CloseHandle (hObject=0x444) returned 1 [0141.976] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\OOUVZSZN.txt", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\OOUVZSZN.txt", lpFilePart=0x0) returned 0x4e [0141.976] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\OOUVZSZN.txt.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\OOUVZSZN.txt.xuy", lpFilePart=0x0) returned 0x52 [0141.976] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0141.976] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\OOUVZSZN.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\oouvzszn.txt"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb744c667, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0xb744c667, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x407893bb, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xb0)) returned 1 [0141.976] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0141.976] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\OOUVZSZN.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\oouvzszn.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\OOUVZSZN.txt.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\oouvzszn.txt.xuy")) returned 1 [0141.977] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\TIGZFGLM.txt", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\TIGZFGLM.txt", lpFilePart=0x0) returned 0x4e [0141.977] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0141.977] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\TIGZFGLM.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\tigzfglm.txt"), fInfoLevelId=0x0, lpFileInformation=0x22f76c8 | out: lpFileInformation=0x22f76c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb744c667, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0xb744c667, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0xb744c667, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0x7a)) returned 1 [0141.978] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0141.978] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\TIGZFGLM.txt", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\TIGZFGLM.txt", lpFilePart=0x0) returned 0x4e [0141.978] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0141.978] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\TIGZFGLM.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\tigzfglm.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0141.978] GetFileType (hFile=0x444) returned 0x1 [0141.978] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0141.978] GetFileType (hFile=0x444) returned 0x1 [0141.978] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0x7a [0141.978] ReadFile (in: hFile=0x444, lpBuffer=0x22f7a10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be718, lpOverlapped=0x0 | out: lpBuffer=0x22f7a10*, lpNumberOfBytesRead=0x3be718*=0x7a, lpOverlapped=0x0) returned 1 [0141.979] CloseHandle (hObject=0x444) returned 1 [0142.020] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\TIGZFGLM.txt", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\TIGZFGLM.txt", lpFilePart=0x0) returned 0x4e [0142.020] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0142.020] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\TIGZFGLM.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\tigzfglm.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0142.022] GetFileType (hFile=0x444) returned 0x1 [0142.022] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0142.022] GetFileType (hFile=0x444) returned 0x1 [0142.022] WriteFile (in: hFile=0x444, lpBuffer=0x216ebf8*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x3be628, lpOverlapped=0x0 | out: lpBuffer=0x216ebf8*, lpNumberOfBytesWritten=0x3be628*=0x80, lpOverlapped=0x0) returned 1 [0142.024] CloseHandle (hObject=0x444) returned 1 [0142.024] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\TIGZFGLM.txt", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\TIGZFGLM.txt", lpFilePart=0x0) returned 0x4e [0142.024] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\TIGZFGLM.txt.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\TIGZFGLM.txt.xuy", lpFilePart=0x0) returned 0x52 [0142.024] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0142.024] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\TIGZFGLM.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\tigzfglm.txt"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb744c667, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0xb744c667, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x407fb7a2, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x80)) returned 1 [0142.024] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0142.024] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\TIGZFGLM.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\tigzfglm.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\TIGZFGLM.txt.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\tigzfglm.txt.xuy")) returned 1 [0142.025] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\XNW1G0SM.txt", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\XNW1G0SM.txt", lpFilePart=0x0) returned 0x4e [0142.026] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0142.026] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\XNW1G0SM.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\xnw1g0sm.txt"), fInfoLevelId=0x0, lpFileInformation=0x216fe90 | out: lpFileInformation=0x216fe90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x958f53b4, ftCreationTime.dwHighDateTime=0x1d2d438, ftLastAccessTime.dwLowDateTime=0x958f53b4, ftLastAccessTime.dwHighDateTime=0x1d2d438, ftLastWriteTime.dwLowDateTime=0x958f53b4, ftLastWriteTime.dwHighDateTime=0x1d2d438, nFileSizeHigh=0x0, nFileSizeLow=0x75)) returned 1 [0142.026] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0142.026] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\XNW1G0SM.txt", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\XNW1G0SM.txt", lpFilePart=0x0) returned 0x4e [0142.026] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0142.026] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\XNW1G0SM.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\xnw1g0sm.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0142.026] GetFileType (hFile=0x444) returned 0x1 [0142.026] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0142.026] GetFileType (hFile=0x444) returned 0x1 [0142.026] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0x75 [0142.026] ReadFile (in: hFile=0x444, lpBuffer=0x21701d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be718, lpOverlapped=0x0 | out: lpBuffer=0x21701d0*, lpNumberOfBytesRead=0x3be718*=0x75, lpOverlapped=0x0) returned 1 [0142.027] CloseHandle (hObject=0x444) returned 1 [0142.074] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\XNW1G0SM.txt", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\XNW1G0SM.txt", lpFilePart=0x0) returned 0x4e [0142.074] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0142.074] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\XNW1G0SM.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\xnw1g0sm.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0142.076] GetFileType (hFile=0x444) returned 0x1 [0142.076] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0142.076] GetFileType (hFile=0x444) returned 0x1 [0142.076] WriteFile (in: hFile=0x444, lpBuffer=0x21e73d8*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x3be628, lpOverlapped=0x0 | out: lpBuffer=0x21e73d8*, lpNumberOfBytesWritten=0x3be628*=0x80, lpOverlapped=0x0) returned 1 [0142.077] CloseHandle (hObject=0x444) returned 1 [0142.077] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\XNW1G0SM.txt", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\XNW1G0SM.txt", lpFilePart=0x0) returned 0x4e [0142.077] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\XNW1G0SM.txt.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\XNW1G0SM.txt.xuy", lpFilePart=0x0) returned 0x52 [0142.077] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0142.077] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\XNW1G0SM.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\xnw1g0sm.txt"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x958f53b4, ftCreationTime.dwHighDateTime=0x1d2d438, ftLastAccessTime.dwLowDateTime=0x958f53b4, ftLastAccessTime.dwHighDateTime=0x1d2d438, ftLastWriteTime.dwLowDateTime=0x40894a66, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x80)) returned 1 [0142.077] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0142.077] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\XNW1G0SM.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\xnw1g0sm.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\XNW1G0SM.txt.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\xnw1g0sm.txt.xuy")) returned 1 [0142.078] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0142.078] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\DNTException", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\DNTException", lpFilePart=0x0) returned 0x4e [0142.078] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\DNTException\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\DNTException\\", lpFilePart=0x0) returned 0x4f [0142.079] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\DNTException\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d79d0 [0142.079] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.079] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.079] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.079] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0142.079] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0142.079] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0142.079] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0142.079] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0142.079] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\DNTException", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\DNTException", lpFilePart=0x0) returned 0x4e [0142.079] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\DNTException\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\DNTException\\", lpFilePart=0x0) returned 0x4f [0142.080] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\DNTException\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7c70 [0142.080] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.080] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.080] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.080] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0142.080] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0142.080] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0142.080] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0142.080] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\DNTException\\container.dat", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\DNTException\\container.dat", lpFilePart=0x0) returned 0x5c [0142.080] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0142.080] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\DNTException\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\dntexception\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x21eabe0 | out: lpFileInformation=0x21eabe0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x902f757d, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x902f757d, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x902f757d, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0142.081] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0142.081] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\DNTException\\container.dat", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\DNTException\\container.dat", lpFilePart=0x0) returned 0x5c [0142.081] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0142.081] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\DNTException\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\dntexception\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0142.081] GetFileType (hFile=0x444) returned 0x1 [0142.081] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0142.081] GetFileType (hFile=0x444) returned 0x1 [0142.081] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x0 [0142.081] CloseHandle (hObject=0x444) returned 1 [0142.093] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\DNTException\\container.dat", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\DNTException\\container.dat", lpFilePart=0x0) returned 0x5c [0142.093] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0142.093] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\DNTException\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\dntexception\\container.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0142.094] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb070) returned 1 [0142.095] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\DNTException\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbcf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\DNTException\\container.dat", lpFilePart=0x0) returned 0x5c [0142.095] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0142.095] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\DNTException\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\dntexception\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x3bc270 | out: lpFileInformation=0x3bc270*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x902f757d, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x902f757d, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x902f757d, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0142.095] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc150) returned 1 [0142.095] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\DNTException\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbd10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\DNTException\\container.dat", lpFilePart=0x0) returned 0x5c [0142.095] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0142.095] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\DNTException\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\dntexception\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x2261898 | out: lpFileInformation=0x2261898*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x902f757d, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x902f757d, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x902f757d, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0142.095] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc150) returned 1 [0142.095] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\DNTException\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\DNTException\\container.dat", lpFilePart=0x0) returned 0x5c [0142.095] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc050) returned 1 [0142.095] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\DNTException\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\dntexception\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0142.096] GetFileType (hFile=0x444) returned 0x1 [0142.096] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbfc0) returned 1 [0142.096] GetFileType (hFile=0x444) returned 0x1 [0142.096] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc1e8 | out: lpFileSizeHigh=0x3bc1e8*=0x0) returned 0x0 [0142.096] CloseHandle (hObject=0x444) returned 1 [0142.133] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\DNTException\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\DNTException\\container.dat", lpFilePart=0x0) returned 0x5c [0142.133] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc050) returned 1 [0142.133] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\DNTException\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\dntexception\\container.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0142.135] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8ae0) returned 1 [0142.136] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0142.136] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\DNTException\\Low", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\DNTException\\Low", lpFilePart=0x0) returned 0x52 [0142.136] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\DNTException\\Low\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\DNTException\\Low\\", lpFilePart=0x0) returned 0x53 [0142.136] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\DNTException\\Low\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d78b0 [0142.136] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0142.136] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0142.136] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0142.136] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0142.136] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0142.136] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0142.137] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\DNTException\\Low", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\DNTException\\Low", lpFilePart=0x0) returned 0x52 [0142.137] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\DNTException\\Low\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\DNTException\\Low\\", lpFilePart=0x0) returned 0x53 [0142.137] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\DNTException\\Low\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d79d0 [0142.137] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0142.137] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0142.137] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0142.137] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0142.137] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0142.137] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0142.137] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low", lpFilePart=0x0) returned 0x45 [0142.137] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\", lpFilePart=0x0) returned 0x46 [0142.137] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d81b0 [0142.140] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.140] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.140] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.140] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.140] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.140] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.140] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.140] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.141] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.141] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.141] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.141] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.141] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.141] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.141] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.141] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.141] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.141] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.142] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.142] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.142] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.142] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.142] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.142] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.142] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.142] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.142] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.142] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.143] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.143] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.143] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.143] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.143] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.143] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.143] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.144] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.144] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.144] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.144] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.144] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.144] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.144] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.144] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.144] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.145] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.145] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.145] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.145] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.145] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.145] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.145] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.145] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.145] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.145] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.146] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.146] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.146] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.146] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.146] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.146] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.146] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.147] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.147] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.147] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.147] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.147] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.147] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.147] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.147] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.148] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.148] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.148] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.149] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.149] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.149] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.149] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.149] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.149] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.149] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.149] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.149] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.149] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.150] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.150] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.150] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.150] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.150] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.150] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.150] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.150] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.150] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.151] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.151] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.151] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.151] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.151] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.151] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.151] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.151] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.151] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.151] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.151] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.152] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.152] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.152] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.152] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.152] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.152] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.152] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.152] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.152] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.152] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.153] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.153] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0142.153] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0142.153] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0142.153] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0142.153] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0142.153] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low", lpFilePart=0x0) returned 0x45 [0142.154] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\", lpFilePart=0x0) returned 0x46 [0142.154] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7550 [0142.155] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.155] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.155] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.155] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.155] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.155] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.155] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.155] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.156] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.156] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.156] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.156] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.156] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.156] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.156] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.156] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.156] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.157] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.157] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.157] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.157] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.157] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.157] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.157] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.157] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.157] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.157] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.158] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.158] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.158] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.158] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.158] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.158] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.158] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.158] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.159] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.159] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.159] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.159] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.159] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.159] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.159] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.159] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.159] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.160] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.160] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.160] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.160] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.160] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.160] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.160] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.160] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.160] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.161] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.161] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.161] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.161] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.161] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.161] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.161] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.161] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.161] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.161] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.161] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.161] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.161] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.161] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.161] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.161] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.161] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.161] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.161] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.162] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.162] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.162] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.162] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.162] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.162] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.162] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.162] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.162] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.162] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.162] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.162] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.162] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.162] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.162] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.162] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.162] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.162] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.162] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.162] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.162] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.162] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.162] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.162] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.163] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.163] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.163] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.163] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.163] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.163] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.163] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.163] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.163] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.163] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.163] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.163] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.163] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.163] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.163] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.163] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.163] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0142.163] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0142.163] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0142.164] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0142.164] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0142.164] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\0GHTMU6X.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\0GHTMU6X.txt", lpFilePart=0x0) returned 0x52 [0142.164] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0142.164] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\0GHTMU6X.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\0ghtmu6x.txt"), fInfoLevelId=0x0, lpFileInformation=0x22f8f58 | out: lpFileInformation=0x22f8f58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9f326f8c, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x9f326f8c, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x9f326f8c, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0x6b)) returned 1 [0142.170] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0142.170] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\0GHTMU6X.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\0GHTMU6X.txt", lpFilePart=0x0) returned 0x52 [0142.170] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0142.170] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\0GHTMU6X.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\0ghtmu6x.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0142.170] GetFileType (hFile=0x444) returned 0x1 [0142.170] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0142.170] GetFileType (hFile=0x444) returned 0x1 [0142.170] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x6b [0142.170] ReadFile (in: hFile=0x444, lpBuffer=0x22f92a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x22f92a0*, lpNumberOfBytesRead=0x3be6a8*=0x6b, lpOverlapped=0x0) returned 1 [0142.171] CloseHandle (hObject=0x444) returned 1 [0142.224] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\0GHTMU6X.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\0GHTMU6X.txt", lpFilePart=0x0) returned 0x52 [0142.224] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0142.224] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\0GHTMU6X.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\0ghtmu6x.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0142.226] GetFileType (hFile=0x444) returned 0x1 [0142.226] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0142.226] GetFileType (hFile=0x444) returned 0x1 [0142.226] WriteFile (in: hFile=0x444, lpBuffer=0x2175888*, nNumberOfBytesToWrite=0x70, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x2175888*, lpNumberOfBytesWritten=0x3be5b8*=0x70, lpOverlapped=0x0) returned 1 [0142.227] CloseHandle (hObject=0x444) returned 1 [0142.227] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\0GHTMU6X.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\0GHTMU6X.txt", lpFilePart=0x0) returned 0x52 [0142.227] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\0GHTMU6X.txt.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\0GHTMU6X.txt.xuy", lpFilePart=0x0) returned 0x56 [0142.227] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0142.227] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\0GHTMU6X.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\0ghtmu6x.txt"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9f326f8c, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x9f326f8c, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x409eb5e7, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x70)) returned 1 [0142.227] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0142.227] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\0GHTMU6X.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\0ghtmu6x.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\0GHTMU6X.txt.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\0ghtmu6x.txt.xuy")) returned 1 [0142.228] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\0MDKR34W.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\0MDKR34W.txt", lpFilePart=0x0) returned 0x52 [0142.228] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0142.228] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\0MDKR34W.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\0mdkr34w.txt"), fInfoLevelId=0x0, lpFileInformation=0x2176b38 | out: lpFileInformation=0x2176b38*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x94bfa84a, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x94bfa84a, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x94bfa84a, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0xa1)) returned 1 [0142.228] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0142.228] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\0MDKR34W.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\0MDKR34W.txt", lpFilePart=0x0) returned 0x52 [0142.228] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0142.228] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\0MDKR34W.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\0mdkr34w.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0142.229] GetFileType (hFile=0x444) returned 0x1 [0142.229] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0142.229] GetFileType (hFile=0x444) returned 0x1 [0142.229] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0xa1 [0142.229] ReadFile (in: hFile=0x444, lpBuffer=0x2176eb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x2176eb8*, lpNumberOfBytesRead=0x3be6a8*=0xa1, lpOverlapped=0x0) returned 1 [0142.238] CloseHandle (hObject=0x444) returned 1 [0142.269] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\0MDKR34W.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\0MDKR34W.txt", lpFilePart=0x0) returned 0x52 [0142.269] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0142.269] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\0MDKR34W.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\0mdkr34w.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0142.271] GetFileType (hFile=0x444) returned 0x1 [0142.271] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0142.271] GetFileType (hFile=0x444) returned 0x1 [0142.271] WriteFile (in: hFile=0x444, lpBuffer=0x21ee128*, nNumberOfBytesToWrite=0xb0, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x21ee128*, lpNumberOfBytesWritten=0x3be5b8*=0xb0, lpOverlapped=0x0) returned 1 [0142.272] CloseHandle (hObject=0x444) returned 1 [0142.272] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\0MDKR34W.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\0MDKR34W.txt", lpFilePart=0x0) returned 0x52 [0142.272] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\0MDKR34W.txt.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\0MDKR34W.txt.xuy", lpFilePart=0x0) returned 0x56 [0142.272] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0142.272] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\0MDKR34W.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\0mdkr34w.txt"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x94bfa84a, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x94bfa84a, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x40a5ddae, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xb0)) returned 1 [0142.272] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0142.272] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\0MDKR34W.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\0mdkr34w.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\0MDKR34W.txt.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\0mdkr34w.txt.xuy")) returned 1 [0142.273] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\0Z1JIEVI.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\0Z1JIEVI.txt", lpFilePart=0x0) returned 0x52 [0142.273] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0142.273] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\0Z1JIEVI.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\0z1jievi.txt"), fInfoLevelId=0x0, lpFileInformation=0x21ef3d8 | out: lpFileInformation=0x21ef3d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x98e9f65e, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x98e9f65e, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x98e9f65e, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0xdf)) returned 1 [0142.273] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0142.274] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\0Z1JIEVI.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\0Z1JIEVI.txt", lpFilePart=0x0) returned 0x52 [0142.274] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0142.274] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\0Z1JIEVI.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\0z1jievi.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0142.274] GetFileType (hFile=0x444) returned 0x1 [0142.274] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0142.274] GetFileType (hFile=0x444) returned 0x1 [0142.274] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0xdf [0142.274] ReadFile (in: hFile=0x444, lpBuffer=0x21ef790, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x21ef790*, lpNumberOfBytesRead=0x3be6a8*=0xdf, lpOverlapped=0x0) returned 1 [0142.276] CloseHandle (hObject=0x444) returned 1 [0142.288] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\0Z1JIEVI.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\0Z1JIEVI.txt", lpFilePart=0x0) returned 0x52 [0142.288] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0142.288] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\0Z1JIEVI.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\0z1jievi.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0142.290] GetFileType (hFile=0x444) returned 0x1 [0142.290] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0142.290] GetFileType (hFile=0x444) returned 0x1 [0142.290] WriteFile (in: hFile=0x444, lpBuffer=0x2266a58*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x2266a58*, lpNumberOfBytesWritten=0x3be5b8*=0xe0, lpOverlapped=0x0) returned 1 [0142.291] CloseHandle (hObject=0x444) returned 1 [0142.291] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\0Z1JIEVI.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\0Z1JIEVI.txt", lpFilePart=0x0) returned 0x52 [0142.291] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\0Z1JIEVI.txt.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\0Z1JIEVI.txt.xuy", lpFilePart=0x0) returned 0x56 [0142.291] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0142.291] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\0Z1JIEVI.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\0z1jievi.txt"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x98e9f65e, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x98e9f65e, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x40a8440d, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1 [0142.291] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0142.291] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\0Z1JIEVI.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\0z1jievi.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\0Z1JIEVI.txt.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\0z1jievi.txt.xuy")) returned 1 [0142.292] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\16DOE15M.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\16DOE15M.txt", lpFilePart=0x0) returned 0x52 [0142.292] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0142.292] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\16DOE15M.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\16doe15m.txt"), fInfoLevelId=0x0, lpFileInformation=0x2267d08 | out: lpFileInformation=0x2267d08*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9d49dc5f, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x9d49dc5f, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x9d49dc5f, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0x5d)) returned 1 [0142.292] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0142.292] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\16DOE15M.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\16DOE15M.txt", lpFilePart=0x0) returned 0x52 [0142.292] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0142.292] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\16DOE15M.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\16doe15m.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0142.293] GetFileType (hFile=0x444) returned 0x1 [0142.293] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0142.293] GetFileType (hFile=0x444) returned 0x1 [0142.293] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x5d [0142.293] ReadFile (in: hFile=0x444, lpBuffer=0x2268040, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x2268040*, lpNumberOfBytesRead=0x3be6a8*=0x5d, lpOverlapped=0x0) returned 1 [0142.294] CloseHandle (hObject=0x444) returned 1 [0142.304] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\16DOE15M.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\16DOE15M.txt", lpFilePart=0x0) returned 0x52 [0142.304] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0142.304] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\16DOE15M.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\16doe15m.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0142.306] GetFileType (hFile=0x444) returned 0x1 [0142.306] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0142.306] GetFileType (hFile=0x444) returned 0x1 [0142.306] WriteFile (in: hFile=0x444, lpBuffer=0x22df208*, nNumberOfBytesToWrite=0x60, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x22df208*, lpNumberOfBytesWritten=0x3be5b8*=0x60, lpOverlapped=0x0) returned 1 [0142.307] CloseHandle (hObject=0x444) returned 1 [0142.307] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\16DOE15M.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\16DOE15M.txt", lpFilePart=0x0) returned 0x52 [0142.307] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\16DOE15M.txt.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\16DOE15M.txt.xuy", lpFilePart=0x0) returned 0x56 [0142.307] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0142.307] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\16DOE15M.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\16doe15m.txt"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9d49dc5f, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x9d49dc5f, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x40aaa34f, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x60)) returned 1 [0142.307] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0142.307] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\16DOE15M.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\16doe15m.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\16DOE15M.txt.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\16doe15m.txt.xuy")) returned 1 [0142.308] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\16Y0X4V7.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\16Y0X4V7.txt", lpFilePart=0x0) returned 0x52 [0142.308] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0142.308] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\16Y0X4V7.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\16y0x4v7.txt"), fInfoLevelId=0x0, lpFileInformation=0x22e04b8 | out: lpFileInformation=0x22e04b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x94829f30, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x94829f30, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x94829f30, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0x19e)) returned 1 [0142.309] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0142.309] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\16Y0X4V7.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\16Y0X4V7.txt", lpFilePart=0x0) returned 0x52 [0142.309] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0142.309] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\16Y0X4V7.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\16y0x4v7.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0142.309] GetFileType (hFile=0x444) returned 0x1 [0142.309] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0142.309] GetFileType (hFile=0x444) returned 0x1 [0142.309] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x19e [0142.309] ReadFile (in: hFile=0x444, lpBuffer=0x22e0930, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x22e0930*, lpNumberOfBytesRead=0x3be6a8*=0x19e, lpOverlapped=0x0) returned 1 [0142.310] CloseHandle (hObject=0x444) returned 1 [0142.320] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\16Y0X4V7.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\16Y0X4V7.txt", lpFilePart=0x0) returned 0x52 [0142.321] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0142.321] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\16Y0X4V7.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\16y0x4v7.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0142.322] GetFileType (hFile=0x444) returned 0x1 [0142.322] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0142.322] GetFileType (hFile=0x444) returned 0x1 [0142.322] WriteFile (in: hFile=0x444, lpBuffer=0x2358140*, nNumberOfBytesToWrite=0x1a0, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x2358140*, lpNumberOfBytesWritten=0x3be5b8*=0x1a0, lpOverlapped=0x0) returned 1 [0142.323] CloseHandle (hObject=0x444) returned 1 [0142.324] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\16Y0X4V7.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\16Y0X4V7.txt", lpFilePart=0x0) returned 0x52 [0142.324] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\16Y0X4V7.txt.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\16Y0X4V7.txt.xuy", lpFilePart=0x0) returned 0x56 [0142.324] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0142.324] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\16Y0X4V7.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\16y0x4v7.txt"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x94829f30, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x94829f30, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x40ad03e8, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x1a0)) returned 1 [0142.324] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0142.324] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\16Y0X4V7.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\16y0x4v7.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\16Y0X4V7.txt.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\16y0x4v7.txt.xuy")) returned 1 [0142.325] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\1L3KU69N.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\1L3KU69N.txt", lpFilePart=0x0) returned 0x52 [0142.325] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0142.325] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\1L3KU69N.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\1l3ku69n.txt"), fInfoLevelId=0x0, lpFileInformation=0x23593f0 | out: lpFileInformation=0x23593f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x965eb761, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x965eb761, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x965eb761, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0x6f)) returned 1 [0142.325] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0142.325] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\1L3KU69N.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\1L3KU69N.txt", lpFilePart=0x0) returned 0x52 [0142.325] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0142.325] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\1L3KU69N.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\1l3ku69n.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0142.325] GetFileType (hFile=0x444) returned 0x1 [0142.325] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0142.325] GetFileType (hFile=0x444) returned 0x1 [0142.325] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x6f [0142.326] ReadFile (in: hFile=0x444, lpBuffer=0x2359738, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x2359738*, lpNumberOfBytesRead=0x3be6a8*=0x6f, lpOverlapped=0x0) returned 1 [0142.327] CloseHandle (hObject=0x444) returned 1 [0142.369] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\1L3KU69N.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\1L3KU69N.txt", lpFilePart=0x0) returned 0x52 [0142.369] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0142.369] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\1L3KU69N.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\1l3ku69n.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0142.370] GetFileType (hFile=0x444) returned 0x1 [0142.371] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0142.371] GetFileType (hFile=0x444) returned 0x1 [0142.371] WriteFile (in: hFile=0x444, lpBuffer=0x21d0720*, nNumberOfBytesToWrite=0x70, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x21d0720*, lpNumberOfBytesWritten=0x3be5b8*=0x70, lpOverlapped=0x0) returned 1 [0142.372] CloseHandle (hObject=0x444) returned 1 [0142.372] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\1L3KU69N.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\1L3KU69N.txt", lpFilePart=0x0) returned 0x52 [0142.372] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\1L3KU69N.txt.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\1L3KU69N.txt.xuy", lpFilePart=0x0) returned 0x56 [0142.372] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0142.372] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\1L3KU69N.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\1l3ku69n.txt"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x965eb761, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x965eb761, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x40b42d61, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x70)) returned 1 [0142.372] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0142.372] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\1L3KU69N.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\1l3ku69n.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\1L3KU69N.txt.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\1l3ku69n.txt.xuy")) returned 1 [0142.377] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\1LFQZEOH.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\1LFQZEOH.txt", lpFilePart=0x0) returned 0x52 [0142.377] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0142.377] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\1LFQZEOH.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\1lfqzeoh.txt"), fInfoLevelId=0x0, lpFileInformation=0x21d19d0 | out: lpFileInformation=0x21d19d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x94962734, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x94962734, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x94962734, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0x6f)) returned 1 [0142.377] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0142.377] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\1LFQZEOH.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\1LFQZEOH.txt", lpFilePart=0x0) returned 0x52 [0142.377] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0142.377] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\1LFQZEOH.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\1lfqzeoh.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0142.377] GetFileType (hFile=0x444) returned 0x1 [0142.377] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0142.377] GetFileType (hFile=0x444) returned 0x1 [0142.377] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x6f [0142.377] ReadFile (in: hFile=0x444, lpBuffer=0x21d1d18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x21d1d18*, lpNumberOfBytesRead=0x3be6a8*=0x6f, lpOverlapped=0x0) returned 1 [0142.379] CloseHandle (hObject=0x444) returned 1 [0142.390] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\1LFQZEOH.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\1LFQZEOH.txt", lpFilePart=0x0) returned 0x52 [0142.390] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0142.390] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\1LFQZEOH.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\1lfqzeoh.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0142.392] GetFileType (hFile=0x444) returned 0x1 [0142.392] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0142.392] GetFileType (hFile=0x444) returned 0x1 [0142.392] WriteFile (in: hFile=0x444, lpBuffer=0x2248f00*, nNumberOfBytesToWrite=0x70, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x2248f00*, lpNumberOfBytesWritten=0x3be5b8*=0x70, lpOverlapped=0x0) returned 1 [0142.393] CloseHandle (hObject=0x444) returned 1 [0142.393] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\1LFQZEOH.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\1LFQZEOH.txt", lpFilePart=0x0) returned 0x52 [0142.394] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\1LFQZEOH.txt.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\1LFQZEOH.txt.xuy", lpFilePart=0x0) returned 0x56 [0142.394] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0142.394] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\1LFQZEOH.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\1lfqzeoh.txt"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x94962734, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x94962734, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x40b8f3c7, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x70)) returned 1 [0142.394] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0142.394] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\1LFQZEOH.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\1lfqzeoh.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\1LFQZEOH.txt.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\1lfqzeoh.txt.xuy")) returned 1 [0142.505] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\1LLUY7B7.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\1LLUY7B7.txt", lpFilePart=0x0) returned 0x52 [0142.505] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0142.505] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\1LLUY7B7.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\1lluy7b7.txt"), fInfoLevelId=0x0, lpFileInformation=0x224a1b0 | out: lpFileInformation=0x224a1b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x96bc19b1, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x96bc19b1, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x96bc19b1, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0x77)) returned 1 [0142.505] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0142.505] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\1LLUY7B7.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\1LLUY7B7.txt", lpFilePart=0x0) returned 0x52 [0142.505] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0142.505] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\1LLUY7B7.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\1lluy7b7.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0142.506] GetFileType (hFile=0x444) returned 0x1 [0142.506] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0142.506] GetFileType (hFile=0x444) returned 0x1 [0142.506] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x77 [0142.506] ReadFile (in: hFile=0x444, lpBuffer=0x224a500, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x224a500*, lpNumberOfBytesRead=0x3be6a8*=0x77, lpOverlapped=0x0) returned 1 [0142.507] CloseHandle (hObject=0x444) returned 1 [0142.518] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\1LLUY7B7.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\1LLUY7B7.txt", lpFilePart=0x0) returned 0x52 [0142.518] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0142.518] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\1LLUY7B7.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\1lluy7b7.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0142.519] GetFileType (hFile=0x444) returned 0x1 [0142.520] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0142.520] GetFileType (hFile=0x444) returned 0x1 [0142.520] WriteFile (in: hFile=0x444, lpBuffer=0x22c1710*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x22c1710*, lpNumberOfBytesWritten=0x3be5b8*=0x80, lpOverlapped=0x0) returned 1 [0142.520] CloseHandle (hObject=0x444) returned 1 [0142.520] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\1LLUY7B7.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\1LLUY7B7.txt", lpFilePart=0x0) returned 0x52 [0142.520] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\1LLUY7B7.txt.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\1LLUY7B7.txt.xuy", lpFilePart=0x0) returned 0x56 [0142.521] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0142.521] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\1LLUY7B7.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\1lluy7b7.txt"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x96bc19b1, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x96bc19b1, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x40cc036c, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x80)) returned 1 [0142.521] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0142.521] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\1LLUY7B7.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\1lluy7b7.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\1LLUY7B7.txt.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\1lluy7b7.txt.xuy")) returned 1 [0142.522] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\1UYN2RFY.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\1UYN2RFY.txt", lpFilePart=0x0) returned 0x52 [0142.522] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0142.522] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\1UYN2RFY.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\1uyn2rfy.txt"), fInfoLevelId=0x0, lpFileInformation=0x22c29c0 | out: lpFileInformation=0x22c29c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9454aa47, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x9454aa47, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x9454aa47, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0x112)) returned 1 [0142.522] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0142.522] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\1UYN2RFY.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\1UYN2RFY.txt", lpFilePart=0x0) returned 0x52 [0142.522] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0142.522] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\1UYN2RFY.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\1uyn2rfy.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0142.522] GetFileType (hFile=0x444) returned 0x1 [0142.522] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0142.522] GetFileType (hFile=0x444) returned 0x1 [0142.522] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x112 [0142.523] ReadFile (in: hFile=0x444, lpBuffer=0x22c2db0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x22c2db0*, lpNumberOfBytesRead=0x3be6a8*=0x112, lpOverlapped=0x0) returned 1 [0142.523] CloseHandle (hObject=0x444) returned 1 [0142.534] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\1UYN2RFY.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\1UYN2RFY.txt", lpFilePart=0x0) returned 0x52 [0142.534] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0142.534] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\1UYN2RFY.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\1uyn2rfy.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0142.536] GetFileType (hFile=0x444) returned 0x1 [0142.536] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0142.536] GetFileType (hFile=0x444) returned 0x1 [0142.536] WriteFile (in: hFile=0x444, lpBuffer=0x233a348*, nNumberOfBytesToWrite=0x120, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x233a348*, lpNumberOfBytesWritten=0x3be5b8*=0x120, lpOverlapped=0x0) returned 1 [0142.537] CloseHandle (hObject=0x444) returned 1 [0142.537] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\1UYN2RFY.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\1UYN2RFY.txt", lpFilePart=0x0) returned 0x52 [0142.537] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\1UYN2RFY.txt.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\1UYN2RFY.txt.xuy", lpFilePart=0x0) returned 0x56 [0142.537] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0142.537] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\1UYN2RFY.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\1uyn2rfy.txt"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9454aa47, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x9454aa47, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x40ce65bd, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x120)) returned 1 [0142.537] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0142.537] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\1UYN2RFY.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\1uyn2rfy.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\1UYN2RFY.txt.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\1uyn2rfy.txt.xuy")) returned 1 [0142.538] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\23JC2UTD.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\23JC2UTD.txt", lpFilePart=0x0) returned 0x52 [0142.538] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0142.538] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\23JC2UTD.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\23jc2utd.txt"), fInfoLevelId=0x0, lpFileInformation=0x233b5f8 | out: lpFileInformation=0x233b5f8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa0db155a, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0xa0db155a, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0xa0db155a, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0x5c)) returned 1 [0142.539] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0142.539] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\23JC2UTD.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\23JC2UTD.txt", lpFilePart=0x0) returned 0x52 [0142.539] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0142.539] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\23JC2UTD.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\23jc2utd.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0142.539] GetFileType (hFile=0x444) returned 0x1 [0142.539] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0142.539] GetFileType (hFile=0x444) returned 0x1 [0142.539] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x5c [0142.539] ReadFile (in: hFile=0x444, lpBuffer=0x233b930, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x233b930*, lpNumberOfBytesRead=0x3be6a8*=0x5c, lpOverlapped=0x0) returned 1 [0142.540] CloseHandle (hObject=0x444) returned 1 [0142.581] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\23JC2UTD.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\23JC2UTD.txt", lpFilePart=0x0) returned 0x52 [0142.581] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0142.581] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\23JC2UTD.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\23jc2utd.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0142.583] GetFileType (hFile=0x444) returned 0x1 [0142.583] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0142.583] GetFileType (hFile=0x444) returned 0x1 [0142.583] WriteFile (in: hFile=0x444, lpBuffer=0x21b2aa0*, nNumberOfBytesToWrite=0x60, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x21b2aa0*, lpNumberOfBytesWritten=0x3be5b8*=0x60, lpOverlapped=0x0) returned 1 [0142.584] CloseHandle (hObject=0x444) returned 1 [0142.584] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\23JC2UTD.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\23JC2UTD.txt", lpFilePart=0x0) returned 0x52 [0142.584] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\23JC2UTD.txt.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\23JC2UTD.txt.xuy", lpFilePart=0x0) returned 0x56 [0142.584] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0142.584] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\23JC2UTD.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\23jc2utd.txt"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa0db155a, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0xa0db155a, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x40d58d48, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x60)) returned 1 [0142.584] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0142.584] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\23JC2UTD.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\23jc2utd.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\23JC2UTD.txt.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\23jc2utd.txt.xuy")) returned 1 [0142.585] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\2EQ4E2OJ.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\2EQ4E2OJ.txt", lpFilePart=0x0) returned 0x52 [0142.585] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0142.585] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\2EQ4E2OJ.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\2eq4e2oj.txt"), fInfoLevelId=0x0, lpFileInformation=0x21b3d50 | out: lpFileInformation=0x21b3d50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x989e475c, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x989e475c, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x989e475c, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0xa9)) returned 1 [0142.586] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0142.586] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\2EQ4E2OJ.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\2EQ4E2OJ.txt", lpFilePart=0x0) returned 0x52 [0142.586] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0142.586] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\2EQ4E2OJ.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\2eq4e2oj.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0142.587] GetFileType (hFile=0x444) returned 0x1 [0142.587] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0142.587] GetFileType (hFile=0x444) returned 0x1 [0142.587] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0xa9 [0142.587] ReadFile (in: hFile=0x444, lpBuffer=0x21b40d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x21b40d8*, lpNumberOfBytesRead=0x3be6a8*=0xa9, lpOverlapped=0x0) returned 1 [0142.587] CloseHandle (hObject=0x444) returned 1 [0142.598] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\2EQ4E2OJ.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\2EQ4E2OJ.txt", lpFilePart=0x0) returned 0x52 [0142.598] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0142.598] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\2EQ4E2OJ.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\2eq4e2oj.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0142.600] GetFileType (hFile=0x444) returned 0x1 [0142.600] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0142.600] GetFileType (hFile=0x444) returned 0x1 [0142.600] WriteFile (in: hFile=0x444, lpBuffer=0x222b340*, nNumberOfBytesToWrite=0xb0, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x222b340*, lpNumberOfBytesWritten=0x3be5b8*=0xb0, lpOverlapped=0x0) returned 1 [0142.601] CloseHandle (hObject=0x444) returned 1 [0142.601] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\2EQ4E2OJ.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\2EQ4E2OJ.txt", lpFilePart=0x0) returned 0x52 [0142.601] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\2EQ4E2OJ.txt.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\2EQ4E2OJ.txt.xuy", lpFilePart=0x0) returned 0x56 [0142.601] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0142.601] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\2EQ4E2OJ.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\2eq4e2oj.txt"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x989e475c, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x989e475c, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x40d7ef5d, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xb0)) returned 1 [0142.601] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0142.601] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\2EQ4E2OJ.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\2eq4e2oj.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\2EQ4E2OJ.txt.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\2eq4e2oj.txt.xuy")) returned 1 [0142.603] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\2HYILE1O.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\2HYILE1O.txt", lpFilePart=0x0) returned 0x52 [0142.603] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0142.603] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\2HYILE1O.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\2hyile1o.txt"), fInfoLevelId=0x0, lpFileInformation=0x222c5f0 | out: lpFileInformation=0x222c5f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa0423beb, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0xa0423beb, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0xa0423beb, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0x2f9)) returned 1 [0142.603] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0142.603] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\2HYILE1O.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\2HYILE1O.txt", lpFilePart=0x0) returned 0x52 [0142.603] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0142.603] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\2HYILE1O.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\2hyile1o.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0142.603] GetFileType (hFile=0x444) returned 0x1 [0142.603] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0142.603] GetFileType (hFile=0x444) returned 0x1 [0142.603] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x2f9 [0142.603] ReadFile (in: hFile=0x444, lpBuffer=0x222cbc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x222cbc8*, lpNumberOfBytesRead=0x3be6a8*=0x2f9, lpOverlapped=0x0) returned 1 [0142.709] CloseHandle (hObject=0x444) returned 1 [0142.719] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\2HYILE1O.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\2HYILE1O.txt", lpFilePart=0x0) returned 0x52 [0142.719] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0142.719] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\2HYILE1O.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\2hyile1o.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0142.721] GetFileType (hFile=0x444) returned 0x1 [0142.721] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0142.721] GetFileType (hFile=0x444) returned 0x1 [0142.721] WriteFile (in: hFile=0x444, lpBuffer=0x22a4ab8*, nNumberOfBytesToWrite=0x300, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x22a4ab8*, lpNumberOfBytesWritten=0x3be5b8*=0x300, lpOverlapped=0x0) returned 1 [0142.721] CloseHandle (hObject=0x444) returned 1 [0142.722] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\2HYILE1O.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\2HYILE1O.txt", lpFilePart=0x0) returned 0x52 [0142.722] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\2HYILE1O.txt.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\2HYILE1O.txt.xuy", lpFilePart=0x0) returned 0x56 [0142.722] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0142.722] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\2HYILE1O.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\2hyile1o.txt"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa0423beb, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0xa0423beb, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x40eb058e, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x300)) returned 1 [0142.722] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0142.722] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\2HYILE1O.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\2hyile1o.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\2HYILE1O.txt.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\2hyile1o.txt.xuy")) returned 1 [0142.723] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\3RW4K76X.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\3RW4K76X.txt", lpFilePart=0x0) returned 0x52 [0142.723] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0142.723] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\3RW4K76X.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\3rw4k76x.txt"), fInfoLevelId=0x0, lpFileInformation=0x22a5d68 | out: lpFileInformation=0x22a5d68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9c83f8fa, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x9c83f8fa, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x9c865b55, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0x51)) returned 1 [0142.723] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0142.723] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\3RW4K76X.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\3RW4K76X.txt", lpFilePart=0x0) returned 0x52 [0142.723] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0142.723] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\3RW4K76X.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\3rw4k76x.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0142.723] GetFileType (hFile=0x444) returned 0x1 [0142.723] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0142.723] GetFileType (hFile=0x444) returned 0x1 [0142.723] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x51 [0142.723] ReadFile (in: hFile=0x444, lpBuffer=0x22a6098, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x22a6098*, lpNumberOfBytesRead=0x3be6a8*=0x51, lpOverlapped=0x0) returned 1 [0142.724] CloseHandle (hObject=0x444) returned 1 [0142.736] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\3RW4K76X.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\3RW4K76X.txt", lpFilePart=0x0) returned 0x52 [0142.736] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0142.736] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\3RW4K76X.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\3rw4k76x.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0142.737] GetFileType (hFile=0x444) returned 0x1 [0142.737] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0142.737] GetFileType (hFile=0x444) returned 0x1 [0142.737] WriteFile (in: hFile=0x444, lpBuffer=0x231d268*, nNumberOfBytesToWrite=0x60, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x231d268*, lpNumberOfBytesWritten=0x3be5b8*=0x60, lpOverlapped=0x0) returned 1 [0142.738] CloseHandle (hObject=0x444) returned 1 [0142.738] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\3RW4K76X.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\3RW4K76X.txt", lpFilePart=0x0) returned 0x52 [0142.738] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\3RW4K76X.txt.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\3RW4K76X.txt.xuy", lpFilePart=0x0) returned 0x56 [0142.738] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0142.738] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\3RW4K76X.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\3rw4k76x.txt"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9c83f8fa, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x9c83f8fa, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x40ed63f7, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x60)) returned 1 [0142.738] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0142.739] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\3RW4K76X.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\3rw4k76x.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\3RW4K76X.txt.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\3rw4k76x.txt.xuy")) returned 1 [0142.739] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\3VVSZ2CO.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\3VVSZ2CO.txt", lpFilePart=0x0) returned 0x52 [0142.739] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0142.740] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\3VVSZ2CO.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\3vvsz2co.txt"), fInfoLevelId=0x0, lpFileInformation=0x231e518 | out: lpFileInformation=0x231e518*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xaccb7677, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0xaccb7677, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0xaccb7677, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0x81)) returned 1 [0142.740] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0142.740] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\3VVSZ2CO.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\3VVSZ2CO.txt", lpFilePart=0x0) returned 0x52 [0142.740] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0142.740] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\3VVSZ2CO.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\3vvsz2co.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0142.740] GetFileType (hFile=0x444) returned 0x1 [0142.740] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0142.740] GetFileType (hFile=0x444) returned 0x1 [0142.740] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x81 [0142.740] ReadFile (in: hFile=0x444, lpBuffer=0x231e878, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x231e878*, lpNumberOfBytesRead=0x3be6a8*=0x81, lpOverlapped=0x0) returned 1 [0142.747] CloseHandle (hObject=0x444) returned 1 [0142.787] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\3VVSZ2CO.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\3VVSZ2CO.txt", lpFilePart=0x0) returned 0x52 [0142.787] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0142.787] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\3VVSZ2CO.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\3vvsz2co.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0142.788] GetFileType (hFile=0x444) returned 0x1 [0142.788] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0142.788] GetFileType (hFile=0x444) returned 0x1 [0142.788] WriteFile (in: hFile=0x444, lpBuffer=0x2195ab0*, nNumberOfBytesToWrite=0x90, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x2195ab0*, lpNumberOfBytesWritten=0x3be5b8*=0x90, lpOverlapped=0x0) returned 1 [0142.789] CloseHandle (hObject=0x444) returned 1 [0142.789] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\3VVSZ2CO.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\3VVSZ2CO.txt", lpFilePart=0x0) returned 0x52 [0142.790] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\3VVSZ2CO.txt.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\3VVSZ2CO.txt.xuy", lpFilePart=0x0) returned 0x56 [0142.790] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0142.790] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\3VVSZ2CO.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\3vvsz2co.txt"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xaccb7677, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0xaccb7677, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x40f48ac2, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x90)) returned 1 [0142.790] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0142.790] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\3VVSZ2CO.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\3vvsz2co.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\3VVSZ2CO.txt.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\3vvsz2co.txt.xuy")) returned 1 [0142.791] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\4MN240WN.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\4MN240WN.txt", lpFilePart=0x0) returned 0x52 [0142.791] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0142.791] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\4MN240WN.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\4mn240wn.txt"), fInfoLevelId=0x0, lpFileInformation=0x2196d60 | out: lpFileInformation=0x2196d60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xade26a3d, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0xade26a3d, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0xade26a3d, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0xa2)) returned 1 [0142.793] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0142.793] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\4MN240WN.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\4MN240WN.txt", lpFilePart=0x0) returned 0x52 [0142.793] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0142.793] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\4MN240WN.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\4mn240wn.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0142.793] GetFileType (hFile=0x444) returned 0x1 [0142.793] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0142.793] GetFileType (hFile=0x444) returned 0x1 [0142.793] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0xa2 [0142.793] ReadFile (in: hFile=0x444, lpBuffer=0x21970e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x21970e0*, lpNumberOfBytesRead=0x3be6a8*=0xa2, lpOverlapped=0x0) returned 1 [0142.794] CloseHandle (hObject=0x444) returned 1 [0142.807] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\4MN240WN.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\4MN240WN.txt", lpFilePart=0x0) returned 0x52 [0142.807] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0142.807] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\4MN240WN.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\4mn240wn.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0142.809] GetFileType (hFile=0x444) returned 0x1 [0142.809] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0142.809] GetFileType (hFile=0x444) returned 0x1 [0142.809] WriteFile (in: hFile=0x444, lpBuffer=0x220e350*, nNumberOfBytesToWrite=0xb0, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x220e350*, lpNumberOfBytesWritten=0x3be5b8*=0xb0, lpOverlapped=0x0) returned 1 [0142.825] CloseHandle (hObject=0x444) returned 1 [0142.826] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\4MN240WN.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\4MN240WN.txt", lpFilePart=0x0) returned 0x52 [0142.826] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\4MN240WN.txt.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\4MN240WN.txt.xuy", lpFilePart=0x0) returned 0x56 [0142.826] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0142.826] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\4MN240WN.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\4mn240wn.txt"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xade26a3d, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0xade26a3d, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x40f94fe1, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xb0)) returned 1 [0142.826] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0142.826] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\4MN240WN.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\4mn240wn.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\4MN240WN.txt.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\4mn240wn.txt.xuy")) returned 1 [0142.827] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\4O6583I0.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\4O6583I0.txt", lpFilePart=0x0) returned 0x52 [0142.827] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0142.827] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\4O6583I0.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\4o6583i0.txt"), fInfoLevelId=0x0, lpFileInformation=0x220f600 | out: lpFileInformation=0x220f600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa52d2fc0, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0xa52d2fc0, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0xa52d2fc0, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0x236)) returned 1 [0142.827] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0142.828] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\4O6583I0.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\4O6583I0.txt", lpFilePart=0x0) returned 0x52 [0142.828] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0142.828] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\4O6583I0.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\4o6583i0.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0142.828] GetFileType (hFile=0x444) returned 0x1 [0142.828] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0142.828] GetFileType (hFile=0x444) returned 0x1 [0142.828] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x236 [0142.828] ReadFile (in: hFile=0x444, lpBuffer=0x220fb10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x220fb10*, lpNumberOfBytesRead=0x3be6a8*=0x236, lpOverlapped=0x0) returned 1 [0142.829] CloseHandle (hObject=0x444) returned 1 [0142.838] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\4O6583I0.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\4O6583I0.txt", lpFilePart=0x0) returned 0x52 [0142.839] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0142.839] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\4O6583I0.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\4o6583i0.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0142.840] GetFileType (hFile=0x444) returned 0x1 [0142.840] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0142.840] GetFileType (hFile=0x444) returned 0x1 [0142.840] WriteFile (in: hFile=0x444, lpBuffer=0x2287648*, nNumberOfBytesToWrite=0x240, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x2287648*, lpNumberOfBytesWritten=0x3be5b8*=0x240, lpOverlapped=0x0) returned 1 [0142.841] CloseHandle (hObject=0x444) returned 1 [0142.841] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\4O6583I0.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\4O6583I0.txt", lpFilePart=0x0) returned 0x52 [0142.841] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\4O6583I0.txt.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\4O6583I0.txt.xuy", lpFilePart=0x0) returned 0x56 [0142.841] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0142.841] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\4O6583I0.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\4o6583i0.txt"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa52d2fc0, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0xa52d2fc0, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x40fbb1b3, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x240)) returned 1 [0142.841] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0142.841] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\4O6583I0.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\4o6583i0.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\4O6583I0.txt.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\4o6583i0.txt.xuy")) returned 1 [0142.843] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\4YWCPPXN.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\4YWCPPXN.txt", lpFilePart=0x0) returned 0x52 [0142.843] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0142.843] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\4YWCPPXN.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\4ywcppxn.txt"), fInfoLevelId=0x0, lpFileInformation=0x22888f8 | out: lpFileInformation=0x22888f8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa143fd06, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0xa143fd06, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0xa143fd06, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0x1f3)) returned 1 [0142.843] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0142.843] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\4YWCPPXN.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\4YWCPPXN.txt", lpFilePart=0x0) returned 0x52 [0142.843] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0142.843] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\4YWCPPXN.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\4ywcppxn.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0142.843] GetFileType (hFile=0x444) returned 0x1 [0142.843] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0142.843] GetFileType (hFile=0x444) returned 0x1 [0142.843] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x1f3 [0142.843] ReadFile (in: hFile=0x444, lpBuffer=0x2288dc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x2288dc8*, lpNumberOfBytesRead=0x3be6a8*=0x1f3, lpOverlapped=0x0) returned 1 [0142.844] CloseHandle (hObject=0x444) returned 1 [0142.854] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\4YWCPPXN.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\4YWCPPXN.txt", lpFilePart=0x0) returned 0x52 [0142.854] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0142.854] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\4YWCPPXN.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\4ywcppxn.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0142.856] GetFileType (hFile=0x444) returned 0x1 [0142.856] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0142.856] GetFileType (hFile=0x444) returned 0x1 [0142.856] WriteFile (in: hFile=0x444, lpBuffer=0x23007c0*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x23007c0*, lpNumberOfBytesWritten=0x3be5b8*=0x200, lpOverlapped=0x0) returned 1 [0142.856] CloseHandle (hObject=0x444) returned 1 [0142.857] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\4YWCPPXN.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\4YWCPPXN.txt", lpFilePart=0x0) returned 0x52 [0142.857] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\4YWCPPXN.txt.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\4YWCPPXN.txt.xuy", lpFilePart=0x0) returned 0x56 [0142.857] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0142.857] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\4YWCPPXN.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\4ywcppxn.txt"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa143fd06, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0xa143fd06, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x40fe148c, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x200)) returned 1 [0142.857] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0142.857] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\4YWCPPXN.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\4ywcppxn.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\4YWCPPXN.txt.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\4ywcppxn.txt.xuy")) returned 1 [0142.859] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\4Z6UDYLY.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\4Z6UDYLY.txt", lpFilePart=0x0) returned 0x52 [0142.859] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0142.859] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\4Z6UDYLY.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\4z6udyly.txt"), fInfoLevelId=0x0, lpFileInformation=0x2301a70 | out: lpFileInformation=0x2301a70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa4e80b84, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0xa4e80b84, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0xa4e80b84, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0x5a)) returned 1 [0142.859] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0142.859] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\4Z6UDYLY.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\4Z6UDYLY.txt", lpFilePart=0x0) returned 0x52 [0142.859] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0142.859] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\4Z6UDYLY.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\4z6udyly.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0142.859] GetFileType (hFile=0x444) returned 0x1 [0142.859] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0142.860] GetFileType (hFile=0x444) returned 0x1 [0142.860] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x5a [0142.860] ReadFile (in: hFile=0x444, lpBuffer=0x2301da8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x2301da8*, lpNumberOfBytesRead=0x3be6a8*=0x5a, lpOverlapped=0x0) returned 1 [0142.860] CloseHandle (hObject=0x444) returned 1 [0142.900] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\4Z6UDYLY.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\4Z6UDYLY.txt", lpFilePart=0x0) returned 0x52 [0142.900] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0142.900] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\4Z6UDYLY.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\4z6udyly.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0142.902] GetFileType (hFile=0x444) returned 0x1 [0142.902] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0142.902] GetFileType (hFile=0x444) returned 0x1 [0142.902] WriteFile (in: hFile=0x444, lpBuffer=0x2178f58*, nNumberOfBytesToWrite=0x60, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x2178f58*, lpNumberOfBytesWritten=0x3be5b8*=0x60, lpOverlapped=0x0) returned 1 [0142.903] CloseHandle (hObject=0x444) returned 1 [0142.903] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\4Z6UDYLY.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\4Z6UDYLY.txt", lpFilePart=0x0) returned 0x52 [0142.903] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\4Z6UDYLY.txt.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\4Z6UDYLY.txt.xuy", lpFilePart=0x0) returned 0x56 [0142.903] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0142.903] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\4Z6UDYLY.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\4z6udyly.txt"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa4e80b84, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0xa4e80b84, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x41053c82, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x60)) returned 1 [0142.903] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0142.903] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\4Z6UDYLY.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\4z6udyly.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\4Z6UDYLY.txt.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\4z6udyly.txt.xuy")) returned 1 [0142.904] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\5AFMRGRY.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\5AFMRGRY.txt", lpFilePart=0x0) returned 0x52 [0142.904] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0142.905] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\5AFMRGRY.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\5afmrgry.txt"), fInfoLevelId=0x0, lpFileInformation=0x217a208 | out: lpFileInformation=0x217a208*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa6906ebd, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0xa6906ebd, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0xa6906ebd, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0xc8)) returned 1 [0142.905] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0142.905] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\5AFMRGRY.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\5AFMRGRY.txt", lpFilePart=0x0) returned 0x52 [0142.905] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0142.905] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\5AFMRGRY.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\5afmrgry.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0142.905] GetFileType (hFile=0x444) returned 0x1 [0142.905] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0142.905] GetFileType (hFile=0x444) returned 0x1 [0142.905] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0xc8 [0142.905] ReadFile (in: hFile=0x444, lpBuffer=0x217a5a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x217a5a8*, lpNumberOfBytesRead=0x3be6a8*=0xc8, lpOverlapped=0x0) returned 1 [0142.906] CloseHandle (hObject=0x444) returned 1 [0142.916] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\5AFMRGRY.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\5AFMRGRY.txt", lpFilePart=0x0) returned 0x52 [0142.916] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0142.916] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\5AFMRGRY.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\5afmrgry.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0142.917] GetFileType (hFile=0x444) returned 0x1 [0142.917] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0142.917] GetFileType (hFile=0x444) returned 0x1 [0142.917] WriteFile (in: hFile=0x444, lpBuffer=0x21f1850*, nNumberOfBytesToWrite=0xd0, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x21f1850*, lpNumberOfBytesWritten=0x3be5b8*=0xd0, lpOverlapped=0x0) returned 1 [0142.918] CloseHandle (hObject=0x444) returned 1 [0142.918] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\5AFMRGRY.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\5AFMRGRY.txt", lpFilePart=0x0) returned 0x52 [0142.918] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\5AFMRGRY.txt.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\5AFMRGRY.txt.xuy", lpFilePart=0x0) returned 0x56 [0142.918] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0142.918] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\5AFMRGRY.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\5afmrgry.txt"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa6906ebd, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0xa6906ebd, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x41079d7c, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xd0)) returned 1 [0142.918] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0142.918] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\5AFMRGRY.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\5afmrgry.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\5AFMRGRY.txt.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\5afmrgry.txt.xuy")) returned 1 [0142.919] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\5ARQYMIV.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\5ARQYMIV.txt", lpFilePart=0x0) returned 0x52 [0142.919] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0142.919] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\5ARQYMIV.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\5arqymiv.txt"), fInfoLevelId=0x0, lpFileInformation=0x21f2b00 | out: lpFileInformation=0x21f2b00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9a2d243d, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x9a2d243d, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x9a2d243d, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0x329)) returned 1 [0142.919] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0142.919] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\5ARQYMIV.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\5ARQYMIV.txt", lpFilePart=0x0) returned 0x52 [0142.920] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0142.920] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\5ARQYMIV.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\5arqymiv.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0142.920] GetFileType (hFile=0x444) returned 0x1 [0142.920] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0142.920] GetFileType (hFile=0x444) returned 0x1 [0142.920] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x329 [0142.920] ReadFile (in: hFile=0x444, lpBuffer=0x21f3108, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x21f3108*, lpNumberOfBytesRead=0x3be6a8*=0x329, lpOverlapped=0x0) returned 1 [0142.921] CloseHandle (hObject=0x444) returned 1 [0142.932] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\5ARQYMIV.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\5ARQYMIV.txt", lpFilePart=0x0) returned 0x52 [0142.932] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0142.932] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\5ARQYMIV.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\5arqymiv.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0142.933] GetFileType (hFile=0x444) returned 0x1 [0142.934] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0142.934] GetFileType (hFile=0x444) returned 0x1 [0142.934] WriteFile (in: hFile=0x444, lpBuffer=0x226b0e8*, nNumberOfBytesToWrite=0x330, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x226b0e8*, lpNumberOfBytesWritten=0x3be5b8*=0x330, lpOverlapped=0x0) returned 1 [0142.934] CloseHandle (hObject=0x444) returned 1 [0142.934] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\5ARQYMIV.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\5ARQYMIV.txt", lpFilePart=0x0) returned 0x52 [0142.934] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\5ARQYMIV.txt.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\5ARQYMIV.txt.xuy", lpFilePart=0x0) returned 0x56 [0142.935] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0142.935] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\5ARQYMIV.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\5arqymiv.txt"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9a2d243d, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x9a2d243d, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x410a004c, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x330)) returned 1 [0142.935] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0142.935] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\5ARQYMIV.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\5arqymiv.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\5ARQYMIV.txt.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\5arqymiv.txt.xuy")) returned 1 [0142.936] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\5AV8L20N.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\5AV8L20N.txt", lpFilePart=0x0) returned 0x52 [0142.936] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0142.936] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\5AV8L20N.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\5av8l20n.txt"), fInfoLevelId=0x0, lpFileInformation=0x226c398 | out: lpFileInformation=0x226c398*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x991ff9f3, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x991ff9f3, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x991ff9f3, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0x154)) returned 1 [0142.936] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0142.936] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\5AV8L20N.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\5AV8L20N.txt", lpFilePart=0x0) returned 0x52 [0142.936] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0142.936] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\5AV8L20N.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\5av8l20n.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0142.936] GetFileType (hFile=0x444) returned 0x1 [0142.936] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0142.936] GetFileType (hFile=0x444) returned 0x1 [0142.936] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x154 [0142.936] ReadFile (in: hFile=0x444, lpBuffer=0x226c7c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x226c7c8*, lpNumberOfBytesRead=0x3be6a8*=0x154, lpOverlapped=0x0) returned 1 [0142.938] CloseHandle (hObject=0x444) returned 1 [0142.948] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\5AV8L20N.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\5AV8L20N.txt", lpFilePart=0x0) returned 0x52 [0142.948] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0142.948] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\5AV8L20N.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\5av8l20n.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0142.949] GetFileType (hFile=0x444) returned 0x1 [0142.949] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0142.950] GetFileType (hFile=0x444) returned 0x1 [0142.950] WriteFile (in: hFile=0x444, lpBuffer=0x22e3ea0*, nNumberOfBytesToWrite=0x160, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x22e3ea0*, lpNumberOfBytesWritten=0x3be5b8*=0x160, lpOverlapped=0x0) returned 1 [0142.950] CloseHandle (hObject=0x444) returned 1 [0142.950] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\5AV8L20N.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\5AV8L20N.txt", lpFilePart=0x0) returned 0x52 [0142.950] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\5AV8L20N.txt.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\5AV8L20N.txt.xuy", lpFilePart=0x0) returned 0x56 [0142.951] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0142.951] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\5AV8L20N.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\5av8l20n.txt"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x991ff9f3, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x991ff9f3, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x410c6214, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x160)) returned 1 [0142.951] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0142.951] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\5AV8L20N.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\5av8l20n.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\5AV8L20N.txt.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\5av8l20n.txt.xuy")) returned 1 [0142.952] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\5NWXN3UI.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\5NWXN3UI.txt", lpFilePart=0x0) returned 0x52 [0142.952] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0142.952] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\5NWXN3UI.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\5nwxn3ui.txt"), fInfoLevelId=0x0, lpFileInformation=0x22e5150 | out: lpFileInformation=0x22e5150*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xad450ebb, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0xad450ebb, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0xad450ebb, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0x67)) returned 1 [0142.952] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0142.952] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\5NWXN3UI.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\5NWXN3UI.txt", lpFilePart=0x0) returned 0x52 [0142.952] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0142.952] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\5NWXN3UI.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\5nwxn3ui.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0142.952] GetFileType (hFile=0x444) returned 0x1 [0142.952] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0142.952] GetFileType (hFile=0x444) returned 0x1 [0142.952] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x67 [0142.952] ReadFile (in: hFile=0x444, lpBuffer=0x22e5490, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x22e5490*, lpNumberOfBytesRead=0x3be6a8*=0x67, lpOverlapped=0x0) returned 1 [0142.953] CloseHandle (hObject=0x444) returned 1 [0142.976] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\5NWXN3UI.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\5NWXN3UI.txt", lpFilePart=0x0) returned 0x52 [0142.976] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0142.976] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\5NWXN3UI.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\5nwxn3ui.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0142.978] GetFileType (hFile=0x444) returned 0x1 [0142.978] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0142.978] GetFileType (hFile=0x444) returned 0x1 [0142.978] WriteFile (in: hFile=0x444, lpBuffer=0x215c668*, nNumberOfBytesToWrite=0x70, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x215c668*, lpNumberOfBytesWritten=0x3be5b8*=0x70, lpOverlapped=0x0) returned 1 [0142.978] CloseHandle (hObject=0x444) returned 1 [0142.979] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\5NWXN3UI.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\5NWXN3UI.txt", lpFilePart=0x0) returned 0x52 [0142.979] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\5NWXN3UI.txt.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\5NWXN3UI.txt.xuy", lpFilePart=0x0) returned 0x56 [0142.979] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0142.979] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\5NWXN3UI.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\5nwxn3ui.txt"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xad450ebb, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0xad450ebb, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x4111280b, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x70)) returned 1 [0142.979] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0142.979] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\5NWXN3UI.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\5nwxn3ui.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\5NWXN3UI.txt.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\5nwxn3ui.txt.xuy")) returned 1 [0142.980] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\5STJ6NZL.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\5STJ6NZL.txt", lpFilePart=0x0) returned 0x52 [0142.980] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0142.980] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\5STJ6NZL.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\5stj6nzl.txt"), fInfoLevelId=0x0, lpFileInformation=0x215d918 | out: lpFileInformation=0x215d918*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x260af8c1, ftCreationTime.dwHighDateTime=0x1d2fc23, ftLastAccessTime.dwLowDateTime=0x260af8c1, ftLastAccessTime.dwHighDateTime=0x1d2fc23, ftLastWriteTime.dwLowDateTime=0x260af8c1, ftLastWriteTime.dwHighDateTime=0x1d2fc23, nFileSizeHigh=0x0, nFileSizeLow=0x2dc)) returned 1 [0142.980] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0142.980] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\5STJ6NZL.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\5STJ6NZL.txt", lpFilePart=0x0) returned 0x52 [0142.980] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0142.980] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\5STJ6NZL.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\5stj6nzl.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0142.980] GetFileType (hFile=0x444) returned 0x1 [0142.980] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0142.980] GetFileType (hFile=0x444) returned 0x1 [0142.980] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x2dc [0142.980] ReadFile (in: hFile=0x444, lpBuffer=0x215ded0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x215ded0*, lpNumberOfBytesRead=0x3be6a8*=0x2dc, lpOverlapped=0x0) returned 1 [0142.997] CloseHandle (hObject=0x444) returned 1 [0143.025] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\5STJ6NZL.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\5STJ6NZL.txt", lpFilePart=0x0) returned 0x52 [0143.025] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0143.025] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\5STJ6NZL.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\5stj6nzl.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0143.027] GetFileType (hFile=0x444) returned 0x1 [0143.027] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0143.027] GetFileType (hFile=0x444) returned 0x1 [0143.027] WriteFile (in: hFile=0x444, lpBuffer=0x21d5d20*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x21d5d20*, lpNumberOfBytesWritten=0x3be5b8*=0x2e0, lpOverlapped=0x0) returned 1 [0143.027] CloseHandle (hObject=0x444) returned 1 [0143.028] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\5STJ6NZL.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\5STJ6NZL.txt", lpFilePart=0x0) returned 0x52 [0143.028] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\5STJ6NZL.txt.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\5STJ6NZL.txt.xuy", lpFilePart=0x0) returned 0x56 [0143.028] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0143.028] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\5STJ6NZL.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\5stj6nzl.txt"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x260af8c1, ftCreationTime.dwHighDateTime=0x1d2fc23, ftLastAccessTime.dwLowDateTime=0x260af8c1, ftLastAccessTime.dwHighDateTime=0x1d2fc23, ftLastWriteTime.dwLowDateTime=0x41184f79, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2e0)) returned 1 [0143.028] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0143.028] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\5STJ6NZL.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\5stj6nzl.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\5STJ6NZL.txt.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\5stj6nzl.txt.xuy")) returned 1 [0143.076] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\5TAY54V0.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\5TAY54V0.txt", lpFilePart=0x0) returned 0x52 [0143.076] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0143.076] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\5TAY54V0.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\5tay54v0.txt"), fInfoLevelId=0x0, lpFileInformation=0x21d6fd0 | out: lpFileInformation=0x21d6fd0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9466f9c1, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x9466f9c1, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x9466f9c1, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0xaa)) returned 1 [0143.078] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0143.078] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\5TAY54V0.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\5TAY54V0.txt", lpFilePart=0x0) returned 0x52 [0143.078] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0143.078] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\5TAY54V0.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\5tay54v0.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0143.078] GetFileType (hFile=0x444) returned 0x1 [0143.078] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0143.078] GetFileType (hFile=0x444) returned 0x1 [0143.078] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0xaa [0143.078] ReadFile (in: hFile=0x444, lpBuffer=0x21d7358, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x21d7358*, lpNumberOfBytesRead=0x3be6a8*=0xaa, lpOverlapped=0x0) returned 1 [0143.079] CloseHandle (hObject=0x444) returned 1 [0143.089] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\5TAY54V0.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\5TAY54V0.txt", lpFilePart=0x0) returned 0x52 [0143.089] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0143.089] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\5TAY54V0.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\5tay54v0.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0143.091] GetFileType (hFile=0x444) returned 0x1 [0143.091] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0143.091] GetFileType (hFile=0x444) returned 0x1 [0143.091] WriteFile (in: hFile=0x444, lpBuffer=0x224e5c0*, nNumberOfBytesToWrite=0xb0, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x224e5c0*, lpNumberOfBytesWritten=0x3be5b8*=0xb0, lpOverlapped=0x0) returned 1 [0143.092] CloseHandle (hObject=0x444) returned 1 [0143.092] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\5TAY54V0.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\5TAY54V0.txt", lpFilePart=0x0) returned 0x52 [0143.093] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\5TAY54V0.txt.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\5TAY54V0.txt.xuy", lpFilePart=0x0) returned 0x56 [0143.093] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0143.093] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\5TAY54V0.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\5tay54v0.txt"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9466f9c1, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x9466f9c1, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x41243a1f, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xb0)) returned 1 [0143.093] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0143.093] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\5TAY54V0.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\5tay54v0.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\5TAY54V0.txt.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\5tay54v0.txt.xuy")) returned 1 [0143.094] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\5WQEGNKI.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\5WQEGNKI.txt", lpFilePart=0x0) returned 0x52 [0143.094] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0143.094] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\5WQEGNKI.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\5wqegnki.txt"), fInfoLevelId=0x0, lpFileInformation=0x224f870 | out: lpFileInformation=0x224f870*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x94dd9075, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x94dd9075, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x94dd9075, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0xbf)) returned 1 [0143.094] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0143.094] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\5WQEGNKI.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\5WQEGNKI.txt", lpFilePart=0x0) returned 0x52 [0143.094] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0143.094] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\5WQEGNKI.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\5wqegnki.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0143.094] GetFileType (hFile=0x444) returned 0x1 [0143.094] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0143.094] GetFileType (hFile=0x444) returned 0x1 [0143.094] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0xbf [0143.094] ReadFile (in: hFile=0x444, lpBuffer=0x224fc08, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x224fc08*, lpNumberOfBytesRead=0x3be6a8*=0xbf, lpOverlapped=0x0) returned 1 [0143.095] CloseHandle (hObject=0x444) returned 1 [0143.105] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\5WQEGNKI.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\5WQEGNKI.txt", lpFilePart=0x0) returned 0x52 [0143.105] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0143.105] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\5WQEGNKI.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\5wqegnki.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0143.107] GetFileType (hFile=0x444) returned 0x1 [0143.107] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0143.107] GetFileType (hFile=0x444) returned 0x1 [0143.107] WriteFile (in: hFile=0x444, lpBuffer=0x22c6e90*, nNumberOfBytesToWrite=0xc0, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x22c6e90*, lpNumberOfBytesWritten=0x3be5b8*=0xc0, lpOverlapped=0x0) returned 1 [0143.108] CloseHandle (hObject=0x444) returned 1 [0143.108] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\5WQEGNKI.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\5WQEGNKI.txt", lpFilePart=0x0) returned 0x52 [0143.108] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\5WQEGNKI.txt.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\5WQEGNKI.txt.xuy", lpFilePart=0x0) returned 0x56 [0143.108] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0143.108] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\5WQEGNKI.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\5wqegnki.txt"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x94dd9075, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x94dd9075, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x41269c31, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xc0)) returned 1 [0143.108] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0143.108] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\5WQEGNKI.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\5wqegnki.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\5WQEGNKI.txt.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\5wqegnki.txt.xuy")) returned 1 [0143.109] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\66I0OJL8.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\66I0OJL8.txt", lpFilePart=0x0) returned 0x52 [0143.109] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0143.109] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\66I0OJL8.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\66i0ojl8.txt"), fInfoLevelId=0x0, lpFileInformation=0x22c8140 | out: lpFileInformation=0x22c8140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9eda386f, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x9eda386f, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x9eda386f, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0x61)) returned 1 [0143.109] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0143.109] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\66I0OJL8.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\66I0OJL8.txt", lpFilePart=0x0) returned 0x52 [0143.109] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0143.109] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\66I0OJL8.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\66i0ojl8.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0143.109] GetFileType (hFile=0x444) returned 0x1 [0143.109] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0143.109] GetFileType (hFile=0x444) returned 0x1 [0143.109] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x61 [0143.109] ReadFile (in: hFile=0x444, lpBuffer=0x22c8480, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x22c8480*, lpNumberOfBytesRead=0x3be6a8*=0x61, lpOverlapped=0x0) returned 1 [0143.111] CloseHandle (hObject=0x444) returned 1 [0143.122] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\66I0OJL8.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\66I0OJL8.txt", lpFilePart=0x0) returned 0x52 [0143.122] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0143.122] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\66I0OJL8.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\66i0ojl8.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0143.124] GetFileType (hFile=0x444) returned 0x1 [0143.124] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0143.124] GetFileType (hFile=0x444) returned 0x1 [0143.124] WriteFile (in: hFile=0x444, lpBuffer=0x233f670*, nNumberOfBytesToWrite=0x70, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x233f670*, lpNumberOfBytesWritten=0x3be5b8*=0x70, lpOverlapped=0x0) returned 1 [0143.125] CloseHandle (hObject=0x444) returned 1 [0143.125] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\66I0OJL8.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\66I0OJL8.txt", lpFilePart=0x0) returned 0x52 [0143.125] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\66I0OJL8.txt.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\66I0OJL8.txt.xuy", lpFilePart=0x0) returned 0x56 [0143.125] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0143.125] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\66I0OJL8.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\66i0ojl8.txt"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9eda386f, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x9eda386f, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x4128fee7, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x70)) returned 1 [0143.125] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0143.125] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\66I0OJL8.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\66i0ojl8.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\66I0OJL8.txt.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\66i0ojl8.txt.xuy")) returned 1 [0143.127] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\80J4IH0Y.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\80J4IH0Y.txt", lpFilePart=0x0) returned 0x52 [0143.127] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0143.127] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\80J4IH0Y.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\80j4ih0y.txt"), fInfoLevelId=0x0, lpFileInformation=0x2340920 | out: lpFileInformation=0x2340920*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9df0c1eb, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x9df0c1eb, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x9df0c1eb, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0x5c)) returned 1 [0143.127] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0143.127] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\80J4IH0Y.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\80J4IH0Y.txt", lpFilePart=0x0) returned 0x52 [0143.127] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0143.127] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\80J4IH0Y.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\80j4ih0y.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0143.127] GetFileType (hFile=0x444) returned 0x1 [0143.127] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0143.127] GetFileType (hFile=0x444) returned 0x1 [0143.127] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x5c [0143.127] ReadFile (in: hFile=0x444, lpBuffer=0x2340c58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x2340c58*, lpNumberOfBytesRead=0x3be6a8*=0x5c, lpOverlapped=0x0) returned 1 [0143.129] CloseHandle (hObject=0x444) returned 1 [0143.168] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\80J4IH0Y.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\80J4IH0Y.txt", lpFilePart=0x0) returned 0x52 [0143.168] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0143.168] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\80J4IH0Y.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\80j4ih0y.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0143.170] GetFileType (hFile=0x444) returned 0x1 [0143.170] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0143.170] GetFileType (hFile=0x444) returned 0x1 [0143.170] WriteFile (in: hFile=0x444, lpBuffer=0x21b7e30*, nNumberOfBytesToWrite=0x60, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x21b7e30*, lpNumberOfBytesWritten=0x3be5b8*=0x60, lpOverlapped=0x0) returned 1 [0143.171] CloseHandle (hObject=0x444) returned 1 [0143.171] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\80J4IH0Y.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\80J4IH0Y.txt", lpFilePart=0x0) returned 0x52 [0143.171] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\80J4IH0Y.txt.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\80J4IH0Y.txt.xuy", lpFilePart=0x0) returned 0x56 [0143.171] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0143.171] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\80J4IH0Y.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\80j4ih0y.txt"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9df0c1eb, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x9df0c1eb, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x4130349d, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x60)) returned 1 [0143.171] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0143.171] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\80J4IH0Y.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\80j4ih0y.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\80J4IH0Y.txt.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\80j4ih0y.txt.xuy")) returned 1 [0143.172] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\8FFCGS26.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\8FFCGS26.txt", lpFilePart=0x0) returned 0x52 [0143.172] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0143.172] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\8FFCGS26.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\8ffcgs26.txt"), fInfoLevelId=0x0, lpFileInformation=0x21b90e0 | out: lpFileInformation=0x21b90e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9b926a54, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x9b926a54, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x9ba3a8a9, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0x341)) returned 1 [0143.172] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0143.173] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\8FFCGS26.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\8FFCGS26.txt", lpFilePart=0x0) returned 0x52 [0143.173] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0143.173] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\8FFCGS26.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\8ffcgs26.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0143.173] GetFileType (hFile=0x444) returned 0x1 [0143.173] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0143.173] GetFileType (hFile=0x444) returned 0x1 [0143.173] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x341 [0143.173] ReadFile (in: hFile=0x444, lpBuffer=0x21b9700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x21b9700*, lpNumberOfBytesRead=0x3be6a8*=0x341, lpOverlapped=0x0) returned 1 [0143.185] CloseHandle (hObject=0x444) returned 1 [0143.197] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\8FFCGS26.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\8FFCGS26.txt", lpFilePart=0x0) returned 0x52 [0143.197] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0143.197] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\8FFCGS26.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\8ffcgs26.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0143.199] GetFileType (hFile=0x444) returned 0x1 [0143.199] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0143.199] GetFileType (hFile=0x444) returned 0x1 [0143.199] WriteFile (in: hFile=0x444, lpBuffer=0x2231788*, nNumberOfBytesToWrite=0x350, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x2231788*, lpNumberOfBytesWritten=0x3be5b8*=0x350, lpOverlapped=0x0) returned 1 [0143.200] CloseHandle (hObject=0x444) returned 1 [0143.200] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\8FFCGS26.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\8FFCGS26.txt", lpFilePart=0x0) returned 0x52 [0143.200] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\8FFCGS26.txt.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\8FFCGS26.txt.xuy", lpFilePart=0x0) returned 0x56 [0143.200] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0143.200] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\8FFCGS26.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\8ffcgs26.txt"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9b926a54, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x9b926a54, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x413286fd, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x350)) returned 1 [0143.200] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0143.200] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\8FFCGS26.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\8ffcgs26.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\8FFCGS26.txt.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\8ffcgs26.txt.xuy")) returned 1 [0143.223] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\9ABR37NL.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\9ABR37NL.txt", lpFilePart=0x0) returned 0x52 [0143.223] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0143.223] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\9ABR37NL.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\9abr37nl.txt"), fInfoLevelId=0x0, lpFileInformation=0x2232a38 | out: lpFileInformation=0x2232a38*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9d6d9fc2, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x9d6d9fc2, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x9d6d9fc2, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0xea)) returned 1 [0143.223] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0143.224] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\9ABR37NL.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\9ABR37NL.txt", lpFilePart=0x0) returned 0x52 [0143.224] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0143.224] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\9ABR37NL.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\9abr37nl.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0143.224] GetFileType (hFile=0x444) returned 0x1 [0143.224] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0143.224] GetFileType (hFile=0x444) returned 0x1 [0143.224] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0xea [0143.224] ReadFile (in: hFile=0x444, lpBuffer=0x2232e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x2232e00*, lpNumberOfBytesRead=0x3be6a8*=0xea, lpOverlapped=0x0) returned 1 [0143.225] CloseHandle (hObject=0x444) returned 1 [0143.235] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\9ABR37NL.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\9ABR37NL.txt", lpFilePart=0x0) returned 0x52 [0143.235] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0143.235] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\9ABR37NL.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\9abr37nl.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0143.237] GetFileType (hFile=0x444) returned 0x1 [0143.237] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0143.237] GetFileType (hFile=0x444) returned 0x1 [0143.237] WriteFile (in: hFile=0x444, lpBuffer=0x22aa0e8*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x22aa0e8*, lpNumberOfBytesWritten=0x3be5b8*=0xf0, lpOverlapped=0x0) returned 1 [0143.238] CloseHandle (hObject=0x444) returned 1 [0143.238] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\9ABR37NL.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\9ABR37NL.txt", lpFilePart=0x0) returned 0x52 [0143.238] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\9ABR37NL.txt.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\9ABR37NL.txt.xuy", lpFilePart=0x0) returned 0x56 [0143.238] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0143.238] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\9ABR37NL.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\9abr37nl.txt"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9d6d9fc2, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x9d6d9fc2, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x4139b43f, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xf0)) returned 1 [0143.238] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0143.238] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\9ABR37NL.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\9abr37nl.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\9ABR37NL.txt.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\9abr37nl.txt.xuy")) returned 1 [0143.239] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\9IJPMFHZ.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\9IJPMFHZ.txt", lpFilePart=0x0) returned 0x52 [0143.239] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0143.239] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\9IJPMFHZ.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\9ijpmfhz.txt"), fInfoLevelId=0x0, lpFileInformation=0x22ab398 | out: lpFileInformation=0x22ab398*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9a8284c8, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x9a8284c8, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x9a8284c8, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0x16b)) returned 1 [0143.239] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0143.239] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\9IJPMFHZ.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\9IJPMFHZ.txt", lpFilePart=0x0) returned 0x52 [0143.239] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0143.239] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\9IJPMFHZ.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\9ijpmfhz.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0143.240] GetFileType (hFile=0x444) returned 0x1 [0143.240] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0143.240] GetFileType (hFile=0x444) returned 0x1 [0143.240] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x16b [0143.240] ReadFile (in: hFile=0x444, lpBuffer=0x22ab7e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x22ab7e0*, lpNumberOfBytesRead=0x3be6a8*=0x16b, lpOverlapped=0x0) returned 1 [0143.241] CloseHandle (hObject=0x444) returned 1 [0143.251] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\9IJPMFHZ.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\9IJPMFHZ.txt", lpFilePart=0x0) returned 0x52 [0143.251] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0143.251] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\9IJPMFHZ.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\9ijpmfhz.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0143.252] GetFileType (hFile=0x444) returned 0x1 [0143.252] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0143.252] GetFileType (hFile=0x444) returned 0x1 [0143.253] WriteFile (in: hFile=0x444, lpBuffer=0x2322f00*, nNumberOfBytesToWrite=0x170, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x2322f00*, lpNumberOfBytesWritten=0x3be5b8*=0x170, lpOverlapped=0x0) returned 1 [0143.253] CloseHandle (hObject=0x444) returned 1 [0143.254] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\9IJPMFHZ.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\9IJPMFHZ.txt", lpFilePart=0x0) returned 0x52 [0143.254] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\9IJPMFHZ.txt.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\9IJPMFHZ.txt.xuy", lpFilePart=0x0) returned 0x56 [0143.254] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0143.254] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\9IJPMFHZ.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\9ijpmfhz.txt"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9a8284c8, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x9a8284c8, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x413c1344, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x170)) returned 1 [0143.254] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0143.254] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\9IJPMFHZ.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\9ijpmfhz.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\9IJPMFHZ.txt.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\9ijpmfhz.txt.xuy")) returned 1 [0143.255] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\9M7ZHW1Q.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\9M7ZHW1Q.txt", lpFilePart=0x0) returned 0x52 [0143.255] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0143.255] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\9M7ZHW1Q.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\9m7zhw1q.txt"), fInfoLevelId=0x0, lpFileInformation=0x23241b0 | out: lpFileInformation=0x23241b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa4ef327e, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0xa4ef327e, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0xa4ef327e, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0x1f7)) returned 1 [0143.257] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0143.257] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\9M7ZHW1Q.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\9M7ZHW1Q.txt", lpFilePart=0x0) returned 0x52 [0143.257] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0143.257] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\9M7ZHW1Q.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\9m7zhw1q.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0143.257] GetFileType (hFile=0x444) returned 0x1 [0143.257] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0143.257] GetFileType (hFile=0x444) returned 0x1 [0143.257] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x1f7 [0143.257] ReadFile (in: hFile=0x444, lpBuffer=0x2324680, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x2324680*, lpNumberOfBytesRead=0x3be6a8*=0x1f7, lpOverlapped=0x0) returned 1 [0143.258] CloseHandle (hObject=0x444) returned 1 [0143.299] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\9M7ZHW1Q.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\9M7ZHW1Q.txt", lpFilePart=0x0) returned 0x52 [0143.299] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0143.299] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\9M7ZHW1Q.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\9m7zhw1q.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0143.300] GetFileType (hFile=0x444) returned 0x1 [0143.300] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0143.300] GetFileType (hFile=0x444) returned 0x1 [0143.300] WriteFile (in: hFile=0x444, lpBuffer=0x219c1d8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x219c1d8*, lpNumberOfBytesWritten=0x3be5b8*=0x200, lpOverlapped=0x0) returned 1 [0143.301] CloseHandle (hObject=0x444) returned 1 [0143.301] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\9M7ZHW1Q.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\9M7ZHW1Q.txt", lpFilePart=0x0) returned 0x52 [0143.301] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\9M7ZHW1Q.txt.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\9M7ZHW1Q.txt.xuy", lpFilePart=0x0) returned 0x56 [0143.301] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0143.301] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\9M7ZHW1Q.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\9m7zhw1q.txt"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa4ef327e, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0xa4ef327e, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x41433b98, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x200)) returned 1 [0143.301] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0143.301] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\9M7ZHW1Q.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\9m7zhw1q.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\9M7ZHW1Q.txt.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\9m7zhw1q.txt.xuy")) returned 1 [0143.302] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\9XACNSYG.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\9XACNSYG.txt", lpFilePart=0x0) returned 0x52 [0143.302] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0143.302] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\9XACNSYG.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\9xacnsyg.txt"), fInfoLevelId=0x0, lpFileInformation=0x219d488 | out: lpFileInformation=0x219d488*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9ca2f7b2, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x9ca2f7b2, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x9ca2f7b2, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0x29a)) returned 1 [0143.303] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0143.303] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\9XACNSYG.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\9XACNSYG.txt", lpFilePart=0x0) returned 0x52 [0143.303] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0143.303] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\9XACNSYG.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\9xacnsyg.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0143.303] GetFileType (hFile=0x444) returned 0x1 [0143.303] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0143.303] GetFileType (hFile=0x444) returned 0x1 [0143.303] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x29a [0143.303] ReadFile (in: hFile=0x444, lpBuffer=0x219da00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x219da00*, lpNumberOfBytesRead=0x3be6a8*=0x29a, lpOverlapped=0x0) returned 1 [0143.304] CloseHandle (hObject=0x444) returned 1 [0143.314] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\9XACNSYG.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\9XACNSYG.txt", lpFilePart=0x0) returned 0x52 [0143.314] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0143.314] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\9XACNSYG.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\9xacnsyg.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0143.315] GetFileType (hFile=0x444) returned 0x1 [0143.315] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0143.315] GetFileType (hFile=0x444) returned 0x1 [0143.315] WriteFile (in: hFile=0x444, lpBuffer=0x2215710*, nNumberOfBytesToWrite=0x2a0, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x2215710*, lpNumberOfBytesWritten=0x3be5b8*=0x2a0, lpOverlapped=0x0) returned 1 [0143.318] CloseHandle (hObject=0x444) returned 1 [0143.318] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\9XACNSYG.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\9XACNSYG.txt", lpFilePart=0x0) returned 0x52 [0143.318] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\9XACNSYG.txt.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\9XACNSYG.txt.xuy", lpFilePart=0x0) returned 0x56 [0143.318] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0143.318] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\9XACNSYG.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\9xacnsyg.txt"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9ca2f7b2, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x9ca2f7b2, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x41459ab9, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2a0)) returned 1 [0143.318] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0143.318] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\9XACNSYG.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\9xacnsyg.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\9XACNSYG.txt.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\9xacnsyg.txt.xuy")) returned 1 [0143.399] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\9Z1Y5ICI.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\9Z1Y5ICI.txt", lpFilePart=0x0) returned 0x52 [0143.399] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0143.399] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\9Z1Y5ICI.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\9z1y5ici.txt"), fInfoLevelId=0x0, lpFileInformation=0x22169c0 | out: lpFileInformation=0x22169c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9f7c5870, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x9f7c5870, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x9f7c5870, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0x72)) returned 1 [0143.400] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0143.400] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\9Z1Y5ICI.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\9Z1Y5ICI.txt", lpFilePart=0x0) returned 0x52 [0143.400] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0143.400] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\9Z1Y5ICI.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\9z1y5ici.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0143.400] GetFileType (hFile=0x444) returned 0x1 [0143.400] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0143.400] GetFileType (hFile=0x444) returned 0x1 [0143.400] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x72 [0143.400] ReadFile (in: hFile=0x444, lpBuffer=0x2216d10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x2216d10*, lpNumberOfBytesRead=0x3be6a8*=0x72, lpOverlapped=0x0) returned 1 [0143.401] CloseHandle (hObject=0x444) returned 1 [0143.489] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\9Z1Y5ICI.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\9Z1Y5ICI.txt", lpFilePart=0x0) returned 0x52 [0143.489] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0143.489] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\9Z1Y5ICI.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\9z1y5ici.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0143.491] GetFileType (hFile=0x444) returned 0x1 [0143.491] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0143.491] GetFileType (hFile=0x444) returned 0x1 [0143.491] WriteFile (in: hFile=0x444, lpBuffer=0x228df20*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x228df20*, lpNumberOfBytesWritten=0x3be5b8*=0x80, lpOverlapped=0x0) returned 1 [0143.492] CloseHandle (hObject=0x444) returned 1 [0143.492] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\9Z1Y5ICI.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\9Z1Y5ICI.txt", lpFilePart=0x0) returned 0x52 [0143.492] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\9Z1Y5ICI.txt.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\9Z1Y5ICI.txt.xuy", lpFilePart=0x0) returned 0x56 [0143.492] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0143.492] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\9Z1Y5ICI.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\9z1y5ici.txt"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9f7c5870, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x9f7c5870, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x41606f7b, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x80)) returned 1 [0143.492] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0143.492] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\9Z1Y5ICI.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\9z1y5ici.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\9Z1Y5ICI.txt.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\9z1y5ici.txt.xuy")) returned 1 [0143.493] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\A0RK8A2H.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\A0RK8A2H.txt", lpFilePart=0x0) returned 0x52 [0143.493] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0143.493] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\A0RK8A2H.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\a0rk8a2h.txt"), fInfoLevelId=0x0, lpFileInformation=0x228f1d0 | out: lpFileInformation=0x228f1d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x966f322d, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x966f322d, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x966fce7e, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0x80)) returned 1 [0143.493] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0143.493] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\A0RK8A2H.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\A0RK8A2H.txt", lpFilePart=0x0) returned 0x52 [0143.493] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0143.493] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\A0RK8A2H.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\a0rk8a2h.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0143.494] GetFileType (hFile=0x444) returned 0x1 [0143.494] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0143.494] GetFileType (hFile=0x444) returned 0x1 [0143.494] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x80 [0143.494] ReadFile (in: hFile=0x444, lpBuffer=0x228f528, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x228f528*, lpNumberOfBytesRead=0x3be6a8*=0x80, lpOverlapped=0x0) returned 1 [0143.495] CloseHandle (hObject=0x444) returned 1 [0143.507] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\A0RK8A2H.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\A0RK8A2H.txt", lpFilePart=0x0) returned 0x52 [0143.507] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0143.507] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\A0RK8A2H.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\a0rk8a2h.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0143.509] GetFileType (hFile=0x444) returned 0x1 [0143.509] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0143.509] GetFileType (hFile=0x444) returned 0x1 [0143.509] WriteFile (in: hFile=0x444, lpBuffer=0x2306758*, nNumberOfBytesToWrite=0x90, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x2306758*, lpNumberOfBytesWritten=0x3be5b8*=0x90, lpOverlapped=0x0) returned 1 [0143.510] CloseHandle (hObject=0x444) returned 1 [0143.510] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\A0RK8A2H.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\A0RK8A2H.txt", lpFilePart=0x0) returned 0x52 [0143.510] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\A0RK8A2H.txt.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\A0RK8A2H.txt.xuy", lpFilePart=0x0) returned 0x56 [0143.510] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0143.510] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\A0RK8A2H.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\a0rk8a2h.txt"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x966f322d, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x966f322d, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x4162d425, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x90)) returned 1 [0143.510] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0143.510] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\A0RK8A2H.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\a0rk8a2h.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\A0RK8A2H.txt.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\a0rk8a2h.txt.xuy")) returned 1 [0143.512] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\AA2IJ7JU.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\AA2IJ7JU.txt", lpFilePart=0x0) returned 0x52 [0143.512] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0143.512] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\AA2IJ7JU.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\aa2ij7ju.txt"), fInfoLevelId=0x0, lpFileInformation=0x2307a08 | out: lpFileInformation=0x2307a08*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x94409da1, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x94409da1, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x94413a1a, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0x121)) returned 1 [0143.512] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0143.512] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\AA2IJ7JU.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\AA2IJ7JU.txt", lpFilePart=0x0) returned 0x52 [0143.512] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0143.512] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\AA2IJ7JU.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\aa2ij7ju.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0143.512] GetFileType (hFile=0x444) returned 0x1 [0143.512] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0143.512] GetFileType (hFile=0x444) returned 0x1 [0143.512] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x121 [0143.512] ReadFile (in: hFile=0x444, lpBuffer=0x2307e08, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x2307e08*, lpNumberOfBytesRead=0x3be6a8*=0x121, lpOverlapped=0x0) returned 1 [0143.514] CloseHandle (hObject=0x444) returned 1 [0143.557] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\AA2IJ7JU.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\AA2IJ7JU.txt", lpFilePart=0x0) returned 0x52 [0143.557] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0143.557] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\AA2IJ7JU.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\aa2ij7ju.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0143.558] GetFileType (hFile=0x444) returned 0x1 [0143.558] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0143.558] GetFileType (hFile=0x444) returned 0x1 [0143.558] WriteFile (in: hFile=0x444, lpBuffer=0x217f320*, nNumberOfBytesToWrite=0x130, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x217f320*, lpNumberOfBytesWritten=0x3be5b8*=0x130, lpOverlapped=0x0) returned 1 [0143.559] CloseHandle (hObject=0x444) returned 1 [0143.559] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\AA2IJ7JU.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\AA2IJ7JU.txt", lpFilePart=0x0) returned 0x52 [0143.559] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\AA2IJ7JU.txt.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\AA2IJ7JU.txt.xuy", lpFilePart=0x0) returned 0x56 [0143.559] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0143.559] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\AA2IJ7JU.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\aa2ij7ju.txt"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x94409da1, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x94409da1, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x4169f8e5, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x130)) returned 1 [0143.560] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0143.560] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\AA2IJ7JU.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\aa2ij7ju.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\AA2IJ7JU.txt.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\aa2ij7ju.txt.xuy")) returned 1 [0143.561] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\B427TFXJ.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\B427TFXJ.txt", lpFilePart=0x0) returned 0x52 [0143.561] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0143.561] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\B427TFXJ.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\b427tfxj.txt"), fInfoLevelId=0x0, lpFileInformation=0x21805d0 | out: lpFileInformation=0x21805d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9a04dbb3, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x9a04dbb3, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x9a04dbb3, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0x200)) returned 1 [0143.561] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0143.561] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\B427TFXJ.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\B427TFXJ.txt", lpFilePart=0x0) returned 0x52 [0143.561] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0143.561] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\B427TFXJ.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\b427tfxj.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0143.561] GetFileType (hFile=0x444) returned 0x1 [0143.561] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0143.561] GetFileType (hFile=0x444) returned 0x1 [0143.561] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x200 [0143.561] ReadFile (in: hFile=0x444, lpBuffer=0x2180aa8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x2180aa8*, lpNumberOfBytesRead=0x3be6a8*=0x200, lpOverlapped=0x0) returned 1 [0143.562] CloseHandle (hObject=0x444) returned 1 [0143.574] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\B427TFXJ.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\B427TFXJ.txt", lpFilePart=0x0) returned 0x52 [0143.574] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0143.574] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\B427TFXJ.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\b427tfxj.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0143.576] GetFileType (hFile=0x444) returned 0x1 [0143.576] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0143.576] GetFileType (hFile=0x444) returned 0x1 [0143.576] WriteFile (in: hFile=0x444, lpBuffer=0x21f84f0*, nNumberOfBytesToWrite=0x210, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x21f84f0*, lpNumberOfBytesWritten=0x3be5b8*=0x210, lpOverlapped=0x0) returned 1 [0143.576] CloseHandle (hObject=0x444) returned 1 [0143.577] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\B427TFXJ.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\B427TFXJ.txt", lpFilePart=0x0) returned 0x52 [0143.577] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\B427TFXJ.txt.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\B427TFXJ.txt.xuy", lpFilePart=0x0) returned 0x56 [0143.577] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0143.577] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\B427TFXJ.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\b427tfxj.txt"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9a04dbb3, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x9a04dbb3, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x416c5c1d, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x210)) returned 1 [0143.577] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0143.577] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\B427TFXJ.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\b427tfxj.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\B427TFXJ.txt.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\b427tfxj.txt.xuy")) returned 1 [0143.578] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\BK4HNAZ1.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\BK4HNAZ1.txt", lpFilePart=0x0) returned 0x52 [0143.578] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0143.578] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\BK4HNAZ1.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\bk4hnaz1.txt"), fInfoLevelId=0x0, lpFileInformation=0x21f97a0 | out: lpFileInformation=0x21f97a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x920eada2, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x920eada2, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x920eada2, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0xce)) returned 1 [0143.578] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0143.578] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\BK4HNAZ1.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\BK4HNAZ1.txt", lpFilePart=0x0) returned 0x52 [0143.578] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0143.578] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\BK4HNAZ1.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\bk4hnaz1.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0143.578] GetFileType (hFile=0x444) returned 0x1 [0143.578] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0143.578] GetFileType (hFile=0x444) returned 0x1 [0143.578] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0xce [0143.578] ReadFile (in: hFile=0x444, lpBuffer=0x21f9b48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x21f9b48*, lpNumberOfBytesRead=0x3be6a8*=0xce, lpOverlapped=0x0) returned 1 [0143.579] CloseHandle (hObject=0x444) returned 1 [0143.590] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\BK4HNAZ1.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\BK4HNAZ1.txt", lpFilePart=0x0) returned 0x52 [0143.590] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0143.590] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\BK4HNAZ1.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\bk4hnaz1.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0143.591] GetFileType (hFile=0x444) returned 0x1 [0143.591] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0143.591] GetFileType (hFile=0x444) returned 0x1 [0143.591] WriteFile (in: hFile=0x444, lpBuffer=0x2270df0*, nNumberOfBytesToWrite=0xd0, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x2270df0*, lpNumberOfBytesWritten=0x3be5b8*=0xd0, lpOverlapped=0x0) returned 1 [0143.592] CloseHandle (hObject=0x444) returned 1 [0143.592] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\BK4HNAZ1.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\BK4HNAZ1.txt", lpFilePart=0x0) returned 0x52 [0143.592] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\BK4HNAZ1.txt.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\BK4HNAZ1.txt.xuy", lpFilePart=0x0) returned 0x56 [0143.592] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0143.592] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\BK4HNAZ1.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\bk4hnaz1.txt"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x920eada2, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x920eada2, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x416ec196, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xd0)) returned 1 [0143.592] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0143.592] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\BK4HNAZ1.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\bk4hnaz1.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\BK4HNAZ1.txt.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\bk4hnaz1.txt.xuy")) returned 1 [0143.594] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\CC7DS78R.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\CC7DS78R.txt", lpFilePart=0x0) returned 0x52 [0143.594] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0143.594] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\CC7DS78R.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\cc7ds78r.txt"), fInfoLevelId=0x0, lpFileInformation=0x22720a0 | out: lpFileInformation=0x22720a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xaddda57f, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0xaddda57f, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0xaddda57f, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0x4f)) returned 1 [0143.595] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0143.596] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\CC7DS78R.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\CC7DS78R.txt", lpFilePart=0x0) returned 0x52 [0143.596] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0143.596] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\CC7DS78R.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\cc7ds78r.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0143.596] GetFileType (hFile=0x444) returned 0x1 [0143.596] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0143.596] GetFileType (hFile=0x444) returned 0x1 [0143.596] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x4f [0143.596] ReadFile (in: hFile=0x444, lpBuffer=0x22723c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x22723c8*, lpNumberOfBytesRead=0x3be6a8*=0x4f, lpOverlapped=0x0) returned 1 [0143.597] CloseHandle (hObject=0x444) returned 1 [0143.607] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\CC7DS78R.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\CC7DS78R.txt", lpFilePart=0x0) returned 0x52 [0143.607] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0143.607] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\CC7DS78R.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\cc7ds78r.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0143.609] GetFileType (hFile=0x444) returned 0x1 [0143.609] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0143.609] GetFileType (hFile=0x444) returned 0x1 [0143.609] WriteFile (in: hFile=0x444, lpBuffer=0x22e9570*, nNumberOfBytesToWrite=0x50, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x22e9570*, lpNumberOfBytesWritten=0x3be5b8*=0x50, lpOverlapped=0x0) returned 1 [0143.616] CloseHandle (hObject=0x444) returned 1 [0143.616] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\CC7DS78R.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\CC7DS78R.txt", lpFilePart=0x0) returned 0x52 [0143.617] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\CC7DS78R.txt.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\CC7DS78R.txt.xuy", lpFilePart=0x0) returned 0x56 [0143.617] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0143.617] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\CC7DS78R.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\cc7ds78r.txt"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xaddda57f, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0xaddda57f, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x417382ce, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x50)) returned 1 [0143.617] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0143.617] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\CC7DS78R.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\cc7ds78r.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\CC7DS78R.txt.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\cc7ds78r.txt.xuy")) returned 1 [0143.618] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\CDGOWO27.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\CDGOWO27.txt", lpFilePart=0x0) returned 0x52 [0143.618] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0143.618] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\CDGOWO27.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\cdgowo27.txt"), fInfoLevelId=0x0, lpFileInformation=0x22ea820 | out: lpFileInformation=0x22ea820*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x948473f5, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x948473f5, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x94851040, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0x8c)) returned 1 [0143.618] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0143.618] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\CDGOWO27.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\CDGOWO27.txt", lpFilePart=0x0) returned 0x52 [0143.618] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0143.618] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\CDGOWO27.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\cdgowo27.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0143.618] GetFileType (hFile=0x444) returned 0x1 [0143.618] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0143.618] GetFileType (hFile=0x444) returned 0x1 [0143.618] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x8c [0143.618] ReadFile (in: hFile=0x444, lpBuffer=0x22eab88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x22eab88*, lpNumberOfBytesRead=0x3be6a8*=0x8c, lpOverlapped=0x0) returned 1 [0143.619] CloseHandle (hObject=0x444) returned 1 [0143.713] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\CDGOWO27.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\CDGOWO27.txt", lpFilePart=0x0) returned 0x52 [0143.713] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0143.713] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\CDGOWO27.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\cdgowo27.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0143.726] GetFileType (hFile=0x444) returned 0x1 [0143.726] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0143.726] GetFileType (hFile=0x444) returned 0x1 [0143.726] WriteFile (in: hFile=0x444, lpBuffer=0x2161d08*, nNumberOfBytesToWrite=0x90, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x2161d08*, lpNumberOfBytesWritten=0x3be5b8*=0x90, lpOverlapped=0x0) returned 1 [0143.727] CloseHandle (hObject=0x444) returned 1 [0143.727] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\CDGOWO27.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\CDGOWO27.txt", lpFilePart=0x0) returned 0x52 [0143.727] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\CDGOWO27.txt.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\CDGOWO27.txt.xuy", lpFilePart=0x0) returned 0x56 [0143.727] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0143.727] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\CDGOWO27.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\cdgowo27.txt"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x948473f5, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x948473f5, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x418434cd, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x90)) returned 1 [0143.727] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0143.727] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\CDGOWO27.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\cdgowo27.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\CDGOWO27.txt.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\cdgowo27.txt.xuy")) returned 1 [0143.728] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\container.dat", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\container.dat", lpFilePart=0x0) returned 0x53 [0143.728] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0143.728] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x2162fb8 | out: lpFileInformation=0x2162fb8*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x90d3f717, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x90d3f717, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x90d3f717, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0143.728] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0143.728] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\container.dat", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\container.dat", lpFilePart=0x0) returned 0x53 [0143.729] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0143.729] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0143.729] GetFileType (hFile=0x444) returned 0x1 [0143.729] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0143.729] GetFileType (hFile=0x444) returned 0x1 [0143.729] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x0 [0143.729] CloseHandle (hObject=0x444) returned 1 [0143.739] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\container.dat", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\container.dat", lpFilePart=0x0) returned 0x53 [0143.740] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0143.740] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\container.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0143.741] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb070) returned 1 [0143.741] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbcf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\container.dat", lpFilePart=0x0) returned 0x53 [0143.741] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0143.741] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x3bc270 | out: lpFileInformation=0x3bc270*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x90d3f717, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x90d3f717, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x90d3f717, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0143.742] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc150) returned 1 [0143.742] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbd10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\container.dat", lpFilePart=0x0) returned 0x53 [0143.742] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0143.742] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x21d9bf8 | out: lpFileInformation=0x21d9bf8*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x90d3f717, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x90d3f717, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x90d3f717, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0143.742] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc150) returned 1 [0143.742] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\container.dat", lpFilePart=0x0) returned 0x53 [0143.742] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc050) returned 1 [0143.742] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0143.742] GetFileType (hFile=0x444) returned 0x1 [0143.742] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbfc0) returned 1 [0143.742] GetFileType (hFile=0x444) returned 0x1 [0143.742] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc1e8 | out: lpFileSizeHigh=0x3bc1e8*=0x0) returned 0x0 [0143.742] CloseHandle (hObject=0x444) returned 1 [0143.783] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\container.dat", lpFilePart=0x0) returned 0x53 [0143.783] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc050) returned 1 [0143.783] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\container.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0143.785] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8ae0) returned 1 [0143.786] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\CYHYO8JD.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\CYHYO8JD.txt", lpFilePart=0x0) returned 0x52 [0143.786] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0143.786] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\CYHYO8JD.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\cyhyo8jd.txt"), fInfoLevelId=0x0, lpFileInformation=0x22507a0 | out: lpFileInformation=0x22507a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x969027be, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x969027be, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x969027be, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0x6e)) returned 1 [0143.787] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0143.787] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\CYHYO8JD.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\CYHYO8JD.txt", lpFilePart=0x0) returned 0x52 [0143.787] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0143.787] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\CYHYO8JD.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\cyhyo8jd.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0143.787] GetFileType (hFile=0x444) returned 0x1 [0143.787] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0143.787] GetFileType (hFile=0x444) returned 0x1 [0143.787] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x6e [0143.787] ReadFile (in: hFile=0x444, lpBuffer=0x2250ae8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x2250ae8*, lpNumberOfBytesRead=0x3be6a8*=0x6e, lpOverlapped=0x0) returned 1 [0143.801] CloseHandle (hObject=0x444) returned 1 [0143.840] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\CYHYO8JD.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\CYHYO8JD.txt", lpFilePart=0x0) returned 0x52 [0143.840] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0143.840] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\CYHYO8JD.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\cyhyo8jd.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0143.842] GetFileType (hFile=0x444) returned 0x1 [0143.842] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0143.842] GetFileType (hFile=0x444) returned 0x1 [0143.842] WriteFile (in: hFile=0x444, lpBuffer=0x22c7cd0*, nNumberOfBytesToWrite=0x70, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x22c7cd0*, lpNumberOfBytesWritten=0x3be5b8*=0x70, lpOverlapped=0x0) returned 1 [0143.843] CloseHandle (hObject=0x444) returned 1 [0143.843] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\CYHYO8JD.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\CYHYO8JD.txt", lpFilePart=0x0) returned 0x52 [0143.843] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\CYHYO8JD.txt.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\CYHYO8JD.txt.xuy", lpFilePart=0x0) returned 0x56 [0143.843] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0143.843] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\CYHYO8JD.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\cyhyo8jd.txt"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x969027be, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x969027be, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x41950288, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x70)) returned 1 [0143.843] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0143.843] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\CYHYO8JD.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\cyhyo8jd.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\CYHYO8JD.txt.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\cyhyo8jd.txt.xuy")) returned 1 [0143.844] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\D9QO3KHK.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\D9QO3KHK.txt", lpFilePart=0x0) returned 0x52 [0143.844] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0143.844] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\D9QO3KHK.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\d9qo3khk.txt"), fInfoLevelId=0x0, lpFileInformation=0x22c8f80 | out: lpFileInformation=0x22c8f80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9d726467, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x9d726467, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x9d726467, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0x108)) returned 1 [0143.845] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0143.845] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\D9QO3KHK.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\D9QO3KHK.txt", lpFilePart=0x0) returned 0x52 [0143.845] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0143.845] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\D9QO3KHK.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\d9qo3khk.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0143.845] GetFileType (hFile=0x444) returned 0x1 [0143.845] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0143.846] GetFileType (hFile=0x444) returned 0x1 [0143.846] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x108 [0143.846] ReadFile (in: hFile=0x444, lpBuffer=0x22c9360, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x22c9360*, lpNumberOfBytesRead=0x3be6a8*=0x108, lpOverlapped=0x0) returned 1 [0143.846] CloseHandle (hObject=0x444) returned 1 [0143.856] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\D9QO3KHK.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\D9QO3KHK.txt", lpFilePart=0x0) returned 0x52 [0143.856] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0143.856] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\D9QO3KHK.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\d9qo3khk.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0143.859] GetFileType (hFile=0x444) returned 0x1 [0143.859] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0143.859] GetFileType (hFile=0x444) returned 0x1 [0143.859] WriteFile (in: hFile=0x444, lpBuffer=0x23408a0*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x23408a0*, lpNumberOfBytesWritten=0x3be5b8*=0x110, lpOverlapped=0x0) returned 1 [0143.859] CloseHandle (hObject=0x444) returned 1 [0143.860] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\D9QO3KHK.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\D9QO3KHK.txt", lpFilePart=0x0) returned 0x52 [0143.860] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\D9QO3KHK.txt.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\D9QO3KHK.txt.xuy", lpFilePart=0x0) returned 0x56 [0143.860] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0143.860] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\D9QO3KHK.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\d9qo3khk.txt"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9d726467, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x9d726467, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x419746ba, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x110)) returned 1 [0143.860] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0143.860] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\D9QO3KHK.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\d9qo3khk.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\D9QO3KHK.txt.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\d9qo3khk.txt.xuy")) returned 1 [0143.861] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\DN8YUCVA.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\DN8YUCVA.txt", lpFilePart=0x0) returned 0x52 [0143.861] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0143.862] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\DN8YUCVA.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\dn8yucva.txt"), fInfoLevelId=0x0, lpFileInformation=0x2341b50 | out: lpFileInformation=0x2341b50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xac2491ab, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0xac2491ab, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0xac2491ab, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0x561)) returned 1 [0143.863] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0143.863] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\DN8YUCVA.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\DN8YUCVA.txt", lpFilePart=0x0) returned 0x52 [0143.863] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0143.863] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\DN8YUCVA.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\dn8yucva.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0143.863] GetFileType (hFile=0x444) returned 0x1 [0143.863] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0143.863] GetFileType (hFile=0x444) returned 0x1 [0143.863] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x561 [0143.863] ReadFile (in: hFile=0x444, lpBuffer=0x2342390, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x2342390*, lpNumberOfBytesRead=0x3be6a8*=0x561, lpOverlapped=0x0) returned 1 [0143.884] CloseHandle (hObject=0x444) returned 1 [0143.929] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\DN8YUCVA.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\DN8YUCVA.txt", lpFilePart=0x0) returned 0x52 [0143.929] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0143.929] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\DN8YUCVA.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\dn8yucva.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0143.931] GetFileType (hFile=0x444) returned 0x1 [0143.931] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0143.931] GetFileType (hFile=0x444) returned 0x1 [0143.931] WriteFile (in: hFile=0x444, lpBuffer=0x21bb498*, nNumberOfBytesToWrite=0x570, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x21bb498*, lpNumberOfBytesWritten=0x3be5b8*=0x570, lpOverlapped=0x0) returned 1 [0143.932] CloseHandle (hObject=0x444) returned 1 [0143.932] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\DN8YUCVA.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\DN8YUCVA.txt", lpFilePart=0x0) returned 0x52 [0143.932] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\DN8YUCVA.txt.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\DN8YUCVA.txt.xuy", lpFilePart=0x0) returned 0x56 [0143.932] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0143.932] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\DN8YUCVA.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\dn8yucva.txt"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xac2491ab, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0xac2491ab, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x41a3325d, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x570)) returned 1 [0143.932] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0143.932] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\DN8YUCVA.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\dn8yucva.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\DN8YUCVA.txt.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\dn8yucva.txt.xuy")) returned 1 [0143.952] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\DQI7WAG8.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\DQI7WAG8.txt", lpFilePart=0x0) returned 0x52 [0143.952] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0143.952] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\DQI7WAG8.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\dqi7wag8.txt"), fInfoLevelId=0x0, lpFileInformation=0x21bc748 | out: lpFileInformation=0x21bc748*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9ea5c48c, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x9ea5c48c, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x9ea5c48c, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0x5a)) returned 1 [0143.953] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0143.953] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\DQI7WAG8.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\DQI7WAG8.txt", lpFilePart=0x0) returned 0x52 [0143.953] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0143.953] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\DQI7WAG8.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\dqi7wag8.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0143.953] GetFileType (hFile=0x444) returned 0x1 [0143.953] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0143.953] GetFileType (hFile=0x444) returned 0x1 [0143.953] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x5a [0143.953] ReadFile (in: hFile=0x444, lpBuffer=0x21bca80, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x21bca80*, lpNumberOfBytesRead=0x3be6a8*=0x5a, lpOverlapped=0x0) returned 1 [0143.954] CloseHandle (hObject=0x444) returned 1 [0143.965] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\DQI7WAG8.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\DQI7WAG8.txt", lpFilePart=0x0) returned 0x52 [0143.965] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0143.965] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\DQI7WAG8.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\dqi7wag8.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0143.967] GetFileType (hFile=0x444) returned 0x1 [0143.967] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0143.967] GetFileType (hFile=0x444) returned 0x1 [0143.967] WriteFile (in: hFile=0x444, lpBuffer=0x2233c48*, nNumberOfBytesToWrite=0x60, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x2233c48*, lpNumberOfBytesWritten=0x3be5b8*=0x60, lpOverlapped=0x0) returned 1 [0143.968] CloseHandle (hObject=0x444) returned 1 [0143.968] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\DQI7WAG8.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\DQI7WAG8.txt", lpFilePart=0x0) returned 0x52 [0143.968] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\DQI7WAG8.txt.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\DQI7WAG8.txt.xuy", lpFilePart=0x0) returned 0x56 [0143.968] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0143.968] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\DQI7WAG8.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\dqi7wag8.txt"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9ea5c48c, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x9ea5c48c, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x41a7f988, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x60)) returned 1 [0143.968] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0143.968] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\DQI7WAG8.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\dqi7wag8.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\DQI7WAG8.txt.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\dqi7wag8.txt.xuy")) returned 1 [0143.969] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\DRDF2EZX.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\DRDF2EZX.txt", lpFilePart=0x0) returned 0x52 [0143.969] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0143.969] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\DRDF2EZX.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\drdf2ezx.txt"), fInfoLevelId=0x0, lpFileInformation=0x2234ef8 | out: lpFileInformation=0x2234ef8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9a78fb5d, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x9a78fb5d, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x9a78fb5d, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0x5d)) returned 1 [0143.969] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0143.969] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\DRDF2EZX.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\DRDF2EZX.txt", lpFilePart=0x0) returned 0x52 [0143.969] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0143.970] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\DRDF2EZX.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\drdf2ezx.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0143.970] GetFileType (hFile=0x444) returned 0x1 [0143.970] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0143.970] GetFileType (hFile=0x444) returned 0x1 [0143.970] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x5d [0143.970] ReadFile (in: hFile=0x444, lpBuffer=0x2235230, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x2235230*, lpNumberOfBytesRead=0x3be6a8*=0x5d, lpOverlapped=0x0) returned 1 [0143.971] CloseHandle (hObject=0x444) returned 1 [0143.981] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\DRDF2EZX.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\DRDF2EZX.txt", lpFilePart=0x0) returned 0x52 [0143.981] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0143.981] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\DRDF2EZX.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\drdf2ezx.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0143.983] GetFileType (hFile=0x444) returned 0x1 [0143.983] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0143.983] GetFileType (hFile=0x444) returned 0x1 [0143.983] WriteFile (in: hFile=0x444, lpBuffer=0x22ac3f8*, nNumberOfBytesToWrite=0x60, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x22ac3f8*, lpNumberOfBytesWritten=0x3be5b8*=0x60, lpOverlapped=0x0) returned 1 [0143.984] CloseHandle (hObject=0x444) returned 1 [0143.984] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\DRDF2EZX.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\DRDF2EZX.txt", lpFilePart=0x0) returned 0x52 [0143.984] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\DRDF2EZX.txt.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\DRDF2EZX.txt.xuy", lpFilePart=0x0) returned 0x56 [0143.984] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0143.984] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\DRDF2EZX.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\drdf2ezx.txt"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9a78fb5d, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x9a78fb5d, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x41aa5959, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x60)) returned 1 [0143.984] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0143.984] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\DRDF2EZX.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\drdf2ezx.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\DRDF2EZX.txt.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\drdf2ezx.txt.xuy")) returned 1 [0143.985] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\E2KPI4ZI.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\E2KPI4ZI.txt", lpFilePart=0x0) returned 0x52 [0143.985] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0143.985] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\E2KPI4ZI.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\e2kpi4zi.txt"), fInfoLevelId=0x0, lpFileInformation=0x22ad6a8 | out: lpFileInformation=0x22ad6a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xadd67e7f, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0xadd67e7f, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0xadd67e7f, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0x69)) returned 1 [0143.985] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0143.985] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\E2KPI4ZI.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\E2KPI4ZI.txt", lpFilePart=0x0) returned 0x52 [0143.985] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0143.985] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\E2KPI4ZI.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\e2kpi4zi.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0143.986] GetFileType (hFile=0x444) returned 0x1 [0143.986] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0143.986] GetFileType (hFile=0x444) returned 0x1 [0143.986] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x69 [0143.986] ReadFile (in: hFile=0x444, lpBuffer=0x22ad9f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x22ad9f0*, lpNumberOfBytesRead=0x3be6a8*=0x69, lpOverlapped=0x0) returned 1 [0143.987] CloseHandle (hObject=0x444) returned 1 [0143.997] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\E2KPI4ZI.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\E2KPI4ZI.txt", lpFilePart=0x0) returned 0x52 [0143.997] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0143.997] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\E2KPI4ZI.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\e2kpi4zi.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0143.998] GetFileType (hFile=0x444) returned 0x1 [0143.998] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0143.998] GetFileType (hFile=0x444) returned 0x1 [0143.998] WriteFile (in: hFile=0x444, lpBuffer=0x2324bd8*, nNumberOfBytesToWrite=0x70, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x2324bd8*, lpNumberOfBytesWritten=0x3be5b8*=0x70, lpOverlapped=0x0) returned 1 [0143.999] CloseHandle (hObject=0x444) returned 1 [0144.000] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\E2KPI4ZI.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\E2KPI4ZI.txt", lpFilePart=0x0) returned 0x52 [0144.000] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\E2KPI4ZI.txt.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\E2KPI4ZI.txt.xuy", lpFilePart=0x0) returned 0x56 [0144.000] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0144.000] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\E2KPI4ZI.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\e2kpi4zi.txt"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xadd67e7f, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0xadd67e7f, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x41acbb6f, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x70)) returned 1 [0144.000] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0144.000] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\E2KPI4ZI.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\e2kpi4zi.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\E2KPI4ZI.txt.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\e2kpi4zi.txt.xuy")) returned 1 [0144.001] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\E978TFRK.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\E978TFRK.txt", lpFilePart=0x0) returned 0x52 [0144.001] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0144.001] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\E978TFRK.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\e978tfrk.txt"), fInfoLevelId=0x0, lpFileInformation=0x2325e88 | out: lpFileInformation=0x2325e88*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x94f696c2, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x94f696c2, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x94f696c2, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0x99)) returned 1 [0144.001] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0144.001] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\E978TFRK.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\E978TFRK.txt", lpFilePart=0x0) returned 0x52 [0144.001] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0144.002] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\E978TFRK.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\e978tfrk.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0144.003] GetFileType (hFile=0x444) returned 0x1 [0144.003] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0144.003] GetFileType (hFile=0x444) returned 0x1 [0144.003] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x99 [0144.003] ReadFile (in: hFile=0x444, lpBuffer=0x2326200, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x2326200*, lpNumberOfBytesRead=0x3be6a8*=0x99, lpOverlapped=0x0) returned 1 [0144.004] CloseHandle (hObject=0x444) returned 1 [0144.046] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\E978TFRK.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\E978TFRK.txt", lpFilePart=0x0) returned 0x52 [0144.046] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0144.046] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\E978TFRK.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\e978tfrk.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0144.048] GetFileType (hFile=0x444) returned 0x1 [0144.048] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0144.048] GetFileType (hFile=0x444) returned 0x1 [0144.048] WriteFile (in: hFile=0x444, lpBuffer=0x219ce10*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x219ce10*, lpNumberOfBytesWritten=0x3be5b8*=0xa0, lpOverlapped=0x0) returned 1 [0144.102] CloseHandle (hObject=0x444) returned 1 [0144.103] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\E978TFRK.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\E978TFRK.txt", lpFilePart=0x0) returned 0x52 [0144.103] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\E978TFRK.txt.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\E978TFRK.txt.xuy", lpFilePart=0x0) returned 0x56 [0144.103] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0144.103] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\E978TFRK.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\e978tfrk.txt"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x94f696c2, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x94f696c2, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x41bd6bfe, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xa0)) returned 1 [0144.103] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0144.103] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\E978TFRK.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\e978tfrk.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\E978TFRK.txt.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\e978tfrk.txt.xuy")) returned 1 [0144.104] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\F68MFAMN.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\F68MFAMN.txt", lpFilePart=0x0) returned 0x52 [0144.104] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0144.104] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\F68MFAMN.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\f68mfamn.txt"), fInfoLevelId=0x0, lpFileInformation=0x219e0c0 | out: lpFileInformation=0x219e0c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9632c56d, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x9632c56d, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x9632c56d, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0x68)) returned 1 [0144.104] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0144.104] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\F68MFAMN.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\F68MFAMN.txt", lpFilePart=0x0) returned 0x52 [0144.104] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0144.104] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\F68MFAMN.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\f68mfamn.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0144.104] GetFileType (hFile=0x444) returned 0x1 [0144.104] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0144.104] GetFileType (hFile=0x444) returned 0x1 [0144.104] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x68 [0144.105] ReadFile (in: hFile=0x444, lpBuffer=0x219e400, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x219e400*, lpNumberOfBytesRead=0x3be6a8*=0x68, lpOverlapped=0x0) returned 1 [0144.105] CloseHandle (hObject=0x444) returned 1 [0144.115] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\F68MFAMN.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\F68MFAMN.txt", lpFilePart=0x0) returned 0x52 [0144.115] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0144.116] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\F68MFAMN.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\f68mfamn.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0144.117] GetFileType (hFile=0x444) returned 0x1 [0144.117] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0144.117] GetFileType (hFile=0x444) returned 0x1 [0144.117] WriteFile (in: hFile=0x444, lpBuffer=0x22155e8*, nNumberOfBytesToWrite=0x70, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x22155e8*, lpNumberOfBytesWritten=0x3be5b8*=0x70, lpOverlapped=0x0) returned 1 [0144.118] CloseHandle (hObject=0x444) returned 1 [0144.118] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\F68MFAMN.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\F68MFAMN.txt", lpFilePart=0x0) returned 0x52 [0144.118] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\F68MFAMN.txt.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\F68MFAMN.txt.xuy", lpFilePart=0x0) returned 0x56 [0144.118] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0144.118] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\F68MFAMN.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\f68mfamn.txt"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9632c56d, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x9632c56d, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x41bfcf2c, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x70)) returned 1 [0144.118] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0144.118] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\F68MFAMN.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\f68mfamn.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\F68MFAMN.txt.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\f68mfamn.txt.xuy")) returned 1 [0144.119] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\FCGXHIFT.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\FCGXHIFT.txt", lpFilePart=0x0) returned 0x52 [0144.119] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0144.119] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\FCGXHIFT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\fcgxhift.txt"), fInfoLevelId=0x0, lpFileInformation=0x2216898 | out: lpFileInformation=0x2216898*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xadd67e7f, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0xadd67e7f, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0xadd67e7f, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0x12f)) returned 1 [0144.119] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0144.119] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\FCGXHIFT.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\FCGXHIFT.txt", lpFilePart=0x0) returned 0x52 [0144.119] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0144.119] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\FCGXHIFT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\fcgxhift.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0144.119] GetFileType (hFile=0x444) returned 0x1 [0144.119] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0144.119] GetFileType (hFile=0x444) returned 0x1 [0144.120] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x12f [0144.120] ReadFile (in: hFile=0x444, lpBuffer=0x2216ca0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x2216ca0*, lpNumberOfBytesRead=0x3be6a8*=0x12f, lpOverlapped=0x0) returned 1 [0144.120] CloseHandle (hObject=0x444) returned 1 [0144.131] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\FCGXHIFT.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\FCGXHIFT.txt", lpFilePart=0x0) returned 0x52 [0144.132] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0144.132] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\FCGXHIFT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\fcgxhift.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0144.134] GetFileType (hFile=0x444) returned 0x1 [0144.134] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0144.134] GetFileType (hFile=0x444) returned 0x1 [0144.134] WriteFile (in: hFile=0x444, lpBuffer=0x228e280*, nNumberOfBytesToWrite=0x130, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x228e280*, lpNumberOfBytesWritten=0x3be5b8*=0x130, lpOverlapped=0x0) returned 1 [0144.135] CloseHandle (hObject=0x444) returned 1 [0144.135] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\FCGXHIFT.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\FCGXHIFT.txt", lpFilePart=0x0) returned 0x52 [0144.135] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\FCGXHIFT.txt.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\FCGXHIFT.txt.xuy", lpFilePart=0x0) returned 0x56 [0144.135] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0144.135] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\FCGXHIFT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\fcgxhift.txt"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xadd67e7f, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0xadd67e7f, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x41c23479, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x130)) returned 1 [0144.135] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0144.135] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\FCGXHIFT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\fcgxhift.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\FCGXHIFT.txt.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\fcgxhift.txt.xuy")) returned 1 [0144.136] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\FGTTES1V.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\FGTTES1V.txt", lpFilePart=0x0) returned 0x52 [0144.136] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0144.136] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\FGTTES1V.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\fgttes1v.txt"), fInfoLevelId=0x0, lpFileInformation=0x228f530 | out: lpFileInformation=0x228f530*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x95e22f52, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x95e22f52, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x95e2cb8d, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0x59)) returned 1 [0144.136] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0144.136] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\FGTTES1V.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\FGTTES1V.txt", lpFilePart=0x0) returned 0x52 [0144.137] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0144.137] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\FGTTES1V.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\fgttes1v.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0144.137] GetFileType (hFile=0x444) returned 0x1 [0144.137] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0144.137] GetFileType (hFile=0x444) returned 0x1 [0144.137] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x59 [0144.137] ReadFile (in: hFile=0x444, lpBuffer=0x228f868, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x228f868*, lpNumberOfBytesRead=0x3be6a8*=0x59, lpOverlapped=0x0) returned 1 [0144.139] CloseHandle (hObject=0x444) returned 1 [0144.149] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\FGTTES1V.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\FGTTES1V.txt", lpFilePart=0x0) returned 0x52 [0144.149] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0144.149] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\FGTTES1V.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\fgttes1v.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0144.151] GetFileType (hFile=0x444) returned 0x1 [0144.151] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0144.151] GetFileType (hFile=0x444) returned 0x1 [0144.151] WriteFile (in: hFile=0x444, lpBuffer=0x2306a30*, nNumberOfBytesToWrite=0x60, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x2306a30*, lpNumberOfBytesWritten=0x3be5b8*=0x60, lpOverlapped=0x0) returned 1 [0144.151] CloseHandle (hObject=0x444) returned 1 [0144.152] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\FGTTES1V.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\FGTTES1V.txt", lpFilePart=0x0) returned 0x52 [0144.152] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\FGTTES1V.txt.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\FGTTES1V.txt.xuy", lpFilePart=0x0) returned 0x56 [0144.152] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0144.152] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\FGTTES1V.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\fgttes1v.txt"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x95e22f52, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x95e22f52, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x41c49382, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x60)) returned 1 [0144.152] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0144.152] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\FGTTES1V.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\fgttes1v.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\FGTTES1V.txt.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\fgttes1v.txt.xuy")) returned 1 [0144.153] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\FLTMVY1F.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\FLTMVY1F.txt", lpFilePart=0x0) returned 0x52 [0144.153] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0144.153] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\FLTMVY1F.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\fltmvy1f.txt"), fInfoLevelId=0x0, lpFileInformation=0x2307ce0 | out: lpFileInformation=0x2307ce0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x949a6cf8, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x949a6cf8, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x949a6cf8, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0x21c)) returned 1 [0144.153] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0144.153] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\FLTMVY1F.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\FLTMVY1F.txt", lpFilePart=0x0) returned 0x52 [0144.153] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0144.153] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\FLTMVY1F.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\fltmvy1f.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0144.153] GetFileType (hFile=0x444) returned 0x1 [0144.153] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0144.153] GetFileType (hFile=0x444) returned 0x1 [0144.153] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x21c [0144.153] ReadFile (in: hFile=0x444, lpBuffer=0x23081d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x23081d8*, lpNumberOfBytesRead=0x3be6a8*=0x21c, lpOverlapped=0x0) returned 1 [0144.154] CloseHandle (hObject=0x444) returned 1 [0144.195] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\FLTMVY1F.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\FLTMVY1F.txt", lpFilePart=0x0) returned 0x52 [0144.195] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0144.195] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\FLTMVY1F.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\fltmvy1f.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0144.196] GetFileType (hFile=0x444) returned 0x1 [0144.196] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0144.197] GetFileType (hFile=0x444) returned 0x1 [0144.197] WriteFile (in: hFile=0x444, lpBuffer=0x217fde0*, nNumberOfBytesToWrite=0x220, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x217fde0*, lpNumberOfBytesWritten=0x3be5b8*=0x220, lpOverlapped=0x0) returned 1 [0144.197] CloseHandle (hObject=0x444) returned 1 [0144.198] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\FLTMVY1F.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\FLTMVY1F.txt", lpFilePart=0x0) returned 0x52 [0144.198] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\FLTMVY1F.txt.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\FLTMVY1F.txt.xuy", lpFilePart=0x0) returned 0x56 [0144.198] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0144.198] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\FLTMVY1F.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\fltmvy1f.txt"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x949a6cf8, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x949a6cf8, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x41cbbc21, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x220)) returned 1 [0144.198] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0144.198] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\FLTMVY1F.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\fltmvy1f.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\FLTMVY1F.txt.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\fltmvy1f.txt.xuy")) returned 1 [0144.199] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\FOLSAQT6.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\FOLSAQT6.txt", lpFilePart=0x0) returned 0x52 [0144.199] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0144.199] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\FOLSAQT6.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\folsaqt6.txt"), fInfoLevelId=0x0, lpFileInformation=0x2181090 | out: lpFileInformation=0x2181090*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x94a605c1, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x94a605c1, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x94a605c1, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0xb5)) returned 1 [0144.199] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0144.199] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\FOLSAQT6.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\FOLSAQT6.txt", lpFilePart=0x0) returned 0x52 [0144.199] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0144.199] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\FOLSAQT6.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\folsaqt6.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0144.199] GetFileType (hFile=0x444) returned 0x1 [0144.199] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0144.199] GetFileType (hFile=0x444) returned 0x1 [0144.199] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0xb5 [0144.199] ReadFile (in: hFile=0x444, lpBuffer=0x2181420, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x2181420*, lpNumberOfBytesRead=0x3be6a8*=0xb5, lpOverlapped=0x0) returned 1 [0144.200] CloseHandle (hObject=0x444) returned 1 [0144.216] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\FOLSAQT6.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\FOLSAQT6.txt", lpFilePart=0x0) returned 0x52 [0144.216] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0144.217] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\FOLSAQT6.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\folsaqt6.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0144.218] GetFileType (hFile=0x444) returned 0x1 [0144.218] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0144.218] GetFileType (hFile=0x444) returned 0x1 [0144.218] WriteFile (in: hFile=0x444, lpBuffer=0x21f86b0*, nNumberOfBytesToWrite=0xc0, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x21f86b0*, lpNumberOfBytesWritten=0x3be5b8*=0xc0, lpOverlapped=0x0) returned 1 [0144.219] CloseHandle (hObject=0x444) returned 1 [0144.219] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\FOLSAQT6.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\FOLSAQT6.txt", lpFilePart=0x0) returned 0x52 [0144.220] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\FOLSAQT6.txt.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\FOLSAQT6.txt.xuy", lpFilePart=0x0) returned 0x56 [0144.220] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0144.220] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\FOLSAQT6.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\folsaqt6.txt"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x94a605c1, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x94a605c1, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x41ce2320, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xc0)) returned 1 [0144.220] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0144.220] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\FOLSAQT6.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\folsaqt6.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\FOLSAQT6.txt.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\folsaqt6.txt.xuy")) returned 1 [0144.250] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\GXB342YS.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\GXB342YS.txt", lpFilePart=0x0) returned 0x52 [0144.250] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0144.250] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\GXB342YS.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\gxb342ys.txt"), fInfoLevelId=0x0, lpFileInformation=0x21f9960 | out: lpFileInformation=0x21f9960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9efdfce1, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x9efdfce1, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x9efdfce1, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0x13e)) returned 1 [0144.251] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0144.251] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\GXB342YS.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\GXB342YS.txt", lpFilePart=0x0) returned 0x52 [0144.251] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0144.251] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\GXB342YS.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\gxb342ys.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0144.251] GetFileType (hFile=0x444) returned 0x1 [0144.251] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0144.251] GetFileType (hFile=0x444) returned 0x1 [0144.251] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x13e [0144.251] ReadFile (in: hFile=0x444, lpBuffer=0x21f9d78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x21f9d78*, lpNumberOfBytesRead=0x3be6a8*=0x13e, lpOverlapped=0x0) returned 1 [0144.252] CloseHandle (hObject=0x444) returned 1 [0144.262] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\GXB342YS.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\GXB342YS.txt", lpFilePart=0x0) returned 0x52 [0144.262] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0144.262] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\GXB342YS.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\gxb342ys.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0144.264] GetFileType (hFile=0x444) returned 0x1 [0144.264] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0144.264] GetFileType (hFile=0x444) returned 0x1 [0144.264] WriteFile (in: hFile=0x444, lpBuffer=0x22713a8*, nNumberOfBytesToWrite=0x140, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x22713a8*, lpNumberOfBytesWritten=0x3be5b8*=0x140, lpOverlapped=0x0) returned 1 [0144.264] CloseHandle (hObject=0x444) returned 1 [0144.264] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\GXB342YS.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\GXB342YS.txt", lpFilePart=0x0) returned 0x52 [0144.265] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\GXB342YS.txt.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\GXB342YS.txt.xuy", lpFilePart=0x0) returned 0x56 [0144.265] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0144.265] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\GXB342YS.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\gxb342ys.txt"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9efdfce1, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x9efdfce1, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x41d54422, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x140)) returned 1 [0144.265] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0144.265] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\GXB342YS.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\gxb342ys.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\GXB342YS.txt.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\gxb342ys.txt.xuy")) returned 1 [0144.266] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\H5LCJX1B.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\H5LCJX1B.txt", lpFilePart=0x0) returned 0x52 [0144.266] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0144.266] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\H5LCJX1B.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\h5lcjx1b.txt"), fInfoLevelId=0x0, lpFileInformation=0x2272658 | out: lpFileInformation=0x2272658*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xae442aec, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0xae442aec, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0xae442aec, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0x254)) returned 1 [0144.266] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0144.266] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\H5LCJX1B.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\H5LCJX1B.txt", lpFilePart=0x0) returned 0x52 [0144.266] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0144.266] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\H5LCJX1B.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\h5lcjx1b.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0144.266] GetFileType (hFile=0x444) returned 0x1 [0144.266] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0144.266] GetFileType (hFile=0x444) returned 0x1 [0144.266] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x254 [0144.266] ReadFile (in: hFile=0x444, lpBuffer=0x2272b88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x2272b88*, lpNumberOfBytesRead=0x3be6a8*=0x254, lpOverlapped=0x0) returned 1 [0144.268] CloseHandle (hObject=0x444) returned 1 [0144.281] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\H5LCJX1B.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\H5LCJX1B.txt", lpFilePart=0x0) returned 0x52 [0144.281] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0144.281] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\H5LCJX1B.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\h5lcjx1b.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0144.284] GetFileType (hFile=0x444) returned 0x1 [0144.284] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0144.284] GetFileType (hFile=0x444) returned 0x1 [0144.285] WriteFile (in: hFile=0x444, lpBuffer=0x22ea760*, nNumberOfBytesToWrite=0x260, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x22ea760*, lpNumberOfBytesWritten=0x3be5b8*=0x260, lpOverlapped=0x0) returned 1 [0144.286] CloseHandle (hObject=0x444) returned 1 [0144.286] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\H5LCJX1B.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\H5LCJX1B.txt", lpFilePart=0x0) returned 0x52 [0144.286] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\H5LCJX1B.txt.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\H5LCJX1B.txt.xuy", lpFilePart=0x0) returned 0x56 [0144.286] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0144.286] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\H5LCJX1B.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\h5lcjx1b.txt"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xae442aec, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0xae442aec, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x41da1862, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x260)) returned 1 [0144.286] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0144.286] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\H5LCJX1B.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\h5lcjx1b.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\H5LCJX1B.txt.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\h5lcjx1b.txt.xuy")) returned 1 [0144.294] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\HBPP9XXY.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\HBPP9XXY.txt", lpFilePart=0x0) returned 0x52 [0144.294] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0144.294] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\HBPP9XXY.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\hbpp9xxy.txt"), fInfoLevelId=0x0, lpFileInformation=0x22eba10 | out: lpFileInformation=0x22eba10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x26d0d4c3, ftCreationTime.dwHighDateTime=0x1d2fc23, ftLastAccessTime.dwLowDateTime=0x26d0d4c3, ftLastAccessTime.dwHighDateTime=0x1d2fc23, ftLastWriteTime.dwLowDateTime=0x26d17101, ftLastWriteTime.dwHighDateTime=0x1d2fc23, nFileSizeHigh=0x0, nFileSizeLow=0x24a)) returned 1 [0144.295] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0144.295] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\HBPP9XXY.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\HBPP9XXY.txt", lpFilePart=0x0) returned 0x52 [0144.295] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0144.295] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\HBPP9XXY.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\hbpp9xxy.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0144.295] GetFileType (hFile=0x444) returned 0x1 [0144.295] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0144.295] GetFileType (hFile=0x444) returned 0x1 [0144.295] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x24a [0144.295] ReadFile (in: hFile=0x444, lpBuffer=0x22ebf38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x22ebf38*, lpNumberOfBytesRead=0x3be6a8*=0x24a, lpOverlapped=0x0) returned 1 [0144.296] CloseHandle (hObject=0x444) returned 1 [0144.337] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\HBPP9XXY.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\HBPP9XXY.txt", lpFilePart=0x0) returned 0x52 [0144.337] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0144.337] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\HBPP9XXY.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\hbpp9xxy.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0144.338] GetFileType (hFile=0x444) returned 0x1 [0144.338] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0144.339] GetFileType (hFile=0x444) returned 0x1 [0144.339] WriteFile (in: hFile=0x444, lpBuffer=0x2163ae0*, nNumberOfBytesToWrite=0x250, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x2163ae0*, lpNumberOfBytesWritten=0x3be5b8*=0x250, lpOverlapped=0x0) returned 1 [0144.342] CloseHandle (hObject=0x444) returned 1 [0144.342] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\HBPP9XXY.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\HBPP9XXY.txt", lpFilePart=0x0) returned 0x52 [0144.342] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\HBPP9XXY.txt.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\HBPP9XXY.txt.xuy", lpFilePart=0x0) returned 0x56 [0144.342] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0144.342] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\HBPP9XXY.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\hbpp9xxy.txt"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x26d0d4c3, ftCreationTime.dwHighDateTime=0x1d2fc23, ftLastAccessTime.dwLowDateTime=0x26d0d4c3, ftLastAccessTime.dwHighDateTime=0x1d2fc23, ftLastWriteTime.dwLowDateTime=0x41e1308b, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x250)) returned 1 [0144.342] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0144.342] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\HBPP9XXY.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\hbpp9xxy.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\HBPP9XXY.txt.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\hbpp9xxy.txt.xuy")) returned 1 [0144.343] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\HF8F6LU0.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\HF8F6LU0.txt", lpFilePart=0x0) returned 0x52 [0144.343] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0144.343] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\HF8F6LU0.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\hf8f6lu0.txt"), fInfoLevelId=0x0, lpFileInformation=0x2164d90 | out: lpFileInformation=0x2164d90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x96bae128, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x96bae128, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x96bae128, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0x11f)) returned 1 [0144.343] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0144.343] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\HF8F6LU0.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\HF8F6LU0.txt", lpFilePart=0x0) returned 0x52 [0144.343] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0144.343] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\HF8F6LU0.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\hf8f6lu0.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0144.343] GetFileType (hFile=0x444) returned 0x1 [0144.344] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0144.344] GetFileType (hFile=0x444) returned 0x1 [0144.344] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x11f [0144.344] ReadFile (in: hFile=0x444, lpBuffer=0x2165188, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x2165188*, lpNumberOfBytesRead=0x3be6a8*=0x11f, lpOverlapped=0x0) returned 1 [0144.345] CloseHandle (hObject=0x444) returned 1 [0144.359] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\HF8F6LU0.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\HF8F6LU0.txt", lpFilePart=0x0) returned 0x52 [0144.359] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0144.359] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\HF8F6LU0.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\hf8f6lu0.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0144.361] GetFileType (hFile=0x444) returned 0x1 [0144.361] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0144.361] GetFileType (hFile=0x444) returned 0x1 [0144.362] WriteFile (in: hFile=0x444, lpBuffer=0x21dc718*, nNumberOfBytesToWrite=0x120, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x21dc718*, lpNumberOfBytesWritten=0x3be5b8*=0x120, lpOverlapped=0x0) returned 1 [0144.363] CloseHandle (hObject=0x444) returned 1 [0144.363] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\HF8F6LU0.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\HF8F6LU0.txt", lpFilePart=0x0) returned 0x52 [0144.363] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\HF8F6LU0.txt.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\HF8F6LU0.txt.xuy", lpFilePart=0x0) returned 0x56 [0144.363] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0144.363] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\HF8F6LU0.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\hf8f6lu0.txt"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x96bae128, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x96bae128, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x41e5f846, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x120)) returned 1 [0144.363] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0144.363] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\HF8F6LU0.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\hf8f6lu0.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\HF8F6LU0.txt.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\hf8f6lu0.txt.xuy")) returned 1 [0144.364] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\HTVL5WIW.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\HTVL5WIW.txt", lpFilePart=0x0) returned 0x52 [0144.364] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0144.364] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\HTVL5WIW.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\htvl5wiw.txt"), fInfoLevelId=0x0, lpFileInformation=0x21dd9c8 | out: lpFileInformation=0x21dd9c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xadfa41ad, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0xadfa41ad, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0xadfa41ad, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0x70)) returned 1 [0144.364] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0144.364] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\HTVL5WIW.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\HTVL5WIW.txt", lpFilePart=0x0) returned 0x52 [0144.365] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0144.365] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\HTVL5WIW.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\htvl5wiw.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0144.365] GetFileType (hFile=0x444) returned 0x1 [0144.365] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0144.365] GetFileType (hFile=0x444) returned 0x1 [0144.365] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x70 [0144.365] ReadFile (in: hFile=0x444, lpBuffer=0x21ddd10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x21ddd10*, lpNumberOfBytesRead=0x3be6a8*=0x70, lpOverlapped=0x0) returned 1 [0144.367] CloseHandle (hObject=0x444) returned 1 [0144.379] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\HTVL5WIW.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\HTVL5WIW.txt", lpFilePart=0x0) returned 0x52 [0144.379] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0144.379] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\HTVL5WIW.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\htvl5wiw.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0144.380] GetFileType (hFile=0x444) returned 0x1 [0144.380] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0144.380] GetFileType (hFile=0x444) returned 0x1 [0144.381] WriteFile (in: hFile=0x444, lpBuffer=0x2254f20*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x2254f20*, lpNumberOfBytesWritten=0x3be5b8*=0x80, lpOverlapped=0x0) returned 1 [0144.381] CloseHandle (hObject=0x444) returned 1 [0144.381] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\HTVL5WIW.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\HTVL5WIW.txt", lpFilePart=0x0) returned 0x52 [0144.381] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\HTVL5WIW.txt.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\HTVL5WIW.txt.xuy", lpFilePart=0x0) returned 0x56 [0144.381] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0144.382] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\HTVL5WIW.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\htvl5wiw.txt"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xadfa41ad, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0xadfa41ad, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x41e8585b, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x80)) returned 1 [0144.382] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0144.382] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\HTVL5WIW.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\htvl5wiw.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\HTVL5WIW.txt.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\htvl5wiw.txt.xuy")) returned 1 [0144.383] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\ILF13HLB.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\ILF13HLB.txt", lpFilePart=0x0) returned 0x52 [0144.383] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0144.383] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\ILF13HLB.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\ilf13hlb.txt"), fInfoLevelId=0x0, lpFileInformation=0x22561d0 | out: lpFileInformation=0x22561d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x989e475c, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x989e475c, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x989ee39e, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0x110)) returned 1 [0144.383] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0144.383] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\ILF13HLB.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\ILF13HLB.txt", lpFilePart=0x0) returned 0x52 [0144.383] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0144.383] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\ILF13HLB.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\ilf13hlb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0144.383] GetFileType (hFile=0x444) returned 0x1 [0144.383] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0144.383] GetFileType (hFile=0x444) returned 0x1 [0144.383] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x110 [0144.383] ReadFile (in: hFile=0x444, lpBuffer=0x22565b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x22565b8*, lpNumberOfBytesRead=0x3be6a8*=0x110, lpOverlapped=0x0) returned 1 [0144.384] CloseHandle (hObject=0x444) returned 1 [0144.395] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\ILF13HLB.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\ILF13HLB.txt", lpFilePart=0x0) returned 0x52 [0144.395] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0144.395] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\ILF13HLB.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\ilf13hlb.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0144.397] GetFileType (hFile=0x444) returned 0x1 [0144.397] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0144.397] GetFileType (hFile=0x444) returned 0x1 [0144.397] WriteFile (in: hFile=0x444, lpBuffer=0x22cdb50*, nNumberOfBytesToWrite=0x120, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x22cdb50*, lpNumberOfBytesWritten=0x3be5b8*=0x120, lpOverlapped=0x0) returned 1 [0144.398] CloseHandle (hObject=0x444) returned 1 [0144.398] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\ILF13HLB.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\ILF13HLB.txt", lpFilePart=0x0) returned 0x52 [0144.398] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\ILF13HLB.txt.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\ILF13HLB.txt.xuy", lpFilePart=0x0) returned 0x56 [0144.398] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0144.398] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\ILF13HLB.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\ilf13hlb.txt"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x989e475c, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x989e475c, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x41eabc53, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x120)) returned 1 [0144.398] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0144.398] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\ILF13HLB.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\ilf13hlb.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\ILF13HLB.txt.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\ilf13hlb.txt.xuy")) returned 1 [0144.399] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\ISTFXHHR.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\ISTFXHHR.txt", lpFilePart=0x0) returned 0x52 [0144.399] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0144.399] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\ISTFXHHR.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\istfxhhr.txt"), fInfoLevelId=0x0, lpFileInformation=0x22cee00 | out: lpFileInformation=0x22cee00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9d5a8d3b, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x9d5a8d3b, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x9d5a8d3b, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0x14a)) returned 1 [0144.400] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0144.400] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\ISTFXHHR.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\ISTFXHHR.txt", lpFilePart=0x0) returned 0x52 [0144.400] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0144.400] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\ISTFXHHR.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\istfxhhr.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0144.400] GetFileType (hFile=0x444) returned 0x1 [0144.400] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0144.400] GetFileType (hFile=0x444) returned 0x1 [0144.400] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x14a [0144.400] ReadFile (in: hFile=0x444, lpBuffer=0x22cf228, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x22cf228*, lpNumberOfBytesRead=0x3be6a8*=0x14a, lpOverlapped=0x0) returned 1 [0144.401] CloseHandle (hObject=0x444) returned 1 [0144.414] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\ISTFXHHR.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\ISTFXHHR.txt", lpFilePart=0x0) returned 0x52 [0144.414] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0144.414] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\ISTFXHHR.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\istfxhhr.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0144.416] GetFileType (hFile=0x444) returned 0x1 [0144.416] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0144.416] GetFileType (hFile=0x444) returned 0x1 [0144.416] WriteFile (in: hFile=0x444, lpBuffer=0x23468a8*, nNumberOfBytesToWrite=0x150, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x23468a8*, lpNumberOfBytesWritten=0x3be5b8*=0x150, lpOverlapped=0x0) returned 1 [0144.417] CloseHandle (hObject=0x444) returned 1 [0144.417] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\ISTFXHHR.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\ISTFXHHR.txt", lpFilePart=0x0) returned 0x52 [0144.417] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\ISTFXHHR.txt.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\ISTFXHHR.txt.xuy", lpFilePart=0x0) returned 0x56 [0144.417] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0144.417] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\ISTFXHHR.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\istfxhhr.txt"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9d5a8d3b, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x9d5a8d3b, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x41ed1b75, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x150)) returned 1 [0144.417] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0144.417] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\ISTFXHHR.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\istfxhhr.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\ISTFXHHR.txt.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\istfxhhr.txt.xuy")) returned 1 [0144.419] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\ITD4OUAR.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\ITD4OUAR.txt", lpFilePart=0x0) returned 0x52 [0144.419] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0144.419] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\ITD4OUAR.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\itd4ouar.txt"), fInfoLevelId=0x0, lpFileInformation=0x2347b58 | out: lpFileInformation=0x2347b58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x96608c3b, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x96608c3b, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x96608c3b, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0xbb)) returned 1 [0144.419] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0144.419] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\ITD4OUAR.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\ITD4OUAR.txt", lpFilePart=0x0) returned 0x52 [0144.419] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0144.419] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\ITD4OUAR.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\itd4ouar.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0144.419] GetFileType (hFile=0x444) returned 0x1 [0144.419] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0144.419] GetFileType (hFile=0x444) returned 0x1 [0144.419] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0xbb [0144.419] ReadFile (in: hFile=0x444, lpBuffer=0x2347ef0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x2347ef0*, lpNumberOfBytesRead=0x3be6a8*=0xbb, lpOverlapped=0x0) returned 1 [0144.420] CloseHandle (hObject=0x444) returned 1 [0144.463] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\ITD4OUAR.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\ITD4OUAR.txt", lpFilePart=0x0) returned 0x52 [0144.463] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0144.463] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\ITD4OUAR.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\itd4ouar.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0144.464] GetFileType (hFile=0x444) returned 0x1 [0144.464] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0144.464] GetFileType (hFile=0x444) returned 0x1 [0144.464] WriteFile (in: hFile=0x444, lpBuffer=0x21befd0*, nNumberOfBytesToWrite=0xc0, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x21befd0*, lpNumberOfBytesWritten=0x3be5b8*=0xc0, lpOverlapped=0x0) returned 1 [0144.465] CloseHandle (hObject=0x444) returned 1 [0144.465] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\ITD4OUAR.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\ITD4OUAR.txt", lpFilePart=0x0) returned 0x52 [0144.465] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\ITD4OUAR.txt.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\ITD4OUAR.txt.xuy", lpFilePart=0x0) returned 0x56 [0144.465] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0144.466] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\ITD4OUAR.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\itd4ouar.txt"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x96608c3b, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x96608c3b, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x41f442a2, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xc0)) returned 1 [0144.466] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0144.466] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\ITD4OUAR.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\itd4ouar.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\ITD4OUAR.txt.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\itd4ouar.txt.xuy")) returned 1 [0144.467] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\J4JSQG9R.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\J4JSQG9R.txt", lpFilePart=0x0) returned 0x52 [0144.467] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0144.467] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\J4JSQG9R.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\j4jsqg9r.txt"), fInfoLevelId=0x0, lpFileInformation=0x21c0280 | out: lpFileInformation=0x21c0280*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb9e7ba1b, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0xb9e7ba1b, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0xb9e7ba1b, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0x2c8)) returned 1 [0144.467] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0144.467] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\J4JSQG9R.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\J4JSQG9R.txt", lpFilePart=0x0) returned 0x52 [0144.467] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0144.467] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\J4JSQG9R.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\j4jsqg9r.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0144.467] GetFileType (hFile=0x444) returned 0x1 [0144.467] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0144.467] GetFileType (hFile=0x444) returned 0x1 [0144.467] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x2c8 [0144.467] ReadFile (in: hFile=0x444, lpBuffer=0x21c0820, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x21c0820*, lpNumberOfBytesRead=0x3be6a8*=0x2c8, lpOverlapped=0x0) returned 1 [0144.468] CloseHandle (hObject=0x444) returned 1 [0144.479] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\J4JSQG9R.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\J4JSQG9R.txt", lpFilePart=0x0) returned 0x52 [0144.479] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0144.479] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\J4JSQG9R.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\j4jsqg9r.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0144.481] GetFileType (hFile=0x444) returned 0x1 [0144.481] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0144.481] GetFileType (hFile=0x444) returned 0x1 [0144.481] WriteFile (in: hFile=0x444, lpBuffer=0x2238620*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x2238620*, lpNumberOfBytesWritten=0x3be5b8*=0x2d0, lpOverlapped=0x0) returned 1 [0144.481] CloseHandle (hObject=0x444) returned 1 [0144.482] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\J4JSQG9R.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\J4JSQG9R.txt", lpFilePart=0x0) returned 0x52 [0144.482] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\J4JSQG9R.txt.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\J4JSQG9R.txt.xuy", lpFilePart=0x0) returned 0x56 [0144.482] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0144.482] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\J4JSQG9R.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\j4jsqg9r.txt"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb9e7ba1b, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0xb9e7ba1b, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x41f6a4d2, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2d0)) returned 1 [0144.482] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0144.482] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\J4JSQG9R.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\j4jsqg9r.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\J4JSQG9R.txt.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\j4jsqg9r.txt.xuy")) returned 1 [0144.484] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\JQOCYKOH.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\JQOCYKOH.txt", lpFilePart=0x0) returned 0x52 [0144.484] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0144.484] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\JQOCYKOH.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\jqocykoh.txt"), fInfoLevelId=0x0, lpFileInformation=0x22398d0 | out: lpFileInformation=0x22398d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x26c059fa, ftCreationTime.dwHighDateTime=0x1d2fc23, ftLastAccessTime.dwLowDateTime=0x26c059fa, ftLastAccessTime.dwHighDateTime=0x1d2fc23, ftLastWriteTime.dwLowDateTime=0x26c059fa, ftLastWriteTime.dwHighDateTime=0x1d2fc23, nFileSizeHigh=0x0, nFileSizeLow=0x3f4)) returned 1 [0144.485] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0144.485] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\JQOCYKOH.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\JQOCYKOH.txt", lpFilePart=0x0) returned 0x52 [0144.485] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0144.485] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\JQOCYKOH.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\jqocykoh.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0144.485] GetFileType (hFile=0x444) returned 0x1 [0144.485] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0144.485] GetFileType (hFile=0x444) returned 0x1 [0144.485] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x3f4 [0144.485] ReadFile (in: hFile=0x444, lpBuffer=0x2239fa0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x2239fa0*, lpNumberOfBytesRead=0x3be6a8*=0x3f4, lpOverlapped=0x0) returned 1 [0144.498] CloseHandle (hObject=0x444) returned 1 [0144.516] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\JQOCYKOH.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\JQOCYKOH.txt", lpFilePart=0x0) returned 0x52 [0144.516] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0144.516] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\JQOCYKOH.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\jqocykoh.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0144.519] GetFileType (hFile=0x444) returned 0x1 [0144.519] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0144.519] GetFileType (hFile=0x444) returned 0x1 [0144.519] WriteFile (in: hFile=0x444, lpBuffer=0x22b2398*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x22b2398*, lpNumberOfBytesWritten=0x3be5b8*=0x400, lpOverlapped=0x0) returned 1 [0144.520] CloseHandle (hObject=0x444) returned 1 [0144.520] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\JQOCYKOH.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\JQOCYKOH.txt", lpFilePart=0x0) returned 0x52 [0144.520] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\JQOCYKOH.txt.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\JQOCYKOH.txt.xuy", lpFilePart=0x0) returned 0x56 [0144.520] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0144.520] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\JQOCYKOH.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\jqocykoh.txt"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x26c059fa, ftCreationTime.dwHighDateTime=0x1d2fc23, ftLastAccessTime.dwLowDateTime=0x26c059fa, ftLastAccessTime.dwHighDateTime=0x1d2fc23, ftLastWriteTime.dwLowDateTime=0x41fde717, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x400)) returned 1 [0144.521] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0144.521] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\JQOCYKOH.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\jqocykoh.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\JQOCYKOH.txt.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\jqocykoh.txt.xuy")) returned 1 [0144.522] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\JWFWLAYR.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\JWFWLAYR.txt", lpFilePart=0x0) returned 0x52 [0144.522] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0144.522] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\JWFWLAYR.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\jwfwlayr.txt"), fInfoLevelId=0x0, lpFileInformation=0x22b3648 | out: lpFileInformation=0x22b3648*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9d6d9fc2, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x9d6d9fc2, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x9d6d9fc2, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1 [0144.522] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0144.522] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\JWFWLAYR.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\JWFWLAYR.txt", lpFilePart=0x0) returned 0x52 [0144.522] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0144.522] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\JWFWLAYR.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\jwfwlayr.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0144.522] GetFileType (hFile=0x444) returned 0x1 [0144.522] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0144.523] GetFileType (hFile=0x444) returned 0x1 [0144.523] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0xb3 [0144.523] ReadFile (in: hFile=0x444, lpBuffer=0x22b39d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x22b39d8*, lpNumberOfBytesRead=0x3be6a8*=0xb3, lpOverlapped=0x0) returned 1 [0144.524] CloseHandle (hObject=0x444) returned 1 [0144.542] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\JWFWLAYR.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\JWFWLAYR.txt", lpFilePart=0x0) returned 0x52 [0144.542] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0144.542] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\JWFWLAYR.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\jwfwlayr.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0144.544] GetFileType (hFile=0x444) returned 0x1 [0144.544] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0144.544] GetFileType (hFile=0x444) returned 0x1 [0144.544] WriteFile (in: hFile=0x444, lpBuffer=0x232ac68*, nNumberOfBytesToWrite=0xc0, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x232ac68*, lpNumberOfBytesWritten=0x3be5b8*=0xc0, lpOverlapped=0x0) returned 1 [0144.545] CloseHandle (hObject=0x444) returned 1 [0144.545] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\JWFWLAYR.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\JWFWLAYR.txt", lpFilePart=0x0) returned 0x52 [0144.545] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\JWFWLAYR.txt.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\JWFWLAYR.txt.xuy", lpFilePart=0x0) returned 0x56 [0144.545] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0144.545] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\JWFWLAYR.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\jwfwlayr.txt"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9d6d9fc2, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x9d6d9fc2, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x420064a7, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xc0)) returned 1 [0144.545] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0144.545] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\JWFWLAYR.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\jwfwlayr.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\JWFWLAYR.txt.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\jwfwlayr.txt.xuy")) returned 1 [0144.547] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\K8249Y1G.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\K8249Y1G.txt", lpFilePart=0x0) returned 0x52 [0144.547] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0144.547] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\K8249Y1G.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\k8249y1g.txt"), fInfoLevelId=0x0, lpFileInformation=0x232bf18 | out: lpFileInformation=0x232bf18*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9d61b3f4, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x9d61b3f4, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x9d61b3f4, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0xeb)) returned 1 [0144.547] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0144.547] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\K8249Y1G.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\K8249Y1G.txt", lpFilePart=0x0) returned 0x52 [0144.547] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0144.547] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\K8249Y1G.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\k8249y1g.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0144.547] GetFileType (hFile=0x444) returned 0x1 [0144.547] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0144.547] GetFileType (hFile=0x444) returned 0x1 [0144.547] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0xeb [0144.547] ReadFile (in: hFile=0x444, lpBuffer=0x232c2e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x232c2e0*, lpNumberOfBytesRead=0x3be6a8*=0xeb, lpOverlapped=0x0) returned 1 [0144.550] CloseHandle (hObject=0x444) returned 1 [0144.599] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\K8249Y1G.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\K8249Y1G.txt", lpFilePart=0x0) returned 0x52 [0144.599] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0144.599] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\K8249Y1G.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\k8249y1g.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0144.601] GetFileType (hFile=0x444) returned 0x1 [0144.601] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0144.601] GetFileType (hFile=0x444) returned 0x1 [0144.601] WriteFile (in: hFile=0x444, lpBuffer=0x21a35a0*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x21a35a0*, lpNumberOfBytesWritten=0x3be5b8*=0xf0, lpOverlapped=0x0) returned 1 [0144.602] CloseHandle (hObject=0x444) returned 1 [0144.602] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\K8249Y1G.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\K8249Y1G.txt", lpFilePart=0x0) returned 0x52 [0144.602] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\K8249Y1G.txt.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\K8249Y1G.txt.xuy", lpFilePart=0x0) returned 0x56 [0144.602] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0144.602] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\K8249Y1G.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\k8249y1g.txt"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9d61b3f4, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x9d61b3f4, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x4209ba95, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xf0)) returned 1 [0144.602] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0144.602] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\K8249Y1G.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\k8249y1g.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\K8249Y1G.txt.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\k8249y1g.txt.xuy")) returned 1 [0144.603] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\KNJ4AJDH.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\KNJ4AJDH.txt", lpFilePart=0x0) returned 0x52 [0144.603] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0144.603] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\KNJ4AJDH.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\knj4ajdh.txt"), fInfoLevelId=0x0, lpFileInformation=0x21a4850 | out: lpFileInformation=0x21a4850*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9df0c1eb, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x9df0c1eb, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x9df0c1eb, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0x203)) returned 1 [0144.603] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0144.603] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\KNJ4AJDH.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\KNJ4AJDH.txt", lpFilePart=0x0) returned 0x52 [0144.603] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0144.603] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\KNJ4AJDH.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\knj4ajdh.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0144.603] GetFileType (hFile=0x444) returned 0x1 [0144.603] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0144.603] GetFileType (hFile=0x444) returned 0x1 [0144.603] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x203 [0144.604] ReadFile (in: hFile=0x444, lpBuffer=0x21a4d30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x21a4d30*, lpNumberOfBytesRead=0x3be6a8*=0x203, lpOverlapped=0x0) returned 1 [0144.605] CloseHandle (hObject=0x444) returned 1 [0144.615] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\KNJ4AJDH.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\KNJ4AJDH.txt", lpFilePart=0x0) returned 0x52 [0144.615] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0144.615] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\KNJ4AJDH.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\knj4ajdh.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0144.616] GetFileType (hFile=0x444) returned 0x1 [0144.616] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0144.616] GetFileType (hFile=0x444) returned 0x1 [0144.616] WriteFile (in: hFile=0x444, lpBuffer=0x221c778*, nNumberOfBytesToWrite=0x210, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x221c778*, lpNumberOfBytesWritten=0x3be5b8*=0x210, lpOverlapped=0x0) returned 1 [0144.618] CloseHandle (hObject=0x444) returned 1 [0144.619] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\KNJ4AJDH.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\KNJ4AJDH.txt", lpFilePart=0x0) returned 0x52 [0144.619] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\KNJ4AJDH.txt.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\KNJ4AJDH.txt.xuy", lpFilePart=0x0) returned 0x56 [0144.619] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0144.619] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\KNJ4AJDH.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\knj4ajdh.txt"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9df0c1eb, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x9df0c1eb, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x420c19c3, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x210)) returned 1 [0144.619] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0144.619] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\KNJ4AJDH.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\knj4ajdh.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\KNJ4AJDH.txt.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\knj4ajdh.txt.xuy")) returned 1 [0144.620] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\L78EW25D.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\L78EW25D.txt", lpFilePart=0x0) returned 0x52 [0144.620] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0144.620] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\L78EW25D.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\l78ew25d.txt"), fInfoLevelId=0x0, lpFileInformation=0x221da28 | out: lpFileInformation=0x221da28*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xadfa41ad, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0xadfa41ad, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0xadfa41ad, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0x6f)) returned 1 [0144.620] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0144.620] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\L78EW25D.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\L78EW25D.txt", lpFilePart=0x0) returned 0x52 [0144.620] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0144.620] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\L78EW25D.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\l78ew25d.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0144.620] GetFileType (hFile=0x444) returned 0x1 [0144.620] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0144.620] GetFileType (hFile=0x444) returned 0x1 [0144.620] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x6f [0144.620] ReadFile (in: hFile=0x444, lpBuffer=0x221dd70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x221dd70*, lpNumberOfBytesRead=0x3be6a8*=0x6f, lpOverlapped=0x0) returned 1 [0144.623] CloseHandle (hObject=0x444) returned 1 [0144.637] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\L78EW25D.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\L78EW25D.txt", lpFilePart=0x0) returned 0x52 [0144.637] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0144.637] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\L78EW25D.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\l78ew25d.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0144.638] GetFileType (hFile=0x444) returned 0x1 [0144.638] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0144.638] GetFileType (hFile=0x444) returned 0x1 [0144.638] WriteFile (in: hFile=0x444, lpBuffer=0x2294f58*, nNumberOfBytesToWrite=0x70, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x2294f58*, lpNumberOfBytesWritten=0x3be5b8*=0x70, lpOverlapped=0x0) returned 1 [0144.639] CloseHandle (hObject=0x444) returned 1 [0144.639] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\L78EW25D.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\L78EW25D.txt", lpFilePart=0x0) returned 0x52 [0144.639] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\L78EW25D.txt.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\L78EW25D.txt.xuy", lpFilePart=0x0) returned 0x56 [0144.639] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0144.639] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\L78EW25D.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\l78ew25d.txt"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xadfa41ad, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0xadfa41ad, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x420e7be1, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x70)) returned 1 [0144.640] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0144.640] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\L78EW25D.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\l78ew25d.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\L78EW25D.txt.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\l78ew25d.txt.xuy")) returned 1 [0144.641] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\LC10XEWL.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\LC10XEWL.txt", lpFilePart=0x0) returned 0x52 [0144.641] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0144.641] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\LC10XEWL.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\lc10xewl.txt"), fInfoLevelId=0x0, lpFileInformation=0x2296208 | out: lpFileInformation=0x2296208*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa2d488a0, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0xa2d488a0, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0xa2d488a0, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0x14b)) returned 1 [0144.641] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0144.641] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\LC10XEWL.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\LC10XEWL.txt", lpFilePart=0x0) returned 0x52 [0144.641] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0144.641] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\LC10XEWL.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\lc10xewl.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0144.641] GetFileType (hFile=0x444) returned 0x1 [0144.641] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0144.641] GetFileType (hFile=0x444) returned 0x1 [0144.641] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x14b [0144.641] ReadFile (in: hFile=0x444, lpBuffer=0x2296630, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x2296630*, lpNumberOfBytesRead=0x3be6a8*=0x14b, lpOverlapped=0x0) returned 1 [0144.642] CloseHandle (hObject=0x444) returned 1 [0144.652] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\LC10XEWL.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\LC10XEWL.txt", lpFilePart=0x0) returned 0x52 [0144.652] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0144.652] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\LC10XEWL.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\lc10xewl.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0144.654] GetFileType (hFile=0x444) returned 0x1 [0144.654] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0144.654] GetFileType (hFile=0x444) returned 0x1 [0144.654] WriteFile (in: hFile=0x444, lpBuffer=0x230dcb0*, nNumberOfBytesToWrite=0x150, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x230dcb0*, lpNumberOfBytesWritten=0x3be5b8*=0x150, lpOverlapped=0x0) returned 1 [0144.654] CloseHandle (hObject=0x444) returned 1 [0144.655] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\LC10XEWL.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\LC10XEWL.txt", lpFilePart=0x0) returned 0x52 [0144.655] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\LC10XEWL.txt.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\LC10XEWL.txt.xuy", lpFilePart=0x0) returned 0x56 [0144.655] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0144.655] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\LC10XEWL.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\lc10xewl.txt"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa2d488a0, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0xa2d488a0, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x4210dde9, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x150)) returned 1 [0144.655] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0144.655] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\LC10XEWL.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\lc10xewl.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\LC10XEWL.txt.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\lc10xewl.txt.xuy")) returned 1 [0144.656] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\LVARU12Y.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\LVARU12Y.txt", lpFilePart=0x0) returned 0x52 [0144.656] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0144.656] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\LVARU12Y.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\lvaru12y.txt"), fInfoLevelId=0x0, lpFileInformation=0x230ef60 | out: lpFileInformation=0x230ef60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x98e95a19, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x98e95a19, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x98e95a19, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0x105)) returned 1 [0144.656] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0144.656] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\LVARU12Y.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\LVARU12Y.txt", lpFilePart=0x0) returned 0x52 [0144.656] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0144.656] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\LVARU12Y.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\lvaru12y.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0144.656] GetFileType (hFile=0x444) returned 0x1 [0144.656] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0144.656] GetFileType (hFile=0x444) returned 0x1 [0144.656] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x105 [0144.656] ReadFile (in: hFile=0x444, lpBuffer=0x230f340, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x230f340*, lpNumberOfBytesRead=0x3be6a8*=0x105, lpOverlapped=0x0) returned 1 [0144.657] CloseHandle (hObject=0x444) returned 1 [0144.710] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\LVARU12Y.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\LVARU12Y.txt", lpFilePart=0x0) returned 0x52 [0144.710] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0144.710] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\LVARU12Y.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\lvaru12y.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0144.712] GetFileType (hFile=0x444) returned 0x1 [0144.712] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0144.712] GetFileType (hFile=0x444) returned 0x1 [0144.712] WriteFile (in: hFile=0x444, lpBuffer=0x2186878*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x2186878*, lpNumberOfBytesWritten=0x3be5b8*=0x110, lpOverlapped=0x0) returned 1 [0144.713] CloseHandle (hObject=0x444) returned 1 [0144.713] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\LVARU12Y.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\LVARU12Y.txt", lpFilePart=0x0) returned 0x52 [0144.713] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\LVARU12Y.txt.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\LVARU12Y.txt.xuy", lpFilePart=0x0) returned 0x56 [0144.713] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0144.713] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\LVARU12Y.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\lvaru12y.txt"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x98e95a19, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x98e95a19, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x421a686f, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x110)) returned 1 [0144.713] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0144.713] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\LVARU12Y.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\lvaru12y.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\LVARU12Y.txt.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\lvaru12y.txt.xuy")) returned 1 [0144.714] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\LY1NFEKN.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\LY1NFEKN.txt", lpFilePart=0x0) returned 0x52 [0144.714] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0144.714] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\LY1NFEKN.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\ly1nfekn.txt"), fInfoLevelId=0x0, lpFileInformation=0x2187b28 | out: lpFileInformation=0x2187b28*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xac6e7ac1, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0xac6e7ac1, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0xac6e7ac1, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0x193)) returned 1 [0144.716] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0144.716] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\LY1NFEKN.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\LY1NFEKN.txt", lpFilePart=0x0) returned 0x52 [0144.716] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0144.716] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\LY1NFEKN.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\ly1nfekn.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0144.717] GetFileType (hFile=0x444) returned 0x1 [0144.717] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0144.717] GetFileType (hFile=0x444) returned 0x1 [0144.717] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x193 [0144.717] ReadFile (in: hFile=0x444, lpBuffer=0x2187f98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x2187f98*, lpNumberOfBytesRead=0x3be6a8*=0x193, lpOverlapped=0x0) returned 1 [0144.718] CloseHandle (hObject=0x444) returned 1 [0144.728] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\LY1NFEKN.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\LY1NFEKN.txt", lpFilePart=0x0) returned 0x52 [0144.728] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0144.728] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\LY1NFEKN.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\ly1nfekn.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0144.730] GetFileType (hFile=0x444) returned 0x1 [0144.730] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0144.730] GetFileType (hFile=0x444) returned 0x1 [0144.730] WriteFile (in: hFile=0x444, lpBuffer=0x21ff7b0*, nNumberOfBytesToWrite=0x1a0, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x21ff7b0*, lpNumberOfBytesWritten=0x3be5b8*=0x1a0, lpOverlapped=0x0) returned 1 [0144.731] CloseHandle (hObject=0x444) returned 1 [0144.731] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\LY1NFEKN.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\LY1NFEKN.txt", lpFilePart=0x0) returned 0x52 [0144.731] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\LY1NFEKN.txt.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\LY1NFEKN.txt.xuy", lpFilePart=0x0) returned 0x56 [0144.731] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0144.731] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\LY1NFEKN.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\ly1nfekn.txt"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xac6e7ac1, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0xac6e7ac1, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x421cccc8, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x1a0)) returned 1 [0144.731] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0144.731] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\LY1NFEKN.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\ly1nfekn.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\LY1NFEKN.txt.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\ly1nfekn.txt.xuy")) returned 1 [0144.732] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\LY3FDU65.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\LY3FDU65.txt", lpFilePart=0x0) returned 0x52 [0144.732] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0144.732] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\LY3FDU65.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\ly3fdu65.txt"), fInfoLevelId=0x0, lpFileInformation=0x2200a60 | out: lpFileInformation=0x2200a60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x94bbfeca, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x94bbfeca, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x94bbfeca, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0x137)) returned 1 [0144.732] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0144.732] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\LY3FDU65.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\LY3FDU65.txt", lpFilePart=0x0) returned 0x52 [0144.732] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0144.732] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\LY3FDU65.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\ly3fdu65.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0144.732] GetFileType (hFile=0x444) returned 0x1 [0144.733] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0144.733] GetFileType (hFile=0x444) returned 0x1 [0144.733] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x137 [0144.733] ReadFile (in: hFile=0x444, lpBuffer=0x2200e70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x2200e70*, lpNumberOfBytesRead=0x3be6a8*=0x137, lpOverlapped=0x0) returned 1 [0144.733] CloseHandle (hObject=0x444) returned 1 [0144.744] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\LY3FDU65.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\LY3FDU65.txt", lpFilePart=0x0) returned 0x52 [0144.744] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0144.744] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\LY3FDU65.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\ly3fdu65.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0144.745] GetFileType (hFile=0x444) returned 0x1 [0144.745] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0144.745] GetFileType (hFile=0x444) returned 0x1 [0144.745] WriteFile (in: hFile=0x444, lpBuffer=0x22784a8*, nNumberOfBytesToWrite=0x140, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x22784a8*, lpNumberOfBytesWritten=0x3be5b8*=0x140, lpOverlapped=0x0) returned 1 [0144.746] CloseHandle (hObject=0x444) returned 1 [0144.746] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\LY3FDU65.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\LY3FDU65.txt", lpFilePart=0x0) returned 0x52 [0144.746] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\LY3FDU65.txt.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\LY3FDU65.txt.xuy", lpFilePart=0x0) returned 0x56 [0144.746] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0144.746] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\LY3FDU65.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\ly3fdu65.txt"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x94bbfeca, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x94bbfeca, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x421f2beb, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x140)) returned 1 [0144.747] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0144.747] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\LY3FDU65.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\ly3fdu65.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\LY3FDU65.txt.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\ly3fdu65.txt.xuy")) returned 1 [0144.748] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\M19117WZ.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\M19117WZ.txt", lpFilePart=0x0) returned 0x52 [0144.748] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0144.748] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\M19117WZ.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\m19117wz.txt"), fInfoLevelId=0x0, lpFileInformation=0x2279758 | out: lpFileInformation=0x2279758*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x948a8e83, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x948a8e83, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x948a8e83, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0x121)) returned 1 [0144.748] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0144.748] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\M19117WZ.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\M19117WZ.txt", lpFilePart=0x0) returned 0x52 [0144.748] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0144.748] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\M19117WZ.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\m19117wz.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0144.748] GetFileType (hFile=0x444) returned 0x1 [0144.748] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0144.748] GetFileType (hFile=0x444) returned 0x1 [0144.748] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x121 [0144.748] ReadFile (in: hFile=0x444, lpBuffer=0x2279b58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x2279b58*, lpNumberOfBytesRead=0x3be6a8*=0x121, lpOverlapped=0x0) returned 1 [0144.749] CloseHandle (hObject=0x444) returned 1 [0144.760] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\M19117WZ.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\M19117WZ.txt", lpFilePart=0x0) returned 0x52 [0144.760] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0144.760] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\M19117WZ.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\m19117wz.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0144.761] GetFileType (hFile=0x444) returned 0x1 [0144.761] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0144.761] GetFileType (hFile=0x444) returned 0x1 [0144.761] WriteFile (in: hFile=0x444, lpBuffer=0x22f1140*, nNumberOfBytesToWrite=0x130, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x22f1140*, lpNumberOfBytesWritten=0x3be5b8*=0x130, lpOverlapped=0x0) returned 1 [0144.762] CloseHandle (hObject=0x444) returned 1 [0144.762] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\M19117WZ.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\M19117WZ.txt", lpFilePart=0x0) returned 0x52 [0144.762] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\M19117WZ.txt.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\M19117WZ.txt.xuy", lpFilePart=0x0) returned 0x56 [0144.762] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0144.762] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\M19117WZ.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\m19117wz.txt"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x948a8e83, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x948a8e83, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x42218eb7, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x130)) returned 1 [0144.762] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0144.762] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\M19117WZ.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\m19117wz.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\M19117WZ.txt.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\m19117wz.txt.xuy")) returned 1 [0144.763] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\MA5WDFBR.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\MA5WDFBR.txt", lpFilePart=0x0) returned 0x52 [0144.763] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0144.763] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\MA5WDFBR.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\ma5wdfbr.txt"), fInfoLevelId=0x0, lpFileInformation=0x22f23f0 | out: lpFileInformation=0x22f23f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xade4cca2, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0xade4cca2, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0xade4cca2, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0x58)) returned 1 [0144.764] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0144.764] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\MA5WDFBR.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\MA5WDFBR.txt", lpFilePart=0x0) returned 0x52 [0144.764] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0144.764] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\MA5WDFBR.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\ma5wdfbr.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0144.764] GetFileType (hFile=0x444) returned 0x1 [0144.764] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0144.764] GetFileType (hFile=0x444) returned 0x1 [0144.764] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x58 [0144.764] ReadFile (in: hFile=0x444, lpBuffer=0x22f2720, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x22f2720*, lpNumberOfBytesRead=0x3be6a8*=0x58, lpOverlapped=0x0) returned 1 [0144.765] CloseHandle (hObject=0x444) returned 1 [0144.804] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\MA5WDFBR.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\MA5WDFBR.txt", lpFilePart=0x0) returned 0x52 [0144.804] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0144.804] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\MA5WDFBR.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\ma5wdfbr.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0144.806] GetFileType (hFile=0x444) returned 0x1 [0144.806] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0144.806] GetFileType (hFile=0x444) returned 0x1 [0144.806] WriteFile (in: hFile=0x444, lpBuffer=0x2169830*, nNumberOfBytesToWrite=0x60, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x2169830*, lpNumberOfBytesWritten=0x3be5b8*=0x60, lpOverlapped=0x0) returned 1 [0144.807] CloseHandle (hObject=0x444) returned 1 [0144.807] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\MA5WDFBR.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\MA5WDFBR.txt", lpFilePart=0x0) returned 0x52 [0144.807] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\MA5WDFBR.txt.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\MA5WDFBR.txt.xuy", lpFilePart=0x0) returned 0x56 [0144.807] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0144.807] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\MA5WDFBR.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\ma5wdfbr.txt"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xade4cca2, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0xade4cca2, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x4228b5ca, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x60)) returned 1 [0144.807] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0144.807] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\MA5WDFBR.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\ma5wdfbr.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\MA5WDFBR.txt.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\ma5wdfbr.txt.xuy")) returned 1 [0144.811] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\MBJX4MYA.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\MBJX4MYA.txt", lpFilePart=0x0) returned 0x52 [0144.811] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0144.811] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\MBJX4MYA.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\mbjx4mya.txt"), fInfoLevelId=0x0, lpFileInformation=0x216aae0 | out: lpFileInformation=0x216aae0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x94e44789, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x94e44789, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x94e4e38c, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0xca)) returned 1 [0144.811] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0144.811] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\MBJX4MYA.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\MBJX4MYA.txt", lpFilePart=0x0) returned 0x52 [0144.811] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0144.811] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\MBJX4MYA.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\mbjx4mya.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0144.812] GetFileType (hFile=0x444) returned 0x1 [0144.812] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0144.812] GetFileType (hFile=0x444) returned 0x1 [0144.812] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0xca [0144.812] ReadFile (in: hFile=0x444, lpBuffer=0x216ae88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x216ae88*, lpNumberOfBytesRead=0x3be6a8*=0xca, lpOverlapped=0x0) returned 1 [0144.812] CloseHandle (hObject=0x444) returned 1 [0144.823] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\MBJX4MYA.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\MBJX4MYA.txt", lpFilePart=0x0) returned 0x52 [0144.823] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0144.823] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\MBJX4MYA.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\mbjx4mya.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0144.824] GetFileType (hFile=0x444) returned 0x1 [0144.824] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0144.824] GetFileType (hFile=0x444) returned 0x1 [0144.824] WriteFile (in: hFile=0x444, lpBuffer=0x21e2130*, nNumberOfBytesToWrite=0xd0, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x21e2130*, lpNumberOfBytesWritten=0x3be5b8*=0xd0, lpOverlapped=0x0) returned 1 [0144.825] CloseHandle (hObject=0x444) returned 1 [0144.825] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\MBJX4MYA.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\MBJX4MYA.txt", lpFilePart=0x0) returned 0x52 [0144.825] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\MBJX4MYA.txt.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\MBJX4MYA.txt.xuy", lpFilePart=0x0) returned 0x56 [0144.825] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0144.825] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\MBJX4MYA.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\mbjx4mya.txt"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x94e44789, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x94e44789, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x422b1b5c, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xd0)) returned 1 [0144.825] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0144.825] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\MBJX4MYA.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\mbjx4mya.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\MBJX4MYA.txt.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\mbjx4mya.txt.xuy")) returned 1 [0144.826] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\MCAKE788.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\MCAKE788.txt", lpFilePart=0x0) returned 0x52 [0144.826] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0144.826] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\MCAKE788.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\mcake788.txt"), fInfoLevelId=0x0, lpFileInformation=0x21e33e0 | out: lpFileInformation=0x21e33e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x92b34705, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x92b34705, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x92b34705, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0x66)) returned 1 [0144.827] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0144.827] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\MCAKE788.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\MCAKE788.txt", lpFilePart=0x0) returned 0x52 [0144.827] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0144.827] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\MCAKE788.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\mcake788.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0144.827] GetFileType (hFile=0x444) returned 0x1 [0144.827] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0144.827] GetFileType (hFile=0x444) returned 0x1 [0144.827] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x66 [0144.827] ReadFile (in: hFile=0x444, lpBuffer=0x21e3720, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x21e3720*, lpNumberOfBytesRead=0x3be6a8*=0x66, lpOverlapped=0x0) returned 1 [0144.828] CloseHandle (hObject=0x444) returned 1 [0144.841] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\MCAKE788.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\MCAKE788.txt", lpFilePart=0x0) returned 0x52 [0144.841] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0144.841] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\MCAKE788.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\mcake788.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0144.842] GetFileType (hFile=0x444) returned 0x1 [0144.842] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0144.842] GetFileType (hFile=0x444) returned 0x1 [0144.842] WriteFile (in: hFile=0x444, lpBuffer=0x225a910*, nNumberOfBytesToWrite=0x70, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x225a910*, lpNumberOfBytesWritten=0x3be5b8*=0x70, lpOverlapped=0x0) returned 1 [0144.843] CloseHandle (hObject=0x444) returned 1 [0144.843] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\MCAKE788.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\MCAKE788.txt", lpFilePart=0x0) returned 0x52 [0144.843] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\MCAKE788.txt.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\MCAKE788.txt.xuy", lpFilePart=0x0) returned 0x56 [0144.843] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0144.843] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\MCAKE788.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\mcake788.txt"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x92b34705, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x92b34705, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x422dd11c, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x70)) returned 1 [0144.843] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0144.843] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\MCAKE788.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\mcake788.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\MCAKE788.txt.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\mcake788.txt.xuy")) returned 1 [0144.844] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\MIL4MU1S.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\MIL4MU1S.txt", lpFilePart=0x0) returned 0x52 [0144.844] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0144.844] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\MIL4MU1S.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\mil4mu1s.txt"), fInfoLevelId=0x0, lpFileInformation=0x225bbc0 | out: lpFileInformation=0x225bbc0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb9cf4ffc, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0xb9cf4ffc, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0xb9cf76c8, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0xa3)) returned 1 [0144.844] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0144.844] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\MIL4MU1S.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\MIL4MU1S.txt", lpFilePart=0x0) returned 0x52 [0144.845] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0144.845] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\MIL4MU1S.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\mil4mu1s.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0144.845] GetFileType (hFile=0x444) returned 0x1 [0144.845] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0144.845] GetFileType (hFile=0x444) returned 0x1 [0144.845] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0xa3 [0144.845] ReadFile (in: hFile=0x444, lpBuffer=0x225bf40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x225bf40*, lpNumberOfBytesRead=0x3be6a8*=0xa3, lpOverlapped=0x0) returned 1 [0144.846] CloseHandle (hObject=0x444) returned 1 [0144.856] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\MIL4MU1S.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\MIL4MU1S.txt", lpFilePart=0x0) returned 0x52 [0144.856] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0144.856] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\MIL4MU1S.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\mil4mu1s.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0144.857] GetFileType (hFile=0x444) returned 0x1 [0144.857] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0144.857] GetFileType (hFile=0x444) returned 0x1 [0144.857] WriteFile (in: hFile=0x444, lpBuffer=0x22d31b0*, nNumberOfBytesToWrite=0xb0, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x22d31b0*, lpNumberOfBytesWritten=0x3be5b8*=0xb0, lpOverlapped=0x0) returned 1 [0144.858] CloseHandle (hObject=0x444) returned 1 [0144.858] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\MIL4MU1S.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\MIL4MU1S.txt", lpFilePart=0x0) returned 0x52 [0144.858] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\MIL4MU1S.txt.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\MIL4MU1S.txt.xuy", lpFilePart=0x0) returned 0x56 [0144.858] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0144.858] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\MIL4MU1S.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\mil4mu1s.txt"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb9cf4ffc, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0xb9cf4ffc, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x422fdccc, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xb0)) returned 1 [0144.858] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0144.858] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\MIL4MU1S.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\mil4mu1s.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\MIL4MU1S.txt.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\mil4mu1s.txt.xuy")) returned 1 [0144.859] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\MM8KB9U2.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\MM8KB9U2.txt", lpFilePart=0x0) returned 0x52 [0144.860] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0144.860] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\MM8KB9U2.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\mm8kb9u2.txt"), fInfoLevelId=0x0, lpFileInformation=0x22d4460 | out: lpFileInformation=0x22d4460*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x26d03878, ftCreationTime.dwHighDateTime=0x1d2fc23, ftLastAccessTime.dwLowDateTime=0x26d03878, ftLastAccessTime.dwHighDateTime=0x1d2fc23, ftLastWriteTime.dwLowDateTime=0x26d0d4c3, ftLastWriteTime.dwHighDateTime=0x1d2fc23, nFileSizeHigh=0x0, nFileSizeLow=0x1b2)) returned 1 [0144.860] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0144.860] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\MM8KB9U2.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\MM8KB9U2.txt", lpFilePart=0x0) returned 0x52 [0144.860] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0144.860] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\MM8KB9U2.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\mm8kb9u2.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0144.860] GetFileType (hFile=0x444) returned 0x1 [0144.860] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0144.860] GetFileType (hFile=0x444) returned 0x1 [0144.860] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x1b2 [0144.860] ReadFile (in: hFile=0x444, lpBuffer=0x22d48f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x22d48f0*, lpNumberOfBytesRead=0x3be6a8*=0x1b2, lpOverlapped=0x0) returned 1 [0144.861] CloseHandle (hObject=0x444) returned 1 [0144.871] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\MM8KB9U2.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\MM8KB9U2.txt", lpFilePart=0x0) returned 0x52 [0144.871] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0144.871] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\MM8KB9U2.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\mm8kb9u2.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0144.873] GetFileType (hFile=0x444) returned 0x1 [0144.873] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0144.873] GetFileType (hFile=0x444) returned 0x1 [0144.873] WriteFile (in: hFile=0x444, lpBuffer=0x234c1a8*, nNumberOfBytesToWrite=0x1c0, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x234c1a8*, lpNumberOfBytesWritten=0x3be5b8*=0x1c0, lpOverlapped=0x0) returned 1 [0144.874] CloseHandle (hObject=0x444) returned 1 [0144.874] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\MM8KB9U2.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\MM8KB9U2.txt", lpFilePart=0x0) returned 0x52 [0144.874] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\MM8KB9U2.txt.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\MM8KB9U2.txt.xuy", lpFilePart=0x0) returned 0x56 [0144.874] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0144.874] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\MM8KB9U2.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\mm8kb9u2.txt"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x26d03878, ftCreationTime.dwHighDateTime=0x1d2fc23, ftLastAccessTime.dwLowDateTime=0x26d03878, ftLastAccessTime.dwHighDateTime=0x1d2fc23, ftLastWriteTime.dwLowDateTime=0x42323f42, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x1c0)) returned 1 [0144.874] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0144.874] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\MM8KB9U2.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\mm8kb9u2.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\MM8KB9U2.txt.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\mm8kb9u2.txt.xuy")) returned 1 [0144.875] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\MMPF10F4.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\MMPF10F4.txt", lpFilePart=0x0) returned 0x52 [0144.875] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0144.876] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\MMPF10F4.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\mmpf10f4.txt"), fInfoLevelId=0x0, lpFileInformation=0x234d458 | out: lpFileInformation=0x234d458*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xadd8e0c8, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0xadd8e0c8, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0xadd8e0c8, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0x104)) returned 1 [0144.876] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0144.876] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\MMPF10F4.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\MMPF10F4.txt", lpFilePart=0x0) returned 0x52 [0144.876] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0144.876] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\MMPF10F4.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\mmpf10f4.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0144.876] GetFileType (hFile=0x444) returned 0x1 [0144.876] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0144.876] GetFileType (hFile=0x444) returned 0x1 [0144.876] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x104 [0144.876] ReadFile (in: hFile=0x444, lpBuffer=0x234d838, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x234d838*, lpNumberOfBytesRead=0x3be6a8*=0x104, lpOverlapped=0x0) returned 1 [0144.877] CloseHandle (hObject=0x444) returned 1 [0144.918] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\MMPF10F4.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\MMPF10F4.txt", lpFilePart=0x0) returned 0x52 [0144.918] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0144.918] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\MMPF10F4.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\mmpf10f4.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0144.920] GetFileType (hFile=0x444) returned 0x1 [0144.920] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0144.920] GetFileType (hFile=0x444) returned 0x1 [0144.920] WriteFile (in: hFile=0x444, lpBuffer=0x21c4e18*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x21c4e18*, lpNumberOfBytesWritten=0x3be5b8*=0x110, lpOverlapped=0x0) returned 1 [0144.920] CloseHandle (hObject=0x444) returned 1 [0144.920] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\MMPF10F4.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\MMPF10F4.txt", lpFilePart=0x0) returned 0x52 [0144.920] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\MMPF10F4.txt.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\MMPF10F4.txt.xuy", lpFilePart=0x0) returned 0x56 [0144.921] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0144.921] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\MMPF10F4.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\mmpf10f4.txt"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xadd8e0c8, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0xadd8e0c8, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x42396930, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x110)) returned 1 [0144.921] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0144.921] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\MMPF10F4.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\mmpf10f4.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\MMPF10F4.txt.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\mmpf10f4.txt.xuy")) returned 1 [0144.922] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\MOE7DCQU.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\MOE7DCQU.txt", lpFilePart=0x0) returned 0x52 [0144.922] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0144.922] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\MOE7DCQU.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\moe7dcqu.txt"), fInfoLevelId=0x0, lpFileInformation=0x21c60c8 | out: lpFileInformation=0x21c60c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa4e80b84, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0xa4e80b84, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0xa4e80b84, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0x76)) returned 1 [0144.922] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0144.922] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\MOE7DCQU.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\MOE7DCQU.txt", lpFilePart=0x0) returned 0x52 [0144.922] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0144.922] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\MOE7DCQU.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\moe7dcqu.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0144.922] GetFileType (hFile=0x444) returned 0x1 [0144.922] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0144.922] GetFileType (hFile=0x444) returned 0x1 [0144.922] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x76 [0144.922] ReadFile (in: hFile=0x444, lpBuffer=0x21c6418, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x21c6418*, lpNumberOfBytesRead=0x3be6a8*=0x76, lpOverlapped=0x0) returned 1 [0144.924] CloseHandle (hObject=0x444) returned 1 [0144.934] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\MOE7DCQU.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\MOE7DCQU.txt", lpFilePart=0x0) returned 0x52 [0144.934] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0144.934] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\MOE7DCQU.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\moe7dcqu.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0144.935] GetFileType (hFile=0x444) returned 0x1 [0144.935] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0144.935] GetFileType (hFile=0x444) returned 0x1 [0144.935] WriteFile (in: hFile=0x444, lpBuffer=0x223d628*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x223d628*, lpNumberOfBytesWritten=0x3be5b8*=0x80, lpOverlapped=0x0) returned 1 [0144.936] CloseHandle (hObject=0x444) returned 1 [0144.936] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\MOE7DCQU.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\MOE7DCQU.txt", lpFilePart=0x0) returned 0x52 [0144.936] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\MOE7DCQU.txt.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\MOE7DCQU.txt.xuy", lpFilePart=0x0) returned 0x56 [0144.936] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0144.936] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\MOE7DCQU.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\moe7dcqu.txt"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa4e80b84, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0xa4e80b84, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x423bc864, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x80)) returned 1 [0144.936] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0144.936] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\MOE7DCQU.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\moe7dcqu.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\MOE7DCQU.txt.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\moe7dcqu.txt.xuy")) returned 1 [0144.940] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\NEHE4KDB.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\NEHE4KDB.txt", lpFilePart=0x0) returned 0x52 [0144.940] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0144.940] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\NEHE4KDB.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\nehe4kdb.txt"), fInfoLevelId=0x0, lpFileInformation=0x223e8d8 | out: lpFileInformation=0x223e8d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xadd41c17, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0xadd41c17, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0xadd41c17, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0x72)) returned 1 [0144.940] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0144.940] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\NEHE4KDB.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\NEHE4KDB.txt", lpFilePart=0x0) returned 0x52 [0144.940] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0144.940] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\NEHE4KDB.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\nehe4kdb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0144.941] GetFileType (hFile=0x444) returned 0x1 [0144.941] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0144.941] GetFileType (hFile=0x444) returned 0x1 [0144.941] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x72 [0144.941] ReadFile (in: hFile=0x444, lpBuffer=0x223ec28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x223ec28*, lpNumberOfBytesRead=0x3be6a8*=0x72, lpOverlapped=0x0) returned 1 [0144.942] CloseHandle (hObject=0x444) returned 1 [0144.952] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\NEHE4KDB.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\NEHE4KDB.txt", lpFilePart=0x0) returned 0x52 [0144.952] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0144.952] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\NEHE4KDB.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\nehe4kdb.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0144.953] GetFileType (hFile=0x444) returned 0x1 [0144.953] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0144.953] GetFileType (hFile=0x444) returned 0x1 [0144.953] WriteFile (in: hFile=0x444, lpBuffer=0x22b5e38*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x22b5e38*, lpNumberOfBytesWritten=0x3be5b8*=0x80, lpOverlapped=0x0) returned 1 [0144.954] CloseHandle (hObject=0x444) returned 1 [0144.954] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\NEHE4KDB.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\NEHE4KDB.txt", lpFilePart=0x0) returned 0x52 [0144.954] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\NEHE4KDB.txt.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\NEHE4KDB.txt.xuy", lpFilePart=0x0) returned 0x56 [0144.954] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0144.954] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\NEHE4KDB.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\nehe4kdb.txt"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xadd41c17, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0xadd41c17, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x423e3517, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x80)) returned 1 [0144.954] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0144.954] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\NEHE4KDB.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\nehe4kdb.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\NEHE4KDB.txt.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\nehe4kdb.txt.xuy")) returned 1 [0144.956] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\NOCAHPZ6.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\NOCAHPZ6.txt", lpFilePart=0x0) returned 0x52 [0144.956] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0144.956] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\NOCAHPZ6.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\nocahpz6.txt"), fInfoLevelId=0x0, lpFileInformation=0x22b70e8 | out: lpFileInformation=0x22b70e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9d8c9f16, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x9d8c9f16, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x9d8c9f16, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0x89)) returned 1 [0144.956] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0144.956] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\NOCAHPZ6.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\NOCAHPZ6.txt", lpFilePart=0x0) returned 0x52 [0144.956] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0144.956] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\NOCAHPZ6.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\nocahpz6.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0144.956] GetFileType (hFile=0x444) returned 0x1 [0144.956] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0144.956] GetFileType (hFile=0x444) returned 0x1 [0144.956] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x89 [0144.956] ReadFile (in: hFile=0x444, lpBuffer=0x22b7450, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x22b7450*, lpNumberOfBytesRead=0x3be6a8*=0x89, lpOverlapped=0x0) returned 1 [0144.957] CloseHandle (hObject=0x444) returned 1 [0144.967] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\NOCAHPZ6.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\NOCAHPZ6.txt", lpFilePart=0x0) returned 0x52 [0144.967] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0144.967] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\NOCAHPZ6.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\nocahpz6.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0144.969] GetFileType (hFile=0x444) returned 0x1 [0144.969] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0144.969] GetFileType (hFile=0x444) returned 0x1 [0144.969] WriteFile (in: hFile=0x444, lpBuffer=0x232e678*, nNumberOfBytesToWrite=0x90, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x232e678*, lpNumberOfBytesWritten=0x3be5b8*=0x90, lpOverlapped=0x0) returned 1 [0144.973] CloseHandle (hObject=0x444) returned 1 [0144.973] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\NOCAHPZ6.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\NOCAHPZ6.txt", lpFilePart=0x0) returned 0x52 [0144.973] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\NOCAHPZ6.txt.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\NOCAHPZ6.txt.xuy", lpFilePart=0x0) returned 0x56 [0144.973] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0144.973] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\NOCAHPZ6.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\nocahpz6.txt"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9d8c9f16, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x9d8c9f16, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x4242f02e, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x90)) returned 1 [0144.973] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0144.973] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\NOCAHPZ6.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\nocahpz6.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\NOCAHPZ6.txt.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\nocahpz6.txt.xuy")) returned 1 [0144.974] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\NYCCG1AV.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\NYCCG1AV.txt", lpFilePart=0x0) returned 0x52 [0144.974] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0144.974] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\NYCCG1AV.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\nyccg1av.txt"), fInfoLevelId=0x0, lpFileInformation=0x232f928 | out: lpFileInformation=0x232f928*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x93b61102, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x93b61102, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x93b61102, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0x640)) returned 1 [0144.974] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0144.974] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\NYCCG1AV.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\NYCCG1AV.txt", lpFilePart=0x0) returned 0x52 [0144.974] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0144.975] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\NYCCG1AV.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\nyccg1av.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0144.975] GetFileType (hFile=0x444) returned 0x1 [0144.975] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0144.975] GetFileType (hFile=0x444) returned 0x1 [0144.975] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x640 [0144.975] ReadFile (in: hFile=0x444, lpBuffer=0x2330240, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x2330240*, lpNumberOfBytesRead=0x3be6a8*=0x640, lpOverlapped=0x0) returned 1 [0144.983] CloseHandle (hObject=0x444) returned 1 [0145.024] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\NYCCG1AV.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\NYCCG1AV.txt", lpFilePart=0x0) returned 0x52 [0145.024] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0145.025] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\NYCCG1AV.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\nyccg1av.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0145.026] GetFileType (hFile=0x444) returned 0x1 [0145.026] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0145.026] GetFileType (hFile=0x444) returned 0x1 [0145.026] WriteFile (in: hFile=0x444, lpBuffer=0x21a9690*, nNumberOfBytesToWrite=0x650, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x21a9690*, lpNumberOfBytesWritten=0x3be5b8*=0x650, lpOverlapped=0x0) returned 1 [0145.027] CloseHandle (hObject=0x444) returned 1 [0145.027] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\NYCCG1AV.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\NYCCG1AV.txt", lpFilePart=0x0) returned 0x52 [0145.027] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\NYCCG1AV.txt.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\NYCCG1AV.txt.xuy", lpFilePart=0x0) returned 0x56 [0145.027] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0145.027] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\NYCCG1AV.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\nyccg1av.txt"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x93b61102, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x93b61102, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x424a173d, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x650)) returned 1 [0145.027] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0145.027] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\NYCCG1AV.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\nyccg1av.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\NYCCG1AV.txt.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\nyccg1av.txt.xuy")) returned 1 [0145.028] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\O8FFFI2K.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\O8FFFI2K.txt", lpFilePart=0x0) returned 0x52 [0145.028] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0145.028] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\O8FFFI2K.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\o8fffi2k.txt"), fInfoLevelId=0x0, lpFileInformation=0x21aa940 | out: lpFileInformation=0x21aa940*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x96aa6672, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x96aa6672, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x96aa6672, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0x6e)) returned 1 [0145.029] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0145.029] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\O8FFFI2K.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\O8FFFI2K.txt", lpFilePart=0x0) returned 0x52 [0145.029] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0145.029] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\O8FFFI2K.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\o8fffi2k.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0145.029] GetFileType (hFile=0x444) returned 0x1 [0145.029] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0145.029] GetFileType (hFile=0x444) returned 0x1 [0145.029] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x6e [0145.029] ReadFile (in: hFile=0x444, lpBuffer=0x21aac88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x21aac88*, lpNumberOfBytesRead=0x3be6a8*=0x6e, lpOverlapped=0x0) returned 1 [0145.030] CloseHandle (hObject=0x444) returned 1 [0145.042] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\O8FFFI2K.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\O8FFFI2K.txt", lpFilePart=0x0) returned 0x52 [0145.042] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0145.042] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\O8FFFI2K.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\o8fffi2k.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0145.043] GetFileType (hFile=0x444) returned 0x1 [0145.043] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0145.044] GetFileType (hFile=0x444) returned 0x1 [0145.044] WriteFile (in: hFile=0x444, lpBuffer=0x2221e70*, nNumberOfBytesToWrite=0x70, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x2221e70*, lpNumberOfBytesWritten=0x3be5b8*=0x70, lpOverlapped=0x0) returned 1 [0145.044] CloseHandle (hObject=0x444) returned 1 [0145.044] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\O8FFFI2K.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\O8FFFI2K.txt", lpFilePart=0x0) returned 0x52 [0145.044] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\O8FFFI2K.txt.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\O8FFFI2K.txt.xuy", lpFilePart=0x0) returned 0x56 [0145.044] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0145.044] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\O8FFFI2K.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\o8fffi2k.txt"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x96aa6672, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x96aa6672, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x424c7c5f, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x70)) returned 1 [0145.045] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0145.045] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\O8FFFI2K.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\o8fffi2k.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\O8FFFI2K.txt.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\o8fffi2k.txt.xuy")) returned 1 [0145.046] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\P778SMC9.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\P778SMC9.txt", lpFilePart=0x0) returned 0x52 [0145.046] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0145.046] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\P778SMC9.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\p778smc9.txt"), fInfoLevelId=0x0, lpFileInformation=0x2223120 | out: lpFileInformation=0x2223120*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa4fb1e49, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0xa4fb1e49, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0xa4fb1e49, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0x57)) returned 1 [0145.046] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0145.046] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\P778SMC9.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\P778SMC9.txt", lpFilePart=0x0) returned 0x52 [0145.046] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0145.046] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\P778SMC9.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\p778smc9.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0145.046] GetFileType (hFile=0x444) returned 0x1 [0145.046] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0145.046] GetFileType (hFile=0x444) returned 0x1 [0145.046] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x57 [0145.046] ReadFile (in: hFile=0x444, lpBuffer=0x2223450, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x2223450*, lpNumberOfBytesRead=0x3be6a8*=0x57, lpOverlapped=0x0) returned 1 [0145.047] CloseHandle (hObject=0x444) returned 1 [0145.106] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\P778SMC9.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\P778SMC9.txt", lpFilePart=0x0) returned 0x52 [0145.106] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0145.107] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\P778SMC9.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\p778smc9.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0145.109] GetFileType (hFile=0x444) returned 0x1 [0145.109] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0145.109] GetFileType (hFile=0x444) returned 0x1 [0145.109] WriteFile (in: hFile=0x444, lpBuffer=0x229a620*, nNumberOfBytesToWrite=0x60, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x229a620*, lpNumberOfBytesWritten=0x3be5b8*=0x60, lpOverlapped=0x0) returned 1 [0145.110] CloseHandle (hObject=0x444) returned 1 [0145.110] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\P778SMC9.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\P778SMC9.txt", lpFilePart=0x0) returned 0x52 [0145.110] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\P778SMC9.txt.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\P778SMC9.txt.xuy", lpFilePart=0x0) returned 0x56 [0145.110] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0145.110] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\P778SMC9.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\p778smc9.txt"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa4fb1e49, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0xa4fb1e49, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x42560278, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x60)) returned 1 [0145.110] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0145.110] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\P778SMC9.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\p778smc9.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\P778SMC9.txt.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\p778smc9.txt.xuy")) returned 1 [0145.112] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\PF9HBAFQ.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\PF9HBAFQ.txt", lpFilePart=0x0) returned 0x52 [0145.112] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0145.112] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\PF9HBAFQ.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\pf9hbafq.txt"), fInfoLevelId=0x0, lpFileInformation=0x229b8d0 | out: lpFileInformation=0x229b8d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9d261902, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x9d261902, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x9d261902, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0xab)) returned 1 [0145.113] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0145.113] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\PF9HBAFQ.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\PF9HBAFQ.txt", lpFilePart=0x0) returned 0x52 [0145.113] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0145.113] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\PF9HBAFQ.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\pf9hbafq.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0145.113] GetFileType (hFile=0x444) returned 0x1 [0145.113] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0145.113] GetFileType (hFile=0x444) returned 0x1 [0145.113] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0xab [0145.113] ReadFile (in: hFile=0x444, lpBuffer=0x229bc58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x229bc58*, lpNumberOfBytesRead=0x3be6a8*=0xab, lpOverlapped=0x0) returned 1 [0145.114] CloseHandle (hObject=0x444) returned 1 [0145.131] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\PF9HBAFQ.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\PF9HBAFQ.txt", lpFilePart=0x0) returned 0x52 [0145.131] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0145.131] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\PF9HBAFQ.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\pf9hbafq.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0145.133] GetFileType (hFile=0x444) returned 0x1 [0145.133] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0145.133] GetFileType (hFile=0x444) returned 0x1 [0145.133] WriteFile (in: hFile=0x444, lpBuffer=0x2312ec0*, nNumberOfBytesToWrite=0xb0, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x2312ec0*, lpNumberOfBytesWritten=0x3be5b8*=0xb0, lpOverlapped=0x0) returned 1 [0145.134] CloseHandle (hObject=0x444) returned 1 [0145.134] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\PF9HBAFQ.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\PF9HBAFQ.txt", lpFilePart=0x0) returned 0x52 [0145.134] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\PF9HBAFQ.txt.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\PF9HBAFQ.txt.xuy", lpFilePart=0x0) returned 0x56 [0145.134] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0145.134] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\PF9HBAFQ.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\pf9hbafq.txt"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9d261902, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x9d261902, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x425ac78c, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xb0)) returned 1 [0145.134] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0145.134] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\PF9HBAFQ.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\pf9hbafq.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\PF9HBAFQ.txt.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\pf9hbafq.txt.xuy")) returned 1 [0145.136] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\PK3I34UV.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\PK3I34UV.txt", lpFilePart=0x0) returned 0x52 [0145.136] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0145.136] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\PK3I34UV.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\pk3i34uv.txt"), fInfoLevelId=0x0, lpFileInformation=0x2314170 | out: lpFileInformation=0x2314170*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x98e33fa4, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x98e33fa4, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x98e33fa4, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0xdf)) returned 1 [0145.136] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0145.136] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\PK3I34UV.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\PK3I34UV.txt", lpFilePart=0x0) returned 0x52 [0145.136] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0145.136] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\PK3I34UV.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\pk3i34uv.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0145.136] GetFileType (hFile=0x444) returned 0x1 [0145.136] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0145.136] GetFileType (hFile=0x444) returned 0x1 [0145.136] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0xdf [0145.136] ReadFile (in: hFile=0x444, lpBuffer=0x2314528, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x2314528*, lpNumberOfBytesRead=0x3be6a8*=0xdf, lpOverlapped=0x0) returned 1 [0145.137] CloseHandle (hObject=0x444) returned 1 [0145.189] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\PK3I34UV.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\PK3I34UV.txt", lpFilePart=0x0) returned 0x52 [0145.189] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0145.189] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\PK3I34UV.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\pk3i34uv.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0145.191] GetFileType (hFile=0x444) returned 0x1 [0145.191] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0145.191] GetFileType (hFile=0x444) returned 0x1 [0145.191] WriteFile (in: hFile=0x444, lpBuffer=0x218b270*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x218b270*, lpNumberOfBytesWritten=0x3be5b8*=0xe0, lpOverlapped=0x0) returned 1 [0145.192] CloseHandle (hObject=0x444) returned 1 [0145.192] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\PK3I34UV.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\PK3I34UV.txt", lpFilePart=0x0) returned 0x52 [0145.192] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\PK3I34UV.txt.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\PK3I34UV.txt.xuy", lpFilePart=0x0) returned 0x56 [0145.192] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0145.192] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\PK3I34UV.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\pk3i34uv.txt"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x98e33fa4, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x98e33fa4, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x4264518c, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1 [0145.192] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0145.192] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\PK3I34UV.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\pk3i34uv.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\PK3I34UV.txt.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\pk3i34uv.txt.xuy")) returned 1 [0145.193] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\QUMCK8L4.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\QUMCK8L4.txt", lpFilePart=0x0) returned 0x52 [0145.193] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0145.193] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\QUMCK8L4.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\qumck8l4.txt"), fInfoLevelId=0x0, lpFileInformation=0x218c520 | out: lpFileInformation=0x218c520*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9667df27, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x9667df27, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x96687b78, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0x56)) returned 1 [0145.193] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0145.193] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\QUMCK8L4.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\QUMCK8L4.txt", lpFilePart=0x0) returned 0x52 [0145.193] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0145.193] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\QUMCK8L4.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\qumck8l4.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0145.194] GetFileType (hFile=0x444) returned 0x1 [0145.194] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0145.194] GetFileType (hFile=0x444) returned 0x1 [0145.194] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x56 [0145.194] ReadFile (in: hFile=0x444, lpBuffer=0x218c850, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x218c850*, lpNumberOfBytesRead=0x3be6a8*=0x56, lpOverlapped=0x0) returned 1 [0145.195] CloseHandle (hObject=0x444) returned 1 [0145.205] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\QUMCK8L4.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\QUMCK8L4.txt", lpFilePart=0x0) returned 0x52 [0145.205] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0145.205] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\QUMCK8L4.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\qumck8l4.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0145.207] GetFileType (hFile=0x444) returned 0x1 [0145.207] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0145.207] GetFileType (hFile=0x444) returned 0x1 [0145.207] WriteFile (in: hFile=0x444, lpBuffer=0x2203a20*, nNumberOfBytesToWrite=0x60, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x2203a20*, lpNumberOfBytesWritten=0x3be5b8*=0x60, lpOverlapped=0x0) returned 1 [0145.207] CloseHandle (hObject=0x444) returned 1 [0145.208] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\QUMCK8L4.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\QUMCK8L4.txt", lpFilePart=0x0) returned 0x52 [0145.208] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\QUMCK8L4.txt.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\QUMCK8L4.txt.xuy", lpFilePart=0x0) returned 0x56 [0145.208] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0145.208] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\QUMCK8L4.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\qumck8l4.txt"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9667df27, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x9667df27, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x4266b31b, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x60)) returned 1 [0145.208] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0145.208] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\QUMCK8L4.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\qumck8l4.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\QUMCK8L4.txt.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\qumck8l4.txt.xuy")) returned 1 [0145.209] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\RAYRHE6Z.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\RAYRHE6Z.txt", lpFilePart=0x0) returned 0x52 [0145.209] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0145.209] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\RAYRHE6Z.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\rayrhe6z.txt"), fInfoLevelId=0x0, lpFileInformation=0x2204cd0 | out: lpFileInformation=0x2204cd0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa561a39f, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0xa561a39f, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0xa561a39f, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0x1f9)) returned 1 [0145.209] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0145.209] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\RAYRHE6Z.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\RAYRHE6Z.txt", lpFilePart=0x0) returned 0x52 [0145.209] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0145.209] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\RAYRHE6Z.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\rayrhe6z.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0145.209] GetFileType (hFile=0x444) returned 0x1 [0145.209] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0145.209] GetFileType (hFile=0x444) returned 0x1 [0145.209] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x1f9 [0145.209] ReadFile (in: hFile=0x444, lpBuffer=0x22051a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x22051a8*, lpNumberOfBytesRead=0x3be6a8*=0x1f9, lpOverlapped=0x0) returned 1 [0145.210] CloseHandle (hObject=0x444) returned 1 [0145.223] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\RAYRHE6Z.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\RAYRHE6Z.txt", lpFilePart=0x0) returned 0x52 [0145.223] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0145.223] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\RAYRHE6Z.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\rayrhe6z.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0145.224] GetFileType (hFile=0x444) returned 0x1 [0145.224] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0145.224] GetFileType (hFile=0x444) returned 0x1 [0145.224] WriteFile (in: hFile=0x444, lpBuffer=0x227cb98*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x227cb98*, lpNumberOfBytesWritten=0x3be5b8*=0x200, lpOverlapped=0x0) returned 1 [0145.225] CloseHandle (hObject=0x444) returned 1 [0145.225] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\RAYRHE6Z.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\RAYRHE6Z.txt", lpFilePart=0x0) returned 0x52 [0145.225] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\RAYRHE6Z.txt.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\RAYRHE6Z.txt.xuy", lpFilePart=0x0) returned 0x56 [0145.225] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0145.225] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\RAYRHE6Z.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\rayrhe6z.txt"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa561a39f, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0xa561a39f, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x42691adb, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x200)) returned 1 [0145.225] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0145.226] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\RAYRHE6Z.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\rayrhe6z.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\RAYRHE6Z.txt.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\rayrhe6z.txt.xuy")) returned 1 [0145.227] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\RQK5QF4L.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\RQK5QF4L.txt", lpFilePart=0x0) returned 0x52 [0145.227] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0145.227] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\RQK5QF4L.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\rqk5qf4l.txt"), fInfoLevelId=0x0, lpFileInformation=0x227de48 | out: lpFileInformation=0x227de48*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9fc64189, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x9fc64189, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x9fc64189, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0145.227] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0145.227] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\RQK5QF4L.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\RQK5QF4L.txt", lpFilePart=0x0) returned 0x52 [0145.227] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0145.227] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\RQK5QF4L.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\rqk5qf4l.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0145.227] GetFileType (hFile=0x444) returned 0x1 [0145.227] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0145.227] GetFileType (hFile=0x444) returned 0x1 [0145.227] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x187 [0145.227] ReadFile (in: hFile=0x444, lpBuffer=0x227e2a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x227e2a8*, lpNumberOfBytesRead=0x3be6a8*=0x187, lpOverlapped=0x0) returned 1 [0145.229] CloseHandle (hObject=0x444) returned 1 [0145.239] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\RQK5QF4L.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\RQK5QF4L.txt", lpFilePart=0x0) returned 0x52 [0145.239] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0145.239] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\RQK5QF4L.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\rqk5qf4l.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0145.241] GetFileType (hFile=0x444) returned 0x1 [0145.241] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0145.241] GetFileType (hFile=0x444) returned 0x1 [0145.241] WriteFile (in: hFile=0x444, lpBuffer=0x22f5a70*, nNumberOfBytesToWrite=0x190, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x22f5a70*, lpNumberOfBytesWritten=0x3be5b8*=0x190, lpOverlapped=0x0) returned 1 [0145.242] CloseHandle (hObject=0x444) returned 1 [0145.242] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\RQK5QF4L.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\RQK5QF4L.txt", lpFilePart=0x0) returned 0x52 [0145.242] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\RQK5QF4L.txt.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\RQK5QF4L.txt.xuy", lpFilePart=0x0) returned 0x56 [0145.242] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0145.242] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\RQK5QF4L.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\rqk5qf4l.txt"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9fc64189, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x9fc64189, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x426b7774, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x190)) returned 1 [0145.242] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0145.242] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\RQK5QF4L.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\rqk5qf4l.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\RQK5QF4L.txt.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\rqk5qf4l.txt.xuy")) returned 1 [0145.243] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\RTEPN67M.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\RTEPN67M.txt", lpFilePart=0x0) returned 0x52 [0145.243] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0145.243] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\RTEPN67M.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\rtepn67m.txt"), fInfoLevelId=0x0, lpFileInformation=0x22f6d20 | out: lpFileInformation=0x22f6d20*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xacb6016f, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0xacb6016f, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0xacb6016f, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0xed)) returned 1 [0145.244] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0145.244] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\RTEPN67M.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\RTEPN67M.txt", lpFilePart=0x0) returned 0x52 [0145.244] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0145.244] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\RTEPN67M.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\rtepn67m.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0145.244] GetFileType (hFile=0x444) returned 0x1 [0145.244] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0145.244] GetFileType (hFile=0x444) returned 0x1 [0145.244] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0xed [0145.244] ReadFile (in: hFile=0x444, lpBuffer=0x22f70e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x22f70e8*, lpNumberOfBytesRead=0x3be6a8*=0xed, lpOverlapped=0x0) returned 1 [0145.245] CloseHandle (hObject=0x444) returned 1 [0145.287] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\RTEPN67M.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\RTEPN67M.txt", lpFilePart=0x0) returned 0x52 [0145.287] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0145.287] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\RTEPN67M.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\rtepn67m.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0145.288] GetFileType (hFile=0x444) returned 0x1 [0145.289] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0145.289] GetFileType (hFile=0x444) returned 0x1 [0145.289] WriteFile (in: hFile=0x444, lpBuffer=0x216e3e8*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x216e3e8*, lpNumberOfBytesWritten=0x3be5b8*=0xf0, lpOverlapped=0x0) returned 1 [0145.290] CloseHandle (hObject=0x444) returned 1 [0145.290] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\RTEPN67M.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\RTEPN67M.txt", lpFilePart=0x0) returned 0x52 [0145.290] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\RTEPN67M.txt.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\RTEPN67M.txt.xuy", lpFilePart=0x0) returned 0x56 [0145.290] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0145.290] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\RTEPN67M.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\rtepn67m.txt"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xacb6016f, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0xacb6016f, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x42729f3d, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xf0)) returned 1 [0145.290] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0145.290] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\RTEPN67M.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\rtepn67m.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\RTEPN67M.txt.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\rtepn67m.txt.xuy")) returned 1 [0145.291] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\RYK7X1K4.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\RYK7X1K4.txt", lpFilePart=0x0) returned 0x52 [0145.291] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0145.291] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\RYK7X1K4.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\ryk7x1k4.txt"), fInfoLevelId=0x0, lpFileInformation=0x216f698 | out: lpFileInformation=0x216f698*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x94b98da2, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x94b98da2, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x94ba2a03, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0x71)) returned 1 [0145.292] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0145.292] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\RYK7X1K4.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\RYK7X1K4.txt", lpFilePart=0x0) returned 0x52 [0145.292] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0145.292] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\RYK7X1K4.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\ryk7x1k4.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0145.292] GetFileType (hFile=0x444) returned 0x1 [0145.292] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0145.292] GetFileType (hFile=0x444) returned 0x1 [0145.292] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x71 [0145.292] ReadFile (in: hFile=0x444, lpBuffer=0x216f9e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x216f9e8*, lpNumberOfBytesRead=0x3be6a8*=0x71, lpOverlapped=0x0) returned 1 [0145.293] CloseHandle (hObject=0x444) returned 1 [0145.304] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\RYK7X1K4.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\RYK7X1K4.txt", lpFilePart=0x0) returned 0x52 [0145.304] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0145.304] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\RYK7X1K4.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\ryk7x1k4.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0145.305] GetFileType (hFile=0x444) returned 0x1 [0145.305] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0145.305] GetFileType (hFile=0x444) returned 0x1 [0145.305] WriteFile (in: hFile=0x444, lpBuffer=0x21e6bf8*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x21e6bf8*, lpNumberOfBytesWritten=0x3be5b8*=0x80, lpOverlapped=0x0) returned 1 [0145.306] CloseHandle (hObject=0x444) returned 1 [0145.306] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\RYK7X1K4.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\RYK7X1K4.txt", lpFilePart=0x0) returned 0x52 [0145.306] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\RYK7X1K4.txt.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\RYK7X1K4.txt.xuy", lpFilePart=0x0) returned 0x56 [0145.306] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0145.306] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\RYK7X1K4.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\ryk7x1k4.txt"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x94b98da2, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x94b98da2, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x42750482, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x80)) returned 1 [0145.307] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0145.307] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\RYK7X1K4.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\ryk7x1k4.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\RYK7X1K4.txt.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\ryk7x1k4.txt.xuy")) returned 1 [0145.308] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\S0EK69P5.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\S0EK69P5.txt", lpFilePart=0x0) returned 0x52 [0145.308] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0145.308] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\S0EK69P5.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\s0ek69p5.txt"), fInfoLevelId=0x0, lpFileInformation=0x21e7ea8 | out: lpFileInformation=0x21e7ea8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9cf8cc3c, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x9cf8cc3c, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x9cf8cc3c, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0x7b)) returned 1 [0145.308] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0145.308] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\S0EK69P5.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\S0EK69P5.txt", lpFilePart=0x0) returned 0x52 [0145.308] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0145.308] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\S0EK69P5.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\s0ek69p5.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0145.308] GetFileType (hFile=0x444) returned 0x1 [0145.308] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0145.308] GetFileType (hFile=0x444) returned 0x1 [0145.308] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x7b [0145.308] ReadFile (in: hFile=0x444, lpBuffer=0x21e8200, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x21e8200*, lpNumberOfBytesRead=0x3be6a8*=0x7b, lpOverlapped=0x0) returned 1 [0145.309] CloseHandle (hObject=0x444) returned 1 [0145.319] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\S0EK69P5.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\S0EK69P5.txt", lpFilePart=0x0) returned 0x52 [0145.319] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0145.320] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\S0EK69P5.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\s0ek69p5.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0145.321] GetFileType (hFile=0x444) returned 0x1 [0145.321] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0145.321] GetFileType (hFile=0x444) returned 0x1 [0145.321] WriteFile (in: hFile=0x444, lpBuffer=0x225f408*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x225f408*, lpNumberOfBytesWritten=0x3be5b8*=0x80, lpOverlapped=0x0) returned 1 [0145.322] CloseHandle (hObject=0x444) returned 1 [0145.322] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\S0EK69P5.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\S0EK69P5.txt", lpFilePart=0x0) returned 0x52 [0145.322] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\S0EK69P5.txt.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\S0EK69P5.txt.xuy", lpFilePart=0x0) returned 0x56 [0145.322] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0145.322] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\S0EK69P5.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\s0ek69p5.txt"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9cf8cc3c, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x9cf8cc3c, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x42776364, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x80)) returned 1 [0145.322] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0145.322] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\S0EK69P5.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\s0ek69p5.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\S0EK69P5.txt.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\s0ek69p5.txt.xuy")) returned 1 [0145.323] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\SEVCUJM3.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\SEVCUJM3.txt", lpFilePart=0x0) returned 0x52 [0145.323] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0145.323] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\SEVCUJM3.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\sevcujm3.txt"), fInfoLevelId=0x0, lpFileInformation=0x22606b8 | out: lpFileInformation=0x22606b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9ea36240, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x9ea36240, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x9ea5c48c, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0x58)) returned 1 [0145.323] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0145.324] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\SEVCUJM3.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\SEVCUJM3.txt", lpFilePart=0x0) returned 0x52 [0145.324] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0145.324] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\SEVCUJM3.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\sevcujm3.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0145.324] GetFileType (hFile=0x444) returned 0x1 [0145.324] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0145.324] GetFileType (hFile=0x444) returned 0x1 [0145.324] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x58 [0145.324] ReadFile (in: hFile=0x444, lpBuffer=0x22609e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x22609e8*, lpNumberOfBytesRead=0x3be6a8*=0x58, lpOverlapped=0x0) returned 1 [0145.325] CloseHandle (hObject=0x444) returned 1 [0145.335] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\SEVCUJM3.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\SEVCUJM3.txt", lpFilePart=0x0) returned 0x52 [0145.335] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0145.335] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\SEVCUJM3.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\sevcujm3.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0145.337] GetFileType (hFile=0x444) returned 0x1 [0145.337] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0145.337] GetFileType (hFile=0x444) returned 0x1 [0145.337] WriteFile (in: hFile=0x444, lpBuffer=0x22d7bb0*, nNumberOfBytesToWrite=0x60, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x22d7bb0*, lpNumberOfBytesWritten=0x3be5b8*=0x60, lpOverlapped=0x0) returned 1 [0145.338] CloseHandle (hObject=0x444) returned 1 [0145.338] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\SEVCUJM3.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\SEVCUJM3.txt", lpFilePart=0x0) returned 0x52 [0145.338] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\SEVCUJM3.txt.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\SEVCUJM3.txt.xuy", lpFilePart=0x0) returned 0x56 [0145.338] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0145.338] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\SEVCUJM3.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\sevcujm3.txt"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9ea36240, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x9ea36240, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x4279c610, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x60)) returned 1 [0145.339] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0145.339] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\SEVCUJM3.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\sevcujm3.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\SEVCUJM3.txt.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\sevcujm3.txt.xuy")) returned 1 [0145.341] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\STGOZ493.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\STGOZ493.txt", lpFilePart=0x0) returned 0x52 [0145.341] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0145.341] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\STGOZ493.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\stgoz493.txt"), fInfoLevelId=0x0, lpFileInformation=0x22d8e60 | out: lpFileInformation=0x22d8e60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9d15688c, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x9d15688c, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x9d17caeb, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0x6b)) returned 1 [0145.341] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0145.341] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\STGOZ493.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\STGOZ493.txt", lpFilePart=0x0) returned 0x52 [0145.341] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0145.341] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\STGOZ493.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\stgoz493.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0145.341] GetFileType (hFile=0x444) returned 0x1 [0145.341] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0145.341] GetFileType (hFile=0x444) returned 0x1 [0145.341] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x6b [0145.341] ReadFile (in: hFile=0x444, lpBuffer=0x22d91a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x22d91a8*, lpNumberOfBytesRead=0x3be6a8*=0x6b, lpOverlapped=0x0) returned 1 [0145.343] CloseHandle (hObject=0x444) returned 1 [0145.353] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\STGOZ493.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\STGOZ493.txt", lpFilePart=0x0) returned 0x52 [0145.353] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0145.353] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\STGOZ493.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\stgoz493.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0145.355] GetFileType (hFile=0x444) returned 0x1 [0145.355] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0145.355] GetFileType (hFile=0x444) returned 0x1 [0145.355] WriteFile (in: hFile=0x444, lpBuffer=0x2350390*, nNumberOfBytesToWrite=0x70, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x2350390*, lpNumberOfBytesWritten=0x3be5b8*=0x70, lpOverlapped=0x0) returned 1 [0145.355] CloseHandle (hObject=0x444) returned 1 [0145.356] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\STGOZ493.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\STGOZ493.txt", lpFilePart=0x0) returned 0x52 [0145.356] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\STGOZ493.txt.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\STGOZ493.txt.xuy", lpFilePart=0x0) returned 0x56 [0145.356] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0145.356] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\STGOZ493.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\stgoz493.txt"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9d15688c, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x9d15688c, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x427c27c8, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x70)) returned 1 [0145.356] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0145.356] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\STGOZ493.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\stgoz493.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\STGOZ493.txt.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\stgoz493.txt.xuy")) returned 1 [0145.357] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\T1LCPPSA.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\T1LCPPSA.txt", lpFilePart=0x0) returned 0x52 [0145.357] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0145.357] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\T1LCPPSA.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\t1lcppsa.txt"), fInfoLevelId=0x0, lpFileInformation=0x2351640 | out: lpFileInformation=0x2351640*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb9ee70f8, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0xb9ee70f8, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0xb9ee70f8, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0x50)) returned 1 [0145.358] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0145.358] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\T1LCPPSA.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\T1LCPPSA.txt", lpFilePart=0x0) returned 0x52 [0145.358] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0145.358] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\T1LCPPSA.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\t1lcppsa.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0145.358] GetFileType (hFile=0x444) returned 0x1 [0145.358] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0145.358] GetFileType (hFile=0x444) returned 0x1 [0145.358] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x50 [0145.358] ReadFile (in: hFile=0x444, lpBuffer=0x2351968, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x2351968*, lpNumberOfBytesRead=0x3be6a8*=0x50, lpOverlapped=0x0) returned 1 [0145.359] CloseHandle (hObject=0x444) returned 1 [0145.399] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\T1LCPPSA.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\T1LCPPSA.txt", lpFilePart=0x0) returned 0x52 [0145.399] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0145.399] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\T1LCPPSA.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\t1lcppsa.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0145.400] GetFileType (hFile=0x444) returned 0x1 [0145.400] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0145.400] GetFileType (hFile=0x444) returned 0x1 [0145.400] WriteFile (in: hFile=0x444, lpBuffer=0x21c8a88*, nNumberOfBytesToWrite=0x60, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x21c8a88*, lpNumberOfBytesWritten=0x3be5b8*=0x60, lpOverlapped=0x0) returned 1 [0145.401] CloseHandle (hObject=0x444) returned 1 [0145.401] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\T1LCPPSA.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\T1LCPPSA.txt", lpFilePart=0x0) returned 0x52 [0145.401] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\T1LCPPSA.txt.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\T1LCPPSA.txt.xuy", lpFilePart=0x0) returned 0x56 [0145.401] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0145.401] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\T1LCPPSA.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\t1lcppsa.txt"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb9ee70f8, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0xb9ee70f8, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x428352f9, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x60)) returned 1 [0145.401] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0145.402] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\T1LCPPSA.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\t1lcppsa.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\T1LCPPSA.txt.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\t1lcppsa.txt.xuy")) returned 1 [0145.403] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\TCXQPY9L.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\TCXQPY9L.txt", lpFilePart=0x0) returned 0x52 [0145.403] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0145.403] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\TCXQPY9L.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\tcxqpy9l.txt"), fInfoLevelId=0x0, lpFileInformation=0x21c9d38 | out: lpFileInformation=0x21c9d38*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x959fa804, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x959fa804, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x959fa804, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0x6c)) returned 1 [0145.403] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0145.403] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\TCXQPY9L.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\TCXQPY9L.txt", lpFilePart=0x0) returned 0x52 [0145.403] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0145.403] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\TCXQPY9L.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\tcxqpy9l.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0145.403] GetFileType (hFile=0x444) returned 0x1 [0145.403] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0145.403] GetFileType (hFile=0x444) returned 0x1 [0145.403] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x6c [0145.403] ReadFile (in: hFile=0x444, lpBuffer=0x21ca080, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x21ca080*, lpNumberOfBytesRead=0x3be6a8*=0x6c, lpOverlapped=0x0) returned 1 [0145.404] CloseHandle (hObject=0x444) returned 1 [0145.415] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\TCXQPY9L.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\TCXQPY9L.txt", lpFilePart=0x0) returned 0x52 [0145.415] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0145.415] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\TCXQPY9L.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\tcxqpy9l.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0145.417] GetFileType (hFile=0x444) returned 0x1 [0145.417] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0145.417] GetFileType (hFile=0x444) returned 0x1 [0145.418] WriteFile (in: hFile=0x444, lpBuffer=0x2241268*, nNumberOfBytesToWrite=0x70, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x2241268*, lpNumberOfBytesWritten=0x3be5b8*=0x70, lpOverlapped=0x0) returned 1 [0145.418] CloseHandle (hObject=0x444) returned 1 [0145.418] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\TCXQPY9L.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\TCXQPY9L.txt", lpFilePart=0x0) returned 0x52 [0145.418] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\TCXQPY9L.txt.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\TCXQPY9L.txt.xuy", lpFilePart=0x0) returned 0x56 [0145.419] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0145.419] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\TCXQPY9L.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\tcxqpy9l.txt"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x959fa804, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x959fa804, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x4285b1b7, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x70)) returned 1 [0145.419] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0145.419] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\TCXQPY9L.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\tcxqpy9l.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\TCXQPY9L.txt.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\tcxqpy9l.txt.xuy")) returned 1 [0145.420] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\TEW946CI.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\TEW946CI.txt", lpFilePart=0x0) returned 0x52 [0145.420] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0145.420] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\TEW946CI.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\tew946ci.txt"), fInfoLevelId=0x0, lpFileInformation=0x2242518 | out: lpFileInformation=0x2242518*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9ca2f7b2, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x9ca2f7b2, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x9ca2f7b2, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0x91)) returned 1 [0145.420] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0145.420] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\TEW946CI.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\TEW946CI.txt", lpFilePart=0x0) returned 0x52 [0145.420] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0145.420] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\TEW946CI.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\tew946ci.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0145.420] GetFileType (hFile=0x444) returned 0x1 [0145.420] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0145.420] GetFileType (hFile=0x444) returned 0x1 [0145.420] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x91 [0145.420] ReadFile (in: hFile=0x444, lpBuffer=0x2242888, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x2242888*, lpNumberOfBytesRead=0x3be6a8*=0x91, lpOverlapped=0x0) returned 1 [0145.422] CloseHandle (hObject=0x444) returned 1 [0145.432] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\TEW946CI.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\TEW946CI.txt", lpFilePart=0x0) returned 0x52 [0145.432] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0145.432] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\TEW946CI.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\tew946ci.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0145.434] GetFileType (hFile=0x444) returned 0x1 [0145.434] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0145.434] GetFileType (hFile=0x444) returned 0x1 [0145.434] WriteFile (in: hFile=0x444, lpBuffer=0x22b9ad8*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x22b9ad8*, lpNumberOfBytesWritten=0x3be5b8*=0xa0, lpOverlapped=0x0) returned 1 [0145.435] CloseHandle (hObject=0x444) returned 1 [0145.435] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\TEW946CI.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\TEW946CI.txt", lpFilePart=0x0) returned 0x52 [0145.435] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\TEW946CI.txt.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\TEW946CI.txt.xuy", lpFilePart=0x0) returned 0x56 [0145.435] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0145.435] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\TEW946CI.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\tew946ci.txt"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9ca2f7b2, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x9ca2f7b2, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x428813fa, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xa0)) returned 1 [0145.435] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0145.435] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\TEW946CI.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\tew946ci.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\TEW946CI.txt.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\tew946ci.txt.xuy")) returned 1 [0145.436] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\TFCJHLEI.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\TFCJHLEI.txt", lpFilePart=0x0) returned 0x52 [0145.436] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0145.436] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\TFCJHLEI.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\tfcjhlei.txt"), fInfoLevelId=0x0, lpFileInformation=0x22bad88 | out: lpFileInformation=0x22bad88*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa51a1ce5, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0xa51a1ce5, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0xa51a1ce5, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0xda)) returned 1 [0145.436] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0145.436] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\TFCJHLEI.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\TFCJHLEI.txt", lpFilePart=0x0) returned 0x52 [0145.436] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0145.436] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\TFCJHLEI.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\tfcjhlei.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0145.436] GetFileType (hFile=0x444) returned 0x1 [0145.436] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0145.436] GetFileType (hFile=0x444) returned 0x1 [0145.436] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0xda [0145.437] ReadFile (in: hFile=0x444, lpBuffer=0x22bb140, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x22bb140*, lpNumberOfBytesRead=0x3be6a8*=0xda, lpOverlapped=0x0) returned 1 [0145.438] CloseHandle (hObject=0x444) returned 1 [0145.448] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\TFCJHLEI.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\TFCJHLEI.txt", lpFilePart=0x0) returned 0x52 [0145.448] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0145.448] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\TFCJHLEI.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\tfcjhlei.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0145.449] GetFileType (hFile=0x444) returned 0x1 [0145.449] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0145.449] GetFileType (hFile=0x444) returned 0x1 [0145.450] WriteFile (in: hFile=0x444, lpBuffer=0x2332408*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x2332408*, lpNumberOfBytesWritten=0x3be5b8*=0xe0, lpOverlapped=0x0) returned 1 [0145.451] CloseHandle (hObject=0x444) returned 1 [0145.451] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\TFCJHLEI.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\TFCJHLEI.txt", lpFilePart=0x0) returned 0x52 [0145.451] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\TFCJHLEI.txt.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\TFCJHLEI.txt.xuy", lpFilePart=0x0) returned 0x56 [0145.451] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0145.451] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\TFCJHLEI.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\tfcjhlei.txt"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa51a1ce5, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0xa51a1ce5, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x428a7661, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1 [0145.451] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0145.451] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\TFCJHLEI.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\tfcjhlei.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\TFCJHLEI.txt.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\tfcjhlei.txt.xuy")) returned 1 [0145.452] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\U2OYIS47.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\U2OYIS47.txt", lpFilePart=0x0) returned 0x52 [0145.452] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0145.452] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\U2OYIS47.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\u2oyis47.txt"), fInfoLevelId=0x0, lpFileInformation=0x23336b8 | out: lpFileInformation=0x23336b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x99d54027, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x99d54027, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x99d5dc78, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0x6f)) returned 1 [0145.452] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0145.452] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\U2OYIS47.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\U2OYIS47.txt", lpFilePart=0x0) returned 0x52 [0145.452] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0145.452] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\U2OYIS47.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\u2oyis47.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0145.453] GetFileType (hFile=0x444) returned 0x1 [0145.453] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0145.453] GetFileType (hFile=0x444) returned 0x1 [0145.453] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x6f [0145.453] ReadFile (in: hFile=0x444, lpBuffer=0x2333a00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x2333a00*, lpNumberOfBytesRead=0x3be6a8*=0x6f, lpOverlapped=0x0) returned 1 [0145.454] CloseHandle (hObject=0x444) returned 1 [0145.494] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\U2OYIS47.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\U2OYIS47.txt", lpFilePart=0x0) returned 0x52 [0145.495] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0145.495] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\U2OYIS47.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\u2oyis47.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0145.496] GetFileType (hFile=0x444) returned 0x1 [0145.496] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0145.496] GetFileType (hFile=0x444) returned 0x1 [0145.497] WriteFile (in: hFile=0x444, lpBuffer=0x21aaba0*, nNumberOfBytesToWrite=0x70, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x21aaba0*, lpNumberOfBytesWritten=0x3be5b8*=0x70, lpOverlapped=0x0) returned 1 [0145.497] CloseHandle (hObject=0x444) returned 1 [0145.497] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\U2OYIS47.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\U2OYIS47.txt", lpFilePart=0x0) returned 0x52 [0145.497] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\U2OYIS47.txt.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\U2OYIS47.txt.xuy", lpFilePart=0x0) returned 0x56 [0145.498] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0145.498] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\U2OYIS47.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\u2oyis47.txt"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x99d54027, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x99d54027, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x42919d43, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x70)) returned 1 [0145.498] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0145.498] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\U2OYIS47.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\u2oyis47.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\U2OYIS47.txt.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\u2oyis47.txt.xuy")) returned 1 [0145.499] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\U8FCPAKJ.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\U8FCPAKJ.txt", lpFilePart=0x0) returned 0x52 [0145.499] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0145.499] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\U8FCPAKJ.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\u8fcpakj.txt"), fInfoLevelId=0x0, lpFileInformation=0x21abe50 | out: lpFileInformation=0x21abe50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa58a2ba7, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0xa58a2ba7, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0xa58a2ba7, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0x6f)) returned 1 [0145.499] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0145.499] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\U8FCPAKJ.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\U8FCPAKJ.txt", lpFilePart=0x0) returned 0x52 [0145.499] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0145.499] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\U8FCPAKJ.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\u8fcpakj.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0145.499] GetFileType (hFile=0x444) returned 0x1 [0145.499] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0145.499] GetFileType (hFile=0x444) returned 0x1 [0145.499] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x6f [0145.500] ReadFile (in: hFile=0x444, lpBuffer=0x21ac198, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x21ac198*, lpNumberOfBytesRead=0x3be6a8*=0x6f, lpOverlapped=0x0) returned 1 [0145.501] CloseHandle (hObject=0x444) returned 1 [0145.512] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\U8FCPAKJ.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\U8FCPAKJ.txt", lpFilePart=0x0) returned 0x52 [0145.512] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0145.512] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\U8FCPAKJ.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\u8fcpakj.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0145.514] GetFileType (hFile=0x444) returned 0x1 [0145.514] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0145.514] GetFileType (hFile=0x444) returned 0x1 [0145.514] WriteFile (in: hFile=0x444, lpBuffer=0x2223380*, nNumberOfBytesToWrite=0x70, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x2223380*, lpNumberOfBytesWritten=0x3be5b8*=0x70, lpOverlapped=0x0) returned 1 [0145.514] CloseHandle (hObject=0x444) returned 1 [0145.515] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\U8FCPAKJ.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\U8FCPAKJ.txt", lpFilePart=0x0) returned 0x52 [0145.515] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\U8FCPAKJ.txt.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\U8FCPAKJ.txt.xuy", lpFilePart=0x0) returned 0x56 [0145.515] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0145.515] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\U8FCPAKJ.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\u8fcpakj.txt"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa58a2ba7, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0xa58a2ba7, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x4294034a, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x70)) returned 1 [0145.515] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0145.515] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\U8FCPAKJ.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\u8fcpakj.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\U8FCPAKJ.txt.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\u8fcpakj.txt.xuy")) returned 1 [0145.516] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\UBUPNOZC.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\UBUPNOZC.txt", lpFilePart=0x0) returned 0x52 [0145.516] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0145.516] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\UBUPNOZC.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\ubupnozc.txt"), fInfoLevelId=0x0, lpFileInformation=0x2224630 | out: lpFileInformation=0x2224630*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1269be9d, ftCreationTime.dwHighDateTime=0x1d2fc23, ftLastAccessTime.dwLowDateTime=0x1269be9d, ftLastAccessTime.dwHighDateTime=0x1d2fc23, ftLastWriteTime.dwLowDateTime=0x1269be9d, ftLastWriteTime.dwHighDateTime=0x1d2fc23, nFileSizeHigh=0x0, nFileSizeLow=0x54)) returned 1 [0145.516] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0145.516] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\UBUPNOZC.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\UBUPNOZC.txt", lpFilePart=0x0) returned 0x52 [0145.516] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0145.516] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\UBUPNOZC.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\ubupnozc.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0145.516] GetFileType (hFile=0x444) returned 0x1 [0145.516] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0145.516] GetFileType (hFile=0x444) returned 0x1 [0145.516] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x54 [0145.517] ReadFile (in: hFile=0x444, lpBuffer=0x2224960, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x2224960*, lpNumberOfBytesRead=0x3be6a8*=0x54, lpOverlapped=0x0) returned 1 [0145.536] CloseHandle (hObject=0x444) returned 1 [0145.550] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\UBUPNOZC.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\UBUPNOZC.txt", lpFilePart=0x0) returned 0x52 [0145.550] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0145.550] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\UBUPNOZC.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\ubupnozc.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0145.551] GetFileType (hFile=0x444) returned 0x1 [0145.551] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0145.551] GetFileType (hFile=0x444) returned 0x1 [0145.551] WriteFile (in: hFile=0x444, lpBuffer=0x229bb30*, nNumberOfBytesToWrite=0x60, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x229bb30*, lpNumberOfBytesWritten=0x3be5b8*=0x60, lpOverlapped=0x0) returned 1 [0145.552] CloseHandle (hObject=0x444) returned 1 [0145.552] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\UBUPNOZC.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\UBUPNOZC.txt", lpFilePart=0x0) returned 0x52 [0145.552] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\UBUPNOZC.txt.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\UBUPNOZC.txt.xuy", lpFilePart=0x0) returned 0x56 [0145.552] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0145.552] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\UBUPNOZC.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\ubupnozc.txt"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1269be9d, ftCreationTime.dwHighDateTime=0x1d2fc23, ftLastAccessTime.dwLowDateTime=0x1269be9d, ftLastAccessTime.dwHighDateTime=0x1d2fc23, ftLastWriteTime.dwLowDateTime=0x429b26e3, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x60)) returned 1 [0145.552] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0145.552] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\UBUPNOZC.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\ubupnozc.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\UBUPNOZC.txt.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\ubupnozc.txt.xuy")) returned 1 [0145.554] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\UBXQG39X.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\UBXQG39X.txt", lpFilePart=0x0) returned 0x52 [0145.554] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0145.554] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\UBXQG39X.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\ubxqg39x.txt"), fInfoLevelId=0x0, lpFileInformation=0x229cde0 | out: lpFileInformation=0x229cde0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x96acd871, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x96acd871, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x96acd871, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0x69)) returned 1 [0145.554] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0145.554] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\UBXQG39X.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\UBXQG39X.txt", lpFilePart=0x0) returned 0x52 [0145.554] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0145.554] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\UBXQG39X.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\ubxqg39x.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0145.554] GetFileType (hFile=0x444) returned 0x1 [0145.554] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0145.554] GetFileType (hFile=0x444) returned 0x1 [0145.554] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x69 [0145.554] ReadFile (in: hFile=0x444, lpBuffer=0x229d128, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x229d128*, lpNumberOfBytesRead=0x3be6a8*=0x69, lpOverlapped=0x0) returned 1 [0145.556] CloseHandle (hObject=0x444) returned 1 [0145.566] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\UBXQG39X.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\UBXQG39X.txt", lpFilePart=0x0) returned 0x52 [0145.566] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0145.566] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\UBXQG39X.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\ubxqg39x.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0145.568] GetFileType (hFile=0x444) returned 0x1 [0145.568] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0145.568] GetFileType (hFile=0x444) returned 0x1 [0145.568] WriteFile (in: hFile=0x444, lpBuffer=0x2314310*, nNumberOfBytesToWrite=0x70, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x2314310*, lpNumberOfBytesWritten=0x3be5b8*=0x70, lpOverlapped=0x0) returned 1 [0145.569] CloseHandle (hObject=0x444) returned 1 [0145.569] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\UBXQG39X.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\UBXQG39X.txt", lpFilePart=0x0) returned 0x52 [0145.569] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\UBXQG39X.txt.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\UBXQG39X.txt.xuy", lpFilePart=0x0) returned 0x56 [0145.569] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0145.569] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\UBXQG39X.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\ubxqg39x.txt"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x96acd871, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x96acd871, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x429d89a1, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x70)) returned 1 [0145.569] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0145.569] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\UBXQG39X.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\ubxqg39x.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\UBXQG39X.txt.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\ubxqg39x.txt.xuy")) returned 1 [0145.570] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\UGL14QS0.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\UGL14QS0.txt", lpFilePart=0x0) returned 0x52 [0145.570] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0145.570] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\UGL14QS0.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\ugl14qs0.txt"), fInfoLevelId=0x0, lpFileInformation=0x23155c0 | out: lpFileInformation=0x23155c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x923bfa74, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x923bfa74, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x923bfa74, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0x82)) returned 1 [0145.571] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0145.571] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\UGL14QS0.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\UGL14QS0.txt", lpFilePart=0x0) returned 0x52 [0145.571] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0145.572] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\UGL14QS0.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\ugl14qs0.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0145.572] GetFileType (hFile=0x444) returned 0x1 [0145.572] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0145.572] GetFileType (hFile=0x444) returned 0x1 [0145.572] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x82 [0145.572] ReadFile (in: hFile=0x444, lpBuffer=0x2315920, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x2315920*, lpNumberOfBytesRead=0x3be6a8*=0x82, lpOverlapped=0x0) returned 1 [0145.573] CloseHandle (hObject=0x444) returned 1 [0145.617] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\UGL14QS0.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\UGL14QS0.txt", lpFilePart=0x0) returned 0x52 [0145.617] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0145.617] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\UGL14QS0.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\ugl14qs0.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0145.619] GetFileType (hFile=0x444) returned 0x1 [0145.619] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0145.619] GetFileType (hFile=0x444) returned 0x1 [0145.619] WriteFile (in: hFile=0x444, lpBuffer=0x218cb40*, nNumberOfBytesToWrite=0x90, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x218cb40*, lpNumberOfBytesWritten=0x3be5b8*=0x90, lpOverlapped=0x0) returned 1 [0145.620] CloseHandle (hObject=0x444) returned 1 [0145.620] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\UGL14QS0.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\UGL14QS0.txt", lpFilePart=0x0) returned 0x52 [0145.620] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\UGL14QS0.txt.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\UGL14QS0.txt.xuy", lpFilePart=0x0) returned 0x56 [0145.620] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0145.620] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\UGL14QS0.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\ugl14qs0.txt"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x923bfa74, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x923bfa74, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x42a4afad, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x90)) returned 1 [0145.620] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0145.620] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\UGL14QS0.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\ugl14qs0.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\UGL14QS0.txt.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\ugl14qs0.txt.xuy")) returned 1 [0145.621] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\UUEVXDWP.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\UUEVXDWP.txt", lpFilePart=0x0) returned 0x52 [0145.621] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0145.621] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\UUEVXDWP.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\uuevxdwp.txt"), fInfoLevelId=0x0, lpFileInformation=0x218ddf0 | out: lpFileInformation=0x218ddf0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9c51e760, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x9c51e760, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x9c51e760, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0x22b)) returned 1 [0145.621] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0145.621] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\UUEVXDWP.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\UUEVXDWP.txt", lpFilePart=0x0) returned 0x52 [0145.621] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0145.621] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\UUEVXDWP.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\uuevxdwp.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0145.621] GetFileType (hFile=0x444) returned 0x1 [0145.621] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0145.621] GetFileType (hFile=0x444) returned 0x1 [0145.622] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x22b [0145.622] ReadFile (in: hFile=0x444, lpBuffer=0x218e2f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x218e2f8*, lpNumberOfBytesRead=0x3be6a8*=0x22b, lpOverlapped=0x0) returned 1 [0145.622] CloseHandle (hObject=0x444) returned 1 [0145.633] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\UUEVXDWP.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\UUEVXDWP.txt", lpFilePart=0x0) returned 0x52 [0145.633] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0145.633] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\UUEVXDWP.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\uuevxdwp.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0145.635] GetFileType (hFile=0x444) returned 0x1 [0145.635] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0145.635] GetFileType (hFile=0x444) returned 0x1 [0145.635] WriteFile (in: hFile=0x444, lpBuffer=0x2205dd8*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x2205dd8*, lpNumberOfBytesWritten=0x3be5b8*=0x230, lpOverlapped=0x0) returned 1 [0145.636] CloseHandle (hObject=0x444) returned 1 [0145.636] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\UUEVXDWP.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\UUEVXDWP.txt", lpFilePart=0x0) returned 0x52 [0145.636] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\UUEVXDWP.txt.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\UUEVXDWP.txt.xuy", lpFilePart=0x0) returned 0x56 [0145.636] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0145.636] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\UUEVXDWP.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\uuevxdwp.txt"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9c51e760, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x9c51e760, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x42a7132a, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x230)) returned 1 [0145.636] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0145.636] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\UUEVXDWP.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\uuevxdwp.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\UUEVXDWP.txt.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\uuevxdwp.txt.xuy")) returned 1 [0145.637] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\V7NNCJHO.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\V7NNCJHO.txt", lpFilePart=0x0) returned 0x52 [0145.637] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0145.637] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\V7NNCJHO.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\v7nncjho.txt"), fInfoLevelId=0x0, lpFileInformation=0x2207088 | out: lpFileInformation=0x2207088*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9e86c612, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x9e86c612, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x9e86c612, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0x90)) returned 1 [0145.637] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0145.637] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\V7NNCJHO.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\V7NNCJHO.txt", lpFilePart=0x0) returned 0x52 [0145.637] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0145.637] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\V7NNCJHO.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\v7nncjho.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0145.638] GetFileType (hFile=0x444) returned 0x1 [0145.638] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0145.638] GetFileType (hFile=0x444) returned 0x1 [0145.638] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x90 [0145.638] ReadFile (in: hFile=0x444, lpBuffer=0x22073f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x22073f0*, lpNumberOfBytesRead=0x3be6a8*=0x90, lpOverlapped=0x0) returned 1 [0145.639] CloseHandle (hObject=0x444) returned 1 [0145.650] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\V7NNCJHO.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\V7NNCJHO.txt", lpFilePart=0x0) returned 0x52 [0145.650] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0145.650] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\V7NNCJHO.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\v7nncjho.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0145.652] GetFileType (hFile=0x444) returned 0x1 [0145.652] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0145.652] GetFileType (hFile=0x444) returned 0x1 [0145.652] WriteFile (in: hFile=0x444, lpBuffer=0x227e640*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x227e640*, lpNumberOfBytesWritten=0x3be5b8*=0xa0, lpOverlapped=0x0) returned 1 [0145.653] CloseHandle (hObject=0x444) returned 1 [0145.653] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\V7NNCJHO.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\V7NNCJHO.txt", lpFilePart=0x0) returned 0x52 [0145.653] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\V7NNCJHO.txt.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\V7NNCJHO.txt.xuy", lpFilePart=0x0) returned 0x56 [0145.653] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0145.653] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\V7NNCJHO.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\v7nncjho.txt"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9e86c612, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x9e86c612, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x42a97859, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xa0)) returned 1 [0145.653] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0145.653] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\V7NNCJHO.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\v7nncjho.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\V7NNCJHO.txt.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\v7nncjho.txt.xuy")) returned 1 [0145.654] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\VD3GM2DA.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\VD3GM2DA.txt", lpFilePart=0x0) returned 0x52 [0145.654] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0145.654] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\VD3GM2DA.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\vd3gm2da.txt"), fInfoLevelId=0x0, lpFileInformation=0x227f8f0 | out: lpFileInformation=0x227f8f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa517ba83, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0xa517ba83, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0xa517ba83, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0xae)) returned 1 [0145.655] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0145.655] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\VD3GM2DA.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\VD3GM2DA.txt", lpFilePart=0x0) returned 0x52 [0145.655] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0145.655] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\VD3GM2DA.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\vd3gm2da.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0145.656] GetFileType (hFile=0x444) returned 0x1 [0145.656] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0145.656] GetFileType (hFile=0x444) returned 0x1 [0145.656] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0xae [0145.656] ReadFile (in: hFile=0x444, lpBuffer=0x227fc78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x227fc78*, lpNumberOfBytesRead=0x3be6a8*=0xae, lpOverlapped=0x0) returned 1 [0145.657] CloseHandle (hObject=0x444) returned 1 [0145.667] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\VD3GM2DA.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\VD3GM2DA.txt", lpFilePart=0x0) returned 0x52 [0145.667] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0145.667] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\VD3GM2DA.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\vd3gm2da.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0145.669] GetFileType (hFile=0x444) returned 0x1 [0145.669] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0145.669] GetFileType (hFile=0x444) returned 0x1 [0145.669] WriteFile (in: hFile=0x444, lpBuffer=0x22f6ee0*, nNumberOfBytesToWrite=0xb0, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x22f6ee0*, lpNumberOfBytesWritten=0x3be5b8*=0xb0, lpOverlapped=0x0) returned 1 [0145.669] CloseHandle (hObject=0x444) returned 1 [0145.669] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\VD3GM2DA.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\VD3GM2DA.txt", lpFilePart=0x0) returned 0x52 [0145.670] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\VD3GM2DA.txt.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\VD3GM2DA.txt.xuy", lpFilePart=0x0) returned 0x56 [0145.670] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0145.670] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\VD3GM2DA.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\vd3gm2da.txt"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa517ba83, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0xa517ba83, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x42abd69e, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xb0)) returned 1 [0145.670] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0145.670] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\VD3GM2DA.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\vd3gm2da.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\VD3GM2DA.txt.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\vd3gm2da.txt.xuy")) returned 1 [0145.671] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\WPEXKTDV.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\WPEXKTDV.txt", lpFilePart=0x0) returned 0x52 [0145.671] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0145.671] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\WPEXKTDV.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\wpexktdv.txt"), fInfoLevelId=0x0, lpFileInformation=0x22f8190 | out: lpFileInformation=0x22f8190*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xae16de54, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0xae16de54, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0xae16de54, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0x17c)) returned 1 [0145.671] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0145.671] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\WPEXKTDV.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\WPEXKTDV.txt", lpFilePart=0x0) returned 0x52 [0145.671] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0145.671] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\WPEXKTDV.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\wpexktdv.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0145.671] GetFileType (hFile=0x444) returned 0x1 [0145.671] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0145.671] GetFileType (hFile=0x444) returned 0x1 [0145.671] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x17c [0145.672] ReadFile (in: hFile=0x444, lpBuffer=0x22f85e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x22f85e8*, lpNumberOfBytesRead=0x3be6a8*=0x17c, lpOverlapped=0x0) returned 1 [0145.673] CloseHandle (hObject=0x444) returned 1 [0145.720] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\WPEXKTDV.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\WPEXKTDV.txt", lpFilePart=0x0) returned 0x52 [0145.720] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0145.720] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\WPEXKTDV.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\wpexktdv.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0145.722] GetFileType (hFile=0x444) returned 0x1 [0145.722] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0145.722] GetFileType (hFile=0x444) returned 0x1 [0145.722] WriteFile (in: hFile=0x444, lpBuffer=0x216fe70*, nNumberOfBytesToWrite=0x180, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x216fe70*, lpNumberOfBytesWritten=0x3be5b8*=0x180, lpOverlapped=0x0) returned 1 [0145.723] CloseHandle (hObject=0x444) returned 1 [0145.723] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\WPEXKTDV.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\WPEXKTDV.txt", lpFilePart=0x0) returned 0x52 [0145.723] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\WPEXKTDV.txt.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\WPEXKTDV.txt.xuy", lpFilePart=0x0) returned 0x56 [0145.723] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0145.723] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\WPEXKTDV.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\wpexktdv.txt"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xae16de54, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0xae16de54, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x42b56072, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x180)) returned 1 [0145.723] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0145.724] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\WPEXKTDV.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\wpexktdv.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\WPEXKTDV.txt.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\wpexktdv.txt.xuy")) returned 1 [0145.725] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\WUT8M1Q8.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\WUT8M1Q8.txt", lpFilePart=0x0) returned 0x52 [0145.725] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0145.725] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\WUT8M1Q8.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\wut8m1q8.txt"), fInfoLevelId=0x0, lpFileInformation=0x2171120 | out: lpFileInformation=0x2171120*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xae5278d7, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0xae5278d7, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0xae5278d7, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0x16a)) returned 1 [0145.725] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0145.725] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\WUT8M1Q8.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\WUT8M1Q8.txt", lpFilePart=0x0) returned 0x52 [0145.725] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0145.725] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\WUT8M1Q8.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\wut8m1q8.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0145.725] GetFileType (hFile=0x444) returned 0x1 [0145.725] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0145.725] GetFileType (hFile=0x444) returned 0x1 [0145.725] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x16a [0145.725] ReadFile (in: hFile=0x444, lpBuffer=0x2171568, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x2171568*, lpNumberOfBytesRead=0x3be6a8*=0x16a, lpOverlapped=0x0) returned 1 [0145.726] CloseHandle (hObject=0x444) returned 1 [0145.737] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\WUT8M1Q8.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\WUT8M1Q8.txt", lpFilePart=0x0) returned 0x52 [0145.737] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0145.737] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\WUT8M1Q8.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\wut8m1q8.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0145.738] GetFileType (hFile=0x444) returned 0x1 [0145.738] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0145.738] GetFileType (hFile=0x444) returned 0x1 [0145.738] WriteFile (in: hFile=0x444, lpBuffer=0x21e8c88*, nNumberOfBytesToWrite=0x170, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x21e8c88*, lpNumberOfBytesWritten=0x3be5b8*=0x170, lpOverlapped=0x0) returned 1 [0145.739] CloseHandle (hObject=0x444) returned 1 [0145.739] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\WUT8M1Q8.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\WUT8M1Q8.txt", lpFilePart=0x0) returned 0x52 [0145.739] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\WUT8M1Q8.txt.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\WUT8M1Q8.txt.xuy", lpFilePart=0x0) returned 0x56 [0145.739] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0145.739] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\WUT8M1Q8.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\wut8m1q8.txt"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xae5278d7, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0xae5278d7, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x42b7c392, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x170)) returned 1 [0145.739] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0145.740] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\WUT8M1Q8.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\wut8m1q8.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\WUT8M1Q8.txt.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\wut8m1q8.txt.xuy")) returned 1 [0145.741] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\WX75TEOR.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\WX75TEOR.txt", lpFilePart=0x0) returned 0x52 [0145.741] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0145.741] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\WX75TEOR.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\wx75teor.txt"), fInfoLevelId=0x0, lpFileInformation=0x21e9f38 | out: lpFileInformation=0x21e9f38*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xadd8e0c8, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0xadd8e0c8, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0xadd8e0c8, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0x11a)) returned 1 [0145.741] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0145.741] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\WX75TEOR.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\WX75TEOR.txt", lpFilePart=0x0) returned 0x52 [0145.741] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0145.741] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\WX75TEOR.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\wx75teor.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0145.741] GetFileType (hFile=0x444) returned 0x1 [0145.741] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0145.741] GetFileType (hFile=0x444) returned 0x1 [0145.741] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x11a [0145.741] ReadFile (in: hFile=0x444, lpBuffer=0x21ea330, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x21ea330*, lpNumberOfBytesRead=0x3be6a8*=0x11a, lpOverlapped=0x0) returned 1 [0145.742] CloseHandle (hObject=0x444) returned 1 [0145.752] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\WX75TEOR.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\WX75TEOR.txt", lpFilePart=0x0) returned 0x52 [0145.752] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0145.753] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\WX75TEOR.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\wx75teor.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0145.754] GetFileType (hFile=0x444) returned 0x1 [0145.754] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0145.754] GetFileType (hFile=0x444) returned 0x1 [0145.754] WriteFile (in: hFile=0x444, lpBuffer=0x22618c0*, nNumberOfBytesToWrite=0x120, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x22618c0*, lpNumberOfBytesWritten=0x3be5b8*=0x120, lpOverlapped=0x0) returned 1 [0145.755] CloseHandle (hObject=0x444) returned 1 [0145.755] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\WX75TEOR.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\WX75TEOR.txt", lpFilePart=0x0) returned 0x52 [0145.755] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\WX75TEOR.txt.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\WX75TEOR.txt.xuy", lpFilePart=0x0) returned 0x56 [0145.755] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0145.755] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\WX75TEOR.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\wx75teor.txt"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xadd8e0c8, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0xadd8e0c8, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x42ba2643, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x120)) returned 1 [0145.755] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0145.755] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\WX75TEOR.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\wx75teor.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\WX75TEOR.txt.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\wx75teor.txt.xuy")) returned 1 [0145.756] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\XRS5D0N2.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\XRS5D0N2.txt", lpFilePart=0x0) returned 0x52 [0145.757] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0145.757] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\XRS5D0N2.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\xrs5d0n2.txt"), fInfoLevelId=0x0, lpFileInformation=0x2262b70 | out: lpFileInformation=0x2262b70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa2ac009b, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0xa2ac009b, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0xa2ae62fa, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0x113)) returned 1 [0145.757] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0145.757] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\XRS5D0N2.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\XRS5D0N2.txt", lpFilePart=0x0) returned 0x52 [0145.757] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0145.757] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\XRS5D0N2.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\xrs5d0n2.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0145.757] GetFileType (hFile=0x444) returned 0x1 [0145.757] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0145.757] GetFileType (hFile=0x444) returned 0x1 [0145.757] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x113 [0145.757] ReadFile (in: hFile=0x444, lpBuffer=0x2262f60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x2262f60*, lpNumberOfBytesRead=0x3be6a8*=0x113, lpOverlapped=0x0) returned 1 [0145.759] CloseHandle (hObject=0x444) returned 1 [0145.769] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\XRS5D0N2.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\XRS5D0N2.txt", lpFilePart=0x0) returned 0x52 [0145.769] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0145.769] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\XRS5D0N2.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\xrs5d0n2.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0145.771] GetFileType (hFile=0x444) returned 0x1 [0145.771] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0145.771] GetFileType (hFile=0x444) returned 0x1 [0145.771] WriteFile (in: hFile=0x444, lpBuffer=0x22da4f8*, nNumberOfBytesToWrite=0x120, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x22da4f8*, lpNumberOfBytesWritten=0x3be5b8*=0x120, lpOverlapped=0x0) returned 1 [0145.771] CloseHandle (hObject=0x444) returned 1 [0145.772] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\XRS5D0N2.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\XRS5D0N2.txt", lpFilePart=0x0) returned 0x52 [0145.772] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\XRS5D0N2.txt.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\XRS5D0N2.txt.xuy", lpFilePart=0x0) returned 0x56 [0145.772] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0145.772] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\XRS5D0N2.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\xrs5d0n2.txt"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa2ac009b, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0xa2ac009b, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x42bc8874, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x120)) returned 1 [0145.772] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0145.772] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\XRS5D0N2.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\xrs5d0n2.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\XRS5D0N2.txt.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\xrs5d0n2.txt.xuy")) returned 1 [0145.773] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\XUAUK5R0.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\XUAUK5R0.txt", lpFilePart=0x0) returned 0x52 [0145.773] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0145.773] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\XUAUK5R0.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\xuauk5r0.txt"), fInfoLevelId=0x0, lpFileInformation=0x22db7a8 | out: lpFileInformation=0x22db7a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9d8a3bf6, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x9d8a3bf6, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x9d8a3bf6, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0x5e)) returned 1 [0145.774] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0145.774] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\XUAUK5R0.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\XUAUK5R0.txt", lpFilePart=0x0) returned 0x52 [0145.774] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0145.774] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\XUAUK5R0.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\xuauk5r0.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0145.774] GetFileType (hFile=0x444) returned 0x1 [0145.774] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0145.774] GetFileType (hFile=0x444) returned 0x1 [0145.774] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x5e [0145.774] ReadFile (in: hFile=0x444, lpBuffer=0x22dbae0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x22dbae0*, lpNumberOfBytesRead=0x3be6a8*=0x5e, lpOverlapped=0x0) returned 1 [0145.775] CloseHandle (hObject=0x444) returned 1 [0145.786] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\XUAUK5R0.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\XUAUK5R0.txt", lpFilePart=0x0) returned 0x52 [0145.786] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0145.786] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\XUAUK5R0.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\xuauk5r0.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0145.787] GetFileType (hFile=0x444) returned 0x1 [0145.787] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0145.787] GetFileType (hFile=0x444) returned 0x1 [0145.787] WriteFile (in: hFile=0x444, lpBuffer=0x2352ca8*, nNumberOfBytesToWrite=0x60, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x2352ca8*, lpNumberOfBytesWritten=0x3be5b8*=0x60, lpOverlapped=0x0) returned 1 [0145.788] CloseHandle (hObject=0x444) returned 1 [0145.788] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\XUAUK5R0.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\XUAUK5R0.txt", lpFilePart=0x0) returned 0x52 [0145.788] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\XUAUK5R0.txt.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\XUAUK5R0.txt.xuy", lpFilePart=0x0) returned 0x56 [0145.788] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0145.788] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\XUAUK5R0.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\xuauk5r0.txt"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9d8a3bf6, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x9d8a3bf6, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x42beed64, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x60)) returned 1 [0145.788] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0145.789] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\XUAUK5R0.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\xuauk5r0.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\XUAUK5R0.txt.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\xuauk5r0.txt.xuy")) returned 1 [0145.790] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\Y1I415YS.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\Y1I415YS.txt", lpFilePart=0x0) returned 0x52 [0145.790] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0145.790] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\Y1I415YS.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\y1i415ys.txt"), fInfoLevelId=0x0, lpFileInformation=0x2353f58 | out: lpFileInformation=0x2353f58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x95a04443, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x95a04443, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x95a04443, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0x5d)) returned 1 [0145.790] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0145.790] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\Y1I415YS.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\Y1I415YS.txt", lpFilePart=0x0) returned 0x52 [0145.790] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0145.790] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\Y1I415YS.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\y1i415ys.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0145.790] GetFileType (hFile=0x444) returned 0x1 [0145.790] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0145.790] GetFileType (hFile=0x444) returned 0x1 [0145.790] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x5d [0145.790] ReadFile (in: hFile=0x444, lpBuffer=0x2354290, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x2354290*, lpNumberOfBytesRead=0x3be6a8*=0x5d, lpOverlapped=0x0) returned 1 [0145.791] CloseHandle (hObject=0x444) returned 1 [0145.831] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\Y1I415YS.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\Y1I415YS.txt", lpFilePart=0x0) returned 0x52 [0145.831] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0145.831] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\Y1I415YS.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\y1i415ys.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0145.833] GetFileType (hFile=0x444) returned 0x1 [0145.833] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0145.833] GetFileType (hFile=0x444) returned 0x1 [0145.833] WriteFile (in: hFile=0x444, lpBuffer=0x21cb330*, nNumberOfBytesToWrite=0x60, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x21cb330*, lpNumberOfBytesWritten=0x3be5b8*=0x60, lpOverlapped=0x0) returned 1 [0145.833] CloseHandle (hObject=0x444) returned 1 [0145.834] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\Y1I415YS.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\Y1I415YS.txt", lpFilePart=0x0) returned 0x52 [0145.834] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\Y1I415YS.txt.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\Y1I415YS.txt.xuy", lpFilePart=0x0) returned 0x56 [0145.834] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0145.834] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\Y1I415YS.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\y1i415ys.txt"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x95a04443, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x95a04443, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x42c611dc, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x60)) returned 1 [0145.834] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0145.834] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\Y1I415YS.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\y1i415ys.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\Y1I415YS.txt.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\y1i415ys.txt.xuy")) returned 1 [0145.835] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\Y3XU5OKR.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\Y3XU5OKR.txt", lpFilePart=0x0) returned 0x52 [0145.835] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0145.835] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\Y3XU5OKR.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\y3xu5okr.txt"), fInfoLevelId=0x0, lpFileInformation=0x21cc5e0 | out: lpFileInformation=0x21cc5e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x96318ceb, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x96318ceb, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x96318ceb, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0x5a)) returned 1 [0145.835] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0145.835] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\Y3XU5OKR.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\Y3XU5OKR.txt", lpFilePart=0x0) returned 0x52 [0145.835] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0145.835] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\Y3XU5OKR.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\y3xu5okr.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0145.835] GetFileType (hFile=0x444) returned 0x1 [0145.836] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0145.836] GetFileType (hFile=0x444) returned 0x1 [0145.836] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x5a [0145.836] ReadFile (in: hFile=0x444, lpBuffer=0x21cc918, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x21cc918*, lpNumberOfBytesRead=0x3be6a8*=0x5a, lpOverlapped=0x0) returned 1 [0145.837] CloseHandle (hObject=0x444) returned 1 [0145.848] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\Y3XU5OKR.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\Y3XU5OKR.txt", lpFilePart=0x0) returned 0x52 [0145.848] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0145.848] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\Y3XU5OKR.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\y3xu5okr.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0145.849] GetFileType (hFile=0x444) returned 0x1 [0145.849] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0145.849] GetFileType (hFile=0x444) returned 0x1 [0145.849] WriteFile (in: hFile=0x444, lpBuffer=0x2243ae0*, nNumberOfBytesToWrite=0x60, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x2243ae0*, lpNumberOfBytesWritten=0x3be5b8*=0x60, lpOverlapped=0x0) returned 1 [0145.850] CloseHandle (hObject=0x444) returned 1 [0145.851] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\Y3XU5OKR.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\Y3XU5OKR.txt", lpFilePart=0x0) returned 0x52 [0145.851] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\Y3XU5OKR.txt.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\Y3XU5OKR.txt.xuy", lpFilePart=0x0) returned 0x56 [0145.851] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0145.851] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\Y3XU5OKR.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\y3xu5okr.txt"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x96318ceb, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x96318ceb, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x42c8776e, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x60)) returned 1 [0145.851] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0145.851] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\Y3XU5OKR.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\y3xu5okr.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\Y3XU5OKR.txt.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\y3xu5okr.txt.xuy")) returned 1 [0145.852] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0145.852] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\PrivacIE", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\PrivacIE", lpFilePart=0x0) returned 0x4a [0145.852] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\PrivacIE\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\PrivacIE\\", lpFilePart=0x0) returned 0x4b [0145.852] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\PrivacIE\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7370 [0145.852] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0145.852] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0145.853] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0145.853] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0145.853] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0145.853] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0145.853] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0145.853] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\PrivacIE", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\PrivacIE", lpFilePart=0x0) returned 0x4a [0145.853] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\PrivacIE\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\PrivacIE\\", lpFilePart=0x0) returned 0x4b [0145.853] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\PrivacIE\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d78b0 [0145.853] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0145.853] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0145.853] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0145.853] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0145.854] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0145.854] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0145.854] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0145.854] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\PrivacIE\\Low", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\PrivacIE\\Low", lpFilePart=0x0) returned 0x4e [0145.854] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\PrivacIE\\Low\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\PrivacIE\\Low\\", lpFilePart=0x0) returned 0x4f [0145.854] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\PrivacIE\\Low\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d81b0 [0145.854] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0145.854] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0145.854] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0145.854] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0145.854] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0145.854] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0145.854] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\PrivacIE\\Low", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\PrivacIE\\Low", lpFilePart=0x0) returned 0x4e [0145.854] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\PrivacIE\\Low\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\PrivacIE\\Low\\", lpFilePart=0x0) returned 0x4f [0145.854] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\PrivacIE\\Low\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d78b0 [0145.855] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0145.855] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0145.855] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0145.855] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0145.855] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0145.855] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0145.855] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications", lpFilePart=0x0) returned 0x43 [0145.855] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\", lpFilePart=0x0) returned 0x44 [0145.855] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7550 [0145.855] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0145.856] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0145.856] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0145.856] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0145.856] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0145.856] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0145.856] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0145.856] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0145.856] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0145.856] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications", lpFilePart=0x0) returned 0x43 [0145.856] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\", lpFilePart=0x0) returned 0x44 [0145.856] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7f10 [0145.856] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0145.856] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0145.857] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0145.857] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0145.857] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0145.857] FindClose (in: hFindFile=0x5d7f10 | out: hFindFile=0x5d7f10) returned 1 [0145.857] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0145.857] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0145.857] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\appdb.dat", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\appdb.dat", lpFilePart=0x0) returned 0x4d [0145.857] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0145.857] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\appdb.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\appdb.dat"), fInfoLevelId=0x0, lpFileInformation=0x224af60 | out: lpFileInformation=0x224af60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc56aa9da, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xc56aa9da, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xc56aa9da, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x2381020)) returned 1 [0145.857] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0145.857] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\appdb.dat", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\appdb.dat", lpFilePart=0x0) returned 0x4d [0145.857] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0145.857] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\appdb.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\appdb.dat"), fInfoLevelId=0x0, lpFileInformation=0x224b0b0 | out: lpFileInformation=0x224b0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc56aa9da, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xc56aa9da, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xc56aa9da, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x2381020)) returned 1 [0145.857] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0145.858] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\WPNPRMRY.tmp", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\WPNPRMRY.tmp", lpFilePart=0x0) returned 0x50 [0145.858] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0145.858] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\WPNPRMRY.tmp" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnprmry.tmp"), fInfoLevelId=0x0, lpFileInformation=0x224b228 | out: lpFileInformation=0x224b228*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0xc56aa9da, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xc56aa9da, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xadb4da26, ftLastWriteTime.dwHighDateTime=0x1d46683, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0145.858] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0145.858] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\WPNPRMRY.tmp", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\WPNPRMRY.tmp", lpFilePart=0x0) returned 0x50 [0145.858] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0145.858] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\WPNPRMRY.tmp" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnprmry.tmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0145.859] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb0e0) returned 1 [0145.859] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\WPNPRMRY.tmp", nBufferLength=0x105, lpBuffer=0x3bbd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\WPNPRMRY.tmp", lpFilePart=0x0) returned 0x50 [0145.859] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc200) returned 1 [0145.859] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\WPNPRMRY.tmp" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnprmry.tmp"), fInfoLevelId=0x0, lpFileInformation=0x3bc2e0 | out: lpFileInformation=0x3bc2e0*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0xc56aa9da, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xc56aa9da, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xadb4da26, ftLastWriteTime.dwHighDateTime=0x1d46683, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0145.860] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1c0) returned 1 [0145.860] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\WPNPRMRY.tmp", nBufferLength=0x105, lpBuffer=0x3bbd80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\WPNPRMRY.tmp", lpFilePart=0x0) returned 0x50 [0145.860] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc200) returned 1 [0145.860] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\WPNPRMRY.tmp" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnprmry.tmp"), fInfoLevelId=0x0, lpFileInformation=0x224bdb8 | out: lpFileInformation=0x224bdb8*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0xc56aa9da, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xc56aa9da, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xadb4da26, ftLastWriteTime.dwHighDateTime=0x1d46683, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0145.860] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1c0) returned 1 [0145.860] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\WPNPRMRY.tmp", nBufferLength=0x105, lpBuffer=0x3bbbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\WPNPRMRY.tmp", lpFilePart=0x0) returned 0x50 [0145.860] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0c0) returned 1 [0145.860] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\WPNPRMRY.tmp" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnprmry.tmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0145.861] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8b50) returned 1 [0145.862] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0145.862] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm", lpFilePart=0x0) returned 0x4a [0145.862] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\", lpFilePart=0x0) returned 0x4b [0145.862] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d75b0 [0145.863] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0145.863] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0145.863] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0145.863] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0145.863] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0145.863] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0145.863] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0145.864] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0145.864] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0145.864] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0145.864] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0145.864] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0145.864] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0145.864] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0145.864] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0145.864] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0145.864] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0145.865] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0145.865] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0145.865] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0145.865] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0145.865] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0145.865] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0145.865] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0145.865] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0145.865] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0145.865] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0145.865] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0145.866] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0145.866] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0145.866] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0145.866] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0145.866] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0145.866] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0145.866] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0145.866] FindClose (in: hFindFile=0x5d75b0 | out: hFindFile=0x5d75b0) returned 1 [0145.867] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0145.867] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0145.867] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0145.867] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm", lpFilePart=0x0) returned 0x4a [0145.867] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\", lpFilePart=0x0) returned 0x4b [0145.867] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7eb0 [0145.868] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0145.868] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0145.868] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0145.868] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0145.868] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0145.868] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0145.869] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0145.869] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0145.869] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0145.869] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0145.869] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0145.869] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0145.869] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0145.869] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0145.869] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0145.870] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0145.870] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0145.870] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0145.870] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0145.870] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0145.870] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0145.870] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0145.870] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0145.871] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0145.871] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0145.871] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0145.871] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0145.871] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0145.871] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0145.871] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0145.871] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0145.872] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0145.872] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0145.872] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0145.872] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0145.872] FindClose (in: hFindFile=0x5d7eb0 | out: hFindFile=0x5d7eb0) returned 1 [0145.873] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0145.873] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0145.873] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\16f3f148.jpg", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\16f3f148.jpg", lpFilePart=0x0) returned 0x57 [0145.873] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0145.873] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\16f3f148.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\16f3f148.jpg"), fInfoLevelId=0x0, lpFileInformation=0x2257388 | out: lpFileInformation=0x2257388*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x10aa59c5, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x10aa59c5, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x10aa59c5, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0145.873] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0145.873] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\16f3f148.jpg", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\16f3f148.jpg", lpFilePart=0x0) returned 0x57 [0145.874] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0145.874] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\16f3f148.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\16f3f148.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0145.874] GetFileType (hFile=0x444) returned 0x1 [0145.874] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0145.874] GetFileType (hFile=0x444) returned 0x1 [0145.874] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x0 [0145.874] CloseHandle (hObject=0x444) returned 1 [0145.911] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\16f3f148.jpg", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\16f3f148.jpg", lpFilePart=0x0) returned 0x57 [0145.911] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0145.911] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\16f3f148.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\16f3f148.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0145.913] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb070) returned 1 [0145.913] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\16f3f148.jpg", nBufferLength=0x105, lpBuffer=0x3bbcf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\16f3f148.jpg", lpFilePart=0x0) returned 0x57 [0145.913] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0145.913] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\16f3f148.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\16f3f148.jpg"), fInfoLevelId=0x0, lpFileInformation=0x3bc270 | out: lpFileInformation=0x3bc270*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x10aa59c5, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x10aa59c5, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x10aa59c5, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0145.913] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc150) returned 1 [0145.913] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\16f3f148.jpg", nBufferLength=0x105, lpBuffer=0x3bbd10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\16f3f148.jpg", lpFilePart=0x0) returned 0x57 [0145.913] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0145.913] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\16f3f148.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\16f3f148.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22cdff0 | out: lpFileInformation=0x22cdff0*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x10aa59c5, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x10aa59c5, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x10aa59c5, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0145.913] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc150) returned 1 [0145.913] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\16f3f148.jpg", nBufferLength=0x105, lpBuffer=0x3bbb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\16f3f148.jpg", lpFilePart=0x0) returned 0x57 [0145.913] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc050) returned 1 [0145.913] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\16f3f148.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\16f3f148.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0145.914] GetFileType (hFile=0x444) returned 0x1 [0145.914] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbfc0) returned 1 [0145.914] GetFileType (hFile=0x444) returned 0x1 [0145.914] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc1e8 | out: lpFileSizeHigh=0x3bc1e8*=0x0) returned 0x0 [0145.914] CloseHandle (hObject=0x444) returned 1 [0145.951] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\16f3f148.jpg", nBufferLength=0x105, lpBuffer=0x3bbb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\16f3f148.jpg", lpFilePart=0x0) returned 0x57 [0145.951] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc050) returned 1 [0145.951] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\16f3f148.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\16f3f148.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0145.953] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8ae0) returned 1 [0145.954] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\179e8db5.jpg", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\179e8db5.jpg", lpFilePart=0x0) returned 0x57 [0145.954] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0145.954] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\179e8db5.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\179e8db5.jpg"), fInfoLevelId=0x0, lpFileInformation=0x2344bb8 | out: lpFileInformation=0x2344bb8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xa19ad400, ftCreationTime.dwHighDateTime=0x1d008f6, ftLastAccessTime.dwLowDateTime=0xa19ad400, ftLastAccessTime.dwHighDateTime=0x1d008f6, ftLastWriteTime.dwLowDateTime=0xa19ad400, ftLastWriteTime.dwHighDateTime=0x1d008f6, nFileSizeHigh=0x0, nFileSizeLow=0x10a9)) returned 1 [0145.954] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0145.954] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\179e8db5.jpg", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\179e8db5.jpg", lpFilePart=0x0) returned 0x57 [0145.954] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0145.954] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\179e8db5.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\179e8db5.jpg"), fInfoLevelId=0x0, lpFileInformation=0x2344d20 | out: lpFileInformation=0x2344d20*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xa19ad400, ftCreationTime.dwHighDateTime=0x1d008f6, ftLastAccessTime.dwLowDateTime=0xa19ad400, ftLastAccessTime.dwHighDateTime=0x1d008f6, ftLastWriteTime.dwLowDateTime=0xa19ad400, ftLastWriteTime.dwHighDateTime=0x1d008f6, nFileSizeHigh=0x0, nFileSizeLow=0x10a9)) returned 1 [0145.954] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0145.954] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\179e8db5.jpg", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\179e8db5.jpg", lpFilePart=0x0) returned 0x57 [0145.954] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0145.954] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\179e8db5.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\179e8db5.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0145.955] GetFileType (hFile=0x444) returned 0x1 [0145.955] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0145.955] GetFileType (hFile=0x444) returned 0x1 [0145.955] ReadFile (in: hFile=0x444, lpBuffer=0x2347120, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x2347120*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0145.997] CloseHandle (hObject=0x444) returned 1 [0145.998] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\179e8db5.jpg", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\179e8db5.jpg", lpFilePart=0x0) returned 0x57 [0145.998] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0145.998] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\179e8db5.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\179e8db5.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0145.998] GetFileType (hFile=0x444) returned 0x1 [0145.998] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0145.998] GetFileType (hFile=0x444) returned 0x1 [0145.998] WriteFile (in: hFile=0x444, lpBuffer=0x2156a88*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x2156a88*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0145.998] CloseHandle (hObject=0x444) returned 1 [0145.999] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\179e8db5.jpg", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\179e8db5.jpg", lpFilePart=0x0) returned 0x57 [0145.999] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\179e8db5.jpg.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\179e8db5.jpg.xuy", lpFilePart=0x0) returned 0x5b [0145.999] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0145.999] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\179e8db5.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\179e8db5.jpg"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa19ad400, ftCreationTime.dwHighDateTime=0x1d008f6, ftLastAccessTime.dwLowDateTime=0xa19ad400, ftLastAccessTime.dwHighDateTime=0x1d008f6, ftLastWriteTime.dwLowDateTime=0x42dde908, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0145.999] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0145.999] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\179e8db5.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\179e8db5.jpg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\179e8db5.jpg.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\179e8db5.jpg.xuy")) returned 1 [0146.000] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\1ad75057.jpg", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\1ad75057.jpg", lpFilePart=0x0) returned 0x57 [0146.000] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0146.000] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\1ad75057.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\1ad75057.jpg"), fInfoLevelId=0x0, lpFileInformation=0x21c29f0 | out: lpFileInformation=0x21c29f0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5aedf800, ftCreationTime.dwHighDateTime=0x1d39f63, ftLastAccessTime.dwLowDateTime=0x5aedf800, ftLastAccessTime.dwHighDateTime=0x1d39f63, ftLastWriteTime.dwLowDateTime=0x5aedf800, ftLastWriteTime.dwHighDateTime=0x1d39f63, nFileSizeHigh=0x0, nFileSizeLow=0x1bc5)) returned 1 [0146.000] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0146.000] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\1ad75057.jpg", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\1ad75057.jpg", lpFilePart=0x0) returned 0x57 [0146.000] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0146.000] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\1ad75057.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\1ad75057.jpg"), fInfoLevelId=0x0, lpFileInformation=0x21c2b58 | out: lpFileInformation=0x21c2b58*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5aedf800, ftCreationTime.dwHighDateTime=0x1d39f63, ftLastAccessTime.dwLowDateTime=0x5aedf800, ftLastAccessTime.dwHighDateTime=0x1d39f63, ftLastWriteTime.dwLowDateTime=0x5aedf800, ftLastWriteTime.dwHighDateTime=0x1d39f63, nFileSizeHigh=0x0, nFileSizeLow=0x1bc5)) returned 1 [0146.000] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0146.000] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\1ad75057.jpg", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\1ad75057.jpg", lpFilePart=0x0) returned 0x57 [0146.000] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0146.000] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\1ad75057.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\1ad75057.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0146.001] GetFileType (hFile=0x444) returned 0x1 [0146.001] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0146.001] GetFileType (hFile=0x444) returned 0x1 [0146.001] ReadFile (in: hFile=0x444, lpBuffer=0x21c4f58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x21c4f58*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0146.119] CloseHandle (hObject=0x444) returned 1 [0146.120] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\1ad75057.jpg", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\1ad75057.jpg", lpFilePart=0x0) returned 0x57 [0146.120] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0146.120] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\1ad75057.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\1ad75057.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0146.120] GetFileType (hFile=0x444) returned 0x1 [0146.120] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0146.120] GetFileType (hFile=0x444) returned 0x1 [0146.120] WriteFile (in: hFile=0x444, lpBuffer=0x21c2ca0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x21c2ca0*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0146.120] CloseHandle (hObject=0x444) returned 1 [0146.120] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\1ad75057.jpg", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\1ad75057.jpg", lpFilePart=0x0) returned 0x57 [0146.120] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\1ad75057.jpg.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\1ad75057.jpg.xuy", lpFilePart=0x0) returned 0x5b [0146.121] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0146.121] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\1ad75057.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\1ad75057.jpg"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5aedf800, ftCreationTime.dwHighDateTime=0x1d39f63, ftLastAccessTime.dwLowDateTime=0x5aedf800, ftLastAccessTime.dwHighDateTime=0x1d39f63, ftLastWriteTime.dwLowDateTime=0x42f0feee, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0146.121] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0146.121] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\1ad75057.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\1ad75057.jpg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\1ad75057.jpg.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\1ad75057.jpg.xuy")) returned 1 [0146.122] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\1ba49cb8.jpg", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\1ba49cb8.jpg", lpFilePart=0x0) returned 0x57 [0146.122] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0146.122] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\1ba49cb8.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\1ba49cb8.jpg"), fInfoLevelId=0x0, lpFileInformation=0x2241370 | out: lpFileInformation=0x2241370*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9fd11080, ftCreationTime.dwHighDateTime=0x1d008f6, ftLastAccessTime.dwLowDateTime=0x9fd11080, ftLastAccessTime.dwHighDateTime=0x1d008f6, ftLastWriteTime.dwLowDateTime=0x9fd11080, ftLastWriteTime.dwHighDateTime=0x1d008f6, nFileSizeHigh=0x0, nFileSizeLow=0x2045)) returned 1 [0146.122] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0146.122] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\1ba49cb8.jpg", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\1ba49cb8.jpg", lpFilePart=0x0) returned 0x57 [0146.122] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0146.122] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\1ba49cb8.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\1ba49cb8.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22414d8 | out: lpFileInformation=0x22414d8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9fd11080, ftCreationTime.dwHighDateTime=0x1d008f6, ftLastAccessTime.dwLowDateTime=0x9fd11080, ftLastAccessTime.dwHighDateTime=0x1d008f6, ftLastWriteTime.dwLowDateTime=0x9fd11080, ftLastWriteTime.dwHighDateTime=0x1d008f6, nFileSizeHigh=0x0, nFileSizeLow=0x2045)) returned 1 [0146.122] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0146.122] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\1ba49cb8.jpg", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\1ba49cb8.jpg", lpFilePart=0x0) returned 0x57 [0146.122] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0146.122] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\1ba49cb8.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\1ba49cb8.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0146.123] GetFileType (hFile=0x444) returned 0x1 [0146.123] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0146.123] GetFileType (hFile=0x444) returned 0x1 [0146.123] ReadFile (in: hFile=0x444, lpBuffer=0x22438d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x22438d8*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0146.145] CloseHandle (hObject=0x444) returned 1 [0146.146] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\1ba49cb8.jpg", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\1ba49cb8.jpg", lpFilePart=0x0) returned 0x57 [0146.146] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0146.146] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\1ba49cb8.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\1ba49cb8.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0146.146] GetFileType (hFile=0x444) returned 0x1 [0146.146] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0146.146] GetFileType (hFile=0x444) returned 0x1 [0146.146] WriteFile (in: hFile=0x444, lpBuffer=0x2241620*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x2241620*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0146.146] CloseHandle (hObject=0x444) returned 1 [0146.146] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\1ba49cb8.jpg", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\1ba49cb8.jpg", lpFilePart=0x0) returned 0x57 [0146.146] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\1ba49cb8.jpg.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\1ba49cb8.jpg.xuy", lpFilePart=0x0) returned 0x5b [0146.146] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0146.147] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\1ba49cb8.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\1ba49cb8.jpg"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9fd11080, ftCreationTime.dwHighDateTime=0x1d008f6, ftLastAccessTime.dwLowDateTime=0x9fd11080, ftLastAccessTime.dwHighDateTime=0x1d008f6, ftLastWriteTime.dwLowDateTime=0x42f5c086, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2045)) returned 1 [0146.147] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0146.147] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\1ba49cb8.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\1ba49cb8.jpg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\1ba49cb8.jpg.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\1ba49cb8.jpg.xuy")) returned 1 [0146.158] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\1f43fcc4.jpg", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\1f43fcc4.jpg", lpFilePart=0x0) returned 0x57 [0146.158] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0146.158] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\1f43fcc4.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\1f43fcc4.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22bfcf0 | out: lpFileInformation=0x22bfcf0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xec028d80, ftCreationTime.dwHighDateTime=0x1d3006a, ftLastAccessTime.dwLowDateTime=0xec028d80, ftLastAccessTime.dwHighDateTime=0x1d3006a, ftLastWriteTime.dwLowDateTime=0xec028d80, ftLastWriteTime.dwHighDateTime=0x1d3006a, nFileSizeHigh=0x0, nFileSizeLow=0x18ac)) returned 1 [0146.160] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0146.160] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\1f43fcc4.jpg", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\1f43fcc4.jpg", lpFilePart=0x0) returned 0x57 [0146.160] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0146.160] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\1f43fcc4.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\1f43fcc4.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22bfe58 | out: lpFileInformation=0x22bfe58*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xec028d80, ftCreationTime.dwHighDateTime=0x1d3006a, ftLastAccessTime.dwLowDateTime=0xec028d80, ftLastAccessTime.dwHighDateTime=0x1d3006a, ftLastWriteTime.dwLowDateTime=0xec028d80, ftLastWriteTime.dwHighDateTime=0x1d3006a, nFileSizeHigh=0x0, nFileSizeLow=0x18ac)) returned 1 [0146.160] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0146.160] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\1f43fcc4.jpg", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\1f43fcc4.jpg", lpFilePart=0x0) returned 0x57 [0146.160] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0146.160] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\1f43fcc4.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\1f43fcc4.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0146.161] GetFileType (hFile=0x444) returned 0x1 [0146.161] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0146.161] GetFileType (hFile=0x444) returned 0x1 [0146.161] ReadFile (in: hFile=0x444, lpBuffer=0x22c2258, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x22c2258*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0146.189] CloseHandle (hObject=0x444) returned 1 [0146.189] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\1f43fcc4.jpg", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\1f43fcc4.jpg", lpFilePart=0x0) returned 0x57 [0146.189] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0146.189] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\1f43fcc4.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\1f43fcc4.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0146.190] GetFileType (hFile=0x444) returned 0x1 [0146.190] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0146.190] GetFileType (hFile=0x444) returned 0x1 [0146.190] WriteFile (in: hFile=0x444, lpBuffer=0x22bffa0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x22bffa0*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0146.190] CloseHandle (hObject=0x444) returned 1 [0146.190] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\1f43fcc4.jpg", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\1f43fcc4.jpg", lpFilePart=0x0) returned 0x57 [0146.190] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\1f43fcc4.jpg.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\1f43fcc4.jpg.xuy", lpFilePart=0x0) returned 0x5b [0146.190] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0146.190] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\1f43fcc4.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\1f43fcc4.jpg"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec028d80, ftCreationTime.dwHighDateTime=0x1d3006a, ftLastAccessTime.dwLowDateTime=0xec028d80, ftLastAccessTime.dwHighDateTime=0x1d3006a, ftLastWriteTime.dwLowDateTime=0x42fce865, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0146.190] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0146.190] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\1f43fcc4.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\1f43fcc4.jpg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\1f43fcc4.jpg.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\1f43fcc4.jpg.xuy")) returned 1 [0146.191] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\23a8b33e.jpg", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\23a8b33e.jpg", lpFilePart=0x0) returned 0x57 [0146.191] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0146.192] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\23a8b33e.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\23a8b33e.jpg"), fInfoLevelId=0x0, lpFileInformation=0x233e670 | out: lpFileInformation=0x233e670*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x1b630400, ftCreationTime.dwHighDateTime=0x1d33758, ftLastAccessTime.dwLowDateTime=0x1b630400, ftLastAccessTime.dwHighDateTime=0x1d33758, ftLastWriteTime.dwLowDateTime=0x1b630400, ftLastWriteTime.dwHighDateTime=0x1d33758, nFileSizeHigh=0x0, nFileSizeLow=0x1d8e)) returned 1 [0146.192] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0146.192] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\23a8b33e.jpg", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\23a8b33e.jpg", lpFilePart=0x0) returned 0x57 [0146.192] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0146.192] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\23a8b33e.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\23a8b33e.jpg"), fInfoLevelId=0x0, lpFileInformation=0x233e7d8 | out: lpFileInformation=0x233e7d8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x1b630400, ftCreationTime.dwHighDateTime=0x1d33758, ftLastAccessTime.dwLowDateTime=0x1b630400, ftLastAccessTime.dwHighDateTime=0x1d33758, ftLastWriteTime.dwLowDateTime=0x1b630400, ftLastWriteTime.dwHighDateTime=0x1d33758, nFileSizeHigh=0x0, nFileSizeLow=0x1d8e)) returned 1 [0146.192] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0146.192] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\23a8b33e.jpg", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\23a8b33e.jpg", lpFilePart=0x0) returned 0x57 [0146.192] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0146.192] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\23a8b33e.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\23a8b33e.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0146.193] GetFileType (hFile=0x444) returned 0x1 [0146.193] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0146.193] GetFileType (hFile=0x444) returned 0x1 [0146.193] ReadFile (in: hFile=0x444, lpBuffer=0x2340bd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x2340bd8*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0146.235] CloseHandle (hObject=0x444) returned 1 [0146.235] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\23a8b33e.jpg", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\23a8b33e.jpg", lpFilePart=0x0) returned 0x57 [0146.235] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0146.235] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\23a8b33e.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\23a8b33e.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0146.236] GetFileType (hFile=0x444) returned 0x1 [0146.236] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0146.236] GetFileType (hFile=0x444) returned 0x1 [0146.236] WriteFile (in: hFile=0x444, lpBuffer=0x2156778*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x2156778*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0146.236] CloseHandle (hObject=0x444) returned 1 [0146.237] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\23a8b33e.jpg", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\23a8b33e.jpg", lpFilePart=0x0) returned 0x57 [0146.237] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\23a8b33e.jpg.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\23a8b33e.jpg.xuy", lpFilePart=0x0) returned 0x5b [0146.237] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0146.237] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\23a8b33e.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\23a8b33e.jpg"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b630400, ftCreationTime.dwHighDateTime=0x1d33758, ftLastAccessTime.dwLowDateTime=0x1b630400, ftLastAccessTime.dwHighDateTime=0x1d33758, ftLastWriteTime.dwLowDateTime=0x430410bb, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0146.237] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0146.237] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\23a8b33e.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\23a8b33e.jpg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\23a8b33e.jpg.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\23a8b33e.jpg.xuy")) returned 1 [0146.238] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\34b2700e.jpg", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\34b2700e.jpg", lpFilePart=0x0) returned 0x57 [0146.238] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0146.238] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\34b2700e.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\34b2700e.jpg"), fInfoLevelId=0x0, lpFileInformation=0x21bcce0 | out: lpFileInformation=0x21bcce0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbadb9780, ftCreationTime.dwHighDateTime=0x1d466c9, ftLastAccessTime.dwLowDateTime=0xbadb9780, ftLastAccessTime.dwHighDateTime=0x1d466c9, ftLastWriteTime.dwLowDateTime=0xbadb9780, ftLastWriteTime.dwHighDateTime=0x1d466c9, nFileSizeHigh=0x0, nFileSizeLow=0x1dd6)) returned 1 [0146.238] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0146.238] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\34b2700e.jpg", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\34b2700e.jpg", lpFilePart=0x0) returned 0x57 [0146.238] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0146.238] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\34b2700e.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\34b2700e.jpg"), fInfoLevelId=0x0, lpFileInformation=0x21bce48 | out: lpFileInformation=0x21bce48*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbadb9780, ftCreationTime.dwHighDateTime=0x1d466c9, ftLastAccessTime.dwLowDateTime=0xbadb9780, ftLastAccessTime.dwHighDateTime=0x1d466c9, ftLastWriteTime.dwLowDateTime=0xbadb9780, ftLastWriteTime.dwHighDateTime=0x1d466c9, nFileSizeHigh=0x0, nFileSizeLow=0x1dd6)) returned 1 [0146.239] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0146.239] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\34b2700e.jpg", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\34b2700e.jpg", lpFilePart=0x0) returned 0x57 [0146.239] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0146.239] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\34b2700e.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\34b2700e.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0146.239] GetFileType (hFile=0x444) returned 0x1 [0146.239] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0146.239] GetFileType (hFile=0x444) returned 0x1 [0146.240] ReadFile (in: hFile=0x444, lpBuffer=0x21bf248, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x21bf248*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0146.267] CloseHandle (hObject=0x444) returned 1 [0146.268] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\34b2700e.jpg", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\34b2700e.jpg", lpFilePart=0x0) returned 0x57 [0146.268] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0146.268] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\34b2700e.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\34b2700e.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0146.268] GetFileType (hFile=0x444) returned 0x1 [0146.268] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0146.268] GetFileType (hFile=0x444) returned 0x1 [0146.268] WriteFile (in: hFile=0x444, lpBuffer=0x21bcf90*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x21bcf90*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0146.268] CloseHandle (hObject=0x444) returned 1 [0146.268] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\34b2700e.jpg", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\34b2700e.jpg", lpFilePart=0x0) returned 0x57 [0146.268] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\34b2700e.jpg.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\34b2700e.jpg.xuy", lpFilePart=0x0) returned 0x5b [0146.268] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0146.268] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\34b2700e.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\34b2700e.jpg"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbadb9780, ftCreationTime.dwHighDateTime=0x1d466c9, ftLastAccessTime.dwLowDateTime=0xbadb9780, ftLastAccessTime.dwHighDateTime=0x1d466c9, ftLastWriteTime.dwLowDateTime=0x4308d357, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0146.269] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0146.269] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\34b2700e.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\34b2700e.jpg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\34b2700e.jpg.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\34b2700e.jpg.xuy")) returned 1 [0146.270] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\3d12749e.jpg", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\3d12749e.jpg", lpFilePart=0x0) returned 0x57 [0146.270] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0146.270] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\3d12749e.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\3d12749e.jpg"), fInfoLevelId=0x0, lpFileInformation=0x223b660 | out: lpFileInformation=0x223b660*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x320e2000, ftCreationTime.dwHighDateTime=0x1d30070, ftLastAccessTime.dwLowDateTime=0x320e2000, ftLastAccessTime.dwHighDateTime=0x1d30070, ftLastWriteTime.dwLowDateTime=0x320e2000, ftLastWriteTime.dwHighDateTime=0x1d30070, nFileSizeHigh=0x0, nFileSizeLow=0x176f)) returned 1 [0146.270] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0146.270] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\3d12749e.jpg", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\3d12749e.jpg", lpFilePart=0x0) returned 0x57 [0146.270] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0146.271] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\3d12749e.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\3d12749e.jpg"), fInfoLevelId=0x0, lpFileInformation=0x223b7c8 | out: lpFileInformation=0x223b7c8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x320e2000, ftCreationTime.dwHighDateTime=0x1d30070, ftLastAccessTime.dwLowDateTime=0x320e2000, ftLastAccessTime.dwHighDateTime=0x1d30070, ftLastWriteTime.dwLowDateTime=0x320e2000, ftLastWriteTime.dwHighDateTime=0x1d30070, nFileSizeHigh=0x0, nFileSizeLow=0x176f)) returned 1 [0146.271] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0146.271] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\3d12749e.jpg", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\3d12749e.jpg", lpFilePart=0x0) returned 0x57 [0146.271] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0146.271] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\3d12749e.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\3d12749e.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0146.272] GetFileType (hFile=0x444) returned 0x1 [0146.272] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0146.272] GetFileType (hFile=0x444) returned 0x1 [0146.272] ReadFile (in: hFile=0x444, lpBuffer=0x223dbc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x223dbc8*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0146.297] CloseHandle (hObject=0x444) returned 1 [0146.297] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\3d12749e.jpg", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\3d12749e.jpg", lpFilePart=0x0) returned 0x57 [0146.297] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0146.297] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\3d12749e.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\3d12749e.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0146.297] GetFileType (hFile=0x444) returned 0x1 [0146.297] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0146.297] GetFileType (hFile=0x444) returned 0x1 [0146.298] WriteFile (in: hFile=0x444, lpBuffer=0x223b910*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x223b910*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0146.298] CloseHandle (hObject=0x444) returned 1 [0146.298] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\3d12749e.jpg", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\3d12749e.jpg", lpFilePart=0x0) returned 0x57 [0146.298] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\3d12749e.jpg.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\3d12749e.jpg.xuy", lpFilePart=0x0) returned 0x5b [0146.298] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0146.298] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\3d12749e.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\3d12749e.jpg"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x320e2000, ftCreationTime.dwHighDateTime=0x1d30070, ftLastAccessTime.dwLowDateTime=0x320e2000, ftLastAccessTime.dwHighDateTime=0x1d30070, ftLastWriteTime.dwLowDateTime=0x430b34c8, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0146.298] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0146.298] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\3d12749e.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\3d12749e.jpg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\3d12749e.jpg.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\3d12749e.jpg.xuy")) returned 1 [0146.299] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\434a4949.jpg", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\434a4949.jpg", lpFilePart=0x0) returned 0x57 [0146.299] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0146.300] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\434a4949.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\434a4949.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22b9fe0 | out: lpFileInformation=0x22b9fe0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe5eff600, ftCreationTime.dwHighDateTime=0x1d3aafe, ftLastAccessTime.dwLowDateTime=0xe5eff600, ftLastAccessTime.dwHighDateTime=0x1d3aafe, ftLastWriteTime.dwLowDateTime=0xe5eff600, ftLastWriteTime.dwHighDateTime=0x1d3aafe, nFileSizeHigh=0x0, nFileSizeLow=0x194b)) returned 1 [0146.300] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0146.300] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\434a4949.jpg", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\434a4949.jpg", lpFilePart=0x0) returned 0x57 [0146.300] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0146.300] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\434a4949.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\434a4949.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22ba148 | out: lpFileInformation=0x22ba148*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe5eff600, ftCreationTime.dwHighDateTime=0x1d3aafe, ftLastAccessTime.dwLowDateTime=0xe5eff600, ftLastAccessTime.dwHighDateTime=0x1d3aafe, ftLastWriteTime.dwLowDateTime=0xe5eff600, ftLastWriteTime.dwHighDateTime=0x1d3aafe, nFileSizeHigh=0x0, nFileSizeLow=0x194b)) returned 1 [0146.300] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0146.300] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\434a4949.jpg", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\434a4949.jpg", lpFilePart=0x0) returned 0x57 [0146.300] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0146.300] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\434a4949.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\434a4949.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0146.301] GetFileType (hFile=0x444) returned 0x1 [0146.301] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0146.301] GetFileType (hFile=0x444) returned 0x1 [0146.301] ReadFile (in: hFile=0x444, lpBuffer=0x22bc548, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x22bc548*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0146.329] CloseHandle (hObject=0x444) returned 1 [0146.330] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\434a4949.jpg", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\434a4949.jpg", lpFilePart=0x0) returned 0x57 [0146.330] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0146.330] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\434a4949.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\434a4949.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0146.330] GetFileType (hFile=0x444) returned 0x1 [0146.330] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0146.330] GetFileType (hFile=0x444) returned 0x1 [0146.330] WriteFile (in: hFile=0x444, lpBuffer=0x22ba290*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x22ba290*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0146.331] CloseHandle (hObject=0x444) returned 1 [0146.331] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\434a4949.jpg", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\434a4949.jpg", lpFilePart=0x0) returned 0x57 [0146.331] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\434a4949.jpg.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\434a4949.jpg.xuy", lpFilePart=0x0) returned 0x5b [0146.331] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0146.331] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\434a4949.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\434a4949.jpg"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5eff600, ftCreationTime.dwHighDateTime=0x1d3aafe, ftLastAccessTime.dwLowDateTime=0xe5eff600, ftLastAccessTime.dwHighDateTime=0x1d3aafe, ftLastWriteTime.dwLowDateTime=0x43125cd3, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0146.331] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0146.331] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\434a4949.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\434a4949.jpg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\434a4949.jpg.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\434a4949.jpg.xuy")) returned 1 [0146.332] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\4929c482.jpg", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\4929c482.jpg", lpFilePart=0x0) returned 0x57 [0146.332] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0146.332] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\4929c482.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\4929c482.jpg"), fInfoLevelId=0x0, lpFileInformation=0x2338960 | out: lpFileInformation=0x2338960*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9fd11080, ftCreationTime.dwHighDateTime=0x1d008f6, ftLastAccessTime.dwLowDateTime=0x9fd11080, ftLastAccessTime.dwHighDateTime=0x1d008f6, ftLastWriteTime.dwLowDateTime=0x9fd11080, ftLastWriteTime.dwHighDateTime=0x1d008f6, nFileSizeHigh=0x0, nFileSizeLow=0x20cc)) returned 1 [0146.332] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0146.332] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\4929c482.jpg", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\4929c482.jpg", lpFilePart=0x0) returned 0x57 [0146.332] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0146.332] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\4929c482.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\4929c482.jpg"), fInfoLevelId=0x0, lpFileInformation=0x2338ac8 | out: lpFileInformation=0x2338ac8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9fd11080, ftCreationTime.dwHighDateTime=0x1d008f6, ftLastAccessTime.dwLowDateTime=0x9fd11080, ftLastAccessTime.dwHighDateTime=0x1d008f6, ftLastWriteTime.dwLowDateTime=0x9fd11080, ftLastWriteTime.dwHighDateTime=0x1d008f6, nFileSizeHigh=0x0, nFileSizeLow=0x20cc)) returned 1 [0146.332] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0146.333] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\4929c482.jpg", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\4929c482.jpg", lpFilePart=0x0) returned 0x57 [0146.333] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0146.333] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\4929c482.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\4929c482.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0146.333] GetFileType (hFile=0x444) returned 0x1 [0146.333] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0146.333] GetFileType (hFile=0x444) returned 0x1 [0146.333] ReadFile (in: hFile=0x444, lpBuffer=0x233aec8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x233aec8*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0146.375] CloseHandle (hObject=0x444) returned 1 [0146.375] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\4929c482.jpg", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\4929c482.jpg", lpFilePart=0x0) returned 0x57 [0146.375] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0146.375] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\4929c482.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\4929c482.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0146.376] GetFileType (hFile=0x444) returned 0x1 [0146.376] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0146.376] GetFileType (hFile=0x444) returned 0x1 [0146.376] WriteFile (in: hFile=0x444, lpBuffer=0x2156778*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x2156778*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0146.376] CloseHandle (hObject=0x444) returned 1 [0146.376] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\4929c482.jpg", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\4929c482.jpg", lpFilePart=0x0) returned 0x57 [0146.376] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\4929c482.jpg.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\4929c482.jpg.xuy", lpFilePart=0x0) returned 0x5b [0146.376] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0146.376] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\4929c482.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\4929c482.jpg"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9fd11080, ftCreationTime.dwHighDateTime=0x1d008f6, ftLastAccessTime.dwLowDateTime=0x9fd11080, ftLastAccessTime.dwHighDateTime=0x1d008f6, ftLastWriteTime.dwLowDateTime=0x4317227d, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x20cc)) returned 1 [0146.376] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0146.376] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\4929c482.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\4929c482.jpg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\4929c482.jpg.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\4929c482.jpg.xuy")) returned 1 [0146.378] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\4a7a41cb.jpg", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\4a7a41cb.jpg", lpFilePart=0x0) returned 0x57 [0146.378] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0146.378] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\4a7a41cb.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\4a7a41cb.jpg"), fInfoLevelId=0x0, lpFileInformation=0x21b72e0 | out: lpFileInformation=0x21b72e0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x1d63bf80, ftCreationTime.dwHighDateTime=0x1d42017, ftLastAccessTime.dwLowDateTime=0x1d63bf80, ftLastAccessTime.dwHighDateTime=0x1d42017, ftLastWriteTime.dwLowDateTime=0x1d63bf80, ftLastWriteTime.dwHighDateTime=0x1d42017, nFileSizeHigh=0x0, nFileSizeLow=0x10ef)) returned 1 [0146.378] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0146.378] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\4a7a41cb.jpg", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\4a7a41cb.jpg", lpFilePart=0x0) returned 0x57 [0146.378] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0146.378] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\4a7a41cb.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\4a7a41cb.jpg"), fInfoLevelId=0x0, lpFileInformation=0x21b7448 | out: lpFileInformation=0x21b7448*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x1d63bf80, ftCreationTime.dwHighDateTime=0x1d42017, ftLastAccessTime.dwLowDateTime=0x1d63bf80, ftLastAccessTime.dwHighDateTime=0x1d42017, ftLastWriteTime.dwLowDateTime=0x1d63bf80, ftLastWriteTime.dwHighDateTime=0x1d42017, nFileSizeHigh=0x0, nFileSizeLow=0x10ef)) returned 1 [0146.378] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0146.378] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\4a7a41cb.jpg", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\4a7a41cb.jpg", lpFilePart=0x0) returned 0x57 [0146.378] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0146.378] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\4a7a41cb.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\4a7a41cb.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0146.379] GetFileType (hFile=0x444) returned 0x1 [0146.379] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0146.379] GetFileType (hFile=0x444) returned 0x1 [0146.379] ReadFile (in: hFile=0x444, lpBuffer=0x21b9848, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x21b9848*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0146.405] CloseHandle (hObject=0x444) returned 1 [0146.405] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\4a7a41cb.jpg", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\4a7a41cb.jpg", lpFilePart=0x0) returned 0x57 [0146.405] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0146.405] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\4a7a41cb.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\4a7a41cb.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0146.405] GetFileType (hFile=0x444) returned 0x1 [0146.405] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0146.405] GetFileType (hFile=0x444) returned 0x1 [0146.405] WriteFile (in: hFile=0x444, lpBuffer=0x21b7590*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x21b7590*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0146.405] CloseHandle (hObject=0x444) returned 1 [0146.405] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\4a7a41cb.jpg", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\4a7a41cb.jpg", lpFilePart=0x0) returned 0x57 [0146.406] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\4a7a41cb.jpg.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\4a7a41cb.jpg.xuy", lpFilePart=0x0) returned 0x5b [0146.406] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0146.406] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\4a7a41cb.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\4a7a41cb.jpg"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d63bf80, ftCreationTime.dwHighDateTime=0x1d42017, ftLastAccessTime.dwLowDateTime=0x1d63bf80, ftLastAccessTime.dwHighDateTime=0x1d42017, ftLastWriteTime.dwLowDateTime=0x431c0852, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0146.406] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0146.406] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\4a7a41cb.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\4a7a41cb.jpg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\4a7a41cb.jpg.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\4a7a41cb.jpg.xuy")) returned 1 [0146.407] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\52572b1f.jpg", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\52572b1f.jpg", lpFilePart=0x0) returned 0x57 [0146.407] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0146.407] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\52572b1f.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\52572b1f.jpg"), fInfoLevelId=0x0, lpFileInformation=0x2235c60 | out: lpFileInformation=0x2235c60*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9fd11080, ftCreationTime.dwHighDateTime=0x1d008f6, ftLastAccessTime.dwLowDateTime=0x9fd11080, ftLastAccessTime.dwHighDateTime=0x1d008f6, ftLastWriteTime.dwLowDateTime=0x9fd11080, ftLastWriteTime.dwHighDateTime=0x1d008f6, nFileSizeHigh=0x0, nFileSizeLow=0x15d1)) returned 1 [0146.407] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0146.407] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\52572b1f.jpg", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\52572b1f.jpg", lpFilePart=0x0) returned 0x57 [0146.407] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0146.407] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\52572b1f.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\52572b1f.jpg"), fInfoLevelId=0x0, lpFileInformation=0x2235dc8 | out: lpFileInformation=0x2235dc8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9fd11080, ftCreationTime.dwHighDateTime=0x1d008f6, ftLastAccessTime.dwLowDateTime=0x9fd11080, ftLastAccessTime.dwHighDateTime=0x1d008f6, ftLastWriteTime.dwLowDateTime=0x9fd11080, ftLastWriteTime.dwHighDateTime=0x1d008f6, nFileSizeHigh=0x0, nFileSizeLow=0x15d1)) returned 1 [0146.407] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0146.407] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\52572b1f.jpg", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\52572b1f.jpg", lpFilePart=0x0) returned 0x57 [0146.407] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0146.407] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\52572b1f.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\52572b1f.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0146.408] GetFileType (hFile=0x444) returned 0x1 [0146.408] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0146.408] GetFileType (hFile=0x444) returned 0x1 [0146.408] ReadFile (in: hFile=0x444, lpBuffer=0x22381c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x22381c8*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0146.434] CloseHandle (hObject=0x444) returned 1 [0146.434] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\52572b1f.jpg", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\52572b1f.jpg", lpFilePart=0x0) returned 0x57 [0146.434] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0146.435] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\52572b1f.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\52572b1f.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0146.435] GetFileType (hFile=0x444) returned 0x1 [0146.435] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0146.435] GetFileType (hFile=0x444) returned 0x1 [0146.435] WriteFile (in: hFile=0x444, lpBuffer=0x2235f10*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x2235f10*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0146.435] CloseHandle (hObject=0x444) returned 1 [0146.435] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\52572b1f.jpg", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\52572b1f.jpg", lpFilePart=0x0) returned 0x57 [0146.435] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\52572b1f.jpg.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\52572b1f.jpg.xuy", lpFilePart=0x0) returned 0x5b [0146.435] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0146.435] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\52572b1f.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\52572b1f.jpg"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9fd11080, ftCreationTime.dwHighDateTime=0x1d008f6, ftLastAccessTime.dwLowDateTime=0x9fd11080, ftLastAccessTime.dwHighDateTime=0x1d008f6, ftLastWriteTime.dwLowDateTime=0x4320a9cf, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0146.435] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0146.435] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\52572b1f.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\52572b1f.jpg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\52572b1f.jpg.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\52572b1f.jpg.xuy")) returned 1 [0146.436] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\6b492b11.jpg", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\6b492b11.jpg", lpFilePart=0x0) returned 0x57 [0146.437] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0146.437] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\6b492b11.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\6b492b11.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22b45e0 | out: lpFileInformation=0x22b45e0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x42f06700, ftCreationTime.dwHighDateTime=0x1d2d5d4, ftLastAccessTime.dwLowDateTime=0x42f06700, ftLastAccessTime.dwHighDateTime=0x1d2d5d4, ftLastWriteTime.dwLowDateTime=0x42f06700, ftLastWriteTime.dwHighDateTime=0x1d2d5d4, nFileSizeHigh=0x0, nFileSizeLow=0xf1a)) returned 1 [0146.437] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0146.437] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\6b492b11.jpg", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\6b492b11.jpg", lpFilePart=0x0) returned 0x57 [0146.437] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0146.437] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\6b492b11.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\6b492b11.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0146.437] GetFileType (hFile=0x444) returned 0x1 [0146.437] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0146.437] GetFileType (hFile=0x444) returned 0x1 [0146.437] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0xf1a [0146.437] ReadFile (in: hFile=0x444, lpBuffer=0x22b57e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x22b57e8*, lpNumberOfBytesRead=0x3be6a8*=0xf1a, lpOverlapped=0x0) returned 1 [0146.439] CloseHandle (hObject=0x444) returned 1 [0146.449] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\6b492b11.jpg", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\6b492b11.jpg", lpFilePart=0x0) returned 0x57 [0146.449] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0146.450] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\6b492b11.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\6b492b11.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0146.451] GetFileType (hFile=0x444) returned 0x1 [0146.451] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0146.451] GetFileType (hFile=0x444) returned 0x1 [0146.451] WriteFile (in: hFile=0x444, lpBuffer=0x2331380*, nNumberOfBytesToWrite=0xf20, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x2331380*, lpNumberOfBytesWritten=0x3be5b8*=0xf20, lpOverlapped=0x0) returned 1 [0146.452] CloseHandle (hObject=0x444) returned 1 [0146.452] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\6b492b11.jpg", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\6b492b11.jpg", lpFilePart=0x0) returned 0x57 [0146.452] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\6b492b11.jpg.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\6b492b11.jpg.xuy", lpFilePart=0x0) returned 0x5b [0146.452] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0146.452] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\6b492b11.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\6b492b11.jpg"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42f06700, ftCreationTime.dwHighDateTime=0x1d2d5d4, ftLastAccessTime.dwLowDateTime=0x42f06700, ftLastAccessTime.dwHighDateTime=0x1d2d5d4, ftLastWriteTime.dwLowDateTime=0x43230fec, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xf20)) returned 1 [0146.452] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0146.452] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\6b492b11.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\6b492b11.jpg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\6b492b11.jpg.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\6b492b11.jpg.xuy")) returned 1 [0146.453] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7a7d9912.jpg", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7a7d9912.jpg", lpFilePart=0x0) returned 0x57 [0146.453] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0146.454] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7a7d9912.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\7a7d9912.jpg"), fInfoLevelId=0x0, lpFileInformation=0x2332648 | out: lpFileInformation=0x2332648*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9f387a00, ftCreationTime.dwHighDateTime=0x1d008f6, ftLastAccessTime.dwLowDateTime=0x9f387a00, ftLastAccessTime.dwHighDateTime=0x1d008f6, ftLastWriteTime.dwLowDateTime=0x9f387a00, ftLastWriteTime.dwHighDateTime=0x1d008f6, nFileSizeHigh=0x0, nFileSizeLow=0x17b8)) returned 1 [0146.454] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0146.454] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7a7d9912.jpg", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7a7d9912.jpg", lpFilePart=0x0) returned 0x57 [0146.454] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0146.454] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7a7d9912.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\7a7d9912.jpg"), fInfoLevelId=0x0, lpFileInformation=0x23327b0 | out: lpFileInformation=0x23327b0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9f387a00, ftCreationTime.dwHighDateTime=0x1d008f6, ftLastAccessTime.dwLowDateTime=0x9f387a00, ftLastAccessTime.dwHighDateTime=0x1d008f6, ftLastWriteTime.dwLowDateTime=0x9f387a00, ftLastWriteTime.dwHighDateTime=0x1d008f6, nFileSizeHigh=0x0, nFileSizeLow=0x17b8)) returned 1 [0146.454] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0146.454] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7a7d9912.jpg", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7a7d9912.jpg", lpFilePart=0x0) returned 0x57 [0146.454] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0146.454] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7a7d9912.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\7a7d9912.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0146.455] GetFileType (hFile=0x444) returned 0x1 [0146.455] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0146.455] GetFileType (hFile=0x444) returned 0x1 [0146.455] ReadFile (in: hFile=0x444, lpBuffer=0x2334bb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x2334bb0*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0146.510] CloseHandle (hObject=0x444) returned 1 [0146.511] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7a7d9912.jpg", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7a7d9912.jpg", lpFilePart=0x0) returned 0x57 [0146.511] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0146.511] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7a7d9912.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\7a7d9912.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0146.511] GetFileType (hFile=0x444) returned 0x1 [0146.511] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0146.511] GetFileType (hFile=0x444) returned 0x1 [0146.511] WriteFile (in: hFile=0x444, lpBuffer=0x2156778*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x2156778*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0146.511] CloseHandle (hObject=0x444) returned 1 [0146.512] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7a7d9912.jpg", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7a7d9912.jpg", lpFilePart=0x0) returned 0x57 [0146.512] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7a7d9912.jpg.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7a7d9912.jpg.xuy", lpFilePart=0x0) returned 0x5b [0146.512] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0146.512] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7a7d9912.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\7a7d9912.jpg"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f387a00, ftCreationTime.dwHighDateTime=0x1d008f6, ftLastAccessTime.dwLowDateTime=0x9f387a00, ftLastAccessTime.dwHighDateTime=0x1d008f6, ftLastWriteTime.dwLowDateTime=0x432c9715, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0146.512] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0146.512] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7a7d9912.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\7a7d9912.jpg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7a7d9912.jpg.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\7a7d9912.jpg.xuy")) returned 1 [0146.513] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7b9a0c9a.jpg", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7b9a0c9a.jpg", lpFilePart=0x0) returned 0x57 [0146.513] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0146.513] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7b9a0c9a.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\7b9a0c9a.jpg"), fInfoLevelId=0x0, lpFileInformation=0x21b0fa0 | out: lpFileInformation=0x21b0fa0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5364cf00, ftCreationTime.dwHighDateTime=0x1d3b089, ftLastAccessTime.dwLowDateTime=0x5364cf00, ftLastAccessTime.dwHighDateTime=0x1d3b089, ftLastWriteTime.dwLowDateTime=0x5364cf00, ftLastWriteTime.dwHighDateTime=0x1d3b089, nFileSizeHigh=0x0, nFileSizeLow=0x18d1)) returned 1 [0146.514] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0146.514] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7b9a0c9a.jpg", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7b9a0c9a.jpg", lpFilePart=0x0) returned 0x57 [0146.514] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0146.514] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7b9a0c9a.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\7b9a0c9a.jpg"), fInfoLevelId=0x0, lpFileInformation=0x21b1108 | out: lpFileInformation=0x21b1108*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5364cf00, ftCreationTime.dwHighDateTime=0x1d3b089, ftLastAccessTime.dwLowDateTime=0x5364cf00, ftLastAccessTime.dwHighDateTime=0x1d3b089, ftLastWriteTime.dwLowDateTime=0x5364cf00, ftLastWriteTime.dwHighDateTime=0x1d3b089, nFileSizeHigh=0x0, nFileSizeLow=0x18d1)) returned 1 [0146.514] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0146.514] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7b9a0c9a.jpg", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7b9a0c9a.jpg", lpFilePart=0x0) returned 0x57 [0146.514] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0146.514] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7b9a0c9a.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\7b9a0c9a.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0146.515] GetFileType (hFile=0x444) returned 0x1 [0146.515] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0146.515] GetFileType (hFile=0x444) returned 0x1 [0146.515] ReadFile (in: hFile=0x444, lpBuffer=0x21b3508, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x21b3508*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0146.535] CloseHandle (hObject=0x444) returned 1 [0146.535] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7b9a0c9a.jpg", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7b9a0c9a.jpg", lpFilePart=0x0) returned 0x57 [0146.535] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0146.535] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7b9a0c9a.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\7b9a0c9a.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0146.536] GetFileType (hFile=0x444) returned 0x1 [0146.536] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0146.536] GetFileType (hFile=0x444) returned 0x1 [0146.536] WriteFile (in: hFile=0x444, lpBuffer=0x21b1250*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x21b1250*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0146.536] CloseHandle (hObject=0x444) returned 1 [0146.536] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7b9a0c9a.jpg", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7b9a0c9a.jpg", lpFilePart=0x0) returned 0x57 [0146.536] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7b9a0c9a.jpg.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7b9a0c9a.jpg.xuy", lpFilePart=0x0) returned 0x5b [0146.536] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0146.536] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7b9a0c9a.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\7b9a0c9a.jpg"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5364cf00, ftCreationTime.dwHighDateTime=0x1d3b089, ftLastAccessTime.dwLowDateTime=0x5364cf00, ftLastAccessTime.dwHighDateTime=0x1d3b089, ftLastWriteTime.dwLowDateTime=0x43315a74, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0146.536] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0146.536] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7b9a0c9a.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\7b9a0c9a.jpg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7b9a0c9a.jpg.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\7b9a0c9a.jpg.xuy")) returned 1 [0146.537] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7cbffa6f.jpg", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7cbffa6f.jpg", lpFilePart=0x0) returned 0x57 [0146.537] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0146.537] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7cbffa6f.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\7cbffa6f.jpg"), fInfoLevelId=0x0, lpFileInformation=0x222f920 | out: lpFileInformation=0x222f920*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xed8ec600, ftCreationTime.dwHighDateTime=0x1d38c47, ftLastAccessTime.dwLowDateTime=0xed8ec600, ftLastAccessTime.dwHighDateTime=0x1d38c47, ftLastWriteTime.dwLowDateTime=0xed8ec600, ftLastWriteTime.dwHighDateTime=0x1d38c47, nFileSizeHigh=0x0, nFileSizeLow=0x1949)) returned 1 [0146.537] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0146.538] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7cbffa6f.jpg", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7cbffa6f.jpg", lpFilePart=0x0) returned 0x57 [0146.538] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0146.538] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7cbffa6f.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\7cbffa6f.jpg"), fInfoLevelId=0x0, lpFileInformation=0x222fa88 | out: lpFileInformation=0x222fa88*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xed8ec600, ftCreationTime.dwHighDateTime=0x1d38c47, ftLastAccessTime.dwLowDateTime=0xed8ec600, ftLastAccessTime.dwHighDateTime=0x1d38c47, ftLastWriteTime.dwLowDateTime=0xed8ec600, ftLastWriteTime.dwHighDateTime=0x1d38c47, nFileSizeHigh=0x0, nFileSizeLow=0x1949)) returned 1 [0146.538] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0146.538] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7cbffa6f.jpg", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7cbffa6f.jpg", lpFilePart=0x0) returned 0x57 [0146.538] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0146.538] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7cbffa6f.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\7cbffa6f.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0146.539] GetFileType (hFile=0x444) returned 0x1 [0146.539] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0146.539] GetFileType (hFile=0x444) returned 0x1 [0146.539] ReadFile (in: hFile=0x444, lpBuffer=0x2231e88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x2231e88*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0146.568] CloseHandle (hObject=0x444) returned 1 [0146.568] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7cbffa6f.jpg", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7cbffa6f.jpg", lpFilePart=0x0) returned 0x57 [0146.568] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0146.568] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7cbffa6f.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\7cbffa6f.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0146.569] GetFileType (hFile=0x444) returned 0x1 [0146.569] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0146.569] GetFileType (hFile=0x444) returned 0x1 [0146.569] WriteFile (in: hFile=0x444, lpBuffer=0x222fbd0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x222fbd0*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0146.569] CloseHandle (hObject=0x444) returned 1 [0146.569] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7cbffa6f.jpg", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7cbffa6f.jpg", lpFilePart=0x0) returned 0x57 [0146.569] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7cbffa6f.jpg.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7cbffa6f.jpg.xuy", lpFilePart=0x0) returned 0x5b [0146.569] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0146.569] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7cbffa6f.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\7cbffa6f.jpg"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed8ec600, ftCreationTime.dwHighDateTime=0x1d38c47, ftLastAccessTime.dwLowDateTime=0xed8ec600, ftLastAccessTime.dwHighDateTime=0x1d38c47, ftLastWriteTime.dwLowDateTime=0x4336232a, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0146.569] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0146.569] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7cbffa6f.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\7cbffa6f.jpg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7cbffa6f.jpg.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\7cbffa6f.jpg.xuy")) returned 1 [0146.570] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7fe97f77.jpg", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7fe97f77.jpg", lpFilePart=0x0) returned 0x57 [0146.570] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0146.570] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7fe97f77.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\7fe97f77.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22ae2a0 | out: lpFileInformation=0x22ae2a0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9e074d00, ftCreationTime.dwHighDateTime=0x1d008f6, ftLastAccessTime.dwLowDateTime=0x9e074d00, ftLastAccessTime.dwHighDateTime=0x1d008f6, ftLastWriteTime.dwLowDateTime=0x9e074d00, ftLastWriteTime.dwHighDateTime=0x1d008f6, nFileSizeHigh=0x0, nFileSizeLow=0x194b)) returned 1 [0146.570] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0146.571] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7fe97f77.jpg", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7fe97f77.jpg", lpFilePart=0x0) returned 0x57 [0146.571] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0146.571] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7fe97f77.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\7fe97f77.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22ae408 | out: lpFileInformation=0x22ae408*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9e074d00, ftCreationTime.dwHighDateTime=0x1d008f6, ftLastAccessTime.dwLowDateTime=0x9e074d00, ftLastAccessTime.dwHighDateTime=0x1d008f6, ftLastWriteTime.dwLowDateTime=0x9e074d00, ftLastWriteTime.dwHighDateTime=0x1d008f6, nFileSizeHigh=0x0, nFileSizeLow=0x194b)) returned 1 [0146.571] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0146.571] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7fe97f77.jpg", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7fe97f77.jpg", lpFilePart=0x0) returned 0x57 [0146.571] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0146.571] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7fe97f77.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\7fe97f77.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0146.572] GetFileType (hFile=0x444) returned 0x1 [0146.572] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0146.572] GetFileType (hFile=0x444) returned 0x1 [0146.572] ReadFile (in: hFile=0x444, lpBuffer=0x22b0808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x22b0808*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0146.592] CloseHandle (hObject=0x444) returned 1 [0146.592] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7fe97f77.jpg", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7fe97f77.jpg", lpFilePart=0x0) returned 0x57 [0146.592] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0146.592] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7fe97f77.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\7fe97f77.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0146.592] GetFileType (hFile=0x444) returned 0x1 [0146.592] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0146.592] GetFileType (hFile=0x444) returned 0x1 [0146.592] WriteFile (in: hFile=0x444, lpBuffer=0x22ae550*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x22ae550*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0146.593] CloseHandle (hObject=0x444) returned 1 [0146.593] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7fe97f77.jpg", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7fe97f77.jpg", lpFilePart=0x0) returned 0x57 [0146.593] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7fe97f77.jpg.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7fe97f77.jpg.xuy", lpFilePart=0x0) returned 0x5b [0146.593] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0146.593] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7fe97f77.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\7fe97f77.jpg"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e074d00, ftCreationTime.dwHighDateTime=0x1d008f6, ftLastAccessTime.dwLowDateTime=0x9e074d00, ftLastAccessTime.dwHighDateTime=0x1d008f6, ftLastWriteTime.dwLowDateTime=0x433881b6, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0146.593] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0146.593] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7fe97f77.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\7fe97f77.jpg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7fe97f77.jpg.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\7fe97f77.jpg.xuy")) returned 1 [0146.594] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\9c14e2ad.jpg", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\9c14e2ad.jpg", lpFilePart=0x0) returned 0x57 [0146.594] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0146.594] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\9c14e2ad.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\9c14e2ad.jpg"), fInfoLevelId=0x0, lpFileInformation=0x232cc20 | out: lpFileInformation=0x232cc20*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x76f01c00, ftCreationTime.dwHighDateTime=0x1d2fc56, ftLastAccessTime.dwLowDateTime=0x76f01c00, ftLastAccessTime.dwHighDateTime=0x1d2fc56, ftLastWriteTime.dwLowDateTime=0x76f01c00, ftLastWriteTime.dwHighDateTime=0x1d2fc56, nFileSizeHigh=0x0, nFileSizeLow=0x7e86)) returned 1 [0146.600] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0146.600] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\9c14e2ad.jpg", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\9c14e2ad.jpg", lpFilePart=0x0) returned 0x57 [0146.600] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0146.600] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\9c14e2ad.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\9c14e2ad.jpg"), fInfoLevelId=0x0, lpFileInformation=0x232cd88 | out: lpFileInformation=0x232cd88*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x76f01c00, ftCreationTime.dwHighDateTime=0x1d2fc56, ftLastAccessTime.dwLowDateTime=0x76f01c00, ftLastAccessTime.dwHighDateTime=0x1d2fc56, ftLastWriteTime.dwLowDateTime=0x76f01c00, ftLastWriteTime.dwHighDateTime=0x1d2fc56, nFileSizeHigh=0x0, nFileSizeLow=0x7e86)) returned 1 [0146.600] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0146.600] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\9c14e2ad.jpg", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\9c14e2ad.jpg", lpFilePart=0x0) returned 0x57 [0146.600] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0146.600] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\9c14e2ad.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\9c14e2ad.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0146.601] GetFileType (hFile=0x444) returned 0x1 [0146.601] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0146.601] GetFileType (hFile=0x444) returned 0x1 [0146.601] ReadFile (in: hFile=0x444, lpBuffer=0x232f188, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x232f188*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0146.657] CloseHandle (hObject=0x444) returned 1 [0146.657] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\9c14e2ad.jpg", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\9c14e2ad.jpg", lpFilePart=0x0) returned 0x57 [0146.657] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0146.657] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\9c14e2ad.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\9c14e2ad.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0146.657] GetFileType (hFile=0x444) returned 0x1 [0146.657] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0146.657] GetFileType (hFile=0x444) returned 0x1 [0146.657] WriteFile (in: hFile=0x444, lpBuffer=0x2156778*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x2156778*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0146.657] CloseHandle (hObject=0x444) returned 1 [0146.657] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\9c14e2ad.jpg", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\9c14e2ad.jpg", lpFilePart=0x0) returned 0x57 [0146.658] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\9c14e2ad.jpg.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\9c14e2ad.jpg.xuy", lpFilePart=0x0) returned 0x5b [0146.658] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0146.658] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\9c14e2ad.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\9c14e2ad.jpg"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76f01c00, ftCreationTime.dwHighDateTime=0x1d2fc56, ftLastAccessTime.dwLowDateTime=0x76f01c00, ftLastAccessTime.dwHighDateTime=0x1d2fc56, ftLastWriteTime.dwLowDateTime=0x43420b6b, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x7e86)) returned 1 [0146.658] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0146.658] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\9c14e2ad.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\9c14e2ad.jpg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\9c14e2ad.jpg.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\9c14e2ad.jpg.xuy")) returned 1 [0146.662] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\a1444597.jpg", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\a1444597.jpg", lpFilePart=0x0) returned 0x57 [0146.662] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0146.662] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\a1444597.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\a1444597.jpg"), fInfoLevelId=0x0, lpFileInformation=0x21ab580 | out: lpFileInformation=0x21ab580*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x1cceb580, ftCreationTime.dwHighDateTime=0x1d35e06, ftLastAccessTime.dwLowDateTime=0x1cceb580, ftLastAccessTime.dwHighDateTime=0x1d35e06, ftLastWriteTime.dwLowDateTime=0x1cceb580, ftLastWriteTime.dwHighDateTime=0x1d35e06, nFileSizeHigh=0x0, nFileSizeLow=0x1236)) returned 1 [0146.662] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0146.662] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\a1444597.jpg", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\a1444597.jpg", lpFilePart=0x0) returned 0x57 [0146.662] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0146.663] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\a1444597.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\a1444597.jpg"), fInfoLevelId=0x0, lpFileInformation=0x21ab6e8 | out: lpFileInformation=0x21ab6e8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x1cceb580, ftCreationTime.dwHighDateTime=0x1d35e06, ftLastAccessTime.dwLowDateTime=0x1cceb580, ftLastAccessTime.dwHighDateTime=0x1d35e06, ftLastWriteTime.dwLowDateTime=0x1cceb580, ftLastWriteTime.dwHighDateTime=0x1d35e06, nFileSizeHigh=0x0, nFileSizeLow=0x1236)) returned 1 [0146.663] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0146.663] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\a1444597.jpg", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\a1444597.jpg", lpFilePart=0x0) returned 0x57 [0146.663] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0146.663] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\a1444597.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\a1444597.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0146.664] GetFileType (hFile=0x444) returned 0x1 [0146.664] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0146.664] GetFileType (hFile=0x444) returned 0x1 [0146.664] ReadFile (in: hFile=0x444, lpBuffer=0x21adae8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x21adae8*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0146.872] CloseHandle (hObject=0x444) returned 1 [0146.888] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\a1444597.jpg", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\a1444597.jpg", lpFilePart=0x0) returned 0x57 [0146.889] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0146.889] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\a1444597.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\a1444597.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0146.889] GetFileType (hFile=0x444) returned 0x1 [0146.889] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0146.889] GetFileType (hFile=0x444) returned 0x1 [0146.889] WriteFile (in: hFile=0x444, lpBuffer=0x21ab830*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x21ab830*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0146.889] CloseHandle (hObject=0x444) returned 1 [0146.889] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\a1444597.jpg", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\a1444597.jpg", lpFilePart=0x0) returned 0x57 [0146.889] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\a1444597.jpg.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\a1444597.jpg.xuy", lpFilePart=0x0) returned 0x5b [0146.889] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0146.889] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\a1444597.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\a1444597.jpg"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1cceb580, ftCreationTime.dwHighDateTime=0x1d35e06, ftLastAccessTime.dwLowDateTime=0x1cceb580, ftLastAccessTime.dwHighDateTime=0x1d35e06, ftLastWriteTime.dwLowDateTime=0x4365ce67, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0146.890] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0146.890] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\a1444597.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\a1444597.jpg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\a1444597.jpg.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\a1444597.jpg.xuy")) returned 1 [0146.891] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\a229ed41.jpg", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\a229ed41.jpg", lpFilePart=0x0) returned 0x57 [0146.891] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0146.891] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\a229ed41.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\a229ed41.jpg"), fInfoLevelId=0x0, lpFileInformation=0x2229f00 | out: lpFileInformation=0x2229f00*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xf957c780, ftCreationTime.dwHighDateTime=0x1d2d07b, ftLastAccessTime.dwLowDateTime=0xf957c780, ftLastAccessTime.dwHighDateTime=0x1d2d07b, ftLastWriteTime.dwLowDateTime=0xf957c780, ftLastWriteTime.dwHighDateTime=0x1d2d07b, nFileSizeHigh=0x0, nFileSizeLow=0x10b4)) returned 1 [0146.891] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0146.891] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\a229ed41.jpg", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\a229ed41.jpg", lpFilePart=0x0) returned 0x57 [0146.892] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0146.892] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\a229ed41.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\a229ed41.jpg"), fInfoLevelId=0x0, lpFileInformation=0x222a068 | out: lpFileInformation=0x222a068*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xf957c780, ftCreationTime.dwHighDateTime=0x1d2d07b, ftLastAccessTime.dwLowDateTime=0xf957c780, ftLastAccessTime.dwHighDateTime=0x1d2d07b, ftLastWriteTime.dwLowDateTime=0xf957c780, ftLastWriteTime.dwHighDateTime=0x1d2d07b, nFileSizeHigh=0x0, nFileSizeLow=0x10b4)) returned 1 [0146.892] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0146.892] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\a229ed41.jpg", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\a229ed41.jpg", lpFilePart=0x0) returned 0x57 [0146.892] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0146.892] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\a229ed41.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\a229ed41.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0146.893] GetFileType (hFile=0x444) returned 0x1 [0146.893] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0146.893] GetFileType (hFile=0x444) returned 0x1 [0146.893] ReadFile (in: hFile=0x444, lpBuffer=0x222c468, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x222c468*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0146.944] CloseHandle (hObject=0x444) returned 1 [0146.948] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\a229ed41.jpg", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\a229ed41.jpg", lpFilePart=0x0) returned 0x57 [0146.948] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0146.948] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\a229ed41.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\a229ed41.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0146.948] GetFileType (hFile=0x444) returned 0x1 [0146.948] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0146.948] GetFileType (hFile=0x444) returned 0x1 [0146.948] WriteFile (in: hFile=0x444, lpBuffer=0x222a1b0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x222a1b0*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0146.948] CloseHandle (hObject=0x444) returned 1 [0146.949] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\a229ed41.jpg", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\a229ed41.jpg", lpFilePart=0x0) returned 0x57 [0146.949] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\a229ed41.jpg.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\a229ed41.jpg.xuy", lpFilePart=0x0) returned 0x5b [0146.949] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0146.949] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\a229ed41.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\a229ed41.jpg"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf957c780, ftCreationTime.dwHighDateTime=0x1d2d07b, ftLastAccessTime.dwLowDateTime=0xf957c780, ftLastAccessTime.dwHighDateTime=0x1d2d07b, ftLastWriteTime.dwLowDateTime=0x436f5aff, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0146.949] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0146.949] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\a229ed41.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\a229ed41.jpg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\a229ed41.jpg.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\a229ed41.jpg.xuy")) returned 1 [0146.950] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\a271c2fa.jpg", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\a271c2fa.jpg", lpFilePart=0x0) returned 0x57 [0146.950] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0146.950] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\a271c2fa.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\a271c2fa.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22a8880 | out: lpFileInformation=0x22a8880*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xcf930c00, ftCreationTime.dwHighDateTime=0x1d2d492, ftLastAccessTime.dwLowDateTime=0xcf930c00, ftLastAccessTime.dwHighDateTime=0x1d2d492, ftLastWriteTime.dwLowDateTime=0xcf930c00, ftLastWriteTime.dwHighDateTime=0x1d2d492, nFileSizeHigh=0x0, nFileSizeLow=0x12fd)) returned 1 [0146.950] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0146.950] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\a271c2fa.jpg", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\a271c2fa.jpg", lpFilePart=0x0) returned 0x57 [0146.950] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0146.950] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\a271c2fa.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\a271c2fa.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22a89e8 | out: lpFileInformation=0x22a89e8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xcf930c00, ftCreationTime.dwHighDateTime=0x1d2d492, ftLastAccessTime.dwLowDateTime=0xcf930c00, ftLastAccessTime.dwHighDateTime=0x1d2d492, ftLastWriteTime.dwLowDateTime=0xcf930c00, ftLastWriteTime.dwHighDateTime=0x1d2d492, nFileSizeHigh=0x0, nFileSizeLow=0x12fd)) returned 1 [0146.950] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0146.950] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\a271c2fa.jpg", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\a271c2fa.jpg", lpFilePart=0x0) returned 0x57 [0146.950] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0146.950] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\a271c2fa.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\a271c2fa.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0146.951] GetFileType (hFile=0x444) returned 0x1 [0146.951] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0146.951] GetFileType (hFile=0x444) returned 0x1 [0146.951] ReadFile (in: hFile=0x444, lpBuffer=0x22aade8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x22aade8*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0146.999] CloseHandle (hObject=0x444) returned 1 [0146.999] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\a271c2fa.jpg", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\a271c2fa.jpg", lpFilePart=0x0) returned 0x57 [0146.999] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0146.999] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\a271c2fa.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\a271c2fa.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0146.999] GetFileType (hFile=0x444) returned 0x1 [0146.999] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0146.999] GetFileType (hFile=0x444) returned 0x1 [0146.999] WriteFile (in: hFile=0x444, lpBuffer=0x22a8b30*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x22a8b30*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0147.000] CloseHandle (hObject=0x444) returned 1 [0147.000] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\a271c2fa.jpg", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\a271c2fa.jpg", lpFilePart=0x0) returned 0x57 [0147.000] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\a271c2fa.jpg.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\a271c2fa.jpg.xuy", lpFilePart=0x0) returned 0x5b [0147.000] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0147.000] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\a271c2fa.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\a271c2fa.jpg"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf930c00, ftCreationTime.dwHighDateTime=0x1d2d492, ftLastAccessTime.dwLowDateTime=0xcf930c00, ftLastAccessTime.dwHighDateTime=0x1d2d492, ftLastWriteTime.dwLowDateTime=0x4376b164, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0147.000] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0147.000] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\a271c2fa.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\a271c2fa.jpg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\a271c2fa.jpg.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\a271c2fa.jpg.xuy")) returned 1 [0147.001] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\a2e35824.jpg", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\a2e35824.jpg", lpFilePart=0x0) returned 0x57 [0147.001] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0147.001] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\a2e35824.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\a2e35824.jpg"), fInfoLevelId=0x0, lpFileInformation=0x2327200 | out: lpFileInformation=0x2327200*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9fd11080, ftCreationTime.dwHighDateTime=0x1d008f6, ftLastAccessTime.dwLowDateTime=0x9fd11080, ftLastAccessTime.dwHighDateTime=0x1d008f6, ftLastWriteTime.dwLowDateTime=0x9fd11080, ftLastWriteTime.dwHighDateTime=0x1d008f6, nFileSizeHigh=0x0, nFileSizeLow=0x260b)) returned 1 [0147.001] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0147.001] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\a2e35824.jpg", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\a2e35824.jpg", lpFilePart=0x0) returned 0x57 [0147.002] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0147.002] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\a2e35824.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\a2e35824.jpg"), fInfoLevelId=0x0, lpFileInformation=0x2327368 | out: lpFileInformation=0x2327368*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9fd11080, ftCreationTime.dwHighDateTime=0x1d008f6, ftLastAccessTime.dwLowDateTime=0x9fd11080, ftLastAccessTime.dwHighDateTime=0x1d008f6, ftLastWriteTime.dwLowDateTime=0x9fd11080, ftLastWriteTime.dwHighDateTime=0x1d008f6, nFileSizeHigh=0x0, nFileSizeLow=0x260b)) returned 1 [0147.002] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0147.002] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\a2e35824.jpg", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\a2e35824.jpg", lpFilePart=0x0) returned 0x57 [0147.002] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0147.002] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\a2e35824.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\a2e35824.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0147.003] GetFileType (hFile=0x444) returned 0x1 [0147.003] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0147.003] GetFileType (hFile=0x444) returned 0x1 [0147.003] ReadFile (in: hFile=0x444, lpBuffer=0x2329768, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x2329768*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0147.194] CloseHandle (hObject=0x444) returned 1 [0147.194] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\a2e35824.jpg", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\a2e35824.jpg", lpFilePart=0x0) returned 0x57 [0147.194] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0147.194] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\a2e35824.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\a2e35824.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0147.194] GetFileType (hFile=0x444) returned 0x1 [0147.194] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0147.195] GetFileType (hFile=0x444) returned 0x1 [0147.195] WriteFile (in: hFile=0x444, lpBuffer=0x2156778*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x2156778*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0147.195] CloseHandle (hObject=0x444) returned 1 [0147.195] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\a2e35824.jpg", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\a2e35824.jpg", lpFilePart=0x0) returned 0x57 [0147.195] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\a2e35824.jpg.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\a2e35824.jpg.xuy", lpFilePart=0x0) returned 0x5b [0147.195] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0147.195] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\a2e35824.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\a2e35824.jpg"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9fd11080, ftCreationTime.dwHighDateTime=0x1d008f6, ftLastAccessTime.dwLowDateTime=0x9fd11080, ftLastAccessTime.dwHighDateTime=0x1d008f6, ftLastWriteTime.dwLowDateTime=0x439580ce, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x260b)) returned 1 [0147.195] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0147.195] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\a2e35824.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\a2e35824.jpg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\a2e35824.jpg.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\a2e35824.jpg.xuy")) returned 1 [0147.196] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\c00de09f.jpg", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\c00de09f.jpg", lpFilePart=0x0) returned 0x57 [0147.196] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0147.196] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\c00de09f.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\c00de09f.jpg"), fInfoLevelId=0x0, lpFileInformation=0x21a5b60 | out: lpFileInformation=0x21a5b60*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9fd11080, ftCreationTime.dwHighDateTime=0x1d008f6, ftLastAccessTime.dwLowDateTime=0x9fd11080, ftLastAccessTime.dwHighDateTime=0x1d008f6, ftLastWriteTime.dwLowDateTime=0x9fd11080, ftLastWriteTime.dwHighDateTime=0x1d008f6, nFileSizeHigh=0x0, nFileSizeLow=0x1bd7)) returned 1 [0147.196] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0147.196] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\c00de09f.jpg", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\c00de09f.jpg", lpFilePart=0x0) returned 0x57 [0147.196] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0147.197] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\c00de09f.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\c00de09f.jpg"), fInfoLevelId=0x0, lpFileInformation=0x21a5cc8 | out: lpFileInformation=0x21a5cc8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9fd11080, ftCreationTime.dwHighDateTime=0x1d008f6, ftLastAccessTime.dwLowDateTime=0x9fd11080, ftLastAccessTime.dwHighDateTime=0x1d008f6, ftLastWriteTime.dwLowDateTime=0x9fd11080, ftLastWriteTime.dwHighDateTime=0x1d008f6, nFileSizeHigh=0x0, nFileSizeLow=0x1bd7)) returned 1 [0147.197] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0147.197] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\c00de09f.jpg", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\c00de09f.jpg", lpFilePart=0x0) returned 0x57 [0147.197] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0147.197] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\c00de09f.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\c00de09f.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0147.197] GetFileType (hFile=0x444) returned 0x1 [0147.197] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0147.198] GetFileType (hFile=0x444) returned 0x1 [0147.198] ReadFile (in: hFile=0x444, lpBuffer=0x21a80c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x21a80c8*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0147.229] CloseHandle (hObject=0x444) returned 1 [0147.229] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\c00de09f.jpg", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\c00de09f.jpg", lpFilePart=0x0) returned 0x57 [0147.229] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0147.229] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\c00de09f.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\c00de09f.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0147.230] GetFileType (hFile=0x444) returned 0x1 [0147.230] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0147.230] GetFileType (hFile=0x444) returned 0x1 [0147.230] WriteFile (in: hFile=0x444, lpBuffer=0x21a5e10*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x21a5e10*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0147.230] CloseHandle (hObject=0x444) returned 1 [0147.230] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\c00de09f.jpg", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\c00de09f.jpg", lpFilePart=0x0) returned 0x57 [0147.230] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\c00de09f.jpg.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\c00de09f.jpg.xuy", lpFilePart=0x0) returned 0x5b [0147.230] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0147.230] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\c00de09f.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\c00de09f.jpg"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9fd11080, ftCreationTime.dwHighDateTime=0x1d008f6, ftLastAccessTime.dwLowDateTime=0x9fd11080, ftLastAccessTime.dwHighDateTime=0x1d008f6, ftLastWriteTime.dwLowDateTime=0x439a4181, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0147.230] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0147.230] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\c00de09f.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\c00de09f.jpg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\c00de09f.jpg.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\c00de09f.jpg.xuy")) returned 1 [0147.232] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\cc2f5fc7.jpg", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\cc2f5fc7.jpg", lpFilePart=0x0) returned 0x57 [0147.232] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0147.232] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\cc2f5fc7.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\cc2f5fc7.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22244e0 | out: lpFileInformation=0x22244e0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xa1023d80, ftCreationTime.dwHighDateTime=0x1d008f6, ftLastAccessTime.dwLowDateTime=0xa1023d80, ftLastAccessTime.dwHighDateTime=0x1d008f6, ftLastWriteTime.dwLowDateTime=0xa1023d80, ftLastWriteTime.dwHighDateTime=0x1d008f6, nFileSizeHigh=0x0, nFileSizeLow=0x2035)) returned 1 [0147.232] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0147.232] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\cc2f5fc7.jpg", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\cc2f5fc7.jpg", lpFilePart=0x0) returned 0x57 [0147.232] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0147.232] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\cc2f5fc7.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\cc2f5fc7.jpg"), fInfoLevelId=0x0, lpFileInformation=0x2224648 | out: lpFileInformation=0x2224648*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xa1023d80, ftCreationTime.dwHighDateTime=0x1d008f6, ftLastAccessTime.dwLowDateTime=0xa1023d80, ftLastAccessTime.dwHighDateTime=0x1d008f6, ftLastWriteTime.dwLowDateTime=0xa1023d80, ftLastWriteTime.dwHighDateTime=0x1d008f6, nFileSizeHigh=0x0, nFileSizeLow=0x2035)) returned 1 [0147.232] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0147.232] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\cc2f5fc7.jpg", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\cc2f5fc7.jpg", lpFilePart=0x0) returned 0x57 [0147.232] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0147.232] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\cc2f5fc7.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\cc2f5fc7.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0147.233] GetFileType (hFile=0x444) returned 0x1 [0147.233] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0147.233] GetFileType (hFile=0x444) returned 0x1 [0147.233] ReadFile (in: hFile=0x444, lpBuffer=0x2226a48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x2226a48*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0147.276] CloseHandle (hObject=0x444) returned 1 [0147.291] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\cc2f5fc7.jpg", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\cc2f5fc7.jpg", lpFilePart=0x0) returned 0x57 [0147.291] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0147.291] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\cc2f5fc7.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\cc2f5fc7.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0147.291] GetFileType (hFile=0x444) returned 0x1 [0147.292] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0147.292] GetFileType (hFile=0x444) returned 0x1 [0147.292] WriteFile (in: hFile=0x444, lpBuffer=0x2224790*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x2224790*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0147.292] CloseHandle (hObject=0x444) returned 1 [0147.292] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\cc2f5fc7.jpg", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\cc2f5fc7.jpg", lpFilePart=0x0) returned 0x57 [0147.292] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\cc2f5fc7.jpg.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\cc2f5fc7.jpg.xuy", lpFilePart=0x0) returned 0x5b [0147.292] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0147.292] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\cc2f5fc7.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\cc2f5fc7.jpg"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1023d80, ftCreationTime.dwHighDateTime=0x1d008f6, ftLastAccessTime.dwLowDateTime=0xa1023d80, ftLastAccessTime.dwHighDateTime=0x1d008f6, ftLastWriteTime.dwLowDateTime=0x43a3cbc9, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2035)) returned 1 [0147.292] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0147.292] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\cc2f5fc7.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\cc2f5fc7.jpg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\cc2f5fc7.jpg.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\cc2f5fc7.jpg.xuy")) returned 1 [0147.293] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\cf6a15d.jpg", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\cf6a15d.jpg", lpFilePart=0x0) returned 0x56 [0147.293] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0147.293] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\cf6a15d.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\cf6a15d.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22a2e60 | out: lpFileInformation=0x22a2e60*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x4ac50880, ftCreationTime.dwHighDateTime=0x1d30065, ftLastAccessTime.dwLowDateTime=0x4ac50880, ftLastAccessTime.dwHighDateTime=0x1d30065, ftLastWriteTime.dwLowDateTime=0x4ac50880, ftLastWriteTime.dwHighDateTime=0x1d30065, nFileSizeHigh=0x0, nFileSizeLow=0x1407)) returned 1 [0147.293] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0147.293] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\cf6a15d.jpg", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\cf6a15d.jpg", lpFilePart=0x0) returned 0x56 [0147.293] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0147.294] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\cf6a15d.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\cf6a15d.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22a2fc0 | out: lpFileInformation=0x22a2fc0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x4ac50880, ftCreationTime.dwHighDateTime=0x1d30065, ftLastAccessTime.dwLowDateTime=0x4ac50880, ftLastAccessTime.dwHighDateTime=0x1d30065, ftLastWriteTime.dwLowDateTime=0x4ac50880, ftLastWriteTime.dwHighDateTime=0x1d30065, nFileSizeHigh=0x0, nFileSizeLow=0x1407)) returned 1 [0147.294] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0147.294] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\cf6a15d.jpg", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\cf6a15d.jpg", lpFilePart=0x0) returned 0x56 [0147.294] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0147.294] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\cf6a15d.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\cf6a15d.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0147.294] GetFileType (hFile=0x444) returned 0x1 [0147.294] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0147.294] GetFileType (hFile=0x444) returned 0x1 [0147.295] ReadFile (in: hFile=0x444, lpBuffer=0x22a53b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x22a53b0*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0147.307] CloseHandle (hObject=0x444) returned 1 [0147.307] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\cf6a15d.jpg", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\cf6a15d.jpg", lpFilePart=0x0) returned 0x56 [0147.307] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0147.307] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\cf6a15d.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\cf6a15d.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0147.307] GetFileType (hFile=0x444) returned 0x1 [0147.307] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0147.307] GetFileType (hFile=0x444) returned 0x1 [0147.307] WriteFile (in: hFile=0x444, lpBuffer=0x22a3100*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x22a3100*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0147.308] CloseHandle (hObject=0x444) returned 1 [0147.308] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\cf6a15d.jpg", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\cf6a15d.jpg", lpFilePart=0x0) returned 0x56 [0147.308] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\cf6a15d.jpg.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\cf6a15d.jpg.xuy", lpFilePart=0x0) returned 0x5a [0147.308] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0147.308] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\cf6a15d.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\cf6a15d.jpg"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ac50880, ftCreationTime.dwHighDateTime=0x1d30065, ftLastAccessTime.dwLowDateTime=0x4ac50880, ftLastAccessTime.dwHighDateTime=0x1d30065, ftLastWriteTime.dwLowDateTime=0x43a62dd6, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0147.308] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0147.308] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\cf6a15d.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\cf6a15d.jpg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\cf6a15d.jpg.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\cf6a15d.jpg.xuy")) returned 1 [0147.309] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\da8e59e.jpg", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\da8e59e.jpg", lpFilePart=0x0) returned 0x56 [0147.309] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0147.309] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\da8e59e.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\da8e59e.jpg"), fInfoLevelId=0x0, lpFileInformation=0x23217c0 | out: lpFileInformation=0x23217c0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xa199d180, ftCreationTime.dwHighDateTime=0x1d2d46a, ftLastAccessTime.dwLowDateTime=0xa199d180, ftLastAccessTime.dwHighDateTime=0x1d2d46a, ftLastWriteTime.dwLowDateTime=0xa199d180, ftLastWriteTime.dwHighDateTime=0x1d2d46a, nFileSizeHigh=0x0, nFileSizeLow=0x10c8)) returned 1 [0147.309] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0147.309] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\da8e59e.jpg", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\da8e59e.jpg", lpFilePart=0x0) returned 0x56 [0147.309] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0147.309] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\da8e59e.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\da8e59e.jpg"), fInfoLevelId=0x0, lpFileInformation=0x2321920 | out: lpFileInformation=0x2321920*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xa199d180, ftCreationTime.dwHighDateTime=0x1d2d46a, ftLastAccessTime.dwLowDateTime=0xa199d180, ftLastAccessTime.dwHighDateTime=0x1d2d46a, ftLastWriteTime.dwLowDateTime=0xa199d180, ftLastWriteTime.dwHighDateTime=0x1d2d46a, nFileSizeHigh=0x0, nFileSizeLow=0x10c8)) returned 1 [0147.309] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0147.309] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\da8e59e.jpg", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\da8e59e.jpg", lpFilePart=0x0) returned 0x56 [0147.309] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0147.310] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\da8e59e.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\da8e59e.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0147.310] GetFileType (hFile=0x444) returned 0x1 [0147.310] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0147.310] GetFileType (hFile=0x444) returned 0x1 [0147.310] ReadFile (in: hFile=0x444, lpBuffer=0x2323d10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x2323d10*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0147.370] CloseHandle (hObject=0x444) returned 1 [0147.370] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\da8e59e.jpg", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\da8e59e.jpg", lpFilePart=0x0) returned 0x56 [0147.370] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0147.370] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\da8e59e.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\da8e59e.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0147.371] GetFileType (hFile=0x444) returned 0x1 [0147.371] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0147.371] GetFileType (hFile=0x444) returned 0x1 [0147.371] WriteFile (in: hFile=0x444, lpBuffer=0x2156778*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x2156778*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0147.371] CloseHandle (hObject=0x444) returned 1 [0147.371] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\da8e59e.jpg", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\da8e59e.jpg", lpFilePart=0x0) returned 0x56 [0147.371] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\da8e59e.jpg.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\da8e59e.jpg.xuy", lpFilePart=0x0) returned 0x5a [0147.371] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0147.371] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\da8e59e.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\da8e59e.jpg"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa199d180, ftCreationTime.dwHighDateTime=0x1d2d46a, ftLastAccessTime.dwLowDateTime=0xa199d180, ftLastAccessTime.dwHighDateTime=0x1d2d46a, ftLastWriteTime.dwLowDateTime=0x43afb810, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0147.371] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0147.371] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\da8e59e.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\da8e59e.jpg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\da8e59e.jpg.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\da8e59e.jpg.xuy")) returned 1 [0147.372] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\dab752aa.jpg", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\dab752aa.jpg", lpFilePart=0x0) returned 0x57 [0147.372] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0147.373] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\dab752aa.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\dab752aa.jpg"), fInfoLevelId=0x0, lpFileInformation=0x21a00f8 | out: lpFileInformation=0x21a00f8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xa94ed880, ftCreationTime.dwHighDateTime=0x1d336df, ftLastAccessTime.dwLowDateTime=0xa94ed880, ftLastAccessTime.dwHighDateTime=0x1d336df, ftLastWriteTime.dwLowDateTime=0xa94ed880, ftLastWriteTime.dwHighDateTime=0x1d336df, nFileSizeHigh=0x0, nFileSizeLow=0x1adb)) returned 1 [0147.373] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0147.373] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\dab752aa.jpg", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\dab752aa.jpg", lpFilePart=0x0) returned 0x57 [0147.373] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0147.373] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\dab752aa.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\dab752aa.jpg"), fInfoLevelId=0x0, lpFileInformation=0x21a0260 | out: lpFileInformation=0x21a0260*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xa94ed880, ftCreationTime.dwHighDateTime=0x1d336df, ftLastAccessTime.dwLowDateTime=0xa94ed880, ftLastAccessTime.dwHighDateTime=0x1d336df, ftLastWriteTime.dwLowDateTime=0xa94ed880, ftLastWriteTime.dwHighDateTime=0x1d336df, nFileSizeHigh=0x0, nFileSizeLow=0x1adb)) returned 1 [0147.373] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0147.373] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\dab752aa.jpg", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\dab752aa.jpg", lpFilePart=0x0) returned 0x57 [0147.373] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0147.373] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\dab752aa.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\dab752aa.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0147.374] GetFileType (hFile=0x444) returned 0x1 [0147.374] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0147.374] GetFileType (hFile=0x444) returned 0x1 [0147.374] ReadFile (in: hFile=0x444, lpBuffer=0x21a2660, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x21a2660*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0147.396] CloseHandle (hObject=0x444) returned 1 [0147.396] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\dab752aa.jpg", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\dab752aa.jpg", lpFilePart=0x0) returned 0x57 [0147.396] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0147.396] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\dab752aa.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\dab752aa.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0147.396] GetFileType (hFile=0x444) returned 0x1 [0147.396] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0147.396] GetFileType (hFile=0x444) returned 0x1 [0147.396] WriteFile (in: hFile=0x444, lpBuffer=0x21a03a8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x21a03a8*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0147.397] CloseHandle (hObject=0x444) returned 1 [0147.397] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\dab752aa.jpg", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\dab752aa.jpg", lpFilePart=0x0) returned 0x57 [0147.397] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\dab752aa.jpg.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\dab752aa.jpg.xuy", lpFilePart=0x0) returned 0x5b [0147.397] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0147.397] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\dab752aa.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\dab752aa.jpg"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa94ed880, ftCreationTime.dwHighDateTime=0x1d336df, ftLastAccessTime.dwLowDateTime=0xa94ed880, ftLastAccessTime.dwHighDateTime=0x1d336df, ftLastWriteTime.dwLowDateTime=0x43b47c96, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0147.397] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0147.397] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\dab752aa.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\dab752aa.jpg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\dab752aa.jpg.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\dab752aa.jpg.xuy")) returned 1 [0147.398] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f466753.jpg", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f466753.jpg", lpFilePart=0x0) returned 0x56 [0147.398] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0147.398] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f466753.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\f466753.jpg"), fInfoLevelId=0x0, lpFileInformation=0x221ea78 | out: lpFileInformation=0x221ea78*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5dfe9200, ftCreationTime.dwHighDateTime=0x1d2d481, ftLastAccessTime.dwLowDateTime=0x5dfe9200, ftLastAccessTime.dwHighDateTime=0x1d2d481, ftLastWriteTime.dwLowDateTime=0x5dfe9200, ftLastWriteTime.dwHighDateTime=0x1d2d481, nFileSizeHigh=0x0, nFileSizeLow=0x163f)) returned 1 [0147.398] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0147.399] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f466753.jpg", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f466753.jpg", lpFilePart=0x0) returned 0x56 [0147.399] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0147.399] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f466753.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\f466753.jpg"), fInfoLevelId=0x0, lpFileInformation=0x221ebd8 | out: lpFileInformation=0x221ebd8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5dfe9200, ftCreationTime.dwHighDateTime=0x1d2d481, ftLastAccessTime.dwLowDateTime=0x5dfe9200, ftLastAccessTime.dwHighDateTime=0x1d2d481, ftLastWriteTime.dwLowDateTime=0x5dfe9200, ftLastWriteTime.dwHighDateTime=0x1d2d481, nFileSizeHigh=0x0, nFileSizeLow=0x163f)) returned 1 [0147.399] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0147.399] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f466753.jpg", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f466753.jpg", lpFilePart=0x0) returned 0x56 [0147.399] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0147.399] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f466753.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\f466753.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0147.400] GetFileType (hFile=0x444) returned 0x1 [0147.400] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0147.400] GetFileType (hFile=0x444) returned 0x1 [0147.400] ReadFile (in: hFile=0x444, lpBuffer=0x2220fc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x2220fc8*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0147.435] CloseHandle (hObject=0x444) returned 1 [0147.435] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f466753.jpg", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f466753.jpg", lpFilePart=0x0) returned 0x56 [0147.435] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0147.435] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f466753.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\f466753.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0147.435] GetFileType (hFile=0x444) returned 0x1 [0147.435] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0147.435] GetFileType (hFile=0x444) returned 0x1 [0147.435] WriteFile (in: hFile=0x444, lpBuffer=0x221ed18*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x221ed18*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0147.436] CloseHandle (hObject=0x444) returned 1 [0147.436] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f466753.jpg", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f466753.jpg", lpFilePart=0x0) returned 0x56 [0147.436] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f466753.jpg.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f466753.jpg.xuy", lpFilePart=0x0) returned 0x5a [0147.436] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0147.436] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f466753.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\f466753.jpg"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dfe9200, ftCreationTime.dwHighDateTime=0x1d2d481, ftLastAccessTime.dwLowDateTime=0x5dfe9200, ftLastAccessTime.dwHighDateTime=0x1d2d481, ftLastWriteTime.dwLowDateTime=0x43b93ff8, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0147.436] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0147.436] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f466753.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\f466753.jpg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f466753.jpg.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\f466753.jpg.xuy")) returned 1 [0147.437] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f4b839c7.jpg", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f4b839c7.jpg", lpFilePart=0x0) returned 0x57 [0147.437] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0147.437] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f4b839c7.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\f4b839c7.jpg"), fInfoLevelId=0x0, lpFileInformation=0x229d3d8 | out: lpFileInformation=0x229d3d8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5919ee00, ftCreationTime.dwHighDateTime=0x1d2d441, ftLastAccessTime.dwLowDateTime=0x5919ee00, ftLastAccessTime.dwHighDateTime=0x1d2d441, ftLastWriteTime.dwLowDateTime=0x5919ee00, ftLastWriteTime.dwHighDateTime=0x1d2d441, nFileSizeHigh=0x0, nFileSizeLow=0x160f)) returned 1 [0147.437] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0147.437] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f4b839c7.jpg", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f4b839c7.jpg", lpFilePart=0x0) returned 0x57 [0147.437] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0147.437] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f4b839c7.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\f4b839c7.jpg"), fInfoLevelId=0x0, lpFileInformation=0x229d540 | out: lpFileInformation=0x229d540*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5919ee00, ftCreationTime.dwHighDateTime=0x1d2d441, ftLastAccessTime.dwLowDateTime=0x5919ee00, ftLastAccessTime.dwHighDateTime=0x1d2d441, ftLastWriteTime.dwLowDateTime=0x5919ee00, ftLastWriteTime.dwHighDateTime=0x1d2d441, nFileSizeHigh=0x0, nFileSizeLow=0x160f)) returned 1 [0147.438] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0147.438] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f4b839c7.jpg", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f4b839c7.jpg", lpFilePart=0x0) returned 0x57 [0147.438] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0147.438] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f4b839c7.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\f4b839c7.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0147.438] GetFileType (hFile=0x444) returned 0x1 [0147.438] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0147.439] GetFileType (hFile=0x444) returned 0x1 [0147.439] ReadFile (in: hFile=0x444, lpBuffer=0x229f940, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x229f940*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0147.460] CloseHandle (hObject=0x444) returned 1 [0147.460] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f4b839c7.jpg", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f4b839c7.jpg", lpFilePart=0x0) returned 0x57 [0147.460] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0147.460] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f4b839c7.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\f4b839c7.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0147.461] GetFileType (hFile=0x444) returned 0x1 [0147.461] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0147.461] GetFileType (hFile=0x444) returned 0x1 [0147.461] WriteFile (in: hFile=0x444, lpBuffer=0x229d688*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x229d688*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0147.461] CloseHandle (hObject=0x444) returned 1 [0147.461] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f4b839c7.jpg", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f4b839c7.jpg", lpFilePart=0x0) returned 0x57 [0147.461] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f4b839c7.jpg.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f4b839c7.jpg.xuy", lpFilePart=0x0) returned 0x5b [0147.461] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0147.461] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f4b839c7.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\f4b839c7.jpg"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5919ee00, ftCreationTime.dwHighDateTime=0x1d2d441, ftLastAccessTime.dwLowDateTime=0x5919ee00, ftLastAccessTime.dwHighDateTime=0x1d2d441, ftLastWriteTime.dwLowDateTime=0x43be05a9, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0147.461] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0147.461] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f4b839c7.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\f4b839c7.jpg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f4b839c7.jpg.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\f4b839c7.jpg.xuy")) returned 1 [0147.462] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f67a62c3.jpg", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f67a62c3.jpg", lpFilePart=0x0) returned 0x57 [0147.462] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0147.462] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f67a62c3.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\f67a62c3.jpg"), fInfoLevelId=0x0, lpFileInformation=0x231bd58 | out: lpFileInformation=0x231bd58*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x8de12200, ftCreationTime.dwHighDateTime=0x1d2fb21, ftLastAccessTime.dwLowDateTime=0x8de12200, ftLastAccessTime.dwHighDateTime=0x1d2fb21, ftLastWriteTime.dwLowDateTime=0x8de12200, ftLastWriteTime.dwHighDateTime=0x1d2fb21, nFileSizeHigh=0x0, nFileSizeLow=0x1ad9)) returned 1 [0147.462] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0147.462] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f67a62c3.jpg", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f67a62c3.jpg", lpFilePart=0x0) returned 0x57 [0147.463] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0147.463] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f67a62c3.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\f67a62c3.jpg"), fInfoLevelId=0x0, lpFileInformation=0x231bec0 | out: lpFileInformation=0x231bec0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x8de12200, ftCreationTime.dwHighDateTime=0x1d2fb21, ftLastAccessTime.dwLowDateTime=0x8de12200, ftLastAccessTime.dwHighDateTime=0x1d2fb21, ftLastWriteTime.dwLowDateTime=0x8de12200, ftLastWriteTime.dwHighDateTime=0x1d2fb21, nFileSizeHigh=0x0, nFileSizeLow=0x1ad9)) returned 1 [0147.463] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0147.463] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f67a62c3.jpg", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f67a62c3.jpg", lpFilePart=0x0) returned 0x57 [0147.463] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0147.463] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f67a62c3.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\f67a62c3.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0147.464] GetFileType (hFile=0x444) returned 0x1 [0147.464] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0147.464] GetFileType (hFile=0x444) returned 0x1 [0147.464] ReadFile (in: hFile=0x444, lpBuffer=0x231e2c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x231e2c0*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0147.578] CloseHandle (hObject=0x444) returned 1 [0147.578] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f67a62c3.jpg", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f67a62c3.jpg", lpFilePart=0x0) returned 0x57 [0147.578] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0147.579] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f67a62c3.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\f67a62c3.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0147.579] GetFileType (hFile=0x444) returned 0x1 [0147.579] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0147.579] GetFileType (hFile=0x444) returned 0x1 [0147.579] WriteFile (in: hFile=0x444, lpBuffer=0x2156778*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x2156778*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0147.579] CloseHandle (hObject=0x444) returned 1 [0147.579] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f67a62c3.jpg", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f67a62c3.jpg", lpFilePart=0x0) returned 0x57 [0147.579] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f67a62c3.jpg.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f67a62c3.jpg.xuy", lpFilePart=0x0) returned 0x5b [0147.579] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0147.579] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f67a62c3.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\f67a62c3.jpg"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8de12200, ftCreationTime.dwHighDateTime=0x1d2fb21, ftLastAccessTime.dwLowDateTime=0x8de12200, ftLastAccessTime.dwHighDateTime=0x1d2fb21, ftLastWriteTime.dwLowDateTime=0x43ceb60f, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0147.579] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0147.580] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f67a62c3.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\f67a62c3.jpg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f67a62c3.jpg.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\f67a62c3.jpg.xuy")) returned 1 [0147.581] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f76d6757.jpg", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f76d6757.jpg", lpFilePart=0x0) returned 0x57 [0147.581] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0147.581] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f76d6757.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\f76d6757.jpg"), fInfoLevelId=0x0, lpFileInformation=0x219a6c0 | out: lpFileInformation=0x219a6c0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xa1023d80, ftCreationTime.dwHighDateTime=0x1d008f6, ftLastAccessTime.dwLowDateTime=0xa1023d80, ftLastAccessTime.dwHighDateTime=0x1d008f6, ftLastWriteTime.dwLowDateTime=0xa1023d80, ftLastWriteTime.dwHighDateTime=0x1d008f6, nFileSizeHigh=0x0, nFileSizeLow=0x1358)) returned 1 [0147.582] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0147.582] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f76d6757.jpg", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f76d6757.jpg", lpFilePart=0x0) returned 0x57 [0147.582] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0147.582] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f76d6757.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\f76d6757.jpg"), fInfoLevelId=0x0, lpFileInformation=0x219a828 | out: lpFileInformation=0x219a828*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xa1023d80, ftCreationTime.dwHighDateTime=0x1d008f6, ftLastAccessTime.dwLowDateTime=0xa1023d80, ftLastAccessTime.dwHighDateTime=0x1d008f6, ftLastWriteTime.dwLowDateTime=0xa1023d80, ftLastWriteTime.dwHighDateTime=0x1d008f6, nFileSizeHigh=0x0, nFileSizeLow=0x1358)) returned 1 [0147.582] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0147.582] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f76d6757.jpg", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f76d6757.jpg", lpFilePart=0x0) returned 0x57 [0147.582] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0147.582] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f76d6757.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\f76d6757.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0147.583] GetFileType (hFile=0x444) returned 0x1 [0147.583] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0147.583] GetFileType (hFile=0x444) returned 0x1 [0147.583] ReadFile (in: hFile=0x444, lpBuffer=0x219cc28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x219cc28*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0147.603] CloseHandle (hObject=0x444) returned 1 [0147.603] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f76d6757.jpg", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f76d6757.jpg", lpFilePart=0x0) returned 0x57 [0147.604] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0147.604] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f76d6757.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\f76d6757.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0147.604] GetFileType (hFile=0x444) returned 0x1 [0147.604] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0147.604] GetFileType (hFile=0x444) returned 0x1 [0147.604] WriteFile (in: hFile=0x444, lpBuffer=0x219a970*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x219a970*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0147.604] CloseHandle (hObject=0x444) returned 1 [0147.604] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f76d6757.jpg", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f76d6757.jpg", lpFilePart=0x0) returned 0x57 [0147.604] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f76d6757.jpg.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f76d6757.jpg.xuy", lpFilePart=0x0) returned 0x5b [0147.604] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0147.604] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f76d6757.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\f76d6757.jpg"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1023d80, ftCreationTime.dwHighDateTime=0x1d008f6, ftLastAccessTime.dwLowDateTime=0xa1023d80, ftLastAccessTime.dwHighDateTime=0x1d008f6, ftLastWriteTime.dwLowDateTime=0x43d37dc9, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0147.604] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0147.605] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f76d6757.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\f76d6757.jpg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f76d6757.jpg.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\f76d6757.jpg.xuy")) returned 1 [0147.606] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f7f275e5.jpg", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f7f275e5.jpg", lpFilePart=0x0) returned 0x57 [0147.606] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0147.606] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f7f275e5.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\f7f275e5.jpg"), fInfoLevelId=0x0, lpFileInformation=0x2219040 | out: lpFileInformation=0x2219040*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xdf209e00, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xdf209e00, ftLastAccessTime.dwHighDateTime=0x1d30212, ftLastWriteTime.dwLowDateTime=0xdf209e00, ftLastWriteTime.dwHighDateTime=0x1d30212, nFileSizeHigh=0x0, nFileSizeLow=0x1b2b)) returned 1 [0147.606] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0147.606] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f7f275e5.jpg", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f7f275e5.jpg", lpFilePart=0x0) returned 0x57 [0147.606] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0147.606] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f7f275e5.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\f7f275e5.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22191a8 | out: lpFileInformation=0x22191a8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xdf209e00, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xdf209e00, ftLastAccessTime.dwHighDateTime=0x1d30212, ftLastWriteTime.dwLowDateTime=0xdf209e00, ftLastWriteTime.dwHighDateTime=0x1d30212, nFileSizeHigh=0x0, nFileSizeLow=0x1b2b)) returned 1 [0147.606] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0147.606] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f7f275e5.jpg", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f7f275e5.jpg", lpFilePart=0x0) returned 0x57 [0147.606] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0147.606] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f7f275e5.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\f7f275e5.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0147.607] GetFileType (hFile=0x444) returned 0x1 [0147.607] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0147.607] GetFileType (hFile=0x444) returned 0x1 [0147.607] ReadFile (in: hFile=0x444, lpBuffer=0x221b5a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x221b5a8*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0147.763] CloseHandle (hObject=0x444) returned 1 [0147.778] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f7f275e5.jpg", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f7f275e5.jpg", lpFilePart=0x0) returned 0x57 [0147.778] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0147.778] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f7f275e5.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\f7f275e5.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0147.779] GetFileType (hFile=0x444) returned 0x1 [0147.779] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0147.779] GetFileType (hFile=0x444) returned 0x1 [0147.779] WriteFile (in: hFile=0x444, lpBuffer=0x22192f0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x22192f0*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0147.779] CloseHandle (hObject=0x444) returned 1 [0147.779] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f7f275e5.jpg", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f7f275e5.jpg", lpFilePart=0x0) returned 0x57 [0147.779] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f7f275e5.jpg.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f7f275e5.jpg.xuy", lpFilePart=0x0) returned 0x5b [0147.779] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0147.779] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f7f275e5.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\f7f275e5.jpg"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf209e00, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xdf209e00, ftLastAccessTime.dwHighDateTime=0x1d30212, ftLastWriteTime.dwLowDateTime=0x43edea61, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0147.779] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0147.779] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f7f275e5.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\f7f275e5.jpg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f7f275e5.jpg.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\f7f275e5.jpg.xuy")) returned 1 [0147.794] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\fb970b75.jpg", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\fb970b75.jpg", lpFilePart=0x0) returned 0x57 [0147.794] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0147.794] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\fb970b75.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\fb970b75.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22979c0 | out: lpFileInformation=0x22979c0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9f387a00, ftCreationTime.dwHighDateTime=0x1d008f6, ftLastAccessTime.dwLowDateTime=0x9f387a00, ftLastAccessTime.dwHighDateTime=0x1d008f6, ftLastWriteTime.dwLowDateTime=0x9f387a00, ftLastWriteTime.dwHighDateTime=0x1d008f6, nFileSizeHigh=0x0, nFileSizeLow=0x24e3)) returned 1 [0147.794] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0147.794] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\fb970b75.jpg", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\fb970b75.jpg", lpFilePart=0x0) returned 0x57 [0147.794] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0147.794] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\fb970b75.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\fb970b75.jpg"), fInfoLevelId=0x0, lpFileInformation=0x2297b28 | out: lpFileInformation=0x2297b28*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9f387a00, ftCreationTime.dwHighDateTime=0x1d008f6, ftLastAccessTime.dwLowDateTime=0x9f387a00, ftLastAccessTime.dwHighDateTime=0x1d008f6, ftLastWriteTime.dwLowDateTime=0x9f387a00, ftLastWriteTime.dwHighDateTime=0x1d008f6, nFileSizeHigh=0x0, nFileSizeLow=0x24e3)) returned 1 [0147.794] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0147.794] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\fb970b75.jpg", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\fb970b75.jpg", lpFilePart=0x0) returned 0x57 [0147.795] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0147.795] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\fb970b75.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\fb970b75.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0147.795] GetFileType (hFile=0x444) returned 0x1 [0147.795] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0147.795] GetFileType (hFile=0x444) returned 0x1 [0147.795] ReadFile (in: hFile=0x444, lpBuffer=0x2299f28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x2299f28*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0147.823] CloseHandle (hObject=0x444) returned 1 [0147.823] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\fb970b75.jpg", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\fb970b75.jpg", lpFilePart=0x0) returned 0x57 [0147.823] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0147.823] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\fb970b75.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\fb970b75.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0147.823] GetFileType (hFile=0x444) returned 0x1 [0147.823] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0147.823] GetFileType (hFile=0x444) returned 0x1 [0147.823] WriteFile (in: hFile=0x444, lpBuffer=0x2297c70*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x2297c70*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0147.823] CloseHandle (hObject=0x444) returned 1 [0147.824] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\fb970b75.jpg", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\fb970b75.jpg", lpFilePart=0x0) returned 0x57 [0147.824] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\fb970b75.jpg.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\fb970b75.jpg.xuy", lpFilePart=0x0) returned 0x5b [0147.824] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0147.824] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\fb970b75.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\fb970b75.jpg"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f387a00, ftCreationTime.dwHighDateTime=0x1d008f6, ftLastAccessTime.dwLowDateTime=0x9f387a00, ftLastAccessTime.dwHighDateTime=0x1d008f6, ftLastWriteTime.dwLowDateTime=0x43f4dac8, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x24e3)) returned 1 [0147.824] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0147.824] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\fb970b75.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\fb970b75.jpg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\fb970b75.jpg.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\fb970b75.jpg.xuy")) returned 1 [0147.825] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0147.825] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell", lpFilePart=0x0) returned 0x40 [0147.825] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\", lpFilePart=0x0) returned 0x41 [0147.825] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7670 [0147.825] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0147.825] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0147.826] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0147.826] FindClose (in: hFindFile=0x5d7670 | out: hFindFile=0x5d7670) returned 1 [0147.826] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0147.826] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0147.826] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0147.826] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell", lpFilePart=0x0) returned 0x40 [0147.826] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\", lpFilePart=0x0) returned 0x41 [0147.826] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7550 [0147.826] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0147.826] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0147.826] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0147.827] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0147.827] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0147.827] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0147.827] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0147.827] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis", lpFilePart=0x0) returned 0x50 [0147.827] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\", lpFilePart=0x0) returned 0x51 [0147.827] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7df0 [0147.834] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0147.834] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0147.834] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0147.834] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0147.834] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0147.834] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0147.835] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0147.835] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0147.835] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0147.835] FindClose (in: hFindFile=0x5d7df0 | out: hFindFile=0x5d7df0) returned 1 [0147.836] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0147.836] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0147.836] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0147.836] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis", lpFilePart=0x0) returned 0x50 [0147.836] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\", lpFilePart=0x0) returned 0x51 [0147.836] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d8090 [0147.837] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0147.837] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0147.837] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0147.837] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0147.837] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0147.837] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0147.837] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0147.837] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0147.838] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0147.838] FindClose (in: hFindFile=0x5d8090 | out: hFindFile=0x5d8090) returned 1 [0147.838] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0147.838] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0147.838] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_06f90924-1e5d-474b-ba1f-65c4b5caf36a", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_06f90924-1e5d-474b-ba1f-65c4b5caf36a", lpFilePart=0x0) returned 0x93 [0147.838] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0147.838] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_06f90924-1e5d-474b-ba1f-65c4b5caf36a" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\powershell\\commandanalysis\\powershell_analysiscacheentry_06f90924-1e5d-474b-ba1f-65c4b5caf36a"), fInfoLevelId=0x0, lpFileInformation=0x231cff0 | out: lpFileInformation=0x231cff0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ccbf1f5, ftCreationTime.dwHighDateTime=0x1d2fc25, ftLastAccessTime.dwLowDateTime=0x2ccbf1f5, ftLastAccessTime.dwHighDateTime=0x1d2fc25, ftLastWriteTime.dwLowDateTime=0xd3fd7177, ftLastWriteTime.dwHighDateTime=0x1d41fdc, nFileSizeHigh=0x0, nFileSizeLow=0x155)) returned 1 [0147.839] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0147.839] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_06f90924-1e5d-474b-ba1f-65c4b5caf36a", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_06f90924-1e5d-474b-ba1f-65c4b5caf36a", lpFilePart=0x0) returned 0x93 [0147.839] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0147.839] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_06f90924-1e5d-474b-ba1f-65c4b5caf36a" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\powershell\\commandanalysis\\powershell_analysiscacheentry_06f90924-1e5d-474b-ba1f-65c4b5caf36a"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0147.839] GetFileType (hFile=0x444) returned 0x1 [0147.839] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0147.839] GetFileType (hFile=0x444) returned 0x1 [0147.839] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x155 [0147.840] ReadFile (in: hFile=0x444, lpBuffer=0x231d5f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x231d5f0*, lpNumberOfBytesRead=0x3be6a8*=0x155, lpOverlapped=0x0) returned 1 [0147.840] CloseHandle (hObject=0x444) returned 1 [0147.883] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_06f90924-1e5d-474b-ba1f-65c4b5caf36a", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_06f90924-1e5d-474b-ba1f-65c4b5caf36a", lpFilePart=0x0) returned 0x93 [0147.883] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0147.883] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_06f90924-1e5d-474b-ba1f-65c4b5caf36a" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\powershell\\commandanalysis\\powershell_analysiscacheentry_06f90924-1e5d-474b-ba1f-65c4b5caf36a"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0147.885] GetFileType (hFile=0x444) returned 0x1 [0147.885] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0147.885] GetFileType (hFile=0x444) returned 0x1 [0147.885] WriteFile (in: hFile=0x444, lpBuffer=0x216ed70*, nNumberOfBytesToWrite=0x160, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x216ed70*, lpNumberOfBytesWritten=0x3be5b8*=0x160, lpOverlapped=0x0) returned 1 [0147.886] CloseHandle (hObject=0x444) returned 1 [0147.886] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_06f90924-1e5d-474b-ba1f-65c4b5caf36a", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_06f90924-1e5d-474b-ba1f-65c4b5caf36a", lpFilePart=0x0) returned 0x93 [0147.886] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_06f90924-1e5d-474b-ba1f-65c4b5caf36a.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_06f90924-1e5d-474b-ba1f-65c4b5caf36a.xuy", lpFilePart=0x0) returned 0x97 [0147.886] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0147.886] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_06f90924-1e5d-474b-ba1f-65c4b5caf36a" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\powershell\\commandanalysis\\powershell_analysiscacheentry_06f90924-1e5d-474b-ba1f-65c4b5caf36a"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ccbf1f5, ftCreationTime.dwHighDateTime=0x1d2fc25, ftLastAccessTime.dwLowDateTime=0x2ccbf1f5, ftLastAccessTime.dwHighDateTime=0x1d2fc25, ftLastWriteTime.dwLowDateTime=0x43fe6548, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x160)) returned 1 [0147.886] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0147.886] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_06f90924-1e5d-474b-ba1f-65c4b5caf36a" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\powershell\\commandanalysis\\powershell_analysiscacheentry_06f90924-1e5d-474b-ba1f-65c4b5caf36a"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_06f90924-1e5d-474b-ba1f-65c4b5caf36a.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\powershell\\commandanalysis\\powershell_analysiscacheentry_06f90924-1e5d-474b-ba1f-65c4b5caf36a.xuy")) returned 1 [0147.887] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_6e1b9325-f1be-48ba-a974-ab12f8ee0c5d", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_6e1b9325-f1be-48ba-a974-ab12f8ee0c5d", lpFilePart=0x0) returned 0x93 [0147.887] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0147.887] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_6e1b9325-f1be-48ba-a974-ab12f8ee0c5d" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\powershell\\commandanalysis\\powershell_analysiscacheentry_6e1b9325-f1be-48ba-a974-ab12f8ee0c5d"), fInfoLevelId=0x0, lpFileInformation=0x2170178 | out: lpFileInformation=0x2170178*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27a57c84, ftCreationTime.dwHighDateTime=0x1d2fc25, ftLastAccessTime.dwLowDateTime=0x27a57c84, ftLastAccessTime.dwHighDateTime=0x1d2fc25, ftLastWriteTime.dwLowDateTime=0xd3ef233a, ftLastWriteTime.dwHighDateTime=0x1d41fdc, nFileSizeHigh=0x0, nFileSizeLow=0x3e3)) returned 1 [0147.888] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0147.888] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_6e1b9325-f1be-48ba-a974-ab12f8ee0c5d", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_6e1b9325-f1be-48ba-a974-ab12f8ee0c5d", lpFilePart=0x0) returned 0x93 [0147.888] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0147.888] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_6e1b9325-f1be-48ba-a974-ab12f8ee0c5d" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\powershell\\commandanalysis\\powershell_analysiscacheentry_6e1b9325-f1be-48ba-a974-ab12f8ee0c5d"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0147.888] GetFileType (hFile=0x444) returned 0x1 [0147.888] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0147.888] GetFileType (hFile=0x444) returned 0x1 [0147.888] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x3e3 [0147.888] ReadFile (in: hFile=0x444, lpBuffer=0x2170a08, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x2170a08*, lpNumberOfBytesRead=0x3be6a8*=0x3e3, lpOverlapped=0x0) returned 1 [0147.950] CloseHandle (hObject=0x444) returned 1 [0147.961] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_6e1b9325-f1be-48ba-a974-ab12f8ee0c5d", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_6e1b9325-f1be-48ba-a974-ab12f8ee0c5d", lpFilePart=0x0) returned 0x93 [0147.961] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0147.961] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_6e1b9325-f1be-48ba-a974-ab12f8ee0c5d" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\powershell\\commandanalysis\\powershell_analysiscacheentry_6e1b9325-f1be-48ba-a974-ab12f8ee0c5d"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0147.963] GetFileType (hFile=0x444) returned 0x1 [0147.963] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0147.963] GetFileType (hFile=0x444) returned 0x1 [0147.963] WriteFile (in: hFile=0x444, lpBuffer=0x21e8e98*, nNumberOfBytesToWrite=0x3f0, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x21e8e98*, lpNumberOfBytesWritten=0x3be5b8*=0x3f0, lpOverlapped=0x0) returned 1 [0147.964] CloseHandle (hObject=0x444) returned 1 [0147.964] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_6e1b9325-f1be-48ba-a974-ab12f8ee0c5d", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_6e1b9325-f1be-48ba-a974-ab12f8ee0c5d", lpFilePart=0x0) returned 0x93 [0147.964] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_6e1b9325-f1be-48ba-a974-ab12f8ee0c5d.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_6e1b9325-f1be-48ba-a974-ab12f8ee0c5d.xuy", lpFilePart=0x0) returned 0x97 [0147.964] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0147.964] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_6e1b9325-f1be-48ba-a974-ab12f8ee0c5d" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\powershell\\commandanalysis\\powershell_analysiscacheentry_6e1b9325-f1be-48ba-a974-ab12f8ee0c5d"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27a57c84, ftCreationTime.dwHighDateTime=0x1d2fc25, ftLastAccessTime.dwLowDateTime=0x27a57c84, ftLastAccessTime.dwHighDateTime=0x1d2fc25, ftLastWriteTime.dwLowDateTime=0x440a53f0, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x3f0)) returned 1 [0147.964] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0147.964] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_6e1b9325-f1be-48ba-a974-ab12f8ee0c5d" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\powershell\\commandanalysis\\powershell_analysiscacheentry_6e1b9325-f1be-48ba-a974-ab12f8ee0c5d"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_6e1b9325-f1be-48ba-a974-ab12f8ee0c5d.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\powershell\\commandanalysis\\powershell_analysiscacheentry_6e1b9325-f1be-48ba-a974-ab12f8ee0c5d.xuy")) returned 1 [0147.965] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_85525a38-be22-4966-b0fc-b808e4124a0f", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_85525a38-be22-4966-b0fc-b808e4124a0f", lpFilePart=0x0) returned 0x93 [0147.965] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0147.966] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_85525a38-be22-4966-b0fc-b808e4124a0f" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\powershell\\commandanalysis\\powershell_analysiscacheentry_85525a38-be22-4966-b0fc-b808e4124a0f"), fInfoLevelId=0x0, lpFileInformation=0x21ea2a0 | out: lpFileInformation=0x21ea2a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27c93f3d, ftCreationTime.dwHighDateTime=0x1d2fc25, ftLastAccessTime.dwLowDateTime=0x27c93f3d, ftLastAccessTime.dwHighDateTime=0x1d2fc25, ftLastWriteTime.dwLowDateTime=0xd3ef233a, ftLastWriteTime.dwHighDateTime=0x1d41fdc, nFileSizeHigh=0x0, nFileSizeLow=0x46af)) returned 1 [0147.966] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0147.966] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_85525a38-be22-4966-b0fc-b808e4124a0f", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_85525a38-be22-4966-b0fc-b808e4124a0f", lpFilePart=0x0) returned 0x93 [0147.966] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0147.966] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_85525a38-be22-4966-b0fc-b808e4124a0f" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\powershell\\commandanalysis\\powershell_analysiscacheentry_85525a38-be22-4966-b0fc-b808e4124a0f"), fInfoLevelId=0x0, lpFileInformation=0x21ea4e8 | out: lpFileInformation=0x21ea4e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27c93f3d, ftCreationTime.dwHighDateTime=0x1d2fc25, ftLastAccessTime.dwLowDateTime=0x27c93f3d, ftLastAccessTime.dwHighDateTime=0x1d2fc25, ftLastWriteTime.dwLowDateTime=0xd3ef233a, ftLastWriteTime.dwHighDateTime=0x1d41fdc, nFileSizeHigh=0x0, nFileSizeLow=0x46af)) returned 1 [0147.966] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0147.966] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_85525a38-be22-4966-b0fc-b808e4124a0f", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_85525a38-be22-4966-b0fc-b808e4124a0f", lpFilePart=0x0) returned 0x93 [0147.966] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0147.966] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_85525a38-be22-4966-b0fc-b808e4124a0f" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\powershell\\commandanalysis\\powershell_analysiscacheentry_85525a38-be22-4966-b0fc-b808e4124a0f"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0147.967] GetFileType (hFile=0x444) returned 0x1 [0147.967] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0147.967] GetFileType (hFile=0x444) returned 0x1 [0147.967] ReadFile (in: hFile=0x444, lpBuffer=0x21ecaa8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x21ecaa8*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0147.979] CloseHandle (hObject=0x444) returned 1 [0147.979] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_85525a38-be22-4966-b0fc-b808e4124a0f", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_85525a38-be22-4966-b0fc-b808e4124a0f", lpFilePart=0x0) returned 0x93 [0147.979] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0147.979] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_85525a38-be22-4966-b0fc-b808e4124a0f" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\powershell\\commandanalysis\\powershell_analysiscacheentry_85525a38-be22-4966-b0fc-b808e4124a0f"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0147.980] GetFileType (hFile=0x444) returned 0x1 [0147.980] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0147.980] GetFileType (hFile=0x444) returned 0x1 [0147.980] WriteFile (in: hFile=0x444, lpBuffer=0x21ea710*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x21ea710*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0147.980] CloseHandle (hObject=0x444) returned 1 [0147.980] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_85525a38-be22-4966-b0fc-b808e4124a0f", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_85525a38-be22-4966-b0fc-b808e4124a0f", lpFilePart=0x0) returned 0x93 [0147.980] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_85525a38-be22-4966-b0fc-b808e4124a0f.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_85525a38-be22-4966-b0fc-b808e4124a0f.xuy", lpFilePart=0x0) returned 0x97 [0147.980] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0147.980] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_85525a38-be22-4966-b0fc-b808e4124a0f" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\powershell\\commandanalysis\\powershell_analysiscacheentry_85525a38-be22-4966-b0fc-b808e4124a0f"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27c93f3d, ftCreationTime.dwHighDateTime=0x1d2fc25, ftLastAccessTime.dwLowDateTime=0x27c93f3d, ftLastAccessTime.dwHighDateTime=0x1d2fc25, ftLastWriteTime.dwLowDateTime=0x440cb23d, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x46af)) returned 1 [0147.980] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0147.980] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_85525a38-be22-4966-b0fc-b808e4124a0f" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\powershell\\commandanalysis\\powershell_analysiscacheentry_85525a38-be22-4966-b0fc-b808e4124a0f"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_85525a38-be22-4966-b0fc-b808e4124a0f.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\powershell\\commandanalysis\\powershell_analysiscacheentry_85525a38-be22-4966-b0fc-b808e4124a0f.xuy")) returned 1 [0147.981] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_bd7521a2-be87-486f-928a-80ffca5b0219", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_bd7521a2-be87-486f-928a-80ffca5b0219", lpFilePart=0x0) returned 0x93 [0147.982] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0147.982] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_bd7521a2-be87-486f-928a-80ffca5b0219" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\powershell\\commandanalysis\\powershell_analysiscacheentry_bd7521a2-be87-486f-928a-80ffca5b0219"), fInfoLevelId=0x0, lpFileInformation=0x22690e0 | out: lpFileInformation=0x22690e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2cc98f96, ftCreationTime.dwHighDateTime=0x1d2fc25, ftLastAccessTime.dwLowDateTime=0x2cc98f96, ftLastAccessTime.dwHighDateTime=0x1d2fc25, ftLastWriteTime.dwLowDateTime=0xd3fd7177, ftLastWriteTime.dwHighDateTime=0x1d41fdc, nFileSizeHigh=0x0, nFileSizeLow=0x155)) returned 1 [0147.982] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0147.982] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_bd7521a2-be87-486f-928a-80ffca5b0219", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_bd7521a2-be87-486f-928a-80ffca5b0219", lpFilePart=0x0) returned 0x93 [0147.982] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0147.982] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_bd7521a2-be87-486f-928a-80ffca5b0219" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\powershell\\commandanalysis\\powershell_analysiscacheentry_bd7521a2-be87-486f-928a-80ffca5b0219"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0147.982] GetFileType (hFile=0x444) returned 0x1 [0147.982] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0147.982] GetFileType (hFile=0x444) returned 0x1 [0147.982] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x155 [0147.982] ReadFile (in: hFile=0x444, lpBuffer=0x22696e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x22696e0*, lpNumberOfBytesRead=0x3be6a8*=0x155, lpOverlapped=0x0) returned 1 [0147.983] CloseHandle (hObject=0x444) returned 1 [0147.994] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_bd7521a2-be87-486f-928a-80ffca5b0219", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_bd7521a2-be87-486f-928a-80ffca5b0219", lpFilePart=0x0) returned 0x93 [0147.994] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0147.994] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_bd7521a2-be87-486f-928a-80ffca5b0219" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\powershell\\commandanalysis\\powershell_analysiscacheentry_bd7521a2-be87-486f-928a-80ffca5b0219"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0147.996] GetFileType (hFile=0x444) returned 0x1 [0147.996] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0147.996] GetFileType (hFile=0x444) returned 0x1 [0147.996] WriteFile (in: hFile=0x444, lpBuffer=0x22e0ea0*, nNumberOfBytesToWrite=0x160, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x22e0ea0*, lpNumberOfBytesWritten=0x3be5b8*=0x160, lpOverlapped=0x0) returned 1 [0147.996] CloseHandle (hObject=0x444) returned 1 [0147.997] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_bd7521a2-be87-486f-928a-80ffca5b0219", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_bd7521a2-be87-486f-928a-80ffca5b0219", lpFilePart=0x0) returned 0x93 [0147.997] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_bd7521a2-be87-486f-928a-80ffca5b0219.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_bd7521a2-be87-486f-928a-80ffca5b0219.xuy", lpFilePart=0x0) returned 0x97 [0147.997] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0147.997] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_bd7521a2-be87-486f-928a-80ffca5b0219" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\powershell\\commandanalysis\\powershell_analysiscacheentry_bd7521a2-be87-486f-928a-80ffca5b0219"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2cc98f96, ftCreationTime.dwHighDateTime=0x1d2fc25, ftLastAccessTime.dwLowDateTime=0x2cc98f96, ftLastAccessTime.dwHighDateTime=0x1d2fc25, ftLastWriteTime.dwLowDateTime=0x440f15ab, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x160)) returned 1 [0147.997] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0147.997] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_bd7521a2-be87-486f-928a-80ffca5b0219" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\powershell\\commandanalysis\\powershell_analysiscacheentry_bd7521a2-be87-486f-928a-80ffca5b0219"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_bd7521a2-be87-486f-928a-80ffca5b0219.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\powershell\\commandanalysis\\powershell_analysiscacheentry_bd7521a2-be87-486f-928a-80ffca5b0219.xuy")) returned 1 [0147.998] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_bf1cb9b0-ce8c-44e7-bb1c-52ad1299acf8", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_bf1cb9b0-ce8c-44e7-bb1c-52ad1299acf8", lpFilePart=0x0) returned 0x93 [0147.998] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0147.998] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_bf1cb9b0-ce8c-44e7-bb1c-52ad1299acf8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\powershell\\commandanalysis\\powershell_analysiscacheentry_bf1cb9b0-ce8c-44e7-bb1c-52ad1299acf8"), fInfoLevelId=0x0, lpFileInformation=0x22e22a8 | out: lpFileInformation=0x22e22a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2cd0b69d, ftCreationTime.dwHighDateTime=0x1d2fc25, ftLastAccessTime.dwLowDateTime=0x2cd0b69d, ftLastAccessTime.dwHighDateTime=0x1d2fc25, ftLastWriteTime.dwLowDateTime=0xd3ffd517, ftLastWriteTime.dwHighDateTime=0x1d41fdc, nFileSizeHigh=0x0, nFileSizeLow=0x39d2)) returned 1 [0147.999] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0147.999] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_bf1cb9b0-ce8c-44e7-bb1c-52ad1299acf8", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_bf1cb9b0-ce8c-44e7-bb1c-52ad1299acf8", lpFilePart=0x0) returned 0x93 [0147.999] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0147.999] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_bf1cb9b0-ce8c-44e7-bb1c-52ad1299acf8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\powershell\\commandanalysis\\powershell_analysiscacheentry_bf1cb9b0-ce8c-44e7-bb1c-52ad1299acf8"), fInfoLevelId=0x0, lpFileInformation=0x22e24f0 | out: lpFileInformation=0x22e24f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2cd0b69d, ftCreationTime.dwHighDateTime=0x1d2fc25, ftLastAccessTime.dwLowDateTime=0x2cd0b69d, ftLastAccessTime.dwHighDateTime=0x1d2fc25, ftLastWriteTime.dwLowDateTime=0xd3ffd517, ftLastWriteTime.dwHighDateTime=0x1d41fdc, nFileSizeHigh=0x0, nFileSizeLow=0x39d2)) returned 1 [0147.999] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0147.999] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_bf1cb9b0-ce8c-44e7-bb1c-52ad1299acf8", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_bf1cb9b0-ce8c-44e7-bb1c-52ad1299acf8", lpFilePart=0x0) returned 0x93 [0147.999] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0147.999] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_bf1cb9b0-ce8c-44e7-bb1c-52ad1299acf8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\powershell\\commandanalysis\\powershell_analysiscacheentry_bf1cb9b0-ce8c-44e7-bb1c-52ad1299acf8"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0148.000] GetFileType (hFile=0x444) returned 0x1 [0148.000] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0148.000] GetFileType (hFile=0x444) returned 0x1 [0148.000] ReadFile (in: hFile=0x444, lpBuffer=0x22e4ab0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x22e4ab0*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0148.044] CloseHandle (hObject=0x444) returned 1 [0148.044] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_bf1cb9b0-ce8c-44e7-bb1c-52ad1299acf8", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_bf1cb9b0-ce8c-44e7-bb1c-52ad1299acf8", lpFilePart=0x0) returned 0x93 [0148.044] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0148.044] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_bf1cb9b0-ce8c-44e7-bb1c-52ad1299acf8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\powershell\\commandanalysis\\powershell_analysiscacheentry_bf1cb9b0-ce8c-44e7-bb1c-52ad1299acf8"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0148.045] GetFileType (hFile=0x444) returned 0x1 [0148.045] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0148.045] GetFileType (hFile=0x444) returned 0x1 [0148.045] WriteFile (in: hFile=0x444, lpBuffer=0x21341f8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x21341f8*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0148.045] CloseHandle (hObject=0x444) returned 1 [0148.045] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_bf1cb9b0-ce8c-44e7-bb1c-52ad1299acf8", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_bf1cb9b0-ce8c-44e7-bb1c-52ad1299acf8", lpFilePart=0x0) returned 0x93 [0148.045] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_bf1cb9b0-ce8c-44e7-bb1c-52ad1299acf8.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_bf1cb9b0-ce8c-44e7-bb1c-52ad1299acf8.xuy", lpFilePart=0x0) returned 0x97 [0148.045] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0148.045] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_bf1cb9b0-ce8c-44e7-bb1c-52ad1299acf8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\powershell\\commandanalysis\\powershell_analysiscacheentry_bf1cb9b0-ce8c-44e7-bb1c-52ad1299acf8"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2cd0b69d, ftCreationTime.dwHighDateTime=0x1d2fc25, ftLastAccessTime.dwLowDateTime=0x2cd0b69d, ftLastAccessTime.dwHighDateTime=0x1d2fc25, ftLastWriteTime.dwLowDateTime=0x44163bba, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x39d2)) returned 1 [0148.045] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0148.045] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_bf1cb9b0-ce8c-44e7-bb1c-52ad1299acf8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\powershell\\commandanalysis\\powershell_analysiscacheentry_bf1cb9b0-ce8c-44e7-bb1c-52ad1299acf8"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_bf1cb9b0-ce8c-44e7-bb1c-52ad1299acf8.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\powershell\\commandanalysis\\powershell_analysiscacheentry_bf1cb9b0-ce8c-44e7-bb1c-52ad1299acf8.xuy")) returned 1 [0148.046] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_e1d59afd-fedf-4dad-a2f3-bba3e7eabe5c", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_e1d59afd-fedf-4dad-a2f3-bba3e7eabe5c", lpFilePart=0x0) returned 0x93 [0148.046] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0148.046] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_e1d59afd-fedf-4dad-a2f3-bba3e7eabe5c" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\powershell\\commandanalysis\\powershell_analysiscacheentry_e1d59afd-fedf-4dad-a2f3-bba3e7eabe5c"), fInfoLevelId=0x0, lpFileInformation=0x2164b98 | out: lpFileInformation=0x2164b98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27d2ca12, ftCreationTime.dwHighDateTime=0x1d2fc25, ftLastAccessTime.dwLowDateTime=0x27d2ca12, ftLastAccessTime.dwHighDateTime=0x1d2fc25, ftLastWriteTime.dwLowDateTime=0xd3f3e8ae, ftLastWriteTime.dwHighDateTime=0x1d41fdc, nFileSizeHigh=0x0, nFileSizeLow=0x972)) returned 1 [0148.047] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0148.047] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_e1d59afd-fedf-4dad-a2f3-bba3e7eabe5c", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_e1d59afd-fedf-4dad-a2f3-bba3e7eabe5c", lpFilePart=0x0) returned 0x93 [0148.047] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0148.047] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_e1d59afd-fedf-4dad-a2f3-bba3e7eabe5c" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\powershell\\commandanalysis\\powershell_analysiscacheentry_e1d59afd-fedf-4dad-a2f3-bba3e7eabe5c"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0148.048] GetFileType (hFile=0x444) returned 0x1 [0148.048] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0148.048] GetFileType (hFile=0x444) returned 0x1 [0148.048] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x972 [0148.048] ReadFile (in: hFile=0x444, lpBuffer=0x21659b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x21659b8*, lpNumberOfBytesRead=0x3be6a8*=0x972, lpOverlapped=0x0) returned 1 [0148.237] CloseHandle (hObject=0x444) returned 1 [0148.247] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_e1d59afd-fedf-4dad-a2f3-bba3e7eabe5c", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_e1d59afd-fedf-4dad-a2f3-bba3e7eabe5c", lpFilePart=0x0) returned 0x93 [0148.247] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0148.247] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_e1d59afd-fedf-4dad-a2f3-bba3e7eabe5c" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\powershell\\commandanalysis\\powershell_analysiscacheentry_e1d59afd-fedf-4dad-a2f3-bba3e7eabe5c"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0148.249] GetFileType (hFile=0x444) returned 0x1 [0148.249] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0148.249] GetFileType (hFile=0x444) returned 0x1 [0148.249] WriteFile (in: hFile=0x444, lpBuffer=0x21dfa18*, nNumberOfBytesToWrite=0x980, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x21dfa18*, lpNumberOfBytesWritten=0x3be5b8*=0x980, lpOverlapped=0x0) returned 1 [0148.250] CloseHandle (hObject=0x444) returned 1 [0148.250] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_e1d59afd-fedf-4dad-a2f3-bba3e7eabe5c", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_e1d59afd-fedf-4dad-a2f3-bba3e7eabe5c", lpFilePart=0x0) returned 0x93 [0148.250] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_e1d59afd-fedf-4dad-a2f3-bba3e7eabe5c.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_e1d59afd-fedf-4dad-a2f3-bba3e7eabe5c.xuy", lpFilePart=0x0) returned 0x97 [0148.250] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0148.250] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_e1d59afd-fedf-4dad-a2f3-bba3e7eabe5c" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\powershell\\commandanalysis\\powershell_analysiscacheentry_e1d59afd-fedf-4dad-a2f3-bba3e7eabe5c"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27d2ca12, ftCreationTime.dwHighDateTime=0x1d2fc25, ftLastAccessTime.dwLowDateTime=0x27d2ca12, ftLastAccessTime.dwHighDateTime=0x1d2fc25, ftLastWriteTime.dwLowDateTime=0x44353d76, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x980)) returned 1 [0148.250] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0148.250] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_e1d59afd-fedf-4dad-a2f3-bba3e7eabe5c" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\powershell\\commandanalysis\\powershell_analysiscacheentry_e1d59afd-fedf-4dad-a2f3-bba3e7eabe5c"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_e1d59afd-fedf-4dad-a2f3-bba3e7eabe5c.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\powershell\\commandanalysis\\powershell_analysiscacheentry_e1d59afd-fedf-4dad-a2f3-bba3e7eabe5c.xuy")) returned 1 [0148.251] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheIndex", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheIndex", lpFilePart=0x0) returned 0x6e [0148.251] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0148.251] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheIndex" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\powershell\\commandanalysis\\powershell_analysiscacheindex"), fInfoLevelId=0x0, lpFileInformation=0x21e0e20 | out: lpFileInformation=0x21e0e20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27c21964, ftCreationTime.dwHighDateTime=0x1d2fc25, ftLastAccessTime.dwLowDateTime=0x27c21964, ftLastAccessTime.dwHighDateTime=0x1d2fc25, ftLastWriteTime.dwLowDateTime=0xd3ffd517, ftLastWriteTime.dwHighDateTime=0x1d41fdc, nFileSizeHigh=0x0, nFileSizeLow=0x781)) returned 1 [0148.252] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0148.252] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheIndex", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheIndex", lpFilePart=0x0) returned 0x6e [0148.252] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0148.252] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheIndex" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\powershell\\commandanalysis\\powershell_analysiscacheindex"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0148.252] GetFileType (hFile=0x444) returned 0x1 [0148.252] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0148.252] GetFileType (hFile=0x444) returned 0x1 [0148.252] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x781 [0148.252] ReadFile (in: hFile=0x444, lpBuffer=0x21e1930, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x21e1930*, lpNumberOfBytesRead=0x3be6a8*=0x781, lpOverlapped=0x0) returned 1 [0148.284] CloseHandle (hObject=0x444) returned 1 [0148.294] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheIndex", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheIndex", lpFilePart=0x0) returned 0x6e [0148.294] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0148.294] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheIndex" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\powershell\\commandanalysis\\powershell_analysiscacheindex"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0148.296] GetFileType (hFile=0x444) returned 0x1 [0148.296] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0148.296] GetFileType (hFile=0x444) returned 0x1 [0148.296] WriteFile (in: hFile=0x444, lpBuffer=0x225af50*, nNumberOfBytesToWrite=0x790, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x225af50*, lpNumberOfBytesWritten=0x3be5b8*=0x790, lpOverlapped=0x0) returned 1 [0148.297] CloseHandle (hObject=0x444) returned 1 [0148.297] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheIndex", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheIndex", lpFilePart=0x0) returned 0x6e [0148.297] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheIndex.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheIndex.xuy", lpFilePart=0x0) returned 0x72 [0148.297] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0148.297] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheIndex" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\powershell\\commandanalysis\\powershell_analysiscacheindex"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27c21964, ftCreationTime.dwHighDateTime=0x1d2fc25, ftLastAccessTime.dwLowDateTime=0x27c21964, ftLastAccessTime.dwHighDateTime=0x1d2fc25, ftLastWriteTime.dwLowDateTime=0x443c63b3, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x790)) returned 1 [0148.297] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0148.297] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheIndex" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\powershell\\commandanalysis\\powershell_analysiscacheindex"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheIndex.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\powershell\\commandanalysis\\powershell_analysiscacheindex.xuy")) returned 1 [0148.299] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0148.299] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache", lpFilePart=0x0) returned 0x3e [0148.299] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\", lpFilePart=0x0) returned 0x3f [0148.299] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d79d0 [0148.301] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0148.302] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0148.303] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0148.303] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0148.303] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0148.303] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0148.303] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0148.303] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0148.303] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0148.303] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0148.304] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0148.304] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0148.304] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0148.304] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0148.304] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0148.304] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0148.304] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0148.305] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0148.305] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0148.305] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0148.305] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0148.305] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0148.305] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0148.305] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0148.306] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0148.306] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0148.306] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0148.306] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0148.306] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0148.306] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0148.307] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0148.307] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0148.307] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0148.307] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0148.307] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0148.308] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0148.308] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0148.308] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0148.308] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache", lpFilePart=0x0) returned 0x3e [0148.308] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\", lpFilePart=0x0) returned 0x3f [0148.308] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d78b0 [0148.309] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0148.310] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0148.310] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0148.310] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0148.310] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0148.310] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0148.310] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0148.310] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0148.310] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0148.310] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0148.311] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0148.311] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0148.311] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0148.311] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0148.311] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0148.311] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0148.311] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0148.311] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0148.311] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0148.312] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0148.312] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0148.312] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0148.312] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0148.312] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0148.312] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0148.312] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0148.312] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0148.312] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0148.313] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0148.313] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0148.313] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0148.313] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0148.313] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0148.313] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0148.313] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0148.314] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0148.314] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0148.314] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0148.314] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1079934665", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1079934665", lpFilePart=0x0) returned 0x49 [0148.315] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1079934665\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1079934665\\", lpFilePart=0x0) returned 0x4a [0148.315] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1079934665\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7fd0 [0148.316] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0148.316] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0148.316] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0148.317] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0148.317] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0148.317] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0148.317] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0148.317] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1079934665", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1079934665", lpFilePart=0x0) returned 0x49 [0148.317] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1079934665\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1079934665\\", lpFilePart=0x0) returned 0x4a [0148.317] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1079934665\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7fd0 [0148.317] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0148.317] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0148.317] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0148.317] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0148.317] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0148.317] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0148.317] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1079934665\\2034961148.pri", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1079934665\\2034961148.pri", lpFilePart=0x0) returned 0x58 [0148.318] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0148.318] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1079934665\\2034961148.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\1079934665\\2034961148.pri"), fInfoLevelId=0x0, lpFileInformation=0x226b3f8 | out: lpFileInformation=0x226b3f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbecbcdfa, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xbecbcdfa, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xbecbcdfa, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x730)) returned 1 [0148.318] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0148.318] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1079934665\\2034961148.pri", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1079934665\\2034961148.pri", lpFilePart=0x0) returned 0x58 [0148.318] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0148.318] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1079934665\\2034961148.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\1079934665\\2034961148.pri"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0148.318] GetFileType (hFile=0x444) returned 0x1 [0148.318] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0148.318] GetFileType (hFile=0x444) returned 0x1 [0148.318] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x730 [0148.318] ReadFile (in: hFile=0x444, lpBuffer=0x226be20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x226be20*, lpNumberOfBytesRead=0x3be6a8*=0x730, lpOverlapped=0x0) returned 1 [0148.342] CloseHandle (hObject=0x444) returned 1 [0148.352] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1079934665\\2034961148.pri", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1079934665\\2034961148.pri", lpFilePart=0x0) returned 0x58 [0148.352] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0148.352] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1079934665\\2034961148.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\1079934665\\2034961148.pri"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0148.354] GetFileType (hFile=0x444) returned 0x1 [0148.354] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0148.354] GetFileType (hFile=0x444) returned 0x1 [0148.354] WriteFile (in: hFile=0x444, lpBuffer=0x22e5268*, nNumberOfBytesToWrite=0x740, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x22e5268*, lpNumberOfBytesWritten=0x3be5b8*=0x740, lpOverlapped=0x0) returned 1 [0148.355] CloseHandle (hObject=0x444) returned 1 [0148.355] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1079934665\\2034961148.pri", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1079934665\\2034961148.pri", lpFilePart=0x0) returned 0x58 [0148.355] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1079934665\\2034961148.pri.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1079934665\\2034961148.pri.xuy", lpFilePart=0x0) returned 0x5c [0148.355] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0148.355] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1079934665\\2034961148.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\1079934665\\2034961148.pri"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbecbcdfa, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xbecbcdfa, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x4445eba0, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x740)) returned 1 [0148.356] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0148.356] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1079934665\\2034961148.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\1079934665\\2034961148.pri"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1079934665\\2034961148.pri.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\1079934665\\2034961148.pri.xuy")) returned 1 [0148.357] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0148.357] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1605653898", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1605653898", lpFilePart=0x0) returned 0x49 [0148.357] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1605653898\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1605653898\\", lpFilePart=0x0) returned 0x4a [0148.357] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1605653898\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d81b0 [0148.357] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0148.358] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0148.358] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0148.358] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0148.358] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0148.358] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0148.358] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0148.358] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1605653898", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1605653898", lpFilePart=0x0) returned 0x49 [0148.358] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1605653898\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1605653898\\", lpFilePart=0x0) returned 0x4a [0148.358] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1605653898\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7d30 [0148.358] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0148.358] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0148.359] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0148.359] FindClose (in: hFindFile=0x5d7d30 | out: hFindFile=0x5d7d30) returned 1 [0148.359] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0148.359] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0148.359] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1605653898\\4275773285.pri", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1605653898\\4275773285.pri", lpFilePart=0x0) returned 0x58 [0148.359] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0148.359] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1605653898\\4275773285.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\1605653898\\4275773285.pri"), fInfoLevelId=0x0, lpFileInformation=0x22e8588 | out: lpFileInformation=0x22e8588*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb19963d4, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb19963d4, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xb19963d4, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x16dc8)) returned 1 [0148.359] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0148.359] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1605653898\\4275773285.pri", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1605653898\\4275773285.pri", lpFilePart=0x0) returned 0x58 [0148.359] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0148.359] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1605653898\\4275773285.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\1605653898\\4275773285.pri"), fInfoLevelId=0x0, lpFileInformation=0x22e86f8 | out: lpFileInformation=0x22e86f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb19963d4, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb19963d4, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xb19963d4, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x16dc8)) returned 1 [0148.359] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0148.359] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1605653898\\4275773285.pri", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1605653898\\4275773285.pri", lpFilePart=0x0) returned 0x58 [0148.359] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0148.359] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1605653898\\4275773285.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\1605653898\\4275773285.pri"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0148.360] GetFileType (hFile=0x444) returned 0x1 [0148.360] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0148.360] GetFileType (hFile=0x444) returned 0x1 [0148.360] ReadFile (in: hFile=0x444, lpBuffer=0x22eab08, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x22eab08*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0148.438] CloseHandle (hObject=0x444) returned 1 [0148.438] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1605653898\\4275773285.pri", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1605653898\\4275773285.pri", lpFilePart=0x0) returned 0x58 [0148.438] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0148.438] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1605653898\\4275773285.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\1605653898\\4275773285.pri"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0148.439] GetFileType (hFile=0x444) returned 0x1 [0148.439] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0148.439] GetFileType (hFile=0x444) returned 0x1 [0148.439] WriteFile (in: hFile=0x444, lpBuffer=0x213baa0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x213baa0*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0148.440] CloseHandle (hObject=0x444) returned 1 [0148.440] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1605653898\\4275773285.pri", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1605653898\\4275773285.pri", lpFilePart=0x0) returned 0x58 [0148.440] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1605653898\\4275773285.pri.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1605653898\\4275773285.pri.xuy", lpFilePart=0x0) returned 0x5c [0148.440] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0148.440] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1605653898\\4275773285.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\1605653898\\4275773285.pri"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb19963d4, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb19963d4, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x44544024, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x16dc8)) returned 1 [0148.440] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0148.440] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1605653898\\4275773285.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\1605653898\\4275773285.pri"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1605653898\\4275773285.pri.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\1605653898\\4275773285.pri.xuy")) returned 1 [0148.442] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0148.442] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1978304864", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1978304864", lpFilePart=0x0) returned 0x49 [0148.442] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1978304864\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1978304864\\", lpFilePart=0x0) returned 0x4a [0148.442] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1978304864\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7670 [0148.444] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0148.445] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0148.445] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0148.445] FindClose (in: hFindFile=0x5d7670 | out: hFindFile=0x5d7670) returned 1 [0148.445] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0148.445] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0148.445] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0148.445] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1978304864", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1978304864", lpFilePart=0x0) returned 0x49 [0148.445] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1978304864\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1978304864\\", lpFilePart=0x0) returned 0x4a [0148.446] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1978304864\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7fd0 [0148.446] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0148.446] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0148.446] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0148.446] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0148.446] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0148.446] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0148.446] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1978304864\\923683402.pri", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1978304864\\923683402.pri", lpFilePart=0x0) returned 0x57 [0148.447] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0148.447] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1978304864\\923683402.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\1978304864\\923683402.pri"), fInfoLevelId=0x0, lpFileInformation=0x2170800 | out: lpFileInformation=0x2170800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb13eca61, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb13eca61, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xb13eca61, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0xa30)) returned 1 [0148.447] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0148.447] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1978304864\\923683402.pri", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1978304864\\923683402.pri", lpFilePart=0x0) returned 0x57 [0148.447] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0148.447] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1978304864\\923683402.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\1978304864\\923683402.pri"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0148.447] GetFileType (hFile=0x444) returned 0x1 [0148.447] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0148.447] GetFileType (hFile=0x444) returned 0x1 [0148.447] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0xa30 [0148.447] ReadFile (in: hFile=0x444, lpBuffer=0x2171518, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x2171518*, lpNumberOfBytesRead=0x3be6a8*=0xa30, lpOverlapped=0x0) returned 1 [0148.474] CloseHandle (hObject=0x444) returned 1 [0148.485] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1978304864\\923683402.pri", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1978304864\\923683402.pri", lpFilePart=0x0) returned 0x57 [0148.485] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0148.485] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1978304864\\923683402.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\1978304864\\923683402.pri"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0148.487] GetFileType (hFile=0x444) returned 0x1 [0148.487] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0148.487] GetFileType (hFile=0x444) returned 0x1 [0148.487] WriteFile (in: hFile=0x444, lpBuffer=0x21eb858*, nNumberOfBytesToWrite=0xa40, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x21eb858*, lpNumberOfBytesWritten=0x3be5b8*=0xa40, lpOverlapped=0x0) returned 1 [0148.488] CloseHandle (hObject=0x444) returned 1 [0148.488] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1978304864\\923683402.pri", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1978304864\\923683402.pri", lpFilePart=0x0) returned 0x57 [0148.488] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1978304864\\923683402.pri.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1978304864\\923683402.pri.xuy", lpFilePart=0x0) returned 0x5b [0148.488] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0148.488] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1978304864\\923683402.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\1978304864\\923683402.pri"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb13eca61, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb13eca61, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x4459edaf, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xa40)) returned 1 [0148.488] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0148.488] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1978304864\\923683402.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\1978304864\\923683402.pri"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1978304864\\923683402.pri.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\1978304864\\923683402.pri.xuy")) returned 1 [0148.489] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0148.489] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2107319684", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2107319684", lpFilePart=0x0) returned 0x49 [0148.489] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2107319684\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2107319684\\", lpFilePart=0x0) returned 0x4a [0148.489] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2107319684\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d75b0 [0148.490] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0148.490] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0148.491] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0148.491] FindClose (in: hFindFile=0x5d75b0 | out: hFindFile=0x5d75b0) returned 1 [0148.491] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0148.491] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0148.491] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0148.491] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2107319684", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2107319684", lpFilePart=0x0) returned 0x49 [0148.491] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2107319684\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2107319684\\", lpFilePart=0x0) returned 0x4a [0148.491] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2107319684\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7c70 [0148.491] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0148.491] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0148.491] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0148.492] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0148.492] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0148.492] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0148.492] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2107319684\\2467780804.pri", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2107319684\\2467780804.pri", lpFilePart=0x0) returned 0x58 [0148.492] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0148.492] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2107319684\\2467780804.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\2107319684\\2467780804.pri"), fInfoLevelId=0x0, lpFileInformation=0x21eeb60 | out: lpFileInformation=0x21eeb60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbce79bc, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xbbce79bc, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xbbce79bc, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x22d0)) returned 1 [0148.492] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0148.492] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2107319684\\2467780804.pri", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2107319684\\2467780804.pri", lpFilePart=0x0) returned 0x58 [0148.492] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0148.492] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2107319684\\2467780804.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\2107319684\\2467780804.pri"), fInfoLevelId=0x0, lpFileInformation=0x21eecd0 | out: lpFileInformation=0x21eecd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbce79bc, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xbbce79bc, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xbbce79bc, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x22d0)) returned 1 [0148.492] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0148.493] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2107319684\\2467780804.pri", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2107319684\\2467780804.pri", lpFilePart=0x0) returned 0x58 [0148.493] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0148.493] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2107319684\\2467780804.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\2107319684\\2467780804.pri"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0148.493] GetFileType (hFile=0x444) returned 0x1 [0148.493] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0148.494] GetFileType (hFile=0x444) returned 0x1 [0148.494] ReadFile (in: hFile=0x444, lpBuffer=0x21f10e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x21f10e0*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0148.506] CloseHandle (hObject=0x444) returned 1 [0148.506] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2107319684\\2467780804.pri", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2107319684\\2467780804.pri", lpFilePart=0x0) returned 0x58 [0148.506] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0148.506] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2107319684\\2467780804.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\2107319684\\2467780804.pri"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0148.506] GetFileType (hFile=0x444) returned 0x1 [0148.506] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0148.506] GetFileType (hFile=0x444) returned 0x1 [0148.507] WriteFile (in: hFile=0x444, lpBuffer=0x21eee20*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x21eee20*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0148.507] CloseHandle (hObject=0x444) returned 1 [0148.507] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2107319684\\2467780804.pri", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2107319684\\2467780804.pri", lpFilePart=0x0) returned 0x58 [0148.507] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2107319684\\2467780804.pri.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2107319684\\2467780804.pri.xuy", lpFilePart=0x0) returned 0x5c [0148.507] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0148.507] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2107319684\\2467780804.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\2107319684\\2467780804.pri"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbce79bc, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xbbce79bc, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x445c5016, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x22d0)) returned 1 [0148.507] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0148.507] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2107319684\\2467780804.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\2107319684\\2467780804.pri"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2107319684\\2467780804.pri.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\2107319684\\2467780804.pri.xuy")) returned 1 [0148.508] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0148.508] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\226732975", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\226732975", lpFilePart=0x0) returned 0x48 [0148.509] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\226732975\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\226732975\\", lpFilePart=0x0) returned 0x49 [0148.509] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\226732975\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7c70 [0148.510] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0148.510] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0148.510] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0148.510] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0148.510] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0148.511] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0148.511] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0148.511] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\226732975", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\226732975", lpFilePart=0x0) returned 0x48 [0148.511] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\226732975\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\226732975\\", lpFilePart=0x0) returned 0x49 [0148.511] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\226732975\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d79d0 [0148.511] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0148.511] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0148.511] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0148.511] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0148.511] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0148.511] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0148.511] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\226732975\\2698495915.pri", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\226732975\\2698495915.pri", lpFilePart=0x0) returned 0x57 [0148.512] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0148.512] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\226732975\\2698495915.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\226732975\\2698495915.pri"), fInfoLevelId=0x0, lpFileInformation=0x226f518 | out: lpFileInformation=0x226f518*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb242ab2f, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb242ab2f, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xb242ab2f, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x710)) returned 1 [0148.512] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0148.512] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\226732975\\2698495915.pri", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\226732975\\2698495915.pri", lpFilePart=0x0) returned 0x57 [0148.512] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0148.512] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\226732975\\2698495915.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\226732975\\2698495915.pri"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0148.512] GetFileType (hFile=0x444) returned 0x1 [0148.512] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0148.512] GetFileType (hFile=0x444) returned 0x1 [0148.512] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x710 [0148.512] ReadFile (in: hFile=0x444, lpBuffer=0x226ff10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x226ff10*, lpNumberOfBytesRead=0x3be6a8*=0x710, lpOverlapped=0x0) returned 1 [0148.554] CloseHandle (hObject=0x444) returned 1 [0148.565] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\226732975\\2698495915.pri", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\226732975\\2698495915.pri", lpFilePart=0x0) returned 0x57 [0148.565] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0148.565] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\226732975\\2698495915.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\226732975\\2698495915.pri"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0148.566] GetFileType (hFile=0x444) returned 0x1 [0148.566] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0148.566] GetFileType (hFile=0x444) returned 0x1 [0148.566] WriteFile (in: hFile=0x444, lpBuffer=0x22e92b0*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x22e92b0*, lpNumberOfBytesWritten=0x3be5b8*=0x720, lpOverlapped=0x0) returned 1 [0148.569] CloseHandle (hObject=0x444) returned 1 [0148.570] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\226732975\\2698495915.pri", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\226732975\\2698495915.pri", lpFilePart=0x0) returned 0x57 [0148.570] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\226732975\\2698495915.pri.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\226732975\\2698495915.pri.xuy", lpFilePart=0x0) returned 0x5b [0148.570] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0148.570] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\226732975\\2698495915.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\226732975\\2698495915.pri"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb242ab2f, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb242ab2f, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x4465d95a, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x720)) returned 1 [0148.570] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0148.570] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\226732975\\2698495915.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\226732975\\2698495915.pri"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\226732975\\2698495915.pri.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\226732975\\2698495915.pri.xuy")) returned 1 [0148.571] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0148.572] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2570292521", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2570292521", lpFilePart=0x0) returned 0x49 [0148.572] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2570292521\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2570292521\\", lpFilePart=0x0) returned 0x4a [0148.572] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2570292521\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7370 [0148.573] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0148.573] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0148.573] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0148.573] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0148.573] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0148.573] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0148.573] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0148.574] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2570292521", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2570292521", lpFilePart=0x0) returned 0x49 [0148.574] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2570292521\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2570292521\\", lpFilePart=0x0) returned 0x4a [0148.574] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2570292521\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d81b0 [0148.574] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0148.574] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0148.574] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0148.574] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0148.574] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0148.574] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0148.574] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2570292521\\231755001.pri", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2570292521\\231755001.pri", lpFilePart=0x0) returned 0x57 [0148.574] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0148.574] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2570292521\\231755001.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\2570292521\\231755001.pri"), fInfoLevelId=0x0, lpFileInformation=0x22ec598 | out: lpFileInformation=0x22ec598*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7c3bb52, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb7c3bb52, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xb7c3bb52, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x748)) returned 1 [0148.575] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0148.575] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2570292521\\231755001.pri", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2570292521\\231755001.pri", lpFilePart=0x0) returned 0x57 [0148.575] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0148.575] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2570292521\\231755001.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\2570292521\\231755001.pri"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0148.575] GetFileType (hFile=0x444) returned 0x1 [0148.575] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0148.575] GetFileType (hFile=0x444) returned 0x1 [0148.575] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x748 [0148.575] ReadFile (in: hFile=0x444, lpBuffer=0x22ecfc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x22ecfc8*, lpNumberOfBytesRead=0x3be6a8*=0x748, lpOverlapped=0x0) returned 1 [0148.586] CloseHandle (hObject=0x444) returned 1 [0148.626] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2570292521\\231755001.pri", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2570292521\\231755001.pri", lpFilePart=0x0) returned 0x57 [0148.626] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0148.627] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2570292521\\231755001.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\2570292521\\231755001.pri"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0148.628] GetFileType (hFile=0x444) returned 0x1 [0148.628] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0148.628] GetFileType (hFile=0x444) returned 0x1 [0148.628] WriteFile (in: hFile=0x444, lpBuffer=0x2169318*, nNumberOfBytesToWrite=0x750, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x2169318*, lpNumberOfBytesWritten=0x3be5b8*=0x750, lpOverlapped=0x0) returned 1 [0148.629] CloseHandle (hObject=0x444) returned 1 [0148.629] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2570292521\\231755001.pri", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2570292521\\231755001.pri", lpFilePart=0x0) returned 0x57 [0148.629] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2570292521\\231755001.pri.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2570292521\\231755001.pri.xuy", lpFilePart=0x0) returned 0x5b [0148.629] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0148.629] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2570292521\\231755001.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\2570292521\\231755001.pri"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7c3bb52, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb7c3bb52, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x446f6479, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x750)) returned 1 [0148.629] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0148.629] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2570292521\\231755001.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\2570292521\\231755001.pri"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2570292521\\231755001.pri.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\2570292521\\231755001.pri.xuy")) returned 1 [0148.630] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0148.631] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2577507833", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2577507833", lpFilePart=0x0) returned 0x49 [0148.631] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2577507833\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2577507833\\", lpFilePart=0x0) returned 0x4a [0148.631] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2577507833\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7e50 [0148.631] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0148.632] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0148.632] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0148.632] FindClose (in: hFindFile=0x5d7e50 | out: hFindFile=0x5d7e50) returned 1 [0148.632] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0148.632] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0148.632] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0148.632] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2577507833", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2577507833", lpFilePart=0x0) returned 0x49 [0148.632] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2577507833\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2577507833\\", lpFilePart=0x0) returned 0x4a [0148.632] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2577507833\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7550 [0148.632] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0148.632] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0148.632] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0148.633] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0148.633] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0148.633] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0148.634] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2577507833\\3967450640.pri", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2577507833\\3967450640.pri", lpFilePart=0x0) returned 0x58 [0148.634] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0148.634] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2577507833\\3967450640.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\2577507833\\3967450640.pri"), fInfoLevelId=0x0, lpFileInformation=0x216c620 | out: lpFileInformation=0x216c620*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4b5b6bb, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb4b5b6bb, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xb4b5b6bb, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0xde0)) returned 1 [0148.634] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0148.634] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2577507833\\3967450640.pri", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2577507833\\3967450640.pri", lpFilePart=0x0) returned 0x58 [0148.634] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0148.634] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2577507833\\3967450640.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\2577507833\\3967450640.pri"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0148.634] GetFileType (hFile=0x444) returned 0x1 [0148.634] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0148.634] GetFileType (hFile=0x444) returned 0x1 [0148.634] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0xde0 [0148.634] ReadFile (in: hFile=0x444, lpBuffer=0x216d6f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x216d6f8*, lpNumberOfBytesRead=0x3be6a8*=0xde0, lpOverlapped=0x0) returned 1 [0148.635] CloseHandle (hObject=0x444) returned 1 [0148.646] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2577507833\\3967450640.pri", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2577507833\\3967450640.pri", lpFilePart=0x0) returned 0x58 [0148.646] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0148.646] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2577507833\\3967450640.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\2577507833\\3967450640.pri"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0148.648] GetFileType (hFile=0x444) returned 0x1 [0148.648] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0148.648] GetFileType (hFile=0x444) returned 0x1 [0148.648] WriteFile (in: hFile=0x444, lpBuffer=0x21e8cb0*, nNumberOfBytesToWrite=0xdf0, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x21e8cb0*, lpNumberOfBytesWritten=0x3be5b8*=0xdf0, lpOverlapped=0x0) returned 1 [0148.649] CloseHandle (hObject=0x444) returned 1 [0148.649] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2577507833\\3967450640.pri", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2577507833\\3967450640.pri", lpFilePart=0x0) returned 0x58 [0148.649] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2577507833\\3967450640.pri.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2577507833\\3967450640.pri.xuy", lpFilePart=0x0) returned 0x5c [0148.649] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0148.649] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2577507833\\3967450640.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\2577507833\\3967450640.pri"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4b5b6bb, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb4b5b6bb, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x447427d5, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xdf0)) returned 1 [0148.649] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0148.649] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2577507833\\3967450640.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\2577507833\\3967450640.pri"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2577507833\\3967450640.pri.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\2577507833\\3967450640.pri.xuy")) returned 1 [0148.651] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0148.651] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2646675675", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2646675675", lpFilePart=0x0) returned 0x49 [0148.651] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2646675675\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2646675675\\", lpFilePart=0x0) returned 0x4a [0148.651] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2646675675\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7fd0 [0148.652] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0148.652] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0148.652] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0148.652] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0148.652] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0148.652] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0148.652] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0148.652] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2646675675", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2646675675", lpFilePart=0x0) returned 0x49 [0148.652] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2646675675\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2646675675\\", lpFilePart=0x0) returned 0x4a [0148.652] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2646675675\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7c70 [0148.653] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0148.653] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0148.653] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0148.653] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0148.653] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0148.653] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0148.653] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2646675675\\806068533.pri", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2646675675\\806068533.pri", lpFilePart=0x0) returned 0x57 [0148.653] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0148.653] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2646675675\\806068533.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\2646675675\\806068533.pri"), fInfoLevelId=0x0, lpFileInformation=0x21ebfb0 | out: lpFileInformation=0x21ebfb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd89f045, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xbd89f045, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xbd89f045, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0xfd8)) returned 1 [0148.654] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0148.654] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2646675675\\806068533.pri", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2646675675\\806068533.pri", lpFilePart=0x0) returned 0x57 [0148.654] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0148.654] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2646675675\\806068533.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\2646675675\\806068533.pri"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0148.654] GetFileType (hFile=0x444) returned 0x1 [0148.654] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0148.654] GetFileType (hFile=0x444) returned 0x1 [0148.654] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0xfd8 [0148.654] ReadFile (in: hFile=0x444, lpBuffer=0x21ed270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x21ed270*, lpNumberOfBytesRead=0x3be6a8*=0xfd8, lpOverlapped=0x0) returned 1 [0148.672] CloseHandle (hObject=0x444) returned 1 [0148.684] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2646675675\\806068533.pri", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2646675675\\806068533.pri", lpFilePart=0x0) returned 0x57 [0148.684] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0148.684] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2646675675\\806068533.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\2646675675\\806068533.pri"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0148.685] GetFileType (hFile=0x444) returned 0x1 [0148.685] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0148.686] GetFileType (hFile=0x444) returned 0x1 [0148.686] WriteFile (in: hFile=0x444, lpBuffer=0x22691c8*, nNumberOfBytesToWrite=0xfe0, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x22691c8*, lpNumberOfBytesWritten=0x3be5b8*=0xfe0, lpOverlapped=0x0) returned 1 [0148.686] CloseHandle (hObject=0x444) returned 1 [0148.686] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2646675675\\806068533.pri", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2646675675\\806068533.pri", lpFilePart=0x0) returned 0x57 [0148.686] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2646675675\\806068533.pri.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2646675675\\806068533.pri.xuy", lpFilePart=0x0) returned 0x5b [0148.687] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0148.687] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2646675675\\806068533.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\2646675675\\806068533.pri"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd89f045, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xbd89f045, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x4478f07a, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xfe0)) returned 1 [0148.687] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0148.687] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2646675675\\806068533.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\2646675675\\806068533.pri"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2646675675\\806068533.pri.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\2646675675\\806068533.pri.xuy")) returned 1 [0148.688] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0148.688] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3053798886", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3053798886", lpFilePart=0x0) returned 0x49 [0148.688] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3053798886\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3053798886\\", lpFilePart=0x0) returned 0x4a [0148.688] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3053798886\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7d30 [0148.689] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0148.689] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0148.689] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0148.689] FindClose (in: hFindFile=0x5d7d30 | out: hFindFile=0x5d7d30) returned 1 [0148.689] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0148.689] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0148.689] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0148.689] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3053798886", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3053798886", lpFilePart=0x0) returned 0x49 [0148.689] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3053798886\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3053798886\\", lpFilePart=0x0) returned 0x4a [0148.689] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3053798886\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d79d0 [0148.690] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0148.690] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0148.690] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0148.690] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0148.690] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0148.690] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0148.690] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3053798886\\3825186184.pri", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3053798886\\3825186184.pri", lpFilePart=0x0) returned 0x58 [0148.690] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0148.690] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3053798886\\3825186184.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\3053798886\\3825186184.pri"), fInfoLevelId=0x0, lpFileInformation=0x226c4d0 | out: lpFileInformation=0x226c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb09320c6, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb09320c6, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xb09320c6, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x3c10)) returned 1 [0148.690] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0148.690] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3053798886\\3825186184.pri", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3053798886\\3825186184.pri", lpFilePart=0x0) returned 0x58 [0148.690] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0148.690] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3053798886\\3825186184.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\3053798886\\3825186184.pri"), fInfoLevelId=0x0, lpFileInformation=0x226c640 | out: lpFileInformation=0x226c640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb09320c6, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb09320c6, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xb09320c6, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x3c10)) returned 1 [0148.690] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0148.690] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3053798886\\3825186184.pri", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3053798886\\3825186184.pri", lpFilePart=0x0) returned 0x58 [0148.690] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0148.690] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3053798886\\3825186184.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\3053798886\\3825186184.pri"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0148.691] GetFileType (hFile=0x444) returned 0x1 [0148.691] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0148.691] GetFileType (hFile=0x444) returned 0x1 [0148.691] ReadFile (in: hFile=0x444, lpBuffer=0x226ea50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x226ea50*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0148.709] CloseHandle (hObject=0x444) returned 1 [0148.709] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3053798886\\3825186184.pri", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3053798886\\3825186184.pri", lpFilePart=0x0) returned 0x58 [0148.710] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0148.710] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3053798886\\3825186184.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\3053798886\\3825186184.pri"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0148.710] GetFileType (hFile=0x444) returned 0x1 [0148.710] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0148.710] GetFileType (hFile=0x444) returned 0x1 [0148.710] WriteFile (in: hFile=0x444, lpBuffer=0x226c790*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x226c790*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0148.710] CloseHandle (hObject=0x444) returned 1 [0148.711] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3053798886\\3825186184.pri", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3053798886\\3825186184.pri", lpFilePart=0x0) returned 0x58 [0148.711] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3053798886\\3825186184.pri.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3053798886\\3825186184.pri.xuy", lpFilePart=0x0) returned 0x5c [0148.711] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0148.711] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3053798886\\3825186184.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\3053798886\\3825186184.pri"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb09320c6, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb09320c6, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x447bb122, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x3c10)) returned 1 [0148.711] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0148.711] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3053798886\\3825186184.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\3053798886\\3825186184.pri"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3053798886\\3825186184.pri.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\3053798886\\3825186184.pri.xuy")) returned 1 [0148.712] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0148.712] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3295484897", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3295484897", lpFilePart=0x0) returned 0x49 [0148.712] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3295484897\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3295484897\\", lpFilePart=0x0) returned 0x4a [0148.712] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3295484897\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7fd0 [0148.713] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0148.713] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0148.713] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0148.713] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0148.713] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0148.713] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0148.713] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0148.713] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3295484897", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3295484897", lpFilePart=0x0) returned 0x49 [0148.714] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3295484897\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3295484897\\", lpFilePart=0x0) returned 0x4a [0148.714] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3295484897\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7a90 [0148.714] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0148.714] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0148.714] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0148.714] FindClose (in: hFindFile=0x5d7a90 | out: hFindFile=0x5d7a90) returned 1 [0148.714] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0148.714] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0148.714] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3295484897\\2504515037.pri", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3295484897\\2504515037.pri", lpFilePart=0x0) returned 0x58 [0148.714] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0148.714] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3295484897\\2504515037.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\3295484897\\2504515037.pri"), fInfoLevelId=0x0, lpFileInformation=0x22ecec8 | out: lpFileInformation=0x22ecec8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb897ee9d, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb897ee9d, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xb897ee9d, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0xb068)) returned 1 [0148.714] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0148.714] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3295484897\\2504515037.pri", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3295484897\\2504515037.pri", lpFilePart=0x0) returned 0x58 [0148.714] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0148.714] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3295484897\\2504515037.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\3295484897\\2504515037.pri"), fInfoLevelId=0x0, lpFileInformation=0x22ed038 | out: lpFileInformation=0x22ed038*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb897ee9d, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb897ee9d, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xb897ee9d, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0xb068)) returned 1 [0148.715] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0148.715] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3295484897\\2504515037.pri", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3295484897\\2504515037.pri", lpFilePart=0x0) returned 0x58 [0148.715] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0148.715] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3295484897\\2504515037.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\3295484897\\2504515037.pri"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0148.715] GetFileType (hFile=0x444) returned 0x1 [0148.715] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0148.716] GetFileType (hFile=0x444) returned 0x1 [0148.716] ReadFile (in: hFile=0x444, lpBuffer=0x22ef448, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x22ef448*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0148.757] CloseHandle (hObject=0x444) returned 1 [0148.757] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3295484897\\2504515037.pri", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3295484897\\2504515037.pri", lpFilePart=0x0) returned 0x58 [0148.757] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0148.758] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3295484897\\2504515037.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\3295484897\\2504515037.pri"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0148.758] GetFileType (hFile=0x444) returned 0x1 [0148.758] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0148.758] GetFileType (hFile=0x444) returned 0x1 [0148.758] WriteFile (in: hFile=0x444, lpBuffer=0x2143100*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x2143100*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0148.759] CloseHandle (hObject=0x444) returned 1 [0148.759] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3295484897\\2504515037.pri", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3295484897\\2504515037.pri", lpFilePart=0x0) returned 0x58 [0148.759] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3295484897\\2504515037.pri.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3295484897\\2504515037.pri.xuy", lpFilePart=0x0) returned 0x5c [0148.759] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0148.759] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3295484897\\2504515037.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\3295484897\\2504515037.pri"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb897ee9d, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb897ee9d, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x4484d96d, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xb068)) returned 1 [0148.759] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0148.759] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3295484897\\2504515037.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\3295484897\\2504515037.pri"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3295484897\\2504515037.pri.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\3295484897\\2504515037.pri.xuy")) returned 1 [0148.760] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0148.760] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3375042201", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3375042201", lpFilePart=0x0) returned 0x49 [0148.760] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3375042201\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3375042201\\", lpFilePart=0x0) returned 0x4a [0148.760] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3375042201\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7550 [0148.761] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0148.761] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0148.761] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0148.761] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0148.762] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0148.762] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0148.762] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0148.762] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3375042201", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3375042201", lpFilePart=0x0) returned 0x49 [0148.762] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3375042201\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3375042201\\", lpFilePart=0x0) returned 0x4a [0148.762] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3375042201\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7af0 [0148.762] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0148.762] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0148.762] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0148.762] FindClose (in: hFindFile=0x5d7af0 | out: hFindFile=0x5d7af0) returned 1 [0148.762] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0148.762] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0148.762] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3375042201\\1858609885.pri", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3375042201\\1858609885.pri", lpFilePart=0x0) returned 0x58 [0148.762] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0148.763] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3375042201\\1858609885.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\3375042201\\1858609885.pri"), fInfoLevelId=0x0, lpFileInformation=0x2172068 | out: lpFileInformation=0x2172068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc3e8880, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xbc3e8880, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xbc3e8880, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x7ee0)) returned 1 [0148.763] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0148.763] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3375042201\\1858609885.pri", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3375042201\\1858609885.pri", lpFilePart=0x0) returned 0x58 [0148.763] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0148.763] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3375042201\\1858609885.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\3375042201\\1858609885.pri"), fInfoLevelId=0x0, lpFileInformation=0x21721d8 | out: lpFileInformation=0x21721d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc3e8880, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xbc3e8880, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xbc3e8880, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x7ee0)) returned 1 [0148.763] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0148.763] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3375042201\\1858609885.pri", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3375042201\\1858609885.pri", lpFilePart=0x0) returned 0x58 [0148.763] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0148.763] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3375042201\\1858609885.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\3375042201\\1858609885.pri"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0148.764] GetFileType (hFile=0x444) returned 0x1 [0148.764] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0148.764] GetFileType (hFile=0x444) returned 0x1 [0148.764] ReadFile (in: hFile=0x444, lpBuffer=0x21745e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x21745e8*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0148.776] CloseHandle (hObject=0x444) returned 1 [0148.776] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3375042201\\1858609885.pri", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3375042201\\1858609885.pri", lpFilePart=0x0) returned 0x58 [0148.776] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0148.776] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3375042201\\1858609885.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\3375042201\\1858609885.pri"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0148.777] GetFileType (hFile=0x444) returned 0x1 [0148.777] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0148.777] GetFileType (hFile=0x444) returned 0x1 [0148.777] WriteFile (in: hFile=0x444, lpBuffer=0x2172328*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x2172328*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0148.777] CloseHandle (hObject=0x444) returned 1 [0148.777] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3375042201\\1858609885.pri", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3375042201\\1858609885.pri", lpFilePart=0x0) returned 0x58 [0148.777] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3375042201\\1858609885.pri.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3375042201\\1858609885.pri.xuy", lpFilePart=0x0) returned 0x5c [0148.777] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0148.777] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3375042201\\1858609885.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\3375042201\\1858609885.pri"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc3e8880, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xbc3e8880, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x44873e68, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x7ee0)) returned 1 [0148.777] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0148.777] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3375042201\\1858609885.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\3375042201\\1858609885.pri"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3375042201\\1858609885.pri.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\3375042201\\1858609885.pri.xuy")) returned 1 [0148.778] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0148.778] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3530508098", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3530508098", lpFilePart=0x0) returned 0x49 [0148.779] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3530508098\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3530508098\\", lpFilePart=0x0) returned 0x4a [0148.779] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3530508098\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d81b0 [0148.779] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0148.779] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0148.780] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0148.780] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0148.780] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0148.780] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0148.780] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0148.780] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3530508098", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3530508098", lpFilePart=0x0) returned 0x49 [0148.780] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3530508098\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3530508098\\", lpFilePart=0x0) returned 0x4a [0148.780] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3530508098\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d79d0 [0148.780] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0148.780] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0148.780] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0148.781] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0148.781] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0148.781] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0148.781] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3530508098\\2495906576.pri", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3530508098\\2495906576.pri", lpFilePart=0x0) returned 0x58 [0148.781] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0148.781] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3530508098\\2495906576.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\3530508098\\2495906576.pri"), fInfoLevelId=0x0, lpFileInformation=0x21f2a60 | out: lpFileInformation=0x21f2a60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5ca4804, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb5ca4804, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xb5ca4804, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x13b60)) returned 1 [0148.781] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0148.781] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3530508098\\2495906576.pri", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3530508098\\2495906576.pri", lpFilePart=0x0) returned 0x58 [0148.781] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0148.781] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3530508098\\2495906576.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\3530508098\\2495906576.pri"), fInfoLevelId=0x0, lpFileInformation=0x21f2bd0 | out: lpFileInformation=0x21f2bd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5ca4804, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb5ca4804, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xb5ca4804, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x13b60)) returned 1 [0148.781] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0148.781] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3530508098\\2495906576.pri", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3530508098\\2495906576.pri", lpFilePart=0x0) returned 0x58 [0148.781] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0148.781] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3530508098\\2495906576.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\3530508098\\2495906576.pri"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0148.782] GetFileType (hFile=0x444) returned 0x1 [0148.782] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0148.782] GetFileType (hFile=0x444) returned 0x1 [0148.782] ReadFile (in: hFile=0x444, lpBuffer=0x21f4fe0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x21f4fe0*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0148.803] CloseHandle (hObject=0x444) returned 1 [0148.819] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3530508098\\2495906576.pri", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3530508098\\2495906576.pri", lpFilePart=0x0) returned 0x58 [0148.819] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0148.819] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3530508098\\2495906576.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\3530508098\\2495906576.pri"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0148.819] GetFileType (hFile=0x444) returned 0x1 [0148.820] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0148.820] GetFileType (hFile=0x444) returned 0x1 [0148.820] WriteFile (in: hFile=0x444, lpBuffer=0x21f2d20*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x21f2d20*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0148.820] CloseHandle (hObject=0x444) returned 1 [0148.820] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3530508098\\2495906576.pri", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3530508098\\2495906576.pri", lpFilePart=0x0) returned 0x58 [0148.820] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3530508098\\2495906576.pri.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3530508098\\2495906576.pri.xuy", lpFilePart=0x0) returned 0x5c [0148.820] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0148.820] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3530508098\\2495906576.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\3530508098\\2495906576.pri"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5ca4804, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb5ca4804, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x448c0002, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x13b60)) returned 1 [0148.820] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0148.820] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3530508098\\2495906576.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\3530508098\\2495906576.pri"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3530508098\\2495906576.pri.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\3530508098\\2495906576.pri.xuy")) returned 1 [0148.822] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0148.822] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3705566220", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3705566220", lpFilePart=0x0) returned 0x49 [0148.822] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3705566220\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3705566220\\", lpFilePart=0x0) returned 0x4a [0148.822] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3705566220\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d78b0 [0148.822] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0148.823] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0148.823] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0148.823] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0148.823] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0148.823] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0148.823] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0148.823] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3705566220", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3705566220", lpFilePart=0x0) returned 0x49 [0148.823] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3705566220\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3705566220\\", lpFilePart=0x0) returned 0x4a [0148.823] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3705566220\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7610 [0148.823] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0148.823] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0148.823] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0148.824] FindClose (in: hFindFile=0x5d7610 | out: hFindFile=0x5d7610) returned 1 [0148.824] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0148.824] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0148.824] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3705566220\\624664733.pri", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3705566220\\624664733.pri", lpFilePart=0x0) returned 0x57 [0148.824] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0148.824] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3705566220\\624664733.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\3705566220\\624664733.pri"), fInfoLevelId=0x0, lpFileInformation=0x2273438 | out: lpFileInformation=0x2273438*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb019889b, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb019889b, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xb019889b, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x1fc8)) returned 1 [0148.824] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0148.824] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3705566220\\624664733.pri", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3705566220\\624664733.pri", lpFilePart=0x0) returned 0x57 [0148.824] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0148.825] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3705566220\\624664733.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\3705566220\\624664733.pri"), fInfoLevelId=0x0, lpFileInformation=0x22735a0 | out: lpFileInformation=0x22735a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb019889b, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb019889b, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xb019889b, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x1fc8)) returned 1 [0148.825] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0148.825] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3705566220\\624664733.pri", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3705566220\\624664733.pri", lpFilePart=0x0) returned 0x57 [0148.825] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0148.825] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3705566220\\624664733.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\3705566220\\624664733.pri"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0148.826] GetFileType (hFile=0x444) returned 0x1 [0148.826] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0148.826] GetFileType (hFile=0x444) returned 0x1 [0148.826] ReadFile (in: hFile=0x444, lpBuffer=0x22759a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x22759a0*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0148.849] CloseHandle (hObject=0x444) returned 1 [0148.871] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3705566220\\624664733.pri", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3705566220\\624664733.pri", lpFilePart=0x0) returned 0x57 [0148.871] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0148.871] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3705566220\\624664733.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\3705566220\\624664733.pri"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0148.872] GetFileType (hFile=0x444) returned 0x1 [0148.872] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0148.872] GetFileType (hFile=0x444) returned 0x1 [0148.872] WriteFile (in: hFile=0x444, lpBuffer=0x22736e8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x22736e8*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0148.872] CloseHandle (hObject=0x444) returned 1 [0148.872] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3705566220\\624664733.pri", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3705566220\\624664733.pri", lpFilePart=0x0) returned 0x57 [0148.872] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3705566220\\624664733.pri.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3705566220\\624664733.pri.xuy", lpFilePart=0x0) returned 0x5b [0148.872] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0148.872] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3705566220\\624664733.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\3705566220\\624664733.pri"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb019889b, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb019889b, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x44958936, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0148.872] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0148.872] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3705566220\\624664733.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\3705566220\\624664733.pri"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3705566220\\624664733.pri.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\3705566220\\624664733.pri.xuy")) returned 1 [0148.874] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0148.874] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3779757838", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3779757838", lpFilePart=0x0) returned 0x49 [0148.874] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3779757838\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3779757838\\", lpFilePart=0x0) returned 0x4a [0148.874] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3779757838\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7f10 [0148.874] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0148.874] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0148.874] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0148.874] FindClose (in: hFindFile=0x5d7f10 | out: hFindFile=0x5d7f10) returned 1 [0148.874] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0148.874] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0148.874] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0148.874] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3779757838", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3779757838", lpFilePart=0x0) returned 0x49 [0148.875] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3779757838\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3779757838\\", lpFilePart=0x0) returned 0x4a [0148.875] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3779757838\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7550 [0148.875] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0148.875] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0148.875] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0148.875] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0148.875] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0148.875] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0148.875] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3779757838\\1034590242.pri", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3779757838\\1034590242.pri", lpFilePart=0x0) returned 0x58 [0148.875] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0148.875] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3779757838\\1034590242.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\3779757838\\1034590242.pri"), fInfoLevelId=0x0, lpFileInformation=0x22f3df8 | out: lpFileInformation=0x22f3df8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad661d8c, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xad661d8c, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xae5bb00a, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x728)) returned 1 [0148.876] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0148.876] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3779757838\\1034590242.pri", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3779757838\\1034590242.pri", lpFilePart=0x0) returned 0x58 [0148.876] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0148.876] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3779757838\\1034590242.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\3779757838\\1034590242.pri"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0148.876] GetFileType (hFile=0x444) returned 0x1 [0148.876] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0148.876] GetFileType (hFile=0x444) returned 0x1 [0148.876] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x728 [0148.876] ReadFile (in: hFile=0x444, lpBuffer=0x22f4818, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x22f4818*, lpNumberOfBytesRead=0x3be6a8*=0x728, lpOverlapped=0x0) returned 1 [0148.877] CloseHandle (hObject=0x444) returned 1 [0148.918] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3779757838\\1034590242.pri", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3779757838\\1034590242.pri", lpFilePart=0x0) returned 0x58 [0148.918] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0148.918] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3779757838\\1034590242.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\3779757838\\1034590242.pri"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0148.928] GetFileType (hFile=0x444) returned 0x1 [0148.928] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0148.928] GetFileType (hFile=0x444) returned 0x1 [0148.929] WriteFile (in: hFile=0x444, lpBuffer=0x2170aa0*, nNumberOfBytesToWrite=0x730, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x2170aa0*, lpNumberOfBytesWritten=0x3be5b8*=0x730, lpOverlapped=0x0) returned 1 [0148.929] CloseHandle (hObject=0x444) returned 1 [0148.929] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3779757838\\1034590242.pri", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3779757838\\1034590242.pri", lpFilePart=0x0) returned 0x58 [0148.929] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3779757838\\1034590242.pri.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3779757838\\1034590242.pri.xuy", lpFilePart=0x0) returned 0x5c [0148.929] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0148.930] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3779757838\\1034590242.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\3779757838\\1034590242.pri"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad661d8c, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xad661d8c, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x449cb004, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x730)) returned 1 [0148.932] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0148.932] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3779757838\\1034590242.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\3779757838\\1034590242.pri"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3779757838\\1034590242.pri.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\3779757838\\1034590242.pri.xuy")) returned 1 [0148.933] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0148.933] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3782802250", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3782802250", lpFilePart=0x0) returned 0x49 [0148.933] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3782802250\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3782802250\\", lpFilePart=0x0) returned 0x4a [0148.933] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3782802250\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d78b0 [0148.934] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0148.934] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0148.935] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0148.935] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0148.935] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0148.935] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0148.935] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0148.935] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3782802250", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3782802250", lpFilePart=0x0) returned 0x49 [0148.935] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3782802250\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3782802250\\", lpFilePart=0x0) returned 0x4a [0148.935] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3782802250\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7e50 [0148.935] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0148.935] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0148.935] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0148.935] FindClose (in: hFindFile=0x5d7e50 | out: hFindFile=0x5d7e50) returned 1 [0148.936] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0148.936] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0148.936] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3782802250\\2924287686.pri", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3782802250\\2924287686.pri", lpFilePart=0x0) returned 0x58 [0148.936] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0148.936] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3782802250\\2924287686.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\3782802250\\2924287686.pri"), fInfoLevelId=0x0, lpFileInformation=0x2173dc0 | out: lpFileInformation=0x2173dc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0e8f58a, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb0e8f58a, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xb0e8f58a, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x19f0)) returned 1 [0148.936] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0148.936] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3782802250\\2924287686.pri", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3782802250\\2924287686.pri", lpFilePart=0x0) returned 0x58 [0148.936] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0148.936] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3782802250\\2924287686.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\3782802250\\2924287686.pri"), fInfoLevelId=0x0, lpFileInformation=0x2173f30 | out: lpFileInformation=0x2173f30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0e8f58a, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb0e8f58a, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xb0e8f58a, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x19f0)) returned 1 [0148.936] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0148.936] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3782802250\\2924287686.pri", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3782802250\\2924287686.pri", lpFilePart=0x0) returned 0x58 [0148.936] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0148.936] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3782802250\\2924287686.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\3782802250\\2924287686.pri"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0148.937] GetFileType (hFile=0x444) returned 0x1 [0148.937] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0148.937] GetFileType (hFile=0x444) returned 0x1 [0148.937] ReadFile (in: hFile=0x444, lpBuffer=0x2176340, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x2176340*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0148.982] CloseHandle (hObject=0x444) returned 1 [0148.982] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3782802250\\2924287686.pri", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3782802250\\2924287686.pri", lpFilePart=0x0) returned 0x58 [0148.982] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0148.982] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3782802250\\2924287686.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\3782802250\\2924287686.pri"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0148.983] GetFileType (hFile=0x444) returned 0x1 [0148.983] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0148.983] GetFileType (hFile=0x444) returned 0x1 [0148.983] WriteFile (in: hFile=0x444, lpBuffer=0x2174080*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x2174080*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0148.983] CloseHandle (hObject=0x444) returned 1 [0148.983] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3782802250\\2924287686.pri", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3782802250\\2924287686.pri", lpFilePart=0x0) returned 0x58 [0148.983] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3782802250\\2924287686.pri.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3782802250\\2924287686.pri.xuy", lpFilePart=0x0) returned 0x5c [0148.983] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0148.983] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3782802250\\2924287686.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\3782802250\\2924287686.pri"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0e8f58a, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb0e8f58a, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x44a63a35, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0148.983] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0148.983] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3782802250\\2924287686.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\3782802250\\2924287686.pri"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3782802250\\2924287686.pri.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\3782802250\\2924287686.pri.xuy")) returned 1 [0148.984] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0148.985] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\860568095", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\860568095", lpFilePart=0x0) returned 0x48 [0148.985] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\860568095\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\860568095\\", lpFilePart=0x0) returned 0x49 [0148.985] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\860568095\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7370 [0148.985] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0148.986] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0148.986] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0148.986] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0148.986] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0148.986] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0148.986] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0148.986] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\860568095", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\860568095", lpFilePart=0x0) returned 0x48 [0148.986] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\860568095\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\860568095\\", lpFilePart=0x0) returned 0x49 [0148.986] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\860568095\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7550 [0148.986] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0148.986] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0148.987] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0148.987] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0148.987] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0148.987] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0148.987] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\860568095\\965632691.pri", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\860568095\\965632691.pri", lpFilePart=0x0) returned 0x56 [0148.987] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0148.987] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\860568095\\965632691.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\860568095\\965632691.pri"), fInfoLevelId=0x0, lpFileInformation=0x21f4778 | out: lpFileInformation=0x21f4778*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcf61da9, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xbcf61da9, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xbcf61da9, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x20a0)) returned 1 [0148.987] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0148.987] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\860568095\\965632691.pri", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\860568095\\965632691.pri", lpFilePart=0x0) returned 0x56 [0148.987] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0148.987] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\860568095\\965632691.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\860568095\\965632691.pri"), fInfoLevelId=0x0, lpFileInformation=0x21f48e0 | out: lpFileInformation=0x21f48e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcf61da9, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xbcf61da9, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xbcf61da9, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x20a0)) returned 1 [0148.987] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0148.987] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\860568095\\965632691.pri", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\860568095\\965632691.pri", lpFilePart=0x0) returned 0x56 [0148.987] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0148.987] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\860568095\\965632691.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\860568095\\965632691.pri"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0148.988] GetFileType (hFile=0x444) returned 0x1 [0148.988] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0148.988] GetFileType (hFile=0x444) returned 0x1 [0148.988] ReadFile (in: hFile=0x444, lpBuffer=0x21f6ce0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x21f6ce0*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0149.012] CloseHandle (hObject=0x444) returned 1 [0149.012] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\860568095\\965632691.pri", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\860568095\\965632691.pri", lpFilePart=0x0) returned 0x56 [0149.012] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0149.013] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\860568095\\965632691.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\860568095\\965632691.pri"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0149.013] GetFileType (hFile=0x444) returned 0x1 [0149.013] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0149.013] GetFileType (hFile=0x444) returned 0x1 [0149.013] WriteFile (in: hFile=0x444, lpBuffer=0x21f4a28*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x21f4a28*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0149.013] CloseHandle (hObject=0x444) returned 1 [0149.013] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\860568095\\965632691.pri", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\860568095\\965632691.pri", lpFilePart=0x0) returned 0x56 [0149.013] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\860568095\\965632691.pri.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\860568095\\965632691.pri.xuy", lpFilePart=0x0) returned 0x5a [0149.013] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0149.013] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\860568095\\965632691.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\860568095\\965632691.pri"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcf61da9, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xbcf61da9, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x44aafe74, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x20a0)) returned 1 [0149.013] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0149.013] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\860568095\\965632691.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\860568095\\965632691.pri"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\860568095\\965632691.pri.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\860568095\\965632691.pri.xuy")) returned 1 [0149.014] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0149.015] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.AAD.BrokerPlugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.AAD.BrokerPlugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy", lpFilePart=0x0) returned 0x8a [0149.015] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.AAD.BrokerPlugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.AAD.BrokerPlugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\", lpFilePart=0x0) returned 0x8b [0149.015] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.AAD.BrokerPlugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7550 [0149.015] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0149.015] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0149.015] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0149.015] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0149.016] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0149.016] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0149.016] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0149.016] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.AAD.BrokerPlugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.AAD.BrokerPlugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy", lpFilePart=0x0) returned 0x8a [0149.016] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.AAD.BrokerPlugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.AAD.BrokerPlugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\", lpFilePart=0x0) returned 0x8b [0149.016] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.AAD.BrokerPlugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d81b0 [0149.016] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0149.016] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0149.016] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0149.016] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0149.016] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0149.016] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0149.016] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0149.016] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.AAD.BrokerPlugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\3779757838", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.AAD.BrokerPlugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\3779757838", lpFilePart=0x0) returned 0x95 [0149.016] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.AAD.BrokerPlugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\3779757838\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.AAD.BrokerPlugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\3779757838\\", lpFilePart=0x0) returned 0x96 [0149.017] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.AAD.BrokerPlugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\3779757838\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d81b0 [0149.017] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0149.017] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0149.017] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0149.017] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0149.019] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0149.019] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0149.019] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0149.019] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.AAD.BrokerPlugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\3779757838", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.AAD.BrokerPlugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\3779757838", lpFilePart=0x0) returned 0x95 [0149.019] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.AAD.BrokerPlugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\3779757838\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.AAD.BrokerPlugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\3779757838\\", lpFilePart=0x0) returned 0x96 [0149.019] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.AAD.BrokerPlugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\3779757838\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d7a90 [0149.019] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0149.019] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0149.019] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0149.019] FindClose (in: hFindFile=0x5d7a90 | out: hFindFile=0x5d7a90) returned 1 [0149.019] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0149.020] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0149.020] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.AAD.BrokerPlugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\3779757838\\1034590242.pri", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.AAD.BrokerPlugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\3779757838\\1034590242.pri", lpFilePart=0x0) returned 0xa4 [0149.020] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0149.020] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.AAD.BrokerPlugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\3779757838\\1034590242.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.aad.brokerplugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\3779757838\\1034590242.pri"), fInfoLevelId=0x0, lpFileInformation=0x2279268 | out: lpFileInformation=0x2279268*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf5869d0, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xaf5869d0, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xaf5869d0, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x728)) returned 1 [0149.020] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0149.020] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.AAD.BrokerPlugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\3779757838\\1034590242.pri", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.AAD.BrokerPlugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\3779757838\\1034590242.pri", lpFilePart=0x0) returned 0xa4 [0149.020] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0149.020] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.AAD.BrokerPlugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\3779757838\\1034590242.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.aad.brokerplugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\3779757838\\1034590242.pri"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0149.020] GetFileType (hFile=0x444) returned 0x1 [0149.020] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0149.020] GetFileType (hFile=0x444) returned 0x1 [0149.020] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be708 | out: lpFileSizeHigh=0x3be708*=0x0) returned 0x728 [0149.020] ReadFile (in: hFile=0x444, lpBuffer=0x2279db8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be638, lpOverlapped=0x0 | out: lpBuffer=0x2279db8*, lpNumberOfBytesRead=0x3be638*=0x728, lpOverlapped=0x0) returned 1 [0149.031] CloseHandle (hObject=0x444) returned 1 [0149.180] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.AAD.BrokerPlugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\3779757838\\1034590242.pri", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.AAD.BrokerPlugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\3779757838\\1034590242.pri", lpFilePart=0x0) returned 0xa4 [0149.180] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0149.180] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.AAD.BrokerPlugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\3779757838\\1034590242.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.aad.brokerplugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\3779757838\\1034590242.pri"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0149.182] GetFileType (hFile=0x444) returned 0x1 [0149.182] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0149.182] GetFileType (hFile=0x444) returned 0x1 [0149.182] WriteFile (in: hFile=0x444, lpBuffer=0x22f3240*, nNumberOfBytesToWrite=0x730, lpNumberOfBytesWritten=0x3be548, lpOverlapped=0x0 | out: lpBuffer=0x22f3240*, lpNumberOfBytesWritten=0x3be548*=0x730, lpOverlapped=0x0) returned 1 [0149.183] CloseHandle (hObject=0x444) returned 1 [0149.183] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.AAD.BrokerPlugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\3779757838\\1034590242.pri", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.AAD.BrokerPlugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\3779757838\\1034590242.pri", lpFilePart=0x0) returned 0xa4 [0149.183] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.AAD.BrokerPlugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\3779757838\\1034590242.pri.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.AAD.BrokerPlugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\3779757838\\1034590242.pri.xuy", lpFilePart=0x0) returned 0xa8 [0149.183] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0149.183] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.AAD.BrokerPlugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\3779757838\\1034590242.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.aad.brokerplugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\3779757838\\1034590242.pri"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf5869d0, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xaf5869d0, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x44c56819, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x730)) returned 1 [0149.183] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0149.183] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.AAD.BrokerPlugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\3779757838\\1034590242.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.aad.brokerplugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\3779757838\\1034590242.pri"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.AAD.BrokerPlugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\3779757838\\1034590242.pri.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.aad.brokerplugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\3779757838\\1034590242.pri.xuy")) returned 1 [0149.184] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0149.184] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.AccountsControl_10.0.10240.16384_neutral__cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.AccountsControl_10.0.10240.16384_neutral__cw5n1h2txyewy", lpFilePart=0x0) returned 0x80 [0149.184] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.AccountsControl_10.0.10240.16384_neutral__cw5n1h2txyewy\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.AccountsControl_10.0.10240.16384_neutral__cw5n1h2txyewy\\", lpFilePart=0x0) returned 0x81 [0149.184] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.AccountsControl_10.0.10240.16384_neutral__cw5n1h2txyewy\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7af0 [0149.185] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0149.185] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0149.186] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0149.186] FindClose (in: hFindFile=0x5d7af0 | out: hFindFile=0x5d7af0) returned 1 [0149.186] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0149.186] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0149.186] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0149.186] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.AccountsControl_10.0.10240.16384_neutral__cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.AccountsControl_10.0.10240.16384_neutral__cw5n1h2txyewy", lpFilePart=0x0) returned 0x80 [0149.186] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.AccountsControl_10.0.10240.16384_neutral__cw5n1h2txyewy\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.AccountsControl_10.0.10240.16384_neutral__cw5n1h2txyewy\\", lpFilePart=0x0) returned 0x81 [0149.186] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.AccountsControl_10.0.10240.16384_neutral__cw5n1h2txyewy\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d81b0 [0149.186] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0149.186] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0149.186] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0149.186] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0149.186] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0149.186] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0149.187] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0149.187] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.AccountsControl_10.0.10240.16384_neutral__cw5n1h2txyewy\\3053798886", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.AccountsControl_10.0.10240.16384_neutral__cw5n1h2txyewy\\3053798886", lpFilePart=0x0) returned 0x8b [0149.187] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.AccountsControl_10.0.10240.16384_neutral__cw5n1h2txyewy\\3053798886\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.AccountsControl_10.0.10240.16384_neutral__cw5n1h2txyewy\\3053798886\\", lpFilePart=0x0) returned 0x8c [0149.187] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.AccountsControl_10.0.10240.16384_neutral__cw5n1h2txyewy\\3053798886\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d79d0 [0149.187] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0149.187] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0149.187] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0149.187] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0149.187] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0149.187] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0149.187] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0149.187] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.AccountsControl_10.0.10240.16384_neutral__cw5n1h2txyewy\\3053798886", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.AccountsControl_10.0.10240.16384_neutral__cw5n1h2txyewy\\3053798886", lpFilePart=0x0) returned 0x8b [0149.187] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.AccountsControl_10.0.10240.16384_neutral__cw5n1h2txyewy\\3053798886\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.AccountsControl_10.0.10240.16384_neutral__cw5n1h2txyewy\\3053798886\\", lpFilePart=0x0) returned 0x8c [0149.187] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.AccountsControl_10.0.10240.16384_neutral__cw5n1h2txyewy\\3053798886\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d79d0 [0149.188] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0149.188] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0149.188] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0149.188] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0149.188] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0149.188] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0149.188] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.AccountsControl_10.0.10240.16384_neutral__cw5n1h2txyewy\\3053798886\\3825186184.pri", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.AccountsControl_10.0.10240.16384_neutral__cw5n1h2txyewy\\3053798886\\3825186184.pri", lpFilePart=0x0) returned 0x9a [0149.188] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0149.188] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.AccountsControl_10.0.10240.16384_neutral__cw5n1h2txyewy\\3053798886\\3825186184.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.accountscontrol_10.0.10240.16384_neutral__cw5n1h2txyewy\\3053798886\\3825186184.pri"), fInfoLevelId=0x0, lpFileInformation=0x22fa388 | out: lpFileInformation=0x22fa388*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb097e578, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb097e578, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xb097e578, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x3c10)) returned 1 [0149.188] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0149.188] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.AccountsControl_10.0.10240.16384_neutral__cw5n1h2txyewy\\3053798886\\3825186184.pri", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.AccountsControl_10.0.10240.16384_neutral__cw5n1h2txyewy\\3053798886\\3825186184.pri", lpFilePart=0x0) returned 0x9a [0149.188] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0149.188] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.AccountsControl_10.0.10240.16384_neutral__cw5n1h2txyewy\\3053798886\\3825186184.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.accountscontrol_10.0.10240.16384_neutral__cw5n1h2txyewy\\3053798886\\3825186184.pri"), fInfoLevelId=0x0, lpFileInformation=0x22fa578 | out: lpFileInformation=0x22fa578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb097e578, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb097e578, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xb097e578, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x3c10)) returned 1 [0149.189] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0149.189] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.AccountsControl_10.0.10240.16384_neutral__cw5n1h2txyewy\\3053798886\\3825186184.pri", nBufferLength=0x105, lpBuffer=0x3be120, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.AccountsControl_10.0.10240.16384_neutral__cw5n1h2txyewy\\3053798886\\3825186184.pri", lpFilePart=0x0) returned 0x9a [0149.189] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0149.189] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.AccountsControl_10.0.10240.16384_neutral__cw5n1h2txyewy\\3053798886\\3825186184.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.accountscontrol_10.0.10240.16384_neutral__cw5n1h2txyewy\\3053798886\\3825186184.pri"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0149.190] GetFileType (hFile=0x444) returned 0x1 [0149.190] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be570) returned 1 [0149.190] GetFileType (hFile=0x444) returned 0x1 [0149.190] ReadFile (in: hFile=0x444, lpBuffer=0x22fca88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be688, lpOverlapped=0x0 | out: lpBuffer=0x22fca88*, lpNumberOfBytesRead=0x3be688*=0x1000, lpOverlapped=0x0) returned 1 [0149.244] CloseHandle (hObject=0x444) returned 1 [0149.244] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.AccountsControl_10.0.10240.16384_neutral__cw5n1h2txyewy\\3053798886\\3825186184.pri", nBufferLength=0x105, lpBuffer=0x3be120, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.AccountsControl_10.0.10240.16384_neutral__cw5n1h2txyewy\\3053798886\\3825186184.pri", lpFilePart=0x0) returned 0x9a [0149.244] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0149.244] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.AccountsControl_10.0.10240.16384_neutral__cw5n1h2txyewy\\3053798886\\3825186184.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.accountscontrol_10.0.10240.16384_neutral__cw5n1h2txyewy\\3053798886\\3825186184.pri"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0149.245] GetFileType (hFile=0x444) returned 0x1 [0149.245] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be570) returned 1 [0149.245] GetFileType (hFile=0x444) returned 0x1 [0149.245] WriteFile (in: hFile=0x444, lpBuffer=0x214a900*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be738, lpOverlapped=0x0 | out: lpBuffer=0x214a900*, lpNumberOfBytesWritten=0x3be738*=0x2000, lpOverlapped=0x0) returned 1 [0149.245] CloseHandle (hObject=0x444) returned 1 [0149.245] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.AccountsControl_10.0.10240.16384_neutral__cw5n1h2txyewy\\3053798886\\3825186184.pri", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.AccountsControl_10.0.10240.16384_neutral__cw5n1h2txyewy\\3053798886\\3825186184.pri", lpFilePart=0x0) returned 0x9a [0149.245] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.AccountsControl_10.0.10240.16384_neutral__cw5n1h2txyewy\\3053798886\\3825186184.pri.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.AccountsControl_10.0.10240.16384_neutral__cw5n1h2txyewy\\3053798886\\3825186184.pri.xuy", lpFilePart=0x0) returned 0x9e [0149.245] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0149.245] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.AccountsControl_10.0.10240.16384_neutral__cw5n1h2txyewy\\3053798886\\3825186184.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.accountscontrol_10.0.10240.16384_neutral__cw5n1h2txyewy\\3053798886\\3825186184.pri"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb097e578, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb097e578, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x44cec6d5, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x3c10)) returned 1 [0149.245] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0149.245] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.AccountsControl_10.0.10240.16384_neutral__cw5n1h2txyewy\\3053798886\\3825186184.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.accountscontrol_10.0.10240.16384_neutral__cw5n1h2txyewy\\3053798886\\3825186184.pri"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.AccountsControl_10.0.10240.16384_neutral__cw5n1h2txyewy\\3053798886\\3825186184.pri.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.accountscontrol_10.0.10240.16384_neutral__cw5n1h2txyewy\\3053798886\\3825186184.pri.xuy")) returned 1 [0149.246] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0149.247] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.BioEnrollment_10.0.10240.16384_neutral__cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.BioEnrollment_10.0.10240.16384_neutral__cw5n1h2txyewy", lpFilePart=0x0) returned 0x7e [0149.247] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.BioEnrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.BioEnrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\", lpFilePart=0x0) returned 0x7f [0149.247] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.BioEnrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d79d0 [0149.247] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0149.247] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0149.247] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0149.247] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0149.247] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0149.247] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0149.247] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0149.247] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.BioEnrollment_10.0.10240.16384_neutral__cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.BioEnrollment_10.0.10240.16384_neutral__cw5n1h2txyewy", lpFilePart=0x0) returned 0x7e [0149.247] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.BioEnrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.BioEnrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\", lpFilePart=0x0) returned 0x7f [0149.248] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.BioEnrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7d90 [0149.248] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0149.248] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0149.248] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0149.248] FindClose (in: hFindFile=0x5d7d90 | out: hFindFile=0x5d7d90) returned 1 [0149.248] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0149.248] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0149.248] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0149.248] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.BioEnrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\3782802250", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.BioEnrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\3782802250", lpFilePart=0x0) returned 0x89 [0149.248] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.BioEnrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\3782802250\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.BioEnrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\3782802250\\", lpFilePart=0x0) returned 0x8a [0149.248] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.BioEnrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\3782802250\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d7af0 [0149.249] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0149.249] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0149.249] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0149.249] FindClose (in: hFindFile=0x5d7af0 | out: hFindFile=0x5d7af0) returned 1 [0149.249] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0149.249] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0149.249] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0149.249] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.BioEnrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\3782802250", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.BioEnrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\3782802250", lpFilePart=0x0) returned 0x89 [0149.249] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.BioEnrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\3782802250\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.BioEnrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\3782802250\\", lpFilePart=0x0) returned 0x8a [0149.249] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.BioEnrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\3782802250\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d7370 [0149.249] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0149.249] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0149.250] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0149.250] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0149.250] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0149.250] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0149.250] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.BioEnrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\3782802250\\2924287686.pri", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.BioEnrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\3782802250\\2924287686.pri", lpFilePart=0x0) returned 0x98 [0149.250] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0149.250] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.BioEnrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\3782802250\\2924287686.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.bioenrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\3782802250\\2924287686.pri"), fInfoLevelId=0x0, lpFileInformation=0x21835a0 | out: lpFileInformation=0x21835a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0eb57fc, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb0eb57fc, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xb0edba48, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x19f0)) returned 1 [0149.251] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0149.251] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.BioEnrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\3782802250\\2924287686.pri", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.BioEnrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\3782802250\\2924287686.pri", lpFilePart=0x0) returned 0x98 [0149.251] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0149.251] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.BioEnrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\3782802250\\2924287686.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.bioenrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\3782802250\\2924287686.pri"), fInfoLevelId=0x0, lpFileInformation=0x2183790 | out: lpFileInformation=0x2183790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0eb57fc, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb0eb57fc, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xb0edba48, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x19f0)) returned 1 [0149.251] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0149.251] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.BioEnrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\3782802250\\2924287686.pri", nBufferLength=0x105, lpBuffer=0x3be120, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.BioEnrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\3782802250\\2924287686.pri", lpFilePart=0x0) returned 0x98 [0149.252] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0149.252] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.BioEnrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\3782802250\\2924287686.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.bioenrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\3782802250\\2924287686.pri"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0149.253] GetFileType (hFile=0x444) returned 0x1 [0149.253] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be570) returned 1 [0149.253] GetFileType (hFile=0x444) returned 0x1 [0149.253] ReadFile (in: hFile=0x444, lpBuffer=0x2185ca0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be688, lpOverlapped=0x0 | out: lpBuffer=0x2185ca0*, lpNumberOfBytesRead=0x3be688*=0x1000, lpOverlapped=0x0) returned 1 [0149.266] CloseHandle (hObject=0x444) returned 1 [0149.266] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.BioEnrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\3782802250\\2924287686.pri", nBufferLength=0x105, lpBuffer=0x3be120, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.BioEnrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\3782802250\\2924287686.pri", lpFilePart=0x0) returned 0x98 [0149.266] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0149.266] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.BioEnrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\3782802250\\2924287686.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.bioenrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\3782802250\\2924287686.pri"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0149.266] GetFileType (hFile=0x444) returned 0x1 [0149.266] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be570) returned 1 [0149.266] GetFileType (hFile=0x444) returned 0x1 [0149.266] WriteFile (in: hFile=0x444, lpBuffer=0x2183960*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be738, lpOverlapped=0x0 | out: lpBuffer=0x2183960*, lpNumberOfBytesWritten=0x3be738*=0x2000, lpOverlapped=0x0) returned 1 [0149.266] CloseHandle (hObject=0x444) returned 1 [0149.267] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.BioEnrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\3782802250\\2924287686.pri", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.BioEnrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\3782802250\\2924287686.pri", lpFilePart=0x0) returned 0x98 [0149.267] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.BioEnrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\3782802250\\2924287686.pri.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.BioEnrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\3782802250\\2924287686.pri.xuy", lpFilePart=0x0) returned 0x9c [0149.267] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0149.267] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.BioEnrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\3782802250\\2924287686.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.bioenrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\3782802250\\2924287686.pri"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0eb57fc, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb0eb57fc, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x44d12376, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0149.267] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0149.267] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.BioEnrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\3782802250\\2924287686.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.bioenrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\3782802250\\2924287686.pri"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.BioEnrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\3782802250\\2924287686.pri.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.bioenrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\3782802250\\2924287686.pri.xuy")) returned 1 [0149.268] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0149.268] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.LockApp_10.0.10240.16384_neutral__cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.LockApp_10.0.10240.16384_neutral__cw5n1h2txyewy", lpFilePart=0x0) returned 0x78 [0149.268] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.LockApp_10.0.10240.16384_neutral__cw5n1h2txyewy\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.LockApp_10.0.10240.16384_neutral__cw5n1h2txyewy\\", lpFilePart=0x0) returned 0x79 [0149.268] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.LockApp_10.0.10240.16384_neutral__cw5n1h2txyewy\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7370 [0149.269] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0149.269] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0149.269] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0149.269] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0149.269] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0149.269] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0149.269] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0149.269] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.LockApp_10.0.10240.16384_neutral__cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.LockApp_10.0.10240.16384_neutral__cw5n1h2txyewy", lpFilePart=0x0) returned 0x78 [0149.269] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.LockApp_10.0.10240.16384_neutral__cw5n1h2txyewy\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.LockApp_10.0.10240.16384_neutral__cw5n1h2txyewy\\", lpFilePart=0x0) returned 0x79 [0149.270] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.LockApp_10.0.10240.16384_neutral__cw5n1h2txyewy\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d81b0 [0149.270] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0149.270] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0149.270] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0149.270] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0149.270] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0149.270] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0149.270] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0149.270] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.LockApp_10.0.10240.16384_neutral__cw5n1h2txyewy\\1978304864", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.LockApp_10.0.10240.16384_neutral__cw5n1h2txyewy\\1978304864", lpFilePart=0x0) returned 0x83 [0149.270] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.LockApp_10.0.10240.16384_neutral__cw5n1h2txyewy\\1978304864\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.LockApp_10.0.10240.16384_neutral__cw5n1h2txyewy\\1978304864\\", lpFilePart=0x0) returned 0x84 [0149.270] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.LockApp_10.0.10240.16384_neutral__cw5n1h2txyewy\\1978304864\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d79d0 [0149.271] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0149.271] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0149.271] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0149.271] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0149.271] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0149.271] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0149.271] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0149.271] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.LockApp_10.0.10240.16384_neutral__cw5n1h2txyewy\\1978304864", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.LockApp_10.0.10240.16384_neutral__cw5n1h2txyewy\\1978304864", lpFilePart=0x0) returned 0x83 [0149.271] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.LockApp_10.0.10240.16384_neutral__cw5n1h2txyewy\\1978304864\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.LockApp_10.0.10240.16384_neutral__cw5n1h2txyewy\\1978304864\\", lpFilePart=0x0) returned 0x84 [0149.271] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.LockApp_10.0.10240.16384_neutral__cw5n1h2txyewy\\1978304864\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d7e50 [0149.271] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0149.271] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0149.272] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0149.272] FindClose (in: hFindFile=0x5d7e50 | out: hFindFile=0x5d7e50) returned 1 [0149.272] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0149.272] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0149.272] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.LockApp_10.0.10240.16384_neutral__cw5n1h2txyewy\\1978304864\\923683402.pri", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.LockApp_10.0.10240.16384_neutral__cw5n1h2txyewy\\1978304864\\923683402.pri", lpFilePart=0x0) returned 0x91 [0149.272] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0149.272] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.LockApp_10.0.10240.16384_neutral__cw5n1h2txyewy\\1978304864\\923683402.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.lockapp_10.0.10240.16384_neutral__cw5n1h2txyewy\\1978304864\\923683402.pri"), fInfoLevelId=0x0, lpFileInformation=0x2207bb8 | out: lpFileInformation=0x2207bb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1412cba, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb1412cba, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xb1412cba, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0xa30)) returned 1 [0149.272] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0149.272] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.LockApp_10.0.10240.16384_neutral__cw5n1h2txyewy\\1978304864\\923683402.pri", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.LockApp_10.0.10240.16384_neutral__cw5n1h2txyewy\\1978304864\\923683402.pri", lpFilePart=0x0) returned 0x91 [0149.272] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0149.272] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.LockApp_10.0.10240.16384_neutral__cw5n1h2txyewy\\1978304864\\923683402.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.lockapp_10.0.10240.16384_neutral__cw5n1h2txyewy\\1978304864\\923683402.pri"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0149.272] GetFileType (hFile=0x444) returned 0x1 [0149.272] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0149.272] GetFileType (hFile=0x444) returned 0x1 [0149.272] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be708 | out: lpFileSizeHigh=0x3be708*=0x0) returned 0xa30 [0149.272] ReadFile (in: hFile=0x444, lpBuffer=0x22089c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be638, lpOverlapped=0x0 | out: lpBuffer=0x22089c0*, lpNumberOfBytesRead=0x3be638*=0xa30, lpOverlapped=0x0) returned 1 [0149.283] CloseHandle (hObject=0x444) returned 1 [0149.294] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.LockApp_10.0.10240.16384_neutral__cw5n1h2txyewy\\1978304864\\923683402.pri", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.LockApp_10.0.10240.16384_neutral__cw5n1h2txyewy\\1978304864\\923683402.pri", lpFilePart=0x0) returned 0x91 [0149.294] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0149.294] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.LockApp_10.0.10240.16384_neutral__cw5n1h2txyewy\\1978304864\\923683402.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.lockapp_10.0.10240.16384_neutral__cw5n1h2txyewy\\1978304864\\923683402.pri"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0149.295] GetFileType (hFile=0x444) returned 0x1 [0149.295] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0149.296] GetFileType (hFile=0x444) returned 0x1 [0149.296] WriteFile (in: hFile=0x444, lpBuffer=0x2282d78*, nNumberOfBytesToWrite=0xa40, lpNumberOfBytesWritten=0x3be548, lpOverlapped=0x0 | out: lpBuffer=0x2282d78*, lpNumberOfBytesWritten=0x3be548*=0xa40, lpOverlapped=0x0) returned 1 [0149.296] CloseHandle (hObject=0x444) returned 1 [0149.296] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.LockApp_10.0.10240.16384_neutral__cw5n1h2txyewy\\1978304864\\923683402.pri", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.LockApp_10.0.10240.16384_neutral__cw5n1h2txyewy\\1978304864\\923683402.pri", lpFilePart=0x0) returned 0x91 [0149.296] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.LockApp_10.0.10240.16384_neutral__cw5n1h2txyewy\\1978304864\\923683402.pri.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.LockApp_10.0.10240.16384_neutral__cw5n1h2txyewy\\1978304864\\923683402.pri.xuy", lpFilePart=0x0) returned 0x95 [0149.296] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0149.297] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.LockApp_10.0.10240.16384_neutral__cw5n1h2txyewy\\1978304864\\923683402.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.lockapp_10.0.10240.16384_neutral__cw5n1h2txyewy\\1978304864\\923683402.pri"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1412cba, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb1412cba, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x44d5e84c, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xa40)) returned 1 [0149.297] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0149.297] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.LockApp_10.0.10240.16384_neutral__cw5n1h2txyewy\\1978304864\\923683402.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.lockapp_10.0.10240.16384_neutral__cw5n1h2txyewy\\1978304864\\923683402.pri"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.LockApp_10.0.10240.16384_neutral__cw5n1h2txyewy\\1978304864\\923683402.pri.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.lockapp_10.0.10240.16384_neutral__cw5n1h2txyewy\\1978304864\\923683402.pri.xuy")) returned 1 [0149.298] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0149.298] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.MicrosoftEdge_20.10240.16384.0_neutral__8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.MicrosoftEdge_20.10240.16384.0_neutral__8wekyb3d8bbwe", lpFilePart=0x0) returned 0x7e [0149.298] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.MicrosoftEdge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.MicrosoftEdge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\", lpFilePart=0x0) returned 0x7f [0149.298] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.MicrosoftEdge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7eb0 [0149.299] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0149.299] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0149.299] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0149.299] FindClose (in: hFindFile=0x5d7eb0 | out: hFindFile=0x5d7eb0) returned 1 [0149.299] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0149.299] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0149.299] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0149.299] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.MicrosoftEdge_20.10240.16384.0_neutral__8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.MicrosoftEdge_20.10240.16384.0_neutral__8wekyb3d8bbwe", lpFilePart=0x0) returned 0x7e [0149.299] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.MicrosoftEdge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.MicrosoftEdge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\", lpFilePart=0x0) returned 0x7f [0149.299] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.MicrosoftEdge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d78b0 [0149.299] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0149.300] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0149.300] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0149.300] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0149.300] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0149.300] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0149.300] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0149.300] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.MicrosoftEdge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\1605653898", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.MicrosoftEdge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\1605653898", lpFilePart=0x0) returned 0x89 [0149.300] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.MicrosoftEdge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\1605653898\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.MicrosoftEdge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\1605653898\\", lpFilePart=0x0) returned 0x8a [0149.300] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.MicrosoftEdge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\1605653898\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d7d90 [0149.300] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0149.300] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0149.300] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0149.301] FindClose (in: hFindFile=0x5d7d90 | out: hFindFile=0x5d7d90) returned 1 [0149.301] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0149.301] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0149.301] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0149.301] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.MicrosoftEdge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\1605653898", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.MicrosoftEdge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\1605653898", lpFilePart=0x0) returned 0x89 [0149.301] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.MicrosoftEdge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\1605653898\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.MicrosoftEdge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\1605653898\\", lpFilePart=0x0) returned 0x8a [0149.301] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.MicrosoftEdge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\1605653898\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d7df0 [0149.301] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0149.301] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0149.301] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0149.301] FindClose (in: hFindFile=0x5d7df0 | out: hFindFile=0x5d7df0) returned 1 [0149.301] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0149.301] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0149.301] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.MicrosoftEdge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\1605653898\\4275773285.pri", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.MicrosoftEdge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\1605653898\\4275773285.pri", lpFilePart=0x0) returned 0x98 [0149.302] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0149.302] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.MicrosoftEdge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\1605653898\\4275773285.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.microsoftedge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\1605653898\\4275773285.pri"), fInfoLevelId=0x0, lpFileInformation=0x2289d78 | out: lpFileInformation=0x2289d78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1a08af4, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb1a08af4, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xb1a08af4, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x16dc8)) returned 1 [0149.302] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0149.302] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.MicrosoftEdge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\1605653898\\4275773285.pri", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.MicrosoftEdge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\1605653898\\4275773285.pri", lpFilePart=0x0) returned 0x98 [0149.302] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0149.302] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.MicrosoftEdge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\1605653898\\4275773285.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.microsoftedge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\1605653898\\4275773285.pri"), fInfoLevelId=0x0, lpFileInformation=0x2289f68 | out: lpFileInformation=0x2289f68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1a08af4, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb1a08af4, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xb1a08af4, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x16dc8)) returned 1 [0149.302] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0149.302] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.MicrosoftEdge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\1605653898\\4275773285.pri", nBufferLength=0x105, lpBuffer=0x3be120, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.MicrosoftEdge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\1605653898\\4275773285.pri", lpFilePart=0x0) returned 0x98 [0149.302] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0149.302] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.MicrosoftEdge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\1605653898\\4275773285.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.microsoftedge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\1605653898\\4275773285.pri"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0149.303] GetFileType (hFile=0x444) returned 0x1 [0149.303] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be570) returned 1 [0149.303] GetFileType (hFile=0x444) returned 0x1 [0149.303] ReadFile (in: hFile=0x444, lpBuffer=0x228c478, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be688, lpOverlapped=0x0 | out: lpBuffer=0x228c478*, lpNumberOfBytesRead=0x3be688*=0x1000, lpOverlapped=0x0) returned 1 [0149.315] CloseHandle (hObject=0x444) returned 1 [0149.320] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.MicrosoftEdge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\1605653898\\4275773285.pri", nBufferLength=0x105, lpBuffer=0x3be120, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.MicrosoftEdge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\1605653898\\4275773285.pri", lpFilePart=0x0) returned 0x98 [0149.320] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0149.320] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.MicrosoftEdge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\1605653898\\4275773285.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.microsoftedge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\1605653898\\4275773285.pri"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0149.321] GetFileType (hFile=0x444) returned 0x1 [0149.321] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be570) returned 1 [0149.321] GetFileType (hFile=0x444) returned 0x1 [0149.321] WriteFile (in: hFile=0x444, lpBuffer=0x228a138*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be738, lpOverlapped=0x0 | out: lpBuffer=0x228a138*, lpNumberOfBytesWritten=0x3be738*=0x2000, lpOverlapped=0x0) returned 1 [0149.321] CloseHandle (hObject=0x444) returned 1 [0149.321] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.MicrosoftEdge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\1605653898\\4275773285.pri", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.MicrosoftEdge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\1605653898\\4275773285.pri", lpFilePart=0x0) returned 0x98 [0149.321] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.MicrosoftEdge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\1605653898\\4275773285.pri.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.MicrosoftEdge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\1605653898\\4275773285.pri.xuy", lpFilePart=0x0) returned 0x9c [0149.321] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0149.321] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.MicrosoftEdge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\1605653898\\4275773285.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.microsoftedge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\1605653898\\4275773285.pri"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1a08af4, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb1a08af4, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x44daad4a, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x16dc8)) returned 1 [0149.321] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0149.321] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.MicrosoftEdge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\1605653898\\4275773285.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.microsoftedge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\1605653898\\4275773285.pri"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.MicrosoftEdge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\1605653898\\4275773285.pri.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.microsoftedge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\1605653898\\4275773285.pri.xuy")) returned 1 [0149.322] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0149.322] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.AssignedAccessLockApp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.AssignedAccessLockApp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy", lpFilePart=0x0) returned 0x97 [0149.323] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.AssignedAccessLockApp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.AssignedAccessLockApp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\", lpFilePart=0x0) returned 0x98 [0149.323] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.AssignedAccessLockApp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7eb0 [0149.323] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0149.323] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0149.323] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0149.323] FindClose (in: hFindFile=0x5d7eb0 | out: hFindFile=0x5d7eb0) returned 1 [0149.323] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0149.323] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0149.323] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0149.323] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.AssignedAccessLockApp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.AssignedAccessLockApp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy", lpFilePart=0x0) returned 0x97 [0149.323] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.AssignedAccessLockApp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.AssignedAccessLockApp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\", lpFilePart=0x0) returned 0x98 [0149.323] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.AssignedAccessLockApp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7c70 [0149.324] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0149.324] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0149.324] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0149.324] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0149.324] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0149.324] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0149.324] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0149.324] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.AssignedAccessLockApp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\226732975", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.AssignedAccessLockApp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\226732975", lpFilePart=0x0) returned 0xa1 [0149.324] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.AssignedAccessLockApp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\226732975\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.AssignedAccessLockApp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\226732975\\", lpFilePart=0x0) returned 0xa2 [0149.324] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.AssignedAccessLockApp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\226732975\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d7a30 [0149.325] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0149.325] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0149.325] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0149.325] FindClose (in: hFindFile=0x5d7a30 | out: hFindFile=0x5d7a30) returned 1 [0149.325] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0149.325] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0149.325] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0149.325] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.AssignedAccessLockApp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\226732975", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.AssignedAccessLockApp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\226732975", lpFilePart=0x0) returned 0xa1 [0149.326] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.AssignedAccessLockApp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\226732975\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.AssignedAccessLockApp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\226732975\\", lpFilePart=0x0) returned 0xa2 [0149.326] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.AssignedAccessLockApp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\226732975\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d8090 [0149.326] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0149.326] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0149.326] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0149.326] FindClose (in: hFindFile=0x5d8090 | out: hFindFile=0x5d8090) returned 1 [0149.326] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0149.326] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0149.326] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.AssignedAccessLockApp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\226732975\\2698495915.pri", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.AssignedAccessLockApp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\226732975\\2698495915.pri", lpFilePart=0x0) returned 0xb0 [0149.326] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0149.326] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.AssignedAccessLockApp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\226732975\\2698495915.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.windows.assignedaccesslockapp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\226732975\\2698495915.pri"), fInfoLevelId=0x0, lpFileInformation=0x230f1e0 | out: lpFileInformation=0x230f1e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb249d22a, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb249d22a, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xb249d22a, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x710)) returned 1 [0149.327] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0149.327] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.AssignedAccessLockApp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\226732975\\2698495915.pri", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.AssignedAccessLockApp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\226732975\\2698495915.pri", lpFilePart=0x0) returned 0xb0 [0149.327] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0149.327] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.AssignedAccessLockApp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\226732975\\2698495915.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.windows.assignedaccesslockapp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\226732975\\2698495915.pri"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0149.327] GetFileType (hFile=0x444) returned 0x1 [0149.327] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0149.327] GetFileType (hFile=0x444) returned 0x1 [0149.327] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be708 | out: lpFileSizeHigh=0x3be708*=0x0) returned 0x710 [0149.327] ReadFile (in: hFile=0x444, lpBuffer=0x230fd48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be638, lpOverlapped=0x0 | out: lpBuffer=0x230fd48*, lpNumberOfBytesRead=0x3be638*=0x710, lpOverlapped=0x0) returned 1 [0149.345] CloseHandle (hObject=0x444) returned 1 [0149.387] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.AssignedAccessLockApp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\226732975\\2698495915.pri", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.AssignedAccessLockApp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\226732975\\2698495915.pri", lpFilePart=0x0) returned 0xb0 [0149.387] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0149.387] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.AssignedAccessLockApp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\226732975\\2698495915.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.windows.assignedaccesslockapp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\226732975\\2698495915.pri"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0149.389] GetFileType (hFile=0x444) returned 0x1 [0149.389] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0149.389] GetFileType (hFile=0x444) returned 0x1 [0149.389] WriteFile (in: hFile=0x444, lpBuffer=0x218c220*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x3be548, lpOverlapped=0x0 | out: lpBuffer=0x218c220*, lpNumberOfBytesWritten=0x3be548*=0x720, lpOverlapped=0x0) returned 1 [0149.389] CloseHandle (hObject=0x444) returned 1 [0149.390] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.AssignedAccessLockApp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\226732975\\2698495915.pri", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.AssignedAccessLockApp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\226732975\\2698495915.pri", lpFilePart=0x0) returned 0xb0 [0149.390] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.AssignedAccessLockApp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\226732975\\2698495915.pri.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.AssignedAccessLockApp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\226732975\\2698495915.pri.xuy", lpFilePart=0x0) returned 0xb4 [0149.390] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0149.390] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.AssignedAccessLockApp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\226732975\\2698495915.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.windows.assignedaccesslockapp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\226732975\\2698495915.pri"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb249d22a, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb249d22a, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x44e43a26, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x720)) returned 1 [0149.390] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0149.390] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.AssignedAccessLockApp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\226732975\\2698495915.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.windows.assignedaccesslockapp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\226732975\\2698495915.pri"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.AssignedAccessLockApp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\226732975\\2698495915.pri.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.windows.assignedaccesslockapp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\226732975\\2698495915.pri.xuy")) returned 1 [0149.391] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0149.391] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.CloudExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.CloudExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy", lpFilePart=0x0) returned 0x93 [0149.391] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.CloudExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.CloudExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\", lpFilePart=0x0) returned 0x94 [0149.391] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.CloudExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d81b0 [0149.391] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0149.392] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0149.392] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0149.392] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0149.392] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0149.392] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0149.392] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0149.392] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.CloudExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.CloudExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy", lpFilePart=0x0) returned 0x93 [0149.392] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.CloudExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.CloudExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\", lpFilePart=0x0) returned 0x94 [0149.392] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.CloudExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7d30 [0149.392] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0149.392] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0149.392] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0149.392] FindClose (in: hFindFile=0x5d7d30 | out: hFindFile=0x5d7d30) returned 1 [0149.393] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0149.393] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0149.393] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0149.393] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.CloudExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\3705566220", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.CloudExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\3705566220", lpFilePart=0x0) returned 0x9e [0149.393] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.CloudExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\3705566220\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.CloudExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\3705566220\\", lpFilePart=0x0) returned 0x9f [0149.393] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.CloudExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\3705566220\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d78b0 [0149.393] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0149.393] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0149.393] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0149.393] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0149.393] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0149.393] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0149.393] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0149.393] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.CloudExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\3705566220", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.CloudExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\3705566220", lpFilePart=0x0) returned 0x9e [0149.394] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.CloudExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\3705566220\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.CloudExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\3705566220\\", lpFilePart=0x0) returned 0x9f [0149.394] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.CloudExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\3705566220\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d78b0 [0149.394] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0149.394] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0149.394] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0149.394] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0149.394] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0149.394] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0149.394] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.CloudExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\3705566220\\624664733.pri", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.CloudExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\3705566220\\624664733.pri", lpFilePart=0x0) returned 0xac [0149.394] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0149.394] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.CloudExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\3705566220\\624664733.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.windows.cloudexperiencehost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\3705566220\\624664733.pri"), fInfoLevelId=0x0, lpFileInformation=0x2193cd0 | out: lpFileInformation=0x2193cd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb01e4d5c, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb01e4d5c, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xb01e4d5c, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x1fc8)) returned 1 [0149.394] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0149.394] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.CloudExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\3705566220\\624664733.pri", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.CloudExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\3705566220\\624664733.pri", lpFilePart=0x0) returned 0xac [0149.394] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0149.395] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.CloudExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\3705566220\\624664733.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.windows.cloudexperiencehost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\3705566220\\624664733.pri"), fInfoLevelId=0x0, lpFileInformation=0x2193ee8 | out: lpFileInformation=0x2193ee8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb01e4d5c, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb01e4d5c, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xb01e4d5c, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x1fc8)) returned 1 [0149.395] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0149.395] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.CloudExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\3705566220\\624664733.pri", nBufferLength=0x105, lpBuffer=0x3be120, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.CloudExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\3705566220\\624664733.pri", lpFilePart=0x0) returned 0xac [0149.395] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0149.395] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.CloudExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\3705566220\\624664733.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.windows.cloudexperiencehost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\3705566220\\624664733.pri"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0149.395] GetFileType (hFile=0x444) returned 0x1 [0149.395] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be570) returned 1 [0149.396] GetFileType (hFile=0x444) returned 0x1 [0149.396] ReadFile (in: hFile=0x444, lpBuffer=0x2196448, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be688, lpOverlapped=0x0 | out: lpBuffer=0x2196448*, lpNumberOfBytesRead=0x3be688*=0x1000, lpOverlapped=0x0) returned 1 [0149.438] CloseHandle (hObject=0x444) returned 1 [0149.438] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.CloudExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\3705566220\\624664733.pri", nBufferLength=0x105, lpBuffer=0x3be120, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.CloudExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\3705566220\\624664733.pri", lpFilePart=0x0) returned 0xac [0149.438] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0149.438] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.CloudExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\3705566220\\624664733.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.windows.cloudexperiencehost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\3705566220\\624664733.pri"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0149.438] GetFileType (hFile=0x444) returned 0x1 [0149.438] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be570) returned 1 [0149.438] GetFileType (hFile=0x444) returned 0x1 [0149.438] WriteFile (in: hFile=0x444, lpBuffer=0x21940e0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be738, lpOverlapped=0x0 | out: lpBuffer=0x21940e0*, lpNumberOfBytesWritten=0x3be738*=0x2000, lpOverlapped=0x0) returned 1 [0149.438] CloseHandle (hObject=0x444) returned 1 [0149.439] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.CloudExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\3705566220\\624664733.pri", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.CloudExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\3705566220\\624664733.pri", lpFilePart=0x0) returned 0xac [0149.439] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.CloudExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\3705566220\\624664733.pri.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.CloudExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\3705566220\\624664733.pri.xuy", lpFilePart=0x0) returned 0xb0 [0149.439] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0149.439] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.CloudExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\3705566220\\624664733.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.windows.cloudexperiencehost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\3705566220\\624664733.pri"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb01e4d5c, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb01e4d5c, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x44eb5e0e, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0149.439] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0149.439] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.CloudExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\3705566220\\624664733.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.windows.cloudexperiencehost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\3705566220\\624664733.pri"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.CloudExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\3705566220\\624664733.pri.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.windows.cloudexperiencehost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\3705566220\\624664733.pri.xuy")) returned 1 [0149.440] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0149.440] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ContentDeliveryManager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ContentDeliveryManager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy", lpFilePart=0x0) returned 0x96 [0149.440] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ContentDeliveryManager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ContentDeliveryManager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\", lpFilePart=0x0) returned 0x97 [0149.441] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ContentDeliveryManager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d78b0 [0149.441] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0149.441] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0149.441] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0149.441] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0149.441] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0149.441] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0149.441] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0149.442] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ContentDeliveryManager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ContentDeliveryManager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy", lpFilePart=0x0) returned 0x96 [0149.442] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ContentDeliveryManager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ContentDeliveryManager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\", lpFilePart=0x0) returned 0x97 [0149.442] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ContentDeliveryManager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d81b0 [0149.442] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0149.442] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0149.442] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0149.442] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0149.442] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0149.442] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0149.442] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0149.442] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ContentDeliveryManager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\2577507833", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ContentDeliveryManager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\2577507833", lpFilePart=0x0) returned 0xa1 [0149.442] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ContentDeliveryManager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\2577507833\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ContentDeliveryManager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\2577507833\\", lpFilePart=0x0) returned 0xa2 [0149.443] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ContentDeliveryManager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\2577507833\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d7550 [0149.443] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0149.443] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0149.443] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0149.443] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0149.443] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0149.443] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0149.443] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0149.443] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ContentDeliveryManager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\2577507833", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ContentDeliveryManager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\2577507833", lpFilePart=0x0) returned 0xa1 [0149.443] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ContentDeliveryManager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\2577507833\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ContentDeliveryManager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\2577507833\\", lpFilePart=0x0) returned 0xa2 [0149.444] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ContentDeliveryManager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\2577507833\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d78b0 [0149.444] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0149.444] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0149.444] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0149.444] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0149.444] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0149.444] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0149.444] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ContentDeliveryManager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\2577507833\\3967450640.pri", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ContentDeliveryManager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\2577507833\\3967450640.pri", lpFilePart=0x0) returned 0xb0 [0149.444] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0149.444] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ContentDeliveryManager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\2577507833\\3967450640.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.windows.contentdeliverymanager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\2577507833\\3967450640.pri"), fInfoLevelId=0x0, lpFileInformation=0x2219230 | out: lpFileInformation=0x2219230*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4ba7b6d, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb4ba7b6d, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xb4ba7b6d, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0xde0)) returned 1 [0149.445] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0149.445] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ContentDeliveryManager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\2577507833\\3967450640.pri", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ContentDeliveryManager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\2577507833\\3967450640.pri", lpFilePart=0x0) returned 0xb0 [0149.445] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0149.445] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ContentDeliveryManager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\2577507833\\3967450640.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.windows.contentdeliverymanager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\2577507833\\3967450640.pri"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0149.445] GetFileType (hFile=0x444) returned 0x1 [0149.445] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0149.445] GetFileType (hFile=0x444) returned 0x1 [0149.445] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be708 | out: lpFileSizeHigh=0x3be708*=0x0) returned 0xde0 [0149.446] ReadFile (in: hFile=0x444, lpBuffer=0x221a468, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be638, lpOverlapped=0x0 | out: lpBuffer=0x221a468*, lpNumberOfBytesRead=0x3be638*=0xde0, lpOverlapped=0x0) returned 1 [0149.447] CloseHandle (hObject=0x444) returned 1 [0149.457] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ContentDeliveryManager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\2577507833\\3967450640.pri", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ContentDeliveryManager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\2577507833\\3967450640.pri", lpFilePart=0x0) returned 0xb0 [0149.457] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0149.457] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ContentDeliveryManager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\2577507833\\3967450640.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.windows.contentdeliverymanager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\2577507833\\3967450640.pri"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0149.459] GetFileType (hFile=0x444) returned 0x1 [0149.459] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0149.459] GetFileType (hFile=0x444) returned 0x1 [0149.459] WriteFile (in: hFile=0x444, lpBuffer=0x2295ad0*, nNumberOfBytesToWrite=0xdf0, lpNumberOfBytesWritten=0x3be548, lpOverlapped=0x0 | out: lpBuffer=0x2295ad0*, lpNumberOfBytesWritten=0x3be548*=0xdf0, lpOverlapped=0x0) returned 1 [0149.460] CloseHandle (hObject=0x444) returned 1 [0149.460] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ContentDeliveryManager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\2577507833\\3967450640.pri", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ContentDeliveryManager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\2577507833\\3967450640.pri", lpFilePart=0x0) returned 0xb0 [0149.460] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ContentDeliveryManager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\2577507833\\3967450640.pri.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ContentDeliveryManager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\2577507833\\3967450640.pri.xuy", lpFilePart=0x0) returned 0xb4 [0149.460] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0149.460] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ContentDeliveryManager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\2577507833\\3967450640.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.windows.contentdeliverymanager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\2577507833\\3967450640.pri"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4ba7b6d, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb4ba7b6d, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x44edc127, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xdf0)) returned 1 [0149.460] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0149.460] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ContentDeliveryManager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\2577507833\\3967450640.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.windows.contentdeliverymanager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\2577507833\\3967450640.pri"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ContentDeliveryManager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\2577507833\\3967450640.pri.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.windows.contentdeliverymanager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\2577507833\\3967450640.pri.xuy")) returned 1 [0149.464] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0149.464] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy", lpFilePart=0x0) returned 0x80 [0149.464] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\", lpFilePart=0x0) returned 0x81 [0149.464] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7c70 [0149.464] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0149.464] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0149.464] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0149.465] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0149.465] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0149.465] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0149.465] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0149.465] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy", lpFilePart=0x0) returned 0x80 [0149.465] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\", lpFilePart=0x0) returned 0x81 [0149.465] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d78b0 [0149.465] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0149.465] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0149.465] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0149.465] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0149.465] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0149.465] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0149.466] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0149.466] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\3530508098", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\3530508098", lpFilePart=0x0) returned 0x8b [0149.466] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\3530508098\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\3530508098\\", lpFilePart=0x0) returned 0x8c [0149.466] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\3530508098\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d78b0 [0149.466] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0149.466] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0149.466] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0149.466] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0149.466] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0149.466] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0149.466] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0149.466] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\3530508098", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\3530508098", lpFilePart=0x0) returned 0x8b [0149.466] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\3530508098\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\3530508098\\", lpFilePart=0x0) returned 0x8c [0149.467] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\3530508098\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d8090 [0149.467] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0149.467] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0149.467] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0149.467] FindClose (in: hFindFile=0x5d8090 | out: hFindFile=0x5d8090) returned 1 [0149.467] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0149.467] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0149.467] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\3530508098\\2495906576.pri", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\3530508098\\2495906576.pri", lpFilePart=0x0) returned 0x9a [0149.467] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0149.467] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\3530508098\\2495906576.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.windows.cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\3530508098\\2495906576.pri"), fInfoLevelId=0x0, lpFileInformation=0x229cc60 | out: lpFileInformation=0x229cc60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb629a62b, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb629a62b, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xb629a62b, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x13b60)) returned 1 [0149.467] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0149.468] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\3530508098\\2495906576.pri", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\3530508098\\2495906576.pri", lpFilePart=0x0) returned 0x9a [0149.468] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0149.468] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\3530508098\\2495906576.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.windows.cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\3530508098\\2495906576.pri"), fInfoLevelId=0x0, lpFileInformation=0x229ce50 | out: lpFileInformation=0x229ce50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb629a62b, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb629a62b, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xb629a62b, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x13b60)) returned 1 [0149.468] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0149.468] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\3530508098\\2495906576.pri", nBufferLength=0x105, lpBuffer=0x3be120, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\3530508098\\2495906576.pri", lpFilePart=0x0) returned 0x9a [0149.468] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0149.468] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\3530508098\\2495906576.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.windows.cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\3530508098\\2495906576.pri"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0149.469] GetFileType (hFile=0x444) returned 0x1 [0149.469] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be570) returned 1 [0149.469] GetFileType (hFile=0x444) returned 0x1 [0149.469] ReadFile (in: hFile=0x444, lpBuffer=0x229f360, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be688, lpOverlapped=0x0 | out: lpBuffer=0x229f360*, lpNumberOfBytesRead=0x3be688*=0x1000, lpOverlapped=0x0) returned 1 [0149.481] CloseHandle (hObject=0x444) returned 1 [0149.486] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\3530508098\\2495906576.pri", nBufferLength=0x105, lpBuffer=0x3be120, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\3530508098\\2495906576.pri", lpFilePart=0x0) returned 0x9a [0149.486] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0149.486] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\3530508098\\2495906576.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.windows.cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\3530508098\\2495906576.pri"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0149.487] GetFileType (hFile=0x444) returned 0x1 [0149.487] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be570) returned 1 [0149.487] GetFileType (hFile=0x444) returned 0x1 [0149.487] WriteFile (in: hFile=0x444, lpBuffer=0x229d020*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be738, lpOverlapped=0x0 | out: lpBuffer=0x229d020*, lpNumberOfBytesWritten=0x3be738*=0x2000, lpOverlapped=0x0) returned 1 [0149.487] CloseHandle (hObject=0x444) returned 1 [0149.487] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\3530508098\\2495906576.pri", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\3530508098\\2495906576.pri", lpFilePart=0x0) returned 0x9a [0149.487] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\3530508098\\2495906576.pri.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\3530508098\\2495906576.pri.xuy", lpFilePart=0x0) returned 0x9e [0149.487] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0149.487] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\3530508098\\2495906576.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.windows.cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\3530508098\\2495906576.pri"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb629a62b, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb629a62b, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x44f28589, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x13b60)) returned 1 [0149.487] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0149.487] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\3530508098\\2495906576.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.windows.cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\3530508098\\2495906576.pri"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\3530508098\\2495906576.pri.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.windows.cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\3530508098\\2495906576.pri.xuy")) returned 1 [0149.489] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0149.489] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ParentalControls_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ParentalControls_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy", lpFilePart=0x0) returned 0x92 [0149.489] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ParentalControls_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ParentalControls_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\", lpFilePart=0x0) returned 0x93 [0149.489] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ParentalControls_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d79d0 [0149.490] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0149.490] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0149.490] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0149.490] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0149.490] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0149.490] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0149.490] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0149.490] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ParentalControls_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ParentalControls_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy", lpFilePart=0x0) returned 0x92 [0149.490] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ParentalControls_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ParentalControls_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\", lpFilePart=0x0) returned 0x93 [0149.490] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ParentalControls_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7d30 [0149.490] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0149.491] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0149.491] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0149.491] FindClose (in: hFindFile=0x5d7d30 | out: hFindFile=0x5d7d30) returned 1 [0149.491] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0149.491] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0149.491] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0149.491] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ParentalControls_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\2570292521", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ParentalControls_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\2570292521", lpFilePart=0x0) returned 0x9d [0149.491] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ParentalControls_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\2570292521\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ParentalControls_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\2570292521\\", lpFilePart=0x0) returned 0x9e [0149.491] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ParentalControls_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\2570292521\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d7370 [0149.491] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0149.491] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0149.491] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0149.492] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0149.492] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0149.492] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0149.492] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0149.492] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ParentalControls_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\2570292521", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ParentalControls_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\2570292521", lpFilePart=0x0) returned 0x9d [0149.492] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ParentalControls_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\2570292521\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ParentalControls_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\2570292521\\", lpFilePart=0x0) returned 0x9e [0149.492] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ParentalControls_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\2570292521\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d75b0 [0149.492] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0149.492] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0149.492] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0149.493] FindClose (in: hFindFile=0x5d75b0 | out: hFindFile=0x5d75b0) returned 1 [0149.493] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0149.493] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0149.493] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ParentalControls_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\2570292521\\231755001.pri", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ParentalControls_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\2570292521\\231755001.pri", lpFilePart=0x0) returned 0xab [0149.493] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0149.493] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ParentalControls_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\2570292521\\231755001.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.windows.parentalcontrols_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\2570292521\\231755001.pri"), fInfoLevelId=0x0, lpFileInformation=0x2321ea8 | out: lpFileInformation=0x2321ea8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7c8801d, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb7c8801d, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xb7c8801d, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x748)) returned 1 [0149.493] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0149.493] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ParentalControls_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\2570292521\\231755001.pri", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ParentalControls_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\2570292521\\231755001.pri", lpFilePart=0x0) returned 0xab [0149.493] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0149.493] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ParentalControls_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\2570292521\\231755001.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.windows.parentalcontrols_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\2570292521\\231755001.pri"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0149.493] GetFileType (hFile=0x444) returned 0x1 [0149.493] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0149.493] GetFileType (hFile=0x444) returned 0x1 [0149.493] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be708 | out: lpFileSizeHigh=0x3be708*=0x0) returned 0x748 [0149.493] ReadFile (in: hFile=0x444, lpBuffer=0x2322a28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be638, lpOverlapped=0x0 | out: lpBuffer=0x2322a28*, lpNumberOfBytesRead=0x3be638*=0x748, lpOverlapped=0x0) returned 1 [0149.495] CloseHandle (hObject=0x444) returned 1 [0149.536] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ParentalControls_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\2570292521\\231755001.pri", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ParentalControls_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\2570292521\\231755001.pri", lpFilePart=0x0) returned 0xab [0149.536] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0149.536] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ParentalControls_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\2570292521\\231755001.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.windows.parentalcontrols_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\2570292521\\231755001.pri"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0149.538] GetFileType (hFile=0x444) returned 0x1 [0149.538] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0149.538] GetFileType (hFile=0x444) returned 0x1 [0149.538] WriteFile (in: hFile=0x444, lpBuffer=0x219de18*, nNumberOfBytesToWrite=0x750, lpNumberOfBytesWritten=0x3be548, lpOverlapped=0x0 | out: lpBuffer=0x219de18*, lpNumberOfBytesWritten=0x3be548*=0x750, lpOverlapped=0x0) returned 1 [0149.539] CloseHandle (hObject=0x444) returned 1 [0149.539] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ParentalControls_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\2570292521\\231755001.pri", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ParentalControls_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\2570292521\\231755001.pri", lpFilePart=0x0) returned 0xab [0149.539] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ParentalControls_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\2570292521\\231755001.pri.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ParentalControls_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\2570292521\\231755001.pri.xuy", lpFilePart=0x0) returned 0xaf [0149.539] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0149.539] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ParentalControls_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\2570292521\\231755001.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.windows.parentalcontrols_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\2570292521\\231755001.pri"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7c8801d, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb7c8801d, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x44f9ad1b, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x750)) returned 1 [0149.539] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0149.539] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ParentalControls_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\2570292521\\231755001.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.windows.parentalcontrols_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\2570292521\\231755001.pri"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ParentalControls_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\2570292521\\231755001.pri.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.windows.parentalcontrols_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\2570292521\\231755001.pri.xuy")) returned 1 [0149.540] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0149.540] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ShellExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ShellExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy", lpFilePart=0x0) returned 0x93 [0149.541] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ShellExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ShellExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\", lpFilePart=0x0) returned 0x94 [0149.541] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ShellExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d73d0 [0149.541] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0149.541] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0149.541] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0149.541] FindClose (in: hFindFile=0x5d73d0 | out: hFindFile=0x5d73d0) returned 1 [0149.541] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0149.541] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0149.541] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0149.541] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ShellExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ShellExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy", lpFilePart=0x0) returned 0x93 [0149.541] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ShellExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ShellExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\", lpFilePart=0x0) returned 0x94 [0149.541] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ShellExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d81b0 [0149.542] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0149.542] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0149.542] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0149.542] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0149.542] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0149.542] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0149.542] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0149.542] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ShellExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\3295484897", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ShellExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\3295484897", lpFilePart=0x0) returned 0x9e [0149.542] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ShellExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\3295484897\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ShellExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\3295484897\\", lpFilePart=0x0) returned 0x9f [0149.542] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ShellExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\3295484897\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d7eb0 [0149.542] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0149.543] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0149.543] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0149.543] FindClose (in: hFindFile=0x5d7eb0 | out: hFindFile=0x5d7eb0) returned 1 [0149.543] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0149.543] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0149.543] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0149.543] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ShellExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\3295484897", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ShellExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\3295484897", lpFilePart=0x0) returned 0x9e [0149.543] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ShellExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\3295484897\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ShellExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\3295484897\\", lpFilePart=0x0) returned 0x9f [0149.543] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ShellExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\3295484897\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d7d90 [0149.543] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0149.543] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0149.543] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0149.543] FindClose (in: hFindFile=0x5d7d90 | out: hFindFile=0x5d7d90) returned 1 [0149.544] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0149.544] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0149.544] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ShellExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\3295484897\\2504515037.pri", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ShellExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\3295484897\\2504515037.pri", lpFilePart=0x0) returned 0xad [0149.544] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0149.544] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ShellExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\3295484897\\2504515037.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.windows.shellexperiencehost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\3295484897\\2504515037.pri"), fInfoLevelId=0x0, lpFileInformation=0x21a5898 | out: lpFileInformation=0x21a5898*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba26166a, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xba26166a, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xba5f4f0a, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0xb068)) returned 1 [0149.544] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0149.544] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ShellExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\3295484897\\2504515037.pri", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ShellExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\3295484897\\2504515037.pri", lpFilePart=0x0) returned 0xad [0149.544] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0149.544] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ShellExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\3295484897\\2504515037.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.windows.shellexperiencehost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\3295484897\\2504515037.pri"), fInfoLevelId=0x0, lpFileInformation=0x21a5ab0 | out: lpFileInformation=0x21a5ab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba26166a, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xba26166a, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xba5f4f0a, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0xb068)) returned 1 [0149.544] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0149.544] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ShellExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\3295484897\\2504515037.pri", nBufferLength=0x105, lpBuffer=0x3be120, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ShellExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\3295484897\\2504515037.pri", lpFilePart=0x0) returned 0xad [0149.544] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0149.544] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ShellExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\3295484897\\2504515037.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.windows.shellexperiencehost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\3295484897\\2504515037.pri"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0149.545] GetFileType (hFile=0x444) returned 0x1 [0149.545] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be570) returned 1 [0149.545] GetFileType (hFile=0x444) returned 0x1 [0149.545] ReadFile (in: hFile=0x444, lpBuffer=0x21a8010, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be688, lpOverlapped=0x0 | out: lpBuffer=0x21a8010*, lpNumberOfBytesRead=0x3be688*=0x1000, lpOverlapped=0x0) returned 1 [0149.690] CloseHandle (hObject=0x444) returned 1 [0149.731] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ShellExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\3295484897\\2504515037.pri", nBufferLength=0x105, lpBuffer=0x3be120, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ShellExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\3295484897\\2504515037.pri", lpFilePart=0x0) returned 0xad [0149.731] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0149.731] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ShellExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\3295484897\\2504515037.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.windows.shellexperiencehost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\3295484897\\2504515037.pri"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0149.731] GetFileType (hFile=0x444) returned 0x1 [0149.731] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be570) returned 1 [0149.731] GetFileType (hFile=0x444) returned 0x1 [0149.731] WriteFile (in: hFile=0x444, lpBuffer=0x21a5ca8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be738, lpOverlapped=0x0 | out: lpBuffer=0x21a5ca8*, lpNumberOfBytesWritten=0x3be738*=0x2000, lpOverlapped=0x0) returned 1 [0149.731] CloseHandle (hObject=0x444) returned 1 [0149.731] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ShellExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\3295484897\\2504515037.pri", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ShellExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\3295484897\\2504515037.pri", lpFilePart=0x0) returned 0xad [0149.731] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ShellExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\3295484897\\2504515037.pri.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ShellExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\3295484897\\2504515037.pri.xuy", lpFilePart=0x0) returned 0xb1 [0149.732] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0149.732] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ShellExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\3295484897\\2504515037.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.windows.shellexperiencehost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\3295484897\\2504515037.pri"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba26166a, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xba26166a, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x451855a2, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xb068)) returned 1 [0149.732] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0149.732] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ShellExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\3295484897\\2504515037.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.windows.shellexperiencehost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\3295484897\\2504515037.pri"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ShellExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\3295484897\\2504515037.pri.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.windows.shellexperiencehost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\3295484897\\2504515037.pri.xuy")) returned 1 [0149.733] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0149.733] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.WindowsFeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.WindowsFeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy", lpFilePart=0x0) returned 0x87 [0149.733] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.WindowsFeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.WindowsFeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\", lpFilePart=0x0) returned 0x88 [0149.733] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.WindowsFeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7a30 [0149.733] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0149.733] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0149.734] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0149.734] FindClose (in: hFindFile=0x5d7a30 | out: hFindFile=0x5d7a30) returned 1 [0149.734] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0149.734] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0149.734] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0149.734] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.WindowsFeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.WindowsFeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy", lpFilePart=0x0) returned 0x87 [0149.734] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.WindowsFeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.WindowsFeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\", lpFilePart=0x0) returned 0x88 [0149.734] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.WindowsFeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d81b0 [0149.734] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0149.734] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0149.734] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0149.735] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0149.735] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0149.735] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0149.735] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0149.735] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.WindowsFeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\3375042201", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.WindowsFeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\3375042201", lpFilePart=0x0) returned 0x92 [0149.735] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.WindowsFeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\3375042201\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.WindowsFeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\3375042201\\", lpFilePart=0x0) returned 0x93 [0149.735] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.WindowsFeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\3375042201\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d79d0 [0149.736] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0149.736] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0149.736] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0149.736] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0149.736] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0149.736] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0149.736] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0149.736] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.WindowsFeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\3375042201", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.WindowsFeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\3375042201", lpFilePart=0x0) returned 0x92 [0149.736] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.WindowsFeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\3375042201\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.WindowsFeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\3375042201\\", lpFilePart=0x0) returned 0x93 [0149.736] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.WindowsFeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\3375042201\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d7fd0 [0149.736] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0149.736] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0149.737] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0149.737] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0149.737] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0149.737] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0149.737] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.WindowsFeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\3375042201\\1858609885.pri", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.WindowsFeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\3375042201\\1858609885.pri", lpFilePart=0x0) returned 0xa1 [0149.737] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0149.737] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.WindowsFeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\3375042201\\1858609885.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.windowsfeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\3375042201\\1858609885.pri"), fInfoLevelId=0x0, lpFileInformation=0x222a708 | out: lpFileInformation=0x222a708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc434d45, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xbc434d45, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xbc434d45, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x7ee0)) returned 1 [0149.737] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0149.737] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.WindowsFeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\3375042201\\1858609885.pri", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.WindowsFeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\3375042201\\1858609885.pri", lpFilePart=0x0) returned 0xa1 [0149.737] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0149.737] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.WindowsFeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\3375042201\\1858609885.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.windowsfeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\3375042201\\1858609885.pri"), fInfoLevelId=0x0, lpFileInformation=0x222a908 | out: lpFileInformation=0x222a908*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc434d45, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xbc434d45, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xbc434d45, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x7ee0)) returned 1 [0149.737] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0149.737] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.WindowsFeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\3375042201\\1858609885.pri", nBufferLength=0x105, lpBuffer=0x3be120, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.WindowsFeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\3375042201\\1858609885.pri", lpFilePart=0x0) returned 0xa1 [0149.737] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0149.737] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.WindowsFeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\3375042201\\1858609885.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.windowsfeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\3375042201\\1858609885.pri"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0149.738] GetFileType (hFile=0x444) returned 0x1 [0149.738] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be570) returned 1 [0149.738] GetFileType (hFile=0x444) returned 0x1 [0149.739] ReadFile (in: hFile=0x444, lpBuffer=0x222ce38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be688, lpOverlapped=0x0 | out: lpBuffer=0x222ce38*, lpNumberOfBytesRead=0x3be688*=0x1000, lpOverlapped=0x0) returned 1 [0149.773] CloseHandle (hObject=0x444) returned 1 [0149.775] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.WindowsFeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\3375042201\\1858609885.pri", nBufferLength=0x105, lpBuffer=0x3be120, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.WindowsFeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\3375042201\\1858609885.pri", lpFilePart=0x0) returned 0xa1 [0149.775] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0149.775] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.WindowsFeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\3375042201\\1858609885.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.windowsfeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\3375042201\\1858609885.pri"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0149.776] GetFileType (hFile=0x444) returned 0x1 [0149.776] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be570) returned 1 [0149.776] GetFileType (hFile=0x444) returned 0x1 [0149.776] WriteFile (in: hFile=0x444, lpBuffer=0x222aae8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be738, lpOverlapped=0x0 | out: lpBuffer=0x222aae8*, lpNumberOfBytesWritten=0x3be738*=0x2000, lpOverlapped=0x0) returned 1 [0149.776] CloseHandle (hObject=0x444) returned 1 [0149.776] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.WindowsFeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\3375042201\\1858609885.pri", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.WindowsFeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\3375042201\\1858609885.pri", lpFilePart=0x0) returned 0xa1 [0149.776] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.WindowsFeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\3375042201\\1858609885.pri.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.WindowsFeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\3375042201\\1858609885.pri.xuy", lpFilePart=0x0) returned 0xa5 [0149.776] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0149.777] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.WindowsFeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\3375042201\\1858609885.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.windowsfeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\3375042201\\1858609885.pri"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc434d45, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xbc434d45, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x45203199, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x7ee0)) returned 1 [0149.777] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0149.777] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.WindowsFeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\3375042201\\1858609885.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.windowsfeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\3375042201\\1858609885.pri"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.WindowsFeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\3375042201\\1858609885.pri.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.windowsfeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\3375042201\\1858609885.pri.xuy")) returned 1 [0149.779] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0149.779] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.XboxGameCallableUI_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.XboxGameCallableUI_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy", lpFilePart=0x0) returned 0x8c [0149.779] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.XboxGameCallableUI_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.XboxGameCallableUI_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\", lpFilePart=0x0) returned 0x8d [0149.779] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.XboxGameCallableUI_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7670 [0149.779] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0149.780] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0149.780] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0149.780] FindClose (in: hFindFile=0x5d7670 | out: hFindFile=0x5d7670) returned 1 [0149.780] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0149.780] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0149.780] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0149.780] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.XboxGameCallableUI_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.XboxGameCallableUI_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy", lpFilePart=0x0) returned 0x8c [0149.780] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.XboxGameCallableUI_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.XboxGameCallableUI_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\", lpFilePart=0x0) returned 0x8d [0149.780] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.XboxGameCallableUI_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d78b0 [0149.780] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0149.780] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0149.780] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0149.781] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0149.781] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0149.781] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0149.781] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0149.781] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.XboxGameCallableUI_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\2107319684", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.XboxGameCallableUI_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\2107319684", lpFilePart=0x0) returned 0x97 [0149.781] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.XboxGameCallableUI_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\2107319684\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.XboxGameCallableUI_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\2107319684\\", lpFilePart=0x0) returned 0x98 [0149.781] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.XboxGameCallableUI_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\2107319684\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d7a30 [0149.781] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0149.781] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0149.781] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0149.781] FindClose (in: hFindFile=0x5d7a30 | out: hFindFile=0x5d7a30) returned 1 [0149.781] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0149.781] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0149.781] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0149.781] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.XboxGameCallableUI_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\2107319684", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.XboxGameCallableUI_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\2107319684", lpFilePart=0x0) returned 0x97 [0149.781] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.XboxGameCallableUI_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\2107319684\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.XboxGameCallableUI_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\2107319684\\", lpFilePart=0x0) returned 0x98 [0149.782] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.XboxGameCallableUI_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\2107319684\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d7cd0 [0149.782] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0149.782] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0149.782] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0149.782] FindClose (in: hFindFile=0x5d7cd0 | out: hFindFile=0x5d7cd0) returned 1 [0149.782] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0149.782] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0149.782] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.XboxGameCallableUI_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\2107319684\\2467780804.pri", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.XboxGameCallableUI_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\2107319684\\2467780804.pri", lpFilePart=0x0) returned 0xa6 [0149.782] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0149.782] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.XboxGameCallableUI_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\2107319684\\2467780804.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.xboxgamecallableui_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\2107319684\\2467780804.pri"), fInfoLevelId=0x0, lpFileInformation=0x22af6f0 | out: lpFileInformation=0x22af6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbd33e58, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xbbd33e58, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xbbd33e58, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x22d0)) returned 1 [0149.782] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0149.782] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.XboxGameCallableUI_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\2107319684\\2467780804.pri", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.XboxGameCallableUI_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\2107319684\\2467780804.pri", lpFilePart=0x0) returned 0xa6 [0149.782] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0149.783] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.XboxGameCallableUI_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\2107319684\\2467780804.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.xboxgamecallableui_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\2107319684\\2467780804.pri"), fInfoLevelId=0x0, lpFileInformation=0x22af8f8 | out: lpFileInformation=0x22af8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbd33e58, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xbbd33e58, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xbbd33e58, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x22d0)) returned 1 [0149.783] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0149.783] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.XboxGameCallableUI_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\2107319684\\2467780804.pri", nBufferLength=0x105, lpBuffer=0x3be120, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.XboxGameCallableUI_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\2107319684\\2467780804.pri", lpFilePart=0x0) returned 0xa6 [0149.783] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0149.783] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.XboxGameCallableUI_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\2107319684\\2467780804.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.xboxgamecallableui_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\2107319684\\2467780804.pri"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0149.784] GetFileType (hFile=0x444) returned 0x1 [0149.784] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be570) returned 1 [0149.784] GetFileType (hFile=0x444) returned 0x1 [0149.784] ReadFile (in: hFile=0x444, lpBuffer=0x22b1e38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be688, lpOverlapped=0x0 | out: lpBuffer=0x22b1e38*, lpNumberOfBytesRead=0x3be688*=0x1000, lpOverlapped=0x0) returned 1 [0149.796] CloseHandle (hObject=0x444) returned 1 [0149.796] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.XboxGameCallableUI_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\2107319684\\2467780804.pri", nBufferLength=0x105, lpBuffer=0x3be120, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.XboxGameCallableUI_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\2107319684\\2467780804.pri", lpFilePart=0x0) returned 0xa6 [0149.796] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0149.796] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.XboxGameCallableUI_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\2107319684\\2467780804.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.xboxgamecallableui_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\2107319684\\2467780804.pri"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0149.797] GetFileType (hFile=0x444) returned 0x1 [0149.797] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be570) returned 1 [0149.797] GetFileType (hFile=0x444) returned 0x1 [0149.797] WriteFile (in: hFile=0x444, lpBuffer=0x22afae0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be738, lpOverlapped=0x0 | out: lpBuffer=0x22afae0*, lpNumberOfBytesWritten=0x3be738*=0x2000, lpOverlapped=0x0) returned 1 [0149.797] CloseHandle (hObject=0x444) returned 1 [0149.797] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.XboxGameCallableUI_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\2107319684\\2467780804.pri", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.XboxGameCallableUI_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\2107319684\\2467780804.pri", lpFilePart=0x0) returned 0xa6 [0149.797] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.XboxGameCallableUI_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\2107319684\\2467780804.pri.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.XboxGameCallableUI_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\2107319684\\2467780804.pri.xuy", lpFilePart=0x0) returned 0xaa [0149.797] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0149.797] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.XboxGameCallableUI_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\2107319684\\2467780804.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.xboxgamecallableui_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\2107319684\\2467780804.pri"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbd33e58, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xbbd33e58, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x4522d18b, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x22d0)) returned 1 [0149.797] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0149.797] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.XboxGameCallableUI_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\2107319684\\2467780804.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.xboxgamecallableui_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\2107319684\\2467780804.pri"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.XboxGameCallableUI_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\2107319684\\2467780804.pri.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.xboxgamecallableui_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\2107319684\\2467780804.pri.xuy")) returned 1 [0149.798] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0149.798] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.XboxIdentityProvider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.XboxIdentityProvider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy", lpFilePart=0x0) returned 0x8e [0149.798] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.XboxIdentityProvider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.XboxIdentityProvider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\", lpFilePart=0x0) returned 0x8f [0149.798] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.XboxIdentityProvider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7c70 [0149.799] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0149.799] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0149.799] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0149.799] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0149.799] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0149.799] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0149.799] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0149.799] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.XboxIdentityProvider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.XboxIdentityProvider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy", lpFilePart=0x0) returned 0x8e [0149.799] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.XboxIdentityProvider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.XboxIdentityProvider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\", lpFilePart=0x0) returned 0x8f [0149.799] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.XboxIdentityProvider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7af0 [0149.800] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0149.800] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0149.800] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0149.800] FindClose (in: hFindFile=0x5d7af0 | out: hFindFile=0x5d7af0) returned 1 [0149.800] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0149.800] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0149.800] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0149.800] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.XboxIdentityProvider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\860568095", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.XboxIdentityProvider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\860568095", lpFilePart=0x0) returned 0x98 [0149.800] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.XboxIdentityProvider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\860568095\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.XboxIdentityProvider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\860568095\\", lpFilePart=0x0) returned 0x99 [0149.800] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.XboxIdentityProvider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\860568095\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d7370 [0149.800] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0149.800] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0149.801] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0149.801] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0149.801] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0149.801] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0149.801] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0149.801] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.XboxIdentityProvider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\860568095", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.XboxIdentityProvider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\860568095", lpFilePart=0x0) returned 0x98 [0149.801] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.XboxIdentityProvider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\860568095\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.XboxIdentityProvider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\860568095\\", lpFilePart=0x0) returned 0x99 [0149.801] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.XboxIdentityProvider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\860568095\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d78b0 [0149.801] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0149.801] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0149.801] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0149.801] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0149.801] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0149.802] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0149.802] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.XboxIdentityProvider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\860568095\\965632691.pri", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.XboxIdentityProvider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\860568095\\965632691.pri", lpFilePart=0x0) returned 0xa6 [0149.802] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0149.802] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.XboxIdentityProvider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\860568095\\965632691.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.xboxidentityprovider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\860568095\\965632691.pri"), fInfoLevelId=0x0, lpFileInformation=0x23347e0 | out: lpFileInformation=0x23347e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcfae283, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xbcfae283, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xbcfae283, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x20a0)) returned 1 [0149.802] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0149.802] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.XboxIdentityProvider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\860568095\\965632691.pri", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.XboxIdentityProvider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\860568095\\965632691.pri", lpFilePart=0x0) returned 0xa6 [0149.802] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0149.802] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.XboxIdentityProvider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\860568095\\965632691.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.xboxidentityprovider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\860568095\\965632691.pri"), fInfoLevelId=0x0, lpFileInformation=0x23349e8 | out: lpFileInformation=0x23349e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcfae283, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xbcfae283, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xbcfae283, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x20a0)) returned 1 [0149.802] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0149.802] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.XboxIdentityProvider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\860568095\\965632691.pri", nBufferLength=0x105, lpBuffer=0x3be120, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.XboxIdentityProvider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\860568095\\965632691.pri", lpFilePart=0x0) returned 0xa6 [0149.802] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0149.802] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.XboxIdentityProvider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\860568095\\965632691.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.xboxidentityprovider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\860568095\\965632691.pri"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0149.803] GetFileType (hFile=0x444) returned 0x1 [0149.803] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be570) returned 1 [0149.803] GetFileType (hFile=0x444) returned 0x1 [0149.803] ReadFile (in: hFile=0x444, lpBuffer=0x2336f28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be688, lpOverlapped=0x0 | out: lpBuffer=0x2336f28*, lpNumberOfBytesRead=0x3be688*=0x1000, lpOverlapped=0x0) returned 1 [0149.847] CloseHandle (hObject=0x444) returned 1 [0149.847] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.XboxIdentityProvider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\860568095\\965632691.pri", nBufferLength=0x105, lpBuffer=0x3be120, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.XboxIdentityProvider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\860568095\\965632691.pri", lpFilePart=0x0) returned 0xa6 [0149.847] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0149.847] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.XboxIdentityProvider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\860568095\\965632691.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.xboxidentityprovider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\860568095\\965632691.pri"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0149.848] GetFileType (hFile=0x444) returned 0x1 [0149.848] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be570) returned 1 [0149.848] GetFileType (hFile=0x444) returned 0x1 [0149.848] WriteFile (in: hFile=0x444, lpBuffer=0x2154238*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be738, lpOverlapped=0x0 | out: lpBuffer=0x2154238*, lpNumberOfBytesWritten=0x3be738*=0x2000, lpOverlapped=0x0) returned 1 [0149.848] CloseHandle (hObject=0x444) returned 1 [0149.848] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.XboxIdentityProvider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\860568095\\965632691.pri", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.XboxIdentityProvider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\860568095\\965632691.pri", lpFilePart=0x0) returned 0xa6 [0149.848] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.XboxIdentityProvider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\860568095\\965632691.pri.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.XboxIdentityProvider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\860568095\\965632691.pri.xuy", lpFilePart=0x0) returned 0xaa [0149.848] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0149.848] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.XboxIdentityProvider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\860568095\\965632691.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.xboxidentityprovider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\860568095\\965632691.pri"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcfae283, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xbcfae283, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x4529f93e, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x20a0)) returned 1 [0149.849] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0149.849] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.XboxIdentityProvider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\860568095\\965632691.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.xboxidentityprovider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\860568095\\965632691.pri"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.XboxIdentityProvider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\860568095\\965632691.pri.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.xboxidentityprovider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\860568095\\965632691.pri.xuy")) returned 1 [0149.850] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0149.850] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Windows.ContactSupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Windows.ContactSupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy", lpFilePart=0x0) returned 0x84 [0149.850] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Windows.ContactSupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Windows.ContactSupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\", lpFilePart=0x0) returned 0x85 [0149.850] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Windows.ContactSupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7370 [0149.850] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0149.850] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0149.850] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0149.850] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0149.851] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0149.851] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0149.851] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0149.851] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Windows.ContactSupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Windows.ContactSupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy", lpFilePart=0x0) returned 0x84 [0149.851] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Windows.ContactSupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Windows.ContactSupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\", lpFilePart=0x0) returned 0x85 [0149.851] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Windows.ContactSupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7d90 [0149.851] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0149.851] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0149.851] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0149.851] FindClose (in: hFindFile=0x5d7d90 | out: hFindFile=0x5d7d90) returned 1 [0149.851] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0149.851] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0149.851] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0149.851] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Windows.ContactSupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\2646675675", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Windows.ContactSupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\2646675675", lpFilePart=0x0) returned 0x8f [0149.852] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Windows.ContactSupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\2646675675\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Windows.ContactSupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\2646675675\\", lpFilePart=0x0) returned 0x90 [0149.852] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Windows.ContactSupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\2646675675\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d7df0 [0149.852] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0149.852] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0149.852] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0149.852] FindClose (in: hFindFile=0x5d7df0 | out: hFindFile=0x5d7df0) returned 1 [0149.852] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0149.852] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0149.852] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0149.852] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Windows.ContactSupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\2646675675", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Windows.ContactSupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\2646675675", lpFilePart=0x0) returned 0x8f [0149.852] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Windows.ContactSupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\2646675675\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Windows.ContactSupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\2646675675\\", lpFilePart=0x0) returned 0x90 [0149.852] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Windows.ContactSupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\2646675675\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d7370 [0149.853] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0149.853] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0149.853] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0149.853] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0149.853] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0149.853] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0149.853] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Windows.ContactSupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\2646675675\\806068533.pri", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Windows.ContactSupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\2646675675\\806068533.pri", lpFilePart=0x0) returned 0x9d [0149.853] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0149.853] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Windows.ContactSupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\2646675675\\806068533.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\windows.contactsupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\2646675675\\806068533.pri"), fInfoLevelId=0x0, lpFileInformation=0x21bddc0 | out: lpFileInformation=0x21bddc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd9116f8, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xbd9116f8, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xbd9116f8, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0xfd8)) returned 1 [0149.853] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0149.853] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Windows.ContactSupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\2646675675\\806068533.pri", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Windows.ContactSupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\2646675675\\806068533.pri", lpFilePart=0x0) returned 0x9d [0149.853] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0149.853] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Windows.ContactSupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\2646675675\\806068533.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\windows.contactsupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\2646675675\\806068533.pri"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0149.853] GetFileType (hFile=0x444) returned 0x1 [0149.854] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0149.854] GetFileType (hFile=0x444) returned 0x1 [0149.854] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be708 | out: lpFileSizeHigh=0x3be708*=0x0) returned 0xfd8 [0149.854] ReadFile (in: hFile=0x444, lpBuffer=0x21bf1a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be638, lpOverlapped=0x0 | out: lpBuffer=0x21bf1a0*, lpNumberOfBytesRead=0x3be638*=0xfd8, lpOverlapped=0x0) returned 1 [0149.872] CloseHandle (hObject=0x444) returned 1 [0149.883] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Windows.ContactSupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\2646675675\\806068533.pri", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Windows.ContactSupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\2646675675\\806068533.pri", lpFilePart=0x0) returned 0x9d [0149.883] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0149.883] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Windows.ContactSupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\2646675675\\806068533.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\windows.contactsupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\2646675675\\806068533.pri"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0149.885] GetFileType (hFile=0x444) returned 0x1 [0149.885] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0149.885] GetFileType (hFile=0x444) returned 0x1 [0149.885] WriteFile (in: hFile=0x444, lpBuffer=0x223b188*, nNumberOfBytesToWrite=0xfe0, lpNumberOfBytesWritten=0x3be548, lpOverlapped=0x0 | out: lpBuffer=0x223b188*, lpNumberOfBytesWritten=0x3be548*=0xfe0, lpOverlapped=0x0) returned 1 [0149.886] CloseHandle (hObject=0x444) returned 1 [0149.886] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Windows.ContactSupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\2646675675\\806068533.pri", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Windows.ContactSupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\2646675675\\806068533.pri", lpFilePart=0x0) returned 0x9d [0149.886] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Windows.ContactSupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\2646675675\\806068533.pri.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Windows.ContactSupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\2646675675\\806068533.pri.xuy", lpFilePart=0x0) returned 0xa1 [0149.886] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0149.886] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Windows.ContactSupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\2646675675\\806068533.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\windows.contactsupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\2646675675\\806068533.pri"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd9116f8, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xbd9116f8, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x452ebdbc, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xfe0)) returned 1 [0149.886] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0149.886] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Windows.ContactSupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\2646675675\\806068533.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\windows.contactsupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\2646675675\\806068533.pri"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Windows.ContactSupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\2646675675\\806068533.pri.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\windows.contactsupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\2646675675\\806068533.pri.xuy")) returned 1 [0149.888] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0149.888] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy", lpFilePart=0x0) returned 0x7b [0149.888] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\", lpFilePart=0x0) returned 0x7c [0149.888] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d78b0 [0149.889] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0149.889] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0149.889] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0149.889] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0149.889] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0149.889] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0149.889] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0149.889] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy", lpFilePart=0x0) returned 0x7b [0149.889] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\", lpFilePart=0x0) returned 0x7c [0149.890] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7e50 [0149.890] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0149.890] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0149.890] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0149.890] FindClose (in: hFindFile=0x5d7e50 | out: hFindFile=0x5d7e50) returned 1 [0149.890] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0149.890] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0149.890] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0149.890] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\1079934665", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\1079934665", lpFilePart=0x0) returned 0x86 [0149.891] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\1079934665\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\1079934665\\", lpFilePart=0x0) returned 0x87 [0149.891] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\1079934665\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d7c70 [0149.892] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0149.892] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0149.892] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0149.892] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0149.892] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0149.892] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0149.892] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0149.892] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\1079934665", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\1079934665", lpFilePart=0x0) returned 0x86 [0149.892] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\1079934665\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\1079934665\\", lpFilePart=0x0) returned 0x87 [0149.892] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\1079934665\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d7550 [0149.893] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0149.893] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0149.893] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0149.893] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0149.893] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0149.893] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0149.893] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\1079934665\\2034961148.pri", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\1079934665\\2034961148.pri", lpFilePart=0x0) returned 0x95 [0149.894] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0149.894] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\1079934665\\2034961148.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\windows.purchasedialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\1079934665\\2034961148.pri"), fInfoLevelId=0x0, lpFileInformation=0x2242080 | out: lpFileInformation=0x2242080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbece3041, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xbece3041, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xbece3041, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x730)) returned 1 [0149.894] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0149.894] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\1079934665\\2034961148.pri", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\1079934665\\2034961148.pri", lpFilePart=0x0) returned 0x95 [0149.894] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0149.894] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\1079934665\\2034961148.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\windows.purchasedialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\1079934665\\2034961148.pri"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0149.894] GetFileType (hFile=0x444) returned 0x1 [0149.894] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0149.894] GetFileType (hFile=0x444) returned 0x1 [0149.894] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be708 | out: lpFileSizeHigh=0x3be708*=0x0) returned 0x730 [0149.894] ReadFile (in: hFile=0x444, lpBuffer=0x2242b98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be638, lpOverlapped=0x0 | out: lpBuffer=0x2242b98*, lpNumberOfBytesRead=0x3be638*=0x730, lpOverlapped=0x0) returned 1 [0149.917] CloseHandle (hObject=0x444) returned 1 [0149.928] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\1079934665\\2034961148.pri", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\1079934665\\2034961148.pri", lpFilePart=0x0) returned 0x95 [0149.929] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0149.929] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\1079934665\\2034961148.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\windows.purchasedialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\1079934665\\2034961148.pri"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0149.931] GetFileType (hFile=0x444) returned 0x1 [0149.931] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0149.931] GetFileType (hFile=0x444) returned 0x1 [0149.931] WriteFile (in: hFile=0x444, lpBuffer=0x22bc058*, nNumberOfBytesToWrite=0x740, lpNumberOfBytesWritten=0x3be548, lpOverlapped=0x0 | out: lpBuffer=0x22bc058*, lpNumberOfBytesWritten=0x3be548*=0x740, lpOverlapped=0x0) returned 1 [0149.931] CloseHandle (hObject=0x444) returned 1 [0149.931] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\1079934665\\2034961148.pri", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\1079934665\\2034961148.pri", lpFilePart=0x0) returned 0x95 [0149.932] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\1079934665\\2034961148.pri.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\1079934665\\2034961148.pri.xuy", lpFilePart=0x0) returned 0x99 [0149.932] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0149.932] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\1079934665\\2034961148.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\windows.purchasedialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\1079934665\\2034961148.pri"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbece3041, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xbece3041, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x4535e75b, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x740)) returned 1 [0149.932] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0149.932] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\1079934665\\2034961148.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\windows.purchasedialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\1079934665\\2034961148.pri"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\1079934665\\2034961148.pri.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\windows.purchasedialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\1079934665\\2034961148.pri.xuy")) returned 1 [0149.933] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0149.933] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Ringtones", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Ringtones", lpFilePart=0x0) returned 0x3f [0149.933] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Ringtones\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Ringtones\\", lpFilePart=0x0) returned 0x40 [0149.933] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Ringtones\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7370 [0149.933] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0149.934] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0149.934] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0149.934] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0149.934] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0149.934] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0149.934] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Ringtones", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Ringtones", lpFilePart=0x0) returned 0x3f [0149.934] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Ringtones\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Ringtones\\", lpFilePart=0x0) returned 0x40 [0149.934] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Ringtones\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7a30 [0149.935] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0149.935] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0149.935] FindClose (in: hFindFile=0x5d7a30 | out: hFindFile=0x5d7a30) returned 1 [0149.935] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0149.935] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0149.935] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0149.935] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\RoamingTiles", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\RoamingTiles", lpFilePart=0x0) returned 0x42 [0149.935] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\RoamingTiles\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\RoamingTiles\\", lpFilePart=0x0) returned 0x43 [0149.935] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\RoamingTiles\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d78b0 [0149.935] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0149.935] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0149.936] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0149.936] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0149.936] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0149.936] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0149.936] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\RoamingTiles", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\RoamingTiles", lpFilePart=0x0) returned 0x42 [0149.936] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\RoamingTiles\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\RoamingTiles\\", lpFilePart=0x0) returned 0x43 [0149.936] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\RoamingTiles\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7d90 [0149.936] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0149.936] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0149.936] FindClose (in: hFindFile=0x5d7d90 | out: hFindFile=0x5d7d90) returned 1 [0149.936] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0149.936] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0149.936] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0149.936] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Shell", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Shell", lpFilePart=0x0) returned 0x3b [0149.936] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Shell\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Shell\\", lpFilePart=0x0) returned 0x3c [0149.936] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Shell\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d79d0 [0149.937] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0149.937] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0149.937] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0149.937] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0149.937] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0149.937] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0149.937] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0149.937] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Shell", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Shell", lpFilePart=0x0) returned 0x3b [0149.937] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Shell\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Shell\\", lpFilePart=0x0) returned 0x3c [0149.937] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Shell\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d79d0 [0149.937] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0149.938] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0149.938] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0149.938] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0149.938] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0149.938] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0149.938] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Shell\\DefaultLayouts.xml", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Shell\\DefaultLayouts.xml", lpFilePart=0x0) returned 0x4e [0149.938] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0149.938] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Shell\\DefaultLayouts.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\shell\\defaultlayouts.xml"), fInfoLevelId=0x0, lpFileInformation=0x22c24f8 | out: lpFileInformation=0x22c24f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa853b228, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa853b228, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xf0631a47, ftLastWriteTime.dwHighDateTime=0x1d0baff, nFileSizeHigh=0x0, nFileSizeLow=0xb765)) returned 1 [0149.938] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0149.938] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Shell\\DefaultLayouts.xml", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Shell\\DefaultLayouts.xml", lpFilePart=0x0) returned 0x4e [0149.938] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0149.938] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Shell\\DefaultLayouts.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\shell\\defaultlayouts.xml"), fInfoLevelId=0x0, lpFileInformation=0x22c2658 | out: lpFileInformation=0x22c2658*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa853b228, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa853b228, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xf0631a47, ftLastWriteTime.dwHighDateTime=0x1d0baff, nFileSizeHigh=0x0, nFileSizeLow=0xb765)) returned 1 [0149.938] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0149.939] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Shell\\DefaultLayouts.xml", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Shell\\DefaultLayouts.xml", lpFilePart=0x0) returned 0x4e [0149.939] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0149.939] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Shell\\DefaultLayouts.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\shell\\defaultlayouts.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0149.940] GetFileType (hFile=0x444) returned 0x1 [0149.940] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0149.940] GetFileType (hFile=0x444) returned 0x1 [0149.940] ReadFile (in: hFile=0x444, lpBuffer=0x22c4a48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x22c4a48*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0149.988] CloseHandle (hObject=0x444) returned 1 [0149.988] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Shell\\DefaultLayouts.xml", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Shell\\DefaultLayouts.xml", lpFilePart=0x0) returned 0x4e [0149.988] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0149.988] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Shell\\DefaultLayouts.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\shell\\defaultlayouts.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0149.988] GetFileType (hFile=0x444) returned 0x1 [0149.988] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0149.988] GetFileType (hFile=0x444) returned 0x1 [0149.988] WriteFile (in: hFile=0x444, lpBuffer=0x22c2798*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x22c2798*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0149.989] CloseHandle (hObject=0x444) returned 1 [0149.989] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Shell\\DefaultLayouts.xml", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Shell\\DefaultLayouts.xml", lpFilePart=0x0) returned 0x4e [0149.989] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Shell\\DefaultLayouts.xml.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Shell\\DefaultLayouts.xml.xuy", lpFilePart=0x0) returned 0x52 [0149.989] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0149.989] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Shell\\DefaultLayouts.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\shell\\defaultlayouts.xml"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa853b228, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa853b228, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x453f6d54, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xb765)) returned 1 [0149.989] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0149.989] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Shell\\DefaultLayouts.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\shell\\defaultlayouts.xml"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Shell\\DefaultLayouts.xml.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\shell\\defaultlayouts.xml.xuy")) returned 1 [0149.990] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0149.990] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files", lpFilePart=0x0) returned 0x4e [0149.990] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\", lpFilePart=0x0) returned 0x4f [0149.990] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0xffffffffffffffff [0149.991] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be730) returned 1 [0149.992] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0149.993] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache", lpFilePart=0x0) returned 0x3e [0149.993] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\", lpFilePart=0x0) returned 0x3f [0149.993] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d79d0 [0149.993] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0149.993] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0149.993] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0149.993] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0149.994] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0149.994] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0149.994] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0149.994] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0149.994] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0149.994] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0149.994] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0149.994] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0149.994] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0149.994] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache", lpFilePart=0x0) returned 0x3e [0149.994] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\", lpFilePart=0x0) returned 0x3f [0149.995] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7eb0 [0149.995] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0149.995] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0149.995] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0149.995] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0149.995] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0149.995] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0149.995] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0149.996] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0149.996] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0149.996] FindClose (in: hFindFile=0x5d7eb0 | out: hFindFile=0x5d7eb0) returned 1 [0149.996] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0149.996] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0149.996] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01.chk", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01.chk", lpFilePart=0x0) returned 0x46 [0149.996] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0149.996] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01.chk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcache\\v01.chk"), fInfoLevelId=0x0, lpFileInformation=0x23453c8 | out: lpFileInformation=0x23453c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xadc57bbd, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xadc57bbd, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x82ac5970, ftLastWriteTime.dwHighDateTime=0x1d46680, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0149.996] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0149.997] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01.chk", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01.chk", lpFilePart=0x0) returned 0x46 [0149.997] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0149.997] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01.chk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcache\\v01.chk"), fInfoLevelId=0x0, lpFileInformation=0x2345500 | out: lpFileInformation=0x2345500*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xadc57bbd, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xadc57bbd, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x82ac5970, ftLastWriteTime.dwHighDateTime=0x1d46680, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0149.997] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0149.997] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01.chk", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01.chk", lpFilePart=0x0) returned 0x46 [0149.997] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0149.997] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01.chk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcache\\v01.chk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0149.998] GetFileType (hFile=0x444) returned 0x1 [0149.998] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0149.998] GetFileType (hFile=0x444) returned 0x1 [0149.998] ReadFile (in: hFile=0x444, lpBuffer=0x23478a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x23478a0*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0150.258] CloseHandle (hObject=0x444) returned 1 [0150.258] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01.chk", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01.chk", lpFilePart=0x0) returned 0x46 [0150.258] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0150.258] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01.chk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcache\\v01.chk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0150.259] GetFileType (hFile=0x444) returned 0x1 [0150.259] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0150.259] GetFileType (hFile=0x444) returned 0x1 [0150.259] WriteFile (in: hFile=0x444, lpBuffer=0x21544a8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x21544a8*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0150.259] CloseHandle (hObject=0x444) returned 1 [0150.259] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01.chk", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01.chk", lpFilePart=0x0) returned 0x46 [0150.259] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01.chk.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01.chk.xuy", lpFilePart=0x0) returned 0x4a [0150.259] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0150.259] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01.chk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcache\\v01.chk"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xadc57bbd, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xadc57bbd, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x4567f7d5, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0150.259] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0150.259] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01.chk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcache\\v01.chk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01.chk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcache\\v01.chk.xuy")) returned 1 [0150.260] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01.log", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01.log", lpFilePart=0x0) returned 0x46 [0150.261] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0150.261] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcache\\v01.log"), fInfoLevelId=0x0, lpFileInformation=0x21c3e80 | out: lpFileInformation=0x21c3e80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xadb268c5, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa2fbcfe, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xf3eda69f, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x80000)) returned 1 [0150.261] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0150.261] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01.log", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01.log", lpFilePart=0x0) returned 0x46 [0150.261] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0150.261] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcache\\v01.log"), fInfoLevelId=0x0, lpFileInformation=0x21c3fb8 | out: lpFileInformation=0x21c3fb8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xadb268c5, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa2fbcfe, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xf3eda69f, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x80000)) returned 1 [0150.261] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0150.261] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01.log", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01.log", lpFilePart=0x0) returned 0x46 [0150.261] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0150.261] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcache\\v01.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0150.263] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb170) returned 1 [0150.263] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01.log", nBufferLength=0x105, lpBuffer=0x3bbdf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01.log", lpFilePart=0x0) returned 0x46 [0150.263] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc290) returned 1 [0150.263] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcache\\v01.log"), fInfoLevelId=0x0, lpFileInformation=0x3bc370 | out: lpFileInformation=0x3bc370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xadb268c5, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa2fbcfe, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xf3eda69f, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x80000)) returned 1 [0150.263] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc250) returned 1 [0150.264] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01.log", nBufferLength=0x105, lpBuffer=0x3bbe10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01.log", lpFilePart=0x0) returned 0x46 [0150.264] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc290) returned 1 [0150.264] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcache\\v01.log"), fInfoLevelId=0x0, lpFileInformation=0x21c6ae8 | out: lpFileInformation=0x21c6ae8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xadb268c5, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa2fbcfe, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xf3eda69f, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x80000)) returned 1 [0150.264] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc250) returned 1 [0150.264] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01.log", nBufferLength=0x105, lpBuffer=0x3bbe10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01.log", lpFilePart=0x0) returned 0x46 [0150.264] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc290) returned 1 [0150.264] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcache\\v01.log"), fInfoLevelId=0x0, lpFileInformation=0x21c6c20 | out: lpFileInformation=0x21c6c20*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xadb268c5, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa2fbcfe, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xf3eda69f, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x80000)) returned 1 [0150.264] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc250) returned 1 [0150.264] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01.log", nBufferLength=0x105, lpBuffer=0x3bbcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01.log", lpFilePart=0x0) returned 0x46 [0150.264] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0150.264] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcache\\v01.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0150.265] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8c20) returned 1 [0150.266] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V010002C.log", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V010002C.log", lpFilePart=0x0) returned 0x4b [0150.266] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0150.266] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V010002C.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcache\\v010002c.log"), fInfoLevelId=0x0, lpFileInformation=0x21c9718 | out: lpFileInformation=0x21c9718*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xadb268c5, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0x26ab3cb1, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xf3eb457a, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x80000)) returned 1 [0150.266] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0150.266] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V010002C.log", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V010002C.log", lpFilePart=0x0) returned 0x4b [0150.266] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0150.266] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V010002C.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcache\\v010002c.log"), fInfoLevelId=0x0, lpFileInformation=0x21c9868 | out: lpFileInformation=0x21c9868*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xadb268c5, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0x26ab3cb1, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xf3eb457a, ftLastWriteTime.dwHighDateTime=0x1d47902, nFileSizeHigh=0x0, nFileSizeLow=0x80000)) returned 1 [0150.267] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0150.267] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V010002C.log", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V010002C.log", lpFilePart=0x0) returned 0x4b [0150.267] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0150.267] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V010002C.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcache\\v010002c.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0150.267] GetFileType (hFile=0x444) returned 0x1 [0150.267] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0150.268] GetFileType (hFile=0x444) returned 0x1 [0150.268] ReadFile (in: hFile=0x444, lpBuffer=0x21cbc38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x21cbc38*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0150.307] CloseHandle (hObject=0x444) returned 1 [0150.307] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V010002C.log", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V010002C.log", lpFilePart=0x0) returned 0x4b [0150.307] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0150.307] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V010002C.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcache\\v010002c.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0150.308] GetFileType (hFile=0x444) returned 0x1 [0150.308] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0150.308] GetFileType (hFile=0x444) returned 0x1 [0150.308] WriteFile (in: hFile=0x444, lpBuffer=0x21c9998*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x21c9998*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0150.308] CloseHandle (hObject=0x444) returned 1 [0150.308] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V010002C.log", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V010002C.log", lpFilePart=0x0) returned 0x4b [0150.308] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V010002C.log.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V010002C.log.xuy", lpFilePart=0x0) returned 0x4f [0150.308] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0150.308] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V010002C.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcache\\v010002c.log"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xadb268c5, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0x26ab3cb1, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x456f1ea3, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x80000)) returned 1 [0150.308] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0150.308] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V010002C.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcache\\v010002c.log"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V010002C.log.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcache\\v010002c.log.xuy")) returned 1 [0150.310] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01res00001.jrs", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01res00001.jrs", lpFilePart=0x0) returned 0x4e [0150.310] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0150.310] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01res00001.jrs" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcache\\v01res00001.jrs"), fInfoLevelId=0x0, lpFileInformation=0x2247ff0 | out: lpFileInformation=0x2247ff0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xadc0b718, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xadc0b718, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xadc31930, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x80000)) returned 1 [0150.310] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0150.310] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01res00001.jrs", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01res00001.jrs", lpFilePart=0x0) returned 0x4e [0150.310] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0150.310] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01res00001.jrs" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcache\\v01res00001.jrs"), fInfoLevelId=0x0, lpFileInformation=0x2248148 | out: lpFileInformation=0x2248148*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xadc0b718, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xadc0b718, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xadc31930, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x80000)) returned 1 [0150.310] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0150.310] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01res00001.jrs", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01res00001.jrs", lpFilePart=0x0) returned 0x4e [0150.310] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0150.310] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01res00001.jrs" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcache\\v01res00001.jrs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0150.311] GetFileType (hFile=0x444) returned 0x1 [0150.311] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0150.311] GetFileType (hFile=0x444) returned 0x1 [0150.311] ReadFile (in: hFile=0x444, lpBuffer=0x224a528, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x224a528*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0150.324] CloseHandle (hObject=0x444) returned 1 [0150.324] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01res00001.jrs", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01res00001.jrs", lpFilePart=0x0) returned 0x4e [0150.324] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0150.324] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01res00001.jrs" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcache\\v01res00001.jrs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0150.325] GetFileType (hFile=0x444) returned 0x1 [0150.325] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0150.325] GetFileType (hFile=0x444) returned 0x1 [0150.325] WriteFile (in: hFile=0x444, lpBuffer=0x2248280*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x2248280*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0150.325] CloseHandle (hObject=0x444) returned 1 [0150.325] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01res00001.jrs", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01res00001.jrs", lpFilePart=0x0) returned 0x4e [0150.325] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01res00001.jrs.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01res00001.jrs.xuy", lpFilePart=0x0) returned 0x52 [0150.325] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0150.325] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01res00001.jrs" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcache\\v01res00001.jrs"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xadc0b718, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xadc0b718, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x4573e1e3, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x80000)) returned 1 [0150.325] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0150.325] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01res00001.jrs" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcache\\v01res00001.jrs"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01res00001.jrs.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcache\\v01res00001.jrs.xuy")) returned 1 [0150.327] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01res00002.jrs", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01res00002.jrs", lpFilePart=0x0) returned 0x4e [0150.327] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0150.327] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01res00002.jrs" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcache\\v01res00002.jrs"), fInfoLevelId=0x0, lpFileInformation=0x22c6900 | out: lpFileInformation=0x22c6900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xadc57bbd, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xadc57bbd, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xadc57bbd, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x80000)) returned 1 [0150.327] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0150.327] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01res00002.jrs", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01res00002.jrs", lpFilePart=0x0) returned 0x4e [0150.327] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0150.327] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01res00002.jrs" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcache\\v01res00002.jrs"), fInfoLevelId=0x0, lpFileInformation=0x22c6a58 | out: lpFileInformation=0x22c6a58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xadc57bbd, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xadc57bbd, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xadc57bbd, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x80000)) returned 1 [0150.327] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0150.327] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01res00002.jrs", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01res00002.jrs", lpFilePart=0x0) returned 0x4e [0150.327] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0150.327] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01res00002.jrs" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcache\\v01res00002.jrs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0150.328] GetFileType (hFile=0x444) returned 0x1 [0150.328] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0150.328] GetFileType (hFile=0x444) returned 0x1 [0150.328] ReadFile (in: hFile=0x444, lpBuffer=0x22c8e38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x22c8e38*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0150.341] CloseHandle (hObject=0x444) returned 1 [0150.341] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01res00002.jrs", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01res00002.jrs", lpFilePart=0x0) returned 0x4e [0150.341] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0150.341] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01res00002.jrs" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcache\\v01res00002.jrs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0150.341] GetFileType (hFile=0x444) returned 0x1 [0150.341] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0150.341] GetFileType (hFile=0x444) returned 0x1 [0150.341] WriteFile (in: hFile=0x444, lpBuffer=0x22c6b90*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x22c6b90*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0150.341] CloseHandle (hObject=0x444) returned 1 [0150.341] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01res00002.jrs", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01res00002.jrs", lpFilePart=0x0) returned 0x4e [0150.342] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01res00002.jrs.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01res00002.jrs.xuy", lpFilePart=0x0) returned 0x52 [0150.342] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0150.342] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01res00002.jrs" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcache\\v01res00002.jrs"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xadc57bbd, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xadc57bbd, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x45764688, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x80000)) returned 1 [0150.342] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0150.342] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01res00002.jrs" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcache\\v01res00002.jrs"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01res00002.jrs.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcache\\v01res00002.jrs.xuy")) returned 1 [0150.343] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01tmp.log", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01tmp.log", lpFilePart=0x0) returned 0x49 [0150.343] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0150.343] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01tmp.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcache\\v01tmp.log"), fInfoLevelId=0x0, lpFileInformation=0x2345210 | out: lpFileInformation=0x2345210*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xadb268c5, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xee791c6f, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x3d3d83cb, ftLastWriteTime.dwHighDateTime=0x1d41fd9, nFileSizeHigh=0x0, nFileSizeLow=0x80000)) returned 1 [0150.343] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0150.343] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01tmp.log", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01tmp.log", lpFilePart=0x0) returned 0x49 [0150.343] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0150.343] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01tmp.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcache\\v01tmp.log"), fInfoLevelId=0x0, lpFileInformation=0x2345358 | out: lpFileInformation=0x2345358*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xadb268c5, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xee791c6f, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x3d3d83cb, ftLastWriteTime.dwHighDateTime=0x1d41fd9, nFileSizeHigh=0x0, nFileSizeLow=0x80000)) returned 1 [0150.343] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0150.343] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01tmp.log", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01tmp.log", lpFilePart=0x0) returned 0x49 [0150.343] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0150.344] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01tmp.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcache\\v01tmp.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0150.345] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb170) returned 1 [0150.345] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01tmp.log", nBufferLength=0x105, lpBuffer=0x3bbdf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01tmp.log", lpFilePart=0x0) returned 0x49 [0150.345] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc290) returned 1 [0150.345] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01tmp.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcache\\v01tmp.log"), fInfoLevelId=0x0, lpFileInformation=0x3bc370 | out: lpFileInformation=0x3bc370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xadb268c5, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xee791c6f, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x3d3d83cb, ftLastWriteTime.dwHighDateTime=0x1d41fd9, nFileSizeHigh=0x0, nFileSizeLow=0x80000)) returned 1 [0150.345] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc250) returned 1 [0150.345] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01tmp.log", nBufferLength=0x105, lpBuffer=0x3bbe10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01tmp.log", lpFilePart=0x0) returned 0x49 [0150.345] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc290) returned 1 [0150.345] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01tmp.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcache\\v01tmp.log"), fInfoLevelId=0x0, lpFileInformation=0x2347eb0 | out: lpFileInformation=0x2347eb0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xadb268c5, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xee791c6f, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x3d3d83cb, ftLastWriteTime.dwHighDateTime=0x1d41fd9, nFileSizeHigh=0x0, nFileSizeLow=0x80000)) returned 1 [0150.345] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc250) returned 1 [0150.346] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01tmp.log", nBufferLength=0x105, lpBuffer=0x3bbe10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01tmp.log", lpFilePart=0x0) returned 0x49 [0150.346] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc290) returned 1 [0150.346] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01tmp.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcache\\v01tmp.log"), fInfoLevelId=0x0, lpFileInformation=0x2347ff8 | out: lpFileInformation=0x2347ff8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xadb268c5, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xee791c6f, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x3d3d83cb, ftLastWriteTime.dwHighDateTime=0x1d41fd9, nFileSizeHigh=0x0, nFileSizeLow=0x80000)) returned 1 [0150.346] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc250) returned 1 [0150.346] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01tmp.log", nBufferLength=0x105, lpBuffer=0x3bbcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01tmp.log", lpFilePart=0x0) returned 0x49 [0150.346] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0150.346] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01tmp.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcache\\v01tmp.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0150.347] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8c20) returned 1 [0150.348] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat", lpFilePart=0x0) returned 0x4e [0150.348] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0150.348] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat"), fInfoLevelId=0x0, lpFileInformation=0x234ab10 | out: lpFileInformation=0x234ab10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xadc7de23, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xadc7de23, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xb0875421, ftLastWriteTime.dwHighDateTime=0x1d46683, nFileSizeHigh=0x0, nFileSizeLow=0x2100000)) returned 1 [0150.348] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0150.348] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat", lpFilePart=0x0) returned 0x4e [0150.348] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0150.348] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat"), fInfoLevelId=0x0, lpFileInformation=0x234ac68 | out: lpFileInformation=0x234ac68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xadc7de23, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xadc7de23, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xb0875421, ftLastWriteTime.dwHighDateTime=0x1d46683, nFileSizeHigh=0x0, nFileSizeLow=0x2100000)) returned 1 [0150.348] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0150.348] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0150.348] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Windows Anytime Upgrade", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Windows Anytime Upgrade", lpFilePart=0x0) returned 0x4d [0150.348] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Windows Anytime Upgrade\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Windows Anytime Upgrade\\", lpFilePart=0x0) returned 0x4e [0150.348] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Windows Anytime Upgrade\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d78b0 [0150.349] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0150.349] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0150.349] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0150.349] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0150.350] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0150.350] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0150.350] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0150.350] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Windows Anytime Upgrade", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Windows Anytime Upgrade", lpFilePart=0x0) returned 0x4d [0150.350] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Windows Anytime Upgrade\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Windows Anytime Upgrade\\", lpFilePart=0x0) returned 0x4e [0150.350] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Windows Anytime Upgrade\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d81b0 [0150.350] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0150.351] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0150.351] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0150.351] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0150.351] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0150.351] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0150.351] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Windows Anytime Upgrade\\Upgrade_dism.log", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Windows Anytime Upgrade\\Upgrade_dism.log", lpFilePart=0x0) returned 0x5e [0150.351] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0150.351] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Windows Anytime Upgrade\\Upgrade_dism.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\windows anytime upgrade\\upgrade_dism.log"), fInfoLevelId=0x0, lpFileInformation=0x234cf30 | out: lpFileInformation=0x234cf30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd98fcf0, ftCreationTime.dwHighDateTime=0x1d3001c, ftLastAccessTime.dwLowDateTime=0xdd98fcf0, ftLastAccessTime.dwHighDateTime=0x1d3001c, ftLastWriteTime.dwLowDateTime=0xdf7accd2, ftLastWriteTime.dwHighDateTime=0x1d3001c, nFileSizeHigh=0x0, nFileSizeLow=0xac34)) returned 1 [0150.351] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0150.351] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Windows Anytime Upgrade\\Upgrade_dism.log", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Windows Anytime Upgrade\\Upgrade_dism.log", lpFilePart=0x0) returned 0x5e [0150.351] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0150.351] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Windows Anytime Upgrade\\Upgrade_dism.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\windows anytime upgrade\\upgrade_dism.log"), fInfoLevelId=0x0, lpFileInformation=0x234d0b0 | out: lpFileInformation=0x234d0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd98fcf0, ftCreationTime.dwHighDateTime=0x1d3001c, ftLastAccessTime.dwLowDateTime=0xdd98fcf0, ftLastAccessTime.dwHighDateTime=0x1d3001c, ftLastWriteTime.dwLowDateTime=0xdf7accd2, ftLastWriteTime.dwHighDateTime=0x1d3001c, nFileSizeHigh=0x0, nFileSizeLow=0xac34)) returned 1 [0150.351] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0150.351] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Windows Anytime Upgrade\\Upgrade_dism.log", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Windows Anytime Upgrade\\Upgrade_dism.log", lpFilePart=0x0) returned 0x5e [0150.351] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0150.352] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Windows Anytime Upgrade\\Upgrade_dism.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\windows anytime upgrade\\upgrade_dism.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0150.352] GetFileType (hFile=0x444) returned 0x1 [0150.352] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0150.352] GetFileType (hFile=0x444) returned 0x1 [0150.352] ReadFile (in: hFile=0x444, lpBuffer=0x234f4e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x234f4e0*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0150.400] CloseHandle (hObject=0x444) returned 1 [0150.401] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Windows Anytime Upgrade\\Upgrade_dism.log", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Windows Anytime Upgrade\\Upgrade_dism.log", lpFilePart=0x0) returned 0x5e [0150.401] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0150.401] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Windows Anytime Upgrade\\Upgrade_dism.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\windows anytime upgrade\\upgrade_dism.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0150.401] GetFileType (hFile=0x444) returned 0x1 [0150.401] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0150.401] GetFileType (hFile=0x444) returned 0x1 [0150.401] WriteFile (in: hFile=0x444, lpBuffer=0x21543f0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x21543f0*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0150.401] CloseHandle (hObject=0x444) returned 1 [0150.401] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Windows Anytime Upgrade\\Upgrade_dism.log", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Windows Anytime Upgrade\\Upgrade_dism.log", lpFilePart=0x0) returned 0x5e [0150.401] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Windows Anytime Upgrade\\Upgrade_dism.log.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Windows Anytime Upgrade\\Upgrade_dism.log.xuy", lpFilePart=0x0) returned 0x62 [0150.401] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0150.402] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Windows Anytime Upgrade\\Upgrade_dism.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\windows anytime upgrade\\upgrade_dism.log"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd98fcf0, ftCreationTime.dwHighDateTime=0x1d3001c, ftLastAccessTime.dwLowDateTime=0xdd98fcf0, ftLastAccessTime.dwHighDateTime=0x1d3001c, ftLastWriteTime.dwLowDateTime=0x457d6c83, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xac34)) returned 1 [0150.402] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0150.402] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Windows Anytime Upgrade\\Upgrade_dism.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\windows anytime upgrade\\upgrade_dism.log"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Windows Anytime Upgrade\\Upgrade_dism.log.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\windows anytime upgrade\\upgrade_dism.log.xuy")) returned 1 [0150.403] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0150.403] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX", lpFilePart=0x0) returned 0x3a [0150.403] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\", lpFilePart=0x0) returned 0x3b [0150.404] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7c70 [0150.404] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0150.404] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0150.404] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0150.404] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0150.404] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0150.404] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0150.404] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0150.404] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0150.404] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0150.404] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX", lpFilePart=0x0) returned 0x3a [0150.405] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\", lpFilePart=0x0) returned 0x3b [0150.405] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d78b0 [0150.405] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0150.405] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0150.405] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0150.405] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0150.405] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0150.405] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0150.405] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0150.405] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0150.405] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0150.405] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group1", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group1", lpFilePart=0x0) returned 0x41 [0150.406] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group1\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group1\\", lpFilePart=0x0) returned 0x42 [0150.406] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group1\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7cd0 [0150.406] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0150.406] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0150.406] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0150.406] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0150.406] FindClose (in: hFindFile=0x5d7cd0 | out: hFindFile=0x5d7cd0) returned 1 [0150.406] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0150.406] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0150.406] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0150.406] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group1", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group1", lpFilePart=0x0) returned 0x41 [0150.406] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group1\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group1\\", lpFilePart=0x0) returned 0x42 [0150.407] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group1\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d75b0 [0150.407] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0150.407] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0150.407] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0150.407] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0150.407] FindClose (in: hFindFile=0x5d75b0 | out: hFindFile=0x5d75b0) returned 1 [0150.407] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0150.407] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0150.407] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group1\\1 - Desktop.lnk", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group1\\1 - Desktop.lnk", lpFilePart=0x0) returned 0x51 [0150.407] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0150.407] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group1\\1 - Desktop.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group1\\1 - desktop.lnk"), fInfoLevelId=0x0, lpFileInformation=0x21cfd30 | out: lpFileInformation=0x21cfd30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa853b228, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa853b228, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x9bf49c7f, ftLastWriteTime.dwHighDateTime=0x1d0baff, nFileSizeHigh=0x0, nFileSizeLow=0x455)) returned 1 [0150.408] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0150.408] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group1\\1 - Desktop.lnk", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group1\\1 - Desktop.lnk", lpFilePart=0x0) returned 0x51 [0150.408] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0150.408] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group1\\1 - Desktop.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group1\\1 - desktop.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0150.408] GetFileType (hFile=0x444) returned 0x1 [0150.408] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0150.408] GetFileType (hFile=0x444) returned 0x1 [0150.408] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x455 [0150.408] ReadFile (in: hFile=0x444, lpBuffer=0x21d0460, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x21d0460*, lpNumberOfBytesRead=0x3be6a8*=0x455, lpOverlapped=0x0) returned 1 [0150.416] CloseHandle (hObject=0x444) returned 1 [0150.453] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group1\\1 - Desktop.lnk", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group1\\1 - Desktop.lnk", lpFilePart=0x0) returned 0x51 [0150.453] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0150.453] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group1\\1 - Desktop.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group1\\1 - desktop.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0150.455] GetFileType (hFile=0x444) returned 0x1 [0150.455] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0150.455] GetFileType (hFile=0x444) returned 0x1 [0150.455] WriteFile (in: hFile=0x444, lpBuffer=0x2248a38*, nNumberOfBytesToWrite=0x460, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x2248a38*, lpNumberOfBytesWritten=0x3be5b8*=0x460, lpOverlapped=0x0) returned 1 [0150.456] CloseHandle (hObject=0x444) returned 1 [0150.456] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group1\\1 - Desktop.lnk", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group1\\1 - Desktop.lnk", lpFilePart=0x0) returned 0x51 [0150.456] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group1\\1 - Desktop.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group1\\1 - Desktop.lnk.xuy", lpFilePart=0x0) returned 0x55 [0150.456] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0150.456] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group1\\1 - Desktop.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group1\\1 - desktop.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa853b228, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa853b228, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x4586f85b, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x460)) returned 1 [0150.457] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0150.457] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group1\\1 - Desktop.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group1\\1 - desktop.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group1\\1 - Desktop.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group1\\1 - desktop.lnk.xuy")) returned 1 [0150.458] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group1\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group1\\desktop.ini", lpFilePart=0x0) returned 0x4d [0150.458] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0150.458] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group1\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group1\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x2249ce8 | out: lpFileInformation=0x2249ce8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xa8515036, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa8515036, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xf58e708b, ftLastWriteTime.dwHighDateTime=0x1d0baff, nFileSizeHigh=0x0, nFileSizeLow=0x51)) returned 1 [0150.458] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0150.458] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group1\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group1\\desktop.ini", lpFilePart=0x0) returned 0x4d [0150.458] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0150.458] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group1\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group1\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0150.458] GetFileType (hFile=0x444) returned 0x1 [0150.458] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0150.458] GetFileType (hFile=0x444) returned 0x1 [0150.458] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x51 [0150.458] ReadFile (in: hFile=0x444, lpBuffer=0x2249ff8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x2249ff8*, lpNumberOfBytesRead=0x3be6a8*=0x51, lpOverlapped=0x0) returned 1 [0150.459] CloseHandle (hObject=0x444) returned 1 [0150.470] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group1\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group1\\desktop.ini", lpFilePart=0x0) returned 0x4d [0150.470] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0150.470] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group1\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group1\\desktop.ini"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0150.472] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb070) returned 1 [0150.472] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group1\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3bbcf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group1\\desktop.ini", lpFilePart=0x0) returned 0x4d [0150.472] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0150.472] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group1\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group1\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x3bc270 | out: lpFileInformation=0x3bc270*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xa8515036, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa8515036, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xf58e708b, ftLastWriteTime.dwHighDateTime=0x1d0baff, nFileSizeHigh=0x0, nFileSizeLow=0x51)) returned 1 [0150.472] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc150) returned 1 [0150.472] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group1\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3bbd10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group1\\desktop.ini", lpFilePart=0x0) returned 0x4d [0150.472] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0150.472] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group1\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group1\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x22c1a10 | out: lpFileInformation=0x22c1a10*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xa8515036, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa8515036, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xf58e708b, ftLastWriteTime.dwHighDateTime=0x1d0baff, nFileSizeHigh=0x0, nFileSizeLow=0x51)) returned 1 [0150.473] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc150) returned 1 [0150.473] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group1\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3bbb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group1\\desktop.ini", lpFilePart=0x0) returned 0x4d [0150.473] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc050) returned 1 [0150.473] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group1\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group1\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0150.473] GetFileType (hFile=0x444) returned 0x1 [0150.473] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbfc0) returned 1 [0150.473] GetFileType (hFile=0x444) returned 0x1 [0150.473] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc1e8 | out: lpFileSizeHigh=0x3bc1e8*=0x0) returned 0x51 [0150.473] ReadFile (in: hFile=0x444, lpBuffer=0x22c1d20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bc118, lpOverlapped=0x0 | out: lpBuffer=0x22c1d20*, lpNumberOfBytesRead=0x3bc118*=0x51, lpOverlapped=0x0) returned 1 [0150.473] CloseHandle (hObject=0x444) returned 1 [0150.510] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group1\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3bbb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group1\\desktop.ini", lpFilePart=0x0) returned 0x4d [0150.510] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc050) returned 1 [0150.510] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group1\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group1\\desktop.ini"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0150.511] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8ae0) returned 1 [0150.512] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0150.512] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2", lpFilePart=0x0) returned 0x41 [0150.512] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\", lpFilePart=0x0) returned 0x42 [0150.513] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d78b0 [0150.513] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0150.514] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0150.514] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0150.514] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0150.514] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0150.514] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0150.514] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0150.514] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0150.514] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0150.515] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0150.515] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0150.515] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0150.515] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2", lpFilePart=0x0) returned 0x41 [0150.515] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\", lpFilePart=0x0) returned 0x42 [0150.515] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7a30 [0150.516] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0150.516] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0150.516] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0150.516] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0150.516] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0150.517] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0150.517] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0150.517] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0150.517] FindClose (in: hFindFile=0x5d7a30 | out: hFindFile=0x5d7a30) returned 1 [0150.517] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0150.517] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0150.518] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\1 - Run.lnk", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\1 - Run.lnk", lpFilePart=0x0) returned 0x4d [0150.518] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0150.518] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\1 - Run.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group2\\1 - run.lnk"), fInfoLevelId=0x0, lpFileInformation=0x233cbd8 | out: lpFileInformation=0x233cbd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8515036, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa8515036, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x9bf23a18, ftLastWriteTime.dwHighDateTime=0x1d0baff, nFileSizeHigh=0x0, nFileSizeLow=0x455)) returned 1 [0150.518] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0150.518] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\1 - Run.lnk", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\1 - Run.lnk", lpFilePart=0x0) returned 0x4d [0150.518] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0150.519] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\1 - Run.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group2\\1 - run.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0150.519] GetFileType (hFile=0x444) returned 0x1 [0150.519] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0150.519] GetFileType (hFile=0x444) returned 0x1 [0150.519] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x455 [0150.519] ReadFile (in: hFile=0x444, lpBuffer=0x233d2e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x233d2e8*, lpNumberOfBytesRead=0x3be6a8*=0x455, lpOverlapped=0x0) returned 1 [0150.520] CloseHandle (hObject=0x444) returned 1 [0150.611] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\1 - Run.lnk", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\1 - Run.lnk", lpFilePart=0x0) returned 0x4d [0150.612] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0150.612] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\1 - Run.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group2\\1 - run.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0150.614] GetFileType (hFile=0x444) returned 0x1 [0150.614] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0150.614] GetFileType (hFile=0x444) returned 0x1 [0150.614] WriteFile (in: hFile=0x444, lpBuffer=0x21b2f68*, nNumberOfBytesToWrite=0x460, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x21b2f68*, lpNumberOfBytesWritten=0x3be5b8*=0x460, lpOverlapped=0x0) returned 1 [0150.615] CloseHandle (hObject=0x444) returned 1 [0150.615] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\1 - Run.lnk", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\1 - Run.lnk", lpFilePart=0x0) returned 0x4d [0150.615] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\1 - Run.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\1 - Run.lnk.xuy", lpFilePart=0x0) returned 0x51 [0150.615] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0150.615] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\1 - Run.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group2\\1 - run.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8515036, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa8515036, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x459ecd13, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x460)) returned 1 [0150.615] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0150.615] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\1 - Run.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group2\\1 - run.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\1 - Run.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group2\\1 - run.lnk.xuy")) returned 1 [0150.803] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\2 - Search.lnk", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\2 - Search.lnk", lpFilePart=0x0) returned 0x50 [0150.803] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0150.803] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\2 - Search.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group2\\2 - search.lnk"), fInfoLevelId=0x0, lpFileInformation=0x21b4200 | out: lpFileInformation=0x21b4200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8515036, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa8515036, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x9bf23a18, ftLastWriteTime.dwHighDateTime=0x1d0baff, nFileSizeHigh=0x0, nFileSizeLow=0x455)) returned 1 [0150.805] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0150.805] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\2 - Search.lnk", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\2 - Search.lnk", lpFilePart=0x0) returned 0x50 [0150.805] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0150.805] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\2 - Search.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group2\\2 - search.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0150.807] GetFileType (hFile=0x444) returned 0x1 [0150.807] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0150.807] GetFileType (hFile=0x444) returned 0x1 [0150.807] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x455 [0150.807] ReadFile (in: hFile=0x444, lpBuffer=0x21b4930, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x21b4930*, lpNumberOfBytesRead=0x3be6a8*=0x455, lpOverlapped=0x0) returned 1 [0150.814] CloseHandle (hObject=0x444) returned 1 [0150.849] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\2 - Search.lnk", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\2 - Search.lnk", lpFilePart=0x0) returned 0x50 [0150.849] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0150.849] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\2 - Search.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group2\\2 - search.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0150.851] GetFileType (hFile=0x444) returned 0x1 [0150.851] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0150.851] GetFileType (hFile=0x444) returned 0x1 [0150.851] WriteFile (in: hFile=0x444, lpBuffer=0x222cf08*, nNumberOfBytesToWrite=0x460, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x222cf08*, lpNumberOfBytesWritten=0x3be5b8*=0x460, lpOverlapped=0x0) returned 1 [0150.852] CloseHandle (hObject=0x444) returned 1 [0150.852] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\2 - Search.lnk", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\2 - Search.lnk", lpFilePart=0x0) returned 0x50 [0150.852] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\2 - Search.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\2 - Search.lnk.xuy", lpFilePart=0x0) returned 0x54 [0150.852] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0150.852] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\2 - Search.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group2\\2 - search.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8515036, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa8515036, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x45c294a2, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x460)) returned 1 [0150.852] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0150.852] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\2 - Search.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group2\\2 - search.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\2 - Search.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group2\\2 - search.lnk.xuy")) returned 1 [0150.853] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\3 - Windows Explorer.lnk", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\3 - Windows Explorer.lnk", lpFilePart=0x0) returned 0x5a [0150.853] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0150.853] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\3 - Windows Explorer.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group2\\3 - windows explorer.lnk"), fInfoLevelId=0x0, lpFileInformation=0x222e1b8 | out: lpFileInformation=0x222e1b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa84eed80, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa84eed80, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x9bf23a18, ftLastWriteTime.dwHighDateTime=0x1d0baff, nFileSizeHigh=0x0, nFileSizeLow=0x455)) returned 1 [0150.853] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0150.853] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\3 - Windows Explorer.lnk", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\3 - Windows Explorer.lnk", lpFilePart=0x0) returned 0x5a [0150.853] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0150.853] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\3 - Windows Explorer.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group2\\3 - windows explorer.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0150.853] GetFileType (hFile=0x444) returned 0x1 [0150.853] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0150.853] GetFileType (hFile=0x444) returned 0x1 [0150.853] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x455 [0150.854] ReadFile (in: hFile=0x444, lpBuffer=0x222e938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x222e938*, lpNumberOfBytesRead=0x3be6a8*=0x455, lpOverlapped=0x0) returned 1 [0150.855] CloseHandle (hObject=0x444) returned 1 [0150.865] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\3 - Windows Explorer.lnk", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\3 - Windows Explorer.lnk", lpFilePart=0x0) returned 0x5a [0150.865] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0150.865] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\3 - Windows Explorer.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group2\\3 - windows explorer.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0150.867] GetFileType (hFile=0x444) returned 0x1 [0150.867] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0150.867] GetFileType (hFile=0x444) returned 0x1 [0150.867] WriteFile (in: hFile=0x444, lpBuffer=0x22a6f38*, nNumberOfBytesToWrite=0x460, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x22a6f38*, lpNumberOfBytesWritten=0x3be5b8*=0x460, lpOverlapped=0x0) returned 1 [0150.868] CloseHandle (hObject=0x444) returned 1 [0150.868] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\3 - Windows Explorer.lnk", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\3 - Windows Explorer.lnk", lpFilePart=0x0) returned 0x5a [0150.868] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\3 - Windows Explorer.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\3 - Windows Explorer.lnk.xuy", lpFilePart=0x0) returned 0x5e [0150.868] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0150.868] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\3 - Windows Explorer.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group2\\3 - windows explorer.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa84eed80, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa84eed80, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x45c4f211, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x460)) returned 1 [0150.868] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0150.868] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\3 - Windows Explorer.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group2\\3 - windows explorer.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\3 - Windows Explorer.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group2\\3 - windows explorer.lnk.xuy")) returned 1 [0150.869] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\4 - Control Panel.lnk", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\4 - Control Panel.lnk", lpFilePart=0x0) returned 0x57 [0150.869] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0150.869] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\4 - Control Panel.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group2\\4 - control panel.lnk"), fInfoLevelId=0x0, lpFileInformation=0x22a8218 | out: lpFileInformation=0x22a8218*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa84eed80, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa84eed80, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x9bf23a18, ftLastWriteTime.dwHighDateTime=0x1d0baff, nFileSizeHigh=0x0, nFileSizeLow=0x3f7)) returned 1 [0150.870] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0150.870] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\4 - Control Panel.lnk", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\4 - Control Panel.lnk", lpFilePart=0x0) returned 0x57 [0150.870] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0150.870] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\4 - Control Panel.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group2\\4 - control panel.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0150.870] GetFileType (hFile=0x444) returned 0x1 [0150.870] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0150.870] GetFileType (hFile=0x444) returned 0x1 [0150.870] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x3f7 [0150.870] ReadFile (in: hFile=0x444, lpBuffer=0x22a8918, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x22a8918*, lpNumberOfBytesRead=0x3be6a8*=0x3f7, lpOverlapped=0x0) returned 1 [0150.871] CloseHandle (hObject=0x444) returned 1 [0150.881] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\4 - Control Panel.lnk", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\4 - Control Panel.lnk", lpFilePart=0x0) returned 0x57 [0150.881] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0150.881] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\4 - Control Panel.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group2\\4 - control panel.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0150.883] GetFileType (hFile=0x444) returned 0x1 [0150.883] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0150.883] GetFileType (hFile=0x444) returned 0x1 [0150.883] WriteFile (in: hFile=0x444, lpBuffer=0x2320d28*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x2320d28*, lpNumberOfBytesWritten=0x3be5b8*=0x400, lpOverlapped=0x0) returned 1 [0150.884] CloseHandle (hObject=0x444) returned 1 [0150.884] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\4 - Control Panel.lnk", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\4 - Control Panel.lnk", lpFilePart=0x0) returned 0x57 [0150.884] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\4 - Control Panel.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\4 - Control Panel.lnk.xuy", lpFilePart=0x0) returned 0x5b [0150.884] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0150.884] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\4 - Control Panel.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group2\\4 - control panel.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa84eed80, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa84eed80, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x45c754ed, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x400)) returned 1 [0150.884] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0150.884] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\4 - Control Panel.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group2\\4 - control panel.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\4 - Control Panel.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group2\\4 - control panel.lnk.xuy")) returned 1 [0150.885] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\5 - Task Manager.lnk", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\5 - Task Manager.lnk", lpFilePart=0x0) returned 0x56 [0150.885] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0150.886] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\5 - Task Manager.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group2\\5 - task manager.lnk"), fInfoLevelId=0x0, lpFileInformation=0x2321ff0 | out: lpFileInformation=0x2321ff0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa84eed80, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa84eed80, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x9bf23a18, ftLastWriteTime.dwHighDateTime=0x1d0baff, nFileSizeHigh=0x0, nFileSizeLow=0x3fd)) returned 1 [0150.886] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0150.886] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\5 - Task Manager.lnk", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\5 - Task Manager.lnk", lpFilePart=0x0) returned 0x56 [0150.886] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0150.886] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\5 - Task Manager.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group2\\5 - task manager.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0150.886] GetFileType (hFile=0x444) returned 0x1 [0150.886] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0150.886] GetFileType (hFile=0x444) returned 0x1 [0150.886] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x3fd [0150.886] ReadFile (in: hFile=0x444, lpBuffer=0x23226f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x23226f8*, lpNumberOfBytesRead=0x3be6a8*=0x3fd, lpOverlapped=0x0) returned 1 [0150.888] CloseHandle (hObject=0x444) returned 1 [0150.927] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\5 - Task Manager.lnk", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\5 - Task Manager.lnk", lpFilePart=0x0) returned 0x56 [0150.927] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0150.927] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\5 - Task Manager.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group2\\5 - task manager.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0150.929] GetFileType (hFile=0x444) returned 0x1 [0150.929] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0150.929] GetFileType (hFile=0x444) returned 0x1 [0150.929] WriteFile (in: hFile=0x444, lpBuffer=0x219a8d0*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x219a8d0*, lpNumberOfBytesWritten=0x3be5b8*=0x400, lpOverlapped=0x0) returned 1 [0150.930] CloseHandle (hObject=0x444) returned 1 [0150.930] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\5 - Task Manager.lnk", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\5 - Task Manager.lnk", lpFilePart=0x0) returned 0x56 [0150.930] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\5 - Task Manager.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\5 - Task Manager.lnk.xuy", lpFilePart=0x0) returned 0x5a [0150.930] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0150.930] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\5 - Task Manager.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group2\\5 - task manager.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa84eed80, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa84eed80, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x45ce7c3f, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x400)) returned 1 [0150.930] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0150.931] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\5 - Task Manager.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group2\\5 - task manager.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\5 - Task Manager.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group2\\5 - task manager.lnk.xuy")) returned 1 [0150.932] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\desktop.ini", lpFilePart=0x0) returned 0x4d [0150.932] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0150.932] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group2\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x219bb98 | out: lpFileInformation=0x219bb98*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xa84eed80, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa84eed80, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xf58e708b, ftLastWriteTime.dwHighDateTime=0x1d0baff, nFileSizeHigh=0x0, nFileSizeLow=0x14c)) returned 1 [0150.932] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0150.932] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\desktop.ini", lpFilePart=0x0) returned 0x4d [0150.932] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0150.932] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group2\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0150.932] GetFileType (hFile=0x444) returned 0x1 [0150.932] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0150.932] GetFileType (hFile=0x444) returned 0x1 [0150.932] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x14c [0150.932] ReadFile (in: hFile=0x444, lpBuffer=0x219bfa0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x219bfa0*, lpNumberOfBytesRead=0x3be6a8*=0x14c, lpOverlapped=0x0) returned 1 [0150.933] CloseHandle (hObject=0x444) returned 1 [0150.943] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\desktop.ini", lpFilePart=0x0) returned 0x4d [0150.943] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0150.943] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group2\\desktop.ini"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0150.945] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb070) returned 1 [0150.945] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3bbcf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\desktop.ini", lpFilePart=0x0) returned 0x4d [0150.945] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0150.945] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group2\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x3bc270 | out: lpFileInformation=0x3bc270*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xa84eed80, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa84eed80, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xf58e708b, ftLastWriteTime.dwHighDateTime=0x1d0baff, nFileSizeHigh=0x0, nFileSizeLow=0x14c)) returned 1 [0150.946] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc150) returned 1 [0150.946] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3bbd10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\desktop.ini", lpFilePart=0x0) returned 0x4d [0150.946] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0150.946] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group2\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x2213e68 | out: lpFileInformation=0x2213e68*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xa84eed80, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa84eed80, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xf58e708b, ftLastWriteTime.dwHighDateTime=0x1d0baff, nFileSizeHigh=0x0, nFileSizeLow=0x14c)) returned 1 [0150.946] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc150) returned 1 [0150.946] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3bbb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\desktop.ini", lpFilePart=0x0) returned 0x4d [0150.946] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc050) returned 1 [0150.946] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group2\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0150.946] GetFileType (hFile=0x444) returned 0x1 [0150.946] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbfc0) returned 1 [0150.946] GetFileType (hFile=0x444) returned 0x1 [0150.946] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc1e8 | out: lpFileSizeHigh=0x3bc1e8*=0x0) returned 0x14c [0150.946] ReadFile (in: hFile=0x444, lpBuffer=0x2214270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bc118, lpOverlapped=0x0 | out: lpBuffer=0x2214270*, lpNumberOfBytesRead=0x3bc118*=0x14c, lpOverlapped=0x0) returned 1 [0150.946] CloseHandle (hObject=0x444) returned 1 [0150.985] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3bbb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\desktop.ini", lpFilePart=0x0) returned 0x4d [0150.985] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc050) returned 1 [0150.986] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group2\\desktop.ini"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0150.987] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8ae0) returned 1 [0150.988] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0150.988] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3", lpFilePart=0x0) returned 0x41 [0150.988] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\", lpFilePart=0x0) returned 0x42 [0150.988] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7e50 [0150.989] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0150.989] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0150.989] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0150.989] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0150.989] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0150.989] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0150.989] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0150.990] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0150.990] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0150.990] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0150.990] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0150.990] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0150.990] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0150.990] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0150.990] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0150.990] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0150.990] FindClose (in: hFindFile=0x5d7e50 | out: hFindFile=0x5d7e50) returned 1 [0150.991] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0150.991] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0150.991] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0150.991] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3", lpFilePart=0x0) returned 0x41 [0150.991] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\", lpFilePart=0x0) returned 0x42 [0150.991] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7c70 [0150.992] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0150.992] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0150.992] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0150.992] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0150.993] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0150.993] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0150.993] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0150.993] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0150.993] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0150.993] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0150.993] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0150.994] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0150.994] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0150.994] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0150.994] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0150.994] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0150.994] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0150.995] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0150.995] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0150.995] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\01 - Command Prompt.lnk", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\01 - Command Prompt.lnk", lpFilePart=0x0) returned 0x59 [0150.995] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0150.995] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\01 - Command Prompt.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group3\\01 - command prompt.lnk"), fInfoLevelId=0x0, lpFileInformation=0x2292000 | out: lpFileInformation=0x2292000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa84c8b14, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa84c8b14, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x9bf49c7f, ftLastWriteTime.dwHighDateTime=0x1d0baff, nFileSizeHigh=0x0, nFileSizeLow=0x3f7)) returned 1 [0150.996] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0150.996] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\01 - Command Prompt.lnk", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\01 - Command Prompt.lnk", lpFilePart=0x0) returned 0x59 [0150.996] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0150.996] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\01 - Command Prompt.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group3\\01 - command prompt.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0150.996] GetFileType (hFile=0x444) returned 0x1 [0150.996] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0150.996] GetFileType (hFile=0x444) returned 0x1 [0150.996] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x3f7 [0150.997] ReadFile (in: hFile=0x444, lpBuffer=0x2292710, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x2292710*, lpNumberOfBytesRead=0x3be6a8*=0x3f7, lpOverlapped=0x0) returned 1 [0150.998] CloseHandle (hObject=0x444) returned 1 [0151.035] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\01 - Command Prompt.lnk", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\01 - Command Prompt.lnk", lpFilePart=0x0) returned 0x59 [0151.035] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0151.035] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\01 - Command Prompt.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group3\\01 - command prompt.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0151.037] GetFileType (hFile=0x444) returned 0x1 [0151.037] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0151.037] GetFileType (hFile=0x444) returned 0x1 [0151.037] WriteFile (in: hFile=0x444, lpBuffer=0x230ab28*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x230ab28*, lpNumberOfBytesWritten=0x3be5b8*=0x400, lpOverlapped=0x0) returned 1 [0151.038] CloseHandle (hObject=0x444) returned 1 [0151.038] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\01 - Command Prompt.lnk", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\01 - Command Prompt.lnk", lpFilePart=0x0) returned 0x59 [0151.038] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\01 - Command Prompt.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\01 - Command Prompt.lnk.xuy", lpFilePart=0x0) returned 0x5d [0151.038] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0151.039] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\01 - Command Prompt.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group3\\01 - command prompt.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa84c8b14, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa84c8b14, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x45df2d7d, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x400)) returned 1 [0151.039] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0151.039] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\01 - Command Prompt.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group3\\01 - command prompt.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\01 - Command Prompt.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group3\\01 - command prompt.lnk.xuy")) returned 1 [0151.040] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\01a - Windows PowerShell.lnk", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\01a - Windows PowerShell.lnk", lpFilePart=0x0) returned 0x5e [0151.040] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0151.040] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\01a - Windows PowerShell.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group3\\01a - windows powershell.lnk"), fInfoLevelId=0x0, lpFileInformation=0x230be08 | out: lpFileInformation=0x230be08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa84c8b14, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa84c8b14, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x9bf23a18, ftLastWriteTime.dwHighDateTime=0x1d0baff, nFileSizeHigh=0x0, nFileSizeLow=0x467)) returned 1 [0151.041] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0151.041] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\01a - Windows PowerShell.lnk", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\01a - Windows PowerShell.lnk", lpFilePart=0x0) returned 0x5e [0151.041] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0151.041] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\01a - Windows PowerShell.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group3\\01a - windows powershell.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0151.041] GetFileType (hFile=0x444) returned 0x1 [0151.041] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0151.041] GetFileType (hFile=0x444) returned 0x1 [0151.041] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x467 [0151.041] ReadFile (in: hFile=0x444, lpBuffer=0x230c5b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x230c5b8*, lpNumberOfBytesRead=0x3be6a8*=0x467, lpOverlapped=0x0) returned 1 [0151.042] CloseHandle (hObject=0x444) returned 1 [0151.183] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\01a - Windows PowerShell.lnk", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\01a - Windows PowerShell.lnk", lpFilePart=0x0) returned 0x5e [0151.183] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0151.183] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\01a - Windows PowerShell.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group3\\01a - windows powershell.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0151.185] GetFileType (hFile=0x444) returned 0x1 [0151.185] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0151.185] GetFileType (hFile=0x444) returned 0x1 [0151.186] WriteFile (in: hFile=0x444, lpBuffer=0x2185578*, nNumberOfBytesToWrite=0x470, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x2185578*, lpNumberOfBytesWritten=0x3be5b8*=0x470, lpOverlapped=0x0) returned 1 [0151.186] CloseHandle (hObject=0x444) returned 1 [0151.186] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\01a - Windows PowerShell.lnk", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\01a - Windows PowerShell.lnk", lpFilePart=0x0) returned 0x5e [0151.186] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\01a - Windows PowerShell.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\01a - Windows PowerShell.lnk.xuy", lpFilePart=0x0) returned 0x62 [0151.186] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0151.187] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\01a - Windows PowerShell.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group3\\01a - windows powershell.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa84c8b14, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa84c8b14, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x45f7037d, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x470)) returned 1 [0151.187] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0151.187] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\01a - Windows PowerShell.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group3\\01a - windows powershell.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\01a - Windows PowerShell.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group3\\01a - windows powershell.lnk.xuy")) returned 1 [0151.188] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\02 - Command Prompt.lnk", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\02 - Command Prompt.lnk", lpFilePart=0x0) returned 0x59 [0151.188] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0151.188] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\02 - Command Prompt.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group3\\02 - command prompt.lnk"), fInfoLevelId=0x0, lpFileInformation=0x2186870 | out: lpFileInformation=0x2186870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa84c8b14, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa84c8b14, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x9bf49c7f, ftLastWriteTime.dwHighDateTime=0x1d0baff, nFileSizeHigh=0x0, nFileSizeLow=0x423)) returned 1 [0151.188] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0151.188] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\02 - Command Prompt.lnk", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\02 - Command Prompt.lnk", lpFilePart=0x0) returned 0x59 [0151.188] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0151.188] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\02 - Command Prompt.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group3\\02 - command prompt.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0151.188] GetFileType (hFile=0x444) returned 0x1 [0151.188] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0151.188] GetFileType (hFile=0x444) returned 0x1 [0151.188] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x423 [0151.188] ReadFile (in: hFile=0x444, lpBuffer=0x2186fb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x2186fb0*, lpNumberOfBytesRead=0x3be6a8*=0x423, lpOverlapped=0x0) returned 1 [0151.204] CloseHandle (hObject=0x444) returned 1 [0151.214] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\02 - Command Prompt.lnk", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\02 - Command Prompt.lnk", lpFilePart=0x0) returned 0x59 [0151.214] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0151.214] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\02 - Command Prompt.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group3\\02 - command prompt.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0151.216] GetFileType (hFile=0x444) returned 0x1 [0151.216] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0151.216] GetFileType (hFile=0x444) returned 0x1 [0151.216] WriteFile (in: hFile=0x444, lpBuffer=0x21ff4b8*, nNumberOfBytesToWrite=0x430, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x21ff4b8*, lpNumberOfBytesWritten=0x3be5b8*=0x430, lpOverlapped=0x0) returned 1 [0151.217] CloseHandle (hObject=0x444) returned 1 [0151.217] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\02 - Command Prompt.lnk", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\02 - Command Prompt.lnk", lpFilePart=0x0) returned 0x59 [0151.217] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\02 - Command Prompt.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\02 - Command Prompt.lnk.xuy", lpFilePart=0x0) returned 0x5d [0151.217] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0151.217] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\02 - Command Prompt.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group3\\02 - command prompt.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa84c8b14, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa84c8b14, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x45fbc783, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x430)) returned 1 [0151.217] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0151.217] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\02 - Command Prompt.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group3\\02 - command prompt.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\02 - Command Prompt.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group3\\02 - command prompt.lnk.xuy")) returned 1 [0151.219] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\02a - Windows PowerShell.lnk", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\02a - Windows PowerShell.lnk", lpFilePart=0x0) returned 0x5e [0151.219] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0151.219] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\02a - Windows PowerShell.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group3\\02a - windows powershell.lnk"), fInfoLevelId=0x0, lpFileInformation=0x2200798 | out: lpFileInformation=0x2200798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa84c8b14, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa84c8b14, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x9bf49c7f, ftLastWriteTime.dwHighDateTime=0x1d0baff, nFileSizeHigh=0x0, nFileSizeLow=0x493)) returned 1 [0151.219] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0151.219] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\02a - Windows PowerShell.lnk", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\02a - Windows PowerShell.lnk", lpFilePart=0x0) returned 0x5e [0151.219] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0151.219] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\02a - Windows PowerShell.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group3\\02a - windows powershell.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0151.219] GetFileType (hFile=0x444) returned 0x1 [0151.219] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0151.219] GetFileType (hFile=0x444) returned 0x1 [0151.219] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x493 [0151.219] ReadFile (in: hFile=0x444, lpBuffer=0x2200f78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x2200f78*, lpNumberOfBytesRead=0x3be6a8*=0x493, lpOverlapped=0x0) returned 1 [0151.221] CloseHandle (hObject=0x444) returned 1 [0151.231] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\02a - Windows PowerShell.lnk", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\02a - Windows PowerShell.lnk", lpFilePart=0x0) returned 0x5e [0151.231] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0151.231] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\02a - Windows PowerShell.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group3\\02a - windows powershell.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0151.233] GetFileType (hFile=0x444) returned 0x1 [0151.233] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0151.233] GetFileType (hFile=0x444) returned 0x1 [0151.233] WriteFile (in: hFile=0x444, lpBuffer=0x22796c8*, nNumberOfBytesToWrite=0x4a0, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x22796c8*, lpNumberOfBytesWritten=0x3be5b8*=0x4a0, lpOverlapped=0x0) returned 1 [0151.234] CloseHandle (hObject=0x444) returned 1 [0151.234] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\02a - Windows PowerShell.lnk", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\02a - Windows PowerShell.lnk", lpFilePart=0x0) returned 0x5e [0151.234] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\02a - Windows PowerShell.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\02a - Windows PowerShell.lnk.xuy", lpFilePart=0x0) returned 0x62 [0151.234] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0151.234] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\02a - Windows PowerShell.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group3\\02a - windows powershell.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa84c8b14, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa84c8b14, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x45fe2dba, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x4a0)) returned 1 [0151.234] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0151.234] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\02a - Windows PowerShell.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group3\\02a - windows powershell.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\02a - Windows PowerShell.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group3\\02a - windows powershell.lnk.xuy")) returned 1 [0151.235] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\03 - Computer Management.lnk", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\03 - Computer Management.lnk", lpFilePart=0x0) returned 0x5e [0151.235] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0151.235] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\03 - Computer Management.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group3\\03 - computer management.lnk"), fInfoLevelId=0x0, lpFileInformation=0x227a9c0 | out: lpFileInformation=0x227a9c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa84a290f, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa84a290f, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x9bf23a18, ftLastWriteTime.dwHighDateTime=0x1d0baff, nFileSizeHigh=0x0, nFileSizeLow=0x3f7)) returned 1 [0151.235] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0151.235] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\03 - Computer Management.lnk", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\03 - Computer Management.lnk", lpFilePart=0x0) returned 0x5e [0151.235] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0151.236] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\03 - Computer Management.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group3\\03 - computer management.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0151.236] GetFileType (hFile=0x444) returned 0x1 [0151.236] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0151.236] GetFileType (hFile=0x444) returned 0x1 [0151.236] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x3f7 [0151.236] ReadFile (in: hFile=0x444, lpBuffer=0x227b100, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x227b100*, lpNumberOfBytesRead=0x3be6a8*=0x3f7, lpOverlapped=0x0) returned 1 [0151.237] CloseHandle (hObject=0x444) returned 1 [0151.248] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\03 - Computer Management.lnk", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\03 - Computer Management.lnk", lpFilePart=0x0) returned 0x5e [0151.248] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0151.248] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\03 - Computer Management.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group3\\03 - computer management.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0151.249] GetFileType (hFile=0x444) returned 0x1 [0151.250] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0151.250] GetFileType (hFile=0x444) returned 0x1 [0151.250] WriteFile (in: hFile=0x444, lpBuffer=0x22f3530*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x22f3530*, lpNumberOfBytesWritten=0x3be5b8*=0x400, lpOverlapped=0x0) returned 1 [0151.250] CloseHandle (hObject=0x444) returned 1 [0151.251] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\03 - Computer Management.lnk", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\03 - Computer Management.lnk", lpFilePart=0x0) returned 0x5e [0151.251] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\03 - Computer Management.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\03 - Computer Management.lnk.xuy", lpFilePart=0x0) returned 0x62 [0151.251] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0151.251] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\03 - Computer Management.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group3\\03 - computer management.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa84a290f, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa84a290f, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x46008c4e, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x400)) returned 1 [0151.251] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0151.251] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\03 - Computer Management.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group3\\03 - computer management.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\03 - Computer Management.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group3\\03 - computer management.lnk.xuy")) returned 1 [0151.252] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\04 - Disk Management.lnk", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\04 - Disk Management.lnk", lpFilePart=0x0) returned 0x5a [0151.252] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0151.252] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\04 - Disk Management.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group3\\04 - disk management.lnk"), fInfoLevelId=0x0, lpFileInformation=0x22f4828 | out: lpFileInformation=0x22f4828*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa84a290f, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa84a290f, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x9bf23a18, ftLastWriteTime.dwHighDateTime=0x1d0baff, nFileSizeHigh=0x0, nFileSizeLow=0x3f7)) returned 1 [0151.252] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0151.252] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\04 - Disk Management.lnk", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\04 - Disk Management.lnk", lpFilePart=0x0) returned 0x5a [0151.252] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0151.252] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\04 - Disk Management.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group3\\04 - disk management.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0151.253] GetFileType (hFile=0x444) returned 0x1 [0151.253] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0151.253] GetFileType (hFile=0x444) returned 0x1 [0151.253] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x3f7 [0151.253] ReadFile (in: hFile=0x444, lpBuffer=0x22f4f48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x22f4f48*, lpNumberOfBytesRead=0x3be6a8*=0x3f7, lpOverlapped=0x0) returned 1 [0151.255] CloseHandle (hObject=0x444) returned 1 [0151.294] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\04 - Disk Management.lnk", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\04 - Disk Management.lnk", lpFilePart=0x0) returned 0x5a [0151.294] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0151.295] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\04 - Disk Management.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group3\\04 - disk management.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0151.296] GetFileType (hFile=0x444) returned 0x1 [0151.296] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0151.296] GetFileType (hFile=0x444) returned 0x1 [0151.296] WriteFile (in: hFile=0x444, lpBuffer=0x216d138*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x216d138*, lpNumberOfBytesWritten=0x3be5b8*=0x400, lpOverlapped=0x0) returned 1 [0151.298] CloseHandle (hObject=0x444) returned 1 [0151.298] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\04 - Disk Management.lnk", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\04 - Disk Management.lnk", lpFilePart=0x0) returned 0x5a [0151.298] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\04 - Disk Management.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\04 - Disk Management.lnk.xuy", lpFilePart=0x0) returned 0x5e [0151.298] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0151.298] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\04 - Disk Management.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group3\\04 - disk management.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa84a290f, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa84a290f, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x4607b73b, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x400)) returned 1 [0151.298] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0151.298] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\04 - Disk Management.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group3\\04 - disk management.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\04 - Disk Management.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group3\\04 - disk management.lnk.xuy")) returned 1 [0151.299] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\04-1 - Network Connections.lnk", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\04-1 - Network Connections.lnk", lpFilePart=0x0) returned 0x60 [0151.299] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0151.300] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\04-1 - Network Connections.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group3\\04-1 - network connections.lnk"), fInfoLevelId=0x0, lpFileInformation=0x216e418 | out: lpFileInformation=0x216e418*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa84a290f, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa84a290f, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x9bf23a18, ftLastWriteTime.dwHighDateTime=0x1d0baff, nFileSizeHigh=0x0, nFileSizeLow=0x449)) returned 1 [0151.300] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0151.300] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\04-1 - Network Connections.lnk", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\04-1 - Network Connections.lnk", lpFilePart=0x0) returned 0x60 [0151.300] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0151.300] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\04-1 - Network Connections.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group3\\04-1 - network connections.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0151.300] GetFileType (hFile=0x444) returned 0x1 [0151.300] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0151.300] GetFileType (hFile=0x444) returned 0x1 [0151.300] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x449 [0151.300] ReadFile (in: hFile=0x444, lpBuffer=0x216ebc0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x216ebc0*, lpNumberOfBytesRead=0x3be6a8*=0x449, lpOverlapped=0x0) returned 1 [0151.301] CloseHandle (hObject=0x444) returned 1 [0151.312] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\04-1 - Network Connections.lnk", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\04-1 - Network Connections.lnk", lpFilePart=0x0) returned 0x60 [0151.312] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0151.312] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\04-1 - Network Connections.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group3\\04-1 - network connections.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0151.313] GetFileType (hFile=0x444) returned 0x1 [0151.313] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0151.313] GetFileType (hFile=0x444) returned 0x1 [0151.314] WriteFile (in: hFile=0x444, lpBuffer=0x21e7180*, nNumberOfBytesToWrite=0x450, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x21e7180*, lpNumberOfBytesWritten=0x3be5b8*=0x450, lpOverlapped=0x0) returned 1 [0151.314] CloseHandle (hObject=0x444) returned 1 [0151.314] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\04-1 - Network Connections.lnk", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\04-1 - Network Connections.lnk", lpFilePart=0x0) returned 0x60 [0151.314] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\04-1 - Network Connections.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\04-1 - Network Connections.lnk.xuy", lpFilePart=0x0) returned 0x64 [0151.314] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0151.314] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\04-1 - Network Connections.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group3\\04-1 - network connections.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa84a290f, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa84a290f, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x460a1581, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x450)) returned 1 [0151.315] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0151.315] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\04-1 - Network Connections.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group3\\04-1 - network connections.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\04-1 - Network Connections.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group3\\04-1 - network connections.lnk.xuy")) returned 1 [0151.316] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\05 - Device Manager.lnk", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\05 - Device Manager.lnk", lpFilePart=0x0) returned 0x59 [0151.316] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0151.316] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\05 - Device Manager.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group3\\05 - device manager.lnk"), fInfoLevelId=0x0, lpFileInformation=0x21e8490 | out: lpFileInformation=0x21e8490*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa84a290f, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa84a290f, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x9bf49c7f, ftLastWriteTime.dwHighDateTime=0x1d0baff, nFileSizeHigh=0x0, nFileSizeLow=0x433)) returned 1 [0151.316] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0151.316] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\05 - Device Manager.lnk", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\05 - Device Manager.lnk", lpFilePart=0x0) returned 0x59 [0151.316] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0151.316] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\05 - Device Manager.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group3\\05 - device manager.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0151.316] GetFileType (hFile=0x444) returned 0x1 [0151.316] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0151.316] GetFileType (hFile=0x444) returned 0x1 [0151.316] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x433 [0151.316] ReadFile (in: hFile=0x444, lpBuffer=0x21e8be0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x21e8be0*, lpNumberOfBytesRead=0x3be6a8*=0x433, lpOverlapped=0x0) returned 1 [0151.318] CloseHandle (hObject=0x444) returned 1 [0151.328] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\05 - Device Manager.lnk", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\05 - Device Manager.lnk", lpFilePart=0x0) returned 0x59 [0151.328] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0151.328] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\05 - Device Manager.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group3\\05 - device manager.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0151.330] GetFileType (hFile=0x444) returned 0x1 [0151.330] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0151.330] GetFileType (hFile=0x444) returned 0x1 [0151.330] WriteFile (in: hFile=0x444, lpBuffer=0x2261138*, nNumberOfBytesToWrite=0x440, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x2261138*, lpNumberOfBytesWritten=0x3be5b8*=0x440, lpOverlapped=0x0) returned 1 [0151.331] CloseHandle (hObject=0x444) returned 1 [0151.331] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\05 - Device Manager.lnk", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\05 - Device Manager.lnk", lpFilePart=0x0) returned 0x59 [0151.331] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\05 - Device Manager.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\05 - Device Manager.lnk.xuy", lpFilePart=0x0) returned 0x5d [0151.331] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0151.331] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\05 - Device Manager.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group3\\05 - device manager.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa84a290f, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa84a290f, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x460c77f7, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x440)) returned 1 [0151.331] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0151.331] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\05 - Device Manager.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group3\\05 - device manager.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\05 - Device Manager.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group3\\05 - device manager.lnk.xuy")) returned 1 [0151.332] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\06 - System.lnk", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\06 - System.lnk", lpFilePart=0x0) returned 0x51 [0151.332] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0151.332] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\06 - System.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group3\\06 - system.lnk"), fInfoLevelId=0x0, lpFileInformation=0x2262418 | out: lpFileInformation=0x2262418*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa84a290f, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa84a290f, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x9bf49c7f, ftLastWriteTime.dwHighDateTime=0x1d0baff, nFileSizeHigh=0x0, nFileSizeLow=0x425)) returned 1 [0151.333] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0151.333] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\06 - System.lnk", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\06 - System.lnk", lpFilePart=0x0) returned 0x51 [0151.333] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0151.333] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\06 - System.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group3\\06 - system.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0151.333] GetFileType (hFile=0x444) returned 0x1 [0151.333] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0151.333] GetFileType (hFile=0x444) returned 0x1 [0151.333] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x425 [0151.333] ReadFile (in: hFile=0x444, lpBuffer=0x2262b18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x2262b18*, lpNumberOfBytesRead=0x3be6a8*=0x425, lpOverlapped=0x0) returned 1 [0151.341] CloseHandle (hObject=0x444) returned 1 [0151.350] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\06 - System.lnk", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\06 - System.lnk", lpFilePart=0x0) returned 0x51 [0151.351] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0151.351] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\06 - System.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group3\\06 - system.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0151.352] GetFileType (hFile=0x444) returned 0x1 [0151.352] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0151.353] GetFileType (hFile=0x444) returned 0x1 [0151.353] WriteFile (in: hFile=0x444, lpBuffer=0x22db000*, nNumberOfBytesToWrite=0x430, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x22db000*, lpNumberOfBytesWritten=0x3be5b8*=0x430, lpOverlapped=0x0) returned 1 [0151.353] CloseHandle (hObject=0x444) returned 1 [0151.354] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\06 - System.lnk", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\06 - System.lnk", lpFilePart=0x0) returned 0x51 [0151.354] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\06 - System.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\06 - System.lnk.xuy", lpFilePart=0x0) returned 0x55 [0151.354] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0151.354] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\06 - System.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group3\\06 - system.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa84a290f, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa84a290f, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x460ed931, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x430)) returned 1 [0151.354] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0151.354] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\06 - System.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group3\\06 - system.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\06 - System.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group3\\06 - system.lnk.xuy")) returned 1 [0151.355] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\07 - Event Viewer.lnk", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\07 - Event Viewer.lnk", lpFilePart=0x0) returned 0x57 [0151.355] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0151.355] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\07 - Event Viewer.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group3\\07 - event viewer.lnk"), fInfoLevelId=0x0, lpFileInformation=0x22dc2b0 | out: lpFileInformation=0x22dc2b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa847c665, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa847c665, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x9bf23a18, ftLastWriteTime.dwHighDateTime=0x1d0baff, nFileSizeHigh=0x0, nFileSizeLow=0x3f7)) returned 1 [0151.356] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0151.356] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\07 - Event Viewer.lnk", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\07 - Event Viewer.lnk", lpFilePart=0x0) returned 0x57 [0151.356] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0151.356] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\07 - Event Viewer.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group3\\07 - event viewer.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0151.356] GetFileType (hFile=0x444) returned 0x1 [0151.356] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0151.356] GetFileType (hFile=0x444) returned 0x1 [0151.356] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x3f7 [0151.357] ReadFile (in: hFile=0x444, lpBuffer=0x22dc9b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x22dc9b0*, lpNumberOfBytesRead=0x3be6a8*=0x3f7, lpOverlapped=0x0) returned 1 [0151.358] CloseHandle (hObject=0x444) returned 1 [0151.368] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\07 - Event Viewer.lnk", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\07 - Event Viewer.lnk", lpFilePart=0x0) returned 0x57 [0151.368] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0151.368] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\07 - Event Viewer.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group3\\07 - event viewer.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0151.370] GetFileType (hFile=0x444) returned 0x1 [0151.370] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0151.370] GetFileType (hFile=0x444) returned 0x1 [0151.370] WriteFile (in: hFile=0x444, lpBuffer=0x2354dc0*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x2354dc0*, lpNumberOfBytesWritten=0x3be5b8*=0x400, lpOverlapped=0x0) returned 1 [0151.371] CloseHandle (hObject=0x444) returned 1 [0151.371] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\07 - Event Viewer.lnk", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\07 - Event Viewer.lnk", lpFilePart=0x0) returned 0x57 [0151.371] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\07 - Event Viewer.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\07 - Event Viewer.lnk.xuy", lpFilePart=0x0) returned 0x5b [0151.371] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0151.371] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\07 - Event Viewer.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group3\\07 - event viewer.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa847c665, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa847c665, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x46113d40, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x400)) returned 1 [0151.371] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0151.371] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\07 - Event Viewer.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group3\\07 - event viewer.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\07 - Event Viewer.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group3\\07 - event viewer.lnk.xuy")) returned 1 [0151.372] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\08 - Power Options.lnk", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\08 - Power Options.lnk", lpFilePart=0x0) returned 0x58 [0151.372] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0151.373] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\08 - Power Options.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group3\\08 - power options.lnk"), fInfoLevelId=0x0, lpFileInformation=0x2356088 | out: lpFileInformation=0x2356088*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa847c665, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa847c665, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x9bf23a18, ftLastWriteTime.dwHighDateTime=0x1d0baff, nFileSizeHigh=0x0, nFileSizeLow=0x431)) returned 1 [0151.373] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0151.373] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\08 - Power Options.lnk", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\08 - Power Options.lnk", lpFilePart=0x0) returned 0x58 [0151.373] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0151.373] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\08 - Power Options.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group3\\08 - power options.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0151.373] GetFileType (hFile=0x444) returned 0x1 [0151.373] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0151.373] GetFileType (hFile=0x444) returned 0x1 [0151.373] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x431 [0151.376] ReadFile (in: hFile=0x444, lpBuffer=0x21552c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x21552c8*, lpNumberOfBytesRead=0x3be6a8*=0x431, lpOverlapped=0x0) returned 1 [0151.377] CloseHandle (hObject=0x444) returned 1 [0151.413] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\08 - Power Options.lnk", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\08 - Power Options.lnk", lpFilePart=0x0) returned 0x58 [0151.413] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0151.413] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\08 - Power Options.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group3\\08 - power options.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0151.415] GetFileType (hFile=0x444) returned 0x1 [0151.415] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0151.415] GetFileType (hFile=0x444) returned 0x1 [0151.415] WriteFile (in: hFile=0x444, lpBuffer=0x21cd820*, nNumberOfBytesToWrite=0x440, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x21cd820*, lpNumberOfBytesWritten=0x3be5b8*=0x440, lpOverlapped=0x0) returned 1 [0151.416] CloseHandle (hObject=0x444) returned 1 [0151.416] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\08 - Power Options.lnk", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\08 - Power Options.lnk", lpFilePart=0x0) returned 0x58 [0151.416] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\08 - Power Options.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\08 - Power Options.lnk.xuy", lpFilePart=0x0) returned 0x5c [0151.416] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0151.416] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\08 - Power Options.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group3\\08 - power options.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa847c665, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa847c665, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x461865de, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x440)) returned 1 [0151.416] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0151.416] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\08 - Power Options.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group3\\08 - power options.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\08 - Power Options.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group3\\08 - power options.lnk.xuy")) returned 1 [0151.417] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\09 - Mobility Center.lnk", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\09 - Mobility Center.lnk", lpFilePart=0x0) returned 0x5a [0151.417] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0151.417] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\09 - Mobility Center.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group3\\09 - mobility center.lnk"), fInfoLevelId=0x0, lpFileInformation=0x21ceb00 | out: lpFileInformation=0x21ceb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa847c665, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa847c665, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x9bf23a18, ftLastWriteTime.dwHighDateTime=0x1d0baff, nFileSizeHigh=0x0, nFileSizeLow=0x3f7)) returned 1 [0151.417] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0151.417] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\09 - Mobility Center.lnk", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\09 - Mobility Center.lnk", lpFilePart=0x0) returned 0x5a [0151.417] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0151.417] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\09 - Mobility Center.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group3\\09 - mobility center.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0151.417] GetFileType (hFile=0x444) returned 0x1 [0151.417] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0151.418] GetFileType (hFile=0x444) returned 0x1 [0151.418] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x3f7 [0151.418] ReadFile (in: hFile=0x444, lpBuffer=0x21cf220, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x21cf220*, lpNumberOfBytesRead=0x3be6a8*=0x3f7, lpOverlapped=0x0) returned 1 [0151.420] CloseHandle (hObject=0x444) returned 1 [0151.430] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\09 - Mobility Center.lnk", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\09 - Mobility Center.lnk", lpFilePart=0x0) returned 0x5a [0151.430] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0151.430] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\09 - Mobility Center.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group3\\09 - mobility center.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0151.432] GetFileType (hFile=0x444) returned 0x1 [0151.432] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0151.432] GetFileType (hFile=0x444) returned 0x1 [0151.432] WriteFile (in: hFile=0x444, lpBuffer=0x2247640*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x2247640*, lpNumberOfBytesWritten=0x3be5b8*=0x400, lpOverlapped=0x0) returned 1 [0151.433] CloseHandle (hObject=0x444) returned 1 [0151.433] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\09 - Mobility Center.lnk", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\09 - Mobility Center.lnk", lpFilePart=0x0) returned 0x5a [0151.433] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\09 - Mobility Center.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\09 - Mobility Center.lnk.xuy", lpFilePart=0x0) returned 0x5e [0151.433] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0151.433] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\09 - Mobility Center.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group3\\09 - mobility center.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa847c665, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa847c665, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x461ac864, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x400)) returned 1 [0151.433] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0151.433] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\09 - Mobility Center.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group3\\09 - mobility center.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\09 - Mobility Center.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group3\\09 - mobility center.lnk.xuy")) returned 1 [0151.435] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\10 - Programs and Features.lnk", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\10 - Programs and Features.lnk", lpFilePart=0x0) returned 0x60 [0151.435] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0151.435] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\10 - Programs and Features.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group3\\10 - programs and features.lnk"), fInfoLevelId=0x0, lpFileInformation=0x2248920 | out: lpFileInformation=0x2248920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa847c665, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa847c665, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x9bf23a18, ftLastWriteTime.dwHighDateTime=0x1d0baff, nFileSizeHigh=0x0, nFileSizeLow=0x43f)) returned 1 [0151.435] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0151.435] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\10 - Programs and Features.lnk", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\10 - Programs and Features.lnk", lpFilePart=0x0) returned 0x60 [0151.436] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0151.436] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\10 - Programs and Features.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group3\\10 - programs and features.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0151.436] GetFileType (hFile=0x444) returned 0x1 [0151.436] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0151.436] GetFileType (hFile=0x444) returned 0x1 [0151.436] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x43f [0151.436] ReadFile (in: hFile=0x444, lpBuffer=0x22490b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x22490b8*, lpNumberOfBytesRead=0x3be6a8*=0x43f, lpOverlapped=0x0) returned 1 [0151.437] CloseHandle (hObject=0x444) returned 1 [0151.447] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\10 - Programs and Features.lnk", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\10 - Programs and Features.lnk", lpFilePart=0x0) returned 0x60 [0151.447] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0151.447] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\10 - Programs and Features.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group3\\10 - programs and features.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0151.449] GetFileType (hFile=0x444) returned 0x1 [0151.449] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0151.449] GetFileType (hFile=0x444) returned 0x1 [0151.449] WriteFile (in: hFile=0x444, lpBuffer=0x22c1628*, nNumberOfBytesToWrite=0x440, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x22c1628*, lpNumberOfBytesWritten=0x3be5b8*=0x440, lpOverlapped=0x0) returned 1 [0151.450] CloseHandle (hObject=0x444) returned 1 [0151.450] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\10 - Programs and Features.lnk", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\10 - Programs and Features.lnk", lpFilePart=0x0) returned 0x60 [0151.450] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\10 - Programs and Features.lnk.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\10 - Programs and Features.lnk.xuy", lpFilePart=0x0) returned 0x64 [0151.450] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0151.451] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\10 - Programs and Features.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group3\\10 - programs and features.lnk"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa847c665, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa847c665, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x461f8c8e, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x440)) returned 1 [0151.451] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0151.451] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\10 - Programs and Features.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group3\\10 - programs and features.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\10 - Programs and Features.lnk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group3\\10 - programs and features.lnk.xuy")) returned 1 [0151.452] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\desktop.ini", lpFilePart=0x0) returned 0x4d [0151.452] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0151.452] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group3\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x22c2938 | out: lpFileInformation=0x22c2938*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xa8456400, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa8456400, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xf58e708b, ftLastWriteTime.dwHighDateTime=0x1d0baff, nFileSizeHigh=0x0, nFileSizeLow=0x3bb)) returned 1 [0151.452] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0151.452] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\desktop.ini", lpFilePart=0x0) returned 0x4d [0151.452] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0151.452] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group3\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0151.452] GetFileType (hFile=0x444) returned 0x1 [0151.452] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0151.452] GetFileType (hFile=0x444) returned 0x1 [0151.452] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x3bb [0151.452] ReadFile (in: hFile=0x444, lpBuffer=0x22c2fb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x22c2fb0*, lpNumberOfBytesRead=0x3be6a8*=0x3bb, lpOverlapped=0x0) returned 1 [0151.455] CloseHandle (hObject=0x444) returned 1 [0151.468] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\desktop.ini", lpFilePart=0x0) returned 0x4d [0151.468] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0151.468] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group3\\desktop.ini"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0151.470] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb070) returned 1 [0151.470] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3bbcf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\desktop.ini", lpFilePart=0x0) returned 0x4d [0151.470] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0151.470] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group3\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x3bc270 | out: lpFileInformation=0x3bc270*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xa8456400, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa8456400, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xf58e708b, ftLastWriteTime.dwHighDateTime=0x1d0baff, nFileSizeHigh=0x0, nFileSizeLow=0x3bb)) returned 1 [0151.470] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc150) returned 1 [0151.470] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3bbd10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\desktop.ini", lpFilePart=0x0) returned 0x4d [0151.470] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0151.470] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group3\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x233baa8 | out: lpFileInformation=0x233baa8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xa8456400, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa8456400, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xf58e708b, ftLastWriteTime.dwHighDateTime=0x1d0baff, nFileSizeHigh=0x0, nFileSizeLow=0x3bb)) returned 1 [0151.470] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc150) returned 1 [0151.470] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3bbb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\desktop.ini", lpFilePart=0x0) returned 0x4d [0151.470] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc050) returned 1 [0151.470] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group3\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0151.471] GetFileType (hFile=0x444) returned 0x1 [0151.471] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbfc0) returned 1 [0151.471] GetFileType (hFile=0x444) returned 0x1 [0151.471] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc1e8 | out: lpFileSizeHigh=0x3bc1e8*=0x0) returned 0x3bb [0151.471] ReadFile (in: hFile=0x444, lpBuffer=0x233c120, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bc118, lpOverlapped=0x0 | out: lpBuffer=0x233c120*, lpNumberOfBytesRead=0x3bc118*=0x3bb, lpOverlapped=0x0) returned 1 [0151.471] CloseHandle (hObject=0x444) returned 1 [0151.510] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\desktop.ini", nBufferLength=0x105, lpBuffer=0x3bbb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\desktop.ini", lpFilePart=0x0) returned 0x4d [0151.510] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc050) returned 1 [0151.510] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group3\\desktop.ini"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0151.512] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8ae0) returned 1 [0151.513] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0151.513] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows Live", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows Live", lpFilePart=0x0) returned 0x3a [0151.513] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows Live\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows Live\\", lpFilePart=0x0) returned 0x3b [0151.513] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows Live\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d7eb0 [0151.515] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0151.515] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0151.515] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0151.515] FindClose (in: hFindFile=0x5d7eb0 | out: hFindFile=0x5d7eb0) returned 1 [0151.515] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0151.515] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0151.515] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0151.515] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows Live", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows Live", lpFilePart=0x0) returned 0x3a [0151.515] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows Live\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows Live\\", lpFilePart=0x0) returned 0x3b [0151.515] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows Live\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d81b0 [0151.515] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0151.516] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0151.516] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0151.516] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0151.516] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0151.516] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0151.516] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0151.516] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows Live\\Bici", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows Live\\Bici", lpFilePart=0x0) returned 0x3f [0151.516] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows Live\\Bici\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows Live\\Bici\\", lpFilePart=0x0) returned 0x40 [0151.516] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows Live\\Bici\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7670 [0151.516] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0151.516] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0151.516] FindClose (in: hFindFile=0x5d7670 | out: hFindFile=0x5d7670) returned 1 [0151.516] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0151.516] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0151.517] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0151.517] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows Live\\Bici", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows Live\\Bici", lpFilePart=0x0) returned 0x3f [0151.517] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows Live\\Bici\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows Live\\Bici\\", lpFilePart=0x0) returned 0x40 [0151.517] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows Live\\Bici\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7fd0 [0151.517] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0151.517] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0151.517] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0151.517] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0151.517] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0151.517] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0151.517] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows Sidebar", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows Sidebar", lpFilePart=0x0) returned 0x3d [0151.517] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows Sidebar\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows Sidebar\\", lpFilePart=0x0) returned 0x3e [0151.517] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows Sidebar\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d7a90 [0151.518] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0151.518] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0151.518] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0151.518] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0151.518] FindClose (in: hFindFile=0x5d7a90 | out: hFindFile=0x5d7a90) returned 1 [0151.518] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0151.518] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0151.518] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0151.518] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows Sidebar", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows Sidebar", lpFilePart=0x0) returned 0x3d [0151.518] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows Sidebar\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows Sidebar\\", lpFilePart=0x0) returned 0x3e [0151.518] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows Sidebar\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d7550 [0151.518] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0151.519] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0151.519] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0151.519] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0151.519] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0151.519] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0151.519] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0151.519] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows Sidebar\\settings.ini", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows Sidebar\\settings.ini", lpFilePart=0x0) returned 0x4a [0151.519] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0151.519] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows Sidebar\\settings.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows sidebar\\settings.ini"), fInfoLevelId=0x0, lpFileInformation=0x21baba0 | out: lpFileInformation=0x21baba0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8456400, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa8456400, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xf0631a47, ftLastWriteTime.dwHighDateTime=0x1d0baff, nFileSizeHigh=0x0, nFileSizeLow=0x50)) returned 1 [0151.519] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0151.519] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows Sidebar\\settings.ini", nBufferLength=0x105, lpBuffer=0x3be1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows Sidebar\\settings.ini", lpFilePart=0x0) returned 0x4a [0151.519] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6c0) returned 1 [0151.519] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows Sidebar\\settings.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows sidebar\\settings.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0151.519] GetFileType (hFile=0x444) returned 0x1 [0151.519] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0151.519] GetFileType (hFile=0x444) returned 0x1 [0151.519] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be858 | out: lpFileSizeHigh=0x3be858*=0x0) returned 0x50 [0151.520] ReadFile (in: hFile=0x444, lpBuffer=0x21baea8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be788, lpOverlapped=0x0 | out: lpBuffer=0x21baea8*, lpNumberOfBytesRead=0x3be788*=0x50, lpOverlapped=0x0) returned 1 [0151.520] CloseHandle (hObject=0x444) returned 1 [0151.557] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows Sidebar\\settings.ini", nBufferLength=0x105, lpBuffer=0x3be1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows Sidebar\\settings.ini", lpFilePart=0x0) returned 0x4a [0151.557] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6c0) returned 1 [0151.558] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows Sidebar\\settings.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows sidebar\\settings.ini"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0151.560] GetFileType (hFile=0x444) returned 0x1 [0151.560] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0151.560] GetFileType (hFile=0x444) returned 0x1 [0151.560] WriteFile (in: hFile=0x444, lpBuffer=0x2232068*, nNumberOfBytesToWrite=0x60, lpNumberOfBytesWritten=0x3be698, lpOverlapped=0x0 | out: lpBuffer=0x2232068*, lpNumberOfBytesWritten=0x3be698*=0x60, lpOverlapped=0x0) returned 1 [0151.560] CloseHandle (hObject=0x444) returned 1 [0151.561] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows Sidebar\\settings.ini", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows Sidebar\\settings.ini", lpFilePart=0x0) returned 0x4a [0151.561] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows Sidebar\\settings.ini.xuy", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows Sidebar\\settings.ini.xuy", lpFilePart=0x0) returned 0x4e [0151.561] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0151.561] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows Sidebar\\settings.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows sidebar\\settings.ini"), fInfoLevelId=0x0, lpFileInformation=0x3be8a0 | out: lpFileInformation=0x3be8a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8456400, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa8456400, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x463058ba, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x60)) returned 1 [0151.561] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0151.561] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows Sidebar\\settings.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows sidebar\\settings.ini"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows Sidebar\\settings.ini.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows sidebar\\settings.ini.xuy")) returned 1 [0151.562] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0151.562] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows Sidebar\\Gadgets", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows Sidebar\\Gadgets", lpFilePart=0x0) returned 0x45 [0151.562] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows Sidebar\\Gadgets\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows Sidebar\\Gadgets\\", lpFilePart=0x0) returned 0x46 [0151.562] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows Sidebar\\Gadgets\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d78b0 [0151.563] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0151.563] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0151.563] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0151.563] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0151.563] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0151.563] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0151.563] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows Sidebar\\Gadgets", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows Sidebar\\Gadgets", lpFilePart=0x0) returned 0x45 [0151.563] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows Sidebar\\Gadgets\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows Sidebar\\Gadgets\\", lpFilePart=0x0) returned 0x46 [0151.563] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows Sidebar\\Gadgets\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7550 [0151.563] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0151.563] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0151.563] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0151.563] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0151.563] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0151.564] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0151.564] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge", nBufferLength=0x105, lpBuffer=0x3be3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge", lpFilePart=0x0) returned 0x31 [0151.564] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\", nBufferLength=0x105, lpBuffer=0x3be370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\", lpFilePart=0x0) returned 0x32 [0151.564] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\*", lpFindFileData=0x3be580 | out: lpFindFileData=0x3be580) returned 0x5d79d0 [0151.564] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0151.564] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0151.564] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0151.564] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 0 [0151.564] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0151.564] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0151.564] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7f0) returned 1 [0151.564] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0151.564] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge", nBufferLength=0x105, lpBuffer=0x3be3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge", lpFilePart=0x0) returned 0x31 [0151.565] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\", nBufferLength=0x105, lpBuffer=0x3be370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\", lpFilePart=0x0) returned 0x32 [0151.565] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\*", lpFindFileData=0x3be580 | out: lpFindFileData=0x3be580) returned 0x5d78b0 [0151.565] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0151.565] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0151.565] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0151.565] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 0 [0151.565] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0151.565] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0151.565] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7f0) returned 1 [0151.565] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0151.565] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers", lpFilePart=0x0) returned 0x47 [0151.565] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\", lpFilePart=0x0) returned 0x48 [0151.565] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d7a30 [0151.566] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0151.566] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0151.566] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0151.567] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0151.567] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0151.567] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0151.567] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0151.567] FindClose (in: hFindFile=0x5d7a30 | out: hFindFile=0x5d7a30) returned 1 [0151.568] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0151.568] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0151.568] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0151.568] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers", lpFilePart=0x0) returned 0x47 [0151.568] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\", lpFilePart=0x0) returned 0x48 [0151.568] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d79d0 [0151.569] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0151.569] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0151.569] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0151.569] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0151.569] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0151.569] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0151.569] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0151.569] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0151.570] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0151.570] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0151.570] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0151.570] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_bingpagedata", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_bingpagedata", lpFilePart=0x0) returned 0x62 [0151.570] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_bingpagedata\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_bingpagedata\\", lpFilePart=0x0) returned 0x63 [0151.570] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_bingpagedata\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7550 [0151.571] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0151.571] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0151.571] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0151.571] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0151.571] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0151.571] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0151.572] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0151.572] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_bingpagedata", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_bingpagedata", lpFilePart=0x0) returned 0x62 [0151.572] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_bingpagedata\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_bingpagedata\\", lpFilePart=0x0) returned 0x63 [0151.572] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_bingpagedata\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7e50 [0151.572] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0151.572] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0151.572] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0151.572] FindClose (in: hFindFile=0x5d7e50 | out: hFindFile=0x5d7e50) returned 1 [0151.572] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0151.572] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0151.572] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_bingpagedata\\container.dat", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_bingpagedata\\container.dat", lpFilePart=0x0) returned 0x70 [0151.572] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0151.572] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_bingpagedata\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoftedge\\sharedcachecontainers\\microsoftedge_bingpagedata\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x223c650 | out: lpFileInformation=0x223c650*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x269a8c69, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x269a8c69, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x269a8c69, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0151.573] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0151.573] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_bingpagedata\\container.dat", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_bingpagedata\\container.dat", lpFilePart=0x0) returned 0x70 [0151.573] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0151.573] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_bingpagedata\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoftedge\\sharedcachecontainers\\microsoftedge_bingpagedata\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0151.573] GetFileType (hFile=0x444) returned 0x1 [0151.573] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0151.573] GetFileType (hFile=0x444) returned 0x1 [0151.573] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0x0 [0151.573] CloseHandle (hObject=0x444) returned 1 [0151.584] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_bingpagedata\\container.dat", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_bingpagedata\\container.dat", lpFilePart=0x0) returned 0x70 [0151.584] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0151.584] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_bingpagedata\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoftedge\\sharedcachecontainers\\microsoftedge_bingpagedata\\container.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0151.586] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb0e0) returned 1 [0151.586] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_bingpagedata\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_bingpagedata\\container.dat", lpFilePart=0x0) returned 0x70 [0151.586] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc200) returned 1 [0151.586] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_bingpagedata\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoftedge\\sharedcachecontainers\\microsoftedge_bingpagedata\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x3bc2e0 | out: lpFileInformation=0x3bc2e0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x269a8c69, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x269a8c69, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x269a8c69, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0151.586] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1c0) returned 1 [0151.586] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_bingpagedata\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbd80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_bingpagedata\\container.dat", lpFilePart=0x0) returned 0x70 [0151.586] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc200) returned 1 [0151.586] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_bingpagedata\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoftedge\\sharedcachecontainers\\microsoftedge_bingpagedata\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x22b33d0 | out: lpFileInformation=0x22b33d0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x269a8c69, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x269a8c69, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x269a8c69, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0151.586] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1c0) returned 1 [0151.587] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_bingpagedata\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_bingpagedata\\container.dat", lpFilePart=0x0) returned 0x70 [0151.587] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0c0) returned 1 [0151.587] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_bingpagedata\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoftedge\\sharedcachecontainers\\microsoftedge_bingpagedata\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0151.587] GetFileType (hFile=0x444) returned 0x1 [0151.587] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc030) returned 1 [0151.587] GetFileType (hFile=0x444) returned 0x1 [0151.587] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc258 | out: lpFileSizeHigh=0x3bc258*=0x0) returned 0x0 [0151.587] CloseHandle (hObject=0x444) returned 1 [0151.625] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_bingpagedata\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_bingpagedata\\container.dat", lpFilePart=0x0) returned 0x70 [0151.625] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0c0) returned 1 [0151.625] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_bingpagedata\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoftedge\\sharedcachecontainers\\microsoftedge_bingpagedata\\container.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0151.627] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8b50) returned 1 [0151.627] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0151.628] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_DNTException", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_DNTException", lpFilePart=0x0) returned 0x62 [0151.628] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_DNTException\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_DNTException\\", lpFilePart=0x0) returned 0x63 [0151.628] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_DNTException\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7c70 [0151.628] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0151.628] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0151.628] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0151.628] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0151.628] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0151.628] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0151.628] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0151.629] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_DNTException", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_DNTException", lpFilePart=0x0) returned 0x62 [0151.629] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_DNTException\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_DNTException\\", lpFilePart=0x0) returned 0x63 [0151.629] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_DNTException\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7af0 [0151.629] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0151.629] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0151.629] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0151.629] FindClose (in: hFindFile=0x5d7af0 | out: hFindFile=0x5d7af0) returned 1 [0151.629] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0151.629] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0151.629] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_DNTException\\container.dat", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_DNTException\\container.dat", lpFilePart=0x0) returned 0x70 [0151.629] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0151.629] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_DNTException\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoftedge\\sharedcachecontainers\\microsoftedge_dntexception\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x232c6c8 | out: lpFileInformation=0x232c6c8*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xfdd8de4c, ftCreationTime.dwHighDateTime=0x1d2d432, ftLastAccessTime.dwLowDateTime=0xfdd8de4c, ftLastAccessTime.dwHighDateTime=0x1d2d432, ftLastWriteTime.dwLowDateTime=0xfdd8de4c, ftLastWriteTime.dwHighDateTime=0x1d2d432, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0151.630] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0151.630] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_DNTException\\container.dat", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_DNTException\\container.dat", lpFilePart=0x0) returned 0x70 [0151.630] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0151.630] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_DNTException\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoftedge\\sharedcachecontainers\\microsoftedge_dntexception\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0151.630] GetFileType (hFile=0x444) returned 0x1 [0151.630] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0151.630] GetFileType (hFile=0x444) returned 0x1 [0151.630] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0x0 [0151.630] CloseHandle (hObject=0x444) returned 1 [0151.669] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_DNTException\\container.dat", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_DNTException\\container.dat", lpFilePart=0x0) returned 0x70 [0151.669] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0151.669] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_DNTException\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoftedge\\sharedcachecontainers\\microsoftedge_dntexception\\container.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0151.671] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb0e0) returned 1 [0151.671] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_DNTException\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_DNTException\\container.dat", lpFilePart=0x0) returned 0x70 [0151.671] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc200) returned 1 [0151.671] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_DNTException\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoftedge\\sharedcachecontainers\\microsoftedge_dntexception\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x3bc2e0 | out: lpFileInformation=0x3bc2e0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xfdd8de4c, ftCreationTime.dwHighDateTime=0x1d2d432, ftLastAccessTime.dwLowDateTime=0xfdd8de4c, ftLastAccessTime.dwHighDateTime=0x1d2d432, ftLastWriteTime.dwLowDateTime=0xfdd8de4c, ftLastWriteTime.dwHighDateTime=0x1d2d432, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0151.671] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1c0) returned 1 [0151.672] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_DNTException\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbd80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_DNTException\\container.dat", lpFilePart=0x0) returned 0x70 [0151.672] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc200) returned 1 [0151.672] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_DNTException\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoftedge\\sharedcachecontainers\\microsoftedge_dntexception\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x21a2958 | out: lpFileInformation=0x21a2958*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xfdd8de4c, ftCreationTime.dwHighDateTime=0x1d2d432, ftLastAccessTime.dwLowDateTime=0xfdd8de4c, ftLastAccessTime.dwHighDateTime=0x1d2d432, ftLastWriteTime.dwLowDateTime=0xfdd8de4c, ftLastWriteTime.dwHighDateTime=0x1d2d432, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0151.672] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1c0) returned 1 [0151.672] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_DNTException\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_DNTException\\container.dat", lpFilePart=0x0) returned 0x70 [0151.672] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0c0) returned 1 [0151.672] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_DNTException\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoftedge\\sharedcachecontainers\\microsoftedge_dntexception\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0151.672] GetFileType (hFile=0x444) returned 0x1 [0151.672] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc030) returned 1 [0151.672] GetFileType (hFile=0x444) returned 0x1 [0151.672] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc258 | out: lpFileSizeHigh=0x3bc258*=0x0) returned 0x0 [0151.672] CloseHandle (hObject=0x444) returned 1 [0151.715] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_DNTException\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_DNTException\\container.dat", lpFilePart=0x0) returned 0x70 [0151.715] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0c0) returned 1 [0151.715] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_DNTException\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoftedge\\sharedcachecontainers\\microsoftedge_dntexception\\container.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0151.717] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8b50) returned 1 [0151.718] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0151.718] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompat", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompat", lpFilePart=0x0) returned 0x5e [0151.718] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompat\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompat\\", lpFilePart=0x0) returned 0x5f [0151.718] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompat\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7fd0 [0151.718] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0151.718] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0151.718] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0151.718] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0151.718] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0151.719] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0151.719] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0151.719] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0151.719] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompat", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompat", lpFilePart=0x0) returned 0x5e [0151.719] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompat\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompat\\", lpFilePart=0x0) returned 0x5f [0151.719] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompat\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7fd0 [0151.719] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0151.719] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0151.719] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0151.719] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0151.719] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0151.720] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0151.720] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0151.720] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompat\\container.dat", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompat\\container.dat", lpFilePart=0x0) returned 0x6c [0151.720] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0151.720] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompat\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoftedge\\sharedcachecontainers\\microsoftedge_iecompat\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x221c0e0 | out: lpFileInformation=0x221c0e0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xfdcc3358, ftCreationTime.dwHighDateTime=0x1d2d432, ftLastAccessTime.dwLowDateTime=0xfdcc3358, ftLastAccessTime.dwHighDateTime=0x1d2d432, ftLastWriteTime.dwLowDateTime=0xfdcc3358, ftLastWriteTime.dwHighDateTime=0x1d2d432, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0151.720] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0151.720] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompat\\container.dat", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompat\\container.dat", lpFilePart=0x0) returned 0x6c [0151.720] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0151.720] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompat\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoftedge\\sharedcachecontainers\\microsoftedge_iecompat\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0151.720] GetFileType (hFile=0x444) returned 0x1 [0151.720] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0151.720] GetFileType (hFile=0x444) returned 0x1 [0151.720] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0x0 [0151.720] CloseHandle (hObject=0x444) returned 1 [0151.759] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompat\\container.dat", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompat\\container.dat", lpFilePart=0x0) returned 0x6c [0151.759] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0151.759] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompat\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoftedge\\sharedcachecontainers\\microsoftedge_iecompat\\container.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0151.761] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb0e0) returned 1 [0151.761] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompat\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompat\\container.dat", lpFilePart=0x0) returned 0x6c [0151.761] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc200) returned 1 [0151.761] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompat\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoftedge\\sharedcachecontainers\\microsoftedge_iecompat\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x3bc2e0 | out: lpFileInformation=0x3bc2e0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xfdcc3358, ftCreationTime.dwHighDateTime=0x1d2d432, ftLastAccessTime.dwLowDateTime=0xfdcc3358, ftLastAccessTime.dwHighDateTime=0x1d2d432, ftLastWriteTime.dwLowDateTime=0xfdcc3358, ftLastWriteTime.dwHighDateTime=0x1d2d432, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0151.761] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1c0) returned 1 [0151.761] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompat\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbd80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompat\\container.dat", lpFilePart=0x0) returned 0x6c [0151.761] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc200) returned 1 [0151.761] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompat\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoftedge\\sharedcachecontainers\\microsoftedge_iecompat\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x2292e38 | out: lpFileInformation=0x2292e38*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xfdcc3358, ftCreationTime.dwHighDateTime=0x1d2d432, ftLastAccessTime.dwLowDateTime=0xfdcc3358, ftLastAccessTime.dwHighDateTime=0x1d2d432, ftLastWriteTime.dwLowDateTime=0xfdcc3358, ftLastWriteTime.dwHighDateTime=0x1d2d432, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0151.761] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1c0) returned 1 [0151.762] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompat\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompat\\container.dat", lpFilePart=0x0) returned 0x6c [0151.762] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0c0) returned 1 [0151.762] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompat\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoftedge\\sharedcachecontainers\\microsoftedge_iecompat\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0151.762] GetFileType (hFile=0x444) returned 0x1 [0151.762] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc030) returned 1 [0151.762] GetFileType (hFile=0x444) returned 0x1 [0151.762] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc258 | out: lpFileSizeHigh=0x3bc258*=0x0) returned 0x0 [0151.762] CloseHandle (hObject=0x444) returned 1 [0151.799] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompat\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompat\\container.dat", lpFilePart=0x0) returned 0x6c [0151.799] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0c0) returned 1 [0151.799] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompat\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoftedge\\sharedcachecontainers\\microsoftedge_iecompat\\container.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0151.800] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8b50) returned 1 [0151.801] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompat\\IECompatData.xml", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompat\\IECompatData.xml", lpFilePart=0x0) returned 0x6f [0151.801] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0151.801] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompat\\IECompatData.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoftedge\\sharedcachecontainers\\microsoftedge_iecompat\\iecompatdata.xml"), fInfoLevelId=0x0, lpFileInformation=0x2309ac0 | out: lpFileInformation=0x2309ac0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x10cf01c3, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x10cf01c3, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x10cf01c3, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x140af)) returned 1 [0151.803] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0151.803] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompat\\IECompatData.xml", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompat\\IECompatData.xml", lpFilePart=0x0) returned 0x6f [0151.803] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0151.803] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompat\\IECompatData.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoftedge\\sharedcachecontainers\\microsoftedge_iecompat\\iecompatdata.xml"), fInfoLevelId=0x0, lpFileInformation=0x2309c60 | out: lpFileInformation=0x2309c60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x10cf01c3, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x10cf01c3, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x10cf01c3, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x140af)) returned 1 [0151.803] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0151.803] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompat\\IECompatData.xml", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompat\\IECompatData.xml", lpFilePart=0x0) returned 0x6f [0151.803] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0151.803] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompat\\IECompatData.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoftedge\\sharedcachecontainers\\microsoftedge_iecompat\\iecompatdata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0151.804] GetFileType (hFile=0x444) returned 0x1 [0151.804] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0151.804] GetFileType (hFile=0x444) returned 0x1 [0151.804] ReadFile (in: hFile=0x444, lpBuffer=0x230c0d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x230c0d0*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0151.857] CloseHandle (hObject=0x444) returned 1 [0151.857] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompat\\IECompatData.xml", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompat\\IECompatData.xml", lpFilePart=0x0) returned 0x6f [0151.857] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0151.857] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompat\\IECompatData.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoftedge\\sharedcachecontainers\\microsoftedge_iecompat\\iecompatdata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0151.857] GetFileType (hFile=0x444) returned 0x1 [0151.857] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0151.857] GetFileType (hFile=0x444) returned 0x1 [0151.857] WriteFile (in: hFile=0x444, lpBuffer=0x2154ac0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x2154ac0*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0151.858] CloseHandle (hObject=0x444) returned 1 [0151.858] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompat\\IECompatData.xml", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompat\\IECompatData.xml", lpFilePart=0x0) returned 0x6f [0151.858] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompat\\IECompatData.xml.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompat\\IECompatData.xml.xuy", lpFilePart=0x0) returned 0x73 [0151.858] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0151.858] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompat\\IECompatData.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoftedge\\sharedcachecontainers\\microsoftedge_iecompat\\iecompatdata.xml"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x10cf01c3, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x10cf01c3, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x465d8b8f, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x140af)) returned 1 [0151.858] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0151.858] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompat\\IECompatData.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoftedge\\sharedcachecontainers\\microsoftedge_iecompat\\iecompatdata.xml"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompat\\IECompatData.xml.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoftedge\\sharedcachecontainers\\microsoftedge_iecompat\\iecompatdata.xml.xuy")) returned 1 [0151.860] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0151.860] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompatua", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompatua", lpFilePart=0x0) returned 0x60 [0151.860] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompatua\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompatua\\", lpFilePart=0x0) returned 0x61 [0151.860] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompatua\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7fd0 [0151.860] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0151.860] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0151.860] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0151.860] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0151.860] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0151.860] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0151.860] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0151.861] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompatua", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompatua", lpFilePart=0x0) returned 0x60 [0151.861] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompatua\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompatua\\", lpFilePart=0x0) returned 0x61 [0151.861] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompatua\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7a90 [0151.861] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0151.861] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0151.861] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0151.861] FindClose (in: hFindFile=0x5d7a90 | out: hFindFile=0x5d7a90) returned 1 [0151.861] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0151.861] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0151.861] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompatua\\container.dat", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompatua\\container.dat", lpFilePart=0x0) returned 0x6e [0151.861] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0151.861] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompatua\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoftedge\\sharedcachecontainers\\microsoftedge_iecompatua\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x218ddd0 | out: lpFileInformation=0x218ddd0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xfdcda68d, ftCreationTime.dwHighDateTime=0x1d2d432, ftLastAccessTime.dwLowDateTime=0xfdcda68d, ftLastAccessTime.dwHighDateTime=0x1d2d432, ftLastWriteTime.dwLowDateTime=0xfdcda68d, ftLastWriteTime.dwHighDateTime=0x1d2d432, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0151.862] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0151.862] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompatua\\container.dat", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompatua\\container.dat", lpFilePart=0x0) returned 0x6e [0151.862] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0151.862] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompatua\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoftedge\\sharedcachecontainers\\microsoftedge_iecompatua\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0151.862] GetFileType (hFile=0x444) returned 0x1 [0151.862] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0151.862] GetFileType (hFile=0x444) returned 0x1 [0151.862] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0x0 [0151.862] CloseHandle (hObject=0x444) returned 1 [0151.899] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompatua\\container.dat", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompatua\\container.dat", lpFilePart=0x0) returned 0x6e [0151.899] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0151.899] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompatua\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoftedge\\sharedcachecontainers\\microsoftedge_iecompatua\\container.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0151.900] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb0e0) returned 1 [0151.901] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompatua\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompatua\\container.dat", lpFilePart=0x0) returned 0x6e [0151.901] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc200) returned 1 [0151.901] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompatua\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoftedge\\sharedcachecontainers\\microsoftedge_iecompatua\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x3bc2e0 | out: lpFileInformation=0x3bc2e0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xfdcda68d, ftCreationTime.dwHighDateTime=0x1d2d432, ftLastAccessTime.dwLowDateTime=0xfdcda68d, ftLastAccessTime.dwHighDateTime=0x1d2d432, ftLastWriteTime.dwLowDateTime=0xfdcda68d, ftLastWriteTime.dwHighDateTime=0x1d2d432, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0151.901] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1c0) returned 1 [0151.901] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompatua\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbd80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompatua\\container.dat", lpFilePart=0x0) returned 0x6e [0151.901] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc200) returned 1 [0151.901] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompatua\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoftedge\\sharedcachecontainers\\microsoftedge_iecompatua\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x2204b28 | out: lpFileInformation=0x2204b28*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xfdcda68d, ftCreationTime.dwHighDateTime=0x1d2d432, ftLastAccessTime.dwLowDateTime=0xfdcda68d, ftLastAccessTime.dwHighDateTime=0x1d2d432, ftLastWriteTime.dwLowDateTime=0xfdcda68d, ftLastWriteTime.dwHighDateTime=0x1d2d432, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0151.901] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1c0) returned 1 [0151.901] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompatua\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompatua\\container.dat", lpFilePart=0x0) returned 0x6e [0151.901] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0c0) returned 1 [0151.901] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompatua\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoftedge\\sharedcachecontainers\\microsoftedge_iecompatua\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0151.901] GetFileType (hFile=0x444) returned 0x1 [0151.901] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc030) returned 1 [0151.901] GetFileType (hFile=0x444) returned 0x1 [0151.901] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc258 | out: lpFileSizeHigh=0x3bc258*=0x0) returned 0x0 [0151.901] CloseHandle (hObject=0x444) returned 1 [0151.940] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompatua\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompatua\\container.dat", lpFilePart=0x0) returned 0x6e [0151.940] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0c0) returned 1 [0151.940] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompatua\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoftedge\\sharedcachecontainers\\microsoftedge_iecompatua\\container.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0151.941] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8b50) returned 1 [0151.942] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0151.942] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_ieflipahead", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_ieflipahead", lpFilePart=0x0) returned 0x61 [0151.942] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_ieflipahead\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_ieflipahead\\", lpFilePart=0x0) returned 0x62 [0151.942] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_ieflipahead\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d78b0 [0151.942] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0151.943] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0151.943] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0151.943] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0151.943] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0151.943] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0151.943] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0151.943] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_ieflipahead", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_ieflipahead", lpFilePart=0x0) returned 0x61 [0151.943] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_ieflipahead\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_ieflipahead\\", lpFilePart=0x0) returned 0x62 [0151.943] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_ieflipahead\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7c70 [0151.943] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0151.943] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0151.943] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0151.944] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0151.944] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0151.944] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0151.944] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_ieflipahead\\container.dat", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_ieflipahead\\container.dat", lpFilePart=0x0) returned 0x6f [0151.944] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0151.944] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_ieflipahead\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoftedge\\sharedcachecontainers\\microsoftedge_ieflipahead\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x227dd70 | out: lpFileInformation=0x227dd70*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x25d96dcc, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x25d96dcc, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x25d96dcc, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0151.944] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0151.944] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_ieflipahead\\container.dat", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_ieflipahead\\container.dat", lpFilePart=0x0) returned 0x6f [0151.944] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0151.944] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_ieflipahead\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoftedge\\sharedcachecontainers\\microsoftedge_ieflipahead\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0151.944] GetFileType (hFile=0x444) returned 0x1 [0151.944] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0151.944] GetFileType (hFile=0x444) returned 0x1 [0151.944] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0x0 [0151.944] CloseHandle (hObject=0x444) returned 1 [0151.981] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_ieflipahead\\container.dat", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_ieflipahead\\container.dat", lpFilePart=0x0) returned 0x6f [0151.982] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0151.982] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_ieflipahead\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoftedge\\sharedcachecontainers\\microsoftedge_ieflipahead\\container.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0151.983] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb0e0) returned 1 [0151.983] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_ieflipahead\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_ieflipahead\\container.dat", lpFilePart=0x0) returned 0x6f [0151.984] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc200) returned 1 [0151.984] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_ieflipahead\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoftedge\\sharedcachecontainers\\microsoftedge_ieflipahead\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x3bc2e0 | out: lpFileInformation=0x3bc2e0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x25d96dcc, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x25d96dcc, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x25d96dcc, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0151.984] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1c0) returned 1 [0151.984] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_ieflipahead\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbd80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_ieflipahead\\container.dat", lpFilePart=0x0) returned 0x6f [0151.984] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc200) returned 1 [0151.984] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_ieflipahead\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoftedge\\sharedcachecontainers\\microsoftedge_ieflipahead\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x22f4ac8 | out: lpFileInformation=0x22f4ac8*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x25d96dcc, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x25d96dcc, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x25d96dcc, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0151.984] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1c0) returned 1 [0151.984] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_ieflipahead\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_ieflipahead\\container.dat", lpFilePart=0x0) returned 0x6f [0151.984] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0c0) returned 1 [0151.984] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_ieflipahead\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoftedge\\sharedcachecontainers\\microsoftedge_ieflipahead\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0151.984] GetFileType (hFile=0x444) returned 0x1 [0151.984] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc030) returned 1 [0151.984] GetFileType (hFile=0x444) returned 0x1 [0151.984] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc258 | out: lpFileSizeHigh=0x3bc258*=0x0) returned 0x0 [0151.984] CloseHandle (hObject=0x444) returned 1 [0152.024] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_ieflipahead\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_ieflipahead\\container.dat", lpFilePart=0x0) returned 0x6f [0152.024] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0c0) returned 1 [0152.024] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_ieflipahead\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoftedge\\sharedcachecontainers\\microsoftedge_ieflipahead\\container.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0152.026] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8b50) returned 1 [0152.026] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0152.026] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\User", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\User", lpFilePart=0x0) returned 0x36 [0152.026] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\User\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\User\\", lpFilePart=0x0) returned 0x37 [0152.026] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\User\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d81b0 [0152.027] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0152.028] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0152.028] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0152.029] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0152.029] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0152.029] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0152.029] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0152.029] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\User", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\User", lpFilePart=0x0) returned 0x36 [0152.029] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\User\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\User\\", lpFilePart=0x0) returned 0x37 [0152.029] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\User\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d75b0 [0152.029] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0152.029] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0152.029] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0152.029] FindClose (in: hFindFile=0x5d75b0 | out: hFindFile=0x5d75b0) returned 1 [0152.029] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0152.029] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0152.030] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0152.030] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\User\\Default", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\User\\Default", lpFilePart=0x0) returned 0x3e [0152.030] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\User\\Default\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\User\\Default\\", lpFilePart=0x0) returned 0x3f [0152.030] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\User\\Default\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d79d0 [0152.030] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0152.030] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0152.030] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0152.030] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0152.030] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0152.030] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0152.030] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\User\\Default", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\User\\Default", lpFilePart=0x0) returned 0x3e [0152.030] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\User\\Default\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\User\\Default\\", lpFilePart=0x0) returned 0x3f [0152.030] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\User\\Default\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7c70 [0152.031] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0152.031] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0152.031] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0152.031] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0152.031] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0152.031] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0152.031] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla", nBufferLength=0x105, lpBuffer=0x3be3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla", lpFilePart=0x0) returned 0x2b [0152.031] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\", nBufferLength=0x105, lpBuffer=0x3be370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\", lpFilePart=0x0) returned 0x2c [0152.031] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\*", lpFindFileData=0x3be580 | out: lpFindFileData=0x3be580) returned 0x5d79d0 [0152.031] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0152.031] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0152.032] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0152.032] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 0 [0152.032] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0152.032] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0152.032] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7f0) returned 1 [0152.032] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0152.032] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla", nBufferLength=0x105, lpBuffer=0x3be3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla", lpFilePart=0x0) returned 0x2b [0152.032] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\", nBufferLength=0x105, lpBuffer=0x3be370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\", lpFilePart=0x0) returned 0x2c [0152.032] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\*", lpFindFileData=0x3be580 | out: lpFindFileData=0x3be580) returned 0x5d7d90 [0152.032] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0152.032] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0152.032] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0152.032] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 0 [0152.033] FindClose (in: hFindFile=0x5d7d90 | out: hFindFile=0x5d7d90) returned 1 [0152.033] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0152.033] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7f0) returned 1 [0152.033] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0152.033] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox", lpFilePart=0x0) returned 0x33 [0152.033] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\", lpFilePart=0x0) returned 0x34 [0152.033] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d7670 [0152.033] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0152.034] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0152.034] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0152.034] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0152.034] FindClose (in: hFindFile=0x5d7670 | out: hFindFile=0x5d7670) returned 1 [0152.034] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0152.034] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0152.034] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0152.034] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox", lpFilePart=0x0) returned 0x33 [0152.034] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\", lpFilePart=0x0) returned 0x34 [0152.034] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d7e50 [0152.034] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0152.034] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0152.035] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0152.035] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0152.035] FindClose (in: hFindFile=0x5d7e50 | out: hFindFile=0x5d7e50) returned 1 [0152.035] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0152.035] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0152.035] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\postSigningData", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\postSigningData", lpFilePart=0x0) returned 0x43 [0152.035] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0152.035] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\postSigningData" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\postsigningdata"), fInfoLevelId=0x0, lpFileInformation=0x216f478 | out: lpFileInformation=0x216f478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24ad065e, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x24ad065e, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x10ca3d0b, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x65)) returned 1 [0152.035] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0152.035] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\postSigningData", nBufferLength=0x105, lpBuffer=0x3be1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\postSigningData", lpFilePart=0x0) returned 0x43 [0152.035] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6c0) returned 1 [0152.035] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\postSigningData" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\postsigningdata"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0152.035] GetFileType (hFile=0x444) returned 0x1 [0152.035] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0152.035] GetFileType (hFile=0x444) returned 0x1 [0152.036] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be858 | out: lpFileSizeHigh=0x3be858*=0x0) returned 0x65 [0152.036] ReadFile (in: hFile=0x444, lpBuffer=0x216f778, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be788, lpOverlapped=0x0 | out: lpBuffer=0x216f778*, lpNumberOfBytesRead=0x3be788*=0x65, lpOverlapped=0x0) returned 1 [0152.036] CloseHandle (hObject=0x444) returned 1 [0152.162] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\postSigningData", nBufferLength=0x105, lpBuffer=0x3be1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\postSigningData", lpFilePart=0x0) returned 0x43 [0152.162] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6c0) returned 1 [0152.162] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\postSigningData" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\postsigningdata"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0152.164] GetFileType (hFile=0x444) returned 0x1 [0152.164] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0152.164] GetFileType (hFile=0x444) returned 0x1 [0152.164] WriteFile (in: hFile=0x444, lpBuffer=0x21e6948*, nNumberOfBytesToWrite=0x70, lpNumberOfBytesWritten=0x3be698, lpOverlapped=0x0 | out: lpBuffer=0x21e6948*, lpNumberOfBytesWritten=0x3be698*=0x70, lpOverlapped=0x0) returned 1 [0152.165] CloseHandle (hObject=0x444) returned 1 [0152.165] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\postSigningData", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\postSigningData", lpFilePart=0x0) returned 0x43 [0152.165] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\postSigningData.xuy", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\postSigningData.xuy", lpFilePart=0x0) returned 0x47 [0152.165] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0152.165] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\postSigningData" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\postsigningdata"), fInfoLevelId=0x0, lpFileInformation=0x3be8a0 | out: lpFileInformation=0x3be8a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24ad065e, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x24ad065e, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x468ad9f7, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x70)) returned 1 [0152.165] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0152.165] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\postSigningData" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\postsigningdata"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\postSigningData.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\postsigningdata.xuy")) returned 1 [0152.166] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0152.166] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles", lpFilePart=0x0) returned 0x3c [0152.166] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\", lpFilePart=0x0) returned 0x3d [0152.167] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7e50 [0152.167] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0152.167] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0152.167] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0152.167] FindClose (in: hFindFile=0x5d7e50 | out: hFindFile=0x5d7e50) returned 1 [0152.167] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0152.167] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0152.167] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0152.167] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles", lpFilePart=0x0) returned 0x3c [0152.167] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\", lpFilePart=0x0) returned 0x3d [0152.167] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7e50 [0152.168] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0152.168] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0152.168] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0152.168] FindClose (in: hFindFile=0x5d7e50 | out: hFindFile=0x5d7e50) returned 1 [0152.168] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0152.168] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0152.168] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0152.168] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default", lpFilePart=0x0) returned 0x4d [0152.168] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\", lpFilePart=0x0) returned 0x4e [0152.168] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7370 [0152.185] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0152.186] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0152.186] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0152.186] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0152.186] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0152.186] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0152.186] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0152.186] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0152.186] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0152.187] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0152.187] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0152.187] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0152.187] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0152.187] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0152.187] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0152.188] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default", lpFilePart=0x0) returned 0x4d [0152.188] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\", lpFilePart=0x0) returned 0x4e [0152.188] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7370 [0152.188] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0152.189] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0152.189] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0152.189] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0152.189] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0152.189] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0152.189] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0152.189] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0152.189] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0152.189] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0152.190] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0152.190] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0152.190] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0152.190] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0152.190] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\directoryLinks.json", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\directoryLinks.json", lpFilePart=0x0) returned 0x61 [0152.190] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0152.191] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\directoryLinks.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\directorylinks.json"), fInfoLevelId=0x0, lpFileInformation=0x21ee038 | out: lpFileInformation=0x21ee038*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c1ca206, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3c1ca206, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x3c1cc935, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x90f)) returned 1 [0152.192] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0152.192] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\directoryLinks.json", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\directoryLinks.json", lpFilePart=0x0) returned 0x61 [0152.192] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0152.192] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\directoryLinks.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\directorylinks.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0152.192] GetFileType (hFile=0x444) returned 0x1 [0152.192] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0152.192] GetFileType (hFile=0x444) returned 0x1 [0152.192] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x90f [0152.192] ReadFile (in: hFile=0x444, lpBuffer=0x21eec70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x21eec70*, lpNumberOfBytesRead=0x3be6a8*=0x90f, lpOverlapped=0x0) returned 1 [0152.194] CloseHandle (hObject=0x444) returned 1 [0152.205] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\directoryLinks.json", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\directoryLinks.json", lpFilePart=0x0) returned 0x61 [0152.205] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0152.205] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\directoryLinks.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\directorylinks.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0152.207] GetFileType (hFile=0x444) returned 0x1 [0152.207] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0152.207] GetFileType (hFile=0x444) returned 0x1 [0152.207] WriteFile (in: hFile=0x444, lpBuffer=0x22689d8*, nNumberOfBytesToWrite=0x910, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x22689d8*, lpNumberOfBytesWritten=0x3be5b8*=0x910, lpOverlapped=0x0) returned 1 [0152.208] CloseHandle (hObject=0x444) returned 1 [0152.208] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\directoryLinks.json", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\directoryLinks.json", lpFilePart=0x0) returned 0x61 [0152.208] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\directoryLinks.json.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\directoryLinks.json.xuy", lpFilePart=0x0) returned 0x65 [0152.208] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0152.208] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\directoryLinks.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\directorylinks.json"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c1ca206, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3c1ca206, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x4691fca0, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x910)) returned 1 [0152.209] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0152.209] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\directoryLinks.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\directorylinks.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\directoryLinks.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\directorylinks.json.xuy")) returned 1 [0152.210] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\frequencyCap.json", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\frequencyCap.json", lpFilePart=0x0) returned 0x5f [0152.210] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0152.210] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\frequencyCap.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\frequencycap.json"), fInfoLevelId=0x0, lpFileInformation=0x2269ce8 | out: lpFileInformation=0x2269ce8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d302fa2, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x7d5d8202, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x7d5da918, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x2)) returned 1 [0152.211] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0152.211] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\frequencyCap.json", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\frequencyCap.json", lpFilePart=0x0) returned 0x5f [0152.211] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0152.211] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\frequencyCap.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\frequencycap.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0152.211] GetFileType (hFile=0x444) returned 0x1 [0152.211] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0152.211] GetFileType (hFile=0x444) returned 0x1 [0152.211] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x2 [0152.211] ReadFile (in: hFile=0x444, lpBuffer=0x226a008, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x226a008*, lpNumberOfBytesRead=0x3be6a8*=0x2, lpOverlapped=0x0) returned 1 [0152.212] CloseHandle (hObject=0x444) returned 1 [0152.223] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\frequencyCap.json", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\frequencyCap.json", lpFilePart=0x0) returned 0x5f [0152.223] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0152.223] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\frequencyCap.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\frequencycap.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0152.224] GetFileType (hFile=0x444) returned 0x1 [0152.224] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0152.225] GetFileType (hFile=0x444) returned 0x1 [0152.225] WriteFile (in: hFile=0x444, lpBuffer=0x22e1140*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x22e1140*, lpNumberOfBytesWritten=0x3be5b8*=0x10, lpOverlapped=0x0) returned 1 [0152.225] CloseHandle (hObject=0x444) returned 1 [0152.225] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\frequencyCap.json", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\frequencyCap.json", lpFilePart=0x0) returned 0x5f [0152.225] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\frequencyCap.json.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\frequencyCap.json.xuy", lpFilePart=0x0) returned 0x63 [0152.226] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0152.226] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\frequencyCap.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\frequencycap.json"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d302fa2, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x7d5d8202, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x46945e6a, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0152.226] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0152.226] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\frequencyCap.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\frequencycap.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\frequencyCap.json.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\frequencycap.json.xuy")) returned 1 [0152.227] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\_CACHE_CLEAN_", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\_CACHE_CLEAN_", lpFilePart=0x0) returned 0x5b [0152.227] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0152.227] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\_CACHE_CLEAN_" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\_cache_clean_"), fInfoLevelId=0x0, lpFileInformation=0x22e2410 | out: lpFileInformation=0x22e2410*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79f1be64, ftCreationTime.dwHighDateTime=0x1d2d43f, ftLastAccessTime.dwLowDateTime=0x79f1be64, ftLastAccessTime.dwHighDateTime=0x1d2d43f, ftLastWriteTime.dwLowDateTime=0x90455dcd, ftLastWriteTime.dwHighDateTime=0x1d2d43f, nFileSizeHigh=0x0, nFileSizeLow=0x1)) returned 1 [0152.227] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0152.227] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\_CACHE_CLEAN_", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\_CACHE_CLEAN_", lpFilePart=0x0) returned 0x5b [0152.227] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0152.227] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\_CACHE_CLEAN_" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\_cache_clean_"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0152.227] GetFileType (hFile=0x444) returned 0x1 [0152.227] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0152.227] GetFileType (hFile=0x444) returned 0x1 [0152.227] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x1 [0152.227] ReadFile (in: hFile=0x444, lpBuffer=0x22e2710, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x22e2710*, lpNumberOfBytesRead=0x3be6a8*=0x1, lpOverlapped=0x0) returned 1 [0152.229] CloseHandle (hObject=0x444) returned 1 [0152.267] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\_CACHE_CLEAN_", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\_CACHE_CLEAN_", lpFilePart=0x0) returned 0x5b [0152.267] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0152.267] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\_CACHE_CLEAN_" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\_cache_clean_"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0152.269] GetFileType (hFile=0x444) returned 0x1 [0152.269] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0152.269] GetFileType (hFile=0x444) returned 0x1 [0152.269] WriteFile (in: hFile=0x444, lpBuffer=0x21597a0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x21597a0*, lpNumberOfBytesWritten=0x3be5b8*=0x10, lpOverlapped=0x0) returned 1 [0152.271] CloseHandle (hObject=0x444) returned 1 [0152.271] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\_CACHE_CLEAN_", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\_CACHE_CLEAN_", lpFilePart=0x0) returned 0x5b [0152.271] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\_CACHE_CLEAN_.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\_CACHE_CLEAN_.xuy", lpFilePart=0x0) returned 0x5f [0152.271] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0152.271] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\_CACHE_CLEAN_" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\_cache_clean_"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79f1be64, ftCreationTime.dwHighDateTime=0x1d2d43f, ftLastAccessTime.dwLowDateTime=0x79f1be64, ftLastAccessTime.dwHighDateTime=0x1d2d43f, ftLastWriteTime.dwLowDateTime=0x469b85d4, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0152.271] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0152.271] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\_CACHE_CLEAN_" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\_cache_clean_"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\_CACHE_CLEAN_.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\_cache_clean_.xuy")) returned 1 [0152.273] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0152.273] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2", lpFilePart=0x0) returned 0x54 [0152.273] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\", lpFilePart=0x0) returned 0x55 [0152.273] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d79d0 [0152.273] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0152.273] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0152.273] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0152.273] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0152.273] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0152.274] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0152.274] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0152.274] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0152.274] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0152.274] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0152.274] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2", lpFilePart=0x0) returned 0x54 [0152.274] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\", lpFilePart=0x0) returned 0x55 [0152.274] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d7d30 [0152.274] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0152.274] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0152.274] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0152.275] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0152.275] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0152.275] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0152.275] FindClose (in: hFindFile=0x5d7d30 | out: hFindFile=0x5d7d30) returned 1 [0152.275] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0152.275] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0152.275] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\index", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\index", lpFilePart=0x0) returned 0x5a [0152.275] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0152.275] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\index" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\index"), fInfoLevelId=0x0, lpFileInformation=0x215d948 | out: lpFileInformation=0x215d948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf6d2437, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x3c489786, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x3e745d7, ftLastWriteTime.dwHighDateTime=0x1d2d446, nFileSizeHigh=0x0, nFileSizeLow=0x57e0)) returned 1 [0152.276] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0152.276] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\index", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\index", lpFilePart=0x0) returned 0x5a [0152.276] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0152.276] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\index" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\index"), fInfoLevelId=0x0, lpFileInformation=0x215daa8 | out: lpFileInformation=0x215daa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf6d2437, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x3c489786, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x3e745d7, ftLastWriteTime.dwHighDateTime=0x1d2d446, nFileSizeHigh=0x0, nFileSizeLow=0x57e0)) returned 1 [0152.276] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0152.276] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\index", nBufferLength=0x105, lpBuffer=0x3be120, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\index", lpFilePart=0x0) returned 0x5a [0152.276] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0152.276] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\index" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\index"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0152.277] GetFileType (hFile=0x444) returned 0x1 [0152.277] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be570) returned 1 [0152.277] GetFileType (hFile=0x444) returned 0x1 [0152.277] ReadFile (in: hFile=0x444, lpBuffer=0x215fe98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be688, lpOverlapped=0x0 | out: lpBuffer=0x215fe98*, lpNumberOfBytesRead=0x3be688*=0x1000, lpOverlapped=0x0) returned 1 [0152.303] CloseHandle (hObject=0x444) returned 1 [0152.304] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\index", nBufferLength=0x105, lpBuffer=0x3be120, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\index", lpFilePart=0x0) returned 0x5a [0152.304] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0152.304] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\index" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\index"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0152.304] GetFileType (hFile=0x444) returned 0x1 [0152.304] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be570) returned 1 [0152.304] GetFileType (hFile=0x444) returned 0x1 [0152.304] WriteFile (in: hFile=0x444, lpBuffer=0x215dbe8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be738, lpOverlapped=0x0 | out: lpBuffer=0x215dbe8*, lpNumberOfBytesWritten=0x3be738*=0x2000, lpOverlapped=0x0) returned 1 [0152.304] CloseHandle (hObject=0x444) returned 1 [0152.304] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\index", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\index", lpFilePart=0x0) returned 0x5a [0152.304] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\index.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\index.xuy", lpFilePart=0x0) returned 0x5e [0152.304] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0152.305] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\index" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\index"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf6d2437, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x3c489786, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x46a04dd0, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x57e0)) returned 1 [0152.305] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0152.305] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\index" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\index"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\index.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\index.xuy")) returned 1 [0152.306] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\index.log", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\index.log", lpFilePart=0x0) returned 0x5e [0152.306] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0152.306] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\index.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\index.log"), fInfoLevelId=0x0, lpFileInformation=0x21dc2c0 | out: lpFileInformation=0x21dc2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e745d7, ftCreationTime.dwHighDateTime=0x1d2d446, ftLastAccessTime.dwLowDateTime=0x3e745d7, ftLastAccessTime.dwHighDateTime=0x1d2d446, ftLastWriteTime.dwLowDateTime=0x3e745d7, ftLastWriteTime.dwHighDateTime=0x1d2d446, nFileSizeHigh=0x0, nFileSizeLow=0x124c)) returned 1 [0152.306] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0152.306] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\index.log", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\index.log", lpFilePart=0x0) returned 0x5e [0152.306] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0152.306] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\index.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\index.log"), fInfoLevelId=0x0, lpFileInformation=0x21dc430 | out: lpFileInformation=0x21dc430*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e745d7, ftCreationTime.dwHighDateTime=0x1d2d446, ftLastAccessTime.dwLowDateTime=0x3e745d7, ftLastAccessTime.dwHighDateTime=0x1d2d446, ftLastWriteTime.dwLowDateTime=0x3e745d7, ftLastWriteTime.dwHighDateTime=0x1d2d446, nFileSizeHigh=0x0, nFileSizeLow=0x124c)) returned 1 [0152.306] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0152.306] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\index.log", nBufferLength=0x105, lpBuffer=0x3be120, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\index.log", lpFilePart=0x0) returned 0x5e [0152.306] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0152.306] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\index.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\index.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0152.307] GetFileType (hFile=0x444) returned 0x1 [0152.307] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be570) returned 1 [0152.307] GetFileType (hFile=0x444) returned 0x1 [0152.307] ReadFile (in: hFile=0x444, lpBuffer=0x21de840, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be688, lpOverlapped=0x0 | out: lpBuffer=0x21de840*, lpNumberOfBytesRead=0x3be688*=0x1000, lpOverlapped=0x0) returned 1 [0152.331] CloseHandle (hObject=0x444) returned 1 [0152.331] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\index.log", nBufferLength=0x105, lpBuffer=0x3be120, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\index.log", lpFilePart=0x0) returned 0x5e [0152.331] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0152.331] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\index.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\index.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0152.331] GetFileType (hFile=0x444) returned 0x1 [0152.331] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be570) returned 1 [0152.331] GetFileType (hFile=0x444) returned 0x1 [0152.331] WriteFile (in: hFile=0x444, lpBuffer=0x21dc580*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be738, lpOverlapped=0x0 | out: lpBuffer=0x21dc580*, lpNumberOfBytesWritten=0x3be738*=0x2000, lpOverlapped=0x0) returned 1 [0152.332] CloseHandle (hObject=0x444) returned 1 [0152.332] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\index.log", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\index.log", lpFilePart=0x0) returned 0x5e [0152.332] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\index.log.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\index.log.xuy", lpFilePart=0x0) returned 0x62 [0152.332] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0152.332] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\index.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\index.log"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e745d7, ftCreationTime.dwHighDateTime=0x1d2d446, ftLastAccessTime.dwLowDateTime=0x3e745d7, ftLastAccessTime.dwHighDateTime=0x1d2d446, ftLastWriteTime.dwLowDateTime=0x46a50ddc, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0152.332] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0152.332] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\index.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\index.log"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\index.log.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\index.log.xuy")) returned 1 [0152.333] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0152.333] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\doomed", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\doomed", lpFilePart=0x0) returned 0x5b [0152.333] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\doomed\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\doomed\\", lpFilePart=0x0) returned 0x5c [0152.333] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\doomed\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d7550 [0152.334] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.334] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0152.334] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0152.334] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0152.334] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0152.334] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0152.334] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\doomed", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\doomed", lpFilePart=0x0) returned 0x5b [0152.334] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\doomed\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\doomed\\", lpFilePart=0x0) returned 0x5c [0152.334] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\doomed\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d7550 [0152.334] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.334] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0152.334] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0152.335] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0152.335] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0152.335] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0152.335] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries", lpFilePart=0x0) returned 0x5c [0152.335] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\", lpFilePart=0x0) returned 0x5d [0152.335] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d7af0 [0152.357] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.359] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.359] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.359] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.359] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.359] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.359] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.360] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.360] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.360] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.360] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.360] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.360] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.360] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.360] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.360] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.360] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.361] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.361] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.361] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.361] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.361] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.361] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.361] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.363] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.364] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.364] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.364] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.364] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.364] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.364] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.364] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.364] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.364] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.365] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.365] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.365] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.365] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.365] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.365] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.365] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.365] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.365] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.365] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.366] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.366] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.366] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.367] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.368] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.368] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.368] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.368] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.368] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.368] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.368] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.368] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.368] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.369] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.369] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.369] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.369] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.369] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.369] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.369] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.369] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.369] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.369] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.370] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.370] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.370] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.372] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.372] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.372] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.372] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.372] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.372] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.372] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.372] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.373] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.373] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.373] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.373] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.373] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.373] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.373] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.373] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.373] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.374] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.374] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.374] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.374] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.374] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.374] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.376] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.376] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.376] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.376] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.376] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.377] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.377] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.377] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.377] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.377] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.377] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.377] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.377] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.377] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.377] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.377] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.377] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.377] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.377] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.378] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.378] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.378] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.378] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.380] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.380] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.380] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.380] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.380] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.380] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.380] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.380] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.380] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.380] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.380] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.380] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.380] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.380] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.380] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.380] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.381] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.381] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.381] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.381] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.381] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.381] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.381] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.381] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.381] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.381] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.381] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.382] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.382] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.382] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.382] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.382] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.382] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.382] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.382] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.382] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.382] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.382] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.382] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.382] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.382] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.382] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.382] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.382] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.382] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.382] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.384] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.384] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.384] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.384] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.384] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.384] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.384] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.384] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.384] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.384] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.384] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.384] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.384] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.384] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.384] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.384] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.384] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.384] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.384] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.384] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.384] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.384] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.384] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.387] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.388] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.388] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.388] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.388] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.388] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.388] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.388] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.388] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.388] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.388] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.388] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.388] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.388] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.388] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.388] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.388] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.388] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.388] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.388] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.388] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.388] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.388] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.389] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.389] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.389] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.389] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.389] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.389] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.390] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.390] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.390] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.390] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.390] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.390] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.390] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.390] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.390] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.390] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.390] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.390] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.390] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.390] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.390] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.390] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.390] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.391] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.391] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0152.426] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0152.426] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0152.426] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0152.436] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0152.436] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0152.436] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0152.439] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0152.439] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0152.439] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0152.439] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0152.440] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0152.476] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0152.477] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0152.477] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0152.477] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0152.477] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\00230E843D3A08B230E933E226DB601D643BC852" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\00230e843d3a08b230e933e226db601d643bc852"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\00230E843D3A08B230E933E226DB601D643BC852.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\00230e843d3a08b230e933e226db601d643bc852.xuy")) returned 1 [0152.482] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0152.482] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0152.482] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0152.482] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0152.499] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0152.500] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0152.501] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0152.501] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0152.501] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\00396519A728CAF55BA5985F2822E3CD29D0B17E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\00396519a728caf55ba5985f2822e3cd29d0b17e"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\00396519A728CAF55BA5985F2822E3CD29D0B17E.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\00396519a728caf55ba5985f2822e3cd29d0b17e.xuy")) returned 1 [0152.503] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0152.503] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0152.503] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0152.503] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0152.526] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0152.527] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0152.527] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0152.528] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0152.528] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0070686314FCF810B3CEE062939E2805C4894837" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0070686314fcf810b3cee062939e2805c4894837"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0070686314FCF810B3CEE062939E2805C4894837.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0070686314fcf810b3cee062939e2805c4894837.xuy")) returned 1 [0152.529] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0152.529] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0152.530] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0152.530] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0152.555] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0152.555] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0152.556] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0152.556] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0152.556] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\01936D44B3D7F728EFEB4C28574EF44AB7260A17" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\01936d44b3d7f728efeb4c28574ef44ab7260a17"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\01936D44B3D7F728EFEB4C28574EF44AB7260A17.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\01936d44b3d7f728efeb4c28574ef44ab7260a17.xuy")) returned 1 [0152.558] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0152.558] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0152.558] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0152.558] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0152.559] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0152.559] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0152.591] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0152.591] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0152.591] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0152.591] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0152.591] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\01CC9F4D43A947CA6202BA62A7FFF28C6881C1BF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\01cc9f4d43a947ca6202ba62a7fff28c6881c1bf"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\01CC9F4D43A947CA6202BA62A7FFF28C6881C1BF.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\01cc9f4d43a947ca6202ba62a7fff28c6881c1bf.xuy")) returned 1 [0152.593] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0152.593] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0152.593] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0152.593] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0152.625] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0152.626] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0152.626] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0152.626] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0152.627] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\01D69525274B61DE5FF860EF9BDF5BEDBB7E52C6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\01d69525274b61de5ff860ef9bdf5bedbb7e52c6"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\01D69525274B61DE5FF860EF9BDF5BEDBB7E52C6.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\01d69525274b61de5ff860ef9bdf5bedbb7e52c6.xuy")) returned 1 [0152.628] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0152.630] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0152.630] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0152.630] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0152.630] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0152.630] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0152.709] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0152.709] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0152.709] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0152.709] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0152.709] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\023DB71E21A04D5A6CE60A1EC2C15A40BE00DD08" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\023db71e21a04d5a6ce60a1ec2c15a40be00dd08"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\023DB71E21A04D5A6CE60A1EC2C15A40BE00DD08.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\023db71e21a04d5a6ce60a1ec2c15a40be00dd08.xuy")) returned 1 [0152.711] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0152.711] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0152.711] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0152.711] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0152.760] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\02556929CF2E7913AF6E896368676F9BEC324DF4", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\02556929CF2E7913AF6E896368676F9BEC324DF4", lpFilePart=0x0) returned 0x85 [0152.760] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0152.760] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\02556929CF2E7913AF6E896368676F9BEC324DF4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\02556929cf2e7913af6e896368676f9bec324df4"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0152.762] GetFileType (hFile=0x444) returned 0x1 [0152.762] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0152.763] GetFileType (hFile=0x444) returned 0x1 [0152.763] WriteFile (in: hFile=0x444, lpBuffer=0x216cb08*, nNumberOfBytesToWrite=0x530, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x216cb08*, lpNumberOfBytesWritten=0x3be4d8*=0x530, lpOverlapped=0x0) returned 1 [0152.767] CloseHandle (hObject=0x444) returned 1 [0152.767] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\02556929CF2E7913AF6E896368676F9BEC324DF4", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\02556929CF2E7913AF6E896368676F9BEC324DF4", lpFilePart=0x0) returned 0x85 [0152.767] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\02556929CF2E7913AF6E896368676F9BEC324DF4.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\02556929CF2E7913AF6E896368676F9BEC324DF4.xuy", lpFilePart=0x0) returned 0x89 [0152.767] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0152.767] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\02556929CF2E7913AF6E896368676F9BEC324DF4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\02556929cf2e7913af6e896368676f9bec324df4"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa9f1bba, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xfa9f1bba, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x46e7dd91, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x530)) returned 1 [0152.767] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0152.767] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\02556929CF2E7913AF6E896368676F9BEC324DF4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\02556929cf2e7913af6e896368676f9bec324df4"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\02556929CF2E7913AF6E896368676F9BEC324DF4.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\02556929cf2e7913af6e896368676f9bec324df4.xuy")) returned 1 [0152.769] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\025E6C3190211A09D15D92E5656FB71220B7737E", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\025E6C3190211A09D15D92E5656FB71220B7737E", lpFilePart=0x0) returned 0x85 [0152.769] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0152.769] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\025E6C3190211A09D15D92E5656FB71220B7737E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\025e6c3190211a09d15d92e5656fb71220b7737e"), fInfoLevelId=0x0, lpFileInformation=0x216dec8 | out: lpFileInformation=0x216dec8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61551d8c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x61551d8c, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x61551d8c, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x115f)) returned 1 [0152.769] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0152.769] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\025E6C3190211A09D15D92E5656FB71220B7737E", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\025E6C3190211A09D15D92E5656FB71220B7737E", lpFilePart=0x0) returned 0x85 [0152.769] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0152.769] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\025E6C3190211A09D15D92E5656FB71220B7737E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\025e6c3190211a09d15d92e5656fb71220b7737e"), fInfoLevelId=0x0, lpFileInformation=0x216e0c8 | out: lpFileInformation=0x216e0c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61551d8c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x61551d8c, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x61551d8c, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x115f)) returned 1 [0152.769] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0152.769] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\025E6C3190211A09D15D92E5656FB71220B7737E", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\025E6C3190211A09D15D92E5656FB71220B7737E", lpFilePart=0x0) returned 0x85 [0152.769] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0152.769] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\025E6C3190211A09D15D92E5656FB71220B7737E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\025e6c3190211a09d15d92e5656fb71220b7737e"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0152.770] GetFileType (hFile=0x444) returned 0x1 [0152.770] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0152.770] GetFileType (hFile=0x444) returned 0x1 [0152.770] ReadFile (in: hFile=0x444, lpBuffer=0x21705f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x21705f8*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0152.807] CloseHandle (hObject=0x444) returned 1 [0152.807] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\025E6C3190211A09D15D92E5656FB71220B7737E", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\025E6C3190211A09D15D92E5656FB71220B7737E", lpFilePart=0x0) returned 0x85 [0152.807] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0152.807] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\025E6C3190211A09D15D92E5656FB71220B7737E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\025e6c3190211a09d15d92e5656fb71220b7737e"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0152.808] GetFileType (hFile=0x444) returned 0x1 [0152.808] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0152.808] GetFileType (hFile=0x444) returned 0x1 [0152.808] WriteFile (in: hFile=0x444, lpBuffer=0x216e2a8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x216e2a8*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0152.808] CloseHandle (hObject=0x444) returned 1 [0152.808] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\025E6C3190211A09D15D92E5656FB71220B7737E", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\025E6C3190211A09D15D92E5656FB71220B7737E", lpFilePart=0x0) returned 0x85 [0152.808] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\025E6C3190211A09D15D92E5656FB71220B7737E.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\025E6C3190211A09D15D92E5656FB71220B7737E.xuy", lpFilePart=0x0) returned 0x89 [0152.808] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0152.808] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\025E6C3190211A09D15D92E5656FB71220B7737E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\025e6c3190211a09d15d92e5656fb71220b7737e"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61551d8c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x61551d8c, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x46ec9599, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0152.808] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0152.808] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\025E6C3190211A09D15D92E5656FB71220B7737E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\025e6c3190211a09d15d92e5656fb71220b7737e"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\025E6C3190211A09D15D92E5656FB71220B7737E.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\025e6c3190211a09d15d92e5656fb71220b7737e.xuy")) returned 1 [0152.810] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0396D4FE028249B03B952ECAC5BDC2698D7AC41D", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0396D4FE028249B03B952ECAC5BDC2698D7AC41D", lpFilePart=0x0) returned 0x85 [0152.810] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0152.810] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0396D4FE028249B03B952ECAC5BDC2698D7AC41D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0396d4fe028249b03b952ecac5bdc2698d7ac41d"), fInfoLevelId=0x0, lpFileInformation=0x21ecba0 | out: lpFileInformation=0x21ecba0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6159e1e8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x6159e1e8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x6159e1e8, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xed9)) returned 1 [0152.811] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0152.811] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0396D4FE028249B03B952ECAC5BDC2698D7AC41D", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0396D4FE028249B03B952ECAC5BDC2698D7AC41D", lpFilePart=0x0) returned 0x85 [0152.811] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0152.811] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0396D4FE028249B03B952ECAC5BDC2698D7AC41D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0396d4fe028249b03b952ecac5bdc2698d7ac41d"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0152.811] GetFileType (hFile=0x444) returned 0x1 [0152.811] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0152.811] GetFileType (hFile=0x444) returned 0x1 [0152.811] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xed9 [0152.811] ReadFile (in: hFile=0x444, lpBuffer=0x21ede98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x21ede98*, lpNumberOfBytesRead=0x3be5c8*=0xed9, lpOverlapped=0x0) returned 1 [0152.816] CloseHandle (hObject=0x444) returned 1 [0152.827] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0396D4FE028249B03B952ECAC5BDC2698D7AC41D", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0396D4FE028249B03B952ECAC5BDC2698D7AC41D", lpFilePart=0x0) returned 0x85 [0152.827] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0152.827] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0396D4FE028249B03B952ECAC5BDC2698D7AC41D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0396d4fe028249b03b952ecac5bdc2698d7ac41d"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0152.828] GetFileType (hFile=0x444) returned 0x1 [0152.828] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0152.828] GetFileType (hFile=0x444) returned 0x1 [0152.828] WriteFile (in: hFile=0x444, lpBuffer=0x2269988*, nNumberOfBytesToWrite=0xee0, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x2269988*, lpNumberOfBytesWritten=0x3be4d8*=0xee0, lpOverlapped=0x0) returned 1 [0152.829] CloseHandle (hObject=0x444) returned 1 [0152.829] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0396D4FE028249B03B952ECAC5BDC2698D7AC41D", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0396D4FE028249B03B952ECAC5BDC2698D7AC41D", lpFilePart=0x0) returned 0x85 [0152.829] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0396D4FE028249B03B952ECAC5BDC2698D7AC41D.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0396D4FE028249B03B952ECAC5BDC2698D7AC41D.xuy", lpFilePart=0x0) returned 0x89 [0152.829] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0152.829] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0396D4FE028249B03B952ECAC5BDC2698D7AC41D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0396d4fe028249b03b952ecac5bdc2698d7ac41d"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6159e1e8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x6159e1e8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x46f15d13, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xee0)) returned 1 [0152.829] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0152.830] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0396D4FE028249B03B952ECAC5BDC2698D7AC41D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0396d4fe028249b03b952ecac5bdc2698d7ac41d"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0396D4FE028249B03B952ECAC5BDC2698D7AC41D.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0396d4fe028249b03b952ecac5bdc2698d7ac41d.xuy")) returned 1 [0152.831] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\04407A80544B9CDDB0BF74A9C5090D338DED55E6", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\04407A80544B9CDDB0BF74A9C5090D338DED55E6", lpFilePart=0x0) returned 0x85 [0152.831] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0152.831] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\04407A80544B9CDDB0BF74A9C5090D338DED55E6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\04407a80544b9cddb0bf74a9c5090d338ded55e6"), fInfoLevelId=0x0, lpFileInformation=0x226ad48 | out: lpFileInformation=0x226ad48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61551d8c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x61551d8c, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x61551d8c, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x1162)) returned 1 [0152.831] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0152.831] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\04407A80544B9CDDB0BF74A9C5090D338DED55E6", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\04407A80544B9CDDB0BF74A9C5090D338DED55E6", lpFilePart=0x0) returned 0x85 [0152.831] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0152.831] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\04407A80544B9CDDB0BF74A9C5090D338DED55E6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\04407a80544b9cddb0bf74a9c5090d338ded55e6"), fInfoLevelId=0x0, lpFileInformation=0x226af48 | out: lpFileInformation=0x226af48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61551d8c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x61551d8c, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x61551d8c, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x1162)) returned 1 [0152.831] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0152.831] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\04407A80544B9CDDB0BF74A9C5090D338DED55E6", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\04407A80544B9CDDB0BF74A9C5090D338DED55E6", lpFilePart=0x0) returned 0x85 [0152.831] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0152.831] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\04407A80544B9CDDB0BF74A9C5090D338DED55E6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\04407a80544b9cddb0bf74a9c5090d338ded55e6"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0152.832] GetFileType (hFile=0x444) returned 0x1 [0152.832] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0152.832] GetFileType (hFile=0x444) returned 0x1 [0152.832] ReadFile (in: hFile=0x444, lpBuffer=0x226d478, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x226d478*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0152.846] CloseHandle (hObject=0x444) returned 1 [0152.846] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\04407A80544B9CDDB0BF74A9C5090D338DED55E6", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\04407A80544B9CDDB0BF74A9C5090D338DED55E6", lpFilePart=0x0) returned 0x85 [0152.846] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0152.847] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\04407A80544B9CDDB0BF74A9C5090D338DED55E6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\04407a80544b9cddb0bf74a9c5090d338ded55e6"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0152.847] GetFileType (hFile=0x444) returned 0x1 [0152.847] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0152.847] GetFileType (hFile=0x444) returned 0x1 [0152.847] WriteFile (in: hFile=0x444, lpBuffer=0x226b128*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x226b128*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0152.847] CloseHandle (hObject=0x444) returned 1 [0152.847] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\04407A80544B9CDDB0BF74A9C5090D338DED55E6", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\04407A80544B9CDDB0BF74A9C5090D338DED55E6", lpFilePart=0x0) returned 0x85 [0152.847] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\04407A80544B9CDDB0BF74A9C5090D338DED55E6.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\04407A80544B9CDDB0BF74A9C5090D338DED55E6.xuy", lpFilePart=0x0) returned 0x89 [0152.847] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0152.847] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\04407A80544B9CDDB0BF74A9C5090D338DED55E6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\04407a80544b9cddb0bf74a9c5090d338ded55e6"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61551d8c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x61551d8c, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x46f3bb2f, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0152.847] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0152.847] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\04407A80544B9CDDB0BF74A9C5090D338DED55E6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\04407a80544b9cddb0bf74a9c5090d338ded55e6"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\04407A80544B9CDDB0BF74A9C5090D338DED55E6.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\04407a80544b9cddb0bf74a9c5090d338ded55e6.xuy")) returned 1 [0152.849] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\04825B72BD3FF3B25000EE8B3660F3E1748CF56D", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\04825B72BD3FF3B25000EE8B3660F3E1748CF56D", lpFilePart=0x0) returned 0x85 [0152.849] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0152.849] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\04825B72BD3FF3B25000EE8B3660F3E1748CF56D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\04825b72bd3ff3b25000ee8b3660f3e1748cf56d"), fInfoLevelId=0x0, lpFileInformation=0x22e9a20 | out: lpFileInformation=0x22e9a20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6159e1e8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x6159e1e8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x6159e1e8, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xed9)) returned 1 [0152.849] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0152.849] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\04825B72BD3FF3B25000EE8B3660F3E1748CF56D", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\04825B72BD3FF3B25000EE8B3660F3E1748CF56D", lpFilePart=0x0) returned 0x85 [0152.849] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0152.849] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\04825B72BD3FF3B25000EE8B3660F3E1748CF56D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\04825b72bd3ff3b25000ee8b3660f3e1748cf56d"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0152.849] GetFileType (hFile=0x444) returned 0x1 [0152.849] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0152.849] GetFileType (hFile=0x444) returned 0x1 [0152.849] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xed9 [0152.849] ReadFile (in: hFile=0x444, lpBuffer=0x22ead18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x22ead18*, lpNumberOfBytesRead=0x3be5c8*=0xed9, lpOverlapped=0x0) returned 1 [0152.852] CloseHandle (hObject=0x444) returned 1 [0152.863] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\04825B72BD3FF3B25000EE8B3660F3E1748CF56D", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\04825B72BD3FF3B25000EE8B3660F3E1748CF56D", lpFilePart=0x0) returned 0x85 [0152.863] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0152.863] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\04825B72BD3FF3B25000EE8B3660F3E1748CF56D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\04825b72bd3ff3b25000ee8b3660f3e1748cf56d"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0152.865] GetFileType (hFile=0x444) returned 0x1 [0152.865] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0152.865] GetFileType (hFile=0x444) returned 0x1 [0152.865] WriteFile (in: hFile=0x444, lpBuffer=0x2366808*, nNumberOfBytesToWrite=0xee0, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x2366808*, lpNumberOfBytesWritten=0x3be4d8*=0xee0, lpOverlapped=0x0) returned 1 [0152.866] CloseHandle (hObject=0x444) returned 1 [0152.866] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\04825B72BD3FF3B25000EE8B3660F3E1748CF56D", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\04825B72BD3FF3B25000EE8B3660F3E1748CF56D", lpFilePart=0x0) returned 0x85 [0152.866] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\04825B72BD3FF3B25000EE8B3660F3E1748CF56D.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\04825B72BD3FF3B25000EE8B3660F3E1748CF56D.xuy", lpFilePart=0x0) returned 0x89 [0152.869] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0152.869] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\04825B72BD3FF3B25000EE8B3660F3E1748CF56D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\04825b72bd3ff3b25000ee8b3660f3e1748cf56d"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6159e1e8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x6159e1e8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x46f61e34, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xee0)) returned 1 [0152.869] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0152.869] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\04825B72BD3FF3B25000EE8B3660F3E1748CF56D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\04825b72bd3ff3b25000ee8b3660f3e1748cf56d"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\04825B72BD3FF3B25000EE8B3660F3E1748CF56D.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\04825b72bd3ff3b25000ee8b3660f3e1748cf56d.xuy")) returned 1 [0152.871] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\04DDA15772BB1EBE40F174D3D0AD961AB0D85881", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\04DDA15772BB1EBE40F174D3D0AD961AB0D85881", lpFilePart=0x0) returned 0x85 [0152.871] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0152.871] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\04DDA15772BB1EBE40F174D3D0AD961AB0D85881" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\04dda15772bb1ebe40f174d3d0ad961ab0d85881"), fInfoLevelId=0x0, lpFileInformation=0x21679c8 | out: lpFileInformation=0x21679c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7117a71e, ftCreationTime.dwHighDateTime=0x1d2d43f, ftLastAccessTime.dwLowDateTime=0x7117a71e, ftLastAccessTime.dwHighDateTime=0x1d2d43f, ftLastWriteTime.dwLowDateTime=0x7117a71e, ftLastWriteTime.dwHighDateTime=0x1d2d43f, nFileSizeHigh=0x0, nFileSizeLow=0x528)) returned 1 [0152.871] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0152.871] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\04DDA15772BB1EBE40F174D3D0AD961AB0D85881", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\04DDA15772BB1EBE40F174D3D0AD961AB0D85881", lpFilePart=0x0) returned 0x85 [0152.871] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0152.871] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\04DDA15772BB1EBE40F174D3D0AD961AB0D85881" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\04dda15772bb1ebe40f174d3d0ad961ab0d85881"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0152.871] GetFileType (hFile=0x444) returned 0x1 [0152.871] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0152.871] GetFileType (hFile=0x444) returned 0x1 [0152.871] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x528 [0152.872] ReadFile (in: hFile=0x444, lpBuffer=0x2168308, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x2168308*, lpNumberOfBytesRead=0x3be5c8*=0x528, lpOverlapped=0x0) returned 1 [0152.884] CloseHandle (hObject=0x444) returned 1 [0152.921] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\04DDA15772BB1EBE40F174D3D0AD961AB0D85881", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\04DDA15772BB1EBE40F174D3D0AD961AB0D85881", lpFilePart=0x0) returned 0x85 [0152.921] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0152.921] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\04DDA15772BB1EBE40F174D3D0AD961AB0D85881" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\04dda15772bb1ebe40f174d3d0ad961ab0d85881"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0152.923] GetFileType (hFile=0x444) returned 0x1 [0152.923] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0152.923] GetFileType (hFile=0x444) returned 0x1 [0152.923] WriteFile (in: hFile=0x444, lpBuffer=0x21e0d88*, nNumberOfBytesToWrite=0x530, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x21e0d88*, lpNumberOfBytesWritten=0x3be4d8*=0x530, lpOverlapped=0x0) returned 1 [0152.929] CloseHandle (hObject=0x444) returned 1 [0152.929] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\04DDA15772BB1EBE40F174D3D0AD961AB0D85881", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\04DDA15772BB1EBE40F174D3D0AD961AB0D85881", lpFilePart=0x0) returned 0x85 [0152.929] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\04DDA15772BB1EBE40F174D3D0AD961AB0D85881.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\04DDA15772BB1EBE40F174D3D0AD961AB0D85881.xuy", lpFilePart=0x0) returned 0x89 [0152.929] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0152.929] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\04DDA15772BB1EBE40F174D3D0AD961AB0D85881" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\04dda15772bb1ebe40f174d3d0ad961ab0d85881"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7117a71e, ftCreationTime.dwHighDateTime=0x1d2d43f, ftLastAccessTime.dwLowDateTime=0x7117a71e, ftLastAccessTime.dwHighDateTime=0x1d2d43f, ftLastWriteTime.dwLowDateTime=0x46ffaba4, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x530)) returned 1 [0152.930] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0152.930] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\04DDA15772BB1EBE40F174D3D0AD961AB0D85881" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\04dda15772bb1ebe40f174d3d0ad961ab0d85881"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\04DDA15772BB1EBE40F174D3D0AD961AB0D85881.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\04dda15772bb1ebe40f174d3d0ad961ab0d85881.xuy")) returned 1 [0152.931] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\04E42D40E9FF818034B152EBBD5D2648E474B06E", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\04E42D40E9FF818034B152EBBD5D2648E474B06E", lpFilePart=0x0) returned 0x85 [0152.931] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0152.931] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\04E42D40E9FF818034B152EBBD5D2648E474B06E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\04e42d40e9ff818034b152ebbd5d2648e474b06e"), fInfoLevelId=0x0, lpFileInformation=0x21e2148 | out: lpFileInformation=0x21e2148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4e1699e, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc4e1699e, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xc50c5407, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x2ed5)) returned 1 [0152.931] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0152.931] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\04E42D40E9FF818034B152EBBD5D2648E474B06E", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\04E42D40E9FF818034B152EBBD5D2648E474B06E", lpFilePart=0x0) returned 0x85 [0152.931] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0152.931] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\04E42D40E9FF818034B152EBBD5D2648E474B06E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\04e42d40e9ff818034b152ebbd5d2648e474b06e"), fInfoLevelId=0x0, lpFileInformation=0x21e2348 | out: lpFileInformation=0x21e2348*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4e1699e, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc4e1699e, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xc50c5407, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x2ed5)) returned 1 [0152.931] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0152.931] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\04E42D40E9FF818034B152EBBD5D2648E474B06E", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\04E42D40E9FF818034B152EBBD5D2648E474B06E", lpFilePart=0x0) returned 0x85 [0152.931] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0152.931] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\04E42D40E9FF818034B152EBBD5D2648E474B06E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\04e42d40e9ff818034b152ebbd5d2648e474b06e"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0152.932] GetFileType (hFile=0x444) returned 0x1 [0152.932] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0152.932] GetFileType (hFile=0x444) returned 0x1 [0152.932] ReadFile (in: hFile=0x444, lpBuffer=0x21e4878, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x21e4878*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0152.944] CloseHandle (hObject=0x444) returned 1 [0152.944] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\04E42D40E9FF818034B152EBBD5D2648E474B06E", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\04E42D40E9FF818034B152EBBD5D2648E474B06E", lpFilePart=0x0) returned 0x85 [0152.944] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0152.944] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\04E42D40E9FF818034B152EBBD5D2648E474B06E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\04e42d40e9ff818034b152ebbd5d2648e474b06e"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0152.945] GetFileType (hFile=0x444) returned 0x1 [0152.945] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0152.945] GetFileType (hFile=0x444) returned 0x1 [0152.945] WriteFile (in: hFile=0x444, lpBuffer=0x21e2528*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x21e2528*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0152.945] CloseHandle (hObject=0x444) returned 1 [0152.945] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\04E42D40E9FF818034B152EBBD5D2648E474B06E", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\04E42D40E9FF818034B152EBBD5D2648E474B06E", lpFilePart=0x0) returned 0x85 [0152.945] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\04E42D40E9FF818034B152EBBD5D2648E474B06E.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\04E42D40E9FF818034B152EBBD5D2648E474B06E.xuy", lpFilePart=0x0) returned 0x89 [0152.945] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0152.945] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\04E42D40E9FF818034B152EBBD5D2648E474B06E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\04e42d40e9ff818034b152ebbd5d2648e474b06e"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4e1699e, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc4e1699e, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x47020910, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2ed5)) returned 1 [0152.945] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0152.946] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\04E42D40E9FF818034B152EBBD5D2648E474B06E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\04e42d40e9ff818034b152ebbd5d2648e474b06e"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\04E42D40E9FF818034B152EBBD5D2648E474B06E.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\04e42d40e9ff818034b152ebbd5d2648e474b06e.xuy")) returned 1 [0152.947] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\053023C6ABE9799C7CBA3D16BB67C1B7F7B0D8A0", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\053023C6ABE9799C7CBA3D16BB67C1B7F7B0D8A0", lpFilePart=0x0) returned 0x85 [0152.947] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0152.947] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\053023C6ABE9799C7CBA3D16BB67C1B7F7B0D8A0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\053023c6abe9799c7cba3d16bb67c1b7f7b0d8a0"), fInfoLevelId=0x0, lpFileInformation=0x2260e20 | out: lpFileInformation=0x2260e20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55334590, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x55334590, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x5f4af9df, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x7b83)) returned 1 [0152.948] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0152.948] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\053023C6ABE9799C7CBA3D16BB67C1B7F7B0D8A0", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\053023C6ABE9799C7CBA3D16BB67C1B7F7B0D8A0", lpFilePart=0x0) returned 0x85 [0152.948] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0152.948] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\053023C6ABE9799C7CBA3D16BB67C1B7F7B0D8A0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\053023c6abe9799c7cba3d16bb67c1b7f7b0d8a0"), fInfoLevelId=0x0, lpFileInformation=0x2261020 | out: lpFileInformation=0x2261020*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55334590, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x55334590, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x5f4af9df, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x7b83)) returned 1 [0152.948] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0152.948] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\053023C6ABE9799C7CBA3D16BB67C1B7F7B0D8A0", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\053023C6ABE9799C7CBA3D16BB67C1B7F7B0D8A0", lpFilePart=0x0) returned 0x85 [0152.948] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0152.948] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\053023C6ABE9799C7CBA3D16BB67C1B7F7B0D8A0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\053023c6abe9799c7cba3d16bb67c1b7f7b0d8a0"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0152.950] GetFileType (hFile=0x444) returned 0x1 [0152.950] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0152.950] GetFileType (hFile=0x444) returned 0x1 [0152.950] ReadFile (in: hFile=0x444, lpBuffer=0x2263550, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x2263550*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0152.962] CloseHandle (hObject=0x444) returned 1 [0152.962] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\053023C6ABE9799C7CBA3D16BB67C1B7F7B0D8A0", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\053023C6ABE9799C7CBA3D16BB67C1B7F7B0D8A0", lpFilePart=0x0) returned 0x85 [0152.962] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0152.962] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\053023C6ABE9799C7CBA3D16BB67C1B7F7B0D8A0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\053023c6abe9799c7cba3d16bb67c1b7f7b0d8a0"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0152.962] GetFileType (hFile=0x444) returned 0x1 [0152.962] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0152.962] GetFileType (hFile=0x444) returned 0x1 [0152.962] WriteFile (in: hFile=0x444, lpBuffer=0x2261200*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x2261200*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0152.962] CloseHandle (hObject=0x444) returned 1 [0152.962] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\053023C6ABE9799C7CBA3D16BB67C1B7F7B0D8A0", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\053023C6ABE9799C7CBA3D16BB67C1B7F7B0D8A0", lpFilePart=0x0) returned 0x85 [0152.963] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\053023C6ABE9799C7CBA3D16BB67C1B7F7B0D8A0.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\053023C6ABE9799C7CBA3D16BB67C1B7F7B0D8A0.xuy", lpFilePart=0x0) returned 0x89 [0152.963] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0152.963] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\053023C6ABE9799C7CBA3D16BB67C1B7F7B0D8A0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\053023c6abe9799c7cba3d16bb67c1b7f7b0d8a0"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55334590, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x55334590, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x47047499, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x7b83)) returned 1 [0152.963] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0152.963] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\053023C6ABE9799C7CBA3D16BB67C1B7F7B0D8A0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\053023c6abe9799c7cba3d16bb67c1b7f7b0d8a0"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\053023C6ABE9799C7CBA3D16BB67C1B7F7B0D8A0.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\053023c6abe9799c7cba3d16bb67c1b7f7b0d8a0.xuy")) returned 1 [0152.964] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\062AD3657B516BAF21B6D366104D405078541BA6", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\062AD3657B516BAF21B6D366104D405078541BA6", lpFilePart=0x0) returned 0x85 [0152.964] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0152.964] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\062AD3657B516BAF21B6D366104D405078541BA6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\062ad3657b516baf21b6d366104d405078541ba6"), fInfoLevelId=0x0, lpFileInformation=0x22dfaf8 | out: lpFileInformation=0x22dfaf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48d30ecb, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x48d30ecb, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x4bd06277, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0152.964] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0152.964] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\062AD3657B516BAF21B6D366104D405078541BA6", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\062AD3657B516BAF21B6D366104D405078541BA6", lpFilePart=0x0) returned 0x85 [0152.964] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0152.964] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\062AD3657B516BAF21B6D366104D405078541BA6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\062ad3657b516baf21b6d366104d405078541ba6"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0152.964] GetFileType (hFile=0x444) returned 0x1 [0152.964] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0152.965] GetFileType (hFile=0x444) returned 0x1 [0152.965] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x187 [0152.965] ReadFile (in: hFile=0x444, lpBuffer=0x22e0098, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x22e0098*, lpNumberOfBytesRead=0x3be5c8*=0x187, lpOverlapped=0x0) returned 1 [0152.966] CloseHandle (hObject=0x444) returned 1 [0152.977] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\062AD3657B516BAF21B6D366104D405078541BA6", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\062AD3657B516BAF21B6D366104D405078541BA6", lpFilePart=0x0) returned 0x85 [0152.977] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0152.977] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\062AD3657B516BAF21B6D366104D405078541BA6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\062ad3657b516baf21b6d366104d405078541ba6"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0152.979] GetFileType (hFile=0x444) returned 0x1 [0152.979] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0152.979] GetFileType (hFile=0x444) returned 0x1 [0152.979] WriteFile (in: hFile=0x444, lpBuffer=0x2357900*, nNumberOfBytesToWrite=0x190, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x2357900*, lpNumberOfBytesWritten=0x3be4d8*=0x190, lpOverlapped=0x0) returned 1 [0152.980] CloseHandle (hObject=0x444) returned 1 [0152.980] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\062AD3657B516BAF21B6D366104D405078541BA6", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\062AD3657B516BAF21B6D366104D405078541BA6", lpFilePart=0x0) returned 0x85 [0152.980] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\062AD3657B516BAF21B6D366104D405078541BA6.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\062AD3657B516BAF21B6D366104D405078541BA6.xuy", lpFilePart=0x0) returned 0x89 [0152.980] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0152.980] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\062AD3657B516BAF21B6D366104D405078541BA6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\062ad3657b516baf21b6d366104d405078541ba6"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48d30ecb, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x48d30ecb, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x4706ceec, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x190)) returned 1 [0152.980] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0152.980] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\062AD3657B516BAF21B6D366104D405078541BA6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\062ad3657b516baf21b6d366104d405078541ba6"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\062AD3657B516BAF21B6D366104D405078541BA6.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\062ad3657b516baf21b6d366104d405078541ba6.xuy")) returned 1 [0152.982] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\073B56D883E94B03370493A96DF99C2B51FB3E9D", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\073B56D883E94B03370493A96DF99C2B51FB3E9D", lpFilePart=0x0) returned 0x85 [0152.982] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0152.982] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\073B56D883E94B03370493A96DF99C2B51FB3E9D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\073b56d883e94b03370493a96df99c2b51fb3e9d"), fInfoLevelId=0x0, lpFileInformation=0x2358cc0 | out: lpFileInformation=0x2358cc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ff577a9, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x3ff577a9, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x3ff577a9, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0xa80)) returned 1 [0152.983] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0152.983] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\073B56D883E94B03370493A96DF99C2B51FB3E9D", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\073B56D883E94B03370493A96DF99C2B51FB3E9D", lpFilePart=0x0) returned 0x85 [0152.983] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0152.983] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\073B56D883E94B03370493A96DF99C2B51FB3E9D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\073b56d883e94b03370493a96df99c2b51fb3e9d"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0152.983] GetFileType (hFile=0x444) returned 0x1 [0152.983] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0152.983] GetFileType (hFile=0x444) returned 0x1 [0152.983] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xa80 [0152.983] ReadFile (in: hFile=0x444, lpBuffer=0x2359b58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x2359b58*, lpNumberOfBytesRead=0x3be5c8*=0xa80, lpOverlapped=0x0) returned 1 [0153.025] CloseHandle (hObject=0x444) returned 1 [0153.194] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\073B56D883E94B03370493A96DF99C2B51FB3E9D", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\073B56D883E94B03370493A96DF99C2B51FB3E9D", lpFilePart=0x0) returned 0x85 [0153.194] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0153.194] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\073B56D883E94B03370493A96DF99C2B51FB3E9D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\073b56d883e94b03370493a96df99c2b51fb3e9d"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0153.196] GetFileType (hFile=0x444) returned 0x1 [0153.196] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0153.196] GetFileType (hFile=0x444) returned 0x1 [0153.196] WriteFile (in: hFile=0x444, lpBuffer=0x21d50d8*, nNumberOfBytesToWrite=0xa90, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x21d50d8*, lpNumberOfBytesWritten=0x3be4d8*=0xa90, lpOverlapped=0x0) returned 1 [0153.197] CloseHandle (hObject=0x444) returned 1 [0153.197] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\073B56D883E94B03370493A96DF99C2B51FB3E9D", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\073B56D883E94B03370493A96DF99C2B51FB3E9D", lpFilePart=0x0) returned 0x85 [0153.197] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\073B56D883E94B03370493A96DF99C2B51FB3E9D.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\073B56D883E94B03370493A96DF99C2B51FB3E9D.xuy", lpFilePart=0x0) returned 0x89 [0153.197] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0153.197] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\073B56D883E94B03370493A96DF99C2B51FB3E9D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\073b56d883e94b03370493a96df99c2b51fb3e9d"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ff577a9, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x3ff577a9, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x472831c7, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xa90)) returned 1 [0153.197] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0153.197] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\073B56D883E94B03370493A96DF99C2B51FB3E9D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\073b56d883e94b03370493a96df99c2b51fb3e9d"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\073B56D883E94B03370493A96DF99C2B51FB3E9D.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\073b56d883e94b03370493a96df99c2b51fb3e9d.xuy")) returned 1 [0153.199] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0782E7F698BE212FDCB80D8DE2C97C611AE50DFF", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0782E7F698BE212FDCB80D8DE2C97C611AE50DFF", lpFilePart=0x0) returned 0x85 [0153.199] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0153.199] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0782E7F698BE212FDCB80D8DE2C97C611AE50DFF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0782e7f698be212fdcb80d8de2c97c611ae50dff"), fInfoLevelId=0x0, lpFileInformation=0x21d6498 | out: lpFileInformation=0x21d6498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdda5a53b, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xdda5a53b, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xdda5f35d, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x2cd2)) returned 1 [0153.199] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0153.199] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0782E7F698BE212FDCB80D8DE2C97C611AE50DFF", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0782E7F698BE212FDCB80D8DE2C97C611AE50DFF", lpFilePart=0x0) returned 0x85 [0153.199] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0153.199] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0782E7F698BE212FDCB80D8DE2C97C611AE50DFF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0782e7f698be212fdcb80d8de2c97c611ae50dff"), fInfoLevelId=0x0, lpFileInformation=0x21d6698 | out: lpFileInformation=0x21d6698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdda5a53b, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xdda5a53b, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xdda5f35d, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x2cd2)) returned 1 [0153.199] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0153.199] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0782E7F698BE212FDCB80D8DE2C97C611AE50DFF", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0782E7F698BE212FDCB80D8DE2C97C611AE50DFF", lpFilePart=0x0) returned 0x85 [0153.199] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0153.200] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0782E7F698BE212FDCB80D8DE2C97C611AE50DFF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0782e7f698be212fdcb80d8de2c97c611ae50dff"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0153.201] GetFileType (hFile=0x444) returned 0x1 [0153.201] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0153.201] GetFileType (hFile=0x444) returned 0x1 [0153.201] ReadFile (in: hFile=0x444, lpBuffer=0x21d8bc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x21d8bc8*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0153.227] CloseHandle (hObject=0x444) returned 1 [0153.227] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0782E7F698BE212FDCB80D8DE2C97C611AE50DFF", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0782E7F698BE212FDCB80D8DE2C97C611AE50DFF", lpFilePart=0x0) returned 0x85 [0153.227] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0153.227] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0782E7F698BE212FDCB80D8DE2C97C611AE50DFF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0782e7f698be212fdcb80d8de2c97c611ae50dff"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0153.227] GetFileType (hFile=0x444) returned 0x1 [0153.227] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0153.228] GetFileType (hFile=0x444) returned 0x1 [0153.228] WriteFile (in: hFile=0x444, lpBuffer=0x21d6878*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x21d6878*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0153.228] CloseHandle (hObject=0x444) returned 1 [0153.228] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0782E7F698BE212FDCB80D8DE2C97C611AE50DFF", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0782E7F698BE212FDCB80D8DE2C97C611AE50DFF", lpFilePart=0x0) returned 0x85 [0153.228] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0782E7F698BE212FDCB80D8DE2C97C611AE50DFF.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0782E7F698BE212FDCB80D8DE2C97C611AE50DFF.xuy", lpFilePart=0x0) returned 0x89 [0153.228] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0153.228] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0782E7F698BE212FDCB80D8DE2C97C611AE50DFF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0782e7f698be212fdcb80d8de2c97c611ae50dff"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdda5a53b, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xdda5a53b, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x472cf690, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2cd2)) returned 1 [0153.228] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0153.228] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0782E7F698BE212FDCB80D8DE2C97C611AE50DFF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0782e7f698be212fdcb80d8de2c97c611ae50dff"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0782E7F698BE212FDCB80D8DE2C97C611AE50DFF.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0782e7f698be212fdcb80d8de2c97c611ae50dff.xuy")) returned 1 [0153.229] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\085CFB45496B3087ABCB8ABD8529B3EB41D17C27", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\085CFB45496B3087ABCB8ABD8529B3EB41D17C27", lpFilePart=0x0) returned 0x85 [0153.229] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0153.229] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\085CFB45496B3087ABCB8ABD8529B3EB41D17C27" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\085cfb45496b3087abcb8abd8529b3eb41d17c27"), fInfoLevelId=0x0, lpFileInformation=0x2255170 | out: lpFileInformation=0x2255170*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x459406e4, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x459406e4, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x459406e4, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0x85af)) returned 1 [0153.230] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0153.230] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\085CFB45496B3087ABCB8ABD8529B3EB41D17C27", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\085CFB45496B3087ABCB8ABD8529B3EB41D17C27", lpFilePart=0x0) returned 0x85 [0153.230] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0153.230] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\085CFB45496B3087ABCB8ABD8529B3EB41D17C27" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\085cfb45496b3087abcb8abd8529b3eb41d17c27"), fInfoLevelId=0x0, lpFileInformation=0x2255370 | out: lpFileInformation=0x2255370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x459406e4, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x459406e4, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x459406e4, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0x85af)) returned 1 [0153.230] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0153.230] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\085CFB45496B3087ABCB8ABD8529B3EB41D17C27", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\085CFB45496B3087ABCB8ABD8529B3EB41D17C27", lpFilePart=0x0) returned 0x85 [0153.230] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0153.230] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\085CFB45496B3087ABCB8ABD8529B3EB41D17C27" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\085cfb45496b3087abcb8abd8529b3eb41d17c27"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0153.232] GetFileType (hFile=0x444) returned 0x1 [0153.232] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0153.232] GetFileType (hFile=0x444) returned 0x1 [0153.232] ReadFile (in: hFile=0x444, lpBuffer=0x22578a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x22578a0*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0153.270] CloseHandle (hObject=0x444) returned 1 [0153.270] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\085CFB45496B3087ABCB8ABD8529B3EB41D17C27", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\085CFB45496B3087ABCB8ABD8529B3EB41D17C27", lpFilePart=0x0) returned 0x85 [0153.270] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0153.270] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\085CFB45496B3087ABCB8ABD8529B3EB41D17C27" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\085cfb45496b3087abcb8abd8529b3eb41d17c27"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0153.270] GetFileType (hFile=0x444) returned 0x1 [0153.270] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0153.270] GetFileType (hFile=0x444) returned 0x1 [0153.270] WriteFile (in: hFile=0x444, lpBuffer=0x2255550*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x2255550*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0153.271] CloseHandle (hObject=0x444) returned 1 [0153.271] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\085CFB45496B3087ABCB8ABD8529B3EB41D17C27", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\085CFB45496B3087ABCB8ABD8529B3EB41D17C27", lpFilePart=0x0) returned 0x85 [0153.271] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\085CFB45496B3087ABCB8ABD8529B3EB41D17C27.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\085CFB45496B3087ABCB8ABD8529B3EB41D17C27.xuy", lpFilePart=0x0) returned 0x89 [0153.271] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0153.271] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\085CFB45496B3087ABCB8ABD8529B3EB41D17C27" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\085cfb45496b3087abcb8abd8529b3eb41d17c27"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x459406e4, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x459406e4, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x4734201d, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x85af)) returned 1 [0153.271] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0153.271] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\085CFB45496B3087ABCB8ABD8529B3EB41D17C27" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\085cfb45496b3087abcb8abd8529b3eb41d17c27"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\085CFB45496B3087ABCB8ABD8529B3EB41D17C27.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\085cfb45496b3087abcb8abd8529b3eb41d17c27.xuy")) returned 1 [0153.272] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0A1144B8734850F5325AA6C259041EA8A201062C", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0A1144B8734850F5325AA6C259041EA8A201062C", lpFilePart=0x0) returned 0x85 [0153.272] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0153.272] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0A1144B8734850F5325AA6C259041EA8A201062C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0a1144b8734850f5325aa6c259041ea8a201062c"), fInfoLevelId=0x0, lpFileInformation=0x22d3e48 | out: lpFileInformation=0x22d3e48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x828f9e43, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x828f9e43, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x8292364b, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0xc5f)) returned 1 [0153.273] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0153.273] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0A1144B8734850F5325AA6C259041EA8A201062C", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0A1144B8734850F5325AA6C259041EA8A201062C", lpFilePart=0x0) returned 0x85 [0153.273] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0153.273] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0A1144B8734850F5325AA6C259041EA8A201062C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0a1144b8734850f5325aa6c259041ea8a201062c"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0153.273] GetFileType (hFile=0x444) returned 0x1 [0153.273] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0153.274] GetFileType (hFile=0x444) returned 0x1 [0153.274] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xc5f [0153.274] ReadFile (in: hFile=0x444, lpBuffer=0x22d4ec0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x22d4ec0*, lpNumberOfBytesRead=0x3be5c8*=0xc5f, lpOverlapped=0x0) returned 1 [0153.275] CloseHandle (hObject=0x444) returned 1 [0153.286] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0A1144B8734850F5325AA6C259041EA8A201062C", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0A1144B8734850F5325AA6C259041EA8A201062C", lpFilePart=0x0) returned 0x85 [0153.286] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0153.286] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0A1144B8734850F5325AA6C259041EA8A201062C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0a1144b8734850f5325aa6c259041ea8a201062c"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0153.288] GetFileType (hFile=0x444) returned 0x1 [0153.288] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0153.288] GetFileType (hFile=0x444) returned 0x1 [0153.288] WriteFile (in: hFile=0x444, lpBuffer=0x234fd30*, nNumberOfBytesToWrite=0xc60, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x234fd30*, lpNumberOfBytesWritten=0x3be4d8*=0xc60, lpOverlapped=0x0) returned 1 [0153.288] CloseHandle (hObject=0x444) returned 1 [0153.289] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0A1144B8734850F5325AA6C259041EA8A201062C", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0A1144B8734850F5325AA6C259041EA8A201062C", lpFilePart=0x0) returned 0x85 [0153.289] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0A1144B8734850F5325AA6C259041EA8A201062C.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0A1144B8734850F5325AA6C259041EA8A201062C.xuy", lpFilePart=0x0) returned 0x89 [0153.289] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0153.289] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0A1144B8734850F5325AA6C259041EA8A201062C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0a1144b8734850f5325aa6c259041ea8a201062c"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x828f9e43, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x828f9e43, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x47367d8f, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xc60)) returned 1 [0153.289] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0153.289] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0A1144B8734850F5325AA6C259041EA8A201062C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0a1144b8734850f5325aa6c259041ea8a201062c"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0A1144B8734850F5325AA6C259041EA8A201062C.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0a1144b8734850f5325aa6c259041ea8a201062c.xuy")) returned 1 [0153.290] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0A774848D5BE9E32A6789642784FD4DAFCD580F5", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0A774848D5BE9E32A6789642784FD4DAFCD580F5", lpFilePart=0x0) returned 0x85 [0153.290] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0153.290] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0A774848D5BE9E32A6789642784FD4DAFCD580F5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0a774848d5be9e32a6789642784fd4dafcd580f5"), fInfoLevelId=0x0, lpFileInformation=0x23510f0 | out: lpFileInformation=0x23510f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x459406e4, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x459406e4, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x459406e4, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0x749)) returned 1 [0153.290] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0153.290] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0A774848D5BE9E32A6789642784FD4DAFCD580F5", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0A774848D5BE9E32A6789642784FD4DAFCD580F5", lpFilePart=0x0) returned 0x85 [0153.290] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0153.291] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0A774848D5BE9E32A6789642784FD4DAFCD580F5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0a774848d5be9e32a6789642784fd4dafcd580f5"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0153.291] GetFileType (hFile=0x444) returned 0x1 [0153.291] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0153.291] GetFileType (hFile=0x444) returned 0x1 [0153.291] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x749 [0153.291] ReadFile (in: hFile=0x444, lpBuffer=0x2351c58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x2351c58*, lpNumberOfBytesRead=0x3be5c8*=0x749, lpOverlapped=0x0) returned 1 [0153.292] CloseHandle (hObject=0x444) returned 1 [0153.332] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0A774848D5BE9E32A6789642784FD4DAFCD580F5", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0A774848D5BE9E32A6789642784FD4DAFCD580F5", lpFilePart=0x0) returned 0x85 [0153.332] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0153.332] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0A774848D5BE9E32A6789642784FD4DAFCD580F5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0a774848d5be9e32a6789642784fd4dafcd580f5"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0153.334] GetFileType (hFile=0x444) returned 0x1 [0153.334] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0153.334] GetFileType (hFile=0x444) returned 0x1 [0153.334] WriteFile (in: hFile=0x444, lpBuffer=0x21cd400*, nNumberOfBytesToWrite=0x750, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x21cd400*, lpNumberOfBytesWritten=0x3be4d8*=0x750, lpOverlapped=0x0) returned 1 [0153.335] CloseHandle (hObject=0x444) returned 1 [0153.335] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0A774848D5BE9E32A6789642784FD4DAFCD580F5", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0A774848D5BE9E32A6789642784FD4DAFCD580F5", lpFilePart=0x0) returned 0x85 [0153.335] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0A774848D5BE9E32A6789642784FD4DAFCD580F5.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0A774848D5BE9E32A6789642784FD4DAFCD580F5.xuy", lpFilePart=0x0) returned 0x89 [0153.335] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0153.335] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0A774848D5BE9E32A6789642784FD4DAFCD580F5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0a774848d5be9e32a6789642784fd4dafcd580f5"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x459406e4, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x459406e4, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x473daa6d, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x750)) returned 1 [0153.335] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0153.335] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0A774848D5BE9E32A6789642784FD4DAFCD580F5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0a774848d5be9e32a6789642784fd4dafcd580f5"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0A774848D5BE9E32A6789642784FD4DAFCD580F5.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0a774848d5be9e32a6789642784fd4dafcd580f5.xuy")) returned 1 [0153.337] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0A9B36C9F5BCA2621C56BD4B714A9141238CF27D", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0A9B36C9F5BCA2621C56BD4B714A9141238CF27D", lpFilePart=0x0) returned 0x85 [0153.337] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0153.337] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0A9B36C9F5BCA2621C56BD4B714A9141238CF27D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0a9b36c9f5bca2621c56bd4b714a9141238cf27d"), fInfoLevelId=0x0, lpFileInformation=0x21ce7c0 | out: lpFileInformation=0x21ce7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x544f75b8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x544f75b8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x544f75b8, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x53be)) returned 1 [0153.338] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0153.338] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0A9B36C9F5BCA2621C56BD4B714A9141238CF27D", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0A9B36C9F5BCA2621C56BD4B714A9141238CF27D", lpFilePart=0x0) returned 0x85 [0153.338] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0153.338] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0A9B36C9F5BCA2621C56BD4B714A9141238CF27D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0a9b36c9f5bca2621c56bd4b714a9141238cf27d"), fInfoLevelId=0x0, lpFileInformation=0x21ce9c0 | out: lpFileInformation=0x21ce9c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x544f75b8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x544f75b8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x544f75b8, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x53be)) returned 1 [0153.338] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0153.338] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0A9B36C9F5BCA2621C56BD4B714A9141238CF27D", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0A9B36C9F5BCA2621C56BD4B714A9141238CF27D", lpFilePart=0x0) returned 0x85 [0153.338] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0153.338] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0A9B36C9F5BCA2621C56BD4B714A9141238CF27D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0a9b36c9f5bca2621c56bd4b714a9141238cf27d"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0153.339] GetFileType (hFile=0x444) returned 0x1 [0153.339] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0153.339] GetFileType (hFile=0x444) returned 0x1 [0153.339] ReadFile (in: hFile=0x444, lpBuffer=0x21d0ef0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x21d0ef0*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0153.362] CloseHandle (hObject=0x444) returned 1 [0153.362] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0A9B36C9F5BCA2621C56BD4B714A9141238CF27D", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0A9B36C9F5BCA2621C56BD4B714A9141238CF27D", lpFilePart=0x0) returned 0x85 [0153.362] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0153.362] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0A9B36C9F5BCA2621C56BD4B714A9141238CF27D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0a9b36c9f5bca2621c56bd4b714a9141238cf27d"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0153.363] GetFileType (hFile=0x444) returned 0x1 [0153.363] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0153.363] GetFileType (hFile=0x444) returned 0x1 [0153.363] WriteFile (in: hFile=0x444, lpBuffer=0x21ceba0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x21ceba0*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0153.363] CloseHandle (hObject=0x444) returned 1 [0153.363] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0A9B36C9F5BCA2621C56BD4B714A9141238CF27D", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0A9B36C9F5BCA2621C56BD4B714A9141238CF27D", lpFilePart=0x0) returned 0x85 [0153.363] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0A9B36C9F5BCA2621C56BD4B714A9141238CF27D.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0A9B36C9F5BCA2621C56BD4B714A9141238CF27D.xuy", lpFilePart=0x0) returned 0x89 [0153.363] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0153.363] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0A9B36C9F5BCA2621C56BD4B714A9141238CF27D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0a9b36c9f5bca2621c56bd4b714a9141238cf27d"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x544f75b8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x544f75b8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x47426a7c, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x53be)) returned 1 [0153.363] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0153.363] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0A9B36C9F5BCA2621C56BD4B714A9141238CF27D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0a9b36c9f5bca2621c56bd4b714a9141238cf27d"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0A9B36C9F5BCA2621C56BD4B714A9141238CF27D.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0a9b36c9f5bca2621c56bd4b714a9141238cf27d.xuy")) returned 1 [0153.365] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0ADCF0E2A022CEDF8D199ED2889DB295128C4E25", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0ADCF0E2A022CEDF8D199ED2889DB295128C4E25", lpFilePart=0x0) returned 0x85 [0153.365] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0153.365] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0ADCF0E2A022CEDF8D199ED2889DB295128C4E25" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0adcf0e2a022cedf8d199ed2889db295128c4e25"), fInfoLevelId=0x0, lpFileInformation=0x224d498 | out: lpFileInformation=0x224d498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88f6ccdf, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x88f6ccdf, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x8b6a6f56, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x63dd)) returned 1 [0153.365] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0153.365] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0ADCF0E2A022CEDF8D199ED2889DB295128C4E25", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0ADCF0E2A022CEDF8D199ED2889DB295128C4E25", lpFilePart=0x0) returned 0x85 [0153.365] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0153.365] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0ADCF0E2A022CEDF8D199ED2889DB295128C4E25" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0adcf0e2a022cedf8d199ed2889db295128c4e25"), fInfoLevelId=0x0, lpFileInformation=0x224d698 | out: lpFileInformation=0x224d698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88f6ccdf, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x88f6ccdf, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x8b6a6f56, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x63dd)) returned 1 [0153.365] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0153.365] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0ADCF0E2A022CEDF8D199ED2889DB295128C4E25", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0ADCF0E2A022CEDF8D199ED2889DB295128C4E25", lpFilePart=0x0) returned 0x85 [0153.365] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0153.365] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0ADCF0E2A022CEDF8D199ED2889DB295128C4E25" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0adcf0e2a022cedf8d199ed2889db295128c4e25"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0153.366] GetFileType (hFile=0x444) returned 0x1 [0153.366] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0153.366] GetFileType (hFile=0x444) returned 0x1 [0153.366] ReadFile (in: hFile=0x444, lpBuffer=0x224fbc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x224fbc8*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0153.385] CloseHandle (hObject=0x444) returned 1 [0153.385] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0ADCF0E2A022CEDF8D199ED2889DB295128C4E25", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0ADCF0E2A022CEDF8D199ED2889DB295128C4E25", lpFilePart=0x0) returned 0x85 [0153.385] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0153.385] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0ADCF0E2A022CEDF8D199ED2889DB295128C4E25" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0adcf0e2a022cedf8d199ed2889db295128c4e25"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0153.385] GetFileType (hFile=0x444) returned 0x1 [0153.385] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0153.385] GetFileType (hFile=0x444) returned 0x1 [0153.385] WriteFile (in: hFile=0x444, lpBuffer=0x224d878*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x224d878*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0153.386] CloseHandle (hObject=0x444) returned 1 [0153.386] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0ADCF0E2A022CEDF8D199ED2889DB295128C4E25", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0ADCF0E2A022CEDF8D199ED2889DB295128C4E25", lpFilePart=0x0) returned 0x85 [0153.386] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0ADCF0E2A022CEDF8D199ED2889DB295128C4E25.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0ADCF0E2A022CEDF8D199ED2889DB295128C4E25.xuy", lpFilePart=0x0) returned 0x89 [0153.386] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0153.386] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0ADCF0E2A022CEDF8D199ED2889DB295128C4E25" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0adcf0e2a022cedf8d199ed2889db295128c4e25"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88f6ccdf, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x88f6ccdf, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x4744cc55, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x63dd)) returned 1 [0153.386] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0153.386] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0ADCF0E2A022CEDF8D199ED2889DB295128C4E25" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0adcf0e2a022cedf8d199ed2889db295128c4e25"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0ADCF0E2A022CEDF8D199ED2889DB295128C4E25.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0adcf0e2a022cedf8d199ed2889db295128c4e25.xuy")) returned 1 [0153.389] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0B55D23F82EE119DC0472267436CD5F2868E3B14", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0B55D23F82EE119DC0472267436CD5F2868E3B14", lpFilePart=0x0) returned 0x85 [0153.389] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0153.389] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0B55D23F82EE119DC0472267436CD5F2868E3B14" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0b55d23f82ee119dc0472267436cd5f2868e3b14"), fInfoLevelId=0x0, lpFileInformation=0x22cc170 | out: lpFileInformation=0x22cc170*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc50c5407, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc50c5407, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xc5bf79f5, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x1a4ec)) returned 1 [0153.389] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0153.389] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0B55D23F82EE119DC0472267436CD5F2868E3B14", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0B55D23F82EE119DC0472267436CD5F2868E3B14", lpFilePart=0x0) returned 0x85 [0153.389] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0153.389] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0B55D23F82EE119DC0472267436CD5F2868E3B14" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0b55d23f82ee119dc0472267436cd5f2868e3b14"), fInfoLevelId=0x0, lpFileInformation=0x22cc370 | out: lpFileInformation=0x22cc370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc50c5407, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc50c5407, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xc5bf79f5, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x1a4ec)) returned 1 [0153.389] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0153.389] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0B55D23F82EE119DC0472267436CD5F2868E3B14", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0B55D23F82EE119DC0472267436CD5F2868E3B14", lpFilePart=0x0) returned 0x85 [0153.389] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0153.389] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0B55D23F82EE119DC0472267436CD5F2868E3B14" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0b55d23f82ee119dc0472267436cd5f2868e3b14"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0153.390] GetFileType (hFile=0x444) returned 0x1 [0153.390] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0153.390] GetFileType (hFile=0x444) returned 0x1 [0153.390] ReadFile (in: hFile=0x444, lpBuffer=0x22ce8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x22ce8a0*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0153.431] CloseHandle (hObject=0x444) returned 1 [0153.431] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0B55D23F82EE119DC0472267436CD5F2868E3B14", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0B55D23F82EE119DC0472267436CD5F2868E3B14", lpFilePart=0x0) returned 0x85 [0153.431] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0153.431] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0B55D23F82EE119DC0472267436CD5F2868E3B14" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0b55d23f82ee119dc0472267436cd5f2868e3b14"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0153.431] GetFileType (hFile=0x444) returned 0x1 [0153.431] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0153.431] GetFileType (hFile=0x444) returned 0x1 [0153.431] WriteFile (in: hFile=0x444, lpBuffer=0x22cc550*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x22cc550*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0153.432] CloseHandle (hObject=0x444) returned 1 [0153.432] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0B55D23F82EE119DC0472267436CD5F2868E3B14", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0B55D23F82EE119DC0472267436CD5F2868E3B14", lpFilePart=0x0) returned 0x85 [0153.432] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0B55D23F82EE119DC0472267436CD5F2868E3B14.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0B55D23F82EE119DC0472267436CD5F2868E3B14.xuy", lpFilePart=0x0) returned 0x89 [0153.432] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0153.432] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0B55D23F82EE119DC0472267436CD5F2868E3B14" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0b55d23f82ee119dc0472267436cd5f2868e3b14"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc50c5407, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc50c5407, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x474bf2d5, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x1a4ec)) returned 1 [0153.432] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0153.432] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0B55D23F82EE119DC0472267436CD5F2868E3B14" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0b55d23f82ee119dc0472267436cd5f2868e3b14"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0B55D23F82EE119DC0472267436CD5F2868E3B14.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0b55d23f82ee119dc0472267436cd5f2868e3b14.xuy")) returned 1 [0153.434] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0BCD5C644E4A81783F24DB39416D1CE0CA0C3015", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0BCD5C644E4A81783F24DB39416D1CE0CA0C3015", lpFilePart=0x0) returned 0x85 [0153.434] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0153.434] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0BCD5C644E4A81783F24DB39416D1CE0CA0C3015" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0bcd5c644e4a81783f24db39416d1ce0ca0c3015"), fInfoLevelId=0x0, lpFileInformation=0x234ae48 | out: lpFileInformation=0x234ae48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c56e65b, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x3c56e65b, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x45d6c8e4, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0x15d10)) returned 1 [0153.435] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0153.435] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0BCD5C644E4A81783F24DB39416D1CE0CA0C3015", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0BCD5C644E4A81783F24DB39416D1CE0CA0C3015", lpFilePart=0x0) returned 0x85 [0153.435] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0153.435] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0BCD5C644E4A81783F24DB39416D1CE0CA0C3015" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0bcd5c644e4a81783f24db39416d1ce0ca0c3015"), fInfoLevelId=0x0, lpFileInformation=0x234b048 | out: lpFileInformation=0x234b048*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c56e65b, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x3c56e65b, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x45d6c8e4, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0x15d10)) returned 1 [0153.435] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0153.435] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0BCD5C644E4A81783F24DB39416D1CE0CA0C3015", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0BCD5C644E4A81783F24DB39416D1CE0CA0C3015", lpFilePart=0x0) returned 0x85 [0153.435] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0153.435] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0BCD5C644E4A81783F24DB39416D1CE0CA0C3015" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0bcd5c644e4a81783f24db39416d1ce0ca0c3015"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0153.437] GetFileType (hFile=0x444) returned 0x1 [0153.437] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0153.437] GetFileType (hFile=0x444) returned 0x1 [0153.437] ReadFile (in: hFile=0x444, lpBuffer=0x234d578, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x234d578*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0153.549] CloseHandle (hObject=0x444) returned 1 [0153.549] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0BCD5C644E4A81783F24DB39416D1CE0CA0C3015", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0BCD5C644E4A81783F24DB39416D1CE0CA0C3015", lpFilePart=0x0) returned 0x85 [0153.549] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0153.549] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0BCD5C644E4A81783F24DB39416D1CE0CA0C3015" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0bcd5c644e4a81783f24db39416d1ce0ca0c3015"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0153.550] GetFileType (hFile=0x444) returned 0x1 [0153.550] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0153.550] GetFileType (hFile=0x444) returned 0x1 [0153.550] WriteFile (in: hFile=0x444, lpBuffer=0x216bb48*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x216bb48*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0153.550] CloseHandle (hObject=0x444) returned 1 [0153.550] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0BCD5C644E4A81783F24DB39416D1CE0CA0C3015", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0BCD5C644E4A81783F24DB39416D1CE0CA0C3015", lpFilePart=0x0) returned 0x85 [0153.550] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0BCD5C644E4A81783F24DB39416D1CE0CA0C3015.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0BCD5C644E4A81783F24DB39416D1CE0CA0C3015.xuy", lpFilePart=0x0) returned 0x89 [0153.550] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0153.550] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0BCD5C644E4A81783F24DB39416D1CE0CA0C3015" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0bcd5c644e4a81783f24db39416d1ce0ca0c3015"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c56e65b, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x3c56e65b, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x475f40f4, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x15d10)) returned 1 [0153.550] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0153.550] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0BCD5C644E4A81783F24DB39416D1CE0CA0C3015" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0bcd5c644e4a81783f24db39416d1ce0ca0c3015"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0BCD5C644E4A81783F24DB39416D1CE0CA0C3015.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0bcd5c644e4a81783f24db39416d1ce0ca0c3015.xuy")) returned 1 [0153.552] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0CFEB549E537F8B2151A62BA069AE7A6D363BB90", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0CFEB549E537F8B2151A62BA069AE7A6D363BB90", lpFilePart=0x0) returned 0x85 [0153.552] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0153.552] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0CFEB549E537F8B2151A62BA069AE7A6D363BB90" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0cfeb549e537f8b2151a62ba069ae7a6d363bb90"), fInfoLevelId=0x0, lpFileInformation=0x21ce198 | out: lpFileInformation=0x21ce198*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x615c4498, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x615c4498, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x615c4498, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xed3)) returned 1 [0153.553] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0153.553] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0CFEB549E537F8B2151A62BA069AE7A6D363BB90", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0CFEB549E537F8B2151A62BA069AE7A6D363BB90", lpFilePart=0x0) returned 0x85 [0153.553] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0153.553] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0CFEB549E537F8B2151A62BA069AE7A6D363BB90" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0cfeb549e537f8b2151a62ba069ae7a6d363bb90"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0153.553] GetFileType (hFile=0x444) returned 0x1 [0153.553] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0153.553] GetFileType (hFile=0x444) returned 0x1 [0153.553] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xed3 [0153.553] ReadFile (in: hFile=0x444, lpBuffer=0x21cf488, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x21cf488*, lpNumberOfBytesRead=0x3be5c8*=0xed3, lpOverlapped=0x0) returned 1 [0153.554] CloseHandle (hObject=0x444) returned 1 [0153.566] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0CFEB549E537F8B2151A62BA069AE7A6D363BB90", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0CFEB549E537F8B2151A62BA069AE7A6D363BB90", lpFilePart=0x0) returned 0x85 [0153.567] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0153.567] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0CFEB549E537F8B2151A62BA069AE7A6D363BB90" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0cfeb549e537f8b2151a62ba069ae7a6d363bb90"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0153.568] GetFileType (hFile=0x444) returned 0x1 [0153.568] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0153.568] GetFileType (hFile=0x444) returned 0x1 [0153.568] WriteFile (in: hFile=0x444, lpBuffer=0x224af80*, nNumberOfBytesToWrite=0xee0, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x224af80*, lpNumberOfBytesWritten=0x3be4d8*=0xee0, lpOverlapped=0x0) returned 1 [0153.569] CloseHandle (hObject=0x444) returned 1 [0153.569] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0CFEB549E537F8B2151A62BA069AE7A6D363BB90", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0CFEB549E537F8B2151A62BA069AE7A6D363BB90", lpFilePart=0x0) returned 0x85 [0153.569] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0CFEB549E537F8B2151A62BA069AE7A6D363BB90.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0CFEB549E537F8B2151A62BA069AE7A6D363BB90.xuy", lpFilePart=0x0) returned 0x89 [0153.569] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0153.569] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0CFEB549E537F8B2151A62BA069AE7A6D363BB90" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0cfeb549e537f8b2151a62ba069ae7a6d363bb90"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x615c4498, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x615c4498, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x4761a608, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xee0)) returned 1 [0153.569] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0153.570] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0CFEB549E537F8B2151A62BA069AE7A6D363BB90" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0cfeb549e537f8b2151a62ba069ae7a6d363bb90"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0CFEB549E537F8B2151A62BA069AE7A6D363BB90.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0cfeb549e537f8b2151a62ba069ae7a6d363bb90.xuy")) returned 1 [0153.571] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0D1B36E62742C7776D68B1240296D02DFD6478FF", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0D1B36E62742C7776D68B1240296D02DFD6478FF", lpFilePart=0x0) returned 0x85 [0153.571] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0153.571] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0D1B36E62742C7776D68B1240296D02DFD6478FF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0d1b36e62742c7776d68b1240296d02dfd6478ff"), fInfoLevelId=0x0, lpFileInformation=0x224c340 | out: lpFileInformation=0x224c340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74c739ea, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x74c739ea, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x74c739ea, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0x52a)) returned 1 [0153.571] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0153.571] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0D1B36E62742C7776D68B1240296D02DFD6478FF", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0D1B36E62742C7776D68B1240296D02DFD6478FF", lpFilePart=0x0) returned 0x85 [0153.571] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0153.571] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0D1B36E62742C7776D68B1240296D02DFD6478FF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0d1b36e62742c7776d68b1240296d02dfd6478ff"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0153.571] GetFileType (hFile=0x444) returned 0x1 [0153.571] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0153.571] GetFileType (hFile=0x444) returned 0x1 [0153.571] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x52a [0153.571] ReadFile (in: hFile=0x444, lpBuffer=0x224cc88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x224cc88*, lpNumberOfBytesRead=0x3be5c8*=0x52a, lpOverlapped=0x0) returned 1 [0153.592] CloseHandle (hObject=0x444) returned 1 [0153.603] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0D1B36E62742C7776D68B1240296D02DFD6478FF", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0D1B36E62742C7776D68B1240296D02DFD6478FF", lpFilePart=0x0) returned 0x85 [0153.603] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0153.604] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0D1B36E62742C7776D68B1240296D02DFD6478FF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0d1b36e62742c7776d68b1240296d02dfd6478ff"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0153.605] GetFileType (hFile=0x444) returned 0x1 [0153.606] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0153.606] GetFileType (hFile=0x444) returned 0x1 [0153.606] WriteFile (in: hFile=0x444, lpBuffer=0x22c5708*, nNumberOfBytesToWrite=0x530, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x22c5708*, lpNumberOfBytesWritten=0x3be4d8*=0x530, lpOverlapped=0x0) returned 1 [0153.606] CloseHandle (hObject=0x444) returned 1 [0153.607] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0D1B36E62742C7776D68B1240296D02DFD6478FF", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0D1B36E62742C7776D68B1240296D02DFD6478FF", lpFilePart=0x0) returned 0x85 [0153.607] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0D1B36E62742C7776D68B1240296D02DFD6478FF.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0D1B36E62742C7776D68B1240296D02DFD6478FF.xuy", lpFilePart=0x0) returned 0x89 [0153.607] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0153.607] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0D1B36E62742C7776D68B1240296D02DFD6478FF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0d1b36e62742c7776d68b1240296d02dfd6478ff"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74c739ea, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x74c739ea, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x476667db, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x530)) returned 1 [0153.607] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0153.607] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0D1B36E62742C7776D68B1240296D02DFD6478FF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0d1b36e62742c7776d68b1240296d02dfd6478ff"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0D1B36E62742C7776D68B1240296D02DFD6478FF.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0d1b36e62742c7776d68b1240296d02dfd6478ff.xuy")) returned 1 [0153.609] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0D83D658A0C069047F6B9FD30BFDEDD80863B5F0", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0D83D658A0C069047F6B9FD30BFDEDD80863B5F0", lpFilePart=0x0) returned 0x85 [0153.609] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0153.609] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0D83D658A0C069047F6B9FD30BFDEDD80863B5F0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0d83d658a0c069047f6b9fd30bfdedd80863b5f0"), fInfoLevelId=0x0, lpFileInformation=0x22c6ac8 | out: lpFileInformation=0x22c6ac8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8921d56b, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x8921d56b, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x892f1bdb, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x4d2)) returned 1 [0153.609] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0153.609] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0D83D658A0C069047F6B9FD30BFDEDD80863B5F0", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0D83D658A0C069047F6B9FD30BFDEDD80863B5F0", lpFilePart=0x0) returned 0x85 [0153.609] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0153.609] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0D83D658A0C069047F6B9FD30BFDEDD80863B5F0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0d83d658a0c069047f6b9fd30bfdedd80863b5f0"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0153.610] GetFileType (hFile=0x444) returned 0x1 [0153.610] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0153.610] GetFileType (hFile=0x444) returned 0x1 [0153.610] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x4d2 [0153.610] ReadFile (in: hFile=0x444, lpBuffer=0x22c73b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x22c73b8*, lpNumberOfBytesRead=0x3be5c8*=0x4d2, lpOverlapped=0x0) returned 1 [0153.611] CloseHandle (hObject=0x444) returned 1 [0153.621] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0D83D658A0C069047F6B9FD30BFDEDD80863B5F0", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0D83D658A0C069047F6B9FD30BFDEDD80863B5F0", lpFilePart=0x0) returned 0x85 [0153.621] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0153.621] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0D83D658A0C069047F6B9FD30BFDEDD80863B5F0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0d83d658a0c069047f6b9fd30bfdedd80863b5f0"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0153.623] GetFileType (hFile=0x444) returned 0x1 [0153.623] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0153.623] GetFileType (hFile=0x444) returned 0x1 [0153.623] WriteFile (in: hFile=0x444, lpBuffer=0x233fcb0*, nNumberOfBytesToWrite=0x4e0, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x233fcb0*, lpNumberOfBytesWritten=0x3be4d8*=0x4e0, lpOverlapped=0x0) returned 1 [0153.624] CloseHandle (hObject=0x444) returned 1 [0153.624] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0D83D658A0C069047F6B9FD30BFDEDD80863B5F0", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0D83D658A0C069047F6B9FD30BFDEDD80863B5F0", lpFilePart=0x0) returned 0x85 [0153.624] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0D83D658A0C069047F6B9FD30BFDEDD80863B5F0.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0D83D658A0C069047F6B9FD30BFDEDD80863B5F0.xuy", lpFilePart=0x0) returned 0x89 [0153.624] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0153.625] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0D83D658A0C069047F6B9FD30BFDEDD80863B5F0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0d83d658a0c069047f6b9fd30bfdedd80863b5f0"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8921d56b, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x8921d56b, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x476b3aa8, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x4e0)) returned 1 [0153.625] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0153.625] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0D83D658A0C069047F6B9FD30BFDEDD80863B5F0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0d83d658a0c069047f6b9fd30bfdedd80863b5f0"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0D83D658A0C069047F6B9FD30BFDEDD80863B5F0.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0d83d658a0c069047f6b9fd30bfdedd80863b5f0.xuy")) returned 1 [0153.626] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0E030AE41B2AB97664B455929A8A0721BA5D1F69", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0E030AE41B2AB97664B455929A8A0721BA5D1F69", lpFilePart=0x0) returned 0x85 [0153.626] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0153.626] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0E030AE41B2AB97664B455929A8A0721BA5D1F69" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0e030ae41b2ab97664b455929a8a0721ba5d1f69"), fInfoLevelId=0x0, lpFileInformation=0x2341070 | out: lpFileInformation=0x2341070*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44332a8e, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x44332a8e, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x44358cf0, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0xa3a)) returned 1 [0153.627] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0153.627] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0E030AE41B2AB97664B455929A8A0721BA5D1F69", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0E030AE41B2AB97664B455929A8A0721BA5D1F69", lpFilePart=0x0) returned 0x85 [0153.627] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0153.627] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0E030AE41B2AB97664B455929A8A0721BA5D1F69" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0e030ae41b2ab97664b455929a8a0721ba5d1f69"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0153.628] GetFileType (hFile=0x444) returned 0x1 [0153.628] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0153.628] GetFileType (hFile=0x444) returned 0x1 [0153.628] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xa3a [0153.628] ReadFile (in: hFile=0x444, lpBuffer=0x2341ec8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x2341ec8*, lpNumberOfBytesRead=0x3be5c8*=0xa3a, lpOverlapped=0x0) returned 1 [0153.629] CloseHandle (hObject=0x444) returned 1 [0153.671] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0E030AE41B2AB97664B455929A8A0721BA5D1F69", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0E030AE41B2AB97664B455929A8A0721BA5D1F69", lpFilePart=0x0) returned 0x85 [0153.671] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0153.671] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0E030AE41B2AB97664B455929A8A0721BA5D1F69" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0e030ae41b2ab97664b455929a8a0721ba5d1f69"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0153.673] GetFileType (hFile=0x444) returned 0x1 [0153.673] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0153.673] GetFileType (hFile=0x444) returned 0x1 [0153.673] WriteFile (in: hFile=0x444, lpBuffer=0x21bf300*, nNumberOfBytesToWrite=0xa40, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x21bf300*, lpNumberOfBytesWritten=0x3be4d8*=0xa40, lpOverlapped=0x0) returned 1 [0153.674] CloseHandle (hObject=0x444) returned 1 [0153.674] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0E030AE41B2AB97664B455929A8A0721BA5D1F69", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0E030AE41B2AB97664B455929A8A0721BA5D1F69", lpFilePart=0x0) returned 0x85 [0153.674] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0E030AE41B2AB97664B455929A8A0721BA5D1F69.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0E030AE41B2AB97664B455929A8A0721BA5D1F69.xuy", lpFilePart=0x0) returned 0x89 [0153.674] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0153.674] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0E030AE41B2AB97664B455929A8A0721BA5D1F69" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0e030ae41b2ab97664b455929a8a0721ba5d1f69"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44332a8e, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x44332a8e, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x477254a5, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xa40)) returned 1 [0153.674] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0153.674] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0E030AE41B2AB97664B455929A8A0721BA5D1F69" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0e030ae41b2ab97664b455929a8a0721ba5d1f69"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0E030AE41B2AB97664B455929A8A0721BA5D1F69.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0e030ae41b2ab97664b455929a8a0721ba5d1f69.xuy")) returned 1 [0153.675] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0E331C2EF53B5C952B79B038C00588087D45A128", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0E331C2EF53B5C952B79B038C00588087D45A128", lpFilePart=0x0) returned 0x85 [0153.675] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0153.675] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0E331C2EF53B5C952B79B038C00588087D45A128" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0e331c2ef53b5c952b79b038c00588087d45a128"), fInfoLevelId=0x0, lpFileInformation=0x21c06c0 | out: lpFileInformation=0x21c06c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6159e1e8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x6159e1e8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x6159e1e8, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xedf)) returned 1 [0153.676] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0153.676] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0E331C2EF53B5C952B79B038C00588087D45A128", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0E331C2EF53B5C952B79B038C00588087D45A128", lpFilePart=0x0) returned 0x85 [0153.676] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0153.676] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0E331C2EF53B5C952B79B038C00588087D45A128" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0e331c2ef53b5c952b79b038c00588087d45a128"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0153.676] GetFileType (hFile=0x444) returned 0x1 [0153.676] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0153.676] GetFileType (hFile=0x444) returned 0x1 [0153.676] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xedf [0153.676] ReadFile (in: hFile=0x444, lpBuffer=0x21c19b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x21c19b8*, lpNumberOfBytesRead=0x3be5c8*=0xedf, lpOverlapped=0x0) returned 1 [0153.684] CloseHandle (hObject=0x444) returned 1 [0153.695] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0E331C2EF53B5C952B79B038C00588087D45A128", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0E331C2EF53B5C952B79B038C00588087D45A128", lpFilePart=0x0) returned 0x85 [0153.695] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0153.695] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0E331C2EF53B5C952B79B038C00588087D45A128" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0e331c2ef53b5c952b79b038c00588087d45a128"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0153.697] GetFileType (hFile=0x444) returned 0x1 [0153.697] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0153.697] GetFileType (hFile=0x444) returned 0x1 [0153.697] WriteFile (in: hFile=0x444, lpBuffer=0x223d4a8*, nNumberOfBytesToWrite=0xee0, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x223d4a8*, lpNumberOfBytesWritten=0x3be4d8*=0xee0, lpOverlapped=0x0) returned 1 [0153.697] CloseHandle (hObject=0x444) returned 1 [0153.698] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0E331C2EF53B5C952B79B038C00588087D45A128", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0E331C2EF53B5C952B79B038C00588087D45A128", lpFilePart=0x0) returned 0x85 [0153.698] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0E331C2EF53B5C952B79B038C00588087D45A128.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0E331C2EF53B5C952B79B038C00588087D45A128.xuy", lpFilePart=0x0) returned 0x89 [0153.698] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0153.698] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0E331C2EF53B5C952B79B038C00588087D45A128" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0e331c2ef53b5c952b79b038c00588087d45a128"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6159e1e8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x6159e1e8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x4774b83e, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xee0)) returned 1 [0153.698] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0153.698] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0E331C2EF53B5C952B79B038C00588087D45A128" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0e331c2ef53b5c952b79b038c00588087d45a128"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0E331C2EF53B5C952B79B038C00588087D45A128.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0e331c2ef53b5c952b79b038c00588087d45a128.xuy")) returned 1 [0153.699] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0EC55DA246CC743C7EEA604EB85A206384B78D8F", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0EC55DA246CC743C7EEA604EB85A206384B78D8F", lpFilePart=0x0) returned 0x85 [0153.699] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0153.699] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0EC55DA246CC743C7EEA604EB85A206384B78D8F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0ec55da246cc743c7eea604eb85a206384b78d8f"), fInfoLevelId=0x0, lpFileInformation=0x223e868 | out: lpFileInformation=0x223e868*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89983f86, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x89983f86, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x899866ab, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x27b0)) returned 1 [0153.706] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0153.706] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0EC55DA246CC743C7EEA604EB85A206384B78D8F", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0EC55DA246CC743C7EEA604EB85A206384B78D8F", lpFilePart=0x0) returned 0x85 [0153.706] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0153.706] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0EC55DA246CC743C7EEA604EB85A206384B78D8F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0ec55da246cc743c7eea604eb85a206384b78d8f"), fInfoLevelId=0x0, lpFileInformation=0x223ea68 | out: lpFileInformation=0x223ea68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89983f86, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x89983f86, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x899866ab, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x27b0)) returned 1 [0153.706] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0153.706] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0EC55DA246CC743C7EEA604EB85A206384B78D8F", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0EC55DA246CC743C7EEA604EB85A206384B78D8F", lpFilePart=0x0) returned 0x85 [0153.707] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0153.707] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0EC55DA246CC743C7EEA604EB85A206384B78D8F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0ec55da246cc743c7eea604eb85a206384b78d8f"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0153.707] GetFileType (hFile=0x444) returned 0x1 [0153.708] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0153.708] GetFileType (hFile=0x444) returned 0x1 [0153.708] ReadFile (in: hFile=0x444, lpBuffer=0x2240f98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x2240f98*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0153.731] CloseHandle (hObject=0x444) returned 1 [0153.731] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0EC55DA246CC743C7EEA604EB85A206384B78D8F", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0EC55DA246CC743C7EEA604EB85A206384B78D8F", lpFilePart=0x0) returned 0x85 [0153.731] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0153.731] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0EC55DA246CC743C7EEA604EB85A206384B78D8F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0ec55da246cc743c7eea604eb85a206384b78d8f"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0153.732] GetFileType (hFile=0x444) returned 0x1 [0153.732] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0153.732] GetFileType (hFile=0x444) returned 0x1 [0153.732] WriteFile (in: hFile=0x444, lpBuffer=0x223ec48*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x223ec48*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0153.732] CloseHandle (hObject=0x444) returned 1 [0153.732] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0EC55DA246CC743C7EEA604EB85A206384B78D8F", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0EC55DA246CC743C7EEA604EB85A206384B78D8F", lpFilePart=0x0) returned 0x85 [0153.733] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0EC55DA246CC743C7EEA604EB85A206384B78D8F.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0EC55DA246CC743C7EEA604EB85A206384B78D8F.xuy", lpFilePart=0x0) returned 0x89 [0153.733] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0153.733] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0EC55DA246CC743C7EEA604EB85A206384B78D8F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0ec55da246cc743c7eea604eb85a206384b78d8f"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89983f86, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x89983f86, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x47797aa9, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x27b0)) returned 1 [0153.733] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0153.733] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0EC55DA246CC743C7EEA604EB85A206384B78D8F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0ec55da246cc743c7eea604eb85a206384b78d8f"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0EC55DA246CC743C7EEA604EB85A206384B78D8F.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0ec55da246cc743c7eea604eb85a206384b78d8f.xuy")) returned 1 [0153.734] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0EDDF8C091E2FED62E44BEDDDC1723F5BF38FE4F", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0EDDF8C091E2FED62E44BEDDDC1723F5BF38FE4F", lpFilePart=0x0) returned 0x85 [0153.734] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0153.735] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0EDDF8C091E2FED62E44BEDDDC1723F5BF38FE4F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0eddf8c091e2fed62e44bedddc1723f5bf38fe4f"), fInfoLevelId=0x0, lpFileInformation=0x22bd540 | out: lpFileInformation=0x22bd540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e0cbb13, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3e0cbb13, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xe061eb1c, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x2e0)) returned 1 [0153.735] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0153.735] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0EDDF8C091E2FED62E44BEDDDC1723F5BF38FE4F", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0EDDF8C091E2FED62E44BEDDDC1723F5BF38FE4F", lpFilePart=0x0) returned 0x85 [0153.735] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0153.735] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0EDDF8C091E2FED62E44BEDDDC1723F5BF38FE4F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0eddf8c091e2fed62e44bedddc1723f5bf38fe4f"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0153.735] GetFileType (hFile=0x444) returned 0x1 [0153.735] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0153.735] GetFileType (hFile=0x444) returned 0x1 [0153.735] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x2e0 [0153.735] ReadFile (in: hFile=0x444, lpBuffer=0x22bdc38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x22bdc38*, lpNumberOfBytesRead=0x3be5c8*=0x2e0, lpOverlapped=0x0) returned 1 [0153.747] CloseHandle (hObject=0x444) returned 1 [0153.757] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0EDDF8C091E2FED62E44BEDDDC1723F5BF38FE4F", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0EDDF8C091E2FED62E44BEDDDC1723F5BF38FE4F", lpFilePart=0x0) returned 0x85 [0153.757] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0153.757] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0EDDF8C091E2FED62E44BEDDDC1723F5BF38FE4F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0eddf8c091e2fed62e44bedddc1723f5bf38fe4f"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0153.759] GetFileType (hFile=0x444) returned 0x1 [0153.759] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0153.759] GetFileType (hFile=0x444) returned 0x1 [0153.759] WriteFile (in: hFile=0x444, lpBuffer=0x2335b80*, nNumberOfBytesToWrite=0x2f0, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x2335b80*, lpNumberOfBytesWritten=0x3be4d8*=0x2f0, lpOverlapped=0x0) returned 1 [0153.762] CloseHandle (hObject=0x444) returned 1 [0153.762] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0EDDF8C091E2FED62E44BEDDDC1723F5BF38FE4F", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0EDDF8C091E2FED62E44BEDDDC1723F5BF38FE4F", lpFilePart=0x0) returned 0x85 [0153.762] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0EDDF8C091E2FED62E44BEDDDC1723F5BF38FE4F.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0EDDF8C091E2FED62E44BEDDDC1723F5BF38FE4F.xuy", lpFilePart=0x0) returned 0x89 [0153.762] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0153.762] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0EDDF8C091E2FED62E44BEDDDC1723F5BF38FE4F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0eddf8c091e2fed62e44bedddc1723f5bf38fe4f"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e0cbb13, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3e0cbb13, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x477e3f49, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2f0)) returned 1 [0153.762] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0153.762] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0EDDF8C091E2FED62E44BEDDDC1723F5BF38FE4F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0eddf8c091e2fed62e44bedddc1723f5bf38fe4f"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0EDDF8C091E2FED62E44BEDDDC1723F5BF38FE4F.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0eddf8c091e2fed62e44bedddc1723f5bf38fe4f.xuy")) returned 1 [0153.764] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0EFA10E4516ACC80858411CA65A3CFF2B1AB347D", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0EFA10E4516ACC80858411CA65A3CFF2B1AB347D", lpFilePart=0x0) returned 0x85 [0153.764] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0153.764] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0EFA10E4516ACC80858411CA65A3CFF2B1AB347D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0efa10e4516acc80858411ca65a3cff2b1ab347d"), fInfoLevelId=0x0, lpFileInformation=0x2336f40 | out: lpFileInformation=0x2336f40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xddfbb5d6, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xddfbb5d6, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xddfc2b0b, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x528)) returned 1 [0153.765] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0153.765] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0EFA10E4516ACC80858411CA65A3CFF2B1AB347D", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0EFA10E4516ACC80858411CA65A3CFF2B1AB347D", lpFilePart=0x0) returned 0x85 [0153.765] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0153.765] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0EFA10E4516ACC80858411CA65A3CFF2B1AB347D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0efa10e4516acc80858411ca65a3cff2b1ab347d"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0153.765] GetFileType (hFile=0x444) returned 0x1 [0153.765] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0153.765] GetFileType (hFile=0x444) returned 0x1 [0153.765] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x528 [0153.765] ReadFile (in: hFile=0x444, lpBuffer=0x2337880, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x2337880*, lpNumberOfBytesRead=0x3be5c8*=0x528, lpOverlapped=0x0) returned 1 [0153.769] CloseHandle (hObject=0x444) returned 1 [0153.807] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0EFA10E4516ACC80858411CA65A3CFF2B1AB347D", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0EFA10E4516ACC80858411CA65A3CFF2B1AB347D", lpFilePart=0x0) returned 0x85 [0153.807] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0153.807] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0EFA10E4516ACC80858411CA65A3CFF2B1AB347D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0efa10e4516acc80858411ca65a3cff2b1ab347d"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0153.831] GetFileType (hFile=0x444) returned 0x1 [0153.831] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0153.831] GetFileType (hFile=0x444) returned 0x1 [0153.831] WriteFile (in: hFile=0x444, lpBuffer=0x21b22a8*, nNumberOfBytesToWrite=0x530, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x21b22a8*, lpNumberOfBytesWritten=0x3be4d8*=0x530, lpOverlapped=0x0) returned 1 [0153.832] CloseHandle (hObject=0x444) returned 1 [0153.832] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0EFA10E4516ACC80858411CA65A3CFF2B1AB347D", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0EFA10E4516ACC80858411CA65A3CFF2B1AB347D", lpFilePart=0x0) returned 0x85 [0153.832] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0EFA10E4516ACC80858411CA65A3CFF2B1AB347D.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0EFA10E4516ACC80858411CA65A3CFF2B1AB347D.xuy", lpFilePart=0x0) returned 0x89 [0153.832] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0153.833] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0EFA10E4516ACC80858411CA65A3CFF2B1AB347D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0efa10e4516acc80858411ca65a3cff2b1ab347d"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xddfbb5d6, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xddfbb5d6, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x478a2ae9, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x530)) returned 1 [0153.833] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0153.833] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0EFA10E4516ACC80858411CA65A3CFF2B1AB347D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0efa10e4516acc80858411ca65a3cff2b1ab347d"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0EFA10E4516ACC80858411CA65A3CFF2B1AB347D.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0efa10e4516acc80858411ca65a3cff2b1ab347d.xuy")) returned 1 [0153.834] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0FCD257674B1DEC53E0617114C11061F0395BE84", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0FCD257674B1DEC53E0617114C11061F0395BE84", lpFilePart=0x0) returned 0x85 [0153.834] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0153.834] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0FCD257674B1DEC53E0617114C11061F0395BE84" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0fcd257674b1dec53e0617114c11061f0395be84"), fInfoLevelId=0x0, lpFileInformation=0x21b3668 | out: lpFileInformation=0x21b3668*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61577ff1, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x61577ff1, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x61577ff1, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x10df)) returned 1 [0153.835] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0153.835] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0FCD257674B1DEC53E0617114C11061F0395BE84", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0FCD257674B1DEC53E0617114C11061F0395BE84", lpFilePart=0x0) returned 0x85 [0153.835] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0153.835] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0FCD257674B1DEC53E0617114C11061F0395BE84" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0fcd257674b1dec53e0617114c11061f0395be84"), fInfoLevelId=0x0, lpFileInformation=0x21b3868 | out: lpFileInformation=0x21b3868*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61577ff1, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x61577ff1, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x61577ff1, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x10df)) returned 1 [0153.835] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0153.835] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0FCD257674B1DEC53E0617114C11061F0395BE84", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0FCD257674B1DEC53E0617114C11061F0395BE84", lpFilePart=0x0) returned 0x85 [0153.835] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0153.835] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0FCD257674B1DEC53E0617114C11061F0395BE84" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0fcd257674b1dec53e0617114c11061f0395be84"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0153.836] GetFileType (hFile=0x444) returned 0x1 [0153.836] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0153.836] GetFileType (hFile=0x444) returned 0x1 [0153.836] ReadFile (in: hFile=0x444, lpBuffer=0x21b5d98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x21b5d98*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0153.867] CloseHandle (hObject=0x444) returned 1 [0153.868] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0FCD257674B1DEC53E0617114C11061F0395BE84", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0FCD257674B1DEC53E0617114C11061F0395BE84", lpFilePart=0x0) returned 0x85 [0153.868] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0153.868] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0FCD257674B1DEC53E0617114C11061F0395BE84" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0fcd257674b1dec53e0617114c11061f0395be84"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0153.868] GetFileType (hFile=0x444) returned 0x1 [0153.868] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0153.868] GetFileType (hFile=0x444) returned 0x1 [0153.868] WriteFile (in: hFile=0x444, lpBuffer=0x21b3a48*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x21b3a48*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0153.868] CloseHandle (hObject=0x444) returned 1 [0153.868] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0FCD257674B1DEC53E0617114C11061F0395BE84", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0FCD257674B1DEC53E0617114C11061F0395BE84", lpFilePart=0x0) returned 0x85 [0153.868] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0FCD257674B1DEC53E0617114C11061F0395BE84.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0FCD257674B1DEC53E0617114C11061F0395BE84.xuy", lpFilePart=0x0) returned 0x89 [0153.869] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0153.869] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0FCD257674B1DEC53E0617114C11061F0395BE84" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0fcd257674b1dec53e0617114c11061f0395be84"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61577ff1, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x61577ff1, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x478ef3e1, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0153.869] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0153.869] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0FCD257674B1DEC53E0617114C11061F0395BE84" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0fcd257674b1dec53e0617114c11061f0395be84"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0FCD257674B1DEC53E0617114C11061F0395BE84.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0fcd257674b1dec53e0617114c11061f0395be84.xuy")) returned 1 [0153.870] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0FEE7E531224DDC68090378EA0DD267E4A43A052", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0FEE7E531224DDC68090378EA0DD267E4A43A052", lpFilePart=0x0) returned 0x85 [0153.870] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0153.870] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0FEE7E531224DDC68090378EA0DD267E4A43A052" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0fee7e531224ddc68090378ea0dd267e4a43a052"), fInfoLevelId=0x0, lpFileInformation=0x2232340 | out: lpFileInformation=0x2232340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f6969fa, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3f6969fa, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x3f699157, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x52a)) returned 1 [0153.870] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0153.870] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0FEE7E531224DDC68090378EA0DD267E4A43A052", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0FEE7E531224DDC68090378EA0DD267E4A43A052", lpFilePart=0x0) returned 0x85 [0153.870] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0153.870] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0FEE7E531224DDC68090378EA0DD267E4A43A052" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0fee7e531224ddc68090378ea0dd267e4a43a052"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0153.870] GetFileType (hFile=0x444) returned 0x1 [0153.870] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0153.870] GetFileType (hFile=0x444) returned 0x1 [0153.870] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x52a [0153.871] ReadFile (in: hFile=0x444, lpBuffer=0x2232c88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x2232c88*, lpNumberOfBytesRead=0x3be5c8*=0x52a, lpOverlapped=0x0) returned 1 [0153.877] CloseHandle (hObject=0x444) returned 1 [0153.887] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0FEE7E531224DDC68090378EA0DD267E4A43A052", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0FEE7E531224DDC68090378EA0DD267E4A43A052", lpFilePart=0x0) returned 0x85 [0153.887] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0153.887] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0FEE7E531224DDC68090378EA0DD267E4A43A052" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0fee7e531224ddc68090378ea0dd267e4a43a052"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0153.889] GetFileType (hFile=0x444) returned 0x1 [0153.889] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0153.889] GetFileType (hFile=0x444) returned 0x1 [0153.889] WriteFile (in: hFile=0x444, lpBuffer=0x22ab708*, nNumberOfBytesToWrite=0x530, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x22ab708*, lpNumberOfBytesWritten=0x3be4d8*=0x530, lpOverlapped=0x0) returned 1 [0153.890] CloseHandle (hObject=0x444) returned 1 [0153.890] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0FEE7E531224DDC68090378EA0DD267E4A43A052", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0FEE7E531224DDC68090378EA0DD267E4A43A052", lpFilePart=0x0) returned 0x85 [0153.890] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0FEE7E531224DDC68090378EA0DD267E4A43A052.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0FEE7E531224DDC68090378EA0DD267E4A43A052.xuy", lpFilePart=0x0) returned 0x89 [0153.890] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0153.890] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0FEE7E531224DDC68090378EA0DD267E4A43A052" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0fee7e531224ddc68090378ea0dd267e4a43a052"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f6969fa, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3f6969fa, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x4793b74e, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x530)) returned 1 [0153.890] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0153.890] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0FEE7E531224DDC68090378EA0DD267E4A43A052" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0fee7e531224ddc68090378ea0dd267e4a43a052"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0FEE7E531224DDC68090378EA0DD267E4A43A052.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0fee7e531224ddc68090378ea0dd267e4a43a052.xuy")) returned 1 [0153.891] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\10242BACB3A923DC9924A5B41FC879A31AF03963", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\10242BACB3A923DC9924A5B41FC879A31AF03963", lpFilePart=0x0) returned 0x85 [0153.891] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0153.891] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\10242BACB3A923DC9924A5B41FC879A31AF03963" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\10242bacb3a923dc9924a5b41fc879a31af03963"), fInfoLevelId=0x0, lpFileInformation=0x22acac8 | out: lpFileInformation=0x22acac8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5589f73, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc5589f73, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xc5589f73, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x52a)) returned 1 [0153.891] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0153.891] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\10242BACB3A923DC9924A5B41FC879A31AF03963", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\10242BACB3A923DC9924A5B41FC879A31AF03963", lpFilePart=0x0) returned 0x85 [0153.891] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0153.891] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\10242BACB3A923DC9924A5B41FC879A31AF03963" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\10242bacb3a923dc9924a5b41fc879a31af03963"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0153.892] GetFileType (hFile=0x444) returned 0x1 [0153.892] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0153.892] GetFileType (hFile=0x444) returned 0x1 [0153.892] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x52a [0153.892] ReadFile (in: hFile=0x444, lpBuffer=0x22ad410, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x22ad410*, lpNumberOfBytesRead=0x3be5c8*=0x52a, lpOverlapped=0x0) returned 1 [0153.893] CloseHandle (hObject=0x444) returned 1 [0153.903] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\10242BACB3A923DC9924A5B41FC879A31AF03963", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\10242BACB3A923DC9924A5B41FC879A31AF03963", lpFilePart=0x0) returned 0x85 [0153.903] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0153.903] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\10242BACB3A923DC9924A5B41FC879A31AF03963" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\10242bacb3a923dc9924a5b41fc879a31af03963"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0153.905] GetFileType (hFile=0x444) returned 0x1 [0153.905] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0153.905] GetFileType (hFile=0x444) returned 0x1 [0153.905] WriteFile (in: hFile=0x444, lpBuffer=0x2325e90*, nNumberOfBytesToWrite=0x530, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x2325e90*, lpNumberOfBytesWritten=0x3be4d8*=0x530, lpOverlapped=0x0) returned 1 [0153.906] CloseHandle (hObject=0x444) returned 1 [0153.906] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\10242BACB3A923DC9924A5B41FC879A31AF03963", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\10242BACB3A923DC9924A5B41FC879A31AF03963", lpFilePart=0x0) returned 0x85 [0153.906] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\10242BACB3A923DC9924A5B41FC879A31AF03963.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\10242BACB3A923DC9924A5B41FC879A31AF03963.xuy", lpFilePart=0x0) returned 0x89 [0153.906] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0153.906] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\10242BACB3A923DC9924A5B41FC879A31AF03963" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\10242bacb3a923dc9924a5b41fc879a31af03963"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5589f73, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc5589f73, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x479616e5, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x530)) returned 1 [0153.906] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0153.906] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\10242BACB3A923DC9924A5B41FC879A31AF03963" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\10242bacb3a923dc9924a5b41fc879a31af03963"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\10242BACB3A923DC9924A5B41FC879A31AF03963.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\10242bacb3a923dc9924a5b41fc879a31af03963.xuy")) returned 1 [0153.907] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\102DC0B203B92AE5ADA25E34CEB5788226CA2769", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\102DC0B203B92AE5ADA25E34CEB5788226CA2769", lpFilePart=0x0) returned 0x85 [0153.907] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0153.907] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\102DC0B203B92AE5ADA25E34CEB5788226CA2769" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\102dc0b203b92ae5ada25e34ceb5788226ca2769"), fInfoLevelId=0x0, lpFileInformation=0x2327250 | out: lpFileInformation=0x2327250*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x881da781, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x881da781, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x881df591, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x4d2)) returned 1 [0153.908] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0153.908] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\102DC0B203B92AE5ADA25E34CEB5788226CA2769", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\102DC0B203B92AE5ADA25E34CEB5788226CA2769", lpFilePart=0x0) returned 0x85 [0153.908] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0153.908] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\102DC0B203B92AE5ADA25E34CEB5788226CA2769" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\102dc0b203b92ae5ada25e34ceb5788226ca2769"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0153.908] GetFileType (hFile=0x444) returned 0x1 [0153.908] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0153.908] GetFileType (hFile=0x444) returned 0x1 [0153.908] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x4d2 [0153.908] ReadFile (in: hFile=0x444, lpBuffer=0x2327b40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x2327b40*, lpNumberOfBytesRead=0x3be5c8*=0x4d2, lpOverlapped=0x0) returned 1 [0153.910] CloseHandle (hObject=0x444) returned 1 [0153.949] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\102DC0B203B92AE5ADA25E34CEB5788226CA2769", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\102DC0B203B92AE5ADA25E34CEB5788226CA2769", lpFilePart=0x0) returned 0x85 [0153.949] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0153.950] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\102DC0B203B92AE5ADA25E34CEB5788226CA2769" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\102dc0b203b92ae5ada25e34ceb5788226ca2769"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0153.952] GetFileType (hFile=0x444) returned 0x1 [0153.952] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0153.952] GetFileType (hFile=0x444) returned 0x1 [0153.952] WriteFile (in: hFile=0x444, lpBuffer=0x21a1978*, nNumberOfBytesToWrite=0x4e0, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x21a1978*, lpNumberOfBytesWritten=0x3be4d8*=0x4e0, lpOverlapped=0x0) returned 1 [0153.954] CloseHandle (hObject=0x444) returned 1 [0153.954] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\102DC0B203B92AE5ADA25E34CEB5788226CA2769", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\102DC0B203B92AE5ADA25E34CEB5788226CA2769", lpFilePart=0x0) returned 0x85 [0153.954] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\102DC0B203B92AE5ADA25E34CEB5788226CA2769.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\102DC0B203B92AE5ADA25E34CEB5788226CA2769.xuy", lpFilePart=0x0) returned 0x89 [0153.954] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0153.954] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\102DC0B203B92AE5ADA25E34CEB5788226CA2769" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\102dc0b203b92ae5ada25e34ceb5788226ca2769"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x881da781, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x881da781, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x479d5241, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x4e0)) returned 1 [0153.954] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0153.954] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\102DC0B203B92AE5ADA25E34CEB5788226CA2769" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\102dc0b203b92ae5ada25e34ceb5788226ca2769"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\102DC0B203B92AE5ADA25E34CEB5788226CA2769.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\102dc0b203b92ae5ada25e34ceb5788226ca2769.xuy")) returned 1 [0153.955] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\102E001FB34D784FBF727701C7932E3FC58AF45D", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\102E001FB34D784FBF727701C7932E3FC58AF45D", lpFilePart=0x0) returned 0x85 [0153.955] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0153.955] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\102E001FB34D784FBF727701C7932E3FC58AF45D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\102e001fb34d784fbf727701c7932e3fc58af45d"), fInfoLevelId=0x0, lpFileInformation=0x21a2d38 | out: lpFileInformation=0x21a2d38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7cb941fc, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x7cb941fc, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x7cb941fc, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0xa3a)) returned 1 [0153.956] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0153.956] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\102E001FB34D784FBF727701C7932E3FC58AF45D", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\102E001FB34D784FBF727701C7932E3FC58AF45D", lpFilePart=0x0) returned 0x85 [0153.956] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0153.956] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\102E001FB34D784FBF727701C7932E3FC58AF45D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\102e001fb34d784fbf727701c7932e3fc58af45d"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0153.956] GetFileType (hFile=0x444) returned 0x1 [0153.956] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0153.956] GetFileType (hFile=0x444) returned 0x1 [0153.956] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xa3a [0153.956] ReadFile (in: hFile=0x444, lpBuffer=0x21a3b90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x21a3b90*, lpNumberOfBytesRead=0x3be5c8*=0xa3a, lpOverlapped=0x0) returned 1 [0153.973] CloseHandle (hObject=0x444) returned 1 [0153.985] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\102E001FB34D784FBF727701C7932E3FC58AF45D", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\102E001FB34D784FBF727701C7932E3FC58AF45D", lpFilePart=0x0) returned 0x85 [0153.985] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0153.985] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\102E001FB34D784FBF727701C7932E3FC58AF45D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\102e001fb34d784fbf727701c7932e3fc58af45d"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0153.987] GetFileType (hFile=0x444) returned 0x1 [0153.987] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0153.987] GetFileType (hFile=0x444) returned 0x1 [0153.987] WriteFile (in: hFile=0x444, lpBuffer=0x221df60*, nNumberOfBytesToWrite=0xa40, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x221df60*, lpNumberOfBytesWritten=0x3be4d8*=0xa40, lpOverlapped=0x0) returned 1 [0153.988] CloseHandle (hObject=0x444) returned 1 [0153.988] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\102E001FB34D784FBF727701C7932E3FC58AF45D", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\102E001FB34D784FBF727701C7932E3FC58AF45D", lpFilePart=0x0) returned 0x85 [0153.988] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\102E001FB34D784FBF727701C7932E3FC58AF45D.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\102E001FB34D784FBF727701C7932E3FC58AF45D.xuy", lpFilePart=0x0) returned 0x89 [0153.988] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0153.988] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\102E001FB34D784FBF727701C7932E3FC58AF45D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\102e001fb34d784fbf727701c7932e3fc58af45d"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7cb941fc, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x7cb941fc, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x47a2079f, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xa40)) returned 1 [0153.988] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0153.988] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\102E001FB34D784FBF727701C7932E3FC58AF45D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\102e001fb34d784fbf727701c7932e3fc58af45d"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\102E001FB34D784FBF727701C7932E3FC58AF45D.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\102e001fb34d784fbf727701c7932e3fc58af45d.xuy")) returned 1 [0153.989] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\108573E2B07FF25FFCAFE37F58D375561A47424D", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\108573E2B07FF25FFCAFE37F58D375561A47424D", lpFilePart=0x0) returned 0x85 [0153.989] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0153.990] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\108573E2B07FF25FFCAFE37F58D375561A47424D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\108573e2b07ff25ffcafe37f58d375561a47424d"), fInfoLevelId=0x0, lpFileInformation=0x221f320 | out: lpFileInformation=0x221f320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ef374aa, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3ef374aa, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x7d54330e, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x3ca8)) returned 1 [0153.990] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0153.990] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\108573E2B07FF25FFCAFE37F58D375561A47424D", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\108573E2B07FF25FFCAFE37F58D375561A47424D", lpFilePart=0x0) returned 0x85 [0153.990] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0153.990] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\108573E2B07FF25FFCAFE37F58D375561A47424D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\108573e2b07ff25ffcafe37f58d375561a47424d"), fInfoLevelId=0x0, lpFileInformation=0x221f520 | out: lpFileInformation=0x221f520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ef374aa, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3ef374aa, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x7d54330e, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x3ca8)) returned 1 [0153.990] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0153.991] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\108573E2B07FF25FFCAFE37F58D375561A47424D", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\108573E2B07FF25FFCAFE37F58D375561A47424D", lpFilePart=0x0) returned 0x85 [0153.991] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0153.991] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\108573E2B07FF25FFCAFE37F58D375561A47424D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\108573e2b07ff25ffcafe37f58d375561a47424d"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0153.991] GetFileType (hFile=0x444) returned 0x1 [0153.991] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0153.991] GetFileType (hFile=0x444) returned 0x1 [0153.992] ReadFile (in: hFile=0x444, lpBuffer=0x2221a50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x2221a50*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0154.019] CloseHandle (hObject=0x444) returned 1 [0154.020] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\108573E2B07FF25FFCAFE37F58D375561A47424D", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\108573E2B07FF25FFCAFE37F58D375561A47424D", lpFilePart=0x0) returned 0x85 [0154.020] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0154.020] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\108573E2B07FF25FFCAFE37F58D375561A47424D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\108573e2b07ff25ffcafe37f58d375561a47424d"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0154.020] GetFileType (hFile=0x444) returned 0x1 [0154.020] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0154.020] GetFileType (hFile=0x444) returned 0x1 [0154.020] WriteFile (in: hFile=0x444, lpBuffer=0x221f700*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x221f700*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0154.020] CloseHandle (hObject=0x444) returned 1 [0154.020] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\108573E2B07FF25FFCAFE37F58D375561A47424D", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\108573E2B07FF25FFCAFE37F58D375561A47424D", lpFilePart=0x0) returned 0x85 [0154.020] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\108573E2B07FF25FFCAFE37F58D375561A47424D.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\108573E2B07FF25FFCAFE37F58D375561A47424D.xuy", lpFilePart=0x0) returned 0x89 [0154.020] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0154.021] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\108573E2B07FF25FFCAFE37F58D375561A47424D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\108573e2b07ff25ffcafe37f58d375561a47424d"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ef374aa, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3ef374aa, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x47a6c7cf, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x3ca8)) returned 1 [0154.021] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0154.021] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\108573E2B07FF25FFCAFE37F58D375561A47424D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\108573e2b07ff25ffcafe37f58d375561a47424d"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\108573E2B07FF25FFCAFE37F58D375561A47424D.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\108573e2b07ff25ffcafe37f58d375561a47424d.xuy")) returned 1 [0154.022] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\116D5E76041E1DFC3004D30FEEB76351BB9D361F", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\116D5E76041E1DFC3004D30FEEB76351BB9D361F", lpFilePart=0x0) returned 0x85 [0154.022] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0154.022] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\116D5E76041E1DFC3004D30FEEB76351BB9D361F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\116d5e76041e1dfc3004d30feeb76351bb9d361f"), fInfoLevelId=0x0, lpFileInformation=0x229dff8 | out: lpFileInformation=0x229dff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61551d8c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x61551d8c, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x61551d8c, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x113a)) returned 1 [0154.023] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0154.023] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\116D5E76041E1DFC3004D30FEEB76351BB9D361F", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\116D5E76041E1DFC3004D30FEEB76351BB9D361F", lpFilePart=0x0) returned 0x85 [0154.023] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0154.023] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\116D5E76041E1DFC3004D30FEEB76351BB9D361F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\116d5e76041e1dfc3004d30feeb76351bb9d361f"), fInfoLevelId=0x0, lpFileInformation=0x229e1f8 | out: lpFileInformation=0x229e1f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61551d8c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x61551d8c, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x61551d8c, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x113a)) returned 1 [0154.023] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0154.023] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\116D5E76041E1DFC3004D30FEEB76351BB9D361F", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\116D5E76041E1DFC3004D30FEEB76351BB9D361F", lpFilePart=0x0) returned 0x85 [0154.023] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0154.023] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\116D5E76041E1DFC3004D30FEEB76351BB9D361F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\116d5e76041e1dfc3004d30feeb76351bb9d361f"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0154.024] GetFileType (hFile=0x444) returned 0x1 [0154.024] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0154.024] GetFileType (hFile=0x444) returned 0x1 [0154.024] ReadFile (in: hFile=0x444, lpBuffer=0x22a0728, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x22a0728*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0154.039] CloseHandle (hObject=0x444) returned 1 [0154.039] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\116D5E76041E1DFC3004D30FEEB76351BB9D361F", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\116D5E76041E1DFC3004D30FEEB76351BB9D361F", lpFilePart=0x0) returned 0x85 [0154.039] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0154.039] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\116D5E76041E1DFC3004D30FEEB76351BB9D361F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\116d5e76041e1dfc3004d30feeb76351bb9d361f"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0154.040] GetFileType (hFile=0x444) returned 0x1 [0154.040] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0154.040] GetFileType (hFile=0x444) returned 0x1 [0154.040] WriteFile (in: hFile=0x444, lpBuffer=0x229e3d8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x229e3d8*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0154.040] CloseHandle (hObject=0x444) returned 1 [0154.040] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\116D5E76041E1DFC3004D30FEEB76351BB9D361F", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\116D5E76041E1DFC3004D30FEEB76351BB9D361F", lpFilePart=0x0) returned 0x85 [0154.040] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\116D5E76041E1DFC3004D30FEEB76351BB9D361F.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\116D5E76041E1DFC3004D30FEEB76351BB9D361F.xuy", lpFilePart=0x0) returned 0x89 [0154.040] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0154.040] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\116D5E76041E1DFC3004D30FEEB76351BB9D361F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\116d5e76041e1dfc3004d30feeb76351bb9d361f"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61551d8c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x61551d8c, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x47a9285d, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0154.040] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0154.040] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\116D5E76041E1DFC3004D30FEEB76351BB9D361F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\116d5e76041e1dfc3004d30feeb76351bb9d361f"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\116D5E76041E1DFC3004D30FEEB76351BB9D361F.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\116d5e76041e1dfc3004d30feeb76351bb9d361f.xuy")) returned 1 [0154.041] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1355867C7C8ACB52152CDC249B64D742CC40340D", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1355867C7C8ACB52152CDC249B64D742CC40340D", lpFilePart=0x0) returned 0x85 [0154.041] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0154.042] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1355867C7C8ACB52152CDC249B64D742CC40340D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1355867c7c8acb52152cdc249b64d742cc40340d"), fInfoLevelId=0x0, lpFileInformation=0x231ccd0 | out: lpFileInformation=0x231ccd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x870666b3, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x870666b3, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x87068dc9, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x2159)) returned 1 [0154.042] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0154.042] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1355867C7C8ACB52152CDC249B64D742CC40340D", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1355867C7C8ACB52152CDC249B64D742CC40340D", lpFilePart=0x0) returned 0x85 [0154.042] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0154.042] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1355867C7C8ACB52152CDC249B64D742CC40340D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1355867c7c8acb52152cdc249b64d742cc40340d"), fInfoLevelId=0x0, lpFileInformation=0x231ced0 | out: lpFileInformation=0x231ced0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x870666b3, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x870666b3, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x87068dc9, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x2159)) returned 1 [0154.042] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0154.043] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1355867C7C8ACB52152CDC249B64D742CC40340D", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1355867C7C8ACB52152CDC249B64D742CC40340D", lpFilePart=0x0) returned 0x85 [0154.043] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0154.043] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1355867C7C8ACB52152CDC249B64D742CC40340D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1355867c7c8acb52152cdc249b64d742cc40340d"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0154.043] GetFileType (hFile=0x444) returned 0x1 [0154.043] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0154.043] GetFileType (hFile=0x444) returned 0x1 [0154.044] ReadFile (in: hFile=0x444, lpBuffer=0x231f400, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x231f400*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0154.202] CloseHandle (hObject=0x444) returned 1 [0154.202] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1355867C7C8ACB52152CDC249B64D742CC40340D", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1355867C7C8ACB52152CDC249B64D742CC40340D", lpFilePart=0x0) returned 0x85 [0154.202] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0154.203] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1355867C7C8ACB52152CDC249B64D742CC40340D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1355867c7c8acb52152cdc249b64d742cc40340d"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0154.203] GetFileType (hFile=0x444) returned 0x1 [0154.203] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0154.203] GetFileType (hFile=0x444) returned 0x1 [0154.203] WriteFile (in: hFile=0x444, lpBuffer=0x2176298*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x2176298*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0154.203] CloseHandle (hObject=0x444) returned 1 [0154.203] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1355867C7C8ACB52152CDC249B64D742CC40340D", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1355867C7C8ACB52152CDC249B64D742CC40340D", lpFilePart=0x0) returned 0x85 [0154.203] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1355867C7C8ACB52152CDC249B64D742CC40340D.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1355867C7C8ACB52152CDC249B64D742CC40340D.xuy", lpFilePart=0x0) returned 0x89 [0154.203] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0154.203] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1355867C7C8ACB52152CDC249B64D742CC40340D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1355867c7c8acb52152cdc249b64d742cc40340d"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x870666b3, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x870666b3, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x47c36437, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2159)) returned 1 [0154.204] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0154.204] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1355867C7C8ACB52152CDC249B64D742CC40340D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1355867c7c8acb52152cdc249b64d742cc40340d"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1355867C7C8ACB52152CDC249B64D742CC40340D.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1355867c7c8acb52152cdc249b64d742cc40340d.xuy")) returned 1 [0154.205] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1367E452AEFAA74CB544B69373FCCBB6C0E95AEB", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1367E452AEFAA74CB544B69373FCCBB6C0E95AEB", lpFilePart=0x0) returned 0x85 [0154.205] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0154.205] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1367E452AEFAA74CB544B69373FCCBB6C0E95AEB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1367e452aefaa74cb544b69373fccbb6c0e95aeb"), fInfoLevelId=0x0, lpFileInformation=0x219fb50 | out: lpFileInformation=0x219fb50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94e774c7, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x94e774c7, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x94e774c7, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0x528)) returned 1 [0154.205] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0154.205] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1367E452AEFAA74CB544B69373FCCBB6C0E95AEB", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1367E452AEFAA74CB544B69373FCCBB6C0E95AEB", lpFilePart=0x0) returned 0x85 [0154.205] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0154.205] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1367E452AEFAA74CB544B69373FCCBB6C0E95AEB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1367e452aefaa74cb544b69373fccbb6c0e95aeb"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0154.205] GetFileType (hFile=0x444) returned 0x1 [0154.205] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0154.205] GetFileType (hFile=0x444) returned 0x1 [0154.205] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x528 [0154.205] ReadFile (in: hFile=0x444, lpBuffer=0x21a0490, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x21a0490*, lpNumberOfBytesRead=0x3be5c8*=0x528, lpOverlapped=0x0) returned 1 [0154.210] CloseHandle (hObject=0x444) returned 1 [0154.221] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1367E452AEFAA74CB544B69373FCCBB6C0E95AEB", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1367E452AEFAA74CB544B69373FCCBB6C0E95AEB", lpFilePart=0x0) returned 0x85 [0154.221] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0154.221] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1367E452AEFAA74CB544B69373FCCBB6C0E95AEB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1367e452aefaa74cb544b69373fccbb6c0e95aeb"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0154.222] GetFileType (hFile=0x444) returned 0x1 [0154.223] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0154.223] GetFileType (hFile=0x444) returned 0x1 [0154.223] WriteFile (in: hFile=0x444, lpBuffer=0x2218f10*, nNumberOfBytesToWrite=0x530, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x2218f10*, lpNumberOfBytesWritten=0x3be4d8*=0x530, lpOverlapped=0x0) returned 1 [0154.223] CloseHandle (hObject=0x444) returned 1 [0154.223] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1367E452AEFAA74CB544B69373FCCBB6C0E95AEB", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1367E452AEFAA74CB544B69373FCCBB6C0E95AEB", lpFilePart=0x0) returned 0x85 [0154.223] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1367E452AEFAA74CB544B69373FCCBB6C0E95AEB.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1367E452AEFAA74CB544B69373FCCBB6C0E95AEB.xuy", lpFilePart=0x0) returned 0x89 [0154.224] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0154.224] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1367E452AEFAA74CB544B69373FCCBB6C0E95AEB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1367e452aefaa74cb544b69373fccbb6c0e95aeb"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94e774c7, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x94e774c7, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x47c5c94c, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x530)) returned 1 [0154.224] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0154.224] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1367E452AEFAA74CB544B69373FCCBB6C0E95AEB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1367e452aefaa74cb544b69373fccbb6c0e95aeb"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1367E452AEFAA74CB544B69373FCCBB6C0E95AEB.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1367e452aefaa74cb544b69373fccbb6c0e95aeb.xuy")) returned 1 [0154.225] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1380A3F977C9CB8D60BD5A90243F6A04E42FAD04", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1380A3F977C9CB8D60BD5A90243F6A04E42FAD04", lpFilePart=0x0) returned 0x85 [0154.225] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0154.225] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1380A3F977C9CB8D60BD5A90243F6A04E42FAD04" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1380a3f977c9cb8d60bd5a90243f6a04e42fad04"), fInfoLevelId=0x0, lpFileInformation=0x221a2d0 | out: lpFileInformation=0x221a2d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48d30ecb, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x48d30ecb, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x48d30ecb, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0x48e)) returned 1 [0154.225] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0154.225] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1380A3F977C9CB8D60BD5A90243F6A04E42FAD04", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1380A3F977C9CB8D60BD5A90243F6A04E42FAD04", lpFilePart=0x0) returned 0x85 [0154.225] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0154.225] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1380A3F977C9CB8D60BD5A90243F6A04E42FAD04" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1380a3f977c9cb8d60bd5a90243f6a04e42fad04"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0154.225] GetFileType (hFile=0x444) returned 0x1 [0154.225] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0154.225] GetFileType (hFile=0x444) returned 0x1 [0154.225] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x48e [0154.225] ReadFile (in: hFile=0x444, lpBuffer=0x221ab78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x221ab78*, lpNumberOfBytesRead=0x3be5c8*=0x48e, lpOverlapped=0x0) returned 1 [0154.235] CloseHandle (hObject=0x444) returned 1 [0154.245] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1380A3F977C9CB8D60BD5A90243F6A04E42FAD04", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1380A3F977C9CB8D60BD5A90243F6A04E42FAD04", lpFilePart=0x0) returned 0x85 [0154.245] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0154.245] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1380A3F977C9CB8D60BD5A90243F6A04E42FAD04" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1380a3f977c9cb8d60bd5a90243f6a04e42fad04"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0154.246] GetFileType (hFile=0x444) returned 0x1 [0154.247] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0154.247] GetFileType (hFile=0x444) returned 0x1 [0154.247] WriteFile (in: hFile=0x444, lpBuffer=0x22932d8*, nNumberOfBytesToWrite=0x490, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x22932d8*, lpNumberOfBytesWritten=0x3be4d8*=0x490, lpOverlapped=0x0) returned 1 [0154.247] CloseHandle (hObject=0x444) returned 1 [0154.248] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1380A3F977C9CB8D60BD5A90243F6A04E42FAD04", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1380A3F977C9CB8D60BD5A90243F6A04E42FAD04", lpFilePart=0x0) returned 0x85 [0154.248] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1380A3F977C9CB8D60BD5A90243F6A04E42FAD04.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1380A3F977C9CB8D60BD5A90243F6A04E42FAD04.xuy", lpFilePart=0x0) returned 0x89 [0154.248] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0154.248] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1380A3F977C9CB8D60BD5A90243F6A04E42FAD04" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1380a3f977c9cb8d60bd5a90243f6a04e42fad04"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48d30ecb, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x48d30ecb, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x47c8280f, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x490)) returned 1 [0154.248] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0154.248] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1380A3F977C9CB8D60BD5A90243F6A04E42FAD04" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1380a3f977c9cb8d60bd5a90243f6a04e42fad04"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1380A3F977C9CB8D60BD5A90243F6A04E42FAD04.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1380a3f977c9cb8d60bd5a90243f6a04e42fad04.xuy")) returned 1 [0154.249] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\13871F2088220BCD932D60C30C272709DEAABB04", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\13871F2088220BCD932D60C30C272709DEAABB04", lpFilePart=0x0) returned 0x85 [0154.249] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0154.249] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\13871F2088220BCD932D60C30C272709DEAABB04" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\13871f2088220bcd932d60c30c272709deaabb04"), fInfoLevelId=0x0, lpFileInformation=0x2294698 | out: lpFileInformation=0x2294698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x615c4498, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x615c4498, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x615c4498, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xed0)) returned 1 [0154.250] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0154.250] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\13871F2088220BCD932D60C30C272709DEAABB04", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\13871F2088220BCD932D60C30C272709DEAABB04", lpFilePart=0x0) returned 0x85 [0154.250] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0154.250] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\13871F2088220BCD932D60C30C272709DEAABB04" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\13871f2088220bcd932d60c30c272709deaabb04"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0154.250] GetFileType (hFile=0x444) returned 0x1 [0154.250] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0154.250] GetFileType (hFile=0x444) returned 0x1 [0154.250] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xed0 [0154.250] ReadFile (in: hFile=0x444, lpBuffer=0x2295980, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x2295980*, lpNumberOfBytesRead=0x3be5c8*=0xed0, lpOverlapped=0x0) returned 1 [0154.260] CloseHandle (hObject=0x444) returned 1 [0154.270] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\13871F2088220BCD932D60C30C272709DEAABB04", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\13871F2088220BCD932D60C30C272709DEAABB04", lpFilePart=0x0) returned 0x85 [0154.270] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0154.270] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\13871F2088220BCD932D60C30C272709DEAABB04" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\13871f2088220bcd932d60c30c272709deaabb04"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0154.272] GetFileType (hFile=0x444) returned 0x1 [0154.272] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0154.272] GetFileType (hFile=0x444) returned 0x1 [0154.272] WriteFile (in: hFile=0x444, lpBuffer=0x2311478*, nNumberOfBytesToWrite=0xee0, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x2311478*, lpNumberOfBytesWritten=0x3be4d8*=0xee0, lpOverlapped=0x0) returned 1 [0154.273] CloseHandle (hObject=0x444) returned 1 [0154.273] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\13871F2088220BCD932D60C30C272709DEAABB04", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\13871F2088220BCD932D60C30C272709DEAABB04", lpFilePart=0x0) returned 0x85 [0154.273] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\13871F2088220BCD932D60C30C272709DEAABB04.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\13871F2088220BCD932D60C30C272709DEAABB04.xuy", lpFilePart=0x0) returned 0x89 [0154.273] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0154.273] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\13871F2088220BCD932D60C30C272709DEAABB04" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\13871f2088220bcd932d60c30c272709deaabb04"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x615c4498, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x615c4498, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x47ccecd7, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xee0)) returned 1 [0154.273] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0154.273] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\13871F2088220BCD932D60C30C272709DEAABB04" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\13871f2088220bcd932d60c30c272709deaabb04"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\13871F2088220BCD932D60C30C272709DEAABB04.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\13871f2088220bcd932d60c30c272709deaabb04.xuy")) returned 1 [0154.274] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1456D316BEE665C776E86DC63D0F546BA069BFBE", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1456D316BEE665C776E86DC63D0F546BA069BFBE", lpFilePart=0x0) returned 0x85 [0154.275] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0154.275] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1456D316BEE665C776E86DC63D0F546BA069BFBE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1456d316bee665c776e86dc63d0f546ba069bfbe"), fInfoLevelId=0x0, lpFileInformation=0x2312838 | out: lpFileInformation=0x2312838*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61577ff1, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x61577ff1, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x61577ff1, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x112f)) returned 1 [0154.275] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0154.275] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1456D316BEE665C776E86DC63D0F546BA069BFBE", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1456D316BEE665C776E86DC63D0F546BA069BFBE", lpFilePart=0x0) returned 0x85 [0154.275] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0154.275] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1456D316BEE665C776E86DC63D0F546BA069BFBE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1456d316bee665c776e86dc63d0f546ba069bfbe"), fInfoLevelId=0x0, lpFileInformation=0x2312a38 | out: lpFileInformation=0x2312a38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61577ff1, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x61577ff1, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x61577ff1, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x112f)) returned 1 [0154.275] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0154.275] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1456D316BEE665C776E86DC63D0F546BA069BFBE", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1456D316BEE665C776E86DC63D0F546BA069BFBE", lpFilePart=0x0) returned 0x85 [0154.275] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0154.275] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1456D316BEE665C776E86DC63D0F546BA069BFBE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1456d316bee665c776e86dc63d0f546ba069bfbe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0154.276] GetFileType (hFile=0x444) returned 0x1 [0154.276] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0154.276] GetFileType (hFile=0x444) returned 0x1 [0154.276] ReadFile (in: hFile=0x444, lpBuffer=0x2314f68, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x2314f68*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0154.327] CloseHandle (hObject=0x444) returned 1 [0154.327] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1456D316BEE665C776E86DC63D0F546BA069BFBE", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1456D316BEE665C776E86DC63D0F546BA069BFBE", lpFilePart=0x0) returned 0x85 [0154.327] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0154.328] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1456D316BEE665C776E86DC63D0F546BA069BFBE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1456d316bee665c776e86dc63d0f546ba069bfbe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0154.328] GetFileType (hFile=0x444) returned 0x1 [0154.328] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0154.328] GetFileType (hFile=0x444) returned 0x1 [0154.328] WriteFile (in: hFile=0x444, lpBuffer=0x217bad0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x217bad0*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0154.328] CloseHandle (hObject=0x444) returned 1 [0154.328] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1456D316BEE665C776E86DC63D0F546BA069BFBE", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1456D316BEE665C776E86DC63D0F546BA069BFBE", lpFilePart=0x0) returned 0x85 [0154.328] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1456D316BEE665C776E86DC63D0F546BA069BFBE.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1456D316BEE665C776E86DC63D0F546BA069BFBE.xuy", lpFilePart=0x0) returned 0x89 [0154.328] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0154.328] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1456D316BEE665C776E86DC63D0F546BA069BFBE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1456d316bee665c776e86dc63d0f546ba069bfbe"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61577ff1, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x61577ff1, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x47d696c8, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0154.328] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0154.329] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1456D316BEE665C776E86DC63D0F546BA069BFBE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1456d316bee665c776e86dc63d0f546ba069bfbe"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1456D316BEE665C776E86DC63D0F546BA069BFBE.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1456d316bee665c776e86dc63d0f546ba069bfbe.xuy")) returned 1 [0154.330] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\14786BE4B1040FAE49EABD0E2222B7EDCC6DF321", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\14786BE4B1040FAE49EABD0E2222B7EDCC6DF321", lpFilePart=0x0) returned 0x85 [0154.330] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0154.330] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\14786BE4B1040FAE49EABD0E2222B7EDCC6DF321" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\14786be4b1040fae49eabd0e2222b7edcc6df321"), fInfoLevelId=0x0, lpFileInformation=0x2196d28 | out: lpFileInformation=0x2196d28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc23c4e53, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc23c4e53, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xc23c4e53, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x4d2)) returned 1 [0154.330] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0154.330] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\14786BE4B1040FAE49EABD0E2222B7EDCC6DF321", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\14786BE4B1040FAE49EABD0E2222B7EDCC6DF321", lpFilePart=0x0) returned 0x85 [0154.330] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0154.330] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\14786BE4B1040FAE49EABD0E2222B7EDCC6DF321" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\14786be4b1040fae49eabd0e2222b7edcc6df321"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0154.330] GetFileType (hFile=0x444) returned 0x1 [0154.330] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0154.330] GetFileType (hFile=0x444) returned 0x1 [0154.330] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x4d2 [0154.330] ReadFile (in: hFile=0x444, lpBuffer=0x2197618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x2197618*, lpNumberOfBytesRead=0x3be5c8*=0x4d2, lpOverlapped=0x0) returned 1 [0154.342] CloseHandle (hObject=0x444) returned 1 [0154.352] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\14786BE4B1040FAE49EABD0E2222B7EDCC6DF321", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\14786BE4B1040FAE49EABD0E2222B7EDCC6DF321", lpFilePart=0x0) returned 0x85 [0154.352] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0154.352] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\14786BE4B1040FAE49EABD0E2222B7EDCC6DF321" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\14786be4b1040fae49eabd0e2222b7edcc6df321"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0154.354] GetFileType (hFile=0x444) returned 0x1 [0154.354] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0154.354] GetFileType (hFile=0x444) returned 0x1 [0154.354] WriteFile (in: hFile=0x444, lpBuffer=0x220ff10*, nNumberOfBytesToWrite=0x4e0, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x220ff10*, lpNumberOfBytesWritten=0x3be4d8*=0x4e0, lpOverlapped=0x0) returned 1 [0154.354] CloseHandle (hObject=0x444) returned 1 [0154.355] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\14786BE4B1040FAE49EABD0E2222B7EDCC6DF321", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\14786BE4B1040FAE49EABD0E2222B7EDCC6DF321", lpFilePart=0x0) returned 0x85 [0154.355] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\14786BE4B1040FAE49EABD0E2222B7EDCC6DF321.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\14786BE4B1040FAE49EABD0E2222B7EDCC6DF321.xuy", lpFilePart=0x0) returned 0x89 [0154.355] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0154.355] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\14786BE4B1040FAE49EABD0E2222B7EDCC6DF321" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\14786be4b1040fae49eabd0e2222b7edcc6df321"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc23c4e53, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc23c4e53, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x47d8d7ba, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x4e0)) returned 1 [0154.355] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0154.355] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\14786BE4B1040FAE49EABD0E2222B7EDCC6DF321" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\14786be4b1040fae49eabd0e2222b7edcc6df321"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\14786BE4B1040FAE49EABD0E2222B7EDCC6DF321.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\14786be4b1040fae49eabd0e2222b7edcc6df321.xuy")) returned 1 [0154.356] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\14926D90946B0F4BA2FCA38D75A5FBA83EF29AD0", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\14926D90946B0F4BA2FCA38D75A5FBA83EF29AD0", lpFilePart=0x0) returned 0x85 [0154.356] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0154.356] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\14926D90946B0F4BA2FCA38D75A5FBA83EF29AD0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\14926d90946b0f4ba2fca38d75a5fba83ef29ad0"), fInfoLevelId=0x0, lpFileInformation=0x22112d0 | out: lpFileInformation=0x22112d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62c43436, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x62c43436, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x62c45a5d, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x1131)) returned 1 [0154.356] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0154.356] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\14926D90946B0F4BA2FCA38D75A5FBA83EF29AD0", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\14926D90946B0F4BA2FCA38D75A5FBA83EF29AD0", lpFilePart=0x0) returned 0x85 [0154.356] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0154.356] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\14926D90946B0F4BA2FCA38D75A5FBA83EF29AD0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\14926d90946b0f4ba2fca38d75a5fba83ef29ad0"), fInfoLevelId=0x0, lpFileInformation=0x22114d0 | out: lpFileInformation=0x22114d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62c43436, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x62c43436, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x62c45a5d, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x1131)) returned 1 [0154.356] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0154.357] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\14926D90946B0F4BA2FCA38D75A5FBA83EF29AD0", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\14926D90946B0F4BA2FCA38D75A5FBA83EF29AD0", lpFilePart=0x0) returned 0x85 [0154.357] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0154.357] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\14926D90946B0F4BA2FCA38D75A5FBA83EF29AD0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\14926d90946b0f4ba2fca38d75a5fba83ef29ad0"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0154.358] GetFileType (hFile=0x444) returned 0x1 [0154.358] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0154.358] GetFileType (hFile=0x444) returned 0x1 [0154.358] ReadFile (in: hFile=0x444, lpBuffer=0x2213a00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x2213a00*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0154.386] CloseHandle (hObject=0x444) returned 1 [0154.386] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\14926D90946B0F4BA2FCA38D75A5FBA83EF29AD0", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\14926D90946B0F4BA2FCA38D75A5FBA83EF29AD0", lpFilePart=0x0) returned 0x85 [0154.386] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0154.386] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\14926D90946B0F4BA2FCA38D75A5FBA83EF29AD0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\14926d90946b0f4ba2fca38d75a5fba83ef29ad0"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0154.386] GetFileType (hFile=0x444) returned 0x1 [0154.386] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0154.386] GetFileType (hFile=0x444) returned 0x1 [0154.386] WriteFile (in: hFile=0x444, lpBuffer=0x22116b0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x22116b0*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0154.386] CloseHandle (hObject=0x444) returned 1 [0154.387] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\14926D90946B0F4BA2FCA38D75A5FBA83EF29AD0", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\14926D90946B0F4BA2FCA38D75A5FBA83EF29AD0", lpFilePart=0x0) returned 0x85 [0154.387] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\14926D90946B0F4BA2FCA38D75A5FBA83EF29AD0.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\14926D90946B0F4BA2FCA38D75A5FBA83EF29AD0.xuy", lpFilePart=0x0) returned 0x89 [0154.387] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0154.387] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\14926D90946B0F4BA2FCA38D75A5FBA83EF29AD0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\14926d90946b0f4ba2fca38d75a5fba83ef29ad0"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62c43436, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x62c43436, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x47dd9d0b, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0154.387] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0154.387] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\14926D90946B0F4BA2FCA38D75A5FBA83EF29AD0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\14926d90946b0f4ba2fca38d75a5fba83ef29ad0"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\14926D90946B0F4BA2FCA38D75A5FBA83EF29AD0.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\14926d90946b0f4ba2fca38d75a5fba83ef29ad0.xuy")) returned 1 [0154.388] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\14BF1B21A28D68D02D3CF7A0CA4D66159596ECD1", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\14BF1B21A28D68D02D3CF7A0CA4D66159596ECD1", lpFilePart=0x0) returned 0x85 [0154.388] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0154.388] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\14BF1B21A28D68D02D3CF7A0CA4D66159596ECD1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\14bf1b21a28d68d02d3cf7a0ca4d66159596ecd1"), fInfoLevelId=0x0, lpFileInformation=0x228ffa8 | out: lpFileInformation=0x228ffa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45d6c8e4, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x45d6c8e4, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x560a3a7a, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0x2fc)) returned 1 [0154.389] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0154.389] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\14BF1B21A28D68D02D3CF7A0CA4D66159596ECD1", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\14BF1B21A28D68D02D3CF7A0CA4D66159596ECD1", lpFilePart=0x0) returned 0x85 [0154.389] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0154.389] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\14BF1B21A28D68D02D3CF7A0CA4D66159596ECD1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\14bf1b21a28d68d02d3cf7a0ca4d66159596ecd1"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0154.389] GetFileType (hFile=0x444) returned 0x1 [0154.389] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0154.389] GetFileType (hFile=0x444) returned 0x1 [0154.389] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x2fc [0154.389] ReadFile (in: hFile=0x444, lpBuffer=0x22906c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x22906c0*, lpNumberOfBytesRead=0x3be5c8*=0x2fc, lpOverlapped=0x0) returned 1 [0154.390] CloseHandle (hObject=0x444) returned 1 [0154.400] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\14BF1B21A28D68D02D3CF7A0CA4D66159596ECD1", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\14BF1B21A28D68D02D3CF7A0CA4D66159596ECD1", lpFilePart=0x0) returned 0x85 [0154.400] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0154.400] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\14BF1B21A28D68D02D3CF7A0CA4D66159596ECD1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\14bf1b21a28d68d02d3cf7a0ca4d66159596ecd1"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0154.402] GetFileType (hFile=0x444) returned 0x1 [0154.402] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0154.402] GetFileType (hFile=0x444) returned 0x1 [0154.402] WriteFile (in: hFile=0x444, lpBuffer=0x2308650*, nNumberOfBytesToWrite=0x300, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x2308650*, lpNumberOfBytesWritten=0x3be4d8*=0x300, lpOverlapped=0x0) returned 1 [0154.403] CloseHandle (hObject=0x444) returned 1 [0154.403] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\14BF1B21A28D68D02D3CF7A0CA4D66159596ECD1", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\14BF1B21A28D68D02D3CF7A0CA4D66159596ECD1", lpFilePart=0x0) returned 0x85 [0154.403] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\14BF1B21A28D68D02D3CF7A0CA4D66159596ECD1.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\14BF1B21A28D68D02D3CF7A0CA4D66159596ECD1.xuy", lpFilePart=0x0) returned 0x89 [0154.403] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0154.403] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\14BF1B21A28D68D02D3CF7A0CA4D66159596ECD1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\14bf1b21a28d68d02d3cf7a0ca4d66159596ecd1"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45d6c8e4, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x45d6c8e4, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x47e00011, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x300)) returned 1 [0154.403] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0154.403] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\14BF1B21A28D68D02D3CF7A0CA4D66159596ECD1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\14bf1b21a28d68d02d3cf7a0ca4d66159596ecd1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\14BF1B21A28D68D02D3CF7A0CA4D66159596ECD1.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\14bf1b21a28d68d02d3cf7a0ca4d66159596ecd1.xuy")) returned 1 [0154.405] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1531FBE50CE357526C558EE71AA60FC4D2E29E0C", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1531FBE50CE357526C558EE71AA60FC4D2E29E0C", lpFilePart=0x0) returned 0x85 [0154.405] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0154.405] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1531FBE50CE357526C558EE71AA60FC4D2E29E0C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1531fbe50ce357526c558ee71aa60fc4d2e29e0c"), fInfoLevelId=0x0, lpFileInformation=0x2309a10 | out: lpFileInformation=0x2309a10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x441b5306, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x441b5306, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x441b5306, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0xa98)) returned 1 [0154.405] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0154.405] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1531FBE50CE357526C558EE71AA60FC4D2E29E0C", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1531FBE50CE357526C558EE71AA60FC4D2E29E0C", lpFilePart=0x0) returned 0x85 [0154.405] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0154.405] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1531FBE50CE357526C558EE71AA60FC4D2E29E0C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1531fbe50ce357526c558ee71aa60fc4d2e29e0c"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0154.405] GetFileType (hFile=0x444) returned 0x1 [0154.405] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0154.405] GetFileType (hFile=0x444) returned 0x1 [0154.405] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xa98 [0154.406] ReadFile (in: hFile=0x444, lpBuffer=0x230a8c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x230a8c0*, lpNumberOfBytesRead=0x3be5c8*=0xa98, lpOverlapped=0x0) returned 1 [0154.407] CloseHandle (hObject=0x444) returned 1 [0154.439] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1531FBE50CE357526C558EE71AA60FC4D2E29E0C", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1531FBE50CE357526C558EE71AA60FC4D2E29E0C", lpFilePart=0x0) returned 0x85 [0154.439] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0154.439] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1531FBE50CE357526C558EE71AA60FC4D2E29E0C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1531fbe50ce357526c558ee71aa60fc4d2e29e0c"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0154.441] GetFileType (hFile=0x444) returned 0x1 [0154.441] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0154.441] GetFileType (hFile=0x444) returned 0x1 [0154.441] WriteFile (in: hFile=0x444, lpBuffer=0x2187f78*, nNumberOfBytesToWrite=0xaa0, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x2187f78*, lpNumberOfBytesWritten=0x3be4d8*=0xaa0, lpOverlapped=0x0) returned 1 [0154.443] CloseHandle (hObject=0x444) returned 1 [0154.444] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1531FBE50CE357526C558EE71AA60FC4D2E29E0C", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1531FBE50CE357526C558EE71AA60FC4D2E29E0C", lpFilePart=0x0) returned 0x85 [0154.444] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1531FBE50CE357526C558EE71AA60FC4D2E29E0C.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1531FBE50CE357526C558EE71AA60FC4D2E29E0C.xuy", lpFilePart=0x0) returned 0x89 [0154.444] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0154.444] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1531FBE50CE357526C558EE71AA60FC4D2E29E0C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1531fbe50ce357526c558ee71aa60fc4d2e29e0c"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x441b5306, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x441b5306, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x47e7271a, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xaa0)) returned 1 [0154.444] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0154.444] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1531FBE50CE357526C558EE71AA60FC4D2E29E0C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1531fbe50ce357526c558ee71aa60fc4d2e29e0c"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1531FBE50CE357526C558EE71AA60FC4D2E29E0C.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1531fbe50ce357526c558ee71aa60fc4d2e29e0c.xuy")) returned 1 [0154.445] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\15704E847DCFEC6E9A511A8897461209C820C052", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\15704E847DCFEC6E9A511A8897461209C820C052", lpFilePart=0x0) returned 0x85 [0154.445] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0154.445] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\15704E847DCFEC6E9A511A8897461209C820C052" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\15704e847dcfec6e9a511a8897461209c820c052"), fInfoLevelId=0x0, lpFileInformation=0x2189338 | out: lpFileInformation=0x2189338*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88c8de57, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x88c8de57, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x88c8de57, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x2b49)) returned 1 [0154.445] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0154.445] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\15704E847DCFEC6E9A511A8897461209C820C052", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\15704E847DCFEC6E9A511A8897461209C820C052", lpFilePart=0x0) returned 0x85 [0154.445] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0154.445] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\15704E847DCFEC6E9A511A8897461209C820C052" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\15704e847dcfec6e9a511a8897461209c820c052"), fInfoLevelId=0x0, lpFileInformation=0x2189538 | out: lpFileInformation=0x2189538*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88c8de57, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x88c8de57, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x88c8de57, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x2b49)) returned 1 [0154.446] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0154.446] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\15704E847DCFEC6E9A511A8897461209C820C052", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\15704E847DCFEC6E9A511A8897461209C820C052", lpFilePart=0x0) returned 0x85 [0154.446] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0154.446] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\15704E847DCFEC6E9A511A8897461209C820C052" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\15704e847dcfec6e9a511a8897461209c820c052"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0154.446] GetFileType (hFile=0x444) returned 0x1 [0154.446] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0154.447] GetFileType (hFile=0x444) returned 0x1 [0154.447] ReadFile (in: hFile=0x444, lpBuffer=0x218ba68, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x218ba68*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0154.469] CloseHandle (hObject=0x444) returned 1 [0154.470] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\15704E847DCFEC6E9A511A8897461209C820C052", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\15704E847DCFEC6E9A511A8897461209C820C052", lpFilePart=0x0) returned 0x85 [0154.470] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0154.470] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\15704E847DCFEC6E9A511A8897461209C820C052" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\15704e847dcfec6e9a511a8897461209c820c052"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0154.470] GetFileType (hFile=0x444) returned 0x1 [0154.470] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0154.470] GetFileType (hFile=0x444) returned 0x1 [0154.470] WriteFile (in: hFile=0x444, lpBuffer=0x2189718*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x2189718*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0154.470] CloseHandle (hObject=0x444) returned 1 [0154.470] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\15704E847DCFEC6E9A511A8897461209C820C052", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\15704E847DCFEC6E9A511A8897461209C820C052", lpFilePart=0x0) returned 0x85 [0154.470] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\15704E847DCFEC6E9A511A8897461209C820C052.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\15704E847DCFEC6E9A511A8897461209C820C052.xuy", lpFilePart=0x0) returned 0x89 [0154.470] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0154.471] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\15704E847DCFEC6E9A511A8897461209C820C052" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\15704e847dcfec6e9a511a8897461209c820c052"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88c8de57, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x88c8de57, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x47ebec18, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2b49)) returned 1 [0154.471] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0154.471] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\15704E847DCFEC6E9A511A8897461209C820C052" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\15704e847dcfec6e9a511a8897461209c820c052"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\15704E847DCFEC6E9A511A8897461209C820C052.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\15704e847dcfec6e9a511a8897461209c820c052.xuy")) returned 1 [0154.472] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\15E4224DA48B83948028AEBE08751418DBDE4688", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\15E4224DA48B83948028AEBE08751418DBDE4688", lpFilePart=0x0) returned 0x85 [0154.472] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0154.472] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\15E4224DA48B83948028AEBE08751418DBDE4688" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\15e4224da48b83948028aebe08751418dbde4688"), fInfoLevelId=0x0, lpFileInformation=0x2208010 | out: lpFileInformation=0x2208010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87975e62, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x87975e62, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x87975e62, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x10bc)) returned 1 [0154.472] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0154.472] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\15E4224DA48B83948028AEBE08751418DBDE4688", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\15E4224DA48B83948028AEBE08751418DBDE4688", lpFilePart=0x0) returned 0x85 [0154.472] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0154.472] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\15E4224DA48B83948028AEBE08751418DBDE4688" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\15e4224da48b83948028aebe08751418dbde4688"), fInfoLevelId=0x0, lpFileInformation=0x2208210 | out: lpFileInformation=0x2208210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87975e62, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x87975e62, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x87975e62, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x10bc)) returned 1 [0154.472] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0154.472] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\15E4224DA48B83948028AEBE08751418DBDE4688", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\15E4224DA48B83948028AEBE08751418DBDE4688", lpFilePart=0x0) returned 0x85 [0154.472] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0154.472] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\15E4224DA48B83948028AEBE08751418DBDE4688" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\15e4224da48b83948028aebe08751418dbde4688"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0154.473] GetFileType (hFile=0x444) returned 0x1 [0154.473] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0154.473] GetFileType (hFile=0x444) returned 0x1 [0154.473] ReadFile (in: hFile=0x444, lpBuffer=0x220a740, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x220a740*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0154.488] CloseHandle (hObject=0x444) returned 1 [0154.488] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\15E4224DA48B83948028AEBE08751418DBDE4688", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\15E4224DA48B83948028AEBE08751418DBDE4688", lpFilePart=0x0) returned 0x85 [0154.488] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0154.488] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\15E4224DA48B83948028AEBE08751418DBDE4688" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\15e4224da48b83948028aebe08751418dbde4688"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0154.488] GetFileType (hFile=0x444) returned 0x1 [0154.488] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0154.488] GetFileType (hFile=0x444) returned 0x1 [0154.488] WriteFile (in: hFile=0x444, lpBuffer=0x22083f0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x22083f0*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0154.488] CloseHandle (hObject=0x444) returned 1 [0154.489] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\15E4224DA48B83948028AEBE08751418DBDE4688", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\15E4224DA48B83948028AEBE08751418DBDE4688", lpFilePart=0x0) returned 0x85 [0154.489] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\15E4224DA48B83948028AEBE08751418DBDE4688.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\15E4224DA48B83948028AEBE08751418DBDE4688.xuy", lpFilePart=0x0) returned 0x89 [0154.489] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0154.489] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\15E4224DA48B83948028AEBE08751418DBDE4688" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\15e4224da48b83948028aebe08751418dbde4688"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87975e62, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x87975e62, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x47ee5167, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0154.489] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0154.489] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\15E4224DA48B83948028AEBE08751418DBDE4688" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\15e4224da48b83948028aebe08751418dbde4688"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\15E4224DA48B83948028AEBE08751418DBDE4688.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\15e4224da48b83948028aebe08751418dbde4688.xuy")) returned 1 [0154.490] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\16103553C2544720A8768AAA60212BE5916A4CE9", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\16103553C2544720A8768AAA60212BE5916A4CE9", lpFilePart=0x0) returned 0x85 [0154.490] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0154.490] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\16103553C2544720A8768AAA60212BE5916A4CE9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\16103553c2544720a8768aaa60212be5916a4ce9"), fInfoLevelId=0x0, lpFileInformation=0x2286ce8 | out: lpFileInformation=0x2286ce8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54484ec5, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x54484ec5, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x54484ec5, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x1470b)) returned 1 [0154.491] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0154.491] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\16103553C2544720A8768AAA60212BE5916A4CE9", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\16103553C2544720A8768AAA60212BE5916A4CE9", lpFilePart=0x0) returned 0x85 [0154.491] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0154.491] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\16103553C2544720A8768AAA60212BE5916A4CE9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\16103553c2544720a8768aaa60212be5916a4ce9"), fInfoLevelId=0x0, lpFileInformation=0x2286ee8 | out: lpFileInformation=0x2286ee8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54484ec5, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x54484ec5, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x54484ec5, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x1470b)) returned 1 [0154.491] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0154.491] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\16103553C2544720A8768AAA60212BE5916A4CE9", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\16103553C2544720A8768AAA60212BE5916A4CE9", lpFilePart=0x0) returned 0x85 [0154.491] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0154.491] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\16103553C2544720A8768AAA60212BE5916A4CE9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\16103553c2544720a8768aaa60212be5916a4ce9"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0154.492] GetFileType (hFile=0x444) returned 0x1 [0154.492] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0154.492] GetFileType (hFile=0x444) returned 0x1 [0154.492] ReadFile (in: hFile=0x444, lpBuffer=0x2289418, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x2289418*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0154.512] CloseHandle (hObject=0x444) returned 1 [0154.512] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\16103553C2544720A8768AAA60212BE5916A4CE9", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\16103553C2544720A8768AAA60212BE5916A4CE9", lpFilePart=0x0) returned 0x85 [0154.512] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0154.512] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\16103553C2544720A8768AAA60212BE5916A4CE9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\16103553c2544720a8768aaa60212be5916a4ce9"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0154.512] GetFileType (hFile=0x444) returned 0x1 [0154.512] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0154.512] GetFileType (hFile=0x444) returned 0x1 [0154.512] WriteFile (in: hFile=0x444, lpBuffer=0x22870c8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x22870c8*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0154.512] CloseHandle (hObject=0x444) returned 1 [0154.512] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\16103553C2544720A8768AAA60212BE5916A4CE9", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\16103553C2544720A8768AAA60212BE5916A4CE9", lpFilePart=0x0) returned 0x85 [0154.513] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\16103553C2544720A8768AAA60212BE5916A4CE9.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\16103553C2544720A8768AAA60212BE5916A4CE9.xuy", lpFilePart=0x0) returned 0x89 [0154.513] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0154.513] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\16103553C2544720A8768AAA60212BE5916A4CE9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\16103553c2544720a8768aaa60212be5916a4ce9"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54484ec5, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x54484ec5, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x47f0af80, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x1470b)) returned 1 [0154.513] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0154.513] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\16103553C2544720A8768AAA60212BE5916A4CE9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\16103553c2544720a8768aaa60212be5916a4ce9"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\16103553C2544720A8768AAA60212BE5916A4CE9.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\16103553c2544720a8768aaa60212be5916a4ce9.xuy")) returned 1 [0154.514] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\16114BA75206B6FA4C51ADC8A73DB4C6635F6AF9", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\16114BA75206B6FA4C51ADC8A73DB4C6635F6AF9", lpFilePart=0x0) returned 0x85 [0154.514] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0154.514] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\16114BA75206B6FA4C51ADC8A73DB4C6635F6AF9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\16114ba75206b6fa4c51adc8a73db4c6635f6af9"), fInfoLevelId=0x0, lpFileInformation=0x23059c0 | out: lpFileInformation=0x23059c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc534dc24, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc534dc24, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xc80f8eb2, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0xe90f)) returned 1 [0154.515] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0154.515] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\16114BA75206B6FA4C51ADC8A73DB4C6635F6AF9", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\16114BA75206B6FA4C51ADC8A73DB4C6635F6AF9", lpFilePart=0x0) returned 0x85 [0154.515] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0154.515] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\16114BA75206B6FA4C51ADC8A73DB4C6635F6AF9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\16114ba75206b6fa4c51adc8a73db4c6635f6af9"), fInfoLevelId=0x0, lpFileInformation=0x2305bc0 | out: lpFileInformation=0x2305bc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc534dc24, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc534dc24, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xc80f8eb2, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0xe90f)) returned 1 [0154.515] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0154.515] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\16114BA75206B6FA4C51ADC8A73DB4C6635F6AF9", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\16114BA75206B6FA4C51ADC8A73DB4C6635F6AF9", lpFilePart=0x0) returned 0x85 [0154.515] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0154.515] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\16114BA75206B6FA4C51ADC8A73DB4C6635F6AF9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\16114ba75206b6fa4c51adc8a73db4c6635f6af9"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0154.516] GetFileType (hFile=0x444) returned 0x1 [0154.516] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0154.516] GetFileType (hFile=0x444) returned 0x1 [0154.516] ReadFile (in: hFile=0x444, lpBuffer=0x23080f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x23080f0*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0154.536] CloseHandle (hObject=0x444) returned 1 [0154.536] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\16114BA75206B6FA4C51ADC8A73DB4C6635F6AF9", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\16114BA75206B6FA4C51ADC8A73DB4C6635F6AF9", lpFilePart=0x0) returned 0x85 [0154.536] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0154.536] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\16114BA75206B6FA4C51ADC8A73DB4C6635F6AF9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\16114ba75206b6fa4c51adc8a73db4c6635f6af9"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0154.537] GetFileType (hFile=0x444) returned 0x1 [0154.537] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0154.537] GetFileType (hFile=0x444) returned 0x1 [0154.540] WriteFile (in: hFile=0x444, lpBuffer=0x2183940*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x2183940*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0154.540] CloseHandle (hObject=0x444) returned 1 [0154.540] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\16114BA75206B6FA4C51ADC8A73DB4C6635F6AF9", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\16114BA75206B6FA4C51ADC8A73DB4C6635F6AF9", lpFilePart=0x0) returned 0x85 [0154.540] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\16114BA75206B6FA4C51ADC8A73DB4C6635F6AF9.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\16114BA75206B6FA4C51ADC8A73DB4C6635F6AF9.xuy", lpFilePart=0x0) returned 0x89 [0154.540] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0154.540] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\16114BA75206B6FA4C51ADC8A73DB4C6635F6AF9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\16114ba75206b6fa4c51adc8a73db4c6635f6af9"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc534dc24, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc534dc24, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x47f57455, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xe90f)) returned 1 [0154.540] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0154.540] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\16114BA75206B6FA4C51ADC8A73DB4C6635F6AF9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\16114ba75206b6fa4c51adc8a73db4c6635f6af9"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\16114BA75206B6FA4C51ADC8A73DB4C6635F6AF9.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\16114ba75206b6fa4c51adc8a73db4c6635f6af9.xuy")) returned 1 [0154.542] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\165A82B735DDDE6F05E29A770A52297EAE982902", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\165A82B735DDDE6F05E29A770A52297EAE982902", lpFilePart=0x0) returned 0x85 [0154.542] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0154.542] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\165A82B735DDDE6F05E29A770A52297EAE982902" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\165a82b735ddde6f05e29a770a52297eae982902"), fInfoLevelId=0x0, lpFileInformation=0x2185ed0 | out: lpFileInformation=0x2185ed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f15f168, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3f15f168, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x41b75b6c, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x1df0)) returned 1 [0154.542] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0154.542] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\165A82B735DDDE6F05E29A770A52297EAE982902", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\165A82B735DDDE6F05E29A770A52297EAE982902", lpFilePart=0x0) returned 0x85 [0154.542] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0154.542] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\165A82B735DDDE6F05E29A770A52297EAE982902" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\165a82b735ddde6f05e29a770a52297eae982902"), fInfoLevelId=0x0, lpFileInformation=0x21860d0 | out: lpFileInformation=0x21860d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f15f168, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3f15f168, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x41b75b6c, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x1df0)) returned 1 [0154.542] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0154.542] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\165A82B735DDDE6F05E29A770A52297EAE982902", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\165A82B735DDDE6F05E29A770A52297EAE982902", lpFilePart=0x0) returned 0x85 [0154.542] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0154.542] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\165A82B735DDDE6F05E29A770A52297EAE982902" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\165a82b735ddde6f05e29a770a52297eae982902"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0154.543] GetFileType (hFile=0x444) returned 0x1 [0154.543] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0154.543] GetFileType (hFile=0x444) returned 0x1 [0154.543] ReadFile (in: hFile=0x444, lpBuffer=0x2188600, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x2188600*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0154.605] CloseHandle (hObject=0x444) returned 1 [0154.606] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\165A82B735DDDE6F05E29A770A52297EAE982902", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\165A82B735DDDE6F05E29A770A52297EAE982902", lpFilePart=0x0) returned 0x85 [0154.606] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0154.606] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\165A82B735DDDE6F05E29A770A52297EAE982902" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\165a82b735ddde6f05e29a770a52297eae982902"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0154.606] GetFileType (hFile=0x444) returned 0x1 [0154.606] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0154.606] GetFileType (hFile=0x444) returned 0x1 [0154.606] WriteFile (in: hFile=0x444, lpBuffer=0x21862b0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x21862b0*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0154.606] CloseHandle (hObject=0x444) returned 1 [0154.606] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\165A82B735DDDE6F05E29A770A52297EAE982902", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\165A82B735DDDE6F05E29A770A52297EAE982902", lpFilePart=0x0) returned 0x85 [0154.607] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\165A82B735DDDE6F05E29A770A52297EAE982902.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\165A82B735DDDE6F05E29A770A52297EAE982902.xuy", lpFilePart=0x0) returned 0x89 [0154.607] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0154.607] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\165A82B735DDDE6F05E29A770A52297EAE982902" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\165a82b735ddde6f05e29a770a52297eae982902"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f15f168, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3f15f168, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x47fefe35, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0154.607] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0154.607] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\165A82B735DDDE6F05E29A770A52297EAE982902" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\165a82b735ddde6f05e29a770a52297eae982902"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\165A82B735DDDE6F05E29A770A52297EAE982902.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\165a82b735ddde6f05e29a770a52297eae982902.xuy")) returned 1 [0154.608] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\16656B13E13FB159C452E606297943961E41BD83", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\16656B13E13FB159C452E606297943961E41BD83", lpFilePart=0x0) returned 0x85 [0154.608] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0154.608] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\16656B13E13FB159C452E606297943961E41BD83" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\16656b13e13fb159c452e606297943961e41bd83"), fInfoLevelId=0x0, lpFileInformation=0x2204ba8 | out: lpFileInformation=0x2204ba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe06175fa, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xe06175fa, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xe0619d0d, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0xd6e)) returned 1 [0154.609] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0154.609] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\16656B13E13FB159C452E606297943961E41BD83", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\16656B13E13FB159C452E606297943961E41BD83", lpFilePart=0x0) returned 0x85 [0154.609] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0154.609] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\16656B13E13FB159C452E606297943961E41BD83" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\16656b13e13fb159c452e606297943961e41bd83"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0154.609] GetFileType (hFile=0x444) returned 0x1 [0154.609] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0154.609] GetFileType (hFile=0x444) returned 0x1 [0154.609] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xd6e [0154.609] ReadFile (in: hFile=0x444, lpBuffer=0x2205d30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x2205d30*, lpNumberOfBytesRead=0x3be5c8*=0xd6e, lpOverlapped=0x0) returned 1 [0154.629] CloseHandle (hObject=0x444) returned 1 [0154.641] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\16656B13E13FB159C452E606297943961E41BD83", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\16656B13E13FB159C452E606297943961E41BD83", lpFilePart=0x0) returned 0x85 [0154.641] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0154.641] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\16656B13E13FB159C452E606297943961E41BD83" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\16656b13e13fb159c452e606297943961e41bd83"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0154.643] GetFileType (hFile=0x444) returned 0x1 [0154.643] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0154.643] GetFileType (hFile=0x444) returned 0x1 [0154.643] WriteFile (in: hFile=0x444, lpBuffer=0x22810f0*, nNumberOfBytesToWrite=0xd70, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x22810f0*, lpNumberOfBytesWritten=0x3be4d8*=0xd70, lpOverlapped=0x0) returned 1 [0154.644] CloseHandle (hObject=0x444) returned 1 [0154.644] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\16656B13E13FB159C452E606297943961E41BD83", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\16656B13E13FB159C452E606297943961E41BD83", lpFilePart=0x0) returned 0x85 [0154.644] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\16656B13E13FB159C452E606297943961E41BD83.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\16656B13E13FB159C452E606297943961E41BD83.xuy", lpFilePart=0x0) returned 0x89 [0154.644] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0154.644] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\16656B13E13FB159C452E606297943961E41BD83" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\16656b13e13fb159c452e606297943961e41bd83"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe06175fa, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xe06175fa, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x48062939, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xd70)) returned 1 [0154.644] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0154.644] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\16656B13E13FB159C452E606297943961E41BD83" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\16656b13e13fb159c452e606297943961e41bd83"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\16656B13E13FB159C452E606297943961E41BD83.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\16656b13e13fb159c452e606297943961e41bd83.xuy")) returned 1 [0154.646] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\167109A0C523F60F2197836B0BCDA9B52A4D16AE", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\167109A0C523F60F2197836B0BCDA9B52A4D16AE", lpFilePart=0x0) returned 0x85 [0154.646] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0154.646] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\167109A0C523F60F2197836B0BCDA9B52A4D16AE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\167109a0c523f60f2197836b0bcda9b52a4d16ae"), fInfoLevelId=0x0, lpFileInformation=0x22824b0 | out: lpFileInformation=0x22824b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88424732, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x88424732, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x88429509, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x1a75)) returned 1 [0154.646] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0154.646] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\167109A0C523F60F2197836B0BCDA9B52A4D16AE", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\167109A0C523F60F2197836B0BCDA9B52A4D16AE", lpFilePart=0x0) returned 0x85 [0154.647] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0154.647] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\167109A0C523F60F2197836B0BCDA9B52A4D16AE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\167109a0c523f60f2197836b0bcda9b52a4d16ae"), fInfoLevelId=0x0, lpFileInformation=0x22826b0 | out: lpFileInformation=0x22826b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88424732, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x88424732, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x88429509, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x1a75)) returned 1 [0154.647] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0154.647] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\167109A0C523F60F2197836B0BCDA9B52A4D16AE", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\167109A0C523F60F2197836B0BCDA9B52A4D16AE", lpFilePart=0x0) returned 0x85 [0154.647] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0154.647] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\167109A0C523F60F2197836B0BCDA9B52A4D16AE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\167109a0c523f60f2197836b0bcda9b52a4d16ae"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0154.648] GetFileType (hFile=0x444) returned 0x1 [0154.648] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0154.648] GetFileType (hFile=0x444) returned 0x1 [0154.648] ReadFile (in: hFile=0x444, lpBuffer=0x2284be0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x2284be0*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0154.665] CloseHandle (hObject=0x444) returned 1 [0154.665] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\167109A0C523F60F2197836B0BCDA9B52A4D16AE", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\167109A0C523F60F2197836B0BCDA9B52A4D16AE", lpFilePart=0x0) returned 0x85 [0154.665] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0154.666] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\167109A0C523F60F2197836B0BCDA9B52A4D16AE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\167109a0c523f60f2197836b0bcda9b52a4d16ae"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0154.666] GetFileType (hFile=0x444) returned 0x1 [0154.666] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0154.666] GetFileType (hFile=0x444) returned 0x1 [0154.666] WriteFile (in: hFile=0x444, lpBuffer=0x2282890*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x2282890*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0154.666] CloseHandle (hObject=0x444) returned 1 [0154.666] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\167109A0C523F60F2197836B0BCDA9B52A4D16AE", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\167109A0C523F60F2197836B0BCDA9B52A4D16AE", lpFilePart=0x0) returned 0x85 [0154.666] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\167109A0C523F60F2197836B0BCDA9B52A4D16AE.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\167109A0C523F60F2197836B0BCDA9B52A4D16AE.xuy", lpFilePart=0x0) returned 0x89 [0154.666] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0154.666] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\167109A0C523F60F2197836B0BCDA9B52A4D16AE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\167109a0c523f60f2197836b0bcda9b52a4d16ae"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88424732, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x88424732, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x4808870d, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0154.666] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0154.667] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\167109A0C523F60F2197836B0BCDA9B52A4D16AE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\167109a0c523f60f2197836b0bcda9b52a4d16ae"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\167109A0C523F60F2197836B0BCDA9B52A4D16AE.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\167109a0c523f60f2197836b0bcda9b52a4d16ae.xuy")) returned 1 [0154.668] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\170F54EDBE19BE8676CC69B53BAC08C8932D118A", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\170F54EDBE19BE8676CC69B53BAC08C8932D118A", lpFilePart=0x0) returned 0x85 [0154.668] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0154.668] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\170F54EDBE19BE8676CC69B53BAC08C8932D118A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\170f54edbe19be8676cc69b53bac08c8932d118a"), fInfoLevelId=0x0, lpFileInformation=0x2301188 | out: lpFileInformation=0x2301188*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ef2d87b, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3ef2d87b, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x7d53218e, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0xf5b2)) returned 1 [0154.668] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0154.668] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\170F54EDBE19BE8676CC69B53BAC08C8932D118A", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\170F54EDBE19BE8676CC69B53BAC08C8932D118A", lpFilePart=0x0) returned 0x85 [0154.668] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0154.668] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\170F54EDBE19BE8676CC69B53BAC08C8932D118A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\170f54edbe19be8676cc69b53bac08c8932d118a"), fInfoLevelId=0x0, lpFileInformation=0x2301388 | out: lpFileInformation=0x2301388*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ef2d87b, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3ef2d87b, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x7d53218e, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0xf5b2)) returned 1 [0154.668] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0154.668] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\170F54EDBE19BE8676CC69B53BAC08C8932D118A", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\170F54EDBE19BE8676CC69B53BAC08C8932D118A", lpFilePart=0x0) returned 0x85 [0154.668] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0154.668] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\170F54EDBE19BE8676CC69B53BAC08C8932D118A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\170f54edbe19be8676cc69b53bac08c8932d118a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0154.669] GetFileType (hFile=0x444) returned 0x1 [0154.669] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0154.669] GetFileType (hFile=0x444) returned 0x1 [0154.669] ReadFile (in: hFile=0x444, lpBuffer=0x23038b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x23038b8*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0154.695] CloseHandle (hObject=0x444) returned 1 [0154.696] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\170F54EDBE19BE8676CC69B53BAC08C8932D118A", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\170F54EDBE19BE8676CC69B53BAC08C8932D118A", lpFilePart=0x0) returned 0x85 [0154.696] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0154.696] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\170F54EDBE19BE8676CC69B53BAC08C8932D118A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\170f54edbe19be8676cc69b53bac08c8932d118a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0154.696] GetFileType (hFile=0x444) returned 0x1 [0154.696] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0154.696] GetFileType (hFile=0x444) returned 0x1 [0154.696] WriteFile (in: hFile=0x444, lpBuffer=0x2301568*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x2301568*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0154.696] CloseHandle (hObject=0x444) returned 1 [0154.696] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\170F54EDBE19BE8676CC69B53BAC08C8932D118A", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\170F54EDBE19BE8676CC69B53BAC08C8932D118A", lpFilePart=0x0) returned 0x85 [0154.696] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\170F54EDBE19BE8676CC69B53BAC08C8932D118A.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\170F54EDBE19BE8676CC69B53BAC08C8932D118A.xuy", lpFilePart=0x0) returned 0x89 [0154.696] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0154.697] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\170F54EDBE19BE8676CC69B53BAC08C8932D118A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\170f54edbe19be8676cc69b53bac08c8932d118a"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ef2d87b, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3ef2d87b, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x480d4d12, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xf5b2)) returned 1 [0154.697] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0154.697] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\170F54EDBE19BE8676CC69B53BAC08C8932D118A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\170f54edbe19be8676cc69b53bac08c8932d118a"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\170F54EDBE19BE8676CC69B53BAC08C8932D118A.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\170f54edbe19be8676cc69b53bac08c8932d118a.xuy")) returned 1 [0154.698] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1722A63DF48E38B5DC308AE741FBFA24F762D8AC", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1722A63DF48E38B5DC308AE741FBFA24F762D8AC", lpFilePart=0x0) returned 0x85 [0154.698] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0154.698] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1722A63DF48E38B5DC308AE741FBFA24F762D8AC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1722a63df48e38b5dc308ae741fbfa24f762d8ac"), fInfoLevelId=0x0, lpFileInformation=0x237fe60 | out: lpFileInformation=0x237fe60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6152bc7d, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x6152bc7d, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x6152bc7d, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xe29)) returned 1 [0154.698] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0154.698] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1722A63DF48E38B5DC308AE741FBFA24F762D8AC", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1722A63DF48E38B5DC308AE741FBFA24F762D8AC", lpFilePart=0x0) returned 0x85 [0154.698] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0154.698] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1722A63DF48E38B5DC308AE741FBFA24F762D8AC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1722a63df48e38b5dc308ae741fbfa24f762d8ac"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0154.698] GetFileType (hFile=0x444) returned 0x1 [0154.698] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0154.698] GetFileType (hFile=0x444) returned 0x1 [0154.698] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xe29 [0154.698] ReadFile (in: hFile=0x444, lpBuffer=0x23810a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x23810a8*, lpNumberOfBytesRead=0x3be5c8*=0xe29, lpOverlapped=0x0) returned 1 [0154.705] CloseHandle (hObject=0x444) returned 1 [0154.745] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1722A63DF48E38B5DC308AE741FBFA24F762D8AC", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1722A63DF48E38B5DC308AE741FBFA24F762D8AC", lpFilePart=0x0) returned 0x85 [0154.745] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0154.745] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1722A63DF48E38B5DC308AE741FBFA24F762D8AC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1722a63df48e38b5dc308ae741fbfa24f762d8ac"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0154.747] GetFileType (hFile=0x444) returned 0x1 [0154.747] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0154.747] GetFileType (hFile=0x444) returned 0x1 [0154.747] WriteFile (in: hFile=0x444, lpBuffer=0x21fdc38*, nNumberOfBytesToWrite=0xe30, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x21fdc38*, lpNumberOfBytesWritten=0x3be4d8*=0xe30, lpOverlapped=0x0) returned 1 [0154.748] CloseHandle (hObject=0x444) returned 1 [0154.748] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1722A63DF48E38B5DC308AE741FBFA24F762D8AC", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1722A63DF48E38B5DC308AE741FBFA24F762D8AC", lpFilePart=0x0) returned 0x85 [0154.748] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1722A63DF48E38B5DC308AE741FBFA24F762D8AC.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1722A63DF48E38B5DC308AE741FBFA24F762D8AC.xuy", lpFilePart=0x0) returned 0x89 [0154.748] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0154.748] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1722A63DF48E38B5DC308AE741FBFA24F762D8AC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1722a63df48e38b5dc308ae741fbfa24f762d8ac"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6152bc7d, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x6152bc7d, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x4816d5bd, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xe30)) returned 1 [0154.748] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0154.749] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1722A63DF48E38B5DC308AE741FBFA24F762D8AC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1722a63df48e38b5dc308ae741fbfa24f762d8ac"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1722A63DF48E38B5DC308AE741FBFA24F762D8AC.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1722a63df48e38b5dc308ae741fbfa24f762d8ac.xuy")) returned 1 [0154.750] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\17FDE78A9ACA4445D5D13C94208BC4B0E4BA046A", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\17FDE78A9ACA4445D5D13C94208BC4B0E4BA046A", lpFilePart=0x0) returned 0x85 [0154.750] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0154.750] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\17FDE78A9ACA4445D5D13C94208BC4B0E4BA046A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\17fde78a9aca4445d5d13c94208bc4b0e4ba046a"), fInfoLevelId=0x0, lpFileInformation=0x21feff8 | out: lpFileInformation=0x21feff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4e89099, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc4e89099, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xc50c5407, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x8978)) returned 1 [0154.750] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0154.750] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\17FDE78A9ACA4445D5D13C94208BC4B0E4BA046A", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\17FDE78A9ACA4445D5D13C94208BC4B0E4BA046A", lpFilePart=0x0) returned 0x85 [0154.751] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0154.751] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\17FDE78A9ACA4445D5D13C94208BC4B0E4BA046A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\17fde78a9aca4445d5d13c94208bc4b0e4ba046a"), fInfoLevelId=0x0, lpFileInformation=0x21ff1f8 | out: lpFileInformation=0x21ff1f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4e89099, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc4e89099, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xc50c5407, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x8978)) returned 1 [0154.751] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0154.751] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\17FDE78A9ACA4445D5D13C94208BC4B0E4BA046A", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\17FDE78A9ACA4445D5D13C94208BC4B0E4BA046A", lpFilePart=0x0) returned 0x85 [0154.751] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0154.751] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\17FDE78A9ACA4445D5D13C94208BC4B0E4BA046A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\17fde78a9aca4445d5d13c94208bc4b0e4ba046a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0154.751] GetFileType (hFile=0x444) returned 0x1 [0154.751] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0154.752] GetFileType (hFile=0x444) returned 0x1 [0154.752] ReadFile (in: hFile=0x444, lpBuffer=0x2201728, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x2201728*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0154.768] CloseHandle (hObject=0x444) returned 1 [0154.768] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\17FDE78A9ACA4445D5D13C94208BC4B0E4BA046A", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\17FDE78A9ACA4445D5D13C94208BC4B0E4BA046A", lpFilePart=0x0) returned 0x85 [0154.768] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0154.769] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\17FDE78A9ACA4445D5D13C94208BC4B0E4BA046A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\17fde78a9aca4445d5d13c94208bc4b0e4ba046a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0154.769] GetFileType (hFile=0x444) returned 0x1 [0154.769] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0154.769] GetFileType (hFile=0x444) returned 0x1 [0154.769] WriteFile (in: hFile=0x444, lpBuffer=0x21ff3d8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x21ff3d8*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0154.769] CloseHandle (hObject=0x444) returned 1 [0154.769] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\17FDE78A9ACA4445D5D13C94208BC4B0E4BA046A", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\17FDE78A9ACA4445D5D13C94208BC4B0E4BA046A", lpFilePart=0x0) returned 0x85 [0154.769] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\17FDE78A9ACA4445D5D13C94208BC4B0E4BA046A.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\17FDE78A9ACA4445D5D13C94208BC4B0E4BA046A.xuy", lpFilePart=0x0) returned 0x89 [0154.769] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0154.769] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\17FDE78A9ACA4445D5D13C94208BC4B0E4BA046A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\17fde78a9aca4445d5d13c94208bc4b0e4ba046a"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4e89099, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc4e89099, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x481939f6, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x8978)) returned 1 [0154.769] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0154.769] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\17FDE78A9ACA4445D5D13C94208BC4B0E4BA046A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\17fde78a9aca4445d5d13c94208bc4b0e4ba046a"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\17FDE78A9ACA4445D5D13C94208BC4B0E4BA046A.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\17fde78a9aca4445d5d13c94208bc4b0e4ba046a.xuy")) returned 1 [0154.771] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1801CFE5BC39C5B24721E8CB2F32854EF5C5F96A", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1801CFE5BC39C5B24721E8CB2F32854EF5C5F96A", lpFilePart=0x0) returned 0x85 [0154.771] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0154.771] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1801CFE5BC39C5B24721E8CB2F32854EF5C5F96A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1801cfe5bc39c5b24721e8cb2f32854ef5c5f96a"), fInfoLevelId=0x0, lpFileInformation=0x227dcd0 | out: lpFileInformation=0x227dcd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5488ae0f, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x5488ae0f, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x5488ae0f, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x4e80)) returned 1 [0154.771] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0154.771] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1801CFE5BC39C5B24721E8CB2F32854EF5C5F96A", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1801CFE5BC39C5B24721E8CB2F32854EF5C5F96A", lpFilePart=0x0) returned 0x85 [0154.771] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0154.771] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1801CFE5BC39C5B24721E8CB2F32854EF5C5F96A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1801cfe5bc39c5b24721e8cb2f32854ef5c5f96a"), fInfoLevelId=0x0, lpFileInformation=0x227ded0 | out: lpFileInformation=0x227ded0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5488ae0f, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x5488ae0f, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x5488ae0f, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x4e80)) returned 1 [0154.771] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0154.772] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1801CFE5BC39C5B24721E8CB2F32854EF5C5F96A", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1801CFE5BC39C5B24721E8CB2F32854EF5C5F96A", lpFilePart=0x0) returned 0x85 [0154.772] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0154.772] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1801CFE5BC39C5B24721E8CB2F32854EF5C5F96A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1801cfe5bc39c5b24721e8cb2f32854ef5c5f96a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0154.773] GetFileType (hFile=0x444) returned 0x1 [0154.773] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0154.773] GetFileType (hFile=0x444) returned 0x1 [0154.773] ReadFile (in: hFile=0x444, lpBuffer=0x2280400, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x2280400*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0154.787] CloseHandle (hObject=0x444) returned 1 [0154.787] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1801CFE5BC39C5B24721E8CB2F32854EF5C5F96A", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1801CFE5BC39C5B24721E8CB2F32854EF5C5F96A", lpFilePart=0x0) returned 0x85 [0154.787] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0154.787] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1801CFE5BC39C5B24721E8CB2F32854EF5C5F96A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1801cfe5bc39c5b24721e8cb2f32854ef5c5f96a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0154.788] GetFileType (hFile=0x444) returned 0x1 [0154.788] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0154.788] GetFileType (hFile=0x444) returned 0x1 [0154.788] WriteFile (in: hFile=0x444, lpBuffer=0x227e0b0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x227e0b0*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0154.788] CloseHandle (hObject=0x444) returned 1 [0154.788] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1801CFE5BC39C5B24721E8CB2F32854EF5C5F96A", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1801CFE5BC39C5B24721E8CB2F32854EF5C5F96A", lpFilePart=0x0) returned 0x85 [0154.788] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1801CFE5BC39C5B24721E8CB2F32854EF5C5F96A.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1801CFE5BC39C5B24721E8CB2F32854EF5C5F96A.xuy", lpFilePart=0x0) returned 0x89 [0154.788] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0154.788] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1801CFE5BC39C5B24721E8CB2F32854EF5C5F96A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1801cfe5bc39c5b24721e8cb2f32854ef5c5f96a"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5488ae0f, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x5488ae0f, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x481b9ade, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x4e80)) returned 1 [0154.788] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0154.788] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1801CFE5BC39C5B24721E8CB2F32854EF5C5F96A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1801cfe5bc39c5b24721e8cb2f32854ef5c5f96a"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1801CFE5BC39C5B24721E8CB2F32854EF5C5F96A.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1801cfe5bc39c5b24721e8cb2f32854ef5c5f96a.xuy")) returned 1 [0154.789] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1833D74FE9FD5E002D12AD1D5CE9845C539E6D49", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1833D74FE9FD5E002D12AD1D5CE9845C539E6D49", lpFilePart=0x0) returned 0x85 [0154.789] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0154.790] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1833D74FE9FD5E002D12AD1D5CE9845C539E6D49" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1833d74fe9fd5e002d12ad1d5ce9845c539e6d49"), fInfoLevelId=0x0, lpFileInformation=0x22fc9a8 | out: lpFileInformation=0x22fc9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6159e1e8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x6159e1e8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x6159e1e8, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x1131)) returned 1 [0154.790] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0154.790] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1833D74FE9FD5E002D12AD1D5CE9845C539E6D49", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1833D74FE9FD5E002D12AD1D5CE9845C539E6D49", lpFilePart=0x0) returned 0x85 [0154.790] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0154.791] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1833D74FE9FD5E002D12AD1D5CE9845C539E6D49" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1833d74fe9fd5e002d12ad1d5ce9845c539e6d49"), fInfoLevelId=0x0, lpFileInformation=0x22fcba8 | out: lpFileInformation=0x22fcba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6159e1e8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x6159e1e8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x6159e1e8, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x1131)) returned 1 [0154.791] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0154.791] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1833D74FE9FD5E002D12AD1D5CE9845C539E6D49", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1833D74FE9FD5E002D12AD1D5CE9845C539E6D49", lpFilePart=0x0) returned 0x85 [0154.791] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0154.791] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1833D74FE9FD5E002D12AD1D5CE9845C539E6D49" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1833d74fe9fd5e002d12ad1d5ce9845c539e6d49"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0154.792] GetFileType (hFile=0x444) returned 0x1 [0154.792] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0154.792] GetFileType (hFile=0x444) returned 0x1 [0154.792] ReadFile (in: hFile=0x444, lpBuffer=0x22ff0d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x22ff0d8*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0154.810] CloseHandle (hObject=0x444) returned 1 [0154.810] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1833D74FE9FD5E002D12AD1D5CE9845C539E6D49", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1833D74FE9FD5E002D12AD1D5CE9845C539E6D49", lpFilePart=0x0) returned 0x85 [0154.810] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0154.810] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1833D74FE9FD5E002D12AD1D5CE9845C539E6D49" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1833d74fe9fd5e002d12ad1d5ce9845c539e6d49"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0154.811] GetFileType (hFile=0x444) returned 0x1 [0154.811] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0154.811] GetFileType (hFile=0x444) returned 0x1 [0154.811] WriteFile (in: hFile=0x444, lpBuffer=0x22fcd88*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x22fcd88*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0154.811] CloseHandle (hObject=0x444) returned 1 [0154.811] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1833D74FE9FD5E002D12AD1D5CE9845C539E6D49", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1833D74FE9FD5E002D12AD1D5CE9845C539E6D49", lpFilePart=0x0) returned 0x85 [0154.811] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1833D74FE9FD5E002D12AD1D5CE9845C539E6D49.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1833D74FE9FD5E002D12AD1D5CE9845C539E6D49.xuy", lpFilePart=0x0) returned 0x89 [0154.811] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0154.811] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1833D74FE9FD5E002D12AD1D5CE9845C539E6D49" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1833d74fe9fd5e002d12ad1d5ce9845c539e6d49"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6159e1e8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x6159e1e8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x482060c0, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0154.811] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0154.811] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1833D74FE9FD5E002D12AD1D5CE9845C539E6D49" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1833d74fe9fd5e002d12ad1d5ce9845c539e6d49"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1833D74FE9FD5E002D12AD1D5CE9845C539E6D49.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1833d74fe9fd5e002d12ad1d5ce9845c539e6d49.xuy")) returned 1 [0154.812] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\19B6A58F54F979D1CF008970B9B0D36B11B7944D", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\19B6A58F54F979D1CF008970B9B0D36B11B7944D", lpFilePart=0x0) returned 0x85 [0154.812] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0154.812] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\19B6A58F54F979D1CF008970B9B0D36B11B7944D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\19b6a58f54f979d1cf008970b9b0d36b11b7944d"), fInfoLevelId=0x0, lpFileInformation=0x237b680 | out: lpFileInformation=0x237b680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83a9edb7, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x83a9edb7, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x83a9edb7, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0xab6)) returned 1 [0154.813] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0154.813] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\19B6A58F54F979D1CF008970B9B0D36B11B7944D", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\19B6A58F54F979D1CF008970B9B0D36B11B7944D", lpFilePart=0x0) returned 0x85 [0154.813] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0154.813] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\19B6A58F54F979D1CF008970B9B0D36B11B7944D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\19b6a58f54f979d1cf008970b9b0d36b11b7944d"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0154.813] GetFileType (hFile=0x444) returned 0x1 [0154.813] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0154.813] GetFileType (hFile=0x444) returned 0x1 [0154.813] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xab6 [0154.813] ReadFile (in: hFile=0x444, lpBuffer=0x237c550, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x237c550*, lpNumberOfBytesRead=0x3be5c8*=0xab6, lpOverlapped=0x0) returned 1 [0154.830] CloseHandle (hObject=0x444) returned 1 [0154.869] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\19B6A58F54F979D1CF008970B9B0D36B11B7944D", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\19B6A58F54F979D1CF008970B9B0D36B11B7944D", lpFilePart=0x0) returned 0x85 [0154.869] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0154.869] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\19B6A58F54F979D1CF008970B9B0D36B11B7944D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\19b6a58f54f979d1cf008970b9b0d36b11b7944d"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0154.870] GetFileType (hFile=0x444) returned 0x1 [0154.870] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0154.870] GetFileType (hFile=0x444) returned 0x1 [0154.870] WriteFile (in: hFile=0x444, lpBuffer=0x21f6828*, nNumberOfBytesToWrite=0xac0, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x21f6828*, lpNumberOfBytesWritten=0x3be4d8*=0xac0, lpOverlapped=0x0) returned 1 [0154.871] CloseHandle (hObject=0x444) returned 1 [0154.871] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\19B6A58F54F979D1CF008970B9B0D36B11B7944D", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\19B6A58F54F979D1CF008970B9B0D36B11B7944D", lpFilePart=0x0) returned 0x85 [0154.871] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\19B6A58F54F979D1CF008970B9B0D36B11B7944D.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\19B6A58F54F979D1CF008970B9B0D36B11B7944D.xuy", lpFilePart=0x0) returned 0x89 [0154.871] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0154.871] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\19B6A58F54F979D1CF008970B9B0D36B11B7944D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\19b6a58f54f979d1cf008970b9b0d36b11b7944d"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83a9edb7, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x83a9edb7, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x482787bd, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xac0)) returned 1 [0154.872] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0154.872] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\19B6A58F54F979D1CF008970B9B0D36B11B7944D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\19b6a58f54f979d1cf008970b9b0d36b11b7944d"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\19B6A58F54F979D1CF008970B9B0D36B11B7944D.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\19b6a58f54f979d1cf008970b9b0d36b11b7944d.xuy")) returned 1 [0154.873] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1A7C641FFE043BB811768257AF97546A0C7F3B55", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1A7C641FFE043BB811768257AF97546A0C7F3B55", lpFilePart=0x0) returned 0x85 [0154.873] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0154.874] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1A7C641FFE043BB811768257AF97546A0C7F3B55" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1a7c641ffe043bb811768257af97546a0c7f3b55"), fInfoLevelId=0x0, lpFileInformation=0x21f7be8 | out: lpFileInformation=0x21f7be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61577ff1, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x61577ff1, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x61577ff1, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xdff)) returned 1 [0154.874] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0154.875] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1A7C641FFE043BB811768257AF97546A0C7F3B55", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1A7C641FFE043BB811768257AF97546A0C7F3B55", lpFilePart=0x0) returned 0x85 [0154.875] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0154.875] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1A7C641FFE043BB811768257AF97546A0C7F3B55" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1a7c641ffe043bb811768257af97546a0c7f3b55"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0154.875] GetFileType (hFile=0x444) returned 0x1 [0154.875] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0154.875] GetFileType (hFile=0x444) returned 0x1 [0154.875] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xdff [0154.875] ReadFile (in: hFile=0x444, lpBuffer=0x21f8e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x21f8e00*, lpNumberOfBytesRead=0x3be5c8*=0xdff, lpOverlapped=0x0) returned 1 [0154.884] CloseHandle (hObject=0x444) returned 1 [0154.897] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1A7C641FFE043BB811768257AF97546A0C7F3B55", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1A7C641FFE043BB811768257AF97546A0C7F3B55", lpFilePart=0x0) returned 0x85 [0154.897] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0154.897] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1A7C641FFE043BB811768257AF97546A0C7F3B55" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1a7c641ffe043bb811768257af97546a0c7f3b55"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0154.899] GetFileType (hFile=0x444) returned 0x1 [0154.899] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0154.899] GetFileType (hFile=0x444) returned 0x1 [0154.899] WriteFile (in: hFile=0x444, lpBuffer=0x2274490*, nNumberOfBytesToWrite=0xe00, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x2274490*, lpNumberOfBytesWritten=0x3be4d8*=0xe00, lpOverlapped=0x0) returned 1 [0154.900] CloseHandle (hObject=0x444) returned 1 [0154.900] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1A7C641FFE043BB811768257AF97546A0C7F3B55", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1A7C641FFE043BB811768257AF97546A0C7F3B55", lpFilePart=0x0) returned 0x85 [0154.900] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1A7C641FFE043BB811768257AF97546A0C7F3B55.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1A7C641FFE043BB811768257AF97546A0C7F3B55.xuy", lpFilePart=0x0) returned 0x89 [0154.900] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0154.900] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1A7C641FFE043BB811768257AF97546A0C7F3B55" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1a7c641ffe043bb811768257af97546a0c7f3b55"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61577ff1, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x61577ff1, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x482c4f95, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xe00)) returned 1 [0154.900] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0154.900] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1A7C641FFE043BB811768257AF97546A0C7F3B55" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1a7c641ffe043bb811768257af97546a0c7f3b55"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1A7C641FFE043BB811768257AF97546A0C7F3B55.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1a7c641ffe043bb811768257af97546a0c7f3b55.xuy")) returned 1 [0154.901] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1AA5AFB1639FED28192BC2781A550C89494CDF9A", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1AA5AFB1639FED28192BC2781A550C89494CDF9A", lpFilePart=0x0) returned 0x85 [0154.902] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0154.902] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1AA5AFB1639FED28192BC2781A550C89494CDF9A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1aa5afb1639fed28192bc2781a550c89494cdf9a"), fInfoLevelId=0x0, lpFileInformation=0x2275850 | out: lpFileInformation=0x2275850*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56f05be8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x56f05be8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x56f05be8, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x125c)) returned 1 [0154.902] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0154.902] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1AA5AFB1639FED28192BC2781A550C89494CDF9A", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1AA5AFB1639FED28192BC2781A550C89494CDF9A", lpFilePart=0x0) returned 0x85 [0154.902] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0154.902] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1AA5AFB1639FED28192BC2781A550C89494CDF9A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1aa5afb1639fed28192bc2781a550c89494cdf9a"), fInfoLevelId=0x0, lpFileInformation=0x2275a50 | out: lpFileInformation=0x2275a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56f05be8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x56f05be8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x56f05be8, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x125c)) returned 1 [0154.902] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0154.902] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1AA5AFB1639FED28192BC2781A550C89494CDF9A", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1AA5AFB1639FED28192BC2781A550C89494CDF9A", lpFilePart=0x0) returned 0x85 [0154.903] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0154.903] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1AA5AFB1639FED28192BC2781A550C89494CDF9A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1aa5afb1639fed28192bc2781a550c89494cdf9a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0154.903] GetFileType (hFile=0x444) returned 0x1 [0154.903] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0154.903] GetFileType (hFile=0x444) returned 0x1 [0154.903] ReadFile (in: hFile=0x444, lpBuffer=0x2277f80, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x2277f80*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0154.922] CloseHandle (hObject=0x444) returned 1 [0154.922] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1AA5AFB1639FED28192BC2781A550C89494CDF9A", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1AA5AFB1639FED28192BC2781A550C89494CDF9A", lpFilePart=0x0) returned 0x85 [0154.922] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0154.922] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1AA5AFB1639FED28192BC2781A550C89494CDF9A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1aa5afb1639fed28192bc2781a550c89494cdf9a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0154.923] GetFileType (hFile=0x444) returned 0x1 [0154.923] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0154.923] GetFileType (hFile=0x444) returned 0x1 [0154.923] WriteFile (in: hFile=0x444, lpBuffer=0x2275c30*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x2275c30*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0154.923] CloseHandle (hObject=0x444) returned 1 [0154.923] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1AA5AFB1639FED28192BC2781A550C89494CDF9A", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1AA5AFB1639FED28192BC2781A550C89494CDF9A", lpFilePart=0x0) returned 0x85 [0154.923] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1AA5AFB1639FED28192BC2781A550C89494CDF9A.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1AA5AFB1639FED28192BC2781A550C89494CDF9A.xuy", lpFilePart=0x0) returned 0x89 [0154.923] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0154.923] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1AA5AFB1639FED28192BC2781A550C89494CDF9A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1aa5afb1639fed28192bc2781a550c89494cdf9a"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56f05be8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x56f05be8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x48311097, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0154.923] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0154.923] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1AA5AFB1639FED28192BC2781A550C89494CDF9A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1aa5afb1639fed28192bc2781a550c89494cdf9a"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1AA5AFB1639FED28192BC2781A550C89494CDF9A.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1aa5afb1639fed28192bc2781a550c89494cdf9a.xuy")) returned 1 [0154.925] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1ADEB94741EA84BB04219DA402BBC420B5512A2A", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1ADEB94741EA84BB04219DA402BBC420B5512A2A", lpFilePart=0x0) returned 0x85 [0154.925] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0154.925] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1ADEB94741EA84BB04219DA402BBC420B5512A2A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1adeb94741ea84bb04219da402bbc420b5512a2a"), fInfoLevelId=0x0, lpFileInformation=0x22f4528 | out: lpFileInformation=0x22f4528*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6159e1e8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x6159e1e8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x6159e1e8, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xe58)) returned 1 [0154.925] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0154.925] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1ADEB94741EA84BB04219DA402BBC420B5512A2A", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1ADEB94741EA84BB04219DA402BBC420B5512A2A", lpFilePart=0x0) returned 0x85 [0154.925] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0154.925] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1ADEB94741EA84BB04219DA402BBC420B5512A2A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1adeb94741ea84bb04219da402bbc420b5512a2a"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0154.926] GetFileType (hFile=0x444) returned 0x1 [0154.926] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0154.926] GetFileType (hFile=0x444) returned 0x1 [0154.926] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xe58 [0154.926] ReadFile (in: hFile=0x444, lpBuffer=0x22f5798, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x22f5798*, lpNumberOfBytesRead=0x3be5c8*=0xe58, lpOverlapped=0x0) returned 1 [0154.936] CloseHandle (hObject=0x444) returned 1 [0154.946] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1ADEB94741EA84BB04219DA402BBC420B5512A2A", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1ADEB94741EA84BB04219DA402BBC420B5512A2A", lpFilePart=0x0) returned 0x85 [0154.946] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0154.946] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1ADEB94741EA84BB04219DA402BBC420B5512A2A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1adeb94741ea84bb04219da402bbc420b5512a2a"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0154.948] GetFileType (hFile=0x444) returned 0x1 [0154.948] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0154.948] GetFileType (hFile=0x444) returned 0x1 [0154.948] WriteFile (in: hFile=0x444, lpBuffer=0x2371008*, nNumberOfBytesToWrite=0xe60, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x2371008*, lpNumberOfBytesWritten=0x3be4d8*=0xe60, lpOverlapped=0x0) returned 1 [0154.956] CloseHandle (hObject=0x444) returned 1 [0154.964] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1ADEB94741EA84BB04219DA402BBC420B5512A2A", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1ADEB94741EA84BB04219DA402BBC420B5512A2A", lpFilePart=0x0) returned 0x85 [0154.964] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1ADEB94741EA84BB04219DA402BBC420B5512A2A.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1ADEB94741EA84BB04219DA402BBC420B5512A2A.xuy", lpFilePart=0x0) returned 0x89 [0154.964] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0154.964] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1ADEB94741EA84BB04219DA402BBC420B5512A2A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1adeb94741ea84bb04219da402bbc420b5512a2a"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6159e1e8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x6159e1e8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x4835d4f7, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xe60)) returned 1 [0154.964] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0154.965] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1ADEB94741EA84BB04219DA402BBC420B5512A2A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1adeb94741ea84bb04219da402bbc420b5512a2a"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1ADEB94741EA84BB04219DA402BBC420B5512A2A.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1adeb94741ea84bb04219da402bbc420b5512a2a.xuy")) returned 1 [0154.966] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1C7A6CE17940A6C75210FA60C52339417DEDEEFA", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1C7A6CE17940A6C75210FA60C52339417DEDEEFA", lpFilePart=0x0) returned 0x85 [0154.966] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0154.966] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1C7A6CE17940A6C75210FA60C52339417DEDEEFA" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1c7a6ce17940a6c75210fa60c52339417dedeefa"), fInfoLevelId=0x0, lpFileInformation=0x23723c8 | out: lpFileInformation=0x23723c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x443ff7d8, ftCreationTime.dwHighDateTime=0x1d2d43d, ftLastAccessTime.dwLowDateTime=0x443ff7d8, ftLastAccessTime.dwHighDateTime=0x1d2d43d, ftLastWriteTime.dwLowDateTime=0x44429baa, ftLastWriteTime.dwHighDateTime=0x1d2d43d, nFileSizeHigh=0x0, nFileSizeLow=0x528)) returned 1 [0154.966] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0154.966] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1C7A6CE17940A6C75210FA60C52339417DEDEEFA", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1C7A6CE17940A6C75210FA60C52339417DEDEEFA", lpFilePart=0x0) returned 0x85 [0154.966] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0154.966] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1C7A6CE17940A6C75210FA60C52339417DEDEEFA" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1c7a6ce17940a6c75210fa60c52339417dedeefa"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0154.966] GetFileType (hFile=0x444) returned 0x1 [0154.966] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0154.967] GetFileType (hFile=0x444) returned 0x1 [0154.967] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x528 [0154.968] ReadFile (in: hFile=0x444, lpBuffer=0x2372d08, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x2372d08*, lpNumberOfBytesRead=0x3be5c8*=0x528, lpOverlapped=0x0) returned 1 [0154.976] CloseHandle (hObject=0x444) returned 1 [0155.015] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1C7A6CE17940A6C75210FA60C52339417DEDEEFA", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1C7A6CE17940A6C75210FA60C52339417DEDEEFA", lpFilePart=0x0) returned 0x85 [0155.015] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0155.015] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1C7A6CE17940A6C75210FA60C52339417DEDEEFA" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1c7a6ce17940a6c75210fa60c52339417dedeefa"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0155.017] GetFileType (hFile=0x444) returned 0x1 [0155.017] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0155.017] GetFileType (hFile=0x444) returned 0x1 [0155.017] WriteFile (in: hFile=0x444, lpBuffer=0x21eb1d0*, nNumberOfBytesToWrite=0x530, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x21eb1d0*, lpNumberOfBytesWritten=0x3be4d8*=0x530, lpOverlapped=0x0) returned 1 [0155.018] CloseHandle (hObject=0x444) returned 1 [0155.018] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1C7A6CE17940A6C75210FA60C52339417DEDEEFA", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1C7A6CE17940A6C75210FA60C52339417DEDEEFA", lpFilePart=0x0) returned 0x85 [0155.018] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1C7A6CE17940A6C75210FA60C52339417DEDEEFA.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1C7A6CE17940A6C75210FA60C52339417DEDEEFA.xuy", lpFilePart=0x0) returned 0x89 [0155.018] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0155.018] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1C7A6CE17940A6C75210FA60C52339417DEDEEFA" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1c7a6ce17940a6c75210fa60c52339417dedeefa"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x443ff7d8, ftCreationTime.dwHighDateTime=0x1d2d43d, ftLastAccessTime.dwLowDateTime=0x443ff7d8, ftLastAccessTime.dwHighDateTime=0x1d2d43d, ftLastWriteTime.dwLowDateTime=0x483f62b0, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x530)) returned 1 [0155.018] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0155.018] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1C7A6CE17940A6C75210FA60C52339417DEDEEFA" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1c7a6ce17940a6c75210fa60c52339417dedeefa"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1C7A6CE17940A6C75210FA60C52339417DEDEEFA.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1c7a6ce17940a6c75210fa60c52339417dedeefa.xuy")) returned 1 [0155.019] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1C849477DE15B1F8F2245945F3F44468F58146DF", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1C849477DE15B1F8F2245945F3F44468F58146DF", lpFilePart=0x0) returned 0x85 [0155.019] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0155.019] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1C849477DE15B1F8F2245945F3F44468F58146DF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1c849477de15b1f8f2245945f3f44468f58146df"), fInfoLevelId=0x0, lpFileInformation=0x21ec590 | out: lpFileInformation=0x21ec590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fe0bec3, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3fe0bec3, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x41b7f798, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x11ca)) returned 1 [0155.019] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0155.019] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1C849477DE15B1F8F2245945F3F44468F58146DF", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1C849477DE15B1F8F2245945F3F44468F58146DF", lpFilePart=0x0) returned 0x85 [0155.020] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0155.020] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1C849477DE15B1F8F2245945F3F44468F58146DF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1c849477de15b1f8f2245945f3f44468f58146df"), fInfoLevelId=0x0, lpFileInformation=0x21ec790 | out: lpFileInformation=0x21ec790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fe0bec3, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3fe0bec3, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x41b7f798, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x11ca)) returned 1 [0155.020] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0155.020] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1C849477DE15B1F8F2245945F3F44468F58146DF", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1C849477DE15B1F8F2245945F3F44468F58146DF", lpFilePart=0x0) returned 0x85 [0155.020] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0155.020] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1C849477DE15B1F8F2245945F3F44468F58146DF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1c849477de15b1f8f2245945f3f44468f58146df"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0155.020] GetFileType (hFile=0x444) returned 0x1 [0155.020] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0155.020] GetFileType (hFile=0x444) returned 0x1 [0155.020] ReadFile (in: hFile=0x444, lpBuffer=0x21eecc0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x21eecc0*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0155.165] CloseHandle (hObject=0x444) returned 1 [0155.165] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1C849477DE15B1F8F2245945F3F44468F58146DF", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1C849477DE15B1F8F2245945F3F44468F58146DF", lpFilePart=0x0) returned 0x85 [0155.165] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0155.165] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1C849477DE15B1F8F2245945F3F44468F58146DF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1c849477de15b1f8f2245945f3f44468f58146df"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0155.166] GetFileType (hFile=0x444) returned 0x1 [0155.166] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0155.166] GetFileType (hFile=0x444) returned 0x1 [0155.166] WriteFile (in: hFile=0x444, lpBuffer=0x21ec970*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x21ec970*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0155.166] CloseHandle (hObject=0x444) returned 1 [0155.166] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1C849477DE15B1F8F2245945F3F44468F58146DF", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1C849477DE15B1F8F2245945F3F44468F58146DF", lpFilePart=0x0) returned 0x85 [0155.166] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1C849477DE15B1F8F2245945F3F44468F58146DF.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1C849477DE15B1F8F2245945F3F44468F58146DF.xuy", lpFilePart=0x0) returned 0x89 [0155.166] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0155.166] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1C849477DE15B1F8F2245945F3F44468F58146DF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1c849477de15b1f8f2245945f3f44468f58146df"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fe0bec3, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3fe0bec3, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x4854d346, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0155.166] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0155.166] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1C849477DE15B1F8F2245945F3F44468F58146DF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1c849477de15b1f8f2245945f3f44468f58146df"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1C849477DE15B1F8F2245945F3F44468F58146DF.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1c849477de15b1f8f2245945f3f44468f58146df.xuy")) returned 1 [0155.167] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1D719B3EE2A34A4E2DC9D0A4EAE1DF7948EA5A46", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1D719B3EE2A34A4E2DC9D0A4EAE1DF7948EA5A46", lpFilePart=0x0) returned 0x85 [0155.168] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0155.168] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1D719B3EE2A34A4E2DC9D0A4EAE1DF7948EA5A46" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1d719b3ee2a34a4e2dc9d0a4eae1df7948ea5a46"), fInfoLevelId=0x0, lpFileInformation=0x226b268 | out: lpFileInformation=0x226b268*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a0d9885, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x8a0d9885, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x8a0d9885, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x11cc)) returned 1 [0155.169] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0155.169] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1D719B3EE2A34A4E2DC9D0A4EAE1DF7948EA5A46", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1D719B3EE2A34A4E2DC9D0A4EAE1DF7948EA5A46", lpFilePart=0x0) returned 0x85 [0155.169] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0155.169] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1D719B3EE2A34A4E2DC9D0A4EAE1DF7948EA5A46" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1d719b3ee2a34a4e2dc9d0a4eae1df7948ea5a46"), fInfoLevelId=0x0, lpFileInformation=0x226b468 | out: lpFileInformation=0x226b468*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a0d9885, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x8a0d9885, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x8a0d9885, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x11cc)) returned 1 [0155.169] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0155.169] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1D719B3EE2A34A4E2DC9D0A4EAE1DF7948EA5A46", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1D719B3EE2A34A4E2DC9D0A4EAE1DF7948EA5A46", lpFilePart=0x0) returned 0x85 [0155.169] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0155.169] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1D719B3EE2A34A4E2DC9D0A4EAE1DF7948EA5A46" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1d719b3ee2a34a4e2dc9d0a4eae1df7948ea5a46"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0155.170] GetFileType (hFile=0x444) returned 0x1 [0155.170] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0155.170] GetFileType (hFile=0x444) returned 0x1 [0155.170] ReadFile (in: hFile=0x444, lpBuffer=0x226d998, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x226d998*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0155.193] CloseHandle (hObject=0x444) returned 1 [0155.193] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1D719B3EE2A34A4E2DC9D0A4EAE1DF7948EA5A46", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1D719B3EE2A34A4E2DC9D0A4EAE1DF7948EA5A46", lpFilePart=0x0) returned 0x85 [0155.193] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0155.194] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1D719B3EE2A34A4E2DC9D0A4EAE1DF7948EA5A46" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1d719b3ee2a34a4e2dc9d0a4eae1df7948ea5a46"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0155.194] GetFileType (hFile=0x444) returned 0x1 [0155.194] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0155.194] GetFileType (hFile=0x444) returned 0x1 [0155.194] WriteFile (in: hFile=0x444, lpBuffer=0x226b648*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x226b648*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0155.194] CloseHandle (hObject=0x444) returned 1 [0155.194] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1D719B3EE2A34A4E2DC9D0A4EAE1DF7948EA5A46", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1D719B3EE2A34A4E2DC9D0A4EAE1DF7948EA5A46", lpFilePart=0x0) returned 0x85 [0155.194] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1D719B3EE2A34A4E2DC9D0A4EAE1DF7948EA5A46.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1D719B3EE2A34A4E2DC9D0A4EAE1DF7948EA5A46.xuy", lpFilePart=0x0) returned 0x89 [0155.195] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0155.195] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1D719B3EE2A34A4E2DC9D0A4EAE1DF7948EA5A46" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1d719b3ee2a34a4e2dc9d0a4eae1df7948ea5a46"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a0d9885, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x8a0d9885, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x485997f0, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0155.195] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0155.195] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1D719B3EE2A34A4E2DC9D0A4EAE1DF7948EA5A46" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1d719b3ee2a34a4e2dc9d0a4eae1df7948ea5a46"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1D719B3EE2A34A4E2DC9D0A4EAE1DF7948EA5A46.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1d719b3ee2a34a4e2dc9d0a4eae1df7948ea5a46.xuy")) returned 1 [0155.196] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1D8C7F5B73A4CD02E54F20A75B1FC29BE8E2EE8B", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1D8C7F5B73A4CD02E54F20A75B1FC29BE8E2EE8B", lpFilePart=0x0) returned 0x85 [0155.196] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0155.196] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1D8C7F5B73A4CD02E54F20A75B1FC29BE8E2EE8B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1d8c7f5b73a4cd02e54f20a75b1fc29be8e2ee8b"), fInfoLevelId=0x0, lpFileInformation=0x22e9f40 | out: lpFileInformation=0x22e9f40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x615c4498, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x615c4498, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x615c4498, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xed9)) returned 1 [0155.196] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0155.196] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1D8C7F5B73A4CD02E54F20A75B1FC29BE8E2EE8B", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1D8C7F5B73A4CD02E54F20A75B1FC29BE8E2EE8B", lpFilePart=0x0) returned 0x85 [0155.196] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0155.196] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1D8C7F5B73A4CD02E54F20A75B1FC29BE8E2EE8B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1d8c7f5b73a4cd02e54f20a75b1fc29be8e2ee8b"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0155.196] GetFileType (hFile=0x444) returned 0x1 [0155.196] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0155.197] GetFileType (hFile=0x444) returned 0x1 [0155.197] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xed9 [0155.197] ReadFile (in: hFile=0x444, lpBuffer=0x22eb238, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x22eb238*, lpNumberOfBytesRead=0x3be5c8*=0xed9, lpOverlapped=0x0) returned 1 [0155.203] CloseHandle (hObject=0x444) returned 1 [0155.214] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1D8C7F5B73A4CD02E54F20A75B1FC29BE8E2EE8B", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1D8C7F5B73A4CD02E54F20A75B1FC29BE8E2EE8B", lpFilePart=0x0) returned 0x85 [0155.214] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0155.214] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1D8C7F5B73A4CD02E54F20A75B1FC29BE8E2EE8B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1d8c7f5b73a4cd02e54f20a75b1fc29be8e2ee8b"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0155.216] GetFileType (hFile=0x444) returned 0x1 [0155.216] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0155.216] GetFileType (hFile=0x444) returned 0x1 [0155.216] WriteFile (in: hFile=0x444, lpBuffer=0x2366d28*, nNumberOfBytesToWrite=0xee0, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x2366d28*, lpNumberOfBytesWritten=0x3be4d8*=0xee0, lpOverlapped=0x0) returned 1 [0155.216] CloseHandle (hObject=0x444) returned 1 [0155.217] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1D8C7F5B73A4CD02E54F20A75B1FC29BE8E2EE8B", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1D8C7F5B73A4CD02E54F20A75B1FC29BE8E2EE8B", lpFilePart=0x0) returned 0x85 [0155.217] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1D8C7F5B73A4CD02E54F20A75B1FC29BE8E2EE8B.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1D8C7F5B73A4CD02E54F20A75B1FC29BE8E2EE8B.xuy", lpFilePart=0x0) returned 0x89 [0155.217] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0155.217] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1D8C7F5B73A4CD02E54F20A75B1FC29BE8E2EE8B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1d8c7f5b73a4cd02e54f20a75b1fc29be8e2ee8b"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x615c4498, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x615c4498, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x485e5c60, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xee0)) returned 1 [0155.217] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0155.217] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1D8C7F5B73A4CD02E54F20A75B1FC29BE8E2EE8B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1d8c7f5b73a4cd02e54f20a75b1fc29be8e2ee8b"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1D8C7F5B73A4CD02E54F20A75B1FC29BE8E2EE8B.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1d8c7f5b73a4cd02e54f20a75b1fc29be8e2ee8b.xuy")) returned 1 [0155.218] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1D94118C6FBA173AC2CE7C335C3CB9B7365F1E90", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1D94118C6FBA173AC2CE7C335C3CB9B7365F1E90", lpFilePart=0x0) returned 0x85 [0155.218] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0155.218] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1D94118C6FBA173AC2CE7C335C3CB9B7365F1E90" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1d94118c6fba173ac2ce7c335c3cb9b7365f1e90"), fInfoLevelId=0x0, lpFileInformation=0x23680e8 | out: lpFileInformation=0x23680e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bf98914, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3bf98914, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x3bf9b014, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x528)) returned 1 [0155.218] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0155.218] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1D94118C6FBA173AC2CE7C335C3CB9B7365F1E90", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1D94118C6FBA173AC2CE7C335C3CB9B7365F1E90", lpFilePart=0x0) returned 0x85 [0155.218] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0155.218] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1D94118C6FBA173AC2CE7C335C3CB9B7365F1E90" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1d94118c6fba173ac2ce7c335c3cb9b7365f1e90"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0155.219] GetFileType (hFile=0x444) returned 0x1 [0155.219] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0155.219] GetFileType (hFile=0x444) returned 0x1 [0155.219] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x528 [0155.219] ReadFile (in: hFile=0x444, lpBuffer=0x2368a28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x2368a28*, lpNumberOfBytesRead=0x3be5c8*=0x528, lpOverlapped=0x0) returned 1 [0155.225] CloseHandle (hObject=0x444) returned 1 [0155.266] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1D94118C6FBA173AC2CE7C335C3CB9B7365F1E90", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1D94118C6FBA173AC2CE7C335C3CB9B7365F1E90", lpFilePart=0x0) returned 0x85 [0155.267] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0155.267] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1D94118C6FBA173AC2CE7C335C3CB9B7365F1E90" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1d94118c6fba173ac2ce7c335c3cb9b7365f1e90"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0155.268] GetFileType (hFile=0x444) returned 0x1 [0155.268] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0155.268] GetFileType (hFile=0x444) returned 0x1 [0155.269] WriteFile (in: hFile=0x444, lpBuffer=0x21e14b0*, nNumberOfBytesToWrite=0x530, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x21e14b0*, lpNumberOfBytesWritten=0x3be4d8*=0x530, lpOverlapped=0x0) returned 1 [0155.269] CloseHandle (hObject=0x444) returned 1 [0155.269] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1D94118C6FBA173AC2CE7C335C3CB9B7365F1E90", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1D94118C6FBA173AC2CE7C335C3CB9B7365F1E90", lpFilePart=0x0) returned 0x85 [0155.270] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1D94118C6FBA173AC2CE7C335C3CB9B7365F1E90.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1D94118C6FBA173AC2CE7C335C3CB9B7365F1E90.xuy", lpFilePart=0x0) returned 0x89 [0155.270] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0155.270] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1D94118C6FBA173AC2CE7C335C3CB9B7365F1E90" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1d94118c6fba173ac2ce7c335c3cb9b7365f1e90"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bf98914, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3bf98914, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x48658465, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x530)) returned 1 [0155.270] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0155.270] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1D94118C6FBA173AC2CE7C335C3CB9B7365F1E90" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1d94118c6fba173ac2ce7c335c3cb9b7365f1e90"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1D94118C6FBA173AC2CE7C335C3CB9B7365F1E90.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1d94118c6fba173ac2ce7c335c3cb9b7365f1e90.xuy")) returned 1 [0155.271] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1DBC56BBF48819D9CC9E96F72309A2D366DD1B72", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1DBC56BBF48819D9CC9E96F72309A2D366DD1B72", lpFilePart=0x0) returned 0x85 [0155.271] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0155.271] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1DBC56BBF48819D9CC9E96F72309A2D366DD1B72" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1dbc56bbf48819d9cc9e96f72309a2d366dd1b72"), fInfoLevelId=0x0, lpFileInformation=0x21e2870 | out: lpFileInformation=0x21e2870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f0883ae, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3f0883ae, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x41b7344a, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x2aa0)) returned 1 [0155.271] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0155.271] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1DBC56BBF48819D9CC9E96F72309A2D366DD1B72", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1DBC56BBF48819D9CC9E96F72309A2D366DD1B72", lpFilePart=0x0) returned 0x85 [0155.271] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0155.272] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1DBC56BBF48819D9CC9E96F72309A2D366DD1B72" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1dbc56bbf48819d9cc9e96f72309a2d366dd1b72"), fInfoLevelId=0x0, lpFileInformation=0x21e2a70 | out: lpFileInformation=0x21e2a70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f0883ae, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3f0883ae, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x41b7344a, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x2aa0)) returned 1 [0155.272] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0155.272] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1DBC56BBF48819D9CC9E96F72309A2D366DD1B72", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1DBC56BBF48819D9CC9E96F72309A2D366DD1B72", lpFilePart=0x0) returned 0x85 [0155.272] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0155.272] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1DBC56BBF48819D9CC9E96F72309A2D366DD1B72" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1dbc56bbf48819d9cc9e96f72309a2d366dd1b72"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0155.273] GetFileType (hFile=0x444) returned 0x1 [0155.273] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0155.273] GetFileType (hFile=0x444) returned 0x1 [0155.273] ReadFile (in: hFile=0x444, lpBuffer=0x21e4fa0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x21e4fa0*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0155.294] CloseHandle (hObject=0x444) returned 1 [0155.294] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1DBC56BBF48819D9CC9E96F72309A2D366DD1B72", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1DBC56BBF48819D9CC9E96F72309A2D366DD1B72", lpFilePart=0x0) returned 0x85 [0155.295] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0155.295] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1DBC56BBF48819D9CC9E96F72309A2D366DD1B72" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1dbc56bbf48819d9cc9e96f72309a2d366dd1b72"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0155.295] GetFileType (hFile=0x444) returned 0x1 [0155.295] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0155.295] GetFileType (hFile=0x444) returned 0x1 [0155.295] WriteFile (in: hFile=0x444, lpBuffer=0x21e2c50*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x21e2c50*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0155.295] CloseHandle (hObject=0x444) returned 1 [0155.296] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1DBC56BBF48819D9CC9E96F72309A2D366DD1B72", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1DBC56BBF48819D9CC9E96F72309A2D366DD1B72", lpFilePart=0x0) returned 0x85 [0155.296] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1DBC56BBF48819D9CC9E96F72309A2D366DD1B72.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1DBC56BBF48819D9CC9E96F72309A2D366DD1B72.xuy", lpFilePart=0x0) returned 0x89 [0155.296] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0155.296] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1DBC56BBF48819D9CC9E96F72309A2D366DD1B72" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1dbc56bbf48819d9cc9e96f72309a2d366dd1b72"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f0883ae, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3f0883ae, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x486a486b, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2aa0)) returned 1 [0155.296] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0155.296] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1DBC56BBF48819D9CC9E96F72309A2D366DD1B72" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1dbc56bbf48819d9cc9e96f72309a2d366dd1b72"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1DBC56BBF48819D9CC9E96F72309A2D366DD1B72.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1dbc56bbf48819d9cc9e96f72309a2d366dd1b72.xuy")) returned 1 [0155.297] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1DCB6E830B5F6182674047BC07BE94E869A82DC1", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1DCB6E830B5F6182674047BC07BE94E869A82DC1", lpFilePart=0x0) returned 0x85 [0155.297] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0155.297] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1DCB6E830B5F6182674047BC07BE94E869A82DC1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1dcb6e830b5f6182674047bc07be94e869a82dc1"), fInfoLevelId=0x0, lpFileInformation=0x2261548 | out: lpFileInformation=0x2261548*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6159e1e8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x6159e1e8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x6159e1e8, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xe55)) returned 1 [0155.298] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0155.298] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1DCB6E830B5F6182674047BC07BE94E869A82DC1", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1DCB6E830B5F6182674047BC07BE94E869A82DC1", lpFilePart=0x0) returned 0x85 [0155.298] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0155.298] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1DCB6E830B5F6182674047BC07BE94E869A82DC1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1dcb6e830b5f6182674047bc07be94e869a82dc1"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0155.298] GetFileType (hFile=0x444) returned 0x1 [0155.298] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0155.298] GetFileType (hFile=0x444) returned 0x1 [0155.298] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xe55 [0155.298] ReadFile (in: hFile=0x444, lpBuffer=0x22627b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x22627b8*, lpNumberOfBytesRead=0x3be5c8*=0xe55, lpOverlapped=0x0) returned 1 [0155.304] CloseHandle (hObject=0x444) returned 1 [0155.315] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1DCB6E830B5F6182674047BC07BE94E869A82DC1", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1DCB6E830B5F6182674047BC07BE94E869A82DC1", lpFilePart=0x0) returned 0x85 [0155.315] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0155.315] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1DCB6E830B5F6182674047BC07BE94E869A82DC1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1dcb6e830b5f6182674047bc07be94e869a82dc1"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0155.316] GetFileType (hFile=0x444) returned 0x1 [0155.316] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0155.316] GetFileType (hFile=0x444) returned 0x1 [0155.317] WriteFile (in: hFile=0x444, lpBuffer=0x22de030*, nNumberOfBytesToWrite=0xe60, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x22de030*, lpNumberOfBytesWritten=0x3be4d8*=0xe60, lpOverlapped=0x0) returned 1 [0155.317] CloseHandle (hObject=0x444) returned 1 [0155.317] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1DCB6E830B5F6182674047BC07BE94E869A82DC1", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1DCB6E830B5F6182674047BC07BE94E869A82DC1", lpFilePart=0x0) returned 0x85 [0155.317] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1DCB6E830B5F6182674047BC07BE94E869A82DC1.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1DCB6E830B5F6182674047BC07BE94E869A82DC1.xuy", lpFilePart=0x0) returned 0x89 [0155.318] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0155.318] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1DCB6E830B5F6182674047BC07BE94E869A82DC1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1dcb6e830b5f6182674047bc07be94e869a82dc1"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6159e1e8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x6159e1e8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x486caa53, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xe60)) returned 1 [0155.318] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0155.318] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1DCB6E830B5F6182674047BC07BE94E869A82DC1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1dcb6e830b5f6182674047bc07be94e869a82dc1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1DCB6E830B5F6182674047BC07BE94E869A82DC1.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1dcb6e830b5f6182674047bc07be94e869a82dc1.xuy")) returned 1 [0155.319] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1E4C1DE6D9BC3C738CB37D3D4E0CCCDBDD4EC3E7", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1E4C1DE6D9BC3C738CB37D3D4E0CCCDBDD4EC3E7", lpFilePart=0x0) returned 0x85 [0155.319] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0155.319] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1E4C1DE6D9BC3C738CB37D3D4E0CCCDBDD4EC3E7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1e4c1de6d9bc3c738cb37d3d4e0cccdbdd4ec3e7"), fInfoLevelId=0x0, lpFileInformation=0x22df3f0 | out: lpFileInformation=0x22df3f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x466cfd21, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x466cfd21, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x466cfd21, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0x489)) returned 1 [0155.319] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0155.319] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1E4C1DE6D9BC3C738CB37D3D4E0CCCDBDD4EC3E7", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1E4C1DE6D9BC3C738CB37D3D4E0CCCDBDD4EC3E7", lpFilePart=0x0) returned 0x85 [0155.319] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0155.319] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1E4C1DE6D9BC3C738CB37D3D4E0CCCDBDD4EC3E7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1e4c1de6d9bc3c738cb37d3d4e0cccdbdd4ec3e7"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0155.319] GetFileType (hFile=0x444) returned 0x1 [0155.319] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0155.319] GetFileType (hFile=0x444) returned 0x1 [0155.320] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x489 [0155.320] ReadFile (in: hFile=0x444, lpBuffer=0x22dfc98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x22dfc98*, lpNumberOfBytesRead=0x3be5c8*=0x489, lpOverlapped=0x0) returned 1 [0155.321] CloseHandle (hObject=0x444) returned 1 [0155.332] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1E4C1DE6D9BC3C738CB37D3D4E0CCCDBDD4EC3E7", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1E4C1DE6D9BC3C738CB37D3D4E0CCCDBDD4EC3E7", lpFilePart=0x0) returned 0x85 [0155.332] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0155.332] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1E4C1DE6D9BC3C738CB37D3D4E0CCCDBDD4EC3E7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1e4c1de6d9bc3c738cb37d3d4e0cccdbdd4ec3e7"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0155.333] GetFileType (hFile=0x444) returned 0x1 [0155.334] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0155.334] GetFileType (hFile=0x444) returned 0x1 [0155.334] WriteFile (in: hFile=0x444, lpBuffer=0x23583f8*, nNumberOfBytesToWrite=0x490, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x23583f8*, lpNumberOfBytesWritten=0x3be4d8*=0x490, lpOverlapped=0x0) returned 1 [0155.334] CloseHandle (hObject=0x444) returned 1 [0155.334] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1E4C1DE6D9BC3C738CB37D3D4E0CCCDBDD4EC3E7", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1E4C1DE6D9BC3C738CB37D3D4E0CCCDBDD4EC3E7", lpFilePart=0x0) returned 0x85 [0155.335] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1E4C1DE6D9BC3C738CB37D3D4E0CCCDBDD4EC3E7.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1E4C1DE6D9BC3C738CB37D3D4E0CCCDBDD4EC3E7.xuy", lpFilePart=0x0) returned 0x89 [0155.335] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0155.335] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1E4C1DE6D9BC3C738CB37D3D4E0CCCDBDD4EC3E7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1e4c1de6d9bc3c738cb37d3d4e0cccdbdd4ec3e7"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x466cfd21, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x466cfd21, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x486f0fed, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x490)) returned 1 [0155.335] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0155.335] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1E4C1DE6D9BC3C738CB37D3D4E0CCCDBDD4EC3E7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1e4c1de6d9bc3c738cb37d3d4e0cccdbdd4ec3e7"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1E4C1DE6D9BC3C738CB37D3D4E0CCCDBDD4EC3E7.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1e4c1de6d9bc3c738cb37d3d4e0cccdbdd4ec3e7.xuy")) returned 1 [0155.336] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1E654765DD4C0B7A97A94BA7430FF4F02539B4D4", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1E654765DD4C0B7A97A94BA7430FF4F02539B4D4", lpFilePart=0x0) returned 0x85 [0155.336] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0155.336] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1E654765DD4C0B7A97A94BA7430FF4F02539B4D4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1e654765dd4c0b7a97a94ba7430ff4f02539b4d4"), fInfoLevelId=0x0, lpFileInformation=0x23597b8 | out: lpFileInformation=0x23597b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x839ec8a0, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x839ec8a0, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x839eefb6, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0xaf5)) returned 1 [0155.336] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0155.336] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1E654765DD4C0B7A97A94BA7430FF4F02539B4D4", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1E654765DD4C0B7A97A94BA7430FF4F02539B4D4", lpFilePart=0x0) returned 0x85 [0155.336] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0155.336] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1E654765DD4C0B7A97A94BA7430FF4F02539B4D4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1e654765dd4c0b7a97a94ba7430ff4f02539b4d4"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0155.336] GetFileType (hFile=0x444) returned 0x1 [0155.336] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0155.336] GetFileType (hFile=0x444) returned 0x1 [0155.336] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xaf5 [0155.337] ReadFile (in: hFile=0x444, lpBuffer=0x235a6c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x235a6c8*, lpNumberOfBytesRead=0x3be5c8*=0xaf5, lpOverlapped=0x0) returned 1 [0155.339] CloseHandle (hObject=0x444) returned 1 [0155.378] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1E654765DD4C0B7A97A94BA7430FF4F02539B4D4", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1E654765DD4C0B7A97A94BA7430FF4F02539B4D4", lpFilePart=0x0) returned 0x85 [0155.378] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0155.378] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1E654765DD4C0B7A97A94BA7430FF4F02539B4D4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1e654765dd4c0b7a97a94ba7430ff4f02539b4d4"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0155.380] GetFileType (hFile=0x444) returned 0x1 [0155.380] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0155.380] GetFileType (hFile=0x444) returned 0x1 [0155.380] WriteFile (in: hFile=0x444, lpBuffer=0x21d5418*, nNumberOfBytesToWrite=0xb00, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x21d5418*, lpNumberOfBytesWritten=0x3be4d8*=0xb00, lpOverlapped=0x0) returned 1 [0155.381] CloseHandle (hObject=0x444) returned 1 [0155.381] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1E654765DD4C0B7A97A94BA7430FF4F02539B4D4", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1E654765DD4C0B7A97A94BA7430FF4F02539B4D4", lpFilePart=0x0) returned 0x85 [0155.381] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1E654765DD4C0B7A97A94BA7430FF4F02539B4D4.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1E654765DD4C0B7A97A94BA7430FF4F02539B4D4.xuy", lpFilePart=0x0) returned 0x89 [0155.381] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0155.381] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1E654765DD4C0B7A97A94BA7430FF4F02539B4D4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1e654765dd4c0b7a97a94ba7430ff4f02539b4d4"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x839ec8a0, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x839ec8a0, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x487634ab, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xb00)) returned 1 [0155.381] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0155.381] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1E654765DD4C0B7A97A94BA7430FF4F02539B4D4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1e654765dd4c0b7a97a94ba7430ff4f02539b4d4"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1E654765DD4C0B7A97A94BA7430FF4F02539B4D4.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1e654765dd4c0b7a97a94ba7430ff4f02539b4d4.xuy")) returned 1 [0155.382] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1EB2E405E2B5AFF18DBD87BBFB385EED242A1AB5", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1EB2E405E2B5AFF18DBD87BBFB385EED242A1AB5", lpFilePart=0x0) returned 0x85 [0155.382] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0155.382] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1EB2E405E2B5AFF18DBD87BBFB385EED242A1AB5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1eb2e405e2b5aff18dbd87bbfb385eed242a1ab5"), fInfoLevelId=0x0, lpFileInformation=0x21d67d8 | out: lpFileInformation=0x21d67d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6159e1e8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x6159e1e8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x6159e1e8, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xf9e)) returned 1 [0155.383] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0155.383] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1EB2E405E2B5AFF18DBD87BBFB385EED242A1AB5", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1EB2E405E2B5AFF18DBD87BBFB385EED242A1AB5", lpFilePart=0x0) returned 0x85 [0155.383] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0155.383] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1EB2E405E2B5AFF18DBD87BBFB385EED242A1AB5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1eb2e405e2b5aff18dbd87bbfb385eed242a1ab5"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0155.383] GetFileType (hFile=0x444) returned 0x1 [0155.383] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0155.383] GetFileType (hFile=0x444) returned 0x1 [0155.383] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xf9e [0155.383] ReadFile (in: hFile=0x444, lpBuffer=0x21d7b90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x21d7b90*, lpNumberOfBytesRead=0x3be5c8*=0xf9e, lpOverlapped=0x0) returned 1 [0155.384] CloseHandle (hObject=0x444) returned 1 [0155.395] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1EB2E405E2B5AFF18DBD87BBFB385EED242A1AB5", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1EB2E405E2B5AFF18DBD87BBFB385EED242A1AB5", lpFilePart=0x0) returned 0x85 [0155.395] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0155.395] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1EB2E405E2B5AFF18DBD87BBFB385EED242A1AB5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1eb2e405e2b5aff18dbd87bbfb385eed242a1ab5"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0155.397] GetFileType (hFile=0x444) returned 0x1 [0155.397] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0155.397] GetFileType (hFile=0x444) returned 0x1 [0155.397] WriteFile (in: hFile=0x444, lpBuffer=0x2253a40*, nNumberOfBytesToWrite=0xfa0, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x2253a40*, lpNumberOfBytesWritten=0x3be4d8*=0xfa0, lpOverlapped=0x0) returned 1 [0155.397] CloseHandle (hObject=0x444) returned 1 [0155.397] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1EB2E405E2B5AFF18DBD87BBFB385EED242A1AB5", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1EB2E405E2B5AFF18DBD87BBFB385EED242A1AB5", lpFilePart=0x0) returned 0x85 [0155.398] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1EB2E405E2B5AFF18DBD87BBFB385EED242A1AB5.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1EB2E405E2B5AFF18DBD87BBFB385EED242A1AB5.xuy", lpFilePart=0x0) returned 0x89 [0155.398] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0155.398] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1EB2E405E2B5AFF18DBD87BBFB385EED242A1AB5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1eb2e405e2b5aff18dbd87bbfb385eed242a1ab5"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6159e1e8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x6159e1e8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x48789685, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xfa0)) returned 1 [0155.398] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0155.398] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1EB2E405E2B5AFF18DBD87BBFB385EED242A1AB5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1eb2e405e2b5aff18dbd87bbfb385eed242a1ab5"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1EB2E405E2B5AFF18DBD87BBFB385EED242A1AB5.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1eb2e405e2b5aff18dbd87bbfb385eed242a1ab5.xuy")) returned 1 [0155.399] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1F03C5BEB6690C5E65013ADC12747A8FB0266E74", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1F03C5BEB6690C5E65013ADC12747A8FB0266E74", lpFilePart=0x0) returned 0x85 [0155.399] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0155.399] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1F03C5BEB6690C5E65013ADC12747A8FB0266E74" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1f03c5beb6690c5e65013adc12747a8fb0266e74"), fInfoLevelId=0x0, lpFileInformation=0x2254e00 | out: lpFileInformation=0x2254e00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x544f75b8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x544f75b8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x544f75b8, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x34f8)) returned 1 [0155.399] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0155.399] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1F03C5BEB6690C5E65013ADC12747A8FB0266E74", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1F03C5BEB6690C5E65013ADC12747A8FB0266E74", lpFilePart=0x0) returned 0x85 [0155.399] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0155.399] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1F03C5BEB6690C5E65013ADC12747A8FB0266E74" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1f03c5beb6690c5e65013adc12747a8fb0266e74"), fInfoLevelId=0x0, lpFileInformation=0x2255000 | out: lpFileInformation=0x2255000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x544f75b8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x544f75b8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x544f75b8, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x34f8)) returned 1 [0155.399] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0155.399] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1F03C5BEB6690C5E65013ADC12747A8FB0266E74", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1F03C5BEB6690C5E65013ADC12747A8FB0266E74", lpFilePart=0x0) returned 0x85 [0155.400] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0155.400] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1F03C5BEB6690C5E65013ADC12747A8FB0266E74" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1f03c5beb6690c5e65013adc12747a8fb0266e74"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0155.400] GetFileType (hFile=0x444) returned 0x1 [0155.400] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0155.400] GetFileType (hFile=0x444) returned 0x1 [0155.400] ReadFile (in: hFile=0x444, lpBuffer=0x2257530, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x2257530*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0155.416] CloseHandle (hObject=0x444) returned 1 [0155.416] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1F03C5BEB6690C5E65013ADC12747A8FB0266E74", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1F03C5BEB6690C5E65013ADC12747A8FB0266E74", lpFilePart=0x0) returned 0x85 [0155.416] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0155.416] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1F03C5BEB6690C5E65013ADC12747A8FB0266E74" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1f03c5beb6690c5e65013adc12747a8fb0266e74"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0155.417] GetFileType (hFile=0x444) returned 0x1 [0155.417] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0155.417] GetFileType (hFile=0x444) returned 0x1 [0155.417] WriteFile (in: hFile=0x444, lpBuffer=0x22551e0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x22551e0*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0155.417] CloseHandle (hObject=0x444) returned 1 [0155.417] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1F03C5BEB6690C5E65013ADC12747A8FB0266E74", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1F03C5BEB6690C5E65013ADC12747A8FB0266E74", lpFilePart=0x0) returned 0x85 [0155.417] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1F03C5BEB6690C5E65013ADC12747A8FB0266E74.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1F03C5BEB6690C5E65013ADC12747A8FB0266E74.xuy", lpFilePart=0x0) returned 0x89 [0155.417] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0155.417] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1F03C5BEB6690C5E65013ADC12747A8FB0266E74" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1f03c5beb6690c5e65013adc12747a8fb0266e74"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x544f75b8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x544f75b8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x487af831, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x34f8)) returned 1 [0155.417] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0155.417] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1F03C5BEB6690C5E65013ADC12747A8FB0266E74" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1f03c5beb6690c5e65013adc12747a8fb0266e74"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1F03C5BEB6690C5E65013ADC12747A8FB0266E74.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1f03c5beb6690c5e65013adc12747a8fb0266e74.xuy")) returned 1 [0155.419] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1F101A980B722E67F1FB3F0366EA9E520FB47D1B", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1F101A980B722E67F1FB3F0366EA9E520FB47D1B", lpFilePart=0x0) returned 0x85 [0155.419] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0155.419] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1F101A980B722E67F1FB3F0366EA9E520FB47D1B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1f101a980b722e67f1fb3f0366ea9e520fb47d1b"), fInfoLevelId=0x0, lpFileInformation=0x22d3ad8 | out: lpFileInformation=0x22d3ad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87875893, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x87875893, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x87877fa8, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x2607)) returned 1 [0155.419] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0155.420] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1F101A980B722E67F1FB3F0366EA9E520FB47D1B", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1F101A980B722E67F1FB3F0366EA9E520FB47D1B", lpFilePart=0x0) returned 0x85 [0155.420] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0155.420] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1F101A980B722E67F1FB3F0366EA9E520FB47D1B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1f101a980b722e67f1fb3f0366ea9e520fb47d1b"), fInfoLevelId=0x0, lpFileInformation=0x22d3cd8 | out: lpFileInformation=0x22d3cd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87875893, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x87875893, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x87877fa8, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x2607)) returned 1 [0155.420] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0155.420] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1F101A980B722E67F1FB3F0366EA9E520FB47D1B", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1F101A980B722E67F1FB3F0366EA9E520FB47D1B", lpFilePart=0x0) returned 0x85 [0155.420] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0155.420] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1F101A980B722E67F1FB3F0366EA9E520FB47D1B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1f101a980b722e67f1fb3f0366ea9e520fb47d1b"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0155.421] GetFileType (hFile=0x444) returned 0x1 [0155.421] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0155.421] GetFileType (hFile=0x444) returned 0x1 [0155.421] ReadFile (in: hFile=0x444, lpBuffer=0x22d6208, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x22d6208*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0155.433] CloseHandle (hObject=0x444) returned 1 [0155.434] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1F101A980B722E67F1FB3F0366EA9E520FB47D1B", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1F101A980B722E67F1FB3F0366EA9E520FB47D1B", lpFilePart=0x0) returned 0x85 [0155.434] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0155.434] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1F101A980B722E67F1FB3F0366EA9E520FB47D1B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1f101a980b722e67f1fb3f0366ea9e520fb47d1b"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0155.434] GetFileType (hFile=0x444) returned 0x1 [0155.434] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0155.434] GetFileType (hFile=0x444) returned 0x1 [0155.434] WriteFile (in: hFile=0x444, lpBuffer=0x22d3eb8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x22d3eb8*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0155.434] CloseHandle (hObject=0x444) returned 1 [0155.434] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1F101A980B722E67F1FB3F0366EA9E520FB47D1B", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1F101A980B722E67F1FB3F0366EA9E520FB47D1B", lpFilePart=0x0) returned 0x85 [0155.435] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1F101A980B722E67F1FB3F0366EA9E520FB47D1B.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1F101A980B722E67F1FB3F0366EA9E520FB47D1B.xuy", lpFilePart=0x0) returned 0x89 [0155.435] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0155.435] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1F101A980B722E67F1FB3F0366EA9E520FB47D1B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1f101a980b722e67f1fb3f0366ea9e520fb47d1b"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87875893, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x87875893, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x487d5ac6, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2607)) returned 1 [0155.435] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0155.435] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1F101A980B722E67F1FB3F0366EA9E520FB47D1B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1f101a980b722e67f1fb3f0366ea9e520fb47d1b"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1F101A980B722E67F1FB3F0366EA9E520FB47D1B.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1f101a980b722e67f1fb3f0366ea9e520fb47d1b.xuy")) returned 1 [0155.436] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1F58B2F46F6C2DE8FF822405AC18A18128D0BBBC", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1F58B2F46F6C2DE8FF822405AC18A18128D0BBBC", lpFilePart=0x0) returned 0x85 [0155.436] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0155.436] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1F58B2F46F6C2DE8FF822405AC18A18128D0BBBC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1f58b2f46f6c2de8ff822405ac18a18128d0bbbc"), fInfoLevelId=0x0, lpFileInformation=0x23527b0 | out: lpFileInformation=0x23527b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48d30ecb, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x48d30ecb, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x48d30ecb, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0x190)) returned 1 [0155.437] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0155.437] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1F58B2F46F6C2DE8FF822405AC18A18128D0BBBC", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1F58B2F46F6C2DE8FF822405AC18A18128D0BBBC", lpFilePart=0x0) returned 0x85 [0155.437] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0155.437] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1F58B2F46F6C2DE8FF822405AC18A18128D0BBBC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1f58b2f46f6c2de8ff822405ac18a18128d0bbbc"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0155.437] GetFileType (hFile=0x444) returned 0x1 [0155.437] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0155.437] GetFileType (hFile=0x444) returned 0x1 [0155.437] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x190 [0155.437] ReadFile (in: hFile=0x444, lpBuffer=0x2352d58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x2352d58*, lpNumberOfBytesRead=0x3be5c8*=0x190, lpOverlapped=0x0) returned 1 [0155.438] CloseHandle (hObject=0x444) returned 1 [0155.479] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1F58B2F46F6C2DE8FF822405AC18A18128D0BBBC", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1F58B2F46F6C2DE8FF822405AC18A18128D0BBBC", lpFilePart=0x0) returned 0x85 [0155.479] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0155.479] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1F58B2F46F6C2DE8FF822405AC18A18128D0BBBC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1f58b2f46f6c2de8ff822405ac18a18128d0bbbc"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0155.481] GetFileType (hFile=0x444) returned 0x1 [0155.481] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0155.481] GetFileType (hFile=0x444) returned 0x1 [0155.481] WriteFile (in: hFile=0x444, lpBuffer=0x21c9ca0*, nNumberOfBytesToWrite=0x1a0, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x21c9ca0*, lpNumberOfBytesWritten=0x3be4d8*=0x1a0, lpOverlapped=0x0) returned 1 [0155.482] CloseHandle (hObject=0x444) returned 1 [0155.483] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1F58B2F46F6C2DE8FF822405AC18A18128D0BBBC", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1F58B2F46F6C2DE8FF822405AC18A18128D0BBBC", lpFilePart=0x0) returned 0x85 [0155.483] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1F58B2F46F6C2DE8FF822405AC18A18128D0BBBC.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1F58B2F46F6C2DE8FF822405AC18A18128D0BBBC.xuy", lpFilePart=0x0) returned 0x89 [0155.483] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0155.483] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1F58B2F46F6C2DE8FF822405AC18A18128D0BBBC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1f58b2f46f6c2de8ff822405ac18a18128d0bbbc"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48d30ecb, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x48d30ecb, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x4886e43c, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x1a0)) returned 1 [0155.483] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0155.483] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1F58B2F46F6C2DE8FF822405AC18A18128D0BBBC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1f58b2f46f6c2de8ff822405ac18a18128d0bbbc"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1F58B2F46F6C2DE8FF822405AC18A18128D0BBBC.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1f58b2f46f6c2de8ff822405ac18a18128d0bbbc.xuy")) returned 1 [0155.485] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\20343A86FB834223CC13D33560122837208F7563", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\20343A86FB834223CC13D33560122837208F7563", lpFilePart=0x0) returned 0x85 [0155.485] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0155.485] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\20343A86FB834223CC13D33560122837208F7563" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\20343a86fb834223cc13d33560122837208f7563"), fInfoLevelId=0x0, lpFileInformation=0x21cb060 | out: lpFileInformation=0x21cb060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd94dc4f, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xdd94dc4f, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xe06175fa, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x7ae0)) returned 1 [0155.485] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0155.485] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\20343A86FB834223CC13D33560122837208F7563", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\20343A86FB834223CC13D33560122837208F7563", lpFilePart=0x0) returned 0x85 [0155.485] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0155.485] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\20343A86FB834223CC13D33560122837208F7563" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\20343a86fb834223cc13d33560122837208f7563"), fInfoLevelId=0x0, lpFileInformation=0x21cb260 | out: lpFileInformation=0x21cb260*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd94dc4f, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xdd94dc4f, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xe06175fa, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x7ae0)) returned 1 [0155.485] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0155.485] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\20343A86FB834223CC13D33560122837208F7563", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\20343A86FB834223CC13D33560122837208F7563", lpFilePart=0x0) returned 0x85 [0155.485] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0155.485] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\20343A86FB834223CC13D33560122837208F7563" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\20343a86fb834223cc13d33560122837208f7563"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0155.486] GetFileType (hFile=0x444) returned 0x1 [0155.486] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0155.486] GetFileType (hFile=0x444) returned 0x1 [0155.486] ReadFile (in: hFile=0x444, lpBuffer=0x21cd790, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x21cd790*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0155.501] CloseHandle (hObject=0x444) returned 1 [0155.501] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\20343A86FB834223CC13D33560122837208F7563", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\20343A86FB834223CC13D33560122837208F7563", lpFilePart=0x0) returned 0x85 [0155.501] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0155.501] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\20343A86FB834223CC13D33560122837208F7563" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\20343a86fb834223cc13d33560122837208f7563"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0155.501] GetFileType (hFile=0x444) returned 0x1 [0155.501] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0155.501] GetFileType (hFile=0x444) returned 0x1 [0155.502] WriteFile (in: hFile=0x444, lpBuffer=0x21cb440*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x21cb440*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0155.502] CloseHandle (hObject=0x444) returned 1 [0155.502] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\20343A86FB834223CC13D33560122837208F7563", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\20343A86FB834223CC13D33560122837208F7563", lpFilePart=0x0) returned 0x85 [0155.502] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\20343A86FB834223CC13D33560122837208F7563.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\20343A86FB834223CC13D33560122837208F7563.xuy", lpFilePart=0x0) returned 0x89 [0155.502] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0155.502] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\20343A86FB834223CC13D33560122837208F7563" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\20343a86fb834223cc13d33560122837208f7563"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd94dc4f, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xdd94dc4f, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x48894557, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x7ae0)) returned 1 [0155.502] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0155.502] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\20343A86FB834223CC13D33560122837208F7563" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\20343a86fb834223cc13d33560122837208f7563"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\20343A86FB834223CC13D33560122837208F7563.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\20343a86fb834223cc13d33560122837208f7563.xuy")) returned 1 [0155.503] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\209D12DF1554481FBDC90931601991A892F798E7", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\209D12DF1554481FBDC90931601991A892F798E7", lpFilePart=0x0) returned 0x85 [0155.503] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0155.503] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\209D12DF1554481FBDC90931601991A892F798E7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\209d12df1554481fbdc90931601991a892f798e7"), fInfoLevelId=0x0, lpFileInformation=0x2249d38 | out: lpFileInformation=0x2249d38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x615c4498, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x615c4498, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x615c4498, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xed9)) returned 1 [0155.504] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0155.504] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\209D12DF1554481FBDC90931601991A892F798E7", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\209D12DF1554481FBDC90931601991A892F798E7", lpFilePart=0x0) returned 0x85 [0155.504] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0155.504] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\209D12DF1554481FBDC90931601991A892F798E7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\209d12df1554481fbdc90931601991a892f798e7"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0155.504] GetFileType (hFile=0x444) returned 0x1 [0155.504] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0155.504] GetFileType (hFile=0x444) returned 0x1 [0155.504] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xed9 [0155.505] ReadFile (in: hFile=0x444, lpBuffer=0x224b030, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x224b030*, lpNumberOfBytesRead=0x3be5c8*=0xed9, lpOverlapped=0x0) returned 1 [0155.561] CloseHandle (hObject=0x444) returned 1 [0155.572] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\209D12DF1554481FBDC90931601991A892F798E7", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\209D12DF1554481FBDC90931601991A892F798E7", lpFilePart=0x0) returned 0x85 [0155.572] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0155.572] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\209D12DF1554481FBDC90931601991A892F798E7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\209d12df1554481fbdc90931601991a892f798e7"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0155.574] GetFileType (hFile=0x444) returned 0x1 [0155.574] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0155.574] GetFileType (hFile=0x444) returned 0x1 [0155.574] WriteFile (in: hFile=0x444, lpBuffer=0x22c6b20*, nNumberOfBytesToWrite=0xee0, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x22c6b20*, lpNumberOfBytesWritten=0x3be4d8*=0xee0, lpOverlapped=0x0) returned 1 [0155.574] CloseHandle (hObject=0x444) returned 1 [0155.574] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\209D12DF1554481FBDC90931601991A892F798E7", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\209D12DF1554481FBDC90931601991A892F798E7", lpFilePart=0x0) returned 0x85 [0155.575] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\209D12DF1554481FBDC90931601991A892F798E7.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\209D12DF1554481FBDC90931601991A892F798E7.xuy", lpFilePart=0x0) returned 0x89 [0155.575] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0155.575] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\209D12DF1554481FBDC90931601991A892F798E7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\209d12df1554481fbdc90931601991a892f798e7"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x615c4498, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x615c4498, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x4892d12e, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xee0)) returned 1 [0155.575] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0155.575] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\209D12DF1554481FBDC90931601991A892F798E7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\209d12df1554481fbdc90931601991a892f798e7"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\209D12DF1554481FBDC90931601991A892F798E7.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\209d12df1554481fbdc90931601991a892f798e7.xuy")) returned 1 [0155.577] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2118755562A693569EE2423CB1A2136CB8F1D9CC", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2118755562A693569EE2423CB1A2136CB8F1D9CC", lpFilePart=0x0) returned 0x85 [0155.577] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0155.577] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2118755562A693569EE2423CB1A2136CB8F1D9CC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2118755562a693569ee2423cb1a2136cb8f1d9cc"), fInfoLevelId=0x0, lpFileInformation=0x22c7ee0 | out: lpFileInformation=0x22c7ee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ed84046, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x3ed84046, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x3ed84046, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0xa9a)) returned 1 [0155.578] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0155.578] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2118755562A693569EE2423CB1A2136CB8F1D9CC", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2118755562A693569EE2423CB1A2136CB8F1D9CC", lpFilePart=0x0) returned 0x85 [0155.578] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0155.578] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2118755562A693569EE2423CB1A2136CB8F1D9CC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2118755562a693569ee2423cb1a2136cb8f1d9cc"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0155.578] GetFileType (hFile=0x444) returned 0x1 [0155.578] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0155.578] GetFileType (hFile=0x444) returned 0x1 [0155.578] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xa9a [0155.578] ReadFile (in: hFile=0x444, lpBuffer=0x22c8d98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x22c8d98*, lpNumberOfBytesRead=0x3be5c8*=0xa9a, lpOverlapped=0x0) returned 1 [0155.585] CloseHandle (hObject=0x444) returned 1 [0155.596] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2118755562A693569EE2423CB1A2136CB8F1D9CC", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2118755562A693569EE2423CB1A2136CB8F1D9CC", lpFilePart=0x0) returned 0x85 [0155.596] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0155.596] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2118755562A693569EE2423CB1A2136CB8F1D9CC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2118755562a693569ee2423cb1a2136cb8f1d9cc"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0155.598] GetFileType (hFile=0x444) returned 0x1 [0155.598] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0155.598] GetFileType (hFile=0x444) returned 0x1 [0155.598] WriteFile (in: hFile=0x444, lpBuffer=0x2343348*, nNumberOfBytesToWrite=0xaa0, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x2343348*, lpNumberOfBytesWritten=0x3be4d8*=0xaa0, lpOverlapped=0x0) returned 1 [0155.598] CloseHandle (hObject=0x444) returned 1 [0155.599] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2118755562A693569EE2423CB1A2136CB8F1D9CC", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2118755562A693569EE2423CB1A2136CB8F1D9CC", lpFilePart=0x0) returned 0x85 [0155.599] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2118755562A693569EE2423CB1A2136CB8F1D9CC.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2118755562A693569EE2423CB1A2136CB8F1D9CC.xuy", lpFilePart=0x0) returned 0x89 [0155.599] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0155.599] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2118755562A693569EE2423CB1A2136CB8F1D9CC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2118755562a693569ee2423cb1a2136cb8f1d9cc"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ed84046, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x3ed84046, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x489794af, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xaa0)) returned 1 [0155.599] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0155.599] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2118755562A693569EE2423CB1A2136CB8F1D9CC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2118755562a693569ee2423cb1a2136cb8f1d9cc"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2118755562A693569EE2423CB1A2136CB8F1D9CC.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2118755562a693569ee2423cb1a2136cb8f1d9cc.xuy")) returned 1 [0155.600] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\212CB67D7B36A171AAF7F0B1E24E5ADC687ACDCF", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\212CB67D7B36A171AAF7F0B1E24E5ADC687ACDCF", lpFilePart=0x0) returned 0x85 [0155.600] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0155.600] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\212CB67D7B36A171AAF7F0B1E24E5ADC687ACDCF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\212cb67d7b36a171aaf7f0b1e24e5adc687acdcf"), fInfoLevelId=0x0, lpFileInformation=0x2344708 | out: lpFileInformation=0x2344708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa9a57ab, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xfa9a57ab, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xfa9cb981, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x528)) returned 1 [0155.600] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0155.600] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\212CB67D7B36A171AAF7F0B1E24E5ADC687ACDCF", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\212CB67D7B36A171AAF7F0B1E24E5ADC687ACDCF", lpFilePart=0x0) returned 0x85 [0155.600] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0155.601] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\212CB67D7B36A171AAF7F0B1E24E5ADC687ACDCF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\212cb67d7b36a171aaf7f0b1e24e5adc687acdcf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0155.601] GetFileType (hFile=0x444) returned 0x1 [0155.601] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0155.601] GetFileType (hFile=0x444) returned 0x1 [0155.601] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x528 [0155.601] ReadFile (in: hFile=0x444, lpBuffer=0x2345048, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x2345048*, lpNumberOfBytesRead=0x3be5c8*=0x528, lpOverlapped=0x0) returned 1 [0155.614] CloseHandle (hObject=0x444) returned 1 [0155.652] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\212CB67D7B36A171AAF7F0B1E24E5ADC687ACDCF", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\212CB67D7B36A171AAF7F0B1E24E5ADC687ACDCF", lpFilePart=0x0) returned 0x85 [0155.652] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0155.652] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\212CB67D7B36A171AAF7F0B1E24E5ADC687ACDCF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\212cb67d7b36a171aaf7f0b1e24e5adc687acdcf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0155.655] GetFileType (hFile=0x444) returned 0x1 [0155.655] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0155.655] GetFileType (hFile=0x444) returned 0x1 [0155.655] WriteFile (in: hFile=0x444, lpBuffer=0x21bde50*, nNumberOfBytesToWrite=0x530, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x21bde50*, lpNumberOfBytesWritten=0x3be4d8*=0x530, lpOverlapped=0x0) returned 1 [0155.656] CloseHandle (hObject=0x444) returned 1 [0155.656] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\212CB67D7B36A171AAF7F0B1E24E5ADC687ACDCF", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\212CB67D7B36A171AAF7F0B1E24E5ADC687ACDCF", lpFilePart=0x0) returned 0x85 [0155.656] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\212CB67D7B36A171AAF7F0B1E24E5ADC687ACDCF.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\212CB67D7B36A171AAF7F0B1E24E5ADC687ACDCF.xuy", lpFilePart=0x0) returned 0x89 [0155.656] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0155.656] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\212CB67D7B36A171AAF7F0B1E24E5ADC687ACDCF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\212cb67d7b36a171aaf7f0b1e24e5adc687acdcf"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa9a57ab, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xfa9a57ab, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x48a12820, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x530)) returned 1 [0155.656] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0155.656] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\212CB67D7B36A171AAF7F0B1E24E5ADC687ACDCF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\212cb67d7b36a171aaf7f0b1e24e5adc687acdcf"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\212CB67D7B36A171AAF7F0B1E24E5ADC687ACDCF.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\212cb67d7b36a171aaf7f0b1e24e5adc687acdcf.xuy")) returned 1 [0155.658] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2144C082C2AC8FA4FB4863D9D3BE7E335DD2C91D", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2144C082C2AC8FA4FB4863D9D3BE7E335DD2C91D", lpFilePart=0x0) returned 0x85 [0155.658] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0155.658] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2144C082C2AC8FA4FB4863D9D3BE7E335DD2C91D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2144c082c2ac8fa4fb4863d9d3be7e335dd2c91d"), fInfoLevelId=0x0, lpFileInformation=0x21bf210 | out: lpFileInformation=0x21bf210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6159e1e8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x6159e1e8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x6159e1e8, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xed6)) returned 1 [0155.658] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0155.658] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2144C082C2AC8FA4FB4863D9D3BE7E335DD2C91D", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2144C082C2AC8FA4FB4863D9D3BE7E335DD2C91D", lpFilePart=0x0) returned 0x85 [0155.658] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0155.658] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2144C082C2AC8FA4FB4863D9D3BE7E335DD2C91D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2144c082c2ac8fa4fb4863d9d3be7e335dd2c91d"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0155.658] GetFileType (hFile=0x444) returned 0x1 [0155.658] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0155.658] GetFileType (hFile=0x444) returned 0x1 [0155.658] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xed6 [0155.658] ReadFile (in: hFile=0x444, lpBuffer=0x21c0500, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x21c0500*, lpNumberOfBytesRead=0x3be5c8*=0xed6, lpOverlapped=0x0) returned 1 [0155.667] CloseHandle (hObject=0x444) returned 1 [0155.678] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2144C082C2AC8FA4FB4863D9D3BE7E335DD2C91D", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2144C082C2AC8FA4FB4863D9D3BE7E335DD2C91D", lpFilePart=0x0) returned 0x85 [0155.678] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0155.678] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2144C082C2AC8FA4FB4863D9D3BE7E335DD2C91D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2144c082c2ac8fa4fb4863d9d3be7e335dd2c91d"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0155.680] GetFileType (hFile=0x444) returned 0x1 [0155.680] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0155.680] GetFileType (hFile=0x444) returned 0x1 [0155.680] WriteFile (in: hFile=0x444, lpBuffer=0x223bff8*, nNumberOfBytesToWrite=0xee0, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x223bff8*, lpNumberOfBytesWritten=0x3be4d8*=0xee0, lpOverlapped=0x0) returned 1 [0155.681] CloseHandle (hObject=0x444) returned 1 [0155.681] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2144C082C2AC8FA4FB4863D9D3BE7E335DD2C91D", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2144C082C2AC8FA4FB4863D9D3BE7E335DD2C91D", lpFilePart=0x0) returned 0x85 [0155.681] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2144C082C2AC8FA4FB4863D9D3BE7E335DD2C91D.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2144C082C2AC8FA4FB4863D9D3BE7E335DD2C91D.xuy", lpFilePart=0x0) returned 0x89 [0155.681] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0155.681] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2144C082C2AC8FA4FB4863D9D3BE7E335DD2C91D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2144c082c2ac8fa4fb4863d9d3be7e335dd2c91d"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6159e1e8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x6159e1e8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x48a3bb52, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xee0)) returned 1 [0155.681] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0155.681] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2144C082C2AC8FA4FB4863D9D3BE7E335DD2C91D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2144c082c2ac8fa4fb4863d9d3be7e335dd2c91d"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2144C082C2AC8FA4FB4863D9D3BE7E335DD2C91D.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2144c082c2ac8fa4fb4863d9d3be7e335dd2c91d.xuy")) returned 1 [0155.683] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\21870284BD46D6F21E756FF12837E26AC55D301D", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\21870284BD46D6F21E756FF12837E26AC55D301D", lpFilePart=0x0) returned 0x85 [0155.683] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0155.683] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\21870284BD46D6F21E756FF12837E26AC55D301D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\21870284bd46d6f21e756ff12837e26ac55d301d"), fInfoLevelId=0x0, lpFileInformation=0x223d3b8 | out: lpFileInformation=0x223d3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b6a9669, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x8b6a9669, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x3ed84046, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0x186)) returned 1 [0155.683] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0155.683] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\21870284BD46D6F21E756FF12837E26AC55D301D", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\21870284BD46D6F21E756FF12837E26AC55D301D", lpFilePart=0x0) returned 0x85 [0155.683] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0155.683] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\21870284BD46D6F21E756FF12837E26AC55D301D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\21870284bd46d6f21e756ff12837e26ac55d301d"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0155.683] GetFileType (hFile=0x444) returned 0x1 [0155.683] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0155.683] GetFileType (hFile=0x444) returned 0x1 [0155.683] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x186 [0155.683] ReadFile (in: hFile=0x444, lpBuffer=0x223d958, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x223d958*, lpNumberOfBytesRead=0x3be5c8*=0x186, lpOverlapped=0x0) returned 1 [0155.684] CloseHandle (hObject=0x444) returned 1 [0155.695] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\21870284BD46D6F21E756FF12837E26AC55D301D", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\21870284BD46D6F21E756FF12837E26AC55D301D", lpFilePart=0x0) returned 0x85 [0155.695] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0155.695] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\21870284BD46D6F21E756FF12837E26AC55D301D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\21870284bd46d6f21e756ff12837e26ac55d301d"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0155.697] GetFileType (hFile=0x444) returned 0x1 [0155.697] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0155.697] GetFileType (hFile=0x444) returned 0x1 [0155.697] WriteFile (in: hFile=0x444, lpBuffer=0x22b51c0*, nNumberOfBytesToWrite=0x190, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x22b51c0*, lpNumberOfBytesWritten=0x3be4d8*=0x190, lpOverlapped=0x0) returned 1 [0155.698] CloseHandle (hObject=0x444) returned 1 [0155.698] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\21870284BD46D6F21E756FF12837E26AC55D301D", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\21870284BD46D6F21E756FF12837E26AC55D301D", lpFilePart=0x0) returned 0x85 [0155.698] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\21870284BD46D6F21E756FF12837E26AC55D301D.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\21870284BD46D6F21E756FF12837E26AC55D301D.xuy", lpFilePart=0x0) returned 0x89 [0155.698] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0155.698] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\21870284BD46D6F21E756FF12837E26AC55D301D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\21870284bd46d6f21e756ff12837e26ac55d301d"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b6a9669, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x8b6a9669, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x48a5e2d1, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x190)) returned 1 [0155.698] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0155.698] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\21870284BD46D6F21E756FF12837E26AC55D301D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\21870284bd46d6f21e756ff12837e26ac55d301d"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\21870284BD46D6F21E756FF12837E26AC55D301D.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\21870284bd46d6f21e756ff12837e26ac55d301d.xuy")) returned 1 [0155.700] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\21B0E0F8C11507CB07A1BB82407F5AD646D80836", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\21B0E0F8C11507CB07A1BB82407F5AD646D80836", lpFilePart=0x0) returned 0x85 [0155.700] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0155.700] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\21B0E0F8C11507CB07A1BB82407F5AD646D80836" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\21b0e0f8c11507cb07a1bb82407f5ad646d80836"), fInfoLevelId=0x0, lpFileInformation=0x22b6580 | out: lpFileInformation=0x22b6580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2fdc2c4, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xf2fdc2c4, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0xf2fde9ce, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x106c)) returned 1 [0155.700] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0155.700] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\21B0E0F8C11507CB07A1BB82407F5AD646D80836", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\21B0E0F8C11507CB07A1BB82407F5AD646D80836", lpFilePart=0x0) returned 0x85 [0155.700] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0155.700] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\21B0E0F8C11507CB07A1BB82407F5AD646D80836" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\21b0e0f8c11507cb07a1bb82407f5ad646d80836"), fInfoLevelId=0x0, lpFileInformation=0x22b6780 | out: lpFileInformation=0x22b6780*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2fdc2c4, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xf2fdc2c4, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0xf2fde9ce, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x106c)) returned 1 [0155.700] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0155.700] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\21B0E0F8C11507CB07A1BB82407F5AD646D80836", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\21B0E0F8C11507CB07A1BB82407F5AD646D80836", lpFilePart=0x0) returned 0x85 [0155.700] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0155.700] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\21B0E0F8C11507CB07A1BB82407F5AD646D80836" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\21b0e0f8c11507cb07a1bb82407f5ad646d80836"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0155.707] GetFileType (hFile=0x444) returned 0x1 [0155.707] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0155.707] GetFileType (hFile=0x444) returned 0x1 [0155.707] ReadFile (in: hFile=0x444, lpBuffer=0x22b8cb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x22b8cb0*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0155.720] CloseHandle (hObject=0x444) returned 1 [0155.720] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\21B0E0F8C11507CB07A1BB82407F5AD646D80836", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\21B0E0F8C11507CB07A1BB82407F5AD646D80836", lpFilePart=0x0) returned 0x85 [0155.720] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0155.720] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\21B0E0F8C11507CB07A1BB82407F5AD646D80836" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\21b0e0f8c11507cb07a1bb82407f5ad646d80836"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0155.721] GetFileType (hFile=0x444) returned 0x1 [0155.721] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0155.721] GetFileType (hFile=0x444) returned 0x1 [0155.721] WriteFile (in: hFile=0x444, lpBuffer=0x22b6960*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x22b6960*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0155.721] CloseHandle (hObject=0x444) returned 1 [0155.721] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\21B0E0F8C11507CB07A1BB82407F5AD646D80836", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\21B0E0F8C11507CB07A1BB82407F5AD646D80836", lpFilePart=0x0) returned 0x85 [0155.721] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\21B0E0F8C11507CB07A1BB82407F5AD646D80836.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\21B0E0F8C11507CB07A1BB82407F5AD646D80836.xuy", lpFilePart=0x0) returned 0x89 [0155.721] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0155.721] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\21B0E0F8C11507CB07A1BB82407F5AD646D80836" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\21b0e0f8c11507cb07a1bb82407f5ad646d80836"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2fdc2c4, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xf2fdc2c4, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x48aaa7d5, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0155.721] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0155.721] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\21B0E0F8C11507CB07A1BB82407F5AD646D80836" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\21b0e0f8c11507cb07a1bb82407f5ad646d80836"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\21B0E0F8C11507CB07A1BB82407F5AD646D80836.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\21b0e0f8c11507cb07a1bb82407f5ad646d80836.xuy")) returned 1 [0155.723] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\224A275AD09BE370F96D409F6AFE2904589080EC", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\224A275AD09BE370F96D409F6AFE2904589080EC", lpFilePart=0x0) returned 0x85 [0155.723] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0155.723] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\224A275AD09BE370F96D409F6AFE2904589080EC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\224a275ad09be370f96d409f6afe2904589080ec"), fInfoLevelId=0x0, lpFileInformation=0x2335258 | out: lpFileInformation=0x2335258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x615c4498, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x615c4498, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x615c4498, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xf0c)) returned 1 [0155.723] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0155.723] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\224A275AD09BE370F96D409F6AFE2904589080EC", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\224A275AD09BE370F96D409F6AFE2904589080EC", lpFilePart=0x0) returned 0x85 [0155.723] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0155.724] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\224A275AD09BE370F96D409F6AFE2904589080EC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\224a275ad09be370f96d409f6afe2904589080ec"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0155.724] GetFileType (hFile=0x444) returned 0x1 [0155.724] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0155.724] GetFileType (hFile=0x444) returned 0x1 [0155.724] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xf0c [0155.724] ReadFile (in: hFile=0x444, lpBuffer=0x2336580, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x2336580*, lpNumberOfBytesRead=0x3be5c8*=0xf0c, lpOverlapped=0x0) returned 1 [0155.725] CloseHandle (hObject=0x444) returned 1 [0155.769] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\224A275AD09BE370F96D409F6AFE2904589080EC", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\224A275AD09BE370F96D409F6AFE2904589080EC", lpFilePart=0x0) returned 0x85 [0155.769] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0155.770] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\224A275AD09BE370F96D409F6AFE2904589080EC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\224a275ad09be370f96d409f6afe2904589080ec"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0155.771] GetFileType (hFile=0x444) returned 0x1 [0155.771] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0155.771] GetFileType (hFile=0x444) returned 0x1 [0155.771] WriteFile (in: hFile=0x444, lpBuffer=0x21b2b58*, nNumberOfBytesToWrite=0xf10, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x21b2b58*, lpNumberOfBytesWritten=0x3be4d8*=0xf10, lpOverlapped=0x0) returned 1 [0155.774] CloseHandle (hObject=0x444) returned 1 [0155.774] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\224A275AD09BE370F96D409F6AFE2904589080EC", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\224A275AD09BE370F96D409F6AFE2904589080EC", lpFilePart=0x0) returned 0x85 [0155.774] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\224A275AD09BE370F96D409F6AFE2904589080EC.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\224A275AD09BE370F96D409F6AFE2904589080EC.xuy", lpFilePart=0x0) returned 0x89 [0155.774] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0155.774] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\224A275AD09BE370F96D409F6AFE2904589080EC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\224a275ad09be370f96d409f6afe2904589080ec"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x615c4498, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x615c4498, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x48b1cf8e, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xf10)) returned 1 [0155.774] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0155.774] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\224A275AD09BE370F96D409F6AFE2904589080EC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\224a275ad09be370f96d409f6afe2904589080ec"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\224A275AD09BE370F96D409F6AFE2904589080EC.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\224a275ad09be370f96d409f6afe2904589080ec.xuy")) returned 1 [0155.776] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\225640F98EF31B52AB76CF756A5C3512E0BDE89B", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\225640F98EF31B52AB76CF756A5C3512E0BDE89B", lpFilePart=0x0) returned 0x85 [0155.776] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0155.776] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\225640F98EF31B52AB76CF756A5C3512E0BDE89B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\225640f98ef31b52ab76cf756a5c3512e0bde89b"), fInfoLevelId=0x0, lpFileInformation=0x21b3f18 | out: lpFileInformation=0x21b3f18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45e05239, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x45e05239, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x45e05239, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0xafe)) returned 1 [0155.776] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0155.776] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\225640F98EF31B52AB76CF756A5C3512E0BDE89B", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\225640F98EF31B52AB76CF756A5C3512E0BDE89B", lpFilePart=0x0) returned 0x85 [0155.776] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0155.776] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\225640F98EF31B52AB76CF756A5C3512E0BDE89B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\225640f98ef31b52ab76cf756a5c3512e0bde89b"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0155.777] GetFileType (hFile=0x444) returned 0x1 [0155.777] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0155.777] GetFileType (hFile=0x444) returned 0x1 [0155.777] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xafe [0155.777] ReadFile (in: hFile=0x444, lpBuffer=0x21b4e30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x21b4e30*, lpNumberOfBytesRead=0x3be5c8*=0xafe, lpOverlapped=0x0) returned 1 [0155.790] CloseHandle (hObject=0x444) returned 1 [0155.801] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\225640F98EF31B52AB76CF756A5C3512E0BDE89B", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\225640F98EF31B52AB76CF756A5C3512E0BDE89B", lpFilePart=0x0) returned 0x85 [0155.801] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0155.801] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\225640F98EF31B52AB76CF756A5C3512E0BDE89B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\225640f98ef31b52ab76cf756a5c3512e0bde89b"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0155.803] GetFileType (hFile=0x444) returned 0x1 [0155.803] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0155.803] GetFileType (hFile=0x444) returned 0x1 [0155.803] WriteFile (in: hFile=0x444, lpBuffer=0x222f5c0*, nNumberOfBytesToWrite=0xb00, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x222f5c0*, lpNumberOfBytesWritten=0x3be4d8*=0xb00, lpOverlapped=0x0) returned 1 [0155.804] CloseHandle (hObject=0x444) returned 1 [0155.804] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\225640F98EF31B52AB76CF756A5C3512E0BDE89B", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\225640F98EF31B52AB76CF756A5C3512E0BDE89B", lpFilePart=0x0) returned 0x85 [0155.804] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\225640F98EF31B52AB76CF756A5C3512E0BDE89B.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\225640F98EF31B52AB76CF756A5C3512E0BDE89B.xuy", lpFilePart=0x0) returned 0x89 [0155.804] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0155.804] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\225640F98EF31B52AB76CF756A5C3512E0BDE89B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\225640f98ef31b52ab76cf756a5c3512e0bde89b"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45e05239, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x45e05239, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x48b693ea, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xb00)) returned 1 [0155.805] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0155.805] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\225640F98EF31B52AB76CF756A5C3512E0BDE89B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\225640f98ef31b52ab76cf756a5c3512e0bde89b"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\225640F98EF31B52AB76CF756A5C3512E0BDE89B.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\225640f98ef31b52ab76cf756a5c3512e0bde89b.xuy")) returned 1 [0155.806] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\22777C6913A6B4768EE40D5F0103A93D8B477C3C", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\22777C6913A6B4768EE40D5F0103A93D8B477C3C", lpFilePart=0x0) returned 0x85 [0155.806] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0155.806] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\22777C6913A6B4768EE40D5F0103A93D8B477C3C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\22777c6913a6b4768ee40d5f0103a93d8b477c3c"), fInfoLevelId=0x0, lpFileInformation=0x2230980 | out: lpFileInformation=0x2230980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61551d8c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x61551d8c, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x61551d8c, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x10e1)) returned 1 [0155.807] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0155.807] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\22777C6913A6B4768EE40D5F0103A93D8B477C3C", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\22777C6913A6B4768EE40D5F0103A93D8B477C3C", lpFilePart=0x0) returned 0x85 [0155.807] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0155.807] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\22777C6913A6B4768EE40D5F0103A93D8B477C3C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\22777c6913a6b4768ee40d5f0103a93d8b477c3c"), fInfoLevelId=0x0, lpFileInformation=0x2230b80 | out: lpFileInformation=0x2230b80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61551d8c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x61551d8c, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x61551d8c, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x10e1)) returned 1 [0155.807] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0155.807] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\22777C6913A6B4768EE40D5F0103A93D8B477C3C", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\22777C6913A6B4768EE40D5F0103A93D8B477C3C", lpFilePart=0x0) returned 0x85 [0155.807] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0155.807] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\22777C6913A6B4768EE40D5F0103A93D8B477C3C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\22777c6913a6b4768ee40d5f0103a93d8b477c3c"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0155.808] GetFileType (hFile=0x444) returned 0x1 [0155.808] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0155.808] GetFileType (hFile=0x444) returned 0x1 [0155.808] ReadFile (in: hFile=0x444, lpBuffer=0x22330b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x22330b0*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0155.826] CloseHandle (hObject=0x444) returned 1 [0155.826] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\22777C6913A6B4768EE40D5F0103A93D8B477C3C", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\22777C6913A6B4768EE40D5F0103A93D8B477C3C", lpFilePart=0x0) returned 0x85 [0155.827] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0155.827] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\22777C6913A6B4768EE40D5F0103A93D8B477C3C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\22777c6913a6b4768ee40d5f0103a93d8b477c3c"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0155.827] GetFileType (hFile=0x444) returned 0x1 [0155.827] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0155.827] GetFileType (hFile=0x444) returned 0x1 [0155.827] WriteFile (in: hFile=0x444, lpBuffer=0x2230d60*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x2230d60*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0155.827] CloseHandle (hObject=0x444) returned 1 [0155.827] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\22777C6913A6B4768EE40D5F0103A93D8B477C3C", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\22777C6913A6B4768EE40D5F0103A93D8B477C3C", lpFilePart=0x0) returned 0x85 [0155.828] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\22777C6913A6B4768EE40D5F0103A93D8B477C3C.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\22777C6913A6B4768EE40D5F0103A93D8B477C3C.xuy", lpFilePart=0x0) returned 0x89 [0155.828] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0155.828] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\22777C6913A6B4768EE40D5F0103A93D8B477C3C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\22777c6913a6b4768ee40d5f0103a93d8b477c3c"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61551d8c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x61551d8c, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x48bb5ae8, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0155.828] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0155.828] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\22777C6913A6B4768EE40D5F0103A93D8B477C3C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\22777c6913a6b4768ee40d5f0103a93d8b477c3c"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\22777C6913A6B4768EE40D5F0103A93D8B477C3C.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\22777c6913a6b4768ee40d5f0103a93d8b477c3c.xuy")) returned 1 [0155.829] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\22B072DE2E829A9BBDD29C6C1005CBE946651C89", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\22B072DE2E829A9BBDD29C6C1005CBE946651C89", lpFilePart=0x0) returned 0x85 [0155.830] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0155.830] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\22B072DE2E829A9BBDD29C6C1005CBE946651C89" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\22b072de2e829a9bbdd29c6c1005cbe946651c89"), fInfoLevelId=0x0, lpFileInformation=0x22af658 | out: lpFileInformation=0x22af658*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0619d0d, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xe0619d0d, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xe061c41f, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0xc3f)) returned 1 [0155.830] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0155.830] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\22B072DE2E829A9BBDD29C6C1005CBE946651C89", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\22B072DE2E829A9BBDD29C6C1005CBE946651C89", lpFilePart=0x0) returned 0x85 [0155.830] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0155.830] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\22B072DE2E829A9BBDD29C6C1005CBE946651C89" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\22b072de2e829a9bbdd29c6c1005cbe946651c89"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0155.830] GetFileType (hFile=0x444) returned 0x1 [0155.830] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0155.830] GetFileType (hFile=0x444) returned 0x1 [0155.830] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xc3f [0155.830] ReadFile (in: hFile=0x444, lpBuffer=0x22b06b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x22b06b0*, lpNumberOfBytesRead=0x3be5c8*=0xc3f, lpOverlapped=0x0) returned 1 [0155.847] CloseHandle (hObject=0x444) returned 1 [0155.858] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\22B072DE2E829A9BBDD29C6C1005CBE946651C89", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\22B072DE2E829A9BBDD29C6C1005CBE946651C89", lpFilePart=0x0) returned 0x85 [0155.858] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0155.858] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\22B072DE2E829A9BBDD29C6C1005CBE946651C89" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\22b072de2e829a9bbdd29c6c1005cbe946651c89"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0155.860] GetFileType (hFile=0x444) returned 0x1 [0155.860] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0155.860] GetFileType (hFile=0x444) returned 0x1 [0155.860] WriteFile (in: hFile=0x444, lpBuffer=0x232b480*, nNumberOfBytesToWrite=0xc40, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x232b480*, lpNumberOfBytesWritten=0x3be4d8*=0xc40, lpOverlapped=0x0) returned 1 [0155.860] CloseHandle (hObject=0x444) returned 1 [0155.861] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\22B072DE2E829A9BBDD29C6C1005CBE946651C89", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\22B072DE2E829A9BBDD29C6C1005CBE946651C89", lpFilePart=0x0) returned 0x85 [0155.861] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\22B072DE2E829A9BBDD29C6C1005CBE946651C89.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\22B072DE2E829A9BBDD29C6C1005CBE946651C89.xuy", lpFilePart=0x0) returned 0x89 [0155.861] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0155.861] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\22B072DE2E829A9BBDD29C6C1005CBE946651C89" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\22b072de2e829a9bbdd29c6c1005cbe946651c89"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0619d0d, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xe0619d0d, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x48c01f21, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xc40)) returned 1 [0155.861] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0155.861] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\22B072DE2E829A9BBDD29C6C1005CBE946651C89" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\22b072de2e829a9bbdd29c6c1005cbe946651c89"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\22B072DE2E829A9BBDD29C6C1005CBE946651C89.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\22b072de2e829a9bbdd29c6c1005cbe946651c89.xuy")) returned 1 [0155.862] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\22CA1C7BCD8AA6B0D991889ABE75C06CA1EBACD1", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\22CA1C7BCD8AA6B0D991889ABE75C06CA1EBACD1", lpFilePart=0x0) returned 0x85 [0155.862] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0155.862] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\22CA1C7BCD8AA6B0D991889ABE75C06CA1EBACD1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\22ca1c7bcd8aa6b0d991889abe75c06ca1ebacd1"), fInfoLevelId=0x0, lpFileInformation=0x232c840 | out: lpFileInformation=0x232c840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bfeb056, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x3bfeb056, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x3bfeb056, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0x4d2)) returned 1 [0155.862] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0155.862] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\22CA1C7BCD8AA6B0D991889ABE75C06CA1EBACD1", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\22CA1C7BCD8AA6B0D991889ABE75C06CA1EBACD1", lpFilePart=0x0) returned 0x85 [0155.862] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0155.862] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\22CA1C7BCD8AA6B0D991889ABE75C06CA1EBACD1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\22ca1c7bcd8aa6b0d991889abe75c06ca1ebacd1"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0155.863] GetFileType (hFile=0x444) returned 0x1 [0155.863] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0155.863] GetFileType (hFile=0x444) returned 0x1 [0155.863] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x4d2 [0155.863] ReadFile (in: hFile=0x444, lpBuffer=0x232d130, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x232d130*, lpNumberOfBytesRead=0x3be5c8*=0x4d2, lpOverlapped=0x0) returned 1 [0155.864] CloseHandle (hObject=0x444) returned 1 [0155.903] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\22CA1C7BCD8AA6B0D991889ABE75C06CA1EBACD1", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\22CA1C7BCD8AA6B0D991889ABE75C06CA1EBACD1", lpFilePart=0x0) returned 0x85 [0155.903] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0155.903] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\22CA1C7BCD8AA6B0D991889ABE75C06CA1EBACD1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\22ca1c7bcd8aa6b0d991889abe75c06ca1ebacd1"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0155.905] GetFileType (hFile=0x444) returned 0x1 [0155.905] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0155.905] GetFileType (hFile=0x444) returned 0x1 [0155.906] WriteFile (in: hFile=0x444, lpBuffer=0x21a4fd8*, nNumberOfBytesToWrite=0x4e0, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x21a4fd8*, lpNumberOfBytesWritten=0x3be4d8*=0x4e0, lpOverlapped=0x0) returned 1 [0155.906] CloseHandle (hObject=0x444) returned 1 [0155.906] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\22CA1C7BCD8AA6B0D991889ABE75C06CA1EBACD1", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\22CA1C7BCD8AA6B0D991889ABE75C06CA1EBACD1", lpFilePart=0x0) returned 0x85 [0155.906] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\22CA1C7BCD8AA6B0D991889ABE75C06CA1EBACD1.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\22CA1C7BCD8AA6B0D991889ABE75C06CA1EBACD1.xuy", lpFilePart=0x0) returned 0x89 [0155.906] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0155.906] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\22CA1C7BCD8AA6B0D991889ABE75C06CA1EBACD1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\22ca1c7bcd8aa6b0d991889abe75c06ca1ebacd1"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bfeb056, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x3bfeb056, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x48c74523, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x4e0)) returned 1 [0155.907] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0155.907] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\22CA1C7BCD8AA6B0D991889ABE75C06CA1EBACD1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\22ca1c7bcd8aa6b0d991889abe75c06ca1ebacd1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\22CA1C7BCD8AA6B0D991889ABE75C06CA1EBACD1.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\22ca1c7bcd8aa6b0d991889abe75c06ca1ebacd1.xuy")) returned 1 [0155.908] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\24073350A672357B47B2D1A937642146E80AA938", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\24073350A672357B47B2D1A937642146E80AA938", lpFilePart=0x0) returned 0x85 [0155.908] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0155.908] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\24073350A672357B47B2D1A937642146E80AA938" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\24073350a672357b47b2d1a937642146e80aa938"), fInfoLevelId=0x0, lpFileInformation=0x21a6398 | out: lpFileInformation=0x21a6398*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f849380, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x74eafda9, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x74eafda9, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0x14f2)) returned 1 [0155.909] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0155.909] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\24073350A672357B47B2D1A937642146E80AA938", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\24073350A672357B47B2D1A937642146E80AA938", lpFilePart=0x0) returned 0x85 [0155.909] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0155.909] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\24073350A672357B47B2D1A937642146E80AA938" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\24073350a672357b47b2d1a937642146e80aa938"), fInfoLevelId=0x0, lpFileInformation=0x21a6598 | out: lpFileInformation=0x21a6598*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f849380, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x74eafda9, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x74eafda9, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0x14f2)) returned 1 [0155.909] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0155.909] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\24073350A672357B47B2D1A937642146E80AA938", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\24073350A672357B47B2D1A937642146E80AA938", lpFilePart=0x0) returned 0x85 [0155.909] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0155.910] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\24073350A672357B47B2D1A937642146E80AA938" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\24073350a672357b47b2d1a937642146e80aa938"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0155.910] GetFileType (hFile=0x444) returned 0x1 [0155.910] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0155.910] GetFileType (hFile=0x444) returned 0x1 [0155.910] ReadFile (in: hFile=0x444, lpBuffer=0x21a8ac8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x21a8ac8*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0155.923] CloseHandle (hObject=0x444) returned 1 [0155.923] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\24073350A672357B47B2D1A937642146E80AA938", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\24073350A672357B47B2D1A937642146E80AA938", lpFilePart=0x0) returned 0x85 [0155.923] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0155.923] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\24073350A672357B47B2D1A937642146E80AA938" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\24073350a672357b47b2d1a937642146e80aa938"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0155.923] GetFileType (hFile=0x444) returned 0x1 [0155.923] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0155.923] GetFileType (hFile=0x444) returned 0x1 [0155.923] WriteFile (in: hFile=0x444, lpBuffer=0x21a6778*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x21a6778*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0155.924] CloseHandle (hObject=0x444) returned 1 [0155.924] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\24073350A672357B47B2D1A937642146E80AA938", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\24073350A672357B47B2D1A937642146E80AA938", lpFilePart=0x0) returned 0x85 [0155.924] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\24073350A672357B47B2D1A937642146E80AA938.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\24073350A672357B47B2D1A937642146E80AA938.xuy", lpFilePart=0x0) returned 0x89 [0155.924] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0155.924] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\24073350A672357B47B2D1A937642146E80AA938" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\24073350a672357b47b2d1a937642146e80aa938"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f849380, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x74eafda9, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x48c9a981, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0155.924] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0155.924] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\24073350A672357B47B2D1A937642146E80AA938" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\24073350a672357b47b2d1a937642146e80aa938"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\24073350A672357B47B2D1A937642146E80AA938.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\24073350a672357b47b2d1a937642146e80aa938.xuy")) returned 1 [0155.925] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2445FA966A09E6B22679F2707AA980BBEBBC3BA8", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2445FA966A09E6B22679F2707AA980BBEBBC3BA8", lpFilePart=0x0) returned 0x85 [0155.925] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0155.925] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2445FA966A09E6B22679F2707AA980BBEBBC3BA8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2445fa966a09e6b22679f2707aa980bbebbc3ba8"), fInfoLevelId=0x0, lpFileInformation=0x2225070 | out: lpFileInformation=0x2225070*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f5fcccf, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3f5fcccf, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x3f5ff3fb, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x52a)) returned 1 [0155.925] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0155.925] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2445FA966A09E6B22679F2707AA980BBEBBC3BA8", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2445FA966A09E6B22679F2707AA980BBEBBC3BA8", lpFilePart=0x0) returned 0x85 [0155.925] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0155.926] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2445FA966A09E6B22679F2707AA980BBEBBC3BA8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2445fa966a09e6b22679f2707aa980bbebbc3ba8"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0155.926] GetFileType (hFile=0x444) returned 0x1 [0155.926] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0155.926] GetFileType (hFile=0x444) returned 0x1 [0155.926] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x52a [0155.926] ReadFile (in: hFile=0x444, lpBuffer=0x22259b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x22259b8*, lpNumberOfBytesRead=0x3be5c8*=0x52a, lpOverlapped=0x0) returned 1 [0155.934] CloseHandle (hObject=0x444) returned 1 [0155.945] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2445FA966A09E6B22679F2707AA980BBEBBC3BA8", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2445FA966A09E6B22679F2707AA980BBEBBC3BA8", lpFilePart=0x0) returned 0x85 [0155.945] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0155.945] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2445FA966A09E6B22679F2707AA980BBEBBC3BA8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2445fa966a09e6b22679f2707aa980bbebbc3ba8"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0155.947] GetFileType (hFile=0x444) returned 0x1 [0155.947] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0155.947] GetFileType (hFile=0x444) returned 0x1 [0155.947] WriteFile (in: hFile=0x444, lpBuffer=0x229e438*, nNumberOfBytesToWrite=0x530, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x229e438*, lpNumberOfBytesWritten=0x3be4d8*=0x530, lpOverlapped=0x0) returned 1 [0155.948] CloseHandle (hObject=0x444) returned 1 [0155.948] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2445FA966A09E6B22679F2707AA980BBEBBC3BA8", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2445FA966A09E6B22679F2707AA980BBEBBC3BA8", lpFilePart=0x0) returned 0x85 [0155.948] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2445FA966A09E6B22679F2707AA980BBEBBC3BA8.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2445FA966A09E6B22679F2707AA980BBEBBC3BA8.xuy", lpFilePart=0x0) returned 0x89 [0155.948] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0155.948] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2445FA966A09E6B22679F2707AA980BBEBBC3BA8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2445fa966a09e6b22679f2707aa980bbebbc3ba8"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f5fcccf, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3f5fcccf, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x48cc079f, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x530)) returned 1 [0155.948] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0155.948] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2445FA966A09E6B22679F2707AA980BBEBBC3BA8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2445fa966a09e6b22679f2707aa980bbebbc3ba8"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2445FA966A09E6B22679F2707AA980BBEBBC3BA8.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2445fa966a09e6b22679f2707aa980bbebbc3ba8.xuy")) returned 1 [0155.949] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\245CEDA973B44C04325E8F3063F7596F9C88F120", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\245CEDA973B44C04325E8F3063F7596F9C88F120", lpFilePart=0x0) returned 0x85 [0155.949] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0155.949] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\245CEDA973B44C04325E8F3063F7596F9C88F120" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\245ceda973b44c04325e8f3063f7596f9c88f120"), fInfoLevelId=0x0, lpFileInformation=0x229f7f8 | out: lpFileInformation=0x229f7f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5488ae0f, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x5488ae0f, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x5488ae0f, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x3c8e)) returned 1 [0155.949] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0155.949] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\245CEDA973B44C04325E8F3063F7596F9C88F120", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\245CEDA973B44C04325E8F3063F7596F9C88F120", lpFilePart=0x0) returned 0x85 [0155.949] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0155.949] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\245CEDA973B44C04325E8F3063F7596F9C88F120" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\245ceda973b44c04325e8f3063f7596f9c88f120"), fInfoLevelId=0x0, lpFileInformation=0x229f9f8 | out: lpFileInformation=0x229f9f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5488ae0f, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x5488ae0f, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x5488ae0f, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x3c8e)) returned 1 [0155.949] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0155.950] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\245CEDA973B44C04325E8F3063F7596F9C88F120", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\245CEDA973B44C04325E8F3063F7596F9C88F120", lpFilePart=0x0) returned 0x85 [0155.950] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0155.950] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\245CEDA973B44C04325E8F3063F7596F9C88F120" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\245ceda973b44c04325e8f3063f7596f9c88f120"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0155.950] GetFileType (hFile=0x444) returned 0x1 [0155.950] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0155.950] GetFileType (hFile=0x444) returned 0x1 [0155.950] ReadFile (in: hFile=0x444, lpBuffer=0x22a1f28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x22a1f28*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0155.964] CloseHandle (hObject=0x444) returned 1 [0155.964] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\245CEDA973B44C04325E8F3063F7596F9C88F120", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\245CEDA973B44C04325E8F3063F7596F9C88F120", lpFilePart=0x0) returned 0x85 [0155.964] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0155.964] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\245CEDA973B44C04325E8F3063F7596F9C88F120" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\245ceda973b44c04325e8f3063f7596f9c88f120"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0155.964] GetFileType (hFile=0x444) returned 0x1 [0155.964] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0155.964] GetFileType (hFile=0x444) returned 0x1 [0155.964] WriteFile (in: hFile=0x444, lpBuffer=0x229fbd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x229fbd8*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0155.964] CloseHandle (hObject=0x444) returned 1 [0155.965] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\245CEDA973B44C04325E8F3063F7596F9C88F120", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\245CEDA973B44C04325E8F3063F7596F9C88F120", lpFilePart=0x0) returned 0x85 [0155.965] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\245CEDA973B44C04325E8F3063F7596F9C88F120.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\245CEDA973B44C04325E8F3063F7596F9C88F120.xuy", lpFilePart=0x0) returned 0x89 [0155.965] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0155.965] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\245CEDA973B44C04325E8F3063F7596F9C88F120" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\245ceda973b44c04325e8f3063f7596f9c88f120"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5488ae0f, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x5488ae0f, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x48ce6ad7, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x3c8e)) returned 1 [0155.965] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0155.965] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\245CEDA973B44C04325E8F3063F7596F9C88F120" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\245ceda973b44c04325e8f3063f7596f9c88f120"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\245CEDA973B44C04325E8F3063F7596F9C88F120.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\245ceda973b44c04325e8f3063f7596f9c88f120.xuy")) returned 1 [0155.966] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2465113476A71563C2561E1A45DF343E04BFF787", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2465113476A71563C2561E1A45DF343E04BFF787", lpFilePart=0x0) returned 0x85 [0155.966] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0155.966] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2465113476A71563C2561E1A45DF343E04BFF787" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2465113476a71563c2561e1a45df343e04bff787"), fInfoLevelId=0x0, lpFileInformation=0x231e4d0 | out: lpFileInformation=0x231e4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5622901, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc5622901, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xc5622901, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x52a)) returned 1 [0155.967] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0155.967] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2465113476A71563C2561E1A45DF343E04BFF787", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2465113476A71563C2561E1A45DF343E04BFF787", lpFilePart=0x0) returned 0x85 [0155.967] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0155.967] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2465113476A71563C2561E1A45DF343E04BFF787" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2465113476a71563c2561e1a45df343e04bff787"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0155.967] GetFileType (hFile=0x444) returned 0x1 [0155.967] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0155.967] GetFileType (hFile=0x444) returned 0x1 [0155.967] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x52a [0155.967] ReadFile (in: hFile=0x444, lpBuffer=0x231ee18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x231ee18*, lpNumberOfBytesRead=0x3be5c8*=0x52a, lpOverlapped=0x0) returned 1 [0155.977] CloseHandle (hObject=0x444) returned 1 [0156.017] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2465113476A71563C2561E1A45DF343E04BFF787", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2465113476A71563C2561E1A45DF343E04BFF787", lpFilePart=0x0) returned 0x85 [0156.017] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0156.017] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2465113476A71563C2561E1A45DF343E04BFF787" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2465113476a71563c2561e1a45df343e04bff787"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0156.019] GetFileType (hFile=0x444) returned 0x1 [0156.019] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0156.019] GetFileType (hFile=0x444) returned 0x1 [0156.019] WriteFile (in: hFile=0x444, lpBuffer=0x21978d8*, nNumberOfBytesToWrite=0x530, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x21978d8*, lpNumberOfBytesWritten=0x3be4d8*=0x530, lpOverlapped=0x0) returned 1 [0156.020] CloseHandle (hObject=0x444) returned 1 [0156.020] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2465113476A71563C2561E1A45DF343E04BFF787", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2465113476A71563C2561E1A45DF343E04BFF787", lpFilePart=0x0) returned 0x85 [0156.020] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2465113476A71563C2561E1A45DF343E04BFF787.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2465113476A71563C2561E1A45DF343E04BFF787.xuy", lpFilePart=0x0) returned 0x89 [0156.020] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0156.020] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2465113476A71563C2561E1A45DF343E04BFF787" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2465113476a71563c2561e1a45df343e04bff787"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5622901, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc5622901, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x48d7f578, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x530)) returned 1 [0156.020] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0156.020] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2465113476A71563C2561E1A45DF343E04BFF787" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2465113476a71563c2561e1a45df343e04bff787"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2465113476A71563C2561E1A45DF343E04BFF787.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2465113476a71563c2561e1a45df343e04bff787.xuy")) returned 1 [0156.021] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\24BE475A5C9CE3DA33684DFDEE6AC47BC9BA6DE6", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\24BE475A5C9CE3DA33684DFDEE6AC47BC9BA6DE6", lpFilePart=0x0) returned 0x85 [0156.021] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0156.021] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\24BE475A5C9CE3DA33684DFDEE6AC47BC9BA6DE6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\24be475a5c9ce3da33684dfdee6ac47bc9ba6de6"), fInfoLevelId=0x0, lpFileInformation=0x2198c98 | out: lpFileInformation=0x2198c98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45e05239, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x45e05239, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x45e05239, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0x516)) returned 1 [0156.021] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0156.021] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\24BE475A5C9CE3DA33684DFDEE6AC47BC9BA6DE6", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\24BE475A5C9CE3DA33684DFDEE6AC47BC9BA6DE6", lpFilePart=0x0) returned 0x85 [0156.022] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0156.022] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\24BE475A5C9CE3DA33684DFDEE6AC47BC9BA6DE6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\24be475a5c9ce3da33684dfdee6ac47bc9ba6de6"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0156.022] GetFileType (hFile=0x444) returned 0x1 [0156.022] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0156.022] GetFileType (hFile=0x444) returned 0x1 [0156.022] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x516 [0156.022] ReadFile (in: hFile=0x444, lpBuffer=0x21995c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x21995c8*, lpNumberOfBytesRead=0x3be5c8*=0x516, lpOverlapped=0x0) returned 1 [0156.024] CloseHandle (hObject=0x444) returned 1 [0156.036] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\24BE475A5C9CE3DA33684DFDEE6AC47BC9BA6DE6", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\24BE475A5C9CE3DA33684DFDEE6AC47BC9BA6DE6", lpFilePart=0x0) returned 0x85 [0156.036] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0156.036] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\24BE475A5C9CE3DA33684DFDEE6AC47BC9BA6DE6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\24be475a5c9ce3da33684dfdee6ac47bc9ba6de6"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0156.037] GetFileType (hFile=0x444) returned 0x1 [0156.037] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0156.037] GetFileType (hFile=0x444) returned 0x1 [0156.038] WriteFile (in: hFile=0x444, lpBuffer=0x2212000*, nNumberOfBytesToWrite=0x520, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x2212000*, lpNumberOfBytesWritten=0x3be4d8*=0x520, lpOverlapped=0x0) returned 1 [0156.039] CloseHandle (hObject=0x444) returned 1 [0156.039] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\24BE475A5C9CE3DA33684DFDEE6AC47BC9BA6DE6", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\24BE475A5C9CE3DA33684DFDEE6AC47BC9BA6DE6", lpFilePart=0x0) returned 0x85 [0156.039] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\24BE475A5C9CE3DA33684DFDEE6AC47BC9BA6DE6.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\24BE475A5C9CE3DA33684DFDEE6AC47BC9BA6DE6.xuy", lpFilePart=0x0) returned 0x89 [0156.039] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0156.039] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\24BE475A5C9CE3DA33684DFDEE6AC47BC9BA6DE6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\24be475a5c9ce3da33684dfdee6ac47bc9ba6de6"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45e05239, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x45e05239, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x48da5bbf, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x520)) returned 1 [0156.039] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0156.039] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\24BE475A5C9CE3DA33684DFDEE6AC47BC9BA6DE6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\24be475a5c9ce3da33684dfdee6ac47bc9ba6de6"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\24BE475A5C9CE3DA33684DFDEE6AC47BC9BA6DE6.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\24be475a5c9ce3da33684dfdee6ac47bc9ba6de6.xuy")) returned 1 [0156.043] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\24C5A11C7C55D609ED86B6E31E2C94301D075CB3", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\24C5A11C7C55D609ED86B6E31E2C94301D075CB3", lpFilePart=0x0) returned 0x85 [0156.043] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0156.043] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\24C5A11C7C55D609ED86B6E31E2C94301D075CB3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\24c5a11c7c55d609ed86b6e31e2c94301d075cb3"), fInfoLevelId=0x0, lpFileInformation=0x22133c0 | out: lpFileInformation=0x22133c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x459406e4, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x459406e4, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x459406e4, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0x1584)) returned 1 [0156.043] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0156.044] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\24C5A11C7C55D609ED86B6E31E2C94301D075CB3", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\24C5A11C7C55D609ED86B6E31E2C94301D075CB3", lpFilePart=0x0) returned 0x85 [0156.044] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0156.044] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\24C5A11C7C55D609ED86B6E31E2C94301D075CB3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\24c5a11c7c55d609ed86b6e31e2c94301d075cb3"), fInfoLevelId=0x0, lpFileInformation=0x22135c0 | out: lpFileInformation=0x22135c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x459406e4, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x459406e4, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x459406e4, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0x1584)) returned 1 [0156.044] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0156.044] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\24C5A11C7C55D609ED86B6E31E2C94301D075CB3", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\24C5A11C7C55D609ED86B6E31E2C94301D075CB3", lpFilePart=0x0) returned 0x85 [0156.044] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0156.044] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\24C5A11C7C55D609ED86B6E31E2C94301D075CB3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\24c5a11c7c55d609ed86b6e31e2c94301d075cb3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0156.147] GetFileType (hFile=0x444) returned 0x1 [0156.147] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0156.147] GetFileType (hFile=0x444) returned 0x1 [0156.147] ReadFile (in: hFile=0x444, lpBuffer=0x2215af0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x2215af0*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0156.160] CloseHandle (hObject=0x444) returned 1 [0156.161] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\24C5A11C7C55D609ED86B6E31E2C94301D075CB3", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\24C5A11C7C55D609ED86B6E31E2C94301D075CB3", lpFilePart=0x0) returned 0x85 [0156.161] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0156.161] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\24C5A11C7C55D609ED86B6E31E2C94301D075CB3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\24c5a11c7c55d609ed86b6e31e2c94301d075cb3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0156.161] GetFileType (hFile=0x444) returned 0x1 [0156.161] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0156.161] GetFileType (hFile=0x444) returned 0x1 [0156.161] WriteFile (in: hFile=0x444, lpBuffer=0x22137a0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x22137a0*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0156.161] CloseHandle (hObject=0x444) returned 1 [0156.162] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\24C5A11C7C55D609ED86B6E31E2C94301D075CB3", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\24C5A11C7C55D609ED86B6E31E2C94301D075CB3", lpFilePart=0x0) returned 0x85 [0156.162] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\24C5A11C7C55D609ED86B6E31E2C94301D075CB3.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\24C5A11C7C55D609ED86B6E31E2C94301D075CB3.xuy", lpFilePart=0x0) returned 0x89 [0156.162] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0156.162] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\24C5A11C7C55D609ED86B6E31E2C94301D075CB3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\24c5a11c7c55d609ed86b6e31e2c94301d075cb3"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x459406e4, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x459406e4, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x48ed693c, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0156.162] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0156.162] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\24C5A11C7C55D609ED86B6E31E2C94301D075CB3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\24c5a11c7c55d609ed86b6e31e2c94301d075cb3"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\24C5A11C7C55D609ED86B6E31E2C94301D075CB3.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\24c5a11c7c55d609ed86b6e31e2c94301d075cb3.xuy")) returned 1 [0156.163] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\24F9514653FD834D9D33E21B4C0AECB308550A9A", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\24F9514653FD834D9D33E21B4C0AECB308550A9A", lpFilePart=0x0) returned 0x85 [0156.163] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0156.163] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\24F9514653FD834D9D33E21B4C0AECB308550A9A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\24f9514653fd834d9d33e21b4c0aecb308550a9a"), fInfoLevelId=0x0, lpFileInformation=0x2292098 | out: lpFileInformation=0x2292098*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3eed330c, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3eed330c, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xc55b01c8, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x12083)) returned 1 [0156.164] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0156.164] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\24F9514653FD834D9D33E21B4C0AECB308550A9A", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\24F9514653FD834D9D33E21B4C0AECB308550A9A", lpFilePart=0x0) returned 0x85 [0156.164] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0156.164] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\24F9514653FD834D9D33E21B4C0AECB308550A9A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\24f9514653fd834d9d33e21b4c0aecb308550a9a"), fInfoLevelId=0x0, lpFileInformation=0x2292298 | out: lpFileInformation=0x2292298*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3eed330c, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3eed330c, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xc55b01c8, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x12083)) returned 1 [0156.164] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0156.164] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\24F9514653FD834D9D33E21B4C0AECB308550A9A", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\24F9514653FD834D9D33E21B4C0AECB308550A9A", lpFilePart=0x0) returned 0x85 [0156.164] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0156.164] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\24F9514653FD834D9D33E21B4C0AECB308550A9A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\24f9514653fd834d9d33e21b4c0aecb308550a9a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0156.165] GetFileType (hFile=0x444) returned 0x1 [0156.165] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0156.165] GetFileType (hFile=0x444) returned 0x1 [0156.165] ReadFile (in: hFile=0x444, lpBuffer=0x22947c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x22947c8*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0156.177] CloseHandle (hObject=0x444) returned 1 [0156.183] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\24F9514653FD834D9D33E21B4C0AECB308550A9A", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\24F9514653FD834D9D33E21B4C0AECB308550A9A", lpFilePart=0x0) returned 0x85 [0156.183] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0156.183] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\24F9514653FD834D9D33E21B4C0AECB308550A9A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\24f9514653fd834d9d33e21b4c0aecb308550a9a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0156.183] GetFileType (hFile=0x444) returned 0x1 [0156.183] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0156.183] GetFileType (hFile=0x444) returned 0x1 [0156.183] WriteFile (in: hFile=0x444, lpBuffer=0x2292478*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x2292478*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0156.184] CloseHandle (hObject=0x444) returned 1 [0156.184] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\24F9514653FD834D9D33E21B4C0AECB308550A9A", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\24F9514653FD834D9D33E21B4C0AECB308550A9A", lpFilePart=0x0) returned 0x85 [0156.184] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\24F9514653FD834D9D33E21B4C0AECB308550A9A.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\24F9514653FD834D9D33E21B4C0AECB308550A9A.xuy", lpFilePart=0x0) returned 0x89 [0156.184] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0156.184] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\24F9514653FD834D9D33E21B4C0AECB308550A9A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\24f9514653fd834d9d33e21b4c0aecb308550a9a"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3eed330c, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3eed330c, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x48efcf17, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x12083)) returned 1 [0156.184] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0156.184] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\24F9514653FD834D9D33E21B4C0AECB308550A9A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\24f9514653fd834d9d33e21b4c0aecb308550a9a"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\24F9514653FD834D9D33E21B4C0AECB308550A9A.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\24f9514653fd834d9d33e21b4c0aecb308550a9a.xuy")) returned 1 [0156.186] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2530EF3224B6681D2B34ED5DB0B170C716EB1E39", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2530EF3224B6681D2B34ED5DB0B170C716EB1E39", lpFilePart=0x0) returned 0x85 [0156.186] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0156.186] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2530EF3224B6681D2B34ED5DB0B170C716EB1E39" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2530ef3224b6681d2b34ed5db0b170c716eb1e39"), fInfoLevelId=0x0, lpFileInformation=0x2310d70 | out: lpFileInformation=0x2310d70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x615c4498, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x615c4498, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x615c4498, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xed9)) returned 1 [0156.186] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0156.186] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2530EF3224B6681D2B34ED5DB0B170C716EB1E39", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2530EF3224B6681D2B34ED5DB0B170C716EB1E39", lpFilePart=0x0) returned 0x85 [0156.187] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0156.187] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2530EF3224B6681D2B34ED5DB0B170C716EB1E39" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2530ef3224b6681d2b34ed5db0b170c716eb1e39"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0156.187] GetFileType (hFile=0x444) returned 0x1 [0156.187] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0156.187] GetFileType (hFile=0x444) returned 0x1 [0156.187] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xed9 [0156.187] ReadFile (in: hFile=0x444, lpBuffer=0x2312068, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x2312068*, lpNumberOfBytesRead=0x3be5c8*=0xed9, lpOverlapped=0x0) returned 1 [0156.198] CloseHandle (hObject=0x444) returned 1 [0156.257] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2530EF3224B6681D2B34ED5DB0B170C716EB1E39", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2530EF3224B6681D2B34ED5DB0B170C716EB1E39", lpFilePart=0x0) returned 0x85 [0156.257] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0156.257] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2530EF3224B6681D2B34ED5DB0B170C716EB1E39" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2530ef3224b6681d2b34ed5db0b170c716eb1e39"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0156.259] GetFileType (hFile=0x444) returned 0x1 [0156.259] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0156.259] GetFileType (hFile=0x444) returned 0x1 [0156.259] WriteFile (in: hFile=0x444, lpBuffer=0x218e4d8*, nNumberOfBytesToWrite=0xee0, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x218e4d8*, lpNumberOfBytesWritten=0x3be4d8*=0xee0, lpOverlapped=0x0) returned 1 [0156.260] CloseHandle (hObject=0x444) returned 1 [0156.260] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2530EF3224B6681D2B34ED5DB0B170C716EB1E39", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2530EF3224B6681D2B34ED5DB0B170C716EB1E39", lpFilePart=0x0) returned 0x85 [0156.260] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2530EF3224B6681D2B34ED5DB0B170C716EB1E39.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2530EF3224B6681D2B34ED5DB0B170C716EB1E39.xuy", lpFilePart=0x0) returned 0x89 [0156.260] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0156.260] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2530EF3224B6681D2B34ED5DB0B170C716EB1E39" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2530ef3224b6681d2b34ed5db0b170c716eb1e39"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x615c4498, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x615c4498, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x48fbb88b, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xee0)) returned 1 [0156.260] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0156.260] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2530EF3224B6681D2B34ED5DB0B170C716EB1E39" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2530ef3224b6681d2b34ed5db0b170c716eb1e39"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2530EF3224B6681D2B34ED5DB0B170C716EB1E39.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2530ef3224b6681d2b34ed5db0b170c716eb1e39.xuy")) returned 1 [0156.261] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2587F851FECE6E69F3B26E54EDE4E02BD3C1D496", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2587F851FECE6E69F3B26E54EDE4E02BD3C1D496", lpFilePart=0x0) returned 0x85 [0156.261] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0156.262] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2587F851FECE6E69F3B26E54EDE4E02BD3C1D496" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2587f851fece6e69f3b26e54ede4e02bd3c1d496"), fInfoLevelId=0x0, lpFileInformation=0x218f898 | out: lpFileInformation=0x218f898*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61551d8c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x61551d8c, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x61551d8c, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x1134)) returned 1 [0156.262] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0156.262] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2587F851FECE6E69F3B26E54EDE4E02BD3C1D496", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2587F851FECE6E69F3B26E54EDE4E02BD3C1D496", lpFilePart=0x0) returned 0x85 [0156.262] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0156.262] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2587F851FECE6E69F3B26E54EDE4E02BD3C1D496" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2587f851fece6e69f3b26e54ede4e02bd3c1d496"), fInfoLevelId=0x0, lpFileInformation=0x218fa98 | out: lpFileInformation=0x218fa98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61551d8c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x61551d8c, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x61551d8c, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x1134)) returned 1 [0156.262] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0156.262] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2587F851FECE6E69F3B26E54EDE4E02BD3C1D496", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2587F851FECE6E69F3B26E54EDE4E02BD3C1D496", lpFilePart=0x0) returned 0x85 [0156.262] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0156.262] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2587F851FECE6E69F3B26E54EDE4E02BD3C1D496" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2587f851fece6e69f3b26e54ede4e02bd3c1d496"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0156.263] GetFileType (hFile=0x444) returned 0x1 [0156.263] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0156.263] GetFileType (hFile=0x444) returned 0x1 [0156.263] ReadFile (in: hFile=0x444, lpBuffer=0x2191fc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x2191fc8*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0156.289] CloseHandle (hObject=0x444) returned 1 [0156.289] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2587F851FECE6E69F3B26E54EDE4E02BD3C1D496", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2587F851FECE6E69F3B26E54EDE4E02BD3C1D496", lpFilePart=0x0) returned 0x85 [0156.289] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0156.289] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2587F851FECE6E69F3B26E54EDE4E02BD3C1D496" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2587f851fece6e69f3b26e54ede4e02bd3c1d496"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0156.289] GetFileType (hFile=0x444) returned 0x1 [0156.289] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0156.289] GetFileType (hFile=0x444) returned 0x1 [0156.289] WriteFile (in: hFile=0x444, lpBuffer=0x218fc78*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x218fc78*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0156.290] CloseHandle (hObject=0x444) returned 1 [0156.290] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2587F851FECE6E69F3B26E54EDE4E02BD3C1D496", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2587F851FECE6E69F3B26E54EDE4E02BD3C1D496", lpFilePart=0x0) returned 0x85 [0156.290] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2587F851FECE6E69F3B26E54EDE4E02BD3C1D496.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2587F851FECE6E69F3B26E54EDE4E02BD3C1D496.xuy", lpFilePart=0x0) returned 0x89 [0156.290] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0156.290] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2587F851FECE6E69F3B26E54EDE4E02BD3C1D496" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2587f851fece6e69f3b26e54ede4e02bd3c1d496"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61551d8c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x61551d8c, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x49007e78, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0156.290] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0156.290] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2587F851FECE6E69F3B26E54EDE4E02BD3C1D496" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2587f851fece6e69f3b26e54ede4e02bd3c1d496"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2587F851FECE6E69F3B26E54EDE4E02BD3C1D496.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2587f851fece6e69f3b26e54ede4e02bd3c1d496.xuy")) returned 1 [0156.291] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2598A1CBB2EA6DB15DFF6382E5B17F41B01B4F0E", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2598A1CBB2EA6DB15DFF6382E5B17F41B01B4F0E", lpFilePart=0x0) returned 0x85 [0156.291] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0156.291] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2598A1CBB2EA6DB15DFF6382E5B17F41B01B4F0E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2598a1cbb2ea6db15dff6382e5b17f41b01b4f0e"), fInfoLevelId=0x0, lpFileInformation=0x220e570 | out: lpFileInformation=0x220e570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48c98576, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x48c98576, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x48c98576, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0xad2)) returned 1 [0156.291] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0156.291] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2598A1CBB2EA6DB15DFF6382E5B17F41B01B4F0E", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2598A1CBB2EA6DB15DFF6382E5B17F41B01B4F0E", lpFilePart=0x0) returned 0x85 [0156.291] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0156.292] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2598A1CBB2EA6DB15DFF6382E5B17F41B01B4F0E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2598a1cbb2ea6db15dff6382e5b17f41b01b4f0e"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0156.292] GetFileType (hFile=0x444) returned 0x1 [0156.292] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0156.292] GetFileType (hFile=0x444) returned 0x1 [0156.292] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xad2 [0156.292] ReadFile (in: hFile=0x444, lpBuffer=0x220f460, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x220f460*, lpNumberOfBytesRead=0x3be5c8*=0xad2, lpOverlapped=0x0) returned 1 [0156.309] CloseHandle (hObject=0x444) returned 1 [0156.319] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2598A1CBB2EA6DB15DFF6382E5B17F41B01B4F0E", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2598A1CBB2EA6DB15DFF6382E5B17F41B01B4F0E", lpFilePart=0x0) returned 0x85 [0156.319] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0156.319] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2598A1CBB2EA6DB15DFF6382E5B17F41B01B4F0E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2598a1cbb2ea6db15dff6382e5b17f41b01b4f0e"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0156.321] GetFileType (hFile=0x444) returned 0x1 [0156.321] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0156.321] GetFileType (hFile=0x444) returned 0x1 [0156.321] WriteFile (in: hFile=0x444, lpBuffer=0x2289b58*, nNumberOfBytesToWrite=0xae0, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x2289b58*, lpNumberOfBytesWritten=0x3be4d8*=0xae0, lpOverlapped=0x0) returned 1 [0156.321] CloseHandle (hObject=0x444) returned 1 [0156.322] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2598A1CBB2EA6DB15DFF6382E5B17F41B01B4F0E", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2598A1CBB2EA6DB15DFF6382E5B17F41B01B4F0E", lpFilePart=0x0) returned 0x85 [0156.322] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2598A1CBB2EA6DB15DFF6382E5B17F41B01B4F0E.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2598A1CBB2EA6DB15DFF6382E5B17F41B01B4F0E.xuy", lpFilePart=0x0) returned 0x89 [0156.322] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0156.322] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2598A1CBB2EA6DB15DFF6382E5B17F41B01B4F0E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2598a1cbb2ea6db15dff6382e5b17f41b01b4f0e"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48c98576, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x48c98576, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x490540a2, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xae0)) returned 1 [0156.322] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0156.322] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2598A1CBB2EA6DB15DFF6382E5B17F41B01B4F0E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2598a1cbb2ea6db15dff6382e5b17f41b01b4f0e"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2598A1CBB2EA6DB15DFF6382E5B17F41B01B4F0E.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2598a1cbb2ea6db15dff6382e5b17f41b01b4f0e.xuy")) returned 1 [0156.323] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\25AFA0D28E7333EEE9F600A4A4F5B1C37A33789F", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\25AFA0D28E7333EEE9F600A4A4F5B1C37A33789F", lpFilePart=0x0) returned 0x85 [0156.323] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0156.323] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\25AFA0D28E7333EEE9F600A4A4F5B1C37A33789F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\25afa0d28e7333eee9f600a4a4f5b1c37a33789f"), fInfoLevelId=0x0, lpFileInformation=0x228af18 | out: lpFileInformation=0x228af18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7112e24e, ftCreationTime.dwHighDateTime=0x1d2d43f, ftLastAccessTime.dwLowDateTime=0x7112e24e, ftLastAccessTime.dwHighDateTime=0x1d2d43f, ftLastWriteTime.dwLowDateTime=0x7112e24e, ftLastWriteTime.dwHighDateTime=0x1d2d43f, nFileSizeHigh=0x0, nFileSizeLow=0x528)) returned 1 [0156.323] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0156.323] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\25AFA0D28E7333EEE9F600A4A4F5B1C37A33789F", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\25AFA0D28E7333EEE9F600A4A4F5B1C37A33789F", lpFilePart=0x0) returned 0x85 [0156.323] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0156.323] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\25AFA0D28E7333EEE9F600A4A4F5B1C37A33789F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\25afa0d28e7333eee9f600a4a4f5b1c37a33789f"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0156.323] GetFileType (hFile=0x444) returned 0x1 [0156.323] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0156.323] GetFileType (hFile=0x444) returned 0x1 [0156.323] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x528 [0156.323] ReadFile (in: hFile=0x444, lpBuffer=0x228b858, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x228b858*, lpNumberOfBytesRead=0x3be5c8*=0x528, lpOverlapped=0x0) returned 1 [0156.334] CloseHandle (hObject=0x444) returned 1 [0156.344] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\25AFA0D28E7333EEE9F600A4A4F5B1C37A33789F", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\25AFA0D28E7333EEE9F600A4A4F5B1C37A33789F", lpFilePart=0x0) returned 0x85 [0156.344] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0156.344] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\25AFA0D28E7333EEE9F600A4A4F5B1C37A33789F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\25afa0d28e7333eee9f600a4a4f5b1c37a33789f"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0156.346] GetFileType (hFile=0x444) returned 0x1 [0156.346] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0156.346] GetFileType (hFile=0x444) returned 0x1 [0156.346] WriteFile (in: hFile=0x444, lpBuffer=0x23042d8*, nNumberOfBytesToWrite=0x530, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x23042d8*, lpNumberOfBytesWritten=0x3be4d8*=0x530, lpOverlapped=0x0) returned 1 [0156.347] CloseHandle (hObject=0x444) returned 1 [0156.347] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\25AFA0D28E7333EEE9F600A4A4F5B1C37A33789F", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\25AFA0D28E7333EEE9F600A4A4F5B1C37A33789F", lpFilePart=0x0) returned 0x85 [0156.347] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\25AFA0D28E7333EEE9F600A4A4F5B1C37A33789F.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\25AFA0D28E7333EEE9F600A4A4F5B1C37A33789F.xuy", lpFilePart=0x0) returned 0x89 [0156.347] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0156.347] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\25AFA0D28E7333EEE9F600A4A4F5B1C37A33789F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\25afa0d28e7333eee9f600a4a4f5b1c37a33789f"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7112e24e, ftCreationTime.dwHighDateTime=0x1d2d43f, ftLastAccessTime.dwLowDateTime=0x7112e24e, ftLastAccessTime.dwHighDateTime=0x1d2d43f, ftLastWriteTime.dwLowDateTime=0x490a07bc, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x530)) returned 1 [0156.347] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0156.347] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\25AFA0D28E7333EEE9F600A4A4F5B1C37A33789F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\25afa0d28e7333eee9f600a4a4f5b1c37a33789f"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\25AFA0D28E7333EEE9F600A4A4F5B1C37A33789F.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\25afa0d28e7333eee9f600a4a4f5b1c37a33789f.xuy")) returned 1 [0156.349] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\26686166E96A3EBDAC2ED90D8F9B4ECD22BBB577", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\26686166E96A3EBDAC2ED90D8F9B4ECD22BBB577", lpFilePart=0x0) returned 0x85 [0156.349] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0156.349] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\26686166E96A3EBDAC2ED90D8F9B4ECD22BBB577" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\26686166e96a3ebdac2ed90d8f9b4ecd22bbb577"), fInfoLevelId=0x0, lpFileInformation=0x2305698 | out: lpFileInformation=0x2305698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6159e1e8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x6159e1e8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x615c4498, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xf12)) returned 1 [0156.350] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0156.350] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\26686166E96A3EBDAC2ED90D8F9B4ECD22BBB577", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\26686166E96A3EBDAC2ED90D8F9B4ECD22BBB577", lpFilePart=0x0) returned 0x85 [0156.350] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0156.350] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\26686166E96A3EBDAC2ED90D8F9B4ECD22BBB577" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\26686166e96a3ebdac2ed90d8f9b4ecd22bbb577"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0156.350] GetFileType (hFile=0x444) returned 0x1 [0156.350] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0156.350] GetFileType (hFile=0x444) returned 0x1 [0156.350] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xf12 [0156.350] ReadFile (in: hFile=0x444, lpBuffer=0x23069c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x23069c8*, lpNumberOfBytesRead=0x3be5c8*=0xf12, lpOverlapped=0x0) returned 1 [0156.351] CloseHandle (hObject=0x444) returned 1 [0156.362] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\26686166E96A3EBDAC2ED90D8F9B4ECD22BBB577", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\26686166E96A3EBDAC2ED90D8F9B4ECD22BBB577", lpFilePart=0x0) returned 0x85 [0156.362] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0156.362] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\26686166E96A3EBDAC2ED90D8F9B4ECD22BBB577" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\26686166e96a3ebdac2ed90d8f9b4ecd22bbb577"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0156.364] GetFileType (hFile=0x444) returned 0x1 [0156.364] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0156.364] GetFileType (hFile=0x444) returned 0x1 [0156.364] WriteFile (in: hFile=0x444, lpBuffer=0x2382600*, nNumberOfBytesToWrite=0xf20, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x2382600*, lpNumberOfBytesWritten=0x3be4d8*=0xf20, lpOverlapped=0x0) returned 1 [0156.365] CloseHandle (hObject=0x444) returned 1 [0156.365] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\26686166E96A3EBDAC2ED90D8F9B4ECD22BBB577", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\26686166E96A3EBDAC2ED90D8F9B4ECD22BBB577", lpFilePart=0x0) returned 0x85 [0156.365] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\26686166E96A3EBDAC2ED90D8F9B4ECD22BBB577.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\26686166E96A3EBDAC2ED90D8F9B4ECD22BBB577.xuy", lpFilePart=0x0) returned 0x89 [0156.365] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0156.365] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\26686166E96A3EBDAC2ED90D8F9B4ECD22BBB577" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\26686166e96a3ebdac2ed90d8f9b4ecd22bbb577"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6159e1e8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x6159e1e8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x490c6b1f, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xf20)) returned 1 [0156.365] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0156.365] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\26686166E96A3EBDAC2ED90D8F9B4ECD22BBB577" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\26686166e96a3ebdac2ed90d8f9b4ecd22bbb577"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\26686166E96A3EBDAC2ED90D8F9B4ECD22BBB577.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\26686166e96a3ebdac2ed90d8f9b4ecd22bbb577.xuy")) returned 1 [0156.366] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\26926D1CDB0298F2781D6FAD532518F7C8B787DA", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\26926D1CDB0298F2781D6FAD532518F7C8B787DA", lpFilePart=0x0) returned 0x85 [0156.366] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0156.366] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\26926D1CDB0298F2781D6FAD532518F7C8B787DA" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\26926d1cdb0298f2781d6fad532518f7c8b787da"), fInfoLevelId=0x0, lpFileInformation=0x23839c0 | out: lpFileInformation=0x23839c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2c16060, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xd2c16060, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0xd2e05ef5, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x27c3)) returned 1 [0156.367] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0156.367] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\26926D1CDB0298F2781D6FAD532518F7C8B787DA", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\26926D1CDB0298F2781D6FAD532518F7C8B787DA", lpFilePart=0x0) returned 0x85 [0156.367] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0156.367] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\26926D1CDB0298F2781D6FAD532518F7C8B787DA" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\26926d1cdb0298f2781d6fad532518f7c8b787da"), fInfoLevelId=0x0, lpFileInformation=0x2383bc0 | out: lpFileInformation=0x2383bc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2c16060, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xd2c16060, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0xd2e05ef5, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x27c3)) returned 1 [0156.367] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0156.367] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\26926D1CDB0298F2781D6FAD532518F7C8B787DA", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\26926D1CDB0298F2781D6FAD532518F7C8B787DA", lpFilePart=0x0) returned 0x85 [0156.367] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0156.367] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\26926D1CDB0298F2781D6FAD532518F7C8B787DA" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\26926d1cdb0298f2781d6fad532518f7c8b787da"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0156.368] GetFileType (hFile=0x444) returned 0x1 [0156.368] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0156.368] GetFileType (hFile=0x444) returned 0x1 [0156.371] ReadFile (in: hFile=0x444, lpBuffer=0x2187e38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x2187e38*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0156.409] CloseHandle (hObject=0x444) returned 1 [0156.409] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\26926D1CDB0298F2781D6FAD532518F7C8B787DA", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\26926D1CDB0298F2781D6FAD532518F7C8B787DA", lpFilePart=0x0) returned 0x85 [0156.409] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0156.409] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\26926D1CDB0298F2781D6FAD532518F7C8B787DA" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\26926d1cdb0298f2781d6fad532518f7c8b787da"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0156.410] GetFileType (hFile=0x444) returned 0x1 [0156.410] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0156.410] GetFileType (hFile=0x444) returned 0x1 [0156.410] WriteFile (in: hFile=0x444, lpBuffer=0x2185c68*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x2185c68*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0156.410] CloseHandle (hObject=0x444) returned 1 [0156.410] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\26926D1CDB0298F2781D6FAD532518F7C8B787DA", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\26926D1CDB0298F2781D6FAD532518F7C8B787DA", lpFilePart=0x0) returned 0x85 [0156.410] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\26926D1CDB0298F2781D6FAD532518F7C8B787DA.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\26926D1CDB0298F2781D6FAD532518F7C8B787DA.xuy", lpFilePart=0x0) returned 0x89 [0156.410] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0156.410] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\26926D1CDB0298F2781D6FAD532518F7C8B787DA" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\26926d1cdb0298f2781d6fad532518f7c8b787da"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2c16060, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xd2c16060, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x4913924a, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x27c3)) returned 1 [0156.410] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0156.410] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\26926D1CDB0298F2781D6FAD532518F7C8B787DA" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\26926d1cdb0298f2781d6fad532518f7c8b787da"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\26926D1CDB0298F2781D6FAD532518F7C8B787DA.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\26926d1cdb0298f2781d6fad532518f7c8b787da.xuy")) returned 1 [0156.412] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\26C8D0872DE7292BC9C7F54426A5E887557300EA", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\26C8D0872DE7292BC9C7F54426A5E887557300EA", lpFilePart=0x0) returned 0x85 [0156.412] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0156.412] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\26C8D0872DE7292BC9C7F54426A5E887557300EA" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\26c8d0872de7292bc9c7f54426a5e887557300ea"), fInfoLevelId=0x0, lpFileInformation=0x22043e0 | out: lpFileInformation=0x22043e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f888b2b, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3f888b2b, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x41b7d07f, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0xe3d)) returned 1 [0156.412] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0156.412] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\26C8D0872DE7292BC9C7F54426A5E887557300EA", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\26C8D0872DE7292BC9C7F54426A5E887557300EA", lpFilePart=0x0) returned 0x85 [0156.412] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0156.412] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\26C8D0872DE7292BC9C7F54426A5E887557300EA" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\26c8d0872de7292bc9c7f54426a5e887557300ea"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0156.412] GetFileType (hFile=0x444) returned 0x1 [0156.412] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0156.412] GetFileType (hFile=0x444) returned 0x1 [0156.412] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xe3d [0156.412] ReadFile (in: hFile=0x444, lpBuffer=0x2205638, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x2205638*, lpNumberOfBytesRead=0x3be5c8*=0xe3d, lpOverlapped=0x0) returned 1 [0156.427] CloseHandle (hObject=0x444) returned 1 [0156.437] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\26C8D0872DE7292BC9C7F54426A5E887557300EA", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\26C8D0872DE7292BC9C7F54426A5E887557300EA", lpFilePart=0x0) returned 0x85 [0156.437] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0156.437] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\26C8D0872DE7292BC9C7F54426A5E887557300EA" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\26c8d0872de7292bc9c7f54426a5e887557300ea"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0156.439] GetFileType (hFile=0x444) returned 0x1 [0156.439] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0156.439] GetFileType (hFile=0x444) returned 0x1 [0156.439] WriteFile (in: hFile=0x444, lpBuffer=0x2280e08*, nNumberOfBytesToWrite=0xe40, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x2280e08*, lpNumberOfBytesWritten=0x3be4d8*=0xe40, lpOverlapped=0x0) returned 1 [0156.440] CloseHandle (hObject=0x444) returned 1 [0156.440] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\26C8D0872DE7292BC9C7F54426A5E887557300EA", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\26C8D0872DE7292BC9C7F54426A5E887557300EA", lpFilePart=0x0) returned 0x85 [0156.440] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\26C8D0872DE7292BC9C7F54426A5E887557300EA.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\26C8D0872DE7292BC9C7F54426A5E887557300EA.xuy", lpFilePart=0x0) returned 0x89 [0156.440] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0156.440] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\26C8D0872DE7292BC9C7F54426A5E887557300EA" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\26c8d0872de7292bc9c7f54426a5e887557300ea"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f888b2b, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3f888b2b, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x491853ae, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xe40)) returned 1 [0156.440] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0156.440] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\26C8D0872DE7292BC9C7F54426A5E887557300EA" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\26c8d0872de7292bc9c7f54426a5e887557300ea"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\26C8D0872DE7292BC9C7F54426A5E887557300EA.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\26c8d0872de7292bc9c7f54426a5e887557300ea.xuy")) returned 1 [0156.441] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\26D5902E65F2EC88B7E5ED33E815A3FDBE18E10F", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\26D5902E65F2EC88B7E5ED33E815A3FDBE18E10F", lpFilePart=0x0) returned 0x85 [0156.441] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0156.441] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\26D5902E65F2EC88B7E5ED33E815A3FDBE18E10F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\26d5902e65f2ec88b7e5ed33e815a3fdbe18e10f"), fInfoLevelId=0x0, lpFileInformation=0x22821c8 | out: lpFileInformation=0x22821c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61551d8c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x61551d8c, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x61551d8c, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x1165)) returned 1 [0156.442] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0156.442] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\26D5902E65F2EC88B7E5ED33E815A3FDBE18E10F", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\26D5902E65F2EC88B7E5ED33E815A3FDBE18E10F", lpFilePart=0x0) returned 0x85 [0156.442] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0156.442] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\26D5902E65F2EC88B7E5ED33E815A3FDBE18E10F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\26d5902e65f2ec88b7e5ed33e815a3fdbe18e10f"), fInfoLevelId=0x0, lpFileInformation=0x22823c8 | out: lpFileInformation=0x22823c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61551d8c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x61551d8c, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x61551d8c, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x1165)) returned 1 [0156.442] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0156.442] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\26D5902E65F2EC88B7E5ED33E815A3FDBE18E10F", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\26D5902E65F2EC88B7E5ED33E815A3FDBE18E10F", lpFilePart=0x0) returned 0x85 [0156.442] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0156.442] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\26D5902E65F2EC88B7E5ED33E815A3FDBE18E10F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\26d5902e65f2ec88b7e5ed33e815a3fdbe18e10f"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0156.443] GetFileType (hFile=0x444) returned 0x1 [0156.443] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0156.443] GetFileType (hFile=0x444) returned 0x1 [0156.443] ReadFile (in: hFile=0x444, lpBuffer=0x22848f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x22848f8*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0156.458] CloseHandle (hObject=0x444) returned 1 [0156.459] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\26D5902E65F2EC88B7E5ED33E815A3FDBE18E10F", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\26D5902E65F2EC88B7E5ED33E815A3FDBE18E10F", lpFilePart=0x0) returned 0x85 [0156.459] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0156.459] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\26D5902E65F2EC88B7E5ED33E815A3FDBE18E10F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\26d5902e65f2ec88b7e5ed33e815a3fdbe18e10f"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0156.459] GetFileType (hFile=0x444) returned 0x1 [0156.459] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0156.459] GetFileType (hFile=0x444) returned 0x1 [0156.459] WriteFile (in: hFile=0x444, lpBuffer=0x22825a8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x22825a8*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0156.459] CloseHandle (hObject=0x444) returned 1 [0156.459] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\26D5902E65F2EC88B7E5ED33E815A3FDBE18E10F", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\26D5902E65F2EC88B7E5ED33E815A3FDBE18E10F", lpFilePart=0x0) returned 0x85 [0156.459] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\26D5902E65F2EC88B7E5ED33E815A3FDBE18E10F.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\26D5902E65F2EC88B7E5ED33E815A3FDBE18E10F.xuy", lpFilePart=0x0) returned 0x89 [0156.459] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0156.460] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\26D5902E65F2EC88B7E5ED33E815A3FDBE18E10F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\26d5902e65f2ec88b7e5ed33e815a3fdbe18e10f"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61551d8c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x61551d8c, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x491af90e, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0156.460] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0156.460] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\26D5902E65F2EC88B7E5ED33E815A3FDBE18E10F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\26d5902e65f2ec88b7e5ed33e815a3fdbe18e10f"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\26D5902E65F2EC88B7E5ED33E815A3FDBE18E10F.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\26d5902e65f2ec88b7e5ed33e815a3fdbe18e10f.xuy")) returned 1 [0156.461] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\270900E85767111BD4C54667E304A0B6656EA0A0", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\270900E85767111BD4C54667E304A0B6656EA0A0", lpFilePart=0x0) returned 0x85 [0156.461] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0156.461] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\270900E85767111BD4C54667E304A0B6656EA0A0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\270900e85767111bd4c54667e304a0b6656ea0a0"), fInfoLevelId=0x0, lpFileInformation=0x2300ea0 | out: lpFileInformation=0x2300ea0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87a6c7f3, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x87a6c7f3, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x87a6ef06, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x10b2)) returned 1 [0156.461] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0156.461] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\270900E85767111BD4C54667E304A0B6656EA0A0", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\270900E85767111BD4C54667E304A0B6656EA0A0", lpFilePart=0x0) returned 0x85 [0156.461] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0156.461] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\270900E85767111BD4C54667E304A0B6656EA0A0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\270900e85767111bd4c54667e304a0b6656ea0a0"), fInfoLevelId=0x0, lpFileInformation=0x23010a0 | out: lpFileInformation=0x23010a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87a6c7f3, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x87a6c7f3, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x87a6ef06, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x10b2)) returned 1 [0156.461] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0156.461] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\270900E85767111BD4C54667E304A0B6656EA0A0", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\270900E85767111BD4C54667E304A0B6656EA0A0", lpFilePart=0x0) returned 0x85 [0156.461] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0156.461] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\270900E85767111BD4C54667E304A0B6656EA0A0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\270900e85767111bd4c54667e304a0b6656ea0a0"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0156.462] GetFileType (hFile=0x444) returned 0x1 [0156.462] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0156.462] GetFileType (hFile=0x444) returned 0x1 [0156.462] ReadFile (in: hFile=0x444, lpBuffer=0x23035d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x23035d0*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0156.484] CloseHandle (hObject=0x444) returned 1 [0156.484] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\270900E85767111BD4C54667E304A0B6656EA0A0", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\270900E85767111BD4C54667E304A0B6656EA0A0", lpFilePart=0x0) returned 0x85 [0156.484] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0156.484] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\270900E85767111BD4C54667E304A0B6656EA0A0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\270900e85767111bd4c54667e304a0b6656ea0a0"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0156.485] GetFileType (hFile=0x444) returned 0x1 [0156.485] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0156.485] GetFileType (hFile=0x444) returned 0x1 [0156.485] WriteFile (in: hFile=0x444, lpBuffer=0x2301280*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x2301280*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0156.485] CloseHandle (hObject=0x444) returned 1 [0156.485] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\270900E85767111BD4C54667E304A0B6656EA0A0", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\270900E85767111BD4C54667E304A0B6656EA0A0", lpFilePart=0x0) returned 0x85 [0156.485] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\270900E85767111BD4C54667E304A0B6656EA0A0.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\270900E85767111BD4C54667E304A0B6656EA0A0.xuy", lpFilePart=0x0) returned 0x89 [0156.485] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0156.485] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\270900E85767111BD4C54667E304A0B6656EA0A0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\270900e85767111bd4c54667e304a0b6656ea0a0"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87a6c7f3, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x87a6c7f3, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x491f7bc5, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0156.485] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0156.485] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\270900E85767111BD4C54667E304A0B6656EA0A0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\270900e85767111bd4c54667e304a0b6656ea0a0"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\270900E85767111BD4C54667E304A0B6656EA0A0.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\270900e85767111bd4c54667e304a0b6656ea0a0.xuy")) returned 1 [0156.487] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\273736E26CFF7795BE550BE3B37B1D4598946999", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\273736E26CFF7795BE550BE3B37B1D4598946999", lpFilePart=0x0) returned 0x85 [0156.487] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0156.487] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\273736E26CFF7795BE550BE3B37B1D4598946999" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\273736e26cff7795be550be3b37b1d4598946999"), fInfoLevelId=0x0, lpFileInformation=0x237fb78 | out: lpFileInformation=0x237fb78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61577ff1, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x61577ff1, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x61577ff1, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x198b)) returned 1 [0156.487] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0156.487] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\273736E26CFF7795BE550BE3B37B1D4598946999", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\273736E26CFF7795BE550BE3B37B1D4598946999", lpFilePart=0x0) returned 0x85 [0156.487] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0156.487] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\273736E26CFF7795BE550BE3B37B1D4598946999" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\273736e26cff7795be550be3b37b1d4598946999"), fInfoLevelId=0x0, lpFileInformation=0x237fd78 | out: lpFileInformation=0x237fd78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61577ff1, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x61577ff1, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x61577ff1, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x198b)) returned 1 [0156.487] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0156.487] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\273736E26CFF7795BE550BE3B37B1D4598946999", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\273736E26CFF7795BE550BE3B37B1D4598946999", lpFilePart=0x0) returned 0x85 [0156.487] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0156.487] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\273736E26CFF7795BE550BE3B37B1D4598946999" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\273736e26cff7795be550be3b37b1d4598946999"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0156.488] GetFileType (hFile=0x444) returned 0x1 [0156.488] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0156.488] GetFileType (hFile=0x444) returned 0x1 [0156.488] ReadFile (in: hFile=0x444, lpBuffer=0x23822a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x23822a8*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0156.530] CloseHandle (hObject=0x444) returned 1 [0156.530] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\273736E26CFF7795BE550BE3B37B1D4598946999", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\273736E26CFF7795BE550BE3B37B1D4598946999", lpFilePart=0x0) returned 0x85 [0156.530] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0156.530] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\273736E26CFF7795BE550BE3B37B1D4598946999" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\273736e26cff7795be550be3b37b1d4598946999"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0156.530] GetFileType (hFile=0x444) returned 0x1 [0156.530] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0156.530] GetFileType (hFile=0x444) returned 0x1 [0156.530] WriteFile (in: hFile=0x444, lpBuffer=0x2185c28*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x2185c28*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0156.531] CloseHandle (hObject=0x444) returned 1 [0156.531] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\273736E26CFF7795BE550BE3B37B1D4598946999", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\273736E26CFF7795BE550BE3B37B1D4598946999", lpFilePart=0x0) returned 0x85 [0156.531] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\273736E26CFF7795BE550BE3B37B1D4598946999.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\273736E26CFF7795BE550BE3B37B1D4598946999.xuy", lpFilePart=0x0) returned 0x89 [0156.531] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0156.531] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\273736E26CFF7795BE550BE3B37B1D4598946999" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\273736e26cff7795be550be3b37b1d4598946999"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61577ff1, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x61577ff1, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x4926a35c, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0156.531] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0156.531] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\273736E26CFF7795BE550BE3B37B1D4598946999" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\273736e26cff7795be550be3b37b1d4598946999"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\273736E26CFF7795BE550BE3B37B1D4598946999.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\273736e26cff7795be550be3b37b1d4598946999.xuy")) returned 1 [0156.532] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\28380882022BE365EDE32586CD158C635B9BE8D1", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\28380882022BE365EDE32586CD158C635B9BE8D1", lpFilePart=0x0) returned 0x85 [0156.532] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0156.532] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\28380882022BE365EDE32586CD158C635B9BE8D1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\28380882022be365ede32586cd158c635b9be8d1"), fInfoLevelId=0x0, lpFileInformation=0x21ffc80 | out: lpFileInformation=0x21ffc80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48d30ecb, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x48d30ecb, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x48d30ecb, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0x529)) returned 1 [0156.532] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0156.532] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\28380882022BE365EDE32586CD158C635B9BE8D1", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\28380882022BE365EDE32586CD158C635B9BE8D1", lpFilePart=0x0) returned 0x85 [0156.533] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0156.533] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\28380882022BE365EDE32586CD158C635B9BE8D1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\28380882022be365ede32586cd158c635b9be8d1"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0156.533] GetFileType (hFile=0x444) returned 0x1 [0156.533] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0156.533] GetFileType (hFile=0x444) returned 0x1 [0156.533] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x529 [0156.533] ReadFile (in: hFile=0x444, lpBuffer=0x22005c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x22005c8*, lpNumberOfBytesRead=0x3be5c8*=0x529, lpOverlapped=0x0) returned 1 [0156.543] CloseHandle (hObject=0x444) returned 1 [0156.553] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\28380882022BE365EDE32586CD158C635B9BE8D1", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\28380882022BE365EDE32586CD158C635B9BE8D1", lpFilePart=0x0) returned 0x85 [0156.553] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0156.554] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\28380882022BE365EDE32586CD158C635B9BE8D1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\28380882022be365ede32586cd158c635b9be8d1"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0156.555] GetFileType (hFile=0x444) returned 0x1 [0156.555] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0156.555] GetFileType (hFile=0x444) returned 0x1 [0156.555] WriteFile (in: hFile=0x444, lpBuffer=0x2279048*, nNumberOfBytesToWrite=0x530, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x2279048*, lpNumberOfBytesWritten=0x3be4d8*=0x530, lpOverlapped=0x0) returned 1 [0156.556] CloseHandle (hObject=0x444) returned 1 [0156.556] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\28380882022BE365EDE32586CD158C635B9BE8D1", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\28380882022BE365EDE32586CD158C635B9BE8D1", lpFilePart=0x0) returned 0x85 [0156.556] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\28380882022BE365EDE32586CD158C635B9BE8D1.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\28380882022BE365EDE32586CD158C635B9BE8D1.xuy", lpFilePart=0x0) returned 0x89 [0156.556] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0156.556] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\28380882022BE365EDE32586CD158C635B9BE8D1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\28380882022be365ede32586cd158c635b9be8d1"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48d30ecb, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x48d30ecb, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x492906d8, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x530)) returned 1 [0156.556] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0156.556] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\28380882022BE365EDE32586CD158C635B9BE8D1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\28380882022be365ede32586cd158c635b9be8d1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\28380882022BE365EDE32586CD158C635B9BE8D1.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\28380882022be365ede32586cd158c635b9be8d1.xuy")) returned 1 [0156.557] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\28D18C8667B2E4C79E3CE2766CF075BBFA55C129", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\28D18C8667B2E4C79E3CE2766CF075BBFA55C129", lpFilePart=0x0) returned 0x85 [0156.558] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0156.558] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\28D18C8667B2E4C79E3CE2766CF075BBFA55C129" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\28d18c8667b2e4c79e3ce2766cf075bbfa55c129"), fInfoLevelId=0x0, lpFileInformation=0x227a408 | out: lpFileInformation=0x227a408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x862fb25e, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x862fb25e, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x862fb25e, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0xff1)) returned 1 [0156.558] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0156.558] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\28D18C8667B2E4C79E3CE2766CF075BBFA55C129", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\28D18C8667B2E4C79E3CE2766CF075BBFA55C129", lpFilePart=0x0) returned 0x85 [0156.558] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0156.559] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\28D18C8667B2E4C79E3CE2766CF075BBFA55C129" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\28d18c8667b2e4c79e3ce2766cf075bbfa55c129"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0156.559] GetFileType (hFile=0x444) returned 0x1 [0156.559] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0156.559] GetFileType (hFile=0x444) returned 0x1 [0156.559] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xff1 [0156.559] ReadFile (in: hFile=0x444, lpBuffer=0x227b818, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x227b818*, lpNumberOfBytesRead=0x3be5c8*=0xff1, lpOverlapped=0x0) returned 1 [0156.569] CloseHandle (hObject=0x444) returned 1 [0156.579] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\28D18C8667B2E4C79E3CE2766CF075BBFA55C129", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\28D18C8667B2E4C79E3CE2766CF075BBFA55C129", lpFilePart=0x0) returned 0x85 [0156.579] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0156.579] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\28D18C8667B2E4C79E3CE2766CF075BBFA55C129" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\28d18c8667b2e4c79e3ce2766cf075bbfa55c129"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0156.581] GetFileType (hFile=0x444) returned 0x1 [0156.581] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0156.581] GetFileType (hFile=0x444) returned 0x1 [0156.581] WriteFile (in: hFile=0x444, lpBuffer=0x22f6678*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x3be628, lpOverlapped=0x0 | out: lpBuffer=0x22f6678*, lpNumberOfBytesWritten=0x3be628*=0x1000, lpOverlapped=0x0) returned 1 [0156.581] CloseHandle (hObject=0x444) returned 1 [0156.581] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\28D18C8667B2E4C79E3CE2766CF075BBFA55C129", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\28D18C8667B2E4C79E3CE2766CF075BBFA55C129", lpFilePart=0x0) returned 0x85 [0156.581] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\28D18C8667B2E4C79E3CE2766CF075BBFA55C129.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\28D18C8667B2E4C79E3CE2766CF075BBFA55C129.xuy", lpFilePart=0x0) returned 0x89 [0156.582] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0156.582] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\28D18C8667B2E4C79E3CE2766CF075BBFA55C129" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\28d18c8667b2e4c79e3ce2766cf075bbfa55c129"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x862fb25e, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x862fb25e, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x492dc995, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0156.582] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0156.582] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\28D18C8667B2E4C79E3CE2766CF075BBFA55C129" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\28d18c8667b2e4c79e3ce2766cf075bbfa55c129"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\28D18C8667B2E4C79E3CE2766CF075BBFA55C129.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\28d18c8667b2e4c79e3ce2766cf075bbfa55c129.xuy")) returned 1 [0156.583] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\28DAEEA417486B2D8FF609CC22C0244D45F802F7", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\28DAEEA417486B2D8FF609CC22C0244D45F802F7", lpFilePart=0x0) returned 0x85 [0156.583] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0156.583] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\28DAEEA417486B2D8FF609CC22C0244D45F802F7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\28daeea417486b2d8ff609cc22c0244d45f802f7"), fInfoLevelId=0x0, lpFileInformation=0x22f7c58 | out: lpFileInformation=0x22f7c58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6159e1e8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x6159e1e8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x6159e1e8, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xf0f)) returned 1 [0156.583] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0156.583] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\28DAEEA417486B2D8FF609CC22C0244D45F802F7", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\28DAEEA417486B2D8FF609CC22C0244D45F802F7", lpFilePart=0x0) returned 0x85 [0156.583] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0156.583] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\28DAEEA417486B2D8FF609CC22C0244D45F802F7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\28daeea417486b2d8ff609cc22c0244d45f802f7"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0156.583] GetFileType (hFile=0x444) returned 0x1 [0156.583] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0156.583] GetFileType (hFile=0x444) returned 0x1 [0156.583] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xf0f [0156.583] ReadFile (in: hFile=0x444, lpBuffer=0x22f8f80, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x22f8f80*, lpNumberOfBytesRead=0x3be5c8*=0xf0f, lpOverlapped=0x0) returned 1 [0156.585] CloseHandle (hObject=0x444) returned 1 [0156.595] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\28DAEEA417486B2D8FF609CC22C0244D45F802F7", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\28DAEEA417486B2D8FF609CC22C0244D45F802F7", lpFilePart=0x0) returned 0x85 [0156.595] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0156.595] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\28DAEEA417486B2D8FF609CC22C0244D45F802F7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\28daeea417486b2d8ff609cc22c0244d45f802f7"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0156.597] GetFileType (hFile=0x444) returned 0x1 [0156.597] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0156.597] GetFileType (hFile=0x444) returned 0x1 [0156.597] WriteFile (in: hFile=0x444, lpBuffer=0x2374b60*, nNumberOfBytesToWrite=0xf10, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x2374b60*, lpNumberOfBytesWritten=0x3be4d8*=0xf10, lpOverlapped=0x0) returned 1 [0156.598] CloseHandle (hObject=0x444) returned 1 [0156.598] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\28DAEEA417486B2D8FF609CC22C0244D45F802F7", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\28DAEEA417486B2D8FF609CC22C0244D45F802F7", lpFilePart=0x0) returned 0x85 [0156.598] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\28DAEEA417486B2D8FF609CC22C0244D45F802F7.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\28DAEEA417486B2D8FF609CC22C0244D45F802F7.xuy", lpFilePart=0x0) returned 0x89 [0156.598] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0156.598] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\28DAEEA417486B2D8FF609CC22C0244D45F802F7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\28daeea417486b2d8ff609cc22c0244d45f802f7"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6159e1e8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x6159e1e8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x49302cdd, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xf10)) returned 1 [0156.598] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0156.598] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\28DAEEA417486B2D8FF609CC22C0244D45F802F7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\28daeea417486b2d8ff609cc22c0244d45f802f7"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\28DAEEA417486B2D8FF609CC22C0244D45F802F7.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\28daeea417486b2d8ff609cc22c0244d45f802f7.xuy")) returned 1 [0156.599] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\291F29EF92755427DA03AB115BD92B68F34AB659", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\291F29EF92755427DA03AB115BD92B68F34AB659", lpFilePart=0x0) returned 0x85 [0156.599] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0156.599] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\291F29EF92755427DA03AB115BD92B68F34AB659" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\291f29ef92755427da03ab115bd92b68f34ab659"), fInfoLevelId=0x0, lpFileInformation=0x2375f20 | out: lpFileInformation=0x2375f20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8647a792, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x8647a792, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x8647a792, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x1124)) returned 1 [0156.600] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0156.600] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\291F29EF92755427DA03AB115BD92B68F34AB659", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\291F29EF92755427DA03AB115BD92B68F34AB659", lpFilePart=0x0) returned 0x85 [0156.600] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0156.600] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\291F29EF92755427DA03AB115BD92B68F34AB659" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\291f29ef92755427da03ab115bd92b68f34ab659"), fInfoLevelId=0x0, lpFileInformation=0x2376120 | out: lpFileInformation=0x2376120*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8647a792, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x8647a792, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x8647a792, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x1124)) returned 1 [0156.600] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0156.600] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\291F29EF92755427DA03AB115BD92B68F34AB659", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\291F29EF92755427DA03AB115BD92B68F34AB659", lpFilePart=0x0) returned 0x85 [0156.600] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0156.600] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\291F29EF92755427DA03AB115BD92B68F34AB659" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\291f29ef92755427da03ab115bd92b68f34ab659"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0156.600] GetFileType (hFile=0x444) returned 0x1 [0156.600] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0156.600] GetFileType (hFile=0x444) returned 0x1 [0156.600] ReadFile (in: hFile=0x444, lpBuffer=0x2378650, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x2378650*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0156.659] CloseHandle (hObject=0x444) returned 1 [0156.659] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\291F29EF92755427DA03AB115BD92B68F34AB659", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\291F29EF92755427DA03AB115BD92B68F34AB659", lpFilePart=0x0) returned 0x85 [0156.659] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0156.659] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\291F29EF92755427DA03AB115BD92B68F34AB659" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\291f29ef92755427da03ab115bd92b68f34ab659"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0156.659] GetFileType (hFile=0x444) returned 0x1 [0156.659] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0156.659] GetFileType (hFile=0x444) returned 0x1 [0156.659] WriteFile (in: hFile=0x444, lpBuffer=0x2185c28*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x2185c28*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0156.660] CloseHandle (hObject=0x444) returned 1 [0156.660] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\291F29EF92755427DA03AB115BD92B68F34AB659", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\291F29EF92755427DA03AB115BD92B68F34AB659", lpFilePart=0x0) returned 0x85 [0156.660] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\291F29EF92755427DA03AB115BD92B68F34AB659.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\291F29EF92755427DA03AB115BD92B68F34AB659.xuy", lpFilePart=0x0) returned 0x89 [0156.660] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0156.660] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\291F29EF92755427DA03AB115BD92B68F34AB659" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\291f29ef92755427da03ab115bd92b68f34ab659"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8647a792, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x8647a792, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x4939b7be, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0156.660] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0156.660] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\291F29EF92755427DA03AB115BD92B68F34AB659" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\291f29ef92755427da03ab115bd92b68f34ab659"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\291F29EF92755427DA03AB115BD92B68F34AB659.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\291f29ef92755427da03ab115bd92b68f34ab659.xuy")) returned 1 [0156.661] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\297135C089B3661F5AABB8E90985C6930164B685", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\297135C089B3661F5AABB8E90985C6930164B685", lpFilePart=0x0) returned 0x85 [0156.661] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0156.661] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\297135C089B3661F5AABB8E90985C6930164B685" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\297135c089b3661f5aabb8e90985c6930164b685"), fInfoLevelId=0x0, lpFileInformation=0x21f4c00 | out: lpFileInformation=0x21f4c00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5407ef62, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x5407ef62, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x540a5183, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xc4b)) returned 1 [0156.663] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0156.663] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\297135C089B3661F5AABB8E90985C6930164B685", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\297135C089B3661F5AABB8E90985C6930164B685", lpFilePart=0x0) returned 0x85 [0156.663] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0156.663] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\297135C089B3661F5AABB8E90985C6930164B685" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\297135c089b3661f5aabb8e90985c6930164b685"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0156.663] GetFileType (hFile=0x444) returned 0x1 [0156.663] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0156.663] GetFileType (hFile=0x444) returned 0x1 [0156.663] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xc4b [0156.663] ReadFile (in: hFile=0x444, lpBuffer=0x21f5c68, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x21f5c68*, lpNumberOfBytesRead=0x3be5c8*=0xc4b, lpOverlapped=0x0) returned 1 [0156.664] CloseHandle (hObject=0x444) returned 1 [0156.674] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\297135C089B3661F5AABB8E90985C6930164B685", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\297135C089B3661F5AABB8E90985C6930164B685", lpFilePart=0x0) returned 0x85 [0156.675] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0156.675] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\297135C089B3661F5AABB8E90985C6930164B685" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\297135c089b3661f5aabb8e90985c6930164b685"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0156.676] GetFileType (hFile=0x444) returned 0x1 [0156.676] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0156.676] GetFileType (hFile=0x444) returned 0x1 [0156.676] WriteFile (in: hFile=0x444, lpBuffer=0x2270a88*, nNumberOfBytesToWrite=0xc50, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x2270a88*, lpNumberOfBytesWritten=0x3be4d8*=0xc50, lpOverlapped=0x0) returned 1 [0156.677] CloseHandle (hObject=0x444) returned 1 [0156.677] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\297135C089B3661F5AABB8E90985C6930164B685", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\297135C089B3661F5AABB8E90985C6930164B685", lpFilePart=0x0) returned 0x85 [0156.677] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\297135C089B3661F5AABB8E90985C6930164B685.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\297135C089B3661F5AABB8E90985C6930164B685.xuy", lpFilePart=0x0) returned 0x89 [0156.677] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0156.677] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\297135C089B3661F5AABB8E90985C6930164B685" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\297135c089b3661f5aabb8e90985c6930164b685"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5407ef62, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x5407ef62, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x493c16c0, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xc50)) returned 1 [0156.678] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0156.678] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\297135C089B3661F5AABB8E90985C6930164B685" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\297135c089b3661f5aabb8e90985c6930164b685"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\297135C089B3661F5AABB8E90985C6930164B685.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\297135c089b3661f5aabb8e90985c6930164b685.xuy")) returned 1 [0156.679] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2A650CB5032027B0EF79F4B9916C5D43EEFEDB3A", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2A650CB5032027B0EF79F4B9916C5D43EEFEDB3A", lpFilePart=0x0) returned 0x85 [0156.679] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0156.679] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2A650CB5032027B0EF79F4B9916C5D43EEFEDB3A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2a650cb5032027b0ef79f4b9916c5d43eefedb3a"), fInfoLevelId=0x0, lpFileInformation=0x2271e48 | out: lpFileInformation=0x2271e48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61577ff1, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x61577ff1, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x61577ff1, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xdff)) returned 1 [0156.679] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0156.679] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2A650CB5032027B0EF79F4B9916C5D43EEFEDB3A", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2A650CB5032027B0EF79F4B9916C5D43EEFEDB3A", lpFilePart=0x0) returned 0x85 [0156.679] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0156.679] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2A650CB5032027B0EF79F4B9916C5D43EEFEDB3A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2a650cb5032027b0ef79f4b9916c5d43eefedb3a"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0156.679] GetFileType (hFile=0x444) returned 0x1 [0156.679] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0156.679] GetFileType (hFile=0x444) returned 0x1 [0156.679] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xdff [0156.679] ReadFile (in: hFile=0x444, lpBuffer=0x2273060, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x2273060*, lpNumberOfBytesRead=0x3be5c8*=0xdff, lpOverlapped=0x0) returned 1 [0156.692] CloseHandle (hObject=0x444) returned 1 [0156.708] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2A650CB5032027B0EF79F4B9916C5D43EEFEDB3A", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2A650CB5032027B0EF79F4B9916C5D43EEFEDB3A", lpFilePart=0x0) returned 0x85 [0156.708] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0156.708] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2A650CB5032027B0EF79F4B9916C5D43EEFEDB3A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2a650cb5032027b0ef79f4b9916c5d43eefedb3a"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0156.710] GetFileType (hFile=0x444) returned 0x1 [0156.710] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0156.710] GetFileType (hFile=0x444) returned 0x1 [0156.710] WriteFile (in: hFile=0x444, lpBuffer=0x22ee6f0*, nNumberOfBytesToWrite=0xe00, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x22ee6f0*, lpNumberOfBytesWritten=0x3be4d8*=0xe00, lpOverlapped=0x0) returned 1 [0156.711] CloseHandle (hObject=0x444) returned 1 [0156.711] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2A650CB5032027B0EF79F4B9916C5D43EEFEDB3A", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2A650CB5032027B0EF79F4B9916C5D43EEFEDB3A", lpFilePart=0x0) returned 0x85 [0156.711] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2A650CB5032027B0EF79F4B9916C5D43EEFEDB3A.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2A650CB5032027B0EF79F4B9916C5D43EEFEDB3A.xuy", lpFilePart=0x0) returned 0x89 [0156.711] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0156.711] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2A650CB5032027B0EF79F4B9916C5D43EEFEDB3A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2a650cb5032027b0ef79f4b9916c5d43eefedb3a"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61577ff1, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x61577ff1, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x4940dcc2, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xe00)) returned 1 [0156.711] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0156.711] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2A650CB5032027B0EF79F4B9916C5D43EEFEDB3A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2a650cb5032027b0ef79f4b9916c5d43eefedb3a"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2A650CB5032027B0EF79F4B9916C5D43EEFEDB3A.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2a650cb5032027b0ef79f4b9916c5d43eefedb3a.xuy")) returned 1 [0156.712] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2A705BA174D08F119A903AD6AE391B16AE92D9FC", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2A705BA174D08F119A903AD6AE391B16AE92D9FC", lpFilePart=0x0) returned 0x85 [0156.712] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0156.712] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2A705BA174D08F119A903AD6AE391B16AE92D9FC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2a705ba174d08f119a903ad6ae391b16ae92d9fc"), fInfoLevelId=0x0, lpFileInformation=0x22efab0 | out: lpFileInformation=0x22efab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2b60a69, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xf2b60a69, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0xf67a7629, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x19c75)) returned 1 [0156.712] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0156.712] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2A705BA174D08F119A903AD6AE391B16AE92D9FC", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2A705BA174D08F119A903AD6AE391B16AE92D9FC", lpFilePart=0x0) returned 0x85 [0156.713] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0156.713] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2A705BA174D08F119A903AD6AE391B16AE92D9FC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2a705ba174d08f119a903ad6ae391b16ae92d9fc"), fInfoLevelId=0x0, lpFileInformation=0x22efcb0 | out: lpFileInformation=0x22efcb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2b60a69, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xf2b60a69, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0xf67a7629, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x19c75)) returned 1 [0156.713] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0156.713] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2A705BA174D08F119A903AD6AE391B16AE92D9FC", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2A705BA174D08F119A903AD6AE391B16AE92D9FC", lpFilePart=0x0) returned 0x85 [0156.713] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0156.713] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2A705BA174D08F119A903AD6AE391B16AE92D9FC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2a705ba174d08f119a903ad6ae391b16ae92d9fc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0156.713] GetFileType (hFile=0x444) returned 0x1 [0156.713] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0156.713] GetFileType (hFile=0x444) returned 0x1 [0156.713] ReadFile (in: hFile=0x444, lpBuffer=0x22f21e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x22f21e0*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0156.739] CloseHandle (hObject=0x444) returned 1 [0156.739] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2A705BA174D08F119A903AD6AE391B16AE92D9FC", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2A705BA174D08F119A903AD6AE391B16AE92D9FC", lpFilePart=0x0) returned 0x85 [0156.740] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0156.740] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2A705BA174D08F119A903AD6AE391B16AE92D9FC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2a705ba174d08f119a903ad6ae391b16ae92d9fc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0156.740] GetFileType (hFile=0x444) returned 0x1 [0156.740] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0156.740] GetFileType (hFile=0x444) returned 0x1 [0156.740] WriteFile (in: hFile=0x444, lpBuffer=0x22efe90*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x22efe90*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0156.740] CloseHandle (hObject=0x444) returned 1 [0156.740] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2A705BA174D08F119A903AD6AE391B16AE92D9FC", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2A705BA174D08F119A903AD6AE391B16AE92D9FC", lpFilePart=0x0) returned 0x85 [0156.740] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2A705BA174D08F119A903AD6AE391B16AE92D9FC.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2A705BA174D08F119A903AD6AE391B16AE92D9FC.xuy", lpFilePart=0x0) returned 0x89 [0156.740] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0156.740] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2A705BA174D08F119A903AD6AE391B16AE92D9FC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2a705ba174d08f119a903ad6ae391b16ae92d9fc"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2b60a69, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xf2b60a69, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x4945a144, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x19c75)) returned 1 [0156.741] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0156.741] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2A705BA174D08F119A903AD6AE391B16AE92D9FC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2a705ba174d08f119a903ad6ae391b16ae92d9fc"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2A705BA174D08F119A903AD6AE391B16AE92D9FC.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2a705ba174d08f119a903ad6ae391b16ae92d9fc.xuy")) returned 1 [0156.742] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2AEEA30E1ABF20CE6EDCD6534789A8A96595E87A", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2AEEA30E1ABF20CE6EDCD6534789A8A96595E87A", lpFilePart=0x0) returned 0x85 [0156.742] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0156.742] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2AEEA30E1ABF20CE6EDCD6534789A8A96595E87A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2aeea30e1abf20ce6edcd6534789a8a96595e87a"), fInfoLevelId=0x0, lpFileInformation=0x236e788 | out: lpFileInformation=0x236e788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc50c5407, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc50c5407, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x45d6c8e4, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0x587)) returned 1 [0156.743] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0156.743] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2AEEA30E1ABF20CE6EDCD6534789A8A96595E87A", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2AEEA30E1ABF20CE6EDCD6534789A8A96595E87A", lpFilePart=0x0) returned 0x85 [0156.743] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0156.743] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2AEEA30E1ABF20CE6EDCD6534789A8A96595E87A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2aeea30e1abf20ce6edcd6534789a8a96595e87a"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0156.743] GetFileType (hFile=0x444) returned 0x1 [0156.743] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0156.743] GetFileType (hFile=0x444) returned 0x1 [0156.743] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x587 [0156.743] ReadFile (in: hFile=0x444, lpBuffer=0x236f128, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x236f128*, lpNumberOfBytesRead=0x3be5c8*=0x587, lpOverlapped=0x0) returned 1 [0156.753] CloseHandle (hObject=0x444) returned 1 [0156.792] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2AEEA30E1ABF20CE6EDCD6534789A8A96595E87A", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2AEEA30E1ABF20CE6EDCD6534789A8A96595E87A", lpFilePart=0x0) returned 0x85 [0156.792] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0156.792] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2AEEA30E1ABF20CE6EDCD6534789A8A96595E87A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2aeea30e1abf20ce6edcd6534789a8a96595e87a"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0156.794] GetFileType (hFile=0x444) returned 0x1 [0156.794] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0156.794] GetFileType (hFile=0x444) returned 0x1 [0156.794] WriteFile (in: hFile=0x444, lpBuffer=0x21e5118*, nNumberOfBytesToWrite=0x590, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x21e5118*, lpNumberOfBytesWritten=0x3be4d8*=0x590, lpOverlapped=0x0) returned 1 [0156.796] CloseHandle (hObject=0x444) returned 1 [0156.796] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2AEEA30E1ABF20CE6EDCD6534789A8A96595E87A", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2AEEA30E1ABF20CE6EDCD6534789A8A96595E87A", lpFilePart=0x0) returned 0x85 [0156.796] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2AEEA30E1ABF20CE6EDCD6534789A8A96595E87A.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2AEEA30E1ABF20CE6EDCD6534789A8A96595E87A.xuy", lpFilePart=0x0) returned 0x89 [0156.796] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0156.796] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2AEEA30E1ABF20CE6EDCD6534789A8A96595E87A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2aeea30e1abf20ce6edcd6534789a8a96595e87a"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc50c5407, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc50c5407, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x494f2a22, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x590)) returned 1 [0156.796] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0156.796] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2AEEA30E1ABF20CE6EDCD6534789A8A96595E87A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2aeea30e1abf20ce6edcd6534789a8a96595e87a"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2AEEA30E1ABF20CE6EDCD6534789A8A96595E87A.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2aeea30e1abf20ce6edcd6534789a8a96595e87a.xuy")) returned 1 [0156.798] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2B662789DFDD9C1308FF8ECD48E05F393053163C", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2B662789DFDD9C1308FF8ECD48E05F393053163C", lpFilePart=0x0) returned 0x85 [0156.798] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0156.798] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2B662789DFDD9C1308FF8ECD48E05F393053163C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2b662789dfdd9c1308ff8ecd48e05f393053163c"), fInfoLevelId=0x0, lpFileInformation=0x21e64d8 | out: lpFileInformation=0x21e64d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b6a9669, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x8b6a9669, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x8b6abd92, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0xd2)) returned 1 [0156.798] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0156.798] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2B662789DFDD9C1308FF8ECD48E05F393053163C", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2B662789DFDD9C1308FF8ECD48E05F393053163C", lpFilePart=0x0) returned 0x85 [0156.798] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0156.798] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2B662789DFDD9C1308FF8ECD48E05F393053163C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2b662789dfdd9c1308ff8ecd48e05f393053163c"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0156.798] GetFileType (hFile=0x444) returned 0x1 [0156.798] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0156.799] GetFileType (hFile=0x444) returned 0x1 [0156.799] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xd2 [0156.799] ReadFile (in: hFile=0x444, lpBuffer=0x21e69c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x21e69c8*, lpNumberOfBytesRead=0x3be5c8*=0xd2, lpOverlapped=0x0) returned 1 [0156.800] CloseHandle (hObject=0x444) returned 1 [0156.812] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2B662789DFDD9C1308FF8ECD48E05F393053163C", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2B662789DFDD9C1308FF8ECD48E05F393053163C", lpFilePart=0x0) returned 0x85 [0156.812] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0156.812] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2B662789DFDD9C1308FF8ECD48E05F393053163C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2b662789dfdd9c1308ff8ecd48e05f393053163c"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0156.814] GetFileType (hFile=0x444) returned 0x1 [0156.814] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0156.814] GetFileType (hFile=0x444) returned 0x1 [0156.814] WriteFile (in: hFile=0x444, lpBuffer=0x225dd38*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x225dd38*, lpNumberOfBytesWritten=0x3be4d8*=0xe0, lpOverlapped=0x0) returned 1 [0156.815] CloseHandle (hObject=0x444) returned 1 [0156.815] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2B662789DFDD9C1308FF8ECD48E05F393053163C", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2B662789DFDD9C1308FF8ECD48E05F393053163C", lpFilePart=0x0) returned 0x85 [0156.815] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2B662789DFDD9C1308FF8ECD48E05F393053163C.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2B662789DFDD9C1308FF8ECD48E05F393053163C.xuy", lpFilePart=0x0) returned 0x89 [0156.815] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0156.815] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2B662789DFDD9C1308FF8ECD48E05F393053163C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2b662789dfdd9c1308ff8ecd48e05f393053163c"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b6a9669, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x8b6a9669, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x49518dae, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1 [0156.815] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0156.815] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2B662789DFDD9C1308FF8ECD48E05F393053163C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2b662789dfdd9c1308ff8ecd48e05f393053163c"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2B662789DFDD9C1308FF8ECD48E05F393053163C.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2b662789dfdd9c1308ff8ecd48e05f393053163c.xuy")) returned 1 [0156.816] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2C18FE48FBDBA136A5EC51C8B9D4382D2452C359", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2C18FE48FBDBA136A5EC51C8B9D4382D2452C359", lpFilePart=0x0) returned 0x85 [0156.816] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0156.816] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2C18FE48FBDBA136A5EC51C8B9D4382D2452C359" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2c18fe48fbdba136a5ec51c8b9d4382d2452c359"), fInfoLevelId=0x0, lpFileInformation=0x225f0f8 | out: lpFileInformation=0x225f0f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6152bc7d, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x6152bc7d, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x6152bc7d, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x1137)) returned 1 [0156.816] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0156.816] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2C18FE48FBDBA136A5EC51C8B9D4382D2452C359", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2C18FE48FBDBA136A5EC51C8B9D4382D2452C359", lpFilePart=0x0) returned 0x85 [0156.816] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0156.817] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2C18FE48FBDBA136A5EC51C8B9D4382D2452C359" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2c18fe48fbdba136a5ec51c8b9d4382d2452c359"), fInfoLevelId=0x0, lpFileInformation=0x225f2f8 | out: lpFileInformation=0x225f2f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6152bc7d, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x6152bc7d, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x6152bc7d, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x1137)) returned 1 [0156.817] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0156.817] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2C18FE48FBDBA136A5EC51C8B9D4382D2452C359", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2C18FE48FBDBA136A5EC51C8B9D4382D2452C359", lpFilePart=0x0) returned 0x85 [0156.817] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0156.817] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2C18FE48FBDBA136A5EC51C8B9D4382D2452C359" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2c18fe48fbdba136a5ec51c8b9d4382d2452c359"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0156.817] GetFileType (hFile=0x444) returned 0x1 [0156.817] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0156.817] GetFileType (hFile=0x444) returned 0x1 [0156.818] ReadFile (in: hFile=0x444, lpBuffer=0x2261828, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x2261828*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0156.829] CloseHandle (hObject=0x444) returned 1 [0156.829] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2C18FE48FBDBA136A5EC51C8B9D4382D2452C359", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2C18FE48FBDBA136A5EC51C8B9D4382D2452C359", lpFilePart=0x0) returned 0x85 [0156.829] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0156.829] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2C18FE48FBDBA136A5EC51C8B9D4382D2452C359" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2c18fe48fbdba136a5ec51c8b9d4382d2452c359"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0156.830] GetFileType (hFile=0x444) returned 0x1 [0156.830] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0156.830] GetFileType (hFile=0x444) returned 0x1 [0156.830] WriteFile (in: hFile=0x444, lpBuffer=0x225f4d8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x225f4d8*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0156.830] CloseHandle (hObject=0x444) returned 1 [0156.830] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2C18FE48FBDBA136A5EC51C8B9D4382D2452C359", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2C18FE48FBDBA136A5EC51C8B9D4382D2452C359", lpFilePart=0x0) returned 0x85 [0156.830] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2C18FE48FBDBA136A5EC51C8B9D4382D2452C359.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2C18FE48FBDBA136A5EC51C8B9D4382D2452C359.xuy", lpFilePart=0x0) returned 0x89 [0156.830] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0156.830] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2C18FE48FBDBA136A5EC51C8B9D4382D2452C359" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2c18fe48fbdba136a5ec51c8b9d4382d2452c359"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6152bc7d, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x6152bc7d, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x4953effa, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0156.830] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0156.830] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2C18FE48FBDBA136A5EC51C8B9D4382D2452C359" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2c18fe48fbdba136a5ec51c8b9d4382d2452c359"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2C18FE48FBDBA136A5EC51C8B9D4382D2452C359.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2c18fe48fbdba136a5ec51c8b9d4382d2452c359.xuy")) returned 1 [0156.832] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2C40C733B84018F500F4F551FC53305A5971F05F", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2C40C733B84018F500F4F551FC53305A5971F05F", lpFilePart=0x0) returned 0x85 [0156.832] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0156.832] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2C40C733B84018F500F4F551FC53305A5971F05F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2c40c733b84018f500f4f551fc53305a5971f05f"), fInfoLevelId=0x0, lpFileInformation=0x22dddd0 | out: lpFileInformation=0x22dddd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4101c449, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x4101c449, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x4104aa6c, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x51f)) returned 1 [0156.832] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0156.832] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2C40C733B84018F500F4F551FC53305A5971F05F", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2C40C733B84018F500F4F551FC53305A5971F05F", lpFilePart=0x0) returned 0x85 [0156.832] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0156.832] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2C40C733B84018F500F4F551FC53305A5971F05F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2c40c733b84018f500f4f551fc53305a5971f05f"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0156.832] GetFileType (hFile=0x444) returned 0x1 [0156.832] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0156.832] GetFileType (hFile=0x444) returned 0x1 [0156.832] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x51f [0156.832] ReadFile (in: hFile=0x444, lpBuffer=0x22de708, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x22de708*, lpNumberOfBytesRead=0x3be5c8*=0x51f, lpOverlapped=0x0) returned 1 [0156.841] CloseHandle (hObject=0x444) returned 1 [0156.853] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2C40C733B84018F500F4F551FC53305A5971F05F", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2C40C733B84018F500F4F551FC53305A5971F05F", lpFilePart=0x0) returned 0x85 [0156.853] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0156.853] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2C40C733B84018F500F4F551FC53305A5971F05F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2c40c733b84018f500f4f551fc53305a5971f05f"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0156.855] GetFileType (hFile=0x444) returned 0x1 [0156.855] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0156.855] GetFileType (hFile=0x444) returned 0x1 [0156.855] WriteFile (in: hFile=0x444, lpBuffer=0x2357138*, nNumberOfBytesToWrite=0x520, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x2357138*, lpNumberOfBytesWritten=0x3be4d8*=0x520, lpOverlapped=0x0) returned 1 [0156.855] CloseHandle (hObject=0x444) returned 1 [0156.856] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2C40C733B84018F500F4F551FC53305A5971F05F", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2C40C733B84018F500F4F551FC53305A5971F05F", lpFilePart=0x0) returned 0x85 [0156.856] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2C40C733B84018F500F4F551FC53305A5971F05F.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2C40C733B84018F500F4F551FC53305A5971F05F.xuy", lpFilePart=0x0) returned 0x89 [0156.856] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0156.856] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2C40C733B84018F500F4F551FC53305A5971F05F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2c40c733b84018f500f4f551fc53305a5971f05f"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4101c449, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x4101c449, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x4956abbd, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x520)) returned 1 [0156.856] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0156.856] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2C40C733B84018F500F4F551FC53305A5971F05F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2c40c733b84018f500f4f551fc53305a5971f05f"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2C40C733B84018F500F4F551FC53305A5971F05F.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2c40c733b84018f500f4f551fc53305a5971f05f.xuy")) returned 1 [0156.857] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2C5330B3725C70F20F4BC8A5385F696CC68B83C6", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2C5330B3725C70F20F4BC8A5385F696CC68B83C6", lpFilePart=0x0) returned 0x85 [0156.857] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0156.857] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2C5330B3725C70F20F4BC8A5385F696CC68B83C6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2c5330b3725c70f20f4bc8a5385f696cc68b83c6"), fInfoLevelId=0x0, lpFileInformation=0x23584f8 | out: lpFileInformation=0x23584f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61551d8c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x61551d8c, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x61551d8c, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x1135)) returned 1 [0156.858] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0156.858] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2C5330B3725C70F20F4BC8A5385F696CC68B83C6", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2C5330B3725C70F20F4BC8A5385F696CC68B83C6", lpFilePart=0x0) returned 0x85 [0156.858] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0156.858] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2C5330B3725C70F20F4BC8A5385F696CC68B83C6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2c5330b3725c70f20f4bc8a5385f696cc68b83c6"), fInfoLevelId=0x0, lpFileInformation=0x23586f8 | out: lpFileInformation=0x23586f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61551d8c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x61551d8c, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x61551d8c, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x1135)) returned 1 [0156.858] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0156.858] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2C5330B3725C70F20F4BC8A5385F696CC68B83C6", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2C5330B3725C70F20F4BC8A5385F696CC68B83C6", lpFilePart=0x0) returned 0x85 [0156.858] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0156.858] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2C5330B3725C70F20F4BC8A5385F696CC68B83C6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2c5330b3725c70f20f4bc8a5385f696cc68b83c6"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0156.859] GetFileType (hFile=0x444) returned 0x1 [0156.859] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0156.859] GetFileType (hFile=0x444) returned 0x1 [0156.859] ReadFile (in: hFile=0x444, lpBuffer=0x235ac28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x235ac28*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0156.901] CloseHandle (hObject=0x444) returned 1 [0156.901] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2C5330B3725C70F20F4BC8A5385F696CC68B83C6", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2C5330B3725C70F20F4BC8A5385F696CC68B83C6", lpFilePart=0x0) returned 0x85 [0156.901] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0156.901] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2C5330B3725C70F20F4BC8A5385F696CC68B83C6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2c5330b3725c70f20f4bc8a5385f696cc68b83c6"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0156.901] GetFileType (hFile=0x444) returned 0x1 [0156.901] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0156.901] GetFileType (hFile=0x444) returned 0x1 [0156.901] WriteFile (in: hFile=0x444, lpBuffer=0x2185c28*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x2185c28*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0156.901] CloseHandle (hObject=0x444) returned 1 [0156.902] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2C5330B3725C70F20F4BC8A5385F696CC68B83C6", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2C5330B3725C70F20F4BC8A5385F696CC68B83C6", lpFilePart=0x0) returned 0x85 [0156.902] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2C5330B3725C70F20F4BC8A5385F696CC68B83C6.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2C5330B3725C70F20F4BC8A5385F696CC68B83C6.xuy", lpFilePart=0x0) returned 0x89 [0156.902] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0156.902] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2C5330B3725C70F20F4BC8A5385F696CC68B83C6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2c5330b3725c70f20f4bc8a5385f696cc68b83c6"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61551d8c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x61551d8c, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x495d7a20, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0156.902] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0156.902] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2C5330B3725C70F20F4BC8A5385F696CC68B83C6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2c5330b3725c70f20f4bc8a5385f696cc68b83c6"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2C5330B3725C70F20F4BC8A5385F696CC68B83C6.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2c5330b3725c70f20f4bc8a5385f696cc68b83c6.xuy")) returned 1 [0156.903] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2C706476EF0944CD159653F65034A1071345205C", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2C706476EF0944CD159653F65034A1071345205C", lpFilePart=0x0) returned 0x85 [0156.903] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0156.903] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2C706476EF0944CD159653F65034A1071345205C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2c706476ef0944cd159653f65034a1071345205c"), fInfoLevelId=0x0, lpFileInformation=0x21d9e00 | out: lpFileInformation=0x21d9e00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4572a6e1, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x4572a6e1, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x45776aae, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0x2567)) returned 1 [0156.904] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0156.904] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2C706476EF0944CD159653F65034A1071345205C", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2C706476EF0944CD159653F65034A1071345205C", lpFilePart=0x0) returned 0x85 [0156.904] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0156.904] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2C706476EF0944CD159653F65034A1071345205C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2c706476ef0944cd159653f65034a1071345205c"), fInfoLevelId=0x0, lpFileInformation=0x21da000 | out: lpFileInformation=0x21da000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4572a6e1, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x4572a6e1, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x45776aae, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0x2567)) returned 1 [0156.905] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0156.905] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2C706476EF0944CD159653F65034A1071345205C", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2C706476EF0944CD159653F65034A1071345205C", lpFilePart=0x0) returned 0x85 [0156.905] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0156.905] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2C706476EF0944CD159653F65034A1071345205C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2c706476ef0944cd159653f65034a1071345205c"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0156.906] GetFileType (hFile=0x444) returned 0x1 [0156.906] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0156.906] GetFileType (hFile=0x444) returned 0x1 [0156.906] ReadFile (in: hFile=0x444, lpBuffer=0x21dc530, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x21dc530*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0156.940] CloseHandle (hObject=0x444) returned 1 [0156.941] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2C706476EF0944CD159653F65034A1071345205C", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2C706476EF0944CD159653F65034A1071345205C", lpFilePart=0x0) returned 0x85 [0156.941] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0156.941] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2C706476EF0944CD159653F65034A1071345205C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2c706476ef0944cd159653f65034a1071345205c"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0156.941] GetFileType (hFile=0x444) returned 0x1 [0156.941] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0156.941] GetFileType (hFile=0x444) returned 0x1 [0156.941] WriteFile (in: hFile=0x444, lpBuffer=0x21da1e0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x21da1e0*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0156.942] CloseHandle (hObject=0x444) returned 1 [0156.942] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2C706476EF0944CD159653F65034A1071345205C", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2C706476EF0944CD159653F65034A1071345205C", lpFilePart=0x0) returned 0x85 [0156.942] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2C706476EF0944CD159653F65034A1071345205C.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2C706476EF0944CD159653F65034A1071345205C.xuy", lpFilePart=0x0) returned 0x89 [0156.942] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0156.942] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2C706476EF0944CD159653F65034A1071345205C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2c706476ef0944cd159653f65034a1071345205c"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4572a6e1, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x4572a6e1, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x49649f3a, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2567)) returned 1 [0156.942] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0156.942] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2C706476EF0944CD159653F65034A1071345205C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2c706476ef0944cd159653f65034a1071345205c"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2C706476EF0944CD159653F65034A1071345205C.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2c706476ef0944cd159653f65034a1071345205c.xuy")) returned 1 [0156.943] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2CCFCBE257B8F5BE4FEAF68C08171DAF22AEED89", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2CCFCBE257B8F5BE4FEAF68C08171DAF22AEED89", lpFilePart=0x0) returned 0x85 [0156.943] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0156.944] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2CCFCBE257B8F5BE4FEAF68C08171DAF22AEED89" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2ccfcbe257b8f5be4feaf68c08171daf22aeed89"), fInfoLevelId=0x0, lpFileInformation=0x2258ad8 | out: lpFileInformation=0x2258ad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x560a3a7a, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x560a3a7a, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x560a3a7a, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0x2ca)) returned 1 [0156.944] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0156.944] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2CCFCBE257B8F5BE4FEAF68C08171DAF22AEED89", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2CCFCBE257B8F5BE4FEAF68C08171DAF22AEED89", lpFilePart=0x0) returned 0x85 [0156.944] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0156.944] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2CCFCBE257B8F5BE4FEAF68C08171DAF22AEED89" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2ccfcbe257b8f5be4feaf68c08171daf22aeed89"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0156.944] GetFileType (hFile=0x444) returned 0x1 [0156.944] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0156.944] GetFileType (hFile=0x444) returned 0x1 [0156.944] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x2ca [0156.944] ReadFile (in: hFile=0x444, lpBuffer=0x22591c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x22591c0*, lpNumberOfBytesRead=0x3be5c8*=0x2ca, lpOverlapped=0x0) returned 1 [0156.957] CloseHandle (hObject=0x444) returned 1 [0156.968] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2CCFCBE257B8F5BE4FEAF68C08171DAF22AEED89", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2CCFCBE257B8F5BE4FEAF68C08171DAF22AEED89", lpFilePart=0x0) returned 0x85 [0156.968] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0156.968] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2CCFCBE257B8F5BE4FEAF68C08171DAF22AEED89" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2ccfcbe257b8f5be4feaf68c08171daf22aeed89"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0156.971] GetFileType (hFile=0x444) returned 0x1 [0156.971] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0156.971] GetFileType (hFile=0x444) returned 0x1 [0156.971] WriteFile (in: hFile=0x444, lpBuffer=0x22d1060*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x22d1060*, lpNumberOfBytesWritten=0x3be4d8*=0x2d0, lpOverlapped=0x0) returned 1 [0156.972] CloseHandle (hObject=0x444) returned 1 [0156.972] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2CCFCBE257B8F5BE4FEAF68C08171DAF22AEED89", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2CCFCBE257B8F5BE4FEAF68C08171DAF22AEED89", lpFilePart=0x0) returned 0x85 [0156.972] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2CCFCBE257B8F5BE4FEAF68C08171DAF22AEED89.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2CCFCBE257B8F5BE4FEAF68C08171DAF22AEED89.xuy", lpFilePart=0x0) returned 0x89 [0156.972] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0156.972] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2CCFCBE257B8F5BE4FEAF68C08171DAF22AEED89" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2ccfcbe257b8f5be4feaf68c08171daf22aeed89"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x560a3a7a, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x560a3a7a, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x49696454, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2d0)) returned 1 [0156.972] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0156.972] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2CCFCBE257B8F5BE4FEAF68C08171DAF22AEED89" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2ccfcbe257b8f5be4feaf68c08171daf22aeed89"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2CCFCBE257B8F5BE4FEAF68C08171DAF22AEED89.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2ccfcbe257b8f5be4feaf68c08171daf22aeed89.xuy")) returned 1 [0156.974] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2D062CF6D6777E6BD7D9D53DBAB84CA6329C9727", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2D062CF6D6777E6BD7D9D53DBAB84CA6329C9727", lpFilePart=0x0) returned 0x85 [0156.974] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0156.974] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2D062CF6D6777E6BD7D9D53DBAB84CA6329C9727" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2d062cf6d6777e6bd7d9d53dbab84ca6329c9727"), fInfoLevelId=0x0, lpFileInformation=0x22d2420 | out: lpFileInformation=0x22d2420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87336b13, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x87336b13, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x873391e1, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0xaa70)) returned 1 [0156.976] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0156.976] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2D062CF6D6777E6BD7D9D53DBAB84CA6329C9727", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2D062CF6D6777E6BD7D9D53DBAB84CA6329C9727", lpFilePart=0x0) returned 0x85 [0156.976] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0156.976] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2D062CF6D6777E6BD7D9D53DBAB84CA6329C9727" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2d062cf6d6777e6bd7d9d53dbab84ca6329c9727"), fInfoLevelId=0x0, lpFileInformation=0x22d2620 | out: lpFileInformation=0x22d2620*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87336b13, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x87336b13, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x873391e1, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0xaa70)) returned 1 [0156.977] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0156.977] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2D062CF6D6777E6BD7D9D53DBAB84CA6329C9727", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2D062CF6D6777E6BD7D9D53DBAB84CA6329C9727", lpFilePart=0x0) returned 0x85 [0156.977] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0156.977] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2D062CF6D6777E6BD7D9D53DBAB84CA6329C9727" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2d062cf6d6777e6bd7d9d53dbab84ca6329c9727"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0156.978] GetFileType (hFile=0x444) returned 0x1 [0156.978] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0156.978] GetFileType (hFile=0x444) returned 0x1 [0156.979] ReadFile (in: hFile=0x444, lpBuffer=0x22d4b50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x22d4b50*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0157.008] CloseHandle (hObject=0x444) returned 1 [0157.008] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2D062CF6D6777E6BD7D9D53DBAB84CA6329C9727", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2D062CF6D6777E6BD7D9D53DBAB84CA6329C9727", lpFilePart=0x0) returned 0x85 [0157.008] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0157.008] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2D062CF6D6777E6BD7D9D53DBAB84CA6329C9727" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2d062cf6d6777e6bd7d9d53dbab84ca6329c9727"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0157.009] GetFileType (hFile=0x444) returned 0x1 [0157.009] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0157.009] GetFileType (hFile=0x444) returned 0x1 [0157.009] WriteFile (in: hFile=0x444, lpBuffer=0x22d2800*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x22d2800*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0157.009] CloseHandle (hObject=0x444) returned 1 [0157.009] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2D062CF6D6777E6BD7D9D53DBAB84CA6329C9727", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2D062CF6D6777E6BD7D9D53DBAB84CA6329C9727", lpFilePart=0x0) returned 0x85 [0157.010] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2D062CF6D6777E6BD7D9D53DBAB84CA6329C9727.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2D062CF6D6777E6BD7D9D53DBAB84CA6329C9727.xuy", lpFilePart=0x0) returned 0x89 [0157.010] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0157.010] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2D062CF6D6777E6BD7D9D53DBAB84CA6329C9727" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2d062cf6d6777e6bd7d9d53dbab84ca6329c9727"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87336b13, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x87336b13, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x496e2762, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xaa70)) returned 1 [0157.010] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0157.010] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2D062CF6D6777E6BD7D9D53DBAB84CA6329C9727" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2d062cf6d6777e6bd7d9d53dbab84ca6329c9727"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2D062CF6D6777E6BD7D9D53DBAB84CA6329C9727.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2d062cf6d6777e6bd7d9d53dbab84ca6329c9727.xuy")) returned 1 [0157.011] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2D693D07DD992FA2955C9EDE27FDA78487556E32", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2D693D07DD992FA2955C9EDE27FDA78487556E32", lpFilePart=0x0) returned 0x85 [0157.011] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0157.011] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2D693D07DD992FA2955C9EDE27FDA78487556E32" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2d693d07dd992fa2955c9ede27fda78487556e32"), fInfoLevelId=0x0, lpFileInformation=0x23510f8 | out: lpFileInformation=0x23510f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x560a3a7a, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x560a3a7a, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x560a3a7a, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0x11ab)) returned 1 [0157.011] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0157.012] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2D693D07DD992FA2955C9EDE27FDA78487556E32", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2D693D07DD992FA2955C9EDE27FDA78487556E32", lpFilePart=0x0) returned 0x85 [0157.012] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0157.012] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2D693D07DD992FA2955C9EDE27FDA78487556E32" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2d693d07dd992fa2955c9ede27fda78487556e32"), fInfoLevelId=0x0, lpFileInformation=0x23512f8 | out: lpFileInformation=0x23512f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x560a3a7a, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x560a3a7a, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x560a3a7a, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0x11ab)) returned 1 [0157.012] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0157.012] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2D693D07DD992FA2955C9EDE27FDA78487556E32", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2D693D07DD992FA2955C9EDE27FDA78487556E32", lpFilePart=0x0) returned 0x85 [0157.012] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0157.012] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2D693D07DD992FA2955C9EDE27FDA78487556E32" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2d693d07dd992fa2955c9ede27fda78487556e32"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0157.013] GetFileType (hFile=0x444) returned 0x1 [0157.013] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0157.013] GetFileType (hFile=0x444) returned 0x1 [0157.013] ReadFile (in: hFile=0x444, lpBuffer=0x2353828, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x2353828*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0157.148] CloseHandle (hObject=0x444) returned 1 [0157.149] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2D693D07DD992FA2955C9EDE27FDA78487556E32", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2D693D07DD992FA2955C9EDE27FDA78487556E32", lpFilePart=0x0) returned 0x85 [0157.149] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0157.149] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2D693D07DD992FA2955C9EDE27FDA78487556E32" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2d693d07dd992fa2955c9ede27fda78487556e32"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0157.149] GetFileType (hFile=0x444) returned 0x1 [0157.149] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0157.149] GetFileType (hFile=0x444) returned 0x1 [0157.149] WriteFile (in: hFile=0x444, lpBuffer=0x2185c28*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x2185c28*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0157.149] CloseHandle (hObject=0x444) returned 1 [0157.150] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2D693D07DD992FA2955C9EDE27FDA78487556E32", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2D693D07DD992FA2955C9EDE27FDA78487556E32", lpFilePart=0x0) returned 0x85 [0157.150] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2D693D07DD992FA2955C9EDE27FDA78487556E32.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2D693D07DD992FA2955C9EDE27FDA78487556E32.xuy", lpFilePart=0x0) returned 0x89 [0157.150] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0157.150] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2D693D07DD992FA2955C9EDE27FDA78487556E32" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2d693d07dd992fa2955c9ede27fda78487556e32"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x560a3a7a, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x560a3a7a, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x4983a1ae, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0157.150] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0157.150] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2D693D07DD992FA2955C9EDE27FDA78487556E32" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2d693d07dd992fa2955c9ede27fda78487556e32"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2D693D07DD992FA2955C9EDE27FDA78487556E32.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2d693d07dd992fa2955c9ede27fda78487556e32.xuy")) returned 1 [0157.151] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2D7DB1F2A5BBDE7DB3035CEA82134D2CF20D58AE", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2D7DB1F2A5BBDE7DB3035CEA82134D2CF20D58AE", lpFilePart=0x0) returned 0x85 [0157.151] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0157.151] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2D7DB1F2A5BBDE7DB3035CEA82134D2CF20D58AE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2d7db1f2a5bbde7db3035cea82134d2cf20d58ae"), fInfoLevelId=0x0, lpFileInformation=0x21cfdb0 | out: lpFileInformation=0x21cfdb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61577ff1, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x61577ff1, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x61577ff1, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xdfc)) returned 1 [0157.152] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0157.152] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2D7DB1F2A5BBDE7DB3035CEA82134D2CF20D58AE", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2D7DB1F2A5BBDE7DB3035CEA82134D2CF20D58AE", lpFilePart=0x0) returned 0x85 [0157.152] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0157.152] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2D7DB1F2A5BBDE7DB3035CEA82134D2CF20D58AE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2d7db1f2a5bbde7db3035cea82134d2cf20d58ae"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0157.152] GetFileType (hFile=0x444) returned 0x1 [0157.152] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0157.152] GetFileType (hFile=0x444) returned 0x1 [0157.152] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xdfc [0157.152] ReadFile (in: hFile=0x444, lpBuffer=0x21d0fc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x21d0fc8*, lpNumberOfBytesRead=0x3be5c8*=0xdfc, lpOverlapped=0x0) returned 1 [0157.174] CloseHandle (hObject=0x444) returned 1 [0157.184] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2D7DB1F2A5BBDE7DB3035CEA82134D2CF20D58AE", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2D7DB1F2A5BBDE7DB3035CEA82134D2CF20D58AE", lpFilePart=0x0) returned 0x85 [0157.184] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0157.184] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2D7DB1F2A5BBDE7DB3035CEA82134D2CF20D58AE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2d7db1f2a5bbde7db3035cea82134d2cf20d58ae"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0157.186] GetFileType (hFile=0x444) returned 0x1 [0157.186] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0157.186] GetFileType (hFile=0x444) returned 0x1 [0157.187] WriteFile (in: hFile=0x444, lpBuffer=0x224c658*, nNumberOfBytesToWrite=0xe00, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x224c658*, lpNumberOfBytesWritten=0x3be4d8*=0xe00, lpOverlapped=0x0) returned 1 [0157.187] CloseHandle (hObject=0x444) returned 1 [0157.187] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2D7DB1F2A5BBDE7DB3035CEA82134D2CF20D58AE", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2D7DB1F2A5BBDE7DB3035CEA82134D2CF20D58AE", lpFilePart=0x0) returned 0x85 [0157.187] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2D7DB1F2A5BBDE7DB3035CEA82134D2CF20D58AE.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2D7DB1F2A5BBDE7DB3035CEA82134D2CF20D58AE.xuy", lpFilePart=0x0) returned 0x89 [0157.188] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0157.188] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2D7DB1F2A5BBDE7DB3035CEA82134D2CF20D58AE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2d7db1f2a5bbde7db3035cea82134d2cf20d58ae"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61577ff1, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x61577ff1, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x498ac529, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xe00)) returned 1 [0157.188] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0157.188] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2D7DB1F2A5BBDE7DB3035CEA82134D2CF20D58AE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2d7db1f2a5bbde7db3035cea82134d2cf20d58ae"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2D7DB1F2A5BBDE7DB3035CEA82134D2CF20D58AE.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2d7db1f2a5bbde7db3035cea82134d2cf20d58ae.xuy")) returned 1 [0157.189] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2E08CDAEE955A40889AC5877BE194C7EF12394A5", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2E08CDAEE955A40889AC5877BE194C7EF12394A5", lpFilePart=0x0) returned 0x85 [0157.189] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0157.189] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2E08CDAEE955A40889AC5877BE194C7EF12394A5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2e08cdaee955a40889ac5877be194c7ef12394a5"), fInfoLevelId=0x0, lpFileInformation=0x224da18 | out: lpFileInformation=0x224da18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47e4a361, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x47e4a361, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x47e705b6, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0x178c)) returned 1 [0157.189] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0157.189] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2E08CDAEE955A40889AC5877BE194C7EF12394A5", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2E08CDAEE955A40889AC5877BE194C7EF12394A5", lpFilePart=0x0) returned 0x85 [0157.189] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0157.189] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2E08CDAEE955A40889AC5877BE194C7EF12394A5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2e08cdaee955a40889ac5877be194c7ef12394a5"), fInfoLevelId=0x0, lpFileInformation=0x224dc18 | out: lpFileInformation=0x224dc18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47e4a361, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x47e4a361, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x47e705b6, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0x178c)) returned 1 [0157.189] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0157.190] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2E08CDAEE955A40889AC5877BE194C7EF12394A5", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2E08CDAEE955A40889AC5877BE194C7EF12394A5", lpFilePart=0x0) returned 0x85 [0157.190] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0157.190] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2E08CDAEE955A40889AC5877BE194C7EF12394A5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2e08cdaee955a40889ac5877be194c7ef12394a5"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0157.191] GetFileType (hFile=0x444) returned 0x1 [0157.191] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0157.191] GetFileType (hFile=0x444) returned 0x1 [0157.191] ReadFile (in: hFile=0x444, lpBuffer=0x2250148, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x2250148*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0157.209] CloseHandle (hObject=0x444) returned 1 [0157.209] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2E08CDAEE955A40889AC5877BE194C7EF12394A5", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2E08CDAEE955A40889AC5877BE194C7EF12394A5", lpFilePart=0x0) returned 0x85 [0157.209] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0157.209] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2E08CDAEE955A40889AC5877BE194C7EF12394A5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2e08cdaee955a40889ac5877be194c7ef12394a5"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0157.209] GetFileType (hFile=0x444) returned 0x1 [0157.209] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0157.209] GetFileType (hFile=0x444) returned 0x1 [0157.209] WriteFile (in: hFile=0x444, lpBuffer=0x224ddf8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x224ddf8*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0157.209] CloseHandle (hObject=0x444) returned 1 [0157.210] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2E08CDAEE955A40889AC5877BE194C7EF12394A5", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2E08CDAEE955A40889AC5877BE194C7EF12394A5", lpFilePart=0x0) returned 0x85 [0157.210] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2E08CDAEE955A40889AC5877BE194C7EF12394A5.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2E08CDAEE955A40889AC5877BE194C7EF12394A5.xuy", lpFilePart=0x0) returned 0x89 [0157.210] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0157.210] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2E08CDAEE955A40889AC5877BE194C7EF12394A5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2e08cdaee955a40889ac5877be194c7ef12394a5"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47e4a361, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x47e4a361, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x498d268f, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0157.210] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0157.210] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2E08CDAEE955A40889AC5877BE194C7EF12394A5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2e08cdaee955a40889ac5877be194c7ef12394a5"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2E08CDAEE955A40889AC5877BE194C7EF12394A5.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2e08cdaee955a40889ac5877be194c7ef12394a5.xuy")) returned 1 [0157.211] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2E2D3BD78AAC7DD8EC8B5CA26C36A64A912EA68B", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2E2D3BD78AAC7DD8EC8B5CA26C36A64A912EA68B", lpFilePart=0x0) returned 0x85 [0157.211] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0157.211] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2E2D3BD78AAC7DD8EC8B5CA26C36A64A912EA68B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2e2d3bd78aac7dd8ec8b5ca26c36a64a912ea68b"), fInfoLevelId=0x0, lpFileInformation=0x22cc6f0 | out: lpFileInformation=0x22cc6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56f05be8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x56f05be8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x56f05be8, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x125e)) returned 1 [0157.212] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0157.212] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2E2D3BD78AAC7DD8EC8B5CA26C36A64A912EA68B", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2E2D3BD78AAC7DD8EC8B5CA26C36A64A912EA68B", lpFilePart=0x0) returned 0x85 [0157.212] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0157.212] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2E2D3BD78AAC7DD8EC8B5CA26C36A64A912EA68B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2e2d3bd78aac7dd8ec8b5ca26c36a64a912ea68b"), fInfoLevelId=0x0, lpFileInformation=0x22cc8f0 | out: lpFileInformation=0x22cc8f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56f05be8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x56f05be8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x56f05be8, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x125e)) returned 1 [0157.212] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0157.212] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2E2D3BD78AAC7DD8EC8B5CA26C36A64A912EA68B", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2E2D3BD78AAC7DD8EC8B5CA26C36A64A912EA68B", lpFilePart=0x0) returned 0x85 [0157.212] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0157.212] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2E2D3BD78AAC7DD8EC8B5CA26C36A64A912EA68B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2e2d3bd78aac7dd8ec8b5ca26c36a64a912ea68b"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0157.213] GetFileType (hFile=0x444) returned 0x1 [0157.213] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0157.213] GetFileType (hFile=0x444) returned 0x1 [0157.213] ReadFile (in: hFile=0x444, lpBuffer=0x22cee20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x22cee20*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0157.241] CloseHandle (hObject=0x444) returned 1 [0157.241] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2E2D3BD78AAC7DD8EC8B5CA26C36A64A912EA68B", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2E2D3BD78AAC7DD8EC8B5CA26C36A64A912EA68B", lpFilePart=0x0) returned 0x85 [0157.241] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0157.241] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2E2D3BD78AAC7DD8EC8B5CA26C36A64A912EA68B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2e2d3bd78aac7dd8ec8b5ca26c36a64a912ea68b"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0157.241] GetFileType (hFile=0x444) returned 0x1 [0157.241] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0157.241] GetFileType (hFile=0x444) returned 0x1 [0157.241] WriteFile (in: hFile=0x444, lpBuffer=0x22ccad0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x22ccad0*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0157.242] CloseHandle (hObject=0x444) returned 1 [0157.242] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2E2D3BD78AAC7DD8EC8B5CA26C36A64A912EA68B", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2E2D3BD78AAC7DD8EC8B5CA26C36A64A912EA68B", lpFilePart=0x0) returned 0x85 [0157.242] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2E2D3BD78AAC7DD8EC8B5CA26C36A64A912EA68B.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2E2D3BD78AAC7DD8EC8B5CA26C36A64A912EA68B.xuy", lpFilePart=0x0) returned 0x89 [0157.242] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0157.242] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2E2D3BD78AAC7DD8EC8B5CA26C36A64A912EA68B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2e2d3bd78aac7dd8ec8b5ca26c36a64a912ea68b"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56f05be8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x56f05be8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x49922aab, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0157.242] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0157.242] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2E2D3BD78AAC7DD8EC8B5CA26C36A64A912EA68B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2e2d3bd78aac7dd8ec8b5ca26c36a64a912ea68b"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2E2D3BD78AAC7DD8EC8B5CA26C36A64A912EA68B.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2e2d3bd78aac7dd8ec8b5ca26c36a64a912ea68b.xuy")) returned 1 [0157.243] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2E78209F2BD7068695BB80AAE0D3E5F19A372BCA", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2E78209F2BD7068695BB80AAE0D3E5F19A372BCA", lpFilePart=0x0) returned 0x85 [0157.243] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0157.243] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2E78209F2BD7068695BB80AAE0D3E5F19A372BCA" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2e78209f2bd7068695bb80aae0d3e5f19a372bca"), fInfoLevelId=0x0, lpFileInformation=0x234b3c8 | out: lpFileInformation=0x234b3c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fb58f5e, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3fb58f5e, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x3fb5b67a, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x3251)) returned 1 [0157.243] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0157.244] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2E78209F2BD7068695BB80AAE0D3E5F19A372BCA", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2E78209F2BD7068695BB80AAE0D3E5F19A372BCA", lpFilePart=0x0) returned 0x85 [0157.244] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0157.244] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2E78209F2BD7068695BB80AAE0D3E5F19A372BCA" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2e78209f2bd7068695bb80aae0d3e5f19a372bca"), fInfoLevelId=0x0, lpFileInformation=0x234b5c8 | out: lpFileInformation=0x234b5c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fb58f5e, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3fb58f5e, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x3fb5b67a, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x3251)) returned 1 [0157.244] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0157.244] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2E78209F2BD7068695BB80AAE0D3E5F19A372BCA", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2E78209F2BD7068695BB80AAE0D3E5F19A372BCA", lpFilePart=0x0) returned 0x85 [0157.244] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0157.244] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2E78209F2BD7068695BB80AAE0D3E5F19A372BCA" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2e78209f2bd7068695bb80aae0d3e5f19a372bca"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0157.245] GetFileType (hFile=0x444) returned 0x1 [0157.245] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0157.245] GetFileType (hFile=0x444) returned 0x1 [0157.245] ReadFile (in: hFile=0x444, lpBuffer=0x234daf8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x234daf8*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0157.302] CloseHandle (hObject=0x444) returned 1 [0157.303] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2E78209F2BD7068695BB80AAE0D3E5F19A372BCA", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2E78209F2BD7068695BB80AAE0D3E5F19A372BCA", lpFilePart=0x0) returned 0x85 [0157.303] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0157.303] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2E78209F2BD7068695BB80AAE0D3E5F19A372BCA" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2e78209f2bd7068695bb80aae0d3e5f19a372bca"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0157.303] GetFileType (hFile=0x444) returned 0x1 [0157.303] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0157.303] GetFileType (hFile=0x444) returned 0x1 [0157.303] WriteFile (in: hFile=0x444, lpBuffer=0x2185c28*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x2185c28*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0157.303] CloseHandle (hObject=0x444) returned 1 [0157.304] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2E78209F2BD7068695BB80AAE0D3E5F19A372BCA", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2E78209F2BD7068695BB80AAE0D3E5F19A372BCA", lpFilePart=0x0) returned 0x85 [0157.304] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2E78209F2BD7068695BB80AAE0D3E5F19A372BCA.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2E78209F2BD7068695BB80AAE0D3E5F19A372BCA.xuy", lpFilePart=0x0) returned 0x89 [0157.304] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0157.304] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2E78209F2BD7068695BB80AAE0D3E5F19A372BCA" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2e78209f2bd7068695bb80aae0d3e5f19a372bca"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fb58f5e, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3fb58f5e, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x499b75ec, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x3251)) returned 1 [0157.304] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0157.304] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2E78209F2BD7068695BB80AAE0D3E5F19A372BCA" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2e78209f2bd7068695bb80aae0d3e5f19a372bca"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2E78209F2BD7068695BB80AAE0D3E5F19A372BCA.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2e78209f2bd7068695bb80aae0d3e5f19a372bca.xuy")) returned 1 [0157.308] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2EAFF2699FCEE0EDFEF4FF824C07727F657B0D45", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2EAFF2699FCEE0EDFEF4FF824C07727F657B0D45", lpFilePart=0x0) returned 0x85 [0157.308] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0157.308] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2EAFF2699FCEE0EDFEF4FF824C07727F657B0D45" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2eaff2699fcee0edfef4ff824c07727f657b0d45"), fInfoLevelId=0x0, lpFileInformation=0x21ca090 | out: lpFileInformation=0x21ca090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x459406e4, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x459406e4, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x459406e4, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0x861)) returned 1 [0157.308] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0157.308] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2EAFF2699FCEE0EDFEF4FF824C07727F657B0D45", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2EAFF2699FCEE0EDFEF4FF824C07727F657B0D45", lpFilePart=0x0) returned 0x85 [0157.308] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0157.308] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2EAFF2699FCEE0EDFEF4FF824C07727F657B0D45" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2eaff2699fcee0edfef4ff824c07727f657b0d45"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0157.308] GetFileType (hFile=0x444) returned 0x1 [0157.308] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0157.308] GetFileType (hFile=0x444) returned 0x1 [0157.309] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x861 [0157.309] ReadFile (in: hFile=0x444, lpBuffer=0x21cad10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x21cad10*, lpNumberOfBytesRead=0x3be5c8*=0x861, lpOverlapped=0x0) returned 1 [0157.310] CloseHandle (hObject=0x444) returned 1 [0157.321] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2EAFF2699FCEE0EDFEF4FF824C07727F657B0D45", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2EAFF2699FCEE0EDFEF4FF824C07727F657B0D45", lpFilePart=0x0) returned 0x85 [0157.321] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0157.321] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2EAFF2699FCEE0EDFEF4FF824C07727F657B0D45" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2eaff2699fcee0edfef4ff824c07727f657b0d45"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0157.323] GetFileType (hFile=0x444) returned 0x1 [0157.323] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0157.323] GetFileType (hFile=0x444) returned 0x1 [0157.323] WriteFile (in: hFile=0x444, lpBuffer=0x22447d8*, nNumberOfBytesToWrite=0x870, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x22447d8*, lpNumberOfBytesWritten=0x3be4d8*=0x870, lpOverlapped=0x0) returned 1 [0157.323] CloseHandle (hObject=0x444) returned 1 [0157.324] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2EAFF2699FCEE0EDFEF4FF824C07727F657B0D45", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2EAFF2699FCEE0EDFEF4FF824C07727F657B0D45", lpFilePart=0x0) returned 0x85 [0157.324] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2EAFF2699FCEE0EDFEF4FF824C07727F657B0D45.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2EAFF2699FCEE0EDFEF4FF824C07727F657B0D45.xuy", lpFilePart=0x0) returned 0x89 [0157.324] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0157.324] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2EAFF2699FCEE0EDFEF4FF824C07727F657B0D45" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2eaff2699fcee0edfef4ff824c07727f657b0d45"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x459406e4, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x459406e4, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x499dd9cb, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x870)) returned 1 [0157.324] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0157.324] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2EAFF2699FCEE0EDFEF4FF824C07727F657B0D45" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2eaff2699fcee0edfef4ff824c07727f657b0d45"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2EAFF2699FCEE0EDFEF4FF824C07727F657B0D45.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2eaff2699fcee0edfef4ff824c07727f657b0d45.xuy")) returned 1 [0157.325] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2F0A7F5A4CF50FBAA8EC8FB9F3EBEF7461E5FA83", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2F0A7F5A4CF50FBAA8EC8FB9F3EBEF7461E5FA83", lpFilePart=0x0) returned 0x85 [0157.325] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0157.325] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2F0A7F5A4CF50FBAA8EC8FB9F3EBEF7461E5FA83" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2f0a7f5a4cf50fbaa8ec8fb9f3ebef7461e5fa83"), fInfoLevelId=0x0, lpFileInformation=0x2245b98 | out: lpFileInformation=0x2245b98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85e0f4e0, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x85e0f4e0, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x85e0f4e0, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x9191)) returned 1 [0157.326] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0157.326] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2F0A7F5A4CF50FBAA8EC8FB9F3EBEF7461E5FA83", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2F0A7F5A4CF50FBAA8EC8FB9F3EBEF7461E5FA83", lpFilePart=0x0) returned 0x85 [0157.326] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0157.326] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2F0A7F5A4CF50FBAA8EC8FB9F3EBEF7461E5FA83" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2f0a7f5a4cf50fbaa8ec8fb9f3ebef7461e5fa83"), fInfoLevelId=0x0, lpFileInformation=0x2245d98 | out: lpFileInformation=0x2245d98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85e0f4e0, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x85e0f4e0, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x85e0f4e0, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x9191)) returned 1 [0157.326] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0157.326] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2F0A7F5A4CF50FBAA8EC8FB9F3EBEF7461E5FA83", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2F0A7F5A4CF50FBAA8EC8FB9F3EBEF7461E5FA83", lpFilePart=0x0) returned 0x85 [0157.326] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0157.326] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2F0A7F5A4CF50FBAA8EC8FB9F3EBEF7461E5FA83" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2f0a7f5a4cf50fbaa8ec8fb9f3ebef7461e5fa83"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0157.327] GetFileType (hFile=0x444) returned 0x1 [0157.327] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0157.327] GetFileType (hFile=0x444) returned 0x1 [0157.327] ReadFile (in: hFile=0x444, lpBuffer=0x22482c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x22482c8*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0157.339] CloseHandle (hObject=0x444) returned 1 [0157.339] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2F0A7F5A4CF50FBAA8EC8FB9F3EBEF7461E5FA83", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2F0A7F5A4CF50FBAA8EC8FB9F3EBEF7461E5FA83", lpFilePart=0x0) returned 0x85 [0157.339] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0157.339] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2F0A7F5A4CF50FBAA8EC8FB9F3EBEF7461E5FA83" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2f0a7f5a4cf50fbaa8ec8fb9f3ebef7461e5fa83"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0157.339] GetFileType (hFile=0x444) returned 0x1 [0157.339] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0157.340] GetFileType (hFile=0x444) returned 0x1 [0157.340] WriteFile (in: hFile=0x444, lpBuffer=0x2245f78*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x2245f78*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0157.340] CloseHandle (hObject=0x444) returned 1 [0157.340] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2F0A7F5A4CF50FBAA8EC8FB9F3EBEF7461E5FA83", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2F0A7F5A4CF50FBAA8EC8FB9F3EBEF7461E5FA83", lpFilePart=0x0) returned 0x85 [0157.340] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2F0A7F5A4CF50FBAA8EC8FB9F3EBEF7461E5FA83.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2F0A7F5A4CF50FBAA8EC8FB9F3EBEF7461E5FA83.xuy", lpFilePart=0x0) returned 0x89 [0157.340] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0157.340] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2F0A7F5A4CF50FBAA8EC8FB9F3EBEF7461E5FA83" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2f0a7f5a4cf50fbaa8ec8fb9f3ebef7461e5fa83"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85e0f4e0, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x85e0f4e0, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x49a038e9, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x9191)) returned 1 [0157.340] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0157.340] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2F0A7F5A4CF50FBAA8EC8FB9F3EBEF7461E5FA83" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2f0a7f5a4cf50fbaa8ec8fb9f3ebef7461e5fa83"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2F0A7F5A4CF50FBAA8EC8FB9F3EBEF7461E5FA83.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2f0a7f5a4cf50fbaa8ec8fb9f3ebef7461e5fa83.xuy")) returned 1 [0157.341] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2FD2E2A71F89E3A92F68CB796207228217259289", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2FD2E2A71F89E3A92F68CB796207228217259289", lpFilePart=0x0) returned 0x85 [0157.341] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0157.342] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2FD2E2A71F89E3A92F68CB796207228217259289" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2fd2e2a71f89e3a92f68cb796207228217259289"), fInfoLevelId=0x0, lpFileInformation=0x22c4870 | out: lpFileInformation=0x22c4870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f09e33a, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3f09e33a, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xc52b52a5, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0xd2e6)) returned 1 [0157.342] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0157.342] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2FD2E2A71F89E3A92F68CB796207228217259289", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2FD2E2A71F89E3A92F68CB796207228217259289", lpFilePart=0x0) returned 0x85 [0157.342] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0157.342] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2FD2E2A71F89E3A92F68CB796207228217259289" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2fd2e2a71f89e3a92f68cb796207228217259289"), fInfoLevelId=0x0, lpFileInformation=0x22c4a70 | out: lpFileInformation=0x22c4a70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f09e33a, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3f09e33a, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xc52b52a5, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0xd2e6)) returned 1 [0157.342] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0157.342] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2FD2E2A71F89E3A92F68CB796207228217259289", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2FD2E2A71F89E3A92F68CB796207228217259289", lpFilePart=0x0) returned 0x85 [0157.342] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0157.342] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2FD2E2A71F89E3A92F68CB796207228217259289" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2fd2e2a71f89e3a92f68cb796207228217259289"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0157.343] GetFileType (hFile=0x444) returned 0x1 [0157.343] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0157.343] GetFileType (hFile=0x444) returned 0x1 [0157.343] ReadFile (in: hFile=0x444, lpBuffer=0x22c6fa0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x22c6fa0*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0157.359] CloseHandle (hObject=0x444) returned 1 [0157.359] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2FD2E2A71F89E3A92F68CB796207228217259289", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2FD2E2A71F89E3A92F68CB796207228217259289", lpFilePart=0x0) returned 0x85 [0157.359] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0157.359] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2FD2E2A71F89E3A92F68CB796207228217259289" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2fd2e2a71f89e3a92f68cb796207228217259289"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0157.360] GetFileType (hFile=0x444) returned 0x1 [0157.360] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0157.360] GetFileType (hFile=0x444) returned 0x1 [0157.360] WriteFile (in: hFile=0x444, lpBuffer=0x22c4c50*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x22c4c50*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0157.360] CloseHandle (hObject=0x444) returned 1 [0157.360] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2FD2E2A71F89E3A92F68CB796207228217259289", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2FD2E2A71F89E3A92F68CB796207228217259289", lpFilePart=0x0) returned 0x85 [0157.360] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2FD2E2A71F89E3A92F68CB796207228217259289.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2FD2E2A71F89E3A92F68CB796207228217259289.xuy", lpFilePart=0x0) returned 0x89 [0157.360] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0157.360] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2FD2E2A71F89E3A92F68CB796207228217259289" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2fd2e2a71f89e3a92f68cb796207228217259289"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f09e33a, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3f09e33a, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x49a4ff8b, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xd2e6)) returned 1 [0157.360] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0157.360] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2FD2E2A71F89E3A92F68CB796207228217259289" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2fd2e2a71f89e3a92f68cb796207228217259289"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2FD2E2A71F89E3A92F68CB796207228217259289.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2fd2e2a71f89e3a92f68cb796207228217259289.xuy")) returned 1 [0157.362] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2FEB6245AA212EA51F79468084964097925BD6D6", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2FEB6245AA212EA51F79468084964097925BD6D6", lpFilePart=0x0) returned 0x85 [0157.362] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0157.362] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2FEB6245AA212EA51F79468084964097925BD6D6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2feb6245aa212ea51f79468084964097925bd6d6"), fInfoLevelId=0x0, lpFileInformation=0x2343548 | out: lpFileInformation=0x2343548*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8624b5ac, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x8624b5ac, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x886a421c, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x1d6f)) returned 1 [0157.364] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0157.364] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2FEB6245AA212EA51F79468084964097925BD6D6", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2FEB6245AA212EA51F79468084964097925BD6D6", lpFilePart=0x0) returned 0x85 [0157.364] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0157.364] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2FEB6245AA212EA51F79468084964097925BD6D6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2feb6245aa212ea51f79468084964097925bd6d6"), fInfoLevelId=0x0, lpFileInformation=0x2343748 | out: lpFileInformation=0x2343748*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8624b5ac, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x8624b5ac, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x886a421c, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x1d6f)) returned 1 [0157.365] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0157.365] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2FEB6245AA212EA51F79468084964097925BD6D6", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2FEB6245AA212EA51F79468084964097925BD6D6", lpFilePart=0x0) returned 0x85 [0157.365] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0157.365] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2FEB6245AA212EA51F79468084964097925BD6D6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2feb6245aa212ea51f79468084964097925bd6d6"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0157.366] GetFileType (hFile=0x444) returned 0x1 [0157.366] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0157.366] GetFileType (hFile=0x444) returned 0x1 [0157.366] ReadFile (in: hFile=0x444, lpBuffer=0x2345c78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x2345c78*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0157.412] CloseHandle (hObject=0x444) returned 1 [0157.412] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2FEB6245AA212EA51F79468084964097925BD6D6", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2FEB6245AA212EA51F79468084964097925BD6D6", lpFilePart=0x0) returned 0x85 [0157.412] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0157.412] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2FEB6245AA212EA51F79468084964097925BD6D6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2feb6245aa212ea51f79468084964097925bd6d6"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0157.412] GetFileType (hFile=0x444) returned 0x1 [0157.412] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0157.412] GetFileType (hFile=0x444) returned 0x1 [0157.412] WriteFile (in: hFile=0x444, lpBuffer=0x2185c28*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x2185c28*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0157.412] CloseHandle (hObject=0x444) returned 1 [0157.412] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2FEB6245AA212EA51F79468084964097925BD6D6", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2FEB6245AA212EA51F79468084964097925BD6D6", lpFilePart=0x0) returned 0x85 [0157.412] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2FEB6245AA212EA51F79468084964097925BD6D6.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2FEB6245AA212EA51F79468084964097925BD6D6.xuy", lpFilePart=0x0) returned 0x89 [0157.413] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0157.413] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2FEB6245AA212EA51F79468084964097925BD6D6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2feb6245aa212ea51f79468084964097925bd6d6"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8624b5ac, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x8624b5ac, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x49ac27bc, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0157.413] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0157.413] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2FEB6245AA212EA51F79468084964097925BD6D6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2feb6245aa212ea51f79468084964097925bd6d6"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2FEB6245AA212EA51F79468084964097925BD6D6.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2feb6245aa212ea51f79468084964097925bd6d6.xuy")) returned 1 [0157.423] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\311C19847187CC20C5A8A21FA39C6639F5BBCF67", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\311C19847187CC20C5A8A21FA39C6639F5BBCF67", lpFilePart=0x0) returned 0x85 [0157.423] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0157.423] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\311C19847187CC20C5A8A21FA39C6639F5BBCF67" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\311c19847187cc20c5a8a21fa39c6639f5bbcf67"), fInfoLevelId=0x0, lpFileInformation=0x21c2200 | out: lpFileInformation=0x21c2200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x544f75b8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x544f75b8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x544f75b8, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x5d48)) returned 1 [0157.424] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0157.425] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\311C19847187CC20C5A8A21FA39C6639F5BBCF67", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\311C19847187CC20C5A8A21FA39C6639F5BBCF67", lpFilePart=0x0) returned 0x85 [0157.425] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0157.425] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\311C19847187CC20C5A8A21FA39C6639F5BBCF67" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\311c19847187cc20c5a8a21fa39c6639f5bbcf67"), fInfoLevelId=0x0, lpFileInformation=0x21c2400 | out: lpFileInformation=0x21c2400*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x544f75b8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x544f75b8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x544f75b8, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x5d48)) returned 1 [0157.425] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0157.425] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\311C19847187CC20C5A8A21FA39C6639F5BBCF67", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\311C19847187CC20C5A8A21FA39C6639F5BBCF67", lpFilePart=0x0) returned 0x85 [0157.425] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0157.425] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\311C19847187CC20C5A8A21FA39C6639F5BBCF67" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\311c19847187cc20c5a8a21fa39c6639f5bbcf67"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0157.426] GetFileType (hFile=0x444) returned 0x1 [0157.426] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0157.426] GetFileType (hFile=0x444) returned 0x1 [0157.426] ReadFile (in: hFile=0x444, lpBuffer=0x21c4930, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x21c4930*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0157.441] CloseHandle (hObject=0x444) returned 1 [0157.441] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\311C19847187CC20C5A8A21FA39C6639F5BBCF67", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\311C19847187CC20C5A8A21FA39C6639F5BBCF67", lpFilePart=0x0) returned 0x85 [0157.441] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0157.441] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\311C19847187CC20C5A8A21FA39C6639F5BBCF67" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\311c19847187cc20c5a8a21fa39c6639f5bbcf67"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0157.442] GetFileType (hFile=0x444) returned 0x1 [0157.442] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0157.442] GetFileType (hFile=0x444) returned 0x1 [0157.442] WriteFile (in: hFile=0x444, lpBuffer=0x21c25e0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x21c25e0*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0157.442] CloseHandle (hObject=0x444) returned 1 [0157.442] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\311C19847187CC20C5A8A21FA39C6639F5BBCF67", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\311C19847187CC20C5A8A21FA39C6639F5BBCF67", lpFilePart=0x0) returned 0x85 [0157.442] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\311C19847187CC20C5A8A21FA39C6639F5BBCF67.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\311C19847187CC20C5A8A21FA39C6639F5BBCF67.xuy", lpFilePart=0x0) returned 0x89 [0157.442] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0157.442] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\311C19847187CC20C5A8A21FA39C6639F5BBCF67" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\311c19847187cc20c5a8a21fa39c6639f5bbcf67"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x544f75b8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x544f75b8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x49b0ee94, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x5d48)) returned 1 [0157.442] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0157.443] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\311C19847187CC20C5A8A21FA39C6639F5BBCF67" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\311c19847187cc20c5a8a21fa39c6639f5bbcf67"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\311C19847187CC20C5A8A21FA39C6639F5BBCF67.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\311c19847187cc20c5a8a21fa39c6639f5bbcf67.xuy")) returned 1 [0157.444] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\31220725946AC054F523C4029C40CA22A7A42621", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\31220725946AC054F523C4029C40CA22A7A42621", lpFilePart=0x0) returned 0x85 [0157.444] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0157.444] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\31220725946AC054F523C4029C40CA22A7A42621" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\31220725946ac054f523c4029c40ca22a7a42621"), fInfoLevelId=0x0, lpFileInformation=0x2240ed8 | out: lpFileInformation=0x2240ed8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74c739ea, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x74c739ea, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x74c739ea, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0x528)) returned 1 [0157.444] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0157.444] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\31220725946AC054F523C4029C40CA22A7A42621", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\31220725946AC054F523C4029C40CA22A7A42621", lpFilePart=0x0) returned 0x85 [0157.444] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0157.444] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\31220725946AC054F523C4029C40CA22A7A42621" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\31220725946ac054f523c4029c40ca22a7a42621"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0157.444] GetFileType (hFile=0x444) returned 0x1 [0157.444] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0157.444] GetFileType (hFile=0x444) returned 0x1 [0157.444] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x528 [0157.444] ReadFile (in: hFile=0x444, lpBuffer=0x2241818, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x2241818*, lpNumberOfBytesRead=0x3be5c8*=0x528, lpOverlapped=0x0) returned 1 [0157.454] CloseHandle (hObject=0x444) returned 1 [0157.463] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\31220725946AC054F523C4029C40CA22A7A42621", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\31220725946AC054F523C4029C40CA22A7A42621", lpFilePart=0x0) returned 0x85 [0157.463] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0157.464] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\31220725946AC054F523C4029C40CA22A7A42621" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\31220725946ac054f523c4029c40ca22a7a42621"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0157.465] GetFileType (hFile=0x444) returned 0x1 [0157.465] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0157.465] GetFileType (hFile=0x444) returned 0x1 [0157.465] WriteFile (in: hFile=0x444, lpBuffer=0x22ba298*, nNumberOfBytesToWrite=0x530, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x22ba298*, lpNumberOfBytesWritten=0x3be4d8*=0x530, lpOverlapped=0x0) returned 1 [0157.466] CloseHandle (hObject=0x444) returned 1 [0157.466] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\31220725946AC054F523C4029C40CA22A7A42621", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\31220725946AC054F523C4029C40CA22A7A42621", lpFilePart=0x0) returned 0x85 [0157.466] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\31220725946AC054F523C4029C40CA22A7A42621.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\31220725946AC054F523C4029C40CA22A7A42621.xuy", lpFilePart=0x0) returned 0x89 [0157.466] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0157.466] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\31220725946AC054F523C4029C40CA22A7A42621" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\31220725946ac054f523c4029c40ca22a7a42621"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74c739ea, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x74c739ea, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x49b34e49, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x530)) returned 1 [0157.467] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0157.467] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\31220725946AC054F523C4029C40CA22A7A42621" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\31220725946ac054f523c4029c40ca22a7a42621"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\31220725946AC054F523C4029C40CA22A7A42621.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\31220725946ac054f523c4029c40ca22a7a42621.xuy")) returned 1 [0157.468] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\31592C8B017CA0508B5F0339E7E1EA46376F2D31", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\31592C8B017CA0508B5F0339E7E1EA46376F2D31", lpFilePart=0x0) returned 0x85 [0157.468] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0157.468] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\31592C8B017CA0508B5F0339E7E1EA46376F2D31" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\31592c8b017ca0508b5f0339e7e1ea46376f2d31"), fInfoLevelId=0x0, lpFileInformation=0x22bb658 | out: lpFileInformation=0x22bb658*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc264d4b3, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc264d4b3, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x3c463540, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0x1ee9)) returned 1 [0157.468] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0157.468] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\31592C8B017CA0508B5F0339E7E1EA46376F2D31", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\31592C8B017CA0508B5F0339E7E1EA46376F2D31", lpFilePart=0x0) returned 0x85 [0157.468] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0157.468] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\31592C8B017CA0508B5F0339E7E1EA46376F2D31" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\31592c8b017ca0508b5f0339e7e1ea46376f2d31"), fInfoLevelId=0x0, lpFileInformation=0x22bb858 | out: lpFileInformation=0x22bb858*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc264d4b3, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc264d4b3, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x3c463540, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0x1ee9)) returned 1 [0157.468] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0157.468] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\31592C8B017CA0508B5F0339E7E1EA46376F2D31", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\31592C8B017CA0508B5F0339E7E1EA46376F2D31", lpFilePart=0x0) returned 0x85 [0157.468] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0157.468] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\31592C8B017CA0508B5F0339E7E1EA46376F2D31" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\31592c8b017ca0508b5f0339e7e1ea46376f2d31"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0157.469] GetFileType (hFile=0x444) returned 0x1 [0157.469] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0157.469] GetFileType (hFile=0x444) returned 0x1 [0157.469] ReadFile (in: hFile=0x444, lpBuffer=0x22bdd88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x22bdd88*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0157.484] CloseHandle (hObject=0x444) returned 1 [0157.484] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\31592C8B017CA0508B5F0339E7E1EA46376F2D31", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\31592C8B017CA0508B5F0339E7E1EA46376F2D31", lpFilePart=0x0) returned 0x85 [0157.484] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0157.484] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\31592C8B017CA0508B5F0339E7E1EA46376F2D31" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\31592c8b017ca0508b5f0339e7e1ea46376f2d31"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0157.484] GetFileType (hFile=0x444) returned 0x1 [0157.484] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0157.484] GetFileType (hFile=0x444) returned 0x1 [0157.484] WriteFile (in: hFile=0x444, lpBuffer=0x22bba38*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x22bba38*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0157.485] CloseHandle (hObject=0x444) returned 1 [0157.485] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\31592C8B017CA0508B5F0339E7E1EA46376F2D31", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\31592C8B017CA0508B5F0339E7E1EA46376F2D31", lpFilePart=0x0) returned 0x85 [0157.485] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\31592C8B017CA0508B5F0339E7E1EA46376F2D31.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\31592C8B017CA0508B5F0339E7E1EA46376F2D31.xuy", lpFilePart=0x0) returned 0x89 [0157.485] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0157.485] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\31592C8B017CA0508B5F0339E7E1EA46376F2D31" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\31592c8b017ca0508b5f0339e7e1ea46376f2d31"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc264d4b3, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc264d4b3, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x49b812d9, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0157.485] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0157.485] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\31592C8B017CA0508B5F0339E7E1EA46376F2D31" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\31592c8b017ca0508b5f0339e7e1ea46376f2d31"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\31592C8B017CA0508B5F0339E7E1EA46376F2D31.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\31592c8b017ca0508b5f0339e7e1ea46376f2d31.xuy")) returned 1 [0157.486] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\317E80FB14217F5F6E8EAB3C4982A166EBEDBC9C", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\317E80FB14217F5F6E8EAB3C4982A166EBEDBC9C", lpFilePart=0x0) returned 0x85 [0157.486] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0157.486] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\317E80FB14217F5F6E8EAB3C4982A166EBEDBC9C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\317e80fb14217f5f6e8eab3c4982a166ebedbc9c"), fInfoLevelId=0x0, lpFileInformation=0x233a330 | out: lpFileInformation=0x233a330*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61577ff1, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x61577ff1, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x61577ff1, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x1137)) returned 1 [0157.487] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0157.487] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\317E80FB14217F5F6E8EAB3C4982A166EBEDBC9C", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\317E80FB14217F5F6E8EAB3C4982A166EBEDBC9C", lpFilePart=0x0) returned 0x85 [0157.487] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0157.487] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\317E80FB14217F5F6E8EAB3C4982A166EBEDBC9C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\317e80fb14217f5f6e8eab3c4982a166ebedbc9c"), fInfoLevelId=0x0, lpFileInformation=0x233a530 | out: lpFileInformation=0x233a530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61577ff1, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x61577ff1, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x61577ff1, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x1137)) returned 1 [0157.487] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0157.487] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\317E80FB14217F5F6E8EAB3C4982A166EBEDBC9C", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\317E80FB14217F5F6E8EAB3C4982A166EBEDBC9C", lpFilePart=0x0) returned 0x85 [0157.487] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0157.487] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\317E80FB14217F5F6E8EAB3C4982A166EBEDBC9C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\317e80fb14217f5f6e8eab3c4982a166ebedbc9c"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0157.488] GetFileType (hFile=0x444) returned 0x1 [0157.488] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0157.488] GetFileType (hFile=0x444) returned 0x1 [0157.488] ReadFile (in: hFile=0x444, lpBuffer=0x233ca60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x233ca60*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0157.531] CloseHandle (hObject=0x444) returned 1 [0157.531] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\317E80FB14217F5F6E8EAB3C4982A166EBEDBC9C", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\317E80FB14217F5F6E8EAB3C4982A166EBEDBC9C", lpFilePart=0x0) returned 0x85 [0157.531] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0157.531] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\317E80FB14217F5F6E8EAB3C4982A166EBEDBC9C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\317e80fb14217f5f6e8eab3c4982a166ebedbc9c"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0157.531] GetFileType (hFile=0x444) returned 0x1 [0157.531] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0157.531] GetFileType (hFile=0x444) returned 0x1 [0157.531] WriteFile (in: hFile=0x444, lpBuffer=0x2185c28*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x2185c28*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0157.531] CloseHandle (hObject=0x444) returned 1 [0157.532] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\317E80FB14217F5F6E8EAB3C4982A166EBEDBC9C", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\317E80FB14217F5F6E8EAB3C4982A166EBEDBC9C", lpFilePart=0x0) returned 0x85 [0157.532] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\317E80FB14217F5F6E8EAB3C4982A166EBEDBC9C.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\317E80FB14217F5F6E8EAB3C4982A166EBEDBC9C.xuy", lpFilePart=0x0) returned 0x89 [0157.532] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0157.532] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\317E80FB14217F5F6E8EAB3C4982A166EBEDBC9C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\317e80fb14217f5f6e8eab3c4982a166ebedbc9c"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61577ff1, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x61577ff1, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x49bf3db5, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0157.532] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0157.532] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\317E80FB14217F5F6E8EAB3C4982A166EBEDBC9C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\317e80fb14217f5f6e8eab3c4982a166ebedbc9c"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\317E80FB14217F5F6E8EAB3C4982A166EBEDBC9C.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\317e80fb14217f5f6e8eab3c4982a166ebedbc9c.xuy")) returned 1 [0157.533] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3194BBD824DE5F4E0F44B99C71BB6C700199B487", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3194BBD824DE5F4E0F44B99C71BB6C700199B487", lpFilePart=0x0) returned 0x85 [0157.533] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0157.533] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3194BBD824DE5F4E0F44B99C71BB6C700199B487" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\3194bbd824de5f4e0f44b99c71bb6c700199b487"), fInfoLevelId=0x0, lpFileInformation=0x21b8fe0 | out: lpFileInformation=0x21b8fe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c26b459, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3c26b459, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x3c318a64, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x15c1)) returned 1 [0157.533] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0157.533] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3194BBD824DE5F4E0F44B99C71BB6C700199B487", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3194BBD824DE5F4E0F44B99C71BB6C700199B487", lpFilePart=0x0) returned 0x85 [0157.534] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0157.534] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3194BBD824DE5F4E0F44B99C71BB6C700199B487" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\3194bbd824de5f4e0f44b99c71bb6c700199b487"), fInfoLevelId=0x0, lpFileInformation=0x21b91e0 | out: lpFileInformation=0x21b91e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c26b459, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3c26b459, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x3c318a64, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x15c1)) returned 1 [0157.534] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0157.534] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3194BBD824DE5F4E0F44B99C71BB6C700199B487", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3194BBD824DE5F4E0F44B99C71BB6C700199B487", lpFilePart=0x0) returned 0x85 [0157.534] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0157.534] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3194BBD824DE5F4E0F44B99C71BB6C700199B487" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\3194bbd824de5f4e0f44b99c71bb6c700199b487"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0157.535] GetFileType (hFile=0x444) returned 0x1 [0157.535] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0157.535] GetFileType (hFile=0x444) returned 0x1 [0157.535] ReadFile (in: hFile=0x444, lpBuffer=0x21bb710, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x21bb710*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0157.555] CloseHandle (hObject=0x444) returned 1 [0157.555] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3194BBD824DE5F4E0F44B99C71BB6C700199B487", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3194BBD824DE5F4E0F44B99C71BB6C700199B487", lpFilePart=0x0) returned 0x85 [0157.555] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0157.555] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3194BBD824DE5F4E0F44B99C71BB6C700199B487" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\3194bbd824de5f4e0f44b99c71bb6c700199b487"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0157.555] GetFileType (hFile=0x444) returned 0x1 [0157.555] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0157.555] GetFileType (hFile=0x444) returned 0x1 [0157.555] WriteFile (in: hFile=0x444, lpBuffer=0x21b93c0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x21b93c0*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0157.556] CloseHandle (hObject=0x444) returned 1 [0157.556] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3194BBD824DE5F4E0F44B99C71BB6C700199B487", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3194BBD824DE5F4E0F44B99C71BB6C700199B487", lpFilePart=0x0) returned 0x85 [0157.556] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3194BBD824DE5F4E0F44B99C71BB6C700199B487.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3194BBD824DE5F4E0F44B99C71BB6C700199B487.xuy", lpFilePart=0x0) returned 0x89 [0157.556] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0157.556] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3194BBD824DE5F4E0F44B99C71BB6C700199B487" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\3194bbd824de5f4e0f44b99c71bb6c700199b487"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c26b459, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3c26b459, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x49c19992, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0157.556] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0157.556] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3194BBD824DE5F4E0F44B99C71BB6C700199B487" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\3194bbd824de5f4e0f44b99c71bb6c700199b487"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3194BBD824DE5F4E0F44B99C71BB6C700199B487.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\3194bbd824de5f4e0f44b99c71bb6c700199b487.xuy")) returned 1 [0157.557] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\31F8F1DF56894B1D3F2180DB7128624160D6FD5E", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\31F8F1DF56894B1D3F2180DB7128624160D6FD5E", lpFilePart=0x0) returned 0x85 [0157.557] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0157.557] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\31F8F1DF56894B1D3F2180DB7128624160D6FD5E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\31f8f1df56894b1d3f2180db7128624160d6fd5e"), fInfoLevelId=0x0, lpFileInformation=0x2237cb8 | out: lpFileInformation=0x2237cb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdda5a53b, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xdda5a53b, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xdda61a63, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x1c68)) returned 1 [0157.559] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0157.559] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\31F8F1DF56894B1D3F2180DB7128624160D6FD5E", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\31F8F1DF56894B1D3F2180DB7128624160D6FD5E", lpFilePart=0x0) returned 0x85 [0157.559] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0157.559] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\31F8F1DF56894B1D3F2180DB7128624160D6FD5E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\31f8f1df56894b1d3f2180db7128624160d6fd5e"), fInfoLevelId=0x0, lpFileInformation=0x2237eb8 | out: lpFileInformation=0x2237eb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdda5a53b, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xdda5a53b, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xdda61a63, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x1c68)) returned 1 [0157.559] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0157.559] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\31F8F1DF56894B1D3F2180DB7128624160D6FD5E", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\31F8F1DF56894B1D3F2180DB7128624160D6FD5E", lpFilePart=0x0) returned 0x85 [0157.559] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0157.559] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\31F8F1DF56894B1D3F2180DB7128624160D6FD5E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\31f8f1df56894b1d3f2180db7128624160d6fd5e"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0157.561] GetFileType (hFile=0x444) returned 0x1 [0157.561] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0157.561] GetFileType (hFile=0x444) returned 0x1 [0157.561] ReadFile (in: hFile=0x444, lpBuffer=0x223a3e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x223a3e8*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0157.573] CloseHandle (hObject=0x444) returned 1 [0157.573] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\31F8F1DF56894B1D3F2180DB7128624160D6FD5E", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\31F8F1DF56894B1D3F2180DB7128624160D6FD5E", lpFilePart=0x0) returned 0x85 [0157.573] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0157.573] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\31F8F1DF56894B1D3F2180DB7128624160D6FD5E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\31f8f1df56894b1d3f2180db7128624160d6fd5e"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0157.574] GetFileType (hFile=0x444) returned 0x1 [0157.574] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0157.574] GetFileType (hFile=0x444) returned 0x1 [0157.574] WriteFile (in: hFile=0x444, lpBuffer=0x2238098*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x2238098*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0157.574] CloseHandle (hObject=0x444) returned 1 [0157.574] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\31F8F1DF56894B1D3F2180DB7128624160D6FD5E", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\31F8F1DF56894B1D3F2180DB7128624160D6FD5E", lpFilePart=0x0) returned 0x85 [0157.574] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\31F8F1DF56894B1D3F2180DB7128624160D6FD5E.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\31F8F1DF56894B1D3F2180DB7128624160D6FD5E.xuy", lpFilePart=0x0) returned 0x89 [0157.574] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0157.574] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\31F8F1DF56894B1D3F2180DB7128624160D6FD5E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\31f8f1df56894b1d3f2180db7128624160d6fd5e"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdda5a53b, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xdda5a53b, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x49c40603, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0157.574] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0157.574] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\31F8F1DF56894B1D3F2180DB7128624160D6FD5E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\31f8f1df56894b1d3f2180db7128624160d6fd5e"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\31F8F1DF56894B1D3F2180DB7128624160D6FD5E.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\31f8f1df56894b1d3f2180db7128624160d6fd5e.xuy")) returned 1 [0157.576] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3221C03D33E21E6F8B41DB86EB7B6527177AD6F9", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3221C03D33E21E6F8B41DB86EB7B6527177AD6F9", lpFilePart=0x0) returned 0x85 [0157.576] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0157.576] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3221C03D33E21E6F8B41DB86EB7B6527177AD6F9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\3221c03d33e21e6f8b41db86eb7b6527177ad6f9"), fInfoLevelId=0x0, lpFileInformation=0x22b6990 | out: lpFileInformation=0x22b6990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f5f097b, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3f5f097b, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x3f5f581a, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x52a)) returned 1 [0157.576] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0157.576] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3221C03D33E21E6F8B41DB86EB7B6527177AD6F9", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3221C03D33E21E6F8B41DB86EB7B6527177AD6F9", lpFilePart=0x0) returned 0x85 [0157.576] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0157.576] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3221C03D33E21E6F8B41DB86EB7B6527177AD6F9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\3221c03d33e21e6f8b41db86eb7b6527177ad6f9"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0157.576] GetFileType (hFile=0x444) returned 0x1 [0157.576] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0157.576] GetFileType (hFile=0x444) returned 0x1 [0157.576] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x52a [0157.577] ReadFile (in: hFile=0x444, lpBuffer=0x22b72d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x22b72d8*, lpNumberOfBytesRead=0x3be5c8*=0x52a, lpOverlapped=0x0) returned 1 [0157.579] CloseHandle (hObject=0x444) returned 1 [0157.589] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3221C03D33E21E6F8B41DB86EB7B6527177AD6F9", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3221C03D33E21E6F8B41DB86EB7B6527177AD6F9", lpFilePart=0x0) returned 0x85 [0157.589] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0157.589] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3221C03D33E21E6F8B41DB86EB7B6527177AD6F9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\3221c03d33e21e6f8b41db86eb7b6527177ad6f9"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0157.590] GetFileType (hFile=0x444) returned 0x1 [0157.590] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0157.590] GetFileType (hFile=0x444) returned 0x1 [0157.591] WriteFile (in: hFile=0x444, lpBuffer=0x232fd58*, nNumberOfBytesToWrite=0x530, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x232fd58*, lpNumberOfBytesWritten=0x3be4d8*=0x530, lpOverlapped=0x0) returned 1 [0157.595] CloseHandle (hObject=0x444) returned 1 [0157.595] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3221C03D33E21E6F8B41DB86EB7B6527177AD6F9", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3221C03D33E21E6F8B41DB86EB7B6527177AD6F9", lpFilePart=0x0) returned 0x85 [0157.595] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3221C03D33E21E6F8B41DB86EB7B6527177AD6F9.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3221C03D33E21E6F8B41DB86EB7B6527177AD6F9.xuy", lpFilePart=0x0) returned 0x89 [0157.595] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0157.596] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3221C03D33E21E6F8B41DB86EB7B6527177AD6F9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\3221c03d33e21e6f8b41db86eb7b6527177ad6f9"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f5f097b, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3f5f097b, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x49c8c1db, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x530)) returned 1 [0157.596] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0157.596] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3221C03D33E21E6F8B41DB86EB7B6527177AD6F9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\3221c03d33e21e6f8b41db86eb7b6527177ad6f9"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3221C03D33E21E6F8B41DB86EB7B6527177AD6F9.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\3221c03d33e21e6f8b41db86eb7b6527177ad6f9.xuy")) returned 1 [0157.597] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\32AFE38EED991EA004851E7C968397C7D9EA501C", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\32AFE38EED991EA004851E7C968397C7D9EA501C", lpFilePart=0x0) returned 0x85 [0157.597] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0157.597] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\32AFE38EED991EA004851E7C968397C7D9EA501C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\32afe38eed991ea004851e7c968397c7d9ea501c"), fInfoLevelId=0x0, lpFileInformation=0x2331118 | out: lpFileInformation=0x2331118*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4566ba3b, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x4566ba3b, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x4566ba3b, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0xb6c1)) returned 1 [0157.597] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0157.597] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\32AFE38EED991EA004851E7C968397C7D9EA501C", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\32AFE38EED991EA004851E7C968397C7D9EA501C", lpFilePart=0x0) returned 0x85 [0157.597] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0157.597] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\32AFE38EED991EA004851E7C968397C7D9EA501C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\32afe38eed991ea004851e7c968397c7d9ea501c"), fInfoLevelId=0x0, lpFileInformation=0x2331318 | out: lpFileInformation=0x2331318*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4566ba3b, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x4566ba3b, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x4566ba3b, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0xb6c1)) returned 1 [0157.598] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0157.598] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\32AFE38EED991EA004851E7C968397C7D9EA501C", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\32AFE38EED991EA004851E7C968397C7D9EA501C", lpFilePart=0x0) returned 0x85 [0157.598] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0157.598] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\32AFE38EED991EA004851E7C968397C7D9EA501C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\32afe38eed991ea004851e7c968397c7d9ea501c"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0157.599] GetFileType (hFile=0x444) returned 0x1 [0157.599] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0157.599] GetFileType (hFile=0x444) returned 0x1 [0157.599] ReadFile (in: hFile=0x444, lpBuffer=0x2333848, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x2333848*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0157.649] CloseHandle (hObject=0x444) returned 1 [0157.649] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\32AFE38EED991EA004851E7C968397C7D9EA501C", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\32AFE38EED991EA004851E7C968397C7D9EA501C", lpFilePart=0x0) returned 0x85 [0157.649] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0157.649] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\32AFE38EED991EA004851E7C968397C7D9EA501C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\32afe38eed991ea004851e7c968397c7d9ea501c"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0157.650] GetFileType (hFile=0x444) returned 0x1 [0157.650] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0157.650] GetFileType (hFile=0x444) returned 0x1 [0157.650] WriteFile (in: hFile=0x444, lpBuffer=0x2185c28*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x2185c28*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0157.650] CloseHandle (hObject=0x444) returned 1 [0157.650] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\32AFE38EED991EA004851E7C968397C7D9EA501C", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\32AFE38EED991EA004851E7C968397C7D9EA501C", lpFilePart=0x0) returned 0x85 [0157.650] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\32AFE38EED991EA004851E7C968397C7D9EA501C.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\32AFE38EED991EA004851E7C968397C7D9EA501C.xuy", lpFilePart=0x0) returned 0x89 [0157.650] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0157.650] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\32AFE38EED991EA004851E7C968397C7D9EA501C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\32afe38eed991ea004851e7c968397c7d9ea501c"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4566ba3b, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x4566ba3b, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x49cfe97b, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xb6c1)) returned 1 [0157.650] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0157.650] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\32AFE38EED991EA004851E7C968397C7D9EA501C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\32afe38eed991ea004851e7c968397c7d9ea501c"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\32AFE38EED991EA004851E7C968397C7D9EA501C.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\32afe38eed991ea004851e7c968397c7d9ea501c.xuy")) returned 1 [0157.652] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\32B6927A1EB46E83B230070265358A1C5B788D11", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\32B6927A1EB46E83B230070265358A1C5B788D11", lpFilePart=0x0) returned 0x85 [0157.652] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0157.652] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\32B6927A1EB46E83B230070265358A1C5B788D11" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\32b6927a1eb46e83b230070265358a1c5b788d11"), fInfoLevelId=0x0, lpFileInformation=0x21afdf8 | out: lpFileInformation=0x21afdf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47ca6960, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x47ca6960, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x47ca6960, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0x1ad0)) returned 1 [0157.652] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0157.652] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\32B6927A1EB46E83B230070265358A1C5B788D11", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\32B6927A1EB46E83B230070265358A1C5B788D11", lpFilePart=0x0) returned 0x85 [0157.652] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0157.652] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\32B6927A1EB46E83B230070265358A1C5B788D11" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\32b6927a1eb46e83b230070265358a1c5b788d11"), fInfoLevelId=0x0, lpFileInformation=0x21afff8 | out: lpFileInformation=0x21afff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47ca6960, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x47ca6960, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x47ca6960, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0x1ad0)) returned 1 [0157.652] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0157.652] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\32B6927A1EB46E83B230070265358A1C5B788D11", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\32B6927A1EB46E83B230070265358A1C5B788D11", lpFilePart=0x0) returned 0x85 [0157.652] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0157.652] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\32B6927A1EB46E83B230070265358A1C5B788D11" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\32b6927a1eb46e83b230070265358a1c5b788d11"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0157.653] GetFileType (hFile=0x444) returned 0x1 [0157.653] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0157.653] GetFileType (hFile=0x444) returned 0x1 [0157.653] ReadFile (in: hFile=0x444, lpBuffer=0x21b2528, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x21b2528*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0157.672] CloseHandle (hObject=0x444) returned 1 [0157.672] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\32B6927A1EB46E83B230070265358A1C5B788D11", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\32B6927A1EB46E83B230070265358A1C5B788D11", lpFilePart=0x0) returned 0x85 [0157.672] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0157.673] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\32B6927A1EB46E83B230070265358A1C5B788D11" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\32b6927a1eb46e83b230070265358a1c5b788d11"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0157.673] GetFileType (hFile=0x444) returned 0x1 [0157.673] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0157.673] GetFileType (hFile=0x444) returned 0x1 [0157.673] WriteFile (in: hFile=0x444, lpBuffer=0x21b01d8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x21b01d8*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0157.673] CloseHandle (hObject=0x444) returned 1 [0157.673] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\32B6927A1EB46E83B230070265358A1C5B788D11", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\32B6927A1EB46E83B230070265358A1C5B788D11", lpFilePart=0x0) returned 0x85 [0157.673] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\32B6927A1EB46E83B230070265358A1C5B788D11.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\32B6927A1EB46E83B230070265358A1C5B788D11.xuy", lpFilePart=0x0) returned 0x89 [0157.674] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0157.674] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\32B6927A1EB46E83B230070265358A1C5B788D11" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\32b6927a1eb46e83b230070265358a1c5b788d11"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47ca6960, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x47ca6960, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x49d4b1f9, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0157.674] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0157.674] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\32B6927A1EB46E83B230070265358A1C5B788D11" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\32b6927a1eb46e83b230070265358a1c5b788d11"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\32B6927A1EB46E83B230070265358A1C5B788D11.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\32b6927a1eb46e83b230070265358a1c5b788d11.xuy")) returned 1 [0157.675] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3313B622F3B9896C056CB0A1A534E4C91732E665", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3313B622F3B9896C056CB0A1A534E4C91732E665", lpFilePart=0x0) returned 0x85 [0157.675] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0157.675] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3313B622F3B9896C056CB0A1A534E4C91732E665" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\3313b622f3b9896c056cb0a1a534e4c91732e665"), fInfoLevelId=0x0, lpFileInformation=0x222ead0 | out: lpFileInformation=0x222ead0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x549bc116, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x549bc116, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x549bc116, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x40f0)) returned 1 [0157.676] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0157.676] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3313B622F3B9896C056CB0A1A534E4C91732E665", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3313B622F3B9896C056CB0A1A534E4C91732E665", lpFilePart=0x0) returned 0x85 [0157.676] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0157.676] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3313B622F3B9896C056CB0A1A534E4C91732E665" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\3313b622f3b9896c056cb0a1a534e4c91732e665"), fInfoLevelId=0x0, lpFileInformation=0x222ecd0 | out: lpFileInformation=0x222ecd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x549bc116, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x549bc116, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x549bc116, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x40f0)) returned 1 [0157.676] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0157.676] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3313B622F3B9896C056CB0A1A534E4C91732E665", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3313B622F3B9896C056CB0A1A534E4C91732E665", lpFilePart=0x0) returned 0x85 [0157.676] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0157.676] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3313B622F3B9896C056CB0A1A534E4C91732E665" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\3313b622f3b9896c056cb0a1a534e4c91732e665"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0157.677] GetFileType (hFile=0x444) returned 0x1 [0157.677] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0157.677] GetFileType (hFile=0x444) returned 0x1 [0157.677] ReadFile (in: hFile=0x444, lpBuffer=0x2231200, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x2231200*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0157.689] CloseHandle (hObject=0x444) returned 1 [0157.689] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3313B622F3B9896C056CB0A1A534E4C91732E665", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3313B622F3B9896C056CB0A1A534E4C91732E665", lpFilePart=0x0) returned 0x85 [0157.689] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0157.690] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3313B622F3B9896C056CB0A1A534E4C91732E665" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\3313b622f3b9896c056cb0a1a534e4c91732e665"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0157.690] GetFileType (hFile=0x444) returned 0x1 [0157.690] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0157.690] GetFileType (hFile=0x444) returned 0x1 [0157.690] WriteFile (in: hFile=0x444, lpBuffer=0x222eeb0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x222eeb0*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0157.690] CloseHandle (hObject=0x444) returned 1 [0157.690] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3313B622F3B9896C056CB0A1A534E4C91732E665", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3313B622F3B9896C056CB0A1A534E4C91732E665", lpFilePart=0x0) returned 0x85 [0157.690] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3313B622F3B9896C056CB0A1A534E4C91732E665.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3313B622F3B9896C056CB0A1A534E4C91732E665.xuy", lpFilePart=0x0) returned 0x89 [0157.690] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0157.690] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3313B622F3B9896C056CB0A1A534E4C91732E665" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\3313b622f3b9896c056cb0a1a534e4c91732e665"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x549bc116, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x549bc116, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x49d710ee, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x40f0)) returned 1 [0157.691] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0157.691] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3313B622F3B9896C056CB0A1A534E4C91732E665" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\3313b622f3b9896c056cb0a1a534e4c91732e665"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3313B622F3B9896C056CB0A1A534E4C91732E665.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\3313b622f3b9896c056cb0a1a534e4c91732e665.xuy")) returned 1 [0157.692] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\338233A5FF4B5082E562A4B5BFBCDB2581DE81E6", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\338233A5FF4B5082E562A4B5BFBCDB2581DE81E6", lpFilePart=0x0) returned 0x85 [0157.692] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0157.692] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\338233A5FF4B5082E562A4B5BFBCDB2581DE81E6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\338233a5ff4b5082e562a4b5bfbcdb2581de81e6"), fInfoLevelId=0x0, lpFileInformation=0x22ad7a8 | out: lpFileInformation=0x22ad7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa93315b, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xfa93315b, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xfa95926d, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x528)) returned 1 [0157.692] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0157.692] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\338233A5FF4B5082E562A4B5BFBCDB2581DE81E6", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\338233A5FF4B5082E562A4B5BFBCDB2581DE81E6", lpFilePart=0x0) returned 0x85 [0157.692] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0157.692] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\338233A5FF4B5082E562A4B5BFBCDB2581DE81E6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\338233a5ff4b5082e562a4b5bfbcdb2581de81e6"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0157.692] GetFileType (hFile=0x444) returned 0x1 [0157.692] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0157.692] GetFileType (hFile=0x444) returned 0x1 [0157.692] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x528 [0157.692] ReadFile (in: hFile=0x444, lpBuffer=0x22ae0e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x22ae0e8*, lpNumberOfBytesRead=0x3be5c8*=0x528, lpOverlapped=0x0) returned 1 [0157.694] CloseHandle (hObject=0x444) returned 1 [0157.711] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\338233A5FF4B5082E562A4B5BFBCDB2581DE81E6", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\338233A5FF4B5082E562A4B5BFBCDB2581DE81E6", lpFilePart=0x0) returned 0x85 [0157.711] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0157.711] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\338233A5FF4B5082E562A4B5BFBCDB2581DE81E6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\338233a5ff4b5082e562a4b5bfbcdb2581de81e6"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0157.713] GetFileType (hFile=0x444) returned 0x1 [0157.713] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0157.713] GetFileType (hFile=0x444) returned 0x1 [0157.713] WriteFile (in: hFile=0x444, lpBuffer=0x2326b68*, nNumberOfBytesToWrite=0x530, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x2326b68*, lpNumberOfBytesWritten=0x3be4d8*=0x530, lpOverlapped=0x0) returned 1 [0157.714] CloseHandle (hObject=0x444) returned 1 [0157.714] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\338233A5FF4B5082E562A4B5BFBCDB2581DE81E6", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\338233A5FF4B5082E562A4B5BFBCDB2581DE81E6", lpFilePart=0x0) returned 0x85 [0157.714] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\338233A5FF4B5082E562A4B5BFBCDB2581DE81E6.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\338233A5FF4B5082E562A4B5BFBCDB2581DE81E6.xuy", lpFilePart=0x0) returned 0x89 [0157.714] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0157.714] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\338233A5FF4B5082E562A4B5BFBCDB2581DE81E6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\338233a5ff4b5082e562a4b5bfbcdb2581de81e6"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa93315b, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xfa93315b, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x49d97376, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x530)) returned 1 [0157.714] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0157.714] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\338233A5FF4B5082E562A4B5BFBCDB2581DE81E6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\338233a5ff4b5082e562a4b5bfbcdb2581de81e6"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\338233A5FF4B5082E562A4B5BFBCDB2581DE81E6.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\338233a5ff4b5082e562a4b5bfbcdb2581de81e6.xuy")) returned 1 [0157.715] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\339A4E96E26DFFA4704F0AF081D2B85B12D03939", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\339A4E96E26DFFA4704F0AF081D2B85B12D03939", lpFilePart=0x0) returned 0x85 [0157.715] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0157.716] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\339A4E96E26DFFA4704F0AF081D2B85B12D03939" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\339a4e96e26dffa4704f0af081d2b85b12d03939"), fInfoLevelId=0x0, lpFileInformation=0x2327f28 | out: lpFileInformation=0x2327f28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ef6a908, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3ef6a908, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x7d556b8b, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x911b)) returned 1 [0157.716] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0157.716] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\339A4E96E26DFFA4704F0AF081D2B85B12D03939", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\339A4E96E26DFFA4704F0AF081D2B85B12D03939", lpFilePart=0x0) returned 0x85 [0157.716] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0157.716] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\339A4E96E26DFFA4704F0AF081D2B85B12D03939" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\339a4e96e26dffa4704f0af081d2b85b12d03939"), fInfoLevelId=0x0, lpFileInformation=0x2328128 | out: lpFileInformation=0x2328128*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ef6a908, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3ef6a908, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x7d556b8b, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x911b)) returned 1 [0157.716] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0157.716] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\339A4E96E26DFFA4704F0AF081D2B85B12D03939", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\339A4E96E26DFFA4704F0AF081D2B85B12D03939", lpFilePart=0x0) returned 0x85 [0157.716] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0157.716] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\339A4E96E26DFFA4704F0AF081D2B85B12D03939" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\339a4e96e26dffa4704f0af081d2b85b12d03939"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0157.717] GetFileType (hFile=0x444) returned 0x1 [0157.717] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0157.717] GetFileType (hFile=0x444) returned 0x1 [0157.717] ReadFile (in: hFile=0x444, lpBuffer=0x232a658, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x232a658*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0157.770] CloseHandle (hObject=0x444) returned 1 [0157.770] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\339A4E96E26DFFA4704F0AF081D2B85B12D03939", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\339A4E96E26DFFA4704F0AF081D2B85B12D03939", lpFilePart=0x0) returned 0x85 [0157.770] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0157.770] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\339A4E96E26DFFA4704F0AF081D2B85B12D03939" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\339a4e96e26dffa4704f0af081d2b85b12d03939"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0157.771] GetFileType (hFile=0x444) returned 0x1 [0157.771] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0157.771] GetFileType (hFile=0x444) returned 0x1 [0157.771] WriteFile (in: hFile=0x444, lpBuffer=0x2185c28*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x2185c28*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0157.771] CloseHandle (hObject=0x444) returned 1 [0157.771] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\339A4E96E26DFFA4704F0AF081D2B85B12D03939", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\339A4E96E26DFFA4704F0AF081D2B85B12D03939", lpFilePart=0x0) returned 0x85 [0157.771] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\339A4E96E26DFFA4704F0AF081D2B85B12D03939.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\339A4E96E26DFFA4704F0AF081D2B85B12D03939.xuy", lpFilePart=0x0) returned 0x89 [0157.771] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0157.771] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\339A4E96E26DFFA4704F0AF081D2B85B12D03939" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\339a4e96e26dffa4704f0af081d2b85b12d03939"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ef6a908, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3ef6a908, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x49e2fca4, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x911b)) returned 1 [0157.771] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0157.772] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\339A4E96E26DFFA4704F0AF081D2B85B12D03939" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\339a4e96e26dffa4704f0af081d2b85b12d03939"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\339A4E96E26DFFA4704F0AF081D2B85B12D03939.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\339a4e96e26dffa4704f0af081d2b85b12d03939.xuy")) returned 1 [0157.773] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\33A34037B96BD19CC90C0A382CEDF384EE052FCC", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\33A34037B96BD19CC90C0A382CEDF384EE052FCC", lpFilePart=0x0) returned 0x85 [0157.773] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0157.773] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\33A34037B96BD19CC90C0A382CEDF384EE052FCC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\33a34037b96bd19cc90c0a382cedf384ee052fcc"), fInfoLevelId=0x0, lpFileInformation=0x21a6be8 | out: lpFileInformation=0x21a6be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6159e1e8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x6159e1e8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x6159e1e8, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xdfd)) returned 1 [0157.774] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0157.774] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\33A34037B96BD19CC90C0A382CEDF384EE052FCC", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\33A34037B96BD19CC90C0A382CEDF384EE052FCC", lpFilePart=0x0) returned 0x85 [0157.774] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0157.774] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\33A34037B96BD19CC90C0A382CEDF384EE052FCC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\33a34037b96bd19cc90c0a382cedf384ee052fcc"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0157.774] GetFileType (hFile=0x444) returned 0x1 [0157.774] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0157.774] GetFileType (hFile=0x444) returned 0x1 [0157.774] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xdfd [0157.774] ReadFile (in: hFile=0x444, lpBuffer=0x21a7e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x21a7e00*, lpNumberOfBytesRead=0x3be5c8*=0xdfd, lpOverlapped=0x0) returned 1 [0158.026] CloseHandle (hObject=0x444) returned 1 [0158.039] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\33A34037B96BD19CC90C0A382CEDF384EE052FCC", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\33A34037B96BD19CC90C0A382CEDF384EE052FCC", lpFilePart=0x0) returned 0x85 [0158.040] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0158.040] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\33A34037B96BD19CC90C0A382CEDF384EE052FCC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\33a34037b96bd19cc90c0a382cedf384ee052fcc"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0158.042] GetFileType (hFile=0x444) returned 0x1 [0158.042] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0158.042] GetFileType (hFile=0x444) returned 0x1 [0158.042] WriteFile (in: hFile=0x444, lpBuffer=0x2223490*, nNumberOfBytesToWrite=0xe00, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x2223490*, lpNumberOfBytesWritten=0x3be4d8*=0xe00, lpOverlapped=0x0) returned 1 [0158.043] CloseHandle (hObject=0x444) returned 1 [0158.043] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\33A34037B96BD19CC90C0A382CEDF384EE052FCC", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\33A34037B96BD19CC90C0A382CEDF384EE052FCC", lpFilePart=0x0) returned 0x85 [0158.043] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\33A34037B96BD19CC90C0A382CEDF384EE052FCC.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\33A34037B96BD19CC90C0A382CEDF384EE052FCC.xuy", lpFilePart=0x0) returned 0x89 [0158.043] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0158.044] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\33A34037B96BD19CC90C0A382CEDF384EE052FCC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\33a34037b96bd19cc90c0a382cedf384ee052fcc"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6159e1e8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x6159e1e8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x4a0b8399, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xe00)) returned 1 [0158.044] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0158.044] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\33A34037B96BD19CC90C0A382CEDF384EE052FCC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\33a34037b96bd19cc90c0a382cedf384ee052fcc"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\33A34037B96BD19CC90C0A382CEDF384EE052FCC.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\33a34037b96bd19cc90c0a382cedf384ee052fcc.xuy")) returned 1 [0158.158] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\33B10E2C53E1205B7527185F086F1BD9A39B07CD", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\33B10E2C53E1205B7527185F086F1BD9A39B07CD", lpFilePart=0x0) returned 0x85 [0158.158] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0158.158] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\33B10E2C53E1205B7527185F086F1BD9A39B07CD" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\33b10e2c53e1205b7527185f086f1bd9a39b07cd"), fInfoLevelId=0x0, lpFileInformation=0x2224850 | out: lpFileInformation=0x2224850*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x615c4498, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x615c4498, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x615c4498, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xedc)) returned 1 [0158.158] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0158.158] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\33B10E2C53E1205B7527185F086F1BD9A39B07CD", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\33B10E2C53E1205B7527185F086F1BD9A39B07CD", lpFilePart=0x0) returned 0x85 [0158.158] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0158.159] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\33B10E2C53E1205B7527185F086F1BD9A39B07CD" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\33b10e2c53e1205b7527185f086f1bd9a39b07cd"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0158.159] GetFileType (hFile=0x444) returned 0x1 [0158.159] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0158.159] GetFileType (hFile=0x444) returned 0x1 [0158.159] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xedc [0158.159] ReadFile (in: hFile=0x444, lpBuffer=0x2225b48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x2225b48*, lpNumberOfBytesRead=0x3be5c8*=0xedc, lpOverlapped=0x0) returned 1 [0158.177] CloseHandle (hObject=0x444) returned 1 [0158.189] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\33B10E2C53E1205B7527185F086F1BD9A39B07CD", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\33B10E2C53E1205B7527185F086F1BD9A39B07CD", lpFilePart=0x0) returned 0x85 [0158.189] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0158.189] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\33B10E2C53E1205B7527185F086F1BD9A39B07CD" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\33b10e2c53e1205b7527185f086f1bd9a39b07cd"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0158.191] GetFileType (hFile=0x444) returned 0x1 [0158.192] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0158.192] GetFileType (hFile=0x444) returned 0x1 [0158.192] WriteFile (in: hFile=0x444, lpBuffer=0x22a1638*, nNumberOfBytesToWrite=0xee0, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x22a1638*, lpNumberOfBytesWritten=0x3be4d8*=0xee0, lpOverlapped=0x0) returned 1 [0158.193] CloseHandle (hObject=0x444) returned 1 [0158.193] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\33B10E2C53E1205B7527185F086F1BD9A39B07CD", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\33B10E2C53E1205B7527185F086F1BD9A39B07CD", lpFilePart=0x0) returned 0x85 [0158.193] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\33B10E2C53E1205B7527185F086F1BD9A39B07CD.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\33B10E2C53E1205B7527185F086F1BD9A39B07CD.xuy", lpFilePart=0x0) returned 0x89 [0158.193] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0158.193] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\33B10E2C53E1205B7527185F086F1BD9A39B07CD" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\33b10e2c53e1205b7527185f086f1bd9a39b07cd"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x615c4498, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x615c4498, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x4a235bf1, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xee0)) returned 1 [0158.193] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0158.193] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\33B10E2C53E1205B7527185F086F1BD9A39B07CD" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\33b10e2c53e1205b7527185f086f1bd9a39b07cd"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\33B10E2C53E1205B7527185F086F1BD9A39B07CD.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\33b10e2c53e1205b7527185f086f1bd9a39b07cd.xuy")) returned 1 [0158.197] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\33E49DB212B852799023F439D16990005F93C4F7", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\33E49DB212B852799023F439D16990005F93C4F7", lpFilePart=0x0) returned 0x85 [0158.197] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0158.198] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\33E49DB212B852799023F439D16990005F93C4F7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\33e49db212b852799023f439d16990005f93c4f7"), fInfoLevelId=0x0, lpFileInformation=0x22a29f8 | out: lpFileInformation=0x22a29f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4e89099, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc4e89099, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xc50c5407, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x2da9)) returned 1 [0158.198] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0158.198] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\33E49DB212B852799023F439D16990005F93C4F7", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\33E49DB212B852799023F439D16990005F93C4F7", lpFilePart=0x0) returned 0x85 [0158.198] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0158.199] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\33E49DB212B852799023F439D16990005F93C4F7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\33e49db212b852799023f439d16990005f93c4f7"), fInfoLevelId=0x0, lpFileInformation=0x22a2bf8 | out: lpFileInformation=0x22a2bf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4e89099, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc4e89099, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xc50c5407, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x2da9)) returned 1 [0158.199] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0158.199] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\33E49DB212B852799023F439D16990005F93C4F7", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\33E49DB212B852799023F439D16990005F93C4F7", lpFilePart=0x0) returned 0x85 [0158.199] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0158.199] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\33E49DB212B852799023F439D16990005F93C4F7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\33e49db212b852799023f439d16990005f93c4f7"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0158.200] GetFileType (hFile=0x444) returned 0x1 [0158.200] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0158.200] GetFileType (hFile=0x444) returned 0x1 [0158.200] ReadFile (in: hFile=0x444, lpBuffer=0x22a5128, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x22a5128*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0158.229] CloseHandle (hObject=0x444) returned 1 [0158.229] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\33E49DB212B852799023F439D16990005F93C4F7", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\33E49DB212B852799023F439D16990005F93C4F7", lpFilePart=0x0) returned 0x85 [0158.229] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0158.229] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\33E49DB212B852799023F439D16990005F93C4F7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\33e49db212b852799023f439d16990005f93c4f7"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0158.230] GetFileType (hFile=0x444) returned 0x1 [0158.230] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0158.230] GetFileType (hFile=0x444) returned 0x1 [0158.230] WriteFile (in: hFile=0x444, lpBuffer=0x22a2dd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x22a2dd8*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0158.230] CloseHandle (hObject=0x444) returned 1 [0158.230] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\33E49DB212B852799023F439D16990005F93C4F7", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\33E49DB212B852799023F439D16990005F93C4F7", lpFilePart=0x0) returned 0x85 [0158.230] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\33E49DB212B852799023F439D16990005F93C4F7.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\33E49DB212B852799023F439D16990005F93C4F7.xuy", lpFilePart=0x0) returned 0x89 [0158.230] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0158.230] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\33E49DB212B852799023F439D16990005F93C4F7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\33e49db212b852799023f439d16990005f93c4f7"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4e89099, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc4e89099, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x4a282086, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2da9)) returned 1 [0158.230] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0158.231] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\33E49DB212B852799023F439D16990005F93C4F7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\33e49db212b852799023f439d16990005f93c4f7"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\33E49DB212B852799023F439D16990005F93C4F7.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\33e49db212b852799023f439d16990005f93c4f7.xuy")) returned 1 [0158.232] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\33E659B30B4E594B210633855AC841A47BB4BBB9", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\33E659B30B4E594B210633855AC841A47BB4BBB9", lpFilePart=0x0) returned 0x85 [0158.232] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0158.232] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\33E659B30B4E594B210633855AC841A47BB4BBB9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\33e659b30b4e594b210633855ac841a47bb4bbb9"), fInfoLevelId=0x0, lpFileInformation=0x23216d0 | out: lpFileInformation=0x23216d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x864f7000, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x864f7000, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x864f96fa, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x1065)) returned 1 [0158.233] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0158.233] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\33E659B30B4E594B210633855AC841A47BB4BBB9", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\33E659B30B4E594B210633855AC841A47BB4BBB9", lpFilePart=0x0) returned 0x85 [0158.233] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0158.233] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\33E659B30B4E594B210633855AC841A47BB4BBB9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\33e659b30b4e594b210633855ac841a47bb4bbb9"), fInfoLevelId=0x0, lpFileInformation=0x23218d0 | out: lpFileInformation=0x23218d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x864f7000, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x864f7000, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x864f96fa, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x1065)) returned 1 [0158.233] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0158.233] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\33E659B30B4E594B210633855AC841A47BB4BBB9", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\33E659B30B4E594B210633855AC841A47BB4BBB9", lpFilePart=0x0) returned 0x85 [0158.233] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0158.233] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\33E659B30B4E594B210633855AC841A47BB4BBB9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\33e659b30b4e594b210633855ac841a47bb4bbb9"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0158.234] GetFileType (hFile=0x444) returned 0x1 [0158.234] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0158.234] GetFileType (hFile=0x444) returned 0x1 [0158.234] ReadFile (in: hFile=0x444, lpBuffer=0x2323e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x2323e00*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0158.281] CloseHandle (hObject=0x444) returned 1 [0158.282] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\33E659B30B4E594B210633855AC841A47BB4BBB9", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\33E659B30B4E594B210633855AC841A47BB4BBB9", lpFilePart=0x0) returned 0x85 [0158.282] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0158.282] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\33E659B30B4E594B210633855AC841A47BB4BBB9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\33e659b30b4e594b210633855ac841a47bb4bbb9"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0158.282] GetFileType (hFile=0x444) returned 0x1 [0158.282] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0158.282] GetFileType (hFile=0x444) returned 0x1 [0158.282] WriteFile (in: hFile=0x444, lpBuffer=0x2185c28*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x2185c28*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0158.282] CloseHandle (hObject=0x444) returned 1 [0158.282] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\33E659B30B4E594B210633855AC841A47BB4BBB9", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\33E659B30B4E594B210633855AC841A47BB4BBB9", lpFilePart=0x0) returned 0x85 [0158.282] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\33E659B30B4E594B210633855AC841A47BB4BBB9.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\33E659B30B4E594B210633855AC841A47BB4BBB9.xuy", lpFilePart=0x0) returned 0x89 [0158.283] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0158.283] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\33E659B30B4E594B210633855AC841A47BB4BBB9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\33e659b30b4e594b210633855ac841a47bb4bbb9"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x864f7000, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x864f7000, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x4a31aa18, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0158.283] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0158.283] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\33E659B30B4E594B210633855AC841A47BB4BBB9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\33e659b30b4e594b210633855ac841a47bb4bbb9"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\33E659B30B4E594B210633855AC841A47BB4BBB9.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\33e659b30b4e594b210633855ac841a47bb4bbb9.xuy")) returned 1 [0158.284] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\346330431993BC995E9F9C114FE39FD5B54EB7DF", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\346330431993BC995E9F9C114FE39FD5B54EB7DF", lpFilePart=0x0) returned 0x85 [0158.284] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0158.284] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\346330431993BC995E9F9C114FE39FD5B54EB7DF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\346330431993bc995e9f9c114fe39fd5b54eb7df"), fInfoLevelId=0x0, lpFileInformation=0x21a0388 | out: lpFileInformation=0x21a0388*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fa61a32, ftCreationTime.dwHighDateTime=0x1d2d43f, ftLastAccessTime.dwLowDateTime=0x6fa61a32, ftLastAccessTime.dwHighDateTime=0x1d2d43f, ftLastWriteTime.dwLowDateTime=0x6fa87c97, ftLastWriteTime.dwHighDateTime=0x1d2d43f, nFileSizeHigh=0x0, nFileSizeLow=0x51f)) returned 1 [0158.284] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0158.284] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\346330431993BC995E9F9C114FE39FD5B54EB7DF", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\346330431993BC995E9F9C114FE39FD5B54EB7DF", lpFilePart=0x0) returned 0x85 [0158.284] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0158.284] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\346330431993BC995E9F9C114FE39FD5B54EB7DF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\346330431993bc995e9f9c114fe39fd5b54eb7df"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0158.284] GetFileType (hFile=0x444) returned 0x1 [0158.285] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0158.285] GetFileType (hFile=0x444) returned 0x1 [0158.285] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x51f [0158.285] ReadFile (in: hFile=0x444, lpBuffer=0x21a0cc0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x21a0cc0*, lpNumberOfBytesRead=0x3be5c8*=0x51f, lpOverlapped=0x0) returned 1 [0158.298] CloseHandle (hObject=0x444) returned 1 [0158.308] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\346330431993BC995E9F9C114FE39FD5B54EB7DF", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\346330431993BC995E9F9C114FE39FD5B54EB7DF", lpFilePart=0x0) returned 0x85 [0158.308] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0158.308] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\346330431993BC995E9F9C114FE39FD5B54EB7DF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\346330431993bc995e9f9c114fe39fd5b54eb7df"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0158.310] GetFileType (hFile=0x444) returned 0x1 [0158.310] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0158.310] GetFileType (hFile=0x444) returned 0x1 [0158.310] WriteFile (in: hFile=0x444, lpBuffer=0x22196f0*, nNumberOfBytesToWrite=0x520, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x22196f0*, lpNumberOfBytesWritten=0x3be4d8*=0x520, lpOverlapped=0x0) returned 1 [0158.311] CloseHandle (hObject=0x444) returned 1 [0158.311] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\346330431993BC995E9F9C114FE39FD5B54EB7DF", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\346330431993BC995E9F9C114FE39FD5B54EB7DF", lpFilePart=0x0) returned 0x85 [0158.311] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\346330431993BC995E9F9C114FE39FD5B54EB7DF.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\346330431993BC995E9F9C114FE39FD5B54EB7DF.xuy", lpFilePart=0x0) returned 0x89 [0158.311] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0158.311] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\346330431993BC995E9F9C114FE39FD5B54EB7DF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\346330431993bc995e9f9c114fe39fd5b54eb7df"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fa61a32, ftCreationTime.dwHighDateTime=0x1d2d43f, ftLastAccessTime.dwLowDateTime=0x6fa61a32, ftLastAccessTime.dwHighDateTime=0x1d2d43f, ftLastWriteTime.dwLowDateTime=0x4a366dee, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x520)) returned 1 [0158.311] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0158.311] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\346330431993BC995E9F9C114FE39FD5B54EB7DF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\346330431993bc995e9f9c114fe39fd5b54eb7df"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\346330431993BC995E9F9C114FE39FD5B54EB7DF.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\346330431993bc995e9f9c114fe39fd5b54eb7df.xuy")) returned 1 [0158.312] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\34CEF73D25CB0DE8A1CD86FB09EF24D17790BCA7", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\34CEF73D25CB0DE8A1CD86FB09EF24D17790BCA7", lpFilePart=0x0) returned 0x85 [0158.312] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0158.313] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\34CEF73D25CB0DE8A1CD86FB09EF24D17790BCA7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\34cef73d25cb0de8a1cd86fb09ef24d17790bca7"), fInfoLevelId=0x0, lpFileInformation=0x221aab0 | out: lpFileInformation=0x221aab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ab8a86d, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x8ab8a86d, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x8ab8a86d, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0xeff)) returned 1 [0158.313] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0158.313] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\34CEF73D25CB0DE8A1CD86FB09EF24D17790BCA7", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\34CEF73D25CB0DE8A1CD86FB09EF24D17790BCA7", lpFilePart=0x0) returned 0x85 [0158.313] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0158.313] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\34CEF73D25CB0DE8A1CD86FB09EF24D17790BCA7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\34cef73d25cb0de8a1cd86fb09ef24d17790bca7"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0158.313] GetFileType (hFile=0x444) returned 0x1 [0158.313] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0158.313] GetFileType (hFile=0x444) returned 0x1 [0158.313] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xeff [0158.313] ReadFile (in: hFile=0x444, lpBuffer=0x221bdc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x221bdc8*, lpNumberOfBytesRead=0x3be5c8*=0xeff, lpOverlapped=0x0) returned 1 [0158.323] CloseHandle (hObject=0x444) returned 1 [0158.333] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\34CEF73D25CB0DE8A1CD86FB09EF24D17790BCA7", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\34CEF73D25CB0DE8A1CD86FB09EF24D17790BCA7", lpFilePart=0x0) returned 0x85 [0158.333] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0158.333] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\34CEF73D25CB0DE8A1CD86FB09EF24D17790BCA7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\34cef73d25cb0de8a1cd86fb09ef24d17790bca7"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0158.335] GetFileType (hFile=0x444) returned 0x1 [0158.335] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0158.335] GetFileType (hFile=0x444) returned 0x1 [0158.335] WriteFile (in: hFile=0x444, lpBuffer=0x2297958*, nNumberOfBytesToWrite=0xf00, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x2297958*, lpNumberOfBytesWritten=0x3be4d8*=0xf00, lpOverlapped=0x0) returned 1 [0158.336] CloseHandle (hObject=0x444) returned 1 [0158.336] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\34CEF73D25CB0DE8A1CD86FB09EF24D17790BCA7", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\34CEF73D25CB0DE8A1CD86FB09EF24D17790BCA7", lpFilePart=0x0) returned 0x85 [0158.336] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\34CEF73D25CB0DE8A1CD86FB09EF24D17790BCA7.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\34CEF73D25CB0DE8A1CD86FB09EF24D17790BCA7.xuy", lpFilePart=0x0) returned 0x89 [0158.336] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0158.336] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\34CEF73D25CB0DE8A1CD86FB09EF24D17790BCA7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\34cef73d25cb0de8a1cd86fb09ef24d17790bca7"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ab8a86d, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x8ab8a86d, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x4a38d22c, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xf00)) returned 1 [0158.336] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0158.336] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\34CEF73D25CB0DE8A1CD86FB09EF24D17790BCA7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\34cef73d25cb0de8a1cd86fb09ef24d17790bca7"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\34CEF73D25CB0DE8A1CD86FB09EF24D17790BCA7.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\34cef73d25cb0de8a1cd86fb09ef24d17790bca7.xuy")) returned 1 [0158.338] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3502F57243FBD8F9D25E093A72D603074783A304", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3502F57243FBD8F9D25E093A72D603074783A304", lpFilePart=0x0) returned 0x85 [0158.338] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0158.338] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3502F57243FBD8F9D25E093A72D603074783A304" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\3502f57243fbd8f9d25e093a72d603074783a304"), fInfoLevelId=0x0, lpFileInformation=0x2298d18 | out: lpFileInformation=0x2298d18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54248c69, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x54248c69, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x5ef06054, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x2c9e)) returned 1 [0158.338] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0158.338] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3502F57243FBD8F9D25E093A72D603074783A304", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3502F57243FBD8F9D25E093A72D603074783A304", lpFilePart=0x0) returned 0x85 [0158.338] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0158.339] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3502F57243FBD8F9D25E093A72D603074783A304" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\3502f57243fbd8f9d25e093a72d603074783a304"), fInfoLevelId=0x0, lpFileInformation=0x2298f18 | out: lpFileInformation=0x2298f18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54248c69, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x54248c69, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x5ef06054, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x2c9e)) returned 1 [0158.339] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0158.339] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3502F57243FBD8F9D25E093A72D603074783A304", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3502F57243FBD8F9D25E093A72D603074783A304", lpFilePart=0x0) returned 0x85 [0158.339] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0158.339] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3502F57243FBD8F9D25E093A72D603074783A304" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\3502f57243fbd8f9d25e093a72d603074783a304"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0158.340] GetFileType (hFile=0x444) returned 0x1 [0158.340] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0158.340] GetFileType (hFile=0x444) returned 0x1 [0158.340] ReadFile (in: hFile=0x444, lpBuffer=0x229b448, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x229b448*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0158.361] CloseHandle (hObject=0x444) returned 1 [0158.361] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3502F57243FBD8F9D25E093A72D603074783A304", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3502F57243FBD8F9D25E093A72D603074783A304", lpFilePart=0x0) returned 0x85 [0158.361] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0158.361] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3502F57243FBD8F9D25E093A72D603074783A304" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\3502f57243fbd8f9d25e093a72d603074783a304"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0158.362] GetFileType (hFile=0x444) returned 0x1 [0158.362] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0158.362] GetFileType (hFile=0x444) returned 0x1 [0158.362] WriteFile (in: hFile=0x444, lpBuffer=0x22990f8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x22990f8*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0158.362] CloseHandle (hObject=0x444) returned 1 [0158.362] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3502F57243FBD8F9D25E093A72D603074783A304", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3502F57243FBD8F9D25E093A72D603074783A304", lpFilePart=0x0) returned 0x85 [0158.362] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3502F57243FBD8F9D25E093A72D603074783A304.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3502F57243FBD8F9D25E093A72D603074783A304.xuy", lpFilePart=0x0) returned 0x89 [0158.362] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0158.362] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3502F57243FBD8F9D25E093A72D603074783A304" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\3502f57243fbd8f9d25e093a72d603074783a304"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54248c69, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x54248c69, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x4a3d9955, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2c9e)) returned 1 [0158.362] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0158.362] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3502F57243FBD8F9D25E093A72D603074783A304" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\3502f57243fbd8f9d25e093a72d603074783a304"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3502F57243FBD8F9D25E093A72D603074783A304.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\3502f57243fbd8f9d25e093a72d603074783a304.xuy")) returned 1 [0158.364] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\356FCE9F932692DC643481DBA1ABEA937B629F58", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\356FCE9F932692DC643481DBA1ABEA937B629F58", lpFilePart=0x0) returned 0x85 [0158.364] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0158.364] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\356FCE9F932692DC643481DBA1ABEA937B629F58" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\356fce9f932692dc643481dba1abea937b629f58"), fInfoLevelId=0x0, lpFileInformation=0x23179f0 | out: lpFileInformation=0x23179f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a759447, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x5a759447, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x5a759447, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x64)) returned 1 [0158.366] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0158.366] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\356FCE9F932692DC643481DBA1ABEA937B629F58", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\356FCE9F932692DC643481DBA1ABEA937B629F58", lpFilePart=0x0) returned 0x85 [0158.366] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0158.366] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\356FCE9F932692DC643481DBA1ABEA937B629F58" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\356fce9f932692dc643481dba1abea937b629f58"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0158.366] GetFileType (hFile=0x444) returned 0x1 [0158.366] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0158.366] GetFileType (hFile=0x444) returned 0x1 [0158.366] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x64 [0158.366] ReadFile (in: hFile=0x444, lpBuffer=0x2317e70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x2317e70*, lpNumberOfBytesRead=0x3be5c8*=0x64, lpOverlapped=0x0) returned 1 [0158.367] CloseHandle (hObject=0x444) returned 1 [0158.405] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\356FCE9F932692DC643481DBA1ABEA937B629F58", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\356FCE9F932692DC643481DBA1ABEA937B629F58", lpFilePart=0x0) returned 0x85 [0158.405] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0158.405] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\356FCE9F932692DC643481DBA1ABEA937B629F58" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\356fce9f932692dc643481dba1abea937b629f58"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0158.407] GetFileType (hFile=0x444) returned 0x1 [0158.407] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0158.407] GetFileType (hFile=0x444) returned 0x1 [0158.407] WriteFile (in: hFile=0x444, lpBuffer=0x218bf68*, nNumberOfBytesToWrite=0x70, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x218bf68*, lpNumberOfBytesWritten=0x3be4d8*=0x70, lpOverlapped=0x0) returned 1 [0158.408] CloseHandle (hObject=0x444) returned 1 [0158.408] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\356FCE9F932692DC643481DBA1ABEA937B629F58", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\356FCE9F932692DC643481DBA1ABEA937B629F58", lpFilePart=0x0) returned 0x85 [0158.408] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\356FCE9F932692DC643481DBA1ABEA937B629F58.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\356FCE9F932692DC643481DBA1ABEA937B629F58.xuy", lpFilePart=0x0) returned 0x89 [0158.408] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0158.408] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\356FCE9F932692DC643481DBA1ABEA937B629F58" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\356fce9f932692dc643481dba1abea937b629f58"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a759447, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x5a759447, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x4a452817, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x70)) returned 1 [0158.408] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0158.408] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\356FCE9F932692DC643481DBA1ABEA937B629F58" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\356fce9f932692dc643481dba1abea937b629f58"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\356FCE9F932692DC643481DBA1ABEA937B629F58.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\356fce9f932692dc643481dba1abea937b629f58.xuy")) returned 1 [0158.409] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\35933C361338037A97583E92DA61C299851A9B4E", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\35933C361338037A97583E92DA61C299851A9B4E", lpFilePart=0x0) returned 0x85 [0158.410] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0158.410] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\35933C361338037A97583E92DA61C299851A9B4E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\35933c361338037a97583e92da61c299851a9b4e"), fInfoLevelId=0x0, lpFileInformation=0x218d328 | out: lpFileInformation=0x218d328*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc52b52a5, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc52b52a5, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xc80f6790, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x1c7f)) returned 1 [0158.410] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0158.410] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\35933C361338037A97583E92DA61C299851A9B4E", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\35933C361338037A97583E92DA61C299851A9B4E", lpFilePart=0x0) returned 0x85 [0158.410] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0158.410] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\35933C361338037A97583E92DA61C299851A9B4E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\35933c361338037a97583e92da61c299851a9b4e"), fInfoLevelId=0x0, lpFileInformation=0x218d528 | out: lpFileInformation=0x218d528*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc52b52a5, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc52b52a5, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xc80f6790, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x1c7f)) returned 1 [0158.410] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0158.410] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\35933C361338037A97583E92DA61C299851A9B4E", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\35933C361338037A97583E92DA61C299851A9B4E", lpFilePart=0x0) returned 0x85 [0158.411] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0158.411] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\35933C361338037A97583E92DA61C299851A9B4E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\35933c361338037a97583e92da61c299851a9b4e"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0158.411] GetFileType (hFile=0x444) returned 0x1 [0158.411] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0158.411] GetFileType (hFile=0x444) returned 0x1 [0158.411] ReadFile (in: hFile=0x444, lpBuffer=0x218fa58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x218fa58*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0158.424] CloseHandle (hObject=0x444) returned 1 [0158.424] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\35933C361338037A97583E92DA61C299851A9B4E", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\35933C361338037A97583E92DA61C299851A9B4E", lpFilePart=0x0) returned 0x85 [0158.424] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0158.424] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\35933C361338037A97583E92DA61C299851A9B4E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\35933c361338037a97583e92da61c299851a9b4e"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0158.424] GetFileType (hFile=0x444) returned 0x1 [0158.424] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0158.424] GetFileType (hFile=0x444) returned 0x1 [0158.424] WriteFile (in: hFile=0x444, lpBuffer=0x218d708*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x218d708*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0158.424] CloseHandle (hObject=0x444) returned 1 [0158.425] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\35933C361338037A97583E92DA61C299851A9B4E", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\35933C361338037A97583E92DA61C299851A9B4E", lpFilePart=0x0) returned 0x85 [0158.425] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\35933C361338037A97583E92DA61C299851A9B4E.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\35933C361338037A97583E92DA61C299851A9B4E.xuy", lpFilePart=0x0) returned 0x89 [0158.425] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0158.425] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\35933C361338037A97583E92DA61C299851A9B4E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\35933c361338037a97583e92da61c299851a9b4e"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc52b52a5, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc52b52a5, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x4a47236b, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0158.425] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0158.425] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\35933C361338037A97583E92DA61C299851A9B4E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\35933c361338037a97583e92da61c299851a9b4e"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\35933C361338037A97583E92DA61C299851A9B4E.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\35933c361338037a97583e92da61c299851a9b4e.xuy")) returned 1 [0158.426] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\36A422C04312727A6116F45E357EDA80B3B4A6FD", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\36A422C04312727A6116F45E357EDA80B3B4A6FD", lpFilePart=0x0) returned 0x85 [0158.426] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0158.426] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\36A422C04312727A6116F45E357EDA80B3B4A6FD" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\36a422c04312727a6116f45e357eda80b3b4a6fd"), fInfoLevelId=0x0, lpFileInformation=0x220c000 | out: lpFileInformation=0x220c000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6159e1e8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x6159e1e8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x6159e1e8, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x1167)) returned 1 [0158.426] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0158.426] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\36A422C04312727A6116F45E357EDA80B3B4A6FD", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\36A422C04312727A6116F45E357EDA80B3B4A6FD", lpFilePart=0x0) returned 0x85 [0158.426] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0158.426] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\36A422C04312727A6116F45E357EDA80B3B4A6FD" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\36a422c04312727a6116f45e357eda80b3b4a6fd"), fInfoLevelId=0x0, lpFileInformation=0x220c200 | out: lpFileInformation=0x220c200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6159e1e8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x6159e1e8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x6159e1e8, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x1167)) returned 1 [0158.427] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0158.427] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\36A422C04312727A6116F45E357EDA80B3B4A6FD", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\36A422C04312727A6116F45E357EDA80B3B4A6FD", lpFilePart=0x0) returned 0x85 [0158.427] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0158.427] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\36A422C04312727A6116F45E357EDA80B3B4A6FD" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\36a422c04312727a6116f45e357eda80b3b4a6fd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0158.427] GetFileType (hFile=0x444) returned 0x1 [0158.428] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0158.428] GetFileType (hFile=0x444) returned 0x1 [0158.428] ReadFile (in: hFile=0x444, lpBuffer=0x220e730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x220e730*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0158.448] CloseHandle (hObject=0x444) returned 1 [0158.448] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\36A422C04312727A6116F45E357EDA80B3B4A6FD", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\36A422C04312727A6116F45E357EDA80B3B4A6FD", lpFilePart=0x0) returned 0x85 [0158.448] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0158.448] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\36A422C04312727A6116F45E357EDA80B3B4A6FD" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\36a422c04312727a6116f45e357eda80b3b4a6fd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0158.449] GetFileType (hFile=0x444) returned 0x1 [0158.449] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0158.449] GetFileType (hFile=0x444) returned 0x1 [0158.449] WriteFile (in: hFile=0x444, lpBuffer=0x220c3e0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x220c3e0*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0158.449] CloseHandle (hObject=0x444) returned 1 [0158.449] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\36A422C04312727A6116F45E357EDA80B3B4A6FD", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\36A422C04312727A6116F45E357EDA80B3B4A6FD", lpFilePart=0x0) returned 0x85 [0158.449] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\36A422C04312727A6116F45E357EDA80B3B4A6FD.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\36A422C04312727A6116F45E357EDA80B3B4A6FD.xuy", lpFilePart=0x0) returned 0x89 [0158.449] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0158.449] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\36A422C04312727A6116F45E357EDA80B3B4A6FD" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\36a422c04312727a6116f45e357eda80b3b4a6fd"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6159e1e8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x6159e1e8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x4a49822c, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0158.449] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0158.449] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\36A422C04312727A6116F45E357EDA80B3B4A6FD" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\36a422c04312727a6116f45e357eda80b3b4a6fd"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\36A422C04312727A6116F45E357EDA80B3B4A6FD.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\36a422c04312727a6116f45e357eda80b3b4a6fd.xuy")) returned 1 [0158.451] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\36C5C19636CA8995D6ADCD176668444451854326", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\36C5C19636CA8995D6ADCD176668444451854326", lpFilePart=0x0) returned 0x85 [0158.451] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0158.452] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\36C5C19636CA8995D6ADCD176668444451854326" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\36c5c19636ca8995d6adcd176668444451854326"), fInfoLevelId=0x0, lpFileInformation=0x228acd8 | out: lpFileInformation=0x228acd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56f05be8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x56f05be8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x56f05be8, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x1832)) returned 1 [0158.452] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0158.452] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\36C5C19636CA8995D6ADCD176668444451854326", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\36C5C19636CA8995D6ADCD176668444451854326", lpFilePart=0x0) returned 0x85 [0158.452] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0158.452] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\36C5C19636CA8995D6ADCD176668444451854326" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\36c5c19636ca8995d6adcd176668444451854326"), fInfoLevelId=0x0, lpFileInformation=0x228aed8 | out: lpFileInformation=0x228aed8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56f05be8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x56f05be8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x56f05be8, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x1832)) returned 1 [0158.452] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0158.452] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\36C5C19636CA8995D6ADCD176668444451854326", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\36C5C19636CA8995D6ADCD176668444451854326", lpFilePart=0x0) returned 0x85 [0158.452] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0158.452] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\36C5C19636CA8995D6ADCD176668444451854326" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\36c5c19636ca8995d6adcd176668444451854326"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0158.453] GetFileType (hFile=0x444) returned 0x1 [0158.453] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0158.453] GetFileType (hFile=0x444) returned 0x1 [0158.456] ReadFile (in: hFile=0x444, lpBuffer=0x228d408, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x228d408*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0158.485] CloseHandle (hObject=0x444) returned 1 [0158.485] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\36C5C19636CA8995D6ADCD176668444451854326", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\36C5C19636CA8995D6ADCD176668444451854326", lpFilePart=0x0) returned 0x85 [0158.485] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0158.485] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\36C5C19636CA8995D6ADCD176668444451854326" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\36c5c19636ca8995d6adcd176668444451854326"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0158.485] GetFileType (hFile=0x444) returned 0x1 [0158.485] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0158.485] GetFileType (hFile=0x444) returned 0x1 [0158.486] WriteFile (in: hFile=0x444, lpBuffer=0x228b0b8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x228b0b8*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0158.486] CloseHandle (hObject=0x444) returned 1 [0158.486] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\36C5C19636CA8995D6ADCD176668444451854326", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\36C5C19636CA8995D6ADCD176668444451854326", lpFilePart=0x0) returned 0x85 [0158.486] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\36C5C19636CA8995D6ADCD176668444451854326.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\36C5C19636CA8995D6ADCD176668444451854326.xuy", lpFilePart=0x0) returned 0x89 [0158.486] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0158.486] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\36C5C19636CA8995D6ADCD176668444451854326" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\36c5c19636ca8995d6adcd176668444451854326"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56f05be8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x56f05be8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x4a513d96, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0158.486] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0158.486] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\36C5C19636CA8995D6ADCD176668444451854326" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\36c5c19636ca8995d6adcd176668444451854326"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\36C5C19636CA8995D6ADCD176668444451854326.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\36c5c19636ca8995d6adcd176668444451854326.xuy")) returned 1 [0158.488] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\36DBE72541419953BE4A8BD61964782F4DBEDECF", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\36DBE72541419953BE4A8BD61964782F4DBEDECF", lpFilePart=0x0) returned 0x85 [0158.488] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0158.488] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\36DBE72541419953BE4A8BD61964782F4DBEDECF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\36dbe72541419953be4a8bd61964782f4dbedecf"), fInfoLevelId=0x0, lpFileInformation=0x23099b0 | out: lpFileInformation=0x23099b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6159e1e8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x6159e1e8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x6159e1e8, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xd26)) returned 1 [0158.488] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0158.488] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\36DBE72541419953BE4A8BD61964782F4DBEDECF", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\36DBE72541419953BE4A8BD61964782F4DBEDECF", lpFilePart=0x0) returned 0x85 [0158.488] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0158.488] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\36DBE72541419953BE4A8BD61964782F4DBEDECF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\36dbe72541419953be4a8bd61964782f4dbedecf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0158.488] GetFileType (hFile=0x444) returned 0x1 [0158.488] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0158.488] GetFileType (hFile=0x444) returned 0x1 [0158.488] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xd26 [0158.489] ReadFile (in: hFile=0x444, lpBuffer=0x230aaf0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x230aaf0*, lpNumberOfBytesRead=0x3be5c8*=0xd26, lpOverlapped=0x0) returned 1 [0158.504] CloseHandle (hObject=0x444) returned 1 [0158.516] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\36DBE72541419953BE4A8BD61964782F4DBEDECF", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\36DBE72541419953BE4A8BD61964782F4DBEDECF", lpFilePart=0x0) returned 0x85 [0158.516] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0158.516] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\36DBE72541419953BE4A8BD61964782F4DBEDECF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\36dbe72541419953be4a8bd61964782f4dbedecf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0158.518] GetFileType (hFile=0x444) returned 0x1 [0158.518] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0158.518] GetFileType (hFile=0x444) returned 0x1 [0158.518] WriteFile (in: hFile=0x444, lpBuffer=0x2385d78*, nNumberOfBytesToWrite=0xd30, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x2385d78*, lpNumberOfBytesWritten=0x3be4d8*=0xd30, lpOverlapped=0x0) returned 1 [0158.519] CloseHandle (hObject=0x444) returned 1 [0158.519] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\36DBE72541419953BE4A8BD61964782F4DBEDECF", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\36DBE72541419953BE4A8BD61964782F4DBEDECF", lpFilePart=0x0) returned 0x85 [0158.519] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\36DBE72541419953BE4A8BD61964782F4DBEDECF.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\36DBE72541419953BE4A8BD61964782F4DBEDECF.xuy", lpFilePart=0x0) returned 0x89 [0158.519] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0158.519] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\36DBE72541419953BE4A8BD61964782F4DBEDECF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\36dbe72541419953be4a8bd61964782f4dbedecf"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6159e1e8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x6159e1e8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x4a5486a9, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xd30)) returned 1 [0158.520] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0158.520] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\36DBE72541419953BE4A8BD61964782F4DBEDECF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\36dbe72541419953be4a8bd61964782f4dbedecf"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\36DBE72541419953BE4A8BD61964782F4DBEDECF.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\36dbe72541419953be4a8bd61964782f4dbedecf.xuy")) returned 1 [0158.526] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\376ED25A1DE94F0D96E985E5D5CACFCFE3812131", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\376ED25A1DE94F0D96E985E5D5CACFCFE3812131", lpFilePart=0x0) returned 0x85 [0158.526] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0158.527] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\376ED25A1DE94F0D96E985E5D5CACFCFE3812131" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\376ed25a1de94f0d96e985e5d5cacfcfe3812131"), fInfoLevelId=0x0, lpFileInformation=0x2185c88 | out: lpFileInformation=0x2185c88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa9f1bba, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xfa9f1bba, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xfa9f1bba, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x528)) returned 1 [0158.527] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0158.527] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\376ED25A1DE94F0D96E985E5D5CACFCFE3812131", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\376ED25A1DE94F0D96E985E5D5CACFCFE3812131", lpFilePart=0x0) returned 0x85 [0158.527] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0158.527] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\376ED25A1DE94F0D96E985E5D5CACFCFE3812131" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\376ed25a1de94f0d96e985e5d5cacfcfe3812131"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0158.527] GetFileType (hFile=0x444) returned 0x1 [0158.527] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0158.527] GetFileType (hFile=0x444) returned 0x1 [0158.527] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x528 [0158.527] ReadFile (in: hFile=0x444, lpBuffer=0x21865c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x21865c8*, lpNumberOfBytesRead=0x3be5c8*=0x528, lpOverlapped=0x0) returned 1 [0158.536] CloseHandle (hObject=0x444) returned 1 [0158.580] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\376ED25A1DE94F0D96E985E5D5CACFCFE3812131", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\376ED25A1DE94F0D96E985E5D5CACFCFE3812131", lpFilePart=0x0) returned 0x85 [0158.580] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0158.580] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\376ED25A1DE94F0D96E985E5D5CACFCFE3812131" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\376ed25a1de94f0d96e985e5d5cacfcfe3812131"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0158.582] GetFileType (hFile=0x444) returned 0x1 [0158.582] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0158.582] GetFileType (hFile=0x444) returned 0x1 [0158.582] WriteFile (in: hFile=0x444, lpBuffer=0x21ff048*, nNumberOfBytesToWrite=0x530, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x21ff048*, lpNumberOfBytesWritten=0x3be4d8*=0x530, lpOverlapped=0x0) returned 1 [0158.583] CloseHandle (hObject=0x444) returned 1 [0158.583] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\376ED25A1DE94F0D96E985E5D5CACFCFE3812131", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\376ED25A1DE94F0D96E985E5D5CACFCFE3812131", lpFilePart=0x0) returned 0x85 [0158.583] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\376ED25A1DE94F0D96E985E5D5CACFCFE3812131.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\376ED25A1DE94F0D96E985E5D5CACFCFE3812131.xuy", lpFilePart=0x0) returned 0x89 [0158.583] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0158.583] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\376ED25A1DE94F0D96E985E5D5CACFCFE3812131" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\376ed25a1de94f0d96e985e5d5cacfcfe3812131"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa9f1bba, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xfa9f1bba, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x4a5e13fb, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x530)) returned 1 [0158.583] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0158.583] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\376ED25A1DE94F0D96E985E5D5CACFCFE3812131" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\376ed25a1de94f0d96e985e5d5cacfcfe3812131"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\376ED25A1DE94F0D96E985E5D5CACFCFE3812131.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\376ed25a1de94f0d96e985e5d5cacfcfe3812131.xuy")) returned 1 [0158.584] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\37B0298825F693E093744779A7278E41F1419493", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\37B0298825F693E093744779A7278E41F1419493", lpFilePart=0x0) returned 0x85 [0158.584] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0158.585] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\37B0298825F693E093744779A7278E41F1419493" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\37b0298825f693e093744779a7278e41f1419493"), fInfoLevelId=0x0, lpFileInformation=0x2200408 | out: lpFileInformation=0x2200408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x552f9515, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x552f9515, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x5f489799, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xc3cc)) returned 1 [0158.585] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0158.585] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\37B0298825F693E093744779A7278E41F1419493", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\37B0298825F693E093744779A7278E41F1419493", lpFilePart=0x0) returned 0x85 [0158.585] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0158.585] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\37B0298825F693E093744779A7278E41F1419493" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\37b0298825f693e093744779a7278e41f1419493"), fInfoLevelId=0x0, lpFileInformation=0x2200608 | out: lpFileInformation=0x2200608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x552f9515, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x552f9515, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x5f489799, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xc3cc)) returned 1 [0158.585] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0158.585] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\37B0298825F693E093744779A7278E41F1419493", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\37B0298825F693E093744779A7278E41F1419493", lpFilePart=0x0) returned 0x85 [0158.585] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0158.585] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\37B0298825F693E093744779A7278E41F1419493" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\37b0298825f693e093744779a7278e41f1419493"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0158.585] GetFileType (hFile=0x444) returned 0x1 [0158.585] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0158.586] GetFileType (hFile=0x444) returned 0x1 [0158.586] ReadFile (in: hFile=0x444, lpBuffer=0x2202b38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x2202b38*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0158.604] CloseHandle (hObject=0x444) returned 1 [0158.604] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\37B0298825F693E093744779A7278E41F1419493", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\37B0298825F693E093744779A7278E41F1419493", lpFilePart=0x0) returned 0x85 [0158.604] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0158.604] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\37B0298825F693E093744779A7278E41F1419493" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\37b0298825f693e093744779a7278e41f1419493"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0158.605] GetFileType (hFile=0x444) returned 0x1 [0158.605] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0158.605] GetFileType (hFile=0x444) returned 0x1 [0158.605] WriteFile (in: hFile=0x444, lpBuffer=0x22007e8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x22007e8*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0158.605] CloseHandle (hObject=0x444) returned 1 [0158.605] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\37B0298825F693E093744779A7278E41F1419493", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\37B0298825F693E093744779A7278E41F1419493", lpFilePart=0x0) returned 0x85 [0158.605] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\37B0298825F693E093744779A7278E41F1419493.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\37B0298825F693E093744779A7278E41F1419493.xuy", lpFilePart=0x0) returned 0x89 [0158.605] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0158.605] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\37B0298825F693E093744779A7278E41F1419493" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\37b0298825f693e093744779a7278e41f1419493"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x552f9515, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x552f9515, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x4a62d43b, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xc3cc)) returned 1 [0158.605] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0158.605] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\37B0298825F693E093744779A7278E41F1419493" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\37b0298825f693e093744779a7278e41f1419493"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\37B0298825F693E093744779A7278E41F1419493.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\37b0298825f693e093744779a7278e41f1419493.xuy")) returned 1 [0158.606] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\37B4BC98C8FDD6283BE80C5CC385582FEF5D6747", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\37B4BC98C8FDD6283BE80C5CC385582FEF5D6747", lpFilePart=0x0) returned 0x85 [0158.606] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0158.607] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\37B4BC98C8FDD6283BE80C5CC385582FEF5D6747" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\37b4bc98c8fdd6283be80c5cc385582fef5d6747"), fInfoLevelId=0x0, lpFileInformation=0x227f0e0 | out: lpFileInformation=0x227f0e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8981adb5, ftCreationTime.dwHighDateTime=0x1d2d43f, ftLastAccessTime.dwLowDateTime=0x8981adb5, ftLastAccessTime.dwHighDateTime=0x1d2d43f, ftLastWriteTime.dwLowDateTime=0x8981adb5, ftLastWriteTime.dwHighDateTime=0x1d2d43f, nFileSizeHigh=0x0, nFileSizeLow=0x52a)) returned 1 [0158.607] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0158.607] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\37B4BC98C8FDD6283BE80C5CC385582FEF5D6747", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\37B4BC98C8FDD6283BE80C5CC385582FEF5D6747", lpFilePart=0x0) returned 0x85 [0158.607] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0158.607] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\37B4BC98C8FDD6283BE80C5CC385582FEF5D6747" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\37b4bc98c8fdd6283be80c5cc385582fef5d6747"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0158.607] GetFileType (hFile=0x444) returned 0x1 [0158.607] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0158.607] GetFileType (hFile=0x444) returned 0x1 [0158.607] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x52a [0158.607] ReadFile (in: hFile=0x444, lpBuffer=0x227fa28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x227fa28*, lpNumberOfBytesRead=0x3be5c8*=0x52a, lpOverlapped=0x0) returned 1 [0158.617] CloseHandle (hObject=0x444) returned 1 [0158.632] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\37B4BC98C8FDD6283BE80C5CC385582FEF5D6747", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\37B4BC98C8FDD6283BE80C5CC385582FEF5D6747", lpFilePart=0x0) returned 0x85 [0158.632] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0158.632] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\37B4BC98C8FDD6283BE80C5CC385582FEF5D6747" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\37b4bc98c8fdd6283be80c5cc385582fef5d6747"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0158.635] GetFileType (hFile=0x444) returned 0x1 [0158.635] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0158.635] GetFileType (hFile=0x444) returned 0x1 [0158.635] WriteFile (in: hFile=0x444, lpBuffer=0x22f84a8*, nNumberOfBytesToWrite=0x530, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x22f84a8*, lpNumberOfBytesWritten=0x3be4d8*=0x530, lpOverlapped=0x0) returned 1 [0158.637] CloseHandle (hObject=0x444) returned 1 [0158.637] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\37B4BC98C8FDD6283BE80C5CC385582FEF5D6747", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\37B4BC98C8FDD6283BE80C5CC385582FEF5D6747", lpFilePart=0x0) returned 0x85 [0158.637] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\37B4BC98C8FDD6283BE80C5CC385582FEF5D6747.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\37B4BC98C8FDD6283BE80C5CC385582FEF5D6747.xuy", lpFilePart=0x0) returned 0x89 [0158.637] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0158.637] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\37B4BC98C8FDD6283BE80C5CC385582FEF5D6747" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\37b4bc98c8fdd6283be80c5cc385582fef5d6747"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8981adb5, ftCreationTime.dwHighDateTime=0x1d2d43f, ftLastAccessTime.dwLowDateTime=0x8981adb5, ftLastAccessTime.dwHighDateTime=0x1d2d43f, ftLastWriteTime.dwLowDateTime=0x4a679a4e, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x530)) returned 1 [0158.637] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0158.637] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\37B4BC98C8FDD6283BE80C5CC385582FEF5D6747" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\37b4bc98c8fdd6283be80c5cc385582fef5d6747"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\37B4BC98C8FDD6283BE80C5CC385582FEF5D6747.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\37b4bc98c8fdd6283be80c5cc385582fef5d6747.xuy")) returned 1 [0158.639] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\37BC32B4B7033C1AB388018EC734B639086C814E", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\37BC32B4B7033C1AB388018EC734B639086C814E", lpFilePart=0x0) returned 0x85 [0158.639] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0158.639] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\37BC32B4B7033C1AB388018EC734B639086C814E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\37bc32b4b7033c1ab388018ec734b639086c814e"), fInfoLevelId=0x0, lpFileInformation=0x22f9868 | out: lpFileInformation=0x22f9868*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x544f75b8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x544f75b8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x544f75b8, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x1119)) returned 1 [0158.639] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0158.639] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\37BC32B4B7033C1AB388018EC734B639086C814E", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\37BC32B4B7033C1AB388018EC734B639086C814E", lpFilePart=0x0) returned 0x85 [0158.639] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0158.639] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\37BC32B4B7033C1AB388018EC734B639086C814E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\37bc32b4b7033c1ab388018ec734b639086c814e"), fInfoLevelId=0x0, lpFileInformation=0x22f9a68 | out: lpFileInformation=0x22f9a68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x544f75b8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x544f75b8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x544f75b8, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x1119)) returned 1 [0158.639] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0158.640] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\37BC32B4B7033C1AB388018EC734B639086C814E", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\37BC32B4B7033C1AB388018EC734B639086C814E", lpFilePart=0x0) returned 0x85 [0158.640] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0158.640] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\37BC32B4B7033C1AB388018EC734B639086C814E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\37bc32b4b7033c1ab388018ec734b639086c814e"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0158.641] GetFileType (hFile=0x444) returned 0x1 [0158.641] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0158.641] GetFileType (hFile=0x444) returned 0x1 [0158.641] ReadFile (in: hFile=0x444, lpBuffer=0x22fbf98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x22fbf98*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0158.653] CloseHandle (hObject=0x444) returned 1 [0158.653] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\37BC32B4B7033C1AB388018EC734B639086C814E", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\37BC32B4B7033C1AB388018EC734B639086C814E", lpFilePart=0x0) returned 0x85 [0158.654] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0158.654] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\37BC32B4B7033C1AB388018EC734B639086C814E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\37bc32b4b7033c1ab388018ec734b639086c814e"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0158.654] GetFileType (hFile=0x444) returned 0x1 [0158.654] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0158.654] GetFileType (hFile=0x444) returned 0x1 [0158.654] WriteFile (in: hFile=0x444, lpBuffer=0x22f9c48*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x22f9c48*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0158.654] CloseHandle (hObject=0x444) returned 1 [0158.654] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\37BC32B4B7033C1AB388018EC734B639086C814E", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\37BC32B4B7033C1AB388018EC734B639086C814E", lpFilePart=0x0) returned 0x85 [0158.654] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\37BC32B4B7033C1AB388018EC734B639086C814E.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\37BC32B4B7033C1AB388018EC734B639086C814E.xuy", lpFilePart=0x0) returned 0x89 [0158.654] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0158.654] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\37BC32B4B7033C1AB388018EC734B639086C814E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\37bc32b4b7033c1ab388018ec734b639086c814e"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x544f75b8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x544f75b8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x4a69fbdd, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0158.655] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0158.655] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\37BC32B4B7033C1AB388018EC734B639086C814E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\37bc32b4b7033c1ab388018ec734b639086c814e"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\37BC32B4B7033C1AB388018EC734B639086C814E.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\37bc32b4b7033c1ab388018ec734b639086c814e.xuy")) returned 1 [0158.656] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\383704E4BB07D527519A7352BA38B681C661FD8F", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\383704E4BB07D527519A7352BA38B681C661FD8F", lpFilePart=0x0) returned 0x85 [0158.656] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0158.656] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\383704E4BB07D527519A7352BA38B681C661FD8F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\383704e4bb07d527519a7352ba38b681c661fd8f"), fInfoLevelId=0x0, lpFileInformation=0x2378540 | out: lpFileInformation=0x2378540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x600d44c5, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x600d44c5, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x6074e1a3, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x2c15f1)) returned 1 [0158.656] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0158.656] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\383704E4BB07D527519A7352BA38B681C661FD8F", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\383704E4BB07D527519A7352BA38B681C661FD8F", lpFilePart=0x0) returned 0x85 [0158.656] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0158.656] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\383704E4BB07D527519A7352BA38B681C661FD8F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\383704e4bb07d527519a7352ba38b681c661fd8f"), fInfoLevelId=0x0, lpFileInformation=0x2378740 | out: lpFileInformation=0x2378740*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x600d44c5, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x600d44c5, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x6074e1a3, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x2c15f1)) returned 1 [0158.656] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0158.656] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\383704E4BB07D527519A7352BA38B681C661FD8F", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\383704E4BB07D527519A7352BA38B681C661FD8F", lpFilePart=0x0) returned 0x85 [0158.656] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0158.656] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\383704E4BB07D527519A7352BA38B681C661FD8F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\383704e4bb07d527519a7352ba38b681c661fd8f"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0158.657] GetFileType (hFile=0x444) returned 0x1 [0158.657] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0158.657] GetFileType (hFile=0x444) returned 0x1 [0158.657] ReadFile (in: hFile=0x444, lpBuffer=0x237ac70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x237ac70*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0158.709] CloseHandle (hObject=0x444) returned 1 [0158.709] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\383704E4BB07D527519A7352BA38B681C661FD8F", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\383704E4BB07D527519A7352BA38B681C661FD8F", lpFilePart=0x0) returned 0x85 [0158.710] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0158.710] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\383704E4BB07D527519A7352BA38B681C661FD8F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\383704e4bb07d527519a7352ba38b681c661fd8f"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0158.710] GetFileType (hFile=0x444) returned 0x1 [0158.710] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0158.710] GetFileType (hFile=0x444) returned 0x1 [0158.710] WriteFile (in: hFile=0x444, lpBuffer=0x2185c28*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x2185c28*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0158.710] CloseHandle (hObject=0x444) returned 1 [0158.710] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\383704E4BB07D527519A7352BA38B681C661FD8F", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\383704E4BB07D527519A7352BA38B681C661FD8F", lpFilePart=0x0) returned 0x85 [0158.710] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\383704E4BB07D527519A7352BA38B681C661FD8F.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\383704E4BB07D527519A7352BA38B681C661FD8F.xuy", lpFilePart=0x0) returned 0x89 [0158.710] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0158.710] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\383704E4BB07D527519A7352BA38B681C661FD8F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\383704e4bb07d527519a7352ba38b681c661fd8f"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x600d44c5, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x600d44c5, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x4a712322, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2c15f1)) returned 1 [0158.717] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0158.717] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\383704E4BB07D527519A7352BA38B681C661FD8F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\383704e4bb07d527519a7352ba38b681c661fd8f"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\383704E4BB07D527519A7352BA38B681C661FD8F.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\383704e4bb07d527519a7352ba38b681c661fd8f.xuy")) returned 1 [0158.718] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\38819CF0EDDF28F6C7AE4A62EA2DC0E07EA71115", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\38819CF0EDDF28F6C7AE4A62EA2DC0E07EA71115", lpFilePart=0x0) returned 0x85 [0158.718] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0158.718] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\38819CF0EDDF28F6C7AE4A62EA2DC0E07EA71115" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\38819cf0eddf28f6c7ae4a62ea2dc0e07ea71115"), fInfoLevelId=0x0, lpFileInformation=0x21fa820 | out: lpFileInformation=0x21fa820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f6d138f, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3f6d138f, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x3f6d3a99, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x528)) returned 1 [0158.718] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0158.718] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\38819CF0EDDF28F6C7AE4A62EA2DC0E07EA71115", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\38819CF0EDDF28F6C7AE4A62EA2DC0E07EA71115", lpFilePart=0x0) returned 0x85 [0158.718] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0158.719] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\38819CF0EDDF28F6C7AE4A62EA2DC0E07EA71115" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\38819cf0eddf28f6c7ae4a62ea2dc0e07ea71115"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0158.719] GetFileType (hFile=0x444) returned 0x1 [0158.719] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0158.719] GetFileType (hFile=0x444) returned 0x1 [0158.719] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x528 [0158.719] ReadFile (in: hFile=0x444, lpBuffer=0x21fb160, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x21fb160*, lpNumberOfBytesRead=0x3be5c8*=0x528, lpOverlapped=0x0) returned 1 [0158.729] CloseHandle (hObject=0x444) returned 1 [0158.740] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\38819CF0EDDF28F6C7AE4A62EA2DC0E07EA71115", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\38819CF0EDDF28F6C7AE4A62EA2DC0E07EA71115", lpFilePart=0x0) returned 0x85 [0158.740] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0158.740] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\38819CF0EDDF28F6C7AE4A62EA2DC0E07EA71115" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\38819cf0eddf28f6c7ae4a62ea2dc0e07ea71115"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0158.745] GetFileType (hFile=0x444) returned 0x1 [0158.745] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0158.745] GetFileType (hFile=0x444) returned 0x1 [0158.745] WriteFile (in: hFile=0x444, lpBuffer=0x2273be0*, nNumberOfBytesToWrite=0x530, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x2273be0*, lpNumberOfBytesWritten=0x3be4d8*=0x530, lpOverlapped=0x0) returned 1 [0158.746] CloseHandle (hObject=0x444) returned 1 [0158.746] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\38819CF0EDDF28F6C7AE4A62EA2DC0E07EA71115", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\38819CF0EDDF28F6C7AE4A62EA2DC0E07EA71115", lpFilePart=0x0) returned 0x85 [0158.746] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\38819CF0EDDF28F6C7AE4A62EA2DC0E07EA71115.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\38819CF0EDDF28F6C7AE4A62EA2DC0E07EA71115.xuy", lpFilePart=0x0) returned 0x89 [0158.746] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0158.746] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\38819CF0EDDF28F6C7AE4A62EA2DC0E07EA71115" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\38819cf0eddf28f6c7ae4a62ea2dc0e07ea71115"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f6d138f, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3f6d138f, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x4a7849c4, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x530)) returned 1 [0158.747] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0158.747] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\38819CF0EDDF28F6C7AE4A62EA2DC0E07EA71115" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\38819cf0eddf28f6c7ae4a62ea2dc0e07ea71115"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\38819CF0EDDF28F6C7AE4A62EA2DC0E07EA71115.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\38819cf0eddf28f6c7ae4a62ea2dc0e07ea71115.xuy")) returned 1 [0158.748] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\39CC8AA9054EC6244CA281EEA4BD937517E2861D", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\39CC8AA9054EC6244CA281EEA4BD937517E2861D", lpFilePart=0x0) returned 0x85 [0158.748] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0158.748] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\39CC8AA9054EC6244CA281EEA4BD937517E2861D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\39cc8aa9054ec6244ca281eea4bd937517e2861d"), fInfoLevelId=0x0, lpFileInformation=0x2274fa0 | out: lpFileInformation=0x2274fa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54bd2206, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x54bd2206, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x5eca3ad5, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x4d8c)) returned 1 [0158.748] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0158.748] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\39CC8AA9054EC6244CA281EEA4BD937517E2861D", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\39CC8AA9054EC6244CA281EEA4BD937517E2861D", lpFilePart=0x0) returned 0x85 [0158.748] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0158.748] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\39CC8AA9054EC6244CA281EEA4BD937517E2861D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\39cc8aa9054ec6244ca281eea4bd937517e2861d"), fInfoLevelId=0x0, lpFileInformation=0x22751a0 | out: lpFileInformation=0x22751a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54bd2206, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x54bd2206, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x5eca3ad5, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x4d8c)) returned 1 [0158.748] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0158.748] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\39CC8AA9054EC6244CA281EEA4BD937517E2861D", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\39CC8AA9054EC6244CA281EEA4BD937517E2861D", lpFilePart=0x0) returned 0x85 [0158.748] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0158.748] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\39CC8AA9054EC6244CA281EEA4BD937517E2861D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\39cc8aa9054ec6244ca281eea4bd937517e2861d"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0158.749] GetFileType (hFile=0x444) returned 0x1 [0158.749] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0158.749] GetFileType (hFile=0x444) returned 0x1 [0158.749] ReadFile (in: hFile=0x444, lpBuffer=0x22776d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x22776d0*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0158.773] CloseHandle (hObject=0x444) returned 1 [0158.773] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\39CC8AA9054EC6244CA281EEA4BD937517E2861D", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\39CC8AA9054EC6244CA281EEA4BD937517E2861D", lpFilePart=0x0) returned 0x85 [0158.773] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0158.773] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\39CC8AA9054EC6244CA281EEA4BD937517E2861D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\39cc8aa9054ec6244ca281eea4bd937517e2861d"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0158.774] GetFileType (hFile=0x444) returned 0x1 [0158.774] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0158.774] GetFileType (hFile=0x444) returned 0x1 [0158.774] WriteFile (in: hFile=0x444, lpBuffer=0x2275380*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x2275380*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0158.774] CloseHandle (hObject=0x444) returned 1 [0158.774] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\39CC8AA9054EC6244CA281EEA4BD937517E2861D", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\39CC8AA9054EC6244CA281EEA4BD937517E2861D", lpFilePart=0x0) returned 0x85 [0158.774] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\39CC8AA9054EC6244CA281EEA4BD937517E2861D.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\39CC8AA9054EC6244CA281EEA4BD937517E2861D.xuy", lpFilePart=0x0) returned 0x89 [0158.774] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0158.774] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\39CC8AA9054EC6244CA281EEA4BD937517E2861D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\39cc8aa9054ec6244ca281eea4bd937517e2861d"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54bd2206, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x54bd2206, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x4a7d0ee3, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x4d8c)) returned 1 [0158.774] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0158.774] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\39CC8AA9054EC6244CA281EEA4BD937517E2861D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\39cc8aa9054ec6244ca281eea4bd937517e2861d"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\39CC8AA9054EC6244CA281EEA4BD937517E2861D.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\39cc8aa9054ec6244ca281eea4bd937517e2861d.xuy")) returned 1 [0158.776] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\39D606C35C00ADA6E9320E1F6431E5A33EB42182", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\39D606C35C00ADA6E9320E1F6431E5A33EB42182", lpFilePart=0x0) returned 0x85 [0158.776] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0158.776] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\39D606C35C00ADA6E9320E1F6431E5A33EB42182" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\39d606c35c00ada6e9320e1f6431e5a33eb42182"), fInfoLevelId=0x0, lpFileInformation=0x22f3c78 | out: lpFileInformation=0x22f3c78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x615c4498, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x615c4498, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x615c4498, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xf0f)) returned 1 [0158.776] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0158.776] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\39D606C35C00ADA6E9320E1F6431E5A33EB42182", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\39D606C35C00ADA6E9320E1F6431E5A33EB42182", lpFilePart=0x0) returned 0x85 [0158.776] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0158.776] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\39D606C35C00ADA6E9320E1F6431E5A33EB42182" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\39d606c35c00ada6e9320e1f6431e5a33eb42182"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0158.776] GetFileType (hFile=0x444) returned 0x1 [0158.776] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0158.776] GetFileType (hFile=0x444) returned 0x1 [0158.776] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xf0f [0158.776] ReadFile (in: hFile=0x444, lpBuffer=0x22f4fa0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x22f4fa0*, lpNumberOfBytesRead=0x3be5c8*=0xf0f, lpOverlapped=0x0) returned 1 [0158.789] CloseHandle (hObject=0x444) returned 1 [0158.799] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\39D606C35C00ADA6E9320E1F6431E5A33EB42182", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\39D606C35C00ADA6E9320E1F6431E5A33EB42182", lpFilePart=0x0) returned 0x85 [0158.799] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0158.799] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\39D606C35C00ADA6E9320E1F6431E5A33EB42182" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\39d606c35c00ada6e9320e1f6431e5a33eb42182"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0158.801] GetFileType (hFile=0x444) returned 0x1 [0158.801] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0158.801] GetFileType (hFile=0x444) returned 0x1 [0158.801] WriteFile (in: hFile=0x444, lpBuffer=0x2370b80*, nNumberOfBytesToWrite=0xf10, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x2370b80*, lpNumberOfBytesWritten=0x3be4d8*=0xf10, lpOverlapped=0x0) returned 1 [0158.808] CloseHandle (hObject=0x444) returned 1 [0158.808] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\39D606C35C00ADA6E9320E1F6431E5A33EB42182", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\39D606C35C00ADA6E9320E1F6431E5A33EB42182", lpFilePart=0x0) returned 0x85 [0158.808] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\39D606C35C00ADA6E9320E1F6431E5A33EB42182.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\39D606C35C00ADA6E9320E1F6431E5A33EB42182.xuy", lpFilePart=0x0) returned 0x89 [0158.808] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0158.808] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\39D606C35C00ADA6E9320E1F6431E5A33EB42182" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\39d606c35c00ada6e9320e1f6431e5a33eb42182"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x615c4498, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x615c4498, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x4a81d3e1, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xf10)) returned 1 [0158.808] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0158.809] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\39D606C35C00ADA6E9320E1F6431E5A33EB42182" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\39d606c35c00ada6e9320e1f6431e5a33eb42182"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\39D606C35C00ADA6E9320E1F6431E5A33EB42182.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\39d606c35c00ada6e9320e1f6431e5a33eb42182.xuy")) returned 1 [0158.810] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3A554E4EFCC1FAD19E963D27B9A2BF73C9664268", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3A554E4EFCC1FAD19E963D27B9A2BF73C9664268", lpFilePart=0x0) returned 0x85 [0158.810] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0158.810] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3A554E4EFCC1FAD19E963D27B9A2BF73C9664268" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\3a554e4efcc1fad19e963d27b9a2bf73c9664268"), fInfoLevelId=0x0, lpFileInformation=0x2371f40 | out: lpFileInformation=0x2371f40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f74abe7, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x5f74abe7, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x5f7a7825, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x528)) returned 1 [0158.810] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0158.810] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3A554E4EFCC1FAD19E963D27B9A2BF73C9664268", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3A554E4EFCC1FAD19E963D27B9A2BF73C9664268", lpFilePart=0x0) returned 0x85 [0158.810] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0158.810] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3A554E4EFCC1FAD19E963D27B9A2BF73C9664268" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\3a554e4efcc1fad19e963d27b9a2bf73c9664268"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0158.810] GetFileType (hFile=0x444) returned 0x1 [0158.810] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0158.810] GetFileType (hFile=0x444) returned 0x1 [0158.810] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x528 [0158.810] ReadFile (in: hFile=0x444, lpBuffer=0x2372880, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x2372880*, lpNumberOfBytesRead=0x3be5c8*=0x528, lpOverlapped=0x0) returned 1 [0158.814] CloseHandle (hObject=0x444) returned 1 [0158.853] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3A554E4EFCC1FAD19E963D27B9A2BF73C9664268", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3A554E4EFCC1FAD19E963D27B9A2BF73C9664268", lpFilePart=0x0) returned 0x85 [0158.854] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0158.854] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3A554E4EFCC1FAD19E963D27B9A2BF73C9664268" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\3a554e4efcc1fad19e963d27b9a2bf73c9664268"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0158.856] GetFileType (hFile=0x444) returned 0x1 [0158.856] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0158.856] GetFileType (hFile=0x444) returned 0x1 [0158.856] WriteFile (in: hFile=0x444, lpBuffer=0x21e8640*, nNumberOfBytesToWrite=0x530, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x21e8640*, lpNumberOfBytesWritten=0x3be4d8*=0x530, lpOverlapped=0x0) returned 1 [0158.857] CloseHandle (hObject=0x444) returned 1 [0158.857] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3A554E4EFCC1FAD19E963D27B9A2BF73C9664268", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3A554E4EFCC1FAD19E963D27B9A2BF73C9664268", lpFilePart=0x0) returned 0x85 [0158.857] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3A554E4EFCC1FAD19E963D27B9A2BF73C9664268.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3A554E4EFCC1FAD19E963D27B9A2BF73C9664268.xuy", lpFilePart=0x0) returned 0x89 [0158.857] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0158.857] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3A554E4EFCC1FAD19E963D27B9A2BF73C9664268" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\3a554e4efcc1fad19e963d27b9a2bf73c9664268"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f74abe7, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x5f74abe7, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x4a88fca5, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x530)) returned 1 [0158.857] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0158.857] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3A554E4EFCC1FAD19E963D27B9A2BF73C9664268" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\3a554e4efcc1fad19e963d27b9a2bf73c9664268"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3A554E4EFCC1FAD19E963D27B9A2BF73C9664268.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\3a554e4efcc1fad19e963d27b9a2bf73c9664268.xuy")) returned 1 [0158.859] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3A6C331288F156E9A07E3EA398F3A8FAF0530D8F", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3A6C331288F156E9A07E3EA398F3A8FAF0530D8F", lpFilePart=0x0) returned 0x85 [0158.859] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0158.859] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3A6C331288F156E9A07E3EA398F3A8FAF0530D8F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\3a6c331288f156e9a07e3ea398f3a8faf0530d8f"), fInfoLevelId=0x0, lpFileInformation=0x21e9a00 | out: lpFileInformation=0x21e9a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8631ae1f, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x8631ae1f, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x8631d519, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x11eb)) returned 1 [0158.859] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0158.859] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3A6C331288F156E9A07E3EA398F3A8FAF0530D8F", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3A6C331288F156E9A07E3EA398F3A8FAF0530D8F", lpFilePart=0x0) returned 0x85 [0158.859] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0158.859] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3A6C331288F156E9A07E3EA398F3A8FAF0530D8F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\3a6c331288f156e9a07e3ea398f3a8faf0530d8f"), fInfoLevelId=0x0, lpFileInformation=0x21e9c00 | out: lpFileInformation=0x21e9c00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8631ae1f, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x8631ae1f, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x8631d519, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x11eb)) returned 1 [0158.859] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0158.859] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3A6C331288F156E9A07E3EA398F3A8FAF0530D8F", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3A6C331288F156E9A07E3EA398F3A8FAF0530D8F", lpFilePart=0x0) returned 0x85 [0158.859] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0158.859] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3A6C331288F156E9A07E3EA398F3A8FAF0530D8F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\3a6c331288f156e9a07e3ea398f3a8faf0530d8f"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0158.860] GetFileType (hFile=0x444) returned 0x1 [0158.860] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0158.860] GetFileType (hFile=0x444) returned 0x1 [0158.860] ReadFile (in: hFile=0x444, lpBuffer=0x21ec130, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x21ec130*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0158.878] CloseHandle (hObject=0x444) returned 1 [0158.878] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3A6C331288F156E9A07E3EA398F3A8FAF0530D8F", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3A6C331288F156E9A07E3EA398F3A8FAF0530D8F", lpFilePart=0x0) returned 0x85 [0158.878] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0158.879] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3A6C331288F156E9A07E3EA398F3A8FAF0530D8F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\3a6c331288f156e9a07e3ea398f3a8faf0530d8f"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0158.879] GetFileType (hFile=0x444) returned 0x1 [0158.879] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0158.879] GetFileType (hFile=0x444) returned 0x1 [0158.879] WriteFile (in: hFile=0x444, lpBuffer=0x21e9de0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x21e9de0*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0158.879] CloseHandle (hObject=0x444) returned 1 [0158.879] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3A6C331288F156E9A07E3EA398F3A8FAF0530D8F", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3A6C331288F156E9A07E3EA398F3A8FAF0530D8F", lpFilePart=0x0) returned 0x85 [0158.879] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3A6C331288F156E9A07E3EA398F3A8FAF0530D8F.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3A6C331288F156E9A07E3EA398F3A8FAF0530D8F.xuy", lpFilePart=0x0) returned 0x89 [0158.879] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0158.879] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3A6C331288F156E9A07E3EA398F3A8FAF0530D8F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\3a6c331288f156e9a07e3ea398f3a8faf0530d8f"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8631ae1f, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x8631ae1f, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x4a8b5e69, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0158.879] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0158.880] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3A6C331288F156E9A07E3EA398F3A8FAF0530D8F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\3a6c331288f156e9a07e3ea398f3a8faf0530d8f"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3A6C331288F156E9A07E3EA398F3A8FAF0530D8F.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\3a6c331288f156e9a07e3ea398f3a8faf0530d8f.xuy")) returned 1 [0158.881] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3B3EDC129FE6ED020C044AC637791DEC8B6B7603", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3B3EDC129FE6ED020C044AC637791DEC8B6B7603", lpFilePart=0x0) returned 0x85 [0158.881] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0158.881] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3B3EDC129FE6ED020C044AC637791DEC8B6B7603" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\3b3edc129fe6ed020c044ac637791dec8b6b7603"), fInfoLevelId=0x0, lpFileInformation=0x22686d8 | out: lpFileInformation=0x22686d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44d090e3, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x44d090e3, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x44d090e3, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0xb11)) returned 1 [0158.881] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0158.881] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3B3EDC129FE6ED020C044AC637791DEC8B6B7603", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3B3EDC129FE6ED020C044AC637791DEC8B6B7603", lpFilePart=0x0) returned 0x85 [0158.881] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0158.881] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3B3EDC129FE6ED020C044AC637791DEC8B6B7603" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\3b3edc129fe6ed020c044ac637791dec8b6b7603"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0158.881] GetFileType (hFile=0x444) returned 0x1 [0158.881] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0158.881] GetFileType (hFile=0x444) returned 0x1 [0158.881] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xb11 [0158.881] ReadFile (in: hFile=0x444, lpBuffer=0x2269608, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x2269608*, lpNumberOfBytesRead=0x3be5c8*=0xb11, lpOverlapped=0x0) returned 1 [0158.883] CloseHandle (hObject=0x444) returned 1 [0158.894] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3B3EDC129FE6ED020C044AC637791DEC8B6B7603", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3B3EDC129FE6ED020C044AC637791DEC8B6B7603", lpFilePart=0x0) returned 0x85 [0158.894] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0158.894] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3B3EDC129FE6ED020C044AC637791DEC8B6B7603" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\3b3edc129fe6ed020c044ac637791dec8b6b7603"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0158.895] GetFileType (hFile=0x444) returned 0x1 [0158.895] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0158.895] GetFileType (hFile=0x444) returned 0x1 [0158.895] WriteFile (in: hFile=0x444, lpBuffer=0x22e3e40*, nNumberOfBytesToWrite=0xb20, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x22e3e40*, lpNumberOfBytesWritten=0x3be4d8*=0xb20, lpOverlapped=0x0) returned 1 [0158.896] CloseHandle (hObject=0x444) returned 1 [0158.896] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3B3EDC129FE6ED020C044AC637791DEC8B6B7603", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3B3EDC129FE6ED020C044AC637791DEC8B6B7603", lpFilePart=0x0) returned 0x85 [0158.896] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3B3EDC129FE6ED020C044AC637791DEC8B6B7603.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3B3EDC129FE6ED020C044AC637791DEC8B6B7603.xuy", lpFilePart=0x0) returned 0x89 [0158.897] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0158.897] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3B3EDC129FE6ED020C044AC637791DEC8B6B7603" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\3b3edc129fe6ed020c044ac637791dec8b6b7603"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44d090e3, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x44d090e3, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x4a8dbeb7, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xb20)) returned 1 [0158.897] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0158.897] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3B3EDC129FE6ED020C044AC637791DEC8B6B7603" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\3b3edc129fe6ed020c044ac637791dec8b6b7603"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3B3EDC129FE6ED020C044AC637791DEC8B6B7603.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\3b3edc129fe6ed020c044ac637791dec8b6b7603.xuy")) returned 1 [0158.898] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3D896079491CA68DD9BB6DB7E612C8DC74463279", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3D896079491CA68DD9BB6DB7E612C8DC74463279", lpFilePart=0x0) returned 0x85 [0158.898] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0158.898] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3D896079491CA68DD9BB6DB7E612C8DC74463279" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\3d896079491ca68dd9bb6db7e612c8dc74463279"), fInfoLevelId=0x0, lpFileInformation=0x22e5200 | out: lpFileInformation=0x22e5200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xddff8668, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xddff8668, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xddffad78, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x528)) returned 1 [0158.899] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0158.899] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3D896079491CA68DD9BB6DB7E612C8DC74463279", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3D896079491CA68DD9BB6DB7E612C8DC74463279", lpFilePart=0x0) returned 0x85 [0158.899] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0158.899] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3D896079491CA68DD9BB6DB7E612C8DC74463279" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\3d896079491ca68dd9bb6db7e612c8dc74463279"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0158.899] GetFileType (hFile=0x444) returned 0x1 [0158.900] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0158.900] GetFileType (hFile=0x444) returned 0x1 [0158.900] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x528 [0158.900] ReadFile (in: hFile=0x444, lpBuffer=0x22e5b40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x22e5b40*, lpNumberOfBytesRead=0x3be5c8*=0x528, lpOverlapped=0x0) returned 1 [0158.910] CloseHandle (hObject=0x444) returned 1 [0158.920] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3D896079491CA68DD9BB6DB7E612C8DC74463279", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3D896079491CA68DD9BB6DB7E612C8DC74463279", lpFilePart=0x0) returned 0x85 [0158.920] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0158.920] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3D896079491CA68DD9BB6DB7E612C8DC74463279" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\3d896079491ca68dd9bb6db7e612c8dc74463279"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0158.922] GetFileType (hFile=0x444) returned 0x1 [0158.922] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0158.922] GetFileType (hFile=0x444) returned 0x1 [0158.922] WriteFile (in: hFile=0x444, lpBuffer=0x235e5c0*, nNumberOfBytesToWrite=0x530, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x235e5c0*, lpNumberOfBytesWritten=0x3be4d8*=0x530, lpOverlapped=0x0) returned 1 [0158.923] CloseHandle (hObject=0x444) returned 1 [0158.923] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3D896079491CA68DD9BB6DB7E612C8DC74463279", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3D896079491CA68DD9BB6DB7E612C8DC74463279", lpFilePart=0x0) returned 0x85 [0158.923] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3D896079491CA68DD9BB6DB7E612C8DC74463279.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3D896079491CA68DD9BB6DB7E612C8DC74463279.xuy", lpFilePart=0x0) returned 0x89 [0158.923] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0158.923] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3D896079491CA68DD9BB6DB7E612C8DC74463279" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\3d896079491ca68dd9bb6db7e612c8dc74463279"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xddff8668, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xddff8668, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x4a92846c, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x530)) returned 1 [0158.923] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0158.923] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3D896079491CA68DD9BB6DB7E612C8DC74463279" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\3d896079491ca68dd9bb6db7e612c8dc74463279"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3D896079491CA68DD9BB6DB7E612C8DC74463279.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\3d896079491ca68dd9bb6db7e612c8dc74463279.xuy")) returned 1 [0158.924] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3DE1033D1165F9D849E6DFD8566ABB9179DB1D0F", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3DE1033D1165F9D849E6DFD8566ABB9179DB1D0F", lpFilePart=0x0) returned 0x85 [0158.924] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0158.925] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3DE1033D1165F9D849E6DFD8566ABB9179DB1D0F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\3de1033d1165f9d849e6dfd8566abb9179db1d0f"), fInfoLevelId=0x0, lpFileInformation=0x235f980 | out: lpFileInformation=0x235f980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3b8631f, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xf3b8631f, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0xf3b8b125, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x10f9)) returned 1 [0158.925] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0158.925] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3DE1033D1165F9D849E6DFD8566ABB9179DB1D0F", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3DE1033D1165F9D849E6DFD8566ABB9179DB1D0F", lpFilePart=0x0) returned 0x85 [0158.925] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0158.925] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3DE1033D1165F9D849E6DFD8566ABB9179DB1D0F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\3de1033d1165f9d849e6dfd8566abb9179db1d0f"), fInfoLevelId=0x0, lpFileInformation=0x235fb80 | out: lpFileInformation=0x235fb80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3b8631f, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xf3b8631f, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0xf3b8b125, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x10f9)) returned 1 [0158.925] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0158.925] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3DE1033D1165F9D849E6DFD8566ABB9179DB1D0F", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3DE1033D1165F9D849E6DFD8566ABB9179DB1D0F", lpFilePart=0x0) returned 0x85 [0158.925] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0158.925] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3DE1033D1165F9D849E6DFD8566ABB9179DB1D0F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\3de1033d1165f9d849e6dfd8566abb9179db1d0f"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0158.926] GetFileType (hFile=0x444) returned 0x1 [0158.926] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0158.926] GetFileType (hFile=0x444) returned 0x1 [0158.926] ReadFile (in: hFile=0x444, lpBuffer=0x23620b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x23620b0*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0158.971] CloseHandle (hObject=0x444) returned 1 [0158.971] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3DE1033D1165F9D849E6DFD8566ABB9179DB1D0F", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3DE1033D1165F9D849E6DFD8566ABB9179DB1D0F", lpFilePart=0x0) returned 0x85 [0158.971] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0158.971] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3DE1033D1165F9D849E6DFD8566ABB9179DB1D0F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\3de1033d1165f9d849e6dfd8566abb9179db1d0f"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0158.972] GetFileType (hFile=0x444) returned 0x1 [0158.972] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0158.972] GetFileType (hFile=0x444) returned 0x1 [0158.972] WriteFile (in: hFile=0x444, lpBuffer=0x2185c28*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x2185c28*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0158.972] CloseHandle (hObject=0x444) returned 1 [0158.972] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3DE1033D1165F9D849E6DFD8566ABB9179DB1D0F", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3DE1033D1165F9D849E6DFD8566ABB9179DB1D0F", lpFilePart=0x0) returned 0x85 [0158.972] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3DE1033D1165F9D849E6DFD8566ABB9179DB1D0F.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3DE1033D1165F9D849E6DFD8566ABB9179DB1D0F.xuy", lpFilePart=0x0) returned 0x89 [0158.972] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0158.972] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3DE1033D1165F9D849E6DFD8566ABB9179DB1D0F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\3de1033d1165f9d849e6dfd8566abb9179db1d0f"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3b8631f, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xf3b8631f, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x4a99aba5, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0158.972] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0158.972] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3DE1033D1165F9D849E6DFD8566ABB9179DB1D0F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\3de1033d1165f9d849e6dfd8566abb9179db1d0f"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3DE1033D1165F9D849E6DFD8566ABB9179DB1D0F.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\3de1033d1165f9d849e6dfd8566abb9179db1d0f.xuy")) returned 1 [0158.974] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3E42820479FADF666581B0704FA4AF901AE0E045", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3E42820479FADF666581B0704FA4AF901AE0E045", lpFilePart=0x0) returned 0x85 [0158.974] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0158.974] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3E42820479FADF666581B0704FA4AF901AE0E045" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\3e42820479fadf666581b0704fa4af901ae0e045"), fInfoLevelId=0x0, lpFileInformation=0x21e12e0 | out: lpFileInformation=0x21e12e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48d30ecb, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x48d30ecb, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x48d30ecb, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0x73)) returned 1 [0158.974] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0158.974] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3E42820479FADF666581B0704FA4AF901AE0E045", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3E42820479FADF666581B0704FA4AF901AE0E045", lpFilePart=0x0) returned 0x85 [0158.974] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0158.974] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3E42820479FADF666581B0704FA4AF901AE0E045" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\3e42820479fadf666581b0704fa4af901ae0e045"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0158.974] GetFileType (hFile=0x444) returned 0x1 [0158.974] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0158.974] GetFileType (hFile=0x444) returned 0x1 [0158.974] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x73 [0158.974] ReadFile (in: hFile=0x444, lpBuffer=0x21e1770, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x21e1770*, lpNumberOfBytesRead=0x3be5c8*=0x73, lpOverlapped=0x0) returned 1 [0158.976] CloseHandle (hObject=0x444) returned 1 [0158.986] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3E42820479FADF666581B0704FA4AF901AE0E045", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3E42820479FADF666581B0704FA4AF901AE0E045", lpFilePart=0x0) returned 0x85 [0158.987] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0158.987] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3E42820479FADF666581B0704FA4AF901AE0E045" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\3e42820479fadf666581b0704fa4af901ae0e045"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0158.989] GetFileType (hFile=0x444) returned 0x1 [0158.989] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0158.989] GetFileType (hFile=0x444) returned 0x1 [0158.989] WriteFile (in: hFile=0x444, lpBuffer=0x2258a20*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x2258a20*, lpNumberOfBytesWritten=0x3be4d8*=0x80, lpOverlapped=0x0) returned 1 [0158.990] CloseHandle (hObject=0x444) returned 1 [0158.990] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3E42820479FADF666581B0704FA4AF901AE0E045", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3E42820479FADF666581B0704FA4AF901AE0E045", lpFilePart=0x0) returned 0x85 [0158.990] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3E42820479FADF666581B0704FA4AF901AE0E045.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3E42820479FADF666581B0704FA4AF901AE0E045.xuy", lpFilePart=0x0) returned 0x89 [0158.990] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0158.990] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3E42820479FADF666581B0704FA4AF901AE0E045" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\3e42820479fadf666581b0704fa4af901ae0e045"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48d30ecb, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x48d30ecb, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x4a9c11e1, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x80)) returned 1 [0158.990] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0158.990] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3E42820479FADF666581B0704FA4AF901AE0E045" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\3e42820479fadf666581b0704fa4af901ae0e045"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3E42820479FADF666581B0704FA4AF901AE0E045.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\3e42820479fadf666581b0704fa4af901ae0e045.xuy")) returned 1 [0158.993] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3EA580E2FD537915B7084615630F0189274B1F60", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3EA580E2FD537915B7084615630F0189274B1F60", lpFilePart=0x0) returned 0x85 [0158.994] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0158.994] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3EA580E2FD537915B7084615630F0189274B1F60" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\3ea580e2fd537915b7084615630f0189274b1f60"), fInfoLevelId=0x0, lpFileInformation=0x2259de0 | out: lpFileInformation=0x2259de0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61577ff1, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x61577ff1, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x61577ff1, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x1130)) returned 1 [0158.994] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0158.994] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3EA580E2FD537915B7084615630F0189274B1F60", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3EA580E2FD537915B7084615630F0189274B1F60", lpFilePart=0x0) returned 0x85 [0158.994] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0158.994] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3EA580E2FD537915B7084615630F0189274B1F60" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\3ea580e2fd537915b7084615630f0189274b1f60"), fInfoLevelId=0x0, lpFileInformation=0x2259fe0 | out: lpFileInformation=0x2259fe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61577ff1, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x61577ff1, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x61577ff1, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x1130)) returned 1 [0158.994] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0158.994] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3EA580E2FD537915B7084615630F0189274B1F60", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3EA580E2FD537915B7084615630F0189274B1F60", lpFilePart=0x0) returned 0x85 [0158.994] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0158.994] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3EA580E2FD537915B7084615630F0189274B1F60" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\3ea580e2fd537915b7084615630f0189274b1f60"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0158.995] GetFileType (hFile=0x444) returned 0x1 [0158.995] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0158.995] GetFileType (hFile=0x444) returned 0x1 [0158.995] ReadFile (in: hFile=0x444, lpBuffer=0x225c510, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x225c510*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0159.022] CloseHandle (hObject=0x444) returned 1 [0159.022] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3EA580E2FD537915B7084615630F0189274B1F60", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3EA580E2FD537915B7084615630F0189274B1F60", lpFilePart=0x0) returned 0x85 [0159.023] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0159.023] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3EA580E2FD537915B7084615630F0189274B1F60" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\3ea580e2fd537915b7084615630f0189274b1f60"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0159.023] GetFileType (hFile=0x444) returned 0x1 [0159.023] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0159.023] GetFileType (hFile=0x444) returned 0x1 [0159.023] WriteFile (in: hFile=0x444, lpBuffer=0x225a1c0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x225a1c0*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0159.023] CloseHandle (hObject=0x444) returned 1 [0159.023] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3EA580E2FD537915B7084615630F0189274B1F60", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3EA580E2FD537915B7084615630F0189274B1F60", lpFilePart=0x0) returned 0x85 [0159.024] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3EA580E2FD537915B7084615630F0189274B1F60.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3EA580E2FD537915B7084615630F0189274B1F60.xuy", lpFilePart=0x0) returned 0x89 [0159.024] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0159.024] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3EA580E2FD537915B7084615630F0189274B1F60" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\3ea580e2fd537915b7084615630f0189274b1f60"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61577ff1, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x61577ff1, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x4aa33562, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0159.024] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0159.024] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3EA580E2FD537915B7084615630F0189274B1F60" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\3ea580e2fd537915b7084615630f0189274b1f60"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3EA580E2FD537915B7084615630F0189274B1F60.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\3ea580e2fd537915b7084615630f0189274b1f60.xuy")) returned 1 [0159.025] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3FAECD8F44CECB41F5586C0DC333275FC173593A", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3FAECD8F44CECB41F5586C0DC333275FC173593A", lpFilePart=0x0) returned 0x85 [0159.025] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0159.025] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3FAECD8F44CECB41F5586C0DC333275FC173593A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\3faecd8f44cecb41f5586c0dc333275fc173593a"), fInfoLevelId=0x0, lpFileInformation=0x22d8ab8 | out: lpFileInformation=0x22d8ab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xddf91dae, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xddf91dae, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xddf944b7, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x52a)) returned 1 [0159.025] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0159.025] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3FAECD8F44CECB41F5586C0DC333275FC173593A", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3FAECD8F44CECB41F5586C0DC333275FC173593A", lpFilePart=0x0) returned 0x85 [0159.025] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0159.025] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3FAECD8F44CECB41F5586C0DC333275FC173593A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\3faecd8f44cecb41f5586c0dc333275fc173593a"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0159.025] GetFileType (hFile=0x444) returned 0x1 [0159.026] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0159.026] GetFileType (hFile=0x444) returned 0x1 [0159.026] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x52a [0159.026] ReadFile (in: hFile=0x444, lpBuffer=0x22d9400, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x22d9400*, lpNumberOfBytesRead=0x3be5c8*=0x52a, lpOverlapped=0x0) returned 1 [0159.036] CloseHandle (hObject=0x444) returned 1 [0159.119] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3FAECD8F44CECB41F5586C0DC333275FC173593A", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3FAECD8F44CECB41F5586C0DC333275FC173593A", lpFilePart=0x0) returned 0x85 [0159.119] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0159.119] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3FAECD8F44CECB41F5586C0DC333275FC173593A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\3faecd8f44cecb41f5586c0dc333275fc173593a"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0159.121] GetFileType (hFile=0x444) returned 0x1 [0159.121] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0159.121] GetFileType (hFile=0x444) returned 0x1 [0159.121] WriteFile (in: hFile=0x444, lpBuffer=0x2351e80*, nNumberOfBytesToWrite=0x530, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x2351e80*, lpNumberOfBytesWritten=0x3be4d8*=0x530, lpOverlapped=0x0) returned 1 [0159.122] CloseHandle (hObject=0x444) returned 1 [0159.122] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3FAECD8F44CECB41F5586C0DC333275FC173593A", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3FAECD8F44CECB41F5586C0DC333275FC173593A", lpFilePart=0x0) returned 0x85 [0159.122] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3FAECD8F44CECB41F5586C0DC333275FC173593A.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3FAECD8F44CECB41F5586C0DC333275FC173593A.xuy", lpFilePart=0x0) returned 0x89 [0159.122] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0159.122] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3FAECD8F44CECB41F5586C0DC333275FC173593A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\3faecd8f44cecb41f5586c0dc333275fc173593a"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xddf91dae, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xddf91dae, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x4ab1841a, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x530)) returned 1 [0159.122] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0159.122] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3FAECD8F44CECB41F5586C0DC333275FC173593A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\3faecd8f44cecb41f5586c0dc333275fc173593a"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3FAECD8F44CECB41F5586C0DC333275FC173593A.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\3faecd8f44cecb41f5586c0dc333275fc173593a.xuy")) returned 1 [0159.123] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3FB6DE7747DC1B658385638D277CF2D620D232E4", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3FB6DE7747DC1B658385638D277CF2D620D232E4", lpFilePart=0x0) returned 0x85 [0159.123] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0159.123] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3FB6DE7747DC1B658385638D277CF2D620D232E4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\3fb6de7747dc1b658385638d277cf2d620d232e4"), fInfoLevelId=0x0, lpFileInformation=0x2353240 | out: lpFileInformation=0x2353240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5488ae0f, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x5488ae0f, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x5488ae0f, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x3529)) returned 1 [0159.123] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0159.123] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3FB6DE7747DC1B658385638D277CF2D620D232E4", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3FB6DE7747DC1B658385638D277CF2D620D232E4", lpFilePart=0x0) returned 0x85 [0159.123] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0159.123] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3FB6DE7747DC1B658385638D277CF2D620D232E4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\3fb6de7747dc1b658385638d277cf2d620d232e4"), fInfoLevelId=0x0, lpFileInformation=0x2353440 | out: lpFileInformation=0x2353440*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5488ae0f, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x5488ae0f, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x5488ae0f, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x3529)) returned 1 [0159.124] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0159.124] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3FB6DE7747DC1B658385638D277CF2D620D232E4", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3FB6DE7747DC1B658385638D277CF2D620D232E4", lpFilePart=0x0) returned 0x85 [0159.124] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0159.124] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3FB6DE7747DC1B658385638D277CF2D620D232E4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\3fb6de7747dc1b658385638d277cf2d620d232e4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0159.124] GetFileType (hFile=0x444) returned 0x1 [0159.124] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0159.124] GetFileType (hFile=0x444) returned 0x1 [0159.124] ReadFile (in: hFile=0x444, lpBuffer=0x2355970, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x2355970*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0159.171] CloseHandle (hObject=0x444) returned 1 [0159.171] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3FB6DE7747DC1B658385638D277CF2D620D232E4", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3FB6DE7747DC1B658385638D277CF2D620D232E4", lpFilePart=0x0) returned 0x85 [0159.171] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0159.171] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3FB6DE7747DC1B658385638D277CF2D620D232E4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\3fb6de7747dc1b658385638d277cf2d620d232e4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0159.171] GetFileType (hFile=0x444) returned 0x1 [0159.171] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0159.171] GetFileType (hFile=0x444) returned 0x1 [0159.171] WriteFile (in: hFile=0x444, lpBuffer=0x2185c28*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x2185c28*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0159.172] CloseHandle (hObject=0x444) returned 1 [0159.172] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3FB6DE7747DC1B658385638D277CF2D620D232E4", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3FB6DE7747DC1B658385638D277CF2D620D232E4", lpFilePart=0x0) returned 0x85 [0159.172] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3FB6DE7747DC1B658385638D277CF2D620D232E4.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3FB6DE7747DC1B658385638D277CF2D620D232E4.xuy", lpFilePart=0x0) returned 0x89 [0159.172] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0159.172] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3FB6DE7747DC1B658385638D277CF2D620D232E4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\3fb6de7747dc1b658385638d277cf2d620d232e4"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5488ae0f, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x5488ae0f, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x4ab8a96e, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x3529)) returned 1 [0159.172] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0159.172] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3FB6DE7747DC1B658385638D277CF2D620D232E4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\3fb6de7747dc1b658385638d277cf2d620d232e4"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3FB6DE7747DC1B658385638D277CF2D620D232E4.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\3fb6de7747dc1b658385638d277cf2d620d232e4.xuy")) returned 1 [0159.173] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\400E86363026A9AC2DCD2221C145C6370E3E8EDA", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\400E86363026A9AC2DCD2221C145C6370E3E8EDA", lpFilePart=0x0) returned 0x85 [0159.173] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0159.173] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\400E86363026A9AC2DCD2221C145C6370E3E8EDA" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\400e86363026a9ac2dcd2221c145c6370e3e8eda"), fInfoLevelId=0x0, lpFileInformation=0x21d1f00 | out: lpFileInformation=0x21d1f00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89a4e9f2, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x89a4e9f2, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x89a537e3, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x4d2)) returned 1 [0159.174] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0159.174] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\400E86363026A9AC2DCD2221C145C6370E3E8EDA", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\400E86363026A9AC2DCD2221C145C6370E3E8EDA", lpFilePart=0x0) returned 0x85 [0159.174] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0159.174] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\400E86363026A9AC2DCD2221C145C6370E3E8EDA" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\400e86363026a9ac2dcd2221c145c6370e3e8eda"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0159.174] GetFileType (hFile=0x444) returned 0x1 [0159.174] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0159.174] GetFileType (hFile=0x444) returned 0x1 [0159.174] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x4d2 [0159.174] ReadFile (in: hFile=0x444, lpBuffer=0x21d27f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x21d27f0*, lpNumberOfBytesRead=0x3be5c8*=0x4d2, lpOverlapped=0x0) returned 1 [0159.188] CloseHandle (hObject=0x444) returned 1 [0159.198] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\400E86363026A9AC2DCD2221C145C6370E3E8EDA", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\400E86363026A9AC2DCD2221C145C6370E3E8EDA", lpFilePart=0x0) returned 0x85 [0159.198] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0159.198] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\400E86363026A9AC2DCD2221C145C6370E3E8EDA" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\400e86363026a9ac2dcd2221c145c6370e3e8eda"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0159.200] GetFileType (hFile=0x444) returned 0x1 [0159.200] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0159.200] GetFileType (hFile=0x444) returned 0x1 [0159.200] WriteFile (in: hFile=0x444, lpBuffer=0x224b0e8*, nNumberOfBytesToWrite=0x4e0, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x224b0e8*, lpNumberOfBytesWritten=0x3be4d8*=0x4e0, lpOverlapped=0x0) returned 1 [0159.201] CloseHandle (hObject=0x444) returned 1 [0159.201] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\400E86363026A9AC2DCD2221C145C6370E3E8EDA", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\400E86363026A9AC2DCD2221C145C6370E3E8EDA", lpFilePart=0x0) returned 0x85 [0159.201] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\400E86363026A9AC2DCD2221C145C6370E3E8EDA.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\400E86363026A9AC2DCD2221C145C6370E3E8EDA.xuy", lpFilePart=0x0) returned 0x89 [0159.201] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0159.201] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\400E86363026A9AC2DCD2221C145C6370E3E8EDA" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\400e86363026a9ac2dcd2221c145c6370e3e8eda"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89a4e9f2, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x89a4e9f2, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x4abd71da, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x4e0)) returned 1 [0159.202] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0159.202] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\400E86363026A9AC2DCD2221C145C6370E3E8EDA" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\400e86363026a9ac2dcd2221c145c6370e3e8eda"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\400E86363026A9AC2DCD2221C145C6370E3E8EDA.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\400e86363026a9ac2dcd2221c145c6370e3e8eda.xuy")) returned 1 [0159.204] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4030DFFE47D5B75257AA7A8C0A26B737E2F00FF3", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4030DFFE47D5B75257AA7A8C0A26B737E2F00FF3", lpFilePart=0x0) returned 0x85 [0159.204] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0159.204] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4030DFFE47D5B75257AA7A8C0A26B737E2F00FF3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4030dffe47d5b75257aa7a8c0a26b737e2f00ff3"), fInfoLevelId=0x0, lpFileInformation=0x224c4a8 | out: lpFileInformation=0x224c4a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89ad005d, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x89ad005d, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x8b6a4844, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x2137)) returned 1 [0159.204] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0159.204] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4030DFFE47D5B75257AA7A8C0A26B737E2F00FF3", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4030DFFE47D5B75257AA7A8C0A26B737E2F00FF3", lpFilePart=0x0) returned 0x85 [0159.204] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0159.204] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4030DFFE47D5B75257AA7A8C0A26B737E2F00FF3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4030dffe47d5b75257aa7a8c0a26b737e2f00ff3"), fInfoLevelId=0x0, lpFileInformation=0x224c6a8 | out: lpFileInformation=0x224c6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89ad005d, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x89ad005d, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x8b6a4844, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x2137)) returned 1 [0159.204] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0159.204] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4030DFFE47D5B75257AA7A8C0A26B737E2F00FF3", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4030DFFE47D5B75257AA7A8C0A26B737E2F00FF3", lpFilePart=0x0) returned 0x85 [0159.204] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0159.205] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4030DFFE47D5B75257AA7A8C0A26B737E2F00FF3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4030dffe47d5b75257aa7a8c0a26b737e2f00ff3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0159.206] GetFileType (hFile=0x444) returned 0x1 [0159.206] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0159.206] GetFileType (hFile=0x444) returned 0x1 [0159.206] ReadFile (in: hFile=0x444, lpBuffer=0x224ebd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x224ebd8*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0159.225] CloseHandle (hObject=0x444) returned 1 [0159.225] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4030DFFE47D5B75257AA7A8C0A26B737E2F00FF3", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4030DFFE47D5B75257AA7A8C0A26B737E2F00FF3", lpFilePart=0x0) returned 0x85 [0159.225] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0159.225] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4030DFFE47D5B75257AA7A8C0A26B737E2F00FF3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4030dffe47d5b75257aa7a8c0a26b737e2f00ff3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0159.226] GetFileType (hFile=0x444) returned 0x1 [0159.226] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0159.226] GetFileType (hFile=0x444) returned 0x1 [0159.226] WriteFile (in: hFile=0x444, lpBuffer=0x224c888*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x224c888*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0159.226] CloseHandle (hObject=0x444) returned 1 [0159.227] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4030DFFE47D5B75257AA7A8C0A26B737E2F00FF3", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4030DFFE47D5B75257AA7A8C0A26B737E2F00FF3", lpFilePart=0x0) returned 0x85 [0159.227] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4030DFFE47D5B75257AA7A8C0A26B737E2F00FF3.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4030DFFE47D5B75257AA7A8C0A26B737E2F00FF3.xuy", lpFilePart=0x0) returned 0x89 [0159.227] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0159.227] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4030DFFE47D5B75257AA7A8C0A26B737E2F00FF3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4030dffe47d5b75257aa7a8c0a26b737e2f00ff3"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89ad005d, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x89ad005d, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x4ac2342f, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2137)) returned 1 [0159.227] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0159.227] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4030DFFE47D5B75257AA7A8C0A26B737E2F00FF3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4030dffe47d5b75257aa7a8c0a26b737e2f00ff3"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4030DFFE47D5B75257AA7A8C0A26B737E2F00FF3.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4030dffe47d5b75257aa7a8c0a26b737e2f00ff3.xuy")) returned 1 [0159.229] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\40645D76E586E360D63982B2D4525920F0CF3060", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\40645D76E586E360D63982B2D4525920F0CF3060", lpFilePart=0x0) returned 0x85 [0159.229] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0159.229] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\40645D76E586E360D63982B2D4525920F0CF3060" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\40645d76e586e360d63982b2d4525920f0cf3060"), fInfoLevelId=0x0, lpFileInformation=0x22cb180 | out: lpFileInformation=0x22cb180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x615c4498, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x615c4498, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x615c4498, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xf12)) returned 1 [0159.229] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0159.229] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\40645D76E586E360D63982B2D4525920F0CF3060", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\40645D76E586E360D63982B2D4525920F0CF3060", lpFilePart=0x0) returned 0x85 [0159.229] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0159.229] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\40645D76E586E360D63982B2D4525920F0CF3060" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\40645d76e586e360d63982b2d4525920f0cf3060"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0159.229] GetFileType (hFile=0x444) returned 0x1 [0159.229] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0159.229] GetFileType (hFile=0x444) returned 0x1 [0159.229] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xf12 [0159.229] ReadFile (in: hFile=0x444, lpBuffer=0x22cc4b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x22cc4b0*, lpNumberOfBytesRead=0x3be5c8*=0xf12, lpOverlapped=0x0) returned 1 [0159.231] CloseHandle (hObject=0x444) returned 1 [0159.247] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\40645D76E586E360D63982B2D4525920F0CF3060", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\40645D76E586E360D63982B2D4525920F0CF3060", lpFilePart=0x0) returned 0x85 [0159.247] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0159.248] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\40645D76E586E360D63982B2D4525920F0CF3060" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\40645d76e586e360d63982b2d4525920f0cf3060"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0159.249] GetFileType (hFile=0x444) returned 0x1 [0159.249] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0159.249] GetFileType (hFile=0x444) returned 0x1 [0159.249] WriteFile (in: hFile=0x444, lpBuffer=0x23480e8*, nNumberOfBytesToWrite=0xf20, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x23480e8*, lpNumberOfBytesWritten=0x3be4d8*=0xf20, lpOverlapped=0x0) returned 1 [0159.250] CloseHandle (hObject=0x444) returned 1 [0159.250] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\40645D76E586E360D63982B2D4525920F0CF3060", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\40645D76E586E360D63982B2D4525920F0CF3060", lpFilePart=0x0) returned 0x85 [0159.251] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\40645D76E586E360D63982B2D4525920F0CF3060.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\40645D76E586E360D63982B2D4525920F0CF3060.xuy", lpFilePart=0x0) returned 0x89 [0159.251] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0159.251] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\40645D76E586E360D63982B2D4525920F0CF3060" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\40645d76e586e360d63982b2d4525920f0cf3060"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x615c4498, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x615c4498, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x4ac496a1, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xf20)) returned 1 [0159.251] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0159.251] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\40645D76E586E360D63982B2D4525920F0CF3060" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\40645d76e586e360d63982b2d4525920f0cf3060"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\40645D76E586E360D63982B2D4525920F0CF3060.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\40645d76e586e360d63982b2d4525920f0cf3060.xuy")) returned 1 [0159.252] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\406839CA18775158E58D75B2837624917D7E685C", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\406839CA18775158E58D75B2837624917D7E685C", lpFilePart=0x0) returned 0x85 [0159.252] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0159.252] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\406839CA18775158E58D75B2837624917D7E685C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\406839ca18775158e58d75b2837624917d7e685c"), fInfoLevelId=0x0, lpFileInformation=0x23494a8 | out: lpFileInformation=0x23494a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4579cd89, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x4579cd89, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x4579cd89, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0x8b1e)) returned 1 [0159.252] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0159.252] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\406839CA18775158E58D75B2837624917D7E685C", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\406839CA18775158E58D75B2837624917D7E685C", lpFilePart=0x0) returned 0x85 [0159.253] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0159.253] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\406839CA18775158E58D75B2837624917D7E685C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\406839ca18775158e58d75b2837624917d7e685c"), fInfoLevelId=0x0, lpFileInformation=0x23496a8 | out: lpFileInformation=0x23496a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4579cd89, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x4579cd89, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x4579cd89, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0x8b1e)) returned 1 [0159.253] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0159.253] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\406839CA18775158E58D75B2837624917D7E685C", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\406839CA18775158E58D75B2837624917D7E685C", lpFilePart=0x0) returned 0x85 [0159.253] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0159.253] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\406839CA18775158E58D75B2837624917D7E685C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\406839ca18775158e58d75b2837624917d7e685c"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0159.254] GetFileType (hFile=0x444) returned 0x1 [0159.254] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0159.254] GetFileType (hFile=0x444) returned 0x1 [0159.254] ReadFile (in: hFile=0x444, lpBuffer=0x234bbd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x234bbd8*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0159.325] CloseHandle (hObject=0x444) returned 1 [0159.326] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\406839CA18775158E58D75B2837624917D7E685C", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\406839CA18775158E58D75B2837624917D7E685C", lpFilePart=0x0) returned 0x85 [0159.326] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0159.326] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\406839CA18775158E58D75B2837624917D7E685C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\406839ca18775158e58d75b2837624917d7e685c"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0159.326] GetFileType (hFile=0x444) returned 0x1 [0159.326] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0159.326] GetFileType (hFile=0x444) returned 0x1 [0159.326] WriteFile (in: hFile=0x444, lpBuffer=0x2185c28*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x2185c28*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0159.326] CloseHandle (hObject=0x444) returned 1 [0159.327] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\406839CA18775158E58D75B2837624917D7E685C", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\406839CA18775158E58D75B2837624917D7E685C", lpFilePart=0x0) returned 0x85 [0159.327] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\406839CA18775158E58D75B2837624917D7E685C.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\406839CA18775158E58D75B2837624917D7E685C.xuy", lpFilePart=0x0) returned 0x89 [0159.327] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0159.327] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\406839CA18775158E58D75B2837624917D7E685C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\406839ca18775158e58d75b2837624917d7e685c"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4579cd89, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x4579cd89, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x4ad08199, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x8b1e)) returned 1 [0159.327] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0159.327] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\406839CA18775158E58D75B2837624917D7E685C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\406839ca18775158e58d75b2837624917d7e685c"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\406839CA18775158E58D75B2837624917D7E685C.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\406839ca18775158e58d75b2837624917d7e685c.xuy")) returned 1 [0159.328] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\407EB4DE353DE3AD4E1A29F0E0E84F65C2CE6E3A", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\407EB4DE353DE3AD4E1A29F0E0E84F65C2CE6E3A", lpFilePart=0x0) returned 0x85 [0159.328] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0159.328] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\407EB4DE353DE3AD4E1A29F0E0E84F65C2CE6E3A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\407eb4de353de3ad4e1a29f0e0e84f65c2ce6e3a"), fInfoLevelId=0x0, lpFileInformation=0x21c8180 | out: lpFileInformation=0x21c8180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x489e9afc, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x489e9afc, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x489e9afc, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0x6b5)) returned 1 [0159.328] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0159.329] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\407EB4DE353DE3AD4E1A29F0E0E84F65C2CE6E3A", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\407EB4DE353DE3AD4E1A29F0E0E84F65C2CE6E3A", lpFilePart=0x0) returned 0x85 [0159.329] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0159.329] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\407EB4DE353DE3AD4E1A29F0E0E84F65C2CE6E3A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\407eb4de353de3ad4e1a29f0e0e84f65c2ce6e3a"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0159.329] GetFileType (hFile=0x444) returned 0x1 [0159.329] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0159.329] GetFileType (hFile=0x444) returned 0x1 [0159.329] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x6b5 [0159.329] ReadFile (in: hFile=0x444, lpBuffer=0x21c8c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x21c8c50*, lpNumberOfBytesRead=0x3be5c8*=0x6b5, lpOverlapped=0x0) returned 1 [0159.346] CloseHandle (hObject=0x444) returned 1 [0159.357] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\407EB4DE353DE3AD4E1A29F0E0E84F65C2CE6E3A", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\407EB4DE353DE3AD4E1A29F0E0E84F65C2CE6E3A", lpFilePart=0x0) returned 0x85 [0159.357] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0159.357] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\407EB4DE353DE3AD4E1A29F0E0E84F65C2CE6E3A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\407eb4de353de3ad4e1a29f0e0e84f65c2ce6e3a"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0159.359] GetFileType (hFile=0x444) returned 0x1 [0159.359] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0159.359] GetFileType (hFile=0x444) returned 0x1 [0159.359] WriteFile (in: hFile=0x444, lpBuffer=0x2241ea8*, nNumberOfBytesToWrite=0x6c0, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x2241ea8*, lpNumberOfBytesWritten=0x3be4d8*=0x6c0, lpOverlapped=0x0) returned 1 [0159.360] CloseHandle (hObject=0x444) returned 1 [0159.360] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\407EB4DE353DE3AD4E1A29F0E0E84F65C2CE6E3A", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\407EB4DE353DE3AD4E1A29F0E0E84F65C2CE6E3A", lpFilePart=0x0) returned 0x85 [0159.360] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\407EB4DE353DE3AD4E1A29F0E0E84F65C2CE6E3A.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\407EB4DE353DE3AD4E1A29F0E0E84F65C2CE6E3A.xuy", lpFilePart=0x0) returned 0x89 [0159.360] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0159.360] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\407EB4DE353DE3AD4E1A29F0E0E84F65C2CE6E3A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\407eb4de353de3ad4e1a29f0e0e84f65c2ce6e3a"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x489e9afc, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x489e9afc, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x4ad5489a, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x6c0)) returned 1 [0159.360] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0159.360] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\407EB4DE353DE3AD4E1A29F0E0E84F65C2CE6E3A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\407eb4de353de3ad4e1a29f0e0e84f65c2ce6e3a"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\407EB4DE353DE3AD4E1A29F0E0E84F65C2CE6E3A.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\407eb4de353de3ad4e1a29f0e0e84f65c2ce6e3a.xuy")) returned 1 [0159.361] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\41367369B0154D1D2566CC216318C71115E089A2", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\41367369B0154D1D2566CC216318C71115E089A2", lpFilePart=0x0) returned 0x85 [0159.361] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0159.361] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\41367369B0154D1D2566CC216318C71115E089A2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\41367369b0154d1d2566cc216318c71115e089a2"), fInfoLevelId=0x0, lpFileInformation=0x2243268 | out: lpFileInformation=0x2243268*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fdf3824, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3fdf3824, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x41b7f798, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x5834)) returned 1 [0159.361] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0159.361] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\41367369B0154D1D2566CC216318C71115E089A2", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\41367369B0154D1D2566CC216318C71115E089A2", lpFilePart=0x0) returned 0x85 [0159.361] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0159.361] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\41367369B0154D1D2566CC216318C71115E089A2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\41367369b0154d1d2566cc216318c71115e089a2"), fInfoLevelId=0x0, lpFileInformation=0x2243468 | out: lpFileInformation=0x2243468*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fdf3824, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3fdf3824, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x41b7f798, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x5834)) returned 1 [0159.361] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0159.362] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\41367369B0154D1D2566CC216318C71115E089A2", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\41367369B0154D1D2566CC216318C71115E089A2", lpFilePart=0x0) returned 0x85 [0159.362] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0159.362] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\41367369B0154D1D2566CC216318C71115E089A2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\41367369b0154d1d2566cc216318c71115e089a2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0159.362] GetFileType (hFile=0x444) returned 0x1 [0159.362] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0159.362] GetFileType (hFile=0x444) returned 0x1 [0159.362] ReadFile (in: hFile=0x444, lpBuffer=0x2245998, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x2245998*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0159.374] CloseHandle (hObject=0x444) returned 1 [0159.375] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\41367369B0154D1D2566CC216318C71115E089A2", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\41367369B0154D1D2566CC216318C71115E089A2", lpFilePart=0x0) returned 0x85 [0159.375] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0159.375] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\41367369B0154D1D2566CC216318C71115E089A2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\41367369b0154d1d2566cc216318c71115e089a2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0159.375] GetFileType (hFile=0x444) returned 0x1 [0159.375] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0159.375] GetFileType (hFile=0x444) returned 0x1 [0159.375] WriteFile (in: hFile=0x444, lpBuffer=0x2243648*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x2243648*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0159.375] CloseHandle (hObject=0x444) returned 1 [0159.375] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\41367369B0154D1D2566CC216318C71115E089A2", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\41367369B0154D1D2566CC216318C71115E089A2", lpFilePart=0x0) returned 0x85 [0159.375] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\41367369B0154D1D2566CC216318C71115E089A2.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\41367369B0154D1D2566CC216318C71115E089A2.xuy", lpFilePart=0x0) returned 0x89 [0159.375] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0159.375] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\41367369B0154D1D2566CC216318C71115E089A2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\41367369b0154d1d2566cc216318c71115e089a2"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fdf3824, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3fdf3824, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x4ad7a849, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x5834)) returned 1 [0159.376] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0159.376] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\41367369B0154D1D2566CC216318C71115E089A2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\41367369b0154d1d2566cc216318c71115e089a2"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\41367369B0154D1D2566CC216318C71115E089A2.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\41367369b0154d1d2566cc216318c71115e089a2.xuy")) returned 1 [0159.377] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4238786CB87B503754EE13346F30AE3FCE28174F", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4238786CB87B503754EE13346F30AE3FCE28174F", lpFilePart=0x0) returned 0x85 [0159.377] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0159.377] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4238786CB87B503754EE13346F30AE3FCE28174F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4238786cb87b503754ee13346f30ae3fce28174f"), fInfoLevelId=0x0, lpFileInformation=0x22c1f40 | out: lpFileInformation=0x22c1f40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4e89099, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc4e89099, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xc50c5407, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x32fc)) returned 1 [0159.377] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0159.377] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4238786CB87B503754EE13346F30AE3FCE28174F", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4238786CB87B503754EE13346F30AE3FCE28174F", lpFilePart=0x0) returned 0x85 [0159.377] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0159.377] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4238786CB87B503754EE13346F30AE3FCE28174F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4238786cb87b503754ee13346f30ae3fce28174f"), fInfoLevelId=0x0, lpFileInformation=0x22c2140 | out: lpFileInformation=0x22c2140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4e89099, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc4e89099, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xc50c5407, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x32fc)) returned 1 [0159.377] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0159.377] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4238786CB87B503754EE13346F30AE3FCE28174F", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4238786CB87B503754EE13346F30AE3FCE28174F", lpFilePart=0x0) returned 0x85 [0159.377] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0159.377] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4238786CB87B503754EE13346F30AE3FCE28174F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4238786cb87b503754ee13346f30ae3fce28174f"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0159.378] GetFileType (hFile=0x444) returned 0x1 [0159.378] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0159.378] GetFileType (hFile=0x444) returned 0x1 [0159.378] ReadFile (in: hFile=0x444, lpBuffer=0x22c4670, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x22c4670*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0159.410] CloseHandle (hObject=0x444) returned 1 [0159.410] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4238786CB87B503754EE13346F30AE3FCE28174F", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4238786CB87B503754EE13346F30AE3FCE28174F", lpFilePart=0x0) returned 0x85 [0159.410] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0159.410] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4238786CB87B503754EE13346F30AE3FCE28174F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4238786cb87b503754ee13346f30ae3fce28174f"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0159.411] GetFileType (hFile=0x444) returned 0x1 [0159.411] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0159.411] GetFileType (hFile=0x444) returned 0x1 [0159.411] WriteFile (in: hFile=0x444, lpBuffer=0x22c2320*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x22c2320*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0159.411] CloseHandle (hObject=0x444) returned 1 [0159.411] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4238786CB87B503754EE13346F30AE3FCE28174F", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4238786CB87B503754EE13346F30AE3FCE28174F", lpFilePart=0x0) returned 0x85 [0159.411] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4238786CB87B503754EE13346F30AE3FCE28174F.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4238786CB87B503754EE13346F30AE3FCE28174F.xuy", lpFilePart=0x0) returned 0x89 [0159.411] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0159.411] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4238786CB87B503754EE13346F30AE3FCE28174F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4238786cb87b503754ee13346f30ae3fce28174f"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4e89099, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc4e89099, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x4ade6cf7, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x32fc)) returned 1 [0159.411] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0159.411] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4238786CB87B503754EE13346F30AE3FCE28174F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4238786cb87b503754ee13346f30ae3fce28174f"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4238786CB87B503754EE13346F30AE3FCE28174F.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4238786cb87b503754ee13346f30ae3fce28174f.xuy")) returned 1 [0159.413] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\425AB3A135AC92C5F7A29092F686A777B30A8C0A", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\425AB3A135AC92C5F7A29092F686A777B30A8C0A", lpFilePart=0x0) returned 0x85 [0159.413] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0159.413] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\425AB3A135AC92C5F7A29092F686A777B30A8C0A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\425ab3a135ac92c5f7a29092f686a777b30a8c0a"), fInfoLevelId=0x0, lpFileInformation=0x2340c18 | out: lpFileInformation=0x2340c18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f78856c, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3f78856c, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x3f7c7d20, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0xe50)) returned 1 [0159.414] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0159.414] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\425AB3A135AC92C5F7A29092F686A777B30A8C0A", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\425AB3A135AC92C5F7A29092F686A777B30A8C0A", lpFilePart=0x0) returned 0x85 [0159.414] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0159.414] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\425AB3A135AC92C5F7A29092F686A777B30A8C0A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\425ab3a135ac92c5f7a29092f686a777b30a8c0a"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0159.414] GetFileType (hFile=0x444) returned 0x1 [0159.414] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0159.415] GetFileType (hFile=0x444) returned 0x1 [0159.415] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xe50 [0159.415] ReadFile (in: hFile=0x444, lpBuffer=0x2341e80, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x2341e80*, lpNumberOfBytesRead=0x3be5c8*=0xe50, lpOverlapped=0x0) returned 1 [0159.416] CloseHandle (hObject=0x444) returned 1 [0159.457] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\425AB3A135AC92C5F7A29092F686A777B30A8C0A", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\425AB3A135AC92C5F7A29092F686A777B30A8C0A", lpFilePart=0x0) returned 0x85 [0159.457] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0159.457] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\425AB3A135AC92C5F7A29092F686A777B30A8C0A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\425ab3a135ac92c5f7a29092f686a777b30a8c0a"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0159.459] GetFileType (hFile=0x444) returned 0x1 [0159.459] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0159.459] GetFileType (hFile=0x444) returned 0x1 [0159.459] WriteFile (in: hFile=0x444, lpBuffer=0x21bb370*, nNumberOfBytesToWrite=0xe60, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x21bb370*, lpNumberOfBytesWritten=0x3be4d8*=0xe60, lpOverlapped=0x0) returned 1 [0159.460] CloseHandle (hObject=0x444) returned 1 [0159.460] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\425AB3A135AC92C5F7A29092F686A777B30A8C0A", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\425AB3A135AC92C5F7A29092F686A777B30A8C0A", lpFilePart=0x0) returned 0x85 [0159.460] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\425AB3A135AC92C5F7A29092F686A777B30A8C0A.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\425AB3A135AC92C5F7A29092F686A777B30A8C0A.xuy", lpFilePart=0x0) returned 0x89 [0159.460] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0159.460] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\425AB3A135AC92C5F7A29092F686A777B30A8C0A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\425ab3a135ac92c5f7a29092f686a777b30a8c0a"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f78856c, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3f78856c, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x4ae5b247, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xe60)) returned 1 [0159.460] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0159.460] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\425AB3A135AC92C5F7A29092F686A777B30A8C0A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\425ab3a135ac92c5f7a29092f686a777b30a8c0a"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\425AB3A135AC92C5F7A29092F686A777B30A8C0A.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\425ab3a135ac92c5f7a29092f686a777b30a8c0a.xuy")) returned 1 [0159.461] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\42C23BB7242DFE074931A302B5BEB9B1D73B0BA5", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\42C23BB7242DFE074931A302B5BEB9B1D73B0BA5", lpFilePart=0x0) returned 0x85 [0159.461] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0159.462] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\42C23BB7242DFE074931A302B5BEB9B1D73B0BA5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\42c23bb7242dfe074931a302b5beb9b1d73b0ba5"), fInfoLevelId=0x0, lpFileInformation=0x21bc730 | out: lpFileInformation=0x21bc730*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x893759f7, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x893759f7, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x89378119, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x2d3e)) returned 1 [0159.463] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0159.463] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\42C23BB7242DFE074931A302B5BEB9B1D73B0BA5", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\42C23BB7242DFE074931A302B5BEB9B1D73B0BA5", lpFilePart=0x0) returned 0x85 [0159.463] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0159.463] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\42C23BB7242DFE074931A302B5BEB9B1D73B0BA5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\42c23bb7242dfe074931a302b5beb9b1d73b0ba5"), fInfoLevelId=0x0, lpFileInformation=0x21bc930 | out: lpFileInformation=0x21bc930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x893759f7, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x893759f7, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x89378119, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x2d3e)) returned 1 [0159.463] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0159.463] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\42C23BB7242DFE074931A302B5BEB9B1D73B0BA5", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\42C23BB7242DFE074931A302B5BEB9B1D73B0BA5", lpFilePart=0x0) returned 0x85 [0159.463] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0159.463] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\42C23BB7242DFE074931A302B5BEB9B1D73B0BA5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\42c23bb7242dfe074931a302b5beb9b1d73b0ba5"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0159.464] GetFileType (hFile=0x444) returned 0x1 [0159.464] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0159.464] GetFileType (hFile=0x444) returned 0x1 [0159.464] ReadFile (in: hFile=0x444, lpBuffer=0x21bee60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x21bee60*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0159.476] CloseHandle (hObject=0x444) returned 1 [0159.476] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\42C23BB7242DFE074931A302B5BEB9B1D73B0BA5", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\42C23BB7242DFE074931A302B5BEB9B1D73B0BA5", lpFilePart=0x0) returned 0x85 [0159.476] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0159.476] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\42C23BB7242DFE074931A302B5BEB9B1D73B0BA5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\42c23bb7242dfe074931a302b5beb9b1d73b0ba5"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0159.476] GetFileType (hFile=0x444) returned 0x1 [0159.476] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0159.476] GetFileType (hFile=0x444) returned 0x1 [0159.476] WriteFile (in: hFile=0x444, lpBuffer=0x21bcb10*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x21bcb10*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0159.477] CloseHandle (hObject=0x444) returned 1 [0159.477] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\42C23BB7242DFE074931A302B5BEB9B1D73B0BA5", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\42C23BB7242DFE074931A302B5BEB9B1D73B0BA5", lpFilePart=0x0) returned 0x85 [0159.477] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\42C23BB7242DFE074931A302B5BEB9B1D73B0BA5.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\42C23BB7242DFE074931A302B5BEB9B1D73B0BA5.xuy", lpFilePart=0x0) returned 0x89 [0159.477] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0159.477] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\42C23BB7242DFE074931A302B5BEB9B1D73B0BA5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\42c23bb7242dfe074931a302b5beb9b1d73b0ba5"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x893759f7, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x893759f7, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x4ae81596, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2d3e)) returned 1 [0159.477] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0159.477] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\42C23BB7242DFE074931A302B5BEB9B1D73B0BA5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\42c23bb7242dfe074931a302b5beb9b1d73b0ba5"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\42C23BB7242DFE074931A302B5BEB9B1D73B0BA5.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\42c23bb7242dfe074931a302b5beb9b1d73b0ba5.xuy")) returned 1 [0159.478] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\431BDCA04B51BE586DFCF48431166463879B3DBF", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\431BDCA04B51BE586DFCF48431166463879B3DBF", lpFilePart=0x0) returned 0x85 [0159.479] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0159.479] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\431BDCA04B51BE586DFCF48431166463879B3DBF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\431bdca04b51be586dfcf48431166463879b3dbf"), fInfoLevelId=0x0, lpFileInformation=0x223b408 | out: lpFileInformation=0x223b408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74cbff94, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x74cbff94, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x74cbff94, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0x528)) returned 1 [0159.479] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0159.479] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\431BDCA04B51BE586DFCF48431166463879B3DBF", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\431BDCA04B51BE586DFCF48431166463879B3DBF", lpFilePart=0x0) returned 0x85 [0159.479] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0159.479] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\431BDCA04B51BE586DFCF48431166463879B3DBF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\431bdca04b51be586dfcf48431166463879b3dbf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0159.479] GetFileType (hFile=0x444) returned 0x1 [0159.479] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0159.479] GetFileType (hFile=0x444) returned 0x1 [0159.479] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x528 [0159.479] ReadFile (in: hFile=0x444, lpBuffer=0x223bd48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x223bd48*, lpNumberOfBytesRead=0x3be5c8*=0x528, lpOverlapped=0x0) returned 1 [0159.480] CloseHandle (hObject=0x444) returned 1 [0159.491] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\431BDCA04B51BE586DFCF48431166463879B3DBF", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\431BDCA04B51BE586DFCF48431166463879B3DBF", lpFilePart=0x0) returned 0x85 [0159.491] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0159.491] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\431BDCA04B51BE586DFCF48431166463879B3DBF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\431bdca04b51be586dfcf48431166463879b3dbf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0159.492] GetFileType (hFile=0x444) returned 0x1 [0159.492] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0159.492] GetFileType (hFile=0x444) returned 0x1 [0159.492] WriteFile (in: hFile=0x444, lpBuffer=0x22b47c8*, nNumberOfBytesToWrite=0x530, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x22b47c8*, lpNumberOfBytesWritten=0x3be4d8*=0x530, lpOverlapped=0x0) returned 1 [0159.493] CloseHandle (hObject=0x444) returned 1 [0159.493] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\431BDCA04B51BE586DFCF48431166463879B3DBF", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\431BDCA04B51BE586DFCF48431166463879B3DBF", lpFilePart=0x0) returned 0x85 [0159.493] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\431BDCA04B51BE586DFCF48431166463879B3DBF.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\431BDCA04B51BE586DFCF48431166463879B3DBF.xuy", lpFilePart=0x0) returned 0x89 [0159.493] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0159.493] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\431BDCA04B51BE586DFCF48431166463879B3DBF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\431bdca04b51be586dfcf48431166463879b3dbf"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74cbff94, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x74cbff94, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x4aea7858, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x530)) returned 1 [0159.493] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0159.493] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\431BDCA04B51BE586DFCF48431166463879B3DBF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\431bdca04b51be586dfcf48431166463879b3dbf"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\431BDCA04B51BE586DFCF48431166463879B3DBF.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\431bdca04b51be586dfcf48431166463879b3dbf.xuy")) returned 1 [0159.495] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\434A5C8B5D0BEF67CEEB6076803A286CAE99C8C9", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\434A5C8B5D0BEF67CEEB6076803A286CAE99C8C9", lpFilePart=0x0) returned 0x85 [0159.495] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0159.495] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\434A5C8B5D0BEF67CEEB6076803A286CAE99C8C9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\434a5c8b5d0bef67ceeb6076803a286cae99c8c9"), fInfoLevelId=0x0, lpFileInformation=0x22b5b88 | out: lpFileInformation=0x22b5b88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x548b1083, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x548b1083, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x548b1083, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x4c30)) returned 1 [0159.495] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0159.495] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\434A5C8B5D0BEF67CEEB6076803A286CAE99C8C9", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\434A5C8B5D0BEF67CEEB6076803A286CAE99C8C9", lpFilePart=0x0) returned 0x85 [0159.495] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0159.495] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\434A5C8B5D0BEF67CEEB6076803A286CAE99C8C9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\434a5c8b5d0bef67ceeb6076803a286cae99c8c9"), fInfoLevelId=0x0, lpFileInformation=0x22b5d88 | out: lpFileInformation=0x22b5d88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x548b1083, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x548b1083, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x548b1083, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x4c30)) returned 1 [0159.496] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0159.496] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\434A5C8B5D0BEF67CEEB6076803A286CAE99C8C9", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\434A5C8B5D0BEF67CEEB6076803A286CAE99C8C9", lpFilePart=0x0) returned 0x85 [0159.496] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0159.496] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\434A5C8B5D0BEF67CEEB6076803A286CAE99C8C9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\434a5c8b5d0bef67ceeb6076803a286cae99c8c9"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0159.496] GetFileType (hFile=0x444) returned 0x1 [0159.496] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0159.496] GetFileType (hFile=0x444) returned 0x1 [0159.497] ReadFile (in: hFile=0x444, lpBuffer=0x22b82b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x22b82b8*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0159.509] CloseHandle (hObject=0x444) returned 1 [0159.509] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\434A5C8B5D0BEF67CEEB6076803A286CAE99C8C9", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\434A5C8B5D0BEF67CEEB6076803A286CAE99C8C9", lpFilePart=0x0) returned 0x85 [0159.509] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0159.510] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\434A5C8B5D0BEF67CEEB6076803A286CAE99C8C9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\434a5c8b5d0bef67ceeb6076803a286cae99c8c9"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0159.510] GetFileType (hFile=0x444) returned 0x1 [0159.510] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0159.510] GetFileType (hFile=0x444) returned 0x1 [0159.510] WriteFile (in: hFile=0x444, lpBuffer=0x22b5f68*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x22b5f68*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0159.510] CloseHandle (hObject=0x444) returned 1 [0159.510] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\434A5C8B5D0BEF67CEEB6076803A286CAE99C8C9", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\434A5C8B5D0BEF67CEEB6076803A286CAE99C8C9", lpFilePart=0x0) returned 0x85 [0159.510] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\434A5C8B5D0BEF67CEEB6076803A286CAE99C8C9.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\434A5C8B5D0BEF67CEEB6076803A286CAE99C8C9.xuy", lpFilePart=0x0) returned 0x89 [0159.510] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0159.510] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\434A5C8B5D0BEF67CEEB6076803A286CAE99C8C9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\434a5c8b5d0bef67ceeb6076803a286cae99c8c9"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x548b1083, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x548b1083, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x4aecdac6, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x4c30)) returned 1 [0159.510] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0159.510] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\434A5C8B5D0BEF67CEEB6076803A286CAE99C8C9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\434a5c8b5d0bef67ceeb6076803a286cae99c8c9"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\434A5C8B5D0BEF67CEEB6076803A286CAE99C8C9.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\434a5c8b5d0bef67ceeb6076803a286cae99c8c9.xuy")) returned 1 [0159.512] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\43686105AC844B29A19E4AD788A5ABBD2714FC75", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\43686105AC844B29A19E4AD788A5ABBD2714FC75", lpFilePart=0x0) returned 0x85 [0159.512] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0159.512] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\43686105AC844B29A19E4AD788A5ABBD2714FC75" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\43686105ac844b29a19e4ad788a5abbd2714fc75"), fInfoLevelId=0x0, lpFileInformation=0x2334860 | out: lpFileInformation=0x2334860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7da4ec60, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x7da4ec60, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x7da4ec60, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0xa3a)) returned 1 [0159.512] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0159.512] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\43686105AC844B29A19E4AD788A5ABBD2714FC75", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\43686105AC844B29A19E4AD788A5ABBD2714FC75", lpFilePart=0x0) returned 0x85 [0159.512] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0159.512] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\43686105AC844B29A19E4AD788A5ABBD2714FC75" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\43686105ac844b29a19e4ad788a5abbd2714fc75"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0159.512] GetFileType (hFile=0x444) returned 0x1 [0159.512] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0159.512] GetFileType (hFile=0x444) returned 0x1 [0159.512] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xa3a [0159.512] ReadFile (in: hFile=0x444, lpBuffer=0x23356b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x23356b8*, lpNumberOfBytesRead=0x3be5c8*=0xa3a, lpOverlapped=0x0) returned 1 [0159.523] CloseHandle (hObject=0x444) returned 1 [0159.565] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\43686105AC844B29A19E4AD788A5ABBD2714FC75", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\43686105AC844B29A19E4AD788A5ABBD2714FC75", lpFilePart=0x0) returned 0x85 [0159.565] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0159.565] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\43686105AC844B29A19E4AD788A5ABBD2714FC75" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\43686105ac844b29a19e4ad788a5abbd2714fc75"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0159.568] GetFileType (hFile=0x444) returned 0x1 [0159.568] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0159.568] GetFileType (hFile=0x444) returned 0x1 [0159.568] WriteFile (in: hFile=0x444, lpBuffer=0x21af698*, nNumberOfBytesToWrite=0xa40, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x21af698*, lpNumberOfBytesWritten=0x3be4d8*=0xa40, lpOverlapped=0x0) returned 1 [0159.569] CloseHandle (hObject=0x444) returned 1 [0159.569] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\43686105AC844B29A19E4AD788A5ABBD2714FC75", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\43686105AC844B29A19E4AD788A5ABBD2714FC75", lpFilePart=0x0) returned 0x85 [0159.569] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\43686105AC844B29A19E4AD788A5ABBD2714FC75.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\43686105AC844B29A19E4AD788A5ABBD2714FC75.xuy", lpFilePart=0x0) returned 0x89 [0159.569] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0159.569] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\43686105AC844B29A19E4AD788A5ABBD2714FC75" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\43686105ac844b29a19e4ad788a5abbd2714fc75"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7da4ec60, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x7da4ec60, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x4af68dee, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xa40)) returned 1 [0159.570] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0159.570] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\43686105AC844B29A19E4AD788A5ABBD2714FC75" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\43686105ac844b29a19e4ad788a5abbd2714fc75"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\43686105AC844B29A19E4AD788A5ABBD2714FC75.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\43686105ac844b29a19e4ad788a5abbd2714fc75.xuy")) returned 1 [0159.571] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\438AB448ED7FB7D99CB7CFAB433F9E19A475D0EF", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\438AB448ED7FB7D99CB7CFAB433F9E19A475D0EF", lpFilePart=0x0) returned 0x85 [0159.571] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0159.571] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\438AB448ED7FB7D99CB7CFAB433F9E19A475D0EF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\438ab448ed7fb7d99cb7cfab433f9e19a475d0ef"), fInfoLevelId=0x0, lpFileInformation=0x21b0a58 | out: lpFileInformation=0x21b0a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xddfbb5d6, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xddfbb5d6, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xddfc521a, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x4d4)) returned 1 [0159.572] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0159.572] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\438AB448ED7FB7D99CB7CFAB433F9E19A475D0EF", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\438AB448ED7FB7D99CB7CFAB433F9E19A475D0EF", lpFilePart=0x0) returned 0x85 [0159.572] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0159.572] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\438AB448ED7FB7D99CB7CFAB433F9E19A475D0EF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\438ab448ed7fb7d99cb7cfab433f9e19a475d0ef"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0159.572] GetFileType (hFile=0x444) returned 0x1 [0159.572] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0159.572] GetFileType (hFile=0x444) returned 0x1 [0159.572] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x4d4 [0159.572] ReadFile (in: hFile=0x444, lpBuffer=0x21b1348, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x21b1348*, lpNumberOfBytesRead=0x3be5c8*=0x4d4, lpOverlapped=0x0) returned 1 [0159.573] CloseHandle (hObject=0x444) returned 1 [0159.585] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\438AB448ED7FB7D99CB7CFAB433F9E19A475D0EF", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\438AB448ED7FB7D99CB7CFAB433F9E19A475D0EF", lpFilePart=0x0) returned 0x85 [0159.585] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0159.585] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\438AB448ED7FB7D99CB7CFAB433F9E19A475D0EF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\438ab448ed7fb7d99cb7cfab433f9e19a475d0ef"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0159.586] GetFileType (hFile=0x444) returned 0x1 [0159.586] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0159.586] GetFileType (hFile=0x444) returned 0x1 [0159.587] WriteFile (in: hFile=0x444, lpBuffer=0x2229c40*, nNumberOfBytesToWrite=0x4e0, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x2229c40*, lpNumberOfBytesWritten=0x3be4d8*=0x4e0, lpOverlapped=0x0) returned 1 [0159.587] CloseHandle (hObject=0x444) returned 1 [0159.587] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\438AB448ED7FB7D99CB7CFAB433F9E19A475D0EF", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\438AB448ED7FB7D99CB7CFAB433F9E19A475D0EF", lpFilePart=0x0) returned 0x85 [0159.587] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\438AB448ED7FB7D99CB7CFAB433F9E19A475D0EF.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\438AB448ED7FB7D99CB7CFAB433F9E19A475D0EF.xuy", lpFilePart=0x0) returned 0x89 [0159.587] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0159.587] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\438AB448ED7FB7D99CB7CFAB433F9E19A475D0EF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\438ab448ed7fb7d99cb7cfab433f9e19a475d0ef"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xddfbb5d6, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xddfbb5d6, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x4af74eb4, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x4e0)) returned 1 [0159.588] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0159.588] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\438AB448ED7FB7D99CB7CFAB433F9E19A475D0EF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\438ab448ed7fb7d99cb7cfab433f9e19a475d0ef"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\438AB448ED7FB7D99CB7CFAB433F9E19A475D0EF.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\438ab448ed7fb7d99cb7cfab433f9e19a475d0ef.xuy")) returned 1 [0159.589] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\43A641B524487AFDAC7A8AF548EE196228BF6EAE", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\43A641B524487AFDAC7A8AF548EE196228BF6EAE", lpFilePart=0x0) returned 0x85 [0159.589] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0159.589] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\43A641B524487AFDAC7A8AF548EE196228BF6EAE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\43a641b524487afdac7a8af548ee196228bf6eae"), fInfoLevelId=0x0, lpFileInformation=0x222b000 | out: lpFileInformation=0x222b000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48a82464, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x48a82464, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x48a82464, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0xf2d)) returned 1 [0159.589] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0159.589] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\43A641B524487AFDAC7A8AF548EE196228BF6EAE", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\43A641B524487AFDAC7A8AF548EE196228BF6EAE", lpFilePart=0x0) returned 0x85 [0159.589] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0159.589] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\43A641B524487AFDAC7A8AF548EE196228BF6EAE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\43a641b524487afdac7a8af548ee196228bf6eae"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0159.589] GetFileType (hFile=0x444) returned 0x1 [0159.589] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0159.589] GetFileType (hFile=0x444) returned 0x1 [0159.589] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xf2d [0159.589] ReadFile (in: hFile=0x444, lpBuffer=0x222c348, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x222c348*, lpNumberOfBytesRead=0x3be5c8*=0xf2d, lpOverlapped=0x0) returned 1 [0159.594] CloseHandle (hObject=0x444) returned 1 [0159.604] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\43A641B524487AFDAC7A8AF548EE196228BF6EAE", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\43A641B524487AFDAC7A8AF548EE196228BF6EAE", lpFilePart=0x0) returned 0x85 [0159.604] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0159.604] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\43A641B524487AFDAC7A8AF548EE196228BF6EAE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\43a641b524487afdac7a8af548ee196228bf6eae"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0159.606] GetFileType (hFile=0x444) returned 0x1 [0159.606] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0159.606] GetFileType (hFile=0x444) returned 0x1 [0159.606] WriteFile (in: hFile=0x444, lpBuffer=0x22a7fc8*, nNumberOfBytesToWrite=0xf30, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x22a7fc8*, lpNumberOfBytesWritten=0x3be4d8*=0xf30, lpOverlapped=0x0) returned 1 [0159.607] CloseHandle (hObject=0x444) returned 1 [0159.607] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\43A641B524487AFDAC7A8AF548EE196228BF6EAE", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\43A641B524487AFDAC7A8AF548EE196228BF6EAE", lpFilePart=0x0) returned 0x85 [0159.607] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\43A641B524487AFDAC7A8AF548EE196228BF6EAE.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\43A641B524487AFDAC7A8AF548EE196228BF6EAE.xuy", lpFilePart=0x0) returned 0x89 [0159.607] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0159.607] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\43A641B524487AFDAC7A8AF548EE196228BF6EAE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\43a641b524487afdac7a8af548ee196228bf6eae"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48a82464, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x48a82464, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x4afc1734, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xf30)) returned 1 [0159.607] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0159.607] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\43A641B524487AFDAC7A8AF548EE196228BF6EAE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\43a641b524487afdac7a8af548ee196228bf6eae"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\43A641B524487AFDAC7A8AF548EE196228BF6EAE.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\43a641b524487afdac7a8af548ee196228bf6eae.xuy")) returned 1 [0159.608] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\44437BAE601C72F5ED96953EAE92C527D4C2D46F", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\44437BAE601C72F5ED96953EAE92C527D4C2D46F", lpFilePart=0x0) returned 0x85 [0159.608] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0159.608] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\44437BAE601C72F5ED96953EAE92C527D4C2D46F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\44437bae601c72f5ed96953eae92c527d4c2d46f"), fInfoLevelId=0x0, lpFileInformation=0x22a9388 | out: lpFileInformation=0x22a9388*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54379e61, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x54379e61, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x5e85166e, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xf75)) returned 1 [0159.608] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0159.608] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\44437BAE601C72F5ED96953EAE92C527D4C2D46F", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\44437BAE601C72F5ED96953EAE92C527D4C2D46F", lpFilePart=0x0) returned 0x85 [0159.608] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0159.608] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\44437BAE601C72F5ED96953EAE92C527D4C2D46F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\44437bae601c72f5ed96953eae92c527d4c2d46f"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0159.608] GetFileType (hFile=0x444) returned 0x1 [0159.608] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0159.609] GetFileType (hFile=0x444) returned 0x1 [0159.609] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xf75 [0159.609] ReadFile (in: hFile=0x444, lpBuffer=0x22aa718, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x22aa718*, lpNumberOfBytesRead=0x3be5c8*=0xf75, lpOverlapped=0x0) returned 1 [0159.618] CloseHandle (hObject=0x444) returned 1 [0159.628] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\44437BAE601C72F5ED96953EAE92C527D4C2D46F", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\44437BAE601C72F5ED96953EAE92C527D4C2D46F", lpFilePart=0x0) returned 0x85 [0159.628] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0159.628] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\44437BAE601C72F5ED96953EAE92C527D4C2D46F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\44437bae601c72f5ed96953eae92c527d4c2d46f"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0159.630] GetFileType (hFile=0x444) returned 0x1 [0159.630] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0159.630] GetFileType (hFile=0x444) returned 0x1 [0159.630] WriteFile (in: hFile=0x444, lpBuffer=0x2326530*, nNumberOfBytesToWrite=0xf80, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x2326530*, lpNumberOfBytesWritten=0x3be4d8*=0xf80, lpOverlapped=0x0) returned 1 [0159.630] CloseHandle (hObject=0x444) returned 1 [0159.631] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\44437BAE601C72F5ED96953EAE92C527D4C2D46F", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\44437BAE601C72F5ED96953EAE92C527D4C2D46F", lpFilePart=0x0) returned 0x85 [0159.631] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\44437BAE601C72F5ED96953EAE92C527D4C2D46F.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\44437BAE601C72F5ED96953EAE92C527D4C2D46F.xuy", lpFilePart=0x0) returned 0x89 [0159.631] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0159.631] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\44437BAE601C72F5ED96953EAE92C527D4C2D46F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\44437bae601c72f5ed96953eae92c527d4c2d46f"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54379e61, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x54379e61, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x4afe7956, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xf80)) returned 1 [0159.631] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0159.631] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\44437BAE601C72F5ED96953EAE92C527D4C2D46F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\44437bae601c72f5ed96953eae92c527d4c2d46f"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\44437BAE601C72F5ED96953EAE92C527D4C2D46F.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\44437bae601c72f5ed96953eae92c527d4c2d46f.xuy")) returned 1 [0159.632] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4453CB40F54977CDF96034A3A658080FDA7E43FA", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4453CB40F54977CDF96034A3A658080FDA7E43FA", lpFilePart=0x0) returned 0x85 [0159.632] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0159.632] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4453CB40F54977CDF96034A3A658080FDA7E43FA" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4453cb40f54977cdf96034a3a658080fda7e43fa"), fInfoLevelId=0x0, lpFileInformation=0x23278f0 | out: lpFileInformation=0x23278f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x879ba483, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x879ba483, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x879bcb2c, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x3ea1)) returned 1 [0159.632] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0159.632] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4453CB40F54977CDF96034A3A658080FDA7E43FA", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4453CB40F54977CDF96034A3A658080FDA7E43FA", lpFilePart=0x0) returned 0x85 [0159.632] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0159.632] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4453CB40F54977CDF96034A3A658080FDA7E43FA" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4453cb40f54977cdf96034a3a658080fda7e43fa"), fInfoLevelId=0x0, lpFileInformation=0x2327af0 | out: lpFileInformation=0x2327af0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x879ba483, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x879ba483, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x879bcb2c, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x3ea1)) returned 1 [0159.632] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0159.632] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4453CB40F54977CDF96034A3A658080FDA7E43FA", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4453CB40F54977CDF96034A3A658080FDA7E43FA", lpFilePart=0x0) returned 0x85 [0159.632] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0159.632] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4453CB40F54977CDF96034A3A658080FDA7E43FA" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4453cb40f54977cdf96034a3a658080fda7e43fa"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0159.633] GetFileType (hFile=0x444) returned 0x1 [0159.633] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0159.633] GetFileType (hFile=0x444) returned 0x1 [0159.633] ReadFile (in: hFile=0x444, lpBuffer=0x232a020, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x232a020*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0159.682] CloseHandle (hObject=0x444) returned 1 [0159.682] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4453CB40F54977CDF96034A3A658080FDA7E43FA", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4453CB40F54977CDF96034A3A658080FDA7E43FA", lpFilePart=0x0) returned 0x85 [0159.682] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0159.682] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4453CB40F54977CDF96034A3A658080FDA7E43FA" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4453cb40f54977cdf96034a3a658080fda7e43fa"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0159.682] GetFileType (hFile=0x444) returned 0x1 [0159.682] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0159.682] GetFileType (hFile=0x444) returned 0x1 [0159.682] WriteFile (in: hFile=0x444, lpBuffer=0x2185c28*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x2185c28*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0159.683] CloseHandle (hObject=0x444) returned 1 [0159.683] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4453CB40F54977CDF96034A3A658080FDA7E43FA", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4453CB40F54977CDF96034A3A658080FDA7E43FA", lpFilePart=0x0) returned 0x85 [0159.683] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4453CB40F54977CDF96034A3A658080FDA7E43FA.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4453CB40F54977CDF96034A3A658080FDA7E43FA.xuy", lpFilePart=0x0) returned 0x89 [0159.683] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0159.683] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4453CB40F54977CDF96034A3A658080FDA7E43FA" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4453cb40f54977cdf96034a3a658080fda7e43fa"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x879ba483, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x879ba483, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x4b05a136, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x3ea1)) returned 1 [0159.683] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0159.683] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4453CB40F54977CDF96034A3A658080FDA7E43FA" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4453cb40f54977cdf96034a3a658080fda7e43fa"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4453CB40F54977CDF96034A3A658080FDA7E43FA.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4453cb40f54977cdf96034a3a658080fda7e43fa.xuy")) returned 1 [0159.685] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\445E695F447CA967C4DAE00C80034130290F80EA", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\445E695F447CA967C4DAE00C80034130290F80EA", lpFilePart=0x0) returned 0x85 [0159.685] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0159.685] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\445E695F447CA967C4DAE00C80034130290F80EA" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\445e695f447ca967c4dae00c80034130290f80ea"), fInfoLevelId=0x0, lpFileInformation=0x21a8d28 | out: lpFileInformation=0x21a8d28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61577ff1, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x61577ff1, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x61577ff1, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xdfe)) returned 1 [0159.686] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0159.686] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\445E695F447CA967C4DAE00C80034130290F80EA", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\445E695F447CA967C4DAE00C80034130290F80EA", lpFilePart=0x0) returned 0x85 [0159.686] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0159.686] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\445E695F447CA967C4DAE00C80034130290F80EA" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\445e695f447ca967c4dae00c80034130290f80ea"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0159.686] GetFileType (hFile=0x444) returned 0x1 [0159.686] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0159.686] GetFileType (hFile=0x444) returned 0x1 [0159.686] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xdfe [0159.686] ReadFile (in: hFile=0x444, lpBuffer=0x21a9f40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x21a9f40*, lpNumberOfBytesRead=0x3be5c8*=0xdfe, lpOverlapped=0x0) returned 1 [0159.691] CloseHandle (hObject=0x444) returned 1 [0159.702] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\445E695F447CA967C4DAE00C80034130290F80EA", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\445E695F447CA967C4DAE00C80034130290F80EA", lpFilePart=0x0) returned 0x85 [0159.702] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0159.702] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\445E695F447CA967C4DAE00C80034130290F80EA" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\445e695f447ca967c4dae00c80034130290f80ea"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0159.703] GetFileType (hFile=0x444) returned 0x1 [0159.703] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0159.703] GetFileType (hFile=0x444) returned 0x1 [0159.704] WriteFile (in: hFile=0x444, lpBuffer=0x22255d0*, nNumberOfBytesToWrite=0xe00, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x22255d0*, lpNumberOfBytesWritten=0x3be4d8*=0xe00, lpOverlapped=0x0) returned 1 [0159.704] CloseHandle (hObject=0x444) returned 1 [0159.704] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\445E695F447CA967C4DAE00C80034130290F80EA", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\445E695F447CA967C4DAE00C80034130290F80EA", lpFilePart=0x0) returned 0x85 [0159.704] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\445E695F447CA967C4DAE00C80034130290F80EA.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\445E695F447CA967C4DAE00C80034130290F80EA.xuy", lpFilePart=0x0) returned 0x89 [0159.704] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0159.705] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\445E695F447CA967C4DAE00C80034130290F80EA" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\445e695f447ca967c4dae00c80034130290f80ea"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61577ff1, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x61577ff1, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x4b0a6516, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xe00)) returned 1 [0159.705] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0159.705] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\445E695F447CA967C4DAE00C80034130290F80EA" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\445e695f447ca967c4dae00c80034130290f80ea"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\445E695F447CA967C4DAE00C80034130290F80EA.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\445e695f447ca967c4dae00c80034130290f80ea.xuy")) returned 1 [0159.706] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\45A759AC8024EF1FCC5ECA005CEB9C4A4F78984E", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\45A759AC8024EF1FCC5ECA005CEB9C4A4F78984E", lpFilePart=0x0) returned 0x85 [0159.706] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0159.706] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\45A759AC8024EF1FCC5ECA005CEB9C4A4F78984E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\45a759ac8024ef1fcc5eca005ceb9c4a4f78984e"), fInfoLevelId=0x0, lpFileInformation=0x2226990 | out: lpFileInformation=0x2226990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5c4f83d, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc5c4f83d, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xc5c59465, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0xd32)) returned 1 [0159.706] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0159.706] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\45A759AC8024EF1FCC5ECA005CEB9C4A4F78984E", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\45A759AC8024EF1FCC5ECA005CEB9C4A4F78984E", lpFilePart=0x0) returned 0x85 [0159.706] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0159.706] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\45A759AC8024EF1FCC5ECA005CEB9C4A4F78984E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\45a759ac8024ef1fcc5eca005ceb9c4a4f78984e"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0159.706] GetFileType (hFile=0x444) returned 0x1 [0159.706] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0159.706] GetFileType (hFile=0x444) returned 0x1 [0159.706] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xd32 [0159.707] ReadFile (in: hFile=0x444, lpBuffer=0x2227ae0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x2227ae0*, lpNumberOfBytesRead=0x3be5c8*=0xd32, lpOverlapped=0x0) returned 1 [0159.721] CloseHandle (hObject=0x444) returned 1 [0159.732] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\45A759AC8024EF1FCC5ECA005CEB9C4A4F78984E", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\45A759AC8024EF1FCC5ECA005CEB9C4A4F78984E", lpFilePart=0x0) returned 0x85 [0159.732] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0159.732] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\45A759AC8024EF1FCC5ECA005CEB9C4A4F78984E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\45a759ac8024ef1fcc5eca005ceb9c4a4f78984e"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0159.733] GetFileType (hFile=0x444) returned 0x1 [0159.733] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0159.734] GetFileType (hFile=0x444) returned 0x1 [0159.734] WriteFile (in: hFile=0x444, lpBuffer=0x22a2db8*, nNumberOfBytesToWrite=0xd40, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x22a2db8*, lpNumberOfBytesWritten=0x3be4d8*=0xd40, lpOverlapped=0x0) returned 1 [0159.734] CloseHandle (hObject=0x444) returned 1 [0159.734] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\45A759AC8024EF1FCC5ECA005CEB9C4A4F78984E", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\45A759AC8024EF1FCC5ECA005CEB9C4A4F78984E", lpFilePart=0x0) returned 0x85 [0159.735] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\45A759AC8024EF1FCC5ECA005CEB9C4A4F78984E.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\45A759AC8024EF1FCC5ECA005CEB9C4A4F78984E.xuy", lpFilePart=0x0) returned 0x89 [0159.735] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0159.735] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\45A759AC8024EF1FCC5ECA005CEB9C4A4F78984E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\45a759ac8024ef1fcc5eca005ceb9c4a4f78984e"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5c4f83d, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc5c4f83d, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x4b0f2af3, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xd40)) returned 1 [0159.735] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0159.735] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\45A759AC8024EF1FCC5ECA005CEB9C4A4F78984E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\45a759ac8024ef1fcc5eca005ceb9c4a4f78984e"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\45A759AC8024EF1FCC5ECA005CEB9C4A4F78984E.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\45a759ac8024ef1fcc5eca005ceb9c4a4f78984e.xuy")) returned 1 [0159.736] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\45C64E5C2E9809667C5FC9F06FC42641326DF768", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\45C64E5C2E9809667C5FC9F06FC42641326DF768", lpFilePart=0x0) returned 0x85 [0159.736] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0159.736] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\45C64E5C2E9809667C5FC9F06FC42641326DF768" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\45c64e5c2e9809667c5fc9f06fc42641326df768"), fInfoLevelId=0x0, lpFileInformation=0x22a4178 | out: lpFileInformation=0x22a4178*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x459d9052, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x459d9052, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x459d9052, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0x494)) returned 1 [0159.736] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0159.736] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\45C64E5C2E9809667C5FC9F06FC42641326DF768", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\45C64E5C2E9809667C5FC9F06FC42641326DF768", lpFilePart=0x0) returned 0x85 [0159.736] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0159.736] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\45C64E5C2E9809667C5FC9F06FC42641326DF768" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\45c64e5c2e9809667c5fc9f06fc42641326df768"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0159.737] GetFileType (hFile=0x444) returned 0x1 [0159.737] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0159.737] GetFileType (hFile=0x444) returned 0x1 [0159.737] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x494 [0159.737] ReadFile (in: hFile=0x444, lpBuffer=0x22a4a28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x22a4a28*, lpNumberOfBytesRead=0x3be5c8*=0x494, lpOverlapped=0x0) returned 1 [0159.740] CloseHandle (hObject=0x444) returned 1 [0159.751] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\45C64E5C2E9809667C5FC9F06FC42641326DF768", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\45C64E5C2E9809667C5FC9F06FC42641326DF768", lpFilePart=0x0) returned 0x85 [0159.751] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0159.751] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\45C64E5C2E9809667C5FC9F06FC42641326DF768" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\45c64e5c2e9809667c5fc9f06fc42641326df768"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0159.752] GetFileType (hFile=0x444) returned 0x1 [0159.752] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0159.753] GetFileType (hFile=0x444) returned 0x1 [0159.753] WriteFile (in: hFile=0x444, lpBuffer=0x231d1e0*, nNumberOfBytesToWrite=0x4a0, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x231d1e0*, lpNumberOfBytesWritten=0x3be4d8*=0x4a0, lpOverlapped=0x0) returned 1 [0159.755] CloseHandle (hObject=0x444) returned 1 [0159.755] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\45C64E5C2E9809667C5FC9F06FC42641326DF768", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\45C64E5C2E9809667C5FC9F06FC42641326DF768", lpFilePart=0x0) returned 0x85 [0159.755] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\45C64E5C2E9809667C5FC9F06FC42641326DF768.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\45C64E5C2E9809667C5FC9F06FC42641326DF768.xuy", lpFilePart=0x0) returned 0x89 [0159.755] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0159.755] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\45C64E5C2E9809667C5FC9F06FC42641326DF768" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\45c64e5c2e9809667c5fc9f06fc42641326df768"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x459d9052, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x459d9052, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x4b118fd2, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x4a0)) returned 1 [0159.755] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0159.755] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\45C64E5C2E9809667C5FC9F06FC42641326DF768" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\45c64e5c2e9809667c5fc9f06fc42641326df768"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\45C64E5C2E9809667C5FC9F06FC42641326DF768.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\45c64e5c2e9809667c5fc9f06fc42641326df768.xuy")) returned 1 [0159.756] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4613B437E86D18E98F830433A5E6F7F9ABAF3693", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4613B437E86D18E98F830433A5E6F7F9ABAF3693", lpFilePart=0x0) returned 0x85 [0159.756] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0159.756] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4613B437E86D18E98F830433A5E6F7F9ABAF3693" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4613b437e86d18e98f830433a5e6f7f9abaf3693"), fInfoLevelId=0x0, lpFileInformation=0x231e5a0 | out: lpFileInformation=0x231e5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf46a29ca, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xf46a29ca, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0xf46b1427, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x229e)) returned 1 [0159.757] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0159.757] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4613B437E86D18E98F830433A5E6F7F9ABAF3693", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4613B437E86D18E98F830433A5E6F7F9ABAF3693", lpFilePart=0x0) returned 0x85 [0159.757] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0159.757] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4613B437E86D18E98F830433A5E6F7F9ABAF3693" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4613b437e86d18e98f830433a5e6f7f9abaf3693"), fInfoLevelId=0x0, lpFileInformation=0x231e7a0 | out: lpFileInformation=0x231e7a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf46a29ca, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xf46a29ca, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0xf46b1427, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x229e)) returned 1 [0159.757] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0159.757] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4613B437E86D18E98F830433A5E6F7F9ABAF3693", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4613B437E86D18E98F830433A5E6F7F9ABAF3693", lpFilePart=0x0) returned 0x85 [0159.757] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0159.757] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4613B437E86D18E98F830433A5E6F7F9ABAF3693" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4613b437e86d18e98f830433a5e6f7f9abaf3693"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0159.757] GetFileType (hFile=0x444) returned 0x1 [0159.757] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0159.757] GetFileType (hFile=0x444) returned 0x1 [0159.757] ReadFile (in: hFile=0x444, lpBuffer=0x2320cd0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x2320cd0*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0159.800] CloseHandle (hObject=0x444) returned 1 [0159.800] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4613B437E86D18E98F830433A5E6F7F9ABAF3693", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4613B437E86D18E98F830433A5E6F7F9ABAF3693", lpFilePart=0x0) returned 0x85 [0159.800] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0159.800] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4613B437E86D18E98F830433A5E6F7F9ABAF3693" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4613b437e86d18e98f830433a5e6f7f9abaf3693"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0159.800] GetFileType (hFile=0x444) returned 0x1 [0159.800] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0159.800] GetFileType (hFile=0x444) returned 0x1 [0159.800] WriteFile (in: hFile=0x444, lpBuffer=0x2185c28*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x2185c28*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0159.800] CloseHandle (hObject=0x444) returned 1 [0159.801] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4613B437E86D18E98F830433A5E6F7F9ABAF3693", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4613B437E86D18E98F830433A5E6F7F9ABAF3693", lpFilePart=0x0) returned 0x85 [0159.801] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4613B437E86D18E98F830433A5E6F7F9ABAF3693.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4613B437E86D18E98F830433A5E6F7F9ABAF3693.xuy", lpFilePart=0x0) returned 0x89 [0159.801] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0159.801] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4613B437E86D18E98F830433A5E6F7F9ABAF3693" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4613b437e86d18e98f830433a5e6f7f9abaf3693"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf46a29ca, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xf46a29ca, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x4b18b415, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x229e)) returned 1 [0159.801] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0159.801] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4613B437E86D18E98F830433A5E6F7F9ABAF3693" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4613b437e86d18e98f830433a5e6f7f9abaf3693"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4613B437E86D18E98F830433A5E6F7F9ABAF3693.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4613b437e86d18e98f830433a5e6f7f9abaf3693.xuy")) returned 1 [0159.813] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\467A961D019F23E5AF0F0266CD78A5F3D3290E5B", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\467A961D019F23E5AF0F0266CD78A5F3D3290E5B", lpFilePart=0x0) returned 0x85 [0159.813] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0159.813] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\467A961D019F23E5AF0F0266CD78A5F3D3290E5B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\467a961d019f23e5af0f0266cd78a5f3d3290e5b"), fInfoLevelId=0x0, lpFileInformation=0x219d248 | out: lpFileInformation=0x219d248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f0b42d0, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3f0b42d0, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xddd80099, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0xe698)) returned 1 [0159.813] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0159.813] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\467A961D019F23E5AF0F0266CD78A5F3D3290E5B", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\467A961D019F23E5AF0F0266CD78A5F3D3290E5B", lpFilePart=0x0) returned 0x85 [0159.813] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0159.813] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\467A961D019F23E5AF0F0266CD78A5F3D3290E5B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\467a961d019f23e5af0f0266cd78a5f3d3290e5b"), fInfoLevelId=0x0, lpFileInformation=0x219d448 | out: lpFileInformation=0x219d448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f0b42d0, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3f0b42d0, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xddd80099, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0xe698)) returned 1 [0159.813] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0159.813] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\467A961D019F23E5AF0F0266CD78A5F3D3290E5B", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\467A961D019F23E5AF0F0266CD78A5F3D3290E5B", lpFilePart=0x0) returned 0x85 [0159.813] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0159.814] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\467A961D019F23E5AF0F0266CD78A5F3D3290E5B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\467a961d019f23e5af0f0266cd78a5f3d3290e5b"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0159.814] GetFileType (hFile=0x444) returned 0x1 [0159.814] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0159.814] GetFileType (hFile=0x444) returned 0x1 [0159.815] ReadFile (in: hFile=0x444, lpBuffer=0x219f978, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x219f978*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0159.834] CloseHandle (hObject=0x444) returned 1 [0159.834] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\467A961D019F23E5AF0F0266CD78A5F3D3290E5B", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\467A961D019F23E5AF0F0266CD78A5F3D3290E5B", lpFilePart=0x0) returned 0x85 [0159.834] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0159.834] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\467A961D019F23E5AF0F0266CD78A5F3D3290E5B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\467a961d019f23e5af0f0266cd78a5f3d3290e5b"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0159.835] GetFileType (hFile=0x444) returned 0x1 [0159.835] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0159.835] GetFileType (hFile=0x444) returned 0x1 [0159.835] WriteFile (in: hFile=0x444, lpBuffer=0x219d628*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x219d628*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0159.835] CloseHandle (hObject=0x444) returned 1 [0159.835] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\467A961D019F23E5AF0F0266CD78A5F3D3290E5B", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\467A961D019F23E5AF0F0266CD78A5F3D3290E5B", lpFilePart=0x0) returned 0x85 [0159.835] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\467A961D019F23E5AF0F0266CD78A5F3D3290E5B.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\467A961D019F23E5AF0F0266CD78A5F3D3290E5B.xuy", lpFilePart=0x0) returned 0x89 [0159.835] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0159.835] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\467A961D019F23E5AF0F0266CD78A5F3D3290E5B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\467a961d019f23e5af0f0266cd78a5f3d3290e5b"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f0b42d0, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3f0b42d0, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x4b1d7a07, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xe698)) returned 1 [0159.835] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0159.835] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\467A961D019F23E5AF0F0266CD78A5F3D3290E5B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\467a961d019f23e5af0f0266cd78a5f3d3290e5b"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\467A961D019F23E5AF0F0266CD78A5F3D3290E5B.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\467a961d019f23e5af0f0266cd78a5f3d3290e5b.xuy")) returned 1 [0159.836] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\489059ED134C75D04357FD895C6280E1F7978C59", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\489059ED134C75D04357FD895C6280E1F7978C59", lpFilePart=0x0) returned 0x85 [0159.836] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0159.836] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\489059ED134C75D04357FD895C6280E1F7978C59" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\489059ed134c75d04357fd895c6280e1f7978c59"), fInfoLevelId=0x0, lpFileInformation=0x221bf20 | out: lpFileInformation=0x221bf20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x897a8543, ftCreationTime.dwHighDateTime=0x1d2d43f, ftLastAccessTime.dwLowDateTime=0x897a8543, ftLastAccessTime.dwHighDateTime=0x1d2d43f, ftLastWriteTime.dwLowDateTime=0x8981adb5, ftLastWriteTime.dwHighDateTime=0x1d2d43f, nFileSizeHigh=0x0, nFileSizeLow=0x528)) returned 1 [0159.837] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0159.837] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\489059ED134C75D04357FD895C6280E1F7978C59", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\489059ED134C75D04357FD895C6280E1F7978C59", lpFilePart=0x0) returned 0x85 [0159.837] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0159.837] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\489059ED134C75D04357FD895C6280E1F7978C59" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\489059ed134c75d04357fd895c6280e1f7978c59"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0159.837] GetFileType (hFile=0x444) returned 0x1 [0159.837] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0159.837] GetFileType (hFile=0x444) returned 0x1 [0159.837] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x528 [0159.837] ReadFile (in: hFile=0x444, lpBuffer=0x221c860, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x221c860*, lpNumberOfBytesRead=0x3be5c8*=0x528, lpOverlapped=0x0) returned 1 [0159.843] CloseHandle (hObject=0x444) returned 1 [0159.853] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\489059ED134C75D04357FD895C6280E1F7978C59", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\489059ED134C75D04357FD895C6280E1F7978C59", lpFilePart=0x0) returned 0x85 [0159.853] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0159.853] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\489059ED134C75D04357FD895C6280E1F7978C59" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\489059ed134c75d04357fd895c6280e1f7978c59"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0159.855] GetFileType (hFile=0x444) returned 0x1 [0159.855] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0159.855] GetFileType (hFile=0x444) returned 0x1 [0159.855] WriteFile (in: hFile=0x444, lpBuffer=0x22952e0*, nNumberOfBytesToWrite=0x530, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x22952e0*, lpNumberOfBytesWritten=0x3be4d8*=0x530, lpOverlapped=0x0) returned 1 [0159.856] CloseHandle (hObject=0x444) returned 1 [0159.856] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\489059ED134C75D04357FD895C6280E1F7978C59", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\489059ED134C75D04357FD895C6280E1F7978C59", lpFilePart=0x0) returned 0x85 [0159.856] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\489059ED134C75D04357FD895C6280E1F7978C59.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\489059ED134C75D04357FD895C6280E1F7978C59.xuy", lpFilePart=0x0) returned 0x89 [0159.856] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0159.856] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\489059ED134C75D04357FD895C6280E1F7978C59" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\489059ed134c75d04357fd895c6280e1f7978c59"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x897a8543, ftCreationTime.dwHighDateTime=0x1d2d43f, ftLastAccessTime.dwLowDateTime=0x897a8543, ftLastAccessTime.dwHighDateTime=0x1d2d43f, ftLastWriteTime.dwLowDateTime=0x4b223b7e, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x530)) returned 1 [0159.856] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0159.856] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\489059ED134C75D04357FD895C6280E1F7978C59" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\489059ed134c75d04357fd895c6280e1f7978c59"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\489059ED134C75D04357FD895C6280E1F7978C59.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\489059ed134c75d04357fd895c6280e1f7978c59.xuy")) returned 1 [0159.857] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\48D18A403364708B74676D0C5068809EE47BCF43", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\48D18A403364708B74676D0C5068809EE47BCF43", lpFilePart=0x0) returned 0x85 [0159.858] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0159.858] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\48D18A403364708B74676D0C5068809EE47BCF43" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\48d18a403364708b74676d0c5068809ee47bcf43"), fInfoLevelId=0x0, lpFileInformation=0x22966a0 | out: lpFileInformation=0x22966a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4659ea40, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x4659ea40, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x465c4c9e, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0xb17)) returned 1 [0159.858] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0159.858] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\48D18A403364708B74676D0C5068809EE47BCF43", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\48D18A403364708B74676D0C5068809EE47BCF43", lpFilePart=0x0) returned 0x85 [0159.858] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0159.858] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\48D18A403364708B74676D0C5068809EE47BCF43" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\48d18a403364708b74676d0c5068809ee47bcf43"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0159.858] GetFileType (hFile=0x444) returned 0x1 [0159.859] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0159.859] GetFileType (hFile=0x444) returned 0x1 [0159.859] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xb17 [0159.859] ReadFile (in: hFile=0x444, lpBuffer=0x22975d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x22975d0*, lpNumberOfBytesRead=0x3be5c8*=0xb17, lpOverlapped=0x0) returned 1 [0159.860] CloseHandle (hObject=0x444) returned 1 [0159.870] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\48D18A403364708B74676D0C5068809EE47BCF43", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\48D18A403364708B74676D0C5068809EE47BCF43", lpFilePart=0x0) returned 0x85 [0159.870] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0159.870] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\48D18A403364708B74676D0C5068809EE47BCF43" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\48d18a403364708b74676d0c5068809ee47bcf43"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0159.871] GetFileType (hFile=0x444) returned 0x1 [0159.872] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0159.872] GetFileType (hFile=0x444) returned 0x1 [0159.872] WriteFile (in: hFile=0x444, lpBuffer=0x2311e08*, nNumberOfBytesToWrite=0xb20, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x2311e08*, lpNumberOfBytesWritten=0x3be4d8*=0xb20, lpOverlapped=0x0) returned 1 [0159.872] CloseHandle (hObject=0x444) returned 1 [0159.872] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\48D18A403364708B74676D0C5068809EE47BCF43", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\48D18A403364708B74676D0C5068809EE47BCF43", lpFilePart=0x0) returned 0x85 [0159.873] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\48D18A403364708B74676D0C5068809EE47BCF43.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\48D18A403364708B74676D0C5068809EE47BCF43.xuy", lpFilePart=0x0) returned 0x89 [0159.873] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0159.873] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\48D18A403364708B74676D0C5068809EE47BCF43" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\48d18a403364708b74676d0c5068809ee47bcf43"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4659ea40, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x4659ea40, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x4b24a518, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xb20)) returned 1 [0159.873] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0159.873] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\48D18A403364708B74676D0C5068809EE47BCF43" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\48d18a403364708b74676d0c5068809ee47bcf43"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\48D18A403364708B74676D0C5068809EE47BCF43.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\48d18a403364708b74676d0c5068809ee47bcf43.xuy")) returned 1 [0159.874] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\491836973BD7F16266314A8709EF00934A1BFCA0", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\491836973BD7F16266314A8709EF00934A1BFCA0", lpFilePart=0x0) returned 0x85 [0159.874] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0159.874] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\491836973BD7F16266314A8709EF00934A1BFCA0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\491836973bd7f16266314a8709ef00934a1bfca0"), fInfoLevelId=0x0, lpFileInformation=0x23131c8 | out: lpFileInformation=0x23131c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f74dbd9, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3f74dbd9, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x3f7502ec, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0xe0d)) returned 1 [0159.874] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0159.874] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\491836973BD7F16266314A8709EF00934A1BFCA0", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\491836973BD7F16266314A8709EF00934A1BFCA0", lpFilePart=0x0) returned 0x85 [0159.874] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0159.874] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\491836973BD7F16266314A8709EF00934A1BFCA0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\491836973bd7f16266314a8709ef00934a1bfca0"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0159.874] GetFileType (hFile=0x444) returned 0x1 [0159.874] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0159.874] GetFileType (hFile=0x444) returned 0x1 [0159.874] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xe0d [0159.875] ReadFile (in: hFile=0x444, lpBuffer=0x23143f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x23143f0*, lpNumberOfBytesRead=0x3be5c8*=0xe0d, lpOverlapped=0x0) returned 1 [0159.881] CloseHandle (hObject=0x444) returned 1 [0159.910] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\491836973BD7F16266314A8709EF00934A1BFCA0", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\491836973BD7F16266314A8709EF00934A1BFCA0", lpFilePart=0x0) returned 0x85 [0159.910] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0159.910] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\491836973BD7F16266314A8709EF00934A1BFCA0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\491836973bd7f16266314a8709ef00934a1bfca0"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0159.911] GetFileType (hFile=0x444) returned 0x1 [0159.911] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0159.911] GetFileType (hFile=0x444) returned 0x1 [0159.911] WriteFile (in: hFile=0x444, lpBuffer=0x218d718*, nNumberOfBytesToWrite=0xe10, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x218d718*, lpNumberOfBytesWritten=0x3be4d8*=0xe10, lpOverlapped=0x0) returned 1 [0159.913] CloseHandle (hObject=0x444) returned 1 [0159.913] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\491836973BD7F16266314A8709EF00934A1BFCA0", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\491836973BD7F16266314A8709EF00934A1BFCA0", lpFilePart=0x0) returned 0x85 [0159.913] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\491836973BD7F16266314A8709EF00934A1BFCA0.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\491836973BD7F16266314A8709EF00934A1BFCA0.xuy", lpFilePart=0x0) returned 0x89 [0159.913] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0159.913] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\491836973BD7F16266314A8709EF00934A1BFCA0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\491836973bd7f16266314a8709ef00934a1bfca0"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f74dbd9, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3f74dbd9, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x4b2962bf, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xe10)) returned 1 [0159.913] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0159.913] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\491836973BD7F16266314A8709EF00934A1BFCA0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\491836973bd7f16266314a8709ef00934a1bfca0"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\491836973BD7F16266314A8709EF00934A1BFCA0.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\491836973bd7f16266314a8709ef00934a1bfca0.xuy")) returned 1 [0159.914] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\491FFC0D1E910DC1DB3107E7DA730B43A97010A0", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\491FFC0D1E910DC1DB3107E7DA730B43A97010A0", lpFilePart=0x0) returned 0x85 [0159.914] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0159.914] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\491FFC0D1E910DC1DB3107E7DA730B43A97010A0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\491ffc0d1e910dc1db3107e7da730b43a97010a0"), fInfoLevelId=0x0, lpFileInformation=0x218ead8 | out: lpFileInformation=0x218ead8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x863334e0, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x863334e0, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x86335bf6, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0xf2b)) returned 1 [0159.915] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0159.915] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\491FFC0D1E910DC1DB3107E7DA730B43A97010A0", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\491FFC0D1E910DC1DB3107E7DA730B43A97010A0", lpFilePart=0x0) returned 0x85 [0159.915] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0159.915] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\491FFC0D1E910DC1DB3107E7DA730B43A97010A0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\491ffc0d1e910dc1db3107e7da730b43a97010a0"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0159.915] GetFileType (hFile=0x444) returned 0x1 [0159.915] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0159.915] GetFileType (hFile=0x444) returned 0x1 [0159.915] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xf2b [0159.915] ReadFile (in: hFile=0x444, lpBuffer=0x218fe20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x218fe20*, lpNumberOfBytesRead=0x3be5c8*=0xf2b, lpOverlapped=0x0) returned 1 [0159.931] CloseHandle (hObject=0x444) returned 1 [0159.953] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\491FFC0D1E910DC1DB3107E7DA730B43A97010A0", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\491FFC0D1E910DC1DB3107E7DA730B43A97010A0", lpFilePart=0x0) returned 0x85 [0159.953] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0159.953] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\491FFC0D1E910DC1DB3107E7DA730B43A97010A0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\491ffc0d1e910dc1db3107e7da730b43a97010a0"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0159.955] GetFileType (hFile=0x444) returned 0x1 [0159.955] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0159.955] GetFileType (hFile=0x444) returned 0x1 [0159.955] WriteFile (in: hFile=0x444, lpBuffer=0x220baa0*, nNumberOfBytesToWrite=0xf30, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x220baa0*, lpNumberOfBytesWritten=0x3be4d8*=0xf30, lpOverlapped=0x0) returned 1 [0159.955] CloseHandle (hObject=0x444) returned 1 [0159.956] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\491FFC0D1E910DC1DB3107E7DA730B43A97010A0", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\491FFC0D1E910DC1DB3107E7DA730B43A97010A0", lpFilePart=0x0) returned 0x85 [0159.956] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\491FFC0D1E910DC1DB3107E7DA730B43A97010A0.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\491FFC0D1E910DC1DB3107E7DA730B43A97010A0.xuy", lpFilePart=0x0) returned 0x89 [0159.956] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0159.956] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\491FFC0D1E910DC1DB3107E7DA730B43A97010A0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\491ffc0d1e910dc1db3107e7da730b43a97010a0"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x863334e0, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x863334e0, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x4b308b8e, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xf30)) returned 1 [0159.956] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0159.956] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\491FFC0D1E910DC1DB3107E7DA730B43A97010A0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\491ffc0d1e910dc1db3107e7da730b43a97010a0"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\491FFC0D1E910DC1DB3107E7DA730B43A97010A0.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\491ffc0d1e910dc1db3107e7da730b43a97010a0.xuy")) returned 1 [0159.957] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4A46AC76F0CCC4293CC380999116F3B7911F85BE", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4A46AC76F0CCC4293CC380999116F3B7911F85BE", lpFilePart=0x0) returned 0x85 [0159.957] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0159.957] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4A46AC76F0CCC4293CC380999116F3B7911F85BE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4a46ac76f0ccc4293cc380999116f3b7911f85be"), fInfoLevelId=0x0, lpFileInformation=0x220ce60 | out: lpFileInformation=0x220ce60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47e705b6, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x47e705b6, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x47e705b6, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0xe79)) returned 1 [0159.957] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0159.957] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4A46AC76F0CCC4293CC380999116F3B7911F85BE", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4A46AC76F0CCC4293CC380999116F3B7911F85BE", lpFilePart=0x0) returned 0x85 [0159.957] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0159.957] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4A46AC76F0CCC4293CC380999116F3B7911F85BE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4a46ac76f0ccc4293cc380999116f3b7911f85be"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0159.958] GetFileType (hFile=0x444) returned 0x1 [0159.958] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0159.958] GetFileType (hFile=0x444) returned 0x1 [0159.958] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xe79 [0159.958] ReadFile (in: hFile=0x444, lpBuffer=0x220e0f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x220e0f8*, lpNumberOfBytesRead=0x3be5c8*=0xe79, lpOverlapped=0x0) returned 1 [0159.959] CloseHandle (hObject=0x444) returned 1 [0159.970] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4A46AC76F0CCC4293CC380999116F3B7911F85BE", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4A46AC76F0CCC4293CC380999116F3B7911F85BE", lpFilePart=0x0) returned 0x85 [0159.970] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0159.970] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4A46AC76F0CCC4293CC380999116F3B7911F85BE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4a46ac76f0ccc4293cc380999116f3b7911f85be"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0159.972] GetFileType (hFile=0x444) returned 0x1 [0159.972] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0159.972] GetFileType (hFile=0x444) returned 0x1 [0159.972] WriteFile (in: hFile=0x444, lpBuffer=0x2289a08*, nNumberOfBytesToWrite=0xe80, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x2289a08*, lpNumberOfBytesWritten=0x3be4d8*=0xe80, lpOverlapped=0x0) returned 1 [0159.973] CloseHandle (hObject=0x444) returned 1 [0159.973] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4A46AC76F0CCC4293CC380999116F3B7911F85BE", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4A46AC76F0CCC4293CC380999116F3B7911F85BE", lpFilePart=0x0) returned 0x85 [0159.973] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4A46AC76F0CCC4293CC380999116F3B7911F85BE.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4A46AC76F0CCC4293CC380999116F3B7911F85BE.xuy", lpFilePart=0x0) returned 0x89 [0159.973] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0159.973] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4A46AC76F0CCC4293CC380999116F3B7911F85BE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4a46ac76f0ccc4293cc380999116f3b7911f85be"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47e705b6, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x47e705b6, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x4b32f041, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xe80)) returned 1 [0159.973] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0159.973] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4A46AC76F0CCC4293CC380999116F3B7911F85BE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4a46ac76f0ccc4293cc380999116f3b7911f85be"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4A46AC76F0CCC4293CC380999116F3B7911F85BE.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4a46ac76f0ccc4293cc380999116f3b7911f85be.xuy")) returned 1 [0159.974] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4B18B5ADA8BF2E475961694931BE215AED8ECBD5", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4B18B5ADA8BF2E475961694931BE215AED8ECBD5", lpFilePart=0x0) returned 0x85 [0159.974] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0159.974] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4B18B5ADA8BF2E475961694931BE215AED8ECBD5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4b18b5ada8bf2e475961694931be215aed8ecbd5"), fInfoLevelId=0x0, lpFileInformation=0x228adc8 | out: lpFileInformation=0x228adc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61577ff1, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x61577ff1, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x61577ff1, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xdfc)) returned 1 [0159.974] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0159.974] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4B18B5ADA8BF2E475961694931BE215AED8ECBD5", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4B18B5ADA8BF2E475961694931BE215AED8ECBD5", lpFilePart=0x0) returned 0x85 [0159.974] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0159.975] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4B18B5ADA8BF2E475961694931BE215AED8ECBD5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4b18b5ada8bf2e475961694931be215aed8ecbd5"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0159.975] GetFileType (hFile=0x444) returned 0x1 [0159.975] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0159.975] GetFileType (hFile=0x444) returned 0x1 [0159.975] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xdfc [0159.975] ReadFile (in: hFile=0x444, lpBuffer=0x228bfe0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x228bfe0*, lpNumberOfBytesRead=0x3be5c8*=0xdfc, lpOverlapped=0x0) returned 1 [0159.976] CloseHandle (hObject=0x444) returned 1 [0159.987] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4B18B5ADA8BF2E475961694931BE215AED8ECBD5", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4B18B5ADA8BF2E475961694931BE215AED8ECBD5", lpFilePart=0x0) returned 0x85 [0159.987] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0159.987] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4B18B5ADA8BF2E475961694931BE215AED8ECBD5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4b18b5ada8bf2e475961694931be215aed8ecbd5"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0159.988] GetFileType (hFile=0x444) returned 0x1 [0159.988] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0159.988] GetFileType (hFile=0x444) returned 0x1 [0159.988] WriteFile (in: hFile=0x444, lpBuffer=0x2307670*, nNumberOfBytesToWrite=0xe00, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x2307670*, lpNumberOfBytesWritten=0x3be4d8*=0xe00, lpOverlapped=0x0) returned 1 [0159.989] CloseHandle (hObject=0x444) returned 1 [0159.989] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4B18B5ADA8BF2E475961694931BE215AED8ECBD5", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4B18B5ADA8BF2E475961694931BE215AED8ECBD5", lpFilePart=0x0) returned 0x85 [0159.989] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4B18B5ADA8BF2E475961694931BE215AED8ECBD5.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4B18B5ADA8BF2E475961694931BE215AED8ECBD5.xuy", lpFilePart=0x0) returned 0x89 [0159.989] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0159.989] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4B18B5ADA8BF2E475961694931BE215AED8ECBD5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4b18b5ada8bf2e475961694931be215aed8ecbd5"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61577ff1, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x61577ff1, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x4b354e0d, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xe00)) returned 1 [0159.989] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0159.989] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4B18B5ADA8BF2E475961694931BE215AED8ECBD5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4b18b5ada8bf2e475961694931be215aed8ecbd5"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4B18B5ADA8BF2E475961694931BE215AED8ECBD5.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4b18b5ada8bf2e475961694931be215aed8ecbd5.xuy")) returned 1 [0159.990] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4B2A0DFA12FEADFF375261309F704B43534BEE37", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4B2A0DFA12FEADFF375261309F704B43534BEE37", lpFilePart=0x0) returned 0x85 [0159.990] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0159.991] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4B2A0DFA12FEADFF375261309F704B43534BEE37" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4b2a0dfa12feadff375261309f704b43534bee37"), fInfoLevelId=0x0, lpFileInformation=0x2308a30 | out: lpFileInformation=0x2308a30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6159e1e8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x6159e1e8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x6159e1e8, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xedc)) returned 1 [0159.991] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0159.991] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4B2A0DFA12FEADFF375261309F704B43534BEE37", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4B2A0DFA12FEADFF375261309F704B43534BEE37", lpFilePart=0x0) returned 0x85 [0159.991] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0159.991] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4B2A0DFA12FEADFF375261309F704B43534BEE37" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4b2a0dfa12feadff375261309f704b43534bee37"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0159.991] GetFileType (hFile=0x444) returned 0x1 [0159.991] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0159.991] GetFileType (hFile=0x444) returned 0x1 [0159.991] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xedc [0159.991] ReadFile (in: hFile=0x444, lpBuffer=0x2309d28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x2309d28*, lpNumberOfBytesRead=0x3be5c8*=0xedc, lpOverlapped=0x0) returned 1 [0159.992] CloseHandle (hObject=0x444) returned 1 [0160.002] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4B2A0DFA12FEADFF375261309F704B43534BEE37", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4B2A0DFA12FEADFF375261309F704B43534BEE37", lpFilePart=0x0) returned 0x85 [0160.002] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0160.003] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4B2A0DFA12FEADFF375261309F704B43534BEE37" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4b2a0dfa12feadff375261309f704b43534bee37"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0160.004] GetFileType (hFile=0x444) returned 0x1 [0160.004] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0160.004] GetFileType (hFile=0x444) returned 0x1 [0160.004] WriteFile (in: hFile=0x444, lpBuffer=0x2385818*, nNumberOfBytesToWrite=0xee0, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x2385818*, lpNumberOfBytesWritten=0x3be4d8*=0xee0, lpOverlapped=0x0) returned 1 [0160.006] CloseHandle (hObject=0x444) returned 1 [0160.006] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4B2A0DFA12FEADFF375261309F704B43534BEE37", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4B2A0DFA12FEADFF375261309F704B43534BEE37", lpFilePart=0x0) returned 0x85 [0160.006] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4B2A0DFA12FEADFF375261309F704B43534BEE37.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4B2A0DFA12FEADFF375261309F704B43534BEE37.xuy", lpFilePart=0x0) returned 0x89 [0160.006] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0160.006] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4B2A0DFA12FEADFF375261309F704B43534BEE37" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4b2a0dfa12feadff375261309f704b43534bee37"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6159e1e8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x6159e1e8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x4b37b212, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xee0)) returned 1 [0160.006] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0160.006] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4B2A0DFA12FEADFF375261309F704B43534BEE37" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4b2a0dfa12feadff375261309f704b43534bee37"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4B2A0DFA12FEADFF375261309F704B43534BEE37.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4b2a0dfa12feadff375261309f704b43534bee37.xuy")) returned 1 [0160.007] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4BB6AC032612F432B6B5DA43EE2DAA6A8A03B6F4", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4BB6AC032612F432B6B5DA43EE2DAA6A8A03B6F4", lpFilePart=0x0) returned 0x85 [0160.007] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0160.007] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4BB6AC032612F432B6B5DA43EE2DAA6A8A03B6F4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4bb6ac032612f432b6b5da43ee2daa6a8a03b6f4"), fInfoLevelId=0x0, lpFileInformation=0x2386bd8 | out: lpFileInformation=0x2386bd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f08f8d3, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3f08f8d3, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xddd71641, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x246e)) returned 1 [0160.008] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0160.008] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4BB6AC032612F432B6B5DA43EE2DAA6A8A03B6F4", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4BB6AC032612F432B6B5DA43EE2DAA6A8A03B6F4", lpFilePart=0x0) returned 0x85 [0160.008] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0160.008] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4BB6AC032612F432B6B5DA43EE2DAA6A8A03B6F4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4bb6ac032612f432b6b5da43ee2daa6a8a03b6f4"), fInfoLevelId=0x0, lpFileInformation=0x2386dd8 | out: lpFileInformation=0x2386dd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f08f8d3, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3f08f8d3, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xddd71641, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x246e)) returned 1 [0160.008] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0160.010] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4BB6AC032612F432B6B5DA43EE2DAA6A8A03B6F4", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4BB6AC032612F432B6B5DA43EE2DAA6A8A03B6F4", lpFilePart=0x0) returned 0x85 [0160.011] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0160.011] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4BB6AC032612F432B6B5DA43EE2DAA6A8A03B6F4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4bb6ac032612f432b6b5da43ee2daa6a8a03b6f4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0160.011] GetFileType (hFile=0x444) returned 0x1 [0160.011] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0160.011] GetFileType (hFile=0x444) returned 0x1 [0160.011] ReadFile (in: hFile=0x444, lpBuffer=0x2187fb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x2187fb8*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0160.141] CloseHandle (hObject=0x444) returned 1 [0160.141] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4BB6AC032612F432B6B5DA43EE2DAA6A8A03B6F4", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4BB6AC032612F432B6B5DA43EE2DAA6A8A03B6F4", lpFilePart=0x0) returned 0x85 [0160.141] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0160.141] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4BB6AC032612F432B6B5DA43EE2DAA6A8A03B6F4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4bb6ac032612f432b6b5da43ee2daa6a8a03b6f4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0160.142] GetFileType (hFile=0x444) returned 0x1 [0160.142] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0160.142] GetFileType (hFile=0x444) returned 0x1 [0160.142] WriteFile (in: hFile=0x444, lpBuffer=0x2185c68*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x2185c68*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0160.142] CloseHandle (hObject=0x444) returned 1 [0160.142] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4BB6AC032612F432B6B5DA43EE2DAA6A8A03B6F4", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4BB6AC032612F432B6B5DA43EE2DAA6A8A03B6F4", lpFilePart=0x0) returned 0x85 [0160.142] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4BB6AC032612F432B6B5DA43EE2DAA6A8A03B6F4.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4BB6AC032612F432B6B5DA43EE2DAA6A8A03B6F4.xuy", lpFilePart=0x0) returned 0x89 [0160.142] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0160.142] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4BB6AC032612F432B6B5DA43EE2DAA6A8A03B6F4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4bb6ac032612f432b6b5da43ee2daa6a8a03b6f4"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f08f8d3, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3f08f8d3, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x4b4d27d4, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x246e)) returned 1 [0160.142] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0160.142] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4BB6AC032612F432B6B5DA43EE2DAA6A8A03B6F4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4bb6ac032612f432b6b5da43ee2daa6a8a03b6f4"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4BB6AC032612F432B6B5DA43EE2DAA6A8A03B6F4.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4bb6ac032612f432b6b5da43ee2daa6a8a03b6f4.xuy")) returned 1 [0160.144] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4C7EAEF07520B2C9900CFE06971368FF939AA197", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4C7EAEF07520B2C9900CFE06971368FF939AA197", lpFilePart=0x0) returned 0x85 [0160.144] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0160.144] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4C7EAEF07520B2C9900CFE06971368FF939AA197" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4c7eaef07520b2c9900cfe06971368ff939aa197"), fInfoLevelId=0x0, lpFileInformation=0x2204560 | out: lpFileInformation=0x2204560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86f157ba, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x86f157ba, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x86f17ecf, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x1157b)) returned 1 [0160.144] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0160.144] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4C7EAEF07520B2C9900CFE06971368FF939AA197", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4C7EAEF07520B2C9900CFE06971368FF939AA197", lpFilePart=0x0) returned 0x85 [0160.144] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0160.144] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4C7EAEF07520B2C9900CFE06971368FF939AA197" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4c7eaef07520b2c9900cfe06971368ff939aa197"), fInfoLevelId=0x0, lpFileInformation=0x2204760 | out: lpFileInformation=0x2204760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86f157ba, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x86f157ba, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x86f17ecf, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x1157b)) returned 1 [0160.144] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0160.144] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4C7EAEF07520B2C9900CFE06971368FF939AA197", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4C7EAEF07520B2C9900CFE06971368FF939AA197", lpFilePart=0x0) returned 0x85 [0160.144] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0160.144] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4C7EAEF07520B2C9900CFE06971368FF939AA197" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4c7eaef07520b2c9900cfe06971368ff939aa197"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0160.145] GetFileType (hFile=0x444) returned 0x1 [0160.145] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0160.145] GetFileType (hFile=0x444) returned 0x1 [0160.145] ReadFile (in: hFile=0x444, lpBuffer=0x2206c90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x2206c90*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0160.166] CloseHandle (hObject=0x444) returned 1 [0160.166] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4C7EAEF07520B2C9900CFE06971368FF939AA197", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4C7EAEF07520B2C9900CFE06971368FF939AA197", lpFilePart=0x0) returned 0x85 [0160.166] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0160.166] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4C7EAEF07520B2C9900CFE06971368FF939AA197" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4c7eaef07520b2c9900cfe06971368ff939aa197"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0160.167] GetFileType (hFile=0x444) returned 0x1 [0160.167] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0160.167] GetFileType (hFile=0x444) returned 0x1 [0160.167] WriteFile (in: hFile=0x444, lpBuffer=0x2204940*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x2204940*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0160.167] CloseHandle (hObject=0x444) returned 1 [0160.167] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4C7EAEF07520B2C9900CFE06971368FF939AA197", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4C7EAEF07520B2C9900CFE06971368FF939AA197", lpFilePart=0x0) returned 0x85 [0160.167] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4C7EAEF07520B2C9900CFE06971368FF939AA197.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4C7EAEF07520B2C9900CFE06971368FF939AA197.xuy", lpFilePart=0x0) returned 0x89 [0160.167] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0160.167] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4C7EAEF07520B2C9900CFE06971368FF939AA197" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4c7eaef07520b2c9900cfe06971368ff939aa197"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86f157ba, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x86f157ba, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x4b4f882e, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x1157b)) returned 1 [0160.167] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0160.167] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4C7EAEF07520B2C9900CFE06971368FF939AA197" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4c7eaef07520b2c9900cfe06971368ff939aa197"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4C7EAEF07520B2C9900CFE06971368FF939AA197.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4c7eaef07520b2c9900cfe06971368ff939aa197.xuy")) returned 1 [0160.169] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4CAD791F9C35BB747A46BAC7BE30A1E3BC028262", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4CAD791F9C35BB747A46BAC7BE30A1E3BC028262", lpFilePart=0x0) returned 0x85 [0160.169] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0160.169] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4CAD791F9C35BB747A46BAC7BE30A1E3BC028262" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4cad791f9c35bb747a46bac7be30a1e3bc028262"), fInfoLevelId=0x0, lpFileInformation=0x2283238 | out: lpFileInformation=0x2283238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41b81eab, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x41b81eab, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x41b81eab, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0xfb1)) returned 1 [0160.169] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0160.169] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4CAD791F9C35BB747A46BAC7BE30A1E3BC028262", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4CAD791F9C35BB747A46BAC7BE30A1E3BC028262", lpFilePart=0x0) returned 0x85 [0160.169] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0160.169] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4CAD791F9C35BB747A46BAC7BE30A1E3BC028262" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4cad791f9c35bb747a46bac7be30a1e3bc028262"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0160.169] GetFileType (hFile=0x444) returned 0x1 [0160.169] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0160.169] GetFileType (hFile=0x444) returned 0x1 [0160.169] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xfb1 [0160.169] ReadFile (in: hFile=0x444, lpBuffer=0x2284608, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x2284608*, lpNumberOfBytesRead=0x3be5c8*=0xfb1, lpOverlapped=0x0) returned 1 [0160.180] CloseHandle (hObject=0x444) returned 1 [0160.191] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4CAD791F9C35BB747A46BAC7BE30A1E3BC028262", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4CAD791F9C35BB747A46BAC7BE30A1E3BC028262", lpFilePart=0x0) returned 0x85 [0160.191] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0160.191] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4CAD791F9C35BB747A46BAC7BE30A1E3BC028262" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4cad791f9c35bb747a46bac7be30a1e3bc028262"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0160.193] GetFileType (hFile=0x444) returned 0x1 [0160.193] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0160.193] GetFileType (hFile=0x444) returned 0x1 [0160.193] WriteFile (in: hFile=0x444, lpBuffer=0x2300560*, nNumberOfBytesToWrite=0xfc0, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x2300560*, lpNumberOfBytesWritten=0x3be4d8*=0xfc0, lpOverlapped=0x0) returned 1 [0160.194] CloseHandle (hObject=0x444) returned 1 [0160.194] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4CAD791F9C35BB747A46BAC7BE30A1E3BC028262", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4CAD791F9C35BB747A46BAC7BE30A1E3BC028262", lpFilePart=0x0) returned 0x85 [0160.194] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4CAD791F9C35BB747A46BAC7BE30A1E3BC028262.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4CAD791F9C35BB747A46BAC7BE30A1E3BC028262.xuy", lpFilePart=0x0) returned 0x89 [0160.194] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0160.194] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4CAD791F9C35BB747A46BAC7BE30A1E3BC028262" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4cad791f9c35bb747a46bac7be30a1e3bc028262"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41b81eab, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x41b81eab, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x4b544f71, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xfc0)) returned 1 [0160.194] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0160.194] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4CAD791F9C35BB747A46BAC7BE30A1E3BC028262" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4cad791f9c35bb747a46bac7be30a1e3bc028262"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4CAD791F9C35BB747A46BAC7BE30A1E3BC028262.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4cad791f9c35bb747a46bac7be30a1e3bc028262.xuy")) returned 1 [0160.196] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4CF1AED5BBD3500653D8E2D1ACE09C58CF2D6182", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4CF1AED5BBD3500653D8E2D1ACE09C58CF2D6182", lpFilePart=0x0) returned 0x85 [0160.196] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0160.196] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4CF1AED5BBD3500653D8E2D1ACE09C58CF2D6182" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4cf1aed5bbd3500653d8e2d1ace09c58cf2d6182"), fInfoLevelId=0x0, lpFileInformation=0x2301920 | out: lpFileInformation=0x2301920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5e982952, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x5e982952, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x5e982952, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x23d3b)) returned 1 [0160.196] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0160.196] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4CF1AED5BBD3500653D8E2D1ACE09C58CF2D6182", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4CF1AED5BBD3500653D8E2D1ACE09C58CF2D6182", lpFilePart=0x0) returned 0x85 [0160.196] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0160.196] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4CF1AED5BBD3500653D8E2D1ACE09C58CF2D6182" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4cf1aed5bbd3500653d8e2d1ace09c58cf2d6182"), fInfoLevelId=0x0, lpFileInformation=0x2301b20 | out: lpFileInformation=0x2301b20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5e982952, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x5e982952, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x5e982952, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x23d3b)) returned 1 [0160.196] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0160.196] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4CF1AED5BBD3500653D8E2D1ACE09C58CF2D6182", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4CF1AED5BBD3500653D8E2D1ACE09C58CF2D6182", lpFilePart=0x0) returned 0x85 [0160.196] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0160.196] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4CF1AED5BBD3500653D8E2D1ACE09C58CF2D6182" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4cf1aed5bbd3500653d8e2d1ace09c58cf2d6182"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0160.197] GetFileType (hFile=0x444) returned 0x1 [0160.197] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0160.197] GetFileType (hFile=0x444) returned 0x1 [0160.197] ReadFile (in: hFile=0x444, lpBuffer=0x2304050, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x2304050*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0160.222] CloseHandle (hObject=0x444) returned 1 [0160.223] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4CF1AED5BBD3500653D8E2D1ACE09C58CF2D6182", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4CF1AED5BBD3500653D8E2D1ACE09C58CF2D6182", lpFilePart=0x0) returned 0x85 [0160.223] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0160.223] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4CF1AED5BBD3500653D8E2D1ACE09C58CF2D6182" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4cf1aed5bbd3500653d8e2d1ace09c58cf2d6182"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0160.223] GetFileType (hFile=0x444) returned 0x1 [0160.223] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0160.223] GetFileType (hFile=0x444) returned 0x1 [0160.223] WriteFile (in: hFile=0x444, lpBuffer=0x2301d00*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x2301d00*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0160.224] CloseHandle (hObject=0x444) returned 1 [0160.224] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4CF1AED5BBD3500653D8E2D1ACE09C58CF2D6182", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4CF1AED5BBD3500653D8E2D1ACE09C58CF2D6182", lpFilePart=0x0) returned 0x85 [0160.224] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4CF1AED5BBD3500653D8E2D1ACE09C58CF2D6182.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4CF1AED5BBD3500653D8E2D1ACE09C58CF2D6182.xuy", lpFilePart=0x0) returned 0x89 [0160.224] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0160.224] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4CF1AED5BBD3500653D8E2D1ACE09C58CF2D6182" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4cf1aed5bbd3500653d8e2d1ace09c58cf2d6182"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5e982952, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x5e982952, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x4b5911e0, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x23d3b)) returned 1 [0160.224] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0160.224] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4CF1AED5BBD3500653D8E2D1ACE09C58CF2D6182" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4cf1aed5bbd3500653d8e2d1ace09c58cf2d6182"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4CF1AED5BBD3500653D8E2D1ACE09C58CF2D6182.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4cf1aed5bbd3500653d8e2d1ace09c58cf2d6182.xuy")) returned 1 [0160.225] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4DCE88D30F65C9460CC26665BC0A65F3234FA3D4", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4DCE88D30F65C9460CC26665BC0A65F3234FA3D4", lpFilePart=0x0) returned 0x85 [0160.225] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0160.225] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4DCE88D30F65C9460CC26665BC0A65F3234FA3D4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4dce88d30f65c9460cc26665bc0a65f3234fa3d4"), fInfoLevelId=0x0, lpFileInformation=0x23805f8 | out: lpFileInformation=0x23805f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99f5d18a, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x99f5d18a, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x99f5f894, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x1096)) returned 1 [0160.226] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0160.226] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4DCE88D30F65C9460CC26665BC0A65F3234FA3D4", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4DCE88D30F65C9460CC26665BC0A65F3234FA3D4", lpFilePart=0x0) returned 0x85 [0160.226] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0160.226] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4DCE88D30F65C9460CC26665BC0A65F3234FA3D4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4dce88d30f65c9460cc26665bc0a65f3234fa3d4"), fInfoLevelId=0x0, lpFileInformation=0x23807f8 | out: lpFileInformation=0x23807f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99f5d18a, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x99f5d18a, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x99f5f894, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x1096)) returned 1 [0160.226] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0160.226] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4DCE88D30F65C9460CC26665BC0A65F3234FA3D4", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4DCE88D30F65C9460CC26665BC0A65F3234FA3D4", lpFilePart=0x0) returned 0x85 [0160.227] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0160.227] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4DCE88D30F65C9460CC26665BC0A65F3234FA3D4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4dce88d30f65c9460cc26665bc0a65f3234fa3d4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0160.227] GetFileType (hFile=0x444) returned 0x1 [0160.228] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0160.228] GetFileType (hFile=0x444) returned 0x1 [0160.228] ReadFile (in: hFile=0x444, lpBuffer=0x2382d28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x2382d28*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0160.327] CloseHandle (hObject=0x444) returned 1 [0160.327] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4DCE88D30F65C9460CC26665BC0A65F3234FA3D4", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4DCE88D30F65C9460CC26665BC0A65F3234FA3D4", lpFilePart=0x0) returned 0x85 [0160.327] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0160.327] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4DCE88D30F65C9460CC26665BC0A65F3234FA3D4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4dce88d30f65c9460cc26665bc0a65f3234fa3d4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0160.327] GetFileType (hFile=0x444) returned 0x1 [0160.327] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0160.327] GetFileType (hFile=0x444) returned 0x1 [0160.327] WriteFile (in: hFile=0x444, lpBuffer=0x2185c28*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x2185c28*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0160.328] CloseHandle (hObject=0x444) returned 1 [0160.328] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4DCE88D30F65C9460CC26665BC0A65F3234FA3D4", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4DCE88D30F65C9460CC26665BC0A65F3234FA3D4", lpFilePart=0x0) returned 0x85 [0160.328] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4DCE88D30F65C9460CC26665BC0A65F3234FA3D4.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4DCE88D30F65C9460CC26665BC0A65F3234FA3D4.xuy", lpFilePart=0x0) returned 0x89 [0160.328] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0160.328] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4DCE88D30F65C9460CC26665BC0A65F3234FA3D4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4dce88d30f65c9460cc26665bc0a65f3234fa3d4"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99f5d18a, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x99f5d18a, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x4b69c2c2, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0160.328] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0160.328] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4DCE88D30F65C9460CC26665BC0A65F3234FA3D4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4dce88d30f65c9460cc26665bc0a65f3234fa3d4"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4DCE88D30F65C9460CC26665BC0A65F3234FA3D4.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4dce88d30f65c9460cc26665bc0a65f3234fa3d4.xuy")) returned 1 [0160.329] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4DEBFBF420A31CFDD61418B1BE3ADB580389730E", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4DEBFBF420A31CFDD61418B1BE3ADB580389730E", lpFilePart=0x0) returned 0x85 [0160.329] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0160.329] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4DEBFBF420A31CFDD61418B1BE3ADB580389730E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4debfbf420a31cfdd61418b1be3adb580389730e"), fInfoLevelId=0x0, lpFileInformation=0x22028e0 | out: lpFileInformation=0x22028e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4338d3ac, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x4338d3ac, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x433d984d, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0xd42)) returned 1 [0160.330] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0160.330] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4DEBFBF420A31CFDD61418B1BE3ADB580389730E", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4DEBFBF420A31CFDD61418B1BE3ADB580389730E", lpFilePart=0x0) returned 0x85 [0160.330] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0160.330] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4DEBFBF420A31CFDD61418B1BE3ADB580389730E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4debfbf420a31cfdd61418b1be3adb580389730e"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0160.330] GetFileType (hFile=0x444) returned 0x1 [0160.330] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0160.330] GetFileType (hFile=0x444) returned 0x1 [0160.330] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xd42 [0160.331] ReadFile (in: hFile=0x444, lpBuffer=0x2203a40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x2203a40*, lpNumberOfBytesRead=0x3be5c8*=0xd42, lpOverlapped=0x0) returned 1 [0160.332] CloseHandle (hObject=0x444) returned 1 [0160.342] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4DEBFBF420A31CFDD61418B1BE3ADB580389730E", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4DEBFBF420A31CFDD61418B1BE3ADB580389730E", lpFilePart=0x0) returned 0x85 [0160.342] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0160.342] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4DEBFBF420A31CFDD61418B1BE3ADB580389730E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4debfbf420a31cfdd61418b1be3adb580389730e"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0160.344] GetFileType (hFile=0x444) returned 0x1 [0160.344] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0160.344] GetFileType (hFile=0x444) returned 0x1 [0160.344] WriteFile (in: hFile=0x444, lpBuffer=0x227ed68*, nNumberOfBytesToWrite=0xd50, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x227ed68*, lpNumberOfBytesWritten=0x3be4d8*=0xd50, lpOverlapped=0x0) returned 1 [0160.345] CloseHandle (hObject=0x444) returned 1 [0160.345] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4DEBFBF420A31CFDD61418B1BE3ADB580389730E", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4DEBFBF420A31CFDD61418B1BE3ADB580389730E", lpFilePart=0x0) returned 0x85 [0160.345] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4DEBFBF420A31CFDD61418B1BE3ADB580389730E.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4DEBFBF420A31CFDD61418B1BE3ADB580389730E.xuy", lpFilePart=0x0) returned 0x89 [0160.345] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0160.345] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4DEBFBF420A31CFDD61418B1BE3ADB580389730E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4debfbf420a31cfdd61418b1be3adb580389730e"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4338d3ac, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x4338d3ac, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x4b6c24bf, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xd50)) returned 1 [0160.345] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0160.345] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4DEBFBF420A31CFDD61418B1BE3ADB580389730E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4debfbf420a31cfdd61418b1be3adb580389730e"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4DEBFBF420A31CFDD61418B1BE3ADB580389730E.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4debfbf420a31cfdd61418b1be3adb580389730e.xuy")) returned 1 [0160.346] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4EFB15999EE57EDBFAADF69D6A31D8C6F90FE8DC", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4EFB15999EE57EDBFAADF69D6A31D8C6F90FE8DC", lpFilePart=0x0) returned 0x85 [0160.346] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0160.346] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4EFB15999EE57EDBFAADF69D6A31D8C6F90FE8DC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4efb15999ee57edbfaadf69d6a31d8c6f90fe8dc"), fInfoLevelId=0x0, lpFileInformation=0x2280128 | out: lpFileInformation=0x2280128*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6152bc7d, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x6152bc7d, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x6152bc7d, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xe27)) returned 1 [0160.347] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0160.347] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4EFB15999EE57EDBFAADF69D6A31D8C6F90FE8DC", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4EFB15999EE57EDBFAADF69D6A31D8C6F90FE8DC", lpFilePart=0x0) returned 0x85 [0160.347] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0160.347] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4EFB15999EE57EDBFAADF69D6A31D8C6F90FE8DC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4efb15999ee57edbfaadf69d6a31d8c6f90fe8dc"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0160.347] GetFileType (hFile=0x444) returned 0x1 [0160.347] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0160.347] GetFileType (hFile=0x444) returned 0x1 [0160.347] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xe27 [0160.347] ReadFile (in: hFile=0x444, lpBuffer=0x2281368, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x2281368*, lpNumberOfBytesRead=0x3be5c8*=0xe27, lpOverlapped=0x0) returned 1 [0160.353] CloseHandle (hObject=0x444) returned 1 [0160.364] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4EFB15999EE57EDBFAADF69D6A31D8C6F90FE8DC", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4EFB15999EE57EDBFAADF69D6A31D8C6F90FE8DC", lpFilePart=0x0) returned 0x85 [0160.364] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0160.364] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4EFB15999EE57EDBFAADF69D6A31D8C6F90FE8DC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4efb15999ee57edbfaadf69d6a31d8c6f90fe8dc"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0160.365] GetFileType (hFile=0x444) returned 0x1 [0160.365] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0160.365] GetFileType (hFile=0x444) returned 0x1 [0160.365] WriteFile (in: hFile=0x444, lpBuffer=0x22fcaf0*, nNumberOfBytesToWrite=0xe30, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x22fcaf0*, lpNumberOfBytesWritten=0x3be4d8*=0xe30, lpOverlapped=0x0) returned 1 [0160.366] CloseHandle (hObject=0x444) returned 1 [0160.366] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4EFB15999EE57EDBFAADF69D6A31D8C6F90FE8DC", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4EFB15999EE57EDBFAADF69D6A31D8C6F90FE8DC", lpFilePart=0x0) returned 0x85 [0160.366] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4EFB15999EE57EDBFAADF69D6A31D8C6F90FE8DC.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4EFB15999EE57EDBFAADF69D6A31D8C6F90FE8DC.xuy", lpFilePart=0x0) returned 0x89 [0160.366] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0160.366] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4EFB15999EE57EDBFAADF69D6A31D8C6F90FE8DC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4efb15999ee57edbfaadf69d6a31d8c6f90fe8dc"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6152bc7d, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x6152bc7d, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x4b6e8677, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xe30)) returned 1 [0160.366] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0160.366] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4EFB15999EE57EDBFAADF69D6A31D8C6F90FE8DC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4efb15999ee57edbfaadf69d6a31d8c6f90fe8dc"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4EFB15999EE57EDBFAADF69D6A31D8C6F90FE8DC.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4efb15999ee57edbfaadf69d6a31d8c6f90fe8dc.xuy")) returned 1 [0160.368] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4F0C54EEF677196E2899E5E79B4F3A906E46F926", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4F0C54EEF677196E2899E5E79B4F3A906E46F926", lpFilePart=0x0) returned 0x85 [0160.368] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0160.368] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4F0C54EEF677196E2899E5E79B4F3A906E46F926" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4f0c54eef677196e2899e5e79b4f3a906e46f926"), fInfoLevelId=0x0, lpFileInformation=0x22fdeb0 | out: lpFileInformation=0x22fdeb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6152bc7d, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x6152bc7d, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x6152bc7d, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xe29)) returned 1 [0160.368] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0160.368] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4F0C54EEF677196E2899E5E79B4F3A906E46F926", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4F0C54EEF677196E2899E5E79B4F3A906E46F926", lpFilePart=0x0) returned 0x85 [0160.368] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0160.368] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4F0C54EEF677196E2899E5E79B4F3A906E46F926" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4f0c54eef677196e2899e5e79b4f3a906e46f926"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0160.368] GetFileType (hFile=0x444) returned 0x1 [0160.368] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0160.368] GetFileType (hFile=0x444) returned 0x1 [0160.368] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xe29 [0160.368] ReadFile (in: hFile=0x444, lpBuffer=0x22ff0f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x22ff0f8*, lpNumberOfBytesRead=0x3be5c8*=0xe29, lpOverlapped=0x0) returned 1 [0160.377] CloseHandle (hObject=0x444) returned 1 [0160.388] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4F0C54EEF677196E2899E5E79B4F3A906E46F926", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4F0C54EEF677196E2899E5E79B4F3A906E46F926", lpFilePart=0x0) returned 0x85 [0160.388] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0160.388] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4F0C54EEF677196E2899E5E79B4F3A906E46F926" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4f0c54eef677196e2899e5e79b4f3a906e46f926"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0160.390] GetFileType (hFile=0x444) returned 0x1 [0160.390] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0160.390] GetFileType (hFile=0x444) returned 0x1 [0160.390] WriteFile (in: hFile=0x444, lpBuffer=0x237a878*, nNumberOfBytesToWrite=0xe30, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x237a878*, lpNumberOfBytesWritten=0x3be4d8*=0xe30, lpOverlapped=0x0) returned 1 [0160.391] CloseHandle (hObject=0x444) returned 1 [0160.391] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4F0C54EEF677196E2899E5E79B4F3A906E46F926", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4F0C54EEF677196E2899E5E79B4F3A906E46F926", lpFilePart=0x0) returned 0x85 [0160.391] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4F0C54EEF677196E2899E5E79B4F3A906E46F926.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4F0C54EEF677196E2899E5E79B4F3A906E46F926.xuy", lpFilePart=0x0) returned 0x89 [0160.391] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0160.391] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4F0C54EEF677196E2899E5E79B4F3A906E46F926" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4f0c54eef677196e2899e5e79b4f3a906e46f926"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6152bc7d, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x6152bc7d, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x4b734d5d, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xe30)) returned 1 [0160.391] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0160.391] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4F0C54EEF677196E2899E5E79B4F3A906E46F926" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4f0c54eef677196e2899e5e79b4f3a906e46f926"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4F0C54EEF677196E2899E5E79B4F3A906E46F926.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4f0c54eef677196e2899e5e79b4f3a906e46f926.xuy")) returned 1 [0160.393] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4F21DDD23480F1D4FBA13115BADB18B9AD18D8B1", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4F21DDD23480F1D4FBA13115BADB18B9AD18D8B1", lpFilePart=0x0) returned 0x85 [0160.393] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0160.393] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4F21DDD23480F1D4FBA13115BADB18B9AD18D8B1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4f21ddd23480f1d4fba13115badb18b9ad18d8b1"), fInfoLevelId=0x0, lpFileInformation=0x237bc38 | out: lpFileInformation=0x237bc38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc50c5407, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc50c5407, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xc80f6790, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x275b)) returned 1 [0160.393] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0160.393] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4F21DDD23480F1D4FBA13115BADB18B9AD18D8B1", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4F21DDD23480F1D4FBA13115BADB18B9AD18D8B1", lpFilePart=0x0) returned 0x85 [0160.393] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0160.393] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4F21DDD23480F1D4FBA13115BADB18B9AD18D8B1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4f21ddd23480f1d4fba13115badb18b9ad18d8b1"), fInfoLevelId=0x0, lpFileInformation=0x237be38 | out: lpFileInformation=0x237be38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc50c5407, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc50c5407, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xc80f6790, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x275b)) returned 1 [0160.393] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0160.393] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4F21DDD23480F1D4FBA13115BADB18B9AD18D8B1", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4F21DDD23480F1D4FBA13115BADB18B9AD18D8B1", lpFilePart=0x0) returned 0x85 [0160.393] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0160.393] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4F21DDD23480F1D4FBA13115BADB18B9AD18D8B1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4f21ddd23480f1d4fba13115badb18b9ad18d8b1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0160.394] GetFileType (hFile=0x444) returned 0x1 [0160.394] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0160.394] GetFileType (hFile=0x444) returned 0x1 [0160.394] ReadFile (in: hFile=0x444, lpBuffer=0x237e368, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x237e368*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0160.448] CloseHandle (hObject=0x444) returned 1 [0160.448] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4F21DDD23480F1D4FBA13115BADB18B9AD18D8B1", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4F21DDD23480F1D4FBA13115BADB18B9AD18D8B1", lpFilePart=0x0) returned 0x85 [0160.449] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0160.449] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4F21DDD23480F1D4FBA13115BADB18B9AD18D8B1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4f21ddd23480f1d4fba13115badb18b9ad18d8b1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0160.449] GetFileType (hFile=0x444) returned 0x1 [0160.449] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0160.449] GetFileType (hFile=0x444) returned 0x1 [0160.449] WriteFile (in: hFile=0x444, lpBuffer=0x2185c28*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x2185c28*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0160.450] CloseHandle (hObject=0x444) returned 1 [0160.450] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4F21DDD23480F1D4FBA13115BADB18B9AD18D8B1", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4F21DDD23480F1D4FBA13115BADB18B9AD18D8B1", lpFilePart=0x0) returned 0x85 [0160.450] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4F21DDD23480F1D4FBA13115BADB18B9AD18D8B1.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4F21DDD23480F1D4FBA13115BADB18B9AD18D8B1.xuy", lpFilePart=0x0) returned 0x89 [0160.450] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0160.450] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4F21DDD23480F1D4FBA13115BADB18B9AD18D8B1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4f21ddd23480f1d4fba13115badb18b9ad18d8b1"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc50c5407, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc50c5407, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x4b7cd5eb, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x275b)) returned 1 [0160.450] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0160.451] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4F21DDD23480F1D4FBA13115BADB18B9AD18D8B1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4f21ddd23480f1d4fba13115badb18b9ad18d8b1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4F21DDD23480F1D4FBA13115BADB18B9AD18D8B1.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4f21ddd23480f1d4fba13115badb18b9ad18d8b1.xuy")) returned 1 [0160.452] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4F372C9418B79051ABED288900CDF3D20C12F38C", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4F372C9418B79051ABED288900CDF3D20C12F38C", lpFilePart=0x0) returned 0x85 [0160.452] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0160.452] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4F372C9418B79051ABED288900CDF3D20C12F38C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4f372c9418b79051abed288900cdf3d20c12f38c"), fInfoLevelId=0x0, lpFileInformation=0x21fa8f0 | out: lpFileInformation=0x21fa8f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6152bc7d, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x6152bc7d, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x6152bc7d, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x10df)) returned 1 [0160.452] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0160.452] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4F372C9418B79051ABED288900CDF3D20C12F38C", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4F372C9418B79051ABED288900CDF3D20C12F38C", lpFilePart=0x0) returned 0x85 [0160.452] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0160.452] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4F372C9418B79051ABED288900CDF3D20C12F38C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4f372c9418b79051abed288900cdf3d20c12f38c"), fInfoLevelId=0x0, lpFileInformation=0x21faaf0 | out: lpFileInformation=0x21faaf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6152bc7d, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x6152bc7d, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x6152bc7d, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x10df)) returned 1 [0160.452] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0160.453] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4F372C9418B79051ABED288900CDF3D20C12F38C", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4F372C9418B79051ABED288900CDF3D20C12F38C", lpFilePart=0x0) returned 0x85 [0160.453] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0160.453] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4F372C9418B79051ABED288900CDF3D20C12F38C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4f372c9418b79051abed288900cdf3d20c12f38c"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0160.453] GetFileType (hFile=0x444) returned 0x1 [0160.454] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0160.454] GetFileType (hFile=0x444) returned 0x1 [0160.454] ReadFile (in: hFile=0x444, lpBuffer=0x21fd020, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x21fd020*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0160.467] CloseHandle (hObject=0x444) returned 1 [0160.467] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4F372C9418B79051ABED288900CDF3D20C12F38C", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4F372C9418B79051ABED288900CDF3D20C12F38C", lpFilePart=0x0) returned 0x85 [0160.467] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0160.467] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4F372C9418B79051ABED288900CDF3D20C12F38C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4f372c9418b79051abed288900cdf3d20c12f38c"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0160.468] GetFileType (hFile=0x444) returned 0x1 [0160.468] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0160.468] GetFileType (hFile=0x444) returned 0x1 [0160.468] WriteFile (in: hFile=0x444, lpBuffer=0x21facd0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x21facd0*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0160.468] CloseHandle (hObject=0x444) returned 1 [0160.468] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4F372C9418B79051ABED288900CDF3D20C12F38C", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4F372C9418B79051ABED288900CDF3D20C12F38C", lpFilePart=0x0) returned 0x85 [0160.468] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4F372C9418B79051ABED288900CDF3D20C12F38C.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4F372C9418B79051ABED288900CDF3D20C12F38C.xuy", lpFilePart=0x0) returned 0x89 [0160.468] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0160.468] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4F372C9418B79051ABED288900CDF3D20C12F38C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4f372c9418b79051abed288900cdf3d20c12f38c"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6152bc7d, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x6152bc7d, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x4b7f3b96, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0160.468] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0160.468] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4F372C9418B79051ABED288900CDF3D20C12F38C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4f372c9418b79051abed288900cdf3d20c12f38c"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4F372C9418B79051ABED288900CDF3D20C12F38C.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4f372c9418b79051abed288900cdf3d20c12f38c.xuy")) returned 1 [0160.470] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4F680E68B8C682B5D2540FA7BE7B7F0D7521D9C9", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4F680E68B8C682B5D2540FA7BE7B7F0D7521D9C9", lpFilePart=0x0) returned 0x85 [0160.470] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0160.470] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4F680E68B8C682B5D2540FA7BE7B7F0D7521D9C9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4f680e68b8c682b5d2540fa7be7b7f0d7521d9c9"), fInfoLevelId=0x0, lpFileInformation=0x22795c8 | out: lpFileInformation=0x22795c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x466cfd21, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x466cfd21, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x466cfd21, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0x458)) returned 1 [0160.470] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0160.470] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4F680E68B8C682B5D2540FA7BE7B7F0D7521D9C9", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4F680E68B8C682B5D2540FA7BE7B7F0D7521D9C9", lpFilePart=0x0) returned 0x85 [0160.470] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0160.470] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4F680E68B8C682B5D2540FA7BE7B7F0D7521D9C9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4f680e68b8c682b5d2540fa7be7b7f0d7521d9c9"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0160.470] GetFileType (hFile=0x444) returned 0x1 [0160.470] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0160.470] GetFileType (hFile=0x444) returned 0x1 [0160.470] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x458 [0160.470] ReadFile (in: hFile=0x444, lpBuffer=0x2279e38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x2279e38*, lpNumberOfBytesRead=0x3be5c8*=0x458, lpOverlapped=0x0) returned 1 [0160.472] CloseHandle (hObject=0x444) returned 1 [0160.484] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4F680E68B8C682B5D2540FA7BE7B7F0D7521D9C9", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4F680E68B8C682B5D2540FA7BE7B7F0D7521D9C9", lpFilePart=0x0) returned 0x85 [0160.484] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0160.484] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4F680E68B8C682B5D2540FA7BE7B7F0D7521D9C9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4f680e68b8c682b5d2540fa7be7b7f0d7521d9c9"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0160.486] GetFileType (hFile=0x444) returned 0x1 [0160.486] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0160.486] GetFileType (hFile=0x444) returned 0x1 [0160.486] WriteFile (in: hFile=0x444, lpBuffer=0x22f24a8*, nNumberOfBytesToWrite=0x460, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x22f24a8*, lpNumberOfBytesWritten=0x3be4d8*=0x460, lpOverlapped=0x0) returned 1 [0160.487] CloseHandle (hObject=0x444) returned 1 [0160.487] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4F680E68B8C682B5D2540FA7BE7B7F0D7521D9C9", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4F680E68B8C682B5D2540FA7BE7B7F0D7521D9C9", lpFilePart=0x0) returned 0x85 [0160.487] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4F680E68B8C682B5D2540FA7BE7B7F0D7521D9C9.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4F680E68B8C682B5D2540FA7BE7B7F0D7521D9C9.xuy", lpFilePart=0x0) returned 0x89 [0160.487] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0160.487] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4F680E68B8C682B5D2540FA7BE7B7F0D7521D9C9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4f680e68b8c682b5d2540fa7be7b7f0d7521d9c9"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x466cfd21, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x466cfd21, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x4b819b73, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x460)) returned 1 [0160.487] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0160.487] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4F680E68B8C682B5D2540FA7BE7B7F0D7521D9C9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4f680e68b8c682b5d2540fa7be7b7f0d7521d9c9"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4F680E68B8C682B5D2540FA7BE7B7F0D7521D9C9.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4f680e68b8c682b5d2540fa7be7b7f0d7521d9c9.xuy")) returned 1 [0160.488] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4F78D1F2D9B48D34C6259CF59FD5E171B97EFB3A", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4F78D1F2D9B48D34C6259CF59FD5E171B97EFB3A", lpFilePart=0x0) returned 0x85 [0160.488] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0160.488] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4F78D1F2D9B48D34C6259CF59FD5E171B97EFB3A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4f78d1f2d9b48d34c6259cf59fd5e171b97efb3a"), fInfoLevelId=0x0, lpFileInformation=0x22f3868 | out: lpFileInformation=0x22f3868*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x402961c1, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x402961c1, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x402961c1, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x6f2e)) returned 1 [0160.488] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0160.488] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4F78D1F2D9B48D34C6259CF59FD5E171B97EFB3A", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4F78D1F2D9B48D34C6259CF59FD5E171B97EFB3A", lpFilePart=0x0) returned 0x85 [0160.488] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0160.488] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4F78D1F2D9B48D34C6259CF59FD5E171B97EFB3A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4f78d1f2d9b48d34c6259cf59fd5e171b97efb3a"), fInfoLevelId=0x0, lpFileInformation=0x22f3a68 | out: lpFileInformation=0x22f3a68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x402961c1, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x402961c1, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x402961c1, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x6f2e)) returned 1 [0160.488] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0160.489] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4F78D1F2D9B48D34C6259CF59FD5E171B97EFB3A", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4F78D1F2D9B48D34C6259CF59FD5E171B97EFB3A", lpFilePart=0x0) returned 0x85 [0160.489] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0160.489] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4F78D1F2D9B48D34C6259CF59FD5E171B97EFB3A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4f78d1f2d9b48d34c6259cf59fd5e171b97efb3a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0160.489] GetFileType (hFile=0x444) returned 0x1 [0160.489] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0160.489] GetFileType (hFile=0x444) returned 0x1 [0160.489] ReadFile (in: hFile=0x444, lpBuffer=0x22f5f98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x22f5f98*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0160.517] CloseHandle (hObject=0x444) returned 1 [0160.517] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4F78D1F2D9B48D34C6259CF59FD5E171B97EFB3A", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4F78D1F2D9B48D34C6259CF59FD5E171B97EFB3A", lpFilePart=0x0) returned 0x85 [0160.517] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0160.517] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4F78D1F2D9B48D34C6259CF59FD5E171B97EFB3A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4f78d1f2d9b48d34c6259cf59fd5e171b97efb3a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0160.518] GetFileType (hFile=0x444) returned 0x1 [0160.518] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0160.518] GetFileType (hFile=0x444) returned 0x1 [0160.518] WriteFile (in: hFile=0x444, lpBuffer=0x22f3c48*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x22f3c48*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0160.518] CloseHandle (hObject=0x444) returned 1 [0160.518] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4F78D1F2D9B48D34C6259CF59FD5E171B97EFB3A", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4F78D1F2D9B48D34C6259CF59FD5E171B97EFB3A", lpFilePart=0x0) returned 0x85 [0160.518] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4F78D1F2D9B48D34C6259CF59FD5E171B97EFB3A.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4F78D1F2D9B48D34C6259CF59FD5E171B97EFB3A.xuy", lpFilePart=0x0) returned 0x89 [0160.518] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0160.518] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4F78D1F2D9B48D34C6259CF59FD5E171B97EFB3A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4f78d1f2d9b48d34c6259cf59fd5e171b97efb3a"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x402961c1, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x402961c1, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x4b866058, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x6f2e)) returned 1 [0160.518] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0160.518] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4F78D1F2D9B48D34C6259CF59FD5E171B97EFB3A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4f78d1f2d9b48d34c6259cf59fd5e171b97efb3a"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4F78D1F2D9B48D34C6259CF59FD5E171B97EFB3A.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4f78d1f2d9b48d34c6259cf59fd5e171b97efb3a.xuy")) returned 1 [0160.520] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4FC872C4A3A8739207D005A676C19DAB518FA53B", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4FC872C4A3A8739207D005A676C19DAB518FA53B", lpFilePart=0x0) returned 0x85 [0160.520] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0160.520] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4FC872C4A3A8739207D005A676C19DAB518FA53B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4fc872c4a3a8739207d005a676c19dab518fa53b"), fInfoLevelId=0x0, lpFileInformation=0x2372540 | out: lpFileInformation=0x2372540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8970447f, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x8970447f, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x3c299942, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0x300a)) returned 1 [0160.520] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0160.520] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4FC872C4A3A8739207D005A676C19DAB518FA53B", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4FC872C4A3A8739207D005A676C19DAB518FA53B", lpFilePart=0x0) returned 0x85 [0160.520] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0160.520] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4FC872C4A3A8739207D005A676C19DAB518FA53B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4fc872c4a3a8739207d005a676c19dab518fa53b"), fInfoLevelId=0x0, lpFileInformation=0x2372740 | out: lpFileInformation=0x2372740*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8970447f, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x8970447f, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x3c299942, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0x300a)) returned 1 [0160.520] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0160.520] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4FC872C4A3A8739207D005A676C19DAB518FA53B", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4FC872C4A3A8739207D005A676C19DAB518FA53B", lpFilePart=0x0) returned 0x85 [0160.520] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0160.520] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4FC872C4A3A8739207D005A676C19DAB518FA53B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4fc872c4a3a8739207d005a676c19dab518fa53b"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0160.521] GetFileType (hFile=0x444) returned 0x1 [0160.521] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0160.521] GetFileType (hFile=0x444) returned 0x1 [0160.521] ReadFile (in: hFile=0x444, lpBuffer=0x2374c70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x2374c70*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0160.581] CloseHandle (hObject=0x444) returned 1 [0160.581] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4FC872C4A3A8739207D005A676C19DAB518FA53B", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4FC872C4A3A8739207D005A676C19DAB518FA53B", lpFilePart=0x0) returned 0x85 [0160.581] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0160.581] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4FC872C4A3A8739207D005A676C19DAB518FA53B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4fc872c4a3a8739207d005a676c19dab518fa53b"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0160.582] GetFileType (hFile=0x444) returned 0x1 [0160.582] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0160.582] GetFileType (hFile=0x444) returned 0x1 [0160.582] WriteFile (in: hFile=0x444, lpBuffer=0x2185c28*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x2185c28*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0160.582] CloseHandle (hObject=0x444) returned 1 [0160.582] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4FC872C4A3A8739207D005A676C19DAB518FA53B", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4FC872C4A3A8739207D005A676C19DAB518FA53B", lpFilePart=0x0) returned 0x85 [0160.582] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4FC872C4A3A8739207D005A676C19DAB518FA53B.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4FC872C4A3A8739207D005A676C19DAB518FA53B.xuy", lpFilePart=0x0) returned 0x89 [0160.582] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0160.582] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4FC872C4A3A8739207D005A676C19DAB518FA53B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4fc872c4a3a8739207d005a676c19dab518fa53b"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8970447f, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x8970447f, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x4b8fed56, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x300a)) returned 1 [0160.582] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0160.582] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4FC872C4A3A8739207D005A676C19DAB518FA53B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4fc872c4a3a8739207d005a676c19dab518fa53b"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4FC872C4A3A8739207D005A676C19DAB518FA53B.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4fc872c4a3a8739207d005a676c19dab518fa53b.xuy")) returned 1 [0160.584] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\514D7C625328106E43CEC7FD7CF71AEDA0A3101F", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\514D7C625328106E43CEC7FD7CF71AEDA0A3101F", lpFilePart=0x0) returned 0x85 [0160.584] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0160.584] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\514D7C625328106E43CEC7FD7CF71AEDA0A3101F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\514d7c625328106e43cec7fd7cf71aeda0a3101f"), fInfoLevelId=0x0, lpFileInformation=0x21f1200 | out: lpFileInformation=0x21f1200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x459d9052, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x459d9052, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x459d9052, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0x431)) returned 1 [0160.584] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0160.584] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\514D7C625328106E43CEC7FD7CF71AEDA0A3101F", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\514D7C625328106E43CEC7FD7CF71AEDA0A3101F", lpFilePart=0x0) returned 0x85 [0160.584] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0160.584] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\514D7C625328106E43CEC7FD7CF71AEDA0A3101F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\514d7c625328106e43cec7fd7cf71aeda0a3101f"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0160.584] GetFileType (hFile=0x444) returned 0x1 [0160.584] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0160.584] GetFileType (hFile=0x444) returned 0x1 [0160.584] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x431 [0160.584] ReadFile (in: hFile=0x444, lpBuffer=0x21f1a50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x21f1a50*, lpNumberOfBytesRead=0x3be5c8*=0x431, lpOverlapped=0x0) returned 1 [0160.589] CloseHandle (hObject=0x444) returned 1 [0160.599] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\514D7C625328106E43CEC7FD7CF71AEDA0A3101F", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\514D7C625328106E43CEC7FD7CF71AEDA0A3101F", lpFilePart=0x0) returned 0x85 [0160.599] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0160.599] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\514D7C625328106E43CEC7FD7CF71AEDA0A3101F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\514d7c625328106e43cec7fd7cf71aeda0a3101f"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0160.601] GetFileType (hFile=0x444) returned 0x1 [0160.601] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0160.601] GetFileType (hFile=0x444) returned 0x1 [0160.601] WriteFile (in: hFile=0x444, lpBuffer=0x226a028*, nNumberOfBytesToWrite=0x440, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x226a028*, lpNumberOfBytesWritten=0x3be4d8*=0x440, lpOverlapped=0x0) returned 1 [0160.605] CloseHandle (hObject=0x444) returned 1 [0160.605] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\514D7C625328106E43CEC7FD7CF71AEDA0A3101F", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\514D7C625328106E43CEC7FD7CF71AEDA0A3101F", lpFilePart=0x0) returned 0x85 [0160.605] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\514D7C625328106E43CEC7FD7CF71AEDA0A3101F.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\514D7C625328106E43CEC7FD7CF71AEDA0A3101F.xuy", lpFilePart=0x0) returned 0x89 [0160.605] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0160.605] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\514D7C625328106E43CEC7FD7CF71AEDA0A3101F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\514d7c625328106e43cec7fd7cf71aeda0a3101f"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x459d9052, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x459d9052, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x4b92498a, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x440)) returned 1 [0160.605] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0160.605] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\514D7C625328106E43CEC7FD7CF71AEDA0A3101F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\514d7c625328106e43cec7fd7cf71aeda0a3101f"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\514D7C625328106E43CEC7FD7CF71AEDA0A3101F.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\514d7c625328106e43cec7fd7cf71aeda0a3101f.xuy")) returned 1 [0160.607] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\522FF036651FEA29F227BFB14BD934175DDBA62A", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\522FF036651FEA29F227BFB14BD934175DDBA62A", lpFilePart=0x0) returned 0x85 [0160.607] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0160.607] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\522FF036651FEA29F227BFB14BD934175DDBA62A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\522ff036651fea29f227bfb14bd934175ddba62a"), fInfoLevelId=0x0, lpFileInformation=0x226b3e8 | out: lpFileInformation=0x226b3e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6152bc7d, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x6152bc7d, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x6152bc7d, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xe25)) returned 1 [0160.607] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0160.607] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\522FF036651FEA29F227BFB14BD934175DDBA62A", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\522FF036651FEA29F227BFB14BD934175DDBA62A", lpFilePart=0x0) returned 0x85 [0160.607] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0160.607] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\522FF036651FEA29F227BFB14BD934175DDBA62A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\522ff036651fea29f227bfb14bd934175ddba62a"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0160.608] GetFileType (hFile=0x444) returned 0x1 [0160.608] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0160.608] GetFileType (hFile=0x444) returned 0x1 [0160.608] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xe25 [0160.608] ReadFile (in: hFile=0x444, lpBuffer=0x226c628, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x226c628*, lpNumberOfBytesRead=0x3be5c8*=0xe25, lpOverlapped=0x0) returned 1 [0160.609] CloseHandle (hObject=0x444) returned 1 [0160.619] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\522FF036651FEA29F227BFB14BD934175DDBA62A", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\522FF036651FEA29F227BFB14BD934175DDBA62A", lpFilePart=0x0) returned 0x85 [0160.619] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0160.619] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\522FF036651FEA29F227BFB14BD934175DDBA62A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\522ff036651fea29f227bfb14bd934175ddba62a"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0160.621] GetFileType (hFile=0x444) returned 0x1 [0160.621] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0160.621] GetFileType (hFile=0x444) returned 0x1 [0160.621] WriteFile (in: hFile=0x444, lpBuffer=0x22e7db0*, nNumberOfBytesToWrite=0xe30, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x22e7db0*, lpNumberOfBytesWritten=0x3be4d8*=0xe30, lpOverlapped=0x0) returned 1 [0160.623] CloseHandle (hObject=0x444) returned 1 [0160.623] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\522FF036651FEA29F227BFB14BD934175DDBA62A", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\522FF036651FEA29F227BFB14BD934175DDBA62A", lpFilePart=0x0) returned 0x85 [0160.623] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\522FF036651FEA29F227BFB14BD934175DDBA62A.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\522FF036651FEA29F227BFB14BD934175DDBA62A.xuy", lpFilePart=0x0) returned 0x89 [0160.623] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0160.623] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\522FF036651FEA29F227BFB14BD934175DDBA62A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\522ff036651fea29f227bfb14bd934175ddba62a"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6152bc7d, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x6152bc7d, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x4b970f56, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xe30)) returned 1 [0160.623] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0160.623] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\522FF036651FEA29F227BFB14BD934175DDBA62A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\522ff036651fea29f227bfb14bd934175ddba62a"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\522FF036651FEA29F227BFB14BD934175DDBA62A.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\522ff036651fea29f227bfb14bd934175ddba62a.xuy")) returned 1 [0160.624] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5289F8C4AB5388DE2FCD562674EDF6674FB6DD30", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5289F8C4AB5388DE2FCD562674EDF6674FB6DD30", lpFilePart=0x0) returned 0x85 [0160.624] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0160.624] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5289F8C4AB5388DE2FCD562674EDF6674FB6DD30" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5289f8c4ab5388de2fcd562674edf6674fb6dd30"), fInfoLevelId=0x0, lpFileInformation=0x22e9170 | out: lpFileInformation=0x22e9170*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fe21e62, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x751d0f1c, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x751d0f1c, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0x1e10)) returned 1 [0160.625] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0160.625] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5289F8C4AB5388DE2FCD562674EDF6674FB6DD30", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5289F8C4AB5388DE2FCD562674EDF6674FB6DD30", lpFilePart=0x0) returned 0x85 [0160.625] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0160.625] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5289F8C4AB5388DE2FCD562674EDF6674FB6DD30" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5289f8c4ab5388de2fcd562674edf6674fb6dd30"), fInfoLevelId=0x0, lpFileInformation=0x22e9370 | out: lpFileInformation=0x22e9370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fe21e62, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x751d0f1c, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x751d0f1c, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0x1e10)) returned 1 [0160.625] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0160.625] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5289F8C4AB5388DE2FCD562674EDF6674FB6DD30", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5289F8C4AB5388DE2FCD562674EDF6674FB6DD30", lpFilePart=0x0) returned 0x85 [0160.625] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0160.625] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5289F8C4AB5388DE2FCD562674EDF6674FB6DD30" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5289f8c4ab5388de2fcd562674edf6674fb6dd30"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0160.626] GetFileType (hFile=0x444) returned 0x1 [0160.626] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0160.626] GetFileType (hFile=0x444) returned 0x1 [0160.626] ReadFile (in: hFile=0x444, lpBuffer=0x22eb8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x22eb8a0*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0160.643] CloseHandle (hObject=0x444) returned 1 [0160.643] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5289F8C4AB5388DE2FCD562674EDF6674FB6DD30", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5289F8C4AB5388DE2FCD562674EDF6674FB6DD30", lpFilePart=0x0) returned 0x85 [0160.643] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0160.643] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5289F8C4AB5388DE2FCD562674EDF6674FB6DD30" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5289f8c4ab5388de2fcd562674edf6674fb6dd30"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0160.643] GetFileType (hFile=0x444) returned 0x1 [0160.643] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0160.643] GetFileType (hFile=0x444) returned 0x1 [0160.643] WriteFile (in: hFile=0x444, lpBuffer=0x22e9550*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x22e9550*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0160.643] CloseHandle (hObject=0x444) returned 1 [0160.643] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5289F8C4AB5388DE2FCD562674EDF6674FB6DD30", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5289F8C4AB5388DE2FCD562674EDF6674FB6DD30", lpFilePart=0x0) returned 0x85 [0160.643] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5289F8C4AB5388DE2FCD562674EDF6674FB6DD30.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5289F8C4AB5388DE2FCD562674EDF6674FB6DD30.xuy", lpFilePart=0x0) returned 0x89 [0160.643] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0160.644] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5289F8C4AB5388DE2FCD562674EDF6674FB6DD30" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5289f8c4ab5388de2fcd562674edf6674fb6dd30"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fe21e62, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x751d0f1c, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x4b99719d, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0160.644] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0160.644] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5289F8C4AB5388DE2FCD562674EDF6674FB6DD30" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5289f8c4ab5388de2fcd562674edf6674fb6dd30"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5289F8C4AB5388DE2FCD562674EDF6674FB6DD30.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5289f8c4ab5388de2fcd562674edf6674fb6dd30.xuy")) returned 1 [0160.645] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\529CD0D4C166C4989BAABA7E5FF50F75FB1D22D3", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\529CD0D4C166C4989BAABA7E5FF50F75FB1D22D3", lpFilePart=0x0) returned 0x85 [0160.645] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0160.645] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\529CD0D4C166C4989BAABA7E5FF50F75FB1D22D3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\529cd0d4c166c4989baaba7e5ff50f75fb1d22d3"), fInfoLevelId=0x0, lpFileInformation=0x2367e48 | out: lpFileInformation=0x2367e48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6159e1e8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x6159e1e8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x6159e1e8, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xdfc)) returned 1 [0160.645] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0160.645] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\529CD0D4C166C4989BAABA7E5FF50F75FB1D22D3", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\529CD0D4C166C4989BAABA7E5FF50F75FB1D22D3", lpFilePart=0x0) returned 0x85 [0160.645] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0160.645] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\529CD0D4C166C4989BAABA7E5FF50F75FB1D22D3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\529cd0d4c166c4989baaba7e5ff50f75fb1d22d3"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0160.645] GetFileType (hFile=0x444) returned 0x1 [0160.645] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0160.645] GetFileType (hFile=0x444) returned 0x1 [0160.645] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xdfc [0160.645] ReadFile (in: hFile=0x444, lpBuffer=0x2369060, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x2369060*, lpNumberOfBytesRead=0x3be5c8*=0xdfc, lpOverlapped=0x0) returned 1 [0160.647] CloseHandle (hObject=0x444) returned 1 [0160.685] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\529CD0D4C166C4989BAABA7E5FF50F75FB1D22D3", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\529CD0D4C166C4989BAABA7E5FF50F75FB1D22D3", lpFilePart=0x0) returned 0x85 [0160.685] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0160.685] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\529CD0D4C166C4989BAABA7E5FF50F75FB1D22D3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\529cd0d4c166c4989baaba7e5ff50f75fb1d22d3"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0160.687] GetFileType (hFile=0x444) returned 0x1 [0160.687] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0160.687] GetFileType (hFile=0x444) returned 0x1 [0160.687] WriteFile (in: hFile=0x444, lpBuffer=0x21e22f8*, nNumberOfBytesToWrite=0xe00, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x21e22f8*, lpNumberOfBytesWritten=0x3be4d8*=0xe00, lpOverlapped=0x0) returned 1 [0160.688] CloseHandle (hObject=0x444) returned 1 [0160.688] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\529CD0D4C166C4989BAABA7E5FF50F75FB1D22D3", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\529CD0D4C166C4989BAABA7E5FF50F75FB1D22D3", lpFilePart=0x0) returned 0x85 [0160.688] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\529CD0D4C166C4989BAABA7E5FF50F75FB1D22D3.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\529CD0D4C166C4989BAABA7E5FF50F75FB1D22D3.xuy", lpFilePart=0x0) returned 0x89 [0160.688] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0160.688] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\529CD0D4C166C4989BAABA7E5FF50F75FB1D22D3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\529cd0d4c166c4989baaba7e5ff50f75fb1d22d3"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6159e1e8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x6159e1e8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x4ba09b90, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xe00)) returned 1 [0160.688] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0160.688] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\529CD0D4C166C4989BAABA7E5FF50F75FB1D22D3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\529cd0d4c166c4989baaba7e5ff50f75fb1d22d3"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\529CD0D4C166C4989BAABA7E5FF50F75FB1D22D3.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\529cd0d4c166c4989baaba7e5ff50f75fb1d22d3.xuy")) returned 1 [0160.689] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\52ECE00B624C0C246123D20C46C3EE4F390A42FE", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\52ECE00B624C0C246123D20C46C3EE4F390A42FE", lpFilePart=0x0) returned 0x85 [0160.690] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0160.690] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\52ECE00B624C0C246123D20C46C3EE4F390A42FE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\52ece00b624c0c246123d20c46c3ee4f390a42fe"), fInfoLevelId=0x0, lpFileInformation=0x21e36b8 | out: lpFileInformation=0x21e36b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x871d235b, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x871d235b, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x871d71a0, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x596)) returned 1 [0160.690] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0160.690] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\52ECE00B624C0C246123D20C46C3EE4F390A42FE", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\52ECE00B624C0C246123D20C46C3EE4F390A42FE", lpFilePart=0x0) returned 0x85 [0160.690] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0160.690] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\52ECE00B624C0C246123D20C46C3EE4F390A42FE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\52ece00b624c0c246123d20c46c3ee4f390a42fe"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0160.690] GetFileType (hFile=0x444) returned 0x1 [0160.690] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0160.690] GetFileType (hFile=0x444) returned 0x1 [0160.690] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x596 [0160.690] ReadFile (in: hFile=0x444, lpBuffer=0x21e4068, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x21e4068*, lpNumberOfBytesRead=0x3be5c8*=0x596, lpOverlapped=0x0) returned 1 [0160.713] CloseHandle (hObject=0x444) returned 1 [0160.728] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\52ECE00B624C0C246123D20C46C3EE4F390A42FE", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\52ECE00B624C0C246123D20C46C3EE4F390A42FE", lpFilePart=0x0) returned 0x85 [0160.728] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0160.728] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\52ECE00B624C0C246123D20C46C3EE4F390A42FE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\52ece00b624c0c246123d20c46c3ee4f390a42fe"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0160.730] GetFileType (hFile=0x444) returned 0x1 [0160.730] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0160.731] GetFileType (hFile=0x444) returned 0x1 [0160.731] WriteFile (in: hFile=0x444, lpBuffer=0x225cd20*, nNumberOfBytesToWrite=0x5a0, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x225cd20*, lpNumberOfBytesWritten=0x3be4d8*=0x5a0, lpOverlapped=0x0) returned 1 [0160.732] CloseHandle (hObject=0x444) returned 1 [0160.732] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\52ECE00B624C0C246123D20C46C3EE4F390A42FE", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\52ECE00B624C0C246123D20C46C3EE4F390A42FE", lpFilePart=0x0) returned 0x85 [0160.732] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\52ECE00B624C0C246123D20C46C3EE4F390A42FE.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\52ECE00B624C0C246123D20C46C3EE4F390A42FE.xuy", lpFilePart=0x0) returned 0x89 [0160.732] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0160.732] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\52ECE00B624C0C246123D20C46C3EE4F390A42FE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\52ece00b624c0c246123d20c46c3ee4f390a42fe"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x871d235b, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x871d235b, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x4ba7c147, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x5a0)) returned 1 [0160.732] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0160.732] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\52ECE00B624C0C246123D20C46C3EE4F390A42FE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\52ece00b624c0c246123d20c46c3ee4f390a42fe"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\52ECE00B624C0C246123D20C46C3EE4F390A42FE.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\52ece00b624c0c246123d20c46c3ee4f390a42fe.xuy")) returned 1 [0160.733] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\539C21F72CC831D883A265394E7125EFC208B096", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\539C21F72CC831D883A265394E7125EFC208B096", lpFilePart=0x0) returned 0x85 [0160.733] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0160.733] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\539C21F72CC831D883A265394E7125EFC208B096" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\539c21f72cc831d883a265394e7125efc208b096"), fInfoLevelId=0x0, lpFileInformation=0x225e0e0 | out: lpFileInformation=0x225e0e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4bda662, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc4bda662, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xc4bda662, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0xc5d)) returned 1 [0160.734] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0160.734] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\539C21F72CC831D883A265394E7125EFC208B096", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\539C21F72CC831D883A265394E7125EFC208B096", lpFilePart=0x0) returned 0x85 [0160.734] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0160.734] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\539C21F72CC831D883A265394E7125EFC208B096" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\539c21f72cc831d883a265394e7125efc208b096"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0160.734] GetFileType (hFile=0x444) returned 0x1 [0160.734] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0160.734] GetFileType (hFile=0x444) returned 0x1 [0160.734] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xc5d [0160.734] ReadFile (in: hFile=0x444, lpBuffer=0x225f158, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x225f158*, lpNumberOfBytesRead=0x3be5c8*=0xc5d, lpOverlapped=0x0) returned 1 [0160.749] CloseHandle (hObject=0x444) returned 1 [0160.758] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\539C21F72CC831D883A265394E7125EFC208B096", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\539C21F72CC831D883A265394E7125EFC208B096", lpFilePart=0x0) returned 0x85 [0160.759] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0160.759] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\539C21F72CC831D883A265394E7125EFC208B096" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\539c21f72cc831d883a265394e7125efc208b096"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0160.760] GetFileType (hFile=0x444) returned 0x1 [0160.760] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0160.760] GetFileType (hFile=0x444) returned 0x1 [0160.760] WriteFile (in: hFile=0x444, lpBuffer=0x22d9fc8*, nNumberOfBytesToWrite=0xc60, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x22d9fc8*, lpNumberOfBytesWritten=0x3be4d8*=0xc60, lpOverlapped=0x0) returned 1 [0160.761] CloseHandle (hObject=0x444) returned 1 [0160.761] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\539C21F72CC831D883A265394E7125EFC208B096", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\539C21F72CC831D883A265394E7125EFC208B096", lpFilePart=0x0) returned 0x85 [0160.761] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\539C21F72CC831D883A265394E7125EFC208B096.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\539C21F72CC831D883A265394E7125EFC208B096.xuy", lpFilePart=0x0) returned 0x89 [0160.761] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0160.761] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\539C21F72CC831D883A265394E7125EFC208B096" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\539c21f72cc831d883a265394e7125efc208b096"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4bda662, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc4bda662, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x4baa21f6, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xc60)) returned 1 [0160.761] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0160.761] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\539C21F72CC831D883A265394E7125EFC208B096" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\539c21f72cc831d883a265394e7125efc208b096"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\539C21F72CC831D883A265394E7125EFC208B096.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\539c21f72cc831d883a265394e7125efc208b096.xuy")) returned 1 [0160.763] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\53DAE4B1D7BFF6744CCAF7207DE631267F9883DC", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\53DAE4B1D7BFF6744CCAF7207DE631267F9883DC", lpFilePart=0x0) returned 0x85 [0160.763] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0160.763] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\53DAE4B1D7BFF6744CCAF7207DE631267F9883DC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\53dae4b1d7bff6744ccaf7207de631267f9883dc"), fInfoLevelId=0x0, lpFileInformation=0x22db388 | out: lpFileInformation=0x22db388*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2732312, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc2732312, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x3c463540, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0x2b8b)) returned 1 [0160.763] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0160.763] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\53DAE4B1D7BFF6744CCAF7207DE631267F9883DC", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\53DAE4B1D7BFF6744CCAF7207DE631267F9883DC", lpFilePart=0x0) returned 0x85 [0160.763] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0160.763] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\53DAE4B1D7BFF6744CCAF7207DE631267F9883DC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\53dae4b1d7bff6744ccaf7207de631267f9883dc"), fInfoLevelId=0x0, lpFileInformation=0x22db588 | out: lpFileInformation=0x22db588*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2732312, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc2732312, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x3c463540, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0x2b8b)) returned 1 [0160.763] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0160.763] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\53DAE4B1D7BFF6744CCAF7207DE631267F9883DC", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\53DAE4B1D7BFF6744CCAF7207DE631267F9883DC", lpFilePart=0x0) returned 0x85 [0160.763] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0160.763] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\53DAE4B1D7BFF6744CCAF7207DE631267F9883DC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\53dae4b1d7bff6744ccaf7207de631267f9883dc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0160.764] GetFileType (hFile=0x444) returned 0x1 [0160.764] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0160.764] GetFileType (hFile=0x444) returned 0x1 [0160.764] ReadFile (in: hFile=0x444, lpBuffer=0x22ddab8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x22ddab8*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0160.785] CloseHandle (hObject=0x444) returned 1 [0160.786] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\53DAE4B1D7BFF6744CCAF7207DE631267F9883DC", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\53DAE4B1D7BFF6744CCAF7207DE631267F9883DC", lpFilePart=0x0) returned 0x85 [0160.786] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0160.786] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\53DAE4B1D7BFF6744CCAF7207DE631267F9883DC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\53dae4b1d7bff6744ccaf7207de631267f9883dc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0160.786] GetFileType (hFile=0x444) returned 0x1 [0160.786] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0160.786] GetFileType (hFile=0x444) returned 0x1 [0160.786] WriteFile (in: hFile=0x444, lpBuffer=0x22db768*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x22db768*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0160.786] CloseHandle (hObject=0x444) returned 1 [0160.786] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\53DAE4B1D7BFF6744CCAF7207DE631267F9883DC", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\53DAE4B1D7BFF6744CCAF7207DE631267F9883DC", lpFilePart=0x0) returned 0x85 [0160.786] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\53DAE4B1D7BFF6744CCAF7207DE631267F9883DC.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\53DAE4B1D7BFF6744CCAF7207DE631267F9883DC.xuy", lpFilePart=0x0) returned 0x89 [0160.786] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0160.786] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\53DAE4B1D7BFF6744CCAF7207DE631267F9883DC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\53dae4b1d7bff6744ccaf7207de631267f9883dc"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2732312, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc2732312, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x4baee5f7, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2b8b)) returned 1 [0160.787] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0160.787] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\53DAE4B1D7BFF6744CCAF7207DE631267F9883DC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\53dae4b1d7bff6744ccaf7207de631267f9883dc"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\53DAE4B1D7BFF6744CCAF7207DE631267F9883DC.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\53dae4b1d7bff6744ccaf7207de631267f9883dc.xuy")) returned 1 [0160.788] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\53E9CAA90A10C82CF9C2D5393B332D17B263105E", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\53E9CAA90A10C82CF9C2D5393B332D17B263105E", lpFilePart=0x0) returned 0x85 [0160.788] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0160.788] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\53E9CAA90A10C82CF9C2D5393B332D17B263105E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\53e9caa90a10c82cf9c2d5393b332d17b263105e"), fInfoLevelId=0x0, lpFileInformation=0x235a060 | out: lpFileInformation=0x235a060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f161877, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3f161877, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x41b78276, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x287f)) returned 1 [0160.788] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0160.788] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\53E9CAA90A10C82CF9C2D5393B332D17B263105E", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\53E9CAA90A10C82CF9C2D5393B332D17B263105E", lpFilePart=0x0) returned 0x85 [0160.788] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0160.788] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\53E9CAA90A10C82CF9C2D5393B332D17B263105E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\53e9caa90a10c82cf9c2d5393b332d17b263105e"), fInfoLevelId=0x0, lpFileInformation=0x235a260 | out: lpFileInformation=0x235a260*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f161877, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3f161877, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x41b78276, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x287f)) returned 1 [0160.788] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0160.788] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\53E9CAA90A10C82CF9C2D5393B332D17B263105E", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\53E9CAA90A10C82CF9C2D5393B332D17B263105E", lpFilePart=0x0) returned 0x85 [0160.788] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0160.788] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\53E9CAA90A10C82CF9C2D5393B332D17B263105E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\53e9caa90a10c82cf9c2d5393b332d17b263105e"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0160.789] GetFileType (hFile=0x444) returned 0x1 [0160.789] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0160.789] GetFileType (hFile=0x444) returned 0x1 [0160.789] ReadFile (in: hFile=0x444, lpBuffer=0x235c790, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x235c790*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0160.835] CloseHandle (hObject=0x444) returned 1 [0160.835] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\53E9CAA90A10C82CF9C2D5393B332D17B263105E", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\53E9CAA90A10C82CF9C2D5393B332D17B263105E", lpFilePart=0x0) returned 0x85 [0160.835] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0160.835] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\53E9CAA90A10C82CF9C2D5393B332D17B263105E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\53e9caa90a10c82cf9c2d5393b332d17b263105e"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0160.835] GetFileType (hFile=0x444) returned 0x1 [0160.835] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0160.835] GetFileType (hFile=0x444) returned 0x1 [0160.835] WriteFile (in: hFile=0x444, lpBuffer=0x2185c28*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x2185c28*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0160.836] CloseHandle (hObject=0x444) returned 1 [0160.836] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\53E9CAA90A10C82CF9C2D5393B332D17B263105E", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\53E9CAA90A10C82CF9C2D5393B332D17B263105E", lpFilePart=0x0) returned 0x85 [0160.836] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\53E9CAA90A10C82CF9C2D5393B332D17B263105E.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\53E9CAA90A10C82CF9C2D5393B332D17B263105E.xuy", lpFilePart=0x0) returned 0x89 [0160.836] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0160.836] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\53E9CAA90A10C82CF9C2D5393B332D17B263105E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\53e9caa90a10c82cf9c2d5393b332d17b263105e"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f161877, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3f161877, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x4bb60e1f, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x287f)) returned 1 [0160.836] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0160.836] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\53E9CAA90A10C82CF9C2D5393B332D17B263105E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\53e9caa90a10c82cf9c2d5393b332d17b263105e"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\53E9CAA90A10C82CF9C2D5393B332D17B263105E.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\53e9caa90a10c82cf9c2d5393b332d17b263105e.xuy")) returned 1 [0160.837] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\54BF6D9D46D035228AC887ABC41B451F2BA38C02", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\54BF6D9D46D035228AC887ABC41B451F2BA38C02", lpFilePart=0x0) returned 0x85 [0160.837] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0160.837] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\54BF6D9D46D035228AC887ABC41B451F2BA38C02" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\54bf6d9d46d035228ac887abc41b451f2ba38c02"), fInfoLevelId=0x0, lpFileInformation=0x21db0e0 | out: lpFileInformation=0x21db0e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x892f4303, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x892f4303, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x892f4303, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x1285)) returned 1 [0160.838] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0160.838] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\54BF6D9D46D035228AC887ABC41B451F2BA38C02", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\54BF6D9D46D035228AC887ABC41B451F2BA38C02", lpFilePart=0x0) returned 0x85 [0160.838] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0160.838] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\54BF6D9D46D035228AC887ABC41B451F2BA38C02" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\54bf6d9d46d035228ac887abc41b451f2ba38c02"), fInfoLevelId=0x0, lpFileInformation=0x21db2e0 | out: lpFileInformation=0x21db2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x892f4303, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x892f4303, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x892f4303, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x1285)) returned 1 [0160.838] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0160.838] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\54BF6D9D46D035228AC887ABC41B451F2BA38C02", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\54BF6D9D46D035228AC887ABC41B451F2BA38C02", lpFilePart=0x0) returned 0x85 [0160.838] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0160.838] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\54BF6D9D46D035228AC887ABC41B451F2BA38C02" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\54bf6d9d46d035228ac887abc41b451f2ba38c02"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0160.839] GetFileType (hFile=0x444) returned 0x1 [0160.839] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0160.839] GetFileType (hFile=0x444) returned 0x1 [0160.839] ReadFile (in: hFile=0x444, lpBuffer=0x21dd810, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x21dd810*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0160.852] CloseHandle (hObject=0x444) returned 1 [0160.852] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\54BF6D9D46D035228AC887ABC41B451F2BA38C02", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\54BF6D9D46D035228AC887ABC41B451F2BA38C02", lpFilePart=0x0) returned 0x85 [0160.852] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0160.852] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\54BF6D9D46D035228AC887ABC41B451F2BA38C02" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\54bf6d9d46d035228ac887abc41b451f2ba38c02"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0160.852] GetFileType (hFile=0x444) returned 0x1 [0160.852] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0160.852] GetFileType (hFile=0x444) returned 0x1 [0160.852] WriteFile (in: hFile=0x444, lpBuffer=0x21db4c0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x21db4c0*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0160.852] CloseHandle (hObject=0x444) returned 1 [0160.852] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\54BF6D9D46D035228AC887ABC41B451F2BA38C02", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\54BF6D9D46D035228AC887ABC41B451F2BA38C02", lpFilePart=0x0) returned 0x85 [0160.852] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\54BF6D9D46D035228AC887ABC41B451F2BA38C02.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\54BF6D9D46D035228AC887ABC41B451F2BA38C02.xuy", lpFilePart=0x0) returned 0x89 [0160.852] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0160.853] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\54BF6D9D46D035228AC887ABC41B451F2BA38C02" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\54bf6d9d46d035228ac887abc41b451f2ba38c02"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x892f4303, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x892f4303, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x4bb870c6, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0160.853] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0160.853] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\54BF6D9D46D035228AC887ABC41B451F2BA38C02" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\54bf6d9d46d035228ac887abc41b451f2ba38c02"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\54BF6D9D46D035228AC887ABC41B451F2BA38C02.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\54bf6d9d46d035228ac887abc41b451f2ba38c02.xuy")) returned 1 [0160.854] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5588A68FFECF7B388E18C33727BF06B30B837DF1", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5588A68FFECF7B388E18C33727BF06B30B837DF1", lpFilePart=0x0) returned 0x85 [0160.854] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0160.854] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5588A68FFECF7B388E18C33727BF06B30B837DF1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5588a68ffecf7b388e18c33727bf06b30b837df1"), fInfoLevelId=0x0, lpFileInformation=0x2259db8 | out: lpFileInformation=0x2259db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c268d3d, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3c268d3d, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x3c316409, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x1cdb)) returned 1 [0160.854] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0160.854] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5588A68FFECF7B388E18C33727BF06B30B837DF1", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5588A68FFECF7B388E18C33727BF06B30B837DF1", lpFilePart=0x0) returned 0x85 [0160.854] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0160.854] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5588A68FFECF7B388E18C33727BF06B30B837DF1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5588a68ffecf7b388e18c33727bf06b30b837df1"), fInfoLevelId=0x0, lpFileInformation=0x2259fb8 | out: lpFileInformation=0x2259fb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c268d3d, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3c268d3d, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x3c316409, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x1cdb)) returned 1 [0160.854] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0160.854] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5588A68FFECF7B388E18C33727BF06B30B837DF1", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5588A68FFECF7B388E18C33727BF06B30B837DF1", lpFilePart=0x0) returned 0x85 [0160.854] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0160.855] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5588A68FFECF7B388E18C33727BF06B30B837DF1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5588a68ffecf7b388e18c33727bf06b30b837df1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0160.856] GetFileType (hFile=0x444) returned 0x1 [0160.856] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0160.856] GetFileType (hFile=0x444) returned 0x1 [0160.856] ReadFile (in: hFile=0x444, lpBuffer=0x225c4e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x225c4e8*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0160.867] CloseHandle (hObject=0x444) returned 1 [0160.867] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5588A68FFECF7B388E18C33727BF06B30B837DF1", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5588A68FFECF7B388E18C33727BF06B30B837DF1", lpFilePart=0x0) returned 0x85 [0160.868] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0160.868] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5588A68FFECF7B388E18C33727BF06B30B837DF1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5588a68ffecf7b388e18c33727bf06b30b837df1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0160.868] GetFileType (hFile=0x444) returned 0x1 [0160.868] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0160.868] GetFileType (hFile=0x444) returned 0x1 [0160.868] WriteFile (in: hFile=0x444, lpBuffer=0x225a198*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x225a198*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0160.868] CloseHandle (hObject=0x444) returned 1 [0160.868] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5588A68FFECF7B388E18C33727BF06B30B837DF1", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5588A68FFECF7B388E18C33727BF06B30B837DF1", lpFilePart=0x0) returned 0x85 [0160.868] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5588A68FFECF7B388E18C33727BF06B30B837DF1.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5588A68FFECF7B388E18C33727BF06B30B837DF1.xuy", lpFilePart=0x0) returned 0x89 [0160.868] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0160.868] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5588A68FFECF7B388E18C33727BF06B30B837DF1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5588a68ffecf7b388e18c33727bf06b30b837df1"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c268d3d, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3c268d3d, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x4bbad401, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0160.869] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0160.869] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5588A68FFECF7B388E18C33727BF06B30B837DF1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5588a68ffecf7b388e18c33727bf06b30b837df1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5588A68FFECF7B388E18C33727BF06B30B837DF1.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5588a68ffecf7b388e18c33727bf06b30b837df1.xuy")) returned 1 [0160.870] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\559737B84286037BF56FE9E46C53581FB6FF6751", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\559737B84286037BF56FE9E46C53581FB6FF6751", lpFilePart=0x0) returned 0x85 [0160.870] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0160.870] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\559737B84286037BF56FE9E46C53581FB6FF6751" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\559737b84286037bf56fe9e46c53581fb6ff6751"), fInfoLevelId=0x0, lpFileInformation=0x22d8a90 | out: lpFileInformation=0x22d8a90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc8f5d5c, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xcc8f5d5c, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xcc8fd2aa, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0xd0b)) returned 1 [0160.870] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0160.870] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\559737B84286037BF56FE9E46C53581FB6FF6751", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\559737B84286037BF56FE9E46C53581FB6FF6751", lpFilePart=0x0) returned 0x85 [0160.870] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0160.870] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\559737B84286037BF56FE9E46C53581FB6FF6751" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\559737b84286037bf56fe9e46c53581fb6ff6751"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0160.870] GetFileType (hFile=0x444) returned 0x1 [0160.870] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0160.870] GetFileType (hFile=0x444) returned 0x1 [0160.870] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xd0b [0160.870] ReadFile (in: hFile=0x444, lpBuffer=0x22d9bb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x22d9bb8*, lpNumberOfBytesRead=0x3be5c8*=0xd0b, lpOverlapped=0x0) returned 1 [0160.886] CloseHandle (hObject=0x444) returned 1 [0160.896] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\559737B84286037BF56FE9E46C53581FB6FF6751", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\559737B84286037BF56FE9E46C53581FB6FF6751", lpFilePart=0x0) returned 0x85 [0160.897] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0160.897] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\559737B84286037BF56FE9E46C53581FB6FF6751" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\559737b84286037bf56fe9e46c53581fb6ff6751"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0160.901] GetFileType (hFile=0x444) returned 0x1 [0160.901] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0160.901] GetFileType (hFile=0x444) returned 0x1 [0160.901] WriteFile (in: hFile=0x444, lpBuffer=0x2354d98*, nNumberOfBytesToWrite=0xd10, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x2354d98*, lpNumberOfBytesWritten=0x3be4d8*=0xd10, lpOverlapped=0x0) returned 1 [0160.902] CloseHandle (hObject=0x444) returned 1 [0160.902] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\559737B84286037BF56FE9E46C53581FB6FF6751", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\559737B84286037BF56FE9E46C53581FB6FF6751", lpFilePart=0x0) returned 0x85 [0160.902] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\559737B84286037BF56FE9E46C53581FB6FF6751.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\559737B84286037BF56FE9E46C53581FB6FF6751.xuy", lpFilePart=0x0) returned 0x89 [0160.902] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0160.902] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\559737B84286037BF56FE9E46C53581FB6FF6751" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\559737b84286037bf56fe9e46c53581fb6ff6751"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc8f5d5c, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xcc8f5d5c, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x4bbf9a50, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xd10)) returned 1 [0160.903] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0160.903] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\559737B84286037BF56FE9E46C53581FB6FF6751" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\559737b84286037bf56fe9e46c53581fb6ff6751"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\559737B84286037BF56FE9E46C53581FB6FF6751.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\559737b84286037bf56fe9e46c53581fb6ff6751.xuy")) returned 1 [0160.904] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\56945BFE2B00EED1BE4F7B1F389030A0AF203742", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\56945BFE2B00EED1BE4F7B1F389030A0AF203742", lpFilePart=0x0) returned 0x85 [0160.904] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0160.904] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\56945BFE2B00EED1BE4F7B1F389030A0AF203742" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\56945bfe2b00eed1be4f7b1f389030a0af203742"), fInfoLevelId=0x0, lpFileInformation=0x2356158 | out: lpFileInformation=0x2356158*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x877704a4, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x877704a4, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x87772ba1, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x921)) returned 1 [0160.904] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0160.904] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\56945BFE2B00EED1BE4F7B1F389030A0AF203742", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\56945BFE2B00EED1BE4F7B1F389030A0AF203742", lpFilePart=0x0) returned 0x85 [0160.905] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0160.905] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\56945BFE2B00EED1BE4F7B1F389030A0AF203742" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\56945bfe2b00eed1be4f7b1f389030a0af203742"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0160.905] GetFileType (hFile=0x444) returned 0x1 [0160.905] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0160.905] GetFileType (hFile=0x444) returned 0x1 [0160.905] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x921 [0160.905] ReadFile (in: hFile=0x444, lpBuffer=0x2356e98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x2356e98*, lpNumberOfBytesRead=0x3be5c8*=0x921, lpOverlapped=0x0) returned 1 [0160.919] CloseHandle (hObject=0x444) returned 1 [0160.959] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\56945BFE2B00EED1BE4F7B1F389030A0AF203742", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\56945BFE2B00EED1BE4F7B1F389030A0AF203742", lpFilePart=0x0) returned 0x85 [0160.959] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0160.959] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\56945BFE2B00EED1BE4F7B1F389030A0AF203742" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\56945bfe2b00eed1be4f7b1f389030a0af203742"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0160.961] GetFileType (hFile=0x444) returned 0x1 [0160.961] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0160.961] GetFileType (hFile=0x444) returned 0x1 [0160.961] WriteFile (in: hFile=0x444, lpBuffer=0x21ce478*, nNumberOfBytesToWrite=0x930, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x21ce478*, lpNumberOfBytesWritten=0x3be4d8*=0x930, lpOverlapped=0x0) returned 1 [0160.962] CloseHandle (hObject=0x444) returned 1 [0160.962] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\56945BFE2B00EED1BE4F7B1F389030A0AF203742", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\56945BFE2B00EED1BE4F7B1F389030A0AF203742", lpFilePart=0x0) returned 0x85 [0160.962] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\56945BFE2B00EED1BE4F7B1F389030A0AF203742.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\56945BFE2B00EED1BE4F7B1F389030A0AF203742.xuy", lpFilePart=0x0) returned 0x89 [0160.962] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0160.962] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\56945BFE2B00EED1BE4F7B1F389030A0AF203742" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\56945bfe2b00eed1be4f7b1f389030a0af203742"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x877704a4, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x877704a4, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x4bc9207b, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x930)) returned 1 [0160.962] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0160.962] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\56945BFE2B00EED1BE4F7B1F389030A0AF203742" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\56945bfe2b00eed1be4f7b1f389030a0af203742"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\56945BFE2B00EED1BE4F7B1F389030A0AF203742.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\56945bfe2b00eed1be4f7b1f389030a0af203742.xuy")) returned 1 [0160.963] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\56B48B214C8C7AC2CE81EFC4F92C4550FB675AE9", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\56B48B214C8C7AC2CE81EFC4F92C4550FB675AE9", lpFilePart=0x0) returned 0x85 [0160.963] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0160.963] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\56B48B214C8C7AC2CE81EFC4F92C4550FB675AE9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\56b48b214c8c7ac2ce81efc4f92c4550fb675ae9"), fInfoLevelId=0x0, lpFileInformation=0x21cf838 | out: lpFileInformation=0x21cf838*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89cdcf63, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x89cdcf63, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x89cdf663, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x228a)) returned 1 [0160.963] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0160.964] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\56B48B214C8C7AC2CE81EFC4F92C4550FB675AE9", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\56B48B214C8C7AC2CE81EFC4F92C4550FB675AE9", lpFilePart=0x0) returned 0x85 [0160.964] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0160.964] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\56B48B214C8C7AC2CE81EFC4F92C4550FB675AE9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\56b48b214c8c7ac2ce81efc4f92c4550fb675ae9"), fInfoLevelId=0x0, lpFileInformation=0x21cfa38 | out: lpFileInformation=0x21cfa38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89cdcf63, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x89cdcf63, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x89cdf663, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x228a)) returned 1 [0160.964] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0160.964] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\56B48B214C8C7AC2CE81EFC4F92C4550FB675AE9", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\56B48B214C8C7AC2CE81EFC4F92C4550FB675AE9", lpFilePart=0x0) returned 0x85 [0160.964] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0160.964] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\56B48B214C8C7AC2CE81EFC4F92C4550FB675AE9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\56b48b214c8c7ac2ce81efc4f92c4550fb675ae9"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0160.965] GetFileType (hFile=0x444) returned 0x1 [0160.965] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0160.965] GetFileType (hFile=0x444) returned 0x1 [0160.965] ReadFile (in: hFile=0x444, lpBuffer=0x21d1f68, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x21d1f68*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0160.977] CloseHandle (hObject=0x444) returned 1 [0160.977] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\56B48B214C8C7AC2CE81EFC4F92C4550FB675AE9", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\56B48B214C8C7AC2CE81EFC4F92C4550FB675AE9", lpFilePart=0x0) returned 0x85 [0160.977] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0160.977] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\56B48B214C8C7AC2CE81EFC4F92C4550FB675AE9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\56b48b214c8c7ac2ce81efc4f92c4550fb675ae9"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0160.977] GetFileType (hFile=0x444) returned 0x1 [0160.977] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0160.977] GetFileType (hFile=0x444) returned 0x1 [0160.977] WriteFile (in: hFile=0x444, lpBuffer=0x21cfc18*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x21cfc18*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0160.977] CloseHandle (hObject=0x444) returned 1 [0160.978] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\56B48B214C8C7AC2CE81EFC4F92C4550FB675AE9", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\56B48B214C8C7AC2CE81EFC4F92C4550FB675AE9", lpFilePart=0x0) returned 0x85 [0160.978] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\56B48B214C8C7AC2CE81EFC4F92C4550FB675AE9.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\56B48B214C8C7AC2CE81EFC4F92C4550FB675AE9.xuy", lpFilePart=0x0) returned 0x89 [0160.978] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0160.978] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\56B48B214C8C7AC2CE81EFC4F92C4550FB675AE9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\56b48b214c8c7ac2ce81efc4f92c4550fb675ae9"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89cdcf63, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x89cdcf63, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x4bcb83d2, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x228a)) returned 1 [0160.978] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0160.978] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\56B48B214C8C7AC2CE81EFC4F92C4550FB675AE9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\56b48b214c8c7ac2ce81efc4f92c4550fb675ae9"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\56B48B214C8C7AC2CE81EFC4F92C4550FB675AE9.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\56b48b214c8c7ac2ce81efc4f92c4550fb675ae9.xuy")) returned 1 [0160.979] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\56C1D667A6AFD5406F830882D54923461E079C1B", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\56C1D667A6AFD5406F830882D54923461E079C1B", lpFilePart=0x0) returned 0x85 [0160.979] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0160.979] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\56C1D667A6AFD5406F830882D54923461E079C1B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\56c1d667a6afd5406f830882d54923461e079c1b"), fInfoLevelId=0x0, lpFileInformation=0x224e510 | out: lpFileInformation=0x224e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6152bc7d, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x6152bc7d, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x6152bc7d, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xe29)) returned 1 [0160.979] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0160.979] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\56C1D667A6AFD5406F830882D54923461E079C1B", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\56C1D667A6AFD5406F830882D54923461E079C1B", lpFilePart=0x0) returned 0x85 [0160.979] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0160.979] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\56C1D667A6AFD5406F830882D54923461E079C1B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\56c1d667a6afd5406f830882d54923461e079c1b"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0160.979] GetFileType (hFile=0x444) returned 0x1 [0160.979] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0160.979] GetFileType (hFile=0x444) returned 0x1 [0160.979] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xe29 [0160.980] ReadFile (in: hFile=0x444, lpBuffer=0x224f758, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x224f758*, lpNumberOfBytesRead=0x3be5c8*=0xe29, lpOverlapped=0x0) returned 1 [0160.991] CloseHandle (hObject=0x444) returned 1 [0161.002] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\56C1D667A6AFD5406F830882D54923461E079C1B", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\56C1D667A6AFD5406F830882D54923461E079C1B", lpFilePart=0x0) returned 0x85 [0161.002] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0161.002] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\56C1D667A6AFD5406F830882D54923461E079C1B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\56c1d667a6afd5406f830882d54923461e079c1b"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0161.003] GetFileType (hFile=0x444) returned 0x1 [0161.003] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0161.004] GetFileType (hFile=0x444) returned 0x1 [0161.004] WriteFile (in: hFile=0x444, lpBuffer=0x22caed8*, nNumberOfBytesToWrite=0xe30, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x22caed8*, lpNumberOfBytesWritten=0x3be4d8*=0xe30, lpOverlapped=0x0) returned 1 [0161.004] CloseHandle (hObject=0x444) returned 1 [0161.004] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\56C1D667A6AFD5406F830882D54923461E079C1B", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\56C1D667A6AFD5406F830882D54923461E079C1B", lpFilePart=0x0) returned 0x85 [0161.004] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\56C1D667A6AFD5406F830882D54923461E079C1B.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\56C1D667A6AFD5406F830882D54923461E079C1B.xuy", lpFilePart=0x0) returned 0x89 [0161.004] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0161.004] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\56C1D667A6AFD5406F830882D54923461E079C1B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\56c1d667a6afd5406f830882d54923461e079c1b"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6152bc7d, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x6152bc7d, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x4bd04a6f, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xe30)) returned 1 [0161.005] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0161.005] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\56C1D667A6AFD5406F830882D54923461E079C1B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\56c1d667a6afd5406f830882d54923461e079c1b"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\56C1D667A6AFD5406F830882D54923461E079C1B.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\56c1d667a6afd5406f830882d54923461e079c1b.xuy")) returned 1 [0161.006] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5740B2DD533A74C3D20DD1D045CF7090D3BFB1AC", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5740B2DD533A74C3D20DD1D045CF7090D3BFB1AC", lpFilePart=0x0) returned 0x85 [0161.006] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0161.006] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5740B2DD533A74C3D20DD1D045CF7090D3BFB1AC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5740b2dd533a74c3d20dd1d045cf7090d3bfb1ac"), fInfoLevelId=0x0, lpFileInformation=0x22cc298 | out: lpFileInformation=0x22cc298*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89a3d889, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x89a3d889, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x89a3d889, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0xdca)) returned 1 [0161.006] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0161.006] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5740B2DD533A74C3D20DD1D045CF7090D3BFB1AC", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5740B2DD533A74C3D20DD1D045CF7090D3BFB1AC", lpFilePart=0x0) returned 0x85 [0161.006] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0161.006] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5740B2DD533A74C3D20DD1D045CF7090D3BFB1AC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5740b2dd533a74c3d20dd1d045cf7090d3bfb1ac"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0161.006] GetFileType (hFile=0x444) returned 0x1 [0161.006] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0161.006] GetFileType (hFile=0x444) returned 0x1 [0161.006] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xdca [0161.006] ReadFile (in: hFile=0x444, lpBuffer=0x22cd480, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x22cd480*, lpNumberOfBytesRead=0x3be5c8*=0xdca, lpOverlapped=0x0) returned 1 [0161.015] CloseHandle (hObject=0x444) returned 1 [0161.025] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5740B2DD533A74C3D20DD1D045CF7090D3BFB1AC", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5740B2DD533A74C3D20DD1D045CF7090D3BFB1AC", lpFilePart=0x0) returned 0x85 [0161.025] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0161.025] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5740B2DD533A74C3D20DD1D045CF7090D3BFB1AC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5740b2dd533a74c3d20dd1d045cf7090d3bfb1ac"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0161.026] GetFileType (hFile=0x444) returned 0x1 [0161.026] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0161.026] GetFileType (hFile=0x444) returned 0x1 [0161.027] WriteFile (in: hFile=0x444, lpBuffer=0x2348a20*, nNumberOfBytesToWrite=0xdd0, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x2348a20*, lpNumberOfBytesWritten=0x3be4d8*=0xdd0, lpOverlapped=0x0) returned 1 [0161.027] CloseHandle (hObject=0x444) returned 1 [0161.028] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5740B2DD533A74C3D20DD1D045CF7090D3BFB1AC", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5740B2DD533A74C3D20DD1D045CF7090D3BFB1AC", lpFilePart=0x0) returned 0x85 [0161.028] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5740B2DD533A74C3D20DD1D045CF7090D3BFB1AC.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5740B2DD533A74C3D20DD1D045CF7090D3BFB1AC.xuy", lpFilePart=0x0) returned 0x89 [0161.028] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0161.028] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5740B2DD533A74C3D20DD1D045CF7090D3BFB1AC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5740b2dd533a74c3d20dd1d045cf7090d3bfb1ac"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89a3d889, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x89a3d889, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x4bd2a92f, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xdd0)) returned 1 [0161.028] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0161.028] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5740B2DD533A74C3D20DD1D045CF7090D3BFB1AC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5740b2dd533a74c3d20dd1d045cf7090d3bfb1ac"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5740B2DD533A74C3D20DD1D045CF7090D3BFB1AC.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5740b2dd533a74c3d20dd1d045cf7090d3bfb1ac.xuy")) returned 1 [0161.029] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\577655B6F15A0EEA0864C0703652DE24C091B634", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\577655B6F15A0EEA0864C0703652DE24C091B634", lpFilePart=0x0) returned 0x85 [0161.029] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0161.029] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\577655B6F15A0EEA0864C0703652DE24C091B634" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\577655b6f15a0eea0864c0703652de24c091b634"), fInfoLevelId=0x0, lpFileInformation=0x2349de0 | out: lpFileInformation=0x2349de0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x862e2baa, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x862e2baa, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x862e52cf, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x11dc)) returned 1 [0161.029] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0161.029] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\577655B6F15A0EEA0864C0703652DE24C091B634", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\577655B6F15A0EEA0864C0703652DE24C091B634", lpFilePart=0x0) returned 0x85 [0161.029] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0161.030] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\577655B6F15A0EEA0864C0703652DE24C091B634" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\577655b6f15a0eea0864c0703652de24c091b634"), fInfoLevelId=0x0, lpFileInformation=0x2349fe0 | out: lpFileInformation=0x2349fe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x862e2baa, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x862e2baa, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x862e52cf, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x11dc)) returned 1 [0161.030] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0161.030] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\577655B6F15A0EEA0864C0703652DE24C091B634", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\577655B6F15A0EEA0864C0703652DE24C091B634", lpFilePart=0x0) returned 0x85 [0161.030] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0161.030] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\577655B6F15A0EEA0864C0703652DE24C091B634" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\577655b6f15a0eea0864c0703652de24c091b634"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0161.030] GetFileType (hFile=0x444) returned 0x1 [0161.031] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0161.031] GetFileType (hFile=0x444) returned 0x1 [0161.031] ReadFile (in: hFile=0x444, lpBuffer=0x234c510, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x234c510*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0161.162] CloseHandle (hObject=0x444) returned 1 [0161.162] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\577655B6F15A0EEA0864C0703652DE24C091B634", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\577655B6F15A0EEA0864C0703652DE24C091B634", lpFilePart=0x0) returned 0x85 [0161.162] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0161.162] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\577655B6F15A0EEA0864C0703652DE24C091B634" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\577655b6f15a0eea0864c0703652de24c091b634"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0161.163] GetFileType (hFile=0x444) returned 0x1 [0161.163] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0161.163] GetFileType (hFile=0x444) returned 0x1 [0161.163] WriteFile (in: hFile=0x444, lpBuffer=0x2185c28*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x2185c28*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0161.163] CloseHandle (hObject=0x444) returned 1 [0161.163] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\577655B6F15A0EEA0864C0703652DE24C091B634", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\577655B6F15A0EEA0864C0703652DE24C091B634", lpFilePart=0x0) returned 0x85 [0161.163] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\577655B6F15A0EEA0864C0703652DE24C091B634.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\577655B6F15A0EEA0864C0703652DE24C091B634.xuy", lpFilePart=0x0) returned 0x89 [0161.163] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0161.163] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\577655B6F15A0EEA0864C0703652DE24C091B634" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\577655b6f15a0eea0864c0703652de24c091b634"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x862e2baa, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x862e2baa, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x4be81f7d, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0161.163] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0161.163] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\577655B6F15A0EEA0864C0703652DE24C091B634" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\577655b6f15a0eea0864c0703652de24c091b634"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\577655B6F15A0EEA0864C0703652DE24C091B634.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\577655b6f15a0eea0864c0703652de24c091b634.xuy")) returned 1 [0161.165] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5781F439935B6472D7D312E75A3B766C3E30CF60", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5781F439935B6472D7D312E75A3B766C3E30CF60", lpFilePart=0x0) returned 0x85 [0161.165] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0161.165] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5781F439935B6472D7D312E75A3B766C3E30CF60" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5781f439935b6472d7d312e75a3b766c3e30cf60"), fInfoLevelId=0x0, lpFileInformation=0x21cb350 | out: lpFileInformation=0x21cb350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f6bdaf3, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3f6bdaf3, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x3f6cc54b, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x528)) returned 1 [0161.165] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0161.165] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5781F439935B6472D7D312E75A3B766C3E30CF60", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5781F439935B6472D7D312E75A3B766C3E30CF60", lpFilePart=0x0) returned 0x85 [0161.165] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0161.165] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5781F439935B6472D7D312E75A3B766C3E30CF60" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5781f439935b6472d7d312e75a3b766c3e30cf60"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0161.165] GetFileType (hFile=0x444) returned 0x1 [0161.165] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0161.165] GetFileType (hFile=0x444) returned 0x1 [0161.165] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x528 [0161.165] ReadFile (in: hFile=0x444, lpBuffer=0x21cbc90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x21cbc90*, lpNumberOfBytesRead=0x3be5c8*=0x528, lpOverlapped=0x0) returned 1 [0161.171] CloseHandle (hObject=0x444) returned 1 [0161.181] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5781F439935B6472D7D312E75A3B766C3E30CF60", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5781F439935B6472D7D312E75A3B766C3E30CF60", lpFilePart=0x0) returned 0x85 [0161.181] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0161.181] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5781F439935B6472D7D312E75A3B766C3E30CF60" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5781f439935b6472d7d312e75a3b766c3e30cf60"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0161.183] GetFileType (hFile=0x444) returned 0x1 [0161.183] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0161.183] GetFileType (hFile=0x444) returned 0x1 [0161.183] WriteFile (in: hFile=0x444, lpBuffer=0x2244710*, nNumberOfBytesToWrite=0x530, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x2244710*, lpNumberOfBytesWritten=0x3be4d8*=0x530, lpOverlapped=0x0) returned 1 [0161.184] CloseHandle (hObject=0x444) returned 1 [0161.184] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5781F439935B6472D7D312E75A3B766C3E30CF60", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5781F439935B6472D7D312E75A3B766C3E30CF60", lpFilePart=0x0) returned 0x85 [0161.184] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5781F439935B6472D7D312E75A3B766C3E30CF60.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5781F439935B6472D7D312E75A3B766C3E30CF60.xuy", lpFilePart=0x0) returned 0x89 [0161.184] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0161.184] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5781F439935B6472D7D312E75A3B766C3E30CF60" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5781f439935b6472d7d312e75a3b766c3e30cf60"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f6bdaf3, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3f6bdaf3, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x4bece3a1, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x530)) returned 1 [0161.184] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0161.184] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5781F439935B6472D7D312E75A3B766C3E30CF60" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5781f439935b6472d7d312e75a3b766c3e30cf60"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5781F439935B6472D7D312E75A3B766C3E30CF60.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5781f439935b6472d7d312e75a3b766c3e30cf60.xuy")) returned 1 [0161.186] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\579EC9227C4A988DCC4894D82AA161957107515D", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\579EC9227C4A988DCC4894D82AA161957107515D", lpFilePart=0x0) returned 0x85 [0161.186] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0161.186] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\579EC9227C4A988DCC4894D82AA161957107515D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\579ec9227c4a988dcc4894d82aa161957107515d"), fInfoLevelId=0x0, lpFileInformation=0x2245ad0 | out: lpFileInformation=0x2245ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46172872, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x46172872, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x46172872, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0x7ff)) returned 1 [0161.186] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0161.186] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\579EC9227C4A988DCC4894D82AA161957107515D", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\579EC9227C4A988DCC4894D82AA161957107515D", lpFilePart=0x0) returned 0x85 [0161.186] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0161.186] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\579EC9227C4A988DCC4894D82AA161957107515D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\579ec9227c4a988dcc4894d82aa161957107515d"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0161.187] GetFileType (hFile=0x444) returned 0x1 [0161.187] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0161.187] GetFileType (hFile=0x444) returned 0x1 [0161.187] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x7ff [0161.187] ReadFile (in: hFile=0x444, lpBuffer=0x22466e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x22466e8*, lpNumberOfBytesRead=0x3be5c8*=0x7ff, lpOverlapped=0x0) returned 1 [0161.190] CloseHandle (hObject=0x444) returned 1 [0161.200] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\579EC9227C4A988DCC4894D82AA161957107515D", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\579EC9227C4A988DCC4894D82AA161957107515D", lpFilePart=0x0) returned 0x85 [0161.200] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0161.200] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\579EC9227C4A988DCC4894D82AA161957107515D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\579ec9227c4a988dcc4894d82aa161957107515d"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0161.203] GetFileType (hFile=0x444) returned 0x1 [0161.203] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0161.203] GetFileType (hFile=0x444) returned 0x1 [0161.203] WriteFile (in: hFile=0x444, lpBuffer=0x22bff78*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x22bff78*, lpNumberOfBytesWritten=0x3be4d8*=0x800, lpOverlapped=0x0) returned 1 [0161.204] CloseHandle (hObject=0x444) returned 1 [0161.204] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\579EC9227C4A988DCC4894D82AA161957107515D", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\579EC9227C4A988DCC4894D82AA161957107515D", lpFilePart=0x0) returned 0x85 [0161.204] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\579EC9227C4A988DCC4894D82AA161957107515D.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\579EC9227C4A988DCC4894D82AA161957107515D.xuy", lpFilePart=0x0) returned 0x89 [0161.204] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0161.204] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\579EC9227C4A988DCC4894D82AA161957107515D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\579ec9227c4a988dcc4894d82aa161957107515d"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46172872, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x46172872, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x4bef4a00, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x800)) returned 1 [0161.204] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0161.204] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\579EC9227C4A988DCC4894D82AA161957107515D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\579ec9227c4a988dcc4894d82aa161957107515d"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\579EC9227C4A988DCC4894D82AA161957107515D.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\579ec9227c4a988dcc4894d82aa161957107515d.xuy")) returned 1 [0161.206] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\57E662573FD9E42D3972BE92D3DF0557C7B2E836", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\57E662573FD9E42D3972BE92D3DF0557C7B2E836", lpFilePart=0x0) returned 0x85 [0161.206] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0161.206] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\57E662573FD9E42D3972BE92D3DF0557C7B2E836" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\57e662573fd9e42d3972be92d3df0557c7b2e836"), fInfoLevelId=0x0, lpFileInformation=0x22c1338 | out: lpFileInformation=0x22c1338*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4693f60, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xf4693f60, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x5f8b5964, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x22a1)) returned 1 [0161.206] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0161.206] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\57E662573FD9E42D3972BE92D3DF0557C7B2E836", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\57E662573FD9E42D3972BE92D3DF0557C7B2E836", lpFilePart=0x0) returned 0x85 [0161.206] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0161.206] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\57E662573FD9E42D3972BE92D3DF0557C7B2E836" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\57e662573fd9e42d3972be92d3df0557c7b2e836"), fInfoLevelId=0x0, lpFileInformation=0x22c1538 | out: lpFileInformation=0x22c1538*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4693f60, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xf4693f60, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x5f8b5964, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x22a1)) returned 1 [0161.206] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0161.206] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\57E662573FD9E42D3972BE92D3DF0557C7B2E836", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\57E662573FD9E42D3972BE92D3DF0557C7B2E836", lpFilePart=0x0) returned 0x85 [0161.206] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0161.206] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\57E662573FD9E42D3972BE92D3DF0557C7B2E836" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\57e662573fd9e42d3972be92d3df0557c7b2e836"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0161.207] GetFileType (hFile=0x444) returned 0x1 [0161.207] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0161.207] GetFileType (hFile=0x444) returned 0x1 [0161.207] ReadFile (in: hFile=0x444, lpBuffer=0x22c3a68, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x22c3a68*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0161.221] CloseHandle (hObject=0x444) returned 1 [0161.221] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\57E662573FD9E42D3972BE92D3DF0557C7B2E836", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\57E662573FD9E42D3972BE92D3DF0557C7B2E836", lpFilePart=0x0) returned 0x85 [0161.222] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0161.222] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\57E662573FD9E42D3972BE92D3DF0557C7B2E836" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\57e662573fd9e42d3972be92d3df0557c7b2e836"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0161.222] GetFileType (hFile=0x444) returned 0x1 [0161.222] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0161.222] GetFileType (hFile=0x444) returned 0x1 [0161.222] WriteFile (in: hFile=0x444, lpBuffer=0x22c1718*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x22c1718*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0161.223] CloseHandle (hObject=0x444) returned 1 [0161.223] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\57E662573FD9E42D3972BE92D3DF0557C7B2E836", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\57E662573FD9E42D3972BE92D3DF0557C7B2E836", lpFilePart=0x0) returned 0x85 [0161.223] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\57E662573FD9E42D3972BE92D3DF0557C7B2E836.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\57E662573FD9E42D3972BE92D3DF0557C7B2E836.xuy", lpFilePart=0x0) returned 0x89 [0161.223] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0161.223] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\57E662573FD9E42D3972BE92D3DF0557C7B2E836" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\57e662573fd9e42d3972be92d3df0557c7b2e836"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4693f60, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xf4693f60, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x4bf1a80a, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x22a1)) returned 1 [0161.223] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0161.223] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\57E662573FD9E42D3972BE92D3DF0557C7B2E836" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\57e662573fd9e42d3972be92d3df0557c7b2e836"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\57E662573FD9E42D3972BE92D3DF0557C7B2E836.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\57e662573fd9e42d3972be92d3df0557c7b2e836.xuy")) returned 1 [0161.225] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\57FB9388D9B054D289CC913E797B5C5217B6A217", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\57FB9388D9B054D289CC913E797B5C5217B6A217", lpFilePart=0x0) returned 0x85 [0161.225] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0161.225] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\57FB9388D9B054D289CC913E797B5C5217B6A217" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\57fb9388d9b054d289cc913e797b5c5217b6a217"), fInfoLevelId=0x0, lpFileInformation=0x2340010 | out: lpFileInformation=0x2340010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f375ca8, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3f375ca8, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x3f37aace, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x52a)) returned 1 [0161.225] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0161.225] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\57FB9388D9B054D289CC913E797B5C5217B6A217", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\57FB9388D9B054D289CC913E797B5C5217B6A217", lpFilePart=0x0) returned 0x85 [0161.225] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0161.225] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\57FB9388D9B054D289CC913E797B5C5217B6A217" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\57fb9388d9b054d289cc913e797b5c5217b6a217"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0161.225] GetFileType (hFile=0x444) returned 0x1 [0161.225] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0161.225] GetFileType (hFile=0x444) returned 0x1 [0161.225] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x52a [0161.225] ReadFile (in: hFile=0x444, lpBuffer=0x2340958, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x2340958*, lpNumberOfBytesRead=0x3be5c8*=0x52a, lpOverlapped=0x0) returned 1 [0161.233] CloseHandle (hObject=0x444) returned 1 [0161.303] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\57FB9388D9B054D289CC913E797B5C5217B6A217", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\57FB9388D9B054D289CC913E797B5C5217B6A217", lpFilePart=0x0) returned 0x85 [0161.303] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0161.303] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\57FB9388D9B054D289CC913E797B5C5217B6A217" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\57fb9388d9b054d289cc913e797b5c5217b6a217"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0161.304] GetFileType (hFile=0x444) returned 0x1 [0161.304] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0161.304] GetFileType (hFile=0x444) returned 0x1 [0161.304] WriteFile (in: hFile=0x444, lpBuffer=0x21b6718*, nNumberOfBytesToWrite=0x530, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x21b6718*, lpNumberOfBytesWritten=0x3be4d8*=0x530, lpOverlapped=0x0) returned 1 [0161.305] CloseHandle (hObject=0x444) returned 1 [0161.305] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\57FB9388D9B054D289CC913E797B5C5217B6A217", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\57FB9388D9B054D289CC913E797B5C5217B6A217", lpFilePart=0x0) returned 0x85 [0161.305] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\57FB9388D9B054D289CC913E797B5C5217B6A217.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\57FB9388D9B054D289CC913E797B5C5217B6A217.xuy", lpFilePart=0x0) returned 0x89 [0161.305] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0161.305] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\57FB9388D9B054D289CC913E797B5C5217B6A217" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\57fb9388d9b054d289cc913e797b5c5217b6a217"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f375ca8, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3f375ca8, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x4bfd9395, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x530)) returned 1 [0161.305] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0161.306] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\57FB9388D9B054D289CC913E797B5C5217B6A217" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\57fb9388d9b054d289cc913e797b5c5217b6a217"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\57FB9388D9B054D289CC913E797B5C5217B6A217.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\57fb9388d9b054d289cc913e797b5c5217b6a217.xuy")) returned 1 [0161.307] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\58A845FD76589B14EF62BB6CFEA62DB0C7CCFBBE", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\58A845FD76589B14EF62BB6CFEA62DB0C7CCFBBE", lpFilePart=0x0) returned 0x85 [0161.307] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0161.307] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\58A845FD76589B14EF62BB6CFEA62DB0C7CCFBBE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\58a845fd76589b14ef62bb6cfea62db0c7ccfbbe"), fInfoLevelId=0x0, lpFileInformation=0x21b7ad8 | out: lpFileInformation=0x21b7ad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x551c802f, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x551c802f, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x6152bc7d, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xe21)) returned 1 [0161.307] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0161.307] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\58A845FD76589B14EF62BB6CFEA62DB0C7CCFBBE", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\58A845FD76589B14EF62BB6CFEA62DB0C7CCFBBE", lpFilePart=0x0) returned 0x85 [0161.307] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0161.307] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\58A845FD76589B14EF62BB6CFEA62DB0C7CCFBBE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\58a845fd76589b14ef62bb6cfea62db0c7ccfbbe"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0161.307] GetFileType (hFile=0x444) returned 0x1 [0161.307] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0161.307] GetFileType (hFile=0x444) returned 0x1 [0161.307] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xe21 [0161.307] ReadFile (in: hFile=0x444, lpBuffer=0x21b8d18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x21b8d18*, lpNumberOfBytesRead=0x3be5c8*=0xe21, lpOverlapped=0x0) returned 1 [0161.309] CloseHandle (hObject=0x444) returned 1 [0161.320] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\58A845FD76589B14EF62BB6CFEA62DB0C7CCFBBE", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\58A845FD76589B14EF62BB6CFEA62DB0C7CCFBBE", lpFilePart=0x0) returned 0x85 [0161.320] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0161.320] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\58A845FD76589B14EF62BB6CFEA62DB0C7CCFBBE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\58a845fd76589b14ef62bb6cfea62db0c7ccfbbe"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0161.322] GetFileType (hFile=0x444) returned 0x1 [0161.322] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0161.322] GetFileType (hFile=0x444) returned 0x1 [0161.322] WriteFile (in: hFile=0x444, lpBuffer=0x22344a0*, nNumberOfBytesToWrite=0xe30, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x22344a0*, lpNumberOfBytesWritten=0x3be4d8*=0xe30, lpOverlapped=0x0) returned 1 [0161.322] CloseHandle (hObject=0x444) returned 1 [0161.323] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\58A845FD76589B14EF62BB6CFEA62DB0C7CCFBBE", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\58A845FD76589B14EF62BB6CFEA62DB0C7CCFBBE", lpFilePart=0x0) returned 0x85 [0161.323] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\58A845FD76589B14EF62BB6CFEA62DB0C7CCFBBE.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\58A845FD76589B14EF62BB6CFEA62DB0C7CCFBBE.xuy", lpFilePart=0x0) returned 0x89 [0161.323] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0161.323] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\58A845FD76589B14EF62BB6CFEA62DB0C7CCFBBE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\58a845fd76589b14ef62bb6cfea62db0c7ccfbbe"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x551c802f, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x551c802f, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x4bfff5f6, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xe30)) returned 1 [0161.323] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0161.323] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\58A845FD76589B14EF62BB6CFEA62DB0C7CCFBBE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\58a845fd76589b14ef62bb6cfea62db0c7ccfbbe"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\58A845FD76589B14EF62BB6CFEA62DB0C7CCFBBE.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\58a845fd76589b14ef62bb6cfea62db0c7ccfbbe.xuy")) returned 1 [0161.324] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\58BFE77FA719F36CE48D4A317C753C845C38FE29", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\58BFE77FA719F36CE48D4A317C753C845C38FE29", lpFilePart=0x0) returned 0x85 [0161.324] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0161.325] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\58BFE77FA719F36CE48D4A317C753C845C38FE29" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\58bfe77fa719f36ce48d4a317c753c845c38fe29"), fInfoLevelId=0x0, lpFileInformation=0x2235860 | out: lpFileInformation=0x2235860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf369a5b3, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xf369a5b3, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0xf379363e, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x48b4)) returned 1 [0161.325] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0161.325] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\58BFE77FA719F36CE48D4A317C753C845C38FE29", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\58BFE77FA719F36CE48D4A317C753C845C38FE29", lpFilePart=0x0) returned 0x85 [0161.325] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0161.325] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\58BFE77FA719F36CE48D4A317C753C845C38FE29" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\58bfe77fa719f36ce48d4a317c753c845c38fe29"), fInfoLevelId=0x0, lpFileInformation=0x2235a60 | out: lpFileInformation=0x2235a60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf369a5b3, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xf369a5b3, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0xf379363e, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x48b4)) returned 1 [0161.326] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0161.326] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\58BFE77FA719F36CE48D4A317C753C845C38FE29", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\58BFE77FA719F36CE48D4A317C753C845C38FE29", lpFilePart=0x0) returned 0x85 [0161.326] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0161.326] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\58BFE77FA719F36CE48D4A317C753C845C38FE29" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\58bfe77fa719f36ce48d4a317c753c845c38fe29"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0161.327] GetFileType (hFile=0x444) returned 0x1 [0161.327] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0161.327] GetFileType (hFile=0x444) returned 0x1 [0161.327] ReadFile (in: hFile=0x444, lpBuffer=0x2237f90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x2237f90*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0161.339] CloseHandle (hObject=0x444) returned 1 [0161.339] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\58BFE77FA719F36CE48D4A317C753C845C38FE29", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\58BFE77FA719F36CE48D4A317C753C845C38FE29", lpFilePart=0x0) returned 0x85 [0161.339] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0161.340] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\58BFE77FA719F36CE48D4A317C753C845C38FE29" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\58bfe77fa719f36ce48d4a317c753c845c38fe29"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0161.340] GetFileType (hFile=0x444) returned 0x1 [0161.340] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0161.340] GetFileType (hFile=0x444) returned 0x1 [0161.340] WriteFile (in: hFile=0x444, lpBuffer=0x2235c40*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x2235c40*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0161.340] CloseHandle (hObject=0x444) returned 1 [0161.341] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\58BFE77FA719F36CE48D4A317C753C845C38FE29", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\58BFE77FA719F36CE48D4A317C753C845C38FE29", lpFilePart=0x0) returned 0x85 [0161.341] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\58BFE77FA719F36CE48D4A317C753C845C38FE29.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\58BFE77FA719F36CE48D4A317C753C845C38FE29.xuy", lpFilePart=0x0) returned 0x89 [0161.341] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0161.341] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\58BFE77FA719F36CE48D4A317C753C845C38FE29" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\58bfe77fa719f36ce48d4a317c753c845c38fe29"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf369a5b3, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xf369a5b3, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x4c04bb8f, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x48b4)) returned 1 [0161.341] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0161.341] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\58BFE77FA719F36CE48D4A317C753C845C38FE29" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\58bfe77fa719f36ce48d4a317c753c845c38fe29"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\58BFE77FA719F36CE48D4A317C753C845C38FE29.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\58bfe77fa719f36ce48d4a317c753c845c38fe29.xuy")) returned 1 [0161.342] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\59248032DB55D8A9E0296A51BC66F3DEA6028EA5", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\59248032DB55D8A9E0296A51BC66F3DEA6028EA5", lpFilePart=0x0) returned 0x85 [0161.342] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0161.342] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\59248032DB55D8A9E0296A51BC66F3DEA6028EA5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\59248032db55d8a9e0296a51bc66f3dea6028ea5"), fInfoLevelId=0x0, lpFileInformation=0x22b4538 | out: lpFileInformation=0x22b4538*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86e7e1b9, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x86e7e1b9, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x86e808cc, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x1aef)) returned 1 [0161.342] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0161.342] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\59248032DB55D8A9E0296A51BC66F3DEA6028EA5", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\59248032DB55D8A9E0296A51BC66F3DEA6028EA5", lpFilePart=0x0) returned 0x85 [0161.342] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0161.342] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\59248032DB55D8A9E0296A51BC66F3DEA6028EA5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\59248032db55d8a9e0296a51bc66f3dea6028ea5"), fInfoLevelId=0x0, lpFileInformation=0x22b4738 | out: lpFileInformation=0x22b4738*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86e7e1b9, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x86e7e1b9, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x86e808cc, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x1aef)) returned 1 [0161.342] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0161.343] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\59248032DB55D8A9E0296A51BC66F3DEA6028EA5", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\59248032DB55D8A9E0296A51BC66F3DEA6028EA5", lpFilePart=0x0) returned 0x85 [0161.343] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0161.343] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\59248032DB55D8A9E0296A51BC66F3DEA6028EA5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\59248032db55d8a9e0296a51bc66f3dea6028ea5"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0161.343] GetFileType (hFile=0x444) returned 0x1 [0161.343] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0161.344] GetFileType (hFile=0x444) returned 0x1 [0161.344] ReadFile (in: hFile=0x444, lpBuffer=0x22b6c68, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x22b6c68*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0161.362] CloseHandle (hObject=0x444) returned 1 [0161.362] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\59248032DB55D8A9E0296A51BC66F3DEA6028EA5", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\59248032DB55D8A9E0296A51BC66F3DEA6028EA5", lpFilePart=0x0) returned 0x85 [0161.362] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0161.362] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\59248032DB55D8A9E0296A51BC66F3DEA6028EA5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\59248032db55d8a9e0296a51bc66f3dea6028ea5"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0161.362] GetFileType (hFile=0x444) returned 0x1 [0161.362] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0161.362] GetFileType (hFile=0x444) returned 0x1 [0161.362] WriteFile (in: hFile=0x444, lpBuffer=0x22b4918*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x22b4918*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0161.363] CloseHandle (hObject=0x444) returned 1 [0161.363] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\59248032DB55D8A9E0296A51BC66F3DEA6028EA5", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\59248032DB55D8A9E0296A51BC66F3DEA6028EA5", lpFilePart=0x0) returned 0x85 [0161.363] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\59248032DB55D8A9E0296A51BC66F3DEA6028EA5.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\59248032DB55D8A9E0296A51BC66F3DEA6028EA5.xuy", lpFilePart=0x0) returned 0x89 [0161.363] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0161.363] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\59248032DB55D8A9E0296A51BC66F3DEA6028EA5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\59248032db55d8a9e0296a51bc66f3dea6028ea5"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86e7e1b9, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x86e7e1b9, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x4c071d06, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0161.363] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0161.363] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\59248032DB55D8A9E0296A51BC66F3DEA6028EA5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\59248032db55d8a9e0296a51bc66f3dea6028ea5"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\59248032DB55D8A9E0296A51BC66F3DEA6028EA5.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\59248032db55d8a9e0296a51bc66f3dea6028ea5.xuy")) returned 1 [0161.364] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\592BC6129BB410343931D35AFB0FE270C66E58F0", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\592BC6129BB410343931D35AFB0FE270C66E58F0", lpFilePart=0x0) returned 0x85 [0161.364] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0161.364] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\592BC6129BB410343931D35AFB0FE270C66E58F0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\592bc6129bb410343931d35afb0fe270c66e58f0"), fInfoLevelId=0x0, lpFileInformation=0x2333210 | out: lpFileInformation=0x2333210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x447df52a, ftCreationTime.dwHighDateTime=0x1d2d43d, ftLastAccessTime.dwLowDateTime=0x447df52a, ftLastAccessTime.dwHighDateTime=0x1d2d43d, ftLastWriteTime.dwLowDateTime=0x447df52a, ftLastWriteTime.dwHighDateTime=0x1d2d43d, nFileSizeHigh=0x0, nFileSizeLow=0x528)) returned 1 [0161.364] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0161.364] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\592BC6129BB410343931D35AFB0FE270C66E58F0", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\592BC6129BB410343931D35AFB0FE270C66E58F0", lpFilePart=0x0) returned 0x85 [0161.364] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0161.365] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\592BC6129BB410343931D35AFB0FE270C66E58F0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\592bc6129bb410343931d35afb0fe270c66e58f0"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0161.365] GetFileType (hFile=0x444) returned 0x1 [0161.365] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0161.365] GetFileType (hFile=0x444) returned 0x1 [0161.365] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x528 [0161.365] ReadFile (in: hFile=0x444, lpBuffer=0x2333b50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x2333b50*, lpNumberOfBytesRead=0x3be5c8*=0x528, lpOverlapped=0x0) returned 1 [0161.366] CloseHandle (hObject=0x444) returned 1 [0161.405] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\592BC6129BB410343931D35AFB0FE270C66E58F0", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\592BC6129BB410343931D35AFB0FE270C66E58F0", lpFilePart=0x0) returned 0x85 [0161.405] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0161.405] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\592BC6129BB410343931D35AFB0FE270C66E58F0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\592bc6129bb410343931d35afb0fe270c66e58f0"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0161.406] GetFileType (hFile=0x444) returned 0x1 [0161.406] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0161.406] GetFileType (hFile=0x444) returned 0x1 [0161.407] WriteFile (in: hFile=0x444, lpBuffer=0x21ac5f0*, nNumberOfBytesToWrite=0x530, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x21ac5f0*, lpNumberOfBytesWritten=0x3be4d8*=0x530, lpOverlapped=0x0) returned 1 [0161.407] CloseHandle (hObject=0x444) returned 1 [0161.407] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\592BC6129BB410343931D35AFB0FE270C66E58F0", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\592BC6129BB410343931D35AFB0FE270C66E58F0", lpFilePart=0x0) returned 0x85 [0161.407] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\592BC6129BB410343931D35AFB0FE270C66E58F0.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\592BC6129BB410343931D35AFB0FE270C66E58F0.xuy", lpFilePart=0x0) returned 0x89 [0161.407] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0161.408] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\592BC6129BB410343931D35AFB0FE270C66E58F0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\592bc6129bb410343931d35afb0fe270c66e58f0"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x447df52a, ftCreationTime.dwHighDateTime=0x1d2d43d, ftLastAccessTime.dwLowDateTime=0x447df52a, ftLastAccessTime.dwHighDateTime=0x1d2d43d, ftLastWriteTime.dwLowDateTime=0x4c0e47f4, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x530)) returned 1 [0161.408] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0161.408] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\592BC6129BB410343931D35AFB0FE270C66E58F0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\592bc6129bb410343931d35afb0fe270c66e58f0"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\592BC6129BB410343931D35AFB0FE270C66E58F0.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\592bc6129bb410343931d35afb0fe270c66e58f0.xuy")) returned 1 [0161.409] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\59BB52B352DE6D0ED5D0376B33855D43CA80B3F7", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\59BB52B352DE6D0ED5D0376B33855D43CA80B3F7", lpFilePart=0x0) returned 0x85 [0161.409] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0161.409] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\59BB52B352DE6D0ED5D0376B33855D43CA80B3F7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\59bb52b352de6d0ed5d0376b33855d43ca80b3f7"), fInfoLevelId=0x0, lpFileInformation=0x21ad9b0 | out: lpFileInformation=0x21ad9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5e8c3d57, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x5e8c3d57, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x5e8c3d57, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x5243)) returned 1 [0161.410] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0161.410] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\59BB52B352DE6D0ED5D0376B33855D43CA80B3F7", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\59BB52B352DE6D0ED5D0376B33855D43CA80B3F7", lpFilePart=0x0) returned 0x85 [0161.410] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0161.410] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\59BB52B352DE6D0ED5D0376B33855D43CA80B3F7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\59bb52b352de6d0ed5d0376b33855d43ca80b3f7"), fInfoLevelId=0x0, lpFileInformation=0x21adbb0 | out: lpFileInformation=0x21adbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5e8c3d57, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x5e8c3d57, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x5e8c3d57, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x5243)) returned 1 [0161.410] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0161.411] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\59BB52B352DE6D0ED5D0376B33855D43CA80B3F7", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\59BB52B352DE6D0ED5D0376B33855D43CA80B3F7", lpFilePart=0x0) returned 0x85 [0161.411] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0161.411] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\59BB52B352DE6D0ED5D0376B33855D43CA80B3F7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\59bb52b352de6d0ed5d0376b33855d43ca80b3f7"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0161.411] GetFileType (hFile=0x444) returned 0x1 [0161.411] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0161.411] GetFileType (hFile=0x444) returned 0x1 [0161.411] ReadFile (in: hFile=0x444, lpBuffer=0x21b00e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x21b00e0*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0161.424] CloseHandle (hObject=0x444) returned 1 [0161.424] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\59BB52B352DE6D0ED5D0376B33855D43CA80B3F7", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\59BB52B352DE6D0ED5D0376B33855D43CA80B3F7", lpFilePart=0x0) returned 0x85 [0161.424] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0161.424] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\59BB52B352DE6D0ED5D0376B33855D43CA80B3F7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\59bb52b352de6d0ed5d0376b33855d43ca80b3f7"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0161.425] GetFileType (hFile=0x444) returned 0x1 [0161.425] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0161.425] GetFileType (hFile=0x444) returned 0x1 [0161.425] WriteFile (in: hFile=0x444, lpBuffer=0x21add90*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x21add90*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0161.425] CloseHandle (hObject=0x444) returned 1 [0161.425] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\59BB52B352DE6D0ED5D0376B33855D43CA80B3F7", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\59BB52B352DE6D0ED5D0376B33855D43CA80B3F7", lpFilePart=0x0) returned 0x85 [0161.425] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\59BB52B352DE6D0ED5D0376B33855D43CA80B3F7.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\59BB52B352DE6D0ED5D0376B33855D43CA80B3F7.xuy", lpFilePart=0x0) returned 0x89 [0161.425] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0161.425] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\59BB52B352DE6D0ED5D0376B33855D43CA80B3F7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\59bb52b352de6d0ed5d0376b33855d43ca80b3f7"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5e8c3d57, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x5e8c3d57, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x4c10a690, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x5243)) returned 1 [0161.425] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0161.425] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\59BB52B352DE6D0ED5D0376B33855D43CA80B3F7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\59bb52b352de6d0ed5d0376b33855d43ca80b3f7"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\59BB52B352DE6D0ED5D0376B33855D43CA80B3F7.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\59bb52b352de6d0ed5d0376b33855d43ca80b3f7.xuy")) returned 1 [0161.426] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\59D05F1B38666C8EF68BDEE20A28647F754464F6", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\59D05F1B38666C8EF68BDEE20A28647F754464F6", lpFilePart=0x0) returned 0x85 [0161.426] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0161.426] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\59D05F1B38666C8EF68BDEE20A28647F754464F6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\59d05f1b38666c8ef68bdee20a28647f754464f6"), fInfoLevelId=0x0, lpFileInformation=0x222c688 | out: lpFileInformation=0x222c688*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x615c4498, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x615c4498, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x615c4498, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xf15)) returned 1 [0161.427] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0161.427] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\59D05F1B38666C8EF68BDEE20A28647F754464F6", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\59D05F1B38666C8EF68BDEE20A28647F754464F6", lpFilePart=0x0) returned 0x85 [0161.427] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0161.427] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\59D05F1B38666C8EF68BDEE20A28647F754464F6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\59d05f1b38666c8ef68bdee20a28647f754464f6"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0161.427] GetFileType (hFile=0x444) returned 0x1 [0161.427] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0161.427] GetFileType (hFile=0x444) returned 0x1 [0161.427] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xf15 [0161.427] ReadFile (in: hFile=0x444, lpBuffer=0x222d9b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x222d9b8*, lpNumberOfBytesRead=0x3be5c8*=0xf15, lpOverlapped=0x0) returned 1 [0161.429] CloseHandle (hObject=0x444) returned 1 [0161.440] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\59D05F1B38666C8EF68BDEE20A28647F754464F6", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\59D05F1B38666C8EF68BDEE20A28647F754464F6", lpFilePart=0x0) returned 0x85 [0161.440] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0161.440] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\59D05F1B38666C8EF68BDEE20A28647F754464F6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\59d05f1b38666c8ef68bdee20a28647f754464f6"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0161.442] GetFileType (hFile=0x444) returned 0x1 [0161.442] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0161.442] GetFileType (hFile=0x444) returned 0x1 [0161.442] WriteFile (in: hFile=0x444, lpBuffer=0x22a95f0*, nNumberOfBytesToWrite=0xf20, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x22a95f0*, lpNumberOfBytesWritten=0x3be4d8*=0xf20, lpOverlapped=0x0) returned 1 [0161.443] CloseHandle (hObject=0x444) returned 1 [0161.443] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\59D05F1B38666C8EF68BDEE20A28647F754464F6", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\59D05F1B38666C8EF68BDEE20A28647F754464F6", lpFilePart=0x0) returned 0x85 [0161.443] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\59D05F1B38666C8EF68BDEE20A28647F754464F6.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\59D05F1B38666C8EF68BDEE20A28647F754464F6.xuy", lpFilePart=0x0) returned 0x89 [0161.443] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0161.443] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\59D05F1B38666C8EF68BDEE20A28647F754464F6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\59d05f1b38666c8ef68bdee20a28647f754464f6"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x615c4498, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x615c4498, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x4c1308e0, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xf20)) returned 1 [0161.443] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0161.443] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\59D05F1B38666C8EF68BDEE20A28647F754464F6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\59d05f1b38666c8ef68bdee20a28647f754464f6"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\59D05F1B38666C8EF68BDEE20A28647F754464F6.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\59d05f1b38666c8ef68bdee20a28647f754464f6.xuy")) returned 1 [0161.444] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5A39FCB4CCAE4A6C76307026D7C882B4AE85B1F9", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5A39FCB4CCAE4A6C76307026D7C882B4AE85B1F9", lpFilePart=0x0) returned 0x85 [0161.444] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0161.444] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5A39FCB4CCAE4A6C76307026D7C882B4AE85B1F9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5a39fcb4ccae4a6c76307026d7c882b4ae85b1f9"), fInfoLevelId=0x0, lpFileInformation=0x22aa9b0 | out: lpFileInformation=0x22aa9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46d7396b, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x46d7396b, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x46d7396b, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0x37d3)) returned 1 [0161.445] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0161.445] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5A39FCB4CCAE4A6C76307026D7C882B4AE85B1F9", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5A39FCB4CCAE4A6C76307026D7C882B4AE85B1F9", lpFilePart=0x0) returned 0x85 [0161.445] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0161.445] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5A39FCB4CCAE4A6C76307026D7C882B4AE85B1F9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5a39fcb4ccae4a6c76307026d7c882b4ae85b1f9"), fInfoLevelId=0x0, lpFileInformation=0x22aabb0 | out: lpFileInformation=0x22aabb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46d7396b, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x46d7396b, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x46d7396b, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0x37d3)) returned 1 [0161.445] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0161.445] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5A39FCB4CCAE4A6C76307026D7C882B4AE85B1F9", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5A39FCB4CCAE4A6C76307026D7C882B4AE85B1F9", lpFilePart=0x0) returned 0x85 [0161.445] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0161.445] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5A39FCB4CCAE4A6C76307026D7C882B4AE85B1F9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5a39fcb4ccae4a6c76307026d7c882b4ae85b1f9"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0161.445] GetFileType (hFile=0x444) returned 0x1 [0161.446] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0161.446] GetFileType (hFile=0x444) returned 0x1 [0161.446] ReadFile (in: hFile=0x444, lpBuffer=0x22ad0e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x22ad0e0*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0161.458] CloseHandle (hObject=0x444) returned 1 [0161.458] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5A39FCB4CCAE4A6C76307026D7C882B4AE85B1F9", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5A39FCB4CCAE4A6C76307026D7C882B4AE85B1F9", lpFilePart=0x0) returned 0x85 [0161.459] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0161.459] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5A39FCB4CCAE4A6C76307026D7C882B4AE85B1F9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5a39fcb4ccae4a6c76307026d7c882b4ae85b1f9"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0161.459] GetFileType (hFile=0x444) returned 0x1 [0161.459] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0161.459] GetFileType (hFile=0x444) returned 0x1 [0161.459] WriteFile (in: hFile=0x444, lpBuffer=0x22aad90*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x22aad90*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0161.459] CloseHandle (hObject=0x444) returned 1 [0161.459] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5A39FCB4CCAE4A6C76307026D7C882B4AE85B1F9", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5A39FCB4CCAE4A6C76307026D7C882B4AE85B1F9", lpFilePart=0x0) returned 0x85 [0161.459] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5A39FCB4CCAE4A6C76307026D7C882B4AE85B1F9.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5A39FCB4CCAE4A6C76307026D7C882B4AE85B1F9.xuy", lpFilePart=0x0) returned 0x89 [0161.459] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0161.459] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5A39FCB4CCAE4A6C76307026D7C882B4AE85B1F9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5a39fcb4ccae4a6c76307026d7c882b4ae85b1f9"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46d7396b, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x46d7396b, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x4c156b2e, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x37d3)) returned 1 [0161.460] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0161.460] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5A39FCB4CCAE4A6C76307026D7C882B4AE85B1F9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5a39fcb4ccae4a6c76307026d7c882b4ae85b1f9"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5A39FCB4CCAE4A6C76307026D7C882B4AE85B1F9.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5a39fcb4ccae4a6c76307026d7c882b4ae85b1f9.xuy")) returned 1 [0161.461] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5A6EEC1674DA4669A4FF612E7924A91FBF501426", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5A6EEC1674DA4669A4FF612E7924A91FBF501426", lpFilePart=0x0) returned 0x85 [0161.461] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0161.461] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5A6EEC1674DA4669A4FF612E7924A91FBF501426" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5a6eec1674da4669a4ff612e7924a91fbf501426"), fInfoLevelId=0x0, lpFileInformation=0x2329688 | out: lpFileInformation=0x2329688*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x878b9e63, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x878b9e63, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x878bc56c, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x1cbf)) returned 1 [0161.461] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0161.461] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5A6EEC1674DA4669A4FF612E7924A91FBF501426", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5A6EEC1674DA4669A4FF612E7924A91FBF501426", lpFilePart=0x0) returned 0x85 [0161.461] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0161.461] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5A6EEC1674DA4669A4FF612E7924A91FBF501426" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5a6eec1674da4669a4ff612e7924a91fbf501426"), fInfoLevelId=0x0, lpFileInformation=0x2329888 | out: lpFileInformation=0x2329888*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x878b9e63, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x878b9e63, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x878bc56c, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x1cbf)) returned 1 [0161.461] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0161.461] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5A6EEC1674DA4669A4FF612E7924A91FBF501426", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5A6EEC1674DA4669A4FF612E7924A91FBF501426", lpFilePart=0x0) returned 0x85 [0161.461] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0161.461] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5A6EEC1674DA4669A4FF612E7924A91FBF501426" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5a6eec1674da4669a4ff612e7924a91fbf501426"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0161.462] GetFileType (hFile=0x444) returned 0x1 [0161.462] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0161.462] GetFileType (hFile=0x444) returned 0x1 [0161.462] ReadFile (in: hFile=0x444, lpBuffer=0x232bdb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x232bdb8*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0161.504] CloseHandle (hObject=0x444) returned 1 [0161.505] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5A6EEC1674DA4669A4FF612E7924A91FBF501426", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5A6EEC1674DA4669A4FF612E7924A91FBF501426", lpFilePart=0x0) returned 0x85 [0161.505] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0161.505] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5A6EEC1674DA4669A4FF612E7924A91FBF501426" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5a6eec1674da4669a4ff612e7924a91fbf501426"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0161.505] GetFileType (hFile=0x444) returned 0x1 [0161.505] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0161.505] GetFileType (hFile=0x444) returned 0x1 [0161.505] WriteFile (in: hFile=0x444, lpBuffer=0x2185c28*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x2185c28*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0161.505] CloseHandle (hObject=0x444) returned 1 [0161.505] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5A6EEC1674DA4669A4FF612E7924A91FBF501426", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5A6EEC1674DA4669A4FF612E7924A91FBF501426", lpFilePart=0x0) returned 0x85 [0161.505] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5A6EEC1674DA4669A4FF612E7924A91FBF501426.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5A6EEC1674DA4669A4FF612E7924A91FBF501426.xuy", lpFilePart=0x0) returned 0x89 [0161.505] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0161.505] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5A6EEC1674DA4669A4FF612E7924A91FBF501426" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5a6eec1674da4669a4ff612e7924a91fbf501426"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x878b9e63, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x878b9e63, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x4c1c9367, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0161.506] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0161.506] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5A6EEC1674DA4669A4FF612E7924A91FBF501426" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5a6eec1674da4669a4ff612e7924a91fbf501426"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5A6EEC1674DA4669A4FF612E7924A91FBF501426.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5a6eec1674da4669a4ff612e7924a91fbf501426.xuy")) returned 1 [0161.507] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5AF1F43361120818C2E543605F5DF938574B1EDC", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5AF1F43361120818C2E543605F5DF938574B1EDC", lpFilePart=0x0) returned 0x85 [0161.507] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0161.507] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5AF1F43361120818C2E543605F5DF938574B1EDC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5af1f43361120818c2e543605f5df938574b1edc"), fInfoLevelId=0x0, lpFileInformation=0x21aafd8 | out: lpFileInformation=0x21aafd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe20ccbd6, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xe20ccbd6, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0xe20ccbd6, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x1257)) returned 1 [0161.507] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0161.507] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5AF1F43361120818C2E543605F5DF938574B1EDC", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5AF1F43361120818C2E543605F5DF938574B1EDC", lpFilePart=0x0) returned 0x85 [0161.507] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0161.507] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5AF1F43361120818C2E543605F5DF938574B1EDC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5af1f43361120818c2e543605f5df938574b1edc"), fInfoLevelId=0x0, lpFileInformation=0x21ab1d8 | out: lpFileInformation=0x21ab1d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe20ccbd6, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xe20ccbd6, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0xe20ccbd6, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x1257)) returned 1 [0161.507] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0161.507] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5AF1F43361120818C2E543605F5DF938574B1EDC", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5AF1F43361120818C2E543605F5DF938574B1EDC", lpFilePart=0x0) returned 0x85 [0161.507] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0161.507] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5AF1F43361120818C2E543605F5DF938574B1EDC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5af1f43361120818c2e543605f5df938574b1edc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0161.508] GetFileType (hFile=0x444) returned 0x1 [0161.508] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0161.508] GetFileType (hFile=0x444) returned 0x1 [0161.508] ReadFile (in: hFile=0x444, lpBuffer=0x21ad708, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x21ad708*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0161.521] CloseHandle (hObject=0x444) returned 1 [0161.521] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5AF1F43361120818C2E543605F5DF938574B1EDC", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5AF1F43361120818C2E543605F5DF938574B1EDC", lpFilePart=0x0) returned 0x85 [0161.521] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0161.521] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5AF1F43361120818C2E543605F5DF938574B1EDC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5af1f43361120818c2e543605f5df938574b1edc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0161.521] GetFileType (hFile=0x444) returned 0x1 [0161.521] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0161.521] GetFileType (hFile=0x444) returned 0x1 [0161.521] WriteFile (in: hFile=0x444, lpBuffer=0x21ab3b8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x21ab3b8*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0161.521] CloseHandle (hObject=0x444) returned 1 [0161.521] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5AF1F43361120818C2E543605F5DF938574B1EDC", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5AF1F43361120818C2E543605F5DF938574B1EDC", lpFilePart=0x0) returned 0x85 [0161.522] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5AF1F43361120818C2E543605F5DF938574B1EDC.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5AF1F43361120818C2E543605F5DF938574B1EDC.xuy", lpFilePart=0x0) returned 0x89 [0161.522] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0161.522] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5AF1F43361120818C2E543605F5DF938574B1EDC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5af1f43361120818c2e543605f5df938574b1edc"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe20ccbd6, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xe20ccbd6, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x4c1ef7a1, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0161.522] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0161.522] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5AF1F43361120818C2E543605F5DF938574B1EDC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5af1f43361120818c2e543605f5df938574b1edc"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5AF1F43361120818C2E543605F5DF938574B1EDC.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5af1f43361120818c2e543605f5df938574b1edc.xuy")) returned 1 [0161.523] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5B1B55B57E2440A52DE3FED7E02C83E04A78B0FD", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5B1B55B57E2440A52DE3FED7E02C83E04A78B0FD", lpFilePart=0x0) returned 0x85 [0161.523] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0161.523] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5B1B55B57E2440A52DE3FED7E02C83E04A78B0FD" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5b1b55b57e2440a52de3fed7e02c83e04a78b0fd"), fInfoLevelId=0x0, lpFileInformation=0x2229cb0 | out: lpFileInformation=0x2229cb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc32855dd, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc32855dd, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x3cdc6987, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0xb612)) returned 1 [0161.523] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0161.523] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5B1B55B57E2440A52DE3FED7E02C83E04A78B0FD", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5B1B55B57E2440A52DE3FED7E02C83E04A78B0FD", lpFilePart=0x0) returned 0x85 [0161.523] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0161.523] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5B1B55B57E2440A52DE3FED7E02C83E04A78B0FD" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5b1b55b57e2440a52de3fed7e02c83e04a78b0fd"), fInfoLevelId=0x0, lpFileInformation=0x2229eb0 | out: lpFileInformation=0x2229eb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc32855dd, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc32855dd, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x3cdc6987, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0xb612)) returned 1 [0161.523] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0161.523] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5B1B55B57E2440A52DE3FED7E02C83E04A78B0FD", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5B1B55B57E2440A52DE3FED7E02C83E04A78B0FD", lpFilePart=0x0) returned 0x85 [0161.523] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0161.524] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5B1B55B57E2440A52DE3FED7E02C83E04A78B0FD" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5b1b55b57e2440a52de3fed7e02c83e04a78b0fd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0161.524] GetFileType (hFile=0x444) returned 0x1 [0161.524] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0161.524] GetFileType (hFile=0x444) returned 0x1 [0161.524] ReadFile (in: hFile=0x444, lpBuffer=0x222c3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x222c3e0*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0161.548] CloseHandle (hObject=0x444) returned 1 [0161.548] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5B1B55B57E2440A52DE3FED7E02C83E04A78B0FD", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5B1B55B57E2440A52DE3FED7E02C83E04A78B0FD", lpFilePart=0x0) returned 0x85 [0161.548] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0161.549] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5B1B55B57E2440A52DE3FED7E02C83E04A78B0FD" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5b1b55b57e2440a52de3fed7e02c83e04a78b0fd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0161.549] GetFileType (hFile=0x444) returned 0x1 [0161.549] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0161.549] GetFileType (hFile=0x444) returned 0x1 [0161.549] WriteFile (in: hFile=0x444, lpBuffer=0x222a090*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x222a090*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0161.549] CloseHandle (hObject=0x444) returned 1 [0161.549] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5B1B55B57E2440A52DE3FED7E02C83E04A78B0FD", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5B1B55B57E2440A52DE3FED7E02C83E04A78B0FD", lpFilePart=0x0) returned 0x85 [0161.549] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5B1B55B57E2440A52DE3FED7E02C83E04A78B0FD.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5B1B55B57E2440A52DE3FED7E02C83E04A78B0FD.xuy", lpFilePart=0x0) returned 0x89 [0161.549] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0161.549] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5B1B55B57E2440A52DE3FED7E02C83E04A78B0FD" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5b1b55b57e2440a52de3fed7e02c83e04a78b0fd"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc32855dd, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc32855dd, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x4c23bad2, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xb612)) returned 1 [0161.549] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0161.550] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5B1B55B57E2440A52DE3FED7E02C83E04A78B0FD" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5b1b55b57e2440a52de3fed7e02c83e04a78b0fd"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5B1B55B57E2440A52DE3FED7E02C83E04A78B0FD.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5b1b55b57e2440a52de3fed7e02c83e04a78b0fd.xuy")) returned 1 [0161.551] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5B928BD544BA66929A709C6AEC9D5968DCB905A1", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5B928BD544BA66929A709C6AEC9D5968DCB905A1", lpFilePart=0x0) returned 0x85 [0161.551] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0161.551] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5B928BD544BA66929A709C6AEC9D5968DCB905A1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5b928bd544ba66929a709c6aec9d5968dcb905a1"), fInfoLevelId=0x0, lpFileInformation=0x22a8988 | out: lpFileInformation=0x22a8988*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d85fb06, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x5d85fb06, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x5d85fb06, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x1247)) returned 1 [0161.551] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0161.551] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5B928BD544BA66929A709C6AEC9D5968DCB905A1", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5B928BD544BA66929A709C6AEC9D5968DCB905A1", lpFilePart=0x0) returned 0x85 [0161.551] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0161.551] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5B928BD544BA66929A709C6AEC9D5968DCB905A1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5b928bd544ba66929a709c6aec9d5968dcb905a1"), fInfoLevelId=0x0, lpFileInformation=0x22a8b88 | out: lpFileInformation=0x22a8b88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d85fb06, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x5d85fb06, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x5d85fb06, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x1247)) returned 1 [0161.551] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0161.551] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5B928BD544BA66929A709C6AEC9D5968DCB905A1", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5B928BD544BA66929A709C6AEC9D5968DCB905A1", lpFilePart=0x0) returned 0x85 [0161.551] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0161.551] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5B928BD544BA66929A709C6AEC9D5968DCB905A1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5b928bd544ba66929a709c6aec9d5968dcb905a1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0161.552] GetFileType (hFile=0x444) returned 0x1 [0161.552] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0161.552] GetFileType (hFile=0x444) returned 0x1 [0161.552] ReadFile (in: hFile=0x444, lpBuffer=0x22ab0b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x22ab0b8*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0161.580] CloseHandle (hObject=0x444) returned 1 [0161.580] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5B928BD544BA66929A709C6AEC9D5968DCB905A1", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5B928BD544BA66929A709C6AEC9D5968DCB905A1", lpFilePart=0x0) returned 0x85 [0161.580] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0161.580] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5B928BD544BA66929A709C6AEC9D5968DCB905A1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5b928bd544ba66929a709c6aec9d5968dcb905a1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0161.580] GetFileType (hFile=0x444) returned 0x1 [0161.580] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0161.580] GetFileType (hFile=0x444) returned 0x1 [0161.580] WriteFile (in: hFile=0x444, lpBuffer=0x22a8d68*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x22a8d68*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0161.580] CloseHandle (hObject=0x444) returned 1 [0161.581] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5B928BD544BA66929A709C6AEC9D5968DCB905A1", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5B928BD544BA66929A709C6AEC9D5968DCB905A1", lpFilePart=0x0) returned 0x85 [0161.581] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5B928BD544BA66929A709C6AEC9D5968DCB905A1.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5B928BD544BA66929A709C6AEC9D5968DCB905A1.xuy", lpFilePart=0x0) returned 0x89 [0161.581] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0161.581] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5B928BD544BA66929A709C6AEC9D5968DCB905A1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5b928bd544ba66929a709c6aec9d5968dcb905a1"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d85fb06, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x5d85fb06, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x4c288014, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0161.581] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0161.581] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5B928BD544BA66929A709C6AEC9D5968DCB905A1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5b928bd544ba66929a709c6aec9d5968dcb905a1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5B928BD544BA66929A709C6AEC9D5968DCB905A1.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5b928bd544ba66929a709c6aec9d5968dcb905a1.xuy")) returned 1 [0161.582] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5BDDE6C7804D11CE399AF314C3D33E47FBAE7C88", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5BDDE6C7804D11CE399AF314C3D33E47FBAE7C88", lpFilePart=0x0) returned 0x85 [0161.582] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0161.582] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5BDDE6C7804D11CE399AF314C3D33E47FBAE7C88" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5bdde6c7804d11ce399af314c3d33e47fbae7c88"), fInfoLevelId=0x0, lpFileInformation=0x2327660 | out: lpFileInformation=0x2327660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f163f8a, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3f163f8a, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xdde82d7e, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x2f8f)) returned 1 [0161.582] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0161.582] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5BDDE6C7804D11CE399AF314C3D33E47FBAE7C88", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5BDDE6C7804D11CE399AF314C3D33E47FBAE7C88", lpFilePart=0x0) returned 0x85 [0161.583] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0161.583] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5BDDE6C7804D11CE399AF314C3D33E47FBAE7C88" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5bdde6c7804d11ce399af314c3d33e47fbae7c88"), fInfoLevelId=0x0, lpFileInformation=0x2327860 | out: lpFileInformation=0x2327860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f163f8a, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3f163f8a, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xdde82d7e, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x2f8f)) returned 1 [0161.583] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0161.583] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5BDDE6C7804D11CE399AF314C3D33E47FBAE7C88", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5BDDE6C7804D11CE399AF314C3D33E47FBAE7C88", lpFilePart=0x0) returned 0x85 [0161.583] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0161.583] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5BDDE6C7804D11CE399AF314C3D33E47FBAE7C88" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5bdde6c7804d11ce399af314c3d33e47fbae7c88"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0161.584] GetFileType (hFile=0x444) returned 0x1 [0161.584] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0161.584] GetFileType (hFile=0x444) returned 0x1 [0161.584] ReadFile (in: hFile=0x444, lpBuffer=0x2329d90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x2329d90*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0161.626] CloseHandle (hObject=0x444) returned 1 [0161.626] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5BDDE6C7804D11CE399AF314C3D33E47FBAE7C88", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5BDDE6C7804D11CE399AF314C3D33E47FBAE7C88", lpFilePart=0x0) returned 0x85 [0161.626] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0161.626] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5BDDE6C7804D11CE399AF314C3D33E47FBAE7C88" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5bdde6c7804d11ce399af314c3d33e47fbae7c88"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0161.626] GetFileType (hFile=0x444) returned 0x1 [0161.627] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0161.627] GetFileType (hFile=0x444) returned 0x1 [0161.627] WriteFile (in: hFile=0x444, lpBuffer=0x2185c28*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x2185c28*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0161.627] CloseHandle (hObject=0x444) returned 1 [0161.627] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5BDDE6C7804D11CE399AF314C3D33E47FBAE7C88", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5BDDE6C7804D11CE399AF314C3D33E47FBAE7C88", lpFilePart=0x0) returned 0x85 [0161.627] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5BDDE6C7804D11CE399AF314C3D33E47FBAE7C88.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5BDDE6C7804D11CE399AF314C3D33E47FBAE7C88.xuy", lpFilePart=0x0) returned 0x89 [0161.627] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0161.627] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5BDDE6C7804D11CE399AF314C3D33E47FBAE7C88" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5bdde6c7804d11ce399af314c3d33e47fbae7c88"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f163f8a, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3f163f8a, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x4c2fa86c, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2f8f)) returned 1 [0161.627] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0161.627] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5BDDE6C7804D11CE399AF314C3D33E47FBAE7C88" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5bdde6c7804d11ce399af314c3d33e47fbae7c88"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5BDDE6C7804D11CE399AF314C3D33E47FBAE7C88.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5bdde6c7804d11ce399af314c3d33e47fbae7c88.xuy")) returned 1 [0161.629] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5C30F12D68A505E4AE0A6A3D896A1EC9C549AE96", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5C30F12D68A505E4AE0A6A3D896A1EC9C549AE96", lpFilePart=0x0) returned 0x85 [0161.629] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0161.629] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5C30F12D68A505E4AE0A6A3D896A1EC9C549AE96" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5c30f12d68a505e4ae0a6a3d896a1ec9c549ae96"), fInfoLevelId=0x0, lpFileInformation=0x21a6328 | out: lpFileInformation=0x21a6328*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61577ff1, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x61577ff1, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x61577ff1, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x1139)) returned 1 [0161.629] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0161.629] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5C30F12D68A505E4AE0A6A3D896A1EC9C549AE96", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5C30F12D68A505E4AE0A6A3D896A1EC9C549AE96", lpFilePart=0x0) returned 0x85 [0161.629] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0161.629] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5C30F12D68A505E4AE0A6A3D896A1EC9C549AE96" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5c30f12d68a505e4ae0a6a3d896a1ec9c549ae96"), fInfoLevelId=0x0, lpFileInformation=0x21a6528 | out: lpFileInformation=0x21a6528*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61577ff1, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x61577ff1, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x61577ff1, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x1139)) returned 1 [0161.629] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0161.629] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5C30F12D68A505E4AE0A6A3D896A1EC9C549AE96", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5C30F12D68A505E4AE0A6A3D896A1EC9C549AE96", lpFilePart=0x0) returned 0x85 [0161.629] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0161.629] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5C30F12D68A505E4AE0A6A3D896A1EC9C549AE96" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5c30f12d68a505e4ae0a6a3d896a1ec9c549ae96"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0161.630] GetFileType (hFile=0x444) returned 0x1 [0161.630] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0161.630] GetFileType (hFile=0x444) returned 0x1 [0161.630] ReadFile (in: hFile=0x444, lpBuffer=0x21a8a58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x21a8a58*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0161.664] CloseHandle (hObject=0x444) returned 1 [0161.664] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5C30F12D68A505E4AE0A6A3D896A1EC9C549AE96", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5C30F12D68A505E4AE0A6A3D896A1EC9C549AE96", lpFilePart=0x0) returned 0x85 [0161.664] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0161.665] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5C30F12D68A505E4AE0A6A3D896A1EC9C549AE96" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5c30f12d68a505e4ae0a6a3d896a1ec9c549ae96"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0161.665] GetFileType (hFile=0x444) returned 0x1 [0161.665] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0161.665] GetFileType (hFile=0x444) returned 0x1 [0161.665] WriteFile (in: hFile=0x444, lpBuffer=0x21a6708*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x21a6708*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0161.665] CloseHandle (hObject=0x444) returned 1 [0161.665] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5C30F12D68A505E4AE0A6A3D896A1EC9C549AE96", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5C30F12D68A505E4AE0A6A3D896A1EC9C549AE96", lpFilePart=0x0) returned 0x85 [0161.665] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5C30F12D68A505E4AE0A6A3D896A1EC9C549AE96.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5C30F12D68A505E4AE0A6A3D896A1EC9C549AE96.xuy", lpFilePart=0x0) returned 0x89 [0161.665] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0161.665] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5C30F12D68A505E4AE0A6A3D896A1EC9C549AE96" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5c30f12d68a505e4ae0a6a3d896a1ec9c549ae96"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61577ff1, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x61577ff1, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x4c346a6b, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0161.665] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0161.665] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5C30F12D68A505E4AE0A6A3D896A1EC9C549AE96" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5c30f12d68a505e4ae0a6a3d896a1ec9c549ae96"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5C30F12D68A505E4AE0A6A3D896A1EC9C549AE96.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5c30f12d68a505e4ae0a6a3d896a1ec9c549ae96.xuy")) returned 1 [0161.667] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5D3D330EFBD2B9CD6EB45919D9403F605414EFA5", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5D3D330EFBD2B9CD6EB45919D9403F605414EFA5", lpFilePart=0x0) returned 0x85 [0161.667] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0161.667] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5D3D330EFBD2B9CD6EB45919D9403F605414EFA5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5d3d330efbd2b9cd6eb45919d9403f605414efa5"), fInfoLevelId=0x0, lpFileInformation=0x2225000 | out: lpFileInformation=0x2225000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c19e2e4, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3c19e2e4, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xdda2e612, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x2184)) returned 1 [0161.667] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0161.667] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5D3D330EFBD2B9CD6EB45919D9403F605414EFA5", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5D3D330EFBD2B9CD6EB45919D9403F605414EFA5", lpFilePart=0x0) returned 0x85 [0161.667] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0161.667] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5D3D330EFBD2B9CD6EB45919D9403F605414EFA5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5d3d330efbd2b9cd6eb45919d9403f605414efa5"), fInfoLevelId=0x0, lpFileInformation=0x2225200 | out: lpFileInformation=0x2225200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c19e2e4, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3c19e2e4, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xdda2e612, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x2184)) returned 1 [0161.667] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0161.667] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5D3D330EFBD2B9CD6EB45919D9403F605414EFA5", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5D3D330EFBD2B9CD6EB45919D9403F605414EFA5", lpFilePart=0x0) returned 0x85 [0161.667] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0161.667] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5D3D330EFBD2B9CD6EB45919D9403F605414EFA5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5d3d330efbd2b9cd6eb45919d9403f605414efa5"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0161.669] GetFileType (hFile=0x444) returned 0x1 [0161.669] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0161.669] GetFileType (hFile=0x444) returned 0x1 [0161.669] ReadFile (in: hFile=0x444, lpBuffer=0x2227730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x2227730*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0161.680] CloseHandle (hObject=0x444) returned 1 [0161.680] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5D3D330EFBD2B9CD6EB45919D9403F605414EFA5", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5D3D330EFBD2B9CD6EB45919D9403F605414EFA5", lpFilePart=0x0) returned 0x85 [0161.680] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0161.681] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5D3D330EFBD2B9CD6EB45919D9403F605414EFA5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5d3d330efbd2b9cd6eb45919d9403f605414efa5"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0161.681] GetFileType (hFile=0x444) returned 0x1 [0161.681] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0161.681] GetFileType (hFile=0x444) returned 0x1 [0161.681] WriteFile (in: hFile=0x444, lpBuffer=0x22253e0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x22253e0*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0161.681] CloseHandle (hObject=0x444) returned 1 [0161.685] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5D3D330EFBD2B9CD6EB45919D9403F605414EFA5", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5D3D330EFBD2B9CD6EB45919D9403F605414EFA5", lpFilePart=0x0) returned 0x85 [0161.685] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5D3D330EFBD2B9CD6EB45919D9403F605414EFA5.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5D3D330EFBD2B9CD6EB45919D9403F605414EFA5.xuy", lpFilePart=0x0) returned 0x89 [0161.685] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0161.685] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5D3D330EFBD2B9CD6EB45919D9403F605414EFA5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5d3d330efbd2b9cd6eb45919d9403f605414efa5"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c19e2e4, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3c19e2e4, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x4c36d924, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2184)) returned 1 [0161.685] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0161.685] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5D3D330EFBD2B9CD6EB45919D9403F605414EFA5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5d3d330efbd2b9cd6eb45919d9403f605414efa5"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5D3D330EFBD2B9CD6EB45919D9403F605414EFA5.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5d3d330efbd2b9cd6eb45919d9403f605414efa5.xuy")) returned 1 [0161.687] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5D44AC703C53CC7EE6356F698FD1B03DA81FFE47", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5D44AC703C53CC7EE6356F698FD1B03DA81FFE47", lpFilePart=0x0) returned 0x85 [0161.687] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0161.687] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5D44AC703C53CC7EE6356F698FD1B03DA81FFE47" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5d44ac703c53cc7ee6356f698fd1b03da81ffe47"), fInfoLevelId=0x0, lpFileInformation=0x22a3cd8 | out: lpFileInformation=0x22a3cd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ef71e2a, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3ef71e2a, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x7d574055, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x2196)) returned 1 [0161.687] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0161.687] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5D44AC703C53CC7EE6356F698FD1B03DA81FFE47", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5D44AC703C53CC7EE6356F698FD1B03DA81FFE47", lpFilePart=0x0) returned 0x85 [0161.687] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0161.687] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5D44AC703C53CC7EE6356F698FD1B03DA81FFE47" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5d44ac703c53cc7ee6356f698fd1b03da81ffe47"), fInfoLevelId=0x0, lpFileInformation=0x22a3ed8 | out: lpFileInformation=0x22a3ed8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ef71e2a, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3ef71e2a, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x7d574055, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x2196)) returned 1 [0161.687] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0161.687] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5D44AC703C53CC7EE6356F698FD1B03DA81FFE47", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5D44AC703C53CC7EE6356F698FD1B03DA81FFE47", lpFilePart=0x0) returned 0x85 [0161.687] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0161.687] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5D44AC703C53CC7EE6356F698FD1B03DA81FFE47" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5d44ac703c53cc7ee6356f698fd1b03da81ffe47"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0161.688] GetFileType (hFile=0x444) returned 0x1 [0161.688] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0161.688] GetFileType (hFile=0x444) returned 0x1 [0161.688] ReadFile (in: hFile=0x444, lpBuffer=0x22a6408, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x22a6408*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0161.711] CloseHandle (hObject=0x444) returned 1 [0161.711] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5D44AC703C53CC7EE6356F698FD1B03DA81FFE47", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5D44AC703C53CC7EE6356F698FD1B03DA81FFE47", lpFilePart=0x0) returned 0x85 [0161.711] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0161.711] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5D44AC703C53CC7EE6356F698FD1B03DA81FFE47" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5d44ac703c53cc7ee6356f698fd1b03da81ffe47"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0161.711] GetFileType (hFile=0x444) returned 0x1 [0161.711] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0161.711] GetFileType (hFile=0x444) returned 0x1 [0161.711] WriteFile (in: hFile=0x444, lpBuffer=0x22a40b8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x22a40b8*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0161.711] CloseHandle (hObject=0x444) returned 1 [0161.712] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5D44AC703C53CC7EE6356F698FD1B03DA81FFE47", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5D44AC703C53CC7EE6356F698FD1B03DA81FFE47", lpFilePart=0x0) returned 0x85 [0161.712] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5D44AC703C53CC7EE6356F698FD1B03DA81FFE47.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5D44AC703C53CC7EE6356F698FD1B03DA81FFE47.xuy", lpFilePart=0x0) returned 0x89 [0161.712] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0161.712] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5D44AC703C53CC7EE6356F698FD1B03DA81FFE47" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5d44ac703c53cc7ee6356f698fd1b03da81ffe47"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ef71e2a, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3ef71e2a, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x4c3b916b, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2196)) returned 1 [0161.712] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0161.712] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5D44AC703C53CC7EE6356F698FD1B03DA81FFE47" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5d44ac703c53cc7ee6356f698fd1b03da81ffe47"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5D44AC703C53CC7EE6356F698FD1B03DA81FFE47.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5d44ac703c53cc7ee6356f698fd1b03da81ffe47.xuy")) returned 1 [0161.713] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5D4D29BF9DDC265D3BF3C2EC2AD949959DB051E0", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5D4D29BF9DDC265D3BF3C2EC2AD949959DB051E0", lpFilePart=0x0) returned 0x85 [0161.713] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0161.713] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5D4D29BF9DDC265D3BF3C2EC2AD949959DB051E0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5d4d29bf9ddc265d3bf3c2ec2ad949959db051e0"), fInfoLevelId=0x0, lpFileInformation=0x23229b0 | out: lpFileInformation=0x23229b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43dd5662, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x43dd5662, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x43dd5662, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0x52b9)) returned 1 [0161.713] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0161.713] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5D4D29BF9DDC265D3BF3C2EC2AD949959DB051E0", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5D4D29BF9DDC265D3BF3C2EC2AD949959DB051E0", lpFilePart=0x0) returned 0x85 [0161.713] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0161.713] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5D4D29BF9DDC265D3BF3C2EC2AD949959DB051E0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5d4d29bf9ddc265d3bf3c2ec2ad949959db051e0"), fInfoLevelId=0x0, lpFileInformation=0x2322bb0 | out: lpFileInformation=0x2322bb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43dd5662, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x43dd5662, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x43dd5662, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0x52b9)) returned 1 [0161.713] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0161.714] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5D4D29BF9DDC265D3BF3C2EC2AD949959DB051E0", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5D4D29BF9DDC265D3BF3C2EC2AD949959DB051E0", lpFilePart=0x0) returned 0x85 [0161.714] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0161.714] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5D4D29BF9DDC265D3BF3C2EC2AD949959DB051E0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5d4d29bf9ddc265d3bf3c2ec2ad949959db051e0"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0161.715] GetFileType (hFile=0x444) returned 0x1 [0161.715] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0161.715] GetFileType (hFile=0x444) returned 0x1 [0161.715] ReadFile (in: hFile=0x444, lpBuffer=0x23250e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x23250e0*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0161.774] CloseHandle (hObject=0x444) returned 1 [0161.774] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5D4D29BF9DDC265D3BF3C2EC2AD949959DB051E0", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5D4D29BF9DDC265D3BF3C2EC2AD949959DB051E0", lpFilePart=0x0) returned 0x85 [0161.774] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0161.774] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5D4D29BF9DDC265D3BF3C2EC2AD949959DB051E0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5d4d29bf9ddc265d3bf3c2ec2ad949959db051e0"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0161.775] GetFileType (hFile=0x444) returned 0x1 [0161.775] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0161.775] GetFileType (hFile=0x444) returned 0x1 [0161.775] WriteFile (in: hFile=0x444, lpBuffer=0x2185c28*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x2185c28*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0161.775] CloseHandle (hObject=0x444) returned 1 [0161.775] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5D4D29BF9DDC265D3BF3C2EC2AD949959DB051E0", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5D4D29BF9DDC265D3BF3C2EC2AD949959DB051E0", lpFilePart=0x0) returned 0x85 [0161.775] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5D4D29BF9DDC265D3BF3C2EC2AD949959DB051E0.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5D4D29BF9DDC265D3BF3C2EC2AD949959DB051E0.xuy", lpFilePart=0x0) returned 0x89 [0161.775] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0161.775] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5D4D29BF9DDC265D3BF3C2EC2AD949959DB051E0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5d4d29bf9ddc265d3bf3c2ec2ad949959db051e0"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43dd5662, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x43dd5662, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x4c451d4f, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x52b9)) returned 1 [0161.775] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0161.775] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5D4D29BF9DDC265D3BF3C2EC2AD949959DB051E0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5d4d29bf9ddc265d3bf3c2ec2ad949959db051e0"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5D4D29BF9DDC265D3BF3C2EC2AD949959DB051E0.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5d4d29bf9ddc265d3bf3c2ec2ad949959db051e0.xuy")) returned 1 [0161.776] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5D9BD74008929159A2B20BA288E8C14E90139D9E", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5D9BD74008929159A2B20BA288E8C14E90139D9E", lpFilePart=0x0) returned 0x85 [0161.776] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0161.777] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5D9BD74008929159A2B20BA288E8C14E90139D9E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5d9bd74008929159a2b20ba288e8c14e90139d9e"), fInfoLevelId=0x0, lpFileInformation=0x21a1668 | out: lpFileInformation=0x21a1668*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x547a6013, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x547a6013, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x6152bc7d, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x4959)) returned 1 [0161.777] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0161.777] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5D9BD74008929159A2B20BA288E8C14E90139D9E", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5D9BD74008929159A2B20BA288E8C14E90139D9E", lpFilePart=0x0) returned 0x85 [0161.777] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0161.777] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5D9BD74008929159A2B20BA288E8C14E90139D9E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5d9bd74008929159a2b20ba288e8c14e90139d9e"), fInfoLevelId=0x0, lpFileInformation=0x21a1868 | out: lpFileInformation=0x21a1868*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x547a6013, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x547a6013, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x6152bc7d, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x4959)) returned 1 [0161.777] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0161.777] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5D9BD74008929159A2B20BA288E8C14E90139D9E", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5D9BD74008929159A2B20BA288E8C14E90139D9E", lpFilePart=0x0) returned 0x85 [0161.777] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0161.777] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5D9BD74008929159A2B20BA288E8C14E90139D9E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5d9bd74008929159a2b20ba288e8c14e90139d9e"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0161.778] GetFileType (hFile=0x444) returned 0x1 [0161.778] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0161.778] GetFileType (hFile=0x444) returned 0x1 [0161.778] ReadFile (in: hFile=0x444, lpBuffer=0x21a3d98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x21a3d98*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0161.790] CloseHandle (hObject=0x444) returned 1 [0161.790] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5D9BD74008929159A2B20BA288E8C14E90139D9E", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5D9BD74008929159A2B20BA288E8C14E90139D9E", lpFilePart=0x0) returned 0x85 [0161.790] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0161.790] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5D9BD74008929159A2B20BA288E8C14E90139D9E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5d9bd74008929159a2b20ba288e8c14e90139d9e"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0161.790] GetFileType (hFile=0x444) returned 0x1 [0161.790] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0161.790] GetFileType (hFile=0x444) returned 0x1 [0161.790] WriteFile (in: hFile=0x444, lpBuffer=0x21a1a48*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x21a1a48*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0161.791] CloseHandle (hObject=0x444) returned 1 [0161.791] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5D9BD74008929159A2B20BA288E8C14E90139D9E", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5D9BD74008929159A2B20BA288E8C14E90139D9E", lpFilePart=0x0) returned 0x85 [0161.791] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5D9BD74008929159A2B20BA288E8C14E90139D9E.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5D9BD74008929159A2B20BA288E8C14E90139D9E.xuy", lpFilePart=0x0) returned 0x89 [0161.791] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0161.791] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5D9BD74008929159A2B20BA288E8C14E90139D9E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5d9bd74008929159a2b20ba288e8c14e90139d9e"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x547a6013, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x547a6013, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x4c47900a, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x4959)) returned 1 [0161.791] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0161.791] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5D9BD74008929159A2B20BA288E8C14E90139D9E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5d9bd74008929159a2b20ba288e8c14e90139d9e"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5D9BD74008929159A2B20BA288E8C14E90139D9E.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5d9bd74008929159a2b20ba288e8c14e90139d9e.xuy")) returned 1 [0161.792] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5E4954707B44E5A4B4ACF5F22B52219A1DCA477F", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5E4954707B44E5A4B4ACF5F22B52219A1DCA477F", lpFilePart=0x0) returned 0x85 [0161.792] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0161.792] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5E4954707B44E5A4B4ACF5F22B52219A1DCA477F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5e4954707b44e5a4b4acf5f22b52219a1dca477f"), fInfoLevelId=0x0, lpFileInformation=0x2220340 | out: lpFileInformation=0x2220340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f7047e6, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3f7047e6, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x86b62290, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x3f9a)) returned 1 [0161.792] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0161.792] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5E4954707B44E5A4B4ACF5F22B52219A1DCA477F", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5E4954707B44E5A4B4ACF5F22B52219A1DCA477F", lpFilePart=0x0) returned 0x85 [0161.792] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0161.792] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5E4954707B44E5A4B4ACF5F22B52219A1DCA477F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5e4954707b44e5a4b4acf5f22b52219a1dca477f"), fInfoLevelId=0x0, lpFileInformation=0x2220540 | out: lpFileInformation=0x2220540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f7047e6, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3f7047e6, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x86b62290, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x3f9a)) returned 1 [0161.793] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0161.793] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5E4954707B44E5A4B4ACF5F22B52219A1DCA477F", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5E4954707B44E5A4B4ACF5F22B52219A1DCA477F", lpFilePart=0x0) returned 0x85 [0161.793] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0161.793] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5E4954707B44E5A4B4ACF5F22B52219A1DCA477F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5e4954707b44e5a4b4acf5f22b52219a1dca477f"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0161.794] GetFileType (hFile=0x444) returned 0x1 [0161.794] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0161.794] GetFileType (hFile=0x444) returned 0x1 [0161.794] ReadFile (in: hFile=0x444, lpBuffer=0x2222a70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x2222a70*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0161.821] CloseHandle (hObject=0x444) returned 1 [0161.821] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5E4954707B44E5A4B4ACF5F22B52219A1DCA477F", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5E4954707B44E5A4B4ACF5F22B52219A1DCA477F", lpFilePart=0x0) returned 0x85 [0161.821] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0161.821] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5E4954707B44E5A4B4ACF5F22B52219A1DCA477F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5e4954707b44e5a4b4acf5f22b52219a1dca477f"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0161.821] GetFileType (hFile=0x444) returned 0x1 [0161.821] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0161.821] GetFileType (hFile=0x444) returned 0x1 [0161.821] WriteFile (in: hFile=0x444, lpBuffer=0x2220720*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x2220720*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0161.821] CloseHandle (hObject=0x444) returned 1 [0161.821] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5E4954707B44E5A4B4ACF5F22B52219A1DCA477F", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5E4954707B44E5A4B4ACF5F22B52219A1DCA477F", lpFilePart=0x0) returned 0x85 [0161.822] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5E4954707B44E5A4B4ACF5F22B52219A1DCA477F.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5E4954707B44E5A4B4ACF5F22B52219A1DCA477F.xuy", lpFilePart=0x0) returned 0x89 [0161.822] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0161.822] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5E4954707B44E5A4B4ACF5F22B52219A1DCA477F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5e4954707b44e5a4b4acf5f22b52219a1dca477f"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f7047e6, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3f7047e6, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x4c4c42cd, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x3f9a)) returned 1 [0161.822] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0161.822] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5E4954707B44E5A4B4ACF5F22B52219A1DCA477F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5e4954707b44e5a4b4acf5f22b52219a1dca477f"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5E4954707B44E5A4B4ACF5F22B52219A1DCA477F.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5e4954707b44e5a4b4acf5f22b52219a1dca477f.xuy")) returned 1 [0161.823] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5E6743008EAD7F878BBA3DB3AC74B0F7B6847E62", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5E6743008EAD7F878BBA3DB3AC74B0F7B6847E62", lpFilePart=0x0) returned 0x85 [0161.823] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0161.823] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5E6743008EAD7F878BBA3DB3AC74B0F7B6847E62" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5e6743008ead7f878bba3db3ac74b0f7b6847e62"), fInfoLevelId=0x0, lpFileInformation=0x229f018 | out: lpFileInformation=0x229f018*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d9a31d7, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x5d9a31d7, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x5d9a31d7, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0xf37)) returned 1 [0161.823] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0161.823] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5E6743008EAD7F878BBA3DB3AC74B0F7B6847E62", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5E6743008EAD7F878BBA3DB3AC74B0F7B6847E62", lpFilePart=0x0) returned 0x85 [0161.823] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0161.823] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5E6743008EAD7F878BBA3DB3AC74B0F7B6847E62" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5e6743008ead7f878bba3db3ac74b0f7b6847e62"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0161.824] GetFileType (hFile=0x444) returned 0x1 [0161.824] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0161.824] GetFileType (hFile=0x444) returned 0x1 [0161.824] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xf37 [0161.824] ReadFile (in: hFile=0x444, lpBuffer=0x22a0368, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x22a0368*, lpNumberOfBytesRead=0x3be5c8*=0xf37, lpOverlapped=0x0) returned 1 [0161.832] CloseHandle (hObject=0x444) returned 1 [0161.842] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5E6743008EAD7F878BBA3DB3AC74B0F7B6847E62", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5E6743008EAD7F878BBA3DB3AC74B0F7B6847E62", lpFilePart=0x0) returned 0x85 [0161.842] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0161.842] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5E6743008EAD7F878BBA3DB3AC74B0F7B6847E62" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5e6743008ead7f878bba3db3ac74b0f7b6847e62"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0161.844] GetFileType (hFile=0x444) returned 0x1 [0161.844] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0161.844] GetFileType (hFile=0x444) returned 0x1 [0161.845] WriteFile (in: hFile=0x444, lpBuffer=0x231c040*, nNumberOfBytesToWrite=0xf40, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x231c040*, lpNumberOfBytesWritten=0x3be4d8*=0xf40, lpOverlapped=0x0) returned 1 [0161.845] CloseHandle (hObject=0x444) returned 1 [0161.846] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5E6743008EAD7F878BBA3DB3AC74B0F7B6847E62", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5E6743008EAD7F878BBA3DB3AC74B0F7B6847E62", lpFilePart=0x0) returned 0x85 [0161.846] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5E6743008EAD7F878BBA3DB3AC74B0F7B6847E62.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5E6743008EAD7F878BBA3DB3AC74B0F7B6847E62.xuy", lpFilePart=0x0) returned 0x89 [0161.846] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0161.846] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5E6743008EAD7F878BBA3DB3AC74B0F7B6847E62" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5e6743008ead7f878bba3db3ac74b0f7b6847e62"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d9a31d7, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x5d9a31d7, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x4c5107fc, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xf40)) returned 1 [0161.846] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0161.846] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5E6743008EAD7F878BBA3DB3AC74B0F7B6847E62" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5e6743008ead7f878bba3db3ac74b0f7b6847e62"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5E6743008EAD7F878BBA3DB3AC74B0F7B6847E62.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5e6743008ead7f878bba3db3ac74b0f7b6847e62.xuy")) returned 1 [0161.847] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5E8FB85F742729ABDB8D2A0429759BA5D6E156B0", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5E8FB85F742729ABDB8D2A0429759BA5D6E156B0", lpFilePart=0x0) returned 0x85 [0161.847] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0161.847] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5E8FB85F742729ABDB8D2A0429759BA5D6E156B0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5e8fb85f742729abdb8d2a0429759ba5d6e156b0"), fInfoLevelId=0x0, lpFileInformation=0x231d400 | out: lpFileInformation=0x231d400*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c5bf49c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x5c5bf49c, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x5c5e56de, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xf37)) returned 1 [0161.847] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0161.847] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5E8FB85F742729ABDB8D2A0429759BA5D6E156B0", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5E8FB85F742729ABDB8D2A0429759BA5D6E156B0", lpFilePart=0x0) returned 0x85 [0161.847] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0161.847] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5E8FB85F742729ABDB8D2A0429759BA5D6E156B0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5e8fb85f742729abdb8d2a0429759ba5d6e156b0"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0161.848] GetFileType (hFile=0x444) returned 0x1 [0161.848] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0161.848] GetFileType (hFile=0x444) returned 0x1 [0161.848] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xf37 [0161.848] ReadFile (in: hFile=0x444, lpBuffer=0x231e750, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x231e750*, lpNumberOfBytesRead=0x3be5c8*=0xf37, lpOverlapped=0x0) returned 1 [0161.850] CloseHandle (hObject=0x444) returned 1 [0161.890] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5E8FB85F742729ABDB8D2A0429759BA5D6E156B0", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5E8FB85F742729ABDB8D2A0429759BA5D6E156B0", lpFilePart=0x0) returned 0x85 [0161.890] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0161.890] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5E8FB85F742729ABDB8D2A0429759BA5D6E156B0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5e8fb85f742729abdb8d2a0429759ba5d6e156b0"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0161.892] GetFileType (hFile=0x444) returned 0x1 [0161.892] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0161.892] GetFileType (hFile=0x444) returned 0x1 [0161.892] WriteFile (in: hFile=0x444, lpBuffer=0x2198178*, nNumberOfBytesToWrite=0xf40, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x2198178*, lpNumberOfBytesWritten=0x3be4d8*=0xf40, lpOverlapped=0x0) returned 1 [0161.892] CloseHandle (hObject=0x444) returned 1 [0161.893] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5E8FB85F742729ABDB8D2A0429759BA5D6E156B0", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5E8FB85F742729ABDB8D2A0429759BA5D6E156B0", lpFilePart=0x0) returned 0x85 [0161.893] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5E8FB85F742729ABDB8D2A0429759BA5D6E156B0.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5E8FB85F742729ABDB8D2A0429759BA5D6E156B0.xuy", lpFilePart=0x0) returned 0x89 [0161.893] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0161.893] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5E8FB85F742729ABDB8D2A0429759BA5D6E156B0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5e8fb85f742729abdb8d2a0429759ba5d6e156b0"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c5bf49c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x5c5bf49c, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x4c582e97, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xf40)) returned 1 [0161.893] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0161.893] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5E8FB85F742729ABDB8D2A0429759BA5D6E156B0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5e8fb85f742729abdb8d2a0429759ba5d6e156b0"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5E8FB85F742729ABDB8D2A0429759BA5D6E156B0.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5e8fb85f742729abdb8d2a0429759ba5d6e156b0.xuy")) returned 1 [0161.894] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5E97E077892FC573B11B9DE18E4E04712EE38B25", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5E97E077892FC573B11B9DE18E4E04712EE38B25", lpFilePart=0x0) returned 0x85 [0161.894] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0161.894] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5E97E077892FC573B11B9DE18E4E04712EE38B25" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5e97e077892fc573b11b9de18e4e04712ee38b25"), fInfoLevelId=0x0, lpFileInformation=0x2199538 | out: lpFileInformation=0x2199538*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56f05be8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x56f05be8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x56f05be8, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x18d8)) returned 1 [0161.894] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0161.894] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5E97E077892FC573B11B9DE18E4E04712EE38B25", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5E97E077892FC573B11B9DE18E4E04712EE38B25", lpFilePart=0x0) returned 0x85 [0161.894] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0161.894] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5E97E077892FC573B11B9DE18E4E04712EE38B25" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5e97e077892fc573b11b9de18e4e04712ee38b25"), fInfoLevelId=0x0, lpFileInformation=0x2199738 | out: lpFileInformation=0x2199738*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56f05be8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x56f05be8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x56f05be8, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x18d8)) returned 1 [0161.894] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0161.894] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5E97E077892FC573B11B9DE18E4E04712EE38B25", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5E97E077892FC573B11B9DE18E4E04712EE38B25", lpFilePart=0x0) returned 0x85 [0161.894] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0161.895] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5E97E077892FC573B11B9DE18E4E04712EE38B25" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5e97e077892fc573b11b9de18e4e04712ee38b25"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0161.895] GetFileType (hFile=0x444) returned 0x1 [0161.895] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0161.895] GetFileType (hFile=0x444) returned 0x1 [0161.895] ReadFile (in: hFile=0x444, lpBuffer=0x219bc68, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x219bc68*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0161.916] CloseHandle (hObject=0x444) returned 1 [0161.916] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5E97E077892FC573B11B9DE18E4E04712EE38B25", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5E97E077892FC573B11B9DE18E4E04712EE38B25", lpFilePart=0x0) returned 0x85 [0161.916] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0161.916] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5E97E077892FC573B11B9DE18E4E04712EE38B25" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5e97e077892fc573b11b9de18e4e04712ee38b25"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0161.917] GetFileType (hFile=0x444) returned 0x1 [0161.917] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0161.917] GetFileType (hFile=0x444) returned 0x1 [0161.917] WriteFile (in: hFile=0x444, lpBuffer=0x2199918*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x2199918*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0161.917] CloseHandle (hObject=0x444) returned 1 [0161.917] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5E97E077892FC573B11B9DE18E4E04712EE38B25", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5E97E077892FC573B11B9DE18E4E04712EE38B25", lpFilePart=0x0) returned 0x85 [0161.917] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5E97E077892FC573B11B9DE18E4E04712EE38B25.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5E97E077892FC573B11B9DE18E4E04712EE38B25.xuy", lpFilePart=0x0) returned 0x89 [0161.917] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0161.917] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5E97E077892FC573B11B9DE18E4E04712EE38B25" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5e97e077892fc573b11b9de18e4e04712ee38b25"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56f05be8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x56f05be8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x4c5a90df, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0161.917] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0161.917] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5E97E077892FC573B11B9DE18E4E04712EE38B25" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5e97e077892fc573b11b9de18e4e04712ee38b25"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5E97E077892FC573B11B9DE18E4E04712EE38B25.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5e97e077892fc573b11b9de18e4e04712ee38b25.xuy")) returned 1 [0161.919] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5EDCA8EAB63E705143E36A7639D1A2CE2F619754", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5EDCA8EAB63E705143E36A7639D1A2CE2F619754", lpFilePart=0x0) returned 0x85 [0161.919] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0161.919] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5EDCA8EAB63E705143E36A7639D1A2CE2F619754" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5edca8eab63e705143e36a7639d1a2ce2f619754"), fInfoLevelId=0x0, lpFileInformation=0x2218210 | out: lpFileInformation=0x2218210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde0e53cd, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xde0e53cd, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xde0e7ad7, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0xfbe)) returned 1 [0161.919] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0161.919] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5EDCA8EAB63E705143E36A7639D1A2CE2F619754", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5EDCA8EAB63E705143E36A7639D1A2CE2F619754", lpFilePart=0x0) returned 0x85 [0161.919] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0161.919] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5EDCA8EAB63E705143E36A7639D1A2CE2F619754" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5edca8eab63e705143e36a7639d1a2ce2f619754"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0161.919] GetFileType (hFile=0x444) returned 0x1 [0161.919] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0161.920] GetFileType (hFile=0x444) returned 0x1 [0161.920] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xfbe [0161.920] ReadFile (in: hFile=0x444, lpBuffer=0x22195e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x22195e8*, lpNumberOfBytesRead=0x3be5c8*=0xfbe, lpOverlapped=0x0) returned 1 [0161.921] CloseHandle (hObject=0x444) returned 1 [0161.930] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5EDCA8EAB63E705143E36A7639D1A2CE2F619754", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5EDCA8EAB63E705143E36A7639D1A2CE2F619754", lpFilePart=0x0) returned 0x85 [0161.930] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0161.930] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5EDCA8EAB63E705143E36A7639D1A2CE2F619754" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5edca8eab63e705143e36a7639d1a2ce2f619754"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0161.932] GetFileType (hFile=0x444) returned 0x1 [0161.932] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0161.932] GetFileType (hFile=0x444) returned 0x1 [0161.932] WriteFile (in: hFile=0x444, lpBuffer=0x2295538*, nNumberOfBytesToWrite=0xfc0, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x2295538*, lpNumberOfBytesWritten=0x3be4d8*=0xfc0, lpOverlapped=0x0) returned 1 [0161.933] CloseHandle (hObject=0x444) returned 1 [0161.933] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5EDCA8EAB63E705143E36A7639D1A2CE2F619754", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5EDCA8EAB63E705143E36A7639D1A2CE2F619754", lpFilePart=0x0) returned 0x85 [0161.933] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5EDCA8EAB63E705143E36A7639D1A2CE2F619754.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5EDCA8EAB63E705143E36A7639D1A2CE2F619754.xuy", lpFilePart=0x0) returned 0x89 [0161.933] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0161.933] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5EDCA8EAB63E705143E36A7639D1A2CE2F619754" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5edca8eab63e705143e36a7639d1a2ce2f619754"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde0e53cd, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xde0e53cd, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x4c5d0b9a, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xfc0)) returned 1 [0161.933] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0161.933] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5EDCA8EAB63E705143E36A7639D1A2CE2F619754" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5edca8eab63e705143e36a7639d1a2ce2f619754"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5EDCA8EAB63E705143E36A7639D1A2CE2F619754.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5edca8eab63e705143e36a7639d1a2ce2f619754.xuy")) returned 1 [0161.934] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5EE31D123C1A55F6FF9368B871E37AC7D9F01FE5", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5EE31D123C1A55F6FF9368B871E37AC7D9F01FE5", lpFilePart=0x0) returned 0x85 [0161.934] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0161.934] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5EE31D123C1A55F6FF9368B871E37AC7D9F01FE5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5ee31d123c1a55f6ff9368b871e37ac7d9f01fe5"), fInfoLevelId=0x0, lpFileInformation=0x22968f8 | out: lpFileInformation=0x22968f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d85fb06, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x5d85fb06, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x5d85fb06, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x18ab)) returned 1 [0161.935] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0161.935] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5EE31D123C1A55F6FF9368B871E37AC7D9F01FE5", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5EE31D123C1A55F6FF9368B871E37AC7D9F01FE5", lpFilePart=0x0) returned 0x85 [0161.935] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0161.935] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5EE31D123C1A55F6FF9368B871E37AC7D9F01FE5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5ee31d123c1a55f6ff9368b871e37ac7d9f01fe5"), fInfoLevelId=0x0, lpFileInformation=0x2296af8 | out: lpFileInformation=0x2296af8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d85fb06, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x5d85fb06, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x5d85fb06, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x18ab)) returned 1 [0161.935] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0161.935] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5EE31D123C1A55F6FF9368B871E37AC7D9F01FE5", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5EE31D123C1A55F6FF9368B871E37AC7D9F01FE5", lpFilePart=0x0) returned 0x85 [0161.935] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0161.935] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5EE31D123C1A55F6FF9368B871E37AC7D9F01FE5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5ee31d123c1a55f6ff9368b871e37ac7d9f01fe5"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0161.935] GetFileType (hFile=0x444) returned 0x1 [0161.935] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0161.936] GetFileType (hFile=0x444) returned 0x1 [0161.936] ReadFile (in: hFile=0x444, lpBuffer=0x2299028, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x2299028*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0161.956] CloseHandle (hObject=0x444) returned 1 [0161.956] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5EE31D123C1A55F6FF9368B871E37AC7D9F01FE5", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5EE31D123C1A55F6FF9368B871E37AC7D9F01FE5", lpFilePart=0x0) returned 0x85 [0161.956] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0161.956] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5EE31D123C1A55F6FF9368B871E37AC7D9F01FE5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5ee31d123c1a55f6ff9368b871e37ac7d9f01fe5"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0161.956] GetFileType (hFile=0x444) returned 0x1 [0161.956] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0161.956] GetFileType (hFile=0x444) returned 0x1 [0161.956] WriteFile (in: hFile=0x444, lpBuffer=0x2296cd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x2296cd8*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0161.956] CloseHandle (hObject=0x444) returned 1 [0161.956] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5EE31D123C1A55F6FF9368B871E37AC7D9F01FE5", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5EE31D123C1A55F6FF9368B871E37AC7D9F01FE5", lpFilePart=0x0) returned 0x85 [0161.956] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5EE31D123C1A55F6FF9368B871E37AC7D9F01FE5.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5EE31D123C1A55F6FF9368B871E37AC7D9F01FE5.xuy", lpFilePart=0x0) returned 0x89 [0161.956] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0161.957] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5EE31D123C1A55F6FF9368B871E37AC7D9F01FE5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5ee31d123c1a55f6ff9368b871e37ac7d9f01fe5"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d85fb06, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x5d85fb06, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x4c61ba97, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0161.957] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0161.957] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5EE31D123C1A55F6FF9368B871E37AC7D9F01FE5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5ee31d123c1a55f6ff9368b871e37ac7d9f01fe5"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5EE31D123C1A55F6FF9368B871E37AC7D9F01FE5.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5ee31d123c1a55f6ff9368b871e37ac7d9f01fe5.xuy")) returned 1 [0161.958] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5F13BE737EB5A225243B9A7C6D508D72DBD5C0B5", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5F13BE737EB5A225243B9A7C6D508D72DBD5C0B5", lpFilePart=0x0) returned 0x85 [0161.958] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0161.958] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5F13BE737EB5A225243B9A7C6D508D72DBD5C0B5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5f13be737eb5a225243b9a7c6d508d72dbd5c0b5"), fInfoLevelId=0x0, lpFileInformation=0x23155d0 | out: lpFileInformation=0x23155d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x615c4498, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x615c4498, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x615c4498, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xecd)) returned 1 [0161.958] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0161.958] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5F13BE737EB5A225243B9A7C6D508D72DBD5C0B5", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5F13BE737EB5A225243B9A7C6D508D72DBD5C0B5", lpFilePart=0x0) returned 0x85 [0161.958] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0161.958] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5F13BE737EB5A225243B9A7C6D508D72DBD5C0B5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5f13be737eb5a225243b9a7c6d508d72dbd5c0b5"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0161.958] GetFileType (hFile=0x444) returned 0x1 [0161.958] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0161.958] GetFileType (hFile=0x444) returned 0x1 [0161.958] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xecd [0161.958] ReadFile (in: hFile=0x444, lpBuffer=0x23168b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x23168b8*, lpNumberOfBytesRead=0x3be5c8*=0xecd, lpOverlapped=0x0) returned 1 [0161.969] CloseHandle (hObject=0x444) returned 1 [0162.007] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5F13BE737EB5A225243B9A7C6D508D72DBD5C0B5", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5F13BE737EB5A225243B9A7C6D508D72DBD5C0B5", lpFilePart=0x0) returned 0x85 [0162.007] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0162.007] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5F13BE737EB5A225243B9A7C6D508D72DBD5C0B5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5f13be737eb5a225243b9a7c6d508d72dbd5c0b5"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0162.008] GetFileType (hFile=0x444) returned 0x1 [0162.008] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0162.008] GetFileType (hFile=0x444) returned 0x1 [0162.008] WriteFile (in: hFile=0x444, lpBuffer=0x21922d8*, nNumberOfBytesToWrite=0xed0, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x21922d8*, lpNumberOfBytesWritten=0x3be4d8*=0xed0, lpOverlapped=0x0) returned 1 [0162.009] CloseHandle (hObject=0x444) returned 1 [0162.009] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5F13BE737EB5A225243B9A7C6D508D72DBD5C0B5", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5F13BE737EB5A225243B9A7C6D508D72DBD5C0B5", lpFilePart=0x0) returned 0x85 [0162.009] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5F13BE737EB5A225243B9A7C6D508D72DBD5C0B5.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5F13BE737EB5A225243B9A7C6D508D72DBD5C0B5.xuy", lpFilePart=0x0) returned 0x89 [0162.009] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0162.009] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5F13BE737EB5A225243B9A7C6D508D72DBD5C0B5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5f13be737eb5a225243b9a7c6d508d72dbd5c0b5"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x615c4498, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x615c4498, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x4c68de11, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xed0)) returned 1 [0162.010] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0162.010] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5F13BE737EB5A225243B9A7C6D508D72DBD5C0B5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5f13be737eb5a225243b9a7c6d508d72dbd5c0b5"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5F13BE737EB5A225243B9A7C6D508D72DBD5C0B5.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5f13be737eb5a225243b9a7c6d508d72dbd5c0b5.xuy")) returned 1 [0162.011] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5FC12D3D59A53A815787F247F7BC644A4F2DBC17", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5FC12D3D59A53A815787F247F7BC644A4F2DBC17", lpFilePart=0x0) returned 0x85 [0162.011] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0162.011] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5FC12D3D59A53A815787F247F7BC644A4F2DBC17" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5fc12d3d59a53a815787f247f7bc644a4f2dbc17"), fInfoLevelId=0x0, lpFileInformation=0x2193698 | out: lpFileInformation=0x2193698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f16b4b9, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3f16b4b9, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x3f16dbb9, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x4d4)) returned 1 [0162.011] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0162.011] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5FC12D3D59A53A815787F247F7BC644A4F2DBC17", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5FC12D3D59A53A815787F247F7BC644A4F2DBC17", lpFilePart=0x0) returned 0x85 [0162.011] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0162.011] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5FC12D3D59A53A815787F247F7BC644A4F2DBC17" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5fc12d3d59a53a815787f247f7bc644a4f2dbc17"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0162.011] GetFileType (hFile=0x444) returned 0x1 [0162.011] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0162.011] GetFileType (hFile=0x444) returned 0x1 [0162.011] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x4d4 [0162.011] ReadFile (in: hFile=0x444, lpBuffer=0x2193f88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x2193f88*, lpNumberOfBytesRead=0x3be5c8*=0x4d4, lpOverlapped=0x0) returned 1 [0162.028] CloseHandle (hObject=0x444) returned 1 [0162.037] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5FC12D3D59A53A815787F247F7BC644A4F2DBC17", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5FC12D3D59A53A815787F247F7BC644A4F2DBC17", lpFilePart=0x0) returned 0x85 [0162.038] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0162.038] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5FC12D3D59A53A815787F247F7BC644A4F2DBC17" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5fc12d3d59a53a815787f247f7bc644a4f2dbc17"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0162.039] GetFileType (hFile=0x444) returned 0x1 [0162.039] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0162.039] GetFileType (hFile=0x444) returned 0x1 [0162.039] WriteFile (in: hFile=0x444, lpBuffer=0x220c880*, nNumberOfBytesToWrite=0x4e0, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x220c880*, lpNumberOfBytesWritten=0x3be4d8*=0x4e0, lpOverlapped=0x0) returned 1 [0162.040] CloseHandle (hObject=0x444) returned 1 [0162.040] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5FC12D3D59A53A815787F247F7BC644A4F2DBC17", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5FC12D3D59A53A815787F247F7BC644A4F2DBC17", lpFilePart=0x0) returned 0x85 [0162.040] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5FC12D3D59A53A815787F247F7BC644A4F2DBC17.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5FC12D3D59A53A815787F247F7BC644A4F2DBC17.xuy", lpFilePart=0x0) returned 0x89 [0162.040] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0162.040] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5FC12D3D59A53A815787F247F7BC644A4F2DBC17" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5fc12d3d59a53a815787f247f7bc644a4f2dbc17"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f16b4b9, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3f16b4b9, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x4c6da212, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x4e0)) returned 1 [0162.040] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0162.040] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5FC12D3D59A53A815787F247F7BC644A4F2DBC17" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5fc12d3d59a53a815787f247f7bc644a4f2dbc17"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5FC12D3D59A53A815787F247F7BC644A4F2DBC17.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5fc12d3d59a53a815787f247f7bc644a4f2dbc17.xuy")) returned 1 [0162.042] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\602AF084D952E6E4F98EFA78BC6FE6B89DEE91B8", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\602AF084D952E6E4F98EFA78BC6FE6B89DEE91B8", lpFilePart=0x0) returned 0x85 [0162.042] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0162.042] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\602AF084D952E6E4F98EFA78BC6FE6B89DEE91B8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\602af084d952e6e4f98efa78bc6fe6b89dee91b8"), fInfoLevelId=0x0, lpFileInformation=0x220dc40 | out: lpFileInformation=0x220dc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c1b9090, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3c1b9090, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x3c1bded1, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x3740)) returned 1 [0162.042] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0162.042] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\602AF084D952E6E4F98EFA78BC6FE6B89DEE91B8", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\602AF084D952E6E4F98EFA78BC6FE6B89DEE91B8", lpFilePart=0x0) returned 0x85 [0162.042] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0162.042] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\602AF084D952E6E4F98EFA78BC6FE6B89DEE91B8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\602af084d952e6e4f98efa78bc6fe6b89dee91b8"), fInfoLevelId=0x0, lpFileInformation=0x220de40 | out: lpFileInformation=0x220de40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c1b9090, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3c1b9090, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x3c1bded1, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x3740)) returned 1 [0162.042] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0162.042] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\602AF084D952E6E4F98EFA78BC6FE6B89DEE91B8", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\602AF084D952E6E4F98EFA78BC6FE6B89DEE91B8", lpFilePart=0x0) returned 0x85 [0162.042] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0162.042] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\602AF084D952E6E4F98EFA78BC6FE6B89DEE91B8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\602af084d952e6e4f98efa78bc6fe6b89dee91b8"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0162.043] GetFileType (hFile=0x444) returned 0x1 [0162.043] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0162.043] GetFileType (hFile=0x444) returned 0x1 [0162.043] ReadFile (in: hFile=0x444, lpBuffer=0x2210370, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x2210370*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0162.172] CloseHandle (hObject=0x444) returned 1 [0162.172] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\602AF084D952E6E4F98EFA78BC6FE6B89DEE91B8", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\602AF084D952E6E4F98EFA78BC6FE6B89DEE91B8", lpFilePart=0x0) returned 0x85 [0162.173] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0162.173] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\602AF084D952E6E4F98EFA78BC6FE6B89DEE91B8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\602af084d952e6e4f98efa78bc6fe6b89dee91b8"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0162.173] GetFileType (hFile=0x444) returned 0x1 [0162.173] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0162.173] GetFileType (hFile=0x444) returned 0x1 [0162.173] WriteFile (in: hFile=0x444, lpBuffer=0x220e020*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x220e020*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0162.173] CloseHandle (hObject=0x444) returned 1 [0162.173] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\602AF084D952E6E4F98EFA78BC6FE6B89DEE91B8", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\602AF084D952E6E4F98EFA78BC6FE6B89DEE91B8", lpFilePart=0x0) returned 0x85 [0162.173] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\602AF084D952E6E4F98EFA78BC6FE6B89DEE91B8.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\602AF084D952E6E4F98EFA78BC6FE6B89DEE91B8.xuy", lpFilePart=0x0) returned 0x89 [0162.173] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0162.173] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\602AF084D952E6E4F98EFA78BC6FE6B89DEE91B8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\602af084d952e6e4f98efa78bc6fe6b89dee91b8"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c1b9090, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3c1b9090, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x4c8317e8, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x3740)) returned 1 [0162.174] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0162.174] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\602AF084D952E6E4F98EFA78BC6FE6B89DEE91B8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\602af084d952e6e4f98efa78bc6fe6b89dee91b8"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\602AF084D952E6E4F98EFA78BC6FE6B89DEE91B8.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\602af084d952e6e4f98efa78bc6fe6b89dee91b8.xuy")) returned 1 [0162.175] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\60A4AF5C5655CA195B9AF21AADCF84E905FEBC55", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\60A4AF5C5655CA195B9AF21AADCF84E905FEBC55", lpFilePart=0x0) returned 0x85 [0162.175] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0162.175] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\60A4AF5C5655CA195B9AF21AADCF84E905FEBC55" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\60a4af5c5655ca195b9af21aadcf84e905febc55"), fInfoLevelId=0x0, lpFileInformation=0x228c918 | out: lpFileInformation=0x228c918*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fc2d608, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3fc2d608, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x3fc2d608, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x4ff4)) returned 1 [0162.175] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0162.175] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\60A4AF5C5655CA195B9AF21AADCF84E905FEBC55", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\60A4AF5C5655CA195B9AF21AADCF84E905FEBC55", lpFilePart=0x0) returned 0x85 [0162.175] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0162.175] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\60A4AF5C5655CA195B9AF21AADCF84E905FEBC55" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\60a4af5c5655ca195b9af21aadcf84e905febc55"), fInfoLevelId=0x0, lpFileInformation=0x228cb18 | out: lpFileInformation=0x228cb18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fc2d608, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3fc2d608, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x3fc2d608, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x4ff4)) returned 1 [0162.176] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0162.176] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\60A4AF5C5655CA195B9AF21AADCF84E905FEBC55", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\60A4AF5C5655CA195B9AF21AADCF84E905FEBC55", lpFilePart=0x0) returned 0x85 [0162.176] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0162.176] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\60A4AF5C5655CA195B9AF21AADCF84E905FEBC55" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\60a4af5c5655ca195b9af21aadcf84e905febc55"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0162.177] GetFileType (hFile=0x444) returned 0x1 [0162.177] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0162.177] GetFileType (hFile=0x444) returned 0x1 [0162.177] ReadFile (in: hFile=0x444, lpBuffer=0x228f048, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x228f048*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0162.203] CloseHandle (hObject=0x444) returned 1 [0162.203] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\60A4AF5C5655CA195B9AF21AADCF84E905FEBC55", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\60A4AF5C5655CA195B9AF21AADCF84E905FEBC55", lpFilePart=0x0) returned 0x85 [0162.203] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0162.203] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\60A4AF5C5655CA195B9AF21AADCF84E905FEBC55" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\60a4af5c5655ca195b9af21aadcf84e905febc55"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0162.204] GetFileType (hFile=0x444) returned 0x1 [0162.204] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0162.204] GetFileType (hFile=0x444) returned 0x1 [0162.204] WriteFile (in: hFile=0x444, lpBuffer=0x228ccf8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x228ccf8*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0162.204] CloseHandle (hObject=0x444) returned 1 [0162.204] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\60A4AF5C5655CA195B9AF21AADCF84E905FEBC55", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\60A4AF5C5655CA195B9AF21AADCF84E905FEBC55", lpFilePart=0x0) returned 0x85 [0162.204] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\60A4AF5C5655CA195B9AF21AADCF84E905FEBC55.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\60A4AF5C5655CA195B9AF21AADCF84E905FEBC55.xuy", lpFilePart=0x0) returned 0x89 [0162.204] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0162.204] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\60A4AF5C5655CA195B9AF21AADCF84E905FEBC55" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\60a4af5c5655ca195b9af21aadcf84e905febc55"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fc2d608, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3fc2d608, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x4c87e01f, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x4ff4)) returned 1 [0162.204] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0162.204] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\60A4AF5C5655CA195B9AF21AADCF84E905FEBC55" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\60a4af5c5655ca195b9af21aadcf84e905febc55"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\60A4AF5C5655CA195B9AF21AADCF84E905FEBC55.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\60a4af5c5655ca195b9af21aadcf84e905febc55.xuy")) returned 1 [0162.206] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6110E52DCC41B003F9ABB87AF539D456402B7F80", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6110E52DCC41B003F9ABB87AF539D456402B7F80", lpFilePart=0x0) returned 0x85 [0162.206] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0162.206] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6110E52DCC41B003F9ABB87AF539D456402B7F80" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6110e52dcc41b003f9abb87af539d456402b7f80"), fInfoLevelId=0x0, lpFileInformation=0x230b5f0 | out: lpFileInformation=0x230b5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x615c4498, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x615c4498, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x615c4498, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xedc)) returned 1 [0162.206] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0162.206] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6110E52DCC41B003F9ABB87AF539D456402B7F80", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6110E52DCC41B003F9ABB87AF539D456402B7F80", lpFilePart=0x0) returned 0x85 [0162.206] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0162.206] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6110E52DCC41B003F9ABB87AF539D456402B7F80" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6110e52dcc41b003f9abb87af539d456402b7f80"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0162.206] GetFileType (hFile=0x444) returned 0x1 [0162.206] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0162.206] GetFileType (hFile=0x444) returned 0x1 [0162.206] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xedc [0162.206] ReadFile (in: hFile=0x444, lpBuffer=0x230c8e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x230c8e8*, lpNumberOfBytesRead=0x3be5c8*=0xedc, lpOverlapped=0x0) returned 1 [0162.214] CloseHandle (hObject=0x444) returned 1 [0162.224] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6110E52DCC41B003F9ABB87AF539D456402B7F80", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6110E52DCC41B003F9ABB87AF539D456402B7F80", lpFilePart=0x0) returned 0x85 [0162.225] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0162.225] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6110E52DCC41B003F9ABB87AF539D456402B7F80" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6110e52dcc41b003f9abb87af539d456402b7f80"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0162.227] GetFileType (hFile=0x444) returned 0x1 [0162.227] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0162.227] GetFileType (hFile=0x444) returned 0x1 [0162.229] WriteFile (in: hFile=0x444, lpBuffer=0x2186c00*, nNumberOfBytesToWrite=0xee0, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x2186c00*, lpNumberOfBytesWritten=0x3be4d8*=0xee0, lpOverlapped=0x0) returned 1 [0162.230] CloseHandle (hObject=0x444) returned 1 [0162.231] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6110E52DCC41B003F9ABB87AF539D456402B7F80", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6110E52DCC41B003F9ABB87AF539D456402B7F80", lpFilePart=0x0) returned 0x85 [0162.231] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6110E52DCC41B003F9ABB87AF539D456402B7F80.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6110E52DCC41B003F9ABB87AF539D456402B7F80.xuy", lpFilePart=0x0) returned 0x89 [0162.231] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0162.231] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6110E52DCC41B003F9ABB87AF539D456402B7F80" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6110e52dcc41b003f9abb87af539d456402b7f80"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x615c4498, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x615c4498, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x4c8a3e63, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xee0)) returned 1 [0162.231] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0162.231] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6110E52DCC41B003F9ABB87AF539D456402B7F80" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6110e52dcc41b003f9abb87af539d456402b7f80"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6110E52DCC41B003F9ABB87AF539D456402B7F80.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6110e52dcc41b003f9abb87af539d456402b7f80.xuy")) returned 1 [0162.233] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6411FA6F2F74D405C46A9BD6767C418000B64A24", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6411FA6F2F74D405C46A9BD6767C418000B64A24", lpFilePart=0x0) returned 0x85 [0162.233] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0162.233] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6411FA6F2F74D405C46A9BD6767C418000B64A24" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6411fa6f2f74d405c46a9bd6767c418000b64a24"), fInfoLevelId=0x0, lpFileInformation=0x2187fc0 | out: lpFileInformation=0x2187fc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61551d8c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x61551d8c, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x61551d8c, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x116c)) returned 1 [0162.234] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0162.234] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6411FA6F2F74D405C46A9BD6767C418000B64A24", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6411FA6F2F74D405C46A9BD6767C418000B64A24", lpFilePart=0x0) returned 0x85 [0162.234] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0162.234] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6411FA6F2F74D405C46A9BD6767C418000B64A24" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6411fa6f2f74d405c46a9bd6767c418000b64a24"), fInfoLevelId=0x0, lpFileInformation=0x21881c0 | out: lpFileInformation=0x21881c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61551d8c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x61551d8c, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x61551d8c, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x116c)) returned 1 [0162.234] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0162.234] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6411FA6F2F74D405C46A9BD6767C418000B64A24", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6411FA6F2F74D405C46A9BD6767C418000B64A24", lpFilePart=0x0) returned 0x85 [0162.234] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0162.234] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6411FA6F2F74D405C46A9BD6767C418000B64A24" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6411fa6f2f74d405c46a9bd6767c418000b64a24"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0162.236] GetFileType (hFile=0x444) returned 0x1 [0162.236] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0162.236] GetFileType (hFile=0x444) returned 0x1 [0162.236] ReadFile (in: hFile=0x444, lpBuffer=0x218a6f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x218a6f0*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0162.280] CloseHandle (hObject=0x444) returned 1 [0162.280] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6411FA6F2F74D405C46A9BD6767C418000B64A24", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6411FA6F2F74D405C46A9BD6767C418000B64A24", lpFilePart=0x0) returned 0x85 [0162.280] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0162.280] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6411FA6F2F74D405C46A9BD6767C418000B64A24" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6411fa6f2f74d405c46a9bd6767c418000b64a24"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0162.280] GetFileType (hFile=0x444) returned 0x1 [0162.281] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0162.281] GetFileType (hFile=0x444) returned 0x1 [0162.281] WriteFile (in: hFile=0x444, lpBuffer=0x21883a0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x21883a0*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0162.281] CloseHandle (hObject=0x444) returned 1 [0162.281] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6411FA6F2F74D405C46A9BD6767C418000B64A24", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6411FA6F2F74D405C46A9BD6767C418000B64A24", lpFilePart=0x0) returned 0x85 [0162.281] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6411FA6F2F74D405C46A9BD6767C418000B64A24.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6411FA6F2F74D405C46A9BD6767C418000B64A24.xuy", lpFilePart=0x0) returned 0x89 [0162.281] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0162.281] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6411FA6F2F74D405C46A9BD6767C418000B64A24" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6411fa6f2f74d405c46a9bd6767c418000b64a24"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61551d8c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x61551d8c, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x4c93ca77, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0162.281] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0162.281] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6411FA6F2F74D405C46A9BD6767C418000B64A24" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6411fa6f2f74d405c46a9bd6767c418000b64a24"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6411FA6F2F74D405C46A9BD6767C418000B64A24.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6411fa6f2f74d405c46a9bd6767c418000b64a24.xuy")) returned 1 [0162.282] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6422ADCCC2AA6961DE5FFC515106F8B2D0D2D3E7", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6422ADCCC2AA6961DE5FFC515106F8B2D0D2D3E7", lpFilePart=0x0) returned 0x85 [0162.282] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0162.282] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6422ADCCC2AA6961DE5FFC515106F8B2D0D2D3E7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6422adccc2aa6961de5ffc515106f8b2d0d2d3e7"), fInfoLevelId=0x0, lpFileInformation=0x2206c98 | out: lpFileInformation=0x2206c98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x881dce94, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x881dce94, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x881e1cc0, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x4d2)) returned 1 [0162.283] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0162.283] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6422ADCCC2AA6961DE5FFC515106F8B2D0D2D3E7", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6422ADCCC2AA6961DE5FFC515106F8B2D0D2D3E7", lpFilePart=0x0) returned 0x85 [0162.283] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0162.283] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6422ADCCC2AA6961DE5FFC515106F8B2D0D2D3E7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6422adccc2aa6961de5ffc515106f8b2d0d2d3e7"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0162.283] GetFileType (hFile=0x444) returned 0x1 [0162.283] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0162.283] GetFileType (hFile=0x444) returned 0x1 [0162.283] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x4d2 [0162.283] ReadFile (in: hFile=0x444, lpBuffer=0x2207588, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x2207588*, lpNumberOfBytesRead=0x3be5c8*=0x4d2, lpOverlapped=0x0) returned 1 [0162.300] CloseHandle (hObject=0x444) returned 1 [0162.310] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6422ADCCC2AA6961DE5FFC515106F8B2D0D2D3E7", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6422ADCCC2AA6961DE5FFC515106F8B2D0D2D3E7", lpFilePart=0x0) returned 0x85 [0162.311] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0162.311] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6422ADCCC2AA6961DE5FFC515106F8B2D0D2D3E7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6422adccc2aa6961de5ffc515106f8b2d0d2d3e7"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0162.312] GetFileType (hFile=0x444) returned 0x1 [0162.312] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0162.312] GetFileType (hFile=0x444) returned 0x1 [0162.312] WriteFile (in: hFile=0x444, lpBuffer=0x227fe80*, nNumberOfBytesToWrite=0x4e0, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x227fe80*, lpNumberOfBytesWritten=0x3be4d8*=0x4e0, lpOverlapped=0x0) returned 1 [0162.313] CloseHandle (hObject=0x444) returned 1 [0162.313] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6422ADCCC2AA6961DE5FFC515106F8B2D0D2D3E7", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6422ADCCC2AA6961DE5FFC515106F8B2D0D2D3E7", lpFilePart=0x0) returned 0x85 [0162.313] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6422ADCCC2AA6961DE5FFC515106F8B2D0D2D3E7.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6422ADCCC2AA6961DE5FFC515106F8B2D0D2D3E7.xuy", lpFilePart=0x0) returned 0x89 [0162.313] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0162.313] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6422ADCCC2AA6961DE5FFC515106F8B2D0D2D3E7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6422adccc2aa6961de5ffc515106f8b2d0d2d3e7"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x881dce94, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x881dce94, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x4c988f5b, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x4e0)) returned 1 [0162.313] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0162.313] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6422ADCCC2AA6961DE5FFC515106F8B2D0D2D3E7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6422adccc2aa6961de5ffc515106f8b2d0d2d3e7"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6422ADCCC2AA6961DE5FFC515106F8B2D0D2D3E7.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6422adccc2aa6961de5ffc515106f8b2d0d2d3e7.xuy")) returned 1 [0162.315] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\650A3159BCA4987DD5B1950095087AFC89EDFBF4", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\650A3159BCA4987DD5B1950095087AFC89EDFBF4", lpFilePart=0x0) returned 0x85 [0162.315] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0162.315] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\650A3159BCA4987DD5B1950095087AFC89EDFBF4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\650a3159bca4987dd5b1950095087afc89edfbf4"), fInfoLevelId=0x0, lpFileInformation=0x2281240 | out: lpFileInformation=0x2281240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0d6df4a, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xd0d6df4a, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0xd0d6df4a, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x25c94)) returned 1 [0162.315] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0162.315] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\650A3159BCA4987DD5B1950095087AFC89EDFBF4", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\650A3159BCA4987DD5B1950095087AFC89EDFBF4", lpFilePart=0x0) returned 0x85 [0162.315] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0162.315] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\650A3159BCA4987DD5B1950095087AFC89EDFBF4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\650a3159bca4987dd5b1950095087afc89edfbf4"), fInfoLevelId=0x0, lpFileInformation=0x2281440 | out: lpFileInformation=0x2281440*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0d6df4a, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xd0d6df4a, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0xd0d6df4a, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x25c94)) returned 1 [0162.315] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0162.315] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\650A3159BCA4987DD5B1950095087AFC89EDFBF4", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\650A3159BCA4987DD5B1950095087AFC89EDFBF4", lpFilePart=0x0) returned 0x85 [0162.315] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0162.315] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\650A3159BCA4987DD5B1950095087AFC89EDFBF4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\650a3159bca4987dd5b1950095087afc89edfbf4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0162.316] GetFileType (hFile=0x444) returned 0x1 [0162.316] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0162.316] GetFileType (hFile=0x444) returned 0x1 [0162.316] ReadFile (in: hFile=0x444, lpBuffer=0x2283970, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x2283970*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0162.338] CloseHandle (hObject=0x444) returned 1 [0162.338] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\650A3159BCA4987DD5B1950095087AFC89EDFBF4", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\650A3159BCA4987DD5B1950095087AFC89EDFBF4", lpFilePart=0x0) returned 0x85 [0162.338] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0162.338] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\650A3159BCA4987DD5B1950095087AFC89EDFBF4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\650a3159bca4987dd5b1950095087afc89edfbf4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0162.339] GetFileType (hFile=0x444) returned 0x1 [0162.339] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0162.339] GetFileType (hFile=0x444) returned 0x1 [0162.339] WriteFile (in: hFile=0x444, lpBuffer=0x2281620*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x2281620*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0162.339] CloseHandle (hObject=0x444) returned 1 [0162.339] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\650A3159BCA4987DD5B1950095087AFC89EDFBF4", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\650A3159BCA4987DD5B1950095087AFC89EDFBF4", lpFilePart=0x0) returned 0x85 [0162.339] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\650A3159BCA4987DD5B1950095087AFC89EDFBF4.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\650A3159BCA4987DD5B1950095087AFC89EDFBF4.xuy", lpFilePart=0x0) returned 0x89 [0162.339] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0162.339] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\650A3159BCA4987DD5B1950095087AFC89EDFBF4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\650a3159bca4987dd5b1950095087afc89edfbf4"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0d6df4a, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xd0d6df4a, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x4c9aef3f, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x25c94)) returned 1 [0162.339] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0162.339] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\650A3159BCA4987DD5B1950095087AFC89EDFBF4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\650a3159bca4987dd5b1950095087afc89edfbf4"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\650A3159BCA4987DD5B1950095087AFC89EDFBF4.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\650a3159bca4987dd5b1950095087afc89edfbf4.xuy")) returned 1 [0162.341] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\656916B9B7899D4B69D34E1DD3BBD389F436F8F5", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\656916B9B7899D4B69D34E1DD3BBD389F436F8F5", lpFilePart=0x0) returned 0x85 [0162.341] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0162.341] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\656916B9B7899D4B69D34E1DD3BBD389F436F8F5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\656916b9b7899d4b69d34e1dd3bbd389f436f8f5"), fInfoLevelId=0x0, lpFileInformation=0x22fff18 | out: lpFileInformation=0x22fff18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc53279de, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc53279de, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xc80f8eb2, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x1dc3)) returned 1 [0162.341] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0162.341] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\656916B9B7899D4B69D34E1DD3BBD389F436F8F5", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\656916B9B7899D4B69D34E1DD3BBD389F436F8F5", lpFilePart=0x0) returned 0x85 [0162.341] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0162.341] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\656916B9B7899D4B69D34E1DD3BBD389F436F8F5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\656916b9b7899d4b69d34e1dd3bbd389f436f8f5"), fInfoLevelId=0x0, lpFileInformation=0x2300118 | out: lpFileInformation=0x2300118*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc53279de, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc53279de, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xc80f8eb2, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x1dc3)) returned 1 [0162.341] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0162.341] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\656916B9B7899D4B69D34E1DD3BBD389F436F8F5", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\656916B9B7899D4B69D34E1DD3BBD389F436F8F5", lpFilePart=0x0) returned 0x85 [0162.341] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0162.341] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\656916B9B7899D4B69D34E1DD3BBD389F436F8F5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\656916b9b7899d4b69d34e1dd3bbd389f436f8f5"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0162.342] GetFileType (hFile=0x444) returned 0x1 [0162.342] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0162.342] GetFileType (hFile=0x444) returned 0x1 [0162.342] ReadFile (in: hFile=0x444, lpBuffer=0x2302648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x2302648*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0162.364] CloseHandle (hObject=0x444) returned 1 [0162.364] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\656916B9B7899D4B69D34E1DD3BBD389F436F8F5", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\656916B9B7899D4B69D34E1DD3BBD389F436F8F5", lpFilePart=0x0) returned 0x85 [0162.365] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0162.365] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\656916B9B7899D4B69D34E1DD3BBD389F436F8F5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\656916b9b7899d4b69d34e1dd3bbd389f436f8f5"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0162.365] GetFileType (hFile=0x444) returned 0x1 [0162.365] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0162.365] GetFileType (hFile=0x444) returned 0x1 [0162.365] WriteFile (in: hFile=0x444, lpBuffer=0x23002f8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x23002f8*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0162.365] CloseHandle (hObject=0x444) returned 1 [0162.365] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\656916B9B7899D4B69D34E1DD3BBD389F436F8F5", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\656916B9B7899D4B69D34E1DD3BBD389F436F8F5", lpFilePart=0x0) returned 0x85 [0162.365] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\656916B9B7899D4B69D34E1DD3BBD389F436F8F5.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\656916B9B7899D4B69D34E1DD3BBD389F436F8F5.xuy", lpFilePart=0x0) returned 0x89 [0162.365] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0162.365] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\656916B9B7899D4B69D34E1DD3BBD389F436F8F5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\656916b9b7899d4b69d34e1dd3bbd389f436f8f5"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc53279de, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc53279de, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x4c9fb689, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0162.365] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0162.365] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\656916B9B7899D4B69D34E1DD3BBD389F436F8F5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\656916b9b7899d4b69d34e1dd3bbd389f436f8f5"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\656916B9B7899D4B69D34E1DD3BBD389F436F8F5.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\656916b9b7899d4b69d34e1dd3bbd389f436f8f5.xuy")) returned 1 [0162.367] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6628E2AAC6FF3B0BE44D2610110ACAF9071F1C8D", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6628E2AAC6FF3B0BE44D2610110ACAF9071F1C8D", lpFilePart=0x0) returned 0x85 [0162.367] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0162.367] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6628E2AAC6FF3B0BE44D2610110ACAF9071F1C8D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6628e2aac6ff3b0be44d2610110acaf9071f1c8d"), fInfoLevelId=0x0, lpFileInformation=0x237ebf0 | out: lpFileInformation=0x237ebf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61551d8c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x61551d8c, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x61551d8c, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x1162)) returned 1 [0162.367] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0162.367] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6628E2AAC6FF3B0BE44D2610110ACAF9071F1C8D", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6628E2AAC6FF3B0BE44D2610110ACAF9071F1C8D", lpFilePart=0x0) returned 0x85 [0162.367] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0162.367] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6628E2AAC6FF3B0BE44D2610110ACAF9071F1C8D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6628e2aac6ff3b0be44d2610110acaf9071f1c8d"), fInfoLevelId=0x0, lpFileInformation=0x237edf0 | out: lpFileInformation=0x237edf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61551d8c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x61551d8c, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x61551d8c, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x1162)) returned 1 [0162.367] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0162.367] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6628E2AAC6FF3B0BE44D2610110ACAF9071F1C8D", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6628E2AAC6FF3B0BE44D2610110ACAF9071F1C8D", lpFilePart=0x0) returned 0x85 [0162.367] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0162.367] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6628E2AAC6FF3B0BE44D2610110ACAF9071F1C8D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6628e2aac6ff3b0be44d2610110acaf9071f1c8d"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0162.368] GetFileType (hFile=0x444) returned 0x1 [0162.368] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0162.368] GetFileType (hFile=0x444) returned 0x1 [0162.368] ReadFile (in: hFile=0x444, lpBuffer=0x2381320, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x2381320*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0162.415] CloseHandle (hObject=0x444) returned 1 [0162.415] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6628E2AAC6FF3B0BE44D2610110ACAF9071F1C8D", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6628E2AAC6FF3B0BE44D2610110ACAF9071F1C8D", lpFilePart=0x0) returned 0x85 [0162.415] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0162.415] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6628E2AAC6FF3B0BE44D2610110ACAF9071F1C8D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6628e2aac6ff3b0be44d2610110acaf9071f1c8d"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0162.416] GetFileType (hFile=0x444) returned 0x1 [0162.416] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0162.416] GetFileType (hFile=0x444) returned 0x1 [0162.416] WriteFile (in: hFile=0x444, lpBuffer=0x2185c28*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x2185c28*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0162.416] CloseHandle (hObject=0x444) returned 1 [0162.416] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6628E2AAC6FF3B0BE44D2610110ACAF9071F1C8D", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6628E2AAC6FF3B0BE44D2610110ACAF9071F1C8D", lpFilePart=0x0) returned 0x85 [0162.416] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6628E2AAC6FF3B0BE44D2610110ACAF9071F1C8D.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6628E2AAC6FF3B0BE44D2610110ACAF9071F1C8D.xuy", lpFilePart=0x0) returned 0x89 [0162.416] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0162.416] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6628E2AAC6FF3B0BE44D2610110ACAF9071F1C8D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6628e2aac6ff3b0be44d2610110acaf9071f1c8d"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61551d8c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x61551d8c, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x4ca6dbbf, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0162.416] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0162.417] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6628E2AAC6FF3B0BE44D2610110ACAF9071F1C8D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6628e2aac6ff3b0be44d2610110acaf9071f1c8d"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6628E2AAC6FF3B0BE44D2610110ACAF9071F1C8D.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6628e2aac6ff3b0be44d2610110acaf9071f1c8d.xuy")) returned 1 [0162.420] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\66913F89F6E2C2FADE791B6B6280E27520671B4C", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\66913F89F6E2C2FADE791B6B6280E27520671B4C", lpFilePart=0x0) returned 0x85 [0162.420] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0162.420] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\66913F89F6E2C2FADE791B6B6280E27520671B4C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\66913f89f6e2c2fade791b6b6280e27520671b4c"), fInfoLevelId=0x0, lpFileInformation=0x21fff60 | out: lpFileInformation=0x21fff60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82951ced, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x82951ced, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x82956aab, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0xc5f)) returned 1 [0162.420] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0162.420] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\66913F89F6E2C2FADE791B6B6280E27520671B4C", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\66913F89F6E2C2FADE791B6B6280E27520671B4C", lpFilePart=0x0) returned 0x85 [0162.420] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0162.420] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\66913F89F6E2C2FADE791B6B6280E27520671B4C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\66913f89f6e2c2fade791b6b6280e27520671b4c"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0162.420] GetFileType (hFile=0x444) returned 0x1 [0162.420] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0162.420] GetFileType (hFile=0x444) returned 0x1 [0162.420] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xc5f [0162.420] ReadFile (in: hFile=0x444, lpBuffer=0x2200fd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x2200fd8*, lpNumberOfBytesRead=0x3be5c8*=0xc5f, lpOverlapped=0x0) returned 1 [0162.457] CloseHandle (hObject=0x444) returned 1 [0162.469] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\66913F89F6E2C2FADE791B6B6280E27520671B4C", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\66913F89F6E2C2FADE791B6B6280E27520671B4C", lpFilePart=0x0) returned 0x85 [0162.469] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0162.469] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\66913F89F6E2C2FADE791B6B6280E27520671B4C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\66913f89f6e2c2fade791b6b6280e27520671b4c"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0162.471] GetFileType (hFile=0x444) returned 0x1 [0162.471] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0162.471] GetFileType (hFile=0x444) returned 0x1 [0162.471] WriteFile (in: hFile=0x444, lpBuffer=0x227be48*, nNumberOfBytesToWrite=0xc60, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x227be48*, lpNumberOfBytesWritten=0x3be4d8*=0xc60, lpOverlapped=0x0) returned 1 [0162.471] CloseHandle (hObject=0x444) returned 1 [0162.472] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\66913F89F6E2C2FADE791B6B6280E27520671B4C", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\66913F89F6E2C2FADE791B6B6280E27520671B4C", lpFilePart=0x0) returned 0x85 [0162.472] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\66913F89F6E2C2FADE791B6B6280E27520671B4C.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\66913F89F6E2C2FADE791B6B6280E27520671B4C.xuy", lpFilePart=0x0) returned 0x89 [0162.472] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0162.472] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\66913F89F6E2C2FADE791B6B6280E27520671B4C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\66913f89f6e2c2fade791b6b6280e27520671b4c"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82951ced, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x82951ced, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x4cb0680b, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xc60)) returned 1 [0162.472] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0162.472] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\66913F89F6E2C2FADE791B6B6280E27520671B4C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\66913f89f6e2c2fade791b6b6280e27520671b4c"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\66913F89F6E2C2FADE791B6B6280E27520671B4C.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\66913f89f6e2c2fade791b6b6280e27520671b4c.xuy")) returned 1 [0162.473] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\66B64249060DCBD0E7A35E24F8305D7FC258E22F", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\66B64249060DCBD0E7A35E24F8305D7FC258E22F", lpFilePart=0x0) returned 0x85 [0162.473] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0162.473] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\66B64249060DCBD0E7A35E24F8305D7FC258E22F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\66b64249060dcbd0e7a35e24f8305d7fc258e22f"), fInfoLevelId=0x0, lpFileInformation=0x227d208 | out: lpFileInformation=0x227d208*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd091baef, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xd091baef, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0xd26a8c4c, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x914d)) returned 1 [0162.473] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0162.473] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\66B64249060DCBD0E7A35E24F8305D7FC258E22F", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\66B64249060DCBD0E7A35E24F8305D7FC258E22F", lpFilePart=0x0) returned 0x85 [0162.473] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0162.474] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\66B64249060DCBD0E7A35E24F8305D7FC258E22F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\66b64249060dcbd0e7a35e24f8305d7fc258e22f"), fInfoLevelId=0x0, lpFileInformation=0x227d408 | out: lpFileInformation=0x227d408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd091baef, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xd091baef, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0xd26a8c4c, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x914d)) returned 1 [0162.474] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0162.474] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\66B64249060DCBD0E7A35E24F8305D7FC258E22F", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\66B64249060DCBD0E7A35E24F8305D7FC258E22F", lpFilePart=0x0) returned 0x85 [0162.474] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0162.474] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\66B64249060DCBD0E7A35E24F8305D7FC258E22F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\66b64249060dcbd0e7a35e24f8305d7fc258e22f"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0162.474] GetFileType (hFile=0x444) returned 0x1 [0162.474] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0162.474] GetFileType (hFile=0x444) returned 0x1 [0162.474] ReadFile (in: hFile=0x444, lpBuffer=0x227f938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x227f938*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0162.487] CloseHandle (hObject=0x444) returned 1 [0162.487] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\66B64249060DCBD0E7A35E24F8305D7FC258E22F", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\66B64249060DCBD0E7A35E24F8305D7FC258E22F", lpFilePart=0x0) returned 0x85 [0162.487] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0162.487] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\66B64249060DCBD0E7A35E24F8305D7FC258E22F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\66b64249060dcbd0e7a35e24f8305d7fc258e22f"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0162.488] GetFileType (hFile=0x444) returned 0x1 [0162.488] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0162.488] GetFileType (hFile=0x444) returned 0x1 [0162.488] WriteFile (in: hFile=0x444, lpBuffer=0x227d5e8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x227d5e8*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0162.488] CloseHandle (hObject=0x444) returned 1 [0162.488] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\66B64249060DCBD0E7A35E24F8305D7FC258E22F", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\66B64249060DCBD0E7A35E24F8305D7FC258E22F", lpFilePart=0x0) returned 0x85 [0162.488] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\66B64249060DCBD0E7A35E24F8305D7FC258E22F.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\66B64249060DCBD0E7A35E24F8305D7FC258E22F.xuy", lpFilePart=0x0) returned 0x89 [0162.488] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0162.488] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\66B64249060DCBD0E7A35E24F8305D7FC258E22F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\66b64249060dcbd0e7a35e24f8305d7fc258e22f"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd091baef, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xd091baef, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x4cb2c65a, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x914d)) returned 1 [0162.488] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0162.488] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\66B64249060DCBD0E7A35E24F8305D7FC258E22F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\66b64249060dcbd0e7a35e24f8305d7fc258e22f"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\66B64249060DCBD0E7A35E24F8305D7FC258E22F.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\66b64249060dcbd0e7a35e24f8305d7fc258e22f.xuy")) returned 1 [0162.490] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\66EA61D5036D6A8A2DDD0634666EF265BF3C33C3", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\66EA61D5036D6A8A2DDD0634666EF265BF3C33C3", lpFilePart=0x0) returned 0x85 [0162.490] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0162.490] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\66EA61D5036D6A8A2DDD0634666EF265BF3C33C3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\66ea61d5036d6a8a2ddd0634666ef265bf3c33c3"), fInfoLevelId=0x0, lpFileInformation=0x22fbee0 | out: lpFileInformation=0x22fbee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd02671ca, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xd02671ca, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0xd02b35c3, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x52a)) returned 1 [0162.490] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0162.490] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\66EA61D5036D6A8A2DDD0634666EF265BF3C33C3", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\66EA61D5036D6A8A2DDD0634666EF265BF3C33C3", lpFilePart=0x0) returned 0x85 [0162.490] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0162.490] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\66EA61D5036D6A8A2DDD0634666EF265BF3C33C3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\66ea61d5036d6a8a2ddd0634666ef265bf3c33c3"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0162.490] GetFileType (hFile=0x444) returned 0x1 [0162.490] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0162.490] GetFileType (hFile=0x444) returned 0x1 [0162.490] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x52a [0162.490] ReadFile (in: hFile=0x444, lpBuffer=0x22fc828, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x22fc828*, lpNumberOfBytesRead=0x3be5c8*=0x52a, lpOverlapped=0x0) returned 1 [0162.507] CloseHandle (hObject=0x444) returned 1 [0162.518] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\66EA61D5036D6A8A2DDD0634666EF265BF3C33C3", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\66EA61D5036D6A8A2DDD0634666EF265BF3C33C3", lpFilePart=0x0) returned 0x85 [0162.518] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0162.518] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\66EA61D5036D6A8A2DDD0634666EF265BF3C33C3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\66ea61d5036d6a8a2ddd0634666ef265bf3c33c3"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0162.520] GetFileType (hFile=0x444) returned 0x1 [0162.520] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0162.520] GetFileType (hFile=0x444) returned 0x1 [0162.520] WriteFile (in: hFile=0x444, lpBuffer=0x23752a8*, nNumberOfBytesToWrite=0x530, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x23752a8*, lpNumberOfBytesWritten=0x3be4d8*=0x530, lpOverlapped=0x0) returned 1 [0162.521] CloseHandle (hObject=0x444) returned 1 [0162.521] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\66EA61D5036D6A8A2DDD0634666EF265BF3C33C3", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\66EA61D5036D6A8A2DDD0634666EF265BF3C33C3", lpFilePart=0x0) returned 0x85 [0162.521] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\66EA61D5036D6A8A2DDD0634666EF265BF3C33C3.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\66EA61D5036D6A8A2DDD0634666EF265BF3C33C3.xuy", lpFilePart=0x0) returned 0x89 [0162.521] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0162.521] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\66EA61D5036D6A8A2DDD0634666EF265BF3C33C3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\66ea61d5036d6a8a2ddd0634666ef265bf3c33c3"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd02671ca, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xd02671ca, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x4cb78b1c, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x530)) returned 1 [0162.521] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0162.521] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\66EA61D5036D6A8A2DDD0634666EF265BF3C33C3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\66ea61d5036d6a8a2ddd0634666ef265bf3c33c3"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\66EA61D5036D6A8A2DDD0634666EF265BF3C33C3.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\66ea61d5036d6a8a2ddd0634666ef265bf3c33c3.xuy")) returned 1 [0162.523] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6730E7D38947125CF79CAEB391A7C2548F883DD9", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6730E7D38947125CF79CAEB391A7C2548F883DD9", lpFilePart=0x0) returned 0x85 [0162.523] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0162.523] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6730E7D38947125CF79CAEB391A7C2548F883DD9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6730e7d38947125cf79caeb391a7c2548f883dd9"), fInfoLevelId=0x0, lpFileInformation=0x2376668 | out: lpFileInformation=0x2376668*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61577ff1, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x61577ff1, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x61577ff1, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xdff)) returned 1 [0162.523] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0162.523] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6730E7D38947125CF79CAEB391A7C2548F883DD9", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6730E7D38947125CF79CAEB391A7C2548F883DD9", lpFilePart=0x0) returned 0x85 [0162.523] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0162.524] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6730E7D38947125CF79CAEB391A7C2548F883DD9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6730e7d38947125cf79caeb391a7c2548f883dd9"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0162.524] GetFileType (hFile=0x444) returned 0x1 [0162.524] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0162.524] GetFileType (hFile=0x444) returned 0x1 [0162.524] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xdff [0162.524] ReadFile (in: hFile=0x444, lpBuffer=0x2377880, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x2377880*, lpNumberOfBytesRead=0x3be5c8*=0xdff, lpOverlapped=0x0) returned 1 [0162.534] CloseHandle (hObject=0x444) returned 1 [0162.577] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6730E7D38947125CF79CAEB391A7C2548F883DD9", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6730E7D38947125CF79CAEB391A7C2548F883DD9", lpFilePart=0x0) returned 0x85 [0162.577] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0162.577] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6730E7D38947125CF79CAEB391A7C2548F883DD9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6730e7d38947125cf79caeb391a7c2548f883dd9"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0162.578] GetFileType (hFile=0x444) returned 0x1 [0162.578] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0162.578] GetFileType (hFile=0x444) returned 0x1 [0162.579] WriteFile (in: hFile=0x444, lpBuffer=0x21f0b28*, nNumberOfBytesToWrite=0xe00, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x21f0b28*, lpNumberOfBytesWritten=0x3be4d8*=0xe00, lpOverlapped=0x0) returned 1 [0162.579] CloseHandle (hObject=0x444) returned 1 [0162.579] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6730E7D38947125CF79CAEB391A7C2548F883DD9", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6730E7D38947125CF79CAEB391A7C2548F883DD9", lpFilePart=0x0) returned 0x85 [0162.579] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6730E7D38947125CF79CAEB391A7C2548F883DD9.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6730E7D38947125CF79CAEB391A7C2548F883DD9.xuy", lpFilePart=0x0) returned 0x89 [0162.579] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0162.580] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6730E7D38947125CF79CAEB391A7C2548F883DD9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6730e7d38947125cf79caeb391a7c2548f883dd9"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61577ff1, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x61577ff1, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x4cc118f2, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xe00)) returned 1 [0162.580] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0162.580] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6730E7D38947125CF79CAEB391A7C2548F883DD9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6730e7d38947125cf79caeb391a7c2548f883dd9"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6730E7D38947125CF79CAEB391A7C2548F883DD9.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6730e7d38947125cf79caeb391a7c2548f883dd9.xuy")) returned 1 [0162.581] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\676FBE82E89585DA0DA55A36C5FE66D6C832FAC6", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\676FBE82E89585DA0DA55A36C5FE66D6C832FAC6", lpFilePart=0x0) returned 0x85 [0162.581] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0162.581] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\676FBE82E89585DA0DA55A36C5FE66D6C832FAC6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\676fbe82e89585da0da55a36c5fe66d6c832fac6"), fInfoLevelId=0x0, lpFileInformation=0x21f1ee8 | out: lpFileInformation=0x21f1ee8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf44f0039, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xf44f0039, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0xf67a7629, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0xe16)) returned 1 [0162.581] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0162.581] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\676FBE82E89585DA0DA55A36C5FE66D6C832FAC6", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\676FBE82E89585DA0DA55A36C5FE66D6C832FAC6", lpFilePart=0x0) returned 0x85 [0162.581] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0162.581] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\676FBE82E89585DA0DA55A36C5FE66D6C832FAC6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\676fbe82e89585da0da55a36c5fe66d6c832fac6"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0162.581] GetFileType (hFile=0x444) returned 0x1 [0162.581] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0162.581] GetFileType (hFile=0x444) returned 0x1 [0162.581] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xe16 [0162.581] ReadFile (in: hFile=0x444, lpBuffer=0x21f3118, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x21f3118*, lpNumberOfBytesRead=0x3be5c8*=0xe16, lpOverlapped=0x0) returned 1 [0162.589] CloseHandle (hObject=0x444) returned 1 [0162.600] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\676FBE82E89585DA0DA55A36C5FE66D6C832FAC6", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\676FBE82E89585DA0DA55A36C5FE66D6C832FAC6", lpFilePart=0x0) returned 0x85 [0162.601] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0162.601] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\676FBE82E89585DA0DA55A36C5FE66D6C832FAC6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\676fbe82e89585da0da55a36c5fe66d6c832fac6"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0162.602] GetFileType (hFile=0x444) returned 0x1 [0162.602] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0162.602] GetFileType (hFile=0x444) returned 0x1 [0162.602] WriteFile (in: hFile=0x444, lpBuffer=0x226e850*, nNumberOfBytesToWrite=0xe20, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x226e850*, lpNumberOfBytesWritten=0x3be4d8*=0xe20, lpOverlapped=0x0) returned 1 [0162.607] CloseHandle (hObject=0x444) returned 1 [0162.607] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\676FBE82E89585DA0DA55A36C5FE66D6C832FAC6", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\676FBE82E89585DA0DA55A36C5FE66D6C832FAC6", lpFilePart=0x0) returned 0x85 [0162.607] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\676FBE82E89585DA0DA55A36C5FE66D6C832FAC6.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\676FBE82E89585DA0DA55A36C5FE66D6C832FAC6.xuy", lpFilePart=0x0) returned 0x89 [0162.607] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0162.607] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\676FBE82E89585DA0DA55A36C5FE66D6C832FAC6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\676fbe82e89585da0da55a36c5fe66d6c832fac6"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf44f0039, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xf44f0039, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x4cc5d9b0, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xe20)) returned 1 [0162.607] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0162.607] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\676FBE82E89585DA0DA55A36C5FE66D6C832FAC6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\676fbe82e89585da0da55a36c5fe66d6c832fac6"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\676FBE82E89585DA0DA55A36C5FE66D6C832FAC6.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\676fbe82e89585da0da55a36c5fe66d6c832fac6.xuy")) returned 1 [0162.608] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\681E7166DB1F0B0A148FE6D0903D513EDE8F745D", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\681E7166DB1F0B0A148FE6D0903D513EDE8F745D", lpFilePart=0x0) returned 0x85 [0162.608] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0162.608] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\681E7166DB1F0B0A148FE6D0903D513EDE8F745D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\681e7166db1f0b0a148fe6d0903d513ede8f745d"), fInfoLevelId=0x0, lpFileInformation=0x226fc10 | out: lpFileInformation=0x226fc10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x881569eb, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x881569eb, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x881da781, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x4d2)) returned 1 [0162.608] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0162.608] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\681E7166DB1F0B0A148FE6D0903D513EDE8F745D", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\681E7166DB1F0B0A148FE6D0903D513EDE8F745D", lpFilePart=0x0) returned 0x85 [0162.608] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0162.609] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\681E7166DB1F0B0A148FE6D0903D513EDE8F745D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\681e7166db1f0b0a148fe6d0903d513ede8f745d"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0162.609] GetFileType (hFile=0x444) returned 0x1 [0162.609] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0162.609] GetFileType (hFile=0x444) returned 0x1 [0162.609] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x4d2 [0162.609] ReadFile (in: hFile=0x444, lpBuffer=0x2270500, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x2270500*, lpNumberOfBytesRead=0x3be5c8*=0x4d2, lpOverlapped=0x0) returned 1 [0162.618] CloseHandle (hObject=0x444) returned 1 [0162.629] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\681E7166DB1F0B0A148FE6D0903D513EDE8F745D", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\681E7166DB1F0B0A148FE6D0903D513EDE8F745D", lpFilePart=0x0) returned 0x85 [0162.630] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0162.630] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\681E7166DB1F0B0A148FE6D0903D513EDE8F745D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\681e7166db1f0b0a148fe6d0903d513ede8f745d"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0162.632] GetFileType (hFile=0x444) returned 0x1 [0162.632] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0162.632] GetFileType (hFile=0x444) returned 0x1 [0162.632] WriteFile (in: hFile=0x444, lpBuffer=0x22e8df8*, nNumberOfBytesToWrite=0x4e0, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x22e8df8*, lpNumberOfBytesWritten=0x3be4d8*=0x4e0, lpOverlapped=0x0) returned 1 [0162.646] CloseHandle (hObject=0x444) returned 1 [0162.646] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\681E7166DB1F0B0A148FE6D0903D513EDE8F745D", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\681E7166DB1F0B0A148FE6D0903D513EDE8F745D", lpFilePart=0x0) returned 0x85 [0162.646] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\681E7166DB1F0B0A148FE6D0903D513EDE8F745D.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\681E7166DB1F0B0A148FE6D0903D513EDE8F745D.xuy", lpFilePart=0x0) returned 0x89 [0162.646] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0162.646] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\681E7166DB1F0B0A148FE6D0903D513EDE8F745D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\681e7166db1f0b0a148fe6d0903d513ede8f745d"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x881569eb, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x881569eb, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x4cca9fc8, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x4e0)) returned 1 [0162.646] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0162.646] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\681E7166DB1F0B0A148FE6D0903D513EDE8F745D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\681e7166db1f0b0a148fe6d0903d513ede8f745d"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\681E7166DB1F0B0A148FE6D0903D513EDE8F745D.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\681e7166db1f0b0a148fe6d0903d513ede8f745d.xuy")) returned 1 [0162.648] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\68426AE4792A86816CF3B07D8D4754C947EA08B5", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\68426AE4792A86816CF3B07D8D4754C947EA08B5", lpFilePart=0x0) returned 0x85 [0162.648] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0162.648] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\68426AE4792A86816CF3B07D8D4754C947EA08B5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\68426ae4792a86816cf3b07d8d4754c947ea08b5"), fInfoLevelId=0x0, lpFileInformation=0x22ea1b8 | out: lpFileInformation=0x22ea1b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61551d8c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x61551d8c, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x61551d8c, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x1162)) returned 1 [0162.648] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0162.648] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\68426AE4792A86816CF3B07D8D4754C947EA08B5", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\68426AE4792A86816CF3B07D8D4754C947EA08B5", lpFilePart=0x0) returned 0x85 [0162.648] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0162.648] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\68426AE4792A86816CF3B07D8D4754C947EA08B5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\68426ae4792a86816cf3b07d8d4754c947ea08b5"), fInfoLevelId=0x0, lpFileInformation=0x22ea3b8 | out: lpFileInformation=0x22ea3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61551d8c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x61551d8c, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x61551d8c, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x1162)) returned 1 [0162.648] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0162.648] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\68426AE4792A86816CF3B07D8D4754C947EA08B5", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\68426AE4792A86816CF3B07D8D4754C947EA08B5", lpFilePart=0x0) returned 0x85 [0162.648] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0162.648] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\68426AE4792A86816CF3B07D8D4754C947EA08B5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\68426ae4792a86816cf3b07d8d4754c947ea08b5"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0162.649] GetFileType (hFile=0x444) returned 0x1 [0162.649] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0162.649] GetFileType (hFile=0x444) returned 0x1 [0162.649] ReadFile (in: hFile=0x444, lpBuffer=0x22ec8e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x22ec8e8*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0162.663] CloseHandle (hObject=0x444) returned 1 [0162.663] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\68426AE4792A86816CF3B07D8D4754C947EA08B5", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\68426AE4792A86816CF3B07D8D4754C947EA08B5", lpFilePart=0x0) returned 0x85 [0162.663] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0162.663] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\68426AE4792A86816CF3B07D8D4754C947EA08B5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\68426ae4792a86816cf3b07d8d4754c947ea08b5"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0162.664] GetFileType (hFile=0x444) returned 0x1 [0162.664] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0162.664] GetFileType (hFile=0x444) returned 0x1 [0162.664] WriteFile (in: hFile=0x444, lpBuffer=0x22ea598*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x22ea598*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0162.664] CloseHandle (hObject=0x444) returned 1 [0162.664] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\68426AE4792A86816CF3B07D8D4754C947EA08B5", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\68426AE4792A86816CF3B07D8D4754C947EA08B5", lpFilePart=0x0) returned 0x85 [0162.664] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\68426AE4792A86816CF3B07D8D4754C947EA08B5.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\68426AE4792A86816CF3B07D8D4754C947EA08B5.xuy", lpFilePart=0x0) returned 0x89 [0162.664] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0162.664] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\68426AE4792A86816CF3B07D8D4754C947EA08B5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\68426ae4792a86816cf3b07d8d4754c947ea08b5"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61551d8c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x61551d8c, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x4ccd01b8, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0162.664] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0162.664] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\68426AE4792A86816CF3B07D8D4754C947EA08B5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\68426ae4792a86816cf3b07d8d4754c947ea08b5"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\68426AE4792A86816CF3B07D8D4754C947EA08B5.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\68426ae4792a86816cf3b07d8d4754c947ea08b5.xuy")) returned 1 [0162.666] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\685EFCCD3945B7E4D6ED3A85EE423A4A95942846", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\685EFCCD3945B7E4D6ED3A85EE423A4A95942846", lpFilePart=0x0) returned 0x85 [0162.666] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0162.666] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\685EFCCD3945B7E4D6ED3A85EE423A4A95942846" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\685efccd3945b7e4d6ed3a85ee423a4a95942846"), fInfoLevelId=0x0, lpFileInformation=0x2368e90 | out: lpFileInformation=0x2368e90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x863d4722, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x863d4722, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x886a421c, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0xdb4f)) returned 1 [0162.666] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0162.666] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\685EFCCD3945B7E4D6ED3A85EE423A4A95942846", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\685EFCCD3945B7E4D6ED3A85EE423A4A95942846", lpFilePart=0x0) returned 0x85 [0162.666] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0162.666] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\685EFCCD3945B7E4D6ED3A85EE423A4A95942846" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\685efccd3945b7e4d6ed3a85ee423a4a95942846"), fInfoLevelId=0x0, lpFileInformation=0x2369090 | out: lpFileInformation=0x2369090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x863d4722, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x863d4722, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x886a421c, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0xdb4f)) returned 1 [0162.666] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0162.666] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\685EFCCD3945B7E4D6ED3A85EE423A4A95942846", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\685EFCCD3945B7E4D6ED3A85EE423A4A95942846", lpFilePart=0x0) returned 0x85 [0162.666] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0162.666] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\685EFCCD3945B7E4D6ED3A85EE423A4A95942846" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\685efccd3945b7e4d6ed3a85ee423a4a95942846"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0162.667] GetFileType (hFile=0x444) returned 0x1 [0162.667] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0162.667] GetFileType (hFile=0x444) returned 0x1 [0162.667] ReadFile (in: hFile=0x444, lpBuffer=0x236b5c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x236b5c0*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0162.732] CloseHandle (hObject=0x444) returned 1 [0162.732] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\685EFCCD3945B7E4D6ED3A85EE423A4A95942846", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\685EFCCD3945B7E4D6ED3A85EE423A4A95942846", lpFilePart=0x0) returned 0x85 [0162.732] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0162.732] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\685EFCCD3945B7E4D6ED3A85EE423A4A95942846" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\685efccd3945b7e4d6ed3a85ee423a4a95942846"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0162.733] GetFileType (hFile=0x444) returned 0x1 [0162.733] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0162.733] GetFileType (hFile=0x444) returned 0x1 [0162.733] WriteFile (in: hFile=0x444, lpBuffer=0x2185c28*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x2185c28*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0162.733] CloseHandle (hObject=0x444) returned 1 [0162.733] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\685EFCCD3945B7E4D6ED3A85EE423A4A95942846", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\685EFCCD3945B7E4D6ED3A85EE423A4A95942846", lpFilePart=0x0) returned 0x85 [0162.733] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\685EFCCD3945B7E4D6ED3A85EE423A4A95942846.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\685EFCCD3945B7E4D6ED3A85EE423A4A95942846.xuy", lpFilePart=0x0) returned 0x89 [0162.733] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0162.733] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\685EFCCD3945B7E4D6ED3A85EE423A4A95942846" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\685efccd3945b7e4d6ed3a85ee423a4a95942846"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x863d4722, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x863d4722, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x4cd8f1fd, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xdb4f)) returned 1 [0162.733] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0162.733] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\685EFCCD3945B7E4D6ED3A85EE423A4A95942846" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\685efccd3945b7e4d6ed3a85ee423a4a95942846"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\685EFCCD3945B7E4D6ED3A85EE423A4A95942846.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\685efccd3945b7e4d6ed3a85ee423a4a95942846.xuy")) returned 1 [0162.735] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\687958F5E9A2BEEA04A3614DD23FC37871418806", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\687958F5E9A2BEEA04A3614DD23FC37871418806", lpFilePart=0x0) returned 0x85 [0162.735] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0162.735] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\687958F5E9A2BEEA04A3614DD23FC37871418806" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\687958f5e9a2beea04a3614dd23fc37871418806"), fInfoLevelId=0x0, lpFileInformation=0x21e9f20 | out: lpFileInformation=0x21e9f20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f16669d, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3f16669d, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xdde80671, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x2dd9)) returned 1 [0162.735] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0162.735] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\687958F5E9A2BEEA04A3614DD23FC37871418806", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\687958F5E9A2BEEA04A3614DD23FC37871418806", lpFilePart=0x0) returned 0x85 [0162.735] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0162.735] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\687958F5E9A2BEEA04A3614DD23FC37871418806" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\687958f5e9a2beea04a3614dd23fc37871418806"), fInfoLevelId=0x0, lpFileInformation=0x21ea120 | out: lpFileInformation=0x21ea120*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f16669d, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3f16669d, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xdde80671, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x2dd9)) returned 1 [0162.735] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0162.735] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\687958F5E9A2BEEA04A3614DD23FC37871418806", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\687958F5E9A2BEEA04A3614DD23FC37871418806", lpFilePart=0x0) returned 0x85 [0162.735] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0162.735] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\687958F5E9A2BEEA04A3614DD23FC37871418806" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\687958f5e9a2beea04a3614dd23fc37871418806"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0162.736] GetFileType (hFile=0x444) returned 0x1 [0162.736] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0162.736] GetFileType (hFile=0x444) returned 0x1 [0162.736] ReadFile (in: hFile=0x444, lpBuffer=0x21ec650, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x21ec650*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0162.757] CloseHandle (hObject=0x444) returned 1 [0162.757] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\687958F5E9A2BEEA04A3614DD23FC37871418806", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\687958F5E9A2BEEA04A3614DD23FC37871418806", lpFilePart=0x0) returned 0x85 [0162.757] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0162.757] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\687958F5E9A2BEEA04A3614DD23FC37871418806" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\687958f5e9a2beea04a3614dd23fc37871418806"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0162.758] GetFileType (hFile=0x444) returned 0x1 [0162.758] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0162.758] GetFileType (hFile=0x444) returned 0x1 [0162.758] WriteFile (in: hFile=0x444, lpBuffer=0x21ea300*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x21ea300*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0162.758] CloseHandle (hObject=0x444) returned 1 [0162.758] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\687958F5E9A2BEEA04A3614DD23FC37871418806", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\687958F5E9A2BEEA04A3614DD23FC37871418806", lpFilePart=0x0) returned 0x85 [0162.758] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\687958F5E9A2BEEA04A3614DD23FC37871418806.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\687958F5E9A2BEEA04A3614DD23FC37871418806.xuy", lpFilePart=0x0) returned 0x89 [0162.758] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0162.758] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\687958F5E9A2BEEA04A3614DD23FC37871418806" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\687958f5e9a2beea04a3614dd23fc37871418806"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f16669d, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3f16669d, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x4cdb4e9a, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2dd9)) returned 1 [0162.758] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0162.758] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\687958F5E9A2BEEA04A3614DD23FC37871418806" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\687958f5e9a2beea04a3614dd23fc37871418806"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\687958F5E9A2BEEA04A3614DD23FC37871418806.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\687958f5e9a2beea04a3614dd23fc37871418806.xuy")) returned 1 [0162.760] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\68F3916AD8F0D06279A8B2B1822559F18A0015C1", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\68F3916AD8F0D06279A8B2B1822559F18A0015C1", lpFilePart=0x0) returned 0x85 [0162.760] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0162.760] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\68F3916AD8F0D06279A8B2B1822559F18A0015C1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\68f3916ad8f0d06279a8b2b1822559f18a0015c1"), fInfoLevelId=0x0, lpFileInformation=0x2268bf8 | out: lpFileInformation=0x2268bf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8635098f, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x8635098f, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x863530ba, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x1120)) returned 1 [0162.760] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0162.760] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\68F3916AD8F0D06279A8B2B1822559F18A0015C1", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\68F3916AD8F0D06279A8B2B1822559F18A0015C1", lpFilePart=0x0) returned 0x85 [0162.760] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0162.760] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\68F3916AD8F0D06279A8B2B1822559F18A0015C1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\68f3916ad8f0d06279a8b2b1822559f18a0015c1"), fInfoLevelId=0x0, lpFileInformation=0x2268df8 | out: lpFileInformation=0x2268df8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8635098f, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x8635098f, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x863530ba, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x1120)) returned 1 [0162.760] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0162.760] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\68F3916AD8F0D06279A8B2B1822559F18A0015C1", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\68F3916AD8F0D06279A8B2B1822559F18A0015C1", lpFilePart=0x0) returned 0x85 [0162.760] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0162.760] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\68F3916AD8F0D06279A8B2B1822559F18A0015C1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\68f3916ad8f0d06279a8b2b1822559f18a0015c1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0162.761] GetFileType (hFile=0x444) returned 0x1 [0162.761] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0162.761] GetFileType (hFile=0x444) returned 0x1 [0162.761] ReadFile (in: hFile=0x444, lpBuffer=0x226b328, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x226b328*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0162.788] CloseHandle (hObject=0x444) returned 1 [0162.788] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\68F3916AD8F0D06279A8B2B1822559F18A0015C1", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\68F3916AD8F0D06279A8B2B1822559F18A0015C1", lpFilePart=0x0) returned 0x85 [0162.788] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0162.788] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\68F3916AD8F0D06279A8B2B1822559F18A0015C1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\68f3916ad8f0d06279a8b2b1822559f18a0015c1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0162.789] GetFileType (hFile=0x444) returned 0x1 [0162.789] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0162.789] GetFileType (hFile=0x444) returned 0x1 [0162.789] WriteFile (in: hFile=0x444, lpBuffer=0x2268fd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x2268fd8*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0162.789] CloseHandle (hObject=0x444) returned 1 [0162.789] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\68F3916AD8F0D06279A8B2B1822559F18A0015C1", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\68F3916AD8F0D06279A8B2B1822559F18A0015C1", lpFilePart=0x0) returned 0x85 [0162.789] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\68F3916AD8F0D06279A8B2B1822559F18A0015C1.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\68F3916AD8F0D06279A8B2B1822559F18A0015C1.xuy", lpFilePart=0x0) returned 0x89 [0162.789] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0162.789] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\68F3916AD8F0D06279A8B2B1822559F18A0015C1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\68f3916ad8f0d06279a8b2b1822559f18a0015c1"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8635098f, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x8635098f, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x4ce0141e, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0162.789] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0162.789] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\68F3916AD8F0D06279A8B2B1822559F18A0015C1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\68f3916ad8f0d06279a8b2b1822559f18a0015c1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\68F3916AD8F0D06279A8B2B1822559F18A0015C1.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\68f3916ad8f0d06279a8b2b1822559f18a0015c1.xuy")) returned 1 [0162.791] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\698AC159A6BCBA0D13FE6F10F1A38E498F826F33", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\698AC159A6BCBA0D13FE6F10F1A38E498F826F33", lpFilePart=0x0) returned 0x85 [0162.791] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0162.791] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\698AC159A6BCBA0D13FE6F10F1A38E498F826F33" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\698ac159a6bcba0d13fe6f10f1a38e498f826f33"), fInfoLevelId=0x0, lpFileInformation=0x22e78d0 | out: lpFileInformation=0x22e78d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f3735a2, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3f3735a2, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xddc47843, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0xc294)) returned 1 [0162.791] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0162.791] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\698AC159A6BCBA0D13FE6F10F1A38E498F826F33", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\698AC159A6BCBA0D13FE6F10F1A38E498F826F33", lpFilePart=0x0) returned 0x85 [0162.791] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0162.791] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\698AC159A6BCBA0D13FE6F10F1A38E498F826F33" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\698ac159a6bcba0d13fe6f10f1a38e498f826f33"), fInfoLevelId=0x0, lpFileInformation=0x22e7ad0 | out: lpFileInformation=0x22e7ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f3735a2, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3f3735a2, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xddc47843, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0xc294)) returned 1 [0162.791] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0162.791] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\698AC159A6BCBA0D13FE6F10F1A38E498F826F33", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\698AC159A6BCBA0D13FE6F10F1A38E498F826F33", lpFilePart=0x0) returned 0x85 [0162.791] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0162.791] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\698AC159A6BCBA0D13FE6F10F1A38E498F826F33" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\698ac159a6bcba0d13fe6f10f1a38e498f826f33"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0162.792] GetFileType (hFile=0x444) returned 0x1 [0162.792] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0162.792] GetFileType (hFile=0x444) returned 0x1 [0162.793] ReadFile (in: hFile=0x444, lpBuffer=0x22ea000, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x22ea000*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0162.816] CloseHandle (hObject=0x444) returned 1 [0162.817] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\698AC159A6BCBA0D13FE6F10F1A38E498F826F33", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\698AC159A6BCBA0D13FE6F10F1A38E498F826F33", lpFilePart=0x0) returned 0x85 [0162.817] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0162.817] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\698AC159A6BCBA0D13FE6F10F1A38E498F826F33" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\698ac159a6bcba0d13fe6f10f1a38e498f826f33"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0162.817] GetFileType (hFile=0x444) returned 0x1 [0162.817] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0162.817] GetFileType (hFile=0x444) returned 0x1 [0162.817] WriteFile (in: hFile=0x444, lpBuffer=0x22e7cb0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x22e7cb0*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0162.817] CloseHandle (hObject=0x444) returned 1 [0162.817] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\698AC159A6BCBA0D13FE6F10F1A38E498F826F33", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\698AC159A6BCBA0D13FE6F10F1A38E498F826F33", lpFilePart=0x0) returned 0x85 [0162.818] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\698AC159A6BCBA0D13FE6F10F1A38E498F826F33.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\698AC159A6BCBA0D13FE6F10F1A38E498F826F33.xuy", lpFilePart=0x0) returned 0x89 [0162.818] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0162.818] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\698AC159A6BCBA0D13FE6F10F1A38E498F826F33" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\698ac159a6bcba0d13fe6f10f1a38e498f826f33"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f3735a2, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3f3735a2, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x4ce4d7b7, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xc294)) returned 1 [0162.818] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0162.818] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\698AC159A6BCBA0D13FE6F10F1A38E498F826F33" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\698ac159a6bcba0d13fe6f10f1a38e498f826f33"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\698AC159A6BCBA0D13FE6F10F1A38E498F826F33.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\698ac159a6bcba0d13fe6f10f1a38e498f826f33.xuy")) returned 1 [0162.819] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6B59D88F10856ABB980993D7332F49AB71BD33B8", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6B59D88F10856ABB980993D7332F49AB71BD33B8", lpFilePart=0x0) returned 0x85 [0162.819] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0162.819] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6B59D88F10856ABB980993D7332F49AB71BD33B8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6b59d88f10856abb980993d7332f49ab71bd33b8"), fInfoLevelId=0x0, lpFileInformation=0x23665a8 | out: lpFileInformation=0x23665a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45586c19, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x45586c19, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x45586c19, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0x155c)) returned 1 [0162.820] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0162.820] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6B59D88F10856ABB980993D7332F49AB71BD33B8", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6B59D88F10856ABB980993D7332F49AB71BD33B8", lpFilePart=0x0) returned 0x85 [0162.820] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0162.820] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6B59D88F10856ABB980993D7332F49AB71BD33B8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6b59d88f10856abb980993d7332f49ab71bd33b8"), fInfoLevelId=0x0, lpFileInformation=0x23667a8 | out: lpFileInformation=0x23667a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45586c19, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x45586c19, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x45586c19, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0x155c)) returned 1 [0162.820] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0162.820] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6B59D88F10856ABB980993D7332F49AB71BD33B8", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6B59D88F10856ABB980993D7332F49AB71BD33B8", lpFilePart=0x0) returned 0x85 [0162.820] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0162.820] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6B59D88F10856ABB980993D7332F49AB71BD33B8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6b59d88f10856abb980993d7332f49ab71bd33b8"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0162.821] GetFileType (hFile=0x444) returned 0x1 [0162.821] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0162.821] GetFileType (hFile=0x444) returned 0x1 [0162.821] ReadFile (in: hFile=0x444, lpBuffer=0x2368cd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x2368cd8*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0162.899] CloseHandle (hObject=0x444) returned 1 [0162.899] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6B59D88F10856ABB980993D7332F49AB71BD33B8", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6B59D88F10856ABB980993D7332F49AB71BD33B8", lpFilePart=0x0) returned 0x85 [0162.899] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0162.900] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6B59D88F10856ABB980993D7332F49AB71BD33B8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6b59d88f10856abb980993d7332f49ab71bd33b8"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0162.900] GetFileType (hFile=0x444) returned 0x1 [0162.900] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0162.900] GetFileType (hFile=0x444) returned 0x1 [0162.900] WriteFile (in: hFile=0x444, lpBuffer=0x21662e0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x21662e0*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0162.900] CloseHandle (hObject=0x444) returned 1 [0162.900] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6B59D88F10856ABB980993D7332F49AB71BD33B8", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6B59D88F10856ABB980993D7332F49AB71BD33B8", lpFilePart=0x0) returned 0x85 [0162.900] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6B59D88F10856ABB980993D7332F49AB71BD33B8.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6B59D88F10856ABB980993D7332F49AB71BD33B8.xuy", lpFilePart=0x0) returned 0x89 [0162.900] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0162.901] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6B59D88F10856ABB980993D7332F49AB71BD33B8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6b59d88f10856abb980993d7332f49ab71bd33b8"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45586c19, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x45586c19, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x4cf0c87c, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0162.901] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0162.901] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6B59D88F10856ABB980993D7332F49AB71BD33B8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6b59d88f10856abb980993d7332f49ab71bd33b8"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6B59D88F10856ABB980993D7332F49AB71BD33B8.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6b59d88f10856abb980993d7332f49ab71bd33b8.xuy")) returned 1 [0162.902] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6BFE0EB337F328928E30DD51C1084B7FD4937D99", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6BFE0EB337F328928E30DD51C1084B7FD4937D99", lpFilePart=0x0) returned 0x85 [0162.902] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0162.903] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6BFE0EB337F328928E30DD51C1084B7FD4937D99" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6bfe0eb337f328928e30dd51c1084b7fd4937d99"), fInfoLevelId=0x0, lpFileInformation=0x21c5928 | out: lpFileInformation=0x21c5928*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6159e1e8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x6159e1e8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x6159e1e8, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xe16)) returned 1 [0162.903] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0162.903] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6BFE0EB337F328928E30DD51C1084B7FD4937D99", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6BFE0EB337F328928E30DD51C1084B7FD4937D99", lpFilePart=0x0) returned 0x85 [0162.903] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0162.903] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6BFE0EB337F328928E30DD51C1084B7FD4937D99" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6bfe0eb337f328928e30dd51c1084b7fd4937d99"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0162.903] GetFileType (hFile=0x444) returned 0x1 [0162.903] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0162.903] GetFileType (hFile=0x444) returned 0x1 [0162.904] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xe16 [0162.904] ReadFile (in: hFile=0x444, lpBuffer=0x21c6b58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x21c6b58*, lpNumberOfBytesRead=0x3be5c8*=0xe16, lpOverlapped=0x0) returned 1 [0163.029] CloseHandle (hObject=0x444) returned 1 [0163.040] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6BFE0EB337F328928E30DD51C1084B7FD4937D99", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6BFE0EB337F328928E30DD51C1084B7FD4937D99", lpFilePart=0x0) returned 0x85 [0163.040] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0163.040] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6BFE0EB337F328928E30DD51C1084B7FD4937D99" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6bfe0eb337f328928e30dd51c1084b7fd4937d99"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0163.041] GetFileType (hFile=0x444) returned 0x1 [0163.041] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0163.041] GetFileType (hFile=0x444) returned 0x1 [0163.041] WriteFile (in: hFile=0x444, lpBuffer=0x2242290*, nNumberOfBytesToWrite=0xe20, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x2242290*, lpNumberOfBytesWritten=0x3be4d8*=0xe20, lpOverlapped=0x0) returned 1 [0163.184] CloseHandle (hObject=0x444) returned 1 [0163.185] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6BFE0EB337F328928E30DD51C1084B7FD4937D99", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6BFE0EB337F328928E30DD51C1084B7FD4937D99", lpFilePart=0x0) returned 0x85 [0163.185] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6BFE0EB337F328928E30DD51C1084B7FD4937D99.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6BFE0EB337F328928E30DD51C1084B7FD4937D99.xuy", lpFilePart=0x0) returned 0x89 [0163.185] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0163.185] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6BFE0EB337F328928E30DD51C1084B7FD4937D99" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6bfe0eb337f328928e30dd51c1084b7fd4937d99"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6159e1e8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x6159e1e8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x4d1e10a6, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xe20)) returned 1 [0163.185] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0163.185] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6BFE0EB337F328928E30DD51C1084B7FD4937D99" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6bfe0eb337f328928e30dd51c1084b7fd4937d99"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6BFE0EB337F328928E30DD51C1084B7FD4937D99.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6bfe0eb337f328928e30dd51c1084b7fd4937d99.xuy")) returned 1 [0163.187] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6D2728C8959E4B632BDBA3B15F34FC9075936CA6", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6D2728C8959E4B632BDBA3B15F34FC9075936CA6", lpFilePart=0x0) returned 0x85 [0163.187] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0163.187] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6D2728C8959E4B632BDBA3B15F34FC9075936CA6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6d2728c8959e4b632bdba3b15f34fc9075936ca6"), fInfoLevelId=0x0, lpFileInformation=0x2243650 | out: lpFileInformation=0x2243650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x861a5542, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x861a5542, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x861a7c68, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0xf7f)) returned 1 [0163.187] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0163.187] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6D2728C8959E4B632BDBA3B15F34FC9075936CA6", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6D2728C8959E4B632BDBA3B15F34FC9075936CA6", lpFilePart=0x0) returned 0x85 [0163.187] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0163.187] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6D2728C8959E4B632BDBA3B15F34FC9075936CA6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6d2728c8959e4b632bdba3b15f34fc9075936ca6"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0163.187] GetFileType (hFile=0x444) returned 0x1 [0163.187] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0163.187] GetFileType (hFile=0x444) returned 0x1 [0163.187] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xf7f [0163.187] ReadFile (in: hFile=0x444, lpBuffer=0x22449e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x22449e8*, lpNumberOfBytesRead=0x3be5c8*=0xf7f, lpOverlapped=0x0) returned 1 [0163.197] CloseHandle (hObject=0x444) returned 1 [0163.208] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6D2728C8959E4B632BDBA3B15F34FC9075936CA6", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6D2728C8959E4B632BDBA3B15F34FC9075936CA6", lpFilePart=0x0) returned 0x85 [0163.208] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0163.208] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6D2728C8959E4B632BDBA3B15F34FC9075936CA6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6d2728c8959e4b632bdba3b15f34fc9075936ca6"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0163.209] GetFileType (hFile=0x444) returned 0x1 [0163.209] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0163.210] GetFileType (hFile=0x444) returned 0x1 [0163.210] WriteFile (in: hFile=0x444, lpBuffer=0x22c07f8*, nNumberOfBytesToWrite=0xf80, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x22c07f8*, lpNumberOfBytesWritten=0x3be4d8*=0xf80, lpOverlapped=0x0) returned 1 [0163.210] CloseHandle (hObject=0x444) returned 1 [0163.210] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6D2728C8959E4B632BDBA3B15F34FC9075936CA6", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6D2728C8959E4B632BDBA3B15F34FC9075936CA6", lpFilePart=0x0) returned 0x85 [0163.211] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6D2728C8959E4B632BDBA3B15F34FC9075936CA6.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6D2728C8959E4B632BDBA3B15F34FC9075936CA6.xuy", lpFilePart=0x0) returned 0x89 [0163.211] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0163.211] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6D2728C8959E4B632BDBA3B15F34FC9075936CA6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6d2728c8959e4b632bdba3b15f34fc9075936ca6"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x861a5542, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x861a5542, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x4d2072c6, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xf80)) returned 1 [0163.211] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0163.211] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6D2728C8959E4B632BDBA3B15F34FC9075936CA6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6d2728c8959e4b632bdba3b15f34fc9075936ca6"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6D2728C8959E4B632BDBA3B15F34FC9075936CA6.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6d2728c8959e4b632bdba3b15f34fc9075936ca6.xuy")) returned 1 [0163.212] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6E737977754F860FE206E1BDA7E561C5EFCF040B", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6E737977754F860FE206E1BDA7E561C5EFCF040B", lpFilePart=0x0) returned 0x85 [0163.212] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0163.212] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6E737977754F860FE206E1BDA7E561C5EFCF040B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6e737977754f860fe206e1bda7e561c5efcf040b"), fInfoLevelId=0x0, lpFileInformation=0x22c1bb8 | out: lpFileInformation=0x22c1bb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6152bc7d, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x6152bc7d, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x6152bc7d, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xe27)) returned 1 [0163.212] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0163.212] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6E737977754F860FE206E1BDA7E561C5EFCF040B", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6E737977754F860FE206E1BDA7E561C5EFCF040B", lpFilePart=0x0) returned 0x85 [0163.212] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0163.212] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6E737977754F860FE206E1BDA7E561C5EFCF040B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6e737977754f860fe206e1bda7e561c5efcf040b"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0163.212] GetFileType (hFile=0x444) returned 0x1 [0163.212] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0163.212] GetFileType (hFile=0x444) returned 0x1 [0163.213] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xe27 [0163.213] ReadFile (in: hFile=0x444, lpBuffer=0x22c2df8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x22c2df8*, lpNumberOfBytesRead=0x3be5c8*=0xe27, lpOverlapped=0x0) returned 1 [0163.225] CloseHandle (hObject=0x444) returned 1 [0163.236] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6E737977754F860FE206E1BDA7E561C5EFCF040B", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6E737977754F860FE206E1BDA7E561C5EFCF040B", lpFilePart=0x0) returned 0x85 [0163.236] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0163.236] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6E737977754F860FE206E1BDA7E561C5EFCF040B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6e737977754f860fe206e1bda7e561c5efcf040b"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0163.237] GetFileType (hFile=0x444) returned 0x1 [0163.237] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0163.237] GetFileType (hFile=0x444) returned 0x1 [0163.237] WriteFile (in: hFile=0x444, lpBuffer=0x233e580*, nNumberOfBytesToWrite=0xe30, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x233e580*, lpNumberOfBytesWritten=0x3be4d8*=0xe30, lpOverlapped=0x0) returned 1 [0163.238] CloseHandle (hObject=0x444) returned 1 [0163.238] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6E737977754F860FE206E1BDA7E561C5EFCF040B", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6E737977754F860FE206E1BDA7E561C5EFCF040B", lpFilePart=0x0) returned 0x85 [0163.238] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6E737977754F860FE206E1BDA7E561C5EFCF040B.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6E737977754F860FE206E1BDA7E561C5EFCF040B.xuy", lpFilePart=0x0) returned 0x89 [0163.238] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0163.238] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6E737977754F860FE206E1BDA7E561C5EFCF040B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6e737977754f860fe206e1bda7e561c5efcf040b"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6152bc7d, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x6152bc7d, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x4d253844, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xe30)) returned 1 [0163.239] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0163.239] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6E737977754F860FE206E1BDA7E561C5EFCF040B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6e737977754f860fe206e1bda7e561c5efcf040b"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6E737977754F860FE206E1BDA7E561C5EFCF040B.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6e737977754f860fe206e1bda7e561c5efcf040b.xuy")) returned 1 [0163.240] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6ECDE68737A8AB107AD15BF26496698293735A7F", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6ECDE68737A8AB107AD15BF26496698293735A7F", lpFilePart=0x0) returned 0x85 [0163.240] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0163.240] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6ECDE68737A8AB107AD15BF26496698293735A7F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6ecde68737a8ab107ad15bf26496698293735a7f"), fInfoLevelId=0x0, lpFileInformation=0x233f940 | out: lpFileInformation=0x233f940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x615c4498, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x615c4498, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x615c4498, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xed6)) returned 1 [0163.240] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0163.240] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6ECDE68737A8AB107AD15BF26496698293735A7F", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6ECDE68737A8AB107AD15BF26496698293735A7F", lpFilePart=0x0) returned 0x85 [0163.240] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0163.240] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6ECDE68737A8AB107AD15BF26496698293735A7F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6ecde68737a8ab107ad15bf26496698293735a7f"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0163.240] GetFileType (hFile=0x444) returned 0x1 [0163.240] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0163.240] GetFileType (hFile=0x444) returned 0x1 [0163.240] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xed6 [0163.240] ReadFile (in: hFile=0x444, lpBuffer=0x2340c30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x2340c30*, lpNumberOfBytesRead=0x3be5c8*=0xed6, lpOverlapped=0x0) returned 1 [0163.242] CloseHandle (hObject=0x444) returned 1 [0163.284] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6ECDE68737A8AB107AD15BF26496698293735A7F", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6ECDE68737A8AB107AD15BF26496698293735A7F", lpFilePart=0x0) returned 0x85 [0163.284] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0163.285] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6ECDE68737A8AB107AD15BF26496698293735A7F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6ecde68737a8ab107ad15bf26496698293735a7f"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0163.286] GetFileType (hFile=0x444) returned 0x1 [0163.286] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0163.286] GetFileType (hFile=0x444) returned 0x1 [0163.286] WriteFile (in: hFile=0x444, lpBuffer=0x21ba428*, nNumberOfBytesToWrite=0xee0, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x21ba428*, lpNumberOfBytesWritten=0x3be4d8*=0xee0, lpOverlapped=0x0) returned 1 [0163.287] CloseHandle (hObject=0x444) returned 1 [0163.287] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6ECDE68737A8AB107AD15BF26496698293735A7F", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6ECDE68737A8AB107AD15BF26496698293735A7F", lpFilePart=0x0) returned 0x85 [0163.288] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6ECDE68737A8AB107AD15BF26496698293735A7F.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6ECDE68737A8AB107AD15BF26496698293735A7F.xuy", lpFilePart=0x0) returned 0x89 [0163.288] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0163.288] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6ECDE68737A8AB107AD15BF26496698293735A7F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6ecde68737a8ab107ad15bf26496698293735a7f"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x615c4498, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x615c4498, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x4d2c62d5, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xee0)) returned 1 [0163.288] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0163.288] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6ECDE68737A8AB107AD15BF26496698293735A7F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6ecde68737a8ab107ad15bf26496698293735a7f"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6ECDE68737A8AB107AD15BF26496698293735A7F.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6ecde68737a8ab107ad15bf26496698293735a7f.xuy")) returned 1 [0163.289] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6EEFC19174D5EB9F9D4298CAA1169279C37B51A6", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6EEFC19174D5EB9F9D4298CAA1169279C37B51A6", lpFilePart=0x0) returned 0x85 [0163.289] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0163.289] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6EEFC19174D5EB9F9D4298CAA1169279C37B51A6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6eefc19174d5eb9f9d4298caa1169279c37b51a6"), fInfoLevelId=0x0, lpFileInformation=0x21bb7e8 | out: lpFileInformation=0x21bb7e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf32ee5af, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xf32ee5af, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0xf32ee5af, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0xf8c)) returned 1 [0163.289] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0163.289] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6EEFC19174D5EB9F9D4298CAA1169279C37B51A6", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6EEFC19174D5EB9F9D4298CAA1169279C37B51A6", lpFilePart=0x0) returned 0x85 [0163.289] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0163.289] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6EEFC19174D5EB9F9D4298CAA1169279C37B51A6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6eefc19174d5eb9f9d4298caa1169279c37b51a6"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0163.290] GetFileType (hFile=0x444) returned 0x1 [0163.290] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0163.290] GetFileType (hFile=0x444) returned 0x1 [0163.290] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xf8c [0163.290] ReadFile (in: hFile=0x444, lpBuffer=0x21bcb90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x21bcb90*, lpNumberOfBytesRead=0x3be5c8*=0xf8c, lpOverlapped=0x0) returned 1 [0163.306] CloseHandle (hObject=0x444) returned 1 [0163.318] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6EEFC19174D5EB9F9D4298CAA1169279C37B51A6", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6EEFC19174D5EB9F9D4298CAA1169279C37B51A6", lpFilePart=0x0) returned 0x85 [0163.318] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0163.318] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6EEFC19174D5EB9F9D4298CAA1169279C37B51A6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6eefc19174d5eb9f9d4298caa1169279c37b51a6"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0163.319] GetFileType (hFile=0x444) returned 0x1 [0163.320] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0163.320] GetFileType (hFile=0x444) returned 0x1 [0163.320] WriteFile (in: hFile=0x444, lpBuffer=0x22389f0*, nNumberOfBytesToWrite=0xf90, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x22389f0*, lpNumberOfBytesWritten=0x3be4d8*=0xf90, lpOverlapped=0x0) returned 1 [0163.320] CloseHandle (hObject=0x444) returned 1 [0163.320] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6EEFC19174D5EB9F9D4298CAA1169279C37B51A6", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6EEFC19174D5EB9F9D4298CAA1169279C37B51A6", lpFilePart=0x0) returned 0x85 [0163.321] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6EEFC19174D5EB9F9D4298CAA1169279C37B51A6.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6EEFC19174D5EB9F9D4298CAA1169279C37B51A6.xuy", lpFilePart=0x0) returned 0x89 [0163.321] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0163.321] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6EEFC19174D5EB9F9D4298CAA1169279C37B51A6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6eefc19174d5eb9f9d4298caa1169279c37b51a6"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf32ee5af, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xf32ee5af, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x4d312352, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xf90)) returned 1 [0163.321] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0163.321] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6EEFC19174D5EB9F9D4298CAA1169279C37B51A6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6eefc19174d5eb9f9d4298caa1169279c37b51a6"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6EEFC19174D5EB9F9D4298CAA1169279C37B51A6.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6eefc19174d5eb9f9d4298caa1169279c37b51a6.xuy")) returned 1 [0163.322] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F0D7B7CC1D4D00C50AEDBC1B3D0FBAD11BE073F", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F0D7B7CC1D4D00C50AEDBC1B3D0FBAD11BE073F", lpFilePart=0x0) returned 0x85 [0163.322] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0163.322] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F0D7B7CC1D4D00C50AEDBC1B3D0FBAD11BE073F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6f0d7b7cc1d4d00c50aedbc1b3d0fbad11be073f"), fInfoLevelId=0x0, lpFileInformation=0x2239db0 | out: lpFileInformation=0x2239db0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f74b4d0, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3f74b4d0, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x3f7502ec, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x528)) returned 1 [0163.322] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0163.323] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F0D7B7CC1D4D00C50AEDBC1B3D0FBAD11BE073F", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F0D7B7CC1D4D00C50AEDBC1B3D0FBAD11BE073F", lpFilePart=0x0) returned 0x85 [0163.323] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0163.323] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F0D7B7CC1D4D00C50AEDBC1B3D0FBAD11BE073F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6f0d7b7cc1d4d00c50aedbc1b3d0fbad11be073f"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0163.323] GetFileType (hFile=0x444) returned 0x1 [0163.323] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0163.323] GetFileType (hFile=0x444) returned 0x1 [0163.323] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x528 [0163.323] ReadFile (in: hFile=0x444, lpBuffer=0x223a6f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x223a6f0*, lpNumberOfBytesRead=0x3be5c8*=0x528, lpOverlapped=0x0) returned 1 [0163.340] CloseHandle (hObject=0x444) returned 1 [0163.350] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F0D7B7CC1D4D00C50AEDBC1B3D0FBAD11BE073F", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F0D7B7CC1D4D00C50AEDBC1B3D0FBAD11BE073F", lpFilePart=0x0) returned 0x85 [0163.350] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0163.350] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F0D7B7CC1D4D00C50AEDBC1B3D0FBAD11BE073F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6f0d7b7cc1d4d00c50aedbc1b3d0fbad11be073f"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0163.352] GetFileType (hFile=0x444) returned 0x1 [0163.352] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0163.352] GetFileType (hFile=0x444) returned 0x1 [0163.352] WriteFile (in: hFile=0x444, lpBuffer=0x22b3170*, nNumberOfBytesToWrite=0x530, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x22b3170*, lpNumberOfBytesWritten=0x3be4d8*=0x530, lpOverlapped=0x0) returned 1 [0163.353] CloseHandle (hObject=0x444) returned 1 [0163.353] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F0D7B7CC1D4D00C50AEDBC1B3D0FBAD11BE073F", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F0D7B7CC1D4D00C50AEDBC1B3D0FBAD11BE073F", lpFilePart=0x0) returned 0x85 [0163.353] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F0D7B7CC1D4D00C50AEDBC1B3D0FBAD11BE073F.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F0D7B7CC1D4D00C50AEDBC1B3D0FBAD11BE073F.xuy", lpFilePart=0x0) returned 0x89 [0163.353] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0163.353] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F0D7B7CC1D4D00C50AEDBC1B3D0FBAD11BE073F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6f0d7b7cc1d4d00c50aedbc1b3d0fbad11be073f"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f74b4d0, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3f74b4d0, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x4d35e794, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x530)) returned 1 [0163.353] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0163.353] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F0D7B7CC1D4D00C50AEDBC1B3D0FBAD11BE073F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6f0d7b7cc1d4d00c50aedbc1b3d0fbad11be073f"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F0D7B7CC1D4D00C50AEDBC1B3D0FBAD11BE073F.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6f0d7b7cc1d4d00c50aedbc1b3d0fbad11be073f.xuy")) returned 1 [0163.355] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F1FC0B439CD82ECE281A60F7927EB116F5E5108", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F1FC0B439CD82ECE281A60F7927EB116F5E5108", lpFilePart=0x0) returned 0x85 [0163.355] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0163.355] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F1FC0B439CD82ECE281A60F7927EB116F5E5108" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6f1fc0b439cd82ece281a60f7927eb116f5e5108"), fInfoLevelId=0x0, lpFileInformation=0x22b4530 | out: lpFileInformation=0x22b4530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4038f245, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x7539aca2, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x753c0d63, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0x134c)) returned 1 [0163.356] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0163.356] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F1FC0B439CD82ECE281A60F7927EB116F5E5108", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F1FC0B439CD82ECE281A60F7927EB116F5E5108", lpFilePart=0x0) returned 0x85 [0163.356] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0163.356] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F1FC0B439CD82ECE281A60F7927EB116F5E5108" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6f1fc0b439cd82ece281a60f7927eb116f5e5108"), fInfoLevelId=0x0, lpFileInformation=0x22b4730 | out: lpFileInformation=0x22b4730*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4038f245, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x7539aca2, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x753c0d63, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0x134c)) returned 1 [0163.356] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0163.356] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F1FC0B439CD82ECE281A60F7927EB116F5E5108", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F1FC0B439CD82ECE281A60F7927EB116F5E5108", lpFilePart=0x0) returned 0x85 [0163.356] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0163.356] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F1FC0B439CD82ECE281A60F7927EB116F5E5108" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6f1fc0b439cd82ece281a60f7927eb116f5e5108"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0163.357] GetFileType (hFile=0x444) returned 0x1 [0163.357] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0163.357] GetFileType (hFile=0x444) returned 0x1 [0163.357] ReadFile (in: hFile=0x444, lpBuffer=0x22b6c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x22b6c60*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0163.385] CloseHandle (hObject=0x444) returned 1 [0163.385] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F1FC0B439CD82ECE281A60F7927EB116F5E5108", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F1FC0B439CD82ECE281A60F7927EB116F5E5108", lpFilePart=0x0) returned 0x85 [0163.385] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0163.385] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F1FC0B439CD82ECE281A60F7927EB116F5E5108" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6f1fc0b439cd82ece281a60f7927eb116f5e5108"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0163.386] GetFileType (hFile=0x444) returned 0x1 [0163.386] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0163.386] GetFileType (hFile=0x444) returned 0x1 [0163.386] WriteFile (in: hFile=0x444, lpBuffer=0x22b4910*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x22b4910*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0163.386] CloseHandle (hObject=0x444) returned 1 [0163.386] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F1FC0B439CD82ECE281A60F7927EB116F5E5108", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F1FC0B439CD82ECE281A60F7927EB116F5E5108", lpFilePart=0x0) returned 0x85 [0163.386] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F1FC0B439CD82ECE281A60F7927EB116F5E5108.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F1FC0B439CD82ECE281A60F7927EB116F5E5108.xuy", lpFilePart=0x0) returned 0x89 [0163.386] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0163.386] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F1FC0B439CD82ECE281A60F7927EB116F5E5108" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6f1fc0b439cd82ece281a60f7927eb116f5e5108"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4038f245, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x7539aca2, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x4d3aacf1, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0163.386] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0163.386] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F1FC0B439CD82ECE281A60F7927EB116F5E5108" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6f1fc0b439cd82ece281a60f7927eb116f5e5108"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F1FC0B439CD82ECE281A60F7927EB116F5E5108.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6f1fc0b439cd82ece281a60f7927eb116f5e5108.xuy")) returned 1 [0163.388] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F26192E14C4C0B13B7860D0A345A5733C7C06EE", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F26192E14C4C0B13B7860D0A345A5733C7C06EE", lpFilePart=0x0) returned 0x85 [0163.388] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0163.388] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F26192E14C4C0B13B7860D0A345A5733C7C06EE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6f26192e14c4c0b13b7860d0a345a5733c7c06ee"), fInfoLevelId=0x0, lpFileInformation=0x2333208 | out: lpFileInformation=0x2333208*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa9a57ab, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xfa9a57ab, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xfa9cb981, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x528)) returned 1 [0163.388] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0163.388] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F26192E14C4C0B13B7860D0A345A5733C7C06EE", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F26192E14C4C0B13B7860D0A345A5733C7C06EE", lpFilePart=0x0) returned 0x85 [0163.388] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0163.388] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F26192E14C4C0B13B7860D0A345A5733C7C06EE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6f26192e14c4c0b13b7860d0a345a5733c7c06ee"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0163.388] GetFileType (hFile=0x444) returned 0x1 [0163.388] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0163.388] GetFileType (hFile=0x444) returned 0x1 [0163.388] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x528 [0163.388] ReadFile (in: hFile=0x444, lpBuffer=0x2333b48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x2333b48*, lpNumberOfBytesRead=0x3be5c8*=0x528, lpOverlapped=0x0) returned 1 [0163.397] CloseHandle (hObject=0x444) returned 1 [0163.440] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F26192E14C4C0B13B7860D0A345A5733C7C06EE", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F26192E14C4C0B13B7860D0A345A5733C7C06EE", lpFilePart=0x0) returned 0x85 [0163.440] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0163.440] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F26192E14C4C0B13B7860D0A345A5733C7C06EE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6f26192e14c4c0b13b7860d0a345a5733c7c06ee"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0163.442] GetFileType (hFile=0x444) returned 0x1 [0163.442] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0163.442] GetFileType (hFile=0x444) returned 0x1 [0163.442] WriteFile (in: hFile=0x444, lpBuffer=0x21aeed8*, nNumberOfBytesToWrite=0x530, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x21aeed8*, lpNumberOfBytesWritten=0x3be4d8*=0x530, lpOverlapped=0x0) returned 1 [0163.443] CloseHandle (hObject=0x444) returned 1 [0163.443] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F26192E14C4C0B13B7860D0A345A5733C7C06EE", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F26192E14C4C0B13B7860D0A345A5733C7C06EE", lpFilePart=0x0) returned 0x85 [0163.443] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F26192E14C4C0B13B7860D0A345A5733C7C06EE.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F26192E14C4C0B13B7860D0A345A5733C7C06EE.xuy", lpFilePart=0x0) returned 0x89 [0163.443] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0163.443] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F26192E14C4C0B13B7860D0A345A5733C7C06EE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6f26192e14c4c0b13b7860d0a345a5733c7c06ee"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa9a57ab, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xfa9a57ab, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x4d4439d7, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x530)) returned 1 [0163.443] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0163.444] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F26192E14C4C0B13B7860D0A345A5733C7C06EE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6f26192e14c4c0b13b7860d0a345a5733c7c06ee"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F26192E14C4C0B13B7860D0A345A5733C7C06EE.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6f26192e14c4c0b13b7860d0a345a5733c7c06ee.xuy")) returned 1 [0163.445] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F392E73ACA1B277C637CBB45733E07EAD74CBCE", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F392E73ACA1B277C637CBB45733E07EAD74CBCE", lpFilePart=0x0) returned 0x85 [0163.445] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0163.445] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F392E73ACA1B277C637CBB45733E07EAD74CBCE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6f392e73aca1b277c637cbb45733e07ead74cbce"), fInfoLevelId=0x0, lpFileInformation=0x21b0298 | out: lpFileInformation=0x21b0298*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc30492b0, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc30492b0, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xc30492b0, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0xa07)) returned 1 [0163.445] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0163.445] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F392E73ACA1B277C637CBB45733E07EAD74CBCE", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F392E73ACA1B277C637CBB45733E07EAD74CBCE", lpFilePart=0x0) returned 0x85 [0163.445] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0163.445] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F392E73ACA1B277C637CBB45733E07EAD74CBCE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6f392e73aca1b277c637cbb45733e07ead74cbce"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0163.445] GetFileType (hFile=0x444) returned 0x1 [0163.445] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0163.445] GetFileType (hFile=0x444) returned 0x1 [0163.445] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xa07 [0163.446] ReadFile (in: hFile=0x444, lpBuffer=0x21b10b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x21b10b8*, lpNumberOfBytesRead=0x3be5c8*=0xa07, lpOverlapped=0x0) returned 1 [0163.448] CloseHandle (hObject=0x444) returned 1 [0163.463] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F392E73ACA1B277C637CBB45733E07EAD74CBCE", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F392E73ACA1B277C637CBB45733E07EAD74CBCE", lpFilePart=0x0) returned 0x85 [0163.463] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0163.463] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F392E73ACA1B277C637CBB45733E07EAD74CBCE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6f392e73aca1b277c637cbb45733e07ead74cbce"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0163.465] GetFileType (hFile=0x444) returned 0x1 [0163.465] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0163.465] GetFileType (hFile=0x444) returned 0x1 [0163.466] WriteFile (in: hFile=0x444, lpBuffer=0x222b3a0*, nNumberOfBytesToWrite=0xa10, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x222b3a0*, lpNumberOfBytesWritten=0x3be4d8*=0xa10, lpOverlapped=0x0) returned 1 [0163.467] CloseHandle (hObject=0x444) returned 1 [0163.467] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F392E73ACA1B277C637CBB45733E07EAD74CBCE", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F392E73ACA1B277C637CBB45733E07EAD74CBCE", lpFilePart=0x0) returned 0x85 [0163.467] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F392E73ACA1B277C637CBB45733E07EAD74CBCE.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F392E73ACA1B277C637CBB45733E07EAD74CBCE.xuy", lpFilePart=0x0) returned 0x89 [0163.467] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0163.467] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F392E73ACA1B277C637CBB45733E07EAD74CBCE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6f392e73aca1b277c637cbb45733e07ead74cbce"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc30492b0, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc30492b0, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x4d491b46, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xa10)) returned 1 [0163.467] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0163.467] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F392E73ACA1B277C637CBB45733E07EAD74CBCE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6f392e73aca1b277c637cbb45733e07ead74cbce"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F392E73ACA1B277C637CBB45733E07EAD74CBCE.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6f392e73aca1b277c637cbb45733e07ead74cbce.xuy")) returned 1 [0163.469] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F39E22506AE2A3DADD87EF5D9EF306B0235583A", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F39E22506AE2A3DADD87EF5D9EF306B0235583A", lpFilePart=0x0) returned 0x85 [0163.469] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0163.469] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F39E22506AE2A3DADD87EF5D9EF306B0235583A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6f39e22506ae2a3dadd87ef5d9ef306b0235583a"), fInfoLevelId=0x0, lpFileInformation=0x222c760 | out: lpFileInformation=0x222c760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42f52cd6, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x42f52cd6, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x42f9f17a, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0x4d2)) returned 1 [0163.470] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0163.470] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F39E22506AE2A3DADD87EF5D9EF306B0235583A", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F39E22506AE2A3DADD87EF5D9EF306B0235583A", lpFilePart=0x0) returned 0x85 [0163.470] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0163.470] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F39E22506AE2A3DADD87EF5D9EF306B0235583A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6f39e22506ae2a3dadd87ef5d9ef306b0235583a"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0163.471] GetFileType (hFile=0x444) returned 0x1 [0163.471] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0163.471] GetFileType (hFile=0x444) returned 0x1 [0163.471] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x4d2 [0163.471] ReadFile (in: hFile=0x444, lpBuffer=0x222d050, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x222d050*, lpNumberOfBytesRead=0x3be5c8*=0x4d2, lpOverlapped=0x0) returned 1 [0163.487] CloseHandle (hObject=0x444) returned 1 [0163.499] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F39E22506AE2A3DADD87EF5D9EF306B0235583A", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F39E22506AE2A3DADD87EF5D9EF306B0235583A", lpFilePart=0x0) returned 0x85 [0163.499] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0163.499] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F39E22506AE2A3DADD87EF5D9EF306B0235583A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6f39e22506ae2a3dadd87ef5d9ef306b0235583a"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0163.500] GetFileType (hFile=0x444) returned 0x1 [0163.501] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0163.501] GetFileType (hFile=0x444) returned 0x1 [0163.501] WriteFile (in: hFile=0x444, lpBuffer=0x22a5948*, nNumberOfBytesToWrite=0x4e0, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x22a5948*, lpNumberOfBytesWritten=0x3be4d8*=0x4e0, lpOverlapped=0x0) returned 1 [0163.503] CloseHandle (hObject=0x444) returned 1 [0163.503] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F39E22506AE2A3DADD87EF5D9EF306B0235583A", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F39E22506AE2A3DADD87EF5D9EF306B0235583A", lpFilePart=0x0) returned 0x85 [0163.503] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F39E22506AE2A3DADD87EF5D9EF306B0235583A.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F39E22506AE2A3DADD87EF5D9EF306B0235583A.xuy", lpFilePart=0x0) returned 0x89 [0163.503] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0163.503] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F39E22506AE2A3DADD87EF5D9EF306B0235583A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6f39e22506ae2a3dadd87ef5d9ef306b0235583a"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42f52cd6, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x42f52cd6, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x4d4de1ed, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x4e0)) returned 1 [0163.503] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0163.504] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F39E22506AE2A3DADD87EF5D9EF306B0235583A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6f39e22506ae2a3dadd87ef5d9ef306b0235583a"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F39E22506AE2A3DADD87EF5D9EF306B0235583A.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6f39e22506ae2a3dadd87ef5d9ef306b0235583a.xuy")) returned 1 [0163.505] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F4E0DE1D5CE86753B3CD75D8F8EFFC8458578F5", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F4E0DE1D5CE86753B3CD75D8F8EFFC8458578F5", lpFilePart=0x0) returned 0x85 [0163.505] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0163.505] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F4E0DE1D5CE86753B3CD75D8F8EFFC8458578F5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6f4e0de1d5ce86753b3cd75d8f8effc8458578f5"), fInfoLevelId=0x0, lpFileInformation=0x22a6d08 | out: lpFileInformation=0x22a6d08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61551d8c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x61551d8c, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x61551d8c, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x1133)) returned 1 [0163.505] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0163.505] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F4E0DE1D5CE86753B3CD75D8F8EFFC8458578F5", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F4E0DE1D5CE86753B3CD75D8F8EFFC8458578F5", lpFilePart=0x0) returned 0x85 [0163.505] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0163.505] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F4E0DE1D5CE86753B3CD75D8F8EFFC8458578F5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6f4e0de1d5ce86753b3cd75d8f8effc8458578f5"), fInfoLevelId=0x0, lpFileInformation=0x22a6f08 | out: lpFileInformation=0x22a6f08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61551d8c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x61551d8c, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x61551d8c, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x1133)) returned 1 [0163.505] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0163.505] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F4E0DE1D5CE86753B3CD75D8F8EFFC8458578F5", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F4E0DE1D5CE86753B3CD75D8F8EFFC8458578F5", lpFilePart=0x0) returned 0x85 [0163.505] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0163.505] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F4E0DE1D5CE86753B3CD75D8F8EFFC8458578F5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6f4e0de1d5ce86753b3cd75d8f8effc8458578f5"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0163.506] GetFileType (hFile=0x444) returned 0x1 [0163.506] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0163.506] GetFileType (hFile=0x444) returned 0x1 [0163.506] ReadFile (in: hFile=0x444, lpBuffer=0x22a9438, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x22a9438*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0163.519] CloseHandle (hObject=0x444) returned 1 [0163.519] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F4E0DE1D5CE86753B3CD75D8F8EFFC8458578F5", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F4E0DE1D5CE86753B3CD75D8F8EFFC8458578F5", lpFilePart=0x0) returned 0x85 [0163.519] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0163.519] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F4E0DE1D5CE86753B3CD75D8F8EFFC8458578F5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6f4e0de1d5ce86753b3cd75d8f8effc8458578f5"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0163.519] GetFileType (hFile=0x444) returned 0x1 [0163.519] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0163.519] GetFileType (hFile=0x444) returned 0x1 [0163.519] WriteFile (in: hFile=0x444, lpBuffer=0x22a70e8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x22a70e8*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0163.519] CloseHandle (hObject=0x444) returned 1 [0163.519] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F4E0DE1D5CE86753B3CD75D8F8EFFC8458578F5", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F4E0DE1D5CE86753B3CD75D8F8EFFC8458578F5", lpFilePart=0x0) returned 0x85 [0163.520] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F4E0DE1D5CE86753B3CD75D8F8EFFC8458578F5.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F4E0DE1D5CE86753B3CD75D8F8EFFC8458578F5.xuy", lpFilePart=0x0) returned 0x89 [0163.520] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0163.520] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F4E0DE1D5CE86753B3CD75D8F8EFFC8458578F5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6f4e0de1d5ce86753b3cd75d8f8effc8458578f5"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61551d8c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x61551d8c, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x4d50447c, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0163.520] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0163.520] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F4E0DE1D5CE86753B3CD75D8F8EFFC8458578F5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6f4e0de1d5ce86753b3cd75d8f8effc8458578f5"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F4E0DE1D5CE86753B3CD75D8F8EFFC8458578F5.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6f4e0de1d5ce86753b3cd75d8f8effc8458578f5.xuy")) returned 1 [0163.521] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F4FA43590A63EB51F16A747B6869FEA664D492D", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F4FA43590A63EB51F16A747B6869FEA664D492D", lpFilePart=0x0) returned 0x85 [0163.521] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0163.521] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F4FA43590A63EB51F16A747B6869FEA664D492D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6f4fa43590a63eb51f16a747b6869fea664d492d"), fInfoLevelId=0x0, lpFileInformation=0x23259e0 | out: lpFileInformation=0x23259e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x459ff2ba, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x459ff2ba, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x459ff2ba, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0x5ca5)) returned 1 [0163.521] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0163.521] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F4FA43590A63EB51F16A747B6869FEA664D492D", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F4FA43590A63EB51F16A747B6869FEA664D492D", lpFilePart=0x0) returned 0x85 [0163.521] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0163.521] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F4FA43590A63EB51F16A747B6869FEA664D492D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6f4fa43590a63eb51f16a747b6869fea664d492d"), fInfoLevelId=0x0, lpFileInformation=0x2325be0 | out: lpFileInformation=0x2325be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x459ff2ba, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x459ff2ba, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x459ff2ba, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0x5ca5)) returned 1 [0163.521] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0163.522] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F4FA43590A63EB51F16A747B6869FEA664D492D", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F4FA43590A63EB51F16A747B6869FEA664D492D", lpFilePart=0x0) returned 0x85 [0163.522] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0163.522] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F4FA43590A63EB51F16A747B6869FEA664D492D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6f4fa43590a63eb51f16a747b6869fea664d492d"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0163.523] GetFileType (hFile=0x444) returned 0x1 [0163.523] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0163.523] GetFileType (hFile=0x444) returned 0x1 [0163.523] ReadFile (in: hFile=0x444, lpBuffer=0x2328110, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x2328110*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0163.587] CloseHandle (hObject=0x444) returned 1 [0163.587] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F4FA43590A63EB51F16A747B6869FEA664D492D", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F4FA43590A63EB51F16A747B6869FEA664D492D", lpFilePart=0x0) returned 0x85 [0163.587] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0163.587] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F4FA43590A63EB51F16A747B6869FEA664D492D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6f4fa43590a63eb51f16a747b6869fea664d492d"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0163.588] GetFileType (hFile=0x444) returned 0x1 [0163.588] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0163.588] GetFileType (hFile=0x444) returned 0x1 [0163.588] WriteFile (in: hFile=0x444, lpBuffer=0x216ab40*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x216ab40*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0163.588] CloseHandle (hObject=0x444) returned 1 [0163.588] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F4FA43590A63EB51F16A747B6869FEA664D492D", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F4FA43590A63EB51F16A747B6869FEA664D492D", lpFilePart=0x0) returned 0x85 [0163.588] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F4FA43590A63EB51F16A747B6869FEA664D492D.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F4FA43590A63EB51F16A747B6869FEA664D492D.xuy", lpFilePart=0x0) returned 0x89 [0163.588] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0163.588] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F4FA43590A63EB51F16A747B6869FEA664D492D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6f4fa43590a63eb51f16a747b6869fea664d492d"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x459ff2ba, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x459ff2ba, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x4d59ce2e, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x5ca5)) returned 1 [0163.588] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0163.588] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F4FA43590A63EB51F16A747B6869FEA664D492D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6f4fa43590a63eb51f16a747b6869fea664d492d"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F4FA43590A63EB51F16A747B6869FEA664D492D.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6f4fa43590a63eb51f16a747b6869fea664d492d.xuy")) returned 1 [0163.590] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F8FB4D82C35910ECF7AB512D58576D942963BA4", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F8FB4D82C35910ECF7AB512D58576D942963BA4", lpFilePart=0x0) returned 0x85 [0163.590] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0163.590] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F8FB4D82C35910ECF7AB512D58576D942963BA4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6f8fb4d82c35910ecf7ab512d58576d942963ba4"), fInfoLevelId=0x0, lpFileInformation=0x21a88f0 | out: lpFileInformation=0x21a88f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x858c91fa, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x858c91fa, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x858c91fa, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x1104)) returned 1 [0163.592] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0163.592] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F8FB4D82C35910ECF7AB512D58576D942963BA4", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F8FB4D82C35910ECF7AB512D58576D942963BA4", lpFilePart=0x0) returned 0x85 [0163.592] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0163.592] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F8FB4D82C35910ECF7AB512D58576D942963BA4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6f8fb4d82c35910ecf7ab512d58576d942963ba4"), fInfoLevelId=0x0, lpFileInformation=0x21a8af0 | out: lpFileInformation=0x21a8af0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x858c91fa, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x858c91fa, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x858c91fa, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x1104)) returned 1 [0163.592] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0163.592] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F8FB4D82C35910ECF7AB512D58576D942963BA4", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F8FB4D82C35910ECF7AB512D58576D942963BA4", lpFilePart=0x0) returned 0x85 [0163.592] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0163.592] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F8FB4D82C35910ECF7AB512D58576D942963BA4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6f8fb4d82c35910ecf7ab512d58576d942963ba4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0163.593] GetFileType (hFile=0x444) returned 0x1 [0163.593] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0163.593] GetFileType (hFile=0x444) returned 0x1 [0163.593] ReadFile (in: hFile=0x444, lpBuffer=0x21ab020, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x21ab020*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0163.616] CloseHandle (hObject=0x444) returned 1 [0163.617] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F8FB4D82C35910ECF7AB512D58576D942963BA4", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F8FB4D82C35910ECF7AB512D58576D942963BA4", lpFilePart=0x0) returned 0x85 [0163.617] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0163.617] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F8FB4D82C35910ECF7AB512D58576D942963BA4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6f8fb4d82c35910ecf7ab512d58576d942963ba4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0163.617] GetFileType (hFile=0x444) returned 0x1 [0163.617] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0163.617] GetFileType (hFile=0x444) returned 0x1 [0163.617] WriteFile (in: hFile=0x444, lpBuffer=0x21a8cd0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x21a8cd0*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0163.617] CloseHandle (hObject=0x444) returned 1 [0163.617] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F8FB4D82C35910ECF7AB512D58576D942963BA4", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F8FB4D82C35910ECF7AB512D58576D942963BA4", lpFilePart=0x0) returned 0x85 [0163.617] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F8FB4D82C35910ECF7AB512D58576D942963BA4.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F8FB4D82C35910ECF7AB512D58576D942963BA4.xuy", lpFilePart=0x0) returned 0x89 [0163.617] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0163.618] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F8FB4D82C35910ECF7AB512D58576D942963BA4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6f8fb4d82c35910ecf7ab512d58576d942963ba4"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x858c91fa, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x858c91fa, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x4d5e95f7, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0163.618] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0163.618] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F8FB4D82C35910ECF7AB512D58576D942963BA4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6f8fb4d82c35910ecf7ab512d58576d942963ba4"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F8FB4D82C35910ECF7AB512D58576D942963BA4.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6f8fb4d82c35910ecf7ab512d58576d942963ba4.xuy")) returned 1 [0163.619] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6FAB625AF8A09EB1F9AD0CA5C0405BDB6AFC978E", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6FAB625AF8A09EB1F9AD0CA5C0405BDB6AFC978E", lpFilePart=0x0) returned 0x85 [0163.619] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0163.619] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6FAB625AF8A09EB1F9AD0CA5C0405BDB6AFC978E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6fab625af8a09eb1f9ad0ca5c0405bdb6afc978e"), fInfoLevelId=0x0, lpFileInformation=0x22275c8 | out: lpFileInformation=0x22275c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6159e1e8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x6159e1e8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x6159e1e8, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x10dc)) returned 1 [0163.620] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0163.620] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6FAB625AF8A09EB1F9AD0CA5C0405BDB6AFC978E", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6FAB625AF8A09EB1F9AD0CA5C0405BDB6AFC978E", lpFilePart=0x0) returned 0x85 [0163.620] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0163.620] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6FAB625AF8A09EB1F9AD0CA5C0405BDB6AFC978E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6fab625af8a09eb1f9ad0ca5c0405bdb6afc978e"), fInfoLevelId=0x0, lpFileInformation=0x22277c8 | out: lpFileInformation=0x22277c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6159e1e8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x6159e1e8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x6159e1e8, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x10dc)) returned 1 [0163.620] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0163.620] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6FAB625AF8A09EB1F9AD0CA5C0405BDB6AFC978E", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6FAB625AF8A09EB1F9AD0CA5C0405BDB6AFC978E", lpFilePart=0x0) returned 0x85 [0163.620] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0163.620] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6FAB625AF8A09EB1F9AD0CA5C0405BDB6AFC978E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6fab625af8a09eb1f9ad0ca5c0405bdb6afc978e"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0163.621] GetFileType (hFile=0x444) returned 0x1 [0163.621] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0163.621] GetFileType (hFile=0x444) returned 0x1 [0163.621] ReadFile (in: hFile=0x444, lpBuffer=0x2229cf8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x2229cf8*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0163.639] CloseHandle (hObject=0x444) returned 1 [0163.639] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6FAB625AF8A09EB1F9AD0CA5C0405BDB6AFC978E", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6FAB625AF8A09EB1F9AD0CA5C0405BDB6AFC978E", lpFilePart=0x0) returned 0x85 [0163.639] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0163.639] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6FAB625AF8A09EB1F9AD0CA5C0405BDB6AFC978E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6fab625af8a09eb1f9ad0ca5c0405bdb6afc978e"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0163.639] GetFileType (hFile=0x444) returned 0x1 [0163.639] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0163.639] GetFileType (hFile=0x444) returned 0x1 [0163.640] WriteFile (in: hFile=0x444, lpBuffer=0x22279a8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x22279a8*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0163.640] CloseHandle (hObject=0x444) returned 1 [0163.640] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6FAB625AF8A09EB1F9AD0CA5C0405BDB6AFC978E", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6FAB625AF8A09EB1F9AD0CA5C0405BDB6AFC978E", lpFilePart=0x0) returned 0x85 [0163.640] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6FAB625AF8A09EB1F9AD0CA5C0405BDB6AFC978E.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6FAB625AF8A09EB1F9AD0CA5C0405BDB6AFC978E.xuy", lpFilePart=0x0) returned 0x89 [0163.640] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0163.640] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6FAB625AF8A09EB1F9AD0CA5C0405BDB6AFC978E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6fab625af8a09eb1f9ad0ca5c0405bdb6afc978e"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6159e1e8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x6159e1e8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x4d635798, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0163.640] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0163.640] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6FAB625AF8A09EB1F9AD0CA5C0405BDB6AFC978E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6fab625af8a09eb1f9ad0ca5c0405bdb6afc978e"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6FAB625AF8A09EB1F9AD0CA5C0405BDB6AFC978E.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6fab625af8a09eb1f9ad0ca5c0405bdb6afc978e.xuy")) returned 1 [0163.642] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\70878CE2EAADC1E41BAE291FD13B352563DF6022", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\70878CE2EAADC1E41BAE291FD13B352563DF6022", lpFilePart=0x0) returned 0x85 [0163.642] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0163.642] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\70878CE2EAADC1E41BAE291FD13B352563DF6022" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\70878ce2eaadc1e41bae291fd13b352563df6022"), fInfoLevelId=0x0, lpFileInformation=0x22a62a0 | out: lpFileInformation=0x22a62a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4640f42, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xf4640f42, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x5f8b5964, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x20e7)) returned 1 [0163.642] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0163.642] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\70878CE2EAADC1E41BAE291FD13B352563DF6022", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\70878CE2EAADC1E41BAE291FD13B352563DF6022", lpFilePart=0x0) returned 0x85 [0163.642] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0163.642] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\70878CE2EAADC1E41BAE291FD13B352563DF6022" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\70878ce2eaadc1e41bae291fd13b352563df6022"), fInfoLevelId=0x0, lpFileInformation=0x22a64a0 | out: lpFileInformation=0x22a64a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4640f42, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xf4640f42, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x5f8b5964, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x20e7)) returned 1 [0163.642] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0163.642] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\70878CE2EAADC1E41BAE291FD13B352563DF6022", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\70878CE2EAADC1E41BAE291FD13B352563DF6022", lpFilePart=0x0) returned 0x85 [0163.642] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0163.643] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\70878CE2EAADC1E41BAE291FD13B352563DF6022" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\70878ce2eaadc1e41bae291fd13b352563df6022"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0163.643] GetFileType (hFile=0x444) returned 0x1 [0163.643] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0163.643] GetFileType (hFile=0x444) returned 0x1 [0163.643] ReadFile (in: hFile=0x444, lpBuffer=0x22a89d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x22a89d0*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0163.660] CloseHandle (hObject=0x444) returned 1 [0163.660] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\70878CE2EAADC1E41BAE291FD13B352563DF6022", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\70878CE2EAADC1E41BAE291FD13B352563DF6022", lpFilePart=0x0) returned 0x85 [0163.660] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0163.660] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\70878CE2EAADC1E41BAE291FD13B352563DF6022" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\70878ce2eaadc1e41bae291fd13b352563df6022"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0163.660] GetFileType (hFile=0x444) returned 0x1 [0163.660] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0163.660] GetFileType (hFile=0x444) returned 0x1 [0163.660] WriteFile (in: hFile=0x444, lpBuffer=0x22a6680*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x22a6680*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0163.660] CloseHandle (hObject=0x444) returned 1 [0163.661] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\70878CE2EAADC1E41BAE291FD13B352563DF6022", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\70878CE2EAADC1E41BAE291FD13B352563DF6022", lpFilePart=0x0) returned 0x85 [0163.661] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\70878CE2EAADC1E41BAE291FD13B352563DF6022.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\70878CE2EAADC1E41BAE291FD13B352563DF6022.xuy", lpFilePart=0x0) returned 0x89 [0163.661] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0163.661] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\70878CE2EAADC1E41BAE291FD13B352563DF6022" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\70878ce2eaadc1e41bae291fd13b352563df6022"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4640f42, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xf4640f42, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x4d65b9b2, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x20e7)) returned 1 [0163.661] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0163.661] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\70878CE2EAADC1E41BAE291FD13B352563DF6022" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\70878ce2eaadc1e41bae291fd13b352563df6022"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\70878CE2EAADC1E41BAE291FD13B352563DF6022.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\70878ce2eaadc1e41bae291fd13b352563df6022.xuy")) returned 1 [0163.662] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\70AE3BE112FC73F5E433F373EC3916C36CE729FC", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\70AE3BE112FC73F5E433F373EC3916C36CE729FC", lpFilePart=0x0) returned 0x85 [0163.662] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0163.662] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\70AE3BE112FC73F5E433F373EC3916C36CE729FC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\70ae3be112fc73f5e433f373ec3916c36ce729fc"), fInfoLevelId=0x0, lpFileInformation=0x2324f78 | out: lpFileInformation=0x2324f78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xddfbb5d6, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xddfbb5d6, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xddfc7908, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x528)) returned 1 [0163.663] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0163.663] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\70AE3BE112FC73F5E433F373EC3916C36CE729FC", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\70AE3BE112FC73F5E433F373EC3916C36CE729FC", lpFilePart=0x0) returned 0x85 [0163.663] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0163.663] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\70AE3BE112FC73F5E433F373EC3916C36CE729FC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\70ae3be112fc73f5e433f373ec3916c36ce729fc"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0163.663] GetFileType (hFile=0x444) returned 0x1 [0163.663] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0163.663] GetFileType (hFile=0x444) returned 0x1 [0163.663] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x528 [0163.663] ReadFile (in: hFile=0x444, lpBuffer=0x23258b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x23258b8*, lpNumberOfBytesRead=0x3be5c8*=0x528, lpOverlapped=0x0) returned 1 [0163.678] CloseHandle (hObject=0x444) returned 1 [0163.737] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\70AE3BE112FC73F5E433F373EC3916C36CE729FC", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\70AE3BE112FC73F5E433F373EC3916C36CE729FC", lpFilePart=0x0) returned 0x85 [0163.737] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0163.737] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\70AE3BE112FC73F5E433F373EC3916C36CE729FC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\70ae3be112fc73f5e433f373ec3916c36ce729fc"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0163.740] GetFileType (hFile=0x444) returned 0x1 [0163.740] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0163.740] GetFileType (hFile=0x444) returned 0x1 [0163.740] WriteFile (in: hFile=0x444, lpBuffer=0x21a0e70*, nNumberOfBytesToWrite=0x530, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x21a0e70*, lpNumberOfBytesWritten=0x3be4d8*=0x530, lpOverlapped=0x0) returned 1 [0163.741] CloseHandle (hObject=0x444) returned 1 [0163.741] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\70AE3BE112FC73F5E433F373EC3916C36CE729FC", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\70AE3BE112FC73F5E433F373EC3916C36CE729FC", lpFilePart=0x0) returned 0x85 [0163.741] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\70AE3BE112FC73F5E433F373EC3916C36CE729FC.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\70AE3BE112FC73F5E433F373EC3916C36CE729FC.xuy", lpFilePart=0x0) returned 0x89 [0163.741] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0163.741] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\70AE3BE112FC73F5E433F373EC3916C36CE729FC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\70ae3be112fc73f5e433f373ec3916c36ce729fc"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xddfbb5d6, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xddfbb5d6, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x4d71a648, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x530)) returned 1 [0163.741] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0163.742] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\70AE3BE112FC73F5E433F373EC3916C36CE729FC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\70ae3be112fc73f5e433f373ec3916c36ce729fc"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\70AE3BE112FC73F5E433F373EC3916C36CE729FC.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\70ae3be112fc73f5e433f373ec3916c36ce729fc.xuy")) returned 1 [0163.743] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\70B3E6FD6779EEBF5E87EAFEA269ECDBD889A0BB", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\70B3E6FD6779EEBF5E87EAFEA269ECDBD889A0BB", lpFilePart=0x0) returned 0x85 [0163.743] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0163.743] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\70B3E6FD6779EEBF5E87EAFEA269ECDBD889A0BB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\70b3e6fd6779eebf5e87eafea269ecdbd889a0bb"), fInfoLevelId=0x0, lpFileInformation=0x21a2230 | out: lpFileInformation=0x21a2230*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89a537e3, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x89a537e3, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x89a58640, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x4d2)) returned 1 [0163.743] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0163.743] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\70B3E6FD6779EEBF5E87EAFEA269ECDBD889A0BB", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\70B3E6FD6779EEBF5E87EAFEA269ECDBD889A0BB", lpFilePart=0x0) returned 0x85 [0163.744] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0163.744] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\70B3E6FD6779EEBF5E87EAFEA269ECDBD889A0BB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\70b3e6fd6779eebf5e87eafea269ecdbd889a0bb"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0163.744] GetFileType (hFile=0x444) returned 0x1 [0163.744] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0163.744] GetFileType (hFile=0x444) returned 0x1 [0163.744] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x4d2 [0163.744] ReadFile (in: hFile=0x444, lpBuffer=0x21a2b20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x21a2b20*, lpNumberOfBytesRead=0x3be5c8*=0x4d2, lpOverlapped=0x0) returned 1 [0163.754] CloseHandle (hObject=0x444) returned 1 [0163.773] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\70B3E6FD6779EEBF5E87EAFEA269ECDBD889A0BB", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\70B3E6FD6779EEBF5E87EAFEA269ECDBD889A0BB", lpFilePart=0x0) returned 0x85 [0163.773] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0163.774] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\70B3E6FD6779EEBF5E87EAFEA269ECDBD889A0BB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\70b3e6fd6779eebf5e87eafea269ecdbd889a0bb"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0163.776] GetFileType (hFile=0x444) returned 0x1 [0163.776] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0163.776] GetFileType (hFile=0x444) returned 0x1 [0163.776] WriteFile (in: hFile=0x444, lpBuffer=0x221b418*, nNumberOfBytesToWrite=0x4e0, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x221b418*, lpNumberOfBytesWritten=0x3be4d8*=0x4e0, lpOverlapped=0x0) returned 1 [0163.777] CloseHandle (hObject=0x444) returned 1 [0163.777] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\70B3E6FD6779EEBF5E87EAFEA269ECDBD889A0BB", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\70B3E6FD6779EEBF5E87EAFEA269ECDBD889A0BB", lpFilePart=0x0) returned 0x85 [0163.777] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\70B3E6FD6779EEBF5E87EAFEA269ECDBD889A0BB.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\70B3E6FD6779EEBF5E87EAFEA269ECDBD889A0BB.xuy", lpFilePart=0x0) returned 0x89 [0163.777] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0163.777] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\70B3E6FD6779EEBF5E87EAFEA269ECDBD889A0BB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\70b3e6fd6779eebf5e87eafea269ecdbd889a0bb"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89a537e3, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x89a537e3, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x4d7671a8, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x4e0)) returned 1 [0163.777] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0163.777] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\70B3E6FD6779EEBF5E87EAFEA269ECDBD889A0BB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\70b3e6fd6779eebf5e87eafea269ecdbd889a0bb"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\70B3E6FD6779EEBF5E87EAFEA269ECDBD889A0BB.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\70b3e6fd6779eebf5e87eafea269ecdbd889a0bb.xuy")) returned 1 [0163.779] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\70ED86B2851AF1F558CF9E13C146068B2300BD5F", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\70ED86B2851AF1F558CF9E13C146068B2300BD5F", lpFilePart=0x0) returned 0x85 [0163.779] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0163.779] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\70ED86B2851AF1F558CF9E13C146068B2300BD5F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\70ed86b2851af1f558cf9e13c146068b2300bd5f"), fInfoLevelId=0x0, lpFileInformation=0x221c7d8 | out: lpFileInformation=0x221c7d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f6b3ea9, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3f6b3ea9, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x3f6b65a6, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x528)) returned 1 [0163.779] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0163.779] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\70ED86B2851AF1F558CF9E13C146068B2300BD5F", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\70ED86B2851AF1F558CF9E13C146068B2300BD5F", lpFilePart=0x0) returned 0x85 [0163.779] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0163.779] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\70ED86B2851AF1F558CF9E13C146068B2300BD5F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\70ed86b2851af1f558cf9e13c146068b2300bd5f"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0163.780] GetFileType (hFile=0x444) returned 0x1 [0163.780] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0163.780] GetFileType (hFile=0x444) returned 0x1 [0163.780] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x528 [0163.780] ReadFile (in: hFile=0x444, lpBuffer=0x221d118, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x221d118*, lpNumberOfBytesRead=0x3be5c8*=0x528, lpOverlapped=0x0) returned 1 [0163.785] CloseHandle (hObject=0x444) returned 1 [0163.801] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\70ED86B2851AF1F558CF9E13C146068B2300BD5F", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\70ED86B2851AF1F558CF9E13C146068B2300BD5F", lpFilePart=0x0) returned 0x85 [0163.802] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0163.802] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\70ED86B2851AF1F558CF9E13C146068B2300BD5F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\70ed86b2851af1f558cf9e13c146068b2300bd5f"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0163.804] GetFileType (hFile=0x444) returned 0x1 [0163.804] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0163.804] GetFileType (hFile=0x444) returned 0x1 [0163.804] WriteFile (in: hFile=0x444, lpBuffer=0x2295b98*, nNumberOfBytesToWrite=0x530, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x2295b98*, lpNumberOfBytesWritten=0x3be4d8*=0x530, lpOverlapped=0x0) returned 1 [0163.805] CloseHandle (hObject=0x444) returned 1 [0163.805] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\70ED86B2851AF1F558CF9E13C146068B2300BD5F", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\70ED86B2851AF1F558CF9E13C146068B2300BD5F", lpFilePart=0x0) returned 0x85 [0163.805] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\70ED86B2851AF1F558CF9E13C146068B2300BD5F.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\70ED86B2851AF1F558CF9E13C146068B2300BD5F.xuy", lpFilePart=0x0) returned 0x89 [0163.805] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0163.805] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\70ED86B2851AF1F558CF9E13C146068B2300BD5F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\70ed86b2851af1f558cf9e13c146068b2300bd5f"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f6b3ea9, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3f6b3ea9, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x4d7b30be, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x530)) returned 1 [0163.805] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0163.805] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\70ED86B2851AF1F558CF9E13C146068B2300BD5F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\70ed86b2851af1f558cf9e13c146068b2300bd5f"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\70ED86B2851AF1F558CF9E13C146068B2300BD5F.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\70ed86b2851af1f558cf9e13c146068b2300bd5f.xuy")) returned 1 [0163.807] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\714AB8F4DF28029AFC0681556F48D37351016356", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\714AB8F4DF28029AFC0681556F48D37351016356", lpFilePart=0x0) returned 0x85 [0163.807] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0163.807] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\714AB8F4DF28029AFC0681556F48D37351016356" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\714ab8f4df28029afc0681556f48d37351016356"), fInfoLevelId=0x0, lpFileInformation=0x2296f58 | out: lpFileInformation=0x2296f58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc31a07d8, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc31a07d8, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xc50c5407, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0xa3c)) returned 1 [0163.807] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0163.807] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\714AB8F4DF28029AFC0681556F48D37351016356", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\714AB8F4DF28029AFC0681556F48D37351016356", lpFilePart=0x0) returned 0x85 [0163.807] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0163.807] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\714AB8F4DF28029AFC0681556F48D37351016356" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\714ab8f4df28029afc0681556f48d37351016356"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0163.807] GetFileType (hFile=0x444) returned 0x1 [0163.807] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0163.807] GetFileType (hFile=0x444) returned 0x1 [0163.807] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xa3c [0163.807] ReadFile (in: hFile=0x444, lpBuffer=0x2297db0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x2297db0*, lpNumberOfBytesRead=0x3be5c8*=0xa3c, lpOverlapped=0x0) returned 1 [0163.816] CloseHandle (hObject=0x444) returned 1 [0163.827] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\714AB8F4DF28029AFC0681556F48D37351016356", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\714AB8F4DF28029AFC0681556F48D37351016356", lpFilePart=0x0) returned 0x85 [0163.827] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0163.828] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\714AB8F4DF28029AFC0681556F48D37351016356" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\714ab8f4df28029afc0681556f48d37351016356"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0163.829] GetFileType (hFile=0x444) returned 0x1 [0163.829] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0163.829] GetFileType (hFile=0x444) returned 0x1 [0163.829] WriteFile (in: hFile=0x444, lpBuffer=0x2312180*, nNumberOfBytesToWrite=0xa40, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x2312180*, lpNumberOfBytesWritten=0x3be4d8*=0xa40, lpOverlapped=0x0) returned 1 [0163.840] CloseHandle (hObject=0x444) returned 1 [0163.840] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\714AB8F4DF28029AFC0681556F48D37351016356", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\714AB8F4DF28029AFC0681556F48D37351016356", lpFilePart=0x0) returned 0x85 [0163.840] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\714AB8F4DF28029AFC0681556F48D37351016356.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\714AB8F4DF28029AFC0681556F48D37351016356.xuy", lpFilePart=0x0) returned 0x89 [0163.840] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0163.840] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\714AB8F4DF28029AFC0681556F48D37351016356" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\714ab8f4df28029afc0681556f48d37351016356"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc31a07d8, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc31a07d8, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x4d7ff3cb, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xa40)) returned 1 [0163.840] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0163.840] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\714AB8F4DF28029AFC0681556F48D37351016356" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\714ab8f4df28029afc0681556f48d37351016356"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\714AB8F4DF28029AFC0681556F48D37351016356.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\714ab8f4df28029afc0681556f48d37351016356.xuy")) returned 1 [0163.843] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\71AEDCA900A67FA2FAB608A99A2E36584BD343FB", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\71AEDCA900A67FA2FAB608A99A2E36584BD343FB", lpFilePart=0x0) returned 0x85 [0163.843] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0163.843] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\71AEDCA900A67FA2FAB608A99A2E36584BD343FB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\71aedca900a67fa2fab608a99a2e36584bd343fb"), fInfoLevelId=0x0, lpFileInformation=0x2313540 | out: lpFileInformation=0x2313540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2a06fdd, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc2a06fdd, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xc50c5407, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x15df4)) returned 1 [0163.843] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0163.843] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\71AEDCA900A67FA2FAB608A99A2E36584BD343FB", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\71AEDCA900A67FA2FAB608A99A2E36584BD343FB", lpFilePart=0x0) returned 0x85 [0163.843] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0163.843] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\71AEDCA900A67FA2FAB608A99A2E36584BD343FB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\71aedca900a67fa2fab608a99a2e36584bd343fb"), fInfoLevelId=0x0, lpFileInformation=0x2313740 | out: lpFileInformation=0x2313740*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2a06fdd, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc2a06fdd, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xc50c5407, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x15df4)) returned 1 [0163.843] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0163.843] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\71AEDCA900A67FA2FAB608A99A2E36584BD343FB", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\71AEDCA900A67FA2FAB608A99A2E36584BD343FB", lpFilePart=0x0) returned 0x85 [0163.843] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0163.844] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\71AEDCA900A67FA2FAB608A99A2E36584BD343FB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\71aedca900a67fa2fab608a99a2e36584bd343fb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0163.845] GetFileType (hFile=0x444) returned 0x1 [0163.845] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0163.845] GetFileType (hFile=0x444) returned 0x1 [0163.845] ReadFile (in: hFile=0x444, lpBuffer=0x2315c70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x2315c70*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0163.908] CloseHandle (hObject=0x444) returned 1 [0163.908] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\71AEDCA900A67FA2FAB608A99A2E36584BD343FB", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\71AEDCA900A67FA2FAB608A99A2E36584BD343FB", lpFilePart=0x0) returned 0x85 [0163.908] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0163.908] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\71AEDCA900A67FA2FAB608A99A2E36584BD343FB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\71aedca900a67fa2fab608a99a2e36584bd343fb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0163.908] GetFileType (hFile=0x444) returned 0x1 [0163.908] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0163.908] GetFileType (hFile=0x444) returned 0x1 [0163.908] WriteFile (in: hFile=0x444, lpBuffer=0x21718f8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x21718f8*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0163.909] CloseHandle (hObject=0x444) returned 1 [0163.909] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\71AEDCA900A67FA2FAB608A99A2E36584BD343FB", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\71AEDCA900A67FA2FAB608A99A2E36584BD343FB", lpFilePart=0x0) returned 0x85 [0163.909] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\71AEDCA900A67FA2FAB608A99A2E36584BD343FB.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\71AEDCA900A67FA2FAB608A99A2E36584BD343FB.xuy", lpFilePart=0x0) returned 0x89 [0163.909] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0163.909] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\71AEDCA900A67FA2FAB608A99A2E36584BD343FB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\71aedca900a67fa2fab608a99a2e36584bd343fb"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2a06fdd, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc2a06fdd, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x4d8be48c, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x15df4)) returned 1 [0163.909] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0163.909] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\71AEDCA900A67FA2FAB608A99A2E36584BD343FB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\71aedca900a67fa2fab608a99a2e36584bd343fb"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\71AEDCA900A67FA2FAB608A99A2E36584BD343FB.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\71aedca900a67fa2fab608a99a2e36584bd343fb.xuy")) returned 1 [0163.911] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\72383665FB6B3DB66261C12404F5ABD0E4B1FADE", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\72383665FB6B3DB66261C12404F5ABD0E4B1FADE", lpFilePart=0x0) returned 0x85 [0163.911] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0163.911] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\72383665FB6B3DB66261C12404F5ABD0E4B1FADE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\72383665fb6b3db66261c12404f5abd0e4b1fade"), fInfoLevelId=0x0, lpFileInformation=0x2196470 | out: lpFileInformation=0x2196470*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3e78a39, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xf3e78a39, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0xf3e7b14f, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0xcd8c)) returned 1 [0163.911] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0163.912] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\72383665FB6B3DB66261C12404F5ABD0E4B1FADE", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\72383665FB6B3DB66261C12404F5ABD0E4B1FADE", lpFilePart=0x0) returned 0x85 [0163.912] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0163.912] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\72383665FB6B3DB66261C12404F5ABD0E4B1FADE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\72383665fb6b3db66261c12404f5abd0e4b1fade"), fInfoLevelId=0x0, lpFileInformation=0x2196670 | out: lpFileInformation=0x2196670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3e78a39, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xf3e78a39, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0xf3e7b14f, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0xcd8c)) returned 1 [0163.912] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0163.912] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\72383665FB6B3DB66261C12404F5ABD0E4B1FADE", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\72383665FB6B3DB66261C12404F5ABD0E4B1FADE", lpFilePart=0x0) returned 0x85 [0163.912] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0163.912] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\72383665FB6B3DB66261C12404F5ABD0E4B1FADE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\72383665fb6b3db66261c12404f5abd0e4b1fade"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0163.913] GetFileType (hFile=0x444) returned 0x1 [0163.913] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0163.913] GetFileType (hFile=0x444) returned 0x1 [0163.913] ReadFile (in: hFile=0x444, lpBuffer=0x2198ba0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x2198ba0*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0163.930] CloseHandle (hObject=0x444) returned 1 [0163.930] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\72383665FB6B3DB66261C12404F5ABD0E4B1FADE", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\72383665FB6B3DB66261C12404F5ABD0E4B1FADE", lpFilePart=0x0) returned 0x85 [0163.930] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0163.930] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\72383665FB6B3DB66261C12404F5ABD0E4B1FADE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\72383665fb6b3db66261c12404f5abd0e4b1fade"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0163.930] GetFileType (hFile=0x444) returned 0x1 [0163.930] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0163.930] GetFileType (hFile=0x444) returned 0x1 [0163.931] WriteFile (in: hFile=0x444, lpBuffer=0x2196850*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x2196850*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0163.931] CloseHandle (hObject=0x444) returned 1 [0163.931] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\72383665FB6B3DB66261C12404F5ABD0E4B1FADE", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\72383665FB6B3DB66261C12404F5ABD0E4B1FADE", lpFilePart=0x0) returned 0x85 [0163.931] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\72383665FB6B3DB66261C12404F5ABD0E4B1FADE.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\72383665FB6B3DB66261C12404F5ABD0E4B1FADE.xuy", lpFilePart=0x0) returned 0x89 [0163.931] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0163.931] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\72383665FB6B3DB66261C12404F5ABD0E4B1FADE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\72383665fb6b3db66261c12404f5abd0e4b1fade"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3e78a39, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xf3e78a39, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x4d8e425e, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xcd8c)) returned 1 [0163.931] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0163.931] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\72383665FB6B3DB66261C12404F5ABD0E4B1FADE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\72383665fb6b3db66261c12404f5abd0e4b1fade"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\72383665FB6B3DB66261C12404F5ABD0E4B1FADE.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\72383665fb6b3db66261c12404f5abd0e4b1fade.xuy")) returned 1 [0163.932] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\72B792700CA27D878D3F3BF0C712462EBAC296E1", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\72B792700CA27D878D3F3BF0C712462EBAC296E1", lpFilePart=0x0) returned 0x85 [0163.932] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0163.932] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\72B792700CA27D878D3F3BF0C712462EBAC296E1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\72b792700ca27d878d3f3bf0c712462ebac296e1"), fInfoLevelId=0x0, lpFileInformation=0x2215148 | out: lpFileInformation=0x2215148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47e96814, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x47e96814, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x47ebca6d, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0xab57)) returned 1 [0163.933] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0163.933] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\72B792700CA27D878D3F3BF0C712462EBAC296E1", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\72B792700CA27D878D3F3BF0C712462EBAC296E1", lpFilePart=0x0) returned 0x85 [0163.933] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0163.933] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\72B792700CA27D878D3F3BF0C712462EBAC296E1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\72b792700ca27d878d3f3bf0c712462ebac296e1"), fInfoLevelId=0x0, lpFileInformation=0x2215348 | out: lpFileInformation=0x2215348*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47e96814, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x47e96814, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x47ebca6d, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0xab57)) returned 1 [0163.933] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0163.933] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\72B792700CA27D878D3F3BF0C712462EBAC296E1", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\72B792700CA27D878D3F3BF0C712462EBAC296E1", lpFilePart=0x0) returned 0x85 [0163.933] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0163.933] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\72B792700CA27D878D3F3BF0C712462EBAC296E1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\72b792700ca27d878d3f3bf0c712462ebac296e1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0163.934] GetFileType (hFile=0x444) returned 0x1 [0163.934] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0163.934] GetFileType (hFile=0x444) returned 0x1 [0163.934] ReadFile (in: hFile=0x444, lpBuffer=0x2217878, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x2217878*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0163.981] CloseHandle (hObject=0x444) returned 1 [0163.981] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\72B792700CA27D878D3F3BF0C712462EBAC296E1", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\72B792700CA27D878D3F3BF0C712462EBAC296E1", lpFilePart=0x0) returned 0x85 [0163.981] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0163.981] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\72B792700CA27D878D3F3BF0C712462EBAC296E1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\72b792700ca27d878d3f3bf0c712462ebac296e1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0163.982] GetFileType (hFile=0x444) returned 0x1 [0163.982] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0163.982] GetFileType (hFile=0x444) returned 0x1 [0163.982] WriteFile (in: hFile=0x444, lpBuffer=0x2215528*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x2215528*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0163.982] CloseHandle (hObject=0x444) returned 1 [0163.982] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\72B792700CA27D878D3F3BF0C712462EBAC296E1", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\72B792700CA27D878D3F3BF0C712462EBAC296E1", lpFilePart=0x0) returned 0x85 [0163.982] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\72B792700CA27D878D3F3BF0C712462EBAC296E1.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\72B792700CA27D878D3F3BF0C712462EBAC296E1.xuy", lpFilePart=0x0) returned 0x89 [0163.982] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0163.982] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\72B792700CA27D878D3F3BF0C712462EBAC296E1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\72b792700ca27d878d3f3bf0c712462ebac296e1"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47e96814, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x47e96814, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x4d97cc34, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xab57)) returned 1 [0163.983] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0163.983] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\72B792700CA27D878D3F3BF0C712462EBAC296E1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\72b792700ca27d878d3f3bf0c712462ebac296e1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\72B792700CA27D878D3F3BF0C712462EBAC296E1.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\72b792700ca27d878d3f3bf0c712462ebac296e1.xuy")) returned 1 [0163.984] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7394B7FE1C950657969E92E15FDA4293AF92F94E", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7394B7FE1C950657969E92E15FDA4293AF92F94E", lpFilePart=0x0) returned 0x85 [0163.984] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0163.984] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7394B7FE1C950657969E92E15FDA4293AF92F94E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7394b7fe1c950657969e92e15fda4293af92f94e"), fInfoLevelId=0x0, lpFileInformation=0x2293e20 | out: lpFileInformation=0x2293e20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85d5d122, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x85d5d122, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x85d5d122, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x42da)) returned 1 [0163.985] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0163.985] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7394B7FE1C950657969E92E15FDA4293AF92F94E", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7394B7FE1C950657969E92E15FDA4293AF92F94E", lpFilePart=0x0) returned 0x85 [0163.985] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0163.985] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7394B7FE1C950657969E92E15FDA4293AF92F94E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7394b7fe1c950657969e92e15fda4293af92f94e"), fInfoLevelId=0x0, lpFileInformation=0x2294020 | out: lpFileInformation=0x2294020*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85d5d122, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x85d5d122, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x85d5d122, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x42da)) returned 1 [0163.985] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0163.985] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7394B7FE1C950657969E92E15FDA4293AF92F94E", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7394B7FE1C950657969E92E15FDA4293AF92F94E", lpFilePart=0x0) returned 0x85 [0163.985] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0163.985] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7394B7FE1C950657969E92E15FDA4293AF92F94E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7394b7fe1c950657969e92e15fda4293af92f94e"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0163.986] GetFileType (hFile=0x444) returned 0x1 [0163.986] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0163.986] GetFileType (hFile=0x444) returned 0x1 [0163.986] ReadFile (in: hFile=0x444, lpBuffer=0x2296550, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x2296550*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0164.008] CloseHandle (hObject=0x444) returned 1 [0164.024] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7394B7FE1C950657969E92E15FDA4293AF92F94E", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7394B7FE1C950657969E92E15FDA4293AF92F94E", lpFilePart=0x0) returned 0x85 [0164.024] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0164.024] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7394B7FE1C950657969E92E15FDA4293AF92F94E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7394b7fe1c950657969e92e15fda4293af92f94e"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0164.024] GetFileType (hFile=0x444) returned 0x1 [0164.024] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0164.024] GetFileType (hFile=0x444) returned 0x1 [0164.024] WriteFile (in: hFile=0x444, lpBuffer=0x2294200*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x2294200*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0164.025] CloseHandle (hObject=0x444) returned 1 [0164.025] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7394B7FE1C950657969E92E15FDA4293AF92F94E", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7394B7FE1C950657969E92E15FDA4293AF92F94E", lpFilePart=0x0) returned 0x85 [0164.025] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7394B7FE1C950657969E92E15FDA4293AF92F94E.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7394B7FE1C950657969E92E15FDA4293AF92F94E.xuy", lpFilePart=0x0) returned 0x89 [0164.025] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0164.025] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7394B7FE1C950657969E92E15FDA4293AF92F94E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7394b7fe1c950657969e92e15fda4293af92f94e"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85d5d122, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x85d5d122, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x4d9c91b0, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x42da)) returned 1 [0164.025] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0164.025] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7394B7FE1C950657969E92E15FDA4293AF92F94E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7394b7fe1c950657969e92e15fda4293af92f94e"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7394B7FE1C950657969E92E15FDA4293AF92F94E.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7394b7fe1c950657969e92e15fda4293af92f94e.xuy")) returned 1 [0164.027] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\73A976E5255CDAB8B19ACBFC7EBBB3682467E56A", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\73A976E5255CDAB8B19ACBFC7EBBB3682467E56A", lpFilePart=0x0) returned 0x85 [0164.027] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0164.027] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\73A976E5255CDAB8B19ACBFC7EBBB3682467E56A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\73a976e5255cdab8b19acbfc7ebbb3682467e56a"), fInfoLevelId=0x0, lpFileInformation=0x2312af8 | out: lpFileInformation=0x2312af8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86e4864a, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x86e4864a, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x86e4ad53, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x4d4)) returned 1 [0164.027] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0164.027] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\73A976E5255CDAB8B19ACBFC7EBBB3682467E56A", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\73A976E5255CDAB8B19ACBFC7EBBB3682467E56A", lpFilePart=0x0) returned 0x85 [0164.027] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0164.028] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\73A976E5255CDAB8B19ACBFC7EBBB3682467E56A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\73a976e5255cdab8b19acbfc7ebbb3682467e56a"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0164.028] GetFileType (hFile=0x444) returned 0x1 [0164.028] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0164.028] GetFileType (hFile=0x444) returned 0x1 [0164.028] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x4d4 [0164.028] ReadFile (in: hFile=0x444, lpBuffer=0x23133e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x23133e8*, lpNumberOfBytesRead=0x3be5c8*=0x4d4, lpOverlapped=0x0) returned 1 [0164.043] CloseHandle (hObject=0x444) returned 1 [0164.221] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\73A976E5255CDAB8B19ACBFC7EBBB3682467E56A", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\73A976E5255CDAB8B19ACBFC7EBBB3682467E56A", lpFilePart=0x0) returned 0x85 [0164.221] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0164.221] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\73A976E5255CDAB8B19ACBFC7EBBB3682467E56A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\73a976e5255cdab8b19acbfc7ebbb3682467e56a"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0164.223] GetFileType (hFile=0x444) returned 0x1 [0164.223] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0164.223] GetFileType (hFile=0x444) returned 0x1 [0164.223] WriteFile (in: hFile=0x444, lpBuffer=0x218e818*, nNumberOfBytesToWrite=0x4e0, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x218e818*, lpNumberOfBytesWritten=0x3be4d8*=0x4e0, lpOverlapped=0x0) returned 1 [0164.224] CloseHandle (hObject=0x444) returned 1 [0164.224] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\73A976E5255CDAB8B19ACBFC7EBBB3682467E56A", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\73A976E5255CDAB8B19ACBFC7EBBB3682467E56A", lpFilePart=0x0) returned 0x85 [0164.224] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\73A976E5255CDAB8B19ACBFC7EBBB3682467E56A.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\73A976E5255CDAB8B19ACBFC7EBBB3682467E56A.xuy", lpFilePart=0x0) returned 0x89 [0164.224] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0164.224] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\73A976E5255CDAB8B19ACBFC7EBBB3682467E56A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\73a976e5255cdab8b19acbfc7ebbb3682467e56a"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86e4864a, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x86e4864a, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x4dbb8f3f, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x4e0)) returned 1 [0164.224] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0164.224] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\73A976E5255CDAB8B19ACBFC7EBBB3682467E56A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\73a976e5255cdab8b19acbfc7ebbb3682467e56a"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\73A976E5255CDAB8B19ACBFC7EBBB3682467E56A.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\73a976e5255cdab8b19acbfc7ebbb3682467e56a.xuy")) returned 1 [0164.225] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\745F42A62F3552DEBB8A0452590DC0EDCB0B05F3", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\745F42A62F3552DEBB8A0452590DC0EDCB0B05F3", lpFilePart=0x0) returned 0x85 [0164.225] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0164.225] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\745F42A62F3552DEBB8A0452590DC0EDCB0B05F3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\745f42a62f3552debb8a0452590dc0edcb0b05f3"), fInfoLevelId=0x0, lpFileInformation=0x218fbd8 | out: lpFileInformation=0x218fbd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86a0ec87, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x86a0ec87, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x86a0ec87, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x2c49)) returned 1 [0164.227] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0164.227] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\745F42A62F3552DEBB8A0452590DC0EDCB0B05F3", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\745F42A62F3552DEBB8A0452590DC0EDCB0B05F3", lpFilePart=0x0) returned 0x85 [0164.227] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0164.227] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\745F42A62F3552DEBB8A0452590DC0EDCB0B05F3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\745f42a62f3552debb8a0452590dc0edcb0b05f3"), fInfoLevelId=0x0, lpFileInformation=0x218fdd8 | out: lpFileInformation=0x218fdd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86a0ec87, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x86a0ec87, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x86a0ec87, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x2c49)) returned 1 [0164.227] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0164.227] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\745F42A62F3552DEBB8A0452590DC0EDCB0B05F3", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\745F42A62F3552DEBB8A0452590DC0EDCB0B05F3", lpFilePart=0x0) returned 0x85 [0164.227] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0164.227] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\745F42A62F3552DEBB8A0452590DC0EDCB0B05F3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\745f42a62f3552debb8a0452590dc0edcb0b05f3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0164.228] GetFileType (hFile=0x444) returned 0x1 [0164.228] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0164.228] GetFileType (hFile=0x444) returned 0x1 [0164.228] ReadFile (in: hFile=0x444, lpBuffer=0x2192308, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x2192308*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0164.254] CloseHandle (hObject=0x444) returned 1 [0164.254] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\745F42A62F3552DEBB8A0452590DC0EDCB0B05F3", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\745F42A62F3552DEBB8A0452590DC0EDCB0B05F3", lpFilePart=0x0) returned 0x85 [0164.254] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0164.254] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\745F42A62F3552DEBB8A0452590DC0EDCB0B05F3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\745f42a62f3552debb8a0452590dc0edcb0b05f3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0164.255] GetFileType (hFile=0x444) returned 0x1 [0164.255] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0164.255] GetFileType (hFile=0x444) returned 0x1 [0164.255] WriteFile (in: hFile=0x444, lpBuffer=0x218ffb8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x218ffb8*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0164.255] CloseHandle (hObject=0x444) returned 1 [0164.255] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\745F42A62F3552DEBB8A0452590DC0EDCB0B05F3", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\745F42A62F3552DEBB8A0452590DC0EDCB0B05F3", lpFilePart=0x0) returned 0x85 [0164.255] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\745F42A62F3552DEBB8A0452590DC0EDCB0B05F3.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\745F42A62F3552DEBB8A0452590DC0EDCB0B05F3.xuy", lpFilePart=0x0) returned 0x89 [0164.255] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0164.255] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\745F42A62F3552DEBB8A0452590DC0EDCB0B05F3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\745f42a62f3552debb8a0452590dc0edcb0b05f3"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86a0ec87, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x86a0ec87, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x4dc05634, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2c49)) returned 1 [0164.255] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0164.255] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\745F42A62F3552DEBB8A0452590DC0EDCB0B05F3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\745f42a62f3552debb8a0452590dc0edcb0b05f3"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\745F42A62F3552DEBB8A0452590DC0EDCB0B05F3.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\745f42a62f3552debb8a0452590dc0edcb0b05f3.xuy")) returned 1 [0164.257] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\756A937558919DF71FCB88D7B4DA15352D72DC2F", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\756A937558919DF71FCB88D7B4DA15352D72DC2F", lpFilePart=0x0) returned 0x85 [0164.257] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0164.257] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\756A937558919DF71FCB88D7B4DA15352D72DC2F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\756a937558919df71fcb88d7b4da15352d72dc2f"), fInfoLevelId=0x0, lpFileInformation=0x220e8b0 | out: lpFileInformation=0x220e8b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46257681, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x46257681, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x46257681, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0x7e1)) returned 1 [0164.257] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0164.257] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\756A937558919DF71FCB88D7B4DA15352D72DC2F", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\756A937558919DF71FCB88D7B4DA15352D72DC2F", lpFilePart=0x0) returned 0x85 [0164.257] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0164.257] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\756A937558919DF71FCB88D7B4DA15352D72DC2F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\756a937558919df71fcb88d7b4da15352d72dc2f"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0164.257] GetFileType (hFile=0x444) returned 0x1 [0164.257] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0164.257] GetFileType (hFile=0x444) returned 0x1 [0164.257] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x7e1 [0164.257] ReadFile (in: hFile=0x444, lpBuffer=0x220f4b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x220f4b0*, lpNumberOfBytesRead=0x3be5c8*=0x7e1, lpOverlapped=0x0) returned 1 [0164.265] CloseHandle (hObject=0x444) returned 1 [0164.275] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\756A937558919DF71FCB88D7B4DA15352D72DC2F", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\756A937558919DF71FCB88D7B4DA15352D72DC2F", lpFilePart=0x0) returned 0x85 [0164.275] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0164.275] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\756A937558919DF71FCB88D7B4DA15352D72DC2F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\756a937558919df71fcb88d7b4da15352d72dc2f"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0164.277] GetFileType (hFile=0x444) returned 0x1 [0164.277] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0164.277] GetFileType (hFile=0x444) returned 0x1 [0164.277] WriteFile (in: hFile=0x444, lpBuffer=0x2288cf8*, nNumberOfBytesToWrite=0x7f0, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x2288cf8*, lpNumberOfBytesWritten=0x3be4d8*=0x7f0, lpOverlapped=0x0) returned 1 [0164.278] CloseHandle (hObject=0x444) returned 1 [0164.278] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\756A937558919DF71FCB88D7B4DA15352D72DC2F", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\756A937558919DF71FCB88D7B4DA15352D72DC2F", lpFilePart=0x0) returned 0x85 [0164.278] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\756A937558919DF71FCB88D7B4DA15352D72DC2F.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\756A937558919DF71FCB88D7B4DA15352D72DC2F.xuy", lpFilePart=0x0) returned 0x89 [0164.279] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0164.279] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\756A937558919DF71FCB88D7B4DA15352D72DC2F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\756a937558919df71fcb88d7b4da15352d72dc2f"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46257681, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x46257681, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x4dc2eae1, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x7f0)) returned 1 [0164.279] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0164.279] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\756A937558919DF71FCB88D7B4DA15352D72DC2F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\756a937558919df71fcb88d7b4da15352d72dc2f"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\756A937558919DF71FCB88D7B4DA15352D72DC2F.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\756a937558919df71fcb88d7b4da15352d72dc2f.xuy")) returned 1 [0164.281] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7604B9DE587D6F4084BF95B41C1F4B2EC876892C", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7604B9DE587D6F4084BF95B41C1F4B2EC876892C", lpFilePart=0x0) returned 0x85 [0164.281] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0164.281] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7604B9DE587D6F4084BF95B41C1F4B2EC876892C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7604b9de587d6f4084bf95b41c1f4b2ec876892c"), fInfoLevelId=0x0, lpFileInformation=0x228a0b8 | out: lpFileInformation=0x228a0b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4844017a, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x4844017a, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x4844017a, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0x3c24)) returned 1 [0164.281] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0164.281] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7604B9DE587D6F4084BF95B41C1F4B2EC876892C", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7604B9DE587D6F4084BF95B41C1F4B2EC876892C", lpFilePart=0x0) returned 0x85 [0164.281] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0164.281] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7604B9DE587D6F4084BF95B41C1F4B2EC876892C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7604b9de587d6f4084bf95b41c1f4b2ec876892c"), fInfoLevelId=0x0, lpFileInformation=0x228a2b8 | out: lpFileInformation=0x228a2b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4844017a, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x4844017a, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x4844017a, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0x3c24)) returned 1 [0164.281] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0164.281] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7604B9DE587D6F4084BF95B41C1F4B2EC876892C", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7604B9DE587D6F4084BF95B41C1F4B2EC876892C", lpFilePart=0x0) returned 0x85 [0164.281] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0164.281] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7604B9DE587D6F4084BF95B41C1F4B2EC876892C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7604b9de587d6f4084bf95b41c1f4b2ec876892c"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0164.282] GetFileType (hFile=0x444) returned 0x1 [0164.282] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0164.282] GetFileType (hFile=0x444) returned 0x1 [0164.282] ReadFile (in: hFile=0x444, lpBuffer=0x228c7e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x228c7e8*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0164.304] CloseHandle (hObject=0x444) returned 1 [0164.304] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7604B9DE587D6F4084BF95B41C1F4B2EC876892C", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7604B9DE587D6F4084BF95B41C1F4B2EC876892C", lpFilePart=0x0) returned 0x85 [0164.304] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0164.304] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7604B9DE587D6F4084BF95B41C1F4B2EC876892C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7604b9de587d6f4084bf95b41c1f4b2ec876892c"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0164.304] GetFileType (hFile=0x444) returned 0x1 [0164.304] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0164.304] GetFileType (hFile=0x444) returned 0x1 [0164.304] WriteFile (in: hFile=0x444, lpBuffer=0x228a498*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x228a498*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0164.304] CloseHandle (hObject=0x444) returned 1 [0164.305] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7604B9DE587D6F4084BF95B41C1F4B2EC876892C", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7604B9DE587D6F4084BF95B41C1F4B2EC876892C", lpFilePart=0x0) returned 0x85 [0164.305] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7604B9DE587D6F4084BF95B41C1F4B2EC876892C.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7604B9DE587D6F4084BF95B41C1F4B2EC876892C.xuy", lpFilePart=0x0) returned 0x89 [0164.305] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0164.305] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7604B9DE587D6F4084BF95B41C1F4B2EC876892C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7604b9de587d6f4084bf95b41c1f4b2ec876892c"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4844017a, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x4844017a, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x4dc779b9, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x3c24)) returned 1 [0164.305] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0164.305] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7604B9DE587D6F4084BF95B41C1F4B2EC876892C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7604b9de587d6f4084bf95b41c1f4b2ec876892c"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7604B9DE587D6F4084BF95B41C1F4B2EC876892C.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7604b9de587d6f4084bf95b41c1f4b2ec876892c.xuy")) returned 1 [0164.306] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\767A9961FDB5AC27D3D7CE17D91203113C888EE1", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\767A9961FDB5AC27D3D7CE17D91203113C888EE1", lpFilePart=0x0) returned 0x85 [0164.306] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0164.306] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\767A9961FDB5AC27D3D7CE17D91203113C888EE1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\767a9961fdb5ac27d3d7ce17d91203113c888ee1"), fInfoLevelId=0x0, lpFileInformation=0x2308d90 | out: lpFileInformation=0x2308d90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61551d8c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x61551d8c, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x61551d8c, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x1165)) returned 1 [0164.306] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0164.306] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\767A9961FDB5AC27D3D7CE17D91203113C888EE1", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\767A9961FDB5AC27D3D7CE17D91203113C888EE1", lpFilePart=0x0) returned 0x85 [0164.306] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0164.306] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\767A9961FDB5AC27D3D7CE17D91203113C888EE1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\767a9961fdb5ac27d3d7ce17d91203113c888ee1"), fInfoLevelId=0x0, lpFileInformation=0x2308f90 | out: lpFileInformation=0x2308f90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61551d8c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x61551d8c, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x61551d8c, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x1165)) returned 1 [0164.307] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0164.307] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\767A9961FDB5AC27D3D7CE17D91203113C888EE1", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\767A9961FDB5AC27D3D7CE17D91203113C888EE1", lpFilePart=0x0) returned 0x85 [0164.307] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0164.307] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\767A9961FDB5AC27D3D7CE17D91203113C888EE1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\767a9961fdb5ac27d3d7ce17d91203113c888ee1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0164.307] GetFileType (hFile=0x444) returned 0x1 [0164.308] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0164.308] GetFileType (hFile=0x444) returned 0x1 [0164.308] ReadFile (in: hFile=0x444, lpBuffer=0x230b4c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x230b4c0*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0164.360] CloseHandle (hObject=0x444) returned 1 [0164.360] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\767A9961FDB5AC27D3D7CE17D91203113C888EE1", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\767A9961FDB5AC27D3D7CE17D91203113C888EE1", lpFilePart=0x0) returned 0x85 [0164.360] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0164.361] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\767A9961FDB5AC27D3D7CE17D91203113C888EE1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\767a9961fdb5ac27d3d7ce17d91203113c888ee1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0164.361] GetFileType (hFile=0x444) returned 0x1 [0164.361] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0164.361] GetFileType (hFile=0x444) returned 0x1 [0164.361] WriteFile (in: hFile=0x444, lpBuffer=0x2178628*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x2178628*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0164.361] CloseHandle (hObject=0x444) returned 1 [0164.361] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\767A9961FDB5AC27D3D7CE17D91203113C888EE1", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\767A9961FDB5AC27D3D7CE17D91203113C888EE1", lpFilePart=0x0) returned 0x85 [0164.361] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\767A9961FDB5AC27D3D7CE17D91203113C888EE1.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\767A9961FDB5AC27D3D7CE17D91203113C888EE1.xuy", lpFilePart=0x0) returned 0x89 [0164.361] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0164.361] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\767A9961FDB5AC27D3D7CE17D91203113C888EE1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\767a9961fdb5ac27d3d7ce17d91203113c888ee1"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61551d8c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x61551d8c, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x4dd1077a, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0164.362] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0164.362] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\767A9961FDB5AC27D3D7CE17D91203113C888EE1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\767a9961fdb5ac27d3d7ce17d91203113c888ee1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\767A9961FDB5AC27D3D7CE17D91203113C888EE1.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\767a9961fdb5ac27d3d7ce17d91203113c888ee1.xuy")) returned 1 [0164.363] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\768C8D1AE760F166BFD97A67C4A578795D3D56FF", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\768C8D1AE760F166BFD97A67C4A578795D3D56FF", lpFilePart=0x0) returned 0x85 [0164.363] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0164.363] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\768C8D1AE760F166BFD97A67C4A578795D3D56FF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\768c8d1ae760f166bfd97a67c4a578795d3d56ff"), fInfoLevelId=0x0, lpFileInformation=0x218bc20 | out: lpFileInformation=0x218bc20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45776aae, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x45776aae, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x45776aae, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0xc76f)) returned 1 [0164.363] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0164.363] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\768C8D1AE760F166BFD97A67C4A578795D3D56FF", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\768C8D1AE760F166BFD97A67C4A578795D3D56FF", lpFilePart=0x0) returned 0x85 [0164.363] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0164.364] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\768C8D1AE760F166BFD97A67C4A578795D3D56FF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\768c8d1ae760f166bfd97a67c4a578795d3d56ff"), fInfoLevelId=0x0, lpFileInformation=0x218be20 | out: lpFileInformation=0x218be20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45776aae, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x45776aae, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x45776aae, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0xc76f)) returned 1 [0164.364] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0164.364] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\768C8D1AE760F166BFD97A67C4A578795D3D56FF", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\768C8D1AE760F166BFD97A67C4A578795D3D56FF", lpFilePart=0x0) returned 0x85 [0164.364] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0164.364] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\768C8D1AE760F166BFD97A67C4A578795D3D56FF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\768c8d1ae760f166bfd97a67c4a578795d3d56ff"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0164.365] GetFileType (hFile=0x444) returned 0x1 [0164.365] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0164.365] GetFileType (hFile=0x444) returned 0x1 [0164.365] ReadFile (in: hFile=0x444, lpBuffer=0x218e350, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x218e350*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0164.388] CloseHandle (hObject=0x444) returned 1 [0164.388] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\768C8D1AE760F166BFD97A67C4A578795D3D56FF", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\768C8D1AE760F166BFD97A67C4A578795D3D56FF", lpFilePart=0x0) returned 0x85 [0164.388] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0164.388] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\768C8D1AE760F166BFD97A67C4A578795D3D56FF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\768c8d1ae760f166bfd97a67c4a578795d3d56ff"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0164.389] GetFileType (hFile=0x444) returned 0x1 [0164.389] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0164.389] GetFileType (hFile=0x444) returned 0x1 [0164.389] WriteFile (in: hFile=0x444, lpBuffer=0x218c000*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x218c000*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0164.389] CloseHandle (hObject=0x444) returned 1 [0164.389] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\768C8D1AE760F166BFD97A67C4A578795D3D56FF", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\768C8D1AE760F166BFD97A67C4A578795D3D56FF", lpFilePart=0x0) returned 0x85 [0164.389] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\768C8D1AE760F166BFD97A67C4A578795D3D56FF.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\768C8D1AE760F166BFD97A67C4A578795D3D56FF.xuy", lpFilePart=0x0) returned 0x89 [0164.389] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0164.389] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\768C8D1AE760F166BFD97A67C4A578795D3D56FF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\768c8d1ae760f166bfd97a67c4a578795d3d56ff"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45776aae, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x45776aae, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x4dd5c850, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xc76f)) returned 1 [0164.389] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0164.389] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\768C8D1AE760F166BFD97A67C4A578795D3D56FF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\768c8d1ae760f166bfd97a67c4a578795d3d56ff"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\768C8D1AE760F166BFD97A67C4A578795D3D56FF.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\768c8d1ae760f166bfd97a67c4a578795d3d56ff.xuy")) returned 1 [0164.391] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\76AAE75069D3F560B973FB3C30F2BDBFA042BFFF", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\76AAE75069D3F560B973FB3C30F2BDBFA042BFFF", lpFilePart=0x0) returned 0x85 [0164.391] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0164.391] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\76AAE75069D3F560B973FB3C30F2BDBFA042BFFF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\76aae75069d3f560b973fb3c30f2bdbfa042bfff"), fInfoLevelId=0x0, lpFileInformation=0x220a8f8 | out: lpFileInformation=0x220a8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46257681, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x46257681, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x46257681, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0x539)) returned 1 [0164.391] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0164.391] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\76AAE75069D3F560B973FB3C30F2BDBFA042BFFF", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\76AAE75069D3F560B973FB3C30F2BDBFA042BFFF", lpFilePart=0x0) returned 0x85 [0164.391] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0164.391] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\76AAE75069D3F560B973FB3C30F2BDBFA042BFFF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\76aae75069d3f560b973fb3c30f2bdbfa042bfff"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0164.391] GetFileType (hFile=0x444) returned 0x1 [0164.391] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0164.391] GetFileType (hFile=0x444) returned 0x1 [0164.391] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x539 [0164.391] ReadFile (in: hFile=0x444, lpBuffer=0x220b250, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x220b250*, lpNumberOfBytesRead=0x3be5c8*=0x539, lpOverlapped=0x0) returned 1 [0164.393] CloseHandle (hObject=0x444) returned 1 [0164.402] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\76AAE75069D3F560B973FB3C30F2BDBFA042BFFF", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\76AAE75069D3F560B973FB3C30F2BDBFA042BFFF", lpFilePart=0x0) returned 0x85 [0164.403] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0164.403] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\76AAE75069D3F560B973FB3C30F2BDBFA042BFFF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\76aae75069d3f560b973fb3c30f2bdbfa042bfff"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0164.405] GetFileType (hFile=0x444) returned 0x1 [0164.405] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0164.405] GetFileType (hFile=0x444) returned 0x1 [0164.405] WriteFile (in: hFile=0x444, lpBuffer=0x2283d20*, nNumberOfBytesToWrite=0x540, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x2283d20*, lpNumberOfBytesWritten=0x3be4d8*=0x540, lpOverlapped=0x0) returned 1 [0164.406] CloseHandle (hObject=0x444) returned 1 [0164.406] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\76AAE75069D3F560B973FB3C30F2BDBFA042BFFF", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\76AAE75069D3F560B973FB3C30F2BDBFA042BFFF", lpFilePart=0x0) returned 0x85 [0164.406] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\76AAE75069D3F560B973FB3C30F2BDBFA042BFFF.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\76AAE75069D3F560B973FB3C30F2BDBFA042BFFF.xuy", lpFilePart=0x0) returned 0x89 [0164.406] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0164.406] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\76AAE75069D3F560B973FB3C30F2BDBFA042BFFF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\76aae75069d3f560b973fb3c30f2bdbfa042bfff"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46257681, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x46257681, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x4dd82af4, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x540)) returned 1 [0164.406] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0164.406] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\76AAE75069D3F560B973FB3C30F2BDBFA042BFFF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\76aae75069d3f560b973fb3c30f2bdbfa042bfff"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\76AAE75069D3F560B973FB3C30F2BDBFA042BFFF.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\76aae75069d3f560b973fb3c30f2bdbfa042bfff.xuy")) returned 1 [0164.407] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\76EF1292F45B28008B0E37EDAF898359BDA69EF7", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\76EF1292F45B28008B0E37EDAF898359BDA69EF7", lpFilePart=0x0) returned 0x85 [0164.407] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0164.407] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\76EF1292F45B28008B0E37EDAF898359BDA69EF7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\76ef1292f45b28008b0e37edaf898359bda69ef7"), fInfoLevelId=0x0, lpFileInformation=0x22850e0 | out: lpFileInformation=0x22850e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ef2b14d, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3ef2b14d, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x7d540bf5, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x24e2)) returned 1 [0164.407] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0164.407] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\76EF1292F45B28008B0E37EDAF898359BDA69EF7", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\76EF1292F45B28008B0E37EDAF898359BDA69EF7", lpFilePart=0x0) returned 0x85 [0164.407] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0164.408] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\76EF1292F45B28008B0E37EDAF898359BDA69EF7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\76ef1292f45b28008b0e37edaf898359bda69ef7"), fInfoLevelId=0x0, lpFileInformation=0x22852e0 | out: lpFileInformation=0x22852e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ef2b14d, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3ef2b14d, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x7d540bf5, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x24e2)) returned 1 [0164.408] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0164.408] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\76EF1292F45B28008B0E37EDAF898359BDA69EF7", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\76EF1292F45B28008B0E37EDAF898359BDA69EF7", lpFilePart=0x0) returned 0x85 [0164.408] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0164.408] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\76EF1292F45B28008B0E37EDAF898359BDA69EF7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\76ef1292f45b28008b0e37edaf898359bda69ef7"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0164.408] GetFileType (hFile=0x444) returned 0x1 [0164.408] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0164.408] GetFileType (hFile=0x444) returned 0x1 [0164.408] ReadFile (in: hFile=0x444, lpBuffer=0x2287810, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x2287810*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0164.437] CloseHandle (hObject=0x444) returned 1 [0164.437] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\76EF1292F45B28008B0E37EDAF898359BDA69EF7", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\76EF1292F45B28008B0E37EDAF898359BDA69EF7", lpFilePart=0x0) returned 0x85 [0164.437] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0164.437] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\76EF1292F45B28008B0E37EDAF898359BDA69EF7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\76ef1292f45b28008b0e37edaf898359bda69ef7"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0164.438] GetFileType (hFile=0x444) returned 0x1 [0164.438] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0164.438] GetFileType (hFile=0x444) returned 0x1 [0164.438] WriteFile (in: hFile=0x444, lpBuffer=0x22854c0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x22854c0*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0164.438] CloseHandle (hObject=0x444) returned 1 [0164.438] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\76EF1292F45B28008B0E37EDAF898359BDA69EF7", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\76EF1292F45B28008B0E37EDAF898359BDA69EF7", lpFilePart=0x0) returned 0x85 [0164.438] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\76EF1292F45B28008B0E37EDAF898359BDA69EF7.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\76EF1292F45B28008B0E37EDAF898359BDA69EF7.xuy", lpFilePart=0x0) returned 0x89 [0164.438] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0164.438] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\76EF1292F45B28008B0E37EDAF898359BDA69EF7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\76ef1292f45b28008b0e37edaf898359bda69ef7"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ef2b14d, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3ef2b14d, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x4ddcf0fd, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x24e2)) returned 1 [0164.438] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0164.438] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\76EF1292F45B28008B0E37EDAF898359BDA69EF7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\76ef1292f45b28008b0e37edaf898359bda69ef7"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\76EF1292F45B28008B0E37EDAF898359BDA69EF7.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\76ef1292f45b28008b0e37edaf898359bda69ef7.xuy")) returned 1 [0164.439] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\76FFAADFD6E911E3E7F09E99D9A7FEB643A7794E", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\76FFAADFD6E911E3E7F09E99D9A7FEB643A7794E", lpFilePart=0x0) returned 0x85 [0164.440] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0164.440] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\76FFAADFD6E911E3E7F09E99D9A7FEB643A7794E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\76ffaadfd6e911e3e7f09e99d9a7feb643a7794e"), fInfoLevelId=0x0, lpFileInformation=0x2303db8 | out: lpFileInformation=0x2303db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6152bc7d, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x6152bc7d, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x6152bc7d, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x12a0)) returned 1 [0164.440] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0164.440] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\76FFAADFD6E911E3E7F09E99D9A7FEB643A7794E", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\76FFAADFD6E911E3E7F09E99D9A7FEB643A7794E", lpFilePart=0x0) returned 0x85 [0164.440] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0164.440] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\76FFAADFD6E911E3E7F09E99D9A7FEB643A7794E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\76ffaadfd6e911e3e7f09e99d9a7feb643a7794e"), fInfoLevelId=0x0, lpFileInformation=0x2303fb8 | out: lpFileInformation=0x2303fb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6152bc7d, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x6152bc7d, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x6152bc7d, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x12a0)) returned 1 [0164.440] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0164.440] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\76FFAADFD6E911E3E7F09E99D9A7FEB643A7794E", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\76FFAADFD6E911E3E7F09E99D9A7FEB643A7794E", lpFilePart=0x0) returned 0x85 [0164.440] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0164.440] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\76FFAADFD6E911E3E7F09E99D9A7FEB643A7794E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\76ffaadfd6e911e3e7f09e99d9a7feb643a7794e"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0164.441] GetFileType (hFile=0x444) returned 0x1 [0164.441] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0164.441] GetFileType (hFile=0x444) returned 0x1 [0164.441] ReadFile (in: hFile=0x444, lpBuffer=0x23064e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x23064e8*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0164.466] CloseHandle (hObject=0x444) returned 1 [0164.466] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\76FFAADFD6E911E3E7F09E99D9A7FEB643A7794E", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\76FFAADFD6E911E3E7F09E99D9A7FEB643A7794E", lpFilePart=0x0) returned 0x85 [0164.466] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0164.466] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\76FFAADFD6E911E3E7F09E99D9A7FEB643A7794E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\76ffaadfd6e911e3e7f09e99d9a7feb643a7794e"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0164.466] GetFileType (hFile=0x444) returned 0x1 [0164.466] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0164.467] GetFileType (hFile=0x444) returned 0x1 [0164.467] WriteFile (in: hFile=0x444, lpBuffer=0x217de60*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x217de60*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0164.467] CloseHandle (hObject=0x444) returned 1 [0164.468] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\76FFAADFD6E911E3E7F09E99D9A7FEB643A7794E", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\76FFAADFD6E911E3E7F09E99D9A7FEB643A7794E", lpFilePart=0x0) returned 0x85 [0164.468] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\76FFAADFD6E911E3E7F09E99D9A7FEB643A7794E.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\76FFAADFD6E911E3E7F09E99D9A7FEB643A7794E.xuy", lpFilePart=0x0) returned 0x89 [0164.468] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0164.468] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\76FFAADFD6E911E3E7F09E99D9A7FEB643A7794E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\76ffaadfd6e911e3e7f09e99d9a7feb643a7794e"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6152bc7d, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x6152bc7d, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x4de1b5d7, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0164.468] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0164.468] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\76FFAADFD6E911E3E7F09E99D9A7FEB643A7794E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\76ffaadfd6e911e3e7f09e99d9a7feb643a7794e"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\76FFAADFD6E911E3E7F09E99D9A7FEB643A7794E.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\76ffaadfd6e911e3e7f09e99d9a7feb643a7794e.xuy")) returned 1 [0164.469] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7745B0AA62A2D610E6DF708BD9E5017145E8592E", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7745B0AA62A2D610E6DF708BD9E5017145E8592E", lpFilePart=0x0) returned 0x85 [0164.469] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0164.469] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7745B0AA62A2D610E6DF708BD9E5017145E8592E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7745b0aa62a2d610e6df708bd9e5017145e8592e"), fInfoLevelId=0x0, lpFileInformation=0x2188298 | out: lpFileInformation=0x2188298*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d0753cf, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x3d0753cf, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x3d09b640, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0xaf6)) returned 1 [0164.469] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0164.469] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7745B0AA62A2D610E6DF708BD9E5017145E8592E", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7745B0AA62A2D610E6DF708BD9E5017145E8592E", lpFilePart=0x0) returned 0x85 [0164.469] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0164.469] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7745B0AA62A2D610E6DF708BD9E5017145E8592E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7745b0aa62a2d610e6df708bd9e5017145e8592e"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0164.469] GetFileType (hFile=0x444) returned 0x1 [0164.469] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0164.470] GetFileType (hFile=0x444) returned 0x1 [0164.470] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xaf6 [0164.470] ReadFile (in: hFile=0x444, lpBuffer=0x21891a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x21891a8*, lpNumberOfBytesRead=0x3be5c8*=0xaf6, lpOverlapped=0x0) returned 1 [0164.481] CloseHandle (hObject=0x444) returned 1 [0164.507] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7745B0AA62A2D610E6DF708BD9E5017145E8592E", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7745B0AA62A2D610E6DF708BD9E5017145E8592E", lpFilePart=0x0) returned 0x85 [0164.507] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0164.507] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7745B0AA62A2D610E6DF708BD9E5017145E8592E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7745b0aa62a2d610e6df708bd9e5017145e8592e"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0164.509] GetFileType (hFile=0x444) returned 0x1 [0164.509] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0164.509] GetFileType (hFile=0x444) returned 0x1 [0164.509] WriteFile (in: hFile=0x444, lpBuffer=0x2203940*, nNumberOfBytesToWrite=0xb00, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x2203940*, lpNumberOfBytesWritten=0x3be4d8*=0xb00, lpOverlapped=0x0) returned 1 [0164.509] CloseHandle (hObject=0x444) returned 1 [0164.510] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7745B0AA62A2D610E6DF708BD9E5017145E8592E", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7745B0AA62A2D610E6DF708BD9E5017145E8592E", lpFilePart=0x0) returned 0x85 [0164.510] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7745B0AA62A2D610E6DF708BD9E5017145E8592E.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7745B0AA62A2D610E6DF708BD9E5017145E8592E.xuy", lpFilePart=0x0) returned 0x89 [0164.510] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0164.510] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7745B0AA62A2D610E6DF708BD9E5017145E8592E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7745b0aa62a2d610e6df708bd9e5017145e8592e"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d0753cf, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x3d0753cf, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x4de67964, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xb00)) returned 1 [0164.510] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0164.510] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7745B0AA62A2D610E6DF708BD9E5017145E8592E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7745b0aa62a2d610e6df708bd9e5017145e8592e"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7745B0AA62A2D610E6DF708BD9E5017145E8592E.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7745b0aa62a2d610e6df708bd9e5017145e8592e.xuy")) returned 1 [0164.521] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\77CEF3A6676F7D9193ED09C07246A8DEC5D24FE9", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\77CEF3A6676F7D9193ED09C07246A8DEC5D24FE9", lpFilePart=0x0) returned 0x85 [0164.521] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0164.521] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\77CEF3A6676F7D9193ED09C07246A8DEC5D24FE9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\77cef3a6676f7d9193ed09c07246a8dec5d24fe9"), fInfoLevelId=0x0, lpFileInformation=0x2204d00 | out: lpFileInformation=0x2204d00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8af193c0, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x8af193c0, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x8af193c0, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0xa81)) returned 1 [0164.522] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0164.522] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\77CEF3A6676F7D9193ED09C07246A8DEC5D24FE9", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\77CEF3A6676F7D9193ED09C07246A8DEC5D24FE9", lpFilePart=0x0) returned 0x85 [0164.522] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0164.522] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\77CEF3A6676F7D9193ED09C07246A8DEC5D24FE9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\77cef3a6676f7d9193ed09c07246a8dec5d24fe9"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0164.522] GetFileType (hFile=0x444) returned 0x1 [0164.522] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0164.522] GetFileType (hFile=0x444) returned 0x1 [0164.522] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xa81 [0164.522] ReadFile (in: hFile=0x444, lpBuffer=0x2205ba0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x2205ba0*, lpNumberOfBytesRead=0x3be5c8*=0xa81, lpOverlapped=0x0) returned 1 [0164.534] CloseHandle (hObject=0x444) returned 1 [0164.545] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\77CEF3A6676F7D9193ED09C07246A8DEC5D24FE9", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\77CEF3A6676F7D9193ED09C07246A8DEC5D24FE9", lpFilePart=0x0) returned 0x85 [0164.545] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0164.545] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\77CEF3A6676F7D9193ED09C07246A8DEC5D24FE9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\77cef3a6676f7d9193ed09c07246a8dec5d24fe9"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0164.546] GetFileType (hFile=0x444) returned 0x1 [0164.546] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0164.547] GetFileType (hFile=0x444) returned 0x1 [0164.547] WriteFile (in: hFile=0x444, lpBuffer=0x2280108*, nNumberOfBytesToWrite=0xa90, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x2280108*, lpNumberOfBytesWritten=0x3be4d8*=0xa90, lpOverlapped=0x0) returned 1 [0164.547] CloseHandle (hObject=0x444) returned 1 [0164.547] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\77CEF3A6676F7D9193ED09C07246A8DEC5D24FE9", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\77CEF3A6676F7D9193ED09C07246A8DEC5D24FE9", lpFilePart=0x0) returned 0x85 [0164.547] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\77CEF3A6676F7D9193ED09C07246A8DEC5D24FE9.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\77CEF3A6676F7D9193ED09C07246A8DEC5D24FE9.xuy", lpFilePart=0x0) returned 0x89 [0164.547] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0164.548] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\77CEF3A6676F7D9193ED09C07246A8DEC5D24FE9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\77cef3a6676f7d9193ed09c07246a8dec5d24fe9"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8af193c0, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x8af193c0, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x4deda3a6, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xa90)) returned 1 [0164.548] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0164.548] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\77CEF3A6676F7D9193ED09C07246A8DEC5D24FE9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\77cef3a6676f7d9193ed09c07246a8dec5d24fe9"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\77CEF3A6676F7D9193ED09C07246A8DEC5D24FE9.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\77cef3a6676f7d9193ed09c07246a8dec5d24fe9.xuy")) returned 1 [0164.549] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7807899BF5E94564AFE48A5B5DF11C0FDB47F065", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7807899BF5E94564AFE48A5B5DF11C0FDB47F065", lpFilePart=0x0) returned 0x85 [0164.549] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0164.549] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7807899BF5E94564AFE48A5B5DF11C0FDB47F065" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7807899bf5e94564afe48a5b5df11c0fdb47f065"), fInfoLevelId=0x0, lpFileInformation=0x22814c8 | out: lpFileInformation=0x22814c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x459d9052, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x459d9052, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x459d9052, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0x4a8)) returned 1 [0164.549] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0164.549] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7807899BF5E94564AFE48A5B5DF11C0FDB47F065", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7807899BF5E94564AFE48A5B5DF11C0FDB47F065", lpFilePart=0x0) returned 0x85 [0164.549] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0164.549] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7807899BF5E94564AFE48A5B5DF11C0FDB47F065" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7807899bf5e94564afe48a5b5df11c0fdb47f065"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0164.549] GetFileType (hFile=0x444) returned 0x1 [0164.549] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0164.549] GetFileType (hFile=0x444) returned 0x1 [0164.549] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x4a8 [0164.550] ReadFile (in: hFile=0x444, lpBuffer=0x2281d88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x2281d88*, lpNumberOfBytesRead=0x3be5c8*=0x4a8, lpOverlapped=0x0) returned 1 [0164.551] CloseHandle (hObject=0x444) returned 1 [0164.562] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7807899BF5E94564AFE48A5B5DF11C0FDB47F065", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7807899BF5E94564AFE48A5B5DF11C0FDB47F065", lpFilePart=0x0) returned 0x85 [0164.562] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0164.562] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7807899BF5E94564AFE48A5B5DF11C0FDB47F065" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7807899bf5e94564afe48a5b5df11c0fdb47f065"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0164.564] GetFileType (hFile=0x444) returned 0x1 [0164.564] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0164.564] GetFileType (hFile=0x444) returned 0x1 [0164.564] WriteFile (in: hFile=0x444, lpBuffer=0x22fa588*, nNumberOfBytesToWrite=0x4b0, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x22fa588*, lpNumberOfBytesWritten=0x3be4d8*=0x4b0, lpOverlapped=0x0) returned 1 [0164.564] CloseHandle (hObject=0x444) returned 1 [0164.564] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7807899BF5E94564AFE48A5B5DF11C0FDB47F065", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7807899BF5E94564AFE48A5B5DF11C0FDB47F065", lpFilePart=0x0) returned 0x85 [0164.565] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7807899BF5E94564AFE48A5B5DF11C0FDB47F065.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7807899BF5E94564AFE48A5B5DF11C0FDB47F065.xuy", lpFilePart=0x0) returned 0x89 [0164.565] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0164.565] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7807899BF5E94564AFE48A5B5DF11C0FDB47F065" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7807899bf5e94564afe48a5b5df11c0fdb47f065"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x459d9052, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x459d9052, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x4df00287, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x4b0)) returned 1 [0164.565] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0164.565] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7807899BF5E94564AFE48A5B5DF11C0FDB47F065" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7807899bf5e94564afe48a5b5df11c0fdb47f065"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7807899BF5E94564AFE48A5B5DF11C0FDB47F065.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7807899bf5e94564afe48a5b5df11c0fdb47f065.xuy")) returned 1 [0164.566] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\781E33189FE64505AE85DAFD54ED7730A4A55952", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\781E33189FE64505AE85DAFD54ED7730A4A55952", lpFilePart=0x0) returned 0x85 [0164.566] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0164.566] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\781E33189FE64505AE85DAFD54ED7730A4A55952" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\781e33189fe64505ae85dafd54ed7730a4a55952"), fInfoLevelId=0x0, lpFileInformation=0x22fb948 | out: lpFileInformation=0x22fb948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x477bbbb4, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x477bbbb4, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x477bbbb4, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0x43b2)) returned 1 [0164.567] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0164.567] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\781E33189FE64505AE85DAFD54ED7730A4A55952", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\781E33189FE64505AE85DAFD54ED7730A4A55952", lpFilePart=0x0) returned 0x85 [0164.567] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0164.567] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\781E33189FE64505AE85DAFD54ED7730A4A55952" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\781e33189fe64505ae85dafd54ed7730a4a55952"), fInfoLevelId=0x0, lpFileInformation=0x22fbb48 | out: lpFileInformation=0x22fbb48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x477bbbb4, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x477bbbb4, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x477bbbb4, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0x43b2)) returned 1 [0164.567] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0164.567] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\781E33189FE64505AE85DAFD54ED7730A4A55952", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\781E33189FE64505AE85DAFD54ED7730A4A55952", lpFilePart=0x0) returned 0x85 [0164.567] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0164.567] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\781E33189FE64505AE85DAFD54ED7730A4A55952" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\781e33189fe64505ae85dafd54ed7730a4a55952"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0164.568] GetFileType (hFile=0x444) returned 0x1 [0164.568] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0164.568] GetFileType (hFile=0x444) returned 0x1 [0164.568] ReadFile (in: hFile=0x444, lpBuffer=0x22fe078, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x22fe078*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0164.595] CloseHandle (hObject=0x444) returned 1 [0164.595] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\781E33189FE64505AE85DAFD54ED7730A4A55952", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\781E33189FE64505AE85DAFD54ED7730A4A55952", lpFilePart=0x0) returned 0x85 [0164.595] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0164.595] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\781E33189FE64505AE85DAFD54ED7730A4A55952" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\781e33189fe64505ae85dafd54ed7730a4a55952"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0164.595] GetFileType (hFile=0x444) returned 0x1 [0164.595] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0164.595] GetFileType (hFile=0x444) returned 0x1 [0164.595] WriteFile (in: hFile=0x444, lpBuffer=0x22fbd28*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x22fbd28*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0164.595] CloseHandle (hObject=0x444) returned 1 [0164.595] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\781E33189FE64505AE85DAFD54ED7730A4A55952", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\781E33189FE64505AE85DAFD54ED7730A4A55952", lpFilePart=0x0) returned 0x85 [0164.595] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\781E33189FE64505AE85DAFD54ED7730A4A55952.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\781E33189FE64505AE85DAFD54ED7730A4A55952.xuy", lpFilePart=0x0) returned 0x89 [0164.595] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0164.596] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\781E33189FE64505AE85DAFD54ED7730A4A55952" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\781e33189fe64505ae85dafd54ed7730a4a55952"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x477bbbb4, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x477bbbb4, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x4df4c6ee, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x43b2)) returned 1 [0164.596] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0164.596] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\781E33189FE64505AE85DAFD54ED7730A4A55952" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\781e33189fe64505ae85dafd54ed7730a4a55952"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\781E33189FE64505AE85DAFD54ED7730A4A55952.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\781e33189fe64505ae85dafd54ed7730a4a55952.xuy")) returned 1 [0164.597] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\785445A5FF1777FD0EA02B65B10108B52E873145", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\785445A5FF1777FD0EA02B65B10108B52E873145", lpFilePart=0x0) returned 0x85 [0164.597] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0164.597] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\785445A5FF1777FD0EA02B65B10108B52E873145" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\785445a5ff1777fd0ea02b65b10108b52e873145"), fInfoLevelId=0x0, lpFileInformation=0x237a620 | out: lpFileInformation=0x237a620*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f86dd8f, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3f86dd8f, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x41b7a976, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0xe4f)) returned 1 [0164.598] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0164.598] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\785445A5FF1777FD0EA02B65B10108B52E873145", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\785445A5FF1777FD0EA02B65B10108B52E873145", lpFilePart=0x0) returned 0x85 [0164.598] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0164.598] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\785445A5FF1777FD0EA02B65B10108B52E873145" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\785445a5ff1777fd0ea02b65b10108b52e873145"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0164.598] GetFileType (hFile=0x444) returned 0x1 [0164.598] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0164.598] GetFileType (hFile=0x444) returned 0x1 [0164.598] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xe4f [0164.598] ReadFile (in: hFile=0x444, lpBuffer=0x237b888, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x237b888*, lpNumberOfBytesRead=0x3be5c8*=0xe4f, lpOverlapped=0x0) returned 1 [0164.610] CloseHandle (hObject=0x444) returned 1 [0164.649] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\785445A5FF1777FD0EA02B65B10108B52E873145", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\785445A5FF1777FD0EA02B65B10108B52E873145", lpFilePart=0x0) returned 0x85 [0164.649] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0164.649] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\785445A5FF1777FD0EA02B65B10108B52E873145" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\785445a5ff1777fd0ea02b65b10108b52e873145"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0164.651] GetFileType (hFile=0x444) returned 0x1 [0164.651] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0164.651] GetFileType (hFile=0x444) returned 0x1 [0164.651] WriteFile (in: hFile=0x444, lpBuffer=0x21fa560*, nNumberOfBytesToWrite=0xe50, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x21fa560*, lpNumberOfBytesWritten=0x3be4d8*=0xe50, lpOverlapped=0x0) returned 1 [0164.651] CloseHandle (hObject=0x444) returned 1 [0164.651] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\785445A5FF1777FD0EA02B65B10108B52E873145", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\785445A5FF1777FD0EA02B65B10108B52E873145", lpFilePart=0x0) returned 0x85 [0164.652] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\785445A5FF1777FD0EA02B65B10108B52E873145.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\785445A5FF1777FD0EA02B65B10108B52E873145.xuy", lpFilePart=0x0) returned 0x89 [0164.652] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0164.652] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\785445A5FF1777FD0EA02B65B10108B52E873145" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\785445a5ff1777fd0ea02b65b10108b52e873145"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f86dd8f, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3f86dd8f, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x4dfbeef1, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xe50)) returned 1 [0164.652] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0164.652] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\785445A5FF1777FD0EA02B65B10108B52E873145" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\785445a5ff1777fd0ea02b65b10108b52e873145"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\785445A5FF1777FD0EA02B65B10108B52E873145.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\785445a5ff1777fd0ea02b65b10108b52e873145.xuy")) returned 1 [0164.653] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\788D679B0EF749BCC9E1D90D68CF10F4EAC25366", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\788D679B0EF749BCC9E1D90D68CF10F4EAC25366", lpFilePart=0x0) returned 0x85 [0164.653] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0164.653] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\788D679B0EF749BCC9E1D90D68CF10F4EAC25366" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\788d679b0ef749bcc9e1d90d68cf10f4eac25366"), fInfoLevelId=0x0, lpFileInformation=0x21fb920 | out: lpFileInformation=0x21fb920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3a6afaa, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xf3a6afaa, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0xf3a6d6ba, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x8dc)) returned 1 [0164.654] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0164.654] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\788D679B0EF749BCC9E1D90D68CF10F4EAC25366", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\788D679B0EF749BCC9E1D90D68CF10F4EAC25366", lpFilePart=0x0) returned 0x85 [0164.654] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0164.654] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\788D679B0EF749BCC9E1D90D68CF10F4EAC25366" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\788d679b0ef749bcc9e1d90d68cf10f4eac25366"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0164.654] GetFileType (hFile=0x444) returned 0x1 [0164.654] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0164.654] GetFileType (hFile=0x444) returned 0x1 [0164.654] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x8dc [0164.654] ReadFile (in: hFile=0x444, lpBuffer=0x21fc618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x21fc618*, lpNumberOfBytesRead=0x3be5c8*=0x8dc, lpOverlapped=0x0) returned 1 [0164.656] CloseHandle (hObject=0x444) returned 1 [0164.666] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\788D679B0EF749BCC9E1D90D68CF10F4EAC25366", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\788D679B0EF749BCC9E1D90D68CF10F4EAC25366", lpFilePart=0x0) returned 0x85 [0164.666] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0164.666] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\788D679B0EF749BCC9E1D90D68CF10F4EAC25366" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\788d679b0ef749bcc9e1d90d68cf10f4eac25366"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0164.668] GetFileType (hFile=0x444) returned 0x1 [0164.668] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0164.668] GetFileType (hFile=0x444) returned 0x1 [0164.668] WriteFile (in: hFile=0x444, lpBuffer=0x2276308*, nNumberOfBytesToWrite=0x8e0, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x2276308*, lpNumberOfBytesWritten=0x3be4d8*=0x8e0, lpOverlapped=0x0) returned 1 [0164.670] CloseHandle (hObject=0x444) returned 1 [0164.670] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\788D679B0EF749BCC9E1D90D68CF10F4EAC25366", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\788D679B0EF749BCC9E1D90D68CF10F4EAC25366", lpFilePart=0x0) returned 0x85 [0164.670] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\788D679B0EF749BCC9E1D90D68CF10F4EAC25366.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\788D679B0EF749BCC9E1D90D68CF10F4EAC25366.xuy", lpFilePart=0x0) returned 0x89 [0164.670] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0164.670] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\788D679B0EF749BCC9E1D90D68CF10F4EAC25366" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\788d679b0ef749bcc9e1d90d68cf10f4eac25366"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3a6afaa, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xf3a6afaa, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x4e00b343, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x8e0)) returned 1 [0164.670] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0164.670] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\788D679B0EF749BCC9E1D90D68CF10F4EAC25366" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\788d679b0ef749bcc9e1d90d68cf10f4eac25366"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\788D679B0EF749BCC9E1D90D68CF10F4EAC25366.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\788d679b0ef749bcc9e1d90d68cf10f4eac25366.xuy")) returned 1 [0164.672] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\78A520FE200DD59F7079043C2E4494D582DB5E27", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\78A520FE200DD59F7079043C2E4494D582DB5E27", lpFilePart=0x0) returned 0x85 [0164.672] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0164.672] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\78A520FE200DD59F7079043C2E4494D582DB5E27" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\78a520fe200dd59f7079043c2e4494d582db5e27"), fInfoLevelId=0x0, lpFileInformation=0x22776c8 | out: lpFileInformation=0x22776c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ef3c2df, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3ef3c2df, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x7d54f659, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x47da)) returned 1 [0164.672] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0164.672] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\78A520FE200DD59F7079043C2E4494D582DB5E27", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\78A520FE200DD59F7079043C2E4494D582DB5E27", lpFilePart=0x0) returned 0x85 [0164.672] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0164.672] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\78A520FE200DD59F7079043C2E4494D582DB5E27" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\78a520fe200dd59f7079043c2e4494d582db5e27"), fInfoLevelId=0x0, lpFileInformation=0x22778c8 | out: lpFileInformation=0x22778c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ef3c2df, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3ef3c2df, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x7d54f659, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x47da)) returned 1 [0164.672] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0164.672] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\78A520FE200DD59F7079043C2E4494D582DB5E27", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\78A520FE200DD59F7079043C2E4494D582DB5E27", lpFilePart=0x0) returned 0x85 [0164.672] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0164.672] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\78A520FE200DD59F7079043C2E4494D582DB5E27" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\78a520fe200dd59f7079043c2e4494d582db5e27"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0164.673] GetFileType (hFile=0x444) returned 0x1 [0164.673] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0164.673] GetFileType (hFile=0x444) returned 0x1 [0164.673] ReadFile (in: hFile=0x444, lpBuffer=0x2279df8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x2279df8*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0164.684] CloseHandle (hObject=0x444) returned 1 [0164.685] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\78A520FE200DD59F7079043C2E4494D582DB5E27", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\78A520FE200DD59F7079043C2E4494D582DB5E27", lpFilePart=0x0) returned 0x85 [0164.685] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0164.685] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\78A520FE200DD59F7079043C2E4494D582DB5E27" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\78a520fe200dd59f7079043c2e4494d582db5e27"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0164.685] GetFileType (hFile=0x444) returned 0x1 [0164.685] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0164.685] GetFileType (hFile=0x444) returned 0x1 [0164.685] WriteFile (in: hFile=0x444, lpBuffer=0x2277aa8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x2277aa8*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0164.685] CloseHandle (hObject=0x444) returned 1 [0164.686] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\78A520FE200DD59F7079043C2E4494D582DB5E27", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\78A520FE200DD59F7079043C2E4494D582DB5E27", lpFilePart=0x0) returned 0x85 [0164.686] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\78A520FE200DD59F7079043C2E4494D582DB5E27.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\78A520FE200DD59F7079043C2E4494D582DB5E27.xuy", lpFilePart=0x0) returned 0x89 [0164.686] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0164.686] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\78A520FE200DD59F7079043C2E4494D582DB5E27" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\78a520fe200dd59f7079043c2e4494d582db5e27"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ef3c2df, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3ef3c2df, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x4e0315af, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x47da)) returned 1 [0164.686] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0164.686] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\78A520FE200DD59F7079043C2E4494D582DB5E27" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\78a520fe200dd59f7079043c2e4494d582db5e27"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\78A520FE200DD59F7079043C2E4494D582DB5E27.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\78a520fe200dd59f7079043c2e4494d582db5e27.xuy")) returned 1 [0164.687] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\79122AC35356132F14E7AA3248B675B5BA972274", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\79122AC35356132F14E7AA3248B675B5BA972274", lpFilePart=0x0) returned 0x85 [0164.687] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0164.687] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\79122AC35356132F14E7AA3248B675B5BA972274" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\79122ac35356132f14e7aa3248b675b5ba972274"), fInfoLevelId=0x0, lpFileInformation=0x22f63a0 | out: lpFileInformation=0x22f63a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6159e1e8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x6159e1e8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x6159e1e8, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xdf8)) returned 1 [0164.687] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0164.687] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\79122AC35356132F14E7AA3248B675B5BA972274", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\79122AC35356132F14E7AA3248B675B5BA972274", lpFilePart=0x0) returned 0x85 [0164.687] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0164.687] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\79122AC35356132F14E7AA3248B675B5BA972274" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\79122ac35356132f14e7aa3248b675b5ba972274"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0164.687] GetFileType (hFile=0x444) returned 0x1 [0164.687] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0164.687] GetFileType (hFile=0x444) returned 0x1 [0164.688] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xdf8 [0164.688] ReadFile (in: hFile=0x444, lpBuffer=0x22f75b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x22f75b0*, lpNumberOfBytesRead=0x3be5c8*=0xdf8, lpOverlapped=0x0) returned 1 [0164.703] CloseHandle (hObject=0x444) returned 1 [0164.713] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\79122AC35356132F14E7AA3248B675B5BA972274", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\79122AC35356132F14E7AA3248B675B5BA972274", lpFilePart=0x0) returned 0x85 [0164.713] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0164.713] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\79122AC35356132F14E7AA3248B675B5BA972274" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\79122ac35356132f14e7aa3248b675b5ba972274"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0164.714] GetFileType (hFile=0x444) returned 0x1 [0164.714] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0164.714] GetFileType (hFile=0x444) returned 0x1 [0164.714] WriteFile (in: hFile=0x444, lpBuffer=0x2372c40*, nNumberOfBytesToWrite=0xe00, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x2372c40*, lpNumberOfBytesWritten=0x3be4d8*=0xe00, lpOverlapped=0x0) returned 1 [0164.725] CloseHandle (hObject=0x444) returned 1 [0164.725] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\79122AC35356132F14E7AA3248B675B5BA972274", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\79122AC35356132F14E7AA3248B675B5BA972274", lpFilePart=0x0) returned 0x85 [0164.726] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\79122AC35356132F14E7AA3248B675B5BA972274.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\79122AC35356132F14E7AA3248B675B5BA972274.xuy", lpFilePart=0x0) returned 0x89 [0164.726] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0164.726] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\79122AC35356132F14E7AA3248B675B5BA972274" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\79122ac35356132f14e7aa3248b675b5ba972274"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6159e1e8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x6159e1e8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x4e07da9c, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xe00)) returned 1 [0164.726] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0164.726] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\79122AC35356132F14E7AA3248B675B5BA972274" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\79122ac35356132f14e7aa3248b675b5ba972274"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\79122AC35356132F14E7AA3248B675B5BA972274.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\79122ac35356132f14e7aa3248b675b5ba972274.xuy")) returned 1 [0164.727] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\793B27BA59D8A7B2BA6678FEAB19C5DA43E97721", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\793B27BA59D8A7B2BA6678FEAB19C5DA43E97721", lpFilePart=0x0) returned 0x85 [0164.727] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0164.727] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\793B27BA59D8A7B2BA6678FEAB19C5DA43E97721" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\793b27ba59d8a7b2ba6678feab19c5da43e97721"), fInfoLevelId=0x0, lpFileInformation=0x2374000 | out: lpFileInformation=0x2374000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4efb7c2, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc4efb7c2, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xc4f6debd, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x206e)) returned 1 [0164.729] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0164.729] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\793B27BA59D8A7B2BA6678FEAB19C5DA43E97721", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\793B27BA59D8A7B2BA6678FEAB19C5DA43E97721", lpFilePart=0x0) returned 0x85 [0164.729] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0164.729] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\793B27BA59D8A7B2BA6678FEAB19C5DA43E97721" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\793b27ba59d8a7b2ba6678feab19c5da43e97721"), fInfoLevelId=0x0, lpFileInformation=0x2374200 | out: lpFileInformation=0x2374200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4efb7c2, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc4efb7c2, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xc4f6debd, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x206e)) returned 1 [0164.729] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0164.729] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\793B27BA59D8A7B2BA6678FEAB19C5DA43E97721", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\793B27BA59D8A7B2BA6678FEAB19C5DA43E97721", lpFilePart=0x0) returned 0x85 [0164.729] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0164.729] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\793B27BA59D8A7B2BA6678FEAB19C5DA43E97721" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\793b27ba59d8a7b2ba6678feab19c5da43e97721"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0164.730] GetFileType (hFile=0x444) returned 0x1 [0164.730] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0164.730] GetFileType (hFile=0x444) returned 0x1 [0164.730] ReadFile (in: hFile=0x444, lpBuffer=0x2376730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x2376730*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0164.773] CloseHandle (hObject=0x444) returned 1 [0164.773] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\793B27BA59D8A7B2BA6678FEAB19C5DA43E97721", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\793B27BA59D8A7B2BA6678FEAB19C5DA43E97721", lpFilePart=0x0) returned 0x85 [0164.773] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0164.773] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\793B27BA59D8A7B2BA6678FEAB19C5DA43E97721" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\793b27ba59d8a7b2ba6678feab19c5da43e97721"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0164.774] GetFileType (hFile=0x444) returned 0x1 [0164.774] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0164.774] GetFileType (hFile=0x444) returned 0x1 [0164.774] WriteFile (in: hFile=0x444, lpBuffer=0x21867e8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x21867e8*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0164.774] CloseHandle (hObject=0x444) returned 1 [0164.774] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\793B27BA59D8A7B2BA6678FEAB19C5DA43E97721", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\793B27BA59D8A7B2BA6678FEAB19C5DA43E97721", lpFilePart=0x0) returned 0x85 [0164.774] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\793B27BA59D8A7B2BA6678FEAB19C5DA43E97721.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\793B27BA59D8A7B2BA6678FEAB19C5DA43E97721.xuy", lpFilePart=0x0) returned 0x89 [0164.774] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0164.774] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\793B27BA59D8A7B2BA6678FEAB19C5DA43E97721" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\793b27ba59d8a7b2ba6678feab19c5da43e97721"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4efb7c2, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc4efb7c2, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x4e0f0169, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x206e)) returned 1 [0164.774] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0164.774] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\793B27BA59D8A7B2BA6678FEAB19C5DA43E97721" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\793b27ba59d8a7b2ba6678feab19c5da43e97721"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\793B27BA59D8A7B2BA6678FEAB19C5DA43E97721.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\793b27ba59d8a7b2ba6678feab19c5da43e97721.xuy")) returned 1 [0164.776] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\79495235F3219B3019A451820D1C43C06BFD4393", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\79495235F3219B3019A451820D1C43C06BFD4393", lpFilePart=0x0) returned 0x85 [0164.776] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0164.776] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\79495235F3219B3019A451820D1C43C06BFD4393" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\79495235f3219b3019a451820d1c43c06bfd4393"), fInfoLevelId=0x0, lpFileInformation=0x21f8138 | out: lpFileInformation=0x21f8138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c4d5c3d, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x3c4d5c3d, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x3c4d5c3d, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0x1267)) returned 1 [0164.776] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0164.776] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\79495235F3219B3019A451820D1C43C06BFD4393", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\79495235F3219B3019A451820D1C43C06BFD4393", lpFilePart=0x0) returned 0x85 [0164.776] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0164.776] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\79495235F3219B3019A451820D1C43C06BFD4393" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\79495235f3219b3019a451820d1c43c06bfd4393"), fInfoLevelId=0x0, lpFileInformation=0x21f8338 | out: lpFileInformation=0x21f8338*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c4d5c3d, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x3c4d5c3d, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x3c4d5c3d, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0x1267)) returned 1 [0164.776] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0164.776] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\79495235F3219B3019A451820D1C43C06BFD4393", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\79495235F3219B3019A451820D1C43C06BFD4393", lpFilePart=0x0) returned 0x85 [0164.776] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0164.776] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\79495235F3219B3019A451820D1C43C06BFD4393" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\79495235f3219b3019a451820d1c43c06bfd4393"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0164.777] GetFileType (hFile=0x444) returned 0x1 [0164.777] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0164.777] GetFileType (hFile=0x444) returned 0x1 [0164.777] ReadFile (in: hFile=0x444, lpBuffer=0x21fa868, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x21fa868*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0164.789] CloseHandle (hObject=0x444) returned 1 [0164.789] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\79495235F3219B3019A451820D1C43C06BFD4393", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\79495235F3219B3019A451820D1C43C06BFD4393", lpFilePart=0x0) returned 0x85 [0164.789] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0164.789] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\79495235F3219B3019A451820D1C43C06BFD4393" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\79495235f3219b3019a451820d1c43c06bfd4393"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0164.789] GetFileType (hFile=0x444) returned 0x1 [0164.790] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0164.790] GetFileType (hFile=0x444) returned 0x1 [0164.790] WriteFile (in: hFile=0x444, lpBuffer=0x21f8518*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x21f8518*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0164.790] CloseHandle (hObject=0x444) returned 1 [0164.790] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\79495235F3219B3019A451820D1C43C06BFD4393", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\79495235F3219B3019A451820D1C43C06BFD4393", lpFilePart=0x0) returned 0x85 [0164.790] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\79495235F3219B3019A451820D1C43C06BFD4393.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\79495235F3219B3019A451820D1C43C06BFD4393.xuy", lpFilePart=0x0) returned 0x89 [0164.790] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0164.790] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\79495235F3219B3019A451820D1C43C06BFD4393" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\79495235f3219b3019a451820d1c43c06bfd4393"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c4d5c3d, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x3c4d5c3d, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x4e1162e4, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0164.790] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0164.790] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\79495235F3219B3019A451820D1C43C06BFD4393" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\79495235f3219b3019a451820d1c43c06bfd4393"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\79495235F3219B3019A451820D1C43C06BFD4393.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\79495235f3219b3019a451820d1c43c06bfd4393.xuy")) returned 1 [0164.791] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\79F42694978874799A67708237EECF993F994146", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\79F42694978874799A67708237EECF993F994146", lpFilePart=0x0) returned 0x85 [0164.791] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0164.791] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\79F42694978874799A67708237EECF993F994146" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\79f42694978874799a67708237eecf993f994146"), fInfoLevelId=0x0, lpFileInformation=0x2276e10 | out: lpFileInformation=0x2276e10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8829b5a0, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x8829b5a0, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x8829dca6, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0xb71)) returned 1 [0164.792] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0164.792] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\79F42694978874799A67708237EECF993F994146", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\79F42694978874799A67708237EECF993F994146", lpFilePart=0x0) returned 0x85 [0164.792] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0164.792] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\79F42694978874799A67708237EECF993F994146" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\79f42694978874799a67708237eecf993f994146"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0164.792] GetFileType (hFile=0x444) returned 0x1 [0164.792] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0164.792] GetFileType (hFile=0x444) returned 0x1 [0164.792] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xb71 [0164.792] ReadFile (in: hFile=0x444, lpBuffer=0x2277da0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x2277da0*, lpNumberOfBytesRead=0x3be5c8*=0xb71, lpOverlapped=0x0) returned 1 [0164.815] CloseHandle (hObject=0x444) returned 1 [0164.825] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\79F42694978874799A67708237EECF993F994146", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\79F42694978874799A67708237EECF993F994146", lpFilePart=0x0) returned 0x85 [0164.825] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0164.825] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\79F42694978874799A67708237EECF993F994146" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\79f42694978874799a67708237eecf993f994146"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0164.827] GetFileType (hFile=0x444) returned 0x1 [0164.827] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0164.827] GetFileType (hFile=0x444) returned 0x1 [0164.827] WriteFile (in: hFile=0x444, lpBuffer=0x22f27b8*, nNumberOfBytesToWrite=0xb80, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x22f27b8*, lpNumberOfBytesWritten=0x3be4d8*=0xb80, lpOverlapped=0x0) returned 1 [0164.828] CloseHandle (hObject=0x444) returned 1 [0164.828] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\79F42694978874799A67708237EECF993F994146", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\79F42694978874799A67708237EECF993F994146", lpFilePart=0x0) returned 0x85 [0164.828] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\79F42694978874799A67708237EECF993F994146.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\79F42694978874799A67708237EECF993F994146.xuy", lpFilePart=0x0) returned 0x89 [0164.828] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0164.828] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\79F42694978874799A67708237EECF993F994146" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\79f42694978874799a67708237eecf993f994146"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8829b5a0, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x8829b5a0, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x4e188b50, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xb80)) returned 1 [0164.828] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0164.828] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\79F42694978874799A67708237EECF993F994146" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\79f42694978874799a67708237eecf993f994146"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\79F42694978874799A67708237EECF993F994146.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\79f42694978874799a67708237eecf993f994146.xuy")) returned 1 [0164.829] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7A1A1466465E81B4F3F17B7B1E323BC295511E34", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7A1A1466465E81B4F3F17B7B1E323BC295511E34", lpFilePart=0x0) returned 0x85 [0164.829] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0164.830] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7A1A1466465E81B4F3F17B7B1E323BC295511E34" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7a1a1466465e81b4f3f17b7b1e323bc295511e34"), fInfoLevelId=0x0, lpFileInformation=0x22f3b78 | out: lpFileInformation=0x22f3b78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46257681, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x46257681, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x46257681, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0x445)) returned 1 [0164.830] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0164.830] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7A1A1466465E81B4F3F17B7B1E323BC295511E34", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7A1A1466465E81B4F3F17B7B1E323BC295511E34", lpFilePart=0x0) returned 0x85 [0164.830] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0164.830] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7A1A1466465E81B4F3F17B7B1E323BC295511E34" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7a1a1466465e81b4f3f17b7b1e323bc295511e34"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0164.830] GetFileType (hFile=0x444) returned 0x1 [0164.830] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0164.830] GetFileType (hFile=0x444) returned 0x1 [0164.830] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x445 [0164.830] ReadFile (in: hFile=0x444, lpBuffer=0x22f43d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x22f43d8*, lpNumberOfBytesRead=0x3be5c8*=0x445, lpOverlapped=0x0) returned 1 [0164.978] CloseHandle (hObject=0x444) returned 1 [0164.994] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7A1A1466465E81B4F3F17B7B1E323BC295511E34", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7A1A1466465E81B4F3F17B7B1E323BC295511E34", lpFilePart=0x0) returned 0x85 [0164.994] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0164.994] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7A1A1466465E81B4F3F17B7B1E323BC295511E34" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7a1a1466465e81b4f3f17b7b1e323bc295511e34"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0164.996] GetFileType (hFile=0x444) returned 0x1 [0164.996] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0164.996] GetFileType (hFile=0x444) returned 0x1 [0164.996] WriteFile (in: hFile=0x444, lpBuffer=0x236ca00*, nNumberOfBytesToWrite=0x450, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x236ca00*, lpNumberOfBytesWritten=0x3be4d8*=0x450, lpOverlapped=0x0) returned 1 [0164.997] CloseHandle (hObject=0x444) returned 1 [0164.997] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7A1A1466465E81B4F3F17B7B1E323BC295511E34", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7A1A1466465E81B4F3F17B7B1E323BC295511E34", lpFilePart=0x0) returned 0x85 [0164.997] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7A1A1466465E81B4F3F17B7B1E323BC295511E34.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7A1A1466465E81B4F3F17B7B1E323BC295511E34.xuy", lpFilePart=0x0) returned 0x89 [0164.998] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0164.998] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7A1A1466465E81B4F3F17B7B1E323BC295511E34" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7a1a1466465e81b4f3f17b7b1e323bc295511e34"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46257681, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x46257681, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x4e32c6e1, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x450)) returned 1 [0164.998] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0164.998] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7A1A1466465E81B4F3F17B7B1E323BC295511E34" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7a1a1466465e81b4f3f17b7b1e323bc295511e34"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7A1A1466465E81B4F3F17B7B1E323BC295511E34.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7a1a1466465e81b4f3f17b7b1e323bc295511e34.xuy")) returned 1 [0164.999] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7A315F0F46ED849CE7A91455D41326BE0FBD8DF6", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7A315F0F46ED849CE7A91455D41326BE0FBD8DF6", lpFilePart=0x0) returned 0x85 [0164.999] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0164.999] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7A315F0F46ED849CE7A91455D41326BE0FBD8DF6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7a315f0f46ed849ce7a91455d41326be0fbd8df6"), fInfoLevelId=0x0, lpFileInformation=0x236ddc0 | out: lpFileInformation=0x236ddc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3be7fc7d, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3be7fc7d, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x3bf0fd6c, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x52a)) returned 1 [0165.000] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0165.000] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7A315F0F46ED849CE7A91455D41326BE0FBD8DF6", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7A315F0F46ED849CE7A91455D41326BE0FBD8DF6", lpFilePart=0x0) returned 0x85 [0165.000] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0165.000] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7A315F0F46ED849CE7A91455D41326BE0FBD8DF6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7a315f0f46ed849ce7a91455d41326be0fbd8df6"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0165.000] GetFileType (hFile=0x444) returned 0x1 [0165.000] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0165.000] GetFileType (hFile=0x444) returned 0x1 [0165.000] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x52a [0165.000] ReadFile (in: hFile=0x444, lpBuffer=0x236e708, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x236e708*, lpNumberOfBytesRead=0x3be5c8*=0x52a, lpOverlapped=0x0) returned 1 [0165.011] CloseHandle (hObject=0x444) returned 1 [0165.081] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7A315F0F46ED849CE7A91455D41326BE0FBD8DF6", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7A315F0F46ED849CE7A91455D41326BE0FBD8DF6", lpFilePart=0x0) returned 0x85 [0165.081] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0165.081] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7A315F0F46ED849CE7A91455D41326BE0FBD8DF6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7a315f0f46ed849ce7a91455d41326be0fbd8df6"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0165.083] GetFileType (hFile=0x444) returned 0x1 [0165.083] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0165.083] GetFileType (hFile=0x444) returned 0x1 [0165.083] WriteFile (in: hFile=0x444, lpBuffer=0x21e9cc8*, nNumberOfBytesToWrite=0x530, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x21e9cc8*, lpNumberOfBytesWritten=0x3be4d8*=0x530, lpOverlapped=0x0) returned 1 [0165.083] CloseHandle (hObject=0x444) returned 1 [0165.084] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7A315F0F46ED849CE7A91455D41326BE0FBD8DF6", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7A315F0F46ED849CE7A91455D41326BE0FBD8DF6", lpFilePart=0x0) returned 0x85 [0165.084] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7A315F0F46ED849CE7A91455D41326BE0FBD8DF6.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7A315F0F46ED849CE7A91455D41326BE0FBD8DF6.xuy", lpFilePart=0x0) returned 0x89 [0165.084] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0165.084] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7A315F0F46ED849CE7A91455D41326BE0FBD8DF6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7a315f0f46ed849ce7a91455d41326be0fbd8df6"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3be7fc7d, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3be7fc7d, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x4e3eb7f6, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x530)) returned 1 [0165.084] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0165.084] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7A315F0F46ED849CE7A91455D41326BE0FBD8DF6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7a315f0f46ed849ce7a91455d41326be0fbd8df6"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7A315F0F46ED849CE7A91455D41326BE0FBD8DF6.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7a315f0f46ed849ce7a91455d41326be0fbd8df6.xuy")) returned 1 [0165.085] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7A7B3AEA0BD15BF742C8652DAB7DD9291E6B44E3", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7A7B3AEA0BD15BF742C8652DAB7DD9291E6B44E3", lpFilePart=0x0) returned 0x85 [0165.085] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0165.085] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7A7B3AEA0BD15BF742C8652DAB7DD9291E6B44E3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7a7b3aea0bd15bf742c8652dab7dd9291e6b44e3"), fInfoLevelId=0x0, lpFileInformation=0x21eb088 | out: lpFileInformation=0x21eb088*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5eb98a46, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x5eb98a46, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x5eb98a46, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xc12)) returned 1 [0165.104] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0165.104] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7A7B3AEA0BD15BF742C8652DAB7DD9291E6B44E3", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7A7B3AEA0BD15BF742C8652DAB7DD9291E6B44E3", lpFilePart=0x0) returned 0x85 [0165.104] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0165.104] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7A7B3AEA0BD15BF742C8652DAB7DD9291E6B44E3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7a7b3aea0bd15bf742c8652dab7dd9291e6b44e3"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0165.105] GetFileType (hFile=0x444) returned 0x1 [0165.105] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0165.105] GetFileType (hFile=0x444) returned 0x1 [0165.105] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xc12 [0165.105] ReadFile (in: hFile=0x444, lpBuffer=0x21ec0b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x21ec0b8*, lpNumberOfBytesRead=0x3be5c8*=0xc12, lpOverlapped=0x0) returned 1 [0165.108] CloseHandle (hObject=0x444) returned 1 [0165.118] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7A7B3AEA0BD15BF742C8652DAB7DD9291E6B44E3", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7A7B3AEA0BD15BF742C8652DAB7DD9291E6B44E3", lpFilePart=0x0) returned 0x85 [0165.118] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0165.118] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7A7B3AEA0BD15BF742C8652DAB7DD9291E6B44E3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7a7b3aea0bd15bf742c8652dab7dd9291e6b44e3"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0165.120] GetFileType (hFile=0x444) returned 0x1 [0165.120] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0165.120] GetFileType (hFile=0x444) returned 0x1 [0165.120] WriteFile (in: hFile=0x444, lpBuffer=0x2266df0*, nNumberOfBytesToWrite=0xc20, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x2266df0*, lpNumberOfBytesWritten=0x3be4d8*=0xc20, lpOverlapped=0x0) returned 1 [0165.122] CloseHandle (hObject=0x444) returned 1 [0165.122] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7A7B3AEA0BD15BF742C8652DAB7DD9291E6B44E3", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7A7B3AEA0BD15BF742C8652DAB7DD9291E6B44E3", lpFilePart=0x0) returned 0x85 [0165.122] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7A7B3AEA0BD15BF742C8652DAB7DD9291E6B44E3.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7A7B3AEA0BD15BF742C8652DAB7DD9291E6B44E3.xuy", lpFilePart=0x0) returned 0x89 [0165.122] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0165.122] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7A7B3AEA0BD15BF742C8652DAB7DD9291E6B44E3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7a7b3aea0bd15bf742c8652dab7dd9291e6b44e3"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5eb98a46, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x5eb98a46, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x4e437e0a, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xc20)) returned 1 [0165.122] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0165.122] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7A7B3AEA0BD15BF742C8652DAB7DD9291E6B44E3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7a7b3aea0bd15bf742c8652dab7dd9291e6b44e3"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7A7B3AEA0BD15BF742C8652DAB7DD9291E6B44E3.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7a7b3aea0bd15bf742c8652dab7dd9291e6b44e3.xuy")) returned 1 [0165.184] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7A8D3A9360CC37F0AD80962D4AEA72B6D0F0B2B3", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7A8D3A9360CC37F0AD80962D4AEA72B6D0F0B2B3", lpFilePart=0x0) returned 0x85 [0165.184] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0165.184] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7A8D3A9360CC37F0AD80962D4AEA72B6D0F0B2B3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7a8d3a9360cc37f0ad80962d4aea72b6d0f0b2b3"), fInfoLevelId=0x0, lpFileInformation=0x22681b0 | out: lpFileInformation=0x22681b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41b7344a, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x41b7344a, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x41b7344a, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x105)) returned 1 [0165.185] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0165.185] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7A8D3A9360CC37F0AD80962D4AEA72B6D0F0B2B3", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7A8D3A9360CC37F0AD80962D4AEA72B6D0F0B2B3", lpFilePart=0x0) returned 0x85 [0165.185] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0165.185] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7A8D3A9360CC37F0AD80962D4AEA72B6D0F0B2B3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7a8d3a9360cc37f0ad80962d4aea72b6d0f0b2b3"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0165.185] GetFileType (hFile=0x444) returned 0x1 [0165.185] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0165.185] GetFileType (hFile=0x444) returned 0x1 [0165.185] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x105 [0165.185] ReadFile (in: hFile=0x444, lpBuffer=0x22686d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x22686d0*, lpNumberOfBytesRead=0x3be5c8*=0x105, lpOverlapped=0x0) returned 1 [0165.186] CloseHandle (hObject=0x444) returned 1 [0165.284] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7A8D3A9360CC37F0AD80962D4AEA72B6D0F0B2B3", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7A8D3A9360CC37F0AD80962D4AEA72B6D0F0B2B3", lpFilePart=0x0) returned 0x85 [0165.284] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0165.284] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7A8D3A9360CC37F0AD80962D4AEA72B6D0F0B2B3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7a8d3a9360cc37f0ad80962d4aea72b6d0f0b2b3"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0165.286] GetFileType (hFile=0x444) returned 0x1 [0165.286] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0165.286] GetFileType (hFile=0x444) returned 0x1 [0165.286] WriteFile (in: hFile=0x444, lpBuffer=0x22dfcb8*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x22dfcb8*, lpNumberOfBytesWritten=0x3be4d8*=0x110, lpOverlapped=0x0) returned 1 [0165.287] CloseHandle (hObject=0x444) returned 1 [0165.287] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7A8D3A9360CC37F0AD80962D4AEA72B6D0F0B2B3", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7A8D3A9360CC37F0AD80962D4AEA72B6D0F0B2B3", lpFilePart=0x0) returned 0x85 [0165.287] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7A8D3A9360CC37F0AD80962D4AEA72B6D0F0B2B3.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7A8D3A9360CC37F0AD80962D4AEA72B6D0F0B2B3.xuy", lpFilePart=0x0) returned 0x89 [0165.287] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0165.287] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7A8D3A9360CC37F0AD80962D4AEA72B6D0F0B2B3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7a8d3a9360cc37f0ad80962d4aea72b6d0f0b2b3"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41b7344a, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x41b7344a, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x4e5daf7e, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x110)) returned 1 [0165.287] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0165.287] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7A8D3A9360CC37F0AD80962D4AEA72B6D0F0B2B3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7a8d3a9360cc37f0ad80962d4aea72b6d0f0b2b3"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7A8D3A9360CC37F0AD80962D4AEA72B6D0F0B2B3.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7a8d3a9360cc37f0ad80962d4aea72b6d0f0b2b3.xuy")) returned 1 [0165.288] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7A93EF828A8C217F3A12A7AF2896C1EA3EA58080", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7A93EF828A8C217F3A12A7AF2896C1EA3EA58080", lpFilePart=0x0) returned 0x85 [0165.289] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0165.289] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7A93EF828A8C217F3A12A7AF2896C1EA3EA58080" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7a93ef828a8c217f3a12a7af2896c1ea3ea58080"), fInfoLevelId=0x0, lpFileInformation=0x22e1078 | out: lpFileInformation=0x22e1078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4244604, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xf4244604, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0xf4246d07, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0xb7fd)) returned 1 [0165.326] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0165.326] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7A93EF828A8C217F3A12A7AF2896C1EA3EA58080", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7A93EF828A8C217F3A12A7AF2896C1EA3EA58080", lpFilePart=0x0) returned 0x85 [0165.327] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0165.327] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7A93EF828A8C217F3A12A7AF2896C1EA3EA58080" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7a93ef828a8c217f3a12a7af2896c1ea3ea58080"), fInfoLevelId=0x0, lpFileInformation=0x22e1278 | out: lpFileInformation=0x22e1278*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4244604, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xf4244604, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0xf4246d07, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0xb7fd)) returned 1 [0165.327] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0165.327] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7A93EF828A8C217F3A12A7AF2896C1EA3EA58080", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7A93EF828A8C217F3A12A7AF2896C1EA3EA58080", lpFilePart=0x0) returned 0x85 [0165.327] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0165.327] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7A93EF828A8C217F3A12A7AF2896C1EA3EA58080" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7a93ef828a8c217f3a12a7af2896c1ea3ea58080"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0165.328] GetFileType (hFile=0x444) returned 0x1 [0165.328] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0165.328] GetFileType (hFile=0x444) returned 0x1 [0165.328] ReadFile (in: hFile=0x444, lpBuffer=0x22e37a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x22e37a8*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0165.374] CloseHandle (hObject=0x444) returned 1 [0165.374] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7A93EF828A8C217F3A12A7AF2896C1EA3EA58080", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7A93EF828A8C217F3A12A7AF2896C1EA3EA58080", lpFilePart=0x0) returned 0x85 [0165.374] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0165.374] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7A93EF828A8C217F3A12A7AF2896C1EA3EA58080" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7a93ef828a8c217f3a12a7af2896c1ea3ea58080"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0165.375] GetFileType (hFile=0x444) returned 0x1 [0165.375] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0165.375] GetFileType (hFile=0x444) returned 0x1 [0165.375] WriteFile (in: hFile=0x444, lpBuffer=0x22e1458*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x22e1458*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0165.375] CloseHandle (hObject=0x444) returned 1 [0165.375] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7A93EF828A8C217F3A12A7AF2896C1EA3EA58080", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7A93EF828A8C217F3A12A7AF2896C1EA3EA58080", lpFilePart=0x0) returned 0x85 [0165.375] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7A93EF828A8C217F3A12A7AF2896C1EA3EA58080.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7A93EF828A8C217F3A12A7AF2896C1EA3EA58080.xuy", lpFilePart=0x0) returned 0x89 [0165.375] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0165.375] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7A93EF828A8C217F3A12A7AF2896C1EA3EA58080" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7a93ef828a8c217f3a12a7af2896c1ea3ea58080"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4244604, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xf4244604, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x4e6bfda7, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xb7fd)) returned 1 [0165.375] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0165.375] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7A93EF828A8C217F3A12A7AF2896C1EA3EA58080" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7a93ef828a8c217f3a12a7af2896c1ea3ea58080"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7A93EF828A8C217F3A12A7AF2896C1EA3EA58080.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7a93ef828a8c217f3a12a7af2896c1ea3ea58080.xuy")) returned 1 [0165.377] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7B2118CB15DE60985B2F5A4B0A54FF4D177BD7F2", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7B2118CB15DE60985B2F5A4B0A54FF4D177BD7F2", lpFilePart=0x0) returned 0x85 [0165.377] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0165.377] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7B2118CB15DE60985B2F5A4B0A54FF4D177BD7F2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7b2118cb15de60985b2f5a4b0a54ff4d177bd7f2"), fInfoLevelId=0x0, lpFileInformation=0x235fd50 | out: lpFileInformation=0x235fd50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87969b02, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x87969b02, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x8796c217, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0xfde)) returned 1 [0165.377] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0165.377] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7B2118CB15DE60985B2F5A4B0A54FF4D177BD7F2", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7B2118CB15DE60985B2F5A4B0A54FF4D177BD7F2", lpFilePart=0x0) returned 0x85 [0165.377] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0165.377] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7B2118CB15DE60985B2F5A4B0A54FF4D177BD7F2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7b2118cb15de60985b2f5a4b0a54ff4d177bd7f2"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0165.377] GetFileType (hFile=0x444) returned 0x1 [0165.377] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0165.377] GetFileType (hFile=0x444) returned 0x1 [0165.377] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xfde [0165.377] ReadFile (in: hFile=0x444, lpBuffer=0x2361148, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x2361148*, lpNumberOfBytesRead=0x3be5c8*=0xfde, lpOverlapped=0x0) returned 1 [0165.386] CloseHandle (hObject=0x444) returned 1 [0165.450] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7B2118CB15DE60985B2F5A4B0A54FF4D177BD7F2", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7B2118CB15DE60985B2F5A4B0A54FF4D177BD7F2", lpFilePart=0x0) returned 0x85 [0165.450] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0165.450] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7B2118CB15DE60985B2F5A4B0A54FF4D177BD7F2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7b2118cb15de60985b2f5a4b0a54ff4d177bd7f2"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0165.452] GetFileType (hFile=0x444) returned 0x1 [0165.452] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0165.452] GetFileType (hFile=0x444) returned 0x1 [0165.452] WriteFile (in: hFile=0x444, lpBuffer=0x21ddc28*, nNumberOfBytesToWrite=0xfe0, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x21ddc28*, lpNumberOfBytesWritten=0x3be4d8*=0xfe0, lpOverlapped=0x0) returned 1 [0165.453] CloseHandle (hObject=0x444) returned 1 [0165.453] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7B2118CB15DE60985B2F5A4B0A54FF4D177BD7F2", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7B2118CB15DE60985B2F5A4B0A54FF4D177BD7F2", lpFilePart=0x0) returned 0x85 [0165.453] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7B2118CB15DE60985B2F5A4B0A54FF4D177BD7F2.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7B2118CB15DE60985B2F5A4B0A54FF4D177BD7F2.xuy", lpFilePart=0x0) returned 0x89 [0165.453] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0165.453] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7B2118CB15DE60985B2F5A4B0A54FF4D177BD7F2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7b2118cb15de60985b2f5a4b0a54ff4d177bd7f2"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87969b02, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x87969b02, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x4e77e93c, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xfe0)) returned 1 [0165.454] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0165.454] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7B2118CB15DE60985B2F5A4B0A54FF4D177BD7F2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7b2118cb15de60985b2f5a4b0a54ff4d177bd7f2"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7B2118CB15DE60985B2F5A4B0A54FF4D177BD7F2.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7b2118cb15de60985b2f5a4b0a54ff4d177bd7f2.xuy")) returned 1 [0165.455] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7BA99981D9CFABDE0D8A629A068D5C4B067AFF15", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7BA99981D9CFABDE0D8A629A068D5C4B067AFF15", lpFilePart=0x0) returned 0x85 [0165.455] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0165.455] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7BA99981D9CFABDE0D8A629A068D5C4B067AFF15" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7ba99981d9cfabde0d8a629a068d5c4b067aff15"), fInfoLevelId=0x0, lpFileInformation=0x21defe8 | out: lpFileInformation=0x21defe8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7bb7c40b, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x7bb7c40b, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x812aaa19, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x206a)) returned 1 [0165.455] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0165.455] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7BA99981D9CFABDE0D8A629A068D5C4B067AFF15", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7BA99981D9CFABDE0D8A629A068D5C4B067AFF15", lpFilePart=0x0) returned 0x85 [0165.455] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0165.455] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7BA99981D9CFABDE0D8A629A068D5C4B067AFF15" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7ba99981d9cfabde0d8a629a068d5c4b067aff15"), fInfoLevelId=0x0, lpFileInformation=0x21df1e8 | out: lpFileInformation=0x21df1e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7bb7c40b, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x7bb7c40b, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x812aaa19, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x206a)) returned 1 [0165.455] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0165.455] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7BA99981D9CFABDE0D8A629A068D5C4B067AFF15", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7BA99981D9CFABDE0D8A629A068D5C4B067AFF15", lpFilePart=0x0) returned 0x85 [0165.455] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0165.456] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7BA99981D9CFABDE0D8A629A068D5C4B067AFF15" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7ba99981d9cfabde0d8a629a068d5c4b067aff15"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0165.456] GetFileType (hFile=0x444) returned 0x1 [0165.456] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0165.457] GetFileType (hFile=0x444) returned 0x1 [0165.457] ReadFile (in: hFile=0x444, lpBuffer=0x21e1718, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x21e1718*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0165.469] CloseHandle (hObject=0x444) returned 1 [0165.469] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7BA99981D9CFABDE0D8A629A068D5C4B067AFF15", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7BA99981D9CFABDE0D8A629A068D5C4B067AFF15", lpFilePart=0x0) returned 0x85 [0165.469] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0165.469] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7BA99981D9CFABDE0D8A629A068D5C4B067AFF15" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7ba99981d9cfabde0d8a629a068d5c4b067aff15"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0165.469] GetFileType (hFile=0x444) returned 0x1 [0165.469] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0165.469] GetFileType (hFile=0x444) returned 0x1 [0165.469] WriteFile (in: hFile=0x444, lpBuffer=0x21df3c8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x21df3c8*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0165.470] CloseHandle (hObject=0x444) returned 1 [0165.470] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7BA99981D9CFABDE0D8A629A068D5C4B067AFF15", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7BA99981D9CFABDE0D8A629A068D5C4B067AFF15", lpFilePart=0x0) returned 0x85 [0165.470] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7BA99981D9CFABDE0D8A629A068D5C4B067AFF15.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7BA99981D9CFABDE0D8A629A068D5C4B067AFF15.xuy", lpFilePart=0x0) returned 0x89 [0165.470] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0165.470] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7BA99981D9CFABDE0D8A629A068D5C4B067AFF15" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7ba99981d9cfabde0d8a629a068d5c4b067aff15"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7bb7c40b, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x7bb7c40b, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x4e7a4e8f, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x206a)) returned 1 [0165.470] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0165.470] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7BA99981D9CFABDE0D8A629A068D5C4B067AFF15" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7ba99981d9cfabde0d8a629a068d5c4b067aff15"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7BA99981D9CFABDE0D8A629A068D5C4B067AFF15.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7ba99981d9cfabde0d8a629a068d5c4b067aff15.xuy")) returned 1 [0165.471] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7BC5C2025F544E50B3DE3549ADA4AA613D5C7842", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7BC5C2025F544E50B3DE3549ADA4AA613D5C7842", lpFilePart=0x0) returned 0x85 [0165.472] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0165.472] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7BC5C2025F544E50B3DE3549ADA4AA613D5C7842" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7bc5c2025f544e50b3de3549ada4aa613d5c7842"), fInfoLevelId=0x0, lpFileInformation=0x225dcc0 | out: lpFileInformation=0x225dcc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcfb70d26, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xcfb70d26, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0xcfb70d26, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x2ca66)) returned 1 [0165.472] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0165.472] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7BC5C2025F544E50B3DE3549ADA4AA613D5C7842", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7BC5C2025F544E50B3DE3549ADA4AA613D5C7842", lpFilePart=0x0) returned 0x85 [0165.472] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0165.472] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7BC5C2025F544E50B3DE3549ADA4AA613D5C7842" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7bc5c2025f544e50b3de3549ada4aa613d5c7842"), fInfoLevelId=0x0, lpFileInformation=0x225dec0 | out: lpFileInformation=0x225dec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcfb70d26, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xcfb70d26, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0xcfb70d26, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x2ca66)) returned 1 [0165.472] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0165.472] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7BC5C2025F544E50B3DE3549ADA4AA613D5C7842", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7BC5C2025F544E50B3DE3549ADA4AA613D5C7842", lpFilePart=0x0) returned 0x85 [0165.472] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0165.472] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7BC5C2025F544E50B3DE3549ADA4AA613D5C7842" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7bc5c2025f544e50b3de3549ada4aa613d5c7842"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0165.473] GetFileType (hFile=0x444) returned 0x1 [0165.473] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0165.473] GetFileType (hFile=0x444) returned 0x1 [0165.473] ReadFile (in: hFile=0x444, lpBuffer=0x22603f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x22603f0*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0165.602] CloseHandle (hObject=0x444) returned 1 [0165.602] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7BC5C2025F544E50B3DE3549ADA4AA613D5C7842", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7BC5C2025F544E50B3DE3549ADA4AA613D5C7842", lpFilePart=0x0) returned 0x85 [0165.602] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0165.602] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7BC5C2025F544E50B3DE3549ADA4AA613D5C7842" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7bc5c2025f544e50b3de3549ada4aa613d5c7842"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0165.603] GetFileType (hFile=0x444) returned 0x1 [0165.603] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0165.603] GetFileType (hFile=0x444) returned 0x1 [0165.603] WriteFile (in: hFile=0x444, lpBuffer=0x225e0a0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x225e0a0*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0165.603] CloseHandle (hObject=0x444) returned 1 [0165.603] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7BC5C2025F544E50B3DE3549ADA4AA613D5C7842", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7BC5C2025F544E50B3DE3549ADA4AA613D5C7842", lpFilePart=0x0) returned 0x85 [0165.603] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7BC5C2025F544E50B3DE3549ADA4AA613D5C7842.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7BC5C2025F544E50B3DE3549ADA4AA613D5C7842.xuy", lpFilePart=0x0) returned 0x89 [0165.603] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0165.603] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7BC5C2025F544E50B3DE3549ADA4AA613D5C7842" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7bc5c2025f544e50b3de3549ada4aa613d5c7842"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcfb70d26, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xcfb70d26, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x4e8d5efa, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2ca66)) returned 1 [0165.603] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0165.603] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7BC5C2025F544E50B3DE3549ADA4AA613D5C7842" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7bc5c2025f544e50b3de3549ada4aa613d5c7842"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7BC5C2025F544E50B3DE3549ADA4AA613D5C7842.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7bc5c2025f544e50b3de3549ada4aa613d5c7842.xuy")) returned 1 [0165.605] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7C0135458BD7055C44A6FC5595953EC97AE2564C", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7C0135458BD7055C44A6FC5595953EC97AE2564C", lpFilePart=0x0) returned 0x85 [0165.605] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0165.605] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7C0135458BD7055C44A6FC5595953EC97AE2564C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7c0135458bd7055c44a6fc5595953ec97ae2564c"), fInfoLevelId=0x0, lpFileInformation=0x22dc998 | out: lpFileInformation=0x22dc998*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c168768, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3c168768, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xdd981081, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x235a)) returned 1 [0165.613] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0165.613] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7C0135458BD7055C44A6FC5595953EC97AE2564C", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7C0135458BD7055C44A6FC5595953EC97AE2564C", lpFilePart=0x0) returned 0x85 [0165.613] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0165.613] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7C0135458BD7055C44A6FC5595953EC97AE2564C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7c0135458bd7055c44a6fc5595953ec97ae2564c"), fInfoLevelId=0x0, lpFileInformation=0x22dcb98 | out: lpFileInformation=0x22dcb98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c168768, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3c168768, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xdd981081, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x235a)) returned 1 [0165.613] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0165.613] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7C0135458BD7055C44A6FC5595953EC97AE2564C", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7C0135458BD7055C44A6FC5595953EC97AE2564C", lpFilePart=0x0) returned 0x85 [0165.613] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0165.613] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7C0135458BD7055C44A6FC5595953EC97AE2564C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7c0135458bd7055c44a6fc5595953ec97ae2564c"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0165.614] GetFileType (hFile=0x444) returned 0x1 [0165.614] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0165.614] GetFileType (hFile=0x444) returned 0x1 [0165.614] ReadFile (in: hFile=0x444, lpBuffer=0x22df0c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x22df0c8*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0165.632] CloseHandle (hObject=0x444) returned 1 [0165.632] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7C0135458BD7055C44A6FC5595953EC97AE2564C", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7C0135458BD7055C44A6FC5595953EC97AE2564C", lpFilePart=0x0) returned 0x85 [0165.632] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0165.632] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7C0135458BD7055C44A6FC5595953EC97AE2564C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7c0135458bd7055c44a6fc5595953ec97ae2564c"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0165.633] GetFileType (hFile=0x444) returned 0x1 [0165.633] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0165.633] GetFileType (hFile=0x444) returned 0x1 [0165.633] WriteFile (in: hFile=0x444, lpBuffer=0x22dcd78*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x22dcd78*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0165.633] CloseHandle (hObject=0x444) returned 1 [0165.633] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7C0135458BD7055C44A6FC5595953EC97AE2564C", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7C0135458BD7055C44A6FC5595953EC97AE2564C", lpFilePart=0x0) returned 0x85 [0165.633] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7C0135458BD7055C44A6FC5595953EC97AE2564C.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7C0135458BD7055C44A6FC5595953EC97AE2564C.xuy", lpFilePart=0x0) returned 0x89 [0165.633] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0165.633] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7C0135458BD7055C44A6FC5595953EC97AE2564C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7c0135458bd7055c44a6fc5595953ec97ae2564c"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c168768, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3c168768, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x4e92215f, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x235a)) returned 1 [0165.634] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0165.634] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7C0135458BD7055C44A6FC5595953EC97AE2564C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7c0135458bd7055c44a6fc5595953ec97ae2564c"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7C0135458BD7055C44A6FC5595953EC97AE2564C.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7c0135458bd7055c44a6fc5595953ec97ae2564c.xuy")) returned 1 [0165.635] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7D085640CA3ACCA510CD84959D65912BDC5E033D", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7D085640CA3ACCA510CD84959D65912BDC5E033D", lpFilePart=0x0) returned 0x85 [0165.635] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0165.635] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7D085640CA3ACCA510CD84959D65912BDC5E033D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7d085640ca3acca510cd84959d65912bdc5e033d"), fInfoLevelId=0x0, lpFileInformation=0x235b670 | out: lpFileInformation=0x235b670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x881dce94, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x881dce94, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x881e1cc0, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x528)) returned 1 [0165.635] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0165.635] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7D085640CA3ACCA510CD84959D65912BDC5E033D", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7D085640CA3ACCA510CD84959D65912BDC5E033D", lpFilePart=0x0) returned 0x85 [0165.635] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0165.635] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7D085640CA3ACCA510CD84959D65912BDC5E033D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7d085640ca3acca510cd84959d65912bdc5e033d"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0165.635] GetFileType (hFile=0x444) returned 0x1 [0165.635] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0165.635] GetFileType (hFile=0x444) returned 0x1 [0165.635] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x528 [0165.635] ReadFile (in: hFile=0x444, lpBuffer=0x235bfb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x235bfb0*, lpNumberOfBytesRead=0x3be5c8*=0x528, lpOverlapped=0x0) returned 1 [0165.637] CloseHandle (hObject=0x444) returned 1 [0165.680] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7D085640CA3ACCA510CD84959D65912BDC5E033D", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7D085640CA3ACCA510CD84959D65912BDC5E033D", lpFilePart=0x0) returned 0x85 [0165.680] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0165.680] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7D085640CA3ACCA510CD84959D65912BDC5E033D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7d085640ca3acca510cd84959d65912bdc5e033d"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0165.682] GetFileType (hFile=0x444) returned 0x1 [0165.682] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0165.682] GetFileType (hFile=0x444) returned 0x1 [0165.682] WriteFile (in: hFile=0x444, lpBuffer=0x21d3f80*, nNumberOfBytesToWrite=0x530, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x21d3f80*, lpNumberOfBytesWritten=0x3be4d8*=0x530, lpOverlapped=0x0) returned 1 [0165.683] CloseHandle (hObject=0x444) returned 1 [0165.683] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7D085640CA3ACCA510CD84959D65912BDC5E033D", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7D085640CA3ACCA510CD84959D65912BDC5E033D", lpFilePart=0x0) returned 0x85 [0165.683] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7D085640CA3ACCA510CD84959D65912BDC5E033D.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7D085640CA3ACCA510CD84959D65912BDC5E033D.xuy", lpFilePart=0x0) returned 0x89 [0165.683] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0165.683] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7D085640CA3ACCA510CD84959D65912BDC5E033D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7d085640ca3acca510cd84959d65912bdc5e033d"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x881dce94, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x881dce94, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x4e994b3e, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x530)) returned 1 [0165.683] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0165.683] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7D085640CA3ACCA510CD84959D65912BDC5E033D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7d085640ca3acca510cd84959d65912bdc5e033d"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7D085640CA3ACCA510CD84959D65912BDC5E033D.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7d085640ca3acca510cd84959d65912bdc5e033d.xuy")) returned 1 [0165.685] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7D92B4388F8E6B32F40E02B9DD20CA3D76209F4A", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7D92B4388F8E6B32F40E02B9DD20CA3D76209F4A", lpFilePart=0x0) returned 0x85 [0165.685] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0165.685] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7D92B4388F8E6B32F40E02B9DD20CA3D76209F4A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7d92b4388f8e6b32f40e02b9dd20ca3d76209f4a"), fInfoLevelId=0x0, lpFileInformation=0x21d5340 | out: lpFileInformation=0x21d5340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4739fda, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xf4739fda, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0xf473c6ca, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x34c1)) returned 1 [0165.702] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0165.702] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7D92B4388F8E6B32F40E02B9DD20CA3D76209F4A", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7D92B4388F8E6B32F40E02B9DD20CA3D76209F4A", lpFilePart=0x0) returned 0x85 [0165.702] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0165.702] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7D92B4388F8E6B32F40E02B9DD20CA3D76209F4A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7d92b4388f8e6b32f40e02b9dd20ca3d76209f4a"), fInfoLevelId=0x0, lpFileInformation=0x21d5540 | out: lpFileInformation=0x21d5540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4739fda, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xf4739fda, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0xf473c6ca, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x34c1)) returned 1 [0165.702] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0165.703] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7D92B4388F8E6B32F40E02B9DD20CA3D76209F4A", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7D92B4388F8E6B32F40E02B9DD20CA3D76209F4A", lpFilePart=0x0) returned 0x85 [0165.703] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0165.703] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7D92B4388F8E6B32F40E02B9DD20CA3D76209F4A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7d92b4388f8e6b32f40e02b9dd20ca3d76209f4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0165.704] GetFileType (hFile=0x444) returned 0x1 [0165.704] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0165.704] GetFileType (hFile=0x444) returned 0x1 [0165.704] ReadFile (in: hFile=0x444, lpBuffer=0x21d7a70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x21d7a70*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0165.728] CloseHandle (hObject=0x444) returned 1 [0165.728] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7D92B4388F8E6B32F40E02B9DD20CA3D76209F4A", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7D92B4388F8E6B32F40E02B9DD20CA3D76209F4A", lpFilePart=0x0) returned 0x85 [0165.728] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0165.728] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7D92B4388F8E6B32F40E02B9DD20CA3D76209F4A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7d92b4388f8e6b32f40e02b9dd20ca3d76209f4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0165.729] GetFileType (hFile=0x444) returned 0x1 [0165.729] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0165.729] GetFileType (hFile=0x444) returned 0x1 [0165.729] WriteFile (in: hFile=0x444, lpBuffer=0x21d5720*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x21d5720*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0165.729] CloseHandle (hObject=0x444) returned 1 [0165.729] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7D92B4388F8E6B32F40E02B9DD20CA3D76209F4A", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7D92B4388F8E6B32F40E02B9DD20CA3D76209F4A", lpFilePart=0x0) returned 0x85 [0165.729] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7D92B4388F8E6B32F40E02B9DD20CA3D76209F4A.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7D92B4388F8E6B32F40E02B9DD20CA3D76209F4A.xuy", lpFilePart=0x0) returned 0x89 [0165.729] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0165.729] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7D92B4388F8E6B32F40E02B9DD20CA3D76209F4A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7d92b4388f8e6b32f40e02b9dd20ca3d76209f4a"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4739fda, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xf4739fda, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x4ea0710d, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x34c1)) returned 1 [0165.729] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0165.730] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7D92B4388F8E6B32F40E02B9DD20CA3D76209F4A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7d92b4388f8e6b32f40e02b9dd20ca3d76209f4a"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7D92B4388F8E6B32F40E02B9DD20CA3D76209F4A.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7d92b4388f8e6b32f40e02b9dd20ca3d76209f4a.xuy")) returned 1 [0165.731] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7DC89B7400C4C6B5AC1000C69DB6591A4EA8244E", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7DC89B7400C4C6B5AC1000C69DB6591A4EA8244E", lpFilePart=0x0) returned 0x85 [0165.731] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0165.731] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7DC89B7400C4C6B5AC1000C69DB6591A4EA8244E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7dc89b7400c4c6b5ac1000c69db6591a4ea8244e"), fInfoLevelId=0x0, lpFileInformation=0x2254018 | out: lpFileInformation=0x2254018*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0a705c9, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xf0a705c9, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0xf0a705c9, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x528)) returned 1 [0165.731] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0165.731] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7DC89B7400C4C6B5AC1000C69DB6591A4EA8244E", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7DC89B7400C4C6B5AC1000C69DB6591A4EA8244E", lpFilePart=0x0) returned 0x85 [0165.731] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0165.731] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7DC89B7400C4C6B5AC1000C69DB6591A4EA8244E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7dc89b7400c4c6b5ac1000c69db6591a4ea8244e"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0165.731] GetFileType (hFile=0x444) returned 0x1 [0165.731] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0165.731] GetFileType (hFile=0x444) returned 0x1 [0165.732] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x528 [0165.732] ReadFile (in: hFile=0x444, lpBuffer=0x2254958, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x2254958*, lpNumberOfBytesRead=0x3be5c8*=0x528, lpOverlapped=0x0) returned 1 [0165.733] CloseHandle (hObject=0x444) returned 1 [0165.743] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7DC89B7400C4C6B5AC1000C69DB6591A4EA8244E", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7DC89B7400C4C6B5AC1000C69DB6591A4EA8244E", lpFilePart=0x0) returned 0x85 [0165.743] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0165.743] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7DC89B7400C4C6B5AC1000C69DB6591A4EA8244E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7dc89b7400c4c6b5ac1000c69db6591a4ea8244e"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0165.745] GetFileType (hFile=0x444) returned 0x1 [0165.745] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0165.745] GetFileType (hFile=0x444) returned 0x1 [0165.745] WriteFile (in: hFile=0x444, lpBuffer=0x22cd3d8*, nNumberOfBytesToWrite=0x530, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x22cd3d8*, lpNumberOfBytesWritten=0x3be4d8*=0x530, lpOverlapped=0x0) returned 1 [0165.746] CloseHandle (hObject=0x444) returned 1 [0165.746] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7DC89B7400C4C6B5AC1000C69DB6591A4EA8244E", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7DC89B7400C4C6B5AC1000C69DB6591A4EA8244E", lpFilePart=0x0) returned 0x85 [0165.746] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7DC89B7400C4C6B5AC1000C69DB6591A4EA8244E.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7DC89B7400C4C6B5AC1000C69DB6591A4EA8244E.xuy", lpFilePart=0x0) returned 0x89 [0165.746] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0165.746] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7DC89B7400C4C6B5AC1000C69DB6591A4EA8244E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7dc89b7400c4c6b5ac1000c69db6591a4ea8244e"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0a705c9, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xf0a705c9, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x4ea2d333, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x530)) returned 1 [0165.746] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0165.746] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7DC89B7400C4C6B5AC1000C69DB6591A4EA8244E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7dc89b7400c4c6b5ac1000c69db6591a4ea8244e"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7DC89B7400C4C6B5AC1000C69DB6591A4EA8244E.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7dc89b7400c4c6b5ac1000c69db6591a4ea8244e.xuy")) returned 1 [0165.749] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7E6A4DDD6EBE916C46924CED08FC10C7E58A9A59", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7E6A4DDD6EBE916C46924CED08FC10C7E58A9A59", lpFilePart=0x0) returned 0x85 [0165.749] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0165.749] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7E6A4DDD6EBE916C46924CED08FC10C7E58A9A59" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7e6a4ddd6ebe916c46924ced08fc10c7e58a9a59"), fInfoLevelId=0x0, lpFileInformation=0x22ce798 | out: lpFileInformation=0x22ce798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x870295ff, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x870295ff, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x8702bd1f, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x8ff)) returned 1 [0165.749] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0165.749] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7E6A4DDD6EBE916C46924CED08FC10C7E58A9A59", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7E6A4DDD6EBE916C46924CED08FC10C7E58A9A59", lpFilePart=0x0) returned 0x85 [0165.749] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0165.749] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7E6A4DDD6EBE916C46924CED08FC10C7E58A9A59" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7e6a4ddd6ebe916c46924ced08fc10c7e58a9a59"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0165.749] GetFileType (hFile=0x444) returned 0x1 [0165.750] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0165.750] GetFileType (hFile=0x444) returned 0x1 [0165.750] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x8ff [0165.750] ReadFile (in: hFile=0x444, lpBuffer=0x22cf4b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x22cf4b0*, lpNumberOfBytesRead=0x3be5c8*=0x8ff, lpOverlapped=0x0) returned 1 [0165.762] CloseHandle (hObject=0x444) returned 1 [0165.773] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7E6A4DDD6EBE916C46924CED08FC10C7E58A9A59", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7E6A4DDD6EBE916C46924CED08FC10C7E58A9A59", lpFilePart=0x0) returned 0x85 [0165.773] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0165.773] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7E6A4DDD6EBE916C46924CED08FC10C7E58A9A59" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7e6a4ddd6ebe916c46924ced08fc10c7e58a9a59"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0165.774] GetFileType (hFile=0x444) returned 0x1 [0165.775] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0165.775] GetFileType (hFile=0x444) returned 0x1 [0165.775] WriteFile (in: hFile=0x444, lpBuffer=0x2349240*, nNumberOfBytesToWrite=0x900, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x2349240*, lpNumberOfBytesWritten=0x3be4d8*=0x900, lpOverlapped=0x0) returned 1 [0165.775] CloseHandle (hObject=0x444) returned 1 [0165.775] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7E6A4DDD6EBE916C46924CED08FC10C7E58A9A59", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7E6A4DDD6EBE916C46924CED08FC10C7E58A9A59", lpFilePart=0x0) returned 0x85 [0165.775] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7E6A4DDD6EBE916C46924CED08FC10C7E58A9A59.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7E6A4DDD6EBE916C46924CED08FC10C7E58A9A59.xuy", lpFilePart=0x0) returned 0x89 [0165.776] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0165.776] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7E6A4DDD6EBE916C46924CED08FC10C7E58A9A59" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7e6a4ddd6ebe916c46924ced08fc10c7e58a9a59"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x870295ff, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x870295ff, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x4ea7978e, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x900)) returned 1 [0165.776] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0165.776] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7E6A4DDD6EBE916C46924CED08FC10C7E58A9A59" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7e6a4ddd6ebe916c46924ced08fc10c7e58a9a59"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7E6A4DDD6EBE916C46924CED08FC10C7E58A9A59.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7e6a4ddd6ebe916c46924ced08fc10c7e58a9a59.xuy")) returned 1 [0165.777] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7EB87F80F5E3271B910DF76ECB8FC273CFC9B047", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7EB87F80F5E3271B910DF76ECB8FC273CFC9B047", lpFilePart=0x0) returned 0x85 [0165.777] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0165.777] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7EB87F80F5E3271B910DF76ECB8FC273CFC9B047" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7eb87f80f5e3271b910df76ecb8fc273cfc9b047"), fInfoLevelId=0x0, lpFileInformation=0x234a600 | out: lpFileInformation=0x234a600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc54a515b, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc54a515b, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xc54a515b, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x1cc1)) returned 1 [0165.777] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0165.777] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7EB87F80F5E3271B910DF76ECB8FC273CFC9B047", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7EB87F80F5E3271B910DF76ECB8FC273CFC9B047", lpFilePart=0x0) returned 0x85 [0165.777] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0165.777] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7EB87F80F5E3271B910DF76ECB8FC273CFC9B047" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7eb87f80f5e3271b910df76ecb8fc273cfc9b047"), fInfoLevelId=0x0, lpFileInformation=0x234a800 | out: lpFileInformation=0x234a800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc54a515b, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc54a515b, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xc54a515b, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x1cc1)) returned 1 [0165.777] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0165.777] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7EB87F80F5E3271B910DF76ECB8FC273CFC9B047", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7EB87F80F5E3271B910DF76ECB8FC273CFC9B047", lpFilePart=0x0) returned 0x85 [0165.778] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0165.778] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7EB87F80F5E3271B910DF76ECB8FC273CFC9B047" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7eb87f80f5e3271b910df76ecb8fc273cfc9b047"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0165.779] GetFileType (hFile=0x444) returned 0x1 [0165.779] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0165.779] GetFileType (hFile=0x444) returned 0x1 [0165.779] ReadFile (in: hFile=0x444, lpBuffer=0x234cd30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x234cd30*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0165.835] CloseHandle (hObject=0x444) returned 1 [0165.835] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7EB87F80F5E3271B910DF76ECB8FC273CFC9B047", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7EB87F80F5E3271B910DF76ECB8FC273CFC9B047", lpFilePart=0x0) returned 0x85 [0165.835] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0165.835] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7EB87F80F5E3271B910DF76ECB8FC273CFC9B047" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7eb87f80f5e3271b910df76ecb8fc273cfc9b047"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0165.835] GetFileType (hFile=0x444) returned 0x1 [0165.835] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0165.835] GetFileType (hFile=0x444) returned 0x1 [0165.835] WriteFile (in: hFile=0x444, lpBuffer=0x218c038*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x218c038*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0165.836] CloseHandle (hObject=0x444) returned 1 [0165.836] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7EB87F80F5E3271B910DF76ECB8FC273CFC9B047", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7EB87F80F5E3271B910DF76ECB8FC273CFC9B047", lpFilePart=0x0) returned 0x85 [0165.836] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7EB87F80F5E3271B910DF76ECB8FC273CFC9B047.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7EB87F80F5E3271B910DF76ECB8FC273CFC9B047.xuy", lpFilePart=0x0) returned 0x89 [0165.836] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0165.836] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7EB87F80F5E3271B910DF76ECB8FC273CFC9B047" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7eb87f80f5e3271b910df76ecb8fc273cfc9b047"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc54a515b, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc54a515b, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x4eb121a2, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0165.836] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0165.836] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7EB87F80F5E3271B910DF76ECB8FC273CFC9B047" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7eb87f80f5e3271b910df76ecb8fc273cfc9b047"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7EB87F80F5E3271B910DF76ECB8FC273CFC9B047.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7eb87f80f5e3271b910df76ecb8fc273cfc9b047.xuy")) returned 1 [0165.837] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7ED75B3614C7D3EEE86D39A5F382CBE557DA312E", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7ED75B3614C7D3EEE86D39A5F382CBE557DA312E", lpFilePart=0x0) returned 0x85 [0165.837] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0165.837] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7ED75B3614C7D3EEE86D39A5F382CBE557DA312E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7ed75b3614c7d3eee86d39a5f382cbe557da312e"), fInfoLevelId=0x0, lpFileInformation=0x21cbf70 | out: lpFileInformation=0x21cbf70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x459d9052, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x459d9052, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x459d9052, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0x453)) returned 1 [0165.838] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0165.838] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7ED75B3614C7D3EEE86D39A5F382CBE557DA312E", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7ED75B3614C7D3EEE86D39A5F382CBE557DA312E", lpFilePart=0x0) returned 0x85 [0165.838] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0165.838] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7ED75B3614C7D3EEE86D39A5F382CBE557DA312E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7ed75b3614c7d3eee86d39a5f382cbe557da312e"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0165.838] GetFileType (hFile=0x444) returned 0x1 [0165.838] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0165.838] GetFileType (hFile=0x444) returned 0x1 [0165.838] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x453 [0165.838] ReadFile (in: hFile=0x444, lpBuffer=0x21cc7e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x21cc7e0*, lpNumberOfBytesRead=0x3be5c8*=0x453, lpOverlapped=0x0) returned 1 [0165.839] CloseHandle (hObject=0x444) returned 1 [0165.850] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7ED75B3614C7D3EEE86D39A5F382CBE557DA312E", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7ED75B3614C7D3EEE86D39A5F382CBE557DA312E", lpFilePart=0x0) returned 0x85 [0165.851] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0165.851] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7ED75B3614C7D3EEE86D39A5F382CBE557DA312E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7ed75b3614c7d3eee86d39a5f382cbe557da312e"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0165.852] GetFileType (hFile=0x444) returned 0x1 [0165.853] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0165.853] GetFileType (hFile=0x444) returned 0x1 [0165.853] WriteFile (in: hFile=0x444, lpBuffer=0x2244e58*, nNumberOfBytesToWrite=0x460, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x2244e58*, lpNumberOfBytesWritten=0x3be4d8*=0x460, lpOverlapped=0x0) returned 1 [0165.853] CloseHandle (hObject=0x444) returned 1 [0165.854] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7ED75B3614C7D3EEE86D39A5F382CBE557DA312E", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7ED75B3614C7D3EEE86D39A5F382CBE557DA312E", lpFilePart=0x0) returned 0x85 [0165.854] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7ED75B3614C7D3EEE86D39A5F382CBE557DA312E.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7ED75B3614C7D3EEE86D39A5F382CBE557DA312E.xuy", lpFilePart=0x0) returned 0x89 [0165.854] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0165.854] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7ED75B3614C7D3EEE86D39A5F382CBE557DA312E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7ed75b3614c7d3eee86d39a5f382cbe557da312e"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x459d9052, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x459d9052, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x4eb387c6, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x460)) returned 1 [0165.854] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0165.854] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7ED75B3614C7D3EEE86D39A5F382CBE557DA312E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7ed75b3614c7d3eee86d39a5f382cbe557da312e"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7ED75B3614C7D3EEE86D39A5F382CBE557DA312E.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7ed75b3614c7d3eee86d39a5f382cbe557da312e.xuy")) returned 1 [0165.855] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7EECEC96C96F7EFD42BCCEF138EB2246983AEE2B", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7EECEC96C96F7EFD42BCCEF138EB2246983AEE2B", lpFilePart=0x0) returned 0x85 [0165.855] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0165.855] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7EECEC96C96F7EFD42BCCEF138EB2246983AEE2B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7eecec96c96f7efd42bccef138eb2246983aee2b"), fInfoLevelId=0x0, lpFileInformation=0x2246218 | out: lpFileInformation=0x2246218*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x466cfd21, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x466cfd21, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x466cfd21, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0xea4)) returned 1 [0165.855] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0165.855] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7EECEC96C96F7EFD42BCCEF138EB2246983AEE2B", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7EECEC96C96F7EFD42BCCEF138EB2246983AEE2B", lpFilePart=0x0) returned 0x85 [0165.855] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0165.855] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7EECEC96C96F7EFD42BCCEF138EB2246983AEE2B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7eecec96c96f7efd42bccef138eb2246983aee2b"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0165.856] GetFileType (hFile=0x444) returned 0x1 [0165.856] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0165.856] GetFileType (hFile=0x444) returned 0x1 [0165.856] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xea4 [0165.856] ReadFile (in: hFile=0x444, lpBuffer=0x22474d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x22474d8*, lpNumberOfBytesRead=0x3be5c8*=0xea4, lpOverlapped=0x0) returned 1 [0165.867] CloseHandle (hObject=0x444) returned 1 [0165.879] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7EECEC96C96F7EFD42BCCEF138EB2246983AEE2B", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7EECEC96C96F7EFD42BCCEF138EB2246983AEE2B", lpFilePart=0x0) returned 0x85 [0165.879] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0165.879] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7EECEC96C96F7EFD42BCCEF138EB2246983AEE2B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7eecec96c96f7efd42bccef138eb2246983aee2b"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0165.881] GetFileType (hFile=0x444) returned 0x1 [0165.881] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0165.881] GetFileType (hFile=0x444) returned 0x1 [0165.881] WriteFile (in: hFile=0x444, lpBuffer=0x22c2ee0*, nNumberOfBytesToWrite=0xeb0, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x22c2ee0*, lpNumberOfBytesWritten=0x3be4d8*=0xeb0, lpOverlapped=0x0) returned 1 [0165.882] CloseHandle (hObject=0x444) returned 1 [0165.882] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7EECEC96C96F7EFD42BCCEF138EB2246983AEE2B", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7EECEC96C96F7EFD42BCCEF138EB2246983AEE2B", lpFilePart=0x0) returned 0x85 [0165.882] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7EECEC96C96F7EFD42BCCEF138EB2246983AEE2B.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7EECEC96C96F7EFD42BCCEF138EB2246983AEE2B.xuy", lpFilePart=0x0) returned 0x89 [0165.882] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0165.882] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7EECEC96C96F7EFD42BCCEF138EB2246983AEE2B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7eecec96c96f7efd42bccef138eb2246983aee2b"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x466cfd21, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x466cfd21, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x4eb84987, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xeb0)) returned 1 [0165.882] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0165.883] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7EECEC96C96F7EFD42BCCEF138EB2246983AEE2B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7eecec96c96f7efd42bccef138eb2246983aee2b"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7EECEC96C96F7EFD42BCCEF138EB2246983AEE2B.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7eecec96c96f7efd42bccef138eb2246983aee2b.xuy")) returned 1 [0165.884] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7FE50BE7077DE90D076E000C0A24643AF8CD9AC9", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7FE50BE7077DE90D076E000C0A24643AF8CD9AC9", lpFilePart=0x0) returned 0x85 [0165.884] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0165.884] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7FE50BE7077DE90D076E000C0A24643AF8CD9AC9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7fe50be7077de90d076e000c0a24643af8cd9ac9"), fInfoLevelId=0x0, lpFileInformation=0x22c42a0 | out: lpFileInformation=0x22c42a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87be6eda, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x87be6eda, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x87be95f6, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x1123)) returned 1 [0165.885] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0165.885] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7FE50BE7077DE90D076E000C0A24643AF8CD9AC9", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7FE50BE7077DE90D076E000C0A24643AF8CD9AC9", lpFilePart=0x0) returned 0x85 [0165.885] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0165.885] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7FE50BE7077DE90D076E000C0A24643AF8CD9AC9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7fe50be7077de90d076e000c0a24643af8cd9ac9"), fInfoLevelId=0x0, lpFileInformation=0x22c44a0 | out: lpFileInformation=0x22c44a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87be6eda, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x87be6eda, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x87be95f6, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x1123)) returned 1 [0165.885] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0165.885] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7FE50BE7077DE90D076E000C0A24643AF8CD9AC9", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7FE50BE7077DE90D076E000C0A24643AF8CD9AC9", lpFilePart=0x0) returned 0x85 [0165.885] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0165.886] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7FE50BE7077DE90D076E000C0A24643AF8CD9AC9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7fe50be7077de90d076e000c0a24643af8cd9ac9"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0165.887] GetFileType (hFile=0x444) returned 0x1 [0165.887] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0165.887] GetFileType (hFile=0x444) returned 0x1 [0165.887] ReadFile (in: hFile=0x444, lpBuffer=0x22c69d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x22c69d0*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0165.933] CloseHandle (hObject=0x444) returned 1 [0165.933] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7FE50BE7077DE90D076E000C0A24643AF8CD9AC9", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7FE50BE7077DE90D076E000C0A24643AF8CD9AC9", lpFilePart=0x0) returned 0x85 [0165.933] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0165.933] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7FE50BE7077DE90D076E000C0A24643AF8CD9AC9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7fe50be7077de90d076e000c0a24643af8cd9ac9"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0165.933] GetFileType (hFile=0x444) returned 0x1 [0165.933] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0165.933] GetFileType (hFile=0x444) returned 0x1 [0165.933] WriteFile (in: hFile=0x444, lpBuffer=0x22c4680*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x22c4680*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0165.934] CloseHandle (hObject=0x444) returned 1 [0165.934] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7FE50BE7077DE90D076E000C0A24643AF8CD9AC9", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7FE50BE7077DE90D076E000C0A24643AF8CD9AC9", lpFilePart=0x0) returned 0x85 [0165.934] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7FE50BE7077DE90D076E000C0A24643AF8CD9AC9.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7FE50BE7077DE90D076E000C0A24643AF8CD9AC9.xuy", lpFilePart=0x0) returned 0x89 [0165.934] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0165.934] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7FE50BE7077DE90D076E000C0A24643AF8CD9AC9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7fe50be7077de90d076e000c0a24643af8cd9ac9"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87be6eda, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x87be6eda, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x4ebf6fb2, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0165.934] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0165.934] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7FE50BE7077DE90D076E000C0A24643AF8CD9AC9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7fe50be7077de90d076e000c0a24643af8cd9ac9"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7FE50BE7077DE90D076E000C0A24643AF8CD9AC9.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7fe50be7077de90d076e000c0a24643af8cd9ac9.xuy")) returned 1 [0165.936] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\804D00971A6713DF10CAB1B024CA03F9B3C038F2", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\804D00971A6713DF10CAB1B024CA03F9B3C038F2", lpFilePart=0x0) returned 0x85 [0165.936] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0165.936] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\804D00971A6713DF10CAB1B024CA03F9B3C038F2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\804d00971a6713df10cab1b024ca03f9b3c038f2"), fInfoLevelId=0x0, lpFileInformation=0x2342f78 | out: lpFileInformation=0x2342f78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x549499fa, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x549499fa, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x549499fa, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x4e74)) returned 1 [0165.936] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0165.936] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\804D00971A6713DF10CAB1B024CA03F9B3C038F2", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\804D00971A6713DF10CAB1B024CA03F9B3C038F2", lpFilePart=0x0) returned 0x85 [0165.936] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0165.936] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\804D00971A6713DF10CAB1B024CA03F9B3C038F2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\804d00971a6713df10cab1b024ca03f9b3c038f2"), fInfoLevelId=0x0, lpFileInformation=0x2343178 | out: lpFileInformation=0x2343178*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x549499fa, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x549499fa, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x549499fa, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x4e74)) returned 1 [0165.936] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0165.936] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\804D00971A6713DF10CAB1B024CA03F9B3C038F2", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\804D00971A6713DF10CAB1B024CA03F9B3C038F2", lpFilePart=0x0) returned 0x85 [0165.936] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0165.936] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\804D00971A6713DF10CAB1B024CA03F9B3C038F2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\804d00971a6713df10cab1b024ca03f9b3c038f2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0165.937] GetFileType (hFile=0x444) returned 0x1 [0165.937] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0165.937] GetFileType (hFile=0x444) returned 0x1 [0165.937] ReadFile (in: hFile=0x444, lpBuffer=0x23456a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x23456a8*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0165.987] CloseHandle (hObject=0x444) returned 1 [0165.987] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\804D00971A6713DF10CAB1B024CA03F9B3C038F2", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\804D00971A6713DF10CAB1B024CA03F9B3C038F2", lpFilePart=0x0) returned 0x85 [0165.987] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0165.987] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\804D00971A6713DF10CAB1B024CA03F9B3C038F2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\804d00971a6713df10cab1b024ca03f9b3c038f2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0165.987] GetFileType (hFile=0x444) returned 0x1 [0165.987] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0165.987] GetFileType (hFile=0x444) returned 0x1 [0165.987] WriteFile (in: hFile=0x444, lpBuffer=0x218c038*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x218c038*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0165.988] CloseHandle (hObject=0x444) returned 1 [0165.988] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\804D00971A6713DF10CAB1B024CA03F9B3C038F2", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\804D00971A6713DF10CAB1B024CA03F9B3C038F2", lpFilePart=0x0) returned 0x85 [0165.988] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\804D00971A6713DF10CAB1B024CA03F9B3C038F2.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\804D00971A6713DF10CAB1B024CA03F9B3C038F2.xuy", lpFilePart=0x0) returned 0x89 [0165.988] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0165.988] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\804D00971A6713DF10CAB1B024CA03F9B3C038F2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\804d00971a6713df10cab1b024ca03f9b3c038f2"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x549499fa, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x549499fa, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x4ec8f9bd, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x4e74)) returned 1 [0165.988] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0165.988] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\804D00971A6713DF10CAB1B024CA03F9B3C038F2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\804d00971a6713df10cab1b024ca03f9b3c038f2"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\804D00971A6713DF10CAB1B024CA03F9B3C038F2.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\804d00971a6713df10cab1b024ca03f9b3c038f2.xuy")) returned 1 [0165.989] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\80F2F68FB2BDAC2A31FFF46701389C7EA9C7B74F", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\80F2F68FB2BDAC2A31FFF46701389C7EA9C7B74F", lpFilePart=0x0) returned 0x85 [0165.989] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0165.989] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\80F2F68FB2BDAC2A31FFF46701389C7EA9C7B74F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\80f2f68fb2bdac2a31fff46701389c7ea9c7b74f"), fInfoLevelId=0x0, lpFileInformation=0x21c1c50 | out: lpFileInformation=0x21c1c50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5373e86, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc5373e86, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xc8102af1, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0xcd4d)) returned 1 [0165.990] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0165.990] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\80F2F68FB2BDAC2A31FFF46701389C7EA9C7B74F", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\80F2F68FB2BDAC2A31FFF46701389C7EA9C7B74F", lpFilePart=0x0) returned 0x85 [0165.990] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0165.990] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\80F2F68FB2BDAC2A31FFF46701389C7EA9C7B74F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\80f2f68fb2bdac2a31fff46701389c7ea9c7b74f"), fInfoLevelId=0x0, lpFileInformation=0x21c1e50 | out: lpFileInformation=0x21c1e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5373e86, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc5373e86, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xc8102af1, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0xcd4d)) returned 1 [0165.990] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0165.990] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\80F2F68FB2BDAC2A31FFF46701389C7EA9C7B74F", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\80F2F68FB2BDAC2A31FFF46701389C7EA9C7B74F", lpFilePart=0x0) returned 0x85 [0165.990] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0165.990] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\80F2F68FB2BDAC2A31FFF46701389C7EA9C7B74F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\80f2f68fb2bdac2a31fff46701389c7ea9c7b74f"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0165.991] GetFileType (hFile=0x444) returned 0x1 [0165.991] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0165.991] GetFileType (hFile=0x444) returned 0x1 [0165.991] ReadFile (in: hFile=0x444, lpBuffer=0x21c4380, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x21c4380*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0166.007] CloseHandle (hObject=0x444) returned 1 [0166.007] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\80F2F68FB2BDAC2A31FFF46701389C7EA9C7B74F", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\80F2F68FB2BDAC2A31FFF46701389C7EA9C7B74F", lpFilePart=0x0) returned 0x85 [0166.007] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0166.007] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\80F2F68FB2BDAC2A31FFF46701389C7EA9C7B74F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\80f2f68fb2bdac2a31fff46701389c7ea9c7b74f"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0166.007] GetFileType (hFile=0x444) returned 0x1 [0166.007] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0166.007] GetFileType (hFile=0x444) returned 0x1 [0166.007] WriteFile (in: hFile=0x444, lpBuffer=0x21c2030*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x21c2030*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0166.007] CloseHandle (hObject=0x444) returned 1 [0166.008] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\80F2F68FB2BDAC2A31FFF46701389C7EA9C7B74F", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\80F2F68FB2BDAC2A31FFF46701389C7EA9C7B74F", lpFilePart=0x0) returned 0x85 [0166.008] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\80F2F68FB2BDAC2A31FFF46701389C7EA9C7B74F.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\80F2F68FB2BDAC2A31FFF46701389C7EA9C7B74F.xuy", lpFilePart=0x0) returned 0x89 [0166.008] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0166.008] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\80F2F68FB2BDAC2A31FFF46701389C7EA9C7B74F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\80f2f68fb2bdac2a31fff46701389c7ea9c7b74f"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5373e86, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc5373e86, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x4ecb5adc, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xcd4d)) returned 1 [0166.008] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0166.008] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\80F2F68FB2BDAC2A31FFF46701389C7EA9C7B74F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\80f2f68fb2bdac2a31fff46701389c7ea9c7b74f"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\80F2F68FB2BDAC2A31FFF46701389C7EA9C7B74F.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\80f2f68fb2bdac2a31fff46701389c7ea9c7b74f.xuy")) returned 1 [0166.009] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\816B0061E79B6E53649EC38D2C76C3CB97737646", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\816B0061E79B6E53649EC38D2C76C3CB97737646", lpFilePart=0x0) returned 0x85 [0166.009] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0166.009] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\816B0061E79B6E53649EC38D2C76C3CB97737646" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\816b0061e79b6e53649ec38d2c76c3cb97737646"), fInfoLevelId=0x0, lpFileInformation=0x2240928 | out: lpFileInformation=0x2240928*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c8e579b, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x7c8e579b, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x7ce42c57, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x68c9)) returned 1 [0166.009] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0166.009] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\816B0061E79B6E53649EC38D2C76C3CB97737646", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\816B0061E79B6E53649EC38D2C76C3CB97737646", lpFilePart=0x0) returned 0x85 [0166.009] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0166.009] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\816B0061E79B6E53649EC38D2C76C3CB97737646" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\816b0061e79b6e53649ec38d2c76c3cb97737646"), fInfoLevelId=0x0, lpFileInformation=0x2240b28 | out: lpFileInformation=0x2240b28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c8e579b, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x7c8e579b, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x7ce42c57, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x68c9)) returned 1 [0166.010] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0166.010] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\816B0061E79B6E53649EC38D2C76C3CB97737646", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\816B0061E79B6E53649EC38D2C76C3CB97737646", lpFilePart=0x0) returned 0x85 [0166.010] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0166.010] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\816B0061E79B6E53649EC38D2C76C3CB97737646" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\816b0061e79b6e53649ec38d2c76c3cb97737646"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0166.011] GetFileType (hFile=0x444) returned 0x1 [0166.011] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0166.011] GetFileType (hFile=0x444) returned 0x1 [0166.011] ReadFile (in: hFile=0x444, lpBuffer=0x2243058, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x2243058*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0166.026] CloseHandle (hObject=0x444) returned 1 [0166.026] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\816B0061E79B6E53649EC38D2C76C3CB97737646", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\816B0061E79B6E53649EC38D2C76C3CB97737646", lpFilePart=0x0) returned 0x85 [0166.026] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0166.026] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\816B0061E79B6E53649EC38D2C76C3CB97737646" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\816b0061e79b6e53649ec38d2c76c3cb97737646"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0166.027] GetFileType (hFile=0x444) returned 0x1 [0166.027] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0166.027] GetFileType (hFile=0x444) returned 0x1 [0166.027] WriteFile (in: hFile=0x444, lpBuffer=0x2240d08*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x2240d08*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0166.027] CloseHandle (hObject=0x444) returned 1 [0166.027] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\816B0061E79B6E53649EC38D2C76C3CB97737646", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\816B0061E79B6E53649EC38D2C76C3CB97737646", lpFilePart=0x0) returned 0x85 [0166.027] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\816B0061E79B6E53649EC38D2C76C3CB97737646.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\816B0061E79B6E53649EC38D2C76C3CB97737646.xuy", lpFilePart=0x0) returned 0x89 [0166.027] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0166.027] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\816B0061E79B6E53649EC38D2C76C3CB97737646" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\816b0061e79b6e53649ec38d2c76c3cb97737646"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c8e579b, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x7c8e579b, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x4ecde68d, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x68c9)) returned 1 [0166.027] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0166.027] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\816B0061E79B6E53649EC38D2C76C3CB97737646" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\816b0061e79b6e53649ec38d2c76c3cb97737646"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\816B0061E79B6E53649EC38D2C76C3CB97737646.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\816b0061e79b6e53649ec38d2c76c3cb97737646.xuy")) returned 1 [0166.029] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8181A6D542BC353BBF64D59BC6D1E6B99FE41D04", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8181A6D542BC353BBF64D59BC6D1E6B99FE41D04", lpFilePart=0x0) returned 0x85 [0166.029] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0166.029] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8181A6D542BC353BBF64D59BC6D1E6B99FE41D04" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8181a6d542bc353bbf64d59bc6d1e6b99fe41d04"), fInfoLevelId=0x0, lpFileInformation=0x22bf600 | out: lpFileInformation=0x22bf600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54cdd37f, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x54cdd37f, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x54cdd37f, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x2676)) returned 1 [0166.029] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0166.029] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8181A6D542BC353BBF64D59BC6D1E6B99FE41D04", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8181A6D542BC353BBF64D59BC6D1E6B99FE41D04", lpFilePart=0x0) returned 0x85 [0166.029] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0166.029] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8181A6D542BC353BBF64D59BC6D1E6B99FE41D04" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8181a6d542bc353bbf64d59bc6d1e6b99fe41d04"), fInfoLevelId=0x0, lpFileInformation=0x22bf800 | out: lpFileInformation=0x22bf800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54cdd37f, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x54cdd37f, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x54cdd37f, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x2676)) returned 1 [0166.030] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0166.030] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8181A6D542BC353BBF64D59BC6D1E6B99FE41D04", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8181A6D542BC353BBF64D59BC6D1E6B99FE41D04", lpFilePart=0x0) returned 0x85 [0166.030] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0166.030] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8181A6D542BC353BBF64D59BC6D1E6B99FE41D04" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8181a6d542bc353bbf64d59bc6d1e6b99fe41d04"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0166.031] GetFileType (hFile=0x444) returned 0x1 [0166.031] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0166.031] GetFileType (hFile=0x444) returned 0x1 [0166.031] ReadFile (in: hFile=0x444, lpBuffer=0x22c1d30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x22c1d30*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0166.044] CloseHandle (hObject=0x444) returned 1 [0166.044] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8181A6D542BC353BBF64D59BC6D1E6B99FE41D04", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8181A6D542BC353BBF64D59BC6D1E6B99FE41D04", lpFilePart=0x0) returned 0x85 [0166.044] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0166.044] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8181A6D542BC353BBF64D59BC6D1E6B99FE41D04" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8181a6d542bc353bbf64d59bc6d1e6b99fe41d04"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0166.045] GetFileType (hFile=0x444) returned 0x1 [0166.045] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0166.045] GetFileType (hFile=0x444) returned 0x1 [0166.045] WriteFile (in: hFile=0x444, lpBuffer=0x22bf9e0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x22bf9e0*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0166.045] CloseHandle (hObject=0x444) returned 1 [0166.049] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8181A6D542BC353BBF64D59BC6D1E6B99FE41D04", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8181A6D542BC353BBF64D59BC6D1E6B99FE41D04", lpFilePart=0x0) returned 0x85 [0166.049] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8181A6D542BC353BBF64D59BC6D1E6B99FE41D04.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8181A6D542BC353BBF64D59BC6D1E6B99FE41D04.xuy", lpFilePart=0x0) returned 0x89 [0166.049] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0166.049] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8181A6D542BC353BBF64D59BC6D1E6B99FE41D04" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8181a6d542bc353bbf64d59bc6d1e6b99fe41d04"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54cdd37f, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x54cdd37f, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x4ed28230, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2676)) returned 1 [0166.049] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0166.049] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8181A6D542BC353BBF64D59BC6D1E6B99FE41D04" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8181a6d542bc353bbf64d59bc6d1e6b99fe41d04"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8181A6D542BC353BBF64D59BC6D1E6B99FE41D04.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8181a6d542bc353bbf64d59bc6d1e6b99fe41d04.xuy")) returned 1 [0166.050] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\81BAD44F278646A44E19B8E1BB5D91720320EAF3", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\81BAD44F278646A44E19B8E1BB5D91720320EAF3", lpFilePart=0x0) returned 0x85 [0166.050] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0166.050] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\81BAD44F278646A44E19B8E1BB5D91720320EAF3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\81bad44f278646a44e19b8e1bb5d91720320eaf3"), fInfoLevelId=0x0, lpFileInformation=0x233e2d8 | out: lpFileInformation=0x233e2d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5137b11, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc5137b11, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xc80f4090, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x21bc1)) returned 1 [0166.051] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0166.051] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\81BAD44F278646A44E19B8E1BB5D91720320EAF3", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\81BAD44F278646A44E19B8E1BB5D91720320EAF3", lpFilePart=0x0) returned 0x85 [0166.051] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0166.051] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\81BAD44F278646A44E19B8E1BB5D91720320EAF3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\81bad44f278646a44e19b8e1bb5d91720320eaf3"), fInfoLevelId=0x0, lpFileInformation=0x233e4d8 | out: lpFileInformation=0x233e4d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5137b11, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc5137b11, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xc80f4090, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x21bc1)) returned 1 [0166.051] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0166.051] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\81BAD44F278646A44E19B8E1BB5D91720320EAF3", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\81BAD44F278646A44E19B8E1BB5D91720320EAF3", lpFilePart=0x0) returned 0x85 [0166.051] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0166.051] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\81BAD44F278646A44E19B8E1BB5D91720320EAF3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\81bad44f278646a44e19b8e1bb5d91720320eaf3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0166.052] GetFileType (hFile=0x444) returned 0x1 [0166.052] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0166.052] GetFileType (hFile=0x444) returned 0x1 [0166.052] ReadFile (in: hFile=0x444, lpBuffer=0x2340a08, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x2340a08*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0166.104] CloseHandle (hObject=0x444) returned 1 [0166.104] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\81BAD44F278646A44E19B8E1BB5D91720320EAF3", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\81BAD44F278646A44E19B8E1BB5D91720320EAF3", lpFilePart=0x0) returned 0x85 [0166.104] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0166.104] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\81BAD44F278646A44E19B8E1BB5D91720320EAF3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\81bad44f278646a44e19b8e1bb5d91720320eaf3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0166.104] GetFileType (hFile=0x444) returned 0x1 [0166.105] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0166.105] GetFileType (hFile=0x444) returned 0x1 [0166.105] WriteFile (in: hFile=0x444, lpBuffer=0x218c038*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x218c038*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0166.105] CloseHandle (hObject=0x444) returned 1 [0166.105] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\81BAD44F278646A44E19B8E1BB5D91720320EAF3", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\81BAD44F278646A44E19B8E1BB5D91720320EAF3", lpFilePart=0x0) returned 0x85 [0166.105] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\81BAD44F278646A44E19B8E1BB5D91720320EAF3.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\81BAD44F278646A44E19B8E1BB5D91720320EAF3.xuy", lpFilePart=0x0) returned 0x89 [0166.105] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0166.105] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\81BAD44F278646A44E19B8E1BB5D91720320EAF3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\81bad44f278646a44e19b8e1bb5d91720320eaf3"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5137b11, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc5137b11, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x4ed9a99f, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x21bc1)) returned 1 [0166.105] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0166.105] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\81BAD44F278646A44E19B8E1BB5D91720320EAF3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\81bad44f278646a44e19b8e1bb5d91720320eaf3"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\81BAD44F278646A44E19B8E1BB5D91720320EAF3.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\81bad44f278646a44e19b8e1bb5d91720320eaf3.xuy")) returned 1 [0166.108] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\83A45FEF980B64BF75E4A05F00358D435194C556", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\83A45FEF980B64BF75E4A05F00358D435194C556", lpFilePart=0x0) returned 0x85 [0166.109] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0166.109] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\83A45FEF980B64BF75E4A05F00358D435194C556" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\83a45fef980b64bf75e4a05f00358d435194c556"), fInfoLevelId=0x0, lpFileInformation=0x21bcf90 | out: lpFileInformation=0x21bcf90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bfa7368, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3bfa7368, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x3bfac184, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x528)) returned 1 [0166.109] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0166.109] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\83A45FEF980B64BF75E4A05F00358D435194C556", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\83A45FEF980B64BF75E4A05F00358D435194C556", lpFilePart=0x0) returned 0x85 [0166.109] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0166.109] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\83A45FEF980B64BF75E4A05F00358D435194C556" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\83a45fef980b64bf75e4a05f00358d435194c556"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0166.109] GetFileType (hFile=0x444) returned 0x1 [0166.109] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0166.109] GetFileType (hFile=0x444) returned 0x1 [0166.109] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x528 [0166.109] ReadFile (in: hFile=0x444, lpBuffer=0x21bd8d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x21bd8d0*, lpNumberOfBytesRead=0x3be5c8*=0x528, lpOverlapped=0x0) returned 1 [0166.125] CloseHandle (hObject=0x444) returned 1 [0166.135] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\83A45FEF980B64BF75E4A05F00358D435194C556", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\83A45FEF980B64BF75E4A05F00358D435194C556", lpFilePart=0x0) returned 0x85 [0166.135] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0166.135] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\83A45FEF980B64BF75E4A05F00358D435194C556" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\83a45fef980b64bf75e4a05f00358d435194c556"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0166.137] GetFileType (hFile=0x444) returned 0x1 [0166.137] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0166.137] GetFileType (hFile=0x444) returned 0x1 [0166.137] WriteFile (in: hFile=0x444, lpBuffer=0x2236350*, nNumberOfBytesToWrite=0x530, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x2236350*, lpNumberOfBytesWritten=0x3be4d8*=0x530, lpOverlapped=0x0) returned 1 [0166.138] CloseHandle (hObject=0x444) returned 1 [0166.138] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\83A45FEF980B64BF75E4A05F00358D435194C556", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\83A45FEF980B64BF75E4A05F00358D435194C556", lpFilePart=0x0) returned 0x85 [0166.138] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\83A45FEF980B64BF75E4A05F00358D435194C556.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\83A45FEF980B64BF75E4A05F00358D435194C556.xuy", lpFilePart=0x0) returned 0x89 [0166.139] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0166.139] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\83A45FEF980B64BF75E4A05F00358D435194C556" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\83a45fef980b64bf75e4a05f00358d435194c556"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bfa7368, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3bfa7368, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x4ee0d068, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x530)) returned 1 [0166.139] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0166.139] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\83A45FEF980B64BF75E4A05F00358D435194C556" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\83a45fef980b64bf75e4a05f00358d435194c556"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\83A45FEF980B64BF75E4A05F00358D435194C556.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\83a45fef980b64bf75e4a05f00358d435194c556.xuy")) returned 1 [0166.140] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\84165838615173EC8D9FD7B48624825C1BF0DE5B", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\84165838615173EC8D9FD7B48624825C1BF0DE5B", lpFilePart=0x0) returned 0x85 [0166.140] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0166.140] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\84165838615173EC8D9FD7B48624825C1BF0DE5B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\84165838615173ec8d9fd7b48624825c1bf0de5b"), fInfoLevelId=0x0, lpFileInformation=0x2237710 | out: lpFileInformation=0x2237710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7afca4c9, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x7afca4c9, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x7afca4c9, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x4d2)) returned 1 [0166.140] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0166.140] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\84165838615173EC8D9FD7B48624825C1BF0DE5B", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\84165838615173EC8D9FD7B48624825C1BF0DE5B", lpFilePart=0x0) returned 0x85 [0166.140] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0166.140] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\84165838615173EC8D9FD7B48624825C1BF0DE5B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\84165838615173ec8d9fd7b48624825c1bf0de5b"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0166.141] GetFileType (hFile=0x444) returned 0x1 [0166.141] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0166.141] GetFileType (hFile=0x444) returned 0x1 [0166.141] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x4d2 [0166.141] ReadFile (in: hFile=0x444, lpBuffer=0x2238000, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x2238000*, lpNumberOfBytesRead=0x3be5c8*=0x4d2, lpOverlapped=0x0) returned 1 [0166.171] CloseHandle (hObject=0x444) returned 1 [0166.181] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\84165838615173EC8D9FD7B48624825C1BF0DE5B", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\84165838615173EC8D9FD7B48624825C1BF0DE5B", lpFilePart=0x0) returned 0x85 [0166.181] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0166.181] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\84165838615173EC8D9FD7B48624825C1BF0DE5B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\84165838615173ec8d9fd7b48624825c1bf0de5b"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0166.183] GetFileType (hFile=0x444) returned 0x1 [0166.183] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0166.183] GetFileType (hFile=0x444) returned 0x1 [0166.183] WriteFile (in: hFile=0x444, lpBuffer=0x22b08f8*, nNumberOfBytesToWrite=0x4e0, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x22b08f8*, lpNumberOfBytesWritten=0x3be4d8*=0x4e0, lpOverlapped=0x0) returned 1 [0166.327] CloseHandle (hObject=0x444) returned 1 [0166.327] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\84165838615173EC8D9FD7B48624825C1BF0DE5B", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\84165838615173EC8D9FD7B48624825C1BF0DE5B", lpFilePart=0x0) returned 0x85 [0166.327] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\84165838615173EC8D9FD7B48624825C1BF0DE5B.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\84165838615173EC8D9FD7B48624825C1BF0DE5B.xuy", lpFilePart=0x0) returned 0x89 [0166.327] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0166.327] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\84165838615173EC8D9FD7B48624825C1BF0DE5B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\84165838615173ec8d9fd7b48624825c1bf0de5b"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7afca4c9, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x7afca4c9, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x4efd6d09, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x4e0)) returned 1 [0166.328] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0166.328] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\84165838615173EC8D9FD7B48624825C1BF0DE5B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\84165838615173ec8d9fd7b48624825c1bf0de5b"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\84165838615173EC8D9FD7B48624825C1BF0DE5B.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\84165838615173ec8d9fd7b48624825c1bf0de5b.xuy")) returned 1 [0166.329] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8527BE88ABE092F222F01F1FAA6BB09AA3C86E1C", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8527BE88ABE092F222F01F1FAA6BB09AA3C86E1C", lpFilePart=0x0) returned 0x85 [0166.329] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0166.329] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8527BE88ABE092F222F01F1FAA6BB09AA3C86E1C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8527be88abe092f222f01f1faa6bb09aa3c86e1c"), fInfoLevelId=0x0, lpFileInformation=0x22b1cb8 | out: lpFileInformation=0x22b1cb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6152bc7d, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x6152bc7d, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x6152bc7d, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xe2c)) returned 1 [0166.329] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0166.329] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8527BE88ABE092F222F01F1FAA6BB09AA3C86E1C", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8527BE88ABE092F222F01F1FAA6BB09AA3C86E1C", lpFilePart=0x0) returned 0x85 [0166.329] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0166.329] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8527BE88ABE092F222F01F1FAA6BB09AA3C86E1C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8527be88abe092f222f01f1faa6bb09aa3c86e1c"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0166.329] GetFileType (hFile=0x444) returned 0x1 [0166.329] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0166.330] GetFileType (hFile=0x444) returned 0x1 [0166.330] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xe2c [0166.330] ReadFile (in: hFile=0x444, lpBuffer=0x22b2f00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x22b2f00*, lpNumberOfBytesRead=0x3be5c8*=0xe2c, lpOverlapped=0x0) returned 1 [0166.331] CloseHandle (hObject=0x444) returned 1 [0166.342] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8527BE88ABE092F222F01F1FAA6BB09AA3C86E1C", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8527BE88ABE092F222F01F1FAA6BB09AA3C86E1C", lpFilePart=0x0) returned 0x85 [0166.342] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0166.342] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8527BE88ABE092F222F01F1FAA6BB09AA3C86E1C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8527be88abe092f222f01f1faa6bb09aa3c86e1c"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0166.343] GetFileType (hFile=0x444) returned 0x1 [0166.343] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0166.343] GetFileType (hFile=0x444) returned 0x1 [0166.343] WriteFile (in: hFile=0x444, lpBuffer=0x232e680*, nNumberOfBytesToWrite=0xe30, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x232e680*, lpNumberOfBytesWritten=0x3be4d8*=0xe30, lpOverlapped=0x0) returned 1 [0166.344] CloseHandle (hObject=0x444) returned 1 [0166.344] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8527BE88ABE092F222F01F1FAA6BB09AA3C86E1C", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8527BE88ABE092F222F01F1FAA6BB09AA3C86E1C", lpFilePart=0x0) returned 0x85 [0166.344] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8527BE88ABE092F222F01F1FAA6BB09AA3C86E1C.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8527BE88ABE092F222F01F1FAA6BB09AA3C86E1C.xuy", lpFilePart=0x0) returned 0x89 [0166.344] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0166.344] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8527BE88ABE092F222F01F1FAA6BB09AA3C86E1C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8527be88abe092f222f01f1faa6bb09aa3c86e1c"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6152bc7d, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x6152bc7d, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x4effd1b9, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xe30)) returned 1 [0166.344] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0166.344] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8527BE88ABE092F222F01F1FAA6BB09AA3C86E1C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8527be88abe092f222f01f1faa6bb09aa3c86e1c"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8527BE88ABE092F222F01F1FAA6BB09AA3C86E1C.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8527be88abe092f222f01f1faa6bb09aa3c86e1c.xuy")) returned 1 [0166.346] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\856994BF71BEE39831BB203883640C63D2A3EB13", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\856994BF71BEE39831BB203883640C63D2A3EB13", lpFilePart=0x0) returned 0x85 [0166.346] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0166.346] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\856994BF71BEE39831BB203883640C63D2A3EB13" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\856994bf71bee39831bb203883640c63d2a3eb13"), fInfoLevelId=0x0, lpFileInformation=0x232fa40 | out: lpFileInformation=0x232fa40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x459406e4, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x459406e4, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x459406e4, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0xb80)) returned 1 [0166.346] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0166.346] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\856994BF71BEE39831BB203883640C63D2A3EB13", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\856994BF71BEE39831BB203883640C63D2A3EB13", lpFilePart=0x0) returned 0x85 [0166.346] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0166.346] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\856994BF71BEE39831BB203883640C63D2A3EB13" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\856994bf71bee39831bb203883640c63d2a3eb13"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0166.346] GetFileType (hFile=0x444) returned 0x1 [0166.346] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0166.346] GetFileType (hFile=0x444) returned 0x1 [0166.346] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xb80 [0166.346] ReadFile (in: hFile=0x444, lpBuffer=0x23309d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x23309d8*, lpNumberOfBytesRead=0x3be5c8*=0xb80, lpOverlapped=0x0) returned 1 [0166.365] CloseHandle (hObject=0x444) returned 1 [0166.405] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\856994BF71BEE39831BB203883640C63D2A3EB13", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\856994BF71BEE39831BB203883640C63D2A3EB13", lpFilePart=0x0) returned 0x85 [0166.405] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0166.405] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\856994BF71BEE39831BB203883640C63D2A3EB13" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\856994bf71bee39831bb203883640c63d2a3eb13"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0166.407] GetFileType (hFile=0x444) returned 0x1 [0166.407] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0166.408] GetFileType (hFile=0x444) returned 0x1 [0166.408] WriteFile (in: hFile=0x444, lpBuffer=0x21a8e00*, nNumberOfBytesToWrite=0xb90, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x21a8e00*, lpNumberOfBytesWritten=0x3be4d8*=0xb90, lpOverlapped=0x0) returned 1 [0166.409] CloseHandle (hObject=0x444) returned 1 [0166.409] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\856994BF71BEE39831BB203883640C63D2A3EB13", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\856994BF71BEE39831BB203883640C63D2A3EB13", lpFilePart=0x0) returned 0x85 [0166.409] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\856994BF71BEE39831BB203883640C63D2A3EB13.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\856994BF71BEE39831BB203883640C63D2A3EB13.xuy", lpFilePart=0x0) returned 0x89 [0166.409] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0166.409] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\856994BF71BEE39831BB203883640C63D2A3EB13" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\856994bf71bee39831bb203883640c63d2a3eb13"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x459406e4, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x459406e4, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x4f0972dd, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xb90)) returned 1 [0166.409] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0166.409] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\856994BF71BEE39831BB203883640C63D2A3EB13" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\856994bf71bee39831bb203883640c63d2a3eb13"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\856994BF71BEE39831BB203883640C63D2A3EB13.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\856994bf71bee39831bb203883640c63d2a3eb13.xuy")) returned 1 [0166.410] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\85D45BE07AADC9AE35157E1F49EBD4D7EAD9C37B", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\85D45BE07AADC9AE35157E1F49EBD4D7EAD9C37B", lpFilePart=0x0) returned 0x85 [0166.411] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0166.411] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\85D45BE07AADC9AE35157E1F49EBD4D7EAD9C37B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\85d45be07aadc9ae35157e1f49ebd4d7ead9c37b"), fInfoLevelId=0x0, lpFileInformation=0x21aa1c0 | out: lpFileInformation=0x21aa1c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4ed5566, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc4ed5566, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xc50c5407, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x10b72)) returned 1 [0166.411] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0166.411] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\85D45BE07AADC9AE35157E1F49EBD4D7EAD9C37B", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\85D45BE07AADC9AE35157E1F49EBD4D7EAD9C37B", lpFilePart=0x0) returned 0x85 [0166.411] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0166.411] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\85D45BE07AADC9AE35157E1F49EBD4D7EAD9C37B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\85d45be07aadc9ae35157e1f49ebd4d7ead9c37b"), fInfoLevelId=0x0, lpFileInformation=0x21aa3c0 | out: lpFileInformation=0x21aa3c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4ed5566, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc4ed5566, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xc50c5407, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x10b72)) returned 1 [0166.411] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0166.411] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\85D45BE07AADC9AE35157E1F49EBD4D7EAD9C37B", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\85D45BE07AADC9AE35157E1F49EBD4D7EAD9C37B", lpFilePart=0x0) returned 0x85 [0166.411] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0166.411] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\85D45BE07AADC9AE35157E1F49EBD4D7EAD9C37B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\85d45be07aadc9ae35157e1f49ebd4d7ead9c37b"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0166.412] GetFileType (hFile=0x444) returned 0x1 [0166.412] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0166.412] GetFileType (hFile=0x444) returned 0x1 [0166.412] ReadFile (in: hFile=0x444, lpBuffer=0x21ac8f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x21ac8f0*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0166.434] CloseHandle (hObject=0x444) returned 1 [0166.434] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\85D45BE07AADC9AE35157E1F49EBD4D7EAD9C37B", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\85D45BE07AADC9AE35157E1F49EBD4D7EAD9C37B", lpFilePart=0x0) returned 0x85 [0166.434] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0166.434] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\85D45BE07AADC9AE35157E1F49EBD4D7EAD9C37B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\85d45be07aadc9ae35157e1f49ebd4d7ead9c37b"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0166.435] GetFileType (hFile=0x444) returned 0x1 [0166.435] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0166.435] GetFileType (hFile=0x444) returned 0x1 [0166.435] WriteFile (in: hFile=0x444, lpBuffer=0x21aa5a0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x21aa5a0*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0166.435] CloseHandle (hObject=0x444) returned 1 [0166.435] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\85D45BE07AADC9AE35157E1F49EBD4D7EAD9C37B", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\85D45BE07AADC9AE35157E1F49EBD4D7EAD9C37B", lpFilePart=0x0) returned 0x85 [0166.435] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\85D45BE07AADC9AE35157E1F49EBD4D7EAD9C37B.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\85D45BE07AADC9AE35157E1F49EBD4D7EAD9C37B.xuy", lpFilePart=0x0) returned 0x89 [0166.435] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0166.436] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\85D45BE07AADC9AE35157E1F49EBD4D7EAD9C37B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\85d45be07aadc9ae35157e1f49ebd4d7ead9c37b"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4ed5566, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc4ed5566, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x4f0e1db7, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x10b72)) returned 1 [0166.436] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0166.436] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\85D45BE07AADC9AE35157E1F49EBD4D7EAD9C37B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\85d45be07aadc9ae35157e1f49ebd4d7ead9c37b"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\85D45BE07AADC9AE35157E1F49EBD4D7EAD9C37B.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\85d45be07aadc9ae35157e1f49ebd4d7ead9c37b.xuy")) returned 1 [0166.437] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\861C798ECB309FB01C45FE3E3B63A4C2C3D13AD9", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\861C798ECB309FB01C45FE3E3B63A4C2C3D13AD9", lpFilePart=0x0) returned 0x85 [0166.437] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0166.438] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\861C798ECB309FB01C45FE3E3B63A4C2C3D13AD9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\861c798ecb309fb01c45fe3e3b63a4c2c3d13ad9"), fInfoLevelId=0x0, lpFileInformation=0x2228e98 | out: lpFileInformation=0x2228e98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c266628, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3c266628, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x3c2e55db, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x1fc5)) returned 1 [0166.438] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0166.438] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\861C798ECB309FB01C45FE3E3B63A4C2C3D13AD9", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\861C798ECB309FB01C45FE3E3B63A4C2C3D13AD9", lpFilePart=0x0) returned 0x85 [0166.438] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0166.438] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\861C798ECB309FB01C45FE3E3B63A4C2C3D13AD9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\861c798ecb309fb01c45fe3e3b63a4c2c3d13ad9"), fInfoLevelId=0x0, lpFileInformation=0x2229098 | out: lpFileInformation=0x2229098*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c266628, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3c266628, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x3c2e55db, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x1fc5)) returned 1 [0166.438] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0166.438] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\861C798ECB309FB01C45FE3E3B63A4C2C3D13AD9", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\861C798ECB309FB01C45FE3E3B63A4C2C3D13AD9", lpFilePart=0x0) returned 0x85 [0166.438] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0166.438] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\861C798ECB309FB01C45FE3E3B63A4C2C3D13AD9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\861c798ecb309fb01c45fe3e3b63a4c2c3d13ad9"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0166.439] GetFileType (hFile=0x444) returned 0x1 [0166.439] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0166.440] GetFileType (hFile=0x444) returned 0x1 [0166.440] ReadFile (in: hFile=0x444, lpBuffer=0x222b5c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x222b5c8*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0166.462] CloseHandle (hObject=0x444) returned 1 [0166.462] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\861C798ECB309FB01C45FE3E3B63A4C2C3D13AD9", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\861C798ECB309FB01C45FE3E3B63A4C2C3D13AD9", lpFilePart=0x0) returned 0x85 [0166.462] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0166.462] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\861C798ECB309FB01C45FE3E3B63A4C2C3D13AD9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\861c798ecb309fb01c45fe3e3b63a4c2c3d13ad9"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0166.463] GetFileType (hFile=0x444) returned 0x1 [0166.463] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0166.463] GetFileType (hFile=0x444) returned 0x1 [0166.463] WriteFile (in: hFile=0x444, lpBuffer=0x2229278*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x2229278*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0166.463] CloseHandle (hObject=0x444) returned 1 [0166.463] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\861C798ECB309FB01C45FE3E3B63A4C2C3D13AD9", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\861C798ECB309FB01C45FE3E3B63A4C2C3D13AD9", lpFilePart=0x0) returned 0x85 [0166.463] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\861C798ECB309FB01C45FE3E3B63A4C2C3D13AD9.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\861C798ECB309FB01C45FE3E3B63A4C2C3D13AD9.xuy", lpFilePart=0x0) returned 0x89 [0166.463] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0166.463] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\861C798ECB309FB01C45FE3E3B63A4C2C3D13AD9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\861c798ecb309fb01c45fe3e3b63a4c2c3d13ad9"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c266628, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3c266628, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x4f1080cb, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0166.463] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0166.463] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\861C798ECB309FB01C45FE3E3B63A4C2C3D13AD9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\861c798ecb309fb01c45fe3e3b63a4c2c3d13ad9"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\861C798ECB309FB01C45FE3E3B63A4C2C3D13AD9.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\861c798ecb309fb01c45fe3e3b63a4c2c3d13ad9.xuy")) returned 1 [0166.464] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\867C4A2BAC51D572FB7CBB0430893756378D1F42", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\867C4A2BAC51D572FB7CBB0430893756378D1F42", lpFilePart=0x0) returned 0x85 [0166.464] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0166.465] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\867C4A2BAC51D572FB7CBB0430893756378D1F42" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\867c4a2bac51d572fb7cbb0430893756378d1f42"), fInfoLevelId=0x0, lpFileInformation=0x22a7b70 | out: lpFileInformation=0x22a7b70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe062122f, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xe062122f, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xe0626070, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x6b)) returned 1 [0166.465] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0166.465] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\867C4A2BAC51D572FB7CBB0430893756378D1F42", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\867C4A2BAC51D572FB7CBB0430893756378D1F42", lpFilePart=0x0) returned 0x85 [0166.465] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0166.465] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\867C4A2BAC51D572FB7CBB0430893756378D1F42" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\867c4a2bac51d572fb7cbb0430893756378d1f42"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0166.465] GetFileType (hFile=0x444) returned 0x1 [0166.465] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0166.465] GetFileType (hFile=0x444) returned 0x1 [0166.465] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x6b [0166.465] ReadFile (in: hFile=0x444, lpBuffer=0x22a7ff8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x22a7ff8*, lpNumberOfBytesRead=0x3be5c8*=0x6b, lpOverlapped=0x0) returned 1 [0166.466] CloseHandle (hObject=0x444) returned 1 [0166.476] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\867C4A2BAC51D572FB7CBB0430893756378D1F42", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\867C4A2BAC51D572FB7CBB0430893756378D1F42", lpFilePart=0x0) returned 0x85 [0166.476] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0166.476] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\867C4A2BAC51D572FB7CBB0430893756378D1F42" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\867c4a2bac51d572fb7cbb0430893756378d1f42"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0166.478] GetFileType (hFile=0x444) returned 0x1 [0166.478] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0166.478] GetFileType (hFile=0x444) returned 0x1 [0166.478] WriteFile (in: hFile=0x444, lpBuffer=0x231f280*, nNumberOfBytesToWrite=0x70, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x231f280*, lpNumberOfBytesWritten=0x3be4d8*=0x70, lpOverlapped=0x0) returned 1 [0166.479] CloseHandle (hObject=0x444) returned 1 [0166.479] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\867C4A2BAC51D572FB7CBB0430893756378D1F42", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\867C4A2BAC51D572FB7CBB0430893756378D1F42", lpFilePart=0x0) returned 0x85 [0166.479] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\867C4A2BAC51D572FB7CBB0430893756378D1F42.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\867C4A2BAC51D572FB7CBB0430893756378D1F42.xuy", lpFilePart=0x0) returned 0x89 [0166.479] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0166.479] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\867C4A2BAC51D572FB7CBB0430893756378D1F42" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\867c4a2bac51d572fb7cbb0430893756378d1f42"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe062122f, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xe062122f, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x4f12e1b1, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x70)) returned 1 [0166.480] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0166.480] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\867C4A2BAC51D572FB7CBB0430893756378D1F42" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\867c4a2bac51d572fb7cbb0430893756378d1f42"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\867C4A2BAC51D572FB7CBB0430893756378D1F42.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\867c4a2bac51d572fb7cbb0430893756378d1f42.xuy")) returned 1 [0166.481] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\86A76CA2E1B13A2A88317EAE6628F08207275BC8", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\86A76CA2E1B13A2A88317EAE6628F08207275BC8", lpFilePart=0x0) returned 0x85 [0166.481] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0166.481] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\86A76CA2E1B13A2A88317EAE6628F08207275BC8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\86a76ca2e1b13a2a88317eae6628f08207275bc8"), fInfoLevelId=0x0, lpFileInformation=0x2320640 | out: lpFileInformation=0x2320640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61551d8c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x61551d8c, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x61551d8c, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x10de)) returned 1 [0166.483] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0166.483] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\86A76CA2E1B13A2A88317EAE6628F08207275BC8", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\86A76CA2E1B13A2A88317EAE6628F08207275BC8", lpFilePart=0x0) returned 0x85 [0166.484] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0166.484] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\86A76CA2E1B13A2A88317EAE6628F08207275BC8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\86a76ca2e1b13a2a88317eae6628f08207275bc8"), fInfoLevelId=0x0, lpFileInformation=0x2320840 | out: lpFileInformation=0x2320840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61551d8c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x61551d8c, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x61551d8c, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x10de)) returned 1 [0166.484] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0166.484] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\86A76CA2E1B13A2A88317EAE6628F08207275BC8", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\86A76CA2E1B13A2A88317EAE6628F08207275BC8", lpFilePart=0x0) returned 0x85 [0166.484] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0166.484] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\86A76CA2E1B13A2A88317EAE6628F08207275BC8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\86a76ca2e1b13a2a88317eae6628f08207275bc8"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0166.485] GetFileType (hFile=0x444) returned 0x1 [0166.485] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0166.485] GetFileType (hFile=0x444) returned 0x1 [0166.485] ReadFile (in: hFile=0x444, lpBuffer=0x2322d70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x2322d70*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0166.551] CloseHandle (hObject=0x444) returned 1 [0166.551] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\86A76CA2E1B13A2A88317EAE6628F08207275BC8", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\86A76CA2E1B13A2A88317EAE6628F08207275BC8", lpFilePart=0x0) returned 0x85 [0166.551] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0166.551] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\86A76CA2E1B13A2A88317EAE6628F08207275BC8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\86a76ca2e1b13a2a88317eae6628f08207275bc8"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0166.551] GetFileType (hFile=0x444) returned 0x1 [0166.551] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0166.551] GetFileType (hFile=0x444) returned 0x1 [0166.551] WriteFile (in: hFile=0x444, lpBuffer=0x218c038*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x218c038*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0166.552] CloseHandle (hObject=0x444) returned 1 [0166.552] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\86A76CA2E1B13A2A88317EAE6628F08207275BC8", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\86A76CA2E1B13A2A88317EAE6628F08207275BC8", lpFilePart=0x0) returned 0x85 [0166.552] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\86A76CA2E1B13A2A88317EAE6628F08207275BC8.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\86A76CA2E1B13A2A88317EAE6628F08207275BC8.xuy", lpFilePart=0x0) returned 0x89 [0166.552] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0166.552] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\86A76CA2E1B13A2A88317EAE6628F08207275BC8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\86a76ca2e1b13a2a88317eae6628f08207275bc8"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61551d8c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x61551d8c, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x4f1ecddb, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0166.552] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0166.552] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\86A76CA2E1B13A2A88317EAE6628F08207275BC8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\86a76ca2e1b13a2a88317eae6628f08207275bc8"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\86A76CA2E1B13A2A88317EAE6628F08207275BC8.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\86a76ca2e1b13a2a88317eae6628f08207275bc8.xuy")) returned 1 [0166.553] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\87831840EB1AF4B7388E370BA94421C5897B8373", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\87831840EB1AF4B7388E370BA94421C5897B8373", lpFilePart=0x0) returned 0x85 [0166.553] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0166.553] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\87831840EB1AF4B7388E370BA94421C5897B8373" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\87831840eb1af4b7388e370ba94421c5897b8373"), fInfoLevelId=0x0, lpFileInformation=0x21a1948 | out: lpFileInformation=0x21a1948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x455d30cd, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x455d30cd, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x4566ba3b, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0x5c8)) returned 1 [0166.554] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0166.554] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\87831840EB1AF4B7388E370BA94421C5897B8373", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\87831840EB1AF4B7388E370BA94421C5897B8373", lpFilePart=0x0) returned 0x85 [0166.554] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0166.554] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\87831840EB1AF4B7388E370BA94421C5897B8373" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\87831840eb1af4b7388e370ba94421c5897b8373"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0166.554] GetFileType (hFile=0x444) returned 0x1 [0166.554] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0166.554] GetFileType (hFile=0x444) returned 0x1 [0166.554] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x5c8 [0166.554] ReadFile (in: hFile=0x444, lpBuffer=0x21a2328, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x21a2328*, lpNumberOfBytesRead=0x3be5c8*=0x5c8, lpOverlapped=0x0) returned 1 [0166.563] CloseHandle (hObject=0x444) returned 1 [0166.573] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\87831840EB1AF4B7388E370BA94421C5897B8373", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\87831840EB1AF4B7388E370BA94421C5897B8373", lpFilePart=0x0) returned 0x85 [0166.573] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0166.573] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\87831840EB1AF4B7388E370BA94421C5897B8373" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\87831840eb1af4b7388e370ba94421c5897b8373"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0166.576] GetFileType (hFile=0x444) returned 0x1 [0166.576] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0166.576] GetFileType (hFile=0x444) returned 0x1 [0166.576] WriteFile (in: hFile=0x444, lpBuffer=0x221b0c8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x221b0c8*, lpNumberOfBytesWritten=0x3be4d8*=0x5d0, lpOverlapped=0x0) returned 1 [0166.577] CloseHandle (hObject=0x444) returned 1 [0166.577] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\87831840EB1AF4B7388E370BA94421C5897B8373", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\87831840EB1AF4B7388E370BA94421C5897B8373", lpFilePart=0x0) returned 0x85 [0166.577] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\87831840EB1AF4B7388E370BA94421C5897B8373.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\87831840EB1AF4B7388E370BA94421C5897B8373.xuy", lpFilePart=0x0) returned 0x89 [0166.577] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0166.577] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\87831840EB1AF4B7388E370BA94421C5897B8373" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\87831840eb1af4b7388e370ba94421c5897b8373"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x455d30cd, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x455d30cd, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x4f2396aa, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x5d0)) returned 1 [0166.577] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0166.577] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\87831840EB1AF4B7388E370BA94421C5897B8373" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\87831840eb1af4b7388e370ba94421c5897b8373"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\87831840EB1AF4B7388E370BA94421C5897B8373.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\87831840eb1af4b7388e370ba94421c5897b8373.xuy")) returned 1 [0166.578] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\87C1BBEBF88C597DB196C025271235CB67E5DD86", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\87C1BBEBF88C597DB196C025271235CB67E5DD86", lpFilePart=0x0) returned 0x85 [0166.578] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0166.579] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\87C1BBEBF88C597DB196C025271235CB67E5DD86" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\87c1bbebf88c597db196c025271235cb67e5dd86"), fInfoLevelId=0x0, lpFileInformation=0x221c488 | out: lpFileInformation=0x221c488*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61551d8c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x61551d8c, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x61551d8c, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x1130)) returned 1 [0166.579] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0166.579] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\87C1BBEBF88C597DB196C025271235CB67E5DD86", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\87C1BBEBF88C597DB196C025271235CB67E5DD86", lpFilePart=0x0) returned 0x85 [0166.579] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0166.579] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\87C1BBEBF88C597DB196C025271235CB67E5DD86" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\87c1bbebf88c597db196c025271235cb67e5dd86"), fInfoLevelId=0x0, lpFileInformation=0x221c688 | out: lpFileInformation=0x221c688*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61551d8c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x61551d8c, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x61551d8c, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x1130)) returned 1 [0166.579] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0166.579] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\87C1BBEBF88C597DB196C025271235CB67E5DD86", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\87C1BBEBF88C597DB196C025271235CB67E5DD86", lpFilePart=0x0) returned 0x85 [0166.579] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0166.579] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\87C1BBEBF88C597DB196C025271235CB67E5DD86" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\87c1bbebf88c597db196c025271235cb67e5dd86"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0166.580] GetFileType (hFile=0x444) returned 0x1 [0166.580] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0166.580] GetFileType (hFile=0x444) returned 0x1 [0166.580] ReadFile (in: hFile=0x444, lpBuffer=0x221ebb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x221ebb8*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0166.597] CloseHandle (hObject=0x444) returned 1 [0166.597] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\87C1BBEBF88C597DB196C025271235CB67E5DD86", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\87C1BBEBF88C597DB196C025271235CB67E5DD86", lpFilePart=0x0) returned 0x85 [0166.597] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0166.597] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\87C1BBEBF88C597DB196C025271235CB67E5DD86" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\87c1bbebf88c597db196c025271235cb67e5dd86"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0166.597] GetFileType (hFile=0x444) returned 0x1 [0166.597] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0166.597] GetFileType (hFile=0x444) returned 0x1 [0166.597] WriteFile (in: hFile=0x444, lpBuffer=0x221c868*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x221c868*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0166.597] CloseHandle (hObject=0x444) returned 1 [0166.598] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\87C1BBEBF88C597DB196C025271235CB67E5DD86", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\87C1BBEBF88C597DB196C025271235CB67E5DD86", lpFilePart=0x0) returned 0x85 [0166.598] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\87C1BBEBF88C597DB196C025271235CB67E5DD86.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\87C1BBEBF88C597DB196C025271235CB67E5DD86.xuy", lpFilePart=0x0) returned 0x89 [0166.598] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0166.598] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\87C1BBEBF88C597DB196C025271235CB67E5DD86" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\87c1bbebf88c597db196c025271235cb67e5dd86"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61551d8c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x61551d8c, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x4f25f8b7, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0166.598] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0166.598] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\87C1BBEBF88C597DB196C025271235CB67E5DD86" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\87c1bbebf88c597db196c025271235cb67e5dd86"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\87C1BBEBF88C597DB196C025271235CB67E5DD86.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\87c1bbebf88c597db196c025271235cb67e5dd86.xuy")) returned 1 [0166.599] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\87FBB86F054039D548CAEC249FD69F1568394FA5", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\87FBB86F054039D548CAEC249FD69F1568394FA5", lpFilePart=0x0) returned 0x85 [0166.599] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0166.599] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\87FBB86F054039D548CAEC249FD69F1568394FA5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\87fbb86f054039d548caec249fd69f1568394fa5"), fInfoLevelId=0x0, lpFileInformation=0x229b160 | out: lpFileInformation=0x229b160*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x879f26b1, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x879f26b1, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x879f4dba, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x3318)) returned 1 [0166.599] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0166.599] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\87FBB86F054039D548CAEC249FD69F1568394FA5", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\87FBB86F054039D548CAEC249FD69F1568394FA5", lpFilePart=0x0) returned 0x85 [0166.600] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0166.600] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\87FBB86F054039D548CAEC249FD69F1568394FA5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\87fbb86f054039d548caec249fd69f1568394fa5"), fInfoLevelId=0x0, lpFileInformation=0x229b360 | out: lpFileInformation=0x229b360*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x879f26b1, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x879f26b1, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x879f4dba, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x3318)) returned 1 [0166.600] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0166.600] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\87FBB86F054039D548CAEC249FD69F1568394FA5", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\87FBB86F054039D548CAEC249FD69F1568394FA5", lpFilePart=0x0) returned 0x85 [0166.600] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0166.600] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\87FBB86F054039D548CAEC249FD69F1568394FA5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\87fbb86f054039d548caec249fd69f1568394fa5"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0166.601] GetFileType (hFile=0x444) returned 0x1 [0166.601] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0166.601] GetFileType (hFile=0x444) returned 0x1 [0166.601] ReadFile (in: hFile=0x444, lpBuffer=0x229d890, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x229d890*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0166.613] CloseHandle (hObject=0x444) returned 1 [0166.613] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\87FBB86F054039D548CAEC249FD69F1568394FA5", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\87FBB86F054039D548CAEC249FD69F1568394FA5", lpFilePart=0x0) returned 0x85 [0166.613] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0166.613] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\87FBB86F054039D548CAEC249FD69F1568394FA5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\87fbb86f054039d548caec249fd69f1568394fa5"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0166.614] GetFileType (hFile=0x444) returned 0x1 [0166.614] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0166.614] GetFileType (hFile=0x444) returned 0x1 [0166.614] WriteFile (in: hFile=0x444, lpBuffer=0x229b540*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x229b540*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0166.614] CloseHandle (hObject=0x444) returned 1 [0166.614] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\87FBB86F054039D548CAEC249FD69F1568394FA5", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\87FBB86F054039D548CAEC249FD69F1568394FA5", lpFilePart=0x0) returned 0x85 [0166.614] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\87FBB86F054039D548CAEC249FD69F1568394FA5.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\87FBB86F054039D548CAEC249FD69F1568394FA5.xuy", lpFilePart=0x0) returned 0x89 [0166.614] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0166.614] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\87FBB86F054039D548CAEC249FD69F1568394FA5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\87fbb86f054039d548caec249fd69f1568394fa5"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x879f26b1, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x879f26b1, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x4f285653, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x3318)) returned 1 [0166.614] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0166.614] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\87FBB86F054039D548CAEC249FD69F1568394FA5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\87fbb86f054039d548caec249fd69f1568394fa5"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\87FBB86F054039D548CAEC249FD69F1568394FA5.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\87fbb86f054039d548caec249fd69f1568394fa5.xuy")) returned 1 [0166.616] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8857F3033ADD4EB28817638302A934EFC707BBDC", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8857F3033ADD4EB28817638302A934EFC707BBDC", lpFilePart=0x0) returned 0x85 [0166.616] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0166.616] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8857F3033ADD4EB28817638302A934EFC707BBDC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8857f3033add4eb28817638302a934efc707bbdc"), fInfoLevelId=0x0, lpFileInformation=0x2319e38 | out: lpFileInformation=0x2319e38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2b84751, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc2b84751, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x3c62d151, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0x4c79)) returned 1 [0166.617] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0166.617] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8857F3033ADD4EB28817638302A934EFC707BBDC", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8857F3033ADD4EB28817638302A934EFC707BBDC", lpFilePart=0x0) returned 0x85 [0166.617] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0166.617] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8857F3033ADD4EB28817638302A934EFC707BBDC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8857f3033add4eb28817638302a934efc707bbdc"), fInfoLevelId=0x0, lpFileInformation=0x231a038 | out: lpFileInformation=0x231a038*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2b84751, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc2b84751, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x3c62d151, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0x4c79)) returned 1 [0166.617] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0166.617] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8857F3033ADD4EB28817638302A934EFC707BBDC", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8857F3033ADD4EB28817638302A934EFC707BBDC", lpFilePart=0x0) returned 0x85 [0166.617] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0166.618] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8857F3033ADD4EB28817638302A934EFC707BBDC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8857f3033add4eb28817638302a934efc707bbdc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0166.618] GetFileType (hFile=0x444) returned 0x1 [0166.618] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0166.619] GetFileType (hFile=0x444) returned 0x1 [0166.619] ReadFile (in: hFile=0x444, lpBuffer=0x231c568, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x231c568*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0166.662] CloseHandle (hObject=0x444) returned 1 [0166.662] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8857F3033ADD4EB28817638302A934EFC707BBDC", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8857F3033ADD4EB28817638302A934EFC707BBDC", lpFilePart=0x0) returned 0x85 [0166.662] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0166.662] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8857F3033ADD4EB28817638302A934EFC707BBDC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8857f3033add4eb28817638302a934efc707bbdc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0166.662] GetFileType (hFile=0x444) returned 0x1 [0166.662] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0166.662] GetFileType (hFile=0x444) returned 0x1 [0166.663] WriteFile (in: hFile=0x444, lpBuffer=0x218c038*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x218c038*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0166.663] CloseHandle (hObject=0x444) returned 1 [0166.663] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8857F3033ADD4EB28817638302A934EFC707BBDC", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8857F3033ADD4EB28817638302A934EFC707BBDC", lpFilePart=0x0) returned 0x85 [0166.663] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8857F3033ADD4EB28817638302A934EFC707BBDC.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8857F3033ADD4EB28817638302A934EFC707BBDC.xuy", lpFilePart=0x0) returned 0x89 [0166.663] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0166.663] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8857F3033ADD4EB28817638302A934EFC707BBDC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8857f3033add4eb28817638302a934efc707bbdc"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2b84751, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc2b84751, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x4f2f7d96, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x4c79)) returned 1 [0166.663] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0166.663] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8857F3033ADD4EB28817638302A934EFC707BBDC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8857f3033add4eb28817638302a934efc707bbdc"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8857F3033ADD4EB28817638302A934EFC707BBDC.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8857f3033add4eb28817638302a934efc707bbdc.xuy")) returned 1 [0166.664] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8858061F604137649F7F7AED0DD9533B288D061A", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8858061F604137649F7F7AED0DD9533B288D061A", lpFilePart=0x0) returned 0x85 [0166.664] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0166.664] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8858061F604137649F7F7AED0DD9533B288D061A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8858061f604137649f7f7aed0dd9533b288d061a"), fInfoLevelId=0x0, lpFileInformation=0x2198af8 | out: lpFileInformation=0x2198af8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdda5cc4a, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xdda5cc4a, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xdda61a63, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x2528)) returned 1 [0166.665] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0166.665] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8858061F604137649F7F7AED0DD9533B288D061A", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8858061F604137649F7F7AED0DD9533B288D061A", lpFilePart=0x0) returned 0x85 [0166.665] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0166.665] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8858061F604137649F7F7AED0DD9533B288D061A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8858061f604137649f7f7aed0dd9533b288d061a"), fInfoLevelId=0x0, lpFileInformation=0x2198cf8 | out: lpFileInformation=0x2198cf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdda5cc4a, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xdda5cc4a, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xdda61a63, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x2528)) returned 1 [0166.665] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0166.665] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8858061F604137649F7F7AED0DD9533B288D061A", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8858061F604137649F7F7AED0DD9533B288D061A", lpFilePart=0x0) returned 0x85 [0166.665] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0166.665] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8858061F604137649F7F7AED0DD9533B288D061A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8858061f604137649f7f7aed0dd9533b288d061a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0166.666] GetFileType (hFile=0x444) returned 0x1 [0166.666] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0166.666] GetFileType (hFile=0x444) returned 0x1 [0166.666] ReadFile (in: hFile=0x444, lpBuffer=0x219b228, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x219b228*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0166.692] CloseHandle (hObject=0x444) returned 1 [0166.692] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8858061F604137649F7F7AED0DD9533B288D061A", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8858061F604137649F7F7AED0DD9533B288D061A", lpFilePart=0x0) returned 0x85 [0166.692] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0166.693] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8858061F604137649F7F7AED0DD9533B288D061A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8858061f604137649f7f7aed0dd9533b288d061a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0166.693] GetFileType (hFile=0x444) returned 0x1 [0166.693] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0166.693] GetFileType (hFile=0x444) returned 0x1 [0166.693] WriteFile (in: hFile=0x444, lpBuffer=0x2198ed8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x2198ed8*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0166.693] CloseHandle (hObject=0x444) returned 1 [0166.693] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8858061F604137649F7F7AED0DD9533B288D061A", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8858061F604137649F7F7AED0DD9533B288D061A", lpFilePart=0x0) returned 0x85 [0166.693] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8858061F604137649F7F7AED0DD9533B288D061A.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8858061F604137649F7F7AED0DD9533B288D061A.xuy", lpFilePart=0x0) returned 0x89 [0166.693] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0166.693] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8858061F604137649F7F7AED0DD9533B288D061A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8858061f604137649f7f7aed0dd9533b288d061a"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdda5cc4a, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xdda5cc4a, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x4f34471b, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2528)) returned 1 [0166.694] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0166.694] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8858061F604137649F7F7AED0DD9533B288D061A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8858061f604137649f7f7aed0dd9533b288d061a"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8858061F604137649F7F7AED0DD9533B288D061A.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8858061f604137649f7f7aed0dd9533b288d061a.xuy")) returned 1 [0166.695] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\89743F26A40DBAC175B5FFF4FC14795F1746D995", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\89743F26A40DBAC175B5FFF4FC14795F1746D995", lpFilePart=0x0) returned 0x85 [0166.695] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0166.695] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\89743F26A40DBAC175B5FFF4FC14795F1746D995" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\89743f26a40dbac175b5fff4fc14795f1746d995"), fInfoLevelId=0x0, lpFileInformation=0x22177d0 | out: lpFileInformation=0x22177d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x615c4498, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x615c4498, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x615c4498, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xf0f)) returned 1 [0166.695] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0166.695] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\89743F26A40DBAC175B5FFF4FC14795F1746D995", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\89743F26A40DBAC175B5FFF4FC14795F1746D995", lpFilePart=0x0) returned 0x85 [0166.695] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0166.695] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\89743F26A40DBAC175B5FFF4FC14795F1746D995" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\89743f26a40dbac175b5fff4fc14795f1746d995"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0166.695] GetFileType (hFile=0x444) returned 0x1 [0166.695] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0166.695] GetFileType (hFile=0x444) returned 0x1 [0166.695] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xf0f [0166.696] ReadFile (in: hFile=0x444, lpBuffer=0x2218af8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x2218af8*, lpNumberOfBytesRead=0x3be5c8*=0xf0f, lpOverlapped=0x0) returned 1 [0166.724] CloseHandle (hObject=0x444) returned 1 [0166.734] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\89743F26A40DBAC175B5FFF4FC14795F1746D995", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\89743F26A40DBAC175B5FFF4FC14795F1746D995", lpFilePart=0x0) returned 0x85 [0166.735] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0166.735] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\89743F26A40DBAC175B5FFF4FC14795F1746D995" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\89743f26a40dbac175b5fff4fc14795f1746d995"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0166.736] GetFileType (hFile=0x444) returned 0x1 [0166.736] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0166.736] GetFileType (hFile=0x444) returned 0x1 [0166.736] WriteFile (in: hFile=0x444, lpBuffer=0x22946d8*, nNumberOfBytesToWrite=0xf10, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x22946d8*, lpNumberOfBytesWritten=0x3be4d8*=0xf10, lpOverlapped=0x0) returned 1 [0166.737] CloseHandle (hObject=0x444) returned 1 [0166.737] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\89743F26A40DBAC175B5FFF4FC14795F1746D995", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\89743F26A40DBAC175B5FFF4FC14795F1746D995", lpFilePart=0x0) returned 0x85 [0166.737] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\89743F26A40DBAC175B5FFF4FC14795F1746D995.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\89743F26A40DBAC175B5FFF4FC14795F1746D995.xuy", lpFilePart=0x0) returned 0x89 [0166.737] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0166.737] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\89743F26A40DBAC175B5FFF4FC14795F1746D995" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\89743f26a40dbac175b5fff4fc14795f1746d995"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x615c4498, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x615c4498, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x4f3b69c2, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xf10)) returned 1 [0166.738] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0166.738] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\89743F26A40DBAC175B5FFF4FC14795F1746D995" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\89743f26a40dbac175b5fff4fc14795f1746d995"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\89743F26A40DBAC175B5FFF4FC14795F1746D995.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\89743f26a40dbac175b5fff4fc14795f1746d995.xuy")) returned 1 [0166.739] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8A2107086F36FA7AF2B6AF5F80B1A42A605A053A", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8A2107086F36FA7AF2B6AF5F80B1A42A605A053A", lpFilePart=0x0) returned 0x85 [0166.739] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0166.739] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8A2107086F36FA7AF2B6AF5F80B1A42A605A053A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8a2107086f36fa7af2b6af5f80b1a42a605a053a"), fInfoLevelId=0x0, lpFileInformation=0x2295a98 | out: lpFileInformation=0x2295a98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6159e1e8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x6159e1e8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x6159e1e8, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xed3)) returned 1 [0166.739] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0166.739] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8A2107086F36FA7AF2B6AF5F80B1A42A605A053A", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8A2107086F36FA7AF2B6AF5F80B1A42A605A053A", lpFilePart=0x0) returned 0x85 [0166.739] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0166.739] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8A2107086F36FA7AF2B6AF5F80B1A42A605A053A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8a2107086f36fa7af2b6af5f80b1a42a605a053a"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0166.739] GetFileType (hFile=0x444) returned 0x1 [0166.739] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0166.739] GetFileType (hFile=0x444) returned 0x1 [0166.739] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xed3 [0166.739] ReadFile (in: hFile=0x444, lpBuffer=0x2296d88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x2296d88*, lpNumberOfBytesRead=0x3be5c8*=0xed3, lpOverlapped=0x0) returned 1 [0166.741] CloseHandle (hObject=0x444) returned 1 [0166.751] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8A2107086F36FA7AF2B6AF5F80B1A42A605A053A", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8A2107086F36FA7AF2B6AF5F80B1A42A605A053A", lpFilePart=0x0) returned 0x85 [0166.751] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0166.751] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8A2107086F36FA7AF2B6AF5F80B1A42A605A053A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8a2107086f36fa7af2b6af5f80b1a42a605a053a"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0166.753] GetFileType (hFile=0x444) returned 0x1 [0166.753] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0166.753] GetFileType (hFile=0x444) returned 0x1 [0166.753] WriteFile (in: hFile=0x444, lpBuffer=0x2312880*, nNumberOfBytesToWrite=0xee0, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x2312880*, lpNumberOfBytesWritten=0x3be4d8*=0xee0, lpOverlapped=0x0) returned 1 [0166.754] CloseHandle (hObject=0x444) returned 1 [0166.754] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8A2107086F36FA7AF2B6AF5F80B1A42A605A053A", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8A2107086F36FA7AF2B6AF5F80B1A42A605A053A", lpFilePart=0x0) returned 0x85 [0166.754] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8A2107086F36FA7AF2B6AF5F80B1A42A605A053A.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8A2107086F36FA7AF2B6AF5F80B1A42A605A053A.xuy", lpFilePart=0x0) returned 0x89 [0166.754] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0166.754] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8A2107086F36FA7AF2B6AF5F80B1A42A605A053A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8a2107086f36fa7af2b6af5f80b1a42a605a053a"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6159e1e8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x6159e1e8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x4f3dce56, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xee0)) returned 1 [0166.754] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0166.754] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8A2107086F36FA7AF2B6AF5F80B1A42A605A053A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8a2107086f36fa7af2b6af5f80b1a42a605a053a"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8A2107086F36FA7AF2B6AF5F80B1A42A605A053A.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8a2107086f36fa7af2b6af5f80b1a42a605a053a.xuy")) returned 1 [0166.756] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8A2AD8F5DF71B3EDEECB2F31FB7313248369277E", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8A2AD8F5DF71B3EDEECB2F31FB7313248369277E", lpFilePart=0x0) returned 0x85 [0166.756] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0166.756] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8A2AD8F5DF71B3EDEECB2F31FB7313248369277E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8a2ad8f5df71b3edeecb2f31fb7313248369277e"), fInfoLevelId=0x0, lpFileInformation=0x2313c40 | out: lpFileInformation=0x2313c40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f8752b5, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3f8752b5, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x41b7d07f, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0xe3c)) returned 1 [0166.756] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0166.756] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8A2AD8F5DF71B3EDEECB2F31FB7313248369277E", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8A2AD8F5DF71B3EDEECB2F31FB7313248369277E", lpFilePart=0x0) returned 0x85 [0166.756] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0166.756] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8A2AD8F5DF71B3EDEECB2F31FB7313248369277E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8a2ad8f5df71b3edeecb2f31fb7313248369277e"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0166.756] GetFileType (hFile=0x444) returned 0x1 [0166.756] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0166.756] GetFileType (hFile=0x444) returned 0x1 [0166.756] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xe3c [0166.756] ReadFile (in: hFile=0x444, lpBuffer=0x2314e98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x2314e98*, lpNumberOfBytesRead=0x3be5c8*=0xe3c, lpOverlapped=0x0) returned 1 [0166.769] CloseHandle (hObject=0x444) returned 1 [0166.779] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8A2AD8F5DF71B3EDEECB2F31FB7313248369277E", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8A2AD8F5DF71B3EDEECB2F31FB7313248369277E", lpFilePart=0x0) returned 0x85 [0166.782] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0166.782] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8A2AD8F5DF71B3EDEECB2F31FB7313248369277E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8a2ad8f5df71b3edeecb2f31fb7313248369277e"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0166.784] GetFileType (hFile=0x444) returned 0x1 [0166.784] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0166.784] GetFileType (hFile=0x444) returned 0x1 [0166.784] WriteFile (in: hFile=0x444, lpBuffer=0x218d0f0*, nNumberOfBytesToWrite=0xe40, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x218d0f0*, lpNumberOfBytesWritten=0x3be4d8*=0xe40, lpOverlapped=0x0) returned 1 [0166.785] CloseHandle (hObject=0x444) returned 1 [0166.785] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8A2AD8F5DF71B3EDEECB2F31FB7313248369277E", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8A2AD8F5DF71B3EDEECB2F31FB7313248369277E", lpFilePart=0x0) returned 0x85 [0166.785] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8A2AD8F5DF71B3EDEECB2F31FB7313248369277E.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8A2AD8F5DF71B3EDEECB2F31FB7313248369277E.xuy", lpFilePart=0x0) returned 0x89 [0166.785] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0166.785] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8A2AD8F5DF71B3EDEECB2F31FB7313248369277E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8a2ad8f5df71b3edeecb2f31fb7313248369277e"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f8752b5, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3f8752b5, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x4f4291de, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xe40)) returned 1 [0166.785] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0166.785] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8A2AD8F5DF71B3EDEECB2F31FB7313248369277E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8a2ad8f5df71b3edeecb2f31fb7313248369277e"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8A2AD8F5DF71B3EDEECB2F31FB7313248369277E.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8a2ad8f5df71b3edeecb2f31fb7313248369277e.xuy")) returned 1 [0166.786] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8A7920081C1315333E277E9F21318AF059B30830", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8A7920081C1315333E277E9F21318AF059B30830", lpFilePart=0x0) returned 0x85 [0166.787] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0166.787] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8A7920081C1315333E277E9F21318AF059B30830" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8a7920081c1315333e277e9f21318af059b30830"), fInfoLevelId=0x0, lpFileInformation=0x218e4b0 | out: lpFileInformation=0x218e4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdda5cc4a, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xdda5cc4a, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xdda61a63, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x40ee)) returned 1 [0166.787] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0166.787] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8A7920081C1315333E277E9F21318AF059B30830", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8A7920081C1315333E277E9F21318AF059B30830", lpFilePart=0x0) returned 0x85 [0166.787] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0166.787] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8A7920081C1315333E277E9F21318AF059B30830" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8a7920081c1315333e277e9f21318af059b30830"), fInfoLevelId=0x0, lpFileInformation=0x218e6b0 | out: lpFileInformation=0x218e6b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdda5cc4a, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xdda5cc4a, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xdda61a63, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x40ee)) returned 1 [0166.787] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0166.787] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8A7920081C1315333E277E9F21318AF059B30830", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8A7920081C1315333E277E9F21318AF059B30830", lpFilePart=0x0) returned 0x85 [0166.787] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0166.787] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8A7920081C1315333E277E9F21318AF059B30830" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8a7920081c1315333e277e9f21318af059b30830"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0166.788] GetFileType (hFile=0x444) returned 0x1 [0166.788] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0166.788] GetFileType (hFile=0x444) returned 0x1 [0166.788] ReadFile (in: hFile=0x444, lpBuffer=0x2190be0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x2190be0*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0166.828] CloseHandle (hObject=0x444) returned 1 [0166.828] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8A7920081C1315333E277E9F21318AF059B30830", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8A7920081C1315333E277E9F21318AF059B30830", lpFilePart=0x0) returned 0x85 [0166.828] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0166.828] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8A7920081C1315333E277E9F21318AF059B30830" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8a7920081c1315333e277e9f21318af059b30830"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0166.828] GetFileType (hFile=0x444) returned 0x1 [0166.829] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0166.829] GetFileType (hFile=0x444) returned 0x1 [0166.829] WriteFile (in: hFile=0x444, lpBuffer=0x218e890*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x218e890*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0166.829] CloseHandle (hObject=0x444) returned 1 [0166.829] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8A7920081C1315333E277E9F21318AF059B30830", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8A7920081C1315333E277E9F21318AF059B30830", lpFilePart=0x0) returned 0x85 [0166.829] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8A7920081C1315333E277E9F21318AF059B30830.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8A7920081C1315333E277E9F21318AF059B30830.xuy", lpFilePart=0x0) returned 0x89 [0166.829] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0166.829] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8A7920081C1315333E277E9F21318AF059B30830" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8a7920081c1315333e277e9f21318af059b30830"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdda5cc4a, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xdda5cc4a, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x4f49ba56, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x40ee)) returned 1 [0166.829] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0166.829] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8A7920081C1315333E277E9F21318AF059B30830" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8a7920081c1315333e277e9f21318af059b30830"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8A7920081C1315333E277E9F21318AF059B30830.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8a7920081c1315333e277e9f21318af059b30830.xuy")) returned 1 [0166.831] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8A8FB4C98364036C0183D518C77CC8FC39F40BC1", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8A8FB4C98364036C0183D518C77CC8FC39F40BC1", lpFilePart=0x0) returned 0x85 [0166.831] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0166.831] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8A8FB4C98364036C0183D518C77CC8FC39F40BC1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8a8fb4c98364036c0183d518c77cc8fc39f40bc1"), fInfoLevelId=0x0, lpFileInformation=0x220d188 | out: lpFileInformation=0x220d188*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6159e1e8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x6159e1e8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x6159e1e8, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xed9)) returned 1 [0166.831] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0166.831] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8A8FB4C98364036C0183D518C77CC8FC39F40BC1", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8A8FB4C98364036C0183D518C77CC8FC39F40BC1", lpFilePart=0x0) returned 0x85 [0166.831] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0166.831] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8A8FB4C98364036C0183D518C77CC8FC39F40BC1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8a8fb4c98364036c0183d518c77cc8fc39f40bc1"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0166.831] GetFileType (hFile=0x444) returned 0x1 [0166.831] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0166.831] GetFileType (hFile=0x444) returned 0x1 [0166.831] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xed9 [0166.831] ReadFile (in: hFile=0x444, lpBuffer=0x220e480, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x220e480*, lpNumberOfBytesRead=0x3be5c8*=0xed9, lpOverlapped=0x0) returned 1 [0166.837] CloseHandle (hObject=0x444) returned 1 [0166.848] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8A8FB4C98364036C0183D518C77CC8FC39F40BC1", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8A8FB4C98364036C0183D518C77CC8FC39F40BC1", lpFilePart=0x0) returned 0x85 [0166.848] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0166.849] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8A8FB4C98364036C0183D518C77CC8FC39F40BC1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8a8fb4c98364036c0183d518c77cc8fc39f40bc1"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0166.850] GetFileType (hFile=0x444) returned 0x1 [0166.850] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0166.850] GetFileType (hFile=0x444) returned 0x1 [0166.850] WriteFile (in: hFile=0x444, lpBuffer=0x2289f70*, nNumberOfBytesToWrite=0xee0, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x2289f70*, lpNumberOfBytesWritten=0x3be4d8*=0xee0, lpOverlapped=0x0) returned 1 [0166.851] CloseHandle (hObject=0x444) returned 1 [0166.851] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8A8FB4C98364036C0183D518C77CC8FC39F40BC1", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8A8FB4C98364036C0183D518C77CC8FC39F40BC1", lpFilePart=0x0) returned 0x85 [0166.851] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8A8FB4C98364036C0183D518C77CC8FC39F40BC1.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8A8FB4C98364036C0183D518C77CC8FC39F40BC1.xuy", lpFilePart=0x0) returned 0x89 [0166.851] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0166.852] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8A8FB4C98364036C0183D518C77CC8FC39F40BC1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8a8fb4c98364036c0183d518c77cc8fc39f40bc1"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6159e1e8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x6159e1e8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x4f4c1e5a, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xee0)) returned 1 [0166.852] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0166.852] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8A8FB4C98364036C0183D518C77CC8FC39F40BC1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8a8fb4c98364036c0183d518c77cc8fc39f40bc1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8A8FB4C98364036C0183D518C77CC8FC39F40BC1.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8a8fb4c98364036c0183d518c77cc8fc39f40bc1.xuy")) returned 1 [0166.853] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8AC71E619E56A3E91432A092C6C908D04A1344F4", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8AC71E619E56A3E91432A092C6C908D04A1344F4", lpFilePart=0x0) returned 0x85 [0166.853] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0166.853] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8AC71E619E56A3E91432A092C6C908D04A1344F4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8ac71e619e56a3e91432a092c6c908d04a1344f4"), fInfoLevelId=0x0, lpFileInformation=0x228b330 | out: lpFileInformation=0x228b330*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5ed6267c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x5ed6267c, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x6152bc7d, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x1484)) returned 1 [0166.853] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0166.853] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8AC71E619E56A3E91432A092C6C908D04A1344F4", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8AC71E619E56A3E91432A092C6C908D04A1344F4", lpFilePart=0x0) returned 0x85 [0166.853] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0166.854] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8AC71E619E56A3E91432A092C6C908D04A1344F4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8ac71e619e56a3e91432a092c6c908d04a1344f4"), fInfoLevelId=0x0, lpFileInformation=0x228b530 | out: lpFileInformation=0x228b530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5ed6267c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x5ed6267c, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x6152bc7d, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x1484)) returned 1 [0166.854] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0166.854] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8AC71E619E56A3E91432A092C6C908D04A1344F4", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8AC71E619E56A3E91432A092C6C908D04A1344F4", lpFilePart=0x0) returned 0x85 [0166.854] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0166.854] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8AC71E619E56A3E91432A092C6C908D04A1344F4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8ac71e619e56a3e91432a092c6c908d04a1344f4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0166.855] GetFileType (hFile=0x444) returned 0x1 [0166.855] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0166.855] GetFileType (hFile=0x444) returned 0x1 [0166.855] ReadFile (in: hFile=0x444, lpBuffer=0x228da60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x228da60*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0166.883] CloseHandle (hObject=0x444) returned 1 [0166.914] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8AC71E619E56A3E91432A092C6C908D04A1344F4", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8AC71E619E56A3E91432A092C6C908D04A1344F4", lpFilePart=0x0) returned 0x85 [0166.914] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0166.914] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8AC71E619E56A3E91432A092C6C908D04A1344F4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8ac71e619e56a3e91432a092c6c908d04a1344f4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0166.915] GetFileType (hFile=0x444) returned 0x1 [0166.915] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0166.915] GetFileType (hFile=0x444) returned 0x1 [0166.915] WriteFile (in: hFile=0x444, lpBuffer=0x228b710*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x228b710*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0166.915] CloseHandle (hObject=0x444) returned 1 [0166.915] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8AC71E619E56A3E91432A092C6C908D04A1344F4", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8AC71E619E56A3E91432A092C6C908D04A1344F4", lpFilePart=0x0) returned 0x85 [0166.915] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8AC71E619E56A3E91432A092C6C908D04A1344F4.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8AC71E619E56A3E91432A092C6C908D04A1344F4.xuy", lpFilePart=0x0) returned 0x89 [0166.915] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0166.915] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8AC71E619E56A3E91432A092C6C908D04A1344F4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8ac71e619e56a3e91432a092c6c908d04a1344f4"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5ed6267c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x5ed6267c, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x4f55a39b, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0166.915] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0166.915] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8AC71E619E56A3E91432A092C6C908D04A1344F4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8ac71e619e56a3e91432a092c6c908d04a1344f4"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8AC71E619E56A3E91432A092C6C908D04A1344F4.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8ac71e619e56a3e91432a092c6c908d04a1344f4.xuy")) returned 1 [0166.916] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8B4DF9C9C3E59D43F4B9D7ACF58641B677239F1C", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8B4DF9C9C3E59D43F4B9D7ACF58641B677239F1C", lpFilePart=0x0) returned 0x85 [0166.916] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0166.917] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8B4DF9C9C3E59D43F4B9D7ACF58641B677239F1C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8b4df9c9c3e59d43f4b9d7acf58641b677239f1c"), fInfoLevelId=0x0, lpFileInformation=0x230a008 | out: lpFileInformation=0x230a008*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde916960, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xde916960, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xde92053a, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x528)) returned 1 [0166.917] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0166.917] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8B4DF9C9C3E59D43F4B9D7ACF58641B677239F1C", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8B4DF9C9C3E59D43F4B9D7ACF58641B677239F1C", lpFilePart=0x0) returned 0x85 [0166.917] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0166.917] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8B4DF9C9C3E59D43F4B9D7ACF58641B677239F1C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8b4df9c9c3e59d43f4b9d7acf58641b677239f1c"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0166.917] GetFileType (hFile=0x444) returned 0x1 [0166.917] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0166.917] GetFileType (hFile=0x444) returned 0x1 [0166.917] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x528 [0166.917] ReadFile (in: hFile=0x444, lpBuffer=0x230a948, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x230a948*, lpNumberOfBytesRead=0x3be5c8*=0x528, lpOverlapped=0x0) returned 1 [0166.922] CloseHandle (hObject=0x444) returned 1 [0166.932] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8B4DF9C9C3E59D43F4B9D7ACF58641B677239F1C", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8B4DF9C9C3E59D43F4B9D7ACF58641B677239F1C", lpFilePart=0x0) returned 0x85 [0166.933] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0166.933] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8B4DF9C9C3E59D43F4B9D7ACF58641B677239F1C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8b4df9c9c3e59d43f4b9d7acf58641b677239f1c"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0166.934] GetFileType (hFile=0x444) returned 0x1 [0166.934] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0166.934] GetFileType (hFile=0x444) returned 0x1 [0166.934] WriteFile (in: hFile=0x444, lpBuffer=0x23833c8*, nNumberOfBytesToWrite=0x530, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x23833c8*, lpNumberOfBytesWritten=0x3be4d8*=0x530, lpOverlapped=0x0) returned 1 [0166.938] CloseHandle (hObject=0x444) returned 1 [0166.938] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8B4DF9C9C3E59D43F4B9D7ACF58641B677239F1C", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8B4DF9C9C3E59D43F4B9D7ACF58641B677239F1C", lpFilePart=0x0) returned 0x85 [0166.938] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8B4DF9C9C3E59D43F4B9D7ACF58641B677239F1C.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8B4DF9C9C3E59D43F4B9D7ACF58641B677239F1C.xuy", lpFilePart=0x0) returned 0x89 [0166.938] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0166.938] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8B4DF9C9C3E59D43F4B9D7ACF58641B677239F1C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8b4df9c9c3e59d43f4b9d7acf58641b677239f1c"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde916960, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xde916960, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x4f5a67f9, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x530)) returned 1 [0166.938] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0166.939] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8B4DF9C9C3E59D43F4B9D7ACF58641B677239F1C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8b4df9c9c3e59d43f4b9d7acf58641b677239f1c"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8B4DF9C9C3E59D43F4B9D7ACF58641B677239F1C.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8b4df9c9c3e59d43f4b9d7acf58641b677239f1c.xuy")) returned 1 [0166.940] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8B84BB849A29090A3112F400E6DC463AD0368AA0", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8B84BB849A29090A3112F400E6DC463AD0368AA0", lpFilePart=0x0) returned 0x85 [0166.940] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0166.940] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8B84BB849A29090A3112F400E6DC463AD0368AA0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8b84bb849a29090a3112f400e6dc463ad0368aa0"), fInfoLevelId=0x0, lpFileInformation=0x2384788 | out: lpFileInformation=0x2384788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61577ff1, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x61577ff1, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x61577ff1, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x1134)) returned 1 [0166.940] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0166.940] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8B84BB849A29090A3112F400E6DC463AD0368AA0", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8B84BB849A29090A3112F400E6DC463AD0368AA0", lpFilePart=0x0) returned 0x85 [0166.940] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0166.940] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8B84BB849A29090A3112F400E6DC463AD0368AA0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8b84bb849a29090a3112f400e6dc463ad0368aa0"), fInfoLevelId=0x0, lpFileInformation=0x2384988 | out: lpFileInformation=0x2384988*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61577ff1, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x61577ff1, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x61577ff1, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x1134)) returned 1 [0166.940] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0166.940] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8B84BB849A29090A3112F400E6DC463AD0368AA0", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8B84BB849A29090A3112F400E6DC463AD0368AA0", lpFilePart=0x0) returned 0x85 [0166.940] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0166.940] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8B84BB849A29090A3112F400E6DC463AD0368AA0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8b84bb849a29090a3112f400e6dc463ad0368aa0"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0166.941] GetFileType (hFile=0x444) returned 0x1 [0166.941] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0166.941] GetFileType (hFile=0x444) returned 0x1 [0166.941] ReadFile (in: hFile=0x444, lpBuffer=0x2386eb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x2386eb8*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0166.992] CloseHandle (hObject=0x444) returned 1 [0166.992] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8B84BB849A29090A3112F400E6DC463AD0368AA0", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8B84BB849A29090A3112F400E6DC463AD0368AA0", lpFilePart=0x0) returned 0x85 [0166.992] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0166.992] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8B84BB849A29090A3112F400E6DC463AD0368AA0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8b84bb849a29090a3112f400e6dc463ad0368aa0"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0166.993] GetFileType (hFile=0x444) returned 0x1 [0166.993] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0166.993] GetFileType (hFile=0x444) returned 0x1 [0166.993] WriteFile (in: hFile=0x444, lpBuffer=0x218c038*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x218c038*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0166.993] CloseHandle (hObject=0x444) returned 1 [0166.993] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8B84BB849A29090A3112F400E6DC463AD0368AA0", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8B84BB849A29090A3112F400E6DC463AD0368AA0", lpFilePart=0x0) returned 0x85 [0166.993] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8B84BB849A29090A3112F400E6DC463AD0368AA0.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8B84BB849A29090A3112F400E6DC463AD0368AA0.xuy", lpFilePart=0x0) returned 0x89 [0166.993] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0166.993] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8B84BB849A29090A3112F400E6DC463AD0368AA0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8b84bb849a29090a3112f400e6dc463ad0368aa0"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61577ff1, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x61577ff1, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x4f618fa4, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0166.993] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0166.993] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8B84BB849A29090A3112F400E6DC463AD0368AA0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8b84bb849a29090a3112f400e6dc463ad0368aa0"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8B84BB849A29090A3112F400E6DC463AD0368AA0.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8b84bb849a29090a3112f400e6dc463ad0368aa0.xuy")) returned 1 [0166.995] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8BA8244A3D96EFB0AD646B78FA7D56C7B7C78669", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8BA8244A3D96EFB0AD646B78FA7D56C7B7C78669", lpFilePart=0x0) returned 0x85 [0166.995] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0166.995] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8BA8244A3D96EFB0AD646B78FA7D56C7B7C78669" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8ba8244a3d96efb0ad646b78fa7d56c7b7c78669"), fInfoLevelId=0x0, lpFileInformation=0x2205b50 | out: lpFileInformation=0x2205b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdef4996a, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xdef4996a, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xdef55cb8, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x528)) returned 1 [0166.995] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0166.995] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8BA8244A3D96EFB0AD646B78FA7D56C7B7C78669", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8BA8244A3D96EFB0AD646B78FA7D56C7B7C78669", lpFilePart=0x0) returned 0x85 [0166.995] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0166.995] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8BA8244A3D96EFB0AD646B78FA7D56C7B7C78669" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8ba8244a3d96efb0ad646b78fa7d56c7b7c78669"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0166.995] GetFileType (hFile=0x444) returned 0x1 [0166.995] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0166.995] GetFileType (hFile=0x444) returned 0x1 [0166.995] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x528 [0166.995] ReadFile (in: hFile=0x444, lpBuffer=0x2206490, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x2206490*, lpNumberOfBytesRead=0x3be5c8*=0x528, lpOverlapped=0x0) returned 1 [0167.012] CloseHandle (hObject=0x444) returned 1 [0167.030] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8BA8244A3D96EFB0AD646B78FA7D56C7B7C78669", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8BA8244A3D96EFB0AD646B78FA7D56C7B7C78669", lpFilePart=0x0) returned 0x85 [0167.030] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0167.030] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8BA8244A3D96EFB0AD646B78FA7D56C7B7C78669" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8ba8244a3d96efb0ad646b78fa7d56c7b7c78669"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0167.032] GetFileType (hFile=0x444) returned 0x1 [0167.032] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0167.032] GetFileType (hFile=0x444) returned 0x1 [0167.033] WriteFile (in: hFile=0x444, lpBuffer=0x227ef10*, nNumberOfBytesToWrite=0x530, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x227ef10*, lpNumberOfBytesWritten=0x3be4d8*=0x530, lpOverlapped=0x0) returned 1 [0167.033] CloseHandle (hObject=0x444) returned 1 [0167.034] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8BA8244A3D96EFB0AD646B78FA7D56C7B7C78669", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8BA8244A3D96EFB0AD646B78FA7D56C7B7C78669", lpFilePart=0x0) returned 0x85 [0167.034] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8BA8244A3D96EFB0AD646B78FA7D56C7B7C78669.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8BA8244A3D96EFB0AD646B78FA7D56C7B7C78669.xuy", lpFilePart=0x0) returned 0x89 [0167.034] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0167.034] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8BA8244A3D96EFB0AD646B78FA7D56C7B7C78669" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8ba8244a3d96efb0ad646b78fa7d56c7b7c78669"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdef4996a, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xdef4996a, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x4f68b892, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x530)) returned 1 [0167.034] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0167.034] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8BA8244A3D96EFB0AD646B78FA7D56C7B7C78669" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8ba8244a3d96efb0ad646b78fa7d56c7b7c78669"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8BA8244A3D96EFB0AD646B78FA7D56C7B7C78669.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8ba8244a3d96efb0ad646b78fa7d56c7b7c78669.xuy")) returned 1 [0167.036] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8C464319D7DA26EEEF0DC70D0E126016B1661BE9", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8C464319D7DA26EEEF0DC70D0E126016B1661BE9", lpFilePart=0x0) returned 0x85 [0167.036] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0167.036] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8C464319D7DA26EEEF0DC70D0E126016B1661BE9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8c464319d7da26eeef0dc70d0e126016b1661be9"), fInfoLevelId=0x0, lpFileInformation=0x22802d0 | out: lpFileInformation=0x22802d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6159e1e8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x6159e1e8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x6159e1e8, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xdfa)) returned 1 [0167.036] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0167.036] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8C464319D7DA26EEEF0DC70D0E126016B1661BE9", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8C464319D7DA26EEEF0DC70D0E126016B1661BE9", lpFilePart=0x0) returned 0x85 [0167.036] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0167.036] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8C464319D7DA26EEEF0DC70D0E126016B1661BE9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8c464319d7da26eeef0dc70d0e126016b1661be9"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0167.036] GetFileType (hFile=0x444) returned 0x1 [0167.036] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0167.036] GetFileType (hFile=0x444) returned 0x1 [0167.036] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xdfa [0167.036] ReadFile (in: hFile=0x444, lpBuffer=0x22814e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x22814e8*, lpNumberOfBytesRead=0x3be5c8*=0xdfa, lpOverlapped=0x0) returned 1 [0167.051] CloseHandle (hObject=0x444) returned 1 [0167.064] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8C464319D7DA26EEEF0DC70D0E126016B1661BE9", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8C464319D7DA26EEEF0DC70D0E126016B1661BE9", lpFilePart=0x0) returned 0x85 [0167.064] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0167.064] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8C464319D7DA26EEEF0DC70D0E126016B1661BE9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8c464319d7da26eeef0dc70d0e126016b1661be9"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0167.066] GetFileType (hFile=0x444) returned 0x1 [0167.066] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0167.066] GetFileType (hFile=0x444) returned 0x1 [0167.066] WriteFile (in: hFile=0x444, lpBuffer=0x22fcb78*, nNumberOfBytesToWrite=0xe00, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x22fcb78*, lpNumberOfBytesWritten=0x3be4d8*=0xe00, lpOverlapped=0x0) returned 1 [0167.067] CloseHandle (hObject=0x444) returned 1 [0167.067] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8C464319D7DA26EEEF0DC70D0E126016B1661BE9", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8C464319D7DA26EEEF0DC70D0E126016B1661BE9", lpFilePart=0x0) returned 0x85 [0167.067] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8C464319D7DA26EEEF0DC70D0E126016B1661BE9.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8C464319D7DA26EEEF0DC70D0E126016B1661BE9.xuy", lpFilePart=0x0) returned 0x89 [0167.067] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0167.067] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8C464319D7DA26EEEF0DC70D0E126016B1661BE9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8c464319d7da26eeef0dc70d0e126016b1661be9"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6159e1e8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x6159e1e8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x4f6d7b2b, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xe00)) returned 1 [0167.067] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0167.067] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8C464319D7DA26EEEF0DC70D0E126016B1661BE9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8c464319d7da26eeef0dc70d0e126016b1661be9"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8C464319D7DA26EEEF0DC70D0E126016B1661BE9.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8c464319d7da26eeef0dc70d0e126016b1661be9.xuy")) returned 1 [0167.069] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8C485AAB55CF31B760712B22FB3F3AB91A5E2021", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8C485AAB55CF31B760712B22FB3F3AB91A5E2021", lpFilePart=0x0) returned 0x85 [0167.069] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0167.069] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8C485AAB55CF31B760712B22FB3F3AB91A5E2021" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8c485aab55cf31b760712b22fb3f3ab91a5e2021"), fInfoLevelId=0x0, lpFileInformation=0x22fdf38 | out: lpFileInformation=0x22fdf38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61577ff1, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x61577ff1, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x61577ff1, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xdff)) returned 1 [0167.069] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0167.069] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8C485AAB55CF31B760712B22FB3F3AB91A5E2021", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8C485AAB55CF31B760712B22FB3F3AB91A5E2021", lpFilePart=0x0) returned 0x85 [0167.069] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0167.069] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8C485AAB55CF31B760712B22FB3F3AB91A5E2021" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8c485aab55cf31b760712b22fb3f3ab91a5e2021"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0167.069] GetFileType (hFile=0x444) returned 0x1 [0167.069] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0167.070] GetFileType (hFile=0x444) returned 0x1 [0167.070] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xdff [0167.070] ReadFile (in: hFile=0x444, lpBuffer=0x22ff150, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x22ff150*, lpNumberOfBytesRead=0x3be5c8*=0xdff, lpOverlapped=0x0) returned 1 [0167.080] CloseHandle (hObject=0x444) returned 1 [0167.090] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8C485AAB55CF31B760712B22FB3F3AB91A5E2021", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8C485AAB55CF31B760712B22FB3F3AB91A5E2021", lpFilePart=0x0) returned 0x85 [0167.090] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0167.090] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8C485AAB55CF31B760712B22FB3F3AB91A5E2021" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8c485aab55cf31b760712b22fb3f3ab91a5e2021"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0167.092] GetFileType (hFile=0x444) returned 0x1 [0167.092] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0167.092] GetFileType (hFile=0x444) returned 0x1 [0167.092] WriteFile (in: hFile=0x444, lpBuffer=0x237a7e0*, nNumberOfBytesToWrite=0xe00, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x237a7e0*, lpNumberOfBytesWritten=0x3be4d8*=0xe00, lpOverlapped=0x0) returned 1 [0167.093] CloseHandle (hObject=0x444) returned 1 [0167.093] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8C485AAB55CF31B760712B22FB3F3AB91A5E2021", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8C485AAB55CF31B760712B22FB3F3AB91A5E2021", lpFilePart=0x0) returned 0x85 [0167.093] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8C485AAB55CF31B760712B22FB3F3AB91A5E2021.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8C485AAB55CF31B760712B22FB3F3AB91A5E2021.xuy", lpFilePart=0x0) returned 0x89 [0167.093] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0167.093] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8C485AAB55CF31B760712B22FB3F3AB91A5E2021" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8c485aab55cf31b760712b22fb3f3ab91a5e2021"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61577ff1, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x61577ff1, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x4f723f74, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xe00)) returned 1 [0167.093] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0167.093] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8C485AAB55CF31B760712B22FB3F3AB91A5E2021" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8c485aab55cf31b760712b22fb3f3ab91a5e2021"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8C485AAB55CF31B760712B22FB3F3AB91A5E2021.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8c485aab55cf31b760712b22fb3f3ab91a5e2021.xuy")) returned 1 [0167.095] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8C527DBB4D7CB3C5361E45317D8ED1748D9913A3", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8C527DBB4D7CB3C5361E45317D8ED1748D9913A3", lpFilePart=0x0) returned 0x85 [0167.095] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0167.095] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8C527DBB4D7CB3C5361E45317D8ED1748D9913A3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8c527dbb4d7cb3c5361e45317d8ed1748d9913a3"), fInfoLevelId=0x0, lpFileInformation=0x237bba0 | out: lpFileInformation=0x237bba0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3697e9d, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xf3697e9d, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0xf3697e9d, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0xf53)) returned 1 [0167.095] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0167.095] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8C527DBB4D7CB3C5361E45317D8ED1748D9913A3", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8C527DBB4D7CB3C5361E45317D8ED1748D9913A3", lpFilePart=0x0) returned 0x85 [0167.095] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0167.095] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8C527DBB4D7CB3C5361E45317D8ED1748D9913A3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8c527dbb4d7cb3c5361e45317d8ed1748d9913a3"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0167.096] GetFileType (hFile=0x444) returned 0x1 [0167.096] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0167.096] GetFileType (hFile=0x444) returned 0x1 [0167.096] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xf53 [0167.096] ReadFile (in: hFile=0x444, lpBuffer=0x237cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x237cf10*, lpNumberOfBytesRead=0x3be5c8*=0xf53, lpOverlapped=0x0) returned 1 [0167.103] CloseHandle (hObject=0x444) returned 1 [0167.146] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8C527DBB4D7CB3C5361E45317D8ED1748D9913A3", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8C527DBB4D7CB3C5361E45317D8ED1748D9913A3", lpFilePart=0x0) returned 0x85 [0167.146] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0167.146] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8C527DBB4D7CB3C5361E45317D8ED1748D9913A3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8c527dbb4d7cb3c5361e45317d8ed1748d9913a3"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0167.148] GetFileType (hFile=0x444) returned 0x1 [0167.148] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0167.148] GetFileType (hFile=0x444) returned 0x1 [0167.148] WriteFile (in: hFile=0x444, lpBuffer=0x21f6a08*, nNumberOfBytesToWrite=0xf60, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x21f6a08*, lpNumberOfBytesWritten=0x3be4d8*=0xf60, lpOverlapped=0x0) returned 1 [0167.157] CloseHandle (hObject=0x444) returned 1 [0167.157] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8C527DBB4D7CB3C5361E45317D8ED1748D9913A3", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8C527DBB4D7CB3C5361E45317D8ED1748D9913A3", lpFilePart=0x0) returned 0x85 [0167.158] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8C527DBB4D7CB3C5361E45317D8ED1748D9913A3.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8C527DBB4D7CB3C5361E45317D8ED1748D9913A3.xuy", lpFilePart=0x0) returned 0x89 [0167.158] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0167.158] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8C527DBB4D7CB3C5361E45317D8ED1748D9913A3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8c527dbb4d7cb3c5361e45317d8ed1748d9913a3"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3697e9d, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xf3697e9d, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x4f7bc911, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xf60)) returned 1 [0167.158] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0167.158] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8C527DBB4D7CB3C5361E45317D8ED1748D9913A3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8c527dbb4d7cb3c5361e45317d8ed1748d9913a3"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8C527DBB4D7CB3C5361E45317D8ED1748D9913A3.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8c527dbb4d7cb3c5361e45317d8ed1748d9913a3.xuy")) returned 1 [0167.159] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8D1CD10B54831000C610115AE0473DAA9952C7A5", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8D1CD10B54831000C610115AE0473DAA9952C7A5", lpFilePart=0x0) returned 0x85 [0167.159] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0167.159] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8D1CD10B54831000C610115AE0473DAA9952C7A5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8d1cd10b54831000c610115ae0473daa9952c7a5"), fInfoLevelId=0x0, lpFileInformation=0x21f7dc8 | out: lpFileInformation=0x21f7dc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5edd4da7, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x5edd4da7, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x6152bc7d, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x1a30)) returned 1 [0167.159] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0167.159] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8D1CD10B54831000C610115AE0473DAA9952C7A5", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8D1CD10B54831000C610115AE0473DAA9952C7A5", lpFilePart=0x0) returned 0x85 [0167.159] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0167.160] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8D1CD10B54831000C610115AE0473DAA9952C7A5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8d1cd10b54831000c610115ae0473daa9952c7a5"), fInfoLevelId=0x0, lpFileInformation=0x21f7fc8 | out: lpFileInformation=0x21f7fc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5edd4da7, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x5edd4da7, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x6152bc7d, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x1a30)) returned 1 [0167.160] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0167.160] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8D1CD10B54831000C610115AE0473DAA9952C7A5", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8D1CD10B54831000C610115AE0473DAA9952C7A5", lpFilePart=0x0) returned 0x85 [0167.160] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0167.160] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8D1CD10B54831000C610115AE0473DAA9952C7A5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8d1cd10b54831000c610115ae0473daa9952c7a5"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0167.161] GetFileType (hFile=0x444) returned 0x1 [0167.161] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0167.161] GetFileType (hFile=0x444) returned 0x1 [0167.161] ReadFile (in: hFile=0x444, lpBuffer=0x21fa4f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x21fa4f8*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0167.173] CloseHandle (hObject=0x444) returned 1 [0167.173] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8D1CD10B54831000C610115AE0473DAA9952C7A5", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8D1CD10B54831000C610115AE0473DAA9952C7A5", lpFilePart=0x0) returned 0x85 [0167.173] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0167.173] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8D1CD10B54831000C610115AE0473DAA9952C7A5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8d1cd10b54831000c610115ae0473daa9952c7a5"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0167.173] GetFileType (hFile=0x444) returned 0x1 [0167.173] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0167.173] GetFileType (hFile=0x444) returned 0x1 [0167.173] WriteFile (in: hFile=0x444, lpBuffer=0x21f81a8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x21f81a8*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0167.173] CloseHandle (hObject=0x444) returned 1 [0167.174] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8D1CD10B54831000C610115AE0473DAA9952C7A5", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8D1CD10B54831000C610115AE0473DAA9952C7A5", lpFilePart=0x0) returned 0x85 [0167.174] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8D1CD10B54831000C610115AE0473DAA9952C7A5.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8D1CD10B54831000C610115AE0473DAA9952C7A5.xuy", lpFilePart=0x0) returned 0x89 [0167.174] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0167.174] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8D1CD10B54831000C610115AE0473DAA9952C7A5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8d1cd10b54831000c610115ae0473daa9952c7a5"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5edd4da7, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x5edd4da7, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x4f7e2b07, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0167.174] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0167.174] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8D1CD10B54831000C610115AE0473DAA9952C7A5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8d1cd10b54831000c610115ae0473daa9952c7a5"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8D1CD10B54831000C610115AE0473DAA9952C7A5.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8d1cd10b54831000c610115ae0473daa9952c7a5.xuy")) returned 1 [0167.175] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8D3548A9E299638E821F0D23205C31173A0F66FA", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8D3548A9E299638E821F0D23205C31173A0F66FA", lpFilePart=0x0) returned 0x85 [0167.175] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0167.175] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8D3548A9E299638E821F0D23205C31173A0F66FA" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8d3548a9e299638e821f0d23205c31173a0f66fa"), fInfoLevelId=0x0, lpFileInformation=0x2276aa0 | out: lpFileInformation=0x2276aa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87b14f76, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x87b14f76, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x87b19d83, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x247f)) returned 1 [0167.178] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0167.178] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8D3548A9E299638E821F0D23205C31173A0F66FA", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8D3548A9E299638E821F0D23205C31173A0F66FA", lpFilePart=0x0) returned 0x85 [0167.178] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0167.178] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8D3548A9E299638E821F0D23205C31173A0F66FA" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8d3548a9e299638e821f0d23205c31173a0f66fa"), fInfoLevelId=0x0, lpFileInformation=0x2276ca0 | out: lpFileInformation=0x2276ca0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87b14f76, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x87b14f76, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x87b19d83, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x247f)) returned 1 [0167.178] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0167.178] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8D3548A9E299638E821F0D23205C31173A0F66FA", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8D3548A9E299638E821F0D23205C31173A0F66FA", lpFilePart=0x0) returned 0x85 [0167.178] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0167.178] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8D3548A9E299638E821F0D23205C31173A0F66FA" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8d3548a9e299638e821f0d23205c31173a0f66fa"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0167.179] GetFileType (hFile=0x444) returned 0x1 [0167.179] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0167.179] GetFileType (hFile=0x444) returned 0x1 [0167.179] ReadFile (in: hFile=0x444, lpBuffer=0x22791d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x22791d0*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0167.287] CloseHandle (hObject=0x444) returned 1 [0167.288] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8D3548A9E299638E821F0D23205C31173A0F66FA", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8D3548A9E299638E821F0D23205C31173A0F66FA", lpFilePart=0x0) returned 0x85 [0167.288] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0167.288] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8D3548A9E299638E821F0D23205C31173A0F66FA" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8d3548a9e299638e821f0d23205c31173a0f66fa"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0167.288] GetFileType (hFile=0x444) returned 0x1 [0167.288] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0167.288] GetFileType (hFile=0x444) returned 0x1 [0167.288] WriteFile (in: hFile=0x444, lpBuffer=0x2276e80*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x2276e80*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0167.288] CloseHandle (hObject=0x444) returned 1 [0167.289] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8D3548A9E299638E821F0D23205C31173A0F66FA", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8D3548A9E299638E821F0D23205C31173A0F66FA", lpFilePart=0x0) returned 0x85 [0167.289] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8D3548A9E299638E821F0D23205C31173A0F66FA.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8D3548A9E299638E821F0D23205C31173A0F66FA.xuy", lpFilePart=0x0) returned 0x89 [0167.289] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0167.289] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8D3548A9E299638E821F0D23205C31173A0F66FA" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8d3548a9e299638e821f0d23205c31173a0f66fa"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87b14f76, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x87b14f76, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x4f8edbdf, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x247f)) returned 1 [0167.289] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0167.289] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8D3548A9E299638E821F0D23205C31173A0F66FA" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8d3548a9e299638e821f0d23205c31173a0f66fa"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8D3548A9E299638E821F0D23205C31173A0F66FA.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8d3548a9e299638e821f0d23205c31173a0f66fa.xuy")) returned 1 [0167.290] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8E7A6F14994CB357D289B605F3AE15CCEB964D75", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8E7A6F14994CB357D289B605F3AE15CCEB964D75", lpFilePart=0x0) returned 0x85 [0167.290] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0167.290] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8E7A6F14994CB357D289B605F3AE15CCEB964D75" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8e7a6f14994cb357d289b605f3ae15cceb964d75"), fInfoLevelId=0x0, lpFileInformation=0x22f5778 | out: lpFileInformation=0x22f5778*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3404afb, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xf3404afb, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0xf340722a, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x1260)) returned 1 [0167.290] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0167.290] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8E7A6F14994CB357D289B605F3AE15CCEB964D75", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8E7A6F14994CB357D289B605F3AE15CCEB964D75", lpFilePart=0x0) returned 0x85 [0167.290] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0167.290] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8E7A6F14994CB357D289B605F3AE15CCEB964D75" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8e7a6f14994cb357d289b605f3ae15cceb964d75"), fInfoLevelId=0x0, lpFileInformation=0x22f5978 | out: lpFileInformation=0x22f5978*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3404afb, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xf3404afb, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0xf340722a, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x1260)) returned 1 [0167.291] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0167.291] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8E7A6F14994CB357D289B605F3AE15CCEB964D75", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8E7A6F14994CB357D289B605F3AE15CCEB964D75", lpFilePart=0x0) returned 0x85 [0167.291] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0167.291] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8E7A6F14994CB357D289B605F3AE15CCEB964D75" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8e7a6f14994cb357d289b605f3ae15cceb964d75"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0167.292] GetFileType (hFile=0x444) returned 0x1 [0167.292] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0167.292] GetFileType (hFile=0x444) returned 0x1 [0167.292] ReadFile (in: hFile=0x444, lpBuffer=0x22f7ea8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x22f7ea8*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0167.304] CloseHandle (hObject=0x444) returned 1 [0167.304] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8E7A6F14994CB357D289B605F3AE15CCEB964D75", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8E7A6F14994CB357D289B605F3AE15CCEB964D75", lpFilePart=0x0) returned 0x85 [0167.304] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0167.304] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8E7A6F14994CB357D289B605F3AE15CCEB964D75" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8e7a6f14994cb357d289b605f3ae15cceb964d75"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0167.304] GetFileType (hFile=0x444) returned 0x1 [0167.304] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0167.304] GetFileType (hFile=0x444) returned 0x1 [0167.304] WriteFile (in: hFile=0x444, lpBuffer=0x22f5b58*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x22f5b58*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0167.305] CloseHandle (hObject=0x444) returned 1 [0167.305] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8E7A6F14994CB357D289B605F3AE15CCEB964D75", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8E7A6F14994CB357D289B605F3AE15CCEB964D75", lpFilePart=0x0) returned 0x85 [0167.305] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8E7A6F14994CB357D289B605F3AE15CCEB964D75.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8E7A6F14994CB357D289B605F3AE15CCEB964D75.xuy", lpFilePart=0x0) returned 0x89 [0167.305] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0167.305] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8E7A6F14994CB357D289B605F3AE15CCEB964D75" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8e7a6f14994cb357d289b605f3ae15cceb964d75"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3404afb, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xf3404afb, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x4f913d70, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0167.305] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0167.305] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8E7A6F14994CB357D289B605F3AE15CCEB964D75" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8e7a6f14994cb357d289b605f3ae15cceb964d75"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8E7A6F14994CB357D289B605F3AE15CCEB964D75.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8e7a6f14994cb357d289b605f3ae15cceb964d75.xuy")) returned 1 [0167.307] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8EBD4C30A0A1D17D352ED6E095AA363915E38384", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8EBD4C30A0A1D17D352ED6E095AA363915E38384", lpFilePart=0x0) returned 0x85 [0167.307] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0167.307] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8EBD4C30A0A1D17D352ED6E095AA363915E38384" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8ebd4c30a0a1d17d352ed6e095aa363915e38384"), fInfoLevelId=0x0, lpFileInformation=0x2374450 | out: lpFileInformation=0x2374450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82895c80, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x82895c80, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x82898463, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x4d2)) returned 1 [0167.307] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0167.307] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8EBD4C30A0A1D17D352ED6E095AA363915E38384", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8EBD4C30A0A1D17D352ED6E095AA363915E38384", lpFilePart=0x0) returned 0x85 [0167.307] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0167.307] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8EBD4C30A0A1D17D352ED6E095AA363915E38384" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8ebd4c30a0a1d17d352ed6e095aa363915e38384"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0167.308] GetFileType (hFile=0x444) returned 0x1 [0167.308] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0167.308] GetFileType (hFile=0x444) returned 0x1 [0167.308] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x4d2 [0167.308] ReadFile (in: hFile=0x444, lpBuffer=0x2374d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x2374d40*, lpNumberOfBytesRead=0x3be5c8*=0x4d2, lpOverlapped=0x0) returned 1 [0167.318] CloseHandle (hObject=0x444) returned 1 [0167.359] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8EBD4C30A0A1D17D352ED6E095AA363915E38384", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8EBD4C30A0A1D17D352ED6E095AA363915E38384", lpFilePart=0x0) returned 0x85 [0167.359] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0167.359] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8EBD4C30A0A1D17D352ED6E095AA363915E38384" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8ebd4c30a0a1d17d352ed6e095aa363915e38384"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0167.361] GetFileType (hFile=0x444) returned 0x1 [0167.361] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0167.361] GetFileType (hFile=0x444) returned 0x1 [0167.361] WriteFile (in: hFile=0x444, lpBuffer=0x21ecb88*, nNumberOfBytesToWrite=0x4e0, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x21ecb88*, lpNumberOfBytesWritten=0x3be4d8*=0x4e0, lpOverlapped=0x0) returned 1 [0167.362] CloseHandle (hObject=0x444) returned 1 [0167.362] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8EBD4C30A0A1D17D352ED6E095AA363915E38384", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8EBD4C30A0A1D17D352ED6E095AA363915E38384", lpFilePart=0x0) returned 0x85 [0167.362] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8EBD4C30A0A1D17D352ED6E095AA363915E38384.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8EBD4C30A0A1D17D352ED6E095AA363915E38384.xuy", lpFilePart=0x0) returned 0x89 [0167.362] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0167.362] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8EBD4C30A0A1D17D352ED6E095AA363915E38384" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8ebd4c30a0a1d17d352ed6e095aa363915e38384"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82895c80, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x82895c80, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x4f9acb8f, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x4e0)) returned 1 [0167.363] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0167.363] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8EBD4C30A0A1D17D352ED6E095AA363915E38384" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8ebd4c30a0a1d17d352ed6e095aa363915e38384"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8EBD4C30A0A1D17D352ED6E095AA363915E38384.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8ebd4c30a0a1d17d352ed6e095aa363915e38384.xuy")) returned 1 [0167.364] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8F27E0DD6B745A71BFEF380695A51D56F3EF3131", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8F27E0DD6B745A71BFEF380695A51D56F3EF3131", lpFilePart=0x0) returned 0x85 [0167.364] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0167.364] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8F27E0DD6B745A71BFEF380695A51D56F3EF3131" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8f27e0dd6b745a71bfef380695a51d56f3ef3131"), fInfoLevelId=0x0, lpFileInformation=0x21edf48 | out: lpFileInformation=0x21edf48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48defa6b, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x48defa6b, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x48e15cb4, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0x42d)) returned 1 [0167.364] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0167.364] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8F27E0DD6B745A71BFEF380695A51D56F3EF3131", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8F27E0DD6B745A71BFEF380695A51D56F3EF3131", lpFilePart=0x0) returned 0x85 [0167.364] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0167.364] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8F27E0DD6B745A71BFEF380695A51D56F3EF3131" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8f27e0dd6b745a71bfef380695a51d56f3ef3131"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0167.364] GetFileType (hFile=0x444) returned 0x1 [0167.364] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0167.364] GetFileType (hFile=0x444) returned 0x1 [0167.364] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x42d [0167.365] ReadFile (in: hFile=0x444, lpBuffer=0x21ee790, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x21ee790*, lpNumberOfBytesRead=0x3be5c8*=0x42d, lpOverlapped=0x0) returned 1 [0167.375] CloseHandle (hObject=0x444) returned 1 [0167.386] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8F27E0DD6B745A71BFEF380695A51D56F3EF3131", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8F27E0DD6B745A71BFEF380695A51D56F3EF3131", lpFilePart=0x0) returned 0x85 [0167.386] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0167.386] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8F27E0DD6B745A71BFEF380695A51D56F3EF3131" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8f27e0dd6b745a71bfef380695a51d56f3ef3131"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0167.387] GetFileType (hFile=0x444) returned 0x1 [0167.388] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0167.388] GetFileType (hFile=0x444) returned 0x1 [0167.388] WriteFile (in: hFile=0x444, lpBuffer=0x2266d10*, nNumberOfBytesToWrite=0x430, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x2266d10*, lpNumberOfBytesWritten=0x3be4d8*=0x430, lpOverlapped=0x0) returned 1 [0167.389] CloseHandle (hObject=0x444) returned 1 [0167.389] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8F27E0DD6B745A71BFEF380695A51D56F3EF3131", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8F27E0DD6B745A71BFEF380695A51D56F3EF3131", lpFilePart=0x0) returned 0x85 [0167.389] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8F27E0DD6B745A71BFEF380695A51D56F3EF3131.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8F27E0DD6B745A71BFEF380695A51D56F3EF3131.xuy", lpFilePart=0x0) returned 0x89 [0167.389] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0167.389] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8F27E0DD6B745A71BFEF380695A51D56F3EF3131" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8f27e0dd6b745a71bfef380695a51d56f3ef3131"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48defa6b, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x48defa6b, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x4f9f8cf1, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x430)) returned 1 [0167.389] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0167.389] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8F27E0DD6B745A71BFEF380695A51D56F3EF3131" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8f27e0dd6b745a71bfef380695a51d56f3ef3131"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8F27E0DD6B745A71BFEF380695A51D56F3EF3131.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8f27e0dd6b745a71bfef380695a51d56f3ef3131.xuy")) returned 1 [0167.391] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8F66570022BE064D8FB444E6FD0228A3516536D2", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8F66570022BE064D8FB444E6FD0228A3516536D2", lpFilePart=0x0) returned 0x85 [0167.391] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0167.391] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8F66570022BE064D8FB444E6FD0228A3516536D2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8f66570022be064d8fb444e6fd0228a3516536d2"), fInfoLevelId=0x0, lpFileInformation=0x22680d0 | out: lpFileInformation=0x22680d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0612806, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xe0612806, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xe0614f3b, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x1aeb)) returned 1 [0167.391] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0167.391] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8F66570022BE064D8FB444E6FD0228A3516536D2", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8F66570022BE064D8FB444E6FD0228A3516536D2", lpFilePart=0x0) returned 0x85 [0167.391] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0167.391] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8F66570022BE064D8FB444E6FD0228A3516536D2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8f66570022be064d8fb444e6fd0228a3516536d2"), fInfoLevelId=0x0, lpFileInformation=0x22682d0 | out: lpFileInformation=0x22682d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0612806, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xe0612806, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xe0614f3b, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x1aeb)) returned 1 [0167.391] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0167.391] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8F66570022BE064D8FB444E6FD0228A3516536D2", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8F66570022BE064D8FB444E6FD0228A3516536D2", lpFilePart=0x0) returned 0x85 [0167.391] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0167.391] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8F66570022BE064D8FB444E6FD0228A3516536D2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8f66570022be064d8fb444e6fd0228a3516536d2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0167.392] GetFileType (hFile=0x444) returned 0x1 [0167.392] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0167.392] GetFileType (hFile=0x444) returned 0x1 [0167.392] ReadFile (in: hFile=0x444, lpBuffer=0x226a800, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x226a800*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0167.409] CloseHandle (hObject=0x444) returned 1 [0167.409] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8F66570022BE064D8FB444E6FD0228A3516536D2", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8F66570022BE064D8FB444E6FD0228A3516536D2", lpFilePart=0x0) returned 0x85 [0167.409] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0167.409] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8F66570022BE064D8FB444E6FD0228A3516536D2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8f66570022be064d8fb444e6fd0228a3516536d2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0167.409] GetFileType (hFile=0x444) returned 0x1 [0167.409] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0167.409] GetFileType (hFile=0x444) returned 0x1 [0167.409] WriteFile (in: hFile=0x444, lpBuffer=0x22684b0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x22684b0*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0167.409] CloseHandle (hObject=0x444) returned 1 [0167.413] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8F66570022BE064D8FB444E6FD0228A3516536D2", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8F66570022BE064D8FB444E6FD0228A3516536D2", lpFilePart=0x0) returned 0x85 [0167.413] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8F66570022BE064D8FB444E6FD0228A3516536D2.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8F66570022BE064D8FB444E6FD0228A3516536D2.xuy", lpFilePart=0x0) returned 0x89 [0167.413] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0167.413] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8F66570022BE064D8FB444E6FD0228A3516536D2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8f66570022be064d8fb444e6fd0228a3516536d2"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0612806, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xe0612806, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x4fa1ee89, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0167.413] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0167.413] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8F66570022BE064D8FB444E6FD0228A3516536D2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8f66570022be064d8fb444e6fd0228a3516536d2"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8F66570022BE064D8FB444E6FD0228A3516536D2.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8f66570022be064d8fb444e6fd0228a3516536d2.xuy")) returned 1 [0167.414] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8FC28C2700F124C5A21F0A4C78DD979612C11402", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8FC28C2700F124C5A21F0A4C78DD979612C11402", lpFilePart=0x0) returned 0x85 [0167.414] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0167.414] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8FC28C2700F124C5A21F0A4C78DD979612C11402" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8fc28c2700f124c5a21f0a4c78dd979612c11402"), fInfoLevelId=0x0, lpFileInformation=0x22e6da8 | out: lpFileInformation=0x22e6da8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86246790, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x86246790, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x886a421c, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x1277)) returned 1 [0167.415] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0167.415] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8FC28C2700F124C5A21F0A4C78DD979612C11402", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8FC28C2700F124C5A21F0A4C78DD979612C11402", lpFilePart=0x0) returned 0x85 [0167.415] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0167.415] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8FC28C2700F124C5A21F0A4C78DD979612C11402" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8fc28c2700f124c5a21f0a4c78dd979612c11402"), fInfoLevelId=0x0, lpFileInformation=0x22e6fa8 | out: lpFileInformation=0x22e6fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86246790, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x86246790, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x886a421c, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x1277)) returned 1 [0167.415] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0167.415] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8FC28C2700F124C5A21F0A4C78DD979612C11402", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8FC28C2700F124C5A21F0A4C78DD979612C11402", lpFilePart=0x0) returned 0x85 [0167.415] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0167.415] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8FC28C2700F124C5A21F0A4C78DD979612C11402" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8fc28c2700f124c5a21f0a4c78dd979612c11402"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0167.416] GetFileType (hFile=0x444) returned 0x1 [0167.416] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0167.416] GetFileType (hFile=0x444) returned 0x1 [0167.416] ReadFile (in: hFile=0x444, lpBuffer=0x22e94d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x22e94d8*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0167.437] CloseHandle (hObject=0x444) returned 1 [0167.437] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8FC28C2700F124C5A21F0A4C78DD979612C11402", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8FC28C2700F124C5A21F0A4C78DD979612C11402", lpFilePart=0x0) returned 0x85 [0167.437] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0167.437] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8FC28C2700F124C5A21F0A4C78DD979612C11402" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8fc28c2700f124c5a21f0a4c78dd979612c11402"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0167.438] GetFileType (hFile=0x444) returned 0x1 [0167.438] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0167.438] GetFileType (hFile=0x444) returned 0x1 [0167.438] WriteFile (in: hFile=0x444, lpBuffer=0x22e7188*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x22e7188*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0167.438] CloseHandle (hObject=0x444) returned 1 [0167.438] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8FC28C2700F124C5A21F0A4C78DD979612C11402", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8FC28C2700F124C5A21F0A4C78DD979612C11402", lpFilePart=0x0) returned 0x85 [0167.438] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8FC28C2700F124C5A21F0A4C78DD979612C11402.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8FC28C2700F124C5A21F0A4C78DD979612C11402.xuy", lpFilePart=0x0) returned 0x89 [0167.438] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0167.438] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8FC28C2700F124C5A21F0A4C78DD979612C11402" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8fc28c2700f124c5a21f0a4c78dd979612c11402"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86246790, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x86246790, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x4fa6b3b3, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0167.438] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0167.438] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8FC28C2700F124C5A21F0A4C78DD979612C11402" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8fc28c2700f124c5a21f0a4c78dd979612c11402"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8FC28C2700F124C5A21F0A4C78DD979612C11402.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8fc28c2700f124c5a21f0a4c78dd979612c11402.xuy")) returned 1 [0167.440] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9003FF2348AFEF56E6377CF6330A59048823186D", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9003FF2348AFEF56E6377CF6330A59048823186D", lpFilePart=0x0) returned 0x85 [0167.440] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0167.440] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9003FF2348AFEF56E6377CF6330A59048823186D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9003ff2348afef56e6377cf6330a59048823186d"), fInfoLevelId=0x0, lpFileInformation=0x2365a80 | out: lpFileInformation=0x2365a80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87b14f76, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x87b14f76, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x87b19d83, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x528)) returned 1 [0167.440] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0167.440] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9003FF2348AFEF56E6377CF6330A59048823186D", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9003FF2348AFEF56E6377CF6330A59048823186D", lpFilePart=0x0) returned 0x85 [0167.440] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0167.440] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9003FF2348AFEF56E6377CF6330A59048823186D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9003ff2348afef56e6377cf6330a59048823186d"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0167.440] GetFileType (hFile=0x444) returned 0x1 [0167.440] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0167.440] GetFileType (hFile=0x444) returned 0x1 [0167.440] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x528 [0167.440] ReadFile (in: hFile=0x444, lpBuffer=0x23663c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x23663c0*, lpNumberOfBytesRead=0x3be5c8*=0x528, lpOverlapped=0x0) returned 1 [0167.457] CloseHandle (hObject=0x444) returned 1 [0167.499] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9003FF2348AFEF56E6377CF6330A59048823186D", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9003FF2348AFEF56E6377CF6330A59048823186D", lpFilePart=0x0) returned 0x85 [0167.499] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0167.499] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9003FF2348AFEF56E6377CF6330A59048823186D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9003ff2348afef56e6377cf6330a59048823186d"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0167.501] GetFileType (hFile=0x444) returned 0x1 [0167.501] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0167.501] GetFileType (hFile=0x444) returned 0x1 [0167.501] WriteFile (in: hFile=0x444, lpBuffer=0x21dee70*, nNumberOfBytesToWrite=0x530, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x21dee70*, lpNumberOfBytesWritten=0x3be4d8*=0x530, lpOverlapped=0x0) returned 1 [0167.502] CloseHandle (hObject=0x444) returned 1 [0167.502] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9003FF2348AFEF56E6377CF6330A59048823186D", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9003FF2348AFEF56E6377CF6330A59048823186D", lpFilePart=0x0) returned 0x85 [0167.502] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9003FF2348AFEF56E6377CF6330A59048823186D.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9003FF2348AFEF56E6377CF6330A59048823186D.xuy", lpFilePart=0x0) returned 0x89 [0167.502] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0167.502] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9003FF2348AFEF56E6377CF6330A59048823186D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9003ff2348afef56e6377cf6330a59048823186d"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87b14f76, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x87b14f76, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x4fb03d18, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x530)) returned 1 [0167.502] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0167.502] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9003FF2348AFEF56E6377CF6330A59048823186D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9003ff2348afef56e6377cf6330a59048823186d"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9003FF2348AFEF56E6377CF6330A59048823186D.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9003ff2348afef56e6377cf6330a59048823186d.xuy")) returned 1 [0167.504] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9097930649FE7A5ED5C370E284F3159B56458EFF", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9097930649FE7A5ED5C370E284F3159B56458EFF", lpFilePart=0x0) returned 0x85 [0167.504] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0167.504] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9097930649FE7A5ED5C370E284F3159B56458EFF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9097930649fe7a5ed5c370e284f3159b56458eff"), fInfoLevelId=0x0, lpFileInformation=0x21e0230 | out: lpFileInformation=0x21e0230*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc269999d, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc269999d, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x3d04f17a, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0x1124)) returned 1 [0167.504] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0167.504] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9097930649FE7A5ED5C370E284F3159B56458EFF", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9097930649FE7A5ED5C370E284F3159B56458EFF", lpFilePart=0x0) returned 0x85 [0167.504] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0167.504] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9097930649FE7A5ED5C370E284F3159B56458EFF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9097930649fe7a5ed5c370e284f3159b56458eff"), fInfoLevelId=0x0, lpFileInformation=0x21e0430 | out: lpFileInformation=0x21e0430*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc269999d, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc269999d, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x3d04f17a, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0x1124)) returned 1 [0167.504] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0167.504] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9097930649FE7A5ED5C370E284F3159B56458EFF", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9097930649FE7A5ED5C370E284F3159B56458EFF", lpFilePart=0x0) returned 0x85 [0167.504] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0167.504] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9097930649FE7A5ED5C370E284F3159B56458EFF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9097930649fe7a5ed5c370e284f3159b56458eff"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0167.505] GetFileType (hFile=0x444) returned 0x1 [0167.505] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0167.505] GetFileType (hFile=0x444) returned 0x1 [0167.505] ReadFile (in: hFile=0x444, lpBuffer=0x21e2960, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x21e2960*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0167.528] CloseHandle (hObject=0x444) returned 1 [0167.528] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9097930649FE7A5ED5C370E284F3159B56458EFF", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9097930649FE7A5ED5C370E284F3159B56458EFF", lpFilePart=0x0) returned 0x85 [0167.528] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0167.528] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9097930649FE7A5ED5C370E284F3159B56458EFF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9097930649fe7a5ed5c370e284f3159b56458eff"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0167.529] GetFileType (hFile=0x444) returned 0x1 [0167.529] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0167.529] GetFileType (hFile=0x444) returned 0x1 [0167.529] WriteFile (in: hFile=0x444, lpBuffer=0x21e0610*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x21e0610*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0167.529] CloseHandle (hObject=0x444) returned 1 [0167.529] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9097930649FE7A5ED5C370E284F3159B56458EFF", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9097930649FE7A5ED5C370E284F3159B56458EFF", lpFilePart=0x0) returned 0x85 [0167.529] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9097930649FE7A5ED5C370E284F3159B56458EFF.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9097930649FE7A5ED5C370E284F3159B56458EFF.xuy", lpFilePart=0x0) returned 0x89 [0167.529] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0167.529] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9097930649FE7A5ED5C370E284F3159B56458EFF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9097930649fe7a5ed5c370e284f3159b56458eff"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc269999d, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc269999d, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x4fb50152, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0167.529] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0167.529] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9097930649FE7A5ED5C370E284F3159B56458EFF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9097930649fe7a5ed5c370e284f3159b56458eff"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9097930649FE7A5ED5C370E284F3159B56458EFF.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9097930649fe7a5ed5c370e284f3159b56458eff.xuy")) returned 1 [0167.531] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\90B5A4DFA3D04FFCC1C2205E680CBA62807B3285", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\90B5A4DFA3D04FFCC1C2205E680CBA62807B3285", lpFilePart=0x0) returned 0x85 [0167.531] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0167.531] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\90B5A4DFA3D04FFCC1C2205E680CBA62807B3285" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\90b5a4dfa3d04ffcc1c2205e680cba62807b3285"), fInfoLevelId=0x0, lpFileInformation=0x225ef08 | out: lpFileInformation=0x225ef08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x862f3d2c, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x862f3d2c, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x862f6448, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x1233)) returned 1 [0167.531] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0167.531] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\90B5A4DFA3D04FFCC1C2205E680CBA62807B3285", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\90B5A4DFA3D04FFCC1C2205E680CBA62807B3285", lpFilePart=0x0) returned 0x85 [0167.531] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0167.531] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\90B5A4DFA3D04FFCC1C2205E680CBA62807B3285" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\90b5a4dfa3d04ffcc1c2205e680cba62807b3285"), fInfoLevelId=0x0, lpFileInformation=0x225f108 | out: lpFileInformation=0x225f108*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x862f3d2c, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x862f3d2c, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x862f6448, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x1233)) returned 1 [0167.531] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0167.531] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\90B5A4DFA3D04FFCC1C2205E680CBA62807B3285", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\90B5A4DFA3D04FFCC1C2205E680CBA62807B3285", lpFilePart=0x0) returned 0x85 [0167.531] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0167.531] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\90B5A4DFA3D04FFCC1C2205E680CBA62807B3285" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\90b5a4dfa3d04ffcc1c2205e680cba62807b3285"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0167.532] GetFileType (hFile=0x444) returned 0x1 [0167.532] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0167.532] GetFileType (hFile=0x444) returned 0x1 [0167.532] ReadFile (in: hFile=0x444, lpBuffer=0x2261638, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x2261638*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0167.546] CloseHandle (hObject=0x444) returned 1 [0167.546] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\90B5A4DFA3D04FFCC1C2205E680CBA62807B3285", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\90B5A4DFA3D04FFCC1C2205E680CBA62807B3285", lpFilePart=0x0) returned 0x85 [0167.547] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0167.547] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\90B5A4DFA3D04FFCC1C2205E680CBA62807B3285" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\90b5a4dfa3d04ffcc1c2205e680cba62807b3285"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0167.547] GetFileType (hFile=0x444) returned 0x1 [0167.547] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0167.547] GetFileType (hFile=0x444) returned 0x1 [0167.547] WriteFile (in: hFile=0x444, lpBuffer=0x225f2e8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x225f2e8*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0167.547] CloseHandle (hObject=0x444) returned 1 [0167.547] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\90B5A4DFA3D04FFCC1C2205E680CBA62807B3285", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\90B5A4DFA3D04FFCC1C2205E680CBA62807B3285", lpFilePart=0x0) returned 0x85 [0167.547] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\90B5A4DFA3D04FFCC1C2205E680CBA62807B3285.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\90B5A4DFA3D04FFCC1C2205E680CBA62807B3285.xuy", lpFilePart=0x0) returned 0x89 [0167.547] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0167.547] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\90B5A4DFA3D04FFCC1C2205E680CBA62807B3285" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\90b5a4dfa3d04ffcc1c2205e680cba62807b3285"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x862f3d2c, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x862f3d2c, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x4fb76830, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0167.548] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0167.548] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\90B5A4DFA3D04FFCC1C2205E680CBA62807B3285" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\90b5a4dfa3d04ffcc1c2205e680cba62807b3285"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\90B5A4DFA3D04FFCC1C2205E680CBA62807B3285.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\90b5a4dfa3d04ffcc1c2205e680cba62807b3285.xuy")) returned 1 [0167.549] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\911BFEFE1DACA4BC169B5C5D19D4E9E4C2E17924", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\911BFEFE1DACA4BC169B5C5D19D4E9E4C2E17924", lpFilePart=0x0) returned 0x85 [0167.549] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0167.549] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\911BFEFE1DACA4BC169B5C5D19D4E9E4C2E17924" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\911bfefe1daca4bc169b5c5d19d4e9e4c2e17924"), fInfoLevelId=0x0, lpFileInformation=0x22ddbe0 | out: lpFileInformation=0x22ddbe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c20ab54, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x7c20ab54, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x7c20ab54, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0xa05)) returned 1 [0167.550] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0167.550] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\911BFEFE1DACA4BC169B5C5D19D4E9E4C2E17924", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\911BFEFE1DACA4BC169B5C5D19D4E9E4C2E17924", lpFilePart=0x0) returned 0x85 [0167.550] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0167.550] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\911BFEFE1DACA4BC169B5C5D19D4E9E4C2E17924" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\911bfefe1daca4bc169b5c5d19d4e9e4c2e17924"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0167.550] GetFileType (hFile=0x444) returned 0x1 [0167.550] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0167.550] GetFileType (hFile=0x444) returned 0x1 [0167.550] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xa05 [0167.550] ReadFile (in: hFile=0x444, lpBuffer=0x22dea00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x22dea00*, lpNumberOfBytesRead=0x3be5c8*=0xa05, lpOverlapped=0x0) returned 1 [0167.562] CloseHandle (hObject=0x444) returned 1 [0167.572] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\911BFEFE1DACA4BC169B5C5D19D4E9E4C2E17924", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\911BFEFE1DACA4BC169B5C5D19D4E9E4C2E17924", lpFilePart=0x0) returned 0x85 [0167.572] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0167.572] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\911BFEFE1DACA4BC169B5C5D19D4E9E4C2E17924" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\911bfefe1daca4bc169b5c5d19d4e9e4c2e17924"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0167.574] GetFileType (hFile=0x444) returned 0x1 [0167.574] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0167.574] GetFileType (hFile=0x444) returned 0x1 [0167.575] WriteFile (in: hFile=0x444, lpBuffer=0x2358ce8*, nNumberOfBytesToWrite=0xa10, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x2358ce8*, lpNumberOfBytesWritten=0x3be4d8*=0xa10, lpOverlapped=0x0) returned 1 [0167.576] CloseHandle (hObject=0x444) returned 1 [0167.576] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\911BFEFE1DACA4BC169B5C5D19D4E9E4C2E17924", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\911BFEFE1DACA4BC169B5C5D19D4E9E4C2E17924", lpFilePart=0x0) returned 0x85 [0167.576] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\911BFEFE1DACA4BC169B5C5D19D4E9E4C2E17924.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\911BFEFE1DACA4BC169B5C5D19D4E9E4C2E17924.xuy", lpFilePart=0x0) returned 0x89 [0167.576] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0167.576] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\911BFEFE1DACA4BC169B5C5D19D4E9E4C2E17924" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\911bfefe1daca4bc169b5c5d19d4e9e4c2e17924"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c20ab54, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x7c20ab54, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x4fb9c655, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xa10)) returned 1 [0167.576] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0167.576] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\911BFEFE1DACA4BC169B5C5D19D4E9E4C2E17924" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\911bfefe1daca4bc169b5c5d19d4e9e4c2e17924"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\911BFEFE1DACA4BC169B5C5D19D4E9E4C2E17924.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\911bfefe1daca4bc169b5c5d19d4e9e4c2e17924.xuy")) returned 1 [0167.578] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\912362C536960BD3B81AEF8024AEF4BCE0BEC8EF", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\912362C536960BD3B81AEF8024AEF4BCE0BEC8EF", lpFilePart=0x0) returned 0x85 [0167.578] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0167.578] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\912362C536960BD3B81AEF8024AEF4BCE0BEC8EF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\912362c536960bd3b81aef8024aef4bce0bec8ef"), fInfoLevelId=0x0, lpFileInformation=0x235a0a8 | out: lpFileInformation=0x235a0a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x549499fa, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x549499fa, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x549499fa, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x4ef0)) returned 1 [0167.578] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0167.578] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\912362C536960BD3B81AEF8024AEF4BCE0BEC8EF", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\912362C536960BD3B81AEF8024AEF4BCE0BEC8EF", lpFilePart=0x0) returned 0x85 [0167.578] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0167.579] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\912362C536960BD3B81AEF8024AEF4BCE0BEC8EF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\912362c536960bd3b81aef8024aef4bce0bec8ef"), fInfoLevelId=0x0, lpFileInformation=0x235a2a8 | out: lpFileInformation=0x235a2a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x549499fa, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x549499fa, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x549499fa, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x4ef0)) returned 1 [0167.579] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0167.579] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\912362C536960BD3B81AEF8024AEF4BCE0BEC8EF", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\912362C536960BD3B81AEF8024AEF4BCE0BEC8EF", lpFilePart=0x0) returned 0x85 [0167.579] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0167.579] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\912362C536960BD3B81AEF8024AEF4BCE0BEC8EF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\912362c536960bd3b81aef8024aef4bce0bec8ef"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0167.580] GetFileType (hFile=0x444) returned 0x1 [0167.580] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0167.580] GetFileType (hFile=0x444) returned 0x1 [0167.580] ReadFile (in: hFile=0x444, lpBuffer=0x235c7d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x235c7d8*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0167.627] CloseHandle (hObject=0x444) returned 1 [0167.627] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\912362C536960BD3B81AEF8024AEF4BCE0BEC8EF", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\912362C536960BD3B81AEF8024AEF4BCE0BEC8EF", lpFilePart=0x0) returned 0x85 [0167.627] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0167.627] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\912362C536960BD3B81AEF8024AEF4BCE0BEC8EF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\912362c536960bd3b81aef8024aef4bce0bec8ef"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0167.628] GetFileType (hFile=0x444) returned 0x1 [0167.628] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0167.628] GetFileType (hFile=0x444) returned 0x1 [0167.628] WriteFile (in: hFile=0x444, lpBuffer=0x218c038*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x218c038*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0167.628] CloseHandle (hObject=0x444) returned 1 [0167.628] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\912362C536960BD3B81AEF8024AEF4BCE0BEC8EF", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\912362C536960BD3B81AEF8024AEF4BCE0BEC8EF", lpFilePart=0x0) returned 0x85 [0167.628] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\912362C536960BD3B81AEF8024AEF4BCE0BEC8EF.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\912362C536960BD3B81AEF8024AEF4BCE0BEC8EF.xuy", lpFilePart=0x0) returned 0x89 [0167.628] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0167.628] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\912362C536960BD3B81AEF8024AEF4BCE0BEC8EF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\912362c536960bd3b81aef8024aef4bce0bec8ef"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x549499fa, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x549499fa, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x4fc3538e, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x4ef0)) returned 1 [0167.628] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0167.628] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\912362C536960BD3B81AEF8024AEF4BCE0BEC8EF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\912362c536960bd3b81aef8024aef4bce0bec8ef"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\912362C536960BD3B81AEF8024AEF4BCE0BEC8EF.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\912362c536960bd3b81aef8024aef4bce0bec8ef.xuy")) returned 1 [0167.630] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\915818CB6D8B5C4B402F57730DDC15E3C33A0BCC", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\915818CB6D8B5C4B402F57730DDC15E3C33A0BCC", lpFilePart=0x0) returned 0x85 [0167.630] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0167.630] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\915818CB6D8B5C4B402F57730DDC15E3C33A0BCC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\915818cb6d8b5c4b402f57730ddc15e3c33a0bcc"), fInfoLevelId=0x0, lpFileInformation=0x21dba10 | out: lpFileInformation=0x21dba10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c420c18, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x7c420c18, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x7c420c18, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0xfaab)) returned 1 [0167.630] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0167.630] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\915818CB6D8B5C4B402F57730DDC15E3C33A0BCC", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\915818CB6D8B5C4B402F57730DDC15E3C33A0BCC", lpFilePart=0x0) returned 0x85 [0167.630] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0167.630] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\915818CB6D8B5C4B402F57730DDC15E3C33A0BCC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\915818cb6d8b5c4b402f57730ddc15e3c33a0bcc"), fInfoLevelId=0x0, lpFileInformation=0x21dbc10 | out: lpFileInformation=0x21dbc10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c420c18, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x7c420c18, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x7c420c18, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0xfaab)) returned 1 [0167.630] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0167.630] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\915818CB6D8B5C4B402F57730DDC15E3C33A0BCC", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\915818CB6D8B5C4B402F57730DDC15E3C33A0BCC", lpFilePart=0x0) returned 0x85 [0167.631] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0167.631] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\915818CB6D8B5C4B402F57730DDC15E3C33A0BCC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\915818cb6d8b5c4b402f57730ddc15e3c33a0bcc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0167.632] GetFileType (hFile=0x444) returned 0x1 [0167.632] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0167.632] GetFileType (hFile=0x444) returned 0x1 [0167.632] ReadFile (in: hFile=0x444, lpBuffer=0x21de140, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x21de140*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0167.671] CloseHandle (hObject=0x444) returned 1 [0167.671] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\915818CB6D8B5C4B402F57730DDC15E3C33A0BCC", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\915818CB6D8B5C4B402F57730DDC15E3C33A0BCC", lpFilePart=0x0) returned 0x85 [0167.671] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0167.671] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\915818CB6D8B5C4B402F57730DDC15E3C33A0BCC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\915818cb6d8b5c4b402f57730ddc15e3c33a0bcc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0167.671] GetFileType (hFile=0x444) returned 0x1 [0167.671] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0167.671] GetFileType (hFile=0x444) returned 0x1 [0167.671] WriteFile (in: hFile=0x444, lpBuffer=0x21dbdf0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x21dbdf0*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0167.671] CloseHandle (hObject=0x444) returned 1 [0167.672] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\915818CB6D8B5C4B402F57730DDC15E3C33A0BCC", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\915818CB6D8B5C4B402F57730DDC15E3C33A0BCC", lpFilePart=0x0) returned 0x85 [0167.672] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\915818CB6D8B5C4B402F57730DDC15E3C33A0BCC.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\915818CB6D8B5C4B402F57730DDC15E3C33A0BCC.xuy", lpFilePart=0x0) returned 0x89 [0167.672] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0167.672] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\915818CB6D8B5C4B402F57730DDC15E3C33A0BCC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\915818cb6d8b5c4b402f57730ddc15e3c33a0bcc"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c420c18, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x7c420c18, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x4fca76dc, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xfaab)) returned 1 [0167.672] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0167.672] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\915818CB6D8B5C4B402F57730DDC15E3C33A0BCC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\915818cb6d8b5c4b402f57730ddc15e3c33a0bcc"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\915818CB6D8B5C4B402F57730DDC15E3C33A0BCC.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\915818cb6d8b5c4b402f57730ddc15e3c33a0bcc.xuy")) returned 1 [0167.674] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\91B49A7BE9B6470CC38DB1B7807EF7AB77E643CE", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\91B49A7BE9B6470CC38DB1B7807EF7AB77E643CE", lpFilePart=0x0) returned 0x85 [0167.674] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0167.674] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\91B49A7BE9B6470CC38DB1B7807EF7AB77E643CE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\91b49a7be9b6470cc38db1b7807ef7ab77e643ce"), fInfoLevelId=0x0, lpFileInformation=0x225a6e8 | out: lpFileInformation=0x225a6e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x896b3b6b, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x896b3b6b, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x896b89cb, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x4d4)) returned 1 [0167.674] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0167.674] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\91B49A7BE9B6470CC38DB1B7807EF7AB77E643CE", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\91B49A7BE9B6470CC38DB1B7807EF7AB77E643CE", lpFilePart=0x0) returned 0x85 [0167.674] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0167.674] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\91B49A7BE9B6470CC38DB1B7807EF7AB77E643CE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\91b49a7be9b6470cc38db1b7807ef7ab77e643ce"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0167.674] GetFileType (hFile=0x444) returned 0x1 [0167.674] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0167.674] GetFileType (hFile=0x444) returned 0x1 [0167.674] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x4d4 [0167.674] ReadFile (in: hFile=0x444, lpBuffer=0x225afd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x225afd8*, lpNumberOfBytesRead=0x3be5c8*=0x4d4, lpOverlapped=0x0) returned 1 [0167.692] CloseHandle (hObject=0x444) returned 1 [0167.703] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\91B49A7BE9B6470CC38DB1B7807EF7AB77E643CE", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\91B49A7BE9B6470CC38DB1B7807EF7AB77E643CE", lpFilePart=0x0) returned 0x85 [0167.703] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0167.703] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\91B49A7BE9B6470CC38DB1B7807EF7AB77E643CE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\91b49a7be9b6470cc38db1b7807ef7ab77e643ce"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0167.705] GetFileType (hFile=0x444) returned 0x1 [0167.705] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0167.705] GetFileType (hFile=0x444) returned 0x1 [0167.705] WriteFile (in: hFile=0x444, lpBuffer=0x22d38d0*, nNumberOfBytesToWrite=0x4e0, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x22d38d0*, lpNumberOfBytesWritten=0x3be4d8*=0x4e0, lpOverlapped=0x0) returned 1 [0167.705] CloseHandle (hObject=0x444) returned 1 [0167.706] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\91B49A7BE9B6470CC38DB1B7807EF7AB77E643CE", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\91B49A7BE9B6470CC38DB1B7807EF7AB77E643CE", lpFilePart=0x0) returned 0x85 [0167.706] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\91B49A7BE9B6470CC38DB1B7807EF7AB77E643CE.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\91B49A7BE9B6470CC38DB1B7807EF7AB77E643CE.xuy", lpFilePart=0x0) returned 0x89 [0167.706] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0167.706] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\91B49A7BE9B6470CC38DB1B7807EF7AB77E643CE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\91b49a7be9b6470cc38db1b7807ef7ab77e643ce"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x896b3b6b, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x896b3b6b, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x4fcf3be7, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x4e0)) returned 1 [0167.706] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0167.706] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\91B49A7BE9B6470CC38DB1B7807EF7AB77E643CE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\91b49a7be9b6470cc38db1b7807ef7ab77e643ce"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\91B49A7BE9B6470CC38DB1B7807EF7AB77E643CE.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\91b49a7be9b6470cc38db1b7807ef7ab77e643ce.xuy")) returned 1 [0167.707] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\91DE0A67543F5514405172DF5AD0254558E1052F", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\91DE0A67543F5514405172DF5AD0254558E1052F", lpFilePart=0x0) returned 0x85 [0167.708] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0167.708] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\91DE0A67543F5514405172DF5AD0254558E1052F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\91de0a67543f5514405172df5ad0254558e1052f"), fInfoLevelId=0x0, lpFileInformation=0x22d4c90 | out: lpFileInformation=0x22d4c90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61551d8c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x61551d8c, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x61551d8c, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x1138)) returned 1 [0167.709] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0167.709] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\91DE0A67543F5514405172DF5AD0254558E1052F", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\91DE0A67543F5514405172DF5AD0254558E1052F", lpFilePart=0x0) returned 0x85 [0167.709] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0167.709] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\91DE0A67543F5514405172DF5AD0254558E1052F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\91de0a67543f5514405172df5ad0254558e1052f"), fInfoLevelId=0x0, lpFileInformation=0x22d4e90 | out: lpFileInformation=0x22d4e90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61551d8c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x61551d8c, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x61551d8c, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x1138)) returned 1 [0167.709] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0167.709] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\91DE0A67543F5514405172DF5AD0254558E1052F", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\91DE0A67543F5514405172DF5AD0254558E1052F", lpFilePart=0x0) returned 0x85 [0167.709] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0167.709] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\91DE0A67543F5514405172DF5AD0254558E1052F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\91de0a67543f5514405172df5ad0254558e1052f"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0167.710] GetFileType (hFile=0x444) returned 0x1 [0167.710] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0167.710] GetFileType (hFile=0x444) returned 0x1 [0167.710] ReadFile (in: hFile=0x444, lpBuffer=0x22d73c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x22d73c0*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0167.729] CloseHandle (hObject=0x444) returned 1 [0167.736] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\91DE0A67543F5514405172DF5AD0254558E1052F", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\91DE0A67543F5514405172DF5AD0254558E1052F", lpFilePart=0x0) returned 0x85 [0167.736] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0167.736] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\91DE0A67543F5514405172DF5AD0254558E1052F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\91de0a67543f5514405172df5ad0254558e1052f"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0167.736] GetFileType (hFile=0x444) returned 0x1 [0167.736] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0167.736] GetFileType (hFile=0x444) returned 0x1 [0167.736] WriteFile (in: hFile=0x444, lpBuffer=0x22d5070*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x22d5070*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0167.736] CloseHandle (hObject=0x444) returned 1 [0167.736] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\91DE0A67543F5514405172DF5AD0254558E1052F", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\91DE0A67543F5514405172DF5AD0254558E1052F", lpFilePart=0x0) returned 0x85 [0167.737] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\91DE0A67543F5514405172DF5AD0254558E1052F.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\91DE0A67543F5514405172DF5AD0254558E1052F.xuy", lpFilePart=0x0) returned 0x89 [0167.737] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0167.737] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\91DE0A67543F5514405172DF5AD0254558E1052F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\91de0a67543f5514405172df5ad0254558e1052f"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61551d8c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x61551d8c, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x4fd4009e, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0167.737] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0167.737] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\91DE0A67543F5514405172DF5AD0254558E1052F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\91de0a67543f5514405172df5ad0254558e1052f"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\91DE0A67543F5514405172DF5AD0254558E1052F.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\91de0a67543f5514405172df5ad0254558e1052f.xuy")) returned 1 [0167.738] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\929BCF811537CE5A1B05BC367E7D5FCD9D1512C2", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\929BCF811537CE5A1B05BC367E7D5FCD9D1512C2", lpFilePart=0x0) returned 0x85 [0167.738] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0167.738] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\929BCF811537CE5A1B05BC367E7D5FCD9D1512C2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\929bcf811537ce5a1b05bc367e7d5fcd9d1512c2"), fInfoLevelId=0x0, lpFileInformation=0x2353968 | out: lpFileInformation=0x2353968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41b22b1f, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x41b22b1f, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x776db0fa, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0xd6)) returned 1 [0167.739] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0167.739] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\929BCF811537CE5A1B05BC367E7D5FCD9D1512C2", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\929BCF811537CE5A1B05BC367E7D5FCD9D1512C2", lpFilePart=0x0) returned 0x85 [0167.739] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0167.739] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\929BCF811537CE5A1B05BC367E7D5FCD9D1512C2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\929bcf811537ce5a1b05bc367e7d5fcd9d1512c2"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0167.739] GetFileType (hFile=0x444) returned 0x1 [0167.739] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0167.739] GetFileType (hFile=0x444) returned 0x1 [0167.739] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xd6 [0167.739] ReadFile (in: hFile=0x444, lpBuffer=0x2353e58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x2353e58*, lpNumberOfBytesRead=0x3be5c8*=0xd6, lpOverlapped=0x0) returned 1 [0167.740] CloseHandle (hObject=0x444) returned 1 [0167.784] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\929BCF811537CE5A1B05BC367E7D5FCD9D1512C2", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\929BCF811537CE5A1B05BC367E7D5FCD9D1512C2", lpFilePart=0x0) returned 0x85 [0167.784] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0167.784] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\929BCF811537CE5A1B05BC367E7D5FCD9D1512C2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\929bcf811537ce5a1b05bc367e7d5fcd9d1512c2"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0167.786] GetFileType (hFile=0x444) returned 0x1 [0167.786] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0167.786] GetFileType (hFile=0x444) returned 0x1 [0167.786] WriteFile (in: hFile=0x444, lpBuffer=0x21c80a0*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x21c80a0*, lpNumberOfBytesWritten=0x3be4d8*=0xe0, lpOverlapped=0x0) returned 1 [0167.787] CloseHandle (hObject=0x444) returned 1 [0167.787] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\929BCF811537CE5A1B05BC367E7D5FCD9D1512C2", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\929BCF811537CE5A1B05BC367E7D5FCD9D1512C2", lpFilePart=0x0) returned 0x85 [0167.787] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\929BCF811537CE5A1B05BC367E7D5FCD9D1512C2.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\929BCF811537CE5A1B05BC367E7D5FCD9D1512C2.xuy", lpFilePart=0x0) returned 0x89 [0167.787] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0167.787] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\929BCF811537CE5A1B05BC367E7D5FCD9D1512C2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\929bcf811537ce5a1b05bc367e7d5fcd9d1512c2"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41b22b1f, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x41b22b1f, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x4fdb2867, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1 [0167.787] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0167.787] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\929BCF811537CE5A1B05BC367E7D5FCD9D1512C2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\929bcf811537ce5a1b05bc367e7d5fcd9d1512c2"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\929BCF811537CE5A1B05BC367E7D5FCD9D1512C2.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\929bcf811537ce5a1b05bc367e7d5fcd9d1512c2.xuy")) returned 1 [0167.789] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\931F2EEFC041CAC80BD66611E79C03B3146E557A", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\931F2EEFC041CAC80BD66611E79C03B3146E557A", lpFilePart=0x0) returned 0x85 [0167.789] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0167.789] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\931F2EEFC041CAC80BD66611E79C03B3146E557A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\931f2eefc041cac80bd66611e79c03b3146e557a"), fInfoLevelId=0x0, lpFileInformation=0x21c9460 | out: lpFileInformation=0x21c9460*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82105a0f, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x82105a0f, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x8210812e, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0xaf7)) returned 1 [0167.789] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0167.789] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\931F2EEFC041CAC80BD66611E79C03B3146E557A", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\931F2EEFC041CAC80BD66611E79C03B3146E557A", lpFilePart=0x0) returned 0x85 [0167.789] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0167.789] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\931F2EEFC041CAC80BD66611E79C03B3146E557A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\931f2eefc041cac80bd66611e79c03b3146e557a"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0167.789] GetFileType (hFile=0x444) returned 0x1 [0167.789] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0167.789] GetFileType (hFile=0x444) returned 0x1 [0167.789] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xaf7 [0167.789] ReadFile (in: hFile=0x444, lpBuffer=0x21ca370, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x21ca370*, lpNumberOfBytesRead=0x3be5c8*=0xaf7, lpOverlapped=0x0) returned 1 [0167.796] CloseHandle (hObject=0x444) returned 1 [0167.807] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\931F2EEFC041CAC80BD66611E79C03B3146E557A", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\931F2EEFC041CAC80BD66611E79C03B3146E557A", lpFilePart=0x0) returned 0x85 [0167.807] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0167.807] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\931F2EEFC041CAC80BD66611E79C03B3146E557A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\931f2eefc041cac80bd66611e79c03b3146e557a"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0167.809] GetFileType (hFile=0x444) returned 0x1 [0167.809] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0167.809] GetFileType (hFile=0x444) returned 0x1 [0167.809] WriteFile (in: hFile=0x444, lpBuffer=0x2244b08*, nNumberOfBytesToWrite=0xb00, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x2244b08*, lpNumberOfBytesWritten=0x3be4d8*=0xb00, lpOverlapped=0x0) returned 1 [0167.815] CloseHandle (hObject=0x444) returned 1 [0167.815] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\931F2EEFC041CAC80BD66611E79C03B3146E557A", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\931F2EEFC041CAC80BD66611E79C03B3146E557A", lpFilePart=0x0) returned 0x85 [0167.816] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\931F2EEFC041CAC80BD66611E79C03B3146E557A.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\931F2EEFC041CAC80BD66611E79C03B3146E557A.xuy", lpFilePart=0x0) returned 0x89 [0167.816] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0167.816] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\931F2EEFC041CAC80BD66611E79C03B3146E557A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\931f2eefc041cac80bd66611e79c03b3146e557a"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82105a0f, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x82105a0f, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x4fdfec00, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xb00)) returned 1 [0167.816] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0167.816] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\931F2EEFC041CAC80BD66611E79C03B3146E557A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\931f2eefc041cac80bd66611e79c03b3146e557a"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\931F2EEFC041CAC80BD66611E79C03B3146E557A.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\931f2eefc041cac80bd66611e79c03b3146e557a.xuy")) returned 1 [0167.817] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9389A36571AB4E34E35E26AEDCF49D9554459AD7", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9389A36571AB4E34E35E26AEDCF49D9554459AD7", lpFilePart=0x0) returned 0x85 [0167.817] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0167.817] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9389A36571AB4E34E35E26AEDCF49D9554459AD7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9389a36571ab4e34e35e26aedcf49d9554459ad7"), fInfoLevelId=0x0, lpFileInformation=0x2245ec8 | out: lpFileInformation=0x2245ec8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc534dc24, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc534dc24, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xc80fdcac, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x1c52)) returned 1 [0167.817] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0167.817] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9389A36571AB4E34E35E26AEDCF49D9554459AD7", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9389A36571AB4E34E35E26AEDCF49D9554459AD7", lpFilePart=0x0) returned 0x85 [0167.818] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0167.818] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9389A36571AB4E34E35E26AEDCF49D9554459AD7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9389a36571ab4e34e35e26aedcf49d9554459ad7"), fInfoLevelId=0x0, lpFileInformation=0x22460c8 | out: lpFileInformation=0x22460c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc534dc24, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc534dc24, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xc80fdcac, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x1c52)) returned 1 [0167.818] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0167.818] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9389A36571AB4E34E35E26AEDCF49D9554459AD7", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9389A36571AB4E34E35E26AEDCF49D9554459AD7", lpFilePart=0x0) returned 0x85 [0167.818] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0167.818] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9389A36571AB4E34E35E26AEDCF49D9554459AD7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9389a36571ab4e34e35e26aedcf49d9554459ad7"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0167.819] GetFileType (hFile=0x444) returned 0x1 [0167.819] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0167.819] GetFileType (hFile=0x444) returned 0x1 [0167.819] ReadFile (in: hFile=0x444, lpBuffer=0x22485f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x22485f8*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0167.835] CloseHandle (hObject=0x444) returned 1 [0167.835] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9389A36571AB4E34E35E26AEDCF49D9554459AD7", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9389A36571AB4E34E35E26AEDCF49D9554459AD7", lpFilePart=0x0) returned 0x85 [0167.835] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0167.835] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9389A36571AB4E34E35E26AEDCF49D9554459AD7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9389a36571ab4e34e35e26aedcf49d9554459ad7"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0167.835] GetFileType (hFile=0x444) returned 0x1 [0167.835] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0167.835] GetFileType (hFile=0x444) returned 0x1 [0167.835] WriteFile (in: hFile=0x444, lpBuffer=0x22462a8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x22462a8*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0167.836] CloseHandle (hObject=0x444) returned 1 [0167.836] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9389A36571AB4E34E35E26AEDCF49D9554459AD7", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9389A36571AB4E34E35E26AEDCF49D9554459AD7", lpFilePart=0x0) returned 0x85 [0167.836] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9389A36571AB4E34E35E26AEDCF49D9554459AD7.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9389A36571AB4E34E35E26AEDCF49D9554459AD7.xuy", lpFilePart=0x0) returned 0x89 [0167.836] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0167.836] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9389A36571AB4E34E35E26AEDCF49D9554459AD7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9389a36571ab4e34e35e26aedcf49d9554459ad7"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc534dc24, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc534dc24, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x4fe24df1, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0167.836] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0167.836] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9389A36571AB4E34E35E26AEDCF49D9554459AD7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9389a36571ab4e34e35e26aedcf49d9554459ad7"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9389A36571AB4E34E35E26AEDCF49D9554459AD7.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9389a36571ab4e34e35e26aedcf49d9554459ad7.xuy")) returned 1 [0167.838] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\941A1B56BB6C49802B2D2C51ED172A4A9F7D360C", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\941A1B56BB6C49802B2D2C51ED172A4A9F7D360C", lpFilePart=0x0) returned 0x85 [0167.838] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0167.838] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\941A1B56BB6C49802B2D2C51ED172A4A9F7D360C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\941a1b56bb6c49802b2d2c51ed172a4a9f7d360c"), fInfoLevelId=0x0, lpFileInformation=0x22c4ba0 | out: lpFileInformation=0x22c4ba0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4547bba0, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x4547bba0, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x560a3a7a, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0x4a87)) returned 1 [0167.838] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0167.838] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\941A1B56BB6C49802B2D2C51ED172A4A9F7D360C", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\941A1B56BB6C49802B2D2C51ED172A4A9F7D360C", lpFilePart=0x0) returned 0x85 [0167.838] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0167.838] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\941A1B56BB6C49802B2D2C51ED172A4A9F7D360C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\941a1b56bb6c49802b2d2c51ed172a4a9f7d360c"), fInfoLevelId=0x0, lpFileInformation=0x22c4da0 | out: lpFileInformation=0x22c4da0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4547bba0, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x4547bba0, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x560a3a7a, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0x4a87)) returned 1 [0167.838] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0167.838] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\941A1B56BB6C49802B2D2C51ED172A4A9F7D360C", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\941A1B56BB6C49802B2D2C51ED172A4A9F7D360C", lpFilePart=0x0) returned 0x85 [0167.838] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0167.838] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\941A1B56BB6C49802B2D2C51ED172A4A9F7D360C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\941a1b56bb6c49802b2d2c51ed172a4a9f7d360c"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0167.839] GetFileType (hFile=0x444) returned 0x1 [0167.839] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0167.839] GetFileType (hFile=0x444) returned 0x1 [0167.839] ReadFile (in: hFile=0x444, lpBuffer=0x22c72d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x22c72d0*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0167.852] CloseHandle (hObject=0x444) returned 1 [0167.852] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\941A1B56BB6C49802B2D2C51ED172A4A9F7D360C", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\941A1B56BB6C49802B2D2C51ED172A4A9F7D360C", lpFilePart=0x0) returned 0x85 [0167.852] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0167.853] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\941A1B56BB6C49802B2D2C51ED172A4A9F7D360C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\941a1b56bb6c49802b2d2c51ed172a4a9f7d360c"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0167.853] GetFileType (hFile=0x444) returned 0x1 [0167.853] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0167.853] GetFileType (hFile=0x444) returned 0x1 [0167.853] WriteFile (in: hFile=0x444, lpBuffer=0x22c4f80*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x22c4f80*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0167.853] CloseHandle (hObject=0x444) returned 1 [0167.853] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\941A1B56BB6C49802B2D2C51ED172A4A9F7D360C", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\941A1B56BB6C49802B2D2C51ED172A4A9F7D360C", lpFilePart=0x0) returned 0x85 [0167.853] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\941A1B56BB6C49802B2D2C51ED172A4A9F7D360C.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\941A1B56BB6C49802B2D2C51ED172A4A9F7D360C.xuy", lpFilePart=0x0) returned 0x89 [0167.853] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0167.853] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\941A1B56BB6C49802B2D2C51ED172A4A9F7D360C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\941a1b56bb6c49802b2d2c51ed172a4a9f7d360c"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4547bba0, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x4547bba0, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x4fe4b01d, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x4a87)) returned 1 [0167.853] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0167.853] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\941A1B56BB6C49802B2D2C51ED172A4A9F7D360C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\941a1b56bb6c49802b2d2c51ed172a4a9f7d360c"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\941A1B56BB6C49802B2D2C51ED172A4A9F7D360C.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\941a1b56bb6c49802b2d2c51ed172a4a9f7d360c.xuy")) returned 1 [0167.855] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9437DA7680859789102972ED376085A988B0DC1F", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9437DA7680859789102972ED376085A988B0DC1F", lpFilePart=0x0) returned 0x85 [0167.855] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0167.855] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9437DA7680859789102972ED376085A988B0DC1F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9437da7680859789102972ed376085a988b0dc1f"), fInfoLevelId=0x0, lpFileInformation=0x2343878 | out: lpFileInformation=0x2343878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6159e1e8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x6159e1e8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x6159e1e8, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x1136)) returned 1 [0167.855] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0167.855] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9437DA7680859789102972ED376085A988B0DC1F", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9437DA7680859789102972ED376085A988B0DC1F", lpFilePart=0x0) returned 0x85 [0167.855] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0167.855] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9437DA7680859789102972ED376085A988B0DC1F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9437da7680859789102972ed376085a988b0dc1f"), fInfoLevelId=0x0, lpFileInformation=0x2343a78 | out: lpFileInformation=0x2343a78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6159e1e8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x6159e1e8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x6159e1e8, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x1136)) returned 1 [0167.855] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0167.855] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9437DA7680859789102972ED376085A988B0DC1F", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9437DA7680859789102972ED376085A988B0DC1F", lpFilePart=0x0) returned 0x85 [0167.855] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0167.856] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9437DA7680859789102972ED376085A988B0DC1F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9437da7680859789102972ed376085a988b0dc1f"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0167.857] GetFileType (hFile=0x444) returned 0x1 [0167.857] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0167.857] GetFileType (hFile=0x444) returned 0x1 [0167.857] ReadFile (in: hFile=0x444, lpBuffer=0x2345fa8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x2345fa8*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0167.911] CloseHandle (hObject=0x444) returned 1 [0167.911] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9437DA7680859789102972ED376085A988B0DC1F", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9437DA7680859789102972ED376085A988B0DC1F", lpFilePart=0x0) returned 0x85 [0167.911] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0167.911] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9437DA7680859789102972ED376085A988B0DC1F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9437da7680859789102972ed376085a988b0dc1f"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0167.912] GetFileType (hFile=0x444) returned 0x1 [0167.912] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0167.912] GetFileType (hFile=0x444) returned 0x1 [0167.912] WriteFile (in: hFile=0x444, lpBuffer=0x218c038*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x218c038*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0167.912] CloseHandle (hObject=0x444) returned 1 [0167.912] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9437DA7680859789102972ED376085A988B0DC1F", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9437DA7680859789102972ED376085A988B0DC1F", lpFilePart=0x0) returned 0x85 [0167.912] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9437DA7680859789102972ED376085A988B0DC1F.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9437DA7680859789102972ED376085A988B0DC1F.xuy", lpFilePart=0x0) returned 0x89 [0167.912] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0167.912] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9437DA7680859789102972ED376085A988B0DC1F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9437da7680859789102972ed376085a988b0dc1f"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6159e1e8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x6159e1e8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x4fee3a05, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0167.912] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0167.912] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9437DA7680859789102972ED376085A988B0DC1F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9437da7680859789102972ed376085a988b0dc1f"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9437DA7680859789102972ED376085A988B0DC1F.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9437da7680859789102972ed376085a988b0dc1f.xuy")) returned 1 [0167.914] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\94EBD8AE2B4A80B3785CC414ECD6BD2E73A7401E", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\94EBD8AE2B4A80B3785CC414ECD6BD2E73A7401E", lpFilePart=0x0) returned 0x85 [0167.914] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0167.914] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\94EBD8AE2B4A80B3785CC414ECD6BD2E73A7401E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\94ebd8ae2b4a80b3785cc414ecd6bd2e73a7401e"), fInfoLevelId=0x0, lpFileInformation=0x21c5640 | out: lpFileInformation=0x21c5640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ca3ccc6, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x7ca3ccc6, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x7ca62f05, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0xb05)) returned 1 [0167.914] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0167.914] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\94EBD8AE2B4A80B3785CC414ECD6BD2E73A7401E", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\94EBD8AE2B4A80B3785CC414ECD6BD2E73A7401E", lpFilePart=0x0) returned 0x85 [0167.914] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0167.914] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\94EBD8AE2B4A80B3785CC414ECD6BD2E73A7401E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\94ebd8ae2b4a80b3785cc414ecd6bd2e73a7401e"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0167.914] GetFileType (hFile=0x444) returned 0x1 [0167.914] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0167.914] GetFileType (hFile=0x444) returned 0x1 [0167.914] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xb05 [0167.914] ReadFile (in: hFile=0x444, lpBuffer=0x21c6560, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x21c6560*, lpNumberOfBytesRead=0x3be5c8*=0xb05, lpOverlapped=0x0) returned 1 [0167.932] CloseHandle (hObject=0x444) returned 1 [0167.943] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\94EBD8AE2B4A80B3785CC414ECD6BD2E73A7401E", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\94EBD8AE2B4A80B3785CC414ECD6BD2E73A7401E", lpFilePart=0x0) returned 0x85 [0167.943] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0167.943] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\94EBD8AE2B4A80B3785CC414ECD6BD2E73A7401E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\94ebd8ae2b4a80b3785cc414ecd6bd2e73a7401e"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0167.945] GetFileType (hFile=0x444) returned 0x1 [0167.945] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0167.945] GetFileType (hFile=0x444) returned 0x1 [0167.945] WriteFile (in: hFile=0x444, lpBuffer=0x2240d48*, nNumberOfBytesToWrite=0xb10, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x2240d48*, lpNumberOfBytesWritten=0x3be4d8*=0xb10, lpOverlapped=0x0) returned 1 [0167.946] CloseHandle (hObject=0x444) returned 1 [0167.946] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\94EBD8AE2B4A80B3785CC414ECD6BD2E73A7401E", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\94EBD8AE2B4A80B3785CC414ECD6BD2E73A7401E", lpFilePart=0x0) returned 0x85 [0167.946] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\94EBD8AE2B4A80B3785CC414ECD6BD2E73A7401E.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\94EBD8AE2B4A80B3785CC414ECD6BD2E73A7401E.xuy", lpFilePart=0x0) returned 0x89 [0167.946] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0167.946] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\94EBD8AE2B4A80B3785CC414ECD6BD2E73A7401E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\94ebd8ae2b4a80b3785cc414ecd6bd2e73a7401e"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ca3ccc6, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x7ca3ccc6, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x4ff303c2, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xb10)) returned 1 [0167.946] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0167.947] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\94EBD8AE2B4A80B3785CC414ECD6BD2E73A7401E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\94ebd8ae2b4a80b3785cc414ecd6bd2e73a7401e"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\94EBD8AE2B4A80B3785CC414ECD6BD2E73A7401E.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\94ebd8ae2b4a80b3785cc414ecd6bd2e73a7401e.xuy")) returned 1 [0167.948] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9520CFD826CE16709BAA39BAE6CA5D0C77E46A47", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9520CFD826CE16709BAA39BAE6CA5D0C77E46A47", lpFilePart=0x0) returned 0x85 [0167.948] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0167.948] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9520CFD826CE16709BAA39BAE6CA5D0C77E46A47" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9520cfd826ce16709baa39bae6ca5d0c77e46a47"), fInfoLevelId=0x0, lpFileInformation=0x2242108 | out: lpFileInformation=0x2242108*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85e05889, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x85e05889, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x85e07fb8, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x171c7)) returned 1 [0167.948] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0167.948] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9520CFD826CE16709BAA39BAE6CA5D0C77E46A47", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9520CFD826CE16709BAA39BAE6CA5D0C77E46A47", lpFilePart=0x0) returned 0x85 [0167.948] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0167.948] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9520CFD826CE16709BAA39BAE6CA5D0C77E46A47" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9520cfd826ce16709baa39bae6ca5d0c77e46a47"), fInfoLevelId=0x0, lpFileInformation=0x2242308 | out: lpFileInformation=0x2242308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85e05889, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x85e05889, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x85e07fb8, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x171c7)) returned 1 [0167.948] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0167.948] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9520CFD826CE16709BAA39BAE6CA5D0C77E46A47", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9520CFD826CE16709BAA39BAE6CA5D0C77E46A47", lpFilePart=0x0) returned 0x85 [0167.948] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0167.949] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9520CFD826CE16709BAA39BAE6CA5D0C77E46A47" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9520cfd826ce16709baa39bae6ca5d0c77e46a47"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0167.949] GetFileType (hFile=0x444) returned 0x1 [0167.949] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0167.949] GetFileType (hFile=0x444) returned 0x1 [0167.949] ReadFile (in: hFile=0x444, lpBuffer=0x2244838, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x2244838*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0167.975] CloseHandle (hObject=0x444) returned 1 [0167.975] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9520CFD826CE16709BAA39BAE6CA5D0C77E46A47", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9520CFD826CE16709BAA39BAE6CA5D0C77E46A47", lpFilePart=0x0) returned 0x85 [0167.975] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0167.975] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9520CFD826CE16709BAA39BAE6CA5D0C77E46A47" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9520cfd826ce16709baa39bae6ca5d0c77e46a47"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0167.975] GetFileType (hFile=0x444) returned 0x1 [0167.975] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0167.975] GetFileType (hFile=0x444) returned 0x1 [0167.975] WriteFile (in: hFile=0x444, lpBuffer=0x22424e8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x22424e8*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0167.976] CloseHandle (hObject=0x444) returned 1 [0167.976] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9520CFD826CE16709BAA39BAE6CA5D0C77E46A47", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9520CFD826CE16709BAA39BAE6CA5D0C77E46A47", lpFilePart=0x0) returned 0x85 [0167.976] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9520CFD826CE16709BAA39BAE6CA5D0C77E46A47.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9520CFD826CE16709BAA39BAE6CA5D0C77E46A47.xuy", lpFilePart=0x0) returned 0x89 [0167.976] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0167.976] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9520CFD826CE16709BAA39BAE6CA5D0C77E46A47" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9520cfd826ce16709baa39bae6ca5d0c77e46a47"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85e05889, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x85e05889, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x4ff80bb0, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x171c7)) returned 1 [0167.976] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0167.976] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9520CFD826CE16709BAA39BAE6CA5D0C77E46A47" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9520cfd826ce16709baa39bae6ca5d0c77e46a47"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9520CFD826CE16709BAA39BAE6CA5D0C77E46A47.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9520cfd826ce16709baa39bae6ca5d0c77e46a47.xuy")) returned 1 [0167.977] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9583726276CC4EBFBE062C772C29DCAC66E75BFE", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9583726276CC4EBFBE062C772C29DCAC66E75BFE", lpFilePart=0x0) returned 0x85 [0167.977] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0167.977] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9583726276CC4EBFBE062C772C29DCAC66E75BFE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9583726276cc4ebfbe062c772c29dcac66e75bfe"), fInfoLevelId=0x0, lpFileInformation=0x22c0de0 | out: lpFileInformation=0x22c0de0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x548b1083, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x548b1083, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x548b1083, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x32eb)) returned 1 [0167.978] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0167.978] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9583726276CC4EBFBE062C772C29DCAC66E75BFE", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9583726276CC4EBFBE062C772C29DCAC66E75BFE", lpFilePart=0x0) returned 0x85 [0167.978] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0167.978] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9583726276CC4EBFBE062C772C29DCAC66E75BFE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9583726276cc4ebfbe062c772c29dcac66e75bfe"), fInfoLevelId=0x0, lpFileInformation=0x22c0fe0 | out: lpFileInformation=0x22c0fe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x548b1083, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x548b1083, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x548b1083, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x32eb)) returned 1 [0167.978] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0167.978] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9583726276CC4EBFBE062C772C29DCAC66E75BFE", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9583726276CC4EBFBE062C772C29DCAC66E75BFE", lpFilePart=0x0) returned 0x85 [0167.978] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0167.978] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9583726276CC4EBFBE062C772C29DCAC66E75BFE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9583726276cc4ebfbe062c772c29dcac66e75bfe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0167.979] GetFileType (hFile=0x444) returned 0x1 [0167.979] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0167.979] GetFileType (hFile=0x444) returned 0x1 [0167.979] ReadFile (in: hFile=0x444, lpBuffer=0x22c3510, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x22c3510*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0168.003] CloseHandle (hObject=0x444) returned 1 [0168.131] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9583726276CC4EBFBE062C772C29DCAC66E75BFE", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9583726276CC4EBFBE062C772C29DCAC66E75BFE", lpFilePart=0x0) returned 0x85 [0168.132] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0168.132] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9583726276CC4EBFBE062C772C29DCAC66E75BFE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9583726276cc4ebfbe062c772c29dcac66e75bfe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0168.132] GetFileType (hFile=0x444) returned 0x1 [0168.132] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0168.132] GetFileType (hFile=0x444) returned 0x1 [0168.132] WriteFile (in: hFile=0x444, lpBuffer=0x22c11c0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x22c11c0*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0168.132] CloseHandle (hObject=0x444) returned 1 [0168.132] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9583726276CC4EBFBE062C772C29DCAC66E75BFE", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9583726276CC4EBFBE062C772C29DCAC66E75BFE", lpFilePart=0x0) returned 0x85 [0168.132] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9583726276CC4EBFBE062C772C29DCAC66E75BFE.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9583726276CC4EBFBE062C772C29DCAC66E75BFE.xuy", lpFilePart=0x0) returned 0x89 [0168.132] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0168.132] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9583726276CC4EBFBE062C772C29DCAC66E75BFE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9583726276cc4ebfbe062c772c29dcac66e75bfe"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x548b1083, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x548b1083, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x500f9a7a, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x32eb)) returned 1 [0168.132] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0168.133] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9583726276CC4EBFBE062C772C29DCAC66E75BFE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9583726276cc4ebfbe062c772c29dcac66e75bfe"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9583726276CC4EBFBE062C772C29DCAC66E75BFE.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9583726276cc4ebfbe062c772c29dcac66e75bfe.xuy")) returned 1 [0168.134] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\95C7DA1D4957A899E9F622853C746C06FAF4DC11", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\95C7DA1D4957A899E9F622853C746C06FAF4DC11", lpFilePart=0x0) returned 0x85 [0168.134] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0168.134] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\95C7DA1D4957A899E9F622853C746C06FAF4DC11" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\95c7da1d4957a899e9f622853c746c06faf4dc11"), fInfoLevelId=0x0, lpFileInformation=0x233fab8 | out: lpFileInformation=0x233fab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54543a7e, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x54543a7e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x5e982952, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x151de)) returned 1 [0168.134] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0168.134] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\95C7DA1D4957A899E9F622853C746C06FAF4DC11", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\95C7DA1D4957A899E9F622853C746C06FAF4DC11", lpFilePart=0x0) returned 0x85 [0168.134] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0168.134] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\95C7DA1D4957A899E9F622853C746C06FAF4DC11" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\95c7da1d4957a899e9f622853c746c06faf4dc11"), fInfoLevelId=0x0, lpFileInformation=0x233fcb8 | out: lpFileInformation=0x233fcb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54543a7e, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x54543a7e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x5e982952, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x151de)) returned 1 [0168.134] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0168.134] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\95C7DA1D4957A899E9F622853C746C06FAF4DC11", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\95C7DA1D4957A899E9F622853C746C06FAF4DC11", lpFilePart=0x0) returned 0x85 [0168.134] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0168.134] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\95C7DA1D4957A899E9F622853C746C06FAF4DC11" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\95c7da1d4957a899e9f622853c746c06faf4dc11"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0168.135] GetFileType (hFile=0x444) returned 0x1 [0168.135] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0168.135] GetFileType (hFile=0x444) returned 0x1 [0168.135] ReadFile (in: hFile=0x444, lpBuffer=0x23421e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x23421e8*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0168.351] CloseHandle (hObject=0x444) returned 1 [0168.351] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\95C7DA1D4957A899E9F622853C746C06FAF4DC11", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\95C7DA1D4957A899E9F622853C746C06FAF4DC11", lpFilePart=0x0) returned 0x85 [0168.351] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0168.351] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\95C7DA1D4957A899E9F622853C746C06FAF4DC11" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\95c7da1d4957a899e9f622853c746c06faf4dc11"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0168.351] GetFileType (hFile=0x444) returned 0x1 [0168.351] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0168.351] GetFileType (hFile=0x444) returned 0x1 [0168.351] WriteFile (in: hFile=0x444, lpBuffer=0x218c038*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x218c038*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0168.351] CloseHandle (hObject=0x444) returned 1 [0168.351] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\95C7DA1D4957A899E9F622853C746C06FAF4DC11", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\95C7DA1D4957A899E9F622853C746C06FAF4DC11", lpFilePart=0x0) returned 0x85 [0168.351] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\95C7DA1D4957A899E9F622853C746C06FAF4DC11.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\95C7DA1D4957A899E9F622853C746C06FAF4DC11.xuy", lpFilePart=0x0) returned 0x89 [0168.352] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0168.352] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\95C7DA1D4957A899E9F622853C746C06FAF4DC11" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\95c7da1d4957a899e9f622853c746c06faf4dc11"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54543a7e, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x54543a7e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x5030fc3a, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x151de)) returned 1 [0168.352] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0168.352] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\95C7DA1D4957A899E9F622853C746C06FAF4DC11" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\95c7da1d4957a899e9f622853c746c06faf4dc11"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\95C7DA1D4957A899E9F622853C746C06FAF4DC11.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\95c7da1d4957a899e9f622853c746c06faf4dc11.xuy")) returned 1 [0168.353] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\96191281B2C84E3B117531AE499ADF73E5070D91", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\96191281B2C84E3B117531AE499ADF73E5070D91", lpFilePart=0x0) returned 0x85 [0168.353] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0168.353] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\96191281B2C84E3B117531AE499ADF73E5070D91" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\96191281b2c84e3b117531ae499adf73e5070d91"), fInfoLevelId=0x0, lpFileInformation=0x21be770 | out: lpFileInformation=0x21be770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87b1ebbb, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x87b1ebbb, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x87b217d5, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x528)) returned 1 [0168.354] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0168.354] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\96191281B2C84E3B117531AE499ADF73E5070D91", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\96191281B2C84E3B117531AE499ADF73E5070D91", lpFilePart=0x0) returned 0x85 [0168.354] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0168.354] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\96191281B2C84E3B117531AE499ADF73E5070D91" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\96191281b2c84e3b117531ae499adf73e5070d91"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0168.354] GetFileType (hFile=0x444) returned 0x1 [0168.354] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0168.354] GetFileType (hFile=0x444) returned 0x1 [0168.354] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x528 [0168.354] ReadFile (in: hFile=0x444, lpBuffer=0x21bf0b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x21bf0b0*, lpNumberOfBytesRead=0x3be5c8*=0x528, lpOverlapped=0x0) returned 1 [0168.432] CloseHandle (hObject=0x444) returned 1 [0168.443] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\96191281B2C84E3B117531AE499ADF73E5070D91", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\96191281B2C84E3B117531AE499ADF73E5070D91", lpFilePart=0x0) returned 0x85 [0168.443] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0168.443] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\96191281B2C84E3B117531AE499ADF73E5070D91" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\96191281b2c84e3b117531ae499adf73e5070d91"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0168.445] GetFileType (hFile=0x444) returned 0x1 [0168.445] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0168.445] GetFileType (hFile=0x444) returned 0x1 [0168.445] WriteFile (in: hFile=0x444, lpBuffer=0x2237b30*, nNumberOfBytesToWrite=0x530, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x2237b30*, lpNumberOfBytesWritten=0x3be4d8*=0x530, lpOverlapped=0x0) returned 1 [0168.446] CloseHandle (hObject=0x444) returned 1 [0168.446] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\96191281B2C84E3B117531AE499ADF73E5070D91", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\96191281B2C84E3B117531AE499ADF73E5070D91", lpFilePart=0x0) returned 0x85 [0168.446] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\96191281B2C84E3B117531AE499ADF73E5070D91.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\96191281B2C84E3B117531AE499ADF73E5070D91.xuy", lpFilePart=0x0) returned 0x89 [0168.446] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0168.446] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\96191281B2C84E3B117531AE499ADF73E5070D91" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\96191281b2c84e3b117531ae499adf73e5070d91"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87b1ebbb, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x87b1ebbb, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x503f4cf8, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x530)) returned 1 [0168.446] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0168.446] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\96191281B2C84E3B117531AE499ADF73E5070D91" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\96191281b2c84e3b117531ae499adf73e5070d91"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\96191281B2C84E3B117531AE499ADF73E5070D91.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\96191281b2c84e3b117531ae499adf73e5070d91.xuy")) returned 1 [0168.447] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\96A77890C16FF5A4D9851AA5B45D42E21B2A35B4", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\96A77890C16FF5A4D9851AA5B45D42E21B2A35B4", lpFilePart=0x0) returned 0x85 [0168.447] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0168.447] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\96A77890C16FF5A4D9851AA5B45D42E21B2A35B4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\96a77890c16ff5a4d9851aa5b45d42e21b2a35b4"), fInfoLevelId=0x0, lpFileInformation=0x2238ef0 | out: lpFileInformation=0x2238ef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2c43316, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc2c43316, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x3c7d0b67, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0x25e6d)) returned 1 [0168.448] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0168.448] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\96A77890C16FF5A4D9851AA5B45D42E21B2A35B4", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\96A77890C16FF5A4D9851AA5B45D42E21B2A35B4", lpFilePart=0x0) returned 0x85 [0168.448] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0168.448] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\96A77890C16FF5A4D9851AA5B45D42E21B2A35B4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\96a77890c16ff5a4d9851aa5b45d42e21b2a35b4"), fInfoLevelId=0x0, lpFileInformation=0x22390f0 | out: lpFileInformation=0x22390f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2c43316, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc2c43316, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x3c7d0b67, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0x25e6d)) returned 1 [0168.448] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0168.448] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\96A77890C16FF5A4D9851AA5B45D42E21B2A35B4", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\96A77890C16FF5A4D9851AA5B45D42E21B2A35B4", lpFilePart=0x0) returned 0x85 [0168.448] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0168.448] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\96A77890C16FF5A4D9851AA5B45D42E21B2A35B4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\96a77890c16ff5a4d9851aa5b45d42e21b2a35b4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0168.449] GetFileType (hFile=0x444) returned 0x1 [0168.449] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0168.449] GetFileType (hFile=0x444) returned 0x1 [0168.449] ReadFile (in: hFile=0x444, lpBuffer=0x223b620, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x223b620*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0168.461] CloseHandle (hObject=0x444) returned 1 [0168.533] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\96A77890C16FF5A4D9851AA5B45D42E21B2A35B4", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\96A77890C16FF5A4D9851AA5B45D42E21B2A35B4", lpFilePart=0x0) returned 0x85 [0168.533] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0168.533] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\96A77890C16FF5A4D9851AA5B45D42E21B2A35B4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\96a77890c16ff5a4d9851aa5b45d42e21b2a35b4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0168.533] GetFileType (hFile=0x444) returned 0x1 [0168.533] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0168.533] GetFileType (hFile=0x444) returned 0x1 [0168.533] WriteFile (in: hFile=0x444, lpBuffer=0x22392d0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x22392d0*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0168.533] CloseHandle (hObject=0x444) returned 1 [0168.533] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\96A77890C16FF5A4D9851AA5B45D42E21B2A35B4", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\96A77890C16FF5A4D9851AA5B45D42E21B2A35B4", lpFilePart=0x0) returned 0x85 [0168.533] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\96A77890C16FF5A4D9851AA5B45D42E21B2A35B4.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\96A77890C16FF5A4D9851AA5B45D42E21B2A35B4.xuy", lpFilePart=0x0) returned 0x89 [0168.533] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0168.534] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\96A77890C16FF5A4D9851AA5B45D42E21B2A35B4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\96a77890c16ff5a4d9851aa5b45d42e21b2a35b4"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2c43316, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc2c43316, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x504ca048, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x25e6d)) returned 1 [0168.534] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0168.534] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\96A77890C16FF5A4D9851AA5B45D42E21B2A35B4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\96a77890c16ff5a4d9851aa5b45d42e21b2a35b4"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\96A77890C16FF5A4D9851AA5B45D42E21B2A35B4.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\96a77890c16ff5a4d9851aa5b45d42e21b2a35b4.xuy")) returned 1 [0168.535] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\96B50584BE88DC16BE9B1E1D4CC4F9900EED55B8", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\96B50584BE88DC16BE9B1E1D4CC4F9900EED55B8", lpFilePart=0x0) returned 0x85 [0168.535] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0168.535] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\96B50584BE88DC16BE9B1E1D4CC4F9900EED55B8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\96b50584be88dc16be9b1e1d4cc4f9900eed55b8"), fInfoLevelId=0x0, lpFileInformation=0x22b7bc8 | out: lpFileInformation=0x22b7bc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7cd37be0, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x7cd37be0, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x7cd37be0, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x4d2)) returned 1 [0168.535] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0168.535] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\96B50584BE88DC16BE9B1E1D4CC4F9900EED55B8", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\96B50584BE88DC16BE9B1E1D4CC4F9900EED55B8", lpFilePart=0x0) returned 0x85 [0168.535] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0168.535] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\96B50584BE88DC16BE9B1E1D4CC4F9900EED55B8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\96b50584be88dc16be9b1e1d4cc4f9900eed55b8"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0168.535] GetFileType (hFile=0x444) returned 0x1 [0168.535] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0168.535] GetFileType (hFile=0x444) returned 0x1 [0168.535] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x4d2 [0168.536] ReadFile (in: hFile=0x444, lpBuffer=0x22b84b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x22b84b8*, lpNumberOfBytesRead=0x3be5c8*=0x4d2, lpOverlapped=0x0) returned 1 [0168.537] CloseHandle (hObject=0x444) returned 1 [0168.547] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\96B50584BE88DC16BE9B1E1D4CC4F9900EED55B8", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\96B50584BE88DC16BE9B1E1D4CC4F9900EED55B8", lpFilePart=0x0) returned 0x85 [0168.547] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0168.547] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\96B50584BE88DC16BE9B1E1D4CC4F9900EED55B8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\96b50584be88dc16be9b1e1d4cc4f9900eed55b8"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0168.549] GetFileType (hFile=0x444) returned 0x1 [0168.549] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0168.549] GetFileType (hFile=0x444) returned 0x1 [0168.549] WriteFile (in: hFile=0x444, lpBuffer=0x2330db0*, nNumberOfBytesToWrite=0x4e0, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x2330db0*, lpNumberOfBytesWritten=0x3be4d8*=0x4e0, lpOverlapped=0x0) returned 1 [0168.550] CloseHandle (hObject=0x444) returned 1 [0168.550] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\96B50584BE88DC16BE9B1E1D4CC4F9900EED55B8", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\96B50584BE88DC16BE9B1E1D4CC4F9900EED55B8", lpFilePart=0x0) returned 0x85 [0168.550] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\96B50584BE88DC16BE9B1E1D4CC4F9900EED55B8.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\96B50584BE88DC16BE9B1E1D4CC4F9900EED55B8.xuy", lpFilePart=0x0) returned 0x89 [0168.550] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0168.550] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\96B50584BE88DC16BE9B1E1D4CC4F9900EED55B8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\96b50584be88dc16be9b1e1d4cc4f9900eed55b8"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7cd37be0, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x7cd37be0, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x504f03a7, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x4e0)) returned 1 [0168.550] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0168.550] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\96B50584BE88DC16BE9B1E1D4CC4F9900EED55B8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\96b50584be88dc16be9b1e1d4cc4f9900eed55b8"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\96B50584BE88DC16BE9B1E1D4CC4F9900EED55B8.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\96b50584be88dc16be9b1e1d4cc4f9900eed55b8.xuy")) returned 1 [0168.551] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\97409C15E729461DC4FF96E79F878A0A8817C034", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\97409C15E729461DC4FF96E79F878A0A8817C034", lpFilePart=0x0) returned 0x85 [0168.552] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0168.552] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\97409C15E729461DC4FF96E79F878A0A8817C034" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\97409c15e729461dc4ff96e79f878a0a8817c034"), fInfoLevelId=0x0, lpFileInformation=0x2332170 | out: lpFileInformation=0x2332170*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fca2933, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3fca2933, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x41b7f798, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x2d750)) returned 1 [0168.552] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0168.552] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\97409C15E729461DC4FF96E79F878A0A8817C034", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\97409C15E729461DC4FF96E79F878A0A8817C034", lpFilePart=0x0) returned 0x85 [0168.552] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0168.552] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\97409C15E729461DC4FF96E79F878A0A8817C034" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\97409c15e729461dc4ff96e79f878a0a8817c034"), fInfoLevelId=0x0, lpFileInformation=0x2332370 | out: lpFileInformation=0x2332370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fca2933, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3fca2933, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x41b7f798, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x2d750)) returned 1 [0168.552] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0168.552] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\97409C15E729461DC4FF96E79F878A0A8817C034", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\97409C15E729461DC4FF96E79F878A0A8817C034", lpFilePart=0x0) returned 0x85 [0168.552] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0168.552] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\97409C15E729461DC4FF96E79F878A0A8817C034" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\97409c15e729461dc4ff96e79f878a0a8817c034"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0168.553] GetFileType (hFile=0x444) returned 0x1 [0168.553] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0168.553] GetFileType (hFile=0x444) returned 0x1 [0168.553] ReadFile (in: hFile=0x444, lpBuffer=0x23348a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x23348a0*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0168.700] CloseHandle (hObject=0x444) returned 1 [0168.730] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\97409C15E729461DC4FF96E79F878A0A8817C034", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\97409C15E729461DC4FF96E79F878A0A8817C034", lpFilePart=0x0) returned 0x85 [0168.730] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0168.730] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\97409C15E729461DC4FF96E79F878A0A8817C034" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\97409c15e729461dc4ff96e79f878a0a8817c034"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0168.730] GetFileType (hFile=0x444) returned 0x1 [0168.730] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0168.730] GetFileType (hFile=0x444) returned 0x1 [0168.730] WriteFile (in: hFile=0x444, lpBuffer=0x218c038*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x218c038*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0168.731] CloseHandle (hObject=0x444) returned 1 [0168.731] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\97409C15E729461DC4FF96E79F878A0A8817C034", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\97409C15E729461DC4FF96E79F878A0A8817C034", lpFilePart=0x0) returned 0x85 [0168.731] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\97409C15E729461DC4FF96E79F878A0A8817C034.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\97409C15E729461DC4FF96E79F878A0A8817C034.xuy", lpFilePart=0x0) returned 0x89 [0168.731] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0168.731] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\97409C15E729461DC4FF96E79F878A0A8817C034" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\97409c15e729461dc4ff96e79f878a0a8817c034"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fca2933, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3fca2933, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x506c3729, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2d750)) returned 1 [0168.731] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0168.731] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\97409C15E729461DC4FF96E79F878A0A8817C034" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\97409c15e729461dc4ff96e79f878a0a8817c034"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\97409C15E729461DC4FF96E79F878A0A8817C034.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\97409c15e729461dc4ff96e79f878a0a8817c034.xuy")) returned 1 [0168.732] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\975C1B9A5E1A08CA19A7A35290F12AD97D4268EB", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\975C1B9A5E1A08CA19A7A35290F12AD97D4268EB", lpFilePart=0x0) returned 0x85 [0168.733] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0168.733] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\975C1B9A5E1A08CA19A7A35290F12AD97D4268EB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\975c1b9a5e1a08ca19a7a35290f12ad97d4268eb"), fInfoLevelId=0x0, lpFileInformation=0x21b0e78 | out: lpFileInformation=0x21b0e78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bf8c5a7, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3bf8c5a7, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x3bf913dc, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x52a)) returned 1 [0168.733] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0168.733] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\975C1B9A5E1A08CA19A7A35290F12AD97D4268EB", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\975C1B9A5E1A08CA19A7A35290F12AD97D4268EB", lpFilePart=0x0) returned 0x85 [0168.733] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0168.733] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\975C1B9A5E1A08CA19A7A35290F12AD97D4268EB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\975c1b9a5e1a08ca19a7a35290f12ad97d4268eb"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0168.733] GetFileType (hFile=0x444) returned 0x1 [0168.733] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0168.733] GetFileType (hFile=0x444) returned 0x1 [0168.733] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x52a [0168.733] ReadFile (in: hFile=0x444, lpBuffer=0x21b17c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x21b17c0*, lpNumberOfBytesRead=0x3be5c8*=0x52a, lpOverlapped=0x0) returned 1 [0168.882] CloseHandle (hObject=0x444) returned 1 [0168.892] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\975C1B9A5E1A08CA19A7A35290F12AD97D4268EB", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\975C1B9A5E1A08CA19A7A35290F12AD97D4268EB", lpFilePart=0x0) returned 0x85 [0168.892] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0168.892] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\975C1B9A5E1A08CA19A7A35290F12AD97D4268EB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\975c1b9a5e1a08ca19a7a35290f12ad97d4268eb"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0168.894] GetFileType (hFile=0x444) returned 0x1 [0168.894] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0168.894] GetFileType (hFile=0x444) returned 0x1 [0168.894] WriteFile (in: hFile=0x444, lpBuffer=0x222a240*, nNumberOfBytesToWrite=0x530, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x222a240*, lpNumberOfBytesWritten=0x3be4d8*=0x530, lpOverlapped=0x0) returned 1 [0168.895] CloseHandle (hObject=0x444) returned 1 [0168.895] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\975C1B9A5E1A08CA19A7A35290F12AD97D4268EB", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\975C1B9A5E1A08CA19A7A35290F12AD97D4268EB", lpFilePart=0x0) returned 0x85 [0168.895] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\975C1B9A5E1A08CA19A7A35290F12AD97D4268EB.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\975C1B9A5E1A08CA19A7A35290F12AD97D4268EB.xuy", lpFilePart=0x0) returned 0x89 [0168.895] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0168.895] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\975C1B9A5E1A08CA19A7A35290F12AD97D4268EB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\975c1b9a5e1a08ca19a7a35290f12ad97d4268eb"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bf8c5a7, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3bf8c5a7, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x50837683, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x530)) returned 1 [0168.895] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0168.895] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\975C1B9A5E1A08CA19A7A35290F12AD97D4268EB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\975c1b9a5e1a08ca19a7a35290f12ad97d4268eb"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\975C1B9A5E1A08CA19A7A35290F12AD97D4268EB.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\975c1b9a5e1a08ca19a7a35290f12ad97d4268eb.xuy")) returned 1 [0168.897] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\979C819D6C7504D17BB5A3F483ADA0C1FF961E27", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\979C819D6C7504D17BB5A3F483ADA0C1FF961E27", lpFilePart=0x0) returned 0x85 [0168.897] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0168.897] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\979C819D6C7504D17BB5A3F483ADA0C1FF961E27" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\979c819d6c7504d17bb5a3f483ada0c1ff961e27"), fInfoLevelId=0x0, lpFileInformation=0x222b600 | out: lpFileInformation=0x222b600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61577ff1, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x61577ff1, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x61577ff1, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xdfc)) returned 1 [0168.897] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0168.897] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\979C819D6C7504D17BB5A3F483ADA0C1FF961E27", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\979C819D6C7504D17BB5A3F483ADA0C1FF961E27", lpFilePart=0x0) returned 0x85 [0168.897] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0168.897] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\979C819D6C7504D17BB5A3F483ADA0C1FF961E27" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\979c819d6c7504d17bb5a3f483ada0c1ff961e27"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0168.897] GetFileType (hFile=0x444) returned 0x1 [0168.897] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0168.897] GetFileType (hFile=0x444) returned 0x1 [0168.897] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xdfc [0168.898] ReadFile (in: hFile=0x444, lpBuffer=0x222c818, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x222c818*, lpNumberOfBytesRead=0x3be5c8*=0xdfc, lpOverlapped=0x0) returned 1 [0169.117] CloseHandle (hObject=0x444) returned 1 [0169.127] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\979C819D6C7504D17BB5A3F483ADA0C1FF961E27", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\979C819D6C7504D17BB5A3F483ADA0C1FF961E27", lpFilePart=0x0) returned 0x85 [0169.127] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0169.127] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\979C819D6C7504D17BB5A3F483ADA0C1FF961E27" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\979c819d6c7504d17bb5a3f483ada0c1ff961e27"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0169.129] GetFileType (hFile=0x444) returned 0x1 [0169.129] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0169.129] GetFileType (hFile=0x444) returned 0x1 [0169.129] WriteFile (in: hFile=0x444, lpBuffer=0x22a7ea8*, nNumberOfBytesToWrite=0xe00, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x22a7ea8*, lpNumberOfBytesWritten=0x3be4d8*=0xe00, lpOverlapped=0x0) returned 1 [0169.130] CloseHandle (hObject=0x444) returned 1 [0169.130] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\979C819D6C7504D17BB5A3F483ADA0C1FF961E27", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\979C819D6C7504D17BB5A3F483ADA0C1FF961E27", lpFilePart=0x0) returned 0x85 [0169.130] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\979C819D6C7504D17BB5A3F483ADA0C1FF961E27.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\979C819D6C7504D17BB5A3F483ADA0C1FF961E27.xuy", lpFilePart=0x0) returned 0x89 [0169.130] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0169.130] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\979C819D6C7504D17BB5A3F483ADA0C1FF961E27" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\979c819d6c7504d17bb5a3f483ada0c1ff961e27"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61577ff1, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x61577ff1, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x50a73a2c, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xe00)) returned 1 [0169.130] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0169.130] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\979C819D6C7504D17BB5A3F483ADA0C1FF961E27" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\979c819d6c7504d17bb5a3f483ada0c1ff961e27"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\979C819D6C7504D17BB5A3F483ADA0C1FF961E27.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\979c819d6c7504d17bb5a3f483ada0c1ff961e27.xuy")) returned 1 [0169.132] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9882A29B72713C4CA8E5A9BB58D0D0E29A9B9598", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9882A29B72713C4CA8E5A9BB58D0D0E29A9B9598", lpFilePart=0x0) returned 0x85 [0169.132] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0169.132] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9882A29B72713C4CA8E5A9BB58D0D0E29A9B9598" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9882a29b72713c4ca8e5a9bb58d0d0e29a9b9598"), fInfoLevelId=0x0, lpFileInformation=0x22a9268 | out: lpFileInformation=0x22a9268*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82ac9c95, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x82ac9c95, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x82aceabd, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0xadb)) returned 1 [0169.132] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0169.132] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9882A29B72713C4CA8E5A9BB58D0D0E29A9B9598", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9882A29B72713C4CA8E5A9BB58D0D0E29A9B9598", lpFilePart=0x0) returned 0x85 [0169.132] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0169.132] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9882A29B72713C4CA8E5A9BB58D0D0E29A9B9598" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9882a29b72713c4ca8e5a9bb58d0d0e29a9b9598"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0169.133] GetFileType (hFile=0x444) returned 0x1 [0169.133] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0169.133] GetFileType (hFile=0x444) returned 0x1 [0169.133] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xadb [0169.133] ReadFile (in: hFile=0x444, lpBuffer=0x22aa160, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x22aa160*, lpNumberOfBytesRead=0x3be5c8*=0xadb, lpOverlapped=0x0) returned 1 [0169.226] CloseHandle (hObject=0x444) returned 1 [0169.236] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9882A29B72713C4CA8E5A9BB58D0D0E29A9B9598", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9882A29B72713C4CA8E5A9BB58D0D0E29A9B9598", lpFilePart=0x0) returned 0x85 [0169.236] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0169.236] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9882A29B72713C4CA8E5A9BB58D0D0E29A9B9598" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9882a29b72713c4ca8e5a9bb58d0d0e29a9b9598"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0169.289] GetFileType (hFile=0x444) returned 0x1 [0169.289] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0169.289] GetFileType (hFile=0x444) returned 0x1 [0169.289] WriteFile (in: hFile=0x444, lpBuffer=0x2324850*, nNumberOfBytesToWrite=0xae0, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x2324850*, lpNumberOfBytesWritten=0x3be4d8*=0xae0, lpOverlapped=0x0) returned 1 [0169.311] CloseHandle (hObject=0x444) returned 1 [0169.312] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9882A29B72713C4CA8E5A9BB58D0D0E29A9B9598", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9882A29B72713C4CA8E5A9BB58D0D0E29A9B9598", lpFilePart=0x0) returned 0x85 [0169.312] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9882A29B72713C4CA8E5A9BB58D0D0E29A9B9598.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9882A29B72713C4CA8E5A9BB58D0D0E29A9B9598.xuy", lpFilePart=0x0) returned 0x89 [0169.312] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0169.312] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9882A29B72713C4CA8E5A9BB58D0D0E29A9B9598" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9882a29b72713c4ca8e5a9bb58d0d0e29a9b9598"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82ac9c95, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x82ac9c95, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x50c3d606, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xae0)) returned 1 [0169.312] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0169.312] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9882A29B72713C4CA8E5A9BB58D0D0E29A9B9598" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9882a29b72713c4ca8e5a9bb58d0d0e29a9b9598"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9882A29B72713C4CA8E5A9BB58D0D0E29A9B9598.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9882a29b72713c4ca8e5a9bb58d0d0e29a9b9598.xuy")) returned 1 [0169.313] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\98CAC6D4D596C92F0E63DE8392E62BD4E731649B", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\98CAC6D4D596C92F0E63DE8392E62BD4E731649B", lpFilePart=0x0) returned 0x85 [0169.313] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0169.314] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\98CAC6D4D596C92F0E63DE8392E62BD4E731649B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\98cac6d4d596c92f0e63de8392e62bd4e731649b"), fInfoLevelId=0x0, lpFileInformation=0x2325c10 | out: lpFileInformation=0x2325c10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42f067eb, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x42f067eb, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x42f067eb, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0xc60)) returned 1 [0169.314] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0169.314] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\98CAC6D4D596C92F0E63DE8392E62BD4E731649B", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\98CAC6D4D596C92F0E63DE8392E62BD4E731649B", lpFilePart=0x0) returned 0x85 [0169.314] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0169.314] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\98CAC6D4D596C92F0E63DE8392E62BD4E731649B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\98cac6d4d596c92f0e63de8392e62bd4e731649b"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0169.314] GetFileType (hFile=0x444) returned 0x1 [0169.314] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0169.314] GetFileType (hFile=0x444) returned 0x1 [0169.314] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xc60 [0169.314] ReadFile (in: hFile=0x444, lpBuffer=0x2326c88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x2326c88*, lpNumberOfBytesRead=0x3be5c8*=0xc60, lpOverlapped=0x0) returned 1 [0169.324] CloseHandle (hObject=0x444) returned 1 [0169.370] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\98CAC6D4D596C92F0E63DE8392E62BD4E731649B", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\98CAC6D4D596C92F0E63DE8392E62BD4E731649B", lpFilePart=0x0) returned 0x85 [0169.370] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0169.370] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\98CAC6D4D596C92F0E63DE8392E62BD4E731649B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\98cac6d4d596c92f0e63de8392e62bd4e731649b"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0169.371] GetFileType (hFile=0x444) returned 0x1 [0169.372] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0169.372] GetFileType (hFile=0x444) returned 0x1 [0169.372] WriteFile (in: hFile=0x444, lpBuffer=0x219f5e0*, nNumberOfBytesToWrite=0xc70, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x219f5e0*, lpNumberOfBytesWritten=0x3be4d8*=0xc70, lpOverlapped=0x0) returned 1 [0169.372] CloseHandle (hObject=0x444) returned 1 [0169.372] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\98CAC6D4D596C92F0E63DE8392E62BD4E731649B", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\98CAC6D4D596C92F0E63DE8392E62BD4E731649B", lpFilePart=0x0) returned 0x85 [0169.372] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\98CAC6D4D596C92F0E63DE8392E62BD4E731649B.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\98CAC6D4D596C92F0E63DE8392E62BD4E731649B.xuy", lpFilePart=0x0) returned 0x89 [0169.373] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0169.373] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\98CAC6D4D596C92F0E63DE8392E62BD4E731649B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\98cac6d4d596c92f0e63de8392e62bd4e731649b"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42f067eb, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x42f067eb, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x50cd60e6, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xc70)) returned 1 [0169.373] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0169.373] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\98CAC6D4D596C92F0E63DE8392E62BD4E731649B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\98cac6d4d596c92f0e63de8392e62bd4e731649b"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\98CAC6D4D596C92F0E63DE8392E62BD4E731649B.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\98cac6d4d596c92f0e63de8392e62bd4e731649b.xuy")) returned 1 [0169.374] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\994152A6629E97B62FE91526F3DCA909E7ED6E79", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\994152A6629E97B62FE91526F3DCA909E7ED6E79", lpFilePart=0x0) returned 0x85 [0169.374] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0169.374] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\994152A6629E97B62FE91526F3DCA909E7ED6E79" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\994152a6629e97b62fe91526f3dca909e7ed6e79"), fInfoLevelId=0x0, lpFileInformation=0x21a09a0 | out: lpFileInformation=0x21a09a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3475060, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xf3475060, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0xf34776f3, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0xb4e4)) returned 1 [0169.374] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0169.374] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\994152A6629E97B62FE91526F3DCA909E7ED6E79", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\994152A6629E97B62FE91526F3DCA909E7ED6E79", lpFilePart=0x0) returned 0x85 [0169.374] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0169.375] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\994152A6629E97B62FE91526F3DCA909E7ED6E79" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\994152a6629e97b62fe91526f3dca909e7ed6e79"), fInfoLevelId=0x0, lpFileInformation=0x21a0ba0 | out: lpFileInformation=0x21a0ba0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3475060, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xf3475060, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0xf34776f3, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0xb4e4)) returned 1 [0169.375] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0169.375] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\994152A6629E97B62FE91526F3DCA909E7ED6E79", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\994152A6629E97B62FE91526F3DCA909E7ED6E79", lpFilePart=0x0) returned 0x85 [0169.375] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0169.375] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\994152A6629E97B62FE91526F3DCA909E7ED6E79" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\994152a6629e97b62fe91526f3dca909e7ed6e79"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0169.376] GetFileType (hFile=0x444) returned 0x1 [0169.376] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0169.376] GetFileType (hFile=0x444) returned 0x1 [0169.376] ReadFile (in: hFile=0x444, lpBuffer=0x21a30d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x21a30d0*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0169.396] CloseHandle (hObject=0x444) returned 1 [0169.396] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\994152A6629E97B62FE91526F3DCA909E7ED6E79", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\994152A6629E97B62FE91526F3DCA909E7ED6E79", lpFilePart=0x0) returned 0x85 [0169.396] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0169.396] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\994152A6629E97B62FE91526F3DCA909E7ED6E79" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\994152a6629e97b62fe91526f3dca909e7ed6e79"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0169.396] GetFileType (hFile=0x444) returned 0x1 [0169.396] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0169.396] GetFileType (hFile=0x444) returned 0x1 [0169.396] WriteFile (in: hFile=0x444, lpBuffer=0x21a0d80*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x21a0d80*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0169.396] CloseHandle (hObject=0x444) returned 1 [0169.397] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\994152A6629E97B62FE91526F3DCA909E7ED6E79", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\994152A6629E97B62FE91526F3DCA909E7ED6E79", lpFilePart=0x0) returned 0x85 [0169.397] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\994152A6629E97B62FE91526F3DCA909E7ED6E79.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\994152A6629E97B62FE91526F3DCA909E7ED6E79.xuy", lpFilePart=0x0) returned 0x89 [0169.397] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0169.397] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\994152A6629E97B62FE91526F3DCA909E7ED6E79" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\994152a6629e97b62fe91526f3dca909e7ed6e79"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3475060, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xf3475060, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x50cfc68a, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xb4e4)) returned 1 [0169.397] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0169.397] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\994152A6629E97B62FE91526F3DCA909E7ED6E79" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\994152a6629e97b62fe91526f3dca909e7ed6e79"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\994152A6629E97B62FE91526F3DCA909E7ED6E79.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\994152a6629e97b62fe91526f3dca909e7ed6e79.xuy")) returned 1 [0169.399] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\996FF69B28B46AA08240D5B033726E178EA73F53", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\996FF69B28B46AA08240D5B033726E178EA73F53", lpFilePart=0x0) returned 0x85 [0169.399] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0169.399] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\996FF69B28B46AA08240D5B033726E178EA73F53" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\996ff69b28b46aa08240d5b033726e178ea73f53"), fInfoLevelId=0x0, lpFileInformation=0x221f678 | out: lpFileInformation=0x221f678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2f17fc2, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc2f17fc2, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x3caa581d, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0xc00)) returned 1 [0169.399] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0169.399] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\996FF69B28B46AA08240D5B033726E178EA73F53", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\996FF69B28B46AA08240D5B033726E178EA73F53", lpFilePart=0x0) returned 0x85 [0169.399] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0169.399] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\996FF69B28B46AA08240D5B033726E178EA73F53" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\996ff69b28b46aa08240d5b033726e178ea73f53"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0169.399] GetFileType (hFile=0x444) returned 0x1 [0169.399] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0169.399] GetFileType (hFile=0x444) returned 0x1 [0169.399] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xc00 [0169.399] ReadFile (in: hFile=0x444, lpBuffer=0x2220690, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x2220690*, lpNumberOfBytesRead=0x3be5c8*=0xc00, lpOverlapped=0x0) returned 1 [0169.417] CloseHandle (hObject=0x444) returned 1 [0169.427] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\996FF69B28B46AA08240D5B033726E178EA73F53", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\996FF69B28B46AA08240D5B033726E178EA73F53", lpFilePart=0x0) returned 0x85 [0169.427] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0169.427] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\996FF69B28B46AA08240D5B033726E178EA73F53" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\996ff69b28b46aa08240d5b033726e178ea73f53"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0169.429] GetFileType (hFile=0x444) returned 0x1 [0169.429] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0169.429] GetFileType (hFile=0x444) returned 0x1 [0169.429] WriteFile (in: hFile=0x444, lpBuffer=0x229b378*, nNumberOfBytesToWrite=0xc10, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x229b378*, lpNumberOfBytesWritten=0x3be4d8*=0xc10, lpOverlapped=0x0) returned 1 [0169.430] CloseHandle (hObject=0x444) returned 1 [0169.430] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\996FF69B28B46AA08240D5B033726E178EA73F53", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\996FF69B28B46AA08240D5B033726E178EA73F53", lpFilePart=0x0) returned 0x85 [0169.430] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\996FF69B28B46AA08240D5B033726E178EA73F53.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\996FF69B28B46AA08240D5B033726E178EA73F53.xuy", lpFilePart=0x0) returned 0x89 [0169.430] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0169.430] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\996FF69B28B46AA08240D5B033726E178EA73F53" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\996ff69b28b46aa08240d5b033726e178ea73f53"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2f17fc2, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc2f17fc2, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x50d6e914, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xc10)) returned 1 [0169.431] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0169.431] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\996FF69B28B46AA08240D5B033726E178EA73F53" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\996ff69b28b46aa08240d5b033726e178ea73f53"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\996FF69B28B46AA08240D5B033726E178EA73F53.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\996ff69b28b46aa08240d5b033726e178ea73f53.xuy")) returned 1 [0169.432] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9ACB6C9D19D869C115786C54EA81F2353B7F838D", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9ACB6C9D19D869C115786C54EA81F2353B7F838D", lpFilePart=0x0) returned 0x85 [0169.432] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0169.432] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9ACB6C9D19D869C115786C54EA81F2353B7F838D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9acb6c9d19d869c115786c54ea81f2353b7f838d"), fInfoLevelId=0x0, lpFileInformation=0x229c738 | out: lpFileInformation=0x229c738*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47e705b6, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x47e705b6, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x47e705b6, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0x429)) returned 1 [0169.432] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0169.432] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9ACB6C9D19D869C115786C54EA81F2353B7F838D", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9ACB6C9D19D869C115786C54EA81F2353B7F838D", lpFilePart=0x0) returned 0x85 [0169.432] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0169.432] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9ACB6C9D19D869C115786C54EA81F2353B7F838D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9acb6c9d19d869c115786c54ea81f2353b7f838d"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0169.432] GetFileType (hFile=0x444) returned 0x1 [0169.432] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0169.432] GetFileType (hFile=0x444) returned 0x1 [0169.432] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x429 [0169.432] ReadFile (in: hFile=0x444, lpBuffer=0x229cf80, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x229cf80*, lpNumberOfBytesRead=0x3be5c8*=0x429, lpOverlapped=0x0) returned 1 [0169.434] CloseHandle (hObject=0x444) returned 1 [0169.445] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9ACB6C9D19D869C115786C54EA81F2353B7F838D", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9ACB6C9D19D869C115786C54EA81F2353B7F838D", lpFilePart=0x0) returned 0x85 [0169.445] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0169.445] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9ACB6C9D19D869C115786C54EA81F2353B7F838D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9acb6c9d19d869c115786c54ea81f2353b7f838d"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0169.446] GetFileType (hFile=0x444) returned 0x1 [0169.446] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0169.447] GetFileType (hFile=0x444) returned 0x1 [0169.447] WriteFile (in: hFile=0x444, lpBuffer=0x2315500*, nNumberOfBytesToWrite=0x430, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x2315500*, lpNumberOfBytesWritten=0x3be4d8*=0x430, lpOverlapped=0x0) returned 1 [0169.447] CloseHandle (hObject=0x444) returned 1 [0169.447] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9ACB6C9D19D869C115786C54EA81F2353B7F838D", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9ACB6C9D19D869C115786C54EA81F2353B7F838D", lpFilePart=0x0) returned 0x85 [0169.448] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9ACB6C9D19D869C115786C54EA81F2353B7F838D.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9ACB6C9D19D869C115786C54EA81F2353B7F838D.xuy", lpFilePart=0x0) returned 0x89 [0169.448] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0169.448] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9ACB6C9D19D869C115786C54EA81F2353B7F838D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9acb6c9d19d869c115786c54ea81f2353b7f838d"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47e705b6, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x47e705b6, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x50d94bd5, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x430)) returned 1 [0169.448] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0169.448] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9ACB6C9D19D869C115786C54EA81F2353B7F838D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9acb6c9d19d869c115786c54ea81f2353b7f838d"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9ACB6C9D19D869C115786C54EA81F2353B7F838D.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9acb6c9d19d869c115786c54ea81f2353b7f838d.xuy")) returned 1 [0169.449] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9B388A82E44BAAE48D6F9967937D48AC2EDA3127", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9B388A82E44BAAE48D6F9967937D48AC2EDA3127", lpFilePart=0x0) returned 0x85 [0169.449] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0169.449] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9B388A82E44BAAE48D6F9967937D48AC2EDA3127" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9b388a82e44baae48d6f9967937d48ac2eda3127"), fInfoLevelId=0x0, lpFileInformation=0x23168c0 | out: lpFileInformation=0x23168c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54fb1f26, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x54fb1f26, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x5ef52536, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x82c4)) returned 1 [0169.449] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0169.449] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9B388A82E44BAAE48D6F9967937D48AC2EDA3127", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9B388A82E44BAAE48D6F9967937D48AC2EDA3127", lpFilePart=0x0) returned 0x85 [0169.449] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0169.449] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9B388A82E44BAAE48D6F9967937D48AC2EDA3127" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9b388a82e44baae48d6f9967937d48ac2eda3127"), fInfoLevelId=0x0, lpFileInformation=0x2316ac0 | out: lpFileInformation=0x2316ac0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54fb1f26, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x54fb1f26, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x5ef52536, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x82c4)) returned 1 [0169.450] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0169.450] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9B388A82E44BAAE48D6F9967937D48AC2EDA3127", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9B388A82E44BAAE48D6F9967937D48AC2EDA3127", lpFilePart=0x0) returned 0x85 [0169.450] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0169.450] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9B388A82E44BAAE48D6F9967937D48AC2EDA3127" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9b388a82e44baae48d6f9967937d48ac2eda3127"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0169.451] GetFileType (hFile=0x444) returned 0x1 [0169.451] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0169.451] GetFileType (hFile=0x444) returned 0x1 [0169.451] ReadFile (in: hFile=0x444, lpBuffer=0x2318ff0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x2318ff0*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0169.489] CloseHandle (hObject=0x444) returned 1 [0169.489] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9B388A82E44BAAE48D6F9967937D48AC2EDA3127", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9B388A82E44BAAE48D6F9967937D48AC2EDA3127", lpFilePart=0x0) returned 0x85 [0169.489] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0169.489] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9B388A82E44BAAE48D6F9967937D48AC2EDA3127" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9b388a82e44baae48d6f9967937d48ac2eda3127"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0169.489] GetFileType (hFile=0x444) returned 0x1 [0169.490] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0169.490] GetFileType (hFile=0x444) returned 0x1 [0169.490] WriteFile (in: hFile=0x444, lpBuffer=0x218c038*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x218c038*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0169.490] CloseHandle (hObject=0x444) returned 1 [0169.490] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9B388A82E44BAAE48D6F9967937D48AC2EDA3127", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9B388A82E44BAAE48D6F9967937D48AC2EDA3127", lpFilePart=0x0) returned 0x85 [0169.490] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9B388A82E44BAAE48D6F9967937D48AC2EDA3127.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9B388A82E44BAAE48D6F9967937D48AC2EDA3127.xuy", lpFilePart=0x0) returned 0x89 [0169.490] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0169.490] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9B388A82E44BAAE48D6F9967937D48AC2EDA3127" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9b388a82e44baae48d6f9967937d48ac2eda3127"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54fb1f26, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x54fb1f26, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x50de0f85, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x82c4)) returned 1 [0169.490] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0169.490] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9B388A82E44BAAE48D6F9967937D48AC2EDA3127" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9b388a82e44baae48d6f9967937d48ac2eda3127"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9B388A82E44BAAE48D6F9967937D48AC2EDA3127.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9b388a82e44baae48d6f9967937d48ac2eda3127.xuy")) returned 1 [0169.492] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9BC05FC50582ECA836DF8F673699D925643AF8B7", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9BC05FC50582ECA836DF8F673699D925643AF8B7", lpFilePart=0x0) returned 0x85 [0169.492] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0169.492] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9BC05FC50582ECA836DF8F673699D925643AF8B7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9bc05fc50582eca836df8f673699d925643af8b7"), fInfoLevelId=0x0, lpFileInformation=0x2197ad8 | out: lpFileInformation=0x2197ad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x459d9052, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x459d9052, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x459d9052, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0x452)) returned 1 [0169.492] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0169.492] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9BC05FC50582ECA836DF8F673699D925643AF8B7", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9BC05FC50582ECA836DF8F673699D925643AF8B7", lpFilePart=0x0) returned 0x85 [0169.492] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0169.492] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9BC05FC50582ECA836DF8F673699D925643AF8B7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9bc05fc50582eca836df8f673699d925643af8b7"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0169.492] GetFileType (hFile=0x444) returned 0x1 [0169.492] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0169.492] GetFileType (hFile=0x444) returned 0x1 [0169.492] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x452 [0169.492] ReadFile (in: hFile=0x444, lpBuffer=0x2198348, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x2198348*, lpNumberOfBytesRead=0x3be5c8*=0x452, lpOverlapped=0x0) returned 1 [0169.493] CloseHandle (hObject=0x444) returned 1 [0169.512] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9BC05FC50582ECA836DF8F673699D925643AF8B7", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9BC05FC50582ECA836DF8F673699D925643AF8B7", lpFilePart=0x0) returned 0x85 [0169.513] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0169.513] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9BC05FC50582ECA836DF8F673699D925643AF8B7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9bc05fc50582eca836df8f673699d925643af8b7"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0169.514] GetFileType (hFile=0x444) returned 0x1 [0169.515] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0169.515] GetFileType (hFile=0x444) returned 0x1 [0169.515] WriteFile (in: hFile=0x444, lpBuffer=0x22109c0*, nNumberOfBytesToWrite=0x460, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x22109c0*, lpNumberOfBytesWritten=0x3be4d8*=0x460, lpOverlapped=0x0) returned 1 [0169.515] CloseHandle (hObject=0x444) returned 1 [0169.516] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9BC05FC50582ECA836DF8F673699D925643AF8B7", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9BC05FC50582ECA836DF8F673699D925643AF8B7", lpFilePart=0x0) returned 0x85 [0169.516] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9BC05FC50582ECA836DF8F673699D925643AF8B7.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9BC05FC50582ECA836DF8F673699D925643AF8B7.xuy", lpFilePart=0x0) returned 0x89 [0169.516] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0169.516] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9BC05FC50582ECA836DF8F673699D925643AF8B7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9bc05fc50582eca836df8f673699d925643af8b7"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x459d9052, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x459d9052, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x50e2db5f, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x460)) returned 1 [0169.516] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0169.516] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9BC05FC50582ECA836DF8F673699D925643AF8B7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9bc05fc50582eca836df8f673699d925643af8b7"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9BC05FC50582ECA836DF8F673699D925643AF8B7.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9bc05fc50582eca836df8f673699d925643af8b7.xuy")) returned 1 [0169.517] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9CB1507E8150B6A3A9D726112952A7150EA6236D", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9CB1507E8150B6A3A9D726112952A7150EA6236D", lpFilePart=0x0) returned 0x85 [0169.517] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0169.517] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9CB1507E8150B6A3A9D726112952A7150EA6236D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9cb1507e8150b6a3a9d726112952a7150ea6236d"), fInfoLevelId=0x0, lpFileInformation=0x2211d80 | out: lpFileInformation=0x2211d80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ef34db0, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3ef34db0, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x7d5396c0, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x1088b)) returned 1 [0169.517] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0169.517] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9CB1507E8150B6A3A9D726112952A7150EA6236D", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9CB1507E8150B6A3A9D726112952A7150EA6236D", lpFilePart=0x0) returned 0x85 [0169.517] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0169.518] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9CB1507E8150B6A3A9D726112952A7150EA6236D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9cb1507e8150b6a3a9d726112952a7150ea6236d"), fInfoLevelId=0x0, lpFileInformation=0x2211f80 | out: lpFileInformation=0x2211f80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ef34db0, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3ef34db0, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x7d5396c0, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x1088b)) returned 1 [0169.518] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0169.518] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9CB1507E8150B6A3A9D726112952A7150EA6236D", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9CB1507E8150B6A3A9D726112952A7150EA6236D", lpFilePart=0x0) returned 0x85 [0169.518] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0169.518] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9CB1507E8150B6A3A9D726112952A7150EA6236D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9cb1507e8150b6a3a9d726112952a7150ea6236d"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0169.518] GetFileType (hFile=0x444) returned 0x1 [0169.518] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0169.518] GetFileType (hFile=0x444) returned 0x1 [0169.518] ReadFile (in: hFile=0x444, lpBuffer=0x22144b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x22144b0*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0169.602] CloseHandle (hObject=0x444) returned 1 [0169.602] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9CB1507E8150B6A3A9D726112952A7150EA6236D", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9CB1507E8150B6A3A9D726112952A7150EA6236D", lpFilePart=0x0) returned 0x85 [0169.602] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0169.602] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9CB1507E8150B6A3A9D726112952A7150EA6236D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9cb1507e8150b6a3a9d726112952a7150ea6236d"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0169.602] GetFileType (hFile=0x444) returned 0x1 [0169.603] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0169.603] GetFileType (hFile=0x444) returned 0x1 [0169.603] WriteFile (in: hFile=0x444, lpBuffer=0x2212160*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x2212160*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0169.603] CloseHandle (hObject=0x444) returned 1 [0169.603] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9CB1507E8150B6A3A9D726112952A7150EA6236D", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9CB1507E8150B6A3A9D726112952A7150EA6236D", lpFilePart=0x0) returned 0x85 [0169.603] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9CB1507E8150B6A3A9D726112952A7150EA6236D.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9CB1507E8150B6A3A9D726112952A7150EA6236D.xuy", lpFilePart=0x0) returned 0x89 [0169.603] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0169.603] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9CB1507E8150B6A3A9D726112952A7150EA6236D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9cb1507e8150b6a3a9d726112952a7150ea6236d"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ef34db0, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3ef34db0, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x50f14021, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x1088b)) returned 1 [0169.603] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0169.603] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9CB1507E8150B6A3A9D726112952A7150EA6236D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9cb1507e8150b6a3a9d726112952a7150ea6236d"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9CB1507E8150B6A3A9D726112952A7150EA6236D.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9cb1507e8150b6a3a9d726112952a7150ea6236d.xuy")) returned 1 [0169.608] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9D583DD5EBC7A2DD954F1EC3D377F78DD56656CD", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9D583DD5EBC7A2DD954F1EC3D377F78DD56656CD", lpFilePart=0x0) returned 0x85 [0169.608] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0169.608] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9D583DD5EBC7A2DD954F1EC3D377F78DD56656CD" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9d583dd5ebc7a2dd954f1ec3d377f78dd56656cd"), fInfoLevelId=0x0, lpFileInformation=0x2290a58 | out: lpFileInformation=0x2290a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2a72695, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xd2a72695, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0xd2a988d1, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0xe72)) returned 1 [0169.608] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0169.608] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9D583DD5EBC7A2DD954F1EC3D377F78DD56656CD", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9D583DD5EBC7A2DD954F1EC3D377F78DD56656CD", lpFilePart=0x0) returned 0x85 [0169.608] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0169.608] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9D583DD5EBC7A2DD954F1EC3D377F78DD56656CD" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9d583dd5ebc7a2dd954f1ec3d377f78dd56656cd"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0169.608] GetFileType (hFile=0x444) returned 0x1 [0169.608] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0169.608] GetFileType (hFile=0x444) returned 0x1 [0169.608] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xe72 [0169.608] ReadFile (in: hFile=0x444, lpBuffer=0x2291ce8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x2291ce8*, lpNumberOfBytesRead=0x3be5c8*=0xe72, lpOverlapped=0x0) returned 1 [0169.629] CloseHandle (hObject=0x444) returned 1 [0169.640] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9D583DD5EBC7A2DD954F1EC3D377F78DD56656CD", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9D583DD5EBC7A2DD954F1EC3D377F78DD56656CD", lpFilePart=0x0) returned 0x85 [0169.640] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0169.640] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9D583DD5EBC7A2DD954F1EC3D377F78DD56656CD" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9d583dd5ebc7a2dd954f1ec3d377f78dd56656cd"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0169.642] GetFileType (hFile=0x444) returned 0x1 [0169.642] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0169.642] GetFileType (hFile=0x444) returned 0x1 [0169.642] WriteFile (in: hFile=0x444, lpBuffer=0x230d600*, nNumberOfBytesToWrite=0xe80, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x230d600*, lpNumberOfBytesWritten=0x3be4d8*=0xe80, lpOverlapped=0x0) returned 1 [0169.642] CloseHandle (hObject=0x444) returned 1 [0169.643] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9D583DD5EBC7A2DD954F1EC3D377F78DD56656CD", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9D583DD5EBC7A2DD954F1EC3D377F78DD56656CD", lpFilePart=0x0) returned 0x85 [0169.643] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9D583DD5EBC7A2DD954F1EC3D377F78DD56656CD.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9D583DD5EBC7A2DD954F1EC3D377F78DD56656CD.xuy", lpFilePart=0x0) returned 0x89 [0169.643] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0169.643] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9D583DD5EBC7A2DD954F1EC3D377F78DD56656CD" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9d583dd5ebc7a2dd954f1ec3d377f78dd56656cd"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2a72695, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xd2a72695, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x50f60451, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xe80)) returned 1 [0169.643] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0169.643] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9D583DD5EBC7A2DD954F1EC3D377F78DD56656CD" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9d583dd5ebc7a2dd954f1ec3d377f78dd56656cd"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9D583DD5EBC7A2DD954F1EC3D377F78DD56656CD.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9d583dd5ebc7a2dd954f1ec3d377f78dd56656cd.xuy")) returned 1 [0169.644] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9DCA33818F5A4335C123C5512EDDB0D08852B5BC", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9DCA33818F5A4335C123C5512EDDB0D08852B5BC", lpFilePart=0x0) returned 0x85 [0169.644] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0169.644] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9DCA33818F5A4335C123C5512EDDB0D08852B5BC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9dca33818f5a4335c123c5512eddb0d08852b5bc"), fInfoLevelId=0x0, lpFileInformation=0x230e9c0 | out: lpFileInformation=0x230e9c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4dca4da, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc4dca4da, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xdd66515e, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x1840f)) returned 1 [0169.644] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0169.644] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9DCA33818F5A4335C123C5512EDDB0D08852B5BC", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9DCA33818F5A4335C123C5512EDDB0D08852B5BC", lpFilePart=0x0) returned 0x85 [0169.645] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0169.645] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9DCA33818F5A4335C123C5512EDDB0D08852B5BC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9dca33818f5a4335c123c5512eddb0d08852b5bc"), fInfoLevelId=0x0, lpFileInformation=0x230ebc0 | out: lpFileInformation=0x230ebc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4dca4da, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc4dca4da, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xdd66515e, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x1840f)) returned 1 [0169.645] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0169.645] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9DCA33818F5A4335C123C5512EDDB0D08852B5BC", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9DCA33818F5A4335C123C5512EDDB0D08852B5BC", lpFilePart=0x0) returned 0x85 [0169.645] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0169.645] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9DCA33818F5A4335C123C5512EDDB0D08852B5BC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9dca33818f5a4335c123c5512eddb0d08852b5bc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0169.646] GetFileType (hFile=0x444) returned 0x1 [0169.646] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0169.646] GetFileType (hFile=0x444) returned 0x1 [0169.646] ReadFile (in: hFile=0x444, lpBuffer=0x23110f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x23110f0*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0169.692] CloseHandle (hObject=0x444) returned 1 [0169.692] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9DCA33818F5A4335C123C5512EDDB0D08852B5BC", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9DCA33818F5A4335C123C5512EDDB0D08852B5BC", lpFilePart=0x0) returned 0x85 [0169.692] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0169.693] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9DCA33818F5A4335C123C5512EDDB0D08852B5BC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9dca33818f5a4335c123c5512eddb0d08852b5bc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0169.693] GetFileType (hFile=0x444) returned 0x1 [0169.693] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0169.693] GetFileType (hFile=0x444) returned 0x1 [0169.693] WriteFile (in: hFile=0x444, lpBuffer=0x230eda0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x230eda0*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0169.693] CloseHandle (hObject=0x444) returned 1 [0169.693] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9DCA33818F5A4335C123C5512EDDB0D08852B5BC", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9DCA33818F5A4335C123C5512EDDB0D08852B5BC", lpFilePart=0x0) returned 0x85 [0169.693] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9DCA33818F5A4335C123C5512EDDB0D08852B5BC.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9DCA33818F5A4335C123C5512EDDB0D08852B5BC.xuy", lpFilePart=0x0) returned 0x89 [0169.693] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0169.694] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9DCA33818F5A4335C123C5512EDDB0D08852B5BC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9dca33818f5a4335c123c5512eddb0d08852b5bc"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4dca4da, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc4dca4da, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x50ff4dd5, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x1840f)) returned 1 [0169.694] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0169.694] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9DCA33818F5A4335C123C5512EDDB0D08852B5BC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9dca33818f5a4335c123c5512eddb0d08852b5bc"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9DCA33818F5A4335C123C5512EDDB0D08852B5BC.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9dca33818f5a4335c123c5512eddb0d08852b5bc.xuy")) returned 1 [0169.695] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9E3A50EC9BAE611478E026D6F01591882657DE94", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9E3A50EC9BAE611478E026D6F01591882657DE94", lpFilePart=0x0) returned 0x85 [0169.695] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0169.695] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9E3A50EC9BAE611478E026D6F01591882657DE94" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9e3a50ec9bae611478e026d6f01591882657de94"), fInfoLevelId=0x0, lpFileInformation=0x238d698 | out: lpFileInformation=0x238d698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x811f386e, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x811f386e, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x99e110ad, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x16f12)) returned 1 [0169.696] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0169.696] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9E3A50EC9BAE611478E026D6F01591882657DE94", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9E3A50EC9BAE611478E026D6F01591882657DE94", lpFilePart=0x0) returned 0x85 [0169.696] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0169.696] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9E3A50EC9BAE611478E026D6F01591882657DE94" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9e3a50ec9bae611478e026d6f01591882657de94"), fInfoLevelId=0x0, lpFileInformation=0x238d898 | out: lpFileInformation=0x238d898*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x811f386e, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x811f386e, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x99e110ad, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x16f12)) returned 1 [0169.696] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0169.696] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9E3A50EC9BAE611478E026D6F01591882657DE94", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9E3A50EC9BAE611478E026D6F01591882657DE94", lpFilePart=0x0) returned 0x85 [0169.696] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0169.696] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9E3A50EC9BAE611478E026D6F01591882657DE94" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9e3a50ec9bae611478e026d6f01591882657de94"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0169.697] GetFileType (hFile=0x444) returned 0x1 [0169.697] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0169.697] GetFileType (hFile=0x444) returned 0x1 [0169.697] ReadFile (in: hFile=0x444, lpBuffer=0x238fdc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x238fdc8*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0169.748] CloseHandle (hObject=0x444) returned 1 [0169.749] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9E3A50EC9BAE611478E026D6F01591882657DE94", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9E3A50EC9BAE611478E026D6F01591882657DE94", lpFilePart=0x0) returned 0x85 [0169.749] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0169.749] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9E3A50EC9BAE611478E026D6F01591882657DE94" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9e3a50ec9bae611478e026d6f01591882657de94"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0169.749] GetFileType (hFile=0x444) returned 0x1 [0169.749] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0169.749] GetFileType (hFile=0x444) returned 0x1 [0169.749] WriteFile (in: hFile=0x444, lpBuffer=0x218c078*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x218c078*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0169.749] CloseHandle (hObject=0x444) returned 1 [0169.749] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9E3A50EC9BAE611478E026D6F01591882657DE94", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9E3A50EC9BAE611478E026D6F01591882657DE94", lpFilePart=0x0) returned 0x85 [0169.749] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9E3A50EC9BAE611478E026D6F01591882657DE94.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9E3A50EC9BAE611478E026D6F01591882657DE94.xuy", lpFilePart=0x0) returned 0x89 [0169.750] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0169.750] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9E3A50EC9BAE611478E026D6F01591882657DE94" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9e3a50ec9bae611478e026d6f01591882657de94"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x811f386e, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x811f386e, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x51079cfd, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x16f12)) returned 1 [0169.750] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0169.750] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9E3A50EC9BAE611478E026D6F01591882657DE94" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9e3a50ec9bae611478e026d6f01591882657de94"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9E3A50EC9BAE611478E026D6F01591882657DE94.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9e3a50ec9bae611478e026d6f01591882657de94.xuy")) returned 1 [0169.751] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9E62AAFD59E8D16CBDEA929439408B6E96BA7117", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9E62AAFD59E8D16CBDEA929439408B6E96BA7117", lpFilePart=0x0) returned 0x85 [0169.752] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0169.752] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9E62AAFD59E8D16CBDEA929439408B6E96BA7117" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9e62aafd59e8d16cbdea929439408b6e96ba7117"), fInfoLevelId=0x0, lpFileInformation=0x220a370 | out: lpFileInformation=0x220a370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42f52cd6, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x42f52cd6, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x42f9f17a, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0xc5f)) returned 1 [0169.752] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0169.752] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9E62AAFD59E8D16CBDEA929439408B6E96BA7117", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9E62AAFD59E8D16CBDEA929439408B6E96BA7117", lpFilePart=0x0) returned 0x85 [0169.752] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0169.752] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9E62AAFD59E8D16CBDEA929439408B6E96BA7117" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9e62aafd59e8d16cbdea929439408b6e96ba7117"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0169.752] GetFileType (hFile=0x444) returned 0x1 [0169.752] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0169.752] GetFileType (hFile=0x444) returned 0x1 [0169.752] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xc5f [0169.752] ReadFile (in: hFile=0x444, lpBuffer=0x220b3e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x220b3e8*, lpNumberOfBytesRead=0x3be5c8*=0xc5f, lpOverlapped=0x0) returned 1 [0169.763] CloseHandle (hObject=0x444) returned 1 [0169.773] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9E62AAFD59E8D16CBDEA929439408B6E96BA7117", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9E62AAFD59E8D16CBDEA929439408B6E96BA7117", lpFilePart=0x0) returned 0x85 [0169.773] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0169.773] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9E62AAFD59E8D16CBDEA929439408B6E96BA7117" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9e62aafd59e8d16cbdea929439408b6e96ba7117"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0169.775] GetFileType (hFile=0x444) returned 0x1 [0169.775] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0169.775] GetFileType (hFile=0x444) returned 0x1 [0169.775] WriteFile (in: hFile=0x444, lpBuffer=0x2286258*, nNumberOfBytesToWrite=0xc60, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x2286258*, lpNumberOfBytesWritten=0x3be4d8*=0xc60, lpOverlapped=0x0) returned 1 [0169.776] CloseHandle (hObject=0x444) returned 1 [0169.776] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9E62AAFD59E8D16CBDEA929439408B6E96BA7117", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9E62AAFD59E8D16CBDEA929439408B6E96BA7117", lpFilePart=0x0) returned 0x85 [0169.776] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9E62AAFD59E8D16CBDEA929439408B6E96BA7117.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9E62AAFD59E8D16CBDEA929439408B6E96BA7117.xuy", lpFilePart=0x0) returned 0x89 [0169.776] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0169.776] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9E62AAFD59E8D16CBDEA929439408B6E96BA7117" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9e62aafd59e8d16cbdea929439408b6e96ba7117"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42f52cd6, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x42f52cd6, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x5109fe6d, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xc60)) returned 1 [0169.776] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0169.777] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9E62AAFD59E8D16CBDEA929439408B6E96BA7117" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9e62aafd59e8d16cbdea929439408b6e96ba7117"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9E62AAFD59E8D16CBDEA929439408B6E96BA7117.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9e62aafd59e8d16cbdea929439408b6e96ba7117.xuy")) returned 1 [0169.778] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9E9B7254DB86AADA6F1E1EA84F14C13DE088BFFC", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9E9B7254DB86AADA6F1E1EA84F14C13DE088BFFC", lpFilePart=0x0) returned 0x85 [0169.778] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0169.778] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9E9B7254DB86AADA6F1E1EA84F14C13DE088BFFC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9e9b7254db86aada6f1e1ea84f14c13de088bffc"), fInfoLevelId=0x0, lpFileInformation=0x2287618 | out: lpFileInformation=0x2287618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45eea05d, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x45eea05d, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x45eea05d, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0x156d)) returned 1 [0169.778] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0169.778] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9E9B7254DB86AADA6F1E1EA84F14C13DE088BFFC", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9E9B7254DB86AADA6F1E1EA84F14C13DE088BFFC", lpFilePart=0x0) returned 0x85 [0169.778] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0169.778] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9E9B7254DB86AADA6F1E1EA84F14C13DE088BFFC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9e9b7254db86aada6f1e1ea84f14c13de088bffc"), fInfoLevelId=0x0, lpFileInformation=0x2287818 | out: lpFileInformation=0x2287818*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45eea05d, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x45eea05d, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x45eea05d, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0x156d)) returned 1 [0169.778] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0169.778] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9E9B7254DB86AADA6F1E1EA84F14C13DE088BFFC", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9E9B7254DB86AADA6F1E1EA84F14C13DE088BFFC", lpFilePart=0x0) returned 0x85 [0169.779] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0169.779] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9E9B7254DB86AADA6F1E1EA84F14C13DE088BFFC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9e9b7254db86aada6f1e1ea84f14c13de088bffc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0169.780] GetFileType (hFile=0x444) returned 0x1 [0169.780] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0169.780] GetFileType (hFile=0x444) returned 0x1 [0169.780] ReadFile (in: hFile=0x444, lpBuffer=0x2289d48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x2289d48*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0169.801] CloseHandle (hObject=0x444) returned 1 [0169.807] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9E9B7254DB86AADA6F1E1EA84F14C13DE088BFFC", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9E9B7254DB86AADA6F1E1EA84F14C13DE088BFFC", lpFilePart=0x0) returned 0x85 [0169.807] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0169.807] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9E9B7254DB86AADA6F1E1EA84F14C13DE088BFFC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9e9b7254db86aada6f1e1ea84f14c13de088bffc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0169.807] GetFileType (hFile=0x444) returned 0x1 [0169.807] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0169.807] GetFileType (hFile=0x444) returned 0x1 [0169.807] WriteFile (in: hFile=0x444, lpBuffer=0x22879f8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x22879f8*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0169.808] CloseHandle (hObject=0x444) returned 1 [0169.808] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9E9B7254DB86AADA6F1E1EA84F14C13DE088BFFC", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9E9B7254DB86AADA6F1E1EA84F14C13DE088BFFC", lpFilePart=0x0) returned 0x85 [0169.808] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9E9B7254DB86AADA6F1E1EA84F14C13DE088BFFC.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9E9B7254DB86AADA6F1E1EA84F14C13DE088BFFC.xuy", lpFilePart=0x0) returned 0x89 [0169.808] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0169.808] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9E9B7254DB86AADA6F1E1EA84F14C13DE088BFFC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9e9b7254db86aada6f1e1ea84f14c13de088bffc"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45eea05d, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x45eea05d, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x510ec65d, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0169.808] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0169.808] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9E9B7254DB86AADA6F1E1EA84F14C13DE088BFFC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9e9b7254db86aada6f1e1ea84f14c13de088bffc"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9E9B7254DB86AADA6F1E1EA84F14C13DE088BFFC.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9e9b7254db86aada6f1e1ea84f14c13de088bffc.xuy")) returned 1 [0169.809] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9F4521AEA8B0157813BA5C1335558DF917E3A311", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9F4521AEA8B0157813BA5C1335558DF917E3A311", lpFilePart=0x0) returned 0x85 [0169.809] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0169.809] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9F4521AEA8B0157813BA5C1335558DF917E3A311" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9f4521aea8b0157813ba5c1335558df917e3a311"), fInfoLevelId=0x0, lpFileInformation=0x23062f0 | out: lpFileInformation=0x23062f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46257681, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x46257681, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x46257681, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0x539)) returned 1 [0169.810] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0169.810] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9F4521AEA8B0157813BA5C1335558DF917E3A311", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9F4521AEA8B0157813BA5C1335558DF917E3A311", lpFilePart=0x0) returned 0x85 [0169.810] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0169.810] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9F4521AEA8B0157813BA5C1335558DF917E3A311" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9f4521aea8b0157813ba5c1335558df917e3a311"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0169.810] GetFileType (hFile=0x444) returned 0x1 [0169.810] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0169.810] GetFileType (hFile=0x444) returned 0x1 [0169.810] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x539 [0169.810] ReadFile (in: hFile=0x444, lpBuffer=0x2306c48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x2306c48*, lpNumberOfBytesRead=0x3be5c8*=0x539, lpOverlapped=0x0) returned 1 [0169.811] CloseHandle (hObject=0x444) returned 1 [0169.821] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9F4521AEA8B0157813BA5C1335558DF917E3A311", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9F4521AEA8B0157813BA5C1335558DF917E3A311", lpFilePart=0x0) returned 0x85 [0169.821] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0169.821] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9F4521AEA8B0157813BA5C1335558DF917E3A311" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9f4521aea8b0157813ba5c1335558df917e3a311"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0169.823] GetFileType (hFile=0x444) returned 0x1 [0169.823] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0169.823] GetFileType (hFile=0x444) returned 0x1 [0169.823] WriteFile (in: hFile=0x444, lpBuffer=0x237f718*, nNumberOfBytesToWrite=0x540, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x237f718*, lpNumberOfBytesWritten=0x3be4d8*=0x540, lpOverlapped=0x0) returned 1 [0169.824] CloseHandle (hObject=0x444) returned 1 [0169.824] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9F4521AEA8B0157813BA5C1335558DF917E3A311", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9F4521AEA8B0157813BA5C1335558DF917E3A311", lpFilePart=0x0) returned 0x85 [0169.824] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9F4521AEA8B0157813BA5C1335558DF917E3A311.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9F4521AEA8B0157813BA5C1335558DF917E3A311.xuy", lpFilePart=0x0) returned 0x89 [0169.824] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0169.824] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9F4521AEA8B0157813BA5C1335558DF917E3A311" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9f4521aea8b0157813ba5c1335558df917e3a311"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46257681, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x46257681, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x51112577, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x540)) returned 1 [0169.824] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0169.824] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9F4521AEA8B0157813BA5C1335558DF917E3A311" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9f4521aea8b0157813ba5c1335558df917e3a311"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9F4521AEA8B0157813BA5C1335558DF917E3A311.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9f4521aea8b0157813ba5c1335558df917e3a311.xuy")) returned 1 [0169.826] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9F651A43713C608823431125B0C4B181B8E2C60F", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9F651A43713C608823431125B0C4B181B8E2C60F", lpFilePart=0x0) returned 0x85 [0169.826] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0169.826] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9F651A43713C608823431125B0C4B181B8E2C60F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9f651a43713c608823431125b0c4b181b8e2c60f"), fInfoLevelId=0x0, lpFileInformation=0x2380ad8 | out: lpFileInformation=0x2380ad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a07e825, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x5a07e825, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x5d85fb06, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x1261)) returned 1 [0169.826] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0169.827] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9F651A43713C608823431125B0C4B181B8E2C60F", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9F651A43713C608823431125B0C4B181B8E2C60F", lpFilePart=0x0) returned 0x85 [0169.827] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0169.827] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9F651A43713C608823431125B0C4B181B8E2C60F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9f651a43713c608823431125b0c4b181b8e2c60f"), fInfoLevelId=0x0, lpFileInformation=0x2380cd8 | out: lpFileInformation=0x2380cd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a07e825, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x5a07e825, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x5d85fb06, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x1261)) returned 1 [0169.827] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0169.827] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9F651A43713C608823431125B0C4B181B8E2C60F", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9F651A43713C608823431125B0C4B181B8E2C60F", lpFilePart=0x0) returned 0x85 [0169.827] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0169.827] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9F651A43713C608823431125B0C4B181B8E2C60F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9f651a43713c608823431125b0c4b181b8e2c60f"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0169.828] GetFileType (hFile=0x444) returned 0x1 [0169.828] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0169.828] GetFileType (hFile=0x444) returned 0x1 [0169.828] ReadFile (in: hFile=0x444, lpBuffer=0x2383208, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x2383208*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0169.869] CloseHandle (hObject=0x444) returned 1 [0169.870] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9F651A43713C608823431125B0C4B181B8E2C60F", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9F651A43713C608823431125B0C4B181B8E2C60F", lpFilePart=0x0) returned 0x85 [0169.870] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0169.870] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9F651A43713C608823431125B0C4B181B8E2C60F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9f651a43713c608823431125b0c4b181b8e2c60f"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0169.870] GetFileType (hFile=0x444) returned 0x1 [0169.870] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0169.870] GetFileType (hFile=0x444) returned 0x1 [0169.870] WriteFile (in: hFile=0x444, lpBuffer=0x218c038*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x218c038*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0169.870] CloseHandle (hObject=0x444) returned 1 [0169.870] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9F651A43713C608823431125B0C4B181B8E2C60F", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9F651A43713C608823431125B0C4B181B8E2C60F", lpFilePart=0x0) returned 0x85 [0169.870] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9F651A43713C608823431125B0C4B181B8E2C60F.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9F651A43713C608823431125B0C4B181B8E2C60F.xuy", lpFilePart=0x0) returned 0x89 [0169.871] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0169.871] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9F651A43713C608823431125B0C4B181B8E2C60F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9f651a43713c608823431125b0c4b181b8e2c60f"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a07e825, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x5a07e825, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x51184d37, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0169.871] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0169.871] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9F651A43713C608823431125B0C4B181B8E2C60F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9f651a43713c608823431125b0c4b181b8e2c60f"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9F651A43713C608823431125B0C4B181B8E2C60F.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9f651a43713c608823431125b0c4b181b8e2c60f.xuy")) returned 1 [0169.872] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A21065F31EE0058531F754D1F9331E5AC5B3E1CC", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A21065F31EE0058531F754D1F9331E5AC5B3E1CC", lpFilePart=0x0) returned 0x85 [0169.872] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0169.872] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A21065F31EE0058531F754D1F9331E5AC5B3E1CC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a21065f31ee0058531f754d1f9331e5ac5b3e1cc"), fInfoLevelId=0x0, lpFileInformation=0x21ff750 | out: lpFileInformation=0x21ff750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdda5a53b, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xdda5a53b, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xdda61a63, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x1c4b)) returned 1 [0169.872] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0169.872] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A21065F31EE0058531F754D1F9331E5AC5B3E1CC", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A21065F31EE0058531F754D1F9331E5AC5B3E1CC", lpFilePart=0x0) returned 0x85 [0169.873] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0169.874] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A21065F31EE0058531F754D1F9331E5AC5B3E1CC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a21065f31ee0058531f754d1f9331e5ac5b3e1cc"), fInfoLevelId=0x0, lpFileInformation=0x21ff950 | out: lpFileInformation=0x21ff950*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdda5a53b, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xdda5a53b, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xdda61a63, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x1c4b)) returned 1 [0169.874] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0169.874] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A21065F31EE0058531F754D1F9331E5AC5B3E1CC", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A21065F31EE0058531F754D1F9331E5AC5B3E1CC", lpFilePart=0x0) returned 0x85 [0169.874] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0169.874] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A21065F31EE0058531F754D1F9331E5AC5B3E1CC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a21065f31ee0058531f754d1f9331e5ac5b3e1cc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0169.875] GetFileType (hFile=0x444) returned 0x1 [0169.875] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0169.875] GetFileType (hFile=0x444) returned 0x1 [0169.875] ReadFile (in: hFile=0x444, lpBuffer=0x2201e80, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x2201e80*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0169.923] CloseHandle (hObject=0x444) returned 1 [0169.923] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A21065F31EE0058531F754D1F9331E5AC5B3E1CC", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A21065F31EE0058531F754D1F9331E5AC5B3E1CC", lpFilePart=0x0) returned 0x85 [0169.924] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0169.924] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A21065F31EE0058531F754D1F9331E5AC5B3E1CC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a21065f31ee0058531f754d1f9331e5ac5b3e1cc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0169.924] GetFileType (hFile=0x444) returned 0x1 [0169.924] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0169.924] GetFileType (hFile=0x444) returned 0x1 [0169.924] WriteFile (in: hFile=0x444, lpBuffer=0x21ffb30*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x21ffb30*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0169.924] CloseHandle (hObject=0x444) returned 1 [0169.924] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A21065F31EE0058531F754D1F9331E5AC5B3E1CC", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A21065F31EE0058531F754D1F9331E5AC5B3E1CC", lpFilePart=0x0) returned 0x85 [0169.924] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A21065F31EE0058531F754D1F9331E5AC5B3E1CC.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A21065F31EE0058531F754D1F9331E5AC5B3E1CC.xuy", lpFilePart=0x0) returned 0x89 [0169.924] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0169.925] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A21065F31EE0058531F754D1F9331E5AC5B3E1CC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a21065f31ee0058531f754d1f9331e5ac5b3e1cc"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdda5a53b, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xdda5a53b, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x5121da34, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0169.925] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0169.925] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A21065F31EE0058531F754D1F9331E5AC5B3E1CC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a21065f31ee0058531f754d1f9331e5ac5b3e1cc"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A21065F31EE0058531F754D1F9331E5AC5B3E1CC.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a21065f31ee0058531f754d1f9331e5ac5b3e1cc.xuy")) returned 1 [0169.926] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A3AE39E0FB78E2F298326D61C876A88868E131EC", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A3AE39E0FB78E2F298326D61C876A88868E131EC", lpFilePart=0x0) returned 0x85 [0169.926] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0169.926] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A3AE39E0FB78E2F298326D61C876A88868E131EC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a3ae39e0fb78e2f298326d61c876a88868e131ec"), fInfoLevelId=0x0, lpFileInformation=0x227e428 | out: lpFileInformation=0x227e428*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87c8a856, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x87c8a856, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x87c8cf72, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x2700)) returned 1 [0169.926] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0169.926] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A3AE39E0FB78E2F298326D61C876A88868E131EC", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A3AE39E0FB78E2F298326D61C876A88868E131EC", lpFilePart=0x0) returned 0x85 [0169.927] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0169.927] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A3AE39E0FB78E2F298326D61C876A88868E131EC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a3ae39e0fb78e2f298326d61c876a88868e131ec"), fInfoLevelId=0x0, lpFileInformation=0x227e628 | out: lpFileInformation=0x227e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87c8a856, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x87c8a856, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x87c8cf72, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x2700)) returned 1 [0169.927] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0169.927] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A3AE39E0FB78E2F298326D61C876A88868E131EC", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A3AE39E0FB78E2F298326D61C876A88868E131EC", lpFilePart=0x0) returned 0x85 [0169.927] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0169.927] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A3AE39E0FB78E2F298326D61C876A88868E131EC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a3ae39e0fb78e2f298326d61c876a88868e131ec"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0169.928] GetFileType (hFile=0x444) returned 0x1 [0169.928] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0169.928] GetFileType (hFile=0x444) returned 0x1 [0169.928] ReadFile (in: hFile=0x444, lpBuffer=0x2280b58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x2280b58*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0169.940] CloseHandle (hObject=0x444) returned 1 [0169.941] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A3AE39E0FB78E2F298326D61C876A88868E131EC", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A3AE39E0FB78E2F298326D61C876A88868E131EC", lpFilePart=0x0) returned 0x85 [0169.941] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0169.941] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A3AE39E0FB78E2F298326D61C876A88868E131EC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a3ae39e0fb78e2f298326d61c876a88868e131ec"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0169.941] GetFileType (hFile=0x444) returned 0x1 [0169.941] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0169.941] GetFileType (hFile=0x444) returned 0x1 [0169.941] WriteFile (in: hFile=0x444, lpBuffer=0x227e808*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x227e808*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0169.941] CloseHandle (hObject=0x444) returned 1 [0169.941] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A3AE39E0FB78E2F298326D61C876A88868E131EC", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A3AE39E0FB78E2F298326D61C876A88868E131EC", lpFilePart=0x0) returned 0x85 [0169.941] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A3AE39E0FB78E2F298326D61C876A88868E131EC.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A3AE39E0FB78E2F298326D61C876A88868E131EC.xuy", lpFilePart=0x0) returned 0x89 [0169.942] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0169.942] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A3AE39E0FB78E2F298326D61C876A88868E131EC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a3ae39e0fb78e2f298326d61c876a88868e131ec"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87c8a856, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x87c8a856, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x51243970, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2700)) returned 1 [0169.942] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0169.942] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A3AE39E0FB78E2F298326D61C876A88868E131EC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a3ae39e0fb78e2f298326d61c876a88868e131ec"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A3AE39E0FB78E2F298326D61C876A88868E131EC.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a3ae39e0fb78e2f298326d61c876a88868e131ec.xuy")) returned 1 [0169.943] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A452E838FF9E4634826BE621406D0A260DAB4FD8", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A452E838FF9E4634826BE621406D0A260DAB4FD8", lpFilePart=0x0) returned 0x85 [0169.943] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0169.943] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A452E838FF9E4634826BE621406D0A260DAB4FD8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a452e838ff9e4634826be621406d0a260dab4fd8"), fInfoLevelId=0x0, lpFileInformation=0x22fd100 | out: lpFileInformation=0x22fd100*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x478c6c4d, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x478c6c4d, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x478c6c4d, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0x333)) returned 1 [0169.943] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0169.943] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A452E838FF9E4634826BE621406D0A260DAB4FD8", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A452E838FF9E4634826BE621406D0A260DAB4FD8", lpFilePart=0x0) returned 0x85 [0169.943] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0169.943] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A452E838FF9E4634826BE621406D0A260DAB4FD8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a452e838ff9e4634826be621406d0a260dab4fd8"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0169.943] GetFileType (hFile=0x444) returned 0x1 [0169.943] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0169.944] GetFileType (hFile=0x444) returned 0x1 [0169.944] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x333 [0169.944] ReadFile (in: hFile=0x444, lpBuffer=0x22fd850, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x22fd850*, lpNumberOfBytesRead=0x3be5c8*=0x333, lpOverlapped=0x0) returned 1 [0169.977] CloseHandle (hObject=0x444) returned 1 [0169.988] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A452E838FF9E4634826BE621406D0A260DAB4FD8", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A452E838FF9E4634826BE621406D0A260DAB4FD8", lpFilePart=0x0) returned 0x85 [0169.988] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0169.988] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A452E838FF9E4634826BE621406D0A260DAB4FD8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a452e838ff9e4634826be621406d0a260dab4fd8"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0169.990] GetFileType (hFile=0x444) returned 0x1 [0169.990] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0169.990] GetFileType (hFile=0x444) returned 0x1 [0169.990] WriteFile (in: hFile=0x444, lpBuffer=0x2375928*, nNumberOfBytesToWrite=0x340, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x2375928*, lpNumberOfBytesWritten=0x3be4d8*=0x340, lpOverlapped=0x0) returned 1 [0169.991] CloseHandle (hObject=0x444) returned 1 [0169.991] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A452E838FF9E4634826BE621406D0A260DAB4FD8", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A452E838FF9E4634826BE621406D0A260DAB4FD8", lpFilePart=0x0) returned 0x85 [0169.991] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A452E838FF9E4634826BE621406D0A260DAB4FD8.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A452E838FF9E4634826BE621406D0A260DAB4FD8.xuy", lpFilePart=0x0) returned 0x89 [0169.992] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0169.992] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A452E838FF9E4634826BE621406D0A260DAB4FD8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a452e838ff9e4634826be621406d0a260dab4fd8"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x478c6c4d, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x478c6c4d, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x512b5f9a, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x340)) returned 1 [0169.992] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0169.992] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A452E838FF9E4634826BE621406D0A260DAB4FD8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a452e838ff9e4634826be621406d0a260dab4fd8"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A452E838FF9E4634826BE621406D0A260DAB4FD8.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a452e838ff9e4634826be621406d0a260dab4fd8.xuy")) returned 1 [0169.993] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A4855879501A8287B513B14A31CE831C3C6F2FD2", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A4855879501A8287B513B14A31CE831C3C6F2FD2", lpFilePart=0x0) returned 0x85 [0169.993] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0169.993] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A4855879501A8287B513B14A31CE831C3C6F2FD2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a4855879501a8287b513b14a31ce831c3c6f2fd2"), fInfoLevelId=0x0, lpFileInformation=0x2376ce8 | out: lpFileInformation=0x2376ce8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99fc6147, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x99fc6147, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x99fcaf6f, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x528)) returned 1 [0169.993] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0169.993] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A4855879501A8287B513B14A31CE831C3C6F2FD2", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A4855879501A8287B513B14A31CE831C3C6F2FD2", lpFilePart=0x0) returned 0x85 [0169.993] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0169.993] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A4855879501A8287B513B14A31CE831C3C6F2FD2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a4855879501a8287b513b14a31ce831c3c6f2fd2"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0169.994] GetFileType (hFile=0x444) returned 0x1 [0169.994] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0169.994] GetFileType (hFile=0x444) returned 0x1 [0169.994] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x528 [0169.994] ReadFile (in: hFile=0x444, lpBuffer=0x2377628, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x2377628*, lpNumberOfBytesRead=0x3be5c8*=0x528, lpOverlapped=0x0) returned 1 [0170.014] CloseHandle (hObject=0x444) returned 1 [0170.055] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A4855879501A8287B513B14A31CE831C3C6F2FD2", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A4855879501A8287B513B14A31CE831C3C6F2FD2", lpFilePart=0x0) returned 0x85 [0170.055] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0170.055] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A4855879501A8287B513B14A31CE831C3C6F2FD2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a4855879501a8287b513b14a31ce831c3c6f2fd2"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0170.058] GetFileType (hFile=0x444) returned 0x1 [0170.058] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0170.058] GetFileType (hFile=0x444) returned 0x1 [0170.058] WriteFile (in: hFile=0x444, lpBuffer=0x21ed400*, nNumberOfBytesToWrite=0x530, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x21ed400*, lpNumberOfBytesWritten=0x3be4d8*=0x530, lpOverlapped=0x0) returned 1 [0170.059] CloseHandle (hObject=0x444) returned 1 [0170.059] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A4855879501A8287B513B14A31CE831C3C6F2FD2", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A4855879501A8287B513B14A31CE831C3C6F2FD2", lpFilePart=0x0) returned 0x85 [0170.059] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A4855879501A8287B513B14A31CE831C3C6F2FD2.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A4855879501A8287B513B14A31CE831C3C6F2FD2.xuy", lpFilePart=0x0) returned 0x89 [0170.059] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0170.059] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A4855879501A8287B513B14A31CE831C3C6F2FD2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a4855879501a8287b513b14a31ce831c3c6f2fd2"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99fc6147, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x99fc6147, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x5134e933, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x530)) returned 1 [0170.059] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0170.059] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A4855879501A8287B513B14A31CE831C3C6F2FD2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a4855879501a8287b513b14a31ce831c3c6f2fd2"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A4855879501A8287B513B14A31CE831C3C6F2FD2.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a4855879501a8287b513b14a31ce831c3c6f2fd2.xuy")) returned 1 [0170.061] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A54B398703E64482D4C0347214229AB910E990DC", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A54B398703E64482D4C0347214229AB910E990DC", lpFilePart=0x0) returned 0x85 [0170.061] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0170.061] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A54B398703E64482D4C0347214229AB910E990DC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a54b398703e64482d4c0347214229ab910e990dc"), fInfoLevelId=0x0, lpFileInformation=0x21ee7c0 | out: lpFileInformation=0x21ee7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf34924d0, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xf34924d0, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0xf34924d0, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x1a86)) returned 1 [0170.061] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0170.061] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A54B398703E64482D4C0347214229AB910E990DC", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A54B398703E64482D4C0347214229AB910E990DC", lpFilePart=0x0) returned 0x85 [0170.061] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0170.061] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A54B398703E64482D4C0347214229AB910E990DC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a54b398703e64482d4c0347214229ab910e990dc"), fInfoLevelId=0x0, lpFileInformation=0x21ee9c0 | out: lpFileInformation=0x21ee9c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf34924d0, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xf34924d0, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0xf34924d0, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x1a86)) returned 1 [0170.062] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0170.062] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A54B398703E64482D4C0347214229AB910E990DC", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A54B398703E64482D4C0347214229AB910E990DC", lpFilePart=0x0) returned 0x85 [0170.062] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0170.062] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A54B398703E64482D4C0347214229AB910E990DC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a54b398703e64482d4c0347214229ab910e990dc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0170.063] GetFileType (hFile=0x444) returned 0x1 [0170.063] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0170.063] GetFileType (hFile=0x444) returned 0x1 [0170.063] ReadFile (in: hFile=0x444, lpBuffer=0x21f0ef0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x21f0ef0*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0170.075] CloseHandle (hObject=0x444) returned 1 [0170.075] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A54B398703E64482D4C0347214229AB910E990DC", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A54B398703E64482D4C0347214229AB910E990DC", lpFilePart=0x0) returned 0x85 [0170.075] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0170.075] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A54B398703E64482D4C0347214229AB910E990DC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a54b398703e64482d4c0347214229ab910e990dc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0170.075] GetFileType (hFile=0x444) returned 0x1 [0170.075] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0170.075] GetFileType (hFile=0x444) returned 0x1 [0170.075] WriteFile (in: hFile=0x444, lpBuffer=0x21eeba0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x21eeba0*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0170.075] CloseHandle (hObject=0x444) returned 1 [0170.076] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A54B398703E64482D4C0347214229AB910E990DC", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A54B398703E64482D4C0347214229AB910E990DC", lpFilePart=0x0) returned 0x85 [0170.076] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A54B398703E64482D4C0347214229AB910E990DC.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A54B398703E64482D4C0347214229AB910E990DC.xuy", lpFilePart=0x0) returned 0x89 [0170.076] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0170.076] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A54B398703E64482D4C0347214229AB910E990DC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a54b398703e64482d4c0347214229ab910e990dc"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf34924d0, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xf34924d0, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x51375d65, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0170.076] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0170.076] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A54B398703E64482D4C0347214229AB910E990DC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a54b398703e64482d4c0347214229ab910e990dc"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A54B398703E64482D4C0347214229AB910E990DC.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a54b398703e64482d4c0347214229ab910e990dc.xuy")) returned 1 [0170.077] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A5CE6011CBC78912C62950EF4D2F8EC1217240B0", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A5CE6011CBC78912C62950EF4D2F8EC1217240B0", lpFilePart=0x0) returned 0x85 [0170.077] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0170.078] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A5CE6011CBC78912C62950EF4D2F8EC1217240B0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a5ce6011cbc78912c62950ef4d2f8ec1217240b0"), fInfoLevelId=0x0, lpFileInformation=0x226d498 | out: lpFileInformation=0x226d498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x543c62ff, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x543c62ff, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x5ef06054, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x12fd)) returned 1 [0170.078] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0170.078] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A5CE6011CBC78912C62950EF4D2F8EC1217240B0", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A5CE6011CBC78912C62950EF4D2F8EC1217240B0", lpFilePart=0x0) returned 0x85 [0170.078] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0170.078] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A5CE6011CBC78912C62950EF4D2F8EC1217240B0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a5ce6011cbc78912c62950ef4d2f8ec1217240b0"), fInfoLevelId=0x0, lpFileInformation=0x226d698 | out: lpFileInformation=0x226d698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x543c62ff, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x543c62ff, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x5ef06054, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x12fd)) returned 1 [0170.078] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0170.078] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A5CE6011CBC78912C62950EF4D2F8EC1217240B0", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A5CE6011CBC78912C62950EF4D2F8EC1217240B0", lpFilePart=0x0) returned 0x85 [0170.078] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0170.078] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A5CE6011CBC78912C62950EF4D2F8EC1217240B0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a5ce6011cbc78912c62950ef4d2f8ec1217240b0"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0170.079] GetFileType (hFile=0x444) returned 0x1 [0170.079] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0170.079] GetFileType (hFile=0x444) returned 0x1 [0170.079] ReadFile (in: hFile=0x444, lpBuffer=0x226fbc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x226fbc8*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0170.091] CloseHandle (hObject=0x444) returned 1 [0170.091] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A5CE6011CBC78912C62950EF4D2F8EC1217240B0", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A5CE6011CBC78912C62950EF4D2F8EC1217240B0", lpFilePart=0x0) returned 0x85 [0170.091] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0170.091] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A5CE6011CBC78912C62950EF4D2F8EC1217240B0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a5ce6011cbc78912c62950ef4d2f8ec1217240b0"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0170.091] GetFileType (hFile=0x444) returned 0x1 [0170.091] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0170.092] GetFileType (hFile=0x444) returned 0x1 [0170.092] WriteFile (in: hFile=0x444, lpBuffer=0x226d878*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x226d878*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0170.092] CloseHandle (hObject=0x444) returned 1 [0170.092] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A5CE6011CBC78912C62950EF4D2F8EC1217240B0", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A5CE6011CBC78912C62950EF4D2F8EC1217240B0", lpFilePart=0x0) returned 0x85 [0170.092] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A5CE6011CBC78912C62950EF4D2F8EC1217240B0.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A5CE6011CBC78912C62950EF4D2F8EC1217240B0.xuy", lpFilePart=0x0) returned 0x89 [0170.092] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0170.092] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A5CE6011CBC78912C62950EF4D2F8EC1217240B0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a5ce6011cbc78912c62950ef4d2f8ec1217240b0"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x543c62ff, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x543c62ff, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x513c102a, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0170.092] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0170.092] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A5CE6011CBC78912C62950EF4D2F8EC1217240B0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a5ce6011cbc78912c62950ef4d2f8ec1217240b0"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A5CE6011CBC78912C62950EF4D2F8EC1217240B0.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a5ce6011cbc78912c62950ef4d2f8ec1217240b0.xuy")) returned 1 [0170.093] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A5FA9DDF296E0470E37D76CF07A3EB57C576526B", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A5FA9DDF296E0470E37D76CF07A3EB57C576526B", lpFilePart=0x0) returned 0x85 [0170.093] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0170.093] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A5FA9DDF296E0470E37D76CF07A3EB57C576526B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a5fa9ddf296e0470e37d76cf07a3eb57c576526b"), fInfoLevelId=0x0, lpFileInformation=0x22ec170 | out: lpFileInformation=0x22ec170*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81fe7f84, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x81fe7f84, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x81fe7f84, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0xa3a)) returned 1 [0170.094] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0170.094] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A5FA9DDF296E0470E37D76CF07A3EB57C576526B", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A5FA9DDF296E0470E37D76CF07A3EB57C576526B", lpFilePart=0x0) returned 0x85 [0170.094] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0170.094] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A5FA9DDF296E0470E37D76CF07A3EB57C576526B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a5fa9ddf296e0470e37d76cf07a3eb57c576526b"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0170.094] GetFileType (hFile=0x444) returned 0x1 [0170.094] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0170.094] GetFileType (hFile=0x444) returned 0x1 [0170.094] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xa3a [0170.094] ReadFile (in: hFile=0x444, lpBuffer=0x22ecfc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x22ecfc8*, lpNumberOfBytesRead=0x3be5c8*=0xa3a, lpOverlapped=0x0) returned 1 [0170.117] CloseHandle (hObject=0x444) returned 1 [0170.129] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A5FA9DDF296E0470E37D76CF07A3EB57C576526B", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A5FA9DDF296E0470E37D76CF07A3EB57C576526B", lpFilePart=0x0) returned 0x85 [0170.129] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0170.129] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A5FA9DDF296E0470E37D76CF07A3EB57C576526B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a5fa9ddf296e0470e37d76cf07a3eb57c576526b"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0170.131] GetFileType (hFile=0x444) returned 0x1 [0170.131] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0170.131] GetFileType (hFile=0x444) returned 0x1 [0170.131] WriteFile (in: hFile=0x444, lpBuffer=0x2367398*, nNumberOfBytesToWrite=0xa40, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x2367398*, lpNumberOfBytesWritten=0x3be4d8*=0xa40, lpOverlapped=0x0) returned 1 [0170.132] CloseHandle (hObject=0x444) returned 1 [0170.132] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A5FA9DDF296E0470E37D76CF07A3EB57C576526B", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A5FA9DDF296E0470E37D76CF07A3EB57C576526B", lpFilePart=0x0) returned 0x85 [0170.132] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A5FA9DDF296E0470E37D76CF07A3EB57C576526B.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A5FA9DDF296E0470E37D76CF07A3EB57C576526B.xuy", lpFilePart=0x0) returned 0x89 [0170.132] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0170.132] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A5FA9DDF296E0470E37D76CF07A3EB57C576526B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a5fa9ddf296e0470e37d76cf07a3eb57c576526b"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81fe7f84, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x81fe7f84, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x5140d92e, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xa40)) returned 1 [0170.132] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0170.132] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A5FA9DDF296E0470E37D76CF07A3EB57C576526B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a5fa9ddf296e0470e37d76cf07a3eb57c576526b"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A5FA9DDF296E0470E37D76CF07A3EB57C576526B.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a5fa9ddf296e0470e37d76cf07a3eb57c576526b.xuy")) returned 1 [0170.134] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A615D0218839BB4F69554EB267C1FE664667EE08", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A615D0218839BB4F69554EB267C1FE664667EE08", lpFilePart=0x0) returned 0x85 [0170.134] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0170.134] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A615D0218839BB4F69554EB267C1FE664667EE08" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a615d0218839bb4f69554eb267c1fe664667ee08"), fInfoLevelId=0x0, lpFileInformation=0x2368758 | out: lpFileInformation=0x2368758*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46bbaac8, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x46bbaac8, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x46bbaac8, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0x1e70)) returned 1 [0170.134] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0170.134] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A615D0218839BB4F69554EB267C1FE664667EE08", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A615D0218839BB4F69554EB267C1FE664667EE08", lpFilePart=0x0) returned 0x85 [0170.134] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0170.134] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A615D0218839BB4F69554EB267C1FE664667EE08" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a615d0218839bb4f69554eb267c1fe664667ee08"), fInfoLevelId=0x0, lpFileInformation=0x2368958 | out: lpFileInformation=0x2368958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46bbaac8, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x46bbaac8, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x46bbaac8, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0x1e70)) returned 1 [0170.134] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0170.134] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A615D0218839BB4F69554EB267C1FE664667EE08", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A615D0218839BB4F69554EB267C1FE664667EE08", lpFilePart=0x0) returned 0x85 [0170.134] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0170.134] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A615D0218839BB4F69554EB267C1FE664667EE08" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a615d0218839bb4f69554eb267c1fe664667ee08"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0170.135] GetFileType (hFile=0x444) returned 0x1 [0170.135] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0170.135] GetFileType (hFile=0x444) returned 0x1 [0170.135] ReadFile (in: hFile=0x444, lpBuffer=0x236ae88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x236ae88*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0170.211] CloseHandle (hObject=0x444) returned 1 [0170.211] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A615D0218839BB4F69554EB267C1FE664667EE08", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A615D0218839BB4F69554EB267C1FE664667EE08", lpFilePart=0x0) returned 0x85 [0170.211] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0170.211] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A615D0218839BB4F69554EB267C1FE664667EE08" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a615d0218839bb4f69554eb267c1fe664667ee08"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0170.211] GetFileType (hFile=0x444) returned 0x1 [0170.211] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0170.212] GetFileType (hFile=0x444) returned 0x1 [0170.212] WriteFile (in: hFile=0x444, lpBuffer=0x218c038*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x218c038*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0170.212] CloseHandle (hObject=0x444) returned 1 [0170.212] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A615D0218839BB4F69554EB267C1FE664667EE08", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A615D0218839BB4F69554EB267C1FE664667EE08", lpFilePart=0x0) returned 0x85 [0170.212] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A615D0218839BB4F69554EB267C1FE664667EE08.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A615D0218839BB4F69554EB267C1FE664667EE08.xuy", lpFilePart=0x0) returned 0x89 [0170.212] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0170.212] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A615D0218839BB4F69554EB267C1FE664667EE08" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a615d0218839bb4f69554eb267c1fe664667ee08"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46bbaac8, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x46bbaac8, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x514cc53d, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0170.212] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0170.212] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A615D0218839BB4F69554EB267C1FE664667EE08" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a615d0218839bb4f69554eb267c1fe664667ee08"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A615D0218839BB4F69554EB267C1FE664667EE08.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a615d0218839bb4f69554eb267c1fe664667ee08.xuy")) returned 1 [0170.214] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A6225AAA26D69EE93799C2ADA0A886E6EFE3F005", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A6225AAA26D69EE93799C2ADA0A886E6EFE3F005", lpFilePart=0x0) returned 0x85 [0170.214] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0170.214] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A6225AAA26D69EE93799C2ADA0A886E6EFE3F005" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a6225aaa26d69ee93799c2ada0a886e6efe3f005"), fInfoLevelId=0x0, lpFileInformation=0x21ea0d0 | out: lpFileInformation=0x21ea0d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f0c2d21, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3f0c2d21, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x41b75b6c, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x1f32)) returned 1 [0170.215] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0170.215] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A6225AAA26D69EE93799C2ADA0A886E6EFE3F005", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A6225AAA26D69EE93799C2ADA0A886E6EFE3F005", lpFilePart=0x0) returned 0x85 [0170.215] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0170.215] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A6225AAA26D69EE93799C2ADA0A886E6EFE3F005" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a6225aaa26d69ee93799c2ada0a886e6efe3f005"), fInfoLevelId=0x0, lpFileInformation=0x21ea2d0 | out: lpFileInformation=0x21ea2d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f0c2d21, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3f0c2d21, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x41b75b6c, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x1f32)) returned 1 [0170.215] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0170.215] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A6225AAA26D69EE93799C2ADA0A886E6EFE3F005", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A6225AAA26D69EE93799C2ADA0A886E6EFE3F005", lpFilePart=0x0) returned 0x85 [0170.215] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0170.215] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A6225AAA26D69EE93799C2ADA0A886E6EFE3F005" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a6225aaa26d69ee93799c2ada0a886e6efe3f005"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0170.217] GetFileType (hFile=0x444) returned 0x1 [0170.218] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0170.218] GetFileType (hFile=0x444) returned 0x1 [0170.218] ReadFile (in: hFile=0x444, lpBuffer=0x21ec800, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x21ec800*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0170.247] CloseHandle (hObject=0x444) returned 1 [0170.247] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A6225AAA26D69EE93799C2ADA0A886E6EFE3F005", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A6225AAA26D69EE93799C2ADA0A886E6EFE3F005", lpFilePart=0x0) returned 0x85 [0170.759] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0170.759] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A6225AAA26D69EE93799C2ADA0A886E6EFE3F005" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a6225aaa26d69ee93799c2ada0a886e6efe3f005"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0170.759] GetFileType (hFile=0x444) returned 0x1 [0170.759] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0170.759] GetFileType (hFile=0x444) returned 0x1 [0170.759] WriteFile (in: hFile=0x444, lpBuffer=0x21ea4b0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x21ea4b0*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0170.759] CloseHandle (hObject=0x444) returned 1 [0170.760] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A6225AAA26D69EE93799C2ADA0A886E6EFE3F005", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A6225AAA26D69EE93799C2ADA0A886E6EFE3F005", lpFilePart=0x0) returned 0x85 [0170.760] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A6225AAA26D69EE93799C2ADA0A886E6EFE3F005.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A6225AAA26D69EE93799C2ADA0A886E6EFE3F005.xuy", lpFilePart=0x0) returned 0x89 [0170.760] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0170.760] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A6225AAA26D69EE93799C2ADA0A886E6EFE3F005" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a6225aaa26d69ee93799c2ada0a886e6efe3f005"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f0c2d21, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3f0c2d21, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x51a03446, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0170.760] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0170.760] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A6225AAA26D69EE93799C2ADA0A886E6EFE3F005" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a6225aaa26d69ee93799c2ada0a886e6efe3f005"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A6225AAA26D69EE93799C2ADA0A886E6EFE3F005.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a6225aaa26d69ee93799c2ada0a886e6efe3f005.xuy")) returned 1 [0170.761] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A6A0642CCE1A0DE96C87AD670CCE93587788F893", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A6A0642CCE1A0DE96C87AD670CCE93587788F893", lpFilePart=0x0) returned 0x85 [0170.761] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0170.761] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A6A0642CCE1A0DE96C87AD670CCE93587788F893" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a6a0642cce1a0de96c87ad670cce93587788f893"), fInfoLevelId=0x0, lpFileInformation=0x2268da8 | out: lpFileInformation=0x2268da8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f87c7d4, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3f87c7d4, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x41b7d07f, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0xe50)) returned 1 [0170.761] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0170.762] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A6A0642CCE1A0DE96C87AD670CCE93587788F893", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A6A0642CCE1A0DE96C87AD670CCE93587788F893", lpFilePart=0x0) returned 0x85 [0170.762] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0170.762] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A6A0642CCE1A0DE96C87AD670CCE93587788F893" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a6a0642cce1a0de96c87ad670cce93587788f893"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0170.762] GetFileType (hFile=0x444) returned 0x1 [0170.762] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0170.762] GetFileType (hFile=0x444) returned 0x1 [0170.762] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xe50 [0170.762] ReadFile (in: hFile=0x444, lpBuffer=0x226a010, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x226a010*, lpNumberOfBytesRead=0x3be5c8*=0xe50, lpOverlapped=0x0) returned 1 [0170.777] CloseHandle (hObject=0x444) returned 1 [0170.789] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A6A0642CCE1A0DE96C87AD670CCE93587788F893", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A6A0642CCE1A0DE96C87AD670CCE93587788F893", lpFilePart=0x0) returned 0x85 [0170.789] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0170.789] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A6A0642CCE1A0DE96C87AD670CCE93587788F893" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a6a0642cce1a0de96c87ad670cce93587788f893"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0170.791] GetFileType (hFile=0x444) returned 0x1 [0170.791] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0170.791] GetFileType (hFile=0x444) returned 0x1 [0170.791] WriteFile (in: hFile=0x444, lpBuffer=0x22e5888*, nNumberOfBytesToWrite=0xe60, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x22e5888*, lpNumberOfBytesWritten=0x3be4d8*=0xe60, lpOverlapped=0x0) returned 1 [0170.791] CloseHandle (hObject=0x444) returned 1 [0170.792] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A6A0642CCE1A0DE96C87AD670CCE93587788F893", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A6A0642CCE1A0DE96C87AD670CCE93587788F893", lpFilePart=0x0) returned 0x85 [0170.792] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A6A0642CCE1A0DE96C87AD670CCE93587788F893.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A6A0642CCE1A0DE96C87AD670CCE93587788F893.xuy", lpFilePart=0x0) returned 0x89 [0170.792] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0170.792] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A6A0642CCE1A0DE96C87AD670CCE93587788F893" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a6a0642cce1a0de96c87ad670cce93587788f893"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f87c7d4, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3f87c7d4, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x51a4f76d, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xe60)) returned 1 [0170.792] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0170.792] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A6A0642CCE1A0DE96C87AD670CCE93587788F893" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a6a0642cce1a0de96c87ad670cce93587788f893"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A6A0642CCE1A0DE96C87AD670CCE93587788F893.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a6a0642cce1a0de96c87ad670cce93587788f893.xuy")) returned 1 [0170.793] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A6BAA2487D35DA4035FCDA9D515566516C00BFDD", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A6BAA2487D35DA4035FCDA9D515566516C00BFDD", lpFilePart=0x0) returned 0x85 [0170.793] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0170.793] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A6BAA2487D35DA4035FCDA9D515566516C00BFDD" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a6baa2487d35da4035fcda9d515566516c00bfdd"), fInfoLevelId=0x0, lpFileInformation=0x22e6c48 | out: lpFileInformation=0x22e6c48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x443b32f9, ftCreationTime.dwHighDateTime=0x1d2d43d, ftLastAccessTime.dwLowDateTime=0x443b32f9, ftLastAccessTime.dwHighDateTime=0x1d2d43d, ftLastWriteTime.dwLowDateTime=0x443b32f9, ftLastWriteTime.dwHighDateTime=0x1d2d43d, nFileSizeHigh=0x0, nFileSizeLow=0x528)) returned 1 [0170.794] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0170.794] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A6BAA2487D35DA4035FCDA9D515566516C00BFDD", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A6BAA2487D35DA4035FCDA9D515566516C00BFDD", lpFilePart=0x0) returned 0x85 [0170.794] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0170.794] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A6BAA2487D35DA4035FCDA9D515566516C00BFDD" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a6baa2487d35da4035fcda9d515566516c00bfdd"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0170.794] GetFileType (hFile=0x444) returned 0x1 [0170.794] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0170.794] GetFileType (hFile=0x444) returned 0x1 [0170.794] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x528 [0170.794] ReadFile (in: hFile=0x444, lpBuffer=0x22e7588, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x22e7588*, lpNumberOfBytesRead=0x3be5c8*=0x528, lpOverlapped=0x0) returned 1 [0170.810] CloseHandle (hObject=0x444) returned 1 [0170.828] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A6BAA2487D35DA4035FCDA9D515566516C00BFDD", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A6BAA2487D35DA4035FCDA9D515566516C00BFDD", lpFilePart=0x0) returned 0x85 [0170.828] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0170.828] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A6BAA2487D35DA4035FCDA9D515566516C00BFDD" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a6baa2487d35da4035fcda9d515566516c00bfdd"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0170.831] GetFileType (hFile=0x444) returned 0x1 [0170.831] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0170.831] GetFileType (hFile=0x444) returned 0x1 [0170.831] WriteFile (in: hFile=0x444, lpBuffer=0x2360008*, nNumberOfBytesToWrite=0x530, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x2360008*, lpNumberOfBytesWritten=0x3be4d8*=0x530, lpOverlapped=0x0) returned 1 [0170.832] CloseHandle (hObject=0x444) returned 1 [0170.832] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A6BAA2487D35DA4035FCDA9D515566516C00BFDD", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A6BAA2487D35DA4035FCDA9D515566516C00BFDD", lpFilePart=0x0) returned 0x85 [0170.832] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A6BAA2487D35DA4035FCDA9D515566516C00BFDD.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A6BAA2487D35DA4035FCDA9D515566516C00BFDD.xuy", lpFilePart=0x0) returned 0x89 [0170.832] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0170.832] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A6BAA2487D35DA4035FCDA9D515566516C00BFDD" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a6baa2487d35da4035fcda9d515566516c00bfdd"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x443b32f9, ftCreationTime.dwHighDateTime=0x1d2d43d, ftLastAccessTime.dwLowDateTime=0x443b32f9, ftLastAccessTime.dwHighDateTime=0x1d2d43d, ftLastWriteTime.dwLowDateTime=0x51ac1f56, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x530)) returned 1 [0170.832] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0170.832] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A6BAA2487D35DA4035FCDA9D515566516C00BFDD" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a6baa2487d35da4035fcda9d515566516c00bfdd"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A6BAA2487D35DA4035FCDA9D515566516C00BFDD.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a6baa2487d35da4035fcda9d515566516c00bfdd.xuy")) returned 1 [0170.834] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A7377CB548C4FAA4BC173181CB5A845625640804", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A7377CB548C4FAA4BC173181CB5A845625640804", lpFilePart=0x0) returned 0x85 [0170.834] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0170.834] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A7377CB548C4FAA4BC173181CB5A845625640804" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a7377cb548c4faa4bc173181cb5a845625640804"), fInfoLevelId=0x0, lpFileInformation=0x23613c8 | out: lpFileInformation=0x23613c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc55fc670, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc55fc670, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xc55fc670, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x52a)) returned 1 [0170.834] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0170.834] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A7377CB548C4FAA4BC173181CB5A845625640804", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A7377CB548C4FAA4BC173181CB5A845625640804", lpFilePart=0x0) returned 0x85 [0170.834] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0170.834] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A7377CB548C4FAA4BC173181CB5A845625640804" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a7377cb548c4faa4bc173181cb5a845625640804"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0170.834] GetFileType (hFile=0x444) returned 0x1 [0170.835] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0170.835] GetFileType (hFile=0x444) returned 0x1 [0170.835] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x52a [0170.835] ReadFile (in: hFile=0x444, lpBuffer=0x2361d10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x2361d10*, lpNumberOfBytesRead=0x3be5c8*=0x52a, lpOverlapped=0x0) returned 1 [0170.852] CloseHandle (hObject=0x444) returned 1 [0170.899] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A7377CB548C4FAA4BC173181CB5A845625640804", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A7377CB548C4FAA4BC173181CB5A845625640804", lpFilePart=0x0) returned 0x85 [0170.899] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0170.899] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A7377CB548C4FAA4BC173181CB5A845625640804" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a7377cb548c4faa4bc173181cb5a845625640804"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0170.901] GetFileType (hFile=0x444) returned 0x1 [0170.901] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0170.901] GetFileType (hFile=0x444) returned 0x1 [0170.901] WriteFile (in: hFile=0x444, lpBuffer=0x21d7ae8*, nNumberOfBytesToWrite=0x530, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x21d7ae8*, lpNumberOfBytesWritten=0x3be4d8*=0x530, lpOverlapped=0x0) returned 1 [0170.902] CloseHandle (hObject=0x444) returned 1 [0170.902] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A7377CB548C4FAA4BC173181CB5A845625640804", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A7377CB548C4FAA4BC173181CB5A845625640804", lpFilePart=0x0) returned 0x85 [0170.902] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A7377CB548C4FAA4BC173181CB5A845625640804.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A7377CB548C4FAA4BC173181CB5A845625640804.xuy", lpFilePart=0x0) returned 0x89 [0170.902] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0170.902] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A7377CB548C4FAA4BC173181CB5A845625640804" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a7377cb548c4faa4bc173181cb5a845625640804"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc55fc670, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc55fc670, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x51b5a8dd, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x530)) returned 1 [0170.902] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0170.902] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A7377CB548C4FAA4BC173181CB5A845625640804" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a7377cb548c4faa4bc173181cb5a845625640804"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A7377CB548C4FAA4BC173181CB5A845625640804.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a7377cb548c4faa4bc173181cb5a845625640804.xuy")) returned 1 [0170.905] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A74C725DAE07F5F191D727C460DC9607D8637705", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A74C725DAE07F5F191D727C460DC9607D8637705", lpFilePart=0x0) returned 0x85 [0170.905] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0170.905] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A74C725DAE07F5F191D727C460DC9607D8637705" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a74c725dae07f5f191d727c460dc9607d8637705"), fInfoLevelId=0x0, lpFileInformation=0x21d8ea8 | out: lpFileInformation=0x21d8ea8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x555645b0, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x555645b0, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x5fb643c8, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x3616)) returned 1 [0170.905] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0170.905] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A74C725DAE07F5F191D727C460DC9607D8637705", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A74C725DAE07F5F191D727C460DC9607D8637705", lpFilePart=0x0) returned 0x85 [0170.905] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0170.906] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A74C725DAE07F5F191D727C460DC9607D8637705" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a74c725dae07f5f191d727c460dc9607d8637705"), fInfoLevelId=0x0, lpFileInformation=0x21d90a8 | out: lpFileInformation=0x21d90a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x555645b0, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x555645b0, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x5fb643c8, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x3616)) returned 1 [0170.906] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0170.906] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A74C725DAE07F5F191D727C460DC9607D8637705", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A74C725DAE07F5F191D727C460DC9607D8637705", lpFilePart=0x0) returned 0x85 [0170.906] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0170.906] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A74C725DAE07F5F191D727C460DC9607D8637705" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a74c725dae07f5f191d727c460dc9607d8637705"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0170.907] GetFileType (hFile=0x444) returned 0x1 [0170.907] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0170.907] GetFileType (hFile=0x444) returned 0x1 [0170.907] ReadFile (in: hFile=0x444, lpBuffer=0x21db5d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x21db5d8*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0170.957] CloseHandle (hObject=0x444) returned 1 [0170.957] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A74C725DAE07F5F191D727C460DC9607D8637705", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A74C725DAE07F5F191D727C460DC9607D8637705", lpFilePart=0x0) returned 0x85 [0170.957] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0170.957] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A74C725DAE07F5F191D727C460DC9607D8637705" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a74c725dae07f5f191d727c460dc9607d8637705"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0170.957] GetFileType (hFile=0x444) returned 0x1 [0170.957] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0170.957] GetFileType (hFile=0x444) returned 0x1 [0170.958] WriteFile (in: hFile=0x444, lpBuffer=0x21d9288*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x21d9288*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0170.958] CloseHandle (hObject=0x444) returned 1 [0170.958] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A74C725DAE07F5F191D727C460DC9607D8637705", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A74C725DAE07F5F191D727C460DC9607D8637705", lpFilePart=0x0) returned 0x85 [0170.958] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A74C725DAE07F5F191D727C460DC9607D8637705.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A74C725DAE07F5F191D727C460DC9607D8637705.xuy", lpFilePart=0x0) returned 0x89 [0170.958] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0170.958] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A74C725DAE07F5F191D727C460DC9607D8637705" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a74c725dae07f5f191d727c460dc9607d8637705"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x555645b0, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x555645b0, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x51bf314d, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x3616)) returned 1 [0170.958] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0170.958] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A74C725DAE07F5F191D727C460DC9607D8637705" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a74c725dae07f5f191d727c460dc9607d8637705"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A74C725DAE07F5F191D727C460DC9607D8637705.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a74c725dae07f5f191d727c460dc9607d8637705.xuy")) returned 1 [0170.959] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A77C54626C6D859C2B8CDED8C97E042E0F4620AF", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A77C54626C6D859C2B8CDED8C97E042E0F4620AF", lpFilePart=0x0) returned 0x85 [0170.960] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0170.960] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A77C54626C6D859C2B8CDED8C97E042E0F4620AF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a77c54626c6d859c2b8cded8c97e042e0f4620af"), fInfoLevelId=0x0, lpFileInformation=0x2257b80 | out: lpFileInformation=0x2257b80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x819ed1bd, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x819ed1bd, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x819ef8e3, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0xf2fd)) returned 1 [0170.960] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0170.960] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A77C54626C6D859C2B8CDED8C97E042E0F4620AF", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A77C54626C6D859C2B8CDED8C97E042E0F4620AF", lpFilePart=0x0) returned 0x85 [0170.960] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0170.960] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A77C54626C6D859C2B8CDED8C97E042E0F4620AF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a77c54626c6d859c2b8cded8c97e042e0f4620af"), fInfoLevelId=0x0, lpFileInformation=0x2257d80 | out: lpFileInformation=0x2257d80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x819ed1bd, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x819ed1bd, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x819ef8e3, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0xf2fd)) returned 1 [0170.960] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0170.960] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A77C54626C6D859C2B8CDED8C97E042E0F4620AF", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A77C54626C6D859C2B8CDED8C97E042E0F4620AF", lpFilePart=0x0) returned 0x85 [0170.960] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0170.960] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A77C54626C6D859C2B8CDED8C97E042E0F4620AF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a77c54626c6d859c2b8cded8c97e042e0f4620af"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0170.961] GetFileType (hFile=0x444) returned 0x1 [0170.961] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0170.961] GetFileType (hFile=0x444) returned 0x1 [0170.961] ReadFile (in: hFile=0x444, lpBuffer=0x225a2b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x225a2b0*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0170.974] CloseHandle (hObject=0x444) returned 1 [0170.974] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A77C54626C6D859C2B8CDED8C97E042E0F4620AF", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A77C54626C6D859C2B8CDED8C97E042E0F4620AF", lpFilePart=0x0) returned 0x85 [0170.974] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0170.974] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A77C54626C6D859C2B8CDED8C97E042E0F4620AF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a77c54626c6d859c2b8cded8c97e042e0f4620af"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0170.974] GetFileType (hFile=0x444) returned 0x1 [0170.974] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0170.974] GetFileType (hFile=0x444) returned 0x1 [0170.974] WriteFile (in: hFile=0x444, lpBuffer=0x2257f60*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x2257f60*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0170.974] CloseHandle (hObject=0x444) returned 1 [0170.974] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A77C54626C6D859C2B8CDED8C97E042E0F4620AF", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A77C54626C6D859C2B8CDED8C97E042E0F4620AF", lpFilePart=0x0) returned 0x85 [0170.975] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A77C54626C6D859C2B8CDED8C97E042E0F4620AF.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A77C54626C6D859C2B8CDED8C97E042E0F4620AF.xuy", lpFilePart=0x0) returned 0x89 [0170.975] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0170.975] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A77C54626C6D859C2B8CDED8C97E042E0F4620AF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a77c54626c6d859c2b8cded8c97e042e0f4620af"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x819ed1bd, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x819ed1bd, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x51c193eb, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xf2fd)) returned 1 [0170.975] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0170.975] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A77C54626C6D859C2B8CDED8C97E042E0F4620AF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a77c54626c6d859c2b8cded8c97e042e0f4620af"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A77C54626C6D859C2B8CDED8C97E042E0F4620AF.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a77c54626c6d859c2b8cded8c97e042e0f4620af.xuy")) returned 1 [0170.976] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A79A7F293C737F424E1646C7780C2D393FF20F80", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A79A7F293C737F424E1646C7780C2D393FF20F80", lpFilePart=0x0) returned 0x85 [0170.976] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0170.976] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A79A7F293C737F424E1646C7780C2D393FF20F80" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a79a7f293c737f424e1646c7780c2d393ff20f80"), fInfoLevelId=0x0, lpFileInformation=0x22d6858 | out: lpFileInformation=0x22d6858*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8653b59b, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x8653b59b, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x865849b9, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x4d2)) returned 1 [0170.976] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0170.976] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A79A7F293C737F424E1646C7780C2D393FF20F80", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A79A7F293C737F424E1646C7780C2D393FF20F80", lpFilePart=0x0) returned 0x85 [0170.976] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0170.976] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A79A7F293C737F424E1646C7780C2D393FF20F80" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a79a7f293c737f424e1646c7780c2d393ff20f80"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0170.976] GetFileType (hFile=0x444) returned 0x1 [0170.976] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0170.977] GetFileType (hFile=0x444) returned 0x1 [0170.977] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x4d2 [0170.977] ReadFile (in: hFile=0x444, lpBuffer=0x22d7148, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x22d7148*, lpNumberOfBytesRead=0x3be5c8*=0x4d2, lpOverlapped=0x0) returned 1 [0171.002] CloseHandle (hObject=0x444) returned 1 [0171.012] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A79A7F293C737F424E1646C7780C2D393FF20F80", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A79A7F293C737F424E1646C7780C2D393FF20F80", lpFilePart=0x0) returned 0x85 [0171.012] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0171.012] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A79A7F293C737F424E1646C7780C2D393FF20F80" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a79a7f293c737f424e1646c7780c2d393ff20f80"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0171.014] GetFileType (hFile=0x444) returned 0x1 [0171.014] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0171.014] GetFileType (hFile=0x444) returned 0x1 [0171.014] WriteFile (in: hFile=0x444, lpBuffer=0x234fa40*, nNumberOfBytesToWrite=0x4e0, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x234fa40*, lpNumberOfBytesWritten=0x3be4d8*=0x4e0, lpOverlapped=0x0) returned 1 [0171.015] CloseHandle (hObject=0x444) returned 1 [0171.015] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A79A7F293C737F424E1646C7780C2D393FF20F80", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A79A7F293C737F424E1646C7780C2D393FF20F80", lpFilePart=0x0) returned 0x85 [0171.015] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A79A7F293C737F424E1646C7780C2D393FF20F80.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A79A7F293C737F424E1646C7780C2D393FF20F80.xuy", lpFilePart=0x0) returned 0x89 [0171.015] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0171.015] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A79A7F293C737F424E1646C7780C2D393FF20F80" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a79a7f293c737f424e1646c7780c2d393ff20f80"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8653b59b, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x8653b59b, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x51c8bab0, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x4e0)) returned 1 [0171.015] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0171.015] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A79A7F293C737F424E1646C7780C2D393FF20F80" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a79a7f293c737f424e1646c7780c2d393ff20f80"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A79A7F293C737F424E1646C7780C2D393FF20F80.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a79a7f293c737f424e1646c7780c2d393ff20f80.xuy")) returned 1 [0171.017] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A7A2A4920970582D0113BA088DF7FD2BCD0BC1F1", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A7A2A4920970582D0113BA088DF7FD2BCD0BC1F1", lpFilePart=0x0) returned 0x85 [0171.017] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0171.017] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A7A2A4920970582D0113BA088DF7FD2BCD0BC1F1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a7a2a4920970582d0113ba088df7fd2bcd0bc1f1"), fInfoLevelId=0x0, lpFileInformation=0x2350e00 | out: lpFileInformation=0x2350e00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x886a692c, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x886a692c, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x8b6a6f56, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0xc5)) returned 1 [0171.017] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0171.017] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A7A2A4920970582D0113BA088DF7FD2BCD0BC1F1", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A7A2A4920970582D0113BA088DF7FD2BCD0BC1F1", lpFilePart=0x0) returned 0x85 [0171.017] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0171.018] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A7A2A4920970582D0113BA088DF7FD2BCD0BC1F1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a7a2a4920970582d0113ba088df7fd2bcd0bc1f1"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0171.018] GetFileType (hFile=0x444) returned 0x1 [0171.018] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0171.018] GetFileType (hFile=0x444) returned 0x1 [0171.018] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xc5 [0171.018] ReadFile (in: hFile=0x444, lpBuffer=0x23512e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x23512e0*, lpNumberOfBytesRead=0x3be5c8*=0xc5, lpOverlapped=0x0) returned 1 [0171.019] CloseHandle (hObject=0x444) returned 1 [0171.059] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A7A2A4920970582D0113BA088DF7FD2BCD0BC1F1", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A7A2A4920970582D0113BA088DF7FD2BCD0BC1F1", lpFilePart=0x0) returned 0x85 [0171.059] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0171.059] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A7A2A4920970582D0113BA088DF7FD2BCD0BC1F1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a7a2a4920970582d0113ba088df7fd2bcd0bc1f1"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0171.061] GetFileType (hFile=0x444) returned 0x1 [0171.061] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0171.061] GetFileType (hFile=0x444) returned 0x1 [0171.061] WriteFile (in: hFile=0x444, lpBuffer=0x21c81b0*, nNumberOfBytesToWrite=0xd0, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x21c81b0*, lpNumberOfBytesWritten=0x3be4d8*=0xd0, lpOverlapped=0x0) returned 1 [0171.062] CloseHandle (hObject=0x444) returned 1 [0171.062] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A7A2A4920970582D0113BA088DF7FD2BCD0BC1F1", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A7A2A4920970582D0113BA088DF7FD2BCD0BC1F1", lpFilePart=0x0) returned 0x85 [0171.062] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A7A2A4920970582D0113BA088DF7FD2BCD0BC1F1.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A7A2A4920970582D0113BA088DF7FD2BCD0BC1F1.xuy", lpFilePart=0x0) returned 0x89 [0171.062] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0171.062] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A7A2A4920970582D0113BA088DF7FD2BCD0BC1F1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a7a2a4920970582d0113ba088df7fd2bcd0bc1f1"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x886a692c, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x886a692c, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x51cfe223, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xd0)) returned 1 [0171.063] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0171.063] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A7A2A4920970582D0113BA088DF7FD2BCD0BC1F1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a7a2a4920970582d0113ba088df7fd2bcd0bc1f1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A7A2A4920970582D0113BA088DF7FD2BCD0BC1F1.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a7a2a4920970582d0113ba088df7fd2bcd0bc1f1.xuy")) returned 1 [0171.064] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A7C9ECE1C490E537AEB164E08953D6E9659D47CD", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A7C9ECE1C490E537AEB164E08953D6E9659D47CD", lpFilePart=0x0) returned 0x85 [0171.064] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0171.064] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A7C9ECE1C490E537AEB164E08953D6E9659D47CD" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a7c9ece1c490e537aeb164e08953d6e9659d47cd"), fInfoLevelId=0x0, lpFileInformation=0x21c9570 | out: lpFileInformation=0x21c9570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x879f26b1, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x879f26b1, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x879f74d3, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x1125)) returned 1 [0171.064] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0171.064] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A7C9ECE1C490E537AEB164E08953D6E9659D47CD", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A7C9ECE1C490E537AEB164E08953D6E9659D47CD", lpFilePart=0x0) returned 0x85 [0171.064] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0171.064] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A7C9ECE1C490E537AEB164E08953D6E9659D47CD" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a7c9ece1c490e537aeb164e08953d6e9659d47cd"), fInfoLevelId=0x0, lpFileInformation=0x21c9770 | out: lpFileInformation=0x21c9770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x879f26b1, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x879f26b1, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x879f74d3, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x1125)) returned 1 [0171.064] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0171.065] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A7C9ECE1C490E537AEB164E08953D6E9659D47CD", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A7C9ECE1C490E537AEB164E08953D6E9659D47CD", lpFilePart=0x0) returned 0x85 [0171.065] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0171.065] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A7C9ECE1C490E537AEB164E08953D6E9659D47CD" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a7c9ece1c490e537aeb164e08953d6e9659d47cd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0171.065] GetFileType (hFile=0x444) returned 0x1 [0171.065] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0171.065] GetFileType (hFile=0x444) returned 0x1 [0171.066] ReadFile (in: hFile=0x444, lpBuffer=0x21cbca0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x21cbca0*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0171.098] CloseHandle (hObject=0x444) returned 1 [0171.098] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A7C9ECE1C490E537AEB164E08953D6E9659D47CD", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A7C9ECE1C490E537AEB164E08953D6E9659D47CD", lpFilePart=0x0) returned 0x85 [0171.098] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0171.098] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A7C9ECE1C490E537AEB164E08953D6E9659D47CD" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a7c9ece1c490e537aeb164e08953d6e9659d47cd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0171.098] GetFileType (hFile=0x444) returned 0x1 [0171.098] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0171.099] GetFileType (hFile=0x444) returned 0x1 [0171.099] WriteFile (in: hFile=0x444, lpBuffer=0x21c9950*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x21c9950*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0171.099] CloseHandle (hObject=0x444) returned 1 [0171.099] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A7C9ECE1C490E537AEB164E08953D6E9659D47CD", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A7C9ECE1C490E537AEB164E08953D6E9659D47CD", lpFilePart=0x0) returned 0x85 [0171.099] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A7C9ECE1C490E537AEB164E08953D6E9659D47CD.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A7C9ECE1C490E537AEB164E08953D6E9659D47CD.xuy", lpFilePart=0x0) returned 0x89 [0171.099] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0171.099] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A7C9ECE1C490E537AEB164E08953D6E9659D47CD" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a7c9ece1c490e537aeb164e08953d6e9659d47cd"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x879f26b1, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x879f26b1, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x51d4a791, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0171.099] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0171.099] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A7C9ECE1C490E537AEB164E08953D6E9659D47CD" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a7c9ece1c490e537aeb164e08953d6e9659d47cd"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A7C9ECE1C490E537AEB164E08953D6E9659D47CD.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a7c9ece1c490e537aeb164e08953d6e9659d47cd.xuy")) returned 1 [0171.101] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A7CAE8A6FFF01E6D9A75068A16268676E73706EB", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A7CAE8A6FFF01E6D9A75068A16268676E73706EB", lpFilePart=0x0) returned 0x85 [0171.101] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0171.101] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A7CAE8A6FFF01E6D9A75068A16268676E73706EB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a7cae8a6fff01e6d9a75068a16268676e73706eb"), fInfoLevelId=0x0, lpFileInformation=0x2248248 | out: lpFileInformation=0x2248248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fc56e27, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3fc56e27, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x3fc56e27, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x13d3)) returned 1 [0171.101] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0171.101] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A7CAE8A6FFF01E6D9A75068A16268676E73706EB", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A7CAE8A6FFF01E6D9A75068A16268676E73706EB", lpFilePart=0x0) returned 0x85 [0171.101] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0171.101] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A7CAE8A6FFF01E6D9A75068A16268676E73706EB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a7cae8a6fff01e6d9a75068a16268676e73706eb"), fInfoLevelId=0x0, lpFileInformation=0x2248448 | out: lpFileInformation=0x2248448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fc56e27, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3fc56e27, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x3fc56e27, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x13d3)) returned 1 [0171.101] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0171.101] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A7CAE8A6FFF01E6D9A75068A16268676E73706EB", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A7CAE8A6FFF01E6D9A75068A16268676E73706EB", lpFilePart=0x0) returned 0x85 [0171.101] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0171.101] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A7CAE8A6FFF01E6D9A75068A16268676E73706EB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a7cae8a6fff01e6d9a75068a16268676e73706eb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0171.102] GetFileType (hFile=0x444) returned 0x1 [0171.102] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0171.102] GetFileType (hFile=0x444) returned 0x1 [0171.102] ReadFile (in: hFile=0x444, lpBuffer=0x224a978, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x224a978*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0171.124] CloseHandle (hObject=0x444) returned 1 [0171.124] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A7CAE8A6FFF01E6D9A75068A16268676E73706EB", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A7CAE8A6FFF01E6D9A75068A16268676E73706EB", lpFilePart=0x0) returned 0x85 [0171.124] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0171.124] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A7CAE8A6FFF01E6D9A75068A16268676E73706EB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a7cae8a6fff01e6d9a75068a16268676e73706eb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0171.124] GetFileType (hFile=0x444) returned 0x1 [0171.125] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0171.125] GetFileType (hFile=0x444) returned 0x1 [0171.125] WriteFile (in: hFile=0x444, lpBuffer=0x2248628*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x2248628*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0171.125] CloseHandle (hObject=0x444) returned 1 [0171.125] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A7CAE8A6FFF01E6D9A75068A16268676E73706EB", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A7CAE8A6FFF01E6D9A75068A16268676E73706EB", lpFilePart=0x0) returned 0x85 [0171.125] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A7CAE8A6FFF01E6D9A75068A16268676E73706EB.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A7CAE8A6FFF01E6D9A75068A16268676E73706EB.xuy", lpFilePart=0x0) returned 0x89 [0171.125] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0171.125] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A7CAE8A6FFF01E6D9A75068A16268676E73706EB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a7cae8a6fff01e6d9a75068a16268676e73706eb"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fc56e27, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3fc56e27, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x51d96ad9, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0171.125] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0171.125] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A7CAE8A6FFF01E6D9A75068A16268676E73706EB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a7cae8a6fff01e6d9a75068a16268676e73706eb"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A7CAE8A6FFF01E6D9A75068A16268676E73706EB.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a7cae8a6fff01e6d9a75068a16268676e73706eb.xuy")) returned 1 [0171.126] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A7CB81B20A3391AB83C4A3310414C5F73AD69FF0", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A7CB81B20A3391AB83C4A3310414C5F73AD69FF0", lpFilePart=0x0) returned 0x85 [0171.127] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0171.127] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A7CB81B20A3391AB83C4A3310414C5F73AD69FF0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a7cb81b20a3391ab83c4a3310414c5f73ad69ff0"), fInfoLevelId=0x0, lpFileInformation=0x22c6f20 | out: lpFileInformation=0x22c6f20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4350ac7e, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x4350ac7e, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x4350ac7e, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0xd35)) returned 1 [0171.127] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0171.127] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A7CB81B20A3391AB83C4A3310414C5F73AD69FF0", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A7CB81B20A3391AB83C4A3310414C5F73AD69FF0", lpFilePart=0x0) returned 0x85 [0171.127] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0171.127] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A7CB81B20A3391AB83C4A3310414C5F73AD69FF0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a7cb81b20a3391ab83c4a3310414c5f73ad69ff0"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0171.127] GetFileType (hFile=0x444) returned 0x1 [0171.127] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0171.127] GetFileType (hFile=0x444) returned 0x1 [0171.127] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xd35 [0171.127] ReadFile (in: hFile=0x444, lpBuffer=0x22c8070, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x22c8070*, lpNumberOfBytesRead=0x3be5c8*=0xd35, lpOverlapped=0x0) returned 1 [0171.151] CloseHandle (hObject=0x444) returned 1 [0171.162] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A7CB81B20A3391AB83C4A3310414C5F73AD69FF0", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A7CB81B20A3391AB83C4A3310414C5F73AD69FF0", lpFilePart=0x0) returned 0x85 [0171.162] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0171.162] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A7CB81B20A3391AB83C4A3310414C5F73AD69FF0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a7cb81b20a3391ab83c4a3310414c5f73ad69ff0"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0171.164] GetFileType (hFile=0x444) returned 0x1 [0171.164] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0171.164] GetFileType (hFile=0x444) returned 0x1 [0171.164] WriteFile (in: hFile=0x444, lpBuffer=0x2343348*, nNumberOfBytesToWrite=0xd40, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x2343348*, lpNumberOfBytesWritten=0x3be4d8*=0xd40, lpOverlapped=0x0) returned 1 [0171.165] CloseHandle (hObject=0x444) returned 1 [0171.165] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A7CB81B20A3391AB83C4A3310414C5F73AD69FF0", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A7CB81B20A3391AB83C4A3310414C5F73AD69FF0", lpFilePart=0x0) returned 0x85 [0171.165] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A7CB81B20A3391AB83C4A3310414C5F73AD69FF0.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A7CB81B20A3391AB83C4A3310414C5F73AD69FF0.xuy", lpFilePart=0x0) returned 0x89 [0171.165] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0171.165] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A7CB81B20A3391AB83C4A3310414C5F73AD69FF0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a7cb81b20a3391ab83c4a3310414c5f73ad69ff0"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4350ac7e, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x4350ac7e, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x51de2f4f, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xd40)) returned 1 [0171.165] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0171.165] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A7CB81B20A3391AB83C4A3310414C5F73AD69FF0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a7cb81b20a3391ab83c4a3310414c5f73ad69ff0"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A7CB81B20A3391AB83C4A3310414C5F73AD69FF0.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a7cb81b20a3391ab83c4a3310414c5f73ad69ff0.xuy")) returned 1 [0171.166] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A923C18C85E7D22D3214BA40BADDFEC4F2C1946A", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A923C18C85E7D22D3214BA40BADDFEC4F2C1946A", lpFilePart=0x0) returned 0x85 [0171.166] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0171.166] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A923C18C85E7D22D3214BA40BADDFEC4F2C1946A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a923c18c85e7d22d3214ba40baddfec4f2c1946a"), fInfoLevelId=0x0, lpFileInformation=0x2344708 | out: lpFileInformation=0x2344708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89a0a41f, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x89a0a41f, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x89a1195e, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x4d2)) returned 1 [0171.167] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0171.167] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A923C18C85E7D22D3214BA40BADDFEC4F2C1946A", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A923C18C85E7D22D3214BA40BADDFEC4F2C1946A", lpFilePart=0x0) returned 0x85 [0171.167] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0171.167] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A923C18C85E7D22D3214BA40BADDFEC4F2C1946A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a923c18c85e7d22d3214ba40baddfec4f2c1946a"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0171.167] GetFileType (hFile=0x444) returned 0x1 [0171.167] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0171.167] GetFileType (hFile=0x444) returned 0x1 [0171.167] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x4d2 [0171.167] ReadFile (in: hFile=0x444, lpBuffer=0x2344ff8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x2344ff8*, lpNumberOfBytesRead=0x3be5c8*=0x4d2, lpOverlapped=0x0) returned 1 [0171.184] CloseHandle (hObject=0x444) returned 1 [0171.223] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A923C18C85E7D22D3214BA40BADDFEC4F2C1946A", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A923C18C85E7D22D3214BA40BADDFEC4F2C1946A", lpFilePart=0x0) returned 0x85 [0171.223] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0171.223] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A923C18C85E7D22D3214BA40BADDFEC4F2C1946A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a923c18c85e7d22d3214ba40baddfec4f2c1946a"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0171.225] GetFileType (hFile=0x444) returned 0x1 [0171.225] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0171.225] GetFileType (hFile=0x444) returned 0x1 [0171.225] WriteFile (in: hFile=0x444, lpBuffer=0x21bdcf8*, nNumberOfBytesToWrite=0x4e0, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x21bdcf8*, lpNumberOfBytesWritten=0x3be4d8*=0x4e0, lpOverlapped=0x0) returned 1 [0171.226] CloseHandle (hObject=0x444) returned 1 [0171.226] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A923C18C85E7D22D3214BA40BADDFEC4F2C1946A", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A923C18C85E7D22D3214BA40BADDFEC4F2C1946A", lpFilePart=0x0) returned 0x85 [0171.226] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A923C18C85E7D22D3214BA40BADDFEC4F2C1946A.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A923C18C85E7D22D3214BA40BADDFEC4F2C1946A.xuy", lpFilePart=0x0) returned 0x89 [0171.226] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0171.226] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A923C18C85E7D22D3214BA40BADDFEC4F2C1946A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a923c18c85e7d22d3214ba40baddfec4f2c1946a"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89a0a41f, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x89a0a41f, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x51e7baa1, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x4e0)) returned 1 [0171.226] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0171.226] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A923C18C85E7D22D3214BA40BADDFEC4F2C1946A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a923c18c85e7d22d3214ba40baddfec4f2c1946a"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A923C18C85E7D22D3214BA40BADDFEC4F2C1946A.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a923c18c85e7d22d3214ba40baddfec4f2c1946a.xuy")) returned 1 [0171.228] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A924CE02C4623AD66CF438353687033A493649C0", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A924CE02C4623AD66CF438353687033A493649C0", lpFilePart=0x0) returned 0x85 [0171.228] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0171.228] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A924CE02C4623AD66CF438353687033A493649C0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a924ce02c4623ad66cf438353687033a493649c0"), fInfoLevelId=0x0, lpFileInformation=0x21bf0b8 | out: lpFileInformation=0x21bf0b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86322361, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x86322361, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x86322361, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x1254)) returned 1 [0171.228] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0171.228] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A924CE02C4623AD66CF438353687033A493649C0", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A924CE02C4623AD66CF438353687033A493649C0", lpFilePart=0x0) returned 0x85 [0171.228] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0171.228] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A924CE02C4623AD66CF438353687033A493649C0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a924ce02c4623ad66cf438353687033a493649c0"), fInfoLevelId=0x0, lpFileInformation=0x21bf2b8 | out: lpFileInformation=0x21bf2b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86322361, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x86322361, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x86322361, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x1254)) returned 1 [0171.228] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0171.228] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A924CE02C4623AD66CF438353687033A493649C0", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A924CE02C4623AD66CF438353687033A493649C0", lpFilePart=0x0) returned 0x85 [0171.228] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0171.228] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A924CE02C4623AD66CF438353687033A493649C0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a924ce02c4623ad66cf438353687033a493649c0"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0171.229] GetFileType (hFile=0x444) returned 0x1 [0171.229] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0171.229] GetFileType (hFile=0x444) returned 0x1 [0171.229] ReadFile (in: hFile=0x444, lpBuffer=0x21c17e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x21c17e8*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0171.781] CloseHandle (hObject=0x444) returned 1 [0171.781] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A924CE02C4623AD66CF438353687033A493649C0", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A924CE02C4623AD66CF438353687033A493649C0", lpFilePart=0x0) returned 0x85 [0171.781] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0171.782] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A924CE02C4623AD66CF438353687033A493649C0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a924ce02c4623ad66cf438353687033a493649c0"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0171.782] GetFileType (hFile=0x444) returned 0x1 [0171.782] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0171.782] GetFileType (hFile=0x444) returned 0x1 [0171.782] WriteFile (in: hFile=0x444, lpBuffer=0x21bf498*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x21bf498*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0171.782] CloseHandle (hObject=0x444) returned 1 [0171.782] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A924CE02C4623AD66CF438353687033A493649C0", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A924CE02C4623AD66CF438353687033A493649C0", lpFilePart=0x0) returned 0x85 [0171.782] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A924CE02C4623AD66CF438353687033A493649C0.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A924CE02C4623AD66CF438353687033A493649C0.xuy", lpFilePart=0x0) returned 0x89 [0171.782] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0171.782] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A924CE02C4623AD66CF438353687033A493649C0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a924ce02c4623ad66cf438353687033a493649c0"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86322361, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x86322361, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x523d8e7d, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0171.782] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0171.782] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A924CE02C4623AD66CF438353687033A493649C0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a924ce02c4623ad66cf438353687033a493649c0"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A924CE02C4623AD66CF438353687033A493649C0.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a924ce02c4623ad66cf438353687033a493649c0.xuy")) returned 1 [0171.784] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AA177C2BA237A1CF9ECB7E55C96F75DB3BC33F00", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AA177C2BA237A1CF9ECB7E55C96F75DB3BC33F00", lpFilePart=0x0) returned 0x85 [0171.784] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0171.784] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AA177C2BA237A1CF9ECB7E55C96F75DB3BC33F00" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\aa177c2ba237a1cf9ecb7e55c96f75db3bc33f00"), fInfoLevelId=0x0, lpFileInformation=0x223dd90 | out: lpFileInformation=0x223dd90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x457e91b1, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x457e91b1, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x457e91b1, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0x18bf4)) returned 1 [0171.787] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0171.787] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AA177C2BA237A1CF9ECB7E55C96F75DB3BC33F00", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AA177C2BA237A1CF9ECB7E55C96F75DB3BC33F00", lpFilePart=0x0) returned 0x85 [0171.787] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0171.787] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AA177C2BA237A1CF9ECB7E55C96F75DB3BC33F00" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\aa177c2ba237a1cf9ecb7e55c96f75db3bc33f00"), fInfoLevelId=0x0, lpFileInformation=0x223df90 | out: lpFileInformation=0x223df90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x457e91b1, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x457e91b1, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x457e91b1, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0x18bf4)) returned 1 [0171.788] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0171.788] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AA177C2BA237A1CF9ECB7E55C96F75DB3BC33F00", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AA177C2BA237A1CF9ECB7E55C96F75DB3BC33F00", lpFilePart=0x0) returned 0x85 [0171.788] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0171.788] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AA177C2BA237A1CF9ECB7E55C96F75DB3BC33F00" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\aa177c2ba237a1cf9ecb7e55c96f75db3bc33f00"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0171.789] GetFileType (hFile=0x444) returned 0x1 [0171.789] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0171.789] GetFileType (hFile=0x444) returned 0x1 [0171.789] ReadFile (in: hFile=0x444, lpBuffer=0x22404c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x22404c0*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0171.806] CloseHandle (hObject=0x444) returned 1 [0171.807] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AA177C2BA237A1CF9ECB7E55C96F75DB3BC33F00", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AA177C2BA237A1CF9ECB7E55C96F75DB3BC33F00", lpFilePart=0x0) returned 0x85 [0171.807] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0171.807] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AA177C2BA237A1CF9ECB7E55C96F75DB3BC33F00" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\aa177c2ba237a1cf9ecb7e55c96f75db3bc33f00"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0171.807] GetFileType (hFile=0x444) returned 0x1 [0171.807] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0171.807] GetFileType (hFile=0x444) returned 0x1 [0171.807] WriteFile (in: hFile=0x444, lpBuffer=0x223e170*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x223e170*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0171.807] CloseHandle (hObject=0x444) returned 1 [0171.807] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AA177C2BA237A1CF9ECB7E55C96F75DB3BC33F00", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AA177C2BA237A1CF9ECB7E55C96F75DB3BC33F00", lpFilePart=0x0) returned 0x85 [0171.807] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AA177C2BA237A1CF9ECB7E55C96F75DB3BC33F00.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AA177C2BA237A1CF9ECB7E55C96F75DB3BC33F00.xuy", lpFilePart=0x0) returned 0x89 [0171.807] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0171.808] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AA177C2BA237A1CF9ECB7E55C96F75DB3BC33F00" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\aa177c2ba237a1cf9ecb7e55c96f75db3bc33f00"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x457e91b1, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x457e91b1, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x523fef6b, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x18bf4)) returned 1 [0171.808] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0171.808] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AA177C2BA237A1CF9ECB7E55C96F75DB3BC33F00" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\aa177c2ba237a1cf9ecb7e55c96f75db3bc33f00"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AA177C2BA237A1CF9ECB7E55C96F75DB3BC33F00.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\aa177c2ba237a1cf9ecb7e55c96f75db3bc33f00.xuy")) returned 1 [0171.809] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AA3474876A2B69B0AEB50F15CAB72645BF18F99B", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AA3474876A2B69B0AEB50F15CAB72645BF18F99B", lpFilePart=0x0) returned 0x85 [0171.809] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0171.809] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AA3474876A2B69B0AEB50F15CAB72645BF18F99B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\aa3474876a2b69b0aeb50f15cab72645bf18f99b"), fInfoLevelId=0x0, lpFileInformation=0x22bca68 | out: lpFileInformation=0x22bca68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61551d8c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x61551d8c, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x61551d8c, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x113c)) returned 1 [0171.809] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0171.809] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AA3474876A2B69B0AEB50F15CAB72645BF18F99B", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AA3474876A2B69B0AEB50F15CAB72645BF18F99B", lpFilePart=0x0) returned 0x85 [0171.809] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0171.809] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AA3474876A2B69B0AEB50F15CAB72645BF18F99B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\aa3474876a2b69b0aeb50f15cab72645bf18f99b"), fInfoLevelId=0x0, lpFileInformation=0x22bcc68 | out: lpFileInformation=0x22bcc68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61551d8c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x61551d8c, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x61551d8c, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x113c)) returned 1 [0171.810] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0171.810] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AA3474876A2B69B0AEB50F15CAB72645BF18F99B", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AA3474876A2B69B0AEB50F15CAB72645BF18F99B", lpFilePart=0x0) returned 0x85 [0171.810] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0171.810] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AA3474876A2B69B0AEB50F15CAB72645BF18F99B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\aa3474876a2b69b0aeb50f15cab72645bf18f99b"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0171.811] GetFileType (hFile=0x444) returned 0x1 [0171.811] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0171.811] GetFileType (hFile=0x444) returned 0x1 [0171.811] ReadFile (in: hFile=0x444, lpBuffer=0x22bf198, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x22bf198*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0171.824] CloseHandle (hObject=0x444) returned 1 [0171.824] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AA3474876A2B69B0AEB50F15CAB72645BF18F99B", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AA3474876A2B69B0AEB50F15CAB72645BF18F99B", lpFilePart=0x0) returned 0x85 [0171.824] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0171.824] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AA3474876A2B69B0AEB50F15CAB72645BF18F99B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\aa3474876a2b69b0aeb50f15cab72645bf18f99b"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0171.825] GetFileType (hFile=0x444) returned 0x1 [0171.825] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0171.825] GetFileType (hFile=0x444) returned 0x1 [0171.825] WriteFile (in: hFile=0x444, lpBuffer=0x22bce48*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x22bce48*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0171.825] CloseHandle (hObject=0x444) returned 1 [0171.825] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AA3474876A2B69B0AEB50F15CAB72645BF18F99B", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AA3474876A2B69B0AEB50F15CAB72645BF18F99B", lpFilePart=0x0) returned 0x85 [0171.825] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AA3474876A2B69B0AEB50F15CAB72645BF18F99B.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AA3474876A2B69B0AEB50F15CAB72645BF18F99B.xuy", lpFilePart=0x0) returned 0x89 [0171.825] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0171.825] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AA3474876A2B69B0AEB50F15CAB72645BF18F99B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\aa3474876a2b69b0aeb50f15cab72645bf18f99b"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61551d8c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x61551d8c, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x5242527c, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0171.825] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0171.825] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AA3474876A2B69B0AEB50F15CAB72645BF18F99B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\aa3474876a2b69b0aeb50f15cab72645bf18f99b"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AA3474876A2B69B0AEB50F15CAB72645BF18F99B.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\aa3474876a2b69b0aeb50f15cab72645bf18f99b.xuy")) returned 1 [0171.827] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AAE0CFD840E62ED509F219EEE80DBD34F1AB4601", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AAE0CFD840E62ED509F219EEE80DBD34F1AB4601", lpFilePart=0x0) returned 0x85 [0171.827] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0171.827] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AAE0CFD840E62ED509F219EEE80DBD34F1AB4601" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\aae0cfd840e62ed509f219eee80dbd34f1ab4601"), fInfoLevelId=0x0, lpFileInformation=0x233b740 | out: lpFileInformation=0x233b740*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84fc368c, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x84fc368c, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x84fc368c, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0xaf5)) returned 1 [0171.827] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0171.827] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AAE0CFD840E62ED509F219EEE80DBD34F1AB4601", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AAE0CFD840E62ED509F219EEE80DBD34F1AB4601", lpFilePart=0x0) returned 0x85 [0171.827] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0171.827] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AAE0CFD840E62ED509F219EEE80DBD34F1AB4601" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\aae0cfd840e62ed509f219eee80dbd34f1ab4601"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0171.828] GetFileType (hFile=0x444) returned 0x1 [0171.828] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0171.828] GetFileType (hFile=0x444) returned 0x1 [0171.828] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xaf5 [0171.828] ReadFile (in: hFile=0x444, lpBuffer=0x233c650, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x233c650*, lpNumberOfBytesRead=0x3be5c8*=0xaf5, lpOverlapped=0x0) returned 1 [0172.027] CloseHandle (hObject=0x444) returned 1 [0172.073] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AAE0CFD840E62ED509F219EEE80DBD34F1AB4601", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AAE0CFD840E62ED509F219EEE80DBD34F1AB4601", lpFilePart=0x0) returned 0x85 [0172.073] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0172.073] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AAE0CFD840E62ED509F219EEE80DBD34F1AB4601" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\aae0cfd840e62ed509f219eee80dbd34f1ab4601"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0172.177] GetFileType (hFile=0x444) returned 0x1 [0172.177] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0172.177] GetFileType (hFile=0x444) returned 0x1 [0172.177] WriteFile (in: hFile=0x444, lpBuffer=0x21b7448*, nNumberOfBytesToWrite=0xb00, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x21b7448*, lpNumberOfBytesWritten=0x3be4d8*=0xb00, lpOverlapped=0x0) returned 1 [0172.177] CloseHandle (hObject=0x444) returned 1 [0172.178] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AAE0CFD840E62ED509F219EEE80DBD34F1AB4601", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AAE0CFD840E62ED509F219EEE80DBD34F1AB4601", lpFilePart=0x0) returned 0x85 [0172.178] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AAE0CFD840E62ED509F219EEE80DBD34F1AB4601.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AAE0CFD840E62ED509F219EEE80DBD34F1AB4601.xuy", lpFilePart=0x0) returned 0x89 [0172.178] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0172.178] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AAE0CFD840E62ED509F219EEE80DBD34F1AB4601" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\aae0cfd840e62ed509f219eee80dbd34f1ab4601"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84fc368c, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x84fc368c, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x527928c4, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xb00)) returned 1 [0172.178] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0172.178] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AAE0CFD840E62ED509F219EEE80DBD34F1AB4601" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\aae0cfd840e62ed509f219eee80dbd34f1ab4601"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AAE0CFD840E62ED509F219EEE80DBD34F1AB4601.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\aae0cfd840e62ed509f219eee80dbd34f1ab4601.xuy")) returned 1 [0172.179] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AB3F4DFAC8E881949B1487B51777CD625E9D7C75", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AB3F4DFAC8E881949B1487B51777CD625E9D7C75", lpFilePart=0x0) returned 0x85 [0172.180] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0172.180] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AB3F4DFAC8E881949B1487B51777CD625E9D7C75" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ab3f4dfac8e881949b1487b51777cd625e9d7c75"), fInfoLevelId=0x0, lpFileInformation=0x21b8808 | out: lpFileInformation=0x21b8808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x544f75b8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x544f75b8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x544f75b8, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x11a5)) returned 1 [0172.180] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0172.180] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AB3F4DFAC8E881949B1487B51777CD625E9D7C75", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AB3F4DFAC8E881949B1487B51777CD625E9D7C75", lpFilePart=0x0) returned 0x85 [0172.180] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0172.180] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AB3F4DFAC8E881949B1487B51777CD625E9D7C75" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ab3f4dfac8e881949b1487b51777cd625e9d7c75"), fInfoLevelId=0x0, lpFileInformation=0x21b8a08 | out: lpFileInformation=0x21b8a08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x544f75b8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x544f75b8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x544f75b8, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x11a5)) returned 1 [0172.180] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0172.180] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AB3F4DFAC8E881949B1487B51777CD625E9D7C75", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AB3F4DFAC8E881949B1487B51777CD625E9D7C75", lpFilePart=0x0) returned 0x85 [0172.180] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0172.180] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AB3F4DFAC8E881949B1487B51777CD625E9D7C75" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ab3f4dfac8e881949b1487b51777cd625e9d7c75"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0172.181] GetFileType (hFile=0x444) returned 0x1 [0172.181] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0172.181] GetFileType (hFile=0x444) returned 0x1 [0172.181] ReadFile (in: hFile=0x444, lpBuffer=0x21baf38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x21baf38*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0172.193] CloseHandle (hObject=0x444) returned 1 [0172.193] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AB3F4DFAC8E881949B1487B51777CD625E9D7C75", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AB3F4DFAC8E881949B1487B51777CD625E9D7C75", lpFilePart=0x0) returned 0x85 [0172.193] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0172.193] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AB3F4DFAC8E881949B1487B51777CD625E9D7C75" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ab3f4dfac8e881949b1487b51777cd625e9d7c75"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0172.193] GetFileType (hFile=0x444) returned 0x1 [0172.193] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0172.193] GetFileType (hFile=0x444) returned 0x1 [0172.193] WriteFile (in: hFile=0x444, lpBuffer=0x21b8be8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x21b8be8*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0172.194] CloseHandle (hObject=0x444) returned 1 [0172.194] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AB3F4DFAC8E881949B1487B51777CD625E9D7C75", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AB3F4DFAC8E881949B1487B51777CD625E9D7C75", lpFilePart=0x0) returned 0x85 [0172.194] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AB3F4DFAC8E881949B1487B51777CD625E9D7C75.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AB3F4DFAC8E881949B1487B51777CD625E9D7C75.xuy", lpFilePart=0x0) returned 0x89 [0172.194] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0172.194] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AB3F4DFAC8E881949B1487B51777CD625E9D7C75" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ab3f4dfac8e881949b1487b51777cd625e9d7c75"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x544f75b8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x544f75b8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x527b8aea, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0172.194] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0172.194] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AB3F4DFAC8E881949B1487B51777CD625E9D7C75" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ab3f4dfac8e881949b1487b51777cd625e9d7c75"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AB3F4DFAC8E881949B1487B51777CD625E9D7C75.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ab3f4dfac8e881949b1487b51777cd625e9d7c75.xuy")) returned 1 [0172.195] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AB4611569FEF4B72635AD5B6E8BAFC273815E7BB", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AB4611569FEF4B72635AD5B6E8BAFC273815E7BB", lpFilePart=0x0) returned 0x85 [0172.195] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0172.195] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AB4611569FEF4B72635AD5B6E8BAFC273815E7BB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ab4611569fef4b72635ad5b6e8bafc273815e7bb"), fInfoLevelId=0x0, lpFileInformation=0x22374e0 | out: lpFileInformation=0x22374e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6159e1e8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x6159e1e8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x6159e1e8, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xedc)) returned 1 [0172.195] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0172.195] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AB4611569FEF4B72635AD5B6E8BAFC273815E7BB", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AB4611569FEF4B72635AD5B6E8BAFC273815E7BB", lpFilePart=0x0) returned 0x85 [0172.196] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0172.196] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AB4611569FEF4B72635AD5B6E8BAFC273815E7BB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ab4611569fef4b72635ad5b6e8bafc273815e7bb"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0172.196] GetFileType (hFile=0x444) returned 0x1 [0172.196] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0172.196] GetFileType (hFile=0x444) returned 0x1 [0172.196] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xedc [0172.196] ReadFile (in: hFile=0x444, lpBuffer=0x22387d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x22387d8*, lpNumberOfBytesRead=0x3be5c8*=0xedc, lpOverlapped=0x0) returned 1 [0172.226] CloseHandle (hObject=0x444) returned 1 [0172.237] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AB4611569FEF4B72635AD5B6E8BAFC273815E7BB", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AB4611569FEF4B72635AD5B6E8BAFC273815E7BB", lpFilePart=0x0) returned 0x85 [0172.237] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0172.237] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AB4611569FEF4B72635AD5B6E8BAFC273815E7BB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ab4611569fef4b72635ad5b6e8bafc273815e7bb"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0172.239] GetFileType (hFile=0x444) returned 0x1 [0172.239] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0172.239] GetFileType (hFile=0x444) returned 0x1 [0172.239] WriteFile (in: hFile=0x444, lpBuffer=0x22b42c8*, nNumberOfBytesToWrite=0xee0, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x22b42c8*, lpNumberOfBytesWritten=0x3be4d8*=0xee0, lpOverlapped=0x0) returned 1 [0172.239] CloseHandle (hObject=0x444) returned 1 [0172.240] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AB4611569FEF4B72635AD5B6E8BAFC273815E7BB", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AB4611569FEF4B72635AD5B6E8BAFC273815E7BB", lpFilePart=0x0) returned 0x85 [0172.240] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AB4611569FEF4B72635AD5B6E8BAFC273815E7BB.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AB4611569FEF4B72635AD5B6E8BAFC273815E7BB.xuy", lpFilePart=0x0) returned 0x89 [0172.240] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0172.240] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AB4611569FEF4B72635AD5B6E8BAFC273815E7BB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ab4611569fef4b72635ad5b6e8bafc273815e7bb"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6159e1e8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x6159e1e8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x5282b5de, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xee0)) returned 1 [0172.240] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0172.240] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AB4611569FEF4B72635AD5B6E8BAFC273815E7BB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ab4611569fef4b72635ad5b6e8bafc273815e7bb"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AB4611569FEF4B72635AD5B6E8BAFC273815E7BB.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ab4611569fef4b72635ad5b6e8bafc273815e7bb.xuy")) returned 1 [0172.241] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AB585870AB0F856402EE28C3BFE9F839A1ED8C40", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AB585870AB0F856402EE28C3BFE9F839A1ED8C40", lpFilePart=0x0) returned 0x85 [0172.241] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0172.241] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AB585870AB0F856402EE28C3BFE9F839A1ED8C40" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ab585870ab0f856402ee28c3bfe9f839a1ed8c40"), fInfoLevelId=0x0, lpFileInformation=0x22b5688 | out: lpFileInformation=0x22b5688*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf67ae9e9, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xf67ae9e9, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0xf67ae9e9, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0xce)) returned 1 [0172.242] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0172.242] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AB585870AB0F856402EE28C3BFE9F839A1ED8C40", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AB585870AB0F856402EE28C3BFE9F839A1ED8C40", lpFilePart=0x0) returned 0x85 [0172.242] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0172.242] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AB585870AB0F856402EE28C3BFE9F839A1ED8C40" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ab585870ab0f856402ee28c3bfe9f839a1ed8c40"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0172.243] GetFileType (hFile=0x444) returned 0x1 [0172.243] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0172.243] GetFileType (hFile=0x444) returned 0x1 [0172.243] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xce [0172.243] ReadFile (in: hFile=0x444, lpBuffer=0x22b5b70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x22b5b70*, lpNumberOfBytesRead=0x3be5c8*=0xce, lpOverlapped=0x0) returned 1 [0172.245] CloseHandle (hObject=0x444) returned 1 [0172.255] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AB585870AB0F856402EE28C3BFE9F839A1ED8C40", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AB585870AB0F856402EE28C3BFE9F839A1ED8C40", lpFilePart=0x0) returned 0x85 [0172.255] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0172.255] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AB585870AB0F856402EE28C3BFE9F839A1ED8C40" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ab585870ab0f856402ee28c3bfe9f839a1ed8c40"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0172.257] GetFileType (hFile=0x444) returned 0x1 [0172.257] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0172.257] GetFileType (hFile=0x444) returned 0x1 [0172.257] WriteFile (in: hFile=0x444, lpBuffer=0x232ceb8*, nNumberOfBytesToWrite=0xd0, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x232ceb8*, lpNumberOfBytesWritten=0x3be4d8*=0xd0, lpOverlapped=0x0) returned 1 [0172.258] CloseHandle (hObject=0x444) returned 1 [0172.258] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AB585870AB0F856402EE28C3BFE9F839A1ED8C40", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AB585870AB0F856402EE28C3BFE9F839A1ED8C40", lpFilePart=0x0) returned 0x85 [0172.258] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AB585870AB0F856402EE28C3BFE9F839A1ED8C40.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AB585870AB0F856402EE28C3BFE9F839A1ED8C40.xuy", lpFilePart=0x0) returned 0x89 [0172.258] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0172.258] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AB585870AB0F856402EE28C3BFE9F839A1ED8C40" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ab585870ab0f856402ee28c3bfe9f839a1ed8c40"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf67ae9e9, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xf67ae9e9, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x52851463, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xd0)) returned 1 [0172.259] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0172.259] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AB585870AB0F856402EE28C3BFE9F839A1ED8C40" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ab585870ab0f856402ee28c3bfe9f839a1ed8c40"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AB585870AB0F856402EE28C3BFE9F839A1ED8C40.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ab585870ab0f856402ee28c3bfe9f839a1ed8c40.xuy")) returned 1 [0172.260] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AB64DA67CFD54D7D76A690466131CF5944F86377", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AB64DA67CFD54D7D76A690466131CF5944F86377", lpFilePart=0x0) returned 0x85 [0172.260] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0172.260] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AB64DA67CFD54D7D76A690466131CF5944F86377" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ab64da67cfd54d7d76a690466131cf5944f86377"), fInfoLevelId=0x0, lpFileInformation=0x232e278 | out: lpFileInformation=0x232e278*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc264d4b3, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc264d4b3, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x3c463540, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0x1329)) returned 1 [0172.270] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0172.270] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AB64DA67CFD54D7D76A690466131CF5944F86377", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AB64DA67CFD54D7D76A690466131CF5944F86377", lpFilePart=0x0) returned 0x85 [0172.270] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0172.270] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AB64DA67CFD54D7D76A690466131CF5944F86377" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ab64da67cfd54d7d76a690466131cf5944f86377"), fInfoLevelId=0x0, lpFileInformation=0x232e478 | out: lpFileInformation=0x232e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc264d4b3, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc264d4b3, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x3c463540, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0x1329)) returned 1 [0172.270] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0172.270] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AB64DA67CFD54D7D76A690466131CF5944F86377", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AB64DA67CFD54D7D76A690466131CF5944F86377", lpFilePart=0x0) returned 0x85 [0172.270] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0172.270] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AB64DA67CFD54D7D76A690466131CF5944F86377" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ab64da67cfd54d7d76a690466131cf5944f86377"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0172.271] GetFileType (hFile=0x444) returned 0x1 [0172.272] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0172.272] GetFileType (hFile=0x444) returned 0x1 [0172.272] ReadFile (in: hFile=0x444, lpBuffer=0x23309a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x23309a8*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0172.342] CloseHandle (hObject=0x444) returned 1 [0172.342] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AB64DA67CFD54D7D76A690466131CF5944F86377", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AB64DA67CFD54D7D76A690466131CF5944F86377", lpFilePart=0x0) returned 0x85 [0172.342] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0172.342] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AB64DA67CFD54D7D76A690466131CF5944F86377" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ab64da67cfd54d7d76a690466131cf5944f86377"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0172.342] GetFileType (hFile=0x444) returned 0x1 [0172.342] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0172.342] GetFileType (hFile=0x444) returned 0x1 [0172.342] WriteFile (in: hFile=0x444, lpBuffer=0x218c038*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x218c038*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0172.342] CloseHandle (hObject=0x444) returned 1 [0172.343] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AB64DA67CFD54D7D76A690466131CF5944F86377", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AB64DA67CFD54D7D76A690466131CF5944F86377", lpFilePart=0x0) returned 0x85 [0172.343] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AB64DA67CFD54D7D76A690466131CF5944F86377.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AB64DA67CFD54D7D76A690466131CF5944F86377.xuy", lpFilePart=0x0) returned 0x89 [0172.343] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0172.343] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AB64DA67CFD54D7D76A690466131CF5944F86377" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ab64da67cfd54d7d76a690466131cf5944f86377"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc264d4b3, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc264d4b3, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x529363ba, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0172.343] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0172.343] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AB64DA67CFD54D7D76A690466131CF5944F86377" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ab64da67cfd54d7d76a690466131cf5944f86377"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AB64DA67CFD54D7D76A690466131CF5944F86377.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ab64da67cfd54d7d76a690466131cf5944f86377.xuy")) returned 1 [0172.344] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\ABA24AAB8A9EA0E34C3E86EFD7EE2992CE614003", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\ABA24AAB8A9EA0E34C3E86EFD7EE2992CE614003", lpFilePart=0x0) returned 0x85 [0172.344] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0172.344] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\ABA24AAB8A9EA0E34C3E86EFD7EE2992CE614003" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\aba24aab8a9ea0e34c3e86efd7ee2992ce614003"), fInfoLevelId=0x0, lpFileInformation=0x21af618 | out: lpFileInformation=0x21af618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc534dc24, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc534dc24, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xc80f8eb2, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x1da1)) returned 1 [0172.344] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0172.344] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\ABA24AAB8A9EA0E34C3E86EFD7EE2992CE614003", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\ABA24AAB8A9EA0E34C3E86EFD7EE2992CE614003", lpFilePart=0x0) returned 0x85 [0172.344] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0172.344] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\ABA24AAB8A9EA0E34C3E86EFD7EE2992CE614003" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\aba24aab8a9ea0e34c3e86efd7ee2992ce614003"), fInfoLevelId=0x0, lpFileInformation=0x21af818 | out: lpFileInformation=0x21af818*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc534dc24, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc534dc24, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xc80f8eb2, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x1da1)) returned 1 [0172.345] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0172.345] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\ABA24AAB8A9EA0E34C3E86EFD7EE2992CE614003", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\ABA24AAB8A9EA0E34C3E86EFD7EE2992CE614003", lpFilePart=0x0) returned 0x85 [0172.345] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0172.345] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\ABA24AAB8A9EA0E34C3E86EFD7EE2992CE614003" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\aba24aab8a9ea0e34c3e86efd7ee2992ce614003"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0172.346] GetFileType (hFile=0x444) returned 0x1 [0172.346] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0172.346] GetFileType (hFile=0x444) returned 0x1 [0172.346] ReadFile (in: hFile=0x444, lpBuffer=0x21b1d48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x21b1d48*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0172.361] CloseHandle (hObject=0x444) returned 1 [0172.361] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\ABA24AAB8A9EA0E34C3E86EFD7EE2992CE614003", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\ABA24AAB8A9EA0E34C3E86EFD7EE2992CE614003", lpFilePart=0x0) returned 0x85 [0172.361] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0172.361] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\ABA24AAB8A9EA0E34C3E86EFD7EE2992CE614003" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\aba24aab8a9ea0e34c3e86efd7ee2992ce614003"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0172.361] GetFileType (hFile=0x444) returned 0x1 [0172.361] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0172.361] GetFileType (hFile=0x444) returned 0x1 [0172.361] WriteFile (in: hFile=0x444, lpBuffer=0x21af9f8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x21af9f8*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0172.361] CloseHandle (hObject=0x444) returned 1 [0172.362] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\ABA24AAB8A9EA0E34C3E86EFD7EE2992CE614003", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\ABA24AAB8A9EA0E34C3E86EFD7EE2992CE614003", lpFilePart=0x0) returned 0x85 [0172.362] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\ABA24AAB8A9EA0E34C3E86EFD7EE2992CE614003.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\ABA24AAB8A9EA0E34C3E86EFD7EE2992CE614003.xuy", lpFilePart=0x0) returned 0x89 [0172.362] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0172.362] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\ABA24AAB8A9EA0E34C3E86EFD7EE2992CE614003" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\aba24aab8a9ea0e34c3e86efd7ee2992ce614003"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc534dc24, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc534dc24, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x5295c61a, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0172.362] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0172.362] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\ABA24AAB8A9EA0E34C3E86EFD7EE2992CE614003" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\aba24aab8a9ea0e34c3e86efd7ee2992ce614003"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\ABA24AAB8A9EA0E34C3E86EFD7EE2992CE614003.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\aba24aab8a9ea0e34c3e86efd7ee2992ce614003.xuy")) returned 1 [0172.363] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\ABAB5B796C3E9FF61E59D58436C93C71C17F8F3C", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\ABAB5B796C3E9FF61E59D58436C93C71C17F8F3C", lpFilePart=0x0) returned 0x85 [0172.363] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0172.363] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\ABAB5B796C3E9FF61E59D58436C93C71C17F8F3C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\abab5b796c3e9ff61e59d58436c93c71c17f8f3c"), fInfoLevelId=0x0, lpFileInformation=0x222e2f0 | out: lpFileInformation=0x222e2f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x864a8dd3, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x864a8dd3, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x864a8dd3, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x10f2)) returned 1 [0172.364] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0172.364] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\ABAB5B796C3E9FF61E59D58436C93C71C17F8F3C", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\ABAB5B796C3E9FF61E59D58436C93C71C17F8F3C", lpFilePart=0x0) returned 0x85 [0172.364] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0172.364] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\ABAB5B796C3E9FF61E59D58436C93C71C17F8F3C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\abab5b796c3e9ff61e59d58436c93c71c17f8f3c"), fInfoLevelId=0x0, lpFileInformation=0x222e4f0 | out: lpFileInformation=0x222e4f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x864a8dd3, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x864a8dd3, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x864a8dd3, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x10f2)) returned 1 [0172.364] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0172.364] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\ABAB5B796C3E9FF61E59D58436C93C71C17F8F3C", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\ABAB5B796C3E9FF61E59D58436C93C71C17F8F3C", lpFilePart=0x0) returned 0x85 [0172.364] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0172.364] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\ABAB5B796C3E9FF61E59D58436C93C71C17F8F3C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\abab5b796c3e9ff61e59d58436c93c71c17f8f3c"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0172.365] GetFileType (hFile=0x444) returned 0x1 [0172.365] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0172.365] GetFileType (hFile=0x444) returned 0x1 [0172.365] ReadFile (in: hFile=0x444, lpBuffer=0x2230a20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x2230a20*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0172.387] CloseHandle (hObject=0x444) returned 1 [0172.387] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\ABAB5B796C3E9FF61E59D58436C93C71C17F8F3C", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\ABAB5B796C3E9FF61E59D58436C93C71C17F8F3C", lpFilePart=0x0) returned 0x85 [0172.387] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0172.388] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\ABAB5B796C3E9FF61E59D58436C93C71C17F8F3C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\abab5b796c3e9ff61e59d58436c93c71c17f8f3c"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0172.388] GetFileType (hFile=0x444) returned 0x1 [0172.397] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0172.399] GetFileType (hFile=0x444) returned 0x1 [0172.399] WriteFile (in: hFile=0x444, lpBuffer=0x222e6d0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x222e6d0*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0172.399] CloseHandle (hObject=0x444) returned 1 [0172.399] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\ABAB5B796C3E9FF61E59D58436C93C71C17F8F3C", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\ABAB5B796C3E9FF61E59D58436C93C71C17F8F3C", lpFilePart=0x0) returned 0x85 [0172.399] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\ABAB5B796C3E9FF61E59D58436C93C71C17F8F3C.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\ABAB5B796C3E9FF61E59D58436C93C71C17F8F3C.xuy", lpFilePart=0x0) returned 0x89 [0172.399] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0172.399] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\ABAB5B796C3E9FF61E59D58436C93C71C17F8F3C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\abab5b796c3e9ff61e59d58436c93c71c17f8f3c"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x864a8dd3, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x864a8dd3, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x529a89ce, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0172.399] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0172.399] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\ABAB5B796C3E9FF61E59D58436C93C71C17F8F3C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\abab5b796c3e9ff61e59d58436c93c71c17f8f3c"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\ABAB5B796C3E9FF61E59D58436C93C71C17F8F3C.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\abab5b796c3e9ff61e59d58436c93c71c17f8f3c.xuy")) returned 1 [0172.401] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\ABE48ADD965359712AA7699F9BA83E690EE9B03E", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\ABE48ADD965359712AA7699F9BA83E690EE9B03E", lpFilePart=0x0) returned 0x85 [0172.401] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0172.401] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\ABE48ADD965359712AA7699F9BA83E690EE9B03E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\abe48add965359712aa7699f9ba83e690ee9b03e"), fInfoLevelId=0x0, lpFileInformation=0x22acfc8 | out: lpFileInformation=0x22acfc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f78ac7e, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3f78ac7e, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x3f7e03b3, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x575)) returned 1 [0172.401] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0172.401] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\ABE48ADD965359712AA7699F9BA83E690EE9B03E", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\ABE48ADD965359712AA7699F9BA83E690EE9B03E", lpFilePart=0x0) returned 0x85 [0172.401] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0172.401] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\ABE48ADD965359712AA7699F9BA83E690EE9B03E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\abe48add965359712aa7699f9ba83e690ee9b03e"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0172.401] GetFileType (hFile=0x444) returned 0x1 [0172.401] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0172.401] GetFileType (hFile=0x444) returned 0x1 [0172.401] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x575 [0172.401] ReadFile (in: hFile=0x444, lpBuffer=0x22ad958, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x22ad958*, lpNumberOfBytesRead=0x3be5c8*=0x575, lpOverlapped=0x0) returned 1 [0172.403] CloseHandle (hObject=0x444) returned 1 [0172.413] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\ABE48ADD965359712AA7699F9BA83E690EE9B03E", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\ABE48ADD965359712AA7699F9BA83E690EE9B03E", lpFilePart=0x0) returned 0x85 [0172.413] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0172.413] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\ABE48ADD965359712AA7699F9BA83E690EE9B03E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\abe48add965359712aa7699f9ba83e690ee9b03e"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0172.415] GetFileType (hFile=0x444) returned 0x1 [0172.415] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0172.415] GetFileType (hFile=0x444) returned 0x1 [0172.415] WriteFile (in: hFile=0x444, lpBuffer=0x2326570*, nNumberOfBytesToWrite=0x580, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x2326570*, lpNumberOfBytesWritten=0x3be4d8*=0x580, lpOverlapped=0x0) returned 1 [0172.416] CloseHandle (hObject=0x444) returned 1 [0172.416] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\ABE48ADD965359712AA7699F9BA83E690EE9B03E", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\ABE48ADD965359712AA7699F9BA83E690EE9B03E", lpFilePart=0x0) returned 0x85 [0172.416] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\ABE48ADD965359712AA7699F9BA83E690EE9B03E.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\ABE48ADD965359712AA7699F9BA83E690EE9B03E.xuy", lpFilePart=0x0) returned 0x89 [0172.416] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0172.416] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\ABE48ADD965359712AA7699F9BA83E690EE9B03E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\abe48add965359712aa7699f9ba83e690ee9b03e"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f78ac7e, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3f78ac7e, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x529cebde, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x580)) returned 1 [0172.416] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0172.416] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\ABE48ADD965359712AA7699F9BA83E690EE9B03E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\abe48add965359712aa7699f9ba83e690ee9b03e"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\ABE48ADD965359712AA7699F9BA83E690EE9B03E.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\abe48add965359712aa7699f9ba83e690ee9b03e.xuy")) returned 1 [0172.418] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AC3F27214CE49EDB200BD2C19E310751DF9BAB3B", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AC3F27214CE49EDB200BD2C19E310751DF9BAB3B", lpFilePart=0x0) returned 0x85 [0172.418] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0172.418] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AC3F27214CE49EDB200BD2C19E310751DF9BAB3B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ac3f27214ce49edb200bd2c19e310751df9bab3b"), fInfoLevelId=0x0, lpFileInformation=0x2327930 | out: lpFileInformation=0x2327930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2f37228, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xd2f37228, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0xd2f37228, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x5ab1)) returned 1 [0172.419] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0172.419] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AC3F27214CE49EDB200BD2C19E310751DF9BAB3B", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AC3F27214CE49EDB200BD2C19E310751DF9BAB3B", lpFilePart=0x0) returned 0x85 [0172.419] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0172.419] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AC3F27214CE49EDB200BD2C19E310751DF9BAB3B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ac3f27214ce49edb200bd2c19e310751df9bab3b"), fInfoLevelId=0x0, lpFileInformation=0x2327b30 | out: lpFileInformation=0x2327b30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2f37228, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xd2f37228, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0xd2f37228, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x5ab1)) returned 1 [0172.419] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0172.419] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AC3F27214CE49EDB200BD2C19E310751DF9BAB3B", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AC3F27214CE49EDB200BD2C19E310751DF9BAB3B", lpFilePart=0x0) returned 0x85 [0172.419] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0172.419] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AC3F27214CE49EDB200BD2C19E310751DF9BAB3B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ac3f27214ce49edb200bd2c19e310751df9bab3b"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0172.868] GetFileType (hFile=0x444) returned 0x1 [0172.868] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0172.868] GetFileType (hFile=0x444) returned 0x1 [0172.868] ReadFile (in: hFile=0x444, lpBuffer=0x232a060, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x232a060*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0172.926] CloseHandle (hObject=0x444) returned 1 [0172.926] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AC3F27214CE49EDB200BD2C19E310751DF9BAB3B", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AC3F27214CE49EDB200BD2C19E310751DF9BAB3B", lpFilePart=0x0) returned 0x85 [0172.926] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0172.926] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AC3F27214CE49EDB200BD2C19E310751DF9BAB3B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ac3f27214ce49edb200bd2c19e310751df9bab3b"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0172.927] GetFileType (hFile=0x444) returned 0x1 [0172.927] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0172.927] GetFileType (hFile=0x444) returned 0x1 [0172.927] WriteFile (in: hFile=0x444, lpBuffer=0x21662e0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x21662e0*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0172.927] CloseHandle (hObject=0x444) returned 1 [0172.927] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AC3F27214CE49EDB200BD2C19E310751DF9BAB3B", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AC3F27214CE49EDB200BD2C19E310751DF9BAB3B", lpFilePart=0x0) returned 0x85 [0172.927] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AC3F27214CE49EDB200BD2C19E310751DF9BAB3B.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AC3F27214CE49EDB200BD2C19E310751DF9BAB3B.xuy", lpFilePart=0x0) returned 0x89 [0172.927] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0172.927] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AC3F27214CE49EDB200BD2C19E310751DF9BAB3B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ac3f27214ce49edb200bd2c19e310751df9bab3b"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2f37228, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xd2f37228, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x52eb99b6, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x5ab1)) returned 1 [0172.927] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0172.927] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AC3F27214CE49EDB200BD2C19E310751DF9BAB3B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ac3f27214ce49edb200bd2c19e310751df9bab3b"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AC3F27214CE49EDB200BD2C19E310751DF9BAB3B.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ac3f27214ce49edb200bd2c19e310751df9bab3b.xuy")) returned 1 [0172.929] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AD7A5673189C3D8259E7B3FE0033E19E1674CC68", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AD7A5673189C3D8259E7B3FE0033E19E1674CC68", lpFilePart=0x0) returned 0x85 [0172.929] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0172.929] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AD7A5673189C3D8259E7B3FE0033E19E1674CC68" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ad7a5673189c3d8259e7b3fe0033e19e1674cc68"), fInfoLevelId=0x0, lpFileInformation=0x2180880 | out: lpFileInformation=0x2180880*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ee98980, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3ee98980, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xc5bf79f5, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x3bac)) returned 1 [0172.930] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0172.930] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AD7A5673189C3D8259E7B3FE0033E19E1674CC68", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AD7A5673189C3D8259E7B3FE0033E19E1674CC68", lpFilePart=0x0) returned 0x85 [0172.930] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0172.930] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AD7A5673189C3D8259E7B3FE0033E19E1674CC68" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ad7a5673189c3d8259e7b3fe0033e19e1674cc68"), fInfoLevelId=0x0, lpFileInformation=0x2180a80 | out: lpFileInformation=0x2180a80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ee98980, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3ee98980, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xc5bf79f5, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x3bac)) returned 1 [0172.930] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0172.930] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AD7A5673189C3D8259E7B3FE0033E19E1674CC68", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AD7A5673189C3D8259E7B3FE0033E19E1674CC68", lpFilePart=0x0) returned 0x85 [0172.930] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0172.930] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AD7A5673189C3D8259E7B3FE0033E19E1674CC68" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ad7a5673189c3d8259e7b3fe0033e19e1674cc68"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0172.931] GetFileType (hFile=0x444) returned 0x1 [0172.931] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0172.931] GetFileType (hFile=0x444) returned 0x1 [0172.931] ReadFile (in: hFile=0x444, lpBuffer=0x2182fb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x2182fb0*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0172.950] CloseHandle (hObject=0x444) returned 1 [0172.950] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AD7A5673189C3D8259E7B3FE0033E19E1674CC68", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AD7A5673189C3D8259E7B3FE0033E19E1674CC68", lpFilePart=0x0) returned 0x85 [0172.950] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0172.950] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AD7A5673189C3D8259E7B3FE0033E19E1674CC68" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ad7a5673189c3d8259e7b3fe0033e19e1674cc68"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0172.950] GetFileType (hFile=0x444) returned 0x1 [0172.950] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0172.951] GetFileType (hFile=0x444) returned 0x1 [0172.951] WriteFile (in: hFile=0x444, lpBuffer=0x2180c60*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x2180c60*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0172.951] CloseHandle (hObject=0x444) returned 1 [0172.951] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AD7A5673189C3D8259E7B3FE0033E19E1674CC68", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AD7A5673189C3D8259E7B3FE0033E19E1674CC68", lpFilePart=0x0) returned 0x85 [0172.951] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AD7A5673189C3D8259E7B3FE0033E19E1674CC68.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AD7A5673189C3D8259E7B3FE0033E19E1674CC68.xuy", lpFilePart=0x0) returned 0x89 [0172.951] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0172.952] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AD7A5673189C3D8259E7B3FE0033E19E1674CC68" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ad7a5673189c3d8259e7b3fe0033e19e1674cc68"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ee98980, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3ee98980, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x52f05eb0, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x3bac)) returned 1 [0172.952] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0172.952] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AD7A5673189C3D8259E7B3FE0033E19E1674CC68" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ad7a5673189c3d8259e7b3fe0033e19e1674cc68"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AD7A5673189C3D8259E7B3FE0033E19E1674CC68.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ad7a5673189c3d8259e7b3fe0033e19e1674cc68.xuy")) returned 1 [0172.953] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\ADD6B501C09066D4E06EE26CBA87DEC5F0E83F7C", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\ADD6B501C09066D4E06EE26CBA87DEC5F0E83F7C", lpFilePart=0x0) returned 0x85 [0172.953] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0172.953] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\ADD6B501C09066D4E06EE26CBA87DEC5F0E83F7C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\add6b501c09066d4e06ee26cba87dec5f0e83f7c"), fInfoLevelId=0x0, lpFileInformation=0x21ff558 | out: lpFileInformation=0x21ff558*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf491d69c, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xf491d69c, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0xf4924bc7, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x1447)) returned 1 [0172.954] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0172.954] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\ADD6B501C09066D4E06EE26CBA87DEC5F0E83F7C", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\ADD6B501C09066D4E06EE26CBA87DEC5F0E83F7C", lpFilePart=0x0) returned 0x85 [0172.954] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0172.954] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\ADD6B501C09066D4E06EE26CBA87DEC5F0E83F7C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\add6b501c09066d4e06ee26cba87dec5f0e83f7c"), fInfoLevelId=0x0, lpFileInformation=0x21ff758 | out: lpFileInformation=0x21ff758*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf491d69c, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xf491d69c, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0xf4924bc7, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x1447)) returned 1 [0172.954] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0172.954] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\ADD6B501C09066D4E06EE26CBA87DEC5F0E83F7C", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\ADD6B501C09066D4E06EE26CBA87DEC5F0E83F7C", lpFilePart=0x0) returned 0x85 [0172.954] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0172.954] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\ADD6B501C09066D4E06EE26CBA87DEC5F0E83F7C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\add6b501c09066d4e06ee26cba87dec5f0e83f7c"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0172.955] GetFileType (hFile=0x444) returned 0x1 [0172.955] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0172.955] GetFileType (hFile=0x444) returned 0x1 [0172.955] ReadFile (in: hFile=0x444, lpBuffer=0x2201c88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x2201c88*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0172.969] CloseHandle (hObject=0x444) returned 1 [0172.969] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\ADD6B501C09066D4E06EE26CBA87DEC5F0E83F7C", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\ADD6B501C09066D4E06EE26CBA87DEC5F0E83F7C", lpFilePart=0x0) returned 0x85 [0172.970] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0172.970] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\ADD6B501C09066D4E06EE26CBA87DEC5F0E83F7C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\add6b501c09066d4e06ee26cba87dec5f0e83f7c"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0172.970] GetFileType (hFile=0x444) returned 0x1 [0172.970] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0172.970] GetFileType (hFile=0x444) returned 0x1 [0172.970] WriteFile (in: hFile=0x444, lpBuffer=0x21ff938*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x21ff938*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0172.970] CloseHandle (hObject=0x444) returned 1 [0172.970] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\ADD6B501C09066D4E06EE26CBA87DEC5F0E83F7C", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\ADD6B501C09066D4E06EE26CBA87DEC5F0E83F7C", lpFilePart=0x0) returned 0x85 [0172.970] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\ADD6B501C09066D4E06EE26CBA87DEC5F0E83F7C.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\ADD6B501C09066D4E06EE26CBA87DEC5F0E83F7C.xuy", lpFilePart=0x0) returned 0x89 [0172.970] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0172.970] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\ADD6B501C09066D4E06EE26CBA87DEC5F0E83F7C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\add6b501c09066d4e06ee26cba87dec5f0e83f7c"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf491d69c, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xf491d69c, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x52f2c3ef, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0172.970] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0172.971] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\ADD6B501C09066D4E06EE26CBA87DEC5F0E83F7C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\add6b501c09066d4e06ee26cba87dec5f0e83f7c"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\ADD6B501C09066D4E06EE26CBA87DEC5F0E83F7C.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\add6b501c09066d4e06ee26cba87dec5f0e83f7c.xuy")) returned 1 [0172.972] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AEB83A675769B7671CBB139390343154897F64CA", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AEB83A675769B7671CBB139390343154897F64CA", lpFilePart=0x0) returned 0x85 [0172.972] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0172.972] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AEB83A675769B7671CBB139390343154897F64CA" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\aeb83a675769b7671cbb139390343154897f64ca"), fInfoLevelId=0x0, lpFileInformation=0x227e230 | out: lpFileInformation=0x227e230*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6159e1e8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x6159e1e8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x6159e1e8, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xf12)) returned 1 [0172.972] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0172.972] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AEB83A675769B7671CBB139390343154897F64CA", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AEB83A675769B7671CBB139390343154897F64CA", lpFilePart=0x0) returned 0x85 [0172.972] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0172.972] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AEB83A675769B7671CBB139390343154897F64CA" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\aeb83a675769b7671cbb139390343154897f64ca"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0172.972] GetFileType (hFile=0x444) returned 0x1 [0172.972] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0172.972] GetFileType (hFile=0x444) returned 0x1 [0172.972] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xf12 [0172.972] ReadFile (in: hFile=0x444, lpBuffer=0x227f560, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x227f560*, lpNumberOfBytesRead=0x3be5c8*=0xf12, lpOverlapped=0x0) returned 1 [0173.012] CloseHandle (hObject=0x444) returned 1 [0173.024] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AEB83A675769B7671CBB139390343154897F64CA", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AEB83A675769B7671CBB139390343154897F64CA", lpFilePart=0x0) returned 0x85 [0173.024] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0173.024] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AEB83A675769B7671CBB139390343154897F64CA" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\aeb83a675769b7671cbb139390343154897f64ca"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0173.026] GetFileType (hFile=0x444) returned 0x1 [0173.026] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0173.026] GetFileType (hFile=0x444) returned 0x1 [0173.026] WriteFile (in: hFile=0x444, lpBuffer=0x22fb198*, nNumberOfBytesToWrite=0xf20, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x22fb198*, lpNumberOfBytesWritten=0x3be4d8*=0xf20, lpOverlapped=0x0) returned 1 [0173.026] CloseHandle (hObject=0x444) returned 1 [0173.026] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AEB83A675769B7671CBB139390343154897F64CA", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AEB83A675769B7671CBB139390343154897F64CA", lpFilePart=0x0) returned 0x85 [0173.027] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AEB83A675769B7671CBB139390343154897F64CA.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AEB83A675769B7671CBB139390343154897F64CA.xuy", lpFilePart=0x0) returned 0x89 [0173.027] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0173.027] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AEB83A675769B7671CBB139390343154897F64CA" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\aeb83a675769b7671cbb139390343154897f64ca"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6159e1e8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x6159e1e8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x52f9eabe, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xf20)) returned 1 [0173.027] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0173.027] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AEB83A675769B7671CBB139390343154897F64CA" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\aeb83a675769b7671cbb139390343154897f64ca"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AEB83A675769B7671CBB139390343154897F64CA.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\aeb83a675769b7671cbb139390343154897f64ca.xuy")) returned 1 [0173.028] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AED594943264796A509740BBC9E3E0F5A2FF7FD8", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AED594943264796A509740BBC9E3E0F5A2FF7FD8", lpFilePart=0x0) returned 0x85 [0173.028] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0173.028] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AED594943264796A509740BBC9E3E0F5A2FF7FD8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\aed594943264796a509740bbc9e3e0f5a2ff7fd8"), fInfoLevelId=0x0, lpFileInformation=0x22fc558 | out: lpFileInformation=0x22fc558*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x615c4498, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x615c4498, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x615c4498, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xe58)) returned 1 [0173.028] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0173.028] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AED594943264796A509740BBC9E3E0F5A2FF7FD8", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AED594943264796A509740BBC9E3E0F5A2FF7FD8", lpFilePart=0x0) returned 0x85 [0173.028] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0173.028] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AED594943264796A509740BBC9E3E0F5A2FF7FD8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\aed594943264796a509740bbc9e3e0f5a2ff7fd8"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0173.028] GetFileType (hFile=0x444) returned 0x1 [0173.028] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0173.029] GetFileType (hFile=0x444) returned 0x1 [0173.029] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xe58 [0173.029] ReadFile (in: hFile=0x444, lpBuffer=0x22fd7c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x22fd7c8*, lpNumberOfBytesRead=0x3be5c8*=0xe58, lpOverlapped=0x0) returned 1 [0173.035] CloseHandle (hObject=0x444) returned 1 [0173.079] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AED594943264796A509740BBC9E3E0F5A2FF7FD8", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AED594943264796A509740BBC9E3E0F5A2FF7FD8", lpFilePart=0x0) returned 0x85 [0173.079] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0173.079] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AED594943264796A509740BBC9E3E0F5A2FF7FD8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\aed594943264796a509740bbc9e3e0f5a2ff7fd8"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0173.081] GetFileType (hFile=0x444) returned 0x1 [0173.081] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0173.081] GetFileType (hFile=0x444) returned 0x1 [0173.081] WriteFile (in: hFile=0x444, lpBuffer=0x2176c90*, nNumberOfBytesToWrite=0xe60, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x2176c90*, lpNumberOfBytesWritten=0x3be4d8*=0xe60, lpOverlapped=0x0) returned 1 [0173.082] CloseHandle (hObject=0x444) returned 1 [0173.082] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AED594943264796A509740BBC9E3E0F5A2FF7FD8", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AED594943264796A509740BBC9E3E0F5A2FF7FD8", lpFilePart=0x0) returned 0x85 [0173.082] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AED594943264796A509740BBC9E3E0F5A2FF7FD8.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AED594943264796A509740BBC9E3E0F5A2FF7FD8.xuy", lpFilePart=0x0) returned 0x89 [0173.082] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0173.082] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AED594943264796A509740BBC9E3E0F5A2FF7FD8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\aed594943264796a509740bbc9e3e0f5a2ff7fd8"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x615c4498, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x615c4498, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x530371b6, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xe60)) returned 1 [0173.082] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0173.082] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AED594943264796A509740BBC9E3E0F5A2FF7FD8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\aed594943264796a509740bbc9e3e0f5a2ff7fd8"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AED594943264796A509740BBC9E3E0F5A2FF7FD8.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\aed594943264796a509740bbc9e3e0f5a2ff7fd8.xuy")) returned 1 [0173.084] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AF989F03E66780F314E74927B87E92B7AFB156E0", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AF989F03E66780F314E74927B87E92B7AFB156E0", lpFilePart=0x0) returned 0x85 [0173.084] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0173.084] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AF989F03E66780F314E74927B87E92B7AFB156E0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\af989f03e66780f314e74927b87e92b7afb156e0"), fInfoLevelId=0x0, lpFileInformation=0x2178050 | out: lpFileInformation=0x2178050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d96615b, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x3d96615b, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x3d96615b, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0xaa9)) returned 1 [0173.113] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0173.113] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AF989F03E66780F314E74927B87E92B7AFB156E0", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AF989F03E66780F314E74927B87E92B7AFB156E0", lpFilePart=0x0) returned 0x85 [0173.113] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0173.113] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AF989F03E66780F314E74927B87E92B7AFB156E0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\af989f03e66780f314e74927b87e92b7afb156e0"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0173.113] GetFileType (hFile=0x444) returned 0x1 [0173.113] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0173.113] GetFileType (hFile=0x444) returned 0x1 [0173.113] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xaa9 [0173.113] ReadFile (in: hFile=0x444, lpBuffer=0x2178f18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x2178f18*, lpNumberOfBytesRead=0x3be5c8*=0xaa9, lpOverlapped=0x0) returned 1 [0173.232] CloseHandle (hObject=0x444) returned 1 [0173.249] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AF989F03E66780F314E74927B87E92B7AFB156E0", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AF989F03E66780F314E74927B87E92B7AFB156E0", lpFilePart=0x0) returned 0x85 [0173.250] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0173.250] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AF989F03E66780F314E74927B87E92B7AFB156E0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\af989f03e66780f314e74927b87e92b7afb156e0"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0173.251] GetFileType (hFile=0x444) returned 0x1 [0173.251] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0173.252] GetFileType (hFile=0x444) returned 0x1 [0173.252] WriteFile (in: hFile=0x444, lpBuffer=0x21f3518*, nNumberOfBytesToWrite=0xab0, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x21f3518*, lpNumberOfBytesWritten=0x3be4d8*=0xab0, lpOverlapped=0x0) returned 1 [0173.252] CloseHandle (hObject=0x444) returned 1 [0173.252] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AF989F03E66780F314E74927B87E92B7AFB156E0", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AF989F03E66780F314E74927B87E92B7AFB156E0", lpFilePart=0x0) returned 0x85 [0173.252] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AF989F03E66780F314E74927B87E92B7AFB156E0.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AF989F03E66780F314E74927B87E92B7AFB156E0.xuy", lpFilePart=0x0) returned 0x89 [0173.252] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0173.253] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AF989F03E66780F314E74927B87E92B7AFB156E0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\af989f03e66780f314e74927b87e92b7afb156e0"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d96615b, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x3d96615b, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x531dac74, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xab0)) returned 1 [0173.253] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0173.253] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AF989F03E66780F314E74927B87E92B7AFB156E0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\af989f03e66780f314e74927b87e92b7afb156e0"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AF989F03E66780F314E74927B87E92B7AFB156E0.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\af989f03e66780f314e74927b87e92b7afb156e0.xuy")) returned 1 [0173.254] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AF9ECD1102CF6928AEF6788488D5C54F77118AE1", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AF9ECD1102CF6928AEF6788488D5C54F77118AE1", lpFilePart=0x0) returned 0x85 [0173.254] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0173.254] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AF9ECD1102CF6928AEF6788488D5C54F77118AE1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\af9ecd1102cf6928aef6788488d5c54f77118ae1"), fInfoLevelId=0x0, lpFileInformation=0x21f48d8 | out: lpFileInformation=0x21f48d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2cfafcf, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xd2cfafcf, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0xd2d210e0, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0xe66)) returned 1 [0173.254] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0173.254] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AF9ECD1102CF6928AEF6788488D5C54F77118AE1", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AF9ECD1102CF6928AEF6788488D5C54F77118AE1", lpFilePart=0x0) returned 0x85 [0173.254] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0173.254] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AF9ECD1102CF6928AEF6788488D5C54F77118AE1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\af9ecd1102cf6928aef6788488d5c54f77118ae1"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0173.254] GetFileType (hFile=0x444) returned 0x1 [0173.255] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0173.255] GetFileType (hFile=0x444) returned 0x1 [0173.255] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xe66 [0173.255] ReadFile (in: hFile=0x444, lpBuffer=0x21f5b58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x21f5b58*, lpNumberOfBytesRead=0x3be5c8*=0xe66, lpOverlapped=0x0) returned 1 [0173.428] CloseHandle (hObject=0x444) returned 1 [0173.439] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AF9ECD1102CF6928AEF6788488D5C54F77118AE1", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AF9ECD1102CF6928AEF6788488D5C54F77118AE1", lpFilePart=0x0) returned 0x85 [0173.439] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0173.439] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AF9ECD1102CF6928AEF6788488D5C54F77118AE1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\af9ecd1102cf6928aef6788488d5c54f77118ae1"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0173.441] GetFileType (hFile=0x444) returned 0x1 [0173.441] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0173.441] GetFileType (hFile=0x444) returned 0x1 [0173.441] WriteFile (in: hFile=0x444, lpBuffer=0x2271420*, nNumberOfBytesToWrite=0xe70, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x2271420*, lpNumberOfBytesWritten=0x3be4d8*=0xe70, lpOverlapped=0x0) returned 1 [0173.442] CloseHandle (hObject=0x444) returned 1 [0173.442] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AF9ECD1102CF6928AEF6788488D5C54F77118AE1", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AF9ECD1102CF6928AEF6788488D5C54F77118AE1", lpFilePart=0x0) returned 0x85 [0173.442] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AF9ECD1102CF6928AEF6788488D5C54F77118AE1.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AF9ECD1102CF6928AEF6788488D5C54F77118AE1.xuy", lpFilePart=0x0) returned 0x89 [0173.442] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0173.442] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AF9ECD1102CF6928AEF6788488D5C54F77118AE1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\af9ecd1102cf6928aef6788488d5c54f77118ae1"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2cfafcf, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xd2cfafcf, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x533a4add, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xe70)) returned 1 [0173.442] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0173.442] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AF9ECD1102CF6928AEF6788488D5C54F77118AE1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\af9ecd1102cf6928aef6788488d5c54f77118ae1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AF9ECD1102CF6928AEF6788488D5C54F77118AE1.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\af9ecd1102cf6928aef6788488d5c54f77118ae1.xuy")) returned 1 [0173.444] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B06646AD5F1441555865045F21A52C8BBF2E7CB3", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B06646AD5F1441555865045F21A52C8BBF2E7CB3", lpFilePart=0x0) returned 0x85 [0173.444] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0173.444] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B06646AD5F1441555865045F21A52C8BBF2E7CB3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b06646ad5f1441555865045f21a52c8bbf2e7cb3"), fInfoLevelId=0x0, lpFileInformation=0x22727e0 | out: lpFileInformation=0x22727e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46ffc170, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x46ffc170, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x46ffc170, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0xc7d)) returned 1 [0173.444] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0173.444] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B06646AD5F1441555865045F21A52C8BBF2E7CB3", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B06646AD5F1441555865045F21A52C8BBF2E7CB3", lpFilePart=0x0) returned 0x85 [0173.444] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0173.444] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B06646AD5F1441555865045F21A52C8BBF2E7CB3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b06646ad5f1441555865045f21a52c8bbf2e7cb3"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0173.444] GetFileType (hFile=0x444) returned 0x1 [0173.444] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0173.444] GetFileType (hFile=0x444) returned 0x1 [0173.444] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xc7d [0173.444] ReadFile (in: hFile=0x444, lpBuffer=0x2273878, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x2273878*, lpNumberOfBytesRead=0x3be5c8*=0xc7d, lpOverlapped=0x0) returned 1 [0173.455] CloseHandle (hObject=0x444) returned 1 [0173.465] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B06646AD5F1441555865045F21A52C8BBF2E7CB3", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B06646AD5F1441555865045F21A52C8BBF2E7CB3", lpFilePart=0x0) returned 0x85 [0173.465] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0173.465] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B06646AD5F1441555865045F21A52C8BBF2E7CB3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b06646ad5f1441555865045f21a52c8bbf2e7cb3"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0173.467] GetFileType (hFile=0x444) returned 0x1 [0173.467] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0173.467] GetFileType (hFile=0x444) returned 0x1 [0173.467] WriteFile (in: hFile=0x444, lpBuffer=0x22ee788*, nNumberOfBytesToWrite=0xc80, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x22ee788*, lpNumberOfBytesWritten=0x3be4d8*=0xc80, lpOverlapped=0x0) returned 1 [0173.468] CloseHandle (hObject=0x444) returned 1 [0173.468] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B06646AD5F1441555865045F21A52C8BBF2E7CB3", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B06646AD5F1441555865045F21A52C8BBF2E7CB3", lpFilePart=0x0) returned 0x85 [0173.468] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B06646AD5F1441555865045F21A52C8BBF2E7CB3.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B06646AD5F1441555865045F21A52C8BBF2E7CB3.xuy", lpFilePart=0x0) returned 0x89 [0173.468] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0173.468] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B06646AD5F1441555865045F21A52C8BBF2E7CB3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b06646ad5f1441555865045f21a52c8bbf2e7cb3"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46ffc170, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x46ffc170, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x533f25f9, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xc80)) returned 1 [0173.468] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0173.468] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B06646AD5F1441555865045F21A52C8BBF2E7CB3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b06646ad5f1441555865045f21a52c8bbf2e7cb3"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B06646AD5F1441555865045F21A52C8BBF2E7CB3.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b06646ad5f1441555865045f21a52c8bbf2e7cb3.xuy")) returned 1 [0173.469] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B0C842777757A860221EEB07669943EDA6E0E6F8", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B0C842777757A860221EEB07669943EDA6E0E6F8", lpFilePart=0x0) returned 0x85 [0173.469] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0173.470] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B0C842777757A860221EEB07669943EDA6E0E6F8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b0c842777757a860221eeb07669943eda6e0e6f8"), fInfoLevelId=0x0, lpFileInformation=0x22efb48 | out: lpFileInformation=0x22efb48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x615c4498, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x615c4498, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x615c4498, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x191c)) returned 1 [0173.470] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0173.470] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B0C842777757A860221EEB07669943EDA6E0E6F8", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B0C842777757A860221EEB07669943EDA6E0E6F8", lpFilePart=0x0) returned 0x85 [0173.470] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0173.470] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B0C842777757A860221EEB07669943EDA6E0E6F8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b0c842777757a860221eeb07669943eda6e0e6f8"), fInfoLevelId=0x0, lpFileInformation=0x22efd48 | out: lpFileInformation=0x22efd48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x615c4498, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x615c4498, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x615c4498, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x191c)) returned 1 [0173.470] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0173.470] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B0C842777757A860221EEB07669943EDA6E0E6F8", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B0C842777757A860221EEB07669943EDA6E0E6F8", lpFilePart=0x0) returned 0x85 [0173.470] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0173.470] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B0C842777757A860221EEB07669943EDA6E0E6F8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b0c842777757a860221eeb07669943eda6e0e6f8"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0173.471] GetFileType (hFile=0x444) returned 0x1 [0173.471] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0173.471] GetFileType (hFile=0x444) returned 0x1 [0173.471] ReadFile (in: hFile=0x444, lpBuffer=0x22f2278, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x22f2278*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0173.946] CloseHandle (hObject=0x444) returned 1 [0173.946] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B0C842777757A860221EEB07669943EDA6E0E6F8", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B0C842777757A860221EEB07669943EDA6E0E6F8", lpFilePart=0x0) returned 0x85 [0173.946] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0173.946] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B0C842777757A860221EEB07669943EDA6E0E6F8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b0c842777757a860221eeb07669943eda6e0e6f8"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0173.947] GetFileType (hFile=0x444) returned 0x1 [0173.947] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0173.947] GetFileType (hFile=0x444) returned 0x1 [0173.947] WriteFile (in: hFile=0x444, lpBuffer=0x2169418*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x2169418*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0173.947] CloseHandle (hObject=0x444) returned 1 [0173.947] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B0C842777757A860221EEB07669943EDA6E0E6F8", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B0C842777757A860221EEB07669943EDA6E0E6F8", lpFilePart=0x0) returned 0x85 [0173.947] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B0C842777757A860221EEB07669943EDA6E0E6F8.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B0C842777757A860221EEB07669943EDA6E0E6F8.xuy", lpFilePart=0x0) returned 0x89 [0173.947] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0173.947] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B0C842777757A860221EEB07669943EDA6E0E6F8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b0c842777757a860221eeb07669943eda6e0e6f8"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x615c4498, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x615c4498, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x538661fb, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0173.947] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0173.947] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B0C842777757A860221EEB07669943EDA6E0E6F8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b0c842777757a860221eeb07669943eda6e0e6f8"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B0C842777757A860221EEB07669943EDA6E0E6F8.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b0c842777757a860221eeb07669943eda6e0e6f8.xuy")) returned 1 [0173.949] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B0D47070252B6EE1939B4BD6DC01D326171716AD", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B0D47070252B6EE1939B4BD6DC01D326171716AD", lpFilePart=0x0) returned 0x85 [0173.949] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0173.949] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B0D47070252B6EE1939B4BD6DC01D326171716AD" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b0d47070252b6ee1939b4bd6dc01d326171716ad"), fInfoLevelId=0x0, lpFileInformation=0x2173cd0 | out: lpFileInformation=0x2173cd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f0c7b5f, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3f0c7b5f, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x41b75b6c, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x2156)) returned 1 [0173.949] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0173.949] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B0D47070252B6EE1939B4BD6DC01D326171716AD", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B0D47070252B6EE1939B4BD6DC01D326171716AD", lpFilePart=0x0) returned 0x85 [0173.949] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0173.949] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B0D47070252B6EE1939B4BD6DC01D326171716AD" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b0d47070252b6ee1939b4bd6dc01d326171716ad"), fInfoLevelId=0x0, lpFileInformation=0x2173ed0 | out: lpFileInformation=0x2173ed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f0c7b5f, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3f0c7b5f, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x41b75b6c, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x2156)) returned 1 [0173.949] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0173.949] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B0D47070252B6EE1939B4BD6DC01D326171716AD", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B0D47070252B6EE1939B4BD6DC01D326171716AD", lpFilePart=0x0) returned 0x85 [0173.950] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0173.950] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B0D47070252B6EE1939B4BD6DC01D326171716AD" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b0d47070252b6ee1939b4bd6dc01d326171716ad"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0173.951] GetFileType (hFile=0x444) returned 0x1 [0173.951] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0173.951] GetFileType (hFile=0x444) returned 0x1 [0173.951] ReadFile (in: hFile=0x444, lpBuffer=0x2176400, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x2176400*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0173.987] CloseHandle (hObject=0x444) returned 1 [0173.987] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B0D47070252B6EE1939B4BD6DC01D326171716AD", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B0D47070252B6EE1939B4BD6DC01D326171716AD", lpFilePart=0x0) returned 0x85 [0173.988] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0173.988] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B0D47070252B6EE1939B4BD6DC01D326171716AD" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b0d47070252b6ee1939b4bd6dc01d326171716ad"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0173.988] GetFileType (hFile=0x444) returned 0x1 [0173.988] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0173.988] GetFileType (hFile=0x444) returned 0x1 [0173.988] WriteFile (in: hFile=0x444, lpBuffer=0x21740b0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x21740b0*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0173.988] CloseHandle (hObject=0x444) returned 1 [0173.988] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B0D47070252B6EE1939B4BD6DC01D326171716AD", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B0D47070252B6EE1939B4BD6DC01D326171716AD", lpFilePart=0x0) returned 0x85 [0173.988] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B0D47070252B6EE1939B4BD6DC01D326171716AD.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B0D47070252B6EE1939B4BD6DC01D326171716AD.xuy", lpFilePart=0x0) returned 0x89 [0173.988] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0173.989] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B0D47070252B6EE1939B4BD6DC01D326171716AD" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b0d47070252b6ee1939b4bd6dc01d326171716ad"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f0c7b5f, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3f0c7b5f, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x538d89c4, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2156)) returned 1 [0173.989] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0173.989] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B0D47070252B6EE1939B4BD6DC01D326171716AD" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b0d47070252b6ee1939b4bd6dc01d326171716ad"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B0D47070252B6EE1939B4BD6DC01D326171716AD.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b0d47070252b6ee1939b4bd6dc01d326171716ad.xuy")) returned 1 [0173.990] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B13636B15D6B2224A652FD8433A0E5FF077AE63B", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B13636B15D6B2224A652FD8433A0E5FF077AE63B", lpFilePart=0x0) returned 0x85 [0173.990] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0173.990] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B13636B15D6B2224A652FD8433A0E5FF077AE63B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b13636b15d6b2224a652fd8433a0e5ff077ae63b"), fInfoLevelId=0x0, lpFileInformation=0x21f29a8 | out: lpFileInformation=0x21f29a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4798580c, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x4798580c, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x4798580c, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0x34a)) returned 1 [0173.990] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0173.990] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B13636B15D6B2224A652FD8433A0E5FF077AE63B", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B13636B15D6B2224A652FD8433A0E5FF077AE63B", lpFilePart=0x0) returned 0x85 [0173.991] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0173.991] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B13636B15D6B2224A652FD8433A0E5FF077AE63B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b13636b15d6b2224a652fd8433a0e5ff077ae63b"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0173.991] GetFileType (hFile=0x444) returned 0x1 [0173.991] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0173.991] GetFileType (hFile=0x444) returned 0x1 [0173.991] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x34a [0173.991] ReadFile (in: hFile=0x444, lpBuffer=0x21f3110, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x21f3110*, lpNumberOfBytesRead=0x3be5c8*=0x34a, lpOverlapped=0x0) returned 1 [0173.992] CloseHandle (hObject=0x444) returned 1 [0174.009] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B13636B15D6B2224A652FD8433A0E5FF077AE63B", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B13636B15D6B2224A652FD8433A0E5FF077AE63B", lpFilePart=0x0) returned 0x85 [0174.009] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0174.009] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B13636B15D6B2224A652FD8433A0E5FF077AE63B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b13636b15d6b2224a652fd8433a0e5ff077ae63b"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0174.011] GetFileType (hFile=0x444) returned 0x1 [0174.011] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0174.011] GetFileType (hFile=0x444) returned 0x1 [0174.011] WriteFile (in: hFile=0x444, lpBuffer=0x226b230*, nNumberOfBytesToWrite=0x350, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x226b230*, lpNumberOfBytesWritten=0x3be4d8*=0x350, lpOverlapped=0x0) returned 1 [0174.012] CloseHandle (hObject=0x444) returned 1 [0174.012] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B13636B15D6B2224A652FD8433A0E5FF077AE63B", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B13636B15D6B2224A652FD8433A0E5FF077AE63B", lpFilePart=0x0) returned 0x85 [0174.012] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B13636B15D6B2224A652FD8433A0E5FF077AE63B.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B13636B15D6B2224A652FD8433A0E5FF077AE63B.xuy", lpFilePart=0x0) returned 0x89 [0174.012] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0174.012] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B13636B15D6B2224A652FD8433A0E5FF077AE63B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b13636b15d6b2224a652fd8433a0e5ff077ae63b"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4798580c, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x4798580c, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x53924ed1, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x350)) returned 1 [0174.012] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0174.012] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B13636B15D6B2224A652FD8433A0E5FF077AE63B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b13636b15d6b2224a652fd8433a0e5ff077ae63b"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B13636B15D6B2224A652FD8433A0E5FF077AE63B.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b13636b15d6b2224a652fd8433a0e5ff077ae63b.xuy")) returned 1 [0174.014] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B1535B3DD9DD55168D9C4E287DFF1CED74684F31", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B1535B3DD9DD55168D9C4E287DFF1CED74684F31", lpFilePart=0x0) returned 0x85 [0174.014] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0174.014] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B1535B3DD9DD55168D9C4E287DFF1CED74684F31" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b1535b3dd9dd55168d9c4e287dff1ced74684f31"), fInfoLevelId=0x0, lpFileInformation=0x226c5f0 | out: lpFileInformation=0x226c5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4eaf35b, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc4eaf35b, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xc50c5407, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x13d55)) returned 1 [0174.014] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0174.014] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B1535B3DD9DD55168D9C4E287DFF1CED74684F31", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B1535B3DD9DD55168D9C4E287DFF1CED74684F31", lpFilePart=0x0) returned 0x85 [0174.014] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0174.014] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B1535B3DD9DD55168D9C4E287DFF1CED74684F31" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b1535b3dd9dd55168d9c4e287dff1ced74684f31"), fInfoLevelId=0x0, lpFileInformation=0x226c7f0 | out: lpFileInformation=0x226c7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4eaf35b, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc4eaf35b, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xc50c5407, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x13d55)) returned 1 [0174.014] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0174.014] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B1535B3DD9DD55168D9C4E287DFF1CED74684F31", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B1535B3DD9DD55168D9C4E287DFF1CED74684F31", lpFilePart=0x0) returned 0x85 [0174.014] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0174.014] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B1535B3DD9DD55168D9C4E287DFF1CED74684F31" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b1535b3dd9dd55168d9c4e287dff1ced74684f31"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0174.015] GetFileType (hFile=0x444) returned 0x1 [0174.015] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0174.015] GetFileType (hFile=0x444) returned 0x1 [0174.015] ReadFile (in: hFile=0x444, lpBuffer=0x226ed20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x226ed20*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0174.040] CloseHandle (hObject=0x444) returned 1 [0174.169] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B1535B3DD9DD55168D9C4E287DFF1CED74684F31", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B1535B3DD9DD55168D9C4E287DFF1CED74684F31", lpFilePart=0x0) returned 0x85 [0174.169] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0174.169] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B1535B3DD9DD55168D9C4E287DFF1CED74684F31" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b1535b3dd9dd55168d9c4e287dff1ced74684f31"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0174.169] GetFileType (hFile=0x444) returned 0x1 [0174.169] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0174.169] GetFileType (hFile=0x444) returned 0x1 [0174.169] WriteFile (in: hFile=0x444, lpBuffer=0x226c9d0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x226c9d0*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0174.170] CloseHandle (hObject=0x444) returned 1 [0174.170] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B1535B3DD9DD55168D9C4E287DFF1CED74684F31", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B1535B3DD9DD55168D9C4E287DFF1CED74684F31", lpFilePart=0x0) returned 0x85 [0174.170] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B1535B3DD9DD55168D9C4E287DFF1CED74684F31.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B1535B3DD9DD55168D9C4E287DFF1CED74684F31.xuy", lpFilePart=0x0) returned 0x89 [0174.170] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0174.170] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B1535B3DD9DD55168D9C4E287DFF1CED74684F31" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b1535b3dd9dd55168d9c4e287dff1ced74684f31"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4eaf35b, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc4eaf35b, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x53aa2526, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x13d55)) returned 1 [0174.170] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0174.170] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B1535B3DD9DD55168D9C4E287DFF1CED74684F31" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b1535b3dd9dd55168d9c4e287dff1ced74684f31"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B1535B3DD9DD55168D9C4E287DFF1CED74684F31.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b1535b3dd9dd55168d9c4e287dff1ced74684f31.xuy")) returned 1 [0174.171] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B26E09F1951B50CF919617CF90B6C1001EBF3354", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B26E09F1951B50CF919617CF90B6C1001EBF3354", lpFilePart=0x0) returned 0x85 [0174.171] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0174.172] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B26E09F1951B50CF919617CF90B6C1001EBF3354" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b26e09f1951b50cf919617cf90b6c1001ebf3354"), fInfoLevelId=0x0, lpFileInformation=0x22eb2c8 | out: lpFileInformation=0x22eb2c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f64fd10, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3f64fd10, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x3f65241d, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x52a)) returned 1 [0174.172] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0174.172] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B26E09F1951B50CF919617CF90B6C1001EBF3354", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B26E09F1951B50CF919617CF90B6C1001EBF3354", lpFilePart=0x0) returned 0x85 [0174.172] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0174.172] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B26E09F1951B50CF919617CF90B6C1001EBF3354" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b26e09f1951b50cf919617cf90b6c1001ebf3354"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0174.172] GetFileType (hFile=0x444) returned 0x1 [0174.172] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0174.172] GetFileType (hFile=0x444) returned 0x1 [0174.172] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x52a [0174.172] ReadFile (in: hFile=0x444, lpBuffer=0x22ebc10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x22ebc10*, lpNumberOfBytesRead=0x3be5c8*=0x52a, lpOverlapped=0x0) returned 1 [0174.193] CloseHandle (hObject=0x444) returned 1 [0174.211] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B26E09F1951B50CF919617CF90B6C1001EBF3354", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B26E09F1951B50CF919617CF90B6C1001EBF3354", lpFilePart=0x0) returned 0x85 [0174.211] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0174.211] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B26E09F1951B50CF919617CF90B6C1001EBF3354" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b26e09f1951b50cf919617cf90b6c1001ebf3354"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0174.214] GetFileType (hFile=0x444) returned 0x1 [0174.214] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0174.214] GetFileType (hFile=0x444) returned 0x1 [0174.214] WriteFile (in: hFile=0x444, lpBuffer=0x2364690*, nNumberOfBytesToWrite=0x530, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x2364690*, lpNumberOfBytesWritten=0x3be4d8*=0x530, lpOverlapped=0x0) returned 1 [0174.215] CloseHandle (hObject=0x444) returned 1 [0174.216] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B26E09F1951B50CF919617CF90B6C1001EBF3354", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B26E09F1951B50CF919617CF90B6C1001EBF3354", lpFilePart=0x0) returned 0x85 [0174.216] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B26E09F1951B50CF919617CF90B6C1001EBF3354.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B26E09F1951B50CF919617CF90B6C1001EBF3354.xuy", lpFilePart=0x0) returned 0x89 [0174.216] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0174.216] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B26E09F1951B50CF919617CF90B6C1001EBF3354" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b26e09f1951b50cf919617cf90b6c1001ebf3354"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f64fd10, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3f64fd10, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x53b14d2a, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x530)) returned 1 [0174.216] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0174.216] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B26E09F1951B50CF919617CF90B6C1001EBF3354" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b26e09f1951b50cf919617cf90b6c1001ebf3354"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B26E09F1951B50CF919617CF90B6C1001EBF3354.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b26e09f1951b50cf919617cf90b6c1001ebf3354.xuy")) returned 1 [0174.218] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B328AA3491454066984C57961AA69BEA1D2FDA76", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B328AA3491454066984C57961AA69BEA1D2FDA76", lpFilePart=0x0) returned 0x85 [0174.218] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0174.218] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B328AA3491454066984C57961AA69BEA1D2FDA76" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b328aa3491454066984c57961aa69bea1d2fda76"), fInfoLevelId=0x0, lpFileInformation=0x2365a50 | out: lpFileInformation=0x2365a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x863075b2, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x863075b2, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x863075b2, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x101b)) returned 1 [0174.218] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0174.218] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B328AA3491454066984C57961AA69BEA1D2FDA76", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B328AA3491454066984C57961AA69BEA1D2FDA76", lpFilePart=0x0) returned 0x85 [0174.218] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0174.218] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B328AA3491454066984C57961AA69BEA1D2FDA76" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b328aa3491454066984c57961aa69bea1d2fda76"), fInfoLevelId=0x0, lpFileInformation=0x2365c50 | out: lpFileInformation=0x2365c50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x863075b2, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x863075b2, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x863075b2, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x101b)) returned 1 [0174.218] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0174.218] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B328AA3491454066984C57961AA69BEA1D2FDA76", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B328AA3491454066984C57961AA69BEA1D2FDA76", lpFilePart=0x0) returned 0x85 [0174.218] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0174.218] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B328AA3491454066984C57961AA69BEA1D2FDA76" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b328aa3491454066984c57961aa69bea1d2fda76"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0174.219] GetFileType (hFile=0x444) returned 0x1 [0174.219] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0174.219] GetFileType (hFile=0x444) returned 0x1 [0174.220] ReadFile (in: hFile=0x444, lpBuffer=0x2368180, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x2368180*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0174.287] CloseHandle (hObject=0x444) returned 1 [0174.288] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B328AA3491454066984C57961AA69BEA1D2FDA76", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B328AA3491454066984C57961AA69BEA1D2FDA76", lpFilePart=0x0) returned 0x85 [0174.288] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0174.288] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B328AA3491454066984C57961AA69BEA1D2FDA76" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b328aa3491454066984c57961aa69bea1d2fda76"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0174.288] GetFileType (hFile=0x444) returned 0x1 [0174.288] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0174.288] GetFileType (hFile=0x444) returned 0x1 [0174.288] WriteFile (in: hFile=0x444, lpBuffer=0x216ec90*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x216ec90*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0174.289] CloseHandle (hObject=0x444) returned 1 [0174.289] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B328AA3491454066984C57961AA69BEA1D2FDA76", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B328AA3491454066984C57961AA69BEA1D2FDA76", lpFilePart=0x0) returned 0x85 [0174.289] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B328AA3491454066984C57961AA69BEA1D2FDA76.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B328AA3491454066984C57961AA69BEA1D2FDA76.xuy", lpFilePart=0x0) returned 0x89 [0174.289] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0174.289] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B328AA3491454066984C57961AA69BEA1D2FDA76" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b328aa3491454066984c57961aa69bea1d2fda76"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x863075b2, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x863075b2, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x53bad624, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0174.289] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0174.289] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B328AA3491454066984C57961AA69BEA1D2FDA76" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b328aa3491454066984c57961aa69bea1d2fda76"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B328AA3491454066984C57961AA69BEA1D2FDA76.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b328aa3491454066984c57961aa69bea1d2fda76.xuy")) returned 1 [0174.290] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B332620FEC5B3F46E970E43B14F2990FC5698CCC", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B332620FEC5B3F46E970E43B14F2990FC5698CCC", lpFilePart=0x0) returned 0x85 [0174.290] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0174.290] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B332620FEC5B3F46E970E43B14F2990FC5698CCC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b332620fec5b3f46e970e43b14f2990fc5698ccc"), fInfoLevelId=0x0, lpFileInformation=0x21e9f80 | out: lpFileInformation=0x21e9f80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5381bb6f, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x5381bb6f, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x5381bb6f, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0x8ff)) returned 1 [0174.291] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0174.291] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B332620FEC5B3F46E970E43B14F2990FC5698CCC", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B332620FEC5B3F46E970E43B14F2990FC5698CCC", lpFilePart=0x0) returned 0x85 [0174.291] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0174.291] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B332620FEC5B3F46E970E43B14F2990FC5698CCC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b332620fec5b3f46e970e43b14f2990fc5698ccc"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0174.291] GetFileType (hFile=0x444) returned 0x1 [0174.291] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0174.291] GetFileType (hFile=0x444) returned 0x1 [0174.291] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x8ff [0174.291] ReadFile (in: hFile=0x444, lpBuffer=0x21eac98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x21eac98*, lpNumberOfBytesRead=0x3be5c8*=0x8ff, lpOverlapped=0x0) returned 1 [0174.294] CloseHandle (hObject=0x444) returned 1 [0174.303] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B332620FEC5B3F46E970E43B14F2990FC5698CCC", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B332620FEC5B3F46E970E43B14F2990FC5698CCC", lpFilePart=0x0) returned 0x85 [0174.304] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0174.304] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B332620FEC5B3F46E970E43B14F2990FC5698CCC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b332620fec5b3f46e970e43b14f2990fc5698ccc"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0174.305] GetFileType (hFile=0x444) returned 0x1 [0174.305] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0174.305] GetFileType (hFile=0x444) returned 0x1 [0174.306] WriteFile (in: hFile=0x444, lpBuffer=0x2264a28*, nNumberOfBytesToWrite=0x900, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x2264a28*, lpNumberOfBytesWritten=0x3be4d8*=0x900, lpOverlapped=0x0) returned 1 [0174.306] CloseHandle (hObject=0x444) returned 1 [0174.306] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B332620FEC5B3F46E970E43B14F2990FC5698CCC", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B332620FEC5B3F46E970E43B14F2990FC5698CCC", lpFilePart=0x0) returned 0x85 [0174.307] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B332620FEC5B3F46E970E43B14F2990FC5698CCC.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B332620FEC5B3F46E970E43B14F2990FC5698CCC.xuy", lpFilePart=0x0) returned 0x89 [0174.307] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0174.307] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B332620FEC5B3F46E970E43B14F2990FC5698CCC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b332620fec5b3f46e970e43b14f2990fc5698ccc"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5381bb6f, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x5381bb6f, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x53bd37d4, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x900)) returned 1 [0174.307] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0174.307] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B332620FEC5B3F46E970E43B14F2990FC5698CCC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b332620fec5b3f46e970e43b14f2990fc5698ccc"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B332620FEC5B3F46E970E43B14F2990FC5698CCC.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b332620fec5b3f46e970e43b14f2990fc5698ccc.xuy")) returned 1 [0174.308] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B34EF52333F13C92B035E4DA7E00EE58A80645F0", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B34EF52333F13C92B035E4DA7E00EE58A80645F0", lpFilePart=0x0) returned 0x85 [0174.308] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0174.308] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B34EF52333F13C92B035E4DA7E00EE58A80645F0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b34ef52333f13c92b035e4da7e00ee58a80645f0"), fInfoLevelId=0x0, lpFileInformation=0x2265de8 | out: lpFileInformation=0x2265de8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x459406e4, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x459406e4, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x459406e4, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0xca7)) returned 1 [0174.308] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0174.308] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B34EF52333F13C92B035E4DA7E00EE58A80645F0", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B34EF52333F13C92B035E4DA7E00EE58A80645F0", lpFilePart=0x0) returned 0x85 [0174.308] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0174.308] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B34EF52333F13C92B035E4DA7E00EE58A80645F0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b34ef52333f13c92b035e4da7e00ee58a80645f0"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0174.309] GetFileType (hFile=0x444) returned 0x1 [0174.309] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0174.309] GetFileType (hFile=0x444) returned 0x1 [0174.309] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xca7 [0174.309] ReadFile (in: hFile=0x444, lpBuffer=0x2266ea8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x2266ea8*, lpNumberOfBytesRead=0x3be5c8*=0xca7, lpOverlapped=0x0) returned 1 [0174.321] CloseHandle (hObject=0x444) returned 1 [0174.333] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B34EF52333F13C92B035E4DA7E00EE58A80645F0", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B34EF52333F13C92B035E4DA7E00EE58A80645F0", lpFilePart=0x0) returned 0x85 [0174.333] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0174.333] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B34EF52333F13C92B035E4DA7E00EE58A80645F0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b34ef52333f13c92b035e4da7e00ee58a80645f0"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0174.335] GetFileType (hFile=0x444) returned 0x1 [0174.335] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0174.335] GetFileType (hFile=0x444) returned 0x1 [0174.335] WriteFile (in: hFile=0x444, lpBuffer=0x22e1eb0*, nNumberOfBytesToWrite=0xcb0, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x22e1eb0*, lpNumberOfBytesWritten=0x3be4d8*=0xcb0, lpOverlapped=0x0) returned 1 [0174.336] CloseHandle (hObject=0x444) returned 1 [0174.336] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B34EF52333F13C92B035E4DA7E00EE58A80645F0", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B34EF52333F13C92B035E4DA7E00EE58A80645F0", lpFilePart=0x0) returned 0x85 [0174.336] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B34EF52333F13C92B035E4DA7E00EE58A80645F0.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B34EF52333F13C92B035E4DA7E00EE58A80645F0.xuy", lpFilePart=0x0) returned 0x89 [0174.336] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0174.336] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B34EF52333F13C92B035E4DA7E00EE58A80645F0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b34ef52333f13c92b035e4da7e00ee58a80645f0"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x459406e4, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x459406e4, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x53c1fe9b, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xcb0)) returned 1 [0174.336] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0174.336] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B34EF52333F13C92B035E4DA7E00EE58A80645F0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b34ef52333f13c92b035e4da7e00ee58a80645f0"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B34EF52333F13C92B035E4DA7E00EE58A80645F0.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b34ef52333f13c92b035e4da7e00ee58a80645f0.xuy")) returned 1 [0174.337] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B3E4E2650DA2CC89EA5DF260683628253401F4B0", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B3E4E2650DA2CC89EA5DF260683628253401F4B0", lpFilePart=0x0) returned 0x85 [0174.337] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0174.337] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B3E4E2650DA2CC89EA5DF260683628253401F4B0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b3e4e2650da2cc89ea5df260683628253401f4b0"), fInfoLevelId=0x0, lpFileInformation=0x22e3270 | out: lpFileInformation=0x22e3270*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61551d8c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x61551d8c, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x61551d8c, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x1165)) returned 1 [0174.338] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0174.338] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B3E4E2650DA2CC89EA5DF260683628253401F4B0", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B3E4E2650DA2CC89EA5DF260683628253401F4B0", lpFilePart=0x0) returned 0x85 [0174.338] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0174.338] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B3E4E2650DA2CC89EA5DF260683628253401F4B0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b3e4e2650da2cc89ea5df260683628253401f4b0"), fInfoLevelId=0x0, lpFileInformation=0x22e3470 | out: lpFileInformation=0x22e3470*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61551d8c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x61551d8c, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x61551d8c, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x1165)) returned 1 [0174.338] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0174.338] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B3E4E2650DA2CC89EA5DF260683628253401F4B0", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B3E4E2650DA2CC89EA5DF260683628253401F4B0", lpFilePart=0x0) returned 0x85 [0174.338] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0174.338] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B3E4E2650DA2CC89EA5DF260683628253401F4B0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b3e4e2650da2cc89ea5df260683628253401f4b0"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0174.339] GetFileType (hFile=0x444) returned 0x1 [0174.339] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0174.339] GetFileType (hFile=0x444) returned 0x1 [0174.339] ReadFile (in: hFile=0x444, lpBuffer=0x22e59a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x22e59a0*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0174.361] CloseHandle (hObject=0x444) returned 1 [0174.361] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B3E4E2650DA2CC89EA5DF260683628253401F4B0", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B3E4E2650DA2CC89EA5DF260683628253401F4B0", lpFilePart=0x0) returned 0x85 [0174.361] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0174.362] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B3E4E2650DA2CC89EA5DF260683628253401F4B0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b3e4e2650da2cc89ea5df260683628253401f4b0"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0174.362] GetFileType (hFile=0x444) returned 0x1 [0174.362] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0174.362] GetFileType (hFile=0x444) returned 0x1 [0174.362] WriteFile (in: hFile=0x444, lpBuffer=0x22e3650*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x22e3650*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0174.362] CloseHandle (hObject=0x444) returned 1 [0174.362] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B3E4E2650DA2CC89EA5DF260683628253401F4B0", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B3E4E2650DA2CC89EA5DF260683628253401F4B0", lpFilePart=0x0) returned 0x85 [0174.362] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B3E4E2650DA2CC89EA5DF260683628253401F4B0.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B3E4E2650DA2CC89EA5DF260683628253401F4B0.xuy", lpFilePart=0x0) returned 0x89 [0174.362] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0174.362] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B3E4E2650DA2CC89EA5DF260683628253401F4B0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b3e4e2650da2cc89ea5df260683628253401f4b0"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61551d8c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x61551d8c, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x53c6c78b, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0174.362] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0174.363] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B3E4E2650DA2CC89EA5DF260683628253401F4B0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b3e4e2650da2cc89ea5df260683628253401f4b0"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B3E4E2650DA2CC89EA5DF260683628253401F4B0.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b3e4e2650da2cc89ea5df260683628253401f4b0.xuy")) returned 1 [0174.367] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B3E9278F892B368B068B5C24BBFEDE6DDDAD0D6F", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B3E9278F892B368B068B5C24BBFEDE6DDDAD0D6F", lpFilePart=0x0) returned 0x85 [0174.367] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0174.367] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B3E9278F892B368B068B5C24BBFEDE6DDDAD0D6F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b3e9278f892b368b068b5c24bbfede6dddad0d6f"), fInfoLevelId=0x0, lpFileInformation=0x2361f48 | out: lpFileInformation=0x2361f48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x466f5f96, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x466f5f96, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x466f5f96, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0x8056)) returned 1 [0174.367] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0174.367] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B3E9278F892B368B068B5C24BBFEDE6DDDAD0D6F", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B3E9278F892B368B068B5C24BBFEDE6DDDAD0D6F", lpFilePart=0x0) returned 0x85 [0174.368] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0174.368] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B3E9278F892B368B068B5C24BBFEDE6DDDAD0D6F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b3e9278f892b368b068b5c24bbfede6dddad0d6f"), fInfoLevelId=0x0, lpFileInformation=0x2362148 | out: lpFileInformation=0x2362148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x466f5f96, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x466f5f96, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x466f5f96, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0x8056)) returned 1 [0174.368] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0174.368] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B3E9278F892B368B068B5C24BBFEDE6DDDAD0D6F", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B3E9278F892B368B068B5C24BBFEDE6DDDAD0D6F", lpFilePart=0x0) returned 0x85 [0174.368] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0174.368] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B3E9278F892B368B068B5C24BBFEDE6DDDAD0D6F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b3e9278f892b368b068b5c24bbfede6dddad0d6f"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0174.369] GetFileType (hFile=0x444) returned 0x1 [0174.369] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0174.369] GetFileType (hFile=0x444) returned 0x1 [0174.369] ReadFile (in: hFile=0x444, lpBuffer=0x2364678, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x2364678*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0174.424] CloseHandle (hObject=0x444) returned 1 [0174.424] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B3E9278F892B368B068B5C24BBFEDE6DDDAD0D6F", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B3E9278F892B368B068B5C24BBFEDE6DDDAD0D6F", lpFilePart=0x0) returned 0x85 [0174.424] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0174.424] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B3E9278F892B368B068B5C24BBFEDE6DDDAD0D6F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b3e9278f892b368b068b5c24bbfede6dddad0d6f"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0174.424] GetFileType (hFile=0x444) returned 0x1 [0174.424] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0174.424] GetFileType (hFile=0x444) returned 0x1 [0174.424] WriteFile (in: hFile=0x444, lpBuffer=0x21744a0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x21744a0*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0174.425] CloseHandle (hObject=0x444) returned 1 [0174.425] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B3E9278F892B368B068B5C24BBFEDE6DDDAD0D6F", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B3E9278F892B368B068B5C24BBFEDE6DDDAD0D6F", lpFilePart=0x0) returned 0x85 [0174.425] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B3E9278F892B368B068B5C24BBFEDE6DDDAD0D6F.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B3E9278F892B368B068B5C24BBFEDE6DDDAD0D6F.xuy", lpFilePart=0x0) returned 0x89 [0174.425] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0174.425] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B3E9278F892B368B068B5C24BBFEDE6DDDAD0D6F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b3e9278f892b368b068b5c24bbfede6dddad0d6f"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x466f5f96, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x466f5f96, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x53d04c52, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x8056)) returned 1 [0174.425] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0174.425] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B3E9278F892B368B068B5C24BBFEDE6DDDAD0D6F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b3e9278f892b368b068b5c24bbfede6dddad0d6f"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B3E9278F892B368B068B5C24BBFEDE6DDDAD0D6F.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b3e9278f892b368b068b5c24bbfede6dddad0d6f.xuy")) returned 1 [0174.426] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B430ADC763D30DB86E64F043832D757C6A8FA207", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B430ADC763D30DB86E64F043832D757C6A8FA207", lpFilePart=0x0) returned 0x85 [0174.426] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0174.426] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B430ADC763D30DB86E64F043832D757C6A8FA207" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b430adc763d30db86e64f043832d757c6a8fa207"), fInfoLevelId=0x0, lpFileInformation=0x21e6410 | out: lpFileInformation=0x21e6410*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bf56a5c, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3bf56a5c, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x3bf5b87b, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x52a)) returned 1 [0174.426] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0174.427] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B430ADC763D30DB86E64F043832D757C6A8FA207", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B430ADC763D30DB86E64F043832D757C6A8FA207", lpFilePart=0x0) returned 0x85 [0174.427] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0174.427] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B430ADC763D30DB86E64F043832D757C6A8FA207" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b430adc763d30db86e64f043832d757c6a8fa207"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0174.427] GetFileType (hFile=0x444) returned 0x1 [0174.427] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0174.427] GetFileType (hFile=0x444) returned 0x1 [0174.427] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x52a [0174.427] ReadFile (in: hFile=0x444, lpBuffer=0x21e6d58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x21e6d58*, lpNumberOfBytesRead=0x3be5c8*=0x52a, lpOverlapped=0x0) returned 1 [0174.428] CloseHandle (hObject=0x444) returned 1 [0174.448] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B430ADC763D30DB86E64F043832D757C6A8FA207", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B430ADC763D30DB86E64F043832D757C6A8FA207", lpFilePart=0x0) returned 0x85 [0174.448] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0174.448] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B430ADC763D30DB86E64F043832D757C6A8FA207" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b430adc763d30db86e64f043832d757c6a8fa207"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0174.450] GetFileType (hFile=0x444) returned 0x1 [0174.450] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0174.450] GetFileType (hFile=0x444) returned 0x1 [0174.450] WriteFile (in: hFile=0x444, lpBuffer=0x225f7d8*, nNumberOfBytesToWrite=0x530, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x225f7d8*, lpNumberOfBytesWritten=0x3be4d8*=0x530, lpOverlapped=0x0) returned 1 [0174.454] CloseHandle (hObject=0x444) returned 1 [0174.454] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B430ADC763D30DB86E64F043832D757C6A8FA207", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B430ADC763D30DB86E64F043832D757C6A8FA207", lpFilePart=0x0) returned 0x85 [0174.454] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B430ADC763D30DB86E64F043832D757C6A8FA207.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B430ADC763D30DB86E64F043832D757C6A8FA207.xuy", lpFilePart=0x0) returned 0x89 [0174.454] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0174.454] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B430ADC763D30DB86E64F043832D757C6A8FA207" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b430adc763d30db86e64f043832d757c6a8fa207"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bf56a5c, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3bf56a5c, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x53d51a17, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x530)) returned 1 [0174.454] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0174.454] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B430ADC763D30DB86E64F043832D757C6A8FA207" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b430adc763d30db86e64f043832d757c6a8fa207"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B430ADC763D30DB86E64F043832D757C6A8FA207.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b430adc763d30db86e64f043832d757c6a8fa207.xuy")) returned 1 [0174.456] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B495BAE5519B053312C8B03FE09C2EAFB1077894", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B495BAE5519B053312C8B03FE09C2EAFB1077894", lpFilePart=0x0) returned 0x85 [0174.456] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0174.456] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B495BAE5519B053312C8B03FE09C2EAFB1077894" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b495bae5519b053312c8b03fe09c2eafb1077894"), fInfoLevelId=0x0, lpFileInformation=0x2260b98 | out: lpFileInformation=0x2260b98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6159e1e8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x6159e1e8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x6159e1e8, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xed0)) returned 1 [0174.456] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0174.456] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B495BAE5519B053312C8B03FE09C2EAFB1077894", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B495BAE5519B053312C8B03FE09C2EAFB1077894", lpFilePart=0x0) returned 0x85 [0174.456] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0174.456] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B495BAE5519B053312C8B03FE09C2EAFB1077894" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b495bae5519b053312c8b03fe09c2eafb1077894"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0174.456] GetFileType (hFile=0x444) returned 0x1 [0174.456] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0174.456] GetFileType (hFile=0x444) returned 0x1 [0174.456] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xed0 [0174.456] ReadFile (in: hFile=0x444, lpBuffer=0x2261e80, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x2261e80*, lpNumberOfBytesRead=0x3be5c8*=0xed0, lpOverlapped=0x0) returned 1 [0174.458] CloseHandle (hObject=0x444) returned 1 [0174.468] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B495BAE5519B053312C8B03FE09C2EAFB1077894", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B495BAE5519B053312C8B03FE09C2EAFB1077894", lpFilePart=0x0) returned 0x85 [0174.468] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0174.468] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B495BAE5519B053312C8B03FE09C2EAFB1077894" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b495bae5519b053312c8b03fe09c2eafb1077894"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0174.470] GetFileType (hFile=0x444) returned 0x1 [0174.470] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0174.470] GetFileType (hFile=0x444) returned 0x1 [0174.470] WriteFile (in: hFile=0x444, lpBuffer=0x22dd978*, nNumberOfBytesToWrite=0xee0, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x22dd978*, lpNumberOfBytesWritten=0x3be4d8*=0xee0, lpOverlapped=0x0) returned 1 [0174.471] CloseHandle (hObject=0x444) returned 1 [0174.471] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B495BAE5519B053312C8B03FE09C2EAFB1077894", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B495BAE5519B053312C8B03FE09C2EAFB1077894", lpFilePart=0x0) returned 0x85 [0174.471] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B495BAE5519B053312C8B03FE09C2EAFB1077894.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B495BAE5519B053312C8B03FE09C2EAFB1077894.xuy", lpFilePart=0x0) returned 0x89 [0174.471] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0174.471] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B495BAE5519B053312C8B03FE09C2EAFB1077894" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b495bae5519b053312c8b03fe09c2eafb1077894"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6159e1e8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x6159e1e8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x53d7756c, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xee0)) returned 1 [0174.472] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0174.472] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B495BAE5519B053312C8B03FE09C2EAFB1077894" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b495bae5519b053312c8b03fe09c2eafb1077894"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B495BAE5519B053312C8B03FE09C2EAFB1077894.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b495bae5519b053312c8b03fe09c2eafb1077894.xuy")) returned 1 [0174.473] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B4D3001B84E5BC0C4A0EEFAC34743026D9BAA7AF", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B4D3001B84E5BC0C4A0EEFAC34743026D9BAA7AF", lpFilePart=0x0) returned 0x85 [0174.473] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0174.473] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B4D3001B84E5BC0C4A0EEFAC34743026D9BAA7AF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b4d3001b84e5bc0c4a0eefac34743026d9baa7af"), fInfoLevelId=0x0, lpFileInformation=0x22ded38 | out: lpFileInformation=0x22ded38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4819170d, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x4819170d, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x4819170d, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0xadd1)) returned 1 [0174.473] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0174.473] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B4D3001B84E5BC0C4A0EEFAC34743026D9BAA7AF", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B4D3001B84E5BC0C4A0EEFAC34743026D9BAA7AF", lpFilePart=0x0) returned 0x85 [0174.473] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0174.473] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B4D3001B84E5BC0C4A0EEFAC34743026D9BAA7AF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b4d3001b84e5bc0c4a0eefac34743026d9baa7af"), fInfoLevelId=0x0, lpFileInformation=0x22def38 | out: lpFileInformation=0x22def38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4819170d, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x4819170d, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x4819170d, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0xadd1)) returned 1 [0174.473] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0174.473] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B4D3001B84E5BC0C4A0EEFAC34743026D9BAA7AF", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B4D3001B84E5BC0C4A0EEFAC34743026D9BAA7AF", lpFilePart=0x0) returned 0x85 [0174.473] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0174.473] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B4D3001B84E5BC0C4A0EEFAC34743026D9BAA7AF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b4d3001b84e5bc0c4a0eefac34743026d9baa7af"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0174.474] GetFileType (hFile=0x444) returned 0x1 [0174.474] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0174.474] GetFileType (hFile=0x444) returned 0x1 [0174.474] ReadFile (in: hFile=0x444, lpBuffer=0x22e1468, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x22e1468*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0174.876] CloseHandle (hObject=0x444) returned 1 [0174.876] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B4D3001B84E5BC0C4A0EEFAC34743026D9BAA7AF", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B4D3001B84E5BC0C4A0EEFAC34743026D9BAA7AF", lpFilePart=0x0) returned 0x85 [0174.876] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0174.876] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B4D3001B84E5BC0C4A0EEFAC34743026D9BAA7AF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b4d3001b84e5bc0c4a0eefac34743026d9baa7af"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0174.876] GetFileType (hFile=0x444) returned 0x1 [0174.876] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0174.877] GetFileType (hFile=0x444) returned 0x1 [0174.877] WriteFile (in: hFile=0x444, lpBuffer=0x22df118*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x22df118*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0174.877] CloseHandle (hObject=0x444) returned 1 [0174.877] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B4D3001B84E5BC0C4A0EEFAC34743026D9BAA7AF", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B4D3001B84E5BC0C4A0EEFAC34743026D9BAA7AF", lpFilePart=0x0) returned 0x85 [0174.877] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B4D3001B84E5BC0C4A0EEFAC34743026D9BAA7AF.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B4D3001B84E5BC0C4A0EEFAC34743026D9BAA7AF.xuy", lpFilePart=0x0) returned 0x89 [0174.877] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0174.877] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B4D3001B84E5BC0C4A0EEFAC34743026D9BAA7AF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b4d3001b84e5bc0c4a0eefac34743026d9baa7af"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4819170d, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x4819170d, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x54156f3b, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xadd1)) returned 1 [0174.877] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0174.877] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B4D3001B84E5BC0C4A0EEFAC34743026D9BAA7AF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b4d3001b84e5bc0c4a0eefac34743026d9baa7af"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B4D3001B84E5BC0C4A0EEFAC34743026D9BAA7AF.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b4d3001b84e5bc0c4a0eefac34743026d9baa7af.xuy")) returned 1 [0174.879] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B597DA2E9B2D181DF7F2FB8D2BAEC133C8DBA0A3", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B597DA2E9B2D181DF7F2FB8D2BAEC133C8DBA0A3", lpFilePart=0x0) returned 0x85 [0174.879] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0174.879] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B597DA2E9B2D181DF7F2FB8D2BAEC133C8DBA0A3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b597da2e9b2d181df7f2fb8d2baec133c8dba0a3"), fInfoLevelId=0x0, lpFileInformation=0x235da10 | out: lpFileInformation=0x235da10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x548d72f1, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x548d72f1, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x5f43d2d6, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x4b73)) returned 1 [0174.879] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0174.879] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B597DA2E9B2D181DF7F2FB8D2BAEC133C8DBA0A3", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B597DA2E9B2D181DF7F2FB8D2BAEC133C8DBA0A3", lpFilePart=0x0) returned 0x85 [0174.879] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0174.879] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B597DA2E9B2D181DF7F2FB8D2BAEC133C8DBA0A3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b597da2e9b2d181df7f2fb8d2baec133c8dba0a3"), fInfoLevelId=0x0, lpFileInformation=0x235dc10 | out: lpFileInformation=0x235dc10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x548d72f1, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x548d72f1, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x5f43d2d6, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x4b73)) returned 1 [0174.879] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0174.879] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B597DA2E9B2D181DF7F2FB8D2BAEC133C8DBA0A3", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B597DA2E9B2D181DF7F2FB8D2BAEC133C8DBA0A3", lpFilePart=0x0) returned 0x85 [0174.879] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0174.879] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B597DA2E9B2D181DF7F2FB8D2BAEC133C8DBA0A3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b597da2e9b2d181df7f2fb8d2baec133c8dba0a3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0174.880] GetFileType (hFile=0x444) returned 0x1 [0174.880] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0174.880] GetFileType (hFile=0x444) returned 0x1 [0174.880] ReadFile (in: hFile=0x444, lpBuffer=0x2360140, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x2360140*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0174.987] CloseHandle (hObject=0x444) returned 1 [0174.987] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B597DA2E9B2D181DF7F2FB8D2BAEC133C8DBA0A3", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B597DA2E9B2D181DF7F2FB8D2BAEC133C8DBA0A3", lpFilePart=0x0) returned 0x85 [0174.987] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0174.988] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B597DA2E9B2D181DF7F2FB8D2BAEC133C8DBA0A3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b597da2e9b2d181df7f2fb8d2baec133c8dba0a3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0174.988] GetFileType (hFile=0x444) returned 0x1 [0174.988] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0174.988] GetFileType (hFile=0x444) returned 0x1 [0174.988] WriteFile (in: hFile=0x444, lpBuffer=0x2179cb0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x2179cb0*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0174.988] CloseHandle (hObject=0x444) returned 1 [0174.988] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B597DA2E9B2D181DF7F2FB8D2BAEC133C8DBA0A3", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B597DA2E9B2D181DF7F2FB8D2BAEC133C8DBA0A3", lpFilePart=0x0) returned 0x85 [0174.988] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B597DA2E9B2D181DF7F2FB8D2BAEC133C8DBA0A3.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B597DA2E9B2D181DF7F2FB8D2BAEC133C8DBA0A3.xuy", lpFilePart=0x0) returned 0x89 [0174.988] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0174.988] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B597DA2E9B2D181DF7F2FB8D2BAEC133C8DBA0A3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b597da2e9b2d181df7f2fb8d2baec133c8dba0a3"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x548d72f1, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x548d72f1, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x54262014, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x4b73)) returned 1 [0174.988] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0174.989] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B597DA2E9B2D181DF7F2FB8D2BAEC133C8DBA0A3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b597da2e9b2d181df7f2fb8d2baec133c8dba0a3"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B597DA2E9B2D181DF7F2FB8D2BAEC133C8DBA0A3.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b597da2e9b2d181df7f2fb8d2baec133c8dba0a3.xuy")) returned 1 [0174.990] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B5C3109D53713A832971D24FDC110840B57CEBCE", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B5C3109D53713A832971D24FDC110840B57CEBCE", lpFilePart=0x0) returned 0x85 [0174.990] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0174.990] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B5C3109D53713A832971D24FDC110840B57CEBCE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b5c3109d53713a832971d24fdc110840b57cebce"), fInfoLevelId=0x0, lpFileInformation=0x21e1ee0 | out: lpFileInformation=0x21e1ee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4e89099, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc4e89099, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xc50c5407, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x2c8e)) returned 1 [0174.990] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0174.990] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B5C3109D53713A832971D24FDC110840B57CEBCE", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B5C3109D53713A832971D24FDC110840B57CEBCE", lpFilePart=0x0) returned 0x85 [0174.990] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0174.990] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B5C3109D53713A832971D24FDC110840B57CEBCE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b5c3109d53713a832971d24fdc110840b57cebce"), fInfoLevelId=0x0, lpFileInformation=0x21e20e0 | out: lpFileInformation=0x21e20e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4e89099, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc4e89099, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xc50c5407, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x2c8e)) returned 1 [0174.990] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0174.990] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B5C3109D53713A832971D24FDC110840B57CEBCE", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B5C3109D53713A832971D24FDC110840B57CEBCE", lpFilePart=0x0) returned 0x85 [0174.990] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0174.990] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B5C3109D53713A832971D24FDC110840B57CEBCE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b5c3109d53713a832971d24fdc110840b57cebce"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0174.991] GetFileType (hFile=0x444) returned 0x1 [0174.991] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0174.992] GetFileType (hFile=0x444) returned 0x1 [0174.992] ReadFile (in: hFile=0x444, lpBuffer=0x21e4610, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x21e4610*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0175.010] CloseHandle (hObject=0x444) returned 1 [0175.010] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B5C3109D53713A832971D24FDC110840B57CEBCE", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B5C3109D53713A832971D24FDC110840B57CEBCE", lpFilePart=0x0) returned 0x85 [0175.010] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0175.010] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B5C3109D53713A832971D24FDC110840B57CEBCE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b5c3109d53713a832971d24fdc110840b57cebce"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0175.011] GetFileType (hFile=0x444) returned 0x1 [0175.011] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0175.011] GetFileType (hFile=0x444) returned 0x1 [0175.011] WriteFile (in: hFile=0x444, lpBuffer=0x21e22c0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x21e22c0*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0175.011] CloseHandle (hObject=0x444) returned 1 [0175.011] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B5C3109D53713A832971D24FDC110840B57CEBCE", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B5C3109D53713A832971D24FDC110840B57CEBCE", lpFilePart=0x0) returned 0x85 [0175.012] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B5C3109D53713A832971D24FDC110840B57CEBCE.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B5C3109D53713A832971D24FDC110840B57CEBCE.xuy", lpFilePart=0x0) returned 0x89 [0175.012] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0175.012] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B5C3109D53713A832971D24FDC110840B57CEBCE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b5c3109d53713a832971d24fdc110840b57cebce"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4e89099, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc4e89099, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x542887bb, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2c8e)) returned 1 [0175.012] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0175.012] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B5C3109D53713A832971D24FDC110840B57CEBCE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b5c3109d53713a832971d24fdc110840b57cebce"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B5C3109D53713A832971D24FDC110840B57CEBCE.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b5c3109d53713a832971d24fdc110840b57cebce.xuy")) returned 1 [0175.014] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B63CBF55658040EDBEDECC3844D1774F5E740A67", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B63CBF55658040EDBEDECC3844D1774F5E740A67", lpFilePart=0x0) returned 0x85 [0175.014] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0175.014] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B63CBF55658040EDBEDECC3844D1774F5E740A67" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b63cbf55658040edbedecc3844d1774f5e740a67"), fInfoLevelId=0x0, lpFileInformation=0x2260bb8 | out: lpFileInformation=0x2260bb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b16de53, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x7b16de53, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x7b16de53, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x4d2)) returned 1 [0175.014] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0175.014] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B63CBF55658040EDBEDECC3844D1774F5E740A67", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B63CBF55658040EDBEDECC3844D1774F5E740A67", lpFilePart=0x0) returned 0x85 [0175.014] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0175.014] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B63CBF55658040EDBEDECC3844D1774F5E740A67" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b63cbf55658040edbedecc3844d1774f5e740a67"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0175.015] GetFileType (hFile=0x444) returned 0x1 [0175.015] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0175.015] GetFileType (hFile=0x444) returned 0x1 [0175.015] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x4d2 [0175.015] ReadFile (in: hFile=0x444, lpBuffer=0x22614a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x22614a8*, lpNumberOfBytesRead=0x3be5c8*=0x4d2, lpOverlapped=0x0) returned 1 [0175.025] CloseHandle (hObject=0x444) returned 1 [0175.069] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B63CBF55658040EDBEDECC3844D1774F5E740A67", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B63CBF55658040EDBEDECC3844D1774F5E740A67", lpFilePart=0x0) returned 0x85 [0175.069] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0175.069] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B63CBF55658040EDBEDECC3844D1774F5E740A67" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b63cbf55658040edbedecc3844d1774f5e740a67"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0175.071] GetFileType (hFile=0x444) returned 0x1 [0175.071] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0175.071] GetFileType (hFile=0x444) returned 0x1 [0175.071] WriteFile (in: hFile=0x444, lpBuffer=0x22d9da0*, nNumberOfBytesToWrite=0x4e0, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x22d9da0*, lpNumberOfBytesWritten=0x3be4d8*=0x4e0, lpOverlapped=0x0) returned 1 [0175.072] CloseHandle (hObject=0x444) returned 1 [0175.072] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B63CBF55658040EDBEDECC3844D1774F5E740A67", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B63CBF55658040EDBEDECC3844D1774F5E740A67", lpFilePart=0x0) returned 0x85 [0175.072] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B63CBF55658040EDBEDECC3844D1774F5E740A67.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B63CBF55658040EDBEDECC3844D1774F5E740A67.xuy", lpFilePart=0x0) returned 0x89 [0175.072] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0175.072] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B63CBF55658040EDBEDECC3844D1774F5E740A67" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b63cbf55658040edbedecc3844d1774f5e740a67"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b16de53, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x7b16de53, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x54320d08, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x4e0)) returned 1 [0175.072] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0175.072] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B63CBF55658040EDBEDECC3844D1774F5E740A67" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b63cbf55658040edbedecc3844d1774f5e740a67"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B63CBF55658040EDBEDECC3844D1774F5E740A67.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b63cbf55658040edbedecc3844d1774f5e740a67.xuy")) returned 1 [0175.074] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B73E4A4438B9B71F020E7D4B54AE283770E47CA7", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B73E4A4438B9B71F020E7D4B54AE283770E47CA7", lpFilePart=0x0) returned 0x85 [0175.074] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0175.074] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B73E4A4438B9B71F020E7D4B54AE283770E47CA7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b73e4a4438b9b71f020e7d4b54ae283770e47ca7"), fInfoLevelId=0x0, lpFileInformation=0x22db160 | out: lpFileInformation=0x22db160*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ef4860b, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3ef4860b, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x7d5592a7, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x22f3)) returned 1 [0175.074] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0175.074] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B73E4A4438B9B71F020E7D4B54AE283770E47CA7", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B73E4A4438B9B71F020E7D4B54AE283770E47CA7", lpFilePart=0x0) returned 0x85 [0175.075] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0175.075] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B73E4A4438B9B71F020E7D4B54AE283770E47CA7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b73e4a4438b9b71f020e7d4b54ae283770e47ca7"), fInfoLevelId=0x0, lpFileInformation=0x22db360 | out: lpFileInformation=0x22db360*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ef4860b, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3ef4860b, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x7d5592a7, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x22f3)) returned 1 [0175.075] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0175.075] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B73E4A4438B9B71F020E7D4B54AE283770E47CA7", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B73E4A4438B9B71F020E7D4B54AE283770E47CA7", lpFilePart=0x0) returned 0x85 [0175.075] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0175.075] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B73E4A4438B9B71F020E7D4B54AE283770E47CA7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b73e4a4438b9b71f020e7d4b54ae283770e47ca7"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0175.076] GetFileType (hFile=0x444) returned 0x1 [0175.076] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0175.076] GetFileType (hFile=0x444) returned 0x1 [0175.076] ReadFile (in: hFile=0x444, lpBuffer=0x22dd890, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x22dd890*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0175.088] CloseHandle (hObject=0x444) returned 1 [0175.088] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B73E4A4438B9B71F020E7D4B54AE283770E47CA7", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B73E4A4438B9B71F020E7D4B54AE283770E47CA7", lpFilePart=0x0) returned 0x85 [0175.088] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0175.088] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B73E4A4438B9B71F020E7D4B54AE283770E47CA7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b73e4a4438b9b71f020e7d4b54ae283770e47ca7"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0175.088] GetFileType (hFile=0x444) returned 0x1 [0175.088] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0175.088] GetFileType (hFile=0x444) returned 0x1 [0175.088] WriteFile (in: hFile=0x444, lpBuffer=0x22db540*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x22db540*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0175.088] CloseHandle (hObject=0x444) returned 1 [0175.089] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B73E4A4438B9B71F020E7D4B54AE283770E47CA7", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B73E4A4438B9B71F020E7D4B54AE283770E47CA7", lpFilePart=0x0) returned 0x85 [0175.089] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B73E4A4438B9B71F020E7D4B54AE283770E47CA7.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B73E4A4438B9B71F020E7D4B54AE283770E47CA7.xuy", lpFilePart=0x0) returned 0x89 [0175.089] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0175.089] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B73E4A4438B9B71F020E7D4B54AE283770E47CA7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b73e4a4438b9b71f020e7d4b54ae283770e47ca7"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ef4860b, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3ef4860b, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x54346ef1, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x22f3)) returned 1 [0175.089] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0175.089] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B73E4A4438B9B71F020E7D4B54AE283770E47CA7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b73e4a4438b9b71f020e7d4b54ae283770e47ca7"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B73E4A4438B9B71F020E7D4B54AE283770E47CA7.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b73e4a4438b9b71f020e7d4b54ae283770e47ca7.xuy")) returned 1 [0175.090] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B7A20C0210C3F0C6DD2ECC8BE3DE39ECDF9BBCF2", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B7A20C0210C3F0C6DD2ECC8BE3DE39ECDF9BBCF2", lpFilePart=0x0) returned 0x85 [0175.091] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0175.091] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B7A20C0210C3F0C6DD2ECC8BE3DE39ECDF9BBCF2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b7a20c0210c3f0c6dd2ecc8be3de39ecdf9bbcf2"), fInfoLevelId=0x0, lpFileInformation=0x2359e38 | out: lpFileInformation=0x2359e38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5fdb102c, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x5fdb102c, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x5fdb5e29, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x4d2)) returned 1 [0175.091] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0175.091] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B7A20C0210C3F0C6DD2ECC8BE3DE39ECDF9BBCF2", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B7A20C0210C3F0C6DD2ECC8BE3DE39ECDF9BBCF2", lpFilePart=0x0) returned 0x85 [0175.091] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0175.091] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B7A20C0210C3F0C6DD2ECC8BE3DE39ECDF9BBCF2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b7a20c0210c3f0c6dd2ecc8be3de39ecdf9bbcf2"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0175.091] GetFileType (hFile=0x444) returned 0x1 [0175.091] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0175.091] GetFileType (hFile=0x444) returned 0x1 [0175.091] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x4d2 [0175.091] ReadFile (in: hFile=0x444, lpBuffer=0x235a728, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x235a728*, lpNumberOfBytesRead=0x3be5c8*=0x4d2, lpOverlapped=0x0) returned 1 [0175.102] CloseHandle (hObject=0x444) returned 1 [0175.174] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B7A20C0210C3F0C6DD2ECC8BE3DE39ECDF9BBCF2", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B7A20C0210C3F0C6DD2ECC8BE3DE39ECDF9BBCF2", lpFilePart=0x0) returned 0x85 [0175.174] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0175.174] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B7A20C0210C3F0C6DD2ECC8BE3DE39ECDF9BBCF2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b7a20c0210c3f0c6dd2ecc8be3de39ecdf9bbcf2"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0175.176] GetFileType (hFile=0x444) returned 0x1 [0175.176] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0175.176] GetFileType (hFile=0x444) returned 0x1 [0175.176] WriteFile (in: hFile=0x444, lpBuffer=0x21d5b08*, nNumberOfBytesToWrite=0x4e0, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x21d5b08*, lpNumberOfBytesWritten=0x3be4d8*=0x4e0, lpOverlapped=0x0) returned 1 [0175.177] CloseHandle (hObject=0x444) returned 1 [0175.177] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B7A20C0210C3F0C6DD2ECC8BE3DE39ECDF9BBCF2", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B7A20C0210C3F0C6DD2ECC8BE3DE39ECDF9BBCF2", lpFilePart=0x0) returned 0x85 [0175.177] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B7A20C0210C3F0C6DD2ECC8BE3DE39ECDF9BBCF2.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B7A20C0210C3F0C6DD2ECC8BE3DE39ECDF9BBCF2.xuy", lpFilePart=0x0) returned 0x89 [0175.177] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0175.177] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B7A20C0210C3F0C6DD2ECC8BE3DE39ECDF9BBCF2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b7a20c0210c3f0c6dd2ecc8be3de39ecdf9bbcf2"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5fdb102c, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x5fdb102c, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x5442bfe9, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x4e0)) returned 1 [0175.177] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0175.177] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B7A20C0210C3F0C6DD2ECC8BE3DE39ECDF9BBCF2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b7a20c0210c3f0c6dd2ecc8be3de39ecdf9bbcf2"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B7A20C0210C3F0C6DD2ECC8BE3DE39ECDF9BBCF2.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b7a20c0210c3f0c6dd2ecc8be3de39ecdf9bbcf2.xuy")) returned 1 [0175.179] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B813D1E65F59ECE607454F649DFF306AB7917F43", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B813D1E65F59ECE607454F649DFF306AB7917F43", lpFilePart=0x0) returned 0x85 [0175.179] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0175.179] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B813D1E65F59ECE607454F649DFF306AB7917F43" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b813d1e65f59ece607454f649dff306ab7917f43"), fInfoLevelId=0x0, lpFileInformation=0x21d6ec8 | out: lpFileInformation=0x21d6ec8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x544d135a, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x544d135a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x544d135a, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x208b6)) returned 1 [0175.179] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0175.179] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B813D1E65F59ECE607454F649DFF306AB7917F43", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B813D1E65F59ECE607454F649DFF306AB7917F43", lpFilePart=0x0) returned 0x85 [0175.179] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0175.179] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B813D1E65F59ECE607454F649DFF306AB7917F43" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b813d1e65f59ece607454f649dff306ab7917f43"), fInfoLevelId=0x0, lpFileInformation=0x21d70c8 | out: lpFileInformation=0x21d70c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x544d135a, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x544d135a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x544d135a, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x208b6)) returned 1 [0175.179] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0175.179] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B813D1E65F59ECE607454F649DFF306AB7917F43", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B813D1E65F59ECE607454F649DFF306AB7917F43", lpFilePart=0x0) returned 0x85 [0175.179] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0175.179] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B813D1E65F59ECE607454F649DFF306AB7917F43" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b813d1e65f59ece607454f649dff306ab7917f43"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0175.180] GetFileType (hFile=0x444) returned 0x1 [0175.180] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0175.180] GetFileType (hFile=0x444) returned 0x1 [0175.180] ReadFile (in: hFile=0x444, lpBuffer=0x21d95f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x21d95f8*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0175.228] CloseHandle (hObject=0x444) returned 1 [0175.228] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B813D1E65F59ECE607454F649DFF306AB7917F43", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B813D1E65F59ECE607454F649DFF306AB7917F43", lpFilePart=0x0) returned 0x85 [0175.228] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0175.228] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B813D1E65F59ECE607454F649DFF306AB7917F43" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b813d1e65f59ece607454f649dff306ab7917f43"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0175.229] GetFileType (hFile=0x444) returned 0x1 [0175.229] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0175.229] GetFileType (hFile=0x444) returned 0x1 [0175.229] WriteFile (in: hFile=0x444, lpBuffer=0x21d72a8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x21d72a8*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0175.229] CloseHandle (hObject=0x444) returned 1 [0175.229] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B813D1E65F59ECE607454F649DFF306AB7917F43", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B813D1E65F59ECE607454F649DFF306AB7917F43", lpFilePart=0x0) returned 0x85 [0175.229] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B813D1E65F59ECE607454F649DFF306AB7917F43.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B813D1E65F59ECE607454F649DFF306AB7917F43.xuy", lpFilePart=0x0) returned 0x89 [0175.229] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0175.229] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B813D1E65F59ECE607454F649DFF306AB7917F43" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b813d1e65f59ece607454f649dff306ab7917f43"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x544d135a, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x544d135a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x5449e35a, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x208b6)) returned 1 [0175.229] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0175.229] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B813D1E65F59ECE607454F649DFF306AB7917F43" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b813d1e65f59ece607454f649dff306ab7917f43"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B813D1E65F59ECE607454F649DFF306AB7917F43.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b813d1e65f59ece607454f649dff306ab7917f43.xuy")) returned 1 [0175.231] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B8FEE01834958B679C82EA25187620814CF36041", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B8FEE01834958B679C82EA25187620814CF36041", lpFilePart=0x0) returned 0x85 [0175.231] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0175.231] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B8FEE01834958B679C82EA25187620814CF36041" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b8fee01834958b679c82ea25187620814cf36041"), fInfoLevelId=0x0, lpFileInformation=0x2255ba0 | out: lpFileInformation=0x2255ba0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87c06ad0, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x87c06ad0, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x87c091d9, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x303a)) returned 1 [0175.231] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0175.231] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B8FEE01834958B679C82EA25187620814CF36041", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B8FEE01834958B679C82EA25187620814CF36041", lpFilePart=0x0) returned 0x85 [0175.231] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0175.231] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B8FEE01834958B679C82EA25187620814CF36041" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b8fee01834958b679c82ea25187620814cf36041"), fInfoLevelId=0x0, lpFileInformation=0x2255da0 | out: lpFileInformation=0x2255da0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87c06ad0, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x87c06ad0, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x87c091d9, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x303a)) returned 1 [0175.231] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0175.231] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B8FEE01834958B679C82EA25187620814CF36041", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B8FEE01834958B679C82EA25187620814CF36041", lpFilePart=0x0) returned 0x85 [0175.231] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0175.232] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B8FEE01834958B679C82EA25187620814CF36041" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b8fee01834958b679c82ea25187620814cf36041"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0175.233] GetFileType (hFile=0x444) returned 0x1 [0175.233] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0175.233] GetFileType (hFile=0x444) returned 0x1 [0175.233] ReadFile (in: hFile=0x444, lpBuffer=0x22582d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x22582d0*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0175.255] CloseHandle (hObject=0x444) returned 1 [0175.255] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B8FEE01834958B679C82EA25187620814CF36041", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B8FEE01834958B679C82EA25187620814CF36041", lpFilePart=0x0) returned 0x85 [0175.255] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0175.255] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B8FEE01834958B679C82EA25187620814CF36041" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b8fee01834958b679c82ea25187620814cf36041"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0175.256] GetFileType (hFile=0x444) returned 0x1 [0175.256] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0175.256] GetFileType (hFile=0x444) returned 0x1 [0175.256] WriteFile (in: hFile=0x444, lpBuffer=0x2255f80*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x2255f80*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0175.256] CloseHandle (hObject=0x444) returned 1 [0175.256] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B8FEE01834958B679C82EA25187620814CF36041", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B8FEE01834958B679C82EA25187620814CF36041", lpFilePart=0x0) returned 0x85 [0175.256] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B8FEE01834958B679C82EA25187620814CF36041.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B8FEE01834958B679C82EA25187620814CF36041.xuy", lpFilePart=0x0) returned 0x89 [0175.256] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0175.256] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B8FEE01834958B679C82EA25187620814CF36041" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b8fee01834958b679c82ea25187620814cf36041"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87c06ad0, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x87c06ad0, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x544ea8df, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x303a)) returned 1 [0175.257] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0175.257] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B8FEE01834958B679C82EA25187620814CF36041" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b8fee01834958b679c82ea25187620814cf36041"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B8FEE01834958B679C82EA25187620814CF36041.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b8fee01834958b679c82ea25187620814cf36041.xuy")) returned 1 [0175.258] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B9B97BD99314D1AF1C4620C4D93E36DFAE9E88EB", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B9B97BD99314D1AF1C4620C4D93E36DFAE9E88EB", lpFilePart=0x0) returned 0x85 [0175.258] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0175.259] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B9B97BD99314D1AF1C4620C4D93E36DFAE9E88EB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b9b97bd99314d1af1c4620c4d93e36dfae9e88eb"), fInfoLevelId=0x0, lpFileInformation=0x22d4878 | out: lpFileInformation=0x22d4878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61577ff1, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x61577ff1, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x61577ff1, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x1130)) returned 1 [0175.259] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0175.259] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B9B97BD99314D1AF1C4620C4D93E36DFAE9E88EB", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B9B97BD99314D1AF1C4620C4D93E36DFAE9E88EB", lpFilePart=0x0) returned 0x85 [0175.259] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0175.259] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B9B97BD99314D1AF1C4620C4D93E36DFAE9E88EB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b9b97bd99314d1af1c4620c4d93e36dfae9e88eb"), fInfoLevelId=0x0, lpFileInformation=0x22d4a78 | out: lpFileInformation=0x22d4a78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61577ff1, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x61577ff1, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x61577ff1, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x1130)) returned 1 [0175.259] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0175.259] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B9B97BD99314D1AF1C4620C4D93E36DFAE9E88EB", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B9B97BD99314D1AF1C4620C4D93E36DFAE9E88EB", lpFilePart=0x0) returned 0x85 [0175.259] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0175.259] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B9B97BD99314D1AF1C4620C4D93E36DFAE9E88EB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b9b97bd99314d1af1c4620c4d93e36dfae9e88eb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0175.260] GetFileType (hFile=0x444) returned 0x1 [0175.261] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0175.261] GetFileType (hFile=0x444) returned 0x1 [0175.261] ReadFile (in: hFile=0x444, lpBuffer=0x22d6fa8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x22d6fa8*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0175.321] CloseHandle (hObject=0x444) returned 1 [0175.321] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B9B97BD99314D1AF1C4620C4D93E36DFAE9E88EB", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B9B97BD99314D1AF1C4620C4D93E36DFAE9E88EB", lpFilePart=0x0) returned 0x85 [0175.321] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0175.321] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B9B97BD99314D1AF1C4620C4D93E36DFAE9E88EB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b9b97bd99314d1af1c4620c4d93e36dfae9e88eb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0175.322] GetFileType (hFile=0x444) returned 0x1 [0175.322] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0175.322] GetFileType (hFile=0x444) returned 0x1 [0175.322] WriteFile (in: hFile=0x444, lpBuffer=0x22d4c58*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x22d4c58*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0175.322] CloseHandle (hObject=0x444) returned 1 [0175.322] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B9B97BD99314D1AF1C4620C4D93E36DFAE9E88EB", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B9B97BD99314D1AF1C4620C4D93E36DFAE9E88EB", lpFilePart=0x0) returned 0x85 [0175.322] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B9B97BD99314D1AF1C4620C4D93E36DFAE9E88EB.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B9B97BD99314D1AF1C4620C4D93E36DFAE9E88EB.xuy", lpFilePart=0x0) returned 0x89 [0175.322] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0175.322] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B9B97BD99314D1AF1C4620C4D93E36DFAE9E88EB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b9b97bd99314d1af1c4620c4d93e36dfae9e88eb"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61577ff1, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x61577ff1, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x545832b4, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0175.322] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0175.323] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B9B97BD99314D1AF1C4620C4D93E36DFAE9E88EB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b9b97bd99314d1af1c4620c4d93e36dfae9e88eb"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B9B97BD99314D1AF1C4620C4D93E36DFAE9E88EB.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b9b97bd99314d1af1c4620c4d93e36dfae9e88eb.xuy")) returned 1 [0175.324] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BA200B5026A6777E410131AE059633F84E4B7980", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BA200B5026A6777E410131AE059633F84E4B7980", lpFilePart=0x0) returned 0x85 [0175.324] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0175.324] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BA200B5026A6777E410131AE059633F84E4B7980" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ba200b5026a6777e410131ae059633f84e4b7980"), fInfoLevelId=0x0, lpFileInformation=0x2353550 | out: lpFileInformation=0x2353550*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc50c5407, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc50c5407, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xc50c5407, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0xab0)) returned 1 [0175.324] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0175.324] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BA200B5026A6777E410131AE059633F84E4B7980", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BA200B5026A6777E410131AE059633F84E4B7980", lpFilePart=0x0) returned 0x85 [0175.325] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0175.325] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BA200B5026A6777E410131AE059633F84E4B7980" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ba200b5026a6777e410131ae059633f84e4b7980"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0175.325] GetFileType (hFile=0x444) returned 0x1 [0175.325] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0175.325] GetFileType (hFile=0x444) returned 0x1 [0175.325] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xab0 [0175.325] ReadFile (in: hFile=0x444, lpBuffer=0x2354418, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x2354418*, lpNumberOfBytesRead=0x3be5c8*=0xab0, lpOverlapped=0x0) returned 1 [0175.341] CloseHandle (hObject=0x444) returned 1 [0175.414] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BA200B5026A6777E410131AE059633F84E4B7980", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BA200B5026A6777E410131AE059633F84E4B7980", lpFilePart=0x0) returned 0x85 [0175.414] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0175.414] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BA200B5026A6777E410131AE059633F84E4B7980" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ba200b5026a6777e410131ae059633f84e4b7980"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0175.416] GetFileType (hFile=0x444) returned 0x1 [0175.416] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0175.416] GetFileType (hFile=0x444) returned 0x1 [0175.417] WriteFile (in: hFile=0x444, lpBuffer=0x21d04f8*, nNumberOfBytesToWrite=0xac0, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x21d04f8*, lpNumberOfBytesWritten=0x3be4d8*=0xac0, lpOverlapped=0x0) returned 1 [0175.417] CloseHandle (hObject=0x444) returned 1 [0175.417] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BA200B5026A6777E410131AE059633F84E4B7980", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BA200B5026A6777E410131AE059633F84E4B7980", lpFilePart=0x0) returned 0x85 [0175.418] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BA200B5026A6777E410131AE059633F84E4B7980.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BA200B5026A6777E410131AE059633F84E4B7980.xuy", lpFilePart=0x0) returned 0x89 [0175.418] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0175.418] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BA200B5026A6777E410131AE059633F84E4B7980" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ba200b5026a6777e410131ae059633f84e4b7980"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc50c5407, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc50c5407, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x54667ff4, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xac0)) returned 1 [0175.418] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0175.418] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BA200B5026A6777E410131AE059633F84E4B7980" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ba200b5026a6777e410131ae059633f84e4b7980"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BA200B5026A6777E410131AE059633F84E4B7980.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ba200b5026a6777e410131ae059633f84e4b7980.xuy")) returned 1 [0175.420] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BA683FB23A6D8343BE97A432E6C3E422A3740D93", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BA683FB23A6D8343BE97A432E6C3E422A3740D93", lpFilePart=0x0) returned 0x85 [0175.420] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0175.420] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BA683FB23A6D8343BE97A432E6C3E422A3740D93" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ba683fb23a6d8343be97a432e6c3e422a3740d93"), fInfoLevelId=0x0, lpFileInformation=0x21d18b8 | out: lpFileInformation=0x21d18b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2f3e215, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc2f3e215, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x3cb17f36, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0xec82)) returned 1 [0175.420] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0175.420] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BA683FB23A6D8343BE97A432E6C3E422A3740D93", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BA683FB23A6D8343BE97A432E6C3E422A3740D93", lpFilePart=0x0) returned 0x85 [0175.420] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0175.420] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BA683FB23A6D8343BE97A432E6C3E422A3740D93" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ba683fb23a6d8343be97a432e6c3e422a3740d93"), fInfoLevelId=0x0, lpFileInformation=0x21d1ab8 | out: lpFileInformation=0x21d1ab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2f3e215, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc2f3e215, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x3cb17f36, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0xec82)) returned 1 [0175.420] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0175.420] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BA683FB23A6D8343BE97A432E6C3E422A3740D93", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BA683FB23A6D8343BE97A432E6C3E422A3740D93", lpFilePart=0x0) returned 0x85 [0175.420] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0175.421] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BA683FB23A6D8343BE97A432E6C3E422A3740D93" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ba683fb23a6d8343be97a432e6c3e422a3740d93"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0175.421] GetFileType (hFile=0x444) returned 0x1 [0175.421] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0175.422] GetFileType (hFile=0x444) returned 0x1 [0175.422] ReadFile (in: hFile=0x444, lpBuffer=0x21d3fe8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x21d3fe8*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0175.452] CloseHandle (hObject=0x444) returned 1 [0175.452] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BA683FB23A6D8343BE97A432E6C3E422A3740D93", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BA683FB23A6D8343BE97A432E6C3E422A3740D93", lpFilePart=0x0) returned 0x85 [0175.452] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0175.452] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BA683FB23A6D8343BE97A432E6C3E422A3740D93" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ba683fb23a6d8343be97a432e6c3e422a3740d93"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0175.452] GetFileType (hFile=0x444) returned 0x1 [0175.452] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0175.452] GetFileType (hFile=0x444) returned 0x1 [0175.452] WriteFile (in: hFile=0x444, lpBuffer=0x21d1c98*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x21d1c98*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0175.453] CloseHandle (hObject=0x444) returned 1 [0175.453] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BA683FB23A6D8343BE97A432E6C3E422A3740D93", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BA683FB23A6D8343BE97A432E6C3E422A3740D93", lpFilePart=0x0) returned 0x85 [0175.453] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BA683FB23A6D8343BE97A432E6C3E422A3740D93.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BA683FB23A6D8343BE97A432E6C3E422A3740D93.xuy", lpFilePart=0x0) returned 0x89 [0175.453] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0175.453] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BA683FB23A6D8343BE97A432E6C3E422A3740D93" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ba683fb23a6d8343be97a432e6c3e422a3740d93"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2f3e215, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc2f3e215, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x546da736, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xec82)) returned 1 [0175.453] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0175.453] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BA683FB23A6D8343BE97A432E6C3E422A3740D93" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ba683fb23a6d8343be97a432e6c3e422a3740d93"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BA683FB23A6D8343BE97A432E6C3E422A3740D93.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ba683fb23a6d8343be97a432e6c3e422a3740d93.xuy")) returned 1 [0175.454] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BA743F1189037DB14B73915E4397924BCF1A176C", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BA743F1189037DB14B73915E4397924BCF1A176C", lpFilePart=0x0) returned 0x85 [0175.454] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0175.454] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BA743F1189037DB14B73915E4397924BCF1A176C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ba743f1189037db14b73915e4397924bcf1a176c"), fInfoLevelId=0x0, lpFileInformation=0x2250590 | out: lpFileInformation=0x2250590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f1d929c, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3f1d929c, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x3f1dba0c, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x4d4)) returned 1 [0175.455] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0175.455] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BA743F1189037DB14B73915E4397924BCF1A176C", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BA743F1189037DB14B73915E4397924BCF1A176C", lpFilePart=0x0) returned 0x85 [0175.455] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0175.455] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BA743F1189037DB14B73915E4397924BCF1A176C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ba743f1189037db14b73915e4397924bcf1a176c"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0175.455] GetFileType (hFile=0x444) returned 0x1 [0175.455] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0175.455] GetFileType (hFile=0x444) returned 0x1 [0175.455] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x4d4 [0175.455] ReadFile (in: hFile=0x444, lpBuffer=0x2250e80, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x2250e80*, lpNumberOfBytesRead=0x3be5c8*=0x4d4, lpOverlapped=0x0) returned 1 [0175.482] CloseHandle (hObject=0x444) returned 1 [0175.492] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BA743F1189037DB14B73915E4397924BCF1A176C", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BA743F1189037DB14B73915E4397924BCF1A176C", lpFilePart=0x0) returned 0x85 [0175.492] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0175.492] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BA743F1189037DB14B73915E4397924BCF1A176C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ba743f1189037db14b73915e4397924bcf1a176c"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0175.494] GetFileType (hFile=0x444) returned 0x1 [0175.494] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0175.494] GetFileType (hFile=0x444) returned 0x1 [0175.494] WriteFile (in: hFile=0x444, lpBuffer=0x22c9778*, nNumberOfBytesToWrite=0x4e0, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x22c9778*, lpNumberOfBytesWritten=0x3be4d8*=0x4e0, lpOverlapped=0x0) returned 1 [0175.495] CloseHandle (hObject=0x444) returned 1 [0175.495] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BA743F1189037DB14B73915E4397924BCF1A176C", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BA743F1189037DB14B73915E4397924BCF1A176C", lpFilePart=0x0) returned 0x85 [0175.495] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BA743F1189037DB14B73915E4397924BCF1A176C.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BA743F1189037DB14B73915E4397924BCF1A176C.xuy", lpFilePart=0x0) returned 0x89 [0175.495] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0175.495] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BA743F1189037DB14B73915E4397924BCF1A176C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ba743f1189037db14b73915e4397924bcf1a176c"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f1d929c, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3f1d929c, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x54726b51, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x4e0)) returned 1 [0175.495] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0175.495] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BA743F1189037DB14B73915E4397924BCF1A176C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ba743f1189037db14b73915e4397924bcf1a176c"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BA743F1189037DB14B73915E4397924BCF1A176C.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ba743f1189037db14b73915e4397924bcf1a176c.xuy")) returned 1 [0175.497] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BAA3409405F54BD7AA1EA463DD797DAC4CD168FA", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BAA3409405F54BD7AA1EA463DD797DAC4CD168FA", lpFilePart=0x0) returned 0x85 [0175.497] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0175.497] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BAA3409405F54BD7AA1EA463DD797DAC4CD168FA" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\baa3409405f54bd7aa1ea463dd797dac4cd168fa"), fInfoLevelId=0x0, lpFileInformation=0x22cab38 | out: lpFileInformation=0x22cab38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x868aa4fe, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x868aa4fe, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x868acc27, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x1c3d)) returned 1 [0175.497] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0175.497] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BAA3409405F54BD7AA1EA463DD797DAC4CD168FA", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BAA3409405F54BD7AA1EA463DD797DAC4CD168FA", lpFilePart=0x0) returned 0x85 [0175.497] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0175.497] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BAA3409405F54BD7AA1EA463DD797DAC4CD168FA" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\baa3409405f54bd7aa1ea463dd797dac4cd168fa"), fInfoLevelId=0x0, lpFileInformation=0x22cad38 | out: lpFileInformation=0x22cad38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x868aa4fe, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x868aa4fe, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x868acc27, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x1c3d)) returned 1 [0175.497] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0175.497] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BAA3409405F54BD7AA1EA463DD797DAC4CD168FA", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BAA3409405F54BD7AA1EA463DD797DAC4CD168FA", lpFilePart=0x0) returned 0x85 [0175.497] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0175.497] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BAA3409405F54BD7AA1EA463DD797DAC4CD168FA" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\baa3409405f54bd7aa1ea463dd797dac4cd168fa"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0175.498] GetFileType (hFile=0x444) returned 0x1 [0175.498] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0175.498] GetFileType (hFile=0x444) returned 0x1 [0175.498] ReadFile (in: hFile=0x444, lpBuffer=0x22cd268, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x22cd268*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0175.510] CloseHandle (hObject=0x444) returned 1 [0175.510] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BAA3409405F54BD7AA1EA463DD797DAC4CD168FA", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BAA3409405F54BD7AA1EA463DD797DAC4CD168FA", lpFilePart=0x0) returned 0x85 [0175.510] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0175.510] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BAA3409405F54BD7AA1EA463DD797DAC4CD168FA" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\baa3409405f54bd7aa1ea463dd797dac4cd168fa"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0175.511] GetFileType (hFile=0x444) returned 0x1 [0175.511] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0175.511] GetFileType (hFile=0x444) returned 0x1 [0175.511] WriteFile (in: hFile=0x444, lpBuffer=0x22caf18*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x22caf18*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0175.511] CloseHandle (hObject=0x444) returned 1 [0175.511] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BAA3409405F54BD7AA1EA463DD797DAC4CD168FA", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BAA3409405F54BD7AA1EA463DD797DAC4CD168FA", lpFilePart=0x0) returned 0x85 [0175.511] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BAA3409405F54BD7AA1EA463DD797DAC4CD168FA.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BAA3409405F54BD7AA1EA463DD797DAC4CD168FA.xuy", lpFilePart=0x0) returned 0x89 [0175.511] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0175.511] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BAA3409405F54BD7AA1EA463DD797DAC4CD168FA" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\baa3409405f54bd7aa1ea463dd797dac4cd168fa"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x868aa4fe, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x868aa4fe, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x5474d6d0, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0175.511] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0175.511] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BAA3409405F54BD7AA1EA463DD797DAC4CD168FA" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\baa3409405f54bd7aa1ea463dd797dac4cd168fa"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BAA3409405F54BD7AA1EA463DD797DAC4CD168FA.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\baa3409405f54bd7aa1ea463dd797dac4cd168fa.xuy")) returned 1 [0175.513] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BB649871EC4B0ED29F1EE47A8A2729C402D6FCF9", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BB649871EC4B0ED29F1EE47A8A2729C402D6FCF9", lpFilePart=0x0) returned 0x85 [0175.513] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0175.513] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BB649871EC4B0ED29F1EE47A8A2729C402D6FCF9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\bb649871ec4b0ed29f1ee47a8a2729c402d6fcf9"), fInfoLevelId=0x0, lpFileInformation=0x2349810 | out: lpFileInformation=0x2349810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0bc7b09, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xf0bc7b09, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0xf0bc7b09, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x13f4)) returned 1 [0175.513] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0175.513] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BB649871EC4B0ED29F1EE47A8A2729C402D6FCF9", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BB649871EC4B0ED29F1EE47A8A2729C402D6FCF9", lpFilePart=0x0) returned 0x85 [0175.513] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0175.513] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BB649871EC4B0ED29F1EE47A8A2729C402D6FCF9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\bb649871ec4b0ed29f1ee47a8a2729c402d6fcf9"), fInfoLevelId=0x0, lpFileInformation=0x2349a10 | out: lpFileInformation=0x2349a10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0bc7b09, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xf0bc7b09, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0xf0bc7b09, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x13f4)) returned 1 [0175.513] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0175.513] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BB649871EC4B0ED29F1EE47A8A2729C402D6FCF9", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BB649871EC4B0ED29F1EE47A8A2729C402D6FCF9", lpFilePart=0x0) returned 0x85 [0175.513] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0175.513] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BB649871EC4B0ED29F1EE47A8A2729C402D6FCF9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\bb649871ec4b0ed29f1ee47a8a2729c402d6fcf9"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0175.514] GetFileType (hFile=0x444) returned 0x1 [0175.514] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0175.514] GetFileType (hFile=0x444) returned 0x1 [0175.514] ReadFile (in: hFile=0x444, lpBuffer=0x234bf40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x234bf40*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0175.912] CloseHandle (hObject=0x444) returned 1 [0175.912] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BB649871EC4B0ED29F1EE47A8A2729C402D6FCF9", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BB649871EC4B0ED29F1EE47A8A2729C402D6FCF9", lpFilePart=0x0) returned 0x85 [0175.912] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0175.912] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BB649871EC4B0ED29F1EE47A8A2729C402D6FCF9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\bb649871ec4b0ed29f1ee47a8a2729c402d6fcf9"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0175.912] GetFileType (hFile=0x444) returned 0x1 [0175.912] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0175.912] GetFileType (hFile=0x444) returned 0x1 [0175.912] WriteFile (in: hFile=0x444, lpBuffer=0x2182fc8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x2182fc8*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0175.913] CloseHandle (hObject=0x444) returned 1 [0175.913] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BB649871EC4B0ED29F1EE47A8A2729C402D6FCF9", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BB649871EC4B0ED29F1EE47A8A2729C402D6FCF9", lpFilePart=0x0) returned 0x85 [0175.913] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BB649871EC4B0ED29F1EE47A8A2729C402D6FCF9.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BB649871EC4B0ED29F1EE47A8A2729C402D6FCF9.xuy", lpFilePart=0x0) returned 0x89 [0175.913] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0175.913] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BB649871EC4B0ED29F1EE47A8A2729C402D6FCF9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\bb649871ec4b0ed29f1ee47a8a2729c402d6fcf9"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0bc7b09, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xf0bc7b09, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x54b2cb00, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0175.913] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0175.913] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BB649871EC4B0ED29F1EE47A8A2729C402D6FCF9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\bb649871ec4b0ed29f1ee47a8a2729c402d6fcf9"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BB649871EC4B0ED29F1EE47A8A2729C402D6FCF9.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\bb649871ec4b0ed29f1ee47a8a2729c402d6fcf9.xuy")) returned 1 [0175.914] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BB73FAFA02C6691813606BD61843202D8CA8482C", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BB73FAFA02C6691813606BD61843202D8CA8482C", lpFilePart=0x0) returned 0x85 [0175.914] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0175.914] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BB73FAFA02C6691813606BD61843202D8CA8482C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\bb73fafa02c6691813606bd61843202d8ca8482c"), fInfoLevelId=0x0, lpFileInformation=0x21cd238 | out: lpFileInformation=0x21cd238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c768006, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x7c768006, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x7c768006, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0xa18)) returned 1 [0175.915] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0175.915] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BB73FAFA02C6691813606BD61843202D8CA8482C", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BB73FAFA02C6691813606BD61843202D8CA8482C", lpFilePart=0x0) returned 0x85 [0175.915] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0175.915] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BB73FAFA02C6691813606BD61843202D8CA8482C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\bb73fafa02c6691813606bd61843202d8ca8482c"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0175.915] GetFileType (hFile=0x444) returned 0x1 [0175.915] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0175.915] GetFileType (hFile=0x444) returned 0x1 [0175.915] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xa18 [0175.915] ReadFile (in: hFile=0x444, lpBuffer=0x21ce068, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x21ce068*, lpNumberOfBytesRead=0x3be5c8*=0xa18, lpOverlapped=0x0) returned 1 [0175.951] CloseHandle (hObject=0x444) returned 1 [0175.961] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BB73FAFA02C6691813606BD61843202D8CA8482C", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BB73FAFA02C6691813606BD61843202D8CA8482C", lpFilePart=0x0) returned 0x85 [0175.961] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0175.961] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BB73FAFA02C6691813606BD61843202D8CA8482C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\bb73fafa02c6691813606bd61843202d8ca8482c"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0175.963] GetFileType (hFile=0x444) returned 0x1 [0175.963] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0175.963] GetFileType (hFile=0x444) returned 0x1 [0175.963] WriteFile (in: hFile=0x444, lpBuffer=0x2248398*, nNumberOfBytesToWrite=0xa20, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x2248398*, lpNumberOfBytesWritten=0x3be4d8*=0xa20, lpOverlapped=0x0) returned 1 [0175.964] CloseHandle (hObject=0x444) returned 1 [0175.964] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BB73FAFA02C6691813606BD61843202D8CA8482C", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BB73FAFA02C6691813606BD61843202D8CA8482C", lpFilePart=0x0) returned 0x85 [0175.964] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BB73FAFA02C6691813606BD61843202D8CA8482C.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BB73FAFA02C6691813606BD61843202D8CA8482C.xuy", lpFilePart=0x0) returned 0x89 [0175.964] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0175.964] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BB73FAFA02C6691813606BD61843202D8CA8482C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\bb73fafa02c6691813606bd61843202d8ca8482c"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c768006, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x7c768006, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x54b9f1fe, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xa20)) returned 1 [0175.964] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0175.964] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BB73FAFA02C6691813606BD61843202D8CA8482C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\bb73fafa02c6691813606bd61843202d8ca8482c"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BB73FAFA02C6691813606BD61843202D8CA8482C.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\bb73fafa02c6691813606bd61843202d8ca8482c.xuy")) returned 1 [0175.966] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BB85D650F29E20E233D5D93FAE448D4754C97228", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BB85D650F29E20E233D5D93FAE448D4754C97228", lpFilePart=0x0) returned 0x85 [0175.966] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0175.966] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BB85D650F29E20E233D5D93FAE448D4754C97228" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\bb85d650f29e20e233d5d93fae448d4754c97228"), fInfoLevelId=0x0, lpFileInformation=0x2249758 | out: lpFileInformation=0x2249758*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7bc3af80, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x7bc3af80, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x7bc3af80, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x4d2)) returned 1 [0175.966] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0175.966] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BB85D650F29E20E233D5D93FAE448D4754C97228", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BB85D650F29E20E233D5D93FAE448D4754C97228", lpFilePart=0x0) returned 0x85 [0175.967] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0175.967] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BB85D650F29E20E233D5D93FAE448D4754C97228" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\bb85d650f29e20e233d5d93fae448d4754c97228"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0175.967] GetFileType (hFile=0x444) returned 0x1 [0175.967] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0175.967] GetFileType (hFile=0x444) returned 0x1 [0175.967] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x4d2 [0175.967] ReadFile (in: hFile=0x444, lpBuffer=0x224a048, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x224a048*, lpNumberOfBytesRead=0x3be5c8*=0x4d2, lpOverlapped=0x0) returned 1 [0175.981] CloseHandle (hObject=0x444) returned 1 [0175.993] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BB85D650F29E20E233D5D93FAE448D4754C97228", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BB85D650F29E20E233D5D93FAE448D4754C97228", lpFilePart=0x0) returned 0x85 [0175.993] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0175.993] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BB85D650F29E20E233D5D93FAE448D4754C97228" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\bb85d650f29e20e233d5d93fae448d4754c97228"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0175.995] GetFileType (hFile=0x444) returned 0x1 [0175.995] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0175.995] GetFileType (hFile=0x444) returned 0x1 [0175.995] WriteFile (in: hFile=0x444, lpBuffer=0x22c2940*, nNumberOfBytesToWrite=0x4e0, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x22c2940*, lpNumberOfBytesWritten=0x3be4d8*=0x4e0, lpOverlapped=0x0) returned 1 [0176.028] CloseHandle (hObject=0x444) returned 1 [0176.029] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BB85D650F29E20E233D5D93FAE448D4754C97228", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BB85D650F29E20E233D5D93FAE448D4754C97228", lpFilePart=0x0) returned 0x85 [0176.029] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BB85D650F29E20E233D5D93FAE448D4754C97228.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BB85D650F29E20E233D5D93FAE448D4754C97228.xuy", lpFilePart=0x0) returned 0x89 [0176.029] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0176.029] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BB85D650F29E20E233D5D93FAE448D4754C97228" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\bb85d650f29e20e233d5d93fae448d4754c97228"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7bc3af80, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x7bc3af80, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x54c5dd71, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x4e0)) returned 1 [0176.029] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0176.029] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BB85D650F29E20E233D5D93FAE448D4754C97228" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\bb85d650f29e20e233d5d93fae448d4754c97228"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BB85D650F29E20E233D5D93FAE448D4754C97228.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\bb85d650f29e20e233d5d93fae448d4754c97228.xuy")) returned 1 [0176.030] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BB95D0607349D05725D5FE01D4FB300E319072AD", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BB95D0607349D05725D5FE01D4FB300E319072AD", lpFilePart=0x0) returned 0x85 [0176.030] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0176.030] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BB95D0607349D05725D5FE01D4FB300E319072AD" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\bb95d0607349d05725d5fe01d4fb300e319072ad"), fInfoLevelId=0x0, lpFileInformation=0x22c3d00 | out: lpFileInformation=0x22c3d00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf9a7122, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xd2e9e86f, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0xd2e9e86f, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x11d7)) returned 1 [0176.031] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0176.031] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BB95D0607349D05725D5FE01D4FB300E319072AD", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BB95D0607349D05725D5FE01D4FB300E319072AD", lpFilePart=0x0) returned 0x85 [0176.031] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0176.031] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BB95D0607349D05725D5FE01D4FB300E319072AD" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\bb95d0607349d05725d5fe01d4fb300e319072ad"), fInfoLevelId=0x0, lpFileInformation=0x22c3f00 | out: lpFileInformation=0x22c3f00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf9a7122, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xd2e9e86f, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0xd2e9e86f, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x11d7)) returned 1 [0176.031] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0176.031] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BB95D0607349D05725D5FE01D4FB300E319072AD", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BB95D0607349D05725D5FE01D4FB300E319072AD", lpFilePart=0x0) returned 0x85 [0176.031] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0176.031] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BB95D0607349D05725D5FE01D4FB300E319072AD" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\bb95d0607349d05725d5fe01d4fb300e319072ad"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0176.032] GetFileType (hFile=0x444) returned 0x1 [0176.032] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0176.032] GetFileType (hFile=0x444) returned 0x1 [0176.032] ReadFile (in: hFile=0x444, lpBuffer=0x22c6430, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x22c6430*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0176.044] CloseHandle (hObject=0x444) returned 1 [0176.044] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BB95D0607349D05725D5FE01D4FB300E319072AD", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BB95D0607349D05725D5FE01D4FB300E319072AD", lpFilePart=0x0) returned 0x85 [0176.044] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0176.044] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BB95D0607349D05725D5FE01D4FB300E319072AD" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\bb95d0607349d05725d5fe01d4fb300e319072ad"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0176.044] GetFileType (hFile=0x444) returned 0x1 [0176.045] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0176.045] GetFileType (hFile=0x444) returned 0x1 [0176.045] WriteFile (in: hFile=0x444, lpBuffer=0x22c40e0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x22c40e0*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0176.045] CloseHandle (hObject=0x444) returned 1 [0176.045] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BB95D0607349D05725D5FE01D4FB300E319072AD", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BB95D0607349D05725D5FE01D4FB300E319072AD", lpFilePart=0x0) returned 0x85 [0176.045] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BB95D0607349D05725D5FE01D4FB300E319072AD.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BB95D0607349D05725D5FE01D4FB300E319072AD.xuy", lpFilePart=0x0) returned 0x89 [0176.045] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0176.045] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BB95D0607349D05725D5FE01D4FB300E319072AD" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\bb95d0607349d05725d5fe01d4fb300e319072ad"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf9a7122, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xd2e9e86f, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x54c874c2, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0176.045] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0176.045] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BB95D0607349D05725D5FE01D4FB300E319072AD" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\bb95d0607349d05725d5fe01d4fb300e319072ad"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BB95D0607349D05725D5FE01D4FB300E319072AD.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\bb95d0607349d05725d5fe01d4fb300e319072ad.xuy")) returned 1 [0176.047] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BBA422756F6FA102DD0903F6FDF256B0DBF9724A", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BBA422756F6FA102DD0903F6FDF256B0DBF9724A", lpFilePart=0x0) returned 0x85 [0176.047] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0176.047] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BBA422756F6FA102DD0903F6FDF256B0DBF9724A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\bba422756f6fa102dd0903f6fdf256b0dbf9724a"), fInfoLevelId=0x0, lpFileInformation=0x23429d8 | out: lpFileInformation=0x23429d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61551d8c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x61551d8c, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x61551d8c, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x1139)) returned 1 [0176.047] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0176.047] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BBA422756F6FA102DD0903F6FDF256B0DBF9724A", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BBA422756F6FA102DD0903F6FDF256B0DBF9724A", lpFilePart=0x0) returned 0x85 [0176.047] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0176.047] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BBA422756F6FA102DD0903F6FDF256B0DBF9724A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\bba422756f6fa102dd0903f6fdf256b0dbf9724a"), fInfoLevelId=0x0, lpFileInformation=0x2342bd8 | out: lpFileInformation=0x2342bd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61551d8c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x61551d8c, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x61551d8c, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x1139)) returned 1 [0176.047] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0176.047] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BBA422756F6FA102DD0903F6FDF256B0DBF9724A", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BBA422756F6FA102DD0903F6FDF256B0DBF9724A", lpFilePart=0x0) returned 0x85 [0176.047] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0176.047] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BBA422756F6FA102DD0903F6FDF256B0DBF9724A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\bba422756f6fa102dd0903f6fdf256b0dbf9724a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0176.048] GetFileType (hFile=0x444) returned 0x1 [0176.048] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0176.048] GetFileType (hFile=0x444) returned 0x1 [0176.048] ReadFile (in: hFile=0x444, lpBuffer=0x2345108, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x2345108*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0176.130] CloseHandle (hObject=0x444) returned 1 [0176.130] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BBA422756F6FA102DD0903F6FDF256B0DBF9724A", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BBA422756F6FA102DD0903F6FDF256B0DBF9724A", lpFilePart=0x0) returned 0x85 [0176.130] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0176.130] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BBA422756F6FA102DD0903F6FDF256B0DBF9724A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\bba422756f6fa102dd0903f6fdf256b0dbf9724a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0176.131] GetFileType (hFile=0x444) returned 0x1 [0176.131] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0176.131] GetFileType (hFile=0x444) returned 0x1 [0176.131] WriteFile (in: hFile=0x444, lpBuffer=0x21887d8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x21887d8*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0176.131] CloseHandle (hObject=0x444) returned 1 [0176.131] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BBA422756F6FA102DD0903F6FDF256B0DBF9724A", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BBA422756F6FA102DD0903F6FDF256B0DBF9724A", lpFilePart=0x0) returned 0x85 [0176.131] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BBA422756F6FA102DD0903F6FDF256B0DBF9724A.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BBA422756F6FA102DD0903F6FDF256B0DBF9724A.xuy", lpFilePart=0x0) returned 0x89 [0176.131] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0176.131] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BBA422756F6FA102DD0903F6FDF256B0DBF9724A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\bba422756f6fa102dd0903f6fdf256b0dbf9724a"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61551d8c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x61551d8c, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x54d42f1c, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0176.131] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0176.131] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BBA422756F6FA102DD0903F6FDF256B0DBF9724A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\bba422756f6fa102dd0903f6fdf256b0dbf9724a"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BBA422756F6FA102DD0903F6FDF256B0DBF9724A.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\bba422756f6fa102dd0903f6fdf256b0dbf9724a.xuy")) returned 1 [0176.132] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BBFE014B08F9AEDB8B8BBEF18FAE9FE066488D9D", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BBFE014B08F9AEDB8B8BBEF18FAE9FE066488D9D", lpFilePart=0x0) returned 0x85 [0176.133] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0176.133] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BBFE014B08F9AEDB8B8BBEF18FAE9FE066488D9D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\bbfe014b08f9aedb8b8bbef18fae9fe066488d9d"), fInfoLevelId=0x0, lpFileInformation=0x21c6eb0 | out: lpFileInformation=0x21c6eb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86f1cce8, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x86f1cce8, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x86f21ae8, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x528)) returned 1 [0176.133] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0176.133] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BBFE014B08F9AEDB8B8BBEF18FAE9FE066488D9D", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BBFE014B08F9AEDB8B8BBEF18FAE9FE066488D9D", lpFilePart=0x0) returned 0x85 [0176.133] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0176.133] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BBFE014B08F9AEDB8B8BBEF18FAE9FE066488D9D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\bbfe014b08f9aedb8b8bbef18fae9fe066488d9d"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0176.133] GetFileType (hFile=0x444) returned 0x1 [0176.133] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0176.133] GetFileType (hFile=0x444) returned 0x1 [0176.133] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x528 [0176.133] ReadFile (in: hFile=0x444, lpBuffer=0x21c77f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x21c77f0*, lpNumberOfBytesRead=0x3be5c8*=0x528, lpOverlapped=0x0) returned 1 [0176.143] CloseHandle (hObject=0x444) returned 1 [0176.185] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BBFE014B08F9AEDB8B8BBEF18FAE9FE066488D9D", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BBFE014B08F9AEDB8B8BBEF18FAE9FE066488D9D", lpFilePart=0x0) returned 0x85 [0176.185] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0176.185] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BBFE014B08F9AEDB8B8BBEF18FAE9FE066488D9D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\bbfe014b08f9aedb8b8bbef18fae9fe066488d9d"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0176.187] GetFileType (hFile=0x444) returned 0x1 [0176.187] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0176.187] GetFileType (hFile=0x444) returned 0x1 [0176.187] WriteFile (in: hFile=0x444, lpBuffer=0x2240270*, nNumberOfBytesToWrite=0x530, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x2240270*, lpNumberOfBytesWritten=0x3be4d8*=0x530, lpOverlapped=0x0) returned 1 [0176.188] CloseHandle (hObject=0x444) returned 1 [0176.188] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BBFE014B08F9AEDB8B8BBEF18FAE9FE066488D9D", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BBFE014B08F9AEDB8B8BBEF18FAE9FE066488D9D", lpFilePart=0x0) returned 0x85 [0176.188] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BBFE014B08F9AEDB8B8BBEF18FAE9FE066488D9D.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BBFE014B08F9AEDB8B8BBEF18FAE9FE066488D9D.xuy", lpFilePart=0x0) returned 0x89 [0176.188] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0176.188] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BBFE014B08F9AEDB8B8BBEF18FAE9FE066488D9D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\bbfe014b08f9aedb8b8bbef18fae9fe066488d9d"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86f1cce8, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x86f1cce8, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x54ddb4e7, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x530)) returned 1 [0176.188] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0176.188] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BBFE014B08F9AEDB8B8BBEF18FAE9FE066488D9D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\bbfe014b08f9aedb8b8bbef18fae9fe066488d9d"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BBFE014B08F9AEDB8B8BBEF18FAE9FE066488D9D.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\bbfe014b08f9aedb8b8bbef18fae9fe066488d9d.xuy")) returned 1 [0176.190] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BC20A45B3DCD784841C1D1DB98F042F71D4A5C25", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BC20A45B3DCD784841C1D1DB98F042F71D4A5C25", lpFilePart=0x0) returned 0x85 [0176.190] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0176.190] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BC20A45B3DCD784841C1D1DB98F042F71D4A5C25" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\bc20a45b3dcd784841c1d1db98f042f71d4a5c25"), fInfoLevelId=0x0, lpFileInformation=0x2241630 | out: lpFileInformation=0x2241630*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x895dcdbd, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x895dcdbd, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x895dcdbd, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x8280)) returned 1 [0176.190] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0176.190] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BC20A45B3DCD784841C1D1DB98F042F71D4A5C25", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BC20A45B3DCD784841C1D1DB98F042F71D4A5C25", lpFilePart=0x0) returned 0x85 [0176.190] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0176.190] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BC20A45B3DCD784841C1D1DB98F042F71D4A5C25" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\bc20a45b3dcd784841c1d1db98f042f71d4a5c25"), fInfoLevelId=0x0, lpFileInformation=0x2241830 | out: lpFileInformation=0x2241830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x895dcdbd, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x895dcdbd, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x895dcdbd, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x8280)) returned 1 [0176.190] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0176.190] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BC20A45B3DCD784841C1D1DB98F042F71D4A5C25", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BC20A45B3DCD784841C1D1DB98F042F71D4A5C25", lpFilePart=0x0) returned 0x85 [0176.190] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0176.190] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BC20A45B3DCD784841C1D1DB98F042F71D4A5C25" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\bc20a45b3dcd784841c1d1db98f042f71d4a5c25"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0176.191] GetFileType (hFile=0x444) returned 0x1 [0176.191] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0176.191] GetFileType (hFile=0x444) returned 0x1 [0176.191] ReadFile (in: hFile=0x444, lpBuffer=0x2243d60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x2243d60*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0176.217] CloseHandle (hObject=0x444) returned 1 [0176.217] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BC20A45B3DCD784841C1D1DB98F042F71D4A5C25", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BC20A45B3DCD784841C1D1DB98F042F71D4A5C25", lpFilePart=0x0) returned 0x85 [0176.217] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0176.217] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BC20A45B3DCD784841C1D1DB98F042F71D4A5C25" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\bc20a45b3dcd784841c1d1db98f042f71d4a5c25"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0176.218] GetFileType (hFile=0x444) returned 0x1 [0176.218] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0176.218] GetFileType (hFile=0x444) returned 0x1 [0176.218] WriteFile (in: hFile=0x444, lpBuffer=0x2241a10*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x2241a10*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0176.218] CloseHandle (hObject=0x444) returned 1 [0176.218] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BC20A45B3DCD784841C1D1DB98F042F71D4A5C25", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BC20A45B3DCD784841C1D1DB98F042F71D4A5C25", lpFilePart=0x0) returned 0x85 [0176.218] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BC20A45B3DCD784841C1D1DB98F042F71D4A5C25.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BC20A45B3DCD784841C1D1DB98F042F71D4A5C25.xuy", lpFilePart=0x0) returned 0x89 [0176.218] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0176.218] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BC20A45B3DCD784841C1D1DB98F042F71D4A5C25" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\bc20a45b3dcd784841c1d1db98f042f71d4a5c25"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x895dcdbd, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x895dcdbd, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x54e27960, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x8280)) returned 1 [0176.218] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0176.218] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BC20A45B3DCD784841C1D1DB98F042F71D4A5C25" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\bc20a45b3dcd784841c1d1db98f042f71d4a5c25"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BC20A45B3DCD784841C1D1DB98F042F71D4A5C25.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\bc20a45b3dcd784841c1d1db98f042f71d4a5c25.xuy")) returned 1 [0176.219] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BD2A385A460E1BA73C47BBB5C799560B0FDBF002", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BD2A385A460E1BA73C47BBB5C799560B0FDBF002", lpFilePart=0x0) returned 0x85 [0176.219] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0176.220] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BD2A385A460E1BA73C47BBB5C799560B0FDBF002" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\bd2a385a460e1ba73c47bbb5c799560b0fdbf002"), fInfoLevelId=0x0, lpFileInformation=0x22c0308 | out: lpFileInformation=0x22c0308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x452d81ac, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x452d81ac, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x452d81ac, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0xc8d)) returned 1 [0176.220] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0176.220] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BD2A385A460E1BA73C47BBB5C799560B0FDBF002", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BD2A385A460E1BA73C47BBB5C799560B0FDBF002", lpFilePart=0x0) returned 0x85 [0176.220] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0176.220] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BD2A385A460E1BA73C47BBB5C799560B0FDBF002" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\bd2a385a460e1ba73c47bbb5c799560b0fdbf002"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0176.220] GetFileType (hFile=0x444) returned 0x1 [0176.220] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0176.220] GetFileType (hFile=0x444) returned 0x1 [0176.220] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xc8d [0176.220] ReadFile (in: hFile=0x444, lpBuffer=0x22c13b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x22c13b0*, lpNumberOfBytesRead=0x3be5c8*=0xc8d, lpOverlapped=0x0) returned 1 [0176.231] CloseHandle (hObject=0x444) returned 1 [0176.241] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BD2A385A460E1BA73C47BBB5C799560B0FDBF002", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BD2A385A460E1BA73C47BBB5C799560B0FDBF002", lpFilePart=0x0) returned 0x85 [0176.241] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0176.241] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BD2A385A460E1BA73C47BBB5C799560B0FDBF002" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\bd2a385a460e1ba73c47bbb5c799560b0fdbf002"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0176.243] GetFileType (hFile=0x444) returned 0x1 [0176.243] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0176.243] GetFileType (hFile=0x444) returned 0x1 [0176.243] WriteFile (in: hFile=0x444, lpBuffer=0x233c310*, nNumberOfBytesToWrite=0xc90, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x233c310*, lpNumberOfBytesWritten=0x3be4d8*=0xc90, lpOverlapped=0x0) returned 1 [0176.243] CloseHandle (hObject=0x444) returned 1 [0176.244] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BD2A385A460E1BA73C47BBB5C799560B0FDBF002", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BD2A385A460E1BA73C47BBB5C799560B0FDBF002", lpFilePart=0x0) returned 0x85 [0176.244] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BD2A385A460E1BA73C47BBB5C799560B0FDBF002.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BD2A385A460E1BA73C47BBB5C799560B0FDBF002.xuy", lpFilePart=0x0) returned 0x89 [0176.244] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0176.244] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BD2A385A460E1BA73C47BBB5C799560B0FDBF002" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\bd2a385a460e1ba73c47bbb5c799560b0fdbf002"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x452d81ac, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x452d81ac, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x54e4dc5b, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xc90)) returned 1 [0176.244] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0176.244] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BD2A385A460E1BA73C47BBB5C799560B0FDBF002" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\bd2a385a460e1ba73c47bbb5c799560b0fdbf002"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BD2A385A460E1BA73C47BBB5C799560B0FDBF002.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\bd2a385a460e1ba73c47bbb5c799560b0fdbf002.xuy")) returned 1 [0176.245] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BD9CCF25AFC4C5A7E0331EAA2BDCAA6D542CB0F8", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BD9CCF25AFC4C5A7E0331EAA2BDCAA6D542CB0F8", lpFilePart=0x0) returned 0x85 [0176.245] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0176.245] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BD9CCF25AFC4C5A7E0331EAA2BDCAA6D542CB0F8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\bd9ccf25afc4c5a7e0331eaa2bdcaa6d542cb0f8"), fInfoLevelId=0x0, lpFileInformation=0x233d6d0 | out: lpFileInformation=0x233d6d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf42186e9, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xf42186e9, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0xf421adfc, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x15d6)) returned 1 [0176.245] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0176.245] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BD9CCF25AFC4C5A7E0331EAA2BDCAA6D542CB0F8", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BD9CCF25AFC4C5A7E0331EAA2BDCAA6D542CB0F8", lpFilePart=0x0) returned 0x85 [0176.245] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0176.245] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BD9CCF25AFC4C5A7E0331EAA2BDCAA6D542CB0F8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\bd9ccf25afc4c5a7e0331eaa2bdcaa6d542cb0f8"), fInfoLevelId=0x0, lpFileInformation=0x233d8d0 | out: lpFileInformation=0x233d8d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf42186e9, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xf42186e9, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0xf421adfc, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x15d6)) returned 1 [0176.246] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0176.246] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BD9CCF25AFC4C5A7E0331EAA2BDCAA6D542CB0F8", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BD9CCF25AFC4C5A7E0331EAA2BDCAA6D542CB0F8", lpFilePart=0x0) returned 0x85 [0176.246] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0176.246] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BD9CCF25AFC4C5A7E0331EAA2BDCAA6D542CB0F8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\bd9ccf25afc4c5a7e0331eaa2bdcaa6d542cb0f8"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0176.262] GetFileType (hFile=0x444) returned 0x1 [0176.262] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0176.262] GetFileType (hFile=0x444) returned 0x1 [0176.262] ReadFile (in: hFile=0x444, lpBuffer=0x233fe00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x233fe00*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0176.303] CloseHandle (hObject=0x444) returned 1 [0176.304] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BD9CCF25AFC4C5A7E0331EAA2BDCAA6D542CB0F8", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BD9CCF25AFC4C5A7E0331EAA2BDCAA6D542CB0F8", lpFilePart=0x0) returned 0x85 [0176.304] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0176.304] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BD9CCF25AFC4C5A7E0331EAA2BDCAA6D542CB0F8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\bd9ccf25afc4c5a7e0331eaa2bdcaa6d542cb0f8"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0176.304] GetFileType (hFile=0x444) returned 0x1 [0176.304] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0176.304] GetFileType (hFile=0x444) returned 0x1 [0176.304] WriteFile (in: hFile=0x444, lpBuffer=0x2188818*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x2188818*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0176.304] CloseHandle (hObject=0x444) returned 1 [0176.304] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BD9CCF25AFC4C5A7E0331EAA2BDCAA6D542CB0F8", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BD9CCF25AFC4C5A7E0331EAA2BDCAA6D542CB0F8", lpFilePart=0x0) returned 0x85 [0176.304] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BD9CCF25AFC4C5A7E0331EAA2BDCAA6D542CB0F8.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BD9CCF25AFC4C5A7E0331EAA2BDCAA6D542CB0F8.xuy", lpFilePart=0x0) returned 0x89 [0176.305] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0176.305] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BD9CCF25AFC4C5A7E0331EAA2BDCAA6D542CB0F8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\bd9ccf25afc4c5a7e0331eaa2bdcaa6d542cb0f8"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf42186e9, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xf42186e9, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x54ee65e5, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0176.305] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0176.305] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BD9CCF25AFC4C5A7E0331EAA2BDCAA6D542CB0F8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\bd9ccf25afc4c5a7e0331eaa2bdcaa6d542cb0f8"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BD9CCF25AFC4C5A7E0331EAA2BDCAA6D542CB0F8.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\bd9ccf25afc4c5a7e0331eaa2bdcaa6d542cb0f8.xuy")) returned 1 [0176.306] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BEF8596945E3759F8E0654124D6A07A220D5B46A", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BEF8596945E3759F8E0654124D6A07A220D5B46A", lpFilePart=0x0) returned 0x85 [0176.306] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0176.306] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BEF8596945E3759F8E0654124D6A07A220D5B46A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\bef8596945e3759f8e0654124d6a07a220d5b46a"), fInfoLevelId=0x0, lpFileInformation=0x21bc3d0 | out: lpFileInformation=0x21bc3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d98691f, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x7d98691f, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x7d98691f, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0xac8)) returned 1 [0176.306] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0176.306] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BEF8596945E3759F8E0654124D6A07A220D5B46A", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BEF8596945E3759F8E0654124D6A07A220D5B46A", lpFilePart=0x0) returned 0x85 [0176.306] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0176.306] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BEF8596945E3759F8E0654124D6A07A220D5B46A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\bef8596945e3759f8e0654124d6a07a220d5b46a"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0176.307] GetFileType (hFile=0x444) returned 0x1 [0176.307] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0176.307] GetFileType (hFile=0x444) returned 0x1 [0176.307] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xac8 [0176.307] ReadFile (in: hFile=0x444, lpBuffer=0x21bd2b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x21bd2b0*, lpNumberOfBytesRead=0x3be5c8*=0xac8, lpOverlapped=0x0) returned 1 [0176.341] CloseHandle (hObject=0x444) returned 1 [0176.353] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BEF8596945E3759F8E0654124D6A07A220D5B46A", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BEF8596945E3759F8E0654124D6A07A220D5B46A", lpFilePart=0x0) returned 0x85 [0176.354] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0176.354] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BEF8596945E3759F8E0654124D6A07A220D5B46A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\bef8596945e3759f8e0654124d6a07a220d5b46a"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0176.355] GetFileType (hFile=0x444) returned 0x1 [0176.356] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0176.356] GetFileType (hFile=0x444) returned 0x1 [0176.356] WriteFile (in: hFile=0x444, lpBuffer=0x2237950*, nNumberOfBytesToWrite=0xad0, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x2237950*, lpNumberOfBytesWritten=0x3be4d8*=0xad0, lpOverlapped=0x0) returned 1 [0176.358] CloseHandle (hObject=0x444) returned 1 [0176.358] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BEF8596945E3759F8E0654124D6A07A220D5B46A", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BEF8596945E3759F8E0654124D6A07A220D5B46A", lpFilePart=0x0) returned 0x85 [0176.358] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BEF8596945E3759F8E0654124D6A07A220D5B46A.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BEF8596945E3759F8E0654124D6A07A220D5B46A.xuy", lpFilePart=0x0) returned 0x89 [0176.358] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0176.358] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BEF8596945E3759F8E0654124D6A07A220D5B46A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\bef8596945e3759f8e0654124d6a07a220d5b46a"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d98691f, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x7d98691f, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x54f7efa7, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xad0)) returned 1 [0176.358] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0176.358] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BEF8596945E3759F8E0654124D6A07A220D5B46A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\bef8596945e3759f8e0654124d6a07a220d5b46a"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BEF8596945E3759F8E0654124D6A07A220D5B46A.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\bef8596945e3759f8e0654124d6a07a220d5b46a.xuy")) returned 1 [0176.360] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BF6DC2BDF8544F1B381F1B153EB40266B0321B4D", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BF6DC2BDF8544F1B381F1B153EB40266B0321B4D", lpFilePart=0x0) returned 0x85 [0176.360] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0176.360] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BF6DC2BDF8544F1B381F1B153EB40266B0321B4D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\bf6dc2bdf8544f1b381f1b153eb40266b0321b4d"), fInfoLevelId=0x0, lpFileInformation=0x2238d10 | out: lpFileInformation=0x2238d10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x864f7000, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x864f7000, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x8652561c, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x4d2)) returned 1 [0176.360] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0176.360] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BF6DC2BDF8544F1B381F1B153EB40266B0321B4D", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BF6DC2BDF8544F1B381F1B153EB40266B0321B4D", lpFilePart=0x0) returned 0x85 [0176.360] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0176.360] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BF6DC2BDF8544F1B381F1B153EB40266B0321B4D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\bf6dc2bdf8544f1b381f1b153eb40266b0321b4d"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0176.360] GetFileType (hFile=0x444) returned 0x1 [0176.360] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0176.360] GetFileType (hFile=0x444) returned 0x1 [0176.360] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x4d2 [0176.360] ReadFile (in: hFile=0x444, lpBuffer=0x2239600, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x2239600*, lpNumberOfBytesRead=0x3be5c8*=0x4d2, lpOverlapped=0x0) returned 1 [0176.376] CloseHandle (hObject=0x444) returned 1 [0176.386] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BF6DC2BDF8544F1B381F1B153EB40266B0321B4D", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BF6DC2BDF8544F1B381F1B153EB40266B0321B4D", lpFilePart=0x0) returned 0x85 [0176.386] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0176.386] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BF6DC2BDF8544F1B381F1B153EB40266B0321B4D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\bf6dc2bdf8544f1b381f1b153eb40266b0321b4d"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0176.410] GetFileType (hFile=0x444) returned 0x1 [0176.410] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0176.410] GetFileType (hFile=0x444) returned 0x1 [0176.410] WriteFile (in: hFile=0x444, lpBuffer=0x22b1ef8*, nNumberOfBytesToWrite=0x4e0, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x22b1ef8*, lpNumberOfBytesWritten=0x3be4d8*=0x4e0, lpOverlapped=0x0) returned 1 [0176.411] CloseHandle (hObject=0x444) returned 1 [0176.411] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BF6DC2BDF8544F1B381F1B153EB40266B0321B4D", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BF6DC2BDF8544F1B381F1B153EB40266B0321B4D", lpFilePart=0x0) returned 0x85 [0176.411] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BF6DC2BDF8544F1B381F1B153EB40266B0321B4D.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BF6DC2BDF8544F1B381F1B153EB40266B0321B4D.xuy", lpFilePart=0x0) returned 0x89 [0176.411] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0176.411] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BF6DC2BDF8544F1B381F1B153EB40266B0321B4D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\bf6dc2bdf8544f1b381f1b153eb40266b0321b4d"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x864f7000, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x864f7000, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x54ff15e4, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x4e0)) returned 1 [0176.412] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0176.412] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BF6DC2BDF8544F1B381F1B153EB40266B0321B4D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\bf6dc2bdf8544f1b381f1b153eb40266b0321b4d"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BF6DC2BDF8544F1B381F1B153EB40266B0321B4D.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\bf6dc2bdf8544f1b381f1b153eb40266b0321b4d.xuy")) returned 1 [0176.413] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BF8487CB0D2C245B63FFCBF5B93C4378247F46D7", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BF8487CB0D2C245B63FFCBF5B93C4378247F46D7", lpFilePart=0x0) returned 0x85 [0176.413] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0176.413] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BF8487CB0D2C245B63FFCBF5B93C4378247F46D7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\bf8487cb0d2c245b63ffcbf5b93c4378247f46d7"), fInfoLevelId=0x0, lpFileInformation=0x22b32b8 | out: lpFileInformation=0x22b32b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc317a586, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc317a586, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x3cb643e3, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0xc731)) returned 1 [0176.413] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0176.413] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BF8487CB0D2C245B63FFCBF5B93C4378247F46D7", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BF8487CB0D2C245B63FFCBF5B93C4378247F46D7", lpFilePart=0x0) returned 0x85 [0176.413] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0176.413] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BF8487CB0D2C245B63FFCBF5B93C4378247F46D7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\bf8487cb0d2c245b63ffcbf5b93c4378247f46d7"), fInfoLevelId=0x0, lpFileInformation=0x22b34b8 | out: lpFileInformation=0x22b34b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc317a586, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc317a586, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x3cb643e3, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0xc731)) returned 1 [0176.413] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0176.413] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BF8487CB0D2C245B63FFCBF5B93C4378247F46D7", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BF8487CB0D2C245B63FFCBF5B93C4378247F46D7", lpFilePart=0x0) returned 0x85 [0176.413] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0176.414] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BF8487CB0D2C245B63FFCBF5B93C4378247F46D7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\bf8487cb0d2c245b63ffcbf5b93c4378247f46d7"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0176.414] GetFileType (hFile=0x444) returned 0x1 [0176.414] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0176.414] GetFileType (hFile=0x444) returned 0x1 [0176.415] ReadFile (in: hFile=0x444, lpBuffer=0x22b59e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x22b59e8*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0176.453] CloseHandle (hObject=0x444) returned 1 [0176.454] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BF8487CB0D2C245B63FFCBF5B93C4378247F46D7", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BF8487CB0D2C245B63FFCBF5B93C4378247F46D7", lpFilePart=0x0) returned 0x85 [0176.454] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0176.454] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BF8487CB0D2C245B63FFCBF5B93C4378247F46D7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\bf8487cb0d2c245b63ffcbf5b93c4378247f46d7"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0176.454] GetFileType (hFile=0x444) returned 0x1 [0176.454] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0176.454] GetFileType (hFile=0x444) returned 0x1 [0176.454] WriteFile (in: hFile=0x444, lpBuffer=0x22b3698*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x22b3698*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0176.454] CloseHandle (hObject=0x444) returned 1 [0176.454] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BF8487CB0D2C245B63FFCBF5B93C4378247F46D7", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BF8487CB0D2C245B63FFCBF5B93C4378247F46D7", lpFilePart=0x0) returned 0x85 [0176.454] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BF8487CB0D2C245B63FFCBF5B93C4378247F46D7.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BF8487CB0D2C245B63FFCBF5B93C4378247F46D7.xuy", lpFilePart=0x0) returned 0x89 [0176.454] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0176.455] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BF8487CB0D2C245B63FFCBF5B93C4378247F46D7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\bf8487cb0d2c245b63ffcbf5b93c4378247f46d7"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc317a586, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc317a586, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x55063e80, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xc731)) returned 1 [0176.455] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0176.455] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BF8487CB0D2C245B63FFCBF5B93C4378247F46D7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\bf8487cb0d2c245b63ffcbf5b93c4378247f46d7"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BF8487CB0D2C245B63FFCBF5B93C4378247F46D7.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\bf8487cb0d2c245b63ffcbf5b93c4378247f46d7.xuy")) returned 1 [0176.456] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C043FF37ECBC9B18AA5D7F2750E581BCCC99C9A7", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C043FF37ECBC9B18AA5D7F2750E581BCCC99C9A7", lpFilePart=0x0) returned 0x85 [0176.456] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0176.456] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C043FF37ECBC9B18AA5D7F2750E581BCCC99C9A7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c043ff37ecbc9b18aa5d7f2750e581bccc99c9a7"), fInfoLevelId=0x0, lpFileInformation=0x2331f90 | out: lpFileInformation=0x2331f90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48d30ecb, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x48d30ecb, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x48d30ecb, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0x4fb)) returned 1 [0176.456] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0176.456] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C043FF37ECBC9B18AA5D7F2750E581BCCC99C9A7", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C043FF37ECBC9B18AA5D7F2750E581BCCC99C9A7", lpFilePart=0x0) returned 0x85 [0176.456] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0176.456] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C043FF37ECBC9B18AA5D7F2750E581BCCC99C9A7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c043ff37ecbc9b18aa5d7f2750e581bccc99c9a7"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0176.456] GetFileType (hFile=0x444) returned 0x1 [0176.456] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0176.457] GetFileType (hFile=0x444) returned 0x1 [0176.457] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x4fb [0176.457] ReadFile (in: hFile=0x444, lpBuffer=0x23328a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x23328a8*, lpNumberOfBytesRead=0x3be5c8*=0x4fb, lpOverlapped=0x0) returned 1 [0176.469] CloseHandle (hObject=0x444) returned 1 [0176.833] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C043FF37ECBC9B18AA5D7F2750E581BCCC99C9A7", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C043FF37ECBC9B18AA5D7F2750E581BCCC99C9A7", lpFilePart=0x0) returned 0x85 [0176.833] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0176.833] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C043FF37ECBC9B18AA5D7F2750E581BCCC99C9A7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c043ff37ecbc9b18aa5d7f2750e581bccc99c9a7"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0176.835] GetFileType (hFile=0x444) returned 0x1 [0176.835] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0176.835] GetFileType (hFile=0x444) returned 0x1 [0176.835] WriteFile (in: hFile=0x444, lpBuffer=0x21a8588*, nNumberOfBytesToWrite=0x500, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x21a8588*, lpNumberOfBytesWritten=0x3be4d8*=0x500, lpOverlapped=0x0) returned 1 [0176.836] CloseHandle (hObject=0x444) returned 1 [0176.836] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C043FF37ECBC9B18AA5D7F2750E581BCCC99C9A7", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C043FF37ECBC9B18AA5D7F2750E581BCCC99C9A7", lpFilePart=0x0) returned 0x85 [0176.836] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C043FF37ECBC9B18AA5D7F2750E581BCCC99C9A7.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C043FF37ECBC9B18AA5D7F2750E581BCCC99C9A7.xuy", lpFilePart=0x0) returned 0x89 [0176.836] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0176.836] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C043FF37ECBC9B18AA5D7F2750E581BCCC99C9A7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c043ff37ecbc9b18aa5d7f2750e581bccc99c9a7"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48d30ecb, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x48d30ecb, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x553f9fc1, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x500)) returned 1 [0176.836] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0176.836] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C043FF37ECBC9B18AA5D7F2750E581BCCC99C9A7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c043ff37ecbc9b18aa5d7f2750e581bccc99c9a7"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C043FF37ECBC9B18AA5D7F2750E581BCCC99C9A7.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c043ff37ecbc9b18aa5d7f2750e581bccc99c9a7.xuy")) returned 1 [0176.838] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C06845AD909EAE17C1959FCD298671A28AC2C0DC", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C06845AD909EAE17C1959FCD298671A28AC2C0DC", lpFilePart=0x0) returned 0x85 [0176.838] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0176.838] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C06845AD909EAE17C1959FCD298671A28AC2C0DC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c06845ad909eae17c1959fcd298671a28ac2c0dc"), fInfoLevelId=0x0, lpFileInformation=0x21a9948 | out: lpFileInformation=0x21a9948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6152bc7d, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x6152bc7d, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x6152bc7d, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xe27)) returned 1 [0176.838] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0176.838] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C06845AD909EAE17C1959FCD298671A28AC2C0DC", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C06845AD909EAE17C1959FCD298671A28AC2C0DC", lpFilePart=0x0) returned 0x85 [0176.838] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0176.838] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C06845AD909EAE17C1959FCD298671A28AC2C0DC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c06845ad909eae17c1959fcd298671a28ac2c0dc"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0176.838] GetFileType (hFile=0x444) returned 0x1 [0176.838] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0176.838] GetFileType (hFile=0x444) returned 0x1 [0176.838] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xe27 [0176.838] ReadFile (in: hFile=0x444, lpBuffer=0x21aab88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x21aab88*, lpNumberOfBytesRead=0x3be5c8*=0xe27, lpOverlapped=0x0) returned 1 [0176.865] CloseHandle (hObject=0x444) returned 1 [0176.875] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C06845AD909EAE17C1959FCD298671A28AC2C0DC", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C06845AD909EAE17C1959FCD298671A28AC2C0DC", lpFilePart=0x0) returned 0x85 [0176.876] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0176.876] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C06845AD909EAE17C1959FCD298671A28AC2C0DC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c06845ad909eae17c1959fcd298671a28ac2c0dc"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0176.877] GetFileType (hFile=0x444) returned 0x1 [0176.877] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0176.877] GetFileType (hFile=0x444) returned 0x1 [0176.878] WriteFile (in: hFile=0x444, lpBuffer=0x2226310*, nNumberOfBytesToWrite=0xe30, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x2226310*, lpNumberOfBytesWritten=0x3be4d8*=0xe30, lpOverlapped=0x0) returned 1 [0176.878] CloseHandle (hObject=0x444) returned 1 [0176.878] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C06845AD909EAE17C1959FCD298671A28AC2C0DC", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C06845AD909EAE17C1959FCD298671A28AC2C0DC", lpFilePart=0x0) returned 0x85 [0176.878] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C06845AD909EAE17C1959FCD298671A28AC2C0DC.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C06845AD909EAE17C1959FCD298671A28AC2C0DC.xuy", lpFilePart=0x0) returned 0x89 [0176.879] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0176.879] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C06845AD909EAE17C1959FCD298671A28AC2C0DC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c06845ad909eae17c1959fcd298671a28ac2c0dc"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6152bc7d, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x6152bc7d, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x55469d22, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xe30)) returned 1 [0176.879] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0176.879] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C06845AD909EAE17C1959FCD298671A28AC2C0DC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c06845ad909eae17c1959fcd298671a28ac2c0dc"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C06845AD909EAE17C1959FCD298671A28AC2C0DC.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c06845ad909eae17c1959fcd298671a28ac2c0dc.xuy")) returned 1 [0176.880] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C1044B244F2C1CC0A3C149EB74F13AFC827487AC", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C1044B244F2C1CC0A3C149EB74F13AFC827487AC", lpFilePart=0x0) returned 0x85 [0176.880] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0176.880] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C1044B244F2C1CC0A3C149EB74F13AFC827487AC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c1044b244f2c1cc0a3c149eb74f13afc827487ac"), fInfoLevelId=0x0, lpFileInformation=0x22276d0 | out: lpFileInformation=0x22276d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x615c4498, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x615c4498, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x615c4498, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xf1b)) returned 1 [0176.880] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0176.881] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C1044B244F2C1CC0A3C149EB74F13AFC827487AC", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C1044B244F2C1CC0A3C149EB74F13AFC827487AC", lpFilePart=0x0) returned 0x85 [0176.881] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0176.881] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C1044B244F2C1CC0A3C149EB74F13AFC827487AC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c1044b244f2c1cc0a3c149eb74f13afc827487ac"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0176.881] GetFileType (hFile=0x444) returned 0x1 [0176.881] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0176.881] GetFileType (hFile=0x444) returned 0x1 [0176.881] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xf1b [0176.881] ReadFile (in: hFile=0x444, lpBuffer=0x2228a08, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x2228a08*, lpNumberOfBytesRead=0x3be5c8*=0xf1b, lpOverlapped=0x0) returned 1 [0176.882] CloseHandle (hObject=0x444) returned 1 [0176.893] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C1044B244F2C1CC0A3C149EB74F13AFC827487AC", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C1044B244F2C1CC0A3C149EB74F13AFC827487AC", lpFilePart=0x0) returned 0x85 [0176.893] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0176.893] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C1044B244F2C1CC0A3C149EB74F13AFC827487AC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c1044b244f2c1cc0a3c149eb74f13afc827487ac"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0176.895] GetFileType (hFile=0x444) returned 0x1 [0176.895] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0176.895] GetFileType (hFile=0x444) returned 0x1 [0176.895] WriteFile (in: hFile=0x444, lpBuffer=0x22a4638*, nNumberOfBytesToWrite=0xf20, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x22a4638*, lpNumberOfBytesWritten=0x3be4d8*=0xf20, lpOverlapped=0x0) returned 1 [0176.896] CloseHandle (hObject=0x444) returned 1 [0176.896] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C1044B244F2C1CC0A3C149EB74F13AFC827487AC", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C1044B244F2C1CC0A3C149EB74F13AFC827487AC", lpFilePart=0x0) returned 0x85 [0176.896] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C1044B244F2C1CC0A3C149EB74F13AFC827487AC.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C1044B244F2C1CC0A3C149EB74F13AFC827487AC.xuy", lpFilePart=0x0) returned 0x89 [0176.896] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0176.896] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C1044B244F2C1CC0A3C149EB74F13AFC827487AC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c1044b244f2c1cc0a3c149eb74f13afc827487ac"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x615c4498, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x615c4498, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x554901cb, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xf20)) returned 1 [0176.896] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0176.896] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C1044B244F2C1CC0A3C149EB74F13AFC827487AC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c1044b244f2c1cc0a3c149eb74f13afc827487ac"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C1044B244F2C1CC0A3C149EB74F13AFC827487AC.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c1044b244f2c1cc0a3c149eb74f13afc827487ac.xuy")) returned 1 [0176.897] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C17F7E66FBA7B9B70F058C9742C721ACF90CF849", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C17F7E66FBA7B9B70F058C9742C721ACF90CF849", lpFilePart=0x0) returned 0x85 [0176.897] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0176.897] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C17F7E66FBA7B9B70F058C9742C721ACF90CF849" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c17f7e66fba7b9b70f058c9742c721acf90cf849"), fInfoLevelId=0x0, lpFileInformation=0x22a59f8 | out: lpFileInformation=0x22a59f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a33eb46, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x4a33eb46, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x4a33eb46, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0x24707)) returned 1 [0176.897] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0176.898] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C17F7E66FBA7B9B70F058C9742C721ACF90CF849", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C17F7E66FBA7B9B70F058C9742C721ACF90CF849", lpFilePart=0x0) returned 0x85 [0176.898] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0176.898] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C17F7E66FBA7B9B70F058C9742C721ACF90CF849" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c17f7e66fba7b9b70f058c9742c721acf90cf849"), fInfoLevelId=0x0, lpFileInformation=0x22a5bf8 | out: lpFileInformation=0x22a5bf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a33eb46, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x4a33eb46, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x4a33eb46, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0x24707)) returned 1 [0176.898] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0176.898] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C17F7E66FBA7B9B70F058C9742C721ACF90CF849", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C17F7E66FBA7B9B70F058C9742C721ACF90CF849", lpFilePart=0x0) returned 0x85 [0176.898] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0176.898] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C17F7E66FBA7B9B70F058C9742C721ACF90CF849" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c17f7e66fba7b9b70f058c9742c721acf90cf849"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0176.899] GetFileType (hFile=0x444) returned 0x1 [0176.899] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0176.899] GetFileType (hFile=0x444) returned 0x1 [0176.899] ReadFile (in: hFile=0x444, lpBuffer=0x22a8128, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x22a8128*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0176.941] CloseHandle (hObject=0x444) returned 1 [0176.941] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C17F7E66FBA7B9B70F058C9742C721ACF90CF849", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C17F7E66FBA7B9B70F058C9742C721ACF90CF849", lpFilePart=0x0) returned 0x85 [0176.941] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0176.941] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C17F7E66FBA7B9B70F058C9742C721ACF90CF849" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c17f7e66fba7b9b70f058c9742c721acf90cf849"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0176.942] GetFileType (hFile=0x444) returned 0x1 [0176.942] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0176.942] GetFileType (hFile=0x444) returned 0x1 [0176.942] WriteFile (in: hFile=0x444, lpBuffer=0x22a5dd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x22a5dd8*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0176.942] CloseHandle (hObject=0x444) returned 1 [0176.942] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C17F7E66FBA7B9B70F058C9742C721ACF90CF849", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C17F7E66FBA7B9B70F058C9742C721ACF90CF849", lpFilePart=0x0) returned 0x85 [0176.942] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C17F7E66FBA7B9B70F058C9742C721ACF90CF849.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C17F7E66FBA7B9B70F058C9742C721ACF90CF849.xuy", lpFilePart=0x0) returned 0x89 [0176.942] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0176.942] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C17F7E66FBA7B9B70F058C9742C721ACF90CF849" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c17f7e66fba7b9b70f058c9742c721acf90cf849"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a33eb46, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x4a33eb46, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x55502537, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x24707)) returned 1 [0176.942] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0176.942] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C17F7E66FBA7B9B70F058C9742C721ACF90CF849" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c17f7e66fba7b9b70f058c9742c721acf90cf849"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C17F7E66FBA7B9B70F058C9742C721ACF90CF849.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c17f7e66fba7b9b70f058c9742c721acf90cf849.xuy")) returned 1 [0176.946] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C17F8EF9C7C1D479AB4CF2451B11109A30A54952", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C17F8EF9C7C1D479AB4CF2451B11109A30A54952", lpFilePart=0x0) returned 0x85 [0176.946] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0176.947] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C17F8EF9C7C1D479AB4CF2451B11109A30A54952" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c17f8ef9c7c1d479ab4cf2451b11109a30a54952"), fInfoLevelId=0x0, lpFileInformation=0x23246d0 | out: lpFileInformation=0x23246d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55260990, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x55260990, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x5f273687, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x2042)) returned 1 [0176.947] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0176.947] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C17F8EF9C7C1D479AB4CF2451B11109A30A54952", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C17F8EF9C7C1D479AB4CF2451B11109A30A54952", lpFilePart=0x0) returned 0x85 [0176.947] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0176.947] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C17F8EF9C7C1D479AB4CF2451B11109A30A54952" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c17f8ef9c7c1d479ab4cf2451b11109a30a54952"), fInfoLevelId=0x0, lpFileInformation=0x23248d0 | out: lpFileInformation=0x23248d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55260990, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x55260990, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x5f273687, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x2042)) returned 1 [0176.947] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0176.947] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C17F8EF9C7C1D479AB4CF2451B11109A30A54952", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C17F8EF9C7C1D479AB4CF2451B11109A30A54952", lpFilePart=0x0) returned 0x85 [0176.947] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0176.947] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C17F8EF9C7C1D479AB4CF2451B11109A30A54952" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c17f8ef9c7c1d479ab4cf2451b11109a30a54952"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0176.948] GetFileType (hFile=0x444) returned 0x1 [0176.948] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0176.948] GetFileType (hFile=0x444) returned 0x1 [0176.948] ReadFile (in: hFile=0x444, lpBuffer=0x2326e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x2326e00*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0177.082] CloseHandle (hObject=0x444) returned 1 [0177.082] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C17F8EF9C7C1D479AB4CF2451B11109A30A54952", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C17F8EF9C7C1D479AB4CF2451B11109A30A54952", lpFilePart=0x0) returned 0x85 [0177.082] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0177.082] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C17F8EF9C7C1D479AB4CF2451B11109A30A54952" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c17f8ef9c7c1d479ab4cf2451b11109a30a54952"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0177.083] GetFileType (hFile=0x444) returned 0x1 [0177.083] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0177.083] GetFileType (hFile=0x444) returned 0x1 [0177.083] WriteFile (in: hFile=0x444, lpBuffer=0x2188818*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x2188818*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0177.083] CloseHandle (hObject=0x444) returned 1 [0177.083] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C17F8EF9C7C1D479AB4CF2451B11109A30A54952", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C17F8EF9C7C1D479AB4CF2451B11109A30A54952", lpFilePart=0x0) returned 0x85 [0177.083] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C17F8EF9C7C1D479AB4CF2451B11109A30A54952.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C17F8EF9C7C1D479AB4CF2451B11109A30A54952.xuy", lpFilePart=0x0) returned 0x89 [0177.083] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0177.083] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C17F8EF9C7C1D479AB4CF2451B11109A30A54952" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c17f8ef9c7c1d479ab4cf2451b11109a30a54952"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55260990, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x55260990, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x55659bac, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2042)) returned 1 [0177.083] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0177.083] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C17F8EF9C7C1D479AB4CF2451B11109A30A54952" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c17f8ef9c7c1d479ab4cf2451b11109a30a54952"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C17F8EF9C7C1D479AB4CF2451B11109A30A54952.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c17f8ef9c7c1d479ab4cf2451b11109a30a54952.xuy")) returned 1 [0177.085] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C203BD0B4D1412AEFB65C250DD0D6AE7AE31F0FE", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C203BD0B4D1412AEFB65C250DD0D6AE7AE31F0FE", lpFilePart=0x0) returned 0x85 [0177.085] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0177.085] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C203BD0B4D1412AEFB65C250DD0D6AE7AE31F0FE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c203bd0b4d1412aefb65c250dd0d6ae7ae31f0fe"), fInfoLevelId=0x0, lpFileInformation=0x21a6058 | out: lpFileInformation=0x21a6058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2dbbb4b, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xf2dbbb4b, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0xf2dbe2a6, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x1252)) returned 1 [0177.086] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0177.086] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C203BD0B4D1412AEFB65C250DD0D6AE7AE31F0FE", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C203BD0B4D1412AEFB65C250DD0D6AE7AE31F0FE", lpFilePart=0x0) returned 0x85 [0177.086] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0177.086] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C203BD0B4D1412AEFB65C250DD0D6AE7AE31F0FE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c203bd0b4d1412aefb65c250dd0d6ae7ae31f0fe"), fInfoLevelId=0x0, lpFileInformation=0x21a6258 | out: lpFileInformation=0x21a6258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2dbbb4b, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xf2dbbb4b, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0xf2dbe2a6, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x1252)) returned 1 [0177.086] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0177.086] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C203BD0B4D1412AEFB65C250DD0D6AE7AE31F0FE", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C203BD0B4D1412AEFB65C250DD0D6AE7AE31F0FE", lpFilePart=0x0) returned 0x85 [0177.086] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0177.086] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C203BD0B4D1412AEFB65C250DD0D6AE7AE31F0FE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c203bd0b4d1412aefb65c250dd0d6ae7ae31f0fe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0177.087] GetFileType (hFile=0x444) returned 0x1 [0177.087] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0177.087] GetFileType (hFile=0x444) returned 0x1 [0177.087] ReadFile (in: hFile=0x444, lpBuffer=0x21a8788, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x21a8788*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0177.115] CloseHandle (hObject=0x444) returned 1 [0177.115] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C203BD0B4D1412AEFB65C250DD0D6AE7AE31F0FE", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C203BD0B4D1412AEFB65C250DD0D6AE7AE31F0FE", lpFilePart=0x0) returned 0x85 [0177.116] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0177.116] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C203BD0B4D1412AEFB65C250DD0D6AE7AE31F0FE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c203bd0b4d1412aefb65c250dd0d6ae7ae31f0fe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0177.116] GetFileType (hFile=0x444) returned 0x1 [0177.116] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0177.116] GetFileType (hFile=0x444) returned 0x1 [0177.116] WriteFile (in: hFile=0x444, lpBuffer=0x21a6438*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x21a6438*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0177.116] CloseHandle (hObject=0x444) returned 1 [0177.116] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C203BD0B4D1412AEFB65C250DD0D6AE7AE31F0FE", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C203BD0B4D1412AEFB65C250DD0D6AE7AE31F0FE", lpFilePart=0x0) returned 0x85 [0177.116] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C203BD0B4D1412AEFB65C250DD0D6AE7AE31F0FE.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C203BD0B4D1412AEFB65C250DD0D6AE7AE31F0FE.xuy", lpFilePart=0x0) returned 0x89 [0177.116] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0177.117] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C203BD0B4D1412AEFB65C250DD0D6AE7AE31F0FE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c203bd0b4d1412aefb65c250dd0d6ae7ae31f0fe"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2dbbb4b, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xf2dbbb4b, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x556a6392, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0177.117] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0177.117] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C203BD0B4D1412AEFB65C250DD0D6AE7AE31F0FE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c203bd0b4d1412aefb65c250dd0d6ae7ae31f0fe"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C203BD0B4D1412AEFB65C250DD0D6AE7AE31F0FE.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c203bd0b4d1412aefb65c250dd0d6ae7ae31f0fe.xuy")) returned 1 [0177.118] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C2763B00B8D7DCD5086BF4FAD37CBD7F56DD1F2A", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C2763B00B8D7DCD5086BF4FAD37CBD7F56DD1F2A", lpFilePart=0x0) returned 0x85 [0177.118] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0177.118] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C2763B00B8D7DCD5086BF4FAD37CBD7F56DD1F2A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c2763b00b8d7dcd5086bf4fad37cbd7f56dd1f2a"), fInfoLevelId=0x0, lpFileInformation=0x2224d30 | out: lpFileInformation=0x2224d30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88c50da6, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x88c50da6, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x88c55bd2, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x52a)) returned 1 [0177.120] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0177.120] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C2763B00B8D7DCD5086BF4FAD37CBD7F56DD1F2A", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C2763B00B8D7DCD5086BF4FAD37CBD7F56DD1F2A", lpFilePart=0x0) returned 0x85 [0177.121] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0177.121] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C2763B00B8D7DCD5086BF4FAD37CBD7F56DD1F2A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c2763b00b8d7dcd5086bf4fad37cbd7f56dd1f2a"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0177.121] GetFileType (hFile=0x444) returned 0x1 [0177.121] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0177.121] GetFileType (hFile=0x444) returned 0x1 [0177.121] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x52a [0177.121] ReadFile (in: hFile=0x444, lpBuffer=0x2225678, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x2225678*, lpNumberOfBytesRead=0x3be5c8*=0x52a, lpOverlapped=0x0) returned 1 [0177.140] CloseHandle (hObject=0x444) returned 1 [0177.151] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C2763B00B8D7DCD5086BF4FAD37CBD7F56DD1F2A", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C2763B00B8D7DCD5086BF4FAD37CBD7F56DD1F2A", lpFilePart=0x0) returned 0x85 [0177.151] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0177.151] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C2763B00B8D7DCD5086BF4FAD37CBD7F56DD1F2A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c2763b00b8d7dcd5086bf4fad37cbd7f56dd1f2a"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0177.153] GetFileType (hFile=0x444) returned 0x1 [0177.153] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0177.153] GetFileType (hFile=0x444) returned 0x1 [0177.153] WriteFile (in: hFile=0x444, lpBuffer=0x229e0f8*, nNumberOfBytesToWrite=0x530, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x229e0f8*, lpNumberOfBytesWritten=0x3be4d8*=0x530, lpOverlapped=0x0) returned 1 [0177.154] CloseHandle (hObject=0x444) returned 1 [0177.154] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C2763B00B8D7DCD5086BF4FAD37CBD7F56DD1F2A", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C2763B00B8D7DCD5086BF4FAD37CBD7F56DD1F2A", lpFilePart=0x0) returned 0x85 [0177.154] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C2763B00B8D7DCD5086BF4FAD37CBD7F56DD1F2A.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C2763B00B8D7DCD5086BF4FAD37CBD7F56DD1F2A.xuy", lpFilePart=0x0) returned 0x89 [0177.154] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0177.154] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C2763B00B8D7DCD5086BF4FAD37CBD7F56DD1F2A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c2763b00b8d7dcd5086bf4fad37cbd7f56dd1f2a"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88c50da6, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x88c50da6, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x55719557, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x530)) returned 1 [0177.154] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0177.154] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C2763B00B8D7DCD5086BF4FAD37CBD7F56DD1F2A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c2763b00b8d7dcd5086bf4fad37cbd7f56dd1f2a"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C2763B00B8D7DCD5086BF4FAD37CBD7F56DD1F2A.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c2763b00b8d7dcd5086bf4fad37cbd7f56dd1f2a.xuy")) returned 1 [0177.156] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C27D7A62FCB3822B15FE7A889EAC6EBCB8E81A80", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C27D7A62FCB3822B15FE7A889EAC6EBCB8E81A80", lpFilePart=0x0) returned 0x85 [0177.156] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0177.156] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C27D7A62FCB3822B15FE7A889EAC6EBCB8E81A80" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c27d7a62fcb3822b15fe7a889eac6ebcb8e81a80"), fInfoLevelId=0x0, lpFileInformation=0x229f4b8 | out: lpFileInformation=0x229f4b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3eeb5e63, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3eeb5e63, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x7d51e91e, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x156d)) returned 1 [0177.156] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0177.156] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C27D7A62FCB3822B15FE7A889EAC6EBCB8E81A80", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C27D7A62FCB3822B15FE7A889EAC6EBCB8E81A80", lpFilePart=0x0) returned 0x85 [0177.156] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0177.156] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C27D7A62FCB3822B15FE7A889EAC6EBCB8E81A80" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c27d7a62fcb3822b15fe7a889eac6ebcb8e81a80"), fInfoLevelId=0x0, lpFileInformation=0x229f6b8 | out: lpFileInformation=0x229f6b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3eeb5e63, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3eeb5e63, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x7d51e91e, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x156d)) returned 1 [0177.156] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0177.156] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C27D7A62FCB3822B15FE7A889EAC6EBCB8E81A80", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C27D7A62FCB3822B15FE7A889EAC6EBCB8E81A80", lpFilePart=0x0) returned 0x85 [0177.156] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0177.156] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C27D7A62FCB3822B15FE7A889EAC6EBCB8E81A80" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c27d7a62fcb3822b15fe7a889eac6ebcb8e81a80"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0177.157] GetFileType (hFile=0x444) returned 0x1 [0177.157] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0177.157] GetFileType (hFile=0x444) returned 0x1 [0177.157] ReadFile (in: hFile=0x444, lpBuffer=0x22a1be8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x22a1be8*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0177.188] CloseHandle (hObject=0x444) returned 1 [0177.189] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C27D7A62FCB3822B15FE7A889EAC6EBCB8E81A80", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C27D7A62FCB3822B15FE7A889EAC6EBCB8E81A80", lpFilePart=0x0) returned 0x85 [0177.189] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0177.189] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C27D7A62FCB3822B15FE7A889EAC6EBCB8E81A80" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c27d7a62fcb3822b15fe7a889eac6ebcb8e81a80"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0177.189] GetFileType (hFile=0x444) returned 0x1 [0177.189] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0177.189] GetFileType (hFile=0x444) returned 0x1 [0177.189] WriteFile (in: hFile=0x444, lpBuffer=0x229f898*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x229f898*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0177.190] CloseHandle (hObject=0x444) returned 1 [0177.190] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C27D7A62FCB3822B15FE7A889EAC6EBCB8E81A80", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C27D7A62FCB3822B15FE7A889EAC6EBCB8E81A80", lpFilePart=0x0) returned 0x85 [0177.190] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C27D7A62FCB3822B15FE7A889EAC6EBCB8E81A80.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C27D7A62FCB3822B15FE7A889EAC6EBCB8E81A80.xuy", lpFilePart=0x0) returned 0x89 [0177.190] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0177.190] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C27D7A62FCB3822B15FE7A889EAC6EBCB8E81A80" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c27d7a62fcb3822b15fe7a889eac6ebcb8e81a80"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3eeb5e63, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3eeb5e63, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x55764b3e, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0177.190] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0177.190] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C27D7A62FCB3822B15FE7A889EAC6EBCB8E81A80" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c27d7a62fcb3822b15fe7a889eac6ebcb8e81a80"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C27D7A62FCB3822B15FE7A889EAC6EBCB8E81A80.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c27d7a62fcb3822b15fe7a889eac6ebcb8e81a80.xuy")) returned 1 [0177.191] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C2E84E1A7C46C9B41E77A00A9483FC557EA0AB29", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C2E84E1A7C46C9B41E77A00A9483FC557EA0AB29", lpFilePart=0x0) returned 0x85 [0177.191] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0177.191] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C2E84E1A7C46C9B41E77A00A9483FC557EA0AB29" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c2e84e1a7c46c9b41e77a00a9483fc557ea0ab29"), fInfoLevelId=0x0, lpFileInformation=0x231e190 | out: lpFileInformation=0x231e190*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c1bb7a9, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3c1bb7a9, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xdda297e4, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x1c96)) returned 1 [0177.192] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0177.192] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C2E84E1A7C46C9B41E77A00A9483FC557EA0AB29", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C2E84E1A7C46C9B41E77A00A9483FC557EA0AB29", lpFilePart=0x0) returned 0x85 [0177.192] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0177.192] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C2E84E1A7C46C9B41E77A00A9483FC557EA0AB29" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c2e84e1a7c46c9b41e77a00a9483fc557ea0ab29"), fInfoLevelId=0x0, lpFileInformation=0x231e390 | out: lpFileInformation=0x231e390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c1bb7a9, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3c1bb7a9, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xdda297e4, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x1c96)) returned 1 [0177.192] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0177.192] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C2E84E1A7C46C9B41E77A00A9483FC557EA0AB29", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C2E84E1A7C46C9B41E77A00A9483FC557EA0AB29", lpFilePart=0x0) returned 0x85 [0177.192] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0177.192] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C2E84E1A7C46C9B41E77A00A9483FC557EA0AB29" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c2e84e1a7c46c9b41e77a00a9483fc557ea0ab29"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0177.193] GetFileType (hFile=0x444) returned 0x1 [0177.193] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0177.193] GetFileType (hFile=0x444) returned 0x1 [0177.193] ReadFile (in: hFile=0x444, lpBuffer=0x23208c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x23208c0*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0177.269] CloseHandle (hObject=0x444) returned 1 [0177.270] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C2E84E1A7C46C9B41E77A00A9483FC557EA0AB29", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C2E84E1A7C46C9B41E77A00A9483FC557EA0AB29", lpFilePart=0x0) returned 0x85 [0177.270] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0177.270] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C2E84E1A7C46C9B41E77A00A9483FC557EA0AB29" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c2e84e1a7c46c9b41e77a00a9483fc557ea0ab29"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0177.270] GetFileType (hFile=0x444) returned 0x1 [0177.270] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0177.270] GetFileType (hFile=0x444) returned 0x1 [0177.270] WriteFile (in: hFile=0x444, lpBuffer=0x2188818*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x2188818*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0177.270] CloseHandle (hObject=0x444) returned 1 [0177.270] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C2E84E1A7C46C9B41E77A00A9483FC557EA0AB29", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C2E84E1A7C46C9B41E77A00A9483FC557EA0AB29", lpFilePart=0x0) returned 0x85 [0177.271] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C2E84E1A7C46C9B41E77A00A9483FC557EA0AB29.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C2E84E1A7C46C9B41E77A00A9483FC557EA0AB29.xuy", lpFilePart=0x0) returned 0x89 [0177.271] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0177.271] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C2E84E1A7C46C9B41E77A00A9483FC557EA0AB29" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c2e84e1a7c46c9b41e77a00a9483fc557ea0ab29"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c1bb7a9, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3c1bb7a9, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x55823786, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0177.271] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0177.271] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C2E84E1A7C46C9B41E77A00A9483FC557EA0AB29" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c2e84e1a7c46c9b41e77a00a9483fc557ea0ab29"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C2E84E1A7C46C9B41E77A00A9483FC557EA0AB29.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c2e84e1a7c46c9b41e77a00a9483fc557ea0ab29.xuy")) returned 1 [0177.272] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C3357B699A03D6C47624A0BC4184ED6E2B8D6443", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C3357B699A03D6C47624A0BC4184ED6E2B8D6443", lpFilePart=0x0) returned 0x85 [0177.272] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0177.272] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C3357B699A03D6C47624A0BC4184ED6E2B8D6443" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c3357b699a03d6c47624a0bc4184ed6e2b8d6443"), fInfoLevelId=0x0, lpFileInformation=0x219ce38 | out: lpFileInformation=0x219ce38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ef32688, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3ef32688, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x7d548130, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x3543)) returned 1 [0177.272] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0177.272] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C3357B699A03D6C47624A0BC4184ED6E2B8D6443", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C3357B699A03D6C47624A0BC4184ED6E2B8D6443", lpFilePart=0x0) returned 0x85 [0177.272] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0177.272] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C3357B699A03D6C47624A0BC4184ED6E2B8D6443" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c3357b699a03d6c47624a0bc4184ed6e2b8d6443"), fInfoLevelId=0x0, lpFileInformation=0x219d038 | out: lpFileInformation=0x219d038*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ef32688, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3ef32688, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x7d548130, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x3543)) returned 1 [0177.273] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0177.273] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C3357B699A03D6C47624A0BC4184ED6E2B8D6443", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C3357B699A03D6C47624A0BC4184ED6E2B8D6443", lpFilePart=0x0) returned 0x85 [0177.273] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0177.273] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C3357B699A03D6C47624A0BC4184ED6E2B8D6443" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c3357b699a03d6c47624a0bc4184ed6e2b8d6443"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0177.274] GetFileType (hFile=0x444) returned 0x1 [0177.274] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0177.274] GetFileType (hFile=0x444) returned 0x1 [0177.274] ReadFile (in: hFile=0x444, lpBuffer=0x219f568, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x219f568*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0177.286] CloseHandle (hObject=0x444) returned 1 [0177.286] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C3357B699A03D6C47624A0BC4184ED6E2B8D6443", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C3357B699A03D6C47624A0BC4184ED6E2B8D6443", lpFilePart=0x0) returned 0x85 [0177.286] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0177.286] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C3357B699A03D6C47624A0BC4184ED6E2B8D6443" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c3357b699a03d6c47624a0bc4184ed6e2b8d6443"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0177.287] GetFileType (hFile=0x444) returned 0x1 [0177.287] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0177.287] GetFileType (hFile=0x444) returned 0x1 [0177.287] WriteFile (in: hFile=0x444, lpBuffer=0x219d218*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x219d218*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0177.287] CloseHandle (hObject=0x444) returned 1 [0177.287] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C3357B699A03D6C47624A0BC4184ED6E2B8D6443", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C3357B699A03D6C47624A0BC4184ED6E2B8D6443", lpFilePart=0x0) returned 0x85 [0177.287] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C3357B699A03D6C47624A0BC4184ED6E2B8D6443.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C3357B699A03D6C47624A0BC4184ED6E2B8D6443.xuy", lpFilePart=0x0) returned 0x89 [0177.287] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0177.287] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C3357B699A03D6C47624A0BC4184ED6E2B8D6443" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c3357b699a03d6c47624a0bc4184ed6e2b8d6443"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ef32688, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3ef32688, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x55849938, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x3543)) returned 1 [0177.287] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0177.287] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C3357B699A03D6C47624A0BC4184ED6E2B8D6443" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c3357b699a03d6c47624a0bc4184ed6e2b8d6443"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C3357B699A03D6C47624A0BC4184ED6E2B8D6443.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c3357b699a03d6c47624a0bc4184ed6e2b8d6443.xuy")) returned 1 [0177.289] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C4946D9CBAAC446A50CB86F04338E6F3F959EFC5", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C4946D9CBAAC446A50CB86F04338E6F3F959EFC5", lpFilePart=0x0) returned 0x85 [0177.289] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0177.289] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C4946D9CBAAC446A50CB86F04338E6F3F959EFC5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c4946d9cbaac446a50cb86f04338e6f3f959efc5"), fInfoLevelId=0x0, lpFileInformation=0x221bb10 | out: lpFileInformation=0x221bb10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48d30ecb, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x48d30ecb, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x48d30ecb, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0x50b)) returned 1 [0177.289] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0177.289] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C4946D9CBAAC446A50CB86F04338E6F3F959EFC5", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C4946D9CBAAC446A50CB86F04338E6F3F959EFC5", lpFilePart=0x0) returned 0x85 [0177.289] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0177.289] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C4946D9CBAAC446A50CB86F04338E6F3F959EFC5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c4946d9cbaac446a50cb86f04338e6f3f959efc5"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0177.289] GetFileType (hFile=0x444) returned 0x1 [0177.289] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0177.289] GetFileType (hFile=0x444) returned 0x1 [0177.289] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x50b [0177.289] ReadFile (in: hFile=0x444, lpBuffer=0x221c438, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x221c438*, lpNumberOfBytesRead=0x3be5c8*=0x50b, lpOverlapped=0x0) returned 1 [0177.292] CloseHandle (hObject=0x444) returned 1 [0177.303] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C4946D9CBAAC446A50CB86F04338E6F3F959EFC5", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C4946D9CBAAC446A50CB86F04338E6F3F959EFC5", lpFilePart=0x0) returned 0x85 [0177.303] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0177.303] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C4946D9CBAAC446A50CB86F04338E6F3F959EFC5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c4946d9cbaac446a50cb86f04338e6f3f959efc5"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0177.305] GetFileType (hFile=0x444) returned 0x1 [0177.305] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0177.305] GetFileType (hFile=0x444) returned 0x1 [0177.305] WriteFile (in: hFile=0x444, lpBuffer=0x2294e18*, nNumberOfBytesToWrite=0x510, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x2294e18*, lpNumberOfBytesWritten=0x3be4d8*=0x510, lpOverlapped=0x0) returned 1 [0177.306] CloseHandle (hObject=0x444) returned 1 [0177.306] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C4946D9CBAAC446A50CB86F04338E6F3F959EFC5", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C4946D9CBAAC446A50CB86F04338E6F3F959EFC5", lpFilePart=0x0) returned 0x85 [0177.306] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C4946D9CBAAC446A50CB86F04338E6F3F959EFC5.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C4946D9CBAAC446A50CB86F04338E6F3F959EFC5.xuy", lpFilePart=0x0) returned 0x89 [0177.306] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0177.306] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C4946D9CBAAC446A50CB86F04338E6F3F959EFC5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c4946d9cbaac446a50cb86f04338e6f3f959efc5"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48d30ecb, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x48d30ecb, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x5586fdf8, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x510)) returned 1 [0177.306] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0177.306] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C4946D9CBAAC446A50CB86F04338E6F3F959EFC5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c4946d9cbaac446a50cb86f04338e6f3f959efc5"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C4946D9CBAAC446A50CB86F04338E6F3F959EFC5.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c4946d9cbaac446a50cb86f04338e6f3f959efc5.xuy")) returned 1 [0177.308] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C505E7DD9508360B0CAC8EA23E2E4250812D4EA2", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C505E7DD9508360B0CAC8EA23E2E4250812D4EA2", lpFilePart=0x0) returned 0x85 [0177.308] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0177.308] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C505E7DD9508360B0CAC8EA23E2E4250812D4EA2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c505e7dd9508360b0cac8ea23e2e4250812d4ea2"), fInfoLevelId=0x0, lpFileInformation=0x22961d8 | out: lpFileInformation=0x22961d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5373e86, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc5373e86, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xc81003d8, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0xc16f)) returned 1 [0177.308] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0177.308] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C505E7DD9508360B0CAC8EA23E2E4250812D4EA2", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C505E7DD9508360B0CAC8EA23E2E4250812D4EA2", lpFilePart=0x0) returned 0x85 [0177.308] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0177.308] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C505E7DD9508360B0CAC8EA23E2E4250812D4EA2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c505e7dd9508360b0cac8ea23e2e4250812d4ea2"), fInfoLevelId=0x0, lpFileInformation=0x22963d8 | out: lpFileInformation=0x22963d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5373e86, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc5373e86, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xc81003d8, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0xc16f)) returned 1 [0177.308] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0177.308] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C505E7DD9508360B0CAC8EA23E2E4250812D4EA2", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C505E7DD9508360B0CAC8EA23E2E4250812D4EA2", lpFilePart=0x0) returned 0x85 [0177.308] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0177.308] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C505E7DD9508360B0CAC8EA23E2E4250812D4EA2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c505e7dd9508360b0cac8ea23e2e4250812d4ea2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0177.310] GetFileType (hFile=0x444) returned 0x1 [0177.310] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0177.310] GetFileType (hFile=0x444) returned 0x1 [0177.310] ReadFile (in: hFile=0x444, lpBuffer=0x2298908, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x2298908*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0177.332] CloseHandle (hObject=0x444) returned 1 [0177.332] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C505E7DD9508360B0CAC8EA23E2E4250812D4EA2", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C505E7DD9508360B0CAC8EA23E2E4250812D4EA2", lpFilePart=0x0) returned 0x85 [0177.332] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0177.332] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C505E7DD9508360B0CAC8EA23E2E4250812D4EA2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c505e7dd9508360b0cac8ea23e2e4250812d4ea2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0177.332] GetFileType (hFile=0x444) returned 0x1 [0177.332] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0177.332] GetFileType (hFile=0x444) returned 0x1 [0177.332] WriteFile (in: hFile=0x444, lpBuffer=0x22965b8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x22965b8*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0177.332] CloseHandle (hObject=0x444) returned 1 [0177.333] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C505E7DD9508360B0CAC8EA23E2E4250812D4EA2", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C505E7DD9508360B0CAC8EA23E2E4250812D4EA2", lpFilePart=0x0) returned 0x85 [0177.333] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C505E7DD9508360B0CAC8EA23E2E4250812D4EA2.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C505E7DD9508360B0CAC8EA23E2E4250812D4EA2.xuy", lpFilePart=0x0) returned 0x89 [0177.333] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0177.333] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C505E7DD9508360B0CAC8EA23E2E4250812D4EA2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c505e7dd9508360b0cac8ea23e2e4250812d4ea2"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5373e86, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc5373e86, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x558bc1ce, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xc16f)) returned 1 [0177.333] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0177.333] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C505E7DD9508360B0CAC8EA23E2E4250812D4EA2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c505e7dd9508360b0cac8ea23e2e4250812d4ea2"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C505E7DD9508360B0CAC8EA23E2E4250812D4EA2.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c505e7dd9508360b0cac8ea23e2e4250812d4ea2.xuy")) returned 1 [0177.334] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C60596C8FDDC477A7730AD04C3C8E1A8A0CF7376", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C60596C8FDDC477A7730AD04C3C8E1A8A0CF7376", lpFilePart=0x0) returned 0x85 [0177.334] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0177.334] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C60596C8FDDC477A7730AD04C3C8E1A8A0CF7376" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c60596c8fddc477a7730ad04c3c8e1a8a0cf7376"), fInfoLevelId=0x0, lpFileInformation=0x2314eb0 | out: lpFileInformation=0x2314eb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4768a8fe, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x4768a8fe, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x4768a8fe, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0x745)) returned 1 [0177.334] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0177.335] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C60596C8FDDC477A7730AD04C3C8E1A8A0CF7376", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C60596C8FDDC477A7730AD04C3C8E1A8A0CF7376", lpFilePart=0x0) returned 0x85 [0177.335] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0177.335] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C60596C8FDDC477A7730AD04C3C8E1A8A0CF7376" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c60596c8fddc477a7730ad04c3c8e1a8a0cf7376"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0177.335] GetFileType (hFile=0x444) returned 0x1 [0177.335] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0177.335] GetFileType (hFile=0x444) returned 0x1 [0177.335] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x745 [0177.335] ReadFile (in: hFile=0x444, lpBuffer=0x2315a10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x2315a10*, lpNumberOfBytesRead=0x3be5c8*=0x745, lpOverlapped=0x0) returned 1 [0177.362] CloseHandle (hObject=0x444) returned 1 [0177.379] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C60596C8FDDC477A7730AD04C3C8E1A8A0CF7376", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C60596C8FDDC477A7730AD04C3C8E1A8A0CF7376", lpFilePart=0x0) returned 0x85 [0177.379] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0177.379] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C60596C8FDDC477A7730AD04C3C8E1A8A0CF7376" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c60596c8fddc477a7730ad04c3c8e1a8a0cf7376"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0177.381] GetFileType (hFile=0x444) returned 0x1 [0177.381] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0177.381] GetFileType (hFile=0x444) returned 0x1 [0177.381] WriteFile (in: hFile=0x444, lpBuffer=0x218c4a8*, nNumberOfBytesToWrite=0x750, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x218c4a8*, lpNumberOfBytesWritten=0x3be4d8*=0x750, lpOverlapped=0x0) returned 1 [0177.382] CloseHandle (hObject=0x444) returned 1 [0177.382] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C60596C8FDDC477A7730AD04C3C8E1A8A0CF7376", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C60596C8FDDC477A7730AD04C3C8E1A8A0CF7376", lpFilePart=0x0) returned 0x85 [0177.382] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C60596C8FDDC477A7730AD04C3C8E1A8A0CF7376.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C60596C8FDDC477A7730AD04C3C8E1A8A0CF7376.xuy", lpFilePart=0x0) returned 0x89 [0177.382] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0177.382] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C60596C8FDDC477A7730AD04C3C8E1A8A0CF7376" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c60596c8fddc477a7730ad04c3c8e1a8a0cf7376"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4768a8fe, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x4768a8fe, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x5592ef26, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x750)) returned 1 [0177.382] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0177.382] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C60596C8FDDC477A7730AD04C3C8E1A8A0CF7376" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c60596c8fddc477a7730ad04c3c8e1a8a0cf7376"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C60596C8FDDC477A7730AD04C3C8E1A8A0CF7376.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c60596c8fddc477a7730ad04c3c8e1a8a0cf7376.xuy")) returned 1 [0177.383] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C6415D1859F2EA4DEF7B2F7F227E932F25E31921", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C6415D1859F2EA4DEF7B2F7F227E932F25E31921", lpFilePart=0x0) returned 0x85 [0177.383] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0177.383] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C6415D1859F2EA4DEF7B2F7F227E932F25E31921" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c6415d1859f2ea4def7b2f7f227e932f25e31921"), fInfoLevelId=0x0, lpFileInformation=0x218d868 | out: lpFileInformation=0x218d868*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8297dbc7, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x8297dbc7, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x829ae8f8, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x4d2)) returned 1 [0177.383] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0177.384] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C6415D1859F2EA4DEF7B2F7F227E932F25E31921", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C6415D1859F2EA4DEF7B2F7F227E932F25E31921", lpFilePart=0x0) returned 0x85 [0177.384] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0177.384] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C6415D1859F2EA4DEF7B2F7F227E932F25E31921" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c6415d1859f2ea4def7b2f7f227e932f25e31921"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0177.384] GetFileType (hFile=0x444) returned 0x1 [0177.384] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0177.384] GetFileType (hFile=0x444) returned 0x1 [0177.384] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x4d2 [0177.384] ReadFile (in: hFile=0x444, lpBuffer=0x218e158, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x218e158*, lpNumberOfBytesRead=0x3be5c8*=0x4d2, lpOverlapped=0x0) returned 1 [0177.385] CloseHandle (hObject=0x444) returned 1 [0177.422] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C6415D1859F2EA4DEF7B2F7F227E932F25E31921", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C6415D1859F2EA4DEF7B2F7F227E932F25E31921", lpFilePart=0x0) returned 0x85 [0177.422] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0177.422] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C6415D1859F2EA4DEF7B2F7F227E932F25E31921" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c6415d1859f2ea4def7b2f7f227e932f25e31921"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0177.424] GetFileType (hFile=0x444) returned 0x1 [0177.424] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0177.424] GetFileType (hFile=0x444) returned 0x1 [0177.425] WriteFile (in: hFile=0x444, lpBuffer=0x2206a50*, nNumberOfBytesToWrite=0x4e0, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x2206a50*, lpNumberOfBytesWritten=0x3be4d8*=0x4e0, lpOverlapped=0x0) returned 1 [0177.425] CloseHandle (hObject=0x444) returned 1 [0177.425] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C6415D1859F2EA4DEF7B2F7F227E932F25E31921", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C6415D1859F2EA4DEF7B2F7F227E932F25E31921", lpFilePart=0x0) returned 0x85 [0177.426] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C6415D1859F2EA4DEF7B2F7F227E932F25E31921.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C6415D1859F2EA4DEF7B2F7F227E932F25E31921.xuy", lpFilePart=0x0) returned 0x89 [0177.426] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0177.426] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C6415D1859F2EA4DEF7B2F7F227E932F25E31921" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c6415d1859f2ea4def7b2f7f227e932f25e31921"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8297dbc7, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x8297dbc7, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x559a117e, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x4e0)) returned 1 [0177.426] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0177.426] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C6415D1859F2EA4DEF7B2F7F227E932F25E31921" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c6415d1859f2ea4def7b2f7f227e932f25e31921"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C6415D1859F2EA4DEF7B2F7F227E932F25E31921.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c6415d1859f2ea4def7b2f7f227e932f25e31921.xuy")) returned 1 [0177.427] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C65FA3DCC52A2EE8F7F1055AADC2E4E39A1FCB55", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C65FA3DCC52A2EE8F7F1055AADC2E4E39A1FCB55", lpFilePart=0x0) returned 0x85 [0177.427] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0177.427] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C65FA3DCC52A2EE8F7F1055AADC2E4E39A1FCB55" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c65fa3dcc52a2ee8f7f1055aadc2e4e39a1fcb55"), fInfoLevelId=0x0, lpFileInformation=0x2207e10 | out: lpFileInformation=0x2207e10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf369a5b3, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xf369a5b3, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0xf67ac2ba, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x25c)) returned 1 [0177.427] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0177.427] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C65FA3DCC52A2EE8F7F1055AADC2E4E39A1FCB55", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C65FA3DCC52A2EE8F7F1055AADC2E4E39A1FCB55", lpFilePart=0x0) returned 0x85 [0177.427] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0177.427] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C65FA3DCC52A2EE8F7F1055AADC2E4E39A1FCB55" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c65fa3dcc52a2ee8f7f1055aadc2e4e39a1fcb55"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0177.428] GetFileType (hFile=0x444) returned 0x1 [0177.428] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0177.428] GetFileType (hFile=0x444) returned 0x1 [0177.428] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x25c [0177.428] ReadFile (in: hFile=0x444, lpBuffer=0x2208488, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x2208488*, lpNumberOfBytesRead=0x3be5c8*=0x25c, lpOverlapped=0x0) returned 1 [0177.429] CloseHandle (hObject=0x444) returned 1 [0177.440] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C65FA3DCC52A2EE8F7F1055AADC2E4E39A1FCB55", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C65FA3DCC52A2EE8F7F1055AADC2E4E39A1FCB55", lpFilePart=0x0) returned 0x85 [0177.440] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0177.440] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C65FA3DCC52A2EE8F7F1055AADC2E4E39A1FCB55" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c65fa3dcc52a2ee8f7f1055aadc2e4e39a1fcb55"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0177.442] GetFileType (hFile=0x444) returned 0x1 [0177.442] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0177.442] GetFileType (hFile=0x444) returned 0x1 [0177.442] WriteFile (in: hFile=0x444, lpBuffer=0x22800f8*, nNumberOfBytesToWrite=0x260, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x22800f8*, lpNumberOfBytesWritten=0x3be4d8*=0x260, lpOverlapped=0x0) returned 1 [0177.443] CloseHandle (hObject=0x444) returned 1 [0177.443] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C65FA3DCC52A2EE8F7F1055AADC2E4E39A1FCB55", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C65FA3DCC52A2EE8F7F1055AADC2E4E39A1FCB55", lpFilePart=0x0) returned 0x85 [0177.443] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C65FA3DCC52A2EE8F7F1055AADC2E4E39A1FCB55.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C65FA3DCC52A2EE8F7F1055AADC2E4E39A1FCB55.xuy", lpFilePart=0x0) returned 0x89 [0177.443] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0177.443] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C65FA3DCC52A2EE8F7F1055AADC2E4E39A1FCB55" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c65fa3dcc52a2ee8f7f1055aadc2e4e39a1fcb55"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf369a5b3, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xf369a5b3, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x559c74c7, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x260)) returned 1 [0177.443] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0177.443] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C65FA3DCC52A2EE8F7F1055AADC2E4E39A1FCB55" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c65fa3dcc52a2ee8f7f1055aadc2e4e39a1fcb55"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C65FA3DCC52A2EE8F7F1055AADC2E4E39A1FCB55.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c65fa3dcc52a2ee8f7f1055aadc2e4e39a1fcb55.xuy")) returned 1 [0177.445] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C672EB641E0E20E83D6B55B92050FD8E9BB04F8E", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C672EB641E0E20E83D6B55B92050FD8E9BB04F8E", lpFilePart=0x0) returned 0x85 [0177.445] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0177.445] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C672EB641E0E20E83D6B55B92050FD8E9BB04F8E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c672eb641e0e20e83d6b55b92050fd8e9bb04f8e"), fInfoLevelId=0x0, lpFileInformation=0x22814b8 | out: lpFileInformation=0x22814b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86e34dc1, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x86e34dc1, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x86e3c309, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x4d4)) returned 1 [0177.446] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0177.446] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C672EB641E0E20E83D6B55B92050FD8E9BB04F8E", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C672EB641E0E20E83D6B55B92050FD8E9BB04F8E", lpFilePart=0x0) returned 0x85 [0177.446] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0177.446] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C672EB641E0E20E83D6B55B92050FD8E9BB04F8E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c672eb641e0e20e83d6b55b92050fd8e9bb04f8e"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0177.446] GetFileType (hFile=0x444) returned 0x1 [0177.446] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0177.446] GetFileType (hFile=0x444) returned 0x1 [0177.446] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x4d4 [0177.446] ReadFile (in: hFile=0x444, lpBuffer=0x2281da8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x2281da8*, lpNumberOfBytesRead=0x3be5c8*=0x4d4, lpOverlapped=0x0) returned 1 [0177.466] CloseHandle (hObject=0x444) returned 1 [0177.476] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C672EB641E0E20E83D6B55B92050FD8E9BB04F8E", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C672EB641E0E20E83D6B55B92050FD8E9BB04F8E", lpFilePart=0x0) returned 0x85 [0177.476] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0177.476] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C672EB641E0E20E83D6B55B92050FD8E9BB04F8E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c672eb641e0e20e83d6b55b92050fd8e9bb04f8e"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0177.478] GetFileType (hFile=0x444) returned 0x1 [0177.478] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0177.478] GetFileType (hFile=0x444) returned 0x1 [0177.478] WriteFile (in: hFile=0x444, lpBuffer=0x22fa6a0*, nNumberOfBytesToWrite=0x4e0, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x22fa6a0*, lpNumberOfBytesWritten=0x3be4d8*=0x4e0, lpOverlapped=0x0) returned 1 [0177.479] CloseHandle (hObject=0x444) returned 1 [0177.479] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C672EB641E0E20E83D6B55B92050FD8E9BB04F8E", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C672EB641E0E20E83D6B55B92050FD8E9BB04F8E", lpFilePart=0x0) returned 0x85 [0177.479] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C672EB641E0E20E83D6B55B92050FD8E9BB04F8E.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C672EB641E0E20E83D6B55B92050FD8E9BB04F8E.xuy", lpFilePart=0x0) returned 0x89 [0177.479] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0177.479] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C672EB641E0E20E83D6B55B92050FD8E9BB04F8E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c672eb641e0e20e83d6b55b92050fd8e9bb04f8e"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86e34dc1, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x86e34dc1, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x55a13534, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x4e0)) returned 1 [0177.480] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0177.480] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C672EB641E0E20E83D6B55B92050FD8E9BB04F8E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c672eb641e0e20e83d6b55b92050fd8e9bb04f8e"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C672EB641E0E20E83D6B55B92050FD8E9BB04F8E.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c672eb641e0e20e83d6b55b92050fd8e9bb04f8e.xuy")) returned 1 [0177.481] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C6D0BE59F16FE678F1DF4EA4C7DEE37195801B33", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C6D0BE59F16FE678F1DF4EA4C7DEE37195801B33", lpFilePart=0x0) returned 0x85 [0177.481] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0177.481] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C6D0BE59F16FE678F1DF4EA4C7DEE37195801B33" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c6d0be59f16fe678f1df4ea4c7dee37195801b33"), fInfoLevelId=0x0, lpFileInformation=0x22fba60 | out: lpFileInformation=0x22fba60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b663d46, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x7b663d46, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x7b689fdc, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x4d2)) returned 1 [0177.481] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0177.481] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C6D0BE59F16FE678F1DF4EA4C7DEE37195801B33", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C6D0BE59F16FE678F1DF4EA4C7DEE37195801B33", lpFilePart=0x0) returned 0x85 [0177.481] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0177.481] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C6D0BE59F16FE678F1DF4EA4C7DEE37195801B33" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c6d0be59f16fe678f1df4ea4c7dee37195801b33"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0177.482] GetFileType (hFile=0x444) returned 0x1 [0177.482] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0177.482] GetFileType (hFile=0x444) returned 0x1 [0177.482] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x4d2 [0177.482] ReadFile (in: hFile=0x444, lpBuffer=0x22fc350, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x22fc350*, lpNumberOfBytesRead=0x3be5c8*=0x4d2, lpOverlapped=0x0) returned 1 [0177.495] CloseHandle (hObject=0x444) returned 1 [0177.505] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C6D0BE59F16FE678F1DF4EA4C7DEE37195801B33", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C6D0BE59F16FE678F1DF4EA4C7DEE37195801B33", lpFilePart=0x0) returned 0x85 [0177.505] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0177.505] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C6D0BE59F16FE678F1DF4EA4C7DEE37195801B33" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c6d0be59f16fe678f1df4ea4c7dee37195801b33"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0177.507] GetFileType (hFile=0x444) returned 0x1 [0177.507] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0177.507] GetFileType (hFile=0x444) returned 0x1 [0177.507] WriteFile (in: hFile=0x444, lpBuffer=0x2374c48*, nNumberOfBytesToWrite=0x4e0, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x2374c48*, lpNumberOfBytesWritten=0x3be4d8*=0x4e0, lpOverlapped=0x0) returned 1 [0177.509] CloseHandle (hObject=0x444) returned 1 [0177.509] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C6D0BE59F16FE678F1DF4EA4C7DEE37195801B33", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C6D0BE59F16FE678F1DF4EA4C7DEE37195801B33", lpFilePart=0x0) returned 0x85 [0177.509] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C6D0BE59F16FE678F1DF4EA4C7DEE37195801B33.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C6D0BE59F16FE678F1DF4EA4C7DEE37195801B33.xuy", lpFilePart=0x0) returned 0x89 [0177.509] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0177.509] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C6D0BE59F16FE678F1DF4EA4C7DEE37195801B33" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c6d0be59f16fe678f1df4ea4c7dee37195801b33"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b663d46, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x7b663d46, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x55a5fc5f, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x4e0)) returned 1 [0177.509] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0177.509] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C6D0BE59F16FE678F1DF4EA4C7DEE37195801B33" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c6d0be59f16fe678f1df4ea4c7dee37195801b33"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C6D0BE59F16FE678F1DF4EA4C7DEE37195801B33.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c6d0be59f16fe678f1df4ea4c7dee37195801b33.xuy")) returned 1 [0177.511] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C6D3FAD85D1C5DE4A6404132A8199E69DFE46883", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C6D3FAD85D1C5DE4A6404132A8199E69DFE46883", lpFilePart=0x0) returned 0x85 [0177.511] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0177.511] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C6D3FAD85D1C5DE4A6404132A8199E69DFE46883" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c6d3fad85d1c5de4a6404132a8199e69dfe46883"), fInfoLevelId=0x0, lpFileInformation=0x2376008 | out: lpFileInformation=0x2376008*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x946e0542, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x946e0542, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x946e2c74, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x1263)) returned 1 [0177.511] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0177.511] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C6D3FAD85D1C5DE4A6404132A8199E69DFE46883", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C6D3FAD85D1C5DE4A6404132A8199E69DFE46883", lpFilePart=0x0) returned 0x85 [0177.511] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0177.511] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C6D3FAD85D1C5DE4A6404132A8199E69DFE46883" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c6d3fad85d1c5de4a6404132a8199e69dfe46883"), fInfoLevelId=0x0, lpFileInformation=0x2376208 | out: lpFileInformation=0x2376208*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x946e0542, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x946e0542, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x946e2c74, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x1263)) returned 1 [0177.511] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0177.511] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C6D3FAD85D1C5DE4A6404132A8199E69DFE46883", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C6D3FAD85D1C5DE4A6404132A8199E69DFE46883", lpFilePart=0x0) returned 0x85 [0177.511] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0177.511] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C6D3FAD85D1C5DE4A6404132A8199E69DFE46883" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c6d3fad85d1c5de4a6404132a8199e69dfe46883"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0177.513] GetFileType (hFile=0x444) returned 0x1 [0177.513] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0177.514] GetFileType (hFile=0x444) returned 0x1 [0177.514] ReadFile (in: hFile=0x444, lpBuffer=0x2378738, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x2378738*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0177.864] CloseHandle (hObject=0x444) returned 1 [0177.864] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C6D3FAD85D1C5DE4A6404132A8199E69DFE46883", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C6D3FAD85D1C5DE4A6404132A8199E69DFE46883", lpFilePart=0x0) returned 0x85 [0177.864] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0177.864] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C6D3FAD85D1C5DE4A6404132A8199E69DFE46883" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c6d3fad85d1c5de4a6404132a8199e69dfe46883"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0177.865] GetFileType (hFile=0x444) returned 0x1 [0177.865] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0177.865] GetFileType (hFile=0x444) returned 0x1 [0177.865] WriteFile (in: hFile=0x444, lpBuffer=0x2188858*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x2188858*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0177.865] CloseHandle (hObject=0x444) returned 1 [0177.865] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C6D3FAD85D1C5DE4A6404132A8199E69DFE46883", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C6D3FAD85D1C5DE4A6404132A8199E69DFE46883", lpFilePart=0x0) returned 0x85 [0177.865] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C6D3FAD85D1C5DE4A6404132A8199E69DFE46883.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C6D3FAD85D1C5DE4A6404132A8199E69DFE46883.xuy", lpFilePart=0x0) returned 0x89 [0177.865] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0177.865] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C6D3FAD85D1C5DE4A6404132A8199E69DFE46883" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c6d3fad85d1c5de4a6404132a8199e69dfe46883"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x946e0542, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x946e0542, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x55dcd17c, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0177.865] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0177.865] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C6D3FAD85D1C5DE4A6404132A8199E69DFE46883" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c6d3fad85d1c5de4a6404132a8199e69dfe46883"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C6D3FAD85D1C5DE4A6404132A8199E69DFE46883.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c6d3fad85d1c5de4a6404132a8199e69dfe46883.xuy")) returned 1 [0177.867] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C6FBE9CDC62D5615C39A962B00B00AB1C735197E", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C6FBE9CDC62D5615C39A962B00B00AB1C735197E", lpFilePart=0x0) returned 0x85 [0177.867] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0177.867] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C6FBE9CDC62D5615C39A962B00B00AB1C735197E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c6fbe9cdc62d5615c39a962b00b00ab1c735197e"), fInfoLevelId=0x0, lpFileInformation=0x21f7760 | out: lpFileInformation=0x21f7760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xddd4cc3b, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xddd4cc3b, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xe061eb1c, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0xe9ab)) returned 1 [0177.867] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0177.867] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C6FBE9CDC62D5615C39A962B00B00AB1C735197E", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C6FBE9CDC62D5615C39A962B00B00AB1C735197E", lpFilePart=0x0) returned 0x85 [0177.867] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0177.867] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C6FBE9CDC62D5615C39A962B00B00AB1C735197E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c6fbe9cdc62d5615c39a962b00b00ab1c735197e"), fInfoLevelId=0x0, lpFileInformation=0x21f7960 | out: lpFileInformation=0x21f7960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xddd4cc3b, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xddd4cc3b, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xe061eb1c, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0xe9ab)) returned 1 [0177.867] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0177.867] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C6FBE9CDC62D5615C39A962B00B00AB1C735197E", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C6FBE9CDC62D5615C39A962B00B00AB1C735197E", lpFilePart=0x0) returned 0x85 [0177.867] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0177.867] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C6FBE9CDC62D5615C39A962B00B00AB1C735197E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c6fbe9cdc62d5615c39a962b00b00ab1c735197e"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0177.868] GetFileType (hFile=0x444) returned 0x1 [0177.868] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0177.868] GetFileType (hFile=0x444) returned 0x1 [0177.868] ReadFile (in: hFile=0x444, lpBuffer=0x21f9e90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x21f9e90*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0177.892] CloseHandle (hObject=0x444) returned 1 [0177.892] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C6FBE9CDC62D5615C39A962B00B00AB1C735197E", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C6FBE9CDC62D5615C39A962B00B00AB1C735197E", lpFilePart=0x0) returned 0x85 [0177.892] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0177.892] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C6FBE9CDC62D5615C39A962B00B00AB1C735197E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c6fbe9cdc62d5615c39a962b00b00ab1c735197e"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0177.892] GetFileType (hFile=0x444) returned 0x1 [0177.892] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0177.892] GetFileType (hFile=0x444) returned 0x1 [0177.892] WriteFile (in: hFile=0x444, lpBuffer=0x21f7b40*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x21f7b40*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0177.893] CloseHandle (hObject=0x444) returned 1 [0177.893] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C6FBE9CDC62D5615C39A962B00B00AB1C735197E", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C6FBE9CDC62D5615C39A962B00B00AB1C735197E", lpFilePart=0x0) returned 0x85 [0177.893] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C6FBE9CDC62D5615C39A962B00B00AB1C735197E.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C6FBE9CDC62D5615C39A962B00B00AB1C735197E.xuy", lpFilePart=0x0) returned 0x89 [0177.893] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0177.893] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C6FBE9CDC62D5615C39A962B00B00AB1C735197E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c6fbe9cdc62d5615c39a962b00b00ab1c735197e"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xddd4cc3b, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xddd4cc3b, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x55e1990b, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xe9ab)) returned 1 [0177.893] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0177.893] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C6FBE9CDC62D5615C39A962B00B00AB1C735197E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c6fbe9cdc62d5615c39a962b00b00ab1c735197e"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C6FBE9CDC62D5615C39A962B00B00AB1C735197E.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c6fbe9cdc62d5615c39a962b00b00ab1c735197e.xuy")) returned 1 [0177.894] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C7453FACD8B326E9BCA8FE524015C4423278C9F7", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C7453FACD8B326E9BCA8FE524015C4423278C9F7", lpFilePart=0x0) returned 0x85 [0177.894] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0177.894] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C7453FACD8B326E9BCA8FE524015C4423278C9F7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c7453facd8b326e9bca8fe524015c4423278c9f7"), fInfoLevelId=0x0, lpFileInformation=0x2276438 | out: lpFileInformation=0x2276438*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48846112, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x48846112, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x48846112, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0xa15)) returned 1 [0177.895] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0177.895] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C7453FACD8B326E9BCA8FE524015C4423278C9F7", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C7453FACD8B326E9BCA8FE524015C4423278C9F7", lpFilePart=0x0) returned 0x85 [0177.895] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0177.895] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C7453FACD8B326E9BCA8FE524015C4423278C9F7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c7453facd8b326e9bca8fe524015c4423278c9f7"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0177.895] GetFileType (hFile=0x444) returned 0x1 [0177.895] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0177.895] GetFileType (hFile=0x444) returned 0x1 [0177.895] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xa15 [0177.895] ReadFile (in: hFile=0x444, lpBuffer=0x2277268, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x2277268*, lpNumberOfBytesRead=0x3be5c8*=0xa15, lpOverlapped=0x0) returned 1 [0177.901] CloseHandle (hObject=0x444) returned 1 [0177.912] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C7453FACD8B326E9BCA8FE524015C4423278C9F7", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C7453FACD8B326E9BCA8FE524015C4423278C9F7", lpFilePart=0x0) returned 0x85 [0177.912] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0177.912] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C7453FACD8B326E9BCA8FE524015C4423278C9F7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c7453facd8b326e9bca8fe524015c4423278c9f7"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0177.914] GetFileType (hFile=0x444) returned 0x1 [0177.914] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0177.914] GetFileType (hFile=0x444) returned 0x1 [0177.914] WriteFile (in: hFile=0x444, lpBuffer=0x22f15a0*, nNumberOfBytesToWrite=0xa20, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x22f15a0*, lpNumberOfBytesWritten=0x3be4d8*=0xa20, lpOverlapped=0x0) returned 1 [0177.915] CloseHandle (hObject=0x444) returned 1 [0177.915] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C7453FACD8B326E9BCA8FE524015C4423278C9F7", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C7453FACD8B326E9BCA8FE524015C4423278C9F7", lpFilePart=0x0) returned 0x85 [0177.915] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C7453FACD8B326E9BCA8FE524015C4423278C9F7.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C7453FACD8B326E9BCA8FE524015C4423278C9F7.xuy", lpFilePart=0x0) returned 0x89 [0177.915] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0177.915] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C7453FACD8B326E9BCA8FE524015C4423278C9F7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c7453facd8b326e9bca8fe524015c4423278c9f7"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48846112, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x48846112, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x55e3f7d7, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xa20)) returned 1 [0177.915] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0177.915] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C7453FACD8B326E9BCA8FE524015C4423278C9F7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c7453facd8b326e9bca8fe524015c4423278c9f7"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C7453FACD8B326E9BCA8FE524015C4423278C9F7.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c7453facd8b326e9bca8fe524015c4423278c9f7.xuy")) returned 1 [0177.917] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C77B5180A8EA3664BB00894BA85DFA7A72E298EC", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C77B5180A8EA3664BB00894BA85DFA7A72E298EC", lpFilePart=0x0) returned 0x85 [0177.917] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0177.917] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C77B5180A8EA3664BB00894BA85DFA7A72E298EC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c77b5180a8ea3664bb00894ba85dfa7a72e298ec"), fInfoLevelId=0x0, lpFileInformation=0x22f2960 | out: lpFileInformation=0x22f2960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87cfd45e, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x87cfd45e, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x87cffb83, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0xee5)) returned 1 [0177.917] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0177.917] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C77B5180A8EA3664BB00894BA85DFA7A72E298EC", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C77B5180A8EA3664BB00894BA85DFA7A72E298EC", lpFilePart=0x0) returned 0x85 [0177.917] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0177.917] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C77B5180A8EA3664BB00894BA85DFA7A72E298EC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c77b5180a8ea3664bb00894ba85dfa7a72e298ec"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0177.917] GetFileType (hFile=0x444) returned 0x1 [0177.917] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0177.917] GetFileType (hFile=0x444) returned 0x1 [0177.917] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xee5 [0177.917] ReadFile (in: hFile=0x444, lpBuffer=0x22f3c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x22f3c60*, lpNumberOfBytesRead=0x3be5c8*=0xee5, lpOverlapped=0x0) returned 1 [0177.944] CloseHandle (hObject=0x444) returned 1 [0177.955] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C77B5180A8EA3664BB00894BA85DFA7A72E298EC", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C77B5180A8EA3664BB00894BA85DFA7A72E298EC", lpFilePart=0x0) returned 0x85 [0177.955] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0177.955] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C77B5180A8EA3664BB00894BA85DFA7A72E298EC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c77b5180a8ea3664bb00894ba85dfa7a72e298ec"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0177.957] GetFileType (hFile=0x444) returned 0x1 [0177.957] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0177.957] GetFileType (hFile=0x444) returned 0x1 [0177.957] WriteFile (in: hFile=0x444, lpBuffer=0x236f7a8*, nNumberOfBytesToWrite=0xef0, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x236f7a8*, lpNumberOfBytesWritten=0x3be4d8*=0xef0, lpOverlapped=0x0) returned 1 [0177.958] CloseHandle (hObject=0x444) returned 1 [0177.958] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C77B5180A8EA3664BB00894BA85DFA7A72E298EC", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C77B5180A8EA3664BB00894BA85DFA7A72E298EC", lpFilePart=0x0) returned 0x85 [0177.958] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C77B5180A8EA3664BB00894BA85DFA7A72E298EC.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C77B5180A8EA3664BB00894BA85DFA7A72E298EC.xuy", lpFilePart=0x0) returned 0x89 [0177.958] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0177.958] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C77B5180A8EA3664BB00894BA85DFA7A72E298EC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c77b5180a8ea3664bb00894ba85dfa7a72e298ec"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87cfd45e, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x87cfd45e, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x55eb1ec3, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xef0)) returned 1 [0177.958] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0177.959] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C77B5180A8EA3664BB00894BA85DFA7A72E298EC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c77b5180a8ea3664bb00894ba85dfa7a72e298ec"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C77B5180A8EA3664BB00894BA85DFA7A72E298EC.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c77b5180a8ea3664bb00894ba85dfa7a72e298ec.xuy")) returned 1 [0177.960] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C86F6FDD616BE8B0F30DEC15F3A1984CB61B5FF5", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C86F6FDD616BE8B0F30DEC15F3A1984CB61B5FF5", lpFilePart=0x0) returned 0x85 [0177.960] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0177.960] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C86F6FDD616BE8B0F30DEC15F3A1984CB61B5FF5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c86f6fdd616be8b0f30dec15f3a1984cb61b5ff5"), fInfoLevelId=0x0, lpFileInformation=0x2370b68 | out: lpFileInformation=0x2370b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e0cbb13, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3e0cbb13, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x3e0cbb13, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0xa98)) returned 1 [0177.960] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0177.960] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C86F6FDD616BE8B0F30DEC15F3A1984CB61B5FF5", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C86F6FDD616BE8B0F30DEC15F3A1984CB61B5FF5", lpFilePart=0x0) returned 0x85 [0177.960] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0177.960] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C86F6FDD616BE8B0F30DEC15F3A1984CB61B5FF5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c86f6fdd616be8b0f30dec15f3a1984cb61b5ff5"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0177.960] GetFileType (hFile=0x444) returned 0x1 [0177.960] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0177.960] GetFileType (hFile=0x444) returned 0x1 [0177.960] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xa98 [0177.960] ReadFile (in: hFile=0x444, lpBuffer=0x2371a18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x2371a18*, lpNumberOfBytesRead=0x3be5c8*=0xa98, lpOverlapped=0x0) returned 1 [0177.978] CloseHandle (hObject=0x444) returned 1 [0178.032] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C86F6FDD616BE8B0F30DEC15F3A1984CB61B5FF5", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C86F6FDD616BE8B0F30DEC15F3A1984CB61B5FF5", lpFilePart=0x0) returned 0x85 [0178.032] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0178.033] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C86F6FDD616BE8B0F30DEC15F3A1984CB61B5FF5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c86f6fdd616be8b0f30dec15f3a1984cb61b5ff5"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0178.034] GetFileType (hFile=0x444) returned 0x1 [0178.035] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0178.035] GetFileType (hFile=0x444) returned 0x1 [0178.035] WriteFile (in: hFile=0x444, lpBuffer=0x21e9840*, nNumberOfBytesToWrite=0xaa0, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x21e9840*, lpNumberOfBytesWritten=0x3be4d8*=0xaa0, lpOverlapped=0x0) returned 1 [0178.035] CloseHandle (hObject=0x444) returned 1 [0178.035] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C86F6FDD616BE8B0F30DEC15F3A1984CB61B5FF5", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C86F6FDD616BE8B0F30DEC15F3A1984CB61B5FF5", lpFilePart=0x0) returned 0x85 [0178.035] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C86F6FDD616BE8B0F30DEC15F3A1984CB61B5FF5.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C86F6FDD616BE8B0F30DEC15F3A1984CB61B5FF5.xuy", lpFilePart=0x0) returned 0x89 [0178.036] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0178.036] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C86F6FDD616BE8B0F30DEC15F3A1984CB61B5FF5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c86f6fdd616be8b0f30dec15f3a1984cb61b5ff5"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e0cbb13, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3e0cbb13, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x55f70e69, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xaa0)) returned 1 [0178.036] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0178.036] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C86F6FDD616BE8B0F30DEC15F3A1984CB61B5FF5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c86f6fdd616be8b0f30dec15f3a1984cb61b5ff5"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C86F6FDD616BE8B0F30DEC15F3A1984CB61B5FF5.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c86f6fdd616be8b0f30dec15f3a1984cb61b5ff5.xuy")) returned 1 [0178.037] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C886C15B36E63849FB9E86DCC97456303F590459", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C886C15B36E63849FB9E86DCC97456303F590459", lpFilePart=0x0) returned 0x85 [0178.037] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0178.037] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C886C15B36E63849FB9E86DCC97456303F590459" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c886c15b36e63849fb9e86dcc97456303f590459"), fInfoLevelId=0x0, lpFileInformation=0x21eac00 | out: lpFileInformation=0x21eac00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf67ae9e9, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xf67ae9e9, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x6152bc7d, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xf6)) returned 1 [0178.037] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0178.037] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C886C15B36E63849FB9E86DCC97456303F590459", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C886C15B36E63849FB9E86DCC97456303F590459", lpFilePart=0x0) returned 0x85 [0178.037] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0178.037] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C886C15B36E63849FB9E86DCC97456303F590459" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c886c15b36e63849fb9e86dcc97456303f590459"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0178.037] GetFileType (hFile=0x444) returned 0x1 [0178.037] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0178.038] GetFileType (hFile=0x444) returned 0x1 [0178.038] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xf6 [0178.038] ReadFile (in: hFile=0x444, lpBuffer=0x21eb110, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x21eb110*, lpNumberOfBytesRead=0x3be5c8*=0xf6, lpOverlapped=0x0) returned 1 [0178.038] CloseHandle (hObject=0x444) returned 1 [0178.051] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C886C15B36E63849FB9E86DCC97456303F590459", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C886C15B36E63849FB9E86DCC97456303F590459", lpFilePart=0x0) returned 0x85 [0178.051] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0178.051] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C886C15B36E63849FB9E86DCC97456303F590459" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c886c15b36e63849fb9e86dcc97456303f590459"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0178.053] GetFileType (hFile=0x444) returned 0x1 [0178.053] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0178.053] GetFileType (hFile=0x444) returned 0x1 [0178.053] WriteFile (in: hFile=0x444, lpBuffer=0x22624c0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x22624c0*, lpNumberOfBytesWritten=0x3be4d8*=0x100, lpOverlapped=0x0) returned 1 [0178.054] CloseHandle (hObject=0x444) returned 1 [0178.054] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C886C15B36E63849FB9E86DCC97456303F590459", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C886C15B36E63849FB9E86DCC97456303F590459", lpFilePart=0x0) returned 0x85 [0178.054] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C886C15B36E63849FB9E86DCC97456303F590459.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C886C15B36E63849FB9E86DCC97456303F590459.xuy", lpFilePart=0x0) returned 0x89 [0178.054] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0178.054] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C886C15B36E63849FB9E86DCC97456303F590459" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c886c15b36e63849fb9e86dcc97456303f590459"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf67ae9e9, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xf67ae9e9, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x55f96d5f, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x100)) returned 1 [0178.054] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0178.054] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C886C15B36E63849FB9E86DCC97456303F590459" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c886c15b36e63849fb9e86dcc97456303f590459"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C886C15B36E63849FB9E86DCC97456303F590459.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c886c15b36e63849fb9e86dcc97456303f590459.xuy")) returned 1 [0178.056] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C95E824F69260EC56BA56C3001E44743197B6C48", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C95E824F69260EC56BA56C3001E44743197B6C48", lpFilePart=0x0) returned 0x85 [0178.056] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0178.056] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C95E824F69260EC56BA56C3001E44743197B6C48" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c95e824f69260ec56ba56c3001e44743197b6c48"), fInfoLevelId=0x0, lpFileInformation=0x2263880 | out: lpFileInformation=0x2263880*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x543c62ff, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x543c62ff, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x5e8778df, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x8a0d)) returned 1 [0178.056] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0178.056] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C95E824F69260EC56BA56C3001E44743197B6C48", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C95E824F69260EC56BA56C3001E44743197B6C48", lpFilePart=0x0) returned 0x85 [0178.056] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0178.056] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C95E824F69260EC56BA56C3001E44743197B6C48" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c95e824f69260ec56ba56c3001e44743197b6c48"), fInfoLevelId=0x0, lpFileInformation=0x2263a80 | out: lpFileInformation=0x2263a80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x543c62ff, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x543c62ff, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x5e8778df, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x8a0d)) returned 1 [0178.056] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0178.056] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C95E824F69260EC56BA56C3001E44743197B6C48", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C95E824F69260EC56BA56C3001E44743197B6C48", lpFilePart=0x0) returned 0x85 [0178.056] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0178.056] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C95E824F69260EC56BA56C3001E44743197B6C48" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c95e824f69260ec56ba56c3001e44743197b6c48"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0178.057] GetFileType (hFile=0x444) returned 0x1 [0178.057] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0178.057] GetFileType (hFile=0x444) returned 0x1 [0178.057] ReadFile (in: hFile=0x444, lpBuffer=0x2265fb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x2265fb0*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0178.070] CloseHandle (hObject=0x444) returned 1 [0178.070] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C95E824F69260EC56BA56C3001E44743197B6C48", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C95E824F69260EC56BA56C3001E44743197B6C48", lpFilePart=0x0) returned 0x85 [0178.070] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0178.070] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C95E824F69260EC56BA56C3001E44743197B6C48" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c95e824f69260ec56ba56c3001e44743197b6c48"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0178.071] GetFileType (hFile=0x444) returned 0x1 [0178.071] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0178.071] GetFileType (hFile=0x444) returned 0x1 [0178.071] WriteFile (in: hFile=0x444, lpBuffer=0x2263c60*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x2263c60*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0178.071] CloseHandle (hObject=0x444) returned 1 [0178.071] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C95E824F69260EC56BA56C3001E44743197B6C48", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C95E824F69260EC56BA56C3001E44743197B6C48", lpFilePart=0x0) returned 0x85 [0178.071] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C95E824F69260EC56BA56C3001E44743197B6C48.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C95E824F69260EC56BA56C3001E44743197B6C48.xuy", lpFilePart=0x0) returned 0x89 [0178.071] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0178.071] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C95E824F69260EC56BA56C3001E44743197B6C48" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c95e824f69260ec56ba56c3001e44743197b6c48"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x543c62ff, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x543c62ff, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x55fbce88, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x8a0d)) returned 1 [0178.071] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0178.071] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C95E824F69260EC56BA56C3001E44743197B6C48" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c95e824f69260ec56ba56c3001e44743197b6c48"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C95E824F69260EC56BA56C3001E44743197B6C48.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c95e824f69260ec56ba56c3001e44743197b6c48.xuy")) returned 1 [0178.073] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C972AC86BA22ADBFC038B134C02101C894D0078A", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C972AC86BA22ADBFC038B134C02101C894D0078A", lpFilePart=0x0) returned 0x85 [0178.073] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0178.073] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C972AC86BA22ADBFC038B134C02101C894D0078A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c972ac86ba22adbfc038b134c02101c894d0078a"), fInfoLevelId=0x0, lpFileInformation=0x22e2558 | out: lpFileInformation=0x22e2558*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd133db69, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xd133db69, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0xd13b0221, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x53bc7)) returned 1 [0178.073] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0178.073] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C972AC86BA22ADBFC038B134C02101C894D0078A", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C972AC86BA22ADBFC038B134C02101C894D0078A", lpFilePart=0x0) returned 0x85 [0178.073] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0178.073] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C972AC86BA22ADBFC038B134C02101C894D0078A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c972ac86ba22adbfc038b134c02101c894d0078a"), fInfoLevelId=0x0, lpFileInformation=0x22e2758 | out: lpFileInformation=0x22e2758*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd133db69, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xd133db69, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0xd13b0221, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x53bc7)) returned 1 [0178.073] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0178.073] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C972AC86BA22ADBFC038B134C02101C894D0078A", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C972AC86BA22ADBFC038B134C02101C894D0078A", lpFilePart=0x0) returned 0x85 [0178.073] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0178.073] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C972AC86BA22ADBFC038B134C02101C894D0078A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c972ac86ba22adbfc038b134c02101c894d0078a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0178.074] GetFileType (hFile=0x444) returned 0x1 [0178.074] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0178.074] GetFileType (hFile=0x444) returned 0x1 [0178.074] ReadFile (in: hFile=0x444, lpBuffer=0x22e4c88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x22e4c88*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0178.093] CloseHandle (hObject=0x444) returned 1 [0178.093] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C972AC86BA22ADBFC038B134C02101C894D0078A", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C972AC86BA22ADBFC038B134C02101C894D0078A", lpFilePart=0x0) returned 0x85 [0178.093] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0178.093] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C972AC86BA22ADBFC038B134C02101C894D0078A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c972ac86ba22adbfc038b134c02101c894d0078a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0178.093] GetFileType (hFile=0x444) returned 0x1 [0178.093] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0178.093] GetFileType (hFile=0x444) returned 0x1 [0178.093] WriteFile (in: hFile=0x444, lpBuffer=0x22e2938*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x22e2938*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0178.093] CloseHandle (hObject=0x444) returned 1 [0178.094] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C972AC86BA22ADBFC038B134C02101C894D0078A", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C972AC86BA22ADBFC038B134C02101C894D0078A", lpFilePart=0x0) returned 0x85 [0178.094] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C972AC86BA22ADBFC038B134C02101C894D0078A.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C972AC86BA22ADBFC038B134C02101C894D0078A.xuy", lpFilePart=0x0) returned 0x89 [0178.094] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0178.094] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C972AC86BA22ADBFC038B134C02101C894D0078A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c972ac86ba22adbfc038b134c02101c894d0078a"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd133db69, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xd133db69, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x560093b5, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x53bc7)) returned 1 [0178.094] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0178.094] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C972AC86BA22ADBFC038B134C02101C894D0078A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c972ac86ba22adbfc038b134c02101c894d0078a"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C972AC86BA22ADBFC038B134C02101C894D0078A.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c972ac86ba22adbfc038b134c02101c894d0078a.xuy")) returned 1 [0178.095] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C97D1F95F7D1463D27D4564C5162DD2A73947BDB", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C97D1F95F7D1463D27D4564C5162DD2A73947BDB", lpFilePart=0x0) returned 0x85 [0178.095] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0178.095] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C97D1F95F7D1463D27D4564C5162DD2A73947BDB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c97d1f95f7d1463d27d4564c5162dd2a73947bdb"), fInfoLevelId=0x0, lpFileInformation=0x2361230 | out: lpFileInformation=0x2361230*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf387dc66, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xf387dc66, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0xf388038e, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x3540)) returned 1 [0178.096] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0178.096] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C97D1F95F7D1463D27D4564C5162DD2A73947BDB", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C97D1F95F7D1463D27D4564C5162DD2A73947BDB", lpFilePart=0x0) returned 0x85 [0178.096] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0178.096] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C97D1F95F7D1463D27D4564C5162DD2A73947BDB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c97d1f95f7d1463d27d4564c5162dd2a73947bdb"), fInfoLevelId=0x0, lpFileInformation=0x2361430 | out: lpFileInformation=0x2361430*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf387dc66, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xf387dc66, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0xf388038e, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x3540)) returned 1 [0178.096] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0178.096] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C97D1F95F7D1463D27D4564C5162DD2A73947BDB", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C97D1F95F7D1463D27D4564C5162DD2A73947BDB", lpFilePart=0x0) returned 0x85 [0178.096] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0178.096] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C97D1F95F7D1463D27D4564C5162DD2A73947BDB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c97d1f95f7d1463d27d4564c5162dd2a73947bdb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0178.097] GetFileType (hFile=0x444) returned 0x1 [0178.097] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0178.097] GetFileType (hFile=0x444) returned 0x1 [0178.097] ReadFile (in: hFile=0x444, lpBuffer=0x2363960, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x2363960*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0178.141] CloseHandle (hObject=0x444) returned 1 [0178.141] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C97D1F95F7D1463D27D4564C5162DD2A73947BDB", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C97D1F95F7D1463D27D4564C5162DD2A73947BDB", lpFilePart=0x0) returned 0x85 [0178.141] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0178.141] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C97D1F95F7D1463D27D4564C5162DD2A73947BDB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c97d1f95f7d1463d27d4564c5162dd2a73947bdb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0178.142] GetFileType (hFile=0x444) returned 0x1 [0178.142] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0178.142] GetFileType (hFile=0x444) returned 0x1 [0178.142] WriteFile (in: hFile=0x444, lpBuffer=0x2188818*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x2188818*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0178.142] CloseHandle (hObject=0x444) returned 1 [0178.142] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C97D1F95F7D1463D27D4564C5162DD2A73947BDB", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C97D1F95F7D1463D27D4564C5162DD2A73947BDB", lpFilePart=0x0) returned 0x85 [0178.142] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C97D1F95F7D1463D27D4564C5162DD2A73947BDB.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C97D1F95F7D1463D27D4564C5162DD2A73947BDB.xuy", lpFilePart=0x0) returned 0x89 [0178.142] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0178.142] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C97D1F95F7D1463D27D4564C5162DD2A73947BDB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c97d1f95f7d1463d27d4564c5162dd2a73947bdb"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf387dc66, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xf387dc66, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x5607bbfa, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x3540)) returned 1 [0178.142] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0178.142] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C97D1F95F7D1463D27D4564C5162DD2A73947BDB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c97d1f95f7d1463d27d4564c5162dd2a73947bdb"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C97D1F95F7D1463D27D4564C5162DD2A73947BDB.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c97d1f95f7d1463d27d4564c5162dd2a73947bdb.xuy")) returned 1 [0178.144] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C99F573D81CD53D25E5D1E14F0315FD75E50E968", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C99F573D81CD53D25E5D1E14F0315FD75E50E968", lpFilePart=0x0) returned 0x85 [0178.144] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0178.144] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C99F573D81CD53D25E5D1E14F0315FD75E50E968" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c99f573d81cd53d25e5d1e14f0315fd75e50e968"), fInfoLevelId=0x0, lpFileInformation=0x21e2610 | out: lpFileInformation=0x21e2610*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61577ff1, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x61577ff1, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x61577ff1, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x1139)) returned 1 [0178.144] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0178.144] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C99F573D81CD53D25E5D1E14F0315FD75E50E968", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C99F573D81CD53D25E5D1E14F0315FD75E50E968", lpFilePart=0x0) returned 0x85 [0178.144] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0178.144] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C99F573D81CD53D25E5D1E14F0315FD75E50E968" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c99f573d81cd53d25e5d1e14f0315fd75e50e968"), fInfoLevelId=0x0, lpFileInformation=0x21e2810 | out: lpFileInformation=0x21e2810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61577ff1, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x61577ff1, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x61577ff1, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x1139)) returned 1 [0178.144] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0178.144] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C99F573D81CD53D25E5D1E14F0315FD75E50E968", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C99F573D81CD53D25E5D1E14F0315FD75E50E968", lpFilePart=0x0) returned 0x85 [0178.144] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0178.144] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C99F573D81CD53D25E5D1E14F0315FD75E50E968" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c99f573d81cd53d25e5d1e14f0315fd75e50e968"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0178.145] GetFileType (hFile=0x444) returned 0x1 [0178.145] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0178.145] GetFileType (hFile=0x444) returned 0x1 [0178.145] ReadFile (in: hFile=0x444, lpBuffer=0x21e4d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x21e4d40*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0178.164] CloseHandle (hObject=0x444) returned 1 [0178.164] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C99F573D81CD53D25E5D1E14F0315FD75E50E968", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C99F573D81CD53D25E5D1E14F0315FD75E50E968", lpFilePart=0x0) returned 0x85 [0178.164] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0178.164] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C99F573D81CD53D25E5D1E14F0315FD75E50E968" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c99f573d81cd53d25e5d1e14f0315fd75e50e968"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0178.165] GetFileType (hFile=0x444) returned 0x1 [0178.165] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0178.165] GetFileType (hFile=0x444) returned 0x1 [0178.165] WriteFile (in: hFile=0x444, lpBuffer=0x21e29f0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x21e29f0*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0178.165] CloseHandle (hObject=0x444) returned 1 [0178.165] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C99F573D81CD53D25E5D1E14F0315FD75E50E968", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C99F573D81CD53D25E5D1E14F0315FD75E50E968", lpFilePart=0x0) returned 0x85 [0178.165] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C99F573D81CD53D25E5D1E14F0315FD75E50E968.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C99F573D81CD53D25E5D1E14F0315FD75E50E968.xuy", lpFilePart=0x0) returned 0x89 [0178.165] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0178.165] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C99F573D81CD53D25E5D1E14F0315FD75E50E968" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c99f573d81cd53d25e5d1e14f0315fd75e50e968"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61577ff1, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x61577ff1, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x560a1d9a, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0178.165] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0178.165] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C99F573D81CD53D25E5D1E14F0315FD75E50E968" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c99f573d81cd53d25e5d1e14f0315fd75e50e968"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C99F573D81CD53D25E5D1E14F0315FD75E50E968.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c99f573d81cd53d25e5d1e14f0315fd75e50e968.xuy")) returned 1 [0178.167] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C9A12FCE6396EC06EB6484E10FD461652842CECB", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C9A12FCE6396EC06EB6484E10FD461652842CECB", lpFilePart=0x0) returned 0x85 [0178.167] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0178.167] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C9A12FCE6396EC06EB6484E10FD461652842CECB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c9a12fce6396ec06eb6484e10fd461652842cecb"), fInfoLevelId=0x0, lpFileInformation=0x22612e8 | out: lpFileInformation=0x22612e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7f2d99a, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xf7f2d99a, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xf7f2d99a, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x528)) returned 1 [0178.169] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0178.169] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C9A12FCE6396EC06EB6484E10FD461652842CECB", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C9A12FCE6396EC06EB6484E10FD461652842CECB", lpFilePart=0x0) returned 0x85 [0178.169] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0178.169] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C9A12FCE6396EC06EB6484E10FD461652842CECB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c9a12fce6396ec06eb6484e10fd461652842cecb"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0178.169] GetFileType (hFile=0x444) returned 0x1 [0178.169] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0178.169] GetFileType (hFile=0x444) returned 0x1 [0178.169] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x528 [0178.169] ReadFile (in: hFile=0x444, lpBuffer=0x2261c28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x2261c28*, lpNumberOfBytesRead=0x3be5c8*=0x528, lpOverlapped=0x0) returned 1 [0178.170] CloseHandle (hObject=0x444) returned 1 [0178.180] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C9A12FCE6396EC06EB6484E10FD461652842CECB", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C9A12FCE6396EC06EB6484E10FD461652842CECB", lpFilePart=0x0) returned 0x85 [0178.180] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0178.181] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C9A12FCE6396EC06EB6484E10FD461652842CECB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c9a12fce6396ec06eb6484e10fd461652842cecb"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0178.182] GetFileType (hFile=0x444) returned 0x1 [0178.182] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0178.182] GetFileType (hFile=0x444) returned 0x1 [0178.182] WriteFile (in: hFile=0x444, lpBuffer=0x22da6a8*, nNumberOfBytesToWrite=0x530, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x22da6a8*, lpNumberOfBytesWritten=0x3be4d8*=0x530, lpOverlapped=0x0) returned 1 [0178.183] CloseHandle (hObject=0x444) returned 1 [0178.183] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C9A12FCE6396EC06EB6484E10FD461652842CECB", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C9A12FCE6396EC06EB6484E10FD461652842CECB", lpFilePart=0x0) returned 0x85 [0178.183] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C9A12FCE6396EC06EB6484E10FD461652842CECB.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C9A12FCE6396EC06EB6484E10FD461652842CECB.xuy", lpFilePart=0x0) returned 0x89 [0178.183] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0178.184] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C9A12FCE6396EC06EB6484E10FD461652842CECB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c9a12fce6396ec06eb6484e10fd461652842cecb"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7f2d99a, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xf7f2d99a, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x560c809b, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x530)) returned 1 [0178.184] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0178.184] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C9A12FCE6396EC06EB6484E10FD461652842CECB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c9a12fce6396ec06eb6484e10fd461652842cecb"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C9A12FCE6396EC06EB6484E10FD461652842CECB.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c9a12fce6396ec06eb6484e10fd461652842cecb.xuy")) returned 1 [0178.185] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CA141F5232AA310B7C290C543787C07BDDB091E7", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CA141F5232AA310B7C290C543787C07BDDB091E7", lpFilePart=0x0) returned 0x85 [0178.185] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0178.185] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CA141F5232AA310B7C290C543787C07BDDB091E7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ca141f5232aa310b7c290c543787c07bddb091e7"), fInfoLevelId=0x0, lpFileInformation=0x22dba68 | out: lpFileInformation=0x22dba68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2d5eed3, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xf2d5eed3, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0xf2d615cd, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x4d2)) returned 1 [0178.185] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0178.185] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CA141F5232AA310B7C290C543787C07BDDB091E7", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CA141F5232AA310B7C290C543787C07BDDB091E7", lpFilePart=0x0) returned 0x85 [0178.185] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0178.186] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CA141F5232AA310B7C290C543787C07BDDB091E7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ca141f5232aa310b7c290c543787c07bddb091e7"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0178.186] GetFileType (hFile=0x444) returned 0x1 [0178.186] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0178.186] GetFileType (hFile=0x444) returned 0x1 [0178.186] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x4d2 [0178.186] ReadFile (in: hFile=0x444, lpBuffer=0x22dc358, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x22dc358*, lpNumberOfBytesRead=0x3be5c8*=0x4d2, lpOverlapped=0x0) returned 1 [0178.187] CloseHandle (hObject=0x444) returned 1 [0178.199] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CA141F5232AA310B7C290C543787C07BDDB091E7", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CA141F5232AA310B7C290C543787C07BDDB091E7", lpFilePart=0x0) returned 0x85 [0178.199] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0178.199] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CA141F5232AA310B7C290C543787C07BDDB091E7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ca141f5232aa310b7c290c543787c07bddb091e7"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0178.201] GetFileType (hFile=0x444) returned 0x1 [0178.201] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0178.201] GetFileType (hFile=0x444) returned 0x1 [0178.201] WriteFile (in: hFile=0x444, lpBuffer=0x2354c50*, nNumberOfBytesToWrite=0x4e0, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x2354c50*, lpNumberOfBytesWritten=0x3be4d8*=0x4e0, lpOverlapped=0x0) returned 1 [0178.202] CloseHandle (hObject=0x444) returned 1 [0178.202] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CA141F5232AA310B7C290C543787C07BDDB091E7", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CA141F5232AA310B7C290C543787C07BDDB091E7", lpFilePart=0x0) returned 0x85 [0178.202] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CA141F5232AA310B7C290C543787C07BDDB091E7.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CA141F5232AA310B7C290C543787C07BDDB091E7.xuy", lpFilePart=0x0) returned 0x89 [0178.202] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0178.202] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CA141F5232AA310B7C290C543787C07BDDB091E7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ca141f5232aa310b7c290c543787c07bddb091e7"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2d5eed3, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xf2d5eed3, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x56114454, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x4e0)) returned 1 [0178.203] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0178.203] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CA141F5232AA310B7C290C543787C07BDDB091E7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ca141f5232aa310b7c290c543787c07bddb091e7"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CA141F5232AA310B7C290C543787C07BDDB091E7.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ca141f5232aa310b7c290c543787c07bddb091e7.xuy")) returned 1 [0178.204] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CA302F67F21FC2283B285F13F48B45CF1FFE8A69", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CA302F67F21FC2283B285F13F48B45CF1FFE8A69", lpFilePart=0x0) returned 0x85 [0178.204] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0178.204] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CA302F67F21FC2283B285F13F48B45CF1FFE8A69" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ca302f67f21fc2283b285f13f48b45cf1ffe8a69"), fInfoLevelId=0x0, lpFileInformation=0x2356010 | out: lpFileInformation=0x2356010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8727f8f4, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x8727f8f4, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x87281ff7, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0xf7c)) returned 1 [0178.204] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0178.204] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CA302F67F21FC2283B285F13F48B45CF1FFE8A69", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CA302F67F21FC2283B285F13F48B45CF1FFE8A69", lpFilePart=0x0) returned 0x85 [0178.204] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0178.204] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CA302F67F21FC2283B285F13F48B45CF1FFE8A69" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ca302f67f21fc2283b285f13f48b45cf1ffe8a69"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0178.204] GetFileType (hFile=0x444) returned 0x1 [0178.205] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0178.205] GetFileType (hFile=0x444) returned 0x1 [0178.205] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xf7c [0178.205] ReadFile (in: hFile=0x444, lpBuffer=0x23573a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x23573a8*, lpNumberOfBytesRead=0x3be5c8*=0xf7c, lpOverlapped=0x0) returned 1 [0178.208] CloseHandle (hObject=0x444) returned 1 [0178.249] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CA302F67F21FC2283B285F13F48B45CF1FFE8A69", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CA302F67F21FC2283B285F13F48B45CF1FFE8A69", lpFilePart=0x0) returned 0x85 [0178.249] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0178.249] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CA302F67F21FC2283B285F13F48B45CF1FFE8A69" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ca302f67f21fc2283b285f13f48b45cf1ffe8a69"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0178.251] GetFileType (hFile=0x444) returned 0x1 [0178.251] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0178.251] GetFileType (hFile=0x444) returned 0x1 [0178.251] WriteFile (in: hFile=0x444, lpBuffer=0x21d0f58*, nNumberOfBytesToWrite=0xf80, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x21d0f58*, lpNumberOfBytesWritten=0x3be4d8*=0xf80, lpOverlapped=0x0) returned 1 [0178.252] CloseHandle (hObject=0x444) returned 1 [0178.252] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CA302F67F21FC2283B285F13F48B45CF1FFE8A69", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CA302F67F21FC2283B285F13F48B45CF1FFE8A69", lpFilePart=0x0) returned 0x85 [0178.252] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CA302F67F21FC2283B285F13F48B45CF1FFE8A69.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CA302F67F21FC2283B285F13F48B45CF1FFE8A69.xuy", lpFilePart=0x0) returned 0x89 [0178.252] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0178.253] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CA302F67F21FC2283B285F13F48B45CF1FFE8A69" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ca302f67f21fc2283b285f13f48b45cf1ffe8a69"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8727f8f4, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x8727f8f4, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x56186c65, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xf80)) returned 1 [0178.253] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0178.253] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CA302F67F21FC2283B285F13F48B45CF1FFE8A69" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ca302f67f21fc2283b285f13f48b45cf1ffe8a69"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CA302F67F21FC2283B285F13F48B45CF1FFE8A69.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ca302f67f21fc2283b285f13f48b45cf1ffe8a69.xuy")) returned 1 [0178.254] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CA47B19518620D5822C6BFD89490BB624E197B98", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CA47B19518620D5822C6BFD89490BB624E197B98", lpFilePart=0x0) returned 0x85 [0178.254] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0178.254] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CA47B19518620D5822C6BFD89490BB624E197B98" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ca47b19518620d5822c6bfd89490bb624e197b98"), fInfoLevelId=0x0, lpFileInformation=0x21d2318 | out: lpFileInformation=0x21d2318*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdda41e89, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xdda41e89, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xdda57df3, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x1bfa)) returned 1 [0178.255] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0178.255] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CA47B19518620D5822C6BFD89490BB624E197B98", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CA47B19518620D5822C6BFD89490BB624E197B98", lpFilePart=0x0) returned 0x85 [0178.255] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0178.255] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CA47B19518620D5822C6BFD89490BB624E197B98" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ca47b19518620d5822c6bfd89490bb624e197b98"), fInfoLevelId=0x0, lpFileInformation=0x21d2518 | out: lpFileInformation=0x21d2518*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdda41e89, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xdda41e89, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xdda57df3, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x1bfa)) returned 1 [0178.255] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0178.255] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CA47B19518620D5822C6BFD89490BB624E197B98", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CA47B19518620D5822C6BFD89490BB624E197B98", lpFilePart=0x0) returned 0x85 [0178.255] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0178.255] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CA47B19518620D5822C6BFD89490BB624E197B98" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ca47b19518620d5822c6bfd89490bb624e197b98"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0178.256] GetFileType (hFile=0x444) returned 0x1 [0178.256] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0178.256] GetFileType (hFile=0x444) returned 0x1 [0178.256] ReadFile (in: hFile=0x444, lpBuffer=0x21d4a48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x21d4a48*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0178.269] CloseHandle (hObject=0x444) returned 1 [0178.269] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CA47B19518620D5822C6BFD89490BB624E197B98", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CA47B19518620D5822C6BFD89490BB624E197B98", lpFilePart=0x0) returned 0x85 [0178.269] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0178.270] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CA47B19518620D5822C6BFD89490BB624E197B98" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ca47b19518620d5822c6bfd89490bb624e197b98"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0178.270] GetFileType (hFile=0x444) returned 0x1 [0178.270] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0178.270] GetFileType (hFile=0x444) returned 0x1 [0178.270] WriteFile (in: hFile=0x444, lpBuffer=0x21d26f8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x21d26f8*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0178.270] CloseHandle (hObject=0x444) returned 1 [0178.270] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CA47B19518620D5822C6BFD89490BB624E197B98", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CA47B19518620D5822C6BFD89490BB624E197B98", lpFilePart=0x0) returned 0x85 [0178.270] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CA47B19518620D5822C6BFD89490BB624E197B98.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CA47B19518620D5822C6BFD89490BB624E197B98.xuy", lpFilePart=0x0) returned 0x89 [0178.270] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0178.270] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CA47B19518620D5822C6BFD89490BB624E197B98" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ca47b19518620d5822c6bfd89490bb624e197b98"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdda41e89, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xdda41e89, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x561ad27f, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0178.270] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0178.271] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CA47B19518620D5822C6BFD89490BB624E197B98" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ca47b19518620d5822c6bfd89490bb624e197b98"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CA47B19518620D5822C6BFD89490BB624E197B98.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ca47b19518620d5822c6bfd89490bb624e197b98.xuy")) returned 1 [0178.272] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CB06F3F3E4FCBD4D7968183FF36D440700C56E89", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CB06F3F3E4FCBD4D7968183FF36D440700C56E89", lpFilePart=0x0) returned 0x85 [0178.272] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0178.272] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CB06F3F3E4FCBD4D7968183FF36D440700C56E89" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\cb06f3f3e4fcbd4d7968183ff36d440700c56e89"), fInfoLevelId=0x0, lpFileInformation=0x2250ff0 | out: lpFileInformation=0x2250ff0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54569cd4, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x54569cd4, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x558d1bea, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xfd5)) returned 1 [0178.272] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0178.272] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CB06F3F3E4FCBD4D7968183FF36D440700C56E89", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CB06F3F3E4FCBD4D7968183FF36D440700C56E89", lpFilePart=0x0) returned 0x85 [0178.272] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0178.272] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CB06F3F3E4FCBD4D7968183FF36D440700C56E89" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\cb06f3f3e4fcbd4d7968183ff36d440700c56e89"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0178.272] GetFileType (hFile=0x444) returned 0x1 [0178.272] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0178.272] GetFileType (hFile=0x444) returned 0x1 [0178.272] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xfd5 [0178.272] ReadFile (in: hFile=0x444, lpBuffer=0x22523e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x22523e0*, lpNumberOfBytesRead=0x3be5c8*=0xfd5, lpOverlapped=0x0) returned 1 [0178.305] CloseHandle (hObject=0x444) returned 1 [0178.316] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CB06F3F3E4FCBD4D7968183FF36D440700C56E89", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CB06F3F3E4FCBD4D7968183FF36D440700C56E89", lpFilePart=0x0) returned 0x85 [0178.316] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0178.316] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CB06F3F3E4FCBD4D7968183FF36D440700C56E89" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\cb06f3f3e4fcbd4d7968183ff36d440700c56e89"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0178.318] GetFileType (hFile=0x444) returned 0x1 [0178.318] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0178.318] GetFileType (hFile=0x444) returned 0x1 [0178.318] WriteFile (in: hFile=0x444, lpBuffer=0x22ce3d8*, nNumberOfBytesToWrite=0xfe0, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x22ce3d8*, lpNumberOfBytesWritten=0x3be4d8*=0xfe0, lpOverlapped=0x0) returned 1 [0178.319] CloseHandle (hObject=0x444) returned 1 [0178.319] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CB06F3F3E4FCBD4D7968183FF36D440700C56E89", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CB06F3F3E4FCBD4D7968183FF36D440700C56E89", lpFilePart=0x0) returned 0x85 [0178.319] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CB06F3F3E4FCBD4D7968183FF36D440700C56E89.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CB06F3F3E4FCBD4D7968183FF36D440700C56E89.xuy", lpFilePart=0x0) returned 0x89 [0178.319] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0178.319] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CB06F3F3E4FCBD4D7968183FF36D440700C56E89" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\cb06f3f3e4fcbd4d7968183ff36d440700c56e89"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54569cd4, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x54569cd4, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x5621f46f, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xfe0)) returned 1 [0178.319] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0178.320] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CB06F3F3E4FCBD4D7968183FF36D440700C56E89" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\cb06f3f3e4fcbd4d7968183ff36d440700c56e89"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CB06F3F3E4FCBD4D7968183FF36D440700C56E89.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\cb06f3f3e4fcbd4d7968183ff36d440700c56e89.xuy")) returned 1 [0178.321] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CB7F80280433DB6C2AB7523118AE32E9B0145B89", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CB7F80280433DB6C2AB7523118AE32E9B0145B89", lpFilePart=0x0) returned 0x85 [0178.321] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0178.321] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CB7F80280433DB6C2AB7523118AE32E9B0145B89" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\cb7f80280433db6c2ab7523118ae32e9b0145b89"), fInfoLevelId=0x0, lpFileInformation=0x22cf798 | out: lpFileInformation=0x22cf798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcfe3af39, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xcfe3af39, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0xcfe3af39, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x27a1)) returned 1 [0178.321] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0178.321] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CB7F80280433DB6C2AB7523118AE32E9B0145B89", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CB7F80280433DB6C2AB7523118AE32E9B0145B89", lpFilePart=0x0) returned 0x85 [0178.321] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0178.321] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CB7F80280433DB6C2AB7523118AE32E9B0145B89" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\cb7f80280433db6c2ab7523118ae32e9b0145b89"), fInfoLevelId=0x0, lpFileInformation=0x22cf998 | out: lpFileInformation=0x22cf998*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcfe3af39, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xcfe3af39, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0xcfe3af39, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x27a1)) returned 1 [0178.321] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0178.321] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CB7F80280433DB6C2AB7523118AE32E9B0145B89", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CB7F80280433DB6C2AB7523118AE32E9B0145B89", lpFilePart=0x0) returned 0x85 [0178.321] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0178.322] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CB7F80280433DB6C2AB7523118AE32E9B0145B89" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\cb7f80280433db6c2ab7523118ae32e9b0145b89"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0178.322] GetFileType (hFile=0x444) returned 0x1 [0178.322] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0178.322] GetFileType (hFile=0x444) returned 0x1 [0178.323] ReadFile (in: hFile=0x444, lpBuffer=0x22d1ec8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x22d1ec8*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0178.334] CloseHandle (hObject=0x444) returned 1 [0178.334] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CB7F80280433DB6C2AB7523118AE32E9B0145B89", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CB7F80280433DB6C2AB7523118AE32E9B0145B89", lpFilePart=0x0) returned 0x85 [0178.334] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0178.334] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CB7F80280433DB6C2AB7523118AE32E9B0145B89" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\cb7f80280433db6c2ab7523118ae32e9b0145b89"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0178.335] GetFileType (hFile=0x444) returned 0x1 [0178.335] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0178.335] GetFileType (hFile=0x444) returned 0x1 [0178.335] WriteFile (in: hFile=0x444, lpBuffer=0x22cfb78*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x22cfb78*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0178.335] CloseHandle (hObject=0x444) returned 1 [0178.335] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CB7F80280433DB6C2AB7523118AE32E9B0145B89", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CB7F80280433DB6C2AB7523118AE32E9B0145B89", lpFilePart=0x0) returned 0x85 [0178.335] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CB7F80280433DB6C2AB7523118AE32E9B0145B89.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CB7F80280433DB6C2AB7523118AE32E9B0145B89.xuy", lpFilePart=0x0) returned 0x89 [0178.335] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0178.335] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CB7F80280433DB6C2AB7523118AE32E9B0145B89" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\cb7f80280433db6c2ab7523118ae32e9b0145b89"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcfe3af39, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xcfe3af39, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x5624571d, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x27a1)) returned 1 [0178.335] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0178.335] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CB7F80280433DB6C2AB7523118AE32E9B0145B89" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\cb7f80280433db6c2ab7523118ae32e9b0145b89"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CB7F80280433DB6C2AB7523118AE32E9B0145B89.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\cb7f80280433db6c2ab7523118ae32e9b0145b89.xuy")) returned 1 [0178.337] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CBAC5E389D030968ED6917C840B4EC0A4A63E2E9", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CBAC5E389D030968ED6917C840B4EC0A4A63E2E9", lpFilePart=0x0) returned 0x85 [0178.337] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0178.337] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CBAC5E389D030968ED6917C840B4EC0A4A63E2E9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\cbac5e389d030968ed6917c840b4ec0a4a63e2e9"), fInfoLevelId=0x0, lpFileInformation=0x234e470 | out: lpFileInformation=0x234e470*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5413db09, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x5413db09, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x5a759447, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x3acf)) returned 1 [0178.337] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0178.337] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CBAC5E389D030968ED6917C840B4EC0A4A63E2E9", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CBAC5E389D030968ED6917C840B4EC0A4A63E2E9", lpFilePart=0x0) returned 0x85 [0178.337] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0178.337] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CBAC5E389D030968ED6917C840B4EC0A4A63E2E9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\cbac5e389d030968ed6917c840b4ec0a4a63e2e9"), fInfoLevelId=0x0, lpFileInformation=0x234e670 | out: lpFileInformation=0x234e670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5413db09, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x5413db09, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x5a759447, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x3acf)) returned 1 [0178.337] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0178.337] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CBAC5E389D030968ED6917C840B4EC0A4A63E2E9", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CBAC5E389D030968ED6917C840B4EC0A4A63E2E9", lpFilePart=0x0) returned 0x85 [0178.337] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0178.337] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CBAC5E389D030968ED6917C840B4EC0A4A63E2E9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\cbac5e389d030968ed6917c840b4ec0a4a63e2e9"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0178.339] GetFileType (hFile=0x444) returned 0x1 [0178.339] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0178.339] GetFileType (hFile=0x444) returned 0x1 [0178.339] ReadFile (in: hFile=0x444, lpBuffer=0x2350ba0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x2350ba0*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0178.410] CloseHandle (hObject=0x444) returned 1 [0178.410] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CBAC5E389D030968ED6917C840B4EC0A4A63E2E9", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CBAC5E389D030968ED6917C840B4EC0A4A63E2E9", lpFilePart=0x0) returned 0x85 [0178.410] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0178.410] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CBAC5E389D030968ED6917C840B4EC0A4A63E2E9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\cbac5e389d030968ed6917c840b4ec0a4a63e2e9"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0178.410] GetFileType (hFile=0x444) returned 0x1 [0178.410] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0178.410] GetFileType (hFile=0x444) returned 0x1 [0178.410] WriteFile (in: hFile=0x444, lpBuffer=0x2188818*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x2188818*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0178.410] CloseHandle (hObject=0x444) returned 1 [0178.411] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CBAC5E389D030968ED6917C840B4EC0A4A63E2E9", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CBAC5E389D030968ED6917C840B4EC0A4A63E2E9", lpFilePart=0x0) returned 0x85 [0178.411] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CBAC5E389D030968ED6917C840B4EC0A4A63E2E9.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CBAC5E389D030968ED6917C840B4EC0A4A63E2E9.xuy", lpFilePart=0x0) returned 0x89 [0178.411] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0178.411] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CBAC5E389D030968ED6917C840B4EC0A4A63E2E9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\cbac5e389d030968ed6917c840b4ec0a4a63e2e9"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5413db09, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x5413db09, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x56304325, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x3acf)) returned 1 [0178.411] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0178.411] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CBAC5E389D030968ED6917C840B4EC0A4A63E2E9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\cbac5e389d030968ed6917c840b4ec0a4a63e2e9"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CBAC5E389D030968ED6917C840B4EC0A4A63E2E9.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\cbac5e389d030968ed6917c840b4ec0a4a63e2e9.xuy")) returned 1 [0178.412] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CC2A8BDF0DCCF7EA8C7C4105F9E28E1D4A76A49B", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CC2A8BDF0DCCF7EA8C7C4105F9E28E1D4A76A49B", lpFilePart=0x0) returned 0x85 [0178.412] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0178.412] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CC2A8BDF0DCCF7EA8C7C4105F9E28E1D4A76A49B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\cc2a8bdf0dccf7ea8c7c4105f9e28e1d4a76a49b"), fInfoLevelId=0x0, lpFileInformation=0x21cf390 | out: lpFileInformation=0x21cf390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc50c5407, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc50c5407, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xc59a8c5e, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x185d5)) returned 1 [0178.412] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0178.413] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CC2A8BDF0DCCF7EA8C7C4105F9E28E1D4A76A49B", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CC2A8BDF0DCCF7EA8C7C4105F9E28E1D4A76A49B", lpFilePart=0x0) returned 0x85 [0178.413] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0178.413] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CC2A8BDF0DCCF7EA8C7C4105F9E28E1D4A76A49B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\cc2a8bdf0dccf7ea8c7c4105f9e28e1d4a76a49b"), fInfoLevelId=0x0, lpFileInformation=0x21cf590 | out: lpFileInformation=0x21cf590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc50c5407, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc50c5407, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xc59a8c5e, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x185d5)) returned 1 [0178.413] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0178.413] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CC2A8BDF0DCCF7EA8C7C4105F9E28E1D4A76A49B", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CC2A8BDF0DCCF7EA8C7C4105F9E28E1D4A76A49B", lpFilePart=0x0) returned 0x85 [0178.413] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0178.413] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CC2A8BDF0DCCF7EA8C7C4105F9E28E1D4A76A49B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\cc2a8bdf0dccf7ea8c7c4105f9e28e1d4a76a49b"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0178.414] GetFileType (hFile=0x444) returned 0x1 [0178.414] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0178.414] GetFileType (hFile=0x444) returned 0x1 [0178.414] ReadFile (in: hFile=0x444, lpBuffer=0x21d1ac0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x21d1ac0*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0178.473] CloseHandle (hObject=0x444) returned 1 [0178.773] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CC2A8BDF0DCCF7EA8C7C4105F9E28E1D4A76A49B", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CC2A8BDF0DCCF7EA8C7C4105F9E28E1D4A76A49B", lpFilePart=0x0) returned 0x85 [0178.773] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0178.773] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CC2A8BDF0DCCF7EA8C7C4105F9E28E1D4A76A49B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\cc2a8bdf0dccf7ea8c7c4105f9e28e1d4a76a49b"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0178.773] GetFileType (hFile=0x444) returned 0x1 [0178.773] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0178.773] GetFileType (hFile=0x444) returned 0x1 [0178.773] WriteFile (in: hFile=0x444, lpBuffer=0x21cf770*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x21cf770*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0178.773] CloseHandle (hObject=0x444) returned 1 [0178.773] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CC2A8BDF0DCCF7EA8C7C4105F9E28E1D4A76A49B", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CC2A8BDF0DCCF7EA8C7C4105F9E28E1D4A76A49B", lpFilePart=0x0) returned 0x85 [0178.774] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CC2A8BDF0DCCF7EA8C7C4105F9E28E1D4A76A49B.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CC2A8BDF0DCCF7EA8C7C4105F9E28E1D4A76A49B.xuy", lpFilePart=0x0) returned 0x89 [0178.774] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0178.774] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CC2A8BDF0DCCF7EA8C7C4105F9E28E1D4A76A49B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\cc2a8bdf0dccf7ea8c7c4105f9e28e1d4a76a49b"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc50c5407, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc50c5407, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x566719d2, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x185d5)) returned 1 [0178.774] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0178.774] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CC2A8BDF0DCCF7EA8C7C4105F9E28E1D4A76A49B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\cc2a8bdf0dccf7ea8c7c4105f9e28e1d4a76a49b"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CC2A8BDF0DCCF7EA8C7C4105F9E28E1D4A76A49B.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\cc2a8bdf0dccf7ea8c7c4105f9e28e1d4a76a49b.xuy")) returned 1 [0178.776] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CC8CE593A5F223276D1643FB5B74A4EDF0663E86", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CC8CE593A5F223276D1643FB5B74A4EDF0663E86", lpFilePart=0x0) returned 0x85 [0178.776] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0178.776] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CC8CE593A5F223276D1643FB5B74A4EDF0663E86" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\cc8ce593a5f223276d1643fb5b74a4edf0663e86"), fInfoLevelId=0x0, lpFileInformation=0x224e068 | out: lpFileInformation=0x224e068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86329886, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x86329886, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x8632bfb5, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0xf22)) returned 1 [0178.776] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0178.776] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CC8CE593A5F223276D1643FB5B74A4EDF0663E86", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CC8CE593A5F223276D1643FB5B74A4EDF0663E86", lpFilePart=0x0) returned 0x85 [0178.776] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0178.776] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CC8CE593A5F223276D1643FB5B74A4EDF0663E86" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\cc8ce593a5f223276d1643fb5b74a4edf0663e86"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0178.776] GetFileType (hFile=0x444) returned 0x1 [0178.777] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0178.777] GetFileType (hFile=0x444) returned 0x1 [0178.777] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xf22 [0178.777] ReadFile (in: hFile=0x444, lpBuffer=0x224f3a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x224f3a8*, lpNumberOfBytesRead=0x3be5c8*=0xf22, lpOverlapped=0x0) returned 1 [0178.782] CloseHandle (hObject=0x444) returned 1 [0178.793] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CC8CE593A5F223276D1643FB5B74A4EDF0663E86", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CC8CE593A5F223276D1643FB5B74A4EDF0663E86", lpFilePart=0x0) returned 0x85 [0178.793] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0178.793] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CC8CE593A5F223276D1643FB5B74A4EDF0663E86" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\cc8ce593a5f223276d1643fb5b74a4edf0663e86"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0178.795] GetFileType (hFile=0x444) returned 0x1 [0178.795] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0178.795] GetFileType (hFile=0x444) returned 0x1 [0178.795] WriteFile (in: hFile=0x444, lpBuffer=0x22cb030*, nNumberOfBytesToWrite=0xf30, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x22cb030*, lpNumberOfBytesWritten=0x3be4d8*=0xf30, lpOverlapped=0x0) returned 1 [0178.796] CloseHandle (hObject=0x444) returned 1 [0178.796] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CC8CE593A5F223276D1643FB5B74A4EDF0663E86", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CC8CE593A5F223276D1643FB5B74A4EDF0663E86", lpFilePart=0x0) returned 0x85 [0178.796] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CC8CE593A5F223276D1643FB5B74A4EDF0663E86.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CC8CE593A5F223276D1643FB5B74A4EDF0663E86.xuy", lpFilePart=0x0) returned 0x89 [0178.796] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0178.797] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CC8CE593A5F223276D1643FB5B74A4EDF0663E86" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\cc8ce593a5f223276d1643fb5b74a4edf0663e86"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86329886, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x86329886, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x566bdfb8, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xf30)) returned 1 [0178.797] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0178.797] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CC8CE593A5F223276D1643FB5B74A4EDF0663E86" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\cc8ce593a5f223276d1643fb5b74a4edf0663e86"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CC8CE593A5F223276D1643FB5B74A4EDF0663E86.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\cc8ce593a5f223276d1643fb5b74a4edf0663e86.xuy")) returned 1 [0178.798] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CCC3379A00D4874CCE6FC80F67576D843D43CF1D", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CCC3379A00D4874CCE6FC80F67576D843D43CF1D", lpFilePart=0x0) returned 0x85 [0178.798] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0178.798] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CCC3379A00D4874CCE6FC80F67576D843D43CF1D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ccc3379a00d4874cce6fc80f67576d843d43cf1d"), fInfoLevelId=0x0, lpFileInformation=0x22cc3f0 | out: lpFileInformation=0x22cc3f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5e982952, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x5e982952, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x5e982952, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x1bc1e)) returned 1 [0178.798] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0178.798] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CCC3379A00D4874CCE6FC80F67576D843D43CF1D", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CCC3379A00D4874CCE6FC80F67576D843D43CF1D", lpFilePart=0x0) returned 0x85 [0178.798] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0178.798] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CCC3379A00D4874CCE6FC80F67576D843D43CF1D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ccc3379a00d4874cce6fc80f67576d843d43cf1d"), fInfoLevelId=0x0, lpFileInformation=0x22cc5f0 | out: lpFileInformation=0x22cc5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5e982952, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x5e982952, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x5e982952, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x1bc1e)) returned 1 [0178.799] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0178.799] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CCC3379A00D4874CCE6FC80F67576D843D43CF1D", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CCC3379A00D4874CCE6FC80F67576D843D43CF1D", lpFilePart=0x0) returned 0x85 [0178.799] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0178.799] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CCC3379A00D4874CCE6FC80F67576D843D43CF1D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ccc3379a00d4874cce6fc80f67576d843d43cf1d"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0178.800] GetFileType (hFile=0x444) returned 0x1 [0178.800] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0178.800] GetFileType (hFile=0x444) returned 0x1 [0178.800] ReadFile (in: hFile=0x444, lpBuffer=0x22ceb20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x22ceb20*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0178.824] CloseHandle (hObject=0x444) returned 1 [0178.824] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CCC3379A00D4874CCE6FC80F67576D843D43CF1D", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CCC3379A00D4874CCE6FC80F67576D843D43CF1D", lpFilePart=0x0) returned 0x85 [0178.824] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0178.824] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CCC3379A00D4874CCE6FC80F67576D843D43CF1D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ccc3379a00d4874cce6fc80f67576d843d43cf1d"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0178.825] GetFileType (hFile=0x444) returned 0x1 [0178.825] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0178.825] GetFileType (hFile=0x444) returned 0x1 [0178.825] WriteFile (in: hFile=0x444, lpBuffer=0x22cc7d0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x22cc7d0*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0178.825] CloseHandle (hObject=0x444) returned 1 [0178.829] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CCC3379A00D4874CCE6FC80F67576D843D43CF1D", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CCC3379A00D4874CCE6FC80F67576D843D43CF1D", lpFilePart=0x0) returned 0x85 [0178.829] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CCC3379A00D4874CCE6FC80F67576D843D43CF1D.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CCC3379A00D4874CCE6FC80F67576D843D43CF1D.xuy", lpFilePart=0x0) returned 0x89 [0178.830] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0178.830] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CCC3379A00D4874CCE6FC80F67576D843D43CF1D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ccc3379a00d4874cce6fc80f67576d843d43cf1d"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5e982952, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x5e982952, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x5670a307, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x1bc1e)) returned 1 [0178.830] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0178.830] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CCC3379A00D4874CCE6FC80F67576D843D43CF1D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ccc3379a00d4874cce6fc80f67576d843d43cf1d"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CCC3379A00D4874CCE6FC80F67576D843D43CF1D.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ccc3379a00d4874cce6fc80f67576d843d43cf1d.xuy")) returned 1 [0178.831] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CE031113EAB415F7A4924029386AB488343D75CD", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CE031113EAB415F7A4924029386AB488343D75CD", lpFilePart=0x0) returned 0x85 [0178.831] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0178.831] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CE031113EAB415F7A4924029386AB488343D75CD" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ce031113eab415f7a4924029386ab488343d75cd"), fInfoLevelId=0x0, lpFileInformation=0x234b0c8 | out: lpFileInformation=0x234b0c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7bc87417, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x7bc87417, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x7bcad6a5, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x4d2)) returned 1 [0178.831] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0178.832] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CE031113EAB415F7A4924029386AB488343D75CD", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CE031113EAB415F7A4924029386AB488343D75CD", lpFilePart=0x0) returned 0x85 [0178.832] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0178.832] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CE031113EAB415F7A4924029386AB488343D75CD" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ce031113eab415f7a4924029386ab488343d75cd"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0178.832] GetFileType (hFile=0x444) returned 0x1 [0178.832] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0178.832] GetFileType (hFile=0x444) returned 0x1 [0178.832] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x4d2 [0178.832] ReadFile (in: hFile=0x444, lpBuffer=0x234b9b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x234b9b8*, lpNumberOfBytesRead=0x3be5c8*=0x4d2, lpOverlapped=0x0) returned 1 [0178.862] CloseHandle (hObject=0x444) returned 1 [0178.904] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CE031113EAB415F7A4924029386AB488343D75CD", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CE031113EAB415F7A4924029386AB488343D75CD", lpFilePart=0x0) returned 0x85 [0178.904] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0178.904] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CE031113EAB415F7A4924029386AB488343D75CD" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ce031113eab415f7a4924029386ab488343d75cd"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0178.906] GetFileType (hFile=0x444) returned 0x1 [0178.906] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0178.906] GetFileType (hFile=0x444) returned 0x1 [0178.906] WriteFile (in: hFile=0x444, lpBuffer=0x21c1588*, nNumberOfBytesToWrite=0x4e0, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x21c1588*, lpNumberOfBytesWritten=0x3be4d8*=0x4e0, lpOverlapped=0x0) returned 1 [0178.907] CloseHandle (hObject=0x444) returned 1 [0178.907] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CE031113EAB415F7A4924029386AB488343D75CD", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CE031113EAB415F7A4924029386AB488343D75CD", lpFilePart=0x0) returned 0x85 [0178.907] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CE031113EAB415F7A4924029386AB488343D75CD.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CE031113EAB415F7A4924029386AB488343D75CD.xuy", lpFilePart=0x0) returned 0x89 [0178.907] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0178.907] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CE031113EAB415F7A4924029386AB488343D75CD" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ce031113eab415f7a4924029386ab488343d75cd"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7bc87417, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x7bc87417, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x567c9221, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x4e0)) returned 1 [0178.907] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0178.908] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CE031113EAB415F7A4924029386AB488343D75CD" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ce031113eab415f7a4924029386ab488343d75cd"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CE031113EAB415F7A4924029386AB488343D75CD.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ce031113eab415f7a4924029386ab488343d75cd.xuy")) returned 1 [0178.909] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CE42030F5816EA164F67512875E5193BD6324334", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CE42030F5816EA164F67512875E5193BD6324334", lpFilePart=0x0) returned 0x85 [0178.909] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0178.909] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CE42030F5816EA164F67512875E5193BD6324334" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ce42030f5816ea164f67512875e5193bd6324334"), fInfoLevelId=0x0, lpFileInformation=0x21c2948 | out: lpFileInformation=0x21c2948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x543c62ff, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x543c62ff, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x543c62ff, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x2144)) returned 1 [0178.909] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0178.909] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CE42030F5816EA164F67512875E5193BD6324334", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CE42030F5816EA164F67512875E5193BD6324334", lpFilePart=0x0) returned 0x85 [0178.909] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0178.909] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CE42030F5816EA164F67512875E5193BD6324334" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ce42030f5816ea164f67512875e5193bd6324334"), fInfoLevelId=0x0, lpFileInformation=0x21c2b48 | out: lpFileInformation=0x21c2b48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x543c62ff, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x543c62ff, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x543c62ff, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x2144)) returned 1 [0178.909] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0178.909] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CE42030F5816EA164F67512875E5193BD6324334", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CE42030F5816EA164F67512875E5193BD6324334", lpFilePart=0x0) returned 0x85 [0178.909] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0178.909] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CE42030F5816EA164F67512875E5193BD6324334" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ce42030f5816ea164f67512875e5193bd6324334"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0178.910] GetFileType (hFile=0x444) returned 0x1 [0178.910] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0178.910] GetFileType (hFile=0x444) returned 0x1 [0178.910] ReadFile (in: hFile=0x444, lpBuffer=0x21c5078, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x21c5078*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0178.926] CloseHandle (hObject=0x444) returned 1 [0178.926] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CE42030F5816EA164F67512875E5193BD6324334", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CE42030F5816EA164F67512875E5193BD6324334", lpFilePart=0x0) returned 0x85 [0178.926] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0178.926] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CE42030F5816EA164F67512875E5193BD6324334" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ce42030f5816ea164f67512875e5193bd6324334"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0178.927] GetFileType (hFile=0x444) returned 0x1 [0178.927] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0178.927] GetFileType (hFile=0x444) returned 0x1 [0178.927] WriteFile (in: hFile=0x444, lpBuffer=0x21c2d28*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x21c2d28*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0178.927] CloseHandle (hObject=0x444) returned 1 [0178.927] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CE42030F5816EA164F67512875E5193BD6324334", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CE42030F5816EA164F67512875E5193BD6324334", lpFilePart=0x0) returned 0x85 [0178.927] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CE42030F5816EA164F67512875E5193BD6324334.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CE42030F5816EA164F67512875E5193BD6324334.xuy", lpFilePart=0x0) returned 0x89 [0178.927] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0178.927] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CE42030F5816EA164F67512875E5193BD6324334" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ce42030f5816ea164f67512875e5193bd6324334"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x543c62ff, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x543c62ff, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x56805894, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2144)) returned 1 [0178.928] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0178.928] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CE42030F5816EA164F67512875E5193BD6324334" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ce42030f5816ea164f67512875e5193bd6324334"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CE42030F5816EA164F67512875E5193BD6324334.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ce42030f5816ea164f67512875e5193bd6324334.xuy")) returned 1 [0178.930] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CEE4F020C2AE9F88C6D9FD835E8E0D0BE281B6F4", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CEE4F020C2AE9F88C6D9FD835E8E0D0BE281B6F4", lpFilePart=0x0) returned 0x85 [0178.930] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0178.930] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CEE4F020C2AE9F88C6D9FD835E8E0D0BE281B6F4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\cee4f020c2ae9f88c6d9fd835e8e0d0be281b6f4"), fInfoLevelId=0x0, lpFileInformation=0x2241620 | out: lpFileInformation=0x2241620*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x865403d3, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x865403d3, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x865849b9, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x12e8)) returned 1 [0178.930] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0178.930] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CEE4F020C2AE9F88C6D9FD835E8E0D0BE281B6F4", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CEE4F020C2AE9F88C6D9FD835E8E0D0BE281B6F4", lpFilePart=0x0) returned 0x85 [0178.930] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0178.930] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CEE4F020C2AE9F88C6D9FD835E8E0D0BE281B6F4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\cee4f020c2ae9f88c6d9fd835e8e0d0be281b6f4"), fInfoLevelId=0x0, lpFileInformation=0x2241820 | out: lpFileInformation=0x2241820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x865403d3, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x865403d3, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x865849b9, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x12e8)) returned 1 [0178.930] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0178.930] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CEE4F020C2AE9F88C6D9FD835E8E0D0BE281B6F4", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CEE4F020C2AE9F88C6D9FD835E8E0D0BE281B6F4", lpFilePart=0x0) returned 0x85 [0178.930] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0178.930] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CEE4F020C2AE9F88C6D9FD835E8E0D0BE281B6F4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\cee4f020c2ae9f88c6d9fd835e8e0d0be281b6f4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0178.932] GetFileType (hFile=0x444) returned 0x1 [0178.932] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0178.932] GetFileType (hFile=0x444) returned 0x1 [0178.932] ReadFile (in: hFile=0x444, lpBuffer=0x2243d50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x2243d50*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0178.952] CloseHandle (hObject=0x444) returned 1 [0178.952] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CEE4F020C2AE9F88C6D9FD835E8E0D0BE281B6F4", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CEE4F020C2AE9F88C6D9FD835E8E0D0BE281B6F4", lpFilePart=0x0) returned 0x85 [0178.952] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0178.952] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CEE4F020C2AE9F88C6D9FD835E8E0D0BE281B6F4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\cee4f020c2ae9f88c6d9fd835e8e0d0be281b6f4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0178.953] GetFileType (hFile=0x444) returned 0x1 [0178.953] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0178.953] GetFileType (hFile=0x444) returned 0x1 [0178.953] WriteFile (in: hFile=0x444, lpBuffer=0x2241a00*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x2241a00*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0178.953] CloseHandle (hObject=0x444) returned 1 [0178.953] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CEE4F020C2AE9F88C6D9FD835E8E0D0BE281B6F4", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CEE4F020C2AE9F88C6D9FD835E8E0D0BE281B6F4", lpFilePart=0x0) returned 0x85 [0178.953] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CEE4F020C2AE9F88C6D9FD835E8E0D0BE281B6F4.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CEE4F020C2AE9F88C6D9FD835E8E0D0BE281B6F4.xuy", lpFilePart=0x0) returned 0x89 [0178.953] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0178.954] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CEE4F020C2AE9F88C6D9FD835E8E0D0BE281B6F4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\cee4f020c2ae9f88c6d9fd835e8e0d0be281b6f4"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x865403d3, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x865403d3, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x5684493f, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0178.954] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0178.954] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CEE4F020C2AE9F88C6D9FD835E8E0D0BE281B6F4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\cee4f020c2ae9f88c6d9fd835e8e0d0be281b6f4"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CEE4F020C2AE9F88C6D9FD835E8E0D0BE281B6F4.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\cee4f020c2ae9f88c6d9fd835e8e0d0be281b6f4.xuy")) returned 1 [0178.956] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CFF24293E6E60613E48D2F2E2CC1F721414CCCF7", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CFF24293E6E60613E48D2F2E2CC1F721414CCCF7", lpFilePart=0x0) returned 0x85 [0178.956] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0178.956] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CFF24293E6E60613E48D2F2E2CC1F721414CCCF7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\cff24293e6e60613e48d2f2e2cc1f721414cccf7"), fInfoLevelId=0x0, lpFileInformation=0x22c02f8 | out: lpFileInformation=0x22c02f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86402d5c, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x86402d5c, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x886a421c, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x1a08)) returned 1 [0178.956] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0178.956] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CFF24293E6E60613E48D2F2E2CC1F721414CCCF7", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CFF24293E6E60613E48D2F2E2CC1F721414CCCF7", lpFilePart=0x0) returned 0x85 [0178.956] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0178.956] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CFF24293E6E60613E48D2F2E2CC1F721414CCCF7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\cff24293e6e60613e48d2f2e2cc1f721414cccf7"), fInfoLevelId=0x0, lpFileInformation=0x22c04f8 | out: lpFileInformation=0x22c04f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86402d5c, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x86402d5c, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x886a421c, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x1a08)) returned 1 [0178.956] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0178.956] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CFF24293E6E60613E48D2F2E2CC1F721414CCCF7", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CFF24293E6E60613E48D2F2E2CC1F721414CCCF7", lpFilePart=0x0) returned 0x85 [0178.956] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0178.956] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CFF24293E6E60613E48D2F2E2CC1F721414CCCF7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\cff24293e6e60613e48d2f2e2cc1f721414cccf7"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0178.958] GetFileType (hFile=0x444) returned 0x1 [0178.958] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0178.958] GetFileType (hFile=0x444) returned 0x1 [0178.958] ReadFile (in: hFile=0x444, lpBuffer=0x22c2a28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x22c2a28*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0178.970] CloseHandle (hObject=0x444) returned 1 [0178.970] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CFF24293E6E60613E48D2F2E2CC1F721414CCCF7", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CFF24293E6E60613E48D2F2E2CC1F721414CCCF7", lpFilePart=0x0) returned 0x85 [0178.970] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0178.970] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CFF24293E6E60613E48D2F2E2CC1F721414CCCF7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\cff24293e6e60613e48d2f2e2cc1f721414cccf7"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0178.971] GetFileType (hFile=0x444) returned 0x1 [0178.971] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0178.971] GetFileType (hFile=0x444) returned 0x1 [0178.971] WriteFile (in: hFile=0x444, lpBuffer=0x22c06d8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x22c06d8*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0178.971] CloseHandle (hObject=0x444) returned 1 [0178.971] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CFF24293E6E60613E48D2F2E2CC1F721414CCCF7", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CFF24293E6E60613E48D2F2E2CC1F721414CCCF7", lpFilePart=0x0) returned 0x85 [0178.971] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CFF24293E6E60613E48D2F2E2CC1F721414CCCF7.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CFF24293E6E60613E48D2F2E2CC1F721414CCCF7.xuy", lpFilePart=0x0) returned 0x89 [0178.971] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0178.971] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CFF24293E6E60613E48D2F2E2CC1F721414CCCF7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\cff24293e6e60613e48d2f2e2cc1f721414cccf7"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86402d5c, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x86402d5c, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x56851e48, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0178.971] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0178.971] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CFF24293E6E60613E48D2F2E2CC1F721414CCCF7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\cff24293e6e60613e48d2f2e2cc1f721414cccf7"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CFF24293E6E60613E48D2F2E2CC1F721414CCCF7.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\cff24293e6e60613e48d2f2e2cc1f721414cccf7.xuy")) returned 1 [0178.973] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D012B01EF531E718C771DAC040F05C0A21530D4D", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D012B01EF531E718C771DAC040F05C0A21530D4D", lpFilePart=0x0) returned 0x85 [0178.973] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0178.973] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D012B01EF531E718C771DAC040F05C0A21530D4D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d012b01ef531e718c771dac040f05c0a21530d4d"), fInfoLevelId=0x0, lpFileInformation=0x233efd0 | out: lpFileInformation=0x233efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf369a5b3, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xf369a5b3, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x5540d09f, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x484f)) returned 1 [0178.973] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0178.973] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D012B01EF531E718C771DAC040F05C0A21530D4D", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D012B01EF531E718C771DAC040F05C0A21530D4D", lpFilePart=0x0) returned 0x85 [0178.973] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0178.973] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D012B01EF531E718C771DAC040F05C0A21530D4D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d012b01ef531e718c771dac040f05c0a21530d4d"), fInfoLevelId=0x0, lpFileInformation=0x233f1d0 | out: lpFileInformation=0x233f1d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf369a5b3, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xf369a5b3, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x5540d09f, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x484f)) returned 1 [0178.973] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0178.973] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D012B01EF531E718C771DAC040F05C0A21530D4D", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D012B01EF531E718C771DAC040F05C0A21530D4D", lpFilePart=0x0) returned 0x85 [0178.973] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0178.973] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D012B01EF531E718C771DAC040F05C0A21530D4D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d012b01ef531e718c771dac040f05c0a21530d4d"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0178.975] GetFileType (hFile=0x444) returned 0x1 [0178.975] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0178.975] GetFileType (hFile=0x444) returned 0x1 [0178.975] ReadFile (in: hFile=0x444, lpBuffer=0x2341700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x2341700*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0179.019] CloseHandle (hObject=0x444) returned 1 [0179.019] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D012B01EF531E718C771DAC040F05C0A21530D4D", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D012B01EF531E718C771DAC040F05C0A21530D4D", lpFilePart=0x0) returned 0x85 [0179.019] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0179.019] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D012B01EF531E718C771DAC040F05C0A21530D4D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d012b01ef531e718c771dac040f05c0a21530d4d"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0179.020] GetFileType (hFile=0x444) returned 0x1 [0179.020] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0179.020] GetFileType (hFile=0x444) returned 0x1 [0179.020] WriteFile (in: hFile=0x444, lpBuffer=0x2188818*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x2188818*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0179.020] CloseHandle (hObject=0x444) returned 1 [0179.020] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D012B01EF531E718C771DAC040F05C0A21530D4D", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D012B01EF531E718C771DAC040F05C0A21530D4D", lpFilePart=0x0) returned 0x85 [0179.020] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D012B01EF531E718C771DAC040F05C0A21530D4D.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D012B01EF531E718C771DAC040F05C0A21530D4D.xuy", lpFilePart=0x0) returned 0x89 [0179.020] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0179.020] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D012B01EF531E718C771DAC040F05C0A21530D4D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d012b01ef531e718c771dac040f05c0a21530d4d"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf369a5b3, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xf369a5b3, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x568c4827, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x484f)) returned 1 [0179.020] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0179.020] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D012B01EF531E718C771DAC040F05C0A21530D4D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d012b01ef531e718c771dac040f05c0a21530d4d"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D012B01EF531E718C771DAC040F05C0A21530D4D.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d012b01ef531e718c771dac040f05c0a21530d4d.xuy")) returned 1 [0179.025] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D04EEBE4CAD296A12D74364C89C4C67B17DA3986", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D04EEBE4CAD296A12D74364C89C4C67B17DA3986", lpFilePart=0x0) returned 0x85 [0179.025] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0179.025] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D04EEBE4CAD296A12D74364C89C4C67B17DA3986" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d04eebe4cad296a12d74364c89c4c67b17da3986"), fInfoLevelId=0x0, lpFileInformation=0x21c0980 | out: lpFileInformation=0x21c0980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x483a780d, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x483a780d, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x48d30ecb, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0x2ca1)) returned 1 [0179.025] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0179.025] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D04EEBE4CAD296A12D74364C89C4C67B17DA3986", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D04EEBE4CAD296A12D74364C89C4C67B17DA3986", lpFilePart=0x0) returned 0x85 [0179.025] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0179.025] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D04EEBE4CAD296A12D74364C89C4C67B17DA3986" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d04eebe4cad296a12d74364c89c4c67b17da3986"), fInfoLevelId=0x0, lpFileInformation=0x21c0b80 | out: lpFileInformation=0x21c0b80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x483a780d, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x483a780d, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x48d30ecb, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0x2ca1)) returned 1 [0179.025] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0179.025] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D04EEBE4CAD296A12D74364C89C4C67B17DA3986", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D04EEBE4CAD296A12D74364C89C4C67B17DA3986", lpFilePart=0x0) returned 0x85 [0179.025] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0179.025] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D04EEBE4CAD296A12D74364C89C4C67B17DA3986" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d04eebe4cad296a12d74364c89c4c67b17da3986"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0179.026] GetFileType (hFile=0x444) returned 0x1 [0179.026] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0179.026] GetFileType (hFile=0x444) returned 0x1 [0179.026] ReadFile (in: hFile=0x444, lpBuffer=0x21c30b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x21c30b0*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0179.039] CloseHandle (hObject=0x444) returned 1 [0179.039] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D04EEBE4CAD296A12D74364C89C4C67B17DA3986", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D04EEBE4CAD296A12D74364C89C4C67B17DA3986", lpFilePart=0x0) returned 0x85 [0179.039] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0179.039] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D04EEBE4CAD296A12D74364C89C4C67B17DA3986" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d04eebe4cad296a12d74364c89c4c67b17da3986"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0179.039] GetFileType (hFile=0x444) returned 0x1 [0179.039] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0179.039] GetFileType (hFile=0x444) returned 0x1 [0179.039] WriteFile (in: hFile=0x444, lpBuffer=0x21c0d60*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x21c0d60*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0179.039] CloseHandle (hObject=0x444) returned 1 [0179.040] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D04EEBE4CAD296A12D74364C89C4C67B17DA3986", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D04EEBE4CAD296A12D74364C89C4C67B17DA3986", lpFilePart=0x0) returned 0x85 [0179.040] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D04EEBE4CAD296A12D74364C89C4C67B17DA3986.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D04EEBE4CAD296A12D74364C89C4C67B17DA3986.xuy", lpFilePart=0x0) returned 0x89 [0179.040] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0179.040] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D04EEBE4CAD296A12D74364C89C4C67B17DA3986" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d04eebe4cad296a12d74364c89c4c67b17da3986"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x483a780d, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x483a780d, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x5691121a, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2ca1)) returned 1 [0179.040] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0179.040] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D04EEBE4CAD296A12D74364C89C4C67B17DA3986" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d04eebe4cad296a12d74364c89c4c67b17da3986"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D04EEBE4CAD296A12D74364C89C4C67B17DA3986.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d04eebe4cad296a12d74364c89c4c67b17da3986.xuy")) returned 1 [0179.041] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D0EC0312840E3FC86B187974BCF7249A67B8FC14", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D0EC0312840E3FC86B187974BCF7249A67B8FC14", lpFilePart=0x0) returned 0x85 [0179.041] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0179.041] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D0EC0312840E3FC86B187974BCF7249A67B8FC14" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d0ec0312840e3fc86b187974bcf7249a67b8fc14"), fInfoLevelId=0x0, lpFileInformation=0x223f658 | out: lpFileInformation=0x223f658*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf499c603, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xf499c603, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0xf49a143b, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0xe46)) returned 1 [0179.042] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0179.042] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D0EC0312840E3FC86B187974BCF7249A67B8FC14", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D0EC0312840E3FC86B187974BCF7249A67B8FC14", lpFilePart=0x0) returned 0x85 [0179.042] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0179.042] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D0EC0312840E3FC86B187974BCF7249A67B8FC14" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d0ec0312840e3fc86b187974bcf7249a67b8fc14"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0179.042] GetFileType (hFile=0x444) returned 0x1 [0179.042] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0179.042] GetFileType (hFile=0x444) returned 0x1 [0179.042] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xe46 [0179.042] ReadFile (in: hFile=0x444, lpBuffer=0x22408b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x22408b8*, lpNumberOfBytesRead=0x3be5c8*=0xe46, lpOverlapped=0x0) returned 1 [0179.057] CloseHandle (hObject=0x444) returned 1 [0179.067] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D0EC0312840E3FC86B187974BCF7249A67B8FC14", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D0EC0312840E3FC86B187974BCF7249A67B8FC14", lpFilePart=0x0) returned 0x85 [0179.067] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0179.067] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D0EC0312840E3FC86B187974BCF7249A67B8FC14" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d0ec0312840e3fc86b187974bcf7249a67b8fc14"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0179.069] GetFileType (hFile=0x444) returned 0x1 [0179.069] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0179.069] GetFileType (hFile=0x444) returned 0x1 [0179.069] WriteFile (in: hFile=0x444, lpBuffer=0x22bc0e0*, nNumberOfBytesToWrite=0xe50, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x22bc0e0*, lpNumberOfBytesWritten=0x3be4d8*=0xe50, lpOverlapped=0x0) returned 1 [0179.070] CloseHandle (hObject=0x444) returned 1 [0179.070] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D0EC0312840E3FC86B187974BCF7249A67B8FC14", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D0EC0312840E3FC86B187974BCF7249A67B8FC14", lpFilePart=0x0) returned 0x85 [0179.070] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D0EC0312840E3FC86B187974BCF7249A67B8FC14.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D0EC0312840E3FC86B187974BCF7249A67B8FC14.xuy", lpFilePart=0x0) returned 0x89 [0179.070] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0179.070] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D0EC0312840E3FC86B187974BCF7249A67B8FC14" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d0ec0312840e3fc86b187974bcf7249a67b8fc14"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf499c603, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xf499c603, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x5695f210, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xe50)) returned 1 [0179.070] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0179.070] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D0EC0312840E3FC86B187974BCF7249A67B8FC14" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d0ec0312840e3fc86b187974bcf7249a67b8fc14"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D0EC0312840E3FC86B187974BCF7249A67B8FC14.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d0ec0312840e3fc86b187974bcf7249a67b8fc14.xuy")) returned 1 [0179.072] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D1A6FDD49C775939F18EF172B45C2A7876B5A8C9", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D1A6FDD49C775939F18EF172B45C2A7876B5A8C9", lpFilePart=0x0) returned 0x85 [0179.072] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0179.072] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D1A6FDD49C775939F18EF172B45C2A7876B5A8C9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d1a6fdd49c775939f18ef172b45c2a7876b5a8c9"), fInfoLevelId=0x0, lpFileInformation=0x22bd4a0 | out: lpFileInformation=0x22bd4a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48b8d58b, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x48b8d58b, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x48b8d58b, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0x3736)) returned 1 [0179.072] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0179.072] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D1A6FDD49C775939F18EF172B45C2A7876B5A8C9", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D1A6FDD49C775939F18EF172B45C2A7876B5A8C9", lpFilePart=0x0) returned 0x85 [0179.072] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0179.072] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D1A6FDD49C775939F18EF172B45C2A7876B5A8C9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d1a6fdd49c775939f18ef172b45c2a7876b5a8c9"), fInfoLevelId=0x0, lpFileInformation=0x22bd6a0 | out: lpFileInformation=0x22bd6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48b8d58b, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x48b8d58b, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x48b8d58b, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0x3736)) returned 1 [0179.072] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0179.072] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D1A6FDD49C775939F18EF172B45C2A7876B5A8C9", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D1A6FDD49C775939F18EF172B45C2A7876B5A8C9", lpFilePart=0x0) returned 0x85 [0179.072] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0179.072] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D1A6FDD49C775939F18EF172B45C2A7876B5A8C9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d1a6fdd49c775939f18ef172b45c2a7876b5a8c9"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0179.073] GetFileType (hFile=0x444) returned 0x1 [0179.073] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0179.073] GetFileType (hFile=0x444) returned 0x1 [0179.073] ReadFile (in: hFile=0x444, lpBuffer=0x22bfbd0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x22bfbd0*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0179.099] CloseHandle (hObject=0x444) returned 1 [0179.099] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D1A6FDD49C775939F18EF172B45C2A7876B5A8C9", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D1A6FDD49C775939F18EF172B45C2A7876B5A8C9", lpFilePart=0x0) returned 0x85 [0179.099] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0179.099] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D1A6FDD49C775939F18EF172B45C2A7876B5A8C9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d1a6fdd49c775939f18ef172b45c2a7876b5a8c9"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0179.100] GetFileType (hFile=0x444) returned 0x1 [0179.100] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0179.100] GetFileType (hFile=0x444) returned 0x1 [0179.100] WriteFile (in: hFile=0x444, lpBuffer=0x22bd880*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x22bd880*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0179.100] CloseHandle (hObject=0x444) returned 1 [0179.100] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D1A6FDD49C775939F18EF172B45C2A7876B5A8C9", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D1A6FDD49C775939F18EF172B45C2A7876B5A8C9", lpFilePart=0x0) returned 0x85 [0179.100] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D1A6FDD49C775939F18EF172B45C2A7876B5A8C9.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D1A6FDD49C775939F18EF172B45C2A7876B5A8C9.xuy", lpFilePart=0x0) returned 0x89 [0179.100] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0179.100] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D1A6FDD49C775939F18EF172B45C2A7876B5A8C9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d1a6fdd49c775939f18ef172b45c2a7876b5a8c9"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48b8d58b, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x48b8d58b, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x569a9618, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x3736)) returned 1 [0179.100] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0179.100] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D1A6FDD49C775939F18EF172B45C2A7876B5A8C9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d1a6fdd49c775939f18ef172b45c2a7876b5a8c9"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D1A6FDD49C775939F18EF172B45C2A7876B5A8C9.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d1a6fdd49c775939f18ef172b45c2a7876b5a8c9.xuy")) returned 1 [0179.102] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D23EB138FBF38277931754F5E6DF1A72B541893A", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D23EB138FBF38277931754F5E6DF1A72B541893A", lpFilePart=0x0) returned 0x85 [0179.102] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0179.102] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D23EB138FBF38277931754F5E6DF1A72B541893A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d23eb138fbf38277931754f5e6df1a72b541893a"), fInfoLevelId=0x0, lpFileInformation=0x233c178 | out: lpFileInformation=0x233c178*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6159e1e8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x6159e1e8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x6159e1e8, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xdff)) returned 1 [0179.102] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0179.102] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D23EB138FBF38277931754F5E6DF1A72B541893A", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D23EB138FBF38277931754F5E6DF1A72B541893A", lpFilePart=0x0) returned 0x85 [0179.102] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0179.102] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D23EB138FBF38277931754F5E6DF1A72B541893A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d23eb138fbf38277931754f5e6df1a72b541893a"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0179.102] GetFileType (hFile=0x444) returned 0x1 [0179.103] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0179.103] GetFileType (hFile=0x444) returned 0x1 [0179.103] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xdff [0179.103] ReadFile (in: hFile=0x444, lpBuffer=0x233d390, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x233d390*, lpNumberOfBytesRead=0x3be5c8*=0xdff, lpOverlapped=0x0) returned 1 [0179.104] CloseHandle (hObject=0x444) returned 1 [0179.144] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D23EB138FBF38277931754F5E6DF1A72B541893A", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D23EB138FBF38277931754F5E6DF1A72B541893A", lpFilePart=0x0) returned 0x85 [0179.144] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0179.145] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D23EB138FBF38277931754F5E6DF1A72B541893A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d23eb138fbf38277931754f5e6df1a72b541893a"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0179.147] GetFileType (hFile=0x444) returned 0x1 [0179.147] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0179.147] GetFileType (hFile=0x444) returned 0x1 [0179.147] WriteFile (in: hFile=0x444, lpBuffer=0x21b6648*, nNumberOfBytesToWrite=0xe00, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x21b6648*, lpNumberOfBytesWritten=0x3be4d8*=0xe00, lpOverlapped=0x0) returned 1 [0179.148] CloseHandle (hObject=0x444) returned 1 [0179.148] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D23EB138FBF38277931754F5E6DF1A72B541893A", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D23EB138FBF38277931754F5E6DF1A72B541893A", lpFilePart=0x0) returned 0x85 [0179.148] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D23EB138FBF38277931754F5E6DF1A72B541893A.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D23EB138FBF38277931754F5E6DF1A72B541893A.xuy", lpFilePart=0x0) returned 0x89 [0179.148] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0179.148] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D23EB138FBF38277931754F5E6DF1A72B541893A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d23eb138fbf38277931754f5e6df1a72b541893a"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6159e1e8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x6159e1e8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x56a1cb29, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xe00)) returned 1 [0179.148] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0179.148] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D23EB138FBF38277931754F5E6DF1A72B541893A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d23eb138fbf38277931754f5e6df1a72b541893a"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D23EB138FBF38277931754F5E6DF1A72B541893A.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d23eb138fbf38277931754f5e6df1a72b541893a.xuy")) returned 1 [0179.149] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D26B30C29653FF6E88387C8EDC58BCD16C78AE71", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D26B30C29653FF6E88387C8EDC58BCD16C78AE71", lpFilePart=0x0) returned 0x85 [0179.149] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0179.149] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D26B30C29653FF6E88387C8EDC58BCD16C78AE71" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d26b30c29653ff6e88387c8edc58bcd16c78ae71"), fInfoLevelId=0x0, lpFileInformation=0x21b7a08 | out: lpFileInformation=0x21b7a08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x886a1b03, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x886a1b03, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0xf369a5b3, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x498)) returned 1 [0179.150] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0179.150] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D26B30C29653FF6E88387C8EDC58BCD16C78AE71", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D26B30C29653FF6E88387C8EDC58BCD16C78AE71", lpFilePart=0x0) returned 0x85 [0179.150] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0179.150] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D26B30C29653FF6E88387C8EDC58BCD16C78AE71" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d26b30c29653ff6e88387c8edc58bcd16c78ae71"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0179.150] GetFileType (hFile=0x444) returned 0x1 [0179.150] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0179.150] GetFileType (hFile=0x444) returned 0x1 [0179.150] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x498 [0179.150] ReadFile (in: hFile=0x444, lpBuffer=0x21b82b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x21b82b8*, lpNumberOfBytesRead=0x3be5c8*=0x498, lpOverlapped=0x0) returned 1 [0179.152] CloseHandle (hObject=0x444) returned 1 [0179.163] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D26B30C29653FF6E88387C8EDC58BCD16C78AE71", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D26B30C29653FF6E88387C8EDC58BCD16C78AE71", lpFilePart=0x0) returned 0x85 [0179.163] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0179.163] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D26B30C29653FF6E88387C8EDC58BCD16C78AE71" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d26b30c29653ff6e88387c8edc58bcd16c78ae71"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0179.165] GetFileType (hFile=0x444) returned 0x1 [0179.165] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0179.165] GetFileType (hFile=0x444) returned 0x1 [0179.165] WriteFile (in: hFile=0x444, lpBuffer=0x2230a68*, nNumberOfBytesToWrite=0x4a0, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x2230a68*, lpNumberOfBytesWritten=0x3be4d8*=0x4a0, lpOverlapped=0x0) returned 1 [0179.167] CloseHandle (hObject=0x444) returned 1 [0179.167] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D26B30C29653FF6E88387C8EDC58BCD16C78AE71", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D26B30C29653FF6E88387C8EDC58BCD16C78AE71", lpFilePart=0x0) returned 0x85 [0179.167] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D26B30C29653FF6E88387C8EDC58BCD16C78AE71.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D26B30C29653FF6E88387C8EDC58BCD16C78AE71.xuy", lpFilePart=0x0) returned 0x89 [0179.167] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0179.167] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D26B30C29653FF6E88387C8EDC58BCD16C78AE71" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d26b30c29653ff6e88387c8edc58bcd16c78ae71"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x886a1b03, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x886a1b03, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x56a42071, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x4a0)) returned 1 [0179.167] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0179.167] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D26B30C29653FF6E88387C8EDC58BCD16C78AE71" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d26b30c29653ff6e88387c8edc58bcd16c78ae71"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D26B30C29653FF6E88387C8EDC58BCD16C78AE71.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d26b30c29653ff6e88387c8edc58bcd16c78ae71.xuy")) returned 1 [0179.169] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D26D2EB85B6C6D10E3CD0EBF37E16574F96615D4", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D26D2EB85B6C6D10E3CD0EBF37E16574F96615D4", lpFilePart=0x0) returned 0x85 [0179.169] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0179.169] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D26D2EB85B6C6D10E3CD0EBF37E16574F96615D4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d26d2eb85b6c6d10e3cd0ebf37e16574f96615d4"), fInfoLevelId=0x0, lpFileInformation=0x2231e28 | out: lpFileInformation=0x2231e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5ff63a35, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x5ff63a35, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x5ff7c0ce, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x4d2)) returned 1 [0179.169] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0179.169] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D26D2EB85B6C6D10E3CD0EBF37E16574F96615D4", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D26D2EB85B6C6D10E3CD0EBF37E16574F96615D4", lpFilePart=0x0) returned 0x85 [0179.169] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0179.169] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D26D2EB85B6C6D10E3CD0EBF37E16574F96615D4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d26d2eb85b6c6d10e3cd0ebf37e16574f96615d4"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0179.169] GetFileType (hFile=0x444) returned 0x1 [0179.169] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0179.169] GetFileType (hFile=0x444) returned 0x1 [0179.169] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x4d2 [0179.169] ReadFile (in: hFile=0x444, lpBuffer=0x2232718, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x2232718*, lpNumberOfBytesRead=0x3be5c8*=0x4d2, lpOverlapped=0x0) returned 1 [0179.188] CloseHandle (hObject=0x444) returned 1 [0179.199] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D26D2EB85B6C6D10E3CD0EBF37E16574F96615D4", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D26D2EB85B6C6D10E3CD0EBF37E16574F96615D4", lpFilePart=0x0) returned 0x85 [0179.199] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0179.199] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D26D2EB85B6C6D10E3CD0EBF37E16574F96615D4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d26d2eb85b6c6d10e3cd0ebf37e16574f96615d4"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0179.201] GetFileType (hFile=0x444) returned 0x1 [0179.201] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0179.201] GetFileType (hFile=0x444) returned 0x1 [0179.201] WriteFile (in: hFile=0x444, lpBuffer=0x22ab010*, nNumberOfBytesToWrite=0x4e0, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x22ab010*, lpNumberOfBytesWritten=0x3be4d8*=0x4e0, lpOverlapped=0x0) returned 1 [0179.202] CloseHandle (hObject=0x444) returned 1 [0179.202] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D26D2EB85B6C6D10E3CD0EBF37E16574F96615D4", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D26D2EB85B6C6D10E3CD0EBF37E16574F96615D4", lpFilePart=0x0) returned 0x85 [0179.202] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D26D2EB85B6C6D10E3CD0EBF37E16574F96615D4.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D26D2EB85B6C6D10E3CD0EBF37E16574F96615D4.xuy", lpFilePart=0x0) returned 0x89 [0179.202] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0179.202] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D26D2EB85B6C6D10E3CD0EBF37E16574F96615D4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d26d2eb85b6c6d10e3cd0ebf37e16574f96615d4"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5ff63a35, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x5ff63a35, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x56a8e89e, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x4e0)) returned 1 [0179.202] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0179.202] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D26D2EB85B6C6D10E3CD0EBF37E16574F96615D4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d26d2eb85b6c6d10e3cd0ebf37e16574f96615d4"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D26D2EB85B6C6D10E3CD0EBF37E16574F96615D4.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d26d2eb85b6c6d10e3cd0ebf37e16574f96615d4.xuy")) returned 1 [0179.203] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D287DB1D82CE15EA35D5594A90D93B611FDEDBB2", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D287DB1D82CE15EA35D5594A90D93B611FDEDBB2", lpFilePart=0x0) returned 0x85 [0179.203] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0179.203] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D287DB1D82CE15EA35D5594A90D93B611FDEDBB2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d287db1d82ce15ea35d5594a90d93b611fdedbb2"), fInfoLevelId=0x0, lpFileInformation=0x22ac3d0 | out: lpFileInformation=0x22ac3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54f65a88, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x54f65a88, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x5ef52536, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xb042)) returned 1 [0179.204] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0179.204] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D287DB1D82CE15EA35D5594A90D93B611FDEDBB2", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D287DB1D82CE15EA35D5594A90D93B611FDEDBB2", lpFilePart=0x0) returned 0x85 [0179.204] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0179.204] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D287DB1D82CE15EA35D5594A90D93B611FDEDBB2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d287db1d82ce15ea35d5594a90d93b611fdedbb2"), fInfoLevelId=0x0, lpFileInformation=0x22ac5d0 | out: lpFileInformation=0x22ac5d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54f65a88, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x54f65a88, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x5ef52536, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xb042)) returned 1 [0179.204] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0179.204] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D287DB1D82CE15EA35D5594A90D93B611FDEDBB2", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D287DB1D82CE15EA35D5594A90D93B611FDEDBB2", lpFilePart=0x0) returned 0x85 [0179.204] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0179.204] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D287DB1D82CE15EA35D5594A90D93B611FDEDBB2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d287db1d82ce15ea35d5594a90d93b611fdedbb2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0179.205] GetFileType (hFile=0x444) returned 0x1 [0179.205] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0179.205] GetFileType (hFile=0x444) returned 0x1 [0179.205] ReadFile (in: hFile=0x444, lpBuffer=0x22aeb00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x22aeb00*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0179.233] CloseHandle (hObject=0x444) returned 1 [0179.233] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D287DB1D82CE15EA35D5594A90D93B611FDEDBB2", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D287DB1D82CE15EA35D5594A90D93B611FDEDBB2", lpFilePart=0x0) returned 0x85 [0179.233] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0179.233] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D287DB1D82CE15EA35D5594A90D93B611FDEDBB2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d287db1d82ce15ea35d5594a90d93b611fdedbb2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0179.234] GetFileType (hFile=0x444) returned 0x1 [0179.234] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0179.234] GetFileType (hFile=0x444) returned 0x1 [0179.234] WriteFile (in: hFile=0x444, lpBuffer=0x22ac7b0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x22ac7b0*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0179.234] CloseHandle (hObject=0x444) returned 1 [0179.234] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D287DB1D82CE15EA35D5594A90D93B611FDEDBB2", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D287DB1D82CE15EA35D5594A90D93B611FDEDBB2", lpFilePart=0x0) returned 0x85 [0179.234] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D287DB1D82CE15EA35D5594A90D93B611FDEDBB2.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D287DB1D82CE15EA35D5594A90D93B611FDEDBB2.xuy", lpFilePart=0x0) returned 0x89 [0179.234] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0179.234] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D287DB1D82CE15EA35D5594A90D93B611FDEDBB2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d287db1d82ce15ea35d5594a90d93b611fdedbb2"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54f65a88, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x54f65a88, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x56adaab0, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xb042)) returned 1 [0179.234] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0179.234] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D287DB1D82CE15EA35D5594A90D93B611FDEDBB2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d287db1d82ce15ea35d5594a90d93b611fdedbb2"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D287DB1D82CE15EA35D5594A90D93B611FDEDBB2.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d287db1d82ce15ea35d5594a90d93b611fdedbb2.xuy")) returned 1 [0179.236] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D381FB47D731C2651FB103E2F7BC18AF380F7B1F", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D381FB47D731C2651FB103E2F7BC18AF380F7B1F", lpFilePart=0x0) returned 0x85 [0179.236] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0179.236] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D381FB47D731C2651FB103E2F7BC18AF380F7B1F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d381fb47d731c2651fb103e2f7bc18af380f7b1f"), fInfoLevelId=0x0, lpFileInformation=0x232b0a8 | out: lpFileInformation=0x232b0a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc53279de, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc53279de, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xc53279de, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x1be8)) returned 1 [0179.236] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0179.236] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D381FB47D731C2651FB103E2F7BC18AF380F7B1F", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D381FB47D731C2651FB103E2F7BC18AF380F7B1F", lpFilePart=0x0) returned 0x85 [0179.236] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0179.236] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D381FB47D731C2651FB103E2F7BC18AF380F7B1F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d381fb47d731c2651fb103e2f7bc18af380f7b1f"), fInfoLevelId=0x0, lpFileInformation=0x232b2a8 | out: lpFileInformation=0x232b2a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc53279de, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc53279de, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xc53279de, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x1be8)) returned 1 [0179.236] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0179.236] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D381FB47D731C2651FB103E2F7BC18AF380F7B1F", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D381FB47D731C2651FB103E2F7BC18AF380F7B1F", lpFilePart=0x0) returned 0x85 [0179.236] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0179.236] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D381FB47D731C2651FB103E2F7BC18AF380F7B1F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d381fb47d731c2651fb103e2f7bc18af380f7b1f"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0179.237] GetFileType (hFile=0x444) returned 0x1 [0179.237] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0179.237] GetFileType (hFile=0x444) returned 0x1 [0179.237] ReadFile (in: hFile=0x444, lpBuffer=0x232d7d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x232d7d8*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0179.286] CloseHandle (hObject=0x444) returned 1 [0179.286] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D381FB47D731C2651FB103E2F7BC18AF380F7B1F", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D381FB47D731C2651FB103E2F7BC18AF380F7B1F", lpFilePart=0x0) returned 0x85 [0179.286] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0179.286] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D381FB47D731C2651FB103E2F7BC18AF380F7B1F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d381fb47d731c2651fb103e2f7bc18af380f7b1f"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0179.297] GetFileType (hFile=0x444) returned 0x1 [0179.297] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0179.298] GetFileType (hFile=0x444) returned 0x1 [0179.298] WriteFile (in: hFile=0x444, lpBuffer=0x2188818*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x2188818*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0179.298] CloseHandle (hObject=0x444) returned 1 [0179.298] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D381FB47D731C2651FB103E2F7BC18AF380F7B1F", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D381FB47D731C2651FB103E2F7BC18AF380F7B1F", lpFilePart=0x0) returned 0x85 [0179.298] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D381FB47D731C2651FB103E2F7BC18AF380F7B1F.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D381FB47D731C2651FB103E2F7BC18AF380F7B1F.xuy", lpFilePart=0x0) returned 0x89 [0179.298] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0179.298] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D381FB47D731C2651FB103E2F7BC18AF380F7B1F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d381fb47d731c2651fb103e2f7bc18af380f7b1f"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc53279de, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc53279de, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x56b73311, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0179.298] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0179.298] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D381FB47D731C2651FB103E2F7BC18AF380F7B1F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d381fb47d731c2651fb103e2f7bc18af380f7b1f"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D381FB47D731C2651FB103E2F7BC18AF380F7B1F.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d381fb47d731c2651fb103e2f7bc18af380f7b1f.xuy")) returned 1 [0179.300] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D44B347A13638EE05EB00425B25CBAF5CD282DD3", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D44B347A13638EE05EB00425B25CBAF5CD282DD3", lpFilePart=0x0) returned 0x85 [0179.300] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0179.300] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D44B347A13638EE05EB00425B25CBAF5CD282DD3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d44b347a13638ee05eb00425b25cbaf5cd282dd3"), fInfoLevelId=0x0, lpFileInformation=0x21ac158 | out: lpFileInformation=0x21ac158*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85bb1cb7, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x85bb1cb7, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0xf06dcd85, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0xa59b)) returned 1 [0179.300] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0179.300] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D44B347A13638EE05EB00425B25CBAF5CD282DD3", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D44B347A13638EE05EB00425B25CBAF5CD282DD3", lpFilePart=0x0) returned 0x85 [0179.300] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0179.300] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D44B347A13638EE05EB00425B25CBAF5CD282DD3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d44b347a13638ee05eb00425b25cbaf5cd282dd3"), fInfoLevelId=0x0, lpFileInformation=0x21ac358 | out: lpFileInformation=0x21ac358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85bb1cb7, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x85bb1cb7, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0xf06dcd85, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0xa59b)) returned 1 [0179.300] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0179.300] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D44B347A13638EE05EB00425B25CBAF5CD282DD3", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D44B347A13638EE05EB00425B25CBAF5CD282DD3", lpFilePart=0x0) returned 0x85 [0179.300] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0179.300] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D44B347A13638EE05EB00425B25CBAF5CD282DD3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d44b347a13638ee05eb00425b25cbaf5cd282dd3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0179.301] GetFileType (hFile=0x444) returned 0x1 [0179.301] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0179.301] GetFileType (hFile=0x444) returned 0x1 [0179.301] ReadFile (in: hFile=0x444, lpBuffer=0x21ae888, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x21ae888*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0179.315] CloseHandle (hObject=0x444) returned 1 [0179.315] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D44B347A13638EE05EB00425B25CBAF5CD282DD3", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D44B347A13638EE05EB00425B25CBAF5CD282DD3", lpFilePart=0x0) returned 0x85 [0179.315] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0179.315] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D44B347A13638EE05EB00425B25CBAF5CD282DD3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d44b347a13638ee05eb00425b25cbaf5cd282dd3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0179.316] GetFileType (hFile=0x444) returned 0x1 [0179.316] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0179.316] GetFileType (hFile=0x444) returned 0x1 [0179.316] WriteFile (in: hFile=0x444, lpBuffer=0x21ac538*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x21ac538*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0179.316] CloseHandle (hObject=0x444) returned 1 [0179.316] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D44B347A13638EE05EB00425B25CBAF5CD282DD3", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D44B347A13638EE05EB00425B25CBAF5CD282DD3", lpFilePart=0x0) returned 0x85 [0179.316] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D44B347A13638EE05EB00425B25CBAF5CD282DD3.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D44B347A13638EE05EB00425B25CBAF5CD282DD3.xuy", lpFilePart=0x0) returned 0x89 [0179.316] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0179.316] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D44B347A13638EE05EB00425B25CBAF5CD282DD3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d44b347a13638ee05eb00425b25cbaf5cd282dd3"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85bb1cb7, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x85bb1cb7, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x56b993c5, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xa59b)) returned 1 [0179.316] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0179.316] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D44B347A13638EE05EB00425B25CBAF5CD282DD3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d44b347a13638ee05eb00425b25cbaf5cd282dd3"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D44B347A13638EE05EB00425B25CBAF5CD282DD3.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d44b347a13638ee05eb00425b25cbaf5cd282dd3.xuy")) returned 1 [0179.318] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D49E72D78C3715697DF690AA687C1F3791FC5E3A", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D49E72D78C3715697DF690AA687C1F3791FC5E3A", lpFilePart=0x0) returned 0x85 [0179.318] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0179.318] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D49E72D78C3715697DF690AA687C1F3791FC5E3A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d49e72d78c3715697df690aa687c1f3791fc5e3a"), fInfoLevelId=0x0, lpFileInformation=0x222ae30 | out: lpFileInformation=0x222ae30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x549e2349, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x549e2349, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x549e2349, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x3602)) returned 1 [0179.321] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0179.321] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D49E72D78C3715697DF690AA687C1F3791FC5E3A", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D49E72D78C3715697DF690AA687C1F3791FC5E3A", lpFilePart=0x0) returned 0x85 [0179.321] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0179.321] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D49E72D78C3715697DF690AA687C1F3791FC5E3A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d49e72d78c3715697df690aa687c1f3791fc5e3a"), fInfoLevelId=0x0, lpFileInformation=0x222b030 | out: lpFileInformation=0x222b030*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x549e2349, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x549e2349, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x549e2349, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x3602)) returned 1 [0179.321] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0179.321] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D49E72D78C3715697DF690AA687C1F3791FC5E3A", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D49E72D78C3715697DF690AA687C1F3791FC5E3A", lpFilePart=0x0) returned 0x85 [0179.321] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0179.321] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D49E72D78C3715697DF690AA687C1F3791FC5E3A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d49e72d78c3715697df690aa687c1f3791fc5e3a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0179.322] GetFileType (hFile=0x444) returned 0x1 [0179.322] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0179.322] GetFileType (hFile=0x444) returned 0x1 [0179.322] ReadFile (in: hFile=0x444, lpBuffer=0x222d560, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x222d560*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0179.337] CloseHandle (hObject=0x444) returned 1 [0179.337] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D49E72D78C3715697DF690AA687C1F3791FC5E3A", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D49E72D78C3715697DF690AA687C1F3791FC5E3A", lpFilePart=0x0) returned 0x85 [0179.337] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0179.337] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D49E72D78C3715697DF690AA687C1F3791FC5E3A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d49e72d78c3715697df690aa687c1f3791fc5e3a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0179.338] GetFileType (hFile=0x444) returned 0x1 [0179.338] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0179.338] GetFileType (hFile=0x444) returned 0x1 [0179.338] WriteFile (in: hFile=0x444, lpBuffer=0x222b210*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x222b210*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0179.338] CloseHandle (hObject=0x444) returned 1 [0179.338] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D49E72D78C3715697DF690AA687C1F3791FC5E3A", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D49E72D78C3715697DF690AA687C1F3791FC5E3A", lpFilePart=0x0) returned 0x85 [0179.338] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D49E72D78C3715697DF690AA687C1F3791FC5E3A.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D49E72D78C3715697DF690AA687C1F3791FC5E3A.xuy", lpFilePart=0x0) returned 0x89 [0179.338] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0179.338] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D49E72D78C3715697DF690AA687C1F3791FC5E3A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d49e72d78c3715697df690aa687c1f3791fc5e3a"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x549e2349, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x549e2349, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x56be5ea5, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x3602)) returned 1 [0179.338] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0179.338] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D49E72D78C3715697DF690AA687C1F3791FC5E3A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d49e72d78c3715697df690aa687c1f3791fc5e3a"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D49E72D78C3715697DF690AA687C1F3791FC5E3A.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d49e72d78c3715697df690aa687c1f3791fc5e3a.xuy")) returned 1 [0179.340] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D50816B5E2ED9F09C831BDB4AE2F7CFA3C52FB2B", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D50816B5E2ED9F09C831BDB4AE2F7CFA3C52FB2B", lpFilePart=0x0) returned 0x85 [0179.340] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0179.340] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D50816B5E2ED9F09C831BDB4AE2F7CFA3C52FB2B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d50816b5e2ed9f09c831bdb4ae2f7cfa3c52fb2b"), fInfoLevelId=0x0, lpFileInformation=0x22a9b08 | out: lpFileInformation=0x22a9b08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88b88a78, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x88b88a78, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x88b92701, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x52a)) returned 1 [0179.341] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0179.341] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D50816B5E2ED9F09C831BDB4AE2F7CFA3C52FB2B", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D50816B5E2ED9F09C831BDB4AE2F7CFA3C52FB2B", lpFilePart=0x0) returned 0x85 [0179.341] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0179.341] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D50816B5E2ED9F09C831BDB4AE2F7CFA3C52FB2B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d50816b5e2ed9f09c831bdb4ae2f7cfa3c52fb2b"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0179.341] GetFileType (hFile=0x444) returned 0x1 [0179.341] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0179.341] GetFileType (hFile=0x444) returned 0x1 [0179.341] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x52a [0179.341] ReadFile (in: hFile=0x444, lpBuffer=0x22aa450, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x22aa450*, lpNumberOfBytesRead=0x3be5c8*=0x52a, lpOverlapped=0x0) returned 1 [0179.375] CloseHandle (hObject=0x444) returned 1 [0179.386] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D50816B5E2ED9F09C831BDB4AE2F7CFA3C52FB2B", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D50816B5E2ED9F09C831BDB4AE2F7CFA3C52FB2B", lpFilePart=0x0) returned 0x85 [0179.386] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0179.386] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D50816B5E2ED9F09C831BDB4AE2F7CFA3C52FB2B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d50816b5e2ed9f09c831bdb4ae2f7cfa3c52fb2b"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0179.388] GetFileType (hFile=0x444) returned 0x1 [0179.388] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0179.388] GetFileType (hFile=0x444) returned 0x1 [0179.388] WriteFile (in: hFile=0x444, lpBuffer=0x2322ed0*, nNumberOfBytesToWrite=0x530, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x2322ed0*, lpNumberOfBytesWritten=0x3be4d8*=0x530, lpOverlapped=0x0) returned 1 [0179.389] CloseHandle (hObject=0x444) returned 1 [0179.390] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D50816B5E2ED9F09C831BDB4AE2F7CFA3C52FB2B", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D50816B5E2ED9F09C831BDB4AE2F7CFA3C52FB2B", lpFilePart=0x0) returned 0x85 [0179.390] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D50816B5E2ED9F09C831BDB4AE2F7CFA3C52FB2B.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D50816B5E2ED9F09C831BDB4AE2F7CFA3C52FB2B.xuy", lpFilePart=0x0) returned 0x89 [0179.390] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0179.390] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D50816B5E2ED9F09C831BDB4AE2F7CFA3C52FB2B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d50816b5e2ed9f09c831bdb4ae2f7cfa3c52fb2b"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88b88a78, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x88b88a78, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x56c5815e, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x530)) returned 1 [0179.390] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0179.390] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D50816B5E2ED9F09C831BDB4AE2F7CFA3C52FB2B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d50816b5e2ed9f09c831bdb4ae2f7cfa3c52fb2b"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D50816B5E2ED9F09C831BDB4AE2F7CFA3C52FB2B.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d50816b5e2ed9f09c831bdb4ae2f7cfa3c52fb2b.xuy")) returned 1 [0179.391] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D570D20F28499AD6C252E60269DBE07353805495", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D570D20F28499AD6C252E60269DBE07353805495", lpFilePart=0x0) returned 0x85 [0179.391] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0179.391] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D570D20F28499AD6C252E60269DBE07353805495" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d570d20f28499ad6c252e60269dbe07353805495"), fInfoLevelId=0x0, lpFileInformation=0x2324290 | out: lpFileInformation=0x2324290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8804a0e0, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x8804a0e0, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x8804a0e0, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0xbf3)) returned 1 [0179.392] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0179.392] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D570D20F28499AD6C252E60269DBE07353805495", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D570D20F28499AD6C252E60269DBE07353805495", lpFilePart=0x0) returned 0x85 [0179.392] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0179.392] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D570D20F28499AD6C252E60269DBE07353805495" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d570d20f28499ad6c252e60269dbe07353805495"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0179.392] GetFileType (hFile=0x444) returned 0x1 [0179.392] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0179.392] GetFileType (hFile=0x444) returned 0x1 [0179.393] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xbf3 [0179.393] ReadFile (in: hFile=0x444, lpBuffer=0x23252a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x23252a0*, lpNumberOfBytesRead=0x3be5c8*=0xbf3, lpOverlapped=0x0) returned 1 [0179.403] CloseHandle (hObject=0x444) returned 1 [0179.449] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D570D20F28499AD6C252E60269DBE07353805495", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D570D20F28499AD6C252E60269DBE07353805495", lpFilePart=0x0) returned 0x85 [0179.449] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0179.449] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D570D20F28499AD6C252E60269DBE07353805495" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d570d20f28499ad6c252e60269dbe07353805495"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0179.451] GetFileType (hFile=0x444) returned 0x1 [0179.451] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0179.451] GetFileType (hFile=0x444) returned 0x1 [0179.451] WriteFile (in: hFile=0x444, lpBuffer=0x219d958*, nNumberOfBytesToWrite=0xc00, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x219d958*, lpNumberOfBytesWritten=0x3be4d8*=0xc00, lpOverlapped=0x0) returned 1 [0179.452] CloseHandle (hObject=0x444) returned 1 [0179.452] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D570D20F28499AD6C252E60269DBE07353805495", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D570D20F28499AD6C252E60269DBE07353805495", lpFilePart=0x0) returned 0x85 [0179.452] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D570D20F28499AD6C252E60269DBE07353805495.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D570D20F28499AD6C252E60269DBE07353805495.xuy", lpFilePart=0x0) returned 0x89 [0179.452] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0179.452] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D570D20F28499AD6C252E60269DBE07353805495" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d570d20f28499ad6c252e60269dbe07353805495"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8804a0e0, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x8804a0e0, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x56cf0b71, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xc00)) returned 1 [0179.452] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0179.452] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D570D20F28499AD6C252E60269DBE07353805495" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d570d20f28499ad6c252e60269dbe07353805495"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D570D20F28499AD6C252E60269DBE07353805495.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d570d20f28499ad6c252e60269dbe07353805495.xuy")) returned 1 [0179.454] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D5AB8CC0A1003487102F816A4A405469DAD23E59", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D5AB8CC0A1003487102F816A4A405469DAD23E59", lpFilePart=0x0) returned 0x85 [0179.454] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0179.454] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D5AB8CC0A1003487102F816A4A405469DAD23E59" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d5ab8cc0a1003487102f816a4a405469dad23e59"), fInfoLevelId=0x0, lpFileInformation=0x219ed18 | out: lpFileInformation=0x219ed18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6159e1e8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x6159e1e8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x6159e1e8, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xed6)) returned 1 [0179.454] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0179.454] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D5AB8CC0A1003487102F816A4A405469DAD23E59", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D5AB8CC0A1003487102F816A4A405469DAD23E59", lpFilePart=0x0) returned 0x85 [0179.454] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0179.454] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D5AB8CC0A1003487102F816A4A405469DAD23E59" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d5ab8cc0a1003487102f816a4a405469dad23e59"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0179.454] GetFileType (hFile=0x444) returned 0x1 [0179.454] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0179.454] GetFileType (hFile=0x444) returned 0x1 [0179.454] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xed6 [0179.454] ReadFile (in: hFile=0x444, lpBuffer=0x21a0008, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x21a0008*, lpNumberOfBytesRead=0x3be5c8*=0xed6, lpOverlapped=0x0) returned 1 [0179.473] CloseHandle (hObject=0x444) returned 1 [0179.483] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D5AB8CC0A1003487102F816A4A405469DAD23E59", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D5AB8CC0A1003487102F816A4A405469DAD23E59", lpFilePart=0x0) returned 0x85 [0179.483] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0179.483] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D5AB8CC0A1003487102F816A4A405469DAD23E59" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d5ab8cc0a1003487102f816a4a405469dad23e59"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0179.485] GetFileType (hFile=0x444) returned 0x1 [0179.485] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0179.485] GetFileType (hFile=0x444) returned 0x1 [0179.485] WriteFile (in: hFile=0x444, lpBuffer=0x221bb00*, nNumberOfBytesToWrite=0xee0, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x221bb00*, lpNumberOfBytesWritten=0x3be4d8*=0xee0, lpOverlapped=0x0) returned 1 [0179.486] CloseHandle (hObject=0x444) returned 1 [0179.486] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D5AB8CC0A1003487102F816A4A405469DAD23E59", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D5AB8CC0A1003487102F816A4A405469DAD23E59", lpFilePart=0x0) returned 0x85 [0179.486] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D5AB8CC0A1003487102F816A4A405469DAD23E59.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D5AB8CC0A1003487102F816A4A405469DAD23E59.xuy", lpFilePart=0x0) returned 0x89 [0179.486] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0179.486] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D5AB8CC0A1003487102F816A4A405469DAD23E59" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d5ab8cc0a1003487102f816a4a405469dad23e59"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6159e1e8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x6159e1e8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x56d3cf9a, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xee0)) returned 1 [0179.486] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0179.486] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D5AB8CC0A1003487102F816A4A405469DAD23E59" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d5ab8cc0a1003487102f816a4a405469dad23e59"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D5AB8CC0A1003487102F816A4A405469DAD23E59.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d5ab8cc0a1003487102f816a4a405469dad23e59.xuy")) returned 1 [0179.488] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D5BB319D7CE2BACDA94F8548B526C81A6B2BF857", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D5BB319D7CE2BACDA94F8548B526C81A6B2BF857", lpFilePart=0x0) returned 0x85 [0179.488] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0179.488] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D5BB319D7CE2BACDA94F8548B526C81A6B2BF857" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d5bb319d7ce2bacda94f8548b526c81a6b2bf857"), fInfoLevelId=0x0, lpFileInformation=0x221cec0 | out: lpFileInformation=0x221cec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc33dcb27, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc33dcb27, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xc50c5407, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0xaf5)) returned 1 [0179.488] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0179.488] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D5BB319D7CE2BACDA94F8548B526C81A6B2BF857", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D5BB319D7CE2BACDA94F8548B526C81A6B2BF857", lpFilePart=0x0) returned 0x85 [0179.488] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0179.488] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D5BB319D7CE2BACDA94F8548B526C81A6B2BF857" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d5bb319d7ce2bacda94f8548b526c81a6b2bf857"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0179.488] GetFileType (hFile=0x444) returned 0x1 [0179.488] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0179.488] GetFileType (hFile=0x444) returned 0x1 [0179.488] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xaf5 [0179.488] ReadFile (in: hFile=0x444, lpBuffer=0x221ddd0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x221ddd0*, lpNumberOfBytesRead=0x3be5c8*=0xaf5, lpOverlapped=0x0) returned 1 [0179.490] CloseHandle (hObject=0x444) returned 1 [0179.500] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D5BB319D7CE2BACDA94F8548B526C81A6B2BF857", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D5BB319D7CE2BACDA94F8548B526C81A6B2BF857", lpFilePart=0x0) returned 0x85 [0179.500] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0179.500] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D5BB319D7CE2BACDA94F8548B526C81A6B2BF857" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d5bb319d7ce2bacda94f8548b526c81a6b2bf857"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0179.502] GetFileType (hFile=0x444) returned 0x1 [0179.502] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0179.502] GetFileType (hFile=0x444) returned 0x1 [0179.502] WriteFile (in: hFile=0x444, lpBuffer=0x2298568*, nNumberOfBytesToWrite=0xb00, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x2298568*, lpNumberOfBytesWritten=0x3be4d8*=0xb00, lpOverlapped=0x0) returned 1 [0179.503] CloseHandle (hObject=0x444) returned 1 [0179.503] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D5BB319D7CE2BACDA94F8548B526C81A6B2BF857", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D5BB319D7CE2BACDA94F8548B526C81A6B2BF857", lpFilePart=0x0) returned 0x85 [0179.503] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D5BB319D7CE2BACDA94F8548B526C81A6B2BF857.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D5BB319D7CE2BACDA94F8548B526C81A6B2BF857.xuy", lpFilePart=0x0) returned 0x89 [0179.503] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0179.503] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D5BB319D7CE2BACDA94F8548B526C81A6B2BF857" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d5bb319d7ce2bacda94f8548b526c81a6b2bf857"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc33dcb27, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc33dcb27, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x56d63036, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xb00)) returned 1 [0179.503] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0179.503] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D5BB319D7CE2BACDA94F8548B526C81A6B2BF857" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d5bb319d7ce2bacda94f8548b526c81a6b2bf857"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D5BB319D7CE2BACDA94F8548B526C81A6B2BF857.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d5bb319d7ce2bacda94f8548b526c81a6b2bf857.xuy")) returned 1 [0179.504] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D5BE614C1EBE9E5B82200B0BC51E343CF5CC6F93", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D5BE614C1EBE9E5B82200B0BC51E343CF5CC6F93", lpFilePart=0x0) returned 0x85 [0179.504] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0179.504] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D5BE614C1EBE9E5B82200B0BC51E343CF5CC6F93" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d5be614c1ebe9e5b82200b0bc51e343cf5cc6f93"), fInfoLevelId=0x0, lpFileInformation=0x2299928 | out: lpFileInformation=0x2299928*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fb5b67a, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3fb5b67a, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x75007282, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0x10761)) returned 1 [0179.505] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0179.505] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D5BE614C1EBE9E5B82200B0BC51E343CF5CC6F93", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D5BE614C1EBE9E5B82200B0BC51E343CF5CC6F93", lpFilePart=0x0) returned 0x85 [0179.505] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0179.505] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D5BE614C1EBE9E5B82200B0BC51E343CF5CC6F93" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d5be614c1ebe9e5b82200b0bc51e343cf5cc6f93"), fInfoLevelId=0x0, lpFileInformation=0x2299b28 | out: lpFileInformation=0x2299b28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fb5b67a, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3fb5b67a, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x75007282, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0x10761)) returned 1 [0179.505] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0179.505] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D5BE614C1EBE9E5B82200B0BC51E343CF5CC6F93", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D5BE614C1EBE9E5B82200B0BC51E343CF5CC6F93", lpFilePart=0x0) returned 0x85 [0179.505] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0179.505] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D5BE614C1EBE9E5B82200B0BC51E343CF5CC6F93" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d5be614c1ebe9e5b82200b0bc51e343cf5cc6f93"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0179.509] GetFileType (hFile=0x444) returned 0x1 [0179.509] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0179.509] GetFileType (hFile=0x444) returned 0x1 [0179.509] ReadFile (in: hFile=0x444, lpBuffer=0x229c058, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x229c058*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0179.528] CloseHandle (hObject=0x444) returned 1 [0179.528] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D5BE614C1EBE9E5B82200B0BC51E343CF5CC6F93", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D5BE614C1EBE9E5B82200B0BC51E343CF5CC6F93", lpFilePart=0x0) returned 0x85 [0179.529] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0179.529] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D5BE614C1EBE9E5B82200B0BC51E343CF5CC6F93" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d5be614c1ebe9e5b82200b0bc51e343cf5cc6f93"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0179.529] GetFileType (hFile=0x444) returned 0x1 [0179.529] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0179.529] GetFileType (hFile=0x444) returned 0x1 [0179.529] WriteFile (in: hFile=0x444, lpBuffer=0x2299d08*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x2299d08*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0179.529] CloseHandle (hObject=0x444) returned 1 [0179.529] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D5BE614C1EBE9E5B82200B0BC51E343CF5CC6F93", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D5BE614C1EBE9E5B82200B0BC51E343CF5CC6F93", lpFilePart=0x0) returned 0x85 [0179.529] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D5BE614C1EBE9E5B82200B0BC51E343CF5CC6F93.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D5BE614C1EBE9E5B82200B0BC51E343CF5CC6F93.xuy", lpFilePart=0x0) returned 0x89 [0179.530] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0179.530] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D5BE614C1EBE9E5B82200B0BC51E343CF5CC6F93" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d5be614c1ebe9e5b82200b0bc51e343cf5cc6f93"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fb5b67a, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3fb5b67a, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x56daf594, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x10761)) returned 1 [0179.530] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0179.530] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D5BE614C1EBE9E5B82200B0BC51E343CF5CC6F93" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d5be614c1ebe9e5b82200b0bc51e343cf5cc6f93"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D5BE614C1EBE9E5B82200B0BC51E343CF5CC6F93.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d5be614c1ebe9e5b82200b0bc51e343cf5cc6f93.xuy")) returned 1 [0179.531] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D5DC762DF0422060C6F9A047E69273B52D0695BA", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D5DC762DF0422060C6F9A047E69273B52D0695BA", lpFilePart=0x0) returned 0x85 [0179.531] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0179.531] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D5DC762DF0422060C6F9A047E69273B52D0695BA" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d5dc762df0422060c6f9a047e69273b52d0695ba"), fInfoLevelId=0x0, lpFileInformation=0x2318600 | out: lpFileInformation=0x2318600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6159e1e8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x6159e1e8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x6159e1e8, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x10e0)) returned 1 [0179.532] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0179.532] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D5DC762DF0422060C6F9A047E69273B52D0695BA", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D5DC762DF0422060C6F9A047E69273B52D0695BA", lpFilePart=0x0) returned 0x85 [0179.532] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0179.532] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D5DC762DF0422060C6F9A047E69273B52D0695BA" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d5dc762df0422060c6f9a047e69273b52d0695ba"), fInfoLevelId=0x0, lpFileInformation=0x2318800 | out: lpFileInformation=0x2318800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6159e1e8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x6159e1e8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x6159e1e8, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x10e0)) returned 1 [0179.532] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0179.532] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D5DC762DF0422060C6F9A047E69273B52D0695BA", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D5DC762DF0422060C6F9A047E69273B52D0695BA", lpFilePart=0x0) returned 0x85 [0179.532] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0179.532] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D5DC762DF0422060C6F9A047E69273B52D0695BA" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d5dc762df0422060c6f9a047e69273b52d0695ba"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0179.533] GetFileType (hFile=0x444) returned 0x1 [0179.533] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0179.533] GetFileType (hFile=0x444) returned 0x1 [0179.533] ReadFile (in: hFile=0x444, lpBuffer=0x231ad30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x231ad30*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0179.806] CloseHandle (hObject=0x444) returned 1 [0179.806] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D5DC762DF0422060C6F9A047E69273B52D0695BA", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D5DC762DF0422060C6F9A047E69273B52D0695BA", lpFilePart=0x0) returned 0x85 [0179.806] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0179.806] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D5DC762DF0422060C6F9A047E69273B52D0695BA" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d5dc762df0422060c6f9a047e69273b52d0695ba"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0179.806] GetFileType (hFile=0x444) returned 0x1 [0179.806] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0179.806] GetFileType (hFile=0x444) returned 0x1 [0179.806] WriteFile (in: hFile=0x444, lpBuffer=0x2188818*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x2188818*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0179.806] CloseHandle (hObject=0x444) returned 1 [0179.807] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D5DC762DF0422060C6F9A047E69273B52D0695BA", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D5DC762DF0422060C6F9A047E69273B52D0695BA", lpFilePart=0x0) returned 0x85 [0179.807] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D5DC762DF0422060C6F9A047E69273B52D0695BA.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D5DC762DF0422060C6F9A047E69273B52D0695BA.xuy", lpFilePart=0x0) returned 0x89 [0179.807] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0179.807] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D5DC762DF0422060C6F9A047E69273B52D0695BA" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d5dc762df0422060c6f9a047e69273b52d0695ba"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6159e1e8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x6159e1e8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x5705e262, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0179.807] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0179.807] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D5DC762DF0422060C6F9A047E69273B52D0695BA" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d5dc762df0422060c6f9a047e69273b52d0695ba"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D5DC762DF0422060C6F9A047E69273B52D0695BA.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d5dc762df0422060c6f9a047e69273b52d0695ba.xuy")) returned 1 [0179.808] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D5DCFE019454129C62A59D3A88C47156F7B88BA9", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D5DCFE019454129C62A59D3A88C47156F7B88BA9", lpFilePart=0x0) returned 0x85 [0179.808] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0179.808] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D5DCFE019454129C62A59D3A88C47156F7B88BA9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d5dcfe019454129c62a59d3a88c47156f7b88ba9"), fInfoLevelId=0x0, lpFileInformation=0x2199878 | out: lpFileInformation=0x2199878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x615c4498, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x615c4498, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x615c4498, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xe55)) returned 1 [0179.809] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0179.809] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D5DCFE019454129C62A59D3A88C47156F7B88BA9", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D5DCFE019454129C62A59D3A88C47156F7B88BA9", lpFilePart=0x0) returned 0x85 [0179.809] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0179.809] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D5DCFE019454129C62A59D3A88C47156F7B88BA9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d5dcfe019454129c62a59d3a88c47156f7b88ba9"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0179.809] GetFileType (hFile=0x444) returned 0x1 [0179.809] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0179.809] GetFileType (hFile=0x444) returned 0x1 [0179.809] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xe55 [0179.809] ReadFile (in: hFile=0x444, lpBuffer=0x219aae8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x219aae8*, lpNumberOfBytesRead=0x3be5c8*=0xe55, lpOverlapped=0x0) returned 1 [0179.815] CloseHandle (hObject=0x444) returned 1 [0179.826] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D5DCFE019454129C62A59D3A88C47156F7B88BA9", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D5DCFE019454129C62A59D3A88C47156F7B88BA9", lpFilePart=0x0) returned 0x85 [0179.826] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0179.826] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D5DCFE019454129C62A59D3A88C47156F7B88BA9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d5dcfe019454129c62a59d3a88c47156f7b88ba9"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0179.828] GetFileType (hFile=0x444) returned 0x1 [0179.828] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0179.828] GetFileType (hFile=0x444) returned 0x1 [0179.828] WriteFile (in: hFile=0x444, lpBuffer=0x2216360*, nNumberOfBytesToWrite=0xe60, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x2216360*, lpNumberOfBytesWritten=0x3be4d8*=0xe60, lpOverlapped=0x0) returned 1 [0179.829] CloseHandle (hObject=0x444) returned 1 [0179.829] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D5DCFE019454129C62A59D3A88C47156F7B88BA9", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D5DCFE019454129C62A59D3A88C47156F7B88BA9", lpFilePart=0x0) returned 0x85 [0179.829] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D5DCFE019454129C62A59D3A88C47156F7B88BA9.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D5DCFE019454129C62A59D3A88C47156F7B88BA9.xuy", lpFilePart=0x0) returned 0x89 [0179.829] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0179.829] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D5DCFE019454129C62A59D3A88C47156F7B88BA9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d5dcfe019454129c62a59d3a88c47156f7b88ba9"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x615c4498, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x615c4498, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x57084710, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xe60)) returned 1 [0179.830] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0179.830] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D5DCFE019454129C62A59D3A88C47156F7B88BA9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d5dcfe019454129c62a59d3a88c47156f7b88ba9"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D5DCFE019454129C62A59D3A88C47156F7B88BA9.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d5dcfe019454129c62a59d3a88c47156f7b88ba9.xuy")) returned 1 [0179.831] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D5FBFC2E0D8272D13795DB35E359BAC056694B0F", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D5FBFC2E0D8272D13795DB35E359BAC056694B0F", lpFilePart=0x0) returned 0x85 [0179.831] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0179.831] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D5FBFC2E0D8272D13795DB35E359BAC056694B0F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d5fbfc2e0d8272d13795db35e359bac056694b0f"), fInfoLevelId=0x0, lpFileInformation=0x2217720 | out: lpFileInformation=0x2217720*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4798580c, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x4798580c, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x4798580c, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0x34c)) returned 1 [0179.831] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0179.831] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D5FBFC2E0D8272D13795DB35E359BAC056694B0F", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D5FBFC2E0D8272D13795DB35E359BAC056694B0F", lpFilePart=0x0) returned 0x85 [0179.831] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0179.831] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D5FBFC2E0D8272D13795DB35E359BAC056694B0F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d5fbfc2e0d8272d13795db35e359bac056694b0f"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0179.831] GetFileType (hFile=0x444) returned 0x1 [0179.831] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0179.832] GetFileType (hFile=0x444) returned 0x1 [0179.832] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x34c [0179.832] ReadFile (in: hFile=0x444, lpBuffer=0x2217e88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x2217e88*, lpNumberOfBytesRead=0x3be5c8*=0x34c, lpOverlapped=0x0) returned 1 [0179.843] CloseHandle (hObject=0x444) returned 1 [0179.854] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D5FBFC2E0D8272D13795DB35E359BAC056694B0F", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D5FBFC2E0D8272D13795DB35E359BAC056694B0F", lpFilePart=0x0) returned 0x85 [0179.854] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0179.854] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D5FBFC2E0D8272D13795DB35E359BAC056694B0F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d5fbfc2e0d8272d13795db35e359bac056694b0f"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0179.855] GetFileType (hFile=0x444) returned 0x1 [0179.855] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0179.855] GetFileType (hFile=0x444) returned 0x1 [0179.855] WriteFile (in: hFile=0x444, lpBuffer=0x228ffa8*, nNumberOfBytesToWrite=0x350, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x228ffa8*, lpNumberOfBytesWritten=0x3be4d8*=0x350, lpOverlapped=0x0) returned 1 [0179.856] CloseHandle (hObject=0x444) returned 1 [0179.856] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D5FBFC2E0D8272D13795DB35E359BAC056694B0F", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D5FBFC2E0D8272D13795DB35E359BAC056694B0F", lpFilePart=0x0) returned 0x85 [0179.856] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D5FBFC2E0D8272D13795DB35E359BAC056694B0F.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D5FBFC2E0D8272D13795DB35E359BAC056694B0F.xuy", lpFilePart=0x0) returned 0x89 [0179.856] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0179.857] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D5FBFC2E0D8272D13795DB35E359BAC056694B0F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d5fbfc2e0d8272d13795db35e359bac056694b0f"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4798580c, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x4798580c, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x570d071e, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x350)) returned 1 [0179.857] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0179.857] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D5FBFC2E0D8272D13795DB35E359BAC056694B0F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d5fbfc2e0d8272d13795db35e359bac056694b0f"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D5FBFC2E0D8272D13795DB35E359BAC056694B0F.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d5fbfc2e0d8272d13795db35e359bac056694b0f.xuy")) returned 1 [0179.858] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D61EBE2BC4D099371FBE4C68D687FAA6416DB3D5", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D61EBE2BC4D099371FBE4C68D687FAA6416DB3D5", lpFilePart=0x0) returned 0x85 [0179.858] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0179.858] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D61EBE2BC4D099371FBE4C68D687FAA6416DB3D5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d61ebe2bc4d099371fbe4c68d687faa6416db3d5"), fInfoLevelId=0x0, lpFileInformation=0x2291368 | out: lpFileInformation=0x2291368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b80fad, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x80b80fad, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x80b836eb, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0xaa3)) returned 1 [0179.858] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0179.858] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D61EBE2BC4D099371FBE4C68D687FAA6416DB3D5", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D61EBE2BC4D099371FBE4C68D687FAA6416DB3D5", lpFilePart=0x0) returned 0x85 [0179.858] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0179.858] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D61EBE2BC4D099371FBE4C68D687FAA6416DB3D5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d61ebe2bc4d099371fbe4c68d687faa6416db3d5"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0179.858] GetFileType (hFile=0x444) returned 0x1 [0179.858] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0179.858] GetFileType (hFile=0x444) returned 0x1 [0179.859] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xaa3 [0179.859] ReadFile (in: hFile=0x444, lpBuffer=0x2292228, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x2292228*, lpNumberOfBytesRead=0x3be5c8*=0xaa3, lpOverlapped=0x0) returned 1 [0179.868] CloseHandle (hObject=0x444) returned 1 [0179.879] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D61EBE2BC4D099371FBE4C68D687FAA6416DB3D5", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D61EBE2BC4D099371FBE4C68D687FAA6416DB3D5", lpFilePart=0x0) returned 0x85 [0179.879] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0179.879] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D61EBE2BC4D099371FBE4C68D687FAA6416DB3D5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d61ebe2bc4d099371fbe4c68d687faa6416db3d5"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0179.881] GetFileType (hFile=0x444) returned 0x1 [0179.881] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0179.881] GetFileType (hFile=0x444) returned 0x1 [0179.881] WriteFile (in: hFile=0x444, lpBuffer=0x230c830*, nNumberOfBytesToWrite=0xab0, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x230c830*, lpNumberOfBytesWritten=0x3be4d8*=0xab0, lpOverlapped=0x0) returned 1 [0179.882] CloseHandle (hObject=0x444) returned 1 [0179.882] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D61EBE2BC4D099371FBE4C68D687FAA6416DB3D5", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D61EBE2BC4D099371FBE4C68D687FAA6416DB3D5", lpFilePart=0x0) returned 0x85 [0179.882] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D61EBE2BC4D099371FBE4C68D687FAA6416DB3D5.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D61EBE2BC4D099371FBE4C68D687FAA6416DB3D5.xuy", lpFilePart=0x0) returned 0x89 [0179.882] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0179.882] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D61EBE2BC4D099371FBE4C68D687FAA6416DB3D5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d61ebe2bc4d099371fbe4c68d687faa6416db3d5"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b80fad, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x80b80fad, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x5711d0a2, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xab0)) returned 1 [0179.882] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0179.882] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D61EBE2BC4D099371FBE4C68D687FAA6416DB3D5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d61ebe2bc4d099371fbe4c68d687faa6416db3d5"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D61EBE2BC4D099371FBE4C68D687FAA6416DB3D5.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d61ebe2bc4d099371fbe4c68d687faa6416db3d5.xuy")) returned 1 [0179.884] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D63EB68AA63A8165758DF40DEC9F79208EFC096A", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D63EB68AA63A8165758DF40DEC9F79208EFC096A", lpFilePart=0x0) returned 0x85 [0179.884] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0179.884] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D63EB68AA63A8165758DF40DEC9F79208EFC096A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d63eb68aa63a8165758df40dec9f79208efc096a"), fInfoLevelId=0x0, lpFileInformation=0x230dbf0 | out: lpFileInformation=0x230dbf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cf6a371, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x3cf6a371, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x3cf6a371, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0xa3a)) returned 1 [0179.886] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0179.886] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D63EB68AA63A8165758DF40DEC9F79208EFC096A", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D63EB68AA63A8165758DF40DEC9F79208EFC096A", lpFilePart=0x0) returned 0x85 [0179.886] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0179.886] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D63EB68AA63A8165758DF40DEC9F79208EFC096A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d63eb68aa63a8165758df40dec9f79208efc096a"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0179.886] GetFileType (hFile=0x444) returned 0x1 [0179.886] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0179.886] GetFileType (hFile=0x444) returned 0x1 [0179.886] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xa3a [0179.886] ReadFile (in: hFile=0x444, lpBuffer=0x230ea48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x230ea48*, lpNumberOfBytesRead=0x3be5c8*=0xa3a, lpOverlapped=0x0) returned 1 [0179.888] CloseHandle (hObject=0x444) returned 1 [0179.898] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D63EB68AA63A8165758DF40DEC9F79208EFC096A", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D63EB68AA63A8165758DF40DEC9F79208EFC096A", lpFilePart=0x0) returned 0x85 [0179.898] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0179.898] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D63EB68AA63A8165758DF40DEC9F79208EFC096A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d63eb68aa63a8165758df40dec9f79208efc096a"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0179.900] GetFileType (hFile=0x444) returned 0x1 [0179.900] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0179.900] GetFileType (hFile=0x444) returned 0x1 [0179.900] WriteFile (in: hFile=0x444, lpBuffer=0x2388e18*, nNumberOfBytesToWrite=0xa40, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x2388e18*, lpNumberOfBytesWritten=0x3be4d8*=0xa40, lpOverlapped=0x0) returned 1 [0179.901] CloseHandle (hObject=0x444) returned 1 [0179.901] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D63EB68AA63A8165758DF40DEC9F79208EFC096A", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D63EB68AA63A8165758DF40DEC9F79208EFC096A", lpFilePart=0x0) returned 0x85 [0179.901] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D63EB68AA63A8165758DF40DEC9F79208EFC096A.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D63EB68AA63A8165758DF40DEC9F79208EFC096A.xuy", lpFilePart=0x0) returned 0x89 [0179.901] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0179.901] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D63EB68AA63A8165758DF40DEC9F79208EFC096A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d63eb68aa63a8165758df40dec9f79208efc096a"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cf6a371, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x3cf6a371, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x57142ff3, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xa40)) returned 1 [0179.901] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0179.902] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D63EB68AA63A8165758DF40DEC9F79208EFC096A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d63eb68aa63a8165758df40dec9f79208efc096a"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D63EB68AA63A8165758DF40DEC9F79208EFC096A.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d63eb68aa63a8165758df40dec9f79208efc096a.xuy")) returned 1 [0179.903] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D6D081457CF07AFA7A0BEF995B37B6400D5E830D", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D6D081457CF07AFA7A0BEF995B37B6400D5E830D", lpFilePart=0x0) returned 0x85 [0179.903] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0179.903] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D6D081457CF07AFA7A0BEF995B37B6400D5E830D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d6d081457cf07afa7a0bef995b37b6400d5e830d"), fInfoLevelId=0x0, lpFileInformation=0x238a1d8 | out: lpFileInformation=0x238a1d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc55b01c8, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc55b01c8, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xc55b01c8, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x52a)) returned 1 [0179.903] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0179.903] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D6D081457CF07AFA7A0BEF995B37B6400D5E830D", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D6D081457CF07AFA7A0BEF995B37B6400D5E830D", lpFilePart=0x0) returned 0x85 [0179.903] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0179.903] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D6D081457CF07AFA7A0BEF995B37B6400D5E830D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d6d081457cf07afa7a0bef995b37b6400d5e830d"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0179.903] GetFileType (hFile=0x444) returned 0x1 [0179.903] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0179.903] GetFileType (hFile=0x444) returned 0x1 [0179.903] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x52a [0179.903] ReadFile (in: hFile=0x444, lpBuffer=0x238ab20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x238ab20*, lpNumberOfBytesRead=0x3be5c8*=0x52a, lpOverlapped=0x0) returned 1 [0179.906] CloseHandle (hObject=0x444) returned 1 [0179.946] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D6D081457CF07AFA7A0BEF995B37B6400D5E830D", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D6D081457CF07AFA7A0BEF995B37B6400D5E830D", lpFilePart=0x0) returned 0x85 [0179.946] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0179.946] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D6D081457CF07AFA7A0BEF995B37B6400D5E830D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d6d081457cf07afa7a0bef995b37b6400d5e830d"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0179.948] GetFileType (hFile=0x444) returned 0x1 [0179.948] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0179.948] GetFileType (hFile=0x444) returned 0x1 [0179.948] WriteFile (in: hFile=0x444, lpBuffer=0x22007a8*, nNumberOfBytesToWrite=0x530, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x22007a8*, lpNumberOfBytesWritten=0x3be4d8*=0x530, lpOverlapped=0x0) returned 1 [0179.949] CloseHandle (hObject=0x444) returned 1 [0179.949] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D6D081457CF07AFA7A0BEF995B37B6400D5E830D", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D6D081457CF07AFA7A0BEF995B37B6400D5E830D", lpFilePart=0x0) returned 0x85 [0179.949] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D6D081457CF07AFA7A0BEF995B37B6400D5E830D.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D6D081457CF07AFA7A0BEF995B37B6400D5E830D.xuy", lpFilePart=0x0) returned 0x89 [0179.949] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0179.949] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D6D081457CF07AFA7A0BEF995B37B6400D5E830D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d6d081457cf07afa7a0bef995b37b6400d5e830d"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc55b01c8, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc55b01c8, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x571b5795, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x530)) returned 1 [0179.949] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0179.950] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D6D081457CF07AFA7A0BEF995B37B6400D5E830D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d6d081457cf07afa7a0bef995b37b6400d5e830d"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D6D081457CF07AFA7A0BEF995B37B6400D5E830D.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d6d081457cf07afa7a0bef995b37b6400d5e830d.xuy")) returned 1 [0179.951] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D6F079F21194AF40050B050CF0C5B7B7593CB819", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D6F079F21194AF40050B050CF0C5B7B7593CB819", lpFilePart=0x0) returned 0x85 [0179.951] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0179.951] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D6F079F21194AF40050B050CF0C5B7B7593CB819" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d6f079f21194af40050b050cf0c5b7b7593cb819"), fInfoLevelId=0x0, lpFileInformation=0x2201b68 | out: lpFileInformation=0x2201b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f20c6ff, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3f20c6ff, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xc580cfc1, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0xdfd)) returned 1 [0179.951] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0179.951] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D6F079F21194AF40050B050CF0C5B7B7593CB819", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D6F079F21194AF40050B050CF0C5B7B7593CB819", lpFilePart=0x0) returned 0x85 [0179.951] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0179.951] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D6F079F21194AF40050B050CF0C5B7B7593CB819" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d6f079f21194af40050b050cf0c5b7b7593cb819"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0179.951] GetFileType (hFile=0x444) returned 0x1 [0179.951] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0179.952] GetFileType (hFile=0x444) returned 0x1 [0179.952] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xdfd [0179.952] ReadFile (in: hFile=0x444, lpBuffer=0x2202d80, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x2202d80*, lpNumberOfBytesRead=0x3be5c8*=0xdfd, lpOverlapped=0x0) returned 1 [0179.953] CloseHandle (hObject=0x444) returned 1 [0179.963] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D6F079F21194AF40050B050CF0C5B7B7593CB819", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D6F079F21194AF40050B050CF0C5B7B7593CB819", lpFilePart=0x0) returned 0x85 [0179.964] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0179.964] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D6F079F21194AF40050B050CF0C5B7B7593CB819" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d6f079f21194af40050b050cf0c5b7b7593cb819"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0179.965] GetFileType (hFile=0x444) returned 0x1 [0179.965] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0179.965] GetFileType (hFile=0x444) returned 0x1 [0179.966] WriteFile (in: hFile=0x444, lpBuffer=0x227e410*, nNumberOfBytesToWrite=0xe00, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x227e410*, lpNumberOfBytesWritten=0x3be4d8*=0xe00, lpOverlapped=0x0) returned 1 [0179.966] CloseHandle (hObject=0x444) returned 1 [0179.966] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D6F079F21194AF40050B050CF0C5B7B7593CB819", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D6F079F21194AF40050B050CF0C5B7B7593CB819", lpFilePart=0x0) returned 0x85 [0179.966] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D6F079F21194AF40050B050CF0C5B7B7593CB819.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D6F079F21194AF40050B050CF0C5B7B7593CB819.xuy", lpFilePart=0x0) returned 0x89 [0179.966] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0179.967] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D6F079F21194AF40050B050CF0C5B7B7593CB819" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d6f079f21194af40050b050cf0c5b7b7593cb819"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f20c6ff, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3f20c6ff, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x571dba7f, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xe00)) returned 1 [0179.967] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0179.967] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D6F079F21194AF40050B050CF0C5B7B7593CB819" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d6f079f21194af40050b050cf0c5b7b7593cb819"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D6F079F21194AF40050B050CF0C5B7B7593CB819.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d6f079f21194af40050b050cf0c5b7b7593cb819.xuy")) returned 1 [0179.968] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D8F9517F7B467542A0B48C5AFA173D728B3E867F", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D8F9517F7B467542A0B48C5AFA173D728B3E867F", lpFilePart=0x0) returned 0x85 [0179.968] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0179.968] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D8F9517F7B467542A0B48C5AFA173D728B3E867F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d8f9517f7b467542a0b48c5afa173d728b3e867f"), fInfoLevelId=0x0, lpFileInformation=0x227f7d0 | out: lpFileInformation=0x227f7d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61577ff1, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x61577ff1, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x6159e1e8, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xe55)) returned 1 [0179.968] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0179.968] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D8F9517F7B467542A0B48C5AFA173D728B3E867F", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D8F9517F7B467542A0B48C5AFA173D728B3E867F", lpFilePart=0x0) returned 0x85 [0179.969] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0179.969] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D8F9517F7B467542A0B48C5AFA173D728B3E867F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d8f9517f7b467542a0b48c5afa173d728b3e867f"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0179.969] GetFileType (hFile=0x444) returned 0x1 [0179.969] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0179.969] GetFileType (hFile=0x444) returned 0x1 [0179.969] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xe55 [0179.969] ReadFile (in: hFile=0x444, lpBuffer=0x2280a40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x2280a40*, lpNumberOfBytesRead=0x3be5c8*=0xe55, lpOverlapped=0x0) returned 1 [0179.980] CloseHandle (hObject=0x444) returned 1 [0180.005] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D8F9517F7B467542A0B48C5AFA173D728B3E867F", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D8F9517F7B467542A0B48C5AFA173D728B3E867F", lpFilePart=0x0) returned 0x85 [0180.005] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0180.005] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D8F9517F7B467542A0B48C5AFA173D728B3E867F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d8f9517f7b467542a0b48c5afa173d728b3e867f"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0180.008] GetFileType (hFile=0x444) returned 0x1 [0180.008] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0180.008] GetFileType (hFile=0x444) returned 0x1 [0180.008] WriteFile (in: hFile=0x444, lpBuffer=0x22fc2b8*, nNumberOfBytesToWrite=0xe60, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x22fc2b8*, lpNumberOfBytesWritten=0x3be4d8*=0xe60, lpOverlapped=0x0) returned 1 [0180.009] CloseHandle (hObject=0x444) returned 1 [0180.009] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D8F9517F7B467542A0B48C5AFA173D728B3E867F", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D8F9517F7B467542A0B48C5AFA173D728B3E867F", lpFilePart=0x0) returned 0x85 [0180.009] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D8F9517F7B467542A0B48C5AFA173D728B3E867F.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D8F9517F7B467542A0B48C5AFA173D728B3E867F.xuy", lpFilePart=0x0) returned 0x89 [0180.009] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0180.009] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D8F9517F7B467542A0B48C5AFA173D728B3E867F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d8f9517f7b467542a0b48c5afa173d728b3e867f"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61577ff1, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x61577ff1, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x5724df1b, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xe60)) returned 1 [0180.009] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0180.010] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D8F9517F7B467542A0B48C5AFA173D728B3E867F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d8f9517f7b467542a0b48c5afa173d728b3e867f"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D8F9517F7B467542A0B48C5AFA173D728B3E867F.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d8f9517f7b467542a0b48c5afa173d728b3e867f.xuy")) returned 1 [0180.011] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D9214DB11627BC7320896C660646B3BB5928A3E1", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D9214DB11627BC7320896C660646B3BB5928A3E1", lpFilePart=0x0) returned 0x85 [0180.011] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0180.011] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D9214DB11627BC7320896C660646B3BB5928A3E1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d9214db11627bc7320896c660646b3bb5928a3e1"), fInfoLevelId=0x0, lpFileInformation=0x22fd678 | out: lpFileInformation=0x22fd678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c16393c, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3c16393c, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xc4e3cc0d, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x1c66)) returned 1 [0180.011] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0180.011] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D9214DB11627BC7320896C660646B3BB5928A3E1", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D9214DB11627BC7320896C660646B3BB5928A3E1", lpFilePart=0x0) returned 0x85 [0180.011] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0180.011] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D9214DB11627BC7320896C660646B3BB5928A3E1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d9214db11627bc7320896c660646b3bb5928a3e1"), fInfoLevelId=0x0, lpFileInformation=0x22fd878 | out: lpFileInformation=0x22fd878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c16393c, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3c16393c, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xc4e3cc0d, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x1c66)) returned 1 [0180.012] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0180.012] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D9214DB11627BC7320896C660646B3BB5928A3E1", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D9214DB11627BC7320896C660646B3BB5928A3E1", lpFilePart=0x0) returned 0x85 [0180.012] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0180.012] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D9214DB11627BC7320896C660646B3BB5928A3E1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d9214db11627bc7320896c660646b3bb5928a3e1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0180.013] GetFileType (hFile=0x444) returned 0x1 [0180.013] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0180.013] GetFileType (hFile=0x444) returned 0x1 [0180.013] ReadFile (in: hFile=0x444, lpBuffer=0x22ffda8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x22ffda8*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0180.054] CloseHandle (hObject=0x444) returned 1 [0180.054] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D9214DB11627BC7320896C660646B3BB5928A3E1", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D9214DB11627BC7320896C660646B3BB5928A3E1", lpFilePart=0x0) returned 0x85 [0180.054] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0180.054] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D9214DB11627BC7320896C660646B3BB5928A3E1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d9214db11627bc7320896c660646b3bb5928a3e1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0180.054] GetFileType (hFile=0x444) returned 0x1 [0180.054] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0180.054] GetFileType (hFile=0x444) returned 0x1 [0180.055] WriteFile (in: hFile=0x444, lpBuffer=0x22fda58*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x22fda58*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0180.055] CloseHandle (hObject=0x444) returned 1 [0180.055] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D9214DB11627BC7320896C660646B3BB5928A3E1", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D9214DB11627BC7320896C660646B3BB5928A3E1", lpFilePart=0x0) returned 0x85 [0180.055] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D9214DB11627BC7320896C660646B3BB5928A3E1.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D9214DB11627BC7320896C660646B3BB5928A3E1.xuy", lpFilePart=0x0) returned 0x89 [0180.055] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0180.055] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D9214DB11627BC7320896C660646B3BB5928A3E1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d9214db11627bc7320896c660646b3bb5928a3e1"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c16393c, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3c16393c, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x572c05c3, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0180.055] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0180.055] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D9214DB11627BC7320896C660646B3BB5928A3E1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d9214db11627bc7320896c660646b3bb5928a3e1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D9214DB11627BC7320896C660646B3BB5928A3E1.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d9214db11627bc7320896c660646b3bb5928a3e1.xuy")) returned 1 [0180.056] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D9FCF8E310397BF1F14CF1D297F8D882BF9B716B", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D9FCF8E310397BF1F14CF1D297F8D882BF9B716B", lpFilePart=0x0) returned 0x85 [0180.056] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0180.057] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D9FCF8E310397BF1F14CF1D297F8D882BF9B716B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d9fcf8e310397bf1f14cf1d297f8d882bf9b716b"), fInfoLevelId=0x0, lpFileInformation=0x237c350 | out: lpFileInformation=0x237c350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4e89099, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc4e89099, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xc50c5407, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x2393)) returned 1 [0180.057] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0180.057] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D9FCF8E310397BF1F14CF1D297F8D882BF9B716B", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D9FCF8E310397BF1F14CF1D297F8D882BF9B716B", lpFilePart=0x0) returned 0x85 [0180.057] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0180.057] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D9FCF8E310397BF1F14CF1D297F8D882BF9B716B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d9fcf8e310397bf1f14cf1d297f8d882bf9b716b"), fInfoLevelId=0x0, lpFileInformation=0x237c550 | out: lpFileInformation=0x237c550*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4e89099, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc4e89099, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xc50c5407, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x2393)) returned 1 [0180.057] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0180.057] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D9FCF8E310397BF1F14CF1D297F8D882BF9B716B", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D9FCF8E310397BF1F14CF1D297F8D882BF9B716B", lpFilePart=0x0) returned 0x85 [0180.057] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0180.057] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D9FCF8E310397BF1F14CF1D297F8D882BF9B716B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d9fcf8e310397bf1f14cf1d297f8d882bf9b716b"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0180.058] GetFileType (hFile=0x444) returned 0x1 [0180.058] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0180.058] GetFileType (hFile=0x444) returned 0x1 [0180.058] ReadFile (in: hFile=0x444, lpBuffer=0x237ea80, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x237ea80*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0180.113] CloseHandle (hObject=0x444) returned 1 [0180.113] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D9FCF8E310397BF1F14CF1D297F8D882BF9B716B", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D9FCF8E310397BF1F14CF1D297F8D882BF9B716B", lpFilePart=0x0) returned 0x85 [0180.113] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0180.113] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D9FCF8E310397BF1F14CF1D297F8D882BF9B716B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d9fcf8e310397bf1f14cf1d297f8d882bf9b716b"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0180.113] GetFileType (hFile=0x444) returned 0x1 [0180.114] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0180.114] GetFileType (hFile=0x444) returned 0x1 [0180.114] WriteFile (in: hFile=0x444, lpBuffer=0x2188818*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x2188818*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0180.114] CloseHandle (hObject=0x444) returned 1 [0180.114] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D9FCF8E310397BF1F14CF1D297F8D882BF9B716B", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D9FCF8E310397BF1F14CF1D297F8D882BF9B716B", lpFilePart=0x0) returned 0x85 [0180.114] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D9FCF8E310397BF1F14CF1D297F8D882BF9B716B.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D9FCF8E310397BF1F14CF1D297F8D882BF9B716B.xuy", lpFilePart=0x0) returned 0x89 [0180.114] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0180.114] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D9FCF8E310397BF1F14CF1D297F8D882BF9B716B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d9fcf8e310397bf1f14cf1d297f8d882bf9b716b"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4e89099, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc4e89099, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x573569b5, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2393)) returned 1 [0180.114] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0180.114] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D9FCF8E310397BF1F14CF1D297F8D882BF9B716B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d9fcf8e310397bf1f14cf1d297f8d882bf9b716b"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D9FCF8E310397BF1F14CF1D297F8D882BF9B716B.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d9fcf8e310397bf1f14cf1d297f8d882bf9b716b.xuy")) returned 1 [0180.116] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DA976E14B75C312E9E77BED368F06E50AE15E8D7", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DA976E14B75C312E9E77BED368F06E50AE15E8D7", lpFilePart=0x0) returned 0x85 [0180.117] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0180.117] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DA976E14B75C312E9E77BED368F06E50AE15E8D7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\da976e14b75c312e9e77bed368f06e50ae15e8d7"), fInfoLevelId=0x0, lpFileInformation=0x21fddd0 | out: lpFileInformation=0x21fddd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x861a7c68, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x861a7c68, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x861a7c68, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x1af7)) returned 1 [0180.117] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0180.117] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DA976E14B75C312E9E77BED368F06E50AE15E8D7", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DA976E14B75C312E9E77BED368F06E50AE15E8D7", lpFilePart=0x0) returned 0x85 [0180.117] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0180.117] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DA976E14B75C312E9E77BED368F06E50AE15E8D7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\da976e14b75c312e9e77bed368f06e50ae15e8d7"), fInfoLevelId=0x0, lpFileInformation=0x21fdfd0 | out: lpFileInformation=0x21fdfd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x861a7c68, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x861a7c68, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x861a7c68, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x1af7)) returned 1 [0180.117] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0180.117] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DA976E14B75C312E9E77BED368F06E50AE15E8D7", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DA976E14B75C312E9E77BED368F06E50AE15E8D7", lpFilePart=0x0) returned 0x85 [0180.117] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0180.117] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DA976E14B75C312E9E77BED368F06E50AE15E8D7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\da976e14b75c312e9e77bed368f06e50ae15e8d7"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0180.118] GetFileType (hFile=0x444) returned 0x1 [0180.118] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0180.118] GetFileType (hFile=0x444) returned 0x1 [0180.118] ReadFile (in: hFile=0x444, lpBuffer=0x2200500, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x2200500*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0180.143] CloseHandle (hObject=0x444) returned 1 [0180.143] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DA976E14B75C312E9E77BED368F06E50AE15E8D7", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DA976E14B75C312E9E77BED368F06E50AE15E8D7", lpFilePart=0x0) returned 0x85 [0180.143] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0180.143] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DA976E14B75C312E9E77BED368F06E50AE15E8D7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\da976e14b75c312e9e77bed368f06e50ae15e8d7"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0180.143] GetFileType (hFile=0x444) returned 0x1 [0180.143] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0180.143] GetFileType (hFile=0x444) returned 0x1 [0180.143] WriteFile (in: hFile=0x444, lpBuffer=0x21fe1b0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x21fe1b0*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0180.144] CloseHandle (hObject=0x444) returned 1 [0180.144] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DA976E14B75C312E9E77BED368F06E50AE15E8D7", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DA976E14B75C312E9E77BED368F06E50AE15E8D7", lpFilePart=0x0) returned 0x85 [0180.144] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DA976E14B75C312E9E77BED368F06E50AE15E8D7.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DA976E14B75C312E9E77BED368F06E50AE15E8D7.xuy", lpFilePart=0x0) returned 0x89 [0180.144] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0180.144] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DA976E14B75C312E9E77BED368F06E50AE15E8D7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\da976e14b75c312e9e77bed368f06e50ae15e8d7"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x861a7c68, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x861a7c68, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x57383042, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0180.144] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0180.144] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DA976E14B75C312E9E77BED368F06E50AE15E8D7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\da976e14b75c312e9e77bed368f06e50ae15e8d7"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DA976E14B75C312E9E77BED368F06E50AE15E8D7.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\da976e14b75c312e9e77bed368f06e50ae15e8d7.xuy")) returned 1 [0180.146] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DAC72A334F6E2DC96BA09A9A85ECBE7A3B8C77D8", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DAC72A334F6E2DC96BA09A9A85ECBE7A3B8C77D8", lpFilePart=0x0) returned 0x85 [0180.146] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0180.146] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DAC72A334F6E2DC96BA09A9A85ECBE7A3B8C77D8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\dac72a334f6e2dc96ba09a9a85ecbe7a3b8c77d8"), fInfoLevelId=0x0, lpFileInformation=0x227caa8 | out: lpFileInformation=0x227caa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x615c4498, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x615c4498, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x615c4498, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xf12)) returned 1 [0180.146] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0180.146] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DAC72A334F6E2DC96BA09A9A85ECBE7A3B8C77D8", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DAC72A334F6E2DC96BA09A9A85ECBE7A3B8C77D8", lpFilePart=0x0) returned 0x85 [0180.146] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0180.146] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DAC72A334F6E2DC96BA09A9A85ECBE7A3B8C77D8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\dac72a334f6e2dc96ba09a9a85ecbe7a3b8c77d8"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0180.146] GetFileType (hFile=0x444) returned 0x1 [0180.146] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0180.146] GetFileType (hFile=0x444) returned 0x1 [0180.146] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xf12 [0180.146] ReadFile (in: hFile=0x444, lpBuffer=0x227ddd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x227ddd8*, lpNumberOfBytesRead=0x3be5c8*=0xf12, lpOverlapped=0x0) returned 1 [0180.177] CloseHandle (hObject=0x444) returned 1 [0180.188] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DAC72A334F6E2DC96BA09A9A85ECBE7A3B8C77D8", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DAC72A334F6E2DC96BA09A9A85ECBE7A3B8C77D8", lpFilePart=0x0) returned 0x85 [0180.188] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0180.188] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DAC72A334F6E2DC96BA09A9A85ECBE7A3B8C77D8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\dac72a334f6e2dc96ba09a9a85ecbe7a3b8c77d8"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0180.190] GetFileType (hFile=0x444) returned 0x1 [0180.190] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0180.190] GetFileType (hFile=0x444) returned 0x1 [0180.190] WriteFile (in: hFile=0x444, lpBuffer=0x22f9a10*, nNumberOfBytesToWrite=0xf20, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x22f9a10*, lpNumberOfBytesWritten=0x3be4d8*=0xf20, lpOverlapped=0x0) returned 1 [0180.194] CloseHandle (hObject=0x444) returned 1 [0180.194] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DAC72A334F6E2DC96BA09A9A85ECBE7A3B8C77D8", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DAC72A334F6E2DC96BA09A9A85ECBE7A3B8C77D8", lpFilePart=0x0) returned 0x85 [0180.194] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DAC72A334F6E2DC96BA09A9A85ECBE7A3B8C77D8.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DAC72A334F6E2DC96BA09A9A85ECBE7A3B8C77D8.xuy", lpFilePart=0x0) returned 0x89 [0180.194] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0180.194] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DAC72A334F6E2DC96BA09A9A85ECBE7A3B8C77D8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\dac72a334f6e2dc96ba09a9a85ecbe7a3b8c77d8"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x615c4498, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x615c4498, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x573f58cf, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xf20)) returned 1 [0180.194] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0180.194] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DAC72A334F6E2DC96BA09A9A85ECBE7A3B8C77D8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\dac72a334f6e2dc96ba09a9a85ecbe7a3b8c77d8"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DAC72A334F6E2DC96BA09A9A85ECBE7A3B8C77D8.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\dac72a334f6e2dc96ba09a9a85ecbe7a3b8c77d8.xuy")) returned 1 [0180.196] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DB14345BCB05A4867C9161FB375C431F56EF9884", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DB14345BCB05A4867C9161FB375C431F56EF9884", lpFilePart=0x0) returned 0x85 [0180.196] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0180.196] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DB14345BCB05A4867C9161FB375C431F56EF9884" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\db14345bcb05a4867c9161fb375c431f56ef9884"), fInfoLevelId=0x0, lpFileInformation=0x22fadd0 | out: lpFileInformation=0x22fadd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61551d8c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x61551d8c, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x61551d8c, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x1137)) returned 1 [0180.196] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0180.196] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DB14345BCB05A4867C9161FB375C431F56EF9884", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DB14345BCB05A4867C9161FB375C431F56EF9884", lpFilePart=0x0) returned 0x85 [0180.196] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0180.196] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DB14345BCB05A4867C9161FB375C431F56EF9884" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\db14345bcb05a4867c9161fb375c431f56ef9884"), fInfoLevelId=0x0, lpFileInformation=0x22fafd0 | out: lpFileInformation=0x22fafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61551d8c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x61551d8c, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x61551d8c, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x1137)) returned 1 [0180.196] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0180.196] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DB14345BCB05A4867C9161FB375C431F56EF9884", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DB14345BCB05A4867C9161FB375C431F56EF9884", lpFilePart=0x0) returned 0x85 [0180.196] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0180.196] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DB14345BCB05A4867C9161FB375C431F56EF9884" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\db14345bcb05a4867c9161fb375c431f56ef9884"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0180.197] GetFileType (hFile=0x444) returned 0x1 [0180.197] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0180.197] GetFileType (hFile=0x444) returned 0x1 [0180.197] ReadFile (in: hFile=0x444, lpBuffer=0x22fd500, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x22fd500*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0180.209] CloseHandle (hObject=0x444) returned 1 [0180.209] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DB14345BCB05A4867C9161FB375C431F56EF9884", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DB14345BCB05A4867C9161FB375C431F56EF9884", lpFilePart=0x0) returned 0x85 [0180.209] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0180.209] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DB14345BCB05A4867C9161FB375C431F56EF9884" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\db14345bcb05a4867c9161fb375c431f56ef9884"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0180.210] GetFileType (hFile=0x444) returned 0x1 [0180.210] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0180.210] GetFileType (hFile=0x444) returned 0x1 [0180.210] WriteFile (in: hFile=0x444, lpBuffer=0x22fb1b0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x22fb1b0*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0180.210] CloseHandle (hObject=0x444) returned 1 [0180.229] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DB14345BCB05A4867C9161FB375C431F56EF9884", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DB14345BCB05A4867C9161FB375C431F56EF9884", lpFilePart=0x0) returned 0x85 [0180.229] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DB14345BCB05A4867C9161FB375C431F56EF9884.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DB14345BCB05A4867C9161FB375C431F56EF9884.xuy", lpFilePart=0x0) returned 0x89 [0180.229] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0180.229] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DB14345BCB05A4867C9161FB375C431F56EF9884" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\db14345bcb05a4867c9161fb375c431f56ef9884"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61551d8c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x61551d8c, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x5741ba98, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0180.229] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0180.229] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DB14345BCB05A4867C9161FB375C431F56EF9884" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\db14345bcb05a4867c9161fb375c431f56ef9884"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DB14345BCB05A4867C9161FB375C431F56EF9884.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\db14345bcb05a4867c9161fb375c431f56ef9884.xuy")) returned 1 [0180.230] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DB2EC57404309C752195F926C20CF4D374AE9AE9", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DB2EC57404309C752195F926C20CF4D374AE9AE9", lpFilePart=0x0) returned 0x85 [0180.230] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0180.230] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DB2EC57404309C752195F926C20CF4D374AE9AE9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\db2ec57404309c752195f926c20cf4d374ae9ae9"), fInfoLevelId=0x0, lpFileInformation=0x2379aa8 | out: lpFileInformation=0x2379aa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5589f73, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc5589f73, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xc8102af1, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0xdf15)) returned 1 [0180.231] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0180.231] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DB2EC57404309C752195F926C20CF4D374AE9AE9", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DB2EC57404309C752195F926C20CF4D374AE9AE9", lpFilePart=0x0) returned 0x85 [0180.231] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0180.231] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DB2EC57404309C752195F926C20CF4D374AE9AE9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\db2ec57404309c752195f926c20cf4d374ae9ae9"), fInfoLevelId=0x0, lpFileInformation=0x2379ca8 | out: lpFileInformation=0x2379ca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5589f73, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc5589f73, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xc8102af1, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0xdf15)) returned 1 [0180.231] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0180.231] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DB2EC57404309C752195F926C20CF4D374AE9AE9", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DB2EC57404309C752195F926C20CF4D374AE9AE9", lpFilePart=0x0) returned 0x85 [0180.231] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0180.231] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DB2EC57404309C752195F926C20CF4D374AE9AE9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\db2ec57404309c752195f926c20cf4d374ae9ae9"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0180.232] GetFileType (hFile=0x444) returned 0x1 [0180.232] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0180.232] GetFileType (hFile=0x444) returned 0x1 [0180.232] ReadFile (in: hFile=0x444, lpBuffer=0x237c1d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x237c1d8*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0180.288] CloseHandle (hObject=0x444) returned 1 [0180.288] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DB2EC57404309C752195F926C20CF4D374AE9AE9", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DB2EC57404309C752195F926C20CF4D374AE9AE9", lpFilePart=0x0) returned 0x85 [0180.288] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0180.288] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DB2EC57404309C752195F926C20CF4D374AE9AE9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\db2ec57404309c752195f926c20cf4d374ae9ae9"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0180.289] GetFileType (hFile=0x444) returned 0x1 [0180.289] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0180.289] GetFileType (hFile=0x444) returned 0x1 [0180.289] WriteFile (in: hFile=0x444, lpBuffer=0x2188818*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x2188818*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0180.289] CloseHandle (hObject=0x444) returned 1 [0180.289] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DB2EC57404309C752195F926C20CF4D374AE9AE9", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DB2EC57404309C752195F926C20CF4D374AE9AE9", lpFilePart=0x0) returned 0x85 [0180.289] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DB2EC57404309C752195F926C20CF4D374AE9AE9.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DB2EC57404309C752195F926C20CF4D374AE9AE9.xuy", lpFilePart=0x0) returned 0x89 [0180.289] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0180.289] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DB2EC57404309C752195F926C20CF4D374AE9AE9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\db2ec57404309c752195f926c20cf4d374ae9ae9"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5589f73, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc5589f73, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x574e8c51, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xdf15)) returned 1 [0180.289] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0180.289] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DB2EC57404309C752195F926C20CF4D374AE9AE9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\db2ec57404309c752195f926c20cf4d374ae9ae9"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DB2EC57404309C752195F926C20CF4D374AE9AE9.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\db2ec57404309c752195f926c20cf4d374ae9ae9.xuy")) returned 1 [0180.291] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DB35F7B5C3B638134575506C1DECC7214B0152E3", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DB35F7B5C3B638134575506C1DECC7214B0152E3", lpFilePart=0x0) returned 0x85 [0180.291] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0180.291] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DB35F7B5C3B638134575506C1DECC7214B0152E3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\db35f7b5c3b638134575506c1decc7214b0152e3"), fInfoLevelId=0x0, lpFileInformation=0x21f8760 | out: lpFileInformation=0x21f8760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f06aee6, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3f06aee6, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x7d57b57d, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x7a8f)) returned 1 [0180.291] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0180.291] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DB35F7B5C3B638134575506C1DECC7214B0152E3", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DB35F7B5C3B638134575506C1DECC7214B0152E3", lpFilePart=0x0) returned 0x85 [0180.291] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0180.291] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DB35F7B5C3B638134575506C1DECC7214B0152E3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\db35f7b5c3b638134575506c1decc7214b0152e3"), fInfoLevelId=0x0, lpFileInformation=0x21f8960 | out: lpFileInformation=0x21f8960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f06aee6, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3f06aee6, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x7d57b57d, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x7a8f)) returned 1 [0180.291] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0180.291] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DB35F7B5C3B638134575506C1DECC7214B0152E3", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DB35F7B5C3B638134575506C1DECC7214B0152E3", lpFilePart=0x0) returned 0x85 [0180.291] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0180.292] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DB35F7B5C3B638134575506C1DECC7214B0152E3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\db35f7b5c3b638134575506c1decc7214b0152e3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0180.292] GetFileType (hFile=0x444) returned 0x1 [0180.292] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0180.292] GetFileType (hFile=0x444) returned 0x1 [0180.293] ReadFile (in: hFile=0x444, lpBuffer=0x21fae90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x21fae90*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0180.309] CloseHandle (hObject=0x444) returned 1 [0180.310] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DB35F7B5C3B638134575506C1DECC7214B0152E3", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DB35F7B5C3B638134575506C1DECC7214B0152E3", lpFilePart=0x0) returned 0x85 [0180.310] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0180.310] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DB35F7B5C3B638134575506C1DECC7214B0152E3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\db35f7b5c3b638134575506c1decc7214b0152e3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0180.311] GetFileType (hFile=0x444) returned 0x1 [0180.311] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0180.311] GetFileType (hFile=0x444) returned 0x1 [0180.311] WriteFile (in: hFile=0x444, lpBuffer=0x21f8b40*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x21f8b40*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0180.311] CloseHandle (hObject=0x444) returned 1 [0180.311] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DB35F7B5C3B638134575506C1DECC7214B0152E3", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DB35F7B5C3B638134575506C1DECC7214B0152E3", lpFilePart=0x0) returned 0x85 [0180.311] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DB35F7B5C3B638134575506C1DECC7214B0152E3.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DB35F7B5C3B638134575506C1DECC7214B0152E3.xuy", lpFilePart=0x0) returned 0x89 [0180.311] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0180.311] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DB35F7B5C3B638134575506C1DECC7214B0152E3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\db35f7b5c3b638134575506c1decc7214b0152e3"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f06aee6, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3f06aee6, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x57534e03, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x7a8f)) returned 1 [0180.311] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0180.311] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DB35F7B5C3B638134575506C1DECC7214B0152E3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\db35f7b5c3b638134575506c1decc7214b0152e3"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DB35F7B5C3B638134575506C1DECC7214B0152E3.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\db35f7b5c3b638134575506c1decc7214b0152e3.xuy")) returned 1 [0180.313] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DB65F2F6542A9B1877838F046853C61ECE4BEB29", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DB65F2F6542A9B1877838F046853C61ECE4BEB29", lpFilePart=0x0) returned 0x85 [0180.313] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0180.313] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DB65F2F6542A9B1877838F046853C61ECE4BEB29" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\db65f2f6542a9b1877838f046853c61ece4beb29"), fInfoLevelId=0x0, lpFileInformation=0x2277438 | out: lpFileInformation=0x2277438*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x897797a6, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x897797a6, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x897797a6, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x35e9)) returned 1 [0180.313] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0180.313] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DB65F2F6542A9B1877838F046853C61ECE4BEB29", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DB65F2F6542A9B1877838F046853C61ECE4BEB29", lpFilePart=0x0) returned 0x85 [0180.313] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0180.313] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DB65F2F6542A9B1877838F046853C61ECE4BEB29" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\db65f2f6542a9b1877838f046853c61ece4beb29"), fInfoLevelId=0x0, lpFileInformation=0x2277638 | out: lpFileInformation=0x2277638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x897797a6, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x897797a6, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x897797a6, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x35e9)) returned 1 [0180.313] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0180.314] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DB65F2F6542A9B1877838F046853C61ECE4BEB29", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DB65F2F6542A9B1877838F046853C61ECE4BEB29", lpFilePart=0x0) returned 0x85 [0180.314] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0180.314] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DB65F2F6542A9B1877838F046853C61ECE4BEB29" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\db65f2f6542a9b1877838f046853c61ece4beb29"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0180.315] GetFileType (hFile=0x444) returned 0x1 [0180.315] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0180.315] GetFileType (hFile=0x444) returned 0x1 [0180.315] ReadFile (in: hFile=0x444, lpBuffer=0x2279b68, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x2279b68*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0180.342] CloseHandle (hObject=0x444) returned 1 [0180.342] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DB65F2F6542A9B1877838F046853C61ECE4BEB29", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DB65F2F6542A9B1877838F046853C61ECE4BEB29", lpFilePart=0x0) returned 0x85 [0180.343] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0180.343] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DB65F2F6542A9B1877838F046853C61ECE4BEB29" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\db65f2f6542a9b1877838f046853c61ece4beb29"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0180.343] GetFileType (hFile=0x444) returned 0x1 [0180.343] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0180.343] GetFileType (hFile=0x444) returned 0x1 [0180.343] WriteFile (in: hFile=0x444, lpBuffer=0x2277818*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x2277818*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0180.343] CloseHandle (hObject=0x444) returned 1 [0180.343] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DB65F2F6542A9B1877838F046853C61ECE4BEB29", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DB65F2F6542A9B1877838F046853C61ECE4BEB29", lpFilePart=0x0) returned 0x85 [0180.343] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DB65F2F6542A9B1877838F046853C61ECE4BEB29.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DB65F2F6542A9B1877838F046853C61ECE4BEB29.xuy", lpFilePart=0x0) returned 0x89 [0180.343] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0180.343] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DB65F2F6542A9B1877838F046853C61ECE4BEB29" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\db65f2f6542a9b1877838f046853c61ece4beb29"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x897797a6, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x897797a6, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x57581254, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x35e9)) returned 1 [0180.344] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0180.344] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DB65F2F6542A9B1877838F046853C61ECE4BEB29" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\db65f2f6542a9b1877838f046853c61ece4beb29"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DB65F2F6542A9B1877838F046853C61ECE4BEB29.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\db65f2f6542a9b1877838f046853c61ece4beb29.xuy")) returned 1 [0180.345] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DB7B4F598DC813FF0ED87D8FB28B07938972D877", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DB7B4F598DC813FF0ED87D8FB28B07938972D877", lpFilePart=0x0) returned 0x85 [0180.345] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0180.345] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DB7B4F598DC813FF0ED87D8FB28B07938972D877" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\db7b4f598dc813ff0ed87d8fb28b07938972d877"), fInfoLevelId=0x0, lpFileInformation=0x22f6110 | out: lpFileInformation=0x22f6110*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5c4d127, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc5c4d127, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xc5c546fe, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0xd34)) returned 1 [0180.345] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0180.345] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DB7B4F598DC813FF0ED87D8FB28B07938972D877", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DB7B4F598DC813FF0ED87D8FB28B07938972D877", lpFilePart=0x0) returned 0x85 [0180.346] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0180.346] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DB7B4F598DC813FF0ED87D8FB28B07938972D877" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\db7b4f598dc813ff0ed87d8fb28b07938972d877"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0180.346] GetFileType (hFile=0x444) returned 0x1 [0180.346] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0180.346] GetFileType (hFile=0x444) returned 0x1 [0180.346] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xd34 [0180.346] ReadFile (in: hFile=0x444, lpBuffer=0x22f7260, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x22f7260*, lpNumberOfBytesRead=0x3be5c8*=0xd34, lpOverlapped=0x0) returned 1 [0180.353] CloseHandle (hObject=0x444) returned 1 [0180.363] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DB7B4F598DC813FF0ED87D8FB28B07938972D877", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DB7B4F598DC813FF0ED87D8FB28B07938972D877", lpFilePart=0x0) returned 0x85 [0180.363] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0180.363] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DB7B4F598DC813FF0ED87D8FB28B07938972D877" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\db7b4f598dc813ff0ed87d8fb28b07938972d877"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0180.365] GetFileType (hFile=0x444) returned 0x1 [0180.365] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0180.365] GetFileType (hFile=0x444) returned 0x1 [0180.365] WriteFile (in: hFile=0x444, lpBuffer=0x2372538*, nNumberOfBytesToWrite=0xd40, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x2372538*, lpNumberOfBytesWritten=0x3be4d8*=0xd40, lpOverlapped=0x0) returned 1 [0180.365] CloseHandle (hObject=0x444) returned 1 [0180.366] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DB7B4F598DC813FF0ED87D8FB28B07938972D877", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DB7B4F598DC813FF0ED87D8FB28B07938972D877", lpFilePart=0x0) returned 0x85 [0180.366] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DB7B4F598DC813FF0ED87D8FB28B07938972D877.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DB7B4F598DC813FF0ED87D8FB28B07938972D877.xuy", lpFilePart=0x0) returned 0x89 [0180.366] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0180.366] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DB7B4F598DC813FF0ED87D8FB28B07938972D877" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\db7b4f598dc813ff0ed87d8fb28b07938972d877"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5c4d127, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc5c4d127, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x575a7494, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xd40)) returned 1 [0180.366] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0180.366] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DB7B4F598DC813FF0ED87D8FB28B07938972D877" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\db7b4f598dc813ff0ed87d8fb28b07938972d877"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DB7B4F598DC813FF0ED87D8FB28B07938972D877.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\db7b4f598dc813ff0ed87d8fb28b07938972d877.xuy")) returned 1 [0180.367] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DB9C379B8BCC5C0B7939CF2847225FECBA24256F", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DB9C379B8BCC5C0B7939CF2847225FECBA24256F", lpFilePart=0x0) returned 0x85 [0180.367] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0180.367] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DB9C379B8BCC5C0B7939CF2847225FECBA24256F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\db9c379b8bcc5c0b7939cf2847225fecba24256f"), fInfoLevelId=0x0, lpFileInformation=0x23738f8 | out: lpFileInformation=0x23738f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c8e579b, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x7c8e579b, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x7c8e579b, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0xa98)) returned 1 [0180.367] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0180.368] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DB9C379B8BCC5C0B7939CF2847225FECBA24256F", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DB9C379B8BCC5C0B7939CF2847225FECBA24256F", lpFilePart=0x0) returned 0x85 [0180.368] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0180.368] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DB9C379B8BCC5C0B7939CF2847225FECBA24256F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\db9c379b8bcc5c0b7939cf2847225fecba24256f"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0180.368] GetFileType (hFile=0x444) returned 0x1 [0180.368] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0180.368] GetFileType (hFile=0x444) returned 0x1 [0180.368] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xa98 [0180.368] ReadFile (in: hFile=0x444, lpBuffer=0x23747a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x23747a8*, lpNumberOfBytesRead=0x3be5c8*=0xa98, lpOverlapped=0x0) returned 1 [0180.380] CloseHandle (hObject=0x444) returned 1 [0180.434] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DB9C379B8BCC5C0B7939CF2847225FECBA24256F", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DB9C379B8BCC5C0B7939CF2847225FECBA24256F", lpFilePart=0x0) returned 0x85 [0180.434] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0180.434] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DB9C379B8BCC5C0B7939CF2847225FECBA24256F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\db9c379b8bcc5c0b7939cf2847225fecba24256f"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0180.436] GetFileType (hFile=0x444) returned 0x1 [0180.436] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0180.436] GetFileType (hFile=0x444) returned 0x1 [0180.436] WriteFile (in: hFile=0x444, lpBuffer=0x21ec600*, nNumberOfBytesToWrite=0xaa0, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x21ec600*, lpNumberOfBytesWritten=0x3be4d8*=0xaa0, lpOverlapped=0x0) returned 1 [0180.437] CloseHandle (hObject=0x444) returned 1 [0180.437] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DB9C379B8BCC5C0B7939CF2847225FECBA24256F", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DB9C379B8BCC5C0B7939CF2847225FECBA24256F", lpFilePart=0x0) returned 0x85 [0180.437] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DB9C379B8BCC5C0B7939CF2847225FECBA24256F.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DB9C379B8BCC5C0B7939CF2847225FECBA24256F.xuy", lpFilePart=0x0) returned 0x89 [0180.437] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0180.437] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DB9C379B8BCC5C0B7939CF2847225FECBA24256F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\db9c379b8bcc5c0b7939cf2847225fecba24256f"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c8e579b, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x7c8e579b, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x576660a0, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xaa0)) returned 1 [0180.437] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0180.437] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DB9C379B8BCC5C0B7939CF2847225FECBA24256F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\db9c379b8bcc5c0b7939cf2847225fecba24256f"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DB9C379B8BCC5C0B7939CF2847225FECBA24256F.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\db9c379b8bcc5c0b7939cf2847225fecba24256f.xuy")) returned 1 [0180.439] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DC35E516849BDB1CD66329AAAEB70DCCF968F72E", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DC35E516849BDB1CD66329AAAEB70DCCF968F72E", lpFilePart=0x0) returned 0x85 [0180.439] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0180.439] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DC35E516849BDB1CD66329AAAEB70DCCF968F72E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\dc35e516849bdb1cd66329aaaeb70dccf968f72e"), fInfoLevelId=0x0, lpFileInformation=0x21ed9c0 | out: lpFileInformation=0x21ed9c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf477be8a, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xf477be8a, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0xf477e5b0, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x4c65)) returned 1 [0180.439] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0180.439] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DC35E516849BDB1CD66329AAAEB70DCCF968F72E", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DC35E516849BDB1CD66329AAAEB70DCCF968F72E", lpFilePart=0x0) returned 0x85 [0180.439] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0180.439] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DC35E516849BDB1CD66329AAAEB70DCCF968F72E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\dc35e516849bdb1cd66329aaaeb70dccf968f72e"), fInfoLevelId=0x0, lpFileInformation=0x21edbc0 | out: lpFileInformation=0x21edbc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf477be8a, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xf477be8a, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0xf477e5b0, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x4c65)) returned 1 [0180.439] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0180.439] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DC35E516849BDB1CD66329AAAEB70DCCF968F72E", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DC35E516849BDB1CD66329AAAEB70DCCF968F72E", lpFilePart=0x0) returned 0x85 [0180.439] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0180.439] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DC35E516849BDB1CD66329AAAEB70DCCF968F72E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\dc35e516849bdb1cd66329aaaeb70dccf968f72e"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0180.440] GetFileType (hFile=0x444) returned 0x1 [0180.440] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0180.440] GetFileType (hFile=0x444) returned 0x1 [0180.440] ReadFile (in: hFile=0x444, lpBuffer=0x21f00f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x21f00f0*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0180.461] CloseHandle (hObject=0x444) returned 1 [0180.461] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DC35E516849BDB1CD66329AAAEB70DCCF968F72E", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DC35E516849BDB1CD66329AAAEB70DCCF968F72E", lpFilePart=0x0) returned 0x85 [0180.461] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0180.461] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DC35E516849BDB1CD66329AAAEB70DCCF968F72E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\dc35e516849bdb1cd66329aaaeb70dccf968f72e"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0180.461] GetFileType (hFile=0x444) returned 0x1 [0180.461] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0180.461] GetFileType (hFile=0x444) returned 0x1 [0180.461] WriteFile (in: hFile=0x444, lpBuffer=0x21edda0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x21edda0*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0180.461] CloseHandle (hObject=0x444) returned 1 [0180.462] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DC35E516849BDB1CD66329AAAEB70DCCF968F72E", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DC35E516849BDB1CD66329AAAEB70DCCF968F72E", lpFilePart=0x0) returned 0x85 [0180.462] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DC35E516849BDB1CD66329AAAEB70DCCF968F72E.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DC35E516849BDB1CD66329AAAEB70DCCF968F72E.xuy", lpFilePart=0x0) returned 0x89 [0180.462] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0180.462] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DC35E516849BDB1CD66329AAAEB70DCCF968F72E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\dc35e516849bdb1cd66329aaaeb70dccf968f72e"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf477be8a, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xf477be8a, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x5768c1c0, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x4c65)) returned 1 [0180.462] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0180.462] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DC35E516849BDB1CD66329AAAEB70DCCF968F72E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\dc35e516849bdb1cd66329aaaeb70dccf968f72e"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DC35E516849BDB1CD66329AAAEB70DCCF968F72E.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\dc35e516849bdb1cd66329aaaeb70dccf968f72e.xuy")) returned 1 [0180.464] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DC4D1E7DB155E48A1EE307E80594C7EFD3A4CBAA", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DC4D1E7DB155E48A1EE307E80594C7EFD3A4CBAA", lpFilePart=0x0) returned 0x85 [0180.464] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0180.464] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DC4D1E7DB155E48A1EE307E80594C7EFD3A4CBAA" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\dc4d1e7db155e48a1ee307e80594c7efd3a4cbaa"), fInfoLevelId=0x0, lpFileInformation=0x226c698 | out: lpFileInformation=0x226c698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4451501, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xf4451501, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0xf67a9bd6, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0xda4)) returned 1 [0180.465] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0180.465] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DC4D1E7DB155E48A1EE307E80594C7EFD3A4CBAA", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DC4D1E7DB155E48A1EE307E80594C7EFD3A4CBAA", lpFilePart=0x0) returned 0x85 [0180.465] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0180.465] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DC4D1E7DB155E48A1EE307E80594C7EFD3A4CBAA" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\dc4d1e7db155e48a1ee307e80594c7efd3a4cbaa"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0180.465] GetFileType (hFile=0x444) returned 0x1 [0180.465] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0180.465] GetFileType (hFile=0x444) returned 0x1 [0180.465] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xda4 [0180.465] ReadFile (in: hFile=0x444, lpBuffer=0x226d858, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x226d858*, lpNumberOfBytesRead=0x3be5c8*=0xda4, lpOverlapped=0x0) returned 1 [0180.482] CloseHandle (hObject=0x444) returned 1 [0180.493] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DC4D1E7DB155E48A1EE307E80594C7EFD3A4CBAA", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DC4D1E7DB155E48A1EE307E80594C7EFD3A4CBAA", lpFilePart=0x0) returned 0x85 [0180.493] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0180.493] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DC4D1E7DB155E48A1EE307E80594C7EFD3A4CBAA" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\dc4d1e7db155e48a1ee307e80594c7efd3a4cbaa"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0180.495] GetFileType (hFile=0x444) returned 0x1 [0180.495] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0180.495] GetFileType (hFile=0x444) returned 0x1 [0180.495] WriteFile (in: hFile=0x444, lpBuffer=0x22e8d60*, nNumberOfBytesToWrite=0xdb0, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x22e8d60*, lpNumberOfBytesWritten=0x3be4d8*=0xdb0, lpOverlapped=0x0) returned 1 [0180.496] CloseHandle (hObject=0x444) returned 1 [0180.496] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DC4D1E7DB155E48A1EE307E80594C7EFD3A4CBAA", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DC4D1E7DB155E48A1EE307E80594C7EFD3A4CBAA", lpFilePart=0x0) returned 0x85 [0180.496] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DC4D1E7DB155E48A1EE307E80594C7EFD3A4CBAA.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DC4D1E7DB155E48A1EE307E80594C7EFD3A4CBAA.xuy", lpFilePart=0x0) returned 0x89 [0180.496] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0180.496] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DC4D1E7DB155E48A1EE307E80594C7EFD3A4CBAA" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\dc4d1e7db155e48a1ee307e80594c7efd3a4cbaa"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4451501, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xf4451501, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x576d87a1, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xdb0)) returned 1 [0180.496] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0180.496] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DC4D1E7DB155E48A1EE307E80594C7EFD3A4CBAA" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\dc4d1e7db155e48a1ee307e80594c7efd3a4cbaa"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DC4D1E7DB155E48A1EE307E80594C7EFD3A4CBAA.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\dc4d1e7db155e48a1ee307e80594c7efd3a4cbaa.xuy")) returned 1 [0180.498] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DC6EDEE259EDC415A58F9090844E1512A6433E30", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DC6EDEE259EDC415A58F9090844E1512A6433E30", lpFilePart=0x0) returned 0x85 [0180.498] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0180.498] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DC6EDEE259EDC415A58F9090844E1512A6433E30" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\dc6edee259edc415a58f9090844e1512a6433e30"), fInfoLevelId=0x0, lpFileInformation=0x22ea120 | out: lpFileInformation=0x22ea120*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85bfb0af, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x85bfb0af, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x89bf772c, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x23b8)) returned 1 [0180.498] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0180.498] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DC6EDEE259EDC415A58F9090844E1512A6433E30", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DC6EDEE259EDC415A58F9090844E1512A6433E30", lpFilePart=0x0) returned 0x85 [0180.498] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0180.498] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DC6EDEE259EDC415A58F9090844E1512A6433E30" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\dc6edee259edc415a58f9090844e1512a6433e30"), fInfoLevelId=0x0, lpFileInformation=0x22ea320 | out: lpFileInformation=0x22ea320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85bfb0af, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x85bfb0af, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x89bf772c, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x23b8)) returned 1 [0180.498] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0180.498] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DC6EDEE259EDC415A58F9090844E1512A6433E30", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DC6EDEE259EDC415A58F9090844E1512A6433E30", lpFilePart=0x0) returned 0x85 [0180.498] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0180.498] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DC6EDEE259EDC415A58F9090844E1512A6433E30" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\dc6edee259edc415a58f9090844e1512a6433e30"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0180.499] GetFileType (hFile=0x444) returned 0x1 [0180.500] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0180.500] GetFileType (hFile=0x444) returned 0x1 [0180.500] ReadFile (in: hFile=0x444, lpBuffer=0x22ec850, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x22ec850*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0180.512] CloseHandle (hObject=0x444) returned 1 [0180.512] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DC6EDEE259EDC415A58F9090844E1512A6433E30", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DC6EDEE259EDC415A58F9090844E1512A6433E30", lpFilePart=0x0) returned 0x85 [0180.512] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0180.512] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DC6EDEE259EDC415A58F9090844E1512A6433E30" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\dc6edee259edc415a58f9090844e1512a6433e30"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0180.512] GetFileType (hFile=0x444) returned 0x1 [0180.512] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0180.512] GetFileType (hFile=0x444) returned 0x1 [0180.512] WriteFile (in: hFile=0x444, lpBuffer=0x22ea500*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x22ea500*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0180.513] CloseHandle (hObject=0x444) returned 1 [0180.513] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DC6EDEE259EDC415A58F9090844E1512A6433E30", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DC6EDEE259EDC415A58F9090844E1512A6433E30", lpFilePart=0x0) returned 0x85 [0180.513] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DC6EDEE259EDC415A58F9090844E1512A6433E30.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DC6EDEE259EDC415A58F9090844E1512A6433E30.xuy", lpFilePart=0x0) returned 0x89 [0180.513] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0180.513] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DC6EDEE259EDC415A58F9090844E1512A6433E30" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\dc6edee259edc415a58f9090844e1512a6433e30"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85bfb0af, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x85bfb0af, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x576ff432, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x23b8)) returned 1 [0180.513] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0180.513] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DC6EDEE259EDC415A58F9090844E1512A6433E30" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\dc6edee259edc415a58f9090844e1512a6433e30"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DC6EDEE259EDC415A58F9090844E1512A6433E30.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\dc6edee259edc415a58f9090844e1512a6433e30.xuy")) returned 1 [0180.515] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DC88C3FD43BDF3C08EFC291E53D213D7FACAF25E", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DC88C3FD43BDF3C08EFC291E53D213D7FACAF25E", lpFilePart=0x0) returned 0x85 [0180.515] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0180.515] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DC88C3FD43BDF3C08EFC291E53D213D7FACAF25E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\dc88c3fd43bdf3c08efc291e53d213d7facaf25e"), fInfoLevelId=0x0, lpFileInformation=0x2368df8 | out: lpFileInformation=0x2368df8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f40364d, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3f40364d, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x41b78276, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x5f35)) returned 1 [0180.515] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0180.515] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DC88C3FD43BDF3C08EFC291E53D213D7FACAF25E", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DC88C3FD43BDF3C08EFC291E53D213D7FACAF25E", lpFilePart=0x0) returned 0x85 [0180.515] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0180.515] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DC88C3FD43BDF3C08EFC291E53D213D7FACAF25E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\dc88c3fd43bdf3c08efc291e53d213d7facaf25e"), fInfoLevelId=0x0, lpFileInformation=0x2368ff8 | out: lpFileInformation=0x2368ff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f40364d, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3f40364d, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x41b78276, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x5f35)) returned 1 [0180.515] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0180.515] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DC88C3FD43BDF3C08EFC291E53D213D7FACAF25E", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DC88C3FD43BDF3C08EFC291E53D213D7FACAF25E", lpFilePart=0x0) returned 0x85 [0180.515] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0180.515] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DC88C3FD43BDF3C08EFC291E53D213D7FACAF25E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\dc88c3fd43bdf3c08efc291e53d213d7facaf25e"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0180.516] GetFileType (hFile=0x444) returned 0x1 [0180.516] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0180.516] GetFileType (hFile=0x444) returned 0x1 [0180.516] ReadFile (in: hFile=0x444, lpBuffer=0x236b528, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x236b528*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0180.799] CloseHandle (hObject=0x444) returned 1 [0180.799] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DC88C3FD43BDF3C08EFC291E53D213D7FACAF25E", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DC88C3FD43BDF3C08EFC291E53D213D7FACAF25E", lpFilePart=0x0) returned 0x85 [0180.799] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0180.799] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DC88C3FD43BDF3C08EFC291E53D213D7FACAF25E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\dc88c3fd43bdf3c08efc291e53d213d7facaf25e"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0180.799] GetFileType (hFile=0x444) returned 0x1 [0180.799] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0180.799] GetFileType (hFile=0x444) returned 0x1 [0180.799] WriteFile (in: hFile=0x444, lpBuffer=0x2188818*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x2188818*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0180.800] CloseHandle (hObject=0x444) returned 1 [0180.800] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DC88C3FD43BDF3C08EFC291E53D213D7FACAF25E", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DC88C3FD43BDF3C08EFC291E53D213D7FACAF25E", lpFilePart=0x0) returned 0x85 [0180.800] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DC88C3FD43BDF3C08EFC291E53D213D7FACAF25E.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DC88C3FD43BDF3C08EFC291E53D213D7FACAF25E.xuy", lpFilePart=0x0) returned 0x89 [0180.800] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0180.800] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DC88C3FD43BDF3C08EFC291E53D213D7FACAF25E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\dc88c3fd43bdf3c08efc291e53d213d7facaf25e"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f40364d, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3f40364d, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x579d3abf, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x5f35)) returned 1 [0180.800] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0180.800] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DC88C3FD43BDF3C08EFC291E53D213D7FACAF25E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\dc88c3fd43bdf3c08efc291e53d213d7facaf25e"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DC88C3FD43BDF3C08EFC291E53D213D7FACAF25E.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\dc88c3fd43bdf3c08efc291e53d213d7facaf25e.xuy")) returned 1 [0180.801] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DC9EDA251EE111F3A521FE1DEE79AA20D6E293F9", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DC9EDA251EE111F3A521FE1DEE79AA20D6E293F9", lpFilePart=0x0) returned 0x85 [0180.802] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0180.802] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DC9EDA251EE111F3A521FE1DEE79AA20D6E293F9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\dc9eda251ee111f3a521fe1dee79aa20d6e293f9"), fInfoLevelId=0x0, lpFileInformation=0x21ea200 | out: lpFileInformation=0x21ea200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e627d68, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x7e627d68, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x7e627d68, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0xb23)) returned 1 [0180.802] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0180.802] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DC9EDA251EE111F3A521FE1DEE79AA20D6E293F9", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DC9EDA251EE111F3A521FE1DEE79AA20D6E293F9", lpFilePart=0x0) returned 0x85 [0180.802] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0180.802] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DC9EDA251EE111F3A521FE1DEE79AA20D6E293F9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\dc9eda251ee111f3a521fe1dee79aa20d6e293f9"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0180.802] GetFileType (hFile=0x444) returned 0x1 [0180.802] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0180.802] GetFileType (hFile=0x444) returned 0x1 [0180.802] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xb23 [0180.802] ReadFile (in: hFile=0x444, lpBuffer=0x21eb140, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x21eb140*, lpNumberOfBytesRead=0x3be5c8*=0xb23, lpOverlapped=0x0) returned 1 [0180.815] CloseHandle (hObject=0x444) returned 1 [0180.825] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DC9EDA251EE111F3A521FE1DEE79AA20D6E293F9", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DC9EDA251EE111F3A521FE1DEE79AA20D6E293F9", lpFilePart=0x0) returned 0x85 [0180.826] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0180.826] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DC9EDA251EE111F3A521FE1DEE79AA20D6E293F9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\dc9eda251ee111f3a521fe1dee79aa20d6e293f9"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0180.828] GetFileType (hFile=0x444) returned 0x1 [0180.828] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0180.828] GetFileType (hFile=0x444) returned 0x1 [0180.828] WriteFile (in: hFile=0x444, lpBuffer=0x22659c8*, nNumberOfBytesToWrite=0xb30, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x22659c8*, lpNumberOfBytesWritten=0x3be4d8*=0xb30, lpOverlapped=0x0) returned 1 [0180.828] CloseHandle (hObject=0x444) returned 1 [0180.828] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DC9EDA251EE111F3A521FE1DEE79AA20D6E293F9", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DC9EDA251EE111F3A521FE1DEE79AA20D6E293F9", lpFilePart=0x0) returned 0x85 [0180.829] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DC9EDA251EE111F3A521FE1DEE79AA20D6E293F9.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DC9EDA251EE111F3A521FE1DEE79AA20D6E293F9.xuy", lpFilePart=0x0) returned 0x89 [0180.829] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0180.829] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DC9EDA251EE111F3A521FE1DEE79AA20D6E293F9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\dc9eda251ee111f3a521fe1dee79aa20d6e293f9"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e627d68, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x7e627d68, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x57a1fbda, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xb30)) returned 1 [0180.829] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0180.829] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DC9EDA251EE111F3A521FE1DEE79AA20D6E293F9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\dc9eda251ee111f3a521fe1dee79aa20d6e293f9"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DC9EDA251EE111F3A521FE1DEE79AA20D6E293F9.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\dc9eda251ee111f3a521fe1dee79aa20d6e293f9.xuy")) returned 1 [0180.830] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DD331CDEE5217C660E4446AB9E026B5E35B511CE", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DD331CDEE5217C660E4446AB9E026B5E35B511CE", lpFilePart=0x0) returned 0x85 [0180.830] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0180.830] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DD331CDEE5217C660E4446AB9E026B5E35B511CE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\dd331cdee5217c660e4446ab9e026b5e35b511ce"), fInfoLevelId=0x0, lpFileInformation=0x2266d88 | out: lpFileInformation=0x2266d88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x615c4498, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x615c4498, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x615c4498, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xe55)) returned 1 [0180.830] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0180.830] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DD331CDEE5217C660E4446AB9E026B5E35B511CE", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DD331CDEE5217C660E4446AB9E026B5E35B511CE", lpFilePart=0x0) returned 0x85 [0180.830] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0180.830] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DD331CDEE5217C660E4446AB9E026B5E35B511CE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\dd331cdee5217c660e4446ab9e026b5e35b511ce"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0180.831] GetFileType (hFile=0x444) returned 0x1 [0180.831] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0180.831] GetFileType (hFile=0x444) returned 0x1 [0180.831] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xe55 [0180.831] ReadFile (in: hFile=0x444, lpBuffer=0x2267ff8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x2267ff8*, lpNumberOfBytesRead=0x3be5c8*=0xe55, lpOverlapped=0x0) returned 1 [0180.848] CloseHandle (hObject=0x444) returned 1 [0180.859] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DD331CDEE5217C660E4446AB9E026B5E35B511CE", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DD331CDEE5217C660E4446AB9E026B5E35B511CE", lpFilePart=0x0) returned 0x85 [0180.859] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0180.859] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DD331CDEE5217C660E4446AB9E026B5E35B511CE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\dd331cdee5217c660e4446ab9e026b5e35b511ce"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0180.861] GetFileType (hFile=0x444) returned 0x1 [0180.861] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0180.861] GetFileType (hFile=0x444) returned 0x1 [0180.861] WriteFile (in: hFile=0x444, lpBuffer=0x22e3870*, nNumberOfBytesToWrite=0xe60, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x22e3870*, lpNumberOfBytesWritten=0x3be4d8*=0xe60, lpOverlapped=0x0) returned 1 [0180.862] CloseHandle (hObject=0x444) returned 1 [0180.862] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DD331CDEE5217C660E4446AB9E026B5E35B511CE", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DD331CDEE5217C660E4446AB9E026B5E35B511CE", lpFilePart=0x0) returned 0x85 [0180.862] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DD331CDEE5217C660E4446AB9E026B5E35B511CE.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DD331CDEE5217C660E4446AB9E026B5E35B511CE.xuy", lpFilePart=0x0) returned 0x89 [0180.862] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0180.862] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DD331CDEE5217C660E4446AB9E026B5E35B511CE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\dd331cdee5217c660e4446ab9e026b5e35b511ce"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x615c4498, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x615c4498, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x57a6c074, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xe60)) returned 1 [0180.862] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0180.862] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DD331CDEE5217C660E4446AB9E026B5E35B511CE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\dd331cdee5217c660e4446ab9e026b5e35b511ce"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DD331CDEE5217C660E4446AB9E026B5E35B511CE.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\dd331cdee5217c660e4446ab9e026b5e35b511ce.xuy")) returned 1 [0180.863] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DD555B1573CF9B20ECC06CD1E40952550161B7F6", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DD555B1573CF9B20ECC06CD1E40952550161B7F6", lpFilePart=0x0) returned 0x85 [0180.863] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0180.863] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DD555B1573CF9B20ECC06CD1E40952550161B7F6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\dd555b1573cf9b20ecc06cd1e40952550161b7f6"), fInfoLevelId=0x0, lpFileInformation=0x22e4c30 | out: lpFileInformation=0x22e4c30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4eaf35b, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc4eaf35b, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xc50c5407, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0xbc1d)) returned 1 [0180.864] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0180.864] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DD555B1573CF9B20ECC06CD1E40952550161B7F6", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DD555B1573CF9B20ECC06CD1E40952550161B7F6", lpFilePart=0x0) returned 0x85 [0180.864] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0180.864] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DD555B1573CF9B20ECC06CD1E40952550161B7F6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\dd555b1573cf9b20ecc06cd1e40952550161b7f6"), fInfoLevelId=0x0, lpFileInformation=0x22e4e30 | out: lpFileInformation=0x22e4e30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4eaf35b, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc4eaf35b, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xc50c5407, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0xbc1d)) returned 1 [0180.864] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0180.864] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DD555B1573CF9B20ECC06CD1E40952550161B7F6", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DD555B1573CF9B20ECC06CD1E40952550161B7F6", lpFilePart=0x0) returned 0x85 [0180.864] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0180.864] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DD555B1573CF9B20ECC06CD1E40952550161B7F6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\dd555b1573cf9b20ecc06cd1e40952550161b7f6"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0180.865] GetFileType (hFile=0x444) returned 0x1 [0180.865] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0180.865] GetFileType (hFile=0x444) returned 0x1 [0180.865] ReadFile (in: hFile=0x444, lpBuffer=0x22e7360, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x22e7360*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0180.889] CloseHandle (hObject=0x444) returned 1 [0180.889] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DD555B1573CF9B20ECC06CD1E40952550161B7F6", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DD555B1573CF9B20ECC06CD1E40952550161B7F6", lpFilePart=0x0) returned 0x85 [0180.889] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0180.889] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DD555B1573CF9B20ECC06CD1E40952550161B7F6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\dd555b1573cf9b20ecc06cd1e40952550161b7f6"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0180.890] GetFileType (hFile=0x444) returned 0x1 [0180.890] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0180.890] GetFileType (hFile=0x444) returned 0x1 [0180.890] WriteFile (in: hFile=0x444, lpBuffer=0x22e5010*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x22e5010*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0180.890] CloseHandle (hObject=0x444) returned 1 [0180.890] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DD555B1573CF9B20ECC06CD1E40952550161B7F6", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DD555B1573CF9B20ECC06CD1E40952550161B7F6", lpFilePart=0x0) returned 0x85 [0180.890] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DD555B1573CF9B20ECC06CD1E40952550161B7F6.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DD555B1573CF9B20ECC06CD1E40952550161B7F6.xuy", lpFilePart=0x0) returned 0x89 [0180.890] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0180.890] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DD555B1573CF9B20ECC06CD1E40952550161B7F6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\dd555b1573cf9b20ecc06cd1e40952550161b7f6"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4eaf35b, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc4eaf35b, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x57ab8489, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xbc1d)) returned 1 [0180.890] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0180.890] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DD555B1573CF9B20ECC06CD1E40952550161B7F6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\dd555b1573cf9b20ecc06cd1e40952550161b7f6"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DD555B1573CF9B20ECC06CD1E40952550161B7F6.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\dd555b1573cf9b20ecc06cd1e40952550161b7f6.xuy")) returned 1 [0180.892] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DD6D23189087E38A96AC10E85043366D02B2FA05", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DD6D23189087E38A96AC10E85043366D02B2FA05", lpFilePart=0x0) returned 0x85 [0180.892] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0180.892] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DD6D23189087E38A96AC10E85043366D02B2FA05" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\dd6d23189087e38a96ac10e85043366d02b2fa05"), fInfoLevelId=0x0, lpFileInformation=0x2363908 | out: lpFileInformation=0x2363908*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x549bc116, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x549bc116, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x549bc116, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x3016)) returned 1 [0180.892] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0180.892] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DD6D23189087E38A96AC10E85043366D02B2FA05", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DD6D23189087E38A96AC10E85043366D02B2FA05", lpFilePart=0x0) returned 0x85 [0180.892] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0180.892] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DD6D23189087E38A96AC10E85043366D02B2FA05" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\dd6d23189087e38a96ac10e85043366d02b2fa05"), fInfoLevelId=0x0, lpFileInformation=0x2363b08 | out: lpFileInformation=0x2363b08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x549bc116, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x549bc116, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x549bc116, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x3016)) returned 1 [0180.892] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0180.892] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DD6D23189087E38A96AC10E85043366D02B2FA05", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DD6D23189087E38A96AC10E85043366D02B2FA05", lpFilePart=0x0) returned 0x85 [0180.892] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0180.892] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DD6D23189087E38A96AC10E85043366D02B2FA05" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\dd6d23189087e38a96ac10e85043366d02b2fa05"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0180.893] GetFileType (hFile=0x444) returned 0x1 [0180.893] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0180.893] GetFileType (hFile=0x444) returned 0x1 [0180.893] ReadFile (in: hFile=0x444, lpBuffer=0x2366038, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x2366038*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0180.936] CloseHandle (hObject=0x444) returned 1 [0180.936] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DD6D23189087E38A96AC10E85043366D02B2FA05", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DD6D23189087E38A96AC10E85043366D02B2FA05", lpFilePart=0x0) returned 0x85 [0180.936] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0180.936] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DD6D23189087E38A96AC10E85043366D02B2FA05" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\dd6d23189087e38a96ac10e85043366d02b2fa05"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0180.936] GetFileType (hFile=0x444) returned 0x1 [0180.936] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0180.936] GetFileType (hFile=0x444) returned 0x1 [0180.936] WriteFile (in: hFile=0x444, lpBuffer=0x2188818*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x2188818*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0180.937] CloseHandle (hObject=0x444) returned 1 [0180.937] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DD6D23189087E38A96AC10E85043366D02B2FA05", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DD6D23189087E38A96AC10E85043366D02B2FA05", lpFilePart=0x0) returned 0x85 [0180.937] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DD6D23189087E38A96AC10E85043366D02B2FA05.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DD6D23189087E38A96AC10E85043366D02B2FA05.xuy", lpFilePart=0x0) returned 0x89 [0180.937] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0180.937] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DD6D23189087E38A96AC10E85043366D02B2FA05" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\dd6d23189087e38a96ac10e85043366d02b2fa05"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x549bc116, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x549bc116, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x57b2ac85, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x3016)) returned 1 [0180.937] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0180.937] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DD6D23189087E38A96AC10E85043366D02B2FA05" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\dd6d23189087e38a96ac10e85043366d02b2fa05"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DD6D23189087E38A96AC10E85043366D02B2FA05.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\dd6d23189087e38a96ac10e85043366d02b2fa05.xuy")) returned 1 [0180.939] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DD7955ED55E47999EA8C7EA435E8A9998516745D", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DD7955ED55E47999EA8C7EA435E8A9998516745D", lpFilePart=0x0) returned 0x85 [0180.939] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0180.939] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DD7955ED55E47999EA8C7EA435E8A9998516745D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\dd7955ed55e47999ea8c7ea435e8a9998516745d"), fInfoLevelId=0x0, lpFileInformation=0x21e25d0 | out: lpFileInformation=0x21e25d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56f05be8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x56f05be8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x6152bc7d, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xbc)) returned 1 [0180.939] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0180.939] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DD7955ED55E47999EA8C7EA435E8A9998516745D", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DD7955ED55E47999EA8C7EA435E8A9998516745D", lpFilePart=0x0) returned 0x85 [0180.939] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0180.939] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DD7955ED55E47999EA8C7EA435E8A9998516745D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\dd7955ed55e47999ea8c7ea435e8a9998516745d"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0180.939] GetFileType (hFile=0x444) returned 0x1 [0180.939] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0180.939] GetFileType (hFile=0x444) returned 0x1 [0180.939] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xbc [0180.939] ReadFile (in: hFile=0x444, lpBuffer=0x21e2aa8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x21e2aa8*, lpNumberOfBytesRead=0x3be5c8*=0xbc, lpOverlapped=0x0) returned 1 [0180.943] CloseHandle (hObject=0x444) returned 1 [0180.954] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DD7955ED55E47999EA8C7EA435E8A9998516745D", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DD7955ED55E47999EA8C7EA435E8A9998516745D", lpFilePart=0x0) returned 0x85 [0180.954] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0180.954] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DD7955ED55E47999EA8C7EA435E8A9998516745D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\dd7955ed55e47999ea8c7ea435e8a9998516745d"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0180.956] GetFileType (hFile=0x444) returned 0x1 [0180.956] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0180.956] GetFileType (hFile=0x444) returned 0x1 [0180.956] WriteFile (in: hFile=0x444, lpBuffer=0x2259dd0*, nNumberOfBytesToWrite=0xc0, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x2259dd0*, lpNumberOfBytesWritten=0x3be4d8*=0xc0, lpOverlapped=0x0) returned 1 [0180.957] CloseHandle (hObject=0x444) returned 1 [0180.957] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DD7955ED55E47999EA8C7EA435E8A9998516745D", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DD7955ED55E47999EA8C7EA435E8A9998516745D", lpFilePart=0x0) returned 0x85 [0180.957] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DD7955ED55E47999EA8C7EA435E8A9998516745D.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DD7955ED55E47999EA8C7EA435E8A9998516745D.xuy", lpFilePart=0x0) returned 0x89 [0180.957] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0180.957] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DD7955ED55E47999EA8C7EA435E8A9998516745D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\dd7955ed55e47999ea8c7ea435e8a9998516745d"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56f05be8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x56f05be8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x57b511ee, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xc0)) returned 1 [0180.957] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0180.957] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DD7955ED55E47999EA8C7EA435E8A9998516745D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\dd7955ed55e47999ea8c7ea435e8a9998516745d"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DD7955ED55E47999EA8C7EA435E8A9998516745D.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\dd7955ed55e47999ea8c7ea435e8a9998516745d.xuy")) returned 1 [0180.959] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DD94ABFB65BB6D7E2887463AE6EAAABF8105477F", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DD94ABFB65BB6D7E2887463AE6EAAABF8105477F", lpFilePart=0x0) returned 0x85 [0180.959] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0180.959] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DD94ABFB65BB6D7E2887463AE6EAAABF8105477F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\dd94abfb65bb6d7e2887463ae6eaaabf8105477f"), fInfoLevelId=0x0, lpFileInformation=0x225b190 | out: lpFileInformation=0x225b190*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde0e53cd, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xde0e53cd, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xde0ea1da, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0xfbe)) returned 1 [0180.959] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0180.959] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DD94ABFB65BB6D7E2887463AE6EAAABF8105477F", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DD94ABFB65BB6D7E2887463AE6EAAABF8105477F", lpFilePart=0x0) returned 0x85 [0180.959] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0180.959] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DD94ABFB65BB6D7E2887463AE6EAAABF8105477F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\dd94abfb65bb6d7e2887463ae6eaaabf8105477f"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0180.959] GetFileType (hFile=0x444) returned 0x1 [0180.959] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0180.959] GetFileType (hFile=0x444) returned 0x1 [0180.959] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xfbe [0180.959] ReadFile (in: hFile=0x444, lpBuffer=0x225c568, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x225c568*, lpNumberOfBytesRead=0x3be5c8*=0xfbe, lpOverlapped=0x0) returned 1 [0180.961] CloseHandle (hObject=0x444) returned 1 [0180.971] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DD94ABFB65BB6D7E2887463AE6EAAABF8105477F", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DD94ABFB65BB6D7E2887463AE6EAAABF8105477F", lpFilePart=0x0) returned 0x85 [0180.971] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0180.971] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DD94ABFB65BB6D7E2887463AE6EAAABF8105477F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\dd94abfb65bb6d7e2887463ae6eaaabf8105477f"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0180.973] GetFileType (hFile=0x444) returned 0x1 [0180.973] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0180.973] GetFileType (hFile=0x444) returned 0x1 [0180.973] WriteFile (in: hFile=0x444, lpBuffer=0x22d84b8*, nNumberOfBytesToWrite=0xfc0, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x22d84b8*, lpNumberOfBytesWritten=0x3be4d8*=0xfc0, lpOverlapped=0x0) returned 1 [0180.974] CloseHandle (hObject=0x444) returned 1 [0180.974] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DD94ABFB65BB6D7E2887463AE6EAAABF8105477F", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DD94ABFB65BB6D7E2887463AE6EAAABF8105477F", lpFilePart=0x0) returned 0x85 [0180.974] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DD94ABFB65BB6D7E2887463AE6EAAABF8105477F.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DD94ABFB65BB6D7E2887463AE6EAAABF8105477F.xuy", lpFilePart=0x0) returned 0x89 [0180.974] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0180.974] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DD94ABFB65BB6D7E2887463AE6EAAABF8105477F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\dd94abfb65bb6d7e2887463ae6eaaabf8105477f"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde0e53cd, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xde0e53cd, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x57b7706e, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xfc0)) returned 1 [0180.974] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0180.974] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DD94ABFB65BB6D7E2887463AE6EAAABF8105477F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\dd94abfb65bb6d7e2887463ae6eaaabf8105477f"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DD94ABFB65BB6D7E2887463AE6EAAABF8105477F.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\dd94abfb65bb6d7e2887463ae6eaaabf8105477f.xuy")) returned 1 [0180.976] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DDD3CCBC5B9060DF64802E72007266B115EE1FC2", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DDD3CCBC5B9060DF64802E72007266B115EE1FC2", lpFilePart=0x0) returned 0x85 [0180.976] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0180.976] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DDD3CCBC5B9060DF64802E72007266B115EE1FC2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ddd3ccbc5b9060df64802e72007266b115ee1fc2"), fInfoLevelId=0x0, lpFileInformation=0x22d9878 | out: lpFileInformation=0x22d9878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4798580c, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x4798580c, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x4798580c, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0x66d)) returned 1 [0180.976] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0180.976] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DDD3CCBC5B9060DF64802E72007266B115EE1FC2", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DDD3CCBC5B9060DF64802E72007266B115EE1FC2", lpFilePart=0x0) returned 0x85 [0180.976] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0180.976] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DDD3CCBC5B9060DF64802E72007266B115EE1FC2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ddd3ccbc5b9060df64802e72007266b115ee1fc2"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0180.976] GetFileType (hFile=0x444) returned 0x1 [0180.976] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0180.976] GetFileType (hFile=0x444) returned 0x1 [0180.976] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x66d [0180.976] ReadFile (in: hFile=0x444, lpBuffer=0x22da300, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x22da300*, lpNumberOfBytesRead=0x3be5c8*=0x66d, lpOverlapped=0x0) returned 1 [0180.990] CloseHandle (hObject=0x444) returned 1 [0181.002] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DDD3CCBC5B9060DF64802E72007266B115EE1FC2", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DDD3CCBC5B9060DF64802E72007266B115EE1FC2", lpFilePart=0x0) returned 0x85 [0181.002] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0181.002] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DDD3CCBC5B9060DF64802E72007266B115EE1FC2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ddd3ccbc5b9060df64802e72007266b115ee1fc2"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0181.004] GetFileType (hFile=0x444) returned 0x1 [0181.004] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0181.004] GetFileType (hFile=0x444) returned 0x1 [0181.004] WriteFile (in: hFile=0x444, lpBuffer=0x23533c0*, nNumberOfBytesToWrite=0x670, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x23533c0*, lpNumberOfBytesWritten=0x3be4d8*=0x670, lpOverlapped=0x0) returned 1 [0181.004] CloseHandle (hObject=0x444) returned 1 [0181.005] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DDD3CCBC5B9060DF64802E72007266B115EE1FC2", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DDD3CCBC5B9060DF64802E72007266B115EE1FC2", lpFilePart=0x0) returned 0x85 [0181.005] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DDD3CCBC5B9060DF64802E72007266B115EE1FC2.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DDD3CCBC5B9060DF64802E72007266B115EE1FC2.xuy", lpFilePart=0x0) returned 0x89 [0181.005] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0181.005] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DDD3CCBC5B9060DF64802E72007266B115EE1FC2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ddd3ccbc5b9060df64802e72007266b115ee1fc2"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4798580c, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x4798580c, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x57bc3560, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x670)) returned 1 [0181.005] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0181.005] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DDD3CCBC5B9060DF64802E72007266B115EE1FC2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ddd3ccbc5b9060df64802e72007266b115ee1fc2"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DDD3CCBC5B9060DF64802E72007266B115EE1FC2.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ddd3ccbc5b9060df64802e72007266b115ee1fc2.xuy")) returned 1 [0181.006] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DE5EA05FC720ED48C862D73D763ECF05BA52F303", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DE5EA05FC720ED48C862D73D763ECF05BA52F303", lpFilePart=0x0) returned 0x85 [0181.006] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0181.006] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DE5EA05FC720ED48C862D73D763ECF05BA52F303" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\de5ea05fc720ed48c862d73d763ecf05ba52f303"), fInfoLevelId=0x0, lpFileInformation=0x2354780 | out: lpFileInformation=0x2354780*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4482b9a6, ftCreationTime.dwHighDateTime=0x1d2d43d, ftLastAccessTime.dwLowDateTime=0x4482b9a6, ftLastAccessTime.dwHighDateTime=0x1d2d43d, ftLastWriteTime.dwLowDateTime=0x4482b9a6, ftLastWriteTime.dwHighDateTime=0x1d2d43d, nFileSizeHigh=0x0, nFileSizeLow=0x528)) returned 1 [0181.006] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0181.006] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DE5EA05FC720ED48C862D73D763ECF05BA52F303", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DE5EA05FC720ED48C862D73D763ECF05BA52F303", lpFilePart=0x0) returned 0x85 [0181.007] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0181.007] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DE5EA05FC720ED48C862D73D763ECF05BA52F303" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\de5ea05fc720ed48c862d73d763ecf05ba52f303"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0181.007] GetFileType (hFile=0x444) returned 0x1 [0181.007] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0181.007] GetFileType (hFile=0x444) returned 0x1 [0181.007] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x528 [0181.007] ReadFile (in: hFile=0x444, lpBuffer=0x23550c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x23550c0*, lpNumberOfBytesRead=0x3be5c8*=0x528, lpOverlapped=0x0) returned 1 [0181.008] CloseHandle (hObject=0x444) returned 1 [0181.051] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DE5EA05FC720ED48C862D73D763ECF05BA52F303", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DE5EA05FC720ED48C862D73D763ECF05BA52F303", lpFilePart=0x0) returned 0x85 [0181.051] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0181.051] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DE5EA05FC720ED48C862D73D763ECF05BA52F303" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\de5ea05fc720ed48c862d73d763ecf05ba52f303"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0181.053] GetFileType (hFile=0x444) returned 0x1 [0181.053] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0181.053] GetFileType (hFile=0x444) returned 0x1 [0181.053] WriteFile (in: hFile=0x444, lpBuffer=0x21caea0*, nNumberOfBytesToWrite=0x530, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x21caea0*, lpNumberOfBytesWritten=0x3be4d8*=0x530, lpOverlapped=0x0) returned 1 [0181.054] CloseHandle (hObject=0x444) returned 1 [0181.054] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DE5EA05FC720ED48C862D73D763ECF05BA52F303", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DE5EA05FC720ED48C862D73D763ECF05BA52F303", lpFilePart=0x0) returned 0x85 [0181.054] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DE5EA05FC720ED48C862D73D763ECF05BA52F303.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DE5EA05FC720ED48C862D73D763ECF05BA52F303.xuy", lpFilePart=0x0) returned 0x89 [0181.054] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0181.054] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DE5EA05FC720ED48C862D73D763ECF05BA52F303" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\de5ea05fc720ed48c862d73d763ecf05ba52f303"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4482b9a6, ftCreationTime.dwHighDateTime=0x1d2d43d, ftLastAccessTime.dwLowDateTime=0x4482b9a6, ftLastAccessTime.dwHighDateTime=0x1d2d43d, ftLastWriteTime.dwLowDateTime=0x57c35c4e, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x530)) returned 1 [0181.054] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0181.054] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DE5EA05FC720ED48C862D73D763ECF05BA52F303" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\de5ea05fc720ed48c862d73d763ecf05ba52f303"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DE5EA05FC720ED48C862D73D763ECF05BA52F303.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\de5ea05fc720ed48c862d73d763ecf05ba52f303.xuy")) returned 1 [0181.056] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DEB93950B6B09B546B075EA3D98A625D7736C389", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DEB93950B6B09B546B075EA3D98A625D7736C389", lpFilePart=0x0) returned 0x85 [0181.056] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0181.056] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DEB93950B6B09B546B075EA3D98A625D7736C389" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\deb93950b6b09b546b075ea3d98a625d7736c389"), fInfoLevelId=0x0, lpFileInformation=0x21cc260 | out: lpFileInformation=0x21cc260*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x879f4dba, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x879f4dba, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x879f74d3, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x2477)) returned 1 [0181.056] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0181.056] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DEB93950B6B09B546B075EA3D98A625D7736C389", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DEB93950B6B09B546B075EA3D98A625D7736C389", lpFilePart=0x0) returned 0x85 [0181.056] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0181.056] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DEB93950B6B09B546B075EA3D98A625D7736C389" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\deb93950b6b09b546b075ea3d98a625d7736c389"), fInfoLevelId=0x0, lpFileInformation=0x21cc460 | out: lpFileInformation=0x21cc460*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x879f4dba, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x879f4dba, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x879f74d3, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x2477)) returned 1 [0181.056] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0181.056] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DEB93950B6B09B546B075EA3D98A625D7736C389", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DEB93950B6B09B546B075EA3D98A625D7736C389", lpFilePart=0x0) returned 0x85 [0181.056] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0181.056] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DEB93950B6B09B546B075EA3D98A625D7736C389" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\deb93950b6b09b546b075ea3d98a625d7736c389"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0181.057] GetFileType (hFile=0x444) returned 0x1 [0181.057] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0181.057] GetFileType (hFile=0x444) returned 0x1 [0181.057] ReadFile (in: hFile=0x444, lpBuffer=0x21ce990, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x21ce990*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0181.070] CloseHandle (hObject=0x444) returned 1 [0181.070] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DEB93950B6B09B546B075EA3D98A625D7736C389", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DEB93950B6B09B546B075EA3D98A625D7736C389", lpFilePart=0x0) returned 0x85 [0181.070] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0181.070] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DEB93950B6B09B546B075EA3D98A625D7736C389" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\deb93950b6b09b546b075ea3d98a625d7736c389"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0181.070] GetFileType (hFile=0x444) returned 0x1 [0181.070] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0181.070] GetFileType (hFile=0x444) returned 0x1 [0181.070] WriteFile (in: hFile=0x444, lpBuffer=0x21cc640*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x21cc640*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0181.071] CloseHandle (hObject=0x444) returned 1 [0181.071] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DEB93950B6B09B546B075EA3D98A625D7736C389", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DEB93950B6B09B546B075EA3D98A625D7736C389", lpFilePart=0x0) returned 0x85 [0181.071] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DEB93950B6B09B546B075EA3D98A625D7736C389.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DEB93950B6B09B546B075EA3D98A625D7736C389.xuy", lpFilePart=0x0) returned 0x89 [0181.071] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0181.071] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DEB93950B6B09B546B075EA3D98A625D7736C389" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\deb93950b6b09b546b075ea3d98a625d7736c389"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x879f4dba, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x879f4dba, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x57c5c32f, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2477)) returned 1 [0181.071] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0181.071] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DEB93950B6B09B546B075EA3D98A625D7736C389" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\deb93950b6b09b546b075ea3d98a625d7736c389"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DEB93950B6B09B546B075EA3D98A625D7736C389.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\deb93950b6b09b546b075ea3d98a625d7736c389.xuy")) returned 1 [0181.072] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DEB96A36E884508FA7960AD873EA8EAFAFC33775", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DEB96A36E884508FA7960AD873EA8EAFAFC33775", lpFilePart=0x0) returned 0x85 [0181.072] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0181.072] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DEB96A36E884508FA7960AD873EA8EAFAFC33775" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\deb96a36e884508fa7960ad873ea8eafafc33775"), fInfoLevelId=0x0, lpFileInformation=0x224af38 | out: lpFileInformation=0x224af38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f8c0db1, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3f8c0db1, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x41b0566d, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x1bee)) returned 1 [0181.073] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0181.073] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DEB96A36E884508FA7960AD873EA8EAFAFC33775", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DEB96A36E884508FA7960AD873EA8EAFAFC33775", lpFilePart=0x0) returned 0x85 [0181.073] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0181.073] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DEB96A36E884508FA7960AD873EA8EAFAFC33775" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\deb96a36e884508fa7960ad873ea8eafafc33775"), fInfoLevelId=0x0, lpFileInformation=0x224b138 | out: lpFileInformation=0x224b138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f8c0db1, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3f8c0db1, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x41b0566d, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x1bee)) returned 1 [0181.073] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0181.073] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DEB96A36E884508FA7960AD873EA8EAFAFC33775", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DEB96A36E884508FA7960AD873EA8EAFAFC33775", lpFilePart=0x0) returned 0x85 [0181.073] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0181.073] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DEB96A36E884508FA7960AD873EA8EAFAFC33775" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\deb96a36e884508fa7960ad873ea8eafafc33775"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0181.074] GetFileType (hFile=0x444) returned 0x1 [0181.074] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0181.074] GetFileType (hFile=0x444) returned 0x1 [0181.074] ReadFile (in: hFile=0x444, lpBuffer=0x224d668, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x224d668*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0181.109] CloseHandle (hObject=0x444) returned 1 [0181.109] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DEB96A36E884508FA7960AD873EA8EAFAFC33775", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DEB96A36E884508FA7960AD873EA8EAFAFC33775", lpFilePart=0x0) returned 0x85 [0181.109] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0181.109] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DEB96A36E884508FA7960AD873EA8EAFAFC33775" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\deb96a36e884508fa7960ad873ea8eafafc33775"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0181.109] GetFileType (hFile=0x444) returned 0x1 [0181.109] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0181.109] GetFileType (hFile=0x444) returned 0x1 [0181.109] WriteFile (in: hFile=0x444, lpBuffer=0x224b318*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x224b318*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0181.109] CloseHandle (hObject=0x444) returned 1 [0181.110] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DEB96A36E884508FA7960AD873EA8EAFAFC33775", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DEB96A36E884508FA7960AD873EA8EAFAFC33775", lpFilePart=0x0) returned 0x85 [0181.110] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DEB96A36E884508FA7960AD873EA8EAFAFC33775.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DEB96A36E884508FA7960AD873EA8EAFAFC33775.xuy", lpFilePart=0x0) returned 0x89 [0181.110] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0181.110] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DEB96A36E884508FA7960AD873EA8EAFAFC33775" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\deb96a36e884508fa7960ad873ea8eafafc33775"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f8c0db1, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3f8c0db1, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x57cce5ff, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0181.110] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0181.110] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DEB96A36E884508FA7960AD873EA8EAFAFC33775" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\deb96a36e884508fa7960ad873ea8eafafc33775"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DEB96A36E884508FA7960AD873EA8EAFAFC33775.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\deb96a36e884508fa7960ad873ea8eafafc33775.xuy")) returned 1 [0181.111] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DEFDF4D2703FF0EDB617BB7EBE1A6E0997F23390", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DEFDF4D2703FF0EDB617BB7EBE1A6E0997F23390", lpFilePart=0x0) returned 0x85 [0181.111] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0181.111] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DEFDF4D2703FF0EDB617BB7EBE1A6E0997F23390" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\defdf4d2703ff0edb617bb7ebe1a6e0997f23390"), fInfoLevelId=0x0, lpFileInformation=0x22c9c10 | out: lpFileInformation=0x22c9c10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88c534b6, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x88c534b6, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x88c582fe, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x52a)) returned 1 [0181.112] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0181.112] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DEFDF4D2703FF0EDB617BB7EBE1A6E0997F23390", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DEFDF4D2703FF0EDB617BB7EBE1A6E0997F23390", lpFilePart=0x0) returned 0x85 [0181.112] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0181.112] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DEFDF4D2703FF0EDB617BB7EBE1A6E0997F23390" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\defdf4d2703ff0edb617bb7ebe1a6e0997f23390"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0181.112] GetFileType (hFile=0x444) returned 0x1 [0181.112] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0181.112] GetFileType (hFile=0x444) returned 0x1 [0181.112] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x52a [0181.112] ReadFile (in: hFile=0x444, lpBuffer=0x22ca558, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x22ca558*, lpNumberOfBytesRead=0x3be5c8*=0x52a, lpOverlapped=0x0) returned 1 [0181.126] CloseHandle (hObject=0x444) returned 1 [0181.136] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DEFDF4D2703FF0EDB617BB7EBE1A6E0997F23390", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DEFDF4D2703FF0EDB617BB7EBE1A6E0997F23390", lpFilePart=0x0) returned 0x85 [0181.136] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0181.136] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DEFDF4D2703FF0EDB617BB7EBE1A6E0997F23390" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\defdf4d2703ff0edb617bb7ebe1a6e0997f23390"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0181.138] GetFileType (hFile=0x444) returned 0x1 [0181.138] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0181.138] GetFileType (hFile=0x444) returned 0x1 [0181.138] WriteFile (in: hFile=0x444, lpBuffer=0x2342fd8*, nNumberOfBytesToWrite=0x530, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x2342fd8*, lpNumberOfBytesWritten=0x3be4d8*=0x530, lpOverlapped=0x0) returned 1 [0181.139] CloseHandle (hObject=0x444) returned 1 [0181.139] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DEFDF4D2703FF0EDB617BB7EBE1A6E0997F23390", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DEFDF4D2703FF0EDB617BB7EBE1A6E0997F23390", lpFilePart=0x0) returned 0x85 [0181.139] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DEFDF4D2703FF0EDB617BB7EBE1A6E0997F23390.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DEFDF4D2703FF0EDB617BB7EBE1A6E0997F23390.xuy", lpFilePart=0x0) returned 0x89 [0181.139] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0181.139] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DEFDF4D2703FF0EDB617BB7EBE1A6E0997F23390" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\defdf4d2703ff0edb617bb7ebe1a6e0997f23390"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88c534b6, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x88c534b6, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x57d1aad5, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x530)) returned 1 [0181.139] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0181.139] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DEFDF4D2703FF0EDB617BB7EBE1A6E0997F23390" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\defdf4d2703ff0edb617bb7ebe1a6e0997f23390"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DEFDF4D2703FF0EDB617BB7EBE1A6E0997F23390.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\defdf4d2703ff0edb617bb7ebe1a6e0997f23390.xuy")) returned 1 [0181.141] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E0D705EC81C925E0077CAFA8B01689E3D17E4D14", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E0D705EC81C925E0077CAFA8B01689E3D17E4D14", lpFilePart=0x0) returned 0x85 [0181.141] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0181.141] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E0D705EC81C925E0077CAFA8B01689E3D17E4D14" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e0d705ec81c925e0077cafa8b01689e3d17e4d14"), fInfoLevelId=0x0, lpFileInformation=0x2344398 | out: lpFileInformation=0x2344398*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf38459f6, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xf38459f6, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0xf3848118, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x48f6)) returned 1 [0181.141] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0181.141] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E0D705EC81C925E0077CAFA8B01689E3D17E4D14", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E0D705EC81C925E0077CAFA8B01689E3D17E4D14", lpFilePart=0x0) returned 0x85 [0181.141] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0181.141] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E0D705EC81C925E0077CAFA8B01689E3D17E4D14" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e0d705ec81c925e0077cafa8b01689e3d17e4d14"), fInfoLevelId=0x0, lpFileInformation=0x2344598 | out: lpFileInformation=0x2344598*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf38459f6, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xf38459f6, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0xf3848118, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x48f6)) returned 1 [0181.141] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0181.141] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E0D705EC81C925E0077CAFA8B01689E3D17E4D14", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E0D705EC81C925E0077CAFA8B01689E3D17E4D14", lpFilePart=0x0) returned 0x85 [0181.141] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0181.141] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E0D705EC81C925E0077CAFA8B01689E3D17E4D14" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e0d705ec81c925e0077cafa8b01689e3d17e4d14"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0181.142] GetFileType (hFile=0x444) returned 0x1 [0181.142] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0181.142] GetFileType (hFile=0x444) returned 0x1 [0181.142] ReadFile (in: hFile=0x444, lpBuffer=0x2346ac8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x2346ac8*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0181.199] CloseHandle (hObject=0x444) returned 1 [0181.200] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E0D705EC81C925E0077CAFA8B01689E3D17E4D14", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E0D705EC81C925E0077CAFA8B01689E3D17E4D14", lpFilePart=0x0) returned 0x85 [0181.200] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0181.200] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E0D705EC81C925E0077CAFA8B01689E3D17E4D14" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e0d705ec81c925e0077cafa8b01689e3d17e4d14"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0181.200] GetFileType (hFile=0x444) returned 0x1 [0181.200] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0181.200] GetFileType (hFile=0x444) returned 0x1 [0181.200] WriteFile (in: hFile=0x444, lpBuffer=0x2188818*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x2188818*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0181.202] CloseHandle (hObject=0x444) returned 1 [0181.202] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E0D705EC81C925E0077CAFA8B01689E3D17E4D14", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E0D705EC81C925E0077CAFA8B01689E3D17E4D14", lpFilePart=0x0) returned 0x85 [0181.202] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E0D705EC81C925E0077CAFA8B01689E3D17E4D14.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E0D705EC81C925E0077CAFA8B01689E3D17E4D14.xuy", lpFilePart=0x0) returned 0x89 [0181.202] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0181.203] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E0D705EC81C925E0077CAFA8B01689E3D17E4D14" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e0d705ec81c925e0077cafa8b01689e3d17e4d14"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf38459f6, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xf38459f6, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x57db351a, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x48f6)) returned 1 [0181.203] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0181.203] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E0D705EC81C925E0077CAFA8B01689E3D17E4D14" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e0d705ec81c925e0077cafa8b01689e3d17e4d14"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E0D705EC81C925E0077CAFA8B01689E3D17E4D14.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e0d705ec81c925e0077cafa8b01689e3d17e4d14.xuy")) returned 1 [0181.204] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E0E842CE092A1406147C113A64AF2D607E5F714C", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E0E842CE092A1406147C113A64AF2D607E5F714C", lpFilePart=0x0) returned 0x85 [0181.204] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0181.204] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E0E842CE092A1406147C113A64AF2D607E5F714C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e0e842ce092a1406147c113a64af2d607e5f714c"), fInfoLevelId=0x0, lpFileInformation=0x21c5cf0 | out: lpFileInformation=0x21c5cf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x560a3a7a, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x560a3a7a, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x560a3a7a, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0x69)) returned 1 [0181.204] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0181.204] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E0E842CE092A1406147C113A64AF2D607E5F714C", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E0E842CE092A1406147C113A64AF2D607E5F714C", lpFilePart=0x0) returned 0x85 [0181.205] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0181.205] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E0E842CE092A1406147C113A64AF2D607E5F714C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e0e842ce092a1406147c113a64af2d607e5f714c"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0181.205] GetFileType (hFile=0x444) returned 0x1 [0181.205] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0181.205] GetFileType (hFile=0x444) returned 0x1 [0181.205] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x69 [0181.205] ReadFile (in: hFile=0x444, lpBuffer=0x21c6178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x21c6178*, lpNumberOfBytesRead=0x3be5c8*=0x69, lpOverlapped=0x0) returned 1 [0181.206] CloseHandle (hObject=0x444) returned 1 [0181.216] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E0E842CE092A1406147C113A64AF2D607E5F714C", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E0E842CE092A1406147C113A64AF2D607E5F714C", lpFilePart=0x0) returned 0x85 [0181.217] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0181.217] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E0E842CE092A1406147C113A64AF2D607E5F714C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e0e842ce092a1406147c113a64af2d607e5f714c"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0181.218] GetFileType (hFile=0x444) returned 0x1 [0181.218] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0181.219] GetFileType (hFile=0x444) returned 0x1 [0181.219] WriteFile (in: hFile=0x444, lpBuffer=0x223d400*, nNumberOfBytesToWrite=0x70, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x223d400*, lpNumberOfBytesWritten=0x3be4d8*=0x70, lpOverlapped=0x0) returned 1 [0181.219] CloseHandle (hObject=0x444) returned 1 [0181.219] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E0E842CE092A1406147C113A64AF2D607E5F714C", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E0E842CE092A1406147C113A64AF2D607E5F714C", lpFilePart=0x0) returned 0x85 [0181.220] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E0E842CE092A1406147C113A64AF2D607E5F714C.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E0E842CE092A1406147C113A64AF2D607E5F714C.xuy", lpFilePart=0x0) returned 0x89 [0181.220] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0181.220] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E0E842CE092A1406147C113A64AF2D607E5F714C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e0e842ce092a1406147c113a64af2d607e5f714c"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x560a3a7a, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x560a3a7a, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x57dd9798, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x70)) returned 1 [0181.220] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0181.220] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E0E842CE092A1406147C113A64AF2D607E5F714C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e0e842ce092a1406147c113a64af2d607e5f714c"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E0E842CE092A1406147C113A64AF2D607E5F714C.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e0e842ce092a1406147c113a64af2d607e5f714c.xuy")) returned 1 [0181.221] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E28A3149B5567FD2E5F36E78E602C8905DAC66C5", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E28A3149B5567FD2E5F36E78E602C8905DAC66C5", lpFilePart=0x0) returned 0x85 [0181.221] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0181.221] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E28A3149B5567FD2E5F36E78E602C8905DAC66C5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e28a3149b5567fd2e5f36e78e602c8905dac66c5"), fInfoLevelId=0x0, lpFileInformation=0x223e7c0 | out: lpFileInformation=0x223e7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48d30ecb, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x48d30ecb, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x48d30ecb, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0x4fc)) returned 1 [0181.221] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0181.221] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E28A3149B5567FD2E5F36E78E602C8905DAC66C5", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E28A3149B5567FD2E5F36E78E602C8905DAC66C5", lpFilePart=0x0) returned 0x85 [0181.222] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0181.222] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E28A3149B5567FD2E5F36E78E602C8905DAC66C5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e28a3149b5567fd2e5f36e78e602c8905dac66c5"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0181.222] GetFileType (hFile=0x444) returned 0x1 [0181.222] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0181.222] GetFileType (hFile=0x444) returned 0x1 [0181.222] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x4fc [0181.222] ReadFile (in: hFile=0x444, lpBuffer=0x223f0d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x223f0d8*, lpNumberOfBytesRead=0x3be5c8*=0x4fc, lpOverlapped=0x0) returned 1 [0181.260] CloseHandle (hObject=0x444) returned 1 [0181.272] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E28A3149B5567FD2E5F36E78E602C8905DAC66C5", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E28A3149B5567FD2E5F36E78E602C8905DAC66C5", lpFilePart=0x0) returned 0x85 [0181.272] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0181.272] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E28A3149B5567FD2E5F36E78E602C8905DAC66C5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e28a3149b5567fd2e5f36e78e602c8905dac66c5"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0181.274] GetFileType (hFile=0x444) returned 0x1 [0181.274] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0181.274] GetFileType (hFile=0x444) returned 0x1 [0181.274] WriteFile (in: hFile=0x444, lpBuffer=0x22b7a68*, nNumberOfBytesToWrite=0x500, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x22b7a68*, lpNumberOfBytesWritten=0x3be4d8*=0x500, lpOverlapped=0x0) returned 1 [0181.291] CloseHandle (hObject=0x444) returned 1 [0181.291] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E28A3149B5567FD2E5F36E78E602C8905DAC66C5", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E28A3149B5567FD2E5F36E78E602C8905DAC66C5", lpFilePart=0x0) returned 0x85 [0181.292] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E28A3149B5567FD2E5F36E78E602C8905DAC66C5.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E28A3149B5567FD2E5F36E78E602C8905DAC66C5.xuy", lpFilePart=0x0) returned 0x89 [0181.292] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0181.292] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E28A3149B5567FD2E5F36E78E602C8905DAC66C5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e28a3149b5567fd2e5f36e78e602c8905dac66c5"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48d30ecb, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x48d30ecb, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x57e71fc2, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x500)) returned 1 [0181.292] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0181.292] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E28A3149B5567FD2E5F36E78E602C8905DAC66C5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e28a3149b5567fd2e5f36e78e602c8905dac66c5"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E28A3149B5567FD2E5F36E78E602C8905DAC66C5.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e28a3149b5567fd2e5f36e78e602c8905dac66c5.xuy")) returned 1 [0181.293] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E2ABE93C9392CE049A77989B0B58E20C6016E61A", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E2ABE93C9392CE049A77989B0B58E20C6016E61A", lpFilePart=0x0) returned 0x85 [0181.293] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0181.293] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E2ABE93C9392CE049A77989B0B58E20C6016E61A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e2abe93c9392ce049a77989b0b58e20c6016e61a"), fInfoLevelId=0x0, lpFileInformation=0x22b8e28 | out: lpFileInformation=0x22b8e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x615c4498, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x615c4498, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x615c4498, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xed9)) returned 1 [0181.293] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0181.294] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E2ABE93C9392CE049A77989B0B58E20C6016E61A", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E2ABE93C9392CE049A77989B0B58E20C6016E61A", lpFilePart=0x0) returned 0x85 [0181.294] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0181.294] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E2ABE93C9392CE049A77989B0B58E20C6016E61A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e2abe93c9392ce049a77989b0b58e20c6016e61a"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0181.294] GetFileType (hFile=0x444) returned 0x1 [0181.294] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0181.294] GetFileType (hFile=0x444) returned 0x1 [0181.294] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xed9 [0181.294] ReadFile (in: hFile=0x444, lpBuffer=0x22ba120, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x22ba120*, lpNumberOfBytesRead=0x3be5c8*=0xed9, lpOverlapped=0x0) returned 1 [0181.311] CloseHandle (hObject=0x444) returned 1 [0181.323] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E2ABE93C9392CE049A77989B0B58E20C6016E61A", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E2ABE93C9392CE049A77989B0B58E20C6016E61A", lpFilePart=0x0) returned 0x85 [0181.323] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0181.323] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E2ABE93C9392CE049A77989B0B58E20C6016E61A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e2abe93c9392ce049a77989b0b58e20c6016e61a"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0181.326] GetFileType (hFile=0x444) returned 0x1 [0181.326] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0181.326] GetFileType (hFile=0x444) returned 0x1 [0181.326] WriteFile (in: hFile=0x444, lpBuffer=0x2335c10*, nNumberOfBytesToWrite=0xee0, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x2335c10*, lpNumberOfBytesWritten=0x3be4d8*=0xee0, lpOverlapped=0x0) returned 1 [0181.327] CloseHandle (hObject=0x444) returned 1 [0181.327] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E2ABE93C9392CE049A77989B0B58E20C6016E61A", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E2ABE93C9392CE049A77989B0B58E20C6016E61A", lpFilePart=0x0) returned 0x85 [0181.327] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E2ABE93C9392CE049A77989B0B58E20C6016E61A.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E2ABE93C9392CE049A77989B0B58E20C6016E61A.xuy", lpFilePart=0x0) returned 0x89 [0181.327] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0181.327] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E2ABE93C9392CE049A77989B0B58E20C6016E61A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e2abe93c9392ce049a77989b0b58e20c6016e61a"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x615c4498, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x615c4498, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x57ee4d64, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xee0)) returned 1 [0181.327] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0181.327] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E2ABE93C9392CE049A77989B0B58E20C6016E61A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e2abe93c9392ce049a77989b0b58e20c6016e61a"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E2ABE93C9392CE049A77989B0B58E20C6016E61A.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e2abe93c9392ce049a77989b0b58e20c6016e61a.xuy")) returned 1 [0181.329] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E2D6A6E09D5F2A00BA530787C313DCB80A665272", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E2D6A6E09D5F2A00BA530787C313DCB80A665272", lpFilePart=0x0) returned 0x85 [0181.329] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0181.329] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E2D6A6E09D5F2A00BA530787C313DCB80A665272" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e2d6a6e09d5f2a00ba530787c313dcb80a665272"), fInfoLevelId=0x0, lpFileInformation=0x2336fd0 | out: lpFileInformation=0x2336fd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8576718d, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x8576718d, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x8576bf80, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0xc96)) returned 1 [0181.329] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0181.329] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E2D6A6E09D5F2A00BA530787C313DCB80A665272", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E2D6A6E09D5F2A00BA530787C313DCB80A665272", lpFilePart=0x0) returned 0x85 [0181.329] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0181.329] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E2D6A6E09D5F2A00BA530787C313DCB80A665272" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e2d6a6e09d5f2a00ba530787c313dcb80a665272"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0181.330] GetFileType (hFile=0x444) returned 0x1 [0181.330] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0181.330] GetFileType (hFile=0x444) returned 0x1 [0181.330] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xc96 [0181.330] ReadFile (in: hFile=0x444, lpBuffer=0x2338080, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x2338080*, lpNumberOfBytesRead=0x3be5c8*=0xc96, lpOverlapped=0x0) returned 1 [0181.339] CloseHandle (hObject=0x444) returned 1 [0181.380] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E2D6A6E09D5F2A00BA530787C313DCB80A665272", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E2D6A6E09D5F2A00BA530787C313DCB80A665272", lpFilePart=0x0) returned 0x85 [0181.381] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0181.381] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E2D6A6E09D5F2A00BA530787C313DCB80A665272" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e2d6a6e09d5f2a00ba530787c313dcb80a665272"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0181.382] GetFileType (hFile=0x444) returned 0x1 [0181.382] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0181.382] GetFileType (hFile=0x444) returned 0x1 [0181.383] WriteFile (in: hFile=0x444, lpBuffer=0x21b0b28*, nNumberOfBytesToWrite=0xca0, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x21b0b28*, lpNumberOfBytesWritten=0x3be4d8*=0xca0, lpOverlapped=0x0) returned 1 [0181.383] CloseHandle (hObject=0x444) returned 1 [0181.383] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E2D6A6E09D5F2A00BA530787C313DCB80A665272", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E2D6A6E09D5F2A00BA530787C313DCB80A665272", lpFilePart=0x0) returned 0x85 [0181.384] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E2D6A6E09D5F2A00BA530787C313DCB80A665272.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E2D6A6E09D5F2A00BA530787C313DCB80A665272.xuy", lpFilePart=0x0) returned 0x89 [0181.384] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0181.384] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E2D6A6E09D5F2A00BA530787C313DCB80A665272" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e2d6a6e09d5f2a00ba530787c313dcb80a665272"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8576718d, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x8576718d, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x57f56dfa, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xca0)) returned 1 [0181.384] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0181.384] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E2D6A6E09D5F2A00BA530787C313DCB80A665272" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e2d6a6e09d5f2a00ba530787c313dcb80a665272"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E2D6A6E09D5F2A00BA530787C313DCB80A665272.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e2d6a6e09d5f2a00ba530787c313dcb80a665272.xuy")) returned 1 [0181.385] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E2F561C6F56FC8A2E1A92AFE2013C01B9270AAEE", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E2F561C6F56FC8A2E1A92AFE2013C01B9270AAEE", lpFilePart=0x0) returned 0x85 [0181.385] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0181.385] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E2F561C6F56FC8A2E1A92AFE2013C01B9270AAEE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e2f561c6f56fc8a2e1a92afe2013c01b9270aaee"), fInfoLevelId=0x0, lpFileInformation=0x21b1ee8 | out: lpFileInformation=0x21b1ee8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x544d135a, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x544d135a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x544d135a, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x14fd3)) returned 1 [0181.385] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0181.385] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E2F561C6F56FC8A2E1A92AFE2013C01B9270AAEE", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E2F561C6F56FC8A2E1A92AFE2013C01B9270AAEE", lpFilePart=0x0) returned 0x85 [0181.385] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0181.386] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E2F561C6F56FC8A2E1A92AFE2013C01B9270AAEE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e2f561c6f56fc8a2e1a92afe2013c01b9270aaee"), fInfoLevelId=0x0, lpFileInformation=0x21b20e8 | out: lpFileInformation=0x21b20e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x544d135a, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x544d135a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x544d135a, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x14fd3)) returned 1 [0181.386] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0181.386] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E2F561C6F56FC8A2E1A92AFE2013C01B9270AAEE", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E2F561C6F56FC8A2E1A92AFE2013C01B9270AAEE", lpFilePart=0x0) returned 0x85 [0181.386] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0181.386] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E2F561C6F56FC8A2E1A92AFE2013C01B9270AAEE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e2f561c6f56fc8a2e1a92afe2013c01b9270aaee"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0181.387] GetFileType (hFile=0x444) returned 0x1 [0181.387] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0181.387] GetFileType (hFile=0x444) returned 0x1 [0181.387] ReadFile (in: hFile=0x444, lpBuffer=0x21b4618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x21b4618*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0181.415] CloseHandle (hObject=0x444) returned 1 [0181.415] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E2F561C6F56FC8A2E1A92AFE2013C01B9270AAEE", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E2F561C6F56FC8A2E1A92AFE2013C01B9270AAEE", lpFilePart=0x0) returned 0x85 [0181.415] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0181.415] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E2F561C6F56FC8A2E1A92AFE2013C01B9270AAEE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e2f561c6f56fc8a2e1a92afe2013c01b9270aaee"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0181.415] GetFileType (hFile=0x444) returned 0x1 [0181.415] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0181.415] GetFileType (hFile=0x444) returned 0x1 [0181.415] WriteFile (in: hFile=0x444, lpBuffer=0x21b22c8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x21b22c8*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0181.415] CloseHandle (hObject=0x444) returned 1 [0181.416] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E2F561C6F56FC8A2E1A92AFE2013C01B9270AAEE", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E2F561C6F56FC8A2E1A92AFE2013C01B9270AAEE", lpFilePart=0x0) returned 0x85 [0181.416] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E2F561C6F56FC8A2E1A92AFE2013C01B9270AAEE.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E2F561C6F56FC8A2E1A92AFE2013C01B9270AAEE.xuy", lpFilePart=0x0) returned 0x89 [0181.416] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0181.416] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E2F561C6F56FC8A2E1A92AFE2013C01B9270AAEE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e2f561c6f56fc8a2e1a92afe2013c01b9270aaee"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x544d135a, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x544d135a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x57fa3174, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x14fd3)) returned 1 [0181.416] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0181.416] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E2F561C6F56FC8A2E1A92AFE2013C01B9270AAEE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e2f561c6f56fc8a2e1a92afe2013c01b9270aaee"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E2F561C6F56FC8A2E1A92AFE2013C01B9270AAEE.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e2f561c6f56fc8a2e1a92afe2013c01b9270aaee.xuy")) returned 1 [0181.417] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E325B486B777C14C29762600D998974140F8FD34", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E325B486B777C14C29762600D998974140F8FD34", lpFilePart=0x0) returned 0x85 [0181.417] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0181.417] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E325B486B777C14C29762600D998974140F8FD34" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e325b486b777c14c29762600d998974140f8fd34"), fInfoLevelId=0x0, lpFileInformation=0x2230bc0 | out: lpFileInformation=0x2230bc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7fa0015, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xf7fa0015, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xf7fc61c9, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0xacd)) returned 1 [0181.418] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0181.418] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E325B486B777C14C29762600D998974140F8FD34", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E325B486B777C14C29762600D998974140F8FD34", lpFilePart=0x0) returned 0x85 [0181.418] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0181.418] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E325B486B777C14C29762600D998974140F8FD34" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e325b486b777c14c29762600d998974140f8fd34"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0181.418] GetFileType (hFile=0x444) returned 0x1 [0181.418] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0181.418] GetFileType (hFile=0x444) returned 0x1 [0181.418] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xacd [0181.418] ReadFile (in: hFile=0x444, lpBuffer=0x2231aa8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x2231aa8*, lpNumberOfBytesRead=0x3be5c8*=0xacd, lpOverlapped=0x0) returned 1 [0181.431] CloseHandle (hObject=0x444) returned 1 [0181.442] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E325B486B777C14C29762600D998974140F8FD34", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E325B486B777C14C29762600D998974140F8FD34", lpFilePart=0x0) returned 0x85 [0181.442] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0181.442] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E325B486B777C14C29762600D998974140F8FD34" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e325b486b777c14c29762600d998974140f8fd34"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0181.444] GetFileType (hFile=0x444) returned 0x1 [0181.444] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0181.444] GetFileType (hFile=0x444) returned 0x1 [0181.444] WriteFile (in: hFile=0x444, lpBuffer=0x22ac148*, nNumberOfBytesToWrite=0xad0, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x22ac148*, lpNumberOfBytesWritten=0x3be4d8*=0xad0, lpOverlapped=0x0) returned 1 [0181.445] CloseHandle (hObject=0x444) returned 1 [0181.445] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E325B486B777C14C29762600D998974140F8FD34", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E325B486B777C14C29762600D998974140F8FD34", lpFilePart=0x0) returned 0x85 [0181.445] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E325B486B777C14C29762600D998974140F8FD34.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E325B486B777C14C29762600D998974140F8FD34.xuy", lpFilePart=0x0) returned 0x89 [0181.445] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0181.445] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E325B486B777C14C29762600D998974140F8FD34" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e325b486b777c14c29762600d998974140f8fd34"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7fa0015, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xf7fa0015, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x57fefb46, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xad0)) returned 1 [0181.445] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0181.446] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E325B486B777C14C29762600D998974140F8FD34" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e325b486b777c14c29762600d998974140f8fd34"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E325B486B777C14C29762600D998974140F8FD34.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e325b486b777c14c29762600d998974140f8fd34.xuy")) returned 1 [0181.447] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E36B47A130B76E06BB674F6891750C6324159C2F", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E36B47A130B76E06BB674F6891750C6324159C2F", lpFilePart=0x0) returned 0x85 [0181.447] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0181.447] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E36B47A130B76E06BB674F6891750C6324159C2F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e36b47a130b76e06bb674f6891750c6324159c2f"), fInfoLevelId=0x0, lpFileInformation=0x22ad508 | out: lpFileInformation=0x22ad508*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5733adf, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc5733adf, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xc57361fb, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x52a)) returned 1 [0181.447] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0181.447] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E36B47A130B76E06BB674F6891750C6324159C2F", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E36B47A130B76E06BB674F6891750C6324159C2F", lpFilePart=0x0) returned 0x85 [0181.447] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0181.447] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E36B47A130B76E06BB674F6891750C6324159C2F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e36b47a130b76e06bb674f6891750c6324159c2f"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0181.447] GetFileType (hFile=0x444) returned 0x1 [0181.447] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0181.448] GetFileType (hFile=0x444) returned 0x1 [0181.448] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x52a [0181.448] ReadFile (in: hFile=0x444, lpBuffer=0x22ade50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x22ade50*, lpNumberOfBytesRead=0x3be5c8*=0x52a, lpOverlapped=0x0) returned 1 [0181.460] CloseHandle (hObject=0x444) returned 1 [0181.471] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E36B47A130B76E06BB674F6891750C6324159C2F", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E36B47A130B76E06BB674F6891750C6324159C2F", lpFilePart=0x0) returned 0x85 [0181.471] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0181.471] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E36B47A130B76E06BB674F6891750C6324159C2F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e36b47a130b76e06bb674f6891750c6324159c2f"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0181.473] GetFileType (hFile=0x444) returned 0x1 [0181.473] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0181.473] GetFileType (hFile=0x444) returned 0x1 [0181.473] WriteFile (in: hFile=0x444, lpBuffer=0x23268d0*, nNumberOfBytesToWrite=0x530, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x23268d0*, lpNumberOfBytesWritten=0x3be4d8*=0x530, lpOverlapped=0x0) returned 1 [0181.475] CloseHandle (hObject=0x444) returned 1 [0181.475] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E36B47A130B76E06BB674F6891750C6324159C2F", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E36B47A130B76E06BB674F6891750C6324159C2F", lpFilePart=0x0) returned 0x85 [0181.475] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E36B47A130B76E06BB674F6891750C6324159C2F.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E36B47A130B76E06BB674F6891750C6324159C2F.xuy", lpFilePart=0x0) returned 0x89 [0181.475] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0181.475] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E36B47A130B76E06BB674F6891750C6324159C2F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e36b47a130b76e06bb674f6891750c6324159c2f"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5733adf, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc5733adf, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x5803bc31, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x530)) returned 1 [0181.475] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0181.475] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E36B47A130B76E06BB674F6891750C6324159C2F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e36b47a130b76e06bb674f6891750c6324159c2f"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E36B47A130B76E06BB674F6891750C6324159C2F.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e36b47a130b76e06bb674f6891750c6324159c2f.xuy")) returned 1 [0181.477] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E4C38E7D26DF3FA1AD4C6271429EAEDF5799F280", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E4C38E7D26DF3FA1AD4C6271429EAEDF5799F280", lpFilePart=0x0) returned 0x85 [0181.477] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0181.477] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E4C38E7D26DF3FA1AD4C6271429EAEDF5799F280" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e4c38e7d26df3fa1ad4c6271429eaedf5799f280"), fInfoLevelId=0x0, lpFileInformation=0x2327c90 | out: lpFileInformation=0x2327c90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46172872, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x46172872, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x46172872, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0xef4)) returned 1 [0181.477] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0181.477] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E4C38E7D26DF3FA1AD4C6271429EAEDF5799F280", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E4C38E7D26DF3FA1AD4C6271429EAEDF5799F280", lpFilePart=0x0) returned 0x85 [0181.477] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0181.477] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E4C38E7D26DF3FA1AD4C6271429EAEDF5799F280" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e4c38e7d26df3fa1ad4c6271429eaedf5799f280"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0181.477] GetFileType (hFile=0x444) returned 0x1 [0181.477] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0181.477] GetFileType (hFile=0x444) returned 0x1 [0181.477] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xef4 [0181.477] ReadFile (in: hFile=0x444, lpBuffer=0x2328fa0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x2328fa0*, lpNumberOfBytesRead=0x3be5c8*=0xef4, lpOverlapped=0x0) returned 1 [0181.478] CloseHandle (hObject=0x444) returned 1 [0181.521] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E4C38E7D26DF3FA1AD4C6271429EAEDF5799F280", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E4C38E7D26DF3FA1AD4C6271429EAEDF5799F280", lpFilePart=0x0) returned 0x85 [0181.521] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0181.522] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E4C38E7D26DF3FA1AD4C6271429EAEDF5799F280" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e4c38e7d26df3fa1ad4c6271429eaedf5799f280"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0181.524] GetFileType (hFile=0x444) returned 0x1 [0181.524] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0181.524] GetFileType (hFile=0x444) returned 0x1 [0181.524] WriteFile (in: hFile=0x444, lpBuffer=0x21a4d78*, nNumberOfBytesToWrite=0xf00, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x21a4d78*, lpNumberOfBytesWritten=0x3be4d8*=0xf00, lpOverlapped=0x0) returned 1 [0181.524] CloseHandle (hObject=0x444) returned 1 [0181.525] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E4C38E7D26DF3FA1AD4C6271429EAEDF5799F280", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E4C38E7D26DF3FA1AD4C6271429EAEDF5799F280", lpFilePart=0x0) returned 0x85 [0181.525] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E4C38E7D26DF3FA1AD4C6271429EAEDF5799F280.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E4C38E7D26DF3FA1AD4C6271429EAEDF5799F280.xuy", lpFilePart=0x0) returned 0x89 [0181.525] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0181.525] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E4C38E7D26DF3FA1AD4C6271429EAEDF5799F280" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e4c38e7d26df3fa1ad4c6271429eaedf5799f280"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46172872, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x46172872, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x580ae45e, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xf00)) returned 1 [0181.525] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0181.525] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E4C38E7D26DF3FA1AD4C6271429EAEDF5799F280" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e4c38e7d26df3fa1ad4c6271429eaedf5799f280"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E4C38E7D26DF3FA1AD4C6271429EAEDF5799F280.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e4c38e7d26df3fa1ad4c6271429eaedf5799f280.xuy")) returned 1 [0181.526] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E4F7B356D54AE33BEC4DDCF16C0472DF675BACE8", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E4F7B356D54AE33BEC4DDCF16C0472DF675BACE8", lpFilePart=0x0) returned 0x85 [0181.526] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0181.526] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E4F7B356D54AE33BEC4DDCF16C0472DF675BACE8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e4f7b356d54ae33bec4ddcf16c0472df675bace8"), fInfoLevelId=0x0, lpFileInformation=0x21a6138 | out: lpFileInformation=0x21a6138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd26a8c4c, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xd26a8c4c, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0xd26a8c4c, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0xdea)) returned 1 [0181.527] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0181.527] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E4F7B356D54AE33BEC4DDCF16C0472DF675BACE8", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E4F7B356D54AE33BEC4DDCF16C0472DF675BACE8", lpFilePart=0x0) returned 0x85 [0181.527] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0181.527] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E4F7B356D54AE33BEC4DDCF16C0472DF675BACE8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e4f7b356d54ae33bec4ddcf16c0472df675bace8"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0181.527] GetFileType (hFile=0x444) returned 0x1 [0181.527] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0181.527] GetFileType (hFile=0x444) returned 0x1 [0181.527] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xdea [0181.527] ReadFile (in: hFile=0x444, lpBuffer=0x21a7340, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x21a7340*, lpNumberOfBytesRead=0x3be5c8*=0xdea, lpOverlapped=0x0) returned 1 [0181.542] CloseHandle (hObject=0x444) returned 1 [0181.715] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E4F7B356D54AE33BEC4DDCF16C0472DF675BACE8", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E4F7B356D54AE33BEC4DDCF16C0472DF675BACE8", lpFilePart=0x0) returned 0x85 [0181.715] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0181.715] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E4F7B356D54AE33BEC4DDCF16C0472DF675BACE8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e4f7b356d54ae33bec4ddcf16c0472df675bace8"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0181.717] GetFileType (hFile=0x444) returned 0x1 [0181.717] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0181.717] GetFileType (hFile=0x444) returned 0x1 [0181.717] WriteFile (in: hFile=0x444, lpBuffer=0x2222980*, nNumberOfBytesToWrite=0xdf0, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x2222980*, lpNumberOfBytesWritten=0x3be4d8*=0xdf0, lpOverlapped=0x0) returned 1 [0181.718] CloseHandle (hObject=0x444) returned 1 [0181.718] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E4F7B356D54AE33BEC4DDCF16C0472DF675BACE8", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E4F7B356D54AE33BEC4DDCF16C0472DF675BACE8", lpFilePart=0x0) returned 0x85 [0181.718] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E4F7B356D54AE33BEC4DDCF16C0472DF675BACE8.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E4F7B356D54AE33BEC4DDCF16C0472DF675BACE8.xuy", lpFilePart=0x0) returned 0x89 [0181.718] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0181.719] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E4F7B356D54AE33BEC4DDCF16C0472DF675BACE8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e4f7b356d54ae33bec4ddcf16c0472df675bace8"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd26a8c4c, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xd26a8c4c, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x5829fabc, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xdf0)) returned 1 [0181.719] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0181.719] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E4F7B356D54AE33BEC4DDCF16C0472DF675BACE8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e4f7b356d54ae33bec4ddcf16c0472df675bace8"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E4F7B356D54AE33BEC4DDCF16C0472DF675BACE8.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e4f7b356d54ae33bec4ddcf16c0472df675bace8.xuy")) returned 1 [0181.723] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E54192D9113C93D5A18B33F9AF466DAD477E1F00", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E54192D9113C93D5A18B33F9AF466DAD477E1F00", lpFilePart=0x0) returned 0x85 [0181.723] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0181.723] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E54192D9113C93D5A18B33F9AF466DAD477E1F00" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e54192d9113c93d5a18b33f9af466dad477e1f00"), fInfoLevelId=0x0, lpFileInformation=0x2223d40 | out: lpFileInformation=0x2223d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde08ae3f, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xde08ae3f, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xde08fc6a, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0xe48)) returned 1 [0181.725] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0181.725] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E54192D9113C93D5A18B33F9AF466DAD477E1F00", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E54192D9113C93D5A18B33F9AF466DAD477E1F00", lpFilePart=0x0) returned 0x85 [0181.725] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0181.725] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E54192D9113C93D5A18B33F9AF466DAD477E1F00" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e54192d9113c93d5a18b33f9af466dad477e1f00"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0181.725] GetFileType (hFile=0x444) returned 0x1 [0181.725] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0181.725] GetFileType (hFile=0x444) returned 0x1 [0181.725] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xe48 [0181.725] ReadFile (in: hFile=0x444, lpBuffer=0x2224fa0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x2224fa0*, lpNumberOfBytesRead=0x3be5c8*=0xe48, lpOverlapped=0x0) returned 1 [0181.735] CloseHandle (hObject=0x444) returned 1 [0181.746] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E54192D9113C93D5A18B33F9AF466DAD477E1F00", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E54192D9113C93D5A18B33F9AF466DAD477E1F00", lpFilePart=0x0) returned 0x85 [0181.746] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0181.746] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E54192D9113C93D5A18B33F9AF466DAD477E1F00" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e54192d9113c93d5a18b33f9af466dad477e1f00"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0181.748] GetFileType (hFile=0x444) returned 0x1 [0181.748] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0181.748] GetFileType (hFile=0x444) returned 0x1 [0181.748] WriteFile (in: hFile=0x444, lpBuffer=0x22a07c0*, nNumberOfBytesToWrite=0xe50, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x22a07c0*, lpNumberOfBytesWritten=0x3be4d8*=0xe50, lpOverlapped=0x0) returned 1 [0181.749] CloseHandle (hObject=0x444) returned 1 [0181.749] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E54192D9113C93D5A18B33F9AF466DAD477E1F00", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E54192D9113C93D5A18B33F9AF466DAD477E1F00", lpFilePart=0x0) returned 0x85 [0181.749] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E54192D9113C93D5A18B33F9AF466DAD477E1F00.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E54192D9113C93D5A18B33F9AF466DAD477E1F00.xuy", lpFilePart=0x0) returned 0x89 [0181.749] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0181.749] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E54192D9113C93D5A18B33F9AF466DAD477E1F00" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e54192d9113c93d5a18b33f9af466dad477e1f00"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde08ae3f, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xde08ae3f, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x582ec77c, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xe50)) returned 1 [0181.750] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0181.750] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E54192D9113C93D5A18B33F9AF466DAD477E1F00" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e54192d9113c93d5a18b33f9af466dad477e1f00"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E54192D9113C93D5A18B33F9AF466DAD477E1F00.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e54192d9113c93d5a18b33f9af466dad477e1f00.xuy")) returned 1 [0181.751] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E5453FF31CCA6CCC857F838D9A776D23B7B56F91", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E5453FF31CCA6CCC857F838D9A776D23B7B56F91", lpFilePart=0x0) returned 0x85 [0181.751] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0181.751] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E5453FF31CCA6CCC857F838D9A776D23B7B56F91" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e5453ff31cca6ccc857f838d9a776d23b7b56f91"), fInfoLevelId=0x0, lpFileInformation=0x22a1b80 | out: lpFileInformation=0x22a1b80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87be47f9, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x87be47f9, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x87be95f6, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x26e9)) returned 1 [0181.751] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0181.751] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E5453FF31CCA6CCC857F838D9A776D23B7B56F91", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E5453FF31CCA6CCC857F838D9A776D23B7B56F91", lpFilePart=0x0) returned 0x85 [0181.751] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0181.751] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E5453FF31CCA6CCC857F838D9A776D23B7B56F91" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e5453ff31cca6ccc857f838d9a776d23b7b56f91"), fInfoLevelId=0x0, lpFileInformation=0x22a1d80 | out: lpFileInformation=0x22a1d80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87be47f9, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x87be47f9, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x87be95f6, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x26e9)) returned 1 [0181.751] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0181.751] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E5453FF31CCA6CCC857F838D9A776D23B7B56F91", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E5453FF31CCA6CCC857F838D9A776D23B7B56F91", lpFilePart=0x0) returned 0x85 [0181.751] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0181.751] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E5453FF31CCA6CCC857F838D9A776D23B7B56F91" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e5453ff31cca6ccc857f838d9a776d23b7b56f91"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0181.752] GetFileType (hFile=0x444) returned 0x1 [0181.752] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0181.752] GetFileType (hFile=0x444) returned 0x1 [0181.752] ReadFile (in: hFile=0x444, lpBuffer=0x22a42b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x22a42b0*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0181.775] CloseHandle (hObject=0x444) returned 1 [0181.775] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E5453FF31CCA6CCC857F838D9A776D23B7B56F91", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E5453FF31CCA6CCC857F838D9A776D23B7B56F91", lpFilePart=0x0) returned 0x85 [0181.776] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0181.776] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E5453FF31CCA6CCC857F838D9A776D23B7B56F91" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e5453ff31cca6ccc857f838d9a776d23b7b56f91"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0181.776] GetFileType (hFile=0x444) returned 0x1 [0181.776] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0181.776] GetFileType (hFile=0x444) returned 0x1 [0181.776] WriteFile (in: hFile=0x444, lpBuffer=0x22a1f60*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x22a1f60*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0181.776] CloseHandle (hObject=0x444) returned 1 [0181.776] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E5453FF31CCA6CCC857F838D9A776D23B7B56F91", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E5453FF31CCA6CCC857F838D9A776D23B7B56F91", lpFilePart=0x0) returned 0x85 [0181.776] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E5453FF31CCA6CCC857F838D9A776D23B7B56F91.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E5453FF31CCA6CCC857F838D9A776D23B7B56F91.xuy", lpFilePart=0x0) returned 0x89 [0181.776] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0181.776] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E5453FF31CCA6CCC857F838D9A776D23B7B56F91" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e5453ff31cca6ccc857f838d9a776d23b7b56f91"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87be47f9, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x87be47f9, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x58310d22, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x26e9)) returned 1 [0181.776] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0181.776] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E5453FF31CCA6CCC857F838D9A776D23B7B56F91" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e5453ff31cca6ccc857f838d9a776d23b7b56f91"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E5453FF31CCA6CCC857F838D9A776D23B7B56F91.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e5453ff31cca6ccc857f838d9a776d23b7b56f91.xuy")) returned 1 [0181.778] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E59CB3871FE03235CF8A064A97ED56B9959D1103", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E59CB3871FE03235CF8A064A97ED56B9959D1103", lpFilePart=0x0) returned 0x85 [0181.778] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0181.778] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E59CB3871FE03235CF8A064A97ED56B9959D1103" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e59cb3871fe03235cf8a064a97ed56b9959d1103"), fInfoLevelId=0x0, lpFileInformation=0x2320858 | out: lpFileInformation=0x2320858*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8829406e, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x8829406e, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x88298e84, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0xb71)) returned 1 [0181.778] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0181.778] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E59CB3871FE03235CF8A064A97ED56B9959D1103", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E59CB3871FE03235CF8A064A97ED56B9959D1103", lpFilePart=0x0) returned 0x85 [0181.778] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0181.778] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E59CB3871FE03235CF8A064A97ED56B9959D1103" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e59cb3871fe03235cf8a064a97ed56b9959d1103"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0181.787] GetFileType (hFile=0x444) returned 0x1 [0181.787] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0181.787] GetFileType (hFile=0x444) returned 0x1 [0181.787] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xb71 [0181.787] ReadFile (in: hFile=0x444, lpBuffer=0x23217e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x23217e8*, lpNumberOfBytesRead=0x3be5c8*=0xb71, lpOverlapped=0x0) returned 1 [0181.792] CloseHandle (hObject=0x444) returned 1 [0181.847] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E59CB3871FE03235CF8A064A97ED56B9959D1103", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E59CB3871FE03235CF8A064A97ED56B9959D1103", lpFilePart=0x0) returned 0x85 [0181.847] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0181.847] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E59CB3871FE03235CF8A064A97ED56B9959D1103" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e59cb3871fe03235cf8a064a97ed56b9959d1103"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0181.849] GetFileType (hFile=0x444) returned 0x1 [0181.849] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0181.849] GetFileType (hFile=0x444) returned 0x1 [0181.849] WriteFile (in: hFile=0x444, lpBuffer=0x219be68*, nNumberOfBytesToWrite=0xb80, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x219be68*, lpNumberOfBytesWritten=0x3be4d8*=0xb80, lpOverlapped=0x0) returned 1 [0181.850] CloseHandle (hObject=0x444) returned 1 [0181.850] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E59CB3871FE03235CF8A064A97ED56B9959D1103", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E59CB3871FE03235CF8A064A97ED56B9959D1103", lpFilePart=0x0) returned 0x85 [0181.850] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E59CB3871FE03235CF8A064A97ED56B9959D1103.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E59CB3871FE03235CF8A064A97ED56B9959D1103.xuy", lpFilePart=0x0) returned 0x89 [0181.850] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0181.850] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E59CB3871FE03235CF8A064A97ED56B9959D1103" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e59cb3871fe03235cf8a064a97ed56b9959d1103"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8829406e, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x8829406e, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x583cf665, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xb80)) returned 1 [0181.850] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0181.850] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E59CB3871FE03235CF8A064A97ED56B9959D1103" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e59cb3871fe03235cf8a064a97ed56b9959d1103"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E59CB3871FE03235CF8A064A97ED56B9959D1103.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e59cb3871fe03235cf8a064a97ed56b9959d1103.xuy")) returned 1 [0181.852] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E5AFF4D31656E6AA923781CA04EED34CD21FA79A", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E5AFF4D31656E6AA923781CA04EED34CD21FA79A", lpFilePart=0x0) returned 0x85 [0181.852] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0181.852] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E5AFF4D31656E6AA923781CA04EED34CD21FA79A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e5aff4d31656e6aa923781ca04eed34cd21fa79a"), fInfoLevelId=0x0, lpFileInformation=0x219d228 | out: lpFileInformation=0x219d228*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f8afc3b, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3f8afc3b, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x41b7d07f, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0xe3d)) returned 1 [0181.852] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0181.852] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E5AFF4D31656E6AA923781CA04EED34CD21FA79A", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E5AFF4D31656E6AA923781CA04EED34CD21FA79A", lpFilePart=0x0) returned 0x85 [0181.852] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0181.852] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E5AFF4D31656E6AA923781CA04EED34CD21FA79A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e5aff4d31656e6aa923781ca04eed34cd21fa79a"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0181.852] GetFileType (hFile=0x444) returned 0x1 [0181.852] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0181.852] GetFileType (hFile=0x444) returned 0x1 [0181.853] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xe3d [0181.853] ReadFile (in: hFile=0x444, lpBuffer=0x219e480, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x219e480*, lpNumberOfBytesRead=0x3be5c8*=0xe3d, lpOverlapped=0x0) returned 1 [0181.854] CloseHandle (hObject=0x444) returned 1 [0181.865] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E5AFF4D31656E6AA923781CA04EED34CD21FA79A", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E5AFF4D31656E6AA923781CA04EED34CD21FA79A", lpFilePart=0x0) returned 0x85 [0181.865] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0181.865] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E5AFF4D31656E6AA923781CA04EED34CD21FA79A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e5aff4d31656e6aa923781ca04eed34cd21fa79a"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0181.867] GetFileType (hFile=0x444) returned 0x1 [0181.867] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0181.867] GetFileType (hFile=0x444) returned 0x1 [0181.867] WriteFile (in: hFile=0x444, lpBuffer=0x2219c50*, nNumberOfBytesToWrite=0xe40, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x2219c50*, lpNumberOfBytesWritten=0x3be4d8*=0xe40, lpOverlapped=0x0) returned 1 [0181.867] CloseHandle (hObject=0x444) returned 1 [0181.868] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E5AFF4D31656E6AA923781CA04EED34CD21FA79A", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E5AFF4D31656E6AA923781CA04EED34CD21FA79A", lpFilePart=0x0) returned 0x85 [0181.868] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E5AFF4D31656E6AA923781CA04EED34CD21FA79A.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E5AFF4D31656E6AA923781CA04EED34CD21FA79A.xuy", lpFilePart=0x0) returned 0x89 [0181.868] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0181.868] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E5AFF4D31656E6AA923781CA04EED34CD21FA79A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e5aff4d31656e6aa923781ca04eed34cd21fa79a"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f8afc3b, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3f8afc3b, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x583f5778, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xe40)) returned 1 [0181.868] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0181.868] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E5AFF4D31656E6AA923781CA04EED34CD21FA79A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e5aff4d31656e6aa923781ca04eed34cd21fa79a"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E5AFF4D31656E6AA923781CA04EED34CD21FA79A.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e5aff4d31656e6aa923781ca04eed34cd21fa79a.xuy")) returned 1 [0181.869] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E617AAA0550A6BEF5D9981A54982EA06D9264E06", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E617AAA0550A6BEF5D9981A54982EA06D9264E06", lpFilePart=0x0) returned 0x85 [0181.869] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0181.869] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E617AAA0550A6BEF5D9981A54982EA06D9264E06" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e617aaa0550a6bef5d9981a54982ea06d9264e06"), fInfoLevelId=0x0, lpFileInformation=0x221b010 | out: lpFileInformation=0x221b010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x898357ab, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x898357ab, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x898357ab, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0xd898)) returned 1 [0181.870] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0181.870] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E617AAA0550A6BEF5D9981A54982EA06D9264E06", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E617AAA0550A6BEF5D9981A54982EA06D9264E06", lpFilePart=0x0) returned 0x85 [0181.870] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0181.870] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E617AAA0550A6BEF5D9981A54982EA06D9264E06" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e617aaa0550a6bef5d9981a54982ea06d9264e06"), fInfoLevelId=0x0, lpFileInformation=0x221b210 | out: lpFileInformation=0x221b210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x898357ab, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x898357ab, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x898357ab, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0xd898)) returned 1 [0181.870] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0181.870] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E617AAA0550A6BEF5D9981A54982EA06D9264E06", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E617AAA0550A6BEF5D9981A54982EA06D9264E06", lpFilePart=0x0) returned 0x85 [0181.870] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0181.870] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E617AAA0550A6BEF5D9981A54982EA06D9264E06" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e617aaa0550a6bef5d9981a54982ea06d9264e06"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0181.871] GetFileType (hFile=0x444) returned 0x1 [0181.871] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0181.871] GetFileType (hFile=0x444) returned 0x1 [0181.871] ReadFile (in: hFile=0x444, lpBuffer=0x221d740, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x221d740*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0181.907] CloseHandle (hObject=0x444) returned 1 [0181.907] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E617AAA0550A6BEF5D9981A54982EA06D9264E06", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E617AAA0550A6BEF5D9981A54982EA06D9264E06", lpFilePart=0x0) returned 0x85 [0181.907] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0181.907] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E617AAA0550A6BEF5D9981A54982EA06D9264E06" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e617aaa0550a6bef5d9981a54982ea06d9264e06"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0181.907] GetFileType (hFile=0x444) returned 0x1 [0181.907] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0181.907] GetFileType (hFile=0x444) returned 0x1 [0181.907] WriteFile (in: hFile=0x444, lpBuffer=0x221b3f0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x221b3f0*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0181.907] CloseHandle (hObject=0x444) returned 1 [0181.908] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E617AAA0550A6BEF5D9981A54982EA06D9264E06", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E617AAA0550A6BEF5D9981A54982EA06D9264E06", lpFilePart=0x0) returned 0x85 [0181.908] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E617AAA0550A6BEF5D9981A54982EA06D9264E06.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E617AAA0550A6BEF5D9981A54982EA06D9264E06.xuy", lpFilePart=0x0) returned 0x89 [0181.908] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0181.908] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E617AAA0550A6BEF5D9981A54982EA06D9264E06" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e617aaa0550a6bef5d9981a54982ea06d9264e06"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x898357ab, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x898357ab, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x58467df0, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xd898)) returned 1 [0181.908] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0181.908] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E617AAA0550A6BEF5D9981A54982EA06D9264E06" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e617aaa0550a6bef5d9981a54982ea06d9264e06"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E617AAA0550A6BEF5D9981A54982EA06D9264E06.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e617aaa0550a6bef5d9981a54982ea06d9264e06.xuy")) returned 1 [0181.910] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E6708B606CB4A5C7FD8231151366F3674360F25F", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E6708B606CB4A5C7FD8231151366F3674360F25F", lpFilePart=0x0) returned 0x85 [0181.910] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0181.910] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E6708B606CB4A5C7FD8231151366F3674360F25F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e6708b606cb4a5c7fd8231151366f3674360f25f"), fInfoLevelId=0x0, lpFileInformation=0x2299ce8 | out: lpFileInformation=0x2299ce8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c8bf533, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x7c8bf533, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x7c8e579b, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x4d2)) returned 1 [0181.910] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0181.910] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E6708B606CB4A5C7FD8231151366F3674360F25F", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E6708B606CB4A5C7FD8231151366F3674360F25F", lpFilePart=0x0) returned 0x85 [0181.910] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0181.910] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E6708B606CB4A5C7FD8231151366F3674360F25F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e6708b606cb4a5c7fd8231151366f3674360f25f"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0181.910] GetFileType (hFile=0x444) returned 0x1 [0181.910] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0181.910] GetFileType (hFile=0x444) returned 0x1 [0181.910] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x4d2 [0181.910] ReadFile (in: hFile=0x444, lpBuffer=0x229a5d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x229a5d8*, lpNumberOfBytesRead=0x3be5c8*=0x4d2, lpOverlapped=0x0) returned 1 [0181.912] CloseHandle (hObject=0x444) returned 1 [0181.922] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E6708B606CB4A5C7FD8231151366F3674360F25F", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E6708B606CB4A5C7FD8231151366F3674360F25F", lpFilePart=0x0) returned 0x85 [0181.922] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0181.922] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E6708B606CB4A5C7FD8231151366F3674360F25F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e6708b606cb4a5c7fd8231151366f3674360f25f"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0181.924] GetFileType (hFile=0x444) returned 0x1 [0181.924] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0181.924] GetFileType (hFile=0x444) returned 0x1 [0181.924] WriteFile (in: hFile=0x444, lpBuffer=0x2312ed0*, nNumberOfBytesToWrite=0x4e0, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x2312ed0*, lpNumberOfBytesWritten=0x3be4d8*=0x4e0, lpOverlapped=0x0) returned 1 [0181.925] CloseHandle (hObject=0x444) returned 1 [0181.925] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E6708B606CB4A5C7FD8231151366F3674360F25F", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E6708B606CB4A5C7FD8231151366F3674360F25F", lpFilePart=0x0) returned 0x85 [0181.925] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E6708B606CB4A5C7FD8231151366F3674360F25F.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E6708B606CB4A5C7FD8231151366F3674360F25F.xuy", lpFilePart=0x0) returned 0x89 [0181.925] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0181.925] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E6708B606CB4A5C7FD8231151366F3674360F25F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e6708b606cb4a5c7fd8231151366f3674360f25f"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c8bf533, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x7c8bf533, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x5848dfd2, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x4e0)) returned 1 [0181.925] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0181.925] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E6708B606CB4A5C7FD8231151366F3674360F25F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e6708b606cb4a5c7fd8231151366f3674360f25f"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E6708B606CB4A5C7FD8231151366F3674360F25F.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e6708b606cb4a5c7fd8231151366f3674360f25f.xuy")) returned 1 [0181.927] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E6B1788F4884F4B5EB0897C0D56092928A378FB0", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E6B1788F4884F4B5EB0897C0D56092928A378FB0", lpFilePart=0x0) returned 0x85 [0181.927] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0181.927] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E6B1788F4884F4B5EB0897C0D56092928A378FB0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e6b1788f4884f4b5eb0897c0d56092928a378fb0"), fInfoLevelId=0x0, lpFileInformation=0x2314290 | out: lpFileInformation=0x2314290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x615c4498, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x615c4498, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x615c4498, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xed0)) returned 1 [0181.927] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0181.927] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E6B1788F4884F4B5EB0897C0D56092928A378FB0", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E6B1788F4884F4B5EB0897C0D56092928A378FB0", lpFilePart=0x0) returned 0x85 [0181.927] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0181.927] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E6B1788F4884F4B5EB0897C0D56092928A378FB0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e6b1788f4884f4b5eb0897c0d56092928a378fb0"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0181.927] GetFileType (hFile=0x444) returned 0x1 [0181.927] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0181.927] GetFileType (hFile=0x444) returned 0x1 [0181.927] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xed0 [0181.927] ReadFile (in: hFile=0x444, lpBuffer=0x2315578, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x2315578*, lpNumberOfBytesRead=0x3be5c8*=0xed0, lpOverlapped=0x0) returned 1 [0181.939] CloseHandle (hObject=0x444) returned 1 [0182.125] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E6B1788F4884F4B5EB0897C0D56092928A378FB0", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E6B1788F4884F4B5EB0897C0D56092928A378FB0", lpFilePart=0x0) returned 0x85 [0182.125] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0182.125] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E6B1788F4884F4B5EB0897C0D56092928A378FB0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e6b1788f4884f4b5eb0897c0d56092928a378fb0"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0182.127] GetFileType (hFile=0x444) returned 0x1 [0182.127] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0182.127] GetFileType (hFile=0x444) returned 0x1 [0182.127] WriteFile (in: hFile=0x444, lpBuffer=0x21913c0*, nNumberOfBytesToWrite=0xee0, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x21913c0*, lpNumberOfBytesWritten=0x3be4d8*=0xee0, lpOverlapped=0x0) returned 1 [0182.128] CloseHandle (hObject=0x444) returned 1 [0182.128] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E6B1788F4884F4B5EB0897C0D56092928A378FB0", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E6B1788F4884F4B5EB0897C0D56092928A378FB0", lpFilePart=0x0) returned 0x85 [0182.128] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E6B1788F4884F4B5EB0897C0D56092928A378FB0.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E6B1788F4884F4B5EB0897C0D56092928A378FB0.xuy", lpFilePart=0x0) returned 0x89 [0182.128] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0182.128] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E6B1788F4884F4B5EB0897C0D56092928A378FB0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e6b1788f4884f4b5eb0897c0d56092928a378fb0"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x615c4498, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x615c4498, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x5867e012, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xee0)) returned 1 [0182.128] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0182.128] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E6B1788F4884F4B5EB0897C0D56092928A378FB0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e6b1788f4884f4b5eb0897c0d56092928a378fb0"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E6B1788F4884F4B5EB0897C0D56092928A378FB0.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e6b1788f4884f4b5eb0897c0d56092928a378fb0.xuy")) returned 1 [0182.130] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E6FA1FC2E9368C16E114B06CF1719DD109620F0C", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E6FA1FC2E9368C16E114B06CF1719DD109620F0C", lpFilePart=0x0) returned 0x85 [0182.130] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0182.130] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E6FA1FC2E9368C16E114B06CF1719DD109620F0C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e6fa1fc2e9368c16e114b06cf1719dd109620f0c"), fInfoLevelId=0x0, lpFileInformation=0x2192780 | out: lpFileInformation=0x2192780*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f85f322, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3f85f322, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x41b7a976, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0xdfb)) returned 1 [0182.130] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0182.130] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E6FA1FC2E9368C16E114B06CF1719DD109620F0C", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E6FA1FC2E9368C16E114B06CF1719DD109620F0C", lpFilePart=0x0) returned 0x85 [0182.130] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0182.130] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E6FA1FC2E9368C16E114B06CF1719DD109620F0C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e6fa1fc2e9368c16e114b06cf1719dd109620f0c"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0182.130] GetFileType (hFile=0x444) returned 0x1 [0182.130] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0182.130] GetFileType (hFile=0x444) returned 0x1 [0182.130] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xdfb [0182.130] ReadFile (in: hFile=0x444, lpBuffer=0x2193998, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x2193998*, lpNumberOfBytesRead=0x3be5c8*=0xdfb, lpOverlapped=0x0) returned 1 [0182.136] CloseHandle (hObject=0x444) returned 1 [0182.153] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E6FA1FC2E9368C16E114B06CF1719DD109620F0C", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E6FA1FC2E9368C16E114B06CF1719DD109620F0C", lpFilePart=0x0) returned 0x85 [0182.153] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0182.153] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E6FA1FC2E9368C16E114B06CF1719DD109620F0C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e6fa1fc2e9368c16e114b06cf1719dd109620f0c"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0182.167] GetFileType (hFile=0x444) returned 0x1 [0182.167] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0182.167] GetFileType (hFile=0x444) returned 0x1 [0182.167] WriteFile (in: hFile=0x444, lpBuffer=0x220f028*, nNumberOfBytesToWrite=0xe00, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x220f028*, lpNumberOfBytesWritten=0x3be4d8*=0xe00, lpOverlapped=0x0) returned 1 [0182.167] CloseHandle (hObject=0x444) returned 1 [0182.168] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E6FA1FC2E9368C16E114B06CF1719DD109620F0C", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E6FA1FC2E9368C16E114B06CF1719DD109620F0C", lpFilePart=0x0) returned 0x85 [0182.168] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E6FA1FC2E9368C16E114B06CF1719DD109620F0C.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E6FA1FC2E9368C16E114B06CF1719DD109620F0C.xuy", lpFilePart=0x0) returned 0x89 [0182.168] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0182.168] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E6FA1FC2E9368C16E114B06CF1719DD109620F0C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e6fa1fc2e9368c16e114b06cf1719dd109620f0c"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f85f322, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3f85f322, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x586ca439, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xe00)) returned 1 [0182.168] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0182.168] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E6FA1FC2E9368C16E114B06CF1719DD109620F0C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e6fa1fc2e9368c16e114b06cf1719dd109620f0c"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E6FA1FC2E9368C16E114B06CF1719DD109620F0C.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e6fa1fc2e9368c16e114b06cf1719dd109620f0c.xuy")) returned 1 [0182.169] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E755F4D95C65E55966B4F130BE123456A847D2E2", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E755F4D95C65E55966B4F130BE123456A847D2E2", lpFilePart=0x0) returned 0x85 [0182.170] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0182.170] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E755F4D95C65E55966B4F130BE123456A847D2E2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e755f4d95c65e55966b4f130be123456a847d2e2"), fInfoLevelId=0x0, lpFileInformation=0x22103e8 | out: lpFileInformation=0x22103e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79e81246, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x79e81246, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x79ea7479, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x528)) returned 1 [0182.170] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0182.170] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E755F4D95C65E55966B4F130BE123456A847D2E2", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E755F4D95C65E55966B4F130BE123456A847D2E2", lpFilePart=0x0) returned 0x85 [0182.170] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0182.170] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E755F4D95C65E55966B4F130BE123456A847D2E2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e755f4d95c65e55966b4f130be123456a847d2e2"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0182.170] GetFileType (hFile=0x444) returned 0x1 [0182.170] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0182.170] GetFileType (hFile=0x444) returned 0x1 [0182.170] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x528 [0182.170] ReadFile (in: hFile=0x444, lpBuffer=0x2210d28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x2210d28*, lpNumberOfBytesRead=0x3be5c8*=0x528, lpOverlapped=0x0) returned 1 [0182.171] CloseHandle (hObject=0x444) returned 1 [0182.182] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E755F4D95C65E55966B4F130BE123456A847D2E2", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E755F4D95C65E55966B4F130BE123456A847D2E2", lpFilePart=0x0) returned 0x85 [0182.182] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0182.182] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E755F4D95C65E55966B4F130BE123456A847D2E2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e755f4d95c65e55966b4f130be123456a847d2e2"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0182.184] GetFileType (hFile=0x444) returned 0x1 [0182.184] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0182.184] GetFileType (hFile=0x444) returned 0x1 [0182.184] WriteFile (in: hFile=0x444, lpBuffer=0x22897a8*, nNumberOfBytesToWrite=0x530, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x22897a8*, lpNumberOfBytesWritten=0x3be4d8*=0x530, lpOverlapped=0x0) returned 1 [0182.184] CloseHandle (hObject=0x444) returned 1 [0182.185] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E755F4D95C65E55966B4F130BE123456A847D2E2", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E755F4D95C65E55966B4F130BE123456A847D2E2", lpFilePart=0x0) returned 0x85 [0182.185] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E755F4D95C65E55966B4F130BE123456A847D2E2.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E755F4D95C65E55966B4F130BE123456A847D2E2.xuy", lpFilePart=0x0) returned 0x89 [0182.185] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0182.185] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E755F4D95C65E55966B4F130BE123456A847D2E2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e755f4d95c65e55966b4f130be123456a847d2e2"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79e81246, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x79e81246, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x586f0842, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x530)) returned 1 [0182.185] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0182.185] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E755F4D95C65E55966B4F130BE123456A847D2E2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e755f4d95c65e55966b4f130be123456a847d2e2"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E755F4D95C65E55966B4F130BE123456A847D2E2.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e755f4d95c65e55966b4f130be123456a847d2e2.xuy")) returned 1 [0182.186] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E77CCF247E8477E087D8D5197583A185E5FD6AC1", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E77CCF247E8477E087D8D5197583A185E5FD6AC1", lpFilePart=0x0) returned 0x85 [0182.186] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0182.186] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E77CCF247E8477E087D8D5197583A185E5FD6AC1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e77ccf247e8477e087d8d5197583a185e5fd6ac1"), fInfoLevelId=0x0, lpFileInformation=0x228ab68 | out: lpFileInformation=0x228ab68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87030b44, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x87030b44, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x87033260, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x8ff)) returned 1 [0182.187] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0182.187] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E77CCF247E8477E087D8D5197583A185E5FD6AC1", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E77CCF247E8477E087D8D5197583A185E5FD6AC1", lpFilePart=0x0) returned 0x85 [0182.187] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0182.187] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E77CCF247E8477E087D8D5197583A185E5FD6AC1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e77ccf247e8477e087d8d5197583a185e5fd6ac1"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0182.187] GetFileType (hFile=0x444) returned 0x1 [0182.187] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0182.187] GetFileType (hFile=0x444) returned 0x1 [0182.187] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x8ff [0182.187] ReadFile (in: hFile=0x444, lpBuffer=0x228b880, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x228b880*, lpNumberOfBytesRead=0x3be5c8*=0x8ff, lpOverlapped=0x0) returned 1 [0182.202] CloseHandle (hObject=0x444) returned 1 [0182.212] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E77CCF247E8477E087D8D5197583A185E5FD6AC1", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E77CCF247E8477E087D8D5197583A185E5FD6AC1", lpFilePart=0x0) returned 0x85 [0182.212] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0182.212] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E77CCF247E8477E087D8D5197583A185E5FD6AC1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e77ccf247e8477e087d8d5197583a185e5fd6ac1"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0182.214] GetFileType (hFile=0x444) returned 0x1 [0182.214] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0182.214] GetFileType (hFile=0x444) returned 0x1 [0182.214] WriteFile (in: hFile=0x444, lpBuffer=0x2305610*, nNumberOfBytesToWrite=0x900, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x2305610*, lpNumberOfBytesWritten=0x3be4d8*=0x900, lpOverlapped=0x0) returned 1 [0182.215] CloseHandle (hObject=0x444) returned 1 [0182.215] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E77CCF247E8477E087D8D5197583A185E5FD6AC1", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E77CCF247E8477E087D8D5197583A185E5FD6AC1", lpFilePart=0x0) returned 0x85 [0182.215] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E77CCF247E8477E087D8D5197583A185E5FD6AC1.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E77CCF247E8477E087D8D5197583A185E5FD6AC1.xuy", lpFilePart=0x0) returned 0x89 [0182.215] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0182.215] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E77CCF247E8477E087D8D5197583A185E5FD6AC1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e77ccf247e8477e087d8d5197583a185e5fd6ac1"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87030b44, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x87030b44, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x5873ca18, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x900)) returned 1 [0182.215] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0182.215] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E77CCF247E8477E087D8D5197583A185E5FD6AC1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e77ccf247e8477e087d8d5197583a185e5fd6ac1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E77CCF247E8477E087D8D5197583A185E5FD6AC1.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e77ccf247e8477e087d8d5197583a185e5fd6ac1.xuy")) returned 1 [0182.222] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E7F58637FE8FEAF467324196F386D2F6B1CB2A01", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E7F58637FE8FEAF467324196F386D2F6B1CB2A01", lpFilePart=0x0) returned 0x85 [0182.222] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0182.222] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E7F58637FE8FEAF467324196F386D2F6B1CB2A01" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e7f58637fe8feaf467324196f386d2f6b1cb2a01"), fInfoLevelId=0x0, lpFileInformation=0x23069d0 | out: lpFileInformation=0x23069d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd02b35c3, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xd02b35c3, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0xd02b35c3, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x528)) returned 1 [0182.222] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0182.222] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E7F58637FE8FEAF467324196F386D2F6B1CB2A01", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E7F58637FE8FEAF467324196F386D2F6B1CB2A01", lpFilePart=0x0) returned 0x85 [0182.222] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0182.222] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E7F58637FE8FEAF467324196F386D2F6B1CB2A01" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e7f58637fe8feaf467324196f386d2f6b1cb2a01"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0182.223] GetFileType (hFile=0x444) returned 0x1 [0182.223] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0182.223] GetFileType (hFile=0x444) returned 0x1 [0182.223] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x528 [0182.223] ReadFile (in: hFile=0x444, lpBuffer=0x2307310, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x2307310*, lpNumberOfBytesRead=0x3be5c8*=0x528, lpOverlapped=0x0) returned 1 [0182.224] CloseHandle (hObject=0x444) returned 1 [0182.236] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E7F58637FE8FEAF467324196F386D2F6B1CB2A01", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E7F58637FE8FEAF467324196F386D2F6B1CB2A01", lpFilePart=0x0) returned 0x85 [0182.236] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0182.236] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E7F58637FE8FEAF467324196F386D2F6B1CB2A01" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e7f58637fe8feaf467324196f386d2f6b1cb2a01"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0182.238] GetFileType (hFile=0x444) returned 0x1 [0182.238] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0182.238] GetFileType (hFile=0x444) returned 0x1 [0182.238] WriteFile (in: hFile=0x444, lpBuffer=0x237fd90*, nNumberOfBytesToWrite=0x530, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x237fd90*, lpNumberOfBytesWritten=0x3be4d8*=0x530, lpOverlapped=0x0) returned 1 [0182.239] CloseHandle (hObject=0x444) returned 1 [0182.239] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E7F58637FE8FEAF467324196F386D2F6B1CB2A01", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E7F58637FE8FEAF467324196F386D2F6B1CB2A01", lpFilePart=0x0) returned 0x85 [0182.239] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E7F58637FE8FEAF467324196F386D2F6B1CB2A01.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E7F58637FE8FEAF467324196F386D2F6B1CB2A01.xuy", lpFilePart=0x0) returned 0x89 [0182.239] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0182.239] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E7F58637FE8FEAF467324196F386D2F6B1CB2A01" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e7f58637fe8feaf467324196f386d2f6b1cb2a01"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd02b35c3, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xd02b35c3, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x58789423, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x530)) returned 1 [0182.239] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0182.239] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E7F58637FE8FEAF467324196F386D2F6B1CB2A01" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e7f58637fe8feaf467324196f386d2f6b1cb2a01"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E7F58637FE8FEAF467324196F386D2F6B1CB2A01.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e7f58637fe8feaf467324196f386d2f6b1cb2a01.xuy")) returned 1 [0182.240] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E8376984B7111E6C56412FE9CD32A367E9D6E072", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E8376984B7111E6C56412FE9CD32A367E9D6E072", lpFilePart=0x0) returned 0x85 [0182.240] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0182.240] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E8376984B7111E6C56412FE9CD32A367E9D6E072" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e8376984b7111e6c56412fe9cd32a367e9d6e072"), fInfoLevelId=0x0, lpFileInformation=0x2381150 | out: lpFileInformation=0x2381150*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48d30ecb, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x48d30ecb, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x48d30ecb, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0x4d2)) returned 1 [0182.241] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0182.241] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E8376984B7111E6C56412FE9CD32A367E9D6E072", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E8376984B7111E6C56412FE9CD32A367E9D6E072", lpFilePart=0x0) returned 0x85 [0182.241] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0182.241] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E8376984B7111E6C56412FE9CD32A367E9D6E072" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e8376984b7111e6c56412fe9cd32a367e9d6e072"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0182.241] GetFileType (hFile=0x444) returned 0x1 [0182.241] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0182.241] GetFileType (hFile=0x444) returned 0x1 [0182.241] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x4d2 [0182.241] ReadFile (in: hFile=0x444, lpBuffer=0x2381a40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x2381a40*, lpNumberOfBytesRead=0x3be5c8*=0x4d2, lpOverlapped=0x0) returned 1 [0182.242] CloseHandle (hObject=0x444) returned 1 [0182.283] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E8376984B7111E6C56412FE9CD32A367E9D6E072", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E8376984B7111E6C56412FE9CD32A367E9D6E072", lpFilePart=0x0) returned 0x85 [0182.283] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0182.283] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E8376984B7111E6C56412FE9CD32A367E9D6E072" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e8376984b7111e6c56412fe9cd32a367e9d6e072"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0182.285] GetFileType (hFile=0x444) returned 0x1 [0182.285] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0182.285] GetFileType (hFile=0x444) returned 0x1 [0182.285] WriteFile (in: hFile=0x444, lpBuffer=0x21f9948*, nNumberOfBytesToWrite=0x4e0, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x21f9948*, lpNumberOfBytesWritten=0x3be4d8*=0x4e0, lpOverlapped=0x0) returned 1 [0182.286] CloseHandle (hObject=0x444) returned 1 [0182.286] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E8376984B7111E6C56412FE9CD32A367E9D6E072", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E8376984B7111E6C56412FE9CD32A367E9D6E072", lpFilePart=0x0) returned 0x85 [0182.286] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E8376984B7111E6C56412FE9CD32A367E9D6E072.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E8376984B7111E6C56412FE9CD32A367E9D6E072.xuy", lpFilePart=0x0) returned 0x89 [0182.286] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0182.286] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E8376984B7111E6C56412FE9CD32A367E9D6E072" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e8376984b7111e6c56412fe9cd32a367e9d6e072"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48d30ecb, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x48d30ecb, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x587fb6d9, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x4e0)) returned 1 [0182.286] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0182.287] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E8376984B7111E6C56412FE9CD32A367E9D6E072" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e8376984b7111e6c56412fe9cd32a367e9d6e072"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E8376984B7111E6C56412FE9CD32A367E9D6E072.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e8376984b7111e6c56412fe9cd32a367e9d6e072.xuy")) returned 1 [0182.288] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E8ACA32CFA8DA14BAFE930A3AD39CCC430D74344", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E8ACA32CFA8DA14BAFE930A3AD39CCC430D74344", lpFilePart=0x0) returned 0x85 [0182.288] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0182.288] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E8ACA32CFA8DA14BAFE930A3AD39CCC430D74344" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e8aca32cfa8da14bafe930a3ad39ccc430d74344"), fInfoLevelId=0x0, lpFileInformation=0x21fad08 | out: lpFileInformation=0x21fad08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5e8c3d57, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x5e8c3d57, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x5e8c3d57, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x7af6)) returned 1 [0182.288] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0182.288] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E8ACA32CFA8DA14BAFE930A3AD39CCC430D74344", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E8ACA32CFA8DA14BAFE930A3AD39CCC430D74344", lpFilePart=0x0) returned 0x85 [0182.288] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0182.288] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E8ACA32CFA8DA14BAFE930A3AD39CCC430D74344" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e8aca32cfa8da14bafe930a3ad39ccc430d74344"), fInfoLevelId=0x0, lpFileInformation=0x21faf08 | out: lpFileInformation=0x21faf08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5e8c3d57, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x5e8c3d57, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x5e8c3d57, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x7af6)) returned 1 [0182.288] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0182.288] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E8ACA32CFA8DA14BAFE930A3AD39CCC430D74344", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E8ACA32CFA8DA14BAFE930A3AD39CCC430D74344", lpFilePart=0x0) returned 0x85 [0182.288] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0182.288] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E8ACA32CFA8DA14BAFE930A3AD39CCC430D74344" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e8aca32cfa8da14bafe930a3ad39ccc430d74344"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0182.289] GetFileType (hFile=0x444) returned 0x1 [0182.289] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0182.289] GetFileType (hFile=0x444) returned 0x1 [0182.289] ReadFile (in: hFile=0x444, lpBuffer=0x21fd438, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x21fd438*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0182.327] CloseHandle (hObject=0x444) returned 1 [0182.327] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E8ACA32CFA8DA14BAFE930A3AD39CCC430D74344", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E8ACA32CFA8DA14BAFE930A3AD39CCC430D74344", lpFilePart=0x0) returned 0x85 [0182.327] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0182.327] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E8ACA32CFA8DA14BAFE930A3AD39CCC430D74344" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e8aca32cfa8da14bafe930a3ad39ccc430d74344"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0182.327] GetFileType (hFile=0x444) returned 0x1 [0182.327] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0182.328] GetFileType (hFile=0x444) returned 0x1 [0182.328] WriteFile (in: hFile=0x444, lpBuffer=0x21fb0e8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x21fb0e8*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0182.328] CloseHandle (hObject=0x444) returned 1 [0182.328] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E8ACA32CFA8DA14BAFE930A3AD39CCC430D74344", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E8ACA32CFA8DA14BAFE930A3AD39CCC430D74344", lpFilePart=0x0) returned 0x85 [0182.328] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E8ACA32CFA8DA14BAFE930A3AD39CCC430D74344.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E8ACA32CFA8DA14BAFE930A3AD39CCC430D74344.xuy", lpFilePart=0x0) returned 0x89 [0182.328] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0182.328] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E8ACA32CFA8DA14BAFE930A3AD39CCC430D74344" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e8aca32cfa8da14bafe930a3ad39ccc430d74344"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5e8c3d57, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x5e8c3d57, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x5886e080, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x7af6)) returned 1 [0182.328] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0182.328] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E8ACA32CFA8DA14BAFE930A3AD39CCC430D74344" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e8aca32cfa8da14bafe930a3ad39ccc430d74344"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E8ACA32CFA8DA14BAFE930A3AD39CCC430D74344.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e8aca32cfa8da14bafe930a3ad39ccc430d74344.xuy")) returned 1 [0182.330] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E9B5F1423155DB2E35FD739FC2008DB01C93DE1E", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E9B5F1423155DB2E35FD739FC2008DB01C93DE1E", lpFilePart=0x0) returned 0x85 [0182.330] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0182.330] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E9B5F1423155DB2E35FD739FC2008DB01C93DE1E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e9b5f1423155db2e35fd739fc2008db01c93de1e"), fInfoLevelId=0x0, lpFileInformation=0x22799e0 | out: lpFileInformation=0x22799e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5fb02f12, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x5fb02f12, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x5fb426bd, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x57680)) returned 1 [0182.330] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0182.330] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E9B5F1423155DB2E35FD739FC2008DB01C93DE1E", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E9B5F1423155DB2E35FD739FC2008DB01C93DE1E", lpFilePart=0x0) returned 0x85 [0182.330] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0182.330] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E9B5F1423155DB2E35FD739FC2008DB01C93DE1E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e9b5f1423155db2e35fd739fc2008db01c93de1e"), fInfoLevelId=0x0, lpFileInformation=0x2279be0 | out: lpFileInformation=0x2279be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5fb02f12, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x5fb02f12, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x5fb426bd, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x57680)) returned 1 [0182.330] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0182.330] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E9B5F1423155DB2E35FD739FC2008DB01C93DE1E", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E9B5F1423155DB2E35FD739FC2008DB01C93DE1E", lpFilePart=0x0) returned 0x85 [0182.330] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0182.330] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E9B5F1423155DB2E35FD739FC2008DB01C93DE1E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e9b5f1423155db2e35fd739fc2008db01c93de1e"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0182.331] GetFileType (hFile=0x444) returned 0x1 [0182.331] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0182.331] GetFileType (hFile=0x444) returned 0x1 [0182.331] ReadFile (in: hFile=0x444, lpBuffer=0x227c110, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x227c110*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0182.353] CloseHandle (hObject=0x444) returned 1 [0182.353] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E9B5F1423155DB2E35FD739FC2008DB01C93DE1E", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E9B5F1423155DB2E35FD739FC2008DB01C93DE1E", lpFilePart=0x0) returned 0x85 [0182.353] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0182.354] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E9B5F1423155DB2E35FD739FC2008DB01C93DE1E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e9b5f1423155db2e35fd739fc2008db01c93de1e"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0182.354] GetFileType (hFile=0x444) returned 0x1 [0182.354] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0182.354] GetFileType (hFile=0x444) returned 0x1 [0182.354] WriteFile (in: hFile=0x444, lpBuffer=0x2279dc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x2279dc0*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0182.354] CloseHandle (hObject=0x444) returned 1 [0182.354] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E9B5F1423155DB2E35FD739FC2008DB01C93DE1E", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E9B5F1423155DB2E35FD739FC2008DB01C93DE1E", lpFilePart=0x0) returned 0x85 [0182.354] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E9B5F1423155DB2E35FD739FC2008DB01C93DE1E.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E9B5F1423155DB2E35FD739FC2008DB01C93DE1E.xuy", lpFilePart=0x0) returned 0x89 [0182.354] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0182.354] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E9B5F1423155DB2E35FD739FC2008DB01C93DE1E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e9b5f1423155db2e35fd739fc2008db01c93de1e"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5fb02f12, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x5fb02f12, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x58893eed, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x57680)) returned 1 [0182.355] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0182.355] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E9B5F1423155DB2E35FD739FC2008DB01C93DE1E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e9b5f1423155db2e35fd739fc2008db01c93de1e"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E9B5F1423155DB2E35FD739FC2008DB01C93DE1E.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e9b5f1423155db2e35fd739fc2008db01c93de1e.xuy")) returned 1 [0182.356] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E9F077A8B99E4A3E259ED129779CA46C677341B4", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E9F077A8B99E4A3E259ED129779CA46C677341B4", lpFilePart=0x0) returned 0x85 [0182.356] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0182.356] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E9F077A8B99E4A3E259ED129779CA46C677341B4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e9f077a8b99e4a3e259ed129779ca46c677341b4"), fInfoLevelId=0x0, lpFileInformation=0x22f86b8 | out: lpFileInformation=0x22f86b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5e982952, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x5e982952, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x5e982952, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x1ab45)) returned 1 [0182.356] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0182.356] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E9F077A8B99E4A3E259ED129779CA46C677341B4", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E9F077A8B99E4A3E259ED129779CA46C677341B4", lpFilePart=0x0) returned 0x85 [0182.356] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0182.356] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E9F077A8B99E4A3E259ED129779CA46C677341B4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e9f077a8b99e4a3e259ed129779ca46c677341b4"), fInfoLevelId=0x0, lpFileInformation=0x22f88b8 | out: lpFileInformation=0x22f88b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5e982952, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x5e982952, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x5e982952, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x1ab45)) returned 1 [0182.356] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0182.356] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E9F077A8B99E4A3E259ED129779CA46C677341B4", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E9F077A8B99E4A3E259ED129779CA46C677341B4", lpFilePart=0x0) returned 0x85 [0182.357] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0182.357] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E9F077A8B99E4A3E259ED129779CA46C677341B4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e9f077a8b99e4a3e259ed129779ca46c677341b4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0182.358] GetFileType (hFile=0x444) returned 0x1 [0182.358] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0182.358] GetFileType (hFile=0x444) returned 0x1 [0182.358] ReadFile (in: hFile=0x444, lpBuffer=0x22fade8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x22fade8*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0182.370] CloseHandle (hObject=0x444) returned 1 [0182.371] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E9F077A8B99E4A3E259ED129779CA46C677341B4", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E9F077A8B99E4A3E259ED129779CA46C677341B4", lpFilePart=0x0) returned 0x85 [0182.371] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0182.371] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E9F077A8B99E4A3E259ED129779CA46C677341B4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e9f077a8b99e4a3e259ed129779ca46c677341b4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0182.371] GetFileType (hFile=0x444) returned 0x1 [0182.371] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0182.371] GetFileType (hFile=0x444) returned 0x1 [0182.371] WriteFile (in: hFile=0x444, lpBuffer=0x22f8a98*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x22f8a98*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0182.371] CloseHandle (hObject=0x444) returned 1 [0182.371] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E9F077A8B99E4A3E259ED129779CA46C677341B4", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E9F077A8B99E4A3E259ED129779CA46C677341B4", lpFilePart=0x0) returned 0x85 [0182.371] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E9F077A8B99E4A3E259ED129779CA46C677341B4.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E9F077A8B99E4A3E259ED129779CA46C677341B4.xuy", lpFilePart=0x0) returned 0x89 [0182.371] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0182.371] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E9F077A8B99E4A3E259ED129779CA46C677341B4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e9f077a8b99e4a3e259ed129779ca46c677341b4"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5e982952, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x5e982952, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x588ba2b3, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x1ab45)) returned 1 [0182.372] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0182.372] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E9F077A8B99E4A3E259ED129779CA46C677341B4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e9f077a8b99e4a3e259ed129779ca46c677341b4"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E9F077A8B99E4A3E259ED129779CA46C677341B4.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e9f077a8b99e4a3e259ed129779ca46c677341b4.xuy")) returned 1 [0182.373] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EA105BB5209CF00C1512F6770736AB8BE06BEEFB", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EA105BB5209CF00C1512F6770736AB8BE06BEEFB", lpFilePart=0x0) returned 0x85 [0182.373] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0182.373] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EA105BB5209CF00C1512F6770736AB8BE06BEEFB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ea105bb5209cf00c1512f6770736ab8be06beefb"), fInfoLevelId=0x0, lpFileInformation=0x2377390 | out: lpFileInformation=0x2377390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x711c6bbc, ftCreationTime.dwHighDateTime=0x1d2d43f, ftLastAccessTime.dwLowDateTime=0x711c6bbc, ftLastAccessTime.dwHighDateTime=0x1d2d43f, ftLastWriteTime.dwLowDateTime=0x711c6bbc, ftLastWriteTime.dwHighDateTime=0x1d2d43f, nFileSizeHigh=0x0, nFileSizeLow=0x528)) returned 1 [0182.373] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0182.373] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EA105BB5209CF00C1512F6770736AB8BE06BEEFB", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EA105BB5209CF00C1512F6770736AB8BE06BEEFB", lpFilePart=0x0) returned 0x85 [0182.373] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0182.374] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EA105BB5209CF00C1512F6770736AB8BE06BEEFB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ea105bb5209cf00c1512f6770736ab8be06beefb"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0182.374] GetFileType (hFile=0x444) returned 0x1 [0182.374] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0182.374] GetFileType (hFile=0x444) returned 0x1 [0182.374] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x528 [0182.374] ReadFile (in: hFile=0x444, lpBuffer=0x2377cd0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x2377cd0*, lpNumberOfBytesRead=0x3be5c8*=0x528, lpOverlapped=0x0) returned 1 [0182.391] CloseHandle (hObject=0x444) returned 1 [0182.450] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EA105BB5209CF00C1512F6770736AB8BE06BEEFB", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EA105BB5209CF00C1512F6770736AB8BE06BEEFB", lpFilePart=0x0) returned 0x85 [0182.450] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0182.450] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EA105BB5209CF00C1512F6770736AB8BE06BEEFB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ea105bb5209cf00c1512f6770736ab8be06beefb"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0182.453] GetFileType (hFile=0x444) returned 0x1 [0182.453] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0182.453] GetFileType (hFile=0x444) returned 0x1 [0182.453] WriteFile (in: hFile=0x444, lpBuffer=0x21f0760*, nNumberOfBytesToWrite=0x530, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x21f0760*, lpNumberOfBytesWritten=0x3be4d8*=0x530, lpOverlapped=0x0) returned 1 [0182.454] CloseHandle (hObject=0x444) returned 1 [0182.454] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EA105BB5209CF00C1512F6770736AB8BE06BEEFB", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EA105BB5209CF00C1512F6770736AB8BE06BEEFB", lpFilePart=0x0) returned 0x85 [0182.454] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EA105BB5209CF00C1512F6770736AB8BE06BEEFB.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EA105BB5209CF00C1512F6770736AB8BE06BEEFB.xuy", lpFilePart=0x0) returned 0x89 [0182.454] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0182.454] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EA105BB5209CF00C1512F6770736AB8BE06BEEFB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ea105bb5209cf00c1512f6770736ab8be06beefb"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x711c6bbc, ftCreationTime.dwHighDateTime=0x1d2d43f, ftLastAccessTime.dwLowDateTime=0x711c6bbc, ftLastAccessTime.dwHighDateTime=0x1d2d43f, ftLastWriteTime.dwLowDateTime=0x5899f034, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x530)) returned 1 [0182.454] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0182.454] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EA105BB5209CF00C1512F6770736AB8BE06BEEFB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ea105bb5209cf00c1512f6770736ab8be06beefb"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EA105BB5209CF00C1512F6770736AB8BE06BEEFB.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ea105bb5209cf00c1512f6770736ab8be06beefb.xuy")) returned 1 [0182.456] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EA3C336104D249AB57E7DFBD70A5612FBF89BA5C", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EA3C336104D249AB57E7DFBD70A5612FBF89BA5C", lpFilePart=0x0) returned 0x85 [0182.456] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0182.456] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EA3C336104D249AB57E7DFBD70A5612FBF89BA5C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ea3c336104d249ab57e7dfbd70a5612fbf89ba5c"), fInfoLevelId=0x0, lpFileInformation=0x21f1b20 | out: lpFileInformation=0x21f1b20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89030211, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x89030211, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x89032914, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x1593)) returned 1 [0182.456] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0182.457] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EA3C336104D249AB57E7DFBD70A5612FBF89BA5C", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EA3C336104D249AB57E7DFBD70A5612FBF89BA5C", lpFilePart=0x0) returned 0x85 [0182.457] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0182.457] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EA3C336104D249AB57E7DFBD70A5612FBF89BA5C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ea3c336104d249ab57e7dfbd70a5612fbf89ba5c"), fInfoLevelId=0x0, lpFileInformation=0x21f1d20 | out: lpFileInformation=0x21f1d20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89030211, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x89030211, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x89032914, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x1593)) returned 1 [0182.457] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0182.457] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EA3C336104D249AB57E7DFBD70A5612FBF89BA5C", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EA3C336104D249AB57E7DFBD70A5612FBF89BA5C", lpFilePart=0x0) returned 0x85 [0182.457] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0182.457] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EA3C336104D249AB57E7DFBD70A5612FBF89BA5C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ea3c336104d249ab57e7dfbd70a5612fbf89ba5c"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0182.459] GetFileType (hFile=0x444) returned 0x1 [0182.459] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0182.459] GetFileType (hFile=0x444) returned 0x1 [0182.459] ReadFile (in: hFile=0x444, lpBuffer=0x21f4250, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x21f4250*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0182.487] CloseHandle (hObject=0x444) returned 1 [0182.487] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EA3C336104D249AB57E7DFBD70A5612FBF89BA5C", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EA3C336104D249AB57E7DFBD70A5612FBF89BA5C", lpFilePart=0x0) returned 0x85 [0182.487] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0182.488] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EA3C336104D249AB57E7DFBD70A5612FBF89BA5C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ea3c336104d249ab57e7dfbd70a5612fbf89ba5c"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0182.488] GetFileType (hFile=0x444) returned 0x1 [0182.488] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0182.488] GetFileType (hFile=0x444) returned 0x1 [0182.488] WriteFile (in: hFile=0x444, lpBuffer=0x21f1f00*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x21f1f00*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0182.488] CloseHandle (hObject=0x444) returned 1 [0182.488] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EA3C336104D249AB57E7DFBD70A5612FBF89BA5C", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EA3C336104D249AB57E7DFBD70A5612FBF89BA5C", lpFilePart=0x0) returned 0x85 [0182.488] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EA3C336104D249AB57E7DFBD70A5612FBF89BA5C.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EA3C336104D249AB57E7DFBD70A5612FBF89BA5C.xuy", lpFilePart=0x0) returned 0x89 [0182.488] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0182.488] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EA3C336104D249AB57E7DFBD70A5612FBF89BA5C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ea3c336104d249ab57e7dfbd70a5612fbf89ba5c"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89030211, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x89030211, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x589eb503, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0182.488] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0182.489] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EA3C336104D249AB57E7DFBD70A5612FBF89BA5C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ea3c336104d249ab57e7dfbd70a5612fbf89ba5c"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EA3C336104D249AB57E7DFBD70A5612FBF89BA5C.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ea3c336104d249ab57e7dfbd70a5612fbf89ba5c.xuy")) returned 1 [0182.490] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EA61752C1CEB35C2574DD80871FFCD4B582B8FB3", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EA61752C1CEB35C2574DD80871FFCD4B582B8FB3", lpFilePart=0x0) returned 0x85 [0182.490] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0182.490] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EA61752C1CEB35C2574DD80871FFCD4B582B8FB3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ea61752c1ceb35c2574dd80871ffcd4b582b8fb3"), fInfoLevelId=0x0, lpFileInformation=0x22707f8 | out: lpFileInformation=0x22707f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61551d8c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x61551d8c, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x61551d8c, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x1165)) returned 1 [0182.490] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0182.490] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EA61752C1CEB35C2574DD80871FFCD4B582B8FB3", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EA61752C1CEB35C2574DD80871FFCD4B582B8FB3", lpFilePart=0x0) returned 0x85 [0182.490] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0182.490] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EA61752C1CEB35C2574DD80871FFCD4B582B8FB3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ea61752c1ceb35c2574dd80871ffcd4b582b8fb3"), fInfoLevelId=0x0, lpFileInformation=0x22709f8 | out: lpFileInformation=0x22709f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61551d8c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x61551d8c, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x61551d8c, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x1165)) returned 1 [0182.491] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0182.491] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EA61752C1CEB35C2574DD80871FFCD4B582B8FB3", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EA61752C1CEB35C2574DD80871FFCD4B582B8FB3", lpFilePart=0x0) returned 0x85 [0182.491] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0182.491] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EA61752C1CEB35C2574DD80871FFCD4B582B8FB3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ea61752c1ceb35c2574dd80871ffcd4b582b8fb3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0182.492] GetFileType (hFile=0x444) returned 0x1 [0182.492] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0182.492] GetFileType (hFile=0x444) returned 0x1 [0182.492] ReadFile (in: hFile=0x444, lpBuffer=0x2272f28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x2272f28*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0182.523] CloseHandle (hObject=0x444) returned 1 [0182.523] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EA61752C1CEB35C2574DD80871FFCD4B582B8FB3", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EA61752C1CEB35C2574DD80871FFCD4B582B8FB3", lpFilePart=0x0) returned 0x85 [0182.523] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0182.523] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EA61752C1CEB35C2574DD80871FFCD4B582B8FB3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ea61752c1ceb35c2574dd80871ffcd4b582b8fb3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0182.523] GetFileType (hFile=0x444) returned 0x1 [0182.523] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0182.523] GetFileType (hFile=0x444) returned 0x1 [0182.524] WriteFile (in: hFile=0x444, lpBuffer=0x2270bd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x2270bd8*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0182.524] CloseHandle (hObject=0x444) returned 1 [0182.524] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EA61752C1CEB35C2574DD80871FFCD4B582B8FB3", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EA61752C1CEB35C2574DD80871FFCD4B582B8FB3", lpFilePart=0x0) returned 0x85 [0182.524] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EA61752C1CEB35C2574DD80871FFCD4B582B8FB3.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EA61752C1CEB35C2574DD80871FFCD4B582B8FB3.xuy", lpFilePart=0x0) returned 0x89 [0182.524] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0182.524] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EA61752C1CEB35C2574DD80871FFCD4B582B8FB3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ea61752c1ceb35c2574dd80871ffcd4b582b8fb3"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61551d8c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x61551d8c, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x58a37a6c, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0182.524] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0182.524] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EA61752C1CEB35C2574DD80871FFCD4B582B8FB3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ea61752c1ceb35c2574dd80871ffcd4b582b8fb3"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EA61752C1CEB35C2574DD80871FFCD4B582B8FB3.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ea61752c1ceb35c2574dd80871ffcd4b582b8fb3.xuy")) returned 1 [0182.526] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EA922C644AED3E82EF17A4212ACB67BF66BD50EC", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EA922C644AED3E82EF17A4212ACB67BF66BD50EC", lpFilePart=0x0) returned 0x85 [0182.526] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0182.526] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EA922C644AED3E82EF17A4212ACB67BF66BD50EC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ea922c644aed3e82ef17a4212acb67bf66bd50ec"), fInfoLevelId=0x0, lpFileInformation=0x22ef4d0 | out: lpFileInformation=0x22ef4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88a06e1f, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x88a06e1f, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x8b6a6f56, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x13c0)) returned 1 [0182.526] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0182.526] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EA922C644AED3E82EF17A4212ACB67BF66BD50EC", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EA922C644AED3E82EF17A4212ACB67BF66BD50EC", lpFilePart=0x0) returned 0x85 [0182.526] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0182.526] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EA922C644AED3E82EF17A4212ACB67BF66BD50EC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ea922c644aed3e82ef17a4212acb67bf66bd50ec"), fInfoLevelId=0x0, lpFileInformation=0x22ef6d0 | out: lpFileInformation=0x22ef6d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88a06e1f, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x88a06e1f, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x8b6a6f56, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x13c0)) returned 1 [0182.526] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0182.526] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EA922C644AED3E82EF17A4212ACB67BF66BD50EC", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EA922C644AED3E82EF17A4212ACB67BF66BD50EC", lpFilePart=0x0) returned 0x85 [0182.526] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0182.526] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EA922C644AED3E82EF17A4212ACB67BF66BD50EC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ea922c644aed3e82ef17a4212acb67bf66bd50ec"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0182.527] GetFileType (hFile=0x444) returned 0x1 [0182.528] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0182.528] GetFileType (hFile=0x444) returned 0x1 [0182.528] ReadFile (in: hFile=0x444, lpBuffer=0x22f1c00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x22f1c00*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0182.540] CloseHandle (hObject=0x444) returned 1 [0182.540] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EA922C644AED3E82EF17A4212ACB67BF66BD50EC", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EA922C644AED3E82EF17A4212ACB67BF66BD50EC", lpFilePart=0x0) returned 0x85 [0182.540] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0182.540] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EA922C644AED3E82EF17A4212ACB67BF66BD50EC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ea922c644aed3e82ef17a4212acb67bf66bd50ec"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0182.540] GetFileType (hFile=0x444) returned 0x1 [0182.540] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0182.540] GetFileType (hFile=0x444) returned 0x1 [0182.540] WriteFile (in: hFile=0x444, lpBuffer=0x22ef8b0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x22ef8b0*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0182.541] CloseHandle (hObject=0x444) returned 1 [0182.541] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EA922C644AED3E82EF17A4212ACB67BF66BD50EC", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EA922C644AED3E82EF17A4212ACB67BF66BD50EC", lpFilePart=0x0) returned 0x85 [0182.541] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EA922C644AED3E82EF17A4212ACB67BF66BD50EC.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EA922C644AED3E82EF17A4212ACB67BF66BD50EC.xuy", lpFilePart=0x0) returned 0x89 [0182.541] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0182.541] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EA922C644AED3E82EF17A4212ACB67BF66BD50EC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ea922c644aed3e82ef17a4212acb67bf66bd50ec"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88a06e1f, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x88a06e1f, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x58a5dc13, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0182.541] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0182.541] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EA922C644AED3E82EF17A4212ACB67BF66BD50EC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ea922c644aed3e82ef17a4212acb67bf66bd50ec"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EA922C644AED3E82EF17A4212ACB67BF66BD50EC.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ea922c644aed3e82ef17a4212acb67bf66bd50ec.xuy")) returned 1 [0182.542] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EB13FD121DCE5708F031430C9DD99D6A34564F9C", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EB13FD121DCE5708F031430C9DD99D6A34564F9C", lpFilePart=0x0) returned 0x85 [0182.542] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0182.542] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EB13FD121DCE5708F031430C9DD99D6A34564F9C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\eb13fd121dce5708f031430c9dd99d6a34564f9c"), fInfoLevelId=0x0, lpFileInformation=0x236e1a8 | out: lpFileInformation=0x236e1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61577ff1, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x61577ff1, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x61577ff1, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x1139)) returned 1 [0182.543] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0182.543] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EB13FD121DCE5708F031430C9DD99D6A34564F9C", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EB13FD121DCE5708F031430C9DD99D6A34564F9C", lpFilePart=0x0) returned 0x85 [0182.543] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0182.543] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EB13FD121DCE5708F031430C9DD99D6A34564F9C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\eb13fd121dce5708f031430c9dd99d6a34564f9c"), fInfoLevelId=0x0, lpFileInformation=0x236e3a8 | out: lpFileInformation=0x236e3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61577ff1, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x61577ff1, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x61577ff1, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x1139)) returned 1 [0182.543] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0182.543] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EB13FD121DCE5708F031430C9DD99D6A34564F9C", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EB13FD121DCE5708F031430C9DD99D6A34564F9C", lpFilePart=0x0) returned 0x85 [0182.543] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0182.543] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EB13FD121DCE5708F031430C9DD99D6A34564F9C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\eb13fd121dce5708f031430c9dd99d6a34564f9c"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0182.544] GetFileType (hFile=0x444) returned 0x1 [0182.544] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0182.544] GetFileType (hFile=0x444) returned 0x1 [0182.544] ReadFile (in: hFile=0x444, lpBuffer=0x23708d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x23708d8*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0182.758] CloseHandle (hObject=0x444) returned 1 [0182.758] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EB13FD121DCE5708F031430C9DD99D6A34564F9C", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EB13FD121DCE5708F031430C9DD99D6A34564F9C", lpFilePart=0x0) returned 0x85 [0182.758] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0182.758] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EB13FD121DCE5708F031430C9DD99D6A34564F9C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\eb13fd121dce5708f031430c9dd99d6a34564f9c"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0182.758] GetFileType (hFile=0x444) returned 0x1 [0182.758] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0182.758] GetFileType (hFile=0x444) returned 0x1 [0182.758] WriteFile (in: hFile=0x444, lpBuffer=0x2188818*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x2188818*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0182.759] CloseHandle (hObject=0x444) returned 1 [0182.759] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EB13FD121DCE5708F031430C9DD99D6A34564F9C", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EB13FD121DCE5708F031430C9DD99D6A34564F9C", lpFilePart=0x0) returned 0x85 [0182.759] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EB13FD121DCE5708F031430C9DD99D6A34564F9C.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EB13FD121DCE5708F031430C9DD99D6A34564F9C.xuy", lpFilePart=0x0) returned 0x89 [0182.759] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0182.759] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EB13FD121DCE5708F031430C9DD99D6A34564F9C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\eb13fd121dce5708f031430c9dd99d6a34564f9c"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61577ff1, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x61577ff1, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x58c73c3f, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0182.759] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0182.759] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EB13FD121DCE5708F031430C9DD99D6A34564F9C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\eb13fd121dce5708f031430c9dd99d6a34564f9c"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EB13FD121DCE5708F031430C9DD99D6A34564F9C.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\eb13fd121dce5708f031430c9dd99d6a34564f9c.xuy")) returned 1 [0182.760] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EBA2828ADBAE591AC642EBD9411C1564521B33FF", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EBA2828ADBAE591AC642EBD9411C1564521B33FF", lpFilePart=0x0) returned 0x85 [0182.760] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0182.760] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EBA2828ADBAE591AC642EBD9411C1564521B33FF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\eba2828adbae591ac642ebd9411c1564521b33ff"), fInfoLevelId=0x0, lpFileInformation=0x21efb10 | out: lpFileInformation=0x21efb10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61577ff1, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x61577ff1, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x61577ff1, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x1137)) returned 1 [0182.761] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0182.761] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EBA2828ADBAE591AC642EBD9411C1564521B33FF", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EBA2828ADBAE591AC642EBD9411C1564521B33FF", lpFilePart=0x0) returned 0x85 [0182.761] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0182.761] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EBA2828ADBAE591AC642EBD9411C1564521B33FF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\eba2828adbae591ac642ebd9411c1564521b33ff"), fInfoLevelId=0x0, lpFileInformation=0x21efd10 | out: lpFileInformation=0x21efd10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61577ff1, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x61577ff1, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x61577ff1, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x1137)) returned 1 [0182.761] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0182.761] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EBA2828ADBAE591AC642EBD9411C1564521B33FF", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EBA2828ADBAE591AC642EBD9411C1564521B33FF", lpFilePart=0x0) returned 0x85 [0182.761] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0182.761] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EBA2828ADBAE591AC642EBD9411C1564521B33FF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\eba2828adbae591ac642ebd9411c1564521b33ff"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0182.762] GetFileType (hFile=0x444) returned 0x1 [0182.762] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0182.762] GetFileType (hFile=0x444) returned 0x1 [0182.762] ReadFile (in: hFile=0x444, lpBuffer=0x21f2240, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x21f2240*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0182.793] CloseHandle (hObject=0x444) returned 1 [0182.793] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EBA2828ADBAE591AC642EBD9411C1564521B33FF", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EBA2828ADBAE591AC642EBD9411C1564521B33FF", lpFilePart=0x0) returned 0x85 [0182.793] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0182.793] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EBA2828ADBAE591AC642EBD9411C1564521B33FF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\eba2828adbae591ac642ebd9411c1564521b33ff"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0182.793] GetFileType (hFile=0x444) returned 0x1 [0182.794] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0182.794] GetFileType (hFile=0x444) returned 0x1 [0182.794] WriteFile (in: hFile=0x444, lpBuffer=0x21efef0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x21efef0*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0182.794] CloseHandle (hObject=0x444) returned 1 [0182.794] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EBA2828ADBAE591AC642EBD9411C1564521B33FF", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EBA2828ADBAE591AC642EBD9411C1564521B33FF", lpFilePart=0x0) returned 0x85 [0182.794] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EBA2828ADBAE591AC642EBD9411C1564521B33FF.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EBA2828ADBAE591AC642EBD9411C1564521B33FF.xuy", lpFilePart=0x0) returned 0x89 [0182.794] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0182.794] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EBA2828ADBAE591AC642EBD9411C1564521B33FF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\eba2828adbae591ac642ebd9411c1564521b33ff"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61577ff1, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x61577ff1, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x58cc0197, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0182.795] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0182.795] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EBA2828ADBAE591AC642EBD9411C1564521B33FF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\eba2828adbae591ac642ebd9411c1564521b33ff"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EBA2828ADBAE591AC642EBD9411C1564521B33FF.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\eba2828adbae591ac642ebd9411c1564521b33ff.xuy")) returned 1 [0182.796] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EBDE98F20367971ABFE20BC912D3FB2E90144C1C", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EBDE98F20367971ABFE20BC912D3FB2E90144C1C", lpFilePart=0x0) returned 0x85 [0182.796] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0182.796] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EBDE98F20367971ABFE20BC912D3FB2E90144C1C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ebde98f20367971abfe20bc912d3fb2e90144c1c"), fInfoLevelId=0x0, lpFileInformation=0x226e7e8 | out: lpFileInformation=0x226e7e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x480f8d9f, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x480f8d9f, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x480f8d9f, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0x139a)) returned 1 [0182.796] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0182.796] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EBDE98F20367971ABFE20BC912D3FB2E90144C1C", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EBDE98F20367971ABFE20BC912D3FB2E90144C1C", lpFilePart=0x0) returned 0x85 [0182.796] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0182.796] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EBDE98F20367971ABFE20BC912D3FB2E90144C1C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ebde98f20367971abfe20bc912d3fb2e90144c1c"), fInfoLevelId=0x0, lpFileInformation=0x226e9e8 | out: lpFileInformation=0x226e9e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x480f8d9f, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x480f8d9f, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x480f8d9f, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0x139a)) returned 1 [0182.796] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0182.796] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EBDE98F20367971ABFE20BC912D3FB2E90144C1C", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EBDE98F20367971ABFE20BC912D3FB2E90144C1C", lpFilePart=0x0) returned 0x85 [0182.796] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0182.797] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EBDE98F20367971ABFE20BC912D3FB2E90144C1C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ebde98f20367971abfe20bc912d3fb2e90144c1c"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0182.797] GetFileType (hFile=0x444) returned 0x1 [0182.797] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0182.797] GetFileType (hFile=0x444) returned 0x1 [0182.798] ReadFile (in: hFile=0x444, lpBuffer=0x2270f18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x2270f18*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0182.819] CloseHandle (hObject=0x444) returned 1 [0182.819] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EBDE98F20367971ABFE20BC912D3FB2E90144C1C", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EBDE98F20367971ABFE20BC912D3FB2E90144C1C", lpFilePart=0x0) returned 0x85 [0182.819] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0182.819] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EBDE98F20367971ABFE20BC912D3FB2E90144C1C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ebde98f20367971abfe20bc912d3fb2e90144c1c"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0182.820] GetFileType (hFile=0x444) returned 0x1 [0182.820] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0182.820] GetFileType (hFile=0x444) returned 0x1 [0182.820] WriteFile (in: hFile=0x444, lpBuffer=0x226ebc8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x226ebc8*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0182.820] CloseHandle (hObject=0x444) returned 1 [0182.823] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EBDE98F20367971ABFE20BC912D3FB2E90144C1C", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EBDE98F20367971ABFE20BC912D3FB2E90144C1C", lpFilePart=0x0) returned 0x85 [0182.823] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EBDE98F20367971ABFE20BC912D3FB2E90144C1C.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EBDE98F20367971ABFE20BC912D3FB2E90144C1C.xuy", lpFilePart=0x0) returned 0x89 [0182.823] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0182.823] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EBDE98F20367971ABFE20BC912D3FB2E90144C1C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ebde98f20367971abfe20bc912d3fb2e90144c1c"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x480f8d9f, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x480f8d9f, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x58d0ca2c, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0182.823] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0182.823] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EBDE98F20367971ABFE20BC912D3FB2E90144C1C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ebde98f20367971abfe20bc912d3fb2e90144c1c"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EBDE98F20367971ABFE20BC912D3FB2E90144C1C.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ebde98f20367971abfe20bc912d3fb2e90144c1c.xuy")) returned 1 [0182.824] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\ED0CB237A7670F7783DE11F3AD0107C16522D303", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\ED0CB237A7670F7783DE11F3AD0107C16522D303", lpFilePart=0x0) returned 0x85 [0182.824] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0182.824] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\ED0CB237A7670F7783DE11F3AD0107C16522D303" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ed0cb237a7670f7783de11f3ad0107c16522d303"), fInfoLevelId=0x0, lpFileInformation=0x22ed4c0 | out: lpFileInformation=0x22ed4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46172872, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x46172872, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x46172872, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0x13d6)) returned 1 [0182.825] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0182.825] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\ED0CB237A7670F7783DE11F3AD0107C16522D303", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\ED0CB237A7670F7783DE11F3AD0107C16522D303", lpFilePart=0x0) returned 0x85 [0182.825] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0182.825] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\ED0CB237A7670F7783DE11F3AD0107C16522D303" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ed0cb237a7670f7783de11f3ad0107c16522d303"), fInfoLevelId=0x0, lpFileInformation=0x22ed6c0 | out: lpFileInformation=0x22ed6c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46172872, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x46172872, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x46172872, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0x13d6)) returned 1 [0182.825] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0182.825] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\ED0CB237A7670F7783DE11F3AD0107C16522D303", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\ED0CB237A7670F7783DE11F3AD0107C16522D303", lpFilePart=0x0) returned 0x85 [0182.825] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0182.825] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\ED0CB237A7670F7783DE11F3AD0107C16522D303" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ed0cb237a7670f7783de11f3ad0107c16522d303"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0182.839] GetFileType (hFile=0x444) returned 0x1 [0182.839] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0182.839] GetFileType (hFile=0x444) returned 0x1 [0182.839] ReadFile (in: hFile=0x444, lpBuffer=0x22efbf0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x22efbf0*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0182.851] CloseHandle (hObject=0x444) returned 1 [0182.851] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\ED0CB237A7670F7783DE11F3AD0107C16522D303", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\ED0CB237A7670F7783DE11F3AD0107C16522D303", lpFilePart=0x0) returned 0x85 [0182.851] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0182.851] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\ED0CB237A7670F7783DE11F3AD0107C16522D303" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ed0cb237a7670f7783de11f3ad0107c16522d303"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0182.851] GetFileType (hFile=0x444) returned 0x1 [0182.851] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0182.851] GetFileType (hFile=0x444) returned 0x1 [0182.851] WriteFile (in: hFile=0x444, lpBuffer=0x22ed8a0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x22ed8a0*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0182.851] CloseHandle (hObject=0x444) returned 1 [0182.852] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\ED0CB237A7670F7783DE11F3AD0107C16522D303", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\ED0CB237A7670F7783DE11F3AD0107C16522D303", lpFilePart=0x0) returned 0x85 [0182.852] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\ED0CB237A7670F7783DE11F3AD0107C16522D303.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\ED0CB237A7670F7783DE11F3AD0107C16522D303.xuy", lpFilePart=0x0) returned 0x89 [0182.852] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0182.852] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\ED0CB237A7670F7783DE11F3AD0107C16522D303" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ed0cb237a7670f7783de11f3ad0107c16522d303"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46172872, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x46172872, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x58d589b7, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0182.852] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0182.852] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\ED0CB237A7670F7783DE11F3AD0107C16522D303" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ed0cb237a7670f7783de11f3ad0107c16522d303"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\ED0CB237A7670F7783DE11F3AD0107C16522D303.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ed0cb237a7670f7783de11f3ad0107c16522d303.xuy")) returned 1 [0182.854] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\ED12013E991E9ED93611E7886D1F2F0C4C05BC42", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\ED12013E991E9ED93611E7886D1F2F0C4C05BC42", lpFilePart=0x0) returned 0x85 [0182.854] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0182.854] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\ED12013E991E9ED93611E7886D1F2F0C4C05BC42" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ed12013e991e9ed93611e7886d1f2f0c4c05bc42"), fInfoLevelId=0x0, lpFileInformation=0x236c198 | out: lpFileInformation=0x236c198*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74cbff94, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x74cbff94, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x74cbff94, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0x528)) returned 1 [0182.854] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0182.854] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\ED12013E991E9ED93611E7886D1F2F0C4C05BC42", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\ED12013E991E9ED93611E7886D1F2F0C4C05BC42", lpFilePart=0x0) returned 0x85 [0182.854] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0182.854] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\ED12013E991E9ED93611E7886D1F2F0C4C05BC42" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ed12013e991e9ed93611e7886d1f2f0c4c05bc42"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0182.854] GetFileType (hFile=0x444) returned 0x1 [0182.854] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0182.854] GetFileType (hFile=0x444) returned 0x1 [0182.854] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x528 [0182.854] ReadFile (in: hFile=0x444, lpBuffer=0x236cad8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x236cad8*, lpNumberOfBytesRead=0x3be5c8*=0x528, lpOverlapped=0x0) returned 1 [0182.865] CloseHandle (hObject=0x444) returned 1 [0182.917] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\ED12013E991E9ED93611E7886D1F2F0C4C05BC42", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\ED12013E991E9ED93611E7886D1F2F0C4C05BC42", lpFilePart=0x0) returned 0x85 [0182.917] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0182.917] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\ED12013E991E9ED93611E7886D1F2F0C4C05BC42" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ed12013e991e9ed93611e7886d1f2f0c4c05bc42"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0182.918] GetFileType (hFile=0x444) returned 0x1 [0182.918] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0182.919] GetFileType (hFile=0x444) returned 0x1 [0182.919] WriteFile (in: hFile=0x444, lpBuffer=0x21e2880*, nNumberOfBytesToWrite=0x530, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x21e2880*, lpNumberOfBytesWritten=0x3be4d8*=0x530, lpOverlapped=0x0) returned 1 [0182.920] CloseHandle (hObject=0x444) returned 1 [0182.920] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\ED12013E991E9ED93611E7886D1F2F0C4C05BC42", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\ED12013E991E9ED93611E7886D1F2F0C4C05BC42", lpFilePart=0x0) returned 0x85 [0182.920] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\ED12013E991E9ED93611E7886D1F2F0C4C05BC42.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\ED12013E991E9ED93611E7886D1F2F0C4C05BC42.xuy", lpFilePart=0x0) returned 0x89 [0182.920] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0182.920] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\ED12013E991E9ED93611E7886D1F2F0C4C05BC42" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ed12013e991e9ed93611e7886d1f2f0c4c05bc42"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74cbff94, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x74cbff94, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x58e17674, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x530)) returned 1 [0182.920] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0182.920] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\ED12013E991E9ED93611E7886D1F2F0C4C05BC42" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ed12013e991e9ed93611e7886d1f2f0c4c05bc42"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\ED12013E991E9ED93611E7886D1F2F0C4C05BC42.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ed12013e991e9ed93611e7886d1f2f0c4c05bc42.xuy")) returned 1 [0182.921] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EDAE6150300842896A3CDEBD36FCA29DBBE012E6", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EDAE6150300842896A3CDEBD36FCA29DBBE012E6", lpFilePart=0x0) returned 0x85 [0182.921] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0182.921] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EDAE6150300842896A3CDEBD36FCA29DBBE012E6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\edae6150300842896a3cdebd36fca29dbbe012e6"), fInfoLevelId=0x0, lpFileInformation=0x21e3c40 | out: lpFileInformation=0x21e3c40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3390670, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc3390670, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xc3390670, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x4d2)) returned 1 [0182.922] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0182.922] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EDAE6150300842896A3CDEBD36FCA29DBBE012E6", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EDAE6150300842896A3CDEBD36FCA29DBBE012E6", lpFilePart=0x0) returned 0x85 [0182.922] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0182.922] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EDAE6150300842896A3CDEBD36FCA29DBBE012E6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\edae6150300842896a3cdebd36fca29dbbe012e6"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0182.922] GetFileType (hFile=0x444) returned 0x1 [0182.922] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0182.922] GetFileType (hFile=0x444) returned 0x1 [0182.922] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x4d2 [0182.922] ReadFile (in: hFile=0x444, lpBuffer=0x21e4530, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x21e4530*, lpNumberOfBytesRead=0x3be5c8*=0x4d2, lpOverlapped=0x0) returned 1 [0182.927] CloseHandle (hObject=0x444) returned 1 [0182.937] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EDAE6150300842896A3CDEBD36FCA29DBBE012E6", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EDAE6150300842896A3CDEBD36FCA29DBBE012E6", lpFilePart=0x0) returned 0x85 [0182.937] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0182.937] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EDAE6150300842896A3CDEBD36FCA29DBBE012E6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\edae6150300842896a3cdebd36fca29dbbe012e6"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0182.939] GetFileType (hFile=0x444) returned 0x1 [0182.939] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0182.939] GetFileType (hFile=0x444) returned 0x1 [0182.939] WriteFile (in: hFile=0x444, lpBuffer=0x225ce28*, nNumberOfBytesToWrite=0x4e0, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x225ce28*, lpNumberOfBytesWritten=0x3be4d8*=0x4e0, lpOverlapped=0x0) returned 1 [0182.940] CloseHandle (hObject=0x444) returned 1 [0182.940] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EDAE6150300842896A3CDEBD36FCA29DBBE012E6", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EDAE6150300842896A3CDEBD36FCA29DBBE012E6", lpFilePart=0x0) returned 0x85 [0182.940] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EDAE6150300842896A3CDEBD36FCA29DBBE012E6.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EDAE6150300842896A3CDEBD36FCA29DBBE012E6.xuy", lpFilePart=0x0) returned 0x89 [0182.940] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0182.940] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EDAE6150300842896A3CDEBD36FCA29DBBE012E6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\edae6150300842896a3cdebd36fca29dbbe012e6"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3390670, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc3390670, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x58e3daa1, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x4e0)) returned 1 [0182.940] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0182.940] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EDAE6150300842896A3CDEBD36FCA29DBBE012E6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\edae6150300842896a3cdebd36fca29dbbe012e6"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EDAE6150300842896A3CDEBD36FCA29DBBE012E6.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\edae6150300842896a3cdebd36fca29dbbe012e6.xuy")) returned 1 [0182.942] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EDB4B1C94F69D79B0C0884B50A1124CF6F2F0828", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EDB4B1C94F69D79B0C0884B50A1124CF6F2F0828", lpFilePart=0x0) returned 0x85 [0182.942] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0182.942] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EDB4B1C94F69D79B0C0884B50A1124CF6F2F0828" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\edb4b1c94f69d79b0c0884b50a1124cf6f2f0828"), fInfoLevelId=0x0, lpFileInformation=0x225e1e8 | out: lpFileInformation=0x225e1e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x548d72f1, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x548d72f1, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x548d72f1, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x17108)) returned 1 [0182.942] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0182.942] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EDB4B1C94F69D79B0C0884B50A1124CF6F2F0828", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EDB4B1C94F69D79B0C0884B50A1124CF6F2F0828", lpFilePart=0x0) returned 0x85 [0182.942] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0182.942] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EDB4B1C94F69D79B0C0884B50A1124CF6F2F0828" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\edb4b1c94f69d79b0c0884b50a1124cf6f2f0828"), fInfoLevelId=0x0, lpFileInformation=0x225e3e8 | out: lpFileInformation=0x225e3e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x548d72f1, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x548d72f1, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x548d72f1, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x17108)) returned 1 [0182.942] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0182.942] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EDB4B1C94F69D79B0C0884B50A1124CF6F2F0828", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EDB4B1C94F69D79B0C0884B50A1124CF6F2F0828", lpFilePart=0x0) returned 0x85 [0182.942] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0182.942] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EDB4B1C94F69D79B0C0884B50A1124CF6F2F0828" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\edb4b1c94f69d79b0c0884b50a1124cf6f2f0828"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0182.943] GetFileType (hFile=0x444) returned 0x1 [0182.943] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0182.943] GetFileType (hFile=0x444) returned 0x1 [0182.943] ReadFile (in: hFile=0x444, lpBuffer=0x2260918, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x2260918*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0182.971] CloseHandle (hObject=0x444) returned 1 [0182.977] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EDB4B1C94F69D79B0C0884B50A1124CF6F2F0828", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EDB4B1C94F69D79B0C0884B50A1124CF6F2F0828", lpFilePart=0x0) returned 0x85 [0182.977] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0182.977] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EDB4B1C94F69D79B0C0884B50A1124CF6F2F0828" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\edb4b1c94f69d79b0c0884b50a1124cf6f2f0828"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0182.977] GetFileType (hFile=0x444) returned 0x1 [0182.977] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0182.977] GetFileType (hFile=0x444) returned 0x1 [0182.977] WriteFile (in: hFile=0x444, lpBuffer=0x225e5c8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x225e5c8*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0182.978] CloseHandle (hObject=0x444) returned 1 [0182.978] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EDB4B1C94F69D79B0C0884B50A1124CF6F2F0828", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EDB4B1C94F69D79B0C0884B50A1124CF6F2F0828", lpFilePart=0x0) returned 0x85 [0182.978] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EDB4B1C94F69D79B0C0884B50A1124CF6F2F0828.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EDB4B1C94F69D79B0C0884B50A1124CF6F2F0828.xuy", lpFilePart=0x0) returned 0x89 [0182.978] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0182.978] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EDB4B1C94F69D79B0C0884B50A1124CF6F2F0828" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\edb4b1c94f69d79b0c0884b50a1124cf6f2f0828"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x548d72f1, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x548d72f1, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x58e8a1f7, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x17108)) returned 1 [0182.978] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0182.978] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EDB4B1C94F69D79B0C0884B50A1124CF6F2F0828" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\edb4b1c94f69d79b0c0884b50a1124cf6f2f0828"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EDB4B1C94F69D79B0C0884B50A1124CF6F2F0828.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\edb4b1c94f69d79b0c0884b50a1124cf6f2f0828.xuy")) returned 1 [0182.979] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EE17AA5E7DDC06372654D04024FD4C4A2E7F813D", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EE17AA5E7DDC06372654D04024FD4C4A2E7F813D", lpFilePart=0x0) returned 0x85 [0182.979] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0182.979] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EE17AA5E7DDC06372654D04024FD4C4A2E7F813D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ee17aa5e7ddc06372654d04024fd4c4a2e7f813d"), fInfoLevelId=0x0, lpFileInformation=0x22dcec0 | out: lpFileInformation=0x22dcec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x577f6811, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x577f6811, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x5788f124, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xc3b)) returned 1 [0182.980] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0182.980] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EE17AA5E7DDC06372654D04024FD4C4A2E7F813D", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EE17AA5E7DDC06372654D04024FD4C4A2E7F813D", lpFilePart=0x0) returned 0x85 [0182.980] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0182.980] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EE17AA5E7DDC06372654D04024FD4C4A2E7F813D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ee17aa5e7ddc06372654d04024fd4c4a2e7f813d"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0182.980] GetFileType (hFile=0x444) returned 0x1 [0182.980] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0182.980] GetFileType (hFile=0x444) returned 0x1 [0182.980] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xc3b [0182.980] ReadFile (in: hFile=0x444, lpBuffer=0x22ddf18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x22ddf18*, lpNumberOfBytesRead=0x3be5c8*=0xc3b, lpOverlapped=0x0) returned 1 [0182.981] CloseHandle (hObject=0x444) returned 1 [0182.992] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EE17AA5E7DDC06372654D04024FD4C4A2E7F813D", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EE17AA5E7DDC06372654D04024FD4C4A2E7F813D", lpFilePart=0x0) returned 0x85 [0182.992] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0182.992] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EE17AA5E7DDC06372654D04024FD4C4A2E7F813D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ee17aa5e7ddc06372654d04024fd4c4a2e7f813d"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0182.994] GetFileType (hFile=0x444) returned 0x1 [0182.994] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0182.994] GetFileType (hFile=0x444) returned 0x1 [0182.994] WriteFile (in: hFile=0x444, lpBuffer=0x2358ce8*, nNumberOfBytesToWrite=0xc40, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x2358ce8*, lpNumberOfBytesWritten=0x3be4d8*=0xc40, lpOverlapped=0x0) returned 1 [0182.995] CloseHandle (hObject=0x444) returned 1 [0182.995] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EE17AA5E7DDC06372654D04024FD4C4A2E7F813D", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EE17AA5E7DDC06372654D04024FD4C4A2E7F813D", lpFilePart=0x0) returned 0x85 [0182.995] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EE17AA5E7DDC06372654D04024FD4C4A2E7F813D.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EE17AA5E7DDC06372654D04024FD4C4A2E7F813D.xuy", lpFilePart=0x0) returned 0x89 [0182.995] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0182.995] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EE17AA5E7DDC06372654D04024FD4C4A2E7F813D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ee17aa5e7ddc06372654d04024fd4c4a2e7f813d"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x577f6811, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x577f6811, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x58eaff47, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xc40)) returned 1 [0182.995] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0182.995] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EE17AA5E7DDC06372654D04024FD4C4A2E7F813D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ee17aa5e7ddc06372654d04024fd4c4a2e7f813d"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EE17AA5E7DDC06372654D04024FD4C4A2E7F813D.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ee17aa5e7ddc06372654d04024fd4c4a2e7f813d.xuy")) returned 1 [0182.996] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EE5D487A6A7DFA0FE7B50077029FA59CB08AD8D6", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EE5D487A6A7DFA0FE7B50077029FA59CB08AD8D6", lpFilePart=0x0) returned 0x85 [0182.996] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0182.996] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EE5D487A6A7DFA0FE7B50077029FA59CB08AD8D6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ee5d487a6a7dfa0fe7b50077029fa59cb08ad8d6"), fInfoLevelId=0x0, lpFileInformation=0x235a0a8 | out: lpFileInformation=0x235a0a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4e3cc0d, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc4e3cc0d, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xc50c5407, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x37e0)) returned 1 [0182.997] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0182.997] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EE5D487A6A7DFA0FE7B50077029FA59CB08AD8D6", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EE5D487A6A7DFA0FE7B50077029FA59CB08AD8D6", lpFilePart=0x0) returned 0x85 [0182.997] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0182.997] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EE5D487A6A7DFA0FE7B50077029FA59CB08AD8D6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ee5d487a6a7dfa0fe7b50077029fa59cb08ad8d6"), fInfoLevelId=0x0, lpFileInformation=0x235a2a8 | out: lpFileInformation=0x235a2a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4e3cc0d, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc4e3cc0d, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xc50c5407, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x37e0)) returned 1 [0182.997] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0182.997] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EE5D487A6A7DFA0FE7B50077029FA59CB08AD8D6", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EE5D487A6A7DFA0FE7B50077029FA59CB08AD8D6", lpFilePart=0x0) returned 0x85 [0182.997] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0182.997] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EE5D487A6A7DFA0FE7B50077029FA59CB08AD8D6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ee5d487a6a7dfa0fe7b50077029fa59cb08ad8d6"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0183.010] GetFileType (hFile=0x444) returned 0x1 [0183.010] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0183.010] GetFileType (hFile=0x444) returned 0x1 [0183.010] ReadFile (in: hFile=0x444, lpBuffer=0x235c7d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x235c7d8*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0183.075] CloseHandle (hObject=0x444) returned 1 [0183.075] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EE5D487A6A7DFA0FE7B50077029FA59CB08AD8D6", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EE5D487A6A7DFA0FE7B50077029FA59CB08AD8D6", lpFilePart=0x0) returned 0x85 [0183.075] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0183.075] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EE5D487A6A7DFA0FE7B50077029FA59CB08AD8D6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ee5d487a6a7dfa0fe7b50077029fa59cb08ad8d6"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0183.076] GetFileType (hFile=0x444) returned 0x1 [0183.076] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0183.076] GetFileType (hFile=0x444) returned 0x1 [0183.076] WriteFile (in: hFile=0x444, lpBuffer=0x2166260*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x2166260*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0183.076] CloseHandle (hObject=0x444) returned 1 [0183.076] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EE5D487A6A7DFA0FE7B50077029FA59CB08AD8D6", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EE5D487A6A7DFA0FE7B50077029FA59CB08AD8D6", lpFilePart=0x0) returned 0x85 [0183.076] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EE5D487A6A7DFA0FE7B50077029FA59CB08AD8D6.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EE5D487A6A7DFA0FE7B50077029FA59CB08AD8D6.xuy", lpFilePart=0x0) returned 0x89 [0183.076] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0183.076] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EE5D487A6A7DFA0FE7B50077029FA59CB08AD8D6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ee5d487a6a7dfa0fe7b50077029fa59cb08ad8d6"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4e3cc0d, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc4e3cc0d, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x58f94dfc, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x37e0)) returned 1 [0183.076] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0183.076] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EE5D487A6A7DFA0FE7B50077029FA59CB08AD8D6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ee5d487a6a7dfa0fe7b50077029fa59cb08ad8d6"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EE5D487A6A7DFA0FE7B50077029FA59CB08AD8D6.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ee5d487a6a7dfa0fe7b50077029fa59cb08ad8d6.xuy")) returned 1 [0183.077] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EF17A802A840BC510CAB43487DB4AFAEF5BD3DAE", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EF17A802A840BC510CAB43487DB4AFAEF5BD3DAE", lpFilePart=0x0) returned 0x85 [0183.078] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0183.078] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EF17A802A840BC510CAB43487DB4AFAEF5BD3DAE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ef17a802a840bc510cab43487db4afaef5bd3dae"), fInfoLevelId=0x0, lpFileInformation=0x21b9478 | out: lpFileInformation=0x21b9478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x407b7b1b, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x407b7b1b, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x408ba7b8, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x79f8f)) returned 1 [0183.078] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0183.078] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EF17A802A840BC510CAB43487DB4AFAEF5BD3DAE", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EF17A802A840BC510CAB43487DB4AFAEF5BD3DAE", lpFilePart=0x0) returned 0x85 [0183.078] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0183.078] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EF17A802A840BC510CAB43487DB4AFAEF5BD3DAE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ef17a802a840bc510cab43487db4afaef5bd3dae"), fInfoLevelId=0x0, lpFileInformation=0x21b9678 | out: lpFileInformation=0x21b9678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x407b7b1b, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x407b7b1b, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x408ba7b8, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x79f8f)) returned 1 [0183.078] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0183.078] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EF17A802A840BC510CAB43487DB4AFAEF5BD3DAE", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EF17A802A840BC510CAB43487DB4AFAEF5BD3DAE", lpFilePart=0x0) returned 0x85 [0183.078] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0183.078] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EF17A802A840BC510CAB43487DB4AFAEF5BD3DAE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ef17a802a840bc510cab43487db4afaef5bd3dae"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0183.079] GetFileType (hFile=0x444) returned 0x1 [0183.079] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0183.079] GetFileType (hFile=0x444) returned 0x1 [0183.079] ReadFile (in: hFile=0x444, lpBuffer=0x21bbba8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x21bbba8*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0183.099] CloseHandle (hObject=0x444) returned 1 [0183.099] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EF17A802A840BC510CAB43487DB4AFAEF5BD3DAE", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EF17A802A840BC510CAB43487DB4AFAEF5BD3DAE", lpFilePart=0x0) returned 0x85 [0183.099] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0183.099] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EF17A802A840BC510CAB43487DB4AFAEF5BD3DAE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ef17a802a840bc510cab43487db4afaef5bd3dae"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0183.100] GetFileType (hFile=0x444) returned 0x1 [0183.100] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0183.100] GetFileType (hFile=0x444) returned 0x1 [0183.100] WriteFile (in: hFile=0x444, lpBuffer=0x21b9858*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x21b9858*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0183.100] CloseHandle (hObject=0x444) returned 1 [0183.100] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EF17A802A840BC510CAB43487DB4AFAEF5BD3DAE", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EF17A802A840BC510CAB43487DB4AFAEF5BD3DAE", lpFilePart=0x0) returned 0x85 [0183.100] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EF17A802A840BC510CAB43487DB4AFAEF5BD3DAE.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EF17A802A840BC510CAB43487DB4AFAEF5BD3DAE.xuy", lpFilePart=0x0) returned 0x89 [0183.100] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0183.100] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EF17A802A840BC510CAB43487DB4AFAEF5BD3DAE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ef17a802a840bc510cab43487db4afaef5bd3dae"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x407b7b1b, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x407b7b1b, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x58fbb018, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x79f8f)) returned 1 [0183.100] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0183.100] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EF17A802A840BC510CAB43487DB4AFAEF5BD3DAE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ef17a802a840bc510cab43487db4afaef5bd3dae"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EF17A802A840BC510CAB43487DB4AFAEF5BD3DAE.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ef17a802a840bc510cab43487db4afaef5bd3dae.xuy")) returned 1 [0183.102] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EF646B2B4EAAADEED258A28E8075CCB139B02CF1", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EF646B2B4EAAADEED258A28E8075CCB139B02CF1", lpFilePart=0x0) returned 0x85 [0183.102] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0183.102] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EF646B2B4EAAADEED258A28E8075CCB139B02CF1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ef646b2b4eaaadeed258a28e8075ccb139b02cf1"), fInfoLevelId=0x0, lpFileInformation=0x2238150 | out: lpFileInformation=0x2238150*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b8a1c86, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x7b8a1c86, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x9458a87a, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x182aa)) returned 1 [0183.102] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0183.102] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EF646B2B4EAAADEED258A28E8075CCB139B02CF1", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EF646B2B4EAAADEED258A28E8075CCB139B02CF1", lpFilePart=0x0) returned 0x85 [0183.102] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0183.102] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EF646B2B4EAAADEED258A28E8075CCB139B02CF1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ef646b2b4eaaadeed258a28e8075ccb139b02cf1"), fInfoLevelId=0x0, lpFileInformation=0x2238350 | out: lpFileInformation=0x2238350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b8a1c86, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x7b8a1c86, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x9458a87a, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x182aa)) returned 1 [0183.102] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0183.102] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EF646B2B4EAAADEED258A28E8075CCB139B02CF1", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EF646B2B4EAAADEED258A28E8075CCB139B02CF1", lpFilePart=0x0) returned 0x85 [0183.102] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0183.102] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EF646B2B4EAAADEED258A28E8075CCB139B02CF1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ef646b2b4eaaadeed258a28e8075ccb139b02cf1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0183.103] GetFileType (hFile=0x444) returned 0x1 [0183.103] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0183.103] GetFileType (hFile=0x444) returned 0x1 [0183.104] ReadFile (in: hFile=0x444, lpBuffer=0x223a880, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x223a880*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0183.127] CloseHandle (hObject=0x444) returned 1 [0183.127] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EF646B2B4EAAADEED258A28E8075CCB139B02CF1", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EF646B2B4EAAADEED258A28E8075CCB139B02CF1", lpFilePart=0x0) returned 0x85 [0183.127] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0183.127] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EF646B2B4EAAADEED258A28E8075CCB139B02CF1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ef646b2b4eaaadeed258a28e8075ccb139b02cf1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0183.128] GetFileType (hFile=0x444) returned 0x1 [0183.128] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0183.128] GetFileType (hFile=0x444) returned 0x1 [0183.128] WriteFile (in: hFile=0x444, lpBuffer=0x2238530*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x2238530*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0183.128] CloseHandle (hObject=0x444) returned 1 [0183.128] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EF646B2B4EAAADEED258A28E8075CCB139B02CF1", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EF646B2B4EAAADEED258A28E8075CCB139B02CF1", lpFilePart=0x0) returned 0x85 [0183.128] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EF646B2B4EAAADEED258A28E8075CCB139B02CF1.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EF646B2B4EAAADEED258A28E8075CCB139B02CF1.xuy", lpFilePart=0x0) returned 0x89 [0183.128] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0183.128] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EF646B2B4EAAADEED258A28E8075CCB139B02CF1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ef646b2b4eaaadeed258a28e8075ccb139b02cf1"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b8a1c86, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x7b8a1c86, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x590074f1, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x182aa)) returned 1 [0183.128] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0183.128] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EF646B2B4EAAADEED258A28E8075CCB139B02CF1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ef646b2b4eaaadeed258a28e8075ccb139b02cf1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EF646B2B4EAAADEED258A28E8075CCB139B02CF1.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ef646b2b4eaaadeed258a28e8075ccb139b02cf1.xuy")) returned 1 [0183.130] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F02DF5051B5F97B90DA0CC78014AF7D71AE8C94B", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F02DF5051B5F97B90DA0CC78014AF7D71AE8C94B", lpFilePart=0x0) returned 0x85 [0183.130] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0183.130] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F02DF5051B5F97B90DA0CC78014AF7D71AE8C94B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f02df5051b5f97b90da0cc78014af7d71ae8c94b"), fInfoLevelId=0x0, lpFileInformation=0x22b6e28 | out: lpFileInformation=0x22b6e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88b86362, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x88b86362, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x88b92701, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x52a)) returned 1 [0183.130] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0183.130] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F02DF5051B5F97B90DA0CC78014AF7D71AE8C94B", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F02DF5051B5F97B90DA0CC78014AF7D71AE8C94B", lpFilePart=0x0) returned 0x85 [0183.130] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0183.130] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F02DF5051B5F97B90DA0CC78014AF7D71AE8C94B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f02df5051b5f97b90da0cc78014af7d71ae8c94b"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0183.130] GetFileType (hFile=0x444) returned 0x1 [0183.130] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0183.130] GetFileType (hFile=0x444) returned 0x1 [0183.130] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x52a [0183.131] ReadFile (in: hFile=0x444, lpBuffer=0x22b7770, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x22b7770*, lpNumberOfBytesRead=0x3be5c8*=0x52a, lpOverlapped=0x0) returned 1 [0183.142] CloseHandle (hObject=0x444) returned 1 [0183.152] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F02DF5051B5F97B90DA0CC78014AF7D71AE8C94B", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F02DF5051B5F97B90DA0CC78014AF7D71AE8C94B", lpFilePart=0x0) returned 0x85 [0183.152] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0183.152] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F02DF5051B5F97B90DA0CC78014AF7D71AE8C94B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f02df5051b5f97b90da0cc78014af7d71ae8c94b"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0183.154] GetFileType (hFile=0x444) returned 0x1 [0183.154] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0183.155] GetFileType (hFile=0x444) returned 0x1 [0183.155] WriteFile (in: hFile=0x444, lpBuffer=0x23301f0*, nNumberOfBytesToWrite=0x530, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x23301f0*, lpNumberOfBytesWritten=0x3be4d8*=0x530, lpOverlapped=0x0) returned 1 [0183.155] CloseHandle (hObject=0x444) returned 1 [0183.155] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F02DF5051B5F97B90DA0CC78014AF7D71AE8C94B", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F02DF5051B5F97B90DA0CC78014AF7D71AE8C94B", lpFilePart=0x0) returned 0x85 [0183.155] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F02DF5051B5F97B90DA0CC78014AF7D71AE8C94B.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F02DF5051B5F97B90DA0CC78014AF7D71AE8C94B.xuy", lpFilePart=0x0) returned 0x89 [0183.155] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0183.156] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F02DF5051B5F97B90DA0CC78014AF7D71AE8C94B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f02df5051b5f97b90da0cc78014af7d71ae8c94b"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88b86362, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x88b86362, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x5905541b, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x530)) returned 1 [0183.156] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0183.156] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F02DF5051B5F97B90DA0CC78014AF7D71AE8C94B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f02df5051b5f97b90da0cc78014af7d71ae8c94b"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F02DF5051B5F97B90DA0CC78014AF7D71AE8C94B.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f02df5051b5f97b90da0cc78014af7d71ae8c94b.xuy")) returned 1 [0183.157] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F056302C3D66B480F828A6F0588A3A4ABAFBD146", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F056302C3D66B480F828A6F0588A3A4ABAFBD146", lpFilePart=0x0) returned 0x85 [0183.157] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0183.157] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F056302C3D66B480F828A6F0588A3A4ABAFBD146" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f056302c3d66b480f828a6f0588a3a4abafbd146"), fInfoLevelId=0x0, lpFileInformation=0x23315b0 | out: lpFileInformation=0x23315b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8624196b, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x8624196b, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x886a421c, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x1317)) returned 1 [0183.157] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0183.157] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F056302C3D66B480F828A6F0588A3A4ABAFBD146", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F056302C3D66B480F828A6F0588A3A4ABAFBD146", lpFilePart=0x0) returned 0x85 [0183.157] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0183.157] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F056302C3D66B480F828A6F0588A3A4ABAFBD146" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f056302c3d66b480f828a6f0588a3a4abafbd146"), fInfoLevelId=0x0, lpFileInformation=0x23317b0 | out: lpFileInformation=0x23317b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8624196b, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x8624196b, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x886a421c, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x1317)) returned 1 [0183.157] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0183.157] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F056302C3D66B480F828A6F0588A3A4ABAFBD146", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F056302C3D66B480F828A6F0588A3A4ABAFBD146", lpFilePart=0x0) returned 0x85 [0183.158] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0183.158] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F056302C3D66B480F828A6F0588A3A4ABAFBD146" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f056302c3d66b480f828a6f0588a3a4abafbd146"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0183.158] GetFileType (hFile=0x444) returned 0x1 [0183.159] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0183.159] GetFileType (hFile=0x444) returned 0x1 [0183.159] ReadFile (in: hFile=0x444, lpBuffer=0x2333ce0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x2333ce0*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0183.229] CloseHandle (hObject=0x444) returned 1 [0183.229] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F056302C3D66B480F828A6F0588A3A4ABAFBD146", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F056302C3D66B480F828A6F0588A3A4ABAFBD146", lpFilePart=0x0) returned 0x85 [0183.229] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0183.229] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F056302C3D66B480F828A6F0588A3A4ABAFBD146" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f056302c3d66b480f828a6f0588a3a4abafbd146"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0183.229] GetFileType (hFile=0x444) returned 0x1 [0183.229] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0183.229] GetFileType (hFile=0x444) returned 0x1 [0183.229] WriteFile (in: hFile=0x444, lpBuffer=0x2166220*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x2166220*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0183.230] CloseHandle (hObject=0x444) returned 1 [0183.230] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F056302C3D66B480F828A6F0588A3A4ABAFBD146", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F056302C3D66B480F828A6F0588A3A4ABAFBD146", lpFilePart=0x0) returned 0x85 [0183.230] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F056302C3D66B480F828A6F0588A3A4ABAFBD146.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F056302C3D66B480F828A6F0588A3A4ABAFBD146.xuy", lpFilePart=0x0) returned 0x89 [0183.230] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0183.230] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F056302C3D66B480F828A6F0588A3A4ABAFBD146" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f056302c3d66b480f828a6f0588a3a4abafbd146"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8624196b, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x8624196b, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x590ec310, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0183.230] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0183.230] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F056302C3D66B480F828A6F0588A3A4ABAFBD146" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f056302c3d66b480f828a6f0588a3a4abafbd146"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F056302C3D66B480F828A6F0588A3A4ABAFBD146.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f056302c3d66b480f828a6f0588a3a4abafbd146.xuy")) returned 1 [0183.231] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F09C0B6E2651D957218FAB6F53D702A59B66D455", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F09C0B6E2651D957218FAB6F53D702A59B66D455", lpFilePart=0x0) returned 0x85 [0183.231] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0183.232] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F09C0B6E2651D957218FAB6F53D702A59B66D455" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f09c0b6e2651d957218fab6f53d702a59b66d455"), fInfoLevelId=0x0, lpFileInformation=0x21b0230 | out: lpFileInformation=0x21b0230*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x480f8d9f, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x480f8d9f, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x480f8d9f, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0x3d5)) returned 1 [0183.232] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0183.232] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F09C0B6E2651D957218FAB6F53D702A59B66D455", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F09C0B6E2651D957218FAB6F53D702A59B66D455", lpFilePart=0x0) returned 0x85 [0183.232] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0183.232] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F09C0B6E2651D957218FAB6F53D702A59B66D455" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f09c0b6e2651d957218fab6f53d702a59b66d455"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0183.232] GetFileType (hFile=0x444) returned 0x1 [0183.232] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0183.232] GetFileType (hFile=0x444) returned 0x1 [0183.232] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x3d5 [0183.232] ReadFile (in: hFile=0x444, lpBuffer=0x21b0a20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x21b0a20*, lpNumberOfBytesRead=0x3be5c8*=0x3d5, lpOverlapped=0x0) returned 1 [0183.248] CloseHandle (hObject=0x444) returned 1 [0183.258] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F09C0B6E2651D957218FAB6F53D702A59B66D455", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F09C0B6E2651D957218FAB6F53D702A59B66D455", lpFilePart=0x0) returned 0x85 [0183.258] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0183.258] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F09C0B6E2651D957218FAB6F53D702A59B66D455" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f09c0b6e2651d957218fab6f53d702a59b66d455"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0183.260] GetFileType (hFile=0x444) returned 0x1 [0183.260] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0183.260] GetFileType (hFile=0x444) returned 0x1 [0183.260] WriteFile (in: hFile=0x444, lpBuffer=0x2228e18*, nNumberOfBytesToWrite=0x3e0, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x2228e18*, lpNumberOfBytesWritten=0x3be4d8*=0x3e0, lpOverlapped=0x0) returned 1 [0183.261] CloseHandle (hObject=0x444) returned 1 [0183.261] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F09C0B6E2651D957218FAB6F53D702A59B66D455", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F09C0B6E2651D957218FAB6F53D702A59B66D455", lpFilePart=0x0) returned 0x85 [0183.261] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F09C0B6E2651D957218FAB6F53D702A59B66D455.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F09C0B6E2651D957218FAB6F53D702A59B66D455.xuy", lpFilePart=0x0) returned 0x89 [0183.261] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0183.261] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F09C0B6E2651D957218FAB6F53D702A59B66D455" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f09c0b6e2651d957218fab6f53d702a59b66d455"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x480f8d9f, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x480f8d9f, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x591386f3, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x3e0)) returned 1 [0183.261] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0183.261] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F09C0B6E2651D957218FAB6F53D702A59B66D455" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f09c0b6e2651d957218fab6f53d702a59b66d455"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F09C0B6E2651D957218FAB6F53D702A59B66D455.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f09c0b6e2651d957218fab6f53d702a59b66d455.xuy")) returned 1 [0183.278] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F0B0760CA5A4CA1C8E3870F69FF9C6ABAD0D4331", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F0B0760CA5A4CA1C8E3870F69FF9C6ABAD0D4331", lpFilePart=0x0) returned 0x85 [0183.278] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0183.278] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F0B0760CA5A4CA1C8E3870F69FF9C6ABAD0D4331" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f0b0760ca5a4ca1c8e3870f69ff9c6abad0d4331"), fInfoLevelId=0x0, lpFileInformation=0x222a1d8 | out: lpFileInformation=0x222a1d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x889f5cb8, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x889f5cb8, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x889f83b2, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x1059)) returned 1 [0183.278] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0183.278] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F0B0760CA5A4CA1C8E3870F69FF9C6ABAD0D4331", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F0B0760CA5A4CA1C8E3870F69FF9C6ABAD0D4331", lpFilePart=0x0) returned 0x85 [0183.278] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0183.278] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F0B0760CA5A4CA1C8E3870F69FF9C6ABAD0D4331" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f0b0760ca5a4ca1c8e3870f69ff9c6abad0d4331"), fInfoLevelId=0x0, lpFileInformation=0x222a3d8 | out: lpFileInformation=0x222a3d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x889f5cb8, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x889f5cb8, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x889f83b2, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x1059)) returned 1 [0183.278] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0183.278] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F0B0760CA5A4CA1C8E3870F69FF9C6ABAD0D4331", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F0B0760CA5A4CA1C8E3870F69FF9C6ABAD0D4331", lpFilePart=0x0) returned 0x85 [0183.279] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0183.279] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F0B0760CA5A4CA1C8E3870F69FF9C6ABAD0D4331" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f0b0760ca5a4ca1c8e3870f69ff9c6abad0d4331"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0183.280] GetFileType (hFile=0x444) returned 0x1 [0183.280] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0183.280] GetFileType (hFile=0x444) returned 0x1 [0183.280] ReadFile (in: hFile=0x444, lpBuffer=0x222c908, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x222c908*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0183.291] CloseHandle (hObject=0x444) returned 1 [0183.292] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F0B0760CA5A4CA1C8E3870F69FF9C6ABAD0D4331", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F0B0760CA5A4CA1C8E3870F69FF9C6ABAD0D4331", lpFilePart=0x0) returned 0x85 [0183.292] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0183.292] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F0B0760CA5A4CA1C8E3870F69FF9C6ABAD0D4331" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f0b0760ca5a4ca1c8e3870f69ff9c6abad0d4331"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0183.292] GetFileType (hFile=0x444) returned 0x1 [0183.292] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0183.292] GetFileType (hFile=0x444) returned 0x1 [0183.292] WriteFile (in: hFile=0x444, lpBuffer=0x222a5b8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x222a5b8*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0183.292] CloseHandle (hObject=0x444) returned 1 [0183.292] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F0B0760CA5A4CA1C8E3870F69FF9C6ABAD0D4331", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F0B0760CA5A4CA1C8E3870F69FF9C6ABAD0D4331", lpFilePart=0x0) returned 0x85 [0183.293] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F0B0760CA5A4CA1C8E3870F69FF9C6ABAD0D4331.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F0B0760CA5A4CA1C8E3870F69FF9C6ABAD0D4331.xuy", lpFilePart=0x0) returned 0x89 [0183.293] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0183.293] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F0B0760CA5A4CA1C8E3870F69FF9C6ABAD0D4331" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f0b0760ca5a4ca1c8e3870f69ff9c6abad0d4331"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x889f5cb8, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x889f5cb8, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x59184d0e, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0183.293] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0183.293] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F0B0760CA5A4CA1C8E3870F69FF9C6ABAD0D4331" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f0b0760ca5a4ca1c8e3870f69ff9c6abad0d4331"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F0B0760CA5A4CA1C8E3870F69FF9C6ABAD0D4331.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f0b0760ca5a4ca1c8e3870f69ff9c6abad0d4331.xuy")) returned 1 [0183.295] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F0EB2346E30E6575D9159FAAC2D28582EDEE6AE6", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F0EB2346E30E6575D9159FAAC2D28582EDEE6AE6", lpFilePart=0x0) returned 0x85 [0183.295] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0183.295] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F0EB2346E30E6575D9159FAAC2D28582EDEE6AE6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f0eb2346e30e6575d9159faac2d28582edee6ae6"), fInfoLevelId=0x0, lpFileInformation=0x22a8eb0 | out: lpFileInformation=0x22a8eb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61577ff1, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x61577ff1, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x61577ff1, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xdff)) returned 1 [0183.295] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0183.295] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F0EB2346E30E6575D9159FAAC2D28582EDEE6AE6", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F0EB2346E30E6575D9159FAAC2D28582EDEE6AE6", lpFilePart=0x0) returned 0x85 [0183.295] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0183.295] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F0EB2346E30E6575D9159FAAC2D28582EDEE6AE6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f0eb2346e30e6575d9159faac2d28582edee6ae6"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0183.295] GetFileType (hFile=0x444) returned 0x1 [0183.295] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0183.295] GetFileType (hFile=0x444) returned 0x1 [0183.295] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xdff [0183.295] ReadFile (in: hFile=0x444, lpBuffer=0x22aa0c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x22aa0c8*, lpNumberOfBytesRead=0x3be5c8*=0xdff, lpOverlapped=0x0) returned 1 [0183.306] CloseHandle (hObject=0x444) returned 1 [0183.317] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F0EB2346E30E6575D9159FAAC2D28582EDEE6AE6", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F0EB2346E30E6575D9159FAAC2D28582EDEE6AE6", lpFilePart=0x0) returned 0x85 [0183.317] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0183.317] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F0EB2346E30E6575D9159FAAC2D28582EDEE6AE6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f0eb2346e30e6575d9159faac2d28582edee6ae6"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0183.318] GetFileType (hFile=0x444) returned 0x1 [0183.319] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0183.319] GetFileType (hFile=0x444) returned 0x1 [0183.319] WriteFile (in: hFile=0x444, lpBuffer=0x2325758*, nNumberOfBytesToWrite=0xe00, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x2325758*, lpNumberOfBytesWritten=0x3be4d8*=0xe00, lpOverlapped=0x0) returned 1 [0183.319] CloseHandle (hObject=0x444) returned 1 [0183.320] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F0EB2346E30E6575D9159FAAC2D28582EDEE6AE6", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F0EB2346E30E6575D9159FAAC2D28582EDEE6AE6", lpFilePart=0x0) returned 0x85 [0183.320] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F0EB2346E30E6575D9159FAAC2D28582EDEE6AE6.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F0EB2346E30E6575D9159FAAC2D28582EDEE6AE6.xuy", lpFilePart=0x0) returned 0x89 [0183.320] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0183.320] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F0EB2346E30E6575D9159FAAC2D28582EDEE6AE6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f0eb2346e30e6575d9159faac2d28582edee6ae6"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61577ff1, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x61577ff1, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x591d13e1, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xe00)) returned 1 [0183.320] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0183.320] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F0EB2346E30E6575D9159FAAC2D28582EDEE6AE6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f0eb2346e30e6575d9159faac2d28582edee6ae6"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F0EB2346E30E6575D9159FAAC2D28582EDEE6AE6.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f0eb2346e30e6575d9159faac2d28582edee6ae6.xuy")) returned 1 [0183.321] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F121025E2309BC1B82D9E1ABEA177A8E57F04ADC", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F121025E2309BC1B82D9E1ABEA177A8E57F04ADC", lpFilePart=0x0) returned 0x85 [0183.321] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0183.321] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F121025E2309BC1B82D9E1ABEA177A8E57F04ADC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f121025e2309bc1b82d9e1abea177a8e57f04adc"), fInfoLevelId=0x0, lpFileInformation=0x2326b18 | out: lpFileInformation=0x2326b18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f90538e, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3f90538e, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x3f969546, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x4d2)) returned 1 [0183.321] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0183.321] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F121025E2309BC1B82D9E1ABEA177A8E57F04ADC", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F121025E2309BC1B82D9E1ABEA177A8E57F04ADC", lpFilePart=0x0) returned 0x85 [0183.321] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0183.321] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F121025E2309BC1B82D9E1ABEA177A8E57F04ADC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f121025e2309bc1b82d9e1abea177a8e57f04adc"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0183.322] GetFileType (hFile=0x444) returned 0x1 [0183.322] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0183.322] GetFileType (hFile=0x444) returned 0x1 [0183.322] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x4d2 [0183.322] ReadFile (in: hFile=0x444, lpBuffer=0x2327408, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x2327408*, lpNumberOfBytesRead=0x3be5c8*=0x4d2, lpOverlapped=0x0) returned 1 [0183.353] CloseHandle (hObject=0x444) returned 1 [0183.408] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F121025E2309BC1B82D9E1ABEA177A8E57F04ADC", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F121025E2309BC1B82D9E1ABEA177A8E57F04ADC", lpFilePart=0x0) returned 0x85 [0183.408] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0183.408] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F121025E2309BC1B82D9E1ABEA177A8E57F04ADC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f121025e2309bc1b82d9e1abea177a8e57f04adc"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0183.409] GetFileType (hFile=0x444) returned 0x1 [0183.409] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0183.410] GetFileType (hFile=0x444) returned 0x1 [0183.410] WriteFile (in: hFile=0x444, lpBuffer=0x21a27f8*, nNumberOfBytesToWrite=0x4e0, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x21a27f8*, lpNumberOfBytesWritten=0x3be4d8*=0x4e0, lpOverlapped=0x0) returned 1 [0183.410] CloseHandle (hObject=0x444) returned 1 [0183.410] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F121025E2309BC1B82D9E1ABEA177A8E57F04ADC", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F121025E2309BC1B82D9E1ABEA177A8E57F04ADC", lpFilePart=0x0) returned 0x85 [0183.411] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F121025E2309BC1B82D9E1ABEA177A8E57F04ADC.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F121025E2309BC1B82D9E1ABEA177A8E57F04ADC.xuy", lpFilePart=0x0) returned 0x89 [0183.411] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0183.411] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F121025E2309BC1B82D9E1ABEA177A8E57F04ADC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f121025e2309bc1b82d9e1abea177a8e57f04adc"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f90538e, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3f90538e, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x592b5fd3, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x4e0)) returned 1 [0183.411] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0183.411] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F121025E2309BC1B82D9E1ABEA177A8E57F04ADC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f121025e2309bc1b82d9e1abea177a8e57f04adc"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F121025E2309BC1B82D9E1ABEA177A8E57F04ADC.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f121025e2309bc1b82d9e1abea177a8e57f04adc.xuy")) returned 1 [0183.412] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F17C63A49C6C1A2764439FFB4810B1B44D04B6B5", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F17C63A49C6C1A2764439FFB4810B1B44D04B6B5", lpFilePart=0x0) returned 0x85 [0183.412] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0183.412] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F17C63A49C6C1A2764439FFB4810B1B44D04B6B5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f17c63a49c6c1a2764439ffb4810b1b44d04b6b5"), fInfoLevelId=0x0, lpFileInformation=0x21a3bb8 | out: lpFileInformation=0x21a3bb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x739fe7ee, ftCreationTime.dwHighDateTime=0x1d2d43f, ftLastAccessTime.dwLowDateTime=0x739fe7ee, ftLastAccessTime.dwHighDateTime=0x1d2d43f, ftLastWriteTime.dwLowDateTime=0x73a00f0d, ftLastWriteTime.dwHighDateTime=0x1d2d43f, nFileSizeHigh=0x0, nFileSizeLow=0x575)) returned 1 [0183.412] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0183.413] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F17C63A49C6C1A2764439FFB4810B1B44D04B6B5", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F17C63A49C6C1A2764439FFB4810B1B44D04B6B5", lpFilePart=0x0) returned 0x85 [0183.413] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0183.413] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F17C63A49C6C1A2764439FFB4810B1B44D04B6B5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f17c63a49c6c1a2764439ffb4810b1b44d04b6b5"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0183.413] GetFileType (hFile=0x444) returned 0x1 [0183.413] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0183.413] GetFileType (hFile=0x444) returned 0x1 [0183.413] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x575 [0183.413] ReadFile (in: hFile=0x444, lpBuffer=0x21a4548, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x21a4548*, lpNumberOfBytesRead=0x3be5c8*=0x575, lpOverlapped=0x0) returned 1 [0183.426] CloseHandle (hObject=0x444) returned 1 [0183.437] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F17C63A49C6C1A2764439FFB4810B1B44D04B6B5", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F17C63A49C6C1A2764439FFB4810B1B44D04B6B5", lpFilePart=0x0) returned 0x85 [0183.437] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0183.437] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F17C63A49C6C1A2764439FFB4810B1B44D04B6B5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f17c63a49c6c1a2764439ffb4810b1b44d04b6b5"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0183.439] GetFileType (hFile=0x444) returned 0x1 [0183.439] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0183.439] GetFileType (hFile=0x444) returned 0x1 [0183.439] WriteFile (in: hFile=0x444, lpBuffer=0x221d160*, nNumberOfBytesToWrite=0x580, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x221d160*, lpNumberOfBytesWritten=0x3be4d8*=0x580, lpOverlapped=0x0) returned 1 [0183.439] CloseHandle (hObject=0x444) returned 1 [0183.440] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F17C63A49C6C1A2764439FFB4810B1B44D04B6B5", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F17C63A49C6C1A2764439FFB4810B1B44D04B6B5", lpFilePart=0x0) returned 0x85 [0183.440] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F17C63A49C6C1A2764439FFB4810B1B44D04B6B5.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F17C63A49C6C1A2764439FFB4810B1B44D04B6B5.xuy", lpFilePart=0x0) returned 0x89 [0183.440] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0183.440] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F17C63A49C6C1A2764439FFB4810B1B44D04B6B5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f17c63a49c6c1a2764439ffb4810b1b44d04b6b5"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x739fe7ee, ftCreationTime.dwHighDateTime=0x1d2d43f, ftLastAccessTime.dwLowDateTime=0x739fe7ee, ftLastAccessTime.dwHighDateTime=0x1d2d43f, ftLastWriteTime.dwLowDateTime=0x59302412, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x580)) returned 1 [0183.440] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0183.440] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F17C63A49C6C1A2764439FFB4810B1B44D04B6B5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f17c63a49c6c1a2764439ffb4810b1b44d04b6b5"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F17C63A49C6C1A2764439FFB4810B1B44D04B6B5.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f17c63a49c6c1a2764439ffb4810b1b44d04b6b5.xuy")) returned 1 [0183.441] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F18D85F52EBBBA2AB081EF739ED0D6E8A76D497C", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F18D85F52EBBBA2AB081EF739ED0D6E8A76D497C", lpFilePart=0x0) returned 0x85 [0183.441] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0183.441] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F18D85F52EBBBA2AB081EF739ED0D6E8A76D497C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f18d85f52ebbba2ab081ef739ed0d6e8a76d497c"), fInfoLevelId=0x0, lpFileInformation=0x221e520 | out: lpFileInformation=0x221e520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc50c5407, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc50c5407, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x3ed84046, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0x219)) returned 1 [0183.442] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0183.442] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F18D85F52EBBBA2AB081EF739ED0D6E8A76D497C", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F18D85F52EBBBA2AB081EF739ED0D6E8A76D497C", lpFilePart=0x0) returned 0x85 [0183.442] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0183.442] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F18D85F52EBBBA2AB081EF739ED0D6E8A76D497C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f18d85f52ebbba2ab081ef739ed0d6e8a76d497c"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0183.442] GetFileType (hFile=0x444) returned 0x1 [0183.442] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0183.442] GetFileType (hFile=0x444) returned 0x1 [0183.442] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x219 [0183.442] ReadFile (in: hFile=0x444, lpBuffer=0x221eb58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x221eb58*, lpNumberOfBytesRead=0x3be5c8*=0x219, lpOverlapped=0x0) returned 1 [0183.443] CloseHandle (hObject=0x444) returned 1 [0183.467] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F18D85F52EBBBA2AB081EF739ED0D6E8A76D497C", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F18D85F52EBBBA2AB081EF739ED0D6E8A76D497C", lpFilePart=0x0) returned 0x85 [0183.467] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0183.467] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F18D85F52EBBBA2AB081EF739ED0D6E8A76D497C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f18d85f52ebbba2ab081ef739ed0d6e8a76d497c"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0183.469] GetFileType (hFile=0x444) returned 0x1 [0183.469] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0183.469] GetFileType (hFile=0x444) returned 0x1 [0183.469] WriteFile (in: hFile=0x444, lpBuffer=0x2296688*, nNumberOfBytesToWrite=0x220, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x2296688*, lpNumberOfBytesWritten=0x3be4d8*=0x220, lpOverlapped=0x0) returned 1 [0183.469] CloseHandle (hObject=0x444) returned 1 [0183.470] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F18D85F52EBBBA2AB081EF739ED0D6E8A76D497C", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F18D85F52EBBBA2AB081EF739ED0D6E8A76D497C", lpFilePart=0x0) returned 0x85 [0183.470] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F18D85F52EBBBA2AB081EF739ED0D6E8A76D497C.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F18D85F52EBBBA2AB081EF739ED0D6E8A76D497C.xuy", lpFilePart=0x0) returned 0x89 [0183.470] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0183.470] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F18D85F52EBBBA2AB081EF739ED0D6E8A76D497C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f18d85f52ebbba2ab081ef739ed0d6e8a76d497c"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc50c5407, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc50c5407, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x5934e8f3, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x220)) returned 1 [0183.470] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0183.470] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F18D85F52EBBBA2AB081EF739ED0D6E8A76D497C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f18d85f52ebbba2ab081ef739ed0d6e8a76d497c"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F18D85F52EBBBA2AB081EF739ED0D6E8A76D497C.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f18d85f52ebbba2ab081ef739ed0d6e8a76d497c.xuy")) returned 1 [0183.528] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F1A6524F9BCF3E2CB2E05EF47961C07CF64CDAE1", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F1A6524F9BCF3E2CB2E05EF47961C07CF64CDAE1", lpFilePart=0x0) returned 0x85 [0183.528] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0183.528] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F1A6524F9BCF3E2CB2E05EF47961C07CF64CDAE1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f1a6524f9bcf3e2cb2e05ef47961c07cf64cdae1"), fInfoLevelId=0x0, lpFileInformation=0x2297a48 | out: lpFileInformation=0x2297a48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61551d8c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x61551d8c, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x61551d8c, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x1135)) returned 1 [0183.528] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0183.528] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F1A6524F9BCF3E2CB2E05EF47961C07CF64CDAE1", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F1A6524F9BCF3E2CB2E05EF47961C07CF64CDAE1", lpFilePart=0x0) returned 0x85 [0183.528] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0183.528] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F1A6524F9BCF3E2CB2E05EF47961C07CF64CDAE1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f1a6524f9bcf3e2cb2e05ef47961c07cf64cdae1"), fInfoLevelId=0x0, lpFileInformation=0x2297c48 | out: lpFileInformation=0x2297c48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61551d8c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x61551d8c, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x61551d8c, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x1135)) returned 1 [0183.528] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0183.528] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F1A6524F9BCF3E2CB2E05EF47961C07CF64CDAE1", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F1A6524F9BCF3E2CB2E05EF47961C07CF64CDAE1", lpFilePart=0x0) returned 0x85 [0183.528] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0183.528] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F1A6524F9BCF3E2CB2E05EF47961C07CF64CDAE1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f1a6524f9bcf3e2cb2e05ef47961c07cf64cdae1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0183.530] GetFileType (hFile=0x444) returned 0x1 [0183.530] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0183.530] GetFileType (hFile=0x444) returned 0x1 [0183.530] ReadFile (in: hFile=0x444, lpBuffer=0x229a178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x229a178*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0183.698] CloseHandle (hObject=0x444) returned 1 [0183.698] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F1A6524F9BCF3E2CB2E05EF47961C07CF64CDAE1", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F1A6524F9BCF3E2CB2E05EF47961C07CF64CDAE1", lpFilePart=0x0) returned 0x85 [0183.699] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0183.699] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F1A6524F9BCF3E2CB2E05EF47961C07CF64CDAE1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f1a6524f9bcf3e2cb2e05ef47961c07cf64cdae1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0183.699] GetFileType (hFile=0x444) returned 0x1 [0183.699] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0183.699] GetFileType (hFile=0x444) returned 0x1 [0183.699] WriteFile (in: hFile=0x444, lpBuffer=0x2297e28*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x2297e28*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0183.699] CloseHandle (hObject=0x444) returned 1 [0183.700] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F1A6524F9BCF3E2CB2E05EF47961C07CF64CDAE1", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F1A6524F9BCF3E2CB2E05EF47961C07CF64CDAE1", lpFilePart=0x0) returned 0x85 [0183.700] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F1A6524F9BCF3E2CB2E05EF47961C07CF64CDAE1.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F1A6524F9BCF3E2CB2E05EF47961C07CF64CDAE1.xuy", lpFilePart=0x0) returned 0x89 [0183.700] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0183.700] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F1A6524F9BCF3E2CB2E05EF47961C07CF64CDAE1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f1a6524f9bcf3e2cb2e05ef47961c07cf64cdae1"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61551d8c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x61551d8c, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x5958741d, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0183.700] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0183.700] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F1A6524F9BCF3E2CB2E05EF47961C07CF64CDAE1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f1a6524f9bcf3e2cb2e05ef47961c07cf64cdae1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F1A6524F9BCF3E2CB2E05EF47961C07CF64CDAE1.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f1a6524f9bcf3e2cb2e05ef47961c07cf64cdae1.xuy")) returned 1 [0183.701] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F1EED789C6A0F298F5D5B723101FD85602764D93", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F1EED789C6A0F298F5D5B723101FD85602764D93", lpFilePart=0x0) returned 0x85 [0183.701] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0183.701] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F1EED789C6A0F298F5D5B723101FD85602764D93" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f1eed789c6a0f298f5d5b723101fd85602764d93"), fInfoLevelId=0x0, lpFileInformation=0x2316720 | out: lpFileInformation=0x2316720*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x544389d9, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x544389d9, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x56f05be8, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x11770)) returned 1 [0183.701] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0183.702] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F1EED789C6A0F298F5D5B723101FD85602764D93", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F1EED789C6A0F298F5D5B723101FD85602764D93", lpFilePart=0x0) returned 0x85 [0183.702] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0183.702] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F1EED789C6A0F298F5D5B723101FD85602764D93" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f1eed789c6a0f298f5d5b723101fd85602764d93"), fInfoLevelId=0x0, lpFileInformation=0x2316920 | out: lpFileInformation=0x2316920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x544389d9, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x544389d9, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x56f05be8, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x11770)) returned 1 [0183.702] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0183.702] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F1EED789C6A0F298F5D5B723101FD85602764D93", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F1EED789C6A0F298F5D5B723101FD85602764D93", lpFilePart=0x0) returned 0x85 [0183.702] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0183.702] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F1EED789C6A0F298F5D5B723101FD85602764D93" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f1eed789c6a0f298f5d5b723101fd85602764d93"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0183.703] GetFileType (hFile=0x444) returned 0x1 [0183.703] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0183.703] GetFileType (hFile=0x444) returned 0x1 [0183.703] ReadFile (in: hFile=0x444, lpBuffer=0x2318e50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x2318e50*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0183.886] CloseHandle (hObject=0x444) returned 1 [0183.886] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F1EED789C6A0F298F5D5B723101FD85602764D93", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F1EED789C6A0F298F5D5B723101FD85602764D93", lpFilePart=0x0) returned 0x85 [0183.886] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0183.886] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F1EED789C6A0F298F5D5B723101FD85602764D93" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f1eed789c6a0f298f5d5b723101fd85602764d93"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0183.887] GetFileType (hFile=0x444) returned 0x1 [0183.887] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0183.887] GetFileType (hFile=0x444) returned 0x1 [0183.887] WriteFile (in: hFile=0x444, lpBuffer=0x216cee8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x216cee8*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0183.887] CloseHandle (hObject=0x444) returned 1 [0183.887] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F1EED789C6A0F298F5D5B723101FD85602764D93", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F1EED789C6A0F298F5D5B723101FD85602764D93", lpFilePart=0x0) returned 0x85 [0183.887] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F1EED789C6A0F298F5D5B723101FD85602764D93.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F1EED789C6A0F298F5D5B723101FD85602764D93.xuy", lpFilePart=0x0) returned 0x89 [0183.887] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0183.887] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F1EED789C6A0F298F5D5B723101FD85602764D93" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f1eed789c6a0f298f5d5b723101fd85602764d93"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x544389d9, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x544389d9, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x5973887e, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x11770)) returned 1 [0183.887] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0183.887] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F1EED789C6A0F298F5D5B723101FD85602764D93" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f1eed789c6a0f298f5d5b723101fd85602764d93"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F1EED789C6A0F298F5D5B723101FD85602764D93.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f1eed789c6a0f298f5d5b723101fd85602764d93.xuy")) returned 1 [0183.889] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F2042A7E980AC3744999F3F9DD7272205F0794D8", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F2042A7E980AC3744999F3F9DD7272205F0794D8", lpFilePart=0x0) returned 0x85 [0183.889] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0183.889] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F2042A7E980AC3744999F3F9DD7272205F0794D8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f2042a7e980ac3744999f3f9dd7272205f0794d8"), fInfoLevelId=0x0, lpFileInformation=0x21995b0 | out: lpFileInformation=0x21995b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89a5ad47, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x89a5ad47, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x89a67075, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x4d2)) returned 1 [0183.889] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0183.889] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F2042A7E980AC3744999F3F9DD7272205F0794D8", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F2042A7E980AC3744999F3F9DD7272205F0794D8", lpFilePart=0x0) returned 0x85 [0183.889] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0183.889] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F2042A7E980AC3744999F3F9DD7272205F0794D8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f2042a7e980ac3744999f3f9dd7272205f0794d8"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0183.889] GetFileType (hFile=0x444) returned 0x1 [0183.889] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0183.889] GetFileType (hFile=0x444) returned 0x1 [0183.889] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x4d2 [0183.889] ReadFile (in: hFile=0x444, lpBuffer=0x2199ea0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x2199ea0*, lpNumberOfBytesRead=0x3be5c8*=0x4d2, lpOverlapped=0x0) returned 1 [0183.908] CloseHandle (hObject=0x444) returned 1 [0183.919] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F2042A7E980AC3744999F3F9DD7272205F0794D8", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F2042A7E980AC3744999F3F9DD7272205F0794D8", lpFilePart=0x0) returned 0x85 [0183.919] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0183.919] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F2042A7E980AC3744999F3F9DD7272205F0794D8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f2042a7e980ac3744999f3f9dd7272205f0794d8"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0183.921] GetFileType (hFile=0x444) returned 0x1 [0183.921] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0183.921] GetFileType (hFile=0x444) returned 0x1 [0183.921] WriteFile (in: hFile=0x444, lpBuffer=0x2212798*, nNumberOfBytesToWrite=0x4e0, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x2212798*, lpNumberOfBytesWritten=0x3be4d8*=0x4e0, lpOverlapped=0x0) returned 1 [0183.922] CloseHandle (hObject=0x444) returned 1 [0183.922] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F2042A7E980AC3744999F3F9DD7272205F0794D8", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F2042A7E980AC3744999F3F9DD7272205F0794D8", lpFilePart=0x0) returned 0x85 [0183.922] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F2042A7E980AC3744999F3F9DD7272205F0794D8.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F2042A7E980AC3744999F3F9DD7272205F0794D8.xuy", lpFilePart=0x0) returned 0x89 [0183.922] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0183.922] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F2042A7E980AC3744999F3F9DD7272205F0794D8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f2042a7e980ac3744999f3f9dd7272205f0794d8"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89a5ad47, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x89a5ad47, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x59784cfa, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x4e0)) returned 1 [0183.923] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0183.923] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F2042A7E980AC3744999F3F9DD7272205F0794D8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f2042a7e980ac3744999f3f9dd7272205f0794d8"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F2042A7E980AC3744999F3F9DD7272205F0794D8.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f2042a7e980ac3744999f3f9dd7272205f0794d8.xuy")) returned 1 [0183.925] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F31FA1F48EA5A5A5C16B8D7512E9104FA627F76D", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F31FA1F48EA5A5A5C16B8D7512E9104FA627F76D", lpFilePart=0x0) returned 0x85 [0183.925] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0183.925] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F31FA1F48EA5A5A5C16B8D7512E9104FA627F76D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f31fa1f48ea5a5a5c16b8d7512e9104fa627f76d"), fInfoLevelId=0x0, lpFileInformation=0x2213b58 | out: lpFileInformation=0x2213b58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42a946e1, ftCreationTime.dwHighDateTime=0x1d2d43d, ftLastAccessTime.dwLowDateTime=0x42a946e1, ftLastAccessTime.dwHighDateTime=0x1d2d43d, ftLastWriteTime.dwLowDateTime=0x42a946e1, ftLastWriteTime.dwHighDateTime=0x1d2d43d, nFileSizeHigh=0x0, nFileSizeLow=0x51f)) returned 1 [0183.925] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0183.925] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F31FA1F48EA5A5A5C16B8D7512E9104FA627F76D", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F31FA1F48EA5A5A5C16B8D7512E9104FA627F76D", lpFilePart=0x0) returned 0x85 [0183.925] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0183.925] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F31FA1F48EA5A5A5C16B8D7512E9104FA627F76D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f31fa1f48ea5a5a5c16b8d7512e9104fa627f76d"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0183.925] GetFileType (hFile=0x444) returned 0x1 [0183.925] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0183.925] GetFileType (hFile=0x444) returned 0x1 [0183.925] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x51f [0183.925] ReadFile (in: hFile=0x444, lpBuffer=0x2214490, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x2214490*, lpNumberOfBytesRead=0x3be5c8*=0x51f, lpOverlapped=0x0) returned 1 [0183.926] CloseHandle (hObject=0x444) returned 1 [0183.937] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F31FA1F48EA5A5A5C16B8D7512E9104FA627F76D", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F31FA1F48EA5A5A5C16B8D7512E9104FA627F76D", lpFilePart=0x0) returned 0x85 [0183.937] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0183.937] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F31FA1F48EA5A5A5C16B8D7512E9104FA627F76D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f31fa1f48ea5a5a5c16b8d7512e9104fa627f76d"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0183.939] GetFileType (hFile=0x444) returned 0x1 [0183.939] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0183.939] GetFileType (hFile=0x444) returned 0x1 [0183.939] WriteFile (in: hFile=0x444, lpBuffer=0x228cec0*, nNumberOfBytesToWrite=0x520, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x228cec0*, lpNumberOfBytesWritten=0x3be4d8*=0x520, lpOverlapped=0x0) returned 1 [0183.940] CloseHandle (hObject=0x444) returned 1 [0183.940] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F31FA1F48EA5A5A5C16B8D7512E9104FA627F76D", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F31FA1F48EA5A5A5C16B8D7512E9104FA627F76D", lpFilePart=0x0) returned 0x85 [0183.940] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F31FA1F48EA5A5A5C16B8D7512E9104FA627F76D.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F31FA1F48EA5A5A5C16B8D7512E9104FA627F76D.xuy", lpFilePart=0x0) returned 0x89 [0183.940] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0183.940] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F31FA1F48EA5A5A5C16B8D7512E9104FA627F76D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f31fa1f48ea5a5a5c16b8d7512e9104fa627f76d"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42a946e1, ftCreationTime.dwHighDateTime=0x1d2d43d, ftLastAccessTime.dwLowDateTime=0x42a946e1, ftLastAccessTime.dwHighDateTime=0x1d2d43d, ftLastWriteTime.dwLowDateTime=0x597d11e1, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x520)) returned 1 [0183.940] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0183.940] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F31FA1F48EA5A5A5C16B8D7512E9104FA627F76D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f31fa1f48ea5a5a5c16b8d7512e9104fa627f76d"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F31FA1F48EA5A5A5C16B8D7512E9104FA627F76D.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f31fa1f48ea5a5a5c16b8d7512e9104fa627f76d.xuy")) returned 1 [0183.942] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F32823D68319E873A5D3BA72D3DC092E4E379276", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F32823D68319E873A5D3BA72D3DC092E4E379276", lpFilePart=0x0) returned 0x85 [0183.942] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0183.942] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F32823D68319E873A5D3BA72D3DC092E4E379276" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f32823d68319e873a5d3ba72d3dc092e4e379276"), fInfoLevelId=0x0, lpFileInformation=0x228e280 | out: lpFileInformation=0x228e280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c0c9c2b, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3c0c9c2b, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x41b0566d, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x3851)) returned 1 [0183.942] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0183.942] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F32823D68319E873A5D3BA72D3DC092E4E379276", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F32823D68319E873A5D3BA72D3DC092E4E379276", lpFilePart=0x0) returned 0x85 [0183.942] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0183.942] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F32823D68319E873A5D3BA72D3DC092E4E379276" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f32823d68319e873a5d3ba72d3dc092e4e379276"), fInfoLevelId=0x0, lpFileInformation=0x228e480 | out: lpFileInformation=0x228e480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c0c9c2b, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3c0c9c2b, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x41b0566d, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x3851)) returned 1 [0183.943] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0183.943] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F32823D68319E873A5D3BA72D3DC092E4E379276", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F32823D68319E873A5D3BA72D3DC092E4E379276", lpFilePart=0x0) returned 0x85 [0183.943] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0183.943] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F32823D68319E873A5D3BA72D3DC092E4E379276" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f32823d68319e873a5d3ba72d3dc092e4e379276"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0183.944] GetFileType (hFile=0x444) returned 0x1 [0183.944] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0183.944] GetFileType (hFile=0x444) returned 0x1 [0183.944] ReadFile (in: hFile=0x444, lpBuffer=0x22909b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x22909b0*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0183.977] CloseHandle (hObject=0x444) returned 1 [0183.977] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F32823D68319E873A5D3BA72D3DC092E4E379276", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F32823D68319E873A5D3BA72D3DC092E4E379276", lpFilePart=0x0) returned 0x85 [0183.977] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0183.977] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F32823D68319E873A5D3BA72D3DC092E4E379276" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f32823d68319e873a5d3ba72d3dc092e4e379276"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0183.977] GetFileType (hFile=0x444) returned 0x1 [0183.977] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0183.977] GetFileType (hFile=0x444) returned 0x1 [0183.977] WriteFile (in: hFile=0x444, lpBuffer=0x228e660*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x228e660*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0183.978] CloseHandle (hObject=0x444) returned 1 [0183.978] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F32823D68319E873A5D3BA72D3DC092E4E379276", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F32823D68319E873A5D3BA72D3DC092E4E379276", lpFilePart=0x0) returned 0x85 [0183.978] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F32823D68319E873A5D3BA72D3DC092E4E379276.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F32823D68319E873A5D3BA72D3DC092E4E379276.xuy", lpFilePart=0x0) returned 0x89 [0183.978] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0183.978] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F32823D68319E873A5D3BA72D3DC092E4E379276" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f32823d68319e873a5d3ba72d3dc092e4e379276"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c0c9c2b, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3c0c9c2b, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x5981d6ee, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x3851)) returned 1 [0183.978] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0183.978] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F32823D68319E873A5D3BA72D3DC092E4E379276" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f32823d68319e873a5d3ba72d3dc092e4e379276"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F32823D68319E873A5D3BA72D3DC092E4E379276.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f32823d68319e873a5d3ba72d3dc092e4e379276.xuy")) returned 1 [0183.979] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F342E84BB0C780A30C90B03F5C63C5FF4B75773F", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F342E84BB0C780A30C90B03F5C63C5FF4B75773F", lpFilePart=0x0) returned 0x85 [0183.979] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0183.979] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F342E84BB0C780A30C90B03F5C63C5FF4B75773F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f342e84bb0c780a30c90b03f5c63c5ff4b75773f"), fInfoLevelId=0x0, lpFileInformation=0x230cf58 | out: lpFileInformation=0x230cf58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47e4a361, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x47e4a361, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x47e705b6, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0x343)) returned 1 [0183.979] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0183.980] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F342E84BB0C780A30C90B03F5C63C5FF4B75773F", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F342E84BB0C780A30C90B03F5C63C5FF4B75773F", lpFilePart=0x0) returned 0x85 [0183.980] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0183.980] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F342E84BB0C780A30C90B03F5C63C5FF4B75773F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f342e84bb0c780a30c90b03f5c63c5ff4b75773f"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0183.980] GetFileType (hFile=0x444) returned 0x1 [0183.980] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0183.980] GetFileType (hFile=0x444) returned 0x1 [0183.980] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x343 [0183.980] ReadFile (in: hFile=0x444, lpBuffer=0x230d6b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x230d6b8*, lpNumberOfBytesRead=0x3be5c8*=0x343, lpOverlapped=0x0) returned 1 [0183.981] CloseHandle (hObject=0x444) returned 1 [0184.033] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F342E84BB0C780A30C90B03F5C63C5FF4B75773F", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F342E84BB0C780A30C90B03F5C63C5FF4B75773F", lpFilePart=0x0) returned 0x85 [0184.033] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0184.033] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F342E84BB0C780A30C90B03F5C63C5FF4B75773F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f342e84bb0c780a30c90b03f5c63c5ff4b75773f"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0184.035] GetFileType (hFile=0x444) returned 0x1 [0184.035] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0184.035] GetFileType (hFile=0x444) returned 0x1 [0184.036] WriteFile (in: hFile=0x444, lpBuffer=0x2188198*, nNumberOfBytesToWrite=0x350, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x2188198*, lpNumberOfBytesWritten=0x3be4d8*=0x350, lpOverlapped=0x0) returned 1 [0184.036] CloseHandle (hObject=0x444) returned 1 [0184.036] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F342E84BB0C780A30C90B03F5C63C5FF4B75773F", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F342E84BB0C780A30C90B03F5C63C5FF4B75773F", lpFilePart=0x0) returned 0x85 [0184.037] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F342E84BB0C780A30C90B03F5C63C5FF4B75773F.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F342E84BB0C780A30C90B03F5C63C5FF4B75773F.xuy", lpFilePart=0x0) returned 0x89 [0184.037] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0184.037] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F342E84BB0C780A30C90B03F5C63C5FF4B75773F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f342e84bb0c780a30c90b03f5c63c5ff4b75773f"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47e4a361, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x47e4a361, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x598b61ad, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x350)) returned 1 [0184.037] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0184.037] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F342E84BB0C780A30C90B03F5C63C5FF4B75773F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f342e84bb0c780a30c90b03f5c63c5ff4b75773f"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F342E84BB0C780A30C90B03F5C63C5FF4B75773F.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f342e84bb0c780a30c90b03f5c63c5ff4b75773f.xuy")) returned 1 [0184.038] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F3A2102F7AFD6075AC6A868778FFC092C10F0F6E", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F3A2102F7AFD6075AC6A868778FFC092C10F0F6E", lpFilePart=0x0) returned 0x85 [0184.038] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0184.038] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F3A2102F7AFD6075AC6A868778FFC092C10F0F6E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f3a2102f7afd6075ac6a868778ffc092c10f0f6e"), fInfoLevelId=0x0, lpFileInformation=0x2189558 | out: lpFileInformation=0x2189558*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42ee05be, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x42ee05be, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x42ee05be, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0x4d2)) returned 1 [0184.038] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0184.038] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F3A2102F7AFD6075AC6A868778FFC092C10F0F6E", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F3A2102F7AFD6075AC6A868778FFC092C10F0F6E", lpFilePart=0x0) returned 0x85 [0184.038] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0184.039] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F3A2102F7AFD6075AC6A868778FFC092C10F0F6E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f3a2102f7afd6075ac6a868778ffc092c10f0f6e"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0184.039] GetFileType (hFile=0x444) returned 0x1 [0184.039] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0184.039] GetFileType (hFile=0x444) returned 0x1 [0184.039] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x4d2 [0184.039] ReadFile (in: hFile=0x444, lpBuffer=0x2189e48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x2189e48*, lpNumberOfBytesRead=0x3be5c8*=0x4d2, lpOverlapped=0x0) returned 1 [0184.049] CloseHandle (hObject=0x444) returned 1 [0184.060] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F3A2102F7AFD6075AC6A868778FFC092C10F0F6E", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F3A2102F7AFD6075AC6A868778FFC092C10F0F6E", lpFilePart=0x0) returned 0x85 [0184.060] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0184.060] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F3A2102F7AFD6075AC6A868778FFC092C10F0F6E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f3a2102f7afd6075ac6a868778ffc092c10f0f6e"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0184.062] GetFileType (hFile=0x444) returned 0x1 [0184.062] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0184.062] GetFileType (hFile=0x444) returned 0x1 [0184.062] WriteFile (in: hFile=0x444, lpBuffer=0x2202740*, nNumberOfBytesToWrite=0x4e0, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x2202740*, lpNumberOfBytesWritten=0x3be4d8*=0x4e0, lpOverlapped=0x0) returned 1 [0184.063] CloseHandle (hObject=0x444) returned 1 [0184.063] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F3A2102F7AFD6075AC6A868778FFC092C10F0F6E", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F3A2102F7AFD6075AC6A868778FFC092C10F0F6E", lpFilePart=0x0) returned 0x85 [0184.063] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F3A2102F7AFD6075AC6A868778FFC092C10F0F6E.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F3A2102F7AFD6075AC6A868778FFC092C10F0F6E.xuy", lpFilePart=0x0) returned 0x89 [0184.063] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0184.063] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F3A2102F7AFD6075AC6A868778FFC092C10F0F6E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f3a2102f7afd6075ac6a868778ffc092c10f0f6e"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42ee05be, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x42ee05be, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x598dc194, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x4e0)) returned 1 [0184.063] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0184.063] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F3A2102F7AFD6075AC6A868778FFC092C10F0F6E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f3a2102f7afd6075ac6a868778ffc092c10f0f6e"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F3A2102F7AFD6075AC6A868778FFC092C10F0F6E.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f3a2102f7afd6075ac6a868778ffc092c10f0f6e.xuy")) returned 1 [0184.077] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F3D90C6AB094EE1E51FA1E8802E6CA43814228C1", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F3D90C6AB094EE1E51FA1E8802E6CA43814228C1", lpFilePart=0x0) returned 0x85 [0184.077] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0184.077] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F3D90C6AB094EE1E51FA1E8802E6CA43814228C1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f3d90c6ab094ee1e51fa1e8802e6ca43814228c1"), fInfoLevelId=0x0, lpFileInformation=0x2203b00 | out: lpFileInformation=0x2203b00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc534dc24, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc534dc24, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xc81003d8, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0xbf70)) returned 1 [0184.077] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0184.077] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F3D90C6AB094EE1E51FA1E8802E6CA43814228C1", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F3D90C6AB094EE1E51FA1E8802E6CA43814228C1", lpFilePart=0x0) returned 0x85 [0184.077] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0184.077] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F3D90C6AB094EE1E51FA1E8802E6CA43814228C1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f3d90c6ab094ee1e51fa1e8802e6ca43814228c1"), fInfoLevelId=0x0, lpFileInformation=0x2203d00 | out: lpFileInformation=0x2203d00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc534dc24, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc534dc24, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xc81003d8, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0xbf70)) returned 1 [0184.077] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0184.077] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F3D90C6AB094EE1E51FA1E8802E6CA43814228C1", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F3D90C6AB094EE1E51FA1E8802E6CA43814228C1", lpFilePart=0x0) returned 0x85 [0184.077] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0184.077] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F3D90C6AB094EE1E51FA1E8802E6CA43814228C1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f3d90c6ab094ee1e51fa1e8802e6ca43814228c1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0184.079] GetFileType (hFile=0x444) returned 0x1 [0184.079] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0184.079] GetFileType (hFile=0x444) returned 0x1 [0184.079] ReadFile (in: hFile=0x444, lpBuffer=0x2206230, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x2206230*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0184.106] CloseHandle (hObject=0x444) returned 1 [0184.106] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F3D90C6AB094EE1E51FA1E8802E6CA43814228C1", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F3D90C6AB094EE1E51FA1E8802E6CA43814228C1", lpFilePart=0x0) returned 0x85 [0184.106] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0184.106] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F3D90C6AB094EE1E51FA1E8802E6CA43814228C1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f3d90c6ab094ee1e51fa1e8802e6ca43814228c1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0184.107] GetFileType (hFile=0x444) returned 0x1 [0184.107] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0184.107] GetFileType (hFile=0x444) returned 0x1 [0184.107] WriteFile (in: hFile=0x444, lpBuffer=0x2203ee0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x2203ee0*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0184.107] CloseHandle (hObject=0x444) returned 1 [0184.107] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F3D90C6AB094EE1E51FA1E8802E6CA43814228C1", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F3D90C6AB094EE1E51FA1E8802E6CA43814228C1", lpFilePart=0x0) returned 0x85 [0184.107] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F3D90C6AB094EE1E51FA1E8802E6CA43814228C1.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F3D90C6AB094EE1E51FA1E8802E6CA43814228C1.xuy", lpFilePart=0x0) returned 0x89 [0184.107] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0184.107] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F3D90C6AB094EE1E51FA1E8802E6CA43814228C1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f3d90c6ab094ee1e51fa1e8802e6ca43814228c1"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc534dc24, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc534dc24, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x5994e894, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xbf70)) returned 1 [0184.107] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0184.107] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F3D90C6AB094EE1E51FA1E8802E6CA43814228C1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f3d90c6ab094ee1e51fa1e8802e6ca43814228c1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F3D90C6AB094EE1E51FA1E8802E6CA43814228C1.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f3d90c6ab094ee1e51fa1e8802e6ca43814228c1.xuy")) returned 1 [0184.109] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F40097B0B56961E44C8B985BA539D8266739EEFD", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F40097B0B56961E44C8B985BA539D8266739EEFD", lpFilePart=0x0) returned 0x85 [0184.109] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0184.109] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F40097B0B56961E44C8B985BA539D8266739EEFD" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f40097b0b56961e44c8b985ba539d8266739eefd"), fInfoLevelId=0x0, lpFileInformation=0x22827d8 | out: lpFileInformation=0x22827d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61577ff1, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x61577ff1, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x61577ff1, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xdfe)) returned 1 [0184.109] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0184.109] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F40097B0B56961E44C8B985BA539D8266739EEFD", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F40097B0B56961E44C8B985BA539D8266739EEFD", lpFilePart=0x0) returned 0x85 [0184.109] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0184.109] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F40097B0B56961E44C8B985BA539D8266739EEFD" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f40097b0b56961e44c8b985ba539d8266739eefd"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0184.109] GetFileType (hFile=0x444) returned 0x1 [0184.109] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0184.109] GetFileType (hFile=0x444) returned 0x1 [0184.109] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xdfe [0184.109] ReadFile (in: hFile=0x444, lpBuffer=0x22839f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x22839f0*, lpNumberOfBytesRead=0x3be5c8*=0xdfe, lpOverlapped=0x0) returned 1 [0184.117] CloseHandle (hObject=0x444) returned 1 [0184.127] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F40097B0B56961E44C8B985BA539D8266739EEFD", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F40097B0B56961E44C8B985BA539D8266739EEFD", lpFilePart=0x0) returned 0x85 [0184.127] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0184.127] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F40097B0B56961E44C8B985BA539D8266739EEFD" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f40097b0b56961e44c8b985ba539d8266739eefd"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0184.129] GetFileType (hFile=0x444) returned 0x1 [0184.129] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0184.129] GetFileType (hFile=0x444) returned 0x1 [0184.129] WriteFile (in: hFile=0x444, lpBuffer=0x22ff080*, nNumberOfBytesToWrite=0xe00, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x22ff080*, lpNumberOfBytesWritten=0x3be4d8*=0xe00, lpOverlapped=0x0) returned 1 [0184.130] CloseHandle (hObject=0x444) returned 1 [0184.131] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F40097B0B56961E44C8B985BA539D8266739EEFD", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F40097B0B56961E44C8B985BA539D8266739EEFD", lpFilePart=0x0) returned 0x85 [0184.131] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F40097B0B56961E44C8B985BA539D8266739EEFD.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F40097B0B56961E44C8B985BA539D8266739EEFD.xuy", lpFilePart=0x0) returned 0x89 [0184.131] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0184.131] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F40097B0B56961E44C8B985BA539D8266739EEFD" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f40097b0b56961e44c8b985ba539d8266739eefd"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61577ff1, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x61577ff1, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x5999adda, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xe00)) returned 1 [0184.131] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0184.131] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F40097B0B56961E44C8B985BA539D8266739EEFD" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f40097b0b56961e44c8b985ba539d8266739eefd"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F40097B0B56961E44C8B985BA539D8266739EEFD.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f40097b0b56961e44c8b985ba539d8266739eefd.xuy")) returned 1 [0184.132] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F43FB06219A35DA10ACDB22D3AD944003924CF7A", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F43FB06219A35DA10ACDB22D3AD944003924CF7A", lpFilePart=0x0) returned 0x85 [0184.132] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0184.132] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F43FB06219A35DA10ACDB22D3AD944003924CF7A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f43fb06219a35da10acdb22d3ad944003924cf7a"), fInfoLevelId=0x0, lpFileInformation=0x2300440 | out: lpFileInformation=0x2300440*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x615c4498, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x615c4498, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x615c4498, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xedc)) returned 1 [0184.132] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0184.132] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F43FB06219A35DA10ACDB22D3AD944003924CF7A", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F43FB06219A35DA10ACDB22D3AD944003924CF7A", lpFilePart=0x0) returned 0x85 [0184.133] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0184.133] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F43FB06219A35DA10ACDB22D3AD944003924CF7A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f43fb06219a35da10acdb22d3ad944003924cf7a"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0184.133] GetFileType (hFile=0x444) returned 0x1 [0184.133] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0184.133] GetFileType (hFile=0x444) returned 0x1 [0184.133] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xedc [0184.133] ReadFile (in: hFile=0x444, lpBuffer=0x2301738, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x2301738*, lpNumberOfBytesRead=0x3be5c8*=0xedc, lpOverlapped=0x0) returned 1 [0184.157] CloseHandle (hObject=0x444) returned 1 [0184.197] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F43FB06219A35DA10ACDB22D3AD944003924CF7A", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F43FB06219A35DA10ACDB22D3AD944003924CF7A", lpFilePart=0x0) returned 0x85 [0184.197] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0184.197] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F43FB06219A35DA10ACDB22D3AD944003924CF7A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f43fb06219a35da10acdb22d3ad944003924cf7a"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0184.199] GetFileType (hFile=0x444) returned 0x1 [0184.199] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0184.199] GetFileType (hFile=0x444) returned 0x1 [0184.199] WriteFile (in: hFile=0x444, lpBuffer=0x217edf0*, nNumberOfBytesToWrite=0xee0, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x217edf0*, lpNumberOfBytesWritten=0x3be4d8*=0xee0, lpOverlapped=0x0) returned 1 [0184.200] CloseHandle (hObject=0x444) returned 1 [0184.200] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F43FB06219A35DA10ACDB22D3AD944003924CF7A", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F43FB06219A35DA10ACDB22D3AD944003924CF7A", lpFilePart=0x0) returned 0x85 [0184.200] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F43FB06219A35DA10ACDB22D3AD944003924CF7A.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F43FB06219A35DA10ACDB22D3AD944003924CF7A.xuy", lpFilePart=0x0) returned 0x89 [0184.200] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0184.200] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F43FB06219A35DA10ACDB22D3AD944003924CF7A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f43fb06219a35da10acdb22d3ad944003924cf7a"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x615c4498, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x615c4498, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x59a336f8, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xee0)) returned 1 [0184.200] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0184.201] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F43FB06219A35DA10ACDB22D3AD944003924CF7A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f43fb06219a35da10acdb22d3ad944003924cf7a"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F43FB06219A35DA10ACDB22D3AD944003924CF7A.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f43fb06219a35da10acdb22d3ad944003924cf7a.xuy")) returned 1 [0184.202] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F5387E8365BD2DADD2BB866AD939802535A18630", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F5387E8365BD2DADD2BB866AD939802535A18630", lpFilePart=0x0) returned 0x85 [0184.202] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0184.202] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F5387E8365BD2DADD2BB866AD939802535A18630" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f5387e8365bd2dadd2bb866ad939802535a18630"), fInfoLevelId=0x0, lpFileInformation=0x21801b0 | out: lpFileInformation=0x21801b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56f05be8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x56f05be8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x6152bc7d, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x113)) returned 1 [0184.202] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0184.202] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F5387E8365BD2DADD2BB866AD939802535A18630", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F5387E8365BD2DADD2BB866AD939802535A18630", lpFilePart=0x0) returned 0x85 [0184.202] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0184.202] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F5387E8365BD2DADD2BB866AD939802535A18630" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f5387e8365bd2dadd2bb866ad939802535a18630"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0184.202] GetFileType (hFile=0x444) returned 0x1 [0184.202] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0184.202] GetFileType (hFile=0x444) returned 0x1 [0184.202] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x113 [0184.202] ReadFile (in: hFile=0x444, lpBuffer=0x21806e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x21806e0*, lpNumberOfBytesRead=0x3be5c8*=0x113, lpOverlapped=0x0) returned 1 [0184.215] CloseHandle (hObject=0x444) returned 1 [0184.225] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F5387E8365BD2DADD2BB866AD939802535A18630", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F5387E8365BD2DADD2BB866AD939802535A18630", lpFilePart=0x0) returned 0x85 [0184.225] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0184.226] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F5387E8365BD2DADD2BB866AD939802535A18630" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f5387e8365bd2dadd2bb866ad939802535a18630"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0184.227] GetFileType (hFile=0x444) returned 0x1 [0184.227] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0184.227] GetFileType (hFile=0x444) returned 0x1 [0184.227] WriteFile (in: hFile=0x444, lpBuffer=0x21f7d18*, nNumberOfBytesToWrite=0x120, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x21f7d18*, lpNumberOfBytesWritten=0x3be4d8*=0x120, lpOverlapped=0x0) returned 1 [0184.228] CloseHandle (hObject=0x444) returned 1 [0184.228] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F5387E8365BD2DADD2BB866AD939802535A18630", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F5387E8365BD2DADD2BB866AD939802535A18630", lpFilePart=0x0) returned 0x85 [0184.228] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F5387E8365BD2DADD2BB866AD939802535A18630.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F5387E8365BD2DADD2BB866AD939802535A18630.xuy", lpFilePart=0x0) returned 0x89 [0184.228] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0184.228] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F5387E8365BD2DADD2BB866AD939802535A18630" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f5387e8365bd2dadd2bb866ad939802535a18630"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56f05be8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x56f05be8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x59a7fe73, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x120)) returned 1 [0184.229] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0184.229] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F5387E8365BD2DADD2BB866AD939802535A18630" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f5387e8365bd2dadd2bb866ad939802535a18630"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F5387E8365BD2DADD2BB866AD939802535A18630.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f5387e8365bd2dadd2bb866ad939802535a18630.xuy")) returned 1 [0184.230] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F53AD59669090C260993858428A97CAC9487A471", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F53AD59669090C260993858428A97CAC9487A471", lpFilePart=0x0) returned 0x85 [0184.230] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0184.230] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F53AD59669090C260993858428A97CAC9487A471" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f53ad59669090c260993858428a97cac9487a471"), fInfoLevelId=0x0, lpFileInformation=0x21f90d8 | out: lpFileInformation=0x21f90d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c19e2e4, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3c19e2e4, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xdda2e612, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0xc490)) returned 1 [0184.230] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0184.230] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F53AD59669090C260993858428A97CAC9487A471", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F53AD59669090C260993858428A97CAC9487A471", lpFilePart=0x0) returned 0x85 [0184.230] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0184.230] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F53AD59669090C260993858428A97CAC9487A471" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f53ad59669090c260993858428a97cac9487a471"), fInfoLevelId=0x0, lpFileInformation=0x21f92d8 | out: lpFileInformation=0x21f92d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c19e2e4, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3c19e2e4, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xdda2e612, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0xc490)) returned 1 [0184.230] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0184.230] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F53AD59669090C260993858428A97CAC9487A471", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F53AD59669090C260993858428A97CAC9487A471", lpFilePart=0x0) returned 0x85 [0184.230] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0184.230] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F53AD59669090C260993858428A97CAC9487A471" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f53ad59669090c260993858428a97cac9487a471"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0184.231] GetFileType (hFile=0x444) returned 0x1 [0184.231] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0184.231] GetFileType (hFile=0x444) returned 0x1 [0184.231] ReadFile (in: hFile=0x444, lpBuffer=0x21fb808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x21fb808*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0184.253] CloseHandle (hObject=0x444) returned 1 [0184.253] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F53AD59669090C260993858428A97CAC9487A471", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F53AD59669090C260993858428A97CAC9487A471", lpFilePart=0x0) returned 0x85 [0184.253] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0184.253] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F53AD59669090C260993858428A97CAC9487A471" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f53ad59669090c260993858428a97cac9487a471"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0184.253] GetFileType (hFile=0x444) returned 0x1 [0184.253] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0184.253] GetFileType (hFile=0x444) returned 0x1 [0184.253] WriteFile (in: hFile=0x444, lpBuffer=0x21f94b8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x21f94b8*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0184.254] CloseHandle (hObject=0x444) returned 1 [0184.254] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F53AD59669090C260993858428A97CAC9487A471", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F53AD59669090C260993858428A97CAC9487A471", lpFilePart=0x0) returned 0x85 [0184.254] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F53AD59669090C260993858428A97CAC9487A471.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F53AD59669090C260993858428A97CAC9487A471.xuy", lpFilePart=0x0) returned 0x89 [0184.254] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0184.254] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F53AD59669090C260993858428A97CAC9487A471" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f53ad59669090c260993858428a97cac9487a471"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c19e2e4, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3c19e2e4, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x59acbfa2, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xc490)) returned 1 [0184.254] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0184.254] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F53AD59669090C260993858428A97CAC9487A471" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f53ad59669090c260993858428a97cac9487a471"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F53AD59669090C260993858428A97CAC9487A471.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f53ad59669090c260993858428a97cac9487a471.xuy")) returned 1 [0184.255] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F629DFCF4D7930D989B2144D372254183187D392", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F629DFCF4D7930D989B2144D372254183187D392", lpFilePart=0x0) returned 0x85 [0184.255] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0184.255] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F629DFCF4D7930D989B2144D372254183187D392" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f629dfcf4d7930d989b2144d372254183187d392"), fInfoLevelId=0x0, lpFileInformation=0x2277db0 | out: lpFileInformation=0x2277db0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x551ee291, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x551ee291, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x5523a738, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x4d4)) returned 1 [0184.255] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0184.255] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F629DFCF4D7930D989B2144D372254183187D392", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F629DFCF4D7930D989B2144D372254183187D392", lpFilePart=0x0) returned 0x85 [0184.256] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0184.256] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F629DFCF4D7930D989B2144D372254183187D392" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f629dfcf4d7930d989b2144d372254183187d392"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0184.256] GetFileType (hFile=0x444) returned 0x1 [0184.256] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0184.256] GetFileType (hFile=0x444) returned 0x1 [0184.256] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x4d4 [0184.256] ReadFile (in: hFile=0x444, lpBuffer=0x22786a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x22786a0*, lpNumberOfBytesRead=0x3be5c8*=0x4d4, lpOverlapped=0x0) returned 1 [0184.257] CloseHandle (hObject=0x444) returned 1 [0184.267] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F629DFCF4D7930D989B2144D372254183187D392", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F629DFCF4D7930D989B2144D372254183187D392", lpFilePart=0x0) returned 0x85 [0184.267] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0184.267] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F629DFCF4D7930D989B2144D372254183187D392" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f629dfcf4d7930d989b2144d372254183187d392"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0184.284] GetFileType (hFile=0x444) returned 0x1 [0184.284] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0184.284] GetFileType (hFile=0x444) returned 0x1 [0184.284] WriteFile (in: hFile=0x444, lpBuffer=0x22f0f98*, nNumberOfBytesToWrite=0x4e0, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x22f0f98*, lpNumberOfBytesWritten=0x3be4d8*=0x4e0, lpOverlapped=0x0) returned 1 [0184.286] CloseHandle (hObject=0x444) returned 1 [0184.286] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F629DFCF4D7930D989B2144D372254183187D392", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F629DFCF4D7930D989B2144D372254183187D392", lpFilePart=0x0) returned 0x85 [0184.286] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F629DFCF4D7930D989B2144D372254183187D392.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F629DFCF4D7930D989B2144D372254183187D392.xuy", lpFilePart=0x0) returned 0x89 [0184.286] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0184.286] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F629DFCF4D7930D989B2144D372254183187D392" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f629dfcf4d7930d989b2144d372254183187d392"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x551ee291, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x551ee291, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x59b1a26a, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x4e0)) returned 1 [0184.287] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0184.287] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F629DFCF4D7930D989B2144D372254183187D392" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f629dfcf4d7930d989b2144d372254183187d392"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F629DFCF4D7930D989B2144D372254183187D392.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f629dfcf4d7930d989b2144d372254183187d392.xuy")) returned 1 [0184.288] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F6746302354F94E846F07832102CB3083100FD38", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F6746302354F94E846F07832102CB3083100FD38", lpFilePart=0x0) returned 0x85 [0184.288] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0184.288] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F6746302354F94E846F07832102CB3083100FD38" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f6746302354f94e846f07832102cb3083100fd38"), fInfoLevelId=0x0, lpFileInformation=0x22f2358 | out: lpFileInformation=0x22f2358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d885d52, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x5d885d52, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x5d885d52, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x17f9)) returned 1 [0184.288] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0184.288] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F6746302354F94E846F07832102CB3083100FD38", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F6746302354F94E846F07832102CB3083100FD38", lpFilePart=0x0) returned 0x85 [0184.288] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0184.288] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F6746302354F94E846F07832102CB3083100FD38" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f6746302354f94e846f07832102cb3083100fd38"), fInfoLevelId=0x0, lpFileInformation=0x22f2558 | out: lpFileInformation=0x22f2558*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d885d52, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x5d885d52, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x5d885d52, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x17f9)) returned 1 [0184.289] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0184.289] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F6746302354F94E846F07832102CB3083100FD38", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F6746302354F94E846F07832102CB3083100FD38", lpFilePart=0x0) returned 0x85 [0184.289] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0184.289] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F6746302354F94E846F07832102CB3083100FD38" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f6746302354f94e846f07832102cb3083100fd38"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0184.290] GetFileType (hFile=0x444) returned 0x1 [0184.290] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0184.290] GetFileType (hFile=0x444) returned 0x1 [0184.290] ReadFile (in: hFile=0x444, lpBuffer=0x22f4a88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x22f4a88*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0184.306] CloseHandle (hObject=0x444) returned 1 [0184.306] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F6746302354F94E846F07832102CB3083100FD38", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F6746302354F94E846F07832102CB3083100FD38", lpFilePart=0x0) returned 0x85 [0184.306] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0184.306] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F6746302354F94E846F07832102CB3083100FD38" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f6746302354f94e846f07832102cb3083100fd38"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0184.306] GetFileType (hFile=0x444) returned 0x1 [0184.306] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0184.306] GetFileType (hFile=0x444) returned 0x1 [0184.307] WriteFile (in: hFile=0x444, lpBuffer=0x22f2738*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x22f2738*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0184.307] CloseHandle (hObject=0x444) returned 1 [0184.307] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F6746302354F94E846F07832102CB3083100FD38", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F6746302354F94E846F07832102CB3083100FD38", lpFilePart=0x0) returned 0x85 [0184.307] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F6746302354F94E846F07832102CB3083100FD38.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F6746302354F94E846F07832102CB3083100FD38.xuy", lpFilePart=0x0) returned 0x89 [0184.307] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0184.307] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F6746302354F94E846F07832102CB3083100FD38" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f6746302354f94e846f07832102cb3083100fd38"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d885d52, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x5d885d52, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x59b3e6cd, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0184.307] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0184.307] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F6746302354F94E846F07832102CB3083100FD38" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f6746302354f94e846f07832102cb3083100fd38"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F6746302354F94E846F07832102CB3083100FD38.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f6746302354f94e846f07832102cb3083100fd38.xuy")) returned 1 [0184.309] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F76EEE8C81085751E30DEE1CB3470C9AC1E39A37", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F76EEE8C81085751E30DEE1CB3470C9AC1E39A37", lpFilePart=0x0) returned 0x85 [0184.309] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0184.309] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F76EEE8C81085751E30DEE1CB3470C9AC1E39A37" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f76eee8c81085751e30dee1cb3470c9ac1e39a37"), fInfoLevelId=0x0, lpFileInformation=0x2371030 | out: lpFileInformation=0x2371030*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6159e1e8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x6159e1e8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x6159e1e8, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xedc)) returned 1 [0184.309] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0184.309] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F76EEE8C81085751E30DEE1CB3470C9AC1E39A37", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F76EEE8C81085751E30DEE1CB3470C9AC1E39A37", lpFilePart=0x0) returned 0x85 [0184.309] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0184.309] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F76EEE8C81085751E30DEE1CB3470C9AC1E39A37" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f76eee8c81085751e30dee1cb3470c9ac1e39a37"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0184.309] GetFileType (hFile=0x444) returned 0x1 [0184.309] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0184.309] GetFileType (hFile=0x444) returned 0x1 [0184.309] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xedc [0184.309] ReadFile (in: hFile=0x444, lpBuffer=0x2372328, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x2372328*, lpNumberOfBytesRead=0x3be5c8*=0xedc, lpOverlapped=0x0) returned 1 [0184.324] CloseHandle (hObject=0x444) returned 1 [0184.376] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F76EEE8C81085751E30DEE1CB3470C9AC1E39A37", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F76EEE8C81085751E30DEE1CB3470C9AC1E39A37", lpFilePart=0x0) returned 0x85 [0184.376] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0184.376] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F76EEE8C81085751E30DEE1CB3470C9AC1E39A37" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f76eee8c81085751e30dee1cb3470c9ac1e39a37"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0184.378] GetFileType (hFile=0x444) returned 0x1 [0184.378] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0184.378] GetFileType (hFile=0x444) returned 0x1 [0184.378] WriteFile (in: hFile=0x444, lpBuffer=0x21f1110*, nNumberOfBytesToWrite=0xee0, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x21f1110*, lpNumberOfBytesWritten=0x3be4d8*=0xee0, lpOverlapped=0x0) returned 1 [0184.379] CloseHandle (hObject=0x444) returned 1 [0184.379] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F76EEE8C81085751E30DEE1CB3470C9AC1E39A37", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F76EEE8C81085751E30DEE1CB3470C9AC1E39A37", lpFilePart=0x0) returned 0x85 [0184.379] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F76EEE8C81085751E30DEE1CB3470C9AC1E39A37.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F76EEE8C81085751E30DEE1CB3470C9AC1E39A37.xuy", lpFilePart=0x0) returned 0x89 [0184.379] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0184.379] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F76EEE8C81085751E30DEE1CB3470C9AC1E39A37" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f76eee8c81085751e30dee1cb3470c9ac1e39a37"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6159e1e8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x6159e1e8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x59bfd350, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xee0)) returned 1 [0184.379] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0184.379] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F76EEE8C81085751E30DEE1CB3470C9AC1E39A37" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f76eee8c81085751e30dee1cb3470c9ac1e39a37"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F76EEE8C81085751E30DEE1CB3470C9AC1E39A37.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f76eee8c81085751e30dee1cb3470c9ac1e39a37.xuy")) returned 1 [0184.384] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F8A41F5AD5BEC0461E786408B9CBA230E4AEFEAC", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F8A41F5AD5BEC0461E786408B9CBA230E4AEFEAC", lpFilePart=0x0) returned 0x85 [0184.384] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0184.384] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F8A41F5AD5BEC0461E786408B9CBA230E4AEFEAC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f8a41f5ad5bec0461e786408b9cba230e4aefeac"), fInfoLevelId=0x0, lpFileInformation=0x21f24d0 | out: lpFileInformation=0x21f24d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a4382c1, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x5a4382c1, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x5a6e6d16, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x114f05)) returned 1 [0184.384] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0184.384] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F8A41F5AD5BEC0461E786408B9CBA230E4AEFEAC", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F8A41F5AD5BEC0461E786408B9CBA230E4AEFEAC", lpFilePart=0x0) returned 0x85 [0184.384] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0184.384] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F8A41F5AD5BEC0461E786408B9CBA230E4AEFEAC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f8a41f5ad5bec0461e786408b9cba230e4aefeac"), fInfoLevelId=0x0, lpFileInformation=0x21f26d0 | out: lpFileInformation=0x21f26d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a4382c1, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x5a4382c1, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x5a6e6d16, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x114f05)) returned 1 [0184.384] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0184.384] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F8A41F5AD5BEC0461E786408B9CBA230E4AEFEAC", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F8A41F5AD5BEC0461E786408B9CBA230E4AEFEAC", lpFilePart=0x0) returned 0x85 [0184.384] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0184.384] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F8A41F5AD5BEC0461E786408B9CBA230E4AEFEAC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f8a41f5ad5bec0461e786408b9cba230e4aefeac"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0184.385] GetFileType (hFile=0x444) returned 0x1 [0184.385] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0184.385] GetFileType (hFile=0x444) returned 0x1 [0184.385] ReadFile (in: hFile=0x444, lpBuffer=0x21f4c00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x21f4c00*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0184.416] CloseHandle (hObject=0x444) returned 1 [0184.416] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F8A41F5AD5BEC0461E786408B9CBA230E4AEFEAC", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F8A41F5AD5BEC0461E786408B9CBA230E4AEFEAC", lpFilePart=0x0) returned 0x85 [0184.417] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0184.417] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F8A41F5AD5BEC0461E786408B9CBA230E4AEFEAC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f8a41f5ad5bec0461e786408b9cba230e4aefeac"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0184.417] GetFileType (hFile=0x444) returned 0x1 [0184.417] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0184.417] GetFileType (hFile=0x444) returned 0x1 [0184.417] WriteFile (in: hFile=0x444, lpBuffer=0x21f28b0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x21f28b0*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0184.417] CloseHandle (hObject=0x444) returned 1 [0184.417] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F8A41F5AD5BEC0461E786408B9CBA230E4AEFEAC", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F8A41F5AD5BEC0461E786408B9CBA230E4AEFEAC", lpFilePart=0x0) returned 0x85 [0184.417] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F8A41F5AD5BEC0461E786408B9CBA230E4AEFEAC.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F8A41F5AD5BEC0461E786408B9CBA230E4AEFEAC.xuy", lpFilePart=0x0) returned 0x89 [0184.417] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0184.417] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F8A41F5AD5BEC0461E786408B9CBA230E4AEFEAC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f8a41f5ad5bec0461e786408b9cba230e4aefeac"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a4382c1, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x5a4382c1, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x59c497f4, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x114f05)) returned 1 [0184.418] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0184.418] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F8A41F5AD5BEC0461E786408B9CBA230E4AEFEAC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f8a41f5ad5bec0461e786408b9cba230e4aefeac"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F8A41F5AD5BEC0461E786408B9CBA230E4AEFEAC.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f8a41f5ad5bec0461e786408b9cba230e4aefeac.xuy")) returned 1 [0184.419] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F8AC72083E334F70A553AE68455FBDF0E65C5221", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F8AC72083E334F70A553AE68455FBDF0E65C5221", lpFilePart=0x0) returned 0x85 [0184.419] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0184.419] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F8AC72083E334F70A553AE68455FBDF0E65C5221" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f8ac72083e334f70a553ae68455fbdf0e65c5221"), fInfoLevelId=0x0, lpFileInformation=0x22711a8 | out: lpFileInformation=0x22711a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f7e2ac9, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3f7e2ac9, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xddef3277, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0xfe6)) returned 1 [0184.419] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0184.419] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F8AC72083E334F70A553AE68455FBDF0E65C5221", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F8AC72083E334F70A553AE68455FBDF0E65C5221", lpFilePart=0x0) returned 0x85 [0184.419] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0184.419] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F8AC72083E334F70A553AE68455FBDF0E65C5221" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f8ac72083e334f70a553ae68455fbdf0e65c5221"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0184.420] GetFileType (hFile=0x444) returned 0x1 [0184.420] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0184.420] GetFileType (hFile=0x444) returned 0x1 [0184.420] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xfe6 [0184.420] ReadFile (in: hFile=0x444, lpBuffer=0x22725a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x22725a8*, lpNumberOfBytesRead=0x3be5c8*=0xfe6, lpOverlapped=0x0) returned 1 [0184.421] CloseHandle (hObject=0x444) returned 1 [0184.431] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F8AC72083E334F70A553AE68455FBDF0E65C5221", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F8AC72083E334F70A553AE68455FBDF0E65C5221", lpFilePart=0x0) returned 0x85 [0184.431] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0184.431] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F8AC72083E334F70A553AE68455FBDF0E65C5221" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f8ac72083e334f70a553ae68455fbdf0e65c5221"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0184.433] GetFileType (hFile=0x444) returned 0x1 [0184.433] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0184.433] GetFileType (hFile=0x444) returned 0x1 [0184.433] WriteFile (in: hFile=0x444, lpBuffer=0x22ee5f0*, nNumberOfBytesToWrite=0xff0, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x22ee5f0*, lpNumberOfBytesWritten=0x3be4d8*=0xff0, lpOverlapped=0x0) returned 1 [0184.434] CloseHandle (hObject=0x444) returned 1 [0184.434] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F8AC72083E334F70A553AE68455FBDF0E65C5221", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F8AC72083E334F70A553AE68455FBDF0E65C5221", lpFilePart=0x0) returned 0x85 [0184.434] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F8AC72083E334F70A553AE68455FBDF0E65C5221.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F8AC72083E334F70A553AE68455FBDF0E65C5221.xuy", lpFilePart=0x0) returned 0x89 [0184.434] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0184.434] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F8AC72083E334F70A553AE68455FBDF0E65C5221" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f8ac72083e334f70a553ae68455fbdf0e65c5221"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f7e2ac9, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3f7e2ac9, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x59c6f9dc, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xff0)) returned 1 [0184.434] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0184.435] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F8AC72083E334F70A553AE68455FBDF0E65C5221" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f8ac72083e334f70a553ae68455fbdf0e65c5221"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F8AC72083E334F70A553AE68455FBDF0E65C5221.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f8ac72083e334f70a553ae68455fbdf0e65c5221.xuy")) returned 1 [0184.436] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F8ADDA6A2780337CB00EA6CFD0D333B43A478BE7", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F8ADDA6A2780337CB00EA6CFD0D333B43A478BE7", lpFilePart=0x0) returned 0x85 [0184.436] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0184.436] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F8ADDA6A2780337CB00EA6CFD0D333B43A478BE7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f8adda6a2780337cb00ea6cfd0d333b43a478be7"), fInfoLevelId=0x0, lpFileInformation=0x22ef9b0 | out: lpFileInformation=0x22ef9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85d5f82e, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x85d5f82e, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x85d6bb7f, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x4d4)) returned 1 [0184.436] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0184.436] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F8ADDA6A2780337CB00EA6CFD0D333B43A478BE7", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F8ADDA6A2780337CB00EA6CFD0D333B43A478BE7", lpFilePart=0x0) returned 0x85 [0184.436] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0184.436] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F8ADDA6A2780337CB00EA6CFD0D333B43A478BE7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f8adda6a2780337cb00ea6cfd0d333b43a478be7"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0184.436] GetFileType (hFile=0x444) returned 0x1 [0184.437] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0184.437] GetFileType (hFile=0x444) returned 0x1 [0184.437] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x4d4 [0184.437] ReadFile (in: hFile=0x444, lpBuffer=0x22f02a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x22f02a0*, lpNumberOfBytesRead=0x3be5c8*=0x4d4, lpOverlapped=0x0) returned 1 [0184.452] CloseHandle (hObject=0x444) returned 1 [0184.462] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F8ADDA6A2780337CB00EA6CFD0D333B43A478BE7", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F8ADDA6A2780337CB00EA6CFD0D333B43A478BE7", lpFilePart=0x0) returned 0x85 [0184.462] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0184.462] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F8ADDA6A2780337CB00EA6CFD0D333B43A478BE7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f8adda6a2780337cb00ea6cfd0d333b43a478be7"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0184.464] GetFileType (hFile=0x444) returned 0x1 [0184.464] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0184.464] GetFileType (hFile=0x444) returned 0x1 [0184.465] WriteFile (in: hFile=0x444, lpBuffer=0x2368b98*, nNumberOfBytesToWrite=0x4e0, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x2368b98*, lpNumberOfBytesWritten=0x3be4d8*=0x4e0, lpOverlapped=0x0) returned 1 [0184.465] CloseHandle (hObject=0x444) returned 1 [0184.465] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F8ADDA6A2780337CB00EA6CFD0D333B43A478BE7", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F8ADDA6A2780337CB00EA6CFD0D333B43A478BE7", lpFilePart=0x0) returned 0x85 [0184.465] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F8ADDA6A2780337CB00EA6CFD0D333B43A478BE7.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F8ADDA6A2780337CB00EA6CFD0D333B43A478BE7.xuy", lpFilePart=0x0) returned 0x89 [0184.465] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0184.465] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F8ADDA6A2780337CB00EA6CFD0D333B43A478BE7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f8adda6a2780337cb00ea6cfd0d333b43a478be7"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85d5f82e, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x85d5f82e, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x59cbbe78, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x4e0)) returned 1 [0184.466] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0184.466] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F8ADDA6A2780337CB00EA6CFD0D333B43A478BE7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f8adda6a2780337cb00ea6cfd0d333b43a478be7"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F8ADDA6A2780337CB00EA6CFD0D333B43A478BE7.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f8adda6a2780337cb00ea6cfd0d333b43a478be7.xuy")) returned 1 [0184.467] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F8E997939CE39ACF17F9BF64CDB0813E72C16A3B", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F8E997939CE39ACF17F9BF64CDB0813E72C16A3B", lpFilePart=0x0) returned 0x85 [0184.467] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0184.467] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F8E997939CE39ACF17F9BF64CDB0813E72C16A3B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f8e997939ce39acf17f9bf64cdb0813e72c16a3b"), fInfoLevelId=0x0, lpFileInformation=0x2369f58 | out: lpFileInformation=0x2369f58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5ed6267c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x5ed6267c, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x6152bc7d, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x1b5c)) returned 1 [0184.467] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0184.467] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F8E997939CE39ACF17F9BF64CDB0813E72C16A3B", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F8E997939CE39ACF17F9BF64CDB0813E72C16A3B", lpFilePart=0x0) returned 0x85 [0184.467] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0184.467] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F8E997939CE39ACF17F9BF64CDB0813E72C16A3B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f8e997939ce39acf17f9bf64cdb0813e72c16a3b"), fInfoLevelId=0x0, lpFileInformation=0x236a158 | out: lpFileInformation=0x236a158*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5ed6267c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x5ed6267c, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x6152bc7d, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x1b5c)) returned 1 [0184.467] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0184.468] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F8E997939CE39ACF17F9BF64CDB0813E72C16A3B", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F8E997939CE39ACF17F9BF64CDB0813E72C16A3B", lpFilePart=0x0) returned 0x85 [0184.468] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0184.468] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F8E997939CE39ACF17F9BF64CDB0813E72C16A3B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f8e997939ce39acf17f9bf64cdb0813e72c16a3b"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0184.468] GetFileType (hFile=0x444) returned 0x1 [0184.468] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0184.468] GetFileType (hFile=0x444) returned 0x1 [0184.468] ReadFile (in: hFile=0x444, lpBuffer=0x236c688, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x236c688*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0184.524] CloseHandle (hObject=0x444) returned 1 [0184.524] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F8E997939CE39ACF17F9BF64CDB0813E72C16A3B", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F8E997939CE39ACF17F9BF64CDB0813E72C16A3B", lpFilePart=0x0) returned 0x85 [0184.524] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0184.524] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F8E997939CE39ACF17F9BF64CDB0813E72C16A3B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f8e997939ce39acf17f9bf64cdb0813e72c16a3b"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0184.524] GetFileType (hFile=0x444) returned 0x1 [0184.524] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0184.524] GetFileType (hFile=0x444) returned 0x1 [0184.524] WriteFile (in: hFile=0x444, lpBuffer=0x2179d68*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x2179d68*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0184.525] CloseHandle (hObject=0x444) returned 1 [0184.525] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F8E997939CE39ACF17F9BF64CDB0813E72C16A3B", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F8E997939CE39ACF17F9BF64CDB0813E72C16A3B", lpFilePart=0x0) returned 0x85 [0184.525] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F8E997939CE39ACF17F9BF64CDB0813E72C16A3B.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F8E997939CE39ACF17F9BF64CDB0813E72C16A3B.xuy", lpFilePart=0x0) returned 0x89 [0184.525] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0184.525] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F8E997939CE39ACF17F9BF64CDB0813E72C16A3B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f8e997939ce39acf17f9bf64cdb0813e72c16a3b"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5ed6267c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x5ed6267c, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x59d54b12, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0184.525] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0184.525] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F8E997939CE39ACF17F9BF64CDB0813E72C16A3B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f8e997939ce39acf17f9bf64cdb0813e72c16a3b"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F8E997939CE39ACF17F9BF64CDB0813E72C16A3B.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f8e997939ce39acf17f9bf64cdb0813e72c16a3b.xuy")) returned 1 [0184.526] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F936163EAD042BB4759BE1DE9F87BAE451B4E83F", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F936163EAD042BB4759BE1DE9F87BAE451B4E83F", lpFilePart=0x0) returned 0x85 [0184.526] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0184.526] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F936163EAD042BB4759BE1DE9F87BAE451B4E83F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f936163ead042bb4759be1de9f87bae451b4e83f"), fInfoLevelId=0x0, lpFileInformation=0x21ee1d8 | out: lpFileInformation=0x21ee1d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8776dd9e, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x8776dd9e, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x87772ba1, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x923)) returned 1 [0184.527] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0184.527] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F936163EAD042BB4759BE1DE9F87BAE451B4E83F", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F936163EAD042BB4759BE1DE9F87BAE451B4E83F", lpFilePart=0x0) returned 0x85 [0184.527] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0184.527] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F936163EAD042BB4759BE1DE9F87BAE451B4E83F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f936163ead042bb4759be1de9f87bae451b4e83f"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0184.527] GetFileType (hFile=0x444) returned 0x1 [0184.527] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0184.527] GetFileType (hFile=0x444) returned 0x1 [0184.527] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x923 [0184.527] ReadFile (in: hFile=0x444, lpBuffer=0x21eef18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x21eef18*, lpNumberOfBytesRead=0x3be5c8*=0x923, lpOverlapped=0x0) returned 1 [0184.528] CloseHandle (hObject=0x444) returned 1 [0184.539] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F936163EAD042BB4759BE1DE9F87BAE451B4E83F", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F936163EAD042BB4759BE1DE9F87BAE451B4E83F", lpFilePart=0x0) returned 0x85 [0184.540] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0184.540] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F936163EAD042BB4759BE1DE9F87BAE451B4E83F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f936163ead042bb4759be1de9f87bae451b4e83f"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0184.542] GetFileType (hFile=0x444) returned 0x1 [0184.542] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0184.542] GetFileType (hFile=0x444) returned 0x1 [0184.542] WriteFile (in: hFile=0x444, lpBuffer=0x2268da0*, nNumberOfBytesToWrite=0x930, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x2268da0*, lpNumberOfBytesWritten=0x3be4d8*=0x930, lpOverlapped=0x0) returned 1 [0184.543] CloseHandle (hObject=0x444) returned 1 [0184.544] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F936163EAD042BB4759BE1DE9F87BAE451B4E83F", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F936163EAD042BB4759BE1DE9F87BAE451B4E83F", lpFilePart=0x0) returned 0x85 [0184.544] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F936163EAD042BB4759BE1DE9F87BAE451B4E83F.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F936163EAD042BB4759BE1DE9F87BAE451B4E83F.xuy", lpFilePart=0x0) returned 0x89 [0184.544] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0184.544] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F936163EAD042BB4759BE1DE9F87BAE451B4E83F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f936163ead042bb4759be1de9f87bae451b4e83f"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8776dd9e, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x8776dd9e, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x59d7cd9a, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x930)) returned 1 [0184.544] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0184.544] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F936163EAD042BB4759BE1DE9F87BAE451B4E83F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f936163ead042bb4759be1de9f87bae451b4e83f"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F936163EAD042BB4759BE1DE9F87BAE451B4E83F.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f936163ead042bb4759be1de9f87bae451b4e83f.xuy")) returned 1 [0184.546] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F9A2F2909435E63F6EF590817897771342C91DAC", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F9A2F2909435E63F6EF590817897771342C91DAC", lpFilePart=0x0) returned 0x85 [0184.546] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0184.546] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F9A2F2909435E63F6EF590817897771342C91DAC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f9a2f2909435e63f6ef590817897771342c91dac"), fInfoLevelId=0x0, lpFileInformation=0x226a160 | out: lpFileInformation=0x226a160*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61551d8c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x61551d8c, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x61551d8c, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x1139)) returned 1 [0184.546] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0184.546] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F9A2F2909435E63F6EF590817897771342C91DAC", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F9A2F2909435E63F6EF590817897771342C91DAC", lpFilePart=0x0) returned 0x85 [0184.546] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0184.546] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F9A2F2909435E63F6EF590817897771342C91DAC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f9a2f2909435e63f6ef590817897771342c91dac"), fInfoLevelId=0x0, lpFileInformation=0x226a360 | out: lpFileInformation=0x226a360*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61551d8c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x61551d8c, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x61551d8c, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x1139)) returned 1 [0184.546] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0184.546] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F9A2F2909435E63F6EF590817897771342C91DAC", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F9A2F2909435E63F6EF590817897771342C91DAC", lpFilePart=0x0) returned 0x85 [0184.547] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0184.547] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F9A2F2909435E63F6EF590817897771342C91DAC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f9a2f2909435e63f6ef590817897771342c91dac"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0184.548] GetFileType (hFile=0x444) returned 0x1 [0184.548] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0184.548] GetFileType (hFile=0x444) returned 0x1 [0184.548] ReadFile (in: hFile=0x444, lpBuffer=0x226c890, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x226c890*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0184.697] CloseHandle (hObject=0x444) returned 1 [0184.698] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F9A2F2909435E63F6EF590817897771342C91DAC", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F9A2F2909435E63F6EF590817897771342C91DAC", lpFilePart=0x0) returned 0x85 [0184.698] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0184.698] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F9A2F2909435E63F6EF590817897771342C91DAC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f9a2f2909435e63f6ef590817897771342c91dac"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0184.698] GetFileType (hFile=0x444) returned 0x1 [0184.698] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0184.698] GetFileType (hFile=0x444) returned 0x1 [0184.698] WriteFile (in: hFile=0x444, lpBuffer=0x226a540*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x226a540*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0184.698] CloseHandle (hObject=0x444) returned 1 [0184.698] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F9A2F2909435E63F6EF590817897771342C91DAC", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F9A2F2909435E63F6EF590817897771342C91DAC", lpFilePart=0x0) returned 0x85 [0184.698] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F9A2F2909435E63F6EF590817897771342C91DAC.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F9A2F2909435E63F6EF590817897771342C91DAC.xuy", lpFilePart=0x0) returned 0x89 [0184.698] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0184.699] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F9A2F2909435E63F6EF590817897771342C91DAC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f9a2f2909435e63f6ef590817897771342c91dac"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61551d8c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x61551d8c, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x59ef82ff, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0184.699] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0184.699] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F9A2F2909435E63F6EF590817897771342C91DAC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f9a2f2909435e63f6ef590817897771342c91dac"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F9A2F2909435E63F6EF590817897771342C91DAC.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f9a2f2909435e63f6ef590817897771342c91dac.xuy")) returned 1 [0184.700] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F9AE75E3ED4BC0E626BE654B838B134CB24877FB", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F9AE75E3ED4BC0E626BE654B838B134CB24877FB", lpFilePart=0x0) returned 0x85 [0184.700] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0184.700] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F9AE75E3ED4BC0E626BE654B838B134CB24877FB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f9ae75e3ed4bc0e626be654b838b134cb24877fb"), fInfoLevelId=0x0, lpFileInformation=0x22e8e38 | out: lpFileInformation=0x22e8e38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56f05be8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x56f05be8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x56f05be8, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x18d9)) returned 1 [0184.700] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0184.700] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F9AE75E3ED4BC0E626BE654B838B134CB24877FB", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F9AE75E3ED4BC0E626BE654B838B134CB24877FB", lpFilePart=0x0) returned 0x85 [0184.700] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0184.700] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F9AE75E3ED4BC0E626BE654B838B134CB24877FB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f9ae75e3ed4bc0e626be654b838b134cb24877fb"), fInfoLevelId=0x0, lpFileInformation=0x22e9038 | out: lpFileInformation=0x22e9038*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56f05be8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x56f05be8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x56f05be8, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x18d9)) returned 1 [0184.700] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0184.701] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F9AE75E3ED4BC0E626BE654B838B134CB24877FB", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F9AE75E3ED4BC0E626BE654B838B134CB24877FB", lpFilePart=0x0) returned 0x85 [0184.701] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0184.701] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F9AE75E3ED4BC0E626BE654B838B134CB24877FB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f9ae75e3ed4bc0e626be654b838b134cb24877fb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0184.702] GetFileType (hFile=0x444) returned 0x1 [0184.702] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0184.702] GetFileType (hFile=0x444) returned 0x1 [0184.702] ReadFile (in: hFile=0x444, lpBuffer=0x22eb568, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x22eb568*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0184.714] CloseHandle (hObject=0x444) returned 1 [0184.714] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F9AE75E3ED4BC0E626BE654B838B134CB24877FB", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F9AE75E3ED4BC0E626BE654B838B134CB24877FB", lpFilePart=0x0) returned 0x85 [0184.714] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0184.714] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F9AE75E3ED4BC0E626BE654B838B134CB24877FB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f9ae75e3ed4bc0e626be654b838b134cb24877fb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0184.715] GetFileType (hFile=0x444) returned 0x1 [0184.715] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0184.715] GetFileType (hFile=0x444) returned 0x1 [0184.715] WriteFile (in: hFile=0x444, lpBuffer=0x22e9218*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x22e9218*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0184.715] CloseHandle (hObject=0x444) returned 1 [0184.715] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F9AE75E3ED4BC0E626BE654B838B134CB24877FB", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F9AE75E3ED4BC0E626BE654B838B134CB24877FB", lpFilePart=0x0) returned 0x85 [0184.715] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F9AE75E3ED4BC0E626BE654B838B134CB24877FB.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F9AE75E3ED4BC0E626BE654B838B134CB24877FB.xuy", lpFilePart=0x0) returned 0x89 [0184.715] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0184.715] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F9AE75E3ED4BC0E626BE654B838B134CB24877FB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f9ae75e3ed4bc0e626be654b838b134cb24877fb"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56f05be8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x56f05be8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x59f1e3d0, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0184.715] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0184.716] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F9AE75E3ED4BC0E626BE654B838B134CB24877FB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f9ae75e3ed4bc0e626be654b838b134cb24877fb"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F9AE75E3ED4BC0E626BE654B838B134CB24877FB.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f9ae75e3ed4bc0e626be654b838b134cb24877fb.xuy")) returned 1 [0184.717] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F9D7F87A5111531ED1228D6215F3F149AB84B11F", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F9D7F87A5111531ED1228D6215F3F149AB84B11F", lpFilePart=0x0) returned 0x85 [0184.717] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0184.717] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F9D7F87A5111531ED1228D6215F3F149AB84B11F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f9d7f87a5111531ed1228d6215f3f149ab84b11f"), fInfoLevelId=0x0, lpFileInformation=0x2367b10 | out: lpFileInformation=0x2367b10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6159e1e8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x6159e1e8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x6159e1e8, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0xed6)) returned 1 [0184.717] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0184.717] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F9D7F87A5111531ED1228D6215F3F149AB84B11F", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F9D7F87A5111531ED1228D6215F3F149AB84B11F", lpFilePart=0x0) returned 0x85 [0184.717] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0184.717] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F9D7F87A5111531ED1228D6215F3F149AB84B11F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f9d7f87a5111531ed1228d6215f3f149ab84b11f"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0184.718] GetFileType (hFile=0x444) returned 0x1 [0184.718] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0184.718] GetFileType (hFile=0x444) returned 0x1 [0184.718] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xed6 [0184.718] ReadFile (in: hFile=0x444, lpBuffer=0x2368e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x2368e00*, lpNumberOfBytesRead=0x3be5c8*=0xed6, lpOverlapped=0x0) returned 1 [0184.727] CloseHandle (hObject=0x444) returned 1 [0184.779] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F9D7F87A5111531ED1228D6215F3F149AB84B11F", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F9D7F87A5111531ED1228D6215F3F149AB84B11F", lpFilePart=0x0) returned 0x85 [0184.779] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0184.779] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F9D7F87A5111531ED1228D6215F3F149AB84B11F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f9d7f87a5111531ed1228d6215f3f149ab84b11f"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0184.781] GetFileType (hFile=0x444) returned 0x1 [0184.781] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0184.781] GetFileType (hFile=0x444) returned 0x1 [0184.781] WriteFile (in: hFile=0x444, lpBuffer=0x21e7de0*, nNumberOfBytesToWrite=0xee0, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x21e7de0*, lpNumberOfBytesWritten=0x3be4d8*=0xee0, lpOverlapped=0x0) returned 1 [0184.782] CloseHandle (hObject=0x444) returned 1 [0184.782] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F9D7F87A5111531ED1228D6215F3F149AB84B11F", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F9D7F87A5111531ED1228D6215F3F149AB84B11F", lpFilePart=0x0) returned 0x85 [0184.782] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F9D7F87A5111531ED1228D6215F3F149AB84B11F.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F9D7F87A5111531ED1228D6215F3F149AB84B11F.xuy", lpFilePart=0x0) returned 0x89 [0184.782] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0184.782] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F9D7F87A5111531ED1228D6215F3F149AB84B11F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f9d7f87a5111531ed1228d6215f3f149ab84b11f"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6159e1e8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x6159e1e8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x59fb6e8e, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xee0)) returned 1 [0184.783] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0184.783] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F9D7F87A5111531ED1228D6215F3F149AB84B11F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f9d7f87a5111531ed1228d6215f3f149ab84b11f"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F9D7F87A5111531ED1228D6215F3F149AB84B11F.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f9d7f87a5111531ed1228d6215f3f149ab84b11f.xuy")) returned 1 [0184.801] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F9E8EC185099DCA2B57DF193413A10E49A526035", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F9E8EC185099DCA2B57DF193413A10E49A526035", lpFilePart=0x0) returned 0x85 [0184.801] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0184.801] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F9E8EC185099DCA2B57DF193413A10E49A526035" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f9e8ec185099dca2b57df193413a10e49a526035"), fInfoLevelId=0x0, lpFileInformation=0x21e91a0 | out: lpFileInformation=0x21e91a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46e0c2c3, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x46e0c2c3, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x46e0c2c3, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0x3fad)) returned 1 [0184.801] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0184.802] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F9E8EC185099DCA2B57DF193413A10E49A526035", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F9E8EC185099DCA2B57DF193413A10E49A526035", lpFilePart=0x0) returned 0x85 [0184.802] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0184.802] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F9E8EC185099DCA2B57DF193413A10E49A526035" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f9e8ec185099dca2b57df193413a10e49a526035"), fInfoLevelId=0x0, lpFileInformation=0x21e93a0 | out: lpFileInformation=0x21e93a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46e0c2c3, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x46e0c2c3, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x46e0c2c3, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0x3fad)) returned 1 [0184.802] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0184.802] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F9E8EC185099DCA2B57DF193413A10E49A526035", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F9E8EC185099DCA2B57DF193413A10E49A526035", lpFilePart=0x0) returned 0x85 [0184.802] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0184.802] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F9E8EC185099DCA2B57DF193413A10E49A526035" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f9e8ec185099dca2b57df193413a10e49a526035"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0184.803] GetFileType (hFile=0x444) returned 0x1 [0184.803] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0184.803] GetFileType (hFile=0x444) returned 0x1 [0184.803] ReadFile (in: hFile=0x444, lpBuffer=0x21eb8d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x21eb8d0*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0184.815] CloseHandle (hObject=0x444) returned 1 [0184.815] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F9E8EC185099DCA2B57DF193413A10E49A526035", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F9E8EC185099DCA2B57DF193413A10E49A526035", lpFilePart=0x0) returned 0x85 [0184.815] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0184.815] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F9E8EC185099DCA2B57DF193413A10E49A526035" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f9e8ec185099dca2b57df193413a10e49a526035"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0184.816] GetFileType (hFile=0x444) returned 0x1 [0184.816] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0184.816] GetFileType (hFile=0x444) returned 0x1 [0184.816] WriteFile (in: hFile=0x444, lpBuffer=0x21e9580*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x21e9580*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0184.816] CloseHandle (hObject=0x444) returned 1 [0184.816] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F9E8EC185099DCA2B57DF193413A10E49A526035", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F9E8EC185099DCA2B57DF193413A10E49A526035", lpFilePart=0x0) returned 0x85 [0184.816] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F9E8EC185099DCA2B57DF193413A10E49A526035.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F9E8EC185099DCA2B57DF193413A10E49A526035.xuy", lpFilePart=0x0) returned 0x89 [0184.816] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0184.816] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F9E8EC185099DCA2B57DF193413A10E49A526035" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f9e8ec185099dca2b57df193413a10e49a526035"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46e0c2c3, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x46e0c2c3, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x5a029897, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x3fad)) returned 1 [0184.816] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0184.816] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F9E8EC185099DCA2B57DF193413A10E49A526035" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f9e8ec185099dca2b57df193413a10e49a526035"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F9E8EC185099DCA2B57DF193413A10E49A526035.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f9e8ec185099dca2b57df193413a10e49a526035.xuy")) returned 1 [0184.818] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FA7D8CB4A75665AE4E1047FF5BDA52F144A8E68D", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FA7D8CB4A75665AE4E1047FF5BDA52F144A8E68D", lpFilePart=0x0) returned 0x85 [0184.818] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0184.818] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FA7D8CB4A75665AE4E1047FF5BDA52F144A8E68D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\fa7d8cb4a75665ae4e1047ff5bda52f144a8e68d"), fInfoLevelId=0x0, lpFileInformation=0x2267e78 | out: lpFileInformation=0x2267e78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f9e8496, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3f9e8496, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x3f9ed2af, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0xd52)) returned 1 [0184.818] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0184.818] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FA7D8CB4A75665AE4E1047FF5BDA52F144A8E68D", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FA7D8CB4A75665AE4E1047FF5BDA52F144A8E68D", lpFilePart=0x0) returned 0x85 [0184.818] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0184.818] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FA7D8CB4A75665AE4E1047FF5BDA52F144A8E68D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\fa7d8cb4a75665ae4e1047ff5bda52f144a8e68d"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0184.818] GetFileType (hFile=0x444) returned 0x1 [0184.818] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0184.818] GetFileType (hFile=0x444) returned 0x1 [0184.818] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xd52 [0184.818] ReadFile (in: hFile=0x444, lpBuffer=0x2268fe8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x2268fe8*, lpNumberOfBytesRead=0x3be5c8*=0xd52, lpOverlapped=0x0) returned 1 [0184.830] CloseHandle (hObject=0x444) returned 1 [0184.840] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FA7D8CB4A75665AE4E1047FF5BDA52F144A8E68D", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FA7D8CB4A75665AE4E1047FF5BDA52F144A8E68D", lpFilePart=0x0) returned 0x85 [0184.840] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0184.840] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FA7D8CB4A75665AE4E1047FF5BDA52F144A8E68D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\fa7d8cb4a75665ae4e1047ff5bda52f144a8e68d"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0184.842] GetFileType (hFile=0x444) returned 0x1 [0184.842] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0184.842] GetFileType (hFile=0x444) returned 0x1 [0184.842] WriteFile (in: hFile=0x444, lpBuffer=0x22e4360*, nNumberOfBytesToWrite=0xd60, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x22e4360*, lpNumberOfBytesWritten=0x3be4d8*=0xd60, lpOverlapped=0x0) returned 1 [0184.843] CloseHandle (hObject=0x444) returned 1 [0184.843] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FA7D8CB4A75665AE4E1047FF5BDA52F144A8E68D", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FA7D8CB4A75665AE4E1047FF5BDA52F144A8E68D", lpFilePart=0x0) returned 0x85 [0184.843] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FA7D8CB4A75665AE4E1047FF5BDA52F144A8E68D.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FA7D8CB4A75665AE4E1047FF5BDA52F144A8E68D.xuy", lpFilePart=0x0) returned 0x89 [0184.843] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0184.843] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FA7D8CB4A75665AE4E1047FF5BDA52F144A8E68D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\fa7d8cb4a75665ae4e1047ff5bda52f144a8e68d"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f9e8496, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3f9e8496, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x5a04f670, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xd60)) returned 1 [0184.843] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0184.843] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FA7D8CB4A75665AE4E1047FF5BDA52F144A8E68D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\fa7d8cb4a75665ae4e1047ff5bda52f144a8e68d"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FA7D8CB4A75665AE4E1047FF5BDA52F144A8E68D.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\fa7d8cb4a75665ae4e1047ff5bda52f144a8e68d.xuy")) returned 1 [0184.845] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FB0089835B5C9B7196C5139B4F42040B6ACD3FAB", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FB0089835B5C9B7196C5139B4F42040B6ACD3FAB", lpFilePart=0x0) returned 0x85 [0184.845] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0184.845] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FB0089835B5C9B7196C5139B4F42040B6ACD3FAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\fb0089835b5c9b7196c5139b4f42040b6acd3fab"), fInfoLevelId=0x0, lpFileInformation=0x22e5720 | out: lpFileInformation=0x22e5720*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x465c4c9e, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x465c4c9e, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x465c4c9e, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0x49b3)) returned 1 [0184.845] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0184.845] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FB0089835B5C9B7196C5139B4F42040B6ACD3FAB", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FB0089835B5C9B7196C5139B4F42040B6ACD3FAB", lpFilePart=0x0) returned 0x85 [0184.845] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0184.845] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FB0089835B5C9B7196C5139B4F42040B6ACD3FAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\fb0089835b5c9b7196c5139b4f42040b6acd3fab"), fInfoLevelId=0x0, lpFileInformation=0x22e5920 | out: lpFileInformation=0x22e5920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x465c4c9e, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x465c4c9e, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x465c4c9e, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0x49b3)) returned 1 [0184.847] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0184.847] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FB0089835B5C9B7196C5139B4F42040B6ACD3FAB", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FB0089835B5C9B7196C5139B4F42040B6ACD3FAB", lpFilePart=0x0) returned 0x85 [0184.847] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0184.847] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FB0089835B5C9B7196C5139B4F42040B6ACD3FAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\fb0089835b5c9b7196c5139b4f42040b6acd3fab"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0184.849] GetFileType (hFile=0x444) returned 0x1 [0184.849] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0184.849] GetFileType (hFile=0x444) returned 0x1 [0184.849] ReadFile (in: hFile=0x444, lpBuffer=0x22e7e50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x22e7e50*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0184.868] CloseHandle (hObject=0x444) returned 1 [0184.868] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FB0089835B5C9B7196C5139B4F42040B6ACD3FAB", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FB0089835B5C9B7196C5139B4F42040B6ACD3FAB", lpFilePart=0x0) returned 0x85 [0184.868] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0184.868] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FB0089835B5C9B7196C5139B4F42040B6ACD3FAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\fb0089835b5c9b7196c5139b4f42040b6acd3fab"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0184.869] GetFileType (hFile=0x444) returned 0x1 [0184.869] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0184.869] GetFileType (hFile=0x444) returned 0x1 [0184.869] WriteFile (in: hFile=0x444, lpBuffer=0x22e5b00*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x22e5b00*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0184.869] CloseHandle (hObject=0x444) returned 1 [0184.869] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FB0089835B5C9B7196C5139B4F42040B6ACD3FAB", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FB0089835B5C9B7196C5139B4F42040B6ACD3FAB", lpFilePart=0x0) returned 0x85 [0184.869] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FB0089835B5C9B7196C5139B4F42040B6ACD3FAB.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FB0089835B5C9B7196C5139B4F42040B6ACD3FAB.xuy", lpFilePart=0x0) returned 0x89 [0184.869] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0184.869] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FB0089835B5C9B7196C5139B4F42040B6ACD3FAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\fb0089835b5c9b7196c5139b4f42040b6acd3fab"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x465c4c9e, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x465c4c9e, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x5a09bba4, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x49b3)) returned 1 [0184.869] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0184.869] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FB0089835B5C9B7196C5139B4F42040B6ACD3FAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\fb0089835b5c9b7196c5139b4f42040b6acd3fab"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FB0089835B5C9B7196C5139B4F42040B6ACD3FAB.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\fb0089835b5c9b7196c5139b4f42040b6acd3fab.xuy")) returned 1 [0184.871] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FB1883674369F31DFBE94F534555088A34C57B70", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FB1883674369F31DFBE94F534555088A34C57B70", lpFilePart=0x0) returned 0x85 [0184.871] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0184.871] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FB1883674369F31DFBE94F534555088A34C57B70" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\fb1883674369f31dfbe94f534555088a34c57b70"), fInfoLevelId=0x0, lpFileInformation=0x23643f8 | out: lpFileInformation=0x23643f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c762e64, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x5c762e64, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x5c762e64, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x521)) returned 1 [0184.871] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0184.871] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FB1883674369F31DFBE94F534555088A34C57B70", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FB1883674369F31DFBE94F534555088A34C57B70", lpFilePart=0x0) returned 0x85 [0184.871] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0184.871] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FB1883674369F31DFBE94F534555088A34C57B70" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\fb1883674369f31dfbe94f534555088a34c57b70"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0184.871] GetFileType (hFile=0x444) returned 0x1 [0184.871] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0184.871] GetFileType (hFile=0x444) returned 0x1 [0184.871] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x521 [0184.871] ReadFile (in: hFile=0x444, lpBuffer=0x2364d38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x2364d38*, lpNumberOfBytesRead=0x3be5c8*=0x521, lpOverlapped=0x0) returned 1 [0184.873] CloseHandle (hObject=0x444) returned 1 [0184.915] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FB1883674369F31DFBE94F534555088A34C57B70", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FB1883674369F31DFBE94F534555088A34C57B70", lpFilePart=0x0) returned 0x85 [0184.915] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0184.915] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FB1883674369F31DFBE94F534555088A34C57B70" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\fb1883674369f31dfbe94f534555088a34c57b70"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0184.917] GetFileType (hFile=0x444) returned 0x1 [0184.917] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0184.917] GetFileType (hFile=0x444) returned 0x1 [0184.917] WriteFile (in: hFile=0x444, lpBuffer=0x21e00b8*, nNumberOfBytesToWrite=0x530, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x21e00b8*, lpNumberOfBytesWritten=0x3be4d8*=0x530, lpOverlapped=0x0) returned 1 [0184.917] CloseHandle (hObject=0x444) returned 1 [0184.918] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FB1883674369F31DFBE94F534555088A34C57B70", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FB1883674369F31DFBE94F534555088A34C57B70", lpFilePart=0x0) returned 0x85 [0184.918] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FB1883674369F31DFBE94F534555088A34C57B70.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FB1883674369F31DFBE94F534555088A34C57B70.xuy", lpFilePart=0x0) returned 0x89 [0184.918] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0184.918] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FB1883674369F31DFBE94F534555088A34C57B70" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\fb1883674369f31dfbe94f534555088a34c57b70"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c762e64, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x5c762e64, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x5a10e6ab, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x530)) returned 1 [0184.918] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0184.918] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FB1883674369F31DFBE94F534555088A34C57B70" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\fb1883674369f31dfbe94f534555088a34c57b70"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FB1883674369F31DFBE94F534555088A34C57B70.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\fb1883674369f31dfbe94f534555088a34c57b70.xuy")) returned 1 [0184.919] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FB1E7A9A796B06D8E3FEC1865E89B7487DA1F8CA", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FB1E7A9A796B06D8E3FEC1865E89B7487DA1F8CA", lpFilePart=0x0) returned 0x85 [0184.919] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0184.919] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FB1E7A9A796B06D8E3FEC1865E89B7487DA1F8CA" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\fb1e7a9a796b06d8e3fec1865e89b7487da1f8ca"), fInfoLevelId=0x0, lpFileInformation=0x21e1478 | out: lpFileInformation=0x21e1478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x828f5027, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x828f5027, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x8291c10d, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x4d2)) returned 1 [0184.919] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0184.919] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FB1E7A9A796B06D8E3FEC1865E89B7487DA1F8CA", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FB1E7A9A796B06D8E3FEC1865E89B7487DA1F8CA", lpFilePart=0x0) returned 0x85 [0184.919] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0184.919] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FB1E7A9A796B06D8E3FEC1865E89B7487DA1F8CA" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\fb1e7a9a796b06d8e3fec1865e89b7487da1f8ca"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0184.920] GetFileType (hFile=0x444) returned 0x1 [0184.920] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0184.920] GetFileType (hFile=0x444) returned 0x1 [0184.920] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x4d2 [0184.920] ReadFile (in: hFile=0x444, lpBuffer=0x21e1d68, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x21e1d68*, lpNumberOfBytesRead=0x3be5c8*=0x4d2, lpOverlapped=0x0) returned 1 [0184.933] CloseHandle (hObject=0x444) returned 1 [0184.943] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FB1E7A9A796B06D8E3FEC1865E89B7487DA1F8CA", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FB1E7A9A796B06D8E3FEC1865E89B7487DA1F8CA", lpFilePart=0x0) returned 0x85 [0184.943] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0184.943] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FB1E7A9A796B06D8E3FEC1865E89B7487DA1F8CA" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\fb1e7a9a796b06d8e3fec1865e89b7487da1f8ca"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0184.945] GetFileType (hFile=0x444) returned 0x1 [0184.945] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0184.945] GetFileType (hFile=0x444) returned 0x1 [0184.946] WriteFile (in: hFile=0x444, lpBuffer=0x225a660*, nNumberOfBytesToWrite=0x4e0, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x225a660*, lpNumberOfBytesWritten=0x3be4d8*=0x4e0, lpOverlapped=0x0) returned 1 [0184.946] CloseHandle (hObject=0x444) returned 1 [0184.946] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FB1E7A9A796B06D8E3FEC1865E89B7487DA1F8CA", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FB1E7A9A796B06D8E3FEC1865E89B7487DA1F8CA", lpFilePart=0x0) returned 0x85 [0184.947] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FB1E7A9A796B06D8E3FEC1865E89B7487DA1F8CA.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FB1E7A9A796B06D8E3FEC1865E89B7487DA1F8CA.xuy", lpFilePart=0x0) returned 0x89 [0184.947] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0184.947] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FB1E7A9A796B06D8E3FEC1865E89B7487DA1F8CA" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\fb1e7a9a796b06d8e3fec1865e89b7487da1f8ca"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x828f5027, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x828f5027, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x5a15a7b2, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x4e0)) returned 1 [0184.947] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0184.947] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FB1E7A9A796B06D8E3FEC1865E89B7487DA1F8CA" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\fb1e7a9a796b06d8e3fec1865e89b7487da1f8ca"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FB1E7A9A796B06D8E3FEC1865E89B7487DA1F8CA.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\fb1e7a9a796b06d8e3fec1865e89b7487da1f8ca.xuy")) returned 1 [0184.948] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FB4782F8039A28310BC1249D8C4AD8EA12F700D8", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FB4782F8039A28310BC1249D8C4AD8EA12F700D8", lpFilePart=0x0) returned 0x85 [0184.948] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0184.948] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FB4782F8039A28310BC1249D8C4AD8EA12F700D8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\fb4782f8039a28310bc1249d8c4ad8ea12f700d8"), fInfoLevelId=0x0, lpFileInformation=0x225ba20 | out: lpFileInformation=0x225ba20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6159e1e8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x6159e1e8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x6159e1e8, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x1137)) returned 1 [0184.948] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0184.948] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FB4782F8039A28310BC1249D8C4AD8EA12F700D8", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FB4782F8039A28310BC1249D8C4AD8EA12F700D8", lpFilePart=0x0) returned 0x85 [0184.949] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0184.949] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FB4782F8039A28310BC1249D8C4AD8EA12F700D8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\fb4782f8039a28310bc1249d8c4ad8ea12f700d8"), fInfoLevelId=0x0, lpFileInformation=0x225bc20 | out: lpFileInformation=0x225bc20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6159e1e8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x6159e1e8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x6159e1e8, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x1137)) returned 1 [0184.949] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0184.949] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FB4782F8039A28310BC1249D8C4AD8EA12F700D8", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FB4782F8039A28310BC1249D8C4AD8EA12F700D8", lpFilePart=0x0) returned 0x85 [0184.949] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0184.949] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FB4782F8039A28310BC1249D8C4AD8EA12F700D8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\fb4782f8039a28310bc1249d8c4ad8ea12f700d8"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0184.950] GetFileType (hFile=0x444) returned 0x1 [0184.950] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0184.950] GetFileType (hFile=0x444) returned 0x1 [0184.950] ReadFile (in: hFile=0x444, lpBuffer=0x225e150, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x225e150*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0184.983] CloseHandle (hObject=0x444) returned 1 [0184.983] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FB4782F8039A28310BC1249D8C4AD8EA12F700D8", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FB4782F8039A28310BC1249D8C4AD8EA12F700D8", lpFilePart=0x0) returned 0x85 [0184.984] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0184.984] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FB4782F8039A28310BC1249D8C4AD8EA12F700D8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\fb4782f8039a28310bc1249d8c4ad8ea12f700d8"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0184.984] GetFileType (hFile=0x444) returned 0x1 [0184.984] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0184.984] GetFileType (hFile=0x444) returned 0x1 [0184.984] WriteFile (in: hFile=0x444, lpBuffer=0x225be00*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x225be00*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0184.984] CloseHandle (hObject=0x444) returned 1 [0184.984] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FB4782F8039A28310BC1249D8C4AD8EA12F700D8", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FB4782F8039A28310BC1249D8C4AD8EA12F700D8", lpFilePart=0x0) returned 0x85 [0184.985] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FB4782F8039A28310BC1249D8C4AD8EA12F700D8.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FB4782F8039A28310BC1249D8C4AD8EA12F700D8.xuy", lpFilePart=0x0) returned 0x89 [0184.985] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0184.985] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FB4782F8039A28310BC1249D8C4AD8EA12F700D8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\fb4782f8039a28310bc1249d8c4ad8ea12f700d8"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6159e1e8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x6159e1e8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x5a1a6d99, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0184.985] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0184.985] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FB4782F8039A28310BC1249D8C4AD8EA12F700D8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\fb4782f8039a28310bc1249d8c4ad8ea12f700d8"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FB4782F8039A28310BC1249D8C4AD8EA12F700D8.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\fb4782f8039a28310bc1249d8c4ad8ea12f700d8.xuy")) returned 1 [0184.987] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FBEEBFE6936925D7556EA1E800E546E6497D38CB", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FBEEBFE6936925D7556EA1E800E546E6497D38CB", lpFilePart=0x0) returned 0x85 [0184.987] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0184.987] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FBEEBFE6936925D7556EA1E800E546E6497D38CB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\fbeebfe6936925d7556ea1e800e546e6497d38cb"), fInfoLevelId=0x0, lpFileInformation=0x22da6f8 | out: lpFileInformation=0x22da6f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48d30ecb, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x48d30ecb, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x48d7d353, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0x151b)) returned 1 [0184.987] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0184.987] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FBEEBFE6936925D7556EA1E800E546E6497D38CB", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FBEEBFE6936925D7556EA1E800E546E6497D38CB", lpFilePart=0x0) returned 0x85 [0184.987] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0184.987] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FBEEBFE6936925D7556EA1E800E546E6497D38CB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\fbeebfe6936925d7556ea1e800e546e6497d38cb"), fInfoLevelId=0x0, lpFileInformation=0x22da8f8 | out: lpFileInformation=0x22da8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48d30ecb, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x48d30ecb, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x48d7d353, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0x151b)) returned 1 [0184.987] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0184.987] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FBEEBFE6936925D7556EA1E800E546E6497D38CB", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FBEEBFE6936925D7556EA1E800E546E6497D38CB", lpFilePart=0x0) returned 0x85 [0184.987] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0184.987] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FBEEBFE6936925D7556EA1E800E546E6497D38CB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\fbeebfe6936925d7556ea1e800e546e6497d38cb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0184.988] GetFileType (hFile=0x444) returned 0x1 [0184.988] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0184.988] GetFileType (hFile=0x444) returned 0x1 [0184.988] ReadFile (in: hFile=0x444, lpBuffer=0x22dce28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x22dce28*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0185.015] CloseHandle (hObject=0x444) returned 1 [0185.041] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FBEEBFE6936925D7556EA1E800E546E6497D38CB", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FBEEBFE6936925D7556EA1E800E546E6497D38CB", lpFilePart=0x0) returned 0x85 [0185.041] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0185.041] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FBEEBFE6936925D7556EA1E800E546E6497D38CB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\fbeebfe6936925d7556ea1e800e546e6497d38cb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0185.041] GetFileType (hFile=0x444) returned 0x1 [0185.041] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0185.041] GetFileType (hFile=0x444) returned 0x1 [0185.041] WriteFile (in: hFile=0x444, lpBuffer=0x22daad8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x22daad8*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0185.041] CloseHandle (hObject=0x444) returned 1 [0185.042] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FBEEBFE6936925D7556EA1E800E546E6497D38CB", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FBEEBFE6936925D7556EA1E800E546E6497D38CB", lpFilePart=0x0) returned 0x85 [0185.042] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FBEEBFE6936925D7556EA1E800E546E6497D38CB.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FBEEBFE6936925D7556EA1E800E546E6497D38CB.xuy", lpFilePart=0x0) returned 0x89 [0185.042] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0185.042] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FBEEBFE6936925D7556EA1E800E546E6497D38CB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\fbeebfe6936925d7556ea1e800e546e6497d38cb"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48d30ecb, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x48d30ecb, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x5a23f5e6, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0185.042] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0185.042] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FBEEBFE6936925D7556EA1E800E546E6497D38CB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\fbeebfe6936925d7556ea1e800e546e6497d38cb"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FBEEBFE6936925D7556EA1E800E546E6497D38CB.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\fbeebfe6936925d7556ea1e800e546e6497d38cb.xuy")) returned 1 [0185.043] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FC1787C957C34EFD7EFEF65CF061DEF32996908F", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FC1787C957C34EFD7EFEF65CF061DEF32996908F", lpFilePart=0x0) returned 0x85 [0185.043] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0185.043] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FC1787C957C34EFD7EFEF65CF061DEF32996908F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\fc1787c957c34efd7efef65cf061def32996908f"), fInfoLevelId=0x0, lpFileInformation=0x23593d0 | out: lpFileInformation=0x23593d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86e87df5, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x86e87df5, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x86e87df5, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x1896)) returned 1 [0185.044] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0185.044] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FC1787C957C34EFD7EFEF65CF061DEF32996908F", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FC1787C957C34EFD7EFEF65CF061DEF32996908F", lpFilePart=0x0) returned 0x85 [0185.044] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0185.044] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FC1787C957C34EFD7EFEF65CF061DEF32996908F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\fc1787c957c34efd7efef65cf061def32996908f"), fInfoLevelId=0x0, lpFileInformation=0x23595d0 | out: lpFileInformation=0x23595d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86e87df5, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x86e87df5, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x86e87df5, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x1896)) returned 1 [0185.044] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0185.044] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FC1787C957C34EFD7EFEF65CF061DEF32996908F", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FC1787C957C34EFD7EFEF65CF061DEF32996908F", lpFilePart=0x0) returned 0x85 [0185.044] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0185.044] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FC1787C957C34EFD7EFEF65CF061DEF32996908F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\fc1787c957c34efd7efef65cf061def32996908f"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0185.045] GetFileType (hFile=0x444) returned 0x1 [0185.045] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0185.045] GetFileType (hFile=0x444) returned 0x1 [0185.045] ReadFile (in: hFile=0x444, lpBuffer=0x235bb00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x235bb00*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0185.106] CloseHandle (hObject=0x444) returned 1 [0185.106] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FC1787C957C34EFD7EFEF65CF061DEF32996908F", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FC1787C957C34EFD7EFEF65CF061DEF32996908F", lpFilePart=0x0) returned 0x85 [0185.106] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0185.106] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FC1787C957C34EFD7EFEF65CF061DEF32996908F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\fc1787c957c34efd7efef65cf061def32996908f"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0185.106] GetFileType (hFile=0x444) returned 0x1 [0185.106] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0185.106] GetFileType (hFile=0x444) returned 0x1 [0185.106] WriteFile (in: hFile=0x444, lpBuffer=0x2183dd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x2183dd8*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0185.107] CloseHandle (hObject=0x444) returned 1 [0185.107] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FC1787C957C34EFD7EFEF65CF061DEF32996908F", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FC1787C957C34EFD7EFEF65CF061DEF32996908F", lpFilePart=0x0) returned 0x85 [0185.107] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FC1787C957C34EFD7EFEF65CF061DEF32996908F.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FC1787C957C34EFD7EFEF65CF061DEF32996908F.xuy", lpFilePart=0x0) returned 0x89 [0185.107] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0185.107] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FC1787C957C34EFD7EFEF65CF061DEF32996908F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\fc1787c957c34efd7efef65cf061def32996908f"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86e87df5, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x86e87df5, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x5a2d8005, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0185.107] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0185.107] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FC1787C957C34EFD7EFEF65CF061DEF32996908F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\fc1787c957c34efd7efef65cf061def32996908f"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FC1787C957C34EFD7EFEF65CF061DEF32996908F.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\fc1787c957c34efd7efef65cf061def32996908f.xuy")) returned 1 [0185.109] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FC1C6D751C621BCF6ABCA0073C32A4F17E5BDCC7", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FC1C6D751C621BCF6ABCA0073C32A4F17E5BDCC7", lpFilePart=0x0) returned 0x85 [0185.109] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0185.109] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FC1C6D751C621BCF6ABCA0073C32A4F17E5BDCC7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\fc1c6d751c621bcf6abca0073c32a4f17e5bdcc7"), fInfoLevelId=0x0, lpFileInformation=0x21dc2c8 | out: lpFileInformation=0x21dc2c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf449a8f9, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xf449a8f9, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0xf449cfdd, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x4d2)) returned 1 [0185.109] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0185.109] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FC1C6D751C621BCF6ABCA0073C32A4F17E5BDCC7", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FC1C6D751C621BCF6ABCA0073C32A4F17E5BDCC7", lpFilePart=0x0) returned 0x85 [0185.109] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0185.109] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FC1C6D751C621BCF6ABCA0073C32A4F17E5BDCC7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\fc1c6d751c621bcf6abca0073c32a4f17e5bdcc7"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0185.109] GetFileType (hFile=0x444) returned 0x1 [0185.109] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0185.109] GetFileType (hFile=0x444) returned 0x1 [0185.109] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x4d2 [0185.109] ReadFile (in: hFile=0x444, lpBuffer=0x21dcbb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x21dcbb8*, lpNumberOfBytesRead=0x3be5c8*=0x4d2, lpOverlapped=0x0) returned 1 [0185.127] CloseHandle (hObject=0x444) returned 1 [0185.140] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FC1C6D751C621BCF6ABCA0073C32A4F17E5BDCC7", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FC1C6D751C621BCF6ABCA0073C32A4F17E5BDCC7", lpFilePart=0x0) returned 0x85 [0185.140] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0185.141] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FC1C6D751C621BCF6ABCA0073C32A4F17E5BDCC7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\fc1c6d751c621bcf6abca0073c32a4f17e5bdcc7"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0185.143] GetFileType (hFile=0x444) returned 0x1 [0185.143] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0185.143] GetFileType (hFile=0x444) returned 0x1 [0185.143] WriteFile (in: hFile=0x444, lpBuffer=0x22554b0*, nNumberOfBytesToWrite=0x4e0, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x22554b0*, lpNumberOfBytesWritten=0x3be4d8*=0x4e0, lpOverlapped=0x0) returned 1 [0185.143] CloseHandle (hObject=0x444) returned 1 [0185.144] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FC1C6D751C621BCF6ABCA0073C32A4F17E5BDCC7", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FC1C6D751C621BCF6ABCA0073C32A4F17E5BDCC7", lpFilePart=0x0) returned 0x85 [0185.144] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FC1C6D751C621BCF6ABCA0073C32A4F17E5BDCC7.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FC1C6D751C621BCF6ABCA0073C32A4F17E5BDCC7.xuy", lpFilePart=0x0) returned 0x89 [0185.144] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0185.144] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FC1C6D751C621BCF6ABCA0073C32A4F17E5BDCC7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\fc1c6d751c621bcf6abca0073c32a4f17e5bdcc7"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf449a8f9, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xf449a8f9, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x5a34b848, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x4e0)) returned 1 [0185.144] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0185.144] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FC1C6D751C621BCF6ABCA0073C32A4F17E5BDCC7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\fc1c6d751c621bcf6abca0073c32a4f17e5bdcc7"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FC1C6D751C621BCF6ABCA0073C32A4F17E5BDCC7.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\fc1c6d751c621bcf6abca0073c32a4f17e5bdcc7.xuy")) returned 1 [0185.145] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FC9105D7472BACA3464A9E54AE43A5A3714A0581", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FC9105D7472BACA3464A9E54AE43A5A3714A0581", lpFilePart=0x0) returned 0x85 [0185.145] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0185.145] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FC9105D7472BACA3464A9E54AE43A5A3714A0581" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\fc9105d7472baca3464a9e54ae43a5a3714a0581"), fInfoLevelId=0x0, lpFileInformation=0x2256870 | out: lpFileInformation=0x2256870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdda35b35, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xdda35b35, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xe06175fa, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x3ea1)) returned 1 [0185.145] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0185.145] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FC9105D7472BACA3464A9E54AE43A5A3714A0581", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FC9105D7472BACA3464A9E54AE43A5A3714A0581", lpFilePart=0x0) returned 0x85 [0185.146] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0185.146] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FC9105D7472BACA3464A9E54AE43A5A3714A0581" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\fc9105d7472baca3464a9e54ae43a5a3714a0581"), fInfoLevelId=0x0, lpFileInformation=0x2256a70 | out: lpFileInformation=0x2256a70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdda35b35, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xdda35b35, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xe06175fa, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x3ea1)) returned 1 [0185.146] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0185.146] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FC9105D7472BACA3464A9E54AE43A5A3714A0581", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FC9105D7472BACA3464A9E54AE43A5A3714A0581", lpFilePart=0x0) returned 0x85 [0185.146] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0185.146] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FC9105D7472BACA3464A9E54AE43A5A3714A0581" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\fc9105d7472baca3464a9e54ae43a5a3714a0581"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0185.147] GetFileType (hFile=0x444) returned 0x1 [0185.147] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0185.147] GetFileType (hFile=0x444) returned 0x1 [0185.147] ReadFile (in: hFile=0x444, lpBuffer=0x2258fa0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x2258fa0*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0185.171] CloseHandle (hObject=0x444) returned 1 [0185.171] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FC9105D7472BACA3464A9E54AE43A5A3714A0581", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FC9105D7472BACA3464A9E54AE43A5A3714A0581", lpFilePart=0x0) returned 0x85 [0185.171] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0185.171] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FC9105D7472BACA3464A9E54AE43A5A3714A0581" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\fc9105d7472baca3464a9e54ae43a5a3714a0581"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0185.172] GetFileType (hFile=0x444) returned 0x1 [0185.172] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0185.172] GetFileType (hFile=0x444) returned 0x1 [0185.172] WriteFile (in: hFile=0x444, lpBuffer=0x2256c50*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x2256c50*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0185.172] CloseHandle (hObject=0x444) returned 1 [0185.172] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FC9105D7472BACA3464A9E54AE43A5A3714A0581", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FC9105D7472BACA3464A9E54AE43A5A3714A0581", lpFilePart=0x0) returned 0x85 [0185.172] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FC9105D7472BACA3464A9E54AE43A5A3714A0581.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FC9105D7472BACA3464A9E54AE43A5A3714A0581.xuy", lpFilePart=0x0) returned 0x89 [0185.172] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0185.172] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FC9105D7472BACA3464A9E54AE43A5A3714A0581" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\fc9105d7472baca3464a9e54ae43a5a3714a0581"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdda35b35, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xdda35b35, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x5a3708ee, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x3ea1)) returned 1 [0185.172] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0185.172] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FC9105D7472BACA3464A9E54AE43A5A3714A0581" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\fc9105d7472baca3464a9e54ae43a5a3714a0581"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FC9105D7472BACA3464A9E54AE43A5A3714A0581.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\fc9105d7472baca3464a9e54ae43a5a3714a0581.xuy")) returned 1 [0185.177] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FD8689B4CB4259B01A718FFB181BFAB0745437D8", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FD8689B4CB4259B01A718FFB181BFAB0745437D8", lpFilePart=0x0) returned 0x85 [0185.177] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0185.177] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FD8689B4CB4259B01A718FFB181BFAB0745437D8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\fd8689b4cb4259b01a718ffb181bfab0745437d8"), fInfoLevelId=0x0, lpFileInformation=0x22d5548 | out: lpFileInformation=0x22d5548*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f5e462a, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3f5e462a, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x3f5e6d3a, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x52a)) returned 1 [0185.177] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0185.177] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FD8689B4CB4259B01A718FFB181BFAB0745437D8", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FD8689B4CB4259B01A718FFB181BFAB0745437D8", lpFilePart=0x0) returned 0x85 [0185.177] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0185.177] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FD8689B4CB4259B01A718FFB181BFAB0745437D8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\fd8689b4cb4259b01a718ffb181bfab0745437d8"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0185.177] GetFileType (hFile=0x444) returned 0x1 [0185.177] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0185.178] GetFileType (hFile=0x444) returned 0x1 [0185.178] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x52a [0185.178] ReadFile (in: hFile=0x444, lpBuffer=0x22d5e90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x22d5e90*, lpNumberOfBytesRead=0x3be5c8*=0x52a, lpOverlapped=0x0) returned 1 [0185.179] CloseHandle (hObject=0x444) returned 1 [0185.189] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FD8689B4CB4259B01A718FFB181BFAB0745437D8", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FD8689B4CB4259B01A718FFB181BFAB0745437D8", lpFilePart=0x0) returned 0x85 [0185.189] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0185.189] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FD8689B4CB4259B01A718FFB181BFAB0745437D8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\fd8689b4cb4259b01a718ffb181bfab0745437d8"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0185.191] GetFileType (hFile=0x444) returned 0x1 [0185.191] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0185.191] GetFileType (hFile=0x444) returned 0x1 [0185.191] WriteFile (in: hFile=0x444, lpBuffer=0x234e910*, nNumberOfBytesToWrite=0x530, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x234e910*, lpNumberOfBytesWritten=0x3be4d8*=0x530, lpOverlapped=0x0) returned 1 [0185.192] CloseHandle (hObject=0x444) returned 1 [0185.192] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FD8689B4CB4259B01A718FFB181BFAB0745437D8", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FD8689B4CB4259B01A718FFB181BFAB0745437D8", lpFilePart=0x0) returned 0x85 [0185.192] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FD8689B4CB4259B01A718FFB181BFAB0745437D8.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FD8689B4CB4259B01A718FFB181BFAB0745437D8.xuy", lpFilePart=0x0) returned 0x89 [0185.192] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0185.192] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FD8689B4CB4259B01A718FFB181BFAB0745437D8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\fd8689b4cb4259b01a718ffb181bfab0745437d8"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f5e462a, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3f5e462a, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x5a3becbb, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x530)) returned 1 [0185.192] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0185.192] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FD8689B4CB4259B01A718FFB181BFAB0745437D8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\fd8689b4cb4259b01a718ffb181bfab0745437d8"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FD8689B4CB4259B01A718FFB181BFAB0745437D8.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\fd8689b4cb4259b01a718ffb181bfab0745437d8.xuy")) returned 1 [0185.194] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FE1DB0C7B7A0C24B1340664A748202958E29E80A", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FE1DB0C7B7A0C24B1340664A748202958E29E80A", lpFilePart=0x0) returned 0x85 [0185.194] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0185.194] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FE1DB0C7B7A0C24B1340664A748202958E29E80A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\fe1db0c7b7a0c24b1340664a748202958e29e80a"), fInfoLevelId=0x0, lpFileInformation=0x234fcd0 | out: lpFileInformation=0x234fcd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc50c5407, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc50c5407, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xc5bf79f5, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x1a580)) returned 1 [0185.194] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0185.194] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FE1DB0C7B7A0C24B1340664A748202958E29E80A", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FE1DB0C7B7A0C24B1340664A748202958E29E80A", lpFilePart=0x0) returned 0x85 [0185.194] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0185.194] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FE1DB0C7B7A0C24B1340664A748202958E29E80A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\fe1db0c7b7a0c24b1340664a748202958e29e80a"), fInfoLevelId=0x0, lpFileInformation=0x234fed0 | out: lpFileInformation=0x234fed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc50c5407, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc50c5407, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xc5bf79f5, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x1a580)) returned 1 [0185.194] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0185.194] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FE1DB0C7B7A0C24B1340664A748202958E29E80A", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FE1DB0C7B7A0C24B1340664A748202958E29E80A", lpFilePart=0x0) returned 0x85 [0185.194] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0185.194] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FE1DB0C7B7A0C24B1340664A748202958E29E80A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\fe1db0c7b7a0c24b1340664a748202958e29e80a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0185.195] GetFileType (hFile=0x444) returned 0x1 [0185.195] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0185.195] GetFileType (hFile=0x444) returned 0x1 [0185.195] ReadFile (in: hFile=0x444, lpBuffer=0x2352400, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x2352400*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0185.259] CloseHandle (hObject=0x444) returned 1 [0185.259] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FE1DB0C7B7A0C24B1340664A748202958E29E80A", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FE1DB0C7B7A0C24B1340664A748202958E29E80A", lpFilePart=0x0) returned 0x85 [0185.259] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0185.259] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FE1DB0C7B7A0C24B1340664A748202958E29E80A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\fe1db0c7b7a0c24b1340664a748202958e29e80a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0185.259] GetFileType (hFile=0x444) returned 0x1 [0185.259] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0185.259] GetFileType (hFile=0x444) returned 0x1 [0185.259] WriteFile (in: hFile=0x444, lpBuffer=0x21895e8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x21895e8*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0185.259] CloseHandle (hObject=0x444) returned 1 [0185.260] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FE1DB0C7B7A0C24B1340664A748202958E29E80A", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FE1DB0C7B7A0C24B1340664A748202958E29E80A", lpFilePart=0x0) returned 0x85 [0185.260] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FE1DB0C7B7A0C24B1340664A748202958E29E80A.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FE1DB0C7B7A0C24B1340664A748202958E29E80A.xuy", lpFilePart=0x0) returned 0x89 [0185.260] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0185.260] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FE1DB0C7B7A0C24B1340664A748202958E29E80A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\fe1db0c7b7a0c24b1340664a748202958e29e80a"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc50c5407, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc50c5407, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x5a455725, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x1a580)) returned 1 [0185.260] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0185.260] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FE1DB0C7B7A0C24B1340664A748202958E29E80A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\fe1db0c7b7a0c24b1340664a748202958e29e80a"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FE1DB0C7B7A0C24B1340664A748202958E29E80A.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\fe1db0c7b7a0c24b1340664a748202958e29e80a.xuy")) returned 1 [0185.261] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FE53447DDFC9E555551EF4E9AE61A336101CD64B", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FE53447DDFC9E555551EF4E9AE61A336101CD64B", lpFilePart=0x0) returned 0x85 [0185.261] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0185.261] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FE53447DDFC9E555551EF4E9AE61A336101CD64B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\fe53447ddfc9e555551ef4e9ae61a336101cd64b"), fInfoLevelId=0x0, lpFileInformation=0x21d41a0 | out: lpFileInformation=0x21d41a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8634bb8c, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x8634bb8c, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x8634e282, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0xdc6)) returned 1 [0185.261] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0185.262] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FE53447DDFC9E555551EF4E9AE61A336101CD64B", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FE53447DDFC9E555551EF4E9AE61A336101CD64B", lpFilePart=0x0) returned 0x85 [0185.262] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0185.262] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FE53447DDFC9E555551EF4E9AE61A336101CD64B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\fe53447ddfc9e555551ef4e9ae61a336101cd64b"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0185.262] GetFileType (hFile=0x444) returned 0x1 [0185.262] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0185.262] GetFileType (hFile=0x444) returned 0x1 [0185.262] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xdc6 [0185.262] ReadFile (in: hFile=0x444, lpBuffer=0x21d5380, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x21d5380*, lpNumberOfBytesRead=0x3be5c8*=0xdc6, lpOverlapped=0x0) returned 1 [0185.275] CloseHandle (hObject=0x444) returned 1 [0185.307] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FE53447DDFC9E555551EF4E9AE61A336101CD64B", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FE53447DDFC9E555551EF4E9AE61A336101CD64B", lpFilePart=0x0) returned 0x85 [0185.307] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0185.307] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FE53447DDFC9E555551EF4E9AE61A336101CD64B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\fe53447ddfc9e555551ef4e9ae61a336101cd64b"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0185.309] GetFileType (hFile=0x444) returned 0x1 [0185.309] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0185.309] GetFileType (hFile=0x444) returned 0x1 [0185.309] WriteFile (in: hFile=0x444, lpBuffer=0x2250928*, nNumberOfBytesToWrite=0xdd0, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x2250928*, lpNumberOfBytesWritten=0x3be4d8*=0xdd0, lpOverlapped=0x0) returned 1 [0185.310] CloseHandle (hObject=0x444) returned 1 [0185.310] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FE53447DDFC9E555551EF4E9AE61A336101CD64B", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FE53447DDFC9E555551EF4E9AE61A336101CD64B", lpFilePart=0x0) returned 0x85 [0185.310] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FE53447DDFC9E555551EF4E9AE61A336101CD64B.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FE53447DDFC9E555551EF4E9AE61A336101CD64B.xuy", lpFilePart=0x0) returned 0x89 [0185.310] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0185.310] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FE53447DDFC9E555551EF4E9AE61A336101CD64B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\fe53447ddfc9e555551ef4e9ae61a336101cd64b"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8634bb8c, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x8634bb8c, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x5a4c7dfd, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xdd0)) returned 1 [0185.310] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0185.311] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FE53447DDFC9E555551EF4E9AE61A336101CD64B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\fe53447ddfc9e555551ef4e9ae61a336101cd64b"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FE53447DDFC9E555551EF4E9AE61A336101CD64B.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\fe53447ddfc9e555551ef4e9ae61a336101cd64b.xuy")) returned 1 [0185.312] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FF17896BBAC510A32E30ADCD50F068BF5D775EF5", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FF17896BBAC510A32E30ADCD50F068BF5D775EF5", lpFilePart=0x0) returned 0x85 [0185.312] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0185.312] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FF17896BBAC510A32E30ADCD50F068BF5D775EF5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ff17896bbac510a32e30adcd50f068bf5d775ef5"), fInfoLevelId=0x0, lpFileInformation=0x2251ce8 | out: lpFileInformation=0x2251ce8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x871d4a74, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x871d4a74, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x871d71a0, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x596)) returned 1 [0185.312] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0185.312] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FF17896BBAC510A32E30ADCD50F068BF5D775EF5", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FF17896BBAC510A32E30ADCD50F068BF5D775EF5", lpFilePart=0x0) returned 0x85 [0185.312] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0185.312] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FF17896BBAC510A32E30ADCD50F068BF5D775EF5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ff17896bbac510a32e30adcd50f068bf5d775ef5"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0185.312] GetFileType (hFile=0x444) returned 0x1 [0185.312] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0185.313] GetFileType (hFile=0x444) returned 0x1 [0185.313] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x596 [0185.313] ReadFile (in: hFile=0x444, lpBuffer=0x2252698, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x2252698*, lpNumberOfBytesRead=0x3be5c8*=0x596, lpOverlapped=0x0) returned 1 [0185.315] CloseHandle (hObject=0x444) returned 1 [0185.324] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FF17896BBAC510A32E30ADCD50F068BF5D775EF5", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FF17896BBAC510A32E30ADCD50F068BF5D775EF5", lpFilePart=0x0) returned 0x85 [0185.324] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0185.324] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FF17896BBAC510A32E30ADCD50F068BF5D775EF5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ff17896bbac510a32e30adcd50f068bf5d775ef5"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0185.326] GetFileType (hFile=0x444) returned 0x1 [0185.326] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0185.326] GetFileType (hFile=0x444) returned 0x1 [0185.326] WriteFile (in: hFile=0x444, lpBuffer=0x22cb350*, nNumberOfBytesToWrite=0x5a0, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x22cb350*, lpNumberOfBytesWritten=0x3be4d8*=0x5a0, lpOverlapped=0x0) returned 1 [0185.328] CloseHandle (hObject=0x444) returned 1 [0185.328] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FF17896BBAC510A32E30ADCD50F068BF5D775EF5", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FF17896BBAC510A32E30ADCD50F068BF5D775EF5", lpFilePart=0x0) returned 0x85 [0185.328] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FF17896BBAC510A32E30ADCD50F068BF5D775EF5.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FF17896BBAC510A32E30ADCD50F068BF5D775EF5.xuy", lpFilePart=0x0) returned 0x89 [0185.328] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0185.328] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FF17896BBAC510A32E30ADCD50F068BF5D775EF5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ff17896bbac510a32e30adcd50f068bf5d775ef5"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x871d4a74, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x871d4a74, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x5a4edf39, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x5a0)) returned 1 [0185.328] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0185.328] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FF17896BBAC510A32E30ADCD50F068BF5D775EF5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ff17896bbac510a32e30adcd50f068bf5d775ef5"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FF17896BBAC510A32E30ADCD50F068BF5D775EF5.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ff17896bbac510a32e30adcd50f068bf5d775ef5.xuy")) returned 1 [0185.329] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FF308582A6E017961806B4F720E48F59AE7B2685", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FF308582A6E017961806B4F720E48F59AE7B2685", lpFilePart=0x0) returned 0x85 [0185.329] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0185.330] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FF308582A6E017961806B4F720E48F59AE7B2685" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ff308582a6e017961806b4f720e48f59ae7b2685"), fInfoLevelId=0x0, lpFileInformation=0x22cc710 | out: lpFileInformation=0x22cc710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x479d1cba, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x479d1cba, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x48d30ecb, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0x10e6)) returned 1 [0185.330] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0185.330] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FF308582A6E017961806B4F720E48F59AE7B2685", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FF308582A6E017961806B4F720E48F59AE7B2685", lpFilePart=0x0) returned 0x85 [0185.330] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0185.330] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FF308582A6E017961806B4F720E48F59AE7B2685" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ff308582a6e017961806b4f720e48f59ae7b2685"), fInfoLevelId=0x0, lpFileInformation=0x22cc910 | out: lpFileInformation=0x22cc910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x479d1cba, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x479d1cba, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x48d30ecb, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0x10e6)) returned 1 [0185.330] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0185.330] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FF308582A6E017961806B4F720E48F59AE7B2685", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FF308582A6E017961806B4F720E48F59AE7B2685", lpFilePart=0x0) returned 0x85 [0185.330] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0185.330] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FF308582A6E017961806B4F720E48F59AE7B2685" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ff308582a6e017961806b4f720e48f59ae7b2685"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0185.331] GetFileType (hFile=0x444) returned 0x1 [0185.331] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0185.331] GetFileType (hFile=0x444) returned 0x1 [0185.331] ReadFile (in: hFile=0x444, lpBuffer=0x22cee40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x22cee40*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0185.344] CloseHandle (hObject=0x444) returned 1 [0185.344] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FF308582A6E017961806B4F720E48F59AE7B2685", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FF308582A6E017961806B4F720E48F59AE7B2685", lpFilePart=0x0) returned 0x85 [0185.344] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0185.344] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FF308582A6E017961806B4F720E48F59AE7B2685" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ff308582a6e017961806b4f720e48f59ae7b2685"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0185.344] GetFileType (hFile=0x444) returned 0x1 [0185.344] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0185.344] GetFileType (hFile=0x444) returned 0x1 [0185.344] WriteFile (in: hFile=0x444, lpBuffer=0x22ccaf0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x22ccaf0*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0185.344] CloseHandle (hObject=0x444) returned 1 [0185.344] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FF308582A6E017961806B4F720E48F59AE7B2685", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FF308582A6E017961806B4F720E48F59AE7B2685", lpFilePart=0x0) returned 0x85 [0185.345] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FF308582A6E017961806B4F720E48F59AE7B2685.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FF308582A6E017961806B4F720E48F59AE7B2685.xuy", lpFilePart=0x0) returned 0x89 [0185.345] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0185.345] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FF308582A6E017961806B4F720E48F59AE7B2685" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ff308582a6e017961806b4f720e48f59ae7b2685"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x479d1cba, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x479d1cba, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x5a5143a6, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0185.345] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0185.345] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FF308582A6E017961806B4F720E48F59AE7B2685" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ff308582a6e017961806b4f720e48f59ae7b2685"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FF308582A6E017961806B4F720E48F59AE7B2685.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ff308582a6e017961806b4f720e48f59ae7b2685.xuy")) returned 1 [0185.363] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FFDD781447B2CD835F1281F45A47F6B7268B329E", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FFDD781447B2CD835F1281F45A47F6B7268B329E", lpFilePart=0x0) returned 0x85 [0185.363] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0185.363] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FFDD781447B2CD835F1281F45A47F6B7268B329E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ffdd781447b2cd835f1281f45a47f6b7268b329e"), fInfoLevelId=0x0, lpFileInformation=0x234b3e8 | out: lpFileInformation=0x234b3e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56f05be8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x56f05be8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x56f05be8, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x1832)) returned 1 [0185.364] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0185.364] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FFDD781447B2CD835F1281F45A47F6B7268B329E", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FFDD781447B2CD835F1281F45A47F6B7268B329E", lpFilePart=0x0) returned 0x85 [0185.364] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0185.364] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FFDD781447B2CD835F1281F45A47F6B7268B329E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ffdd781447b2cd835f1281f45a47f6b7268b329e"), fInfoLevelId=0x0, lpFileInformation=0x234b5e8 | out: lpFileInformation=0x234b5e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56f05be8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x56f05be8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x56f05be8, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x1832)) returned 1 [0185.364] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0185.364] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FFDD781447B2CD835F1281F45A47F6B7268B329E", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FFDD781447B2CD835F1281F45A47F6B7268B329E", lpFilePart=0x0) returned 0x85 [0185.364] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0185.364] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FFDD781447B2CD835F1281F45A47F6B7268B329E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ffdd781447b2cd835f1281f45a47f6b7268b329e"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0185.365] GetFileType (hFile=0x444) returned 0x1 [0185.365] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0185.365] GetFileType (hFile=0x444) returned 0x1 [0185.365] ReadFile (in: hFile=0x444, lpBuffer=0x234db18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x234db18*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0185.406] CloseHandle (hObject=0x444) returned 1 [0185.406] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FFDD781447B2CD835F1281F45A47F6B7268B329E", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FFDD781447B2CD835F1281F45A47F6B7268B329E", lpFilePart=0x0) returned 0x85 [0185.406] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0185.407] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FFDD781447B2CD835F1281F45A47F6B7268B329E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ffdd781447b2cd835f1281f45a47f6b7268b329e"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0185.407] GetFileType (hFile=0x444) returned 0x1 [0185.407] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0185.407] GetFileType (hFile=0x444) returned 0x1 [0185.407] WriteFile (in: hFile=0x444, lpBuffer=0x2189628*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x2189628*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0185.407] CloseHandle (hObject=0x444) returned 1 [0185.407] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FFDD781447B2CD835F1281F45A47F6B7268B329E", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FFDD781447B2CD835F1281F45A47F6B7268B329E", lpFilePart=0x0) returned 0x85 [0185.407] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FFDD781447B2CD835F1281F45A47F6B7268B329E.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FFDD781447B2CD835F1281F45A47F6B7268B329E.xuy", lpFilePart=0x0) returned 0x89 [0185.407] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0185.407] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FFDD781447B2CD835F1281F45A47F6B7268B329E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ffdd781447b2cd835f1281f45a47f6b7268b329e"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56f05be8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x56f05be8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x5a5accce, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0185.407] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0185.408] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FFDD781447B2CD835F1281F45A47F6B7268B329E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ffdd781447b2cd835f1281f45a47f6b7268b329e"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FFDD781447B2CD835F1281F45A47F6B7268B329E.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ffdd781447b2cd835f1281f45a47f6b7268b329e.xuy")) returned 1 [0185.426] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0185.426] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache", lpFilePart=0x0) returned 0x5b [0185.426] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\", lpFilePart=0x0) returned 0x5c [0185.426] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d7550 [0185.443] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0185.443] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0185.443] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0185.443] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0185.443] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0185.443] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0185.444] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0185.444] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0185.444] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0185.444] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0185.444] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0185.444] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0185.444] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0185.444] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0185.444] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0185.445] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0185.445] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0185.445] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0185.445] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0185.446] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0185.446] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0185.446] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache", lpFilePart=0x0) returned 0x5b [0185.446] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\", lpFilePart=0x0) returned 0x5c [0185.446] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d78b0 [0185.447] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0185.447] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0185.447] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0185.447] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0185.447] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0185.447] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0185.447] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0185.448] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0185.448] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0185.448] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0185.448] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0185.448] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0185.448] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0185.448] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0185.449] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0185.449] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0185.449] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0185.449] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0185.450] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0185.450] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0185.450] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\4mkHR_p+Wn_2AEZoGYTTQQ==.ico", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\4mkHR_p+Wn_2AEZoGYTTQQ==.ico", lpFilePart=0x0) returned 0x78 [0185.450] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0185.450] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\4mkHR_p+Wn_2AEZoGYTTQQ==.ico" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\jumplistcache\\4mkhr_p+wn_2aezogyttqq==.ico"), fInfoLevelId=0x0, lpFileInformation=0x21d1bd8 | out: lpFileInformation=0x21d1bd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe26028e, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xbe26028e, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0xbe26028e, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x484)) returned 1 [0185.450] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0185.451] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\4mkHR_p+Wn_2AEZoGYTTQQ==.ico", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\4mkHR_p+Wn_2AEZoGYTTQQ==.ico", lpFilePart=0x0) returned 0x78 [0185.451] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0185.451] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\4mkHR_p+Wn_2AEZoGYTTQQ==.ico" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\jumplistcache\\4mkhr_p+wn_2aezogyttqq==.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0185.451] GetFileType (hFile=0x444) returned 0x1 [0185.451] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0185.451] GetFileType (hFile=0x444) returned 0x1 [0185.451] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be708 | out: lpFileSizeHigh=0x3be708*=0x0) returned 0x484 [0185.451] ReadFile (in: hFile=0x444, lpBuffer=0x21d2418, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be638, lpOverlapped=0x0 | out: lpBuffer=0x21d2418*, lpNumberOfBytesRead=0x3be638*=0x484, lpOverlapped=0x0) returned 1 [0185.468] CloseHandle (hObject=0x444) returned 1 [0185.479] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\4mkHR_p+Wn_2AEZoGYTTQQ==.ico", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\4mkHR_p+Wn_2AEZoGYTTQQ==.ico", lpFilePart=0x0) returned 0x78 [0185.479] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0185.479] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\4mkHR_p+Wn_2AEZoGYTTQQ==.ico" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\jumplistcache\\4mkhr_p+wn_2aezogyttqq==.ico"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0185.481] GetFileType (hFile=0x444) returned 0x1 [0185.481] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0185.481] GetFileType (hFile=0x444) returned 0x1 [0185.481] WriteFile (in: hFile=0x444, lpBuffer=0x224ab50*, nNumberOfBytesToWrite=0x490, lpNumberOfBytesWritten=0x3be548, lpOverlapped=0x0 | out: lpBuffer=0x224ab50*, lpNumberOfBytesWritten=0x3be548*=0x490, lpOverlapped=0x0) returned 1 [0185.482] CloseHandle (hObject=0x444) returned 1 [0185.482] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\4mkHR_p+Wn_2AEZoGYTTQQ==.ico", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\4mkHR_p+Wn_2AEZoGYTTQQ==.ico", lpFilePart=0x0) returned 0x78 [0185.482] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\4mkHR_p+Wn_2AEZoGYTTQQ==.ico.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\4mkHR_p+Wn_2AEZoGYTTQQ==.ico.xuy", lpFilePart=0x0) returned 0x7c [0185.482] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0185.482] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\4mkHR_p+Wn_2AEZoGYTTQQ==.ico" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\jumplistcache\\4mkhr_p+wn_2aezogyttqq==.ico"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe26028e, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xbe26028e, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x5a66b7bb, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x490)) returned 1 [0185.482] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0185.482] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\4mkHR_p+Wn_2AEZoGYTTQQ==.ico" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\jumplistcache\\4mkhr_p+wn_2aezogyttqq==.ico"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\4mkHR_p+Wn_2AEZoGYTTQQ==.ico.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\jumplistcache\\4mkhr_p+wn_2aezogyttqq==.ico.xuy")) returned 1 [0185.483] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\asRZLAIfRhwB7KZygffeFA==.ico", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\asRZLAIfRhwB7KZygffeFA==.ico", lpFilePart=0x0) returned 0x78 [0185.483] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0185.483] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\asRZLAIfRhwB7KZygffeFA==.ico" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\jumplistcache\\asrzlaifrhwb7kzygffefa==.ico"), fInfoLevelId=0x0, lpFileInformation=0x224bef0 | out: lpFileInformation=0x224bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcad3ea71, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xcad3ea71, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xcad410fe, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x484)) returned 1 [0185.483] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0185.483] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\asRZLAIfRhwB7KZygffeFA==.ico", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\asRZLAIfRhwB7KZygffeFA==.ico", lpFilePart=0x0) returned 0x78 [0185.484] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0185.484] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\asRZLAIfRhwB7KZygffeFA==.ico" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\jumplistcache\\asrzlaifrhwb7kzygffefa==.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0185.484] GetFileType (hFile=0x444) returned 0x1 [0185.484] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0185.484] GetFileType (hFile=0x444) returned 0x1 [0185.484] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be708 | out: lpFileSizeHigh=0x3be708*=0x0) returned 0x484 [0185.484] ReadFile (in: hFile=0x444, lpBuffer=0x224c730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be638, lpOverlapped=0x0 | out: lpBuffer=0x224c730*, lpNumberOfBytesRead=0x3be638*=0x484, lpOverlapped=0x0) returned 1 [0185.497] CloseHandle (hObject=0x444) returned 1 [0185.512] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\asRZLAIfRhwB7KZygffeFA==.ico", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\asRZLAIfRhwB7KZygffeFA==.ico", lpFilePart=0x0) returned 0x78 [0185.512] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0185.512] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\asRZLAIfRhwB7KZygffeFA==.ico" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\jumplistcache\\asrzlaifrhwb7kzygffefa==.ico"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0185.514] GetFileType (hFile=0x444) returned 0x1 [0185.514] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0185.514] GetFileType (hFile=0x444) returned 0x1 [0185.514] WriteFile (in: hFile=0x444, lpBuffer=0x22c4e68*, nNumberOfBytesToWrite=0x490, lpNumberOfBytesWritten=0x3be548, lpOverlapped=0x0 | out: lpBuffer=0x22c4e68*, lpNumberOfBytesWritten=0x3be548*=0x490, lpOverlapped=0x0) returned 1 [0185.516] CloseHandle (hObject=0x444) returned 1 [0185.516] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\asRZLAIfRhwB7KZygffeFA==.ico", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\asRZLAIfRhwB7KZygffeFA==.ico", lpFilePart=0x0) returned 0x78 [0185.516] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\asRZLAIfRhwB7KZygffeFA==.ico.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\asRZLAIfRhwB7KZygffeFA==.ico.xuy", lpFilePart=0x0) returned 0x7c [0185.516] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0185.516] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\asRZLAIfRhwB7KZygffeFA==.ico" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\jumplistcache\\asrzlaifrhwb7kzygffefa==.ico"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcad3ea71, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xcad3ea71, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x5a6b7ccf, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x490)) returned 1 [0185.516] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0185.516] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\asRZLAIfRhwB7KZygffeFA==.ico" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\jumplistcache\\asrzlaifrhwb7kzygffefa==.ico"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\asRZLAIfRhwB7KZygffeFA==.ico.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\jumplistcache\\asrzlaifrhwb7kzygffefa==.ico.xuy")) returned 1 [0185.519] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\d+wy3CvuNcC3WVA6du1bZg==.ico", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\d+wy3CvuNcC3WVA6du1bZg==.ico", lpFilePart=0x0) returned 0x78 [0185.519] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0185.519] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\d+wy3CvuNcC3WVA6du1bZg==.ico" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\jumplistcache\\d+wy3cvuncc3wva6du1bzg==.ico"), fInfoLevelId=0x0, lpFileInformation=0x22c6208 | out: lpFileInformation=0x22c6208*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x564cfcb8, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x564cfcb8, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x564cfcb8, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0x18c)) returned 1 [0185.519] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0185.519] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\d+wy3CvuNcC3WVA6du1bZg==.ico", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\d+wy3CvuNcC3WVA6du1bZg==.ico", lpFilePart=0x0) returned 0x78 [0185.519] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0185.519] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\d+wy3CvuNcC3WVA6du1bZg==.ico" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\jumplistcache\\d+wy3cvuncc3wva6du1bzg==.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0185.519] GetFileType (hFile=0x444) returned 0x1 [0185.519] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0185.519] GetFileType (hFile=0x444) returned 0x1 [0185.519] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be708 | out: lpFileSizeHigh=0x3be708*=0x0) returned 0x18c [0185.519] ReadFile (in: hFile=0x444, lpBuffer=0x22c6750, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be638, lpOverlapped=0x0 | out: lpBuffer=0x22c6750*, lpNumberOfBytesRead=0x3be638*=0x18c, lpOverlapped=0x0) returned 1 [0185.520] CloseHandle (hObject=0x444) returned 1 [0185.530] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\d+wy3CvuNcC3WVA6du1bZg==.ico", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\d+wy3CvuNcC3WVA6du1bZg==.ico", lpFilePart=0x0) returned 0x78 [0185.530] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0185.530] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\d+wy3CvuNcC3WVA6du1bZg==.ico" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\jumplistcache\\d+wy3cvuncc3wva6du1bzg==.ico"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0185.532] GetFileType (hFile=0x444) returned 0x1 [0185.532] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0185.532] GetFileType (hFile=0x444) returned 0x1 [0185.532] WriteFile (in: hFile=0x444, lpBuffer=0x233df80*, nNumberOfBytesToWrite=0x190, lpNumberOfBytesWritten=0x3be548, lpOverlapped=0x0 | out: lpBuffer=0x233df80*, lpNumberOfBytesWritten=0x3be548*=0x190, lpOverlapped=0x0) returned 1 [0185.532] CloseHandle (hObject=0x444) returned 1 [0185.533] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\d+wy3CvuNcC3WVA6du1bZg==.ico", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\d+wy3CvuNcC3WVA6du1bZg==.ico", lpFilePart=0x0) returned 0x78 [0185.533] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\d+wy3CvuNcC3WVA6du1bZg==.ico.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\d+wy3CvuNcC3WVA6du1bZg==.ico.xuy", lpFilePart=0x0) returned 0x7c [0185.533] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0185.533] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\d+wy3CvuNcC3WVA6du1bZg==.ico" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\jumplistcache\\d+wy3cvuncc3wva6du1bzg==.ico"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x564cfcb8, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x564cfcb8, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x5a6dde29, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x190)) returned 1 [0185.533] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0185.533] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\d+wy3CvuNcC3WVA6du1bZg==.ico" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\jumplistcache\\d+wy3cvuncc3wva6du1bzg==.ico"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\d+wy3CvuNcC3WVA6du1bZg==.ico.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\jumplistcache\\d+wy3cvuncc3wva6du1bzg==.ico.xuy")) returned 1 [0185.534] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\DiktK+QHhLcJqWKZ9_VsTA==.ico", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\DiktK+QHhLcJqWKZ9_VsTA==.ico", lpFilePart=0x0) returned 0x78 [0185.534] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0185.534] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\DiktK+QHhLcJqWKZ9_VsTA==.ico" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\jumplistcache\\diktk+qhhlcjqwkz9_vsta==.ico"), fInfoLevelId=0x0, lpFileInformation=0x233f320 | out: lpFileInformation=0x233f320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x564cfcb8, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x564cfcb8, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x564cfcb8, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0x484)) returned 1 [0185.534] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0185.535] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\DiktK+QHhLcJqWKZ9_VsTA==.ico", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\DiktK+QHhLcJqWKZ9_VsTA==.ico", lpFilePart=0x0) returned 0x78 [0185.535] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0185.535] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\DiktK+QHhLcJqWKZ9_VsTA==.ico" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\jumplistcache\\diktk+qhhlcjqwkz9_vsta==.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0185.535] GetFileType (hFile=0x444) returned 0x1 [0185.535] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0185.535] GetFileType (hFile=0x444) returned 0x1 [0185.535] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be708 | out: lpFileSizeHigh=0x3be708*=0x0) returned 0x484 [0185.535] ReadFile (in: hFile=0x444, lpBuffer=0x233fb60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be638, lpOverlapped=0x0 | out: lpBuffer=0x233fb60*, lpNumberOfBytesRead=0x3be638*=0x484, lpOverlapped=0x0) returned 1 [0185.536] CloseHandle (hObject=0x444) returned 1 [0185.735] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\DiktK+QHhLcJqWKZ9_VsTA==.ico", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\DiktK+QHhLcJqWKZ9_VsTA==.ico", lpFilePart=0x0) returned 0x78 [0185.735] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0185.735] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\DiktK+QHhLcJqWKZ9_VsTA==.ico" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\jumplistcache\\diktk+qhhlcjqwkz9_vsta==.ico"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0185.737] GetFileType (hFile=0x444) returned 0x1 [0185.737] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0185.737] GetFileType (hFile=0x444) returned 0x1 [0185.737] WriteFile (in: hFile=0x444, lpBuffer=0x21b6640*, nNumberOfBytesToWrite=0x490, lpNumberOfBytesWritten=0x3be548, lpOverlapped=0x0 | out: lpBuffer=0x21b6640*, lpNumberOfBytesWritten=0x3be548*=0x490, lpOverlapped=0x0) returned 1 [0185.738] CloseHandle (hObject=0x444) returned 1 [0185.738] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\DiktK+QHhLcJqWKZ9_VsTA==.ico", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\DiktK+QHhLcJqWKZ9_VsTA==.ico", lpFilePart=0x0) returned 0x78 [0185.738] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\DiktK+QHhLcJqWKZ9_VsTA==.ico.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\DiktK+QHhLcJqWKZ9_VsTA==.ico.xuy", lpFilePart=0x0) returned 0x7c [0185.738] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0185.738] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\DiktK+QHhLcJqWKZ9_VsTA==.ico" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\jumplistcache\\diktk+qhhlcjqwkz9_vsta==.ico"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x564cfcb8, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x564cfcb8, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x5a8f4091, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x490)) returned 1 [0185.738] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0185.738] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\DiktK+QHhLcJqWKZ9_VsTA==.ico" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\jumplistcache\\diktk+qhhlcjqwkz9_vsta==.ico"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\DiktK+QHhLcJqWKZ9_VsTA==.ico.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\jumplistcache\\diktk+qhhlcjqwkz9_vsta==.ico.xuy")) returned 1 [0185.740] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\dLcXOMhmEiiUNPBG1nL8Ew==.ico", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\dLcXOMhmEiiUNPBG1nL8Ew==.ico", lpFilePart=0x0) returned 0x78 [0185.740] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0185.740] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\dLcXOMhmEiiUNPBG1nL8Ew==.ico" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\jumplistcache\\dlcxomhmeiiunpbg1nl8ew==.ico"), fInfoLevelId=0x0, lpFileInformation=0x21b79e0 | out: lpFileInformation=0x21b79e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x564cfcb8, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x564cfcb8, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x564cfcb8, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0x484)) returned 1 [0185.740] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0185.740] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\dLcXOMhmEiiUNPBG1nL8Ew==.ico", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\dLcXOMhmEiiUNPBG1nL8Ew==.ico", lpFilePart=0x0) returned 0x78 [0185.740] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0185.740] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\dLcXOMhmEiiUNPBG1nL8Ew==.ico" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\jumplistcache\\dlcxomhmeiiunpbg1nl8ew==.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0185.740] GetFileType (hFile=0x444) returned 0x1 [0185.740] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0185.740] GetFileType (hFile=0x444) returned 0x1 [0185.740] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be708 | out: lpFileSizeHigh=0x3be708*=0x0) returned 0x484 [0185.740] ReadFile (in: hFile=0x444, lpBuffer=0x21b8220, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be638, lpOverlapped=0x0 | out: lpBuffer=0x21b8220*, lpNumberOfBytesRead=0x3be638*=0x484, lpOverlapped=0x0) returned 1 [0185.743] CloseHandle (hObject=0x444) returned 1 [0185.754] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\dLcXOMhmEiiUNPBG1nL8Ew==.ico", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\dLcXOMhmEiiUNPBG1nL8Ew==.ico", lpFilePart=0x0) returned 0x78 [0185.754] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0185.754] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\dLcXOMhmEiiUNPBG1nL8Ew==.ico" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\jumplistcache\\dlcxomhmeiiunpbg1nl8ew==.ico"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0185.756] GetFileType (hFile=0x444) returned 0x1 [0185.756] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0185.756] GetFileType (hFile=0x444) returned 0x1 [0185.756] WriteFile (in: hFile=0x444, lpBuffer=0x2230958*, nNumberOfBytesToWrite=0x490, lpNumberOfBytesWritten=0x3be548, lpOverlapped=0x0 | out: lpBuffer=0x2230958*, lpNumberOfBytesWritten=0x3be548*=0x490, lpOverlapped=0x0) returned 1 [0185.756] CloseHandle (hObject=0x444) returned 1 [0185.757] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\dLcXOMhmEiiUNPBG1nL8Ew==.ico", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\dLcXOMhmEiiUNPBG1nL8Ew==.ico", lpFilePart=0x0) returned 0x78 [0185.757] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\dLcXOMhmEiiUNPBG1nL8Ew==.ico.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\dLcXOMhmEiiUNPBG1nL8Ew==.ico.xuy", lpFilePart=0x0) returned 0x7c [0185.757] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0185.757] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\dLcXOMhmEiiUNPBG1nL8Ew==.ico" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\jumplistcache\\dlcxomhmeiiunpbg1nl8ew==.ico"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x564cfcb8, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x564cfcb8, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x5a91a571, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x490)) returned 1 [0185.757] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0185.757] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\dLcXOMhmEiiUNPBG1nL8Ew==.ico" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\jumplistcache\\dlcxomhmeiiunpbg1nl8ew==.ico"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\dLcXOMhmEiiUNPBG1nL8Ew==.ico.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\jumplistcache\\dlcxomhmeiiunpbg1nl8ew==.ico.xuy")) returned 1 [0185.758] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\GNtk5OH7OPlVUCH7Ue1nuw==.ico", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\GNtk5OH7OPlVUCH7Ue1nuw==.ico", lpFilePart=0x0) returned 0x78 [0185.758] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0185.758] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\GNtk5OH7OPlVUCH7Ue1nuw==.ico" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\jumplistcache\\gntk5oh7oplvuch7ue1nuw==.ico"), fInfoLevelId=0x0, lpFileInformation=0x2231cf8 | out: lpFileInformation=0x2231cf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe26028e, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xbe26028e, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0xbe26028e, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x484)) returned 1 [0185.776] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0185.776] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\GNtk5OH7OPlVUCH7Ue1nuw==.ico", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\GNtk5OH7OPlVUCH7Ue1nuw==.ico", lpFilePart=0x0) returned 0x78 [0185.776] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0185.776] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\GNtk5OH7OPlVUCH7Ue1nuw==.ico" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\jumplistcache\\gntk5oh7oplvuch7ue1nuw==.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0185.776] GetFileType (hFile=0x444) returned 0x1 [0185.776] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0185.776] GetFileType (hFile=0x444) returned 0x1 [0185.776] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be708 | out: lpFileSizeHigh=0x3be708*=0x0) returned 0x484 [0185.776] ReadFile (in: hFile=0x444, lpBuffer=0x2232538, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be638, lpOverlapped=0x0 | out: lpBuffer=0x2232538*, lpNumberOfBytesRead=0x3be638*=0x484, lpOverlapped=0x0) returned 1 [0185.787] CloseHandle (hObject=0x444) returned 1 [0185.797] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\GNtk5OH7OPlVUCH7Ue1nuw==.ico", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\GNtk5OH7OPlVUCH7Ue1nuw==.ico", lpFilePart=0x0) returned 0x78 [0185.797] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0185.797] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\GNtk5OH7OPlVUCH7Ue1nuw==.ico" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\jumplistcache\\gntk5oh7oplvuch7ue1nuw==.ico"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0185.799] GetFileType (hFile=0x444) returned 0x1 [0185.799] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0185.799] GetFileType (hFile=0x444) returned 0x1 [0185.799] WriteFile (in: hFile=0x444, lpBuffer=0x22aac70*, nNumberOfBytesToWrite=0x490, lpNumberOfBytesWritten=0x3be548, lpOverlapped=0x0 | out: lpBuffer=0x22aac70*, lpNumberOfBytesWritten=0x3be548*=0x490, lpOverlapped=0x0) returned 1 [0185.800] CloseHandle (hObject=0x444) returned 1 [0185.800] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\GNtk5OH7OPlVUCH7Ue1nuw==.ico", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\GNtk5OH7OPlVUCH7Ue1nuw==.ico", lpFilePart=0x0) returned 0x78 [0185.801] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\GNtk5OH7OPlVUCH7Ue1nuw==.ico.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\GNtk5OH7OPlVUCH7Ue1nuw==.ico.xuy", lpFilePart=0x0) returned 0x7c [0185.801] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0185.801] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\GNtk5OH7OPlVUCH7Ue1nuw==.ico" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\jumplistcache\\gntk5oh7oplvuch7ue1nuw==.ico"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe26028e, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xbe26028e, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x5a98e8ee, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x490)) returned 1 [0185.801] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0185.801] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\GNtk5OH7OPlVUCH7Ue1nuw==.ico" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\jumplistcache\\gntk5oh7oplvuch7ue1nuw==.ico"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\GNtk5OH7OPlVUCH7Ue1nuw==.ico.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\jumplistcache\\gntk5oh7oplvuch7ue1nuw==.ico.xuy")) returned 1 [0185.802] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\iNtr8V5+A8pq96nV92I9rg==.ico", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\iNtr8V5+A8pq96nV92I9rg==.ico", lpFilePart=0x0) returned 0x78 [0185.802] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0185.802] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\iNtr8V5+A8pq96nV92I9rg==.ico" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\jumplistcache\\intr8v5+a8pq96nv92i9rg==.ico"), fInfoLevelId=0x0, lpFileInformation=0x22ac010 | out: lpFileInformation=0x22ac010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcad3c349, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xcad3c349, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xcad3c349, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x9f3)) returned 1 [0185.812] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0185.812] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\iNtr8V5+A8pq96nV92I9rg==.ico", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\iNtr8V5+A8pq96nV92I9rg==.ico", lpFilePart=0x0) returned 0x78 [0185.813] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0185.813] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\iNtr8V5+A8pq96nV92I9rg==.ico" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\jumplistcache\\intr8v5+a8pq96nv92i9rg==.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0185.813] GetFileType (hFile=0x444) returned 0x1 [0185.813] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0185.813] GetFileType (hFile=0x444) returned 0x1 [0185.813] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be708 | out: lpFileSizeHigh=0x3be708*=0x0) returned 0x9f3 [0185.813] ReadFile (in: hFile=0x444, lpBuffer=0x22acdc0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be638, lpOverlapped=0x0 | out: lpBuffer=0x22acdc0*, lpNumberOfBytesRead=0x3be638*=0x9f3, lpOverlapped=0x0) returned 1 [0185.814] CloseHandle (hObject=0x444) returned 1 [0185.824] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\iNtr8V5+A8pq96nV92I9rg==.ico", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\iNtr8V5+A8pq96nV92I9rg==.ico", lpFilePart=0x0) returned 0x78 [0185.824] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0185.824] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\iNtr8V5+A8pq96nV92I9rg==.ico" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\jumplistcache\\intr8v5+a8pq96nv92i9rg==.ico"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0185.826] GetFileType (hFile=0x444) returned 0x1 [0185.826] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0185.826] GetFileType (hFile=0x444) returned 0x1 [0185.826] WriteFile (in: hFile=0x444, lpBuffer=0x2327028*, nNumberOfBytesToWrite=0xa00, lpNumberOfBytesWritten=0x3be548, lpOverlapped=0x0 | out: lpBuffer=0x2327028*, lpNumberOfBytesWritten=0x3be548*=0xa00, lpOverlapped=0x0) returned 1 [0185.827] CloseHandle (hObject=0x444) returned 1 [0185.827] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\iNtr8V5+A8pq96nV92I9rg==.ico", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\iNtr8V5+A8pq96nV92I9rg==.ico", lpFilePart=0x0) returned 0x78 [0185.827] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\iNtr8V5+A8pq96nV92I9rg==.ico.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\iNtr8V5+A8pq96nV92I9rg==.ico.xuy", lpFilePart=0x0) returned 0x7c [0185.827] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0185.827] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\iNtr8V5+A8pq96nV92I9rg==.ico" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\jumplistcache\\intr8v5+a8pq96nv92i9rg==.ico"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcad3c349, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xcad3c349, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x5a9b2a5b, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xa00)) returned 1 [0185.827] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0185.827] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\iNtr8V5+A8pq96nV92I9rg==.ico" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\jumplistcache\\intr8v5+a8pq96nv92i9rg==.ico"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\iNtr8V5+A8pq96nV92I9rg==.ico.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\jumplistcache\\intr8v5+a8pq96nv92i9rg==.ico.xuy")) returned 1 [0185.829] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\KMkld2mykTtwKDykdZ4gNA==.ico", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\KMkld2mykTtwKDykdZ4gNA==.ico", lpFilePart=0x0) returned 0x78 [0185.829] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0185.829] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\KMkld2mykTtwKDykdZ4gNA==.ico" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\jumplistcache\\kmkld2mykttwkdykdz4gna==.ico"), fInfoLevelId=0x0, lpFileInformation=0x23283c8 | out: lpFileInformation=0x23283c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b99746, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x5b99746, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x5b99746, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x484)) returned 1 [0185.829] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0185.829] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\KMkld2mykTtwKDykdZ4gNA==.ico", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\KMkld2mykTtwKDykdZ4gNA==.ico", lpFilePart=0x0) returned 0x78 [0185.829] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0185.829] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\KMkld2mykTtwKDykdZ4gNA==.ico" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\jumplistcache\\kmkld2mykttwkdykdz4gna==.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0185.829] GetFileType (hFile=0x444) returned 0x1 [0185.829] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0185.829] GetFileType (hFile=0x444) returned 0x1 [0185.829] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be708 | out: lpFileSizeHigh=0x3be708*=0x0) returned 0x484 [0185.829] ReadFile (in: hFile=0x444, lpBuffer=0x2328c08, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be638, lpOverlapped=0x0 | out: lpBuffer=0x2328c08*, lpNumberOfBytesRead=0x3be638*=0x484, lpOverlapped=0x0) returned 1 [0185.841] CloseHandle (hObject=0x444) returned 1 [0185.882] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\KMkld2mykTtwKDykdZ4gNA==.ico", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\KMkld2mykTtwKDykdZ4gNA==.ico", lpFilePart=0x0) returned 0x78 [0185.882] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0185.882] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\KMkld2mykTtwKDykdZ4gNA==.ico" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\jumplistcache\\kmkld2mykttwkdykdz4gna==.ico"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0185.884] GetFileType (hFile=0x444) returned 0x1 [0185.884] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0185.884] GetFileType (hFile=0x444) returned 0x1 [0185.884] WriteFile (in: hFile=0x444, lpBuffer=0x21a1370*, nNumberOfBytesToWrite=0x490, lpNumberOfBytesWritten=0x3be548, lpOverlapped=0x0 | out: lpBuffer=0x21a1370*, lpNumberOfBytesWritten=0x3be548*=0x490, lpOverlapped=0x0) returned 1 [0185.898] CloseHandle (hObject=0x444) returned 1 [0185.899] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\KMkld2mykTtwKDykdZ4gNA==.ico", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\KMkld2mykTtwKDykdZ4gNA==.ico", lpFilePart=0x0) returned 0x78 [0185.899] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\KMkld2mykTtwKDykdZ4gNA==.ico.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\KMkld2mykTtwKDykdZ4gNA==.ico.xuy", lpFilePart=0x0) returned 0x7c [0185.899] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0185.899] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\KMkld2mykTtwKDykdZ4gNA==.ico" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\jumplistcache\\kmkld2mykttwkdykdz4gna==.ico"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b99746, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x5b99746, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x5aa717be, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x490)) returned 1 [0185.899] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0185.899] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\KMkld2mykTtwKDykdZ4gNA==.ico" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\jumplistcache\\kmkld2mykttwkdykdz4gna==.ico"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\KMkld2mykTtwKDykdZ4gNA==.ico.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\jumplistcache\\kmkld2mykttwkdykdz4gna==.ico.xuy")) returned 1 [0185.900] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\KykeNQT8cz0GP+hqz5mIpw==.ico", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\KykeNQT8cz0GP+hqz5mIpw==.ico", lpFilePart=0x0) returned 0x78 [0185.900] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0185.900] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\KykeNQT8cz0GP+hqz5mIpw==.ico" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\jumplistcache\\kykenqt8cz0gp+hqz5mipw==.ico"), fInfoLevelId=0x0, lpFileInformation=0x21a2710 | out: lpFileInformation=0x21a2710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94bdb583, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x94bdb583, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x94bdb583, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x5e9)) returned 1 [0185.900] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0185.901] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\KykeNQT8cz0GP+hqz5mIpw==.ico", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\KykeNQT8cz0GP+hqz5mIpw==.ico", lpFilePart=0x0) returned 0x78 [0185.901] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0185.901] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\KykeNQT8cz0GP+hqz5mIpw==.ico" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\jumplistcache\\kykenqt8cz0gp+hqz5mipw==.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0185.901] GetFileType (hFile=0x444) returned 0x1 [0185.901] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0185.901] GetFileType (hFile=0x444) returned 0x1 [0185.901] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be708 | out: lpFileSizeHigh=0x3be708*=0x0) returned 0x5e9 [0185.901] ReadFile (in: hFile=0x444, lpBuffer=0x21a30b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be638, lpOverlapped=0x0 | out: lpBuffer=0x21a30b8*, lpNumberOfBytesRead=0x3be638*=0x5e9, lpOverlapped=0x0) returned 1 [0185.917] CloseHandle (hObject=0x444) returned 1 [0185.928] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\KykeNQT8cz0GP+hqz5mIpw==.ico", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\KykeNQT8cz0GP+hqz5mIpw==.ico", lpFilePart=0x0) returned 0x78 [0185.928] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0185.928] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\KykeNQT8cz0GP+hqz5mIpw==.ico" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\jumplistcache\\kykenqt8cz0gp+hqz5mipw==.ico"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0185.929] GetFileType (hFile=0x444) returned 0x1 [0185.929] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0185.929] GetFileType (hFile=0x444) returned 0x1 [0185.929] WriteFile (in: hFile=0x444, lpBuffer=0x221bec8*, nNumberOfBytesToWrite=0x5f0, lpNumberOfBytesWritten=0x3be548, lpOverlapped=0x0 | out: lpBuffer=0x221bec8*, lpNumberOfBytesWritten=0x3be548*=0x5f0, lpOverlapped=0x0) returned 1 [0185.930] CloseHandle (hObject=0x444) returned 1 [0185.930] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\KykeNQT8cz0GP+hqz5mIpw==.ico", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\KykeNQT8cz0GP+hqz5mIpw==.ico", lpFilePart=0x0) returned 0x78 [0185.930] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\KykeNQT8cz0GP+hqz5mIpw==.ico.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\KykeNQT8cz0GP+hqz5mIpw==.ico.xuy", lpFilePart=0x0) returned 0x7c [0185.930] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0185.930] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\KykeNQT8cz0GP+hqz5mIpw==.ico" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\jumplistcache\\kykenqt8cz0gp+hqz5mipw==.ico"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94bdb583, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x94bdb583, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x5aabdf7a, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x5f0)) returned 1 [0185.931] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0185.931] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\KykeNQT8cz0GP+hqz5mIpw==.ico" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\jumplistcache\\kykenqt8cz0gp+hqz5mipw==.ico"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\KykeNQT8cz0GP+hqz5mIpw==.ico.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\jumplistcache\\kykenqt8cz0gp+hqz5mipw==.ico.xuy")) returned 1 [0185.932] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\kZbAJfgDibZzMvDTka320Q==.ico", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\kZbAJfgDibZzMvDTka320Q==.ico", lpFilePart=0x0) returned 0x78 [0185.932] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0185.932] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\kZbAJfgDibZzMvDTka320Q==.ico" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\jumplistcache\\kzbajfgdibzzmvdtka320q==.ico"), fInfoLevelId=0x0, lpFileInformation=0x221d268 | out: lpFileInformation=0x221d268*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x833ca312, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x833ca312, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x833ca312, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x9f3)) returned 1 [0185.932] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0185.932] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\kZbAJfgDibZzMvDTka320Q==.ico", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\kZbAJfgDibZzMvDTka320Q==.ico", lpFilePart=0x0) returned 0x78 [0185.932] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0185.932] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\kZbAJfgDibZzMvDTka320Q==.ico" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\jumplistcache\\kzbajfgdibzzmvdtka320q==.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0185.932] GetFileType (hFile=0x444) returned 0x1 [0185.932] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0185.932] GetFileType (hFile=0x444) returned 0x1 [0185.933] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be708 | out: lpFileSizeHigh=0x3be708*=0x0) returned 0x9f3 [0185.933] ReadFile (in: hFile=0x444, lpBuffer=0x221e018, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be638, lpOverlapped=0x0 | out: lpBuffer=0x221e018*, lpNumberOfBytesRead=0x3be638*=0x9f3, lpOverlapped=0x0) returned 1 [0185.950] CloseHandle (hObject=0x444) returned 1 [0185.961] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\kZbAJfgDibZzMvDTka320Q==.ico", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\kZbAJfgDibZzMvDTka320Q==.ico", lpFilePart=0x0) returned 0x78 [0185.961] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0185.961] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\kZbAJfgDibZzMvDTka320Q==.ico" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\jumplistcache\\kzbajfgdibzzmvdtka320q==.ico"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0185.962] GetFileType (hFile=0x444) returned 0x1 [0185.962] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0185.962] GetFileType (hFile=0x444) returned 0x1 [0185.963] WriteFile (in: hFile=0x444, lpBuffer=0x2298280*, nNumberOfBytesToWrite=0xa00, lpNumberOfBytesWritten=0x3be548, lpOverlapped=0x0 | out: lpBuffer=0x2298280*, lpNumberOfBytesWritten=0x3be548*=0xa00, lpOverlapped=0x0) returned 1 [0185.963] CloseHandle (hObject=0x444) returned 1 [0185.963] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\kZbAJfgDibZzMvDTka320Q==.ico", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\kZbAJfgDibZzMvDTka320Q==.ico", lpFilePart=0x0) returned 0x78 [0185.963] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\kZbAJfgDibZzMvDTka320Q==.ico.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\kZbAJfgDibZzMvDTka320Q==.ico.xuy", lpFilePart=0x0) returned 0x7c [0185.964] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0185.964] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\kZbAJfgDibZzMvDTka320Q==.ico" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\jumplistcache\\kzbajfgdibzzmvdtka320q==.ico"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x833ca312, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x833ca312, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x5ab0a0e2, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xa00)) returned 1 [0185.964] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0185.964] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\kZbAJfgDibZzMvDTka320Q==.ico" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\jumplistcache\\kzbajfgdibzzmvdtka320q==.ico"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\kZbAJfgDibZzMvDTka320Q==.ico.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\jumplistcache\\kzbajfgdibzzmvdtka320q==.ico.xuy")) returned 1 [0185.965] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\K_jbA2CUeAAOJVMrlKk+gQ==.ico", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\K_jbA2CUeAAOJVMrlKk+gQ==.ico", lpFilePart=0x0) returned 0x78 [0185.965] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0185.965] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\K_jbA2CUeAAOJVMrlKk+gQ==.ico" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\jumplistcache\\k_jba2cueaaojvmrlkk+gq==.ico"), fInfoLevelId=0x0, lpFileInformation=0x2299620 | out: lpFileInformation=0x2299620*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94bdb583, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x94bdb583, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x94bdb583, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x5e9)) returned 1 [0185.965] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0185.965] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\K_jbA2CUeAAOJVMrlKk+gQ==.ico", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\K_jbA2CUeAAOJVMrlKk+gQ==.ico", lpFilePart=0x0) returned 0x78 [0185.966] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0185.966] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\K_jbA2CUeAAOJVMrlKk+gQ==.ico" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\jumplistcache\\k_jba2cueaaojvmrlkk+gq==.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0185.966] GetFileType (hFile=0x444) returned 0x1 [0185.966] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0185.966] GetFileType (hFile=0x444) returned 0x1 [0185.966] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be708 | out: lpFileSizeHigh=0x3be708*=0x0) returned 0x5e9 [0185.966] ReadFile (in: hFile=0x444, lpBuffer=0x2299fc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be638, lpOverlapped=0x0 | out: lpBuffer=0x2299fc8*, lpNumberOfBytesRead=0x3be638*=0x5e9, lpOverlapped=0x0) returned 1 [0185.968] CloseHandle (hObject=0x444) returned 1 [0185.979] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\K_jbA2CUeAAOJVMrlKk+gQ==.ico", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\K_jbA2CUeAAOJVMrlKk+gQ==.ico", lpFilePart=0x0) returned 0x78 [0185.980] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0185.980] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\K_jbA2CUeAAOJVMrlKk+gQ==.ico" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\jumplistcache\\k_jba2cueaaojvmrlkk+gq==.ico"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0185.982] GetFileType (hFile=0x444) returned 0x1 [0185.982] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0185.982] GetFileType (hFile=0x444) returned 0x1 [0185.982] WriteFile (in: hFile=0x444, lpBuffer=0x2312dd8*, nNumberOfBytesToWrite=0x5f0, lpNumberOfBytesWritten=0x3be548, lpOverlapped=0x0 | out: lpBuffer=0x2312dd8*, lpNumberOfBytesWritten=0x3be548*=0x5f0, lpOverlapped=0x0) returned 1 [0185.982] CloseHandle (hObject=0x444) returned 1 [0185.983] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\K_jbA2CUeAAOJVMrlKk+gQ==.ico", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\K_jbA2CUeAAOJVMrlKk+gQ==.ico", lpFilePart=0x0) returned 0x78 [0185.983] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\K_jbA2CUeAAOJVMrlKk+gQ==.ico.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\K_jbA2CUeAAOJVMrlKk+gQ==.ico.xuy", lpFilePart=0x0) returned 0x7c [0185.983] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0185.983] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\K_jbA2CUeAAOJVMrlKk+gQ==.ico" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\jumplistcache\\k_jba2cueaaojvmrlkk+gq==.ico"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94bdb583, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x94bdb583, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x5ab30299, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x5f0)) returned 1 [0185.983] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0185.983] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\K_jbA2CUeAAOJVMrlKk+gQ==.ico" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\jumplistcache\\k_jba2cueaaojvmrlkk+gq==.ico"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\K_jbA2CUeAAOJVMrlKk+gQ==.ico.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\jumplistcache\\k_jba2cueaaojvmrlkk+gq==.ico.xuy")) returned 1 [0185.984] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\mgDer72BXyCa3ilaVifttQ==.ico", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\mgDer72BXyCa3ilaVifttQ==.ico", lpFilePart=0x0) returned 0x78 [0185.984] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0185.984] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\mgDer72BXyCa3ilaVifttQ==.ico" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\jumplistcache\\mgder72bxyca3ilavifttq==.ico"), fInfoLevelId=0x0, lpFileInformation=0x2314178 | out: lpFileInformation=0x2314178*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe26028e, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xbe26028e, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0xbe26028e, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x9f3)) returned 1 [0185.984] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0185.984] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\mgDer72BXyCa3ilaVifttQ==.ico", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\mgDer72BXyCa3ilaVifttQ==.ico", lpFilePart=0x0) returned 0x78 [0185.985] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0185.985] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\mgDer72BXyCa3ilaVifttQ==.ico" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\jumplistcache\\mgder72bxyca3ilavifttq==.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0185.985] GetFileType (hFile=0x444) returned 0x1 [0185.985] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0185.985] GetFileType (hFile=0x444) returned 0x1 [0185.985] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be708 | out: lpFileSizeHigh=0x3be708*=0x0) returned 0x9f3 [0185.985] ReadFile (in: hFile=0x444, lpBuffer=0x2314f28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be638, lpOverlapped=0x0 | out: lpBuffer=0x2314f28*, lpNumberOfBytesRead=0x3be638*=0x9f3, lpOverlapped=0x0) returned 1 [0185.994] CloseHandle (hObject=0x444) returned 1 [0186.012] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\mgDer72BXyCa3ilaVifttQ==.ico", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\mgDer72BXyCa3ilaVifttQ==.ico", lpFilePart=0x0) returned 0x78 [0186.012] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0186.012] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\mgDer72BXyCa3ilaVifttQ==.ico" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\jumplistcache\\mgder72bxyca3ilavifttq==.ico"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0186.013] GetFileType (hFile=0x444) returned 0x1 [0186.013] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0186.013] GetFileType (hFile=0x444) returned 0x1 [0186.014] WriteFile (in: hFile=0x444, lpBuffer=0x218f6e0*, nNumberOfBytesToWrite=0xa00, lpNumberOfBytesWritten=0x3be548, lpOverlapped=0x0 | out: lpBuffer=0x218f6e0*, lpNumberOfBytesWritten=0x3be548*=0xa00, lpOverlapped=0x0) returned 1 [0186.014] CloseHandle (hObject=0x444) returned 1 [0186.014] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\mgDer72BXyCa3ilaVifttQ==.ico", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\mgDer72BXyCa3ilaVifttQ==.ico", lpFilePart=0x0) returned 0x78 [0186.014] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\mgDer72BXyCa3ilaVifttQ==.ico.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\mgDer72BXyCa3ilaVifttQ==.ico.xuy", lpFilePart=0x0) returned 0x7c [0186.014] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0186.014] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\mgDer72BXyCa3ilaVifttQ==.ico" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\jumplistcache\\mgder72bxyca3ilavifttq==.ico"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe26028e, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xbe26028e, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x5ab7c8f5, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xa00)) returned 1 [0186.015] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0186.015] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\mgDer72BXyCa3ilaVifttQ==.ico" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\jumplistcache\\mgder72bxyca3ilavifttq==.ico"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\mgDer72BXyCa3ilaVifttQ==.ico.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\jumplistcache\\mgder72bxyca3ilavifttq==.ico.xuy")) returned 1 [0186.016] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\obXqSkYxtPxKEzhnvwJwjg==.ico", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\obXqSkYxtPxKEzhnvwJwjg==.ico", lpFilePart=0x0) returned 0x78 [0186.016] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0186.016] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\obXqSkYxtPxKEzhnvwJwjg==.ico" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\jumplistcache\\obxqskyxtpxkezhnvwjwjg==.ico"), fInfoLevelId=0x0, lpFileInformation=0x2190a80 | out: lpFileInformation=0x2190a80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe26028e, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xbe26028e, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0xbe26028e, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x484)) returned 1 [0186.016] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0186.016] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\obXqSkYxtPxKEzhnvwJwjg==.ico", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\obXqSkYxtPxKEzhnvwJwjg==.ico", lpFilePart=0x0) returned 0x78 [0186.016] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0186.016] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\obXqSkYxtPxKEzhnvwJwjg==.ico" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\jumplistcache\\obxqskyxtpxkezhnvwjwjg==.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0186.016] GetFileType (hFile=0x444) returned 0x1 [0186.016] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0186.016] GetFileType (hFile=0x444) returned 0x1 [0186.016] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be708 | out: lpFileSizeHigh=0x3be708*=0x0) returned 0x484 [0186.017] ReadFile (in: hFile=0x444, lpBuffer=0x21912c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be638, lpOverlapped=0x0 | out: lpBuffer=0x21912c0*, lpNumberOfBytesRead=0x3be638*=0x484, lpOverlapped=0x0) returned 1 [0186.041] CloseHandle (hObject=0x444) returned 1 [0186.100] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\obXqSkYxtPxKEzhnvwJwjg==.ico", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\obXqSkYxtPxKEzhnvwJwjg==.ico", lpFilePart=0x0) returned 0x78 [0186.100] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0186.100] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\obXqSkYxtPxKEzhnvwJwjg==.ico" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\jumplistcache\\obxqskyxtpxkezhnvwjwjg==.ico"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0186.102] GetFileType (hFile=0x444) returned 0x1 [0186.102] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0186.102] GetFileType (hFile=0x444) returned 0x1 [0186.102] WriteFile (in: hFile=0x444, lpBuffer=0x22099f8*, nNumberOfBytesToWrite=0x490, lpNumberOfBytesWritten=0x3be548, lpOverlapped=0x0 | out: lpBuffer=0x22099f8*, lpNumberOfBytesWritten=0x3be548*=0x490, lpOverlapped=0x0) returned 1 [0186.103] CloseHandle (hObject=0x444) returned 1 [0186.103] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\obXqSkYxtPxKEzhnvwJwjg==.ico", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\obXqSkYxtPxKEzhnvwJwjg==.ico", lpFilePart=0x0) returned 0x78 [0186.103] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\obXqSkYxtPxKEzhnvwJwjg==.ico.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\obXqSkYxtPxKEzhnvwJwjg==.ico.xuy", lpFilePart=0x0) returned 0x7c [0186.103] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0186.103] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\obXqSkYxtPxKEzhnvwJwjg==.ico" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\jumplistcache\\obxqskyxtpxkezhnvwjwjg==.ico"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe26028e, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xbe26028e, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x5ac61745, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x490)) returned 1 [0186.103] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0186.103] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\obXqSkYxtPxKEzhnvwJwjg==.ico" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\jumplistcache\\obxqskyxtpxkezhnvwjwjg==.ico"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\obXqSkYxtPxKEzhnvwJwjg==.ico.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\jumplistcache\\obxqskyxtpxkezhnvwjwjg==.ico.xuy")) returned 1 [0186.105] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\ttwZSCROfkViyTVqAFLXrw==.ico", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\ttwZSCROfkViyTVqAFLXrw==.ico", lpFilePart=0x0) returned 0x78 [0186.105] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0186.105] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\ttwZSCROfkViyTVqAFLXrw==.ico" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\jumplistcache\\ttwzscrofkviytvqaflxrw==.ico"), fInfoLevelId=0x0, lpFileInformation=0x220ad98 | out: lpFileInformation=0x220ad98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe26028e, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xbe26028e, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0xbe26028e, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x484)) returned 1 [0186.105] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0186.105] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\ttwZSCROfkViyTVqAFLXrw==.ico", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\ttwZSCROfkViyTVqAFLXrw==.ico", lpFilePart=0x0) returned 0x78 [0186.105] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0186.105] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\ttwZSCROfkViyTVqAFLXrw==.ico" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\jumplistcache\\ttwzscrofkviytvqaflxrw==.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0186.105] GetFileType (hFile=0x444) returned 0x1 [0186.105] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0186.105] GetFileType (hFile=0x444) returned 0x1 [0186.105] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be708 | out: lpFileSizeHigh=0x3be708*=0x0) returned 0x484 [0186.105] ReadFile (in: hFile=0x444, lpBuffer=0x220b5d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be638, lpOverlapped=0x0 | out: lpBuffer=0x220b5d8*, lpNumberOfBytesRead=0x3be638*=0x484, lpOverlapped=0x0) returned 1 [0186.111] CloseHandle (hObject=0x444) returned 1 [0186.121] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\ttwZSCROfkViyTVqAFLXrw==.ico", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\ttwZSCROfkViyTVqAFLXrw==.ico", lpFilePart=0x0) returned 0x78 [0186.121] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0186.121] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\ttwZSCROfkViyTVqAFLXrw==.ico" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\jumplistcache\\ttwzscrofkviytvqaflxrw==.ico"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0186.123] GetFileType (hFile=0x444) returned 0x1 [0186.123] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0186.123] GetFileType (hFile=0x444) returned 0x1 [0186.123] WriteFile (in: hFile=0x444, lpBuffer=0x2283d10*, nNumberOfBytesToWrite=0x490, lpNumberOfBytesWritten=0x3be548, lpOverlapped=0x0 | out: lpBuffer=0x2283d10*, lpNumberOfBytesWritten=0x3be548*=0x490, lpOverlapped=0x0) returned 1 [0186.124] CloseHandle (hObject=0x444) returned 1 [0186.124] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\ttwZSCROfkViyTVqAFLXrw==.ico", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\ttwZSCROfkViyTVqAFLXrw==.ico", lpFilePart=0x0) returned 0x78 [0186.124] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\ttwZSCROfkViyTVqAFLXrw==.ico.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\ttwZSCROfkViyTVqAFLXrw==.ico.xuy", lpFilePart=0x0) returned 0x7c [0186.124] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0186.124] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\ttwZSCROfkViyTVqAFLXrw==.ico" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\jumplistcache\\ttwzscrofkviytvqaflxrw==.ico"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe26028e, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xbe26028e, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x5ac877a9, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x490)) returned 1 [0186.124] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0186.125] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\ttwZSCROfkViyTVqAFLXrw==.ico" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\jumplistcache\\ttwzscrofkviytvqaflxrw==.ico"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\ttwZSCROfkViyTVqAFLXrw==.ico.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\jumplistcache\\ttwzscrofkviytvqaflxrw==.ico.xuy")) returned 1 [0186.126] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\XUMtyI1WhW2H+uz6m0iFOw==.ico", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\XUMtyI1WhW2H+uz6m0iFOw==.ico", lpFilePart=0x0) returned 0x78 [0186.126] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0186.126] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\XUMtyI1WhW2H+uz6m0iFOw==.ico" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\jumplistcache\\xumtyi1whw2h+uz6m0ifow==.ico"), fInfoLevelId=0x0, lpFileInformation=0x22850b0 | out: lpFileInformation=0x22850b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe23a11c, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xbe23a11c, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0xbe23a11c, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x2b6)) returned 1 [0186.126] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0186.126] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\XUMtyI1WhW2H+uz6m0iFOw==.ico", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\XUMtyI1WhW2H+uz6m0iFOw==.ico", lpFilePart=0x0) returned 0x78 [0186.126] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0186.126] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\XUMtyI1WhW2H+uz6m0iFOw==.ico" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\jumplistcache\\xumtyi1whw2h+uz6m0ifow==.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0186.127] GetFileType (hFile=0x444) returned 0x1 [0186.127] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0186.127] GetFileType (hFile=0x444) returned 0x1 [0186.127] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be708 | out: lpFileSizeHigh=0x3be708*=0x0) returned 0x2b6 [0186.127] ReadFile (in: hFile=0x444, lpBuffer=0x2285720, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be638, lpOverlapped=0x0 | out: lpBuffer=0x2285720*, lpNumberOfBytesRead=0x3be638*=0x2b6, lpOverlapped=0x0) returned 1 [0186.139] CloseHandle (hObject=0x444) returned 1 [0186.150] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\XUMtyI1WhW2H+uz6m0iFOw==.ico", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\XUMtyI1WhW2H+uz6m0iFOw==.ico", lpFilePart=0x0) returned 0x78 [0186.150] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0186.150] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\XUMtyI1WhW2H+uz6m0iFOw==.ico" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\jumplistcache\\xumtyi1whw2h+uz6m0ifow==.ico"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0186.152] GetFileType (hFile=0x444) returned 0x1 [0186.152] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0186.152] GetFileType (hFile=0x444) returned 0x1 [0186.152] WriteFile (in: hFile=0x444, lpBuffer=0x22fd548*, nNumberOfBytesToWrite=0x2c0, lpNumberOfBytesWritten=0x3be548, lpOverlapped=0x0 | out: lpBuffer=0x22fd548*, lpNumberOfBytesWritten=0x3be548*=0x2c0, lpOverlapped=0x0) returned 1 [0186.153] CloseHandle (hObject=0x444) returned 1 [0186.153] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\XUMtyI1WhW2H+uz6m0iFOw==.ico", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\XUMtyI1WhW2H+uz6m0iFOw==.ico", lpFilePart=0x0) returned 0x78 [0186.153] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\XUMtyI1WhW2H+uz6m0iFOw==.ico.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\XUMtyI1WhW2H+uz6m0iFOw==.ico.xuy", lpFilePart=0x0) returned 0x7c [0186.153] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0186.153] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\XUMtyI1WhW2H+uz6m0iFOw==.ico" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\jumplistcache\\xumtyi1whw2h+uz6m0ifow==.ico"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe23a11c, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xbe23a11c, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x5acd41bd, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2c0)) returned 1 [0186.153] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0186.154] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\XUMtyI1WhW2H+uz6m0iFOw==.ico" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\jumplistcache\\xumtyi1whw2h+uz6m0ifow==.ico"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\XUMtyI1WhW2H+uz6m0iFOw==.ico.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\jumplistcache\\xumtyi1whw2h+uz6m0ifow==.ico.xuy")) returned 1 [0186.155] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0186.155] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\OfflineCache", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\OfflineCache", lpFilePart=0x0) returned 0x5a [0186.156] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\OfflineCache\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\OfflineCache\\", lpFilePart=0x0) returned 0x5b [0186.156] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\OfflineCache\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d7370 [0186.156] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0186.156] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0186.156] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0186.156] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0186.156] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0186.156] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0186.157] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0186.157] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\OfflineCache", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\OfflineCache", lpFilePart=0x0) returned 0x5a [0186.157] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\OfflineCache\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\OfflineCache\\", lpFilePart=0x0) returned 0x5b [0186.157] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\OfflineCache\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d7a30 [0186.157] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0186.157] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0186.157] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0186.157] FindClose (in: hFindFile=0x5d7a30 | out: hFindFile=0x5d7a30) returned 1 [0186.158] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0186.158] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0186.164] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\OfflineCache\\index.sqlite", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\OfflineCache\\index.sqlite", lpFilePart=0x0) returned 0x67 [0186.164] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0186.164] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\OfflineCache\\index.sqlite" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\offlinecache\\index.sqlite"), fInfoLevelId=0x0, lpFileInformation=0x2300d20 | out: lpFileInformation=0x2300d20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79deab70, ftCreationTime.dwHighDateTime=0x1d2d43f, ftLastAccessTime.dwLowDateTime=0x79deab70, ftLastAccessTime.dwHighDateTime=0x1d2d43f, ftLastWriteTime.dwLowDateTime=0x835e75fc, ftLastWriteTime.dwHighDateTime=0x1d2d43f, nFileSizeHigh=0x0, nFileSizeLow=0x40000)) returned 1 [0186.165] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0186.165] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\OfflineCache\\index.sqlite", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\OfflineCache\\index.sqlite", lpFilePart=0x0) returned 0x67 [0186.165] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0186.165] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\OfflineCache\\index.sqlite" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\offlinecache\\index.sqlite"), fInfoLevelId=0x0, lpFileInformation=0x2300ea8 | out: lpFileInformation=0x2300ea8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79deab70, ftCreationTime.dwHighDateTime=0x1d2d43f, ftLastAccessTime.dwLowDateTime=0x79deab70, ftLastAccessTime.dwHighDateTime=0x1d2d43f, ftLastWriteTime.dwLowDateTime=0x835e75fc, ftLastWriteTime.dwHighDateTime=0x1d2d43f, nFileSizeHigh=0x0, nFileSizeLow=0x40000)) returned 1 [0186.165] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0186.165] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\OfflineCache\\index.sqlite", nBufferLength=0x105, lpBuffer=0x3be120, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\OfflineCache\\index.sqlite", lpFilePart=0x0) returned 0x67 [0186.165] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0186.165] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\OfflineCache\\index.sqlite" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\offlinecache\\index.sqlite"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0186.166] GetFileType (hFile=0x444) returned 0x1 [0186.166] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be570) returned 1 [0186.166] GetFileType (hFile=0x444) returned 0x1 [0186.166] ReadFile (in: hFile=0x444, lpBuffer=0x23032e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be688, lpOverlapped=0x0 | out: lpBuffer=0x23032e8*, lpNumberOfBytesRead=0x3be688*=0x1000, lpOverlapped=0x0) returned 1 [0186.182] CloseHandle (hObject=0x444) returned 1 [0186.182] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\OfflineCache\\index.sqlite", nBufferLength=0x105, lpBuffer=0x3be120, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\OfflineCache\\index.sqlite", lpFilePart=0x0) returned 0x67 [0186.182] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0186.182] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\OfflineCache\\index.sqlite" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\offlinecache\\index.sqlite"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0186.183] GetFileType (hFile=0x444) returned 0x1 [0186.183] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be570) returned 1 [0186.183] GetFileType (hFile=0x444) returned 0x1 [0186.183] WriteFile (in: hFile=0x444, lpBuffer=0x2301010*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be738, lpOverlapped=0x0 | out: lpBuffer=0x2301010*, lpNumberOfBytesWritten=0x3be738*=0x2000, lpOverlapped=0x0) returned 1 [0186.183] CloseHandle (hObject=0x444) returned 1 [0186.183] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\OfflineCache\\index.sqlite", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\OfflineCache\\index.sqlite", lpFilePart=0x0) returned 0x67 [0186.183] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\OfflineCache\\index.sqlite.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\OfflineCache\\index.sqlite.xuy", lpFilePart=0x0) returned 0x6b [0186.183] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0186.183] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\OfflineCache\\index.sqlite" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\offlinecache\\index.sqlite"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79deab70, ftCreationTime.dwHighDateTime=0x1d2d43f, ftLastAccessTime.dwLowDateTime=0x79deab70, ftLastAccessTime.dwHighDateTime=0x1d2d43f, ftLastWriteTime.dwLowDateTime=0x5ad20104, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x40000)) returned 1 [0186.183] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0186.183] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\OfflineCache\\index.sqlite" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\offlinecache\\index.sqlite"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\OfflineCache\\index.sqlite.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\offlinecache\\index.sqlite.xuy")) returned 1 [0186.185] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0186.185] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing", lpFilePart=0x0) returned 0x5a [0186.185] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\", lpFilePart=0x0) returned 0x5b [0186.185] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d81b0 [0186.193] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0186.195] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0186.195] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0186.195] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0186.195] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0186.195] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0186.195] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0186.195] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0186.196] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0186.196] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0186.196] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0186.196] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0186.196] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0186.196] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0186.196] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0186.196] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0186.196] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0186.196] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0186.197] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0186.197] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0186.197] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0186.197] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0186.197] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0186.197] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0186.197] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0186.197] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0186.197] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0186.198] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0186.198] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0186.198] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0186.198] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0186.199] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0186.199] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0186.199] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0186.199] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0186.199] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0186.199] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0186.199] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0186.199] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0186.199] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0186.199] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0186.200] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0186.200] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0186.200] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0186.200] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0186.200] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0186.201] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing", lpFilePart=0x0) returned 0x5a [0186.201] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\", lpFilePart=0x0) returned 0x5b [0186.201] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d81b0 [0186.201] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0186.202] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0186.202] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0186.202] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0186.202] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0186.202] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0186.202] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0186.202] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0186.203] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0186.203] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0186.203] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0186.203] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0186.203] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0186.206] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0186.206] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0186.207] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0186.207] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0186.207] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0186.207] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0186.207] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0186.207] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0186.208] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0186.208] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0186.208] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0186.208] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0186.208] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0186.208] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0186.208] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0186.209] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0186.209] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0186.209] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0186.209] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0186.209] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0186.209] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0186.209] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0186.210] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0186.210] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0186.210] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0186.210] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0186.210] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0186.210] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0186.210] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0186.210] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0186.211] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0186.211] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0186.211] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\base-track-digest256.pset", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\base-track-digest256.pset", lpFilePart=0x0) returned 0x74 [0186.211] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0186.211] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\base-track-digest256.pset" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\base-track-digest256.pset"), fInfoLevelId=0x0, lpFileInformation=0x2191738 | out: lpFileInformation=0x2191738*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x728ebf1a, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x728ebf1a, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x4053a6bc, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0186.212] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0186.212] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\base-track-digest256.pset", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\base-track-digest256.pset", lpFilePart=0x0) returned 0x74 [0186.212] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0186.212] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\base-track-digest256.pset" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\base-track-digest256.pset"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0186.212] GetFileType (hFile=0x444) returned 0x1 [0186.212] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0186.212] GetFileType (hFile=0x444) returned 0x1 [0186.212] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be708 | out: lpFileSizeHigh=0x3be708*=0x0) returned 0x10 [0186.213] ReadFile (in: hFile=0x444, lpBuffer=0x2191ae0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be638, lpOverlapped=0x0 | out: lpBuffer=0x2191ae0*, lpNumberOfBytesRead=0x3be638*=0x10, lpOverlapped=0x0) returned 1 [0186.216] CloseHandle (hObject=0x444) returned 1 [0186.259] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\base-track-digest256.pset", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\base-track-digest256.pset", lpFilePart=0x0) returned 0x74 [0186.259] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0186.259] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\base-track-digest256.pset" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\base-track-digest256.pset"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0186.261] GetFileType (hFile=0x444) returned 0x1 [0186.261] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0186.261] GetFileType (hFile=0x444) returned 0x1 [0186.261] WriteFile (in: hFile=0x444, lpBuffer=0x2208c90*, nNumberOfBytesToWrite=0x20, lpNumberOfBytesWritten=0x3be548, lpOverlapped=0x0 | out: lpBuffer=0x2208c90*, lpNumberOfBytesWritten=0x3be548*=0x20, lpOverlapped=0x0) returned 1 [0186.263] CloseHandle (hObject=0x444) returned 1 [0186.263] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\base-track-digest256.pset", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\base-track-digest256.pset", lpFilePart=0x0) returned 0x74 [0186.263] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\base-track-digest256.pset.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\base-track-digest256.pset.xuy", lpFilePart=0x0) returned 0x78 [0186.263] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0186.263] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\base-track-digest256.pset" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\base-track-digest256.pset"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x728ebf1a, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x728ebf1a, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x5addeeb6, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x20)) returned 1 [0186.263] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0186.263] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\base-track-digest256.pset" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\base-track-digest256.pset"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\base-track-digest256.pset.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\base-track-digest256.pset.xuy")) returned 1 [0186.265] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\base-track-digest256.sbstore", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\base-track-digest256.sbstore", lpFilePart=0x0) returned 0x77 [0186.265] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0186.265] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\base-track-digest256.sbstore" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\base-track-digest256.sbstore"), fInfoLevelId=0x0, lpFileInformation=0x220a020 | out: lpFileInformation=0x220a020*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x728ebf1a, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x728ebf1a, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x404bb73d, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0xf238)) returned 1 [0186.265] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0186.265] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\base-track-digest256.sbstore", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\base-track-digest256.sbstore", lpFilePart=0x0) returned 0x77 [0186.265] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0186.265] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\base-track-digest256.sbstore" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\base-track-digest256.sbstore"), fInfoLevelId=0x0, lpFileInformation=0x220a1e8 | out: lpFileInformation=0x220a1e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x728ebf1a, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x728ebf1a, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x404bb73d, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0xf238)) returned 1 [0186.265] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0186.265] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\base-track-digest256.sbstore", nBufferLength=0x105, lpBuffer=0x3be120, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\base-track-digest256.sbstore", lpFilePart=0x0) returned 0x77 [0186.265] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0186.265] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\base-track-digest256.sbstore" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\base-track-digest256.sbstore"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0186.267] GetFileType (hFile=0x444) returned 0x1 [0186.267] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be570) returned 1 [0186.267] GetFileType (hFile=0x444) returned 0x1 [0186.267] ReadFile (in: hFile=0x444, lpBuffer=0x220c6a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be688, lpOverlapped=0x0 | out: lpBuffer=0x220c6a8*, lpNumberOfBytesRead=0x3be688*=0x1000, lpOverlapped=0x0) returned 1 [0186.293] CloseHandle (hObject=0x444) returned 1 [0186.293] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\base-track-digest256.sbstore", nBufferLength=0x105, lpBuffer=0x3be120, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\base-track-digest256.sbstore", lpFilePart=0x0) returned 0x77 [0186.293] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0186.293] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\base-track-digest256.sbstore" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\base-track-digest256.sbstore"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0186.293] GetFileType (hFile=0x444) returned 0x1 [0186.293] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be570) returned 1 [0186.293] GetFileType (hFile=0x444) returned 0x1 [0186.293] WriteFile (in: hFile=0x444, lpBuffer=0x220a390*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be738, lpOverlapped=0x0 | out: lpBuffer=0x220a390*, lpNumberOfBytesWritten=0x3be738*=0x2000, lpOverlapped=0x0) returned 1 [0186.293] CloseHandle (hObject=0x444) returned 1 [0186.294] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\base-track-digest256.sbstore", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\base-track-digest256.sbstore", lpFilePart=0x0) returned 0x77 [0186.294] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\base-track-digest256.sbstore.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\base-track-digest256.sbstore.xuy", lpFilePart=0x0) returned 0x7b [0186.294] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0186.294] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\base-track-digest256.sbstore" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\base-track-digest256.sbstore"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x728ebf1a, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x728ebf1a, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x5ae2b4dd, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xf238)) returned 1 [0186.294] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0186.294] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\base-track-digest256.sbstore" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\base-track-digest256.sbstore"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\base-track-digest256.sbstore.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\base-track-digest256.sbstore.xuy")) returned 1 [0186.295] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-badbinurl-shavar.pset", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-badbinurl-shavar.pset", lpFilePart=0x0) returned 0x75 [0186.295] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0186.295] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-badbinurl-shavar.pset" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\goog-badbinurl-shavar.pset"), fInfoLevelId=0x0, lpFileInformation=0x2288be0 | out: lpFileInformation=0x2288be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x728ebf1a, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x728ebf1a, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0xe662e3ca, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x177b6)) returned 1 [0186.296] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0186.296] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-badbinurl-shavar.pset", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-badbinurl-shavar.pset", lpFilePart=0x0) returned 0x75 [0186.296] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0186.296] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-badbinurl-shavar.pset" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\goog-badbinurl-shavar.pset"), fInfoLevelId=0x0, lpFileInformation=0x2288da0 | out: lpFileInformation=0x2288da0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x728ebf1a, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x728ebf1a, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0xe662e3ca, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x177b6)) returned 1 [0186.296] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0186.296] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-badbinurl-shavar.pset", nBufferLength=0x105, lpBuffer=0x3be120, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-badbinurl-shavar.pset", lpFilePart=0x0) returned 0x75 [0186.297] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0186.297] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-badbinurl-shavar.pset" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\goog-badbinurl-shavar.pset"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0186.298] GetFileType (hFile=0x444) returned 0x1 [0186.298] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be570) returned 1 [0186.298] GetFileType (hFile=0x444) returned 0x1 [0186.298] ReadFile (in: hFile=0x444, lpBuffer=0x228b250, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be688, lpOverlapped=0x0 | out: lpBuffer=0x228b250*, lpNumberOfBytesRead=0x3be688*=0x1000, lpOverlapped=0x0) returned 1 [0186.334] CloseHandle (hObject=0x444) returned 1 [0186.335] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-badbinurl-shavar.pset", nBufferLength=0x105, lpBuffer=0x3be120, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-badbinurl-shavar.pset", lpFilePart=0x0) returned 0x75 [0186.335] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0186.335] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-badbinurl-shavar.pset" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\goog-badbinurl-shavar.pset"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0186.335] GetFileType (hFile=0x444) returned 0x1 [0186.335] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be570) returned 1 [0186.335] GetFileType (hFile=0x444) returned 0x1 [0186.335] WriteFile (in: hFile=0x444, lpBuffer=0x2288f40*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be738, lpOverlapped=0x0 | out: lpBuffer=0x2288f40*, lpNumberOfBytesWritten=0x3be738*=0x2000, lpOverlapped=0x0) returned 1 [0186.335] CloseHandle (hObject=0x444) returned 1 [0186.335] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-badbinurl-shavar.pset", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-badbinurl-shavar.pset", lpFilePart=0x0) returned 0x75 [0186.335] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-badbinurl-shavar.pset.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-badbinurl-shavar.pset.xuy", lpFilePart=0x0) returned 0x79 [0186.335] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0186.335] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-badbinurl-shavar.pset" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\goog-badbinurl-shavar.pset"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x728ebf1a, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x728ebf1a, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x5ae9d991, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x177b6)) returned 1 [0186.336] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0186.336] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-badbinurl-shavar.pset" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\goog-badbinurl-shavar.pset"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-badbinurl-shavar.pset.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\goog-badbinurl-shavar.pset.xuy")) returned 1 [0186.337] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-badbinurl-shavar.sbstore", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-badbinurl-shavar.sbstore", lpFilePart=0x0) returned 0x78 [0186.337] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0186.337] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-badbinurl-shavar.sbstore" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\goog-badbinurl-shavar.sbstore"), fInfoLevelId=0x0, lpFileInformation=0x2307788 | out: lpFileInformation=0x2307788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x728ebf1a, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x728ebf1a, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0xe64182e9, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x166a5)) returned 1 [0186.337] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0186.337] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-badbinurl-shavar.sbstore", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-badbinurl-shavar.sbstore", lpFilePart=0x0) returned 0x78 [0186.337] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0186.337] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-badbinurl-shavar.sbstore" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\goog-badbinurl-shavar.sbstore"), fInfoLevelId=0x0, lpFileInformation=0x2307958 | out: lpFileInformation=0x2307958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x728ebf1a, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x728ebf1a, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0xe64182e9, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x166a5)) returned 1 [0186.337] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0186.337] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-badbinurl-shavar.sbstore", nBufferLength=0x105, lpBuffer=0x3be120, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-badbinurl-shavar.sbstore", lpFilePart=0x0) returned 0x78 [0186.337] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0186.337] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-badbinurl-shavar.sbstore" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\goog-badbinurl-shavar.sbstore"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0186.338] GetFileType (hFile=0x444) returned 0x1 [0186.338] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be570) returned 1 [0186.339] GetFileType (hFile=0x444) returned 0x1 [0186.339] ReadFile (in: hFile=0x444, lpBuffer=0x2309e28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be688, lpOverlapped=0x0 | out: lpBuffer=0x2309e28*, lpNumberOfBytesRead=0x3be688*=0x1000, lpOverlapped=0x0) returned 1 [0186.362] CloseHandle (hObject=0x444) returned 1 [0186.362] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-badbinurl-shavar.sbstore", nBufferLength=0x105, lpBuffer=0x3be120, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-badbinurl-shavar.sbstore", lpFilePart=0x0) returned 0x78 [0186.362] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0186.362] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-badbinurl-shavar.sbstore" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\goog-badbinurl-shavar.sbstore"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0186.363] GetFileType (hFile=0x444) returned 0x1 [0186.363] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be570) returned 1 [0186.363] GetFileType (hFile=0x444) returned 0x1 [0186.363] WriteFile (in: hFile=0x444, lpBuffer=0x2307b08*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be738, lpOverlapped=0x0 | out: lpBuffer=0x2307b08*, lpNumberOfBytesWritten=0x3be738*=0x2000, lpOverlapped=0x0) returned 1 [0186.363] CloseHandle (hObject=0x444) returned 1 [0186.363] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-badbinurl-shavar.sbstore", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-badbinurl-shavar.sbstore", lpFilePart=0x0) returned 0x78 [0186.363] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-badbinurl-shavar.sbstore.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-badbinurl-shavar.sbstore.xuy", lpFilePart=0x0) returned 0x7c [0186.363] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0186.363] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-badbinurl-shavar.sbstore" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\goog-badbinurl-shavar.sbstore"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x728ebf1a, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x728ebf1a, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x5aeea2a0, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x166a5)) returned 1 [0186.363] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0186.363] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-badbinurl-shavar.sbstore" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\goog-badbinurl-shavar.sbstore"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-badbinurl-shavar.sbstore.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\goog-badbinurl-shavar.sbstore.xuy")) returned 1 [0186.365] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-downloadwhite-digest256.pset", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-downloadwhite-digest256.pset", lpFilePart=0x0) returned 0x7c [0186.365] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0186.365] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-downloadwhite-digest256.pset" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\goog-downloadwhite-digest256.pset"), fInfoLevelId=0x0, lpFileInformation=0x2386380 | out: lpFileInformation=0x2386380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x728ebf1a, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x728ebf1a, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x71ddbe73, ftLastWriteTime.dwHighDateTime=0x1d2d43f, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0186.365] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0186.365] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-downloadwhite-digest256.pset", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-downloadwhite-digest256.pset", lpFilePart=0x0) returned 0x7c [0186.365] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0186.365] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-downloadwhite-digest256.pset" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\goog-downloadwhite-digest256.pset"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0186.365] GetFileType (hFile=0x444) returned 0x1 [0186.365] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0186.365] GetFileType (hFile=0x444) returned 0x1 [0186.365] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be708 | out: lpFileSizeHigh=0x3be708*=0x0) returned 0x10 [0186.365] ReadFile (in: hFile=0x444, lpBuffer=0x2386768, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be638, lpOverlapped=0x0 | out: lpBuffer=0x2386768*, lpNumberOfBytesRead=0x3be638*=0x10, lpOverlapped=0x0) returned 1 [0186.366] CloseHandle (hObject=0x444) returned 1 [0186.414] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-downloadwhite-digest256.pset", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-downloadwhite-digest256.pset", lpFilePart=0x0) returned 0x7c [0186.414] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0186.414] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-downloadwhite-digest256.pset" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\goog-downloadwhite-digest256.pset"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0186.416] GetFileType (hFile=0x444) returned 0x1 [0186.416] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0186.416] GetFileType (hFile=0x444) returned 0x1 [0186.416] WriteFile (in: hFile=0x444, lpBuffer=0x21fda78*, nNumberOfBytesToWrite=0x20, lpNumberOfBytesWritten=0x3be548, lpOverlapped=0x0 | out: lpBuffer=0x21fda78*, lpNumberOfBytesWritten=0x3be548*=0x20, lpOverlapped=0x0) returned 1 [0186.417] CloseHandle (hObject=0x444) returned 1 [0186.417] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-downloadwhite-digest256.pset", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-downloadwhite-digest256.pset", lpFilePart=0x0) returned 0x7c [0186.417] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-downloadwhite-digest256.pset.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-downloadwhite-digest256.pset.xuy", lpFilePart=0x0) returned 0x80 [0186.417] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0186.417] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-downloadwhite-digest256.pset" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\goog-downloadwhite-digest256.pset"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x728ebf1a, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x728ebf1a, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x5af5c6fa, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x20)) returned 1 [0186.417] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0186.417] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-downloadwhite-digest256.pset" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\goog-downloadwhite-digest256.pset"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-downloadwhite-digest256.pset.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\goog-downloadwhite-digest256.pset.xuy")) returned 1 [0186.419] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-downloadwhite-digest256.sbstore", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-downloadwhite-digest256.sbstore", lpFilePart=0x0) returned 0x7f [0186.419] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0186.419] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-downloadwhite-digest256.sbstore" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\goog-downloadwhite-digest256.sbstore"), fInfoLevelId=0x0, lpFileInformation=0x21fee38 | out: lpFileInformation=0x21fee38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x728ebf1a, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x728ebf1a, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x71d5810e, ftLastWriteTime.dwHighDateTime=0x1d2d43f, nFileSizeHigh=0x0, nFileSizeLow=0x529c)) returned 1 [0186.419] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0186.419] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-downloadwhite-digest256.sbstore", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-downloadwhite-digest256.sbstore", lpFilePart=0x0) returned 0x7f [0186.419] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0186.419] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-downloadwhite-digest256.sbstore" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\goog-downloadwhite-digest256.sbstore"), fInfoLevelId=0x0, lpFileInformation=0x21ff020 | out: lpFileInformation=0x21ff020*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x728ebf1a, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x728ebf1a, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x71d5810e, ftLastWriteTime.dwHighDateTime=0x1d2d43f, nFileSizeHigh=0x0, nFileSizeLow=0x529c)) returned 1 [0186.420] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0186.420] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-downloadwhite-digest256.sbstore", nBufferLength=0x105, lpBuffer=0x3be120, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-downloadwhite-digest256.sbstore", lpFilePart=0x0) returned 0x7f [0186.420] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0186.420] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-downloadwhite-digest256.sbstore" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\goog-downloadwhite-digest256.sbstore"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0186.421] GetFileType (hFile=0x444) returned 0x1 [0186.421] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be570) returned 1 [0186.421] GetFileType (hFile=0x444) returned 0x1 [0186.421] ReadFile (in: hFile=0x444, lpBuffer=0x2201520, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be688, lpOverlapped=0x0 | out: lpBuffer=0x2201520*, lpNumberOfBytesRead=0x3be688*=0x1000, lpOverlapped=0x0) returned 1 [0186.451] CloseHandle (hObject=0x444) returned 1 [0186.451] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-downloadwhite-digest256.sbstore", nBufferLength=0x105, lpBuffer=0x3be120, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-downloadwhite-digest256.sbstore", lpFilePart=0x0) returned 0x7f [0186.451] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0186.451] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-downloadwhite-digest256.sbstore" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\goog-downloadwhite-digest256.sbstore"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0186.452] GetFileType (hFile=0x444) returned 0x1 [0186.452] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be570) returned 1 [0186.452] GetFileType (hFile=0x444) returned 0x1 [0186.452] WriteFile (in: hFile=0x444, lpBuffer=0x21ff1e8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be738, lpOverlapped=0x0 | out: lpBuffer=0x21ff1e8*, lpNumberOfBytesWritten=0x3be738*=0x2000, lpOverlapped=0x0) returned 1 [0186.452] CloseHandle (hObject=0x444) returned 1 [0186.452] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-downloadwhite-digest256.sbstore", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-downloadwhite-digest256.sbstore", lpFilePart=0x0) returned 0x7f [0186.452] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-downloadwhite-digest256.sbstore.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-downloadwhite-digest256.sbstore.xuy", lpFilePart=0x0) returned 0x83 [0186.452] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0186.452] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-downloadwhite-digest256.sbstore" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\goog-downloadwhite-digest256.sbstore"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x728ebf1a, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x728ebf1a, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x5afa8acb, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x529c)) returned 1 [0186.452] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0186.452] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-downloadwhite-digest256.sbstore" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\goog-downloadwhite-digest256.sbstore"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-downloadwhite-digest256.sbstore.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\goog-downloadwhite-digest256.sbstore.xuy")) returned 1 [0186.454] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-malware-shavar.pset", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-malware-shavar.pset", lpFilePart=0x0) returned 0x73 [0186.454] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0186.454] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-malware-shavar.pset" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\goog-malware-shavar.pset"), fInfoLevelId=0x0, lpFileInformation=0x227daa8 | out: lpFileInformation=0x227daa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72912163, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x72912163, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0xe7219fac, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x97714)) returned 1 [0186.456] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0186.456] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-malware-shavar.pset", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-malware-shavar.pset", lpFilePart=0x0) returned 0x73 [0186.456] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0186.456] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-malware-shavar.pset" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\goog-malware-shavar.pset"), fInfoLevelId=0x0, lpFileInformation=0x227dc60 | out: lpFileInformation=0x227dc60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72912163, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x72912163, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0xe7219fac, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x97714)) returned 1 [0186.456] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0186.456] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-malware-shavar.pset", nBufferLength=0x105, lpBuffer=0x3be120, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-malware-shavar.pset", lpFilePart=0x0) returned 0x73 [0186.456] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0186.456] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-malware-shavar.pset" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\goog-malware-shavar.pset"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0186.457] GetFileType (hFile=0x444) returned 0x1 [0186.457] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be570) returned 1 [0186.458] GetFileType (hFile=0x444) returned 0x1 [0186.458] ReadFile (in: hFile=0x444, lpBuffer=0x2280100, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be688, lpOverlapped=0x0 | out: lpBuffer=0x2280100*, lpNumberOfBytesRead=0x3be688*=0x1000, lpOverlapped=0x0) returned 1 [0186.475] CloseHandle (hObject=0x444) returned 1 [0186.475] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-malware-shavar.pset", nBufferLength=0x105, lpBuffer=0x3be120, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-malware-shavar.pset", lpFilePart=0x0) returned 0x73 [0186.475] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0186.475] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-malware-shavar.pset" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\goog-malware-shavar.pset"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0186.475] GetFileType (hFile=0x444) returned 0x1 [0186.475] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be570) returned 1 [0186.475] GetFileType (hFile=0x444) returned 0x1 [0186.476] WriteFile (in: hFile=0x444, lpBuffer=0x227ddf8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be738, lpOverlapped=0x0 | out: lpBuffer=0x227ddf8*, lpNumberOfBytesWritten=0x3be738*=0x2000, lpOverlapped=0x0) returned 1 [0186.476] CloseHandle (hObject=0x444) returned 1 [0186.476] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-malware-shavar.pset", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-malware-shavar.pset", lpFilePart=0x0) returned 0x73 [0186.476] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-malware-shavar.pset.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-malware-shavar.pset.xuy", lpFilePart=0x0) returned 0x77 [0186.476] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0186.476] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-malware-shavar.pset" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\goog-malware-shavar.pset"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72912163, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x72912163, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x5aff4e7f, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x97714)) returned 1 [0186.476] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0186.476] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-malware-shavar.pset" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\goog-malware-shavar.pset"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-malware-shavar.pset.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\goog-malware-shavar.pset.xuy")) returned 1 [0186.477] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-malware-shavar.sbstore", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-malware-shavar.sbstore", lpFilePart=0x0) returned 0x76 [0186.477] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0186.478] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-malware-shavar.sbstore" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\goog-malware-shavar.sbstore"), fInfoLevelId=0x0, lpFileInformation=0x22fc618 | out: lpFileInformation=0x22fc618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72912163, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x72912163, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0xe718162c, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x1465f6)) returned 1 [0186.478] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0186.478] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-malware-shavar.sbstore", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-malware-shavar.sbstore", lpFilePart=0x0) returned 0x76 [0186.478] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0186.478] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-malware-shavar.sbstore" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\goog-malware-shavar.sbstore"), fInfoLevelId=0x0, lpFileInformation=0x22fc7d8 | out: lpFileInformation=0x22fc7d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72912163, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x72912163, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0xe718162c, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x1465f6)) returned 1 [0186.478] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0186.478] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-malware-shavar.sbstore", nBufferLength=0x105, lpBuffer=0x3be120, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-malware-shavar.sbstore", lpFilePart=0x0) returned 0x76 [0186.478] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0186.478] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-malware-shavar.sbstore" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\goog-malware-shavar.sbstore"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0186.479] GetFileType (hFile=0x444) returned 0x1 [0186.479] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be570) returned 1 [0186.479] GetFileType (hFile=0x444) returned 0x1 [0186.479] ReadFile (in: hFile=0x444, lpBuffer=0x22fec88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be688, lpOverlapped=0x0 | out: lpBuffer=0x22fec88*, lpNumberOfBytesRead=0x3be688*=0x1000, lpOverlapped=0x0) returned 1 [0186.493] CloseHandle (hObject=0x444) returned 1 [0186.493] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-malware-shavar.sbstore", nBufferLength=0x105, lpBuffer=0x3be120, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-malware-shavar.sbstore", lpFilePart=0x0) returned 0x76 [0186.493] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0186.493] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-malware-shavar.sbstore" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\goog-malware-shavar.sbstore"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0186.493] GetFileType (hFile=0x444) returned 0x1 [0186.493] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be570) returned 1 [0186.493] GetFileType (hFile=0x444) returned 0x1 [0186.493] WriteFile (in: hFile=0x444, lpBuffer=0x22fc978*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be738, lpOverlapped=0x0 | out: lpBuffer=0x22fc978*, lpNumberOfBytesWritten=0x3be738*=0x2000, lpOverlapped=0x0) returned 1 [0186.494] CloseHandle (hObject=0x444) returned 1 [0186.494] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-malware-shavar.sbstore", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-malware-shavar.sbstore", lpFilePart=0x0) returned 0x76 [0186.494] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-malware-shavar.sbstore.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-malware-shavar.sbstore.xuy", lpFilePart=0x0) returned 0x7a [0186.494] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0186.494] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-malware-shavar.sbstore" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\goog-malware-shavar.sbstore"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72912163, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x72912163, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x5b01b15d, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x1465f6)) returned 1 [0186.494] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0186.494] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-malware-shavar.sbstore" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\goog-malware-shavar.sbstore"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-malware-shavar.sbstore.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\goog-malware-shavar.sbstore.xuy")) returned 1 [0186.495] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-phish-shavar.pset", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-phish-shavar.pset", lpFilePart=0x0) returned 0x71 [0186.495] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0186.495] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-phish-shavar.pset" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\goog-phish-shavar.pset"), fInfoLevelId=0x0, lpFileInformation=0x237b1b8 | out: lpFileInformation=0x237b1b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72912163, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x72912163, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0xe794108c, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x89ec8)) returned 1 [0186.496] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0186.496] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-phish-shavar.pset", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-phish-shavar.pset", lpFilePart=0x0) returned 0x71 [0186.496] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0186.496] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-phish-shavar.pset" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\goog-phish-shavar.pset"), fInfoLevelId=0x0, lpFileInformation=0x237b368 | out: lpFileInformation=0x237b368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72912163, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x72912163, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0xe794108c, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x89ec8)) returned 1 [0186.496] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0186.496] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-phish-shavar.pset", nBufferLength=0x105, lpBuffer=0x3be120, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-phish-shavar.pset", lpFilePart=0x0) returned 0x71 [0186.496] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0186.496] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-phish-shavar.pset" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\goog-phish-shavar.pset"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0186.497] GetFileType (hFile=0x444) returned 0x1 [0186.497] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be570) returned 1 [0186.497] GetFileType (hFile=0x444) returned 0x1 [0186.497] ReadFile (in: hFile=0x444, lpBuffer=0x237d7f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be688, lpOverlapped=0x0 | out: lpBuffer=0x237d7f8*, lpNumberOfBytesRead=0x3be688*=0x1000, lpOverlapped=0x0) returned 1 [0186.653] CloseHandle (hObject=0x444) returned 1 [0186.653] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-phish-shavar.pset", nBufferLength=0x105, lpBuffer=0x3be120, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-phish-shavar.pset", lpFilePart=0x0) returned 0x71 [0186.653] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0186.653] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-phish-shavar.pset" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\goog-phish-shavar.pset"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0186.654] GetFileType (hFile=0x444) returned 0x1 [0186.654] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be570) returned 1 [0186.654] GetFileType (hFile=0x444) returned 0x1 [0186.654] WriteFile (in: hFile=0x444, lpBuffer=0x218c238*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be738, lpOverlapped=0x0 | out: lpBuffer=0x218c238*, lpNumberOfBytesWritten=0x3be738*=0x2000, lpOverlapped=0x0) returned 1 [0186.654] CloseHandle (hObject=0x444) returned 1 [0186.654] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-phish-shavar.pset", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-phish-shavar.pset", lpFilePart=0x0) returned 0x71 [0186.654] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-phish-shavar.pset.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-phish-shavar.pset.xuy", lpFilePart=0x0) returned 0x75 [0186.654] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0186.654] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-phish-shavar.pset" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\goog-phish-shavar.pset"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72912163, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x72912163, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x5b198825, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x89ec8)) returned 1 [0186.654] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0186.654] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-phish-shavar.pset" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\goog-phish-shavar.pset"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-phish-shavar.pset.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\goog-phish-shavar.pset.xuy")) returned 1 [0186.655] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-phish-shavar.sbstore", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-phish-shavar.sbstore", lpFilePart=0x0) returned 0x74 [0186.655] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0186.656] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-phish-shavar.sbstore" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\goog-phish-shavar.sbstore"), fInfoLevelId=0x0, lpFileInformation=0x21fcea8 | out: lpFileInformation=0x21fcea8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72912163, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x72912163, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0xe78ce980, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x1036e0)) returned 1 [0186.656] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0186.656] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-phish-shavar.sbstore", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-phish-shavar.sbstore", lpFilePart=0x0) returned 0x74 [0186.656] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0186.656] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-phish-shavar.sbstore" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\goog-phish-shavar.sbstore"), fInfoLevelId=0x0, lpFileInformation=0x21fd068 | out: lpFileInformation=0x21fd068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72912163, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x72912163, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0xe78ce980, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x1036e0)) returned 1 [0186.656] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0186.656] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-phish-shavar.sbstore", nBufferLength=0x105, lpBuffer=0x3be120, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-phish-shavar.sbstore", lpFilePart=0x0) returned 0x74 [0186.656] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0186.656] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-phish-shavar.sbstore" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\goog-phish-shavar.sbstore"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0186.657] GetFileType (hFile=0x444) returned 0x1 [0186.657] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be570) returned 1 [0186.657] GetFileType (hFile=0x444) returned 0x1 [0186.657] ReadFile (in: hFile=0x444, lpBuffer=0x21ff518, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be688, lpOverlapped=0x0 | out: lpBuffer=0x21ff518*, lpNumberOfBytesRead=0x3be688*=0x1000, lpOverlapped=0x0) returned 1 [0186.670] CloseHandle (hObject=0x444) returned 1 [0186.670] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-phish-shavar.sbstore", nBufferLength=0x105, lpBuffer=0x3be120, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-phish-shavar.sbstore", lpFilePart=0x0) returned 0x74 [0186.670] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0186.670] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-phish-shavar.sbstore" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\goog-phish-shavar.sbstore"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0186.671] GetFileType (hFile=0x444) returned 0x1 [0186.671] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be570) returned 1 [0186.671] GetFileType (hFile=0x444) returned 0x1 [0186.671] WriteFile (in: hFile=0x444, lpBuffer=0x21fd208*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be738, lpOverlapped=0x0 | out: lpBuffer=0x21fd208*, lpNumberOfBytesWritten=0x3be738*=0x2000, lpOverlapped=0x0) returned 1 [0186.671] CloseHandle (hObject=0x444) returned 1 [0186.671] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-phish-shavar.sbstore", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-phish-shavar.sbstore", lpFilePart=0x0) returned 0x74 [0186.671] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-phish-shavar.sbstore.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-phish-shavar.sbstore.xuy", lpFilePart=0x0) returned 0x78 [0186.671] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0186.671] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-phish-shavar.sbstore" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\goog-phish-shavar.sbstore"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72912163, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x72912163, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x5b1beae9, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x1036e0)) returned 1 [0186.671] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0186.671] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-phish-shavar.sbstore" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\goog-phish-shavar.sbstore"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-phish-shavar.sbstore.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\goog-phish-shavar.sbstore.xuy")) returned 1 [0186.673] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-unwanted-shavar.pset", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-unwanted-shavar.pset", lpFilePart=0x0) returned 0x74 [0186.673] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0186.673] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-unwanted-shavar.pset" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\goog-unwanted-shavar.pset"), fInfoLevelId=0x0, lpFileInformation=0x227ba48 | out: lpFileInformation=0x227ba48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72912163, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x72912163, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0xe8068181, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x547d6)) returned 1 [0186.675] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0186.675] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-unwanted-shavar.pset", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-unwanted-shavar.pset", lpFilePart=0x0) returned 0x74 [0186.675] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0186.675] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-unwanted-shavar.pset" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\goog-unwanted-shavar.pset"), fInfoLevelId=0x0, lpFileInformation=0x227bc08 | out: lpFileInformation=0x227bc08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72912163, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x72912163, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0xe8068181, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x547d6)) returned 1 [0186.675] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0186.676] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-unwanted-shavar.pset", nBufferLength=0x105, lpBuffer=0x3be120, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-unwanted-shavar.pset", lpFilePart=0x0) returned 0x74 [0186.676] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0186.676] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-unwanted-shavar.pset" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\goog-unwanted-shavar.pset"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0186.677] GetFileType (hFile=0x444) returned 0x1 [0186.677] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be570) returned 1 [0186.677] GetFileType (hFile=0x444) returned 0x1 [0186.677] ReadFile (in: hFile=0x444, lpBuffer=0x227e0b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be688, lpOverlapped=0x0 | out: lpBuffer=0x227e0b8*, lpNumberOfBytesRead=0x3be688*=0x1000, lpOverlapped=0x0) returned 1 [0186.699] CloseHandle (hObject=0x444) returned 1 [0186.699] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-unwanted-shavar.pset", nBufferLength=0x105, lpBuffer=0x3be120, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-unwanted-shavar.pset", lpFilePart=0x0) returned 0x74 [0186.699] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0186.699] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-unwanted-shavar.pset" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\goog-unwanted-shavar.pset"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0186.699] GetFileType (hFile=0x444) returned 0x1 [0186.699] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be570) returned 1 [0186.699] GetFileType (hFile=0x444) returned 0x1 [0186.699] WriteFile (in: hFile=0x444, lpBuffer=0x227bda8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be738, lpOverlapped=0x0 | out: lpBuffer=0x227bda8*, lpNumberOfBytesWritten=0x3be738*=0x2000, lpOverlapped=0x0) returned 1 [0186.699] CloseHandle (hObject=0x444) returned 1 [0186.700] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-unwanted-shavar.pset", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-unwanted-shavar.pset", lpFilePart=0x0) returned 0x74 [0186.700] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-unwanted-shavar.pset.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-unwanted-shavar.pset.xuy", lpFilePart=0x0) returned 0x78 [0186.700] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0186.700] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-unwanted-shavar.pset" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\goog-unwanted-shavar.pset"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72912163, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x72912163, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x5b20aeca, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x547d6)) returned 1 [0186.700] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0186.700] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-unwanted-shavar.pset" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\goog-unwanted-shavar.pset"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-unwanted-shavar.pset.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\goog-unwanted-shavar.pset.xuy")) returned 1 [0186.701] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-unwanted-shavar.sbstore", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-unwanted-shavar.sbstore", lpFilePart=0x0) returned 0x77 [0186.701] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0186.701] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-unwanted-shavar.sbstore" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\goog-unwanted-shavar.sbstore"), fInfoLevelId=0x0, lpFileInformation=0x22fa5f0 | out: lpFileInformation=0x22fa5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72912163, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x72912163, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0xe7fcf845, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x61bc9)) returned 1 [0186.701] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0186.701] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-unwanted-shavar.sbstore", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-unwanted-shavar.sbstore", lpFilePart=0x0) returned 0x77 [0186.701] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0186.702] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-unwanted-shavar.sbstore" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\goog-unwanted-shavar.sbstore"), fInfoLevelId=0x0, lpFileInformation=0x22fa7b8 | out: lpFileInformation=0x22fa7b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72912163, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x72912163, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0xe7fcf845, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x61bc9)) returned 1 [0186.702] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0186.702] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-unwanted-shavar.sbstore", nBufferLength=0x105, lpBuffer=0x3be120, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-unwanted-shavar.sbstore", lpFilePart=0x0) returned 0x77 [0186.702] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0186.702] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-unwanted-shavar.sbstore" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\goog-unwanted-shavar.sbstore"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0186.703] GetFileType (hFile=0x444) returned 0x1 [0186.703] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be570) returned 1 [0186.703] GetFileType (hFile=0x444) returned 0x1 [0186.703] ReadFile (in: hFile=0x444, lpBuffer=0x22fcc78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be688, lpOverlapped=0x0 | out: lpBuffer=0x22fcc78*, lpNumberOfBytesRead=0x3be688*=0x1000, lpOverlapped=0x0) returned 1 [0186.715] CloseHandle (hObject=0x444) returned 1 [0186.715] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-unwanted-shavar.sbstore", nBufferLength=0x105, lpBuffer=0x3be120, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-unwanted-shavar.sbstore", lpFilePart=0x0) returned 0x77 [0186.715] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0186.716] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-unwanted-shavar.sbstore" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\goog-unwanted-shavar.sbstore"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0186.716] GetFileType (hFile=0x444) returned 0x1 [0186.716] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be570) returned 1 [0186.716] GetFileType (hFile=0x444) returned 0x1 [0186.716] WriteFile (in: hFile=0x444, lpBuffer=0x22fa960*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be738, lpOverlapped=0x0 | out: lpBuffer=0x22fa960*, lpNumberOfBytesWritten=0x3be738*=0x2000, lpOverlapped=0x0) returned 1 [0186.716] CloseHandle (hObject=0x444) returned 1 [0186.716] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-unwanted-shavar.sbstore", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-unwanted-shavar.sbstore", lpFilePart=0x0) returned 0x77 [0186.716] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-unwanted-shavar.sbstore.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-unwanted-shavar.sbstore.xuy", lpFilePart=0x0) returned 0x7b [0186.716] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0186.716] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-unwanted-shavar.sbstore" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\goog-unwanted-shavar.sbstore"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72912163, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x72912163, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x5b231205, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x61bc9)) returned 1 [0186.716] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0186.716] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-unwanted-shavar.sbstore" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\goog-unwanted-shavar.sbstore"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-unwanted-shavar.sbstore.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\goog-unwanted-shavar.sbstore.xuy")) returned 1 [0186.718] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\mozplugin-block-digest256.pset", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\mozplugin-block-digest256.pset", lpFilePart=0x0) returned 0x79 [0186.718] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0186.718] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\mozplugin-block-digest256.pset" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\mozplugin-block-digest256.pset"), fInfoLevelId=0x0, lpFileInformation=0x23791b0 | out: lpFileInformation=0x23791b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72912163, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x72912163, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x4059e842, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0186.718] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0186.718] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\mozplugin-block-digest256.pset", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\mozplugin-block-digest256.pset", lpFilePart=0x0) returned 0x79 [0186.718] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0186.718] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\mozplugin-block-digest256.pset" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\mozplugin-block-digest256.pset"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0186.718] GetFileType (hFile=0x444) returned 0x1 [0186.718] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0186.718] GetFileType (hFile=0x444) returned 0x1 [0186.718] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be708 | out: lpFileSizeHigh=0x3be708*=0x0) returned 0x10 [0186.718] ReadFile (in: hFile=0x444, lpBuffer=0x2379578, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be638, lpOverlapped=0x0 | out: lpBuffer=0x2379578*, lpNumberOfBytesRead=0x3be638*=0x10, lpOverlapped=0x0) returned 1 [0186.727] CloseHandle (hObject=0x444) returned 1 [0186.766] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\mozplugin-block-digest256.pset", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\mozplugin-block-digest256.pset", lpFilePart=0x0) returned 0x79 [0186.766] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0186.766] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\mozplugin-block-digest256.pset" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\mozplugin-block-digest256.pset"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0186.776] GetFileType (hFile=0x444) returned 0x1 [0186.776] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0186.776] GetFileType (hFile=0x444) returned 0x1 [0186.776] WriteFile (in: hFile=0x444, lpBuffer=0x21ed558*, nNumberOfBytesToWrite=0x20, lpNumberOfBytesWritten=0x3be548, lpOverlapped=0x0 | out: lpBuffer=0x21ed558*, lpNumberOfBytesWritten=0x3be548*=0x20, lpOverlapped=0x0) returned 1 [0186.777] CloseHandle (hObject=0x444) returned 1 [0186.777] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\mozplugin-block-digest256.pset", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\mozplugin-block-digest256.pset", lpFilePart=0x0) returned 0x79 [0186.777] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\mozplugin-block-digest256.pset.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\mozplugin-block-digest256.pset.xuy", lpFilePart=0x0) returned 0x7d [0186.777] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0186.777] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\mozplugin-block-digest256.pset" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\mozplugin-block-digest256.pset"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72912163, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x72912163, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x5b2cc633, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x20)) returned 1 [0186.777] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0186.777] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\mozplugin-block-digest256.pset" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\mozplugin-block-digest256.pset"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\mozplugin-block-digest256.pset.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\mozplugin-block-digest256.pset.xuy")) returned 1 [0186.778] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\mozplugin-block-digest256.sbstore", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\mozplugin-block-digest256.sbstore", lpFilePart=0x0) returned 0x7c [0186.778] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0186.778] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\mozplugin-block-digest256.sbstore" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\mozplugin-block-digest256.sbstore"), fInfoLevelId=0x0, lpFileInformation=0x21ee900 | out: lpFileInformation=0x21ee900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72912163, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x72912163, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x4053f4b3, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0xdfc)) returned 1 [0186.779] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0186.779] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\mozplugin-block-digest256.sbstore", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\mozplugin-block-digest256.sbstore", lpFilePart=0x0) returned 0x7c [0186.779] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0186.779] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\mozplugin-block-digest256.sbstore" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\mozplugin-block-digest256.sbstore"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0186.779] GetFileType (hFile=0x444) returned 0x1 [0186.779] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0186.779] GetFileType (hFile=0x444) returned 0x1 [0186.779] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be708 | out: lpFileSizeHigh=0x3be708*=0x0) returned 0xdfc [0186.779] ReadFile (in: hFile=0x444, lpBuffer=0x21efad8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be638, lpOverlapped=0x0 | out: lpBuffer=0x21efad8*, lpNumberOfBytesRead=0x3be638*=0xdfc, lpOverlapped=0x0) returned 1 [0186.784] CloseHandle (hObject=0x444) returned 1 [0186.794] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\mozplugin-block-digest256.sbstore", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\mozplugin-block-digest256.sbstore", lpFilePart=0x0) returned 0x7c [0186.794] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0186.794] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\mozplugin-block-digest256.sbstore" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\mozplugin-block-digest256.sbstore"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0186.796] GetFileType (hFile=0x444) returned 0x1 [0186.796] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0186.796] GetFileType (hFile=0x444) returned 0x1 [0186.796] WriteFile (in: hFile=0x444, lpBuffer=0x226b148*, nNumberOfBytesToWrite=0xe00, lpNumberOfBytesWritten=0x3be548, lpOverlapped=0x0 | out: lpBuffer=0x226b148*, lpNumberOfBytesWritten=0x3be548*=0xe00, lpOverlapped=0x0) returned 1 [0186.797] CloseHandle (hObject=0x444) returned 1 [0186.797] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\mozplugin-block-digest256.sbstore", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\mozplugin-block-digest256.sbstore", lpFilePart=0x0) returned 0x7c [0186.797] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\mozplugin-block-digest256.sbstore.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\mozplugin-block-digest256.sbstore.xuy", lpFilePart=0x0) returned 0x80 [0186.797] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0186.797] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\mozplugin-block-digest256.sbstore" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\mozplugin-block-digest256.sbstore"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72912163, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x72912163, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x5b2efe05, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xe00)) returned 1 [0186.797] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0186.797] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\mozplugin-block-digest256.sbstore" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\mozplugin-block-digest256.sbstore"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\mozplugin-block-digest256.sbstore.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\mozplugin-block-digest256.sbstore.xuy")) returned 1 [0186.799] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\mozstd-trackwhite-digest256.pset", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\mozstd-trackwhite-digest256.pset", lpFilePart=0x0) returned 0x7b [0186.799] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0186.799] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\mozstd-trackwhite-digest256.pset" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\mozstd-trackwhite-digest256.pset"), fInfoLevelId=0x0, lpFileInformation=0x226c500 | out: lpFileInformation=0x226c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72912163, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x72912163, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x4060512b, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0186.799] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0186.799] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\mozstd-trackwhite-digest256.pset", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\mozstd-trackwhite-digest256.pset", lpFilePart=0x0) returned 0x7b [0186.799] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0186.799] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\mozstd-trackwhite-digest256.pset" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\mozstd-trackwhite-digest256.pset"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0186.800] GetFileType (hFile=0x444) returned 0x1 [0186.800] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0186.800] GetFileType (hFile=0x444) returned 0x1 [0186.800] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be708 | out: lpFileSizeHigh=0x3be708*=0x0) returned 0x10 [0186.800] ReadFile (in: hFile=0x444, lpBuffer=0x226c8d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be638, lpOverlapped=0x0 | out: lpBuffer=0x226c8d8*, lpNumberOfBytesRead=0x3be638*=0x10, lpOverlapped=0x0) returned 1 [0186.801] CloseHandle (hObject=0x444) returned 1 [0186.810] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\mozstd-trackwhite-digest256.pset", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\mozstd-trackwhite-digest256.pset", lpFilePart=0x0) returned 0x7b [0186.810] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0186.810] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\mozstd-trackwhite-digest256.pset" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\mozstd-trackwhite-digest256.pset"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0186.812] GetFileType (hFile=0x444) returned 0x1 [0186.812] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0186.812] GetFileType (hFile=0x444) returned 0x1 [0186.812] WriteFile (in: hFile=0x444, lpBuffer=0x22e3aa0*, nNumberOfBytesToWrite=0x20, lpNumberOfBytesWritten=0x3be548, lpOverlapped=0x0 | out: lpBuffer=0x22e3aa0*, lpNumberOfBytesWritten=0x3be548*=0x20, lpOverlapped=0x0) returned 1 [0186.813] CloseHandle (hObject=0x444) returned 1 [0186.813] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\mozstd-trackwhite-digest256.pset", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\mozstd-trackwhite-digest256.pset", lpFilePart=0x0) returned 0x7b [0186.813] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\mozstd-trackwhite-digest256.pset.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\mozstd-trackwhite-digest256.pset.xuy", lpFilePart=0x0) returned 0x7f [0186.813] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0186.813] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\mozstd-trackwhite-digest256.pset" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\mozstd-trackwhite-digest256.pset"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72912163, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x72912163, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x5b3162a6, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x20)) returned 1 [0186.814] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0186.814] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\mozstd-trackwhite-digest256.pset" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\mozstd-trackwhite-digest256.pset"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\mozstd-trackwhite-digest256.pset.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\mozstd-trackwhite-digest256.pset.xuy")) returned 1 [0186.898] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\mozstd-trackwhite-digest256.sbstore", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\mozstd-trackwhite-digest256.sbstore", lpFilePart=0x0) returned 0x7e [0186.898] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0186.898] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\mozstd-trackwhite-digest256.sbstore" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\mozstd-trackwhite-digest256.sbstore"), fInfoLevelId=0x0, lpFileInformation=0x22e4e48 | out: lpFileInformation=0x22e4e48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72912163, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x72912163, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x405b6ef0, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x55810)) returned 1 [0186.898] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0186.898] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\mozstd-trackwhite-digest256.sbstore", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\mozstd-trackwhite-digest256.sbstore", lpFilePart=0x0) returned 0x7e [0186.898] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0186.898] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\mozstd-trackwhite-digest256.sbstore" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\mozstd-trackwhite-digest256.sbstore"), fInfoLevelId=0x0, lpFileInformation=0x22e5028 | out: lpFileInformation=0x22e5028*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72912163, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x72912163, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x405b6ef0, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x55810)) returned 1 [0186.898] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0186.898] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\mozstd-trackwhite-digest256.sbstore", nBufferLength=0x105, lpBuffer=0x3be120, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\mozstd-trackwhite-digest256.sbstore", lpFilePart=0x0) returned 0x7e [0186.899] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0186.899] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\mozstd-trackwhite-digest256.sbstore" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\mozstd-trackwhite-digest256.sbstore"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0186.900] GetFileType (hFile=0x444) returned 0x1 [0186.900] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be570) returned 1 [0186.900] GetFileType (hFile=0x444) returned 0x1 [0186.900] ReadFile (in: hFile=0x444, lpBuffer=0x22e7518, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be688, lpOverlapped=0x0 | out: lpBuffer=0x22e7518*, lpNumberOfBytesRead=0x3be688*=0x1000, lpOverlapped=0x0) returned 1 [0186.912] CloseHandle (hObject=0x444) returned 1 [0186.912] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\mozstd-trackwhite-digest256.sbstore", nBufferLength=0x105, lpBuffer=0x3be120, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\mozstd-trackwhite-digest256.sbstore", lpFilePart=0x0) returned 0x7e [0186.912] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0186.912] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\mozstd-trackwhite-digest256.sbstore" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\mozstd-trackwhite-digest256.sbstore"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0186.913] GetFileType (hFile=0x444) returned 0x1 [0186.913] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be570) returned 1 [0186.913] GetFileType (hFile=0x444) returned 0x1 [0186.913] WriteFile (in: hFile=0x444, lpBuffer=0x22e51e8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be738, lpOverlapped=0x0 | out: lpBuffer=0x22e51e8*, lpNumberOfBytesWritten=0x3be738*=0x2000, lpOverlapped=0x0) returned 1 [0186.913] CloseHandle (hObject=0x444) returned 1 [0186.913] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\mozstd-trackwhite-digest256.sbstore", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\mozstd-trackwhite-digest256.sbstore", lpFilePart=0x0) returned 0x7e [0186.913] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\mozstd-trackwhite-digest256.sbstore.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\mozstd-trackwhite-digest256.sbstore.xuy", lpFilePart=0x0) returned 0x82 [0186.913] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0186.913] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\mozstd-trackwhite-digest256.sbstore" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\mozstd-trackwhite-digest256.sbstore"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72912163, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x72912163, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x5b4214b9, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x55810)) returned 1 [0186.913] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0186.913] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\mozstd-trackwhite-digest256.sbstore" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\mozstd-trackwhite-digest256.sbstore"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\mozstd-trackwhite-digest256.sbstore.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\mozstd-trackwhite-digest256.sbstore.xuy")) returned 1 [0186.915] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-block-simple.pset", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-block-simple.pset", lpFilePart=0x0) returned 0x71 [0186.915] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0186.915] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-block-simple.pset" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-block-simple.pset"), fInfoLevelId=0x0, lpFileInformation=0x2363a98 | out: lpFileInformation=0x2363a98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72912163, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x72912163, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x72c596ee, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0186.915] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0186.915] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-block-simple.pset", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-block-simple.pset", lpFilePart=0x0) returned 0x71 [0186.915] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0186.915] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-block-simple.pset" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-block-simple.pset"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0186.915] GetFileType (hFile=0x444) returned 0x1 [0186.915] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0186.915] GetFileType (hFile=0x444) returned 0x1 [0186.915] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be708 | out: lpFileSizeHigh=0x3be708*=0x0) returned 0x10 [0186.915] ReadFile (in: hFile=0x444, lpBuffer=0x2363e20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be638, lpOverlapped=0x0 | out: lpBuffer=0x2363e20*, lpNumberOfBytesRead=0x3be638*=0x10, lpOverlapped=0x0) returned 1 [0186.916] CloseHandle (hObject=0x444) returned 1 [0186.961] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-block-simple.pset", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-block-simple.pset", lpFilePart=0x0) returned 0x71 [0186.961] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0186.961] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-block-simple.pset" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-block-simple.pset"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0186.963] GetFileType (hFile=0x444) returned 0x1 [0186.963] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0186.963] GetFileType (hFile=0x444) returned 0x1 [0186.963] WriteFile (in: hFile=0x444, lpBuffer=0x21dafa8*, nNumberOfBytesToWrite=0x20, lpNumberOfBytesWritten=0x3be548, lpOverlapped=0x0 | out: lpBuffer=0x21dafa8*, lpNumberOfBytesWritten=0x3be548*=0x20, lpOverlapped=0x0) returned 1 [0186.964] CloseHandle (hObject=0x444) returned 1 [0186.964] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-block-simple.pset", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-block-simple.pset", lpFilePart=0x0) returned 0x71 [0186.964] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-block-simple.pset.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-block-simple.pset.xuy", lpFilePart=0x0) returned 0x75 [0186.964] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0186.964] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-block-simple.pset" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-block-simple.pset"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72912163, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x72912163, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x5b493cc5, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x20)) returned 1 [0186.964] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0186.965] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-block-simple.pset" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-block-simple.pset"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-block-simple.pset.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-block-simple.pset.xuy")) returned 1 [0186.966] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-block-simple.sbstore", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-block-simple.sbstore", lpFilePart=0x0) returned 0x74 [0186.966] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0186.966] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-block-simple.sbstore" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-block-simple.sbstore"), fInfoLevelId=0x0, lpFileInformation=0x21dc320 | out: lpFileInformation=0x21dc320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72c0d071, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x72c0d071, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x72c0d071, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0xe8)) returned 1 [0186.984] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0186.984] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-block-simple.sbstore", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-block-simple.sbstore", lpFilePart=0x0) returned 0x74 [0186.984] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0186.984] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-block-simple.sbstore" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-block-simple.sbstore"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0186.984] GetFileType (hFile=0x444) returned 0x1 [0186.984] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0186.984] GetFileType (hFile=0x444) returned 0x1 [0186.984] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be708 | out: lpFileSizeHigh=0x3be708*=0x0) returned 0xe8 [0186.984] ReadFile (in: hFile=0x444, lpBuffer=0x21dc7a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be638, lpOverlapped=0x0 | out: lpBuffer=0x21dc7a0*, lpNumberOfBytesRead=0x3be638*=0xe8, lpOverlapped=0x0) returned 1 [0186.985] CloseHandle (hObject=0x444) returned 1 [0186.995] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-block-simple.sbstore", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-block-simple.sbstore", lpFilePart=0x0) returned 0x74 [0186.995] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0186.995] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-block-simple.sbstore" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-block-simple.sbstore"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0186.997] GetFileType (hFile=0x444) returned 0x1 [0186.997] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0186.997] GetFileType (hFile=0x444) returned 0x1 [0186.997] WriteFile (in: hFile=0x444, lpBuffer=0x2253ae8*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x3be548, lpOverlapped=0x0 | out: lpBuffer=0x2253ae8*, lpNumberOfBytesWritten=0x3be548*=0xf0, lpOverlapped=0x0) returned 1 [0186.998] CloseHandle (hObject=0x444) returned 1 [0186.998] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-block-simple.sbstore", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-block-simple.sbstore", lpFilePart=0x0) returned 0x74 [0186.998] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-block-simple.sbstore.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-block-simple.sbstore.xuy", lpFilePart=0x0) returned 0x78 [0186.998] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0186.998] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-block-simple.sbstore" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-block-simple.sbstore"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72c0d071, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x72c0d071, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x5b4dfc1b, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xf0)) returned 1 [0186.998] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0186.998] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-block-simple.sbstore" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-block-simple.sbstore"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-block-simple.sbstore.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-block-simple.sbstore.xuy")) returned 1 [0187.000] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-flash-simple.pset", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-flash-simple.pset", lpFilePart=0x0) returned 0x71 [0187.000] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0187.000] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-flash-simple.pset" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-flash-simple.pset"), fInfoLevelId=0x0, lpFileInformation=0x2254e70 | out: lpFileInformation=0x2254e70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72912163, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x72912163, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x72ca5b16, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0187.003] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0187.003] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-flash-simple.pset", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-flash-simple.pset", lpFilePart=0x0) returned 0x71 [0187.003] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0187.003] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-flash-simple.pset" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-flash-simple.pset"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0187.003] GetFileType (hFile=0x444) returned 0x1 [0187.003] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0187.003] GetFileType (hFile=0x444) returned 0x1 [0187.003] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be708 | out: lpFileSizeHigh=0x3be708*=0x0) returned 0x10 [0187.003] ReadFile (in: hFile=0x444, lpBuffer=0x22551f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be638, lpOverlapped=0x0 | out: lpBuffer=0x22551f8*, lpNumberOfBytesRead=0x3be638*=0x10, lpOverlapped=0x0) returned 1 [0187.004] CloseHandle (hObject=0x444) returned 1 [0187.014] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-flash-simple.pset", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-flash-simple.pset", lpFilePart=0x0) returned 0x71 [0187.014] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0187.014] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-flash-simple.pset" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-flash-simple.pset"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0187.016] GetFileType (hFile=0x444) returned 0x1 [0187.016] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0187.016] GetFileType (hFile=0x444) returned 0x1 [0187.016] WriteFile (in: hFile=0x444, lpBuffer=0x22cc398*, nNumberOfBytesToWrite=0x20, lpNumberOfBytesWritten=0x3be548, lpOverlapped=0x0 | out: lpBuffer=0x22cc398*, lpNumberOfBytesWritten=0x3be548*=0x20, lpOverlapped=0x0) returned 1 [0187.016] CloseHandle (hObject=0x444) returned 1 [0187.017] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-flash-simple.pset", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-flash-simple.pset", lpFilePart=0x0) returned 0x71 [0187.017] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-flash-simple.pset.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-flash-simple.pset.xuy", lpFilePart=0x0) returned 0x75 [0187.017] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0187.017] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-flash-simple.pset" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-flash-simple.pset"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72912163, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x72912163, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x5b505d68, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x20)) returned 1 [0187.017] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0187.017] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-flash-simple.pset" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-flash-simple.pset"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-flash-simple.pset.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-flash-simple.pset.xuy")) returned 1 [0187.018] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-flash-simple.sbstore", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-flash-simple.sbstore", lpFilePart=0x0) returned 0x74 [0187.018] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0187.018] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-flash-simple.sbstore" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-flash-simple.sbstore"), fInfoLevelId=0x0, lpFileInformation=0x22cd710 | out: lpFileInformation=0x22cd710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72c596ee, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x72c596ee, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x72c596ee, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0xe8)) returned 1 [0187.019] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0187.019] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-flash-simple.sbstore", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-flash-simple.sbstore", lpFilePart=0x0) returned 0x74 [0187.019] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0187.019] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-flash-simple.sbstore" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-flash-simple.sbstore"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0187.019] GetFileType (hFile=0x444) returned 0x1 [0187.019] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0187.019] GetFileType (hFile=0x444) returned 0x1 [0187.019] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be708 | out: lpFileSizeHigh=0x3be708*=0x0) returned 0xe8 [0187.019] ReadFile (in: hFile=0x444, lpBuffer=0x22cdb90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be638, lpOverlapped=0x0 | out: lpBuffer=0x22cdb90*, lpNumberOfBytesRead=0x3be638*=0xe8, lpOverlapped=0x0) returned 1 [0187.020] CloseHandle (hObject=0x444) returned 1 [0187.030] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-flash-simple.sbstore", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-flash-simple.sbstore", lpFilePart=0x0) returned 0x74 [0187.030] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0187.030] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-flash-simple.sbstore" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-flash-simple.sbstore"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0187.032] GetFileType (hFile=0x444) returned 0x1 [0187.032] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0187.032] GetFileType (hFile=0x444) returned 0x1 [0187.032] WriteFile (in: hFile=0x444, lpBuffer=0x2344ed8*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x3be548, lpOverlapped=0x0 | out: lpBuffer=0x2344ed8*, lpNumberOfBytesWritten=0x3be548*=0xf0, lpOverlapped=0x0) returned 1 [0187.033] CloseHandle (hObject=0x444) returned 1 [0187.033] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-flash-simple.sbstore", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-flash-simple.sbstore", lpFilePart=0x0) returned 0x74 [0187.033] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-flash-simple.sbstore.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-flash-simple.sbstore.xuy", lpFilePart=0x0) returned 0x78 [0187.033] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0187.033] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-flash-simple.sbstore" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-flash-simple.sbstore"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72c596ee, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x72c596ee, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x5b52c144, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xf0)) returned 1 [0187.033] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0187.033] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-flash-simple.sbstore" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-flash-simple.sbstore"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-flash-simple.sbstore.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-flash-simple.sbstore.xuy")) returned 1 [0187.034] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-flashallow-simple.pset", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-flashallow-simple.pset", lpFilePart=0x0) returned 0x76 [0187.034] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0187.034] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-flashallow-simple.pset" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-flashallow-simple.pset"), fInfoLevelId=0x0, lpFileInformation=0x2346260 | out: lpFileInformation=0x2346260*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x729383b8, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x729383b8, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x72d3e33a, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0187.035] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0187.035] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-flashallow-simple.pset", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-flashallow-simple.pset", lpFilePart=0x0) returned 0x76 [0187.035] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0187.035] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-flashallow-simple.pset" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-flashallow-simple.pset"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0187.035] GetFileType (hFile=0x444) returned 0x1 [0187.035] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0187.035] GetFileType (hFile=0x444) returned 0x1 [0187.035] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be708 | out: lpFileSizeHigh=0x3be708*=0x0) returned 0x10 [0187.035] ReadFile (in: hFile=0x444, lpBuffer=0x2346608, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be638, lpOverlapped=0x0 | out: lpBuffer=0x2346608*, lpNumberOfBytesRead=0x3be638*=0x10, lpOverlapped=0x0) returned 1 [0187.039] CloseHandle (hObject=0x444) returned 1 [0187.079] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-flashallow-simple.pset", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-flashallow-simple.pset", lpFilePart=0x0) returned 0x76 [0187.079] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0187.079] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-flashallow-simple.pset" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-flashallow-simple.pset"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0187.083] GetFileType (hFile=0x444) returned 0x1 [0187.083] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0187.083] GetFileType (hFile=0x444) returned 0x1 [0187.084] WriteFile (in: hFile=0x444, lpBuffer=0x21bd7b8*, nNumberOfBytesToWrite=0x20, lpNumberOfBytesWritten=0x3be548, lpOverlapped=0x0 | out: lpBuffer=0x21bd7b8*, lpNumberOfBytesWritten=0x3be548*=0x20, lpOverlapped=0x0) returned 1 [0187.084] CloseHandle (hObject=0x444) returned 1 [0187.085] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-flashallow-simple.pset", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-flashallow-simple.pset", lpFilePart=0x0) returned 0x76 [0187.085] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-flashallow-simple.pset.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-flashallow-simple.pset.xuy", lpFilePart=0x0) returned 0x7a [0187.085] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0187.085] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-flashallow-simple.pset" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-flashallow-simple.pset"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x729383b8, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x729383b8, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x5b5c4bd8, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x20)) returned 1 [0187.085] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0187.085] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-flashallow-simple.pset" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-flashallow-simple.pset"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-flashallow-simple.pset.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-flashallow-simple.pset.xuy")) returned 1 [0187.087] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-flashallow-simple.sbstore", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-flashallow-simple.sbstore", lpFilePart=0x0) returned 0x79 [0187.087] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0187.087] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-flashallow-simple.sbstore" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-flashallow-simple.sbstore"), fInfoLevelId=0x0, lpFileInformation=0x21beb48 | out: lpFileInformation=0x21beb48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72cf1e80, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x72cf1e80, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x72cf1e80, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0xe8)) returned 1 [0187.104] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0187.104] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-flashallow-simple.sbstore", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-flashallow-simple.sbstore", lpFilePart=0x0) returned 0x79 [0187.104] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0187.104] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-flashallow-simple.sbstore" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-flashallow-simple.sbstore"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0187.104] GetFileType (hFile=0x444) returned 0x1 [0187.105] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0187.105] GetFileType (hFile=0x444) returned 0x1 [0187.105] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be708 | out: lpFileSizeHigh=0x3be708*=0x0) returned 0xe8 [0187.105] ReadFile (in: hFile=0x444, lpBuffer=0x21befe8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be638, lpOverlapped=0x0 | out: lpBuffer=0x21befe8*, lpNumberOfBytesRead=0x3be638*=0xe8, lpOverlapped=0x0) returned 1 [0187.105] CloseHandle (hObject=0x444) returned 1 [0187.118] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-flashallow-simple.sbstore", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-flashallow-simple.sbstore", lpFilePart=0x0) returned 0x79 [0187.118] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0187.118] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-flashallow-simple.sbstore" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-flashallow-simple.sbstore"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0187.120] GetFileType (hFile=0x444) returned 0x1 [0187.120] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0187.120] GetFileType (hFile=0x444) returned 0x1 [0187.120] WriteFile (in: hFile=0x444, lpBuffer=0x2236340*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x3be548, lpOverlapped=0x0 | out: lpBuffer=0x2236340*, lpNumberOfBytesWritten=0x3be548*=0xf0, lpOverlapped=0x0) returned 1 [0187.121] CloseHandle (hObject=0x444) returned 1 [0187.121] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-flashallow-simple.sbstore", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-flashallow-simple.sbstore", lpFilePart=0x0) returned 0x79 [0187.121] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-flashallow-simple.sbstore.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-flashallow-simple.sbstore.xuy", lpFilePart=0x0) returned 0x7d [0187.121] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0187.121] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-flashallow-simple.sbstore" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-flashallow-simple.sbstore"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72cf1e80, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x72cf1e80, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x5b610f98, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xf0)) returned 1 [0187.121] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0187.121] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-flashallow-simple.sbstore" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-flashallow-simple.sbstore"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-flashallow-simple.sbstore.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-flashallow-simple.sbstore.xuy")) returned 1 [0187.122] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-flashsubdoc-simple.pset", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-flashsubdoc-simple.pset", lpFilePart=0x0) returned 0x77 [0187.122] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0187.123] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-flashsubdoc-simple.pset" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-flashsubdoc-simple.pset"), fInfoLevelId=0x0, lpFileInformation=0x22376e0 | out: lpFileInformation=0x22376e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x729383b8, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x729383b8, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x72db0a14, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0187.126] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0187.126] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-flashsubdoc-simple.pset", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-flashsubdoc-simple.pset", lpFilePart=0x0) returned 0x77 [0187.126] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0187.126] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-flashsubdoc-simple.pset" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-flashsubdoc-simple.pset"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0187.126] GetFileType (hFile=0x444) returned 0x1 [0187.126] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0187.126] GetFileType (hFile=0x444) returned 0x1 [0187.126] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be708 | out: lpFileSizeHigh=0x3be708*=0x0) returned 0x10 [0187.127] ReadFile (in: hFile=0x444, lpBuffer=0x2237a98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be638, lpOverlapped=0x0 | out: lpBuffer=0x2237a98*, lpNumberOfBytesRead=0x3be638*=0x10, lpOverlapped=0x0) returned 1 [0187.127] CloseHandle (hObject=0x444) returned 1 [0187.137] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-flashsubdoc-simple.pset", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-flashsubdoc-simple.pset", lpFilePart=0x0) returned 0x77 [0187.137] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0187.137] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-flashsubdoc-simple.pset" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-flashsubdoc-simple.pset"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0187.139] GetFileType (hFile=0x444) returned 0x1 [0187.139] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0187.139] GetFileType (hFile=0x444) returned 0x1 [0187.139] WriteFile (in: hFile=0x444, lpBuffer=0x22aec50*, nNumberOfBytesToWrite=0x20, lpNumberOfBytesWritten=0x3be548, lpOverlapped=0x0 | out: lpBuffer=0x22aec50*, lpNumberOfBytesWritten=0x3be548*=0x20, lpOverlapped=0x0) returned 1 [0187.140] CloseHandle (hObject=0x444) returned 1 [0187.140] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-flashsubdoc-simple.pset", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-flashsubdoc-simple.pset", lpFilePart=0x0) returned 0x77 [0187.141] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-flashsubdoc-simple.pset.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-flashsubdoc-simple.pset.xuy", lpFilePart=0x0) returned 0x7b [0187.141] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0187.141] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-flashsubdoc-simple.pset" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-flashsubdoc-simple.pset"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x729383b8, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x729383b8, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x5b637111, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x20)) returned 1 [0187.141] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0187.141] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-flashsubdoc-simple.pset" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-flashsubdoc-simple.pset"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-flashsubdoc-simple.pset.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-flashsubdoc-simple.pset.xuy")) returned 1 [0187.142] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-flashsubdoc-simple.sbstore", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-flashsubdoc-simple.sbstore", lpFilePart=0x0) returned 0x7a [0187.146] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0187.146] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-flashsubdoc-simple.sbstore" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-flashsubdoc-simple.sbstore"), fInfoLevelId=0x0, lpFileInformation=0x22affe0 | out: lpFileInformation=0x22affe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72d64585, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x72d64585, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x72d64585, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0xe8)) returned 1 [0187.146] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0187.146] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-flashsubdoc-simple.sbstore", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-flashsubdoc-simple.sbstore", lpFilePart=0x0) returned 0x7a [0187.146] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0187.146] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-flashsubdoc-simple.sbstore" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-flashsubdoc-simple.sbstore"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0187.146] GetFileType (hFile=0x444) returned 0x1 [0187.146] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0187.146] GetFileType (hFile=0x444) returned 0x1 [0187.146] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be708 | out: lpFileSizeHigh=0x3be708*=0x0) returned 0xe8 [0187.146] ReadFile (in: hFile=0x444, lpBuffer=0x22b0480, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be638, lpOverlapped=0x0 | out: lpBuffer=0x22b0480*, lpNumberOfBytesRead=0x3be638*=0xe8, lpOverlapped=0x0) returned 1 [0187.147] CloseHandle (hObject=0x444) returned 1 [0187.160] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-flashsubdoc-simple.sbstore", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-flashsubdoc-simple.sbstore", lpFilePart=0x0) returned 0x7a [0187.160] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0187.160] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-flashsubdoc-simple.sbstore" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-flashsubdoc-simple.sbstore"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0187.162] GetFileType (hFile=0x444) returned 0x1 [0187.162] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0187.162] GetFileType (hFile=0x444) returned 0x1 [0187.162] WriteFile (in: hFile=0x444, lpBuffer=0x23277d8*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x3be548, lpOverlapped=0x0 | out: lpBuffer=0x23277d8*, lpNumberOfBytesWritten=0x3be548*=0xf0, lpOverlapped=0x0) returned 1 [0187.175] CloseHandle (hObject=0x444) returned 1 [0187.175] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-flashsubdoc-simple.sbstore", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-flashsubdoc-simple.sbstore", lpFilePart=0x0) returned 0x7a [0187.175] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-flashsubdoc-simple.sbstore.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-flashsubdoc-simple.sbstore.xuy", lpFilePart=0x0) returned 0x7e [0187.175] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0187.175] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-flashsubdoc-simple.sbstore" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-flashsubdoc-simple.sbstore"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72d64585, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x72d64585, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x5b6a9861, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xf0)) returned 1 [0187.176] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0187.176] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-flashsubdoc-simple.sbstore" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-flashsubdoc-simple.sbstore"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-flashsubdoc-simple.sbstore.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-flashsubdoc-simple.sbstore.xuy")) returned 1 [0187.177] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-malware-simple.pset", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-malware-simple.pset", lpFilePart=0x0) returned 0x73 [0187.177] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0187.177] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-malware-simple.pset" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-malware-simple.pset"), fInfoLevelId=0x0, lpFileInformation=0x2328b78 | out: lpFileInformation=0x2328b78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x729383b8, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x729383b8, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x72b02125, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0187.177] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0187.177] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-malware-simple.pset", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-malware-simple.pset", lpFilePart=0x0) returned 0x73 [0187.177] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0187.177] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-malware-simple.pset" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-malware-simple.pset"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0187.178] GetFileType (hFile=0x444) returned 0x1 [0187.178] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0187.178] GetFileType (hFile=0x444) returned 0x1 [0187.178] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be708 | out: lpFileSizeHigh=0x3be708*=0x0) returned 0x10 [0187.178] ReadFile (in: hFile=0x444, lpBuffer=0x2328f10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be638, lpOverlapped=0x0 | out: lpBuffer=0x2328f10*, lpNumberOfBytesRead=0x3be638*=0x10, lpOverlapped=0x0) returned 1 [0187.178] CloseHandle (hObject=0x444) returned 1 [0187.221] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-malware-simple.pset", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-malware-simple.pset", lpFilePart=0x0) returned 0x73 [0187.221] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0187.221] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-malware-simple.pset" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-malware-simple.pset"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0187.223] GetFileType (hFile=0x444) returned 0x1 [0187.223] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0187.223] GetFileType (hFile=0x444) returned 0x1 [0187.223] WriteFile (in: hFile=0x444, lpBuffer=0x21a00b8*, nNumberOfBytesToWrite=0x20, lpNumberOfBytesWritten=0x3be548, lpOverlapped=0x0 | out: lpBuffer=0x21a00b8*, lpNumberOfBytesWritten=0x3be548*=0x20, lpOverlapped=0x0) returned 1 [0187.224] CloseHandle (hObject=0x444) returned 1 [0187.224] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-malware-simple.pset", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-malware-simple.pset", lpFilePart=0x0) returned 0x73 [0187.224] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-malware-simple.pset.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-malware-simple.pset.xuy", lpFilePart=0x0) returned 0x77 [0187.224] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0187.224] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-malware-simple.pset" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-malware-simple.pset"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x729383b8, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x729383b8, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x5b71c1f8, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x20)) returned 1 [0187.224] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0187.224] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-malware-simple.pset" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-malware-simple.pset"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-malware-simple.pset.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-malware-simple.pset.xuy")) returned 1 [0187.225] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-malware-simple.sbstore", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-malware-simple.sbstore", lpFilePart=0x0) returned 0x76 [0187.225] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0187.225] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-malware-simple.sbstore" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-malware-simple.sbstore"), fInfoLevelId=0x0, lpFileInformation=0x21a1430 | out: lpFileInformation=0x21a1430*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7295e5f4, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x7295e5f4, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x7295e5f4, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0xe8)) returned 1 [0187.230] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0187.230] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-malware-simple.sbstore", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-malware-simple.sbstore", lpFilePart=0x0) returned 0x76 [0187.230] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0187.230] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-malware-simple.sbstore" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-malware-simple.sbstore"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0187.230] GetFileType (hFile=0x444) returned 0x1 [0187.230] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0187.230] GetFileType (hFile=0x444) returned 0x1 [0187.230] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be708 | out: lpFileSizeHigh=0x3be708*=0x0) returned 0xe8 [0187.230] ReadFile (in: hFile=0x444, lpBuffer=0x21a18b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be638, lpOverlapped=0x0 | out: lpBuffer=0x21a18b0*, lpNumberOfBytesRead=0x3be638*=0xe8, lpOverlapped=0x0) returned 1 [0187.231] CloseHandle (hObject=0x444) returned 1 [0187.242] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-malware-simple.sbstore", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-malware-simple.sbstore", lpFilePart=0x0) returned 0x76 [0187.242] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0187.242] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-malware-simple.sbstore" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-malware-simple.sbstore"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0187.244] GetFileType (hFile=0x444) returned 0x1 [0187.244] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0187.244] GetFileType (hFile=0x444) returned 0x1 [0187.244] WriteFile (in: hFile=0x444, lpBuffer=0x2218bf8*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x3be548, lpOverlapped=0x0 | out: lpBuffer=0x2218bf8*, lpNumberOfBytesWritten=0x3be548*=0xf0, lpOverlapped=0x0) returned 1 [0187.245] CloseHandle (hObject=0x444) returned 1 [0187.245] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-malware-simple.sbstore", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-malware-simple.sbstore", lpFilePart=0x0) returned 0x76 [0187.245] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-malware-simple.sbstore.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-malware-simple.sbstore.xuy", lpFilePart=0x0) returned 0x7a [0187.245] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0187.245] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-malware-simple.sbstore" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-malware-simple.sbstore"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7295e5f4, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x7295e5f4, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x5b742222, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xf0)) returned 1 [0187.245] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0187.245] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-malware-simple.sbstore" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-malware-simple.sbstore"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-malware-simple.sbstore.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-malware-simple.sbstore.xuy")) returned 1 [0187.247] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-phish-simple.pset", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-phish-simple.pset", lpFilePart=0x0) returned 0x71 [0187.247] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0187.247] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-phish-simple.pset" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-phish-simple.pset"), fInfoLevelId=0x0, lpFileInformation=0x2219f80 | out: lpFileInformation=0x2219f80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x729383b8, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x729383b8, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x72b2840f, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0187.249] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0187.249] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-phish-simple.pset", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-phish-simple.pset", lpFilePart=0x0) returned 0x71 [0187.249] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0187.249] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-phish-simple.pset" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-phish-simple.pset"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0187.249] GetFileType (hFile=0x444) returned 0x1 [0187.249] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0187.249] GetFileType (hFile=0x444) returned 0x1 [0187.249] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be708 | out: lpFileSizeHigh=0x3be708*=0x0) returned 0x10 [0187.249] ReadFile (in: hFile=0x444, lpBuffer=0x221a308, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be638, lpOverlapped=0x0 | out: lpBuffer=0x221a308*, lpNumberOfBytesRead=0x3be638*=0x10, lpOverlapped=0x0) returned 1 [0187.250] CloseHandle (hObject=0x444) returned 1 [0187.260] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-phish-simple.pset", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-phish-simple.pset", lpFilePart=0x0) returned 0x71 [0187.260] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0187.260] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-phish-simple.pset" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-phish-simple.pset"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0187.262] GetFileType (hFile=0x444) returned 0x1 [0187.262] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0187.262] GetFileType (hFile=0x444) returned 0x1 [0187.262] WriteFile (in: hFile=0x444, lpBuffer=0x22914a8*, nNumberOfBytesToWrite=0x20, lpNumberOfBytesWritten=0x3be548, lpOverlapped=0x0 | out: lpBuffer=0x22914a8*, lpNumberOfBytesWritten=0x3be548*=0x20, lpOverlapped=0x0) returned 1 [0187.263] CloseHandle (hObject=0x444) returned 1 [0187.263] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-phish-simple.pset", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-phish-simple.pset", lpFilePart=0x0) returned 0x71 [0187.263] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-phish-simple.pset.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-phish-simple.pset.xuy", lpFilePart=0x0) returned 0x75 [0187.263] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0187.263] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-phish-simple.pset" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-phish-simple.pset"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x729383b8, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x729383b8, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x5b76834e, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x20)) returned 1 [0187.263] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0187.263] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-phish-simple.pset" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-phish-simple.pset"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-phish-simple.pset.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-phish-simple.pset.xuy")) returned 1 [0187.264] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-phish-simple.sbstore", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-phish-simple.sbstore", lpFilePart=0x0) returned 0x74 [0187.264] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0187.264] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-phish-simple.sbstore" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-phish-simple.sbstore"), fInfoLevelId=0x0, lpFileInformation=0x2292820 | out: lpFileInformation=0x2292820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72b02125, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x72b02125, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x72b02125, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0xe8)) returned 1 [0187.264] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0187.265] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-phish-simple.sbstore", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-phish-simple.sbstore", lpFilePart=0x0) returned 0x74 [0187.265] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0187.265] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-phish-simple.sbstore" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-phish-simple.sbstore"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0187.265] GetFileType (hFile=0x444) returned 0x1 [0187.265] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0187.265] GetFileType (hFile=0x444) returned 0x1 [0187.265] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be708 | out: lpFileSizeHigh=0x3be708*=0x0) returned 0xe8 [0187.265] ReadFile (in: hFile=0x444, lpBuffer=0x2292ca0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be638, lpOverlapped=0x0 | out: lpBuffer=0x2292ca0*, lpNumberOfBytesRead=0x3be638*=0xe8, lpOverlapped=0x0) returned 1 [0187.269] CloseHandle (hObject=0x444) returned 1 [0187.279] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-phish-simple.sbstore", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-phish-simple.sbstore", lpFilePart=0x0) returned 0x74 [0187.279] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0187.279] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-phish-simple.sbstore" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-phish-simple.sbstore"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0187.281] GetFileType (hFile=0x444) returned 0x1 [0187.281] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0187.281] GetFileType (hFile=0x444) returned 0x1 [0187.281] WriteFile (in: hFile=0x444, lpBuffer=0x2309fe8*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x3be548, lpOverlapped=0x0 | out: lpBuffer=0x2309fe8*, lpNumberOfBytesWritten=0x3be548*=0xf0, lpOverlapped=0x0) returned 1 [0187.282] CloseHandle (hObject=0x444) returned 1 [0187.282] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-phish-simple.sbstore", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-phish-simple.sbstore", lpFilePart=0x0) returned 0x74 [0187.282] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-phish-simple.sbstore.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-phish-simple.sbstore.xuy", lpFilePart=0x0) returned 0x78 [0187.282] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0187.282] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-phish-simple.sbstore" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-phish-simple.sbstore"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72b02125, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x72b02125, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x5b78e6d7, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xf0)) returned 1 [0187.283] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0187.283] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-phish-simple.sbstore" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-phish-simple.sbstore"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-phish-simple.sbstore.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-phish-simple.sbstore.xuy")) returned 1 [0187.284] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-track-simple.pset", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-track-simple.pset", lpFilePart=0x0) returned 0x71 [0187.284] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0187.284] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-track-simple.pset" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-track-simple.pset"), fInfoLevelId=0x0, lpFileInformation=0x230b370 | out: lpFileInformation=0x230b370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x729383b8, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x729383b8, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x72bc0d13, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0187.284] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0187.284] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-track-simple.pset", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-track-simple.pset", lpFilePart=0x0) returned 0x71 [0187.284] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0187.284] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-track-simple.pset" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-track-simple.pset"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0187.285] GetFileType (hFile=0x444) returned 0x1 [0187.285] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0187.285] GetFileType (hFile=0x444) returned 0x1 [0187.285] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be708 | out: lpFileSizeHigh=0x3be708*=0x0) returned 0x10 [0187.285] ReadFile (in: hFile=0x444, lpBuffer=0x230b6f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be638, lpOverlapped=0x0 | out: lpBuffer=0x230b6f8*, lpNumberOfBytesRead=0x3be638*=0x10, lpOverlapped=0x0) returned 1 [0187.286] CloseHandle (hObject=0x444) returned 1 [0187.295] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-track-simple.pset", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-track-simple.pset", lpFilePart=0x0) returned 0x71 [0187.296] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0187.296] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-track-simple.pset" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-track-simple.pset"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0187.297] GetFileType (hFile=0x444) returned 0x1 [0187.298] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0187.298] GetFileType (hFile=0x444) returned 0x1 [0187.298] WriteFile (in: hFile=0x444, lpBuffer=0x2382898*, nNumberOfBytesToWrite=0x20, lpNumberOfBytesWritten=0x3be548, lpOverlapped=0x0 | out: lpBuffer=0x2382898*, lpNumberOfBytesWritten=0x3be548*=0x20, lpOverlapped=0x0) returned 1 [0187.299] CloseHandle (hObject=0x444) returned 1 [0187.300] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-track-simple.pset", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-track-simple.pset", lpFilePart=0x0) returned 0x71 [0187.300] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-track-simple.pset.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-track-simple.pset.xuy", lpFilePart=0x0) returned 0x75 [0187.300] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0187.300] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-track-simple.pset" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-track-simple.pset"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x729383b8, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x729383b8, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x5b7daaf8, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x20)) returned 1 [0187.300] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0187.300] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-track-simple.pset" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-track-simple.pset"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-track-simple.pset.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-track-simple.pset.xuy")) returned 1 [0187.301] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-track-simple.sbstore", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-track-simple.sbstore", lpFilePart=0x0) returned 0x74 [0187.301] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0187.301] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-track-simple.sbstore" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-track-simple.sbstore"), fInfoLevelId=0x0, lpFileInformation=0x2383c10 | out: lpFileInformation=0x2383c10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72b74837, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x72b74837, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x72b74837, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0x110)) returned 1 [0187.301] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0187.301] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-track-simple.sbstore", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-track-simple.sbstore", lpFilePart=0x0) returned 0x74 [0187.302] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0187.302] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-track-simple.sbstore" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-track-simple.sbstore"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0187.302] GetFileType (hFile=0x444) returned 0x1 [0187.302] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0187.302] GetFileType (hFile=0x444) returned 0x1 [0187.302] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be708 | out: lpFileSizeHigh=0x3be708*=0x0) returned 0x110 [0187.302] ReadFile (in: hFile=0x444, lpBuffer=0x23840b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be638, lpOverlapped=0x0 | out: lpBuffer=0x23840b8*, lpNumberOfBytesRead=0x3be638*=0x110, lpOverlapped=0x0) returned 1 [0187.304] CloseHandle (hObject=0x444) returned 1 [0187.343] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-track-simple.sbstore", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-track-simple.sbstore", lpFilePart=0x0) returned 0x74 [0187.343] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0187.343] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-track-simple.sbstore" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-track-simple.sbstore"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0187.349] GetFileType (hFile=0x444) returned 0x1 [0187.349] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0187.349] GetFileType (hFile=0x444) returned 0x1 [0187.349] WriteFile (in: hFile=0x444, lpBuffer=0x21fb7d8*, nNumberOfBytesToWrite=0x120, lpNumberOfBytesWritten=0x3be548, lpOverlapped=0x0 | out: lpBuffer=0x21fb7d8*, lpNumberOfBytesWritten=0x3be548*=0x120, lpOverlapped=0x0) returned 1 [0187.350] CloseHandle (hObject=0x444) returned 1 [0187.350] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-track-simple.sbstore", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-track-simple.sbstore", lpFilePart=0x0) returned 0x74 [0187.351] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-track-simple.sbstore.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-track-simple.sbstore.xuy", lpFilePart=0x0) returned 0x78 [0187.351] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0187.351] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-track-simple.sbstore" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-track-simple.sbstore"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72b74837, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x72b74837, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x5b84d6ed, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x120)) returned 1 [0187.351] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0187.351] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-track-simple.sbstore" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-track-simple.sbstore"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-track-simple.sbstore.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-track-simple.sbstore.xuy")) returned 1 [0187.352] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-trackwhite-simple.pset", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-trackwhite-simple.pset", lpFilePart=0x0) returned 0x76 [0187.352] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0187.352] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-trackwhite-simple.pset" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-trackwhite-simple.pset"), fInfoLevelId=0x0, lpFileInformation=0x21fcb60 | out: lpFileInformation=0x21fcb60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x729383b8, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x729383b8, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x72c0d071, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0187.352] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0187.352] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-trackwhite-simple.pset", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-trackwhite-simple.pset", lpFilePart=0x0) returned 0x76 [0187.352] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0187.352] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-trackwhite-simple.pset" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-trackwhite-simple.pset"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0187.353] GetFileType (hFile=0x444) returned 0x1 [0187.353] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0187.353] GetFileType (hFile=0x444) returned 0x1 [0187.353] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be708 | out: lpFileSizeHigh=0x3be708*=0x0) returned 0x10 [0187.353] ReadFile (in: hFile=0x444, lpBuffer=0x21fcf08, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be638, lpOverlapped=0x0 | out: lpBuffer=0x21fcf08*, lpNumberOfBytesRead=0x3be638*=0x10, lpOverlapped=0x0) returned 1 [0187.354] CloseHandle (hObject=0x444) returned 1 [0187.366] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-trackwhite-simple.pset", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-trackwhite-simple.pset", lpFilePart=0x0) returned 0x76 [0187.366] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0187.366] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-trackwhite-simple.pset" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-trackwhite-simple.pset"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0187.368] GetFileType (hFile=0x444) returned 0x1 [0187.368] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0187.368] GetFileType (hFile=0x444) returned 0x1 [0187.368] WriteFile (in: hFile=0x444, lpBuffer=0x22740b8*, nNumberOfBytesToWrite=0x20, lpNumberOfBytesWritten=0x3be548, lpOverlapped=0x0 | out: lpBuffer=0x22740b8*, lpNumberOfBytesWritten=0x3be548*=0x20, lpOverlapped=0x0) returned 1 [0187.369] CloseHandle (hObject=0x444) returned 1 [0187.369] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-trackwhite-simple.pset", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-trackwhite-simple.pset", lpFilePart=0x0) returned 0x76 [0187.369] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-trackwhite-simple.pset.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-trackwhite-simple.pset.xuy", lpFilePart=0x0) returned 0x7a [0187.369] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0187.369] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-trackwhite-simple.pset" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-trackwhite-simple.pset"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x729383b8, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x729383b8, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x5b87395c, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x20)) returned 1 [0187.370] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0187.370] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-trackwhite-simple.pset" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-trackwhite-simple.pset"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-trackwhite-simple.pset.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-trackwhite-simple.pset.xuy")) returned 1 [0187.371] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-trackwhite-simple.sbstore", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-trackwhite-simple.sbstore", lpFilePart=0x0) returned 0x79 [0187.371] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0187.371] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-trackwhite-simple.sbstore" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-trackwhite-simple.sbstore"), fInfoLevelId=0x0, lpFileInformation=0x2275448 | out: lpFileInformation=0x2275448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72bc0d13, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x72bc0d13, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x72bc0d13, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0xe8)) returned 1 [0187.371] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0187.371] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-trackwhite-simple.sbstore", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-trackwhite-simple.sbstore", lpFilePart=0x0) returned 0x79 [0187.371] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0187.371] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-trackwhite-simple.sbstore" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-trackwhite-simple.sbstore"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0187.372] GetFileType (hFile=0x444) returned 0x1 [0187.372] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0187.372] GetFileType (hFile=0x444) returned 0x1 [0187.372] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be708 | out: lpFileSizeHigh=0x3be708*=0x0) returned 0xe8 [0187.372] ReadFile (in: hFile=0x444, lpBuffer=0x22758e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be638, lpOverlapped=0x0 | out: lpBuffer=0x22758e8*, lpNumberOfBytesRead=0x3be638*=0xe8, lpOverlapped=0x0) returned 1 [0187.373] CloseHandle (hObject=0x444) returned 1 [0187.383] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-trackwhite-simple.sbstore", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-trackwhite-simple.sbstore", lpFilePart=0x0) returned 0x79 [0187.383] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0187.383] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-trackwhite-simple.sbstore" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-trackwhite-simple.sbstore"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0187.385] GetFileType (hFile=0x444) returned 0x1 [0187.385] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0187.385] GetFileType (hFile=0x444) returned 0x1 [0187.385] WriteFile (in: hFile=0x444, lpBuffer=0x22ecc40*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x3be548, lpOverlapped=0x0 | out: lpBuffer=0x22ecc40*, lpNumberOfBytesWritten=0x3be548*=0xf0, lpOverlapped=0x0) returned 1 [0187.387] CloseHandle (hObject=0x444) returned 1 [0187.387] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-trackwhite-simple.sbstore", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-trackwhite-simple.sbstore", lpFilePart=0x0) returned 0x79 [0187.387] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-trackwhite-simple.sbstore.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-trackwhite-simple.sbstore.xuy", lpFilePart=0x0) returned 0x7d [0187.387] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0187.387] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-trackwhite-simple.sbstore" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-trackwhite-simple.sbstore"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72bc0d13, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x72bc0d13, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x5b89976b, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xf0)) returned 1 [0187.387] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0187.387] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-trackwhite-simple.sbstore" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-trackwhite-simple.sbstore"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-trackwhite-simple.sbstore.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-trackwhite-simple.sbstore.xuy")) returned 1 [0187.389] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-unwanted-simple.pset", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-unwanted-simple.pset", lpFilePart=0x0) returned 0x74 [0187.389] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0187.389] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-unwanted-simple.pset" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-unwanted-simple.pset"), fInfoLevelId=0x0, lpFileInformation=0x22edfe0 | out: lpFileInformation=0x22edfe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x729383b8, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x729383b8, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x72b74837, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0187.389] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0187.389] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-unwanted-simple.pset", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-unwanted-simple.pset", lpFilePart=0x0) returned 0x74 [0187.389] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0187.389] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-unwanted-simple.pset" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-unwanted-simple.pset"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0187.389] GetFileType (hFile=0x444) returned 0x1 [0187.389] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0187.390] GetFileType (hFile=0x444) returned 0x1 [0187.390] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be708 | out: lpFileSizeHigh=0x3be708*=0x0) returned 0x10 [0187.390] ReadFile (in: hFile=0x444, lpBuffer=0x22ee388, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be638, lpOverlapped=0x0 | out: lpBuffer=0x22ee388*, lpNumberOfBytesRead=0x3be638*=0x10, lpOverlapped=0x0) returned 1 [0187.393] CloseHandle (hObject=0x444) returned 1 [0187.403] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-unwanted-simple.pset", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-unwanted-simple.pset", lpFilePart=0x0) returned 0x74 [0187.403] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0187.403] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-unwanted-simple.pset" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-unwanted-simple.pset"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0187.405] GetFileType (hFile=0x444) returned 0x1 [0187.405] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0187.405] GetFileType (hFile=0x444) returned 0x1 [0187.405] WriteFile (in: hFile=0x444, lpBuffer=0x2365538*, nNumberOfBytesToWrite=0x20, lpNumberOfBytesWritten=0x3be548, lpOverlapped=0x0 | out: lpBuffer=0x2365538*, lpNumberOfBytesWritten=0x3be548*=0x20, lpOverlapped=0x0) returned 1 [0187.406] CloseHandle (hObject=0x444) returned 1 [0187.406] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-unwanted-simple.pset", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-unwanted-simple.pset", lpFilePart=0x0) returned 0x74 [0187.406] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-unwanted-simple.pset.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-unwanted-simple.pset.xuy", lpFilePart=0x0) returned 0x78 [0187.406] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0187.406] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-unwanted-simple.pset" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-unwanted-simple.pset"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x729383b8, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x729383b8, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x5b8bf9b5, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x20)) returned 1 [0187.407] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0187.407] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-unwanted-simple.pset" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-unwanted-simple.pset"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-unwanted-simple.pset.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-unwanted-simple.pset.xuy")) returned 1 [0187.408] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-unwanted-simple.sbstore", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-unwanted-simple.sbstore", lpFilePart=0x0) returned 0x77 [0187.409] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0187.409] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-unwanted-simple.sbstore" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-unwanted-simple.sbstore"), fInfoLevelId=0x0, lpFileInformation=0x23668c8 | out: lpFileInformation=0x23668c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72b2840f, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x72b2840f, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x72b2840f, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0xe8)) returned 1 [0187.409] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0187.409] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-unwanted-simple.sbstore", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-unwanted-simple.sbstore", lpFilePart=0x0) returned 0x77 [0187.409] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0187.409] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-unwanted-simple.sbstore" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-unwanted-simple.sbstore"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0187.409] GetFileType (hFile=0x444) returned 0x1 [0187.409] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0187.409] GetFileType (hFile=0x444) returned 0x1 [0187.409] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be708 | out: lpFileSizeHigh=0x3be708*=0x0) returned 0xe8 [0187.409] ReadFile (in: hFile=0x444, lpBuffer=0x2366d58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be638, lpOverlapped=0x0 | out: lpBuffer=0x2366d58*, lpNumberOfBytesRead=0x3be638*=0xe8, lpOverlapped=0x0) returned 1 [0187.410] CloseHandle (hObject=0x444) returned 1 [0187.458] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-unwanted-simple.sbstore", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-unwanted-simple.sbstore", lpFilePart=0x0) returned 0x77 [0187.458] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0187.458] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-unwanted-simple.sbstore" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-unwanted-simple.sbstore"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0187.460] GetFileType (hFile=0x444) returned 0x1 [0187.460] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0187.460] GetFileType (hFile=0x444) returned 0x1 [0187.460] WriteFile (in: hFile=0x444, lpBuffer=0x21de010*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x3be548, lpOverlapped=0x0 | out: lpBuffer=0x21de010*, lpNumberOfBytesWritten=0x3be548*=0xf0, lpOverlapped=0x0) returned 1 [0187.461] CloseHandle (hObject=0x444) returned 1 [0187.461] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-unwanted-simple.sbstore", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-unwanted-simple.sbstore", lpFilePart=0x0) returned 0x77 [0187.461] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-unwanted-simple.sbstore.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-unwanted-simple.sbstore.xuy", lpFilePart=0x0) returned 0x7b [0187.461] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0187.461] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-unwanted-simple.sbstore" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-unwanted-simple.sbstore"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72b2840f, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x72b2840f, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x5b958436, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xf0)) returned 1 [0187.461] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0187.461] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-unwanted-simple.sbstore" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-unwanted-simple.sbstore"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-unwanted-simple.sbstore.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-unwanted-simple.sbstore.xuy")) returned 1 [0187.463] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\testexcept-flash-simple.pset", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\testexcept-flash-simple.pset", lpFilePart=0x0) returned 0x77 [0187.463] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0187.463] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\testexcept-flash-simple.pset" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\testexcept-flash-simple.pset"), fInfoLevelId=0x0, lpFileInformation=0x21df398 | out: lpFileInformation=0x21df398*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7295e5f4, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x7295e5f4, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x72ccbd58, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0187.463] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0187.463] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\testexcept-flash-simple.pset", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\testexcept-flash-simple.pset", lpFilePart=0x0) returned 0x77 [0187.463] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0187.463] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\testexcept-flash-simple.pset" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\testexcept-flash-simple.pset"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0187.463] GetFileType (hFile=0x444) returned 0x1 [0187.463] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0187.463] GetFileType (hFile=0x444) returned 0x1 [0187.463] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be708 | out: lpFileSizeHigh=0x3be708*=0x0) returned 0x10 [0187.463] ReadFile (in: hFile=0x444, lpBuffer=0x21df750, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be638, lpOverlapped=0x0 | out: lpBuffer=0x21df750*, lpNumberOfBytesRead=0x3be638*=0x10, lpOverlapped=0x0) returned 1 [0187.464] CloseHandle (hObject=0x444) returned 1 [0187.475] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\testexcept-flash-simple.pset", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\testexcept-flash-simple.pset", lpFilePart=0x0) returned 0x77 [0187.475] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0187.475] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\testexcept-flash-simple.pset" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\testexcept-flash-simple.pset"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0187.477] GetFileType (hFile=0x444) returned 0x1 [0187.477] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0187.477] GetFileType (hFile=0x444) returned 0x1 [0187.477] WriteFile (in: hFile=0x444, lpBuffer=0x2256908*, nNumberOfBytesToWrite=0x20, lpNumberOfBytesWritten=0x3be548, lpOverlapped=0x0 | out: lpBuffer=0x2256908*, lpNumberOfBytesWritten=0x3be548*=0x20, lpOverlapped=0x0) returned 1 [0187.477] CloseHandle (hObject=0x444) returned 1 [0187.477] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\testexcept-flash-simple.pset", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\testexcept-flash-simple.pset", lpFilePart=0x0) returned 0x77 [0187.478] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\testexcept-flash-simple.pset.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\testexcept-flash-simple.pset.xuy", lpFilePart=0x0) returned 0x7b [0187.478] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0187.478] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\testexcept-flash-simple.pset" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\testexcept-flash-simple.pset"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7295e5f4, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x7295e5f4, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x5b97e640, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x20)) returned 1 [0187.478] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0187.478] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\testexcept-flash-simple.pset" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\testexcept-flash-simple.pset"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\testexcept-flash-simple.pset.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\testexcept-flash-simple.pset.xuy")) returned 1 [0187.479] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\testexcept-flash-simple.sbstore", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\testexcept-flash-simple.sbstore", lpFilePart=0x0) returned 0x7a [0187.479] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0187.479] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\testexcept-flash-simple.sbstore" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\testexcept-flash-simple.sbstore"), fInfoLevelId=0x0, lpFileInformation=0x2257c98 | out: lpFileInformation=0x2257c98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72ca5b16, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x72ca5b16, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x72ca5b16, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0xe8)) returned 1 [0187.479] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0187.479] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\testexcept-flash-simple.sbstore", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\testexcept-flash-simple.sbstore", lpFilePart=0x0) returned 0x7a [0187.479] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0187.479] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\testexcept-flash-simple.sbstore" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\testexcept-flash-simple.sbstore"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0187.479] GetFileType (hFile=0x444) returned 0x1 [0187.479] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0187.480] GetFileType (hFile=0x444) returned 0x1 [0187.480] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be708 | out: lpFileSizeHigh=0x3be708*=0x0) returned 0xe8 [0187.480] ReadFile (in: hFile=0x444, lpBuffer=0x2258138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be638, lpOverlapped=0x0 | out: lpBuffer=0x2258138*, lpNumberOfBytesRead=0x3be638*=0xe8, lpOverlapped=0x0) returned 1 [0187.483] CloseHandle (hObject=0x444) returned 1 [0187.493] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\testexcept-flash-simple.sbstore", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\testexcept-flash-simple.sbstore", lpFilePart=0x0) returned 0x7a [0187.493] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0187.493] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\testexcept-flash-simple.sbstore" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\testexcept-flash-simple.sbstore"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0187.495] GetFileType (hFile=0x444) returned 0x1 [0187.495] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0187.495] GetFileType (hFile=0x444) returned 0x1 [0187.495] WriteFile (in: hFile=0x444, lpBuffer=0x22cf490*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x3be548, lpOverlapped=0x0 | out: lpBuffer=0x22cf490*, lpNumberOfBytesWritten=0x3be548*=0xf0, lpOverlapped=0x0) returned 1 [0187.496] CloseHandle (hObject=0x444) returned 1 [0187.496] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\testexcept-flash-simple.sbstore", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\testexcept-flash-simple.sbstore", lpFilePart=0x0) returned 0x7a [0187.496] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\testexcept-flash-simple.sbstore.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\testexcept-flash-simple.sbstore.xuy", lpFilePart=0x0) returned 0x7e [0187.496] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0187.496] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\testexcept-flash-simple.sbstore" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\testexcept-flash-simple.sbstore"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72ca5b16, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x72ca5b16, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x5b9a48ce, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xf0)) returned 1 [0187.497] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0187.497] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\testexcept-flash-simple.sbstore" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\testexcept-flash-simple.sbstore"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\testexcept-flash-simple.sbstore.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\testexcept-flash-simple.sbstore.xuy")) returned 1 [0187.498] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\testexcept-flashallow-simple.pset", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\testexcept-flashallow-simple.pset", lpFilePart=0x0) returned 0x7c [0187.498] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0187.498] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\testexcept-flashallow-simple.pset" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\testexcept-flashallow-simple.pset"), fInfoLevelId=0x0, lpFileInformation=0x22d0830 | out: lpFileInformation=0x22d0830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7295e5f4, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x7295e5f4, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x72d64585, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0187.498] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0187.498] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\testexcept-flashallow-simple.pset", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\testexcept-flashallow-simple.pset", lpFilePart=0x0) returned 0x7c [0187.498] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0187.498] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\testexcept-flashallow-simple.pset" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\testexcept-flashallow-simple.pset"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0187.498] GetFileType (hFile=0x444) returned 0x1 [0187.498] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0187.498] GetFileType (hFile=0x444) returned 0x1 [0187.498] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be708 | out: lpFileSizeHigh=0x3be708*=0x0) returned 0x10 [0187.498] ReadFile (in: hFile=0x444, lpBuffer=0x22d0c18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be638, lpOverlapped=0x0 | out: lpBuffer=0x22d0c18*, lpNumberOfBytesRead=0x3be638*=0x10, lpOverlapped=0x0) returned 1 [0187.499] CloseHandle (hObject=0x444) returned 1 [0187.509] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\testexcept-flashallow-simple.pset", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\testexcept-flashallow-simple.pset", lpFilePart=0x0) returned 0x7c [0187.510] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0187.510] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\testexcept-flashallow-simple.pset" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\testexcept-flashallow-simple.pset"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0187.511] GetFileType (hFile=0x444) returned 0x1 [0187.511] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0187.511] GetFileType (hFile=0x444) returned 0x1 [0187.512] WriteFile (in: hFile=0x444, lpBuffer=0x2347de8*, nNumberOfBytesToWrite=0x20, lpNumberOfBytesWritten=0x3be548, lpOverlapped=0x0 | out: lpBuffer=0x2347de8*, lpNumberOfBytesWritten=0x3be548*=0x20, lpOverlapped=0x0) returned 1 [0187.512] CloseHandle (hObject=0x444) returned 1 [0187.512] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\testexcept-flashallow-simple.pset", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\testexcept-flashallow-simple.pset", lpFilePart=0x0) returned 0x7c [0187.512] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\testexcept-flashallow-simple.pset.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\testexcept-flashallow-simple.pset.xuy", lpFilePart=0x0) returned 0x80 [0187.512] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0187.512] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\testexcept-flashallow-simple.pset" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\testexcept-flashallow-simple.pset"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7295e5f4, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x7295e5f4, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x5b9caa7f, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x20)) returned 1 [0187.513] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0187.513] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\testexcept-flashallow-simple.pset" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\testexcept-flashallow-simple.pset"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\testexcept-flashallow-simple.pset.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\testexcept-flashallow-simple.pset.xuy")) returned 1 [0187.514] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\testexcept-flashallow-simple.sbstore", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\testexcept-flashallow-simple.sbstore", lpFilePart=0x0) returned 0x7f [0187.514] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0187.514] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\testexcept-flashallow-simple.sbstore" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\testexcept-flashallow-simple.sbstore"), fInfoLevelId=0x0, lpFileInformation=0x23491a8 | out: lpFileInformation=0x23491a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72d3e33a, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x72d3e33a, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x72d3e33a, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0xe8)) returned 1 [0187.514] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0187.514] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\testexcept-flashallow-simple.sbstore", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\testexcept-flashallow-simple.sbstore", lpFilePart=0x0) returned 0x7f [0187.514] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0187.514] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\testexcept-flashallow-simple.sbstore" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\testexcept-flashallow-simple.sbstore"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0187.514] GetFileType (hFile=0x444) returned 0x1 [0187.514] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0187.514] GetFileType (hFile=0x444) returned 0x1 [0187.514] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be708 | out: lpFileSizeHigh=0x3be708*=0x0) returned 0xe8 [0187.514] ReadFile (in: hFile=0x444, lpBuffer=0x2349678, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be638, lpOverlapped=0x0 | out: lpBuffer=0x2349678*, lpNumberOfBytesRead=0x3be638*=0xe8, lpOverlapped=0x0) returned 1 [0187.543] CloseHandle (hObject=0x444) returned 1 [0187.689] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\testexcept-flashallow-simple.sbstore", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\testexcept-flashallow-simple.sbstore", lpFilePart=0x0) returned 0x7f [0187.689] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0187.705] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\testexcept-flashallow-simple.sbstore" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\testexcept-flashallow-simple.sbstore"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0187.707] GetFileType (hFile=0x444) returned 0x1 [0187.707] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0187.707] GetFileType (hFile=0x444) returned 0x1 [0187.707] WriteFile (in: hFile=0x444, lpBuffer=0x21c09d0*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x3be548, lpOverlapped=0x0 | out: lpBuffer=0x21c09d0*, lpNumberOfBytesWritten=0x3be548*=0xf0, lpOverlapped=0x0) returned 1 [0187.708] CloseHandle (hObject=0x444) returned 1 [0187.708] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\testexcept-flashallow-simple.sbstore", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\testexcept-flashallow-simple.sbstore", lpFilePart=0x0) returned 0x7f [0187.708] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\testexcept-flashallow-simple.sbstore.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\testexcept-flashallow-simple.sbstore.xuy", lpFilePart=0x0) returned 0x83 [0187.708] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0187.708] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\testexcept-flashallow-simple.sbstore" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\testexcept-flashallow-simple.sbstore"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72d3e33a, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x72d3e33a, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x5bbba9a0, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xf0)) returned 1 [0187.708] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0187.708] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\testexcept-flashallow-simple.sbstore" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\testexcept-flashallow-simple.sbstore"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\testexcept-flashallow-simple.sbstore.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\testexcept-flashallow-simple.sbstore.xuy")) returned 1 [0187.709] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\testexcept-flashsubdoc-simple.pset", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\testexcept-flashsubdoc-simple.pset", lpFilePart=0x0) returned 0x7d [0187.709] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0187.709] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\testexcept-flashsubdoc-simple.pset" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\testexcept-flashsubdoc-simple.pset"), fInfoLevelId=0x0, lpFileInformation=0x21c1d88 | out: lpFileInformation=0x21c1d88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7295e5f4, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x7295e5f4, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x72dd6c66, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0187.709] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0187.709] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\testexcept-flashsubdoc-simple.pset", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\testexcept-flashsubdoc-simple.pset", lpFilePart=0x0) returned 0x7d [0187.709] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0187.709] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\testexcept-flashsubdoc-simple.pset" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\testexcept-flashsubdoc-simple.pset"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0187.710] GetFileType (hFile=0x444) returned 0x1 [0187.710] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0187.710] GetFileType (hFile=0x444) returned 0x1 [0187.710] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be708 | out: lpFileSizeHigh=0x3be708*=0x0) returned 0x10 [0187.710] ReadFile (in: hFile=0x444, lpBuffer=0x21c2170, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be638, lpOverlapped=0x0 | out: lpBuffer=0x21c2170*, lpNumberOfBytesRead=0x3be638*=0x10, lpOverlapped=0x0) returned 1 [0187.711] CloseHandle (hObject=0x444) returned 1 [0187.720] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\testexcept-flashsubdoc-simple.pset", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\testexcept-flashsubdoc-simple.pset", lpFilePart=0x0) returned 0x7d [0187.720] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0187.720] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\testexcept-flashsubdoc-simple.pset" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\testexcept-flashsubdoc-simple.pset"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0187.722] GetFileType (hFile=0x444) returned 0x1 [0187.722] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0187.722] GetFileType (hFile=0x444) returned 0x1 [0187.722] WriteFile (in: hFile=0x444, lpBuffer=0x2239340*, nNumberOfBytesToWrite=0x20, lpNumberOfBytesWritten=0x3be548, lpOverlapped=0x0 | out: lpBuffer=0x2239340*, lpNumberOfBytesWritten=0x3be548*=0x20, lpOverlapped=0x0) returned 1 [0187.723] CloseHandle (hObject=0x444) returned 1 [0187.723] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\testexcept-flashsubdoc-simple.pset", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\testexcept-flashsubdoc-simple.pset", lpFilePart=0x0) returned 0x7d [0187.723] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\testexcept-flashsubdoc-simple.pset.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\testexcept-flashsubdoc-simple.pset.xuy", lpFilePart=0x0) returned 0x81 [0187.723] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0187.723] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\testexcept-flashsubdoc-simple.pset" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\testexcept-flashsubdoc-simple.pset"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7295e5f4, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x7295e5f4, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x5bbe0c81, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x20)) returned 1 [0187.723] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0187.723] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\testexcept-flashsubdoc-simple.pset" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\testexcept-flashsubdoc-simple.pset"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\testexcept-flashsubdoc-simple.pset.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\testexcept-flashsubdoc-simple.pset.xuy")) returned 1 [0187.725] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\testexcept-flashsubdoc-simple.sbstore", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\testexcept-flashsubdoc-simple.sbstore", lpFilePart=0x0) returned 0x80 [0187.725] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0187.725] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\testexcept-flashsubdoc-simple.sbstore" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\testexcept-flashsubdoc-simple.sbstore"), fInfoLevelId=0x0, lpFileInformation=0x223a700 | out: lpFileInformation=0x223a700*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72db0a14, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x72db0a14, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x72db0a14, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0xe8)) returned 1 [0187.725] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0187.725] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\testexcept-flashsubdoc-simple.sbstore", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\testexcept-flashsubdoc-simple.sbstore", lpFilePart=0x0) returned 0x80 [0187.725] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0187.725] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\testexcept-flashsubdoc-simple.sbstore" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\testexcept-flashsubdoc-simple.sbstore"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0187.725] GetFileType (hFile=0x444) returned 0x1 [0187.725] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0187.725] GetFileType (hFile=0x444) returned 0x1 [0187.725] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be708 | out: lpFileSizeHigh=0x3be708*=0x0) returned 0xe8 [0187.725] ReadFile (in: hFile=0x444, lpBuffer=0x223abe0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be638, lpOverlapped=0x0 | out: lpBuffer=0x223abe0*, lpNumberOfBytesRead=0x3be638*=0xe8, lpOverlapped=0x0) returned 1 [0187.726] CloseHandle (hObject=0x444) returned 1 [0187.737] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\testexcept-flashsubdoc-simple.sbstore", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\testexcept-flashsubdoc-simple.sbstore", lpFilePart=0x0) returned 0x80 [0187.737] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0187.737] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\testexcept-flashsubdoc-simple.sbstore" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\testexcept-flashsubdoc-simple.sbstore"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0187.739] GetFileType (hFile=0x444) returned 0x1 [0187.739] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0187.739] GetFileType (hFile=0x444) returned 0x1 [0187.739] WriteFile (in: hFile=0x444, lpBuffer=0x22b1f58*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x3be548, lpOverlapped=0x0 | out: lpBuffer=0x22b1f58*, lpNumberOfBytesWritten=0x3be548*=0xf0, lpOverlapped=0x0) returned 1 [0187.740] CloseHandle (hObject=0x444) returned 1 [0187.740] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\testexcept-flashsubdoc-simple.sbstore", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\testexcept-flashsubdoc-simple.sbstore", lpFilePart=0x0) returned 0x80 [0187.740] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\testexcept-flashsubdoc-simple.sbstore.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\testexcept-flashsubdoc-simple.sbstore.xuy", lpFilePart=0x0) returned 0x84 [0187.740] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0187.740] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\testexcept-flashsubdoc-simple.sbstore" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\testexcept-flashsubdoc-simple.sbstore"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72db0a14, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x72db0a14, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x5bc0744c, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xf0)) returned 1 [0187.740] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0187.740] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\testexcept-flashsubdoc-simple.sbstore" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\testexcept-flashsubdoc-simple.sbstore"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\testexcept-flashsubdoc-simple.sbstore.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\testexcept-flashsubdoc-simple.sbstore.xuy")) returned 1 [0187.741] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0187.741] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\startupCache", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\startupCache", lpFilePart=0x0) returned 0x5a [0187.741] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\startupCache\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\startupCache\\", lpFilePart=0x0) returned 0x5b [0187.741] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\startupCache\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d7370 [0187.746] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0187.746] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0187.747] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0187.747] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0187.747] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0187.747] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0187.747] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0187.747] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\startupCache", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\startupCache", lpFilePart=0x0) returned 0x5a [0187.747] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\startupCache\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\startupCache\\", lpFilePart=0x0) returned 0x5b [0187.747] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\startupCache\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d7370 [0187.747] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0187.747] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0187.747] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0187.747] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0187.748] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0187.748] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0187.748] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\startupCache\\startupCache.4.little", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\startupCache\\startupCache.4.little", lpFilePart=0x0) returned 0x70 [0187.748] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0187.748] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\startupCache\\startupCache.4.little" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\startupcache\\startupcache.4.little"), fInfoLevelId=0x0, lpFileInformation=0x22b5808 | out: lpFileInformation=0x22b5808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfca9379d, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xfca9379d, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x97235a94, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0x1a208d)) returned 1 [0187.748] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0187.748] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\startupCache\\startupCache.4.little", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\startupCache\\startupCache.4.little", lpFilePart=0x0) returned 0x70 [0187.748] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0187.748] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\startupCache\\startupCache.4.little" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\startupcache\\startupcache.4.little"), fInfoLevelId=0x0, lpFileInformation=0x22b59b8 | out: lpFileInformation=0x22b59b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfca9379d, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xfca9379d, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x97235a94, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0x1a208d)) returned 1 [0187.748] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0187.748] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\startupCache\\startupCache.4.little", nBufferLength=0x105, lpBuffer=0x3be120, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\startupCache\\startupCache.4.little", lpFilePart=0x0) returned 0x70 [0187.748] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0187.748] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\startupCache\\startupCache.4.little" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\startupcache\\startupcache.4.little"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0187.749] GetFileType (hFile=0x444) returned 0x1 [0187.749] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be570) returned 1 [0187.749] GetFileType (hFile=0x444) returned 0x1 [0187.749] ReadFile (in: hFile=0x444, lpBuffer=0x22b7e48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be688, lpOverlapped=0x0 | out: lpBuffer=0x22b7e48*, lpNumberOfBytesRead=0x3be688*=0x1000, lpOverlapped=0x0) returned 1 [0187.761] CloseHandle (hObject=0x444) returned 1 [0187.774] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\startupCache\\startupCache.4.little", nBufferLength=0x105, lpBuffer=0x3be120, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\startupCache\\startupCache.4.little", lpFilePart=0x0) returned 0x70 [0187.774] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0187.774] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\startupCache\\startupCache.4.little" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\startupcache\\startupcache.4.little"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0187.774] GetFileType (hFile=0x444) returned 0x1 [0187.774] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be570) returned 1 [0187.774] GetFileType (hFile=0x444) returned 0x1 [0187.774] WriteFile (in: hFile=0x444, lpBuffer=0x22b5b48*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be738, lpOverlapped=0x0 | out: lpBuffer=0x22b5b48*, lpNumberOfBytesWritten=0x3be738*=0x2000, lpOverlapped=0x0) returned 1 [0187.775] CloseHandle (hObject=0x444) returned 1 [0187.775] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\startupCache\\startupCache.4.little", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\startupCache\\startupCache.4.little", lpFilePart=0x0) returned 0x70 [0187.775] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\startupCache\\startupCache.4.little.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\startupCache\\startupCache.4.little.xuy", lpFilePart=0x0) returned 0x74 [0187.775] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0187.775] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\startupCache\\startupCache.4.little" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\startupcache\\startupcache.4.little"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfca9379d, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xfca9379d, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x5bc5328d, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x1a208d)) returned 1 [0187.775] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0187.775] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\startupCache\\startupCache.4.little" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\startupcache\\startupcache.4.little"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\startupCache\\startupCache.4.little.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\startupcache\\startupcache.4.little.xuy")) returned 1 [0187.776] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0187.776] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails", lpFilePart=0x0) returned 0x58 [0187.776] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\", lpFilePart=0x0) returned 0x59 [0187.776] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d7370 [0187.790] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0187.790] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0187.790] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0187.790] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0187.791] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0187.791] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0187.791] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0187.791] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0187.791] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0187.791] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0187.792] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0187.792] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0187.792] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0187.792] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails", lpFilePart=0x0) returned 0x58 [0187.792] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\", lpFilePart=0x0) returned 0x59 [0187.792] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d78b0 [0187.793] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0187.793] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0187.793] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0187.793] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0187.793] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0187.793] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0187.793] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0187.793] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0187.794] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0187.794] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0187.794] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0187.794] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0187.794] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\0e292d2be40784b709a96299f7f56c4c.png", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\0e292d2be40784b709a96299f7f56c4c.png", lpFilePart=0x0) returned 0x7d [0187.794] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0187.794] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\0e292d2be40784b709a96299f7f56c4c.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\thumbnails\\0e292d2be40784b709a96299f7f56c4c.png"), fInfoLevelId=0x0, lpFileInformation=0x2338e68 | out: lpFileInformation=0x2338e68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3db09b13, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x3db09b13, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x3db09b13, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0x4304)) returned 1 [0187.797] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0187.797] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\0e292d2be40784b709a96299f7f56c4c.png", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\0e292d2be40784b709a96299f7f56c4c.png", lpFilePart=0x0) returned 0x7d [0187.797] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0187.797] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\0e292d2be40784b709a96299f7f56c4c.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\thumbnails\\0e292d2be40784b709a96299f7f56c4c.png"), fInfoLevelId=0x0, lpFileInformation=0x2339050 | out: lpFileInformation=0x2339050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3db09b13, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x3db09b13, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x3db09b13, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0x4304)) returned 1 [0187.797] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0187.797] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\0e292d2be40784b709a96299f7f56c4c.png", nBufferLength=0x105, lpBuffer=0x3be120, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\0e292d2be40784b709a96299f7f56c4c.png", lpFilePart=0x0) returned 0x7d [0187.797] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0187.797] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\0e292d2be40784b709a96299f7f56c4c.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\thumbnails\\0e292d2be40784b709a96299f7f56c4c.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0187.798] GetFileType (hFile=0x444) returned 0x1 [0187.798] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be570) returned 1 [0187.798] GetFileType (hFile=0x444) returned 0x1 [0187.799] ReadFile (in: hFile=0x444, lpBuffer=0x233b550, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be688, lpOverlapped=0x0 | out: lpBuffer=0x233b550*, lpNumberOfBytesRead=0x3be688*=0x1000, lpOverlapped=0x0) returned 1 [0187.850] CloseHandle (hObject=0x444) returned 1 [0187.850] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\0e292d2be40784b709a96299f7f56c4c.png", nBufferLength=0x105, lpBuffer=0x3be120, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\0e292d2be40784b709a96299f7f56c4c.png", lpFilePart=0x0) returned 0x7d [0187.850] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0187.850] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\0e292d2be40784b709a96299f7f56c4c.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\thumbnails\\0e292d2be40784b709a96299f7f56c4c.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0187.850] GetFileType (hFile=0x444) returned 0x1 [0187.850] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be570) returned 1 [0187.850] GetFileType (hFile=0x444) returned 0x1 [0187.850] WriteFile (in: hFile=0x444, lpBuffer=0x2189e68*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be738, lpOverlapped=0x0 | out: lpBuffer=0x2189e68*, lpNumberOfBytesWritten=0x3be738*=0x2000, lpOverlapped=0x0) returned 1 [0187.851] CloseHandle (hObject=0x444) returned 1 [0187.851] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\0e292d2be40784b709a96299f7f56c4c.png", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\0e292d2be40784b709a96299f7f56c4c.png", lpFilePart=0x0) returned 0x7d [0187.851] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\0e292d2be40784b709a96299f7f56c4c.png.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\0e292d2be40784b709a96299f7f56c4c.png.xuy", lpFilePart=0x0) returned 0x81 [0187.851] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0187.851] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\0e292d2be40784b709a96299f7f56c4c.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\thumbnails\\0e292d2be40784b709a96299f7f56c4c.png"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3db09b13, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x3db09b13, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x5bd121f2, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x4304)) returned 1 [0187.851] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0187.851] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\0e292d2be40784b709a96299f7f56c4c.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\thumbnails\\0e292d2be40784b709a96299f7f56c4c.png"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\0e292d2be40784b709a96299f7f56c4c.png.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\thumbnails\\0e292d2be40784b709a96299f7f56c4c.png.xuy")) returned 1 [0187.852] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\28c9257769b2913b70283ca4759e2034.png", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\28c9257769b2913b70283ca4759e2034.png", lpFilePart=0x0) returned 0x7d [0187.853] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0187.853] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\28c9257769b2913b70283ca4759e2034.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\thumbnails\\28c9257769b2913b70283ca4759e2034.png"), fInfoLevelId=0x0, lpFileInformation=0x21b87f8 | out: lpFileInformation=0x21b87f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf532d433, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xf532d433, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0xf532d433, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x4d15)) returned 1 [0187.853] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0187.853] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\28c9257769b2913b70283ca4759e2034.png", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\28c9257769b2913b70283ca4759e2034.png", lpFilePart=0x0) returned 0x7d [0187.853] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0187.853] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\28c9257769b2913b70283ca4759e2034.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\thumbnails\\28c9257769b2913b70283ca4759e2034.png"), fInfoLevelId=0x0, lpFileInformation=0x21b89e0 | out: lpFileInformation=0x21b89e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf532d433, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xf532d433, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0xf532d433, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x4d15)) returned 1 [0187.853] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0187.853] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\28c9257769b2913b70283ca4759e2034.png", nBufferLength=0x105, lpBuffer=0x3be120, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\28c9257769b2913b70283ca4759e2034.png", lpFilePart=0x0) returned 0x7d [0187.853] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0187.853] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\28c9257769b2913b70283ca4759e2034.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\thumbnails\\28c9257769b2913b70283ca4759e2034.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0187.854] GetFileType (hFile=0x444) returned 0x1 [0187.854] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be570) returned 1 [0187.854] GetFileType (hFile=0x444) returned 0x1 [0187.854] ReadFile (in: hFile=0x444, lpBuffer=0x21baee0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be688, lpOverlapped=0x0 | out: lpBuffer=0x21baee0*, lpNumberOfBytesRead=0x3be688*=0x1000, lpOverlapped=0x0) returned 1 [0187.887] CloseHandle (hObject=0x444) returned 1 [0187.887] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\28c9257769b2913b70283ca4759e2034.png", nBufferLength=0x105, lpBuffer=0x3be120, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\28c9257769b2913b70283ca4759e2034.png", lpFilePart=0x0) returned 0x7d [0187.887] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0187.887] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\28c9257769b2913b70283ca4759e2034.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\thumbnails\\28c9257769b2913b70283ca4759e2034.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0187.887] GetFileType (hFile=0x444) returned 0x1 [0187.887] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be570) returned 1 [0187.887] GetFileType (hFile=0x444) returned 0x1 [0187.887] WriteFile (in: hFile=0x444, lpBuffer=0x21b8ba8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be738, lpOverlapped=0x0 | out: lpBuffer=0x21b8ba8*, lpNumberOfBytesWritten=0x3be738*=0x2000, lpOverlapped=0x0) returned 1 [0187.888] CloseHandle (hObject=0x444) returned 1 [0187.888] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\28c9257769b2913b70283ca4759e2034.png", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\28c9257769b2913b70283ca4759e2034.png", lpFilePart=0x0) returned 0x7d [0187.888] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\28c9257769b2913b70283ca4759e2034.png.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\28c9257769b2913b70283ca4759e2034.png.xuy", lpFilePart=0x0) returned 0x81 [0187.888] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0187.888] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\28c9257769b2913b70283ca4759e2034.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\thumbnails\\28c9257769b2913b70283ca4759e2034.png"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf532d433, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xf532d433, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x5bd5e24e, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x4d15)) returned 1 [0187.888] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0187.888] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\28c9257769b2913b70283ca4759e2034.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\thumbnails\\28c9257769b2913b70283ca4759e2034.png"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\28c9257769b2913b70283ca4759e2034.png.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\thumbnails\\28c9257769b2913b70283ca4759e2034.png.xuy")) returned 1 [0187.889] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\2bf8db03609478000e25532b94a93e81.png", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\2bf8db03609478000e25532b94a93e81.png", lpFilePart=0x0) returned 0x7d [0187.889] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0187.889] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\2bf8db03609478000e25532b94a93e81.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\thumbnails\\2bf8db03609478000e25532b94a93e81.png"), fInfoLevelId=0x0, lpFileInformation=0x2237468 | out: lpFileInformation=0x2237468*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60d92304, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x60d92304, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x60d92304, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x6a58)) returned 1 [0187.890] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0187.890] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\2bf8db03609478000e25532b94a93e81.png", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\2bf8db03609478000e25532b94a93e81.png", lpFilePart=0x0) returned 0x7d [0187.890] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0187.890] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\2bf8db03609478000e25532b94a93e81.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\thumbnails\\2bf8db03609478000e25532b94a93e81.png"), fInfoLevelId=0x0, lpFileInformation=0x2237650 | out: lpFileInformation=0x2237650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60d92304, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x60d92304, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x60d92304, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x6a58)) returned 1 [0187.890] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0187.890] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\2bf8db03609478000e25532b94a93e81.png", nBufferLength=0x105, lpBuffer=0x3be120, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\2bf8db03609478000e25532b94a93e81.png", lpFilePart=0x0) returned 0x7d [0187.890] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0187.890] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\2bf8db03609478000e25532b94a93e81.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\thumbnails\\2bf8db03609478000e25532b94a93e81.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0187.891] GetFileType (hFile=0x444) returned 0x1 [0187.891] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be570) returned 1 [0187.891] GetFileType (hFile=0x444) returned 0x1 [0187.891] ReadFile (in: hFile=0x444, lpBuffer=0x2239b50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be688, lpOverlapped=0x0 | out: lpBuffer=0x2239b50*, lpNumberOfBytesRead=0x3be688*=0x1000, lpOverlapped=0x0) returned 1 [0187.914] CloseHandle (hObject=0x444) returned 1 [0187.914] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\2bf8db03609478000e25532b94a93e81.png", nBufferLength=0x105, lpBuffer=0x3be120, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\2bf8db03609478000e25532b94a93e81.png", lpFilePart=0x0) returned 0x7d [0187.914] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0187.914] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\2bf8db03609478000e25532b94a93e81.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\thumbnails\\2bf8db03609478000e25532b94a93e81.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0187.915] GetFileType (hFile=0x444) returned 0x1 [0187.915] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be570) returned 1 [0187.915] GetFileType (hFile=0x444) returned 0x1 [0187.915] WriteFile (in: hFile=0x444, lpBuffer=0x2237818*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be738, lpOverlapped=0x0 | out: lpBuffer=0x2237818*, lpNumberOfBytesWritten=0x3be738*=0x2000, lpOverlapped=0x0) returned 1 [0187.915] CloseHandle (hObject=0x444) returned 1 [0187.915] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\2bf8db03609478000e25532b94a93e81.png", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\2bf8db03609478000e25532b94a93e81.png", lpFilePart=0x0) returned 0x7d [0187.915] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\2bf8db03609478000e25532b94a93e81.png.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\2bf8db03609478000e25532b94a93e81.png.xuy", lpFilePart=0x0) returned 0x81 [0187.915] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0187.915] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\2bf8db03609478000e25532b94a93e81.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\thumbnails\\2bf8db03609478000e25532b94a93e81.png"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60d92304, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x60d92304, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x5bdaa7c7, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x6a58)) returned 1 [0187.915] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0187.916] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\2bf8db03609478000e25532b94a93e81.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\thumbnails\\2bf8db03609478000e25532b94a93e81.png"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\2bf8db03609478000e25532b94a93e81.png.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\thumbnails\\2bf8db03609478000e25532b94a93e81.png.xuy")) returned 1 [0187.917] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\5d432dc88d56856d87faecfa9b48853b.png", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\5d432dc88d56856d87faecfa9b48853b.png", lpFilePart=0x0) returned 0x7d [0187.917] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0187.917] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\5d432dc88d56856d87faecfa9b48853b.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\thumbnails\\5d432dc88d56856d87faecfa9b48853b.png"), fInfoLevelId=0x0, lpFileInformation=0x22b60d8 | out: lpFileInformation=0x22b60d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a80f5ad, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x8a80f5ad, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x8a80f5ad, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x4e94)) returned 1 [0187.917] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0187.917] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\5d432dc88d56856d87faecfa9b48853b.png", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\5d432dc88d56856d87faecfa9b48853b.png", lpFilePart=0x0) returned 0x7d [0187.917] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0187.917] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\5d432dc88d56856d87faecfa9b48853b.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\thumbnails\\5d432dc88d56856d87faecfa9b48853b.png"), fInfoLevelId=0x0, lpFileInformation=0x22b62c0 | out: lpFileInformation=0x22b62c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a80f5ad, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x8a80f5ad, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x8a80f5ad, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x4e94)) returned 1 [0187.917] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0187.917] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\5d432dc88d56856d87faecfa9b48853b.png", nBufferLength=0x105, lpBuffer=0x3be120, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\5d432dc88d56856d87faecfa9b48853b.png", lpFilePart=0x0) returned 0x7d [0187.917] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0187.917] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\5d432dc88d56856d87faecfa9b48853b.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\thumbnails\\5d432dc88d56856d87faecfa9b48853b.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0187.918] GetFileType (hFile=0x444) returned 0x1 [0187.918] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be570) returned 1 [0187.918] GetFileType (hFile=0x444) returned 0x1 [0187.918] ReadFile (in: hFile=0x444, lpBuffer=0x22b87c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be688, lpOverlapped=0x0 | out: lpBuffer=0x22b87c0*, lpNumberOfBytesRead=0x3be688*=0x1000, lpOverlapped=0x0) returned 1 [0187.950] CloseHandle (hObject=0x444) returned 1 [0187.950] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\5d432dc88d56856d87faecfa9b48853b.png", nBufferLength=0x105, lpBuffer=0x3be120, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\5d432dc88d56856d87faecfa9b48853b.png", lpFilePart=0x0) returned 0x7d [0187.950] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0187.950] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\5d432dc88d56856d87faecfa9b48853b.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\thumbnails\\5d432dc88d56856d87faecfa9b48853b.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0187.950] GetFileType (hFile=0x444) returned 0x1 [0187.950] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be570) returned 1 [0187.950] GetFileType (hFile=0x444) returned 0x1 [0187.950] WriteFile (in: hFile=0x444, lpBuffer=0x22b6488*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be738, lpOverlapped=0x0 | out: lpBuffer=0x22b6488*, lpNumberOfBytesWritten=0x3be738*=0x2000, lpOverlapped=0x0) returned 1 [0187.950] CloseHandle (hObject=0x444) returned 1 [0187.951] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\5d432dc88d56856d87faecfa9b48853b.png", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\5d432dc88d56856d87faecfa9b48853b.png", lpFilePart=0x0) returned 0x7d [0187.951] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\5d432dc88d56856d87faecfa9b48853b.png.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\5d432dc88d56856d87faecfa9b48853b.png.xuy", lpFilePart=0x0) returned 0x81 [0187.951] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0187.951] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\5d432dc88d56856d87faecfa9b48853b.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\thumbnails\\5d432dc88d56856d87faecfa9b48853b.png"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a80f5ad, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x8a80f5ad, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x5bdf6b02, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x4e94)) returned 1 [0187.951] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0187.951] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\5d432dc88d56856d87faecfa9b48853b.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\thumbnails\\5d432dc88d56856d87faecfa9b48853b.png"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\5d432dc88d56856d87faecfa9b48853b.png.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\thumbnails\\5d432dc88d56856d87faecfa9b48853b.png.xuy")) returned 1 [0187.952] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\77ec32dc2bee35c0b759503a76ed5b66.png", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\77ec32dc2bee35c0b759503a76ed5b66.png", lpFilePart=0x0) returned 0x7d [0187.952] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0187.952] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\77ec32dc2bee35c0b759503a76ed5b66.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\thumbnails\\77ec32dc2bee35c0b759503a76ed5b66.png"), fInfoLevelId=0x0, lpFileInformation=0x2334d48 | out: lpFileInformation=0x2334d48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49942d66, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x49942d66, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x49942d66, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0x44c5)) returned 1 [0187.952] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0187.952] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\77ec32dc2bee35c0b759503a76ed5b66.png", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\77ec32dc2bee35c0b759503a76ed5b66.png", lpFilePart=0x0) returned 0x7d [0187.952] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0187.952] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\77ec32dc2bee35c0b759503a76ed5b66.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\thumbnails\\77ec32dc2bee35c0b759503a76ed5b66.png"), fInfoLevelId=0x0, lpFileInformation=0x2334f30 | out: lpFileInformation=0x2334f30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49942d66, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x49942d66, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x49942d66, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0x44c5)) returned 1 [0187.952] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0187.953] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\77ec32dc2bee35c0b759503a76ed5b66.png", nBufferLength=0x105, lpBuffer=0x3be120, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\77ec32dc2bee35c0b759503a76ed5b66.png", lpFilePart=0x0) returned 0x7d [0187.953] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0187.953] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\77ec32dc2bee35c0b759503a76ed5b66.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\thumbnails\\77ec32dc2bee35c0b759503a76ed5b66.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0187.954] GetFileType (hFile=0x444) returned 0x1 [0187.954] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be570) returned 1 [0187.954] GetFileType (hFile=0x444) returned 0x1 [0187.954] ReadFile (in: hFile=0x444, lpBuffer=0x2337430, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be688, lpOverlapped=0x0 | out: lpBuffer=0x2337430*, lpNumberOfBytesRead=0x3be688*=0x1000, lpOverlapped=0x0) returned 1 [0188.013] CloseHandle (hObject=0x444) returned 1 [0188.013] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\77ec32dc2bee35c0b759503a76ed5b66.png", nBufferLength=0x105, lpBuffer=0x3be120, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\77ec32dc2bee35c0b759503a76ed5b66.png", lpFilePart=0x0) returned 0x7d [0188.014] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0188.014] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\77ec32dc2bee35c0b759503a76ed5b66.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\thumbnails\\77ec32dc2bee35c0b759503a76ed5b66.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0188.014] GetFileType (hFile=0x444) returned 0x1 [0188.014] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be570) returned 1 [0188.014] GetFileType (hFile=0x444) returned 0x1 [0188.014] WriteFile (in: hFile=0x444, lpBuffer=0x2189e50*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be738, lpOverlapped=0x0 | out: lpBuffer=0x2189e50*, lpNumberOfBytesWritten=0x3be738*=0x2000, lpOverlapped=0x0) returned 1 [0188.014] CloseHandle (hObject=0x444) returned 1 [0188.015] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\77ec32dc2bee35c0b759503a76ed5b66.png", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\77ec32dc2bee35c0b759503a76ed5b66.png", lpFilePart=0x0) returned 0x7d [0188.015] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\77ec32dc2bee35c0b759503a76ed5b66.png.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\77ec32dc2bee35c0b759503a76ed5b66.png.xuy", lpFilePart=0x0) returned 0x81 [0188.015] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0188.015] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\77ec32dc2bee35c0b759503a76ed5b66.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\thumbnails\\77ec32dc2bee35c0b759503a76ed5b66.png"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49942d66, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x49942d66, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x5be8f522, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x44c5)) returned 1 [0188.015] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0188.015] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\77ec32dc2bee35c0b759503a76ed5b66.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\thumbnails\\77ec32dc2bee35c0b759503a76ed5b66.png"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\77ec32dc2bee35c0b759503a76ed5b66.png.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\thumbnails\\77ec32dc2bee35c0b759503a76ed5b66.png.xuy")) returned 1 [0188.016] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\b6dc1948244e7e4562c9356a0052d7af.png", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\b6dc1948244e7e4562c9356a0052d7af.png", lpFilePart=0x0) returned 0x7d [0188.016] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0188.016] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\b6dc1948244e7e4562c9356a0052d7af.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\thumbnails\\b6dc1948244e7e4562c9356a0052d7af.png"), fInfoLevelId=0x0, lpFileInformation=0x21b3970 | out: lpFileInformation=0x21b3970*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82c2e405, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x82c2e405, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x82c2e405, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x395a)) returned 1 [0188.016] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0188.017] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\b6dc1948244e7e4562c9356a0052d7af.png", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\b6dc1948244e7e4562c9356a0052d7af.png", lpFilePart=0x0) returned 0x7d [0188.017] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0188.017] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\b6dc1948244e7e4562c9356a0052d7af.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\thumbnails\\b6dc1948244e7e4562c9356a0052d7af.png"), fInfoLevelId=0x0, lpFileInformation=0x21b3b58 | out: lpFileInformation=0x21b3b58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82c2e405, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x82c2e405, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x82c2e405, ftLastWriteTime.dwHighDateTime=0x1d2d442, nFileSizeHigh=0x0, nFileSizeLow=0x395a)) returned 1 [0188.017] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0188.017] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\b6dc1948244e7e4562c9356a0052d7af.png", nBufferLength=0x105, lpBuffer=0x3be120, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\b6dc1948244e7e4562c9356a0052d7af.png", lpFilePart=0x0) returned 0x7d [0188.017] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0188.017] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\b6dc1948244e7e4562c9356a0052d7af.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\thumbnails\\b6dc1948244e7e4562c9356a0052d7af.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0188.018] GetFileType (hFile=0x444) returned 0x1 [0188.018] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be570) returned 1 [0188.018] GetFileType (hFile=0x444) returned 0x1 [0188.018] ReadFile (in: hFile=0x444, lpBuffer=0x21b6058, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be688, lpOverlapped=0x0 | out: lpBuffer=0x21b6058*, lpNumberOfBytesRead=0x3be688*=0x1000, lpOverlapped=0x0) returned 1 [0188.030] CloseHandle (hObject=0x444) returned 1 [0188.031] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\b6dc1948244e7e4562c9356a0052d7af.png", nBufferLength=0x105, lpBuffer=0x3be120, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\b6dc1948244e7e4562c9356a0052d7af.png", lpFilePart=0x0) returned 0x7d [0188.031] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0188.031] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\b6dc1948244e7e4562c9356a0052d7af.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\thumbnails\\b6dc1948244e7e4562c9356a0052d7af.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0188.031] GetFileType (hFile=0x444) returned 0x1 [0188.031] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be570) returned 1 [0188.031] GetFileType (hFile=0x444) returned 0x1 [0188.031] WriteFile (in: hFile=0x444, lpBuffer=0x21b3d20*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be738, lpOverlapped=0x0 | out: lpBuffer=0x21b3d20*, lpNumberOfBytesWritten=0x3be738*=0x2000, lpOverlapped=0x0) returned 1 [0188.031] CloseHandle (hObject=0x444) returned 1 [0188.031] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\b6dc1948244e7e4562c9356a0052d7af.png", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\b6dc1948244e7e4562c9356a0052d7af.png", lpFilePart=0x0) returned 0x7d [0188.031] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\b6dc1948244e7e4562c9356a0052d7af.png.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\b6dc1948244e7e4562c9356a0052d7af.png.xuy", lpFilePart=0x0) returned 0x81 [0188.032] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0188.032] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\b6dc1948244e7e4562c9356a0052d7af.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\thumbnails\\b6dc1948244e7e4562c9356a0052d7af.png"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82c2e405, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x82c2e405, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x5beb5789, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x395a)) returned 1 [0188.032] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0188.032] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\b6dc1948244e7e4562c9356a0052d7af.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\thumbnails\\b6dc1948244e7e4562c9356a0052d7af.png"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\b6dc1948244e7e4562c9356a0052d7af.png.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\thumbnails\\b6dc1948244e7e4562c9356a0052d7af.png.xuy")) returned 1 [0188.070] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\e214427ea25af5774381fe2c2582382e.png", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\e214427ea25af5774381fe2c2582382e.png", lpFilePart=0x0) returned 0x7d [0188.070] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0188.070] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\e214427ea25af5774381fe2c2582382e.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\thumbnails\\e214427ea25af5774381fe2c2582382e.png"), fInfoLevelId=0x0, lpFileInformation=0x22325e0 | out: lpFileInformation=0x22325e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3db09b13, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x3db09b13, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x3db09b13, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0x4304)) returned 1 [0188.070] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0188.070] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\e214427ea25af5774381fe2c2582382e.png", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\e214427ea25af5774381fe2c2582382e.png", lpFilePart=0x0) returned 0x7d [0188.070] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0188.070] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\e214427ea25af5774381fe2c2582382e.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\thumbnails\\e214427ea25af5774381fe2c2582382e.png"), fInfoLevelId=0x0, lpFileInformation=0x22327c8 | out: lpFileInformation=0x22327c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3db09b13, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x3db09b13, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x3db09b13, ftLastWriteTime.dwHighDateTime=0x1d2d445, nFileSizeHigh=0x0, nFileSizeLow=0x4304)) returned 1 [0188.070] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0188.070] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\e214427ea25af5774381fe2c2582382e.png", nBufferLength=0x105, lpBuffer=0x3be120, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\e214427ea25af5774381fe2c2582382e.png", lpFilePart=0x0) returned 0x7d [0188.071] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0188.071] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\e214427ea25af5774381fe2c2582382e.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\thumbnails\\e214427ea25af5774381fe2c2582382e.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0188.072] GetFileType (hFile=0x444) returned 0x1 [0188.072] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be570) returned 1 [0188.072] GetFileType (hFile=0x444) returned 0x1 [0188.072] ReadFile (in: hFile=0x444, lpBuffer=0x2234cc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be688, lpOverlapped=0x0 | out: lpBuffer=0x2234cc8*, lpNumberOfBytesRead=0x3be688*=0x1000, lpOverlapped=0x0) returned 1 [0188.109] CloseHandle (hObject=0x444) returned 1 [0188.109] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\e214427ea25af5774381fe2c2582382e.png", nBufferLength=0x105, lpBuffer=0x3be120, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\e214427ea25af5774381fe2c2582382e.png", lpFilePart=0x0) returned 0x7d [0188.109] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0188.109] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\e214427ea25af5774381fe2c2582382e.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\thumbnails\\e214427ea25af5774381fe2c2582382e.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0188.110] GetFileType (hFile=0x444) returned 0x1 [0188.110] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be570) returned 1 [0188.110] GetFileType (hFile=0x444) returned 0x1 [0188.110] WriteFile (in: hFile=0x444, lpBuffer=0x2232990*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be738, lpOverlapped=0x0 | out: lpBuffer=0x2232990*, lpNumberOfBytesWritten=0x3be738*=0x2000, lpOverlapped=0x0) returned 1 [0188.110] CloseHandle (hObject=0x444) returned 1 [0188.110] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\e214427ea25af5774381fe2c2582382e.png", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\e214427ea25af5774381fe2c2582382e.png", lpFilePart=0x0) returned 0x7d [0188.110] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\e214427ea25af5774381fe2c2582382e.png.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\e214427ea25af5774381fe2c2582382e.png.xuy", lpFilePart=0x0) returned 0x81 [0188.110] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0188.110] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\e214427ea25af5774381fe2c2582382e.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\thumbnails\\e214427ea25af5774381fe2c2582382e.png"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3db09b13, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x3db09b13, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x5bf74341, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x4304)) returned 1 [0188.110] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0188.110] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\e214427ea25af5774381fe2c2582382e.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\thumbnails\\e214427ea25af5774381fe2c2582382e.png"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\e214427ea25af5774381fe2c2582382e.png.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\thumbnails\\e214427ea25af5774381fe2c2582382e.png.xuy")) returned 1 [0188.112] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0188.112] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\updates", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\updates", lpFilePart=0x0) returned 0x33 [0188.112] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\updates\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\updates\\", lpFilePart=0x0) returned 0x34 [0188.112] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\updates\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d81b0 [0188.113] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0188.113] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0188.113] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0188.113] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0188.113] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0188.113] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0188.113] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0188.113] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\updates", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\updates", lpFilePart=0x0) returned 0x33 [0188.113] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\updates\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\updates\\", lpFilePart=0x0) returned 0x34 [0188.113] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\updates\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d81b0 [0188.113] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0188.113] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0188.114] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0188.114] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0188.114] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0188.114] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0188.114] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0188.114] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B", lpFilePart=0x0) returned 0x44 [0188.114] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\", lpFilePart=0x0) returned 0x45 [0188.114] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d81b0 [0188.114] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0188.114] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0188.114] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0188.114] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0188.114] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0188.115] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0188.115] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B", lpFilePart=0x0) returned 0x44 [0188.115] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\", lpFilePart=0x0) returned 0x45 [0188.115] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d75b0 [0188.115] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0188.115] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0188.115] FindClose (in: hFindFile=0x5d75b0 | out: hFindFile=0x5d75b0) returned 1 [0188.115] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0188.115] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0188.115] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0188.115] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages", nBufferLength=0x105, lpBuffer=0x3be3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages", lpFilePart=0x0) returned 0x2c [0188.115] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\", nBufferLength=0x105, lpBuffer=0x3be370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\", lpFilePart=0x0) returned 0x2d [0188.115] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\*", lpFindFileData=0x3be580 | out: lpFindFileData=0x3be580) returned 0x5d79d0 [0188.116] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0188.116] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0188.116] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0188.116] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0188.117] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0188.117] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0188.117] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0188.117] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0188.117] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0188.117] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0188.117] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0188.117] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0188.118] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0188.118] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0188.118] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0188.118] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0188.118] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0188.118] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0188.118] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0188.119] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0188.119] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0188.119] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0188.119] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0188.119] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0188.120] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0188.120] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0188.120] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0188.120] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0188.120] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0188.120] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0188.120] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0188.121] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0188.121] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0188.121] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0188.121] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0188.121] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0188.121] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0188.121] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0188.121] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0188.122] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0188.122] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0188.122] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0188.122] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0188.122] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0188.122] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0188.122] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0188.122] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0188.123] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0188.123] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0188.123] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 0 [0188.123] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0188.123] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0188.123] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7f0) returned 1 [0188.123] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0188.123] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages", nBufferLength=0x105, lpBuffer=0x3be3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages", lpFilePart=0x0) returned 0x2c [0188.123] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\", nBufferLength=0x105, lpBuffer=0x3be370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\", lpFilePart=0x0) returned 0x2d [0188.123] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\*", lpFindFileData=0x3be580 | out: lpFindFileData=0x3be580) returned 0x5d7c70 [0188.123] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0188.124] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0188.124] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0188.124] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0188.124] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0188.124] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0188.124] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0188.125] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0188.125] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0188.125] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0188.125] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0188.125] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0188.125] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0188.125] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0188.125] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0188.125] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0188.125] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0188.126] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0188.126] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0188.126] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0188.126] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0188.126] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0188.126] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0188.126] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0188.127] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0188.127] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0188.127] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0188.127] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0188.127] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0188.128] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0188.128] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0188.128] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0188.128] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0188.128] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0188.128] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0188.128] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0188.129] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0188.129] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0188.129] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0188.129] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0188.129] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0188.129] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0188.129] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0188.129] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0188.130] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0188.130] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0188.130] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0188.130] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0188.130] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0188.130] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 0 [0188.130] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0188.130] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0188.130] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7f0) returned 1 [0188.130] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0188.130] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe", lpFilePart=0x0) returned 0x4e [0188.130] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\", lpFilePart=0x0) returned 0x4f [0188.130] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d79d0 [0188.166] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0188.166] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0188.167] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0188.167] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0188.167] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0188.167] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0188.167] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0188.167] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0188.167] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0188.167] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0188.167] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0188.167] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0188.168] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0188.168] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0188.168] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0188.168] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe", lpFilePart=0x0) returned 0x4e [0188.168] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\", lpFilePart=0x0) returned 0x4f [0188.168] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d7d90 [0188.169] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0188.169] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0188.169] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0188.169] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0188.169] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0188.169] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0188.169] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0188.169] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0188.169] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0188.169] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0188.169] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0188.169] FindClose (in: hFindFile=0x5d7d90 | out: hFindFile=0x5d7d90) returned 1 [0188.170] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0188.170] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0188.170] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0188.170] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\AC", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\AC", lpFilePart=0x0) returned 0x51 [0188.170] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\AC\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\AC\\", lpFilePart=0x0) returned 0x52 [0188.170] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\AC\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7670 [0188.214] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0188.214] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0188.215] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0188.215] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0188.215] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0188.215] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0188.215] FindClose (in: hFindFile=0x5d7670 | out: hFindFile=0x5d7670) returned 1 [0188.215] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0188.215] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0188.215] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0188.215] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\AC", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\AC", lpFilePart=0x0) returned 0x51 [0188.215] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\AC\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\AC\\", lpFilePart=0x0) returned 0x52 [0188.216] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\AC\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7e50 [0188.216] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0188.216] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0188.216] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0188.216] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0188.216] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0188.216] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0188.216] FindClose (in: hFindFile=0x5d7e50 | out: hFindFile=0x5d7e50) returned 1 [0188.217] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0188.217] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0188.217] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0188.217] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\AC\\INetCache", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\AC\\INetCache", lpFilePart=0x0) returned 0x5b [0188.217] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\AC\\INetCache\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\AC\\INetCache\\", lpFilePart=0x0) returned 0x5c [0188.217] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\AC\\INetCache\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d78b0 [0188.230] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0188.230] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0188.230] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0188.230] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0188.230] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0188.230] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0188.230] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\AC\\INetCache", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\AC\\INetCache", lpFilePart=0x0) returned 0x5b [0188.230] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\AC\\INetCache\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\AC\\INetCache\\", lpFilePart=0x0) returned 0x5c [0188.230] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\AC\\INetCache\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7a30 [0188.230] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0188.230] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0188.230] FindClose (in: hFindFile=0x5d7a30 | out: hFindFile=0x5d7a30) returned 1 [0188.230] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0188.230] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0188.230] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0188.230] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\AC\\INetCookies", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\AC\\INetCookies", lpFilePart=0x0) returned 0x5d [0188.230] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\AC\\INetCookies\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\AC\\INetCookies\\", lpFilePart=0x0) returned 0x5e [0188.230] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\AC\\INetCookies\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7cd0 [0188.231] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0188.231] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0188.231] FindClose (in: hFindFile=0x5d7cd0 | out: hFindFile=0x5d7cd0) returned 1 [0188.231] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0188.231] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0188.231] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0188.231] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\AC\\INetCookies", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\AC\\INetCookies", lpFilePart=0x0) returned 0x5d [0188.231] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\AC\\INetCookies\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\AC\\INetCookies\\", lpFilePart=0x0) returned 0x5e [0188.231] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\AC\\INetCookies\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d81b0 [0188.231] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0188.231] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0188.231] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0188.231] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0188.231] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0188.231] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0188.231] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\AC\\INetHistory", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\AC\\INetHistory", lpFilePart=0x0) returned 0x5d [0188.231] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\AC\\INetHistory\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\AC\\INetHistory\\", lpFilePart=0x0) returned 0x5e [0188.231] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\AC\\INetHistory\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7370 [0188.231] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0188.232] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0188.232] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0188.232] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0188.232] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0188.232] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0188.232] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\AC\\INetHistory", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\AC\\INetHistory", lpFilePart=0x0) returned 0x5d [0188.232] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\AC\\INetHistory\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\AC\\INetHistory\\", lpFilePart=0x0) returned 0x5e [0188.232] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\AC\\INetHistory\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7cd0 [0188.232] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0188.232] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0188.232] FindClose (in: hFindFile=0x5d7cd0 | out: hFindFile=0x5d7cd0) returned 1 [0188.232] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0188.232] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0188.232] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0188.232] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\AC\\Temp", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\AC\\Temp", lpFilePart=0x0) returned 0x56 [0188.232] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\AC\\Temp\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\AC\\Temp\\", lpFilePart=0x0) returned 0x57 [0188.232] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\AC\\Temp\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d78b0 [0188.232] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0188.232] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0188.232] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0188.232] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0188.233] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0188.233] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0188.233] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\AC\\Temp", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\AC\\Temp", lpFilePart=0x0) returned 0x56 [0188.233] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\AC\\Temp\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\AC\\Temp\\", lpFilePart=0x0) returned 0x57 [0188.233] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\AC\\Temp\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7550 [0188.233] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0188.233] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0188.233] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0188.233] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0188.233] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0188.233] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0188.233] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\AppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\AppData", lpFilePart=0x0) returned 0x56 [0188.233] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\AppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\AppData\\", lpFilePart=0x0) returned 0x57 [0188.233] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\AppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7d90 [0188.233] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0188.233] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0188.233] FindClose (in: hFindFile=0x5d7d90 | out: hFindFile=0x5d7d90) returned 1 [0188.233] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0188.233] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0188.233] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0188.234] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\AppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\AppData", lpFilePart=0x0) returned 0x56 [0188.234] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\AppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\AppData\\", lpFilePart=0x0) returned 0x57 [0188.234] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\AppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d81b0 [0188.234] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0188.234] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0188.234] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0188.234] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0188.234] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0188.234] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0188.234] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\LocalCache", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\LocalCache", lpFilePart=0x0) returned 0x59 [0188.234] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\LocalCache\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\LocalCache\\", lpFilePart=0x0) returned 0x5a [0188.234] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\LocalCache\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7af0 [0188.234] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0188.234] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0188.234] FindClose (in: hFindFile=0x5d7af0 | out: hFindFile=0x5d7af0) returned 1 [0188.234] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0188.234] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0188.234] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0188.234] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\LocalCache", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\LocalCache", lpFilePart=0x0) returned 0x59 [0188.234] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\LocalCache\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\LocalCache\\", lpFilePart=0x0) returned 0x5a [0188.234] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\LocalCache\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d81b0 [0188.235] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0188.235] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0188.235] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0188.235] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0188.235] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0188.235] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0188.235] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\LocalState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\LocalState", lpFilePart=0x0) returned 0x59 [0188.235] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\LocalState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\LocalState\\", lpFilePart=0x0) returned 0x5a [0188.235] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\LocalState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d78b0 [0188.235] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0188.235] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0188.235] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0188.235] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0188.235] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0188.235] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0188.235] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\LocalState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\LocalState", lpFilePart=0x0) returned 0x59 [0188.235] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\LocalState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\LocalState\\", lpFilePart=0x0) returned 0x5a [0188.235] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\LocalState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d78b0 [0188.235] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0188.236] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0188.236] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0188.236] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0188.236] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0188.236] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0188.236] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe", lpFilePart=0x0) returned 0x7e [0188.236] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\", lpFilePart=0x0) returned 0x7f [0188.236] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7370 [0188.253] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0188.253] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0188.253] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0188.253] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0188.253] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0188.253] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0188.253] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0188.253] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe", lpFilePart=0x0) returned 0x7e [0188.253] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\", lpFilePart=0x0) returned 0x7f [0188.253] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7550 [0188.253] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0188.253] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0188.253] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0188.253] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0188.254] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0188.254] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0188.254] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0188.254] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\ActivationStore", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\ActivationStore", lpFilePart=0x0) returned 0x8e [0188.254] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\", lpFilePart=0x0) returned 0x8f [0188.254] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7c70 [0188.266] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0188.266] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0188.266] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0188.266] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0188.266] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0188.266] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0188.267] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0188.267] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0188.267] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0188.267] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\ActivationStore", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\ActivationStore", lpFilePart=0x0) returned 0x8e [0188.267] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\", lpFilePart=0x0) returned 0x8f [0188.267] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d78b0 [0188.268] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0188.268] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0188.268] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0188.268] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0188.268] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0188.268] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0188.269] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0188.269] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0188.269] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xa2 [0188.269] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0188.269] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.3dbuilder_8wekyb3d8bbwe\\microsoft.3dbuilder_10.0.0.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), fInfoLevelId=0x0, lpFileInformation=0x22e09c8 | out: lpFileInformation=0x22e09c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dc7478f, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x2defcfc4, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x2defcfc4, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x4000)) returned 1 [0188.277] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0188.277] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xa2 [0188.277] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0188.277] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.3dbuilder_8wekyb3d8bbwe\\microsoft.3dbuilder_10.0.0.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), fInfoLevelId=0x0, lpFileInformation=0x22e0bd0 | out: lpFileInformation=0x22e0bd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dc7478f, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x2defcfc4, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x2defcfc4, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x4000)) returned 1 [0188.277] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0188.277] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xa2 [0188.277] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0188.277] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.3dbuilder_8wekyb3d8bbwe\\microsoft.3dbuilder_10.0.0.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0188.278] GetFileType (hFile=0x444) returned 0x1 [0188.278] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0188.278] GetFileType (hFile=0x444) returned 0x1 [0188.279] ReadFile (in: hFile=0x444, lpBuffer=0x22e3110, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x22e3110*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0188.296] CloseHandle (hObject=0x444) returned 1 [0188.296] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xa2 [0188.296] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0188.296] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.3dbuilder_8wekyb3d8bbwe\\microsoft.3dbuilder_10.0.0.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0188.297] GetFileType (hFile=0x444) returned 0x1 [0188.297] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0188.297] GetFileType (hFile=0x444) returned 0x1 [0188.297] WriteFile (in: hFile=0x444, lpBuffer=0x22e0db8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x22e0db8*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0188.297] CloseHandle (hObject=0x444) returned 1 [0188.297] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xa2 [0188.297] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.xuy", lpFilePart=0x0) returned 0xa6 [0188.297] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0188.297] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.3dbuilder_8wekyb3d8bbwe\\microsoft.3dbuilder_10.0.0.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dc7478f, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x2defcfc4, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5c13df32, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x4000)) returned 1 [0188.297] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0188.297] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.3dbuilder_8wekyb3d8bbwe\\microsoft.3dbuilder_10.0.0.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.3dbuilder_8wekyb3d8bbwe\\microsoft.3dbuilder_10.0.0.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.xuy")) returned 1 [0188.300] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xa7 [0188.300] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0188.300] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.3dbuilder_8wekyb3d8bbwe\\microsoft.3dbuilder_10.0.0.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x235f790 | out: lpFileInformation=0x235f790*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x2dc7478f, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x2dc7478f, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x2dc7478f, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0188.300] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0188.300] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xa7 [0188.300] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0188.300] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.3dbuilder_8wekyb3d8bbwe\\microsoft.3dbuilder_10.0.0.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x235f9b0 | out: lpFileInformation=0x235f9b0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x2dc7478f, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x2dc7478f, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x2dc7478f, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0188.300] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0188.300] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xa7 [0188.301] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0188.301] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.3dbuilder_8wekyb3d8bbwe\\microsoft.3dbuilder_10.0.0.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0188.302] GetFileType (hFile=0x444) returned 0x1 [0188.302] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0188.302] GetFileType (hFile=0x444) returned 0x1 [0188.302] ReadFile (in: hFile=0x444, lpBuffer=0x2361f20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x2361f20*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0188.348] CloseHandle (hObject=0x444) returned 1 [0188.348] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xa7 [0188.348] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0188.349] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.3dbuilder_8wekyb3d8bbwe\\microsoft.3dbuilder_10.0.0.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0188.349] GetFileType (hFile=0x444) returned 0x1 [0188.349] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0188.349] GetFileType (hFile=0x444) returned 0x1 [0188.349] WriteFile (in: hFile=0x444, lpBuffer=0x218cb58*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x218cb58*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0188.349] CloseHandle (hObject=0x444) returned 1 [0188.349] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xa7 [0188.349] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1.xuy", lpFilePart=0x0) returned 0xab [0188.349] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0188.349] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.3dbuilder_8wekyb3d8bbwe\\microsoft.3dbuilder_10.0.0.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x2dc7478f, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x2dc7478f, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5c1d697d, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0188.350] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0188.350] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.3dbuilder_8wekyb3d8bbwe\\microsoft.3dbuilder_10.0.0.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.3dbuilder_8wekyb3d8bbwe\\microsoft.3dbuilder_10.0.0.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1.xuy")) returned 1 [0188.351] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xa7 [0188.351] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0188.351] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.3dbuilder_8wekyb3d8bbwe\\microsoft.3dbuilder_10.0.0.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x21e1298 | out: lpFileInformation=0x21e1298*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x2dc7478f, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x2dc7478f, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x2dc7478f, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0188.351] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0188.351] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xa7 [0188.351] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0188.351] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.3dbuilder_8wekyb3d8bbwe\\microsoft.3dbuilder_10.0.0.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0188.351] GetFileType (hFile=0x444) returned 0x1 [0188.351] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0188.351] GetFileType (hFile=0x444) returned 0x1 [0188.351] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x0 [0188.352] CloseHandle (hObject=0x444) returned 1 [0188.363] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xa7 [0188.363] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0188.363] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.3dbuilder_8wekyb3d8bbwe\\microsoft.3dbuilder_10.0.0.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0188.365] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb070) returned 1 [0188.365] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbcf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xa7 [0188.365] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0188.365] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.3dbuilder_8wekyb3d8bbwe\\microsoft.3dbuilder_10.0.0.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x3bc270 | out: lpFileInformation=0x3bc270*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x2dc7478f, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x2dc7478f, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x2dc7478f, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0188.365] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc150) returned 1 [0188.365] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbd10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xa7 [0188.365] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0188.365] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.3dbuilder_8wekyb3d8bbwe\\microsoft.3dbuilder_10.0.0.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x2258268 | out: lpFileInformation=0x2258268*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x2dc7478f, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x2dc7478f, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x2dc7478f, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0188.365] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc150) returned 1 [0188.365] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xa7 [0188.365] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc050) returned 1 [0188.365] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.3dbuilder_8wekyb3d8bbwe\\microsoft.3dbuilder_10.0.0.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0188.366] GetFileType (hFile=0x444) returned 0x1 [0188.366] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbfc0) returned 1 [0188.366] GetFileType (hFile=0x444) returned 0x1 [0188.366] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc1e8 | out: lpFileSizeHigh=0x3bc1e8*=0x0) returned 0x0 [0188.366] CloseHandle (hObject=0x444) returned 1 [0188.404] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xa7 [0188.404] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc050) returned 1 [0188.404] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.3dbuilder_8wekyb3d8bbwe\\microsoft.3dbuilder_10.0.0.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0188.405] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8ae0) returned 1 [0188.406] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0188.406] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\RoamingState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\RoamingState", lpFilePart=0x0) returned 0x5b [0188.406] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\RoamingState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\RoamingState\\", lpFilePart=0x0) returned 0x5c [0188.406] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\RoamingState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7d90 [0188.406] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0188.407] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0188.407] FindClose (in: hFindFile=0x5d7d90 | out: hFindFile=0x5d7d90) returned 1 [0188.407] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0188.407] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0188.407] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0188.407] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\RoamingState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\RoamingState", lpFilePart=0x0) returned 0x5b [0188.407] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\RoamingState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\RoamingState\\", lpFilePart=0x0) returned 0x5c [0188.407] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\RoamingState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d79d0 [0188.407] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0188.407] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0188.407] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0188.408] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0188.408] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0188.408] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0188.408] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\Settings", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\Settings", lpFilePart=0x0) returned 0x57 [0188.408] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\Settings\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\Settings\\", lpFilePart=0x0) returned 0x58 [0188.408] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\Settings\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d79d0 [0188.408] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0188.408] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0188.408] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0188.409] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0188.409] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0188.409] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0188.409] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0188.409] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0188.409] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\Settings", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\Settings", lpFilePart=0x0) returned 0x57 [0188.409] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\Settings\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\Settings\\", lpFilePart=0x0) returned 0x58 [0188.409] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\Settings\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7d30 [0188.409] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0188.409] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0188.409] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0188.409] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0188.409] FindClose (in: hFindFile=0x5d7d30 | out: hFindFile=0x5d7d30) returned 1 [0188.410] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0188.410] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0188.410] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\Settings\\roaming.lock", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\Settings\\roaming.lock", lpFilePart=0x0) returned 0x64 [0188.410] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0188.410] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.3dbuilder_8wekyb3d8bbwe\\settings\\roaming.lock"), fInfoLevelId=0x0, lpFileInformation=0x22d37f8 | out: lpFileInformation=0x22d37f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d54d7e7, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x2d54d7e7, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x2d54d7e7, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0188.410] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0188.410] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\Settings\\roaming.lock", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\Settings\\roaming.lock", lpFilePart=0x0) returned 0x64 [0188.410] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0188.410] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.3dbuilder_8wekyb3d8bbwe\\settings\\roaming.lock"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0188.410] GetFileType (hFile=0x444) returned 0x1 [0188.410] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0188.410] GetFileType (hFile=0x444) returned 0x1 [0188.410] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0x0 [0188.410] CloseHandle (hObject=0x444) returned 1 [0188.450] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\Settings\\roaming.lock", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\Settings\\roaming.lock", lpFilePart=0x0) returned 0x64 [0188.450] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0188.450] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.3dbuilder_8wekyb3d8bbwe\\settings\\roaming.lock"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0188.452] GetFileType (hFile=0x444) returned 0x1 [0188.452] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0188.452] GetFileType (hFile=0x444) returned 0x1 [0188.452] WriteFile (in: hFile=0x444, lpBuffer=0x2349c48*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x3be628, lpOverlapped=0x0 | out: lpBuffer=0x2349c48*, lpNumberOfBytesWritten=0x3be628*=0x10, lpOverlapped=0x0) returned 1 [0188.453] CloseHandle (hObject=0x444) returned 1 [0188.453] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\Settings\\roaming.lock", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\Settings\\roaming.lock", lpFilePart=0x0) returned 0x64 [0188.453] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\Settings\\roaming.lock.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\Settings\\roaming.lock.xuy", lpFilePart=0x0) returned 0x68 [0188.453] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0188.453] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.3dbuilder_8wekyb3d8bbwe\\settings\\roaming.lock"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d54d7e7, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x2d54d7e7, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5c2bba49, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0188.453] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0188.453] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.3dbuilder_8wekyb3d8bbwe\\settings\\roaming.lock"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\Settings\\roaming.lock.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.3dbuilder_8wekyb3d8bbwe\\settings\\roaming.lock.xuy")) returned 1 [0188.454] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\Settings\\settings.dat", lpFilePart=0x0) returned 0x64 [0188.454] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0188.454] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.3dbuilder_8wekyb3d8bbwe\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x234af70 | out: lpFileInformation=0x234af70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d4b4cf8, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x2d4b4cf8, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x8d6f5917, ftLastWriteTime.dwHighDateTime=0x1d0baff, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0188.455] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0188.455] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\Settings\\settings.dat", lpFilePart=0x0) returned 0x64 [0188.455] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0188.455] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.3dbuilder_8wekyb3d8bbwe\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x234b0f8 | out: lpFileInformation=0x234b0f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d4b4cf8, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x2d4b4cf8, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x8d6f5917, ftLastWriteTime.dwHighDateTime=0x1d0baff, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0188.455] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0188.455] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\Settings\\settings.dat", lpFilePart=0x0) returned 0x64 [0188.455] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0188.455] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.3dbuilder_8wekyb3d8bbwe\\settings\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0188.456] GetFileType (hFile=0x444) returned 0x1 [0188.456] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0188.456] GetFileType (hFile=0x444) returned 0x1 [0188.457] ReadFile (in: hFile=0x444, lpBuffer=0x234d538, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x234d538*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0188.501] CloseHandle (hObject=0x444) returned 1 [0188.501] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\Settings\\settings.dat", lpFilePart=0x0) returned 0x64 [0188.501] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0188.501] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.3dbuilder_8wekyb3d8bbwe\\settings\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0188.502] GetFileType (hFile=0x444) returned 0x1 [0188.502] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0188.502] GetFileType (hFile=0x444) returned 0x1 [0188.502] WriteFile (in: hFile=0x444, lpBuffer=0x218c9f8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x218c9f8*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0188.502] CloseHandle (hObject=0x444) returned 1 [0188.502] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\Settings\\settings.dat", lpFilePart=0x0) returned 0x64 [0188.502] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\Settings\\settings.dat.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\Settings\\settings.dat.xuy", lpFilePart=0x0) returned 0x68 [0188.502] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0188.503] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.3dbuilder_8wekyb3d8bbwe\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d4b4cf8, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x2d4b4cf8, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5c35408e, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0188.503] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0188.503] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.3dbuilder_8wekyb3d8bbwe\\settings\\settings.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\Settings\\settings.dat.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.3dbuilder_8wekyb3d8bbwe\\settings\\settings.dat.xuy")) returned 1 [0188.504] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0188.504] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\SystemAppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\SystemAppData", lpFilePart=0x0) returned 0x5c [0188.504] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\SystemAppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\SystemAppData\\", lpFilePart=0x0) returned 0x5d [0188.504] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\SystemAppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d81b0 [0188.504] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0188.504] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0188.505] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0188.505] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0188.505] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0188.505] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0188.505] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\SystemAppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\SystemAppData", lpFilePart=0x0) returned 0x5c [0188.505] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\SystemAppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\SystemAppData\\", lpFilePart=0x0) returned 0x5d [0188.505] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\SystemAppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d79d0 [0188.505] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0188.505] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0188.505] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0188.505] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0188.505] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0188.505] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0188.505] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\TempState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\TempState", lpFilePart=0x0) returned 0x58 [0188.506] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\TempState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\TempState\\", lpFilePart=0x0) returned 0x59 [0188.506] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\TempState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7fd0 [0188.506] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0188.506] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0188.506] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0188.506] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0188.506] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0188.506] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0188.506] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\TempState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\TempState", lpFilePart=0x0) returned 0x58 [0188.506] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\TempState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\TempState\\", lpFilePart=0x0) returned 0x59 [0188.506] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\TempState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d78b0 [0188.507] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0188.507] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0188.507] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0188.507] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0188.507] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0188.507] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0188.507] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy", lpFilePart=0x0) returned 0x55 [0188.507] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\", lpFilePart=0x0) returned 0x56 [0188.507] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d7eb0 [0188.507] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0188.507] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0188.508] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0188.508] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0188.508] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0188.508] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0188.508] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0188.508] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0188.508] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0188.509] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0188.509] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0188.509] FindClose (in: hFindFile=0x5d7eb0 | out: hFindFile=0x5d7eb0) returned 1 [0188.509] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0188.509] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0188.509] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0188.509] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy", lpFilePart=0x0) returned 0x55 [0188.509] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\", lpFilePart=0x0) returned 0x56 [0188.509] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d7a90 [0188.509] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0188.509] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0188.510] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0188.510] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0188.510] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0188.510] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0188.510] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0188.510] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0188.510] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0188.510] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0188.510] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0188.511] FindClose (in: hFindFile=0x5d7a90 | out: hFindFile=0x5d7a90) returned 1 [0188.511] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0188.511] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0188.511] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0188.511] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\AC", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\AC", lpFilePart=0x0) returned 0x58 [0188.511] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\AC\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\AC\\", lpFilePart=0x0) returned 0x59 [0188.511] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\AC\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7e50 [0188.512] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0188.512] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0188.512] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0188.512] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0188.512] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0188.512] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0188.512] FindClose (in: hFindFile=0x5d7e50 | out: hFindFile=0x5d7e50) returned 1 [0188.513] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0188.513] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0188.513] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0188.513] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\AC", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\AC", lpFilePart=0x0) returned 0x58 [0188.513] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\AC\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\AC\\", lpFilePart=0x0) returned 0x59 [0188.513] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\AC\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7550 [0188.514] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0188.514] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0188.515] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0188.515] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0188.515] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0188.515] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0188.515] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0188.516] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0188.516] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0188.516] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0188.516] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\AC\\INetCache", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\AC\\INetCache", lpFilePart=0x0) returned 0x62 [0188.516] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\AC\\INetCache\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\AC\\INetCache\\", lpFilePart=0x0) returned 0x63 [0188.516] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\AC\\INetCache\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7f10 [0188.520] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0188.520] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0188.521] FindClose (in: hFindFile=0x5d7f10 | out: hFindFile=0x5d7f10) returned 1 [0188.521] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0188.521] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0188.521] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0188.521] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\AC\\INetCache", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\AC\\INetCache", lpFilePart=0x0) returned 0x62 [0188.521] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\AC\\INetCache\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\AC\\INetCache\\", lpFilePart=0x0) returned 0x63 [0188.521] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\AC\\INetCache\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d78b0 [0188.521] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0188.521] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0188.521] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0188.521] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0188.521] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0188.521] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0188.521] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\AC\\INetCookies", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\AC\\INetCookies", lpFilePart=0x0) returned 0x64 [0188.521] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\AC\\INetCookies\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\AC\\INetCookies\\", lpFilePart=0x0) returned 0x65 [0188.522] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\AC\\INetCookies\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7550 [0188.522] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0188.522] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0188.522] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0188.522] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0188.522] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0188.522] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0188.522] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\AC\\INetCookies", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\AC\\INetCookies", lpFilePart=0x0) returned 0x64 [0188.523] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\AC\\INetCookies\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\AC\\INetCookies\\", lpFilePart=0x0) returned 0x65 [0188.523] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\AC\\INetCookies\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d78b0 [0188.523] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0188.523] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0188.523] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0188.523] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0188.523] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0188.523] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0188.523] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\AC\\INetHistory", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\AC\\INetHistory", lpFilePart=0x0) returned 0x64 [0188.523] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\AC\\INetHistory\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\AC\\INetHistory\\", lpFilePart=0x0) returned 0x65 [0188.523] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\AC\\INetHistory\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d75b0 [0188.524] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0188.524] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0188.524] FindClose (in: hFindFile=0x5d75b0 | out: hFindFile=0x5d75b0) returned 1 [0188.524] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0188.524] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0188.524] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0188.524] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\AC\\INetHistory", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\AC\\INetHistory", lpFilePart=0x0) returned 0x64 [0188.524] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\AC\\INetHistory\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\AC\\INetHistory\\", lpFilePart=0x0) returned 0x65 [0188.524] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\AC\\INetHistory\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d81b0 [0188.524] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0188.524] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0188.525] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0188.525] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0188.525] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0188.525] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0188.525] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\AC\\Temp", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\AC\\Temp", lpFilePart=0x0) returned 0x5d [0188.525] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\AC\\Temp\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\AC\\Temp\\", lpFilePart=0x0) returned 0x5e [0188.525] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\AC\\Temp\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7a30 [0188.525] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0188.525] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0188.525] FindClose (in: hFindFile=0x5d7a30 | out: hFindFile=0x5d7a30) returned 1 [0188.525] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0188.525] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0188.525] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0188.525] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\AC\\Temp", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\AC\\Temp", lpFilePart=0x0) returned 0x5d [0188.526] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\AC\\Temp\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\AC\\Temp\\", lpFilePart=0x0) returned 0x5e [0188.526] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\AC\\Temp\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7c70 [0188.526] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0188.526] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0188.526] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0188.526] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0188.526] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0188.526] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0188.526] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\AppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\AppData", lpFilePart=0x0) returned 0x5d [0188.526] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\AppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\AppData\\", lpFilePart=0x0) returned 0x5e [0188.526] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\AppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d78b0 [0188.528] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0188.528] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0188.528] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0188.529] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0188.529] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0188.529] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0188.529] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\AppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\AppData", lpFilePart=0x0) returned 0x5d [0188.529] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\AppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\AppData\\", lpFilePart=0x0) returned 0x5e [0188.529] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\AppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7f10 [0188.529] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0188.529] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0188.529] FindClose (in: hFindFile=0x5d7f10 | out: hFindFile=0x5d7f10) returned 1 [0188.529] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0188.529] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0188.529] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0188.529] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\LocalCache", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\LocalCache", lpFilePart=0x0) returned 0x60 [0188.530] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\LocalCache\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\LocalCache\\", lpFilePart=0x0) returned 0x61 [0188.530] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\LocalCache\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d78b0 [0188.530] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0188.530] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0188.530] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0188.530] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0188.530] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0188.530] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0188.530] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\LocalCache", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\LocalCache", lpFilePart=0x0) returned 0x60 [0188.531] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\LocalCache\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\LocalCache\\", lpFilePart=0x0) returned 0x61 [0188.531] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\LocalCache\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d78b0 [0188.531] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0188.531] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0188.531] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0188.531] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0188.531] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0188.531] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0188.531] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\LocalState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\LocalState", lpFilePart=0x0) returned 0x60 [0188.531] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\LocalState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\LocalState\\", lpFilePart=0x0) returned 0x61 [0188.531] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\LocalState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d81b0 [0188.532] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0188.532] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0188.532] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0188.532] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0188.532] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0188.532] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0188.532] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\LocalState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\LocalState", lpFilePart=0x0) returned 0x60 [0188.532] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\LocalState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\LocalState\\", lpFilePart=0x0) returned 0x61 [0188.532] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\LocalState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7af0 [0188.532] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0188.532] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0188.532] FindClose (in: hFindFile=0x5d7af0 | out: hFindFile=0x5d7af0) returned 1 [0188.532] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0188.533] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0188.533] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0188.533] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Microsoft.AAD.BrokerPlugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Microsoft.AAD.BrokerPlugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy", lpFilePart=0x0) returned 0xa1 [0188.533] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Microsoft.AAD.BrokerPlugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Microsoft.AAD.BrokerPlugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\", lpFilePart=0x0) returned 0xa2 [0188.533] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Microsoft.AAD.BrokerPlugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d75b0 [0188.533] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0188.533] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0188.533] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0188.534] FindClose (in: hFindFile=0x5d75b0 | out: hFindFile=0x5d75b0) returned 1 [0188.534] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0188.534] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0188.534] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0188.534] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Microsoft.AAD.BrokerPlugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Microsoft.AAD.BrokerPlugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy", lpFilePart=0x0) returned 0xa1 [0188.534] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Microsoft.AAD.BrokerPlugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Microsoft.AAD.BrokerPlugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\", lpFilePart=0x0) returned 0xa2 [0188.534] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Microsoft.AAD.BrokerPlugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d81b0 [0188.534] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0188.534] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0188.534] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0188.534] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0188.534] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0188.534] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0188.534] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0188.534] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Microsoft.AAD.BrokerPlugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Microsoft.AAD.BrokerPlugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore", lpFilePart=0x0) returned 0xb1 [0188.535] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Microsoft.AAD.BrokerPlugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Microsoft.AAD.BrokerPlugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\", lpFilePart=0x0) returned 0xb2 [0188.535] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Microsoft.AAD.BrokerPlugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7a90 [0188.657] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0188.657] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0188.657] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0188.657] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0188.657] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0188.657] FindClose (in: hFindFile=0x5d7a90 | out: hFindFile=0x5d7a90) returned 1 [0188.658] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0188.658] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0188.658] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0188.658] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Microsoft.AAD.BrokerPlugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Microsoft.AAD.BrokerPlugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore", lpFilePart=0x0) returned 0xb1 [0188.658] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Microsoft.AAD.BrokerPlugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Microsoft.AAD.BrokerPlugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\", lpFilePart=0x0) returned 0xb2 [0188.658] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Microsoft.AAD.BrokerPlugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d78b0 [0188.659] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0188.659] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0188.660] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0188.660] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0188.660] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0188.660] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0188.660] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0188.661] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0188.661] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Microsoft.AAD.BrokerPlugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Microsoft.AAD.BrokerPlugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xc5 [0188.661] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0188.661] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Microsoft.AAD.BrokerPlugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\microsoft.aad.brokerplugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat"), fInfoLevelId=0x0, lpFileInformation=0x21eb160 | out: lpFileInformation=0x21eb160*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xafe0504c, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xafe77721, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xafe77721, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x4000)) returned 1 [0188.665] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0188.665] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Microsoft.AAD.BrokerPlugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Microsoft.AAD.BrokerPlugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xc5 [0188.665] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0188.665] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Microsoft.AAD.BrokerPlugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\microsoft.aad.brokerplugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat"), fInfoLevelId=0x0, lpFileInformation=0x21eb3b0 | out: lpFileInformation=0x21eb3b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xafe0504c, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xafe77721, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xafe77721, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x4000)) returned 1 [0188.665] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0188.666] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Microsoft.AAD.BrokerPlugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Microsoft.AAD.BrokerPlugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xc5 [0188.666] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0188.666] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Microsoft.AAD.BrokerPlugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\microsoft.aad.brokerplugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0188.667] GetFileType (hFile=0x444) returned 0x1 [0188.667] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0188.667] GetFileType (hFile=0x444) returned 0x1 [0188.667] ReadFile (in: hFile=0x444, lpBuffer=0x21ed980, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x21ed980*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0188.679] CloseHandle (hObject=0x444) returned 1 [0188.679] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Microsoft.AAD.BrokerPlugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Microsoft.AAD.BrokerPlugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xc5 [0188.679] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0188.679] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Microsoft.AAD.BrokerPlugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\microsoft.aad.brokerplugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0188.679] GetFileType (hFile=0x444) returned 0x1 [0188.680] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0188.680] GetFileType (hFile=0x444) returned 0x1 [0188.680] WriteFile (in: hFile=0x444, lpBuffer=0x21eb5e0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x21eb5e0*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0188.680] CloseHandle (hObject=0x444) returned 1 [0188.680] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Microsoft.AAD.BrokerPlugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Microsoft.AAD.BrokerPlugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xc5 [0188.680] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Microsoft.AAD.BrokerPlugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Microsoft.AAD.BrokerPlugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.xuy", lpFilePart=0x0) returned 0xc9 [0188.680] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0188.680] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Microsoft.AAD.BrokerPlugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\microsoft.aad.brokerplugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xafe0504c, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xafe77721, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x5c4f7da7, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x4000)) returned 1 [0188.680] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0188.680] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Microsoft.AAD.BrokerPlugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\microsoft.aad.brokerplugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Microsoft.AAD.BrokerPlugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\microsoft.aad.brokerplugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.xuy")) returned 1 [0188.682] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Microsoft.AAD.BrokerPlugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Microsoft.AAD.BrokerPlugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xca [0188.682] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0188.682] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Microsoft.AAD.BrokerPlugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\microsoft.aad.brokerplugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x226a120 | out: lpFileInformation=0x226a120*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xafe2b28c, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xafe2b28c, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xafe2b28c, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x4000)) returned 1 [0188.682] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0188.682] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Microsoft.AAD.BrokerPlugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Microsoft.AAD.BrokerPlugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xca [0188.682] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0188.682] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Microsoft.AAD.BrokerPlugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\microsoft.aad.brokerplugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x226a388 | out: lpFileInformation=0x226a388*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xafe2b28c, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xafe2b28c, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xafe2b28c, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x4000)) returned 1 [0188.682] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0188.682] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Microsoft.AAD.BrokerPlugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Microsoft.AAD.BrokerPlugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xca [0188.682] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0188.682] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Microsoft.AAD.BrokerPlugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\microsoft.aad.brokerplugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0188.683] GetFileType (hFile=0x444) returned 0x1 [0188.683] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0188.683] GetFileType (hFile=0x444) returned 0x1 [0188.683] ReadFile (in: hFile=0x444, lpBuffer=0x226c988, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x226c988*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0188.714] CloseHandle (hObject=0x444) returned 1 [0188.714] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Microsoft.AAD.BrokerPlugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Microsoft.AAD.BrokerPlugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xca [0188.714] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0188.714] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Microsoft.AAD.BrokerPlugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\microsoft.aad.brokerplugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0188.715] GetFileType (hFile=0x444) returned 0x1 [0188.715] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0188.715] GetFileType (hFile=0x444) returned 0x1 [0188.715] WriteFile (in: hFile=0x444, lpBuffer=0x226a5d0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x226a5d0*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0188.716] CloseHandle (hObject=0x444) returned 1 [0188.716] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Microsoft.AAD.BrokerPlugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Microsoft.AAD.BrokerPlugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xca [0188.716] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Microsoft.AAD.BrokerPlugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Microsoft.AAD.BrokerPlugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1.xuy", lpFilePart=0x0) returned 0xce [0188.716] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0188.716] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Microsoft.AAD.BrokerPlugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\microsoft.aad.brokerplugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xafe2b28c, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xafe2b28c, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x5c55ee88, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x4000)) returned 1 [0188.716] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0188.716] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Microsoft.AAD.BrokerPlugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\microsoft.aad.brokerplugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Microsoft.AAD.BrokerPlugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\microsoft.aad.brokerplugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log1.xuy")) returned 1 [0188.718] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Microsoft.AAD.BrokerPlugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Microsoft.AAD.BrokerPlugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xca [0188.718] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0188.718] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Microsoft.AAD.BrokerPlugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\microsoft.aad.brokerplugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x22e9158 | out: lpFileInformation=0x22e9158*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xafe2b28c, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xafe2b28c, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xafe2b28c, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0188.718] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0188.718] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Microsoft.AAD.BrokerPlugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Microsoft.AAD.BrokerPlugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xca [0188.718] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0188.719] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Microsoft.AAD.BrokerPlugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\microsoft.aad.brokerplugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0188.719] GetFileType (hFile=0x444) returned 0x1 [0188.719] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0188.719] GetFileType (hFile=0x444) returned 0x1 [0188.719] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x0 [0188.719] CloseHandle (hObject=0x444) returned 1 [0188.733] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Microsoft.AAD.BrokerPlugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Microsoft.AAD.BrokerPlugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xca [0188.733] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0188.733] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Microsoft.AAD.BrokerPlugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\microsoft.aad.brokerplugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0188.735] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb070) returned 1 [0188.735] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Microsoft.AAD.BrokerPlugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbcf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Microsoft.AAD.BrokerPlugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xca [0188.735] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0188.735] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Microsoft.AAD.BrokerPlugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\microsoft.aad.brokerplugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x3bc270 | out: lpFileInformation=0x3bc270*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xafe2b28c, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xafe2b28c, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xafe2b28c, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0188.736] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc150) returned 1 [0188.736] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Microsoft.AAD.BrokerPlugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbd10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Microsoft.AAD.BrokerPlugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xca [0188.736] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0188.736] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Microsoft.AAD.BrokerPlugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\microsoft.aad.brokerplugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x2360290 | out: lpFileInformation=0x2360290*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xafe2b28c, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xafe2b28c, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xafe2b28c, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0188.736] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc150) returned 1 [0188.736] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Microsoft.AAD.BrokerPlugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Microsoft.AAD.BrokerPlugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xca [0188.736] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc050) returned 1 [0188.736] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Microsoft.AAD.BrokerPlugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\microsoft.aad.brokerplugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0188.736] GetFileType (hFile=0x444) returned 0x1 [0188.736] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbfc0) returned 1 [0188.737] GetFileType (hFile=0x444) returned 0x1 [0188.737] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc1e8 | out: lpFileSizeHigh=0x3bc1e8*=0x0) returned 0x0 [0188.737] CloseHandle (hObject=0x444) returned 1 [0188.785] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Microsoft.AAD.BrokerPlugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Microsoft.AAD.BrokerPlugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xca [0188.785] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc050) returned 1 [0188.785] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Microsoft.AAD.BrokerPlugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\microsoft.aad.brokerplugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0188.787] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8ae0) returned 1 [0188.787] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0188.787] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\RoamingState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\RoamingState", lpFilePart=0x0) returned 0x62 [0188.788] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\RoamingState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\RoamingState\\", lpFilePart=0x0) returned 0x63 [0188.788] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\RoamingState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d79d0 [0188.788] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0188.788] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0188.788] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0188.788] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0188.788] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0188.788] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0188.788] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\RoamingState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\RoamingState", lpFilePart=0x0) returned 0x62 [0188.788] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\RoamingState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\RoamingState\\", lpFilePart=0x0) returned 0x63 [0188.789] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\RoamingState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d78b0 [0188.789] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0188.789] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0188.789] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0188.789] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0188.789] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0188.789] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0188.789] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Settings", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Settings", lpFilePart=0x0) returned 0x5e [0188.789] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Settings\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Settings\\", lpFilePart=0x0) returned 0x5f [0188.789] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Settings\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7a30 [0188.979] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0188.980] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0188.980] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0188.980] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0188.980] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0188.980] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0188.980] FindClose (in: hFindFile=0x5d7a30 | out: hFindFile=0x5d7a30) returned 1 [0188.981] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0188.981] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0188.981] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0188.981] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Settings", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Settings", lpFilePart=0x0) returned 0x5e [0188.981] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Settings\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Settings\\", lpFilePart=0x0) returned 0x5f [0188.981] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Settings\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d79d0 [0188.982] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0188.982] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0188.982] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0188.982] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0188.983] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0188.983] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0188.983] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0188.984] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0188.984] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0188.984] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Settings\\roaming.lock", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Settings\\roaming.lock", lpFilePart=0x0) returned 0x6b [0188.984] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0188.984] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\settings\\roaming.lock"), fInfoLevelId=0x0, lpFileInformation=0x21d9d68 | out: lpFileInformation=0x21d9d68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf8a7b49, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xaf8a7b49, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xaf8a7b49, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0188.985] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0188.985] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Settings\\roaming.lock", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Settings\\roaming.lock", lpFilePart=0x0) returned 0x6b [0188.985] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0188.985] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\settings\\roaming.lock"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0188.985] GetFileType (hFile=0x444) returned 0x1 [0188.985] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0188.985] GetFileType (hFile=0x444) returned 0x1 [0188.985] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0x0 [0188.985] CloseHandle (hObject=0x444) returned 1 [0189.021] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Settings\\roaming.lock", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Settings\\roaming.lock", lpFilePart=0x0) returned 0x6b [0189.021] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0189.021] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\settings\\roaming.lock"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0189.023] GetFileType (hFile=0x444) returned 0x1 [0189.023] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0189.023] GetFileType (hFile=0x444) returned 0x1 [0189.023] WriteFile (in: hFile=0x444, lpBuffer=0x22501d0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x3be628, lpOverlapped=0x0 | out: lpBuffer=0x22501d0*, lpNumberOfBytesWritten=0x3be628*=0x10, lpOverlapped=0x0) returned 1 [0189.039] CloseHandle (hObject=0x444) returned 1 [0189.040] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Settings\\roaming.lock", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Settings\\roaming.lock", lpFilePart=0x0) returned 0x6b [0189.040] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Settings\\roaming.lock.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Settings\\roaming.lock.xuy", lpFilePart=0x0) returned 0x6f [0189.040] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0189.040] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\settings\\roaming.lock"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf8a7b49, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xaf8a7b49, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x5c87486b, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0189.040] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0189.040] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\settings\\roaming.lock"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Settings\\roaming.lock.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\settings\\roaming.lock.xuy")) returned 1 [0189.041] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Settings\\settings.dat", lpFilePart=0x0) returned 0x6b [0189.041] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0189.041] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x2251510 | out: lpFileInformation=0x2251510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf8a7b49, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0x62f0a7ff, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x62f0a7ff, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0189.041] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0189.041] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Settings\\settings.dat", lpFilePart=0x0) returned 0x6b [0189.041] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0189.042] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x22516a0 | out: lpFileInformation=0x22516a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf8a7b49, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0x62f0a7ff, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x62f0a7ff, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0189.042] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0189.042] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Settings\\settings.dat", lpFilePart=0x0) returned 0x6b [0189.042] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0189.042] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\settings\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0189.043] GetFileType (hFile=0x444) returned 0x1 [0189.043] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0189.043] GetFileType (hFile=0x444) returned 0x1 [0189.043] ReadFile (in: hFile=0x444, lpBuffer=0x2253af0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x2253af0*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0189.054] CloseHandle (hObject=0x444) returned 1 [0189.054] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Settings\\settings.dat", lpFilePart=0x0) returned 0x6b [0189.054] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0189.055] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\settings\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0189.055] GetFileType (hFile=0x444) returned 0x1 [0189.055] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0189.055] GetFileType (hFile=0x444) returned 0x1 [0189.055] WriteFile (in: hFile=0x444, lpBuffer=0x2251810*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x2251810*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0189.055] CloseHandle (hObject=0x444) returned 1 [0189.055] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Settings\\settings.dat", lpFilePart=0x0) returned 0x6b [0189.055] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Settings\\settings.dat.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Settings\\settings.dat.xuy", lpFilePart=0x0) returned 0x6f [0189.055] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0189.055] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf8a7b49, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0x62f0a7ff, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x5c89a988, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0189.056] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0189.056] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\settings\\settings.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Settings\\settings.dat.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\settings\\settings.dat.xuy")) returned 1 [0189.057] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", lpFilePart=0x0) returned 0x70 [0189.057] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0189.057] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\settings\\settings.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x22cffa8 | out: lpFileInformation=0x22cffa8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x62e71eb2, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x62e71eb2, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x62e71eb2, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0189.057] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0189.057] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", lpFilePart=0x0) returned 0x70 [0189.057] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0189.057] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\settings\\settings.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x22d0150 | out: lpFileInformation=0x22d0150*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x62e71eb2, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x62e71eb2, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x62e71eb2, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0189.057] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0189.057] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", lpFilePart=0x0) returned 0x70 [0189.057] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0189.057] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\settings\\settings.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0189.059] GetFileType (hFile=0x444) returned 0x1 [0189.059] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0189.059] GetFileType (hFile=0x444) returned 0x1 [0189.059] ReadFile (in: hFile=0x444, lpBuffer=0x22d25d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x22d25d0*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0189.080] CloseHandle (hObject=0x444) returned 1 [0189.080] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", lpFilePart=0x0) returned 0x70 [0189.080] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0189.080] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\settings\\settings.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0189.080] GetFileType (hFile=0x444) returned 0x1 [0189.080] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0189.080] GetFileType (hFile=0x444) returned 0x1 [0189.080] WriteFile (in: hFile=0x444, lpBuffer=0x22d02d8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x22d02d8*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0189.081] CloseHandle (hObject=0x444) returned 1 [0189.083] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", lpFilePart=0x0) returned 0x70 [0189.084] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Settings\\settings.dat.LOG1.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Settings\\settings.dat.LOG1.xuy", lpFilePart=0x0) returned 0x74 [0189.084] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0189.084] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\settings\\settings.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x62e71eb2, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x62e71eb2, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x5c8c0be1, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0189.084] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0189.084] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\settings\\settings.dat.log1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Settings\\settings.dat.LOG1.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\settings\\settings.dat.log1.xuy")) returned 1 [0189.085] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", lpFilePart=0x0) returned 0x70 [0189.085] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0189.085] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\settings\\settings.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x234ead0 | out: lpFileInformation=0x234ead0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x62e71eb2, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x62e71eb2, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x62e71eb2, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0189.085] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0189.085] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", lpFilePart=0x0) returned 0x70 [0189.085] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0189.085] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\settings\\settings.dat.log2"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0189.086] GetFileType (hFile=0x444) returned 0x1 [0189.086] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0189.086] GetFileType (hFile=0x444) returned 0x1 [0189.086] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0x0 [0189.086] CloseHandle (hObject=0x444) returned 1 [0189.141] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", lpFilePart=0x0) returned 0x70 [0189.141] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0189.141] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\settings\\settings.dat.log2"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0189.142] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb0e0) returned 1 [0189.142] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", lpFilePart=0x0) returned 0x70 [0189.142] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc200) returned 1 [0189.142] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\settings\\settings.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x3bc2e0 | out: lpFileInformation=0x3bc2e0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x62e71eb2, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x62e71eb2, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x62e71eb2, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0189.143] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1c0) returned 1 [0189.143] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbd80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", lpFilePart=0x0) returned 0x70 [0189.143] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc200) returned 1 [0189.143] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\settings\\settings.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x21c5398 | out: lpFileInformation=0x21c5398*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x62e71eb2, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x62e71eb2, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x62e71eb2, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0189.143] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1c0) returned 1 [0189.143] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", lpFilePart=0x0) returned 0x70 [0189.143] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0c0) returned 1 [0189.143] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\settings\\settings.dat.log2"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0189.143] GetFileType (hFile=0x444) returned 0x1 [0189.143] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc030) returned 1 [0189.143] GetFileType (hFile=0x444) returned 0x1 [0189.143] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc258 | out: lpFileSizeHigh=0x3bc258*=0x0) returned 0x0 [0189.143] CloseHandle (hObject=0x444) returned 1 [0189.179] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", lpFilePart=0x0) returned 0x70 [0189.179] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0c0) returned 1 [0189.179] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\settings\\settings.dat.log2"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0189.183] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8b50) returned 1 [0189.184] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0189.184] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\SystemAppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\SystemAppData", lpFilePart=0x0) returned 0x63 [0189.184] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\SystemAppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\SystemAppData\\", lpFilePart=0x0) returned 0x64 [0189.184] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\SystemAppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d73d0 [0189.185] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0189.185] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0189.185] FindClose (in: hFindFile=0x5d73d0 | out: hFindFile=0x5d73d0) returned 1 [0189.185] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0189.185] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0189.185] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0189.185] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\SystemAppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\SystemAppData", lpFilePart=0x0) returned 0x63 [0189.185] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\SystemAppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\SystemAppData\\", lpFilePart=0x0) returned 0x64 [0189.185] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\SystemAppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d79d0 [0189.185] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0189.185] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0189.186] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0189.186] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0189.186] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0189.186] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0189.186] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\TempState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\TempState", lpFilePart=0x0) returned 0x5f [0189.186] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\TempState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\TempState\\", lpFilePart=0x0) returned 0x60 [0189.186] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\TempState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7550 [0189.186] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0189.186] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0189.186] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0189.186] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0189.186] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0189.186] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0189.186] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\TempState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\TempState", lpFilePart=0x0) returned 0x5f [0189.186] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\TempState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\TempState\\", lpFilePart=0x0) returned 0x60 [0189.187] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\TempState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d81b0 [0189.187] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0189.187] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0189.187] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0189.187] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0189.187] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0189.187] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0189.187] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy", lpFilePart=0x0) returned 0x54 [0189.187] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\", lpFilePart=0x0) returned 0x55 [0189.187] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d7d30 [0189.192] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0189.193] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0189.193] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0189.193] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0189.193] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0189.193] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0189.193] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0189.193] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0189.193] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0189.194] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0189.194] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0189.194] FindClose (in: hFindFile=0x5d7d30 | out: hFindFile=0x5d7d30) returned 1 [0189.194] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0189.195] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0189.195] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0189.195] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy", lpFilePart=0x0) returned 0x54 [0189.195] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\", lpFilePart=0x0) returned 0x55 [0189.195] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d79d0 [0189.196] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0189.196] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0189.196] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0189.196] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0189.196] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0189.197] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0189.197] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0189.197] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0189.197] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0189.197] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0189.197] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0189.197] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0189.198] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0189.198] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0189.198] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0189.198] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\AC", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\AC", lpFilePart=0x0) returned 0x57 [0189.198] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\AC\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\AC\\", lpFilePart=0x0) returned 0x58 [0189.198] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\AC\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7d30 [0189.209] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0189.210] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0189.210] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0189.210] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0189.210] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0189.210] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0189.210] FindClose (in: hFindFile=0x5d7d30 | out: hFindFile=0x5d7d30) returned 1 [0189.211] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0189.211] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0189.211] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0189.211] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\AC", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\AC", lpFilePart=0x0) returned 0x57 [0189.211] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\AC\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\AC\\", lpFilePart=0x0) returned 0x58 [0189.211] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\AC\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d79d0 [0189.212] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0189.212] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0189.213] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0189.213] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0189.213] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0189.213] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0189.213] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0189.213] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0189.214] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0189.214] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0189.214] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\AC\\INetCache", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\AC\\INetCache", lpFilePart=0x0) returned 0x61 [0189.214] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\AC\\INetCache\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\AC\\INetCache\\", lpFilePart=0x0) returned 0x62 [0189.214] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\AC\\INetCache\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7d90 [0189.222] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0189.222] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0189.222] FindClose (in: hFindFile=0x5d7d90 | out: hFindFile=0x5d7d90) returned 1 [0189.222] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0189.222] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0189.222] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0189.222] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\AC\\INetCache", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\AC\\INetCache", lpFilePart=0x0) returned 0x61 [0189.222] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\AC\\INetCache\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\AC\\INetCache\\", lpFilePart=0x0) returned 0x62 [0189.222] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\AC\\INetCache\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7cd0 [0189.222] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0189.223] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0189.223] FindClose (in: hFindFile=0x5d7cd0 | out: hFindFile=0x5d7cd0) returned 1 [0189.223] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0189.223] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0189.223] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0189.223] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\AC\\INetCookies", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\AC\\INetCookies", lpFilePart=0x0) returned 0x63 [0189.223] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\AC\\INetCookies\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\AC\\INetCookies\\", lpFilePart=0x0) returned 0x64 [0189.223] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\AC\\INetCookies\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7610 [0189.223] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0189.223] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0189.223] FindClose (in: hFindFile=0x5d7610 | out: hFindFile=0x5d7610) returned 1 [0189.223] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0189.223] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0189.223] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0189.224] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\AC\\INetCookies", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\AC\\INetCookies", lpFilePart=0x0) returned 0x63 [0189.224] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\AC\\INetCookies\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\AC\\INetCookies\\", lpFilePart=0x0) returned 0x64 [0189.224] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\AC\\INetCookies\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d81b0 [0189.224] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0189.224] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0189.224] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0189.224] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0189.224] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0189.224] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0189.224] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\AC\\INetHistory", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\AC\\INetHistory", lpFilePart=0x0) returned 0x63 [0189.224] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\AC\\INetHistory\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\AC\\INetHistory\\", lpFilePart=0x0) returned 0x64 [0189.224] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\AC\\INetHistory\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d81b0 [0189.224] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0189.225] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0189.225] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0189.225] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0189.225] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0189.225] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0189.225] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\AC\\INetHistory", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\AC\\INetHistory", lpFilePart=0x0) returned 0x63 [0189.225] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\AC\\INetHistory\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\AC\\INetHistory\\", lpFilePart=0x0) returned 0x64 [0189.225] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\AC\\INetHistory\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d81b0 [0189.225] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0189.225] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0189.225] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0189.225] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0189.225] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0189.225] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0189.226] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\AC\\Temp", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\AC\\Temp", lpFilePart=0x0) returned 0x5c [0189.226] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\AC\\Temp\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\AC\\Temp\\", lpFilePart=0x0) returned 0x5d [0189.226] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\AC\\Temp\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d75b0 [0189.226] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0189.226] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0189.226] FindClose (in: hFindFile=0x5d75b0 | out: hFindFile=0x5d75b0) returned 1 [0189.226] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0189.226] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0189.226] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0189.226] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\AC\\Temp", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\AC\\Temp", lpFilePart=0x0) returned 0x5c [0189.226] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\AC\\Temp\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\AC\\Temp\\", lpFilePart=0x0) returned 0x5d [0189.226] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\AC\\Temp\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d79d0 [0189.227] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0189.227] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0189.227] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0189.227] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0189.227] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0189.227] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0189.227] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\AppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\AppData", lpFilePart=0x0) returned 0x5c [0189.227] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\AppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\AppData\\", lpFilePart=0x0) returned 0x5d [0189.227] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\AppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7c70 [0189.229] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0189.229] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0189.229] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0189.229] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0189.229] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0189.229] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0189.229] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\AppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\AppData", lpFilePart=0x0) returned 0x5c [0189.229] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\AppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\AppData\\", lpFilePart=0x0) returned 0x5d [0189.230] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\AppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d79d0 [0189.230] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0189.230] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0189.230] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0189.230] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0189.230] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0189.230] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0189.230] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\LocalCache", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\LocalCache", lpFilePart=0x0) returned 0x5f [0189.230] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\LocalCache\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\LocalCache\\", lpFilePart=0x0) returned 0x60 [0189.230] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\LocalCache\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7d90 [0189.230] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0189.231] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0189.231] FindClose (in: hFindFile=0x5d7d90 | out: hFindFile=0x5d7d90) returned 1 [0189.231] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0189.231] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0189.231] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0189.231] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\LocalCache", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\LocalCache", lpFilePart=0x0) returned 0x5f [0189.231] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\LocalCache\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\LocalCache\\", lpFilePart=0x0) returned 0x60 [0189.231] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\LocalCache\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7670 [0189.231] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0189.231] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0189.231] FindClose (in: hFindFile=0x5d7670 | out: hFindFile=0x5d7670) returned 1 [0189.231] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0189.231] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0189.231] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0189.232] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\LocalState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\LocalState", lpFilePart=0x0) returned 0x5f [0189.232] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\LocalState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\LocalState\\", lpFilePart=0x0) returned 0x60 [0189.232] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\LocalState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7e50 [0189.232] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0189.232] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0189.232] FindClose (in: hFindFile=0x5d7e50 | out: hFindFile=0x5d7e50) returned 1 [0189.232] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0189.232] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0189.232] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0189.232] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\LocalState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\LocalState", lpFilePart=0x0) returned 0x5f [0189.232] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\LocalState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\LocalState\\", lpFilePart=0x0) returned 0x60 [0189.232] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\LocalState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d78b0 [0189.232] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0189.233] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0189.233] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0189.233] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0189.233] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0189.233] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0189.233] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Microsoft.AccountsControl_10.0.10240.16384_neutral__cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Microsoft.AccountsControl_10.0.10240.16384_neutral__cw5n1h2txyewy", lpFilePart=0x0) returned 0x96 [0189.233] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Microsoft.AccountsControl_10.0.10240.16384_neutral__cw5n1h2txyewy\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Microsoft.AccountsControl_10.0.10240.16384_neutral__cw5n1h2txyewy\\", lpFilePart=0x0) returned 0x97 [0189.233] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Microsoft.AccountsControl_10.0.10240.16384_neutral__cw5n1h2txyewy\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7c70 [0189.233] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0189.233] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0189.234] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0189.234] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0189.234] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0189.234] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0189.234] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0189.234] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Microsoft.AccountsControl_10.0.10240.16384_neutral__cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Microsoft.AccountsControl_10.0.10240.16384_neutral__cw5n1h2txyewy", lpFilePart=0x0) returned 0x96 [0189.234] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Microsoft.AccountsControl_10.0.10240.16384_neutral__cw5n1h2txyewy\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Microsoft.AccountsControl_10.0.10240.16384_neutral__cw5n1h2txyewy\\", lpFilePart=0x0) returned 0x97 [0189.234] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Microsoft.AccountsControl_10.0.10240.16384_neutral__cw5n1h2txyewy\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7eb0 [0189.234] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0189.234] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0189.234] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0189.234] FindClose (in: hFindFile=0x5d7eb0 | out: hFindFile=0x5d7eb0) returned 1 [0189.234] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0189.234] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0189.235] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0189.235] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Microsoft.AccountsControl_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Microsoft.AccountsControl_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore", lpFilePart=0x0) returned 0xa6 [0189.235] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Microsoft.AccountsControl_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Microsoft.AccountsControl_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\", lpFilePart=0x0) returned 0xa7 [0189.235] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Microsoft.AccountsControl_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7cd0 [0189.239] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0189.239] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0189.239] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0189.239] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0189.239] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0189.239] FindClose (in: hFindFile=0x5d7cd0 | out: hFindFile=0x5d7cd0) returned 1 [0189.240] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0189.240] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0189.240] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0189.240] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Microsoft.AccountsControl_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Microsoft.AccountsControl_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore", lpFilePart=0x0) returned 0xa6 [0189.240] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Microsoft.AccountsControl_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Microsoft.AccountsControl_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\", lpFilePart=0x0) returned 0xa7 [0189.240] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Microsoft.AccountsControl_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7fd0 [0189.241] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0189.241] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0189.241] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0189.241] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0189.241] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0189.242] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0189.242] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0189.243] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0189.243] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Microsoft.AccountsControl_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Microsoft.AccountsControl_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xba [0189.243] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0189.243] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Microsoft.AccountsControl_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\microsoft.accountscontrol_10.0.10240.16384_neutral__cw5n1h2txyewy\\activationstore\\activationstore.dat"), fInfoLevelId=0x0, lpFileInformation=0x225d468 | out: lpFileInformation=0x225d468*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0afbd09, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb0b6e49a, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xb0b6e49a, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x10000)) returned 1 [0189.247] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0189.247] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Microsoft.AccountsControl_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Microsoft.AccountsControl_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xba [0189.247] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0189.247] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Microsoft.AccountsControl_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\microsoft.accountscontrol_10.0.10240.16384_neutral__cw5n1h2txyewy\\activationstore\\activationstore.dat"), fInfoLevelId=0x0, lpFileInformation=0x225d6a0 | out: lpFileInformation=0x225d6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0afbd09, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb0b6e49a, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xb0b6e49a, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x10000)) returned 1 [0189.247] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0189.247] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Microsoft.AccountsControl_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Microsoft.AccountsControl_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xba [0189.247] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0189.247] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Microsoft.AccountsControl_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\microsoft.accountscontrol_10.0.10240.16384_neutral__cw5n1h2txyewy\\activationstore\\activationstore.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0189.248] GetFileType (hFile=0x444) returned 0x1 [0189.248] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0189.248] GetFileType (hFile=0x444) returned 0x1 [0189.248] ReadFile (in: hFile=0x444, lpBuffer=0x225fc40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x225fc40*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0189.287] CloseHandle (hObject=0x444) returned 1 [0189.287] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Microsoft.AccountsControl_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Microsoft.AccountsControl_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xba [0189.287] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0189.287] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Microsoft.AccountsControl_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\microsoft.accountscontrol_10.0.10240.16384_neutral__cw5n1h2txyewy\\activationstore\\activationstore.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0189.288] GetFileType (hFile=0x444) returned 0x1 [0189.288] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0189.288] GetFileType (hFile=0x444) returned 0x1 [0189.288] WriteFile (in: hFile=0x444, lpBuffer=0x225d8b8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x225d8b8*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0189.288] CloseHandle (hObject=0x444) returned 1 [0189.288] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Microsoft.AccountsControl_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Microsoft.AccountsControl_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xba [0189.288] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Microsoft.AccountsControl_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Microsoft.AccountsControl_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.xuy", lpFilePart=0x0) returned 0xbe [0189.289] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0189.289] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Microsoft.AccountsControl_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\microsoft.accountscontrol_10.0.10240.16384_neutral__cw5n1h2txyewy\\activationstore\\activationstore.dat"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0afbd09, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb0b6e49a, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x5cab0a7c, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x10000)) returned 1 [0189.289] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0189.289] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Microsoft.AccountsControl_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\microsoft.accountscontrol_10.0.10240.16384_neutral__cw5n1h2txyewy\\activationstore\\activationstore.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Microsoft.AccountsControl_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\microsoft.accountscontrol_10.0.10240.16384_neutral__cw5n1h2txyewy\\activationstore\\activationstore.dat.xuy")) returned 1 [0189.310] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Microsoft.AccountsControl_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Microsoft.AccountsControl_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xbf [0189.310] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0189.310] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Microsoft.AccountsControl_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\microsoft.accountscontrol_10.0.10240.16384_neutral__cw5n1h2txyewy\\activationstore\\activationstore.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x22dc380 | out: lpFileInformation=0x22dc380*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xb0afbd09, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb0afbd09, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xb0afbd09, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0xc000)) returned 1 [0189.313] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0189.313] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Microsoft.AccountsControl_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Microsoft.AccountsControl_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xbf [0189.313] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0189.313] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Microsoft.AccountsControl_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\microsoft.accountscontrol_10.0.10240.16384_neutral__cw5n1h2txyewy\\activationstore\\activationstore.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x22dc5d0 | out: lpFileInformation=0x22dc5d0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xb0afbd09, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb0afbd09, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xb0afbd09, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0xc000)) returned 1 [0189.313] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0189.313] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Microsoft.AccountsControl_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Microsoft.AccountsControl_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xbf [0189.313] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0189.313] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Microsoft.AccountsControl_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\microsoft.accountscontrol_10.0.10240.16384_neutral__cw5n1h2txyewy\\activationstore\\activationstore.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0189.314] GetFileType (hFile=0x444) returned 0x1 [0189.314] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0189.314] GetFileType (hFile=0x444) returned 0x1 [0189.314] ReadFile (in: hFile=0x444, lpBuffer=0x22deba0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x22deba0*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0189.337] CloseHandle (hObject=0x444) returned 1 [0189.337] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Microsoft.AccountsControl_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Microsoft.AccountsControl_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xbf [0189.337] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0189.337] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Microsoft.AccountsControl_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\microsoft.accountscontrol_10.0.10240.16384_neutral__cw5n1h2txyewy\\activationstore\\activationstore.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0189.338] GetFileType (hFile=0x444) returned 0x1 [0189.338] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0189.338] GetFileType (hFile=0x444) returned 0x1 [0189.338] WriteFile (in: hFile=0x444, lpBuffer=0x22dc800*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x22dc800*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0189.338] CloseHandle (hObject=0x444) returned 1 [0189.338] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Microsoft.AccountsControl_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Microsoft.AccountsControl_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xbf [0189.338] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Microsoft.AccountsControl_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Microsoft.AccountsControl_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1.xuy", lpFilePart=0x0) returned 0xc3 [0189.338] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0189.338] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Microsoft.AccountsControl_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\microsoft.accountscontrol_10.0.10240.16384_neutral__cw5n1h2txyewy\\activationstore\\activationstore.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xb0afbd09, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb0afbd09, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x5cb499c4, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xc000)) returned 1 [0189.338] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0189.339] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Microsoft.AccountsControl_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\microsoft.accountscontrol_10.0.10240.16384_neutral__cw5n1h2txyewy\\activationstore\\activationstore.dat.log1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Microsoft.AccountsControl_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\microsoft.accountscontrol_10.0.10240.16384_neutral__cw5n1h2txyewy\\activationstore\\activationstore.dat.log1.xuy")) returned 1 [0189.341] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Microsoft.AccountsControl_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Microsoft.AccountsControl_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xbf [0189.341] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0189.341] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Microsoft.AccountsControl_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\microsoft.accountscontrol_10.0.10240.16384_neutral__cw5n1h2txyewy\\activationstore\\activationstore.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x235b310 | out: lpFileInformation=0x235b310*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xb0afbd09, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb0afbd09, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xb0afbd09, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0189.341] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0189.341] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Microsoft.AccountsControl_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Microsoft.AccountsControl_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xbf [0189.341] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0189.341] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Microsoft.AccountsControl_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\microsoft.accountscontrol_10.0.10240.16384_neutral__cw5n1h2txyewy\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0189.341] GetFileType (hFile=0x444) returned 0x1 [0189.341] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0189.341] GetFileType (hFile=0x444) returned 0x1 [0189.341] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x0 [0189.342] CloseHandle (hObject=0x444) returned 1 [0189.399] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Microsoft.AccountsControl_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Microsoft.AccountsControl_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xbf [0189.399] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0189.399] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Microsoft.AccountsControl_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\microsoft.accountscontrol_10.0.10240.16384_neutral__cw5n1h2txyewy\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0189.401] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb070) returned 1 [0189.401] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Microsoft.AccountsControl_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbcf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Microsoft.AccountsControl_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xbf [0189.401] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0189.401] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Microsoft.AccountsControl_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\microsoft.accountscontrol_10.0.10240.16384_neutral__cw5n1h2txyewy\\activationstore\\activationstore.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x3bc270 | out: lpFileInformation=0x3bc270*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xb0afbd09, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb0afbd09, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xb0afbd09, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0189.401] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc150) returned 1 [0189.401] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Microsoft.AccountsControl_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbd10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Microsoft.AccountsControl_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xbf [0189.401] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0189.401] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Microsoft.AccountsControl_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\microsoft.accountscontrol_10.0.10240.16384_neutral__cw5n1h2txyewy\\activationstore\\activationstore.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x21d25d0 | out: lpFileInformation=0x21d25d0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xb0afbd09, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb0afbd09, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xb0afbd09, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0189.401] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc150) returned 1 [0189.401] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Microsoft.AccountsControl_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Microsoft.AccountsControl_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xbf [0189.401] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc050) returned 1 [0189.402] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Microsoft.AccountsControl_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\microsoft.accountscontrol_10.0.10240.16384_neutral__cw5n1h2txyewy\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0189.402] GetFileType (hFile=0x444) returned 0x1 [0189.402] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbfc0) returned 1 [0189.402] GetFileType (hFile=0x444) returned 0x1 [0189.402] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc1e8 | out: lpFileSizeHigh=0x3bc1e8*=0x0) returned 0x0 [0189.402] CloseHandle (hObject=0x444) returned 1 [0189.439] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Microsoft.AccountsControl_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Microsoft.AccountsControl_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xbf [0189.440] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc050) returned 1 [0189.440] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Microsoft.AccountsControl_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\microsoft.accountscontrol_10.0.10240.16384_neutral__cw5n1h2txyewy\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0189.441] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8ae0) returned 1 [0189.442] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0189.442] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\RoamingState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\RoamingState", lpFilePart=0x0) returned 0x61 [0189.442] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\RoamingState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\RoamingState\\", lpFilePart=0x0) returned 0x62 [0189.442] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\RoamingState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7e50 [0189.442] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0189.443] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0189.443] FindClose (in: hFindFile=0x5d7e50 | out: hFindFile=0x5d7e50) returned 1 [0189.443] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0189.443] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0189.443] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0189.443] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\RoamingState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\RoamingState", lpFilePart=0x0) returned 0x61 [0189.443] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\RoamingState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\RoamingState\\", lpFilePart=0x0) returned 0x62 [0189.443] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\RoamingState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7370 [0189.443] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0189.443] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0189.443] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0189.443] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0189.443] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0189.444] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0189.444] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Settings", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Settings", lpFilePart=0x0) returned 0x5d [0189.444] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Settings\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Settings\\", lpFilePart=0x0) returned 0x5e [0189.444] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Settings\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7370 [0189.447] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0189.447] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0189.447] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0189.447] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0189.447] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0189.447] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0189.447] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0189.448] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0189.448] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0189.448] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0189.448] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Settings", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Settings", lpFilePart=0x0) returned 0x5d [0189.448] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Settings\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Settings\\", lpFilePart=0x0) returned 0x5e [0189.448] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Settings\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7d30 [0189.449] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0189.449] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0189.449] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0189.449] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0189.449] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0189.450] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0189.450] FindClose (in: hFindFile=0x5d7d30 | out: hFindFile=0x5d7d30) returned 1 [0189.450] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0189.450] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0189.450] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Settings\\roaming.lock", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Settings\\roaming.lock", lpFilePart=0x0) returned 0x6a [0189.450] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0189.450] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\settings\\roaming.lock"), fInfoLevelId=0x0, lpFileInformation=0x224e9b0 | out: lpFileInformation=0x224e9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0a3d13a, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb0a3d13a, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xb0a3d13a, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0189.451] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0189.451] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Settings\\roaming.lock", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Settings\\roaming.lock", lpFilePart=0x0) returned 0x6a [0189.451] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0189.451] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\settings\\roaming.lock"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0189.451] GetFileType (hFile=0x444) returned 0x1 [0189.451] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0189.451] GetFileType (hFile=0x444) returned 0x1 [0189.451] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0x0 [0189.452] CloseHandle (hObject=0x444) returned 1 [0189.497] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Settings\\roaming.lock", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Settings\\roaming.lock", lpFilePart=0x0) returned 0x6a [0189.497] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0189.497] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\settings\\roaming.lock"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0189.499] GetFileType (hFile=0x444) returned 0x1 [0189.499] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0189.499] GetFileType (hFile=0x444) returned 0x1 [0189.499] WriteFile (in: hFile=0x444, lpBuffer=0x22c4e18*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x3be628, lpOverlapped=0x0 | out: lpBuffer=0x22c4e18*, lpNumberOfBytesWritten=0x3be628*=0x10, lpOverlapped=0x0) returned 1 [0189.499] CloseHandle (hObject=0x444) returned 1 [0189.500] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Settings\\roaming.lock", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Settings\\roaming.lock", lpFilePart=0x0) returned 0x6a [0189.500] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Settings\\roaming.lock.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Settings\\roaming.lock.xuy", lpFilePart=0x0) returned 0x6e [0189.500] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0189.500] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\settings\\roaming.lock"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0a3d13a, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb0a3d13a, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x5ccd10ae, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0189.500] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0189.500] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\settings\\roaming.lock"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Settings\\roaming.lock.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\settings\\roaming.lock.xuy")) returned 1 [0189.501] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Settings\\settings.dat", lpFilePart=0x0) returned 0x6a [0189.501] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0189.501] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x22c6158 | out: lpFileInformation=0x22c6158*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0a3d13a, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0x66416e84, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x66416e84, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0189.501] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0189.501] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Settings\\settings.dat", lpFilePart=0x0) returned 0x6a [0189.501] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0189.501] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x22c62e8 | out: lpFileInformation=0x22c62e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0a3d13a, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0x66416e84, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x66416e84, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0189.502] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0189.502] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Settings\\settings.dat", lpFilePart=0x0) returned 0x6a [0189.502] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0189.502] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\settings\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0189.503] GetFileType (hFile=0x444) returned 0x1 [0189.503] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0189.503] GetFileType (hFile=0x444) returned 0x1 [0189.503] ReadFile (in: hFile=0x444, lpBuffer=0x22c8738, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x22c8738*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0189.516] CloseHandle (hObject=0x444) returned 1 [0189.516] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Settings\\settings.dat", lpFilePart=0x0) returned 0x6a [0189.516] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0189.516] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\settings\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0189.516] GetFileType (hFile=0x444) returned 0x1 [0189.516] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0189.516] GetFileType (hFile=0x444) returned 0x1 [0189.516] WriteFile (in: hFile=0x444, lpBuffer=0x22c6458*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x22c6458*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0189.516] CloseHandle (hObject=0x444) returned 1 [0189.517] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Settings\\settings.dat", lpFilePart=0x0) returned 0x6a [0189.517] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Settings\\settings.dat.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Settings\\settings.dat.xuy", lpFilePart=0x0) returned 0x6e [0189.517] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0189.517] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0a3d13a, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0x66416e84, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x5ccf760a, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0189.517] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0189.517] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\settings\\settings.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Settings\\settings.dat.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\settings\\settings.dat.xuy")) returned 1 [0189.518] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", lpFilePart=0x0) returned 0x6f [0189.518] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0189.518] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\settings\\settings.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x2344bf0 | out: lpFileInformation=0x2344bf0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x65f2c0e5, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x65f2c0e5, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x65f2c0e5, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0189.518] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0189.518] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", lpFilePart=0x0) returned 0x6f [0189.518] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0189.518] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\settings\\settings.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x2344d90 | out: lpFileInformation=0x2344d90*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x65f2c0e5, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x65f2c0e5, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x65f2c0e5, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0189.519] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0189.519] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", lpFilePart=0x0) returned 0x6f [0189.519] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0189.519] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\settings\\settings.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0189.520] GetFileType (hFile=0x444) returned 0x1 [0189.520] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0189.520] GetFileType (hFile=0x444) returned 0x1 [0189.520] ReadFile (in: hFile=0x444, lpBuffer=0x2347200, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x2347200*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0189.655] CloseHandle (hObject=0x444) returned 1 [0189.655] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", lpFilePart=0x0) returned 0x6f [0189.655] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0189.655] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\settings\\settings.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0189.656] GetFileType (hFile=0x444) returned 0x1 [0189.656] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0189.656] GetFileType (hFile=0x444) returned 0x1 [0189.656] WriteFile (in: hFile=0x444, lpBuffer=0x218ccc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x218ccc0*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0189.656] CloseHandle (hObject=0x444) returned 1 [0189.656] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", lpFilePart=0x0) returned 0x6f [0189.656] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Settings\\settings.dat.LOG1.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Settings\\settings.dat.LOG1.xuy", lpFilePart=0x0) returned 0x73 [0189.656] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0189.656] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\settings\\settings.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x65f2c0e5, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x65f2c0e5, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x5ce4ebb1, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0189.656] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0189.657] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\settings\\settings.dat.log1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Settings\\settings.dat.LOG1.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\settings\\settings.dat.log1.xuy")) returned 1 [0189.658] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", lpFilePart=0x0) returned 0x6f [0189.658] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0189.658] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\settings\\settings.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x21c6690 | out: lpFileInformation=0x21c6690*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x65f2c0e5, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x65f2c0e5, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x65f2c0e5, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0189.658] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0189.658] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", lpFilePart=0x0) returned 0x6f [0189.658] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0189.658] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\settings\\settings.dat.log2"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0189.659] GetFileType (hFile=0x444) returned 0x1 [0189.659] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0189.659] GetFileType (hFile=0x444) returned 0x1 [0189.659] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0x0 [0189.659] CloseHandle (hObject=0x444) returned 1 [0189.670] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", lpFilePart=0x0) returned 0x6f [0189.670] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0189.670] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\settings\\settings.dat.log2"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0189.671] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb0e0) returned 1 [0189.672] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", lpFilePart=0x0) returned 0x6f [0189.672] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc200) returned 1 [0189.672] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\settings\\settings.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x3bc2e0 | out: lpFileInformation=0x3bc2e0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x65f2c0e5, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x65f2c0e5, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x65f2c0e5, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0189.672] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1c0) returned 1 [0189.672] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbd80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", lpFilePart=0x0) returned 0x6f [0189.672] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc200) returned 1 [0189.672] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\settings\\settings.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x223d400 | out: lpFileInformation=0x223d400*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x65f2c0e5, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x65f2c0e5, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x65f2c0e5, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0189.672] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1c0) returned 1 [0189.672] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", lpFilePart=0x0) returned 0x6f [0189.672] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0c0) returned 1 [0189.672] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\settings\\settings.dat.log2"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0189.672] GetFileType (hFile=0x444) returned 0x1 [0189.672] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc030) returned 1 [0189.672] GetFileType (hFile=0x444) returned 0x1 [0189.672] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc258 | out: lpFileSizeHigh=0x3bc258*=0x0) returned 0x0 [0189.673] CloseHandle (hObject=0x444) returned 1 [0189.711] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", lpFilePart=0x0) returned 0x6f [0189.711] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0c0) returned 1 [0189.711] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\settings\\settings.dat.log2"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0189.713] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8b50) returned 1 [0189.714] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0189.714] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\SystemAppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\SystemAppData", lpFilePart=0x0) returned 0x62 [0189.714] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\SystemAppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\SystemAppData\\", lpFilePart=0x0) returned 0x63 [0189.714] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\SystemAppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7c70 [0189.714] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0189.714] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0189.714] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0189.714] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0189.714] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0189.715] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0189.715] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\SystemAppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\SystemAppData", lpFilePart=0x0) returned 0x62 [0189.715] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\SystemAppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\SystemAppData\\", lpFilePart=0x0) returned 0x63 [0189.715] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\SystemAppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d78b0 [0189.715] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0189.715] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0189.715] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0189.715] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0189.715] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0189.716] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0189.716] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\TempState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\TempState", lpFilePart=0x0) returned 0x5e [0189.716] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\TempState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\TempState\\", lpFilePart=0x0) returned 0x5f [0189.716] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\TempState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7cd0 [0189.716] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0189.716] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0189.716] FindClose (in: hFindFile=0x5d7cd0 | out: hFindFile=0x5d7cd0) returned 1 [0189.716] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0189.716] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0189.716] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0189.716] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\TempState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\TempState", lpFilePart=0x0) returned 0x5e [0189.716] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\TempState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\TempState\\", lpFilePart=0x0) returned 0x5f [0189.716] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\TempState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d75b0 [0189.717] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0189.717] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0189.717] FindClose (in: hFindFile=0x5d75b0 | out: hFindFile=0x5d75b0) returned 1 [0189.717] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0189.717] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0189.717] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0189.717] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe", lpFilePart=0x0) returned 0x51 [0189.717] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\", lpFilePart=0x0) returned 0x52 [0189.717] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d7c70 [0189.757] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0189.758] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0189.758] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0189.758] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0189.758] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0189.758] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0189.758] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0189.759] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0189.759] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0189.759] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0189.759] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0189.759] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0189.760] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0189.760] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0189.760] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0189.760] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe", lpFilePart=0x0) returned 0x51 [0189.760] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\", lpFilePart=0x0) returned 0x52 [0189.760] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d78b0 [0189.761] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0189.761] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0189.761] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0189.761] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0189.761] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0189.761] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0189.761] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0189.762] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0189.762] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0189.762] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0189.762] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0189.763] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0189.763] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0189.763] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0189.763] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0189.763] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\AC", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\AC", lpFilePart=0x0) returned 0x54 [0189.763] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\AC\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\AC\\", lpFilePart=0x0) returned 0x55 [0189.764] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\AC\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7550 [0189.829] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0189.829] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0189.829] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0189.830] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0189.830] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0189.830] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0189.830] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0189.831] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0189.831] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0189.831] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0189.831] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\AC", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\AC", lpFilePart=0x0) returned 0x54 [0189.831] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\AC\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\AC\\", lpFilePart=0x0) returned 0x55 [0189.831] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\AC\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d79d0 [0189.832] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0189.832] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0189.832] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0189.832] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0189.832] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0189.832] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0189.832] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0189.833] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0189.833] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0189.833] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0189.833] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\AC\\INetCache", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\AC\\INetCache", lpFilePart=0x0) returned 0x5e [0189.833] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\AC\\INetCache\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\AC\\INetCache\\", lpFilePart=0x0) returned 0x5f [0189.833] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\AC\\INetCache\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d78b0 [0189.837] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0189.837] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0189.837] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0189.837] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0189.837] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0189.837] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0189.837] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\AC\\INetCache", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\AC\\INetCache", lpFilePart=0x0) returned 0x5e [0189.837] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\AC\\INetCache\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\AC\\INetCache\\", lpFilePart=0x0) returned 0x5f [0189.837] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\AC\\INetCache\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7a30 [0189.837] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0189.837] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0189.838] FindClose (in: hFindFile=0x5d7a30 | out: hFindFile=0x5d7a30) returned 1 [0189.838] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0189.838] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0189.838] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0189.838] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\AC\\INetCookies", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\AC\\INetCookies", lpFilePart=0x0) returned 0x60 [0189.838] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\AC\\INetCookies\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\AC\\INetCookies\\", lpFilePart=0x0) returned 0x61 [0189.838] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\AC\\INetCookies\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d79d0 [0189.838] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0189.838] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0189.838] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0189.838] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0189.838] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0189.838] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0189.838] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\AC\\INetCookies", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\AC\\INetCookies", lpFilePart=0x0) returned 0x60 [0189.839] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\AC\\INetCookies\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\AC\\INetCookies\\", lpFilePart=0x0) returned 0x61 [0189.839] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\AC\\INetCookies\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7550 [0189.839] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0189.839] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0189.839] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0189.839] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0189.839] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0189.839] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0189.839] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\AC\\INetHistory", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\AC\\INetHistory", lpFilePart=0x0) returned 0x60 [0189.839] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\AC\\INetHistory\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\AC\\INetHistory\\", lpFilePart=0x0) returned 0x61 [0189.839] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\AC\\INetHistory\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7e50 [0189.839] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0189.840] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0189.840] FindClose (in: hFindFile=0x5d7e50 | out: hFindFile=0x5d7e50) returned 1 [0189.840] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0189.840] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0189.840] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0189.840] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\AC\\INetHistory", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\AC\\INetHistory", lpFilePart=0x0) returned 0x60 [0189.840] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\AC\\INetHistory\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\AC\\INetHistory\\", lpFilePart=0x0) returned 0x61 [0189.840] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\AC\\INetHistory\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7370 [0189.840] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0189.840] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0189.841] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0189.841] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0189.841] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0189.841] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0189.841] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\AC\\Temp", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\AC\\Temp", lpFilePart=0x0) returned 0x59 [0189.841] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\AC\\Temp\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\AC\\Temp\\", lpFilePart=0x0) returned 0x5a [0189.841] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\AC\\Temp\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d81b0 [0189.841] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0189.841] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0189.841] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0189.841] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0189.841] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0189.841] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0189.841] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\AC\\Temp", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\AC\\Temp", lpFilePart=0x0) returned 0x59 [0189.841] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\AC\\Temp\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\AC\\Temp\\", lpFilePart=0x0) returned 0x5a [0189.842] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\AC\\Temp\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7cd0 [0189.842] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0189.842] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0189.842] FindClose (in: hFindFile=0x5d7cd0 | out: hFindFile=0x5d7cd0) returned 1 [0189.842] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0189.842] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0189.842] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0189.842] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\AppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\AppData", lpFilePart=0x0) returned 0x59 [0189.842] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\AppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\AppData\\", lpFilePart=0x0) returned 0x5a [0189.842] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\AppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d75b0 [0189.844] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0189.844] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0189.844] FindClose (in: hFindFile=0x5d75b0 | out: hFindFile=0x5d75b0) returned 1 [0189.844] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0189.844] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0189.844] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0189.845] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\AppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\AppData", lpFilePart=0x0) returned 0x59 [0189.845] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\AppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\AppData\\", lpFilePart=0x0) returned 0x5a [0189.845] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\AppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7550 [0189.845] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0189.845] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0189.845] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0189.845] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0189.845] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0189.845] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0189.845] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\LocalCache", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\LocalCache", lpFilePart=0x0) returned 0x5c [0189.845] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\LocalCache\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\LocalCache\\", lpFilePart=0x0) returned 0x5d [0189.845] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\LocalCache\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7370 [0189.846] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0189.846] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0189.846] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0189.846] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0189.846] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0189.846] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0189.846] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\LocalCache", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\LocalCache", lpFilePart=0x0) returned 0x5c [0189.846] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\LocalCache\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\LocalCache\\", lpFilePart=0x0) returned 0x5d [0189.846] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\LocalCache\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7af0 [0189.846] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0189.847] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0189.847] FindClose (in: hFindFile=0x5d7af0 | out: hFindFile=0x5d7af0) returned 1 [0189.847] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0189.847] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0189.847] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0189.847] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\LocalState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\LocalState", lpFilePart=0x0) returned 0x5c [0189.847] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\LocalState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\LocalState\\", lpFilePart=0x0) returned 0x5d [0189.847] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\LocalState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7eb0 [0189.847] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0189.847] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0189.847] FindClose (in: hFindFile=0x5d7eb0 | out: hFindFile=0x5d7eb0) returned 1 [0189.847] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0189.847] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0189.848] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0189.848] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\LocalState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\LocalState", lpFilePart=0x0) returned 0x5c [0189.848] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\LocalState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\LocalState\\", lpFilePart=0x0) returned 0x5d [0189.848] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\LocalState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d79d0 [0189.848] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0189.848] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0189.848] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0189.848] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0189.848] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0189.848] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0189.848] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe", lpFilePart=0x0) returned 0x87 [0189.848] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\", lpFilePart=0x0) returned 0x88 [0189.848] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d78b0 [0189.849] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0189.849] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0189.849] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0189.849] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0189.849] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0189.849] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0189.849] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0189.849] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe", lpFilePart=0x0) returned 0x87 [0189.849] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\", lpFilePart=0x0) returned 0x88 [0189.849] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7370 [0189.849] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0189.850] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0189.850] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0189.850] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0189.850] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0189.850] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0189.850] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0189.850] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\ActivationStore", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\ActivationStore", lpFilePart=0x0) returned 0x97 [0189.850] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\ActivationStore\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\ActivationStore\\", lpFilePart=0x0) returned 0x98 [0189.850] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\ActivationStore\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7a30 [0189.872] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0189.872] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0189.872] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0189.872] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0189.872] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0189.872] FindClose (in: hFindFile=0x5d7a30 | out: hFindFile=0x5d7a30) returned 1 [0189.873] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0189.873] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0189.873] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0189.873] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\ActivationStore", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\ActivationStore", lpFilePart=0x0) returned 0x97 [0189.873] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\ActivationStore\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\ActivationStore\\", lpFilePart=0x0) returned 0x98 [0189.873] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\ActivationStore\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7a30 [0189.874] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0189.874] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0189.874] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0189.874] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0189.875] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0189.875] FindClose (in: hFindFile=0x5d7a30 | out: hFindFile=0x5d7a30) returned 1 [0189.875] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0189.875] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0189.875] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xab [0189.875] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0189.876] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.appconnector_8wekyb3d8bbwe\\microsoft.appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), fInfoLevelId=0x0, lpFileInformation=0x22d4500 | out: lpFileInformation=0x22d4500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ae1cadf, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x2b5dc71a, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x2b5dc71a, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x4000)) returned 1 [0189.876] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0189.876] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xab [0189.876] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0189.876] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.appconnector_8wekyb3d8bbwe\\microsoft.appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), fInfoLevelId=0x0, lpFileInformation=0x22d4718 | out: lpFileInformation=0x22d4718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ae1cadf, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x2b5dc71a, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x2b5dc71a, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x4000)) returned 1 [0189.876] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0189.877] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xab [0189.877] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0189.877] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.appconnector_8wekyb3d8bbwe\\microsoft.appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0189.878] GetFileType (hFile=0x444) returned 0x1 [0189.878] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0189.878] GetFileType (hFile=0x444) returned 0x1 [0189.878] ReadFile (in: hFile=0x444, lpBuffer=0x22d6c78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x22d6c78*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0189.939] CloseHandle (hObject=0x444) returned 1 [0189.940] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xab [0189.940] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0189.940] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.appconnector_8wekyb3d8bbwe\\microsoft.appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0189.940] GetFileType (hFile=0x444) returned 0x1 [0189.940] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0189.940] GetFileType (hFile=0x444) returned 0x1 [0189.940] WriteFile (in: hFile=0x444, lpBuffer=0x22d4910*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x22d4910*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0189.941] CloseHandle (hObject=0x444) returned 1 [0189.941] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xab [0189.941] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.xuy", lpFilePart=0x0) returned 0xaf [0189.941] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0189.941] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.appconnector_8wekyb3d8bbwe\\microsoft.appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ae1cadf, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x2b5dc71a, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5d0fdaa1, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x4000)) returned 1 [0189.941] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0189.941] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.appconnector_8wekyb3d8bbwe\\microsoft.appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.appconnector_8wekyb3d8bbwe\\microsoft.appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\activationstore\\activationstore.dat.xuy")) returned 1 [0189.942] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xb0 [0189.942] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0189.942] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.appconnector_8wekyb3d8bbwe\\microsoft.appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x2353338 | out: lpFileInformation=0x2353338*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x2ae690fa, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x2ae690fa, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x2ae690fa, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0189.942] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0189.942] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xb0 [0189.943] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0189.943] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.appconnector_8wekyb3d8bbwe\\microsoft.appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x2353570 | out: lpFileInformation=0x2353570*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x2ae690fa, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x2ae690fa, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x2ae690fa, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0189.943] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0189.943] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xb0 [0189.943] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0189.943] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.appconnector_8wekyb3d8bbwe\\microsoft.appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0189.944] GetFileType (hFile=0x444) returned 0x1 [0189.944] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0189.944] GetFileType (hFile=0x444) returned 0x1 [0189.944] ReadFile (in: hFile=0x444, lpBuffer=0x2355b10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x2355b10*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0190.011] CloseHandle (hObject=0x444) returned 1 [0190.011] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xb0 [0190.011] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0190.011] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.appconnector_8wekyb3d8bbwe\\microsoft.appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0190.012] GetFileType (hFile=0x444) returned 0x1 [0190.012] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0190.012] GetFileType (hFile=0x444) returned 0x1 [0190.012] WriteFile (in: hFile=0x444, lpBuffer=0x218cdd8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x218cdd8*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0190.012] CloseHandle (hObject=0x444) returned 1 [0190.018] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xb0 [0190.018] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1.xuy", lpFilePart=0x0) returned 0xb4 [0190.018] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0190.018] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.appconnector_8wekyb3d8bbwe\\microsoft.appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x2ae690fa, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x2ae690fa, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5d1bc18c, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0190.019] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0190.019] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.appconnector_8wekyb3d8bbwe\\microsoft.appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.appconnector_8wekyb3d8bbwe\\microsoft.appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1.xuy")) returned 1 [0190.020] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xb0 [0190.020] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0190.020] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.appconnector_8wekyb3d8bbwe\\microsoft.appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x21d2318 | out: lpFileInformation=0x21d2318*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x2ae690fa, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x2ae690fa, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x2ae690fa, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0190.023] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0190.023] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xb0 [0190.023] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0190.023] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.appconnector_8wekyb3d8bbwe\\microsoft.appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0190.023] GetFileType (hFile=0x444) returned 0x1 [0190.023] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0190.023] GetFileType (hFile=0x444) returned 0x1 [0190.023] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x0 [0190.023] CloseHandle (hObject=0x444) returned 1 [0190.033] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xb0 [0190.033] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0190.033] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.appconnector_8wekyb3d8bbwe\\microsoft.appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.035] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb070) returned 1 [0190.035] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbcf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xb0 [0190.035] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0190.035] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.appconnector_8wekyb3d8bbwe\\microsoft.appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x3bc270 | out: lpFileInformation=0x3bc270*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x2ae690fa, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x2ae690fa, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x2ae690fa, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0190.035] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc150) returned 1 [0190.035] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbd10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xb0 [0190.036] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0190.036] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.appconnector_8wekyb3d8bbwe\\microsoft.appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x2249360 | out: lpFileInformation=0x2249360*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x2ae690fa, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x2ae690fa, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x2ae690fa, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0190.036] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc150) returned 1 [0190.036] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xb0 [0190.036] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc050) returned 1 [0190.036] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.appconnector_8wekyb3d8bbwe\\microsoft.appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0190.036] GetFileType (hFile=0x444) returned 0x1 [0190.036] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbfc0) returned 1 [0190.036] GetFileType (hFile=0x444) returned 0x1 [0190.036] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc1e8 | out: lpFileSizeHigh=0x3bc1e8*=0x0) returned 0x0 [0190.036] CloseHandle (hObject=0x444) returned 1 [0190.074] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xb0 [0190.074] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc050) returned 1 [0190.074] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.appconnector_8wekyb3d8bbwe\\microsoft.appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.077] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8ae0) returned 1 [0190.077] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0190.077] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\RoamingState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\RoamingState", lpFilePart=0x0) returned 0x5e [0190.077] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\RoamingState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\RoamingState\\", lpFilePart=0x0) returned 0x5f [0190.078] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\RoamingState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d78b0 [0190.078] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0190.078] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0190.078] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0190.078] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0190.078] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0190.078] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0190.078] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\RoamingState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\RoamingState", lpFilePart=0x0) returned 0x5e [0190.078] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\RoamingState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\RoamingState\\", lpFilePart=0x0) returned 0x5f [0190.078] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\RoamingState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d78b0 [0190.079] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0190.079] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0190.079] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0190.079] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0190.079] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0190.079] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0190.079] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\Settings", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\Settings", lpFilePart=0x0) returned 0x5a [0190.079] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\Settings\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\Settings\\", lpFilePart=0x0) returned 0x5b [0190.079] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\Settings\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7370 [0190.079] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0190.080] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0190.080] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0190.080] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0190.080] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0190.080] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0190.080] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0190.080] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0190.080] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\Settings", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\Settings", lpFilePart=0x0) returned 0x5a [0190.080] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\Settings\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\Settings\\", lpFilePart=0x0) returned 0x5b [0190.080] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\Settings\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7550 [0190.080] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0190.080] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0190.081] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0190.081] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0190.081] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0190.081] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0190.081] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0190.081] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\Settings\\roaming.lock", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\Settings\\roaming.lock", lpFilePart=0x0) returned 0x67 [0190.081] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0190.081] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.appconnector_8wekyb3d8bbwe\\settings\\roaming.lock"), fInfoLevelId=0x0, lpFileInformation=0x22c4ab0 | out: lpFileInformation=0x22c4ab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a78e4ee, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x2a78e4ee, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x2a78e4ee, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0190.081] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0190.081] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\Settings\\roaming.lock", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\Settings\\roaming.lock", lpFilePart=0x0) returned 0x67 [0190.081] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0190.081] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.appconnector_8wekyb3d8bbwe\\settings\\roaming.lock"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0190.081] GetFileType (hFile=0x444) returned 0x1 [0190.081] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0190.081] GetFileType (hFile=0x444) returned 0x1 [0190.081] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0x0 [0190.081] CloseHandle (hObject=0x444) returned 1 [0190.121] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\Settings\\roaming.lock", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\Settings\\roaming.lock", lpFilePart=0x0) returned 0x67 [0190.122] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0190.122] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.appconnector_8wekyb3d8bbwe\\settings\\roaming.lock"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0190.123] GetFileType (hFile=0x444) returned 0x1 [0190.123] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0190.123] GetFileType (hFile=0x444) returned 0x1 [0190.123] WriteFile (in: hFile=0x444, lpBuffer=0x233af00*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x3be628, lpOverlapped=0x0 | out: lpBuffer=0x233af00*, lpNumberOfBytesWritten=0x3be628*=0x10, lpOverlapped=0x0) returned 1 [0190.124] CloseHandle (hObject=0x444) returned 1 [0190.124] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\Settings\\roaming.lock", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\Settings\\roaming.lock", lpFilePart=0x0) returned 0x67 [0190.124] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\Settings\\roaming.lock.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\Settings\\roaming.lock.xuy", lpFilePart=0x0) returned 0x6b [0190.124] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0190.124] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.appconnector_8wekyb3d8bbwe\\settings\\roaming.lock"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a78e4ee, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x2a78e4ee, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5d2c72d9, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0190.124] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0190.124] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.appconnector_8wekyb3d8bbwe\\settings\\roaming.lock"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\Settings\\roaming.lock.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.appconnector_8wekyb3d8bbwe\\settings\\roaming.lock.xuy")) returned 1 [0190.126] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\Settings\\settings.dat", lpFilePart=0x0) returned 0x67 [0190.126] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0190.126] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.appconnector_8wekyb3d8bbwe\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x233c228 | out: lpFileInformation=0x233c228*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a6f5b3a, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x2a6f5b3a, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x8d6f5917, ftLastWriteTime.dwHighDateTime=0x1d0baff, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0190.126] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0190.126] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\Settings\\settings.dat", lpFilePart=0x0) returned 0x67 [0190.126] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0190.126] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.appconnector_8wekyb3d8bbwe\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x233c3b0 | out: lpFileInformation=0x233c3b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a6f5b3a, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x2a6f5b3a, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x8d6f5917, ftLastWriteTime.dwHighDateTime=0x1d0baff, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0190.126] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0190.126] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\Settings\\settings.dat", lpFilePart=0x0) returned 0x67 [0190.126] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0190.126] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.appconnector_8wekyb3d8bbwe\\settings\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0190.127] GetFileType (hFile=0x444) returned 0x1 [0190.127] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0190.127] GetFileType (hFile=0x444) returned 0x1 [0190.127] ReadFile (in: hFile=0x444, lpBuffer=0x233e7f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x233e7f0*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0190.173] CloseHandle (hObject=0x444) returned 1 [0190.173] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\Settings\\settings.dat", lpFilePart=0x0) returned 0x67 [0190.173] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0190.173] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.appconnector_8wekyb3d8bbwe\\settings\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0190.174] GetFileType (hFile=0x444) returned 0x1 [0190.174] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0190.174] GetFileType (hFile=0x444) returned 0x1 [0190.174] WriteFile (in: hFile=0x444, lpBuffer=0x218ca38*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x218ca38*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0190.174] CloseHandle (hObject=0x444) returned 1 [0190.174] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\Settings\\settings.dat", lpFilePart=0x0) returned 0x67 [0190.174] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\Settings\\settings.dat.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\Settings\\settings.dat.xuy", lpFilePart=0x0) returned 0x6b [0190.174] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0190.174] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.appconnector_8wekyb3d8bbwe\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a6f5b3a, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x2a6f5b3a, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5d33991e, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0190.174] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0190.174] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.appconnector_8wekyb3d8bbwe\\settings\\settings.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\Settings\\settings.dat.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.appconnector_8wekyb3d8bbwe\\settings\\settings.dat.xuy")) returned 1 [0190.176] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0190.176] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\SystemAppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\SystemAppData", lpFilePart=0x0) returned 0x5f [0190.176] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\SystemAppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\SystemAppData\\", lpFilePart=0x0) returned 0x60 [0190.176] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\SystemAppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7a90 [0190.176] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0190.176] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0190.176] FindClose (in: hFindFile=0x5d7a90 | out: hFindFile=0x5d7a90) returned 1 [0190.176] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0190.176] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0190.176] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0190.176] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\SystemAppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\SystemAppData", lpFilePart=0x0) returned 0x5f [0190.176] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\SystemAppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\SystemAppData\\", lpFilePart=0x0) returned 0x60 [0190.176] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\SystemAppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d73d0 [0190.177] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0190.177] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0190.177] FindClose (in: hFindFile=0x5d73d0 | out: hFindFile=0x5d73d0) returned 1 [0190.177] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0190.177] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0190.177] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0190.177] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\TempState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\TempState", lpFilePart=0x0) returned 0x5b [0190.177] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\TempState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\TempState\\", lpFilePart=0x0) returned 0x5c [0190.177] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\TempState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7c70 [0190.177] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0190.177] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0190.178] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0190.178] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0190.178] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0190.178] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0190.178] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\TempState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\TempState", lpFilePart=0x0) returned 0x5b [0190.178] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\TempState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\TempState\\", lpFilePart=0x0) returned 0x5c [0190.178] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\TempState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7e50 [0190.178] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0190.178] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0190.178] FindClose (in: hFindFile=0x5d7e50 | out: hFindFile=0x5d7e50) returned 1 [0190.178] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0190.178] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0190.178] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0190.178] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe", lpFilePart=0x0) returned 0x50 [0190.178] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\", lpFilePart=0x0) returned 0x51 [0190.178] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d7d90 [0190.194] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0190.194] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0190.194] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0190.194] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0190.195] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0190.195] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0190.195] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0190.195] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0190.195] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0190.195] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0190.195] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0190.196] FindClose (in: hFindFile=0x5d7d90 | out: hFindFile=0x5d7d90) returned 1 [0190.196] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0190.196] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0190.196] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0190.196] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe", lpFilePart=0x0) returned 0x50 [0190.196] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\", lpFilePart=0x0) returned 0x51 [0190.196] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d7f10 [0190.197] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0190.197] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0190.197] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0190.198] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0190.198] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0190.198] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0190.198] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0190.198] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0190.198] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0190.198] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0190.198] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0190.199] FindClose (in: hFindFile=0x5d7f10 | out: hFindFile=0x5d7f10) returned 1 [0190.199] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0190.199] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0190.199] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0190.199] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\AC", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\AC", lpFilePart=0x0) returned 0x53 [0190.199] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\AC\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\AC\\", lpFilePart=0x0) returned 0x54 [0190.199] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\AC\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7370 [0190.208] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0190.208] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0190.209] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0190.209] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0190.209] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0190.209] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0190.209] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0190.210] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0190.210] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0190.210] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0190.210] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\AC", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\AC", lpFilePart=0x0) returned 0x53 [0190.210] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\AC\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\AC\\", lpFilePart=0x0) returned 0x54 [0190.210] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\AC\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7370 [0190.211] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0190.211] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0190.211] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0190.211] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0190.211] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0190.211] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0190.211] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0190.212] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0190.212] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0190.212] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0190.212] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\AC\\INetCache", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\AC\\INetCache", lpFilePart=0x0) returned 0x5d [0190.212] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\AC\\INetCache\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\AC\\INetCache\\", lpFilePart=0x0) returned 0x5e [0190.212] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\AC\\INetCache\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d81b0 [0190.216] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0190.216] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0190.216] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0190.216] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0190.217] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0190.217] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0190.217] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\AC\\INetCache", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\AC\\INetCache", lpFilePart=0x0) returned 0x5d [0190.217] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\AC\\INetCache\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\AC\\INetCache\\", lpFilePart=0x0) returned 0x5e [0190.217] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\AC\\INetCache\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d79d0 [0190.217] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0190.217] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0190.217] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0190.217] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0190.217] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0190.217] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0190.217] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\AC\\INetCookies", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\AC\\INetCookies", lpFilePart=0x0) returned 0x5f [0190.217] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\AC\\INetCookies\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\AC\\INetCookies\\", lpFilePart=0x0) returned 0x60 [0190.217] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\AC\\INetCookies\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7e50 [0190.218] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0190.218] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0190.218] FindClose (in: hFindFile=0x5d7e50 | out: hFindFile=0x5d7e50) returned 1 [0190.218] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0190.218] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0190.218] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0190.218] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\AC\\INetCookies", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\AC\\INetCookies", lpFilePart=0x0) returned 0x5f [0190.218] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\AC\\INetCookies\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\AC\\INetCookies\\", lpFilePart=0x0) returned 0x60 [0190.218] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\AC\\INetCookies\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7e50 [0190.218] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0190.219] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0190.219] FindClose (in: hFindFile=0x5d7e50 | out: hFindFile=0x5d7e50) returned 1 [0190.219] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0190.219] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0190.219] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0190.219] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\AC\\INetHistory", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\AC\\INetHistory", lpFilePart=0x0) returned 0x5f [0190.219] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\AC\\INetHistory\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\AC\\INetHistory\\", lpFilePart=0x0) returned 0x60 [0190.219] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\AC\\INetHistory\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7370 [0190.219] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0190.219] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0190.219] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0190.219] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0190.220] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0190.220] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0190.220] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\AC\\INetHistory", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\AC\\INetHistory", lpFilePart=0x0) returned 0x5f [0190.220] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\AC\\INetHistory\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\AC\\INetHistory\\", lpFilePart=0x0) returned 0x60 [0190.220] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\AC\\INetHistory\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7370 [0190.220] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0190.220] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0190.220] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0190.220] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0190.220] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0190.220] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0190.220] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\AC\\Temp", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\AC\\Temp", lpFilePart=0x0) returned 0x58 [0190.220] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\AC\\Temp\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\AC\\Temp\\", lpFilePart=0x0) returned 0x59 [0190.220] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\AC\\Temp\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7d30 [0190.221] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0190.221] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0190.221] FindClose (in: hFindFile=0x5d7d30 | out: hFindFile=0x5d7d30) returned 1 [0190.221] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0190.221] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0190.221] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0190.221] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\AC\\Temp", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\AC\\Temp", lpFilePart=0x0) returned 0x58 [0190.221] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\AC\\Temp\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\AC\\Temp\\", lpFilePart=0x0) returned 0x59 [0190.221] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\AC\\Temp\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d79d0 [0190.221] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0190.221] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0190.221] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0190.221] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0190.221] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0190.222] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0190.222] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\AppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\AppData", lpFilePart=0x0) returned 0x58 [0190.222] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\AppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\AppData\\", lpFilePart=0x0) returned 0x59 [0190.222] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\AppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d78b0 [0190.222] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0190.222] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0190.222] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0190.222] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0190.222] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0190.222] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0190.222] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\AppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\AppData", lpFilePart=0x0) returned 0x58 [0190.222] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\AppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\AppData\\", lpFilePart=0x0) returned 0x59 [0190.222] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\AppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7610 [0190.223] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0190.223] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0190.223] FindClose (in: hFindFile=0x5d7610 | out: hFindFile=0x5d7610) returned 1 [0190.223] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0190.223] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0190.223] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0190.223] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\LocalCache", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\LocalCache", lpFilePart=0x0) returned 0x5b [0190.223] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\LocalCache\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\LocalCache\\", lpFilePart=0x0) returned 0x5c [0190.223] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\LocalCache\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7a30 [0190.228] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0190.228] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0190.228] FindClose (in: hFindFile=0x5d7a30 | out: hFindFile=0x5d7a30) returned 1 [0190.228] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0190.228] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0190.228] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0190.229] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\LocalCache", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\LocalCache", lpFilePart=0x0) returned 0x5b [0190.229] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\LocalCache\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\LocalCache\\", lpFilePart=0x0) returned 0x5c [0190.229] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\LocalCache\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7eb0 [0190.229] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0190.229] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0190.229] FindClose (in: hFindFile=0x5d7eb0 | out: hFindFile=0x5d7eb0) returned 1 [0190.229] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0190.229] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0190.229] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0190.229] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\LocalState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\LocalState", lpFilePart=0x0) returned 0x5b [0190.229] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\LocalState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\LocalState\\", lpFilePart=0x0) returned 0x5c [0190.229] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\LocalState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d78b0 [0190.230] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0190.230] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0190.230] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0190.230] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0190.230] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0190.230] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0190.230] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\LocalState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\LocalState", lpFilePart=0x0) returned 0x5b [0190.230] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\LocalState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\LocalState\\", lpFilePart=0x0) returned 0x5c [0190.230] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\LocalState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d78b0 [0190.230] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0190.230] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0190.230] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0190.231] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0190.231] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0190.231] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0190.231] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe", lpFilePart=0x0) returned 0x83 [0190.231] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\", lpFilePart=0x0) returned 0x84 [0190.231] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7370 [0190.231] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0190.231] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0190.232] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0190.232] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0190.232] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0190.232] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0190.232] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0190.232] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe", lpFilePart=0x0) returned 0x83 [0190.232] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\", lpFilePart=0x0) returned 0x84 [0190.232] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7a30 [0190.232] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0190.232] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0190.232] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0190.232] FindClose (in: hFindFile=0x5d7a30 | out: hFindFile=0x5d7a30) returned 1 [0190.233] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0190.233] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0190.233] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0190.233] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore", lpFilePart=0x0) returned 0x93 [0190.233] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\", lpFilePart=0x0) returned 0x94 [0190.233] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d78b0 [0190.237] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0190.237] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0190.237] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0190.238] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0190.238] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0190.238] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0190.238] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0190.238] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0190.238] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0190.238] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore", lpFilePart=0x0) returned 0x93 [0190.239] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\", lpFilePart=0x0) returned 0x94 [0190.239] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7d90 [0190.239] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0190.239] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0190.240] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0190.240] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0190.240] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0190.240] FindClose (in: hFindFile=0x5d7d90 | out: hFindFile=0x5d7d90) returned 1 [0190.241] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0190.241] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0190.241] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xa7 [0190.241] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0190.241] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingfinance_8wekyb3d8bbwe\\microsoft.bingfinance_4.3.193.0_x86__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), fInfoLevelId=0x0, lpFileInformation=0x21da7a8 | out: lpFileInformation=0x21da7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28af1f1c, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x28c231d1, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x28c231d1, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x8000)) returned 1 [0190.241] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0190.241] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xa7 [0190.242] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0190.242] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingfinance_8wekyb3d8bbwe\\microsoft.bingfinance_4.3.193.0_x86__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), fInfoLevelId=0x0, lpFileInformation=0x21da9b8 | out: lpFileInformation=0x21da9b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28af1f1c, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x28c231d1, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x28c231d1, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x8000)) returned 1 [0190.242] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0190.242] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xa7 [0190.242] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0190.242] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingfinance_8wekyb3d8bbwe\\microsoft.bingfinance_4.3.193.0_x86__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0190.243] GetFileType (hFile=0x444) returned 0x1 [0190.243] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0190.243] GetFileType (hFile=0x444) returned 0x1 [0190.243] ReadFile (in: hFile=0x444, lpBuffer=0x21dcf08, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x21dcf08*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0190.289] CloseHandle (hObject=0x444) returned 1 [0190.289] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xa7 [0190.289] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0190.289] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingfinance_8wekyb3d8bbwe\\microsoft.bingfinance_4.3.193.0_x86__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0190.289] GetFileType (hFile=0x444) returned 0x1 [0190.289] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0190.289] GetFileType (hFile=0x444) returned 0x1 [0190.289] WriteFile (in: hFile=0x444, lpBuffer=0x21daba8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x21daba8*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0190.290] CloseHandle (hObject=0x444) returned 1 [0190.290] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xa7 [0190.290] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.xuy", lpFilePart=0x0) returned 0xab [0190.290] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0190.290] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingfinance_8wekyb3d8bbwe\\microsoft.bingfinance_4.3.193.0_x86__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28af1f1c, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x28c231d1, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5d444b48, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x8000)) returned 1 [0190.290] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0190.290] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingfinance_8wekyb3d8bbwe\\microsoft.bingfinance_4.3.193.0_x86__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingfinance_8wekyb3d8bbwe\\microsoft.bingfinance_4.3.193.0_x86__8wekyb3d8bbwe\\activationstore\\activationstore.dat.xuy")) returned 1 [0190.291] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xac [0190.291] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0190.291] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingfinance_8wekyb3d8bbwe\\microsoft.bingfinance_4.3.193.0_x86__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x22595a8 | out: lpFileInformation=0x22595a8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28b182c2, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x28b182c2, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x28b182c2, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x6000)) returned 1 [0190.292] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0190.292] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xac [0190.292] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0190.292] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingfinance_8wekyb3d8bbwe\\microsoft.bingfinance_4.3.193.0_x86__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x22597d8 | out: lpFileInformation=0x22597d8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28b182c2, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x28b182c2, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x28b182c2, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x6000)) returned 1 [0190.292] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0190.292] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xac [0190.292] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0190.292] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingfinance_8wekyb3d8bbwe\\microsoft.bingfinance_4.3.193.0_x86__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0190.294] GetFileType (hFile=0x444) returned 0x1 [0190.294] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0190.294] GetFileType (hFile=0x444) returned 0x1 [0190.294] ReadFile (in: hFile=0x444, lpBuffer=0x225bd68, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x225bd68*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0190.308] CloseHandle (hObject=0x444) returned 1 [0190.308] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xac [0190.308] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0190.308] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingfinance_8wekyb3d8bbwe\\microsoft.bingfinance_4.3.193.0_x86__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0190.308] GetFileType (hFile=0x444) returned 0x1 [0190.308] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0190.308] GetFileType (hFile=0x444) returned 0x1 [0190.308] WriteFile (in: hFile=0x444, lpBuffer=0x22599e8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x22599e8*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0190.309] CloseHandle (hObject=0x444) returned 1 [0190.309] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xac [0190.309] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1.xuy", lpFilePart=0x0) returned 0xb0 [0190.309] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0190.309] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingfinance_8wekyb3d8bbwe\\microsoft.bingfinance_4.3.193.0_x86__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28b182c2, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x28b182c2, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5d46ac5d, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x6000)) returned 1 [0190.309] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0190.310] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingfinance_8wekyb3d8bbwe\\microsoft.bingfinance_4.3.193.0_x86__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingfinance_8wekyb3d8bbwe\\microsoft.bingfinance_4.3.193.0_x86__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1.xuy")) returned 1 [0190.311] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xac [0190.311] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0190.311] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingfinance_8wekyb3d8bbwe\\microsoft.bingfinance_4.3.193.0_x86__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x22d8458 | out: lpFileInformation=0x22d8458*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28b182c2, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x28b182c2, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x28b182c2, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0190.311] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0190.311] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xac [0190.311] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0190.311] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingfinance_8wekyb3d8bbwe\\microsoft.bingfinance_4.3.193.0_x86__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0190.311] GetFileType (hFile=0x444) returned 0x1 [0190.311] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0190.312] GetFileType (hFile=0x444) returned 0x1 [0190.312] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x0 [0190.312] CloseHandle (hObject=0x444) returned 1 [0190.321] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xac [0190.321] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0190.322] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingfinance_8wekyb3d8bbwe\\microsoft.bingfinance_4.3.193.0_x86__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.323] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb070) returned 1 [0190.323] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbcf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xac [0190.324] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0190.324] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingfinance_8wekyb3d8bbwe\\microsoft.bingfinance_4.3.193.0_x86__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x3bc270 | out: lpFileInformation=0x3bc270*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28b182c2, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x28b182c2, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x28b182c2, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0190.324] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc150) returned 1 [0190.324] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbd10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xac [0190.324] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0190.324] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingfinance_8wekyb3d8bbwe\\microsoft.bingfinance_4.3.193.0_x86__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x234f478 | out: lpFileInformation=0x234f478*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28b182c2, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x28b182c2, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x28b182c2, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0190.324] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc150) returned 1 [0190.324] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xac [0190.324] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc050) returned 1 [0190.324] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingfinance_8wekyb3d8bbwe\\microsoft.bingfinance_4.3.193.0_x86__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0190.324] GetFileType (hFile=0x444) returned 0x1 [0190.324] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbfc0) returned 1 [0190.324] GetFileType (hFile=0x444) returned 0x1 [0190.324] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc1e8 | out: lpFileSizeHigh=0x3bc1e8*=0x0) returned 0x0 [0190.324] CloseHandle (hObject=0x444) returned 1 [0190.386] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xac [0190.386] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc050) returned 1 [0190.386] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingfinance_8wekyb3d8bbwe\\microsoft.bingfinance_4.3.193.0_x86__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.388] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8ae0) returned 1 [0190.389] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0190.389] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\RoamingState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\RoamingState", lpFilePart=0x0) returned 0x5d [0190.389] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\RoamingState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\RoamingState\\", lpFilePart=0x0) returned 0x5e [0190.389] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\RoamingState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d81b0 [0190.389] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0190.390] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0190.390] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0190.390] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0190.390] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0190.390] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0190.390] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\RoamingState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\RoamingState", lpFilePart=0x0) returned 0x5d [0190.390] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\RoamingState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\RoamingState\\", lpFilePart=0x0) returned 0x5e [0190.390] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\RoamingState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7af0 [0190.390] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0190.390] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0190.390] FindClose (in: hFindFile=0x5d7af0 | out: hFindFile=0x5d7af0) returned 1 [0190.390] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0190.391] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0190.391] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0190.391] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\Settings", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\Settings", lpFilePart=0x0) returned 0x59 [0190.391] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\Settings\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\Settings\\", lpFilePart=0x0) returned 0x5a [0190.391] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\Settings\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d79d0 [0190.391] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0190.391] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0190.391] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0190.391] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0190.391] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0190.391] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0190.391] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0190.391] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0190.391] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\Settings", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\Settings", lpFilePart=0x0) returned 0x59 [0190.392] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\Settings\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\Settings\\", lpFilePart=0x0) returned 0x5a [0190.392] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\Settings\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7a90 [0190.392] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0190.392] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0190.392] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0190.392] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0190.392] FindClose (in: hFindFile=0x5d7a90 | out: hFindFile=0x5d7a90) returned 1 [0190.392] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0190.392] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0190.392] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\Settings\\roaming.lock", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\Settings\\roaming.lock", lpFilePart=0x0) returned 0x66 [0190.392] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0190.392] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingfinance_8wekyb3d8bbwe\\settings\\roaming.lock"), fInfoLevelId=0x0, lpFileInformation=0x21c7e08 | out: lpFileInformation=0x21c7e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2881d214, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x2881d214, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x2881d214, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0190.393] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0190.393] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\Settings\\roaming.lock", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\Settings\\roaming.lock", lpFilePart=0x0) returned 0x66 [0190.393] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0190.393] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingfinance_8wekyb3d8bbwe\\settings\\roaming.lock"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0190.393] GetFileType (hFile=0x444) returned 0x1 [0190.393] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0190.393] GetFileType (hFile=0x444) returned 0x1 [0190.393] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0x0 [0190.393] CloseHandle (hObject=0x444) returned 1 [0190.432] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\Settings\\roaming.lock", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\Settings\\roaming.lock", lpFilePart=0x0) returned 0x66 [0190.432] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0190.432] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingfinance_8wekyb3d8bbwe\\settings\\roaming.lock"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0190.433] GetFileType (hFile=0x444) returned 0x1 [0190.434] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0190.434] GetFileType (hFile=0x444) returned 0x1 [0190.434] WriteFile (in: hFile=0x444, lpBuffer=0x223e258*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x3be628, lpOverlapped=0x0 | out: lpBuffer=0x223e258*, lpNumberOfBytesWritten=0x3be628*=0x10, lpOverlapped=0x0) returned 1 [0190.435] CloseHandle (hObject=0x444) returned 1 [0190.435] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\Settings\\roaming.lock", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\Settings\\roaming.lock", lpFilePart=0x0) returned 0x66 [0190.435] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\Settings\\roaming.lock.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\Settings\\roaming.lock.xuy", lpFilePart=0x0) returned 0x6a [0190.435] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0190.435] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingfinance_8wekyb3d8bbwe\\settings\\roaming.lock"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2881d214, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x2881d214, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5d5c20b5, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0190.435] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0190.435] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingfinance_8wekyb3d8bbwe\\settings\\roaming.lock"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\Settings\\roaming.lock.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingfinance_8wekyb3d8bbwe\\settings\\roaming.lock.xuy")) returned 1 [0190.436] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\Settings\\settings.dat", lpFilePart=0x0) returned 0x66 [0190.436] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0190.436] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingfinance_8wekyb3d8bbwe\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x223f580 | out: lpFileInformation=0x223f580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2881d214, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x2881d214, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x8d6f5917, ftLastWriteTime.dwHighDateTime=0x1d0baff, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0190.437] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0190.437] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\Settings\\settings.dat", lpFilePart=0x0) returned 0x66 [0190.437] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0190.437] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingfinance_8wekyb3d8bbwe\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x223f708 | out: lpFileInformation=0x223f708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2881d214, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x2881d214, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x8d6f5917, ftLastWriteTime.dwHighDateTime=0x1d0baff, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0190.437] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0190.437] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\Settings\\settings.dat", lpFilePart=0x0) returned 0x66 [0190.437] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0190.437] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingfinance_8wekyb3d8bbwe\\settings\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0190.438] GetFileType (hFile=0x444) returned 0x1 [0190.438] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0190.438] GetFileType (hFile=0x444) returned 0x1 [0190.438] ReadFile (in: hFile=0x444, lpBuffer=0x2241b48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x2241b48*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0190.451] CloseHandle (hObject=0x444) returned 1 [0190.451] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\Settings\\settings.dat", lpFilePart=0x0) returned 0x66 [0190.451] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0190.451] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingfinance_8wekyb3d8bbwe\\settings\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0190.451] GetFileType (hFile=0x444) returned 0x1 [0190.451] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0190.451] GetFileType (hFile=0x444) returned 0x1 [0190.451] WriteFile (in: hFile=0x444, lpBuffer=0x223f870*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x223f870*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0190.451] CloseHandle (hObject=0x444) returned 1 [0190.452] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\Settings\\settings.dat", lpFilePart=0x0) returned 0x66 [0190.452] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\Settings\\settings.dat.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\Settings\\settings.dat.xuy", lpFilePart=0x0) returned 0x6a [0190.452] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0190.452] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingfinance_8wekyb3d8bbwe\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2881d214, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x2881d214, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5d5e87e9, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0190.452] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0190.452] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingfinance_8wekyb3d8bbwe\\settings\\settings.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\Settings\\settings.dat.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingfinance_8wekyb3d8bbwe\\settings\\settings.dat.xuy")) returned 1 [0190.453] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0190.453] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\SystemAppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\SystemAppData", lpFilePart=0x0) returned 0x5e [0190.453] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\SystemAppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\SystemAppData\\", lpFilePart=0x0) returned 0x5f [0190.453] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\SystemAppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d79d0 [0190.453] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0190.454] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0190.454] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0190.454] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0190.454] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0190.454] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0190.454] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\SystemAppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\SystemAppData", lpFilePart=0x0) returned 0x5e [0190.454] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\SystemAppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\SystemAppData\\", lpFilePart=0x0) returned 0x5f [0190.454] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\SystemAppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7370 [0190.454] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0190.454] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0190.454] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0190.454] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0190.454] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0190.454] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0190.454] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\TempState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\TempState", lpFilePart=0x0) returned 0x5a [0190.454] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\TempState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\TempState\\", lpFilePart=0x0) returned 0x5b [0190.455] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\TempState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7370 [0190.455] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0190.455] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0190.455] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0190.455] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0190.455] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0190.455] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0190.455] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\TempState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\TempState", lpFilePart=0x0) returned 0x5a [0190.455] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\TempState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\TempState\\", lpFilePart=0x0) returned 0x5b [0190.455] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\TempState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d78b0 [0190.455] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0190.456] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0190.456] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0190.456] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0190.456] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0190.456] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0190.456] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe", lpFilePart=0x0) returned 0x4d [0190.456] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\", lpFilePart=0x0) returned 0x4e [0190.456] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d7eb0 [0190.469] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0190.469] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0190.469] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0190.470] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0190.470] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0190.470] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0190.470] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0190.470] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0190.470] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0190.470] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0190.471] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0190.471] FindClose (in: hFindFile=0x5d7eb0 | out: hFindFile=0x5d7eb0) returned 1 [0190.471] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0190.471] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0190.472] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0190.472] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe", lpFilePart=0x0) returned 0x4d [0190.472] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\", lpFilePart=0x0) returned 0x4e [0190.472] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d78b0 [0190.472] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0190.473] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0190.473] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0190.473] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0190.473] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0190.473] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0190.473] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0190.473] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0190.473] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0190.473] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0190.474] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0190.474] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0190.474] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0190.474] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0190.474] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0190.474] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\AC", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\AC", lpFilePart=0x0) returned 0x50 [0190.474] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\AC\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\AC\\", lpFilePart=0x0) returned 0x51 [0190.474] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\AC\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7df0 [0190.483] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0190.484] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0190.484] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0190.484] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0190.484] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0190.484] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0190.484] FindClose (in: hFindFile=0x5d7df0 | out: hFindFile=0x5d7df0) returned 1 [0190.485] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0190.485] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0190.485] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0190.485] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\AC", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\AC", lpFilePart=0x0) returned 0x50 [0190.485] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\AC\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\AC\\", lpFilePart=0x0) returned 0x51 [0190.485] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\AC\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d79d0 [0190.486] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0190.486] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0190.486] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0190.486] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0190.487] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0190.487] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0190.487] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0190.487] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0190.487] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0190.487] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0190.488] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\AC\\INetCache", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\AC\\INetCache", lpFilePart=0x0) returned 0x5a [0190.488] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\AC\\INetCache\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\AC\\INetCache\\", lpFilePart=0x0) returned 0x5b [0190.488] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\AC\\INetCache\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7670 [0190.493] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0190.493] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0190.493] FindClose (in: hFindFile=0x5d7670 | out: hFindFile=0x5d7670) returned 1 [0190.493] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0190.493] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0190.493] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0190.493] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\AC\\INetCache", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\AC\\INetCache", lpFilePart=0x0) returned 0x5a [0190.493] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\AC\\INetCache\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\AC\\INetCache\\", lpFilePart=0x0) returned 0x5b [0190.493] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\AC\\INetCache\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7fd0 [0190.494] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0190.494] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0190.494] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0190.494] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0190.494] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0190.494] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0190.494] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\AC\\INetCookies", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\AC\\INetCookies", lpFilePart=0x0) returned 0x5c [0190.494] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\AC\\INetCookies\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\AC\\INetCookies\\", lpFilePart=0x0) returned 0x5d [0190.494] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\AC\\INetCookies\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7d30 [0190.494] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0190.495] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0190.495] FindClose (in: hFindFile=0x5d7d30 | out: hFindFile=0x5d7d30) returned 1 [0190.495] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0190.495] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0190.495] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0190.495] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\AC\\INetCookies", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\AC\\INetCookies", lpFilePart=0x0) returned 0x5c [0190.495] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\AC\\INetCookies\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\AC\\INetCookies\\", lpFilePart=0x0) returned 0x5d [0190.495] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\AC\\INetCookies\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7e50 [0190.495] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0190.495] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0190.495] FindClose (in: hFindFile=0x5d7e50 | out: hFindFile=0x5d7e50) returned 1 [0190.495] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0190.495] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0190.495] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0190.495] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\AC\\INetHistory", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\AC\\INetHistory", lpFilePart=0x0) returned 0x5c [0190.496] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\AC\\INetHistory\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\AC\\INetHistory\\", lpFilePart=0x0) returned 0x5d [0190.496] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\AC\\INetHistory\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d78b0 [0190.496] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0190.496] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0190.496] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0190.496] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0190.496] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0190.496] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0190.496] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\AC\\INetHistory", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\AC\\INetHistory", lpFilePart=0x0) returned 0x5c [0190.496] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\AC\\INetHistory\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\AC\\INetHistory\\", lpFilePart=0x0) returned 0x5d [0190.496] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\AC\\INetHistory\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7370 [0190.497] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0190.497] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0190.497] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0190.497] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0190.497] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0190.497] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0190.497] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\AC\\Temp", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\AC\\Temp", lpFilePart=0x0) returned 0x55 [0190.497] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\AC\\Temp\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\AC\\Temp\\", lpFilePart=0x0) returned 0x56 [0190.497] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\AC\\Temp\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7610 [0190.497] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0190.498] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0190.498] FindClose (in: hFindFile=0x5d7610 | out: hFindFile=0x5d7610) returned 1 [0190.498] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0190.498] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0190.498] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0190.498] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\AC\\Temp", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\AC\\Temp", lpFilePart=0x0) returned 0x55 [0190.498] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\AC\\Temp\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\AC\\Temp\\", lpFilePart=0x0) returned 0x56 [0190.498] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\AC\\Temp\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7370 [0190.498] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0190.498] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0190.498] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0190.498] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0190.498] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0190.498] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0190.498] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\AppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\AppData", lpFilePart=0x0) returned 0x55 [0190.498] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\AppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\AppData\\", lpFilePart=0x0) returned 0x56 [0190.499] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\AppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d78b0 [0190.499] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0190.499] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0190.499] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0190.499] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0190.499] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0190.499] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0190.499] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\AppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\AppData", lpFilePart=0x0) returned 0x55 [0190.499] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\AppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\AppData\\", lpFilePart=0x0) returned 0x56 [0190.499] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\AppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d81b0 [0190.499] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0190.500] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0190.500] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0190.500] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0190.500] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0190.500] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0190.500] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\LocalCache", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\LocalCache", lpFilePart=0x0) returned 0x58 [0190.500] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\LocalCache\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\LocalCache\\", lpFilePart=0x0) returned 0x59 [0190.500] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\LocalCache\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7670 [0190.502] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0190.502] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0190.502] FindClose (in: hFindFile=0x5d7670 | out: hFindFile=0x5d7670) returned 1 [0190.502] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0190.502] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0190.502] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0190.502] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\LocalCache", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\LocalCache", lpFilePart=0x0) returned 0x58 [0190.502] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\LocalCache\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\LocalCache\\", lpFilePart=0x0) returned 0x59 [0190.502] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\LocalCache\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7550 [0190.503] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0190.503] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0190.503] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0190.503] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0190.503] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0190.503] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0190.503] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\LocalState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\LocalState", lpFilePart=0x0) returned 0x58 [0190.503] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\LocalState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\LocalState\\", lpFilePart=0x0) returned 0x59 [0190.503] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\LocalState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7df0 [0190.503] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0190.503] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0190.503] FindClose (in: hFindFile=0x5d7df0 | out: hFindFile=0x5d7df0) returned 1 [0190.503] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0190.503] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0190.503] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0190.504] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\LocalState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\LocalState", lpFilePart=0x0) returned 0x58 [0190.504] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\LocalState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\LocalState\\", lpFilePart=0x0) returned 0x59 [0190.504] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\LocalState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d8090 [0190.504] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0190.504] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0190.504] FindClose (in: hFindFile=0x5d8090 | out: hFindFile=0x5d8090) returned 1 [0190.504] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0190.504] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0190.504] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0190.504] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe", lpFilePart=0x0) returned 0x7d [0190.504] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\\", lpFilePart=0x0) returned 0x7e [0190.504] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7550 [0190.507] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0190.507] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0190.507] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0190.507] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0190.507] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0190.507] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0190.507] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0190.507] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe", lpFilePart=0x0) returned 0x7d [0190.507] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\\", lpFilePart=0x0) returned 0x7e [0190.507] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7550 [0190.508] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0190.508] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0190.508] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0190.508] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0190.508] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0190.508] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0190.508] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0190.508] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore", lpFilePart=0x0) returned 0x8d [0190.508] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\", lpFilePart=0x0) returned 0x8e [0190.508] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7af0 [0190.523] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0190.524] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0190.524] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0190.524] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0190.524] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0190.524] FindClose (in: hFindFile=0x5d7af0 | out: hFindFile=0x5d7af0) returned 1 [0190.525] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0190.525] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0190.525] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0190.525] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore", lpFilePart=0x0) returned 0x8d [0190.525] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\", lpFilePart=0x0) returned 0x8e [0190.525] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d81b0 [0190.526] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0190.526] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0190.526] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0190.526] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0190.526] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0190.526] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0190.526] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0190.527] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0190.527] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xa1 [0190.527] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0190.527] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingnews_8wekyb3d8bbwe\\microsoft.bingnews_4.3.193.0_x86__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), fInfoLevelId=0x0, lpFileInformation=0x22dd3d0 | out: lpFileInformation=0x22dd3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x272f4412, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x274256b7, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x274256b7, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x8000)) returned 1 [0190.527] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0190.527] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xa1 [0190.528] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0190.528] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingnews_8wekyb3d8bbwe\\microsoft.bingnews_4.3.193.0_x86__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), fInfoLevelId=0x0, lpFileInformation=0x22dd5d8 | out: lpFileInformation=0x22dd5d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x272f4412, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x274256b7, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x274256b7, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x8000)) returned 1 [0190.528] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0190.528] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xa1 [0190.528] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0190.528] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingnews_8wekyb3d8bbwe\\microsoft.bingnews_4.3.193.0_x86__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0190.529] GetFileType (hFile=0x444) returned 0x1 [0190.529] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0190.529] GetFileType (hFile=0x444) returned 0x1 [0190.529] ReadFile (in: hFile=0x444, lpBuffer=0x22dfb18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x22dfb18*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0190.663] CloseHandle (hObject=0x444) returned 1 [0190.663] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xa1 [0190.663] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0190.663] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingnews_8wekyb3d8bbwe\\microsoft.bingnews_4.3.193.0_x86__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0190.663] GetFileType (hFile=0x444) returned 0x1 [0190.663] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0190.663] GetFileType (hFile=0x444) returned 0x1 [0190.663] WriteFile (in: hFile=0x444, lpBuffer=0x22dd7c0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x22dd7c0*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0190.664] CloseHandle (hObject=0x444) returned 1 [0190.664] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xa1 [0190.664] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.xuy", lpFilePart=0x0) returned 0xa5 [0190.664] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0190.664] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingnews_8wekyb3d8bbwe\\microsoft.bingnews_4.3.193.0_x86__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x272f4412, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x274256b7, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5d7d8204, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x8000)) returned 1 [0190.664] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0190.664] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingnews_8wekyb3d8bbwe\\microsoft.bingnews_4.3.193.0_x86__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingnews_8wekyb3d8bbwe\\microsoft.bingnews_4.3.193.0_x86__8wekyb3d8bbwe\\activationstore\\activationstore.dat.xuy")) returned 1 [0190.665] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xa6 [0190.666] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0190.666] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingnews_8wekyb3d8bbwe\\microsoft.bingnews_4.3.193.0_x86__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x235c198 | out: lpFileInformation=0x235c198*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x2731a795, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x2731a795, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x2731a795, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x6000)) returned 1 [0190.666] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0190.666] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xa6 [0190.666] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0190.666] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingnews_8wekyb3d8bbwe\\microsoft.bingnews_4.3.193.0_x86__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x235c3b8 | out: lpFileInformation=0x235c3b8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x2731a795, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x2731a795, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x2731a795, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x6000)) returned 1 [0190.666] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0190.666] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xa6 [0190.666] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0190.666] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingnews_8wekyb3d8bbwe\\microsoft.bingnews_4.3.193.0_x86__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0190.667] GetFileType (hFile=0x444) returned 0x1 [0190.667] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0190.667] GetFileType (hFile=0x444) returned 0x1 [0190.667] ReadFile (in: hFile=0x444, lpBuffer=0x235e928, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x235e928*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0190.727] CloseHandle (hObject=0x444) returned 1 [0190.727] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xa6 [0190.727] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0190.727] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingnews_8wekyb3d8bbwe\\microsoft.bingnews_4.3.193.0_x86__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0190.728] GetFileType (hFile=0x444) returned 0x1 [0190.728] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0190.728] GetFileType (hFile=0x444) returned 0x1 [0190.728] WriteFile (in: hFile=0x444, lpBuffer=0x218cd30*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x218cd30*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0190.728] CloseHandle (hObject=0x444) returned 1 [0190.728] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xa6 [0190.728] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1.xuy", lpFilePart=0x0) returned 0xaa [0190.728] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0190.728] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingnews_8wekyb3d8bbwe\\microsoft.bingnews_4.3.193.0_x86__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x2731a795, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x2731a795, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5d870c77, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x6000)) returned 1 [0190.728] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0190.728] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingnews_8wekyb3d8bbwe\\microsoft.bingnews_4.3.193.0_x86__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingnews_8wekyb3d8bbwe\\microsoft.bingnews_4.3.193.0_x86__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1.xuy")) returned 1 [0190.730] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xa6 [0190.730] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0190.730] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingnews_8wekyb3d8bbwe\\microsoft.bingnews_4.3.193.0_x86__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x21ddf30 | out: lpFileInformation=0x21ddf30*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x2731a795, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x2731a795, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x2731a795, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0190.730] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0190.730] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xa6 [0190.730] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0190.730] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingnews_8wekyb3d8bbwe\\microsoft.bingnews_4.3.193.0_x86__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0190.730] GetFileType (hFile=0x444) returned 0x1 [0190.730] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0190.730] GetFileType (hFile=0x444) returned 0x1 [0190.730] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x0 [0190.731] CloseHandle (hObject=0x444) returned 1 [0190.741] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xa6 [0190.741] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0190.741] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingnews_8wekyb3d8bbwe\\microsoft.bingnews_4.3.193.0_x86__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.743] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb070) returned 1 [0190.743] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbcf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xa6 [0190.743] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0190.743] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingnews_8wekyb3d8bbwe\\microsoft.bingnews_4.3.193.0_x86__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x3bc270 | out: lpFileInformation=0x3bc270*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x2731a795, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x2731a795, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x2731a795, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0190.744] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc150) returned 1 [0190.744] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbd10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xa6 [0190.744] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0190.744] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingnews_8wekyb3d8bbwe\\microsoft.bingnews_4.3.193.0_x86__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x2254f00 | out: lpFileInformation=0x2254f00*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x2731a795, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x2731a795, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x2731a795, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0190.744] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc150) returned 1 [0190.744] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xa6 [0190.744] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc050) returned 1 [0190.744] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingnews_8wekyb3d8bbwe\\microsoft.bingnews_4.3.193.0_x86__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0190.744] GetFileType (hFile=0x444) returned 0x1 [0190.744] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbfc0) returned 1 [0190.744] GetFileType (hFile=0x444) returned 0x1 [0190.744] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc1e8 | out: lpFileSizeHigh=0x3bc1e8*=0x0) returned 0x0 [0190.744] CloseHandle (hObject=0x444) returned 1 [0190.882] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xa6 [0190.882] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc050) returned 1 [0190.882] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingnews_8wekyb3d8bbwe\\microsoft.bingnews_4.3.193.0_x86__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0190.884] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8ae0) returned 1 [0190.885] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0190.885] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\RoamingState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\RoamingState", lpFilePart=0x0) returned 0x5a [0190.885] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\RoamingState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\RoamingState\\", lpFilePart=0x0) returned 0x5b [0190.885] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\RoamingState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d79d0 [0190.886] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0190.886] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0190.886] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0190.886] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0190.886] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0190.886] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0190.886] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\RoamingState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\RoamingState", lpFilePart=0x0) returned 0x5a [0190.886] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\RoamingState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\RoamingState\\", lpFilePart=0x0) returned 0x5b [0190.886] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\RoamingState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7c70 [0190.887] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0190.887] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0190.887] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0190.887] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0190.887] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0190.887] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0190.887] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\Settings", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\Settings", lpFilePart=0x0) returned 0x56 [0190.887] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\Settings\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\Settings\\", lpFilePart=0x0) returned 0x57 [0190.888] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\Settings\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d79d0 [0190.888] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0190.888] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0190.888] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0190.888] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0190.889] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0190.889] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0190.889] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0190.889] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0190.889] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\Settings", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\Settings", lpFilePart=0x0) returned 0x56 [0190.889] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\Settings\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\Settings\\", lpFilePart=0x0) returned 0x57 [0190.889] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\Settings\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7d90 [0190.889] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0190.889] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0190.890] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0190.890] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0190.890] FindClose (in: hFindFile=0x5d7d90 | out: hFindFile=0x5d7d90) returned 1 [0190.890] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0190.890] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0190.890] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\Settings\\roaming.lock", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\Settings\\roaming.lock", lpFilePart=0x0) returned 0x63 [0190.890] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0190.890] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingnews_8wekyb3d8bbwe\\settings\\roaming.lock"), fInfoLevelId=0x0, lpFileInformation=0x22d0410 | out: lpFileInformation=0x22d0410*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2701f6af, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x2701f6af, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x2701f6af, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0190.890] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0190.890] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\Settings\\roaming.lock", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\Settings\\roaming.lock", lpFilePart=0x0) returned 0x63 [0190.891] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0190.891] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingnews_8wekyb3d8bbwe\\settings\\roaming.lock"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0190.891] GetFileType (hFile=0x444) returned 0x1 [0190.891] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0190.891] GetFileType (hFile=0x444) returned 0x1 [0190.891] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0x0 [0190.891] CloseHandle (hObject=0x444) returned 1 [0190.943] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\Settings\\roaming.lock", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\Settings\\roaming.lock", lpFilePart=0x0) returned 0x63 [0190.943] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0190.943] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingnews_8wekyb3d8bbwe\\settings\\roaming.lock"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0190.944] GetFileType (hFile=0x444) returned 0x1 [0190.945] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0190.945] GetFileType (hFile=0x444) returned 0x1 [0190.945] WriteFile (in: hFile=0x444, lpBuffer=0x2346848*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x3be628, lpOverlapped=0x0 | out: lpBuffer=0x2346848*, lpNumberOfBytesWritten=0x3be628*=0x10, lpOverlapped=0x0) returned 1 [0190.946] CloseHandle (hObject=0x444) returned 1 [0190.946] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\Settings\\roaming.lock", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\Settings\\roaming.lock", lpFilePart=0x0) returned 0x63 [0190.946] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\Settings\\roaming.lock.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\Settings\\roaming.lock.xuy", lpFilePart=0x0) returned 0x67 [0190.946] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0190.946] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingnews_8wekyb3d8bbwe\\settings\\roaming.lock"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2701f6af, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x2701f6af, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5da87303, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0190.946] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0190.946] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingnews_8wekyb3d8bbwe\\settings\\roaming.lock"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\Settings\\roaming.lock.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingnews_8wekyb3d8bbwe\\settings\\roaming.lock.xuy")) returned 1 [0190.948] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\Settings\\settings.dat", lpFilePart=0x0) returned 0x63 [0190.948] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0190.948] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingnews_8wekyb3d8bbwe\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x2347b58 | out: lpFileInformation=0x2347b58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2701f6af, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x2701f6af, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x8d6f5917, ftLastWriteTime.dwHighDateTime=0x1d0baff, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0190.948] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0190.948] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\Settings\\settings.dat", lpFilePart=0x0) returned 0x63 [0190.948] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0190.949] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingnews_8wekyb3d8bbwe\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x2347cd8 | out: lpFileInformation=0x2347cd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2701f6af, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x2701f6af, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x8d6f5917, ftLastWriteTime.dwHighDateTime=0x1d0baff, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0190.949] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0190.949] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\Settings\\settings.dat", lpFilePart=0x0) returned 0x63 [0190.949] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0190.949] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingnews_8wekyb3d8bbwe\\settings\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0190.951] GetFileType (hFile=0x444) returned 0x1 [0190.951] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0190.951] GetFileType (hFile=0x444) returned 0x1 [0190.951] ReadFile (in: hFile=0x444, lpBuffer=0x234a108, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x234a108*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0191.032] CloseHandle (hObject=0x444) returned 1 [0191.032] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\Settings\\settings.dat", lpFilePart=0x0) returned 0x63 [0191.032] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0191.033] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingnews_8wekyb3d8bbwe\\settings\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0191.033] GetFileType (hFile=0x444) returned 0x1 [0191.033] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0191.033] GetFileType (hFile=0x444) returned 0x1 [0191.033] WriteFile (in: hFile=0x444, lpBuffer=0x218c9c0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x218c9c0*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0191.033] CloseHandle (hObject=0x444) returned 1 [0191.033] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\Settings\\settings.dat", lpFilePart=0x0) returned 0x63 [0191.033] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\Settings\\settings.dat.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\Settings\\settings.dat.xuy", lpFilePart=0x0) returned 0x67 [0191.033] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0191.033] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingnews_8wekyb3d8bbwe\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2701f6af, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x2701f6af, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5db6bae8, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0191.033] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0191.033] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingnews_8wekyb3d8bbwe\\settings\\settings.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\Settings\\settings.dat.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingnews_8wekyb3d8bbwe\\settings\\settings.dat.xuy")) returned 1 [0191.035] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0191.035] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\SystemAppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\SystemAppData", lpFilePart=0x0) returned 0x5b [0191.035] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\SystemAppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\SystemAppData\\", lpFilePart=0x0) returned 0x5c [0191.035] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\SystemAppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7cd0 [0191.035] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0191.035] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0191.035] FindClose (in: hFindFile=0x5d7cd0 | out: hFindFile=0x5d7cd0) returned 1 [0191.035] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0191.035] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0191.035] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0191.035] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\SystemAppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\SystemAppData", lpFilePart=0x0) returned 0x5b [0191.036] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\SystemAppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\SystemAppData\\", lpFilePart=0x0) returned 0x5c [0191.036] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\SystemAppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d75b0 [0191.036] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0191.036] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0191.036] FindClose (in: hFindFile=0x5d75b0 | out: hFindFile=0x5d75b0) returned 1 [0191.036] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0191.036] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0191.036] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0191.036] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\TempState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\TempState", lpFilePart=0x0) returned 0x57 [0191.036] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\TempState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\TempState\\", lpFilePart=0x0) returned 0x58 [0191.036] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\TempState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7550 [0191.036] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0191.037] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0191.037] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0191.037] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0191.037] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0191.037] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0191.037] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\TempState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\TempState", lpFilePart=0x0) returned 0x57 [0191.037] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\TempState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\TempState\\", lpFilePart=0x0) returned 0x58 [0191.037] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\TempState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7370 [0191.037] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0191.037] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0191.037] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0191.037] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0191.037] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0191.037] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0191.037] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe", lpFilePart=0x0) returned 0x4f [0191.038] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\", lpFilePart=0x0) returned 0x50 [0191.038] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d7af0 [0191.050] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0191.050] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0191.050] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0191.050] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0191.050] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0191.050] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0191.051] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0191.051] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0191.051] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0191.051] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0191.051] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0191.051] FindClose (in: hFindFile=0x5d7af0 | out: hFindFile=0x5d7af0) returned 1 [0191.052] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0191.052] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0191.052] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0191.052] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe", lpFilePart=0x0) returned 0x4f [0191.052] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\", lpFilePart=0x0) returned 0x50 [0191.052] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d7eb0 [0191.053] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0191.053] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0191.053] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0191.053] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0191.053] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0191.053] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0191.053] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0191.053] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0191.054] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0191.054] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0191.054] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0191.054] FindClose (in: hFindFile=0x5d7eb0 | out: hFindFile=0x5d7eb0) returned 1 [0191.054] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0191.055] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0191.055] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0191.055] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\AC", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\AC", lpFilePart=0x0) returned 0x52 [0191.055] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\AC\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\AC\\", lpFilePart=0x0) returned 0x53 [0191.055] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\AC\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d79d0 [0191.061] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0191.062] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0191.062] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0191.062] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0191.062] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0191.062] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0191.062] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0191.063] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0191.063] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0191.063] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0191.063] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\AC", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\AC", lpFilePart=0x0) returned 0x52 [0191.063] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\AC\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\AC\\", lpFilePart=0x0) returned 0x53 [0191.063] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\AC\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d78b0 [0191.064] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0191.064] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0191.064] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0191.064] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0191.065] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0191.065] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0191.065] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0191.065] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0191.065] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0191.065] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0191.066] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\AC\\INetCache", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\AC\\INetCache", lpFilePart=0x0) returned 0x5c [0191.066] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\AC\\INetCache\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\AC\\INetCache\\", lpFilePart=0x0) returned 0x5d [0191.066] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\AC\\INetCache\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7370 [0191.068] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0191.068] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0191.068] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0191.069] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0191.069] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0191.069] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0191.069] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\AC\\INetCache", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\AC\\INetCache", lpFilePart=0x0) returned 0x5c [0191.069] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\AC\\INetCache\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\AC\\INetCache\\", lpFilePart=0x0) returned 0x5d [0191.069] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\AC\\INetCache\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d78b0 [0191.069] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0191.069] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0191.069] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0191.069] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0191.069] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0191.069] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0191.069] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\AC\\INetCookies", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\AC\\INetCookies", lpFilePart=0x0) returned 0x5e [0191.069] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\AC\\INetCookies\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\AC\\INetCookies\\", lpFilePart=0x0) returned 0x5f [0191.069] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\AC\\INetCookies\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d81b0 [0191.070] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0191.070] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0191.070] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0191.070] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0191.070] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0191.070] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0191.070] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\AC\\INetCookies", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\AC\\INetCookies", lpFilePart=0x0) returned 0x5e [0191.070] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\AC\\INetCookies\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\AC\\INetCookies\\", lpFilePart=0x0) returned 0x5f [0191.070] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\AC\\INetCookies\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d78b0 [0191.070] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0191.070] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0191.071] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0191.071] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0191.071] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0191.071] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0191.071] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\AC\\INetHistory", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\AC\\INetHistory", lpFilePart=0x0) returned 0x5e [0191.071] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\AC\\INetHistory\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\AC\\INetHistory\\", lpFilePart=0x0) returned 0x5f [0191.071] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\AC\\INetHistory\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7550 [0191.071] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0191.071] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0191.071] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0191.071] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0191.071] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0191.071] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0191.071] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\AC\\INetHistory", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\AC\\INetHistory", lpFilePart=0x0) returned 0x5e [0191.071] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\AC\\INetHistory\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\AC\\INetHistory\\", lpFilePart=0x0) returned 0x5f [0191.072] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\AC\\INetHistory\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7f10 [0191.072] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0191.072] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0191.072] FindClose (in: hFindFile=0x5d7f10 | out: hFindFile=0x5d7f10) returned 1 [0191.072] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0191.072] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0191.072] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0191.072] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\AC\\Temp", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\AC\\Temp", lpFilePart=0x0) returned 0x57 [0191.072] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\AC\\Temp\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\AC\\Temp\\", lpFilePart=0x0) returned 0x58 [0191.072] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\AC\\Temp\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d78b0 [0191.072] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0191.073] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0191.073] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0191.073] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0191.073] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0191.073] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0191.073] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\AC\\Temp", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\AC\\Temp", lpFilePart=0x0) returned 0x57 [0191.073] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\AC\\Temp\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\AC\\Temp\\", lpFilePart=0x0) returned 0x58 [0191.073] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\AC\\Temp\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7c70 [0191.073] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0191.073] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0191.073] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0191.073] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0191.073] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0191.073] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0191.073] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\AppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\AppData", lpFilePart=0x0) returned 0x57 [0191.074] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\AppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\AppData\\", lpFilePart=0x0) returned 0x58 [0191.074] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\AppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d81b0 [0191.074] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0191.074] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0191.074] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0191.074] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0191.074] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0191.074] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0191.074] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\AppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\AppData", lpFilePart=0x0) returned 0x57 [0191.074] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\AppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\AppData\\", lpFilePart=0x0) returned 0x58 [0191.074] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\AppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d81b0 [0191.074] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0191.075] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0191.075] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0191.075] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0191.075] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0191.075] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0191.075] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\LocalCache", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\LocalCache", lpFilePart=0x0) returned 0x5a [0191.075] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\LocalCache\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\LocalCache\\", lpFilePart=0x0) returned 0x5b [0191.075] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\LocalCache\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7a90 [0191.086] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0191.086] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0191.086] FindClose (in: hFindFile=0x5d7a90 | out: hFindFile=0x5d7a90) returned 1 [0191.086] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0191.086] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0191.086] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0191.086] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\LocalCache", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\LocalCache", lpFilePart=0x0) returned 0x5a [0191.086] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\LocalCache\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\LocalCache\\", lpFilePart=0x0) returned 0x5b [0191.086] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\LocalCache\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d73d0 [0191.086] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0191.087] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0191.087] FindClose (in: hFindFile=0x5d73d0 | out: hFindFile=0x5d73d0) returned 1 [0191.087] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0191.087] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0191.087] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0191.087] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\LocalState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\LocalState", lpFilePart=0x0) returned 0x5a [0191.087] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\LocalState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\LocalState\\", lpFilePart=0x0) returned 0x5b [0191.087] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\LocalState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7c70 [0191.087] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0191.087] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0191.088] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0191.088] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0191.088] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0191.088] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0191.088] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\LocalState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\LocalState", lpFilePart=0x0) returned 0x5a [0191.088] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\LocalState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\LocalState\\", lpFilePart=0x0) returned 0x5b [0191.088] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\LocalState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7e50 [0191.088] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0191.088] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0191.088] FindClose (in: hFindFile=0x5d7e50 | out: hFindFile=0x5d7e50) returned 1 [0191.088] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0191.088] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0191.088] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0191.088] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe", lpFilePart=0x0) returned 0x81 [0191.089] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\", lpFilePart=0x0) returned 0x82 [0191.089] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7d90 [0191.089] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0191.089] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0191.089] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0191.089] FindClose (in: hFindFile=0x5d7d90 | out: hFindFile=0x5d7d90) returned 1 [0191.089] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0191.089] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0191.089] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0191.089] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe", lpFilePart=0x0) returned 0x81 [0191.089] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\", lpFilePart=0x0) returned 0x82 [0191.090] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7f10 [0191.090] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0191.090] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0191.090] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0191.090] FindClose (in: hFindFile=0x5d7f10 | out: hFindFile=0x5d7f10) returned 1 [0191.090] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0191.091] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0191.091] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0191.091] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore", lpFilePart=0x0) returned 0x91 [0191.092] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\", lpFilePart=0x0) returned 0x92 [0191.092] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7370 [0191.095] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0191.095] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0191.095] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0191.095] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0191.095] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0191.096] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0191.096] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0191.096] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0191.096] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0191.096] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore", lpFilePart=0x0) returned 0x91 [0191.096] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\", lpFilePart=0x0) returned 0x92 [0191.096] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7370 [0191.097] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0191.097] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0191.097] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0191.098] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0191.098] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0191.098] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0191.098] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0191.099] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0191.099] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xa5 [0191.099] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0191.099] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingsports_8wekyb3d8bbwe\\microsoft.bingsports_4.3.193.0_x86__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), fInfoLevelId=0x0, lpFileInformation=0x21e5c48 | out: lpFileInformation=0x21e5c48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2449c762, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x2474b13b, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x2474b13b, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x8000)) returned 1 [0191.102] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0191.102] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xa5 [0191.102] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0191.102] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingsports_8wekyb3d8bbwe\\microsoft.bingsports_4.3.193.0_x86__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), fInfoLevelId=0x0, lpFileInformation=0x21e5e58 | out: lpFileInformation=0x21e5e58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2449c762, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x2474b13b, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x2474b13b, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x8000)) returned 1 [0191.103] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0191.103] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xa5 [0191.103] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0191.103] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingsports_8wekyb3d8bbwe\\microsoft.bingsports_4.3.193.0_x86__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0191.104] GetFileType (hFile=0x444) returned 0x1 [0191.104] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0191.104] GetFileType (hFile=0x444) returned 0x1 [0191.104] ReadFile (in: hFile=0x444, lpBuffer=0x21e83a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x21e83a8*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0191.129] CloseHandle (hObject=0x444) returned 1 [0191.129] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xa5 [0191.129] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0191.129] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingsports_8wekyb3d8bbwe\\microsoft.bingsports_4.3.193.0_x86__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0191.129] GetFileType (hFile=0x444) returned 0x1 [0191.129] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0191.129] GetFileType (hFile=0x444) returned 0x1 [0191.129] WriteFile (in: hFile=0x444, lpBuffer=0x21e6048*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x21e6048*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0191.130] CloseHandle (hObject=0x444) returned 1 [0191.130] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xa5 [0191.130] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.xuy", lpFilePart=0x0) returned 0xa9 [0191.130] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0191.130] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingsports_8wekyb3d8bbwe\\microsoft.bingsports_4.3.193.0_x86__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2449c762, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x2474b13b, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5dc5089a, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x8000)) returned 1 [0191.130] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0191.130] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingsports_8wekyb3d8bbwe\\microsoft.bingsports_4.3.193.0_x86__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingsports_8wekyb3d8bbwe\\microsoft.bingsports_4.3.193.0_x86__8wekyb3d8bbwe\\activationstore\\activationstore.dat.xuy")) returned 1 [0191.132] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xaa [0191.132] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0191.132] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingsports_8wekyb3d8bbwe\\microsoft.bingsports_4.3.193.0_x86__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x2264a48 | out: lpFileInformation=0x2264a48*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x244e8c04, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x244e8c04, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x244e8c04, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x6000)) returned 1 [0191.132] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0191.132] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xaa [0191.132] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0191.132] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingsports_8wekyb3d8bbwe\\microsoft.bingsports_4.3.193.0_x86__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x2264c70 | out: lpFileInformation=0x2264c70*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x244e8c04, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x244e8c04, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x244e8c04, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x6000)) returned 1 [0191.132] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0191.132] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xaa [0191.132] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0191.132] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingsports_8wekyb3d8bbwe\\microsoft.bingsports_4.3.193.0_x86__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0191.133] GetFileType (hFile=0x444) returned 0x1 [0191.133] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0191.133] GetFileType (hFile=0x444) returned 0x1 [0191.133] ReadFile (in: hFile=0x444, lpBuffer=0x22671f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x22671f0*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0191.150] CloseHandle (hObject=0x444) returned 1 [0191.151] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xaa [0191.151] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0191.151] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingsports_8wekyb3d8bbwe\\microsoft.bingsports_4.3.193.0_x86__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0191.151] GetFileType (hFile=0x444) returned 0x1 [0191.151] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0191.151] GetFileType (hFile=0x444) returned 0x1 [0191.151] WriteFile (in: hFile=0x444, lpBuffer=0x2264e78*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x2264e78*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0191.151] CloseHandle (hObject=0x444) returned 1 [0191.151] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xaa [0191.151] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1.xuy", lpFilePart=0x0) returned 0xae [0191.151] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0191.152] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingsports_8wekyb3d8bbwe\\microsoft.bingsports_4.3.193.0_x86__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x244e8c04, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x244e8c04, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5dc76ab7, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x6000)) returned 1 [0191.152] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0191.152] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingsports_8wekyb3d8bbwe\\microsoft.bingsports_4.3.193.0_x86__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingsports_8wekyb3d8bbwe\\microsoft.bingsports_4.3.193.0_x86__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1.xuy")) returned 1 [0191.153] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xaa [0191.153] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0191.153] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingsports_8wekyb3d8bbwe\\microsoft.bingsports_4.3.193.0_x86__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x22e38c0 | out: lpFileInformation=0x22e38c0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x244e8c04, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x244e8c04, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x244e8c04, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0191.154] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0191.154] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xaa [0191.154] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0191.154] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingsports_8wekyb3d8bbwe\\microsoft.bingsports_4.3.193.0_x86__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0191.154] GetFileType (hFile=0x444) returned 0x1 [0191.154] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0191.154] GetFileType (hFile=0x444) returned 0x1 [0191.154] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x0 [0191.154] CloseHandle (hObject=0x444) returned 1 [0191.164] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xaa [0191.164] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0191.164] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingsports_8wekyb3d8bbwe\\microsoft.bingsports_4.3.193.0_x86__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.165] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb070) returned 1 [0191.166] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbcf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xaa [0191.166] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0191.166] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingsports_8wekyb3d8bbwe\\microsoft.bingsports_4.3.193.0_x86__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x3bc270 | out: lpFileInformation=0x3bc270*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x244e8c04, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x244e8c04, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x244e8c04, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0191.166] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc150) returned 1 [0191.166] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbd10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xaa [0191.166] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0191.166] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingsports_8wekyb3d8bbwe\\microsoft.bingsports_4.3.193.0_x86__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x235a8b8 | out: lpFileInformation=0x235a8b8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x244e8c04, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x244e8c04, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x244e8c04, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0191.166] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc150) returned 1 [0191.166] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xaa [0191.166] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc050) returned 1 [0191.166] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingsports_8wekyb3d8bbwe\\microsoft.bingsports_4.3.193.0_x86__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0191.166] GetFileType (hFile=0x444) returned 0x1 [0191.166] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbfc0) returned 1 [0191.167] GetFileType (hFile=0x444) returned 0x1 [0191.167] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc1e8 | out: lpFileSizeHigh=0x3bc1e8*=0x0) returned 0x0 [0191.167] CloseHandle (hObject=0x444) returned 1 [0191.213] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xaa [0191.213] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc050) returned 1 [0191.213] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingsports_8wekyb3d8bbwe\\microsoft.bingsports_4.3.193.0_x86__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.215] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8ae0) returned 1 [0191.216] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0191.216] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\RoamingState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\RoamingState", lpFilePart=0x0) returned 0x5c [0191.216] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\RoamingState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\RoamingState\\", lpFilePart=0x0) returned 0x5d [0191.216] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\RoamingState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7fd0 [0191.217] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0191.217] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0191.217] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0191.217] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0191.217] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0191.217] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0191.217] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\RoamingState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\RoamingState", lpFilePart=0x0) returned 0x5c [0191.217] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\RoamingState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\RoamingState\\", lpFilePart=0x0) returned 0x5d [0191.217] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\RoamingState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d78b0 [0191.217] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0191.217] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0191.217] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0191.218] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0191.218] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0191.218] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0191.218] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\Settings", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\Settings", lpFilePart=0x0) returned 0x58 [0191.218] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\Settings\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\Settings\\", lpFilePart=0x0) returned 0x59 [0191.218] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\Settings\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7eb0 [0191.218] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0191.218] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0191.218] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0191.218] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0191.218] FindClose (in: hFindFile=0x5d7eb0 | out: hFindFile=0x5d7eb0) returned 1 [0191.219] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0191.219] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0191.219] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0191.219] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\Settings", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\Settings", lpFilePart=0x0) returned 0x58 [0191.219] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\Settings\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\Settings\\", lpFilePart=0x0) returned 0x59 [0191.219] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\Settings\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7a90 [0191.219] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0191.219] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0191.219] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0191.219] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0191.219] FindClose (in: hFindFile=0x5d7a90 | out: hFindFile=0x5d7a90) returned 1 [0191.219] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0191.220] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0191.220] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\Settings\\roaming.lock", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\Settings\\roaming.lock", lpFilePart=0x0) returned 0x65 [0191.220] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0191.220] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingsports_8wekyb3d8bbwe\\settings\\roaming.lock"), fInfoLevelId=0x0, lpFileInformation=0x21d3298 | out: lpFileInformation=0x21d3298*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23b13012, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x23b13012, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x23b13012, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0191.220] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0191.220] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\Settings\\roaming.lock", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\Settings\\roaming.lock", lpFilePart=0x0) returned 0x65 [0191.220] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0191.220] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingsports_8wekyb3d8bbwe\\settings\\roaming.lock"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0191.220] GetFileType (hFile=0x444) returned 0x1 [0191.220] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0191.220] GetFileType (hFile=0x444) returned 0x1 [0191.220] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0x0 [0191.220] CloseHandle (hObject=0x444) returned 1 [0191.261] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\Settings\\roaming.lock", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\Settings\\roaming.lock", lpFilePart=0x0) returned 0x65 [0191.261] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0191.261] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingsports_8wekyb3d8bbwe\\settings\\roaming.lock"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0191.263] GetFileType (hFile=0x444) returned 0x1 [0191.263] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0191.263] GetFileType (hFile=0x444) returned 0x1 [0191.263] WriteFile (in: hFile=0x444, lpBuffer=0x22496e8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x3be628, lpOverlapped=0x0 | out: lpBuffer=0x22496e8*, lpNumberOfBytesWritten=0x3be628*=0x10, lpOverlapped=0x0) returned 1 [0191.264] CloseHandle (hObject=0x444) returned 1 [0191.264] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\Settings\\roaming.lock", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\Settings\\roaming.lock", lpFilePart=0x0) returned 0x65 [0191.265] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\Settings\\roaming.lock.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\Settings\\roaming.lock.xuy", lpFilePart=0x0) returned 0x69 [0191.265] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0191.265] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingsports_8wekyb3d8bbwe\\settings\\roaming.lock"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23b13012, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x23b13012, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5dda9c98, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0191.265] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0191.265] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingsports_8wekyb3d8bbwe\\settings\\roaming.lock"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\Settings\\roaming.lock.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingsports_8wekyb3d8bbwe\\settings\\roaming.lock.xuy")) returned 1 [0191.266] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\Settings\\settings.dat", lpFilePart=0x0) returned 0x65 [0191.266] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0191.266] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingsports_8wekyb3d8bbwe\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x224aa10 | out: lpFileInformation=0x224aa10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23a2e212, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x23a2e212, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x8d6f5917, ftLastWriteTime.dwHighDateTime=0x1d0baff, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0191.266] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0191.266] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\Settings\\settings.dat", lpFilePart=0x0) returned 0x65 [0191.266] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0191.266] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingsports_8wekyb3d8bbwe\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x224ab98 | out: lpFileInformation=0x224ab98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23a2e212, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x23a2e212, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x8d6f5917, ftLastWriteTime.dwHighDateTime=0x1d0baff, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0191.266] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0191.266] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\Settings\\settings.dat", lpFilePart=0x0) returned 0x65 [0191.267] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0191.267] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingsports_8wekyb3d8bbwe\\settings\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0191.267] GetFileType (hFile=0x444) returned 0x1 [0191.267] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0191.267] GetFileType (hFile=0x444) returned 0x1 [0191.268] ReadFile (in: hFile=0x444, lpBuffer=0x224cfd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x224cfd8*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0191.280] CloseHandle (hObject=0x444) returned 1 [0191.280] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\Settings\\settings.dat", lpFilePart=0x0) returned 0x65 [0191.280] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0191.280] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingsports_8wekyb3d8bbwe\\settings\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0191.280] GetFileType (hFile=0x444) returned 0x1 [0191.280] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0191.280] GetFileType (hFile=0x444) returned 0x1 [0191.280] WriteFile (in: hFile=0x444, lpBuffer=0x224ad00*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x224ad00*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0191.280] CloseHandle (hObject=0x444) returned 1 [0191.280] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\Settings\\settings.dat", lpFilePart=0x0) returned 0x65 [0191.280] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\Settings\\settings.dat.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\Settings\\settings.dat.xuy", lpFilePart=0x0) returned 0x69 [0191.280] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0191.281] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingsports_8wekyb3d8bbwe\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23a2e212, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x23a2e212, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5ddce0a8, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0191.281] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0191.281] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingsports_8wekyb3d8bbwe\\settings\\settings.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\Settings\\settings.dat.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingsports_8wekyb3d8bbwe\\settings\\settings.dat.xuy")) returned 1 [0191.282] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0191.282] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\SystemAppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\SystemAppData", lpFilePart=0x0) returned 0x5d [0191.282] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\SystemAppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\SystemAppData\\", lpFilePart=0x0) returned 0x5e [0191.282] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\SystemAppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7370 [0191.282] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0191.282] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0191.282] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0191.285] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0191.285] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0191.285] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0191.285] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\SystemAppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\SystemAppData", lpFilePart=0x0) returned 0x5d [0191.285] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\SystemAppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\SystemAppData\\", lpFilePart=0x0) returned 0x5e [0191.285] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\SystemAppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d78b0 [0191.285] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0191.285] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0191.285] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0191.285] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0191.285] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0191.285] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0191.285] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\TempState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\TempState", lpFilePart=0x0) returned 0x59 [0191.286] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\TempState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\TempState\\", lpFilePart=0x0) returned 0x5a [0191.286] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\TempState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d79d0 [0191.286] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0191.286] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0191.286] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0191.286] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0191.286] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0191.286] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0191.286] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\TempState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\TempState", lpFilePart=0x0) returned 0x59 [0191.286] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\TempState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\TempState\\", lpFilePart=0x0) returned 0x5a [0191.286] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\TempState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7fd0 [0191.286] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0191.287] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0191.287] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0191.287] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0191.287] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0191.287] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0191.287] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe", lpFilePart=0x0) returned 0x50 [0191.287] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\", lpFilePart=0x0) returned 0x51 [0191.287] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d78b0 [0191.292] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0191.292] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0191.292] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0191.293] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0191.293] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0191.293] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0191.293] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0191.293] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0191.293] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0191.294] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0191.294] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0191.294] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0191.295] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0191.295] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0191.295] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0191.295] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe", lpFilePart=0x0) returned 0x50 [0191.295] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\", lpFilePart=0x0) returned 0x51 [0191.295] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d78b0 [0191.296] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0191.296] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0191.296] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0191.296] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0191.296] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0191.296] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0191.296] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0191.296] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0191.296] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0191.296] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0191.297] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0191.297] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0191.297] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0191.297] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0191.297] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0191.297] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\AC", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\AC", lpFilePart=0x0) returned 0x53 [0191.297] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\AC\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\AC\\", lpFilePart=0x0) returned 0x54 [0191.298] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\AC\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7370 [0191.324] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0191.324] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0191.324] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0191.324] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0191.325] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0191.325] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0191.325] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0191.326] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0191.326] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0191.326] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0191.326] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\AC", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\AC", lpFilePart=0x0) returned 0x53 [0191.326] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\AC\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\AC\\", lpFilePart=0x0) returned 0x54 [0191.326] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\AC\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7550 [0191.327] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0191.327] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0191.327] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0191.327] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0191.328] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0191.328] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0191.328] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0191.329] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0191.329] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0191.329] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0191.329] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\AC\\INetCache", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\AC\\INetCache", lpFilePart=0x0) returned 0x5d [0191.329] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\AC\\INetCache\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\AC\\INetCache\\", lpFilePart=0x0) returned 0x5e [0191.329] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\AC\\INetCache\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d81b0 [0191.331] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0191.331] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0191.331] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0191.331] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0191.331] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0191.332] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0191.332] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\AC\\INetCache", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\AC\\INetCache", lpFilePart=0x0) returned 0x5d [0191.332] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\AC\\INetCache\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\AC\\INetCache\\", lpFilePart=0x0) returned 0x5e [0191.332] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\AC\\INetCache\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d81b0 [0191.332] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0191.332] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0191.332] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0191.332] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0191.332] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0191.332] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0191.332] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\AC\\INetCookies", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\AC\\INetCookies", lpFilePart=0x0) returned 0x5f [0191.332] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\AC\\INetCookies\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\AC\\INetCookies\\", lpFilePart=0x0) returned 0x60 [0191.332] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\AC\\INetCookies\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d79d0 [0191.333] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0191.333] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0191.333] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0191.333] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0191.333] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0191.333] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0191.333] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\AC\\INetCookies", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\AC\\INetCookies", lpFilePart=0x0) returned 0x5f [0191.333] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\AC\\INetCookies\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\AC\\INetCookies\\", lpFilePart=0x0) returned 0x60 [0191.333] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\AC\\INetCookies\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7a90 [0191.333] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0191.333] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0191.333] FindClose (in: hFindFile=0x5d7a90 | out: hFindFile=0x5d7a90) returned 1 [0191.334] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0191.334] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0191.334] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0191.334] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\AC\\INetHistory", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\AC\\INetHistory", lpFilePart=0x0) returned 0x5f [0191.334] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\AC\\INetHistory\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\AC\\INetHistory\\", lpFilePart=0x0) returned 0x60 [0191.334] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\AC\\INetHistory\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7c70 [0191.334] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0191.334] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0191.334] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0191.334] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0191.334] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0191.334] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0191.334] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\AC\\INetHistory", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\AC\\INetHistory", lpFilePart=0x0) returned 0x5f [0191.334] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\AC\\INetHistory\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\AC\\INetHistory\\", lpFilePart=0x0) returned 0x60 [0191.335] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\AC\\INetHistory\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7370 [0191.335] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0191.335] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0191.335] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0191.335] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0191.335] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0191.335] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0191.335] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\AC\\Temp", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\AC\\Temp", lpFilePart=0x0) returned 0x58 [0191.335] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\AC\\Temp\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\AC\\Temp\\", lpFilePart=0x0) returned 0x59 [0191.335] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\AC\\Temp\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d8090 [0191.335] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0191.336] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0191.336] FindClose (in: hFindFile=0x5d8090 | out: hFindFile=0x5d8090) returned 1 [0191.336] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0191.336] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0191.336] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0191.336] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\AC\\Temp", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\AC\\Temp", lpFilePart=0x0) returned 0x58 [0191.336] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\AC\\Temp\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\AC\\Temp\\", lpFilePart=0x0) returned 0x59 [0191.336] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\AC\\Temp\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7370 [0191.336] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0191.336] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0191.336] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0191.336] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0191.336] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0191.336] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0191.336] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\AppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\AppData", lpFilePart=0x0) returned 0x58 [0191.337] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\AppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\AppData\\", lpFilePart=0x0) returned 0x59 [0191.337] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\AppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7eb0 [0191.337] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0191.337] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0191.337] FindClose (in: hFindFile=0x5d7eb0 | out: hFindFile=0x5d7eb0) returned 1 [0191.337] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0191.337] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0191.337] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0191.337] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\AppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\AppData", lpFilePart=0x0) returned 0x58 [0191.337] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\AppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\AppData\\", lpFilePart=0x0) returned 0x59 [0191.337] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\AppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d81b0 [0191.337] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0191.338] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0191.338] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0191.338] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0191.338] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0191.338] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0191.338] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\LocalCache", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\LocalCache", lpFilePart=0x0) returned 0x5b [0191.338] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\LocalCache\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\LocalCache\\", lpFilePart=0x0) returned 0x5c [0191.339] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\LocalCache\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d79d0 [0191.342] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0191.342] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0191.343] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0191.343] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0191.343] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0191.343] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0191.343] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\LocalCache", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\LocalCache", lpFilePart=0x0) returned 0x5b [0191.343] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\LocalCache\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\LocalCache\\", lpFilePart=0x0) returned 0x5c [0191.343] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\LocalCache\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7370 [0191.343] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0191.343] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0191.343] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0191.343] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0191.343] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0191.343] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0191.343] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\LocalState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\LocalState", lpFilePart=0x0) returned 0x5b [0191.343] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\LocalState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\LocalState\\", lpFilePart=0x0) returned 0x5c [0191.343] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\LocalState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7370 [0191.344] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0191.344] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0191.344] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0191.344] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0191.344] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0191.344] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0191.344] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\LocalState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\LocalState", lpFilePart=0x0) returned 0x5b [0191.344] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\LocalState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\LocalState\\", lpFilePart=0x0) returned 0x5c [0191.344] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\LocalState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d78b0 [0191.344] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0191.344] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0191.344] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0191.345] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0191.345] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0191.345] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0191.345] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe", lpFilePart=0x0) returned 0x83 [0191.345] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\", lpFilePart=0x0) returned 0x84 [0191.345] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7eb0 [0191.345] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0191.345] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0191.345] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0191.345] FindClose (in: hFindFile=0x5d7eb0 | out: hFindFile=0x5d7eb0) returned 1 [0191.345] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0191.345] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0191.345] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0191.345] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe", lpFilePart=0x0) returned 0x83 [0191.345] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\", lpFilePart=0x0) returned 0x84 [0191.346] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d78b0 [0191.346] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0191.346] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0191.346] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0191.346] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0191.346] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0191.346] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0191.346] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0191.346] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore", lpFilePart=0x0) returned 0x93 [0191.346] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\", lpFilePart=0x0) returned 0x94 [0191.346] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7df0 [0191.349] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0191.350] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0191.350] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0191.350] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0191.350] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0191.350] FindClose (in: hFindFile=0x5d7df0 | out: hFindFile=0x5d7df0) returned 1 [0191.351] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0191.351] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0191.351] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0191.351] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore", lpFilePart=0x0) returned 0x93 [0191.351] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\", lpFilePart=0x0) returned 0x94 [0191.351] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d79d0 [0191.352] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0191.352] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0191.352] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0191.352] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0191.352] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0191.352] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0191.353] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0191.353] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0191.353] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xa7 [0191.353] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0191.353] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingweather_8wekyb3d8bbwe\\microsoft.bingweather_4.3.193.0_x86__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), fInfoLevelId=0x0, lpFileInformation=0x22e91f0 | out: lpFileInformation=0x22e91f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x216dd51b, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x2180e81d, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x2180e81d, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x8000)) returned 1 [0191.353] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0191.353] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xa7 [0191.353] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0191.353] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingweather_8wekyb3d8bbwe\\microsoft.bingweather_4.3.193.0_x86__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), fInfoLevelId=0x0, lpFileInformation=0x22e9400 | out: lpFileInformation=0x22e9400*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x216dd51b, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x2180e81d, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x2180e81d, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x8000)) returned 1 [0191.354] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0191.354] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xa7 [0191.354] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0191.354] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingweather_8wekyb3d8bbwe\\microsoft.bingweather_4.3.193.0_x86__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0191.355] GetFileType (hFile=0x444) returned 0x1 [0191.355] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0191.355] GetFileType (hFile=0x444) returned 0x1 [0191.355] ReadFile (in: hFile=0x444, lpBuffer=0x22eb950, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x22eb950*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0191.379] CloseHandle (hObject=0x444) returned 1 [0191.379] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xa7 [0191.379] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0191.379] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingweather_8wekyb3d8bbwe\\microsoft.bingweather_4.3.193.0_x86__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0191.379] GetFileType (hFile=0x444) returned 0x1 [0191.379] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0191.379] GetFileType (hFile=0x444) returned 0x1 [0191.379] WriteFile (in: hFile=0x444, lpBuffer=0x22e95f0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x22e95f0*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0191.380] CloseHandle (hObject=0x444) returned 1 [0191.380] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xa7 [0191.380] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.xuy", lpFilePart=0x0) returned 0xab [0191.380] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0191.380] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingweather_8wekyb3d8bbwe\\microsoft.bingweather_4.3.193.0_x86__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x216dd51b, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x2180e81d, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5deb2fdd, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x8000)) returned 1 [0191.380] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0191.380] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingweather_8wekyb3d8bbwe\\microsoft.bingweather_4.3.193.0_x86__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingweather_8wekyb3d8bbwe\\microsoft.bingweather_4.3.193.0_x86__8wekyb3d8bbwe\\activationstore\\activationstore.dat.xuy")) returned 1 [0191.381] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xac [0191.381] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0191.381] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingweather_8wekyb3d8bbwe\\microsoft.bingweather_4.3.193.0_x86__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x2367ff0 | out: lpFileInformation=0x2367ff0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x217298be, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x217298be, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x217298be, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x6000)) returned 1 [0191.382] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0191.382] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xac [0191.382] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0191.382] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingweather_8wekyb3d8bbwe\\microsoft.bingweather_4.3.193.0_x86__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x2368220 | out: lpFileInformation=0x2368220*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x217298be, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x217298be, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x217298be, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x6000)) returned 1 [0191.382] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0191.382] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xac [0191.382] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0191.382] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingweather_8wekyb3d8bbwe\\microsoft.bingweather_4.3.193.0_x86__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0191.383] GetFileType (hFile=0x444) returned 0x1 [0191.383] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0191.383] GetFileType (hFile=0x444) returned 0x1 [0191.383] ReadFile (in: hFile=0x444, lpBuffer=0x236a7b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x236a7b0*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0191.433] CloseHandle (hObject=0x444) returned 1 [0191.434] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xac [0191.434] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0191.434] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingweather_8wekyb3d8bbwe\\microsoft.bingweather_4.3.193.0_x86__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0191.434] GetFileType (hFile=0x444) returned 0x1 [0191.434] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0191.434] GetFileType (hFile=0x444) returned 0x1 [0191.434] WriteFile (in: hFile=0x444, lpBuffer=0x218cd88*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x218cd88*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0191.435] CloseHandle (hObject=0x444) returned 1 [0191.435] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xac [0191.435] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1.xuy", lpFilePart=0x0) returned 0xb0 [0191.435] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0191.435] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingweather_8wekyb3d8bbwe\\microsoft.bingweather_4.3.193.0_x86__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x217298be, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x217298be, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5df4b778, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x6000)) returned 1 [0191.435] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0191.435] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingweather_8wekyb3d8bbwe\\microsoft.bingweather_4.3.193.0_x86__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingweather_8wekyb3d8bbwe\\microsoft.bingweather_4.3.193.0_x86__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1.xuy")) returned 1 [0191.437] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xac [0191.437] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0191.437] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingweather_8wekyb3d8bbwe\\microsoft.bingweather_4.3.193.0_x86__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x21e9e88 | out: lpFileInformation=0x21e9e88*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x217298be, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x217298be, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x217298be, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0191.437] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0191.437] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xac [0191.437] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0191.437] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingweather_8wekyb3d8bbwe\\microsoft.bingweather_4.3.193.0_x86__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0191.437] GetFileType (hFile=0x444) returned 0x1 [0191.437] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0191.437] GetFileType (hFile=0x444) returned 0x1 [0191.437] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x0 [0191.437] CloseHandle (hObject=0x444) returned 1 [0191.448] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xac [0191.448] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0191.448] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingweather_8wekyb3d8bbwe\\microsoft.bingweather_4.3.193.0_x86__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.450] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb070) returned 1 [0191.450] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbcf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xac [0191.450] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0191.451] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingweather_8wekyb3d8bbwe\\microsoft.bingweather_4.3.193.0_x86__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x3bc270 | out: lpFileInformation=0x3bc270*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x217298be, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x217298be, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x217298be, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0191.451] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc150) returned 1 [0191.451] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbd10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xac [0191.451] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0191.451] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingweather_8wekyb3d8bbwe\\microsoft.bingweather_4.3.193.0_x86__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x2260ea8 | out: lpFileInformation=0x2260ea8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x217298be, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x217298be, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x217298be, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0191.451] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc150) returned 1 [0191.451] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xac [0191.451] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc050) returned 1 [0191.451] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingweather_8wekyb3d8bbwe\\microsoft.bingweather_4.3.193.0_x86__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0191.451] GetFileType (hFile=0x444) returned 0x1 [0191.451] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbfc0) returned 1 [0191.451] GetFileType (hFile=0x444) returned 0x1 [0191.451] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc1e8 | out: lpFileSizeHigh=0x3bc1e8*=0x0) returned 0x0 [0191.451] CloseHandle (hObject=0x444) returned 1 [0191.499] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xac [0191.499] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc050) returned 1 [0191.499] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingweather_8wekyb3d8bbwe\\microsoft.bingweather_4.3.193.0_x86__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.501] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8ae0) returned 1 [0191.501] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0191.501] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\RoamingState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\RoamingState", lpFilePart=0x0) returned 0x5d [0191.501] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\RoamingState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\RoamingState\\", lpFilePart=0x0) returned 0x5e [0191.501] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\RoamingState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7c70 [0191.502] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0191.502] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0191.502] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0191.502] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0191.502] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0191.502] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0191.502] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\RoamingState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\RoamingState", lpFilePart=0x0) returned 0x5d [0191.502] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\RoamingState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\RoamingState\\", lpFilePart=0x0) returned 0x5e [0191.502] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\RoamingState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d79d0 [0191.502] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0191.502] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0191.503] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0191.503] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0191.503] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0191.503] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0191.503] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\Settings", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\Settings", lpFilePart=0x0) returned 0x59 [0191.503] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\Settings\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\Settings\\", lpFilePart=0x0) returned 0x5a [0191.503] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\Settings\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7c70 [0191.503] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0191.503] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0191.503] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0191.503] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0191.503] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0191.503] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0191.503] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0191.504] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0191.504] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\Settings", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\Settings", lpFilePart=0x0) returned 0x59 [0191.504] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\Settings\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\Settings\\", lpFilePart=0x0) returned 0x5a [0191.504] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\Settings\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d73d0 [0191.504] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0191.504] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0191.504] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0191.504] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0191.504] FindClose (in: hFindFile=0x5d73d0 | out: hFindFile=0x5d73d0) returned 1 [0191.504] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0191.504] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0191.504] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\Settings\\roaming.lock", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\Settings\\roaming.lock", lpFilePart=0x0) returned 0x66 [0191.505] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0191.505] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingweather_8wekyb3d8bbwe\\settings\\roaming.lock"), fInfoLevelId=0x0, lpFileInformation=0x22dc4f8 | out: lpFileInformation=0x22dc4f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20e12897, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x20e12897, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x20e12897, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0191.505] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0191.505] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\Settings\\roaming.lock", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\Settings\\roaming.lock", lpFilePart=0x0) returned 0x66 [0191.505] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0191.505] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingweather_8wekyb3d8bbwe\\settings\\roaming.lock"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0191.505] GetFileType (hFile=0x444) returned 0x1 [0191.505] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0191.505] GetFileType (hFile=0x444) returned 0x1 [0191.505] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0x0 [0191.505] CloseHandle (hObject=0x444) returned 1 [0191.617] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\Settings\\roaming.lock", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\Settings\\roaming.lock", lpFilePart=0x0) returned 0x66 [0191.617] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0191.617] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingweather_8wekyb3d8bbwe\\settings\\roaming.lock"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0191.618] GetFileType (hFile=0x444) returned 0x1 [0191.618] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0191.618] GetFileType (hFile=0x444) returned 0x1 [0191.618] WriteFile (in: hFile=0x444, lpBuffer=0x2352948*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x3be628, lpOverlapped=0x0 | out: lpBuffer=0x2352948*, lpNumberOfBytesWritten=0x3be628*=0x10, lpOverlapped=0x0) returned 1 [0191.619] CloseHandle (hObject=0x444) returned 1 [0191.619] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\Settings\\roaming.lock", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\Settings\\roaming.lock", lpFilePart=0x0) returned 0x66 [0191.619] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\Settings\\roaming.lock.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\Settings\\roaming.lock.xuy", lpFilePart=0x0) returned 0x6a [0191.619] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0191.619] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingweather_8wekyb3d8bbwe\\settings\\roaming.lock"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20e12897, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x20e12897, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5e0ef16b, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0191.620] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0191.620] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingweather_8wekyb3d8bbwe\\settings\\roaming.lock"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\Settings\\roaming.lock.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingweather_8wekyb3d8bbwe\\settings\\roaming.lock.xuy")) returned 1 [0191.621] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\Settings\\settings.dat", lpFilePart=0x0) returned 0x66 [0191.621] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0191.621] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingweather_8wekyb3d8bbwe\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x2353c70 | out: lpFileInformation=0x2353c70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20e12897, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x20e12897, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x8d6f5917, ftLastWriteTime.dwHighDateTime=0x1d0baff, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0191.623] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0191.623] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\Settings\\settings.dat", lpFilePart=0x0) returned 0x66 [0191.623] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0191.623] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingweather_8wekyb3d8bbwe\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x2353df8 | out: lpFileInformation=0x2353df8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20e12897, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x20e12897, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x8d6f5917, ftLastWriteTime.dwHighDateTime=0x1d0baff, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0191.623] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0191.624] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\Settings\\settings.dat", lpFilePart=0x0) returned 0x66 [0191.624] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0191.624] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingweather_8wekyb3d8bbwe\\settings\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0191.625] GetFileType (hFile=0x444) returned 0x1 [0191.625] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0191.625] GetFileType (hFile=0x444) returned 0x1 [0191.625] ReadFile (in: hFile=0x444, lpBuffer=0x2356238, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x2356238*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0191.664] CloseHandle (hObject=0x444) returned 1 [0191.664] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\Settings\\settings.dat", lpFilePart=0x0) returned 0x66 [0191.664] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0191.665] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingweather_8wekyb3d8bbwe\\settings\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0191.665] GetFileType (hFile=0x444) returned 0x1 [0191.665] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0191.665] GetFileType (hFile=0x444) returned 0x1 [0191.665] WriteFile (in: hFile=0x444, lpBuffer=0x218ca10*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x218ca10*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0191.665] CloseHandle (hObject=0x444) returned 1 [0191.665] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\Settings\\settings.dat", lpFilePart=0x0) returned 0x66 [0191.665] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\Settings\\settings.dat.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\Settings\\settings.dat.xuy", lpFilePart=0x0) returned 0x6a [0191.665] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0191.665] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingweather_8wekyb3d8bbwe\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20e12897, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x20e12897, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5e1618dd, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0191.666] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0191.666] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingweather_8wekyb3d8bbwe\\settings\\settings.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\Settings\\settings.dat.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingweather_8wekyb3d8bbwe\\settings\\settings.dat.xuy")) returned 1 [0191.667] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0191.667] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\SystemAppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\SystemAppData", lpFilePart=0x0) returned 0x5e [0191.667] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\SystemAppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\SystemAppData\\", lpFilePart=0x0) returned 0x5f [0191.667] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\SystemAppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d78b0 [0191.667] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0191.667] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0191.667] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0191.668] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0191.668] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0191.668] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0191.668] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\SystemAppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\SystemAppData", lpFilePart=0x0) returned 0x5e [0191.668] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\SystemAppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\SystemAppData\\", lpFilePart=0x0) returned 0x5f [0191.668] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\SystemAppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7370 [0191.668] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0191.668] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0191.668] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0191.670] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0191.670] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0191.670] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0191.670] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\TempState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\TempState", lpFilePart=0x0) returned 0x5a [0191.670] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\TempState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\TempState\\", lpFilePart=0x0) returned 0x5b [0191.670] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\TempState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7550 [0191.670] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0191.670] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0191.670] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0191.670] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0191.670] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0191.670] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0191.671] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\TempState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\TempState", lpFilePart=0x0) returned 0x5a [0191.671] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\TempState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\TempState\\", lpFilePart=0x0) returned 0x5b [0191.671] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\TempState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7c70 [0191.671] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0191.671] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0191.671] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0191.671] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0191.671] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0191.671] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0191.671] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy", lpFilePart=0x0) returned 0x52 [0191.671] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\", lpFilePart=0x0) returned 0x53 [0191.671] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d78b0 [0191.677] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0191.678] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0191.678] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0191.678] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0191.678] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0191.678] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0191.678] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0191.678] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0191.679] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0191.679] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0191.679] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0191.679] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0191.680] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0191.680] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0191.680] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0191.680] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy", lpFilePart=0x0) returned 0x52 [0191.680] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\", lpFilePart=0x0) returned 0x53 [0191.680] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d7cd0 [0191.681] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0191.681] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0191.681] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0191.681] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0191.681] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0191.681] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0191.681] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0191.682] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0191.682] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0191.682] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0191.682] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0191.682] FindClose (in: hFindFile=0x5d7cd0 | out: hFindFile=0x5d7cd0) returned 1 [0191.683] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0191.683] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0191.683] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0191.683] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\AC", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\AC", lpFilePart=0x0) returned 0x55 [0191.683] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\AC\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\AC\\", lpFilePart=0x0) returned 0x56 [0191.683] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\AC\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d75b0 [0191.712] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0191.712] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0191.712] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0191.712] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0191.712] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0191.712] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0191.712] FindClose (in: hFindFile=0x5d75b0 | out: hFindFile=0x5d75b0) returned 1 [0191.713] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0191.713] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0191.713] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0191.713] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\AC", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\AC", lpFilePart=0x0) returned 0x55 [0191.713] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\AC\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\AC\\", lpFilePart=0x0) returned 0x56 [0191.713] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\AC\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7c70 [0191.714] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0191.714] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0191.714] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0191.714] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0191.714] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0191.715] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0191.715] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0191.716] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0191.716] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0191.716] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0191.716] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\AC\\INetCache", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\AC\\INetCache", lpFilePart=0x0) returned 0x5f [0191.716] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\AC\\INetCache\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\AC\\INetCache\\", lpFilePart=0x0) returned 0x60 [0191.716] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\AC\\INetCache\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d78b0 [0191.718] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0191.718] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0191.719] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0191.719] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0191.719] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0191.719] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0191.719] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\AC\\INetCache", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\AC\\INetCache", lpFilePart=0x0) returned 0x5f [0191.719] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\AC\\INetCache\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\AC\\INetCache\\", lpFilePart=0x0) returned 0x60 [0191.719] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\AC\\INetCache\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7550 [0191.719] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0191.719] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0191.719] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0191.719] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0191.719] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0191.719] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0191.719] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\AC\\INetCookies", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\AC\\INetCookies", lpFilePart=0x0) returned 0x61 [0191.719] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\AC\\INetCookies\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\AC\\INetCookies\\", lpFilePart=0x0) returned 0x62 [0191.720] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\AC\\INetCookies\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d79d0 [0191.720] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0191.720] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0191.720] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0191.720] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0191.720] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0191.720] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0191.720] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\AC\\INetCookies", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\AC\\INetCookies", lpFilePart=0x0) returned 0x61 [0191.720] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\AC\\INetCookies\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\AC\\INetCookies\\", lpFilePart=0x0) returned 0x62 [0191.720] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\AC\\INetCookies\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d78b0 [0191.721] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0191.721] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0191.721] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0191.721] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0191.721] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0191.721] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0191.721] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\AC\\INetHistory", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\AC\\INetHistory", lpFilePart=0x0) returned 0x61 [0191.721] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\AC\\INetHistory\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\AC\\INetHistory\\", lpFilePart=0x0) returned 0x62 [0191.721] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\AC\\INetHistory\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7a30 [0191.721] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0191.721] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0191.721] FindClose (in: hFindFile=0x5d7a30 | out: hFindFile=0x5d7a30) returned 1 [0191.721] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0191.722] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0191.722] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0191.722] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\AC\\INetHistory", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\AC\\INetHistory", lpFilePart=0x0) returned 0x61 [0191.722] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\AC\\INetHistory\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\AC\\INetHistory\\", lpFilePart=0x0) returned 0x62 [0191.722] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\AC\\INetHistory\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d79d0 [0191.722] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0191.722] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0191.722] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0191.722] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0191.722] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0191.722] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0191.722] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\AC\\Temp", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\AC\\Temp", lpFilePart=0x0) returned 0x5a [0191.722] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\AC\\Temp\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\AC\\Temp\\", lpFilePart=0x0) returned 0x5b [0191.722] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\AC\\Temp\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7550 [0191.723] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0191.723] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0191.723] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0191.723] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0191.723] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0191.723] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0191.723] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\AC\\Temp", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\AC\\Temp", lpFilePart=0x0) returned 0x5a [0191.723] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\AC\\Temp\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\AC\\Temp\\", lpFilePart=0x0) returned 0x5b [0191.723] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\AC\\Temp\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7e50 [0191.723] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0191.723] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0191.723] FindClose (in: hFindFile=0x5d7e50 | out: hFindFile=0x5d7e50) returned 1 [0191.724] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0191.724] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0191.724] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0191.724] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\AppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\AppData", lpFilePart=0x0) returned 0x5a [0191.724] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\AppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\AppData\\", lpFilePart=0x0) returned 0x5b [0191.724] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\AppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7370 [0191.726] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0191.727] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0191.727] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0191.727] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0191.727] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0191.727] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0191.727] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\AppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\AppData", lpFilePart=0x0) returned 0x5a [0191.727] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\AppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\AppData\\", lpFilePart=0x0) returned 0x5b [0191.727] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\AppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d81b0 [0191.727] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0191.727] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0191.727] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0191.727] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0191.728] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0191.728] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0191.728] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\LocalCache", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\LocalCache", lpFilePart=0x0) returned 0x5d [0191.728] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\LocalCache\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\LocalCache\\", lpFilePart=0x0) returned 0x5e [0191.728] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\LocalCache\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7cd0 [0191.728] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0191.728] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0191.728] FindClose (in: hFindFile=0x5d7cd0 | out: hFindFile=0x5d7cd0) returned 1 [0191.728] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0191.728] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0191.728] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0191.728] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\LocalCache", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\LocalCache", lpFilePart=0x0) returned 0x5d [0191.728] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\LocalCache\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\LocalCache\\", lpFilePart=0x0) returned 0x5e [0191.728] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\LocalCache\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d75b0 [0191.728] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0191.729] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0191.729] FindClose (in: hFindFile=0x5d75b0 | out: hFindFile=0x5d75b0) returned 1 [0191.729] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0191.729] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0191.729] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0191.729] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\LocalState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\LocalState", lpFilePart=0x0) returned 0x5d [0191.729] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\LocalState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\LocalState\\", lpFilePart=0x0) returned 0x5e [0191.729] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\LocalState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7550 [0191.729] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0191.729] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0191.729] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0191.729] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0191.729] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0191.729] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0191.729] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\LocalState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\LocalState", lpFilePart=0x0) returned 0x5d [0191.730] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\LocalState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\LocalState\\", lpFilePart=0x0) returned 0x5e [0191.730] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\LocalState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7370 [0191.730] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0191.730] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0191.730] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0191.730] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0191.730] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0191.730] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0191.730] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Microsoft.BioEnrollment_10.0.10240.16384_neutral__cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Microsoft.BioEnrollment_10.0.10240.16384_neutral__cw5n1h2txyewy", lpFilePart=0x0) returned 0x92 [0191.730] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Microsoft.BioEnrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Microsoft.BioEnrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\", lpFilePart=0x0) returned 0x93 [0191.730] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Microsoft.BioEnrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7af0 [0191.730] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0191.730] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0191.731] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0191.817] FindClose (in: hFindFile=0x5d7af0 | out: hFindFile=0x5d7af0) returned 1 [0191.817] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0191.817] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0191.818] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0191.818] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Microsoft.BioEnrollment_10.0.10240.16384_neutral__cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Microsoft.BioEnrollment_10.0.10240.16384_neutral__cw5n1h2txyewy", lpFilePart=0x0) returned 0x92 [0191.818] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Microsoft.BioEnrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Microsoft.BioEnrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\", lpFilePart=0x0) returned 0x93 [0191.818] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Microsoft.BioEnrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7eb0 [0191.818] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0191.818] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0191.818] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0191.818] FindClose (in: hFindFile=0x5d7eb0 | out: hFindFile=0x5d7eb0) returned 1 [0191.818] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0191.818] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0191.818] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0191.818] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Microsoft.BioEnrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Microsoft.BioEnrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore", lpFilePart=0x0) returned 0xa2 [0191.818] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Microsoft.BioEnrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Microsoft.BioEnrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\", lpFilePart=0x0) returned 0xa3 [0191.819] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Microsoft.BioEnrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d78b0 [0191.821] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0191.821] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0191.822] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0191.822] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0191.822] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0191.822] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0191.822] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0191.822] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0191.822] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0191.823] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Microsoft.BioEnrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Microsoft.BioEnrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore", lpFilePart=0x0) returned 0xa2 [0191.823] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Microsoft.BioEnrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Microsoft.BioEnrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\", lpFilePart=0x0) returned 0xa3 [0191.823] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Microsoft.BioEnrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7550 [0191.823] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0191.824] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0191.824] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0191.824] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0191.824] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0191.824] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0191.827] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0191.827] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0191.827] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Microsoft.BioEnrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Microsoft.BioEnrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xb6 [0191.827] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0191.827] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Microsoft.BioEnrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\microsoft.bioenrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\activationstore\\activationstore.dat"), fInfoLevelId=0x0, lpFileInformation=0x21f2eb8 | out: lpFileInformation=0x21f2eb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0fc086a, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb10591cd, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xb10591cd, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0191.831] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0191.831] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Microsoft.BioEnrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Microsoft.BioEnrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xb6 [0191.831] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0191.831] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Microsoft.BioEnrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\microsoft.bioenrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\activationstore\\activationstore.dat"), fInfoLevelId=0x0, lpFileInformation=0x21f30e8 | out: lpFileInformation=0x21f30e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0fc086a, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb10591cd, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xb10591cd, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0191.831] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0191.831] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Microsoft.BioEnrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Microsoft.BioEnrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xb6 [0191.831] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0191.831] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Microsoft.BioEnrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\microsoft.bioenrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\activationstore\\activationstore.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0191.832] GetFileType (hFile=0x444) returned 0x1 [0191.832] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0191.832] GetFileType (hFile=0x444) returned 0x1 [0191.832] ReadFile (in: hFile=0x444, lpBuffer=0x21f5678, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x21f5678*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0191.851] CloseHandle (hObject=0x444) returned 1 [0191.851] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Microsoft.BioEnrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Microsoft.BioEnrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xb6 [0191.851] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0191.851] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Microsoft.BioEnrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\microsoft.bioenrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\activationstore\\activationstore.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0191.851] GetFileType (hFile=0x444) returned 0x1 [0191.851] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0191.851] GetFileType (hFile=0x444) returned 0x1 [0191.851] WriteFile (in: hFile=0x444, lpBuffer=0x21f32f8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x21f32f8*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0191.852] CloseHandle (hObject=0x444) returned 1 [0191.852] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Microsoft.BioEnrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Microsoft.BioEnrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xb6 [0191.852] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Microsoft.BioEnrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Microsoft.BioEnrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.xuy", lpFilePart=0x0) returned 0xba [0191.852] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0191.852] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Microsoft.BioEnrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\microsoft.bioenrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\activationstore\\activationstore.dat"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0fc086a, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb10591cd, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x5e32b76f, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0191.852] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0191.852] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Microsoft.BioEnrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\microsoft.bioenrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\activationstore\\activationstore.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Microsoft.BioEnrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\microsoft.bioenrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\activationstore\\activationstore.dat.xuy")) returned 1 [0191.853] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Microsoft.BioEnrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Microsoft.BioEnrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xbb [0191.853] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0191.853] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Microsoft.BioEnrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\microsoft.bioenrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\activationstore\\activationstore.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x2271d98 | out: lpFileInformation=0x2271d98*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xb0fc086a, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb0fc086a, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xb0fc086a, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0191.853] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0191.853] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Microsoft.BioEnrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Microsoft.BioEnrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xbb [0191.854] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0191.854] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Microsoft.BioEnrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\microsoft.bioenrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\activationstore\\activationstore.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x2271fe0 | out: lpFileInformation=0x2271fe0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xb0fc086a, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb0fc086a, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xb0fc086a, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0191.854] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0191.854] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Microsoft.BioEnrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Microsoft.BioEnrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xbb [0191.854] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0191.854] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Microsoft.BioEnrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\microsoft.bioenrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\activationstore\\activationstore.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0191.855] GetFileType (hFile=0x444) returned 0x1 [0191.855] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0191.855] GetFileType (hFile=0x444) returned 0x1 [0191.855] ReadFile (in: hFile=0x444, lpBuffer=0x22745a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x22745a0*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0191.873] CloseHandle (hObject=0x444) returned 1 [0191.873] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Microsoft.BioEnrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Microsoft.BioEnrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xbb [0191.873] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0191.874] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Microsoft.BioEnrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\microsoft.bioenrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\activationstore\\activationstore.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0191.874] GetFileType (hFile=0x444) returned 0x1 [0191.874] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0191.874] GetFileType (hFile=0x444) returned 0x1 [0191.874] WriteFile (in: hFile=0x444, lpBuffer=0x2272208*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x2272208*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0191.874] CloseHandle (hObject=0x444) returned 1 [0191.874] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Microsoft.BioEnrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Microsoft.BioEnrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xbb [0191.874] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Microsoft.BioEnrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Microsoft.BioEnrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1.xuy", lpFilePart=0x0) returned 0xbf [0191.874] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0191.875] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Microsoft.BioEnrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\microsoft.bioenrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\activationstore\\activationstore.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xb0fc086a, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb0fc086a, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x5e377928, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0191.875] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0191.875] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Microsoft.BioEnrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\microsoft.bioenrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\activationstore\\activationstore.dat.log1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Microsoft.BioEnrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\microsoft.bioenrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\activationstore\\activationstore.dat.log1.xuy")) returned 1 [0191.876] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Microsoft.BioEnrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Microsoft.BioEnrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xbb [0191.876] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0191.876] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Microsoft.BioEnrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\microsoft.bioenrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\activationstore\\activationstore.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x22f0cf0 | out: lpFileInformation=0x22f0cf0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xb0fc086a, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb0fc086a, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xb0fc086a, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0191.876] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0191.876] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Microsoft.BioEnrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Microsoft.BioEnrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xbb [0191.876] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0191.876] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Microsoft.BioEnrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\microsoft.bioenrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0191.876] GetFileType (hFile=0x444) returned 0x1 [0191.876] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0191.876] GetFileType (hFile=0x444) returned 0x1 [0191.877] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x0 [0191.877] CloseHandle (hObject=0x444) returned 1 [0191.886] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Microsoft.BioEnrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Microsoft.BioEnrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xbb [0191.887] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0191.887] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Microsoft.BioEnrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\microsoft.bioenrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.900] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb070) returned 1 [0191.901] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Microsoft.BioEnrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbcf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Microsoft.BioEnrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xbb [0191.901] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0191.901] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Microsoft.BioEnrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\microsoft.bioenrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\activationstore\\activationstore.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x3bc270 | out: lpFileInformation=0x3bc270*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xb0fc086a, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb0fc086a, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xb0fc086a, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0191.901] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc150) returned 1 [0191.901] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Microsoft.BioEnrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbd10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Microsoft.BioEnrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xbb [0191.901] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0191.901] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Microsoft.BioEnrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\microsoft.bioenrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\activationstore\\activationstore.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x2367d88 | out: lpFileInformation=0x2367d88*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xb0fc086a, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb0fc086a, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xb0fc086a, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0191.901] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc150) returned 1 [0191.901] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Microsoft.BioEnrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Microsoft.BioEnrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xbb [0191.901] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc050) returned 1 [0191.901] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Microsoft.BioEnrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\microsoft.bioenrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0191.901] GetFileType (hFile=0x444) returned 0x1 [0191.901] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbfc0) returned 1 [0191.901] GetFileType (hFile=0x444) returned 0x1 [0191.901] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc1e8 | out: lpFileSizeHigh=0x3bc1e8*=0x0) returned 0x0 [0191.902] CloseHandle (hObject=0x444) returned 1 [0191.943] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Microsoft.BioEnrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Microsoft.BioEnrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xbb [0191.943] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc050) returned 1 [0191.943] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Microsoft.BioEnrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\microsoft.bioenrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.945] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8ae0) returned 1 [0191.945] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0191.945] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\RoamingState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\RoamingState", lpFilePart=0x0) returned 0x5f [0191.945] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\RoamingState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\RoamingState\\", lpFilePart=0x0) returned 0x60 [0191.945] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\RoamingState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d78b0 [0191.946] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0191.946] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0191.946] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0191.946] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0191.946] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0191.946] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0191.946] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\RoamingState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\RoamingState", lpFilePart=0x0) returned 0x5f [0191.946] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\RoamingState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\RoamingState\\", lpFilePart=0x0) returned 0x60 [0191.946] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\RoamingState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7370 [0191.946] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0191.946] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0191.947] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0191.947] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0191.947] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0191.947] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0191.947] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Settings", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Settings", lpFilePart=0x0) returned 0x5b [0191.947] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Settings\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Settings\\", lpFilePart=0x0) returned 0x5c [0191.947] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Settings\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7610 [0191.951] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0191.951] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0191.952] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0191.952] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0191.952] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0191.952] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0191.952] FindClose (in: hFindFile=0x5d7610 | out: hFindFile=0x5d7610) returned 1 [0191.953] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0191.953] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0191.953] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0191.953] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Settings", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Settings", lpFilePart=0x0) returned 0x5b [0191.953] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Settings\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Settings\\", lpFilePart=0x0) returned 0x5c [0191.953] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Settings\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7370 [0191.954] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0191.954] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0191.954] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0191.954] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0191.955] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0191.955] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0191.955] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0191.955] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0191.955] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0191.956] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Settings\\roaming.lock", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Settings\\roaming.lock", lpFilePart=0x0) returned 0x68 [0191.956] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0191.956] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\settings\\roaming.lock"), fInfoLevelId=0x0, lpFileInformation=0x21e1538 | out: lpFileInformation=0x21e1538*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0f4e15f, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb0f4e15f, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xb0f4e15f, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0191.956] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0191.956] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Settings\\roaming.lock", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Settings\\roaming.lock", lpFilePart=0x0) returned 0x68 [0191.956] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0191.957] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\settings\\roaming.lock"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0191.957] GetFileType (hFile=0x444) returned 0x1 [0191.957] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0191.957] GetFileType (hFile=0x444) returned 0x1 [0191.957] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0x0 [0191.957] CloseHandle (hObject=0x444) returned 1 [0191.994] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Settings\\roaming.lock", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Settings\\roaming.lock", lpFilePart=0x0) returned 0x68 [0191.994] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0191.994] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\settings\\roaming.lock"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0191.996] GetFileType (hFile=0x444) returned 0x1 [0191.996] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0191.996] GetFileType (hFile=0x444) returned 0x1 [0191.996] WriteFile (in: hFile=0x444, lpBuffer=0x22579a0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x3be628, lpOverlapped=0x0 | out: lpBuffer=0x22579a0*, lpNumberOfBytesWritten=0x3be628*=0x10, lpOverlapped=0x0) returned 1 [0191.997] CloseHandle (hObject=0x444) returned 1 [0191.997] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Settings\\roaming.lock", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Settings\\roaming.lock", lpFilePart=0x0) returned 0x68 [0191.997] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Settings\\roaming.lock.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Settings\\roaming.lock.xuy", lpFilePart=0x0) returned 0x6c [0191.997] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0191.997] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\settings\\roaming.lock"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0f4e15f, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb0f4e15f, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x5e4a8bfb, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0191.997] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0191.997] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\settings\\roaming.lock"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Settings\\roaming.lock.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\settings\\roaming.lock.xuy")) returned 1 [0191.999] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Settings\\settings.dat", lpFilePart=0x0) returned 0x68 [0191.999] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0191.999] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x2258ce0 | out: lpFileInformation=0x2258ce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0f27f06, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0x6745513f, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x6745513f, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0191.999] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0191.999] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Settings\\settings.dat", lpFilePart=0x0) returned 0x68 [0191.999] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0191.999] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x2258e70 | out: lpFileInformation=0x2258e70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0f27f06, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0x6745513f, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x6745513f, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0191.999] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0191.999] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Settings\\settings.dat", lpFilePart=0x0) returned 0x68 [0191.999] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0191.999] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\settings\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0192.000] GetFileType (hFile=0x444) returned 0x1 [0192.000] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0192.000] GetFileType (hFile=0x444) returned 0x1 [0192.000] ReadFile (in: hFile=0x444, lpBuffer=0x225b2c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x225b2c0*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0192.012] CloseHandle (hObject=0x444) returned 1 [0192.012] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Settings\\settings.dat", lpFilePart=0x0) returned 0x68 [0192.012] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0192.012] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\settings\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0192.013] GetFileType (hFile=0x444) returned 0x1 [0192.013] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0192.013] GetFileType (hFile=0x444) returned 0x1 [0192.013] WriteFile (in: hFile=0x444, lpBuffer=0x2258fe0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x2258fe0*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0192.013] CloseHandle (hObject=0x444) returned 1 [0192.013] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Settings\\settings.dat", lpFilePart=0x0) returned 0x68 [0192.013] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Settings\\settings.dat.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Settings\\settings.dat.xuy", lpFilePart=0x0) returned 0x6c [0192.013] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0192.013] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0f27f06, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0x6745513f, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x5e4ceeee, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0192.013] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0192.013] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\settings\\settings.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Settings\\settings.dat.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\settings\\settings.dat.xuy")) returned 1 [0192.015] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", lpFilePart=0x0) returned 0x6d [0192.015] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0192.015] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\settings\\settings.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x22d7778 | out: lpFileInformation=0x22d7778*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x66a7f3a6, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x66a7f3a6, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x66a7f3a6, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0192.018] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0192.018] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", lpFilePart=0x0) returned 0x6d [0192.018] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0192.019] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\settings\\settings.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x22d7918 | out: lpFileInformation=0x22d7918*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x66a7f3a6, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x66a7f3a6, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x66a7f3a6, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0192.019] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0192.019] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", lpFilePart=0x0) returned 0x6d [0192.019] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0192.019] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\settings\\settings.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0192.020] GetFileType (hFile=0x444) returned 0x1 [0192.020] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0192.020] GetFileType (hFile=0x444) returned 0x1 [0192.020] ReadFile (in: hFile=0x444, lpBuffer=0x22d9d88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x22d9d88*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0192.038] CloseHandle (hObject=0x444) returned 1 [0192.038] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", lpFilePart=0x0) returned 0x6d [0192.038] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0192.038] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\settings\\settings.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0192.039] GetFileType (hFile=0x444) returned 0x1 [0192.039] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0192.039] GetFileType (hFile=0x444) returned 0x1 [0192.039] WriteFile (in: hFile=0x444, lpBuffer=0x22d7a98*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x22d7a98*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0192.039] CloseHandle (hObject=0x444) returned 1 [0192.039] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", lpFilePart=0x0) returned 0x6d [0192.039] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Settings\\settings.dat.LOG1.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Settings\\settings.dat.LOG1.xuy", lpFilePart=0x0) returned 0x71 [0192.039] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0192.039] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\settings\\settings.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x66a7f3a6, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x66a7f3a6, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x5e4f4f73, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0192.039] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0192.039] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\settings\\settings.dat.log1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Settings\\settings.dat.LOG1.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\settings\\settings.dat.log1.xuy")) returned 1 [0192.041] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", lpFilePart=0x0) returned 0x6d [0192.041] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0192.041] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\settings\\settings.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x2356268 | out: lpFileInformation=0x2356268*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x66a7f3a6, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x66a7f3a6, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x66a7f3a6, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0192.041] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0192.041] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", lpFilePart=0x0) returned 0x6d [0192.041] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0192.041] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\settings\\settings.dat.log2"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0192.041] GetFileType (hFile=0x444) returned 0x1 [0192.041] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0192.041] GetFileType (hFile=0x444) returned 0x1 [0192.041] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0x0 [0192.041] CloseHandle (hObject=0x444) returned 1 [0192.099] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", lpFilePart=0x0) returned 0x6d [0192.099] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0192.099] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\settings\\settings.dat.log2"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0192.101] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb0e0) returned 1 [0192.101] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", lpFilePart=0x0) returned 0x6d [0192.101] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc200) returned 1 [0192.101] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\settings\\settings.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x3bc2e0 | out: lpFileInformation=0x3bc2e0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x66a7f3a6, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x66a7f3a6, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x66a7f3a6, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0192.102] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1c0) returned 1 [0192.102] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbd80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", lpFilePart=0x0) returned 0x6d [0192.102] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc200) returned 1 [0192.102] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\settings\\settings.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x21ccb70 | out: lpFileInformation=0x21ccb70*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x66a7f3a6, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x66a7f3a6, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x66a7f3a6, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0192.102] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1c0) returned 1 [0192.102] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", lpFilePart=0x0) returned 0x6d [0192.102] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0c0) returned 1 [0192.102] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\settings\\settings.dat.log2"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0192.102] GetFileType (hFile=0x444) returned 0x1 [0192.102] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc030) returned 1 [0192.102] GetFileType (hFile=0x444) returned 0x1 [0192.102] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc258 | out: lpFileSizeHigh=0x3bc258*=0x0) returned 0x0 [0192.102] CloseHandle (hObject=0x444) returned 1 [0192.164] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", lpFilePart=0x0) returned 0x6d [0192.164] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0c0) returned 1 [0192.165] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\settings\\settings.dat.log2"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0192.166] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8b50) returned 1 [0192.167] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0192.167] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\SystemAppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\SystemAppData", lpFilePart=0x0) returned 0x60 [0192.167] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\SystemAppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\SystemAppData\\", lpFilePart=0x0) returned 0x61 [0192.167] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\SystemAppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d73d0 [0192.167] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0192.167] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0192.167] FindClose (in: hFindFile=0x5d73d0 | out: hFindFile=0x5d73d0) returned 1 [0192.168] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0192.168] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0192.168] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0192.168] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\SystemAppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\SystemAppData", lpFilePart=0x0) returned 0x60 [0192.168] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\SystemAppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\SystemAppData\\", lpFilePart=0x0) returned 0x61 [0192.168] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\SystemAppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d81b0 [0192.168] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0192.168] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0192.168] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0192.168] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0192.169] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0192.169] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0192.169] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\TempState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\TempState", lpFilePart=0x0) returned 0x5c [0192.169] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\TempState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\TempState\\", lpFilePart=0x0) returned 0x5d [0192.169] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\TempState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7d90 [0192.169] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0192.169] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0192.169] FindClose (in: hFindFile=0x5d7d90 | out: hFindFile=0x5d7d90) returned 1 [0192.169] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0192.169] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0192.169] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0192.169] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\TempState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\TempState", lpFilePart=0x0) returned 0x5c [0192.169] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\TempState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\TempState\\", lpFilePart=0x0) returned 0x5d [0192.169] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\TempState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7550 [0192.170] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0192.170] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0192.170] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0192.170] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0192.170] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0192.170] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0192.170] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe", lpFilePart=0x0) returned 0x4f [0192.170] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\", lpFilePart=0x0) returned 0x50 [0192.170] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d7c70 [0192.202] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0192.202] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0192.202] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0192.202] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0192.202] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0192.202] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0192.202] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0192.203] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0192.203] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0192.203] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0192.203] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0192.203] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0192.204] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0192.204] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0192.204] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0192.204] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe", lpFilePart=0x0) returned 0x4f [0192.204] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\", lpFilePart=0x0) returned 0x50 [0192.204] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d78b0 [0192.205] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0192.205] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0192.205] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0192.205] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0192.205] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0192.205] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0192.205] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0192.205] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0192.206] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0192.206] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0192.206] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0192.206] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0192.206] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0192.207] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0192.207] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0192.207] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\AC", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\AC", lpFilePart=0x0) returned 0x52 [0192.207] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\AC\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\AC\\", lpFilePart=0x0) returned 0x53 [0192.207] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\AC\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7d30 [0192.214] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0192.214] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0192.215] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0192.215] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0192.215] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0192.215] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0192.216] FindClose (in: hFindFile=0x5d7d30 | out: hFindFile=0x5d7d30) returned 1 [0192.216] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0192.216] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0192.216] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0192.216] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\AC", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\AC", lpFilePart=0x0) returned 0x52 [0192.216] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\AC\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\AC\\", lpFilePart=0x0) returned 0x53 [0192.216] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\AC\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d78b0 [0192.217] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0192.217] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0192.217] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0192.218] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0192.218] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0192.218] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0192.218] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0192.218] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0192.218] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0192.219] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0192.219] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\AC\\INetCache", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\AC\\INetCache", lpFilePart=0x0) returned 0x5c [0192.219] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\AC\\INetCache\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\AC\\INetCache\\", lpFilePart=0x0) returned 0x5d [0192.219] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\AC\\INetCache\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7610 [0192.222] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0192.222] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0192.222] FindClose (in: hFindFile=0x5d7610 | out: hFindFile=0x5d7610) returned 1 [0192.222] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0192.222] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0192.222] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0192.222] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\AC\\INetCache", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\AC\\INetCache", lpFilePart=0x0) returned 0x5c [0192.222] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\AC\\INetCache\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\AC\\INetCache\\", lpFilePart=0x0) returned 0x5d [0192.222] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\AC\\INetCache\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7550 [0192.222] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0192.223] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0192.223] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0192.223] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0192.223] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0192.223] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0192.223] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\AC\\INetCookies", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\AC\\INetCookies", lpFilePart=0x0) returned 0x5e [0192.223] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\AC\\INetCookies\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\AC\\INetCookies\\", lpFilePart=0x0) returned 0x5f [0192.223] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\AC\\INetCookies\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7670 [0192.223] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0192.223] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0192.223] FindClose (in: hFindFile=0x5d7670 | out: hFindFile=0x5d7670) returned 1 [0192.223] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0192.223] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0192.224] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0192.224] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\AC\\INetCookies", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\AC\\INetCookies", lpFilePart=0x0) returned 0x5e [0192.224] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\AC\\INetCookies\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\AC\\INetCookies\\", lpFilePart=0x0) returned 0x5f [0192.224] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\AC\\INetCookies\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d78b0 [0192.224] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0192.224] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0192.224] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0192.224] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0192.224] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0192.224] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0192.224] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\AC\\INetHistory", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\AC\\INetHistory", lpFilePart=0x0) returned 0x5e [0192.224] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\AC\\INetHistory\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\AC\\INetHistory\\", lpFilePart=0x0) returned 0x5f [0192.224] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\AC\\INetHistory\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7a30 [0192.225] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0192.225] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0192.225] FindClose (in: hFindFile=0x5d7a30 | out: hFindFile=0x5d7a30) returned 1 [0192.225] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0192.225] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0192.225] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0192.225] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\AC\\INetHistory", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\AC\\INetHistory", lpFilePart=0x0) returned 0x5e [0192.225] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\AC\\INetHistory\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\AC\\INetHistory\\", lpFilePart=0x0) returned 0x5f [0192.225] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\AC\\INetHistory\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d73d0 [0192.225] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0192.225] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0192.226] FindClose (in: hFindFile=0x5d73d0 | out: hFindFile=0x5d73d0) returned 1 [0192.226] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0192.226] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0192.226] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0192.226] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\AC\\Temp", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\AC\\Temp", lpFilePart=0x0) returned 0x57 [0192.226] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\AC\\Temp\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\AC\\Temp\\", lpFilePart=0x0) returned 0x58 [0192.226] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\AC\\Temp\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7370 [0192.226] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0192.226] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0192.226] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0192.226] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0192.226] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0192.226] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0192.226] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\AC\\Temp", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\AC\\Temp", lpFilePart=0x0) returned 0x57 [0192.226] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\AC\\Temp\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\AC\\Temp\\", lpFilePart=0x0) returned 0x58 [0192.226] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\AC\\Temp\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d78b0 [0192.227] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0192.227] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0192.227] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0192.227] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0192.227] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0192.227] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0192.227] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\AppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\AppData", lpFilePart=0x0) returned 0x57 [0192.227] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\AppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\AppData\\", lpFilePart=0x0) returned 0x58 [0192.227] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\AppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d79d0 [0192.227] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0192.227] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0192.228] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0192.228] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0192.228] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0192.228] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0192.228] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\AppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\AppData", lpFilePart=0x0) returned 0x57 [0192.228] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\AppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\AppData\\", lpFilePart=0x0) returned 0x58 [0192.228] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\AppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7fd0 [0192.228] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0192.228] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0192.228] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0192.228] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0192.228] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0192.228] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0192.228] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\LocalCache", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\LocalCache", lpFilePart=0x0) returned 0x5a [0192.228] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\LocalCache\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\LocalCache\\", lpFilePart=0x0) returned 0x5b [0192.228] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\LocalCache\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d78b0 [0192.236] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0192.236] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0192.237] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0192.237] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0192.237] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0192.237] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0192.237] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\LocalCache", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\LocalCache", lpFilePart=0x0) returned 0x5a [0192.237] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\LocalCache\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\LocalCache\\", lpFilePart=0x0) returned 0x5b [0192.237] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\LocalCache\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d78b0 [0192.237] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0192.237] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0192.237] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0192.237] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0192.237] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0192.237] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0192.238] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\LocalState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\LocalState", lpFilePart=0x0) returned 0x5a [0192.238] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\LocalState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\LocalState\\", lpFilePart=0x0) returned 0x5b [0192.238] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\LocalState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7370 [0192.238] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0192.238] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0192.238] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0192.238] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0192.238] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0192.238] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0192.238] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\LocalState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\LocalState", lpFilePart=0x0) returned 0x5a [0192.239] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\LocalState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\LocalState\\", lpFilePart=0x0) returned 0x5b [0192.239] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\LocalState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7550 [0192.239] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0192.239] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0192.239] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0192.239] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0192.239] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0192.239] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0192.239] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Microsoft.Getstarted_2.1.9.0_x64__8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Microsoft.Getstarted_2.1.9.0_x64__8wekyb3d8bbwe", lpFilePart=0x0) returned 0x7f [0192.239] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Microsoft.Getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Microsoft.Getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\", lpFilePart=0x0) returned 0x80 [0192.239] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Microsoft.Getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d81b0 [0192.240] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0192.240] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0192.240] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0192.240] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0192.240] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0192.240] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0192.240] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0192.240] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Microsoft.Getstarted_2.1.9.0_x64__8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Microsoft.Getstarted_2.1.9.0_x64__8wekyb3d8bbwe", lpFilePart=0x0) returned 0x7f [0192.240] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Microsoft.Getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Microsoft.Getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\", lpFilePart=0x0) returned 0x80 [0192.240] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Microsoft.Getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d81b0 [0192.241] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0192.241] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0192.241] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0192.241] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0192.241] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0192.241] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0192.241] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0192.241] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Microsoft.Getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\ActivationStore", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Microsoft.Getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\ActivationStore", lpFilePart=0x0) returned 0x8f [0192.241] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Microsoft.Getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\ActivationStore\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Microsoft.Getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\ActivationStore\\", lpFilePart=0x0) returned 0x90 [0192.241] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Microsoft.Getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\ActivationStore\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d79d0 [0192.246] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0192.246] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0192.246] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0192.246] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0192.247] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0192.247] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0192.247] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0192.247] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0192.247] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0192.247] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Microsoft.Getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\ActivationStore", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Microsoft.Getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\ActivationStore", lpFilePart=0x0) returned 0x8f [0192.248] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Microsoft.Getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\ActivationStore\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Microsoft.Getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\ActivationStore\\", lpFilePart=0x0) returned 0x90 [0192.248] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Microsoft.Getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\ActivationStore\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7a90 [0192.248] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0192.248] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0192.249] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0192.249] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0192.249] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0192.249] FindClose (in: hFindFile=0x5d7a90 | out: hFindFile=0x5d7a90) returned 1 [0192.250] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0192.250] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0192.250] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Microsoft.Getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Microsoft.Getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xa3 [0192.250] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0192.250] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Microsoft.Getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.getstarted_8wekyb3d8bbwe\\microsoft.getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), fInfoLevelId=0x0, lpFileInformation=0x2263340 | out: lpFileInformation=0x2263340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f3d8b79, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x1f4e3c25, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x1f4e3c25, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x4000)) returned 1 [0192.251] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0192.251] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Microsoft.Getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Microsoft.Getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xa3 [0192.251] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0192.251] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Microsoft.Getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.getstarted_8wekyb3d8bbwe\\microsoft.getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), fInfoLevelId=0x0, lpFileInformation=0x2263548 | out: lpFileInformation=0x2263548*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f3d8b79, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x1f4e3c25, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x1f4e3c25, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x4000)) returned 1 [0192.251] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0192.251] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Microsoft.Getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Microsoft.Getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xa3 [0192.251] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0192.251] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Microsoft.Getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.getstarted_8wekyb3d8bbwe\\microsoft.getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0192.252] GetFileType (hFile=0x444) returned 0x1 [0192.252] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0192.252] GetFileType (hFile=0x444) returned 0x1 [0192.252] ReadFile (in: hFile=0x444, lpBuffer=0x2265a88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x2265a88*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0192.291] CloseHandle (hObject=0x444) returned 1 [0192.291] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Microsoft.Getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Microsoft.Getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xa3 [0192.292] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0192.292] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Microsoft.Getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.getstarted_8wekyb3d8bbwe\\microsoft.getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0192.292] GetFileType (hFile=0x444) returned 0x1 [0192.292] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0192.292] GetFileType (hFile=0x444) returned 0x1 [0192.292] WriteFile (in: hFile=0x444, lpBuffer=0x2263730*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x2263730*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0192.292] CloseHandle (hObject=0x444) returned 1 [0192.292] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Microsoft.Getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Microsoft.Getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xa3 [0192.292] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Microsoft.Getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Microsoft.Getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.xuy", lpFilePart=0x0) returned 0xa7 [0192.292] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0192.292] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Microsoft.Getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.getstarted_8wekyb3d8bbwe\\microsoft.getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f3d8b79, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x1f4e3c25, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5e7576a6, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x4000)) returned 1 [0192.293] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0192.293] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Microsoft.Getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.getstarted_8wekyb3d8bbwe\\microsoft.getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Microsoft.Getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.getstarted_8wekyb3d8bbwe\\microsoft.getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.xuy")) returned 1 [0192.294] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Microsoft.Getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Microsoft.Getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xa8 [0192.294] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0192.294] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Microsoft.Getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.getstarted_8wekyb3d8bbwe\\microsoft.getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x22e2108 | out: lpFileInformation=0x22e2108*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1f3fede1, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x1f3fede1, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x1f3fede1, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0192.294] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0192.294] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Microsoft.Getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Microsoft.Getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xa8 [0192.294] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0192.295] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Microsoft.Getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.getstarted_8wekyb3d8bbwe\\microsoft.getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x22e2330 | out: lpFileInformation=0x22e2330*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1f3fede1, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x1f3fede1, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x1f3fede1, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0192.295] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0192.295] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Microsoft.Getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Microsoft.Getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xa8 [0192.295] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0192.295] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Microsoft.Getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.getstarted_8wekyb3d8bbwe\\microsoft.getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0192.296] GetFileType (hFile=0x444) returned 0x1 [0192.296] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0192.296] GetFileType (hFile=0x444) returned 0x1 [0192.296] ReadFile (in: hFile=0x444, lpBuffer=0x22e48b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x22e48b0*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0192.323] CloseHandle (hObject=0x444) returned 1 [0192.323] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Microsoft.Getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Microsoft.Getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xa8 [0192.323] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0192.323] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Microsoft.Getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.getstarted_8wekyb3d8bbwe\\microsoft.getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0192.323] GetFileType (hFile=0x444) returned 0x1 [0192.323] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0192.323] GetFileType (hFile=0x444) returned 0x1 [0192.323] WriteFile (in: hFile=0x444, lpBuffer=0x22e2538*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x22e2538*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0192.323] CloseHandle (hObject=0x444) returned 1 [0192.324] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Microsoft.Getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Microsoft.Getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xa8 [0192.324] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Microsoft.Getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Microsoft.Getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1.xuy", lpFilePart=0x0) returned 0xac [0192.324] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0192.324] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Microsoft.Getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.getstarted_8wekyb3d8bbwe\\microsoft.getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1f3fede1, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x1f3fede1, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5e7a3c0a, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0192.324] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0192.324] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Microsoft.Getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.getstarted_8wekyb3d8bbwe\\microsoft.getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Microsoft.Getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.getstarted_8wekyb3d8bbwe\\microsoft.getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1.xuy")) returned 1 [0192.325] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Microsoft.Getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Microsoft.Getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xa8 [0192.325] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0192.326] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Microsoft.Getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.getstarted_8wekyb3d8bbwe\\microsoft.getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x2360f80 | out: lpFileInformation=0x2360f80*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1f424ecb, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x1f424ecb, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x1f424ecb, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0192.328] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0192.328] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Microsoft.Getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Microsoft.Getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xa8 [0192.328] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0192.328] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Microsoft.Getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.getstarted_8wekyb3d8bbwe\\microsoft.getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0192.328] GetFileType (hFile=0x444) returned 0x1 [0192.328] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0192.328] GetFileType (hFile=0x444) returned 0x1 [0192.328] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x0 [0192.328] CloseHandle (hObject=0x444) returned 1 [0192.370] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Microsoft.Getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Microsoft.Getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xa8 [0192.370] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0192.370] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Microsoft.Getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.getstarted_8wekyb3d8bbwe\\microsoft.getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0192.372] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb070) returned 1 [0192.372] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Microsoft.Getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbcf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Microsoft.Getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xa8 [0192.372] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0192.373] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Microsoft.Getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.getstarted_8wekyb3d8bbwe\\microsoft.getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x3bc270 | out: lpFileInformation=0x3bc270*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1f424ecb, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x1f424ecb, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x1f424ecb, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0192.373] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc150) returned 1 [0192.373] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Microsoft.Getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbd10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Microsoft.Getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xa8 [0192.373] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0192.373] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Microsoft.Getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.getstarted_8wekyb3d8bbwe\\microsoft.getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x21d80b0 | out: lpFileInformation=0x21d80b0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1f424ecb, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x1f424ecb, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x1f424ecb, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0192.373] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc150) returned 1 [0192.373] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Microsoft.Getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Microsoft.Getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xa8 [0192.373] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc050) returned 1 [0192.373] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Microsoft.Getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.getstarted_8wekyb3d8bbwe\\microsoft.getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0192.373] GetFileType (hFile=0x444) returned 0x1 [0192.373] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbfc0) returned 1 [0192.373] GetFileType (hFile=0x444) returned 0x1 [0192.373] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc1e8 | out: lpFileSizeHigh=0x3bc1e8*=0x0) returned 0x0 [0192.373] CloseHandle (hObject=0x444) returned 1 [0192.411] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Microsoft.Getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Microsoft.Getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xa8 [0192.411] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc050) returned 1 [0192.411] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Microsoft.Getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.getstarted_8wekyb3d8bbwe\\microsoft.getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0192.412] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8ae0) returned 1 [0192.413] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0192.413] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\RoamingState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\RoamingState", lpFilePart=0x0) returned 0x5c [0192.413] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\RoamingState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\RoamingState\\", lpFilePart=0x0) returned 0x5d [0192.413] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\RoamingState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d75b0 [0192.413] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0192.414] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0192.414] FindClose (in: hFindFile=0x5d75b0 | out: hFindFile=0x5d75b0) returned 1 [0192.414] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0192.414] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0192.414] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0192.414] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\RoamingState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\RoamingState", lpFilePart=0x0) returned 0x5c [0192.414] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\RoamingState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\RoamingState\\", lpFilePart=0x0) returned 0x5d [0192.414] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\RoamingState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7eb0 [0192.414] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0192.414] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0192.414] FindClose (in: hFindFile=0x5d7eb0 | out: hFindFile=0x5d7eb0) returned 1 [0192.415] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0192.415] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0192.415] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0192.415] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Settings", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Settings", lpFilePart=0x0) returned 0x58 [0192.415] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Settings\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Settings\\", lpFilePart=0x0) returned 0x59 [0192.415] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Settings\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d78b0 [0192.415] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0192.415] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0192.415] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0192.415] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0192.415] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0192.415] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0192.415] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0192.415] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0192.416] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Settings", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Settings", lpFilePart=0x0) returned 0x58 [0192.416] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Settings\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Settings\\", lpFilePart=0x0) returned 0x59 [0192.416] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Settings\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7c70 [0192.416] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0192.416] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0192.416] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0192.416] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0192.416] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0192.416] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0192.416] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0192.416] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Settings\\roaming.lock", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Settings\\roaming.lock", lpFilePart=0x0) returned 0x65 [0192.416] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0192.416] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.getstarted_8wekyb3d8bbwe\\settings\\roaming.lock"), fInfoLevelId=0x0, lpFileInformation=0x22536a0 | out: lpFileInformation=0x22536a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f25b285, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x1f25b285, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x1f25b285, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0192.417] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0192.417] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Settings\\roaming.lock", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Settings\\roaming.lock", lpFilePart=0x0) returned 0x65 [0192.417] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0192.417] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.getstarted_8wekyb3d8bbwe\\settings\\roaming.lock"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0192.417] GetFileType (hFile=0x444) returned 0x1 [0192.417] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0192.417] GetFileType (hFile=0x444) returned 0x1 [0192.417] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0x0 [0192.417] CloseHandle (hObject=0x444) returned 1 [0192.456] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Settings\\roaming.lock", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Settings\\roaming.lock", lpFilePart=0x0) returned 0x65 [0192.456] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0192.456] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.getstarted_8wekyb3d8bbwe\\settings\\roaming.lock"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0192.457] GetFileType (hFile=0x444) returned 0x1 [0192.457] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0192.458] GetFileType (hFile=0x444) returned 0x1 [0192.458] WriteFile (in: hFile=0x444, lpBuffer=0x22c9af0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x3be628, lpOverlapped=0x0 | out: lpBuffer=0x22c9af0*, lpNumberOfBytesWritten=0x3be628*=0x10, lpOverlapped=0x0) returned 1 [0192.459] CloseHandle (hObject=0x444) returned 1 [0192.459] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Settings\\roaming.lock", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Settings\\roaming.lock", lpFilePart=0x0) returned 0x65 [0192.459] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Settings\\roaming.lock.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Settings\\roaming.lock.xuy", lpFilePart=0x0) returned 0x69 [0192.459] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0192.459] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.getstarted_8wekyb3d8bbwe\\settings\\roaming.lock"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f25b285, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x1f25b285, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5e8fb1b0, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0192.459] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0192.459] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.getstarted_8wekyb3d8bbwe\\settings\\roaming.lock"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Settings\\roaming.lock.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.getstarted_8wekyb3d8bbwe\\settings\\roaming.lock.xuy")) returned 1 [0192.460] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Settings\\settings.dat", lpFilePart=0x0) returned 0x65 [0192.460] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0192.460] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.getstarted_8wekyb3d8bbwe\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x22cae18 | out: lpFileInformation=0x22cae18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f235019, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x1f235019, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x8d6f5917, ftLastWriteTime.dwHighDateTime=0x1d0baff, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0192.460] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0192.460] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Settings\\settings.dat", lpFilePart=0x0) returned 0x65 [0192.461] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0192.461] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.getstarted_8wekyb3d8bbwe\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x22cafa0 | out: lpFileInformation=0x22cafa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f235019, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x1f235019, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x8d6f5917, ftLastWriteTime.dwHighDateTime=0x1d0baff, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0192.461] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0192.461] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Settings\\settings.dat", lpFilePart=0x0) returned 0x65 [0192.461] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0192.461] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.getstarted_8wekyb3d8bbwe\\settings\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0192.462] GetFileType (hFile=0x444) returned 0x1 [0192.462] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0192.462] GetFileType (hFile=0x444) returned 0x1 [0192.462] ReadFile (in: hFile=0x444, lpBuffer=0x22cd3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x22cd3e0*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0192.474] CloseHandle (hObject=0x444) returned 1 [0192.474] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Settings\\settings.dat", lpFilePart=0x0) returned 0x65 [0192.474] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0192.474] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.getstarted_8wekyb3d8bbwe\\settings\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0192.474] GetFileType (hFile=0x444) returned 0x1 [0192.474] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0192.474] GetFileType (hFile=0x444) returned 0x1 [0192.474] WriteFile (in: hFile=0x444, lpBuffer=0x22cb108*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x22cb108*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0192.475] CloseHandle (hObject=0x444) returned 1 [0192.475] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Settings\\settings.dat", lpFilePart=0x0) returned 0x65 [0192.475] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Settings\\settings.dat.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Settings\\settings.dat.xuy", lpFilePart=0x0) returned 0x69 [0192.475] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0192.475] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.getstarted_8wekyb3d8bbwe\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f235019, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x1f235019, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5e9216b1, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0192.475] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0192.475] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.getstarted_8wekyb3d8bbwe\\settings\\settings.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Settings\\settings.dat.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.getstarted_8wekyb3d8bbwe\\settings\\settings.dat.xuy")) returned 1 [0192.476] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0192.476] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\SystemAppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\SystemAppData", lpFilePart=0x0) returned 0x5d [0192.476] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\SystemAppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\SystemAppData\\", lpFilePart=0x0) returned 0x5e [0192.477] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\SystemAppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7e50 [0192.477] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0192.477] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0192.477] FindClose (in: hFindFile=0x5d7e50 | out: hFindFile=0x5d7e50) returned 1 [0192.477] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0192.477] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0192.477] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0192.477] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\SystemAppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\SystemAppData", lpFilePart=0x0) returned 0x5d [0192.477] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\SystemAppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\SystemAppData\\", lpFilePart=0x0) returned 0x5e [0192.477] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\SystemAppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d78b0 [0192.477] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0192.478] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0192.478] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0192.478] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0192.478] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0192.478] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0192.478] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\TempState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\TempState", lpFilePart=0x0) returned 0x59 [0192.478] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\TempState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\TempState\\", lpFilePart=0x0) returned 0x5a [0192.478] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\TempState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7a30 [0192.478] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0192.478] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0192.478] FindClose (in: hFindFile=0x5d7a30 | out: hFindFile=0x5d7a30) returned 1 [0192.479] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0192.479] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0192.479] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0192.479] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\TempState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\TempState", lpFilePart=0x0) returned 0x59 [0192.479] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\TempState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\TempState\\", lpFilePart=0x0) returned 0x5a [0192.479] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\TempState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7cd0 [0192.479] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0192.479] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0192.479] FindClose (in: hFindFile=0x5d7cd0 | out: hFindFile=0x5d7cd0) returned 1 [0192.479] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0192.479] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0192.479] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0192.479] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy", lpFilePart=0x0) returned 0x4c [0192.479] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\", lpFilePart=0x0) returned 0x4d [0192.479] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d81b0 [0192.482] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0192.482] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0192.482] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0192.482] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0192.482] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0192.482] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0192.482] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0192.483] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0192.483] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0192.483] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0192.483] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0192.483] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0192.484] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0192.484] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0192.484] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0192.484] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy", lpFilePart=0x0) returned 0x4c [0192.484] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\", lpFilePart=0x0) returned 0x4d [0192.484] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d7370 [0192.485] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0192.485] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0192.485] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0192.485] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0192.485] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0192.485] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0192.485] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0192.486] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0192.486] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0192.486] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0192.486] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0192.486] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0192.487] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0192.487] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0192.487] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0192.487] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\AC", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\AC", lpFilePart=0x0) returned 0x4f [0192.487] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\AC\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\AC\\", lpFilePart=0x0) returned 0x50 [0192.487] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\AC\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7cd0 [0192.493] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0192.493] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0192.493] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0192.494] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0192.494] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0192.494] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0192.494] FindClose (in: hFindFile=0x5d7cd0 | out: hFindFile=0x5d7cd0) returned 1 [0192.495] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0192.495] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0192.495] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0192.495] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\AC", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\AC", lpFilePart=0x0) returned 0x4f [0192.495] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\AC\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\AC\\", lpFilePart=0x0) returned 0x50 [0192.495] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\AC\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d78b0 [0192.496] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0192.496] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0192.496] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0192.496] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0192.496] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0192.496] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0192.496] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0192.497] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0192.497] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0192.497] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0192.497] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\AC\\INetCache", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\AC\\INetCache", lpFilePart=0x0) returned 0x59 [0192.497] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\AC\\INetCache\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\AC\\INetCache\\", lpFilePart=0x0) returned 0x5a [0192.497] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\AC\\INetCache\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7550 [0192.501] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0192.501] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0192.501] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0192.501] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0192.501] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0192.501] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0192.501] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\AC\\INetCache", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\AC\\INetCache", lpFilePart=0x0) returned 0x59 [0192.501] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\AC\\INetCache\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\AC\\INetCache\\", lpFilePart=0x0) returned 0x5a [0192.501] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\AC\\INetCache\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7d90 [0192.502] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0192.502] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0192.502] FindClose (in: hFindFile=0x5d7d90 | out: hFindFile=0x5d7d90) returned 1 [0192.502] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0192.502] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0192.502] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0192.502] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\AC\\INetCookies", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\AC\\INetCookies", lpFilePart=0x0) returned 0x5b [0192.502] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\AC\\INetCookies\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\AC\\INetCookies\\", lpFilePart=0x0) returned 0x5c [0192.502] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\AC\\INetCookies\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d81b0 [0192.502] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0192.502] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0192.503] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0192.503] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0192.503] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0192.503] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0192.503] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\AC\\INetCookies", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\AC\\INetCookies", lpFilePart=0x0) returned 0x5b [0192.503] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\AC\\INetCookies\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\AC\\INetCookies\\", lpFilePart=0x0) returned 0x5c [0192.503] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\AC\\INetCookies\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7af0 [0192.503] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0192.503] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0192.503] FindClose (in: hFindFile=0x5d7af0 | out: hFindFile=0x5d7af0) returned 1 [0192.503] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0192.503] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0192.503] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0192.503] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\AC\\INetHistory", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\AC\\INetHistory", lpFilePart=0x0) returned 0x5b [0192.503] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\AC\\INetHistory\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\AC\\INetHistory\\", lpFilePart=0x0) returned 0x5c [0192.503] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\AC\\INetHistory\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d81b0 [0192.504] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0192.504] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0192.504] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0192.504] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0192.504] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0192.504] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0192.504] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\AC\\INetHistory", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\AC\\INetHistory", lpFilePart=0x0) returned 0x5b [0192.504] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\AC\\INetHistory\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\AC\\INetHistory\\", lpFilePart=0x0) returned 0x5c [0192.504] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\AC\\INetHistory\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d78b0 [0192.504] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0192.504] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0192.505] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0192.505] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0192.505] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0192.505] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0192.505] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\AC\\Temp", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\AC\\Temp", lpFilePart=0x0) returned 0x54 [0192.505] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\AC\\Temp\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\AC\\Temp\\", lpFilePart=0x0) returned 0x55 [0192.505] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\AC\\Temp\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d78b0 [0192.505] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0192.505] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0192.505] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0192.505] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0192.505] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0192.505] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0192.505] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\AC\\Temp", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\AC\\Temp", lpFilePart=0x0) returned 0x54 [0192.505] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\AC\\Temp\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\AC\\Temp\\", lpFilePart=0x0) returned 0x55 [0192.505] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\AC\\Temp\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7370 [0192.506] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0192.506] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0192.506] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0192.506] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0192.506] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0192.506] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0192.506] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\AppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\AppData", lpFilePart=0x0) returned 0x54 [0192.506] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\AppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\AppData\\", lpFilePart=0x0) returned 0x55 [0192.506] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\AppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7550 [0192.506] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0192.507] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0192.507] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0192.507] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0192.507] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0192.507] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0192.507] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\AppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\AppData", lpFilePart=0x0) returned 0x54 [0192.507] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\AppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\AppData\\", lpFilePart=0x0) returned 0x55 [0192.507] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\AppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7c70 [0192.507] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0192.507] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0192.507] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0192.507] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0192.507] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0192.507] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0192.507] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\LocalCache", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\LocalCache", lpFilePart=0x0) returned 0x57 [0192.507] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\LocalCache\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\LocalCache\\", lpFilePart=0x0) returned 0x58 [0192.507] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\LocalCache\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d78b0 [0192.511] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0192.511] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0192.511] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0192.511] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0192.511] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0192.511] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0192.511] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\LocalCache", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\LocalCache", lpFilePart=0x0) returned 0x57 [0192.511] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\LocalCache\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\LocalCache\\", lpFilePart=0x0) returned 0x58 [0192.511] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\LocalCache\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7cd0 [0192.511] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0192.512] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0192.512] FindClose (in: hFindFile=0x5d7cd0 | out: hFindFile=0x5d7cd0) returned 1 [0192.512] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0192.512] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0192.512] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0192.512] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\LocalState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\LocalState", lpFilePart=0x0) returned 0x57 [0192.512] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\LocalState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\LocalState\\", lpFilePart=0x0) returned 0x58 [0192.512] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\LocalState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d75b0 [0192.512] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0192.512] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0192.513] FindClose (in: hFindFile=0x5d75b0 | out: hFindFile=0x5d75b0) returned 1 [0192.513] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0192.513] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0192.513] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0192.513] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\LocalState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\LocalState", lpFilePart=0x0) returned 0x57 [0192.513] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\LocalState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\LocalState\\", lpFilePart=0x0) returned 0x58 [0192.513] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\LocalState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7c70 [0192.513] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0192.513] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0192.513] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0192.513] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0192.513] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0192.513] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0192.513] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Microsoft.LockApp_10.0.10240.16384_neutral__cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Microsoft.LockApp_10.0.10240.16384_neutral__cw5n1h2txyewy", lpFilePart=0x0) returned 0x86 [0192.513] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Microsoft.LockApp_10.0.10240.16384_neutral__cw5n1h2txyewy\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Microsoft.LockApp_10.0.10240.16384_neutral__cw5n1h2txyewy\\", lpFilePart=0x0) returned 0x87 [0192.513] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Microsoft.LockApp_10.0.10240.16384_neutral__cw5n1h2txyewy\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d78b0 [0192.514] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0192.514] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0192.514] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0192.514] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0192.514] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0192.514] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0192.514] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0192.514] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Microsoft.LockApp_10.0.10240.16384_neutral__cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Microsoft.LockApp_10.0.10240.16384_neutral__cw5n1h2txyewy", lpFilePart=0x0) returned 0x86 [0192.514] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Microsoft.LockApp_10.0.10240.16384_neutral__cw5n1h2txyewy\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Microsoft.LockApp_10.0.10240.16384_neutral__cw5n1h2txyewy\\", lpFilePart=0x0) returned 0x87 [0192.514] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Microsoft.LockApp_10.0.10240.16384_neutral__cw5n1h2txyewy\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7550 [0192.514] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0192.515] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0192.515] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0192.515] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0192.515] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0192.515] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0192.515] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0192.515] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Microsoft.LockApp_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Microsoft.LockApp_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore", lpFilePart=0x0) returned 0x96 [0192.515] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Microsoft.LockApp_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Microsoft.LockApp_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\", lpFilePart=0x0) returned 0x97 [0192.515] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Microsoft.LockApp_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7550 [0192.526] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0192.527] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0192.527] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0192.527] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0192.527] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0192.527] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0192.528] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0192.528] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0192.528] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0192.528] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Microsoft.LockApp_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Microsoft.LockApp_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore", lpFilePart=0x0) returned 0x96 [0192.528] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Microsoft.LockApp_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Microsoft.LockApp_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\", lpFilePart=0x0) returned 0x97 [0192.528] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Microsoft.LockApp_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7370 [0192.529] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0192.529] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0192.529] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0192.529] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0192.529] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0192.529] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0192.530] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0192.530] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0192.530] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Microsoft.LockApp_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Microsoft.LockApp_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xaa [0192.530] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0192.530] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Microsoft.LockApp_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\microsoft.lockapp_10.0.10240.16384_neutral__cw5n1h2txyewy\\activationstore\\activationstore.dat"), fInfoLevelId=0x0, lpFileInformation=0x2368f08 | out: lpFileInformation=0x2368f08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1543f93, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb15b66a1, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xb15b66a1, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x4000)) returned 1 [0192.531] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0192.531] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Microsoft.LockApp_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Microsoft.LockApp_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xaa [0192.531] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0192.531] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Microsoft.LockApp_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\microsoft.lockapp_10.0.10240.16384_neutral__cw5n1h2txyewy\\activationstore\\activationstore.dat"), fInfoLevelId=0x0, lpFileInformation=0x2369120 | out: lpFileInformation=0x2369120*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1543f93, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb15b66a1, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xb15b66a1, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x4000)) returned 1 [0192.531] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0192.531] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Microsoft.LockApp_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Microsoft.LockApp_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xaa [0192.531] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0192.531] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Microsoft.LockApp_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\microsoft.lockapp_10.0.10240.16384_neutral__cw5n1h2txyewy\\activationstore\\activationstore.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0192.532] GetFileType (hFile=0x444) returned 0x1 [0192.532] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0192.532] GetFileType (hFile=0x444) returned 0x1 [0192.532] ReadFile (in: hFile=0x444, lpBuffer=0x236b680, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x236b680*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0192.657] CloseHandle (hObject=0x444) returned 1 [0192.657] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Microsoft.LockApp_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Microsoft.LockApp_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xaa [0192.657] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0192.657] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Microsoft.LockApp_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\microsoft.lockapp_10.0.10240.16384_neutral__cw5n1h2txyewy\\activationstore\\activationstore.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0192.658] GetFileType (hFile=0x444) returned 0x1 [0192.658] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0192.658] GetFileType (hFile=0x444) returned 0x1 [0192.658] WriteFile (in: hFile=0x444, lpBuffer=0x218ce00*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x218ce00*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0192.658] CloseHandle (hObject=0x444) returned 1 [0192.658] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Microsoft.LockApp_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Microsoft.LockApp_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xaa [0192.658] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Microsoft.LockApp_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Microsoft.LockApp_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.xuy", lpFilePart=0x0) returned 0xae [0192.658] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0192.658] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Microsoft.LockApp_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\microsoft.lockapp_10.0.10240.16384_neutral__cw5n1h2txyewy\\activationstore\\activationstore.dat"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1543f93, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb15b66a1, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x5eaeaf91, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x4000)) returned 1 [0192.658] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0192.658] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Microsoft.LockApp_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\microsoft.lockapp_10.0.10240.16384_neutral__cw5n1h2txyewy\\activationstore\\activationstore.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Microsoft.LockApp_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\microsoft.lockapp_10.0.10240.16384_neutral__cw5n1h2txyewy\\activationstore\\activationstore.dat.xuy")) returned 1 [0192.660] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Microsoft.LockApp_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Microsoft.LockApp_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xaf [0192.660] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0192.660] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Microsoft.LockApp_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\microsoft.lockapp_10.0.10240.16384_neutral__cw5n1h2txyewy\\activationstore\\activationstore.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x21eafb0 | out: lpFileInformation=0x21eafb0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xb1543f93, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb1543f93, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xb1543f93, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0192.660] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0192.660] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Microsoft.LockApp_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Microsoft.LockApp_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xaf [0192.660] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0192.660] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Microsoft.LockApp_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\microsoft.lockapp_10.0.10240.16384_neutral__cw5n1h2txyewy\\activationstore\\activationstore.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x21eb1e0 | out: lpFileInformation=0x21eb1e0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xb1543f93, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb1543f93, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xb1543f93, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0192.660] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0192.660] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Microsoft.LockApp_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Microsoft.LockApp_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xaf [0192.660] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0192.660] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Microsoft.LockApp_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\microsoft.lockapp_10.0.10240.16384_neutral__cw5n1h2txyewy\\activationstore\\activationstore.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0192.661] GetFileType (hFile=0x444) returned 0x1 [0192.661] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0192.661] GetFileType (hFile=0x444) returned 0x1 [0192.661] ReadFile (in: hFile=0x444, lpBuffer=0x21ed770, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x21ed770*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0192.674] CloseHandle (hObject=0x444) returned 1 [0192.674] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Microsoft.LockApp_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Microsoft.LockApp_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xaf [0192.674] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0192.674] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Microsoft.LockApp_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\microsoft.lockapp_10.0.10240.16384_neutral__cw5n1h2txyewy\\activationstore\\activationstore.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0192.675] GetFileType (hFile=0x444) returned 0x1 [0192.675] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0192.675] GetFileType (hFile=0x444) returned 0x1 [0192.675] WriteFile (in: hFile=0x444, lpBuffer=0x21eb3f0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x21eb3f0*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0192.675] CloseHandle (hObject=0x444) returned 1 [0192.675] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Microsoft.LockApp_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Microsoft.LockApp_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xaf [0192.675] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Microsoft.LockApp_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Microsoft.LockApp_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1.xuy", lpFilePart=0x0) returned 0xb3 [0192.675] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0192.675] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Microsoft.LockApp_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\microsoft.lockapp_10.0.10240.16384_neutral__cw5n1h2txyewy\\activationstore\\activationstore.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xb1543f93, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb1543f93, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x5eb11144, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0192.675] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0192.675] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Microsoft.LockApp_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\microsoft.lockapp_10.0.10240.16384_neutral__cw5n1h2txyewy\\activationstore\\activationstore.dat.log1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Microsoft.LockApp_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\microsoft.lockapp_10.0.10240.16384_neutral__cw5n1h2txyewy\\activationstore\\activationstore.dat.log1.xuy")) returned 1 [0192.677] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Microsoft.LockApp_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Microsoft.LockApp_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xaf [0192.677] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0192.677] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Microsoft.LockApp_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\microsoft.lockapp_10.0.10240.16384_neutral__cw5n1h2txyewy\\activationstore\\activationstore.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x2269e60 | out: lpFileInformation=0x2269e60*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xb1543f93, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb1543f93, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xb1543f93, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0192.680] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0192.680] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Microsoft.LockApp_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Microsoft.LockApp_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xaf [0192.680] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0192.680] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Microsoft.LockApp_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\microsoft.lockapp_10.0.10240.16384_neutral__cw5n1h2txyewy\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0192.680] GetFileType (hFile=0x444) returned 0x1 [0192.680] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0192.680] GetFileType (hFile=0x444) returned 0x1 [0192.680] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x0 [0192.680] CloseHandle (hObject=0x444) returned 1 [0192.692] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Microsoft.LockApp_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Microsoft.LockApp_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xaf [0192.692] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0192.692] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Microsoft.LockApp_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\microsoft.lockapp_10.0.10240.16384_neutral__cw5n1h2txyewy\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0192.693] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb070) returned 1 [0192.694] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Microsoft.LockApp_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbcf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Microsoft.LockApp_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xaf [0192.694] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0192.694] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Microsoft.LockApp_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\microsoft.lockapp_10.0.10240.16384_neutral__cw5n1h2txyewy\\activationstore\\activationstore.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x3bc270 | out: lpFileInformation=0x3bc270*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xb1543f93, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb1543f93, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xb1543f93, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0192.694] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc150) returned 1 [0192.694] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Microsoft.LockApp_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbd10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Microsoft.LockApp_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xaf [0192.694] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0192.694] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Microsoft.LockApp_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\microsoft.lockapp_10.0.10240.16384_neutral__cw5n1h2txyewy\\activationstore\\activationstore.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x22e0e80 | out: lpFileInformation=0x22e0e80*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xb1543f93, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb1543f93, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xb1543f93, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0192.695] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc150) returned 1 [0192.695] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Microsoft.LockApp_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Microsoft.LockApp_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xaf [0192.695] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc050) returned 1 [0192.695] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Microsoft.LockApp_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\microsoft.lockapp_10.0.10240.16384_neutral__cw5n1h2txyewy\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0192.695] GetFileType (hFile=0x444) returned 0x1 [0192.695] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbfc0) returned 1 [0192.695] GetFileType (hFile=0x444) returned 0x1 [0192.695] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc1e8 | out: lpFileSizeHigh=0x3bc1e8*=0x0) returned 0x0 [0192.695] CloseHandle (hObject=0x444) returned 1 [0192.733] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Microsoft.LockApp_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Microsoft.LockApp_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xaf [0192.733] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc050) returned 1 [0192.733] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Microsoft.LockApp_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\microsoft.lockapp_10.0.10240.16384_neutral__cw5n1h2txyewy\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0192.735] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8ae0) returned 1 [0192.735] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0192.735] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\RoamingState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\RoamingState", lpFilePart=0x0) returned 0x59 [0192.735] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\RoamingState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\RoamingState\\", lpFilePart=0x0) returned 0x5a [0192.735] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\RoamingState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7c70 [0192.736] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0192.736] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0192.736] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0192.736] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0192.736] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0192.736] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0192.736] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\RoamingState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\RoamingState", lpFilePart=0x0) returned 0x59 [0192.736] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\RoamingState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\RoamingState\\", lpFilePart=0x0) returned 0x5a [0192.736] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\RoamingState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d79d0 [0192.736] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0192.736] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0192.737] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0192.737] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0192.737] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0192.737] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0192.737] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Settings", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Settings", lpFilePart=0x0) returned 0x55 [0192.737] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Settings\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Settings\\", lpFilePart=0x0) returned 0x56 [0192.737] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Settings\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7d90 [0192.752] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0192.753] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0192.753] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0192.753] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0192.753] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0192.753] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0192.753] FindClose (in: hFindFile=0x5d7d90 | out: hFindFile=0x5d7d90) returned 1 [0192.754] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0192.754] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0192.754] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0192.754] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Settings", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Settings", lpFilePart=0x0) returned 0x55 [0192.754] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Settings\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Settings\\", lpFilePart=0x0) returned 0x56 [0192.754] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Settings\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7670 [0192.755] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0192.755] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0192.755] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0192.755] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0192.755] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0192.755] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0192.755] FindClose (in: hFindFile=0x5d7670 | out: hFindFile=0x5d7670) returned 1 [0192.756] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0192.756] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0192.756] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Settings\\roaming.lock", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Settings\\roaming.lock", lpFilePart=0x0) returned 0x62 [0192.756] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0192.756] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\settings\\roaming.lock"), fInfoLevelId=0x0, lpFileInformation=0x235cda0 | out: lpFileInformation=0x235cda0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb14ab620, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb14ab620, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xb14ab620, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0192.757] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0192.757] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Settings\\roaming.lock", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Settings\\roaming.lock", lpFilePart=0x0) returned 0x62 [0192.757] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0192.757] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\settings\\roaming.lock"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0192.757] GetFileType (hFile=0x444) returned 0x1 [0192.757] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0192.757] GetFileType (hFile=0x444) returned 0x1 [0192.757] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0x0 [0192.757] CloseHandle (hObject=0x444) returned 1 [0192.804] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Settings\\roaming.lock", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Settings\\roaming.lock", lpFilePart=0x0) returned 0x62 [0192.804] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0192.804] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\settings\\roaming.lock"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0192.805] GetFileType (hFile=0x444) returned 0x1 [0192.805] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0192.805] GetFileType (hFile=0x444) returned 0x1 [0192.806] WriteFile (in: hFile=0x444, lpBuffer=0x21cfdb8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x3be628, lpOverlapped=0x0 | out: lpBuffer=0x21cfdb8*, lpNumberOfBytesWritten=0x3be628*=0x10, lpOverlapped=0x0) returned 1 [0192.806] CloseHandle (hObject=0x444) returned 1 [0192.806] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Settings\\roaming.lock", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Settings\\roaming.lock", lpFilePart=0x0) returned 0x62 [0192.806] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Settings\\roaming.lock.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Settings\\roaming.lock.xuy", lpFilePart=0x0) returned 0x66 [0192.807] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0192.807] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\settings\\roaming.lock"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb14ab620, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb14ab620, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x5ec424fb, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0192.807] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0192.807] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\settings\\roaming.lock"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Settings\\roaming.lock.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\settings\\roaming.lock.xuy")) returned 1 [0192.808] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Settings\\settings.dat", lpFilePart=0x0) returned 0x62 [0192.808] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0192.808] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x21d10c8 | out: lpFileInformation=0x21d10c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb14ab620, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0x68eb5044, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x68eb5044, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0192.808] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0192.808] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Settings\\settings.dat", lpFilePart=0x0) returned 0x62 [0192.808] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0192.808] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x21d1248 | out: lpFileInformation=0x21d1248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb14ab620, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0x68eb5044, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x68eb5044, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0192.808] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0192.808] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Settings\\settings.dat", lpFilePart=0x0) returned 0x62 [0192.809] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0192.809] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\settings\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0192.810] GetFileType (hFile=0x444) returned 0x1 [0192.810] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0192.810] GetFileType (hFile=0x444) returned 0x1 [0192.811] ReadFile (in: hFile=0x444, lpBuffer=0x21d3678, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x21d3678*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0192.872] CloseHandle (hObject=0x444) returned 1 [0192.872] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Settings\\settings.dat", lpFilePart=0x0) returned 0x62 [0192.872] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0192.872] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\settings\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0192.873] GetFileType (hFile=0x444) returned 0x1 [0192.873] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0192.873] GetFileType (hFile=0x444) returned 0x1 [0192.873] WriteFile (in: hFile=0x444, lpBuffer=0x21d13a8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x21d13a8*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0192.873] CloseHandle (hObject=0x444) returned 1 [0192.873] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Settings\\settings.dat", lpFilePart=0x0) returned 0x62 [0192.873] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Settings\\settings.dat.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Settings\\settings.dat.xuy", lpFilePart=0x0) returned 0x66 [0192.873] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0192.873] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb14ab620, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0x68eb5044, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x5ed010e3, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0192.873] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0192.873] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\settings\\settings.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Settings\\settings.dat.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\settings\\settings.dat.xuy")) returned 1 [0192.875] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", lpFilePart=0x0) returned 0x67 [0192.875] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0192.875] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\settings\\settings.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x224faf0 | out: lpFileInformation=0x224faf0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x682ef5db, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x682ef5db, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x682ef5db, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0192.875] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0192.875] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", lpFilePart=0x0) returned 0x67 [0192.875] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0192.875] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\settings\\settings.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x224fc80 | out: lpFileInformation=0x224fc80*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x682ef5db, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x682ef5db, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x682ef5db, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0192.875] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0192.875] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", lpFilePart=0x0) returned 0x67 [0192.875] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0192.875] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\settings\\settings.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0192.876] GetFileType (hFile=0x444) returned 0x1 [0192.876] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0192.876] GetFileType (hFile=0x444) returned 0x1 [0192.876] ReadFile (in: hFile=0x444, lpBuffer=0x22520d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x22520d0*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0192.894] CloseHandle (hObject=0x444) returned 1 [0192.894] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", lpFilePart=0x0) returned 0x67 [0192.894] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0192.894] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\settings\\settings.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0192.894] GetFileType (hFile=0x444) returned 0x1 [0192.894] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0192.894] GetFileType (hFile=0x444) returned 0x1 [0192.894] WriteFile (in: hFile=0x444, lpBuffer=0x224fdf0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x224fdf0*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0192.894] CloseHandle (hObject=0x444) returned 1 [0192.895] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", lpFilePart=0x0) returned 0x67 [0192.895] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Settings\\settings.dat.LOG1.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Settings\\settings.dat.LOG1.xuy", lpFilePart=0x0) returned 0x6b [0192.895] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0192.895] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\settings\\settings.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x682ef5db, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x682ef5db, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x5ed2757e, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0192.895] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0192.895] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\settings\\settings.dat.log1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Settings\\settings.dat.LOG1.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\settings\\settings.dat.log1.xuy")) returned 1 [0192.896] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", lpFilePart=0x0) returned 0x67 [0192.896] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0192.896] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\settings\\settings.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x22ce570 | out: lpFileInformation=0x22ce570*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x684208ac, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x684208ac, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x684208ac, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0192.896] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0192.896] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", lpFilePart=0x0) returned 0x67 [0192.896] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0192.896] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\settings\\settings.dat.log2"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0192.897] GetFileType (hFile=0x444) returned 0x1 [0192.897] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0192.897] GetFileType (hFile=0x444) returned 0x1 [0192.897] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0x0 [0192.897] CloseHandle (hObject=0x444) returned 1 [0192.909] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", lpFilePart=0x0) returned 0x67 [0192.909] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0192.909] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\settings\\settings.dat.log2"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0192.910] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb0e0) returned 1 [0192.911] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", lpFilePart=0x0) returned 0x67 [0192.911] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc200) returned 1 [0192.911] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\settings\\settings.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x3bc2e0 | out: lpFileInformation=0x3bc2e0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x684208ac, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x684208ac, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x684208ac, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0192.911] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1c0) returned 1 [0192.911] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbd80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", lpFilePart=0x0) returned 0x67 [0192.911] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc200) returned 1 [0192.911] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\settings\\settings.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x2345290 | out: lpFileInformation=0x2345290*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x684208ac, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x684208ac, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x684208ac, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0192.911] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1c0) returned 1 [0192.911] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", lpFilePart=0x0) returned 0x67 [0192.911] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0c0) returned 1 [0192.911] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\settings\\settings.dat.log2"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0192.911] GetFileType (hFile=0x444) returned 0x1 [0192.911] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc030) returned 1 [0192.912] GetFileType (hFile=0x444) returned 0x1 [0192.912] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc258 | out: lpFileSizeHigh=0x3bc258*=0x0) returned 0x0 [0192.912] CloseHandle (hObject=0x444) returned 1 [0192.972] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", lpFilePart=0x0) returned 0x67 [0192.972] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0c0) returned 1 [0192.972] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\settings\\settings.dat.log2"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0192.973] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8b50) returned 1 [0192.974] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0192.974] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\SystemAppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\SystemAppData", lpFilePart=0x0) returned 0x5a [0192.974] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\SystemAppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\SystemAppData\\", lpFilePart=0x0) returned 0x5b [0192.974] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\SystemAppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7c70 [0192.974] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0192.974] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0192.974] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0192.975] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0192.975] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0192.975] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0192.975] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\SystemAppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\SystemAppData", lpFilePart=0x0) returned 0x5a [0192.975] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\SystemAppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\SystemAppData\\", lpFilePart=0x0) returned 0x5b [0192.975] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\SystemAppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7550 [0192.975] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0192.975] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0192.975] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0192.975] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0192.975] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0192.975] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0192.975] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\TempState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\TempState", lpFilePart=0x0) returned 0x56 [0192.975] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\TempState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\TempState\\", lpFilePart=0x0) returned 0x57 [0192.975] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\TempState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d78b0 [0192.976] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0192.976] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0192.976] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0192.976] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0192.976] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0192.976] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0192.976] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\TempState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\TempState", lpFilePart=0x0) returned 0x56 [0192.976] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\TempState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\TempState\\", lpFilePart=0x0) returned 0x57 [0192.976] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\TempState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7550 [0192.976] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0192.976] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0192.976] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0192.977] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0192.977] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0192.977] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0192.977] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe", lpFilePart=0x0) returned 0x52 [0192.977] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\", lpFilePart=0x0) returned 0x53 [0192.977] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d7a30 [0192.977] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0192.977] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0192.977] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0192.977] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0192.977] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0192.978] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0192.978] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0192.978] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0192.978] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0192.978] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0192.978] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0192.978] FindClose (in: hFindFile=0x5d7a30 | out: hFindFile=0x5d7a30) returned 1 [0192.978] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0192.978] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0192.978] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0192.978] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe", lpFilePart=0x0) returned 0x52 [0192.979] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\", lpFilePart=0x0) returned 0x53 [0192.979] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d7eb0 [0192.979] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0192.979] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0192.979] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0192.979] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0192.979] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0192.979] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0192.979] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0192.979] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0192.980] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0192.980] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0192.980] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0192.980] FindClose (in: hFindFile=0x5d7eb0 | out: hFindFile=0x5d7eb0) returned 1 [0192.980] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0192.980] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0192.980] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0192.980] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC", lpFilePart=0x0) returned 0x55 [0192.980] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\", lpFilePart=0x0) returned 0x56 [0192.980] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d81b0 [0192.980] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0192.980] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0192.981] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0192.981] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0192.981] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0192.981] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0192.981] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0192.981] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0192.982] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0192.982] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0192.982] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0192.982] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0192.982] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0192.982] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0192.982] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC", lpFilePart=0x0) returned 0x55 [0192.982] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\", lpFilePart=0x0) returned 0x56 [0192.982] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7670 [0192.982] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0192.982] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0192.983] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0192.983] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0192.983] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0192.983] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0192.983] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0192.983] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0192.983] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0192.983] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0192.983] FindClose (in: hFindFile=0x5d7670 | out: hFindFile=0x5d7670) returned 1 [0192.983] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0192.983] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0192.983] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0192.983] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001", lpFilePart=0x0) returned 0x5b [0192.983] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\", lpFilePart=0x0) returned 0x5c [0192.984] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7fd0 [0192.984] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0192.984] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0192.984] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0192.984] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0192.984] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0192.984] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0192.985] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0192.985] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0192.985] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0192.985] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0192.985] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0192.985] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0192.985] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0192.985] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0192.985] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001", lpFilePart=0x0) returned 0x5b [0192.985] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\", lpFilePart=0x0) returned 0x5c [0192.985] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7a90 [0192.985] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0192.986] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0192.986] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0192.986] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0192.986] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0192.986] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0192.986] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0192.986] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0192.986] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0192.986] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0192.987] FindClose (in: hFindFile=0x5d7a90 | out: hFindFile=0x5d7a90) returned 1 [0192.987] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0192.987] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0192.987] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0192.987] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\INetCache", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\INetCache", lpFilePart=0x0) returned 0x65 [0192.987] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\INetCache\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\INetCache\\", lpFilePart=0x0) returned 0x66 [0192.987] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\INetCache\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d7550 [0192.987] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0192.987] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0192.987] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0192.987] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0192.987] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0192.987] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0192.987] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\INetCache", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\INetCache", lpFilePart=0x0) returned 0x65 [0192.987] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\INetCache\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\INetCache\\", lpFilePart=0x0) returned 0x66 [0192.987] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\INetCache\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d75b0 [0192.988] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0192.988] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0192.988] FindClose (in: hFindFile=0x5d75b0 | out: hFindFile=0x5d75b0) returned 1 [0192.988] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0192.988] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0192.988] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0192.988] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\INetCookies", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\INetCookies", lpFilePart=0x0) returned 0x67 [0192.988] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\INetCookies\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\INetCookies\\", lpFilePart=0x0) returned 0x68 [0192.988] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\INetCookies\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d7eb0 [0192.988] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0192.989] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0192.989] FindClose (in: hFindFile=0x5d7eb0 | out: hFindFile=0x5d7eb0) returned 1 [0192.989] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0192.989] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0192.989] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0192.989] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\INetCookies", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\INetCookies", lpFilePart=0x0) returned 0x67 [0192.989] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\INetCookies\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\INetCookies\\", lpFilePart=0x0) returned 0x68 [0192.989] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\INetCookies\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d78b0 [0192.989] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0192.989] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0192.989] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0192.989] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0192.989] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0192.989] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0192.989] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\INetHistory", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\INetHistory", lpFilePart=0x0) returned 0x67 [0192.990] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\INetHistory\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\INetHistory\\", lpFilePart=0x0) returned 0x68 [0192.990] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\INetHistory\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d7c70 [0192.990] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0192.990] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0192.990] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0192.990] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0192.990] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0192.990] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0192.990] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\INetHistory", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\INetHistory", lpFilePart=0x0) returned 0x67 [0192.990] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\INetHistory\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\INetHistory\\", lpFilePart=0x0) returned 0x68 [0192.990] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\INetHistory\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d79d0 [0192.990] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0192.991] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0192.991] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0192.991] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0192.991] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0192.991] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0192.991] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\LocalState", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\LocalState", lpFilePart=0x0) returned 0x66 [0192.991] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\LocalState\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\LocalState\\", lpFilePart=0x0) returned 0x67 [0192.991] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\LocalState\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d7eb0 [0192.991] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0192.991] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0192.991] FindClose (in: hFindFile=0x5d7eb0 | out: hFindFile=0x5d7eb0) returned 1 [0192.991] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0192.991] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0192.991] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0192.992] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\LocalState", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\LocalState", lpFilePart=0x0) returned 0x66 [0192.992] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\LocalState\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\LocalState\\", lpFilePart=0x0) returned 0x67 [0192.992] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\LocalState\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d7670 [0192.992] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0192.992] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0192.992] FindClose (in: hFindFile=0x5d7670 | out: hFindFile=0x5d7670) returned 1 [0192.992] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0192.992] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0192.992] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0192.992] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft", lpFilePart=0x0) returned 0x65 [0192.992] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\", lpFilePart=0x0) returned 0x66 [0192.992] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d79d0 [0192.993] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0192.993] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0192.993] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0192.993] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0192.993] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0192.993] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0192.993] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0192.993] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0192.993] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0192.993] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft", lpFilePart=0x0) returned 0x65 [0192.993] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\", lpFilePart=0x0) returned 0x66 [0192.993] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d78b0 [0192.994] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0192.994] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0192.994] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0192.994] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0192.994] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0192.994] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0192.994] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0192.994] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0192.994] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0192.994] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache", lpFilePart=0x0) returned 0x76 [0192.994] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\", lpFilePart=0x0) returned 0x77 [0192.994] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d7fd0 [0192.995] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0192.995] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0192.995] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0192.995] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0192.995] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0192.995] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0192.995] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0192.995] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0192.995] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache", lpFilePart=0x0) returned 0x76 [0192.995] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\", lpFilePart=0x0) returned 0x77 [0192.995] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d81b0 [0192.996] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0192.996] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0192.996] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0192.996] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0192.996] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0192.996] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0192.996] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0192.996] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0192.996] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content", nBufferLength=0x105, lpBuffer=0x3be130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content", lpFilePart=0x0) returned 0x7e [0192.996] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\", nBufferLength=0x105, lpBuffer=0x3be0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\", lpFilePart=0x0) returned 0x7f [0192.996] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\*", lpFindFileData=0x3be2e0 | out: lpFindFileData=0x3be2e0) returned 0x5d7a30 [0193.002] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0193.006] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0193.006] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0193.007] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0193.007] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0193.007] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0193.007] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0193.007] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0193.007] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0193.007] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0193.007] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0193.007] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0193.007] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0193.007] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0193.008] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0193.008] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0193.008] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0193.008] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0193.008] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0193.008] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0193.008] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0193.008] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 0 [0193.008] FindClose (in: hFindFile=0x5d7a30 | out: hFindFile=0x5d7a30) returned 1 [0193.009] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0193.009] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0193.009] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0193.009] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content", nBufferLength=0x105, lpBuffer=0x3be130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content", lpFilePart=0x0) returned 0x7e [0193.009] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\", nBufferLength=0x105, lpBuffer=0x3be0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\", lpFilePart=0x0) returned 0x7f [0193.009] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\*", lpFindFileData=0x3be2e0 | out: lpFindFileData=0x3be2e0) returned 0x5d7c70 [0193.010] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0193.010] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0193.010] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0193.010] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0193.010] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0193.011] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0193.011] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0193.011] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0193.011] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0193.011] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0193.011] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0193.011] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0193.011] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0193.012] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0193.012] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0193.012] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0193.012] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0193.012] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0193.014] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0193.014] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0193.014] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0193.014] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 0 [0193.014] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0193.015] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0193.015] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0193.015] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", lpFilePart=0x0) returned 0xc0 [0193.015] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0193.015] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\40e450f7ce13419a2ccc2a5445035a0a_06f02b1f13ab4b11b8fc669bde565af1"), fInfoLevelId=0x0, lpFileInformation=0x21e8978 | out: lpFileInformation=0x21e8978*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x9b6825, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x9b6825, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x9b6825, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0xb68)) returned 1 [0193.016] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0193.016] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", lpFilePart=0x0) returned 0xc0 [0193.016] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0193.016] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\40e450f7ce13419a2ccc2a5445035a0a_06f02b1f13ab4b11b8fc669bde565af1"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0193.016] GetFileType (hFile=0x444) returned 0x1 [0193.016] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be400) returned 1 [0193.016] GetFileType (hFile=0x444) returned 0x1 [0193.016] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be628 | out: lpFileSizeHigh=0x3be628*=0x0) returned 0xb68 [0193.016] ReadFile (in: hFile=0x444, lpBuffer=0x21e9a48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be558, lpOverlapped=0x0 | out: lpBuffer=0x21e9a48*, lpNumberOfBytesRead=0x3be558*=0xb68, lpOverlapped=0x0) returned 1 [0193.018] CloseHandle (hObject=0x444) returned 1 [0193.055] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", lpFilePart=0x0) returned 0xc0 [0193.055] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0193.055] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\40e450f7ce13419a2ccc2a5445035a0a_06f02b1f13ab4b11b8fc669bde565af1"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0193.056] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3baf20) returned 1 [0193.057] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", nBufferLength=0x105, lpBuffer=0x3bbba0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", lpFilePart=0x0) returned 0xc0 [0193.057] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc040) returned 1 [0193.057] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\40e450f7ce13419a2ccc2a5445035a0a_06f02b1f13ab4b11b8fc669bde565af1"), fInfoLevelId=0x0, lpFileInformation=0x3bc120 | out: lpFileInformation=0x3bc120*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x9b6825, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x9b6825, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x9b6825, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0xb68)) returned 1 [0193.057] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc000) returned 1 [0193.057] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", nBufferLength=0x105, lpBuffer=0x3bbbc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", lpFilePart=0x0) returned 0xc0 [0193.057] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc040) returned 1 [0193.057] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\40e450f7ce13419a2ccc2a5445035a0a_06f02b1f13ab4b11b8fc669bde565af1"), fInfoLevelId=0x0, lpFileInformation=0x2264ed8 | out: lpFileInformation=0x2264ed8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x9b6825, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x9b6825, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x9b6825, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0xb68)) returned 1 [0193.057] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc000) returned 1 [0193.057] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", nBufferLength=0x105, lpBuffer=0x3bba20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", lpFilePart=0x0) returned 0xc0 [0193.057] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf00) returned 1 [0193.057] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\40e450f7ce13419a2ccc2a5445035a0a_06f02b1f13ab4b11b8fc669bde565af1"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0193.057] GetFileType (hFile=0x444) returned 0x1 [0193.057] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbe70) returned 1 [0193.057] GetFileType (hFile=0x444) returned 0x1 [0193.057] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc098 | out: lpFileSizeHigh=0x3bc098*=0x0) returned 0xb68 [0193.057] ReadFile (in: hFile=0x444, lpBuffer=0x2265fa8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bbfc8, lpOverlapped=0x0 | out: lpBuffer=0x2265fa8*, lpNumberOfBytesRead=0x3bbfc8*=0xb68, lpOverlapped=0x0) returned 1 [0193.058] CloseHandle (hObject=0x444) returned 1 [0193.098] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", nBufferLength=0x105, lpBuffer=0x3bba20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", lpFilePart=0x0) returned 0xc0 [0193.099] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf00) returned 1 [0193.099] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\40e450f7ce13419a2ccc2a5445035a0a_06f02b1f13ab4b11b8fc669bde565af1"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0193.100] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8990) returned 1 [0193.101] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", lpFilePart=0x0) returned 0x9f [0193.101] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0193.101] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\57c8edb95df3f0ad4ee2dc2b8cfd4157"), fInfoLevelId=0x0, lpFileInformation=0x22e1298 | out: lpFileInformation=0x22e1298*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xac17a3, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xac17a3, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xac17a3, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0193.119] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0193.119] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", lpFilePart=0x0) returned 0x9f [0193.119] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0193.119] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\57c8edb95df3f0ad4ee2dc2b8cfd4157"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0193.119] GetFileType (hFile=0x444) returned 0x1 [0193.119] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be400) returned 1 [0193.119] GetFileType (hFile=0x444) returned 0x1 [0193.119] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be628 | out: lpFileSizeHigh=0x3be628*=0x0) returned 0x0 [0193.119] CloseHandle (hObject=0x444) returned 1 [0193.161] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", lpFilePart=0x0) returned 0x9f [0193.161] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0193.161] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\57c8edb95df3f0ad4ee2dc2b8cfd4157"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0193.163] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3baf20) returned 1 [0193.163] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", nBufferLength=0x105, lpBuffer=0x3bbba0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", lpFilePart=0x0) returned 0x9f [0193.163] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc040) returned 1 [0193.163] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\57c8edb95df3f0ad4ee2dc2b8cfd4157"), fInfoLevelId=0x0, lpFileInformation=0x3bc120 | out: lpFileInformation=0x3bc120*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xac17a3, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xac17a3, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xac17a3, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0193.163] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc000) returned 1 [0193.163] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", nBufferLength=0x105, lpBuffer=0x3bbbc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", lpFilePart=0x0) returned 0x9f [0193.163] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc040) returned 1 [0193.163] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\57c8edb95df3f0ad4ee2dc2b8cfd4157"), fInfoLevelId=0x0, lpFileInformation=0x2358248 | out: lpFileInformation=0x2358248*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xac17a3, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xac17a3, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xac17a3, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0193.164] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc000) returned 1 [0193.164] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", nBufferLength=0x105, lpBuffer=0x3bba20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", lpFilePart=0x0) returned 0x9f [0193.164] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf00) returned 1 [0193.164] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\57c8edb95df3f0ad4ee2dc2b8cfd4157"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0193.164] GetFileType (hFile=0x444) returned 0x1 [0193.164] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbe70) returned 1 [0193.164] GetFileType (hFile=0x444) returned 0x1 [0193.164] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc098 | out: lpFileSizeHigh=0x3bc098*=0x0) returned 0x0 [0193.164] CloseHandle (hObject=0x444) returned 1 [0193.211] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", nBufferLength=0x105, lpBuffer=0x3bba20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", lpFilePart=0x0) returned 0x9f [0193.211] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf00) returned 1 [0193.211] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\57c8edb95df3f0ad4ee2dc2b8cfd4157"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0193.214] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8990) returned 1 [0193.217] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\7423F88C7F265F0DEFC08EA88C3BDE45_D975BBA8033175C8D112023D8A7A8AD6", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\7423F88C7F265F0DEFC08EA88C3BDE45_D975BBA8033175C8D112023D8A7A8AD6", lpFilePart=0x0) returned 0xc0 [0193.217] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0193.217] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\7423F88C7F265F0DEFC08EA88C3BDE45_D975BBA8033175C8D112023D8A7A8AD6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\7423f88c7f265f0defc08ea88c3bde45_d975bba8033175c8d112023d8a7a8ad6"), fInfoLevelId=0x0, lpFileInformation=0x21af280 | out: lpFileInformation=0x21af280*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xc94daff, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc94daff, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xc94daff, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x1d7)) returned 1 [0193.220] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0193.220] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\7423F88C7F265F0DEFC08EA88C3BDE45_D975BBA8033175C8D112023D8A7A8AD6", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\7423F88C7F265F0DEFC08EA88C3BDE45_D975BBA8033175C8D112023D8A7A8AD6", lpFilePart=0x0) returned 0xc0 [0193.220] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0193.220] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\7423F88C7F265F0DEFC08EA88C3BDE45_D975BBA8033175C8D112023D8A7A8AD6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\7423f88c7f265f0defc08ea88c3bde45_d975bba8033175c8d112023d8a7a8ad6"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0193.221] GetFileType (hFile=0x444) returned 0x1 [0193.221] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be400) returned 1 [0193.221] GetFileType (hFile=0x444) returned 0x1 [0193.221] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be628 | out: lpFileSizeHigh=0x3be628*=0x0) returned 0x1d7 [0193.221] ReadFile (in: hFile=0x444, lpBuffer=0x21af9c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be558, lpOverlapped=0x0 | out: lpBuffer=0x21af9c0*, lpNumberOfBytesRead=0x3be558*=0x1d7, lpOverlapped=0x0) returned 1 [0193.222] CloseHandle (hObject=0x444) returned 1 [0193.274] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\7423F88C7F265F0DEFC08EA88C3BDE45_D975BBA8033175C8D112023D8A7A8AD6", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\7423F88C7F265F0DEFC08EA88C3BDE45_D975BBA8033175C8D112023D8A7A8AD6", lpFilePart=0x0) returned 0xc0 [0193.274] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0193.275] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\7423F88C7F265F0DEFC08EA88C3BDE45_D975BBA8033175C8D112023D8A7A8AD6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\7423f88c7f265f0defc08ea88c3bde45_d975bba8033175c8d112023d8a7a8ad6"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0193.276] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3baf20) returned 1 [0193.276] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\7423F88C7F265F0DEFC08EA88C3BDE45_D975BBA8033175C8D112023D8A7A8AD6", nBufferLength=0x105, lpBuffer=0x3bbba0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\7423F88C7F265F0DEFC08EA88C3BDE45_D975BBA8033175C8D112023D8A7A8AD6", lpFilePart=0x0) returned 0xc0 [0193.276] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc040) returned 1 [0193.277] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\7423F88C7F265F0DEFC08EA88C3BDE45_D975BBA8033175C8D112023D8A7A8AD6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\7423f88c7f265f0defc08ea88c3bde45_d975bba8033175c8d112023d8a7a8ad6"), fInfoLevelId=0x0, lpFileInformation=0x3bc120 | out: lpFileInformation=0x3bc120*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xc94daff, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc94daff, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xc94daff, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x1d7)) returned 1 [0193.277] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc000) returned 1 [0193.277] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\7423F88C7F265F0DEFC08EA88C3BDE45_D975BBA8033175C8D112023D8A7A8AD6", nBufferLength=0x105, lpBuffer=0x3bbbc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\7423F88C7F265F0DEFC08EA88C3BDE45_D975BBA8033175C8D112023D8A7A8AD6", lpFilePart=0x0) returned 0xc0 [0193.277] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc040) returned 1 [0193.277] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\7423F88C7F265F0DEFC08EA88C3BDE45_D975BBA8033175C8D112023D8A7A8AD6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\7423f88c7f265f0defc08ea88c3bde45_d975bba8033175c8d112023d8a7a8ad6"), fInfoLevelId=0x0, lpFileInformation=0x2227e88 | out: lpFileInformation=0x2227e88*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xc94daff, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc94daff, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xc94daff, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x1d7)) returned 1 [0193.277] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc000) returned 1 [0193.277] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\7423F88C7F265F0DEFC08EA88C3BDE45_D975BBA8033175C8D112023D8A7A8AD6", nBufferLength=0x105, lpBuffer=0x3bba20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\7423F88C7F265F0DEFC08EA88C3BDE45_D975BBA8033175C8D112023D8A7A8AD6", lpFilePart=0x0) returned 0xc0 [0193.277] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf00) returned 1 [0193.277] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\7423F88C7F265F0DEFC08EA88C3BDE45_D975BBA8033175C8D112023D8A7A8AD6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\7423f88c7f265f0defc08ea88c3bde45_d975bba8033175c8d112023d8a7a8ad6"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0193.277] GetFileType (hFile=0x444) returned 0x1 [0193.277] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbe70) returned 1 [0193.277] GetFileType (hFile=0x444) returned 0x1 [0193.277] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc098 | out: lpFileSizeHigh=0x3bc098*=0x0) returned 0x1d7 [0193.277] ReadFile (in: hFile=0x444, lpBuffer=0x22285c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bbfc8, lpOverlapped=0x0 | out: lpBuffer=0x22285c8*, lpNumberOfBytesRead=0x3bbfc8*=0x1d7, lpOverlapped=0x0) returned 1 [0193.277] CloseHandle (hObject=0x444) returned 1 [0193.330] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\7423F88C7F265F0DEFC08EA88C3BDE45_D975BBA8033175C8D112023D8A7A8AD6", nBufferLength=0x105, lpBuffer=0x3bba20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\7423F88C7F265F0DEFC08EA88C3BDE45_D975BBA8033175C8D112023D8A7A8AD6", lpFilePart=0x0) returned 0xc0 [0193.330] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf00) returned 1 [0193.331] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\7423F88C7F265F0DEFC08EA88C3BDE45_D975BBA8033175C8D112023D8A7A8AD6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\7423f88c7f265f0defc08ea88c3bde45_d975bba8033175c8d112023d8a7a8ad6"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0193.333] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8990) returned 1 [0193.334] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506", lpFilePart=0x0) returned 0x9f [0193.334] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0193.334] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\77ec63bda74bd0d0e0426dc8f8008506"), fInfoLevelId=0x0, lpFileInformation=0x22a08f0 | out: lpFileInformation=0x22a08f0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xac17a3, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xac17a3, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xac17a3, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0193.337] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0193.337] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506", lpFilePart=0x0) returned 0x9f [0193.337] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0193.337] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\77ec63bda74bd0d0e0426dc8f8008506"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0193.337] GetFileType (hFile=0x444) returned 0x1 [0193.337] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be400) returned 1 [0193.337] GetFileType (hFile=0x444) returned 0x1 [0193.337] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be628 | out: lpFileSizeHigh=0x3be628*=0x0) returned 0x0 [0193.337] CloseHandle (hObject=0x444) returned 1 [0193.390] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506", lpFilePart=0x0) returned 0x9f [0193.390] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0193.390] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\77ec63bda74bd0d0e0426dc8f8008506"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0193.392] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3baf20) returned 1 [0193.392] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506", nBufferLength=0x105, lpBuffer=0x3bbba0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506", lpFilePart=0x0) returned 0x9f [0193.392] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc040) returned 1 [0193.392] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\77ec63bda74bd0d0e0426dc8f8008506"), fInfoLevelId=0x0, lpFileInformation=0x3bc120 | out: lpFileInformation=0x3bc120*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xac17a3, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xac17a3, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xac17a3, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0193.392] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc000) returned 1 [0193.392] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506", nBufferLength=0x105, lpBuffer=0x3bbbc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506", lpFilePart=0x0) returned 0x9f [0193.393] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc040) returned 1 [0193.393] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\77ec63bda74bd0d0e0426dc8f8008506"), fInfoLevelId=0x0, lpFileInformation=0x23178a0 | out: lpFileInformation=0x23178a0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xac17a3, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xac17a3, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xac17a3, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0193.393] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc000) returned 1 [0193.393] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506", nBufferLength=0x105, lpBuffer=0x3bba20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506", lpFilePart=0x0) returned 0x9f [0193.393] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf00) returned 1 [0193.393] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\77ec63bda74bd0d0e0426dc8f8008506"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0193.393] GetFileType (hFile=0x444) returned 0x1 [0193.393] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbe70) returned 1 [0193.393] GetFileType (hFile=0x444) returned 0x1 [0193.393] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc098 | out: lpFileSizeHigh=0x3bc098*=0x0) returned 0x0 [0193.393] CloseHandle (hObject=0x444) returned 1 [0193.436] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506", nBufferLength=0x105, lpBuffer=0x3bba20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506", lpFilePart=0x0) returned 0x9f [0193.437] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf00) returned 1 [0193.437] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\77ec63bda74bd0d0e0426dc8f8008506"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0193.438] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8990) returned 1 [0193.439] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_15B894361B8229C12E6CD4370E03BA11", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_15B894361B8229C12E6CD4370E03BA11", lpFilePart=0x0) returned 0xc0 [0193.439] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0193.439] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_15B894361B8229C12E6CD4370E03BA11" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\8059e9a0d314877e40fe93d8ccfb3c69_15b894361b8229c12e6cd4370e03ba11"), fInfoLevelId=0x0, lpFileInformation=0x218e5e0 | out: lpFileInformation=0x218e5e0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x973638f, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x973638f, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x973638f, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x1cf)) returned 1 [0193.439] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0193.439] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_15B894361B8229C12E6CD4370E03BA11", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_15B894361B8229C12E6CD4370E03BA11", lpFilePart=0x0) returned 0xc0 [0193.440] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0193.440] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_15B894361B8229C12E6CD4370E03BA11" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\8059e9a0d314877e40fe93d8ccfb3c69_15b894361b8229c12e6cd4370e03ba11"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0193.440] GetFileType (hFile=0x444) returned 0x1 [0193.440] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be400) returned 1 [0193.440] GetFileType (hFile=0x444) returned 0x1 [0193.440] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be628 | out: lpFileSizeHigh=0x3be628*=0x0) returned 0x1cf [0193.440] ReadFile (in: hFile=0x444, lpBuffer=0x218ed18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be558, lpOverlapped=0x0 | out: lpBuffer=0x218ed18*, lpNumberOfBytesRead=0x3be558*=0x1cf, lpOverlapped=0x0) returned 1 [0193.441] CloseHandle (hObject=0x444) returned 1 [0193.478] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_15B894361B8229C12E6CD4370E03BA11", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_15B894361B8229C12E6CD4370E03BA11", lpFilePart=0x0) returned 0xc0 [0193.478] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0193.478] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_15B894361B8229C12E6CD4370E03BA11" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\8059e9a0d314877e40fe93d8ccfb3c69_15b894361b8229c12e6cd4370e03ba11"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0193.480] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3baf20) returned 1 [0193.480] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_15B894361B8229C12E6CD4370E03BA11", nBufferLength=0x105, lpBuffer=0x3bbba0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_15B894361B8229C12E6CD4370E03BA11", lpFilePart=0x0) returned 0xc0 [0193.480] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc040) returned 1 [0193.480] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_15B894361B8229C12E6CD4370E03BA11" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\8059e9a0d314877e40fe93d8ccfb3c69_15b894361b8229c12e6cd4370e03ba11"), fInfoLevelId=0x0, lpFileInformation=0x3bc120 | out: lpFileInformation=0x3bc120*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x973638f, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x973638f, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x973638f, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x1cf)) returned 1 [0193.481] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc000) returned 1 [0193.481] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_15B894361B8229C12E6CD4370E03BA11", nBufferLength=0x105, lpBuffer=0x3bbbc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_15B894361B8229C12E6CD4370E03BA11", lpFilePart=0x0) returned 0xc0 [0193.481] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc040) returned 1 [0193.481] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_15B894361B8229C12E6CD4370E03BA11" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\8059e9a0d314877e40fe93d8ccfb3c69_15b894361b8229c12e6cd4370e03ba11"), fInfoLevelId=0x0, lpFileInformation=0x2207188 | out: lpFileInformation=0x2207188*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x973638f, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x973638f, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x973638f, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x1cf)) returned 1 [0193.481] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc000) returned 1 [0193.481] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_15B894361B8229C12E6CD4370E03BA11", nBufferLength=0x105, lpBuffer=0x3bba20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_15B894361B8229C12E6CD4370E03BA11", lpFilePart=0x0) returned 0xc0 [0193.481] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf00) returned 1 [0193.481] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_15B894361B8229C12E6CD4370E03BA11" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\8059e9a0d314877e40fe93d8ccfb3c69_15b894361b8229c12e6cd4370e03ba11"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0193.481] GetFileType (hFile=0x444) returned 0x1 [0193.481] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbe70) returned 1 [0193.481] GetFileType (hFile=0x444) returned 0x1 [0193.481] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc098 | out: lpFileSizeHigh=0x3bc098*=0x0) returned 0x1cf [0193.481] ReadFile (in: hFile=0x444, lpBuffer=0x22078c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bbfc8, lpOverlapped=0x0 | out: lpBuffer=0x22078c0*, lpNumberOfBytesRead=0x3bbfc8*=0x1cf, lpOverlapped=0x0) returned 1 [0193.481] CloseHandle (hObject=0x444) returned 1 [0193.521] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_15B894361B8229C12E6CD4370E03BA11", nBufferLength=0x105, lpBuffer=0x3bba20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_15B894361B8229C12E6CD4370E03BA11", lpFilePart=0x0) returned 0xc0 [0193.521] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf00) returned 1 [0193.521] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_15B894361B8229C12E6CD4370E03BA11" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\8059e9a0d314877e40fe93d8ccfb3c69_15b894361b8229c12e6cd4370e03ba11"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0193.523] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8990) returned 1 [0193.524] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_71FE2912451B2B453DAF1EB6A0D6DE9D", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_71FE2912451B2B453DAF1EB6A0D6DE9D", lpFilePart=0x0) returned 0xc0 [0193.524] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0193.524] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_71FE2912451B2B453DAF1EB6A0D6DE9D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\8059e9a0d314877e40fe93d8ccfb3c69_71fe2912451b2b453daf1eb6a0d6de9d"), fInfoLevelId=0x0, lpFileInformation=0x227fb90 | out: lpFileInformation=0x227fb90*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xa42cfdd, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xa42cfdd, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xa42cfdd, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x1cf)) returned 1 [0193.526] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0193.526] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_71FE2912451B2B453DAF1EB6A0D6DE9D", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_71FE2912451B2B453DAF1EB6A0D6DE9D", lpFilePart=0x0) returned 0xc0 [0193.526] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0193.526] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_71FE2912451B2B453DAF1EB6A0D6DE9D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\8059e9a0d314877e40fe93d8ccfb3c69_71fe2912451b2b453daf1eb6a0d6de9d"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0193.526] GetFileType (hFile=0x444) returned 0x1 [0193.526] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be400) returned 1 [0193.526] GetFileType (hFile=0x444) returned 0x1 [0193.526] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be628 | out: lpFileSizeHigh=0x3be628*=0x0) returned 0x1cf [0193.526] ReadFile (in: hFile=0x444, lpBuffer=0x22802c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be558, lpOverlapped=0x0 | out: lpBuffer=0x22802c8*, lpNumberOfBytesRead=0x3be558*=0x1cf, lpOverlapped=0x0) returned 1 [0193.527] CloseHandle (hObject=0x444) returned 1 [0193.628] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_71FE2912451B2B453DAF1EB6A0D6DE9D", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_71FE2912451B2B453DAF1EB6A0D6DE9D", lpFilePart=0x0) returned 0xc0 [0193.628] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0193.628] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_71FE2912451B2B453DAF1EB6A0D6DE9D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\8059e9a0d314877e40fe93d8ccfb3c69_71fe2912451b2b453daf1eb6a0d6de9d"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0193.630] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3baf20) returned 1 [0193.630] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_71FE2912451B2B453DAF1EB6A0D6DE9D", nBufferLength=0x105, lpBuffer=0x3bbba0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_71FE2912451B2B453DAF1EB6A0D6DE9D", lpFilePart=0x0) returned 0xc0 [0193.630] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc040) returned 1 [0193.630] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_71FE2912451B2B453DAF1EB6A0D6DE9D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\8059e9a0d314877e40fe93d8ccfb3c69_71fe2912451b2b453daf1eb6a0d6de9d"), fInfoLevelId=0x0, lpFileInformation=0x3bc120 | out: lpFileInformation=0x3bc120*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xa42cfdd, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xa42cfdd, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xa42cfdd, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x1cf)) returned 1 [0193.630] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc000) returned 1 [0193.630] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_71FE2912451B2B453DAF1EB6A0D6DE9D", nBufferLength=0x105, lpBuffer=0x3bbbc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_71FE2912451B2B453DAF1EB6A0D6DE9D", lpFilePart=0x0) returned 0xc0 [0193.630] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc040) returned 1 [0193.630] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_71FE2912451B2B453DAF1EB6A0D6DE9D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\8059e9a0d314877e40fe93d8ccfb3c69_71fe2912451b2b453daf1eb6a0d6de9d"), fInfoLevelId=0x0, lpFileInformation=0x22f8738 | out: lpFileInformation=0x22f8738*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xa42cfdd, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xa42cfdd, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xa42cfdd, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x1cf)) returned 1 [0193.630] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc000) returned 1 [0193.631] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_71FE2912451B2B453DAF1EB6A0D6DE9D", nBufferLength=0x105, lpBuffer=0x3bba20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_71FE2912451B2B453DAF1EB6A0D6DE9D", lpFilePart=0x0) returned 0xc0 [0193.631] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf00) returned 1 [0193.631] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_71FE2912451B2B453DAF1EB6A0D6DE9D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\8059e9a0d314877e40fe93d8ccfb3c69_71fe2912451b2b453daf1eb6a0d6de9d"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0193.631] GetFileType (hFile=0x444) returned 0x1 [0193.631] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbe70) returned 1 [0193.631] GetFileType (hFile=0x444) returned 0x1 [0193.631] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc098 | out: lpFileSizeHigh=0x3bc098*=0x0) returned 0x1cf [0193.631] ReadFile (in: hFile=0x444, lpBuffer=0x22f8e70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bbfc8, lpOverlapped=0x0 | out: lpBuffer=0x22f8e70*, lpNumberOfBytesRead=0x3bbfc8*=0x1cf, lpOverlapped=0x0) returned 1 [0193.631] CloseHandle (hObject=0x444) returned 1 [0193.681] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_71FE2912451B2B453DAF1EB6A0D6DE9D", nBufferLength=0x105, lpBuffer=0x3bba20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_71FE2912451B2B453DAF1EB6A0D6DE9D", lpFilePart=0x0) returned 0xc0 [0193.681] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf00) returned 1 [0193.681] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_71FE2912451B2B453DAF1EB6A0D6DE9D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\8059e9a0d314877e40fe93d8ccfb3c69_71fe2912451b2b453daf1eb6a0d6de9d"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0193.684] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8990) returned 1 [0193.685] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_AEB6328053EC598E3A1DBA7D9B00C40B", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_AEB6328053EC598E3A1DBA7D9B00C40B", lpFilePart=0x0) returned 0xc0 [0193.685] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0193.685] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_AEB6328053EC598E3A1DBA7D9B00C40B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\8059e9a0d314877e40fe93d8ccfb3c69_aeb6328053ec598e3a1dba7d9b00c40b"), fInfoLevelId=0x0, lpFileInformation=0x2172018 | out: lpFileInformation=0x2172018*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x99261c6, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x99261c6, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x99261c6, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x1cf)) returned 1 [0193.688] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0193.688] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_AEB6328053EC598E3A1DBA7D9B00C40B", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_AEB6328053EC598E3A1DBA7D9B00C40B", lpFilePart=0x0) returned 0xc0 [0193.688] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0193.688] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_AEB6328053EC598E3A1DBA7D9B00C40B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\8059e9a0d314877e40fe93d8ccfb3c69_aeb6328053ec598e3a1dba7d9b00c40b"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0193.688] GetFileType (hFile=0x444) returned 0x1 [0193.688] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be400) returned 1 [0193.689] GetFileType (hFile=0x444) returned 0x1 [0193.689] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be628 | out: lpFileSizeHigh=0x3be628*=0x0) returned 0x1cf [0193.689] ReadFile (in: hFile=0x444, lpBuffer=0x2172750, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be558, lpOverlapped=0x0 | out: lpBuffer=0x2172750*, lpNumberOfBytesRead=0x3be558*=0x1cf, lpOverlapped=0x0) returned 1 [0193.689] CloseHandle (hObject=0x444) returned 1 [0193.728] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_AEB6328053EC598E3A1DBA7D9B00C40B", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_AEB6328053EC598E3A1DBA7D9B00C40B", lpFilePart=0x0) returned 0xc0 [0193.728] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0193.728] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_AEB6328053EC598E3A1DBA7D9B00C40B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\8059e9a0d314877e40fe93d8ccfb3c69_aeb6328053ec598e3a1dba7d9b00c40b"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0193.729] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3baf20) returned 1 [0193.730] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_AEB6328053EC598E3A1DBA7D9B00C40B", nBufferLength=0x105, lpBuffer=0x3bbba0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_AEB6328053EC598E3A1DBA7D9B00C40B", lpFilePart=0x0) returned 0xc0 [0193.730] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc040) returned 1 [0193.730] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_AEB6328053EC598E3A1DBA7D9B00C40B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\8059e9a0d314877e40fe93d8ccfb3c69_aeb6328053ec598e3a1dba7d9b00c40b"), fInfoLevelId=0x0, lpFileInformation=0x3bc120 | out: lpFileInformation=0x3bc120*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x99261c6, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x99261c6, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x99261c6, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x1cf)) returned 1 [0193.730] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc000) returned 1 [0193.730] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_AEB6328053EC598E3A1DBA7D9B00C40B", nBufferLength=0x105, lpBuffer=0x3bbbc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_AEB6328053EC598E3A1DBA7D9B00C40B", lpFilePart=0x0) returned 0xc0 [0193.730] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc040) returned 1 [0193.730] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_AEB6328053EC598E3A1DBA7D9B00C40B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\8059e9a0d314877e40fe93d8ccfb3c69_aeb6328053ec598e3a1dba7d9b00c40b"), fInfoLevelId=0x0, lpFileInformation=0x21eabc0 | out: lpFileInformation=0x21eabc0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x99261c6, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x99261c6, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x99261c6, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x1cf)) returned 1 [0193.730] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc000) returned 1 [0193.730] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_AEB6328053EC598E3A1DBA7D9B00C40B", nBufferLength=0x105, lpBuffer=0x3bba20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_AEB6328053EC598E3A1DBA7D9B00C40B", lpFilePart=0x0) returned 0xc0 [0193.730] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf00) returned 1 [0193.730] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_AEB6328053EC598E3A1DBA7D9B00C40B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\8059e9a0d314877e40fe93d8ccfb3c69_aeb6328053ec598e3a1dba7d9b00c40b"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0193.730] GetFileType (hFile=0x444) returned 0x1 [0193.730] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbe70) returned 1 [0193.730] GetFileType (hFile=0x444) returned 0x1 [0193.731] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc098 | out: lpFileSizeHigh=0x3bc098*=0x0) returned 0x1cf [0193.731] ReadFile (in: hFile=0x444, lpBuffer=0x21eb2f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bbfc8, lpOverlapped=0x0 | out: lpBuffer=0x21eb2f8*, lpNumberOfBytesRead=0x3bbfc8*=0x1cf, lpOverlapped=0x0) returned 1 [0193.731] CloseHandle (hObject=0x444) returned 1 [0193.769] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_AEB6328053EC598E3A1DBA7D9B00C40B", nBufferLength=0x105, lpBuffer=0x3bba20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_AEB6328053EC598E3A1DBA7D9B00C40B", lpFilePart=0x0) returned 0xc0 [0193.769] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf00) returned 1 [0193.769] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_AEB6328053EC598E3A1DBA7D9B00C40B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\8059e9a0d314877e40fe93d8ccfb3c69_aeb6328053ec598e3a1dba7d9b00c40b"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0193.771] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8990) returned 1 [0193.772] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\828298824EA5549947C17DDABF6871F5_6B5C8B321CA02275A82E95FA81D6DE62", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\828298824EA5549947C17DDABF6871F5_6B5C8B321CA02275A82E95FA81D6DE62", lpFilePart=0x0) returned 0xc0 [0193.772] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0193.772] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\828298824EA5549947C17DDABF6871F5_6B5C8B321CA02275A82E95FA81D6DE62" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\828298824ea5549947c17ddabf6871f5_6b5c8b321ca02275a82e95fa81d6de62"), fInfoLevelId=0x0, lpFileInformation=0x22635c8 | out: lpFileInformation=0x22635c8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x96514c9, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x96514c9, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x96514c9, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x561)) returned 1 [0193.774] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0193.774] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\828298824EA5549947C17DDABF6871F5_6B5C8B321CA02275A82E95FA81D6DE62", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\828298824EA5549947C17DDABF6871F5_6B5C8B321CA02275A82E95FA81D6DE62", lpFilePart=0x0) returned 0xc0 [0193.774] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0193.774] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\828298824EA5549947C17DDABF6871F5_6B5C8B321CA02275A82E95FA81D6DE62" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\828298824ea5549947c17ddabf6871f5_6b5c8b321ca02275a82e95fa81d6de62"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0193.774] GetFileType (hFile=0x444) returned 0x1 [0193.774] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be400) returned 1 [0193.774] GetFileType (hFile=0x444) returned 0x1 [0193.774] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be628 | out: lpFileSizeHigh=0x3be628*=0x0) returned 0x561 [0193.774] ReadFile (in: hFile=0x444, lpBuffer=0x2264098, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be558, lpOverlapped=0x0 | out: lpBuffer=0x2264098*, lpNumberOfBytesRead=0x3be558*=0x561, lpOverlapped=0x0) returned 1 [0193.790] CloseHandle (hObject=0x444) returned 1 [0193.843] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\828298824EA5549947C17DDABF6871F5_6B5C8B321CA02275A82E95FA81D6DE62", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\828298824EA5549947C17DDABF6871F5_6B5C8B321CA02275A82E95FA81D6DE62", lpFilePart=0x0) returned 0xc0 [0193.844] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0193.844] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\828298824EA5549947C17DDABF6871F5_6B5C8B321CA02275A82E95FA81D6DE62" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\828298824ea5549947c17ddabf6871f5_6b5c8b321ca02275a82e95fa81d6de62"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0193.846] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3baf20) returned 1 [0193.846] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\828298824EA5549947C17DDABF6871F5_6B5C8B321CA02275A82E95FA81D6DE62", nBufferLength=0x105, lpBuffer=0x3bbba0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\828298824EA5549947C17DDABF6871F5_6B5C8B321CA02275A82E95FA81D6DE62", lpFilePart=0x0) returned 0xc0 [0193.846] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc040) returned 1 [0193.846] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\828298824EA5549947C17DDABF6871F5_6B5C8B321CA02275A82E95FA81D6DE62" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\828298824ea5549947c17ddabf6871f5_6b5c8b321ca02275a82e95fa81d6de62"), fInfoLevelId=0x0, lpFileInformation=0x3bc120 | out: lpFileInformation=0x3bc120*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x96514c9, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x96514c9, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x96514c9, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x561)) returned 1 [0193.846] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc000) returned 1 [0193.847] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\828298824EA5549947C17DDABF6871F5_6B5C8B321CA02275A82E95FA81D6DE62", nBufferLength=0x105, lpBuffer=0x3bbbc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\828298824EA5549947C17DDABF6871F5_6B5C8B321CA02275A82E95FA81D6DE62", lpFilePart=0x0) returned 0xc0 [0193.847] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc040) returned 1 [0193.847] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\828298824EA5549947C17DDABF6871F5_6B5C8B321CA02275A82E95FA81D6DE62" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\828298824ea5549947c17ddabf6871f5_6b5c8b321ca02275a82e95fa81d6de62"), fInfoLevelId=0x0, lpFileInformation=0x22dd730 | out: lpFileInformation=0x22dd730*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x96514c9, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x96514c9, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x96514c9, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x561)) returned 1 [0193.847] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc000) returned 1 [0193.847] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\828298824EA5549947C17DDABF6871F5_6B5C8B321CA02275A82E95FA81D6DE62", nBufferLength=0x105, lpBuffer=0x3bba20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\828298824EA5549947C17DDABF6871F5_6B5C8B321CA02275A82E95FA81D6DE62", lpFilePart=0x0) returned 0xc0 [0193.847] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf00) returned 1 [0193.847] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\828298824EA5549947C17DDABF6871F5_6B5C8B321CA02275A82E95FA81D6DE62" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\828298824ea5549947c17ddabf6871f5_6b5c8b321ca02275a82e95fa81d6de62"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0193.847] GetFileType (hFile=0x444) returned 0x1 [0193.847] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbe70) returned 1 [0193.847] GetFileType (hFile=0x444) returned 0x1 [0193.847] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc098 | out: lpFileSizeHigh=0x3bc098*=0x0) returned 0x561 [0193.847] ReadFile (in: hFile=0x444, lpBuffer=0x22de200, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bbfc8, lpOverlapped=0x0 | out: lpBuffer=0x22de200*, lpNumberOfBytesRead=0x3bbfc8*=0x561, lpOverlapped=0x0) returned 1 [0193.847] CloseHandle (hObject=0x444) returned 1 [0193.889] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\828298824EA5549947C17DDABF6871F5_6B5C8B321CA02275A82E95FA81D6DE62", nBufferLength=0x105, lpBuffer=0x3bba20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\828298824EA5549947C17DDABF6871F5_6B5C8B321CA02275A82E95FA81D6DE62", lpFilePart=0x0) returned 0xc0 [0193.889] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf00) returned 1 [0193.889] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\828298824EA5549947C17DDABF6871F5_6B5C8B321CA02275A82E95FA81D6DE62" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\828298824ea5549947c17ddabf6871f5_6b5c8b321ca02275a82e95fa81d6de62"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0193.891] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8990) returned 1 [0193.891] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\A9E4F776657345B52012CE8E279D314C_B6480DD2AFAFCC504C59FFB35E8A6232", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\A9E4F776657345B52012CE8E279D314C_B6480DD2AFAFCC504C59FFB35E8A6232", lpFilePart=0x0) returned 0xc0 [0193.892] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0193.892] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\A9E4F776657345B52012CE8E279D314C_B6480DD2AFAFCC504C59FFB35E8A6232" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\a9e4f776657345b52012ce8e279d314c_b6480dd2afafcc504c59ffb35e8a6232"), fInfoLevelId=0x0, lpFileInformation=0x23576f8 | out: lpFileInformation=0x23576f8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xcf69b48, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xcf69b48, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xcf69b48, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x1d7)) returned 1 [0193.896] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0193.896] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\A9E4F776657345B52012CE8E279D314C_B6480DD2AFAFCC504C59FFB35E8A6232", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\A9E4F776657345B52012CE8E279D314C_B6480DD2AFAFCC504C59FFB35E8A6232", lpFilePart=0x0) returned 0xc0 [0193.896] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0193.896] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\A9E4F776657345B52012CE8E279D314C_B6480DD2AFAFCC504C59FFB35E8A6232" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\a9e4f776657345b52012ce8e279d314c_b6480dd2afafcc504c59ffb35e8a6232"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0193.896] GetFileType (hFile=0x444) returned 0x1 [0193.896] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be400) returned 1 [0193.896] GetFileType (hFile=0x444) returned 0x1 [0193.896] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be628 | out: lpFileSizeHigh=0x3be628*=0x0) returned 0x1d7 [0193.896] ReadFile (in: hFile=0x444, lpBuffer=0x2357e38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be558, lpOverlapped=0x0 | out: lpBuffer=0x2357e38*, lpNumberOfBytesRead=0x3be558*=0x1d7, lpOverlapped=0x0) returned 1 [0193.897] CloseHandle (hObject=0x444) returned 1 [0193.940] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\A9E4F776657345B52012CE8E279D314C_B6480DD2AFAFCC504C59FFB35E8A6232", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\A9E4F776657345B52012CE8E279D314C_B6480DD2AFAFCC504C59FFB35E8A6232", lpFilePart=0x0) returned 0xc0 [0193.940] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0193.940] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\A9E4F776657345B52012CE8E279D314C_B6480DD2AFAFCC504C59FFB35E8A6232" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\a9e4f776657345b52012ce8e279d314c_b6480dd2afafcc504c59ffb35e8a6232"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0193.942] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3baf20) returned 1 [0193.942] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\A9E4F776657345B52012CE8E279D314C_B6480DD2AFAFCC504C59FFB35E8A6232", nBufferLength=0x105, lpBuffer=0x3bbba0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\A9E4F776657345B52012CE8E279D314C_B6480DD2AFAFCC504C59FFB35E8A6232", lpFilePart=0x0) returned 0xc0 [0193.942] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc040) returned 1 [0193.942] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\A9E4F776657345B52012CE8E279D314C_B6480DD2AFAFCC504C59FFB35E8A6232" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\a9e4f776657345b52012ce8e279d314c_b6480dd2afafcc504c59ffb35e8a6232"), fInfoLevelId=0x0, lpFileInformation=0x3bc120 | out: lpFileInformation=0x3bc120*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xcf69b48, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xcf69b48, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xcf69b48, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x1d7)) returned 1 [0193.942] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc000) returned 1 [0193.942] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\A9E4F776657345B52012CE8E279D314C_B6480DD2AFAFCC504C59FFB35E8A6232", nBufferLength=0x105, lpBuffer=0x3bbbc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\A9E4F776657345B52012CE8E279D314C_B6480DD2AFAFCC504C59FFB35E8A6232", lpFilePart=0x0) returned 0xc0 [0193.942] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc040) returned 1 [0193.942] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\A9E4F776657345B52012CE8E279D314C_B6480DD2AFAFCC504C59FFB35E8A6232" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\a9e4f776657345b52012ce8e279d314c_b6480dd2afafcc504c59ffb35e8a6232"), fInfoLevelId=0x0, lpFileInformation=0x21d1170 | out: lpFileInformation=0x21d1170*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xcf69b48, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xcf69b48, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xcf69b48, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x1d7)) returned 1 [0193.942] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc000) returned 1 [0193.943] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\A9E4F776657345B52012CE8E279D314C_B6480DD2AFAFCC504C59FFB35E8A6232", nBufferLength=0x105, lpBuffer=0x3bba20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\A9E4F776657345B52012CE8E279D314C_B6480DD2AFAFCC504C59FFB35E8A6232", lpFilePart=0x0) returned 0xc0 [0193.943] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf00) returned 1 [0193.943] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\A9E4F776657345B52012CE8E279D314C_B6480DD2AFAFCC504C59FFB35E8A6232" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\a9e4f776657345b52012ce8e279d314c_b6480dd2afafcc504c59ffb35e8a6232"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0193.943] GetFileType (hFile=0x444) returned 0x1 [0193.943] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbe70) returned 1 [0193.943] GetFileType (hFile=0x444) returned 0x1 [0193.943] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc098 | out: lpFileSizeHigh=0x3bc098*=0x0) returned 0x1d7 [0193.943] ReadFile (in: hFile=0x444, lpBuffer=0x21d18b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bbfc8, lpOverlapped=0x0 | out: lpBuffer=0x21d18b0*, lpNumberOfBytesRead=0x3bbfc8*=0x1d7, lpOverlapped=0x0) returned 1 [0193.943] CloseHandle (hObject=0x444) returned 1 [0193.986] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\A9E4F776657345B52012CE8E279D314C_B6480DD2AFAFCC504C59FFB35E8A6232", nBufferLength=0x105, lpBuffer=0x3bba20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\A9E4F776657345B52012CE8E279D314C_B6480DD2AFAFCC504C59FFB35E8A6232", lpFilePart=0x0) returned 0xc0 [0193.986] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf00) returned 1 [0193.986] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\A9E4F776657345B52012CE8E279D314C_B6480DD2AFAFCC504C59FFB35E8A6232" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\a9e4f776657345b52012ce8e279d314c_b6480dd2afafcc504c59ffb35e8a6232"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0193.988] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8990) returned 1 [0193.989] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\A9E4F776657345B52012CE8E279D314C_DCA82AA47C444DFAE483555D3A592A95", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\A9E4F776657345B52012CE8E279D314C_DCA82AA47C444DFAE483555D3A592A95", lpFilePart=0x0) returned 0xc0 [0193.989] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0193.989] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\A9E4F776657345B52012CE8E279D314C_DCA82AA47C444DFAE483555D3A592A95" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\a9e4f776657345b52012ce8e279d314c_dca82aa47c444dfae483555d3a592a95"), fInfoLevelId=0x0, lpFileInformation=0x2249bd8 | out: lpFileInformation=0x2249bd8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xc999f69, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc999f69, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xc999f69, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x1d7)) returned 1 [0193.989] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0193.989] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\A9E4F776657345B52012CE8E279D314C_DCA82AA47C444DFAE483555D3A592A95", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\A9E4F776657345B52012CE8E279D314C_DCA82AA47C444DFAE483555D3A592A95", lpFilePart=0x0) returned 0xc0 [0193.989] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0193.989] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\A9E4F776657345B52012CE8E279D314C_DCA82AA47C444DFAE483555D3A592A95" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\a9e4f776657345b52012ce8e279d314c_dca82aa47c444dfae483555d3a592a95"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0193.990] GetFileType (hFile=0x444) returned 0x1 [0193.990] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be400) returned 1 [0193.990] GetFileType (hFile=0x444) returned 0x1 [0193.990] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be628 | out: lpFileSizeHigh=0x3be628*=0x0) returned 0x1d7 [0193.990] ReadFile (in: hFile=0x444, lpBuffer=0x224a318, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be558, lpOverlapped=0x0 | out: lpBuffer=0x224a318*, lpNumberOfBytesRead=0x3be558*=0x1d7, lpOverlapped=0x0) returned 1 [0193.991] CloseHandle (hObject=0x444) returned 1 [0194.029] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\A9E4F776657345B52012CE8E279D314C_DCA82AA47C444DFAE483555D3A592A95", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\A9E4F776657345B52012CE8E279D314C_DCA82AA47C444DFAE483555D3A592A95", lpFilePart=0x0) returned 0xc0 [0194.029] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0194.029] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\A9E4F776657345B52012CE8E279D314C_DCA82AA47C444DFAE483555D3A592A95" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\a9e4f776657345b52012ce8e279d314c_dca82aa47c444dfae483555d3a592a95"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0194.031] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3baf20) returned 1 [0194.031] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\A9E4F776657345B52012CE8E279D314C_DCA82AA47C444DFAE483555D3A592A95", nBufferLength=0x105, lpBuffer=0x3bbba0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\A9E4F776657345B52012CE8E279D314C_DCA82AA47C444DFAE483555D3A592A95", lpFilePart=0x0) returned 0xc0 [0194.031] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc040) returned 1 [0194.031] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\A9E4F776657345B52012CE8E279D314C_DCA82AA47C444DFAE483555D3A592A95" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\a9e4f776657345b52012ce8e279d314c_dca82aa47c444dfae483555d3a592a95"), fInfoLevelId=0x0, lpFileInformation=0x3bc120 | out: lpFileInformation=0x3bc120*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xc999f69, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc999f69, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xc999f69, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x1d7)) returned 1 [0194.031] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc000) returned 1 [0194.031] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\A9E4F776657345B52012CE8E279D314C_DCA82AA47C444DFAE483555D3A592A95", nBufferLength=0x105, lpBuffer=0x3bbbc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\A9E4F776657345B52012CE8E279D314C_DCA82AA47C444DFAE483555D3A592A95", lpFilePart=0x0) returned 0xc0 [0194.032] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc040) returned 1 [0194.032] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\A9E4F776657345B52012CE8E279D314C_DCA82AA47C444DFAE483555D3A592A95" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\a9e4f776657345b52012ce8e279d314c_dca82aa47c444dfae483555d3a592a95"), fInfoLevelId=0x0, lpFileInformation=0x22c27e0 | out: lpFileInformation=0x22c27e0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xc999f69, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc999f69, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xc999f69, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x1d7)) returned 1 [0194.032] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc000) returned 1 [0194.032] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\A9E4F776657345B52012CE8E279D314C_DCA82AA47C444DFAE483555D3A592A95", nBufferLength=0x105, lpBuffer=0x3bba20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\A9E4F776657345B52012CE8E279D314C_DCA82AA47C444DFAE483555D3A592A95", lpFilePart=0x0) returned 0xc0 [0194.032] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf00) returned 1 [0194.032] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\A9E4F776657345B52012CE8E279D314C_DCA82AA47C444DFAE483555D3A592A95" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\a9e4f776657345b52012ce8e279d314c_dca82aa47c444dfae483555d3a592a95"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0194.032] GetFileType (hFile=0x444) returned 0x1 [0194.032] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbe70) returned 1 [0194.032] GetFileType (hFile=0x444) returned 0x1 [0194.032] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc098 | out: lpFileSizeHigh=0x3bc098*=0x0) returned 0x1d7 [0194.032] ReadFile (in: hFile=0x444, lpBuffer=0x22c2f20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bbfc8, lpOverlapped=0x0 | out: lpBuffer=0x22c2f20*, lpNumberOfBytesRead=0x3bbfc8*=0x1d7, lpOverlapped=0x0) returned 1 [0194.032] CloseHandle (hObject=0x444) returned 1 [0194.068] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\A9E4F776657345B52012CE8E279D314C_DCA82AA47C444DFAE483555D3A592A95", nBufferLength=0x105, lpBuffer=0x3bba20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\A9E4F776657345B52012CE8E279D314C_DCA82AA47C444DFAE483555D3A592A95", lpFilePart=0x0) returned 0xc0 [0194.068] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf00) returned 1 [0194.068] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\A9E4F776657345B52012CE8E279D314C_DCA82AA47C444DFAE483555D3A592A95" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\a9e4f776657345b52012ce8e279d314c_dca82aa47c444dfae483555d3a592a95"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0194.070] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8990) returned 1 [0194.071] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\B912B2C6928A18B8CD7D50CF08BEA95B_F85B8279FA54A31CEEC2563F5A8F73E8", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\B912B2C6928A18B8CD7D50CF08BEA95B_F85B8279FA54A31CEEC2563F5A8F73E8", lpFilePart=0x0) returned 0xc0 [0194.071] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0194.071] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\B912B2C6928A18B8CD7D50CF08BEA95B_F85B8279FA54A31CEEC2563F5A8F73E8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\b912b2c6928a18b8cd7d50cf08bea95b_f85b8279fa54a31ceec2563f5a8f73e8"), fInfoLevelId=0x0, lpFileInformation=0x233b248 | out: lpFileInformation=0x233b248*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xdd02cf, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xdd02cf, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xdd02cf, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x71c)) returned 1 [0194.071] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0194.071] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\B912B2C6928A18B8CD7D50CF08BEA95B_F85B8279FA54A31CEEC2563F5A8F73E8", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\B912B2C6928A18B8CD7D50CF08BEA95B_F85B8279FA54A31CEEC2563F5A8F73E8", lpFilePart=0x0) returned 0xc0 [0194.071] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0194.071] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\B912B2C6928A18B8CD7D50CF08BEA95B_F85B8279FA54A31CEEC2563F5A8F73E8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\b912b2c6928a18b8cd7d50cf08bea95b_f85b8279fa54a31ceec2563f5a8f73e8"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0194.071] GetFileType (hFile=0x444) returned 0x1 [0194.071] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be400) returned 1 [0194.071] GetFileType (hFile=0x444) returned 0x1 [0194.071] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be628 | out: lpFileSizeHigh=0x3be628*=0x0) returned 0x71c [0194.071] ReadFile (in: hFile=0x444, lpBuffer=0x233bed0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be558, lpOverlapped=0x0 | out: lpBuffer=0x233bed0*, lpNumberOfBytesRead=0x3be558*=0x71c, lpOverlapped=0x0) returned 1 [0194.091] CloseHandle (hObject=0x444) returned 1 [0194.154] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\B912B2C6928A18B8CD7D50CF08BEA95B_F85B8279FA54A31CEEC2563F5A8F73E8", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\B912B2C6928A18B8CD7D50CF08BEA95B_F85B8279FA54A31CEEC2563F5A8F73E8", lpFilePart=0x0) returned 0xc0 [0194.154] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0194.154] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\B912B2C6928A18B8CD7D50CF08BEA95B_F85B8279FA54A31CEEC2563F5A8F73E8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\b912b2c6928a18b8cd7d50cf08bea95b_f85b8279fa54a31ceec2563f5a8f73e8"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0194.155] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3baf20) returned 1 [0194.156] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\B912B2C6928A18B8CD7D50CF08BEA95B_F85B8279FA54A31CEEC2563F5A8F73E8", nBufferLength=0x105, lpBuffer=0x3bbba0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\B912B2C6928A18B8CD7D50CF08BEA95B_F85B8279FA54A31CEEC2563F5A8F73E8", lpFilePart=0x0) returned 0xc0 [0194.156] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc040) returned 1 [0194.156] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\B912B2C6928A18B8CD7D50CF08BEA95B_F85B8279FA54A31CEEC2563F5A8F73E8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\b912b2c6928a18b8cd7d50cf08bea95b_f85b8279fa54a31ceec2563f5a8f73e8"), fInfoLevelId=0x0, lpFileInformation=0x3bc120 | out: lpFileInformation=0x3bc120*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xdd02cf, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xdd02cf, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xdd02cf, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x71c)) returned 1 [0194.156] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc000) returned 1 [0194.156] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\B912B2C6928A18B8CD7D50CF08BEA95B_F85B8279FA54A31CEEC2563F5A8F73E8", nBufferLength=0x105, lpBuffer=0x3bbbc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\B912B2C6928A18B8CD7D50CF08BEA95B_F85B8279FA54A31CEEC2563F5A8F73E8", lpFilePart=0x0) returned 0xc0 [0194.156] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc040) returned 1 [0194.156] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\B912B2C6928A18B8CD7D50CF08BEA95B_F85B8279FA54A31CEEC2563F5A8F73E8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\b912b2c6928a18b8cd7d50cf08bea95b_f85b8279fa54a31ceec2563f5a8f73e8"), fInfoLevelId=0x0, lpFileInformation=0x21b70e8 | out: lpFileInformation=0x21b70e8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xdd02cf, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xdd02cf, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xdd02cf, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x71c)) returned 1 [0194.156] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc000) returned 1 [0194.156] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\B912B2C6928A18B8CD7D50CF08BEA95B_F85B8279FA54A31CEEC2563F5A8F73E8", nBufferLength=0x105, lpBuffer=0x3bba20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\B912B2C6928A18B8CD7D50CF08BEA95B_F85B8279FA54A31CEEC2563F5A8F73E8", lpFilePart=0x0) returned 0xc0 [0194.156] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf00) returned 1 [0194.156] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\B912B2C6928A18B8CD7D50CF08BEA95B_F85B8279FA54A31CEEC2563F5A8F73E8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\b912b2c6928a18b8cd7d50cf08bea95b_f85b8279fa54a31ceec2563f5a8f73e8"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0194.156] GetFileType (hFile=0x444) returned 0x1 [0194.156] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbe70) returned 1 [0194.157] GetFileType (hFile=0x444) returned 0x1 [0194.157] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc098 | out: lpFileSizeHigh=0x3bc098*=0x0) returned 0x71c [0194.157] ReadFile (in: hFile=0x444, lpBuffer=0x21b7d70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bbfc8, lpOverlapped=0x0 | out: lpBuffer=0x21b7d70*, lpNumberOfBytesRead=0x3bbfc8*=0x71c, lpOverlapped=0x0) returned 1 [0194.157] CloseHandle (hObject=0x444) returned 1 [0194.195] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\B912B2C6928A18B8CD7D50CF08BEA95B_F85B8279FA54A31CEEC2563F5A8F73E8", nBufferLength=0x105, lpBuffer=0x3bba20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\B912B2C6928A18B8CD7D50CF08BEA95B_F85B8279FA54A31CEEC2563F5A8F73E8", lpFilePart=0x0) returned 0xc0 [0194.195] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf00) returned 1 [0194.195] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\B912B2C6928A18B8CD7D50CF08BEA95B_F85B8279FA54A31CEEC2563F5A8F73E8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\b912b2c6928a18b8cd7d50cf08bea95b_f85b8279fa54a31ceec2563f5a8f73e8"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0194.197] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8990) returned 1 [0194.197] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\B912B2C6928A18B8CD7D50CF08BEA95B_FD02B13068D47EB94BCC5D8B201E9929", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\B912B2C6928A18B8CD7D50CF08BEA95B_FD02B13068D47EB94BCC5D8B201E9929", lpFilePart=0x0) returned 0xc0 [0194.197] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0194.197] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\B912B2C6928A18B8CD7D50CF08BEA95B_FD02B13068D47EB94BCC5D8B201E9929" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\b912b2c6928a18b8cd7d50cf08bea95b_fd02b13068d47eb94bcc5d8b201e9929"), fInfoLevelId=0x0, lpFileInformation=0x2231ad0 | out: lpFileInformation=0x2231ad0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xa9b553, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xa9b553, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xa9b553, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x71c)) returned 1 [0194.198] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0194.198] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\B912B2C6928A18B8CD7D50CF08BEA95B_FD02B13068D47EB94BCC5D8B201E9929", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\B912B2C6928A18B8CD7D50CF08BEA95B_FD02B13068D47EB94BCC5D8B201E9929", lpFilePart=0x0) returned 0xc0 [0194.198] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0194.198] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\B912B2C6928A18B8CD7D50CF08BEA95B_FD02B13068D47EB94BCC5D8B201E9929" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\b912b2c6928a18b8cd7d50cf08bea95b_fd02b13068d47eb94bcc5d8b201e9929"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0194.198] GetFileType (hFile=0x444) returned 0x1 [0194.198] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be400) returned 1 [0194.198] GetFileType (hFile=0x444) returned 0x1 [0194.198] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be628 | out: lpFileSizeHigh=0x3be628*=0x0) returned 0x71c [0194.198] ReadFile (in: hFile=0x444, lpBuffer=0x2232758, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be558, lpOverlapped=0x0 | out: lpBuffer=0x2232758*, lpNumberOfBytesRead=0x3be558*=0x71c, lpOverlapped=0x0) returned 1 [0194.200] CloseHandle (hObject=0x444) returned 1 [0194.238] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\B912B2C6928A18B8CD7D50CF08BEA95B_FD02B13068D47EB94BCC5D8B201E9929", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\B912B2C6928A18B8CD7D50CF08BEA95B_FD02B13068D47EB94BCC5D8B201E9929", lpFilePart=0x0) returned 0xc0 [0194.238] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0194.238] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\B912B2C6928A18B8CD7D50CF08BEA95B_FD02B13068D47EB94BCC5D8B201E9929" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\b912b2c6928a18b8cd7d50cf08bea95b_fd02b13068d47eb94bcc5d8b201e9929"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0194.240] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3baf20) returned 1 [0194.240] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\B912B2C6928A18B8CD7D50CF08BEA95B_FD02B13068D47EB94BCC5D8B201E9929", nBufferLength=0x105, lpBuffer=0x3bbba0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\B912B2C6928A18B8CD7D50CF08BEA95B_FD02B13068D47EB94BCC5D8B201E9929", lpFilePart=0x0) returned 0xc0 [0194.240] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc040) returned 1 [0194.240] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\B912B2C6928A18B8CD7D50CF08BEA95B_FD02B13068D47EB94BCC5D8B201E9929" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\b912b2c6928a18b8cd7d50cf08bea95b_fd02b13068d47eb94bcc5d8b201e9929"), fInfoLevelId=0x0, lpFileInformation=0x3bc120 | out: lpFileInformation=0x3bc120*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xa9b553, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xa9b553, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xa9b553, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x71c)) returned 1 [0194.241] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc000) returned 1 [0194.241] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\B912B2C6928A18B8CD7D50CF08BEA95B_FD02B13068D47EB94BCC5D8B201E9929", nBufferLength=0x105, lpBuffer=0x3bbbc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\B912B2C6928A18B8CD7D50CF08BEA95B_FD02B13068D47EB94BCC5D8B201E9929", lpFilePart=0x0) returned 0xc0 [0194.241] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc040) returned 1 [0194.241] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\B912B2C6928A18B8CD7D50CF08BEA95B_FD02B13068D47EB94BCC5D8B201E9929" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\b912b2c6928a18b8cd7d50cf08bea95b_fd02b13068d47eb94bcc5d8b201e9929"), fInfoLevelId=0x0, lpFileInformation=0x22ac658 | out: lpFileInformation=0x22ac658*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xa9b553, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xa9b553, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xa9b553, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x71c)) returned 1 [0194.241] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc000) returned 1 [0194.241] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\B912B2C6928A18B8CD7D50CF08BEA95B_FD02B13068D47EB94BCC5D8B201E9929", nBufferLength=0x105, lpBuffer=0x3bba20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\B912B2C6928A18B8CD7D50CF08BEA95B_FD02B13068D47EB94BCC5D8B201E9929", lpFilePart=0x0) returned 0xc0 [0194.241] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf00) returned 1 [0194.241] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\B912B2C6928A18B8CD7D50CF08BEA95B_FD02B13068D47EB94BCC5D8B201E9929" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\b912b2c6928a18b8cd7d50cf08bea95b_fd02b13068d47eb94bcc5d8b201e9929"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0194.241] GetFileType (hFile=0x444) returned 0x1 [0194.241] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbe70) returned 1 [0194.241] GetFileType (hFile=0x444) returned 0x1 [0194.241] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc098 | out: lpFileSizeHigh=0x3bc098*=0x0) returned 0x71c [0194.241] ReadFile (in: hFile=0x444, lpBuffer=0x22ad2e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bbfc8, lpOverlapped=0x0 | out: lpBuffer=0x22ad2e0*, lpNumberOfBytesRead=0x3bbfc8*=0x71c, lpOverlapped=0x0) returned 1 [0194.241] CloseHandle (hObject=0x444) returned 1 [0194.280] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\B912B2C6928A18B8CD7D50CF08BEA95B_FD02B13068D47EB94BCC5D8B201E9929", nBufferLength=0x105, lpBuffer=0x3bba20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\B912B2C6928A18B8CD7D50CF08BEA95B_FD02B13068D47EB94BCC5D8B201E9929", lpFilePart=0x0) returned 0xc0 [0194.280] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf00) returned 1 [0194.280] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\B912B2C6928A18B8CD7D50CF08BEA95B_FD02B13068D47EB94BCC5D8B201E9929" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\b912b2c6928a18b8cd7d50cf08bea95b_fd02b13068d47eb94bcc5d8b201e9929"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0194.282] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8990) returned 1 [0194.282] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873", lpFilePart=0x0) returned 0xc0 [0194.282] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0194.283] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\c46e7b0f942663a1edc8d9d6d7869173_42820cdfea41dc84aab89a6b63561873"), fInfoLevelId=0x0, lpFileInformation=0x2327040 | out: lpFileInformation=0x2327040*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x8f33454, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x8f33454, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x8f33454, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x6e3)) returned 1 [0194.283] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0194.283] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873", lpFilePart=0x0) returned 0xc0 [0194.283] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0194.283] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\c46e7b0f942663a1edc8d9d6d7869173_42820cdfea41dc84aab89a6b63561873"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0194.283] GetFileType (hFile=0x444) returned 0x1 [0194.283] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be400) returned 1 [0194.283] GetFileType (hFile=0x444) returned 0x1 [0194.283] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be628 | out: lpFileSizeHigh=0x3be628*=0x0) returned 0x6e3 [0194.283] ReadFile (in: hFile=0x444, lpBuffer=0x2327c90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be558, lpOverlapped=0x0 | out: lpBuffer=0x2327c90*, lpNumberOfBytesRead=0x3be558*=0x6e3, lpOverlapped=0x0) returned 1 [0194.292] CloseHandle (hObject=0x444) returned 1 [0194.334] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873", lpFilePart=0x0) returned 0xc0 [0194.334] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0194.334] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\c46e7b0f942663a1edc8d9d6d7869173_42820cdfea41dc84aab89a6b63561873"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0194.335] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3baf20) returned 1 [0194.336] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873", nBufferLength=0x105, lpBuffer=0x3bbba0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873", lpFilePart=0x0) returned 0xc0 [0194.336] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc040) returned 1 [0194.336] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\c46e7b0f942663a1edc8d9d6d7869173_42820cdfea41dc84aab89a6b63561873"), fInfoLevelId=0x0, lpFileInformation=0x3bc120 | out: lpFileInformation=0x3bc120*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x8f33454, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x8f33454, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x8f33454, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x6e3)) returned 1 [0194.336] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc000) returned 1 [0194.336] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873", nBufferLength=0x105, lpBuffer=0x3bbbc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873", lpFilePart=0x0) returned 0xc0 [0194.336] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc040) returned 1 [0194.336] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\c46e7b0f942663a1edc8d9d6d7869173_42820cdfea41dc84aab89a6b63561873"), fInfoLevelId=0x0, lpFileInformation=0x21a3808 | out: lpFileInformation=0x21a3808*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x8f33454, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x8f33454, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x8f33454, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x6e3)) returned 1 [0194.336] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc000) returned 1 [0194.336] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873", nBufferLength=0x105, lpBuffer=0x3bba20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873", lpFilePart=0x0) returned 0xc0 [0194.336] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf00) returned 1 [0194.336] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\c46e7b0f942663a1edc8d9d6d7869173_42820cdfea41dc84aab89a6b63561873"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0194.336] GetFileType (hFile=0x444) returned 0x1 [0194.336] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbe70) returned 1 [0194.336] GetFileType (hFile=0x444) returned 0x1 [0194.336] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc098 | out: lpFileSizeHigh=0x3bc098*=0x0) returned 0x6e3 [0194.337] ReadFile (in: hFile=0x444, lpBuffer=0x21a4458, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bbfc8, lpOverlapped=0x0 | out: lpBuffer=0x21a4458*, lpNumberOfBytesRead=0x3bbfc8*=0x6e3, lpOverlapped=0x0) returned 1 [0194.337] CloseHandle (hObject=0x444) returned 1 [0194.377] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873", nBufferLength=0x105, lpBuffer=0x3bba20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873", lpFilePart=0x0) returned 0xc0 [0194.377] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf00) returned 1 [0194.377] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\c46e7b0f942663a1edc8d9d6d7869173_42820cdfea41dc84aab89a6b63561873"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0194.378] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8990) returned 1 [0194.379] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF", lpFilePart=0x0) returned 0xc0 [0194.379] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0194.379] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\c46e7b0f942663a1edc8d9d6d7869173_d9b9f37ece595b0b7b6aa12451d392cf"), fInfoLevelId=0x0, lpFileInformation=0x221e0d0 | out: lpFileInformation=0x221e0d0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x10f141d, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x10f141d, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x10f141d, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x6e3)) returned 1 [0194.383] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0194.383] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF", lpFilePart=0x0) returned 0xc0 [0194.383] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0194.383] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\c46e7b0f942663a1edc8d9d6d7869173_d9b9f37ece595b0b7b6aa12451d392cf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0194.383] GetFileType (hFile=0x444) returned 0x1 [0194.383] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be400) returned 1 [0194.383] GetFileType (hFile=0x444) returned 0x1 [0194.383] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be628 | out: lpFileSizeHigh=0x3be628*=0x0) returned 0x6e3 [0194.383] ReadFile (in: hFile=0x444, lpBuffer=0x221ed20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be558, lpOverlapped=0x0 | out: lpBuffer=0x221ed20*, lpNumberOfBytesRead=0x3be558*=0x6e3, lpOverlapped=0x0) returned 1 [0194.384] CloseHandle (hObject=0x444) returned 1 [0194.434] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF", lpFilePart=0x0) returned 0xc0 [0194.434] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0194.434] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\c46e7b0f942663a1edc8d9d6d7869173_d9b9f37ece595b0b7b6aa12451d392cf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0194.436] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3baf20) returned 1 [0194.437] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF", nBufferLength=0x105, lpBuffer=0x3bbba0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF", lpFilePart=0x0) returned 0xc0 [0194.437] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc040) returned 1 [0194.437] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\c46e7b0f942663a1edc8d9d6d7869173_d9b9f37ece595b0b7b6aa12451d392cf"), fInfoLevelId=0x0, lpFileInformation=0x3bc120 | out: lpFileInformation=0x3bc120*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x10f141d, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x10f141d, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x10f141d, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x6e3)) returned 1 [0194.437] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc000) returned 1 [0194.437] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF", nBufferLength=0x105, lpBuffer=0x3bbbc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF", lpFilePart=0x0) returned 0xc0 [0194.437] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc040) returned 1 [0194.437] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\c46e7b0f942663a1edc8d9d6d7869173_d9b9f37ece595b0b7b6aa12451d392cf"), fInfoLevelId=0x0, lpFileInformation=0x2298b38 | out: lpFileInformation=0x2298b38*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x10f141d, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x10f141d, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x10f141d, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x6e3)) returned 1 [0194.437] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc000) returned 1 [0194.437] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF", nBufferLength=0x105, lpBuffer=0x3bba20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF", lpFilePart=0x0) returned 0xc0 [0194.437] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf00) returned 1 [0194.437] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\c46e7b0f942663a1edc8d9d6d7869173_d9b9f37ece595b0b7b6aa12451d392cf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0194.437] GetFileType (hFile=0x444) returned 0x1 [0194.438] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbe70) returned 1 [0194.438] GetFileType (hFile=0x444) returned 0x1 [0194.438] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc098 | out: lpFileSizeHigh=0x3bc098*=0x0) returned 0x6e3 [0194.438] ReadFile (in: hFile=0x444, lpBuffer=0x2299788, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bbfc8, lpOverlapped=0x0 | out: lpBuffer=0x2299788*, lpNumberOfBytesRead=0x3bbfc8*=0x6e3, lpOverlapped=0x0) returned 1 [0194.438] CloseHandle (hObject=0x444) returned 1 [0194.491] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF", nBufferLength=0x105, lpBuffer=0x3bba20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF", lpFilePart=0x0) returned 0xc0 [0194.491] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf00) returned 1 [0194.491] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\c46e7b0f942663a1edc8d9d6d7869173_d9b9f37ece595b0b7b6aa12451d392cf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0194.493] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8990) returned 1 [0194.494] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\D47DBD2F9E3365FBBE008D71FB06716F_835A2FD7EE5F1F37B7872C78D42A88BF", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\D47DBD2F9E3365FBBE008D71FB06716F_835A2FD7EE5F1F37B7872C78D42A88BF", lpFilePart=0x0) returned 0xc0 [0194.494] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0194.494] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\D47DBD2F9E3365FBBE008D71FB06716F_835A2FD7EE5F1F37B7872C78D42A88BF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\d47dbd2f9e3365fbbe008d71fb06716f_835a2fd7ee5f1f37b7872c78d42a88bf"), fInfoLevelId=0x0, lpFileInformation=0x2313400 | out: lpFileInformation=0x2313400*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x91ff119, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x91ff119, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x91ff119, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x5ae)) returned 1 [0194.497] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0194.497] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\D47DBD2F9E3365FBBE008D71FB06716F_835A2FD7EE5F1F37B7872C78D42A88BF", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\D47DBD2F9E3365FBBE008D71FB06716F_835A2FD7EE5F1F37B7872C78D42A88BF", lpFilePart=0x0) returned 0xc0 [0194.497] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0194.497] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\D47DBD2F9E3365FBBE008D71FB06716F_835A2FD7EE5F1F37B7872C78D42A88BF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\d47dbd2f9e3365fbbe008d71fb06716f_835a2fd7ee5f1f37b7872c78d42a88bf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0194.498] GetFileType (hFile=0x444) returned 0x1 [0194.498] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be400) returned 1 [0194.498] GetFileType (hFile=0x444) returned 0x1 [0194.498] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be628 | out: lpFileSizeHigh=0x3be628*=0x0) returned 0x5ae [0194.498] ReadFile (in: hFile=0x444, lpBuffer=0x2313f18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be558, lpOverlapped=0x0 | out: lpBuffer=0x2313f18*, lpNumberOfBytesRead=0x3be558*=0x5ae, lpOverlapped=0x0) returned 1 [0194.500] CloseHandle (hObject=0x444) returned 1 [0194.625] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\D47DBD2F9E3365FBBE008D71FB06716F_835A2FD7EE5F1F37B7872C78D42A88BF", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\D47DBD2F9E3365FBBE008D71FB06716F_835A2FD7EE5F1F37B7872C78D42A88BF", lpFilePart=0x0) returned 0xc0 [0194.625] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0194.625] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\D47DBD2F9E3365FBBE008D71FB06716F_835A2FD7EE5F1F37B7872C78D42A88BF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\d47dbd2f9e3365fbbe008d71fb06716f_835a2fd7ee5f1f37b7872c78d42a88bf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0194.626] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3baf20) returned 1 [0194.627] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\D47DBD2F9E3365FBBE008D71FB06716F_835A2FD7EE5F1F37B7872C78D42A88BF", nBufferLength=0x105, lpBuffer=0x3bbba0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\D47DBD2F9E3365FBBE008D71FB06716F_835A2FD7EE5F1F37B7872C78D42A88BF", lpFilePart=0x0) returned 0xc0 [0194.627] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc040) returned 1 [0194.627] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\D47DBD2F9E3365FBBE008D71FB06716F_835A2FD7EE5F1F37B7872C78D42A88BF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\d47dbd2f9e3365fbbe008d71fb06716f_835a2fd7ee5f1f37b7872c78d42a88bf"), fInfoLevelId=0x0, lpFileInformation=0x3bc120 | out: lpFileInformation=0x3bc120*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x91ff119, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x91ff119, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x91ff119, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x5ae)) returned 1 [0194.627] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc000) returned 1 [0194.627] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\D47DBD2F9E3365FBBE008D71FB06716F_835A2FD7EE5F1F37B7872C78D42A88BF", nBufferLength=0x105, lpBuffer=0x3bbbc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\D47DBD2F9E3365FBBE008D71FB06716F_835A2FD7EE5F1F37B7872C78D42A88BF", lpFilePart=0x0) returned 0xc0 [0194.627] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc040) returned 1 [0194.627] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\D47DBD2F9E3365FBBE008D71FB06716F_835A2FD7EE5F1F37B7872C78D42A88BF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\d47dbd2f9e3365fbbe008d71fb06716f_835a2fd7ee5f1f37b7872c78d42a88bf"), fInfoLevelId=0x0, lpFileInformation=0x218f2f0 | out: lpFileInformation=0x218f2f0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x91ff119, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x91ff119, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x91ff119, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x5ae)) returned 1 [0194.627] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc000) returned 1 [0194.627] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\D47DBD2F9E3365FBBE008D71FB06716F_835A2FD7EE5F1F37B7872C78D42A88BF", nBufferLength=0x105, lpBuffer=0x3bba20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\D47DBD2F9E3365FBBE008D71FB06716F_835A2FD7EE5F1F37B7872C78D42A88BF", lpFilePart=0x0) returned 0xc0 [0194.627] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf00) returned 1 [0194.627] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\D47DBD2F9E3365FBBE008D71FB06716F_835A2FD7EE5F1F37B7872C78D42A88BF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\d47dbd2f9e3365fbbe008d71fb06716f_835a2fd7ee5f1f37b7872c78d42a88bf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0194.627] GetFileType (hFile=0x444) returned 0x1 [0194.628] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbe70) returned 1 [0194.628] GetFileType (hFile=0x444) returned 0x1 [0194.628] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc098 | out: lpFileSizeHigh=0x3bc098*=0x0) returned 0x5ae [0194.628] ReadFile (in: hFile=0x444, lpBuffer=0x218fe08, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bbfc8, lpOverlapped=0x0 | out: lpBuffer=0x218fe08*, lpNumberOfBytesRead=0x3bbfc8*=0x5ae, lpOverlapped=0x0) returned 1 [0194.628] CloseHandle (hObject=0x444) returned 1 [0194.664] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\D47DBD2F9E3365FBBE008D71FB06716F_835A2FD7EE5F1F37B7872C78D42A88BF", nBufferLength=0x105, lpBuffer=0x3bba20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\D47DBD2F9E3365FBBE008D71FB06716F_835A2FD7EE5F1F37B7872C78D42A88BF", lpFilePart=0x0) returned 0xc0 [0194.664] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf00) returned 1 [0194.664] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\D47DBD2F9E3365FBBE008D71FB06716F_835A2FD7EE5F1F37B7872C78D42A88BF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\d47dbd2f9e3365fbbe008d71fb06716f_835a2fd7ee5f1f37b7872c78d42a88bf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0194.666] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8990) returned 1 [0194.670] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\D47DBD2F9E3365FBBE008D71FB06716F_D33192D58AA9CA2B9097E848E9FE86DE", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\D47DBD2F9E3365FBBE008D71FB06716F_D33192D58AA9CA2B9097E848E9FE86DE", lpFilePart=0x0) returned 0xc0 [0194.670] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0194.670] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\D47DBD2F9E3365FBBE008D71FB06716F_D33192D58AA9CA2B9097E848E9FE86DE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\d47dbd2f9e3365fbbe008d71fb06716f_d33192d58aa9ca2b9097e848e9fe86de"), fInfoLevelId=0x0, lpFileInformation=0x2209438 | out: lpFileInformation=0x2209438*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x1f0ec25, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x1f0ec25, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x1f0ffa2, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x5ae)) returned 1 [0194.672] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0194.672] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\D47DBD2F9E3365FBBE008D71FB06716F_D33192D58AA9CA2B9097E848E9FE86DE", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\D47DBD2F9E3365FBBE008D71FB06716F_D33192D58AA9CA2B9097E848E9FE86DE", lpFilePart=0x0) returned 0xc0 [0194.672] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0194.672] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\D47DBD2F9E3365FBBE008D71FB06716F_D33192D58AA9CA2B9097E848E9FE86DE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\d47dbd2f9e3365fbbe008d71fb06716f_d33192d58aa9ca2b9097e848e9fe86de"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0194.672] GetFileType (hFile=0x444) returned 0x1 [0194.672] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be400) returned 1 [0194.672] GetFileType (hFile=0x444) returned 0x1 [0194.672] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be628 | out: lpFileSizeHigh=0x3be628*=0x0) returned 0x5ae [0194.672] ReadFile (in: hFile=0x444, lpBuffer=0x2209f50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be558, lpOverlapped=0x0 | out: lpBuffer=0x2209f50*, lpNumberOfBytesRead=0x3be558*=0x5ae, lpOverlapped=0x0) returned 1 [0194.692] CloseHandle (hObject=0x444) returned 1 [0194.728] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\D47DBD2F9E3365FBBE008D71FB06716F_D33192D58AA9CA2B9097E848E9FE86DE", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\D47DBD2F9E3365FBBE008D71FB06716F_D33192D58AA9CA2B9097E848E9FE86DE", lpFilePart=0x0) returned 0xc0 [0194.728] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0194.729] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\D47DBD2F9E3365FBBE008D71FB06716F_D33192D58AA9CA2B9097E848E9FE86DE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\d47dbd2f9e3365fbbe008d71fb06716f_d33192d58aa9ca2b9097e848e9fe86de"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0194.741] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3baf20) returned 1 [0194.741] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\D47DBD2F9E3365FBBE008D71FB06716F_D33192D58AA9CA2B9097E848E9FE86DE", nBufferLength=0x105, lpBuffer=0x3bbba0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\D47DBD2F9E3365FBBE008D71FB06716F_D33192D58AA9CA2B9097E848E9FE86DE", lpFilePart=0x0) returned 0xc0 [0194.741] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc040) returned 1 [0194.741] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\D47DBD2F9E3365FBBE008D71FB06716F_D33192D58AA9CA2B9097E848E9FE86DE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\d47dbd2f9e3365fbbe008d71fb06716f_d33192d58aa9ca2b9097e848e9fe86de"), fInfoLevelId=0x0, lpFileInformation=0x3bc120 | out: lpFileInformation=0x3bc120*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x1f0ec25, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x1f0ec25, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x1f0ffa2, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x5ae)) returned 1 [0194.741] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc000) returned 1 [0194.741] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\D47DBD2F9E3365FBBE008D71FB06716F_D33192D58AA9CA2B9097E848E9FE86DE", nBufferLength=0x105, lpBuffer=0x3bbbc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\D47DBD2F9E3365FBBE008D71FB06716F_D33192D58AA9CA2B9097E848E9FE86DE", lpFilePart=0x0) returned 0xc0 [0194.741] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc040) returned 1 [0194.742] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\D47DBD2F9E3365FBBE008D71FB06716F_D33192D58AA9CA2B9097E848E9FE86DE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\d47dbd2f9e3365fbbe008d71fb06716f_d33192d58aa9ca2b9097e848e9fe86de"), fInfoLevelId=0x0, lpFileInformation=0x2283720 | out: lpFileInformation=0x2283720*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x1f0ec25, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x1f0ec25, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x1f0ffa2, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x5ae)) returned 1 [0194.742] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc000) returned 1 [0194.742] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\D47DBD2F9E3365FBBE008D71FB06716F_D33192D58AA9CA2B9097E848E9FE86DE", nBufferLength=0x105, lpBuffer=0x3bba20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\D47DBD2F9E3365FBBE008D71FB06716F_D33192D58AA9CA2B9097E848E9FE86DE", lpFilePart=0x0) returned 0xc0 [0194.742] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf00) returned 1 [0194.742] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\D47DBD2F9E3365FBBE008D71FB06716F_D33192D58AA9CA2B9097E848E9FE86DE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\d47dbd2f9e3365fbbe008d71fb06716f_d33192d58aa9ca2b9097e848e9fe86de"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0194.742] GetFileType (hFile=0x444) returned 0x1 [0194.742] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbe70) returned 1 [0194.742] GetFileType (hFile=0x444) returned 0x1 [0194.742] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc098 | out: lpFileSizeHigh=0x3bc098*=0x0) returned 0x5ae [0194.742] ReadFile (in: hFile=0x444, lpBuffer=0x2284238, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bbfc8, lpOverlapped=0x0 | out: lpBuffer=0x2284238*, lpNumberOfBytesRead=0x3bbfc8*=0x5ae, lpOverlapped=0x0) returned 1 [0194.742] CloseHandle (hObject=0x444) returned 1 [0194.799] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\D47DBD2F9E3365FBBE008D71FB06716F_D33192D58AA9CA2B9097E848E9FE86DE", nBufferLength=0x105, lpBuffer=0x3bba20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\D47DBD2F9E3365FBBE008D71FB06716F_D33192D58AA9CA2B9097E848E9FE86DE", lpFilePart=0x0) returned 0xc0 [0194.799] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf00) returned 1 [0194.799] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\D47DBD2F9E3365FBBE008D71FB06716F_D33192D58AA9CA2B9097E848E9FE86DE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\d47dbd2f9e3365fbbe008d71fb06716f_d33192d58aa9ca2b9097e848e9fe86de"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0194.801] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8990) returned 1 [0194.802] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\DCE3BDBF5BDD86E2AB5B471CB90709B4_D787EFA352C03E71EA5F8B6B11B398B8", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\DCE3BDBF5BDD86E2AB5B471CB90709B4_D787EFA352C03E71EA5F8B6B11B398B8", lpFilePart=0x0) returned 0xc0 [0194.802] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0194.802] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\DCE3BDBF5BDD86E2AB5B471CB90709B4_D787EFA352C03E71EA5F8B6B11B398B8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\dce3bdbf5bdd86e2ab5b471cb90709b4_d787efa352c03e71ea5f8b6b11b398b8"), fInfoLevelId=0x0, lpFileInformation=0x22fd868 | out: lpFileInformation=0x22fd868*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbcef5c3, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xbcef5c3, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xbcef5c3, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x1d7)) returned 1 [0194.802] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0194.802] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\DCE3BDBF5BDD86E2AB5B471CB90709B4_D787EFA352C03E71EA5F8B6B11B398B8", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\DCE3BDBF5BDD86E2AB5B471CB90709B4_D787EFA352C03E71EA5F8B6B11B398B8", lpFilePart=0x0) returned 0xc0 [0194.802] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0194.802] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\DCE3BDBF5BDD86E2AB5B471CB90709B4_D787EFA352C03E71EA5F8B6B11B398B8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\dce3bdbf5bdd86e2ab5b471cb90709b4_d787efa352c03e71ea5f8b6b11b398b8"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0194.802] GetFileType (hFile=0x444) returned 0x1 [0194.802] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be400) returned 1 [0194.802] GetFileType (hFile=0x444) returned 0x1 [0194.802] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be628 | out: lpFileSizeHigh=0x3be628*=0x0) returned 0x1d7 [0194.802] ReadFile (in: hFile=0x444, lpBuffer=0x22fdfa8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be558, lpOverlapped=0x0 | out: lpBuffer=0x22fdfa8*, lpNumberOfBytesRead=0x3be558*=0x1d7, lpOverlapped=0x0) returned 1 [0194.803] CloseHandle (hObject=0x444) returned 1 [0194.847] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\DCE3BDBF5BDD86E2AB5B471CB90709B4_D787EFA352C03E71EA5F8B6B11B398B8", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\DCE3BDBF5BDD86E2AB5B471CB90709B4_D787EFA352C03E71EA5F8B6B11B398B8", lpFilePart=0x0) returned 0xc0 [0194.847] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0194.848] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\DCE3BDBF5BDD86E2AB5B471CB90709B4_D787EFA352C03E71EA5F8B6B11B398B8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\dce3bdbf5bdd86e2ab5b471cb90709b4_d787efa352c03e71ea5f8b6b11b398b8"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0194.849] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3baf20) returned 1 [0194.849] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\DCE3BDBF5BDD86E2AB5B471CB90709B4_D787EFA352C03E71EA5F8B6B11B398B8", nBufferLength=0x105, lpBuffer=0x3bbba0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\DCE3BDBF5BDD86E2AB5B471CB90709B4_D787EFA352C03E71EA5F8B6B11B398B8", lpFilePart=0x0) returned 0xc0 [0194.849] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc040) returned 1 [0194.849] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\DCE3BDBF5BDD86E2AB5B471CB90709B4_D787EFA352C03E71EA5F8B6B11B398B8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\dce3bdbf5bdd86e2ab5b471cb90709b4_d787efa352c03e71ea5f8b6b11b398b8"), fInfoLevelId=0x0, lpFileInformation=0x3bc120 | out: lpFileInformation=0x3bc120*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbcef5c3, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xbcef5c3, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xbcef5c3, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x1d7)) returned 1 [0194.849] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc000) returned 1 [0194.849] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\DCE3BDBF5BDD86E2AB5B471CB90709B4_D787EFA352C03E71EA5F8B6B11B398B8", nBufferLength=0x105, lpBuffer=0x3bbbc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\DCE3BDBF5BDD86E2AB5B471CB90709B4_D787EFA352C03E71EA5F8B6B11B398B8", lpFilePart=0x0) returned 0xc0 [0194.850] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc040) returned 1 [0194.850] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\DCE3BDBF5BDD86E2AB5B471CB90709B4_D787EFA352C03E71EA5F8B6B11B398B8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\dce3bdbf5bdd86e2ab5b471cb90709b4_d787efa352c03e71ea5f8b6b11b398b8"), fInfoLevelId=0x0, lpFileInformation=0x2177a10 | out: lpFileInformation=0x2177a10*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbcef5c3, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xbcef5c3, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xbcef5c3, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x1d7)) returned 1 [0194.850] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc000) returned 1 [0194.850] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\DCE3BDBF5BDD86E2AB5B471CB90709B4_D787EFA352C03E71EA5F8B6B11B398B8", nBufferLength=0x105, lpBuffer=0x3bba20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\DCE3BDBF5BDD86E2AB5B471CB90709B4_D787EFA352C03E71EA5F8B6B11B398B8", lpFilePart=0x0) returned 0xc0 [0194.850] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf00) returned 1 [0194.850] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\DCE3BDBF5BDD86E2AB5B471CB90709B4_D787EFA352C03E71EA5F8B6B11B398B8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\dce3bdbf5bdd86e2ab5b471cb90709b4_d787efa352c03e71ea5f8b6b11b398b8"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0194.850] GetFileType (hFile=0x444) returned 0x1 [0194.850] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbe70) returned 1 [0194.850] GetFileType (hFile=0x444) returned 0x1 [0194.850] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc098 | out: lpFileSizeHigh=0x3bc098*=0x0) returned 0x1d7 [0194.850] ReadFile (in: hFile=0x444, lpBuffer=0x2178150, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bbfc8, lpOverlapped=0x0 | out: lpBuffer=0x2178150*, lpNumberOfBytesRead=0x3bbfc8*=0x1d7, lpOverlapped=0x0) returned 1 [0194.850] CloseHandle (hObject=0x444) returned 1 [0194.890] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\DCE3BDBF5BDD86E2AB5B471CB90709B4_D787EFA352C03E71EA5F8B6B11B398B8", nBufferLength=0x105, lpBuffer=0x3bba20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\DCE3BDBF5BDD86E2AB5B471CB90709B4_D787EFA352C03E71EA5F8B6B11B398B8", lpFilePart=0x0) returned 0xc0 [0194.890] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf00) returned 1 [0194.890] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\DCE3BDBF5BDD86E2AB5B471CB90709B4_D787EFA352C03E71EA5F8B6B11B398B8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\dce3bdbf5bdd86e2ab5b471cb90709b4_d787efa352c03e71ea5f8b6b11b398b8"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0194.891] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8990) returned 1 [0194.892] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\EDC238BFF48A31D55A97E1E93892934B_C20E0DA2D0F89FE526E1490F4A2EE5AB", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\EDC238BFF48A31D55A97E1E93892934B_C20E0DA2D0F89FE526E1490F4A2EE5AB", lpFilePart=0x0) returned 0xc0 [0194.892] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0194.892] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\EDC238BFF48A31D55A97E1E93892934B_C20E0DA2D0F89FE526E1490F4A2EE5AB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\edc238bff48a31d55a97e1e93892934b_c20e0da2d0f89fe526e1490f4a2ee5ab"), fInfoLevelId=0x0, lpFileInformation=0x21f0478 | out: lpFileInformation=0x21f0478*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbca3121, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xbca3121, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xbca3121, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x1d7)) returned 1 [0194.894] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0194.894] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\EDC238BFF48A31D55A97E1E93892934B_C20E0DA2D0F89FE526E1490F4A2EE5AB", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\EDC238BFF48A31D55A97E1E93892934B_C20E0DA2D0F89FE526E1490F4A2EE5AB", lpFilePart=0x0) returned 0xc0 [0194.894] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0194.894] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\EDC238BFF48A31D55A97E1E93892934B_C20E0DA2D0F89FE526E1490F4A2EE5AB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\edc238bff48a31d55a97e1e93892934b_c20e0da2d0f89fe526e1490f4a2ee5ab"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0194.894] GetFileType (hFile=0x444) returned 0x1 [0194.894] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be400) returned 1 [0194.894] GetFileType (hFile=0x444) returned 0x1 [0194.894] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be628 | out: lpFileSizeHigh=0x3be628*=0x0) returned 0x1d7 [0194.894] ReadFile (in: hFile=0x444, lpBuffer=0x21f0bb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be558, lpOverlapped=0x0 | out: lpBuffer=0x21f0bb8*, lpNumberOfBytesRead=0x3be558*=0x1d7, lpOverlapped=0x0) returned 1 [0194.895] CloseHandle (hObject=0x444) returned 1 [0194.931] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\EDC238BFF48A31D55A97E1E93892934B_C20E0DA2D0F89FE526E1490F4A2EE5AB", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\EDC238BFF48A31D55A97E1E93892934B_C20E0DA2D0F89FE526E1490F4A2EE5AB", lpFilePart=0x0) returned 0xc0 [0194.931] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0194.931] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\EDC238BFF48A31D55A97E1E93892934B_C20E0DA2D0F89FE526E1490F4A2EE5AB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\edc238bff48a31d55a97e1e93892934b_c20e0da2d0f89fe526e1490f4a2ee5ab"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0194.933] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3baf20) returned 1 [0194.948] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\EDC238BFF48A31D55A97E1E93892934B_C20E0DA2D0F89FE526E1490F4A2EE5AB", nBufferLength=0x105, lpBuffer=0x3bbba0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\EDC238BFF48A31D55A97E1E93892934B_C20E0DA2D0F89FE526E1490F4A2EE5AB", lpFilePart=0x0) returned 0xc0 [0194.948] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc040) returned 1 [0194.948] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\EDC238BFF48A31D55A97E1E93892934B_C20E0DA2D0F89FE526E1490F4A2EE5AB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\edc238bff48a31d55a97e1e93892934b_c20e0da2d0f89fe526e1490f4a2ee5ab"), fInfoLevelId=0x0, lpFileInformation=0x3bc120 | out: lpFileInformation=0x3bc120*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbca3121, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xbca3121, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xbca3121, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x1d7)) returned 1 [0194.948] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc000) returned 1 [0194.948] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\EDC238BFF48A31D55A97E1E93892934B_C20E0DA2D0F89FE526E1490F4A2EE5AB", nBufferLength=0x105, lpBuffer=0x3bbbc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\EDC238BFF48A31D55A97E1E93892934B_C20E0DA2D0F89FE526E1490F4A2EE5AB", lpFilePart=0x0) returned 0xc0 [0194.948] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc040) returned 1 [0194.948] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\EDC238BFF48A31D55A97E1E93892934B_C20E0DA2D0F89FE526E1490F4A2EE5AB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\edc238bff48a31d55a97e1e93892934b_c20e0da2d0f89fe526e1490f4a2ee5ab"), fInfoLevelId=0x0, lpFileInformation=0x2269080 | out: lpFileInformation=0x2269080*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbca3121, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xbca3121, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xbca3121, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x1d7)) returned 1 [0194.949] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc000) returned 1 [0194.949] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\EDC238BFF48A31D55A97E1E93892934B_C20E0DA2D0F89FE526E1490F4A2EE5AB", nBufferLength=0x105, lpBuffer=0x3bba20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\EDC238BFF48A31D55A97E1E93892934B_C20E0DA2D0F89FE526E1490F4A2EE5AB", lpFilePart=0x0) returned 0xc0 [0194.949] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf00) returned 1 [0194.949] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\EDC238BFF48A31D55A97E1E93892934B_C20E0DA2D0F89FE526E1490F4A2EE5AB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\edc238bff48a31d55a97e1e93892934b_c20e0da2d0f89fe526e1490f4a2ee5ab"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0194.949] GetFileType (hFile=0x444) returned 0x1 [0194.949] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbe70) returned 1 [0194.949] GetFileType (hFile=0x444) returned 0x1 [0194.949] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc098 | out: lpFileSizeHigh=0x3bc098*=0x0) returned 0x1d7 [0194.949] ReadFile (in: hFile=0x444, lpBuffer=0x22697c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bbfc8, lpOverlapped=0x0 | out: lpBuffer=0x22697c0*, lpNumberOfBytesRead=0x3bbfc8*=0x1d7, lpOverlapped=0x0) returned 1 [0194.949] CloseHandle (hObject=0x444) returned 1 [0194.985] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\EDC238BFF48A31D55A97E1E93892934B_C20E0DA2D0F89FE526E1490F4A2EE5AB", nBufferLength=0x105, lpBuffer=0x3bba20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\EDC238BFF48A31D55A97E1E93892934B_C20E0DA2D0F89FE526E1490F4A2EE5AB", lpFilePart=0x0) returned 0xc0 [0194.985] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf00) returned 1 [0194.985] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\EDC238BFF48A31D55A97E1E93892934B_C20E0DA2D0F89FE526E1490F4A2EE5AB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\edc238bff48a31d55a97e1e93892934b_c20e0da2d0f89fe526e1490f4a2ee5ab"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0194.987] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8990) returned 1 [0194.988] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\EDC238BFF48A31D55A97E1E93892934B_C31B2498754E340573F1336DE607D619", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\EDC238BFF48A31D55A97E1E93892934B_C31B2498754E340573F1336DE607D619", lpFilePart=0x0) returned 0xc0 [0194.988] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0194.988] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\EDC238BFF48A31D55A97E1E93892934B_C31B2498754E340573F1336DE607D619" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\edc238bff48a31d55a97e1e93892934b_c31b2498754e340573f1336de607d619"), fInfoLevelId=0x0, lpFileInformation=0x22e1ae8 | out: lpFileInformation=0x22e1ae8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x9c4747d, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x9c4747d, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x9c4747d, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x1d7)) returned 1 [0194.988] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0194.988] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\EDC238BFF48A31D55A97E1E93892934B_C31B2498754E340573F1336DE607D619", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\EDC238BFF48A31D55A97E1E93892934B_C31B2498754E340573F1336DE607D619", lpFilePart=0x0) returned 0xc0 [0194.988] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0194.989] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\EDC238BFF48A31D55A97E1E93892934B_C31B2498754E340573F1336DE607D619" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\edc238bff48a31d55a97e1e93892934b_c31b2498754e340573f1336de607d619"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0194.989] GetFileType (hFile=0x444) returned 0x1 [0194.989] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be400) returned 1 [0194.989] GetFileType (hFile=0x444) returned 0x1 [0194.989] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be628 | out: lpFileSizeHigh=0x3be628*=0x0) returned 0x1d7 [0194.989] ReadFile (in: hFile=0x444, lpBuffer=0x22e2228, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be558, lpOverlapped=0x0 | out: lpBuffer=0x22e2228*, lpNumberOfBytesRead=0x3be558*=0x1d7, lpOverlapped=0x0) returned 1 [0194.992] CloseHandle (hObject=0x444) returned 1 [0195.032] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\EDC238BFF48A31D55A97E1E93892934B_C31B2498754E340573F1336DE607D619", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\EDC238BFF48A31D55A97E1E93892934B_C31B2498754E340573F1336DE607D619", lpFilePart=0x0) returned 0xc0 [0195.032] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0195.032] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\EDC238BFF48A31D55A97E1E93892934B_C31B2498754E340573F1336DE607D619" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\edc238bff48a31d55a97e1e93892934b_c31b2498754e340573f1336de607d619"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0195.034] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3baf20) returned 1 [0195.034] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\EDC238BFF48A31D55A97E1E93892934B_C31B2498754E340573F1336DE607D619", nBufferLength=0x105, lpBuffer=0x3bbba0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\EDC238BFF48A31D55A97E1E93892934B_C31B2498754E340573F1336DE607D619", lpFilePart=0x0) returned 0xc0 [0195.034] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc040) returned 1 [0195.034] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\EDC238BFF48A31D55A97E1E93892934B_C31B2498754E340573F1336DE607D619" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\edc238bff48a31d55a97e1e93892934b_c31b2498754e340573f1336de607d619"), fInfoLevelId=0x0, lpFileInformation=0x3bc120 | out: lpFileInformation=0x3bc120*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x9c4747d, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x9c4747d, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x9c4747d, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x1d7)) returned 1 [0195.034] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc000) returned 1 [0195.035] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\EDC238BFF48A31D55A97E1E93892934B_C31B2498754E340573F1336DE607D619", nBufferLength=0x105, lpBuffer=0x3bbbc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\EDC238BFF48A31D55A97E1E93892934B_C31B2498754E340573F1336DE607D619", lpFilePart=0x0) returned 0xc0 [0195.035] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc040) returned 1 [0195.035] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\EDC238BFF48A31D55A97E1E93892934B_C31B2498754E340573F1336DE607D619" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\edc238bff48a31d55a97e1e93892934b_c31b2498754e340573f1336de607d619"), fInfoLevelId=0x0, lpFileInformation=0x235a6f0 | out: lpFileInformation=0x235a6f0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x9c4747d, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x9c4747d, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x9c4747d, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x1d7)) returned 1 [0195.035] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc000) returned 1 [0195.035] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\EDC238BFF48A31D55A97E1E93892934B_C31B2498754E340573F1336DE607D619", nBufferLength=0x105, lpBuffer=0x3bba20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\EDC238BFF48A31D55A97E1E93892934B_C31B2498754E340573F1336DE607D619", lpFilePart=0x0) returned 0xc0 [0195.035] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf00) returned 1 [0195.035] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\EDC238BFF48A31D55A97E1E93892934B_C31B2498754E340573F1336DE607D619" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\edc238bff48a31d55a97e1e93892934b_c31b2498754e340573f1336de607d619"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0195.035] GetFileType (hFile=0x444) returned 0x1 [0195.035] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbe70) returned 1 [0195.035] GetFileType (hFile=0x444) returned 0x1 [0195.035] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc098 | out: lpFileSizeHigh=0x3bc098*=0x0) returned 0x1d7 [0195.035] ReadFile (in: hFile=0x444, lpBuffer=0x235ae30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bbfc8, lpOverlapped=0x0 | out: lpBuffer=0x235ae30*, lpNumberOfBytesRead=0x3bbfc8*=0x1d7, lpOverlapped=0x0) returned 1 [0195.035] CloseHandle (hObject=0x444) returned 1 [0195.076] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\EDC238BFF48A31D55A97E1E93892934B_C31B2498754E340573F1336DE607D619", nBufferLength=0x105, lpBuffer=0x3bba20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\EDC238BFF48A31D55A97E1E93892934B_C31B2498754E340573F1336DE607D619", lpFilePart=0x0) returned 0xc0 [0195.077] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf00) returned 1 [0195.077] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\EDC238BFF48A31D55A97E1E93892934B_C31B2498754E340573F1336DE607D619" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\edc238bff48a31d55a97e1e93892934b_c31b2498754e340573f1336de607d619"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0195.078] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8990) returned 1 [0195.079] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749", lpFilePart=0x0) returned 0x9f [0195.079] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0195.079] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\fb0d848f74f70bb2eaa93746d24d9749"), fInfoLevelId=0x0, lpFileInformation=0x21d4388 | out: lpFileInformation=0x21d4388*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xac17a3, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xac17a3, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xac17a3, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0195.079] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0195.079] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749", lpFilePart=0x0) returned 0x9f [0195.079] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0195.079] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\fb0d848f74f70bb2eaa93746d24d9749"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0195.080] GetFileType (hFile=0x444) returned 0x1 [0195.080] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be400) returned 1 [0195.080] GetFileType (hFile=0x444) returned 0x1 [0195.080] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be628 | out: lpFileSizeHigh=0x3be628*=0x0) returned 0x0 [0195.080] CloseHandle (hObject=0x444) returned 1 [0195.120] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749", lpFilePart=0x0) returned 0x9f [0195.120] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0195.120] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\fb0d848f74f70bb2eaa93746d24d9749"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0195.122] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3baf20) returned 1 [0195.122] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749", nBufferLength=0x105, lpBuffer=0x3bbba0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749", lpFilePart=0x0) returned 0x9f [0195.122] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc040) returned 1 [0195.122] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\fb0d848f74f70bb2eaa93746d24d9749"), fInfoLevelId=0x0, lpFileInformation=0x3bc120 | out: lpFileInformation=0x3bc120*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xac17a3, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xac17a3, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xac17a3, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0195.122] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc000) returned 1 [0195.122] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749", nBufferLength=0x105, lpBuffer=0x3bbbc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749", lpFilePart=0x0) returned 0x9f [0195.122] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc040) returned 1 [0195.123] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\fb0d848f74f70bb2eaa93746d24d9749"), fInfoLevelId=0x0, lpFileInformation=0x224b338 | out: lpFileInformation=0x224b338*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xac17a3, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xac17a3, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xac17a3, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0195.123] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc000) returned 1 [0195.123] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749", nBufferLength=0x105, lpBuffer=0x3bba20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749", lpFilePart=0x0) returned 0x9f [0195.123] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf00) returned 1 [0195.123] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\fb0d848f74f70bb2eaa93746d24d9749"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0195.123] GetFileType (hFile=0x444) returned 0x1 [0195.123] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbe70) returned 1 [0195.123] GetFileType (hFile=0x444) returned 0x1 [0195.123] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc098 | out: lpFileSizeHigh=0x3bc098*=0x0) returned 0x0 [0195.123] CloseHandle (hObject=0x444) returned 1 [0195.163] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749", nBufferLength=0x105, lpBuffer=0x3bba20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749", lpFilePart=0x0) returned 0x9f [0195.163] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf00) returned 1 [0195.163] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\fb0d848f74f70bb2eaa93746d24d9749"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0195.165] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8990) returned 1 [0195.165] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0195.166] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData", nBufferLength=0x105, lpBuffer=0x3be130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData", lpFilePart=0x0) returned 0x7f [0195.166] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\", nBufferLength=0x105, lpBuffer=0x3be0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\", lpFilePart=0x0) returned 0x80 [0195.166] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\*", lpFindFileData=0x3be2e0 | out: lpFindFileData=0x3be2e0) returned 0x5d79d0 [0195.170] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0195.172] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0195.172] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0195.172] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0195.172] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0195.172] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0195.172] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0195.172] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0195.173] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0195.173] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0195.173] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0195.173] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0195.173] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0195.173] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0195.173] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0195.173] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0195.173] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0195.174] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0195.174] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0195.174] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0195.174] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0195.174] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 0 [0195.174] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0195.175] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0195.175] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0195.175] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0195.175] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData", nBufferLength=0x105, lpBuffer=0x3be130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData", lpFilePart=0x0) returned 0x7f [0195.175] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\", nBufferLength=0x105, lpBuffer=0x3be0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\", lpFilePart=0x0) returned 0x80 [0195.175] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\*", lpFindFileData=0x3be2e0 | out: lpFindFileData=0x3be2e0) returned 0x5d78b0 [0195.176] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0195.176] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0195.176] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0195.176] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0195.176] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0195.176] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0195.177] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0195.177] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0195.177] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0195.177] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0195.177] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0195.177] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0195.177] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0195.178] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0195.178] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0195.178] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0195.178] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0195.178] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0195.178] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0195.178] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0195.179] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0195.179] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 0 [0195.179] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0195.179] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0195.179] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0195.179] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", lpFilePart=0x0) returned 0xc1 [0195.179] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0195.180] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\40e450f7ce13419a2ccc2a5445035a0a_06f02b1f13ab4b11b8fc669bde565af1"), fInfoLevelId=0x0, lpFileInformation=0x22cf570 | out: lpFileInformation=0x22cf570*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x9b6825, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x9b6825, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x24ed64e9, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x190)) returned 1 [0195.180] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0195.180] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", lpFilePart=0x0) returned 0xc1 [0195.180] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0195.180] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\40e450f7ce13419a2ccc2a5445035a0a_06f02b1f13ab4b11b8fc669bde565af1"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0195.181] GetFileType (hFile=0x444) returned 0x1 [0195.181] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be400) returned 1 [0195.181] GetFileType (hFile=0x444) returned 0x1 [0195.181] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be628 | out: lpFileSizeHigh=0x3be628*=0x0) returned 0x190 [0195.181] ReadFile (in: hFile=0x444, lpBuffer=0x22cfc68, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be558, lpOverlapped=0x0 | out: lpBuffer=0x22cfc68*, lpNumberOfBytesRead=0x3be558*=0x190, lpOverlapped=0x0) returned 1 [0195.181] CloseHandle (hObject=0x444) returned 1 [0195.220] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", lpFilePart=0x0) returned 0xc1 [0195.220] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0195.221] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\40e450f7ce13419a2ccc2a5445035a0a_06f02b1f13ab4b11b8fc669bde565af1"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0195.222] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3baf20) returned 1 [0195.222] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", nBufferLength=0x105, lpBuffer=0x3bbba0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", lpFilePart=0x0) returned 0xc1 [0195.222] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc040) returned 1 [0195.223] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\40e450f7ce13419a2ccc2a5445035a0a_06f02b1f13ab4b11b8fc669bde565af1"), fInfoLevelId=0x0, lpFileInformation=0x3bc120 | out: lpFileInformation=0x3bc120*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x9b6825, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x9b6825, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x24ed64e9, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x190)) returned 1 [0195.223] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc000) returned 1 [0195.223] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", nBufferLength=0x105, lpBuffer=0x3bbbc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", lpFilePart=0x0) returned 0xc1 [0195.223] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc040) returned 1 [0195.223] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\40e450f7ce13419a2ccc2a5445035a0a_06f02b1f13ab4b11b8fc669bde565af1"), fInfoLevelId=0x0, lpFileInformation=0x2347ff0 | out: lpFileInformation=0x2347ff0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x9b6825, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x9b6825, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x24ed64e9, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x190)) returned 1 [0195.223] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc000) returned 1 [0195.223] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", nBufferLength=0x105, lpBuffer=0x3bba20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", lpFilePart=0x0) returned 0xc1 [0195.223] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf00) returned 1 [0195.223] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\40e450f7ce13419a2ccc2a5445035a0a_06f02b1f13ab4b11b8fc669bde565af1"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0195.223] GetFileType (hFile=0x444) returned 0x1 [0195.223] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbe70) returned 1 [0195.223] GetFileType (hFile=0x444) returned 0x1 [0195.223] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc098 | out: lpFileSizeHigh=0x3bc098*=0x0) returned 0x190 [0195.223] ReadFile (in: hFile=0x444, lpBuffer=0x23486e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bbfc8, lpOverlapped=0x0 | out: lpBuffer=0x23486e8*, lpNumberOfBytesRead=0x3bbfc8*=0x190, lpOverlapped=0x0) returned 1 [0195.223] CloseHandle (hObject=0x444) returned 1 [0195.264] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", nBufferLength=0x105, lpBuffer=0x3bba20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", lpFilePart=0x0) returned 0xc1 [0195.264] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf00) returned 1 [0195.265] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\40e450f7ce13419a2ccc2a5445035a0a_06f02b1f13ab4b11b8fc669bde565af1"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0195.266] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8990) returned 1 [0195.267] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", lpFilePart=0x0) returned 0xa0 [0195.267] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0195.267] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\57c8edb95df3f0ad4ee2dc2b8cfd4157"), fInfoLevelId=0x0, lpFileInformation=0x21c3b28 | out: lpFileInformation=0x21c3b28*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xac17a3, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xac17a3, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xac17a3, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x12e)) returned 1 [0195.267] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0195.267] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", lpFilePart=0x0) returned 0xa0 [0195.267] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0195.267] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\57c8edb95df3f0ad4ee2dc2b8cfd4157"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0195.268] GetFileType (hFile=0x444) returned 0x1 [0195.268] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be400) returned 1 [0195.268] GetFileType (hFile=0x444) returned 0x1 [0195.268] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be628 | out: lpFileSizeHigh=0x3be628*=0x0) returned 0x12e [0195.268] ReadFile (in: hFile=0x444, lpBuffer=0x21c40c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be558, lpOverlapped=0x0 | out: lpBuffer=0x21c40c0*, lpNumberOfBytesRead=0x3be558*=0x12e, lpOverlapped=0x0) returned 1 [0195.269] CloseHandle (hObject=0x444) returned 1 [0195.309] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", lpFilePart=0x0) returned 0xa0 [0195.309] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0195.309] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\57c8edb95df3f0ad4ee2dc2b8cfd4157"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0195.311] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3baf20) returned 1 [0195.311] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", nBufferLength=0x105, lpBuffer=0x3bbba0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", lpFilePart=0x0) returned 0xa0 [0195.311] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc040) returned 1 [0195.311] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\57c8edb95df3f0ad4ee2dc2b8cfd4157"), fInfoLevelId=0x0, lpFileInformation=0x3bc120 | out: lpFileInformation=0x3bc120*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xac17a3, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xac17a3, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xac17a3, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x12e)) returned 1 [0195.311] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc000) returned 1 [0195.311] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", nBufferLength=0x105, lpBuffer=0x3bbbc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", lpFilePart=0x0) returned 0xa0 [0195.311] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc040) returned 1 [0195.311] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\57c8edb95df3f0ad4ee2dc2b8cfd4157"), fInfoLevelId=0x0, lpFileInformation=0x223c110 | out: lpFileInformation=0x223c110*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xac17a3, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xac17a3, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xac17a3, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x12e)) returned 1 [0195.311] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc000) returned 1 [0195.312] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", nBufferLength=0x105, lpBuffer=0x3bba20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", lpFilePart=0x0) returned 0xa0 [0195.312] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf00) returned 1 [0195.312] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\57c8edb95df3f0ad4ee2dc2b8cfd4157"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0195.312] GetFileType (hFile=0x444) returned 0x1 [0195.312] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbe70) returned 1 [0195.312] GetFileType (hFile=0x444) returned 0x1 [0195.312] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc098 | out: lpFileSizeHigh=0x3bc098*=0x0) returned 0x12e [0195.312] ReadFile (in: hFile=0x444, lpBuffer=0x223c6a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bbfc8, lpOverlapped=0x0 | out: lpBuffer=0x223c6a8*, lpNumberOfBytesRead=0x3bbfc8*=0x12e, lpOverlapped=0x0) returned 1 [0195.312] CloseHandle (hObject=0x444) returned 1 [0195.350] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", nBufferLength=0x105, lpBuffer=0x3bba20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", lpFilePart=0x0) returned 0xa0 [0195.350] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf00) returned 1 [0195.350] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\57c8edb95df3f0ad4ee2dc2b8cfd4157"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0195.352] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8990) returned 1 [0195.353] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\7423F88C7F265F0DEFC08EA88C3BDE45_D975BBA8033175C8D112023D8A7A8AD6", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\7423F88C7F265F0DEFC08EA88C3BDE45_D975BBA8033175C8D112023D8A7A8AD6", lpFilePart=0x0) returned 0xc1 [0195.353] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0195.353] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\7423F88C7F265F0DEFC08EA88C3BDE45_D975BBA8033175C8D112023D8A7A8AD6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\7423f88c7f265f0defc08ea88c3bde45_d975bba8033175c8d112023d8a7a8ad6"), fInfoLevelId=0x0, lpFileInformation=0x22b4598 | out: lpFileInformation=0x22b4598*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xc94daff, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc94daff, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x24ed64e9, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x1b2)) returned 1 [0195.353] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0195.353] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\7423F88C7F265F0DEFC08EA88C3BDE45_D975BBA8033175C8D112023D8A7A8AD6", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\7423F88C7F265F0DEFC08EA88C3BDE45_D975BBA8033175C8D112023D8A7A8AD6", lpFilePart=0x0) returned 0xc1 [0195.353] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0195.353] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\7423F88C7F265F0DEFC08EA88C3BDE45_D975BBA8033175C8D112023D8A7A8AD6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\7423f88c7f265f0defc08ea88c3bde45_d975bba8033175c8d112023d8a7a8ad6"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0195.353] GetFileType (hFile=0x444) returned 0x1 [0195.353] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be400) returned 1 [0195.353] GetFileType (hFile=0x444) returned 0x1 [0195.353] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be628 | out: lpFileSizeHigh=0x3be628*=0x0) returned 0x1b2 [0195.353] ReadFile (in: hFile=0x444, lpBuffer=0x22b4cb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be558, lpOverlapped=0x0 | out: lpBuffer=0x22b4cb8*, lpNumberOfBytesRead=0x3be558*=0x1b2, lpOverlapped=0x0) returned 1 [0195.354] CloseHandle (hObject=0x444) returned 1 [0195.396] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\7423F88C7F265F0DEFC08EA88C3BDE45_D975BBA8033175C8D112023D8A7A8AD6", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\7423F88C7F265F0DEFC08EA88C3BDE45_D975BBA8033175C8D112023D8A7A8AD6", lpFilePart=0x0) returned 0xc1 [0195.397] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0195.397] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\7423F88C7F265F0DEFC08EA88C3BDE45_D975BBA8033175C8D112023D8A7A8AD6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\7423f88c7f265f0defc08ea88c3bde45_d975bba8033175c8d112023d8a7a8ad6"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0195.398] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3baf20) returned 1 [0195.398] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\7423F88C7F265F0DEFC08EA88C3BDE45_D975BBA8033175C8D112023D8A7A8AD6", nBufferLength=0x105, lpBuffer=0x3bbba0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\7423F88C7F265F0DEFC08EA88C3BDE45_D975BBA8033175C8D112023D8A7A8AD6", lpFilePart=0x0) returned 0xc1 [0195.398] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc040) returned 1 [0195.398] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\7423F88C7F265F0DEFC08EA88C3BDE45_D975BBA8033175C8D112023D8A7A8AD6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\7423f88c7f265f0defc08ea88c3bde45_d975bba8033175c8d112023d8a7a8ad6"), fInfoLevelId=0x0, lpFileInformation=0x3bc120 | out: lpFileInformation=0x3bc120*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xc94daff, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc94daff, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x24ed64e9, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x1b2)) returned 1 [0195.399] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc000) returned 1 [0195.399] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\7423F88C7F265F0DEFC08EA88C3BDE45_D975BBA8033175C8D112023D8A7A8AD6", nBufferLength=0x105, lpBuffer=0x3bbbc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\7423F88C7F265F0DEFC08EA88C3BDE45_D975BBA8033175C8D112023D8A7A8AD6", lpFilePart=0x0) returned 0xc1 [0195.399] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc040) returned 1 [0195.399] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\7423F88C7F265F0DEFC08EA88C3BDE45_D975BBA8033175C8D112023D8A7A8AD6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\7423f88c7f265f0defc08ea88c3bde45_d975bba8033175c8d112023d8a7a8ad6"), fInfoLevelId=0x0, lpFileInformation=0x232d0e0 | out: lpFileInformation=0x232d0e0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xc94daff, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc94daff, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x24ed64e9, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x1b2)) returned 1 [0195.399] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc000) returned 1 [0195.399] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\7423F88C7F265F0DEFC08EA88C3BDE45_D975BBA8033175C8D112023D8A7A8AD6", nBufferLength=0x105, lpBuffer=0x3bba20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\7423F88C7F265F0DEFC08EA88C3BDE45_D975BBA8033175C8D112023D8A7A8AD6", lpFilePart=0x0) returned 0xc1 [0195.399] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf00) returned 1 [0195.399] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\7423F88C7F265F0DEFC08EA88C3BDE45_D975BBA8033175C8D112023D8A7A8AD6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\7423f88c7f265f0defc08ea88c3bde45_d975bba8033175c8d112023d8a7a8ad6"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0195.399] GetFileType (hFile=0x444) returned 0x1 [0195.399] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbe70) returned 1 [0195.399] GetFileType (hFile=0x444) returned 0x1 [0195.399] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc098 | out: lpFileSizeHigh=0x3bc098*=0x0) returned 0x1b2 [0195.399] ReadFile (in: hFile=0x444, lpBuffer=0x232d800, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bbfc8, lpOverlapped=0x0 | out: lpBuffer=0x232d800*, lpNumberOfBytesRead=0x3bbfc8*=0x1b2, lpOverlapped=0x0) returned 1 [0195.399] CloseHandle (hObject=0x444) returned 1 [0195.440] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\7423F88C7F265F0DEFC08EA88C3BDE45_D975BBA8033175C8D112023D8A7A8AD6", nBufferLength=0x105, lpBuffer=0x3bba20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\7423F88C7F265F0DEFC08EA88C3BDE45_D975BBA8033175C8D112023D8A7A8AD6", lpFilePart=0x0) returned 0xc1 [0195.440] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf00) returned 1 [0195.440] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\7423F88C7F265F0DEFC08EA88C3BDE45_D975BBA8033175C8D112023D8A7A8AD6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\7423f88c7f265f0defc08ea88c3bde45_d975bba8033175c8d112023d8a7a8ad6"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0195.441] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8990) returned 1 [0195.442] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506", lpFilePart=0x0) returned 0xa0 [0195.442] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0195.442] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\77ec63bda74bd0d0e0426dc8f8008506"), fInfoLevelId=0x0, lpFileInformation=0x21a6b38 | out: lpFileInformation=0x21a6b38*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xac17a3, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xac17a3, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xac17a3, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x122)) returned 1 [0195.442] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0195.442] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506", lpFilePart=0x0) returned 0xa0 [0195.442] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0195.443] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\77ec63bda74bd0d0e0426dc8f8008506"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0195.443] GetFileType (hFile=0x444) returned 0x1 [0195.443] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be400) returned 1 [0195.443] GetFileType (hFile=0x444) returned 0x1 [0195.443] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be628 | out: lpFileSizeHigh=0x3be628*=0x0) returned 0x122 [0195.443] ReadFile (in: hFile=0x444, lpBuffer=0x21a70c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be558, lpOverlapped=0x0 | out: lpBuffer=0x21a70c8*, lpNumberOfBytesRead=0x3be558*=0x122, lpOverlapped=0x0) returned 1 [0195.444] CloseHandle (hObject=0x444) returned 1 [0195.485] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506", lpFilePart=0x0) returned 0xa0 [0195.486] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0195.486] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\77ec63bda74bd0d0e0426dc8f8008506"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0195.487] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3baf20) returned 1 [0195.487] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506", nBufferLength=0x105, lpBuffer=0x3bbba0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506", lpFilePart=0x0) returned 0xa0 [0195.488] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc040) returned 1 [0195.488] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\77ec63bda74bd0d0e0426dc8f8008506"), fInfoLevelId=0x0, lpFileInformation=0x3bc120 | out: lpFileInformation=0x3bc120*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xac17a3, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xac17a3, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xac17a3, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x122)) returned 1 [0195.488] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc000) returned 1 [0195.488] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506", nBufferLength=0x105, lpBuffer=0x3bbbc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506", lpFilePart=0x0) returned 0xa0 [0195.488] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc040) returned 1 [0195.488] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\77ec63bda74bd0d0e0426dc8f8008506"), fInfoLevelId=0x0, lpFileInformation=0x221f120 | out: lpFileInformation=0x221f120*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xac17a3, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xac17a3, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xac17a3, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x122)) returned 1 [0195.488] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc000) returned 1 [0195.488] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506", nBufferLength=0x105, lpBuffer=0x3bba20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506", lpFilePart=0x0) returned 0xa0 [0195.488] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf00) returned 1 [0195.488] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\77ec63bda74bd0d0e0426dc8f8008506"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0195.488] GetFileType (hFile=0x444) returned 0x1 [0195.488] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbe70) returned 1 [0195.488] GetFileType (hFile=0x444) returned 0x1 [0195.488] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc098 | out: lpFileSizeHigh=0x3bc098*=0x0) returned 0x122 [0195.488] ReadFile (in: hFile=0x444, lpBuffer=0x221f6b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bbfc8, lpOverlapped=0x0 | out: lpBuffer=0x221f6b0*, lpNumberOfBytesRead=0x3bbfc8*=0x122, lpOverlapped=0x0) returned 1 [0195.488] CloseHandle (hObject=0x444) returned 1 [0195.524] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506", nBufferLength=0x105, lpBuffer=0x3bba20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506", lpFilePart=0x0) returned 0xa0 [0195.524] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf00) returned 1 [0195.524] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\77ec63bda74bd0d0e0426dc8f8008506"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0195.526] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8990) returned 1 [0195.528] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_15B894361B8229C12E6CD4370E03BA11", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_15B894361B8229C12E6CD4370E03BA11", lpFilePart=0x0) returned 0xc1 [0195.528] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0195.528] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_15B894361B8229C12E6CD4370E03BA11" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\8059e9a0d314877e40fe93d8ccfb3c69_15b894361b8229c12e6cd4370e03ba11"), fInfoLevelId=0x0, lpFileInformation=0x22975a8 | out: lpFileInformation=0x22975a8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x973638f, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x973638f, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x24ed64e9, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x182)) returned 1 [0195.528] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0195.528] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_15B894361B8229C12E6CD4370E03BA11", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_15B894361B8229C12E6CD4370E03BA11", lpFilePart=0x0) returned 0xc1 [0195.528] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0195.528] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_15B894361B8229C12E6CD4370E03BA11" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\8059e9a0d314877e40fe93d8ccfb3c69_15b894361b8229c12e6cd4370e03ba11"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0195.528] GetFileType (hFile=0x444) returned 0x1 [0195.528] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be400) returned 1 [0195.528] GetFileType (hFile=0x444) returned 0x1 [0195.528] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be628 | out: lpFileSizeHigh=0x3be628*=0x0) returned 0x182 [0195.528] ReadFile (in: hFile=0x444, lpBuffer=0x2297c98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be558, lpOverlapped=0x0 | out: lpBuffer=0x2297c98*, lpNumberOfBytesRead=0x3be558*=0x182, lpOverlapped=0x0) returned 1 [0195.529] CloseHandle (hObject=0x444) returned 1 [0195.614] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_15B894361B8229C12E6CD4370E03BA11", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_15B894361B8229C12E6CD4370E03BA11", lpFilePart=0x0) returned 0xc1 [0195.615] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0195.615] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_15B894361B8229C12E6CD4370E03BA11" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\8059e9a0d314877e40fe93d8ccfb3c69_15b894361b8229c12e6cd4370e03ba11"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0195.616] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3baf20) returned 1 [0195.616] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_15B894361B8229C12E6CD4370E03BA11", nBufferLength=0x105, lpBuffer=0x3bbba0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_15B894361B8229C12E6CD4370E03BA11", lpFilePart=0x0) returned 0xc1 [0195.617] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc040) returned 1 [0195.617] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_15B894361B8229C12E6CD4370E03BA11" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\8059e9a0d314877e40fe93d8ccfb3c69_15b894361b8229c12e6cd4370e03ba11"), fInfoLevelId=0x0, lpFileInformation=0x3bc120 | out: lpFileInformation=0x3bc120*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x973638f, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x973638f, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x24ed64e9, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x182)) returned 1 [0195.617] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc000) returned 1 [0195.617] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_15B894361B8229C12E6CD4370E03BA11", nBufferLength=0x105, lpBuffer=0x3bbbc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_15B894361B8229C12E6CD4370E03BA11", lpFilePart=0x0) returned 0xc1 [0195.617] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc040) returned 1 [0195.617] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_15B894361B8229C12E6CD4370E03BA11" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\8059e9a0d314877e40fe93d8ccfb3c69_15b894361b8229c12e6cd4370e03ba11"), fInfoLevelId=0x0, lpFileInformation=0x230ffd0 | out: lpFileInformation=0x230ffd0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x973638f, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x973638f, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x24ed64e9, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x182)) returned 1 [0195.617] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc000) returned 1 [0195.617] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_15B894361B8229C12E6CD4370E03BA11", nBufferLength=0x105, lpBuffer=0x3bba20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_15B894361B8229C12E6CD4370E03BA11", lpFilePart=0x0) returned 0xc1 [0195.617] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf00) returned 1 [0195.617] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_15B894361B8229C12E6CD4370E03BA11" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\8059e9a0d314877e40fe93d8ccfb3c69_15b894361b8229c12e6cd4370e03ba11"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0195.617] GetFileType (hFile=0x444) returned 0x1 [0195.617] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbe70) returned 1 [0195.617] GetFileType (hFile=0x444) returned 0x1 [0195.617] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc098 | out: lpFileSizeHigh=0x3bc098*=0x0) returned 0x182 [0195.617] ReadFile (in: hFile=0x444, lpBuffer=0x23106c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bbfc8, lpOverlapped=0x0 | out: lpBuffer=0x23106c0*, lpNumberOfBytesRead=0x3bbfc8*=0x182, lpOverlapped=0x0) returned 1 [0195.617] CloseHandle (hObject=0x444) returned 1 [0195.664] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_15B894361B8229C12E6CD4370E03BA11", nBufferLength=0x105, lpBuffer=0x3bba20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_15B894361B8229C12E6CD4370E03BA11", lpFilePart=0x0) returned 0xc1 [0195.664] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf00) returned 1 [0195.664] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_15B894361B8229C12E6CD4370E03BA11" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\8059e9a0d314877e40fe93d8ccfb3c69_15b894361b8229c12e6cd4370e03ba11"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0195.666] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8990) returned 1 [0195.666] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_71FE2912451B2B453DAF1EB6A0D6DE9D", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_71FE2912451B2B453DAF1EB6A0D6DE9D", lpFilePart=0x0) returned 0xc1 [0195.666] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0195.667] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_71FE2912451B2B453DAF1EB6A0D6DE9D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\8059e9a0d314877e40fe93d8ccfb3c69_71fe2912451b2b453daf1eb6a0d6de9d"), fInfoLevelId=0x0, lpFileInformation=0x2189940 | out: lpFileInformation=0x2189940*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xa42cfdd, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xa42cfdd, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x24ed64e9, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x182)) returned 1 [0195.667] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0195.667] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_71FE2912451B2B453DAF1EB6A0D6DE9D", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_71FE2912451B2B453DAF1EB6A0D6DE9D", lpFilePart=0x0) returned 0xc1 [0195.667] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0195.667] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_71FE2912451B2B453DAF1EB6A0D6DE9D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\8059e9a0d314877e40fe93d8ccfb3c69_71fe2912451b2b453daf1eb6a0d6de9d"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0195.667] GetFileType (hFile=0x444) returned 0x1 [0195.667] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be400) returned 1 [0195.667] GetFileType (hFile=0x444) returned 0x1 [0195.667] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be628 | out: lpFileSizeHigh=0x3be628*=0x0) returned 0x182 [0195.667] ReadFile (in: hFile=0x444, lpBuffer=0x218a030, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be558, lpOverlapped=0x0 | out: lpBuffer=0x218a030*, lpNumberOfBytesRead=0x3be558*=0x182, lpOverlapped=0x0) returned 1 [0195.668] CloseHandle (hObject=0x444) returned 1 [0195.708] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_71FE2912451B2B453DAF1EB6A0D6DE9D", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_71FE2912451B2B453DAF1EB6A0D6DE9D", lpFilePart=0x0) returned 0xc1 [0195.708] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0195.708] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_71FE2912451B2B453DAF1EB6A0D6DE9D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\8059e9a0d314877e40fe93d8ccfb3c69_71fe2912451b2b453daf1eb6a0d6de9d"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0195.709] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3baf20) returned 1 [0195.710] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_71FE2912451B2B453DAF1EB6A0D6DE9D", nBufferLength=0x105, lpBuffer=0x3bbba0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_71FE2912451B2B453DAF1EB6A0D6DE9D", lpFilePart=0x0) returned 0xc1 [0195.710] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc040) returned 1 [0195.710] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_71FE2912451B2B453DAF1EB6A0D6DE9D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\8059e9a0d314877e40fe93d8ccfb3c69_71fe2912451b2b453daf1eb6a0d6de9d"), fInfoLevelId=0x0, lpFileInformation=0x3bc120 | out: lpFileInformation=0x3bc120*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xa42cfdd, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xa42cfdd, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x24ed64e9, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x182)) returned 1 [0195.710] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc000) returned 1 [0195.710] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_71FE2912451B2B453DAF1EB6A0D6DE9D", nBufferLength=0x105, lpBuffer=0x3bbbc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_71FE2912451B2B453DAF1EB6A0D6DE9D", lpFilePart=0x0) returned 0xc1 [0195.710] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc040) returned 1 [0195.710] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_71FE2912451B2B453DAF1EB6A0D6DE9D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\8059e9a0d314877e40fe93d8ccfb3c69_71fe2912451b2b453daf1eb6a0d6de9d"), fInfoLevelId=0x0, lpFileInformation=0x2202368 | out: lpFileInformation=0x2202368*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xa42cfdd, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xa42cfdd, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x24ed64e9, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x182)) returned 1 [0195.710] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc000) returned 1 [0195.710] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_71FE2912451B2B453DAF1EB6A0D6DE9D", nBufferLength=0x105, lpBuffer=0x3bba20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_71FE2912451B2B453DAF1EB6A0D6DE9D", lpFilePart=0x0) returned 0xc1 [0195.710] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf00) returned 1 [0195.710] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_71FE2912451B2B453DAF1EB6A0D6DE9D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\8059e9a0d314877e40fe93d8ccfb3c69_71fe2912451b2b453daf1eb6a0d6de9d"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0195.711] GetFileType (hFile=0x444) returned 0x1 [0195.711] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbe70) returned 1 [0195.711] GetFileType (hFile=0x444) returned 0x1 [0195.711] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc098 | out: lpFileSizeHigh=0x3bc098*=0x0) returned 0x182 [0195.711] ReadFile (in: hFile=0x444, lpBuffer=0x2202a58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bbfc8, lpOverlapped=0x0 | out: lpBuffer=0x2202a58*, lpNumberOfBytesRead=0x3bbfc8*=0x182, lpOverlapped=0x0) returned 1 [0195.711] CloseHandle (hObject=0x444) returned 1 [0195.749] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_71FE2912451B2B453DAF1EB6A0D6DE9D", nBufferLength=0x105, lpBuffer=0x3bba20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_71FE2912451B2B453DAF1EB6A0D6DE9D", lpFilePart=0x0) returned 0xc1 [0195.749] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf00) returned 1 [0195.749] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_71FE2912451B2B453DAF1EB6A0D6DE9D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\8059e9a0d314877e40fe93d8ccfb3c69_71fe2912451b2b453daf1eb6a0d6de9d"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0195.751] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8990) returned 1 [0195.751] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_AEB6328053EC598E3A1DBA7D9B00C40B", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_AEB6328053EC598E3A1DBA7D9B00C40B", lpFilePart=0x0) returned 0xc1 [0195.751] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0195.751] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_AEB6328053EC598E3A1DBA7D9B00C40B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\8059e9a0d314877e40fe93d8ccfb3c69_aeb6328053ec598e3a1dba7d9b00c40b"), fInfoLevelId=0x0, lpFileInformation=0x227abf0 | out: lpFileInformation=0x227abf0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x99261c6, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x99261c6, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x24ed64e9, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x182)) returned 1 [0195.752] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0195.752] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_AEB6328053EC598E3A1DBA7D9B00C40B", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_AEB6328053EC598E3A1DBA7D9B00C40B", lpFilePart=0x0) returned 0xc1 [0195.752] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0195.752] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_AEB6328053EC598E3A1DBA7D9B00C40B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\8059e9a0d314877e40fe93d8ccfb3c69_aeb6328053ec598e3a1dba7d9b00c40b"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0195.752] GetFileType (hFile=0x444) returned 0x1 [0195.752] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be400) returned 1 [0195.752] GetFileType (hFile=0x444) returned 0x1 [0195.752] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be628 | out: lpFileSizeHigh=0x3be628*=0x0) returned 0x182 [0195.752] ReadFile (in: hFile=0x444, lpBuffer=0x227b2e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be558, lpOverlapped=0x0 | out: lpBuffer=0x227b2e0*, lpNumberOfBytesRead=0x3be558*=0x182, lpOverlapped=0x0) returned 1 [0195.753] CloseHandle (hObject=0x444) returned 1 [0195.788] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_AEB6328053EC598E3A1DBA7D9B00C40B", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_AEB6328053EC598E3A1DBA7D9B00C40B", lpFilePart=0x0) returned 0xc1 [0195.788] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0195.788] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_AEB6328053EC598E3A1DBA7D9B00C40B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\8059e9a0d314877e40fe93d8ccfb3c69_aeb6328053ec598e3a1dba7d9b00c40b"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0195.790] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3baf20) returned 1 [0195.790] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_AEB6328053EC598E3A1DBA7D9B00C40B", nBufferLength=0x105, lpBuffer=0x3bbba0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_AEB6328053EC598E3A1DBA7D9B00C40B", lpFilePart=0x0) returned 0xc1 [0195.790] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc040) returned 1 [0195.790] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_AEB6328053EC598E3A1DBA7D9B00C40B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\8059e9a0d314877e40fe93d8ccfb3c69_aeb6328053ec598e3a1dba7d9b00c40b"), fInfoLevelId=0x0, lpFileInformation=0x3bc120 | out: lpFileInformation=0x3bc120*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x99261c6, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x99261c6, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x24ed64e9, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x182)) returned 1 [0195.790] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc000) returned 1 [0195.790] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_AEB6328053EC598E3A1DBA7D9B00C40B", nBufferLength=0x105, lpBuffer=0x3bbbc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_AEB6328053EC598E3A1DBA7D9B00C40B", lpFilePart=0x0) returned 0xc1 [0195.790] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc040) returned 1 [0195.790] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_AEB6328053EC598E3A1DBA7D9B00C40B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\8059e9a0d314877e40fe93d8ccfb3c69_aeb6328053ec598e3a1dba7d9b00c40b"), fInfoLevelId=0x0, lpFileInformation=0x22f3618 | out: lpFileInformation=0x22f3618*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x99261c6, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x99261c6, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x24ed64e9, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x182)) returned 1 [0195.790] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc000) returned 1 [0195.791] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_AEB6328053EC598E3A1DBA7D9B00C40B", nBufferLength=0x105, lpBuffer=0x3bba20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_AEB6328053EC598E3A1DBA7D9B00C40B", lpFilePart=0x0) returned 0xc1 [0195.791] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf00) returned 1 [0195.791] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_AEB6328053EC598E3A1DBA7D9B00C40B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\8059e9a0d314877e40fe93d8ccfb3c69_aeb6328053ec598e3a1dba7d9b00c40b"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0195.791] GetFileType (hFile=0x444) returned 0x1 [0195.791] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbe70) returned 1 [0195.791] GetFileType (hFile=0x444) returned 0x1 [0195.791] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc098 | out: lpFileSizeHigh=0x3bc098*=0x0) returned 0x182 [0195.791] ReadFile (in: hFile=0x444, lpBuffer=0x22f3d08, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bbfc8, lpOverlapped=0x0 | out: lpBuffer=0x22f3d08*, lpNumberOfBytesRead=0x3bbfc8*=0x182, lpOverlapped=0x0) returned 1 [0195.791] CloseHandle (hObject=0x444) returned 1 [0195.838] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_AEB6328053EC598E3A1DBA7D9B00C40B", nBufferLength=0x105, lpBuffer=0x3bba20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_AEB6328053EC598E3A1DBA7D9B00C40B", lpFilePart=0x0) returned 0xc1 [0195.838] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf00) returned 1 [0195.838] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_AEB6328053EC598E3A1DBA7D9B00C40B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\8059e9a0d314877e40fe93d8ccfb3c69_aeb6328053ec598e3a1dba7d9b00c40b"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0195.842] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8990) returned 1 [0195.842] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\828298824EA5549947C17DDABF6871F5_6B5C8B321CA02275A82E95FA81D6DE62", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\828298824EA5549947C17DDABF6871F5_6B5C8B321CA02275A82E95FA81D6DE62", lpFilePart=0x0) returned 0xc1 [0195.842] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0195.842] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\828298824EA5549947C17DDABF6871F5_6B5C8B321CA02275A82E95FA81D6DE62" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\828298824ea5549947c17ddabf6871f5_6b5c8b321ca02275a82e95fa81d6de62"), fInfoLevelId=0x0, lpFileInformation=0x236bea0 | out: lpFileInformation=0x236bea0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x96514c9, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x96514c9, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x24ed64e9, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x164)) returned 1 [0195.843] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0195.843] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\828298824EA5549947C17DDABF6871F5_6B5C8B321CA02275A82E95FA81D6DE62", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\828298824EA5549947C17DDABF6871F5_6B5C8B321CA02275A82E95FA81D6DE62", lpFilePart=0x0) returned 0xc1 [0195.843] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0195.843] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\828298824EA5549947C17DDABF6871F5_6B5C8B321CA02275A82E95FA81D6DE62" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\828298824ea5549947c17ddabf6871f5_6b5c8b321ca02275a82e95fa81d6de62"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0195.843] GetFileType (hFile=0x444) returned 0x1 [0195.843] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be400) returned 1 [0195.843] GetFileType (hFile=0x444) returned 0x1 [0195.843] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be628 | out: lpFileSizeHigh=0x3be628*=0x0) returned 0x164 [0195.843] ReadFile (in: hFile=0x444, lpBuffer=0x236c570, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be558, lpOverlapped=0x0 | out: lpBuffer=0x236c570*, lpNumberOfBytesRead=0x3be558*=0x164, lpOverlapped=0x0) returned 1 [0195.844] CloseHandle (hObject=0x444) returned 1 [0195.887] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\828298824EA5549947C17DDABF6871F5_6B5C8B321CA02275A82E95FA81D6DE62", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\828298824EA5549947C17DDABF6871F5_6B5C8B321CA02275A82E95FA81D6DE62", lpFilePart=0x0) returned 0xc1 [0195.887] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0195.887] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\828298824EA5549947C17DDABF6871F5_6B5C8B321CA02275A82E95FA81D6DE62" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\828298824ea5549947c17ddabf6871f5_6b5c8b321ca02275a82e95fa81d6de62"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0195.889] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3baf20) returned 1 [0195.889] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\828298824EA5549947C17DDABF6871F5_6B5C8B321CA02275A82E95FA81D6DE62", nBufferLength=0x105, lpBuffer=0x3bbba0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\828298824EA5549947C17DDABF6871F5_6B5C8B321CA02275A82E95FA81D6DE62", lpFilePart=0x0) returned 0xc1 [0195.889] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc040) returned 1 [0195.889] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\828298824EA5549947C17DDABF6871F5_6B5C8B321CA02275A82E95FA81D6DE62" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\828298824ea5549947c17ddabf6871f5_6b5c8b321ca02275a82e95fa81d6de62"), fInfoLevelId=0x0, lpFileInformation=0x3bc120 | out: lpFileInformation=0x3bc120*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x96514c9, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x96514c9, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x24ed64e9, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x164)) returned 1 [0195.889] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc000) returned 1 [0195.889] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\828298824EA5549947C17DDABF6871F5_6B5C8B321CA02275A82E95FA81D6DE62", nBufferLength=0x105, lpBuffer=0x3bbbc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\828298824EA5549947C17DDABF6871F5_6B5C8B321CA02275A82E95FA81D6DE62", lpFilePart=0x0) returned 0xc1 [0195.889] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc040) returned 1 [0195.889] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\828298824EA5549947C17DDABF6871F5_6B5C8B321CA02275A82E95FA81D6DE62" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\828298824ea5549947c17ddabf6871f5_6b5c8b321ca02275a82e95fa81d6de62"), fInfoLevelId=0x0, lpFileInformation=0x21e5580 | out: lpFileInformation=0x21e5580*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x96514c9, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x96514c9, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x24ed64e9, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x164)) returned 1 [0195.889] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc000) returned 1 [0195.889] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\828298824EA5549947C17DDABF6871F5_6B5C8B321CA02275A82E95FA81D6DE62", nBufferLength=0x105, lpBuffer=0x3bba20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\828298824EA5549947C17DDABF6871F5_6B5C8B321CA02275A82E95FA81D6DE62", lpFilePart=0x0) returned 0xc1 [0195.890] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf00) returned 1 [0195.890] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\828298824EA5549947C17DDABF6871F5_6B5C8B321CA02275A82E95FA81D6DE62" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\828298824ea5549947c17ddabf6871f5_6b5c8b321ca02275a82e95fa81d6de62"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0195.890] GetFileType (hFile=0x444) returned 0x1 [0195.890] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbe70) returned 1 [0195.890] GetFileType (hFile=0x444) returned 0x1 [0195.890] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc098 | out: lpFileSizeHigh=0x3bc098*=0x0) returned 0x164 [0195.890] ReadFile (in: hFile=0x444, lpBuffer=0x21e5c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bbfc8, lpOverlapped=0x0 | out: lpBuffer=0x21e5c50*, lpNumberOfBytesRead=0x3bbfc8*=0x164, lpOverlapped=0x0) returned 1 [0195.890] CloseHandle (hObject=0x444) returned 1 [0195.927] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\828298824EA5549947C17DDABF6871F5_6B5C8B321CA02275A82E95FA81D6DE62", nBufferLength=0x105, lpBuffer=0x3bba20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\828298824EA5549947C17DDABF6871F5_6B5C8B321CA02275A82E95FA81D6DE62", lpFilePart=0x0) returned 0xc1 [0195.927] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf00) returned 1 [0195.927] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\828298824EA5549947C17DDABF6871F5_6B5C8B321CA02275A82E95FA81D6DE62" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\828298824ea5549947c17ddabf6871f5_6b5c8b321ca02275a82e95fa81d6de62"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0195.929] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8990) returned 1 [0195.929] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\A9E4F776657345B52012CE8E279D314C_B6480DD2AFAFCC504C59FFB35E8A6232", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\A9E4F776657345B52012CE8E279D314C_B6480DD2AFAFCC504C59FFB35E8A6232", lpFilePart=0x0) returned 0xc1 [0195.929] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0195.930] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\A9E4F776657345B52012CE8E279D314C_B6480DD2AFAFCC504C59FFB35E8A6232" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\a9e4f776657345b52012ce8e279d314c_b6480dd2afafcc504c59ffb35e8a6232"), fInfoLevelId=0x0, lpFileInformation=0x225dd48 | out: lpFileInformation=0x225dd48*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xcf69b48, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xcf69b48, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x24ed64e9, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x1ae)) returned 1 [0195.931] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0195.931] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\A9E4F776657345B52012CE8E279D314C_B6480DD2AFAFCC504C59FFB35E8A6232", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\A9E4F776657345B52012CE8E279D314C_B6480DD2AFAFCC504C59FFB35E8A6232", lpFilePart=0x0) returned 0xc1 [0195.931] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0195.931] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\A9E4F776657345B52012CE8E279D314C_B6480DD2AFAFCC504C59FFB35E8A6232" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\a9e4f776657345b52012ce8e279d314c_b6480dd2afafcc504c59ffb35e8a6232"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0195.931] GetFileType (hFile=0x444) returned 0x1 [0195.931] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be400) returned 1 [0195.931] GetFileType (hFile=0x444) returned 0x1 [0195.931] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be628 | out: lpFileSizeHigh=0x3be628*=0x0) returned 0x1ae [0195.932] ReadFile (in: hFile=0x444, lpBuffer=0x225e460, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be558, lpOverlapped=0x0 | out: lpBuffer=0x225e460*, lpNumberOfBytesRead=0x3be558*=0x1ae, lpOverlapped=0x0) returned 1 [0195.933] CloseHandle (hObject=0x444) returned 1 [0195.971] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\A9E4F776657345B52012CE8E279D314C_B6480DD2AFAFCC504C59FFB35E8A6232", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\A9E4F776657345B52012CE8E279D314C_B6480DD2AFAFCC504C59FFB35E8A6232", lpFilePart=0x0) returned 0xc1 [0195.971] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0195.971] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\A9E4F776657345B52012CE8E279D314C_B6480DD2AFAFCC504C59FFB35E8A6232" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\a9e4f776657345b52012ce8e279d314c_b6480dd2afafcc504c59ffb35e8a6232"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0195.973] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3baf20) returned 1 [0195.973] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\A9E4F776657345B52012CE8E279D314C_B6480DD2AFAFCC504C59FFB35E8A6232", nBufferLength=0x105, lpBuffer=0x3bbba0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\A9E4F776657345B52012CE8E279D314C_B6480DD2AFAFCC504C59FFB35E8A6232", lpFilePart=0x0) returned 0xc1 [0195.973] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc040) returned 1 [0195.973] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\A9E4F776657345B52012CE8E279D314C_B6480DD2AFAFCC504C59FFB35E8A6232" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\a9e4f776657345b52012ce8e279d314c_b6480dd2afafcc504c59ffb35e8a6232"), fInfoLevelId=0x0, lpFileInformation=0x3bc120 | out: lpFileInformation=0x3bc120*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xcf69b48, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xcf69b48, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x24ed64e9, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x1ae)) returned 1 [0195.973] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc000) returned 1 [0195.973] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\A9E4F776657345B52012CE8E279D314C_B6480DD2AFAFCC504C59FFB35E8A6232", nBufferLength=0x105, lpBuffer=0x3bbbc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\A9E4F776657345B52012CE8E279D314C_B6480DD2AFAFCC504C59FFB35E8A6232", lpFilePart=0x0) returned 0xc1 [0195.973] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc040) returned 1 [0195.973] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\A9E4F776657345B52012CE8E279D314C_B6480DD2AFAFCC504C59FFB35E8A6232" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\a9e4f776657345b52012ce8e279d314c_b6480dd2afafcc504c59ffb35e8a6232"), fInfoLevelId=0x0, lpFileInformation=0x22d6830 | out: lpFileInformation=0x22d6830*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xcf69b48, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xcf69b48, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x24ed64e9, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x1ae)) returned 1 [0195.973] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc000) returned 1 [0195.973] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\A9E4F776657345B52012CE8E279D314C_B6480DD2AFAFCC504C59FFB35E8A6232", nBufferLength=0x105, lpBuffer=0x3bba20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\A9E4F776657345B52012CE8E279D314C_B6480DD2AFAFCC504C59FFB35E8A6232", lpFilePart=0x0) returned 0xc1 [0195.974] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf00) returned 1 [0195.974] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\A9E4F776657345B52012CE8E279D314C_B6480DD2AFAFCC504C59FFB35E8A6232" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\a9e4f776657345b52012ce8e279d314c_b6480dd2afafcc504c59ffb35e8a6232"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0195.974] GetFileType (hFile=0x444) returned 0x1 [0195.974] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbe70) returned 1 [0195.974] GetFileType (hFile=0x444) returned 0x1 [0195.974] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc098 | out: lpFileSizeHigh=0x3bc098*=0x0) returned 0x1ae [0195.974] ReadFile (in: hFile=0x444, lpBuffer=0x22d6f48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bbfc8, lpOverlapped=0x0 | out: lpBuffer=0x22d6f48*, lpNumberOfBytesRead=0x3bbfc8*=0x1ae, lpOverlapped=0x0) returned 1 [0195.974] CloseHandle (hObject=0x444) returned 1 [0196.015] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\A9E4F776657345B52012CE8E279D314C_B6480DD2AFAFCC504C59FFB35E8A6232", nBufferLength=0x105, lpBuffer=0x3bba20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\A9E4F776657345B52012CE8E279D314C_B6480DD2AFAFCC504C59FFB35E8A6232", lpFilePart=0x0) returned 0xc1 [0196.015] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf00) returned 1 [0196.016] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\A9E4F776657345B52012CE8E279D314C_B6480DD2AFAFCC504C59FFB35E8A6232" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\a9e4f776657345b52012ce8e279d314c_b6480dd2afafcc504c59ffb35e8a6232"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0196.017] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8990) returned 1 [0196.018] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\A9E4F776657345B52012CE8E279D314C_DCA82AA47C444DFAE483555D3A592A95", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\A9E4F776657345B52012CE8E279D314C_DCA82AA47C444DFAE483555D3A592A95", lpFilePart=0x0) returned 0xc1 [0196.018] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0196.018] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\A9E4F776657345B52012CE8E279D314C_DCA82AA47C444DFAE483555D3A592A95" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\a9e4f776657345b52012ce8e279d314c_dca82aa47c444dfae483555d3a592a95"), fInfoLevelId=0x0, lpFileInformation=0x234f178 | out: lpFileInformation=0x234f178*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xc999f69, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc999f69, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x24ed64e9, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x1aa)) returned 1 [0196.018] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0196.018] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\A9E4F776657345B52012CE8E279D314C_DCA82AA47C444DFAE483555D3A592A95", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\A9E4F776657345B52012CE8E279D314C_DCA82AA47C444DFAE483555D3A592A95", lpFilePart=0x0) returned 0xc1 [0196.018] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0196.018] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\A9E4F776657345B52012CE8E279D314C_DCA82AA47C444DFAE483555D3A592A95" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\a9e4f776657345b52012ce8e279d314c_dca82aa47c444dfae483555d3a592a95"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0196.018] GetFileType (hFile=0x444) returned 0x1 [0196.018] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be400) returned 1 [0196.018] GetFileType (hFile=0x444) returned 0x1 [0196.018] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be628 | out: lpFileSizeHigh=0x3be628*=0x0) returned 0x1aa [0196.018] ReadFile (in: hFile=0x444, lpBuffer=0x234f890, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be558, lpOverlapped=0x0 | out: lpBuffer=0x234f890*, lpNumberOfBytesRead=0x3be558*=0x1aa, lpOverlapped=0x0) returned 1 [0196.019] CloseHandle (hObject=0x444) returned 1 [0196.064] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\A9E4F776657345B52012CE8E279D314C_DCA82AA47C444DFAE483555D3A592A95", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\A9E4F776657345B52012CE8E279D314C_DCA82AA47C444DFAE483555D3A592A95", lpFilePart=0x0) returned 0xc1 [0196.064] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0196.064] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\A9E4F776657345B52012CE8E279D314C_DCA82AA47C444DFAE483555D3A592A95" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\a9e4f776657345b52012ce8e279d314c_dca82aa47c444dfae483555d3a592a95"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0196.066] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3baf20) returned 1 [0196.066] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\A9E4F776657345B52012CE8E279D314C_DCA82AA47C444DFAE483555D3A592A95", nBufferLength=0x105, lpBuffer=0x3bbba0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\A9E4F776657345B52012CE8E279D314C_DCA82AA47C444DFAE483555D3A592A95", lpFilePart=0x0) returned 0xc1 [0196.066] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc040) returned 1 [0196.066] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\A9E4F776657345B52012CE8E279D314C_DCA82AA47C444DFAE483555D3A592A95" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\a9e4f776657345b52012ce8e279d314c_dca82aa47c444dfae483555d3a592a95"), fInfoLevelId=0x0, lpFileInformation=0x3bc120 | out: lpFileInformation=0x3bc120*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xc999f69, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc999f69, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x24ed64e9, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x1aa)) returned 1 [0196.067] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc000) returned 1 [0196.067] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\A9E4F776657345B52012CE8E279D314C_DCA82AA47C444DFAE483555D3A592A95", nBufferLength=0x105, lpBuffer=0x3bbbc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\A9E4F776657345B52012CE8E279D314C_DCA82AA47C444DFAE483555D3A592A95", lpFilePart=0x0) returned 0xc1 [0196.067] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc040) returned 1 [0196.067] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\A9E4F776657345B52012CE8E279D314C_DCA82AA47C444DFAE483555D3A592A95" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\a9e4f776657345b52012ce8e279d314c_dca82aa47c444dfae483555d3a592a95"), fInfoLevelId=0x0, lpFileInformation=0x21c8938 | out: lpFileInformation=0x21c8938*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xc999f69, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc999f69, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x24ed64e9, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x1aa)) returned 1 [0196.067] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc000) returned 1 [0196.067] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\A9E4F776657345B52012CE8E279D314C_DCA82AA47C444DFAE483555D3A592A95", nBufferLength=0x105, lpBuffer=0x3bba20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\A9E4F776657345B52012CE8E279D314C_DCA82AA47C444DFAE483555D3A592A95", lpFilePart=0x0) returned 0xc1 [0196.067] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf00) returned 1 [0196.067] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\A9E4F776657345B52012CE8E279D314C_DCA82AA47C444DFAE483555D3A592A95" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\a9e4f776657345b52012ce8e279d314c_dca82aa47c444dfae483555d3a592a95"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0196.067] GetFileType (hFile=0x444) returned 0x1 [0196.067] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbe70) returned 1 [0196.067] GetFileType (hFile=0x444) returned 0x1 [0196.067] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc098 | out: lpFileSizeHigh=0x3bc098*=0x0) returned 0x1aa [0196.067] ReadFile (in: hFile=0x444, lpBuffer=0x21c9050, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bbfc8, lpOverlapped=0x0 | out: lpBuffer=0x21c9050*, lpNumberOfBytesRead=0x3bbfc8*=0x1aa, lpOverlapped=0x0) returned 1 [0196.067] CloseHandle (hObject=0x444) returned 1 [0196.104] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\A9E4F776657345B52012CE8E279D314C_DCA82AA47C444DFAE483555D3A592A95", nBufferLength=0x105, lpBuffer=0x3bba20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\A9E4F776657345B52012CE8E279D314C_DCA82AA47C444DFAE483555D3A592A95", lpFilePart=0x0) returned 0xc1 [0196.104] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf00) returned 1 [0196.104] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\A9E4F776657345B52012CE8E279D314C_DCA82AA47C444DFAE483555D3A592A95" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\a9e4f776657345b52012ce8e279d314c_dca82aa47c444dfae483555d3a592a95"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0196.108] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8990) returned 1 [0196.108] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\B912B2C6928A18B8CD7D50CF08BEA95B_F85B8279FA54A31CEEC2563F5A8F73E8", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\B912B2C6928A18B8CD7D50CF08BEA95B_F85B8279FA54A31CEEC2563F5A8F73E8", lpFilePart=0x0) returned 0xc1 [0196.109] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0196.109] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\B912B2C6928A18B8CD7D50CF08BEA95B_F85B8279FA54A31CEEC2563F5A8F73E8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\b912b2c6928a18b8cd7d50cf08bea95b_f85b8279fa54a31ceec2563f5a8f73e8"), fInfoLevelId=0x0, lpFileInformation=0x2241280 | out: lpFileInformation=0x2241280*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xdd02cf, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xdd02cf, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x24ed64e9, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x1e6)) returned 1 [0196.109] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0196.109] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\B912B2C6928A18B8CD7D50CF08BEA95B_F85B8279FA54A31CEEC2563F5A8F73E8", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\B912B2C6928A18B8CD7D50CF08BEA95B_F85B8279FA54A31CEEC2563F5A8F73E8", lpFilePart=0x0) returned 0xc1 [0196.109] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0196.109] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\B912B2C6928A18B8CD7D50CF08BEA95B_F85B8279FA54A31CEEC2563F5A8F73E8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\b912b2c6928a18b8cd7d50cf08bea95b_f85b8279fa54a31ceec2563f5a8f73e8"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0196.109] GetFileType (hFile=0x444) returned 0x1 [0196.109] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be400) returned 1 [0196.109] GetFileType (hFile=0x444) returned 0x1 [0196.109] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be628 | out: lpFileSizeHigh=0x3be628*=0x0) returned 0x1e6 [0196.109] ReadFile (in: hFile=0x444, lpBuffer=0x22419d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be558, lpOverlapped=0x0 | out: lpBuffer=0x22419d0*, lpNumberOfBytesRead=0x3be558*=0x1e6, lpOverlapped=0x0) returned 1 [0196.110] CloseHandle (hObject=0x444) returned 1 [0196.150] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\B912B2C6928A18B8CD7D50CF08BEA95B_F85B8279FA54A31CEEC2563F5A8F73E8", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\B912B2C6928A18B8CD7D50CF08BEA95B_F85B8279FA54A31CEEC2563F5A8F73E8", lpFilePart=0x0) returned 0xc1 [0196.150] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0196.150] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\B912B2C6928A18B8CD7D50CF08BEA95B_F85B8279FA54A31CEEC2563F5A8F73E8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\b912b2c6928a18b8cd7d50cf08bea95b_f85b8279fa54a31ceec2563f5a8f73e8"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0196.155] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3baf20) returned 1 [0196.156] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\B912B2C6928A18B8CD7D50CF08BEA95B_F85B8279FA54A31CEEC2563F5A8F73E8", nBufferLength=0x105, lpBuffer=0x3bbba0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\B912B2C6928A18B8CD7D50CF08BEA95B_F85B8279FA54A31CEEC2563F5A8F73E8", lpFilePart=0x0) returned 0xc1 [0196.156] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc040) returned 1 [0196.156] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\B912B2C6928A18B8CD7D50CF08BEA95B_F85B8279FA54A31CEEC2563F5A8F73E8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\b912b2c6928a18b8cd7d50cf08bea95b_f85b8279fa54a31ceec2563f5a8f73e8"), fInfoLevelId=0x0, lpFileInformation=0x3bc120 | out: lpFileInformation=0x3bc120*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xdd02cf, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xdd02cf, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x24ed64e9, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x1e6)) returned 1 [0196.156] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc000) returned 1 [0196.156] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\B912B2C6928A18B8CD7D50CF08BEA95B_F85B8279FA54A31CEEC2563F5A8F73E8", nBufferLength=0x105, lpBuffer=0x3bbbc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\B912B2C6928A18B8CD7D50CF08BEA95B_F85B8279FA54A31CEEC2563F5A8F73E8", lpFilePart=0x0) returned 0xc1 [0196.156] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc040) returned 1 [0196.156] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\B912B2C6928A18B8CD7D50CF08BEA95B_F85B8279FA54A31CEEC2563F5A8F73E8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\b912b2c6928a18b8cd7d50cf08bea95b_f85b8279fa54a31ceec2563f5a8f73e8"), fInfoLevelId=0x0, lpFileInformation=0x22b9ee8 | out: lpFileInformation=0x22b9ee8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xdd02cf, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xdd02cf, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x24ed64e9, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x1e6)) returned 1 [0196.156] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc000) returned 1 [0196.156] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\B912B2C6928A18B8CD7D50CF08BEA95B_F85B8279FA54A31CEEC2563F5A8F73E8", nBufferLength=0x105, lpBuffer=0x3bba20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\B912B2C6928A18B8CD7D50CF08BEA95B_F85B8279FA54A31CEEC2563F5A8F73E8", lpFilePart=0x0) returned 0xc1 [0196.156] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf00) returned 1 [0196.156] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\B912B2C6928A18B8CD7D50CF08BEA95B_F85B8279FA54A31CEEC2563F5A8F73E8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\b912b2c6928a18b8cd7d50cf08bea95b_f85b8279fa54a31ceec2563f5a8f73e8"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0196.156] GetFileType (hFile=0x444) returned 0x1 [0196.156] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbe70) returned 1 [0196.156] GetFileType (hFile=0x444) returned 0x1 [0196.157] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc098 | out: lpFileSizeHigh=0x3bc098*=0x0) returned 0x1e6 [0196.157] ReadFile (in: hFile=0x444, lpBuffer=0x22ba638, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bbfc8, lpOverlapped=0x0 | out: lpBuffer=0x22ba638*, lpNumberOfBytesRead=0x3bbfc8*=0x1e6, lpOverlapped=0x0) returned 1 [0196.157] CloseHandle (hObject=0x444) returned 1 [0196.193] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\B912B2C6928A18B8CD7D50CF08BEA95B_F85B8279FA54A31CEEC2563F5A8F73E8", nBufferLength=0x105, lpBuffer=0x3bba20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\B912B2C6928A18B8CD7D50CF08BEA95B_F85B8279FA54A31CEEC2563F5A8F73E8", lpFilePart=0x0) returned 0xc1 [0196.193] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf00) returned 1 [0196.193] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\B912B2C6928A18B8CD7D50CF08BEA95B_F85B8279FA54A31CEEC2563F5A8F73E8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\b912b2c6928a18b8cd7d50cf08bea95b_f85b8279fa54a31ceec2563f5a8f73e8"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0196.195] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8990) returned 1 [0196.196] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\B912B2C6928A18B8CD7D50CF08BEA95B_FD02B13068D47EB94BCC5D8B201E9929", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\B912B2C6928A18B8CD7D50CF08BEA95B_FD02B13068D47EB94BCC5D8B201E9929", lpFilePart=0x0) returned 0xc1 [0196.196] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0196.196] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\B912B2C6928A18B8CD7D50CF08BEA95B_FD02B13068D47EB94BCC5D8B201E9929" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\b912b2c6928a18b8cd7d50cf08bea95b_fd02b13068d47eb94bcc5d8b201e9929"), fInfoLevelId=0x0, lpFileInformation=0x23329b0 | out: lpFileInformation=0x23329b0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xa7541c, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xa7541c, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x24efc70d, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x1ee)) returned 1 [0196.196] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0196.196] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\B912B2C6928A18B8CD7D50CF08BEA95B_FD02B13068D47EB94BCC5D8B201E9929", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\B912B2C6928A18B8CD7D50CF08BEA95B_FD02B13068D47EB94BCC5D8B201E9929", lpFilePart=0x0) returned 0xc1 [0196.196] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0196.196] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\B912B2C6928A18B8CD7D50CF08BEA95B_FD02B13068D47EB94BCC5D8B201E9929" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\b912b2c6928a18b8cd7d50cf08bea95b_fd02b13068d47eb94bcc5d8b201e9929"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0196.196] GetFileType (hFile=0x444) returned 0x1 [0196.196] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be400) returned 1 [0196.196] GetFileType (hFile=0x444) returned 0x1 [0196.196] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be628 | out: lpFileSizeHigh=0x3be628*=0x0) returned 0x1ee [0196.197] ReadFile (in: hFile=0x444, lpBuffer=0x2333108, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be558, lpOverlapped=0x0 | out: lpBuffer=0x2333108*, lpNumberOfBytesRead=0x3be558*=0x1ee, lpOverlapped=0x0) returned 1 [0196.199] CloseHandle (hObject=0x444) returned 1 [0196.242] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\B912B2C6928A18B8CD7D50CF08BEA95B_FD02B13068D47EB94BCC5D8B201E9929", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\B912B2C6928A18B8CD7D50CF08BEA95B_FD02B13068D47EB94BCC5D8B201E9929", lpFilePart=0x0) returned 0xc1 [0196.242] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0196.242] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\B912B2C6928A18B8CD7D50CF08BEA95B_FD02B13068D47EB94BCC5D8B201E9929" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\b912b2c6928a18b8cd7d50cf08bea95b_fd02b13068d47eb94bcc5d8b201e9929"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0196.243] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3baf20) returned 1 [0196.243] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\B912B2C6928A18B8CD7D50CF08BEA95B_FD02B13068D47EB94BCC5D8B201E9929", nBufferLength=0x105, lpBuffer=0x3bbba0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\B912B2C6928A18B8CD7D50CF08BEA95B_FD02B13068D47EB94BCC5D8B201E9929", lpFilePart=0x0) returned 0xc1 [0196.244] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc040) returned 1 [0196.244] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\B912B2C6928A18B8CD7D50CF08BEA95B_FD02B13068D47EB94BCC5D8B201E9929" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\b912b2c6928a18b8cd7d50cf08bea95b_fd02b13068d47eb94bcc5d8b201e9929"), fInfoLevelId=0x0, lpFileInformation=0x3bc120 | out: lpFileInformation=0x3bc120*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xa7541c, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xa7541c, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x24efc70d, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x1ee)) returned 1 [0196.244] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc000) returned 1 [0196.244] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\B912B2C6928A18B8CD7D50CF08BEA95B_FD02B13068D47EB94BCC5D8B201E9929", nBufferLength=0x105, lpBuffer=0x3bbbc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\B912B2C6928A18B8CD7D50CF08BEA95B_FD02B13068D47EB94BCC5D8B201E9929", lpFilePart=0x0) returned 0xc1 [0196.244] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc040) returned 1 [0196.244] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\B912B2C6928A18B8CD7D50CF08BEA95B_FD02B13068D47EB94BCC5D8B201E9929" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\b912b2c6928a18b8cd7d50cf08bea95b_fd02b13068d47eb94bcc5d8b201e9929"), fInfoLevelId=0x0, lpFileInformation=0x21ac388 | out: lpFileInformation=0x21ac388*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xa7541c, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xa7541c, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x24efc70d, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x1ee)) returned 1 [0196.244] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc000) returned 1 [0196.244] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\B912B2C6928A18B8CD7D50CF08BEA95B_FD02B13068D47EB94BCC5D8B201E9929", nBufferLength=0x105, lpBuffer=0x3bba20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\B912B2C6928A18B8CD7D50CF08BEA95B_FD02B13068D47EB94BCC5D8B201E9929", lpFilePart=0x0) returned 0xc1 [0196.244] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf00) returned 1 [0196.244] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\B912B2C6928A18B8CD7D50CF08BEA95B_FD02B13068D47EB94BCC5D8B201E9929" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\b912b2c6928a18b8cd7d50cf08bea95b_fd02b13068d47eb94bcc5d8b201e9929"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0196.244] GetFileType (hFile=0x444) returned 0x1 [0196.244] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbe70) returned 1 [0196.244] GetFileType (hFile=0x444) returned 0x1 [0196.244] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc098 | out: lpFileSizeHigh=0x3bc098*=0x0) returned 0x1ee [0196.244] ReadFile (in: hFile=0x444, lpBuffer=0x21acae0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bbfc8, lpOverlapped=0x0 | out: lpBuffer=0x21acae0*, lpNumberOfBytesRead=0x3bbfc8*=0x1ee, lpOverlapped=0x0) returned 1 [0196.244] CloseHandle (hObject=0x444) returned 1 [0196.283] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\B912B2C6928A18B8CD7D50CF08BEA95B_FD02B13068D47EB94BCC5D8B201E9929", nBufferLength=0x105, lpBuffer=0x3bba20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\B912B2C6928A18B8CD7D50CF08BEA95B_FD02B13068D47EB94BCC5D8B201E9929", lpFilePart=0x0) returned 0xc1 [0196.283] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf00) returned 1 [0196.284] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\B912B2C6928A18B8CD7D50CF08BEA95B_FD02B13068D47EB94BCC5D8B201E9929" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\b912b2c6928a18b8cd7d50cf08bea95b_fd02b13068d47eb94bcc5d8b201e9929"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0196.285] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8990) returned 1 [0196.286] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873", lpFilePart=0x0) returned 0xc1 [0196.286] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0196.286] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\c46e7b0f942663a1edc8d9d6d7869173_42820cdfea41dc84aab89a6b63561873"), fInfoLevelId=0x0, lpFileInformation=0x2224e50 | out: lpFileInformation=0x2224e50*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x8f33454, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x8f33454, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x24efc70d, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x192)) returned 1 [0196.286] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0196.286] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873", lpFilePart=0x0) returned 0xc1 [0196.286] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0196.286] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\c46e7b0f942663a1edc8d9d6d7869173_42820cdfea41dc84aab89a6b63561873"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0196.286] GetFileType (hFile=0x444) returned 0x1 [0196.286] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be400) returned 1 [0196.286] GetFileType (hFile=0x444) returned 0x1 [0196.286] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be628 | out: lpFileSizeHigh=0x3be628*=0x0) returned 0x192 [0196.286] ReadFile (in: hFile=0x444, lpBuffer=0x2225550, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be558, lpOverlapped=0x0 | out: lpBuffer=0x2225550*, lpNumberOfBytesRead=0x3be558*=0x192, lpOverlapped=0x0) returned 1 [0196.287] CloseHandle (hObject=0x444) returned 1 [0196.323] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873", lpFilePart=0x0) returned 0xc1 [0196.328] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0196.328] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\c46e7b0f942663a1edc8d9d6d7869173_42820cdfea41dc84aab89a6b63561873"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0196.330] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3baf20) returned 1 [0196.330] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873", nBufferLength=0x105, lpBuffer=0x3bbba0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873", lpFilePart=0x0) returned 0xc1 [0196.330] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc040) returned 1 [0196.330] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\c46e7b0f942663a1edc8d9d6d7869173_42820cdfea41dc84aab89a6b63561873"), fInfoLevelId=0x0, lpFileInformation=0x3bc120 | out: lpFileInformation=0x3bc120*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x8f33454, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x8f33454, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x24efc70d, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x192)) returned 1 [0196.330] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc000) returned 1 [0196.330] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873", nBufferLength=0x105, lpBuffer=0x3bbbc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873", lpFilePart=0x0) returned 0xc1 [0196.330] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc040) returned 1 [0196.330] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\c46e7b0f942663a1edc8d9d6d7869173_42820cdfea41dc84aab89a6b63561873"), fInfoLevelId=0x0, lpFileInformation=0x229d8d8 | out: lpFileInformation=0x229d8d8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x8f33454, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x8f33454, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x24efc70d, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x192)) returned 1 [0196.330] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc000) returned 1 [0196.331] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873", nBufferLength=0x105, lpBuffer=0x3bba20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873", lpFilePart=0x0) returned 0xc1 [0196.331] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf00) returned 1 [0196.331] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\c46e7b0f942663a1edc8d9d6d7869173_42820cdfea41dc84aab89a6b63561873"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0196.331] GetFileType (hFile=0x444) returned 0x1 [0196.331] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbe70) returned 1 [0196.331] GetFileType (hFile=0x444) returned 0x1 [0196.331] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc098 | out: lpFileSizeHigh=0x3bc098*=0x0) returned 0x192 [0196.331] ReadFile (in: hFile=0x444, lpBuffer=0x229dfd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bbfc8, lpOverlapped=0x0 | out: lpBuffer=0x229dfd8*, lpNumberOfBytesRead=0x3bbfc8*=0x192, lpOverlapped=0x0) returned 1 [0196.331] CloseHandle (hObject=0x444) returned 1 [0196.367] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873", nBufferLength=0x105, lpBuffer=0x3bba20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873", lpFilePart=0x0) returned 0xc1 [0196.367] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf00) returned 1 [0196.367] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\c46e7b0f942663a1edc8d9d6d7869173_42820cdfea41dc84aab89a6b63561873"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0196.369] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8990) returned 1 [0196.370] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF", lpFilePart=0x0) returned 0xc1 [0196.370] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0196.370] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\c46e7b0f942663a1edc8d9d6d7869173_d9b9f37ece595b0b7b6aa12451d392cf"), fInfoLevelId=0x0, lpFileInformation=0x23161c0 | out: lpFileInformation=0x23161c0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x10f141d, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x10f141d, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x24efc70d, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x18e)) returned 1 [0196.372] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0196.372] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF", lpFilePart=0x0) returned 0xc1 [0196.372] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0196.372] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\c46e7b0f942663a1edc8d9d6d7869173_d9b9f37ece595b0b7b6aa12451d392cf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0196.373] GetFileType (hFile=0x444) returned 0x1 [0196.373] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be400) returned 1 [0196.373] GetFileType (hFile=0x444) returned 0x1 [0196.373] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be628 | out: lpFileSizeHigh=0x3be628*=0x0) returned 0x18e [0196.373] ReadFile (in: hFile=0x444, lpBuffer=0x23168b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be558, lpOverlapped=0x0 | out: lpBuffer=0x23168b8*, lpNumberOfBytesRead=0x3be558*=0x18e, lpOverlapped=0x0) returned 1 [0196.374] CloseHandle (hObject=0x444) returned 1 [0196.431] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF", lpFilePart=0x0) returned 0xc1 [0196.431] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0196.431] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\c46e7b0f942663a1edc8d9d6d7869173_d9b9f37ece595b0b7b6aa12451d392cf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0196.433] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3baf20) returned 1 [0196.433] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF", nBufferLength=0x105, lpBuffer=0x3bbba0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF", lpFilePart=0x0) returned 0xc1 [0196.433] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc040) returned 1 [0196.433] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\c46e7b0f942663a1edc8d9d6d7869173_d9b9f37ece595b0b7b6aa12451d392cf"), fInfoLevelId=0x0, lpFileInformation=0x3bc120 | out: lpFileInformation=0x3bc120*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x10f141d, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x10f141d, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x24efc70d, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x18e)) returned 1 [0196.433] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc000) returned 1 [0196.433] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF", nBufferLength=0x105, lpBuffer=0x3bbbc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF", lpFilePart=0x0) returned 0xc1 [0196.433] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc040) returned 1 [0196.434] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\c46e7b0f942663a1edc8d9d6d7869173_d9b9f37ece595b0b7b6aa12451d392cf"), fInfoLevelId=0x0, lpFileInformation=0x218f9c8 | out: lpFileInformation=0x218f9c8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x10f141d, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x10f141d, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x24efc70d, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x18e)) returned 1 [0196.434] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc000) returned 1 [0196.434] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF", nBufferLength=0x105, lpBuffer=0x3bba20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF", lpFilePart=0x0) returned 0xc1 [0196.434] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf00) returned 1 [0196.434] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\c46e7b0f942663a1edc8d9d6d7869173_d9b9f37ece595b0b7b6aa12451d392cf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0196.434] GetFileType (hFile=0x444) returned 0x1 [0196.434] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbe70) returned 1 [0196.434] GetFileType (hFile=0x444) returned 0x1 [0196.434] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc098 | out: lpFileSizeHigh=0x3bc098*=0x0) returned 0x18e [0196.434] ReadFile (in: hFile=0x444, lpBuffer=0x21900c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bbfc8, lpOverlapped=0x0 | out: lpBuffer=0x21900c0*, lpNumberOfBytesRead=0x3bbfc8*=0x18e, lpOverlapped=0x0) returned 1 [0196.434] CloseHandle (hObject=0x444) returned 1 [0196.472] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF", nBufferLength=0x105, lpBuffer=0x3bba20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF", lpFilePart=0x0) returned 0xc1 [0196.472] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf00) returned 1 [0196.472] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\c46e7b0f942663a1edc8d9d6d7869173_d9b9f37ece595b0b7b6aa12451d392cf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0196.474] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8990) returned 1 [0196.475] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\D47DBD2F9E3365FBBE008D71FB06716F_835A2FD7EE5F1F37B7872C78D42A88BF", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\D47DBD2F9E3365FBBE008D71FB06716F_835A2FD7EE5F1F37B7872C78D42A88BF", lpFilePart=0x0) returned 0xc1 [0196.475] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0196.475] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\D47DBD2F9E3365FBBE008D71FB06716F_835A2FD7EE5F1F37B7872C78D42A88BF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\d47dbd2f9e3365fbbe008d71fb06716f_835a2fd7ee5f1f37b7872c78d42a88bf"), fInfoLevelId=0x0, lpFileInformation=0x2208250 | out: lpFileInformation=0x2208250*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x91ff119, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x91ff119, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x24efc70d, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x194)) returned 1 [0196.475] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0196.475] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\D47DBD2F9E3365FBBE008D71FB06716F_835A2FD7EE5F1F37B7872C78D42A88BF", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\D47DBD2F9E3365FBBE008D71FB06716F_835A2FD7EE5F1F37B7872C78D42A88BF", lpFilePart=0x0) returned 0xc1 [0196.475] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0196.475] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\D47DBD2F9E3365FBBE008D71FB06716F_835A2FD7EE5F1F37B7872C78D42A88BF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\d47dbd2f9e3365fbbe008d71fb06716f_835a2fd7ee5f1f37b7872c78d42a88bf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0196.475] GetFileType (hFile=0x444) returned 0x1 [0196.475] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be400) returned 1 [0196.475] GetFileType (hFile=0x444) returned 0x1 [0196.475] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be628 | out: lpFileSizeHigh=0x3be628*=0x0) returned 0x194 [0196.475] ReadFile (in: hFile=0x444, lpBuffer=0x2208950, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be558, lpOverlapped=0x0 | out: lpBuffer=0x2208950*, lpNumberOfBytesRead=0x3be558*=0x194, lpOverlapped=0x0) returned 1 [0196.476] CloseHandle (hObject=0x444) returned 1 [0196.628] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\D47DBD2F9E3365FBBE008D71FB06716F_835A2FD7EE5F1F37B7872C78D42A88BF", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\D47DBD2F9E3365FBBE008D71FB06716F_835A2FD7EE5F1F37B7872C78D42A88BF", lpFilePart=0x0) returned 0xc1 [0196.628] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0196.628] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\D47DBD2F9E3365FBBE008D71FB06716F_835A2FD7EE5F1F37B7872C78D42A88BF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\d47dbd2f9e3365fbbe008d71fb06716f_835a2fd7ee5f1f37b7872c78d42a88bf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0196.629] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3baf20) returned 1 [0196.629] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\D47DBD2F9E3365FBBE008D71FB06716F_835A2FD7EE5F1F37B7872C78D42A88BF", nBufferLength=0x105, lpBuffer=0x3bbba0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\D47DBD2F9E3365FBBE008D71FB06716F_835A2FD7EE5F1F37B7872C78D42A88BF", lpFilePart=0x0) returned 0xc1 [0196.629] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc040) returned 1 [0196.630] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\D47DBD2F9E3365FBBE008D71FB06716F_835A2FD7EE5F1F37B7872C78D42A88BF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\d47dbd2f9e3365fbbe008d71fb06716f_835a2fd7ee5f1f37b7872c78d42a88bf"), fInfoLevelId=0x0, lpFileInformation=0x3bc120 | out: lpFileInformation=0x3bc120*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x91ff119, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x91ff119, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x24efc70d, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x194)) returned 1 [0196.630] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc000) returned 1 [0196.630] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\D47DBD2F9E3365FBBE008D71FB06716F_835A2FD7EE5F1F37B7872C78D42A88BF", nBufferLength=0x105, lpBuffer=0x3bbbc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\D47DBD2F9E3365FBBE008D71FB06716F_835A2FD7EE5F1F37B7872C78D42A88BF", lpFilePart=0x0) returned 0xc1 [0196.630] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc040) returned 1 [0196.630] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\D47DBD2F9E3365FBBE008D71FB06716F_835A2FD7EE5F1F37B7872C78D42A88BF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\d47dbd2f9e3365fbbe008d71fb06716f_835a2fd7ee5f1f37b7872c78d42a88bf"), fInfoLevelId=0x0, lpFileInformation=0x2280cd8 | out: lpFileInformation=0x2280cd8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x91ff119, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x91ff119, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x24efc70d, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x194)) returned 1 [0196.630] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc000) returned 1 [0196.630] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\D47DBD2F9E3365FBBE008D71FB06716F_835A2FD7EE5F1F37B7872C78D42A88BF", nBufferLength=0x105, lpBuffer=0x3bba20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\D47DBD2F9E3365FBBE008D71FB06716F_835A2FD7EE5F1F37B7872C78D42A88BF", lpFilePart=0x0) returned 0xc1 [0196.630] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf00) returned 1 [0196.630] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\D47DBD2F9E3365FBBE008D71FB06716F_835A2FD7EE5F1F37B7872C78D42A88BF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\d47dbd2f9e3365fbbe008d71fb06716f_835a2fd7ee5f1f37b7872c78d42a88bf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0196.630] GetFileType (hFile=0x444) returned 0x1 [0196.630] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbe70) returned 1 [0196.630] GetFileType (hFile=0x444) returned 0x1 [0196.630] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc098 | out: lpFileSizeHigh=0x3bc098*=0x0) returned 0x194 [0196.630] ReadFile (in: hFile=0x444, lpBuffer=0x22813d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bbfc8, lpOverlapped=0x0 | out: lpBuffer=0x22813d8*, lpNumberOfBytesRead=0x3bbfc8*=0x194, lpOverlapped=0x0) returned 1 [0196.630] CloseHandle (hObject=0x444) returned 1 [0196.665] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\D47DBD2F9E3365FBBE008D71FB06716F_835A2FD7EE5F1F37B7872C78D42A88BF", nBufferLength=0x105, lpBuffer=0x3bba20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\D47DBD2F9E3365FBBE008D71FB06716F_835A2FD7EE5F1F37B7872C78D42A88BF", lpFilePart=0x0) returned 0xc1 [0196.665] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf00) returned 1 [0196.666] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\D47DBD2F9E3365FBBE008D71FB06716F_835A2FD7EE5F1F37B7872C78D42A88BF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\d47dbd2f9e3365fbbe008d71fb06716f_835a2fd7ee5f1f37b7872c78d42a88bf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0196.669] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8990) returned 1 [0196.669] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\D47DBD2F9E3365FBBE008D71FB06716F_D33192D58AA9CA2B9097E848E9FE86DE", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\D47DBD2F9E3365FBBE008D71FB06716F_D33192D58AA9CA2B9097E848E9FE86DE", lpFilePart=0x0) returned 0xc1 [0196.669] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0196.669] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\D47DBD2F9E3365FBBE008D71FB06716F_D33192D58AA9CA2B9097E848E9FE86DE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\d47dbd2f9e3365fbbe008d71fb06716f_d33192d58aa9ca2b9097e848e9fe86de"), fInfoLevelId=0x0, lpFileInformation=0x22f95c0 | out: lpFileInformation=0x22f95c0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x1f0d895, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x1f0d895, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x24efc70d, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x198)) returned 1 [0196.670] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0196.670] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\D47DBD2F9E3365FBBE008D71FB06716F_D33192D58AA9CA2B9097E848E9FE86DE", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\D47DBD2F9E3365FBBE008D71FB06716F_D33192D58AA9CA2B9097E848E9FE86DE", lpFilePart=0x0) returned 0xc1 [0196.670] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0196.670] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\D47DBD2F9E3365FBBE008D71FB06716F_D33192D58AA9CA2B9097E848E9FE86DE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\d47dbd2f9e3365fbbe008d71fb06716f_d33192d58aa9ca2b9097e848e9fe86de"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0196.670] GetFileType (hFile=0x444) returned 0x1 [0196.670] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be400) returned 1 [0196.670] GetFileType (hFile=0x444) returned 0x1 [0196.670] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be628 | out: lpFileSizeHigh=0x3be628*=0x0) returned 0x198 [0196.670] ReadFile (in: hFile=0x444, lpBuffer=0x22f9cc0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be558, lpOverlapped=0x0 | out: lpBuffer=0x22f9cc0*, lpNumberOfBytesRead=0x3be558*=0x198, lpOverlapped=0x0) returned 1 [0196.671] CloseHandle (hObject=0x444) returned 1 [0196.707] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\D47DBD2F9E3365FBBE008D71FB06716F_D33192D58AA9CA2B9097E848E9FE86DE", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\D47DBD2F9E3365FBBE008D71FB06716F_D33192D58AA9CA2B9097E848E9FE86DE", lpFilePart=0x0) returned 0xc1 [0196.707] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0196.707] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\D47DBD2F9E3365FBBE008D71FB06716F_D33192D58AA9CA2B9097E848E9FE86DE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\d47dbd2f9e3365fbbe008d71fb06716f_d33192d58aa9ca2b9097e848e9fe86de"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0196.708] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3baf20) returned 1 [0196.709] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\D47DBD2F9E3365FBBE008D71FB06716F_D33192D58AA9CA2B9097E848E9FE86DE", nBufferLength=0x105, lpBuffer=0x3bbba0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\D47DBD2F9E3365FBBE008D71FB06716F_D33192D58AA9CA2B9097E848E9FE86DE", lpFilePart=0x0) returned 0xc1 [0196.709] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc040) returned 1 [0196.709] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\D47DBD2F9E3365FBBE008D71FB06716F_D33192D58AA9CA2B9097E848E9FE86DE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\d47dbd2f9e3365fbbe008d71fb06716f_d33192d58aa9ca2b9097e848e9fe86de"), fInfoLevelId=0x0, lpFileInformation=0x3bc120 | out: lpFileInformation=0x3bc120*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x1f0d895, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x1f0d895, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x24efc70d, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x198)) returned 1 [0196.709] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc000) returned 1 [0196.709] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\D47DBD2F9E3365FBBE008D71FB06716F_D33192D58AA9CA2B9097E848E9FE86DE", nBufferLength=0x105, lpBuffer=0x3bbbc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\D47DBD2F9E3365FBBE008D71FB06716F_D33192D58AA9CA2B9097E848E9FE86DE", lpFilePart=0x0) returned 0xc1 [0196.709] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc040) returned 1 [0196.709] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\D47DBD2F9E3365FBBE008D71FB06716F_D33192D58AA9CA2B9097E848E9FE86DE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\d47dbd2f9e3365fbbe008d71fb06716f_d33192d58aa9ca2b9097e848e9fe86de"), fInfoLevelId=0x0, lpFileInformation=0x2372040 | out: lpFileInformation=0x2372040*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x1f0d895, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x1f0d895, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x24efc70d, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x198)) returned 1 [0196.709] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc000) returned 1 [0196.709] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\D47DBD2F9E3365FBBE008D71FB06716F_D33192D58AA9CA2B9097E848E9FE86DE", nBufferLength=0x105, lpBuffer=0x3bba20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\D47DBD2F9E3365FBBE008D71FB06716F_D33192D58AA9CA2B9097E848E9FE86DE", lpFilePart=0x0) returned 0xc1 [0196.709] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf00) returned 1 [0196.709] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\D47DBD2F9E3365FBBE008D71FB06716F_D33192D58AA9CA2B9097E848E9FE86DE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\d47dbd2f9e3365fbbe008d71fb06716f_d33192d58aa9ca2b9097e848e9fe86de"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0196.709] GetFileType (hFile=0x444) returned 0x1 [0196.709] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbe70) returned 1 [0196.709] GetFileType (hFile=0x444) returned 0x1 [0196.710] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc098 | out: lpFileSizeHigh=0x3bc098*=0x0) returned 0x198 [0196.710] ReadFile (in: hFile=0x444, lpBuffer=0x2372740, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bbfc8, lpOverlapped=0x0 | out: lpBuffer=0x2372740*, lpNumberOfBytesRead=0x3bbfc8*=0x198, lpOverlapped=0x0) returned 1 [0196.710] CloseHandle (hObject=0x444) returned 1 [0196.770] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\D47DBD2F9E3365FBBE008D71FB06716F_D33192D58AA9CA2B9097E848E9FE86DE", nBufferLength=0x105, lpBuffer=0x3bba20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\D47DBD2F9E3365FBBE008D71FB06716F_D33192D58AA9CA2B9097E848E9FE86DE", lpFilePart=0x0) returned 0xc1 [0196.770] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf00) returned 1 [0196.770] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\D47DBD2F9E3365FBBE008D71FB06716F_D33192D58AA9CA2B9097E848E9FE86DE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\d47dbd2f9e3365fbbe008d71fb06716f_d33192d58aa9ca2b9097e848e9fe86de"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0196.772] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8990) returned 1 [0196.773] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\DCE3BDBF5BDD86E2AB5B471CB90709B4_D787EFA352C03E71EA5F8B6B11B398B8", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\DCE3BDBF5BDD86E2AB5B471CB90709B4_D787EFA352C03E71EA5F8B6B11B398B8", lpFilePart=0x0) returned 0xc1 [0196.773] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0196.773] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\DCE3BDBF5BDD86E2AB5B471CB90709B4_D787EFA352C03E71EA5F8B6B11B398B8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\dce3bdbf5bdd86e2ab5b471cb90709b4_d787efa352c03e71ea5f8b6b11b398b8"), fInfoLevelId=0x0, lpFileInformation=0x21eba70 | out: lpFileInformation=0x21eba70*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbcef5c3, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xbcef5c3, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x24efc70d, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x1b6)) returned 1 [0196.773] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0196.773] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\DCE3BDBF5BDD86E2AB5B471CB90709B4_D787EFA352C03E71EA5F8B6B11B398B8", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\DCE3BDBF5BDD86E2AB5B471CB90709B4_D787EFA352C03E71EA5F8B6B11B398B8", lpFilePart=0x0) returned 0xc1 [0196.773] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0196.773] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\DCE3BDBF5BDD86E2AB5B471CB90709B4_D787EFA352C03E71EA5F8B6B11B398B8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\dce3bdbf5bdd86e2ab5b471cb90709b4_d787efa352c03e71ea5f8b6b11b398b8"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0196.773] GetFileType (hFile=0x444) returned 0x1 [0196.773] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be400) returned 1 [0196.773] GetFileType (hFile=0x444) returned 0x1 [0196.773] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be628 | out: lpFileSizeHigh=0x3be628*=0x0) returned 0x1b6 [0196.773] ReadFile (in: hFile=0x444, lpBuffer=0x21ec190, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be558, lpOverlapped=0x0 | out: lpBuffer=0x21ec190*, lpNumberOfBytesRead=0x3be558*=0x1b6, lpOverlapped=0x0) returned 1 [0196.776] CloseHandle (hObject=0x444) returned 1 [0196.821] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\DCE3BDBF5BDD86E2AB5B471CB90709B4_D787EFA352C03E71EA5F8B6B11B398B8", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\DCE3BDBF5BDD86E2AB5B471CB90709B4_D787EFA352C03E71EA5F8B6B11B398B8", lpFilePart=0x0) returned 0xc1 [0196.821] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0196.821] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\DCE3BDBF5BDD86E2AB5B471CB90709B4_D787EFA352C03E71EA5F8B6B11B398B8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\dce3bdbf5bdd86e2ab5b471cb90709b4_d787efa352c03e71ea5f8b6b11b398b8"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0196.823] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3baf20) returned 1 [0196.828] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\DCE3BDBF5BDD86E2AB5B471CB90709B4_D787EFA352C03E71EA5F8B6B11B398B8", nBufferLength=0x105, lpBuffer=0x3bbba0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\DCE3BDBF5BDD86E2AB5B471CB90709B4_D787EFA352C03E71EA5F8B6B11B398B8", lpFilePart=0x0) returned 0xc1 [0196.828] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc040) returned 1 [0196.828] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\DCE3BDBF5BDD86E2AB5B471CB90709B4_D787EFA352C03E71EA5F8B6B11B398B8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\dce3bdbf5bdd86e2ab5b471cb90709b4_d787efa352c03e71ea5f8b6b11b398b8"), fInfoLevelId=0x0, lpFileInformation=0x3bc120 | out: lpFileInformation=0x3bc120*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbcef5c3, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xbcef5c3, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x24efc70d, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x1b6)) returned 1 [0196.828] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc000) returned 1 [0196.828] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\DCE3BDBF5BDD86E2AB5B471CB90709B4_D787EFA352C03E71EA5F8B6B11B398B8", nBufferLength=0x105, lpBuffer=0x3bbbc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\DCE3BDBF5BDD86E2AB5B471CB90709B4_D787EFA352C03E71EA5F8B6B11B398B8", lpFilePart=0x0) returned 0xc1 [0196.828] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc040) returned 1 [0196.828] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\DCE3BDBF5BDD86E2AB5B471CB90709B4_D787EFA352C03E71EA5F8B6B11B398B8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\dce3bdbf5bdd86e2ab5b471cb90709b4_d787efa352c03e71ea5f8b6b11b398b8"), fInfoLevelId=0x0, lpFileInformation=0x22645b8 | out: lpFileInformation=0x22645b8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbcef5c3, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xbcef5c3, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x24efc70d, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x1b6)) returned 1 [0196.828] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc000) returned 1 [0196.828] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\DCE3BDBF5BDD86E2AB5B471CB90709B4_D787EFA352C03E71EA5F8B6B11B398B8", nBufferLength=0x105, lpBuffer=0x3bba20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\DCE3BDBF5BDD86E2AB5B471CB90709B4_D787EFA352C03E71EA5F8B6B11B398B8", lpFilePart=0x0) returned 0xc1 [0196.828] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf00) returned 1 [0196.828] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\DCE3BDBF5BDD86E2AB5B471CB90709B4_D787EFA352C03E71EA5F8B6B11B398B8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\dce3bdbf5bdd86e2ab5b471cb90709b4_d787efa352c03e71ea5f8b6b11b398b8"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0196.828] GetFileType (hFile=0x444) returned 0x1 [0196.828] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbe70) returned 1 [0196.828] GetFileType (hFile=0x444) returned 0x1 [0196.828] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc098 | out: lpFileSizeHigh=0x3bc098*=0x0) returned 0x1b6 [0196.829] ReadFile (in: hFile=0x444, lpBuffer=0x2264cd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bbfc8, lpOverlapped=0x0 | out: lpBuffer=0x2264cd8*, lpNumberOfBytesRead=0x3bbfc8*=0x1b6, lpOverlapped=0x0) returned 1 [0196.829] CloseHandle (hObject=0x444) returned 1 [0196.865] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\DCE3BDBF5BDD86E2AB5B471CB90709B4_D787EFA352C03E71EA5F8B6B11B398B8", nBufferLength=0x105, lpBuffer=0x3bba20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\DCE3BDBF5BDD86E2AB5B471CB90709B4_D787EFA352C03E71EA5F8B6B11B398B8", lpFilePart=0x0) returned 0xc1 [0196.865] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf00) returned 1 [0196.865] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\DCE3BDBF5BDD86E2AB5B471CB90709B4_D787EFA352C03E71EA5F8B6B11B398B8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\dce3bdbf5bdd86e2ab5b471cb90709b4_d787efa352c03e71ea5f8b6b11b398b8"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0196.867] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8990) returned 1 [0196.867] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\EDC238BFF48A31D55A97E1E93892934B_C20E0DA2D0F89FE526E1490F4A2EE5AB", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\EDC238BFF48A31D55A97E1E93892934B_C20E0DA2D0F89FE526E1490F4A2EE5AB", lpFilePart=0x0) returned 0xc1 [0196.867] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0196.867] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\EDC238BFF48A31D55A97E1E93892934B_C20E0DA2D0F89FE526E1490F4A2EE5AB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\edc238bff48a31d55a97e1e93892934b_c20e0da2d0f89fe526e1490f4a2ee5ab"), fInfoLevelId=0x0, lpFileInformation=0x22dcf60 | out: lpFileInformation=0x22dcf60*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbca3121, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xbca3121, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x24efc70d, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x1aa)) returned 1 [0196.871] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0196.871] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\EDC238BFF48A31D55A97E1E93892934B_C20E0DA2D0F89FE526E1490F4A2EE5AB", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\EDC238BFF48A31D55A97E1E93892934B_C20E0DA2D0F89FE526E1490F4A2EE5AB", lpFilePart=0x0) returned 0xc1 [0196.872] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0196.872] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\EDC238BFF48A31D55A97E1E93892934B_C20E0DA2D0F89FE526E1490F4A2EE5AB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\edc238bff48a31d55a97e1e93892934b_c20e0da2d0f89fe526e1490f4a2ee5ab"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0196.872] GetFileType (hFile=0x444) returned 0x1 [0196.872] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be400) returned 1 [0196.872] GetFileType (hFile=0x444) returned 0x1 [0196.872] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be628 | out: lpFileSizeHigh=0x3be628*=0x0) returned 0x1aa [0196.872] ReadFile (in: hFile=0x444, lpBuffer=0x22dd678, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be558, lpOverlapped=0x0 | out: lpBuffer=0x22dd678*, lpNumberOfBytesRead=0x3be558*=0x1aa, lpOverlapped=0x0) returned 1 [0196.873] CloseHandle (hObject=0x444) returned 1 [0196.908] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\EDC238BFF48A31D55A97E1E93892934B_C20E0DA2D0F89FE526E1490F4A2EE5AB", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\EDC238BFF48A31D55A97E1E93892934B_C20E0DA2D0F89FE526E1490F4A2EE5AB", lpFilePart=0x0) returned 0xc1 [0196.908] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0196.908] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\EDC238BFF48A31D55A97E1E93892934B_C20E0DA2D0F89FE526E1490F4A2EE5AB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\edc238bff48a31d55a97e1e93892934b_c20e0da2d0f89fe526e1490f4a2ee5ab"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0196.910] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3baf20) returned 1 [0196.910] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\EDC238BFF48A31D55A97E1E93892934B_C20E0DA2D0F89FE526E1490F4A2EE5AB", nBufferLength=0x105, lpBuffer=0x3bbba0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\EDC238BFF48A31D55A97E1E93892934B_C20E0DA2D0F89FE526E1490F4A2EE5AB", lpFilePart=0x0) returned 0xc1 [0196.910] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc040) returned 1 [0196.910] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\EDC238BFF48A31D55A97E1E93892934B_C20E0DA2D0F89FE526E1490F4A2EE5AB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\edc238bff48a31d55a97e1e93892934b_c20e0da2d0f89fe526e1490f4a2ee5ab"), fInfoLevelId=0x0, lpFileInformation=0x3bc120 | out: lpFileInformation=0x3bc120*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbca3121, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xbca3121, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x24efc70d, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x1aa)) returned 1 [0196.910] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc000) returned 1 [0196.910] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\EDC238BFF48A31D55A97E1E93892934B_C20E0DA2D0F89FE526E1490F4A2EE5AB", nBufferLength=0x105, lpBuffer=0x3bbbc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\EDC238BFF48A31D55A97E1E93892934B_C20E0DA2D0F89FE526E1490F4A2EE5AB", lpFilePart=0x0) returned 0xc1 [0196.910] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc040) returned 1 [0196.910] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\EDC238BFF48A31D55A97E1E93892934B_C20E0DA2D0F89FE526E1490F4A2EE5AB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\edc238bff48a31d55a97e1e93892934b_c20e0da2d0f89fe526e1490f4a2ee5ab"), fInfoLevelId=0x0, lpFileInformation=0x2355a48 | out: lpFileInformation=0x2355a48*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbca3121, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xbca3121, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x24efc70d, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x1aa)) returned 1 [0196.910] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc000) returned 1 [0196.910] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\EDC238BFF48A31D55A97E1E93892934B_C20E0DA2D0F89FE526E1490F4A2EE5AB", nBufferLength=0x105, lpBuffer=0x3bba20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\EDC238BFF48A31D55A97E1E93892934B_C20E0DA2D0F89FE526E1490F4A2EE5AB", lpFilePart=0x0) returned 0xc1 [0196.910] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf00) returned 1 [0196.910] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\EDC238BFF48A31D55A97E1E93892934B_C20E0DA2D0F89FE526E1490F4A2EE5AB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\edc238bff48a31d55a97e1e93892934b_c20e0da2d0f89fe526e1490f4a2ee5ab"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0196.911] GetFileType (hFile=0x444) returned 0x1 [0196.911] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbe70) returned 1 [0196.911] GetFileType (hFile=0x444) returned 0x1 [0196.911] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc098 | out: lpFileSizeHigh=0x3bc098*=0x0) returned 0x1aa [0196.911] ReadFile (in: hFile=0x444, lpBuffer=0x2356160, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bbfc8, lpOverlapped=0x0 | out: lpBuffer=0x2356160*, lpNumberOfBytesRead=0x3bbfc8*=0x1aa, lpOverlapped=0x0) returned 1 [0196.911] CloseHandle (hObject=0x444) returned 1 [0196.953] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\EDC238BFF48A31D55A97E1E93892934B_C20E0DA2D0F89FE526E1490F4A2EE5AB", nBufferLength=0x105, lpBuffer=0x3bba20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\EDC238BFF48A31D55A97E1E93892934B_C20E0DA2D0F89FE526E1490F4A2EE5AB", lpFilePart=0x0) returned 0xc1 [0196.953] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf00) returned 1 [0196.953] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\EDC238BFF48A31D55A97E1E93892934B_C20E0DA2D0F89FE526E1490F4A2EE5AB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\edc238bff48a31d55a97e1e93892934b_c20e0da2d0f89fe526e1490f4a2ee5ab"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0196.955] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8990) returned 1 [0196.956] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\EDC238BFF48A31D55A97E1E93892934B_C31B2498754E340573F1336DE607D619", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\EDC238BFF48A31D55A97E1E93892934B_C31B2498754E340573F1336DE607D619", lpFilePart=0x0) returned 0xc1 [0196.956] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0196.956] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\EDC238BFF48A31D55A97E1E93892934B_C31B2498754E340573F1336DE607D619" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\edc238bff48a31d55a97e1e93892934b_c31b2498754e340573f1336de607d619"), fInfoLevelId=0x0, lpFileInformation=0x21cf438 | out: lpFileInformation=0x21cf438*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x9c4747d, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x9c4747d, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x24efc70d, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x1ae)) returned 1 [0196.956] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0196.956] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\EDC238BFF48A31D55A97E1E93892934B_C31B2498754E340573F1336DE607D619", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\EDC238BFF48A31D55A97E1E93892934B_C31B2498754E340573F1336DE607D619", lpFilePart=0x0) returned 0xc1 [0196.956] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0196.956] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\EDC238BFF48A31D55A97E1E93892934B_C31B2498754E340573F1336DE607D619" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\edc238bff48a31d55a97e1e93892934b_c31b2498754e340573f1336de607d619"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0196.956] GetFileType (hFile=0x444) returned 0x1 [0196.956] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be400) returned 1 [0196.956] GetFileType (hFile=0x444) returned 0x1 [0196.956] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be628 | out: lpFileSizeHigh=0x3be628*=0x0) returned 0x1ae [0196.956] ReadFile (in: hFile=0x444, lpBuffer=0x21cfb50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be558, lpOverlapped=0x0 | out: lpBuffer=0x21cfb50*, lpNumberOfBytesRead=0x3be558*=0x1ae, lpOverlapped=0x0) returned 1 [0196.959] CloseHandle (hObject=0x444) returned 1 [0197.000] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\EDC238BFF48A31D55A97E1E93892934B_C31B2498754E340573F1336DE607D619", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\EDC238BFF48A31D55A97E1E93892934B_C31B2498754E340573F1336DE607D619", lpFilePart=0x0) returned 0xc1 [0197.000] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0197.001] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\EDC238BFF48A31D55A97E1E93892934B_C31B2498754E340573F1336DE607D619" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\edc238bff48a31d55a97e1e93892934b_c31b2498754e340573f1336de607d619"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0197.004] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3baf20) returned 1 [0197.005] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\EDC238BFF48A31D55A97E1E93892934B_C31B2498754E340573F1336DE607D619", nBufferLength=0x105, lpBuffer=0x3bbba0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\EDC238BFF48A31D55A97E1E93892934B_C31B2498754E340573F1336DE607D619", lpFilePart=0x0) returned 0xc1 [0197.005] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc040) returned 1 [0197.005] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\EDC238BFF48A31D55A97E1E93892934B_C31B2498754E340573F1336DE607D619" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\edc238bff48a31d55a97e1e93892934b_c31b2498754e340573f1336de607d619"), fInfoLevelId=0x0, lpFileInformation=0x3bc120 | out: lpFileInformation=0x3bc120*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x9c4747d, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x9c4747d, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x24efc70d, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x1ae)) returned 1 [0197.005] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc000) returned 1 [0197.005] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\EDC238BFF48A31D55A97E1E93892934B_C31B2498754E340573F1336DE607D619", nBufferLength=0x105, lpBuffer=0x3bbbc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\EDC238BFF48A31D55A97E1E93892934B_C31B2498754E340573F1336DE607D619", lpFilePart=0x0) returned 0xc1 [0197.005] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc040) returned 1 [0197.005] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\EDC238BFF48A31D55A97E1E93892934B_C31B2498754E340573F1336DE607D619" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\edc238bff48a31d55a97e1e93892934b_c31b2498754e340573f1336de607d619"), fInfoLevelId=0x0, lpFileInformation=0x2247f20 | out: lpFileInformation=0x2247f20*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x9c4747d, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x9c4747d, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x24efc70d, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x1ae)) returned 1 [0197.005] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc000) returned 1 [0197.005] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\EDC238BFF48A31D55A97E1E93892934B_C31B2498754E340573F1336DE607D619", nBufferLength=0x105, lpBuffer=0x3bba20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\EDC238BFF48A31D55A97E1E93892934B_C31B2498754E340573F1336DE607D619", lpFilePart=0x0) returned 0xc1 [0197.005] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf00) returned 1 [0197.005] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\EDC238BFF48A31D55A97E1E93892934B_C31B2498754E340573F1336DE607D619" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\edc238bff48a31d55a97e1e93892934b_c31b2498754e340573f1336de607d619"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0197.005] GetFileType (hFile=0x444) returned 0x1 [0197.005] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbe70) returned 1 [0197.005] GetFileType (hFile=0x444) returned 0x1 [0197.005] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc098 | out: lpFileSizeHigh=0x3bc098*=0x0) returned 0x1ae [0197.006] ReadFile (in: hFile=0x444, lpBuffer=0x2248638, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bbfc8, lpOverlapped=0x0 | out: lpBuffer=0x2248638*, lpNumberOfBytesRead=0x3bbfc8*=0x1ae, lpOverlapped=0x0) returned 1 [0197.006] CloseHandle (hObject=0x444) returned 1 [0197.044] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\EDC238BFF48A31D55A97E1E93892934B_C31B2498754E340573F1336DE607D619", nBufferLength=0x105, lpBuffer=0x3bba20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\EDC238BFF48A31D55A97E1E93892934B_C31B2498754E340573F1336DE607D619", lpFilePart=0x0) returned 0xc1 [0197.044] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf00) returned 1 [0197.044] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\EDC238BFF48A31D55A97E1E93892934B_C31B2498754E340573F1336DE607D619" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\edc238bff48a31d55a97e1e93892934b_c31b2498754e340573f1336de607d619"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0197.045] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8990) returned 1 [0197.046] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749", lpFilePart=0x0) returned 0xa0 [0197.046] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0197.046] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\fb0d848f74f70bb2eaa93746d24d9749"), fInfoLevelId=0x0, lpFileInformation=0x22c0868 | out: lpFileInformation=0x22c0868*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xac17a3, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xac17a3, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xac17a3, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x122)) returned 1 [0197.046] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0197.046] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749", lpFilePart=0x0) returned 0xa0 [0197.046] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0197.046] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\fb0d848f74f70bb2eaa93746d24d9749"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0197.047] GetFileType (hFile=0x444) returned 0x1 [0197.047] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be400) returned 1 [0197.047] GetFileType (hFile=0x444) returned 0x1 [0197.047] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be628 | out: lpFileSizeHigh=0x3be628*=0x0) returned 0x122 [0197.047] ReadFile (in: hFile=0x444, lpBuffer=0x22c0df8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be558, lpOverlapped=0x0 | out: lpBuffer=0x22c0df8*, lpNumberOfBytesRead=0x3be558*=0x122, lpOverlapped=0x0) returned 1 [0197.047] CloseHandle (hObject=0x444) returned 1 [0197.083] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749", lpFilePart=0x0) returned 0xa0 [0197.083] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0197.083] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\fb0d848f74f70bb2eaa93746d24d9749"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0197.084] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3baf20) returned 1 [0197.085] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749", nBufferLength=0x105, lpBuffer=0x3bbba0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749", lpFilePart=0x0) returned 0xa0 [0197.085] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc040) returned 1 [0197.085] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\fb0d848f74f70bb2eaa93746d24d9749"), fInfoLevelId=0x0, lpFileInformation=0x3bc120 | out: lpFileInformation=0x3bc120*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xac17a3, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xac17a3, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xac17a3, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x122)) returned 1 [0197.085] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc000) returned 1 [0197.085] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749", nBufferLength=0x105, lpBuffer=0x3bbbc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749", lpFilePart=0x0) returned 0xa0 [0197.085] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc040) returned 1 [0197.085] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\fb0d848f74f70bb2eaa93746d24d9749"), fInfoLevelId=0x0, lpFileInformation=0x2338e50 | out: lpFileInformation=0x2338e50*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xac17a3, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xac17a3, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xac17a3, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x122)) returned 1 [0197.085] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc000) returned 1 [0197.085] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749", nBufferLength=0x105, lpBuffer=0x3bba20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749", lpFilePart=0x0) returned 0xa0 [0197.085] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf00) returned 1 [0197.085] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\fb0d848f74f70bb2eaa93746d24d9749"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0197.085] GetFileType (hFile=0x444) returned 0x1 [0197.085] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbe70) returned 1 [0197.085] GetFileType (hFile=0x444) returned 0x1 [0197.085] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc098 | out: lpFileSizeHigh=0x3bc098*=0x0) returned 0x122 [0197.086] ReadFile (in: hFile=0x444, lpBuffer=0x23393e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bbfc8, lpOverlapped=0x0 | out: lpBuffer=0x23393e0*, lpNumberOfBytesRead=0x3bbfc8*=0x122, lpOverlapped=0x0) returned 1 [0197.086] CloseHandle (hObject=0x444) returned 1 [0197.129] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749", nBufferLength=0x105, lpBuffer=0x3bba20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749", lpFilePart=0x0) returned 0xa0 [0197.129] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf00) returned 1 [0197.129] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\fb0d848f74f70bb2eaa93746d24d9749"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0197.130] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8990) returned 1 [0197.131] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0197.131] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\SystemCertificates", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\SystemCertificates", lpFilePart=0x0) returned 0x78 [0197.131] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\SystemCertificates\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\SystemCertificates\\", lpFilePart=0x0) returned 0x79 [0197.131] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\SystemCertificates\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d7610 [0197.132] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0197.132] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0197.132] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0197.132] FindClose (in: hFindFile=0x5d7610 | out: hFindFile=0x5d7610) returned 1 [0197.132] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0197.132] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0197.132] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0197.132] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\SystemCertificates", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\SystemCertificates", lpFilePart=0x0) returned 0x78 [0197.132] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\SystemCertificates\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\SystemCertificates\\", lpFilePart=0x0) returned 0x79 [0197.132] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\SystemCertificates\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d7550 [0197.133] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0197.133] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0197.133] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0197.133] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0197.133] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0197.133] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0197.133] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0197.133] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\SystemCertificates\\My", nBufferLength=0x105, lpBuffer=0x3be130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\SystemCertificates\\My", lpFilePart=0x0) returned 0x7b [0197.133] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\SystemCertificates\\My\\", nBufferLength=0x105, lpBuffer=0x3be0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\SystemCertificates\\My\\", lpFilePart=0x0) returned 0x7c [0197.133] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\SystemCertificates\\My\\*", lpFindFileData=0x3be2e0 | out: lpFindFileData=0x3be2e0) returned 0x5d7d90 [0197.133] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0197.133] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0197.134] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0197.134] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0197.134] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 0 [0197.134] FindClose (in: hFindFile=0x5d7d90 | out: hFindFile=0x5d7d90) returned 1 [0197.134] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0197.134] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0197.134] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0197.134] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\SystemCertificates\\My", nBufferLength=0x105, lpBuffer=0x3be130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\SystemCertificates\\My", lpFilePart=0x0) returned 0x7b [0197.134] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\SystemCertificates\\My\\", nBufferLength=0x105, lpBuffer=0x3be0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\SystemCertificates\\My\\", lpFilePart=0x0) returned 0x7c [0197.134] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\SystemCertificates\\My\\*", lpFindFileData=0x3be2e0 | out: lpFindFileData=0x3be2e0) returned 0x5d7cd0 [0197.134] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0197.135] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0197.135] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0197.135] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0197.135] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 0 [0197.135] FindClose (in: hFindFile=0x5d7cd0 | out: hFindFile=0x5d7cd0) returned 1 [0197.135] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0197.135] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0197.135] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0197.135] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\SystemCertificates\\My\\Certificates", nBufferLength=0x105, lpBuffer=0x3be0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\SystemCertificates\\My\\Certificates", lpFilePart=0x0) returned 0x88 [0197.135] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\SystemCertificates\\My\\Certificates\\", nBufferLength=0x105, lpBuffer=0x3be060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\SystemCertificates\\My\\Certificates\\", lpFilePart=0x0) returned 0x89 [0197.135] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\SystemCertificates\\My\\Certificates\\*", lpFindFileData=0x3be270 | out: lpFindFileData=0x3be270) returned 0x5d7610 [0197.138] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0197.138] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 0 [0197.138] FindClose (in: hFindFile=0x5d7610 | out: hFindFile=0x5d7610) returned 1 [0197.138] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0197.138] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0197.138] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0197.138] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\SystemCertificates\\My\\Certificates", nBufferLength=0x105, lpBuffer=0x3be0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\SystemCertificates\\My\\Certificates", lpFilePart=0x0) returned 0x88 [0197.138] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\SystemCertificates\\My\\Certificates\\", nBufferLength=0x105, lpBuffer=0x3be060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\SystemCertificates\\My\\Certificates\\", lpFilePart=0x0) returned 0x89 [0197.138] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\SystemCertificates\\My\\Certificates\\*", lpFindFileData=0x3be270 | out: lpFindFileData=0x3be270) returned 0x5d81b0 [0197.138] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0197.138] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 0 [0197.139] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0197.139] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0197.139] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0197.139] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0197.139] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\SystemCertificates\\My\\CRLs", nBufferLength=0x105, lpBuffer=0x3be0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\SystemCertificates\\My\\CRLs", lpFilePart=0x0) returned 0x80 [0197.139] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\SystemCertificates\\My\\CRLs\\", nBufferLength=0x105, lpBuffer=0x3be060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\SystemCertificates\\My\\CRLs\\", lpFilePart=0x0) returned 0x81 [0197.139] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\SystemCertificates\\My\\CRLs\\*", lpFindFileData=0x3be270 | out: lpFindFileData=0x3be270) returned 0x5d81b0 [0197.139] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0197.139] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 0 [0197.139] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0197.139] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0197.139] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0197.139] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0197.139] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\SystemCertificates\\My\\CRLs", nBufferLength=0x105, lpBuffer=0x3be0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\SystemCertificates\\My\\CRLs", lpFilePart=0x0) returned 0x80 [0197.139] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\SystemCertificates\\My\\CRLs\\", nBufferLength=0x105, lpBuffer=0x3be060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\SystemCertificates\\My\\CRLs\\", lpFilePart=0x0) returned 0x81 [0197.139] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\SystemCertificates\\My\\CRLs\\*", lpFindFileData=0x3be270 | out: lpFindFileData=0x3be270) returned 0x5d81b0 [0197.140] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0197.140] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 0 [0197.140] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0197.140] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0197.140] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0197.140] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0197.140] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\SystemCertificates\\My\\CTLs", nBufferLength=0x105, lpBuffer=0x3be0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\SystemCertificates\\My\\CTLs", lpFilePart=0x0) returned 0x80 [0197.140] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\SystemCertificates\\My\\CTLs\\", nBufferLength=0x105, lpBuffer=0x3be060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\SystemCertificates\\My\\CTLs\\", lpFilePart=0x0) returned 0x81 [0197.140] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\SystemCertificates\\My\\CTLs\\*", lpFindFileData=0x3be270 | out: lpFindFileData=0x3be270) returned 0x5d75b0 [0197.140] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0197.140] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 0 [0197.141] FindClose (in: hFindFile=0x5d75b0 | out: hFindFile=0x5d75b0) returned 1 [0197.141] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0197.141] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0197.141] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0197.141] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\SystemCertificates\\My\\CTLs", nBufferLength=0x105, lpBuffer=0x3be0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\SystemCertificates\\My\\CTLs", lpFilePart=0x0) returned 0x80 [0197.141] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\SystemCertificates\\My\\CTLs\\", nBufferLength=0x105, lpBuffer=0x3be060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\SystemCertificates\\My\\CTLs\\", lpFilePart=0x0) returned 0x81 [0197.141] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\SystemCertificates\\My\\CTLs\\*", lpFindFileData=0x3be270 | out: lpFindFileData=0x3be270) returned 0x5d79d0 [0197.141] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0197.141] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 0 [0197.141] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0197.141] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0197.141] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0197.141] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0197.141] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\Windows", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\Windows", lpFilePart=0x0) returned 0x6d [0197.141] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\Windows\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\Windows\\", lpFilePart=0x0) returned 0x6e [0197.141] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\Windows\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d7c70 [0197.142] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0197.142] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0197.142] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0197.142] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0197.142] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0197.142] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0197.142] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0197.142] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\Windows", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\Windows", lpFilePart=0x0) returned 0x6d [0197.142] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\Windows\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\Windows\\", lpFilePart=0x0) returned 0x6e [0197.142] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\Windows\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d79d0 [0197.142] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0197.143] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0197.143] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0197.143] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0197.143] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0197.143] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0197.143] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0197.143] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\Windows\\1605653898", nBufferLength=0x105, lpBuffer=0x3be130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\Windows\\1605653898", lpFilePart=0x0) returned 0x78 [0197.143] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\Windows\\1605653898\\", nBufferLength=0x105, lpBuffer=0x3be0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\Windows\\1605653898\\", lpFilePart=0x0) returned 0x79 [0197.143] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\Windows\\1605653898\\*", lpFindFileData=0x3be2e0 | out: lpFindFileData=0x3be2e0) returned 0x5d7d90 [0197.143] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0197.143] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0197.143] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 0 [0197.144] FindClose (in: hFindFile=0x5d7d90 | out: hFindFile=0x5d7d90) returned 1 [0197.144] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0197.144] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0197.144] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0197.144] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\Windows\\1605653898", nBufferLength=0x105, lpBuffer=0x3be130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\Windows\\1605653898", lpFilePart=0x0) returned 0x78 [0197.144] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\Windows\\1605653898\\", nBufferLength=0x105, lpBuffer=0x3be0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\Windows\\1605653898\\", lpFilePart=0x0) returned 0x79 [0197.144] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\Windows\\1605653898\\*", lpFindFileData=0x3be2e0 | out: lpFindFileData=0x3be2e0) returned 0x5d7670 [0197.144] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0197.144] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0197.144] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 0 [0197.144] FindClose (in: hFindFile=0x5d7670 | out: hFindFile=0x5d7670) returned 1 [0197.144] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0197.144] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0197.144] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\Windows\\1605653898\\4275773285.pri", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\Windows\\1605653898\\4275773285.pri", lpFilePart=0x0) returned 0x87 [0197.145] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0197.145] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\Windows\\1605653898\\4275773285.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\windows\\1605653898\\4275773285.pri"), fInfoLevelId=0x0, lpFileInformation=0x21c4c00 | out: lpFileInformation=0x21c4c00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xff73f6cb, ftCreationTime.dwHighDateTime=0x1d2d432, ftLastAccessTime.dwLowDateTime=0xff73f6cb, ftLastAccessTime.dwHighDateTime=0x1d2d432, ftLastWriteTime.dwLowDateTime=0xff73f6cb, ftLastWriteTime.dwHighDateTime=0x1d2d432, nFileSizeHigh=0x0, nFileSizeLow=0x16dc8)) returned 1 [0197.145] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0197.145] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\Windows\\1605653898\\4275773285.pri", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\Windows\\1605653898\\4275773285.pri", lpFilePart=0x0) returned 0x87 [0197.145] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0197.145] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\Windows\\1605653898\\4275773285.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\windows\\1605653898\\4275773285.pri"), fInfoLevelId=0x0, lpFileInformation=0x21c4dc8 | out: lpFileInformation=0x21c4dc8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xff73f6cb, ftCreationTime.dwHighDateTime=0x1d2d432, ftLastAccessTime.dwLowDateTime=0xff73f6cb, ftLastAccessTime.dwHighDateTime=0x1d2d432, ftLastWriteTime.dwLowDateTime=0xff73f6cb, ftLastWriteTime.dwHighDateTime=0x1d2d432, nFileSizeHigh=0x0, nFileSizeLow=0x16dc8)) returned 1 [0197.145] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0197.145] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\Windows\\1605653898\\4275773285.pri", nBufferLength=0x105, lpBuffer=0x3be040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\Windows\\1605653898\\4275773285.pri", lpFilePart=0x0) returned 0x87 [0197.145] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0197.145] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\Windows\\1605653898\\4275773285.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\windows\\1605653898\\4275773285.pri"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0197.146] GetFileType (hFile=0x444) returned 0x1 [0197.146] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be490) returned 1 [0197.146] GetFileType (hFile=0x444) returned 0x1 [0197.146] ReadFile (in: hFile=0x444, lpBuffer=0x21c7288, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5a8, lpOverlapped=0x0 | out: lpBuffer=0x21c7288*, lpNumberOfBytesRead=0x3be5a8*=0x1000, lpOverlapped=0x0) returned 1 [0197.192] CloseHandle (hObject=0x444) returned 1 [0197.192] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\Windows\\1605653898\\4275773285.pri", nBufferLength=0x105, lpBuffer=0x3be040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\Windows\\1605653898\\4275773285.pri", lpFilePart=0x0) returned 0x87 [0197.192] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0197.192] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\Windows\\1605653898\\4275773285.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\windows\\1605653898\\4275773285.pri"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0197.192] GetFileType (hFile=0x444) returned 0x1 [0197.192] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be490) returned 1 [0197.192] GetFileType (hFile=0x444) returned 0x1 [0197.192] WriteFile (in: hFile=0x444, lpBuffer=0x21c4f70*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be658, lpOverlapped=0x0 | out: lpBuffer=0x21c4f70*, lpNumberOfBytesWritten=0x3be658*=0x2000, lpOverlapped=0x0) returned 1 [0197.192] CloseHandle (hObject=0x444) returned 1 [0197.192] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\Windows\\1605653898\\4275773285.pri", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\Windows\\1605653898\\4275773285.pri", lpFilePart=0x0) returned 0x87 [0197.192] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\Windows\\1605653898\\4275773285.pri.xuy", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\Windows\\1605653898\\4275773285.pri.xuy", lpFilePart=0x0) returned 0x8b [0197.192] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0197.193] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\Windows\\1605653898\\4275773285.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\windows\\1605653898\\4275773285.pri"), fInfoLevelId=0x0, lpFileInformation=0x3be670 | out: lpFileInformation=0x3be670*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xff73f6cb, ftCreationTime.dwHighDateTime=0x1d2d432, ftLastAccessTime.dwLowDateTime=0xff73f6cb, ftLastAccessTime.dwHighDateTime=0x1d2d432, ftLastWriteTime.dwLowDateTime=0x6161ddf1, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x16dc8)) returned 1 [0197.193] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0197.193] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\Windows\\1605653898\\4275773285.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\windows\\1605653898\\4275773285.pri"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\Windows\\1605653898\\4275773285.pri.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\windows\\1605653898\\4275773285.pri.xuy")) returned 1 [0197.194] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0197.194] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge", lpFilePart=0x0) returned 0x69 [0197.194] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\", lpFilePart=0x0) returned 0x6a [0197.194] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d7c70 [0197.194] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0197.194] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0197.195] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0197.195] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0197.195] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0197.195] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0197.195] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0197.195] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0197.195] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0197.195] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0197.195] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0197.196] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0197.196] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0197.196] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0197.196] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge", lpFilePart=0x0) returned 0x69 [0197.196] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\", lpFilePart=0x0) returned 0x6a [0197.196] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d7c70 [0197.196] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0197.196] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0197.196] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0197.196] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0197.196] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0197.196] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0197.196] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0197.197] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0197.197] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0197.197] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0197.197] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0197.197] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0197.197] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0197.197] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\MSIMGSIZ.DAT", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\MSIMGSIZ.DAT", lpFilePart=0x0) returned 0x76 [0197.197] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0197.197] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\MSIMGSIZ.DAT" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\msimgsiz.dat"), fInfoLevelId=0x0, lpFileInformation=0x2248450 | out: lpFileInformation=0x2248450*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x81eaf96, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x81eaf96, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x81eaf96, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0xbfe0)) returned 1 [0197.199] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0197.199] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\MSIMGSIZ.DAT", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\MSIMGSIZ.DAT", lpFilePart=0x0) returned 0x76 [0197.199] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0197.199] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\MSIMGSIZ.DAT" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\msimgsiz.dat"), fInfoLevelId=0x0, lpFileInformation=0x22485f8 | out: lpFileInformation=0x22485f8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x81eaf96, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x81eaf96, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x81eaf96, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0xbfe0)) returned 1 [0197.199] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0197.199] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\MSIMGSIZ.DAT", nBufferLength=0x105, lpBuffer=0x3be120, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\MSIMGSIZ.DAT", lpFilePart=0x0) returned 0x76 [0197.199] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0197.199] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\MSIMGSIZ.DAT" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\msimgsiz.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0197.200] GetFileType (hFile=0x444) returned 0x1 [0197.200] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be570) returned 1 [0197.200] GetFileType (hFile=0x444) returned 0x1 [0197.200] ReadFile (in: hFile=0x444, lpBuffer=0x224aa78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be688, lpOverlapped=0x0 | out: lpBuffer=0x224aa78*, lpNumberOfBytesRead=0x3be688*=0x1000, lpOverlapped=0x0) returned 1 [0197.219] CloseHandle (hObject=0x444) returned 1 [0197.219] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\MSIMGSIZ.DAT", nBufferLength=0x105, lpBuffer=0x3be120, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\MSIMGSIZ.DAT", lpFilePart=0x0) returned 0x76 [0197.219] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0197.219] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\MSIMGSIZ.DAT" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\msimgsiz.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0197.219] GetFileType (hFile=0x444) returned 0x1 [0197.219] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be570) returned 1 [0197.219] GetFileType (hFile=0x444) returned 0x1 [0197.219] WriteFile (in: hFile=0x444, lpBuffer=0x2248780*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be738, lpOverlapped=0x0 | out: lpBuffer=0x2248780*, lpNumberOfBytesWritten=0x3be738*=0x2000, lpOverlapped=0x0) returned 1 [0197.219] CloseHandle (hObject=0x444) returned 1 [0197.220] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\MSIMGSIZ.DAT", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\MSIMGSIZ.DAT", lpFilePart=0x0) returned 0x76 [0197.220] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\MSIMGSIZ.DAT.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\MSIMGSIZ.DAT.xuy", lpFilePart=0x0) returned 0x7a [0197.220] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0197.220] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\MSIMGSIZ.DAT" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\msimgsiz.dat"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x81eaf96, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x81eaf96, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x61669e81, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xbfe0)) returned 1 [0197.220] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0197.220] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\MSIMGSIZ.DAT" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\msimgsiz.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\MSIMGSIZ.DAT.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\msimgsiz.dat.xuy")) returned 1 [0197.221] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0197.221] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cache", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cache", lpFilePart=0x0) returned 0x6f [0197.221] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cache\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cache\\", lpFilePart=0x0) returned 0x70 [0197.221] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cache\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d7eb0 [0197.221] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0197.222] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0197.222] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0197.222] FindClose (in: hFindFile=0x5d7eb0 | out: hFindFile=0x5d7eb0) returned 1 [0197.222] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0197.222] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0197.222] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0197.222] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cache", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cache", lpFilePart=0x0) returned 0x6f [0197.222] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cache\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cache\\", lpFilePart=0x0) returned 0x70 [0197.222] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cache\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d78b0 [0197.222] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0197.222] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0197.222] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0197.223] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0197.223] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0197.223] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0197.223] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cache\\container.dat", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cache\\container.dat", lpFilePart=0x0) returned 0x7d [0197.223] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0197.223] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cache\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x22c98d0 | out: lpFileInformation=0x22c98d0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xffaa1b33, ftCreationTime.dwHighDateTime=0x1d2d432, ftLastAccessTime.dwLowDateTime=0xffaa1b33, ftLastAccessTime.dwHighDateTime=0x1d2d432, ftLastWriteTime.dwLowDateTime=0xffaa1b33, ftLastWriteTime.dwHighDateTime=0x1d2d432, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0197.223] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0197.223] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cache\\container.dat", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cache\\container.dat", lpFilePart=0x0) returned 0x7d [0197.223] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0197.223] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cache\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0197.223] GetFileType (hFile=0x444) returned 0x1 [0197.223] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0197.223] GetFileType (hFile=0x444) returned 0x1 [0197.223] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x0 [0197.223] CloseHandle (hObject=0x444) returned 1 [0197.235] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cache\\container.dat", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cache\\container.dat", lpFilePart=0x0) returned 0x7d [0197.235] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0197.235] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cache\\container.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0197.236] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3baf90) returned 1 [0197.237] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cache\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbc10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cache\\container.dat", lpFilePart=0x0) returned 0x7d [0197.237] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0b0) returned 1 [0197.237] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cache\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x3bc190 | out: lpFileInformation=0x3bc190*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xffaa1b33, ftCreationTime.dwHighDateTime=0x1d2d432, ftLastAccessTime.dwLowDateTime=0xffaa1b33, ftLastAccessTime.dwHighDateTime=0x1d2d432, ftLastWriteTime.dwLowDateTime=0xffaa1b33, ftLastWriteTime.dwHighDateTime=0x1d2d432, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0197.237] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc070) returned 1 [0197.237] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cache\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbc30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cache\\container.dat", lpFilePart=0x0) returned 0x7d [0197.237] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0b0) returned 1 [0197.237] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cache\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x23406c8 | out: lpFileInformation=0x23406c8*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xffaa1b33, ftCreationTime.dwHighDateTime=0x1d2d432, ftLastAccessTime.dwLowDateTime=0xffaa1b33, ftLastAccessTime.dwHighDateTime=0x1d2d432, ftLastWriteTime.dwLowDateTime=0xffaa1b33, ftLastWriteTime.dwHighDateTime=0x1d2d432, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0197.237] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc070) returned 1 [0197.237] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cache\\container.dat", nBufferLength=0x105, lpBuffer=0x3bba90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cache\\container.dat", lpFilePart=0x0) returned 0x7d [0197.237] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf70) returned 1 [0197.237] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cache\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0197.237] GetFileType (hFile=0x444) returned 0x1 [0197.237] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbee0) returned 1 [0197.237] GetFileType (hFile=0x444) returned 0x1 [0197.237] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc108 | out: lpFileSizeHigh=0x3bc108*=0x0) returned 0x0 [0197.237] CloseHandle (hObject=0x444) returned 1 [0197.280] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cache\\container.dat", nBufferLength=0x105, lpBuffer=0x3bba90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cache\\container.dat", lpFilePart=0x0) returned 0x7d [0197.281] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf70) returned 1 [0197.281] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cache\\container.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0197.282] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8a00) returned 1 [0197.283] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0197.283] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies", lpFilePart=0x0) returned 0x71 [0197.283] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\", lpFilePart=0x0) returned 0x72 [0197.283] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d79d0 [0197.284] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0197.284] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0197.284] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0197.284] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0197.284] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0197.284] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0197.285] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0197.285] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0197.285] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0197.285] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0197.285] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0197.285] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0197.285] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0197.285] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0197.285] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0197.286] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0197.286] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0197.286] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0197.286] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies", lpFilePart=0x0) returned 0x71 [0197.286] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\", lpFilePart=0x0) returned 0x72 [0197.286] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d7fd0 [0197.287] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0197.287] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0197.287] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0197.287] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0197.288] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0197.288] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0197.288] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0197.288] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0197.288] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0197.288] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0197.288] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0197.288] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0197.289] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0197.289] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0197.289] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0197.289] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0197.289] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0197.289] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\1ZJA02JO.txt", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\1ZJA02JO.txt", lpFilePart=0x0) returned 0x7e [0197.289] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0197.290] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\1ZJA02JO.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cookies\\1zja02jo.txt"), fInfoLevelId=0x0, lpFileInformation=0x21befb8 | out: lpFileInformation=0x21befb8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x92bde19, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x92bde19, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x92bde19, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x6f)) returned 1 [0197.290] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0197.290] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\1ZJA02JO.txt", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\1ZJA02JO.txt", lpFilePart=0x0) returned 0x7e [0197.291] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0197.291] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\1ZJA02JO.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cookies\\1zja02jo.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0197.291] GetFileType (hFile=0x444) returned 0x1 [0197.291] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0197.291] GetFileType (hFile=0x444) returned 0x1 [0197.291] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x6f [0197.291] ReadFile (in: hFile=0x444, lpBuffer=0x21bf3b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x21bf3b0*, lpNumberOfBytesRead=0x3be5c8*=0x6f, lpOverlapped=0x0) returned 1 [0197.292] CloseHandle (hObject=0x444) returned 1 [0197.337] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\1ZJA02JO.txt", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\1ZJA02JO.txt", lpFilePart=0x0) returned 0x7e [0197.337] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0197.337] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\1ZJA02JO.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cookies\\1zja02jo.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0197.340] GetFileType (hFile=0x444) returned 0x1 [0197.340] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0197.340] GetFileType (hFile=0x444) returned 0x1 [0197.340] WriteFile (in: hFile=0x444, lpBuffer=0x22365f0*, nNumberOfBytesToWrite=0x70, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x22365f0*, lpNumberOfBytesWritten=0x3be4d8*=0x70, lpOverlapped=0x0) returned 1 [0197.341] CloseHandle (hObject=0x444) returned 1 [0197.341] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\1ZJA02JO.txt", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\1ZJA02JO.txt", lpFilePart=0x0) returned 0x7e [0197.341] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\1ZJA02JO.txt.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\1ZJA02JO.txt.xuy", lpFilePart=0x0) returned 0x82 [0197.341] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0197.341] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\1ZJA02JO.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cookies\\1zja02jo.txt"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x92bde19, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x92bde19, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x6179ca38, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x70)) returned 1 [0197.341] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0197.341] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\1ZJA02JO.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cookies\\1zja02jo.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\1ZJA02JO.txt.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cookies\\1zja02jo.txt.xuy")) returned 1 [0197.343] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\268TPJIA.txt", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\268TPJIA.txt", lpFilePart=0x0) returned 0x7e [0197.343] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0197.343] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\268TPJIA.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cookies\\268tpjia.txt"), fInfoLevelId=0x0, lpFileInformation=0x22379a8 | out: lpFileInformation=0x22379a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x92bde19, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x92bde19, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x92bde19, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x26c)) returned 1 [0197.343] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0197.343] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\268TPJIA.txt", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\268TPJIA.txt", lpFilePart=0x0) returned 0x7e [0197.343] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0197.343] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\268TPJIA.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cookies\\268tpjia.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0197.343] GetFileType (hFile=0x444) returned 0x1 [0197.343] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0197.343] GetFileType (hFile=0x444) returned 0x1 [0197.343] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x26c [0197.343] ReadFile (in: hFile=0x444, lpBuffer=0x2237fa0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x2237fa0*, lpNumberOfBytesRead=0x3be5c8*=0x26c, lpOverlapped=0x0) returned 1 [0197.344] CloseHandle (hObject=0x444) returned 1 [0197.354] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\268TPJIA.txt", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\268TPJIA.txt", lpFilePart=0x0) returned 0x7e [0197.354] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0197.354] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\268TPJIA.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cookies\\268tpjia.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0197.356] GetFileType (hFile=0x444) returned 0x1 [0197.356] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0197.356] GetFileType (hFile=0x444) returned 0x1 [0197.356] WriteFile (in: hFile=0x444, lpBuffer=0x22afc18*, nNumberOfBytesToWrite=0x270, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x22afc18*, lpNumberOfBytesWritten=0x3be4d8*=0x270, lpOverlapped=0x0) returned 1 [0197.357] CloseHandle (hObject=0x444) returned 1 [0197.357] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\268TPJIA.txt", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\268TPJIA.txt", lpFilePart=0x0) returned 0x7e [0197.357] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\268TPJIA.txt.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\268TPJIA.txt.xuy", lpFilePart=0x0) returned 0x82 [0197.357] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0197.357] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\268TPJIA.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cookies\\268tpjia.txt"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x92bde19, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x92bde19, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x617c1357, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x270)) returned 1 [0197.357] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0197.357] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\268TPJIA.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cookies\\268tpjia.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\268TPJIA.txt.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cookies\\268tpjia.txt.xuy")) returned 1 [0197.383] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\6KWA3R8C.txt", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\6KWA3R8C.txt", lpFilePart=0x0) returned 0x7e [0197.383] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0197.383] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\6KWA3R8C.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cookies\\6kwa3r8c.txt"), fInfoLevelId=0x0, lpFileInformation=0x22b0fd0 | out: lpFileInformation=0x22b0fd0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x122b55d, ftCreationTime.dwHighDateTime=0x1d2fc25, ftLastAccessTime.dwLowDateTime=0x122b55d, ftLastAccessTime.dwHighDateTime=0x1d2fc25, ftLastWriteTime.dwLowDateTime=0x122b55d, ftLastWriteTime.dwHighDateTime=0x1d2fc25, nFileSizeHigh=0x0, nFileSizeLow=0x4d)) returned 1 [0197.383] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0197.383] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\6KWA3R8C.txt", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\6KWA3R8C.txt", lpFilePart=0x0) returned 0x7e [0197.383] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0197.383] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\6KWA3R8C.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cookies\\6kwa3r8c.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0197.383] GetFileType (hFile=0x444) returned 0x1 [0197.383] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0197.383] GetFileType (hFile=0x444) returned 0x1 [0197.383] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x4d [0197.384] ReadFile (in: hFile=0x444, lpBuffer=0x22b13a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x22b13a8*, lpNumberOfBytesRead=0x3be5c8*=0x4d, lpOverlapped=0x0) returned 1 [0197.384] CloseHandle (hObject=0x444) returned 1 [0197.395] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\6KWA3R8C.txt", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\6KWA3R8C.txt", lpFilePart=0x0) returned 0x7e [0197.395] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0197.395] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\6KWA3R8C.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cookies\\6kwa3r8c.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0197.397] GetFileType (hFile=0x444) returned 0x1 [0197.397] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0197.397] GetFileType (hFile=0x444) returned 0x1 [0197.397] WriteFile (in: hFile=0x444, lpBuffer=0x23285a8*, nNumberOfBytesToWrite=0x50, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x23285a8*, lpNumberOfBytesWritten=0x3be4d8*=0x50, lpOverlapped=0x0) returned 1 [0197.398] CloseHandle (hObject=0x444) returned 1 [0197.398] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\6KWA3R8C.txt", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\6KWA3R8C.txt", lpFilePart=0x0) returned 0x7e [0197.398] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\6KWA3R8C.txt.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\6KWA3R8C.txt.xuy", lpFilePart=0x0) returned 0x82 [0197.398] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0197.398] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\6KWA3R8C.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cookies\\6kwa3r8c.txt"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x122b55d, ftCreationTime.dwHighDateTime=0x1d2fc25, ftLastAccessTime.dwLowDateTime=0x122b55d, ftLastAccessTime.dwHighDateTime=0x1d2fc25, ftLastWriteTime.dwLowDateTime=0x6180db05, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x50)) returned 1 [0197.398] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0197.398] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\6KWA3R8C.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cookies\\6kwa3r8c.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\6KWA3R8C.txt.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cookies\\6kwa3r8c.txt.xuy")) returned 1 [0197.400] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\85DGK2J5.txt", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\85DGK2J5.txt", lpFilePart=0x0) returned 0x7e [0197.400] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0197.400] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\85DGK2J5.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cookies\\85dgk2j5.txt"), fInfoLevelId=0x0, lpFileInformation=0x2329960 | out: lpFileInformation=0x2329960*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x96ea008, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x96ea008, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x96ea008, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0xd5)) returned 1 [0197.400] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0197.400] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\85DGK2J5.txt", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\85DGK2J5.txt", lpFilePart=0x0) returned 0x7e [0197.400] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0197.400] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\85DGK2J5.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cookies\\85dgk2j5.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0197.400] GetFileType (hFile=0x444) returned 0x1 [0197.400] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0197.400] GetFileType (hFile=0x444) returned 0x1 [0197.400] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xd5 [0197.400] ReadFile (in: hFile=0x444, lpBuffer=0x2329dc0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x2329dc0*, lpNumberOfBytesRead=0x3be5c8*=0xd5, lpOverlapped=0x0) returned 1 [0197.401] CloseHandle (hObject=0x444) returned 1 [0197.443] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\85DGK2J5.txt", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\85DGK2J5.txt", lpFilePart=0x0) returned 0x7e [0197.443] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0197.443] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\85DGK2J5.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cookies\\85dgk2j5.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0197.445] GetFileType (hFile=0x444) returned 0x1 [0197.445] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0197.445] GetFileType (hFile=0x444) returned 0x1 [0197.445] WriteFile (in: hFile=0x444, lpBuffer=0x21a2778*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x21a2778*, lpNumberOfBytesWritten=0x3be4d8*=0xe0, lpOverlapped=0x0) returned 1 [0197.446] CloseHandle (hObject=0x444) returned 1 [0197.446] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\85DGK2J5.txt", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\85DGK2J5.txt", lpFilePart=0x0) returned 0x7e [0197.446] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\85DGK2J5.txt.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\85DGK2J5.txt.xuy", lpFilePart=0x0) returned 0x82 [0197.446] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0197.446] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\85DGK2J5.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cookies\\85dgk2j5.txt"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x96ea008, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x96ea008, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x61880028, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1 [0197.446] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0197.446] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\85DGK2J5.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cookies\\85dgk2j5.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\85DGK2J5.txt.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cookies\\85dgk2j5.txt.xuy")) returned 1 [0197.448] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\container.dat", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\container.dat", lpFilePart=0x0) returned 0x7f [0197.448] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0197.448] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cookies\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x21a3b30 | out: lpFileInformation=0x21a3b30*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xff29f9d2, ftCreationTime.dwHighDateTime=0x1d2d432, ftLastAccessTime.dwLowDateTime=0xff29f9d2, ftLastAccessTime.dwHighDateTime=0x1d2d432, ftLastWriteTime.dwLowDateTime=0xff29f9d2, ftLastWriteTime.dwHighDateTime=0x1d2d432, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0197.448] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0197.448] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\container.dat", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\container.dat", lpFilePart=0x0) returned 0x7f [0197.448] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0197.448] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cookies\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0197.448] GetFileType (hFile=0x444) returned 0x1 [0197.448] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0197.448] GetFileType (hFile=0x444) returned 0x1 [0197.448] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x0 [0197.448] CloseHandle (hObject=0x444) returned 1 [0197.458] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\container.dat", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\container.dat", lpFilePart=0x0) returned 0x7f [0197.458] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0197.459] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cookies\\container.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0197.460] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3baf90) returned 1 [0197.460] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbc10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\container.dat", lpFilePart=0x0) returned 0x7f [0197.460] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0b0) returned 1 [0197.460] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cookies\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x3bc190 | out: lpFileInformation=0x3bc190*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xff29f9d2, ftCreationTime.dwHighDateTime=0x1d2d432, ftLastAccessTime.dwLowDateTime=0xff29f9d2, ftLastAccessTime.dwHighDateTime=0x1d2d432, ftLastWriteTime.dwLowDateTime=0xff29f9d2, ftLastWriteTime.dwHighDateTime=0x1d2d432, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0197.460] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc070) returned 1 [0197.460] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbc30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\container.dat", lpFilePart=0x0) returned 0x7f [0197.460] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0b0) returned 1 [0197.460] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cookies\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x221a928 | out: lpFileInformation=0x221a928*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xff29f9d2, ftCreationTime.dwHighDateTime=0x1d2d432, ftLastAccessTime.dwLowDateTime=0xff29f9d2, ftLastAccessTime.dwHighDateTime=0x1d2d432, ftLastWriteTime.dwLowDateTime=0xff29f9d2, ftLastWriteTime.dwHighDateTime=0x1d2d432, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0197.461] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc070) returned 1 [0197.461] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\container.dat", nBufferLength=0x105, lpBuffer=0x3bba90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\container.dat", lpFilePart=0x0) returned 0x7f [0197.461] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf70) returned 1 [0197.461] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cookies\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0197.461] GetFileType (hFile=0x444) returned 0x1 [0197.461] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbee0) returned 1 [0197.461] GetFileType (hFile=0x444) returned 0x1 [0197.461] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc108 | out: lpFileSizeHigh=0x3bc108*=0x0) returned 0x0 [0197.461] CloseHandle (hObject=0x444) returned 1 [0197.501] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\container.dat", nBufferLength=0x105, lpBuffer=0x3bba90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\container.dat", lpFilePart=0x0) returned 0x7f [0197.501] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf70) returned 1 [0197.501] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cookies\\container.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0197.502] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8a00) returned 1 [0197.503] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\FPNDV7T3.txt", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\FPNDV7T3.txt", lpFilePart=0x0) returned 0x7e [0197.503] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0197.503] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\FPNDV7T3.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cookies\\fpndv7t3.txt"), fInfoLevelId=0x0, lpFileInformation=0x2291630 | out: lpFileInformation=0x2291630*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8a1da24, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x8a1da24, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x8a1da24, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x1a0)) returned 1 [0197.503] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0197.503] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\FPNDV7T3.txt", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\FPNDV7T3.txt", lpFilePart=0x0) returned 0x7e [0197.503] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0197.503] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\FPNDV7T3.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cookies\\fpndv7t3.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0197.503] GetFileType (hFile=0x444) returned 0x1 [0197.503] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0197.503] GetFileType (hFile=0x444) returned 0x1 [0197.503] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x1a0 [0197.504] ReadFile (in: hFile=0x444, lpBuffer=0x2291b58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x2291b58*, lpNumberOfBytesRead=0x3be5c8*=0x1a0, lpOverlapped=0x0) returned 1 [0197.526] CloseHandle (hObject=0x444) returned 1 [0197.612] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\FPNDV7T3.txt", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\FPNDV7T3.txt", lpFilePart=0x0) returned 0x7e [0197.612] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0197.612] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\FPNDV7T3.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cookies\\fpndv7t3.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0197.614] GetFileType (hFile=0x444) returned 0x1 [0197.614] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0197.614] GetFileType (hFile=0x444) returned 0x1 [0197.614] WriteFile (in: hFile=0x444, lpBuffer=0x2309418*, nNumberOfBytesToWrite=0x1b0, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x2309418*, lpNumberOfBytesWritten=0x3be4d8*=0x1b0, lpOverlapped=0x0) returned 1 [0197.615] CloseHandle (hObject=0x444) returned 1 [0197.615] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\FPNDV7T3.txt", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\FPNDV7T3.txt", lpFilePart=0x0) returned 0x7e [0197.615] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\FPNDV7T3.txt.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\FPNDV7T3.txt.xuy", lpFilePart=0x0) returned 0x82 [0197.615] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0197.615] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\FPNDV7T3.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cookies\\fpndv7t3.txt"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8a1da24, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x8a1da24, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x61a23d72, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x1b0)) returned 1 [0197.615] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0197.615] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\FPNDV7T3.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cookies\\fpndv7t3.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\FPNDV7T3.txt.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cookies\\fpndv7t3.txt.xuy")) returned 1 [0197.617] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\J9KFLZDX.txt", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\J9KFLZDX.txt", lpFilePart=0x0) returned 0x7e [0197.617] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0197.617] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\J9KFLZDX.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cookies\\j9kflzdx.txt"), fInfoLevelId=0x0, lpFileInformation=0x230a7d0 | out: lpFileInformation=0x230a7d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa5988c5, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xa5988c5, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xa599c51, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x181)) returned 1 [0197.619] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0197.619] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\J9KFLZDX.txt", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\J9KFLZDX.txt", lpFilePart=0x0) returned 0x7e [0197.619] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0197.619] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\J9KFLZDX.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cookies\\j9kflzdx.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0197.619] GetFileType (hFile=0x444) returned 0x1 [0197.619] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0197.619] GetFileType (hFile=0x444) returned 0x1 [0197.619] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x181 [0197.619] ReadFile (in: hFile=0x444, lpBuffer=0x230ace0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x230ace0*, lpNumberOfBytesRead=0x3be5c8*=0x181, lpOverlapped=0x0) returned 1 [0197.620] CloseHandle (hObject=0x444) returned 1 [0197.631] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\J9KFLZDX.txt", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\J9KFLZDX.txt", lpFilePart=0x0) returned 0x7e [0197.631] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0197.631] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\J9KFLZDX.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cookies\\j9kflzdx.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0197.633] GetFileType (hFile=0x444) returned 0x1 [0197.633] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0197.633] GetFileType (hFile=0x444) returned 0x1 [0197.633] WriteFile (in: hFile=0x444, lpBuffer=0x2382500*, nNumberOfBytesToWrite=0x190, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x2382500*, lpNumberOfBytesWritten=0x3be4d8*=0x190, lpOverlapped=0x0) returned 1 [0197.634] CloseHandle (hObject=0x444) returned 1 [0197.634] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\J9KFLZDX.txt", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\J9KFLZDX.txt", lpFilePart=0x0) returned 0x7e [0197.634] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\J9KFLZDX.txt.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\J9KFLZDX.txt.xuy", lpFilePart=0x0) returned 0x82 [0197.634] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0197.634] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\J9KFLZDX.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cookies\\j9kflzdx.txt"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa5988c5, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xa5988c5, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x61a4bd75, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x190)) returned 1 [0197.634] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0197.634] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\J9KFLZDX.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cookies\\j9kflzdx.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\J9KFLZDX.txt.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cookies\\j9kflzdx.txt.xuy")) returned 1 [0197.635] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\JN00AKV9.txt", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\JN00AKV9.txt", lpFilePart=0x0) returned 0x7e [0197.635] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0197.635] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\JN00AKV9.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cookies\\jn00akv9.txt"), fInfoLevelId=0x0, lpFileInformation=0x23838b8 | out: lpFileInformation=0x23838b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd61e45, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xbd61e45, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xbd87f0d, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x58)) returned 1 [0197.636] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0197.636] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\JN00AKV9.txt", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\JN00AKV9.txt", lpFilePart=0x0) returned 0x7e [0197.636] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0197.636] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\JN00AKV9.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cookies\\jn00akv9.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0197.636] GetFileType (hFile=0x444) returned 0x1 [0197.636] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0197.636] GetFileType (hFile=0x444) returned 0x1 [0197.636] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x58 [0197.636] ReadFile (in: hFile=0x444, lpBuffer=0x2383c98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x2383c98*, lpNumberOfBytesRead=0x3be5c8*=0x58, lpOverlapped=0x0) returned 1 [0197.637] CloseHandle (hObject=0x444) returned 1 [0197.725] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\JN00AKV9.txt", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\JN00AKV9.txt", lpFilePart=0x0) returned 0x7e [0197.725] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0197.725] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\JN00AKV9.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cookies\\jn00akv9.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0197.727] GetFileType (hFile=0x444) returned 0x1 [0197.727] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0197.727] GetFileType (hFile=0x444) returned 0x1 [0197.727] WriteFile (in: hFile=0x444, lpBuffer=0x21fb3b8*, nNumberOfBytesToWrite=0x60, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x21fb3b8*, lpNumberOfBytesWritten=0x3be4d8*=0x60, lpOverlapped=0x0) returned 1 [0197.728] CloseHandle (hObject=0x444) returned 1 [0197.728] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\JN00AKV9.txt", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\JN00AKV9.txt", lpFilePart=0x0) returned 0x7e [0197.728] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\JN00AKV9.txt.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\JN00AKV9.txt.xuy", lpFilePart=0x0) returned 0x82 [0197.728] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0197.728] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\JN00AKV9.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cookies\\jn00akv9.txt"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd61e45, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xbd61e45, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x61b2ea0c, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x60)) returned 1 [0197.728] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0197.728] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\JN00AKV9.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cookies\\jn00akv9.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\JN00AKV9.txt.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cookies\\jn00akv9.txt.xuy")) returned 1 [0197.730] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\OR8K8VRM.txt", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\OR8K8VRM.txt", lpFilePart=0x0) returned 0x7e [0197.730] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0197.730] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\OR8K8VRM.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cookies\\or8k8vrm.txt"), fInfoLevelId=0x0, lpFileInformation=0x21fc770 | out: lpFileInformation=0x21fc770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x99988da, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x99988da, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x99988da, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x104)) returned 1 [0197.730] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0197.730] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\OR8K8VRM.txt", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\OR8K8VRM.txt", lpFilePart=0x0) returned 0x7e [0197.730] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0197.730] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\OR8K8VRM.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cookies\\or8k8vrm.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0197.730] GetFileType (hFile=0x444) returned 0x1 [0197.730] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0197.730] GetFileType (hFile=0x444) returned 0x1 [0197.730] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x104 [0197.731] ReadFile (in: hFile=0x444, lpBuffer=0x21fcc00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x21fcc00*, lpNumberOfBytesRead=0x3be5c8*=0x104, lpOverlapped=0x0) returned 1 [0197.732] CloseHandle (hObject=0x444) returned 1 [0197.741] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\OR8K8VRM.txt", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\OR8K8VRM.txt", lpFilePart=0x0) returned 0x7e [0197.741] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0197.742] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\OR8K8VRM.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cookies\\or8k8vrm.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0197.743] GetFileType (hFile=0x444) returned 0x1 [0197.743] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0197.743] GetFileType (hFile=0x444) returned 0x1 [0197.743] WriteFile (in: hFile=0x444, lpBuffer=0x22741a0*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x22741a0*, lpNumberOfBytesWritten=0x3be4d8*=0x110, lpOverlapped=0x0) returned 1 [0197.744] CloseHandle (hObject=0x444) returned 1 [0197.744] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\OR8K8VRM.txt", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\OR8K8VRM.txt", lpFilePart=0x0) returned 0x7e [0197.745] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\OR8K8VRM.txt.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\OR8K8VRM.txt.xuy", lpFilePart=0x0) returned 0x82 [0197.745] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0197.745] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\OR8K8VRM.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cookies\\or8k8vrm.txt"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x99988da, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x99988da, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x61b56077, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x110)) returned 1 [0197.745] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0197.745] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\OR8K8VRM.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cookies\\or8k8vrm.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\OR8K8VRM.txt.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cookies\\or8k8vrm.txt.xuy")) returned 1 [0197.746] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\TK0LXHBL.txt", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\TK0LXHBL.txt", lpFilePart=0x0) returned 0x7e [0197.746] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0197.746] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\TK0LXHBL.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cookies\\tk0lxhbl.txt"), fInfoLevelId=0x0, lpFileInformation=0x2275558 | out: lpFileInformation=0x2275558*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80dff54, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x80dff54, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x80dff54, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0xd3)) returned 1 [0197.747] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0197.747] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\TK0LXHBL.txt", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\TK0LXHBL.txt", lpFilePart=0x0) returned 0x7e [0197.747] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0197.747] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\TK0LXHBL.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cookies\\tk0lxhbl.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0197.747] GetFileType (hFile=0x444) returned 0x1 [0197.747] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0197.747] GetFileType (hFile=0x444) returned 0x1 [0197.747] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xd3 [0197.747] ReadFile (in: hFile=0x444, lpBuffer=0x22759b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x22759b8*, lpNumberOfBytesRead=0x3be5c8*=0xd3, lpOverlapped=0x0) returned 1 [0197.748] CloseHandle (hObject=0x444) returned 1 [0197.758] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\TK0LXHBL.txt", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\TK0LXHBL.txt", lpFilePart=0x0) returned 0x7e [0197.758] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0197.758] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\TK0LXHBL.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cookies\\tk0lxhbl.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0197.760] GetFileType (hFile=0x444) returned 0x1 [0197.760] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0197.760] GetFileType (hFile=0x444) returned 0x1 [0197.760] WriteFile (in: hFile=0x444, lpBuffer=0x22ecce0*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x22ecce0*, lpNumberOfBytesWritten=0x3be4d8*=0xe0, lpOverlapped=0x0) returned 1 [0197.765] CloseHandle (hObject=0x444) returned 1 [0197.765] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\TK0LXHBL.txt", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\TK0LXHBL.txt", lpFilePart=0x0) returned 0x7e [0197.765] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\TK0LXHBL.txt.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\TK0LXHBL.txt.xuy", lpFilePart=0x0) returned 0x82 [0197.765] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0197.765] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\TK0LXHBL.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cookies\\tk0lxhbl.txt"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80dff54, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x80dff54, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x61ba1055, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1 [0197.765] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0197.765] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\TK0LXHBL.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cookies\\tk0lxhbl.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\TK0LXHBL.txt.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cookies\\tk0lxhbl.txt.xuy")) returned 1 [0197.767] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\VC62GJSF.txt", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\VC62GJSF.txt", lpFilePart=0x0) returned 0x7e [0197.767] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0197.767] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\VC62GJSF.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cookies\\vc62gjsf.txt"), fInfoLevelId=0x0, lpFileInformation=0x22ee098 | out: lpFileInformation=0x22ee098*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2e9ea247, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x2e9ea247, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x2e9ea247, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0xb6)) returned 1 [0197.767] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0197.767] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\VC62GJSF.txt", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\VC62GJSF.txt", lpFilePart=0x0) returned 0x7e [0197.767] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0197.767] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\VC62GJSF.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cookies\\vc62gjsf.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0197.767] GetFileType (hFile=0x444) returned 0x1 [0197.767] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0197.767] GetFileType (hFile=0x444) returned 0x1 [0197.767] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xb6 [0197.767] ReadFile (in: hFile=0x444, lpBuffer=0x22ee4d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x22ee4d8*, lpNumberOfBytesRead=0x3be5c8*=0xb6, lpOverlapped=0x0) returned 1 [0197.768] CloseHandle (hObject=0x444) returned 1 [0197.779] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\VC62GJSF.txt", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\VC62GJSF.txt", lpFilePart=0x0) returned 0x7e [0197.779] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0197.779] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\VC62GJSF.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cookies\\vc62gjsf.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0197.780] GetFileType (hFile=0x444) returned 0x1 [0197.781] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0197.781] GetFileType (hFile=0x444) returned 0x1 [0197.781] WriteFile (in: hFile=0x444, lpBuffer=0x23657c0*, nNumberOfBytesToWrite=0xc0, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x23657c0*, lpNumberOfBytesWritten=0x3be4d8*=0xc0, lpOverlapped=0x0) returned 1 [0197.781] CloseHandle (hObject=0x444) returned 1 [0197.781] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\VC62GJSF.txt", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\VC62GJSF.txt", lpFilePart=0x0) returned 0x7e [0197.781] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\VC62GJSF.txt.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\VC62GJSF.txt.xuy", lpFilePart=0x0) returned 0x82 [0197.781] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0197.782] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\VC62GJSF.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cookies\\vc62gjsf.txt"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2e9ea247, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x2e9ea247, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x61bc74b7, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xc0)) returned 1 [0197.782] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0197.782] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\VC62GJSF.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cookies\\vc62gjsf.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\VC62GJSF.txt.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cookies\\vc62gjsf.txt.xuy")) returned 1 [0197.783] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\VSMDVD55.txt", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\VSMDVD55.txt", lpFilePart=0x0) returned 0x7e [0197.783] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0197.783] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\VSMDVD55.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cookies\\vsmdvd55.txt"), fInfoLevelId=0x0, lpFileInformation=0x2366b78 | out: lpFileInformation=0x2366b78*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x506a5dc, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x506a5dc, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x5074214, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x5c)) returned 1 [0197.783] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0197.783] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\VSMDVD55.txt", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\VSMDVD55.txt", lpFilePart=0x0) returned 0x7e [0197.783] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0197.783] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\VSMDVD55.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cookies\\vsmdvd55.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0197.783] GetFileType (hFile=0x444) returned 0x1 [0197.783] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0197.783] GetFileType (hFile=0x444) returned 0x1 [0197.783] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x5c [0197.784] ReadFile (in: hFile=0x444, lpBuffer=0x2366f60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x2366f60*, lpNumberOfBytesRead=0x3be5c8*=0x5c, lpOverlapped=0x0) returned 1 [0197.784] CloseHandle (hObject=0x444) returned 1 [0197.832] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\VSMDVD55.txt", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\VSMDVD55.txt", lpFilePart=0x0) returned 0x7e [0197.832] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0197.832] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\VSMDVD55.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cookies\\vsmdvd55.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0197.834] GetFileType (hFile=0x444) returned 0x1 [0197.834] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0197.834] GetFileType (hFile=0x444) returned 0x1 [0197.834] WriteFile (in: hFile=0x444, lpBuffer=0x21de890*, nNumberOfBytesToWrite=0x60, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x21de890*, lpNumberOfBytesWritten=0x3be4d8*=0x60, lpOverlapped=0x0) returned 1 [0197.835] CloseHandle (hObject=0x444) returned 1 [0197.835] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\VSMDVD55.txt", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\VSMDVD55.txt", lpFilePart=0x0) returned 0x7e [0197.835] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\VSMDVD55.txt.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\VSMDVD55.txt.xuy", lpFilePart=0x0) returned 0x82 [0197.835] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0197.835] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\VSMDVD55.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cookies\\vsmdvd55.txt"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x506a5dc, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x506a5dc, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x61c39bff, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x60)) returned 1 [0197.835] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0197.835] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\VSMDVD55.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cookies\\vsmdvd55.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\VSMDVD55.txt.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cookies\\vsmdvd55.txt.xuy")) returned 1 [0197.836] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0197.836] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\History", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\History", lpFilePart=0x0) returned 0x71 [0197.836] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\History\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\History\\", lpFilePart=0x0) returned 0x72 [0197.836] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\History\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d79d0 [0197.837] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0197.837] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0197.837] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0197.837] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0197.837] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0197.837] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0197.837] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0197.837] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\History", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\History", lpFilePart=0x0) returned 0x71 [0197.837] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\History\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\History\\", lpFilePart=0x0) returned 0x72 [0197.837] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\History\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d7550 [0197.837] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0197.837] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0197.838] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0197.838] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0197.838] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0197.838] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0197.838] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\History\\container.dat", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\History\\container.dat", lpFilePart=0x0) returned 0x7f [0197.838] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0197.838] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\History\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\history\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x21e25c8 | out: lpFileInformation=0x21e25c8*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xffa1437d, ftCreationTime.dwHighDateTime=0x1d2d432, ftLastAccessTime.dwLowDateTime=0xffa1437d, ftLastAccessTime.dwHighDateTime=0x1d2d432, ftLastWriteTime.dwLowDateTime=0xffa1437d, ftLastWriteTime.dwHighDateTime=0x1d2d432, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0197.838] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0197.838] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\History\\container.dat", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\History\\container.dat", lpFilePart=0x0) returned 0x7f [0197.838] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0197.838] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\History\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\history\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0197.838] GetFileType (hFile=0x444) returned 0x1 [0197.838] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0197.838] GetFileType (hFile=0x444) returned 0x1 [0197.838] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x0 [0197.838] CloseHandle (hObject=0x444) returned 1 [0197.849] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\History\\container.dat", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\History\\container.dat", lpFilePart=0x0) returned 0x7f [0197.849] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0197.849] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\History\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\history\\container.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0197.851] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3baf90) returned 1 [0197.851] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\History\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbc10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\History\\container.dat", lpFilePart=0x0) returned 0x7f [0197.851] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0b0) returned 1 [0197.851] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\History\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\history\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x3bc190 | out: lpFileInformation=0x3bc190*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xffa1437d, ftCreationTime.dwHighDateTime=0x1d2d432, ftLastAccessTime.dwLowDateTime=0xffa1437d, ftLastAccessTime.dwHighDateTime=0x1d2d432, ftLastWriteTime.dwLowDateTime=0xffa1437d, ftLastWriteTime.dwHighDateTime=0x1d2d432, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0197.851] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc070) returned 1 [0197.851] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\History\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbc30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\History\\container.dat", lpFilePart=0x0) returned 0x7f [0197.851] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0b0) returned 1 [0197.852] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\History\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\history\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x22593c0 | out: lpFileInformation=0x22593c0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xffa1437d, ftCreationTime.dwHighDateTime=0x1d2d432, ftLastAccessTime.dwLowDateTime=0xffa1437d, ftLastAccessTime.dwHighDateTime=0x1d2d432, ftLastWriteTime.dwLowDateTime=0xffa1437d, ftLastWriteTime.dwHighDateTime=0x1d2d432, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0197.852] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc070) returned 1 [0197.852] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\History\\container.dat", nBufferLength=0x105, lpBuffer=0x3bba90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\History\\container.dat", lpFilePart=0x0) returned 0x7f [0197.852] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf70) returned 1 [0197.852] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\History\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\history\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0197.852] GetFileType (hFile=0x444) returned 0x1 [0197.852] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbee0) returned 1 [0197.852] GetFileType (hFile=0x444) returned 0x1 [0197.852] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc108 | out: lpFileSizeHigh=0x3bc108*=0x0) returned 0x0 [0197.852] CloseHandle (hObject=0x444) returned 1 [0197.895] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\History\\container.dat", nBufferLength=0x105, lpBuffer=0x3bba90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\History\\container.dat", lpFilePart=0x0) returned 0x7f [0197.895] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf70) returned 1 [0197.895] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\History\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\history\\container.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0197.897] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8a00) returned 1 [0197.897] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0197.897] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\IECompatCache", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\IECompatCache", lpFilePart=0x0) returned 0x77 [0197.897] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\IECompatCache\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\IECompatCache\\", lpFilePart=0x0) returned 0x78 [0197.897] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\IECompatCache\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d7370 [0197.898] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0197.898] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0197.898] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0197.898] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0197.898] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0197.898] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0197.898] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0197.898] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\IECompatCache", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\IECompatCache", lpFilePart=0x0) returned 0x77 [0197.898] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\IECompatCache\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\IECompatCache\\", lpFilePart=0x0) returned 0x78 [0197.898] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\IECompatCache\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d78b0 [0197.899] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0197.899] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0197.899] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0197.899] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0197.899] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0197.899] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0197.899] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\IECompatCache\\container.dat", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\IECompatCache\\container.dat", lpFilePart=0x0) returned 0x85 [0197.899] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0197.899] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\IECompatCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\iecompatcache\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x22d2be8 | out: lpFileInformation=0x22d2be8*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xff03d40e, ftCreationTime.dwHighDateTime=0x1d2d432, ftLastAccessTime.dwLowDateTime=0xff03d40e, ftLastAccessTime.dwHighDateTime=0x1d2d432, ftLastWriteTime.dwLowDateTime=0xff03d40e, ftLastWriteTime.dwHighDateTime=0x1d2d432, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0197.899] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0197.899] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\IECompatCache\\container.dat", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\IECompatCache\\container.dat", lpFilePart=0x0) returned 0x85 [0197.899] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0197.899] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\IECompatCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\iecompatcache\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0197.899] GetFileType (hFile=0x444) returned 0x1 [0197.900] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0197.900] GetFileType (hFile=0x444) returned 0x1 [0197.900] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x0 [0197.900] CloseHandle (hObject=0x444) returned 1 [0197.955] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\IECompatCache\\container.dat", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\IECompatCache\\container.dat", lpFilePart=0x0) returned 0x85 [0197.955] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0197.955] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\IECompatCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\iecompatcache\\container.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0197.956] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3baf90) returned 1 [0197.957] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\IECompatCache\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbc10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\IECompatCache\\container.dat", lpFilePart=0x0) returned 0x85 [0197.957] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0b0) returned 1 [0197.957] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\IECompatCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\iecompatcache\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x3bc190 | out: lpFileInformation=0x3bc190*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xff03d40e, ftCreationTime.dwHighDateTime=0x1d2d432, ftLastAccessTime.dwLowDateTime=0xff03d40e, ftLastAccessTime.dwHighDateTime=0x1d2d432, ftLastWriteTime.dwLowDateTime=0xff03d40e, ftLastWriteTime.dwHighDateTime=0x1d2d432, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0197.957] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc070) returned 1 [0197.957] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\IECompatCache\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbc30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\IECompatCache\\container.dat", lpFilePart=0x0) returned 0x85 [0197.957] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0b0) returned 1 [0197.957] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\IECompatCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\iecompatcache\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x2349a30 | out: lpFileInformation=0x2349a30*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xff03d40e, ftCreationTime.dwHighDateTime=0x1d2d432, ftLastAccessTime.dwLowDateTime=0xff03d40e, ftLastAccessTime.dwHighDateTime=0x1d2d432, ftLastWriteTime.dwLowDateTime=0xff03d40e, ftLastWriteTime.dwHighDateTime=0x1d2d432, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0197.957] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc070) returned 1 [0197.957] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\IECompatCache\\container.dat", nBufferLength=0x105, lpBuffer=0x3bba90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\IECompatCache\\container.dat", lpFilePart=0x0) returned 0x85 [0197.957] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf70) returned 1 [0197.957] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\IECompatCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\iecompatcache\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0197.957] GetFileType (hFile=0x444) returned 0x1 [0197.957] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbee0) returned 1 [0197.957] GetFileType (hFile=0x444) returned 0x1 [0197.958] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc108 | out: lpFileSizeHigh=0x3bc108*=0x0) returned 0x0 [0197.958] CloseHandle (hObject=0x444) returned 1 [0197.999] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\IECompatCache\\container.dat", nBufferLength=0x105, lpBuffer=0x3bba90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\IECompatCache\\container.dat", lpFilePart=0x0) returned 0x85 [0198.000] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf70) returned 1 [0198.000] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\IECompatCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\iecompatcache\\container.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0198.001] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8a00) returned 1 [0198.002] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0198.002] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\IECompatUaCache", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\IECompatUaCache", lpFilePart=0x0) returned 0x79 [0198.002] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\IECompatUaCache\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\IECompatUaCache\\", lpFilePart=0x0) returned 0x7a [0198.002] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\IECompatUaCache\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d78b0 [0198.002] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0198.003] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0198.003] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0198.003] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0198.003] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0198.003] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0198.003] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0198.003] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\IECompatUaCache", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\IECompatUaCache", lpFilePart=0x0) returned 0x79 [0198.003] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\IECompatUaCache\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\IECompatUaCache\\", lpFilePart=0x0) returned 0x7a [0198.003] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\IECompatUaCache\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d81b0 [0198.003] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0198.004] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0198.004] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0198.004] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0198.004] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0198.004] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0198.004] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\IECompatUaCache\\container.dat", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\IECompatUaCache\\container.dat", lpFilePart=0x0) returned 0x87 [0198.004] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0198.004] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\IECompatUaCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\iecompatuacache\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x21c4110 | out: lpFileInformation=0x21c4110*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xff03d40e, ftCreationTime.dwHighDateTime=0x1d2d432, ftLastAccessTime.dwLowDateTime=0xff03d40e, ftLastAccessTime.dwHighDateTime=0x1d2d432, ftLastWriteTime.dwLowDateTime=0xff03d40e, ftLastWriteTime.dwHighDateTime=0x1d2d432, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0198.004] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0198.004] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\IECompatUaCache\\container.dat", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\IECompatUaCache\\container.dat", lpFilePart=0x0) returned 0x87 [0198.004] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0198.004] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\IECompatUaCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\iecompatuacache\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0198.004] GetFileType (hFile=0x444) returned 0x1 [0198.004] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0198.004] GetFileType (hFile=0x444) returned 0x1 [0198.004] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x0 [0198.005] CloseHandle (hObject=0x444) returned 1 [0198.045] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\IECompatUaCache\\container.dat", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\IECompatUaCache\\container.dat", lpFilePart=0x0) returned 0x87 [0198.045] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0198.045] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\IECompatUaCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\iecompatuacache\\container.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0198.046] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3baf90) returned 1 [0198.046] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\IECompatUaCache\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbc10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\IECompatUaCache\\container.dat", lpFilePart=0x0) returned 0x87 [0198.047] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0b0) returned 1 [0198.047] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\IECompatUaCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\iecompatuacache\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x3bc190 | out: lpFileInformation=0x3bc190*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xff03d40e, ftCreationTime.dwHighDateTime=0x1d2d432, ftLastAccessTime.dwLowDateTime=0xff03d40e, ftLastAccessTime.dwHighDateTime=0x1d2d432, ftLastWriteTime.dwLowDateTime=0xff03d40e, ftLastWriteTime.dwHighDateTime=0x1d2d432, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0198.047] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc070) returned 1 [0198.047] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\IECompatUaCache\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbc30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\IECompatUaCache\\container.dat", lpFilePart=0x0) returned 0x87 [0198.047] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0b0) returned 1 [0198.047] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\IECompatUaCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\iecompatuacache\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x223af58 | out: lpFileInformation=0x223af58*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xff03d40e, ftCreationTime.dwHighDateTime=0x1d2d432, ftLastAccessTime.dwLowDateTime=0xff03d40e, ftLastAccessTime.dwHighDateTime=0x1d2d432, ftLastWriteTime.dwLowDateTime=0xff03d40e, ftLastWriteTime.dwHighDateTime=0x1d2d432, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0198.047] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc070) returned 1 [0198.047] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\IECompatUaCache\\container.dat", nBufferLength=0x105, lpBuffer=0x3bba90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\IECompatUaCache\\container.dat", lpFilePart=0x0) returned 0x87 [0198.047] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf70) returned 1 [0198.047] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\IECompatUaCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\iecompatuacache\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0198.047] GetFileType (hFile=0x444) returned 0x1 [0198.047] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbee0) returned 1 [0198.047] GetFileType (hFile=0x444) returned 0x1 [0198.047] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc108 | out: lpFileSizeHigh=0x3bc108*=0x0) returned 0x0 [0198.047] CloseHandle (hObject=0x444) returned 1 [0198.084] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\IECompatUaCache\\container.dat", nBufferLength=0x105, lpBuffer=0x3bba90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\IECompatUaCache\\container.dat", lpFilePart=0x0) returned 0x87 [0198.084] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf70) returned 1 [0198.084] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\IECompatUaCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\iecompatuacache\\container.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0198.086] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8a00) returned 1 [0198.086] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0198.086] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\IEFlipAheadCache", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\IEFlipAheadCache", lpFilePart=0x0) returned 0x7a [0198.086] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\IEFlipAheadCache\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\IEFlipAheadCache\\", lpFilePart=0x0) returned 0x7b [0198.087] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\IEFlipAheadCache\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d7d30 [0198.091] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0198.091] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0198.092] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0198.092] FindClose (in: hFindFile=0x5d7d30 | out: hFindFile=0x5d7d30) returned 1 [0198.092] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0198.092] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0198.092] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0198.092] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\IEFlipAheadCache", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\IEFlipAheadCache", lpFilePart=0x0) returned 0x7a [0198.092] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\IEFlipAheadCache\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\IEFlipAheadCache\\", lpFilePart=0x0) returned 0x7b [0198.092] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\IEFlipAheadCache\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d7cd0 [0198.092] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0198.092] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0198.092] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0198.093] FindClose (in: hFindFile=0x5d7cd0 | out: hFindFile=0x5d7cd0) returned 1 [0198.093] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0198.093] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0198.093] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\IEFlipAheadCache\\container.dat", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\IEFlipAheadCache\\container.dat", lpFilePart=0x0) returned 0x88 [0198.093] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0198.093] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\IEFlipAheadCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\ieflipaheadcache\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x22b4890 | out: lpFileInformation=0x22b4890*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x15a0e75c, ftCreationTime.dwHighDateTime=0x1d2fc21, ftLastAccessTime.dwLowDateTime=0x15a0e75c, ftLastAccessTime.dwHighDateTime=0x1d2fc21, ftLastWriteTime.dwLowDateTime=0x15a0e75c, ftLastWriteTime.dwHighDateTime=0x1d2fc21, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0198.093] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0198.093] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\IEFlipAheadCache\\container.dat", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\IEFlipAheadCache\\container.dat", lpFilePart=0x0) returned 0x88 [0198.093] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0198.093] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\IEFlipAheadCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\ieflipaheadcache\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0198.093] GetFileType (hFile=0x444) returned 0x1 [0198.093] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0198.093] GetFileType (hFile=0x444) returned 0x1 [0198.093] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x0 [0198.093] CloseHandle (hObject=0x444) returned 1 [0198.131] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\IEFlipAheadCache\\container.dat", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\IEFlipAheadCache\\container.dat", lpFilePart=0x0) returned 0x88 [0198.131] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0198.131] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\IEFlipAheadCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\ieflipaheadcache\\container.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0198.133] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3baf90) returned 1 [0198.133] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\IEFlipAheadCache\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbc10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\IEFlipAheadCache\\container.dat", lpFilePart=0x0) returned 0x88 [0198.133] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0b0) returned 1 [0198.133] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\IEFlipAheadCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\ieflipaheadcache\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x3bc190 | out: lpFileInformation=0x3bc190*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x15a0e75c, ftCreationTime.dwHighDateTime=0x1d2fc21, ftLastAccessTime.dwLowDateTime=0x15a0e75c, ftLastAccessTime.dwHighDateTime=0x1d2fc21, ftLastWriteTime.dwLowDateTime=0x15a0e75c, ftLastWriteTime.dwHighDateTime=0x1d2fc21, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0198.133] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc070) returned 1 [0198.133] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\IEFlipAheadCache\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbc30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\IEFlipAheadCache\\container.dat", lpFilePart=0x0) returned 0x88 [0198.133] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0b0) returned 1 [0198.133] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\IEFlipAheadCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\ieflipaheadcache\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x232b700 | out: lpFileInformation=0x232b700*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x15a0e75c, ftCreationTime.dwHighDateTime=0x1d2fc21, ftLastAccessTime.dwLowDateTime=0x15a0e75c, ftLastAccessTime.dwHighDateTime=0x1d2fc21, ftLastWriteTime.dwLowDateTime=0x15a0e75c, ftLastWriteTime.dwHighDateTime=0x1d2fc21, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0198.133] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc070) returned 1 [0198.133] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\IEFlipAheadCache\\container.dat", nBufferLength=0x105, lpBuffer=0x3bba90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\IEFlipAheadCache\\container.dat", lpFilePart=0x0) returned 0x88 [0198.134] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf70) returned 1 [0198.134] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\IEFlipAheadCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\ieflipaheadcache\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0198.134] GetFileType (hFile=0x444) returned 0x1 [0198.134] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbee0) returned 1 [0198.134] GetFileType (hFile=0x444) returned 0x1 [0198.134] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc108 | out: lpFileSizeHigh=0x3bc108*=0x0) returned 0x0 [0198.134] CloseHandle (hObject=0x444) returned 1 [0198.177] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\IEFlipAheadCache\\container.dat", nBufferLength=0x105, lpBuffer=0x3bba90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\IEFlipAheadCache\\container.dat", lpFilePart=0x0) returned 0x88 [0198.177] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf70) returned 1 [0198.177] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\IEFlipAheadCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\ieflipaheadcache\\container.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0198.179] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8a00) returned 1 [0198.180] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0198.180] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\User", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\User", lpFilePart=0x0) returned 0x6e [0198.180] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\User\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\User\\", lpFilePart=0x0) returned 0x6f [0198.180] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\User\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d7550 [0198.181] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0198.181] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0198.181] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0198.181] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0198.181] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0198.181] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0198.181] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0198.181] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\User", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\User", lpFilePart=0x0) returned 0x6e [0198.181] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\User\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\User\\", lpFilePart=0x0) returned 0x6f [0198.181] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\User\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d81b0 [0198.182] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0198.182] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0198.182] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0198.182] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0198.182] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0198.182] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0198.182] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0198.182] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\User\\Default", nBufferLength=0x105, lpBuffer=0x3be130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\User\\Default", lpFilePart=0x0) returned 0x76 [0198.183] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\User\\Default\\", nBufferLength=0x105, lpBuffer=0x3be0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\User\\Default\\", lpFilePart=0x0) returned 0x77 [0198.183] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\User\\Default\\*", lpFindFileData=0x3be2e0 | out: lpFindFileData=0x3be2e0) returned 0x5d79d0 [0198.183] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0198.183] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0198.183] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0198.183] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 0 [0198.183] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0198.183] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0198.183] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0198.184] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0198.184] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\User\\Default", nBufferLength=0x105, lpBuffer=0x3be130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\User\\Default", lpFilePart=0x0) returned 0x76 [0198.184] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\User\\Default\\", nBufferLength=0x105, lpBuffer=0x3be0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\User\\Default\\", lpFilePart=0x0) returned 0x77 [0198.184] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\User\\Default\\*", lpFindFileData=0x3be2e0 | out: lpFindFileData=0x3be2e0) returned 0x5d7fd0 [0198.184] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0198.184] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0198.184] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0198.184] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 0 [0198.184] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0198.184] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0198.184] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0198.184] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0198.184] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\User\\Default\\AppCache", nBufferLength=0x105, lpBuffer=0x3be0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\User\\Default\\AppCache", lpFilePart=0x0) returned 0x7f [0198.185] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\User\\Default\\AppCache\\", nBufferLength=0x105, lpBuffer=0x3be060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\User\\Default\\AppCache\\", lpFilePart=0x0) returned 0x80 [0198.185] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\User\\Default\\AppCache\\*", lpFindFileData=0x3be270 | out: lpFindFileData=0x3be270) returned 0x5d78b0 [0198.185] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0198.185] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0198.185] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0198.185] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 0 [0198.185] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0198.185] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0198.186] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0198.186] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0198.186] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\User\\Default\\AppCache", nBufferLength=0x105, lpBuffer=0x3be0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\User\\Default\\AppCache", lpFilePart=0x0) returned 0x7f [0198.186] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\User\\Default\\AppCache\\", nBufferLength=0x105, lpBuffer=0x3be060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\User\\Default\\AppCache\\", lpFilePart=0x0) returned 0x80 [0198.186] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\User\\Default\\AppCache\\*", lpFindFileData=0x3be270 | out: lpFindFileData=0x3be270) returned 0x5d7c70 [0198.186] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0198.186] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0198.186] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0198.186] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 0 [0198.186] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0198.186] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0198.186] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0198.187] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\User\\Default\\AppCache\\container.dat", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\User\\Default\\AppCache\\container.dat", lpFilePart=0x0) returned 0x8d [0198.187] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0198.187] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\User\\Default\\AppCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\user\\default\\appcache\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x21ab190 | out: lpFileInformation=0x21ab190*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x108fb4, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x108fb4, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x108fb4, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0198.187] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0198.187] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\User\\Default\\AppCache\\container.dat", nBufferLength=0x105, lpBuffer=0x3bdf40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\User\\Default\\AppCache\\container.dat", lpFilePart=0x0) returned 0x8d [0198.187] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be420) returned 1 [0198.187] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\User\\Default\\AppCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\user\\default\\appcache\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0198.187] GetFileType (hFile=0x444) returned 0x1 [0198.187] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be390) returned 1 [0198.187] GetFileType (hFile=0x444) returned 0x1 [0198.187] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be5b8 | out: lpFileSizeHigh=0x3be5b8*=0x0) returned 0x0 [0198.187] CloseHandle (hObject=0x444) returned 1 [0198.225] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\User\\Default\\AppCache\\container.dat", nBufferLength=0x105, lpBuffer=0x3bdf40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\User\\Default\\AppCache\\container.dat", lpFilePart=0x0) returned 0x8d [0198.225] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be420) returned 1 [0198.225] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\User\\Default\\AppCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\user\\default\\appcache\\container.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0198.227] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3baeb0) returned 1 [0198.227] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\User\\Default\\AppCache\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbb30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\User\\Default\\AppCache\\container.dat", lpFilePart=0x0) returned 0x8d [0198.227] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbfd0) returned 1 [0198.227] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\User\\Default\\AppCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\user\\default\\appcache\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x3bc0b0 | out: lpFileInformation=0x3bc0b0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x108fb4, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x108fb4, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x108fb4, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0198.227] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbf90) returned 1 [0198.227] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\User\\Default\\AppCache\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbb50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\User\\Default\\AppCache\\container.dat", lpFilePart=0x0) returned 0x8d [0198.228] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbfd0) returned 1 [0198.228] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\User\\Default\\AppCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\user\\default\\appcache\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x2222028 | out: lpFileInformation=0x2222028*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x108fb4, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x108fb4, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x108fb4, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0198.228] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbf90) returned 1 [0198.228] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\User\\Default\\AppCache\\container.dat", nBufferLength=0x105, lpBuffer=0x3bb9b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\User\\Default\\AppCache\\container.dat", lpFilePart=0x0) returned 0x8d [0198.228] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbe90) returned 1 [0198.228] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\User\\Default\\AppCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\user\\default\\appcache\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0198.228] GetFileType (hFile=0x444) returned 0x1 [0198.228] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbe00) returned 1 [0198.228] GetFileType (hFile=0x444) returned 0x1 [0198.228] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc028 | out: lpFileSizeHigh=0x3bc028*=0x0) returned 0x0 [0198.228] CloseHandle (hObject=0x444) returned 1 [0198.268] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\User\\Default\\AppCache\\container.dat", nBufferLength=0x105, lpBuffer=0x3bb9b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\User\\Default\\AppCache\\container.dat", lpFilePart=0x0) returned 0x8d [0198.268] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbe90) returned 1 [0198.268] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\User\\Default\\AppCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\user\\default\\appcache\\container.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0198.269] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8920) returned 1 [0198.270] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0198.270] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\User\\Default\\AppCache\\Y2EKXLK8", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\User\\Default\\AppCache\\Y2EKXLK8", lpFilePart=0x0) returned 0x88 [0198.270] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\User\\Default\\AppCache\\Y2EKXLK8\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\User\\Default\\AppCache\\Y2EKXLK8\\", lpFilePart=0x0) returned 0x89 [0198.270] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\User\\Default\\AppCache\\Y2EKXLK8\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7370 [0198.271] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0198.271] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0198.271] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0198.271] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0198.271] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0198.271] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0198.271] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0198.271] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\User\\Default\\AppCache\\Y2EKXLK8", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\User\\Default\\AppCache\\Y2EKXLK8", lpFilePart=0x0) returned 0x88 [0198.271] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\User\\Default\\AppCache\\Y2EKXLK8\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\User\\Default\\AppCache\\Y2EKXLK8\\", lpFilePart=0x0) returned 0x89 [0198.271] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\User\\Default\\AppCache\\Y2EKXLK8\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7370 [0198.271] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0198.271] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0198.272] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0198.272] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0198.272] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0198.272] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0198.272] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\User\\Default\\AppCache\\Y2EKXLK8\\container.dat", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\User\\Default\\AppCache\\Y2EKXLK8\\container.dat", lpFilePart=0x0) returned 0x96 [0198.272] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0198.272] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\User\\Default\\AppCache\\Y2EKXLK8\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\user\\default\\appcache\\y2ekxlk8\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x229bcb0 | out: lpFileInformation=0x229bcb0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x108fb4, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x108fb4, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x108fb4, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0198.274] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0198.274] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\User\\Default\\AppCache\\Y2EKXLK8\\container.dat", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\User\\Default\\AppCache\\Y2EKXLK8\\container.dat", lpFilePart=0x0) returned 0x96 [0198.274] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0198.274] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\User\\Default\\AppCache\\Y2EKXLK8\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\user\\default\\appcache\\y2ekxlk8\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0198.274] GetFileType (hFile=0x444) returned 0x1 [0198.274] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0198.274] GetFileType (hFile=0x444) returned 0x1 [0198.274] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x0 [0198.274] CloseHandle (hObject=0x444) returned 1 [0198.313] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\User\\Default\\AppCache\\Y2EKXLK8\\container.dat", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\User\\Default\\AppCache\\Y2EKXLK8\\container.dat", lpFilePart=0x0) returned 0x96 [0198.313] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0198.313] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\User\\Default\\AppCache\\Y2EKXLK8\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\user\\default\\appcache\\y2ekxlk8\\container.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0198.315] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bae40) returned 1 [0198.315] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\User\\Default\\AppCache\\Y2EKXLK8\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbac0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\User\\Default\\AppCache\\Y2EKXLK8\\container.dat", lpFilePart=0x0) returned 0x96 [0198.315] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf60) returned 1 [0198.315] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\User\\Default\\AppCache\\Y2EKXLK8\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\user\\default\\appcache\\y2ekxlk8\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x3bc040 | out: lpFileInformation=0x3bc040*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x108fb4, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x108fb4, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x108fb4, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0198.315] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbf20) returned 1 [0198.315] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\User\\Default\\AppCache\\Y2EKXLK8\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbae0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\User\\Default\\AppCache\\Y2EKXLK8\\container.dat", lpFilePart=0x0) returned 0x96 [0198.315] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf60) returned 1 [0198.315] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\User\\Default\\AppCache\\Y2EKXLK8\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\user\\default\\appcache\\y2ekxlk8\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x2312b98 | out: lpFileInformation=0x2312b98*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x108fb4, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x108fb4, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x108fb4, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0198.315] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbf20) returned 1 [0198.315] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\User\\Default\\AppCache\\Y2EKXLK8\\container.dat", nBufferLength=0x105, lpBuffer=0x3bb940, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\User\\Default\\AppCache\\Y2EKXLK8\\container.dat", lpFilePart=0x0) returned 0x96 [0198.315] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbe20) returned 1 [0198.315] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\User\\Default\\AppCache\\Y2EKXLK8\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\user\\default\\appcache\\y2ekxlk8\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0198.316] GetFileType (hFile=0x444) returned 0x1 [0198.316] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbd90) returned 1 [0198.316] GetFileType (hFile=0x444) returned 0x1 [0198.316] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bbfb8 | out: lpFileSizeHigh=0x3bbfb8*=0x0) returned 0x0 [0198.316] CloseHandle (hObject=0x444) returned 1 [0198.357] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\User\\Default\\AppCache\\Y2EKXLK8\\container.dat", nBufferLength=0x105, lpBuffer=0x3bb940, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\User\\Default\\AppCache\\Y2EKXLK8\\container.dat", lpFilePart=0x0) returned 0x96 [0198.357] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbe20) returned 1 [0198.357] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\User\\Default\\AppCache\\Y2EKXLK8\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\user\\default\\appcache\\y2ekxlk8\\container.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0198.358] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b88b0) returned 1 [0198.359] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0198.359] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\User\\Default\\EmieSiteList", nBufferLength=0x105, lpBuffer=0x3be0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\User\\Default\\EmieSiteList", lpFilePart=0x0) returned 0x83 [0198.359] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\User\\Default\\EmieSiteList\\", nBufferLength=0x105, lpBuffer=0x3be060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\User\\Default\\EmieSiteList\\", lpFilePart=0x0) returned 0x84 [0198.359] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\User\\Default\\EmieSiteList\\*", lpFindFileData=0x3be270 | out: lpFindFileData=0x3be270) returned 0x5d78b0 [0198.359] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0198.360] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 0 [0198.360] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0198.360] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0198.360] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0198.360] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0198.360] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\User\\Default\\EmieSiteList", nBufferLength=0x105, lpBuffer=0x3be0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\User\\Default\\EmieSiteList", lpFilePart=0x0) returned 0x83 [0198.360] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\User\\Default\\EmieSiteList\\", nBufferLength=0x105, lpBuffer=0x3be060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\User\\Default\\EmieSiteList\\", lpFilePart=0x0) returned 0x84 [0198.360] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\User\\Default\\EmieSiteList\\*", lpFindFileData=0x3be270 | out: lpFindFileData=0x3be270) returned 0x5d7670 [0198.360] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0198.360] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 0 [0198.360] FindClose (in: hFindFile=0x5d7670 | out: hFindFile=0x5d7670) returned 1 [0198.360] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0198.360] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0198.360] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0198.361] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Temp", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Temp", lpFilePart=0x0) returned 0x60 [0198.361] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Temp\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Temp\\", lpFilePart=0x0) returned 0x61 [0198.361] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Temp\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d7af0 [0198.361] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0198.361] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0198.361] FindClose (in: hFindFile=0x5d7af0 | out: hFindFile=0x5d7af0) returned 1 [0198.361] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0198.361] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0198.361] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0198.361] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Temp", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Temp", lpFilePart=0x0) returned 0x60 [0198.361] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Temp\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Temp\\", lpFilePart=0x0) returned 0x61 [0198.361] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Temp\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d81b0 [0198.361] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0198.362] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0198.362] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0198.362] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0198.362] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0198.362] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0198.362] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\TempState", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\TempState", lpFilePart=0x0) returned 0x65 [0198.362] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\TempState\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\TempState\\", lpFilePart=0x0) returned 0x66 [0198.362] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\TempState\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d78b0 [0198.362] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0198.362] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0198.362] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0198.362] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0198.362] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0198.363] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0198.363] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\TempState", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\TempState", lpFilePart=0x0) returned 0x65 [0198.363] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\TempState\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\TempState\\", lpFilePart=0x0) returned 0x66 [0198.363] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\TempState\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d78b0 [0198.363] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0198.363] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0198.363] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0198.363] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0198.363] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0198.363] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0198.363] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002", lpFilePart=0x0) returned 0x5b [0198.363] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\", lpFilePart=0x0) returned 0x5c [0198.363] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7370 [0198.364] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0198.364] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0198.364] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0198.364] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0198.364] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0198.364] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0198.364] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0198.364] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0198.365] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0198.365] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0198.365] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0198.365] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0198.365] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0198.365] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0198.365] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002", lpFilePart=0x0) returned 0x5b [0198.365] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\", lpFilePart=0x0) returned 0x5c [0198.365] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7550 [0198.365] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0198.365] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0198.365] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0198.365] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0198.366] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0198.366] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0198.366] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0198.366] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0198.366] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0198.366] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0198.366] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0198.366] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0198.366] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0198.366] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0198.366] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\INetCache", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\INetCache", lpFilePart=0x0) returned 0x65 [0198.366] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\INetCache\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\INetCache\\", lpFilePart=0x0) returned 0x66 [0198.366] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\INetCache\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d7c70 [0198.371] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0198.371] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0198.371] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0198.371] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0198.371] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0198.371] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0198.371] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\INetCache", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\INetCache", lpFilePart=0x0) returned 0x65 [0198.371] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\INetCache\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\INetCache\\", lpFilePart=0x0) returned 0x66 [0198.371] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\INetCache\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d78b0 [0198.371] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0198.372] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0198.372] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0198.372] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0198.372] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0198.372] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0198.372] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\INetCookies", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\INetCookies", lpFilePart=0x0) returned 0x67 [0198.372] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\INetCookies\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\INetCookies\\", lpFilePart=0x0) returned 0x68 [0198.372] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\INetCookies\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d7cd0 [0198.372] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0198.372] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0198.372] FindClose (in: hFindFile=0x5d7cd0 | out: hFindFile=0x5d7cd0) returned 1 [0198.374] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0198.374] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0198.375] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0198.375] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\INetCookies", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\INetCookies", lpFilePart=0x0) returned 0x67 [0198.375] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\INetCookies\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\INetCookies\\", lpFilePart=0x0) returned 0x68 [0198.375] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\INetCookies\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d75b0 [0198.375] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0198.375] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0198.375] FindClose (in: hFindFile=0x5d75b0 | out: hFindFile=0x5d75b0) returned 1 [0198.375] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0198.375] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0198.375] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0198.375] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\INetHistory", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\INetHistory", lpFilePart=0x0) returned 0x67 [0198.375] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\INetHistory\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\INetHistory\\", lpFilePart=0x0) returned 0x68 [0198.375] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\INetHistory\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d7c70 [0198.376] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0198.376] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0198.376] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0198.376] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0198.376] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0198.376] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0198.376] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\INetHistory", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\INetHistory", lpFilePart=0x0) returned 0x67 [0198.376] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\INetHistory\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\INetHistory\\", lpFilePart=0x0) returned 0x68 [0198.376] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\INetHistory\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d78b0 [0198.376] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0198.376] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0198.377] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0198.377] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0198.377] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0198.377] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0198.377] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\LocalState", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\LocalState", lpFilePart=0x0) returned 0x66 [0198.377] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\LocalState\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\LocalState\\", lpFilePart=0x0) returned 0x67 [0198.377] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\LocalState\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d7550 [0198.377] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0198.377] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0198.377] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0198.377] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0198.377] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0198.377] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0198.377] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\LocalState", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\LocalState", lpFilePart=0x0) returned 0x66 [0198.377] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\LocalState\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\LocalState\\", lpFilePart=0x0) returned 0x67 [0198.377] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\LocalState\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d79d0 [0198.378] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0198.378] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0198.378] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0198.378] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0198.378] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0198.378] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0198.378] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft", lpFilePart=0x0) returned 0x65 [0198.378] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\", lpFilePart=0x0) returned 0x66 [0198.378] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d78b0 [0198.380] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0198.380] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0198.380] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0198.380] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0198.380] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0198.380] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0198.381] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0198.381] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0198.381] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft", lpFilePart=0x0) returned 0x65 [0198.381] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\", lpFilePart=0x0) returned 0x66 [0198.381] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d7a30 [0198.381] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0198.381] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0198.381] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0198.381] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0198.381] FindClose (in: hFindFile=0x5d7a30 | out: hFindFile=0x5d7a30) returned 1 [0198.381] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0198.381] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0198.381] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0198.381] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache", lpFilePart=0x0) returned 0x76 [0198.381] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\", lpFilePart=0x0) returned 0x77 [0198.382] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d79d0 [0198.382] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0198.382] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0198.382] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0198.382] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0198.382] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0198.382] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0198.382] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0198.382] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0198.382] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache", lpFilePart=0x0) returned 0x76 [0198.382] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\", lpFilePart=0x0) returned 0x77 [0198.382] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d7550 [0198.383] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0198.383] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0198.383] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0198.383] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0198.383] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0198.383] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0198.383] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0198.383] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0198.383] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content", nBufferLength=0x105, lpBuffer=0x3be130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content", lpFilePart=0x0) returned 0x7e [0198.383] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content\\", nBufferLength=0x105, lpBuffer=0x3be0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content\\", lpFilePart=0x0) returned 0x7f [0198.383] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content\\*", lpFindFileData=0x3be2e0 | out: lpFindFileData=0x3be2e0) returned 0x5d7e50 [0198.409] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0198.409] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0198.410] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0198.410] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0198.410] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0198.410] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0198.410] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0198.410] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 0 [0198.410] FindClose (in: hFindFile=0x5d7e50 | out: hFindFile=0x5d7e50) returned 1 [0198.411] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0198.411] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0198.411] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0198.411] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content", nBufferLength=0x105, lpBuffer=0x3be130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content", lpFilePart=0x0) returned 0x7e [0198.411] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content\\", nBufferLength=0x105, lpBuffer=0x3be0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content\\", lpFilePart=0x0) returned 0x7f [0198.411] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content\\*", lpFindFileData=0x3be2e0 | out: lpFindFileData=0x3be2e0) returned 0x5d7370 [0198.412] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0198.412] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0198.412] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0198.412] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0198.412] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0198.412] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0198.413] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0198.413] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 0 [0198.413] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0198.413] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0198.413] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0198.413] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content\\1DAF2884EC4DFA96BA4A58D4DBC9C406", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content\\1DAF2884EC4DFA96BA4A58D4DBC9C406", lpFilePart=0x0) returned 0x9f [0198.413] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0198.413] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content\\1DAF2884EC4DFA96BA4A58D4DBC9C406" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoft\\cryptneturlcache\\content\\1daf2884ec4dfa96ba4a58d4dbc9c406"), fInfoLevelId=0x0, lpFileInformation=0x21a82f8 | out: lpFileInformation=0x21a82f8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x48abefb, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x48abefb, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x48abefb, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0xf1d)) returned 1 [0198.414] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0198.414] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content\\1DAF2884EC4DFA96BA4A58D4DBC9C406", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content\\1DAF2884EC4DFA96BA4A58D4DBC9C406", lpFilePart=0x0) returned 0x9f [0198.414] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0198.414] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content\\1DAF2884EC4DFA96BA4A58D4DBC9C406" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoft\\cryptneturlcache\\content\\1daf2884ec4dfa96ba4a58d4dbc9c406"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0198.415] GetFileType (hFile=0x444) returned 0x1 [0198.415] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be400) returned 1 [0198.415] GetFileType (hFile=0x444) returned 0x1 [0198.415] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be628 | out: lpFileSizeHigh=0x3be628*=0x0) returned 0xf1d [0198.415] ReadFile (in: hFile=0x444, lpBuffer=0x21a9670, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be558, lpOverlapped=0x0 | out: lpBuffer=0x21a9670*, lpNumberOfBytesRead=0x3be558*=0xf1d, lpOverlapped=0x0) returned 1 [0198.428] CloseHandle (hObject=0x444) returned 1 [0198.463] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content\\1DAF2884EC4DFA96BA4A58D4DBC9C406", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content\\1DAF2884EC4DFA96BA4A58D4DBC9C406", lpFilePart=0x0) returned 0x9f [0198.463] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0198.463] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content\\1DAF2884EC4DFA96BA4A58D4DBC9C406" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoft\\cryptneturlcache\\content\\1daf2884ec4dfa96ba4a58d4dbc9c406"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0198.481] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3baf20) returned 1 [0198.481] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content\\1DAF2884EC4DFA96BA4A58D4DBC9C406", nBufferLength=0x105, lpBuffer=0x3bbba0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content\\1DAF2884EC4DFA96BA4A58D4DBC9C406", lpFilePart=0x0) returned 0x9f [0198.481] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc040) returned 1 [0198.481] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content\\1DAF2884EC4DFA96BA4A58D4DBC9C406" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoft\\cryptneturlcache\\content\\1daf2884ec4dfa96ba4a58d4dbc9c406"), fInfoLevelId=0x0, lpFileInformation=0x3bc120 | out: lpFileInformation=0x3bc120*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x48abefb, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x48abefb, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x48abefb, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0xf1d)) returned 1 [0198.482] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc000) returned 1 [0198.482] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content\\1DAF2884EC4DFA96BA4A58D4DBC9C406", nBufferLength=0x105, lpBuffer=0x3bbbc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content\\1DAF2884EC4DFA96BA4A58D4DBC9C406", lpFilePart=0x0) returned 0x9f [0198.482] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc040) returned 1 [0198.482] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content\\1DAF2884EC4DFA96BA4A58D4DBC9C406" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoft\\cryptneturlcache\\content\\1daf2884ec4dfa96ba4a58d4dbc9c406"), fInfoLevelId=0x0, lpFileInformation=0x2225c58 | out: lpFileInformation=0x2225c58*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x48abefb, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x48abefb, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x48abefb, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0xf1d)) returned 1 [0198.482] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc000) returned 1 [0198.482] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content\\1DAF2884EC4DFA96BA4A58D4DBC9C406", nBufferLength=0x105, lpBuffer=0x3bba20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content\\1DAF2884EC4DFA96BA4A58D4DBC9C406", lpFilePart=0x0) returned 0x9f [0198.482] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf00) returned 1 [0198.482] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content\\1DAF2884EC4DFA96BA4A58D4DBC9C406" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoft\\cryptneturlcache\\content\\1daf2884ec4dfa96ba4a58d4dbc9c406"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0198.482] GetFileType (hFile=0x444) returned 0x1 [0198.482] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbe70) returned 1 [0198.482] GetFileType (hFile=0x444) returned 0x1 [0198.482] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc098 | out: lpFileSizeHigh=0x3bc098*=0x0) returned 0xf1d [0198.482] ReadFile (in: hFile=0x444, lpBuffer=0x2226fd0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bbfc8, lpOverlapped=0x0 | out: lpBuffer=0x2226fd0*, lpNumberOfBytesRead=0x3bbfc8*=0xf1d, lpOverlapped=0x0) returned 1 [0198.482] CloseHandle (hObject=0x444) returned 1 [0198.518] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content\\1DAF2884EC4DFA96BA4A58D4DBC9C406", nBufferLength=0x105, lpBuffer=0x3bba20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content\\1DAF2884EC4DFA96BA4A58D4DBC9C406", lpFilePart=0x0) returned 0x9f [0198.518] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf00) returned 1 [0198.518] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content\\1DAF2884EC4DFA96BA4A58D4DBC9C406" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoft\\cryptneturlcache\\content\\1daf2884ec4dfa96ba4a58d4dbc9c406"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0198.520] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8990) returned 1 [0198.520] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", lpFilePart=0x0) returned 0xc0 [0198.521] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0198.521] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoft\\cryptneturlcache\\content\\40e450f7ce13419a2ccc2a5445035a0a_06f02b1f13ab4b11b8fc669bde565af1"), fInfoLevelId=0x0, lpFileInformation=0x22a3460 | out: lpFileInformation=0x22a3460*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xffa91d49, ftCreationTime.dwHighDateTime=0x1d2d432, ftLastAccessTime.dwLowDateTime=0xffa91d49, ftLastAccessTime.dwHighDateTime=0x1d2d432, ftLastWriteTime.dwLowDateTime=0xffa930e5, ftLastWriteTime.dwHighDateTime=0x1d2d432, nFileSizeHigh=0x0, nFileSizeLow=0xb68)) returned 1 [0198.521] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0198.521] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", lpFilePart=0x0) returned 0xc0 [0198.521] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0198.521] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoft\\cryptneturlcache\\content\\40e450f7ce13419a2ccc2a5445035a0a_06f02b1f13ab4b11b8fc669bde565af1"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0198.521] GetFileType (hFile=0x444) returned 0x1 [0198.521] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be400) returned 1 [0198.521] GetFileType (hFile=0x444) returned 0x1 [0198.521] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be628 | out: lpFileSizeHigh=0x3be628*=0x0) returned 0xb68 [0198.521] ReadFile (in: hFile=0x444, lpBuffer=0x22a4530, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be558, lpOverlapped=0x0 | out: lpBuffer=0x22a4530*, lpNumberOfBytesRead=0x3be558*=0xb68, lpOverlapped=0x0) returned 1 [0198.593] CloseHandle (hObject=0x444) returned 1 [0198.629] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", lpFilePart=0x0) returned 0xc0 [0198.630] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0198.630] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoft\\cryptneturlcache\\content\\40e450f7ce13419a2ccc2a5445035a0a_06f02b1f13ab4b11b8fc669bde565af1"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0198.631] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3baf20) returned 1 [0198.631] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", nBufferLength=0x105, lpBuffer=0x3bbba0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", lpFilePart=0x0) returned 0xc0 [0198.632] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc040) returned 1 [0198.632] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoft\\cryptneturlcache\\content\\40e450f7ce13419a2ccc2a5445035a0a_06f02b1f13ab4b11b8fc669bde565af1"), fInfoLevelId=0x0, lpFileInformation=0x3bc120 | out: lpFileInformation=0x3bc120*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xffa91d49, ftCreationTime.dwHighDateTime=0x1d2d432, ftLastAccessTime.dwLowDateTime=0xffa91d49, ftLastAccessTime.dwHighDateTime=0x1d2d432, ftLastWriteTime.dwLowDateTime=0xffa930e5, ftLastWriteTime.dwHighDateTime=0x1d2d432, nFileSizeHigh=0x0, nFileSizeLow=0xb68)) returned 1 [0198.632] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc000) returned 1 [0198.632] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", nBufferLength=0x105, lpBuffer=0x3bbbc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", lpFilePart=0x0) returned 0xc0 [0198.632] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc040) returned 1 [0198.632] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoft\\cryptneturlcache\\content\\40e450f7ce13419a2ccc2a5445035a0a_06f02b1f13ab4b11b8fc669bde565af1"), fInfoLevelId=0x0, lpFileInformation=0x231f9c0 | out: lpFileInformation=0x231f9c0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xffa91d49, ftCreationTime.dwHighDateTime=0x1d2d432, ftLastAccessTime.dwLowDateTime=0xffa91d49, ftLastAccessTime.dwHighDateTime=0x1d2d432, ftLastWriteTime.dwLowDateTime=0xffa930e5, ftLastWriteTime.dwHighDateTime=0x1d2d432, nFileSizeHigh=0x0, nFileSizeLow=0xb68)) returned 1 [0198.632] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc000) returned 1 [0198.632] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", nBufferLength=0x105, lpBuffer=0x3bba20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", lpFilePart=0x0) returned 0xc0 [0198.632] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf00) returned 1 [0198.632] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoft\\cryptneturlcache\\content\\40e450f7ce13419a2ccc2a5445035a0a_06f02b1f13ab4b11b8fc669bde565af1"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0198.632] GetFileType (hFile=0x444) returned 0x1 [0198.632] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbe70) returned 1 [0198.632] GetFileType (hFile=0x444) returned 0x1 [0198.632] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc098 | out: lpFileSizeHigh=0x3bc098*=0x0) returned 0xb68 [0198.632] ReadFile (in: hFile=0x444, lpBuffer=0x2320a90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bbfc8, lpOverlapped=0x0 | out: lpBuffer=0x2320a90*, lpNumberOfBytesRead=0x3bbfc8*=0xb68, lpOverlapped=0x0) returned 1 [0198.632] CloseHandle (hObject=0x444) returned 1 [0198.729] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", nBufferLength=0x105, lpBuffer=0x3bba20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", lpFilePart=0x0) returned 0xc0 [0198.729] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf00) returned 1 [0198.729] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoft\\cryptneturlcache\\content\\40e450f7ce13419a2ccc2a5445035a0a_06f02b1f13ab4b11b8fc669bde565af1"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0198.731] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8990) returned 1 [0198.731] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", lpFilePart=0x0) returned 0x9f [0198.731] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0198.731] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoft\\cryptneturlcache\\content\\57c8edb95df3f0ad4ee2dc2b8cfd4157"), fInfoLevelId=0x0, lpFileInformation=0x219d768 | out: lpFileInformation=0x219d768*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xffc5a77a, ftCreationTime.dwHighDateTime=0x1d2d432, ftLastAccessTime.dwLowDateTime=0xffc5a77a, ftLastAccessTime.dwHighDateTime=0x1d2d432, ftLastWriteTime.dwLowDateTime=0x38a6bc17, ftLastWriteTime.dwHighDateTime=0x1d2fc21, nFileSizeHigh=0x0, nFileSizeLow=0x19a4)) returned 1 [0198.732] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0198.732] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", lpFilePart=0x0) returned 0x9f [0198.732] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0198.732] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoft\\cryptneturlcache\\content\\57c8edb95df3f0ad4ee2dc2b8cfd4157"), fInfoLevelId=0x0, lpFileInformation=0x219d988 | out: lpFileInformation=0x219d988*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xffc5a77a, ftCreationTime.dwHighDateTime=0x1d2d432, ftLastAccessTime.dwLowDateTime=0xffc5a77a, ftLastAccessTime.dwHighDateTime=0x1d2d432, ftLastWriteTime.dwLowDateTime=0x38a6bc17, ftLastWriteTime.dwHighDateTime=0x1d2fc21, nFileSizeHigh=0x0, nFileSizeLow=0x19a4)) returned 1 [0198.732] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0198.732] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", nBufferLength=0x105, lpBuffer=0x3be040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", lpFilePart=0x0) returned 0x9f [0198.732] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0198.732] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoft\\cryptneturlcache\\content\\57c8edb95df3f0ad4ee2dc2b8cfd4157"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0198.733] GetFileType (hFile=0x444) returned 0x1 [0198.733] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be490) returned 1 [0198.733] GetFileType (hFile=0x444) returned 0x1 [0198.733] ReadFile (in: hFile=0x444, lpBuffer=0x219fef8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5a8, lpOverlapped=0x0 | out: lpBuffer=0x219fef8*, lpNumberOfBytesRead=0x3be5a8*=0x1000, lpOverlapped=0x0) returned 1 [0198.791] CloseHandle (hObject=0x444) returned 1 [0198.792] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", nBufferLength=0x105, lpBuffer=0x3be040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", lpFilePart=0x0) returned 0x9f [0198.792] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0198.792] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoft\\cryptneturlcache\\content\\57c8edb95df3f0ad4ee2dc2b8cfd4157"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0198.792] GetFileType (hFile=0x444) returned 0x1 [0198.792] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be490) returned 1 [0198.792] GetFileType (hFile=0x444) returned 0x1 [0198.792] WriteFile (in: hFile=0x444, lpBuffer=0x219db88*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be658, lpOverlapped=0x0 | out: lpBuffer=0x219db88*, lpNumberOfBytesWritten=0x3be658*=0x2000, lpOverlapped=0x0) returned 1 [0198.792] CloseHandle (hObject=0x444) returned 1 [0198.792] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", lpFilePart=0x0) returned 0x9f [0198.793] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157.xuy", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157.xuy", lpFilePart=0x0) returned 0xa3 [0198.793] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0198.793] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoft\\cryptneturlcache\\content\\57c8edb95df3f0ad4ee2dc2b8cfd4157"), fInfoLevelId=0x0, lpFileInformation=0x3be670 | out: lpFileInformation=0x3be670*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xffc5a77a, ftCreationTime.dwHighDateTime=0x1d2d432, ftLastAccessTime.dwLowDateTime=0xffc5a77a, ftLastAccessTime.dwHighDateTime=0x1d2d432, ftLastWriteTime.dwLowDateTime=0x6256c234, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0198.793] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0198.793] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoft\\cryptneturlcache\\content\\57c8edb95df3f0ad4ee2dc2b8cfd4157"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoft\\cryptneturlcache\\content\\57c8edb95df3f0ad4ee2dc2b8cfd4157.xuy")) returned 1 [0198.794] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506", lpFilePart=0x0) returned 0x9f [0198.794] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0198.794] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoft\\cryptneturlcache\\content\\77ec63bda74bd0d0e0426dc8f8008506"), fInfoLevelId=0x0, lpFileInformation=0x221c550 | out: lpFileInformation=0x221c550*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xffb94aae, ftCreationTime.dwHighDateTime=0x1d2d432, ftLastAccessTime.dwLowDateTime=0xffb94aae, ftLastAccessTime.dwHighDateTime=0x1d2d432, ftLastWriteTime.dwLowDateTime=0xffb94aae, ftLastWriteTime.dwHighDateTime=0x1d2d432, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0198.803] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0198.803] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506", lpFilePart=0x0) returned 0x9f [0198.803] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0198.803] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoft\\cryptneturlcache\\content\\77ec63bda74bd0d0e0426dc8f8008506"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0198.803] GetFileType (hFile=0x444) returned 0x1 [0198.803] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be400) returned 1 [0198.803] GetFileType (hFile=0x444) returned 0x1 [0198.803] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be628 | out: lpFileSizeHigh=0x3be628*=0x0) returned 0x0 [0198.803] CloseHandle (hObject=0x444) returned 1 [0198.814] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506", lpFilePart=0x0) returned 0x9f [0198.815] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0198.815] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoft\\cryptneturlcache\\content\\77ec63bda74bd0d0e0426dc8f8008506"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0198.816] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3baf20) returned 1 [0198.816] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506", nBufferLength=0x105, lpBuffer=0x3bbba0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506", lpFilePart=0x0) returned 0x9f [0198.816] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc040) returned 1 [0198.816] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoft\\cryptneturlcache\\content\\77ec63bda74bd0d0e0426dc8f8008506"), fInfoLevelId=0x0, lpFileInformation=0x3bc120 | out: lpFileInformation=0x3bc120*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xffb94aae, ftCreationTime.dwHighDateTime=0x1d2d432, ftLastAccessTime.dwLowDateTime=0xffb94aae, ftLastAccessTime.dwHighDateTime=0x1d2d432, ftLastWriteTime.dwLowDateTime=0xffb94aae, ftLastWriteTime.dwHighDateTime=0x1d2d432, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0198.817] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc000) returned 1 [0198.817] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506", nBufferLength=0x105, lpBuffer=0x3bbbc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506", lpFilePart=0x0) returned 0x9f [0198.817] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc040) returned 1 [0198.817] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoft\\cryptneturlcache\\content\\77ec63bda74bd0d0e0426dc8f8008506"), fInfoLevelId=0x0, lpFileInformation=0x2293500 | out: lpFileInformation=0x2293500*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xffb94aae, ftCreationTime.dwHighDateTime=0x1d2d432, ftLastAccessTime.dwLowDateTime=0xffb94aae, ftLastAccessTime.dwHighDateTime=0x1d2d432, ftLastWriteTime.dwLowDateTime=0xffb94aae, ftLastWriteTime.dwHighDateTime=0x1d2d432, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0198.817] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc000) returned 1 [0198.817] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506", nBufferLength=0x105, lpBuffer=0x3bba20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506", lpFilePart=0x0) returned 0x9f [0198.817] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf00) returned 1 [0198.817] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoft\\cryptneturlcache\\content\\77ec63bda74bd0d0e0426dc8f8008506"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0198.817] GetFileType (hFile=0x444) returned 0x1 [0198.817] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbe70) returned 1 [0198.817] GetFileType (hFile=0x444) returned 0x1 [0198.817] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc098 | out: lpFileSizeHigh=0x3bc098*=0x0) returned 0x0 [0198.817] CloseHandle (hObject=0x444) returned 1 [0198.857] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506", nBufferLength=0x105, lpBuffer=0x3bba20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506", lpFilePart=0x0) returned 0x9f [0198.857] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf00) returned 1 [0198.857] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoft\\cryptneturlcache\\content\\77ec63bda74bd0d0e0426dc8f8008506"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0198.859] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8990) returned 1 [0198.859] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content\\8828F39C7C0CE9A14B25C7EB321181BA_8C550960E440B9C3B93A6A0AA915C9BE", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content\\8828F39C7C0CE9A14B25C7EB321181BA_8C550960E440B9C3B93A6A0AA915C9BE", lpFilePart=0x0) returned 0xc0 [0198.859] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0198.859] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content\\8828F39C7C0CE9A14B25C7EB321181BA_8C550960E440B9C3B93A6A0AA915C9BE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoft\\cryptneturlcache\\content\\8828f39c7c0ce9a14b25c7eb321181ba_8c550960e440b9c3b93a6a0aa915c9be"), fInfoLevelId=0x0, lpFileInformation=0x230a358 | out: lpFileInformation=0x230a358*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x595f2f, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x595f2f, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x15dc850f, ftLastWriteTime.dwHighDateTime=0x1d2fc21, nFileSizeHigh=0x0, nFileSizeLow=0x6e3)) returned 1 [0198.860] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0198.860] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content\\8828F39C7C0CE9A14B25C7EB321181BA_8C550960E440B9C3B93A6A0AA915C9BE", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content\\8828F39C7C0CE9A14B25C7EB321181BA_8C550960E440B9C3B93A6A0AA915C9BE", lpFilePart=0x0) returned 0xc0 [0198.860] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0198.860] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content\\8828F39C7C0CE9A14B25C7EB321181BA_8C550960E440B9C3B93A6A0AA915C9BE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoft\\cryptneturlcache\\content\\8828f39c7c0ce9a14b25c7eb321181ba_8c550960e440b9c3b93a6a0aa915c9be"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0198.860] GetFileType (hFile=0x444) returned 0x1 [0198.860] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be400) returned 1 [0198.860] GetFileType (hFile=0x444) returned 0x1 [0198.860] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be628 | out: lpFileSizeHigh=0x3be628*=0x0) returned 0x6e3 [0198.860] ReadFile (in: hFile=0x444, lpBuffer=0x230afa8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be558, lpOverlapped=0x0 | out: lpBuffer=0x230afa8*, lpNumberOfBytesRead=0x3be558*=0x6e3, lpOverlapped=0x0) returned 1 [0198.861] CloseHandle (hObject=0x444) returned 1 [0198.899] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content\\8828F39C7C0CE9A14B25C7EB321181BA_8C550960E440B9C3B93A6A0AA915C9BE", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content\\8828F39C7C0CE9A14B25C7EB321181BA_8C550960E440B9C3B93A6A0AA915C9BE", lpFilePart=0x0) returned 0xc0 [0198.899] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0198.899] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content\\8828F39C7C0CE9A14B25C7EB321181BA_8C550960E440B9C3B93A6A0AA915C9BE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoft\\cryptneturlcache\\content\\8828f39c7c0ce9a14b25c7eb321181ba_8c550960e440b9c3b93a6a0aa915c9be"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0198.901] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3baf20) returned 1 [0198.901] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content\\8828F39C7C0CE9A14B25C7EB321181BA_8C550960E440B9C3B93A6A0AA915C9BE", nBufferLength=0x105, lpBuffer=0x3bbba0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content\\8828F39C7C0CE9A14B25C7EB321181BA_8C550960E440B9C3B93A6A0AA915C9BE", lpFilePart=0x0) returned 0xc0 [0198.901] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc040) returned 1 [0198.901] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content\\8828F39C7C0CE9A14B25C7EB321181BA_8C550960E440B9C3B93A6A0AA915C9BE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoft\\cryptneturlcache\\content\\8828f39c7c0ce9a14b25c7eb321181ba_8c550960e440b9c3b93a6a0aa915c9be"), fInfoLevelId=0x0, lpFileInformation=0x3bc120 | out: lpFileInformation=0x3bc120*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x595f2f, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x595f2f, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x15dc850f, ftLastWriteTime.dwHighDateTime=0x1d2fc21, nFileSizeHigh=0x0, nFileSizeLow=0x6e3)) returned 1 [0198.901] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc000) returned 1 [0198.901] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content\\8828F39C7C0CE9A14B25C7EB321181BA_8C550960E440B9C3B93A6A0AA915C9BE", nBufferLength=0x105, lpBuffer=0x3bbbc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content\\8828F39C7C0CE9A14B25C7EB321181BA_8C550960E440B9C3B93A6A0AA915C9BE", lpFilePart=0x0) returned 0xc0 [0198.901] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc040) returned 1 [0198.902] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content\\8828F39C7C0CE9A14B25C7EB321181BA_8C550960E440B9C3B93A6A0AA915C9BE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoft\\cryptneturlcache\\content\\8828f39c7c0ce9a14b25c7eb321181ba_8c550960e440b9c3b93a6a0aa915c9be"), fInfoLevelId=0x0, lpFileInformation=0x2384dc0 | out: lpFileInformation=0x2384dc0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x595f2f, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x595f2f, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x15dc850f, ftLastWriteTime.dwHighDateTime=0x1d2fc21, nFileSizeHigh=0x0, nFileSizeLow=0x6e3)) returned 1 [0198.902] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc000) returned 1 [0198.902] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content\\8828F39C7C0CE9A14B25C7EB321181BA_8C550960E440B9C3B93A6A0AA915C9BE", nBufferLength=0x105, lpBuffer=0x3bba20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content\\8828F39C7C0CE9A14B25C7EB321181BA_8C550960E440B9C3B93A6A0AA915C9BE", lpFilePart=0x0) returned 0xc0 [0198.902] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf00) returned 1 [0198.902] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content\\8828F39C7C0CE9A14B25C7EB321181BA_8C550960E440B9C3B93A6A0AA915C9BE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoft\\cryptneturlcache\\content\\8828f39c7c0ce9a14b25c7eb321181ba_8c550960e440b9c3b93a6a0aa915c9be"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0198.902] GetFileType (hFile=0x444) returned 0x1 [0198.902] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbe70) returned 1 [0198.902] GetFileType (hFile=0x444) returned 0x1 [0198.902] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc098 | out: lpFileSizeHigh=0x3bc098*=0x0) returned 0x6e3 [0198.902] ReadFile (in: hFile=0x444, lpBuffer=0x2385a10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bbfc8, lpOverlapped=0x0 | out: lpBuffer=0x2385a10*, lpNumberOfBytesRead=0x3bbfc8*=0x6e3, lpOverlapped=0x0) returned 1 [0198.902] CloseHandle (hObject=0x444) returned 1 [0198.945] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content\\8828F39C7C0CE9A14B25C7EB321181BA_8C550960E440B9C3B93A6A0AA915C9BE", nBufferLength=0x105, lpBuffer=0x3bba20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content\\8828F39C7C0CE9A14B25C7EB321181BA_8C550960E440B9C3B93A6A0AA915C9BE", lpFilePart=0x0) returned 0xc0 [0198.945] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf00) returned 1 [0198.945] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content\\8828F39C7C0CE9A14B25C7EB321181BA_8C550960E440B9C3B93A6A0AA915C9BE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoft\\cryptneturlcache\\content\\8828f39c7c0ce9a14b25c7eb321181ba_8c550960e440b9c3b93a6a0aa915c9be"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0198.946] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8990) returned 1 [0198.947] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749", lpFilePart=0x0) returned 0x9f [0198.947] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0198.947] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoft\\cryptneturlcache\\content\\fb0d848f74f70bb2eaa93746d24d9749"), fInfoLevelId=0x0, lpFileInformation=0x21ff090 | out: lpFileInformation=0x21ff090*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xffe807b3, ftCreationTime.dwHighDateTime=0x1d2d432, ftLastAccessTime.dwLowDateTime=0xffe807b3, ftLastAccessTime.dwHighDateTime=0x1d2d432, ftLastWriteTime.dwLowDateTime=0x38ab80a6, ftLastWriteTime.dwHighDateTime=0x1d2fc21, nFileSizeHigh=0x0, nFileSizeLow=0x1e74)) returned 1 [0198.950] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0198.950] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749", lpFilePart=0x0) returned 0x9f [0198.950] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0198.950] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoft\\cryptneturlcache\\content\\fb0d848f74f70bb2eaa93746d24d9749"), fInfoLevelId=0x0, lpFileInformation=0x21ff2b0 | out: lpFileInformation=0x21ff2b0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xffe807b3, ftCreationTime.dwHighDateTime=0x1d2d432, ftLastAccessTime.dwLowDateTime=0xffe807b3, ftLastAccessTime.dwHighDateTime=0x1d2d432, ftLastWriteTime.dwLowDateTime=0x38ab80a6, ftLastWriteTime.dwHighDateTime=0x1d2fc21, nFileSizeHigh=0x0, nFileSizeLow=0x1e74)) returned 1 [0198.950] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0198.950] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749", nBufferLength=0x105, lpBuffer=0x3be040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749", lpFilePart=0x0) returned 0x9f [0198.950] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0198.950] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoft\\cryptneturlcache\\content\\fb0d848f74f70bb2eaa93746d24d9749"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0198.951] GetFileType (hFile=0x444) returned 0x1 [0198.951] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be490) returned 1 [0198.951] GetFileType (hFile=0x444) returned 0x1 [0198.951] ReadFile (in: hFile=0x444, lpBuffer=0x2201820, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5a8, lpOverlapped=0x0 | out: lpBuffer=0x2201820*, lpNumberOfBytesRead=0x3be5a8*=0x1000, lpOverlapped=0x0) returned 1 [0199.004] CloseHandle (hObject=0x444) returned 1 [0199.004] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749", nBufferLength=0x105, lpBuffer=0x3be040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749", lpFilePart=0x0) returned 0x9f [0199.004] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0199.004] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoft\\cryptneturlcache\\content\\fb0d848f74f70bb2eaa93746d24d9749"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0199.004] GetFileType (hFile=0x444) returned 0x1 [0199.004] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be490) returned 1 [0199.004] GetFileType (hFile=0x444) returned 0x1 [0199.004] WriteFile (in: hFile=0x444, lpBuffer=0x21ff4b0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be658, lpOverlapped=0x0 | out: lpBuffer=0x21ff4b0*, lpNumberOfBytesWritten=0x3be658*=0x2000, lpOverlapped=0x0) returned 1 [0199.004] CloseHandle (hObject=0x444) returned 1 [0199.005] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749", lpFilePart=0x0) returned 0x9f [0199.005] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749.xuy", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749.xuy", lpFilePart=0x0) returned 0xa3 [0199.005] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0199.005] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoft\\cryptneturlcache\\content\\fb0d848f74f70bb2eaa93746d24d9749"), fInfoLevelId=0x0, lpFileInformation=0x3be670 | out: lpFileInformation=0x3be670*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xffe807b3, ftCreationTime.dwHighDateTime=0x1d2d432, ftLastAccessTime.dwLowDateTime=0xffe807b3, ftLastAccessTime.dwHighDateTime=0x1d2d432, ftLastWriteTime.dwLowDateTime=0x6275c053, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0199.005] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0199.005] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoft\\cryptneturlcache\\content\\fb0d848f74f70bb2eaa93746d24d9749"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoft\\cryptneturlcache\\content\\fb0d848f74f70bb2eaa93746d24d9749.xuy")) returned 1 [0199.007] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0199.007] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData", nBufferLength=0x105, lpBuffer=0x3be130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData", lpFilePart=0x0) returned 0x7f [0199.007] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\", nBufferLength=0x105, lpBuffer=0x3be0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\", lpFilePart=0x0) returned 0x80 [0199.007] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\*", lpFindFileData=0x3be2e0 | out: lpFindFileData=0x3be2e0) returned 0x5d7370 [0199.078] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0199.078] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0199.078] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0199.079] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0199.079] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0199.079] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0199.079] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0199.079] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 0 [0199.079] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0199.080] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0199.080] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0199.080] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0199.080] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData", nBufferLength=0x105, lpBuffer=0x3be130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData", lpFilePart=0x0) returned 0x7f [0199.080] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\", nBufferLength=0x105, lpBuffer=0x3be0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\", lpFilePart=0x0) returned 0x80 [0199.080] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\*", lpFindFileData=0x3be2e0 | out: lpFindFileData=0x3be2e0) returned 0x5d7cd0 [0199.081] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0199.081] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0199.081] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0199.081] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0199.082] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0199.082] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0199.082] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0199.082] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 0 [0199.082] FindClose (in: hFindFile=0x5d7cd0 | out: hFindFile=0x5d7cd0) returned 1 [0199.083] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0199.083] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0199.083] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\1DAF2884EC4DFA96BA4A58D4DBC9C406", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\1DAF2884EC4DFA96BA4A58D4DBC9C406", lpFilePart=0x0) returned 0xa0 [0199.083] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0199.083] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\1DAF2884EC4DFA96BA4A58D4DBC9C406" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoft\\cryptneturlcache\\metadata\\1daf2884ec4dfa96ba4a58d4dbc9c406"), fInfoLevelId=0x0, lpFileInformation=0x2283438 | out: lpFileInformation=0x2283438*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x48abefb, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x48abefb, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x24500a60, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x10c)) returned 1 [0199.084] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0199.084] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\1DAF2884EC4DFA96BA4A58D4DBC9C406", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\1DAF2884EC4DFA96BA4A58D4DBC9C406", lpFilePart=0x0) returned 0xa0 [0199.084] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0199.084] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\1DAF2884EC4DFA96BA4A58D4DBC9C406" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoft\\cryptneturlcache\\metadata\\1daf2884ec4dfa96ba4a58d4dbc9c406"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0199.084] GetFileType (hFile=0x444) returned 0x1 [0199.084] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be400) returned 1 [0199.085] GetFileType (hFile=0x444) returned 0x1 [0199.085] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be628 | out: lpFileSizeHigh=0x3be628*=0x0) returned 0x10c [0199.085] ReadFile (in: hFile=0x444, lpBuffer=0x22839b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be558, lpOverlapped=0x0 | out: lpBuffer=0x22839b0*, lpNumberOfBytesRead=0x3be558*=0x10c, lpOverlapped=0x0) returned 1 [0199.085] CloseHandle (hObject=0x444) returned 1 [0199.095] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\1DAF2884EC4DFA96BA4A58D4DBC9C406", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\1DAF2884EC4DFA96BA4A58D4DBC9C406", lpFilePart=0x0) returned 0xa0 [0199.095] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0199.095] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\1DAF2884EC4DFA96BA4A58D4DBC9C406" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoft\\cryptneturlcache\\metadata\\1daf2884ec4dfa96ba4a58d4dbc9c406"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0199.097] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3baf20) returned 1 [0199.097] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\1DAF2884EC4DFA96BA4A58D4DBC9C406", nBufferLength=0x105, lpBuffer=0x3bbba0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\1DAF2884EC4DFA96BA4A58D4DBC9C406", lpFilePart=0x0) returned 0xa0 [0199.097] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc040) returned 1 [0199.097] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\1DAF2884EC4DFA96BA4A58D4DBC9C406" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoft\\cryptneturlcache\\metadata\\1daf2884ec4dfa96ba4a58d4dbc9c406"), fInfoLevelId=0x0, lpFileInformation=0x3bc120 | out: lpFileInformation=0x3bc120*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x48abefb, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x48abefb, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x24500a60, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x10c)) returned 1 [0199.097] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc000) returned 1 [0199.097] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\1DAF2884EC4DFA96BA4A58D4DBC9C406", nBufferLength=0x105, lpBuffer=0x3bbbc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\1DAF2884EC4DFA96BA4A58D4DBC9C406", lpFilePart=0x0) returned 0xa0 [0199.097] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc040) returned 1 [0199.097] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\1DAF2884EC4DFA96BA4A58D4DBC9C406" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoft\\cryptneturlcache\\metadata\\1daf2884ec4dfa96ba4a58d4dbc9c406"), fInfoLevelId=0x0, lpFileInformation=0x22fb960 | out: lpFileInformation=0x22fb960*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x48abefb, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x48abefb, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x24500a60, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x10c)) returned 1 [0199.097] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc000) returned 1 [0199.097] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\1DAF2884EC4DFA96BA4A58D4DBC9C406", nBufferLength=0x105, lpBuffer=0x3bba20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\1DAF2884EC4DFA96BA4A58D4DBC9C406", lpFilePart=0x0) returned 0xa0 [0199.097] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf00) returned 1 [0199.097] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\1DAF2884EC4DFA96BA4A58D4DBC9C406" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoft\\cryptneturlcache\\metadata\\1daf2884ec4dfa96ba4a58d4dbc9c406"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0199.098] GetFileType (hFile=0x444) returned 0x1 [0199.098] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbe70) returned 1 [0199.098] GetFileType (hFile=0x444) returned 0x1 [0199.098] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc098 | out: lpFileSizeHigh=0x3bc098*=0x0) returned 0x10c [0199.098] ReadFile (in: hFile=0x444, lpBuffer=0x22fbed8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bbfc8, lpOverlapped=0x0 | out: lpBuffer=0x22fbed8*, lpNumberOfBytesRead=0x3bbfc8*=0x10c, lpOverlapped=0x0) returned 1 [0199.098] CloseHandle (hObject=0x444) returned 1 [0199.141] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\1DAF2884EC4DFA96BA4A58D4DBC9C406", nBufferLength=0x105, lpBuffer=0x3bba20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\1DAF2884EC4DFA96BA4A58D4DBC9C406", lpFilePart=0x0) returned 0xa0 [0199.141] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf00) returned 1 [0199.141] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\1DAF2884EC4DFA96BA4A58D4DBC9C406" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoft\\cryptneturlcache\\metadata\\1daf2884ec4dfa96ba4a58d4dbc9c406"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0199.143] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8990) returned 1 [0199.143] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", lpFilePart=0x0) returned 0xc1 [0199.143] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0199.143] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoft\\cryptneturlcache\\metadata\\40e450f7ce13419a2ccc2a5445035a0a_06f02b1f13ab4b11b8fc669bde565af1"), fInfoLevelId=0x0, lpFileInformation=0x2373d28 | out: lpFileInformation=0x2373d28*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xffa909cc, ftCreationTime.dwHighDateTime=0x1d2d432, ftLastAccessTime.dwLowDateTime=0xffa909cc, ftLastAccessTime.dwHighDateTime=0x1d2d432, ftLastWriteTime.dwLowDateTime=0x24500a60, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x190)) returned 1 [0199.144] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0199.144] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", lpFilePart=0x0) returned 0xc1 [0199.144] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0199.144] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoft\\cryptneturlcache\\metadata\\40e450f7ce13419a2ccc2a5445035a0a_06f02b1f13ab4b11b8fc669bde565af1"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0199.144] GetFileType (hFile=0x444) returned 0x1 [0199.144] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be400) returned 1 [0199.144] GetFileType (hFile=0x444) returned 0x1 [0199.144] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be628 | out: lpFileSizeHigh=0x3be628*=0x0) returned 0x190 [0199.144] ReadFile (in: hFile=0x444, lpBuffer=0x2374420, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be558, lpOverlapped=0x0 | out: lpBuffer=0x2374420*, lpNumberOfBytesRead=0x3be558*=0x190, lpOverlapped=0x0) returned 1 [0199.145] CloseHandle (hObject=0x444) returned 1 [0199.188] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", lpFilePart=0x0) returned 0xc1 [0199.188] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0199.188] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoft\\cryptneturlcache\\metadata\\40e450f7ce13419a2ccc2a5445035a0a_06f02b1f13ab4b11b8fc669bde565af1"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0199.190] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3baf20) returned 1 [0199.191] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", nBufferLength=0x105, lpBuffer=0x3bbba0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", lpFilePart=0x0) returned 0xc1 [0199.191] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc040) returned 1 [0199.191] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoft\\cryptneturlcache\\metadata\\40e450f7ce13419a2ccc2a5445035a0a_06f02b1f13ab4b11b8fc669bde565af1"), fInfoLevelId=0x0, lpFileInformation=0x3bc120 | out: lpFileInformation=0x3bc120*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xffa909cc, ftCreationTime.dwHighDateTime=0x1d2d432, ftLastAccessTime.dwLowDateTime=0xffa909cc, ftLastAccessTime.dwHighDateTime=0x1d2d432, ftLastWriteTime.dwLowDateTime=0x24500a60, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x190)) returned 1 [0199.191] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc000) returned 1 [0199.191] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", nBufferLength=0x105, lpBuffer=0x3bbbc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", lpFilePart=0x0) returned 0xc1 [0199.191] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc040) returned 1 [0199.191] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoft\\cryptneturlcache\\metadata\\40e450f7ce13419a2ccc2a5445035a0a_06f02b1f13ab4b11b8fc669bde565af1"), fInfoLevelId=0x0, lpFileInformation=0x21ebf98 | out: lpFileInformation=0x21ebf98*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xffa909cc, ftCreationTime.dwHighDateTime=0x1d2d432, ftLastAccessTime.dwLowDateTime=0xffa909cc, ftLastAccessTime.dwHighDateTime=0x1d2d432, ftLastWriteTime.dwLowDateTime=0x24500a60, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x190)) returned 1 [0199.191] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc000) returned 1 [0199.191] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", nBufferLength=0x105, lpBuffer=0x3bba20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", lpFilePart=0x0) returned 0xc1 [0199.191] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf00) returned 1 [0199.191] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoft\\cryptneturlcache\\metadata\\40e450f7ce13419a2ccc2a5445035a0a_06f02b1f13ab4b11b8fc669bde565af1"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0199.191] GetFileType (hFile=0x444) returned 0x1 [0199.191] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbe70) returned 1 [0199.191] GetFileType (hFile=0x444) returned 0x1 [0199.191] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc098 | out: lpFileSizeHigh=0x3bc098*=0x0) returned 0x190 [0199.191] ReadFile (in: hFile=0x444, lpBuffer=0x21ec690, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bbfc8, lpOverlapped=0x0 | out: lpBuffer=0x21ec690*, lpNumberOfBytesRead=0x3bbfc8*=0x190, lpOverlapped=0x0) returned 1 [0199.192] CloseHandle (hObject=0x444) returned 1 [0199.231] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", nBufferLength=0x105, lpBuffer=0x3bba20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", lpFilePart=0x0) returned 0xc1 [0199.231] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf00) returned 1 [0199.231] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoft\\cryptneturlcache\\metadata\\40e450f7ce13419a2ccc2a5445035a0a_06f02b1f13ab4b11b8fc669bde565af1"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0199.233] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8990) returned 1 [0199.234] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", lpFilePart=0x0) returned 0xa0 [0199.234] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0199.234] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoft\\cryptneturlcache\\metadata\\57c8edb95df3f0ad4ee2dc2b8cfd4157"), fInfoLevelId=0x0, lpFileInformation=0x2264878 | out: lpFileInformation=0x2264878*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xffc09e1a, ftCreationTime.dwHighDateTime=0x1d2d432, ftLastAccessTime.dwLowDateTime=0xffc09e1a, ftLastAccessTime.dwHighDateTime=0x1d2d432, ftLastWriteTime.dwLowDateTime=0x38a6bc17, ftLastWriteTime.dwHighDateTime=0x1d2fc21, nFileSizeHigh=0x0, nFileSizeLow=0x154)) returned 1 [0199.234] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0199.234] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", lpFilePart=0x0) returned 0xa0 [0199.234] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0199.234] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoft\\cryptneturlcache\\metadata\\57c8edb95df3f0ad4ee2dc2b8cfd4157"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0199.234] GetFileType (hFile=0x444) returned 0x1 [0199.234] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be400) returned 1 [0199.234] GetFileType (hFile=0x444) returned 0x1 [0199.234] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be628 | out: lpFileSizeHigh=0x3be628*=0x0) returned 0x154 [0199.235] ReadFile (in: hFile=0x444, lpBuffer=0x2264e38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be558, lpOverlapped=0x0 | out: lpBuffer=0x2264e38*, lpNumberOfBytesRead=0x3be558*=0x154, lpOverlapped=0x0) returned 1 [0199.235] CloseHandle (hObject=0x444) returned 1 [0199.274] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", lpFilePart=0x0) returned 0xa0 [0199.274] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0199.274] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoft\\cryptneturlcache\\metadata\\57c8edb95df3f0ad4ee2dc2b8cfd4157"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0199.276] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3baf20) returned 1 [0199.276] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", nBufferLength=0x105, lpBuffer=0x3bbba0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", lpFilePart=0x0) returned 0xa0 [0199.276] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc040) returned 1 [0199.276] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoft\\cryptneturlcache\\metadata\\57c8edb95df3f0ad4ee2dc2b8cfd4157"), fInfoLevelId=0x0, lpFileInformation=0x3bc120 | out: lpFileInformation=0x3bc120*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xffc09e1a, ftCreationTime.dwHighDateTime=0x1d2d432, ftLastAccessTime.dwLowDateTime=0xffc09e1a, ftLastAccessTime.dwHighDateTime=0x1d2d432, ftLastWriteTime.dwLowDateTime=0x38a6bc17, ftLastWriteTime.dwHighDateTime=0x1d2fc21, nFileSizeHigh=0x0, nFileSizeLow=0x154)) returned 1 [0199.276] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc000) returned 1 [0199.276] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", nBufferLength=0x105, lpBuffer=0x3bbbc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", lpFilePart=0x0) returned 0xa0 [0199.276] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc040) returned 1 [0199.277] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoft\\cryptneturlcache\\metadata\\57c8edb95df3f0ad4ee2dc2b8cfd4157"), fInfoLevelId=0x0, lpFileInformation=0x22dcf80 | out: lpFileInformation=0x22dcf80*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xffc09e1a, ftCreationTime.dwHighDateTime=0x1d2d432, ftLastAccessTime.dwLowDateTime=0xffc09e1a, ftLastAccessTime.dwHighDateTime=0x1d2d432, ftLastWriteTime.dwLowDateTime=0x38a6bc17, ftLastWriteTime.dwHighDateTime=0x1d2fc21, nFileSizeHigh=0x0, nFileSizeLow=0x154)) returned 1 [0199.277] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc000) returned 1 [0199.277] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", nBufferLength=0x105, lpBuffer=0x3bba20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", lpFilePart=0x0) returned 0xa0 [0199.277] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf00) returned 1 [0199.277] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoft\\cryptneturlcache\\metadata\\57c8edb95df3f0ad4ee2dc2b8cfd4157"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0199.277] GetFileType (hFile=0x444) returned 0x1 [0199.277] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbe70) returned 1 [0199.277] GetFileType (hFile=0x444) returned 0x1 [0199.277] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc098 | out: lpFileSizeHigh=0x3bc098*=0x0) returned 0x154 [0199.277] ReadFile (in: hFile=0x444, lpBuffer=0x22dd540, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bbfc8, lpOverlapped=0x0 | out: lpBuffer=0x22dd540*, lpNumberOfBytesRead=0x3bbfc8*=0x154, lpOverlapped=0x0) returned 1 [0199.277] CloseHandle (hObject=0x444) returned 1 [0199.324] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", nBufferLength=0x105, lpBuffer=0x3bba20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", lpFilePart=0x0) returned 0xa0 [0199.324] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf00) returned 1 [0199.324] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoft\\cryptneturlcache\\metadata\\57c8edb95df3f0ad4ee2dc2b8cfd4157"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0199.325] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8990) returned 1 [0199.326] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506", lpFilePart=0x0) returned 0xa0 [0199.326] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0199.326] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoft\\cryptneturlcache\\metadata\\77ec63bda74bd0d0e0426dc8f8008506"), fInfoLevelId=0x0, lpFileInformation=0x2355528 | out: lpFileInformation=0x2355528*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xffb66466, ftCreationTime.dwHighDateTime=0x1d2d432, ftLastAccessTime.dwLowDateTime=0xffb66466, ftLastAccessTime.dwHighDateTime=0x1d2d432, ftLastWriteTime.dwLowDateTime=0x14cce7cb, ftLastWriteTime.dwHighDateTime=0x1d2fc21, nFileSizeHigh=0x0, nFileSizeLow=0x122)) returned 1 [0199.327] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0199.327] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506", lpFilePart=0x0) returned 0xa0 [0199.327] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0199.327] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoft\\cryptneturlcache\\metadata\\77ec63bda74bd0d0e0426dc8f8008506"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0199.327] GetFileType (hFile=0x444) returned 0x1 [0199.327] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be400) returned 1 [0199.327] GetFileType (hFile=0x444) returned 0x1 [0199.327] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be628 | out: lpFileSizeHigh=0x3be628*=0x0) returned 0x122 [0199.327] ReadFile (in: hFile=0x444, lpBuffer=0x2355ab8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be558, lpOverlapped=0x0 | out: lpBuffer=0x2355ab8*, lpNumberOfBytesRead=0x3be558*=0x122, lpOverlapped=0x0) returned 1 [0199.328] CloseHandle (hObject=0x444) returned 1 [0199.384] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506", lpFilePart=0x0) returned 0xa0 [0199.384] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0199.384] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoft\\cryptneturlcache\\metadata\\77ec63bda74bd0d0e0426dc8f8008506"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0199.386] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3baf20) returned 1 [0199.386] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506", nBufferLength=0x105, lpBuffer=0x3bbba0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506", lpFilePart=0x0) returned 0xa0 [0199.386] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc040) returned 1 [0199.386] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoft\\cryptneturlcache\\metadata\\77ec63bda74bd0d0e0426dc8f8008506"), fInfoLevelId=0x0, lpFileInformation=0x3bc120 | out: lpFileInformation=0x3bc120*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xffb66466, ftCreationTime.dwHighDateTime=0x1d2d432, ftLastAccessTime.dwLowDateTime=0xffb66466, ftLastAccessTime.dwHighDateTime=0x1d2d432, ftLastWriteTime.dwLowDateTime=0x14cce7cb, ftLastWriteTime.dwHighDateTime=0x1d2fc21, nFileSizeHigh=0x0, nFileSizeLow=0x122)) returned 1 [0199.386] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc000) returned 1 [0199.386] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506", nBufferLength=0x105, lpBuffer=0x3bbbc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506", lpFilePart=0x0) returned 0xa0 [0199.386] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc040) returned 1 [0199.386] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoft\\cryptneturlcache\\metadata\\77ec63bda74bd0d0e0426dc8f8008506"), fInfoLevelId=0x0, lpFileInformation=0x21cd988 | out: lpFileInformation=0x21cd988*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xffb66466, ftCreationTime.dwHighDateTime=0x1d2d432, ftLastAccessTime.dwLowDateTime=0xffb66466, ftLastAccessTime.dwHighDateTime=0x1d2d432, ftLastWriteTime.dwLowDateTime=0x14cce7cb, ftLastWriteTime.dwHighDateTime=0x1d2fc21, nFileSizeHigh=0x0, nFileSizeLow=0x122)) returned 1 [0199.386] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc000) returned 1 [0199.386] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506", nBufferLength=0x105, lpBuffer=0x3bba20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506", lpFilePart=0x0) returned 0xa0 [0199.386] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf00) returned 1 [0199.386] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoft\\cryptneturlcache\\metadata\\77ec63bda74bd0d0e0426dc8f8008506"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0199.387] GetFileType (hFile=0x444) returned 0x1 [0199.387] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbe70) returned 1 [0199.387] GetFileType (hFile=0x444) returned 0x1 [0199.387] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc098 | out: lpFileSizeHigh=0x3bc098*=0x0) returned 0x122 [0199.387] ReadFile (in: hFile=0x444, lpBuffer=0x21cdf18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bbfc8, lpOverlapped=0x0 | out: lpBuffer=0x21cdf18*, lpNumberOfBytesRead=0x3bbfc8*=0x122, lpOverlapped=0x0) returned 1 [0199.387] CloseHandle (hObject=0x444) returned 1 [0199.424] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506", nBufferLength=0x105, lpBuffer=0x3bba20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506", lpFilePart=0x0) returned 0xa0 [0199.425] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf00) returned 1 [0199.425] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoft\\cryptneturlcache\\metadata\\77ec63bda74bd0d0e0426dc8f8008506"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0199.426] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8990) returned 1 [0199.427] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\8828F39C7C0CE9A14B25C7EB321181BA_8C550960E440B9C3B93A6A0AA915C9BE", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\8828F39C7C0CE9A14B25C7EB321181BA_8C550960E440B9C3B93A6A0AA915C9BE", lpFilePart=0x0) returned 0xc1 [0199.427] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0199.427] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\8828F39C7C0CE9A14B25C7EB321181BA_8C550960E440B9C3B93A6A0AA915C9BE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoft\\cryptneturlcache\\metadata\\8828f39c7c0ce9a14b25c7eb321181ba_8c550960e440b9c3b93a6a0aa915c9be"), fInfoLevelId=0x0, lpFileInformation=0x2245e10 | out: lpFileInformation=0x2245e10*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x595f2f, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x595f2f, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x389ad00f, ftLastWriteTime.dwHighDateTime=0x1d2fc21, nFileSizeHigh=0x0, nFileSizeLow=0x18c)) returned 1 [0199.431] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0199.431] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\8828F39C7C0CE9A14B25C7EB321181BA_8C550960E440B9C3B93A6A0AA915C9BE", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\8828F39C7C0CE9A14B25C7EB321181BA_8C550960E440B9C3B93A6A0AA915C9BE", lpFilePart=0x0) returned 0xc1 [0199.431] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0199.432] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\8828F39C7C0CE9A14B25C7EB321181BA_8C550960E440B9C3B93A6A0AA915C9BE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoft\\cryptneturlcache\\metadata\\8828f39c7c0ce9a14b25c7eb321181ba_8c550960e440b9c3b93a6a0aa915c9be"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0199.432] GetFileType (hFile=0x444) returned 0x1 [0199.432] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be400) returned 1 [0199.432] GetFileType (hFile=0x444) returned 0x1 [0199.432] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be628 | out: lpFileSizeHigh=0x3be628*=0x0) returned 0x18c [0199.432] ReadFile (in: hFile=0x444, lpBuffer=0x2246508, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be558, lpOverlapped=0x0 | out: lpBuffer=0x2246508*, lpNumberOfBytesRead=0x3be558*=0x18c, lpOverlapped=0x0) returned 1 [0199.433] CloseHandle (hObject=0x444) returned 1 [0199.471] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\8828F39C7C0CE9A14B25C7EB321181BA_8C550960E440B9C3B93A6A0AA915C9BE", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\8828F39C7C0CE9A14B25C7EB321181BA_8C550960E440B9C3B93A6A0AA915C9BE", lpFilePart=0x0) returned 0xc1 [0199.471] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0199.471] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\8828F39C7C0CE9A14B25C7EB321181BA_8C550960E440B9C3B93A6A0AA915C9BE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoft\\cryptneturlcache\\metadata\\8828f39c7c0ce9a14b25c7eb321181ba_8c550960e440b9c3b93a6a0aa915c9be"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0199.472] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3baf20) returned 1 [0199.473] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\8828F39C7C0CE9A14B25C7EB321181BA_8C550960E440B9C3B93A6A0AA915C9BE", nBufferLength=0x105, lpBuffer=0x3bbba0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\8828F39C7C0CE9A14B25C7EB321181BA_8C550960E440B9C3B93A6A0AA915C9BE", lpFilePart=0x0) returned 0xc1 [0199.473] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc040) returned 1 [0199.473] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\8828F39C7C0CE9A14B25C7EB321181BA_8C550960E440B9C3B93A6A0AA915C9BE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoft\\cryptneturlcache\\metadata\\8828f39c7c0ce9a14b25c7eb321181ba_8c550960e440b9c3b93a6a0aa915c9be"), fInfoLevelId=0x0, lpFileInformation=0x3bc120 | out: lpFileInformation=0x3bc120*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x595f2f, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x595f2f, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x389ad00f, ftLastWriteTime.dwHighDateTime=0x1d2fc21, nFileSizeHigh=0x0, nFileSizeLow=0x18c)) returned 1 [0199.473] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc000) returned 1 [0199.473] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\8828F39C7C0CE9A14B25C7EB321181BA_8C550960E440B9C3B93A6A0AA915C9BE", nBufferLength=0x105, lpBuffer=0x3bbbc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\8828F39C7C0CE9A14B25C7EB321181BA_8C550960E440B9C3B93A6A0AA915C9BE", lpFilePart=0x0) returned 0xc1 [0199.473] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc040) returned 1 [0199.473] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\8828F39C7C0CE9A14B25C7EB321181BA_8C550960E440B9C3B93A6A0AA915C9BE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoft\\cryptneturlcache\\metadata\\8828f39c7c0ce9a14b25c7eb321181ba_8c550960e440b9c3b93a6a0aa915c9be"), fInfoLevelId=0x0, lpFileInformation=0x22be838 | out: lpFileInformation=0x22be838*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x595f2f, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x595f2f, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x389ad00f, ftLastWriteTime.dwHighDateTime=0x1d2fc21, nFileSizeHigh=0x0, nFileSizeLow=0x18c)) returned 1 [0199.473] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc000) returned 1 [0199.473] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\8828F39C7C0CE9A14B25C7EB321181BA_8C550960E440B9C3B93A6A0AA915C9BE", nBufferLength=0x105, lpBuffer=0x3bba20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\8828F39C7C0CE9A14B25C7EB321181BA_8C550960E440B9C3B93A6A0AA915C9BE", lpFilePart=0x0) returned 0xc1 [0199.473] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf00) returned 1 [0199.473] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\8828F39C7C0CE9A14B25C7EB321181BA_8C550960E440B9C3B93A6A0AA915C9BE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoft\\cryptneturlcache\\metadata\\8828f39c7c0ce9a14b25c7eb321181ba_8c550960e440b9c3b93a6a0aa915c9be"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0199.474] GetFileType (hFile=0x444) returned 0x1 [0199.474] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbe70) returned 1 [0199.474] GetFileType (hFile=0x444) returned 0x1 [0199.474] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc098 | out: lpFileSizeHigh=0x3bc098*=0x0) returned 0x18c [0199.474] ReadFile (in: hFile=0x444, lpBuffer=0x22bef30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bbfc8, lpOverlapped=0x0 | out: lpBuffer=0x22bef30*, lpNumberOfBytesRead=0x3bbfc8*=0x18c, lpOverlapped=0x0) returned 1 [0199.474] CloseHandle (hObject=0x444) returned 1 [0199.513] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\8828F39C7C0CE9A14B25C7EB321181BA_8C550960E440B9C3B93A6A0AA915C9BE", nBufferLength=0x105, lpBuffer=0x3bba20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\8828F39C7C0CE9A14B25C7EB321181BA_8C550960E440B9C3B93A6A0AA915C9BE", lpFilePart=0x0) returned 0xc1 [0199.513] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf00) returned 1 [0199.513] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\8828F39C7C0CE9A14B25C7EB321181BA_8C550960E440B9C3B93A6A0AA915C9BE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoft\\cryptneturlcache\\metadata\\8828f39c7c0ce9a14b25c7eb321181ba_8c550960e440b9c3b93a6a0aa915c9be"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0199.515] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8990) returned 1 [0199.515] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749", lpFilePart=0x0) returned 0xa0 [0199.515] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0199.515] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoft\\cryptneturlcache\\metadata\\fb0d848f74f70bb2eaa93746d24d9749"), fInfoLevelId=0x0, lpFileInformation=0x23370c0 | out: lpFileInformation=0x23370c0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xffe342f6, ftCreationTime.dwHighDateTime=0x1d2d432, ftLastAccessTime.dwLowDateTime=0xffe342f6, ftLastAccessTime.dwHighDateTime=0x1d2d432, ftLastWriteTime.dwLowDateTime=0x38ab80a6, ftLastWriteTime.dwHighDateTime=0x1d2fc21, nFileSizeHigh=0x0, nFileSizeLow=0x14a)) returned 1 [0199.516] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0199.516] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749", lpFilePart=0x0) returned 0xa0 [0199.516] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0199.516] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoft\\cryptneturlcache\\metadata\\fb0d848f74f70bb2eaa93746d24d9749"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0199.516] GetFileType (hFile=0x444) returned 0x1 [0199.516] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be400) returned 1 [0199.516] GetFileType (hFile=0x444) returned 0x1 [0199.516] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be628 | out: lpFileSizeHigh=0x3be628*=0x0) returned 0x14a [0199.516] ReadFile (in: hFile=0x444, lpBuffer=0x2337678, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be558, lpOverlapped=0x0 | out: lpBuffer=0x2337678*, lpNumberOfBytesRead=0x3be558*=0x14a, lpOverlapped=0x0) returned 1 [0199.517] CloseHandle (hObject=0x444) returned 1 [0199.559] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749", lpFilePart=0x0) returned 0xa0 [0199.559] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0199.559] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoft\\cryptneturlcache\\metadata\\fb0d848f74f70bb2eaa93746d24d9749"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0199.561] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3baf20) returned 1 [0199.561] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749", nBufferLength=0x105, lpBuffer=0x3bbba0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749", lpFilePart=0x0) returned 0xa0 [0199.561] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc040) returned 1 [0199.561] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoft\\cryptneturlcache\\metadata\\fb0d848f74f70bb2eaa93746d24d9749"), fInfoLevelId=0x0, lpFileInformation=0x3bc120 | out: lpFileInformation=0x3bc120*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xffe342f6, ftCreationTime.dwHighDateTime=0x1d2d432, ftLastAccessTime.dwLowDateTime=0xffe342f6, ftLastAccessTime.dwHighDateTime=0x1d2d432, ftLastWriteTime.dwLowDateTime=0x38ab80a6, ftLastWriteTime.dwHighDateTime=0x1d2fc21, nFileSizeHigh=0x0, nFileSizeLow=0x14a)) returned 1 [0199.561] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc000) returned 1 [0199.561] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749", nBufferLength=0x105, lpBuffer=0x3bbbc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749", lpFilePart=0x0) returned 0xa0 [0199.561] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc040) returned 1 [0199.561] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoft\\cryptneturlcache\\metadata\\fb0d848f74f70bb2eaa93746d24d9749"), fInfoLevelId=0x0, lpFileInformation=0x21af790 | out: lpFileInformation=0x21af790*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xffe342f6, ftCreationTime.dwHighDateTime=0x1d2d432, ftLastAccessTime.dwLowDateTime=0xffe342f6, ftLastAccessTime.dwHighDateTime=0x1d2d432, ftLastWriteTime.dwLowDateTime=0x38ab80a6, ftLastWriteTime.dwHighDateTime=0x1d2fc21, nFileSizeHigh=0x0, nFileSizeLow=0x14a)) returned 1 [0199.562] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc000) returned 1 [0199.562] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749", nBufferLength=0x105, lpBuffer=0x3bba20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749", lpFilePart=0x0) returned 0xa0 [0199.562] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf00) returned 1 [0199.562] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoft\\cryptneturlcache\\metadata\\fb0d848f74f70bb2eaa93746d24d9749"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0199.562] GetFileType (hFile=0x444) returned 0x1 [0199.562] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbe70) returned 1 [0199.562] GetFileType (hFile=0x444) returned 0x1 [0199.562] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc098 | out: lpFileSizeHigh=0x3bc098*=0x0) returned 0x14a [0199.562] ReadFile (in: hFile=0x444, lpBuffer=0x21afd48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bbfc8, lpOverlapped=0x0 | out: lpBuffer=0x21afd48*, lpNumberOfBytesRead=0x3bbfc8*=0x14a, lpOverlapped=0x0) returned 1 [0199.562] CloseHandle (hObject=0x444) returned 1 [0199.643] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749", nBufferLength=0x105, lpBuffer=0x3bba20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749", lpFilePart=0x0) returned 0xa0 [0199.643] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf00) returned 1 [0199.643] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoft\\cryptneturlcache\\metadata\\fb0d848f74f70bb2eaa93746d24d9749"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0199.645] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8990) returned 1 [0199.645] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0199.645] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\SystemCertificates", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\SystemCertificates", lpFilePart=0x0) returned 0x78 [0199.645] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\SystemCertificates\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\SystemCertificates\\", lpFilePart=0x0) returned 0x79 [0199.645] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\SystemCertificates\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d78b0 [0199.659] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0199.659] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0199.659] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0199.660] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0199.660] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0199.660] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0199.660] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0199.660] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\SystemCertificates", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\SystemCertificates", lpFilePart=0x0) returned 0x78 [0199.660] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\SystemCertificates\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\SystemCertificates\\", lpFilePart=0x0) returned 0x79 [0199.660] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\SystemCertificates\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d7670 [0199.660] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0199.660] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0199.660] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0199.660] FindClose (in: hFindFile=0x5d7670 | out: hFindFile=0x5d7670) returned 1 [0199.660] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0199.660] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0199.660] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0199.660] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\SystemCertificates\\My", nBufferLength=0x105, lpBuffer=0x3be130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\SystemCertificates\\My", lpFilePart=0x0) returned 0x7b [0199.661] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\SystemCertificates\\My\\", nBufferLength=0x105, lpBuffer=0x3be0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\SystemCertificates\\My\\", lpFilePart=0x0) returned 0x7c [0199.661] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\SystemCertificates\\My\\*", lpFindFileData=0x3be2e0 | out: lpFindFileData=0x3be2e0) returned 0x5d7af0 [0199.664] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0199.664] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0199.664] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0199.664] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0199.665] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 0 [0199.665] FindClose (in: hFindFile=0x5d7af0 | out: hFindFile=0x5d7af0) returned 1 [0199.665] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0199.665] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0199.665] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0199.665] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\SystemCertificates\\My", nBufferLength=0x105, lpBuffer=0x3be130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\SystemCertificates\\My", lpFilePart=0x0) returned 0x7b [0199.665] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\SystemCertificates\\My\\", nBufferLength=0x105, lpBuffer=0x3be0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\SystemCertificates\\My\\", lpFilePart=0x0) returned 0x7c [0199.665] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\SystemCertificates\\My\\*", lpFindFileData=0x3be2e0 | out: lpFindFileData=0x3be2e0) returned 0x5d81b0 [0199.665] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0199.665] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0199.665] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0199.665] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0199.666] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 0 [0199.666] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0199.666] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0199.666] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0199.666] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0199.666] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\SystemCertificates\\My\\Certificates", nBufferLength=0x105, lpBuffer=0x3be0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\SystemCertificates\\My\\Certificates", lpFilePart=0x0) returned 0x88 [0199.666] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\SystemCertificates\\My\\Certificates\\", nBufferLength=0x105, lpBuffer=0x3be060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\SystemCertificates\\My\\Certificates\\", lpFilePart=0x0) returned 0x89 [0199.666] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\SystemCertificates\\My\\Certificates\\*", lpFindFileData=0x3be270 | out: lpFindFileData=0x3be270) returned 0x5d78b0 [0199.666] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0199.666] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 0 [0199.666] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0199.666] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0199.666] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0199.666] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0199.667] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\SystemCertificates\\My\\Certificates", nBufferLength=0x105, lpBuffer=0x3be0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\SystemCertificates\\My\\Certificates", lpFilePart=0x0) returned 0x88 [0199.667] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\SystemCertificates\\My\\Certificates\\", nBufferLength=0x105, lpBuffer=0x3be060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\SystemCertificates\\My\\Certificates\\", lpFilePart=0x0) returned 0x89 [0199.667] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\SystemCertificates\\My\\Certificates\\*", lpFindFileData=0x3be270 | out: lpFindFileData=0x3be270) returned 0x5d78b0 [0199.667] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0199.667] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 0 [0199.667] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0199.667] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0199.667] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0199.667] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0199.667] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\SystemCertificates\\My\\CRLs", nBufferLength=0x105, lpBuffer=0x3be0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\SystemCertificates\\My\\CRLs", lpFilePart=0x0) returned 0x80 [0199.667] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\SystemCertificates\\My\\CRLs\\", nBufferLength=0x105, lpBuffer=0x3be060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\SystemCertificates\\My\\CRLs\\", lpFilePart=0x0) returned 0x81 [0199.667] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\SystemCertificates\\My\\CRLs\\*", lpFindFileData=0x3be270 | out: lpFindFileData=0x3be270) returned 0x5d7370 [0199.667] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0199.668] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 0 [0199.668] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0199.668] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0199.668] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0199.668] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0199.668] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\SystemCertificates\\My\\CRLs", nBufferLength=0x105, lpBuffer=0x3be0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\SystemCertificates\\My\\CRLs", lpFilePart=0x0) returned 0x80 [0199.668] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\SystemCertificates\\My\\CRLs\\", nBufferLength=0x105, lpBuffer=0x3be060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\SystemCertificates\\My\\CRLs\\", lpFilePart=0x0) returned 0x81 [0199.668] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\SystemCertificates\\My\\CRLs\\*", lpFindFileData=0x3be270 | out: lpFindFileData=0x3be270) returned 0x5d7550 [0199.668] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0199.668] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 0 [0199.668] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0199.668] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0199.668] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0199.669] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0199.669] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\SystemCertificates\\My\\CTLs", nBufferLength=0x105, lpBuffer=0x3be0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\SystemCertificates\\My\\CTLs", lpFilePart=0x0) returned 0x80 [0199.669] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\SystemCertificates\\My\\CTLs\\", nBufferLength=0x105, lpBuffer=0x3be060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\SystemCertificates\\My\\CTLs\\", lpFilePart=0x0) returned 0x81 [0199.669] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\SystemCertificates\\My\\CTLs\\*", lpFindFileData=0x3be270 | out: lpFindFileData=0x3be270) returned 0x5d7c70 [0199.669] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0199.669] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 0 [0199.669] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0199.669] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0199.669] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0199.669] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0199.669] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\SystemCertificates\\My\\CTLs", nBufferLength=0x105, lpBuffer=0x3be0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\SystemCertificates\\My\\CTLs", lpFilePart=0x0) returned 0x80 [0199.669] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\SystemCertificates\\My\\CTLs\\", nBufferLength=0x105, lpBuffer=0x3be060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\SystemCertificates\\My\\CTLs\\", lpFilePart=0x0) returned 0x81 [0199.669] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\SystemCertificates\\My\\CTLs\\*", lpFindFileData=0x3be270 | out: lpFindFileData=0x3be270) returned 0x5d78b0 [0199.670] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0199.670] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 0 [0199.670] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0199.670] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0199.670] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0199.670] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0199.670] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge", lpFilePart=0x0) returned 0x69 [0199.670] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\", lpFilePart=0x0) returned 0x6a [0199.670] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d7cd0 [0199.670] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0199.670] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0199.671] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0199.671] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0199.671] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0199.671] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0199.671] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0199.671] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0199.671] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0199.671] FindClose (in: hFindFile=0x5d7cd0 | out: hFindFile=0x5d7cd0) returned 1 [0199.672] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0199.672] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0199.672] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0199.672] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge", lpFilePart=0x0) returned 0x69 [0199.672] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\", lpFilePart=0x0) returned 0x6a [0199.672] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d75b0 [0199.672] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0199.672] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0199.672] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0199.672] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0199.672] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0199.673] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0199.673] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0199.673] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0199.673] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0199.673] FindClose (in: hFindFile=0x5d75b0 | out: hFindFile=0x5d75b0) returned 1 [0199.673] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0199.673] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0199.673] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\MSIMGSIZ.DAT", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\MSIMGSIZ.DAT", lpFilePart=0x0) returned 0x76 [0199.673] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0199.673] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\MSIMGSIZ.DAT" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\msimgsiz.dat"), fInfoLevelId=0x0, lpFileInformation=0x2239890 | out: lpFileInformation=0x2239890*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1c30ddf, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x1c30ddf, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x1c30ddf, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0xbfe0)) returned 1 [0199.675] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0199.675] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\MSIMGSIZ.DAT", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\MSIMGSIZ.DAT", lpFilePart=0x0) returned 0x76 [0199.675] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0199.675] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\MSIMGSIZ.DAT" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\msimgsiz.dat"), fInfoLevelId=0x0, lpFileInformation=0x2239a38 | out: lpFileInformation=0x2239a38*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1c30ddf, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x1c30ddf, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x1c30ddf, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0xbfe0)) returned 1 [0199.675] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0199.675] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\MSIMGSIZ.DAT", nBufferLength=0x105, lpBuffer=0x3be120, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\MSIMGSIZ.DAT", lpFilePart=0x0) returned 0x76 [0199.675] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0199.675] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\MSIMGSIZ.DAT" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\msimgsiz.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0199.676] GetFileType (hFile=0x444) returned 0x1 [0199.676] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be570) returned 1 [0199.676] GetFileType (hFile=0x444) returned 0x1 [0199.676] ReadFile (in: hFile=0x444, lpBuffer=0x223beb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be688, lpOverlapped=0x0 | out: lpBuffer=0x223beb8*, lpNumberOfBytesRead=0x3be688*=0x1000, lpOverlapped=0x0) returned 1 [0199.711] CloseHandle (hObject=0x444) returned 1 [0199.711] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\MSIMGSIZ.DAT", nBufferLength=0x105, lpBuffer=0x3be120, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\MSIMGSIZ.DAT", lpFilePart=0x0) returned 0x76 [0199.711] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0199.711] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\MSIMGSIZ.DAT" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\msimgsiz.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0199.711] GetFileType (hFile=0x444) returned 0x1 [0199.711] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be570) returned 1 [0199.711] GetFileType (hFile=0x444) returned 0x1 [0199.711] WriteFile (in: hFile=0x444, lpBuffer=0x2239bc0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be738, lpOverlapped=0x0 | out: lpBuffer=0x2239bc0*, lpNumberOfBytesWritten=0x3be738*=0x2000, lpOverlapped=0x0) returned 1 [0199.711] CloseHandle (hObject=0x444) returned 1 [0199.712] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\MSIMGSIZ.DAT", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\MSIMGSIZ.DAT", lpFilePart=0x0) returned 0x76 [0199.712] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\MSIMGSIZ.DAT.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\MSIMGSIZ.DAT.xuy", lpFilePart=0x0) returned 0x7a [0199.712] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0199.712] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\MSIMGSIZ.DAT" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\msimgsiz.dat"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1c30ddf, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x1c30ddf, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x62e36bce, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xbfe0)) returned 1 [0199.712] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0199.712] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\MSIMGSIZ.DAT" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\msimgsiz.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\MSIMGSIZ.DAT.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\msimgsiz.dat.xuy")) returned 1 [0199.713] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0199.713] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cache", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cache", lpFilePart=0x0) returned 0x6f [0199.713] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cache\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cache\\", lpFilePart=0x0) returned 0x70 [0199.713] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cache\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d79d0 [0199.714] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0199.714] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0199.714] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0199.714] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0199.714] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0199.714] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0199.714] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0199.714] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cache", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cache", lpFilePart=0x0) returned 0x6f [0199.714] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cache\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cache\\", lpFilePart=0x0) returned 0x70 [0199.715] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cache\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d7c70 [0199.715] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0199.715] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0199.715] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0199.715] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0199.715] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0199.715] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0199.715] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cache\\container.dat", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cache\\container.dat", lpFilePart=0x0) returned 0x7d [0199.715] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0199.715] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\cache\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x22bad10 | out: lpFileInformation=0x22bad10*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xff54c64e, ftCreationTime.dwHighDateTime=0x1d2d432, ftLastAccessTime.dwLowDateTime=0xff54c64e, ftLastAccessTime.dwHighDateTime=0x1d2d432, ftLastWriteTime.dwLowDateTime=0xff54c64e, ftLastWriteTime.dwHighDateTime=0x1d2d432, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0199.715] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0199.715] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cache\\container.dat", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cache\\container.dat", lpFilePart=0x0) returned 0x7d [0199.716] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0199.716] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\cache\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0199.716] GetFileType (hFile=0x444) returned 0x1 [0199.716] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0199.716] GetFileType (hFile=0x444) returned 0x1 [0199.716] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x0 [0199.716] CloseHandle (hObject=0x444) returned 1 [0199.727] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cache\\container.dat", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cache\\container.dat", lpFilePart=0x0) returned 0x7d [0199.728] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0199.728] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\cache\\container.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0199.729] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3baf90) returned 1 [0199.729] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cache\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbc10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cache\\container.dat", lpFilePart=0x0) returned 0x7d [0199.729] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0b0) returned 1 [0199.729] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\cache\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x3bc190 | out: lpFileInformation=0x3bc190*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xff54c64e, ftCreationTime.dwHighDateTime=0x1d2d432, ftLastAccessTime.dwLowDateTime=0xff54c64e, ftLastAccessTime.dwHighDateTime=0x1d2d432, ftLastWriteTime.dwLowDateTime=0xff54c64e, ftLastWriteTime.dwHighDateTime=0x1d2d432, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0199.729] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc070) returned 1 [0199.729] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cache\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbc30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cache\\container.dat", lpFilePart=0x0) returned 0x7d [0199.730] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0b0) returned 1 [0199.730] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\cache\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x2331b08 | out: lpFileInformation=0x2331b08*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xff54c64e, ftCreationTime.dwHighDateTime=0x1d2d432, ftLastAccessTime.dwLowDateTime=0xff54c64e, ftLastAccessTime.dwHighDateTime=0x1d2d432, ftLastWriteTime.dwLowDateTime=0xff54c64e, ftLastWriteTime.dwHighDateTime=0x1d2d432, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0199.730] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc070) returned 1 [0199.730] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cache\\container.dat", nBufferLength=0x105, lpBuffer=0x3bba90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cache\\container.dat", lpFilePart=0x0) returned 0x7d [0199.730] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf70) returned 1 [0199.730] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\cache\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0199.730] GetFileType (hFile=0x444) returned 0x1 [0199.730] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbee0) returned 1 [0199.730] GetFileType (hFile=0x444) returned 0x1 [0199.730] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc108 | out: lpFileSizeHigh=0x3bc108*=0x0) returned 0x0 [0199.730] CloseHandle (hObject=0x444) returned 1 [0199.786] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cache\\container.dat", nBufferLength=0x105, lpBuffer=0x3bba90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cache\\container.dat", lpFilePart=0x0) returned 0x7d [0199.786] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf70) returned 1 [0199.786] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\cache\\container.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0199.788] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8a00) returned 1 [0199.789] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0199.789] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies", lpFilePart=0x0) returned 0x71 [0199.789] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\", lpFilePart=0x0) returned 0x72 [0199.789] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d78b0 [0199.790] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0199.790] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0199.790] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0199.790] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0199.790] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0199.790] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0199.790] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0199.791] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0199.791] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0199.791] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0199.791] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0199.791] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0199.792] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0199.792] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0199.792] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0199.792] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies", lpFilePart=0x0) returned 0x71 [0199.792] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\", lpFilePart=0x0) returned 0x72 [0199.792] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d79d0 [0199.793] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0199.793] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0199.793] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0199.793] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0199.793] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0199.793] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0199.793] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0199.794] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0199.794] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0199.794] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0199.794] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0199.794] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0199.795] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0199.795] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0199.795] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\51TU1403.txt", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\51TU1403.txt", lpFilePart=0x0) returned 0x7e [0199.795] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0199.795] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\51TU1403.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\cookies\\51tu1403.txt"), fInfoLevelId=0x0, lpFileInformation=0x21ada78 | out: lpFileInformation=0x21ada78*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4abb45f, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x4abb45f, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x4abb45f, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x7f)) returned 1 [0199.796] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0199.796] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\51TU1403.txt", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\51TU1403.txt", lpFilePart=0x0) returned 0x7e [0199.796] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0199.796] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\51TU1403.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\cookies\\51tu1403.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0199.796] GetFileType (hFile=0x444) returned 0x1 [0199.796] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0199.796] GetFileType (hFile=0x444) returned 0x1 [0199.796] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x7f [0199.796] ReadFile (in: hFile=0x444, lpBuffer=0x21ade80, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x21ade80*, lpNumberOfBytesRead=0x3be5c8*=0x7f, lpOverlapped=0x0) returned 1 [0199.805] CloseHandle (hObject=0x444) returned 1 [0199.815] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\51TU1403.txt", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\51TU1403.txt", lpFilePart=0x0) returned 0x7e [0199.815] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0199.815] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\51TU1403.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\cookies\\51tu1403.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0199.817] GetFileType (hFile=0x444) returned 0x1 [0199.817] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0199.817] GetFileType (hFile=0x444) returned 0x1 [0199.817] WriteFile (in: hFile=0x444, lpBuffer=0x22250e0*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x22250e0*, lpNumberOfBytesWritten=0x3be4d8*=0x80, lpOverlapped=0x0) returned 1 [0199.818] CloseHandle (hObject=0x444) returned 1 [0199.818] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\51TU1403.txt", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\51TU1403.txt", lpFilePart=0x0) returned 0x7e [0199.818] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\51TU1403.txt.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\51TU1403.txt.xuy", lpFilePart=0x0) returned 0x82 [0199.818] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0199.818] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\51TU1403.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\cookies\\51tu1403.txt"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4abb45f, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x4abb45f, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x62f1ba80, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x80)) returned 1 [0199.818] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0199.818] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\51TU1403.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\cookies\\51tu1403.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\51TU1403.txt.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\cookies\\51tu1403.txt.xuy")) returned 1 [0199.820] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\5GJKP08H.txt", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\5GJKP08H.txt", lpFilePart=0x0) returned 0x7e [0199.820] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0199.820] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\5GJKP08H.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\cookies\\5gjkp08h.txt"), fInfoLevelId=0x0, lpFileInformation=0x2226498 | out: lpFileInformation=0x2226498*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4a32908, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x4a32908, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x4a32908, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x1bf)) returned 1 [0199.822] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0199.822] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\5GJKP08H.txt", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\5GJKP08H.txt", lpFilePart=0x0) returned 0x7e [0199.822] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0199.822] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\5GJKP08H.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\cookies\\5gjkp08h.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0199.823] GetFileType (hFile=0x444) returned 0x1 [0199.823] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0199.823] GetFileType (hFile=0x444) returned 0x1 [0199.823] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x1bf [0199.823] ReadFile (in: hFile=0x444, lpBuffer=0x22269e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x22269e0*, lpNumberOfBytesRead=0x3be5c8*=0x1bf, lpOverlapped=0x0) returned 1 [0199.823] CloseHandle (hObject=0x444) returned 1 [0199.834] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\5GJKP08H.txt", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\5GJKP08H.txt", lpFilePart=0x0) returned 0x7e [0199.834] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0199.834] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\5GJKP08H.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\cookies\\5gjkp08h.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0199.836] GetFileType (hFile=0x444) returned 0x1 [0199.836] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0199.836] GetFileType (hFile=0x444) returned 0x1 [0199.836] WriteFile (in: hFile=0x444, lpBuffer=0x229e2e8*, nNumberOfBytesToWrite=0x1c0, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x229e2e8*, lpNumberOfBytesWritten=0x3be4d8*=0x1c0, lpOverlapped=0x0) returned 1 [0199.837] CloseHandle (hObject=0x444) returned 1 [0199.837] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\5GJKP08H.txt", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\5GJKP08H.txt", lpFilePart=0x0) returned 0x7e [0199.837] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\5GJKP08H.txt.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\5GJKP08H.txt.xuy", lpFilePart=0x0) returned 0x82 [0199.837] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0199.837] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\5GJKP08H.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\cookies\\5gjkp08h.txt"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4a32908, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x4a32908, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x62f67ea2, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x1c0)) returned 1 [0199.837] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0199.837] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\5GJKP08H.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\cookies\\5gjkp08h.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\5GJKP08H.txt.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\cookies\\5gjkp08h.txt.xuy")) returned 1 [0199.838] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\6NQ9V8CD.txt", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\6NQ9V8CD.txt", lpFilePart=0x0) returned 0x7e [0199.838] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0199.838] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\6NQ9V8CD.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\cookies\\6nq9v8cd.txt"), fInfoLevelId=0x0, lpFileInformation=0x229f6a0 | out: lpFileInformation=0x229f6a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x46f47c6, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x46f47c6, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x46f47c6, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x18b)) returned 1 [0199.840] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0199.840] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\6NQ9V8CD.txt", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\6NQ9V8CD.txt", lpFilePart=0x0) returned 0x7e [0199.840] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0199.840] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\6NQ9V8CD.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\cookies\\6nq9v8cd.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0199.841] GetFileType (hFile=0x444) returned 0x1 [0199.841] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0199.841] GetFileType (hFile=0x444) returned 0x1 [0199.841] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x18b [0199.841] ReadFile (in: hFile=0x444, lpBuffer=0x229fbb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x229fbb8*, lpNumberOfBytesRead=0x3be5c8*=0x18b, lpOverlapped=0x0) returned 1 [0199.844] CloseHandle (hObject=0x444) returned 1 [0199.859] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\6NQ9V8CD.txt", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\6NQ9V8CD.txt", lpFilePart=0x0) returned 0x7e [0199.859] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0199.859] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\6NQ9V8CD.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\cookies\\6nq9v8cd.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0199.862] GetFileType (hFile=0x444) returned 0x1 [0199.862] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0199.862] GetFileType (hFile=0x444) returned 0x1 [0199.862] WriteFile (in: hFile=0x444, lpBuffer=0x23173d0*, nNumberOfBytesToWrite=0x190, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x23173d0*, lpNumberOfBytesWritten=0x3be4d8*=0x190, lpOverlapped=0x0) returned 1 [0199.863] CloseHandle (hObject=0x444) returned 1 [0199.863] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\6NQ9V8CD.txt", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\6NQ9V8CD.txt", lpFilePart=0x0) returned 0x7e [0199.863] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\6NQ9V8CD.txt.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\6NQ9V8CD.txt.xuy", lpFilePart=0x0) returned 0x82 [0199.863] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0199.863] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\6NQ9V8CD.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\cookies\\6nq9v8cd.txt"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x46f47c6, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x46f47c6, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x62facc91, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x190)) returned 1 [0199.863] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0199.863] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\6NQ9V8CD.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\cookies\\6nq9v8cd.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\6NQ9V8CD.txt.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\cookies\\6nq9v8cd.txt.xuy")) returned 1 [0199.865] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\container.dat", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\container.dat", lpFilePart=0x0) returned 0x7f [0199.865] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0199.865] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\cookies\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x2318788 | out: lpFileInformation=0x2318788*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xff5870a7, ftCreationTime.dwHighDateTime=0x1d2d432, ftLastAccessTime.dwLowDateTime=0xff5870a7, ftLastAccessTime.dwHighDateTime=0x1d2d432, ftLastWriteTime.dwLowDateTime=0xff5870a7, ftLastWriteTime.dwHighDateTime=0x1d2d432, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0199.865] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0199.865] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\container.dat", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\container.dat", lpFilePart=0x0) returned 0x7f [0199.865] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0199.865] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\cookies\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0199.865] GetFileType (hFile=0x444) returned 0x1 [0199.866] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0199.866] GetFileType (hFile=0x444) returned 0x1 [0199.866] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x0 [0199.866] CloseHandle (hObject=0x444) returned 1 [0199.906] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\container.dat", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\container.dat", lpFilePart=0x0) returned 0x7f [0199.906] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0199.907] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\cookies\\container.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0199.908] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3baf90) returned 1 [0199.908] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbc10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\container.dat", lpFilePart=0x0) returned 0x7f [0199.908] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0b0) returned 1 [0199.908] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\cookies\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x3bc190 | out: lpFileInformation=0x3bc190*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xff5870a7, ftCreationTime.dwHighDateTime=0x1d2d432, ftLastAccessTime.dwLowDateTime=0xff5870a7, ftLastAccessTime.dwHighDateTime=0x1d2d432, ftLastWriteTime.dwLowDateTime=0xff5870a7, ftLastWriteTime.dwHighDateTime=0x1d2d432, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0199.908] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc070) returned 1 [0199.909] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbc30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\container.dat", lpFilePart=0x0) returned 0x7f [0199.909] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0b0) returned 1 [0199.909] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\cookies\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x218fa10 | out: lpFileInformation=0x218fa10*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xff5870a7, ftCreationTime.dwHighDateTime=0x1d2d432, ftLastAccessTime.dwLowDateTime=0xff5870a7, ftLastAccessTime.dwHighDateTime=0x1d2d432, ftLastWriteTime.dwLowDateTime=0xff5870a7, ftLastWriteTime.dwHighDateTime=0x1d2d432, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0199.909] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc070) returned 1 [0199.909] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\container.dat", nBufferLength=0x105, lpBuffer=0x3bba90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\container.dat", lpFilePart=0x0) returned 0x7f [0199.909] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf70) returned 1 [0199.909] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\cookies\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0199.909] GetFileType (hFile=0x444) returned 0x1 [0199.909] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbee0) returned 1 [0199.909] GetFileType (hFile=0x444) returned 0x1 [0199.909] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc108 | out: lpFileSizeHigh=0x3bc108*=0x0) returned 0x0 [0199.909] CloseHandle (hObject=0x444) returned 1 [0199.921] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\container.dat", nBufferLength=0x105, lpBuffer=0x3bba90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\container.dat", lpFilePart=0x0) returned 0x7f [0199.921] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf70) returned 1 [0199.921] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\cookies\\container.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0199.922] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8a00) returned 1 [0199.923] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\JZ1UUUP9.txt", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\JZ1UUUP9.txt", lpFilePart=0x0) returned 0x7e [0199.923] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0199.923] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\JZ1UUUP9.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\cookies\\jz1uuup9.txt"), fInfoLevelId=0x0, lpFileInformation=0x2206718 | out: lpFileInformation=0x2206718*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4e784fb, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x4e784fb, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x4e784fb, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x1a3)) returned 1 [0199.926] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0199.926] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\JZ1UUUP9.txt", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\JZ1UUUP9.txt", lpFilePart=0x0) returned 0x7e [0199.926] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0199.926] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\JZ1UUUP9.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\cookies\\jz1uuup9.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0199.926] GetFileType (hFile=0x444) returned 0x1 [0199.927] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0199.927] GetFileType (hFile=0x444) returned 0x1 [0199.927] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x1a3 [0199.927] ReadFile (in: hFile=0x444, lpBuffer=0x2206c48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x2206c48*, lpNumberOfBytesRead=0x3be5c8*=0x1a3, lpOverlapped=0x0) returned 1 [0199.927] CloseHandle (hObject=0x444) returned 1 [0199.938] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\JZ1UUUP9.txt", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\JZ1UUUP9.txt", lpFilePart=0x0) returned 0x7e [0199.938] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0199.938] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\JZ1UUUP9.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\cookies\\jz1uuup9.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0199.939] GetFileType (hFile=0x444) returned 0x1 [0199.939] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0199.939] GetFileType (hFile=0x444) returned 0x1 [0199.940] WriteFile (in: hFile=0x444, lpBuffer=0x227e508*, nNumberOfBytesToWrite=0x1b0, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x227e508*, lpNumberOfBytesWritten=0x3be4d8*=0x1b0, lpOverlapped=0x0) returned 1 [0199.940] CloseHandle (hObject=0x444) returned 1 [0199.940] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\JZ1UUUP9.txt", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\JZ1UUUP9.txt", lpFilePart=0x0) returned 0x7e [0199.940] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\JZ1UUUP9.txt.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\JZ1UUUP9.txt.xuy", lpFilePart=0x0) returned 0x82 [0199.940] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0199.941] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\JZ1UUUP9.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\cookies\\jz1uuup9.txt"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4e784fb, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x4e784fb, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x6305115c, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x1b0)) returned 1 [0199.941] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0199.941] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\JZ1UUUP9.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\cookies\\jz1uuup9.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\JZ1UUUP9.txt.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\cookies\\jz1uuup9.txt.xuy")) returned 1 [0199.955] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\KW0ULAFV.txt", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\KW0ULAFV.txt", lpFilePart=0x0) returned 0x7e [0199.955] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0199.956] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\KW0ULAFV.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\cookies\\kw0ulafv.txt"), fInfoLevelId=0x0, lpFileInformation=0x227f8c0 | out: lpFileInformation=0x227f8c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x567ada4, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x567ada4, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x567ada4, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x166)) returned 1 [0199.956] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0199.956] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\KW0ULAFV.txt", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\KW0ULAFV.txt", lpFilePart=0x0) returned 0x7e [0199.956] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0199.956] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\KW0ULAFV.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\cookies\\kw0ulafv.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0199.956] GetFileType (hFile=0x444) returned 0x1 [0199.956] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0199.956] GetFileType (hFile=0x444) returned 0x1 [0199.956] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x166 [0199.956] ReadFile (in: hFile=0x444, lpBuffer=0x227fdb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x227fdb0*, lpNumberOfBytesRead=0x3be5c8*=0x166, lpOverlapped=0x0) returned 1 [0199.957] CloseHandle (hObject=0x444) returned 1 [0199.970] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\KW0ULAFV.txt", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\KW0ULAFV.txt", lpFilePart=0x0) returned 0x7e [0199.971] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0199.971] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\KW0ULAFV.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\cookies\\kw0ulafv.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0199.972] GetFileType (hFile=0x444) returned 0x1 [0199.972] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0199.972] GetFileType (hFile=0x444) returned 0x1 [0199.972] WriteFile (in: hFile=0x444, lpBuffer=0x22f7530*, nNumberOfBytesToWrite=0x170, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x22f7530*, lpNumberOfBytesWritten=0x3be4d8*=0x170, lpOverlapped=0x0) returned 1 [0199.973] CloseHandle (hObject=0x444) returned 1 [0199.973] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\KW0ULAFV.txt", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\KW0ULAFV.txt", lpFilePart=0x0) returned 0x7e [0199.973] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\KW0ULAFV.txt.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\KW0ULAFV.txt.xuy", lpFilePart=0x0) returned 0x82 [0199.973] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0199.973] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\KW0ULAFV.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\cookies\\kw0ulafv.txt"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x567ada4, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x567ada4, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x6309d574, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x170)) returned 1 [0199.973] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0199.973] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\KW0ULAFV.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\cookies\\kw0ulafv.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\KW0ULAFV.txt.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\cookies\\kw0ulafv.txt.xuy")) returned 1 [0199.975] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\SW6Z4AI1.txt", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\SW6Z4AI1.txt", lpFilePart=0x0) returned 0x7e [0199.975] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0199.975] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\SW6Z4AI1.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\cookies\\sw6z4ai1.txt"), fInfoLevelId=0x0, lpFileInformation=0x22f88e8 | out: lpFileInformation=0x22f88e8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2577b2e, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x2577b2e, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x2578eb2, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0xd1)) returned 1 [0199.979] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0199.979] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\SW6Z4AI1.txt", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\SW6Z4AI1.txt", lpFilePart=0x0) returned 0x7e [0199.979] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0199.979] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\SW6Z4AI1.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\cookies\\sw6z4ai1.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0199.979] GetFileType (hFile=0x444) returned 0x1 [0199.979] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0199.979] GetFileType (hFile=0x444) returned 0x1 [0199.979] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xd1 [0199.979] ReadFile (in: hFile=0x444, lpBuffer=0x22f8d48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x22f8d48*, lpNumberOfBytesRead=0x3be5c8*=0xd1, lpOverlapped=0x0) returned 1 [0199.981] CloseHandle (hObject=0x444) returned 1 [0199.991] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\SW6Z4AI1.txt", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\SW6Z4AI1.txt", lpFilePart=0x0) returned 0x7e [0199.991] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0199.991] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\SW6Z4AI1.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\cookies\\sw6z4ai1.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0199.995] GetFileType (hFile=0x444) returned 0x1 [0199.995] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0199.995] GetFileType (hFile=0x444) returned 0x1 [0199.995] WriteFile (in: hFile=0x444, lpBuffer=0x2370070*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x2370070*, lpNumberOfBytesWritten=0x3be4d8*=0xe0, lpOverlapped=0x0) returned 1 [0199.996] CloseHandle (hObject=0x444) returned 1 [0199.996] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\SW6Z4AI1.txt", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\SW6Z4AI1.txt", lpFilePart=0x0) returned 0x7e [0199.996] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\SW6Z4AI1.txt.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\SW6Z4AI1.txt.xuy", lpFilePart=0x0) returned 0x82 [0199.996] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0199.996] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\SW6Z4AI1.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\cookies\\sw6z4ai1.txt"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2577b2e, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x2577b2e, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x630eb58d, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1 [0199.996] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0199.996] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\SW6Z4AI1.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\cookies\\sw6z4ai1.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\SW6Z4AI1.txt.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\cookies\\sw6z4ai1.txt.xuy")) returned 1 [0199.999] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\TU6XBKFE.txt", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\TU6XBKFE.txt", lpFilePart=0x0) returned 0x7e [0199.999] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0200.000] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\TU6XBKFE.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\cookies\\tu6xbkfe.txt"), fInfoLevelId=0x0, lpFileInformation=0x2371428 | out: lpFileInformation=0x2371428*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4fc4588, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x4fc4588, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x4fc4588, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0xc8)) returned 1 [0200.000] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0200.000] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\TU6XBKFE.txt", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\TU6XBKFE.txt", lpFilePart=0x0) returned 0x7e [0200.000] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0200.000] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\TU6XBKFE.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\cookies\\tu6xbkfe.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0200.000] GetFileType (hFile=0x444) returned 0x1 [0200.000] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0200.000] GetFileType (hFile=0x444) returned 0x1 [0200.000] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xc8 [0200.000] ReadFile (in: hFile=0x444, lpBuffer=0x2371878, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x2371878*, lpNumberOfBytesRead=0x3be5c8*=0xc8, lpOverlapped=0x0) returned 1 [0200.001] CloseHandle (hObject=0x444) returned 1 [0200.040] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\TU6XBKFE.txt", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\TU6XBKFE.txt", lpFilePart=0x0) returned 0x7e [0200.040] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0200.040] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\TU6XBKFE.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\cookies\\tu6xbkfe.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0200.042] GetFileType (hFile=0x444) returned 0x1 [0200.042] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0200.042] GetFileType (hFile=0x444) returned 0x1 [0200.042] WriteFile (in: hFile=0x444, lpBuffer=0x21e8ba8*, nNumberOfBytesToWrite=0xd0, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x21e8ba8*, lpNumberOfBytesWritten=0x3be4d8*=0xd0, lpOverlapped=0x0) returned 1 [0200.043] CloseHandle (hObject=0x444) returned 1 [0200.043] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\TU6XBKFE.txt", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\TU6XBKFE.txt", lpFilePart=0x0) returned 0x7e [0200.043] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\TU6XBKFE.txt.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\TU6XBKFE.txt.xuy", lpFilePart=0x0) returned 0x82 [0200.043] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0200.043] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\TU6XBKFE.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\cookies\\tu6xbkfe.txt"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4fc4588, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x4fc4588, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x6314416f, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xd0)) returned 1 [0200.043] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0200.043] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\TU6XBKFE.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\cookies\\tu6xbkfe.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\TU6XBKFE.txt.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\cookies\\tu6xbkfe.txt.xuy")) returned 1 [0200.045] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\U9PT9V3Q.txt", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\U9PT9V3Q.txt", lpFilePart=0x0) returned 0x7e [0200.047] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0200.047] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\U9PT9V3Q.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\cookies\\u9pt9v3q.txt"), fInfoLevelId=0x0, lpFileInformation=0x21e9f60 | out: lpFileInformation=0x21e9f60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x16861968, ftCreationTime.dwHighDateTime=0x1d2fc21, ftLastAccessTime.dwLowDateTime=0x16861968, ftLastAccessTime.dwHighDateTime=0x1d2fc21, ftLastWriteTime.dwLowDateTime=0x16861968, ftLastWriteTime.dwHighDateTime=0x1d2fc21, nFileSizeHigh=0x0, nFileSizeLow=0x231)) returned 1 [0200.047] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0200.047] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\U9PT9V3Q.txt", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\U9PT9V3Q.txt", lpFilePart=0x0) returned 0x7e [0200.047] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0200.047] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\U9PT9V3Q.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\cookies\\u9pt9v3q.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0200.047] GetFileType (hFile=0x444) returned 0x1 [0200.047] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0200.047] GetFileType (hFile=0x444) returned 0x1 [0200.047] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x231 [0200.047] ReadFile (in: hFile=0x444, lpBuffer=0x21ea520, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x21ea520*, lpNumberOfBytesRead=0x3be5c8*=0x231, lpOverlapped=0x0) returned 1 [0200.048] CloseHandle (hObject=0x444) returned 1 [0200.058] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\U9PT9V3Q.txt", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\U9PT9V3Q.txt", lpFilePart=0x0) returned 0x7e [0200.058] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0200.058] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\U9PT9V3Q.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\cookies\\u9pt9v3q.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0200.060] GetFileType (hFile=0x444) returned 0x1 [0200.060] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0200.060] GetFileType (hFile=0x444) returned 0x1 [0200.060] WriteFile (in: hFile=0x444, lpBuffer=0x22620b0*, nNumberOfBytesToWrite=0x240, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x22620b0*, lpNumberOfBytesWritten=0x3be4d8*=0x240, lpOverlapped=0x0) returned 1 [0200.061] CloseHandle (hObject=0x444) returned 1 [0200.061] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\U9PT9V3Q.txt", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\U9PT9V3Q.txt", lpFilePart=0x0) returned 0x7e [0200.061] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\U9PT9V3Q.txt.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\U9PT9V3Q.txt.xuy", lpFilePart=0x0) returned 0x82 [0200.061] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0200.061] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\U9PT9V3Q.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\cookies\\u9pt9v3q.txt"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x16861968, ftCreationTime.dwHighDateTime=0x1d2fc21, ftLastAccessTime.dwLowDateTime=0x16861968, ftLastAccessTime.dwHighDateTime=0x1d2fc21, ftLastWriteTime.dwLowDateTime=0x631908f4, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x240)) returned 1 [0200.062] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0200.062] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\U9PT9V3Q.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\cookies\\u9pt9v3q.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\U9PT9V3Q.txt.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\cookies\\u9pt9v3q.txt.xuy")) returned 1 [0200.063] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0200.063] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\History", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\History", lpFilePart=0x0) returned 0x71 [0200.063] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\History\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\History\\", lpFilePart=0x0) returned 0x72 [0200.063] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\History\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d81b0 [0200.063] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0200.063] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0200.063] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0200.064] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0200.064] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0200.064] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0200.064] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0200.064] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\History", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\History", lpFilePart=0x0) returned 0x71 [0200.064] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\History\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\History\\", lpFilePart=0x0) returned 0x72 [0200.064] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\History\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d7c70 [0200.064] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0200.064] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0200.064] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0200.064] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0200.064] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0200.064] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0200.064] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\History\\container.dat", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\History\\container.dat", lpFilePart=0x0) returned 0x7f [0200.065] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0200.065] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\History\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\history\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x2265de8 | out: lpFileInformation=0x2265de8*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xfae66c7, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xfae66c7, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xfae66c7, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0200.065] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0200.065] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\History\\container.dat", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\History\\container.dat", lpFilePart=0x0) returned 0x7f [0200.065] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0200.065] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\History\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\history\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0200.065] GetFileType (hFile=0x444) returned 0x1 [0200.065] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0200.065] GetFileType (hFile=0x444) returned 0x1 [0200.065] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x0 [0200.065] CloseHandle (hObject=0x444) returned 1 [0200.075] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\History\\container.dat", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\History\\container.dat", lpFilePart=0x0) returned 0x7f [0200.075] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0200.075] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\History\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\history\\container.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0200.077] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3baf90) returned 1 [0200.077] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\History\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbc10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\History\\container.dat", lpFilePart=0x0) returned 0x7f [0200.077] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0b0) returned 1 [0200.077] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\History\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\history\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x3bc190 | out: lpFileInformation=0x3bc190*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xfae66c7, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xfae66c7, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xfae66c7, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0200.077] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc070) returned 1 [0200.077] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\History\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbc30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\History\\container.dat", lpFilePart=0x0) returned 0x7f [0200.077] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0b0) returned 1 [0200.077] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\History\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\history\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x22dcbe0 | out: lpFileInformation=0x22dcbe0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xfae66c7, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xfae66c7, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xfae66c7, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0200.077] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc070) returned 1 [0200.077] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\History\\container.dat", nBufferLength=0x105, lpBuffer=0x3bba90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\History\\container.dat", lpFilePart=0x0) returned 0x7f [0200.077] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf70) returned 1 [0200.077] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\History\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\history\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0200.078] GetFileType (hFile=0x444) returned 0x1 [0200.078] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbee0) returned 1 [0200.078] GetFileType (hFile=0x444) returned 0x1 [0200.078] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc108 | out: lpFileSizeHigh=0x3bc108*=0x0) returned 0x0 [0200.078] CloseHandle (hObject=0x444) returned 1 [0200.097] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\History\\container.dat", nBufferLength=0x105, lpBuffer=0x3bba90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\History\\container.dat", lpFilePart=0x0) returned 0x7f [0200.097] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf70) returned 1 [0200.097] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\History\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\history\\container.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0200.098] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8a00) returned 1 [0200.099] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0200.099] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\IECompatCache", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\IECompatCache", lpFilePart=0x0) returned 0x77 [0200.099] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\IECompatCache\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\IECompatCache\\", lpFilePart=0x0) returned 0x78 [0200.099] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\IECompatCache\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d78b0 [0200.101] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0200.101] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0200.101] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0200.101] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0200.101] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0200.101] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0200.101] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0200.102] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\IECompatCache", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\IECompatCache", lpFilePart=0x0) returned 0x77 [0200.102] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\IECompatCache\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\IECompatCache\\", lpFilePart=0x0) returned 0x78 [0200.102] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\IECompatCache\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d78b0 [0200.102] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0200.102] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0200.102] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0200.102] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0200.102] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0200.102] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0200.102] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\IECompatCache\\container.dat", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\IECompatCache\\container.dat", lpFilePart=0x0) returned 0x85 [0200.102] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0200.102] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\IECompatCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\iecompatcache\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x2356408 | out: lpFileInformation=0x2356408*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xff1484a0, ftCreationTime.dwHighDateTime=0x1d2d432, ftLastAccessTime.dwLowDateTime=0xff1484a0, ftLastAccessTime.dwHighDateTime=0x1d2d432, ftLastWriteTime.dwLowDateTime=0xff1484a0, ftLastWriteTime.dwHighDateTime=0x1d2d432, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0200.103] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0200.103] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\IECompatCache\\container.dat", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\IECompatCache\\container.dat", lpFilePart=0x0) returned 0x85 [0200.103] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0200.103] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\IECompatCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\iecompatcache\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0200.103] GetFileType (hFile=0x444) returned 0x1 [0200.103] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0200.103] GetFileType (hFile=0x444) returned 0x1 [0200.103] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x0 [0200.103] CloseHandle (hObject=0x444) returned 1 [0200.143] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\IECompatCache\\container.dat", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\IECompatCache\\container.dat", lpFilePart=0x0) returned 0x85 [0200.143] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0200.143] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\IECompatCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\iecompatcache\\container.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0200.144] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3baf90) returned 1 [0200.145] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\IECompatCache\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbc10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\IECompatCache\\container.dat", lpFilePart=0x0) returned 0x85 [0200.145] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0b0) returned 1 [0200.145] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\IECompatCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\iecompatcache\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x3bc190 | out: lpFileInformation=0x3bc190*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xff1484a0, ftCreationTime.dwHighDateTime=0x1d2d432, ftLastAccessTime.dwLowDateTime=0xff1484a0, ftLastAccessTime.dwHighDateTime=0x1d2d432, ftLastWriteTime.dwLowDateTime=0xff1484a0, ftLastWriteTime.dwHighDateTime=0x1d2d432, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0200.145] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc070) returned 1 [0200.145] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\IECompatCache\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbc30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\IECompatCache\\container.dat", lpFilePart=0x0) returned 0x85 [0200.145] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0b0) returned 1 [0200.145] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\IECompatCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\iecompatcache\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x21cc928 | out: lpFileInformation=0x21cc928*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xff1484a0, ftCreationTime.dwHighDateTime=0x1d2d432, ftLastAccessTime.dwLowDateTime=0xff1484a0, ftLastAccessTime.dwHighDateTime=0x1d2d432, ftLastWriteTime.dwLowDateTime=0xff1484a0, ftLastWriteTime.dwHighDateTime=0x1d2d432, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0200.145] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc070) returned 1 [0200.145] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\IECompatCache\\container.dat", nBufferLength=0x105, lpBuffer=0x3bba90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\IECompatCache\\container.dat", lpFilePart=0x0) returned 0x85 [0200.145] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf70) returned 1 [0200.145] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\IECompatCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\iecompatcache\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0200.146] GetFileType (hFile=0x444) returned 0x1 [0200.146] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbee0) returned 1 [0200.146] GetFileType (hFile=0x444) returned 0x1 [0200.146] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc108 | out: lpFileSizeHigh=0x3bc108*=0x0) returned 0x0 [0200.146] CloseHandle (hObject=0x444) returned 1 [0200.157] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\IECompatCache\\container.dat", nBufferLength=0x105, lpBuffer=0x3bba90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\IECompatCache\\container.dat", lpFilePart=0x0) returned 0x85 [0200.157] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf70) returned 1 [0200.157] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\IECompatCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\iecompatcache\\container.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0200.159] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8a00) returned 1 [0200.159] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0200.159] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\IECompatUaCache", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\IECompatUaCache", lpFilePart=0x0) returned 0x79 [0200.159] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\IECompatUaCache\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\IECompatUaCache\\", lpFilePart=0x0) returned 0x7a [0200.159] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\IECompatUaCache\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d7670 [0200.159] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0200.160] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0200.160] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0200.160] FindClose (in: hFindFile=0x5d7670 | out: hFindFile=0x5d7670) returned 1 [0200.160] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0200.160] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0200.160] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0200.160] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\IECompatUaCache", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\IECompatUaCache", lpFilePart=0x0) returned 0x79 [0200.160] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\IECompatUaCache\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\IECompatUaCache\\", lpFilePart=0x0) returned 0x7a [0200.160] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\IECompatUaCache\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d7e50 [0200.160] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0200.160] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0200.160] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0200.161] FindClose (in: hFindFile=0x5d7e50 | out: hFindFile=0x5d7e50) returned 1 [0200.161] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0200.161] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0200.161] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\IECompatUaCache\\container.dat", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\IECompatUaCache\\container.dat", lpFilePart=0x0) returned 0x87 [0200.161] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0200.161] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\IECompatUaCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\iecompatuacache\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x22461d0 | out: lpFileInformation=0x22461d0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xff1484a0, ftCreationTime.dwHighDateTime=0x1d2d432, ftLastAccessTime.dwLowDateTime=0xff1484a0, ftLastAccessTime.dwHighDateTime=0x1d2d432, ftLastWriteTime.dwLowDateTime=0xff1484a0, ftLastWriteTime.dwHighDateTime=0x1d2d432, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0200.161] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0200.161] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\IECompatUaCache\\container.dat", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\IECompatUaCache\\container.dat", lpFilePart=0x0) returned 0x87 [0200.161] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0200.161] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\IECompatUaCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\iecompatuacache\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0200.161] GetFileType (hFile=0x444) returned 0x1 [0200.161] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0200.161] GetFileType (hFile=0x444) returned 0x1 [0200.161] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x0 [0200.161] CloseHandle (hObject=0x444) returned 1 [0200.171] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\IECompatUaCache\\container.dat", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\IECompatUaCache\\container.dat", lpFilePart=0x0) returned 0x87 [0200.172] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0200.172] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\IECompatUaCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\iecompatuacache\\container.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0200.173] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3baf90) returned 1 [0200.174] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\IECompatUaCache\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbc10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\IECompatUaCache\\container.dat", lpFilePart=0x0) returned 0x87 [0200.174] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0b0) returned 1 [0200.174] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\IECompatUaCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\iecompatuacache\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x3bc190 | out: lpFileInformation=0x3bc190*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xff1484a0, ftCreationTime.dwHighDateTime=0x1d2d432, ftLastAccessTime.dwLowDateTime=0xff1484a0, ftLastAccessTime.dwHighDateTime=0x1d2d432, ftLastWriteTime.dwLowDateTime=0xff1484a0, ftLastWriteTime.dwHighDateTime=0x1d2d432, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0200.174] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc070) returned 1 [0200.174] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\IECompatUaCache\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbc30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\IECompatUaCache\\container.dat", lpFilePart=0x0) returned 0x87 [0200.174] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0b0) returned 1 [0200.174] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\IECompatUaCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\iecompatuacache\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x22bd018 | out: lpFileInformation=0x22bd018*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xff1484a0, ftCreationTime.dwHighDateTime=0x1d2d432, ftLastAccessTime.dwLowDateTime=0xff1484a0, ftLastAccessTime.dwHighDateTime=0x1d2d432, ftLastWriteTime.dwLowDateTime=0xff1484a0, ftLastWriteTime.dwHighDateTime=0x1d2d432, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0200.174] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc070) returned 1 [0200.174] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\IECompatUaCache\\container.dat", nBufferLength=0x105, lpBuffer=0x3bba90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\IECompatUaCache\\container.dat", lpFilePart=0x0) returned 0x87 [0200.174] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf70) returned 1 [0200.174] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\IECompatUaCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\iecompatuacache\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0200.174] GetFileType (hFile=0x444) returned 0x1 [0200.174] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbee0) returned 1 [0200.174] GetFileType (hFile=0x444) returned 0x1 [0200.174] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc108 | out: lpFileSizeHigh=0x3bc108*=0x0) returned 0x0 [0200.175] CloseHandle (hObject=0x444) returned 1 [0200.184] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\IECompatUaCache\\container.dat", nBufferLength=0x105, lpBuffer=0x3bba90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\IECompatUaCache\\container.dat", lpFilePart=0x0) returned 0x87 [0200.184] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf70) returned 1 [0200.184] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\IECompatUaCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\iecompatuacache\\container.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0200.188] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8a00) returned 1 [0200.188] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0200.188] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User", lpFilePart=0x0) returned 0x6e [0200.189] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\", lpFilePart=0x0) returned 0x6f [0200.189] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d79d0 [0200.189] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0200.189] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0200.189] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0200.189] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0200.189] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0200.189] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0200.189] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0200.189] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User", lpFilePart=0x0) returned 0x6e [0200.189] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\", lpFilePart=0x0) returned 0x6f [0200.189] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d7fd0 [0200.189] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0200.190] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0200.190] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0200.190] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0200.190] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0200.190] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0200.190] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0200.190] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default", nBufferLength=0x105, lpBuffer=0x3be130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default", lpFilePart=0x0) returned 0x76 [0200.190] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\", nBufferLength=0x105, lpBuffer=0x3be0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\", lpFilePart=0x0) returned 0x77 [0200.190] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\*", lpFindFileData=0x3be2e0 | out: lpFindFileData=0x3be2e0) returned 0x5d7c70 [0200.190] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0200.190] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0200.190] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0200.191] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 0 [0200.191] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0200.191] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0200.191] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0200.191] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0200.191] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default", nBufferLength=0x105, lpBuffer=0x3be130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default", lpFilePart=0x0) returned 0x76 [0200.191] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\", nBufferLength=0x105, lpBuffer=0x3be0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\", lpFilePart=0x0) returned 0x77 [0200.191] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\*", lpFindFileData=0x3be2e0 | out: lpFindFileData=0x3be2e0) returned 0x5d7d90 [0200.191] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0200.191] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0200.191] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0200.191] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 0 [0200.191] FindClose (in: hFindFile=0x5d7d90 | out: hFindFile=0x5d7d90) returned 1 [0200.191] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0200.192] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0200.192] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0200.192] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache", nBufferLength=0x105, lpBuffer=0x3be0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache", lpFilePart=0x0) returned 0x7f [0200.192] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\", nBufferLength=0x105, lpBuffer=0x3be060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\", lpFilePart=0x0) returned 0x80 [0200.192] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\*", lpFindFileData=0x3be270 | out: lpFindFileData=0x3be270) returned 0x5d7eb0 [0200.192] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0200.192] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0200.192] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0200.192] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 0 [0200.192] FindClose (in: hFindFile=0x5d7eb0 | out: hFindFile=0x5d7eb0) returned 1 [0200.192] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0200.192] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0200.192] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0200.192] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache", nBufferLength=0x105, lpBuffer=0x3be0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache", lpFilePart=0x0) returned 0x7f [0200.192] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\", nBufferLength=0x105, lpBuffer=0x3be060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\", lpFilePart=0x0) returned 0x80 [0200.192] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\*", lpFindFileData=0x3be270 | out: lpFindFileData=0x3be270) returned 0x5d78b0 [0200.193] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0200.193] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0200.193] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0200.193] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 0 [0200.193] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0200.193] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0200.193] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0200.193] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\container.dat", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\container.dat", lpFilePart=0x0) returned 0x8d [0200.193] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0200.193] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x233c790 | out: lpFileInformation=0x233c790*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xff4ee601, ftCreationTime.dwHighDateTime=0x1d2d432, ftLastAccessTime.dwLowDateTime=0xff4ee601, ftLastAccessTime.dwHighDateTime=0x1d2d432, ftLastWriteTime.dwLowDateTime=0xff4ee601, ftLastWriteTime.dwHighDateTime=0x1d2d432, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0200.193] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0200.193] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\container.dat", nBufferLength=0x105, lpBuffer=0x3bdf40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\container.dat", lpFilePart=0x0) returned 0x8d [0200.193] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be420) returned 1 [0200.193] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0200.194] GetFileType (hFile=0x444) returned 0x1 [0200.194] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be390) returned 1 [0200.194] GetFileType (hFile=0x444) returned 0x1 [0200.194] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be5b8 | out: lpFileSizeHigh=0x3be5b8*=0x0) returned 0x0 [0200.194] CloseHandle (hObject=0x444) returned 1 [0200.240] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\container.dat", nBufferLength=0x105, lpBuffer=0x3bdf40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\container.dat", lpFilePart=0x0) returned 0x8d [0200.240] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be420) returned 1 [0200.240] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\container.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0200.241] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3baeb0) returned 1 [0200.242] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbb30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\container.dat", lpFilePart=0x0) returned 0x8d [0200.242] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x3bc0b0 | out: lpFileInformation=0x3bc0b0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xff4ee601, ftCreationTime.dwHighDateTime=0x1d2d432, ftLastAccessTime.dwLowDateTime=0xff4ee601, ftLastAccessTime.dwHighDateTime=0x1d2d432, ftLastWriteTime.dwLowDateTime=0xff4ee601, ftLastWriteTime.dwHighDateTime=0x1d2d432, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0200.242] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbb50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\container.dat", lpFilePart=0x0) returned 0x8d [0200.242] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x21b3d20 | out: lpFileInformation=0x21b3d20*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xff4ee601, ftCreationTime.dwHighDateTime=0x1d2d432, ftLastAccessTime.dwLowDateTime=0xff4ee601, ftLastAccessTime.dwHighDateTime=0x1d2d432, ftLastWriteTime.dwLowDateTime=0xff4ee601, ftLastWriteTime.dwHighDateTime=0x1d2d432, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0200.242] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\container.dat", nBufferLength=0x105, lpBuffer=0x3bb9b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\container.dat", lpFilePart=0x0) returned 0x8d [0200.242] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0200.242] GetFileType (hFile=0x444) returned 0x1 [0200.242] GetFileType (hFile=0x444) returned 0x1 [0200.242] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc028 | out: lpFileSizeHigh=0x3bc028*=0x0) returned 0x0 [0200.242] CloseHandle (hObject=0x444) returned 1 [0200.253] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\container.dat", nBufferLength=0x105, lpBuffer=0x3bb9b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\container.dat", lpFilePart=0x0) returned 0x8d [0200.253] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\container.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0200.255] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO", lpFilePart=0x0) returned 0x88 [0200.256] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\", lpFilePart=0x0) returned 0x89 [0200.256] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d79d0 [0200.256] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0200.256] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0200.256] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0200.256] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0200.256] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0200.257] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO", lpFilePart=0x0) returned 0x88 [0200.257] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\", lpFilePart=0x0) returned 0x89 [0200.257] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7fd0 [0200.257] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0200.257] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0200.257] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0200.257] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0200.258] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0200.258] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\container.dat", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\container.dat", lpFilePart=0x0) returned 0x96 [0200.258] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x222df88 | out: lpFileInformation=0x222df88*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xff51f37d, ftCreationTime.dwHighDateTime=0x1d2d432, ftLastAccessTime.dwLowDateTime=0xff51f37d, ftLastAccessTime.dwHighDateTime=0x1d2d432, ftLastWriteTime.dwLowDateTime=0xff51f37d, ftLastWriteTime.dwHighDateTime=0x1d2d432, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0200.258] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\container.dat", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\container.dat", lpFilePart=0x0) returned 0x96 [0200.258] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0200.258] GetFileType (hFile=0x444) returned 0x1 [0200.258] GetFileType (hFile=0x444) returned 0x1 [0200.258] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x0 [0200.258] CloseHandle (hObject=0x444) returned 1 [0200.269] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\container.dat", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\container.dat", lpFilePart=0x0) returned 0x96 [0200.269] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\container.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0200.271] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbac0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\container.dat", lpFilePart=0x0) returned 0x96 [0200.271] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x3bc040 | out: lpFileInformation=0x3bc040*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xff51f37d, ftCreationTime.dwHighDateTime=0x1d2d432, ftLastAccessTime.dwLowDateTime=0xff51f37d, ftLastAccessTime.dwHighDateTime=0x1d2d432, ftLastWriteTime.dwLowDateTime=0xff51f37d, ftLastWriteTime.dwHighDateTime=0x1d2d432, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0200.271] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbae0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\container.dat", lpFilePart=0x0) returned 0x96 [0200.271] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x22a4e70 | out: lpFileInformation=0x22a4e70*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xff51f37d, ftCreationTime.dwHighDateTime=0x1d2d432, ftLastAccessTime.dwLowDateTime=0xff51f37d, ftLastAccessTime.dwHighDateTime=0x1d2d432, ftLastWriteTime.dwLowDateTime=0xff51f37d, ftLastWriteTime.dwHighDateTime=0x1d2d432, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0200.272] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\container.dat", nBufferLength=0x105, lpBuffer=0x3bb940, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\container.dat", lpFilePart=0x0) returned 0x96 [0200.272] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0200.272] GetFileType (hFile=0x444) returned 0x1 [0200.272] GetFileType (hFile=0x444) returned 0x1 [0200.272] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bbfb8 | out: lpFileSizeHigh=0x3bbfb8*=0x0) returned 0x0 [0200.272] CloseHandle (hObject=0x444) returned 1 [0200.285] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\container.dat", nBufferLength=0x105, lpBuffer=0x3bb940, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\container.dat", lpFilePart=0x0) returned 0x96 [0200.285] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\container.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0200.288] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1", nBufferLength=0x105, lpBuffer=0x3bdfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1", lpFilePart=0x0) returned 0x8a [0200.288] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\", nBufferLength=0x105, lpBuffer=0x3bdf80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\", lpFilePart=0x0) returned 0x8b [0200.288] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\*", lpFindFileData=0x3be190 | out: lpFindFileData=0x3be190) returned 0x5d7a90 [0200.310] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be1e0 | out: lpFindFileData=0x3be1e0) returned 1 [0200.310] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be1e0 | out: lpFindFileData=0x3be1e0) returned 1 [0200.310] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be1e0 | out: lpFindFileData=0x3be1e0) returned 1 [0200.310] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be1e0 | out: lpFindFileData=0x3be1e0) returned 1 [0200.310] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be1e0 | out: lpFindFileData=0x3be1e0) returned 1 [0200.310] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be1e0 | out: lpFindFileData=0x3be1e0) returned 1 [0200.310] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be1e0 | out: lpFindFileData=0x3be1e0) returned 1 [0200.310] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be1e0 | out: lpFindFileData=0x3be1e0) returned 1 [0200.311] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be1e0 | out: lpFindFileData=0x3be1e0) returned 1 [0200.311] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be1e0 | out: lpFindFileData=0x3be1e0) returned 1 [0200.311] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be1e0 | out: lpFindFileData=0x3be1e0) returned 1 [0200.311] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be1e0 | out: lpFindFileData=0x3be1e0) returned 1 [0200.311] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be1e0 | out: lpFindFileData=0x3be1e0) returned 1 [0200.311] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be1e0 | out: lpFindFileData=0x3be1e0) returned 1 [0200.312] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be1e0 | out: lpFindFileData=0x3be1e0) returned 1 [0200.312] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be1e0 | out: lpFindFileData=0x3be1e0) returned 0 [0200.312] FindClose (in: hFindFile=0x5d7a90 | out: hFindFile=0x5d7a90) returned 1 [0200.313] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1", nBufferLength=0x105, lpBuffer=0x3bdfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1", lpFilePart=0x0) returned 0x8a [0200.313] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\", nBufferLength=0x105, lpBuffer=0x3bdf80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\", lpFilePart=0x0) returned 0x8b [0200.313] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\*", lpFindFileData=0x3be190 | out: lpFindFileData=0x3be190) returned 0x5d7550 [0200.313] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be1e0 | out: lpFindFileData=0x3be1e0) returned 1 [0200.314] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be1e0 | out: lpFindFileData=0x3be1e0) returned 1 [0200.314] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be1e0 | out: lpFindFileData=0x3be1e0) returned 1 [0200.314] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be1e0 | out: lpFindFileData=0x3be1e0) returned 1 [0200.314] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be1e0 | out: lpFindFileData=0x3be1e0) returned 1 [0200.314] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be1e0 | out: lpFindFileData=0x3be1e0) returned 1 [0200.314] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be1e0 | out: lpFindFileData=0x3be1e0) returned 1 [0200.315] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be1e0 | out: lpFindFileData=0x3be1e0) returned 1 [0200.315] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be1e0 | out: lpFindFileData=0x3be1e0) returned 1 [0200.315] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be1e0 | out: lpFindFileData=0x3be1e0) returned 1 [0200.315] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be1e0 | out: lpFindFileData=0x3be1e0) returned 1 [0200.315] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be1e0 | out: lpFindFileData=0x3be1e0) returned 1 [0200.315] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be1e0 | out: lpFindFileData=0x3be1e0) returned 1 [0200.316] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be1e0 | out: lpFindFileData=0x3be1e0) returned 1 [0200.316] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be1e0 | out: lpFindFileData=0x3be1e0) returned 1 [0200.316] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be1e0 | out: lpFindFileData=0x3be1e0) returned 0 [0200.316] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0200.317] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\1ab36a6a[1].js", nBufferLength=0x105, lpBuffer=0x3be000, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\1ab36a6a[1].js", lpFilePart=0x0) returned 0x99 [0200.317] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\1ab36a6a[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\1ab36a6a[1].js"), fInfoLevelId=0x0, lpFileInformation=0x2324440 | out: lpFileInformation=0x2324440*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x30b1cac, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x30b1cac, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x30b3048, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x38ff)) returned 1 [0200.320] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\1ab36a6a[1].js", nBufferLength=0x105, lpBuffer=0x3be000, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\1ab36a6a[1].js", lpFilePart=0x0) returned 0x99 [0200.320] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\1ab36a6a[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\1ab36a6a[1].js"), fInfoLevelId=0x0, lpFileInformation=0x2324630 | out: lpFileInformation=0x2324630*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x30b1cac, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x30b1cac, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x30b3048, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x38ff)) returned 1 [0200.321] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\1ab36a6a[1].js", nBufferLength=0x105, lpBuffer=0x3bdef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\1ab36a6a[1].js", lpFilePart=0x0) returned 0x99 [0200.321] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\1ab36a6a[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\1ab36a6a[1].js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0200.322] GetFileType (hFile=0x444) returned 0x1 [0200.322] GetFileType (hFile=0x444) returned 0x1 [0200.322] ReadFile (in: hFile=0x444, lpBuffer=0x2326b40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be458, lpOverlapped=0x0 | out: lpBuffer=0x2326b40*, lpNumberOfBytesRead=0x3be458*=0x1000, lpOverlapped=0x0) returned 1 [0200.392] CloseHandle (hObject=0x444) returned 1 [0200.392] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\1ab36a6a[1].js", nBufferLength=0x105, lpBuffer=0x3bdef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\1ab36a6a[1].js", lpFilePart=0x0) returned 0x99 [0200.392] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3d0) returned 1 [0200.392] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\1ab36a6a[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\1ab36a6a[1].js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0200.393] GetFileType (hFile=0x444) returned 0x1 [0200.393] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be340) returned 1 [0200.393] GetFileType (hFile=0x444) returned 0x1 [0200.393] WriteFile (in: hFile=0x444, lpBuffer=0x21888d8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be508, lpOverlapped=0x0 | out: lpBuffer=0x21888d8*, lpNumberOfBytesWritten=0x3be508*=0x2000, lpOverlapped=0x0) returned 1 [0200.393] CloseHandle (hObject=0x444) returned 1 [0200.393] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\1ab36a6a[1].js", nBufferLength=0x105, lpBuffer=0x3be000, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\1ab36a6a[1].js", lpFilePart=0x0) returned 0x99 [0200.393] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\1ab36a6a[1].js.xuy", nBufferLength=0x105, lpBuffer=0x3be000, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\1ab36a6a[1].js.xuy", lpFilePart=0x0) returned 0x9d [0200.393] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be440) returned 1 [0200.393] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\1ab36a6a[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\1ab36a6a[1].js"), fInfoLevelId=0x0, lpFileInformation=0x3be520 | out: lpFileInformation=0x3be520*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x30b1cac, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x30b1cac, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x634b1ba6, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x38ff)) returned 1 [0200.393] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be400) returned 1 [0200.393] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\1ab36a6a[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\1ab36a6a[1].js"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\1ab36a6a[1].js.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\1ab36a6a[1].js.xuy")) returned 1 [0200.395] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\1acd62c3[1].js", nBufferLength=0x105, lpBuffer=0x3be000, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\1acd62c3[1].js", lpFilePart=0x0) returned 0x99 [0200.395] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be480) returned 1 [0200.395] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\1acd62c3[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\1acd62c3[1].js"), fInfoLevelId=0x0, lpFileInformation=0x21a76e0 | out: lpFileInformation=0x21a76e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x30b7e61, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x30b7e61, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x30ba56e, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x1f19a)) returned 1 [0200.395] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be440) returned 1 [0200.395] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\1acd62c3[1].js", nBufferLength=0x105, lpBuffer=0x3be000, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\1acd62c3[1].js", lpFilePart=0x0) returned 0x99 [0200.395] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be480) returned 1 [0200.395] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\1acd62c3[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\1acd62c3[1].js"), fInfoLevelId=0x0, lpFileInformation=0x21a78d0 | out: lpFileInformation=0x21a78d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x30b7e61, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x30b7e61, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x30ba56e, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x1f19a)) returned 1 [0200.395] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be440) returned 1 [0200.395] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\1acd62c3[1].js", nBufferLength=0x105, lpBuffer=0x3bdef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\1acd62c3[1].js", lpFilePart=0x0) returned 0x99 [0200.395] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3d0) returned 1 [0200.396] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\1acd62c3[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\1acd62c3[1].js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0200.396] GetFileType (hFile=0x444) returned 0x1 [0200.396] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be340) returned 1 [0200.396] GetFileType (hFile=0x444) returned 0x1 [0200.396] ReadFile (in: hFile=0x444, lpBuffer=0x21a9de0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be458, lpOverlapped=0x0 | out: lpBuffer=0x21a9de0*, lpNumberOfBytesRead=0x3be458*=0x1000, lpOverlapped=0x0) returned 1 [0200.425] CloseHandle (hObject=0x444) returned 1 [0200.425] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\1acd62c3[1].js", nBufferLength=0x105, lpBuffer=0x3bdef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\1acd62c3[1].js", lpFilePart=0x0) returned 0x99 [0200.425] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3d0) returned 1 [0200.425] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\1acd62c3[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\1acd62c3[1].js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0200.425] GetFileType (hFile=0x444) returned 0x1 [0200.425] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be340) returned 1 [0200.425] GetFileType (hFile=0x444) returned 0x1 [0200.425] WriteFile (in: hFile=0x444, lpBuffer=0x21a7aa0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be508, lpOverlapped=0x0 | out: lpBuffer=0x21a7aa0*, lpNumberOfBytesWritten=0x3be508*=0x2000, lpOverlapped=0x0) returned 1 [0200.425] CloseHandle (hObject=0x444) returned 1 [0200.425] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\1acd62c3[1].js", nBufferLength=0x105, lpBuffer=0x3be000, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\1acd62c3[1].js", lpFilePart=0x0) returned 0x99 [0200.425] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\1acd62c3[1].js.xuy", nBufferLength=0x105, lpBuffer=0x3be000, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\1acd62c3[1].js.xuy", lpFilePart=0x0) returned 0x9d [0200.426] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be440) returned 1 [0200.426] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\1acd62c3[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\1acd62c3[1].js"), fInfoLevelId=0x0, lpFileInformation=0x3be520 | out: lpFileInformation=0x3be520*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x30b7e61, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x30b7e61, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x634fe396, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x1f19a)) returned 1 [0200.426] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be400) returned 1 [0200.426] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\1acd62c3[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\1acd62c3[1].js"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\1acd62c3[1].js.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\1acd62c3[1].js.xuy")) returned 1 [0200.427] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\236a1503[1].js", nBufferLength=0x105, lpBuffer=0x3be000, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\236a1503[1].js", lpFilePart=0x0) returned 0x99 [0200.427] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be480) returned 1 [0200.427] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\236a1503[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\236a1503[1].js"), fInfoLevelId=0x0, lpFileInformation=0x2226410 | out: lpFileInformation=0x2226410*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x30e510d, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x30e510d, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x30e64b8, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x3cf6)) returned 1 [0200.427] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be440) returned 1 [0200.427] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\236a1503[1].js", nBufferLength=0x105, lpBuffer=0x3be000, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\236a1503[1].js", lpFilePart=0x0) returned 0x99 [0200.428] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be480) returned 1 [0200.428] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\236a1503[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\236a1503[1].js"), fInfoLevelId=0x0, lpFileInformation=0x2226600 | out: lpFileInformation=0x2226600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x30e510d, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x30e510d, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x30e64b8, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x3cf6)) returned 1 [0200.428] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be440) returned 1 [0200.428] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\236a1503[1].js", nBufferLength=0x105, lpBuffer=0x3bdef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\236a1503[1].js", lpFilePart=0x0) returned 0x99 [0200.428] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3d0) returned 1 [0200.428] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\236a1503[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\236a1503[1].js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0200.429] GetFileType (hFile=0x444) returned 0x1 [0200.429] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be340) returned 1 [0200.429] GetFileType (hFile=0x444) returned 0x1 [0200.429] ReadFile (in: hFile=0x444, lpBuffer=0x2228b10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be458, lpOverlapped=0x0 | out: lpBuffer=0x2228b10*, lpNumberOfBytesRead=0x3be458*=0x1000, lpOverlapped=0x0) returned 1 [0200.442] CloseHandle (hObject=0x444) returned 1 [0200.442] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\236a1503[1].js", nBufferLength=0x105, lpBuffer=0x3bdef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\236a1503[1].js", lpFilePart=0x0) returned 0x99 [0200.442] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3d0) returned 1 [0200.442] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\236a1503[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\236a1503[1].js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0200.442] GetFileType (hFile=0x444) returned 0x1 [0200.442] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be340) returned 1 [0200.442] GetFileType (hFile=0x444) returned 0x1 [0200.442] WriteFile (in: hFile=0x444, lpBuffer=0x22267d0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be508, lpOverlapped=0x0 | out: lpBuffer=0x22267d0*, lpNumberOfBytesWritten=0x3be508*=0x2000, lpOverlapped=0x0) returned 1 [0200.443] CloseHandle (hObject=0x444) returned 1 [0200.443] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\236a1503[1].js", nBufferLength=0x105, lpBuffer=0x3be000, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\236a1503[1].js", lpFilePart=0x0) returned 0x99 [0200.443] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\236a1503[1].js.xuy", nBufferLength=0x105, lpBuffer=0x3be000, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\236a1503[1].js.xuy", lpFilePart=0x0) returned 0x9d [0200.443] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be440) returned 1 [0200.443] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\236a1503[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\236a1503[1].js"), fInfoLevelId=0x0, lpFileInformation=0x3be520 | out: lpFileInformation=0x3be520*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x30e510d, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x30e510d, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x63524204, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x3cf6)) returned 1 [0200.443] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be400) returned 1 [0200.443] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\236a1503[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\236a1503[1].js"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\236a1503[1].js.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\236a1503[1].js.xuy")) returned 1 [0200.444] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\36a8ead3[1].js", nBufferLength=0x105, lpBuffer=0x3be000, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\36a8ead3[1].js", lpFilePart=0x0) returned 0x99 [0200.444] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be480) returned 1 [0200.444] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\36a8ead3[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\36a8ead3[1].js"), fInfoLevelId=0x0, lpFileInformation=0x22a5140 | out: lpFileInformation=0x22a5140*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x30d2c26, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x30d2c26, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x30d3fb5, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x26874)) returned 1 [0200.445] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be440) returned 1 [0200.445] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\36a8ead3[1].js", nBufferLength=0x105, lpBuffer=0x3be000, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\36a8ead3[1].js", lpFilePart=0x0) returned 0x99 [0200.445] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be480) returned 1 [0200.445] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\36a8ead3[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\36a8ead3[1].js"), fInfoLevelId=0x0, lpFileInformation=0x22a5330 | out: lpFileInformation=0x22a5330*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x30d2c26, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x30d2c26, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x30d3fb5, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x26874)) returned 1 [0200.445] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be440) returned 1 [0200.445] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\36a8ead3[1].js", nBufferLength=0x105, lpBuffer=0x3bdef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\36a8ead3[1].js", lpFilePart=0x0) returned 0x99 [0200.445] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3d0) returned 1 [0200.445] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\36a8ead3[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\36a8ead3[1].js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0200.446] GetFileType (hFile=0x444) returned 0x1 [0200.446] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be340) returned 1 [0200.446] GetFileType (hFile=0x444) returned 0x1 [0200.446] ReadFile (in: hFile=0x444, lpBuffer=0x22a7840, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be458, lpOverlapped=0x0 | out: lpBuffer=0x22a7840*, lpNumberOfBytesRead=0x3be458*=0x1000, lpOverlapped=0x0) returned 1 [0200.463] CloseHandle (hObject=0x444) returned 1 [0200.463] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\36a8ead3[1].js", nBufferLength=0x105, lpBuffer=0x3bdef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\36a8ead3[1].js", lpFilePart=0x0) returned 0x99 [0200.463] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3d0) returned 1 [0200.463] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\36a8ead3[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\36a8ead3[1].js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0200.463] GetFileType (hFile=0x444) returned 0x1 [0200.463] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be340) returned 1 [0200.463] GetFileType (hFile=0x444) returned 0x1 [0200.463] WriteFile (in: hFile=0x444, lpBuffer=0x22a5500*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be508, lpOverlapped=0x0 | out: lpBuffer=0x22a5500*, lpNumberOfBytesWritten=0x3be508*=0x2000, lpOverlapped=0x0) returned 1 [0200.464] CloseHandle (hObject=0x444) returned 1 [0200.464] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\36a8ead3[1].js", nBufferLength=0x105, lpBuffer=0x3be000, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\36a8ead3[1].js", lpFilePart=0x0) returned 0x99 [0200.464] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\36a8ead3[1].js.xuy", nBufferLength=0x105, lpBuffer=0x3be000, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\36a8ead3[1].js.xuy", lpFilePart=0x0) returned 0x9d [0200.464] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be440) returned 1 [0200.464] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\36a8ead3[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\36a8ead3[1].js"), fInfoLevelId=0x0, lpFileInformation=0x3be520 | out: lpFileInformation=0x3be520*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x30d2c26, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x30d2c26, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x6354a419, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x26874)) returned 1 [0200.464] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be400) returned 1 [0200.464] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\36a8ead3[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\36a8ead3[1].js"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\36a8ead3[1].js.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\36a8ead3[1].js.xuy")) returned 1 [0200.465] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\3727cd16[1].css", nBufferLength=0x105, lpBuffer=0x3be000, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\3727cd16[1].css", lpFilePart=0x0) returned 0x9a [0200.465] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be480) returned 1 [0200.465] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\3727cd16[1].css" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\3727cd16[1].css"), fInfoLevelId=0x0, lpFileInformation=0x2323e78 | out: lpFileInformation=0x2323e78*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3038ed3, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3038ed3, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x303a262, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x4da8)) returned 1 [0200.466] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be440) returned 1 [0200.466] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\3727cd16[1].css", nBufferLength=0x105, lpBuffer=0x3be000, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\3727cd16[1].css", lpFilePart=0x0) returned 0x9a [0200.466] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be480) returned 1 [0200.466] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\3727cd16[1].css" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\3727cd16[1].css"), fInfoLevelId=0x0, lpFileInformation=0x2324068 | out: lpFileInformation=0x2324068*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3038ed3, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3038ed3, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x303a262, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x4da8)) returned 1 [0200.466] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be440) returned 1 [0200.466] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\3727cd16[1].css", nBufferLength=0x105, lpBuffer=0x3bdef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\3727cd16[1].css", lpFilePart=0x0) returned 0x9a [0200.466] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3d0) returned 1 [0200.466] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\3727cd16[1].css" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\3727cd16[1].css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0200.467] GetFileType (hFile=0x444) returned 0x1 [0200.467] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be340) returned 1 [0200.467] GetFileType (hFile=0x444) returned 0x1 [0200.467] ReadFile (in: hFile=0x444, lpBuffer=0x2326578, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be458, lpOverlapped=0x0 | out: lpBuffer=0x2326578*, lpNumberOfBytesRead=0x3be458*=0x1000, lpOverlapped=0x0) returned 1 [0200.497] CloseHandle (hObject=0x444) returned 1 [0200.497] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\3727cd16[1].css", nBufferLength=0x105, lpBuffer=0x3bdef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\3727cd16[1].css", lpFilePart=0x0) returned 0x9a [0200.497] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3d0) returned 1 [0200.497] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\3727cd16[1].css" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\3727cd16[1].css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0200.498] GetFileType (hFile=0x444) returned 0x1 [0200.498] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be340) returned 1 [0200.498] GetFileType (hFile=0x444) returned 0x1 [0200.498] WriteFile (in: hFile=0x444, lpBuffer=0x2188420*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be508, lpOverlapped=0x0 | out: lpBuffer=0x2188420*, lpNumberOfBytesWritten=0x3be508*=0x2000, lpOverlapped=0x0) returned 1 [0200.498] CloseHandle (hObject=0x444) returned 1 [0200.498] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\3727cd16[1].css", nBufferLength=0x105, lpBuffer=0x3be000, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\3727cd16[1].css", lpFilePart=0x0) returned 0x9a [0200.498] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\3727cd16[1].css.xuy", nBufferLength=0x105, lpBuffer=0x3be000, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\3727cd16[1].css.xuy", lpFilePart=0x0) returned 0x9e [0200.498] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be440) returned 1 [0200.498] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\3727cd16[1].css" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\3727cd16[1].css"), fInfoLevelId=0x0, lpFileInformation=0x3be520 | out: lpFileInformation=0x3be520*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3038ed3, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3038ed3, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x6359675a, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x4da8)) returned 1 [0200.499] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be400) returned 1 [0200.499] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\3727cd16[1].css" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\3727cd16[1].css"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\3727cd16[1].css.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\3727cd16[1].css.xuy")) returned 1 [0200.500] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\41795194[1].css", nBufferLength=0x105, lpBuffer=0x3be000, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\41795194[1].css", lpFilePart=0x0) returned 0x9a [0200.500] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be480) returned 1 [0200.500] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\41795194[1].css" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\41795194[1].css"), fInfoLevelId=0x0, lpFileInformation=0x21a26e0 | out: lpFileInformation=0x21a26e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x30be001, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x30be001, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x30c071a, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x19d6)) returned 1 [0200.500] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be440) returned 1 [0200.500] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\41795194[1].css", nBufferLength=0x105, lpBuffer=0x3be000, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\41795194[1].css", lpFilePart=0x0) returned 0x9a [0200.500] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be480) returned 1 [0200.500] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\41795194[1].css" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\41795194[1].css"), fInfoLevelId=0x0, lpFileInformation=0x21a28d0 | out: lpFileInformation=0x21a28d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x30be001, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x30be001, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x30c071a, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x19d6)) returned 1 [0200.500] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be440) returned 1 [0200.500] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\41795194[1].css", nBufferLength=0x105, lpBuffer=0x3bdef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\41795194[1].css", lpFilePart=0x0) returned 0x9a [0200.501] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3d0) returned 1 [0200.501] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\41795194[1].css" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\41795194[1].css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0200.502] GetFileType (hFile=0x444) returned 0x1 [0200.502] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be340) returned 1 [0200.502] GetFileType (hFile=0x444) returned 0x1 [0200.502] ReadFile (in: hFile=0x444, lpBuffer=0x21a4de0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be458, lpOverlapped=0x0 | out: lpBuffer=0x21a4de0*, lpNumberOfBytesRead=0x3be458*=0x1000, lpOverlapped=0x0) returned 1 [0200.522] CloseHandle (hObject=0x444) returned 1 [0200.523] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\41795194[1].css", nBufferLength=0x105, lpBuffer=0x3bdef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\41795194[1].css", lpFilePart=0x0) returned 0x9a [0200.523] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3d0) returned 1 [0200.523] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\41795194[1].css" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\41795194[1].css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0200.523] GetFileType (hFile=0x444) returned 0x1 [0200.523] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be340) returned 1 [0200.523] GetFileType (hFile=0x444) returned 0x1 [0200.523] WriteFile (in: hFile=0x444, lpBuffer=0x21a2aa0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be508, lpOverlapped=0x0 | out: lpBuffer=0x21a2aa0*, lpNumberOfBytesWritten=0x3be508*=0x2000, lpOverlapped=0x0) returned 1 [0200.523] CloseHandle (hObject=0x444) returned 1 [0200.523] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\41795194[1].css", nBufferLength=0x105, lpBuffer=0x3be000, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\41795194[1].css", lpFilePart=0x0) returned 0x9a [0200.523] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\41795194[1].css.xuy", nBufferLength=0x105, lpBuffer=0x3be000, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\41795194[1].css.xuy", lpFilePart=0x0) returned 0x9e [0200.523] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be440) returned 1 [0200.523] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\41795194[1].css" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\41795194[1].css"), fInfoLevelId=0x0, lpFileInformation=0x3be520 | out: lpFileInformation=0x3be520*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x30be001, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x30be001, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x635e2c56, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0200.524] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be400) returned 1 [0200.524] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\41795194[1].css" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\41795194[1].css"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\41795194[1].css.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\41795194[1].css.xuy")) returned 1 [0200.525] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\9101d3f2[1].js", nBufferLength=0x105, lpBuffer=0x3be000, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\9101d3f2[1].js", lpFilePart=0x0) returned 0x99 [0200.525] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be480) returned 1 [0200.525] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\9101d3f2[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\9101d3f2[1].js"), fInfoLevelId=0x0, lpFileInformation=0x2221410 | out: lpFileInformation=0x2221410*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x309e423, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x309e423, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x30a6cde, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x48d2)) returned 1 [0200.525] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be440) returned 1 [0200.525] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\9101d3f2[1].js", nBufferLength=0x105, lpBuffer=0x3be000, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\9101d3f2[1].js", lpFilePart=0x0) returned 0x99 [0200.525] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be480) returned 1 [0200.525] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\9101d3f2[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\9101d3f2[1].js"), fInfoLevelId=0x0, lpFileInformation=0x2221600 | out: lpFileInformation=0x2221600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x309e423, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x309e423, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x30a6cde, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x48d2)) returned 1 [0200.525] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be440) returned 1 [0200.525] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\9101d3f2[1].js", nBufferLength=0x105, lpBuffer=0x3bdef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\9101d3f2[1].js", lpFilePart=0x0) returned 0x99 [0200.525] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3d0) returned 1 [0200.525] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\9101d3f2[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\9101d3f2[1].js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0200.526] GetFileType (hFile=0x444) returned 0x1 [0200.526] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be340) returned 1 [0200.526] GetFileType (hFile=0x444) returned 0x1 [0200.527] ReadFile (in: hFile=0x444, lpBuffer=0x2223b10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be458, lpOverlapped=0x0 | out: lpBuffer=0x2223b10*, lpNumberOfBytesRead=0x3be458*=0x1000, lpOverlapped=0x0) returned 1 [0200.551] CloseHandle (hObject=0x444) returned 1 [0200.552] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\9101d3f2[1].js", nBufferLength=0x105, lpBuffer=0x3bdef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\9101d3f2[1].js", lpFilePart=0x0) returned 0x99 [0200.552] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3d0) returned 1 [0200.552] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\9101d3f2[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\9101d3f2[1].js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0200.552] GetFileType (hFile=0x444) returned 0x1 [0200.552] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be340) returned 1 [0200.552] GetFileType (hFile=0x444) returned 0x1 [0200.552] WriteFile (in: hFile=0x444, lpBuffer=0x22217d0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be508, lpOverlapped=0x0 | out: lpBuffer=0x22217d0*, lpNumberOfBytesWritten=0x3be508*=0x2000, lpOverlapped=0x0) returned 1 [0200.552] CloseHandle (hObject=0x444) returned 1 [0200.552] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\9101d3f2[1].js", nBufferLength=0x105, lpBuffer=0x3be000, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\9101d3f2[1].js", lpFilePart=0x0) returned 0x99 [0200.552] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\9101d3f2[1].js.xuy", nBufferLength=0x105, lpBuffer=0x3be000, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\9101d3f2[1].js.xuy", lpFilePart=0x0) returned 0x9d [0200.552] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be440) returned 1 [0200.552] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\9101d3f2[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\9101d3f2[1].js"), fInfoLevelId=0x0, lpFileInformation=0x3be520 | out: lpFileInformation=0x3be520*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x309e423, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x309e423, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x6362f25d, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x48d2)) returned 1 [0200.553] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be400) returned 1 [0200.553] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\9101d3f2[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\9101d3f2[1].js"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\9101d3f2[1].js.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\9101d3f2[1].js.xuy")) returned 1 [0200.554] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\appcache[1].man", nBufferLength=0x105, lpBuffer=0x3be000, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\appcache[1].man", lpFilePart=0x0) returned 0x9a [0200.554] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be480) returned 1 [0200.554] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\appcache[1].man" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\appcache[1].man"), fInfoLevelId=0x0, lpFileInformation=0x22a0148 | out: lpFileInformation=0x22a0148*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2b668c3, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x2b668c3, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x2b67c4f, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0xdda)) returned 1 [0200.559] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be440) returned 1 [0200.559] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\appcache[1].man", nBufferLength=0x105, lpBuffer=0x3bde60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\appcache[1].man", lpFilePart=0x0) returned 0x9a [0200.559] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be340) returned 1 [0200.559] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\appcache[1].man" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\appcache[1].man"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0200.559] GetFileType (hFile=0x444) returned 0x1 [0200.559] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be2b0) returned 1 [0200.559] GetFileType (hFile=0x444) returned 0x1 [0200.559] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be4d8 | out: lpFileSizeHigh=0x3be4d8*=0x0) returned 0xdda [0200.559] ReadFile (in: hFile=0x444, lpBuffer=0x22a1320, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be408, lpOverlapped=0x0 | out: lpBuffer=0x22a1320*, lpNumberOfBytesRead=0x3be408*=0xdda, lpOverlapped=0x0) returned 1 [0200.569] CloseHandle (hObject=0x444) returned 1 [0200.616] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\appcache[1].man", nBufferLength=0x105, lpBuffer=0x3bde60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\appcache[1].man", lpFilePart=0x0) returned 0x9a [0200.616] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be340) returned 1 [0200.616] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\appcache[1].man" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\appcache[1].man"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0200.618] GetFileType (hFile=0x444) returned 0x1 [0200.618] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be2b0) returned 1 [0200.618] GetFileType (hFile=0x444) returned 0x1 [0200.618] WriteFile (in: hFile=0x444, lpBuffer=0x231c900*, nNumberOfBytesToWrite=0xde0, lpNumberOfBytesWritten=0x3be318, lpOverlapped=0x0 | out: lpBuffer=0x231c900*, lpNumberOfBytesWritten=0x3be318*=0xde0, lpOverlapped=0x0) returned 1 [0200.619] CloseHandle (hObject=0x444) returned 1 [0200.619] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\appcache[1].man", nBufferLength=0x105, lpBuffer=0x3be000, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\appcache[1].man", lpFilePart=0x0) returned 0x9a [0200.619] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\appcache[1].man.xuy", nBufferLength=0x105, lpBuffer=0x3be000, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\appcache[1].man.xuy", lpFilePart=0x0) returned 0x9e [0200.619] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be440) returned 1 [0200.619] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\appcache[1].man" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\appcache[1].man"), fInfoLevelId=0x0, lpFileInformation=0x3be520 | out: lpFileInformation=0x3be520*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2b668c3, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x2b668c3, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x636c7d34, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xde0)) returned 1 [0200.619] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be400) returned 1 [0200.619] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\appcache[1].man" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\appcache[1].man"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\appcache[1].man.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\appcache[1].man.xuy")) returned 1 [0200.621] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\container.dat", nBufferLength=0x105, lpBuffer=0x3be000, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\container.dat", lpFilePart=0x0) returned 0x98 [0200.621] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be480) returned 1 [0200.621] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x231dd60 | out: lpFileInformation=0x231dd60*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x2b65523, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x2b65523, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x2b65523, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0200.621] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be440) returned 1 [0200.622] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\container.dat", nBufferLength=0x105, lpBuffer=0x3bde60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\container.dat", lpFilePart=0x0) returned 0x98 [0200.622] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be340) returned 1 [0200.622] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0200.622] GetFileType (hFile=0x444) returned 0x1 [0200.622] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be2b0) returned 1 [0200.622] GetFileType (hFile=0x444) returned 0x1 [0200.622] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be4d8 | out: lpFileSizeHigh=0x3be4d8*=0x0) returned 0x0 [0200.622] CloseHandle (hObject=0x444) returned 1 [0200.634] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\container.dat", nBufferLength=0x105, lpBuffer=0x3bde60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\container.dat", lpFilePart=0x0) returned 0x98 [0200.635] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be340) returned 1 [0200.635] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\container.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0200.636] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3badd0) returned 1 [0200.636] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\container.dat", nBufferLength=0x105, lpBuffer=0x3bba50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\container.dat", lpFilePart=0x0) returned 0x98 [0200.636] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbef0) returned 1 [0200.636] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x3bbfd0 | out: lpFileInformation=0x3bbfd0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x2b65523, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x2b65523, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x2b65523, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0200.636] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbeb0) returned 1 [0200.636] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\container.dat", nBufferLength=0x105, lpBuffer=0x3bba70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\container.dat", lpFilePart=0x0) returned 0x98 [0200.637] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbef0) returned 1 [0200.637] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x2191a98 | out: lpFileInformation=0x2191a98*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x2b65523, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x2b65523, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x2b65523, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0200.637] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbeb0) returned 1 [0200.637] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\container.dat", nBufferLength=0x105, lpBuffer=0x3bb8d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\container.dat", lpFilePart=0x0) returned 0x98 [0200.637] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbdb0) returned 1 [0200.637] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0200.637] GetFileType (hFile=0x444) returned 0x1 [0200.637] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbd20) returned 1 [0200.637] GetFileType (hFile=0x444) returned 0x1 [0200.637] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bbf48 | out: lpFileSizeHigh=0x3bbf48*=0x0) returned 0x0 [0200.637] CloseHandle (hObject=0x444) returned 1 [0200.689] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\container.dat", nBufferLength=0x105, lpBuffer=0x3bb8d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\container.dat", lpFilePart=0x0) returned 0x98 [0200.689] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbdb0) returned 1 [0200.689] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\container.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0200.691] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8840) returned 1 [0200.691] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\d11fd6a0[1].js", nBufferLength=0x105, lpBuffer=0x3be000, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\d11fd6a0[1].js", lpFilePart=0x0) returned 0x99 [0200.692] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be480) returned 1 [0200.692] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\d11fd6a0[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\d11fd6a0[1].js"), fInfoLevelId=0x0, lpFileInformation=0x2208878 | out: lpFileInformation=0x2208878*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x30eb2d1, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x30eb2d1, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x30eb2d1, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x59e2)) returned 1 [0200.692] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be440) returned 1 [0200.692] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\d11fd6a0[1].js", nBufferLength=0x105, lpBuffer=0x3be000, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\d11fd6a0[1].js", lpFilePart=0x0) returned 0x99 [0200.692] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be480) returned 1 [0200.692] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\d11fd6a0[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\d11fd6a0[1].js"), fInfoLevelId=0x0, lpFileInformation=0x2208a68 | out: lpFileInformation=0x2208a68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x30eb2d1, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x30eb2d1, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x30eb2d1, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x59e2)) returned 1 [0200.692] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be440) returned 1 [0200.692] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\d11fd6a0[1].js", nBufferLength=0x105, lpBuffer=0x3bdef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\d11fd6a0[1].js", lpFilePart=0x0) returned 0x99 [0200.692] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3d0) returned 1 [0200.692] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\d11fd6a0[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\d11fd6a0[1].js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0200.693] GetFileType (hFile=0x444) returned 0x1 [0200.693] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be340) returned 1 [0200.693] GetFileType (hFile=0x444) returned 0x1 [0200.693] ReadFile (in: hFile=0x444, lpBuffer=0x220af78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be458, lpOverlapped=0x0 | out: lpBuffer=0x220af78*, lpNumberOfBytesRead=0x3be458*=0x1000, lpOverlapped=0x0) returned 1 [0200.726] CloseHandle (hObject=0x444) returned 1 [0200.726] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\d11fd6a0[1].js", nBufferLength=0x105, lpBuffer=0x3bdef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\d11fd6a0[1].js", lpFilePart=0x0) returned 0x99 [0200.726] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3d0) returned 1 [0200.726] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\d11fd6a0[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\d11fd6a0[1].js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0200.727] GetFileType (hFile=0x444) returned 0x1 [0200.727] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be340) returned 1 [0200.727] GetFileType (hFile=0x444) returned 0x1 [0200.727] WriteFile (in: hFile=0x444, lpBuffer=0x2208c38*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be508, lpOverlapped=0x0 | out: lpBuffer=0x2208c38*, lpNumberOfBytesWritten=0x3be508*=0x2000, lpOverlapped=0x0) returned 1 [0200.727] CloseHandle (hObject=0x444) returned 1 [0200.727] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\d11fd6a0[1].js", nBufferLength=0x105, lpBuffer=0x3be000, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\d11fd6a0[1].js", lpFilePart=0x0) returned 0x99 [0200.727] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\d11fd6a0[1].js.xuy", nBufferLength=0x105, lpBuffer=0x3be000, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\d11fd6a0[1].js.xuy", lpFilePart=0x0) returned 0x9d [0200.727] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be440) returned 1 [0200.727] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\d11fd6a0[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\d11fd6a0[1].js"), fInfoLevelId=0x0, lpFileInformation=0x3be520 | out: lpFileInformation=0x3be520*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x30eb2d1, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x30eb2d1, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x637d2bec, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x59e2)) returned 1 [0200.727] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be400) returned 1 [0200.727] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\d11fd6a0[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\d11fd6a0[1].js"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\d11fd6a0[1].js.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\d11fd6a0[1].js.xuy")) returned 1 [0200.729] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\f544a93b[1].css", nBufferLength=0x105, lpBuffer=0x3be000, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\f544a93b[1].css", lpFilePart=0x0) returned 0x9a [0200.729] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be480) returned 1 [0200.729] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\f544a93b[1].css" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\f544a93b[1].css"), fInfoLevelId=0x0, lpFileInformation=0x22875b0 | out: lpFileInformation=0x22875b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3040402, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3040402, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x304178e, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x592)) returned 1 [0200.729] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be440) returned 1 [0200.729] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\f544a93b[1].css", nBufferLength=0x105, lpBuffer=0x3bde60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\f544a93b[1].css", lpFilePart=0x0) returned 0x9a [0200.729] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be340) returned 1 [0200.729] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\f544a93b[1].css" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\f544a93b[1].css"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0200.729] GetFileType (hFile=0x444) returned 0x1 [0200.729] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be2b0) returned 1 [0200.729] GetFileType (hFile=0x444) returned 0x1 [0200.729] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be4d8 | out: lpFileSizeHigh=0x3be4d8*=0x0) returned 0x592 [0200.729] ReadFile (in: hFile=0x444, lpBuffer=0x2287f40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be408, lpOverlapped=0x0 | out: lpBuffer=0x2287f40*, lpNumberOfBytesRead=0x3be408*=0x592, lpOverlapped=0x0) returned 1 [0200.741] CloseHandle (hObject=0x444) returned 1 [0200.751] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\f544a93b[1].css", nBufferLength=0x105, lpBuffer=0x3bde60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\f544a93b[1].css", lpFilePart=0x0) returned 0x9a [0200.751] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be340) returned 1 [0200.751] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\f544a93b[1].css" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\f544a93b[1].css"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0200.753] GetFileType (hFile=0x444) returned 0x1 [0200.753] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be2b0) returned 1 [0200.753] GetFileType (hFile=0x444) returned 0x1 [0200.753] WriteFile (in: hFile=0x444, lpBuffer=0x2300be8*, nNumberOfBytesToWrite=0x5a0, lpNumberOfBytesWritten=0x3be318, lpOverlapped=0x0 | out: lpBuffer=0x2300be8*, lpNumberOfBytesWritten=0x3be318*=0x5a0, lpOverlapped=0x0) returned 1 [0200.754] CloseHandle (hObject=0x444) returned 1 [0200.754] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\f544a93b[1].css", nBufferLength=0x105, lpBuffer=0x3be000, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\f544a93b[1].css", lpFilePart=0x0) returned 0x9a [0200.754] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\f544a93b[1].css.xuy", nBufferLength=0x105, lpBuffer=0x3be000, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\f544a93b[1].css.xuy", lpFilePart=0x0) returned 0x9e [0200.754] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be440) returned 1 [0200.754] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\f544a93b[1].css" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\f544a93b[1].css"), fInfoLevelId=0x0, lpFileInformation=0x3be520 | out: lpFileInformation=0x3be520*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3040402, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3040402, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x6381f052, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x5a0)) returned 1 [0200.754] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be400) returned 1 [0200.754] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\f544a93b[1].css" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\f544a93b[1].css"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\f544a93b[1].css.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\f544a93b[1].css.xuy")) returned 1 [0200.756] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\f682f456[1].js", nBufferLength=0x105, lpBuffer=0x3be000, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\f682f456[1].js", lpFilePart=0x0) returned 0x99 [0200.756] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be480) returned 1 [0200.756] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\f682f456[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\f682f456[1].js"), fInfoLevelId=0x0, lpFileInformation=0x2302040 | out: lpFileInformation=0x2302040*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x30e0303, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x30e0303, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x30e168a, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x10f47)) returned 1 [0200.756] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be440) returned 1 [0200.756] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\f682f456[1].js", nBufferLength=0x105, lpBuffer=0x3be000, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\f682f456[1].js", lpFilePart=0x0) returned 0x99 [0200.756] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be480) returned 1 [0200.756] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\f682f456[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\f682f456[1].js"), fInfoLevelId=0x0, lpFileInformation=0x2302230 | out: lpFileInformation=0x2302230*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x30e0303, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x30e0303, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x30e168a, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x10f47)) returned 1 [0200.756] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be440) returned 1 [0200.756] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\f682f456[1].js", nBufferLength=0x105, lpBuffer=0x3bdef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\f682f456[1].js", lpFilePart=0x0) returned 0x99 [0200.756] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3d0) returned 1 [0200.756] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\f682f456[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\f682f456[1].js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0200.757] GetFileType (hFile=0x444) returned 0x1 [0200.757] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be340) returned 1 [0200.757] GetFileType (hFile=0x444) returned 0x1 [0200.757] ReadFile (in: hFile=0x444, lpBuffer=0x2304740, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be458, lpOverlapped=0x0 | out: lpBuffer=0x2304740*, lpNumberOfBytesRead=0x3be458*=0x1000, lpOverlapped=0x0) returned 1 [0200.786] CloseHandle (hObject=0x444) returned 1 [0200.786] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\f682f456[1].js", nBufferLength=0x105, lpBuffer=0x3bdef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\f682f456[1].js", lpFilePart=0x0) returned 0x99 [0200.786] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3d0) returned 1 [0200.786] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\f682f456[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\f682f456[1].js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0200.786] GetFileType (hFile=0x444) returned 0x1 [0200.786] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be340) returned 1 [0200.786] GetFileType (hFile=0x444) returned 0x1 [0200.786] WriteFile (in: hFile=0x444, lpBuffer=0x2302400*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be508, lpOverlapped=0x0 | out: lpBuffer=0x2302400*, lpNumberOfBytesWritten=0x3be508*=0x2000, lpOverlapped=0x0) returned 1 [0200.786] CloseHandle (hObject=0x444) returned 1 [0200.787] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\f682f456[1].js", nBufferLength=0x105, lpBuffer=0x3be000, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\f682f456[1].js", lpFilePart=0x0) returned 0x99 [0200.787] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\f682f456[1].js.xuy", nBufferLength=0x105, lpBuffer=0x3be000, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\f682f456[1].js.xuy", lpFilePart=0x0) returned 0x9d [0200.787] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be440) returned 1 [0200.787] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\f682f456[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\f682f456[1].js"), fInfoLevelId=0x0, lpFileInformation=0x3be520 | out: lpFileInformation=0x3be520*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x30e0303, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x30e0303, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x6386b5ea, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x10f47)) returned 1 [0200.787] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be400) returned 1 [0200.787] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\f682f456[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\f682f456[1].js"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\f682f456[1].js.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\f682f456[1].js.xuy")) returned 1 [0200.788] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\fce27fce[1].js", nBufferLength=0x105, lpBuffer=0x3be000, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\fce27fce[1].js", lpFilePart=0x0) returned 0x99 [0200.788] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be480) returned 1 [0200.788] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\fce27fce[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\fce27fce[1].js"), fInfoLevelId=0x0, lpFileInformation=0x2380d70 | out: lpFileInformation=0x2380d70*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2eecd1b, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x2eecd1b, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x2eef424, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x972e)) returned 1 [0200.788] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be440) returned 1 [0200.789] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\fce27fce[1].js", nBufferLength=0x105, lpBuffer=0x3be000, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\fce27fce[1].js", lpFilePart=0x0) returned 0x99 [0200.789] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be480) returned 1 [0200.789] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\fce27fce[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\fce27fce[1].js"), fInfoLevelId=0x0, lpFileInformation=0x2380f60 | out: lpFileInformation=0x2380f60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2eecd1b, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x2eecd1b, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x2eef424, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x972e)) returned 1 [0200.789] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be440) returned 1 [0200.789] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\fce27fce[1].js", nBufferLength=0x105, lpBuffer=0x3bdef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\fce27fce[1].js", lpFilePart=0x0) returned 0x99 [0200.789] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3d0) returned 1 [0200.789] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\fce27fce[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\fce27fce[1].js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0200.790] GetFileType (hFile=0x444) returned 0x1 [0200.790] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be340) returned 1 [0200.790] GetFileType (hFile=0x444) returned 0x1 [0200.790] ReadFile (in: hFile=0x444, lpBuffer=0x2383470, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be458, lpOverlapped=0x0 | out: lpBuffer=0x2383470*, lpNumberOfBytesRead=0x3be458*=0x1000, lpOverlapped=0x0) returned 1 [0200.838] CloseHandle (hObject=0x444) returned 1 [0200.838] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\fce27fce[1].js", nBufferLength=0x105, lpBuffer=0x3bdef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\fce27fce[1].js", lpFilePart=0x0) returned 0x99 [0200.838] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3d0) returned 1 [0200.838] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\fce27fce[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\fce27fce[1].js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0200.838] GetFileType (hFile=0x444) returned 0x1 [0200.838] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be340) returned 1 [0200.838] GetFileType (hFile=0x444) returned 0x1 [0200.838] WriteFile (in: hFile=0x444, lpBuffer=0x2188588*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be508, lpOverlapped=0x0 | out: lpBuffer=0x2188588*, lpNumberOfBytesWritten=0x3be508*=0x2000, lpOverlapped=0x0) returned 1 [0200.838] CloseHandle (hObject=0x444) returned 1 [0200.839] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\fce27fce[1].js", nBufferLength=0x105, lpBuffer=0x3be000, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\fce27fce[1].js", lpFilePart=0x0) returned 0x99 [0200.839] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\fce27fce[1].js.xuy", nBufferLength=0x105, lpBuffer=0x3be000, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\fce27fce[1].js.xuy", lpFilePart=0x0) returned 0x9d [0200.839] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be440) returned 1 [0200.839] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\fce27fce[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\fce27fce[1].js"), fInfoLevelId=0x0, lpFileInformation=0x3be520 | out: lpFileInformation=0x3be520*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2eecd1b, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x2eecd1b, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x638ddda6, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x972e)) returned 1 [0200.839] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be400) returned 1 [0200.839] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\fce27fce[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\fce27fce[1].js"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\fce27fce[1].js.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\fce27fce[1].js.xuy")) returned 1 [0200.840] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\Init[1].htm", nBufferLength=0x105, lpBuffer=0x3be000, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\Init[1].htm", lpFilePart=0x0) returned 0x96 [0200.840] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be480) returned 1 [0200.840] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\Init[1].htm" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\init[1].htm"), fInfoLevelId=0x0, lpFileInformation=0x2202db0 | out: lpFileInformation=0x2202db0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2cb2a46, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x2cb2a46, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x2cb5152, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x70a8)) returned 1 [0200.845] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be440) returned 1 [0200.845] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\Init[1].htm", nBufferLength=0x105, lpBuffer=0x3be000, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\Init[1].htm", lpFilePart=0x0) returned 0x96 [0200.845] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be480) returned 1 [0200.845] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\Init[1].htm" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\init[1].htm"), fInfoLevelId=0x0, lpFileInformation=0x2202f90 | out: lpFileInformation=0x2202f90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2cb2a46, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x2cb2a46, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x2cb5152, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x70a8)) returned 1 [0200.845] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be440) returned 1 [0200.845] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\Init[1].htm", nBufferLength=0x105, lpBuffer=0x3bdef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\Init[1].htm", lpFilePart=0x0) returned 0x96 [0200.845] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3d0) returned 1 [0200.845] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\Init[1].htm" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\init[1].htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0200.846] GetFileType (hFile=0x444) returned 0x1 [0200.846] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be340) returned 1 [0200.846] GetFileType (hFile=0x444) returned 0x1 [0200.846] ReadFile (in: hFile=0x444, lpBuffer=0x2205480, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be458, lpOverlapped=0x0 | out: lpBuffer=0x2205480*, lpNumberOfBytesRead=0x3be458*=0x1000, lpOverlapped=0x0) returned 1 [0200.858] CloseHandle (hObject=0x444) returned 1 [0200.858] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\Init[1].htm", nBufferLength=0x105, lpBuffer=0x3bdef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\Init[1].htm", lpFilePart=0x0) returned 0x96 [0200.858] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3d0) returned 1 [0200.858] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\Init[1].htm" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\init[1].htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0200.859] GetFileType (hFile=0x444) returned 0x1 [0200.859] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be340) returned 1 [0200.859] GetFileType (hFile=0x444) returned 0x1 [0200.859] WriteFile (in: hFile=0x444, lpBuffer=0x2203150*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be508, lpOverlapped=0x0 | out: lpBuffer=0x2203150*, lpNumberOfBytesWritten=0x3be508*=0x2000, lpOverlapped=0x0) returned 1 [0200.859] CloseHandle (hObject=0x444) returned 1 [0200.859] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\Init[1].htm", nBufferLength=0x105, lpBuffer=0x3be000, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\Init[1].htm", lpFilePart=0x0) returned 0x96 [0200.859] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\Init[1].htm.xuy", nBufferLength=0x105, lpBuffer=0x3be000, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\Init[1].htm.xuy", lpFilePart=0x0) returned 0x9a [0200.859] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be440) returned 1 [0200.859] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\Init[1].htm" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\init[1].htm"), fInfoLevelId=0x0, lpFileInformation=0x3be520 | out: lpFileInformation=0x3be520*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2cb2a46, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x2cb2a46, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x6392a1f2, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x70a8)) returned 1 [0200.859] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be400) returned 1 [0200.859] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\Init[1].htm" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\init[1].htm"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\Init[1].htm.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\init[1].htm.xuy")) returned 1 [0200.861] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0200.861] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\DOMStore", nBufferLength=0x105, lpBuffer=0x3be0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\DOMStore", lpFilePart=0x0) returned 0x7f [0200.861] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\DOMStore\\", nBufferLength=0x105, lpBuffer=0x3be060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\DOMStore\\", lpFilePart=0x0) returned 0x80 [0200.861] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\DOMStore\\*", lpFindFileData=0x3be270 | out: lpFindFileData=0x3be270) returned 0x5d81b0 [0200.861] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0200.861] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0200.861] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0200.861] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0200.862] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0200.862] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0200.862] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 0 [0200.862] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0200.862] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0200.862] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0200.862] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0200.862] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\DOMStore", nBufferLength=0x105, lpBuffer=0x3be0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\DOMStore", lpFilePart=0x0) returned 0x7f [0200.862] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\DOMStore\\", nBufferLength=0x105, lpBuffer=0x3be060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\DOMStore\\", lpFilePart=0x0) returned 0x80 [0200.862] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\DOMStore\\*", lpFindFileData=0x3be270 | out: lpFindFileData=0x3be270) returned 0x5d7670 [0200.862] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0200.862] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0200.863] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0200.863] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0200.863] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0200.863] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0200.863] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 0 [0200.863] FindClose (in: hFindFile=0x5d7670 | out: hFindFile=0x5d7670) returned 1 [0200.863] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0200.863] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0200.863] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\DOMStore\\container.dat", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\DOMStore\\container.dat", lpFilePart=0x0) returned 0x8d [0200.863] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0200.863] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\DOMStore\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\domstore\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x2285ea8 | out: lpFileInformation=0x2285ea8*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x1fbc207, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x1fbc207, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x1fbc207, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0200.863] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0200.863] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\DOMStore\\container.dat", nBufferLength=0x105, lpBuffer=0x3bdf40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\DOMStore\\container.dat", lpFilePart=0x0) returned 0x8d [0200.863] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be420) returned 1 [0200.863] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\DOMStore\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\domstore\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0200.864] GetFileType (hFile=0x444) returned 0x1 [0200.864] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be390) returned 1 [0200.864] GetFileType (hFile=0x444) returned 0x1 [0200.864] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be5b8 | out: lpFileSizeHigh=0x3be5b8*=0x0) returned 0x0 [0200.864] CloseHandle (hObject=0x444) returned 1 [0200.875] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\DOMStore\\container.dat", nBufferLength=0x105, lpBuffer=0x3bdf40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\DOMStore\\container.dat", lpFilePart=0x0) returned 0x8d [0200.875] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be420) returned 1 [0200.875] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\DOMStore\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\domstore\\container.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0200.877] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3baeb0) returned 1 [0200.877] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\DOMStore\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbb30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\DOMStore\\container.dat", lpFilePart=0x0) returned 0x8d [0200.877] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbfd0) returned 1 [0200.877] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\DOMStore\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\domstore\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x3bc0b0 | out: lpFileInformation=0x3bc0b0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x1fbc207, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x1fbc207, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x1fbc207, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0200.877] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbf90) returned 1 [0200.877] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\DOMStore\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbb50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\DOMStore\\container.dat", lpFilePart=0x0) returned 0x8d [0200.877] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbfd0) returned 1 [0200.877] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\DOMStore\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\domstore\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x22fcd40 | out: lpFileInformation=0x22fcd40*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x1fbc207, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x1fbc207, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x1fbc207, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0200.877] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbf90) returned 1 [0200.877] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\DOMStore\\container.dat", nBufferLength=0x105, lpBuffer=0x3bb9b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\DOMStore\\container.dat", lpFilePart=0x0) returned 0x8d [0200.877] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbe90) returned 1 [0200.878] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\DOMStore\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\domstore\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0200.878] GetFileType (hFile=0x444) returned 0x1 [0200.878] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbe00) returned 1 [0200.878] GetFileType (hFile=0x444) returned 0x1 [0200.878] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc028 | out: lpFileSizeHigh=0x3bc028*=0x0) returned 0x0 [0200.878] CloseHandle (hObject=0x444) returned 1 [0200.888] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\DOMStore\\container.dat", nBufferLength=0x105, lpBuffer=0x3bb9b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\DOMStore\\container.dat", lpFilePart=0x0) returned 0x8d [0200.888] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbe90) returned 1 [0200.888] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\DOMStore\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\domstore\\container.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0200.890] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8920) returned 1 [0200.890] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0200.890] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\DOMStore\\03HJF3R5", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\DOMStore\\03HJF3R5", lpFilePart=0x0) returned 0x88 [0200.890] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\DOMStore\\03HJF3R5\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\DOMStore\\03HJF3R5\\", lpFilePart=0x0) returned 0x89 [0200.891] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\DOMStore\\03HJF3R5\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7af0 [0200.893] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0200.893] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0200.893] FindClose (in: hFindFile=0x5d7af0 | out: hFindFile=0x5d7af0) returned 1 [0200.894] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0200.894] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0200.894] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0200.894] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\DOMStore\\03HJF3R5", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\DOMStore\\03HJF3R5", lpFilePart=0x0) returned 0x88 [0200.894] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\DOMStore\\03HJF3R5\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\DOMStore\\03HJF3R5\\", lpFilePart=0x0) returned 0x89 [0200.894] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\DOMStore\\03HJF3R5\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d79d0 [0200.894] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0200.894] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0200.894] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0200.894] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0200.894] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0200.894] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0200.894] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\DOMStore\\ETFMMWBM", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\DOMStore\\ETFMMWBM", lpFilePart=0x0) returned 0x88 [0200.894] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\DOMStore\\ETFMMWBM\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\DOMStore\\ETFMMWBM\\", lpFilePart=0x0) returned 0x89 [0200.894] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\DOMStore\\ETFMMWBM\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7a90 [0200.895] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0200.895] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0200.895] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0200.895] FindClose (in: hFindFile=0x5d7a90 | out: hFindFile=0x5d7a90) returned 1 [0200.895] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0200.895] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0200.895] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0200.895] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\DOMStore\\ETFMMWBM", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\DOMStore\\ETFMMWBM", lpFilePart=0x0) returned 0x88 [0200.895] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\DOMStore\\ETFMMWBM\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\DOMStore\\ETFMMWBM\\", lpFilePart=0x0) returned 0x89 [0200.895] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\DOMStore\\ETFMMWBM\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7df0 [0200.895] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0200.896] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0200.896] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0200.896] FindClose (in: hFindFile=0x5d7df0 | out: hFindFile=0x5d7df0) returned 1 [0200.896] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0200.896] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0200.896] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\DOMStore\\ETFMMWBM\\www.bing[1].xml", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\DOMStore\\ETFMMWBM\\www.bing[1].xml", lpFilePart=0x0) returned 0x98 [0200.896] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0200.896] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\DOMStore\\ETFMMWBM\\www.bing[1].xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\domstore\\etfmmwbm\\www.bing[1].xml"), fInfoLevelId=0x0, lpFileInformation=0x23791d8 | out: lpFileInformation=0x23791d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2705b9e, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x2705b9e, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x7e214db, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x147be)) returned 1 [0200.897] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0200.897] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\DOMStore\\ETFMMWBM\\www.bing[1].xml", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\DOMStore\\ETFMMWBM\\www.bing[1].xml", lpFilePart=0x0) returned 0x98 [0200.898] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0200.898] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\DOMStore\\ETFMMWBM\\www.bing[1].xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\domstore\\etfmmwbm\\www.bing[1].xml"), fInfoLevelId=0x0, lpFileInformation=0x23793c8 | out: lpFileInformation=0x23793c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2705b9e, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x2705b9e, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x7e214db, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x147be)) returned 1 [0200.898] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0200.898] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\DOMStore\\ETFMMWBM\\www.bing[1].xml", nBufferLength=0x105, lpBuffer=0x3bdf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\DOMStore\\ETFMMWBM\\www.bing[1].xml", lpFilePart=0x0) returned 0x98 [0200.898] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be440) returned 1 [0200.898] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\DOMStore\\ETFMMWBM\\www.bing[1].xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\domstore\\etfmmwbm\\www.bing[1].xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0200.899] GetFileType (hFile=0x444) returned 0x1 [0200.899] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be3b0) returned 1 [0200.899] GetFileType (hFile=0x444) returned 0x1 [0200.899] ReadFile (in: hFile=0x444, lpBuffer=0x237b8d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be4c8, lpOverlapped=0x0 | out: lpBuffer=0x237b8d8*, lpNumberOfBytesRead=0x3be4c8*=0x1000, lpOverlapped=0x0) returned 1 [0200.965] CloseHandle (hObject=0x444) returned 1 [0200.965] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\DOMStore\\ETFMMWBM\\www.bing[1].xml", nBufferLength=0x105, lpBuffer=0x3bdf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\DOMStore\\ETFMMWBM\\www.bing[1].xml", lpFilePart=0x0) returned 0x98 [0200.965] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be440) returned 1 [0200.965] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\DOMStore\\ETFMMWBM\\www.bing[1].xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\domstore\\etfmmwbm\\www.bing[1].xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0200.966] GetFileType (hFile=0x444) returned 0x1 [0200.966] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be3b0) returned 1 [0200.966] GetFileType (hFile=0x444) returned 0x1 [0200.966] WriteFile (in: hFile=0x444, lpBuffer=0x2187708*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be578, lpOverlapped=0x0 | out: lpBuffer=0x2187708*, lpNumberOfBytesWritten=0x3be578*=0x2000, lpOverlapped=0x0) returned 1 [0200.966] CloseHandle (hObject=0x444) returned 1 [0200.966] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\DOMStore\\ETFMMWBM\\www.bing[1].xml", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\DOMStore\\ETFMMWBM\\www.bing[1].xml", lpFilePart=0x0) returned 0x98 [0200.966] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\DOMStore\\ETFMMWBM\\www.bing[1].xml.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\DOMStore\\ETFMMWBM\\www.bing[1].xml.xuy", lpFilePart=0x0) returned 0x9c [0200.966] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0200.966] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\DOMStore\\ETFMMWBM\\www.bing[1].xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\domstore\\etfmmwbm\\www.bing[1].xml"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2705b9e, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x2705b9e, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x63a0f10a, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x147be)) returned 1 [0200.966] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0200.966] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\DOMStore\\ETFMMWBM\\www.bing[1].xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\domstore\\etfmmwbm\\www.bing[1].xml"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\DOMStore\\ETFMMWBM\\www.bing[1].xml.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\domstore\\etfmmwbm\\www.bing[1].xml.xuy")) returned 1 [0200.968] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0200.969] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\DOMStore\\N6BZW9Z5", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\DOMStore\\N6BZW9Z5", lpFilePart=0x0) returned 0x88 [0200.969] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\DOMStore\\N6BZW9Z5\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\DOMStore\\N6BZW9Z5\\", lpFilePart=0x0) returned 0x89 [0200.969] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\DOMStore\\N6BZW9Z5\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7550 [0200.969] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0200.969] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0200.969] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0200.969] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0200.969] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0200.969] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0200.969] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\DOMStore\\N6BZW9Z5", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\DOMStore\\N6BZW9Z5", lpFilePart=0x0) returned 0x88 [0200.969] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\DOMStore\\N6BZW9Z5\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\DOMStore\\N6BZW9Z5\\", lpFilePart=0x0) returned 0x89 [0200.969] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\DOMStore\\N6BZW9Z5\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d79d0 [0200.970] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0200.970] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0200.970] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0200.970] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0200.970] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0200.970] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0200.970] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\DOMStore\\P1T4DCFU", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\DOMStore\\P1T4DCFU", lpFilePart=0x0) returned 0x88 [0200.970] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\DOMStore\\P1T4DCFU\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\DOMStore\\P1T4DCFU\\", lpFilePart=0x0) returned 0x89 [0200.970] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\DOMStore\\P1T4DCFU\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d78b0 [0200.970] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0200.970] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0200.970] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0200.971] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0200.971] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0200.971] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0200.971] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0200.971] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\DOMStore\\P1T4DCFU", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\DOMStore\\P1T4DCFU", lpFilePart=0x0) returned 0x88 [0200.971] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\DOMStore\\P1T4DCFU\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\DOMStore\\P1T4DCFU\\", lpFilePart=0x0) returned 0x89 [0200.971] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\DOMStore\\P1T4DCFU\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7a30 [0200.971] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0200.971] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0200.971] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0200.971] FindClose (in: hFindFile=0x5d7a30 | out: hFindFile=0x5d7a30) returned 1 [0200.971] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0200.971] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0200.971] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\DOMStore\\P1T4DCFU\\www.msn[1].xml", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\DOMStore\\P1T4DCFU\\www.msn[1].xml", lpFilePart=0x0) returned 0x97 [0200.971] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0200.971] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\DOMStore\\P1T4DCFU\\www.msn[1].xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\domstore\\p1t4dcfu\\www.msn[1].xml"), fInfoLevelId=0x0, lpFileInformation=0x21fc760 | out: lpFileInformation=0x21fc760*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1fdd190, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x1fdd190, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x4f45648, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x2cb)) returned 1 [0200.972] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0200.972] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\DOMStore\\P1T4DCFU\\www.msn[1].xml", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\DOMStore\\P1T4DCFU\\www.msn[1].xml", lpFilePart=0x0) returned 0x97 [0200.972] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0200.972] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\DOMStore\\P1T4DCFU\\www.msn[1].xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\domstore\\p1t4dcfu\\www.msn[1].xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0200.972] GetFileType (hFile=0x444) returned 0x1 [0200.972] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0200.972] GetFileType (hFile=0x444) returned 0x1 [0200.972] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be548 | out: lpFileSizeHigh=0x3be548*=0x0) returned 0x2cb [0200.972] ReadFile (in: hFile=0x444, lpBuffer=0x21fce18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be478, lpOverlapped=0x0 | out: lpBuffer=0x21fce18*, lpNumberOfBytesRead=0x3be478*=0x2cb, lpOverlapped=0x0) returned 1 [0200.973] CloseHandle (hObject=0x444) returned 1 [0200.999] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\DOMStore\\P1T4DCFU\\www.msn[1].xml", nBufferLength=0x105, lpBuffer=0x3bded0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\DOMStore\\P1T4DCFU\\www.msn[1].xml", lpFilePart=0x0) returned 0x97 [0200.999] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3b0) returned 1 [0200.999] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\DOMStore\\P1T4DCFU\\www.msn[1].xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\domstore\\p1t4dcfu\\www.msn[1].xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0201.001] GetFileType (hFile=0x444) returned 0x1 [0201.001] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0201.001] GetFileType (hFile=0x444) returned 0x1 [0201.001] WriteFile (in: hFile=0x444, lpBuffer=0x2274ca0*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x3be388, lpOverlapped=0x0 | out: lpBuffer=0x2274ca0*, lpNumberOfBytesWritten=0x3be388*=0x2d0, lpOverlapped=0x0) returned 1 [0201.002] CloseHandle (hObject=0x444) returned 1 [0201.002] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\DOMStore\\P1T4DCFU\\www.msn[1].xml", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\DOMStore\\P1T4DCFU\\www.msn[1].xml", lpFilePart=0x0) returned 0x97 [0201.002] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\DOMStore\\P1T4DCFU\\www.msn[1].xml.xuy", nBufferLength=0x105, lpBuffer=0x3be070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\DOMStore\\P1T4DCFU\\www.msn[1].xml.xuy", lpFilePart=0x0) returned 0x9b [0201.002] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4b0) returned 1 [0201.002] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\DOMStore\\P1T4DCFU\\www.msn[1].xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\domstore\\p1t4dcfu\\www.msn[1].xml"), fInfoLevelId=0x0, lpFileInformation=0x3be590 | out: lpFileInformation=0x3be590*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1fdd190, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x1fdd190, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x63a816db, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2d0)) returned 1 [0201.002] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0201.002] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\DOMStore\\P1T4DCFU\\www.msn[1].xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\domstore\\p1t4dcfu\\www.msn[1].xml"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\DOMStore\\P1T4DCFU\\www.msn[1].xml.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\domstore\\p1t4dcfu\\www.msn[1].xml.xuy")) returned 1 [0201.003] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0201.003] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Temp", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Temp", lpFilePart=0x0) returned 0x60 [0201.003] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Temp\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Temp\\", lpFilePart=0x0) returned 0x61 [0201.004] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Temp\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d7e50 [0201.004] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0201.004] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0201.004] FindClose (in: hFindFile=0x5d7e50 | out: hFindFile=0x5d7e50) returned 1 [0201.004] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0201.004] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0201.004] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0201.004] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Temp", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Temp", lpFilePart=0x0) returned 0x60 [0201.004] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Temp\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Temp\\", lpFilePart=0x0) returned 0x61 [0201.004] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Temp\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d78b0 [0201.004] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0201.004] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0201.005] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0201.005] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0201.005] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0201.005] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0201.005] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\TempState", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\TempState", lpFilePart=0x0) returned 0x65 [0201.005] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\TempState\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\TempState\\", lpFilePart=0x0) returned 0x66 [0201.005] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\TempState\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d7a30 [0201.005] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0201.005] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0201.005] FindClose (in: hFindFile=0x5d7a30 | out: hFindFile=0x5d7a30) returned 1 [0201.005] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0201.005] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0201.005] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0201.005] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\TempState", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\TempState", lpFilePart=0x0) returned 0x65 [0201.005] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\TempState\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\TempState\\", lpFilePart=0x0) returned 0x66 [0201.005] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\TempState\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d7cd0 [0201.006] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0201.006] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0201.006] FindClose (in: hFindFile=0x5d7cd0 | out: hFindFile=0x5d7cd0) returned 1 [0201.006] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0201.006] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0201.006] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0201.006] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\INetCache", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\INetCache", lpFilePart=0x0) returned 0x5f [0201.006] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\INetCache\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\INetCache\\", lpFilePart=0x0) returned 0x60 [0201.006] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\INetCache\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d81b0 [0201.008] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0201.008] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0201.008] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0201.008] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0201.008] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0201.008] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0201.008] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\INetCache", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\INetCache", lpFilePart=0x0) returned 0x5f [0201.008] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\INetCache\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\INetCache\\", lpFilePart=0x0) returned 0x60 [0201.008] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\INetCache\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7370 [0201.008] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0201.009] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0201.009] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0201.009] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0201.009] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0201.009] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0201.009] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\INetCookies", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\INetCookies", lpFilePart=0x0) returned 0x61 [0201.009] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\INetCookies\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\INetCookies\\", lpFilePart=0x0) returned 0x62 [0201.009] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\INetCookies\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7cd0 [0201.009] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0201.009] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0201.009] FindClose (in: hFindFile=0x5d7cd0 | out: hFindFile=0x5d7cd0) returned 1 [0201.009] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0201.009] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0201.009] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0201.009] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\INetCookies", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\INetCookies", lpFilePart=0x0) returned 0x61 [0201.009] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\INetCookies\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\INetCookies\\", lpFilePart=0x0) returned 0x62 [0201.010] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\INetCookies\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d78b0 [0201.010] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0201.010] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0201.010] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0201.010] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0201.010] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0201.010] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0201.010] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\INetHistory", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\INetHistory", lpFilePart=0x0) returned 0x61 [0201.010] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\INetHistory\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\INetHistory\\", lpFilePart=0x0) returned 0x62 [0201.010] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\INetHistory\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7550 [0201.010] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0201.010] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0201.011] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0201.011] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0201.011] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0201.011] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0201.011] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\INetHistory", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\INetHistory", lpFilePart=0x0) returned 0x61 [0201.011] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\INetHistory\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\INetHistory\\", lpFilePart=0x0) returned 0x62 [0201.011] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\INetHistory\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d78b0 [0201.011] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0201.011] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0201.011] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0201.011] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0201.011] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0201.011] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0201.011] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft", lpFilePart=0x0) returned 0x5f [0201.011] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\", lpFilePart=0x0) returned 0x60 [0201.011] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7670 [0201.013] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0201.014] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0201.014] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0201.014] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0201.014] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0201.014] FindClose (in: hFindFile=0x5d7670 | out: hFindFile=0x5d7670) returned 1 [0201.014] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0201.014] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0201.014] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0201.014] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft", lpFilePart=0x0) returned 0x5f [0201.014] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\", lpFilePart=0x0) returned 0x60 [0201.014] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7af0 [0201.015] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0201.015] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0201.015] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0201.015] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0201.015] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0201.015] FindClose (in: hFindFile=0x5d7af0 | out: hFindFile=0x5d7af0) returned 1 [0201.015] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0201.015] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0201.015] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0201.015] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache", lpFilePart=0x0) returned 0x70 [0201.015] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\", lpFilePart=0x0) returned 0x71 [0201.015] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d81b0 [0201.019] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0201.019] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0201.019] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0201.019] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0201.019] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0201.019] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0201.019] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0201.019] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0201.019] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache", lpFilePart=0x0) returned 0x70 [0201.019] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\", lpFilePart=0x0) returned 0x71 [0201.019] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d78b0 [0201.020] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0201.020] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0201.020] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0201.020] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0201.020] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0201.020] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0201.020] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0201.020] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0201.020] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content", lpFilePart=0x0) returned 0x78 [0201.020] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\", lpFilePart=0x0) returned 0x79 [0201.020] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d78b0 [0201.025] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0201.026] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0201.026] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0201.026] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0201.026] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0201.026] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0201.026] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0201.026] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0201.026] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0201.026] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0201.027] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0201.027] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0201.027] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0201.027] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content", lpFilePart=0x0) returned 0x78 [0201.027] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\", lpFilePart=0x0) returned 0x79 [0201.027] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d7370 [0201.028] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0201.028] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0201.028] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0201.028] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0201.029] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0201.029] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0201.029] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0201.029] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0201.029] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0201.029] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0201.031] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0201.031] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0201.031] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", lpFilePart=0x0) returned 0xba [0201.031] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0201.031] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\content\\40e450f7ce13419a2ccc2a5445035a0a_06f02b1f13ab4b11b8fc669bde565af1"), fInfoLevelId=0x0, lpFileInformation=0x228bad8 | out: lpFileInformation=0x228bad8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x8c84b2c, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x8c84b2c, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x8c84b2c, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0xb68)) returned 1 [0201.033] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0201.033] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", lpFilePart=0x0) returned 0xba [0201.033] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0201.033] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\content\\40e450f7ce13419a2ccc2a5445035a0a_06f02b1f13ab4b11b8fc669bde565af1"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0201.033] GetFileType (hFile=0x444) returned 0x1 [0201.033] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0201.033] GetFileType (hFile=0x444) returned 0x1 [0201.033] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xb68 [0201.034] ReadFile (in: hFile=0x444, lpBuffer=0x228cb88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x228cb88*, lpNumberOfBytesRead=0x3be5c8*=0xb68, lpOverlapped=0x0) returned 1 [0201.043] CloseHandle (hObject=0x444) returned 1 [0201.053] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", lpFilePart=0x0) returned 0xba [0201.053] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0201.053] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\content\\40e450f7ce13419a2ccc2a5445035a0a_06f02b1f13ab4b11b8fc669bde565af1"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0201.055] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", nBufferLength=0x105, lpBuffer=0x3bbc10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", lpFilePart=0x0) returned 0xba [0201.055] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\content\\40e450f7ce13419a2ccc2a5445035a0a_06f02b1f13ab4b11b8fc669bde565af1"), fInfoLevelId=0x0, lpFileInformation=0x3bc190 | out: lpFileInformation=0x3bc190*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x8c84b2c, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x8c84b2c, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x8c84b2c, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0xb68)) returned 1 [0201.056] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", nBufferLength=0x105, lpBuffer=0x3bbc30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", lpFilePart=0x0) returned 0xba [0201.056] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\content\\40e450f7ce13419a2ccc2a5445035a0a_06f02b1f13ab4b11b8fc669bde565af1"), fInfoLevelId=0x0, lpFileInformation=0x2307fe8 | out: lpFileInformation=0x2307fe8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x8c84b2c, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x8c84b2c, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x8c84b2c, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0xb68)) returned 1 [0201.056] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", nBufferLength=0x105, lpBuffer=0x3bba90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", lpFilePart=0x0) returned 0xba [0201.056] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\content\\40e450f7ce13419a2ccc2a5445035a0a_06f02b1f13ab4b11b8fc669bde565af1"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0201.056] GetFileType (hFile=0x444) returned 0x1 [0201.056] GetFileType (hFile=0x444) returned 0x1 [0201.056] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc108 | out: lpFileSizeHigh=0x3bc108*=0x0) returned 0xb68 [0201.056] ReadFile (in: hFile=0x444, lpBuffer=0x2309098, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bc038, lpOverlapped=0x0 | out: lpBuffer=0x2309098*, lpNumberOfBytesRead=0x3bc038*=0xb68, lpOverlapped=0x0) returned 1 [0201.056] CloseHandle (hObject=0x444) returned 1 [0201.073] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", nBufferLength=0x105, lpBuffer=0x3bba90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", lpFilePart=0x0) returned 0xba [0201.073] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\content\\40e450f7ce13419a2ccc2a5445035a0a_06f02b1f13ab4b11b8fc669bde565af1"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0201.075] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\42B9A473B4DAF01285A36B4D3C7B1662_178C086B699FD6C56B804AF3EF759CB5", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\42B9A473B4DAF01285A36B4D3C7B1662_178C086B699FD6C56B804AF3EF759CB5", lpFilePart=0x0) returned 0xba [0201.075] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\42B9A473B4DAF01285A36B4D3C7B1662_178C086B699FD6C56B804AF3EF759CB5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\content\\42b9a473b4daf01285a36b4d3c7b1662_178c086b699fd6c56b804af3ef759cb5"), fInfoLevelId=0x0, lpFileInformation=0x2384368 | out: lpFileInformation=0x2384368*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe70cfc6, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xe70cfc6, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xe70e375, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x1d7)) returned 1 [0201.075] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\42B9A473B4DAF01285A36B4D3C7B1662_178C086B699FD6C56B804AF3EF759CB5", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\42B9A473B4DAF01285A36B4D3C7B1662_178C086B699FD6C56B804AF3EF759CB5", lpFilePart=0x0) returned 0xba [0201.075] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\42B9A473B4DAF01285A36B4D3C7B1662_178C086B699FD6C56B804AF3EF759CB5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\content\\42b9a473b4daf01285a36b4d3c7b1662_178c086b699fd6c56b804af3ef759cb5"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0201.076] GetFileType (hFile=0x444) returned 0x1 [0201.076] GetFileType (hFile=0x444) returned 0x1 [0201.076] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x1d7 [0201.076] ReadFile (in: hFile=0x444, lpBuffer=0x2384a88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x2384a88*, lpNumberOfBytesRead=0x3be5c8*=0x1d7, lpOverlapped=0x0) returned 1 [0201.077] CloseHandle (hObject=0x444) returned 1 [0201.134] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\42B9A473B4DAF01285A36B4D3C7B1662_178C086B699FD6C56B804AF3EF759CB5", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\42B9A473B4DAF01285A36B4D3C7B1662_178C086B699FD6C56B804AF3EF759CB5", lpFilePart=0x0) returned 0xba [0201.134] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0201.134] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\42B9A473B4DAF01285A36B4D3C7B1662_178C086B699FD6C56B804AF3EF759CB5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\content\\42b9a473b4daf01285a36b4d3c7b1662_178c086b699fd6c56b804af3ef759cb5"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0201.136] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3baf90) returned 1 [0201.136] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\42B9A473B4DAF01285A36B4D3C7B1662_178C086B699FD6C56B804AF3EF759CB5", nBufferLength=0x105, lpBuffer=0x3bbc10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\42B9A473B4DAF01285A36B4D3C7B1662_178C086B699FD6C56B804AF3EF759CB5", lpFilePart=0x0) returned 0xba [0201.136] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0b0) returned 1 [0201.137] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\42B9A473B4DAF01285A36B4D3C7B1662_178C086B699FD6C56B804AF3EF759CB5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\content\\42b9a473b4daf01285a36b4d3c7b1662_178c086b699fd6c56b804af3ef759cb5"), fInfoLevelId=0x0, lpFileInformation=0x3bc190 | out: lpFileInformation=0x3bc190*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe70cfc6, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xe70cfc6, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xe70e375, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x1d7)) returned 1 [0201.137] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc070) returned 1 [0201.137] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\42B9A473B4DAF01285A36B4D3C7B1662_178C086B699FD6C56B804AF3EF759CB5", nBufferLength=0x105, lpBuffer=0x3bbc30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\42B9A473B4DAF01285A36B4D3C7B1662_178C086B699FD6C56B804AF3EF759CB5", lpFilePart=0x0) returned 0xba [0201.137] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0b0) returned 1 [0201.137] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\42B9A473B4DAF01285A36B4D3C7B1662_178C086B699FD6C56B804AF3EF759CB5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\content\\42b9a473b4daf01285a36b4d3c7b1662_178c086b699fd6c56b804af3ef759cb5"), fInfoLevelId=0x0, lpFileInformation=0x21f95c8 | out: lpFileInformation=0x21f95c8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe70cfc6, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xe70cfc6, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xe70e375, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x1d7)) returned 1 [0201.137] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc070) returned 1 [0201.137] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\42B9A473B4DAF01285A36B4D3C7B1662_178C086B699FD6C56B804AF3EF759CB5", nBufferLength=0x105, lpBuffer=0x3bba90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\42B9A473B4DAF01285A36B4D3C7B1662_178C086B699FD6C56B804AF3EF759CB5", lpFilePart=0x0) returned 0xba [0201.137] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf70) returned 1 [0201.137] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\42B9A473B4DAF01285A36B4D3C7B1662_178C086B699FD6C56B804AF3EF759CB5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\content\\42b9a473b4daf01285a36b4d3c7b1662_178c086b699fd6c56b804af3ef759cb5"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0201.137] GetFileType (hFile=0x444) returned 0x1 [0201.137] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbee0) returned 1 [0201.137] GetFileType (hFile=0x444) returned 0x1 [0201.137] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc108 | out: lpFileSizeHigh=0x3bc108*=0x0) returned 0x1d7 [0201.137] ReadFile (in: hFile=0x444, lpBuffer=0x21f9ce8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bc038, lpOverlapped=0x0 | out: lpBuffer=0x21f9ce8*, lpNumberOfBytesRead=0x3bc038*=0x1d7, lpOverlapped=0x0) returned 1 [0201.138] CloseHandle (hObject=0x444) returned 1 [0201.152] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\42B9A473B4DAF01285A36B4D3C7B1662_178C086B699FD6C56B804AF3EF759CB5", nBufferLength=0x105, lpBuffer=0x3bba90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\42B9A473B4DAF01285A36B4D3C7B1662_178C086B699FD6C56B804AF3EF759CB5", lpFilePart=0x0) returned 0xba [0201.152] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf70) returned 1 [0201.152] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\42B9A473B4DAF01285A36B4D3C7B1662_178C086B699FD6C56B804AF3EF759CB5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\content\\42b9a473b4daf01285a36b4d3c7b1662_178c086b699fd6c56b804af3ef759cb5"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0201.153] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8a00) returned 1 [0201.154] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", lpFilePart=0x0) returned 0x99 [0201.154] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0201.154] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\content\\57c8edb95df3f0ad4ee2dc2b8cfd4157"), fInfoLevelId=0x0, lpFileInformation=0x2271ff0 | out: lpFileInformation=0x2271ff0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x8c84b2c, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x8c84b2c, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x8caac22, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0201.155] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0201.155] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", lpFilePart=0x0) returned 0x99 [0201.155] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0201.155] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\content\\57c8edb95df3f0ad4ee2dc2b8cfd4157"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0201.155] GetFileType (hFile=0x444) returned 0x1 [0201.155] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0201.155] GetFileType (hFile=0x444) returned 0x1 [0201.155] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x0 [0201.155] CloseHandle (hObject=0x444) returned 1 [0201.165] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", lpFilePart=0x0) returned 0x99 [0201.165] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0201.165] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\content\\57c8edb95df3f0ad4ee2dc2b8cfd4157"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0201.167] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3baf90) returned 1 [0201.167] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", nBufferLength=0x105, lpBuffer=0x3bbc10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", lpFilePart=0x0) returned 0x99 [0201.167] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0b0) returned 1 [0201.167] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\content\\57c8edb95df3f0ad4ee2dc2b8cfd4157"), fInfoLevelId=0x0, lpFileInformation=0x3bc190 | out: lpFileInformation=0x3bc190*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x8c84b2c, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x8c84b2c, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x8caac22, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0201.167] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc070) returned 1 [0201.167] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", nBufferLength=0x105, lpBuffer=0x3bbc30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", lpFilePart=0x0) returned 0x99 [0201.167] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0b0) returned 1 [0201.168] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\content\\57c8edb95df3f0ad4ee2dc2b8cfd4157"), fInfoLevelId=0x0, lpFileInformation=0x22e8f78 | out: lpFileInformation=0x22e8f78*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x8c84b2c, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x8c84b2c, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x8caac22, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0201.168] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc070) returned 1 [0201.168] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", nBufferLength=0x105, lpBuffer=0x3bba90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", lpFilePart=0x0) returned 0x99 [0201.168] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf70) returned 1 [0201.168] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\content\\57c8edb95df3f0ad4ee2dc2b8cfd4157"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0201.168] GetFileType (hFile=0x444) returned 0x1 [0201.168] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbee0) returned 1 [0201.168] GetFileType (hFile=0x444) returned 0x1 [0201.168] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc108 | out: lpFileSizeHigh=0x3bc108*=0x0) returned 0x0 [0201.168] CloseHandle (hObject=0x444) returned 1 [0201.180] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", nBufferLength=0x105, lpBuffer=0x3bba90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", lpFilePart=0x0) returned 0x99 [0201.180] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf70) returned 1 [0201.180] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\content\\57c8edb95df3f0ad4ee2dc2b8cfd4157"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0201.182] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8a00) returned 1 [0201.182] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\66AE3BFDF94A732B262342AD2154B86E_108A7991F73F2B507007C35661993162", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\66AE3BFDF94A732B262342AD2154B86E_108A7991F73F2B507007C35661993162", lpFilePart=0x0) returned 0xba [0201.182] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0201.182] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\66AE3BFDF94A732B262342AD2154B86E_108A7991F73F2B507007C35661993162" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\content\\66ae3bfdf94a732b262342ad2154b86e_108a7991f73f2b507007c35661993162"), fInfoLevelId=0x0, lpFileInformation=0x235fdb0 | out: lpFileInformation=0x235fdb0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe780fde, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xe780fde, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xe78236a, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x1d7)) returned 1 [0201.183] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0201.183] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\66AE3BFDF94A732B262342AD2154B86E_108A7991F73F2B507007C35661993162", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\66AE3BFDF94A732B262342AD2154B86E_108A7991F73F2B507007C35661993162", lpFilePart=0x0) returned 0xba [0201.183] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0201.183] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\66AE3BFDF94A732B262342AD2154B86E_108A7991F73F2B507007C35661993162" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\content\\66ae3bfdf94a732b262342ad2154b86e_108a7991f73f2b507007c35661993162"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0201.183] GetFileType (hFile=0x444) returned 0x1 [0201.183] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0201.183] GetFileType (hFile=0x444) returned 0x1 [0201.183] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x1d7 [0201.183] ReadFile (in: hFile=0x444, lpBuffer=0x23604d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x23604d0*, lpNumberOfBytesRead=0x3be5c8*=0x1d7, lpOverlapped=0x0) returned 1 [0201.184] CloseHandle (hObject=0x444) returned 1 [0201.228] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\66AE3BFDF94A732B262342AD2154B86E_108A7991F73F2B507007C35661993162", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\66AE3BFDF94A732B262342AD2154B86E_108A7991F73F2B507007C35661993162", lpFilePart=0x0) returned 0xba [0201.228] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0201.228] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\66AE3BFDF94A732B262342AD2154B86E_108A7991F73F2B507007C35661993162" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\content\\66ae3bfdf94a732b262342ad2154b86e_108a7991f73f2b507007c35661993162"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0201.230] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3baf90) returned 1 [0201.230] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\66AE3BFDF94A732B262342AD2154B86E_108A7991F73F2B507007C35661993162", nBufferLength=0x105, lpBuffer=0x3bbc10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\66AE3BFDF94A732B262342AD2154B86E_108A7991F73F2B507007C35661993162", lpFilePart=0x0) returned 0xba [0201.230] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0b0) returned 1 [0201.230] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\66AE3BFDF94A732B262342AD2154B86E_108A7991F73F2B507007C35661993162" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\content\\66ae3bfdf94a732b262342ad2154b86e_108a7991f73f2b507007c35661993162"), fInfoLevelId=0x0, lpFileInformation=0x3bc190 | out: lpFileInformation=0x3bc190*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe780fde, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xe780fde, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xe78236a, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x1d7)) returned 1 [0201.230] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc070) returned 1 [0201.230] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\66AE3BFDF94A732B262342AD2154B86E_108A7991F73F2B507007C35661993162", nBufferLength=0x105, lpBuffer=0x3bbc30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\66AE3BFDF94A732B262342AD2154B86E_108A7991F73F2B507007C35661993162", lpFilePart=0x0) returned 0xba [0201.230] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0b0) returned 1 [0201.230] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\66AE3BFDF94A732B262342AD2154B86E_108A7991F73F2B507007C35661993162" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\content\\66ae3bfdf94a732b262342ad2154b86e_108a7991f73f2b507007c35661993162"), fInfoLevelId=0x0, lpFileInformation=0x21d8a30 | out: lpFileInformation=0x21d8a30*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe780fde, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xe780fde, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xe78236a, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x1d7)) returned 1 [0201.230] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc070) returned 1 [0201.230] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\66AE3BFDF94A732B262342AD2154B86E_108A7991F73F2B507007C35661993162", nBufferLength=0x105, lpBuffer=0x3bba90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\66AE3BFDF94A732B262342AD2154B86E_108A7991F73F2B507007C35661993162", lpFilePart=0x0) returned 0xba [0201.231] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf70) returned 1 [0201.231] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\66AE3BFDF94A732B262342AD2154B86E_108A7991F73F2B507007C35661993162" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\content\\66ae3bfdf94a732b262342ad2154b86e_108a7991f73f2b507007c35661993162"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0201.231] GetFileType (hFile=0x444) returned 0x1 [0201.231] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbee0) returned 1 [0201.231] GetFileType (hFile=0x444) returned 0x1 [0201.231] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc108 | out: lpFileSizeHigh=0x3bc108*=0x0) returned 0x1d7 [0201.231] ReadFile (in: hFile=0x444, lpBuffer=0x21d9150, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bc038, lpOverlapped=0x0 | out: lpBuffer=0x21d9150*, lpNumberOfBytesRead=0x3bc038*=0x1d7, lpOverlapped=0x0) returned 1 [0201.231] CloseHandle (hObject=0x444) returned 1 [0201.290] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\66AE3BFDF94A732B262342AD2154B86E_108A7991F73F2B507007C35661993162", nBufferLength=0x105, lpBuffer=0x3bba90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\66AE3BFDF94A732B262342AD2154B86E_108A7991F73F2B507007C35661993162", lpFilePart=0x0) returned 0xba [0201.290] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf70) returned 1 [0201.290] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\66AE3BFDF94A732B262342AD2154B86E_108A7991F73F2B507007C35661993162" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\content\\66ae3bfdf94a732b262342ad2154b86e_108a7991f73f2b507007c35661993162"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0201.291] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8a00) returned 1 [0201.292] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506", lpFilePart=0x0) returned 0x99 [0201.292] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0201.292] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\content\\77ec63bda74bd0d0e0426dc8f8008506"), fInfoLevelId=0x0, lpFileInformation=0x2251458 | out: lpFileInformation=0x2251458*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x8c84b2c, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x8c84b2c, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x8c84b2c, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0201.292] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0201.292] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506", lpFilePart=0x0) returned 0x99 [0201.293] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0201.293] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\content\\77ec63bda74bd0d0e0426dc8f8008506"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0201.293] GetFileType (hFile=0x444) returned 0x1 [0201.293] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0201.293] GetFileType (hFile=0x444) returned 0x1 [0201.293] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x0 [0201.293] CloseHandle (hObject=0x444) returned 1 [0201.303] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506", lpFilePart=0x0) returned 0x99 [0201.303] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0201.303] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\content\\77ec63bda74bd0d0e0426dc8f8008506"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0201.305] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3baf90) returned 1 [0201.305] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506", nBufferLength=0x105, lpBuffer=0x3bbc10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506", lpFilePart=0x0) returned 0x99 [0201.305] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0b0) returned 1 [0201.305] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\content\\77ec63bda74bd0d0e0426dc8f8008506"), fInfoLevelId=0x0, lpFileInformation=0x3bc190 | out: lpFileInformation=0x3bc190*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x8c84b2c, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x8c84b2c, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x8c84b2c, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0201.305] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc070) returned 1 [0201.305] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506", nBufferLength=0x105, lpBuffer=0x3bbc30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506", lpFilePart=0x0) returned 0x99 [0201.305] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0b0) returned 1 [0201.305] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\content\\77ec63bda74bd0d0e0426dc8f8008506"), fInfoLevelId=0x0, lpFileInformation=0x22c83e0 | out: lpFileInformation=0x22c83e0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x8c84b2c, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x8c84b2c, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x8c84b2c, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0201.305] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc070) returned 1 [0201.305] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506", nBufferLength=0x105, lpBuffer=0x3bba90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506", lpFilePart=0x0) returned 0x99 [0201.305] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf70) returned 1 [0201.305] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\content\\77ec63bda74bd0d0e0426dc8f8008506"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0201.306] GetFileType (hFile=0x444) returned 0x1 [0201.306] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbee0) returned 1 [0201.306] GetFileType (hFile=0x444) returned 0x1 [0201.306] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc108 | out: lpFileSizeHigh=0x3bc108*=0x0) returned 0x0 [0201.306] CloseHandle (hObject=0x444) returned 1 [0201.317] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506", nBufferLength=0x105, lpBuffer=0x3bba90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506", lpFilePart=0x0) returned 0x99 [0201.318] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf70) returned 1 [0201.318] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\content\\77ec63bda74bd0d0e0426dc8f8008506"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0201.319] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8a00) returned 1 [0201.320] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\EDC238BFF48A31D55A97E1E93892934B_C31B2498754E340573F1336DE607D619", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\EDC238BFF48A31D55A97E1E93892934B_C31B2498754E340573F1336DE607D619", lpFilePart=0x0) returned 0xba [0201.320] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0201.320] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\EDC238BFF48A31D55A97E1E93892934B_C31B2498754E340573F1336DE607D619" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\content\\edc238bff48a31d55a97e1e93892934b_c31b2498754e340573f1336de607d619"), fInfoLevelId=0x0, lpFileInformation=0x233f218 | out: lpFileInformation=0x233f218*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xa900ee5, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xa900ee5, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xa900ee5, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x1d7)) returned 1 [0201.320] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0201.320] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\EDC238BFF48A31D55A97E1E93892934B_C31B2498754E340573F1336DE607D619", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\EDC238BFF48A31D55A97E1E93892934B_C31B2498754E340573F1336DE607D619", lpFilePart=0x0) returned 0xba [0201.320] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0201.320] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\EDC238BFF48A31D55A97E1E93892934B_C31B2498754E340573F1336DE607D619" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\content\\edc238bff48a31d55a97e1e93892934b_c31b2498754e340573f1336de607d619"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0201.320] GetFileType (hFile=0x444) returned 0x1 [0201.320] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0201.320] GetFileType (hFile=0x444) returned 0x1 [0201.320] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x1d7 [0201.320] ReadFile (in: hFile=0x444, lpBuffer=0x233f938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x233f938*, lpNumberOfBytesRead=0x3be5c8*=0x1d7, lpOverlapped=0x0) returned 1 [0201.321] CloseHandle (hObject=0x444) returned 1 [0201.354] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\EDC238BFF48A31D55A97E1E93892934B_C31B2498754E340573F1336DE607D619", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\EDC238BFF48A31D55A97E1E93892934B_C31B2498754E340573F1336DE607D619", lpFilePart=0x0) returned 0xba [0201.354] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0201.354] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\EDC238BFF48A31D55A97E1E93892934B_C31B2498754E340573F1336DE607D619" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\content\\edc238bff48a31d55a97e1e93892934b_c31b2498754e340573f1336de607d619"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0201.355] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3baf90) returned 1 [0201.356] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\EDC238BFF48A31D55A97E1E93892934B_C31B2498754E340573F1336DE607D619", nBufferLength=0x105, lpBuffer=0x3bbc10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\EDC238BFF48A31D55A97E1E93892934B_C31B2498754E340573F1336DE607D619", lpFilePart=0x0) returned 0xba [0201.356] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0b0) returned 1 [0201.356] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\EDC238BFF48A31D55A97E1E93892934B_C31B2498754E340573F1336DE607D619" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\content\\edc238bff48a31d55a97e1e93892934b_c31b2498754e340573f1336de607d619"), fInfoLevelId=0x0, lpFileInformation=0x3bc190 | out: lpFileInformation=0x3bc190*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xa900ee5, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xa900ee5, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xa900ee5, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x1d7)) returned 1 [0201.356] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc070) returned 1 [0201.356] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\EDC238BFF48A31D55A97E1E93892934B_C31B2498754E340573F1336DE607D619", nBufferLength=0x105, lpBuffer=0x3bbc30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\EDC238BFF48A31D55A97E1E93892934B_C31B2498754E340573F1336DE607D619", lpFilePart=0x0) returned 0xba [0201.356] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0b0) returned 1 [0201.356] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\EDC238BFF48A31D55A97E1E93892934B_C31B2498754E340573F1336DE607D619" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\content\\edc238bff48a31d55a97e1e93892934b_c31b2498754e340573f1336de607d619"), fInfoLevelId=0x0, lpFileInformation=0x21b7db0 | out: lpFileInformation=0x21b7db0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xa900ee5, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xa900ee5, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xa900ee5, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x1d7)) returned 1 [0201.356] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc070) returned 1 [0201.356] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\EDC238BFF48A31D55A97E1E93892934B_C31B2498754E340573F1336DE607D619", nBufferLength=0x105, lpBuffer=0x3bba90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\EDC238BFF48A31D55A97E1E93892934B_C31B2498754E340573F1336DE607D619", lpFilePart=0x0) returned 0xba [0201.356] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf70) returned 1 [0201.356] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\EDC238BFF48A31D55A97E1E93892934B_C31B2498754E340573F1336DE607D619" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\content\\edc238bff48a31d55a97e1e93892934b_c31b2498754e340573f1336de607d619"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0201.356] GetFileType (hFile=0x444) returned 0x1 [0201.356] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbee0) returned 1 [0201.356] GetFileType (hFile=0x444) returned 0x1 [0201.356] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc108 | out: lpFileSizeHigh=0x3bc108*=0x0) returned 0x1d7 [0201.356] ReadFile (in: hFile=0x444, lpBuffer=0x21b84d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bc038, lpOverlapped=0x0 | out: lpBuffer=0x21b84d0*, lpNumberOfBytesRead=0x3bc038*=0x1d7, lpOverlapped=0x0) returned 1 [0201.356] CloseHandle (hObject=0x444) returned 1 [0201.370] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\EDC238BFF48A31D55A97E1E93892934B_C31B2498754E340573F1336DE607D619", nBufferLength=0x105, lpBuffer=0x3bba90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\EDC238BFF48A31D55A97E1E93892934B_C31B2498754E340573F1336DE607D619", lpFilePart=0x0) returned 0xba [0201.371] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf70) returned 1 [0201.371] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\EDC238BFF48A31D55A97E1E93892934B_C31B2498754E340573F1336DE607D619" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\content\\edc238bff48a31d55a97e1e93892934b_c31b2498754e340573f1336de607d619"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0201.372] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8a00) returned 1 [0201.373] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749", lpFilePart=0x0) returned 0x99 [0201.373] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0201.373] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\content\\fb0d848f74f70bb2eaa93746d24d9749"), fInfoLevelId=0x0, lpFileInformation=0x22307d8 | out: lpFileInformation=0x22307d8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x8caac22, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x8caac22, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x8caac22, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0201.374] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0201.374] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749", lpFilePart=0x0) returned 0x99 [0201.374] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0201.374] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\content\\fb0d848f74f70bb2eaa93746d24d9749"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0201.374] GetFileType (hFile=0x444) returned 0x1 [0201.374] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0201.374] GetFileType (hFile=0x444) returned 0x1 [0201.374] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x0 [0201.374] CloseHandle (hObject=0x444) returned 1 [0201.390] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749", lpFilePart=0x0) returned 0x99 [0201.390] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0201.390] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\content\\fb0d848f74f70bb2eaa93746d24d9749"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0201.391] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3baf90) returned 1 [0201.392] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749", nBufferLength=0x105, lpBuffer=0x3bbc10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749", lpFilePart=0x0) returned 0x99 [0201.392] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0b0) returned 1 [0201.392] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\content\\fb0d848f74f70bb2eaa93746d24d9749"), fInfoLevelId=0x0, lpFileInformation=0x3bc190 | out: lpFileInformation=0x3bc190*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x8caac22, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x8caac22, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x8caac22, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0201.392] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc070) returned 1 [0201.392] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749", nBufferLength=0x105, lpBuffer=0x3bbc30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749", lpFilePart=0x0) returned 0x99 [0201.392] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0b0) returned 1 [0201.392] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\content\\fb0d848f74f70bb2eaa93746d24d9749"), fInfoLevelId=0x0, lpFileInformation=0x22a7760 | out: lpFileInformation=0x22a7760*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x8caac22, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x8caac22, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x8caac22, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0201.392] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc070) returned 1 [0201.392] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749", nBufferLength=0x105, lpBuffer=0x3bba90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749", lpFilePart=0x0) returned 0x99 [0201.392] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf70) returned 1 [0201.392] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\content\\fb0d848f74f70bb2eaa93746d24d9749"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0201.392] GetFileType (hFile=0x444) returned 0x1 [0201.392] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbee0) returned 1 [0201.392] GetFileType (hFile=0x444) returned 0x1 [0201.392] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc108 | out: lpFileSizeHigh=0x3bc108*=0x0) returned 0x0 [0201.392] CloseHandle (hObject=0x444) returned 1 [0201.403] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749", nBufferLength=0x105, lpBuffer=0x3bba90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749", lpFilePart=0x0) returned 0x99 [0201.403] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf70) returned 1 [0201.403] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\content\\fb0d848f74f70bb2eaa93746d24d9749"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0201.406] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8a00) returned 1 [0201.407] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0201.407] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData", lpFilePart=0x0) returned 0x79 [0201.407] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\", lpFilePart=0x0) returned 0x7a [0201.407] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d7a30 [0201.410] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0201.410] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0201.410] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0201.411] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0201.411] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0201.411] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0201.411] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0201.411] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0201.411] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0201.411] FindClose (in: hFindFile=0x5d7a30 | out: hFindFile=0x5d7a30) returned 1 [0201.412] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0201.412] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0201.412] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0201.412] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData", lpFilePart=0x0) returned 0x79 [0201.412] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\", lpFilePart=0x0) returned 0x7a [0201.412] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d7eb0 [0201.413] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0201.413] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0201.414] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0201.414] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0201.414] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0201.414] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0201.414] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0201.414] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0201.414] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0201.415] FindClose (in: hFindFile=0x5d7eb0 | out: hFindFile=0x5d7eb0) returned 1 [0201.415] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0201.415] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0201.415] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", lpFilePart=0x0) returned 0xbb [0201.415] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0201.415] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\metadata\\40e450f7ce13419a2ccc2a5445035a0a_06f02b1f13ab4b11b8fc669bde565af1"), fInfoLevelId=0x0, lpFileInformation=0x2324280 | out: lpFileInformation=0x2324280*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x8c84b2c, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x8c84b2c, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x2ccb546b, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x190)) returned 1 [0201.416] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0201.416] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", lpFilePart=0x0) returned 0xbb [0201.416] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0201.416] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\metadata\\40e450f7ce13419a2ccc2a5445035a0a_06f02b1f13ab4b11b8fc669bde565af1"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0201.416] GetFileType (hFile=0x444) returned 0x1 [0201.416] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0201.417] GetFileType (hFile=0x444) returned 0x1 [0201.417] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x190 [0201.417] ReadFile (in: hFile=0x444, lpBuffer=0x2324958, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x2324958*, lpNumberOfBytesRead=0x3be5c8*=0x190, lpOverlapped=0x0) returned 1 [0201.419] CloseHandle (hObject=0x444) returned 1 [0201.463] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", lpFilePart=0x0) returned 0xbb [0201.463] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0201.463] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\metadata\\40e450f7ce13419a2ccc2a5445035a0a_06f02b1f13ab4b11b8fc669bde565af1"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0201.464] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3baf90) returned 1 [0201.465] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", nBufferLength=0x105, lpBuffer=0x3bbc10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", lpFilePart=0x0) returned 0xbb [0201.465] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0b0) returned 1 [0201.465] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\metadata\\40e450f7ce13419a2ccc2a5445035a0a_06f02b1f13ab4b11b8fc669bde565af1"), fInfoLevelId=0x0, lpFileInformation=0x3bc190 | out: lpFileInformation=0x3bc190*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x8c84b2c, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x8c84b2c, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x2ccb546b, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x190)) returned 1 [0201.465] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc070) returned 1 [0201.465] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", nBufferLength=0x105, lpBuffer=0x3bbc30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", lpFilePart=0x0) returned 0xbb [0201.465] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0b0) returned 1 [0201.465] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\metadata\\40e450f7ce13419a2ccc2a5445035a0a_06f02b1f13ab4b11b8fc669bde565af1"), fInfoLevelId=0x0, lpFileInformation=0x219cf80 | out: lpFileInformation=0x219cf80*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x8c84b2c, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x8c84b2c, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x2ccb546b, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x190)) returned 1 [0201.465] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc070) returned 1 [0201.465] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", nBufferLength=0x105, lpBuffer=0x3bba90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", lpFilePart=0x0) returned 0xbb [0201.465] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf70) returned 1 [0201.465] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\metadata\\40e450f7ce13419a2ccc2a5445035a0a_06f02b1f13ab4b11b8fc669bde565af1"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0201.465] GetFileType (hFile=0x444) returned 0x1 [0201.465] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbee0) returned 1 [0201.465] GetFileType (hFile=0x444) returned 0x1 [0201.465] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc108 | out: lpFileSizeHigh=0x3bc108*=0x0) returned 0x190 [0201.465] ReadFile (in: hFile=0x444, lpBuffer=0x219d658, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bc038, lpOverlapped=0x0 | out: lpBuffer=0x219d658*, lpNumberOfBytesRead=0x3bc038*=0x190, lpOverlapped=0x0) returned 1 [0201.466] CloseHandle (hObject=0x444) returned 1 [0201.477] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", nBufferLength=0x105, lpBuffer=0x3bba90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", lpFilePart=0x0) returned 0xbb [0201.477] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf70) returned 1 [0201.477] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\metadata\\40e450f7ce13419a2ccc2a5445035a0a_06f02b1f13ab4b11b8fc669bde565af1"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0201.479] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8a00) returned 1 [0201.479] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\42B9A473B4DAF01285A36B4D3C7B1662_178C086B699FD6C56B804AF3EF759CB5", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\42B9A473B4DAF01285A36B4D3C7B1662_178C086B699FD6C56B804AF3EF759CB5", lpFilePart=0x0) returned 0xbb [0201.480] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0201.480] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\42B9A473B4DAF01285A36B4D3C7B1662_178C086B699FD6C56B804AF3EF759CB5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\metadata\\42b9a473b4daf01285a36b4d3c7b1662_178c086b699fd6c56b804af3ef759cb5"), fInfoLevelId=0x0, lpFileInformation=0x2215820 | out: lpFileInformation=0x2215820*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe70bc33, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xe70bc33, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x2ccb546b, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x1b2)) returned 1 [0201.480] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0201.480] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\42B9A473B4DAF01285A36B4D3C7B1662_178C086B699FD6C56B804AF3EF759CB5", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\42B9A473B4DAF01285A36B4D3C7B1662_178C086B699FD6C56B804AF3EF759CB5", lpFilePart=0x0) returned 0xbb [0201.480] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0201.480] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\42B9A473B4DAF01285A36B4D3C7B1662_178C086B699FD6C56B804AF3EF759CB5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\metadata\\42b9a473b4daf01285a36b4d3c7b1662_178c086b699fd6c56b804af3ef759cb5"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0201.480] GetFileType (hFile=0x444) returned 0x1 [0201.480] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0201.480] GetFileType (hFile=0x444) returned 0x1 [0201.480] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x1b2 [0201.480] ReadFile (in: hFile=0x444, lpBuffer=0x2215f20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x2215f20*, lpNumberOfBytesRead=0x3be5c8*=0x1b2, lpOverlapped=0x0) returned 1 [0201.481] CloseHandle (hObject=0x444) returned 1 [0201.491] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\42B9A473B4DAF01285A36B4D3C7B1662_178C086B699FD6C56B804AF3EF759CB5", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\42B9A473B4DAF01285A36B4D3C7B1662_178C086B699FD6C56B804AF3EF759CB5", lpFilePart=0x0) returned 0xbb [0201.492] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0201.492] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\42B9A473B4DAF01285A36B4D3C7B1662_178C086B699FD6C56B804AF3EF759CB5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\metadata\\42b9a473b4daf01285a36b4d3c7b1662_178c086b699fd6c56b804af3ef759cb5"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0201.493] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3baf90) returned 1 [0201.493] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\42B9A473B4DAF01285A36B4D3C7B1662_178C086B699FD6C56B804AF3EF759CB5", nBufferLength=0x105, lpBuffer=0x3bbc10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\42B9A473B4DAF01285A36B4D3C7B1662_178C086B699FD6C56B804AF3EF759CB5", lpFilePart=0x0) returned 0xbb [0201.493] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0b0) returned 1 [0201.493] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\42B9A473B4DAF01285A36B4D3C7B1662_178C086B699FD6C56B804AF3EF759CB5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\metadata\\42b9a473b4daf01285a36b4d3c7b1662_178c086b699fd6c56b804af3ef759cb5"), fInfoLevelId=0x0, lpFileInformation=0x3bc190 | out: lpFileInformation=0x3bc190*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe70bc33, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xe70bc33, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x2ccb546b, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x1b2)) returned 1 [0201.493] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc070) returned 1 [0201.494] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\42B9A473B4DAF01285A36B4D3C7B1662_178C086B699FD6C56B804AF3EF759CB5", nBufferLength=0x105, lpBuffer=0x3bbc30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\42B9A473B4DAF01285A36B4D3C7B1662_178C086B699FD6C56B804AF3EF759CB5", lpFilePart=0x0) returned 0xbb [0201.494] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0b0) returned 1 [0201.494] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\42B9A473B4DAF01285A36B4D3C7B1662_178C086B699FD6C56B804AF3EF759CB5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\metadata\\42b9a473b4daf01285a36b4d3c7b1662_178c086b699fd6c56b804af3ef759cb5"), fInfoLevelId=0x0, lpFileInformation=0x228e318 | out: lpFileInformation=0x228e318*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe70bc33, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xe70bc33, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x2ccb546b, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x1b2)) returned 1 [0201.494] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc070) returned 1 [0201.494] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\42B9A473B4DAF01285A36B4D3C7B1662_178C086B699FD6C56B804AF3EF759CB5", nBufferLength=0x105, lpBuffer=0x3bba90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\42B9A473B4DAF01285A36B4D3C7B1662_178C086B699FD6C56B804AF3EF759CB5", lpFilePart=0x0) returned 0xbb [0201.494] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf70) returned 1 [0201.494] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\42B9A473B4DAF01285A36B4D3C7B1662_178C086B699FD6C56B804AF3EF759CB5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\metadata\\42b9a473b4daf01285a36b4d3c7b1662_178c086b699fd6c56b804af3ef759cb5"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0201.494] GetFileType (hFile=0x444) returned 0x1 [0201.494] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbee0) returned 1 [0201.494] GetFileType (hFile=0x444) returned 0x1 [0201.494] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc108 | out: lpFileSizeHigh=0x3bc108*=0x0) returned 0x1b2 [0201.494] ReadFile (in: hFile=0x444, lpBuffer=0x228ea18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bc038, lpOverlapped=0x0 | out: lpBuffer=0x228ea18*, lpNumberOfBytesRead=0x3bc038*=0x1b2, lpOverlapped=0x0) returned 1 [0201.494] CloseHandle (hObject=0x444) returned 1 [0201.507] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\42B9A473B4DAF01285A36B4D3C7B1662_178C086B699FD6C56B804AF3EF759CB5", nBufferLength=0x105, lpBuffer=0x3bba90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\42B9A473B4DAF01285A36B4D3C7B1662_178C086B699FD6C56B804AF3EF759CB5", lpFilePart=0x0) returned 0xbb [0201.507] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf70) returned 1 [0201.507] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\42B9A473B4DAF01285A36B4D3C7B1662_178C086B699FD6C56B804AF3EF759CB5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\metadata\\42b9a473b4daf01285a36b4d3c7b1662_178c086b699fd6c56b804af3ef759cb5"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0201.509] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8a00) returned 1 [0201.509] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", lpFilePart=0x0) returned 0x9a [0201.509] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0201.509] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\metadata\\57c8edb95df3f0ad4ee2dc2b8cfd4157"), fInfoLevelId=0x0, lpFileInformation=0x2306c80 | out: lpFileInformation=0x2306c80*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x8c84b2c, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x8c84b2c, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x8caac22, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x12e)) returned 1 [0201.510] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0201.510] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", lpFilePart=0x0) returned 0x9a [0201.510] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0201.510] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\metadata\\57c8edb95df3f0ad4ee2dc2b8cfd4157"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0201.510] GetFileType (hFile=0x444) returned 0x1 [0201.510] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0201.510] GetFileType (hFile=0x444) returned 0x1 [0201.510] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x12e [0201.510] ReadFile (in: hFile=0x444, lpBuffer=0x23071f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x23071f8*, lpNumberOfBytesRead=0x3be5c8*=0x12e, lpOverlapped=0x0) returned 1 [0201.511] CloseHandle (hObject=0x444) returned 1 [0201.521] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", lpFilePart=0x0) returned 0x9a [0201.521] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0201.521] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\metadata\\57c8edb95df3f0ad4ee2dc2b8cfd4157"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0201.523] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3baf90) returned 1 [0201.523] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", nBufferLength=0x105, lpBuffer=0x3bbc10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", lpFilePart=0x0) returned 0x9a [0201.523] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0b0) returned 1 [0201.523] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\metadata\\57c8edb95df3f0ad4ee2dc2b8cfd4157"), fInfoLevelId=0x0, lpFileInformation=0x3bc190 | out: lpFileInformation=0x3bc190*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x8c84b2c, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x8c84b2c, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x8caac22, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x12e)) returned 1 [0201.523] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc070) returned 1 [0201.523] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", nBufferLength=0x105, lpBuffer=0x3bbc30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", lpFilePart=0x0) returned 0x9a [0201.523] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0b0) returned 1 [0201.523] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\metadata\\57c8edb95df3f0ad4ee2dc2b8cfd4157"), fInfoLevelId=0x0, lpFileInformation=0x237f218 | out: lpFileInformation=0x237f218*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x8c84b2c, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x8c84b2c, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x8caac22, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x12e)) returned 1 [0201.523] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc070) returned 1 [0201.523] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", nBufferLength=0x105, lpBuffer=0x3bba90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", lpFilePart=0x0) returned 0x9a [0201.523] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf70) returned 1 [0201.524] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\metadata\\57c8edb95df3f0ad4ee2dc2b8cfd4157"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0201.524] GetFileType (hFile=0x444) returned 0x1 [0201.524] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbee0) returned 1 [0201.524] GetFileType (hFile=0x444) returned 0x1 [0201.524] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc108 | out: lpFileSizeHigh=0x3bc108*=0x0) returned 0x12e [0201.524] ReadFile (in: hFile=0x444, lpBuffer=0x237f790, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bc038, lpOverlapped=0x0 | out: lpBuffer=0x237f790*, lpNumberOfBytesRead=0x3bc038*=0x12e, lpOverlapped=0x0) returned 1 [0201.524] CloseHandle (hObject=0x444) returned 1 [0201.563] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", nBufferLength=0x105, lpBuffer=0x3bba90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", lpFilePart=0x0) returned 0x9a [0201.563] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf70) returned 1 [0201.563] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\metadata\\57c8edb95df3f0ad4ee2dc2b8cfd4157"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0201.564] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8a00) returned 1 [0201.565] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\66AE3BFDF94A732B262342AD2154B86E_108A7991F73F2B507007C35661993162", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\66AE3BFDF94A732B262342AD2154B86E_108A7991F73F2B507007C35661993162", lpFilePart=0x0) returned 0xbb [0201.565] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0201.565] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\66AE3BFDF94A732B262342AD2154B86E_108A7991F73F2B507007C35661993162" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\metadata\\66ae3bfdf94a732b262342ad2154b86e_108a7991f73f2b507007c35661993162"), fInfoLevelId=0x0, lpFileInformation=0x21f76c0 | out: lpFileInformation=0x21f76c0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe77fc51, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xe77fc51, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x2cecb562, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x1ae)) returned 1 [0201.565] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0201.565] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\66AE3BFDF94A732B262342AD2154B86E_108A7991F73F2B507007C35661993162", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\66AE3BFDF94A732B262342AD2154B86E_108A7991F73F2B507007C35661993162", lpFilePart=0x0) returned 0xbb [0201.565] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0201.565] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\66AE3BFDF94A732B262342AD2154B86E_108A7991F73F2B507007C35661993162" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\metadata\\66ae3bfdf94a732b262342ad2154b86e_108a7991f73f2b507007c35661993162"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0201.565] GetFileType (hFile=0x444) returned 0x1 [0201.565] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0201.565] GetFileType (hFile=0x444) returned 0x1 [0201.565] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x1ae [0201.566] ReadFile (in: hFile=0x444, lpBuffer=0x21f7db8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x21f7db8*, lpNumberOfBytesRead=0x3be5c8*=0x1ae, lpOverlapped=0x0) returned 1 [0201.566] CloseHandle (hObject=0x444) returned 1 [0201.576] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\66AE3BFDF94A732B262342AD2154B86E_108A7991F73F2B507007C35661993162", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\66AE3BFDF94A732B262342AD2154B86E_108A7991F73F2B507007C35661993162", lpFilePart=0x0) returned 0xbb [0201.635] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0201.635] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\66AE3BFDF94A732B262342AD2154B86E_108A7991F73F2B507007C35661993162" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\metadata\\66ae3bfdf94a732b262342ad2154b86e_108a7991f73f2b507007c35661993162"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0201.636] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3baf90) returned 1 [0201.637] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\66AE3BFDF94A732B262342AD2154B86E_108A7991F73F2B507007C35661993162", nBufferLength=0x105, lpBuffer=0x3bbc10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\66AE3BFDF94A732B262342AD2154B86E_108A7991F73F2B507007C35661993162", lpFilePart=0x0) returned 0xbb [0201.637] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0b0) returned 1 [0201.637] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\66AE3BFDF94A732B262342AD2154B86E_108A7991F73F2B507007C35661993162" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\metadata\\66ae3bfdf94a732b262342ad2154b86e_108a7991f73f2b507007c35661993162"), fInfoLevelId=0x0, lpFileInformation=0x3bc190 | out: lpFileInformation=0x3bc190*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe77fc51, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xe77fc51, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x2cecb562, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x1ae)) returned 1 [0201.637] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc070) returned 1 [0201.637] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\66AE3BFDF94A732B262342AD2154B86E_108A7991F73F2B507007C35661993162", nBufferLength=0x105, lpBuffer=0x3bbc30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\66AE3BFDF94A732B262342AD2154B86E_108A7991F73F2B507007C35661993162", lpFilePart=0x0) returned 0xbb [0201.637] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0b0) returned 1 [0201.637] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\66AE3BFDF94A732B262342AD2154B86E_108A7991F73F2B507007C35661993162" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\metadata\\66ae3bfdf94a732b262342ad2154b86e_108a7991f73f2b507007c35661993162"), fInfoLevelId=0x0, lpFileInformation=0x2270158 | out: lpFileInformation=0x2270158*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe77fc51, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xe77fc51, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x2cecb562, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x1ae)) returned 1 [0201.637] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc070) returned 1 [0201.637] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\66AE3BFDF94A732B262342AD2154B86E_108A7991F73F2B507007C35661993162", nBufferLength=0x105, lpBuffer=0x3bba90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\66AE3BFDF94A732B262342AD2154B86E_108A7991F73F2B507007C35661993162", lpFilePart=0x0) returned 0xbb [0201.637] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf70) returned 1 [0201.637] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\66AE3BFDF94A732B262342AD2154B86E_108A7991F73F2B507007C35661993162" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\metadata\\66ae3bfdf94a732b262342ad2154b86e_108a7991f73f2b507007c35661993162"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0201.637] GetFileType (hFile=0x444) returned 0x1 [0201.637] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbee0) returned 1 [0201.637] GetFileType (hFile=0x444) returned 0x1 [0201.637] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc108 | out: lpFileSizeHigh=0x3bc108*=0x0) returned 0x1ae [0201.637] ReadFile (in: hFile=0x444, lpBuffer=0x2270850, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bc038, lpOverlapped=0x0 | out: lpBuffer=0x2270850*, lpNumberOfBytesRead=0x3bc038*=0x1ae, lpOverlapped=0x0) returned 1 [0201.637] CloseHandle (hObject=0x444) returned 1 [0201.651] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\66AE3BFDF94A732B262342AD2154B86E_108A7991F73F2B507007C35661993162", nBufferLength=0x105, lpBuffer=0x3bba90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\66AE3BFDF94A732B262342AD2154B86E_108A7991F73F2B507007C35661993162", lpFilePart=0x0) returned 0xbb [0201.651] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf70) returned 1 [0201.651] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\66AE3BFDF94A732B262342AD2154B86E_108A7991F73F2B507007C35661993162" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\metadata\\66ae3bfdf94a732b262342ad2154b86e_108a7991f73f2b507007c35661993162"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0201.652] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8a00) returned 1 [0201.653] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506", lpFilePart=0x0) returned 0x9a [0201.653] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0201.653] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\metadata\\77ec63bda74bd0d0e0426dc8f8008506"), fInfoLevelId=0x0, lpFileInformation=0x22e8a60 | out: lpFileInformation=0x22e8a60*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x8c84b2c, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x8c84b2c, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x8c84b2c, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x122)) returned 1 [0201.653] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0201.653] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506", lpFilePart=0x0) returned 0x9a [0201.653] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0201.653] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\metadata\\77ec63bda74bd0d0e0426dc8f8008506"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0201.654] GetFileType (hFile=0x444) returned 0x1 [0201.654] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0201.654] GetFileType (hFile=0x444) returned 0x1 [0201.654] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x122 [0201.654] ReadFile (in: hFile=0x444, lpBuffer=0x22e8fd0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x22e8fd0*, lpNumberOfBytesRead=0x3be5c8*=0x122, lpOverlapped=0x0) returned 1 [0201.655] CloseHandle (hObject=0x444) returned 1 [0201.665] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506", lpFilePart=0x0) returned 0x9a [0201.665] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0201.665] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\metadata\\77ec63bda74bd0d0e0426dc8f8008506"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0201.666] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3baf90) returned 1 [0201.667] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506", nBufferLength=0x105, lpBuffer=0x3bbc10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506", lpFilePart=0x0) returned 0x9a [0201.667] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0b0) returned 1 [0201.667] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\metadata\\77ec63bda74bd0d0e0426dc8f8008506"), fInfoLevelId=0x0, lpFileInformation=0x3bc190 | out: lpFileInformation=0x3bc190*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x8c84b2c, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x8c84b2c, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x8c84b2c, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x122)) returned 1 [0201.667] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc070) returned 1 [0201.667] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506", nBufferLength=0x105, lpBuffer=0x3bbc30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506", lpFilePart=0x0) returned 0x9a [0201.667] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0b0) returned 1 [0201.667] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\metadata\\77ec63bda74bd0d0e0426dc8f8008506"), fInfoLevelId=0x0, lpFileInformation=0x2360ff8 | out: lpFileInformation=0x2360ff8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x8c84b2c, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x8c84b2c, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x8c84b2c, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x122)) returned 1 [0201.667] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc070) returned 1 [0201.667] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506", nBufferLength=0x105, lpBuffer=0x3bba90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506", lpFilePart=0x0) returned 0x9a [0201.667] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf70) returned 1 [0201.667] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\metadata\\77ec63bda74bd0d0e0426dc8f8008506"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0201.667] GetFileType (hFile=0x444) returned 0x1 [0201.667] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbee0) returned 1 [0201.667] GetFileType (hFile=0x444) returned 0x1 [0201.667] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc108 | out: lpFileSizeHigh=0x3bc108*=0x0) returned 0x122 [0201.667] ReadFile (in: hFile=0x444, lpBuffer=0x2361568, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bc038, lpOverlapped=0x0 | out: lpBuffer=0x2361568*, lpNumberOfBytesRead=0x3bc038*=0x122, lpOverlapped=0x0) returned 1 [0201.668] CloseHandle (hObject=0x444) returned 1 [0201.708] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506", nBufferLength=0x105, lpBuffer=0x3bba90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506", lpFilePart=0x0) returned 0x9a [0201.708] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf70) returned 1 [0201.708] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\metadata\\77ec63bda74bd0d0e0426dc8f8008506"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0201.709] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8a00) returned 1 [0201.710] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\EDC238BFF48A31D55A97E1E93892934B_C31B2498754E340573F1336DE607D619", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\EDC238BFF48A31D55A97E1E93892934B_C31B2498754E340573F1336DE607D619", lpFilePart=0x0) returned 0xbb [0201.710] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0201.710] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\EDC238BFF48A31D55A97E1E93892934B_C31B2498754E340573F1336DE607D619" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\metadata\\edc238bff48a31d55a97e1e93892934b_c31b2498754e340573f1336de607d619"), fInfoLevelId=0x0, lpFileInformation=0x21d9358 | out: lpFileInformation=0x21d9358*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xa900ee5, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xa900ee5, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x2cef17bd, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x1ae)) returned 1 [0201.710] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0201.710] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\EDC238BFF48A31D55A97E1E93892934B_C31B2498754E340573F1336DE607D619", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\EDC238BFF48A31D55A97E1E93892934B_C31B2498754E340573F1336DE607D619", lpFilePart=0x0) returned 0xbb [0201.710] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0201.710] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\EDC238BFF48A31D55A97E1E93892934B_C31B2498754E340573F1336DE607D619" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\metadata\\edc238bff48a31d55a97e1e93892934b_c31b2498754e340573f1336de607d619"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0201.710] GetFileType (hFile=0x444) returned 0x1 [0201.710] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0201.710] GetFileType (hFile=0x444) returned 0x1 [0201.710] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x1ae [0201.711] ReadFile (in: hFile=0x444, lpBuffer=0x21d9a50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x21d9a50*, lpNumberOfBytesRead=0x3be5c8*=0x1ae, lpOverlapped=0x0) returned 1 [0201.711] CloseHandle (hObject=0x444) returned 1 [0201.722] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\EDC238BFF48A31D55A97E1E93892934B_C31B2498754E340573F1336DE607D619", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\EDC238BFF48A31D55A97E1E93892934B_C31B2498754E340573F1336DE607D619", lpFilePart=0x0) returned 0xbb [0201.722] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0201.722] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\EDC238BFF48A31D55A97E1E93892934B_C31B2498754E340573F1336DE607D619" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\metadata\\edc238bff48a31d55a97e1e93892934b_c31b2498754e340573f1336de607d619"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0201.723] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3baf90) returned 1 [0201.724] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\EDC238BFF48A31D55A97E1E93892934B_C31B2498754E340573F1336DE607D619", nBufferLength=0x105, lpBuffer=0x3bbc10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\EDC238BFF48A31D55A97E1E93892934B_C31B2498754E340573F1336DE607D619", lpFilePart=0x0) returned 0xbb [0201.724] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0b0) returned 1 [0201.724] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\EDC238BFF48A31D55A97E1E93892934B_C31B2498754E340573F1336DE607D619" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\metadata\\edc238bff48a31d55a97e1e93892934b_c31b2498754e340573f1336de607d619"), fInfoLevelId=0x0, lpFileInformation=0x3bc190 | out: lpFileInformation=0x3bc190*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xa900ee5, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xa900ee5, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x2cef17bd, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x1ae)) returned 1 [0201.724] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc070) returned 1 [0201.724] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\EDC238BFF48A31D55A97E1E93892934B_C31B2498754E340573F1336DE607D619", nBufferLength=0x105, lpBuffer=0x3bbc30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\EDC238BFF48A31D55A97E1E93892934B_C31B2498754E340573F1336DE607D619", lpFilePart=0x0) returned 0xbb [0201.724] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0b0) returned 1 [0201.724] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\EDC238BFF48A31D55A97E1E93892934B_C31B2498754E340573F1336DE607D619" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\metadata\\edc238bff48a31d55a97e1e93892934b_c31b2498754e340573f1336de607d619"), fInfoLevelId=0x0, lpFileInformation=0x2251df0 | out: lpFileInformation=0x2251df0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xa900ee5, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xa900ee5, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x2cef17bd, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x1ae)) returned 1 [0201.724] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc070) returned 1 [0201.724] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\EDC238BFF48A31D55A97E1E93892934B_C31B2498754E340573F1336DE607D619", nBufferLength=0x105, lpBuffer=0x3bba90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\EDC238BFF48A31D55A97E1E93892934B_C31B2498754E340573F1336DE607D619", lpFilePart=0x0) returned 0xbb [0201.724] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf70) returned 1 [0201.724] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\EDC238BFF48A31D55A97E1E93892934B_C31B2498754E340573F1336DE607D619" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\metadata\\edc238bff48a31d55a97e1e93892934b_c31b2498754e340573f1336de607d619"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0201.724] GetFileType (hFile=0x444) returned 0x1 [0201.724] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbee0) returned 1 [0201.724] GetFileType (hFile=0x444) returned 0x1 [0201.724] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc108 | out: lpFileSizeHigh=0x3bc108*=0x0) returned 0x1ae [0201.725] ReadFile (in: hFile=0x444, lpBuffer=0x22524e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bc038, lpOverlapped=0x0 | out: lpBuffer=0x22524e8*, lpNumberOfBytesRead=0x3bc038*=0x1ae, lpOverlapped=0x0) returned 1 [0201.725] CloseHandle (hObject=0x444) returned 1 [0201.738] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\EDC238BFF48A31D55A97E1E93892934B_C31B2498754E340573F1336DE607D619", nBufferLength=0x105, lpBuffer=0x3bba90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\EDC238BFF48A31D55A97E1E93892934B_C31B2498754E340573F1336DE607D619", lpFilePart=0x0) returned 0xbb [0201.738] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf70) returned 1 [0201.738] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\EDC238BFF48A31D55A97E1E93892934B_C31B2498754E340573F1336DE607D619" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\metadata\\edc238bff48a31d55a97e1e93892934b_c31b2498754e340573f1336de607d619"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0201.739] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8a00) returned 1 [0201.740] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749", lpFilePart=0x0) returned 0x9a [0201.740] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0201.740] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\metadata\\fb0d848f74f70bb2eaa93746d24d9749"), fInfoLevelId=0x0, lpFileInformation=0x22ca6f8 | out: lpFileInformation=0x22ca6f8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x8caac22, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x8caac22, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x8caac22, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x122)) returned 1 [0201.740] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0201.740] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749", lpFilePart=0x0) returned 0x9a [0201.740] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0201.740] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\metadata\\fb0d848f74f70bb2eaa93746d24d9749"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0201.741] GetFileType (hFile=0x444) returned 0x1 [0201.741] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0201.741] GetFileType (hFile=0x444) returned 0x1 [0201.741] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x122 [0201.741] ReadFile (in: hFile=0x444, lpBuffer=0x22cac68, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x22cac68*, lpNumberOfBytesRead=0x3be5c8*=0x122, lpOverlapped=0x0) returned 1 [0201.742] CloseHandle (hObject=0x444) returned 1 [0201.752] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749", lpFilePart=0x0) returned 0x9a [0201.752] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0201.752] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\metadata\\fb0d848f74f70bb2eaa93746d24d9749"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0201.753] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3baf90) returned 1 [0201.754] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749", nBufferLength=0x105, lpBuffer=0x3bbc10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749", lpFilePart=0x0) returned 0x9a [0201.754] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0b0) returned 1 [0201.754] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\metadata\\fb0d848f74f70bb2eaa93746d24d9749"), fInfoLevelId=0x0, lpFileInformation=0x3bc190 | out: lpFileInformation=0x3bc190*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x8caac22, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x8caac22, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x8caac22, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x122)) returned 1 [0201.754] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc070) returned 1 [0201.754] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749", nBufferLength=0x105, lpBuffer=0x3bbc30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749", lpFilePart=0x0) returned 0x9a [0201.754] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0b0) returned 1 [0201.754] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\metadata\\fb0d848f74f70bb2eaa93746d24d9749"), fInfoLevelId=0x0, lpFileInformation=0x2342c90 | out: lpFileInformation=0x2342c90*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x8caac22, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x8caac22, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x8caac22, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x122)) returned 1 [0201.754] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc070) returned 1 [0201.754] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749", nBufferLength=0x105, lpBuffer=0x3bba90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749", lpFilePart=0x0) returned 0x9a [0201.754] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf70) returned 1 [0201.754] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\metadata\\fb0d848f74f70bb2eaa93746d24d9749"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0201.754] GetFileType (hFile=0x444) returned 0x1 [0201.754] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbee0) returned 1 [0201.754] GetFileType (hFile=0x444) returned 0x1 [0201.754] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc108 | out: lpFileSizeHigh=0x3bc108*=0x0) returned 0x122 [0201.754] ReadFile (in: hFile=0x444, lpBuffer=0x2343200, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bc038, lpOverlapped=0x0 | out: lpBuffer=0x2343200*, lpNumberOfBytesRead=0x3bc038*=0x122, lpOverlapped=0x0) returned 1 [0201.754] CloseHandle (hObject=0x444) returned 1 [0201.792] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749", nBufferLength=0x105, lpBuffer=0x3bba90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749", lpFilePart=0x0) returned 0x9a [0201.792] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf70) returned 1 [0201.792] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\metadata\\fb0d848f74f70bb2eaa93746d24d9749"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0201.793] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8a00) returned 1 [0201.794] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0201.794] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\SystemCertificates", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\SystemCertificates", lpFilePart=0x0) returned 0x72 [0201.794] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\SystemCertificates\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\SystemCertificates\\", lpFilePart=0x0) returned 0x73 [0201.794] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\SystemCertificates\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d7fd0 [0201.795] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0201.795] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0201.795] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0201.795] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0201.796] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0201.796] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0201.796] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0201.796] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\SystemCertificates", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\SystemCertificates", lpFilePart=0x0) returned 0x72 [0201.796] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\SystemCertificates\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\SystemCertificates\\", lpFilePart=0x0) returned 0x73 [0201.796] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\SystemCertificates\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d78b0 [0201.796] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0201.796] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0201.796] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0201.796] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0201.796] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0201.796] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0201.796] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0201.796] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\SystemCertificates\\My", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\SystemCertificates\\My", lpFilePart=0x0) returned 0x75 [0201.796] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\SystemCertificates\\My\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\SystemCertificates\\My\\", lpFilePart=0x0) returned 0x76 [0201.796] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\SystemCertificates\\My\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d7f10 [0201.797] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0201.797] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0201.797] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0201.797] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0201.797] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0201.797] FindClose (in: hFindFile=0x5d7f10 | out: hFindFile=0x5d7f10) returned 1 [0201.797] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0201.797] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0201.797] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0201.797] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\SystemCertificates\\My", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\SystemCertificates\\My", lpFilePart=0x0) returned 0x75 [0201.798] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\SystemCertificates\\My\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\SystemCertificates\\My\\", lpFilePart=0x0) returned 0x76 [0201.798] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\SystemCertificates\\My\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d7670 [0201.798] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0201.798] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0201.798] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0201.798] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0201.798] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0201.798] FindClose (in: hFindFile=0x5d7670 | out: hFindFile=0x5d7670) returned 1 [0201.798] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0201.798] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0201.798] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0201.798] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\SystemCertificates\\My\\Certificates", nBufferLength=0x105, lpBuffer=0x3be130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\SystemCertificates\\My\\Certificates", lpFilePart=0x0) returned 0x82 [0201.798] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\SystemCertificates\\My\\Certificates\\", nBufferLength=0x105, lpBuffer=0x3be0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\SystemCertificates\\My\\Certificates\\", lpFilePart=0x0) returned 0x83 [0201.799] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\SystemCertificates\\My\\Certificates\\*", lpFindFileData=0x3be2e0 | out: lpFindFileData=0x3be2e0) returned 0x5d7550 [0201.799] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0201.799] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 0 [0201.799] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0201.799] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0201.799] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0201.799] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0201.799] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\SystemCertificates\\My\\Certificates", nBufferLength=0x105, lpBuffer=0x3be130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\SystemCertificates\\My\\Certificates", lpFilePart=0x0) returned 0x82 [0201.799] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\SystemCertificates\\My\\Certificates\\", nBufferLength=0x105, lpBuffer=0x3be0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\SystemCertificates\\My\\Certificates\\", lpFilePart=0x0) returned 0x83 [0201.799] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\SystemCertificates\\My\\Certificates\\*", lpFindFileData=0x3be2e0 | out: lpFindFileData=0x3be2e0) returned 0x5d81b0 [0201.799] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0201.800] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 0 [0201.800] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0201.800] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0201.800] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0201.800] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0201.800] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\SystemCertificates\\My\\CRLs", nBufferLength=0x105, lpBuffer=0x3be130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\SystemCertificates\\My\\CRLs", lpFilePart=0x0) returned 0x7a [0201.800] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\SystemCertificates\\My\\CRLs\\", nBufferLength=0x105, lpBuffer=0x3be0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\SystemCertificates\\My\\CRLs\\", lpFilePart=0x0) returned 0x7b [0201.800] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\SystemCertificates\\My\\CRLs\\*", lpFindFileData=0x3be2e0 | out: lpFindFileData=0x3be2e0) returned 0x5d81b0 [0201.800] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0201.800] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 0 [0201.800] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0201.800] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0201.800] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0201.800] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0201.800] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\SystemCertificates\\My\\CRLs", nBufferLength=0x105, lpBuffer=0x3be130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\SystemCertificates\\My\\CRLs", lpFilePart=0x0) returned 0x7a [0201.800] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\SystemCertificates\\My\\CRLs\\", nBufferLength=0x105, lpBuffer=0x3be0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\SystemCertificates\\My\\CRLs\\", lpFilePart=0x0) returned 0x7b [0201.801] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\SystemCertificates\\My\\CRLs\\*", lpFindFileData=0x3be2e0 | out: lpFindFileData=0x3be2e0) returned 0x5d79d0 [0201.801] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0201.801] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 0 [0201.801] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0201.801] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0201.801] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0201.801] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0201.801] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\SystemCertificates\\My\\CTLs", nBufferLength=0x105, lpBuffer=0x3be130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\SystemCertificates\\My\\CTLs", lpFilePart=0x0) returned 0x7a [0201.801] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\SystemCertificates\\My\\CTLs\\", nBufferLength=0x105, lpBuffer=0x3be0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\SystemCertificates\\My\\CTLs\\", lpFilePart=0x0) returned 0x7b [0201.801] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\SystemCertificates\\My\\CTLs\\*", lpFindFileData=0x3be2e0 | out: lpFindFileData=0x3be2e0) returned 0x5d7a90 [0201.801] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0201.801] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 0 [0201.802] FindClose (in: hFindFile=0x5d7a90 | out: hFindFile=0x5d7a90) returned 1 [0201.802] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0201.802] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0201.802] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0201.802] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\SystemCertificates\\My\\CTLs", nBufferLength=0x105, lpBuffer=0x3be130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\SystemCertificates\\My\\CTLs", lpFilePart=0x0) returned 0x7a [0201.802] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\SystemCertificates\\My\\CTLs\\", nBufferLength=0x105, lpBuffer=0x3be0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\SystemCertificates\\My\\CTLs\\", lpFilePart=0x0) returned 0x7b [0201.802] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\SystemCertificates\\My\\CTLs\\*", lpFindFileData=0x3be2e0 | out: lpFindFileData=0x3be2e0) returned 0x5d7c70 [0201.802] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0201.802] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 0 [0201.802] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0201.802] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0201.802] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0201.802] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0201.802] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\Windows", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\Windows", lpFilePart=0x0) returned 0x67 [0201.802] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\Windows\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\Windows\\", lpFilePart=0x0) returned 0x68 [0201.803] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\Windows\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d7370 [0201.807] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0201.807] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0201.807] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0201.807] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0201.807] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0201.807] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0201.807] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0201.807] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\Windows", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\Windows", lpFilePart=0x0) returned 0x67 [0201.807] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\Windows\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\Windows\\", lpFilePart=0x0) returned 0x68 [0201.807] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\Windows\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d8090 [0201.807] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0201.808] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0201.808] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0201.808] FindClose (in: hFindFile=0x5d8090 | out: hFindFile=0x5d8090) returned 1 [0201.808] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0201.808] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0201.808] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0201.808] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\Windows\\1605653898", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\Windows\\1605653898", lpFilePart=0x0) returned 0x72 [0201.808] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\Windows\\1605653898\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\Windows\\1605653898\\", lpFilePart=0x0) returned 0x73 [0201.808] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\Windows\\1605653898\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d7370 [0201.810] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0201.810] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0201.810] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0201.810] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0201.810] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0201.810] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0201.810] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0201.810] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\Windows\\1605653898", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\Windows\\1605653898", lpFilePart=0x0) returned 0x72 [0201.810] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\Windows\\1605653898\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\Windows\\1605653898\\", lpFilePart=0x0) returned 0x73 [0201.810] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\Windows\\1605653898\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d7eb0 [0201.810] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0201.816] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0201.816] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0201.816] FindClose (in: hFindFile=0x5d7eb0 | out: hFindFile=0x5d7eb0) returned 1 [0201.816] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0201.816] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0201.816] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\Windows\\1605653898\\4275773285.pri", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\Windows\\1605653898\\4275773285.pri", lpFilePart=0x0) returned 0x81 [0201.816] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0201.817] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\Windows\\1605653898\\4275773285.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\windows\\1605653898\\4275773285.pri"), fInfoLevelId=0x0, lpFileInformation=0x21cd0a8 | out: lpFileInformation=0x21cd0a8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfdb43d5e, ftCreationTime.dwHighDateTime=0x1d2d432, ftLastAccessTime.dwLowDateTime=0xfdb43d5e, ftLastAccessTime.dwHighDateTime=0x1d2d432, ftLastWriteTime.dwLowDateTime=0xfdb46474, ftLastWriteTime.dwHighDateTime=0x1d2d432, nFileSizeHigh=0x0, nFileSizeLow=0x16dc8)) returned 1 [0201.827] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0201.827] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\Windows\\1605653898\\4275773285.pri", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\Windows\\1605653898\\4275773285.pri", lpFilePart=0x0) returned 0x81 [0201.827] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0201.827] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\Windows\\1605653898\\4275773285.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\windows\\1605653898\\4275773285.pri"), fInfoLevelId=0x0, lpFileInformation=0x21cd268 | out: lpFileInformation=0x21cd268*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfdb43d5e, ftCreationTime.dwHighDateTime=0x1d2d432, ftLastAccessTime.dwLowDateTime=0xfdb43d5e, ftLastAccessTime.dwHighDateTime=0x1d2d432, ftLastWriteTime.dwLowDateTime=0xfdb46474, ftLastWriteTime.dwHighDateTime=0x1d2d432, nFileSizeHigh=0x0, nFileSizeLow=0x16dc8)) returned 1 [0201.827] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0201.827] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\Windows\\1605653898\\4275773285.pri", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\Windows\\1605653898\\4275773285.pri", lpFilePart=0x0) returned 0x81 [0201.827] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0201.827] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\Windows\\1605653898\\4275773285.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\windows\\1605653898\\4275773285.pri"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0201.828] GetFileType (hFile=0x444) returned 0x1 [0201.828] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0201.828] GetFileType (hFile=0x444) returned 0x1 [0201.828] ReadFile (in: hFile=0x444, lpBuffer=0x21cf718, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x21cf718*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0201.839] CloseHandle (hObject=0x444) returned 1 [0201.847] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\Windows\\1605653898\\4275773285.pri", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\Windows\\1605653898\\4275773285.pri", lpFilePart=0x0) returned 0x81 [0201.847] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0201.847] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\Windows\\1605653898\\4275773285.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\windows\\1605653898\\4275773285.pri"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0201.847] GetFileType (hFile=0x444) returned 0x1 [0201.847] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0201.847] GetFileType (hFile=0x444) returned 0x1 [0201.847] WriteFile (in: hFile=0x444, lpBuffer=0x21cd408*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x21cd408*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0201.847] CloseHandle (hObject=0x444) returned 1 [0201.848] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\Windows\\1605653898\\4275773285.pri", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\Windows\\1605653898\\4275773285.pri", lpFilePart=0x0) returned 0x81 [0201.848] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\Windows\\1605653898\\4275773285.pri.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\Windows\\1605653898\\4275773285.pri.xuy", lpFilePart=0x0) returned 0x85 [0201.848] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0201.848] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\Windows\\1605653898\\4275773285.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\windows\\1605653898\\4275773285.pri"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfdb43d5e, ftCreationTime.dwHighDateTime=0x1d2d432, ftLastAccessTime.dwLowDateTime=0xfdb43d5e, ftLastAccessTime.dwHighDateTime=0x1d2d432, ftLastWriteTime.dwLowDateTime=0x6428d555, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x16dc8)) returned 1 [0201.848] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0201.848] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\Windows\\1605653898\\4275773285.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\windows\\1605653898\\4275773285.pri"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\Windows\\1605653898\\4275773285.pri.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\windows\\1605653898\\4275773285.pri.xuy")) returned 1 [0201.849] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0201.849] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge", lpFilePart=0x0) returned 0x63 [0201.849] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\", lpFilePart=0x0) returned 0x64 [0201.849] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d78b0 [0201.850] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0201.850] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0201.850] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0201.850] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0201.850] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0201.850] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0201.850] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0201.850] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0201.851] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0201.851] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0201.851] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0201.851] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0201.851] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0201.851] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0201.851] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0201.851] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0201.851] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge", lpFilePart=0x0) returned 0x63 [0201.851] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\", lpFilePart=0x0) returned 0x64 [0201.851] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d81b0 [0201.851] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0201.852] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0201.852] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0201.852] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0201.852] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0201.852] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0201.852] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0201.852] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0201.852] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0201.852] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0201.852] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0201.852] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0201.853] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0201.853] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0201.853] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0201.853] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0201.853] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\BingPageDataCache", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\BingPageDataCache", lpFilePart=0x0) returned 0x75 [0201.853] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\BingPageDataCache\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\BingPageDataCache\\", lpFilePart=0x0) returned 0x76 [0201.853] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\BingPageDataCache\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d7670 [0201.856] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0201.856] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0201.856] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0201.857] FindClose (in: hFindFile=0x5d7670 | out: hFindFile=0x5d7670) returned 1 [0201.857] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0201.857] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0201.857] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0201.857] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\BingPageDataCache", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\BingPageDataCache", lpFilePart=0x0) returned 0x75 [0201.857] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\BingPageDataCache\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\BingPageDataCache\\", lpFilePart=0x0) returned 0x76 [0201.857] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\BingPageDataCache\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d7610 [0201.857] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0201.857] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0201.857] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0201.857] FindClose (in: hFindFile=0x5d7610 | out: hFindFile=0x5d7610) returned 1 [0201.858] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0201.858] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0201.858] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\BingPageDataCache\\container.dat", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\BingPageDataCache\\container.dat", lpFilePart=0x0) returned 0x83 [0201.858] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0201.858] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\BingPageDataCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\bingpagedatacache\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x2253c70 | out: lpFileInformation=0x2253c70*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x269842dc, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x269a8c69, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x269a8c69, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0201.858] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\BingPageDataCache\\container.dat", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\BingPageDataCache\\container.dat", lpFilePart=0x0) returned 0x83 [0201.858] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\BingPageDataCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\bingpagedatacache\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0201.858] GetFileType (hFile=0x444) returned 0x1 [0201.858] GetFileType (hFile=0x444) returned 0x1 [0201.858] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be708 | out: lpFileSizeHigh=0x3be708*=0x0) returned 0x0 [0201.858] CloseHandle (hObject=0x444) returned 1 [0201.868] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\BingPageDataCache\\container.dat", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\BingPageDataCache\\container.dat", lpFilePart=0x0) returned 0x83 [0201.868] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\BingPageDataCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\bingpagedatacache\\container.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0201.870] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\BingPageDataCache\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbc80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\BingPageDataCache\\container.dat", lpFilePart=0x0) returned 0x83 [0201.870] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\BingPageDataCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\bingpagedatacache\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x3bc200 | out: lpFileInformation=0x3bc200*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x269842dc, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x269a8c69, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x269a8c69, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0201.870] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\BingPageDataCache\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\BingPageDataCache\\container.dat", lpFilePart=0x0) returned 0x83 [0201.871] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\BingPageDataCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\bingpagedatacache\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x22caa90 | out: lpFileInformation=0x22caa90*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x269842dc, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x269a8c69, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x269a8c69, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0201.871] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\BingPageDataCache\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbb00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\BingPageDataCache\\container.dat", lpFilePart=0x0) returned 0x83 [0201.871] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\BingPageDataCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\bingpagedatacache\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0201.871] GetFileType (hFile=0x444) returned 0x1 [0201.871] GetFileType (hFile=0x444) returned 0x1 [0201.871] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc178 | out: lpFileSizeHigh=0x3bc178*=0x0) returned 0x0 [0201.871] CloseHandle (hObject=0x444) returned 1 [0201.881] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\BingPageDataCache\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbb00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\BingPageDataCache\\container.dat", lpFilePart=0x0) returned 0x83 [0201.881] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\BingPageDataCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\bingpagedatacache\\container.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0201.883] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cache", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cache", lpFilePart=0x0) returned 0x69 [0201.883] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cache\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cache\\", lpFilePart=0x0) returned 0x6a [0201.883] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cache\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d7670 [0201.884] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0201.884] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0201.884] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0201.884] FindClose (in: hFindFile=0x5d7670 | out: hFindFile=0x5d7670) returned 1 [0201.884] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cache", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cache", lpFilePart=0x0) returned 0x69 [0201.884] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cache\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cache\\", lpFilePart=0x0) returned 0x6a [0201.884] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cache\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d7c70 [0201.884] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0201.884] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0201.884] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0201.885] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0201.885] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cache\\container.dat", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cache\\container.dat", lpFilePart=0x0) returned 0x77 [0201.885] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\cache\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x2343f58 | out: lpFileInformation=0x2343f58*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xcb1640, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xcb1640, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xcb1640, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0201.885] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cache\\container.dat", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cache\\container.dat", lpFilePart=0x0) returned 0x77 [0201.885] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\cache\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0201.885] GetFileType (hFile=0x444) returned 0x1 [0201.885] GetFileType (hFile=0x444) returned 0x1 [0201.885] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be708 | out: lpFileSizeHigh=0x3be708*=0x0) returned 0x0 [0201.885] CloseHandle (hObject=0x444) returned 1 [0201.925] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cache\\container.dat", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cache\\container.dat", lpFilePart=0x0) returned 0x77 [0201.925] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0201.925] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\cache\\container.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0201.927] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb000) returned 1 [0201.927] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cache\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbc80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cache\\container.dat", lpFilePart=0x0) returned 0x77 [0201.927] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc120) returned 1 [0201.927] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\cache\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x3bc200 | out: lpFileInformation=0x3bc200*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xcb1640, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xcb1640, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xcb1640, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0201.927] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc0e0) returned 1 [0201.927] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cache\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cache\\container.dat", lpFilePart=0x0) returned 0x77 [0201.927] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc120) returned 1 [0201.927] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\cache\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x21ba5f0 | out: lpFileInformation=0x21ba5f0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xcb1640, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xcb1640, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xcb1640, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0201.927] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc0e0) returned 1 [0201.927] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cache\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbb00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cache\\container.dat", lpFilePart=0x0) returned 0x77 [0201.927] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbfe0) returned 1 [0201.927] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\cache\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0201.928] GetFileType (hFile=0x444) returned 0x1 [0201.928] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbf50) returned 1 [0201.928] GetFileType (hFile=0x444) returned 0x1 [0201.928] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc178 | out: lpFileSizeHigh=0x3bc178*=0x0) returned 0x0 [0201.928] CloseHandle (hObject=0x444) returned 1 [0201.957] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cache\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbb00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cache\\container.dat", lpFilePart=0x0) returned 0x77 [0201.957] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbfe0) returned 1 [0201.957] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\cache\\container.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0201.959] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8a70) returned 1 [0201.959] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0201.959] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cookies", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cookies", lpFilePart=0x0) returned 0x6b [0201.959] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cookies\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cookies\\", lpFilePart=0x0) returned 0x6c [0201.959] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cookies\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d79d0 [0201.960] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0201.961] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0201.961] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0201.961] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0201.961] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0201.961] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0201.961] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0201.961] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0201.962] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0201.962] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0201.962] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0201.962] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cookies", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cookies", lpFilePart=0x0) returned 0x6b [0201.962] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cookies\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cookies\\", lpFilePart=0x0) returned 0x6c [0201.962] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cookies\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d78b0 [0201.963] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0201.963] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0201.963] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0201.963] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0201.963] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0201.964] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0201.964] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0201.964] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0201.964] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0201.964] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0201.965] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cookies\\1143SFPT.txt", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cookies\\1143SFPT.txt", lpFilePart=0x0) returned 0x78 [0201.965] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0201.965] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cookies\\1143SFPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\cookies\\1143sfpt.txt"), fInfoLevelId=0x0, lpFileInformation=0x2235088 | out: lpFileInformation=0x2235088*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x26746715, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x26746715, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x26746715, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x6f)) returned 1 [0201.965] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0201.966] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cookies\\1143SFPT.txt", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cookies\\1143SFPT.txt", lpFilePart=0x0) returned 0x78 [0201.966] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0201.966] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cookies\\1143SFPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\cookies\\1143sfpt.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0201.966] GetFileType (hFile=0x444) returned 0x1 [0201.966] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0201.966] GetFileType (hFile=0x444) returned 0x1 [0201.966] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be708 | out: lpFileSizeHigh=0x3be708*=0x0) returned 0x6f [0201.966] ReadFile (in: hFile=0x444, lpBuffer=0x2235470, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be638, lpOverlapped=0x0 | out: lpBuffer=0x2235470*, lpNumberOfBytesRead=0x3be638*=0x6f, lpOverlapped=0x0) returned 1 [0201.967] CloseHandle (hObject=0x444) returned 1 [0201.977] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cookies\\1143SFPT.txt", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cookies\\1143SFPT.txt", lpFilePart=0x0) returned 0x78 [0201.977] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0201.977] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cookies\\1143SFPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\cookies\\1143sfpt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0201.978] GetFileType (hFile=0x444) returned 0x1 [0201.978] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0201.978] GetFileType (hFile=0x444) returned 0x1 [0201.978] WriteFile (in: hFile=0x444, lpBuffer=0x22ac6a8*, nNumberOfBytesToWrite=0x70, lpNumberOfBytesWritten=0x3be548, lpOverlapped=0x0 | out: lpBuffer=0x22ac6a8*, lpNumberOfBytesWritten=0x3be548*=0x70, lpOverlapped=0x0) returned 1 [0201.979] CloseHandle (hObject=0x444) returned 1 [0201.979] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cookies\\1143SFPT.txt", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cookies\\1143SFPT.txt", lpFilePart=0x0) returned 0x78 [0201.979] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cookies\\1143SFPT.txt.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cookies\\1143SFPT.txt.xuy", lpFilePart=0x0) returned 0x7c [0201.979] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0201.980] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cookies\\1143SFPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\cookies\\1143sfpt.txt"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x26746715, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x26746715, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x643be807, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x70)) returned 1 [0201.980] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0201.980] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cookies\\1143SFPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\cookies\\1143sfpt.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cookies\\1143SFPT.txt.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\cookies\\1143sfpt.txt.xuy")) returned 1 [0201.981] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cookies\\1HP9XSYA.txt", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cookies\\1HP9XSYA.txt", lpFilePart=0x0) returned 0x78 [0201.981] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0201.981] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cookies\\1HP9XSYA.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\cookies\\1hp9xsya.txt"), fInfoLevelId=0x0, lpFileInformation=0x22ada48 | out: lpFileInformation=0x22ada48*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x26746715, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x26746715, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x26746715, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x95)) returned 1 [0201.984] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0201.984] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cookies\\1HP9XSYA.txt", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cookies\\1HP9XSYA.txt", lpFilePart=0x0) returned 0x78 [0201.984] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0201.984] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cookies\\1HP9XSYA.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\cookies\\1hp9xsya.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0201.984] GetFileType (hFile=0x444) returned 0x1 [0201.984] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0201.984] GetFileType (hFile=0x444) returned 0x1 [0201.984] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be708 | out: lpFileSizeHigh=0x3be708*=0x0) returned 0x95 [0201.984] ReadFile (in: hFile=0x444, lpBuffer=0x22ade58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be638, lpOverlapped=0x0 | out: lpBuffer=0x22ade58*, lpNumberOfBytesRead=0x3be638*=0x95, lpOverlapped=0x0) returned 1 [0201.985] CloseHandle (hObject=0x444) returned 1 [0201.995] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cookies\\1HP9XSYA.txt", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cookies\\1HP9XSYA.txt", lpFilePart=0x0) returned 0x78 [0201.995] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0201.995] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cookies\\1HP9XSYA.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\cookies\\1hp9xsya.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0201.997] GetFileType (hFile=0x444) returned 0x1 [0201.997] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0201.997] GetFileType (hFile=0x444) returned 0x1 [0201.997] WriteFile (in: hFile=0x444, lpBuffer=0x23250f8*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x3be548, lpOverlapped=0x0 | out: lpBuffer=0x23250f8*, lpNumberOfBytesWritten=0x3be548*=0xa0, lpOverlapped=0x0) returned 1 [0201.998] CloseHandle (hObject=0x444) returned 1 [0201.998] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cookies\\1HP9XSYA.txt", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cookies\\1HP9XSYA.txt", lpFilePart=0x0) returned 0x78 [0201.998] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cookies\\1HP9XSYA.txt.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cookies\\1HP9XSYA.txt.xuy", lpFilePart=0x0) returned 0x7c [0201.998] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0202.001] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cookies\\1HP9XSYA.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\cookies\\1hp9xsya.txt"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x26746715, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x26746715, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x643e4a49, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xa0)) returned 1 [0202.001] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0202.001] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cookies\\1HP9XSYA.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\cookies\\1hp9xsya.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cookies\\1HP9XSYA.txt.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\cookies\\1hp9xsya.txt.xuy")) returned 1 [0202.003] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cookies\\205ESPV2.txt", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cookies\\205ESPV2.txt", lpFilePart=0x0) returned 0x78 [0202.003] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0202.003] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cookies\\205ESPV2.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\cookies\\205espv2.txt"), fInfoLevelId=0x0, lpFileInformation=0x2326498 | out: lpFileInformation=0x2326498*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x258d23c3, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x258d23c3, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x258d23c3, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x9f)) returned 1 [0202.003] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0202.003] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cookies\\205ESPV2.txt", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cookies\\205ESPV2.txt", lpFilePart=0x0) returned 0x78 [0202.003] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0202.003] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cookies\\205ESPV2.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\cookies\\205espv2.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0202.003] GetFileType (hFile=0x444) returned 0x1 [0202.003] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0202.003] GetFileType (hFile=0x444) returned 0x1 [0202.003] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be708 | out: lpFileSizeHigh=0x3be708*=0x0) returned 0x9f [0202.003] ReadFile (in: hFile=0x444, lpBuffer=0x23268b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be638, lpOverlapped=0x0 | out: lpBuffer=0x23268b0*, lpNumberOfBytesRead=0x3be638*=0x9f, lpOverlapped=0x0) returned 1 [0202.004] CloseHandle (hObject=0x444) returned 1 [0202.044] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cookies\\205ESPV2.txt", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cookies\\205ESPV2.txt", lpFilePart=0x0) returned 0x78 [0202.044] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0202.044] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cookies\\205ESPV2.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\cookies\\205espv2.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0202.046] GetFileType (hFile=0x444) returned 0x1 [0202.046] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0202.046] GetFileType (hFile=0x444) returned 0x1 [0202.046] WriteFile (in: hFile=0x444, lpBuffer=0x219de80*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x3be548, lpOverlapped=0x0 | out: lpBuffer=0x219de80*, lpNumberOfBytesWritten=0x3be548*=0xa0, lpOverlapped=0x0) returned 1 [0202.047] CloseHandle (hObject=0x444) returned 1 [0202.047] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cookies\\205ESPV2.txt", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cookies\\205ESPV2.txt", lpFilePart=0x0) returned 0x78 [0202.047] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cookies\\205ESPV2.txt.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cookies\\205ESPV2.txt.xuy", lpFilePart=0x0) returned 0x7c [0202.047] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0202.047] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cookies\\205ESPV2.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\cookies\\205espv2.txt"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x258d23c3, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x258d23c3, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x6447d473, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xa0)) returned 1 [0202.047] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0202.048] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cookies\\205ESPV2.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\cookies\\205espv2.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cookies\\205ESPV2.txt.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\cookies\\205espv2.txt.xuy")) returned 1 [0202.049] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cookies\\container.dat", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cookies\\container.dat", lpFilePart=0x0) returned 0x79 [0202.049] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0202.049] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cookies\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\cookies\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x219f220 | out: lpFileInformation=0x219f220*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x856789c, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x856789c, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x856789c, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0202.049] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0202.049] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cookies\\container.dat", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cookies\\container.dat", lpFilePart=0x0) returned 0x79 [0202.049] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0202.049] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cookies\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\cookies\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0202.049] GetFileType (hFile=0x444) returned 0x1 [0202.049] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0202.049] GetFileType (hFile=0x444) returned 0x1 [0202.049] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be708 | out: lpFileSizeHigh=0x3be708*=0x0) returned 0x0 [0202.049] CloseHandle (hObject=0x444) returned 1 [0202.059] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cookies\\container.dat", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cookies\\container.dat", lpFilePart=0x0) returned 0x79 [0202.059] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0202.059] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cookies\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\cookies\\container.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0202.061] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb000) returned 1 [0202.061] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cookies\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbc80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cookies\\container.dat", lpFilePart=0x0) returned 0x79 [0202.061] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc120) returned 1 [0202.061] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cookies\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\cookies\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x3bc200 | out: lpFileInformation=0x3bc200*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x856789c, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x856789c, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x856789c, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0202.061] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc0e0) returned 1 [0202.062] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cookies\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cookies\\container.dat", lpFilePart=0x0) returned 0x79 [0202.062] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc120) returned 1 [0202.062] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cookies\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\cookies\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x2215ff0 | out: lpFileInformation=0x2215ff0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x856789c, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x856789c, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x856789c, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0202.062] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc0e0) returned 1 [0202.062] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cookies\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbb00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cookies\\container.dat", lpFilePart=0x0) returned 0x79 [0202.062] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbfe0) returned 1 [0202.062] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cookies\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\cookies\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0202.062] GetFileType (hFile=0x444) returned 0x1 [0202.062] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbf50) returned 1 [0202.062] GetFileType (hFile=0x444) returned 0x1 [0202.062] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc178 | out: lpFileSizeHigh=0x3bc178*=0x0) returned 0x0 [0202.062] CloseHandle (hObject=0x444) returned 1 [0202.098] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cookies\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbb00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cookies\\container.dat", lpFilePart=0x0) returned 0x79 [0202.098] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbfe0) returned 1 [0202.098] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cookies\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\cookies\\container.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0202.100] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8a70) returned 1 [0202.100] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cookies\\Y51OCFZ0.txt", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cookies\\Y51OCFZ0.txt", lpFilePart=0x0) returned 0x78 [0202.100] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0202.101] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cookies\\Y51OCFZ0.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\cookies\\y51ocfz0.txt"), fInfoLevelId=0x0, lpFileInformation=0x228ccd8 | out: lpFileInformation=0x228ccd8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x258d23c3, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x258d23c3, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x258d23c3, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x79)) returned 1 [0202.101] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0202.101] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cookies\\Y51OCFZ0.txt", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cookies\\Y51OCFZ0.txt", lpFilePart=0x0) returned 0x78 [0202.101] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0202.101] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cookies\\Y51OCFZ0.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\cookies\\y51ocfz0.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0202.101] GetFileType (hFile=0x444) returned 0x1 [0202.101] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0202.101] GetFileType (hFile=0x444) returned 0x1 [0202.101] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be708 | out: lpFileSizeHigh=0x3be708*=0x0) returned 0x79 [0202.101] ReadFile (in: hFile=0x444, lpBuffer=0x228d0d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be638, lpOverlapped=0x0 | out: lpBuffer=0x228d0d0*, lpNumberOfBytesRead=0x3be638*=0x79, lpOverlapped=0x0) returned 1 [0202.102] CloseHandle (hObject=0x444) returned 1 [0202.113] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cookies\\Y51OCFZ0.txt", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cookies\\Y51OCFZ0.txt", lpFilePart=0x0) returned 0x78 [0202.113] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0202.113] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cookies\\Y51OCFZ0.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\cookies\\y51ocfz0.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0202.115] GetFileType (hFile=0x444) returned 0x1 [0202.115] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0202.115] GetFileType (hFile=0x444) returned 0x1 [0202.115] WriteFile (in: hFile=0x444, lpBuffer=0x2304328*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x3be548, lpOverlapped=0x0 | out: lpBuffer=0x2304328*, lpNumberOfBytesWritten=0x3be548*=0x80, lpOverlapped=0x0) returned 1 [0202.116] CloseHandle (hObject=0x444) returned 1 [0202.116] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cookies\\Y51OCFZ0.txt", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cookies\\Y51OCFZ0.txt", lpFilePart=0x0) returned 0x78 [0202.116] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cookies\\Y51OCFZ0.txt.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cookies\\Y51OCFZ0.txt.xuy", lpFilePart=0x0) returned 0x7c [0202.116] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0202.116] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cookies\\Y51OCFZ0.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\cookies\\y51ocfz0.txt"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x258d23c3, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x258d23c3, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x64515e8f, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x80)) returned 1 [0202.116] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0202.116] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cookies\\Y51OCFZ0.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\cookies\\y51ocfz0.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cookies\\Y51OCFZ0.txt.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\cookies\\y51ocfz0.txt.xuy")) returned 1 [0202.117] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0202.117] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\CortanaAssist", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\CortanaAssist", lpFilePart=0x0) returned 0x71 [0202.118] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\CortanaAssist\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\CortanaAssist\\", lpFilePart=0x0) returned 0x72 [0202.118] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\CortanaAssist\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d78b0 [0202.118] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0202.118] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0202.118] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0202.118] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0202.122] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0202.122] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0202.123] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0202.123] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\CortanaAssist", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\CortanaAssist", lpFilePart=0x0) returned 0x71 [0202.123] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\CortanaAssist\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\CortanaAssist\\", lpFilePart=0x0) returned 0x72 [0202.123] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\CortanaAssist\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d7c70 [0202.123] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0202.124] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0202.124] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0202.124] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0202.124] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0202.124] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0202.124] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\CortanaAssist\\AllowList.dat", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\CortanaAssist\\AllowList.dat", lpFilePart=0x0) returned 0x7f [0202.124] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0202.124] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\CortanaAssist\\AllowList.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\cortanaassist\\allowlist.dat"), fInfoLevelId=0x0, lpFileInformation=0x2308048 | out: lpFileInformation=0x2308048*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x269842dc, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x269842dc, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x269842dc, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x49408)) returned 1 [0202.124] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0202.124] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\CortanaAssist\\AllowList.dat", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\CortanaAssist\\AllowList.dat", lpFilePart=0x0) returned 0x7f [0202.125] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0202.125] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\CortanaAssist\\AllowList.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\cortanaassist\\allowlist.dat"), fInfoLevelId=0x0, lpFileInformation=0x2308200 | out: lpFileInformation=0x2308200*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x269842dc, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x269842dc, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x269842dc, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x49408)) returned 1 [0202.125] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0202.125] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\CortanaAssist\\AllowList.dat", nBufferLength=0x105, lpBuffer=0x3be120, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\CortanaAssist\\AllowList.dat", lpFilePart=0x0) returned 0x7f [0202.125] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0202.125] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\CortanaAssist\\AllowList.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\cortanaassist\\allowlist.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0202.126] GetFileType (hFile=0x444) returned 0x1 [0202.126] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be570) returned 1 [0202.126] GetFileType (hFile=0x444) returned 0x1 [0202.126] ReadFile (in: hFile=0x444, lpBuffer=0x230a6a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be688, lpOverlapped=0x0 | out: lpBuffer=0x230a6a0*, lpNumberOfBytesRead=0x3be688*=0x1000, lpOverlapped=0x0) returned 1 [0202.139] CloseHandle (hObject=0x444) returned 1 [0202.143] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\CortanaAssist\\AllowList.dat", nBufferLength=0x105, lpBuffer=0x3be120, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\CortanaAssist\\AllowList.dat", lpFilePart=0x0) returned 0x7f [0202.143] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0202.143] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\CortanaAssist\\AllowList.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\cortanaassist\\allowlist.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0202.144] GetFileType (hFile=0x444) returned 0x1 [0202.144] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be570) returned 1 [0202.144] GetFileType (hFile=0x444) returned 0x1 [0202.144] WriteFile (in: hFile=0x444, lpBuffer=0x2308398*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be738, lpOverlapped=0x0 | out: lpBuffer=0x2308398*, lpNumberOfBytesWritten=0x3be738*=0x2000, lpOverlapped=0x0) returned 1 [0202.144] CloseHandle (hObject=0x444) returned 1 [0202.144] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\CortanaAssist\\AllowList.dat", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\CortanaAssist\\AllowList.dat", lpFilePart=0x0) returned 0x7f [0202.144] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\CortanaAssist\\AllowList.dat.xuy", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\CortanaAssist\\AllowList.dat.xuy", lpFilePart=0x0) returned 0x83 [0202.144] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0202.144] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\CortanaAssist\\AllowList.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\cortanaassist\\allowlist.dat"), fInfoLevelId=0x0, lpFileInformation=0x3be750 | out: lpFileInformation=0x3be750*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x269842dc, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x269842dc, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x645624d4, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x49408)) returned 1 [0202.145] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0202.145] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\CortanaAssist\\AllowList.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\cortanaassist\\allowlist.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\CortanaAssist\\AllowList.dat.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\cortanaassist\\allowlist.dat.xuy")) returned 1 [0202.146] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0202.146] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\History", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\History", lpFilePart=0x0) returned 0x6b [0202.146] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\History\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\History\\", lpFilePart=0x0) returned 0x6c [0202.150] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\History\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d7610 [0202.151] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0202.151] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0202.151] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0202.151] FindClose (in: hFindFile=0x5d7610 | out: hFindFile=0x5d7610) returned 1 [0202.151] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0202.151] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0202.151] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0202.151] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\History", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\History", lpFilePart=0x0) returned 0x6b [0202.151] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\History\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\History\\", lpFilePart=0x0) returned 0x6c [0202.151] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\History\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d78b0 [0202.152] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0202.152] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0202.152] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0202.152] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0202.152] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0202.152] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0202.152] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\History\\container.dat", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\History\\container.dat", lpFilePart=0x0) returned 0x79 [0202.152] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0202.152] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\History\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\history\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x2188df8 | out: lpFileInformation=0x2188df8*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xff9c7ed2, ftCreationTime.dwHighDateTime=0x1d2d432, ftLastAccessTime.dwLowDateTime=0xff9c7ed2, ftLastAccessTime.dwHighDateTime=0x1d2d432, ftLastWriteTime.dwLowDateTime=0xff9c7ed2, ftLastWriteTime.dwHighDateTime=0x1d2d432, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0202.152] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0202.152] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\History\\container.dat", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\History\\container.dat", lpFilePart=0x0) returned 0x79 [0202.153] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0202.153] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\History\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\history\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0202.153] GetFileType (hFile=0x444) returned 0x1 [0202.153] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0202.153] GetFileType (hFile=0x444) returned 0x1 [0202.153] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be708 | out: lpFileSizeHigh=0x3be708*=0x0) returned 0x0 [0202.153] CloseHandle (hObject=0x444) returned 1 [0202.211] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\History\\container.dat", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\History\\container.dat", lpFilePart=0x0) returned 0x79 [0202.211] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0202.211] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\History\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\history\\container.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0202.212] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb000) returned 1 [0202.213] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\History\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbc80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\History\\container.dat", lpFilePart=0x0) returned 0x79 [0202.213] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc120) returned 1 [0202.213] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\History\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\history\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x3bc200 | out: lpFileInformation=0x3bc200*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xff9c7ed2, ftCreationTime.dwHighDateTime=0x1d2d432, ftLastAccessTime.dwLowDateTime=0xff9c7ed2, ftLastAccessTime.dwHighDateTime=0x1d2d432, ftLastWriteTime.dwLowDateTime=0xff9c7ed2, ftLastWriteTime.dwHighDateTime=0x1d2d432, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0202.213] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc0e0) returned 1 [0202.213] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\History\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\History\\container.dat", lpFilePart=0x0) returned 0x79 [0202.213] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc120) returned 1 [0202.213] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\History\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\history\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x21ffbc8 | out: lpFileInformation=0x21ffbc8*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xff9c7ed2, ftCreationTime.dwHighDateTime=0x1d2d432, ftLastAccessTime.dwLowDateTime=0xff9c7ed2, ftLastAccessTime.dwHighDateTime=0x1d2d432, ftLastWriteTime.dwLowDateTime=0xff9c7ed2, ftLastWriteTime.dwHighDateTime=0x1d2d432, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0202.213] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc0e0) returned 1 [0202.213] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\History\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbb00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\History\\container.dat", lpFilePart=0x0) returned 0x79 [0202.213] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbfe0) returned 1 [0202.213] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\History\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\history\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0202.213] GetFileType (hFile=0x444) returned 0x1 [0202.213] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbf50) returned 1 [0202.213] GetFileType (hFile=0x444) returned 0x1 [0202.213] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc178 | out: lpFileSizeHigh=0x3bc178*=0x0) returned 0x0 [0202.213] CloseHandle (hObject=0x444) returned 1 [0202.224] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\History\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbb00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\History\\container.dat", lpFilePart=0x0) returned 0x79 [0202.224] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbfe0) returned 1 [0202.224] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\History\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\history\\container.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0202.225] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8a70) returned 1 [0202.226] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0202.226] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\IECompatCache", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\IECompatCache", lpFilePart=0x0) returned 0x71 [0202.226] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\IECompatCache\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\IECompatCache\\", lpFilePart=0x0) returned 0x72 [0202.226] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\IECompatCache\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d7670 [0202.227] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0202.227] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0202.227] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0202.227] FindClose (in: hFindFile=0x5d7670 | out: hFindFile=0x5d7670) returned 1 [0202.227] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0202.227] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0202.227] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0202.227] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\IECompatCache", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\IECompatCache", lpFilePart=0x0) returned 0x71 [0202.227] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\IECompatCache\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\IECompatCache\\", lpFilePart=0x0) returned 0x72 [0202.227] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\IECompatCache\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d7610 [0202.227] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0202.227] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0202.228] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0202.228] FindClose (in: hFindFile=0x5d7610 | out: hFindFile=0x5d7610) returned 1 [0202.228] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0202.228] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0202.228] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\IECompatCache\\container.dat", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\IECompatCache\\container.dat", lpFilePart=0x0) returned 0x7f [0202.228] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0202.228] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\IECompatCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\iecompatcache\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x2279230 | out: lpFileInformation=0x2279230*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xfdc9c242, ftCreationTime.dwHighDateTime=0x1d2d432, ftLastAccessTime.dwLowDateTime=0xfdcc950a, ftLastAccessTime.dwHighDateTime=0x1d2d432, ftLastWriteTime.dwLowDateTime=0xfdcc950a, ftLastWriteTime.dwHighDateTime=0x1d2d432, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0202.228] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0202.228] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\IECompatCache\\container.dat", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\IECompatCache\\container.dat", lpFilePart=0x0) returned 0x7f [0202.228] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0202.228] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\IECompatCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\iecompatcache\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0202.228] GetFileType (hFile=0x444) returned 0x1 [0202.228] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0202.228] GetFileType (hFile=0x444) returned 0x1 [0202.228] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be708 | out: lpFileSizeHigh=0x3be708*=0x0) returned 0x0 [0202.228] CloseHandle (hObject=0x444) returned 1 [0202.241] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\IECompatCache\\container.dat", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\IECompatCache\\container.dat", lpFilePart=0x0) returned 0x7f [0202.241] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0202.241] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\IECompatCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\iecompatcache\\container.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0202.242] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb000) returned 1 [0202.243] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\IECompatCache\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbc80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\IECompatCache\\container.dat", lpFilePart=0x0) returned 0x7f [0202.243] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc120) returned 1 [0202.243] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\IECompatCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\iecompatcache\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x3bc200 | out: lpFileInformation=0x3bc200*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xfdc9c242, ftCreationTime.dwHighDateTime=0x1d2d432, ftLastAccessTime.dwLowDateTime=0xfdcc950a, ftLastAccessTime.dwHighDateTime=0x1d2d432, ftLastWriteTime.dwLowDateTime=0xfdcc950a, ftLastWriteTime.dwHighDateTime=0x1d2d432, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0202.243] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc0e0) returned 1 [0202.243] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\IECompatCache\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\IECompatCache\\container.dat", lpFilePart=0x0) returned 0x7f [0202.243] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc120) returned 1 [0202.243] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\IECompatCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\iecompatcache\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x22f0028 | out: lpFileInformation=0x22f0028*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xfdc9c242, ftCreationTime.dwHighDateTime=0x1d2d432, ftLastAccessTime.dwLowDateTime=0xfdcc950a, ftLastAccessTime.dwHighDateTime=0x1d2d432, ftLastWriteTime.dwLowDateTime=0xfdcc950a, ftLastWriteTime.dwHighDateTime=0x1d2d432, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0202.243] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc0e0) returned 1 [0202.243] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\IECompatCache\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbb00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\IECompatCache\\container.dat", lpFilePart=0x0) returned 0x7f [0202.243] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbfe0) returned 1 [0202.243] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\IECompatCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\iecompatcache\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0202.243] GetFileType (hFile=0x444) returned 0x1 [0202.243] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbf50) returned 1 [0202.243] GetFileType (hFile=0x444) returned 0x1 [0202.243] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc178 | out: lpFileSizeHigh=0x3bc178*=0x0) returned 0x0 [0202.243] CloseHandle (hObject=0x444) returned 1 [0202.255] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\IECompatCache\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbb00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\IECompatCache\\container.dat", lpFilePart=0x0) returned 0x7f [0202.255] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbfe0) returned 1 [0202.255] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\IECompatCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\iecompatcache\\container.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0202.257] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8a70) returned 1 [0202.257] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0202.257] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\IECompatUaCache", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\IECompatUaCache", lpFilePart=0x0) returned 0x73 [0202.258] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\IECompatUaCache\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\IECompatUaCache\\", lpFilePart=0x0) returned 0x74 [0202.258] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\IECompatUaCache\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d7670 [0202.258] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0202.258] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0202.258] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0202.258] FindClose (in: hFindFile=0x5d7670 | out: hFindFile=0x5d7670) returned 1 [0202.258] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0202.258] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0202.258] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0202.258] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\IECompatUaCache", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\IECompatUaCache", lpFilePart=0x0) returned 0x73 [0202.258] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\IECompatUaCache\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\IECompatUaCache\\", lpFilePart=0x0) returned 0x74 [0202.258] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\IECompatUaCache\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d7c70 [0202.259] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0202.259] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0202.259] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0202.259] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0202.259] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0202.259] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0202.259] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\IECompatUaCache\\container.dat", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\IECompatUaCache\\container.dat", lpFilePart=0x0) returned 0x81 [0202.259] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0202.259] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\IECompatUaCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\iecompatuacache\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x2369760 | out: lpFileInformation=0x2369760*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xfdcce33f, ftCreationTime.dwHighDateTime=0x1d2d432, ftLastAccessTime.dwLowDateTime=0xfdcedf10, ftLastAccessTime.dwHighDateTime=0x1d2d432, ftLastWriteTime.dwLowDateTime=0xfdcedf10, ftLastWriteTime.dwHighDateTime=0x1d2d432, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0202.259] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0202.259] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\IECompatUaCache\\container.dat", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\IECompatUaCache\\container.dat", lpFilePart=0x0) returned 0x81 [0202.259] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0202.259] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\IECompatUaCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\iecompatuacache\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0202.260] GetFileType (hFile=0x444) returned 0x1 [0202.260] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0202.260] GetFileType (hFile=0x444) returned 0x1 [0202.260] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be708 | out: lpFileSizeHigh=0x3be708*=0x0) returned 0x0 [0202.260] CloseHandle (hObject=0x444) returned 1 [0202.302] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\IECompatUaCache\\container.dat", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\IECompatUaCache\\container.dat", lpFilePart=0x0) returned 0x81 [0202.302] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0202.302] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\IECompatUaCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\iecompatuacache\\container.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0202.304] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb000) returned 1 [0202.304] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\IECompatUaCache\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbc80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\IECompatUaCache\\container.dat", lpFilePart=0x0) returned 0x81 [0202.304] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc120) returned 1 [0202.304] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\IECompatUaCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\iecompatuacache\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x3bc200 | out: lpFileInformation=0x3bc200*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xfdcce33f, ftCreationTime.dwHighDateTime=0x1d2d432, ftLastAccessTime.dwLowDateTime=0xfdcedf10, ftLastAccessTime.dwHighDateTime=0x1d2d432, ftLastWriteTime.dwLowDateTime=0xfdcedf10, ftLastWriteTime.dwHighDateTime=0x1d2d432, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0202.304] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc0e0) returned 1 [0202.304] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\IECompatUaCache\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\IECompatUaCache\\container.dat", lpFilePart=0x0) returned 0x81 [0202.304] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc120) returned 1 [0202.304] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\IECompatUaCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\iecompatuacache\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x21e0890 | out: lpFileInformation=0x21e0890*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xfdcce33f, ftCreationTime.dwHighDateTime=0x1d2d432, ftLastAccessTime.dwLowDateTime=0xfdcedf10, ftLastAccessTime.dwHighDateTime=0x1d2d432, ftLastWriteTime.dwLowDateTime=0xfdcedf10, ftLastWriteTime.dwHighDateTime=0x1d2d432, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0202.304] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc0e0) returned 1 [0202.304] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\IECompatUaCache\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbb00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\IECompatUaCache\\container.dat", lpFilePart=0x0) returned 0x81 [0202.304] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbfe0) returned 1 [0202.304] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\IECompatUaCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\iecompatuacache\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0202.305] GetFileType (hFile=0x444) returned 0x1 [0202.305] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbf50) returned 1 [0202.305] GetFileType (hFile=0x444) returned 0x1 [0202.305] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc178 | out: lpFileSizeHigh=0x3bc178*=0x0) returned 0x0 [0202.305] CloseHandle (hObject=0x444) returned 1 [0202.315] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\IECompatUaCache\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbb00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\IECompatUaCache\\container.dat", lpFilePart=0x0) returned 0x81 [0202.315] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbfe0) returned 1 [0202.316] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\IECompatUaCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\iecompatuacache\\container.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0202.317] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8a70) returned 1 [0202.318] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0202.318] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\IEFlipAheadCache", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\IEFlipAheadCache", lpFilePart=0x0) returned 0x74 [0202.318] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\IEFlipAheadCache\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\IEFlipAheadCache\\", lpFilePart=0x0) returned 0x75 [0202.318] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\IEFlipAheadCache\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d75b0 [0202.318] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0202.318] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0202.318] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0202.318] FindClose (in: hFindFile=0x5d75b0 | out: hFindFile=0x5d75b0) returned 1 [0202.319] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0202.319] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0202.319] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0202.319] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\IEFlipAheadCache", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\IEFlipAheadCache", lpFilePart=0x0) returned 0x74 [0202.319] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\IEFlipAheadCache\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\IEFlipAheadCache\\", lpFilePart=0x0) returned 0x75 [0202.319] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\IEFlipAheadCache\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d81b0 [0202.319] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0202.319] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0202.319] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0202.319] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0202.319] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0202.319] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0202.320] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\IEFlipAheadCache\\container.dat", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\IEFlipAheadCache\\container.dat", lpFilePart=0x0) returned 0x82 [0202.320] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0202.320] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\IEFlipAheadCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\ieflipaheadcache\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x225a008 | out: lpFileInformation=0x225a008*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x25d70b86, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x25d96dcc, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x25d96dcc, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0202.320] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0202.320] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\IEFlipAheadCache\\container.dat", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\IEFlipAheadCache\\container.dat", lpFilePart=0x0) returned 0x82 [0202.320] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0202.320] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\IEFlipAheadCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\ieflipaheadcache\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0202.320] GetFileType (hFile=0x444) returned 0x1 [0202.320] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0202.320] GetFileType (hFile=0x444) returned 0x1 [0202.320] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be708 | out: lpFileSizeHigh=0x3be708*=0x0) returned 0x0 [0202.320] CloseHandle (hObject=0x444) returned 1 [0202.332] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\IEFlipAheadCache\\container.dat", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\IEFlipAheadCache\\container.dat", lpFilePart=0x0) returned 0x82 [0202.332] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0202.332] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\IEFlipAheadCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\ieflipaheadcache\\container.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0202.333] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb000) returned 1 [0202.334] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\IEFlipAheadCache\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbc80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\IEFlipAheadCache\\container.dat", lpFilePart=0x0) returned 0x82 [0202.334] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc120) returned 1 [0202.334] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\IEFlipAheadCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\ieflipaheadcache\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x3bc200 | out: lpFileInformation=0x3bc200*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x25d70b86, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x25d96dcc, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x25d96dcc, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0202.334] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc0e0) returned 1 [0202.334] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\IEFlipAheadCache\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\IEFlipAheadCache\\container.dat", lpFilePart=0x0) returned 0x82 [0202.334] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc120) returned 1 [0202.334] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\IEFlipAheadCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\ieflipaheadcache\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x22d0e28 | out: lpFileInformation=0x22d0e28*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x25d70b86, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x25d96dcc, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x25d96dcc, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0202.334] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc0e0) returned 1 [0202.334] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\IEFlipAheadCache\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbb00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\IEFlipAheadCache\\container.dat", lpFilePart=0x0) returned 0x82 [0202.334] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbfe0) returned 1 [0202.334] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\IEFlipAheadCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\ieflipaheadcache\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0202.334] GetFileType (hFile=0x444) returned 0x1 [0202.334] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbf50) returned 1 [0202.334] GetFileType (hFile=0x444) returned 0x1 [0202.335] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc178 | out: lpFileSizeHigh=0x3bc178*=0x0) returned 0x0 [0202.335] CloseHandle (hObject=0x444) returned 1 [0202.345] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\IEFlipAheadCache\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbb00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\IEFlipAheadCache\\container.dat", lpFilePart=0x0) returned 0x82 [0202.345] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbfe0) returned 1 [0202.345] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\IEFlipAheadCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\ieflipaheadcache\\container.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0202.347] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8a70) returned 1 [0202.348] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0202.348] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\PlayReady", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\PlayReady", lpFilePart=0x0) returned 0x6d [0202.348] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\PlayReady\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\PlayReady\\", lpFilePart=0x0) returned 0x6e [0202.348] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\PlayReady\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d7fd0 [0202.348] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0202.348] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0202.348] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0202.348] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0202.348] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0202.349] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0202.349] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\PlayReady", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\PlayReady", lpFilePart=0x0) returned 0x6d [0202.349] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\PlayReady\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\PlayReady\\", lpFilePart=0x0) returned 0x6e [0202.349] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\PlayReady\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d8090 [0202.349] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0202.349] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0202.349] FindClose (in: hFindFile=0x5d8090 | out: hFindFile=0x5d8090) returned 1 [0202.349] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0202.349] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0202.349] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0202.349] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User", lpFilePart=0x0) returned 0x68 [0202.349] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\", lpFilePart=0x0) returned 0x69 [0202.349] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d7a30 [0202.350] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0202.350] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0202.350] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0202.350] FindClose (in: hFindFile=0x5d7a30 | out: hFindFile=0x5d7a30) returned 1 [0202.350] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0202.350] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0202.350] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0202.350] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User", lpFilePart=0x0) returned 0x68 [0202.350] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\", lpFilePart=0x0) returned 0x69 [0202.350] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d78b0 [0202.350] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0202.351] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0202.351] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0202.351] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0202.351] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0202.351] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0202.351] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0202.351] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default", lpFilePart=0x0) returned 0x70 [0202.351] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\", lpFilePart=0x0) returned 0x71 [0202.351] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d7d90 [0202.352] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0202.352] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0202.352] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0202.352] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0202.353] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0202.353] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0202.353] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0202.353] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0202.353] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0202.353] FindClose (in: hFindFile=0x5d7d90 | out: hFindFile=0x5d7d90) returned 1 [0202.354] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0202.354] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0202.354] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0202.354] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default", lpFilePart=0x0) returned 0x70 [0202.354] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\", lpFilePart=0x0) returned 0x71 [0202.354] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d79d0 [0202.355] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0202.355] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0202.355] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0202.355] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0202.355] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0202.355] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0202.356] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0202.356] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0202.356] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0202.356] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0202.356] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0202.356] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0202.356] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0202.357] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore", nBufferLength=0x105, lpBuffer=0x3be130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore", lpFilePart=0x0) returned 0x7a [0202.357] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\", nBufferLength=0x105, lpBuffer=0x3be0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\", lpFilePart=0x0) returned 0x7b [0202.357] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\*", lpFindFileData=0x3be2e0 | out: lpFindFileData=0x3be2e0) returned 0x5d79d0 [0202.358] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0202.358] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0202.358] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0202.358] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 0 [0202.359] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0202.359] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0202.359] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0202.359] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0202.359] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore", nBufferLength=0x105, lpBuffer=0x3be130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore", lpFilePart=0x0) returned 0x7a [0202.359] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\", nBufferLength=0x105, lpBuffer=0x3be0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\", lpFilePart=0x0) returned 0x7b [0202.359] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\*", lpFindFileData=0x3be2e0 | out: lpFindFileData=0x3be2e0) returned 0x5d7d30 [0202.359] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0202.359] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0202.359] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0202.359] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 0 [0202.359] FindClose (in: hFindFile=0x5d7d30 | out: hFindFile=0x5d7d30) returned 1 [0202.360] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0202.360] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0202.360] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0202.360] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data", nBufferLength=0x105, lpBuffer=0x3be0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data", lpFilePart=0x0) returned 0x7f [0202.360] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\", nBufferLength=0x105, lpBuffer=0x3be060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\", lpFilePart=0x0) returned 0x80 [0202.360] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\*", lpFindFileData=0x3be270 | out: lpFindFileData=0x3be270) returned 0x5d7cd0 [0202.360] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0202.360] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0202.360] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 0 [0202.360] FindClose (in: hFindFile=0x5d7cd0 | out: hFindFile=0x5d7cd0) returned 1 [0202.360] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0202.360] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0202.360] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0202.361] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data", nBufferLength=0x105, lpBuffer=0x3be0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data", lpFilePart=0x0) returned 0x7f [0202.361] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\", nBufferLength=0x105, lpBuffer=0x3be060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\", lpFilePart=0x0) returned 0x80 [0202.361] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\*", lpFindFileData=0x3be270 | out: lpFindFileData=0x3be270) returned 0x5d7d30 [0202.361] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0202.361] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0202.361] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 0 [0202.361] FindClose (in: hFindFile=0x5d7d30 | out: hFindFile=0x5d7d30) returned 1 [0202.361] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0202.361] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0202.361] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0202.361] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1", lpFilePart=0x0) returned 0x87 [0202.361] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\", lpFilePart=0x0) returned 0x88 [0202.361] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d78b0 [0202.362] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0202.362] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0202.362] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0202.362] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0202.362] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0202.362] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0202.362] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0202.362] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1", lpFilePart=0x0) returned 0x87 [0202.362] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\", lpFilePart=0x0) returned 0x88 [0202.362] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d79d0 [0202.362] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0202.363] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0202.363] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0202.363] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0202.363] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4b0) returned 1 [0202.363] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0202.363] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0202.363] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049", nBufferLength=0x105, lpBuffer=0x3bdfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049", lpFilePart=0x0) returned 0x93 [0202.363] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\", nBufferLength=0x105, lpBuffer=0x3bdf80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\", lpFilePart=0x0) returned 0x94 [0202.363] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\*", lpFindFileData=0x3be190 | out: lpFindFileData=0x3be190) returned 0x5d81b0 [0202.363] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be1e0 | out: lpFindFileData=0x3be1e0) returned 1 [0202.363] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be1e0 | out: lpFindFileData=0x3be1e0) returned 1 [0202.364] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be1e0 | out: lpFindFileData=0x3be1e0) returned 0 [0202.364] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0202.364] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be440) returned 1 [0202.364] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be400) returned 1 [0202.364] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be4f0) returned 1 [0202.364] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049", nBufferLength=0x105, lpBuffer=0x3bdfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049", lpFilePart=0x0) returned 0x93 [0202.364] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\", nBufferLength=0x105, lpBuffer=0x3bdf80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\", lpFilePart=0x0) returned 0x94 [0202.364] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\*", lpFindFileData=0x3be190 | out: lpFindFileData=0x3be190) returned 0x5d7af0 [0202.364] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be1e0 | out: lpFindFileData=0x3be1e0) returned 1 [0202.364] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be1e0 | out: lpFindFileData=0x3be1e0) returned 1 [0202.364] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be1e0 | out: lpFindFileData=0x3be1e0) returned 0 [0202.364] FindClose (in: hFindFile=0x5d7af0 | out: hFindFile=0x5d7af0) returned 1 [0202.364] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be440) returned 1 [0202.365] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be400) returned 1 [0202.365] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be480) returned 1 [0202.365] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore", nBufferLength=0x105, lpBuffer=0x3bdf70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore", lpFilePart=0x0) returned 0x9b [0202.365] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\", nBufferLength=0x105, lpBuffer=0x3bdf10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\", lpFilePart=0x0) returned 0x9c [0202.365] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\*", lpFindFileData=0x3be120 | out: lpFindFileData=0x3be120) returned 0x5d7370 [0202.368] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be170 | out: lpFindFileData=0x3be170) returned 1 [0202.368] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be170 | out: lpFindFileData=0x3be170) returned 1 [0202.368] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be170 | out: lpFindFileData=0x3be170) returned 1 [0202.368] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be170 | out: lpFindFileData=0x3be170) returned 1 [0202.368] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be170 | out: lpFindFileData=0x3be170) returned 0 [0202.368] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0202.368] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be3d0) returned 1 [0202.369] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be390) returned 1 [0202.369] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be480) returned 1 [0202.369] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore", nBufferLength=0x105, lpBuffer=0x3bdf70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore", lpFilePart=0x0) returned 0x9b [0202.369] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\", nBufferLength=0x105, lpBuffer=0x3bdf10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\", lpFilePart=0x0) returned 0x9c [0202.369] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\*", lpFindFileData=0x3be120 | out: lpFindFileData=0x3be120) returned 0x5d7e50 [0202.369] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be170 | out: lpFindFileData=0x3be170) returned 1 [0202.369] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be170 | out: lpFindFileData=0x3be170) returned 1 [0202.369] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be170 | out: lpFindFileData=0x3be170) returned 1 [0202.369] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be170 | out: lpFindFileData=0x3be170) returned 1 [0202.369] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be170 | out: lpFindFileData=0x3be170) returned 0 [0202.369] FindClose (in: hFindFile=0x5d7e50 | out: hFindFile=0x5d7e50) returned 1 [0202.369] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be3d0) returned 1 [0202.369] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be390) returned 1 [0202.369] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\edb.chk", nBufferLength=0x105, lpBuffer=0x3bdf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\edb.chk", lpFilePart=0x0) returned 0xa3 [0202.370] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be410) returned 1 [0202.370] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\edb.chk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\datastore\\data\\nouser1\\120712-0049\\dbstore\\edb.chk"), fInfoLevelId=0x0, lpFileInformation=0x2360b28 | out: lpFileInformation=0x2360b28*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xff207043, ftCreationTime.dwHighDateTime=0x1d2d432, ftLastAccessTime.dwLowDateTime=0xff207043, ftLastAccessTime.dwHighDateTime=0x1d2d432, ftLastWriteTime.dwLowDateTime=0x14ad2c0f, ftLastWriteTime.dwHighDateTime=0x1d2fc21, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0202.372] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be3d0) returned 1 [0202.372] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\edb.chk", nBufferLength=0x105, lpBuffer=0x3bdf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\edb.chk", lpFilePart=0x0) returned 0xa3 [0202.372] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be410) returned 1 [0202.372] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\edb.chk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\datastore\\data\\nouser1\\120712-0049\\dbstore\\edb.chk"), fInfoLevelId=0x0, lpFileInformation=0x2360d18 | out: lpFileInformation=0x2360d18*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xff207043, ftCreationTime.dwHighDateTime=0x1d2d432, ftLastAccessTime.dwLowDateTime=0xff207043, ftLastAccessTime.dwHighDateTime=0x1d2d432, ftLastWriteTime.dwLowDateTime=0x14ad2c0f, ftLastWriteTime.dwHighDateTime=0x1d2fc21, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0202.372] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be3d0) returned 1 [0202.372] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\edb.chk", nBufferLength=0x105, lpBuffer=0x3bde80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\edb.chk", lpFilePart=0x0) returned 0xa3 [0202.372] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be360) returned 1 [0202.372] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\edb.chk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\datastore\\data\\nouser1\\120712-0049\\dbstore\\edb.chk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0202.374] GetFileType (hFile=0x444) returned 0x1 [0202.374] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be2d0) returned 1 [0202.374] GetFileType (hFile=0x444) returned 0x1 [0202.374] ReadFile (in: hFile=0x444, lpBuffer=0x2363228, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be3e8, lpOverlapped=0x0 | out: lpBuffer=0x2363228*, lpNumberOfBytesRead=0x3be3e8*=0x1000, lpOverlapped=0x0) returned 1 [0202.413] CloseHandle (hObject=0x444) returned 1 [0202.413] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\edb.chk", nBufferLength=0x105, lpBuffer=0x3bde80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\edb.chk", lpFilePart=0x0) returned 0xa3 [0202.413] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be360) returned 1 [0202.413] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\edb.chk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\datastore\\data\\nouser1\\120712-0049\\dbstore\\edb.chk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0202.414] GetFileType (hFile=0x444) returned 0x1 [0202.414] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be2d0) returned 1 [0202.414] GetFileType (hFile=0x444) returned 0x1 [0202.414] WriteFile (in: hFile=0x444, lpBuffer=0x2187fa8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be498, lpOverlapped=0x0 | out: lpBuffer=0x2187fa8*, lpNumberOfBytesWritten=0x3be498*=0x2000, lpOverlapped=0x0) returned 1 [0202.414] CloseHandle (hObject=0x444) returned 1 [0202.414] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\edb.chk", nBufferLength=0x105, lpBuffer=0x3bdf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\edb.chk", lpFilePart=0x0) returned 0xa3 [0202.414] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\edb.chk.xuy", nBufferLength=0x105, lpBuffer=0x3bdf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\edb.chk.xuy", lpFilePart=0x0) returned 0xa7 [0202.414] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3d0) returned 1 [0202.414] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\edb.chk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\datastore\\data\\nouser1\\120712-0049\\dbstore\\edb.chk"), fInfoLevelId=0x0, lpFileInformation=0x3be4b0 | out: lpFileInformation=0x3be4b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xff207043, ftCreationTime.dwHighDateTime=0x1d2d432, ftLastAccessTime.dwLowDateTime=0xff207043, ftLastAccessTime.dwHighDateTime=0x1d2d432, ftLastWriteTime.dwLowDateTime=0x647ea9ec, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0202.414] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be390) returned 1 [0202.415] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\edb.chk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\datastore\\data\\nouser1\\120712-0049\\dbstore\\edb.chk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\edb.chk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\datastore\\data\\nouser1\\120712-0049\\dbstore\\edb.chk.xuy")) returned 1 [0202.416] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\spartan.edb", nBufferLength=0x105, lpBuffer=0x3bdf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\spartan.edb", lpFilePart=0x0) returned 0xa7 [0202.416] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be410) returned 1 [0202.416] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\spartan.edb" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\datastore\\data\\nouser1\\120712-0049\\dbstore\\spartan.edb"), fInfoLevelId=0x0, lpFileInformation=0x21e3d60 | out: lpFileInformation=0x21e3d60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xff207043, ftCreationTime.dwHighDateTime=0x1d2d432, ftLastAccessTime.dwLowDateTime=0xff207043, ftLastAccessTime.dwHighDateTime=0x1d2d432, ftLastWriteTime.dwLowDateTime=0x14a604f3, ftLastWriteTime.dwHighDateTime=0x1d2fc21, nFileSizeHigh=0x0, nFileSizeLow=0x200000)) returned 1 [0202.416] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be3d0) returned 1 [0202.416] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\spartan.edb", nBufferLength=0x105, lpBuffer=0x3bdf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\spartan.edb", lpFilePart=0x0) returned 0xa7 [0202.416] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be410) returned 1 [0202.416] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\spartan.edb" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\datastore\\data\\nouser1\\120712-0049\\dbstore\\spartan.edb"), fInfoLevelId=0x0, lpFileInformation=0x21e3f60 | out: lpFileInformation=0x21e3f60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xff207043, ftCreationTime.dwHighDateTime=0x1d2d432, ftLastAccessTime.dwLowDateTime=0xff207043, ftLastAccessTime.dwHighDateTime=0x1d2d432, ftLastWriteTime.dwLowDateTime=0x14a604f3, ftLastWriteTime.dwHighDateTime=0x1d2fc21, nFileSizeHigh=0x0, nFileSizeLow=0x200000)) returned 1 [0202.416] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be3d0) returned 1 [0202.416] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\spartan.edb", nBufferLength=0x105, lpBuffer=0x3bde80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\spartan.edb", lpFilePart=0x0) returned 0xa7 [0202.416] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be360) returned 1 [0202.417] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\spartan.edb" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\datastore\\data\\nouser1\\120712-0049\\dbstore\\spartan.edb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0202.418] GetFileType (hFile=0x444) returned 0x1 [0202.418] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be2d0) returned 1 [0202.418] GetFileType (hFile=0x444) returned 0x1 [0202.418] ReadFile (in: hFile=0x444, lpBuffer=0x21e6490, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be3e8, lpOverlapped=0x0 | out: lpBuffer=0x21e6490*, lpNumberOfBytesRead=0x3be3e8*=0x1000, lpOverlapped=0x0) returned 1 [0202.443] CloseHandle (hObject=0x444) returned 1 [0202.443] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\spartan.edb", nBufferLength=0x105, lpBuffer=0x3bde80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\spartan.edb", lpFilePart=0x0) returned 0xa7 [0202.443] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be360) returned 1 [0202.443] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\spartan.edb" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\datastore\\data\\nouser1\\120712-0049\\dbstore\\spartan.edb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0202.444] GetFileType (hFile=0x444) returned 0x1 [0202.444] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be2d0) returned 1 [0202.444] GetFileType (hFile=0x444) returned 0x1 [0202.444] WriteFile (in: hFile=0x444, lpBuffer=0x21e4140*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be498, lpOverlapped=0x0 | out: lpBuffer=0x21e4140*, lpNumberOfBytesWritten=0x3be498*=0x2000, lpOverlapped=0x0) returned 1 [0202.444] CloseHandle (hObject=0x444) returned 1 [0202.444] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\spartan.edb", nBufferLength=0x105, lpBuffer=0x3bdf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\spartan.edb", lpFilePart=0x0) returned 0xa7 [0202.444] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\spartan.edb.xuy", nBufferLength=0x105, lpBuffer=0x3bdf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\spartan.edb.xuy", lpFilePart=0x0) returned 0xab [0202.444] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3d0) returned 1 [0202.444] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\spartan.edb" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\datastore\\data\\nouser1\\120712-0049\\dbstore\\spartan.edb"), fInfoLevelId=0x0, lpFileInformation=0x3be4b0 | out: lpFileInformation=0x3be4b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xff207043, ftCreationTime.dwHighDateTime=0x1d2d432, ftLastAccessTime.dwLowDateTime=0xff207043, ftLastAccessTime.dwHighDateTime=0x1d2d432, ftLastWriteTime.dwLowDateTime=0x64836e38, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x200000)) returned 1 [0202.444] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be390) returned 1 [0202.444] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\spartan.edb" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\datastore\\data\\nouser1\\120712-0049\\dbstore\\spartan.edb"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\spartan.edb.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\datastore\\data\\nouser1\\120712-0049\\dbstore\\spartan.edb.xuy")) returned 1 [0202.446] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be410) returned 1 [0202.446] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\LogFiles", nBufferLength=0x105, lpBuffer=0x3bdf00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\LogFiles", lpFilePart=0x0) returned 0xa4 [0202.446] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\LogFiles\\", nBufferLength=0x105, lpBuffer=0x3bdea0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\LogFiles\\", lpFilePart=0x0) returned 0xa5 [0202.446] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\LogFiles\\*", lpFindFileData=0x3be0b0 | out: lpFindFileData=0x3be0b0) returned 0x5d7fd0 [0202.446] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be100 | out: lpFindFileData=0x3be100) returned 1 [0202.446] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be100 | out: lpFindFileData=0x3be100) returned 1 [0202.446] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be100 | out: lpFindFileData=0x3be100) returned 1 [0202.446] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be100 | out: lpFindFileData=0x3be100) returned 1 [0202.446] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be100 | out: lpFindFileData=0x3be100) returned 1 [0202.446] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be100 | out: lpFindFileData=0x3be100) returned 0 [0202.447] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0202.447] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be360) returned 1 [0202.447] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0202.447] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be410) returned 1 [0202.447] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\LogFiles", nBufferLength=0x105, lpBuffer=0x3bdf00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\LogFiles", lpFilePart=0x0) returned 0xa4 [0202.447] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\LogFiles\\", nBufferLength=0x105, lpBuffer=0x3bdea0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\LogFiles\\", lpFilePart=0x0) returned 0xa5 [0202.447] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\LogFiles\\*", lpFindFileData=0x3be0b0 | out: lpFindFileData=0x3be0b0) returned 0x5d81b0 [0202.447] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be100 | out: lpFindFileData=0x3be100) returned 1 [0202.447] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be100 | out: lpFindFileData=0x3be100) returned 1 [0202.447] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be100 | out: lpFindFileData=0x3be100) returned 1 [0202.447] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be100 | out: lpFindFileData=0x3be100) returned 1 [0202.447] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be100 | out: lpFindFileData=0x3be100) returned 1 [0202.447] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be100 | out: lpFindFileData=0x3be100) returned 0 [0202.448] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0202.448] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be360) returned 1 [0202.448] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0202.448] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\LogFiles\\edb.log", nBufferLength=0x105, lpBuffer=0x3bdf20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\LogFiles\\edb.log", lpFilePart=0x0) returned 0xac [0202.448] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3a0) returned 1 [0202.448] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\LogFiles\\edb.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\datastore\\data\\nouser1\\120712-0049\\dbstore\\logfiles\\edb.log"), fInfoLevelId=0x0, lpFileInformation=0x22675f8 | out: lpFileInformation=0x22675f8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xff1babae, ftCreationTime.dwHighDateTime=0x1d2d432, ftLastAccessTime.dwLowDateTime=0xff1babae, ftLastAccessTime.dwHighDateTime=0x1d2d432, ftLastWriteTime.dwLowDateTime=0x14ad2c0f, ftLastWriteTime.dwHighDateTime=0x1d2fc21, nFileSizeHigh=0x0, nFileSizeLow=0x80000)) returned 1 [0202.448] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be360) returned 1 [0202.448] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\LogFiles\\edb.log", nBufferLength=0x105, lpBuffer=0x3bdf20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\LogFiles\\edb.log", lpFilePart=0x0) returned 0xac [0202.448] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3a0) returned 1 [0202.448] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\LogFiles\\edb.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\datastore\\data\\nouser1\\120712-0049\\dbstore\\logfiles\\edb.log"), fInfoLevelId=0x0, lpFileInformation=0x2267800 | out: lpFileInformation=0x2267800*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xff1babae, ftCreationTime.dwHighDateTime=0x1d2d432, ftLastAccessTime.dwLowDateTime=0xff1babae, ftLastAccessTime.dwHighDateTime=0x1d2d432, ftLastWriteTime.dwLowDateTime=0x14ad2c0f, ftLastWriteTime.dwHighDateTime=0x1d2fc21, nFileSizeHigh=0x0, nFileSizeLow=0x80000)) returned 1 [0202.448] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be360) returned 1 [0202.448] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\LogFiles\\edb.log", nBufferLength=0x105, lpBuffer=0x3bde10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\LogFiles\\edb.log", lpFilePart=0x0) returned 0xac [0202.448] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be2f0) returned 1 [0202.448] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\LogFiles\\edb.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\datastore\\data\\nouser1\\120712-0049\\dbstore\\logfiles\\edb.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0202.449] GetFileType (hFile=0x444) returned 0x1 [0202.449] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be260) returned 1 [0202.449] GetFileType (hFile=0x444) returned 0x1 [0202.449] ReadFile (in: hFile=0x444, lpBuffer=0x2269d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be378, lpOverlapped=0x0 | out: lpBuffer=0x2269d40*, lpNumberOfBytesRead=0x3be378*=0x1000, lpOverlapped=0x0) returned 1 [0202.471] CloseHandle (hObject=0x444) returned 1 [0202.471] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\LogFiles\\edb.log", nBufferLength=0x105, lpBuffer=0x3bde10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\LogFiles\\edb.log", lpFilePart=0x0) returned 0xac [0202.471] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be2f0) returned 1 [0202.471] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\LogFiles\\edb.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\datastore\\data\\nouser1\\120712-0049\\dbstore\\logfiles\\edb.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0202.472] GetFileType (hFile=0x444) returned 0x1 [0202.472] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be260) returned 1 [0202.472] GetFileType (hFile=0x444) returned 0x1 [0202.472] WriteFile (in: hFile=0x444, lpBuffer=0x22679e8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be428, lpOverlapped=0x0 | out: lpBuffer=0x22679e8*, lpNumberOfBytesWritten=0x3be428*=0x2000, lpOverlapped=0x0) returned 1 [0202.472] CloseHandle (hObject=0x444) returned 1 [0202.472] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\LogFiles\\edb.log", nBufferLength=0x105, lpBuffer=0x3bdf20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\LogFiles\\edb.log", lpFilePart=0x0) returned 0xac [0202.472] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\LogFiles\\edb.log.xuy", nBufferLength=0x105, lpBuffer=0x3bdf20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\LogFiles\\edb.log.xuy", lpFilePart=0x0) returned 0xb0 [0202.472] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be360) returned 1 [0202.472] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\LogFiles\\edb.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\datastore\\data\\nouser1\\120712-0049\\dbstore\\logfiles\\edb.log"), fInfoLevelId=0x0, lpFileInformation=0x3be440 | out: lpFileInformation=0x3be440*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xff1babae, ftCreationTime.dwHighDateTime=0x1d2d432, ftLastAccessTime.dwLowDateTime=0xff1babae, ftLastAccessTime.dwHighDateTime=0x1d2d432, ftLastWriteTime.dwLowDateTime=0x64883327, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x80000)) returned 1 [0202.472] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be320) returned 1 [0202.472] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\LogFiles\\edb.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\datastore\\data\\nouser1\\120712-0049\\dbstore\\logfiles\\edb.log"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\LogFiles\\edb.log.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\datastore\\data\\nouser1\\120712-0049\\dbstore\\logfiles\\edb.log.xuy")) returned 1 [0202.476] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\LogFiles\\edbres00001.jrs", nBufferLength=0x105, lpBuffer=0x3bdf20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\LogFiles\\edbres00001.jrs", lpFilePart=0x0) returned 0xb4 [0202.476] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3a0) returned 1 [0202.476] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\LogFiles\\edbres00001.jrs" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\datastore\\data\\nouser1\\120712-0049\\dbstore\\logfiles\\edbres00001.jrs"), fInfoLevelId=0x0, lpFileInformation=0x22e6408 | out: lpFileInformation=0x22e6408*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xff1e0e0d, ftCreationTime.dwHighDateTime=0x1d2d432, ftLastAccessTime.dwLowDateTime=0xff1e0e0d, ftLastAccessTime.dwHighDateTime=0x1d2d432, ftLastWriteTime.dwLowDateTime=0xff1e0e0d, ftLastWriteTime.dwHighDateTime=0x1d2d432, nFileSizeHigh=0x0, nFileSizeLow=0x80000)) returned 1 [0202.476] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be360) returned 1 [0202.476] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\LogFiles\\edbres00001.jrs", nBufferLength=0x105, lpBuffer=0x3bdf20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\LogFiles\\edbres00001.jrs", lpFilePart=0x0) returned 0xb4 [0202.476] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be3a0) returned 1 [0202.476] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\LogFiles\\edbres00001.jrs" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\datastore\\data\\nouser1\\120712-0049\\dbstore\\logfiles\\edbres00001.jrs"), fInfoLevelId=0x0, lpFileInformation=0x22e6630 | out: lpFileInformation=0x22e6630*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xff1e0e0d, ftCreationTime.dwHighDateTime=0x1d2d432, ftLastAccessTime.dwLowDateTime=0xff1e0e0d, ftLastAccessTime.dwHighDateTime=0x1d2d432, ftLastWriteTime.dwLowDateTime=0xff1e0e0d, ftLastWriteTime.dwHighDateTime=0x1d2d432, nFileSizeHigh=0x0, nFileSizeLow=0x80000)) returned 1 [0202.476] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be360) returned 1 [0202.476] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\LogFiles\\edbres00001.jrs", nBufferLength=0x105, lpBuffer=0x3bde10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\LogFiles\\edbres00001.jrs", lpFilePart=0x0) returned 0xb4 [0202.476] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be2f0) returned 1 [0202.477] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\LogFiles\\edbres00001.jrs" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\datastore\\data\\nouser1\\120712-0049\\dbstore\\logfiles\\edbres00001.jrs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0202.477] GetFileType (hFile=0x444) returned 0x1 [0202.477] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be260) returned 1 [0202.477] GetFileType (hFile=0x444) returned 0x1 [0202.477] ReadFile (in: hFile=0x444, lpBuffer=0x22e8bb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be378, lpOverlapped=0x0 | out: lpBuffer=0x22e8bb0*, lpNumberOfBytesRead=0x3be378*=0x1000, lpOverlapped=0x0) returned 1 [0202.489] CloseHandle (hObject=0x444) returned 1 [0202.489] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\LogFiles\\edbres00001.jrs", nBufferLength=0x105, lpBuffer=0x3bde10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\LogFiles\\edbres00001.jrs", lpFilePart=0x0) returned 0xb4 [0202.489] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be2f0) returned 1 [0202.489] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\LogFiles\\edbres00001.jrs" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\datastore\\data\\nouser1\\120712-0049\\dbstore\\logfiles\\edbres00001.jrs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0202.490] GetFileType (hFile=0x444) returned 0x1 [0202.490] GetFileType (hFile=0x444) returned 0x1 [0202.490] WriteFile (in: hFile=0x444, lpBuffer=0x22e6838*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be428, lpOverlapped=0x0 | out: lpBuffer=0x22e6838*, lpNumberOfBytesWritten=0x3be428*=0x2000, lpOverlapped=0x0) returned 1 [0202.490] CloseHandle (hObject=0x444) returned 1 [0202.490] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\LogFiles\\edbres00001.jrs", nBufferLength=0x105, lpBuffer=0x3bdf20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\LogFiles\\edbres00001.jrs", lpFilePart=0x0) returned 0xb4 [0202.490] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\LogFiles\\edbres00001.jrs.xuy", nBufferLength=0x105, lpBuffer=0x3bdf20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\LogFiles\\edbres00001.jrs.xuy", lpFilePart=0x0) returned 0xb8 [0202.490] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\LogFiles\\edbres00001.jrs" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\datastore\\data\\nouser1\\120712-0049\\dbstore\\logfiles\\edbres00001.jrs"), fInfoLevelId=0x0, lpFileInformation=0x3be440 | out: lpFileInformation=0x3be440*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xff1e0e0d, ftCreationTime.dwHighDateTime=0x1d2d432, ftLastAccessTime.dwLowDateTime=0xff1e0e0d, ftLastAccessTime.dwHighDateTime=0x1d2d432, ftLastWriteTime.dwLowDateTime=0x648a956d, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x80000)) returned 1 [0202.490] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\LogFiles\\edbres00001.jrs" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\datastore\\data\\nouser1\\120712-0049\\dbstore\\logfiles\\edbres00001.jrs"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\LogFiles\\edbres00001.jrs.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\datastore\\data\\nouser1\\120712-0049\\dbstore\\logfiles\\edbres00001.jrs.xuy")) returned 1 [0202.491] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\LogFiles\\edbres00002.jrs", nBufferLength=0x105, lpBuffer=0x3bdf20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\LogFiles\\edbres00002.jrs", lpFilePart=0x0) returned 0xb4 [0202.491] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\LogFiles\\edbres00002.jrs" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\datastore\\data\\nouser1\\120712-0049\\dbstore\\logfiles\\edbres00002.jrs"), fInfoLevelId=0x0, lpFileInformation=0x23652c8 | out: lpFileInformation=0x23652c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xff1e0e0d, ftCreationTime.dwHighDateTime=0x1d2d432, ftLastAccessTime.dwLowDateTime=0xff1e0e0d, ftLastAccessTime.dwHighDateTime=0x1d2d432, ftLastWriteTime.dwLowDateTime=0xff1e0e0d, ftLastWriteTime.dwHighDateTime=0x1d2d432, nFileSizeHigh=0x0, nFileSizeLow=0x80000)) returned 1 [0202.492] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\LogFiles\\edbres00002.jrs", nBufferLength=0x105, lpBuffer=0x3bdf20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\LogFiles\\edbres00002.jrs", lpFilePart=0x0) returned 0xb4 [0202.492] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\LogFiles\\edbres00002.jrs" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\datastore\\data\\nouser1\\120712-0049\\dbstore\\logfiles\\edbres00002.jrs"), fInfoLevelId=0x0, lpFileInformation=0x23654f0 | out: lpFileInformation=0x23654f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xff1e0e0d, ftCreationTime.dwHighDateTime=0x1d2d432, ftLastAccessTime.dwLowDateTime=0xff1e0e0d, ftLastAccessTime.dwHighDateTime=0x1d2d432, ftLastWriteTime.dwLowDateTime=0xff1e0e0d, ftLastWriteTime.dwHighDateTime=0x1d2d432, nFileSizeHigh=0x0, nFileSizeLow=0x80000)) returned 1 [0202.492] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\LogFiles\\edbres00002.jrs", nBufferLength=0x105, lpBuffer=0x3bde10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\LogFiles\\edbres00002.jrs", lpFilePart=0x0) returned 0xb4 [0202.492] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\LogFiles\\edbres00002.jrs" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\datastore\\data\\nouser1\\120712-0049\\dbstore\\logfiles\\edbres00002.jrs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0202.493] GetFileType (hFile=0x444) returned 0x1 [0202.493] GetFileType (hFile=0x444) returned 0x1 [0202.493] ReadFile (in: hFile=0x444, lpBuffer=0x2367a70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be378, lpOverlapped=0x0 | out: lpBuffer=0x2367a70*, lpNumberOfBytesRead=0x3be378*=0x1000, lpOverlapped=0x0) returned 1 [0202.509] CloseHandle (hObject=0x444) returned 1 [0202.509] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\LogFiles\\edbres00002.jrs", nBufferLength=0x105, lpBuffer=0x3bde10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\LogFiles\\edbres00002.jrs", lpFilePart=0x0) returned 0xb4 [0202.509] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\LogFiles\\edbres00002.jrs" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\datastore\\data\\nouser1\\120712-0049\\dbstore\\logfiles\\edbres00002.jrs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0202.509] GetFileType (hFile=0x444) returned 0x1 [0202.509] GetFileType (hFile=0x444) returned 0x1 [0202.509] WriteFile (in: hFile=0x444, lpBuffer=0x2187e90*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be428, lpOverlapped=0x0 | out: lpBuffer=0x2187e90*, lpNumberOfBytesWritten=0x3be428*=0x2000, lpOverlapped=0x0) returned 1 [0202.509] CloseHandle (hObject=0x444) returned 1 [0202.509] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\LogFiles\\edbres00002.jrs", nBufferLength=0x105, lpBuffer=0x3bdf20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\LogFiles\\edbres00002.jrs", lpFilePart=0x0) returned 0xb4 [0202.509] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\LogFiles\\edbres00002.jrs.xuy", nBufferLength=0x105, lpBuffer=0x3bdf20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\LogFiles\\edbres00002.jrs.xuy", lpFilePart=0x0) returned 0xb8 [0202.510] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\LogFiles\\edbres00002.jrs" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\datastore\\data\\nouser1\\120712-0049\\dbstore\\logfiles\\edbres00002.jrs"), fInfoLevelId=0x0, lpFileInformation=0x3be440 | out: lpFileInformation=0x3be440*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xff1e0e0d, ftCreationTime.dwHighDateTime=0x1d2d432, ftLastAccessTime.dwLowDateTime=0xff1e0e0d, ftLastAccessTime.dwHighDateTime=0x1d2d432, ftLastWriteTime.dwLowDateTime=0x648cf883, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x80000)) returned 1 [0202.510] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\LogFiles\\edbres00002.jrs" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\datastore\\data\\nouser1\\120712-0049\\dbstore\\logfiles\\edbres00002.jrs"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\LogFiles\\edbres00002.jrs.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\datastore\\data\\nouser1\\120712-0049\\dbstore\\logfiles\\edbres00002.jrs.xuy")) returned 1 [0202.511] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\LogFiles\\edbtmp.log", nBufferLength=0x105, lpBuffer=0x3bdf20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\LogFiles\\edbtmp.log", lpFilePart=0x0) returned 0xaf [0202.511] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\LogFiles\\edbtmp.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\datastore\\data\\nouser1\\120712-0049\\dbstore\\logfiles\\edbtmp.log"), fInfoLevelId=0x0, lpFileInformation=0x21e4058 | out: lpFileInformation=0x21e4058*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xff1babae, ftCreationTime.dwHighDateTime=0x1d2d432, ftLastAccessTime.dwLowDateTime=0xff1babae, ftLastAccessTime.dwHighDateTime=0x1d2d432, ftLastWriteTime.dwLowDateTime=0xff59bbfc, ftLastWriteTime.dwHighDateTime=0x1d2d432, nFileSizeHigh=0x0, nFileSizeLow=0x80000)) returned 1 [0202.511] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\LogFiles\\edbtmp.log", nBufferLength=0x105, lpBuffer=0x3bdf20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\LogFiles\\edbtmp.log", lpFilePart=0x0) returned 0xaf [0202.511] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\LogFiles\\edbtmp.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\datastore\\data\\nouser1\\120712-0049\\dbstore\\logfiles\\edbtmp.log"), fInfoLevelId=0x0, lpFileInformation=0x21e4268 | out: lpFileInformation=0x21e4268*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xff1babae, ftCreationTime.dwHighDateTime=0x1d2d432, ftLastAccessTime.dwLowDateTime=0xff1babae, ftLastAccessTime.dwHighDateTime=0x1d2d432, ftLastWriteTime.dwLowDateTime=0xff59bbfc, ftLastWriteTime.dwHighDateTime=0x1d2d432, nFileSizeHigh=0x0, nFileSizeLow=0x80000)) returned 1 [0202.511] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\LogFiles\\edbtmp.log", nBufferLength=0x105, lpBuffer=0x3bde10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\LogFiles\\edbtmp.log", lpFilePart=0x0) returned 0xaf [0202.512] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\LogFiles\\edbtmp.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\datastore\\data\\nouser1\\120712-0049\\dbstore\\logfiles\\edbtmp.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0202.513] GetFileType (hFile=0x444) returned 0x1 [0202.513] GetFileType (hFile=0x444) returned 0x1 [0202.513] ReadFile (in: hFile=0x444, lpBuffer=0x21e67b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be378, lpOverlapped=0x0 | out: lpBuffer=0x21e67b8*, lpNumberOfBytesRead=0x3be378*=0x1000, lpOverlapped=0x0) returned 1 [0202.529] CloseHandle (hObject=0x444) returned 1 [0202.529] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\LogFiles\\edbtmp.log", nBufferLength=0x105, lpBuffer=0x3bde10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\LogFiles\\edbtmp.log", lpFilePart=0x0) returned 0xaf [0202.529] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\LogFiles\\edbtmp.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\datastore\\data\\nouser1\\120712-0049\\dbstore\\logfiles\\edbtmp.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0202.530] GetFileType (hFile=0x444) returned 0x1 [0202.530] GetFileType (hFile=0x444) returned 0x1 [0202.530] WriteFile (in: hFile=0x444, lpBuffer=0x21e4458*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be428, lpOverlapped=0x0 | out: lpBuffer=0x21e4458*, lpNumberOfBytesWritten=0x3be428*=0x2000, lpOverlapped=0x0) returned 1 [0202.530] CloseHandle (hObject=0x444) returned 1 [0202.530] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\LogFiles\\edbtmp.log", nBufferLength=0x105, lpBuffer=0x3bdf20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\LogFiles\\edbtmp.log", lpFilePart=0x0) returned 0xaf [0202.530] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\LogFiles\\edbtmp.log.xuy", nBufferLength=0x105, lpBuffer=0x3bdf20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\LogFiles\\edbtmp.log.xuy", lpFilePart=0x0) returned 0xb3 [0202.530] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\LogFiles\\edbtmp.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\datastore\\data\\nouser1\\120712-0049\\dbstore\\logfiles\\edbtmp.log"), fInfoLevelId=0x0, lpFileInformation=0x3be440 | out: lpFileInformation=0x3be440*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xff1babae, ftCreationTime.dwHighDateTime=0x1d2d432, ftLastAccessTime.dwLowDateTime=0xff1babae, ftLastAccessTime.dwHighDateTime=0x1d2d432, ftLastWriteTime.dwLowDateTime=0x6491bcf9, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x80000)) returned 1 [0202.530] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\LogFiles\\edbtmp.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\datastore\\data\\nouser1\\120712-0049\\dbstore\\logfiles\\edbtmp.log"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\LogFiles\\edbtmp.log.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\datastore\\data\\nouser1\\120712-0049\\dbstore\\logfiles\\edbtmp.log.xuy")) returned 1 [0202.532] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Indexed", nBufferLength=0x105, lpBuffer=0x3be0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Indexed", lpFilePart=0x0) returned 0x82 [0202.532] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Indexed\\", nBufferLength=0x105, lpBuffer=0x3be060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Indexed\\", lpFilePart=0x0) returned 0x83 [0202.532] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Indexed\\*", lpFindFileData=0x3be270 | out: lpFindFileData=0x3be270) returned 0x5d7c70 [0202.535] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0202.535] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0202.535] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 0 [0202.535] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0202.535] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Indexed", nBufferLength=0x105, lpBuffer=0x3be0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Indexed", lpFilePart=0x0) returned 0x82 [0202.535] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Indexed\\", nBufferLength=0x105, lpBuffer=0x3be060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Indexed\\", lpFilePart=0x0) returned 0x83 [0202.535] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Indexed\\*", lpFindFileData=0x3be270 | out: lpFindFileData=0x3be270) returned 0x5d7cd0 [0202.535] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0202.535] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0202.535] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 0 [0202.536] FindClose (in: hFindFile=0x5d7cd0 | out: hFindFile=0x5d7cd0) returned 1 [0202.536] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Indexed\\Data", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Indexed\\Data", lpFilePart=0x0) returned 0x87 [0202.536] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Indexed\\Data\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Indexed\\Data\\", lpFilePart=0x0) returned 0x88 [0202.536] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Indexed\\Data\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7fd0 [0202.536] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0202.536] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0202.536] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0202.536] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0202.536] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Indexed\\Data", nBufferLength=0x105, lpBuffer=0x3be050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Indexed\\Data", lpFilePart=0x0) returned 0x87 [0202.536] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Indexed\\Data\\", nBufferLength=0x105, lpBuffer=0x3bdff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Indexed\\Data\\", lpFilePart=0x0) returned 0x88 [0202.536] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Indexed\\Data\\*", lpFindFileData=0x3be200 | out: lpFindFileData=0x3be200) returned 0x5d7a30 [0202.536] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0202.537] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 1 [0202.537] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be250 | out: lpFindFileData=0x3be250) returned 0 [0202.537] FindClose (in: hFindFile=0x5d7a30 | out: hFindFile=0x5d7a30) returned 1 [0202.537] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Indexed\\Data\\nouser1", nBufferLength=0x105, lpBuffer=0x3bdfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Indexed\\Data\\nouser1", lpFilePart=0x0) returned 0x8f [0202.537] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Indexed\\Data\\nouser1\\", nBufferLength=0x105, lpBuffer=0x3bdf80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Indexed\\Data\\nouser1\\", lpFilePart=0x0) returned 0x90 [0202.537] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Indexed\\Data\\nouser1\\*", lpFindFileData=0x3be190 | out: lpFindFileData=0x3be190) returned 0x5d7670 [0202.537] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be1e0 | out: lpFindFileData=0x3be1e0) returned 1 [0202.537] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be1e0 | out: lpFindFileData=0x3be1e0) returned 1 [0202.537] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be1e0 | out: lpFindFileData=0x3be1e0) returned 0 [0202.537] FindClose (in: hFindFile=0x5d7670 | out: hFindFile=0x5d7670) returned 1 [0202.537] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Indexed\\Data\\nouser1", nBufferLength=0x105, lpBuffer=0x3bdfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Indexed\\Data\\nouser1", lpFilePart=0x0) returned 0x8f [0202.537] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Indexed\\Data\\nouser1\\", nBufferLength=0x105, lpBuffer=0x3bdf80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Indexed\\Data\\nouser1\\", lpFilePart=0x0) returned 0x90 [0202.537] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Indexed\\Data\\nouser1\\*", lpFindFileData=0x3be190 | out: lpFindFileData=0x3be190) returned 0x5d7c70 [0202.538] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be1e0 | out: lpFindFileData=0x3be1e0) returned 1 [0202.538] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be1e0 | out: lpFindFileData=0x3be1e0) returned 1 [0202.538] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be1e0 | out: lpFindFileData=0x3be1e0) returned 0 [0202.538] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0202.538] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Indexed\\Data\\nouser1\\120712-0049", nBufferLength=0x105, lpBuffer=0x3bdf70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Indexed\\Data\\nouser1\\120712-0049", lpFilePart=0x0) returned 0x9b [0202.538] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Indexed\\Data\\nouser1\\120712-0049\\", nBufferLength=0x105, lpBuffer=0x3bdf10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Indexed\\Data\\nouser1\\120712-0049\\", lpFilePart=0x0) returned 0x9c [0202.538] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Indexed\\Data\\nouser1\\120712-0049\\*", lpFindFileData=0x3be120 | out: lpFindFileData=0x3be120) returned 0x5d7cd0 [0202.538] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be170 | out: lpFindFileData=0x3be170) returned 1 [0202.538] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be170 | out: lpFindFileData=0x3be170) returned 0 [0202.538] FindClose (in: hFindFile=0x5d7cd0 | out: hFindFile=0x5d7cd0) returned 1 [0202.538] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Indexed\\Data\\nouser1\\120712-0049", nBufferLength=0x105, lpBuffer=0x3bdf70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Indexed\\Data\\nouser1\\120712-0049", lpFilePart=0x0) returned 0x9b [0202.538] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Indexed\\Data\\nouser1\\120712-0049\\", nBufferLength=0x105, lpBuffer=0x3bdf10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Indexed\\Data\\nouser1\\120712-0049\\", lpFilePart=0x0) returned 0x9c [0202.539] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Indexed\\Data\\nouser1\\120712-0049\\*", lpFindFileData=0x3be120 | out: lpFindFileData=0x3be120) returned 0x5d7a30 [0202.539] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be170 | out: lpFindFileData=0x3be170) returned 1 [0202.539] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be170 | out: lpFindFileData=0x3be170) returned 0 [0202.539] FindClose (in: hFindFile=0x5d7a30 | out: hFindFile=0x5d7a30) returned 1 [0202.539] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DNTException", nBufferLength=0x105, lpBuffer=0x3be130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DNTException", lpFilePart=0x0) returned 0x7d [0202.539] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DNTException\\", nBufferLength=0x105, lpBuffer=0x3be0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DNTException\\", lpFilePart=0x0) returned 0x7e [0202.539] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DNTException\\*", lpFindFileData=0x3be2e0 | out: lpFindFileData=0x3be2e0) returned 0x5d78b0 [0202.539] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0202.539] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0202.539] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 0 [0202.539] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0202.539] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DNTException", nBufferLength=0x105, lpBuffer=0x3be130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DNTException", lpFilePart=0x0) returned 0x7d [0202.539] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DNTException\\", nBufferLength=0x105, lpBuffer=0x3be0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DNTException\\", lpFilePart=0x0) returned 0x7e [0202.539] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DNTException\\*", lpFindFileData=0x3be2e0 | out: lpFindFileData=0x3be2e0) returned 0x5d7670 [0202.539] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0202.539] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0202.539] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 0 [0202.540] FindClose (in: hFindFile=0x5d7670 | out: hFindFile=0x5d7670) returned 1 [0202.540] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DNTException\\container.dat", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DNTException\\container.dat", lpFilePart=0x0) returned 0x8b [0202.540] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DNTException\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\dntexception\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x2271188 | out: lpFileInformation=0x2271188*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xfdd7a5aa, ftCreationTime.dwHighDateTime=0x1d2d432, ftLastAccessTime.dwLowDateTime=0xfdd93fd3, ftLastAccessTime.dwHighDateTime=0x1d2d432, ftLastWriteTime.dwLowDateTime=0xfdd93fd3, ftLastWriteTime.dwHighDateTime=0x1d2d432, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0202.541] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DNTException\\container.dat", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DNTException\\container.dat", lpFilePart=0x0) returned 0x8b [0202.541] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DNTException\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\dntexception\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0202.542] GetFileType (hFile=0x444) returned 0x1 [0202.542] GetFileType (hFile=0x444) returned 0x1 [0202.542] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be628 | out: lpFileSizeHigh=0x3be628*=0x0) returned 0x0 [0202.542] CloseHandle (hObject=0x444) returned 1 [0202.552] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DNTException\\container.dat", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DNTException\\container.dat", lpFilePart=0x0) returned 0x8b [0202.552] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DNTException\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\dntexception\\container.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0202.554] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DNTException\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbba0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DNTException\\container.dat", lpFilePart=0x0) returned 0x8b [0202.554] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DNTException\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\dntexception\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x3bc120 | out: lpFileInformation=0x3bc120*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xfdd7a5aa, ftCreationTime.dwHighDateTime=0x1d2d432, ftLastAccessTime.dwLowDateTime=0xfdd93fd3, ftLastAccessTime.dwHighDateTime=0x1d2d432, ftLastWriteTime.dwLowDateTime=0xfdd93fd3, ftLastWriteTime.dwHighDateTime=0x1d2d432, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0202.554] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DNTException\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbbc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DNTException\\container.dat", lpFilePart=0x0) returned 0x8b [0202.554] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DNTException\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\dntexception\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x22e7ff8 | out: lpFileInformation=0x22e7ff8*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xfdd7a5aa, ftCreationTime.dwHighDateTime=0x1d2d432, ftLastAccessTime.dwLowDateTime=0xfdd93fd3, ftLastAccessTime.dwHighDateTime=0x1d2d432, ftLastWriteTime.dwLowDateTime=0xfdd93fd3, ftLastWriteTime.dwHighDateTime=0x1d2d432, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0202.554] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DNTException\\container.dat", nBufferLength=0x105, lpBuffer=0x3bba20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DNTException\\container.dat", lpFilePart=0x0) returned 0x8b [0202.554] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DNTException\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\dntexception\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0202.554] GetFileType (hFile=0x444) returned 0x1 [0202.554] GetFileType (hFile=0x444) returned 0x1 [0202.554] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc098 | out: lpFileSizeHigh=0x3bc098*=0x0) returned 0x0 [0202.554] CloseHandle (hObject=0x444) returned 1 [0202.669] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DNTException\\container.dat", nBufferLength=0x105, lpBuffer=0x3bba20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DNTException\\container.dat", lpFilePart=0x0) returned 0x8b [0202.669] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf00) returned 1 [0202.669] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DNTException\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\dntexception\\container.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0202.671] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8990) returned 1 [0202.672] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0202.672] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DomainSuggestions", nBufferLength=0x105, lpBuffer=0x3be130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DomainSuggestions", lpFilePart=0x0) returned 0x82 [0202.672] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DomainSuggestions\\", nBufferLength=0x105, lpBuffer=0x3be0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DomainSuggestions\\", lpFilePart=0x0) returned 0x83 [0202.672] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DomainSuggestions\\*", lpFindFileData=0x3be2e0 | out: lpFindFileData=0x3be2e0) returned 0x5d7a30 [0202.672] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0202.672] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0202.672] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 0 [0202.672] FindClose (in: hFindFile=0x5d7a30 | out: hFindFile=0x5d7a30) returned 1 [0202.672] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0202.672] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0202.672] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0202.672] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DomainSuggestions", nBufferLength=0x105, lpBuffer=0x3be130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DomainSuggestions", lpFilePart=0x0) returned 0x82 [0202.672] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DomainSuggestions\\", nBufferLength=0x105, lpBuffer=0x3be0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DomainSuggestions\\", lpFilePart=0x0) returned 0x83 [0202.672] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DomainSuggestions\\*", lpFindFileData=0x3be2e0 | out: lpFindFileData=0x3be2e0) returned 0x5d7eb0 [0202.672] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0202.673] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0202.673] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 0 [0202.673] FindClose (in: hFindFile=0x5d7eb0 | out: hFindFile=0x5d7eb0) returned 1 [0202.673] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0202.673] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0202.673] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DomainSuggestions\\en-US.1", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DomainSuggestions\\en-US.1", lpFilePart=0x0) returned 0x8a [0202.673] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0202.673] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DomainSuggestions\\en-US.1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\domainsuggestions\\en-us.1"), fInfoLevelId=0x0, lpFileInformation=0x2361a10 | out: lpFileInformation=0x2361a10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x25a2974e, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x25a2974e, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x2594494f, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x4700)) returned 1 [0202.678] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0202.678] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DomainSuggestions\\en-US.1", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DomainSuggestions\\en-US.1", lpFilePart=0x0) returned 0x8a [0202.678] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0202.678] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DomainSuggestions\\en-US.1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\domainsuggestions\\en-us.1"), fInfoLevelId=0x0, lpFileInformation=0x2361bd0 | out: lpFileInformation=0x2361bd0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x25a2974e, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x25a2974e, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x2594494f, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x4700)) returned 1 [0202.679] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0202.679] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DomainSuggestions\\en-US.1", nBufferLength=0x105, lpBuffer=0x3be040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DomainSuggestions\\en-US.1", lpFilePart=0x0) returned 0x8a [0202.679] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0202.679] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DomainSuggestions\\en-US.1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\domainsuggestions\\en-us.1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0202.680] GetFileType (hFile=0x444) returned 0x1 [0202.680] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be490) returned 1 [0202.680] GetFileType (hFile=0x444) returned 0x1 [0202.680] ReadFile (in: hFile=0x444, lpBuffer=0x2364080, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5a8, lpOverlapped=0x0 | out: lpBuffer=0x2364080*, lpNumberOfBytesRead=0x3be5a8*=0x1000, lpOverlapped=0x0) returned 1 [0202.732] CloseHandle (hObject=0x444) returned 1 [0202.732] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DomainSuggestions\\en-US.1", nBufferLength=0x105, lpBuffer=0x3be040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DomainSuggestions\\en-US.1", lpFilePart=0x0) returned 0x8a [0202.732] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0202.732] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DomainSuggestions\\en-US.1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\domainsuggestions\\en-us.1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0202.732] GetFileType (hFile=0x444) returned 0x1 [0202.732] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be490) returned 1 [0202.732] GetFileType (hFile=0x444) returned 0x1 [0202.735] WriteFile (in: hFile=0x444, lpBuffer=0x21873b8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be658, lpOverlapped=0x0 | out: lpBuffer=0x21873b8*, lpNumberOfBytesWritten=0x3be658*=0x2000, lpOverlapped=0x0) returned 1 [0202.736] CloseHandle (hObject=0x444) returned 1 [0202.736] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DomainSuggestions\\en-US.1", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DomainSuggestions\\en-US.1", lpFilePart=0x0) returned 0x8a [0202.736] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DomainSuggestions\\en-US.1.xuy", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DomainSuggestions\\en-US.1.xuy", lpFilePart=0x0) returned 0x8e [0202.736] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0202.736] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DomainSuggestions\\en-US.1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\domainsuggestions\\en-us.1"), fInfoLevelId=0x0, lpFileInformation=0x3be670 | out: lpFileInformation=0x3be670*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x25a2974e, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x25a2974e, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x64b0bb9a, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x4700)) returned 1 [0202.736] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0202.736] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DomainSuggestions\\en-US.1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\domainsuggestions\\en-us.1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DomainSuggestions\\en-US.1.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\domainsuggestions\\en-us.1.xuy")) returned 1 [0202.737] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0202.737] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DownloadHistory", nBufferLength=0x105, lpBuffer=0x3be130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DownloadHistory", lpFilePart=0x0) returned 0x80 [0202.737] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DownloadHistory\\", nBufferLength=0x105, lpBuffer=0x3be0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DownloadHistory\\", lpFilePart=0x0) returned 0x81 [0202.737] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DownloadHistory\\*", lpFindFileData=0x3be2e0 | out: lpFindFileData=0x3be2e0) returned 0x5d7c70 [0202.738] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0202.738] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0202.738] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 0 [0202.738] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0202.738] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0202.738] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0202.738] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0202.738] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DownloadHistory", nBufferLength=0x105, lpBuffer=0x3be130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DownloadHistory", lpFilePart=0x0) returned 0x80 [0202.738] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DownloadHistory\\", nBufferLength=0x105, lpBuffer=0x3be0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DownloadHistory\\", lpFilePart=0x0) returned 0x81 [0202.738] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DownloadHistory\\*", lpFindFileData=0x3be2e0 | out: lpFindFileData=0x3be2e0) returned 0x5d78b0 [0202.738] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0202.739] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0202.739] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 0 [0202.739] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0202.739] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0202.739] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0202.739] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DownloadHistory\\container.dat", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DownloadHistory\\container.dat", lpFilePart=0x0) returned 0x8e [0202.739] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0202.739] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DownloadHistory\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\downloadhistory\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x21e2850 | out: lpFileInformation=0x21e2850*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xdcd2e0a, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xdcd2e0a, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xdcd2e0a, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0202.739] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0202.739] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DownloadHistory\\container.dat", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DownloadHistory\\container.dat", lpFilePart=0x0) returned 0x8e [0202.739] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0202.739] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DownloadHistory\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\downloadhistory\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0202.739] GetFileType (hFile=0x444) returned 0x1 [0202.739] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be400) returned 1 [0202.739] GetFileType (hFile=0x444) returned 0x1 [0202.739] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be628 | out: lpFileSizeHigh=0x3be628*=0x0) returned 0x0 [0202.740] CloseHandle (hObject=0x444) returned 1 [0202.750] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DownloadHistory\\container.dat", nBufferLength=0x105, lpBuffer=0x3bdfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DownloadHistory\\container.dat", lpFilePart=0x0) returned 0x8e [0202.750] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be490) returned 1 [0202.750] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DownloadHistory\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\downloadhistory\\container.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0202.751] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3baf20) returned 1 [0202.751] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DownloadHistory\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbba0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DownloadHistory\\container.dat", lpFilePart=0x0) returned 0x8e [0202.751] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc040) returned 1 [0202.751] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DownloadHistory\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\downloadhistory\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x3bc120 | out: lpFileInformation=0x3bc120*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xdcd2e0a, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xdcd2e0a, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xdcd2e0a, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0202.752] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc000) returned 1 [0202.752] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DownloadHistory\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbbc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DownloadHistory\\container.dat", lpFilePart=0x0) returned 0x8e [0202.752] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc040) returned 1 [0202.752] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DownloadHistory\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\downloadhistory\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x22596e8 | out: lpFileInformation=0x22596e8*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xdcd2e0a, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xdcd2e0a, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xdcd2e0a, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0202.752] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc000) returned 1 [0202.752] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DownloadHistory\\container.dat", nBufferLength=0x105, lpBuffer=0x3bba20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DownloadHistory\\container.dat", lpFilePart=0x0) returned 0x8e [0202.752] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf00) returned 1 [0202.752] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DownloadHistory\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\downloadhistory\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0202.752] GetFileType (hFile=0x444) returned 0x1 [0202.752] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbe70) returned 1 [0202.752] GetFileType (hFile=0x444) returned 0x1 [0202.752] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc098 | out: lpFileSizeHigh=0x3bc098*=0x0) returned 0x0 [0202.752] CloseHandle (hObject=0x444) returned 1 [0202.762] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DownloadHistory\\container.dat", nBufferLength=0x105, lpBuffer=0x3bba20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DownloadHistory\\container.dat", lpFilePart=0x0) returned 0x8e [0202.762] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf00) returned 1 [0202.762] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DownloadHistory\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\downloadhistory\\container.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0202.764] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8990) returned 1 [0202.764] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0202.764] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\Favorites", nBufferLength=0x105, lpBuffer=0x3be130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\Favorites", lpFilePart=0x0) returned 0x7a [0202.765] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\Favorites\\", nBufferLength=0x105, lpBuffer=0x3be0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\Favorites\\", lpFilePart=0x0) returned 0x7b [0202.765] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\Favorites\\*", lpFindFileData=0x3be2e0 | out: lpFindFileData=0x3be2e0) returned 0x5d7eb0 [0202.765] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0202.765] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 0 [0202.765] FindClose (in: hFindFile=0x5d7eb0 | out: hFindFile=0x5d7eb0) returned 1 [0202.765] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0202.765] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0202.765] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0202.765] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\Favorites", nBufferLength=0x105, lpBuffer=0x3be130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\Favorites", lpFilePart=0x0) returned 0x7a [0202.765] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\Favorites\\", nBufferLength=0x105, lpBuffer=0x3be0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\Favorites\\", lpFilePart=0x0) returned 0x7b [0202.765] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\Favorites\\*", lpFindFileData=0x3be2e0 | out: lpFindFileData=0x3be2e0) returned 0x5d78b0 [0202.765] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0202.766] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 0 [0202.766] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0202.766] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0202.766] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0202.766] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0202.766] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\ImageStore", nBufferLength=0x105, lpBuffer=0x3be130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\ImageStore", lpFilePart=0x0) returned 0x7b [0202.766] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\ImageStore\\", nBufferLength=0x105, lpBuffer=0x3be0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\ImageStore\\", lpFilePart=0x0) returned 0x7c [0202.766] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\ImageStore\\*", lpFindFileData=0x3be2e0 | out: lpFindFileData=0x3be2e0) returned 0x5d7c70 [0202.766] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0202.766] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0202.767] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 0 [0202.767] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0202.767] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0202.767] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0202.767] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0202.767] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\ImageStore", nBufferLength=0x105, lpBuffer=0x3be130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\ImageStore", lpFilePart=0x0) returned 0x7b [0202.767] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\ImageStore\\", nBufferLength=0x105, lpBuffer=0x3be0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\ImageStore\\", lpFilePart=0x0) returned 0x7c [0202.767] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\ImageStore\\*", lpFindFileData=0x3be2e0 | out: lpFindFileData=0x3be2e0) returned 0x5d8090 [0202.767] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0202.767] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0202.767] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 0 [0202.767] FindClose (in: hFindFile=0x5d8090 | out: hFindFile=0x5d8090) returned 1 [0202.767] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0202.767] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0202.767] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0202.767] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\ImageStore\\6zes7lw", nBufferLength=0x105, lpBuffer=0x3be0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\ImageStore\\6zes7lw", lpFilePart=0x0) returned 0x83 [0202.768] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\ImageStore\\6zes7lw\\", nBufferLength=0x105, lpBuffer=0x3be060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\ImageStore\\6zes7lw\\", lpFilePart=0x0) returned 0x84 [0202.768] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\ImageStore\\6zes7lw\\*", lpFindFileData=0x3be270 | out: lpFindFileData=0x3be270) returned 0x5d7550 [0202.768] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0202.768] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 0 [0202.768] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0202.768] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0202.768] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0202.768] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0202.768] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\ImageStore\\6zes7lw", nBufferLength=0x105, lpBuffer=0x3be0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\ImageStore\\6zes7lw", lpFilePart=0x0) returned 0x83 [0202.768] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\ImageStore\\6zes7lw\\", nBufferLength=0x105, lpBuffer=0x3be060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\ImageStore\\6zes7lw\\", lpFilePart=0x0) returned 0x84 [0202.768] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\ImageStore\\6zes7lw\\*", lpFindFileData=0x3be270 | out: lpFindFileData=0x3be270) returned 0x5d7670 [0202.768] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0202.769] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 0 [0202.769] FindClose (in: hFindFile=0x5d7670 | out: hFindFile=0x5d7670) returned 1 [0202.769] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0202.769] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0202.769] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0202.769] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\Recovery", nBufferLength=0x105, lpBuffer=0x3be130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\Recovery", lpFilePart=0x0) returned 0x79 [0202.769] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\Recovery\\", nBufferLength=0x105, lpBuffer=0x3be0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\Recovery\\", lpFilePart=0x0) returned 0x7a [0202.769] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\Recovery\\*", lpFindFileData=0x3be2e0 | out: lpFindFileData=0x3be2e0) returned 0x5d79d0 [0202.769] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0202.769] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0202.769] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 0 [0202.769] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0202.770] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0202.770] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0202.770] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0202.770] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\Recovery", nBufferLength=0x105, lpBuffer=0x3be130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\Recovery", lpFilePart=0x0) returned 0x79 [0202.770] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\Recovery\\", nBufferLength=0x105, lpBuffer=0x3be0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\Recovery\\", lpFilePart=0x0) returned 0x7a [0202.770] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\Recovery\\*", lpFindFileData=0x3be2e0 | out: lpFindFileData=0x3be2e0) returned 0x5d78b0 [0202.770] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0202.770] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0202.770] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 0 [0202.770] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0202.770] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0202.770] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0202.770] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0202.770] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\Recovery\\Active", nBufferLength=0x105, lpBuffer=0x3be0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\Recovery\\Active", lpFilePart=0x0) returned 0x80 [0202.770] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\Recovery\\Active\\", nBufferLength=0x105, lpBuffer=0x3be060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\Recovery\\Active\\", lpFilePart=0x0) returned 0x81 [0202.771] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\Recovery\\Active\\*", lpFindFileData=0x3be270 | out: lpFindFileData=0x3be270) returned 0x5d7fd0 [0202.782] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0202.782] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0202.782] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0202.782] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 0 [0202.782] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0202.783] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0202.783] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0202.783] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0202.783] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\Recovery\\Active", nBufferLength=0x105, lpBuffer=0x3be0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\Recovery\\Active", lpFilePart=0x0) returned 0x80 [0202.783] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\Recovery\\Active\\", nBufferLength=0x105, lpBuffer=0x3be060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\Recovery\\Active\\", lpFilePart=0x0) returned 0x81 [0202.783] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\Recovery\\Active\\*", lpFindFileData=0x3be270 | out: lpFindFileData=0x3be270) returned 0x5d7a90 [0202.784] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0202.784] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0202.784] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 1 [0202.784] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be2c0 | out: lpFindFileData=0x3be2c0) returned 0 [0202.784] FindClose (in: hFindFile=0x5d7a90 | out: hFindFile=0x5d7a90) returned 1 [0202.785] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0202.785] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0202.785] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\Recovery\\Active\\RecoveryStore.{3D88D67F-6818-11E7-9BD3-C40142ECDE47}.dat", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\Recovery\\Active\\RecoveryStore.{3D88D67F-6818-11E7-9BD3-C40142ECDE47}.dat", lpFilePart=0x0) returned 0xb9 [0202.785] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0202.785] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\Recovery\\Active\\RecoveryStore.{3D88D67F-6818-11E7-9BD3-C40142ECDE47}.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\recovery\\active\\recoverystore.{3d88d67f-6818-11e7-9bd3-c40142ecde47}.dat"), fInfoLevelId=0x0, lpFileInformation=0x22ddd30 | out: lpFileInformation=0x22ddd30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x535e1f, ftCreationTime.dwHighDateTime=0x1d2fc25, ftLastAccessTime.dwLowDateTime=0x535e1f, ftLastAccessTime.dwHighDateTime=0x1d2fc25, ftLastWriteTime.dwLowDateTime=0x1ef223b, ftLastWriteTime.dwHighDateTime=0x1d2fc25, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0202.793] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0202.793] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\Recovery\\Active\\RecoveryStore.{3D88D67F-6818-11E7-9BD3-C40142ECDE47}.dat", nBufferLength=0x105, lpBuffer=0x3bdf40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\Recovery\\Active\\RecoveryStore.{3D88D67F-6818-11E7-9BD3-C40142ECDE47}.dat", lpFilePart=0x0) returned 0xb9 [0202.793] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be420) returned 1 [0202.793] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\Recovery\\Active\\RecoveryStore.{3D88D67F-6818-11E7-9BD3-C40142ECDE47}.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\recovery\\active\\recoverystore.{3d88d67f-6818-11e7-9bd3-c40142ecde47}.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0202.793] GetFileType (hFile=0x444) returned 0x1 [0202.793] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be390) returned 1 [0202.793] GetFileType (hFile=0x444) returned 0x1 [0202.793] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be5b8 | out: lpFileSizeHigh=0x3be5b8*=0x0) returned 0x1000 [0202.793] ReadFile (in: hFile=0x444, lpBuffer=0x22de240, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be4e8, lpOverlapped=0x0 | out: lpBuffer=0x22de240*, lpNumberOfBytesRead=0x3be4e8*=0x1000, lpOverlapped=0x0) returned 1 [0202.805] CloseHandle (hObject=0x444) returned 1 [0202.821] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\Recovery\\Active\\RecoveryStore.{3D88D67F-6818-11E7-9BD3-C40142ECDE47}.dat", nBufferLength=0x105, lpBuffer=0x3bdf40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\Recovery\\Active\\RecoveryStore.{3D88D67F-6818-11E7-9BD3-C40142ECDE47}.dat", lpFilePart=0x0) returned 0xb9 [0202.821] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be420) returned 1 [0202.821] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\Recovery\\Active\\RecoveryStore.{3D88D67F-6818-11E7-9BD3-C40142ECDE47}.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\recovery\\active\\recoverystore.{3d88d67f-6818-11e7-9bd3-c40142ecde47}.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0202.823] GetFileType (hFile=0x444) returned 0x1 [0202.823] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be390) returned 1 [0202.823] GetFileType (hFile=0x444) returned 0x1 [0202.823] WriteFile (in: hFile=0x444, lpBuffer=0x23590e0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x3be548, lpOverlapped=0x0 | out: lpBuffer=0x23590e0*, lpNumberOfBytesWritten=0x3be548*=0x1010, lpOverlapped=0x0) returned 1 [0202.824] CloseHandle (hObject=0x444) returned 1 [0202.824] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\Recovery\\Active\\RecoveryStore.{3D88D67F-6818-11E7-9BD3-C40142ECDE47}.dat", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\Recovery\\Active\\RecoveryStore.{3D88D67F-6818-11E7-9BD3-C40142ECDE47}.dat", lpFilePart=0x0) returned 0xb9 [0202.824] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\Recovery\\Active\\RecoveryStore.{3D88D67F-6818-11E7-9BD3-C40142ECDE47}.dat.xuy", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\Recovery\\Active\\RecoveryStore.{3D88D67F-6818-11E7-9BD3-C40142ECDE47}.dat.xuy", lpFilePart=0x0) returned 0xbd [0202.824] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0202.824] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\Recovery\\Active\\RecoveryStore.{3D88D67F-6818-11E7-9BD3-C40142ECDE47}.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\recovery\\active\\recoverystore.{3d88d67f-6818-11e7-9bd3-c40142ecde47}.dat"), fInfoLevelId=0x0, lpFileInformation=0x3be600 | out: lpFileInformation=0x3be600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x535e1f, ftCreationTime.dwHighDateTime=0x1d2fc25, ftLastAccessTime.dwLowDateTime=0x535e1f, ftLastAccessTime.dwHighDateTime=0x1d2fc25, ftLastWriteTime.dwLowDateTime=0x64bca9db, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x1010)) returned 1 [0202.824] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0202.824] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\Recovery\\Active\\RecoveryStore.{3D88D67F-6818-11E7-9BD3-C40142ECDE47}.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\recovery\\active\\recoverystore.{3d88d67f-6818-11e7-9bd3-c40142ecde47}.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\Recovery\\Active\\RecoveryStore.{3D88D67F-6818-11E7-9BD3-C40142ECDE47}.dat.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\recovery\\active\\recoverystore.{3d88d67f-6818-11e7-9bd3-c40142ecde47}.dat.xuy")) returned 1 [0202.825] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\Recovery\\Active\\{3D88D681-6818-11E7-9BD3-C40142ECDE47}.dat", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\Recovery\\Active\\{3D88D681-6818-11E7-9BD3-C40142ECDE47}.dat", lpFilePart=0x0) returned 0xab [0202.826] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be560) returned 1 [0202.826] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\Recovery\\Active\\{3D88D681-6818-11E7-9BD3-C40142ECDE47}.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\recovery\\active\\{3d88d681-6818-11e7-9bd3-c40142ecde47}.dat"), fInfoLevelId=0x0, lpFileInformation=0x235a8b8 | out: lpFileInformation=0x235a8b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x725cd8, ftCreationTime.dwHighDateTime=0x1d2fc25, ftLastAccessTime.dwLowDateTime=0x725cd8, ftLastAccessTime.dwHighDateTime=0x1d2fc25, ftLastWriteTime.dwLowDateTime=0x19c4dad, ftLastWriteTime.dwHighDateTime=0x1d2fc25, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0202.826] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be520) returned 1 [0202.826] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\Recovery\\Active\\{3D88D681-6818-11E7-9BD3-C40142ECDE47}.dat", nBufferLength=0x105, lpBuffer=0x3bdf40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\Recovery\\Active\\{3D88D681-6818-11E7-9BD3-C40142ECDE47}.dat", lpFilePart=0x0) returned 0xab [0202.826] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be420) returned 1 [0202.826] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\Recovery\\Active\\{3D88D681-6818-11E7-9BD3-C40142ECDE47}.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\recovery\\active\\{3d88d681-6818-11e7-9bd3-c40142ecde47}.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0202.826] GetFileType (hFile=0x444) returned 0x1 [0202.826] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be390) returned 1 [0202.826] GetFileType (hFile=0x444) returned 0x1 [0202.826] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be5b8 | out: lpFileSizeHigh=0x3be5b8*=0x0) returned 0x1000 [0202.826] ReadFile (in: hFile=0x444, lpBuffer=0x235ad48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be4e8, lpOverlapped=0x0 | out: lpBuffer=0x235ad48*, lpNumberOfBytesRead=0x3be4e8*=0x1000, lpOverlapped=0x0) returned 1 [0202.839] CloseHandle (hObject=0x444) returned 1 [0202.886] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\Recovery\\Active\\{3D88D681-6818-11E7-9BD3-C40142ECDE47}.dat", nBufferLength=0x105, lpBuffer=0x3bdf40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\Recovery\\Active\\{3D88D681-6818-11E7-9BD3-C40142ECDE47}.dat", lpFilePart=0x0) returned 0xab [0202.886] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be420) returned 1 [0202.887] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\Recovery\\Active\\{3D88D681-6818-11E7-9BD3-C40142ECDE47}.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\recovery\\active\\{3d88d681-6818-11e7-9bd3-c40142ecde47}.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0202.888] GetFileType (hFile=0x444) returned 0x1 [0202.888] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be390) returned 1 [0202.888] GetFileType (hFile=0x444) returned 0x1 [0202.888] WriteFile (in: hFile=0x444, lpBuffer=0x21d3d18*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x3be548, lpOverlapped=0x0 | out: lpBuffer=0x21d3d18*, lpNumberOfBytesWritten=0x3be548*=0x1010, lpOverlapped=0x0) returned 1 [0202.889] CloseHandle (hObject=0x444) returned 1 [0202.889] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\Recovery\\Active\\{3D88D681-6818-11E7-9BD3-C40142ECDE47}.dat", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\Recovery\\Active\\{3D88D681-6818-11E7-9BD3-C40142ECDE47}.dat", lpFilePart=0x0) returned 0xab [0202.890] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\Recovery\\Active\\{3D88D681-6818-11E7-9BD3-C40142ECDE47}.dat.xuy", nBufferLength=0x105, lpBuffer=0x3be0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\Recovery\\Active\\{3D88D681-6818-11E7-9BD3-C40142ECDE47}.dat.xuy", lpFilePart=0x0) returned 0xaf [0202.890] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0202.890] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\Recovery\\Active\\{3D88D681-6818-11E7-9BD3-C40142ECDE47}.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\recovery\\active\\{3d88d681-6818-11e7-9bd3-c40142ecde47}.dat"), fInfoLevelId=0x0, lpFileInformation=0x3be600 | out: lpFileInformation=0x3be600*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x725cd8, ftCreationTime.dwHighDateTime=0x1d2fc25, ftLastAccessTime.dwLowDateTime=0x725cd8, ftLastAccessTime.dwHighDateTime=0x1d2fc25, ftLastWriteTime.dwLowDateTime=0x64c892cb, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x1010)) returned 1 [0202.890] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0202.890] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\Recovery\\Active\\{3D88D681-6818-11E7-9BD3-C40142ECDE47}.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\recovery\\active\\{3d88d681-6818-11e7-9bd3-c40142ecde47}.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\Recovery\\Active\\{3D88D681-6818-11E7-9BD3-C40142ECDE47}.dat.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\recovery\\active\\{3d88d681-6818-11e7-9bd3-c40142ecde47}.dat.xuy")) returned 1 [0202.891] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0202.891] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Temp", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Temp", lpFilePart=0x0) returned 0x5a [0202.891] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Temp\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Temp\\", lpFilePart=0x0) returned 0x5b [0202.891] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Temp\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7a30 [0202.891] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0202.892] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0202.892] FindClose (in: hFindFile=0x5d7a30 | out: hFindFile=0x5d7a30) returned 1 [0202.892] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0202.892] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0202.892] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0202.892] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Temp", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Temp", lpFilePart=0x0) returned 0x5a [0202.892] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Temp\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Temp\\", lpFilePart=0x0) returned 0x5b [0202.892] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Temp\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7cd0 [0202.892] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0202.892] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0202.892] FindClose (in: hFindFile=0x5d7cd0 | out: hFindFile=0x5d7cd0) returned 1 [0202.892] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0202.892] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0202.892] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0202.892] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData", lpFilePart=0x0) returned 0x5a [0202.893] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\", lpFilePart=0x0) returned 0x5b [0202.893] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d81b0 [0202.909] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0202.909] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0202.909] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0202.909] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0202.910] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0202.910] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0202.910] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0202.910] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData", lpFilePart=0x0) returned 0x5a [0202.910] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\", lpFilePart=0x0) returned 0x5b [0202.910] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7370 [0202.910] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0202.910] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0202.910] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0202.910] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0202.910] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0202.910] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0202.910] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0202.910] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User", lpFilePart=0x0) returned 0x5f [0202.910] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\", lpFilePart=0x0) returned 0x60 [0202.910] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7cd0 [0202.913] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0202.913] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0202.913] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0202.913] FindClose (in: hFindFile=0x5d7cd0 | out: hFindFile=0x5d7cd0) returned 1 [0202.913] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0202.913] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0202.913] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0202.913] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User", lpFilePart=0x0) returned 0x5f [0202.913] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\", lpFilePart=0x0) returned 0x60 [0202.913] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d78b0 [0202.914] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0202.914] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0202.914] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0202.914] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0202.914] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0202.914] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0202.914] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0202.914] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default", lpFilePart=0x0) returned 0x67 [0202.914] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\", lpFilePart=0x0) returned 0x68 [0202.914] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d7a30 [0202.914] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0202.914] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0202.915] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0202.915] FindClose (in: hFindFile=0x5d7a30 | out: hFindFile=0x5d7a30) returned 1 [0202.915] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0202.915] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0202.915] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0202.915] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default", lpFilePart=0x0) returned 0x67 [0202.915] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\", lpFilePart=0x0) returned 0x68 [0202.915] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d78b0 [0202.915] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0202.915] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0202.915] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0202.915] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0202.915] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0202.915] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0202.915] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0202.916] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB", lpFilePart=0x0) returned 0x72 [0202.916] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB\\", lpFilePart=0x0) returned 0x73 [0202.916] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d7670 [0202.921] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0202.921] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0202.922] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0202.922] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0202.922] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0202.922] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0202.922] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0202.922] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0202.922] FindClose (in: hFindFile=0x5d7670 | out: hFindFile=0x5d7670) returned 1 [0202.923] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0202.923] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0202.923] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0202.923] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB", lpFilePart=0x0) returned 0x72 [0202.923] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB\\", lpFilePart=0x0) returned 0x73 [0202.923] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d7af0 [0202.924] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0202.924] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0202.924] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0202.924] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0202.924] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0202.924] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0202.925] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0202.925] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0202.925] FindClose (in: hFindFile=0x5d7af0 | out: hFindFile=0x5d7af0) returned 1 [0202.925] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0202.925] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0202.925] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB\\edb.chk", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB\\edb.chk", lpFilePart=0x0) returned 0x7a [0202.926] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0202.926] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB\\edb.chk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\appdata\\user\\default\\indexed db\\edb.chk"), fInfoLevelId=0x0, lpFileInformation=0x21e2810 | out: lpFileInformation=0x21e2810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2bb8593, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x2bb8593, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x69189d4d, ftLastWriteTime.dwHighDateTime=0x1d2d434, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0202.928] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0202.928] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB\\edb.chk", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB\\edb.chk", lpFilePart=0x0) returned 0x7a [0202.928] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0202.928] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB\\edb.chk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\appdata\\user\\default\\indexed db\\edb.chk"), fInfoLevelId=0x0, lpFileInformation=0x21e29b0 | out: lpFileInformation=0x21e29b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2bb8593, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x2bb8593, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x69189d4d, ftLastWriteTime.dwHighDateTime=0x1d2d434, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0202.929] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0202.929] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB\\edb.chk", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB\\edb.chk", lpFilePart=0x0) returned 0x7a [0202.929] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0202.929] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB\\edb.chk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\appdata\\user\\default\\indexed db\\edb.chk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0202.930] GetFileType (hFile=0x444) returned 0x1 [0202.930] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0202.930] GetFileType (hFile=0x444) returned 0x1 [0202.930] ReadFile (in: hFile=0x444, lpBuffer=0x21e4e20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x21e4e20*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0202.942] CloseHandle (hObject=0x444) returned 1 [0202.942] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB\\edb.chk", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB\\edb.chk", lpFilePart=0x0) returned 0x7a [0202.942] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0202.942] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB\\edb.chk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\appdata\\user\\default\\indexed db\\edb.chk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0202.942] GetFileType (hFile=0x444) returned 0x1 [0202.942] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0202.942] GetFileType (hFile=0x444) returned 0x1 [0202.942] WriteFile (in: hFile=0x444, lpBuffer=0x21e2b30*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x21e2b30*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0202.943] CloseHandle (hObject=0x444) returned 1 [0202.943] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB\\edb.chk", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB\\edb.chk", lpFilePart=0x0) returned 0x7a [0202.943] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB\\edb.chk.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB\\edb.chk.xuy", lpFilePart=0x0) returned 0x7e [0202.943] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0202.943] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB\\edb.chk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\appdata\\user\\default\\indexed db\\edb.chk"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2bb8593, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x2bb8593, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x64cfbdd8, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0202.943] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0202.943] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB\\edb.chk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\appdata\\user\\default\\indexed db\\edb.chk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB\\edb.chk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\appdata\\user\\default\\indexed db\\edb.chk.xuy")) returned 1 [0202.944] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB\\edb.log", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB\\edb.log", lpFilePart=0x0) returned 0x7a [0202.944] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0202.944] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB\\edb.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\appdata\\user\\default\\indexed db\\edb.log"), fInfoLevelId=0x0, lpFileInformation=0x2261348 | out: lpFileInformation=0x2261348*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b89f42, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x2b89f42, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x69189d4d, ftLastWriteTime.dwHighDateTime=0x1d2d434, nFileSizeHigh=0x0, nFileSizeLow=0x80000)) returned 1 [0202.944] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0202.944] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB\\edb.log", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB\\edb.log", lpFilePart=0x0) returned 0x7a [0202.945] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0202.945] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB\\edb.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\appdata\\user\\default\\indexed db\\edb.log"), fInfoLevelId=0x0, lpFileInformation=0x22614e8 | out: lpFileInformation=0x22614e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b89f42, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x2b89f42, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x69189d4d, ftLastWriteTime.dwHighDateTime=0x1d2d434, nFileSizeHigh=0x0, nFileSizeLow=0x80000)) returned 1 [0202.945] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0202.945] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB\\edb.log", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB\\edb.log", lpFilePart=0x0) returned 0x7a [0202.945] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0202.945] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB\\edb.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\appdata\\user\\default\\indexed db\\edb.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0202.946] GetFileType (hFile=0x444) returned 0x1 [0202.946] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0202.946] GetFileType (hFile=0x444) returned 0x1 [0202.946] ReadFile (in: hFile=0x444, lpBuffer=0x2263958, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x2263958*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0202.971] CloseHandle (hObject=0x444) returned 1 [0202.971] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB\\edb.log", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB\\edb.log", lpFilePart=0x0) returned 0x7a [0202.971] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0202.971] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB\\edb.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\appdata\\user\\default\\indexed db\\edb.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0202.971] GetFileType (hFile=0x444) returned 0x1 [0202.971] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0202.971] GetFileType (hFile=0x444) returned 0x1 [0202.971] WriteFile (in: hFile=0x444, lpBuffer=0x2261668*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x2261668*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0202.971] CloseHandle (hObject=0x444) returned 1 [0202.972] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB\\edb.log", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB\\edb.log", lpFilePart=0x0) returned 0x7a [0202.972] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB\\edb.log.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB\\edb.log.xuy", lpFilePart=0x0) returned 0x7e [0202.972] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0202.972] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB\\edb.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\appdata\\user\\default\\indexed db\\edb.log"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b89f42, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x2b89f42, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x64d47dd9, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x80000)) returned 1 [0202.972] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0202.972] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB\\edb.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\appdata\\user\\default\\indexed db\\edb.log"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB\\edb.log.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\appdata\\user\\default\\indexed db\\edb.log.xuy")) returned 1 [0202.973] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB\\edbres00001.jrs", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB\\edbres00001.jrs", lpFilePart=0x0) returned 0x82 [0202.973] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0202.973] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB\\edbres00001.jrs" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\appdata\\user\\default\\indexed db\\edbres00001.jrs"), fInfoLevelId=0x0, lpFileInformation=0x22dfe80 | out: lpFileInformation=0x22dfe80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2baaeaf, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x2baaeaf, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x2bae916, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x80000)) returned 1 [0202.973] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0202.973] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB\\edbres00001.jrs", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB\\edbres00001.jrs", lpFilePart=0x0) returned 0x82 [0202.973] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0202.973] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB\\edbres00001.jrs" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\appdata\\user\\default\\indexed db\\edbres00001.jrs"), fInfoLevelId=0x0, lpFileInformation=0x22e0040 | out: lpFileInformation=0x22e0040*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2baaeaf, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x2baaeaf, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x2bae916, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x80000)) returned 1 [0202.973] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0202.973] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB\\edbres00001.jrs", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB\\edbres00001.jrs", lpFilePart=0x0) returned 0x82 [0202.973] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0202.974] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB\\edbres00001.jrs" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\appdata\\user\\default\\indexed db\\edbres00001.jrs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0202.974] GetFileType (hFile=0x444) returned 0x1 [0202.974] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0202.974] GetFileType (hFile=0x444) returned 0x1 [0202.975] ReadFile (in: hFile=0x444, lpBuffer=0x22e24f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x22e24f0*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0202.987] CloseHandle (hObject=0x444) returned 1 [0202.987] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB\\edbres00001.jrs", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB\\edbres00001.jrs", lpFilePart=0x0) returned 0x82 [0202.987] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0202.988] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB\\edbres00001.jrs" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\appdata\\user\\default\\indexed db\\edbres00001.jrs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0202.988] GetFileType (hFile=0x444) returned 0x1 [0202.988] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0202.988] GetFileType (hFile=0x444) returned 0x1 [0202.988] WriteFile (in: hFile=0x444, lpBuffer=0x22e01e0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x22e01e0*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0202.988] CloseHandle (hObject=0x444) returned 1 [0202.988] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB\\edbres00001.jrs", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB\\edbres00001.jrs", lpFilePart=0x0) returned 0x82 [0202.988] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB\\edbres00001.jrs.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB\\edbres00001.jrs.xuy", lpFilePart=0x0) returned 0x86 [0202.988] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0202.988] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB\\edbres00001.jrs" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\appdata\\user\\default\\indexed db\\edbres00001.jrs"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2baaeaf, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x2baaeaf, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x64d6e0c7, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x80000)) returned 1 [0202.988] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0202.988] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB\\edbres00001.jrs" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\appdata\\user\\default\\indexed db\\edbres00001.jrs"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB\\edbres00001.jrs.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\appdata\\user\\default\\indexed db\\edbres00001.jrs.xuy")) returned 1 [0202.990] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB\\edbres00002.jrs", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB\\edbres00002.jrs", lpFilePart=0x0) returned 0x82 [0202.990] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0202.990] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB\\edbres00002.jrs" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\appdata\\user\\default\\indexed db\\edbres00002.jrs"), fInfoLevelId=0x0, lpFileInformation=0x235ea68 | out: lpFileInformation=0x235ea68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2bb105e, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x2bb105e, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x2bb376a, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x80000)) returned 1 [0202.990] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0202.990] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB\\edbres00002.jrs", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB\\edbres00002.jrs", lpFilePart=0x0) returned 0x82 [0202.990] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0202.990] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB\\edbres00002.jrs" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\appdata\\user\\default\\indexed db\\edbres00002.jrs"), fInfoLevelId=0x0, lpFileInformation=0x235ec28 | out: lpFileInformation=0x235ec28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2bb105e, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x2bb105e, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x2bb376a, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x80000)) returned 1 [0202.990] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0202.990] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB\\edbres00002.jrs", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB\\edbres00002.jrs", lpFilePart=0x0) returned 0x82 [0202.990] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0202.990] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB\\edbres00002.jrs" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\appdata\\user\\default\\indexed db\\edbres00002.jrs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0202.991] GetFileType (hFile=0x444) returned 0x1 [0202.991] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0202.991] GetFileType (hFile=0x444) returned 0x1 [0202.991] ReadFile (in: hFile=0x444, lpBuffer=0x23610d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x23610d8*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0203.006] CloseHandle (hObject=0x444) returned 1 [0203.006] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB\\edbres00002.jrs", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB\\edbres00002.jrs", lpFilePart=0x0) returned 0x82 [0203.006] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0203.006] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB\\edbres00002.jrs" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\appdata\\user\\default\\indexed db\\edbres00002.jrs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0203.006] GetFileType (hFile=0x444) returned 0x1 [0203.006] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0203.006] GetFileType (hFile=0x444) returned 0x1 [0203.006] WriteFile (in: hFile=0x444, lpBuffer=0x21866c0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x21866c0*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0203.006] CloseHandle (hObject=0x444) returned 1 [0203.006] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB\\edbres00002.jrs", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB\\edbres00002.jrs", lpFilePart=0x0) returned 0x82 [0203.006] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB\\edbres00002.jrs.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB\\edbres00002.jrs.xuy", lpFilePart=0x0) returned 0x86 [0203.006] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0203.006] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB\\edbres00002.jrs" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\appdata\\user\\default\\indexed db\\edbres00002.jrs"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2bb105e, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x2bb105e, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x64d944a7, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x80000)) returned 1 [0203.007] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0203.007] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB\\edbres00002.jrs" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\appdata\\user\\default\\indexed db\\edbres00002.jrs"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB\\edbres00002.jrs.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\appdata\\user\\default\\indexed db\\edbres00002.jrs.xuy")) returned 1 [0203.008] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB\\edbtmp.log", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB\\edbtmp.log", lpFilePart=0x0) returned 0x7d [0203.008] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0203.008] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB\\edbtmp.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\appdata\\user\\default\\indexed db\\edbtmp.log"), fInfoLevelId=0x0, lpFileInformation=0x21de7f8 | out: lpFileInformation=0x21de7f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b89f42, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x2ba607d, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x69189d4d, ftLastWriteTime.dwHighDateTime=0x1d2d434, nFileSizeHigh=0x0, nFileSizeLow=0x80000)) returned 1 [0203.008] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0203.008] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB\\edbtmp.log", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB\\edbtmp.log", lpFilePart=0x0) returned 0x7d [0203.008] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0203.008] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB\\edbtmp.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\appdata\\user\\default\\indexed db\\edbtmp.log"), fInfoLevelId=0x0, lpFileInformation=0x21de9a8 | out: lpFileInformation=0x21de9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b89f42, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x2ba607d, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x69189d4d, ftLastWriteTime.dwHighDateTime=0x1d2d434, nFileSizeHigh=0x0, nFileSizeLow=0x80000)) returned 1 [0203.008] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0203.008] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB\\edbtmp.log", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB\\edbtmp.log", lpFilePart=0x0) returned 0x7d [0203.008] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0203.008] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB\\edbtmp.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\appdata\\user\\default\\indexed db\\edbtmp.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0203.009] GetFileType (hFile=0x444) returned 0x1 [0203.009] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0203.009] GetFileType (hFile=0x444) returned 0x1 [0203.009] ReadFile (in: hFile=0x444, lpBuffer=0x21e0e38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x21e0e38*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0203.026] CloseHandle (hObject=0x444) returned 1 [0203.026] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB\\edbtmp.log", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB\\edbtmp.log", lpFilePart=0x0) returned 0x7d [0203.026] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0203.026] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB\\edbtmp.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\appdata\\user\\default\\indexed db\\edbtmp.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0203.027] GetFileType (hFile=0x444) returned 0x1 [0203.027] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0203.027] GetFileType (hFile=0x444) returned 0x1 [0203.027] WriteFile (in: hFile=0x444, lpBuffer=0x21deb38*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x21deb38*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0203.027] CloseHandle (hObject=0x444) returned 1 [0203.027] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB\\edbtmp.log", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB\\edbtmp.log", lpFilePart=0x0) returned 0x7d [0203.027] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB\\edbtmp.log.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB\\edbtmp.log.xuy", lpFilePart=0x0) returned 0x81 [0203.027] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0203.027] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB\\edbtmp.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\appdata\\user\\default\\indexed db\\edbtmp.log"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b89f42, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x2ba607d, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x64dba54f, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x80000)) returned 1 [0203.027] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0203.027] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB\\edbtmp.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\appdata\\user\\default\\indexed db\\edbtmp.log"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB\\edbtmp.log.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\appdata\\user\\default\\indexed db\\edbtmp.log.xuy")) returned 1 [0203.028] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB\\IndexedDB.edb", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB\\IndexedDB.edb", lpFilePart=0x0) returned 0x80 [0203.028] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0203.028] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB\\IndexedDB.edb" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\appdata\\user\\default\\indexed db\\indexeddb.edb"), fInfoLevelId=0x0, lpFileInformation=0x225d388 | out: lpFileInformation=0x225d388*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2bcaa99, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x2bcaa99, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x69163bc2, ftLastWriteTime.dwHighDateTime=0x1d2d434, nFileSizeHigh=0x0, nFileSizeLow=0x280000)) returned 1 [0203.029] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0203.029] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB\\IndexedDB.edb", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB\\IndexedDB.edb", lpFilePart=0x0) returned 0x80 [0203.029] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0203.029] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB\\IndexedDB.edb" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\appdata\\user\\default\\indexed db\\indexeddb.edb"), fInfoLevelId=0x0, lpFileInformation=0x225d548 | out: lpFileInformation=0x225d548*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2bcaa99, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x2bcaa99, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x69163bc2, ftLastWriteTime.dwHighDateTime=0x1d2d434, nFileSizeHigh=0x0, nFileSizeLow=0x280000)) returned 1 [0203.029] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0203.029] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB\\IndexedDB.edb", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB\\IndexedDB.edb", lpFilePart=0x0) returned 0x80 [0203.029] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0203.029] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB\\IndexedDB.edb" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\appdata\\user\\default\\indexed db\\indexeddb.edb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0203.030] GetFileType (hFile=0x444) returned 0x1 [0203.030] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0203.030] GetFileType (hFile=0x444) returned 0x1 [0203.030] ReadFile (in: hFile=0x444, lpBuffer=0x225f9f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x225f9f8*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0203.060] CloseHandle (hObject=0x444) returned 1 [0203.060] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB\\IndexedDB.edb", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB\\IndexedDB.edb", lpFilePart=0x0) returned 0x80 [0203.060] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0203.060] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB\\IndexedDB.edb" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\appdata\\user\\default\\indexed db\\indexeddb.edb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0203.060] GetFileType (hFile=0x444) returned 0x1 [0203.060] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0203.060] GetFileType (hFile=0x444) returned 0x1 [0203.060] WriteFile (in: hFile=0x444, lpBuffer=0x225d6e8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x225d6e8*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0203.060] CloseHandle (hObject=0x444) returned 1 [0203.060] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB\\IndexedDB.edb", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB\\IndexedDB.edb", lpFilePart=0x0) returned 0x80 [0203.060] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB\\IndexedDB.edb.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB\\IndexedDB.edb.xuy", lpFilePart=0x0) returned 0x84 [0203.060] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0203.060] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB\\IndexedDB.edb" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\appdata\\user\\default\\indexed db\\indexeddb.edb"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2bcaa99, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x2bcaa99, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x64e06af9, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x280000)) returned 1 [0203.061] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0203.061] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB\\IndexedDB.edb" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\appdata\\user\\default\\indexed db\\indexeddb.edb"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB\\IndexedDB.edb.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\appdata\\user\\default\\indexed db\\indexeddb.edb.xuy")) returned 1 [0203.063] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0203.063] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\LocalCache", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\LocalCache", lpFilePart=0x0) returned 0x5d [0203.063] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\LocalCache\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\LocalCache\\", lpFilePart=0x0) returned 0x5e [0203.063] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\LocalCache\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d81b0 [0203.063] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0203.063] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0203.063] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0203.063] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0203.063] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0203.063] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0203.063] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\LocalCache", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\LocalCache", lpFilePart=0x0) returned 0x5d [0203.063] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\LocalCache\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\LocalCache\\", lpFilePart=0x0) returned 0x5e [0203.064] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\LocalCache\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d79d0 [0203.064] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0203.064] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0203.064] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0203.064] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0203.064] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0203.064] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0203.064] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\LocalState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\LocalState", lpFilePart=0x0) returned 0x5d [0203.064] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\LocalState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\LocalState\\", lpFilePart=0x0) returned 0x5e [0203.064] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\LocalState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7fd0 [0203.065] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0203.065] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0203.065] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0203.065] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0203.065] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0203.065] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0203.065] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0203.065] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\LocalState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\LocalState", lpFilePart=0x0) returned 0x5d [0203.065] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\LocalState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\LocalState\\", lpFilePart=0x0) returned 0x5e [0203.065] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\LocalState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d78b0 [0203.065] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0203.066] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0203.066] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0203.066] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0203.066] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0203.066] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0203.066] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0203.066] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\LocalState\\PinnedTiles", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\LocalState\\PinnedTiles", lpFilePart=0x0) returned 0x69 [0203.066] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\LocalState\\PinnedTiles\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\LocalState\\PinnedTiles\\", lpFilePart=0x0) returned 0x6a [0203.066] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\LocalState\\PinnedTiles\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7c70 [0203.066] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0203.066] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0203.066] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0203.066] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0203.067] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0203.067] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0203.067] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\LocalState\\PinnedTiles", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\LocalState\\PinnedTiles", lpFilePart=0x0) returned 0x69 [0203.067] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\LocalState\\PinnedTiles\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\LocalState\\PinnedTiles\\", lpFilePart=0x0) returned 0x6a [0203.067] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\LocalState\\PinnedTiles\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7c70 [0203.067] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0203.067] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0203.067] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0203.067] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0203.067] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0203.067] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0203.067] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Microsoft.MicrosoftEdge_20.10240.16384.0_neutral__8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Microsoft.MicrosoftEdge_20.10240.16384.0_neutral__8wekyb3d8bbwe", lpFilePart=0x0) returned 0x92 [0203.067] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Microsoft.MicrosoftEdge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Microsoft.MicrosoftEdge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\", lpFilePart=0x0) returned 0x93 [0203.067] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Microsoft.MicrosoftEdge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7370 [0203.067] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0203.068] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0203.068] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0203.068] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0203.069] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0203.069] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0203.069] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0203.069] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Microsoft.MicrosoftEdge_20.10240.16384.0_neutral__8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Microsoft.MicrosoftEdge_20.10240.16384.0_neutral__8wekyb3d8bbwe", lpFilePart=0x0) returned 0x92 [0203.069] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Microsoft.MicrosoftEdge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Microsoft.MicrosoftEdge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\", lpFilePart=0x0) returned 0x93 [0203.069] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Microsoft.MicrosoftEdge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7eb0 [0203.070] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0203.070] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0203.070] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0203.070] FindClose (in: hFindFile=0x5d7eb0 | out: hFindFile=0x5d7eb0) returned 1 [0203.070] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0203.070] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0203.070] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0203.070] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Microsoft.MicrosoftEdge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\ActivationStore", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Microsoft.MicrosoftEdge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\ActivationStore", lpFilePart=0x0) returned 0xa2 [0203.070] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Microsoft.MicrosoftEdge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\ActivationStore\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Microsoft.MicrosoftEdge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\ActivationStore\\", lpFilePart=0x0) returned 0xa3 [0203.070] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Microsoft.MicrosoftEdge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\ActivationStore\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7d90 [0203.080] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0203.080] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0203.080] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0203.080] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0203.080] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0203.080] FindClose (in: hFindFile=0x5d7d90 | out: hFindFile=0x5d7d90) returned 1 [0203.081] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0203.081] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0203.081] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0203.081] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Microsoft.MicrosoftEdge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\ActivationStore", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Microsoft.MicrosoftEdge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\ActivationStore", lpFilePart=0x0) returned 0xa2 [0203.081] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Microsoft.MicrosoftEdge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\ActivationStore\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Microsoft.MicrosoftEdge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\ActivationStore\\", lpFilePart=0x0) returned 0xa3 [0203.081] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Microsoft.MicrosoftEdge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\ActivationStore\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7fd0 [0203.082] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0203.082] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0203.082] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0203.082] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0203.082] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0203.082] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0203.083] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0203.083] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0203.083] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Microsoft.MicrosoftEdge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Microsoft.MicrosoftEdge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xb6 [0203.083] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0203.083] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Microsoft.MicrosoftEdge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\microsoft.microsoftedge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), fInfoLevelId=0x0, lpFileInformation=0x22e9bc0 | out: lpFileInformation=0x22e9bc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1d03a0e, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0x3389fe7, ftLastAccessTime.dwHighDateTime=0x1d2fc25, ftLastWriteTime.dwLowDateTime=0xb1e34cfb, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x10000)) returned 1 [0203.087] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0203.087] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Microsoft.MicrosoftEdge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Microsoft.MicrosoftEdge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xb6 [0203.087] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0203.087] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Microsoft.MicrosoftEdge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\microsoft.microsoftedge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), fInfoLevelId=0x0, lpFileInformation=0x22e9df0 | out: lpFileInformation=0x22e9df0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1d03a0e, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0x3389fe7, ftLastAccessTime.dwHighDateTime=0x1d2fc25, ftLastWriteTime.dwLowDateTime=0xb1e34cfb, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x10000)) returned 1 [0203.087] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0203.087] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Microsoft.MicrosoftEdge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Microsoft.MicrosoftEdge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xb6 [0203.087] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0203.087] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Microsoft.MicrosoftEdge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\microsoft.microsoftedge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0203.089] GetFileType (hFile=0x444) returned 0x1 [0203.089] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0203.089] GetFileType (hFile=0x444) returned 0x1 [0203.089] ReadFile (in: hFile=0x444, lpBuffer=0x22ec380, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x22ec380*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0203.102] CloseHandle (hObject=0x444) returned 1 [0203.102] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Microsoft.MicrosoftEdge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Microsoft.MicrosoftEdge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xb6 [0203.102] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0203.102] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Microsoft.MicrosoftEdge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\microsoft.microsoftedge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0203.102] GetFileType (hFile=0x444) returned 0x1 [0203.102] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0203.102] GetFileType (hFile=0x444) returned 0x1 [0203.102] WriteFile (in: hFile=0x444, lpBuffer=0x22ea000*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x22ea000*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0203.103] CloseHandle (hObject=0x444) returned 1 [0203.103] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Microsoft.MicrosoftEdge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Microsoft.MicrosoftEdge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xb6 [0203.103] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Microsoft.MicrosoftEdge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Microsoft.MicrosoftEdge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.xuy", lpFilePart=0x0) returned 0xba [0203.103] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0203.103] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Microsoft.MicrosoftEdge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\microsoft.microsoftedge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1d03a0e, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0x3389fe7, ftLastAccessTime.dwHighDateTime=0x1d2fc25, ftLastWriteTime.dwLowDateTime=0x64e79152, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x10000)) returned 1 [0203.103] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0203.103] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Microsoft.MicrosoftEdge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\microsoft.microsoftedge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Microsoft.MicrosoftEdge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\microsoft.microsoftedge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\activationstore\\activationstore.dat.xuy")) returned 1 [0203.104] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Microsoft.MicrosoftEdge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Microsoft.MicrosoftEdge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xbb [0203.104] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0203.104] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Microsoft.MicrosoftEdge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\microsoft.microsoftedge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x2368aa0 | out: lpFileInformation=0x2368aa0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xb1d03a0e, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb1d03a0e, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xb1d03a0e, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0xd000)) returned 1 [0203.105] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0203.105] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Microsoft.MicrosoftEdge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Microsoft.MicrosoftEdge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xbb [0203.105] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0203.105] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Microsoft.MicrosoftEdge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\microsoft.microsoftedge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x2368ce8 | out: lpFileInformation=0x2368ce8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xb1d03a0e, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb1d03a0e, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xb1d03a0e, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0xd000)) returned 1 [0203.105] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0203.105] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Microsoft.MicrosoftEdge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Microsoft.MicrosoftEdge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xbb [0203.105] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0203.105] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Microsoft.MicrosoftEdge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\microsoft.microsoftedge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0203.106] GetFileType (hFile=0x444) returned 0x1 [0203.106] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0203.106] GetFileType (hFile=0x444) returned 0x1 [0203.106] ReadFile (in: hFile=0x444, lpBuffer=0x236b2a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x236b2a8*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0203.120] CloseHandle (hObject=0x444) returned 1 [0203.120] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Microsoft.MicrosoftEdge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Microsoft.MicrosoftEdge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xbb [0203.120] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0203.120] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Microsoft.MicrosoftEdge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\microsoft.microsoftedge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0203.120] GetFileType (hFile=0x444) returned 0x1 [0203.120] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0203.120] GetFileType (hFile=0x444) returned 0x1 [0203.120] WriteFile (in: hFile=0x444, lpBuffer=0x2186300*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x2186300*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0203.121] CloseHandle (hObject=0x444) returned 1 [0203.121] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Microsoft.MicrosoftEdge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Microsoft.MicrosoftEdge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xbb [0203.121] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Microsoft.MicrosoftEdge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Microsoft.MicrosoftEdge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1.xuy", lpFilePart=0x0) returned 0xbf [0203.121] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0203.121] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Microsoft.MicrosoftEdge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\microsoft.microsoftedge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xb1d03a0e, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb1d03a0e, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x64e9f253, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xd000)) returned 1 [0203.121] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0203.121] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Microsoft.MicrosoftEdge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\microsoft.microsoftedge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Microsoft.MicrosoftEdge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\microsoft.microsoftedge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1.xuy")) returned 1 [0203.122] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Microsoft.MicrosoftEdge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Microsoft.MicrosoftEdge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xbb [0203.122] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0203.122] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Microsoft.MicrosoftEdge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\microsoft.microsoftedge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x21e7620 | out: lpFileInformation=0x21e7620*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xb1d03a0e, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb1d03a0e, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xb1d03a0e, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0203.123] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0203.123] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Microsoft.MicrosoftEdge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Microsoft.MicrosoftEdge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xbb [0203.123] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0203.123] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Microsoft.MicrosoftEdge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\microsoft.microsoftedge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0203.123] GetFileType (hFile=0x444) returned 0x1 [0203.123] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0203.123] GetFileType (hFile=0x444) returned 0x1 [0203.123] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x0 [0203.123] CloseHandle (hObject=0x444) returned 1 [0203.158] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Microsoft.MicrosoftEdge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Microsoft.MicrosoftEdge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xbb [0203.158] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0203.158] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Microsoft.MicrosoftEdge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\microsoft.microsoftedge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0203.160] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb070) returned 1 [0203.160] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Microsoft.MicrosoftEdge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbcf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Microsoft.MicrosoftEdge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xbb [0203.160] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0203.160] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Microsoft.MicrosoftEdge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\microsoft.microsoftedge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x3bc270 | out: lpFileInformation=0x3bc270*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xb1d03a0e, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb1d03a0e, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xb1d03a0e, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0203.160] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc150) returned 1 [0203.160] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Microsoft.MicrosoftEdge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbd10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Microsoft.MicrosoftEdge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xbb [0203.160] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0203.160] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Microsoft.MicrosoftEdge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\microsoft.microsoftedge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x225e6b8 | out: lpFileInformation=0x225e6b8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xb1d03a0e, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb1d03a0e, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xb1d03a0e, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0203.160] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc150) returned 1 [0203.160] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Microsoft.MicrosoftEdge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Microsoft.MicrosoftEdge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xbb [0203.160] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc050) returned 1 [0203.160] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Microsoft.MicrosoftEdge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\microsoft.microsoftedge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0203.161] GetFileType (hFile=0x444) returned 0x1 [0203.161] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbfc0) returned 1 [0203.161] GetFileType (hFile=0x444) returned 0x1 [0203.161] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc1e8 | out: lpFileSizeHigh=0x3bc1e8*=0x0) returned 0x0 [0203.161] CloseHandle (hObject=0x444) returned 1 [0203.200] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Microsoft.MicrosoftEdge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Microsoft.MicrosoftEdge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xbb [0203.200] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc050) returned 1 [0203.200] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Microsoft.MicrosoftEdge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\microsoft.microsoftedge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0203.202] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8ae0) returned 1 [0203.203] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0203.203] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\RoamingState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\RoamingState", lpFilePart=0x0) returned 0x5f [0203.203] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\RoamingState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\RoamingState\\", lpFilePart=0x0) returned 0x60 [0203.203] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\RoamingState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d78b0 [0203.203] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0203.203] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0203.203] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0203.203] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0203.203] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0203.203] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0203.203] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\RoamingState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\RoamingState", lpFilePart=0x0) returned 0x5f [0203.203] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\RoamingState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\RoamingState\\", lpFilePart=0x0) returned 0x60 [0203.203] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\RoamingState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7a30 [0203.204] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0203.204] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0203.204] FindClose (in: hFindFile=0x5d7a30 | out: hFindFile=0x5d7a30) returned 1 [0203.204] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0203.204] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0203.204] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0203.204] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Settings", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Settings", lpFilePart=0x0) returned 0x5b [0203.204] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Settings\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Settings\\", lpFilePart=0x0) returned 0x5c [0203.204] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Settings\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d78b0 [0203.218] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0203.218] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0203.218] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0203.218] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0203.218] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0203.219] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0203.219] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0203.219] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0203.219] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0203.219] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0203.219] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Settings", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Settings", lpFilePart=0x0) returned 0x5b [0203.219] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Settings\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Settings\\", lpFilePart=0x0) returned 0x5c [0203.219] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Settings\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7670 [0203.220] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0203.220] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0203.220] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0203.221] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0203.221] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0203.221] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0203.221] FindClose (in: hFindFile=0x5d7670 | out: hFindFile=0x5d7670) returned 1 [0203.222] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0203.222] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Settings\\roaming.lock", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Settings\\roaming.lock", lpFilePart=0x0) returned 0x68 [0203.222] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\settings\\roaming.lock"), fInfoLevelId=0x0, lpFileInformation=0x22da9f8 | out: lpFileInformation=0x22da9f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1b39dd1, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb1b39dd1, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xb1b39dd1, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0203.222] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Settings\\roaming.lock", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Settings\\roaming.lock", lpFilePart=0x0) returned 0x68 [0203.222] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\settings\\roaming.lock"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0203.223] GetFileType (hFile=0x444) returned 0x1 [0203.223] GetFileType (hFile=0x444) returned 0x1 [0203.223] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0x0 [0203.223] CloseHandle (hObject=0x444) returned 1 [0203.233] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Settings\\roaming.lock", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Settings\\roaming.lock", lpFilePart=0x0) returned 0x68 [0203.233] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\settings\\roaming.lock"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0203.234] GetFileType (hFile=0x444) returned 0x1 [0203.234] GetFileType (hFile=0x444) returned 0x1 [0203.234] WriteFile (in: hFile=0x444, lpBuffer=0x2350e60*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x3be628, lpOverlapped=0x0 | out: lpBuffer=0x2350e60*, lpNumberOfBytesWritten=0x3be628*=0x10, lpOverlapped=0x0) returned 1 [0203.235] CloseHandle (hObject=0x444) returned 1 [0203.235] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Settings\\roaming.lock", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Settings\\roaming.lock", lpFilePart=0x0) returned 0x68 [0203.235] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Settings\\roaming.lock.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Settings\\roaming.lock.xuy", lpFilePart=0x0) returned 0x6c [0203.235] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\settings\\roaming.lock"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1b39dd1, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb1b39dd1, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x64fd081f, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0203.235] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\settings\\roaming.lock"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Settings\\roaming.lock.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\settings\\roaming.lock.xuy")) returned 1 [0203.237] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Settings\\settings.dat", lpFilePart=0x0) returned 0x68 [0203.237] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x23521a0 | out: lpFileInformation=0x23521a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1b39dd1, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0x1794398a, ftLastAccessTime.dwHighDateTime=0x1d2fc21, ftLastWriteTime.dwLowDateTime=0x1794398a, ftLastWriteTime.dwHighDateTime=0x1d2fc21, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0203.237] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Settings\\settings.dat", lpFilePart=0x0) returned 0x68 [0203.237] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x2352330 | out: lpFileInformation=0x2352330*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1b39dd1, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0x1794398a, ftLastAccessTime.dwHighDateTime=0x1d2fc21, ftLastWriteTime.dwLowDateTime=0x1794398a, ftLastWriteTime.dwHighDateTime=0x1d2fc21, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0203.237] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Settings\\settings.dat", lpFilePart=0x0) returned 0x68 [0203.237] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\settings\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0203.238] GetFileType (hFile=0x444) returned 0x1 [0203.238] GetFileType (hFile=0x444) returned 0x1 [0203.238] ReadFile (in: hFile=0x444, lpBuffer=0x2354780, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x2354780*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0203.297] CloseHandle (hObject=0x444) returned 1 [0203.297] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Settings\\settings.dat", lpFilePart=0x0) returned 0x68 [0203.297] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\settings\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0203.298] GetFileType (hFile=0x444) returned 0x1 [0203.298] GetFileType (hFile=0x444) returned 0x1 [0203.298] WriteFile (in: hFile=0x444, lpBuffer=0x2169bf8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x2169bf8*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0203.298] CloseHandle (hObject=0x444) returned 1 [0203.298] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Settings\\settings.dat", lpFilePart=0x0) returned 0x68 [0203.298] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Settings\\settings.dat.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Settings\\settings.dat.xuy", lpFilePart=0x0) returned 0x6c [0203.298] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1b39dd1, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0x1794398a, ftLastAccessTime.dwHighDateTime=0x1d2fc21, ftLastWriteTime.dwLowDateTime=0x65069347, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0203.298] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\settings\\settings.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Settings\\settings.dat.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\settings\\settings.dat.xuy")) returned 1 [0203.299] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Settings\\settings.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Settings\\settings.dat.LOG1", lpFilePart=0x0) returned 0x6d [0203.299] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\settings\\settings.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x21b4500 | out: lpFileInformation=0x21b4500*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x69b395f5, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x69b395f5, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x69b395f5, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0203.300] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Settings\\settings.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Settings\\settings.dat.LOG1", lpFilePart=0x0) returned 0x6d [0203.300] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\settings\\settings.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x21b46a0 | out: lpFileInformation=0x21b46a0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x69b395f5, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x69b395f5, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x69b395f5, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0203.300] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Settings\\settings.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Settings\\settings.dat.LOG1", lpFilePart=0x0) returned 0x6d [0203.300] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\settings\\settings.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0203.301] GetFileType (hFile=0x444) returned 0x1 [0203.301] GetFileType (hFile=0x444) returned 0x1 [0203.301] ReadFile (in: hFile=0x444, lpBuffer=0x21b6b10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x21b6b10*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0203.324] CloseHandle (hObject=0x444) returned 1 [0203.325] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Settings\\settings.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Settings\\settings.dat.LOG1", lpFilePart=0x0) returned 0x6d [0203.325] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\settings\\settings.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0203.325] GetFileType (hFile=0x444) returned 0x1 [0203.325] GetFileType (hFile=0x444) returned 0x1 [0203.325] WriteFile (in: hFile=0x444, lpBuffer=0x21b4820*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x21b4820*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0203.325] CloseHandle (hObject=0x444) returned 1 [0203.325] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Settings\\settings.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Settings\\settings.dat.LOG1", lpFilePart=0x0) returned 0x6d [0203.325] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Settings\\settings.dat.LOG1.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Settings\\settings.dat.LOG1.xuy", lpFilePart=0x0) returned 0x71 [0203.325] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\settings\\settings.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x69b395f5, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x69b395f5, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x6508f111, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0203.325] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\settings\\settings.dat.log1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Settings\\settings.dat.LOG1.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\settings\\settings.dat.log1.xuy")) returned 1 [0203.327] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Settings\\settings.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Settings\\settings.dat.LOG2", lpFilePart=0x0) returned 0x6d [0203.327] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\settings\\settings.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x2232ff0 | out: lpFileInformation=0x2232ff0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x69c4463c, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x69c4463c, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x69c4463c, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0203.328] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Settings\\settings.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Settings\\settings.dat.LOG2", lpFilePart=0x0) returned 0x6d [0203.328] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\settings\\settings.dat.log2"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0203.328] GetFileType (hFile=0x444) returned 0x1 [0203.328] GetFileType (hFile=0x444) returned 0x1 [0203.328] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0x0 [0203.328] CloseHandle (hObject=0x444) returned 1 [0203.339] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Settings\\settings.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Settings\\settings.dat.LOG2", lpFilePart=0x0) returned 0x6d [0203.339] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\settings\\settings.dat.log2"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0203.340] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb0e0) returned 1 [0203.341] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Settings\\settings.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Settings\\settings.dat.LOG2", lpFilePart=0x0) returned 0x6d [0203.341] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc200) returned 1 [0203.341] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\settings\\settings.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x3bc2e0 | out: lpFileInformation=0x3bc2e0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x69c4463c, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x69c4463c, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x69c4463c, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0203.341] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1c0) returned 1 [0203.341] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Settings\\settings.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbd80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Settings\\settings.dat.LOG2", lpFilePart=0x0) returned 0x6d [0203.341] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc200) returned 1 [0203.341] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\settings\\settings.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x22a9d60 | out: lpFileInformation=0x22a9d60*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x69c4463c, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x69c4463c, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x69c4463c, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0203.341] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1c0) returned 1 [0203.341] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Settings\\settings.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Settings\\settings.dat.LOG2", lpFilePart=0x0) returned 0x6d [0203.341] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0c0) returned 1 [0203.341] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\settings\\settings.dat.log2"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0203.341] GetFileType (hFile=0x444) returned 0x1 [0203.341] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc030) returned 1 [0203.341] GetFileType (hFile=0x444) returned 0x1 [0203.342] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc258 | out: lpFileSizeHigh=0x3bc258*=0x0) returned 0x0 [0203.342] CloseHandle (hObject=0x444) returned 1 [0203.379] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Settings\\settings.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Settings\\settings.dat.LOG2", lpFilePart=0x0) returned 0x6d [0203.379] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0c0) returned 1 [0203.379] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\settings\\settings.dat.log2"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0203.381] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8b50) returned 1 [0203.381] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0203.381] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\SystemAppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\SystemAppData", lpFilePart=0x0) returned 0x60 [0203.381] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\SystemAppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\SystemAppData\\", lpFilePart=0x0) returned 0x61 [0203.381] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\SystemAppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d75b0 [0203.382] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0203.382] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0203.382] FindClose (in: hFindFile=0x5d75b0 | out: hFindFile=0x5d75b0) returned 1 [0203.382] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0203.382] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0203.382] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0203.382] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\SystemAppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\SystemAppData", lpFilePart=0x0) returned 0x60 [0203.382] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\SystemAppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\SystemAppData\\", lpFilePart=0x0) returned 0x61 [0203.382] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\SystemAppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7eb0 [0203.382] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0203.383] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0203.383] FindClose (in: hFindFile=0x5d7eb0 | out: hFindFile=0x5d7eb0) returned 1 [0203.383] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0203.383] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0203.383] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0203.383] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\TempState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\TempState", lpFilePart=0x0) returned 0x5c [0203.383] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\TempState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\TempState\\", lpFilePart=0x0) returned 0x5d [0203.383] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\TempState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d78b0 [0203.395] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0203.395] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0203.395] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0203.395] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0203.395] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0203.395] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0203.395] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\TempState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\TempState", lpFilePart=0x0) returned 0x5c [0203.395] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\TempState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\TempState\\", lpFilePart=0x0) returned 0x5d [0203.396] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\TempState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7c70 [0203.396] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0203.396] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0203.396] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0203.396] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0203.396] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0203.396] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0203.396] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe", lpFilePart=0x0) returned 0x57 [0203.396] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\", lpFilePart=0x0) returned 0x58 [0203.396] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d8090 [0203.405] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0203.406] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0203.406] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0203.406] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0203.406] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0203.406] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0203.406] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0203.406] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0203.406] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0203.407] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0203.407] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0203.407] FindClose (in: hFindFile=0x5d8090 | out: hFindFile=0x5d8090) returned 1 [0203.407] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0203.407] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0203.407] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0203.408] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe", lpFilePart=0x0) returned 0x57 [0203.408] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\", lpFilePart=0x0) returned 0x58 [0203.408] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d7550 [0203.408] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0203.409] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0203.409] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0203.409] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0203.409] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0203.409] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0203.409] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0203.409] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0203.409] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0203.409] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0203.409] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0203.410] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0203.410] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0203.410] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0203.410] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0203.410] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\AC", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\AC", lpFilePart=0x0) returned 0x5a [0203.410] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\AC\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\AC\\", lpFilePart=0x0) returned 0x5b [0203.410] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\AC\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7670 [0203.442] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0203.442] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0203.442] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0203.442] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0203.442] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0203.442] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0203.442] FindClose (in: hFindFile=0x5d7670 | out: hFindFile=0x5d7670) returned 1 [0203.443] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0203.443] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0203.443] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0203.443] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\AC", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\AC", lpFilePart=0x0) returned 0x5a [0203.443] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\AC\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\AC\\", lpFilePart=0x0) returned 0x5b [0203.443] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\AC\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d79d0 [0203.444] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0203.444] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0203.444] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0203.445] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0203.445] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0203.445] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0203.445] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0203.446] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0203.446] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0203.446] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0203.446] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\AC\\INetCache", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\AC\\INetCache", lpFilePart=0x0) returned 0x64 [0203.446] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\AC\\INetCache\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\AC\\INetCache\\", lpFilePart=0x0) returned 0x65 [0203.446] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\AC\\INetCache\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d78b0 [0203.448] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0203.448] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0203.449] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0203.449] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0203.449] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0203.449] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0203.449] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\AC\\INetCache", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\AC\\INetCache", lpFilePart=0x0) returned 0x64 [0203.449] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\AC\\INetCache\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\AC\\INetCache\\", lpFilePart=0x0) returned 0x65 [0203.449] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\AC\\INetCache\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7fd0 [0203.449] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0203.449] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0203.449] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0203.449] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0203.449] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0203.449] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0203.449] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\AC\\INetCookies", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\AC\\INetCookies", lpFilePart=0x0) returned 0x66 [0203.449] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\AC\\INetCookies\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\AC\\INetCookies\\", lpFilePart=0x0) returned 0x67 [0203.450] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\AC\\INetCookies\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7a90 [0203.450] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0203.450] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0203.450] FindClose (in: hFindFile=0x5d7a90 | out: hFindFile=0x5d7a90) returned 1 [0203.450] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0203.450] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0203.450] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0203.450] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\AC\\INetCookies", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\AC\\INetCookies", lpFilePart=0x0) returned 0x66 [0203.450] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\AC\\INetCookies\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\AC\\INetCookies\\", lpFilePart=0x0) returned 0x67 [0203.450] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\AC\\INetCookies\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7c70 [0203.450] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0203.451] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0203.451] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0203.451] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0203.451] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0203.451] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0203.451] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\AC\\INetHistory", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\AC\\INetHistory", lpFilePart=0x0) returned 0x66 [0203.451] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\AC\\INetHistory\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\AC\\INetHistory\\", lpFilePart=0x0) returned 0x67 [0203.451] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\AC\\INetHistory\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7c70 [0203.451] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0203.452] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0203.452] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0203.452] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0203.452] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0203.452] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0203.452] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\AC\\INetHistory", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\AC\\INetHistory", lpFilePart=0x0) returned 0x66 [0203.452] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\AC\\INetHistory\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\AC\\INetHistory\\", lpFilePart=0x0) returned 0x67 [0203.452] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\AC\\INetHistory\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7af0 [0203.452] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0203.452] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0203.452] FindClose (in: hFindFile=0x5d7af0 | out: hFindFile=0x5d7af0) returned 1 [0203.454] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0203.456] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0203.456] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0203.458] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\AC\\Temp", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\AC\\Temp", lpFilePart=0x0) returned 0x5f [0203.459] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\AC\\Temp\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\AC\\Temp\\", lpFilePart=0x0) returned 0x60 [0203.460] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\AC\\Temp\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7c70 [0203.483] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0203.483] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0203.483] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0203.483] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0203.484] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0203.484] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0203.484] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\AC\\Temp", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\AC\\Temp", lpFilePart=0x0) returned 0x5f [0203.484] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\AC\\Temp\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\AC\\Temp\\", lpFilePart=0x0) returned 0x60 [0203.484] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\AC\\Temp\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d79d0 [0203.484] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0203.484] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0203.484] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0203.484] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0203.484] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0203.484] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0203.484] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\AppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\AppData", lpFilePart=0x0) returned 0x5f [0203.484] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\AppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\AppData\\", lpFilePart=0x0) returned 0x60 [0203.485] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\AppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7c70 [0203.485] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0203.485] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0203.485] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0203.485] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0203.485] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0203.485] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0203.485] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\AppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\AppData", lpFilePart=0x0) returned 0x5f [0203.485] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\AppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\AppData\\", lpFilePart=0x0) returned 0x60 [0203.485] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\AppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d73d0 [0203.486] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0203.486] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0203.486] FindClose (in: hFindFile=0x5d73d0 | out: hFindFile=0x5d73d0) returned 1 [0203.486] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0203.486] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0203.486] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0203.486] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\LocalCache", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\LocalCache", lpFilePart=0x0) returned 0x62 [0203.486] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\LocalCache\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\LocalCache\\", lpFilePart=0x0) returned 0x63 [0203.486] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\LocalCache\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d79d0 [0203.530] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0203.530] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0203.530] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0203.530] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0203.530] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0203.530] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0203.530] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\LocalCache", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\LocalCache", lpFilePart=0x0) returned 0x62 [0203.530] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\LocalCache\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\LocalCache\\", lpFilePart=0x0) returned 0x63 [0203.530] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\LocalCache\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7550 [0203.530] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0203.531] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0203.531] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0203.531] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0203.531] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0203.531] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0203.531] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\LocalState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\LocalState", lpFilePart=0x0) returned 0x62 [0203.531] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\LocalState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\LocalState\\", lpFilePart=0x0) returned 0x63 [0203.531] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\LocalState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d81b0 [0203.531] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0203.531] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0203.531] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0203.531] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0203.531] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0203.531] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0203.531] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\LocalState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\LocalState", lpFilePart=0x0) returned 0x62 [0203.531] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\LocalState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\LocalState\\", lpFilePart=0x0) returned 0x63 [0203.532] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\LocalState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7d30 [0203.532] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0203.532] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0203.532] FindClose (in: hFindFile=0x5d7d30 | out: hFindFile=0x5d7d30) returned 1 [0203.532] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0203.532] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0203.532] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0203.532] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe", lpFilePart=0x0) returned 0x97 [0203.532] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\", lpFilePart=0x0) returned 0x98 [0203.532] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d78b0 [0203.532] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0203.532] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0203.533] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0203.533] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0203.533] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0203.533] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0203.533] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0203.533] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe", lpFilePart=0x0) returned 0x97 [0203.533] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\", lpFilePart=0x0) returned 0x98 [0203.533] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7f10 [0203.533] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0203.533] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0203.533] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0203.533] FindClose (in: hFindFile=0x5d7f10 | out: hFindFile=0x5d7f10) returned 1 [0203.533] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0203.533] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0203.533] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0203.533] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\ActivationStore", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\ActivationStore", lpFilePart=0x0) returned 0xa7 [0203.534] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\ActivationStore\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\ActivationStore\\", lpFilePart=0x0) returned 0xa8 [0203.534] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\ActivationStore\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7610 [0203.566] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0203.567] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0203.567] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0203.567] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0203.567] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0203.567] FindClose (in: hFindFile=0x5d7610 | out: hFindFile=0x5d7610) returned 1 [0203.568] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0203.568] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0203.568] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0203.568] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\ActivationStore", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\ActivationStore", lpFilePart=0x0) returned 0xa7 [0203.568] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\ActivationStore\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\ActivationStore\\", lpFilePart=0x0) returned 0xa8 [0203.568] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\ActivationStore\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d8090 [0203.569] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0203.569] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0203.569] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0203.569] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0203.569] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0203.569] FindClose (in: hFindFile=0x5d8090 | out: hFindFile=0x5d8090) returned 1 [0203.570] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0203.570] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0203.570] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xbb [0203.570] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0203.570] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftofficehub_8wekyb3d8bbwe\\microsoft.microsoftofficehub_17.4218.23751.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), fInfoLevelId=0x0, lpFileInformation=0x2342490 | out: lpFileInformation=0x2342490*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d7fb19b, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x1db1c3a3, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x1db1c3a3, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x20000)) returned 1 [0203.571] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0203.571] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xbb [0203.571] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0203.571] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftofficehub_8wekyb3d8bbwe\\microsoft.microsoftofficehub_17.4218.23751.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), fInfoLevelId=0x0, lpFileInformation=0x23426c8 | out: lpFileInformation=0x23426c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d7fb19b, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x1db1c3a3, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x1db1c3a3, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x20000)) returned 1 [0203.571] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0203.571] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xbb [0203.571] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0203.571] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftofficehub_8wekyb3d8bbwe\\microsoft.microsoftofficehub_17.4218.23751.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0203.573] GetFileType (hFile=0x444) returned 0x1 [0203.573] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0203.573] GetFileType (hFile=0x444) returned 0x1 [0203.573] ReadFile (in: hFile=0x444, lpBuffer=0x2344c68, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x2344c68*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0203.707] CloseHandle (hObject=0x444) returned 1 [0203.707] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xbb [0203.707] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0203.707] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftofficehub_8wekyb3d8bbwe\\microsoft.microsoftofficehub_17.4218.23751.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0203.708] GetFileType (hFile=0x444) returned 0x1 [0203.708] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0203.708] GetFileType (hFile=0x444) returned 0x1 [0203.708] WriteFile (in: hFile=0x444, lpBuffer=0x216a688*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x216a688*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0203.708] CloseHandle (hObject=0x444) returned 1 [0203.708] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xbb [0203.708] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.xuy", lpFilePart=0x0) returned 0xbf [0203.708] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0203.708] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftofficehub_8wekyb3d8bbwe\\microsoft.microsoftofficehub_17.4218.23751.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d7fb19b, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x1db1c3a3, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x654490fb, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x20000)) returned 1 [0203.708] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0203.708] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftofficehub_8wekyb3d8bbwe\\microsoft.microsoftofficehub_17.4218.23751.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftofficehub_8wekyb3d8bbwe\\microsoft.microsoftofficehub_17.4218.23751.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.xuy")) returned 1 [0203.710] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xc0 [0203.710] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0203.710] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftofficehub_8wekyb3d8bbwe\\microsoft.microsoftofficehub_17.4218.23751.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x21c1e10 | out: lpFileInformation=0x21c1e10*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1d8477e8, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x1d8477e8, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x1d8477e8, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0203.710] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0203.710] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xc0 [0203.710] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0203.710] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftofficehub_8wekyb3d8bbwe\\microsoft.microsoftofficehub_17.4218.23751.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0203.710] GetFileType (hFile=0x444) returned 0x1 [0203.710] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0203.710] GetFileType (hFile=0x444) returned 0x1 [0203.710] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x0 [0203.710] CloseHandle (hObject=0x444) returned 1 [0203.726] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xc0 [0203.726] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0203.726] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftofficehub_8wekyb3d8bbwe\\microsoft.microsoftofficehub_17.4218.23751.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0203.728] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb070) returned 1 [0203.728] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3bbcf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xc0 [0203.728] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0203.728] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftofficehub_8wekyb3d8bbwe\\microsoft.microsoftofficehub_17.4218.23751.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x3bc270 | out: lpFileInformation=0x3bc270*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1d8477e8, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x1d8477e8, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x1d8477e8, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0203.728] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc150) returned 1 [0203.728] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3bbd10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xc0 [0203.728] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0203.729] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftofficehub_8wekyb3d8bbwe\\microsoft.microsoftofficehub_17.4218.23751.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x2238ef8 | out: lpFileInformation=0x2238ef8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1d8477e8, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x1d8477e8, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x1d8477e8, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0203.729] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc150) returned 1 [0203.729] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3bbb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xc0 [0203.729] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc050) returned 1 [0203.729] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftofficehub_8wekyb3d8bbwe\\microsoft.microsoftofficehub_17.4218.23751.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0203.729] GetFileType (hFile=0x444) returned 0x1 [0203.729] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbfc0) returned 1 [0203.729] GetFileType (hFile=0x444) returned 0x1 [0203.729] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc1e8 | out: lpFileSizeHigh=0x3bc1e8*=0x0) returned 0x0 [0203.729] CloseHandle (hObject=0x444) returned 1 [0203.757] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3bbb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xc0 [0203.757] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc050) returned 1 [0203.757] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftofficehub_8wekyb3d8bbwe\\microsoft.microsoftofficehub_17.4218.23751.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0203.759] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8ae0) returned 1 [0203.760] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xc0 [0203.760] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0203.760] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftofficehub_8wekyb3d8bbwe\\microsoft.microsoftofficehub_17.4218.23751.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x22afe68 | out: lpFileInformation=0x22afe68*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1d8477e8, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x1d8477e8, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x1d8477e8, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0203.760] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0203.760] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xc0 [0203.760] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0203.760] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftofficehub_8wekyb3d8bbwe\\microsoft.microsoftofficehub_17.4218.23751.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0203.760] GetFileType (hFile=0x444) returned 0x1 [0203.760] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0203.760] GetFileType (hFile=0x444) returned 0x1 [0203.760] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x0 [0203.760] CloseHandle (hObject=0x444) returned 1 [0203.771] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xc0 [0203.771] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0203.771] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftofficehub_8wekyb3d8bbwe\\microsoft.microsoftofficehub_17.4218.23751.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0203.773] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb070) returned 1 [0203.773] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbcf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xc0 [0203.773] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0203.773] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftofficehub_8wekyb3d8bbwe\\microsoft.microsoftofficehub_17.4218.23751.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x3bc270 | out: lpFileInformation=0x3bc270*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1d8477e8, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x1d8477e8, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x1d8477e8, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0203.773] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc150) returned 1 [0203.773] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbd10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xc0 [0203.774] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0203.774] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftofficehub_8wekyb3d8bbwe\\microsoft.microsoftofficehub_17.4218.23751.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x2326f50 | out: lpFileInformation=0x2326f50*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1d8477e8, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x1d8477e8, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x1d8477e8, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0203.774] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc150) returned 1 [0203.774] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xc0 [0203.774] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc050) returned 1 [0203.774] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftofficehub_8wekyb3d8bbwe\\microsoft.microsoftofficehub_17.4218.23751.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0203.774] GetFileType (hFile=0x444) returned 0x1 [0203.774] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbfc0) returned 1 [0203.774] GetFileType (hFile=0x444) returned 0x1 [0203.774] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc1e8 | out: lpFileSizeHigh=0x3bc1e8*=0x0) returned 0x0 [0203.774] CloseHandle (hObject=0x444) returned 1 [0203.824] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xc0 [0203.824] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc050) returned 1 [0203.824] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftofficehub_8wekyb3d8bbwe\\microsoft.microsoftofficehub_17.4218.23751.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0203.825] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8ae0) returned 1 [0203.826] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0203.826] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\RoamingState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\RoamingState", lpFilePart=0x0) returned 0x64 [0203.826] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\RoamingState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\RoamingState\\", lpFilePart=0x0) returned 0x65 [0203.826] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\RoamingState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d81b0 [0203.826] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0203.827] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0203.827] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0203.827] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0203.827] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0203.827] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0203.827] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\RoamingState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\RoamingState", lpFilePart=0x0) returned 0x64 [0203.827] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\RoamingState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\RoamingState\\", lpFilePart=0x0) returned 0x65 [0203.827] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\RoamingState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7c70 [0203.827] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0203.827] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0203.827] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0203.827] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0203.827] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0203.827] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0203.828] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Settings", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Settings", lpFilePart=0x0) returned 0x60 [0203.828] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Settings\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Settings\\", lpFilePart=0x0) returned 0x61 [0203.828] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Settings\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7670 [0203.830] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0203.830] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0203.831] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0203.831] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0203.831] FindClose (in: hFindFile=0x5d7670 | out: hFindFile=0x5d7670) returned 1 [0203.831] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0203.831] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0203.831] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0203.831] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Settings", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Settings", lpFilePart=0x0) returned 0x60 [0203.831] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Settings\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Settings\\", lpFilePart=0x0) returned 0x61 [0203.831] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Settings\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7eb0 [0203.831] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0203.831] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0203.831] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0203.832] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0203.832] FindClose (in: hFindFile=0x5d7eb0 | out: hFindFile=0x5d7eb0) returned 1 [0203.832] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0203.832] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0203.832] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Settings\\roaming.lock", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Settings\\roaming.lock", lpFilePart=0x0) returned 0x6d [0203.832] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0203.832] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftofficehub_8wekyb3d8bbwe\\settings\\roaming.lock"), fInfoLevelId=0x0, lpFileInformation=0x21a5520 | out: lpFileInformation=0x21a5520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d015614, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x1d015614, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x1d015614, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0203.832] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0203.832] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Settings\\roaming.lock", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Settings\\roaming.lock", lpFilePart=0x0) returned 0x6d [0203.832] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0203.832] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftofficehub_8wekyb3d8bbwe\\settings\\roaming.lock"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0203.832] GetFileType (hFile=0x444) returned 0x1 [0203.832] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0203.832] GetFileType (hFile=0x444) returned 0x1 [0203.832] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0x0 [0203.832] CloseHandle (hObject=0x444) returned 1 [0203.842] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Settings\\roaming.lock", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Settings\\roaming.lock", lpFilePart=0x0) returned 0x6d [0203.842] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0203.842] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftofficehub_8wekyb3d8bbwe\\settings\\roaming.lock"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0203.844] GetFileType (hFile=0x444) returned 0x1 [0203.844] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0203.844] GetFileType (hFile=0x444) returned 0x1 [0203.844] WriteFile (in: hFile=0x444, lpBuffer=0x221b9a0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x3be628, lpOverlapped=0x0 | out: lpBuffer=0x221b9a0*, lpNumberOfBytesWritten=0x3be628*=0x10, lpOverlapped=0x0) returned 1 [0203.845] CloseHandle (hObject=0x444) returned 1 [0203.845] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Settings\\roaming.lock", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Settings\\roaming.lock", lpFilePart=0x0) returned 0x6d [0203.845] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Settings\\roaming.lock.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Settings\\roaming.lock.xuy", lpFilePart=0x0) returned 0x71 [0203.845] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0203.845] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftofficehub_8wekyb3d8bbwe\\settings\\roaming.lock"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d015614, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x1d015614, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x655a4905, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0203.845] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0203.845] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftofficehub_8wekyb3d8bbwe\\settings\\roaming.lock"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Settings\\roaming.lock.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftofficehub_8wekyb3d8bbwe\\settings\\roaming.lock.xuy")) returned 1 [0203.846] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Settings\\settings.dat", lpFilePart=0x0) returned 0x6d [0203.846] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0203.846] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftofficehub_8wekyb3d8bbwe\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x221ccf8 | out: lpFileInformation=0x221ccf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1cf568e9, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x1cf568e9, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x8d6f5917, ftLastWriteTime.dwHighDateTime=0x1d0baff, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0203.846] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0203.846] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Settings\\settings.dat", lpFilePart=0x0) returned 0x6d [0203.846] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0203.847] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftofficehub_8wekyb3d8bbwe\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x221ce90 | out: lpFileInformation=0x221ce90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1cf568e9, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x1cf568e9, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x8d6f5917, ftLastWriteTime.dwHighDateTime=0x1d0baff, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0203.847] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0203.847] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Settings\\settings.dat", lpFilePart=0x0) returned 0x6d [0203.847] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0203.847] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftofficehub_8wekyb3d8bbwe\\settings\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0203.847] GetFileType (hFile=0x444) returned 0x1 [0203.847] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0203.847] GetFileType (hFile=0x444) returned 0x1 [0203.847] ReadFile (in: hFile=0x444, lpBuffer=0x221f2f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x221f2f0*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0203.874] CloseHandle (hObject=0x444) returned 1 [0203.874] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Settings\\settings.dat", lpFilePart=0x0) returned 0x6d [0203.874] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0203.874] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftofficehub_8wekyb3d8bbwe\\settings\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0203.874] GetFileType (hFile=0x444) returned 0x1 [0203.874] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0203.874] GetFileType (hFile=0x444) returned 0x1 [0203.874] WriteFile (in: hFile=0x444, lpBuffer=0x221d008*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x221d008*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0203.875] CloseHandle (hObject=0x444) returned 1 [0203.875] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Settings\\settings.dat", lpFilePart=0x0) returned 0x6d [0203.875] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Settings\\settings.dat.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Settings\\settings.dat.xuy", lpFilePart=0x0) returned 0x71 [0203.875] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0203.875] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftofficehub_8wekyb3d8bbwe\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1cf568e9, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x1cf568e9, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x655f05d1, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0203.875] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0203.875] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftofficehub_8wekyb3d8bbwe\\settings\\settings.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Settings\\settings.dat.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftofficehub_8wekyb3d8bbwe\\settings\\settings.dat.xuy")) returned 1 [0203.876] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0203.877] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\SystemAppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\SystemAppData", lpFilePart=0x0) returned 0x65 [0203.877] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\SystemAppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\SystemAppData\\", lpFilePart=0x0) returned 0x66 [0203.877] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\SystemAppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d78b0 [0203.877] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0203.877] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0203.877] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0203.877] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0203.877] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0203.877] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0203.877] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\SystemAppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\SystemAppData", lpFilePart=0x0) returned 0x65 [0203.877] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\SystemAppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\SystemAppData\\", lpFilePart=0x0) returned 0x66 [0203.877] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\SystemAppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d81b0 [0203.878] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0203.878] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0203.878] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0203.878] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0203.878] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0203.878] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0203.878] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\TempState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\TempState", lpFilePart=0x0) returned 0x61 [0203.878] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\TempState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\TempState\\", lpFilePart=0x0) returned 0x62 [0203.878] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\TempState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7670 [0203.878] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0203.878] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0203.879] FindClose (in: hFindFile=0x5d7670 | out: hFindFile=0x5d7670) returned 1 [0203.879] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0203.879] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0203.879] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0203.879] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\TempState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\TempState", lpFilePart=0x0) returned 0x61 [0203.879] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\TempState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\TempState\\", lpFilePart=0x0) returned 0x62 [0203.879] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\TempState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7610 [0203.879] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0203.879] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0203.879] FindClose (in: hFindFile=0x5d7610 | out: hFindFile=0x5d7610) returned 1 [0203.879] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0203.879] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0203.879] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0203.879] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe", lpFilePart=0x0) returned 0x61 [0203.879] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\", lpFilePart=0x0) returned 0x62 [0203.879] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d7550 [0203.900] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0203.900] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0203.900] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0203.900] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0203.900] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0203.900] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0203.901] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0203.901] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0203.901] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0203.901] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0203.901] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0203.901] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0203.902] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0203.902] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0203.902] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0203.902] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe", lpFilePart=0x0) returned 0x61 [0203.902] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\", lpFilePart=0x0) returned 0x62 [0203.902] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d7670 [0203.903] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0203.903] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0203.903] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0203.903] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0203.903] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0203.903] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0203.903] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0203.903] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0203.904] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0203.904] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0203.904] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0203.904] FindClose (in: hFindFile=0x5d7670 | out: hFindFile=0x5d7670) returned 1 [0203.904] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0203.904] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0203.904] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0203.904] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\AC", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\AC", lpFilePart=0x0) returned 0x64 [0203.905] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\AC\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\AC\\", lpFilePart=0x0) returned 0x65 [0203.905] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\AC\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d78b0 [0203.922] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0203.922] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0203.923] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0203.923] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0203.923] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0203.923] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0203.923] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0203.924] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0203.924] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0203.924] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0203.924] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\AC", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\AC", lpFilePart=0x0) returned 0x64 [0203.924] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\AC\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\AC\\", lpFilePart=0x0) returned 0x65 [0203.924] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\AC\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7a30 [0203.925] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0203.925] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0203.925] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0203.925] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0203.925] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0203.925] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0203.925] FindClose (in: hFindFile=0x5d7a30 | out: hFindFile=0x5d7a30) returned 1 [0203.926] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0203.926] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0203.926] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0203.926] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\AC\\INetCache", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\AC\\INetCache", lpFilePart=0x0) returned 0x6e [0203.926] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\AC\\INetCache\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\AC\\INetCache\\", lpFilePart=0x0) returned 0x6f [0203.926] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\AC\\INetCache\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d73d0 [0203.928] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0203.928] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0203.929] FindClose (in: hFindFile=0x5d73d0 | out: hFindFile=0x5d73d0) returned 1 [0203.929] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0203.929] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0203.929] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0203.929] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\AC\\INetCache", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\AC\\INetCache", lpFilePart=0x0) returned 0x6e [0203.929] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\AC\\INetCache\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\AC\\INetCache\\", lpFilePart=0x0) returned 0x6f [0203.929] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\AC\\INetCache\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7370 [0203.929] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0203.929] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0203.929] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0203.929] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0203.929] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0203.929] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0203.929] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\AC\\INetCookies", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\AC\\INetCookies", lpFilePart=0x0) returned 0x70 [0203.929] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\AC\\INetCookies\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\AC\\INetCookies\\", lpFilePart=0x0) returned 0x71 [0203.929] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\AC\\INetCookies\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d78b0 [0203.930] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0203.930] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0203.930] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0203.930] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0203.930] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0203.930] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0203.930] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\AC\\INetCookies", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\AC\\INetCookies", lpFilePart=0x0) returned 0x70 [0203.930] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\AC\\INetCookies\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\AC\\INetCookies\\", lpFilePart=0x0) returned 0x71 [0203.930] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\AC\\INetCookies\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d79d0 [0203.930] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0203.930] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0203.931] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0203.931] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0203.931] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0203.931] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0203.931] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\AC\\INetHistory", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\AC\\INetHistory", lpFilePart=0x0) returned 0x70 [0203.931] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\AC\\INetHistory\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\AC\\INetHistory\\", lpFilePart=0x0) returned 0x71 [0203.931] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\AC\\INetHistory\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7fd0 [0203.931] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0203.931] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0203.931] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0203.931] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0203.931] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0203.931] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0203.931] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\AC\\INetHistory", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\AC\\INetHistory", lpFilePart=0x0) returned 0x70 [0203.931] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\AC\\INetHistory\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\AC\\INetHistory\\", lpFilePart=0x0) returned 0x71 [0203.931] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\AC\\INetHistory\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d78b0 [0203.931] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0203.932] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0203.932] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0203.932] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0203.932] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0203.932] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0203.932] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\AC\\Temp", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\AC\\Temp", lpFilePart=0x0) returned 0x69 [0203.932] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\AC\\Temp\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\AC\\Temp\\", lpFilePart=0x0) returned 0x6a [0203.932] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\AC\\Temp\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7f10 [0203.932] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0203.932] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0203.932] FindClose (in: hFindFile=0x5d7f10 | out: hFindFile=0x5d7f10) returned 1 [0203.932] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0203.932] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0203.932] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0203.932] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\AC\\Temp", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\AC\\Temp", lpFilePart=0x0) returned 0x69 [0203.933] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\AC\\Temp\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\AC\\Temp\\", lpFilePart=0x0) returned 0x6a [0203.933] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\AC\\Temp\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7670 [0203.933] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0203.933] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0203.933] FindClose (in: hFindFile=0x5d7670 | out: hFindFile=0x5d7670) returned 1 [0203.933] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0203.933] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0203.933] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0203.933] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\AppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\AppData", lpFilePart=0x0) returned 0x69 [0203.933] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\AppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\AppData\\", lpFilePart=0x0) returned 0x6a [0203.933] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\AppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7550 [0203.933] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0203.933] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0203.934] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0203.934] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0203.934] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0203.934] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0203.934] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\AppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\AppData", lpFilePart=0x0) returned 0x69 [0203.934] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\AppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\AppData\\", lpFilePart=0x0) returned 0x6a [0203.934] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\AppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d81b0 [0203.934] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0203.934] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0203.934] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0203.934] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0203.934] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0203.934] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0203.934] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\LocalCache", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\LocalCache", lpFilePart=0x0) returned 0x6c [0203.934] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\LocalCache\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\LocalCache\\", lpFilePart=0x0) returned 0x6d [0203.934] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\LocalCache\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d81b0 [0203.935] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0203.935] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0203.935] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0203.935] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0203.935] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0203.935] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0203.935] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\LocalCache", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\LocalCache", lpFilePart=0x0) returned 0x6c [0203.935] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\LocalCache\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\LocalCache\\", lpFilePart=0x0) returned 0x6d [0203.935] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\LocalCache\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d79d0 [0203.935] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0203.935] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0203.935] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0203.935] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0203.935] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0203.935] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0203.935] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\LocalState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\LocalState", lpFilePart=0x0) returned 0x6c [0203.936] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\LocalState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\LocalState\\", lpFilePart=0x0) returned 0x6d [0203.936] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\LocalState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7a90 [0203.936] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0203.936] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0203.936] FindClose (in: hFindFile=0x5d7a90 | out: hFindFile=0x5d7a90) returned 1 [0203.936] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0203.936] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0203.936] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0203.936] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\LocalState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\LocalState", lpFilePart=0x0) returned 0x6c [0203.936] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\LocalState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\LocalState\\", lpFilePart=0x0) returned 0x6d [0203.936] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\LocalState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7c70 [0203.936] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0203.936] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0203.937] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0203.937] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0203.937] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0203.937] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0203.937] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe", lpFilePart=0x0) returned 0xa6 [0203.937] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\", lpFilePart=0x0) returned 0xa7 [0203.937] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d81b0 [0203.942] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0203.942] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0203.943] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0203.943] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0203.943] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0203.943] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0203.943] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0203.943] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe", lpFilePart=0x0) returned 0xa6 [0203.943] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\", lpFilePart=0x0) returned 0xa7 [0203.943] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7cd0 [0203.943] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0203.943] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0203.943] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0203.943] FindClose (in: hFindFile=0x5d7cd0 | out: hFindFile=0x5d7cd0) returned 1 [0203.943] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0203.943] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0203.943] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0203.943] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\ActivationStore", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\ActivationStore", lpFilePart=0x0) returned 0xb6 [0203.944] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\ActivationStore\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\ActivationStore\\", lpFilePart=0x0) returned 0xb7 [0203.944] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\ActivationStore\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d8090 [0203.946] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0203.946] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0203.946] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0203.946] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0203.946] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0203.946] FindClose (in: hFindFile=0x5d8090 | out: hFindFile=0x5d8090) returned 1 [0203.947] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0203.947] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0203.947] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0203.947] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\ActivationStore", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\ActivationStore", lpFilePart=0x0) returned 0xb6 [0203.947] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\ActivationStore\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\ActivationStore\\", lpFilePart=0x0) returned 0xb7 [0203.947] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\ActivationStore\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d79d0 [0203.948] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0203.948] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0203.948] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0203.948] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0203.948] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0203.948] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0203.949] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0203.949] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0203.949] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xca [0203.949] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0203.949] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftsolitairecollection_8wekyb3d8bbwe\\microsoft.microsoftsolitairecollection_3.1.6103.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), fInfoLevelId=0x0, lpFileInformation=0x22bf1e8 | out: lpFileInformation=0x22bf1e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a256146, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x1a5772c9, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x1a5772c9, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x8000)) returned 1 [0203.949] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0203.950] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xca [0203.950] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0203.950] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftsolitairecollection_8wekyb3d8bbwe\\microsoft.microsoftsolitairecollection_3.1.6103.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), fInfoLevelId=0x0, lpFileInformation=0x22bf440 | out: lpFileInformation=0x22bf440*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a256146, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x1a5772c9, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x1a5772c9, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x8000)) returned 1 [0203.950] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0203.950] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xca [0203.950] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0203.950] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftsolitairecollection_8wekyb3d8bbwe\\microsoft.microsoftsolitairecollection_3.1.6103.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0203.951] GetFileType (hFile=0x444) returned 0x1 [0203.951] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0203.951] GetFileType (hFile=0x444) returned 0x1 [0203.951] ReadFile (in: hFile=0x444, lpBuffer=0x22c1a20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x22c1a20*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0203.988] CloseHandle (hObject=0x444) returned 1 [0203.988] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xca [0203.988] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0203.988] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftsolitairecollection_8wekyb3d8bbwe\\microsoft.microsoftsolitairecollection_3.1.6103.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0203.989] GetFileType (hFile=0x444) returned 0x1 [0203.989] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0203.989] GetFileType (hFile=0x444) returned 0x1 [0203.989] WriteFile (in: hFile=0x444, lpBuffer=0x22bf678*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x22bf678*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0203.989] CloseHandle (hObject=0x444) returned 1 [0203.989] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xca [0203.989] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.xuy", lpFilePart=0x0) returned 0xce [0203.989] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0203.989] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftsolitairecollection_8wekyb3d8bbwe\\microsoft.microsoftsolitairecollection_3.1.6103.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a256146, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x1a5772c9, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x656fb667, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x8000)) returned 1 [0203.989] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0203.989] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftsolitairecollection_8wekyb3d8bbwe\\microsoft.microsoftsolitairecollection_3.1.6103.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftsolitairecollection_8wekyb3d8bbwe\\microsoft.microsoftsolitairecollection_3.1.6103.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.xuy")) returned 1 [0203.991] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xcf [0203.991] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0203.991] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftsolitairecollection_8wekyb3d8bbwe\\microsoft.microsoftsolitairecollection_3.1.6103.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x233e1e0 | out: lpFileInformation=0x233e1e0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1a27c3a2, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x1a27c3a2, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x1a27c3a2, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x5000)) returned 1 [0203.991] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0203.991] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xcf [0203.991] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0203.991] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftsolitairecollection_8wekyb3d8bbwe\\microsoft.microsoftsolitairecollection_3.1.6103.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x233e450 | out: lpFileInformation=0x233e450*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1a27c3a2, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x1a27c3a2, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x1a27c3a2, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x5000)) returned 1 [0203.991] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0203.991] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xcf [0203.991] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0203.991] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftsolitairecollection_8wekyb3d8bbwe\\microsoft.microsoftsolitairecollection_3.1.6103.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0203.992] GetFileType (hFile=0x444) returned 0x1 [0203.992] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0203.992] GetFileType (hFile=0x444) returned 0x1 [0203.992] ReadFile (in: hFile=0x444, lpBuffer=0x2340a60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x2340a60*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0204.013] CloseHandle (hObject=0x444) returned 1 [0204.013] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xcf [0204.013] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftsolitairecollection_8wekyb3d8bbwe\\microsoft.microsoftsolitairecollection_3.1.6103.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0204.014] GetFileType (hFile=0x444) returned 0x1 [0204.014] GetFileType (hFile=0x444) returned 0x1 [0204.014] WriteFile (in: hFile=0x444, lpBuffer=0x2171c28*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x2171c28*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0204.014] CloseHandle (hObject=0x444) returned 1 [0204.014] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xcf [0204.014] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1.xuy", lpFilePart=0x0) returned 0xd3 [0204.014] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftsolitairecollection_8wekyb3d8bbwe\\microsoft.microsoftsolitairecollection_3.1.6103.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1a27c3a2, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x1a27c3a2, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x65721850, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x5000)) returned 1 [0204.014] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftsolitairecollection_8wekyb3d8bbwe\\microsoft.microsoftsolitairecollection_3.1.6103.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftsolitairecollection_8wekyb3d8bbwe\\microsoft.microsoftsolitairecollection_3.1.6103.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1.xuy")) returned 1 [0204.016] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xcf [0204.016] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftsolitairecollection_8wekyb3d8bbwe\\microsoft.microsoftsolitairecollection_3.1.6103.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x21c1c90 | out: lpFileInformation=0x21c1c90*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1a27c3a2, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x1a27c3a2, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x1a27c3a2, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0204.016] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xcf [0204.016] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftsolitairecollection_8wekyb3d8bbwe\\microsoft.microsoftsolitairecollection_3.1.6103.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0204.017] GetFileType (hFile=0x444) returned 0x1 [0204.017] GetFileType (hFile=0x444) returned 0x1 [0204.017] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x0 [0204.017] CloseHandle (hObject=0x444) returned 1 [0204.026] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xcf [0204.027] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftsolitairecollection_8wekyb3d8bbwe\\microsoft.microsoftsolitairecollection_3.1.6103.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0204.028] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbcf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xcf [0204.028] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftsolitairecollection_8wekyb3d8bbwe\\microsoft.microsoftsolitairecollection_3.1.6103.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x3bc270 | out: lpFileInformation=0x3bc270*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1a27c3a2, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x1a27c3a2, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x1a27c3a2, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0204.028] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbd10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xcf [0204.028] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftsolitairecollection_8wekyb3d8bbwe\\microsoft.microsoftsolitairecollection_3.1.6103.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x2238df0 | out: lpFileInformation=0x2238df0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1a27c3a2, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x1a27c3a2, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x1a27c3a2, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0204.029] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xcf [0204.029] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftsolitairecollection_8wekyb3d8bbwe\\microsoft.microsoftsolitairecollection_3.1.6103.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0204.029] GetFileType (hFile=0x444) returned 0x1 [0204.029] GetFileType (hFile=0x444) returned 0x1 [0204.029] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc1e8 | out: lpFileSizeHigh=0x3bc1e8*=0x0) returned 0x0 [0204.029] CloseHandle (hObject=0x444) returned 1 [0204.043] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xcf [0204.043] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftsolitairecollection_8wekyb3d8bbwe\\microsoft.microsoftsolitairecollection_3.1.6103.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0204.045] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\RoamingState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\RoamingState", lpFilePart=0x0) returned 0x6e [0204.045] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\RoamingState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\RoamingState\\", lpFilePart=0x0) returned 0x6f [0204.045] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\RoamingState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d78b0 [0204.046] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0204.046] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0204.046] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0204.046] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\RoamingState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\RoamingState", lpFilePart=0x0) returned 0x6e [0204.046] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\RoamingState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\RoamingState\\", lpFilePart=0x0) returned 0x6f [0204.046] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\RoamingState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d78b0 [0204.046] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0204.046] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0204.048] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0204.049] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\Settings", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\Settings", lpFilePart=0x0) returned 0x6a [0204.049] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\Settings\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\Settings\\", lpFilePart=0x0) returned 0x6b [0204.049] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\Settings\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7550 [0204.049] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0204.049] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0204.049] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0204.049] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0204.049] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0204.050] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\Settings", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\Settings", lpFilePart=0x0) returned 0x6a [0204.050] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\Settings\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\Settings\\", lpFilePart=0x0) returned 0x6b [0204.050] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\Settings\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7f10 [0204.050] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0204.050] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0204.050] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0204.050] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0204.050] FindClose (in: hFindFile=0x5d7f10 | out: hFindFile=0x5d7f10) returned 1 [0204.050] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\Settings\\roaming.lock", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\Settings\\roaming.lock", lpFilePart=0x0) returned 0x77 [0204.050] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftsolitairecollection_8wekyb3d8bbwe\\settings\\roaming.lock"), fInfoLevelId=0x0, lpFileInformation=0x22b4da0 | out: lpFileInformation=0x22b4da0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19c866f3, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x19c866f3, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x19c866f3, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0204.051] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\Settings\\roaming.lock", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\Settings\\roaming.lock", lpFilePart=0x0) returned 0x77 [0204.051] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftsolitairecollection_8wekyb3d8bbwe\\settings\\roaming.lock"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0204.051] GetFileType (hFile=0x444) returned 0x1 [0204.051] GetFileType (hFile=0x444) returned 0x1 [0204.051] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0x0 [0204.051] CloseHandle (hObject=0x444) returned 1 [0204.080] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\Settings\\roaming.lock", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\Settings\\roaming.lock", lpFilePart=0x0) returned 0x77 [0204.080] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftsolitairecollection_8wekyb3d8bbwe\\settings\\roaming.lock"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0204.081] GetFileType (hFile=0x444) returned 0x1 [0204.081] GetFileType (hFile=0x444) returned 0x1 [0204.081] WriteFile (in: hFile=0x444, lpBuffer=0x232b250*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x3be628, lpOverlapped=0x0 | out: lpBuffer=0x232b250*, lpNumberOfBytesWritten=0x3be628*=0x10, lpOverlapped=0x0) returned 1 [0204.082] CloseHandle (hObject=0x444) returned 1 [0204.082] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\Settings\\roaming.lock", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\Settings\\roaming.lock", lpFilePart=0x0) returned 0x77 [0204.082] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\Settings\\roaming.lock.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\Settings\\roaming.lock.xuy", lpFilePart=0x0) returned 0x7b [0204.083] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0204.083] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftsolitairecollection_8wekyb3d8bbwe\\settings\\roaming.lock"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19c866f3, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x19c866f3, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x657e0748, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0204.083] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0204.083] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftsolitairecollection_8wekyb3d8bbwe\\settings\\roaming.lock"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\Settings\\roaming.lock.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftsolitairecollection_8wekyb3d8bbwe\\settings\\roaming.lock.xuy")) returned 1 [0204.084] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\Settings\\settings.dat", lpFilePart=0x0) returned 0x77 [0204.084] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0204.084] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftsolitairecollection_8wekyb3d8bbwe\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x232c5d8 | out: lpFileInformation=0x232c5d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19bedc2d, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x19bedc2d, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x8d6f5917, ftLastWriteTime.dwHighDateTime=0x1d0baff, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0204.084] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0204.084] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\Settings\\settings.dat", lpFilePart=0x0) returned 0x77 [0204.084] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0204.084] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftsolitairecollection_8wekyb3d8bbwe\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x232c780 | out: lpFileInformation=0x232c780*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19bedc2d, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x19bedc2d, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x8d6f5917, ftLastWriteTime.dwHighDateTime=0x1d0baff, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0204.084] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0204.084] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\Settings\\settings.dat", lpFilePart=0x0) returned 0x77 [0204.084] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0204.084] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftsolitairecollection_8wekyb3d8bbwe\\settings\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0204.085] GetFileType (hFile=0x444) returned 0x1 [0204.085] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0204.085] GetFileType (hFile=0x444) returned 0x1 [0204.085] ReadFile (in: hFile=0x444, lpBuffer=0x232ec00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x232ec00*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0204.117] CloseHandle (hObject=0x444) returned 1 [0204.117] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\Settings\\settings.dat", lpFilePart=0x0) returned 0x77 [0204.117] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0204.117] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftsolitairecollection_8wekyb3d8bbwe\\settings\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0204.117] GetFileType (hFile=0x444) returned 0x1 [0204.117] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0204.117] GetFileType (hFile=0x444) returned 0x1 [0204.117] WriteFile (in: hFile=0x444, lpBuffer=0x21777b0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x21777b0*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0204.117] CloseHandle (hObject=0x444) returned 1 [0204.118] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\Settings\\settings.dat", lpFilePart=0x0) returned 0x77 [0204.118] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\Settings\\settings.dat.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\Settings\\settings.dat.xuy", lpFilePart=0x0) returned 0x7b [0204.118] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0204.118] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftsolitairecollection_8wekyb3d8bbwe\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19bedc2d, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x19bedc2d, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x6582c887, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0204.118] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0204.118] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftsolitairecollection_8wekyb3d8bbwe\\settings\\settings.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\Settings\\settings.dat.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftsolitairecollection_8wekyb3d8bbwe\\settings\\settings.dat.xuy")) returned 1 [0204.119] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0204.119] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\SystemAppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\SystemAppData", lpFilePart=0x0) returned 0x6f [0204.119] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\SystemAppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\SystemAppData\\", lpFilePart=0x0) returned 0x70 [0204.119] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\SystemAppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7fd0 [0204.119] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0204.120] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0204.120] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0204.120] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0204.120] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0204.120] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0204.120] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\SystemAppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\SystemAppData", lpFilePart=0x0) returned 0x6f [0204.120] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\SystemAppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\SystemAppData\\", lpFilePart=0x0) returned 0x70 [0204.120] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\SystemAppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7a30 [0204.120] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0204.120] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0204.120] FindClose (in: hFindFile=0x5d7a30 | out: hFindFile=0x5d7a30) returned 1 [0204.120] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0204.120] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0204.120] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0204.121] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\TempState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\TempState", lpFilePart=0x0) returned 0x6b [0204.121] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\TempState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\TempState\\", lpFilePart=0x0) returned 0x6c [0204.121] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\TempState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7670 [0204.121] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0204.121] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0204.121] FindClose (in: hFindFile=0x5d7670 | out: hFindFile=0x5d7670) returned 1 [0204.121] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0204.121] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0204.121] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0204.121] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\TempState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\TempState", lpFilePart=0x0) returned 0x6b [0204.121] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\TempState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\TempState\\", lpFilePart=0x0) returned 0x6c [0204.121] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\TempState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7c70 [0204.122] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0204.122] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0204.122] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0204.122] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0204.122] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0204.122] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0204.122] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe", lpFilePart=0x0) returned 0x5d [0204.122] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\", lpFilePart=0x0) returned 0x5e [0204.122] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d81b0 [0204.193] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0204.194] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0204.194] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0204.194] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0204.194] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0204.194] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0204.194] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0204.194] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0204.195] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0204.195] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0204.195] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0204.195] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0204.195] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0204.195] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0204.196] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe", lpFilePart=0x0) returned 0x5d [0204.196] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\", lpFilePart=0x0) returned 0x5e [0204.196] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d7eb0 [0204.196] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0204.197] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0204.197] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0204.197] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0204.197] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0204.197] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0204.197] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0204.197] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0204.197] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0204.197] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0204.197] FindClose (in: hFindFile=0x5d7eb0 | out: hFindFile=0x5d7eb0) returned 1 [0204.198] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0204.198] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0204.198] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0204.198] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\AC", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\AC", lpFilePart=0x0) returned 0x60 [0204.198] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\AC\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\AC\\", lpFilePart=0x0) returned 0x61 [0204.198] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\AC\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7670 [0204.209] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0204.209] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0204.210] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0204.210] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0204.210] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0204.210] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0204.210] FindClose (in: hFindFile=0x5d7670 | out: hFindFile=0x5d7670) returned 1 [0204.211] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0204.211] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0204.211] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0204.211] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\AC", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\AC", lpFilePart=0x0) returned 0x60 [0204.211] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\AC\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\AC\\", lpFilePart=0x0) returned 0x61 [0204.211] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\AC\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7c70 [0204.212] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0204.212] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0204.212] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0204.212] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0204.212] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0204.212] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0204.212] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0204.213] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0204.213] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0204.213] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0204.213] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\AC\\INetCache", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\AC\\INetCache", lpFilePart=0x0) returned 0x6a [0204.213] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\AC\\INetCache\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\AC\\INetCache\\", lpFilePart=0x0) returned 0x6b [0204.213] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\AC\\INetCache\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7c70 [0204.220] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0204.221] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0204.221] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0204.221] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0204.221] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0204.221] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0204.221] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\AC\\INetCache", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\AC\\INetCache", lpFilePart=0x0) returned 0x6a [0204.221] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\AC\\INetCache\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\AC\\INetCache\\", lpFilePart=0x0) returned 0x6b [0204.221] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\AC\\INetCache\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7550 [0204.221] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0204.221] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0204.221] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0204.221] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0204.221] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0204.222] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0204.222] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\AC\\INetCookies", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\AC\\INetCookies", lpFilePart=0x0) returned 0x6c [0204.222] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\AC\\INetCookies\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\AC\\INetCookies\\", lpFilePart=0x0) returned 0x6d [0204.222] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\AC\\INetCookies\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7fd0 [0204.222] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0204.222] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0204.222] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0204.222] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0204.222] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0204.222] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0204.222] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\AC\\INetCookies", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\AC\\INetCookies", lpFilePart=0x0) returned 0x6c [0204.222] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\AC\\INetCookies\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\AC\\INetCookies\\", lpFilePart=0x0) returned 0x6d [0204.222] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\AC\\INetCookies\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7a90 [0204.223] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0204.223] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0204.223] FindClose (in: hFindFile=0x5d7a90 | out: hFindFile=0x5d7a90) returned 1 [0204.223] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0204.223] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0204.223] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0204.223] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\AC\\INetHistory", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\AC\\INetHistory", lpFilePart=0x0) returned 0x6c [0204.223] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\AC\\INetHistory\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\AC\\INetHistory\\", lpFilePart=0x0) returned 0x6d [0204.223] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\AC\\INetHistory\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7550 [0204.223] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0204.223] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0204.224] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0204.224] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0204.224] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0204.224] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0204.224] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\AC\\INetHistory", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\AC\\INetHistory", lpFilePart=0x0) returned 0x6c [0204.224] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\AC\\INetHistory\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\AC\\INetHistory\\", lpFilePart=0x0) returned 0x6d [0204.224] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\AC\\INetHistory\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7fd0 [0204.224] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0204.224] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0204.224] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0204.224] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0204.224] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0204.224] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0204.224] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\AC\\Temp", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\AC\\Temp", lpFilePart=0x0) returned 0x65 [0204.224] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\AC\\Temp\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\AC\\Temp\\", lpFilePart=0x0) returned 0x66 [0204.224] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\AC\\Temp\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7a30 [0204.226] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0204.226] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0204.226] FindClose (in: hFindFile=0x5d7a30 | out: hFindFile=0x5d7a30) returned 1 [0204.226] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0204.226] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0204.226] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0204.226] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\AC\\Temp", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\AC\\Temp", lpFilePart=0x0) returned 0x65 [0204.226] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\AC\\Temp\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\AC\\Temp\\", lpFilePart=0x0) returned 0x66 [0204.227] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\AC\\Temp\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d78b0 [0204.227] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0204.227] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0204.227] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0204.227] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0204.227] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0204.227] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0204.227] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\AppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\AppData", lpFilePart=0x0) returned 0x65 [0204.227] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\AppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\AppData\\", lpFilePart=0x0) returned 0x66 [0204.227] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\AppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d81b0 [0204.227] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0204.228] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0204.228] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0204.228] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0204.228] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0204.228] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0204.228] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\AppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\AppData", lpFilePart=0x0) returned 0x65 [0204.228] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\AppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\AppData\\", lpFilePart=0x0) returned 0x66 [0204.228] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\AppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7c70 [0204.228] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0204.228] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0204.228] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0204.228] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0204.228] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0204.228] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0204.228] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\LocalCache", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\LocalCache", lpFilePart=0x0) returned 0x68 [0204.228] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\LocalCache\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\LocalCache\\", lpFilePart=0x0) returned 0x69 [0204.229] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\LocalCache\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7670 [0204.240] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0204.240] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0204.240] FindClose (in: hFindFile=0x5d7670 | out: hFindFile=0x5d7670) returned 1 [0204.240] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0204.240] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0204.240] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0204.241] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\LocalCache", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\LocalCache", lpFilePart=0x0) returned 0x68 [0204.241] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\LocalCache\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\LocalCache\\", lpFilePart=0x0) returned 0x69 [0204.241] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\LocalCache\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7eb0 [0204.241] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0204.241] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0204.241] FindClose (in: hFindFile=0x5d7eb0 | out: hFindFile=0x5d7eb0) returned 1 [0204.241] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0204.241] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0204.241] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0204.241] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\LocalState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\LocalState", lpFilePart=0x0) returned 0x68 [0204.241] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\LocalState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\LocalState\\", lpFilePart=0x0) returned 0x69 [0204.241] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\LocalState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7550 [0204.242] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0204.242] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0204.242] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0204.242] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0204.242] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0204.242] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0204.242] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\LocalState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\LocalState", lpFilePart=0x0) returned 0x68 [0204.242] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\LocalState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\LocalState\\", lpFilePart=0x0) returned 0x69 [0204.242] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\LocalState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d79d0 [0204.242] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0204.242] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0204.242] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0204.243] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0204.243] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0204.243] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0204.243] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\RoamingState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\RoamingState", lpFilePart=0x0) returned 0x6a [0204.243] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\RoamingState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\RoamingState\\", lpFilePart=0x0) returned 0x6b [0204.243] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\RoamingState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7550 [0204.243] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0204.243] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0204.243] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0204.243] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0204.243] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0204.243] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0204.243] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\RoamingState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\RoamingState", lpFilePart=0x0) returned 0x6a [0204.243] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\RoamingState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\RoamingState\\", lpFilePart=0x0) returned 0x6b [0204.243] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\RoamingState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d81b0 [0204.244] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0204.244] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0204.244] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0204.244] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0204.244] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0204.244] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0204.244] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\Settings", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\Settings", lpFilePart=0x0) returned 0x66 [0204.244] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\Settings\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\Settings\\", lpFilePart=0x0) returned 0x67 [0204.244] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\Settings\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d79d0 [0204.250] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0204.250] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0204.251] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0204.251] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0204.251] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0204.251] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0204.251] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0204.252] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0204.252] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0204.252] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0204.252] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\Settings", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\Settings", lpFilePart=0x0) returned 0x66 [0204.252] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\Settings\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\Settings\\", lpFilePart=0x0) returned 0x67 [0204.252] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\Settings\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7fd0 [0204.252] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0204.253] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0204.253] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0204.253] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0204.253] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0204.253] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0204.253] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0204.254] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0204.254] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0204.254] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\Settings\\roaming.lock", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\Settings\\roaming.lock", lpFilePart=0x0) returned 0x73 [0204.254] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0204.254] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.net.native.framework.1.0_8wekyb3d8bbwe\\settings\\roaming.lock"), fInfoLevelId=0x0, lpFileInformation=0x21d11d0 | out: lpFileInformation=0x21d11d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xccd87946, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xccd87946, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xccd87946, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0204.255] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0204.255] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\Settings\\roaming.lock", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\Settings\\roaming.lock", lpFilePart=0x0) returned 0x73 [0204.255] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0204.255] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.net.native.framework.1.0_8wekyb3d8bbwe\\settings\\roaming.lock"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0204.255] GetFileType (hFile=0x444) returned 0x1 [0204.255] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0204.255] GetFileType (hFile=0x444) returned 0x1 [0204.255] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0x0 [0204.255] CloseHandle (hObject=0x444) returned 1 [0204.268] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\Settings\\roaming.lock", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\Settings\\roaming.lock", lpFilePart=0x0) returned 0x73 [0204.268] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0204.268] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.net.native.framework.1.0_8wekyb3d8bbwe\\settings\\roaming.lock"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0204.269] GetFileType (hFile=0x444) returned 0x1 [0204.269] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0204.269] GetFileType (hFile=0x444) returned 0x1 [0204.269] WriteFile (in: hFile=0x444, lpBuffer=0x2247668*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x3be628, lpOverlapped=0x0 | out: lpBuffer=0x2247668*, lpNumberOfBytesWritten=0x3be628*=0x10, lpOverlapped=0x0) returned 1 [0204.270] CloseHandle (hObject=0x444) returned 1 [0204.270] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\Settings\\roaming.lock", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\Settings\\roaming.lock", lpFilePart=0x0) returned 0x73 [0204.270] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\Settings\\roaming.lock.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\Settings\\roaming.lock.xuy", lpFilePart=0x0) returned 0x77 [0204.270] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0204.270] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.net.native.framework.1.0_8wekyb3d8bbwe\\settings\\roaming.lock"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xccd87946, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xccd87946, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x659aa01a, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0204.270] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0204.270] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.net.native.framework.1.0_8wekyb3d8bbwe\\settings\\roaming.lock"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\Settings\\roaming.lock.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.net.native.framework.1.0_8wekyb3d8bbwe\\settings\\roaming.lock.xuy")) returned 1 [0204.272] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\Settings\\settings.dat", lpFilePart=0x0) returned 0x73 [0204.272] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0204.272] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.net.native.framework.1.0_8wekyb3d8bbwe\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x22489d8 | out: lpFileInformation=0x22489d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xccc5666c, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xe4095b53, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x6a581827, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0204.272] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0204.272] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\Settings\\settings.dat", lpFilePart=0x0) returned 0x73 [0204.272] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0204.272] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.net.native.framework.1.0_8wekyb3d8bbwe\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x2248b78 | out: lpFileInformation=0x2248b78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xccc5666c, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xe4095b53, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x6a581827, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0204.272] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0204.272] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\Settings\\settings.dat", lpFilePart=0x0) returned 0x73 [0204.272] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0204.272] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.net.native.framework.1.0_8wekyb3d8bbwe\\settings\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0204.273] GetFileType (hFile=0x444) returned 0x1 [0204.273] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0204.273] GetFileType (hFile=0x444) returned 0x1 [0204.273] ReadFile (in: hFile=0x444, lpBuffer=0x224afe8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x224afe8*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0204.285] CloseHandle (hObject=0x444) returned 1 [0204.285] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\Settings\\settings.dat", lpFilePart=0x0) returned 0x73 [0204.285] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0204.286] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.net.native.framework.1.0_8wekyb3d8bbwe\\settings\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0204.286] GetFileType (hFile=0x444) returned 0x1 [0204.286] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0204.286] GetFileType (hFile=0x444) returned 0x1 [0204.286] WriteFile (in: hFile=0x444, lpBuffer=0x2248cf8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x2248cf8*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0204.286] CloseHandle (hObject=0x444) returned 1 [0204.286] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\Settings\\settings.dat", lpFilePart=0x0) returned 0x73 [0204.286] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\Settings\\settings.dat.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\Settings\\settings.dat.xuy", lpFilePart=0x0) returned 0x77 [0204.286] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0204.286] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.net.native.framework.1.0_8wekyb3d8bbwe\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xccc5666c, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xe4095b53, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x659d026f, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0204.286] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0204.286] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.net.native.framework.1.0_8wekyb3d8bbwe\\settings\\settings.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\Settings\\settings.dat.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.net.native.framework.1.0_8wekyb3d8bbwe\\settings\\settings.dat.xuy")) returned 1 [0204.288] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\Settings\\settings.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\Settings\\settings.dat.LOG1", lpFilePart=0x0) returned 0x78 [0204.288] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0204.288] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.net.native.framework.1.0_8wekyb3d8bbwe\\settings\\settings.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x22c74e0 | out: lpFileInformation=0x22c74e0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xcd0ced22, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xcd0ced22, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xcd0ced22, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0204.288] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0204.288] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\Settings\\settings.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\Settings\\settings.dat.LOG1", lpFilePart=0x0) returned 0x78 [0204.288] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0204.288] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.net.native.framework.1.0_8wekyb3d8bbwe\\settings\\settings.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x22c7698 | out: lpFileInformation=0x22c7698*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xcd0ced22, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xcd0ced22, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xcd0ced22, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0204.288] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0204.288] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\Settings\\settings.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\Settings\\settings.dat.LOG1", lpFilePart=0x0) returned 0x78 [0204.288] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0204.288] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.net.native.framework.1.0_8wekyb3d8bbwe\\settings\\settings.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0204.289] GetFileType (hFile=0x444) returned 0x1 [0204.289] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0204.289] GetFileType (hFile=0x444) returned 0x1 [0204.289] ReadFile (in: hFile=0x444, lpBuffer=0x22c9b38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x22c9b38*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0204.301] CloseHandle (hObject=0x444) returned 1 [0204.301] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\Settings\\settings.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\Settings\\settings.dat.LOG1", lpFilePart=0x0) returned 0x78 [0204.301] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0204.301] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.net.native.framework.1.0_8wekyb3d8bbwe\\settings\\settings.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0204.301] GetFileType (hFile=0x444) returned 0x1 [0204.301] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0204.301] GetFileType (hFile=0x444) returned 0x1 [0204.301] WriteFile (in: hFile=0x444, lpBuffer=0x22c7830*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x22c7830*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0204.301] CloseHandle (hObject=0x444) returned 1 [0204.301] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\Settings\\settings.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\Settings\\settings.dat.LOG1", lpFilePart=0x0) returned 0x78 [0204.301] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\Settings\\settings.dat.LOG1.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\Settings\\settings.dat.LOG1.xuy", lpFilePart=0x0) returned 0x7c [0204.301] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0204.301] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.net.native.framework.1.0_8wekyb3d8bbwe\\settings\\settings.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xcd0ced22, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xcd0ced22, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x659f64f8, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0204.302] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0204.302] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.net.native.framework.1.0_8wekyb3d8bbwe\\settings\\settings.dat.log1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\Settings\\settings.dat.LOG1.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.net.native.framework.1.0_8wekyb3d8bbwe\\settings\\settings.dat.log1.xuy")) returned 1 [0204.303] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\Settings\\settings.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\Settings\\settings.dat.LOG2", lpFilePart=0x0) returned 0x78 [0204.303] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0204.303] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.net.native.framework.1.0_8wekyb3d8bbwe\\settings\\settings.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x2346078 | out: lpFileInformation=0x2346078*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xcd0ced22, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xcd0ced22, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xcd0ced22, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0204.303] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0204.303] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\Settings\\settings.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\Settings\\settings.dat.LOG2", lpFilePart=0x0) returned 0x78 [0204.303] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0204.303] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.net.native.framework.1.0_8wekyb3d8bbwe\\settings\\settings.dat.log2"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0204.303] GetFileType (hFile=0x444) returned 0x1 [0204.303] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0204.303] GetFileType (hFile=0x444) returned 0x1 [0204.303] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0x0 [0204.303] CloseHandle (hObject=0x444) returned 1 [0204.344] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\Settings\\settings.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\Settings\\settings.dat.LOG2", lpFilePart=0x0) returned 0x78 [0204.344] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0204.344] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.net.native.framework.1.0_8wekyb3d8bbwe\\settings\\settings.dat.log2"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0204.346] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb0e0) returned 1 [0204.346] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\Settings\\settings.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\Settings\\settings.dat.LOG2", lpFilePart=0x0) returned 0x78 [0204.346] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc200) returned 1 [0204.346] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.net.native.framework.1.0_8wekyb3d8bbwe\\settings\\settings.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x3bc2e0 | out: lpFileInformation=0x3bc2e0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xcd0ced22, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xcd0ced22, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xcd0ced22, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0204.346] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1c0) returned 1 [0204.346] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\Settings\\settings.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbd80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\Settings\\settings.dat.LOG2", lpFilePart=0x0) returned 0x78 [0204.346] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc200) returned 1 [0204.346] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.net.native.framework.1.0_8wekyb3d8bbwe\\settings\\settings.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x21c00f8 | out: lpFileInformation=0x21c00f8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xcd0ced22, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xcd0ced22, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xcd0ced22, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0204.346] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1c0) returned 1 [0204.346] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\Settings\\settings.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\Settings\\settings.dat.LOG2", lpFilePart=0x0) returned 0x78 [0204.347] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0c0) returned 1 [0204.347] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.net.native.framework.1.0_8wekyb3d8bbwe\\settings\\settings.dat.log2"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0204.347] GetFileType (hFile=0x444) returned 0x1 [0204.347] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc030) returned 1 [0204.347] GetFileType (hFile=0x444) returned 0x1 [0204.347] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc258 | out: lpFileSizeHigh=0x3bc258*=0x0) returned 0x0 [0204.347] CloseHandle (hObject=0x444) returned 1 [0204.382] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\Settings\\settings.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\Settings\\settings.dat.LOG2", lpFilePart=0x0) returned 0x78 [0204.382] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0c0) returned 1 [0204.382] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.net.native.framework.1.0_8wekyb3d8bbwe\\settings\\settings.dat.log2"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0204.384] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8b50) returned 1 [0204.384] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0204.384] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\SystemAppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\SystemAppData", lpFilePart=0x0) returned 0x6b [0204.384] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\SystemAppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\SystemAppData\\", lpFilePart=0x0) returned 0x6c [0204.384] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\SystemAppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7610 [0204.385] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0204.385] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0204.385] FindClose (in: hFindFile=0x5d7610 | out: hFindFile=0x5d7610) returned 1 [0204.385] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0204.385] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0204.385] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0204.385] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\SystemAppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\SystemAppData", lpFilePart=0x0) returned 0x6b [0204.385] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\SystemAppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\SystemAppData\\", lpFilePart=0x0) returned 0x6c [0204.385] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\SystemAppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7a30 [0204.385] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0204.386] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0204.386] FindClose (in: hFindFile=0x5d7a30 | out: hFindFile=0x5d7a30) returned 1 [0204.386] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0204.386] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0204.386] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0204.386] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\TempState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\TempState", lpFilePart=0x0) returned 0x67 [0204.386] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\TempState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\TempState\\", lpFilePart=0x0) returned 0x68 [0204.386] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\TempState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7eb0 [0204.386] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0204.386] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0204.386] FindClose (in: hFindFile=0x5d7eb0 | out: hFindFile=0x5d7eb0) returned 1 [0204.386] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0204.386] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0204.386] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0204.387] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\TempState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\TempState", lpFilePart=0x0) returned 0x67 [0204.387] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\TempState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\TempState\\", lpFilePart=0x0) returned 0x68 [0204.387] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\TempState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d78b0 [0204.387] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0204.387] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0204.387] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0204.387] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0204.387] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0204.387] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0204.387] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe", lpFilePart=0x0) returned 0x5b [0204.387] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe\\", lpFilePart=0x0) returned 0x5c [0204.387] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d7fd0 [0204.393] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0204.394] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0204.394] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0204.394] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0204.394] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0204.394] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0204.394] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0204.394] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0204.395] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0204.395] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0204.395] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0204.395] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0204.395] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0204.395] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0204.395] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe", lpFilePart=0x0) returned 0x5b [0204.396] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe\\", lpFilePart=0x0) returned 0x5c [0204.396] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d8090 [0204.396] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0204.396] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0204.397] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0204.397] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0204.397] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0204.397] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0204.397] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0204.397] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0204.397] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0204.397] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0204.397] FindClose (in: hFindFile=0x5d8090 | out: hFindFile=0x5d8090) returned 1 [0204.398] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0204.398] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0204.398] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0204.398] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe\\AC", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe\\AC", lpFilePart=0x0) returned 0x5e [0204.398] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe\\AC\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe\\AC\\", lpFilePart=0x0) returned 0x5f [0204.398] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe\\AC\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7a30 [0204.405] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0204.405] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0204.405] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0204.405] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0204.405] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0204.406] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0204.406] FindClose (in: hFindFile=0x5d7a30 | out: hFindFile=0x5d7a30) returned 1 [0204.407] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0204.407] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0204.407] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0204.407] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe\\AC", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe\\AC", lpFilePart=0x0) returned 0x5e [0204.407] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe\\AC\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe\\AC\\", lpFilePart=0x0) returned 0x5f [0204.407] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe\\AC\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d78b0 [0204.407] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0204.408] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0204.408] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0204.408] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0204.408] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0204.408] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0204.408] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0204.409] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0204.409] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0204.409] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0204.409] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe\\AC\\INetCache", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe\\AC\\INetCache", lpFilePart=0x0) returned 0x68 [0204.409] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe\\AC\\INetCache\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe\\AC\\INetCache\\", lpFilePart=0x0) returned 0x69 [0204.409] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe\\AC\\INetCache\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7d90 [0204.414] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0204.414] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0204.415] FindClose (in: hFindFile=0x5d7d90 | out: hFindFile=0x5d7d90) returned 1 [0204.415] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0204.415] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0204.415] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0204.415] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe\\AC\\INetCache", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe\\AC\\INetCache", lpFilePart=0x0) returned 0x68 [0204.415] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe\\AC\\INetCache\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe\\AC\\INetCache\\", lpFilePart=0x0) returned 0x69 [0204.415] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe\\AC\\INetCache\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d79d0 [0204.415] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0204.415] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0204.415] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0204.415] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0204.415] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0204.415] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0204.415] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe\\AC\\INetCookies", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe\\AC\\INetCookies", lpFilePart=0x0) returned 0x6a [0204.415] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe\\AC\\INetCookies\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe\\AC\\INetCookies\\", lpFilePart=0x0) returned 0x6b [0204.415] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe\\AC\\INetCookies\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d79d0 [0204.416] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0204.416] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0204.416] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0204.416] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0204.416] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0204.416] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0204.416] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe\\AC\\INetCookies", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe\\AC\\INetCookies", lpFilePart=0x0) returned 0x6a [0204.416] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe\\AC\\INetCookies\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe\\AC\\INetCookies\\", lpFilePart=0x0) returned 0x6b [0204.416] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe\\AC\\INetCookies\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7d30 [0204.416] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0204.416] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0204.417] FindClose (in: hFindFile=0x5d7d30 | out: hFindFile=0x5d7d30) returned 1 [0204.417] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0204.417] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0204.417] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0204.417] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe\\AC\\INetHistory", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe\\AC\\INetHistory", lpFilePart=0x0) returned 0x6a [0204.417] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe\\AC\\INetHistory\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe\\AC\\INetHistory\\", lpFilePart=0x0) returned 0x6b [0204.417] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe\\AC\\INetHistory\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7cd0 [0204.417] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0204.417] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0204.417] FindClose (in: hFindFile=0x5d7cd0 | out: hFindFile=0x5d7cd0) returned 1 [0204.417] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0204.417] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0204.417] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0204.417] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe\\AC\\INetHistory", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe\\AC\\INetHistory", lpFilePart=0x0) returned 0x6a [0204.417] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe\\AC\\INetHistory\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe\\AC\\INetHistory\\", lpFilePart=0x0) returned 0x6b [0204.417] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe\\AC\\INetHistory\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7d30 [0204.418] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0204.418] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0204.418] FindClose (in: hFindFile=0x5d7d30 | out: hFindFile=0x5d7d30) returned 1 [0204.418] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0204.418] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0204.418] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0204.418] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe\\AC\\Temp", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe\\AC\\Temp", lpFilePart=0x0) returned 0x63 [0204.418] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe\\AC\\Temp\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe\\AC\\Temp\\", lpFilePart=0x0) returned 0x64 [0204.418] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe\\AC\\Temp\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d78b0 [0204.418] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0204.418] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0204.418] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0204.418] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0204.419] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0204.419] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0204.420] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0204.420] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0204.420] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0204.420] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0204.423] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0204.423] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0204.423] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0204.423] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0204.423] FindClose (in: hFindFile=0x5d7af0 | out: hFindFile=0x5d7af0) returned 1 [0204.423] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0204.424] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0204.424] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0204.424] FindClose (in: hFindFile=0x5d7f10 | out: hFindFile=0x5d7f10) returned 1 [0204.424] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0204.424] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0204.424] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0204.424] FindClose (in: hFindFile=0x5d7670 | out: hFindFile=0x5d7670) returned 1 [0204.424] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0204.424] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0204.424] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0204.425] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0204.425] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0204.425] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0204.425] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0204.425] FindClose (in: hFindFile=0x5d7cd0 | out: hFindFile=0x5d7cd0) returned 1 [0204.425] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0204.425] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0204.425] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0204.426] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0204.426] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0204.426] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0204.426] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0204.426] FindClose (in: hFindFile=0x5d7a30 | out: hFindFile=0x5d7a30) returned 1 [0204.426] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0204.426] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0204.426] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0204.429] FindClose (in: hFindFile=0x5d7670 | out: hFindFile=0x5d7670) returned 1 [0204.430] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0204.430] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0204.430] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0204.431] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0204.432] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0204.432] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0204.432] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0204.432] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.net.native.runtime.1.0_8wekyb3d8bbwe\\settings\\roaming.lock"), fInfoLevelId=0x0, lpFileInformation=0x2256ce8 | out: lpFileInformation=0x2256ce8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcca8ca29, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xcca8ca29, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xcca8ca29, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0204.433] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0204.433] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0204.433] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.net.native.runtime.1.0_8wekyb3d8bbwe\\settings\\roaming.lock"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0204.433] GetFileType (hFile=0x444) returned 0x1 [0204.433] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0204.433] GetFileType (hFile=0x444) returned 0x1 [0204.433] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0x0 [0204.433] CloseHandle (hObject=0x444) returned 1 [0204.443] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0204.443] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.net.native.runtime.1.0_8wekyb3d8bbwe\\settings\\roaming.lock"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0204.445] GetFileType (hFile=0x444) returned 0x1 [0204.445] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0204.445] GetFileType (hFile=0x444) returned 0x1 [0204.446] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0204.446] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.net.native.runtime.1.0_8wekyb3d8bbwe\\settings\\roaming.lock"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcca8ca29, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xcca8ca29, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x65b4db65, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0204.446] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0204.446] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.net.native.runtime.1.0_8wekyb3d8bbwe\\settings\\roaming.lock"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe\\Settings\\roaming.lock.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.net.native.runtime.1.0_8wekyb3d8bbwe\\settings\\roaming.lock.xuy")) returned 1 [0204.448] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0204.448] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.net.native.runtime.1.0_8wekyb3d8bbwe\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x22ce4f0 | out: lpFileInformation=0x22ce4f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcca8ca29, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xe3baad39, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x6a704fda, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0204.448] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0204.448] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0204.448] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.net.native.runtime.1.0_8wekyb3d8bbwe\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x22ce690 | out: lpFileInformation=0x22ce690*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcca8ca29, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xe3baad39, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x6a704fda, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0204.448] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0204.448] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0204.448] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.net.native.runtime.1.0_8wekyb3d8bbwe\\settings\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0204.449] GetFileType (hFile=0x444) returned 0x1 [0204.449] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0204.449] GetFileType (hFile=0x444) returned 0x1 [0204.449] ReadFile (in: hFile=0x444, lpBuffer=0x22d0b00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x22d0b00*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0204.461] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0204.461] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.net.native.runtime.1.0_8wekyb3d8bbwe\\settings\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0204.461] GetFileType (hFile=0x444) returned 0x1 [0204.461] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0204.461] GetFileType (hFile=0x444) returned 0x1 [0204.461] WriteFile (in: hFile=0x444, lpBuffer=0x22ce810*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x22ce810*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0204.461] CloseHandle (hObject=0x444) returned 1 [0204.461] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0204.461] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.net.native.runtime.1.0_8wekyb3d8bbwe\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcca8ca29, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xe3baad39, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x65b73c53, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0204.461] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0204.461] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.net.native.runtime.1.0_8wekyb3d8bbwe\\settings\\settings.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe\\Settings\\settings.dat.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.net.native.runtime.1.0_8wekyb3d8bbwe\\settings\\settings.dat.xuy")) returned 1 [0204.463] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0204.463] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.net.native.runtime.1.0_8wekyb3d8bbwe\\settings\\settings.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x234cff8 | out: lpFileInformation=0x234cff8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xccb4b5e9, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xccb4b5e9, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xccb4b5e9, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0204.463] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0204.463] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0204.463] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.net.native.runtime.1.0_8wekyb3d8bbwe\\settings\\settings.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x234d1a8 | out: lpFileInformation=0x234d1a8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xccb4b5e9, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xccb4b5e9, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xccb4b5e9, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0204.463] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0204.463] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0204.463] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.net.native.runtime.1.0_8wekyb3d8bbwe\\settings\\settings.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0204.464] GetFileType (hFile=0x444) returned 0x1 [0204.464] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0204.464] GetFileType (hFile=0x444) returned 0x1 [0204.507] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0204.507] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.net.native.runtime.1.0_8wekyb3d8bbwe\\settings\\settings.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0204.508] GetFileType (hFile=0x444) returned 0x1 [0204.508] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0204.508] GetFileType (hFile=0x444) returned 0x1 [0204.508] WriteFile (in: hFile=0x444, lpBuffer=0x217f098*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x217f098*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0204.508] CloseHandle (hObject=0x444) returned 1 [0204.508] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0204.508] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.net.native.runtime.1.0_8wekyb3d8bbwe\\settings\\settings.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xccb4b5e9, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xccb4b5e9, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x65be646d, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0204.508] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0204.508] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.net.native.runtime.1.0_8wekyb3d8bbwe\\settings\\settings.dat.log1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe\\Settings\\settings.dat.LOG1.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.net.native.runtime.1.0_8wekyb3d8bbwe\\settings\\settings.dat.log1.xuy")) returned 1 [0204.510] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0204.510] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.net.native.runtime.1.0_8wekyb3d8bbwe\\settings\\settings.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x21d0190 | out: lpFileInformation=0x21d0190*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xccb4b5e9, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xccb4b5e9, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xccb4b5e9, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0204.510] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0204.510] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0204.510] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0204.522] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0204.523] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb0e0) returned 1 [0204.524] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe\\Settings\\settings.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe\\Settings\\settings.dat.LOG2", lpFilePart=0x0) returned 0x76 [0204.524] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc200) returned 1 [0204.524] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.net.native.runtime.1.0_8wekyb3d8bbwe\\settings\\settings.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x3bc2e0 | out: lpFileInformation=0x3bc2e0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xccb4b5e9, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xccb4b5e9, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xccb4b5e9, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0204.524] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1c0) returned 1 [0204.524] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe\\Settings\\settings.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbd80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe\\Settings\\settings.dat.LOG2", lpFilePart=0x0) returned 0x76 [0204.524] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc200) returned 1 [0204.524] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.net.native.runtime.1.0_8wekyb3d8bbwe\\settings\\settings.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x2246f50 | out: lpFileInformation=0x2246f50*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xccb4b5e9, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xccb4b5e9, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xccb4b5e9, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0204.524] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1c0) returned 1 [0204.524] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe\\Settings\\settings.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe\\Settings\\settings.dat.LOG2", lpFilePart=0x0) returned 0x76 [0204.524] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0c0) returned 1 [0204.524] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.net.native.runtime.1.0_8wekyb3d8bbwe\\settings\\settings.dat.log2"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0204.524] GetFileType (hFile=0x444) returned 0x1 [0204.524] GetFileType (hFile=0x444) returned 0x1 [0204.524] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc258 | out: lpFileSizeHigh=0x3bc258*=0x0) returned 0x0 [0204.524] CloseHandle (hObject=0x444) returned 1 [0204.538] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe\\Settings\\settings.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe\\Settings\\settings.dat.LOG2", lpFilePart=0x0) returned 0x76 [0204.538] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.net.native.runtime.1.0_8wekyb3d8bbwe\\settings\\settings.dat.log2"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0204.540] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe\\SystemAppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe\\SystemAppData", lpFilePart=0x0) returned 0x69 [0204.540] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe\\SystemAppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe\\SystemAppData\\", lpFilePart=0x0) returned 0x6a [0204.540] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe\\SystemAppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7f10 [0204.540] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0204.540] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0204.540] FindClose (in: hFindFile=0x5d7f10 | out: hFindFile=0x5d7f10) returned 1 [0204.540] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe\\SystemAppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe\\SystemAppData", lpFilePart=0x0) returned 0x69 [0204.540] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe\\SystemAppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe\\SystemAppData\\", lpFilePart=0x0) returned 0x6a [0204.540] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe\\SystemAppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d78b0 [0204.540] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0204.541] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0204.541] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0204.541] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe\\TempState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe\\TempState", lpFilePart=0x0) returned 0x65 [0204.541] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe\\TempState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe\\TempState\\", lpFilePart=0x0) returned 0x66 [0204.541] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe\\TempState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7c70 [0204.541] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0204.541] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0204.541] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0204.541] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe\\TempState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe\\TempState", lpFilePart=0x0) returned 0x65 [0204.541] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe\\TempState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe\\TempState\\", lpFilePart=0x0) returned 0x66 [0204.541] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe\\TempState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d81b0 [0204.542] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0204.542] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0204.542] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0204.542] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe", lpFilePart=0x0) returned 0x53 [0204.542] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\", lpFilePart=0x0) returned 0x54 [0204.542] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d81b0 [0204.561] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0204.562] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0204.562] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0204.562] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0204.562] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0204.562] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0204.562] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0204.563] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0204.563] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0204.563] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0204.563] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0204.563] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0204.564] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe", lpFilePart=0x0) returned 0x53 [0204.564] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\", lpFilePart=0x0) returned 0x54 [0204.564] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d7a90 [0204.564] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0204.565] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0204.565] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0204.565] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0204.565] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0204.565] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0204.565] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0204.565] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0204.565] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0204.565] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0204.565] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0204.566] FindClose (in: hFindFile=0x5d7a90 | out: hFindFile=0x5d7a90) returned 1 [0204.566] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\AC", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\AC", lpFilePart=0x0) returned 0x56 [0204.566] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\AC\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\AC\\", lpFilePart=0x0) returned 0x57 [0204.566] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\AC\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d73d0 [0204.576] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0204.576] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0204.576] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0204.576] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0204.577] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0204.577] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0204.577] FindClose (in: hFindFile=0x5d73d0 | out: hFindFile=0x5d73d0) returned 1 [0204.577] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\AC", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\AC", lpFilePart=0x0) returned 0x56 [0204.577] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\AC\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\AC\\", lpFilePart=0x0) returned 0x57 [0204.577] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\AC\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d78b0 [0204.611] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0204.611] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0204.611] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0204.611] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0204.611] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0204.611] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0204.612] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0204.612] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\AC\\INetCache", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\AC\\INetCache", lpFilePart=0x0) returned 0x60 [0204.612] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\AC\\INetCache\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\AC\\INetCache\\", lpFilePart=0x0) returned 0x61 [0204.612] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\AC\\INetCache\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d78b0 [0204.619] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0204.619] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0204.619] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0204.619] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\AC\\INetCache", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\AC\\INetCache", lpFilePart=0x0) returned 0x60 [0204.619] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\AC\\INetCache\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\AC\\INetCache\\", lpFilePart=0x0) returned 0x61 [0204.619] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\AC\\INetCache\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7550 [0204.620] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0204.620] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0204.620] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0204.620] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\AC\\INetCookies", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\AC\\INetCookies", lpFilePart=0x0) returned 0x62 [0204.620] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\AC\\INetCookies\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\AC\\INetCookies\\", lpFilePart=0x0) returned 0x63 [0204.620] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\AC\\INetCookies\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7f10 [0204.620] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0204.620] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0204.620] FindClose (in: hFindFile=0x5d7f10 | out: hFindFile=0x5d7f10) returned 1 [0204.620] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\AC\\INetCookies", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\AC\\INetCookies", lpFilePart=0x0) returned 0x62 [0204.620] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\AC\\INetCookies\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\AC\\INetCookies\\", lpFilePart=0x0) returned 0x63 [0204.620] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\AC\\INetCookies\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7370 [0204.621] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0204.621] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0204.621] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0204.621] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\AC\\INetHistory", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\AC\\INetHistory", lpFilePart=0x0) returned 0x62 [0204.621] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\AC\\INetHistory\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\AC\\INetHistory\\", lpFilePart=0x0) returned 0x63 [0204.621] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\AC\\INetHistory\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7370 [0204.621] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0204.621] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0204.621] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0204.621] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\AC\\INetHistory", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\AC\\INetHistory", lpFilePart=0x0) returned 0x62 [0204.621] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\AC\\INetHistory\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\AC\\INetHistory\\", lpFilePart=0x0) returned 0x63 [0204.622] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\AC\\INetHistory\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d78b0 [0204.622] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0204.622] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0204.622] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0204.622] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\AC\\Temp", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\AC\\Temp", lpFilePart=0x0) returned 0x5b [0204.622] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\AC\\Temp\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\AC\\Temp\\", lpFilePart=0x0) returned 0x5c [0204.622] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\AC\\Temp\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d78b0 [0204.622] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0204.622] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0204.622] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0204.622] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\AC\\Temp", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\AC\\Temp", lpFilePart=0x0) returned 0x5b [0204.623] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\AC\\Temp\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\AC\\Temp\\", lpFilePart=0x0) returned 0x5c [0204.623] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\AC\\Temp\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7e50 [0204.623] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0204.623] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0204.623] FindClose (in: hFindFile=0x5d7e50 | out: hFindFile=0x5d7e50) returned 1 [0204.623] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\AppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\AppData", lpFilePart=0x0) returned 0x5b [0204.623] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\AppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\AppData\\", lpFilePart=0x0) returned 0x5c [0204.623] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\AppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7e50 [0204.626] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0204.626] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0204.626] FindClose (in: hFindFile=0x5d7e50 | out: hFindFile=0x5d7e50) returned 1 [0204.626] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\AppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\AppData", lpFilePart=0x0) returned 0x5b [0204.626] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\AppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\AppData\\", lpFilePart=0x0) returned 0x5c [0204.626] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\AppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7370 [0204.627] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0204.627] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0204.627] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0204.627] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\LocalCache", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\LocalCache", lpFilePart=0x0) returned 0x5e [0204.627] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\LocalCache\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\LocalCache\\", lpFilePart=0x0) returned 0x5f [0204.627] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\LocalCache\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7370 [0204.627] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0204.627] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0204.627] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0204.627] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\LocalCache", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\LocalCache", lpFilePart=0x0) returned 0x5e [0204.627] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\LocalCache\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\LocalCache\\", lpFilePart=0x0) returned 0x5f [0204.627] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\LocalCache\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7d30 [0204.628] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0204.628] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0204.628] FindClose (in: hFindFile=0x5d7d30 | out: hFindFile=0x5d7d30) returned 1 [0204.628] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\LocalState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\LocalState", lpFilePart=0x0) returned 0x5e [0204.628] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\LocalState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\LocalState\\", lpFilePart=0x0) returned 0x5f [0204.628] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\LocalState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d79d0 [0204.628] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0204.628] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0204.628] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0204.628] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\LocalState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\LocalState", lpFilePart=0x0) returned 0x5e [0204.629] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\LocalState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\LocalState\\", lpFilePart=0x0) returned 0x5f [0204.629] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\LocalState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d78b0 [0204.629] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0204.629] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0204.629] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0204.629] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\Microsoft.Office.OneNote_17.4201.10091.0_x64__8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\Microsoft.Office.OneNote_17.4201.10091.0_x64__8wekyb3d8bbwe", lpFilePart=0x0) returned 0x8f [0204.629] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\Microsoft.Office.OneNote_17.4201.10091.0_x64__8wekyb3d8bbwe\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\Microsoft.Office.OneNote_17.4201.10091.0_x64__8wekyb3d8bbwe\\", lpFilePart=0x0) returned 0x90 [0204.629] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\Microsoft.Office.OneNote_17.4201.10091.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7610 [0204.629] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0204.629] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0204.630] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0204.630] FindClose (in: hFindFile=0x5d7610 | out: hFindFile=0x5d7610) returned 1 [0204.630] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\Microsoft.Office.OneNote_17.4201.10091.0_x64__8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\Microsoft.Office.OneNote_17.4201.10091.0_x64__8wekyb3d8bbwe", lpFilePart=0x0) returned 0x8f [0204.630] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\Microsoft.Office.OneNote_17.4201.10091.0_x64__8wekyb3d8bbwe\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\Microsoft.Office.OneNote_17.4201.10091.0_x64__8wekyb3d8bbwe\\", lpFilePart=0x0) returned 0x90 [0204.630] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\Microsoft.Office.OneNote_17.4201.10091.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7a30 [0204.630] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0204.630] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0204.630] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0204.630] FindClose (in: hFindFile=0x5d7a30 | out: hFindFile=0x5d7a30) returned 1 [0204.630] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\Microsoft.Office.OneNote_17.4201.10091.0_x64__8wekyb3d8bbwe\\ActivationStore", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\Microsoft.Office.OneNote_17.4201.10091.0_x64__8wekyb3d8bbwe\\ActivationStore", lpFilePart=0x0) returned 0x9f [0204.630] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\Microsoft.Office.OneNote_17.4201.10091.0_x64__8wekyb3d8bbwe\\ActivationStore\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\Microsoft.Office.OneNote_17.4201.10091.0_x64__8wekyb3d8bbwe\\ActivationStore\\", lpFilePart=0x0) returned 0xa0 [0204.630] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\Microsoft.Office.OneNote_17.4201.10091.0_x64__8wekyb3d8bbwe\\ActivationStore\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7fd0 [0204.642] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0204.643] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0204.643] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0204.643] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0204.643] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0204.643] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0204.644] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\Microsoft.Office.OneNote_17.4201.10091.0_x64__8wekyb3d8bbwe\\ActivationStore", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\Microsoft.Office.OneNote_17.4201.10091.0_x64__8wekyb3d8bbwe\\ActivationStore", lpFilePart=0x0) returned 0x9f [0204.644] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\Microsoft.Office.OneNote_17.4201.10091.0_x64__8wekyb3d8bbwe\\ActivationStore\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\Microsoft.Office.OneNote_17.4201.10091.0_x64__8wekyb3d8bbwe\\ActivationStore\\", lpFilePart=0x0) returned 0xa0 [0204.644] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\Microsoft.Office.OneNote_17.4201.10091.0_x64__8wekyb3d8bbwe\\ActivationStore\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7d30 [0204.645] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0204.645] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0204.645] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0204.645] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0204.645] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0204.645] FindClose (in: hFindFile=0x5d7d30 | out: hFindFile=0x5d7d30) returned 1 [0204.646] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\Microsoft.Office.OneNote_17.4201.10091.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\Microsoft.Office.OneNote_17.4201.10091.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xb3 [0204.646] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\Microsoft.Office.OneNote_17.4201.10091.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.office.onenote_8wekyb3d8bbwe\\microsoft.office.onenote_17.4201.10091.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), fInfoLevelId=0x0, lpFileInformation=0x22dece0 | out: lpFileInformation=0x22dece0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x179a7f88, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x17d87cb7, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x17d87cb7, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x40000)) returned 1 [0204.647] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\Microsoft.Office.OneNote_17.4201.10091.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\Microsoft.Office.OneNote_17.4201.10091.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xb3 [0204.647] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\Microsoft.Office.OneNote_17.4201.10091.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.office.onenote_8wekyb3d8bbwe\\microsoft.office.onenote_17.4201.10091.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), fInfoLevelId=0x0, lpFileInformation=0x22def08 | out: lpFileInformation=0x22def08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x179a7f88, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x17d87cb7, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x17d87cb7, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x40000)) returned 1 [0204.647] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\Microsoft.Office.OneNote_17.4201.10091.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\Microsoft.Office.OneNote_17.4201.10091.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xb3 [0204.647] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\Microsoft.Office.OneNote_17.4201.10091.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.office.onenote_8wekyb3d8bbwe\\microsoft.office.onenote_17.4201.10091.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0204.648] GetFileType (hFile=0x444) returned 0x1 [0204.648] GetFileType (hFile=0x444) returned 0x1 [0204.648] ReadFile (in: hFile=0x444, lpBuffer=0x22e1488, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x22e1488*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0204.676] CloseHandle (hObject=0x444) returned 1 [0204.676] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\Microsoft.Office.OneNote_17.4201.10091.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\Microsoft.Office.OneNote_17.4201.10091.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xb3 [0204.676] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\Microsoft.Office.OneNote_17.4201.10091.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.office.onenote_8wekyb3d8bbwe\\microsoft.office.onenote_17.4201.10091.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0204.677] GetFileType (hFile=0x444) returned 0x1 [0204.677] GetFileType (hFile=0x444) returned 0x1 [0204.677] WriteFile (in: hFile=0x444, lpBuffer=0x22df110*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x22df110*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0204.677] CloseHandle (hObject=0x444) returned 1 [0204.677] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\Microsoft.Office.OneNote_17.4201.10091.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\Microsoft.Office.OneNote_17.4201.10091.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xb3 [0204.677] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\Microsoft.Office.OneNote_17.4201.10091.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\Microsoft.Office.OneNote_17.4201.10091.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.xuy", lpFilePart=0x0) returned 0xb7 [0204.677] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\Microsoft.Office.OneNote_17.4201.10091.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.office.onenote_8wekyb3d8bbwe\\microsoft.office.onenote_17.4201.10091.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x179a7f88, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x17d87cb7, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x65d89eab, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x40000)) returned 1 [0204.677] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\Microsoft.Office.OneNote_17.4201.10091.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.office.onenote_8wekyb3d8bbwe\\microsoft.office.onenote_17.4201.10091.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\Microsoft.Office.OneNote_17.4201.10091.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.office.onenote_8wekyb3d8bbwe\\microsoft.office.onenote_17.4201.10091.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.xuy")) returned 1 [0204.678] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\Microsoft.Office.OneNote_17.4201.10091.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\Microsoft.Office.OneNote_17.4201.10091.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xb8 [0204.679] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\Microsoft.Office.OneNote_17.4201.10091.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.office.onenote_8wekyb3d8bbwe\\microsoft.office.onenote_17.4201.10091.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x235db88 | out: lpFileInformation=0x235db88*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x179f445c, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x179f445c, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x179f445c, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0204.679] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\Microsoft.Office.OneNote_17.4201.10091.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\Microsoft.Office.OneNote_17.4201.10091.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xb8 [0204.679] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\Microsoft.Office.OneNote_17.4201.10091.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.office.onenote_8wekyb3d8bbwe\\microsoft.office.onenote_17.4201.10091.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0204.679] GetFileType (hFile=0x444) returned 0x1 [0204.679] GetFileType (hFile=0x444) returned 0x1 [0204.679] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x0 [0204.679] CloseHandle (hObject=0x444) returned 1 [0204.727] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\Microsoft.Office.OneNote_17.4201.10091.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\Microsoft.Office.OneNote_17.4201.10091.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xb8 [0204.727] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0204.728] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\Microsoft.Office.OneNote_17.4201.10091.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.office.onenote_8wekyb3d8bbwe\\microsoft.office.onenote_17.4201.10091.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0204.729] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb070) returned 1 [0204.729] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\Microsoft.Office.OneNote_17.4201.10091.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3bbcf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\Microsoft.Office.OneNote_17.4201.10091.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xb8 [0204.729] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0204.729] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\Microsoft.Office.OneNote_17.4201.10091.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.office.onenote_8wekyb3d8bbwe\\microsoft.office.onenote_17.4201.10091.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x3bc270 | out: lpFileInformation=0x3bc270*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x179f445c, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x179f445c, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x179f445c, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0204.730] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc150) returned 1 [0204.730] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\Microsoft.Office.OneNote_17.4201.10091.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3bbd10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\Microsoft.Office.OneNote_17.4201.10091.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xb8 [0204.730] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0204.730] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\Microsoft.Office.OneNote_17.4201.10091.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.office.onenote_8wekyb3d8bbwe\\microsoft.office.onenote_17.4201.10091.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x21d8260 | out: lpFileInformation=0x21d8260*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x179f445c, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x179f445c, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x179f445c, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0204.730] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc150) returned 1 [0204.730] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\Microsoft.Office.OneNote_17.4201.10091.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3bbb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\Microsoft.Office.OneNote_17.4201.10091.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xb8 [0204.730] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc050) returned 1 [0204.730] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\Microsoft.Office.OneNote_17.4201.10091.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.office.onenote_8wekyb3d8bbwe\\microsoft.office.onenote_17.4201.10091.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0204.730] GetFileType (hFile=0x444) returned 0x1 [0204.730] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbfc0) returned 1 [0204.730] GetFileType (hFile=0x444) returned 0x1 [0204.730] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc1e8 | out: lpFileSizeHigh=0x3bc1e8*=0x0) returned 0x0 [0204.730] CloseHandle (hObject=0x444) returned 1 [0204.743] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\Microsoft.Office.OneNote_17.4201.10091.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3bbb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\Microsoft.Office.OneNote_17.4201.10091.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xb8 [0204.743] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc050) returned 1 [0204.743] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\Microsoft.Office.OneNote_17.4201.10091.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.office.onenote_8wekyb3d8bbwe\\microsoft.office.onenote_17.4201.10091.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0204.745] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8ae0) returned 1 [0204.746] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\Microsoft.Office.OneNote_17.4201.10091.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\Microsoft.Office.OneNote_17.4201.10091.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xb8 [0204.746] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0204.746] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\Microsoft.Office.OneNote_17.4201.10091.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.office.onenote_8wekyb3d8bbwe\\microsoft.office.onenote_17.4201.10091.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x224f190 | out: lpFileInformation=0x224f190*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x179f445c, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x179f445c, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x179f445c, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0204.746] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0204.746] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\Microsoft.Office.OneNote_17.4201.10091.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\Microsoft.Office.OneNote_17.4201.10091.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xb8 [0204.746] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0204.746] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\Microsoft.Office.OneNote_17.4201.10091.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.office.onenote_8wekyb3d8bbwe\\microsoft.office.onenote_17.4201.10091.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0204.746] GetFileType (hFile=0x444) returned 0x1 [0204.746] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0204.746] GetFileType (hFile=0x444) returned 0x1 [0204.746] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x0 [0204.747] CloseHandle (hObject=0x444) returned 1 [0204.758] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\Microsoft.Office.OneNote_17.4201.10091.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\Microsoft.Office.OneNote_17.4201.10091.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xb8 [0204.758] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0204.758] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\Microsoft.Office.OneNote_17.4201.10091.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.office.onenote_8wekyb3d8bbwe\\microsoft.office.onenote_17.4201.10091.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0204.760] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb070) returned 1 [0204.760] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\Microsoft.Office.OneNote_17.4201.10091.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbcf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\Microsoft.Office.OneNote_17.4201.10091.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xb8 [0204.760] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0204.760] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\Microsoft.Office.OneNote_17.4201.10091.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.office.onenote_8wekyb3d8bbwe\\microsoft.office.onenote_17.4201.10091.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x3bc270 | out: lpFileInformation=0x3bc270*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x179f445c, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x179f445c, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x179f445c, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0204.760] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc150) returned 1 [0204.761] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\Microsoft.Office.OneNote_17.4201.10091.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbd10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\Microsoft.Office.OneNote_17.4201.10091.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xb8 [0204.761] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0204.761] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\Microsoft.Office.OneNote_17.4201.10091.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.office.onenote_8wekyb3d8bbwe\\microsoft.office.onenote_17.4201.10091.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x22c6228 | out: lpFileInformation=0x22c6228*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x179f445c, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x179f445c, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x179f445c, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0204.761] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc150) returned 1 [0204.761] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\Microsoft.Office.OneNote_17.4201.10091.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\Microsoft.Office.OneNote_17.4201.10091.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xb8 [0204.761] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc050) returned 1 [0204.761] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\Microsoft.Office.OneNote_17.4201.10091.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.office.onenote_8wekyb3d8bbwe\\microsoft.office.onenote_17.4201.10091.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0204.761] GetFileType (hFile=0x444) returned 0x1 [0204.761] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbfc0) returned 1 [0204.761] GetFileType (hFile=0x444) returned 0x1 [0204.761] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc1e8 | out: lpFileSizeHigh=0x3bc1e8*=0x0) returned 0x0 [0204.761] CloseHandle (hObject=0x444) returned 1 [0204.771] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\Microsoft.Office.OneNote_17.4201.10091.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\Microsoft.Office.OneNote_17.4201.10091.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xb8 [0204.771] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc050) returned 1 [0204.771] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\Microsoft.Office.OneNote_17.4201.10091.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.office.onenote_8wekyb3d8bbwe\\microsoft.office.onenote_17.4201.10091.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0204.773] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8ae0) returned 1 [0204.773] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0204.773] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\RoamingState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\RoamingState", lpFilePart=0x0) returned 0x60 [0204.773] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\RoamingState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\RoamingState\\", lpFilePart=0x0) returned 0x61 [0204.773] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\RoamingState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7550 [0204.774] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0204.774] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0204.774] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0204.774] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0204.774] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0204.774] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0204.774] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\RoamingState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\RoamingState", lpFilePart=0x0) returned 0x60 [0204.774] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\RoamingState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\RoamingState\\", lpFilePart=0x0) returned 0x61 [0204.774] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\RoamingState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7fd0 [0204.775] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0204.775] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0204.775] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0204.775] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0204.775] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0204.775] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0204.775] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\Settings", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\Settings", lpFilePart=0x0) returned 0x5c [0204.775] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\Settings\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\Settings\\", lpFilePart=0x0) returned 0x5d [0204.775] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\Settings\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7a90 [0204.775] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0204.775] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0204.776] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0204.776] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0204.776] FindClose (in: hFindFile=0x5d7a90 | out: hFindFile=0x5d7a90) returned 1 [0204.776] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0204.776] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0204.776] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0204.776] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\Settings", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\Settings", lpFilePart=0x0) returned 0x5c [0204.776] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\Settings\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\Settings\\", lpFilePart=0x0) returned 0x5d [0204.776] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\Settings\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7550 [0204.776] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0204.776] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0204.776] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0204.776] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0204.777] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0204.777] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0204.777] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0204.777] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\Settings\\roaming.lock", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\Settings\\roaming.lock", lpFilePart=0x0) returned 0x69 [0204.777] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0204.777] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.office.onenote_8wekyb3d8bbwe\\settings\\roaming.lock"), fInfoLevelId=0x0, lpFileInformation=0x2341a78 | out: lpFileInformation=0x2341a78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x16f5fccf, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x16f5fccf, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x16f5fccf, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0204.777] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0204.777] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\Settings\\roaming.lock", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\Settings\\roaming.lock", lpFilePart=0x0) returned 0x69 [0204.777] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0204.777] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.office.onenote_8wekyb3d8bbwe\\settings\\roaming.lock"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0204.777] GetFileType (hFile=0x444) returned 0x1 [0204.777] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0204.777] GetFileType (hFile=0x444) returned 0x1 [0204.777] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0x0 [0204.777] CloseHandle (hObject=0x444) returned 1 [0204.831] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\Settings\\roaming.lock", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\Settings\\roaming.lock", lpFilePart=0x0) returned 0x69 [0204.831] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0204.831] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.office.onenote_8wekyb3d8bbwe\\settings\\roaming.lock"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0204.832] GetFileType (hFile=0x444) returned 0x1 [0204.832] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0204.832] GetFileType (hFile=0x444) returned 0x1 [0204.832] WriteFile (in: hFile=0x444, lpBuffer=0x21b8a18*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x3be628, lpOverlapped=0x0 | out: lpBuffer=0x21b8a18*, lpNumberOfBytesWritten=0x3be628*=0x10, lpOverlapped=0x0) returned 1 [0204.833] CloseHandle (hObject=0x444) returned 1 [0204.833] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\Settings\\roaming.lock", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\Settings\\roaming.lock", lpFilePart=0x0) returned 0x69 [0204.833] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\Settings\\roaming.lock.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\Settings\\roaming.lock.xuy", lpFilePart=0x0) returned 0x6d [0204.833] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0204.833] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.office.onenote_8wekyb3d8bbwe\\settings\\roaming.lock"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x16f5fccf, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x16f5fccf, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x65f078e3, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0204.834] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0204.834] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.office.onenote_8wekyb3d8bbwe\\settings\\roaming.lock"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\Settings\\roaming.lock.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.office.onenote_8wekyb3d8bbwe\\settings\\roaming.lock.xuy")) returned 1 [0204.835] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\Settings\\settings.dat", lpFilePart=0x0) returned 0x69 [0204.835] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0204.835] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.office.onenote_8wekyb3d8bbwe\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x21b9d58 | out: lpFileInformation=0x21b9d58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x16ec721b, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x16ec721b, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x8d6f5917, ftLastWriteTime.dwHighDateTime=0x1d0baff, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0204.835] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0204.835] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\Settings\\settings.dat", lpFilePart=0x0) returned 0x69 [0204.835] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0204.835] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.office.onenote_8wekyb3d8bbwe\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x21b9ee8 | out: lpFileInformation=0x21b9ee8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x16ec721b, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x16ec721b, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x8d6f5917, ftLastWriteTime.dwHighDateTime=0x1d0baff, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0204.836] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0204.836] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\Settings\\settings.dat", lpFilePart=0x0) returned 0x69 [0204.836] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0204.836] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.office.onenote_8wekyb3d8bbwe\\settings\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0204.837] GetFileType (hFile=0x444) returned 0x1 [0204.837] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0204.837] GetFileType (hFile=0x444) returned 0x1 [0204.837] ReadFile (in: hFile=0x444, lpBuffer=0x21bc338, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x21bc338*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0204.849] CloseHandle (hObject=0x444) returned 1 [0204.849] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\Settings\\settings.dat", lpFilePart=0x0) returned 0x69 [0204.849] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0204.849] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.office.onenote_8wekyb3d8bbwe\\settings\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0204.849] GetFileType (hFile=0x444) returned 0x1 [0204.849] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0204.849] GetFileType (hFile=0x444) returned 0x1 [0204.849] WriteFile (in: hFile=0x444, lpBuffer=0x21ba058*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x21ba058*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0204.850] CloseHandle (hObject=0x444) returned 1 [0204.853] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\Settings\\settings.dat", lpFilePart=0x0) returned 0x69 [0204.853] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\Settings\\settings.dat.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\Settings\\settings.dat.xuy", lpFilePart=0x0) returned 0x6d [0204.853] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0204.853] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.office.onenote_8wekyb3d8bbwe\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x16ec721b, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x16ec721b, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x65f2d796, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0204.853] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0204.853] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.office.onenote_8wekyb3d8bbwe\\settings\\settings.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\Settings\\settings.dat.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.office.onenote_8wekyb3d8bbwe\\settings\\settings.dat.xuy")) returned 1 [0204.854] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0204.854] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\SystemAppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\SystemAppData", lpFilePart=0x0) returned 0x61 [0204.854] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\SystemAppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\SystemAppData\\", lpFilePart=0x0) returned 0x62 [0204.854] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\SystemAppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7a90 [0204.855] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0204.855] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0204.855] FindClose (in: hFindFile=0x5d7a90 | out: hFindFile=0x5d7a90) returned 1 [0204.855] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0204.855] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0204.855] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0204.855] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\SystemAppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\SystemAppData", lpFilePart=0x0) returned 0x61 [0204.855] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\SystemAppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\SystemAppData\\", lpFilePart=0x0) returned 0x62 [0204.855] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\SystemAppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7df0 [0204.856] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0204.856] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0204.856] FindClose (in: hFindFile=0x5d7df0 | out: hFindFile=0x5d7df0) returned 1 [0204.856] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0204.856] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0204.856] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0204.856] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\TempState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\TempState", lpFilePart=0x0) returned 0x5d [0204.856] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\TempState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\TempState\\", lpFilePart=0x0) returned 0x5e [0204.856] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\TempState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7c70 [0204.868] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0204.868] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0204.868] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0204.868] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0204.868] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0204.868] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0204.868] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\TempState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\TempState", lpFilePart=0x0) returned 0x5d [0204.868] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\TempState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\TempState\\", lpFilePart=0x0) returned 0x5e [0204.868] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\TempState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d81b0 [0204.868] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0204.869] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0204.869] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0204.869] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0204.869] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0204.869] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0204.869] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe", lpFilePart=0x0) returned 0x4b [0204.869] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\", lpFilePart=0x0) returned 0x4c [0204.869] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d8090 [0204.884] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0204.884] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0204.885] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0204.885] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0204.885] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0204.885] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0204.885] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0204.885] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0204.885] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0204.886] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0204.886] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0204.886] FindClose (in: hFindFile=0x5d8090 | out: hFindFile=0x5d8090) returned 1 [0204.887] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0204.887] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0204.887] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0204.887] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe", lpFilePart=0x0) returned 0x4b [0204.887] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\", lpFilePart=0x0) returned 0x4c [0204.887] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d7550 [0204.888] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0204.888] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0204.888] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0204.888] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0204.888] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0204.888] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0204.888] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0204.888] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0204.889] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0204.889] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0204.889] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0204.889] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0204.889] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0204.889] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0204.890] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0204.890] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\AC", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\AC", lpFilePart=0x0) returned 0x4e [0204.890] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\AC\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\AC\\", lpFilePart=0x0) returned 0x4f [0204.890] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\AC\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7c70 [0204.917] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0204.917] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0204.917] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0204.917] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0204.918] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0204.918] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0204.918] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0204.918] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0204.919] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0204.919] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0204.919] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\AC", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\AC", lpFilePart=0x0) returned 0x4e [0204.919] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\AC\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\AC\\", lpFilePart=0x0) returned 0x4f [0204.919] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\AC\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d78b0 [0204.920] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0204.920] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0204.920] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0204.920] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0204.920] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0204.920] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0204.921] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0204.921] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0204.921] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0204.921] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0204.922] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\AC\\INetCache", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\AC\\INetCache", lpFilePart=0x0) returned 0x58 [0204.922] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\AC\\INetCache\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\AC\\INetCache\\", lpFilePart=0x0) returned 0x59 [0204.922] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\AC\\INetCache\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d81b0 [0204.926] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0204.926] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0204.926] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0204.926] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0204.926] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0204.927] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0204.927] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\AC\\INetCache", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\AC\\INetCache", lpFilePart=0x0) returned 0x58 [0204.927] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\AC\\INetCache\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\AC\\INetCache\\", lpFilePart=0x0) returned 0x59 [0204.927] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\AC\\INetCache\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7670 [0204.927] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0204.927] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0204.927] FindClose (in: hFindFile=0x5d7670 | out: hFindFile=0x5d7670) returned 1 [0204.927] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0204.927] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0204.927] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0204.927] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\AC\\INetCookies", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\AC\\INetCookies", lpFilePart=0x0) returned 0x5a [0204.927] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\AC\\INetCookies\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\AC\\INetCookies\\", lpFilePart=0x0) returned 0x5b [0204.927] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\AC\\INetCookies\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7610 [0204.928] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0204.928] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0204.928] FindClose (in: hFindFile=0x5d7610 | out: hFindFile=0x5d7610) returned 1 [0204.928] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0204.928] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0204.928] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0204.928] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\AC\\INetCookies", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\AC\\INetCookies", lpFilePart=0x0) returned 0x5a [0204.928] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\AC\\INetCookies\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\AC\\INetCookies\\", lpFilePart=0x0) returned 0x5b [0204.928] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\AC\\INetCookies\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7550 [0204.928] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0204.929] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0204.929] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0204.929] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0204.929] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0204.929] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0204.929] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\AC\\INetHistory", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\AC\\INetHistory", lpFilePart=0x0) returned 0x5a [0204.929] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\AC\\INetHistory\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\AC\\INetHistory\\", lpFilePart=0x0) returned 0x5b [0204.929] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\AC\\INetHistory\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7670 [0204.929] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0204.929] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0204.929] FindClose (in: hFindFile=0x5d7670 | out: hFindFile=0x5d7670) returned 1 [0204.929] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0204.929] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0204.929] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0204.929] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\AC\\INetHistory", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\AC\\INetHistory", lpFilePart=0x0) returned 0x5a [0204.929] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\AC\\INetHistory\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\AC\\INetHistory\\", lpFilePart=0x0) returned 0x5b [0204.930] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\AC\\INetHistory\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d78b0 [0204.930] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0204.930] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0204.930] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0204.930] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0204.930] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0204.930] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0204.930] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\AC\\Temp", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\AC\\Temp", lpFilePart=0x0) returned 0x53 [0204.930] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\AC\\Temp\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\AC\\Temp\\", lpFilePart=0x0) returned 0x54 [0204.930] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\AC\\Temp\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7a30 [0204.935] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0204.935] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0204.935] FindClose (in: hFindFile=0x5d7a30 | out: hFindFile=0x5d7a30) returned 1 [0204.935] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0204.935] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0204.935] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0204.935] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\AC\\Temp", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\AC\\Temp", lpFilePart=0x0) returned 0x53 [0204.935] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\AC\\Temp\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\AC\\Temp\\", lpFilePart=0x0) returned 0x54 [0204.936] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\AC\\Temp\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d73d0 [0204.936] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0204.936] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0204.936] FindClose (in: hFindFile=0x5d73d0 | out: hFindFile=0x5d73d0) returned 1 [0204.936] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0204.936] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0204.936] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0204.936] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\AppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\AppData", lpFilePart=0x0) returned 0x53 [0204.936] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\AppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\AppData\\", lpFilePart=0x0) returned 0x54 [0204.936] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\AppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7370 [0204.936] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0204.936] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0204.936] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0204.937] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0204.937] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0204.937] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0204.937] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\AppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\AppData", lpFilePart=0x0) returned 0x53 [0204.937] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\AppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\AppData\\", lpFilePart=0x0) returned 0x54 [0204.937] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\AppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d78b0 [0204.937] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0204.937] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0204.937] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0204.937] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0204.937] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0204.937] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0204.937] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\LocalCache", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\LocalCache", lpFilePart=0x0) returned 0x56 [0204.937] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\LocalCache\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\LocalCache\\", lpFilePart=0x0) returned 0x57 [0204.937] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\LocalCache\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d79d0 [0204.938] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0204.938] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0204.938] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0204.938] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0204.938] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0204.938] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0204.938] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\LocalCache", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\LocalCache", lpFilePart=0x0) returned 0x56 [0204.938] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\LocalCache\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\LocalCache\\", lpFilePart=0x0) returned 0x57 [0204.938] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\LocalCache\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7fd0 [0204.938] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0204.938] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0204.938] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0204.939] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0204.939] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0204.939] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0204.939] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\LocalState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\LocalState", lpFilePart=0x0) returned 0x56 [0204.939] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\LocalState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\LocalState\\", lpFilePart=0x0) returned 0x57 [0204.939] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\LocalState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d78b0 [0204.939] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0204.939] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0204.939] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0204.939] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0204.939] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0204.939] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0204.939] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\LocalState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\LocalState", lpFilePart=0x0) returned 0x56 [0204.939] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\LocalState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\LocalState\\", lpFilePart=0x0) returned 0x57 [0204.939] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\LocalState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7f10 [0204.939] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0204.940] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0204.940] FindClose (in: hFindFile=0x5d7f10 | out: hFindFile=0x5d7f10) returned 1 [0204.940] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0204.940] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0204.940] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0204.940] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\Microsoft.People_1.10159.0.0_x64__8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\Microsoft.People_1.10159.0.0_x64__8wekyb3d8bbwe", lpFilePart=0x0) returned 0x7b [0204.940] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\Microsoft.People_1.10159.0.0_x64__8wekyb3d8bbwe\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\Microsoft.People_1.10159.0.0_x64__8wekyb3d8bbwe\\", lpFilePart=0x0) returned 0x7c [0204.940] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\Microsoft.People_1.10159.0.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7670 [0204.940] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0204.940] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0204.940] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0204.940] FindClose (in: hFindFile=0x5d7670 | out: hFindFile=0x5d7670) returned 1 [0204.940] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0204.940] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0204.940] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0204.941] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\Microsoft.People_1.10159.0.0_x64__8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\Microsoft.People_1.10159.0.0_x64__8wekyb3d8bbwe", lpFilePart=0x0) returned 0x7b [0204.941] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\Microsoft.People_1.10159.0.0_x64__8wekyb3d8bbwe\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\Microsoft.People_1.10159.0.0_x64__8wekyb3d8bbwe\\", lpFilePart=0x0) returned 0x7c [0204.941] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\Microsoft.People_1.10159.0.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7550 [0204.941] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0204.941] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0204.941] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0204.941] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0204.941] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0204.941] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0204.941] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0204.941] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\Microsoft.People_1.10159.0.0_x64__8wekyb3d8bbwe\\ActivationStore", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\Microsoft.People_1.10159.0.0_x64__8wekyb3d8bbwe\\ActivationStore", lpFilePart=0x0) returned 0x8b [0204.941] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\Microsoft.People_1.10159.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\Microsoft.People_1.10159.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\", lpFilePart=0x0) returned 0x8c [0204.941] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\Microsoft.People_1.10159.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d81b0 [0204.949] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0204.949] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0204.949] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0204.949] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0204.949] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0204.949] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0204.950] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0204.950] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0204.950] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0204.950] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\Microsoft.People_1.10159.0.0_x64__8wekyb3d8bbwe\\ActivationStore", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\Microsoft.People_1.10159.0.0_x64__8wekyb3d8bbwe\\ActivationStore", lpFilePart=0x0) returned 0x8b [0204.950] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\Microsoft.People_1.10159.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\Microsoft.People_1.10159.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\", lpFilePart=0x0) returned 0x8c [0204.950] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\Microsoft.People_1.10159.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d81b0 [0204.951] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0204.951] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0204.951] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0204.951] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0204.951] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0204.951] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0204.952] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0204.952] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0204.952] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\Microsoft.People_1.10159.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\Microsoft.People_1.10159.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0x9f [0204.952] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0204.952] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\Microsoft.People_1.10159.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.people_8wekyb3d8bbwe\\microsoft.people_1.10159.0.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), fInfoLevelId=0x0, lpFileInformation=0x2257850 | out: lpFileInformation=0x2257850*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x140e1cb4, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x1450df63, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x1450df63, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x8000)) returned 1 [0204.952] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0204.952] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\Microsoft.People_1.10159.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\Microsoft.People_1.10159.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0x9f [0204.952] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0204.953] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\Microsoft.People_1.10159.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.people_8wekyb3d8bbwe\\microsoft.people_1.10159.0.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), fInfoLevelId=0x0, lpFileInformation=0x2257a50 | out: lpFileInformation=0x2257a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x140e1cb4, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x1450df63, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x1450df63, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x8000)) returned 1 [0204.953] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0204.953] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\Microsoft.People_1.10159.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\Microsoft.People_1.10159.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0x9f [0204.953] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0204.955] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\Microsoft.People_1.10159.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.people_8wekyb3d8bbwe\\microsoft.people_1.10159.0.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0204.956] GetFileType (hFile=0x444) returned 0x1 [0204.956] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0204.956] GetFileType (hFile=0x444) returned 0x1 [0204.956] ReadFile (in: hFile=0x444, lpBuffer=0x2259f80, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x2259f80*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0204.988] CloseHandle (hObject=0x444) returned 1 [0204.988] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\Microsoft.People_1.10159.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\Microsoft.People_1.10159.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0x9f [0204.988] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0204.988] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\Microsoft.People_1.10159.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.people_8wekyb3d8bbwe\\microsoft.people_1.10159.0.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0204.989] GetFileType (hFile=0x444) returned 0x1 [0204.989] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0204.989] GetFileType (hFile=0x444) returned 0x1 [0204.989] WriteFile (in: hFile=0x444, lpBuffer=0x2257c30*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x2257c30*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0204.989] CloseHandle (hObject=0x444) returned 1 [0204.990] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\Microsoft.People_1.10159.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\Microsoft.People_1.10159.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0x9f [0204.990] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\Microsoft.People_1.10159.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\Microsoft.People_1.10159.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.xuy", lpFilePart=0x0) returned 0xa3 [0204.990] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0204.990] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\Microsoft.People_1.10159.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.people_8wekyb3d8bbwe\\microsoft.people_1.10159.0.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x140e1cb4, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x1450df63, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x66084cc1, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x8000)) returned 1 [0204.990] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0204.990] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\Microsoft.People_1.10159.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.people_8wekyb3d8bbwe\\microsoft.people_1.10159.0.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\Microsoft.People_1.10159.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.people_8wekyb3d8bbwe\\microsoft.people_1.10159.0.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.xuy")) returned 1 [0204.991] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\Microsoft.People_1.10159.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\Microsoft.People_1.10159.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xa4 [0204.991] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0204.991] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\Microsoft.People_1.10159.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.people_8wekyb3d8bbwe\\microsoft.people_1.10159.0.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x22d65e0 | out: lpFileInformation=0x22d65e0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1417a5f3, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x1417a5f3, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x1417a5f3, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x7000)) returned 1 [0204.991] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0204.991] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\Microsoft.People_1.10159.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\Microsoft.People_1.10159.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xa4 [0204.991] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0204.991] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\Microsoft.People_1.10159.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.people_8wekyb3d8bbwe\\microsoft.people_1.10159.0.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x22d6800 | out: lpFileInformation=0x22d6800*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1417a5f3, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x1417a5f3, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x1417a5f3, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x7000)) returned 1 [0204.991] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0204.992] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\Microsoft.People_1.10159.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\Microsoft.People_1.10159.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xa4 [0204.992] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0204.992] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\Microsoft.People_1.10159.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.people_8wekyb3d8bbwe\\microsoft.people_1.10159.0.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0204.993] GetFileType (hFile=0x444) returned 0x1 [0204.993] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0204.993] GetFileType (hFile=0x444) returned 0x1 [0204.993] ReadFile (in: hFile=0x444, lpBuffer=0x22d8d70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x22d8d70*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0205.009] CloseHandle (hObject=0x444) returned 1 [0205.009] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\Microsoft.People_1.10159.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\Microsoft.People_1.10159.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xa4 [0205.009] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0205.009] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\Microsoft.People_1.10159.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.people_8wekyb3d8bbwe\\microsoft.people_1.10159.0.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0205.009] GetFileType (hFile=0x444) returned 0x1 [0205.009] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0205.009] GetFileType (hFile=0x444) returned 0x1 [0205.010] WriteFile (in: hFile=0x444, lpBuffer=0x22d6a00*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x22d6a00*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0205.010] CloseHandle (hObject=0x444) returned 1 [0205.010] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\Microsoft.People_1.10159.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\Microsoft.People_1.10159.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xa4 [0205.010] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\Microsoft.People_1.10159.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\Microsoft.People_1.10159.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1.xuy", lpFilePart=0x0) returned 0xa8 [0205.010] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0205.010] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\Microsoft.People_1.10159.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.people_8wekyb3d8bbwe\\microsoft.people_1.10159.0.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1417a5f3, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x1417a5f3, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x660aad4b, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x7000)) returned 1 [0205.010] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0205.010] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\Microsoft.People_1.10159.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.people_8wekyb3d8bbwe\\microsoft.people_1.10159.0.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\Microsoft.People_1.10159.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.people_8wekyb3d8bbwe\\microsoft.people_1.10159.0.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1.xuy")) returned 1 [0205.011] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\Microsoft.People_1.10159.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\Microsoft.People_1.10159.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xa4 [0205.012] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0205.012] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\Microsoft.People_1.10159.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.people_8wekyb3d8bbwe\\microsoft.people_1.10159.0.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x2355420 | out: lpFileInformation=0x2355420*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1417a5f3, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x1417a5f3, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x1417a5f3, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0205.012] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0205.012] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\Microsoft.People_1.10159.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\Microsoft.People_1.10159.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xa4 [0205.012] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0205.012] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\Microsoft.People_1.10159.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.people_8wekyb3d8bbwe\\microsoft.people_1.10159.0.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0205.012] GetFileType (hFile=0x444) returned 0x1 [0205.012] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0205.012] GetFileType (hFile=0x444) returned 0x1 [0205.012] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x0 [0205.012] CloseHandle (hObject=0x444) returned 1 [0205.025] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\Microsoft.People_1.10159.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\Microsoft.People_1.10159.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xa4 [0205.025] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0205.025] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\Microsoft.People_1.10159.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.people_8wekyb3d8bbwe\\microsoft.people_1.10159.0.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0205.026] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb070) returned 1 [0205.026] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\Microsoft.People_1.10159.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbcf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\Microsoft.People_1.10159.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xa4 [0205.027] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0205.027] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\Microsoft.People_1.10159.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.people_8wekyb3d8bbwe\\microsoft.people_1.10159.0.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x3bc270 | out: lpFileInformation=0x3bc270*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1417a5f3, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x1417a5f3, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x1417a5f3, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0205.027] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc150) returned 1 [0205.027] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\Microsoft.People_1.10159.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbd10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\Microsoft.People_1.10159.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xa4 [0205.027] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0205.027] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\Microsoft.People_1.10159.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.people_8wekyb3d8bbwe\\microsoft.people_1.10159.0.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x21ccd58 | out: lpFileInformation=0x21ccd58*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1417a5f3, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x1417a5f3, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x1417a5f3, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0205.027] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc150) returned 1 [0205.027] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\Microsoft.People_1.10159.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\Microsoft.People_1.10159.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xa4 [0205.027] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc050) returned 1 [0205.027] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\Microsoft.People_1.10159.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.people_8wekyb3d8bbwe\\microsoft.people_1.10159.0.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0205.027] GetFileType (hFile=0x444) returned 0x1 [0205.027] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbfc0) returned 1 [0205.027] GetFileType (hFile=0x444) returned 0x1 [0205.027] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc1e8 | out: lpFileSizeHigh=0x3bc1e8*=0x0) returned 0x0 [0205.027] CloseHandle (hObject=0x444) returned 1 [0205.085] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\Microsoft.People_1.10159.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\Microsoft.People_1.10159.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xa4 [0205.085] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc050) returned 1 [0205.086] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\Microsoft.People_1.10159.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.people_8wekyb3d8bbwe\\microsoft.people_1.10159.0.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0205.087] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8ae0) returned 1 [0205.088] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0205.088] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\RoamingState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\RoamingState", lpFilePart=0x0) returned 0x58 [0205.088] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\RoamingState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\RoamingState\\", lpFilePart=0x0) returned 0x59 [0205.088] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\RoamingState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7a90 [0205.088] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0205.088] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0205.089] FindClose (in: hFindFile=0x5d7a90 | out: hFindFile=0x5d7a90) returned 1 [0205.089] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0205.089] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0205.089] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0205.089] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\RoamingState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\RoamingState", lpFilePart=0x0) returned 0x58 [0205.089] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\RoamingState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\RoamingState\\", lpFilePart=0x0) returned 0x59 [0205.089] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\RoamingState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7550 [0205.089] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0205.089] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0205.089] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0205.089] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0205.089] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0205.089] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0205.089] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\Settings", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\Settings", lpFilePart=0x0) returned 0x54 [0205.089] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\Settings\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\Settings\\", lpFilePart=0x0) returned 0x55 [0205.089] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\Settings\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d75b0 [0205.090] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0205.090] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0205.090] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0205.090] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0205.090] FindClose (in: hFindFile=0x5d75b0 | out: hFindFile=0x5d75b0) returned 1 [0205.090] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0205.090] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0205.090] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0205.090] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\Settings", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\Settings", lpFilePart=0x0) returned 0x54 [0205.090] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\Settings\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\Settings\\", lpFilePart=0x0) returned 0x55 [0205.090] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\Settings\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7eb0 [0205.091] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0205.091] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0205.091] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0205.091] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0205.091] FindClose (in: hFindFile=0x5d7eb0 | out: hFindFile=0x5d7eb0) returned 1 [0205.091] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0205.091] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0205.091] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\Settings\\roaming.lock", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\Settings\\roaming.lock", lpFilePart=0x0) returned 0x61 [0205.091] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0205.091] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.people_8wekyb3d8bbwe\\settings\\roaming.lock"), fInfoLevelId=0x0, lpFileInformation=0x2248148 | out: lpFileInformation=0x2248148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x12eb3d1f, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x12eb3d1f, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x12eb3d1f, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0205.091] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0205.091] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\Settings\\roaming.lock", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\Settings\\roaming.lock", lpFilePart=0x0) returned 0x61 [0205.092] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0205.092] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.people_8wekyb3d8bbwe\\settings\\roaming.lock"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0205.092] GetFileType (hFile=0x444) returned 0x1 [0205.092] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0205.092] GetFileType (hFile=0x444) returned 0x1 [0205.092] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0x0 [0205.092] CloseHandle (hObject=0x444) returned 1 [0205.121] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\Settings\\roaming.lock", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\Settings\\roaming.lock", lpFilePart=0x0) returned 0x61 [0205.121] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0205.121] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.people_8wekyb3d8bbwe\\settings\\roaming.lock"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0205.122] GetFileType (hFile=0x444) returned 0x1 [0205.122] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0205.122] GetFileType (hFile=0x444) returned 0x1 [0205.122] WriteFile (in: hFile=0x444, lpBuffer=0x22be580*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x3be628, lpOverlapped=0x0 | out: lpBuffer=0x22be580*, lpNumberOfBytesWritten=0x3be628*=0x10, lpOverlapped=0x0) returned 1 [0205.123] CloseHandle (hObject=0x444) returned 1 [0205.123] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\Settings\\roaming.lock", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\Settings\\roaming.lock", lpFilePart=0x0) returned 0x61 [0205.123] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\Settings\\roaming.lock.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\Settings\\roaming.lock.xuy", lpFilePart=0x0) returned 0x65 [0205.123] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0205.123] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.people_8wekyb3d8bbwe\\settings\\roaming.lock"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x12eb3d1f, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x12eb3d1f, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x661b69fe, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0205.123] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0205.123] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.people_8wekyb3d8bbwe\\settings\\roaming.lock"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\Settings\\roaming.lock.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.people_8wekyb3d8bbwe\\settings\\roaming.lock.xuy")) returned 1 [0205.125] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\Settings\\settings.dat", lpFilePart=0x0) returned 0x61 [0205.125] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0205.125] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.people_8wekyb3d8bbwe\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x22bf890 | out: lpFileInformation=0x22bf890*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x12e1b3d4, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x12e1b3d4, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x8d6f5917, ftLastWriteTime.dwHighDateTime=0x1d0baff, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0205.126] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0205.126] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\Settings\\settings.dat", lpFilePart=0x0) returned 0x61 [0205.126] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0205.126] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.people_8wekyb3d8bbwe\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x22bfa10 | out: lpFileInformation=0x22bfa10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x12e1b3d4, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x12e1b3d4, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x8d6f5917, ftLastWriteTime.dwHighDateTime=0x1d0baff, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0205.126] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0205.126] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\Settings\\settings.dat", lpFilePart=0x0) returned 0x61 [0205.126] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0205.126] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.people_8wekyb3d8bbwe\\settings\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0205.127] GetFileType (hFile=0x444) returned 0x1 [0205.127] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0205.127] GetFileType (hFile=0x444) returned 0x1 [0205.127] ReadFile (in: hFile=0x444, lpBuffer=0x22c1e40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x22c1e40*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0205.138] CloseHandle (hObject=0x444) returned 1 [0205.138] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\Settings\\settings.dat", lpFilePart=0x0) returned 0x61 [0205.138] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0205.138] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.people_8wekyb3d8bbwe\\settings\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0205.139] GetFileType (hFile=0x444) returned 0x1 [0205.139] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0205.139] GetFileType (hFile=0x444) returned 0x1 [0205.139] WriteFile (in: hFile=0x444, lpBuffer=0x22bfb70*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x22bfb70*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0205.139] CloseHandle (hObject=0x444) returned 1 [0205.139] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\Settings\\settings.dat", lpFilePart=0x0) returned 0x61 [0205.139] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\Settings\\settings.dat.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\Settings\\settings.dat.xuy", lpFilePart=0x0) returned 0x65 [0205.139] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0205.139] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.people_8wekyb3d8bbwe\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x12e1b3d4, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x12e1b3d4, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x661dd369, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0205.139] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0205.139] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.people_8wekyb3d8bbwe\\settings\\settings.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\Settings\\settings.dat.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.people_8wekyb3d8bbwe\\settings\\settings.dat.xuy")) returned 1 [0205.141] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0205.141] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\SystemAppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\SystemAppData", lpFilePart=0x0) returned 0x59 [0205.141] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\SystemAppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\SystemAppData\\", lpFilePart=0x0) returned 0x5a [0205.141] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\SystemAppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7d90 [0205.141] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0205.141] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0205.141] FindClose (in: hFindFile=0x5d7d90 | out: hFindFile=0x5d7d90) returned 1 [0205.141] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0205.141] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0205.141] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0205.141] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\SystemAppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\SystemAppData", lpFilePart=0x0) returned 0x59 [0205.142] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\SystemAppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\SystemAppData\\", lpFilePart=0x0) returned 0x5a [0205.142] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\SystemAppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7670 [0205.142] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0205.142] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0205.142] FindClose (in: hFindFile=0x5d7670 | out: hFindFile=0x5d7670) returned 1 [0205.142] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0205.142] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0205.142] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0205.142] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\TempState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\TempState", lpFilePart=0x0) returned 0x55 [0205.142] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\TempState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\TempState\\", lpFilePart=0x0) returned 0x56 [0205.142] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\TempState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7e50 [0205.142] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0205.143] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0205.143] FindClose (in: hFindFile=0x5d7e50 | out: hFindFile=0x5d7e50) returned 1 [0205.143] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0205.143] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0205.143] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0205.143] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\TempState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\TempState", lpFilePart=0x0) returned 0x55 [0205.143] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\TempState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\TempState\\", lpFilePart=0x0) returned 0x56 [0205.143] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\TempState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d78b0 [0205.143] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0205.143] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0205.144] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0205.144] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0205.144] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0205.144] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0205.144] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c", lpFilePart=0x0) returned 0x4d [0205.144] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\", lpFilePart=0x0) returned 0x4e [0205.144] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d7a30 [0205.167] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0205.167] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0205.167] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0205.167] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0205.168] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0205.168] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0205.168] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0205.168] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0205.168] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0205.168] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0205.168] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0205.168] FindClose (in: hFindFile=0x5d7a30 | out: hFindFile=0x5d7a30) returned 1 [0205.169] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0205.169] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0205.169] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0205.169] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c", lpFilePart=0x0) returned 0x4d [0205.169] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\", lpFilePart=0x0) returned 0x4e [0205.169] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d7cd0 [0205.170] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0205.170] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0205.170] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0205.170] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0205.170] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0205.171] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0205.171] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0205.171] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0205.171] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0205.171] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0205.171] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0205.171] FindClose (in: hFindFile=0x5d7cd0 | out: hFindFile=0x5d7cd0) returned 1 [0205.173] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0205.173] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0205.173] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0205.173] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\AC", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\AC", lpFilePart=0x0) returned 0x50 [0205.173] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\AC\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\AC\\", lpFilePart=0x0) returned 0x51 [0205.173] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\AC\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d81b0 [0205.189] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0205.190] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0205.190] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0205.190] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0205.190] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0205.190] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0205.190] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0205.191] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0205.191] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0205.191] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0205.191] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\AC", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\AC", lpFilePart=0x0) returned 0x50 [0205.191] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\AC\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\AC\\", lpFilePart=0x0) returned 0x51 [0205.191] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\AC\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7370 [0205.192] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0205.192] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0205.192] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0205.192] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0205.192] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0205.192] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0205.193] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0205.193] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0205.193] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0205.193] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0205.193] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\AC\\INetCache", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\AC\\INetCache", lpFilePart=0x0) returned 0x5a [0205.193] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\AC\\INetCache\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\AC\\INetCache\\", lpFilePart=0x0) returned 0x5b [0205.193] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\AC\\INetCache\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7cd0 [0205.199] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0205.199] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0205.199] FindClose (in: hFindFile=0x5d7cd0 | out: hFindFile=0x5d7cd0) returned 1 [0205.200] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0205.200] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0205.200] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0205.200] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\AC\\INetCache", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\AC\\INetCache", lpFilePart=0x0) returned 0x5a [0205.200] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\AC\\INetCache\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\AC\\INetCache\\", lpFilePart=0x0) returned 0x5b [0205.200] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\AC\\INetCache\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d78b0 [0205.200] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0205.200] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0205.200] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0205.200] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0205.200] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0205.200] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0205.200] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\AC\\INetCookies", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\AC\\INetCookies", lpFilePart=0x0) returned 0x5c [0205.200] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\AC\\INetCookies\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\AC\\INetCookies\\", lpFilePart=0x0) returned 0x5d [0205.200] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\AC\\INetCookies\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7a30 [0205.201] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0205.201] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0205.201] FindClose (in: hFindFile=0x5d7a30 | out: hFindFile=0x5d7a30) returned 1 [0205.201] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0205.201] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0205.201] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0205.201] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\AC\\INetCookies", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\AC\\INetCookies", lpFilePart=0x0) returned 0x5c [0205.201] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\AC\\INetCookies\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\AC\\INetCookies\\", lpFilePart=0x0) returned 0x5d [0205.201] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\AC\\INetCookies\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d78b0 [0205.201] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0205.201] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0205.201] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0205.202] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0205.202] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0205.202] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0205.202] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\AC\\INetHistory", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\AC\\INetHistory", lpFilePart=0x0) returned 0x5c [0205.202] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\AC\\INetHistory\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\AC\\INetHistory\\", lpFilePart=0x0) returned 0x5d [0205.202] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\AC\\INetHistory\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7670 [0205.202] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0205.202] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0205.202] FindClose (in: hFindFile=0x5d7670 | out: hFindFile=0x5d7670) returned 1 [0205.202] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0205.202] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0205.202] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0205.202] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\AC\\INetHistory", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\AC\\INetHistory", lpFilePart=0x0) returned 0x5c [0205.202] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\AC\\INetHistory\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\AC\\INetHistory\\", lpFilePart=0x0) returned 0x5d [0205.202] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\AC\\INetHistory\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7af0 [0205.203] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0205.203] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0205.203] FindClose (in: hFindFile=0x5d7af0 | out: hFindFile=0x5d7af0) returned 1 [0205.203] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0205.203] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0205.203] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0205.203] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\AC\\Temp", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\AC\\Temp", lpFilePart=0x0) returned 0x55 [0205.203] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\AC\\Temp\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\AC\\Temp\\", lpFilePart=0x0) returned 0x56 [0205.203] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\AC\\Temp\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d81b0 [0205.204] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0205.204] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0205.204] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0205.204] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0205.204] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0205.204] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0205.204] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\AC\\Temp", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\AC\\Temp", lpFilePart=0x0) returned 0x55 [0205.204] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\AC\\Temp\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\AC\\Temp\\", lpFilePart=0x0) returned 0x56 [0205.204] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\AC\\Temp\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d78b0 [0205.204] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0205.204] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0205.204] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0205.204] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0205.205] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0205.205] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0205.205] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\AppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\AppData", lpFilePart=0x0) returned 0x55 [0205.205] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\AppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\AppData\\", lpFilePart=0x0) returned 0x56 [0205.205] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\AppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d78b0 [0205.206] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0205.207] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0205.207] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0205.207] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0205.207] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0205.207] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0205.207] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\AppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\AppData", lpFilePart=0x0) returned 0x55 [0205.207] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\AppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\AppData\\", lpFilePart=0x0) returned 0x56 [0205.207] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\AppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7370 [0205.207] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0205.207] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0205.207] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0205.207] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0205.207] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\LocalCache", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\LocalCache", lpFilePart=0x0) returned 0x58 [0205.207] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\LocalCache\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\LocalCache\\", lpFilePart=0x0) returned 0x59 [0205.208] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\LocalCache\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7550 [0205.208] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0205.208] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0205.208] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0205.208] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\LocalCache", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\LocalCache", lpFilePart=0x0) returned 0x58 [0205.208] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\LocalCache\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\LocalCache\\", lpFilePart=0x0) returned 0x59 [0205.208] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\LocalCache\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7c70 [0205.208] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0205.208] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0205.208] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0205.209] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\LocalState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\LocalState", lpFilePart=0x0) returned 0x58 [0205.209] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\LocalState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\LocalState\\", lpFilePart=0x0) returned 0x59 [0205.209] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\LocalState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d78b0 [0205.209] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0205.209] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0205.209] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0205.209] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\LocalState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\LocalState", lpFilePart=0x0) returned 0x58 [0205.209] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\LocalState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\LocalState\\", lpFilePart=0x0) returned 0x59 [0205.209] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\LocalState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7cd0 [0205.209] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0205.209] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0205.210] FindClose (in: hFindFile=0x5d7cd0 | out: hFindFile=0x5d7cd0) returned 1 [0205.210] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\Microsoft.SkypeApp_3.2.1.0_x86__kzf8qxf38zg5c", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\Microsoft.SkypeApp_3.2.1.0_x86__kzf8qxf38zg5c", lpFilePart=0x0) returned 0x7b [0205.210] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\Microsoft.SkypeApp_3.2.1.0_x86__kzf8qxf38zg5c\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\Microsoft.SkypeApp_3.2.1.0_x86__kzf8qxf38zg5c\\", lpFilePart=0x0) returned 0x7c [0205.210] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\Microsoft.SkypeApp_3.2.1.0_x86__kzf8qxf38zg5c\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d75b0 [0205.210] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0205.210] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0205.210] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0205.210] FindClose (in: hFindFile=0x5d75b0 | out: hFindFile=0x5d75b0) returned 1 [0205.210] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\Microsoft.SkypeApp_3.2.1.0_x86__kzf8qxf38zg5c", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\Microsoft.SkypeApp_3.2.1.0_x86__kzf8qxf38zg5c", lpFilePart=0x0) returned 0x7b [0205.210] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\Microsoft.SkypeApp_3.2.1.0_x86__kzf8qxf38zg5c\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\Microsoft.SkypeApp_3.2.1.0_x86__kzf8qxf38zg5c\\", lpFilePart=0x0) returned 0x7c [0205.210] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\Microsoft.SkypeApp_3.2.1.0_x86__kzf8qxf38zg5c\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7c70 [0205.211] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0205.211] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0205.211] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0205.211] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0205.211] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\Microsoft.SkypeApp_3.2.1.0_x86__kzf8qxf38zg5c\\ActivationStore", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\Microsoft.SkypeApp_3.2.1.0_x86__kzf8qxf38zg5c\\ActivationStore", lpFilePart=0x0) returned 0x8b [0205.211] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\Microsoft.SkypeApp_3.2.1.0_x86__kzf8qxf38zg5c\\ActivationStore\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\Microsoft.SkypeApp_3.2.1.0_x86__kzf8qxf38zg5c\\ActivationStore\\", lpFilePart=0x0) returned 0x8c [0205.211] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\Microsoft.SkypeApp_3.2.1.0_x86__kzf8qxf38zg5c\\ActivationStore\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d78b0 [0205.219] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0205.220] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0205.220] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0205.220] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0205.220] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0205.220] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0205.221] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\Microsoft.SkypeApp_3.2.1.0_x86__kzf8qxf38zg5c\\ActivationStore", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\Microsoft.SkypeApp_3.2.1.0_x86__kzf8qxf38zg5c\\ActivationStore", lpFilePart=0x0) returned 0x8b [0205.221] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\Microsoft.SkypeApp_3.2.1.0_x86__kzf8qxf38zg5c\\ActivationStore\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\Microsoft.SkypeApp_3.2.1.0_x86__kzf8qxf38zg5c\\ActivationStore\\", lpFilePart=0x0) returned 0x8c [0205.221] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\Microsoft.SkypeApp_3.2.1.0_x86__kzf8qxf38zg5c\\ActivationStore\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7550 [0205.221] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0205.222] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0205.222] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0205.222] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0205.222] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0205.222] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0205.222] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\Microsoft.SkypeApp_3.2.1.0_x86__kzf8qxf38zg5c\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\Microsoft.SkypeApp_3.2.1.0_x86__kzf8qxf38zg5c\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0x9f [0205.222] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\Microsoft.SkypeApp_3.2.1.0_x86__kzf8qxf38zg5c\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.skypeapp_kzf8qxf38zg5c\\microsoft.skypeapp_3.2.1.0_x86__kzf8qxf38zg5c\\activationstore\\activationstore.dat"), fInfoLevelId=0x0, lpFileInformation=0x235d348 | out: lpFileInformation=0x235d348*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4c35299, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xe5120117, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0xe5120117, ftLastWriteTime.dwHighDateTime=0x1d2d028, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0205.223] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\Microsoft.SkypeApp_3.2.1.0_x86__kzf8qxf38zg5c\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\Microsoft.SkypeApp_3.2.1.0_x86__kzf8qxf38zg5c\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0x9f [0205.223] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\Microsoft.SkypeApp_3.2.1.0_x86__kzf8qxf38zg5c\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.skypeapp_kzf8qxf38zg5c\\microsoft.skypeapp_3.2.1.0_x86__kzf8qxf38zg5c\\activationstore\\activationstore.dat"), fInfoLevelId=0x0, lpFileInformation=0x235d548 | out: lpFileInformation=0x235d548*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4c35299, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xe5120117, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0xe5120117, ftLastWriteTime.dwHighDateTime=0x1d2d028, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0205.223] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\Microsoft.SkypeApp_3.2.1.0_x86__kzf8qxf38zg5c\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\Microsoft.SkypeApp_3.2.1.0_x86__kzf8qxf38zg5c\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0x9f [0205.223] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\Microsoft.SkypeApp_3.2.1.0_x86__kzf8qxf38zg5c\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.skypeapp_kzf8qxf38zg5c\\microsoft.skypeapp_3.2.1.0_x86__kzf8qxf38zg5c\\activationstore\\activationstore.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0205.224] GetFileType (hFile=0x444) returned 0x1 [0205.224] GetFileType (hFile=0x444) returned 0x1 [0205.224] ReadFile (in: hFile=0x444, lpBuffer=0x235fa78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x235fa78*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0205.270] CloseHandle (hObject=0x444) returned 1 [0205.270] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\Microsoft.SkypeApp_3.2.1.0_x86__kzf8qxf38zg5c\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\Microsoft.SkypeApp_3.2.1.0_x86__kzf8qxf38zg5c\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0x9f [0205.271] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\Microsoft.SkypeApp_3.2.1.0_x86__kzf8qxf38zg5c\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.skypeapp_kzf8qxf38zg5c\\microsoft.skypeapp_3.2.1.0_x86__kzf8qxf38zg5c\\activationstore\\activationstore.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0205.271] GetFileType (hFile=0x444) returned 0x1 [0205.271] GetFileType (hFile=0x444) returned 0x1 [0205.271] WriteFile (in: hFile=0x444, lpBuffer=0x2187078*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x2187078*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0205.271] CloseHandle (hObject=0x444) returned 1 [0205.271] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\Microsoft.SkypeApp_3.2.1.0_x86__kzf8qxf38zg5c\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\Microsoft.SkypeApp_3.2.1.0_x86__kzf8qxf38zg5c\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0x9f [0205.271] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\Microsoft.SkypeApp_3.2.1.0_x86__kzf8qxf38zg5c\\ActivationStore\\ActivationStore.dat.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\Microsoft.SkypeApp_3.2.1.0_x86__kzf8qxf38zg5c\\ActivationStore\\ActivationStore.dat.xuy", lpFilePart=0x0) returned 0xa3 [0205.271] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\Microsoft.SkypeApp_3.2.1.0_x86__kzf8qxf38zg5c\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.skypeapp_kzf8qxf38zg5c\\microsoft.skypeapp_3.2.1.0_x86__kzf8qxf38zg5c\\activationstore\\activationstore.dat"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4c35299, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xe5120117, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x66333836, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0205.271] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\Microsoft.SkypeApp_3.2.1.0_x86__kzf8qxf38zg5c\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.skypeapp_kzf8qxf38zg5c\\microsoft.skypeapp_3.2.1.0_x86__kzf8qxf38zg5c\\activationstore\\activationstore.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\Microsoft.SkypeApp_3.2.1.0_x86__kzf8qxf38zg5c\\ActivationStore\\ActivationStore.dat.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.skypeapp_kzf8qxf38zg5c\\microsoft.skypeapp_3.2.1.0_x86__kzf8qxf38zg5c\\activationstore\\activationstore.dat.xuy")) returned 1 [0205.273] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\Microsoft.SkypeApp_3.2.1.0_x86__kzf8qxf38zg5c\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\Microsoft.SkypeApp_3.2.1.0_x86__kzf8qxf38zg5c\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xa4 [0205.273] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\Microsoft.SkypeApp_3.2.1.0_x86__kzf8qxf38zg5c\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.skypeapp_kzf8qxf38zg5c\\microsoft.skypeapp_3.2.1.0_x86__kzf8qxf38zg5c\\activationstore\\activationstore.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x21df548 | out: lpFileInformation=0x21df548*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xe4c5b540, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xe4c5b540, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0xe4c5b540, ftLastWriteTime.dwHighDateTime=0x1d2d028, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0205.273] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\Microsoft.SkypeApp_3.2.1.0_x86__kzf8qxf38zg5c\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\Microsoft.SkypeApp_3.2.1.0_x86__kzf8qxf38zg5c\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xa4 [0205.273] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\Microsoft.SkypeApp_3.2.1.0_x86__kzf8qxf38zg5c\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.skypeapp_kzf8qxf38zg5c\\microsoft.skypeapp_3.2.1.0_x86__kzf8qxf38zg5c\\activationstore\\activationstore.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x21df768 | out: lpFileInformation=0x21df768*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xe4c5b540, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xe4c5b540, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0xe4c5b540, ftLastWriteTime.dwHighDateTime=0x1d2d028, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0205.273] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\Microsoft.SkypeApp_3.2.1.0_x86__kzf8qxf38zg5c\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\Microsoft.SkypeApp_3.2.1.0_x86__kzf8qxf38zg5c\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xa4 [0205.273] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\Microsoft.SkypeApp_3.2.1.0_x86__kzf8qxf38zg5c\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.skypeapp_kzf8qxf38zg5c\\microsoft.skypeapp_3.2.1.0_x86__kzf8qxf38zg5c\\activationstore\\activationstore.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0205.274] GetFileType (hFile=0x444) returned 0x1 [0205.274] GetFileType (hFile=0x444) returned 0x1 [0205.274] ReadFile (in: hFile=0x444, lpBuffer=0x21e1cd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x21e1cd8*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0205.307] CloseHandle (hObject=0x444) returned 1 [0205.307] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\Microsoft.SkypeApp_3.2.1.0_x86__kzf8qxf38zg5c\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\Microsoft.SkypeApp_3.2.1.0_x86__kzf8qxf38zg5c\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xa4 [0205.307] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\Microsoft.SkypeApp_3.2.1.0_x86__kzf8qxf38zg5c\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.skypeapp_kzf8qxf38zg5c\\microsoft.skypeapp_3.2.1.0_x86__kzf8qxf38zg5c\\activationstore\\activationstore.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0205.308] GetFileType (hFile=0x444) returned 0x1 [0205.308] GetFileType (hFile=0x444) returned 0x1 [0205.308] WriteFile (in: hFile=0x444, lpBuffer=0x21df968*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x21df968*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0205.308] CloseHandle (hObject=0x444) returned 1 [0205.308] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\Microsoft.SkypeApp_3.2.1.0_x86__kzf8qxf38zg5c\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\Microsoft.SkypeApp_3.2.1.0_x86__kzf8qxf38zg5c\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xa4 [0205.308] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\Microsoft.SkypeApp_3.2.1.0_x86__kzf8qxf38zg5c\\ActivationStore\\ActivationStore.dat.LOG1.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\Microsoft.SkypeApp_3.2.1.0_x86__kzf8qxf38zg5c\\ActivationStore\\ActivationStore.dat.LOG1.xuy", lpFilePart=0x0) returned 0xa8 [0205.308] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\Microsoft.SkypeApp_3.2.1.0_x86__kzf8qxf38zg5c\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.skypeapp_kzf8qxf38zg5c\\microsoft.skypeapp_3.2.1.0_x86__kzf8qxf38zg5c\\activationstore\\activationstore.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xe4c5b540, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xe4c5b540, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x6637fc23, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0205.308] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\Microsoft.SkypeApp_3.2.1.0_x86__kzf8qxf38zg5c\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.skypeapp_kzf8qxf38zg5c\\microsoft.skypeapp_3.2.1.0_x86__kzf8qxf38zg5c\\activationstore\\activationstore.dat.log1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\Microsoft.SkypeApp_3.2.1.0_x86__kzf8qxf38zg5c\\ActivationStore\\ActivationStore.dat.LOG1.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.skypeapp_kzf8qxf38zg5c\\microsoft.skypeapp_3.2.1.0_x86__kzf8qxf38zg5c\\activationstore\\activationstore.dat.log1.xuy")) returned 1 [0205.325] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb070) returned 1 [0205.325] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0205.325] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\Microsoft.SkypeApp_3.2.1.0_x86__kzf8qxf38zg5c\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.skypeapp_kzf8qxf38zg5c\\microsoft.skypeapp_3.2.1.0_x86__kzf8qxf38zg5c\\activationstore\\activationstore.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x3bc270 | out: lpFileInformation=0x3bc270*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xe4ccdc4b, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xe4ccdc4b, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0xe4ccdc4b, ftLastWriteTime.dwHighDateTime=0x1d2d028, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0205.325] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc150) returned 1 [0205.326] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0205.326] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\Microsoft.SkypeApp_3.2.1.0_x86__kzf8qxf38zg5c\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.skypeapp_kzf8qxf38zg5c\\microsoft.skypeapp_3.2.1.0_x86__kzf8qxf38zg5c\\activationstore\\activationstore.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x22d5358 | out: lpFileInformation=0x22d5358*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xe4ccdc4b, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xe4ccdc4b, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0xe4ccdc4b, ftLastWriteTime.dwHighDateTime=0x1d2d028, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0205.326] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc150) returned 1 [0205.326] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc050) returned 1 [0205.326] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\Microsoft.SkypeApp_3.2.1.0_x86__kzf8qxf38zg5c\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.skypeapp_kzf8qxf38zg5c\\microsoft.skypeapp_3.2.1.0_x86__kzf8qxf38zg5c\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0205.326] GetFileType (hFile=0x444) returned 0x1 [0205.326] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbfc0) returned 1 [0205.326] GetFileType (hFile=0x444) returned 0x1 [0205.326] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc1e8 | out: lpFileSizeHigh=0x3bc1e8*=0x0) returned 0x0 [0205.326] CloseHandle (hObject=0x444) returned 1 [0205.337] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc050) returned 1 [0205.337] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\Microsoft.SkypeApp_3.2.1.0_x86__kzf8qxf38zg5c\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.skypeapp_kzf8qxf38zg5c\\microsoft.skypeapp_3.2.1.0_x86__kzf8qxf38zg5c\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0205.339] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8ae0) returned 1 [0205.339] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0205.339] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0205.340] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0205.340] FindClose (in: hFindFile=0x5d7d30 | out: hFindFile=0x5d7d30) returned 1 [0205.340] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0205.340] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0205.340] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0205.340] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0205.340] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0205.340] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0205.340] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0205.340] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0205.340] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0205.341] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0205.341] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0205.341] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0205.341] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0205.341] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0205.341] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0205.341] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0205.341] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0205.341] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0205.341] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0205.342] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0205.342] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0205.342] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0205.342] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0205.342] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0205.342] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0205.342] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.skypeapp_kzf8qxf38zg5c\\settings\\roaming.lock"), fInfoLevelId=0x0, lpFileInformation=0x2350868 | out: lpFileInformation=0x2350868*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe449bc25, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xe449bc25, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0xe449bc25, ftLastWriteTime.dwHighDateTime=0x1d2d028, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0205.342] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0205.342] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0205.342] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.skypeapp_kzf8qxf38zg5c\\settings\\roaming.lock"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0205.342] GetFileType (hFile=0x444) returned 0x1 [0205.342] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0205.342] GetFileType (hFile=0x444) returned 0x1 [0205.342] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0x0 [0205.342] CloseHandle (hObject=0x444) returned 1 [0205.383] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\Settings\\roaming.lock", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\Settings\\roaming.lock", lpFilePart=0x0) returned 0x63 [0205.383] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0205.383] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.skypeapp_kzf8qxf38zg5c\\settings\\roaming.lock"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0205.384] GetFileType (hFile=0x444) returned 0x1 [0205.385] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0205.385] GetFileType (hFile=0x444) returned 0x1 [0205.385] WriteFile (in: hFile=0x444, lpBuffer=0x21c36d8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x3be628, lpOverlapped=0x0 | out: lpBuffer=0x21c36d8*, lpNumberOfBytesWritten=0x3be628*=0x10, lpOverlapped=0x0) returned 1 [0205.385] CloseHandle (hObject=0x444) returned 1 [0205.385] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\Settings\\roaming.lock", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\Settings\\roaming.lock", lpFilePart=0x0) returned 0x63 [0205.385] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\Settings\\roaming.lock.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\Settings\\roaming.lock.xuy", lpFilePart=0x0) returned 0x67 [0205.385] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0205.386] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.skypeapp_kzf8qxf38zg5c\\settings\\roaming.lock"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe449bc25, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xe449bc25, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x6643e887, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0205.386] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0205.386] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.skypeapp_kzf8qxf38zg5c\\settings\\roaming.lock"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\Settings\\roaming.lock.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.skypeapp_kzf8qxf38zg5c\\settings\\roaming.lock.xuy")) returned 1 [0205.387] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\Settings\\settings.dat", lpFilePart=0x0) returned 0x63 [0205.387] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0205.387] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.skypeapp_kzf8qxf38zg5c\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x21c49e8 | out: lpFileInformation=0x21c49e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4403165, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xe4403165, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x8d6f5917, ftLastWriteTime.dwHighDateTime=0x1d0baff, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0205.387] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0205.387] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\Settings\\settings.dat", lpFilePart=0x0) returned 0x63 [0205.387] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0205.387] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.skypeapp_kzf8qxf38zg5c\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x21c4b68 | out: lpFileInformation=0x21c4b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4403165, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xe4403165, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x8d6f5917, ftLastWriteTime.dwHighDateTime=0x1d0baff, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0205.387] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0205.387] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\Settings\\settings.dat", lpFilePart=0x0) returned 0x63 [0205.387] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0205.387] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.skypeapp_kzf8qxf38zg5c\\settings\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0205.388] GetFileType (hFile=0x444) returned 0x1 [0205.388] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0205.388] GetFileType (hFile=0x444) returned 0x1 [0205.388] ReadFile (in: hFile=0x444, lpBuffer=0x21c6f98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x21c6f98*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0205.402] CloseHandle (hObject=0x444) returned 1 [0205.402] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\Settings\\settings.dat", lpFilePart=0x0) returned 0x63 [0205.402] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0205.402] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.skypeapp_kzf8qxf38zg5c\\settings\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0205.402] GetFileType (hFile=0x444) returned 0x1 [0205.402] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0205.402] GetFileType (hFile=0x444) returned 0x1 [0205.402] WriteFile (in: hFile=0x444, lpBuffer=0x21c4cc8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x21c4cc8*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0205.402] CloseHandle (hObject=0x444) returned 1 [0205.403] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\Settings\\settings.dat", lpFilePart=0x0) returned 0x63 [0205.403] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\Settings\\settings.dat.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\Settings\\settings.dat.xuy", lpFilePart=0x0) returned 0x67 [0205.403] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0205.403] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.skypeapp_kzf8qxf38zg5c\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4403165, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xe4403165, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x66464985, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0205.403] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0205.403] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.skypeapp_kzf8qxf38zg5c\\settings\\settings.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\Settings\\settings.dat.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.skypeapp_kzf8qxf38zg5c\\settings\\settings.dat.xuy")) returned 1 [0205.404] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0205.404] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\SystemAppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\SystemAppData", lpFilePart=0x0) returned 0x5b [0205.404] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\SystemAppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\SystemAppData\\", lpFilePart=0x0) returned 0x5c [0205.404] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\SystemAppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7c70 [0205.404] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0205.405] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0205.405] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0205.405] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0205.405] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0205.405] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0205.405] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\SystemAppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\SystemAppData", lpFilePart=0x0) returned 0x5b [0205.405] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\SystemAppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\SystemAppData\\", lpFilePart=0x0) returned 0x5c [0205.405] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\SystemAppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7370 [0205.405] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0205.405] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0205.405] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0205.405] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0205.405] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0205.405] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0205.405] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\TempState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\TempState", lpFilePart=0x0) returned 0x57 [0205.405] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\TempState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\TempState\\", lpFilePart=0x0) returned 0x58 [0205.406] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\TempState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7eb0 [0205.406] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0205.406] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0205.406] FindClose (in: hFindFile=0x5d7eb0 | out: hFindFile=0x5d7eb0) returned 1 [0205.406] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0205.406] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0205.406] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0205.406] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\TempState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\TempState", lpFilePart=0x0) returned 0x57 [0205.406] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\TempState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\TempState\\", lpFilePart=0x0) returned 0x58 [0205.406] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\TempState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d78b0 [0205.407] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0205.407] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0205.407] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0205.407] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0205.407] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0205.407] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0205.407] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe", lpFilePart=0x0) returned 0x52 [0205.407] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\", lpFilePart=0x0) returned 0x53 [0205.407] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d78b0 [0205.415] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0205.415] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0205.415] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0205.415] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0205.415] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0205.416] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0205.416] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0205.416] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0205.416] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0205.416] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0205.416] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0205.417] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0205.417] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0205.417] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0205.417] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe", lpFilePart=0x0) returned 0x52 [0205.417] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\", lpFilePart=0x0) returned 0x53 [0205.417] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d7550 [0205.418] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0205.418] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0205.418] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0205.418] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0205.418] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0205.418] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0205.418] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0205.418] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0205.419] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0205.419] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0205.419] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0205.419] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0205.419] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0205.419] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0205.419] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\AC", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\AC", lpFilePart=0x0) returned 0x55 [0205.419] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\AC\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\AC\\", lpFilePart=0x0) returned 0x56 [0205.420] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\AC\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d78b0 [0205.429] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0205.429] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0205.429] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0205.429] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0205.429] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0205.429] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0205.429] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0205.430] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0205.430] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0205.430] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0205.430] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\AC", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\AC", lpFilePart=0x0) returned 0x55 [0205.430] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\AC\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\AC\\", lpFilePart=0x0) returned 0x56 [0205.430] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\AC\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d75b0 [0205.431] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0205.431] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0205.431] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0205.432] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0205.432] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0205.432] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0205.432] FindClose (in: hFindFile=0x5d75b0 | out: hFindFile=0x5d75b0) returned 1 [0205.433] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0205.433] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0205.433] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0205.433] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\AC\\INetCache", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\AC\\INetCache", lpFilePart=0x0) returned 0x5f [0205.433] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\AC\\INetCache\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\AC\\INetCache\\", lpFilePart=0x0) returned 0x60 [0205.433] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\AC\\INetCache\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d81b0 [0205.444] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0205.445] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0205.445] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0205.445] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0205.445] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0205.445] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0205.445] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\AC\\INetCache", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\AC\\INetCache", lpFilePart=0x0) returned 0x5f [0205.445] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\AC\\INetCache\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\AC\\INetCache\\", lpFilePart=0x0) returned 0x60 [0205.445] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\AC\\INetCache\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7a30 [0205.445] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0205.445] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0205.445] FindClose (in: hFindFile=0x5d7a30 | out: hFindFile=0x5d7a30) returned 1 [0205.445] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0205.445] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0205.445] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0205.445] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\AC\\INetCookies", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\AC\\INetCookies", lpFilePart=0x0) returned 0x61 [0205.446] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\AC\\INetCookies\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\AC\\INetCookies\\", lpFilePart=0x0) returned 0x62 [0205.446] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\AC\\INetCookies\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7c70 [0205.446] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0205.446] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0205.446] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0205.446] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0205.446] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0205.446] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0205.446] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\AC\\INetCookies", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\AC\\INetCookies", lpFilePart=0x0) returned 0x61 [0205.446] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\AC\\INetCookies\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\AC\\INetCookies\\", lpFilePart=0x0) returned 0x62 [0205.446] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\AC\\INetCookies\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d78b0 [0205.446] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0205.446] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0205.447] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0205.447] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0205.447] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0205.447] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0205.447] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\AC\\INetHistory", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\AC\\INetHistory", lpFilePart=0x0) returned 0x61 [0205.447] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\AC\\INetHistory\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\AC\\INetHistory\\", lpFilePart=0x0) returned 0x62 [0205.447] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\AC\\INetHistory\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7f10 [0205.447] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0205.447] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0205.447] FindClose (in: hFindFile=0x5d7f10 | out: hFindFile=0x5d7f10) returned 1 [0205.447] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0205.447] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0205.447] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0205.447] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\AC\\INetHistory", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\AC\\INetHistory", lpFilePart=0x0) returned 0x61 [0205.447] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\AC\\INetHistory\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\AC\\INetHistory\\", lpFilePart=0x0) returned 0x62 [0205.447] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\AC\\INetHistory\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d78b0 [0205.448] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0205.448] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0205.448] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0205.448] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0205.448] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0205.448] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0205.448] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\AC\\Temp", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\AC\\Temp", lpFilePart=0x0) returned 0x5a [0205.448] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\AC\\Temp\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\AC\\Temp\\", lpFilePart=0x0) returned 0x5b [0205.448] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\AC\\Temp\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d78b0 [0205.450] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0205.450] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0205.450] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0205.450] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0205.450] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0205.450] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0205.450] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\AC\\Temp", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\AC\\Temp", lpFilePart=0x0) returned 0x5a [0205.450] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\AC\\Temp\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\AC\\Temp\\", lpFilePart=0x0) returned 0x5b [0205.450] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\AC\\Temp\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d81b0 [0205.450] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0205.451] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0205.451] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0205.451] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0205.451] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0205.451] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0205.451] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\AppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\AppData", lpFilePart=0x0) returned 0x5a [0205.451] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\AppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\AppData\\", lpFilePart=0x0) returned 0x5b [0205.451] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\AppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7af0 [0205.451] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0205.451] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0205.451] FindClose (in: hFindFile=0x5d7af0 | out: hFindFile=0x5d7af0) returned 1 [0205.451] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0205.451] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0205.451] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0205.451] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\AppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\AppData", lpFilePart=0x0) returned 0x5a [0205.451] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\AppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\AppData\\", lpFilePart=0x0) returned 0x5b [0205.452] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\AppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d79d0 [0205.452] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0205.452] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0205.452] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0205.452] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0205.452] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0205.452] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0205.452] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\LocalCache", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\LocalCache", lpFilePart=0x0) returned 0x5d [0205.452] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\LocalCache\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\LocalCache\\", lpFilePart=0x0) returned 0x5e [0205.452] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\LocalCache\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7a90 [0205.452] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0205.452] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0205.452] FindClose (in: hFindFile=0x5d7a90 | out: hFindFile=0x5d7a90) returned 1 [0205.452] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0205.453] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0205.453] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0205.453] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\LocalCache", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\LocalCache", lpFilePart=0x0) returned 0x5d [0205.453] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\LocalCache\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\LocalCache\\", lpFilePart=0x0) returned 0x5e [0205.453] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\LocalCache\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7df0 [0205.453] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0205.453] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0205.454] FindClose (in: hFindFile=0x5d7df0 | out: hFindFile=0x5d7df0) returned 1 [0205.454] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0205.454] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0205.454] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0205.454] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\LocalState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\LocalState", lpFilePart=0x0) returned 0x5d [0205.454] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\LocalState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\LocalState\\", lpFilePart=0x0) returned 0x5e [0205.454] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\LocalState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7c70 [0205.454] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0205.454] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0205.454] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0205.454] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0205.454] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0205.454] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0205.454] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\LocalState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\LocalState", lpFilePart=0x0) returned 0x5d [0205.454] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\LocalState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\LocalState\\", lpFilePart=0x0) returned 0x5e [0205.454] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\LocalState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d81b0 [0205.454] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0205.455] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0205.455] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0205.455] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0205.455] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0205.455] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0205.455] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\RoamingState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\RoamingState", lpFilePart=0x0) returned 0x5f [0205.455] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\RoamingState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\RoamingState\\", lpFilePart=0x0) returned 0x60 [0205.455] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\RoamingState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d8090 [0205.455] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0205.455] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0205.455] FindClose (in: hFindFile=0x5d8090 | out: hFindFile=0x5d8090) returned 1 [0205.455] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0205.455] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0205.455] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0205.455] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\RoamingState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\RoamingState", lpFilePart=0x0) returned 0x5f [0205.455] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\RoamingState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\RoamingState\\", lpFilePart=0x0) returned 0x60 [0205.456] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\RoamingState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7550 [0205.456] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0205.456] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0205.456] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0205.456] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0205.456] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0205.456] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0205.456] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\Settings", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\Settings", lpFilePart=0x0) returned 0x5b [0205.456] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\Settings\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\Settings\\", lpFilePart=0x0) returned 0x5c [0205.456] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\Settings\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7c70 [0205.462] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0205.462] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0205.462] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0205.462] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0205.462] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0205.462] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0205.462] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0205.463] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0205.463] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0205.463] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0205.463] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\Settings", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\Settings", lpFilePart=0x0) returned 0x5b [0205.463] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\Settings\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\Settings\\", lpFilePart=0x0) returned 0x5c [0205.463] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\Settings\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d78b0 [0205.464] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0205.464] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0205.464] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0205.464] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0205.464] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0205.464] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0205.464] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0205.465] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0205.465] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0205.465] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\Settings\\roaming.lock", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\Settings\\roaming.lock", lpFilePart=0x0) returned 0x68 [0205.465] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0205.465] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.vclibs.140.00_8wekyb3d8bbwe\\settings\\roaming.lock"), fInfoLevelId=0x0, lpFileInformation=0x2261350 | out: lpFileInformation=0x2261350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd1ffff5, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xcd1ffff5, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xcd1ffff5, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0205.466] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0205.466] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\Settings\\roaming.lock", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\Settings\\roaming.lock", lpFilePart=0x0) returned 0x68 [0205.466] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0205.466] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.vclibs.140.00_8wekyb3d8bbwe\\settings\\roaming.lock"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0205.466] GetFileType (hFile=0x444) returned 0x1 [0205.466] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0205.466] GetFileType (hFile=0x444) returned 0x1 [0205.466] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0x0 [0205.466] CloseHandle (hObject=0x444) returned 1 [0205.476] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\Settings\\roaming.lock", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\Settings\\roaming.lock", lpFilePart=0x0) returned 0x68 [0205.476] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0205.476] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.vclibs.140.00_8wekyb3d8bbwe\\settings\\roaming.lock"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0205.478] GetFileType (hFile=0x444) returned 0x1 [0205.478] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0205.478] GetFileType (hFile=0x444) returned 0x1 [0205.478] WriteFile (in: hFile=0x444, lpBuffer=0x22d77b8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x3be628, lpOverlapped=0x0 | out: lpBuffer=0x22d77b8*, lpNumberOfBytesWritten=0x3be628*=0x10, lpOverlapped=0x0) returned 1 [0205.478] CloseHandle (hObject=0x444) returned 1 [0205.479] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\Settings\\roaming.lock", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\Settings\\roaming.lock", lpFilePart=0x0) returned 0x68 [0205.479] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\Settings\\roaming.lock.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\Settings\\roaming.lock.xuy", lpFilePart=0x0) returned 0x6c [0205.479] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0205.479] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.vclibs.140.00_8wekyb3d8bbwe\\settings\\roaming.lock"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd1ffff5, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xcd1ffff5, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x665236c1, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0205.479] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0205.479] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.vclibs.140.00_8wekyb3d8bbwe\\settings\\roaming.lock"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\Settings\\roaming.lock.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.vclibs.140.00_8wekyb3d8bbwe\\settings\\roaming.lock.xuy")) returned 1 [0205.482] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\Settings\\settings.dat", lpFilePart=0x0) returned 0x68 [0205.482] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0205.482] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.vclibs.140.00_8wekyb3d8bbwe\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x22d8af8 | out: lpFileInformation=0x22d8af8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd1d9d90, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0x7dfe009b, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x6a8672a2, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0205.483] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0205.483] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\Settings\\settings.dat", lpFilePart=0x0) returned 0x68 [0205.483] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0205.483] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.vclibs.140.00_8wekyb3d8bbwe\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x22d8c88 | out: lpFileInformation=0x22d8c88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd1d9d90, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0x7dfe009b, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x6a8672a2, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0205.483] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0205.483] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\Settings\\settings.dat", lpFilePart=0x0) returned 0x68 [0205.483] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0205.483] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.vclibs.140.00_8wekyb3d8bbwe\\settings\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0205.484] GetFileType (hFile=0x444) returned 0x1 [0205.484] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0205.484] GetFileType (hFile=0x444) returned 0x1 [0205.484] ReadFile (in: hFile=0x444, lpBuffer=0x22db0d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x22db0d8*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0205.496] CloseHandle (hObject=0x444) returned 1 [0205.496] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\Settings\\settings.dat", lpFilePart=0x0) returned 0x68 [0205.496] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0205.496] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.vclibs.140.00_8wekyb3d8bbwe\\settings\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0205.496] GetFileType (hFile=0x444) returned 0x1 [0205.496] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0205.496] GetFileType (hFile=0x444) returned 0x1 [0205.496] WriteFile (in: hFile=0x444, lpBuffer=0x22d8df8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x22d8df8*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0205.496] CloseHandle (hObject=0x444) returned 1 [0205.497] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\Settings\\settings.dat", lpFilePart=0x0) returned 0x68 [0205.497] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\Settings\\settings.dat.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\Settings\\settings.dat.xuy", lpFilePart=0x0) returned 0x6c [0205.497] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0205.497] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.vclibs.140.00_8wekyb3d8bbwe\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd1d9d90, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0x7dfe009b, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x665498fa, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0205.497] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0205.497] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.vclibs.140.00_8wekyb3d8bbwe\\settings\\settings.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\Settings\\settings.dat.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.vclibs.140.00_8wekyb3d8bbwe\\settings\\settings.dat.xuy")) returned 1 [0205.498] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\Settings\\settings.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\Settings\\settings.dat.LOG1", lpFilePart=0x0) returned 0x6d [0205.498] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0205.498] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.vclibs.140.00_8wekyb3d8bbwe\\settings\\settings.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x2357590 | out: lpFileInformation=0x2357590*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xcd2bebc7, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xcd2bebc7, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xcd2bebc7, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0205.502] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0205.502] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\Settings\\settings.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\Settings\\settings.dat.LOG1", lpFilePart=0x0) returned 0x6d [0205.502] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0205.502] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.vclibs.140.00_8wekyb3d8bbwe\\settings\\settings.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x2357730 | out: lpFileInformation=0x2357730*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xcd2bebc7, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xcd2bebc7, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xcd2bebc7, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0205.502] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0205.502] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\Settings\\settings.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\Settings\\settings.dat.LOG1", lpFilePart=0x0) returned 0x6d [0205.502] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0205.502] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.vclibs.140.00_8wekyb3d8bbwe\\settings\\settings.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0205.503] GetFileType (hFile=0x444) returned 0x1 [0205.503] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0205.503] GetFileType (hFile=0x444) returned 0x1 [0205.503] ReadFile (in: hFile=0x444, lpBuffer=0x2359ba0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x2359ba0*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0205.519] CloseHandle (hObject=0x444) returned 1 [0205.520] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\Settings\\settings.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\Settings\\settings.dat.LOG1", lpFilePart=0x0) returned 0x6d [0205.520] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0205.520] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.vclibs.140.00_8wekyb3d8bbwe\\settings\\settings.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0205.521] GetFileType (hFile=0x444) returned 0x1 [0205.521] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0205.521] GetFileType (hFile=0x444) returned 0x1 [0205.521] WriteFile (in: hFile=0x444, lpBuffer=0x2186b80*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x2186b80*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0205.521] CloseHandle (hObject=0x444) returned 1 [0205.521] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\Settings\\settings.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\Settings\\settings.dat.LOG1", lpFilePart=0x0) returned 0x6d [0205.521] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\Settings\\settings.dat.LOG1.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\Settings\\settings.dat.LOG1.xuy", lpFilePart=0x0) returned 0x71 [0205.521] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0205.521] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.vclibs.140.00_8wekyb3d8bbwe\\settings\\settings.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xcd2bebc7, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xcd2bebc7, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x6659602b, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0205.521] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0205.521] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.vclibs.140.00_8wekyb3d8bbwe\\settings\\settings.dat.log1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\Settings\\settings.dat.LOG1.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.vclibs.140.00_8wekyb3d8bbwe\\settings\\settings.dat.log1.xuy")) returned 1 [0205.522] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\Settings\\settings.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\Settings\\settings.dat.LOG2", lpFilePart=0x0) returned 0x6d [0205.522] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0205.522] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.vclibs.140.00_8wekyb3d8bbwe\\settings\\settings.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x21d9110 | out: lpFileInformation=0x21d9110*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xcd2bebc7, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xcd2bebc7, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xcd2bebc7, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0205.523] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0205.523] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\Settings\\settings.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\Settings\\settings.dat.LOG2", lpFilePart=0x0) returned 0x6d [0205.523] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0205.523] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.vclibs.140.00_8wekyb3d8bbwe\\settings\\settings.dat.log2"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0205.523] GetFileType (hFile=0x444) returned 0x1 [0205.523] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0205.523] GetFileType (hFile=0x444) returned 0x1 [0205.523] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0x0 [0205.523] CloseHandle (hObject=0x444) returned 1 [0205.533] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\Settings\\settings.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\Settings\\settings.dat.LOG2", lpFilePart=0x0) returned 0x6d [0205.533] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0205.533] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.vclibs.140.00_8wekyb3d8bbwe\\settings\\settings.dat.log2"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0205.534] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb0e0) returned 1 [0205.535] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\Settings\\settings.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\Settings\\settings.dat.LOG2", lpFilePart=0x0) returned 0x6d [0205.535] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc200) returned 1 [0205.535] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.vclibs.140.00_8wekyb3d8bbwe\\settings\\settings.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x3bc2e0 | out: lpFileInformation=0x3bc2e0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xcd2bebc7, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xcd2bebc7, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xcd2bebc7, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0205.535] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1c0) returned 1 [0205.535] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\Settings\\settings.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbd80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\Settings\\settings.dat.LOG2", lpFilePart=0x0) returned 0x6d [0205.535] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc200) returned 1 [0205.535] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.vclibs.140.00_8wekyb3d8bbwe\\settings\\settings.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x224fe80 | out: lpFileInformation=0x224fe80*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xcd2bebc7, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xcd2bebc7, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xcd2bebc7, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0205.535] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1c0) returned 1 [0205.535] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\Settings\\settings.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\Settings\\settings.dat.LOG2", lpFilePart=0x0) returned 0x6d [0205.535] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0c0) returned 1 [0205.535] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.vclibs.140.00_8wekyb3d8bbwe\\settings\\settings.dat.log2"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0205.535] GetFileType (hFile=0x444) returned 0x1 [0205.535] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc030) returned 1 [0205.535] GetFileType (hFile=0x444) returned 0x1 [0205.536] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc258 | out: lpFileSizeHigh=0x3bc258*=0x0) returned 0x0 [0205.536] CloseHandle (hObject=0x444) returned 1 [0205.573] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\Settings\\settings.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\Settings\\settings.dat.LOG2", lpFilePart=0x0) returned 0x6d [0205.573] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0c0) returned 1 [0205.573] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.vclibs.140.00_8wekyb3d8bbwe\\settings\\settings.dat.log2"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0205.575] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8b50) returned 1 [0205.576] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0205.576] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\SystemAppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\SystemAppData", lpFilePart=0x0) returned 0x60 [0205.576] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\SystemAppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\SystemAppData\\", lpFilePart=0x0) returned 0x61 [0205.576] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\SystemAppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7670 [0205.576] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0205.576] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0205.576] FindClose (in: hFindFile=0x5d7670 | out: hFindFile=0x5d7670) returned 1 [0205.576] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0205.576] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0205.576] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0205.576] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\SystemAppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\SystemAppData", lpFilePart=0x0) returned 0x60 [0205.576] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\SystemAppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\SystemAppData\\", lpFilePart=0x0) returned 0x61 [0205.576] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\SystemAppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7c70 [0205.577] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0205.577] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0205.577] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0205.577] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0205.577] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0205.577] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0205.577] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\TempState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\TempState", lpFilePart=0x0) returned 0x5c [0205.577] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\TempState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\TempState\\", lpFilePart=0x0) returned 0x5d [0205.577] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\TempState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7c70 [0205.577] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0205.577] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0205.577] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0205.578] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0205.578] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0205.578] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0205.578] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\TempState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\TempState", lpFilePart=0x0) returned 0x5c [0205.578] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\TempState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\TempState\\", lpFilePart=0x0) returned 0x5d [0205.610] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\TempState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7550 [0205.610] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0205.611] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0205.611] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0205.611] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0205.611] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0205.611] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0205.611] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy", lpFilePart=0x0) returned 0x62 [0205.611] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\", lpFilePart=0x0) returned 0x63 [0205.611] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d7fd0 [0205.628] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0205.628] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0205.628] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0205.628] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0205.628] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0205.628] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0205.628] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0205.629] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0205.629] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0205.629] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0205.629] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0205.629] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0205.630] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0205.630] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0205.630] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0205.630] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy", lpFilePart=0x0) returned 0x62 [0205.630] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\", lpFilePart=0x0) returned 0x63 [0205.630] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d7a90 [0205.631] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0205.631] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0205.631] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0205.631] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0205.631] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0205.631] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0205.631] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0205.631] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0205.632] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0205.632] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0205.632] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0205.632] FindClose (in: hFindFile=0x5d7a90 | out: hFindFile=0x5d7a90) returned 1 [0205.632] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0205.632] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0205.632] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0205.632] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\AC", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\AC", lpFilePart=0x0) returned 0x65 [0205.633] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\AC\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\AC\\", lpFilePart=0x0) returned 0x66 [0205.633] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\AC\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7550 [0205.641] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0205.641] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0205.641] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0205.642] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0205.642] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0205.642] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0205.642] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0205.642] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0205.643] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0205.643] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0205.643] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\AC", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\AC", lpFilePart=0x0) returned 0x65 [0205.643] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\AC\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\AC\\", lpFilePart=0x0) returned 0x66 [0205.643] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\AC\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7fd0 [0205.644] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0205.644] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0205.644] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0205.644] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0205.644] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0205.644] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0205.644] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0205.645] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0205.645] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0205.645] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0205.645] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\AC\\INetCache", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\AC\\INetCache", lpFilePart=0x0) returned 0x6f [0205.645] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\AC\\INetCache\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\AC\\INetCache\\", lpFilePart=0x0) returned 0x70 [0205.645] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\AC\\INetCache\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7a30 [0205.648] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0205.648] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0205.648] FindClose (in: hFindFile=0x5d7a30 | out: hFindFile=0x5d7a30) returned 1 [0205.648] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0205.648] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0205.648] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0205.648] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\AC\\INetCache", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\AC\\INetCache", lpFilePart=0x0) returned 0x6f [0205.648] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\AC\\INetCache\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\AC\\INetCache\\", lpFilePart=0x0) returned 0x70 [0205.648] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\AC\\INetCache\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d78b0 [0205.648] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0205.648] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0205.648] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0205.649] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0205.649] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0205.649] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0205.649] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\AC\\INetCookies", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\AC\\INetCookies", lpFilePart=0x0) returned 0x71 [0205.649] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\AC\\INetCookies\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\AC\\INetCookies\\", lpFilePart=0x0) returned 0x72 [0205.649] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\AC\\INetCookies\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d81b0 [0205.649] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0205.649] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0205.649] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0205.649] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0205.649] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0205.649] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0205.649] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\AC\\INetCookies", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\AC\\INetCookies", lpFilePart=0x0) returned 0x71 [0205.649] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\AC\\INetCookies\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\AC\\INetCookies\\", lpFilePart=0x0) returned 0x72 [0205.649] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\AC\\INetCookies\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7c70 [0205.650] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0205.650] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0205.650] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0205.650] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0205.650] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0205.650] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0205.650] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\AC\\INetHistory", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\AC\\INetHistory", lpFilePart=0x0) returned 0x71 [0205.650] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\AC\\INetHistory\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\AC\\INetHistory\\", lpFilePart=0x0) returned 0x72 [0205.650] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\AC\\INetHistory\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7670 [0205.650] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0205.650] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0205.651] FindClose (in: hFindFile=0x5d7670 | out: hFindFile=0x5d7670) returned 1 [0205.651] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0205.651] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0205.651] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0205.651] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\AC\\INetHistory", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\AC\\INetHistory", lpFilePart=0x0) returned 0x71 [0205.651] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\AC\\INetHistory\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\AC\\INetHistory\\", lpFilePart=0x0) returned 0x72 [0205.651] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\AC\\INetHistory\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7eb0 [0205.651] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0205.651] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0205.651] FindClose (in: hFindFile=0x5d7eb0 | out: hFindFile=0x5d7eb0) returned 1 [0205.651] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0205.651] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0205.651] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0205.651] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\AC\\Temp", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\AC\\Temp", lpFilePart=0x0) returned 0x6a [0205.651] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\AC\\Temp\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\AC\\Temp\\", lpFilePart=0x0) returned 0x6b [0205.651] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\AC\\Temp\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7550 [0205.652] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0205.652] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0205.652] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0205.652] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0205.652] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0205.652] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0205.652] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\AC\\Temp", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\AC\\Temp", lpFilePart=0x0) returned 0x6a [0205.652] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\AC\\Temp\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\AC\\Temp\\", lpFilePart=0x0) returned 0x6b [0205.652] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\AC\\Temp\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d79d0 [0205.652] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0205.653] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0205.653] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0205.653] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0205.653] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0205.653] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0205.653] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\AppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\AppData", lpFilePart=0x0) returned 0x6a [0205.653] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\AppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\AppData\\", lpFilePart=0x0) returned 0x6b [0205.653] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\AppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7550 [0205.653] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0205.653] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0205.653] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0205.653] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0205.653] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0205.653] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0205.653] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\AppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\AppData", lpFilePart=0x0) returned 0x6a [0205.653] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\AppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\AppData\\", lpFilePart=0x0) returned 0x6b [0205.654] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\AppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d81b0 [0205.654] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0205.654] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0205.654] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0205.654] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0205.654] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0205.654] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0205.654] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\LocalCache", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\LocalCache", lpFilePart=0x0) returned 0x6d [0205.654] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\LocalCache\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\LocalCache\\", lpFilePart=0x0) returned 0x6e [0205.654] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\LocalCache\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d79d0 [0205.659] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0205.659] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0205.659] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0205.659] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0205.659] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0205.659] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0205.659] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\LocalCache", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\LocalCache", lpFilePart=0x0) returned 0x6d [0205.660] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\LocalCache\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\LocalCache\\", lpFilePart=0x0) returned 0x6e [0205.660] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\LocalCache\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7fd0 [0205.660] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0205.660] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0205.660] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0205.660] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0205.660] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0205.660] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0205.660] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\LocalState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\LocalState", lpFilePart=0x0) returned 0x6d [0205.660] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\LocalState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\LocalState\\", lpFilePart=0x0) returned 0x6e [0205.660] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\LocalState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d78b0 [0205.660] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0205.661] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0205.661] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0205.661] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0205.661] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0205.661] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0205.661] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\LocalState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\LocalState", lpFilePart=0x0) returned 0x6d [0205.661] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\LocalState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\LocalState\\", lpFilePart=0x0) returned 0x6e [0205.661] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\LocalState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7c70 [0205.661] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0205.661] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0205.661] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0205.661] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0205.661] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0205.661] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0205.661] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Microsoft.Windows.AssignedAccessLockApp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Microsoft.Windows.AssignedAccessLockApp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy", lpFilePart=0x0) returned 0xbb [0205.662] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Microsoft.Windows.AssignedAccessLockApp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Microsoft.Windows.AssignedAccessLockApp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\", lpFilePart=0x0) returned 0xbc [0205.662] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Microsoft.Windows.AssignedAccessLockApp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d79d0 [0205.662] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0205.662] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0205.662] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0205.662] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0205.662] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0205.662] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0205.662] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0205.662] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Microsoft.Windows.AssignedAccessLockApp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Microsoft.Windows.AssignedAccessLockApp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy", lpFilePart=0x0) returned 0xbb [0205.662] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Microsoft.Windows.AssignedAccessLockApp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Microsoft.Windows.AssignedAccessLockApp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\", lpFilePart=0x0) returned 0xbc [0205.662] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Microsoft.Windows.AssignedAccessLockApp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7c70 [0205.663] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0205.663] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0205.663] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0205.663] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0205.663] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0205.663] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0205.663] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0205.663] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Microsoft.Windows.AssignedAccessLockApp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Microsoft.Windows.AssignedAccessLockApp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore", lpFilePart=0x0) returned 0xcb [0205.663] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Microsoft.Windows.AssignedAccessLockApp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Microsoft.Windows.AssignedAccessLockApp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\", lpFilePart=0x0) returned 0xcc [0205.663] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Microsoft.Windows.AssignedAccessLockApp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7370 [0205.671] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0205.671] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0205.671] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0205.671] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0205.671] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0205.671] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0205.672] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0205.672] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0205.672] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0205.672] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Microsoft.Windows.AssignedAccessLockApp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Microsoft.Windows.AssignedAccessLockApp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore", lpFilePart=0x0) returned 0xcb [0205.672] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Microsoft.Windows.AssignedAccessLockApp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Microsoft.Windows.AssignedAccessLockApp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\", lpFilePart=0x0) returned 0xcc [0205.672] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Microsoft.Windows.AssignedAccessLockApp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7c70 [0205.673] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0205.673] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0205.673] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0205.674] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0205.674] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0205.674] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0205.674] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0205.674] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0205.675] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Microsoft.Windows.AssignedAccessLockApp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Microsoft.Windows.AssignedAccessLockApp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xdf [0205.675] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0205.675] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Microsoft.Windows.AssignedAccessLockApp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.assignedaccesslockapp_cw5n1h2txyewy\\microsoft.windows.assignedaccesslockapp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat"), fInfoLevelId=0x0, lpFileInformation=0x22eb1c0 | out: lpFileInformation=0x22eb1c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3af73a7, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb3d33705, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xb3d33705, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0205.675] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0205.675] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Microsoft.Windows.AssignedAccessLockApp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Microsoft.Windows.AssignedAccessLockApp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xdf [0205.675] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0205.675] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Microsoft.Windows.AssignedAccessLockApp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.assignedaccesslockapp_cw5n1h2txyewy\\microsoft.windows.assignedaccesslockapp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat"), fInfoLevelId=0x0, lpFileInformation=0x22eb440 | out: lpFileInformation=0x22eb440*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3af73a7, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb3d33705, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xb3d33705, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0205.675] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0205.676] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Microsoft.Windows.AssignedAccessLockApp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Microsoft.Windows.AssignedAccessLockApp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xdf [0205.676] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0205.676] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Microsoft.Windows.AssignedAccessLockApp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.assignedaccesslockapp_cw5n1h2txyewy\\microsoft.windows.assignedaccesslockapp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0205.677] GetFileType (hFile=0x444) returned 0x1 [0205.677] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0205.677] GetFileType (hFile=0x444) returned 0x1 [0205.677] ReadFile (in: hFile=0x444, lpBuffer=0x22eda70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x22eda70*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0205.690] CloseHandle (hObject=0x444) returned 1 [0205.691] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Microsoft.Windows.AssignedAccessLockApp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Microsoft.Windows.AssignedAccessLockApp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xdf [0205.691] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0205.691] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Microsoft.Windows.AssignedAccessLockApp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.assignedaccesslockapp_cw5n1h2txyewy\\microsoft.windows.assignedaccesslockapp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0205.691] GetFileType (hFile=0x444) returned 0x1 [0205.691] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0205.691] GetFileType (hFile=0x444) returned 0x1 [0205.691] WriteFile (in: hFile=0x444, lpBuffer=0x22eb6a0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x22eb6a0*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0205.691] CloseHandle (hObject=0x444) returned 1 [0205.691] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Microsoft.Windows.AssignedAccessLockApp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Microsoft.Windows.AssignedAccessLockApp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xdf [0205.691] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Microsoft.Windows.AssignedAccessLockApp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Microsoft.Windows.AssignedAccessLockApp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.xuy", lpFilePart=0x0) returned 0xe3 [0205.691] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0205.691] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Microsoft.Windows.AssignedAccessLockApp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.assignedaccesslockapp_cw5n1h2txyewy\\microsoft.windows.assignedaccesslockapp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3af73a7, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb3d33705, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x66739a1f, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0205.691] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0205.692] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Microsoft.Windows.AssignedAccessLockApp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.assignedaccesslockapp_cw5n1h2txyewy\\microsoft.windows.assignedaccesslockapp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Microsoft.Windows.AssignedAccessLockApp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.assignedaccesslockapp_cw5n1h2txyewy\\microsoft.windows.assignedaccesslockapp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.xuy")) returned 1 [0205.693] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Microsoft.Windows.AssignedAccessLockApp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Microsoft.Windows.AssignedAccessLockApp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xe4 [0205.693] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0205.693] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Microsoft.Windows.AssignedAccessLockApp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.assignedaccesslockapp_cw5n1h2txyewy\\microsoft.windows.assignedaccesslockapp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x236a2d0 | out: lpFileInformation=0x236a2d0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xb3b1d5e4, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb3b1d5e4, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xb3b1d5e4, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0205.693] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0205.693] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Microsoft.Windows.AssignedAccessLockApp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Microsoft.Windows.AssignedAccessLockApp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xe4 [0205.693] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Microsoft.Windows.AssignedAccessLockApp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.assignedaccesslockapp_cw5n1h2txyewy\\microsoft.windows.assignedaccesslockapp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x236a570 | out: lpFileInformation=0x236a570*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xb3b1d5e4, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb3b1d5e4, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xb3b1d5e4, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0205.693] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Microsoft.Windows.AssignedAccessLockApp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Microsoft.Windows.AssignedAccessLockApp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xe4 [0205.693] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Microsoft.Windows.AssignedAccessLockApp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.assignedaccesslockapp_cw5n1h2txyewy\\microsoft.windows.assignedaccesslockapp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0205.694] GetFileType (hFile=0x444) returned 0x1 [0205.694] GetFileType (hFile=0x444) returned 0x1 [0205.694] ReadFile (in: hFile=0x444, lpBuffer=0x236cbe0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x236cbe0*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0205.745] CloseHandle (hObject=0x444) returned 1 [0205.745] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Microsoft.Windows.AssignedAccessLockApp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Microsoft.Windows.AssignedAccessLockApp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xe4 [0205.745] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Microsoft.Windows.AssignedAccessLockApp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.assignedaccesslockapp_cw5n1h2txyewy\\microsoft.windows.assignedaccesslockapp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0205.745] GetFileType (hFile=0x444) returned 0x1 [0205.745] GetFileType (hFile=0x444) returned 0x1 [0205.745] WriteFile (in: hFile=0x444, lpBuffer=0x21873f0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x21873f0*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0205.746] CloseHandle (hObject=0x444) returned 1 [0205.746] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Microsoft.Windows.AssignedAccessLockApp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Microsoft.Windows.AssignedAccessLockApp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xe4 [0205.746] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Microsoft.Windows.AssignedAccessLockApp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Microsoft.Windows.AssignedAccessLockApp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1.xuy", lpFilePart=0x0) returned 0xe8 [0205.746] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Microsoft.Windows.AssignedAccessLockApp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.assignedaccesslockapp_cw5n1h2txyewy\\microsoft.windows.assignedaccesslockapp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xb3b1d5e4, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb3b1d5e4, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x667abf01, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0205.746] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Microsoft.Windows.AssignedAccessLockApp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.assignedaccesslockapp_cw5n1h2txyewy\\microsoft.windows.assignedaccesslockapp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Microsoft.Windows.AssignedAccessLockApp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.assignedaccesslockapp_cw5n1h2txyewy\\microsoft.windows.assignedaccesslockapp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log1.xuy")) returned 1 [0205.747] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Microsoft.Windows.AssignedAccessLockApp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Microsoft.Windows.AssignedAccessLockApp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xe4 [0205.747] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Microsoft.Windows.AssignedAccessLockApp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.assignedaccesslockapp_cw5n1h2txyewy\\microsoft.windows.assignedaccesslockapp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x21e9cf0 | out: lpFileInformation=0x21e9cf0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xb3b1d5e4, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb3b1d5e4, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xb3b1d5e4, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0205.749] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Microsoft.Windows.AssignedAccessLockApp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Microsoft.Windows.AssignedAccessLockApp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xe4 [0205.750] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Microsoft.Windows.AssignedAccessLockApp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.assignedaccesslockapp_cw5n1h2txyewy\\microsoft.windows.assignedaccesslockapp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0205.750] GetFileType (hFile=0x444) returned 0x1 [0205.750] GetFileType (hFile=0x444) returned 0x1 [0205.750] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x0 [0205.750] CloseHandle (hObject=0x444) returned 1 [0205.760] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Microsoft.Windows.AssignedAccessLockApp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Microsoft.Windows.AssignedAccessLockApp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xe4 [0205.760] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Microsoft.Windows.AssignedAccessLockApp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.assignedaccesslockapp_cw5n1h2txyewy\\microsoft.windows.assignedaccesslockapp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0205.761] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb070) returned 1 [0205.762] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Microsoft.Windows.AssignedAccessLockApp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbcf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Microsoft.Windows.AssignedAccessLockApp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xe4 [0205.762] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0205.762] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Microsoft.Windows.AssignedAccessLockApp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.assignedaccesslockapp_cw5n1h2txyewy\\microsoft.windows.assignedaccesslockapp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x3bc270 | out: lpFileInformation=0x3bc270*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xb3b1d5e4, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb3b1d5e4, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xb3b1d5e4, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0205.762] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc150) returned 1 [0205.762] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Microsoft.Windows.AssignedAccessLockApp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbd10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Microsoft.Windows.AssignedAccessLockApp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xe4 [0205.762] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0205.762] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Microsoft.Windows.AssignedAccessLockApp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.assignedaccesslockapp_cw5n1h2txyewy\\microsoft.windows.assignedaccesslockapp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x2261188 | out: lpFileInformation=0x2261188*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xb3b1d5e4, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb3b1d5e4, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xb3b1d5e4, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0205.762] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc150) returned 1 [0205.762] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Microsoft.Windows.AssignedAccessLockApp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Microsoft.Windows.AssignedAccessLockApp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xe4 [0205.762] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc050) returned 1 [0205.762] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Microsoft.Windows.AssignedAccessLockApp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.assignedaccesslockapp_cw5n1h2txyewy\\microsoft.windows.assignedaccesslockapp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0205.762] GetFileType (hFile=0x444) returned 0x1 [0205.762] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbfc0) returned 1 [0205.762] GetFileType (hFile=0x444) returned 0x1 [0205.762] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc1e8 | out: lpFileSizeHigh=0x3bc1e8*=0x0) returned 0x0 [0205.762] CloseHandle (hObject=0x444) returned 1 [0205.774] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Microsoft.Windows.AssignedAccessLockApp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Microsoft.Windows.AssignedAccessLockApp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xe4 [0205.774] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc050) returned 1 [0205.774] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Microsoft.Windows.AssignedAccessLockApp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.assignedaccesslockapp_cw5n1h2txyewy\\microsoft.windows.assignedaccesslockapp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0205.775] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8ae0) returned 1 [0205.776] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0205.776] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\RoamingState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\RoamingState", lpFilePart=0x0) returned 0x6f [0205.776] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\RoamingState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\RoamingState\\", lpFilePart=0x0) returned 0x70 [0205.776] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\RoamingState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7370 [0205.776] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0205.776] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0205.777] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0205.777] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0205.777] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0205.777] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0205.777] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\RoamingState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\RoamingState", lpFilePart=0x0) returned 0x6f [0205.777] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\RoamingState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\RoamingState\\", lpFilePart=0x0) returned 0x70 [0205.777] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\RoamingState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7cd0 [0205.777] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0205.777] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0205.777] FindClose (in: hFindFile=0x5d7cd0 | out: hFindFile=0x5d7cd0) returned 1 [0205.777] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0205.777] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0205.777] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0205.777] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Settings", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Settings", lpFilePart=0x0) returned 0x6b [0205.777] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Settings\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Settings\\", lpFilePart=0x0) returned 0x6c [0205.777] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Settings\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d78b0 [0205.786] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0205.786] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0205.786] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0205.786] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0205.786] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0205.786] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0205.786] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0205.787] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0205.787] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0205.787] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0205.787] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Settings", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Settings", lpFilePart=0x0) returned 0x6b [0205.787] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Settings\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Settings\\", lpFilePart=0x0) returned 0x6c [0205.787] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Settings\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7a30 [0205.788] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0205.788] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0205.788] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0205.788] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0205.788] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0205.788] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0205.789] FindClose (in: hFindFile=0x5d7a30 | out: hFindFile=0x5d7a30) returned 1 [0205.789] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0205.789] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0205.789] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Settings\\roaming.lock", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Settings\\roaming.lock", lpFilePart=0x0) returned 0x78 [0205.789] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0205.789] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.assignedaccesslockapp_cw5n1h2txyewy\\settings\\roaming.lock"), fInfoLevelId=0x0, lpFileInformation=0x22de368 | out: lpFileInformation=0x22de368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2666e80, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb2666e80, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xb2666e80, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0205.790] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0205.790] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Settings\\roaming.lock", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Settings\\roaming.lock", lpFilePart=0x0) returned 0x78 [0205.790] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0205.790] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.assignedaccesslockapp_cw5n1h2txyewy\\settings\\roaming.lock"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0205.790] GetFileType (hFile=0x444) returned 0x1 [0205.790] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0205.790] GetFileType (hFile=0x444) returned 0x1 [0205.790] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0x0 [0205.790] CloseHandle (hObject=0x444) returned 1 [0205.801] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Settings\\roaming.lock", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Settings\\roaming.lock", lpFilePart=0x0) returned 0x78 [0205.801] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0205.801] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.assignedaccesslockapp_cw5n1h2txyewy\\settings\\roaming.lock"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0205.802] GetFileType (hFile=0x444) returned 0x1 [0205.802] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0205.802] GetFileType (hFile=0x444) returned 0x1 [0205.802] WriteFile (in: hFile=0x444, lpBuffer=0x2354830*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x3be628, lpOverlapped=0x0 | out: lpBuffer=0x2354830*, lpNumberOfBytesWritten=0x3be628*=0x10, lpOverlapped=0x0) returned 1 [0205.803] CloseHandle (hObject=0x444) returned 1 [0205.803] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Settings\\roaming.lock", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Settings\\roaming.lock", lpFilePart=0x0) returned 0x78 [0205.803] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Settings\\roaming.lock.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Settings\\roaming.lock.xuy", lpFilePart=0x0) returned 0x7c [0205.803] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0205.803] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.assignedaccesslockapp_cw5n1h2txyewy\\settings\\roaming.lock"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2666e80, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb2666e80, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x66844b26, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0205.803] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0205.804] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.assignedaccesslockapp_cw5n1h2txyewy\\settings\\roaming.lock"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Settings\\roaming.lock.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.assignedaccesslockapp_cw5n1h2txyewy\\settings\\roaming.lock.xuy")) returned 1 [0205.805] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Settings\\settings.dat", lpFilePart=0x0) returned 0x78 [0205.805] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0205.805] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.assignedaccesslockapp_cw5n1h2txyewy\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x2355bd0 | out: lpFileInformation=0x2355bd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2640c1e, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0x6a9c106a, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x6a9c106a, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0205.805] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0205.805] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Settings\\settings.dat", lpFilePart=0x0) returned 0x78 [0205.805] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0205.805] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.assignedaccesslockapp_cw5n1h2txyewy\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x2355d80 | out: lpFileInformation=0x2355d80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2640c1e, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0x6a9c106a, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x6a9c106a, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0205.805] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0205.805] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Settings\\settings.dat", lpFilePart=0x0) returned 0x78 [0205.805] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0205.805] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.assignedaccesslockapp_cw5n1h2txyewy\\settings\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0205.806] GetFileType (hFile=0x444) returned 0x1 [0205.806] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0205.806] GetFileType (hFile=0x444) returned 0x1 [0205.806] ReadFile (in: hFile=0x444, lpBuffer=0x2358210, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x2358210*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0205.854] CloseHandle (hObject=0x444) returned 1 [0205.854] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Settings\\settings.dat", lpFilePart=0x0) returned 0x78 [0205.854] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0205.854] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.assignedaccesslockapp_cw5n1h2txyewy\\settings\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0205.854] GetFileType (hFile=0x444) returned 0x1 [0205.854] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0205.854] GetFileType (hFile=0x444) returned 0x1 [0205.854] WriteFile (in: hFile=0x444, lpBuffer=0x2187408*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x2187408*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0205.855] CloseHandle (hObject=0x444) returned 1 [0205.855] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Settings\\settings.dat", lpFilePart=0x0) returned 0x78 [0205.855] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Settings\\settings.dat.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Settings\\settings.dat.xuy", lpFilePart=0x0) returned 0x7c [0205.855] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0205.855] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.assignedaccesslockapp_cw5n1h2txyewy\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2640c1e, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0x6a9c106a, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x668b728d, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0205.855] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0205.855] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.assignedaccesslockapp_cw5n1h2txyewy\\settings\\settings.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Settings\\settings.dat.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.assignedaccesslockapp_cw5n1h2txyewy\\settings\\settings.dat.xuy")) returned 1 [0205.856] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", lpFilePart=0x0) returned 0x7d [0205.856] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0205.856] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.assignedaccesslockapp_cw5n1h2txyewy\\settings\\settings.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x21d4750 | out: lpFileInformation=0x21d4750*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6a90234c, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x6a90234c, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x6a90234c, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0205.857] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0205.857] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", lpFilePart=0x0) returned 0x7d [0205.857] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0205.857] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.assignedaccesslockapp_cw5n1h2txyewy\\settings\\settings.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x21d4910 | out: lpFileInformation=0x21d4910*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6a90234c, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x6a90234c, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x6a90234c, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0205.857] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0205.857] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", lpFilePart=0x0) returned 0x7d [0205.857] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0205.857] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.assignedaccesslockapp_cw5n1h2txyewy\\settings\\settings.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0205.858] GetFileType (hFile=0x444) returned 0x1 [0205.858] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0205.858] GetFileType (hFile=0x444) returned 0x1 [0205.858] ReadFile (in: hFile=0x444, lpBuffer=0x21d6dc0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x21d6dc0*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0205.874] CloseHandle (hObject=0x444) returned 1 [0205.874] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", lpFilePart=0x0) returned 0x7d [0205.874] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0205.874] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.assignedaccesslockapp_cw5n1h2txyewy\\settings\\settings.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0205.883] GetFileType (hFile=0x444) returned 0x1 [0205.883] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0205.883] GetFileType (hFile=0x444) returned 0x1 [0205.883] WriteFile (in: hFile=0x444, lpBuffer=0x21d4ab0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x21d4ab0*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0205.883] CloseHandle (hObject=0x444) returned 1 [0205.883] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", lpFilePart=0x0) returned 0x7d [0205.883] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Settings\\settings.dat.LOG1.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Settings\\settings.dat.LOG1.xuy", lpFilePart=0x0) returned 0x81 [0205.884] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0205.884] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.assignedaccesslockapp_cw5n1h2txyewy\\settings\\settings.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6a90234c, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x6a90234c, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x66908965, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0205.884] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0205.884] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.assignedaccesslockapp_cw5n1h2txyewy\\settings\\settings.dat.log1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Settings\\settings.dat.LOG1.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.assignedaccesslockapp_cw5n1h2txyewy\\settings\\settings.dat.log1.xuy")) returned 1 [0205.885] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", lpFilePart=0x0) returned 0x7d [0205.885] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0205.885] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.assignedaccesslockapp_cw5n1h2txyewy\\settings\\settings.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x2253320 | out: lpFileInformation=0x2253320*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6a90234c, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x6a90234c, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x6a90234c, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0205.887] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0205.887] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", lpFilePart=0x0) returned 0x7d [0205.887] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0205.887] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.assignedaccesslockapp_cw5n1h2txyewy\\settings\\settings.dat.log2"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0205.887] GetFileType (hFile=0x444) returned 0x1 [0205.887] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0205.887] GetFileType (hFile=0x444) returned 0x1 [0205.887] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0x0 [0205.887] CloseHandle (hObject=0x444) returned 1 [0205.898] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", lpFilePart=0x0) returned 0x7d [0205.898] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0205.898] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.assignedaccesslockapp_cw5n1h2txyewy\\settings\\settings.dat.log2"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0205.900] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb0e0) returned 1 [0205.900] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", lpFilePart=0x0) returned 0x7d [0205.900] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc200) returned 1 [0205.900] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.assignedaccesslockapp_cw5n1h2txyewy\\settings\\settings.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x3bc2e0 | out: lpFileInformation=0x3bc2e0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6a90234c, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x6a90234c, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x6a90234c, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0205.900] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1c0) returned 1 [0205.900] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbd80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", lpFilePart=0x0) returned 0x7d [0205.900] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc200) returned 1 [0205.900] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.assignedaccesslockapp_cw5n1h2txyewy\\settings\\settings.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x22ca458 | out: lpFileInformation=0x22ca458*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6a90234c, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x6a90234c, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x6a90234c, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0205.900] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1c0) returned 1 [0205.900] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", lpFilePart=0x0) returned 0x7d [0205.901] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0c0) returned 1 [0205.901] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.assignedaccesslockapp_cw5n1h2txyewy\\settings\\settings.dat.log2"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0205.901] GetFileType (hFile=0x444) returned 0x1 [0205.901] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc030) returned 1 [0205.901] GetFileType (hFile=0x444) returned 0x1 [0205.901] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc258 | out: lpFileSizeHigh=0x3bc258*=0x0) returned 0x0 [0205.901] CloseHandle (hObject=0x444) returned 1 [0205.938] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", lpFilePart=0x0) returned 0x7d [0205.938] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0c0) returned 1 [0205.938] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.assignedaccesslockapp_cw5n1h2txyewy\\settings\\settings.dat.log2"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0205.939] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8b50) returned 1 [0205.940] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0205.940] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\SystemAppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\SystemAppData", lpFilePart=0x0) returned 0x70 [0205.940] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\SystemAppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\SystemAppData\\", lpFilePart=0x0) returned 0x71 [0205.940] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\SystemAppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7a90 [0205.940] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0205.941] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0205.941] FindClose (in: hFindFile=0x5d7a90 | out: hFindFile=0x5d7a90) returned 1 [0205.941] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0205.941] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0205.941] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0205.941] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\SystemAppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\SystemAppData", lpFilePart=0x0) returned 0x70 [0205.941] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\SystemAppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\SystemAppData\\", lpFilePart=0x0) returned 0x71 [0205.941] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\SystemAppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7550 [0205.941] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0205.941] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0205.941] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0205.942] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0205.942] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0205.942] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0205.942] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\TempState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\TempState", lpFilePart=0x0) returned 0x6c [0205.942] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\TempState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\TempState\\", lpFilePart=0x0) returned 0x6d [0205.942] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\TempState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d75b0 [0205.942] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0205.942] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0205.942] FindClose (in: hFindFile=0x5d75b0 | out: hFindFile=0x5d75b0) returned 1 [0205.942] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0205.942] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0205.942] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0205.942] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\TempState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\TempState", lpFilePart=0x0) returned 0x6c [0205.942] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\TempState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\TempState\\", lpFilePart=0x0) returned 0x6d [0205.942] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\TempState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7eb0 [0205.943] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0205.943] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0205.943] FindClose (in: hFindFile=0x5d7eb0 | out: hFindFile=0x5d7eb0) returned 1 [0205.943] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0205.943] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0205.943] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0205.943] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy", lpFilePart=0x0) returned 0x60 [0205.943] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\", lpFilePart=0x0) returned 0x61 [0205.943] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d78b0 [0205.943] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0205.943] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0205.944] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0205.944] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0205.944] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0205.944] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0205.944] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0205.944] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0205.944] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0205.944] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0205.945] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0205.945] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0205.945] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0205.945] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0205.945] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0205.945] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy", lpFilePart=0x0) returned 0x60 [0205.945] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\", lpFilePart=0x0) returned 0x61 [0205.945] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d7c70 [0205.945] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0205.945] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0205.945] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0205.945] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0205.945] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0205.946] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0205.946] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0205.946] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0205.946] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0205.946] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0205.946] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0205.946] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0205.946] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0205.946] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0205.946] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0205.946] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC", lpFilePart=0x0) returned 0x63 [0205.946] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\", lpFilePart=0x0) returned 0x64 [0205.946] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d8090 [0205.946] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0205.947] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0205.947] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0205.947] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0205.947] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0205.947] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0205.947] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0205.947] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0205.947] FindClose (in: hFindFile=0x5d8090 | out: hFindFile=0x5d8090) returned 1 [0205.947] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0205.947] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0205.947] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0205.947] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC", lpFilePart=0x0) returned 0x63 [0205.947] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\", lpFilePart=0x0) returned 0x64 [0205.947] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7550 [0205.948] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0205.948] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0205.948] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0205.948] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0205.948] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0205.948] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0205.948] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0205.948] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0205.948] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0205.948] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0205.948] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0205.948] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0205.948] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\AppCache", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\AppCache", lpFilePart=0x0) returned 0x6c [0205.948] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\AppCache\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\AppCache\\", lpFilePart=0x0) returned 0x6d [0205.949] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\AppCache\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7670 [0205.949] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0205.949] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0205.949] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0205.949] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0205.949] FindClose (in: hFindFile=0x5d7670 | out: hFindFile=0x5d7670) returned 1 [0205.949] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0205.949] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0205.949] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0205.949] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\AppCache", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\AppCache", lpFilePart=0x0) returned 0x6c [0205.949] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\AppCache\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\AppCache\\", lpFilePart=0x0) returned 0x6d [0205.949] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\AppCache\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d79d0 [0205.949] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0205.950] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0205.950] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0205.950] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0205.950] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0205.950] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0205.950] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0205.950] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\AppCache\\container.dat", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\AppCache\\container.dat", lpFilePart=0x0) returned 0x7a [0205.950] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0205.950] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\AppCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\appcache\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x23518a0 | out: lpFileInformation=0x23518a0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xe67eb057, ftCreationTime.dwHighDateTime=0x1d2d439, ftLastAccessTime.dwLowDateTime=0xe67eb057, ftLastAccessTime.dwHighDateTime=0x1d2d439, ftLastWriteTime.dwLowDateTime=0xe67eb057, ftLastWriteTime.dwHighDateTime=0x1d2d439, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0205.950] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0205.950] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\AppCache\\container.dat", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\AppCache\\container.dat", lpFilePart=0x0) returned 0x7a [0205.950] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0205.950] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\AppCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\appcache\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0205.950] GetFileType (hFile=0x444) returned 0x1 [0205.950] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0205.950] GetFileType (hFile=0x444) returned 0x1 [0205.950] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x0 [0205.950] CloseHandle (hObject=0x444) returned 1 [0206.042] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\AppCache\\container.dat", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\AppCache\\container.dat", lpFilePart=0x0) returned 0x7a [0206.042] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0206.042] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\AppCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\appcache\\container.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0206.043] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb070) returned 1 [0206.043] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\AppCache\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbcf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\AppCache\\container.dat", lpFilePart=0x0) returned 0x7a [0206.043] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0206.044] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\AppCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\appcache\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x3bc270 | out: lpFileInformation=0x3bc270*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xe67eb057, ftCreationTime.dwHighDateTime=0x1d2d439, ftLastAccessTime.dwLowDateTime=0xe67eb057, ftLastAccessTime.dwHighDateTime=0x1d2d439, ftLastWriteTime.dwLowDateTime=0xe67eb057, ftLastWriteTime.dwHighDateTime=0x1d2d439, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0206.044] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc150) returned 1 [0206.044] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\AppCache\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbd10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\AppCache\\container.dat", lpFilePart=0x0) returned 0x7a [0206.044] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0206.044] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\AppCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\appcache\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x21c5a08 | out: lpFileInformation=0x21c5a08*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xe67eb057, ftCreationTime.dwHighDateTime=0x1d2d439, ftLastAccessTime.dwLowDateTime=0xe67eb057, ftLastAccessTime.dwHighDateTime=0x1d2d439, ftLastWriteTime.dwLowDateTime=0xe67eb057, ftLastWriteTime.dwHighDateTime=0x1d2d439, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0206.044] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc150) returned 1 [0206.044] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\AppCache\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\AppCache\\container.dat", lpFilePart=0x0) returned 0x7a [0206.044] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc050) returned 1 [0206.044] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\AppCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\appcache\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0206.044] GetFileType (hFile=0x444) returned 0x1 [0206.044] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbfc0) returned 1 [0206.044] GetFileType (hFile=0x444) returned 0x1 [0206.044] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc1e8 | out: lpFileSizeHigh=0x3bc1e8*=0x0) returned 0x0 [0206.044] CloseHandle (hObject=0x444) returned 1 [0206.058] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\AppCache\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\AppCache\\container.dat", lpFilePart=0x0) returned 0x7a [0206.058] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc050) returned 1 [0206.058] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\AppCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\appcache\\container.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0206.059] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8ae0) returned 1 [0206.060] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0206.060] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\AppCache\\7CSZDG21", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\AppCache\\7CSZDG21", lpFilePart=0x0) returned 0x75 [0206.060] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\AppCache\\7CSZDG21\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\AppCache\\7CSZDG21\\", lpFilePart=0x0) returned 0x76 [0206.060] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\AppCache\\7CSZDG21\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d78b0 [0206.060] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0206.061] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0206.061] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0206.061] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0206.061] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0206.061] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0206.061] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0206.061] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\AppCache\\7CSZDG21", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\AppCache\\7CSZDG21", lpFilePart=0x0) returned 0x75 [0206.061] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\AppCache\\7CSZDG21\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\AppCache\\7CSZDG21\\", lpFilePart=0x0) returned 0x76 [0206.061] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\AppCache\\7CSZDG21\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d7eb0 [0206.061] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0206.061] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0206.062] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0206.062] FindClose (in: hFindFile=0x5d7eb0 | out: hFindFile=0x5d7eb0) returned 1 [0206.062] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0206.062] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0206.062] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\AppCache\\7CSZDG21\\container.dat", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\AppCache\\7CSZDG21\\container.dat", lpFilePart=0x0) returned 0x83 [0206.062] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0206.062] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\AppCache\\7CSZDG21\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\appcache\\7cszdg21\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x223f160 | out: lpFileInformation=0x223f160*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xe67eb057, ftCreationTime.dwHighDateTime=0x1d2d439, ftLastAccessTime.dwLowDateTime=0xe67eb057, ftLastAccessTime.dwHighDateTime=0x1d2d439, ftLastWriteTime.dwLowDateTime=0xe67eb057, ftLastWriteTime.dwHighDateTime=0x1d2d439, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0206.085] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0206.085] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\AppCache\\7CSZDG21\\container.dat", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\AppCache\\7CSZDG21\\container.dat", lpFilePart=0x0) returned 0x83 [0206.085] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0206.085] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\AppCache\\7CSZDG21\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\appcache\\7cszdg21\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0206.085] GetFileType (hFile=0x444) returned 0x1 [0206.085] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0206.085] GetFileType (hFile=0x444) returned 0x1 [0206.085] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be708 | out: lpFileSizeHigh=0x3be708*=0x0) returned 0x0 [0206.085] CloseHandle (hObject=0x444) returned 1 [0206.096] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\AppCache\\7CSZDG21\\container.dat", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\AppCache\\7CSZDG21\\container.dat", lpFilePart=0x0) returned 0x83 [0206.096] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0206.096] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\AppCache\\7CSZDG21\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\appcache\\7cszdg21\\container.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0206.097] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb000) returned 1 [0206.098] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\AppCache\\7CSZDG21\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbc80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\AppCache\\7CSZDG21\\container.dat", lpFilePart=0x0) returned 0x83 [0206.098] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc120) returned 1 [0206.098] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\AppCache\\7CSZDG21\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\appcache\\7cszdg21\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x3bc200 | out: lpFileInformation=0x3bc200*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xe67eb057, ftCreationTime.dwHighDateTime=0x1d2d439, ftLastAccessTime.dwLowDateTime=0xe67eb057, ftLastAccessTime.dwHighDateTime=0x1d2d439, ftLastWriteTime.dwLowDateTime=0xe67eb057, ftLastWriteTime.dwHighDateTime=0x1d2d439, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0206.098] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc0e0) returned 1 [0206.098] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\AppCache\\7CSZDG21\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\AppCache\\7CSZDG21\\container.dat", lpFilePart=0x0) returned 0x83 [0206.098] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc120) returned 1 [0206.098] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\AppCache\\7CSZDG21\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\appcache\\7cszdg21\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x22b5f80 | out: lpFileInformation=0x22b5f80*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xe67eb057, ftCreationTime.dwHighDateTime=0x1d2d439, ftLastAccessTime.dwLowDateTime=0xe67eb057, ftLastAccessTime.dwHighDateTime=0x1d2d439, ftLastWriteTime.dwLowDateTime=0xe67eb057, ftLastWriteTime.dwHighDateTime=0x1d2d439, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0206.098] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc0e0) returned 1 [0206.098] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\AppCache\\7CSZDG21\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbb00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\AppCache\\7CSZDG21\\container.dat", lpFilePart=0x0) returned 0x83 [0206.098] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbfe0) returned 1 [0206.098] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\AppCache\\7CSZDG21\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\appcache\\7cszdg21\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0206.098] GetFileType (hFile=0x444) returned 0x1 [0206.098] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbf50) returned 1 [0206.098] GetFileType (hFile=0x444) returned 0x1 [0206.098] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc178 | out: lpFileSizeHigh=0x3bc178*=0x0) returned 0x0 [0206.099] CloseHandle (hObject=0x444) returned 1 [0206.109] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\AppCache\\7CSZDG21\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbb00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\AppCache\\7CSZDG21\\container.dat", lpFilePart=0x0) returned 0x83 [0206.109] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbfe0) returned 1 [0206.109] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\AppCache\\7CSZDG21\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\appcache\\7cszdg21\\container.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0206.111] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8a70) returned 1 [0206.112] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0206.112] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\INetCache", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\INetCache", lpFilePart=0x0) returned 0x6d [0206.112] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\INetCache\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\INetCache\\", lpFilePart=0x0) returned 0x6e [0206.112] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\INetCache\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7eb0 [0206.113] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0206.113] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0206.113] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0206.113] FindClose (in: hFindFile=0x5d7eb0 | out: hFindFile=0x5d7eb0) returned 1 [0206.113] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0206.114] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0206.114] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0206.114] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\INetCache", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\INetCache", lpFilePart=0x0) returned 0x6d [0206.114] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\INetCache\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\INetCache\\", lpFilePart=0x0) returned 0x6e [0206.114] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\INetCache\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d78b0 [0206.114] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0206.115] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0206.115] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0206.115] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0206.115] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0206.115] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0206.115] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\INetCache\\container.dat", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\INetCache\\container.dat", lpFilePart=0x0) returned 0x7b [0206.115] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0206.115] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\INetCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\inetcache\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x232f538 | out: lpFileInformation=0x232f538*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xe5c47094, ftCreationTime.dwHighDateTime=0x1d2d439, ftLastAccessTime.dwLowDateTime=0xe5c47094, ftLastAccessTime.dwHighDateTime=0x1d2d439, ftLastWriteTime.dwLowDateTime=0xe5c47094, ftLastWriteTime.dwHighDateTime=0x1d2d439, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0206.116] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0206.116] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\INetCache\\container.dat", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\INetCache\\container.dat", lpFilePart=0x0) returned 0x7b [0206.116] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0206.116] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\INetCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\inetcache\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0206.116] GetFileType (hFile=0x444) returned 0x1 [0206.116] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0206.116] GetFileType (hFile=0x444) returned 0x1 [0206.116] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x0 [0206.117] CloseHandle (hObject=0x444) returned 1 [0206.159] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\INetCache\\container.dat", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\INetCache\\container.dat", lpFilePart=0x0) returned 0x7b [0206.159] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0206.159] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\INetCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\inetcache\\container.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0206.160] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb070) returned 1 [0206.161] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\INetCache\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbcf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\INetCache\\container.dat", lpFilePart=0x0) returned 0x7b [0206.161] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0206.161] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\INetCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\inetcache\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x3bc270 | out: lpFileInformation=0x3bc270*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xe5c47094, ftCreationTime.dwHighDateTime=0x1d2d439, ftLastAccessTime.dwLowDateTime=0xe5c47094, ftLastAccessTime.dwHighDateTime=0x1d2d439, ftLastWriteTime.dwLowDateTime=0xe5c47094, ftLastWriteTime.dwHighDateTime=0x1d2d439, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0206.161] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc150) returned 1 [0206.161] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\INetCache\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbd10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\INetCache\\container.dat", lpFilePart=0x0) returned 0x7b [0206.161] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0206.161] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\INetCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\inetcache\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x21a6428 | out: lpFileInformation=0x21a6428*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xe5c47094, ftCreationTime.dwHighDateTime=0x1d2d439, ftLastAccessTime.dwLowDateTime=0xe5c47094, ftLastAccessTime.dwHighDateTime=0x1d2d439, ftLastWriteTime.dwLowDateTime=0xe5c47094, ftLastWriteTime.dwHighDateTime=0x1d2d439, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0206.161] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc150) returned 1 [0206.161] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\INetCache\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\INetCache\\container.dat", lpFilePart=0x0) returned 0x7b [0206.161] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc050) returned 1 [0206.161] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\INetCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\inetcache\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0206.162] GetFileType (hFile=0x444) returned 0x1 [0206.162] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbfc0) returned 1 [0206.162] GetFileType (hFile=0x444) returned 0x1 [0206.162] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc1e8 | out: lpFileSizeHigh=0x3bc1e8*=0x0) returned 0x0 [0206.162] CloseHandle (hObject=0x444) returned 1 [0206.178] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\INetCache\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\INetCache\\container.dat", lpFilePart=0x0) returned 0x7b [0206.178] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc050) returned 1 [0206.178] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\INetCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\inetcache\\container.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0206.180] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8ae0) returned 1 [0206.180] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0206.180] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\INetCookies", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\INetCookies", lpFilePart=0x0) returned 0x6f [0206.180] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\INetCookies\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\INetCookies\\", lpFilePart=0x0) returned 0x70 [0206.180] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\INetCookies\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d78b0 [0206.181] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0206.181] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0206.181] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0206.181] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0206.181] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0206.181] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0206.181] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0206.181] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\INetCookies", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\INetCookies", lpFilePart=0x0) returned 0x6f [0206.181] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\INetCookies\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\INetCookies\\", lpFilePart=0x0) returned 0x70 [0206.181] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\INetCookies\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7610 [0206.181] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0206.182] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0206.182] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0206.182] FindClose (in: hFindFile=0x5d7610 | out: hFindFile=0x5d7610) returned 1 [0206.182] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0206.182] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0206.182] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\INetCookies\\container.dat", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\INetCookies\\container.dat", lpFilePart=0x0) returned 0x7d [0206.182] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0206.182] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\INetCookies\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\inetcookies\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x221fa50 | out: lpFileInformation=0x221fa50*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xe67eb057, ftCreationTime.dwHighDateTime=0x1d2d439, ftLastAccessTime.dwLowDateTime=0xe67eb057, ftLastAccessTime.dwHighDateTime=0x1d2d439, ftLastWriteTime.dwLowDateTime=0xe67eb057, ftLastWriteTime.dwHighDateTime=0x1d2d439, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0206.182] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0206.182] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\INetCookies\\container.dat", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\INetCookies\\container.dat", lpFilePart=0x0) returned 0x7d [0206.182] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0206.182] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\INetCookies\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\inetcookies\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0206.182] GetFileType (hFile=0x444) returned 0x1 [0206.182] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0206.182] GetFileType (hFile=0x444) returned 0x1 [0206.182] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x0 [0206.183] CloseHandle (hObject=0x444) returned 1 [0206.194] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\INetCookies\\container.dat", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\INetCookies\\container.dat", lpFilePart=0x0) returned 0x7d [0206.194] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0206.195] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\INetCookies\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\inetcookies\\container.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0206.197] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb070) returned 1 [0206.197] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\INetCookies\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbcf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\INetCookies\\container.dat", lpFilePart=0x0) returned 0x7d [0206.197] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0206.197] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\INetCookies\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\inetcookies\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x3bc270 | out: lpFileInformation=0x3bc270*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xe67eb057, ftCreationTime.dwHighDateTime=0x1d2d439, ftLastAccessTime.dwLowDateTime=0xe67eb057, ftLastAccessTime.dwHighDateTime=0x1d2d439, ftLastWriteTime.dwLowDateTime=0xe67eb057, ftLastWriteTime.dwHighDateTime=0x1d2d439, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0206.197] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc150) returned 1 [0206.197] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\INetCookies\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbd10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\INetCookies\\container.dat", lpFilePart=0x0) returned 0x7d [0206.198] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0206.198] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\INetCookies\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\inetcookies\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x2296848 | out: lpFileInformation=0x2296848*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xe67eb057, ftCreationTime.dwHighDateTime=0x1d2d439, ftLastAccessTime.dwLowDateTime=0xe67eb057, ftLastAccessTime.dwHighDateTime=0x1d2d439, ftLastWriteTime.dwLowDateTime=0xe67eb057, ftLastWriteTime.dwHighDateTime=0x1d2d439, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0206.198] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc150) returned 1 [0206.198] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\INetCookies\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\INetCookies\\container.dat", lpFilePart=0x0) returned 0x7d [0206.198] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc050) returned 1 [0206.198] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\INetCookies\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\inetcookies\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0206.198] GetFileType (hFile=0x444) returned 0x1 [0206.198] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbfc0) returned 1 [0206.198] GetFileType (hFile=0x444) returned 0x1 [0206.198] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc1e8 | out: lpFileSizeHigh=0x3bc1e8*=0x0) returned 0x0 [0206.198] CloseHandle (hObject=0x444) returned 1 [0206.211] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\INetCookies\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\INetCookies\\container.dat", lpFilePart=0x0) returned 0x7d [0206.211] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc050) returned 1 [0206.212] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\INetCookies\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\inetcookies\\container.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0206.213] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8ae0) returned 1 [0206.214] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0206.214] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\INetHistory", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\INetHistory", lpFilePart=0x0) returned 0x6f [0206.216] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0206.216] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0206.216] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0206.216] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0206.216] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0206.216] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0206.216] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0206.216] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0206.217] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0206.217] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0206.217] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0206.217] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0206.220] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0206.220] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0206.221] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0206.221] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0206.221] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0206.221] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0206.221] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0206.221] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0206.221] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0206.221] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0206.221] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0206.221] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0206.222] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0206.222] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0206.222] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0206.222] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0206.222] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0206.222] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0206.222] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0206.222] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0206.222] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0206.222] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0206.222] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0206.222] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0206.223] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0206.223] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0206.223] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0206.223] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0206.223] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0206.223] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0206.223] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0206.223] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0206.252] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0206.252] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0206.252] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0206.252] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0206.252] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0206.253] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0206.253] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0206.253] FindClose (in: hFindFile=0x5d7cd0 | out: hFindFile=0x5d7cd0) returned 1 [0206.254] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0206.254] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0206.254] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0206.254] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0206.254] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0206.255] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0206.255] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0206.255] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0206.255] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0206.255] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0206.255] FindClose (in: hFindFile=0x5d75b0 | out: hFindFile=0x5d75b0) returned 1 [0206.256] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0206.256] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0206.256] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0206.256] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\57c8edb95df3f0ad4ee2dc2b8cfd4157"), fInfoLevelId=0x0, lpFileInformation=0x231a7e8 | out: lpFileInformation=0x231a7e8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe6c89995, ftCreationTime.dwHighDateTime=0x1d2d439, ftLastAccessTime.dwLowDateTime=0xe6c89995, ftLastAccessTime.dwHighDateTime=0x1d2d439, ftLastWriteTime.dwLowDateTime=0xe6cafbe7, ftLastWriteTime.dwHighDateTime=0x1d2d439, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0206.257] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0206.257] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0206.257] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\57c8edb95df3f0ad4ee2dc2b8cfd4157"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0206.257] GetFileType (hFile=0x444) returned 0x1 [0206.257] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0206.257] GetFileType (hFile=0x444) returned 0x1 [0206.257] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x0 [0206.257] CloseHandle (hObject=0x444) returned 1 [0206.305] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0206.305] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\57c8edb95df3f0ad4ee2dc2b8cfd4157"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0206.306] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3baf90) returned 1 [0206.307] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", nBufferLength=0x105, lpBuffer=0x3bbc10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", lpFilePart=0x0) returned 0xa7 [0206.307] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0b0) returned 1 [0206.307] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\57c8edb95df3f0ad4ee2dc2b8cfd4157"), fInfoLevelId=0x0, lpFileInformation=0x3bc190 | out: lpFileInformation=0x3bc190*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe6c89995, ftCreationTime.dwHighDateTime=0x1d2d439, ftLastAccessTime.dwLowDateTime=0xe6c89995, ftLastAccessTime.dwHighDateTime=0x1d2d439, ftLastWriteTime.dwLowDateTime=0xe6cafbe7, ftLastWriteTime.dwHighDateTime=0x1d2d439, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0206.307] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc070) returned 1 [0206.307] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", nBufferLength=0x105, lpBuffer=0x3bbc30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", lpFilePart=0x0) returned 0xa7 [0206.307] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0b0) returned 1 [0206.307] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\57c8edb95df3f0ad4ee2dc2b8cfd4157"), fInfoLevelId=0x0, lpFileInformation=0x2192348 | out: lpFileInformation=0x2192348*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe6c89995, ftCreationTime.dwHighDateTime=0x1d2d439, ftLastAccessTime.dwLowDateTime=0xe6c89995, ftLastAccessTime.dwHighDateTime=0x1d2d439, ftLastWriteTime.dwLowDateTime=0xe6cafbe7, ftLastWriteTime.dwHighDateTime=0x1d2d439, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0206.307] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc070) returned 1 [0206.307] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", nBufferLength=0x105, lpBuffer=0x3bba90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", lpFilePart=0x0) returned 0xa7 [0206.307] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf70) returned 1 [0206.307] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\57c8edb95df3f0ad4ee2dc2b8cfd4157"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0206.307] GetFileType (hFile=0x444) returned 0x1 [0206.307] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbee0) returned 1 [0206.307] GetFileType (hFile=0x444) returned 0x1 [0206.307] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc108 | out: lpFileSizeHigh=0x3bc108*=0x0) returned 0x0 [0206.307] CloseHandle (hObject=0x444) returned 1 [0206.318] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", nBufferLength=0x105, lpBuffer=0x3bba90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", lpFilePart=0x0) returned 0xa7 [0206.318] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf70) returned 1 [0206.318] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\57c8edb95df3f0ad4ee2dc2b8cfd4157"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0206.319] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8a00) returned 1 [0206.320] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506", lpFilePart=0x0) returned 0xa7 [0206.320] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0206.320] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\77ec63bda74bd0d0e0426dc8f8008506"), fInfoLevelId=0x0, lpFileInformation=0x22091e0 | out: lpFileInformation=0x22091e0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe6c3d4ea, ftCreationTime.dwHighDateTime=0x1d2d439, ftLastAccessTime.dwLowDateTime=0xe6c3d4ea, ftLastAccessTime.dwHighDateTime=0x1d2d439, ftLastWriteTime.dwLowDateTime=0xe6c3d4ea, ftLastWriteTime.dwHighDateTime=0x1d2d439, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0206.320] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0206.320] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506", lpFilePart=0x0) returned 0xa7 [0206.320] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0206.320] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\77ec63bda74bd0d0e0426dc8f8008506"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0206.320] GetFileType (hFile=0x444) returned 0x1 [0206.320] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0206.320] GetFileType (hFile=0x444) returned 0x1 [0206.320] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x0 [0206.321] CloseHandle (hObject=0x444) returned 1 [0206.331] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506", lpFilePart=0x0) returned 0xa7 [0206.331] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0206.331] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\77ec63bda74bd0d0e0426dc8f8008506"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0206.332] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3baf90) returned 1 [0206.333] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506", nBufferLength=0x105, lpBuffer=0x3bbc10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506", lpFilePart=0x0) returned 0xa7 [0206.333] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0b0) returned 1 [0206.333] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\77ec63bda74bd0d0e0426dc8f8008506"), fInfoLevelId=0x0, lpFileInformation=0x3bc190 | out: lpFileInformation=0x3bc190*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe6c3d4ea, ftCreationTime.dwHighDateTime=0x1d2d439, ftLastAccessTime.dwLowDateTime=0xe6c3d4ea, ftLastAccessTime.dwHighDateTime=0x1d2d439, ftLastWriteTime.dwLowDateTime=0xe6c3d4ea, ftLastWriteTime.dwHighDateTime=0x1d2d439, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0206.333] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc070) returned 1 [0206.333] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506", nBufferLength=0x105, lpBuffer=0x3bbc30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506", lpFilePart=0x0) returned 0xa7 [0206.333] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0b0) returned 1 [0206.333] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\77ec63bda74bd0d0e0426dc8f8008506"), fInfoLevelId=0x0, lpFileInformation=0x22801e0 | out: lpFileInformation=0x22801e0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe6c3d4ea, ftCreationTime.dwHighDateTime=0x1d2d439, ftLastAccessTime.dwLowDateTime=0xe6c3d4ea, ftLastAccessTime.dwHighDateTime=0x1d2d439, ftLastWriteTime.dwLowDateTime=0xe6c3d4ea, ftLastWriteTime.dwHighDateTime=0x1d2d439, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0206.333] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc070) returned 1 [0206.333] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506", nBufferLength=0x105, lpBuffer=0x3bba90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506", lpFilePart=0x0) returned 0xa7 [0206.333] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf70) returned 1 [0206.333] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\77ec63bda74bd0d0e0426dc8f8008506"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0206.333] GetFileType (hFile=0x444) returned 0x1 [0206.333] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbee0) returned 1 [0206.333] GetFileType (hFile=0x444) returned 0x1 [0206.334] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc108 | out: lpFileSizeHigh=0x3bc108*=0x0) returned 0x0 [0206.334] CloseHandle (hObject=0x444) returned 1 [0206.345] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506", nBufferLength=0x105, lpBuffer=0x3bba90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506", lpFilePart=0x0) returned 0xa7 [0206.345] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf70) returned 1 [0206.345] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\77ec63bda74bd0d0e0426dc8f8008506"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0206.347] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8a00) returned 1 [0206.347] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873", lpFilePart=0x0) returned 0xc8 [0206.347] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0206.347] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\c46e7b0f942663a1edc8d9d6d7869173_42820cdfea41dc84aab89a6b63561873"), fInfoLevelId=0x0, lpFileInformation=0x22f7078 | out: lpFileInformation=0x22f7078*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe6c17295, ftCreationTime.dwHighDateTime=0x1d2d439, ftLastAccessTime.dwLowDateTime=0xe6c17295, ftLastAccessTime.dwHighDateTime=0x1d2d439, ftLastWriteTime.dwLowDateTime=0xe6c17295, ftLastWriteTime.dwHighDateTime=0x1d2d439, nFileSizeHigh=0x0, nFileSizeLow=0x6e3)) returned 1 [0206.352] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0206.352] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873", lpFilePart=0x0) returned 0xc8 [0206.352] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0206.352] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\c46e7b0f942663a1edc8d9d6d7869173_42820cdfea41dc84aab89a6b63561873"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0206.352] GetFileType (hFile=0x444) returned 0x1 [0206.352] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0206.352] GetFileType (hFile=0x444) returned 0x1 [0206.352] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x6e3 [0206.352] ReadFile (in: hFile=0x444, lpBuffer=0x22f7ce8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x22f7ce8*, lpNumberOfBytesRead=0x3be5c8*=0x6e3, lpOverlapped=0x0) returned 1 [0206.358] CloseHandle (hObject=0x444) returned 1 [0206.368] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873", lpFilePart=0x0) returned 0xc8 [0206.368] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0206.368] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\c46e7b0f942663a1edc8d9d6d7869173_42820cdfea41dc84aab89a6b63561873"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0206.370] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3baf90) returned 1 [0206.370] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873", nBufferLength=0x105, lpBuffer=0x3bbc10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873", lpFilePart=0x0) returned 0xc8 [0206.370] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0b0) returned 1 [0206.370] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\c46e7b0f942663a1edc8d9d6d7869173_42820cdfea41dc84aab89a6b63561873"), fInfoLevelId=0x0, lpFileInformation=0x3bc190 | out: lpFileInformation=0x3bc190*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe6c17295, ftCreationTime.dwHighDateTime=0x1d2d439, ftLastAccessTime.dwLowDateTime=0xe6c17295, ftLastAccessTime.dwHighDateTime=0x1d2d439, ftLastWriteTime.dwLowDateTime=0xe6c17295, ftLastWriteTime.dwHighDateTime=0x1d2d439, nFileSizeHigh=0x0, nFileSizeLow=0x6e3)) returned 1 [0206.370] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc070) returned 1 [0206.370] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873", nBufferLength=0x105, lpBuffer=0x3bbc30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873", lpFilePart=0x0) returned 0xc8 [0206.370] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0b0) returned 1 [0206.370] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\c46e7b0f942663a1edc8d9d6d7869173_42820cdfea41dc84aab89a6b63561873"), fInfoLevelId=0x0, lpFileInformation=0x2371b30 | out: lpFileInformation=0x2371b30*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe6c17295, ftCreationTime.dwHighDateTime=0x1d2d439, ftLastAccessTime.dwLowDateTime=0xe6c17295, ftLastAccessTime.dwHighDateTime=0x1d2d439, ftLastWriteTime.dwLowDateTime=0xe6c17295, ftLastWriteTime.dwHighDateTime=0x1d2d439, nFileSizeHigh=0x0, nFileSizeLow=0x6e3)) returned 1 [0206.370] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc070) returned 1 [0206.370] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873", nBufferLength=0x105, lpBuffer=0x3bba90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873", lpFilePart=0x0) returned 0xc8 [0206.370] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf70) returned 1 [0206.370] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\c46e7b0f942663a1edc8d9d6d7869173_42820cdfea41dc84aab89a6b63561873"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0206.371] GetFileType (hFile=0x444) returned 0x1 [0206.371] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbee0) returned 1 [0206.371] GetFileType (hFile=0x444) returned 0x1 [0206.371] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc108 | out: lpFileSizeHigh=0x3bc108*=0x0) returned 0x6e3 [0206.371] ReadFile (in: hFile=0x444, lpBuffer=0x23727a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bc038, lpOverlapped=0x0 | out: lpBuffer=0x23727a0*, lpNumberOfBytesRead=0x3bc038*=0x6e3, lpOverlapped=0x0) returned 1 [0206.371] CloseHandle (hObject=0x444) returned 1 [0206.412] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873", nBufferLength=0x105, lpBuffer=0x3bba90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873", lpFilePart=0x0) returned 0xc8 [0206.413] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf70) returned 1 [0206.413] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\c46e7b0f942663a1edc8d9d6d7869173_42820cdfea41dc84aab89a6b63561873"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0206.414] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8a00) returned 1 [0206.415] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF", lpFilePart=0x0) returned 0xc8 [0206.415] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0206.415] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\c46e7b0f942663a1edc8d9d6d7869173_d9b9f37ece595b0b7b6aa12451d392cf"), fInfoLevelId=0x0, lpFileInformation=0x21ecd30 | out: lpFileInformation=0x21ecd30*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe73075db, ftCreationTime.dwHighDateTime=0x1d2d439, ftLastAccessTime.dwLowDateTime=0xe73075db, ftLastAccessTime.dwHighDateTime=0x1d2d439, ftLastWriteTime.dwLowDateTime=0xe73075db, ftLastWriteTime.dwHighDateTime=0x1d2d439, nFileSizeHigh=0x0, nFileSizeLow=0x6e3)) returned 1 [0206.415] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0206.415] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF", lpFilePart=0x0) returned 0xc8 [0206.415] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0206.415] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\c46e7b0f942663a1edc8d9d6d7869173_d9b9f37ece595b0b7b6aa12451d392cf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0206.415] GetFileType (hFile=0x444) returned 0x1 [0206.415] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0206.415] GetFileType (hFile=0x444) returned 0x1 [0206.415] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x6e3 [0206.415] ReadFile (in: hFile=0x444, lpBuffer=0x21ed9a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x21ed9a0*, lpNumberOfBytesRead=0x3be5c8*=0x6e3, lpOverlapped=0x0) returned 1 [0206.422] CloseHandle (hObject=0x444) returned 1 [0206.432] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF", lpFilePart=0x0) returned 0xc8 [0206.432] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0206.432] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\c46e7b0f942663a1edc8d9d6d7869173_d9b9f37ece595b0b7b6aa12451d392cf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0206.433] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3baf90) returned 1 [0206.434] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF", nBufferLength=0x105, lpBuffer=0x3bbc10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF", lpFilePart=0x0) returned 0xc8 [0206.434] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0b0) returned 1 [0206.434] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\c46e7b0f942663a1edc8d9d6d7869173_d9b9f37ece595b0b7b6aa12451d392cf"), fInfoLevelId=0x0, lpFileInformation=0x3bc190 | out: lpFileInformation=0x3bc190*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe73075db, ftCreationTime.dwHighDateTime=0x1d2d439, ftLastAccessTime.dwLowDateTime=0xe73075db, ftLastAccessTime.dwHighDateTime=0x1d2d439, ftLastWriteTime.dwLowDateTime=0xe73075db, ftLastWriteTime.dwHighDateTime=0x1d2d439, nFileSizeHigh=0x0, nFileSizeLow=0x6e3)) returned 1 [0206.434] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc070) returned 1 [0206.434] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF", nBufferLength=0x105, lpBuffer=0x3bbc30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF", lpFilePart=0x0) returned 0xc8 [0206.434] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0b0) returned 1 [0206.434] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\c46e7b0f942663a1edc8d9d6d7869173_d9b9f37ece595b0b7b6aa12451d392cf"), fInfoLevelId=0x0, lpFileInformation=0x22677e8 | out: lpFileInformation=0x22677e8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe73075db, ftCreationTime.dwHighDateTime=0x1d2d439, ftLastAccessTime.dwLowDateTime=0xe73075db, ftLastAccessTime.dwHighDateTime=0x1d2d439, ftLastWriteTime.dwLowDateTime=0xe73075db, ftLastWriteTime.dwHighDateTime=0x1d2d439, nFileSizeHigh=0x0, nFileSizeLow=0x6e3)) returned 1 [0206.434] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc070) returned 1 [0206.434] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF", nBufferLength=0x105, lpBuffer=0x3bba90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF", lpFilePart=0x0) returned 0xc8 [0206.434] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf70) returned 1 [0206.434] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\c46e7b0f942663a1edc8d9d6d7869173_d9b9f37ece595b0b7b6aa12451d392cf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0206.434] GetFileType (hFile=0x444) returned 0x1 [0206.434] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbee0) returned 1 [0206.434] GetFileType (hFile=0x444) returned 0x1 [0206.434] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc108 | out: lpFileSizeHigh=0x3bc108*=0x0) returned 0x6e3 [0206.434] ReadFile (in: hFile=0x444, lpBuffer=0x2268458, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bc038, lpOverlapped=0x0 | out: lpBuffer=0x2268458*, lpNumberOfBytesRead=0x3bc038*=0x6e3, lpOverlapped=0x0) returned 1 [0206.434] CloseHandle (hObject=0x444) returned 1 [0206.446] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF", nBufferLength=0x105, lpBuffer=0x3bba90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF", lpFilePart=0x0) returned 0xc8 [0206.446] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf70) returned 1 [0206.446] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\c46e7b0f942663a1edc8d9d6d7869173_d9b9f37ece595b0b7b6aa12451d392cf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0206.447] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8a00) returned 1 [0206.448] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749", lpFilePart=0x0) returned 0xa7 [0206.448] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0206.448] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\fb0d848f74f70bb2eaa93746d24d9749"), fInfoLevelId=0x0, lpFileInformation=0x22e20f0 | out: lpFileInformation=0x22e20f0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe6cafbe7, ftCreationTime.dwHighDateTime=0x1d2d439, ftLastAccessTime.dwLowDateTime=0xe6cafbe7, ftLastAccessTime.dwHighDateTime=0x1d2d439, ftLastWriteTime.dwLowDateTime=0xe6cafbe7, ftLastWriteTime.dwHighDateTime=0x1d2d439, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0206.448] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0206.448] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749", lpFilePart=0x0) returned 0xa7 [0206.448] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\fb0d848f74f70bb2eaa93746d24d9749"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0206.449] GetFileType (hFile=0x444) returned 0x1 [0206.449] GetFileType (hFile=0x444) returned 0x1 [0206.449] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x0 [0206.449] CloseHandle (hObject=0x444) returned 1 [0206.459] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749", lpFilePart=0x0) returned 0xa7 [0206.459] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\fb0d848f74f70bb2eaa93746d24d9749"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0206.460] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749", nBufferLength=0x105, lpBuffer=0x3bbc10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749", lpFilePart=0x0) returned 0xa7 [0206.460] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\fb0d848f74f70bb2eaa93746d24d9749"), fInfoLevelId=0x0, lpFileInformation=0x3bc190 | out: lpFileInformation=0x3bc190*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe6cafbe7, ftCreationTime.dwHighDateTime=0x1d2d439, ftLastAccessTime.dwLowDateTime=0xe6cafbe7, ftLastAccessTime.dwHighDateTime=0x1d2d439, ftLastWriteTime.dwLowDateTime=0xe6cafbe7, ftLastWriteTime.dwHighDateTime=0x1d2d439, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0206.461] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749", nBufferLength=0x105, lpBuffer=0x3bbc30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749", lpFilePart=0x0) returned 0xa7 [0206.461] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\fb0d848f74f70bb2eaa93746d24d9749"), fInfoLevelId=0x0, lpFileInformation=0x23590f0 | out: lpFileInformation=0x23590f0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe6cafbe7, ftCreationTime.dwHighDateTime=0x1d2d439, ftLastAccessTime.dwLowDateTime=0xe6cafbe7, ftLastAccessTime.dwHighDateTime=0x1d2d439, ftLastWriteTime.dwLowDateTime=0xe6cafbe7, ftLastWriteTime.dwHighDateTime=0x1d2d439, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0206.461] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749", nBufferLength=0x105, lpBuffer=0x3bba90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749", lpFilePart=0x0) returned 0xa7 [0206.461] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\fb0d848f74f70bb2eaa93746d24d9749"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0206.461] GetFileType (hFile=0x444) returned 0x1 [0206.461] GetFileType (hFile=0x444) returned 0x1 [0206.461] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc108 | out: lpFileSizeHigh=0x3bc108*=0x0) returned 0x0 [0206.461] CloseHandle (hObject=0x444) returned 1 [0206.501] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749", nBufferLength=0x105, lpBuffer=0x3bba90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749", lpFilePart=0x0) returned 0xa7 [0206.501] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf70) returned 1 [0206.501] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\fb0d848f74f70bb2eaa93746d24d9749"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0206.503] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8a00) returned 1 [0206.503] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0206.503] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData", lpFilePart=0x0) returned 0x87 [0206.504] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\", lpFilePart=0x0) returned 0x88 [0206.504] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d79d0 [0206.513] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0206.513] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0206.514] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0206.514] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0206.514] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0206.514] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0206.514] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0206.514] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0206.515] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0206.515] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0206.515] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0206.515] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData", lpFilePart=0x0) returned 0x87 [0206.515] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\", lpFilePart=0x0) returned 0x88 [0206.515] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d7a90 [0206.516] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0206.516] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0206.516] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0206.516] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0206.516] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0206.516] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0206.517] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0206.517] FindClose (in: hFindFile=0x5d7a90 | out: hFindFile=0x5d7a90) returned 1 [0206.517] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0206.517] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0206.517] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", lpFilePart=0x0) returned 0xa8 [0206.517] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0206.517] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\57c8edb95df3f0ad4ee2dc2b8cfd4157"), fInfoLevelId=0x0, lpFileInformation=0x21d48e0 | out: lpFileInformation=0x21d48e0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe6c3d4ea, ftCreationTime.dwHighDateTime=0x1d2d439, ftLastAccessTime.dwLowDateTime=0xe6c3d4ea, ftLastAccessTime.dwHighDateTime=0x1d2d439, ftLastWriteTime.dwLowDateTime=0xe6cafbe7, ftLastWriteTime.dwHighDateTime=0x1d2d439, nFileSizeHigh=0x0, nFileSizeLow=0x12e)) returned 1 [0206.518] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0206.518] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", lpFilePart=0x0) returned 0xa8 [0206.518] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0206.518] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\57c8edb95df3f0ad4ee2dc2b8cfd4157"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0206.518] GetFileType (hFile=0x444) returned 0x1 [0206.518] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0206.518] GetFileType (hFile=0x444) returned 0x1 [0206.518] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x12e [0206.519] ReadFile (in: hFile=0x444, lpBuffer=0x21d4e98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x21d4e98*, lpNumberOfBytesRead=0x3be5c8*=0x12e, lpOverlapped=0x0) returned 1 [0206.519] CloseHandle (hObject=0x444) returned 1 [0206.529] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", lpFilePart=0x0) returned 0xa8 [0206.529] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0206.529] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\57c8edb95df3f0ad4ee2dc2b8cfd4157"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0206.530] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3baf90) returned 1 [0206.531] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", nBufferLength=0x105, lpBuffer=0x3bbc10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", lpFilePart=0x0) returned 0xa8 [0206.531] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0b0) returned 1 [0206.533] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\57c8edb95df3f0ad4ee2dc2b8cfd4157"), fInfoLevelId=0x0, lpFileInformation=0x3bc190 | out: lpFileInformation=0x3bc190*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe6c3d4ea, ftCreationTime.dwHighDateTime=0x1d2d439, ftLastAccessTime.dwLowDateTime=0xe6c3d4ea, ftLastAccessTime.dwHighDateTime=0x1d2d439, ftLastWriteTime.dwLowDateTime=0xe6cafbe7, ftLastWriteTime.dwHighDateTime=0x1d2d439, nFileSizeHigh=0x0, nFileSizeLow=0x12e)) returned 1 [0206.533] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc070) returned 1 [0206.533] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", nBufferLength=0x105, lpBuffer=0x3bbc30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", lpFilePart=0x0) returned 0xa8 [0206.533] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0b0) returned 1 [0206.533] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\57c8edb95df3f0ad4ee2dc2b8cfd4157"), fInfoLevelId=0x0, lpFileInformation=0x224cf18 | out: lpFileInformation=0x224cf18*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe6c3d4ea, ftCreationTime.dwHighDateTime=0x1d2d439, ftLastAccessTime.dwLowDateTime=0xe6c3d4ea, ftLastAccessTime.dwHighDateTime=0x1d2d439, ftLastWriteTime.dwLowDateTime=0xe6cafbe7, ftLastWriteTime.dwHighDateTime=0x1d2d439, nFileSizeHigh=0x0, nFileSizeLow=0x12e)) returned 1 [0206.533] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc070) returned 1 [0206.533] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", nBufferLength=0x105, lpBuffer=0x3bba90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", lpFilePart=0x0) returned 0xa8 [0206.533] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf70) returned 1 [0206.533] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\57c8edb95df3f0ad4ee2dc2b8cfd4157"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0206.533] GetFileType (hFile=0x444) returned 0x1 [0206.533] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbee0) returned 1 [0206.533] GetFileType (hFile=0x444) returned 0x1 [0206.533] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc108 | out: lpFileSizeHigh=0x3bc108*=0x0) returned 0x12e [0206.534] ReadFile (in: hFile=0x444, lpBuffer=0x224d4d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bc038, lpOverlapped=0x0 | out: lpBuffer=0x224d4d0*, lpNumberOfBytesRead=0x3bc038*=0x12e, lpOverlapped=0x0) returned 1 [0206.534] CloseHandle (hObject=0x444) returned 1 [0206.543] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", nBufferLength=0x105, lpBuffer=0x3bba90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", lpFilePart=0x0) returned 0xa8 [0206.543] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf70) returned 1 [0206.543] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\57c8edb95df3f0ad4ee2dc2b8cfd4157"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0206.545] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8a00) returned 1 [0206.545] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506", lpFilePart=0x0) returned 0xa8 [0206.545] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0206.545] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\77ec63bda74bd0d0e0426dc8f8008506"), fInfoLevelId=0x0, lpFileInformation=0x22c53e0 | out: lpFileInformation=0x22c53e0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe6c3d4ea, ftCreationTime.dwHighDateTime=0x1d2d439, ftLastAccessTime.dwLowDateTime=0xe6c3d4ea, ftLastAccessTime.dwHighDateTime=0x1d2d439, ftLastWriteTime.dwLowDateTime=0xe6c3d4ea, ftLastWriteTime.dwHighDateTime=0x1d2d439, nFileSizeHigh=0x0, nFileSizeLow=0x122)) returned 1 [0206.546] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0206.546] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506", lpFilePart=0x0) returned 0xa8 [0206.546] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0206.546] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\77ec63bda74bd0d0e0426dc8f8008506"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0206.546] GetFileType (hFile=0x444) returned 0x1 [0206.546] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0206.546] GetFileType (hFile=0x444) returned 0x1 [0206.546] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x122 [0206.546] ReadFile (in: hFile=0x444, lpBuffer=0x22c5990, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x22c5990*, lpNumberOfBytesRead=0x3be5c8*=0x122, lpOverlapped=0x0) returned 1 [0206.547] CloseHandle (hObject=0x444) returned 1 [0206.557] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506", lpFilePart=0x0) returned 0xa8 [0206.557] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0206.557] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\77ec63bda74bd0d0e0426dc8f8008506"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0206.558] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3baf90) returned 1 [0206.559] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506", nBufferLength=0x105, lpBuffer=0x3bbc10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506", lpFilePart=0x0) returned 0xa8 [0206.559] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0b0) returned 1 [0206.559] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\77ec63bda74bd0d0e0426dc8f8008506"), fInfoLevelId=0x0, lpFileInformation=0x3bc190 | out: lpFileInformation=0x3bc190*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe6c3d4ea, ftCreationTime.dwHighDateTime=0x1d2d439, ftLastAccessTime.dwLowDateTime=0xe6c3d4ea, ftLastAccessTime.dwHighDateTime=0x1d2d439, ftLastWriteTime.dwLowDateTime=0xe6c3d4ea, ftLastWriteTime.dwHighDateTime=0x1d2d439, nFileSizeHigh=0x0, nFileSizeLow=0x122)) returned 1 [0206.559] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc070) returned 1 [0206.559] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506", nBufferLength=0x105, lpBuffer=0x3bbc30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506", lpFilePart=0x0) returned 0xa8 [0206.559] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0b0) returned 1 [0206.559] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\77ec63bda74bd0d0e0426dc8f8008506"), fInfoLevelId=0x0, lpFileInformation=0x233da18 | out: lpFileInformation=0x233da18*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe6c3d4ea, ftCreationTime.dwHighDateTime=0x1d2d439, ftLastAccessTime.dwLowDateTime=0xe6c3d4ea, ftLastAccessTime.dwHighDateTime=0x1d2d439, ftLastWriteTime.dwLowDateTime=0xe6c3d4ea, ftLastWriteTime.dwHighDateTime=0x1d2d439, nFileSizeHigh=0x0, nFileSizeLow=0x122)) returned 1 [0206.559] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc070) returned 1 [0206.559] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506", nBufferLength=0x105, lpBuffer=0x3bba90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506", lpFilePart=0x0) returned 0xa8 [0206.559] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf70) returned 1 [0206.559] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\77ec63bda74bd0d0e0426dc8f8008506"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0206.559] GetFileType (hFile=0x444) returned 0x1 [0206.559] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbee0) returned 1 [0206.559] GetFileType (hFile=0x444) returned 0x1 [0206.559] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc108 | out: lpFileSizeHigh=0x3bc108*=0x0) returned 0x122 [0206.559] ReadFile (in: hFile=0x444, lpBuffer=0x233dfc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bc038, lpOverlapped=0x0 | out: lpBuffer=0x233dfc8*, lpNumberOfBytesRead=0x3bc038*=0x122, lpOverlapped=0x0) returned 1 [0206.559] CloseHandle (hObject=0x444) returned 1 [0206.657] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506", nBufferLength=0x105, lpBuffer=0x3bba90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506", lpFilePart=0x0) returned 0xa8 [0206.657] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf70) returned 1 [0206.657] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\77ec63bda74bd0d0e0426dc8f8008506"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0206.659] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8a00) returned 1 [0206.660] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873", lpFilePart=0x0) returned 0xc9 [0206.660] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0206.660] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\c46e7b0f942663a1edc8d9d6d7869173_42820cdfea41dc84aab89a6b63561873"), fInfoLevelId=0x0, lpFileInformation=0x21b6178 | out: lpFileInformation=0x21b6178*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe6c17295, ftCreationTime.dwHighDateTime=0x1d2d439, ftLastAccessTime.dwLowDateTime=0xe6c17295, ftLastAccessTime.dwHighDateTime=0x1d2d439, ftLastWriteTime.dwLowDateTime=0xa8ede5d, ftLastWriteTime.dwHighDateTime=0x1d2d43a, nFileSizeHigh=0x0, nFileSizeLow=0x192)) returned 1 [0206.660] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0206.660] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873", lpFilePart=0x0) returned 0xc9 [0206.660] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0206.660] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\c46e7b0f942663a1edc8d9d6d7869173_42820cdfea41dc84aab89a6b63561873"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0206.660] GetFileType (hFile=0x444) returned 0x1 [0206.660] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0206.660] GetFileType (hFile=0x444) returned 0x1 [0206.660] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x192 [0206.660] ReadFile (in: hFile=0x444, lpBuffer=0x21b6898, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x21b6898*, lpNumberOfBytesRead=0x3be5c8*=0x192, lpOverlapped=0x0) returned 1 [0206.663] CloseHandle (hObject=0x444) returned 1 [0206.673] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873", lpFilePart=0x0) returned 0xc9 [0206.673] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0206.673] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\c46e7b0f942663a1edc8d9d6d7869173_42820cdfea41dc84aab89a6b63561873"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0206.674] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3baf90) returned 1 [0206.675] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873", nBufferLength=0x105, lpBuffer=0x3bbc10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873", lpFilePart=0x0) returned 0xc9 [0206.675] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0b0) returned 1 [0206.675] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\c46e7b0f942663a1edc8d9d6d7869173_42820cdfea41dc84aab89a6b63561873"), fInfoLevelId=0x0, lpFileInformation=0x3bc190 | out: lpFileInformation=0x3bc190*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe6c17295, ftCreationTime.dwHighDateTime=0x1d2d439, ftLastAccessTime.dwLowDateTime=0xe6c17295, ftLastAccessTime.dwHighDateTime=0x1d2d439, ftLastWriteTime.dwLowDateTime=0xa8ede5d, ftLastWriteTime.dwHighDateTime=0x1d2d43a, nFileSizeHigh=0x0, nFileSizeLow=0x192)) returned 1 [0206.675] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc070) returned 1 [0206.675] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873", nBufferLength=0x105, lpBuffer=0x3bbc30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873", lpFilePart=0x0) returned 0xc9 [0206.675] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0b0) returned 1 [0206.675] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\c46e7b0f942663a1edc8d9d6d7869173_42820cdfea41dc84aab89a6b63561873"), fInfoLevelId=0x0, lpFileInformation=0x222ec50 | out: lpFileInformation=0x222ec50*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe6c17295, ftCreationTime.dwHighDateTime=0x1d2d439, ftLastAccessTime.dwLowDateTime=0xe6c17295, ftLastAccessTime.dwHighDateTime=0x1d2d439, ftLastWriteTime.dwLowDateTime=0xa8ede5d, ftLastWriteTime.dwHighDateTime=0x1d2d43a, nFileSizeHigh=0x0, nFileSizeLow=0x192)) returned 1 [0206.675] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc070) returned 1 [0206.675] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873", nBufferLength=0x105, lpBuffer=0x3bba90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873", lpFilePart=0x0) returned 0xc9 [0206.675] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf70) returned 1 [0206.675] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\c46e7b0f942663a1edc8d9d6d7869173_42820cdfea41dc84aab89a6b63561873"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0206.675] GetFileType (hFile=0x444) returned 0x1 [0206.675] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbee0) returned 1 [0206.676] GetFileType (hFile=0x444) returned 0x1 [0206.676] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc108 | out: lpFileSizeHigh=0x3bc108*=0x0) returned 0x192 [0206.676] ReadFile (in: hFile=0x444, lpBuffer=0x222f370, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bc038, lpOverlapped=0x0 | out: lpBuffer=0x222f370*, lpNumberOfBytesRead=0x3bc038*=0x192, lpOverlapped=0x0) returned 1 [0206.676] CloseHandle (hObject=0x444) returned 1 [0206.685] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873", nBufferLength=0x105, lpBuffer=0x3bba90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873", lpFilePart=0x0) returned 0xc9 [0206.685] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf70) returned 1 [0206.686] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\c46e7b0f942663a1edc8d9d6d7869173_42820cdfea41dc84aab89a6b63561873"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0206.687] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8a00) returned 1 [0206.688] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF", lpFilePart=0x0) returned 0xc9 [0206.688] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0206.688] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\c46e7b0f942663a1edc8d9d6d7869173_d9b9f37ece595b0b7b6aa12451d392cf"), fInfoLevelId=0x0, lpFileInformation=0x22a7578 | out: lpFileInformation=0x22a7578*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe7306252, ftCreationTime.dwHighDateTime=0x1d2d439, ftLastAccessTime.dwLowDateTime=0xe7306252, ftLastAccessTime.dwHighDateTime=0x1d2d439, ftLastWriteTime.dwLowDateTime=0xa8ede5d, ftLastWriteTime.dwHighDateTime=0x1d2d43a, nFileSizeHigh=0x0, nFileSizeLow=0x18e)) returned 1 [0206.688] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0206.688] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF", lpFilePart=0x0) returned 0xc9 [0206.688] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0206.688] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\c46e7b0f942663a1edc8d9d6d7869173_d9b9f37ece595b0b7b6aa12451d392cf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0206.688] GetFileType (hFile=0x444) returned 0x1 [0206.688] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0206.689] GetFileType (hFile=0x444) returned 0x1 [0206.689] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x18e [0206.689] ReadFile (in: hFile=0x444, lpBuffer=0x22a7c90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x22a7c90*, lpNumberOfBytesRead=0x3be5c8*=0x18e, lpOverlapped=0x0) returned 1 [0206.689] CloseHandle (hObject=0x444) returned 1 [0206.699] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF", lpFilePart=0x0) returned 0xc9 [0206.699] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0206.699] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\c46e7b0f942663a1edc8d9d6d7869173_d9b9f37ece595b0b7b6aa12451d392cf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0206.700] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3baf90) returned 1 [0206.701] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF", nBufferLength=0x105, lpBuffer=0x3bbc10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF", lpFilePart=0x0) returned 0xc9 [0206.701] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0b0) returned 1 [0206.701] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\c46e7b0f942663a1edc8d9d6d7869173_d9b9f37ece595b0b7b6aa12451d392cf"), fInfoLevelId=0x0, lpFileInformation=0x3bc190 | out: lpFileInformation=0x3bc190*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe7306252, ftCreationTime.dwHighDateTime=0x1d2d439, ftLastAccessTime.dwLowDateTime=0xe7306252, ftLastAccessTime.dwHighDateTime=0x1d2d439, ftLastWriteTime.dwLowDateTime=0xa8ede5d, ftLastWriteTime.dwHighDateTime=0x1d2d43a, nFileSizeHigh=0x0, nFileSizeLow=0x18e)) returned 1 [0206.701] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc070) returned 1 [0206.701] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF", nBufferLength=0x105, lpBuffer=0x3bbc30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF", lpFilePart=0x0) returned 0xc9 [0206.701] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0b0) returned 1 [0206.701] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\c46e7b0f942663a1edc8d9d6d7869173_d9b9f37ece595b0b7b6aa12451d392cf"), fInfoLevelId=0x0, lpFileInformation=0x231fff0 | out: lpFileInformation=0x231fff0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe7306252, ftCreationTime.dwHighDateTime=0x1d2d439, ftLastAccessTime.dwLowDateTime=0xe7306252, ftLastAccessTime.dwHighDateTime=0x1d2d439, ftLastWriteTime.dwLowDateTime=0xa8ede5d, ftLastWriteTime.dwHighDateTime=0x1d2d43a, nFileSizeHigh=0x0, nFileSizeLow=0x18e)) returned 1 [0206.701] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc070) returned 1 [0206.701] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF", nBufferLength=0x105, lpBuffer=0x3bba90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF", lpFilePart=0x0) returned 0xc9 [0206.701] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf70) returned 1 [0206.701] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\c46e7b0f942663a1edc8d9d6d7869173_d9b9f37ece595b0b7b6aa12451d392cf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0206.701] GetFileType (hFile=0x444) returned 0x1 [0206.701] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbee0) returned 1 [0206.701] GetFileType (hFile=0x444) returned 0x1 [0206.701] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc108 | out: lpFileSizeHigh=0x3bc108*=0x0) returned 0x18e [0206.702] ReadFile (in: hFile=0x444, lpBuffer=0x2320708, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bc038, lpOverlapped=0x0 | out: lpBuffer=0x2320708*, lpNumberOfBytesRead=0x3bc038*=0x18e, lpOverlapped=0x0) returned 1 [0206.702] CloseHandle (hObject=0x444) returned 1 [0206.746] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF", nBufferLength=0x105, lpBuffer=0x3bba90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF", lpFilePart=0x0) returned 0xc9 [0206.746] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf70) returned 1 [0206.746] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\c46e7b0f942663a1edc8d9d6d7869173_d9b9f37ece595b0b7b6aa12451d392cf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0206.748] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8a00) returned 1 [0206.749] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749", lpFilePart=0x0) returned 0xa8 [0206.749] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0206.749] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\fb0d848f74f70bb2eaa93746d24d9749"), fInfoLevelId=0x0, lpFileInformation=0x2198808 | out: lpFileInformation=0x2198808*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe6cafbe7, ftCreationTime.dwHighDateTime=0x1d2d439, ftLastAccessTime.dwLowDateTime=0xe6cafbe7, ftLastAccessTime.dwHighDateTime=0x1d2d439, ftLastWriteTime.dwLowDateTime=0xe6cafbe7, ftLastWriteTime.dwHighDateTime=0x1d2d439, nFileSizeHigh=0x0, nFileSizeLow=0x122)) returned 1 [0206.749] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0206.749] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749", lpFilePart=0x0) returned 0xa8 [0206.749] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0206.749] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\fb0d848f74f70bb2eaa93746d24d9749"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0206.749] GetFileType (hFile=0x444) returned 0x1 [0206.749] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0206.749] GetFileType (hFile=0x444) returned 0x1 [0206.749] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x122 [0206.749] ReadFile (in: hFile=0x444, lpBuffer=0x2198db8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x2198db8*, lpNumberOfBytesRead=0x3be5c8*=0x122, lpOverlapped=0x0) returned 1 [0206.752] CloseHandle (hObject=0x444) returned 1 [0206.762] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749", lpFilePart=0x0) returned 0xa8 [0206.762] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0206.762] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\fb0d848f74f70bb2eaa93746d24d9749"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0206.764] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3baf90) returned 1 [0206.764] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749", nBufferLength=0x105, lpBuffer=0x3bbc10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749", lpFilePart=0x0) returned 0xa8 [0206.764] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0b0) returned 1 [0206.764] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\fb0d848f74f70bb2eaa93746d24d9749"), fInfoLevelId=0x0, lpFileInformation=0x3bc190 | out: lpFileInformation=0x3bc190*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe6cafbe7, ftCreationTime.dwHighDateTime=0x1d2d439, ftLastAccessTime.dwLowDateTime=0xe6cafbe7, ftLastAccessTime.dwHighDateTime=0x1d2d439, ftLastWriteTime.dwLowDateTime=0xe6cafbe7, ftLastWriteTime.dwHighDateTime=0x1d2d439, nFileSizeHigh=0x0, nFileSizeLow=0x122)) returned 1 [0206.764] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc070) returned 1 [0206.764] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749", nBufferLength=0x105, lpBuffer=0x3bbc30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749", lpFilePart=0x0) returned 0xa8 [0206.764] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0b0) returned 1 [0206.764] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\fb0d848f74f70bb2eaa93746d24d9749"), fInfoLevelId=0x0, lpFileInformation=0x2210e40 | out: lpFileInformation=0x2210e40*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe6cafbe7, ftCreationTime.dwHighDateTime=0x1d2d439, ftLastAccessTime.dwLowDateTime=0xe6cafbe7, ftLastAccessTime.dwHighDateTime=0x1d2d439, ftLastWriteTime.dwLowDateTime=0xe6cafbe7, ftLastWriteTime.dwHighDateTime=0x1d2d439, nFileSizeHigh=0x0, nFileSizeLow=0x122)) returned 1 [0206.764] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc070) returned 1 [0206.764] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749", nBufferLength=0x105, lpBuffer=0x3bba90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749", lpFilePart=0x0) returned 0xa8 [0206.764] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf70) returned 1 [0206.764] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\fb0d848f74f70bb2eaa93746d24d9749"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0206.765] GetFileType (hFile=0x444) returned 0x1 [0206.765] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbee0) returned 1 [0206.765] GetFileType (hFile=0x444) returned 0x1 [0206.765] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc108 | out: lpFileSizeHigh=0x3bc108*=0x0) returned 0x122 [0206.765] ReadFile (in: hFile=0x444, lpBuffer=0x22113f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bc038, lpOverlapped=0x0 | out: lpBuffer=0x22113f0*, lpNumberOfBytesRead=0x3bc038*=0x122, lpOverlapped=0x0) returned 1 [0206.765] CloseHandle (hObject=0x444) returned 1 [0206.775] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749", nBufferLength=0x105, lpBuffer=0x3bba90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749", lpFilePart=0x0) returned 0xa8 [0206.775] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf70) returned 1 [0206.775] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\fb0d848f74f70bb2eaa93746d24d9749"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0206.776] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8a00) returned 1 [0206.777] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0206.777] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows", lpFilePart=0x0) returned 0x75 [0206.777] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\", lpFilePart=0x0) returned 0x76 [0206.777] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d7c70 [0206.777] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0206.777] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0206.777] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0206.777] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0206.777] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0206.777] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0206.777] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0206.777] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows", lpFilePart=0x0) returned 0x75 [0206.777] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\", lpFilePart=0x0) returned 0x76 [0206.777] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d81b0 [0206.778] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0206.778] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0206.778] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0206.778] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0206.778] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0206.778] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0206.778] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0206.778] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3705566220", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3705566220", lpFilePart=0x0) returned 0x80 [0206.778] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3705566220\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3705566220\\", lpFilePart=0x0) returned 0x81 [0206.778] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3705566220\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d81b0 [0206.778] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0206.778] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0206.779] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0206.779] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0206.779] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0206.779] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0206.779] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0206.779] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3705566220", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3705566220", lpFilePart=0x0) returned 0x80 [0206.779] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3705566220\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3705566220\\", lpFilePart=0x0) returned 0x81 [0206.779] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3705566220\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d7a90 [0206.779] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0206.779] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0206.779] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0206.779] FindClose (in: hFindFile=0x5d7a90 | out: hFindFile=0x5d7a90) returned 1 [0206.779] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0206.779] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0206.780] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3705566220\\624664733.pri", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3705566220\\624664733.pri", lpFilePart=0x0) returned 0x8e [0206.780] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0206.780] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3705566220\\624664733.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\windows\\3705566220\\624664733.pri"), fInfoLevelId=0x0, lpFileInformation=0x228ea90 | out: lpFileInformation=0x228ea90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5a03174, ftCreationTime.dwHighDateTime=0x1d2d439, ftLastAccessTime.dwLowDateTime=0xe5a03174, ftLastAccessTime.dwHighDateTime=0x1d2d439, ftLastWriteTime.dwLowDateTime=0xe5a0930d, ftLastWriteTime.dwHighDateTime=0x1d2d439, nFileSizeHigh=0x0, nFileSizeLow=0x1fc8)) returned 1 [0206.780] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0206.780] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3705566220\\624664733.pri", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3705566220\\624664733.pri", lpFilePart=0x0) returned 0x8e [0206.780] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0206.780] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3705566220\\624664733.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\windows\\3705566220\\624664733.pri"), fInfoLevelId=0x0, lpFileInformation=0x228ec68 | out: lpFileInformation=0x228ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5a03174, ftCreationTime.dwHighDateTime=0x1d2d439, ftLastAccessTime.dwLowDateTime=0xe5a03174, ftLastAccessTime.dwHighDateTime=0x1d2d439, ftLastWriteTime.dwLowDateTime=0xe5a0930d, ftLastWriteTime.dwHighDateTime=0x1d2d439, nFileSizeHigh=0x0, nFileSizeLow=0x1fc8)) returned 1 [0206.780] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0206.780] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3705566220\\624664733.pri", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3705566220\\624664733.pri", lpFilePart=0x0) returned 0x8e [0206.780] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0206.780] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3705566220\\624664733.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\windows\\3705566220\\624664733.pri"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0206.782] GetFileType (hFile=0x444) returned 0x1 [0206.782] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0206.782] GetFileType (hFile=0x444) returned 0x1 [0206.782] ReadFile (in: hFile=0x444, lpBuffer=0x2291148, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x2291148*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0206.811] CloseHandle (hObject=0x444) returned 1 [0206.811] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3705566220\\624664733.pri", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3705566220\\624664733.pri", lpFilePart=0x0) returned 0x8e [0206.811] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0206.811] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3705566220\\624664733.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\windows\\3705566220\\624664733.pri"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0206.811] GetFileType (hFile=0x444) returned 0x1 [0206.811] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0206.811] GetFileType (hFile=0x444) returned 0x1 [0206.811] WriteFile (in: hFile=0x444, lpBuffer=0x228ee20*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x228ee20*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0206.811] CloseHandle (hObject=0x444) returned 1 [0206.811] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3705566220\\624664733.pri", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3705566220\\624664733.pri", lpFilePart=0x0) returned 0x8e [0206.811] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3705566220\\624664733.pri.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3705566220\\624664733.pri.xuy", lpFilePart=0x0) returned 0x92 [0206.811] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0206.812] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3705566220\\624664733.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\windows\\3705566220\\624664733.pri"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5a03174, ftCreationTime.dwHighDateTime=0x1d2d439, ftLastAccessTime.dwLowDateTime=0xe5a03174, ftLastAccessTime.dwHighDateTime=0x1d2d439, ftLastWriteTime.dwLowDateTime=0x671cdeaf, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0206.812] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0206.812] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3705566220\\624664733.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\windows\\3705566220\\624664733.pri"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3705566220\\624664733.pri.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\windows\\3705566220\\624664733.pri.xuy")) returned 1 [0206.819] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0206.819] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Temp", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Temp", lpFilePart=0x0) returned 0x68 [0206.819] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Temp\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Temp\\", lpFilePart=0x0) returned 0x69 [0206.819] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Temp\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d79d0 [0206.822] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0206.822] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0206.822] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0206.822] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0206.822] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0206.822] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0206.822] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Temp", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Temp", lpFilePart=0x0) returned 0x68 [0206.822] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Temp\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Temp\\", lpFilePart=0x0) returned 0x69 [0206.822] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Temp\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7550 [0206.823] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0206.823] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0206.823] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0206.823] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0206.823] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0206.823] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0206.823] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AppData", lpFilePart=0x0) returned 0x68 [0206.823] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AppData\\", lpFilePart=0x0) returned 0x69 [0206.823] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d81b0 [0206.823] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0206.823] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0206.823] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0206.823] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0206.823] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0206.823] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0206.823] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AppData", lpFilePart=0x0) returned 0x68 [0206.823] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AppData\\", lpFilePart=0x0) returned 0x69 [0206.824] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d79d0 [0206.824] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0206.824] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0206.824] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0206.824] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0206.824] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0206.824] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0206.824] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\LocalCache", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\LocalCache", lpFilePart=0x0) returned 0x6b [0206.824] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\LocalCache\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\LocalCache\\", lpFilePart=0x0) returned 0x6c [0206.824] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\LocalCache\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7fd0 [0206.824] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0206.824] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0206.824] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0206.825] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0206.825] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0206.825] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0206.825] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\LocalCache", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\LocalCache", lpFilePart=0x0) returned 0x6b [0206.825] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\LocalCache\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\LocalCache\\", lpFilePart=0x0) returned 0x6c [0206.825] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\LocalCache\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d78b0 [0206.825] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0206.825] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0206.825] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0206.825] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0206.825] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0206.825] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0206.825] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\LocalState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\LocalState", lpFilePart=0x0) returned 0x6b [0206.825] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\LocalState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\LocalState\\", lpFilePart=0x0) returned 0x6c [0206.825] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\LocalState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7c70 [0206.825] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0206.826] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0206.826] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0206.826] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0206.826] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0206.826] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0206.826] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\LocalState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\LocalState", lpFilePart=0x0) returned 0x6b [0206.826] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\LocalState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\LocalState\\", lpFilePart=0x0) returned 0x6c [0206.826] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\LocalState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7c70 [0206.826] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0206.826] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0206.826] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0206.826] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0206.826] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0206.826] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0206.826] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.CloudExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.CloudExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy", lpFilePart=0x0) returned 0xb5 [0206.826] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.CloudExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.CloudExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\", lpFilePart=0x0) returned 0xb6 [0206.826] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.CloudExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7fd0 [0206.827] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0206.827] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0206.827] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0206.827] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0206.827] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0206.827] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0206.827] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0206.827] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.CloudExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.CloudExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy", lpFilePart=0x0) returned 0xb5 [0206.827] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.CloudExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.CloudExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\", lpFilePart=0x0) returned 0xb6 [0206.827] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.CloudExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d79d0 [0206.827] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0206.828] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0206.828] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0206.828] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0206.828] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0206.828] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0206.828] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0206.828] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.CloudExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.CloudExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore", lpFilePart=0x0) returned 0xc5 [0206.828] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.CloudExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.CloudExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\", lpFilePart=0x0) returned 0xc6 [0206.828] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.CloudExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d8090 [0206.834] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0206.834] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0206.834] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0206.834] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0206.834] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0206.834] FindClose (in: hFindFile=0x5d8090 | out: hFindFile=0x5d8090) returned 1 [0206.835] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0206.835] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0206.835] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0206.835] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.CloudExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.CloudExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore", lpFilePart=0x0) returned 0xc5 [0206.835] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.CloudExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.CloudExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\", lpFilePart=0x0) returned 0xc6 [0206.835] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.CloudExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7fd0 [0206.836] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0206.836] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0206.836] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0206.836] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0206.836] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0206.837] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0206.837] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0206.837] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0206.837] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.CloudExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.CloudExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xd9 [0206.837] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0206.837] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.CloudExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\microsoft.windows.cloudexperiencehost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat"), fInfoLevelId=0x0, lpFileInformation=0x231e780 | out: lpFileInformation=0x231e780*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb033c27f, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0x6cdd338, ftLastAccessTime.dwHighDateTime=0x1d2d446, ftLastWriteTime.dwLowDateTime=0xb03ae999, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x8000)) returned 1 [0206.838] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0206.838] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.CloudExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.CloudExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xd9 [0206.838] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0206.838] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.CloudExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\microsoft.windows.cloudexperiencehost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat"), fInfoLevelId=0x0, lpFileInformation=0x231e9f8 | out: lpFileInformation=0x231e9f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb033c27f, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0x6cdd338, ftLastAccessTime.dwHighDateTime=0x1d2d446, ftLastWriteTime.dwLowDateTime=0xb03ae999, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x8000)) returned 1 [0206.838] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0206.838] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.CloudExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.CloudExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xd9 [0206.838] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0206.838] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.CloudExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\microsoft.windows.cloudexperiencehost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0206.839] GetFileType (hFile=0x444) returned 0x1 [0206.839] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0206.839] GetFileType (hFile=0x444) returned 0x1 [0206.839] ReadFile (in: hFile=0x444, lpBuffer=0x2321018, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x2321018*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0206.884] CloseHandle (hObject=0x444) returned 1 [0206.884] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.CloudExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.CloudExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xd9 [0206.884] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0206.884] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.CloudExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\microsoft.windows.cloudexperiencehost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0206.884] GetFileType (hFile=0x444) returned 0x1 [0206.884] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0206.884] GetFileType (hFile=0x444) returned 0x1 [0206.884] WriteFile (in: hFile=0x444, lpBuffer=0x2187b30*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x2187b30*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0206.884] CloseHandle (hObject=0x444) returned 1 [0206.885] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.CloudExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.CloudExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xd9 [0206.885] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.CloudExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.CloudExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.xuy", lpFilePart=0x0) returned 0xdd [0206.885] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0206.885] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.CloudExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\microsoft.windows.cloudexperiencehost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb033c27f, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0x6cdd338, ftLastAccessTime.dwHighDateTime=0x1d2d446, ftLastWriteTime.dwLowDateTime=0x6728c91b, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x8000)) returned 1 [0206.885] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0206.885] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.CloudExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\microsoft.windows.cloudexperiencehost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.CloudExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\microsoft.windows.cloudexperiencehost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.xuy")) returned 1 [0206.886] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.CloudExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.CloudExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xde [0206.886] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0206.886] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.CloudExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\microsoft.windows.cloudexperiencehost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x219fbe8 | out: lpFileInformation=0x219fbe8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xb03624ee, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb03624ee, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xb03624ee, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x7000)) returned 1 [0206.886] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0206.886] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.CloudExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.CloudExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xde [0206.886] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0206.886] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.CloudExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\microsoft.windows.cloudexperiencehost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x219fe78 | out: lpFileInformation=0x219fe78*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xb03624ee, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb03624ee, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xb03624ee, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x7000)) returned 1 [0206.887] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0206.887] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.CloudExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.CloudExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xde [0206.887] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0206.887] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.CloudExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\microsoft.windows.cloudexperiencehost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0206.888] GetFileType (hFile=0x444) returned 0x1 [0206.888] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0206.888] GetFileType (hFile=0x444) returned 0x1 [0206.888] ReadFile (in: hFile=0x444, lpBuffer=0x21a24c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x21a24c8*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0206.905] CloseHandle (hObject=0x444) returned 1 [0206.905] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.CloudExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.CloudExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xde [0206.905] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0206.905] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.CloudExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\microsoft.windows.cloudexperiencehost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0206.906] GetFileType (hFile=0x444) returned 0x1 [0206.906] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0206.906] GetFileType (hFile=0x444) returned 0x1 [0206.906] WriteFile (in: hFile=0x444, lpBuffer=0x21a00e8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x21a00e8*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0206.906] CloseHandle (hObject=0x444) returned 1 [0206.906] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.CloudExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.CloudExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xde [0206.907] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.CloudExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.CloudExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1.xuy", lpFilePart=0x0) returned 0xe2 [0206.907] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0206.907] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.CloudExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\microsoft.windows.cloudexperiencehost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xb03624ee, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb03624ee, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x672d8cab, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x7000)) returned 1 [0206.907] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0206.907] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.CloudExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\microsoft.windows.cloudexperiencehost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.CloudExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\microsoft.windows.cloudexperiencehost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log1.xuy")) returned 1 [0206.908] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.CloudExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.CloudExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xde [0206.908] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0206.908] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.CloudExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\microsoft.windows.cloudexperiencehost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x221ed38 | out: lpFileInformation=0x221ed38*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xb03624ee, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb03624ee, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xb03624ee, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0206.909] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0206.909] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.CloudExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.CloudExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xde [0206.909] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0206.909] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.CloudExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\microsoft.windows.cloudexperiencehost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0206.909] GetFileType (hFile=0x444) returned 0x1 [0206.909] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0206.909] GetFileType (hFile=0x444) returned 0x1 [0206.909] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x0 [0206.909] CloseHandle (hObject=0x444) returned 1 [0206.919] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.CloudExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.CloudExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xde [0206.919] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0206.920] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.CloudExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\microsoft.windows.cloudexperiencehost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0206.921] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb070) returned 1 [0206.921] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.CloudExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbcf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.CloudExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xde [0206.921] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0206.921] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.CloudExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\microsoft.windows.cloudexperiencehost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x3bc270 | out: lpFileInformation=0x3bc270*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xb03624ee, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb03624ee, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xb03624ee, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0206.921] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc150) returned 1 [0206.921] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.CloudExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbd10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.CloudExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xde [0206.921] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0206.921] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.CloudExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\microsoft.windows.cloudexperiencehost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x2295f38 | out: lpFileInformation=0x2295f38*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xb03624ee, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb03624ee, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xb03624ee, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0206.922] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc150) returned 1 [0206.922] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.CloudExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.CloudExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xde [0206.922] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc050) returned 1 [0206.922] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.CloudExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\microsoft.windows.cloudexperiencehost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0206.922] GetFileType (hFile=0x444) returned 0x1 [0206.922] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbfc0) returned 1 [0206.922] GetFileType (hFile=0x444) returned 0x1 [0206.922] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc1e8 | out: lpFileSizeHigh=0x3bc1e8*=0x0) returned 0x0 [0206.922] CloseHandle (hObject=0x444) returned 1 [0206.932] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.CloudExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.CloudExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xde [0206.932] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc050) returned 1 [0206.932] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.CloudExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\microsoft.windows.cloudexperiencehost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0206.933] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8ae0) returned 1 [0206.934] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0206.934] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\RoamingState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\RoamingState", lpFilePart=0x0) returned 0x6d [0206.934] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\RoamingState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\RoamingState\\", lpFilePart=0x0) returned 0x6e [0206.934] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\RoamingState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7670 [0206.934] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0206.935] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0206.935] FindClose (in: hFindFile=0x5d7670 | out: hFindFile=0x5d7670) returned 1 [0206.935] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0206.935] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0206.935] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0206.935] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\RoamingState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\RoamingState", lpFilePart=0x0) returned 0x6d [0206.935] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\RoamingState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\RoamingState\\", lpFilePart=0x0) returned 0x6e [0206.935] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\RoamingState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7af0 [0206.935] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0206.935] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0206.935] FindClose (in: hFindFile=0x5d7af0 | out: hFindFile=0x5d7af0) returned 1 [0206.935] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0206.935] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0206.935] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0206.935] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Settings", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Settings", lpFilePart=0x0) returned 0x69 [0206.936] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Settings\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Settings\\", lpFilePart=0x0) returned 0x6a [0206.936] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Settings\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d81b0 [0206.939] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0206.939] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0206.939] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0206.939] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0206.939] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0206.939] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0206.940] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0206.940] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0206.940] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0206.940] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0206.940] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Settings", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Settings", lpFilePart=0x0) returned 0x69 [0206.940] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Settings\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Settings\\", lpFilePart=0x0) returned 0x6a [0206.940] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Settings\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d78b0 [0206.941] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0206.941] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0206.941] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0206.941] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0206.942] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0206.942] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0206.942] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0206.942] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0206.942] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0206.942] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Settings\\roaming.lock", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Settings\\roaming.lock", lpFilePart=0x0) returned 0x76 [0206.942] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0206.943] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\settings\\roaming.lock"), fInfoLevelId=0x0, lpFileInformation=0x2312a78 | out: lpFileInformation=0x2312a78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb027d6c9, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb027d6c9, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xb027d6c9, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0206.943] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0206.943] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Settings\\roaming.lock", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Settings\\roaming.lock", lpFilePart=0x0) returned 0x76 [0206.943] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0206.943] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\settings\\roaming.lock"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0206.943] GetFileType (hFile=0x444) returned 0x1 [0206.943] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0206.943] GetFileType (hFile=0x444) returned 0x1 [0206.943] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0x0 [0206.944] CloseHandle (hObject=0x444) returned 1 [0206.954] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Settings\\roaming.lock", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Settings\\roaming.lock", lpFilePart=0x0) returned 0x76 [0206.954] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0206.954] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\settings\\roaming.lock"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0206.955] GetFileType (hFile=0x444) returned 0x1 [0206.955] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0206.955] GetFileType (hFile=0x444) returned 0x1 [0206.956] WriteFile (in: hFile=0x444, lpBuffer=0x2388f28*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x3be628, lpOverlapped=0x0 | out: lpBuffer=0x2388f28*, lpNumberOfBytesWritten=0x3be628*=0x10, lpOverlapped=0x0) returned 1 [0206.956] CloseHandle (hObject=0x444) returned 1 [0206.956] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Settings\\roaming.lock", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Settings\\roaming.lock", lpFilePart=0x0) returned 0x76 [0206.957] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Settings\\roaming.lock.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Settings\\roaming.lock.xuy", lpFilePart=0x0) returned 0x7a [0206.957] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0206.957] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\settings\\roaming.lock"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb027d6c9, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb027d6c9, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x6734b5aa, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0206.957] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0206.957] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\settings\\roaming.lock"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Settings\\roaming.lock.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\settings\\roaming.lock.xuy")) returned 1 [0206.958] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Settings\\settings.dat", lpFilePart=0x0) returned 0x76 [0206.958] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0206.958] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x238a2b0 | out: lpFileInformation=0x238a2b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb027d6c9, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0x70bd043, ftLastAccessTime.dwHighDateTime=0x1d2d446, ftLastWriteTime.dwLowDateTime=0x70bd043, ftLastWriteTime.dwHighDateTime=0x1d2d446, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0206.958] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0206.958] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Settings\\settings.dat", lpFilePart=0x0) returned 0x76 [0206.958] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0206.958] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x238a458 | out: lpFileInformation=0x238a458*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb027d6c9, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0x70bd043, ftLastAccessTime.dwHighDateTime=0x1d2d446, ftLastWriteTime.dwLowDateTime=0x70bd043, ftLastWriteTime.dwHighDateTime=0x1d2d446, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0206.958] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0206.959] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Settings\\settings.dat", lpFilePart=0x0) returned 0x76 [0206.959] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0206.959] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\settings\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0206.959] GetFileType (hFile=0x444) returned 0x1 [0206.959] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0206.959] GetFileType (hFile=0x444) returned 0x1 [0206.962] ReadFile (in: hFile=0x444, lpBuffer=0x2189848, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x2189848*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0207.007] CloseHandle (hObject=0x444) returned 1 [0207.007] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Settings\\settings.dat", lpFilePart=0x0) returned 0x76 [0207.007] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0207.007] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\settings\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0207.007] GetFileType (hFile=0x444) returned 0x1 [0207.007] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0207.007] GetFileType (hFile=0x444) returned 0x1 [0207.007] WriteFile (in: hFile=0x444, lpBuffer=0x2187678*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x2187678*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0207.007] CloseHandle (hObject=0x444) returned 1 [0207.007] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Settings\\settings.dat", lpFilePart=0x0) returned 0x76 [0207.007] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Settings\\settings.dat.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Settings\\settings.dat.xuy", lpFilePart=0x0) returned 0x7a [0207.007] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0207.007] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb027d6c9, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0x70bd043, ftLastAccessTime.dwHighDateTime=0x1d2d446, ftLastWriteTime.dwLowDateTime=0x673bde22, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0207.008] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0207.008] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\settings\\settings.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Settings\\settings.dat.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\settings\\settings.dat.xuy")) returned 1 [0207.009] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", lpFilePart=0x0) returned 0x7b [0207.009] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0207.009] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\settings\\settings.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x2205d60 | out: lpFileInformation=0x2205d60*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6aa33640, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x6aa33640, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x6aa33640, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0207.009] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0207.009] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", lpFilePart=0x0) returned 0x7b [0207.009] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0207.009] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\settings\\settings.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x2205f18 | out: lpFileInformation=0x2205f18*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6aa33640, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x6aa33640, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x6aa33640, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0207.009] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0207.009] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", lpFilePart=0x0) returned 0x7b [0207.009] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0207.009] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\settings\\settings.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0207.010] GetFileType (hFile=0x444) returned 0x1 [0207.010] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0207.010] GetFileType (hFile=0x444) returned 0x1 [0207.010] ReadFile (in: hFile=0x444, lpBuffer=0x22083b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x22083b8*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0207.023] CloseHandle (hObject=0x444) returned 1 [0207.023] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", lpFilePart=0x0) returned 0x7b [0207.023] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0207.023] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\settings\\settings.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0207.023] GetFileType (hFile=0x444) returned 0x1 [0207.023] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0207.023] GetFileType (hFile=0x444) returned 0x1 [0207.023] WriteFile (in: hFile=0x444, lpBuffer=0x22060b0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x22060b0*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0207.023] CloseHandle (hObject=0x444) returned 1 [0207.023] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", lpFilePart=0x0) returned 0x7b [0207.023] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Settings\\settings.dat.LOG1.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Settings\\settings.dat.LOG1.xuy", lpFilePart=0x0) returned 0x7f [0207.023] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0207.023] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\settings\\settings.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6aa33640, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x6aa33640, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x673e3e24, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0207.023] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0207.024] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\settings\\settings.dat.log1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Settings\\settings.dat.LOG1.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\settings\\settings.dat.log1.xuy")) returned 1 [0207.025] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", lpFilePart=0x0) returned 0x7b [0207.025] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0207.025] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\settings\\settings.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x22848f8 | out: lpFileInformation=0x22848f8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6aa33640, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x6aa33640, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x6aa33640, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0207.025] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0207.025] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", lpFilePart=0x0) returned 0x7b [0207.025] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0207.025] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\settings\\settings.dat.log2"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0207.025] GetFileType (hFile=0x444) returned 0x1 [0207.025] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0207.025] GetFileType (hFile=0x444) returned 0x1 [0207.025] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0x0 [0207.025] CloseHandle (hObject=0x444) returned 1 [0207.045] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", lpFilePart=0x0) returned 0x7b [0207.045] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0207.045] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\settings\\settings.dat.log2"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0207.047] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb0e0) returned 1 [0207.047] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", lpFilePart=0x0) returned 0x7b [0207.047] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc200) returned 1 [0207.047] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\settings\\settings.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x3bc2e0 | out: lpFileInformation=0x3bc2e0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6aa33640, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x6aa33640, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x6aa33640, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0207.047] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1c0) returned 1 [0207.047] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbd80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", lpFilePart=0x0) returned 0x7b [0207.047] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc200) returned 1 [0207.047] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\settings\\settings.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x22fb6e0 | out: lpFileInformation=0x22fb6e0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6aa33640, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x6aa33640, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x6aa33640, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0207.048] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1c0) returned 1 [0207.048] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", lpFilePart=0x0) returned 0x7b [0207.048] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0c0) returned 1 [0207.048] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\settings\\settings.dat.log2"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0207.048] GetFileType (hFile=0x444) returned 0x1 [0207.048] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc030) returned 1 [0207.048] GetFileType (hFile=0x444) returned 0x1 [0207.048] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc258 | out: lpFileSizeHigh=0x3bc258*=0x0) returned 0x0 [0207.048] CloseHandle (hObject=0x444) returned 1 [0207.059] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", lpFilePart=0x0) returned 0x7b [0207.059] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0c0) returned 1 [0207.059] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\settings\\settings.dat.log2"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0207.061] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8b50) returned 1 [0207.061] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0207.061] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\SystemAppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\SystemAppData", lpFilePart=0x0) returned 0x6e [0207.061] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\SystemAppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\SystemAppData\\", lpFilePart=0x0) returned 0x6f [0207.061] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\SystemAppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7c70 [0207.062] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0207.062] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0207.062] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0207.062] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0207.062] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0207.062] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0207.062] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\SystemAppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\SystemAppData", lpFilePart=0x0) returned 0x6e [0207.062] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\SystemAppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\SystemAppData\\", lpFilePart=0x0) returned 0x6f [0207.062] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\SystemAppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d8090 [0207.062] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0207.063] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0207.063] FindClose (in: hFindFile=0x5d8090 | out: hFindFile=0x5d8090) returned 1 [0207.063] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0207.063] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0207.063] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0207.063] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\TempState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\TempState", lpFilePart=0x0) returned 0x6a [0207.063] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\TempState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\TempState\\", lpFilePart=0x0) returned 0x6b [0207.063] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\TempState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7550 [0207.063] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0207.063] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0207.063] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0207.063] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0207.063] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0207.064] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0207.064] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\TempState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\TempState", lpFilePart=0x0) returned 0x6a [0207.064] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\TempState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\TempState\\", lpFilePart=0x0) returned 0x6b [0207.064] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\TempState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7670 [0207.064] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0207.064] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0207.064] FindClose (in: hFindFile=0x5d7670 | out: hFindFile=0x5d7670) returned 1 [0207.064] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0207.064] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0207.064] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0207.064] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy", lpFilePart=0x0) returned 0x63 [0207.064] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\", lpFilePart=0x0) returned 0x64 [0207.064] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d79d0 [0207.064] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0207.065] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0207.065] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0207.065] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0207.065] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0207.065] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0207.065] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0207.065] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0207.065] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0207.066] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0207.066] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0207.066] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0207.066] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0207.066] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0207.066] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0207.066] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy", lpFilePart=0x0) returned 0x63 [0207.066] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\", lpFilePart=0x0) returned 0x64 [0207.066] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d78b0 [0207.066] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0207.066] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0207.066] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0207.067] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0207.067] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0207.067] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0207.067] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0207.067] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0207.067] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0207.067] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0207.067] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0207.067] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0207.067] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0207.067] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0207.067] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0207.067] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC", lpFilePart=0x0) returned 0x66 [0207.067] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\", lpFilePart=0x0) returned 0x67 [0207.068] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7fd0 [0207.068] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0207.068] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0207.068] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0207.068] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0207.068] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0207.068] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0207.069] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0207.069] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0207.069] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0207.069] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0207.069] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0207.069] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0207.069] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC", lpFilePart=0x0) returned 0x66 [0207.069] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\", lpFilePart=0x0) returned 0x67 [0207.069] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7a90 [0207.069] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0207.069] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0207.069] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0207.069] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0207.070] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0207.070] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0207.070] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0207.070] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0207.070] FindClose (in: hFindFile=0x5d7a90 | out: hFindFile=0x5d7a90) returned 1 [0207.070] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0207.070] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0207.070] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0207.070] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\BackgroundTransferApi", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\BackgroundTransferApi", lpFilePart=0x0) returned 0x7c [0207.070] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\BackgroundTransferApi\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\BackgroundTransferApi\\", lpFilePart=0x0) returned 0x7d [0207.070] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\BackgroundTransferApi\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7c70 [0207.070] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0207.071] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0207.071] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0207.071] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\BackgroundTransferApi", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\BackgroundTransferApi", lpFilePart=0x0) returned 0x7c [0207.071] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\BackgroundTransferApi\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\BackgroundTransferApi\\", lpFilePart=0x0) returned 0x7d [0207.071] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\BackgroundTransferApi\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7c70 [0207.071] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0207.071] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0207.071] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0207.071] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetCache", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetCache", lpFilePart=0x0) returned 0x70 [0207.071] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetCache\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetCache\\", lpFilePart=0x0) returned 0x71 [0207.071] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetCache\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7af0 [0207.072] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0207.073] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0207.073] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0207.073] FindClose (in: hFindFile=0x5d7af0 | out: hFindFile=0x5d7af0) returned 1 [0207.074] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetCache", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetCache", lpFilePart=0x0) returned 0x70 [0207.074] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetCache\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetCache\\", lpFilePart=0x0) returned 0x71 [0207.074] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetCache\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d79d0 [0207.075] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0207.075] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0207.075] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0207.075] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0207.076] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetCache\\container.dat", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetCache\\container.dat", lpFilePart=0x0) returned 0x7e [0207.076] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\inetcache\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x2384d28 | out: lpFileInformation=0x2384d28*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xc60afa72, ftCreationTime.dwHighDateTime=0x1d2d40c, ftLastAccessTime.dwLowDateTime=0xc60afa72, ftLastAccessTime.dwHighDateTime=0x1d2d40c, ftLastWriteTime.dwLowDateTime=0xc60afa72, ftLastWriteTime.dwHighDateTime=0x1d2d40c, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0207.077] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetCache\\container.dat", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetCache\\container.dat", lpFilePart=0x0) returned 0x7e [0207.077] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\inetcache\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0207.077] GetFileType (hFile=0x444) returned 0x1 [0207.077] GetFileType (hFile=0x444) returned 0x1 [0207.077] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x0 [0207.077] CloseHandle (hObject=0x444) returned 1 [0207.128] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetCache\\container.dat", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetCache\\container.dat", lpFilePart=0x0) returned 0x7e [0207.128] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\inetcache\\container.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0207.129] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb070) returned 1 [0207.130] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetCache\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbcf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetCache\\container.dat", lpFilePart=0x0) returned 0x7e [0207.130] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0207.130] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\inetcache\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x3bc270 | out: lpFileInformation=0x3bc270*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xc60afa72, ftCreationTime.dwHighDateTime=0x1d2d40c, ftLastAccessTime.dwLowDateTime=0xc60afa72, ftLastAccessTime.dwHighDateTime=0x1d2d40c, ftLastWriteTime.dwLowDateTime=0xc60afa72, ftLastWriteTime.dwHighDateTime=0x1d2d40c, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0207.130] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc150) returned 1 [0207.130] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetCache\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbd10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetCache\\container.dat", lpFilePart=0x0) returned 0x7e [0207.130] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0207.130] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\inetcache\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x21fa040 | out: lpFileInformation=0x21fa040*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xc60afa72, ftCreationTime.dwHighDateTime=0x1d2d40c, ftLastAccessTime.dwLowDateTime=0xc60afa72, ftLastAccessTime.dwHighDateTime=0x1d2d40c, ftLastWriteTime.dwLowDateTime=0xc60afa72, ftLastWriteTime.dwHighDateTime=0x1d2d40c, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0207.130] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc150) returned 1 [0207.130] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetCache\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetCache\\container.dat", lpFilePart=0x0) returned 0x7e [0207.130] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc050) returned 1 [0207.130] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\inetcache\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0207.130] GetFileType (hFile=0x444) returned 0x1 [0207.130] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbfc0) returned 1 [0207.130] GetFileType (hFile=0x444) returned 0x1 [0207.130] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc1e8 | out: lpFileSizeHigh=0x3bc1e8*=0x0) returned 0x0 [0207.130] CloseHandle (hObject=0x444) returned 1 [0207.141] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetCache\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetCache\\container.dat", lpFilePart=0x0) returned 0x7e [0207.141] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc050) returned 1 [0207.141] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\inetcache\\container.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0207.143] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8ae0) returned 1 [0207.143] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0207.143] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetCookies", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetCookies", lpFilePart=0x0) returned 0x72 [0207.144] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetCookies\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetCookies\\", lpFilePart=0x0) returned 0x73 [0207.144] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetCookies\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d78b0 [0207.144] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0207.144] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0207.144] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0207.144] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0207.144] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0207.145] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0207.145] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0207.145] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetCookies", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetCookies", lpFilePart=0x0) returned 0x72 [0207.145] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetCookies\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetCookies\\", lpFilePart=0x0) returned 0x73 [0207.145] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetCookies\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7f10 [0207.145] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0207.145] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0207.145] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0207.145] FindClose (in: hFindFile=0x5d7f10 | out: hFindFile=0x5d7f10) returned 1 [0207.145] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0207.145] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0207.145] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetCookies\\container.dat", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetCookies\\container.dat", lpFilePart=0x0) returned 0x80 [0207.145] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0207.146] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetCookies\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\inetcookies\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x2273758 | out: lpFileInformation=0x2273758*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xc6122008, ftCreationTime.dwHighDateTime=0x1d2d40c, ftLastAccessTime.dwLowDateTime=0xc6122008, ftLastAccessTime.dwHighDateTime=0x1d2d40c, ftLastWriteTime.dwLowDateTime=0xc6122008, ftLastWriteTime.dwHighDateTime=0x1d2d40c, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0207.146] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0207.146] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetCookies\\container.dat", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetCookies\\container.dat", lpFilePart=0x0) returned 0x80 [0207.146] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0207.146] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetCookies\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\inetcookies\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0207.146] GetFileType (hFile=0x444) returned 0x1 [0207.146] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0207.146] GetFileType (hFile=0x444) returned 0x1 [0207.146] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x0 [0207.146] CloseHandle (hObject=0x444) returned 1 [0207.159] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetCookies\\container.dat", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetCookies\\container.dat", lpFilePart=0x0) returned 0x80 [0207.159] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0207.159] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetCookies\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\inetcookies\\container.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0207.160] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb070) returned 1 [0207.161] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetCookies\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbcf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetCookies\\container.dat", lpFilePart=0x0) returned 0x80 [0207.161] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0207.161] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetCookies\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\inetcookies\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x3bc270 | out: lpFileInformation=0x3bc270*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xc6122008, ftCreationTime.dwHighDateTime=0x1d2d40c, ftLastAccessTime.dwLowDateTime=0xc6122008, ftLastAccessTime.dwHighDateTime=0x1d2d40c, ftLastWriteTime.dwLowDateTime=0xc6122008, ftLastWriteTime.dwHighDateTime=0x1d2d40c, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0207.161] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc150) returned 1 [0207.161] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetCookies\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbd10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetCookies\\container.dat", lpFilePart=0x0) returned 0x80 [0207.161] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0207.161] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetCookies\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\inetcookies\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x22ea578 | out: lpFileInformation=0x22ea578*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xc6122008, ftCreationTime.dwHighDateTime=0x1d2d40c, ftLastAccessTime.dwLowDateTime=0xc6122008, ftLastAccessTime.dwHighDateTime=0x1d2d40c, ftLastWriteTime.dwLowDateTime=0xc6122008, ftLastWriteTime.dwHighDateTime=0x1d2d40c, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0207.161] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc150) returned 1 [0207.161] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetCookies\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetCookies\\container.dat", lpFilePart=0x0) returned 0x80 [0207.161] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc050) returned 1 [0207.161] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetCookies\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\inetcookies\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0207.161] GetFileType (hFile=0x444) returned 0x1 [0207.162] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbfc0) returned 1 [0207.162] GetFileType (hFile=0x444) returned 0x1 [0207.162] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc1e8 | out: lpFileSizeHigh=0x3bc1e8*=0x0) returned 0x0 [0207.162] CloseHandle (hObject=0x444) returned 1 [0207.180] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetCookies\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetCookies\\container.dat", lpFilePart=0x0) returned 0x80 [0207.180] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc050) returned 1 [0207.180] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetCookies\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\inetcookies\\container.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0207.181] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8ae0) returned 1 [0207.182] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0207.182] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetHistory", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetHistory", lpFilePart=0x0) returned 0x72 [0207.182] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetHistory\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetHistory\\", lpFilePart=0x0) returned 0x73 [0207.182] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetHistory\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7a30 [0207.182] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0207.183] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0207.183] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0207.183] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0207.183] FindClose (in: hFindFile=0x5d7a30 | out: hFindFile=0x5d7a30) returned 1 [0207.183] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0207.183] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0207.183] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0207.183] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetHistory", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetHistory", lpFilePart=0x0) returned 0x72 [0207.183] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetHistory\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetHistory\\", lpFilePart=0x0) returned 0x73 [0207.183] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetHistory\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7c70 [0207.183] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0207.183] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0207.184] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0207.184] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0207.184] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0207.184] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0207.184] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0207.184] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0207.184] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetHistory\\BackgroundTransferApi", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetHistory\\BackgroundTransferApi", lpFilePart=0x0) returned 0x88 [0207.184] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetHistory\\BackgroundTransferApi\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetHistory\\BackgroundTransferApi\\", lpFilePart=0x0) returned 0x89 [0207.184] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetHistory\\BackgroundTransferApi\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d78b0 [0207.184] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0207.184] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0207.185] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0207.185] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0207.185] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0207.185] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0207.185] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0207.185] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetHistory\\BackgroundTransferApi", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetHistory\\BackgroundTransferApi", lpFilePart=0x0) returned 0x88 [0207.185] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetHistory\\BackgroundTransferApi\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetHistory\\BackgroundTransferApi\\", lpFilePart=0x0) returned 0x89 [0207.185] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetHistory\\BackgroundTransferApi\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d7f10 [0207.185] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0207.185] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0207.185] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0207.185] FindClose (in: hFindFile=0x5d7f10 | out: hFindFile=0x5d7f10) returned 1 [0207.185] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0207.185] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0207.185] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetHistory\\BackgroundTransferApi\\container.dat", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetHistory\\BackgroundTransferApi\\container.dat", lpFilePart=0x0) returned 0x96 [0207.185] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0207.186] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetHistory\\BackgroundTransferApi\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\inethistory\\backgroundtransferapi\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x2367298 | out: lpFileInformation=0x2367298*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xc6ed78de, ftCreationTime.dwHighDateTime=0x1d2d40c, ftLastAccessTime.dwLowDateTime=0xc6ed78de, ftLastAccessTime.dwHighDateTime=0x1d2d40c, ftLastWriteTime.dwLowDateTime=0xc6ed78de, ftLastWriteTime.dwHighDateTime=0x1d2d40c, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0207.186] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0207.186] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetHistory\\BackgroundTransferApi\\container.dat", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetHistory\\BackgroundTransferApi\\container.dat", lpFilePart=0x0) returned 0x96 [0207.186] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0207.186] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetHistory\\BackgroundTransferApi\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\inethistory\\backgroundtransferapi\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0207.186] GetFileType (hFile=0x444) returned 0x1 [0207.186] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0207.186] GetFileType (hFile=0x444) returned 0x1 [0207.186] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be708 | out: lpFileSizeHigh=0x3be708*=0x0) returned 0x0 [0207.186] CloseHandle (hObject=0x444) returned 1 [0207.240] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetHistory\\BackgroundTransferApi\\container.dat", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetHistory\\BackgroundTransferApi\\container.dat", lpFilePart=0x0) returned 0x96 [0207.240] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0207.240] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetHistory\\BackgroundTransferApi\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\inethistory\\backgroundtransferapi\\container.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0207.241] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb000) returned 1 [0207.242] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetHistory\\BackgroundTransferApi\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbc80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetHistory\\BackgroundTransferApi\\container.dat", lpFilePart=0x0) returned 0x96 [0207.242] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc120) returned 1 [0207.242] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetHistory\\BackgroundTransferApi\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\inethistory\\backgroundtransferapi\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x3bc200 | out: lpFileInformation=0x3bc200*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xc6ed78de, ftCreationTime.dwHighDateTime=0x1d2d40c, ftLastAccessTime.dwLowDateTime=0xc6ed78de, ftLastAccessTime.dwHighDateTime=0x1d2d40c, ftLastWriteTime.dwLowDateTime=0xc6ed78de, ftLastWriteTime.dwHighDateTime=0x1d2d40c, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0207.242] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc0e0) returned 1 [0207.242] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetHistory\\BackgroundTransferApi\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetHistory\\BackgroundTransferApi\\container.dat", lpFilePart=0x0) returned 0x96 [0207.242] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc120) returned 1 [0207.242] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetHistory\\BackgroundTransferApi\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\inethistory\\backgroundtransferapi\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x21de690 | out: lpFileInformation=0x21de690*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xc6ed78de, ftCreationTime.dwHighDateTime=0x1d2d40c, ftLastAccessTime.dwLowDateTime=0xc6ed78de, ftLastAccessTime.dwHighDateTime=0x1d2d40c, ftLastWriteTime.dwLowDateTime=0xc6ed78de, ftLastWriteTime.dwHighDateTime=0x1d2d40c, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0207.242] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc0e0) returned 1 [0207.242] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetHistory\\BackgroundTransferApi\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbb00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetHistory\\BackgroundTransferApi\\container.dat", lpFilePart=0x0) returned 0x96 [0207.242] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbfe0) returned 1 [0207.242] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetHistory\\BackgroundTransferApi\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\inethistory\\backgroundtransferapi\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0207.242] GetFileType (hFile=0x444) returned 0x1 [0207.242] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbf50) returned 1 [0207.242] GetFileType (hFile=0x444) returned 0x1 [0207.242] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc178 | out: lpFileSizeHigh=0x3bc178*=0x0) returned 0x0 [0207.242] CloseHandle (hObject=0x444) returned 1 [0207.254] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetHistory\\BackgroundTransferApi\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbb00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetHistory\\BackgroundTransferApi\\container.dat", lpFilePart=0x0) returned 0x96 [0207.254] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbfe0) returned 1 [0207.254] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetHistory\\BackgroundTransferApi\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\inethistory\\backgroundtransferapi\\container.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0207.255] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8a70) returned 1 [0207.256] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0207.256] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetHistory\\BackgroundTransferApiGroup", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetHistory\\BackgroundTransferApiGroup", lpFilePart=0x0) returned 0x8d [0207.256] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetHistory\\BackgroundTransferApiGroup\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetHistory\\BackgroundTransferApiGroup\\", lpFilePart=0x0) returned 0x8e [0207.256] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetHistory\\BackgroundTransferApiGroup\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d7d90 [0207.256] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0207.256] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0207.257] FindClose (in: hFindFile=0x5d7d90 | out: hFindFile=0x5d7d90) returned 1 [0207.257] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0207.257] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0207.257] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0207.257] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetHistory\\BackgroundTransferApiGroup", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetHistory\\BackgroundTransferApiGroup", lpFilePart=0x0) returned 0x8d [0207.257] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetHistory\\BackgroundTransferApiGroup\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetHistory\\BackgroundTransferApiGroup\\", lpFilePart=0x0) returned 0x8e [0207.257] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetHistory\\BackgroundTransferApiGroup\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d79d0 [0207.257] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0207.257] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0207.257] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0207.257] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0207.257] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0207.257] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0207.257] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft", lpFilePart=0x0) returned 0x70 [0207.257] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\", lpFilePart=0x0) returned 0x71 [0207.257] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d79d0 [0207.258] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0207.258] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0207.258] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0207.258] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0207.258] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0207.258] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0207.258] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0207.258] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0207.258] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft", lpFilePart=0x0) returned 0x70 [0207.258] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\", lpFilePart=0x0) returned 0x71 [0207.258] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7d30 [0207.259] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0207.259] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0207.259] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0207.259] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0207.259] FindClose (in: hFindFile=0x5d7d30 | out: hFindFile=0x5d7d30) returned 1 [0207.259] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0207.259] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0207.259] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0207.259] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache", lpFilePart=0x0) returned 0x81 [0207.259] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\", lpFilePart=0x0) returned 0x82 [0207.259] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d7cd0 [0207.259] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0207.260] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0207.260] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0207.260] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0207.260] FindClose (in: hFindFile=0x5d7cd0 | out: hFindFile=0x5d7cd0) returned 1 [0207.260] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0207.260] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0207.260] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0207.260] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache", lpFilePart=0x0) returned 0x81 [0207.260] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\", lpFilePart=0x0) returned 0x82 [0207.260] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d7d30 [0207.260] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0207.261] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0207.261] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0207.261] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0207.261] FindClose (in: hFindFile=0x5d7d30 | out: hFindFile=0x5d7d30) returned 1 [0207.261] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0207.261] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0207.261] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0207.261] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content", lpFilePart=0x0) returned 0x89 [0207.261] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\", lpFilePart=0x0) returned 0x8a [0207.261] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d78b0 [0207.270] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0207.270] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0207.270] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0207.270] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0207.271] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0207.271] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0207.271] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0207.271] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0207.271] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0207.272] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0207.272] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0207.272] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0207.272] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content", lpFilePart=0x0) returned 0x89 [0207.272] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\", lpFilePart=0x0) returned 0x8a [0207.272] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d79d0 [0207.273] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0207.273] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0207.273] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0207.273] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0207.273] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0207.273] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0207.273] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0207.273] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0207.274] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0207.274] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0207.274] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0207.274] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", lpFilePart=0x0) returned 0xcb [0207.274] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0207.274] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\40e450f7ce13419a2ccc2a5445035a0a_06f02b1f13ab4b11b8fc669bde565af1"), fInfoLevelId=0x0, lpFileInformation=0x2263838 | out: lpFileInformation=0x2263838*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xc63f6e53, ftCreationTime.dwHighDateTime=0x1d2d40c, ftLastAccessTime.dwLowDateTime=0xc63f6e53, ftLastAccessTime.dwHighDateTime=0x1d2d40c, ftLastWriteTime.dwLowDateTime=0xc648f76f, ftLastWriteTime.dwHighDateTime=0x1d2d40c, nFileSizeHigh=0x0, nFileSizeLow=0xb68)) returned 1 [0207.275] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0207.275] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", lpFilePart=0x0) returned 0xcb [0207.275] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0207.275] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\40e450f7ce13419a2ccc2a5445035a0a_06f02b1f13ab4b11b8fc669bde565af1"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0207.275] GetFileType (hFile=0x444) returned 0x1 [0207.275] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0207.275] GetFileType (hFile=0x444) returned 0x1 [0207.275] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xb68 [0207.275] ReadFile (in: hFile=0x444, lpBuffer=0x2264928, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x2264928*, lpNumberOfBytesRead=0x3be5c8*=0xb68, lpOverlapped=0x0) returned 1 [0207.294] CloseHandle (hObject=0x444) returned 1 [0207.349] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", lpFilePart=0x0) returned 0xcb [0207.349] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0207.349] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\40e450f7ce13419a2ccc2a5445035a0a_06f02b1f13ab4b11b8fc669bde565af1"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0207.350] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3baf90) returned 1 [0207.351] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", nBufferLength=0x105, lpBuffer=0x3bbc10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", lpFilePart=0x0) returned 0xcb [0207.351] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0b0) returned 1 [0207.351] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\40e450f7ce13419a2ccc2a5445035a0a_06f02b1f13ab4b11b8fc669bde565af1"), fInfoLevelId=0x0, lpFileInformation=0x3bc190 | out: lpFileInformation=0x3bc190*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xc63f6e53, ftCreationTime.dwHighDateTime=0x1d2d40c, ftLastAccessTime.dwLowDateTime=0xc63f6e53, ftLastAccessTime.dwHighDateTime=0x1d2d40c, ftLastWriteTime.dwLowDateTime=0xc648f76f, ftLastWriteTime.dwHighDateTime=0x1d2d40c, nFileSizeHigh=0x0, nFileSizeLow=0xb68)) returned 1 [0207.351] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc070) returned 1 [0207.351] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", nBufferLength=0x105, lpBuffer=0x3bbc30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", lpFilePart=0x0) returned 0xcb [0207.351] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0b0) returned 1 [0207.351] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\40e450f7ce13419a2ccc2a5445035a0a_06f02b1f13ab4b11b8fc669bde565af1"), fInfoLevelId=0x0, lpFileInformation=0x22dfde8 | out: lpFileInformation=0x22dfde8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xc63f6e53, ftCreationTime.dwHighDateTime=0x1d2d40c, ftLastAccessTime.dwLowDateTime=0xc63f6e53, ftLastAccessTime.dwHighDateTime=0x1d2d40c, ftLastWriteTime.dwLowDateTime=0xc648f76f, ftLastWriteTime.dwHighDateTime=0x1d2d40c, nFileSizeHigh=0x0, nFileSizeLow=0xb68)) returned 1 [0207.351] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc070) returned 1 [0207.351] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", nBufferLength=0x105, lpBuffer=0x3bba90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", lpFilePart=0x0) returned 0xcb [0207.351] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf70) returned 1 [0207.351] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\40e450f7ce13419a2ccc2a5445035a0a_06f02b1f13ab4b11b8fc669bde565af1"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0207.351] GetFileType (hFile=0x444) returned 0x1 [0207.351] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbee0) returned 1 [0207.351] GetFileType (hFile=0x444) returned 0x1 [0207.351] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc108 | out: lpFileSizeHigh=0x3bc108*=0x0) returned 0xb68 [0207.352] ReadFile (in: hFile=0x444, lpBuffer=0x22e0ed8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bc038, lpOverlapped=0x0 | out: lpBuffer=0x22e0ed8*, lpNumberOfBytesRead=0x3bc038*=0xb68, lpOverlapped=0x0) returned 1 [0207.352] CloseHandle (hObject=0x444) returned 1 [0207.362] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", nBufferLength=0x105, lpBuffer=0x3bba90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", lpFilePart=0x0) returned 0xcb [0207.362] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf70) returned 1 [0207.362] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\40e450f7ce13419a2ccc2a5445035a0a_06f02b1f13ab4b11b8fc669bde565af1"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0207.363] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8a00) returned 1 [0207.364] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", lpFilePart=0x0) returned 0xaa [0207.364] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0207.364] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\57c8edb95df3f0ad4ee2dc2b8cfd4157"), fInfoLevelId=0x0, lpFileInformation=0x235c1e8 | out: lpFileInformation=0x235c1e8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xc648f76f, ftCreationTime.dwHighDateTime=0x1d2d40c, ftLastAccessTime.dwLowDateTime=0xc648f76f, ftLastAccessTime.dwHighDateTime=0x1d2d40c, ftLastWriteTime.dwLowDateTime=0xc64b58c9, ftLastWriteTime.dwHighDateTime=0x1d2d40c, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0207.364] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0207.364] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", lpFilePart=0x0) returned 0xaa [0207.364] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0207.364] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\57c8edb95df3f0ad4ee2dc2b8cfd4157"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0207.364] GetFileType (hFile=0x444) returned 0x1 [0207.364] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0207.364] GetFileType (hFile=0x444) returned 0x1 [0207.364] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x0 [0207.364] CloseHandle (hObject=0x444) returned 1 [0207.404] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", lpFilePart=0x0) returned 0xaa [0207.404] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0207.404] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\57c8edb95df3f0ad4ee2dc2b8cfd4157"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0207.406] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3baf90) returned 1 [0207.406] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", nBufferLength=0x105, lpBuffer=0x3bbc10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", lpFilePart=0x0) returned 0xaa [0207.406] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0b0) returned 1 [0207.406] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\57c8edb95df3f0ad4ee2dc2b8cfd4157"), fInfoLevelId=0x0, lpFileInformation=0x3bc190 | out: lpFileInformation=0x3bc190*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xc648f76f, ftCreationTime.dwHighDateTime=0x1d2d40c, ftLastAccessTime.dwLowDateTime=0xc648f76f, ftLastAccessTime.dwHighDateTime=0x1d2d40c, ftLastWriteTime.dwLowDateTime=0xc64b58c9, ftLastWriteTime.dwHighDateTime=0x1d2d40c, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0207.407] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc070) returned 1 [0207.407] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", nBufferLength=0x105, lpBuffer=0x3bbc30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", lpFilePart=0x0) returned 0xaa [0207.407] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0b0) returned 1 [0207.407] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\57c8edb95df3f0ad4ee2dc2b8cfd4157"), fInfoLevelId=0x0, lpFileInformation=0x21d3bc0 | out: lpFileInformation=0x21d3bc0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xc648f76f, ftCreationTime.dwHighDateTime=0x1d2d40c, ftLastAccessTime.dwLowDateTime=0xc648f76f, ftLastAccessTime.dwHighDateTime=0x1d2d40c, ftLastWriteTime.dwLowDateTime=0xc64b58c9, ftLastWriteTime.dwHighDateTime=0x1d2d40c, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0207.407] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc070) returned 1 [0207.407] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", nBufferLength=0x105, lpBuffer=0x3bba90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", lpFilePart=0x0) returned 0xaa [0207.407] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf70) returned 1 [0207.407] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\57c8edb95df3f0ad4ee2dc2b8cfd4157"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0207.407] GetFileType (hFile=0x444) returned 0x1 [0207.407] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbee0) returned 1 [0207.407] GetFileType (hFile=0x444) returned 0x1 [0207.407] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc108 | out: lpFileSizeHigh=0x3bc108*=0x0) returned 0x0 [0207.407] CloseHandle (hObject=0x444) returned 1 [0207.417] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", nBufferLength=0x105, lpBuffer=0x3bba90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", lpFilePart=0x0) returned 0xaa [0207.417] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf70) returned 1 [0207.417] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\57c8edb95df3f0ad4ee2dc2b8cfd4157"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0207.418] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8a00) returned 1 [0207.419] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506", lpFilePart=0x0) returned 0xaa [0207.419] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0207.419] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\77ec63bda74bd0d0e0426dc8f8008506"), fInfoLevelId=0x0, lpFileInformation=0x224aa78 | out: lpFileInformation=0x224aa78*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xc648f76f, ftCreationTime.dwHighDateTime=0x1d2d40c, ftLastAccessTime.dwLowDateTime=0xc648f76f, ftLastAccessTime.dwHighDateTime=0x1d2d40c, ftLastWriteTime.dwLowDateTime=0xc648f76f, ftLastWriteTime.dwHighDateTime=0x1d2d40c, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0207.426] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0207.426] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506", lpFilePart=0x0) returned 0xaa [0207.426] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0207.426] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\77ec63bda74bd0d0e0426dc8f8008506"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0207.427] GetFileType (hFile=0x444) returned 0x1 [0207.427] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0207.427] GetFileType (hFile=0x444) returned 0x1 [0207.427] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x0 [0207.427] CloseHandle (hObject=0x444) returned 1 [0207.437] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506", lpFilePart=0x0) returned 0xaa [0207.437] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0207.437] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\77ec63bda74bd0d0e0426dc8f8008506"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0207.440] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3baf90) returned 1 [0207.440] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506", nBufferLength=0x105, lpBuffer=0x3bbc10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506", lpFilePart=0x0) returned 0xaa [0207.441] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0b0) returned 1 [0207.441] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\77ec63bda74bd0d0e0426dc8f8008506"), fInfoLevelId=0x0, lpFileInformation=0x3bc190 | out: lpFileInformation=0x3bc190*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xc648f76f, ftCreationTime.dwHighDateTime=0x1d2d40c, ftLastAccessTime.dwLowDateTime=0xc648f76f, ftLastAccessTime.dwHighDateTime=0x1d2d40c, ftLastWriteTime.dwLowDateTime=0xc648f76f, ftLastWriteTime.dwHighDateTime=0x1d2d40c, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0207.441] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc070) returned 1 [0207.441] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506", nBufferLength=0x105, lpBuffer=0x3bbc30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506", lpFilePart=0x0) returned 0xaa [0207.441] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0b0) returned 1 [0207.441] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\77ec63bda74bd0d0e0426dc8f8008506"), fInfoLevelId=0x0, lpFileInformation=0x22c1aa0 | out: lpFileInformation=0x22c1aa0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xc648f76f, ftCreationTime.dwHighDateTime=0x1d2d40c, ftLastAccessTime.dwLowDateTime=0xc648f76f, ftLastAccessTime.dwHighDateTime=0x1d2d40c, ftLastWriteTime.dwLowDateTime=0xc648f76f, ftLastWriteTime.dwHighDateTime=0x1d2d40c, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0207.441] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc070) returned 1 [0207.441] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506", nBufferLength=0x105, lpBuffer=0x3bba90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506", lpFilePart=0x0) returned 0xaa [0207.441] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf70) returned 1 [0207.441] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\77ec63bda74bd0d0e0426dc8f8008506"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0207.441] GetFileType (hFile=0x444) returned 0x1 [0207.441] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbee0) returned 1 [0207.441] GetFileType (hFile=0x444) returned 0x1 [0207.441] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc108 | out: lpFileSizeHigh=0x3bc108*=0x0) returned 0x0 [0207.441] CloseHandle (hObject=0x444) returned 1 [0207.451] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506", nBufferLength=0x105, lpBuffer=0x3bba90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506", lpFilePart=0x0) returned 0xaa [0207.451] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf70) returned 1 [0207.451] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\77ec63bda74bd0d0e0426dc8f8008506"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0207.453] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8a00) returned 1 [0207.454] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\8828F39C7C0CE9A14B25C7EB321181BA_8C550960E440B9C3B93A6A0AA915C9BE", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\8828F39C7C0CE9A14B25C7EB321181BA_8C550960E440B9C3B93A6A0AA915C9BE", lpFilePart=0x0) returned 0xcb [0207.454] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0207.454] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\8828F39C7C0CE9A14B25C7EB321181BA_8C550960E440B9C3B93A6A0AA915C9BE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\8828f39c7c0ce9a14b25c7eb321181ba_8c550960e440b9c3b93a6a0aa915c9be"), fInfoLevelId=0x0, lpFileInformation=0x2338958 | out: lpFileInformation=0x2338958*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xa48ace9c, ftCreationTime.dwHighDateTime=0x1d2fadb, ftLastAccessTime.dwLowDateTime=0xa48ace9c, ftLastAccessTime.dwHighDateTime=0x1d2fadb, ftLastWriteTime.dwLowDateTime=0xa48ace9c, ftLastWriteTime.dwHighDateTime=0x1d2fadb, nFileSizeHigh=0x0, nFileSizeLow=0x6e3)) returned 1 [0207.454] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0207.454] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\8828F39C7C0CE9A14B25C7EB321181BA_8C550960E440B9C3B93A6A0AA915C9BE", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\8828F39C7C0CE9A14B25C7EB321181BA_8C550960E440B9C3B93A6A0AA915C9BE", lpFilePart=0x0) returned 0xcb [0207.454] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0207.454] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\8828F39C7C0CE9A14B25C7EB321181BA_8C550960E440B9C3B93A6A0AA915C9BE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\8828f39c7c0ce9a14b25c7eb321181ba_8c550960e440b9c3b93a6a0aa915c9be"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0207.454] GetFileType (hFile=0x444) returned 0x1 [0207.454] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0207.454] GetFileType (hFile=0x444) returned 0x1 [0207.454] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x6e3 [0207.454] ReadFile (in: hFile=0x444, lpBuffer=0x23395c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x23395c8*, lpNumberOfBytesRead=0x3be5c8*=0x6e3, lpOverlapped=0x0) returned 1 [0207.473] CloseHandle (hObject=0x444) returned 1 [0207.511] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\8828F39C7C0CE9A14B25C7EB321181BA_8C550960E440B9C3B93A6A0AA915C9BE", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\8828F39C7C0CE9A14B25C7EB321181BA_8C550960E440B9C3B93A6A0AA915C9BE", lpFilePart=0x0) returned 0xcb [0207.511] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0207.511] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\8828F39C7C0CE9A14B25C7EB321181BA_8C550960E440B9C3B93A6A0AA915C9BE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\8828f39c7c0ce9a14b25c7eb321181ba_8c550960e440b9c3b93a6a0aa915c9be"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0207.512] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3baf90) returned 1 [0207.513] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\8828F39C7C0CE9A14B25C7EB321181BA_8C550960E440B9C3B93A6A0AA915C9BE", nBufferLength=0x105, lpBuffer=0x3bbc10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\8828F39C7C0CE9A14B25C7EB321181BA_8C550960E440B9C3B93A6A0AA915C9BE", lpFilePart=0x0) returned 0xcb [0207.513] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0b0) returned 1 [0207.513] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\8828F39C7C0CE9A14B25C7EB321181BA_8C550960E440B9C3B93A6A0AA915C9BE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\8828f39c7c0ce9a14b25c7eb321181ba_8c550960e440b9c3b93a6a0aa915c9be"), fInfoLevelId=0x0, lpFileInformation=0x3bc190 | out: lpFileInformation=0x3bc190*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xa48ace9c, ftCreationTime.dwHighDateTime=0x1d2fadb, ftLastAccessTime.dwLowDateTime=0xa48ace9c, ftLastAccessTime.dwHighDateTime=0x1d2fadb, ftLastWriteTime.dwLowDateTime=0xa48ace9c, ftLastWriteTime.dwHighDateTime=0x1d2fadb, nFileSizeHigh=0x0, nFileSizeLow=0x6e3)) returned 1 [0207.513] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc070) returned 1 [0207.513] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\8828F39C7C0CE9A14B25C7EB321181BA_8C550960E440B9C3B93A6A0AA915C9BE", nBufferLength=0x105, lpBuffer=0x3bbc30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\8828F39C7C0CE9A14B25C7EB321181BA_8C550960E440B9C3B93A6A0AA915C9BE", lpFilePart=0x0) returned 0xcb [0207.513] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0b0) returned 1 [0207.513] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\8828F39C7C0CE9A14B25C7EB321181BA_8C550960E440B9C3B93A6A0AA915C9BE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\8828f39c7c0ce9a14b25c7eb321181ba_8c550960e440b9c3b93a6a0aa915c9be"), fInfoLevelId=0x0, lpFileInformation=0x21b3978 | out: lpFileInformation=0x21b3978*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xa48ace9c, ftCreationTime.dwHighDateTime=0x1d2fadb, ftLastAccessTime.dwLowDateTime=0xa48ace9c, ftLastAccessTime.dwHighDateTime=0x1d2fadb, ftLastWriteTime.dwLowDateTime=0xa48ace9c, ftLastWriteTime.dwHighDateTime=0x1d2fadb, nFileSizeHigh=0x0, nFileSizeLow=0x6e3)) returned 1 [0207.513] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc070) returned 1 [0207.513] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\8828F39C7C0CE9A14B25C7EB321181BA_8C550960E440B9C3B93A6A0AA915C9BE", nBufferLength=0x105, lpBuffer=0x3bba90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\8828F39C7C0CE9A14B25C7EB321181BA_8C550960E440B9C3B93A6A0AA915C9BE", lpFilePart=0x0) returned 0xcb [0207.513] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf70) returned 1 [0207.513] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\8828F39C7C0CE9A14B25C7EB321181BA_8C550960E440B9C3B93A6A0AA915C9BE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\8828f39c7c0ce9a14b25c7eb321181ba_8c550960e440b9c3b93a6a0aa915c9be"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0207.513] GetFileType (hFile=0x444) returned 0x1 [0207.513] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbee0) returned 1 [0207.513] GetFileType (hFile=0x444) returned 0x1 [0207.513] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc108 | out: lpFileSizeHigh=0x3bc108*=0x0) returned 0x6e3 [0207.513] ReadFile (in: hFile=0x444, lpBuffer=0x21b45e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bc038, lpOverlapped=0x0 | out: lpBuffer=0x21b45e8*, lpNumberOfBytesRead=0x3bc038*=0x6e3, lpOverlapped=0x0) returned 1 [0207.514] CloseHandle (hObject=0x444) returned 1 [0207.524] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\8828F39C7C0CE9A14B25C7EB321181BA_8C550960E440B9C3B93A6A0AA915C9BE", nBufferLength=0x105, lpBuffer=0x3bba90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\8828F39C7C0CE9A14B25C7EB321181BA_8C550960E440B9C3B93A6A0AA915C9BE", lpFilePart=0x0) returned 0xcb [0207.524] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf70) returned 1 [0207.525] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\8828F39C7C0CE9A14B25C7EB321181BA_8C550960E440B9C3B93A6A0AA915C9BE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\8828f39c7c0ce9a14b25c7eb321181ba_8c550960e440b9c3b93a6a0aa915c9be"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0207.526] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8a00) returned 1 [0207.527] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\B912B2C6928A18B8CD7D50CF08BEA95B_230101012E1733B3199F7763353FFFED", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\B912B2C6928A18B8CD7D50CF08BEA95B_230101012E1733B3199F7763353FFFED", lpFilePart=0x0) returned 0xcb [0207.527] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0207.527] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\B912B2C6928A18B8CD7D50CF08BEA95B_230101012E1733B3199F7763353FFFED" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\b912b2c6928a18b8cd7d50cf08bea95b_230101012e1733b3199f7763353fffed"), fInfoLevelId=0x0, lpFileInformation=0x222e280 | out: lpFileInformation=0x222e280*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xa47a1dc4, ftCreationTime.dwHighDateTime=0x1d2fadb, ftLastAccessTime.dwLowDateTime=0xa47a1dc4, ftLastAccessTime.dwHighDateTime=0x1d2fadb, ftLastWriteTime.dwLowDateTime=0xa47a1dc4, ftLastWriteTime.dwHighDateTime=0x1d2fadb, nFileSizeHigh=0x0, nFileSizeLow=0x71c)) returned 1 [0207.528] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0207.528] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\B912B2C6928A18B8CD7D50CF08BEA95B_230101012E1733B3199F7763353FFFED", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\B912B2C6928A18B8CD7D50CF08BEA95B_230101012E1733B3199F7763353FFFED", lpFilePart=0x0) returned 0xcb [0207.528] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0207.528] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\B912B2C6928A18B8CD7D50CF08BEA95B_230101012E1733B3199F7763353FFFED" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\b912b2c6928a18b8cd7d50cf08bea95b_230101012e1733b3199f7763353fffed"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0207.528] GetFileType (hFile=0x444) returned 0x1 [0207.528] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0207.528] GetFileType (hFile=0x444) returned 0x1 [0207.528] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x71c [0207.528] ReadFile (in: hFile=0x444, lpBuffer=0x222ef28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x222ef28*, lpNumberOfBytesRead=0x3be5c8*=0x71c, lpOverlapped=0x0) returned 1 [0207.536] CloseHandle (hObject=0x444) returned 1 [0207.546] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\B912B2C6928A18B8CD7D50CF08BEA95B_230101012E1733B3199F7763353FFFED", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\B912B2C6928A18B8CD7D50CF08BEA95B_230101012E1733B3199F7763353FFFED", lpFilePart=0x0) returned 0xcb [0207.546] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0207.546] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\B912B2C6928A18B8CD7D50CF08BEA95B_230101012E1733B3199F7763353FFFED" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\b912b2c6928a18b8cd7d50cf08bea95b_230101012e1733b3199f7763353fffed"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0207.551] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3baf90) returned 1 [0207.551] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\B912B2C6928A18B8CD7D50CF08BEA95B_230101012E1733B3199F7763353FFFED", nBufferLength=0x105, lpBuffer=0x3bbc10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\B912B2C6928A18B8CD7D50CF08BEA95B_230101012E1733B3199F7763353FFFED", lpFilePart=0x0) returned 0xcb [0207.551] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0b0) returned 1 [0207.551] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\B912B2C6928A18B8CD7D50CF08BEA95B_230101012E1733B3199F7763353FFFED" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\b912b2c6928a18b8cd7d50cf08bea95b_230101012e1733b3199f7763353fffed"), fInfoLevelId=0x0, lpFileInformation=0x3bc190 | out: lpFileInformation=0x3bc190*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xa47a1dc4, ftCreationTime.dwHighDateTime=0x1d2fadb, ftLastAccessTime.dwLowDateTime=0xa47a1dc4, ftLastAccessTime.dwHighDateTime=0x1d2fadb, ftLastWriteTime.dwLowDateTime=0xa47a1dc4, ftLastWriteTime.dwHighDateTime=0x1d2fadb, nFileSizeHigh=0x0, nFileSizeLow=0x71c)) returned 1 [0207.551] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc070) returned 1 [0207.551] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\B912B2C6928A18B8CD7D50CF08BEA95B_230101012E1733B3199F7763353FFFED", nBufferLength=0x105, lpBuffer=0x3bbc30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\B912B2C6928A18B8CD7D50CF08BEA95B_230101012E1733B3199F7763353FFFED", lpFilePart=0x0) returned 0xcb [0207.551] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0b0) returned 1 [0207.551] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\B912B2C6928A18B8CD7D50CF08BEA95B_230101012E1733B3199F7763353FFFED" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\b912b2c6928a18b8cd7d50cf08bea95b_230101012e1733b3199f7763353fffed"), fInfoLevelId=0x0, lpFileInformation=0x22a8e58 | out: lpFileInformation=0x22a8e58*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xa47a1dc4, ftCreationTime.dwHighDateTime=0x1d2fadb, ftLastAccessTime.dwLowDateTime=0xa47a1dc4, ftLastAccessTime.dwHighDateTime=0x1d2fadb, ftLastWriteTime.dwLowDateTime=0xa47a1dc4, ftLastWriteTime.dwHighDateTime=0x1d2fadb, nFileSizeHigh=0x0, nFileSizeLow=0x71c)) returned 1 [0207.552] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc070) returned 1 [0207.552] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\B912B2C6928A18B8CD7D50CF08BEA95B_230101012E1733B3199F7763353FFFED", nBufferLength=0x105, lpBuffer=0x3bba90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\B912B2C6928A18B8CD7D50CF08BEA95B_230101012E1733B3199F7763353FFFED", lpFilePart=0x0) returned 0xcb [0207.552] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf70) returned 1 [0207.552] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\B912B2C6928A18B8CD7D50CF08BEA95B_230101012E1733B3199F7763353FFFED" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\b912b2c6928a18b8cd7d50cf08bea95b_230101012e1733b3199f7763353fffed"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0207.552] GetFileType (hFile=0x444) returned 0x1 [0207.552] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbee0) returned 1 [0207.552] GetFileType (hFile=0x444) returned 0x1 [0207.552] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc108 | out: lpFileSizeHigh=0x3bc108*=0x0) returned 0x71c [0207.552] ReadFile (in: hFile=0x444, lpBuffer=0x22a9b00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bc038, lpOverlapped=0x0 | out: lpBuffer=0x22a9b00*, lpNumberOfBytesRead=0x3bc038*=0x71c, lpOverlapped=0x0) returned 1 [0207.552] CloseHandle (hObject=0x444) returned 1 [0207.562] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\B912B2C6928A18B8CD7D50CF08BEA95B_230101012E1733B3199F7763353FFFED", nBufferLength=0x105, lpBuffer=0x3bba90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\B912B2C6928A18B8CD7D50CF08BEA95B_230101012E1733B3199F7763353FFFED", lpFilePart=0x0) returned 0xcb [0207.562] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf70) returned 1 [0207.562] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\B912B2C6928A18B8CD7D50CF08BEA95B_230101012E1733B3199F7763353FFFED" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\b912b2c6928a18b8cd7d50cf08bea95b_230101012e1733b3199f7763353fffed"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0207.563] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8a00) returned 1 [0207.564] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749", lpFilePart=0x0) returned 0xaa [0207.564] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0207.564] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\fb0d848f74f70bb2eaa93746d24d9749"), fInfoLevelId=0x0, lpFileInformation=0x2323880 | out: lpFileInformation=0x2323880*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xc64b58c9, ftCreationTime.dwHighDateTime=0x1d2d40c, ftLastAccessTime.dwLowDateTime=0xc64b58c9, ftLastAccessTime.dwHighDateTime=0x1d2d40c, ftLastWriteTime.dwLowDateTime=0xc64b58c9, ftLastWriteTime.dwHighDateTime=0x1d2d40c, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0207.566] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0207.566] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749", lpFilePart=0x0) returned 0xaa [0207.566] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0207.566] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\fb0d848f74f70bb2eaa93746d24d9749"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0207.566] GetFileType (hFile=0x444) returned 0x1 [0207.566] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0207.566] GetFileType (hFile=0x444) returned 0x1 [0207.566] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x0 [0207.566] CloseHandle (hObject=0x444) returned 1 [0207.655] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749", lpFilePart=0x0) returned 0xaa [0207.655] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0207.655] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\fb0d848f74f70bb2eaa93746d24d9749"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0207.657] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3baf90) returned 1 [0207.657] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749", nBufferLength=0x105, lpBuffer=0x3bbc10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749", lpFilePart=0x0) returned 0xaa [0207.657] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0b0) returned 1 [0207.657] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\fb0d848f74f70bb2eaa93746d24d9749"), fInfoLevelId=0x0, lpFileInformation=0x3bc190 | out: lpFileInformation=0x3bc190*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xc64b58c9, ftCreationTime.dwHighDateTime=0x1d2d40c, ftLastAccessTime.dwLowDateTime=0xc64b58c9, ftLastAccessTime.dwHighDateTime=0x1d2d40c, ftLastWriteTime.dwLowDateTime=0xc64b58c9, ftLastWriteTime.dwHighDateTime=0x1d2d40c, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0207.657] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc070) returned 1 [0207.657] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749", nBufferLength=0x105, lpBuffer=0x3bbc30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749", lpFilePart=0x0) returned 0xaa [0207.657] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0b0) returned 1 [0207.658] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\fb0d848f74f70bb2eaa93746d24d9749"), fInfoLevelId=0x0, lpFileInformation=0x219a1c8 | out: lpFileInformation=0x219a1c8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xc64b58c9, ftCreationTime.dwHighDateTime=0x1d2d40c, ftLastAccessTime.dwLowDateTime=0xc64b58c9, ftLastAccessTime.dwHighDateTime=0x1d2d40c, ftLastWriteTime.dwLowDateTime=0xc64b58c9, ftLastWriteTime.dwHighDateTime=0x1d2d40c, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0207.658] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc070) returned 1 [0207.658] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749", nBufferLength=0x105, lpBuffer=0x3bba90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749", lpFilePart=0x0) returned 0xaa [0207.658] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf70) returned 1 [0207.658] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\fb0d848f74f70bb2eaa93746d24d9749"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0207.658] GetFileType (hFile=0x444) returned 0x1 [0207.658] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbee0) returned 1 [0207.658] GetFileType (hFile=0x444) returned 0x1 [0207.658] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc108 | out: lpFileSizeHigh=0x3bc108*=0x0) returned 0x0 [0207.658] CloseHandle (hObject=0x444) returned 1 [0207.668] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749", nBufferLength=0x105, lpBuffer=0x3bba90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749", lpFilePart=0x0) returned 0xaa [0207.668] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf70) returned 1 [0207.668] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\fb0d848f74f70bb2eaa93746d24d9749"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0207.669] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8a00) returned 1 [0207.670] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0207.670] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData", lpFilePart=0x0) returned 0x8a [0207.670] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\", lpFilePart=0x0) returned 0x8b [0207.670] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d79d0 [0207.683] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0207.683] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0207.683] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0207.683] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0207.683] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0207.683] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0207.683] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0207.683] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0207.684] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0207.684] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0207.684] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0207.684] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0207.684] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData", lpFilePart=0x0) returned 0x8a [0207.684] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\", lpFilePart=0x0) returned 0x8b [0207.684] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d7c70 [0207.685] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0207.685] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0207.685] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0207.685] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0207.686] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0207.686] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0207.686] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0207.686] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0207.686] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0207.687] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0207.687] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0207.687] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", lpFilePart=0x0) returned 0xcc [0207.687] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0207.687] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\40e450f7ce13419a2ccc2a5445035a0a_06f02b1f13ab4b11b8fc669bde565af1"), fInfoLevelId=0x0, lpFileInformation=0x2216bf0 | out: lpFileInformation=0x2216bf0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xc63f6e53, ftCreationTime.dwHighDateTime=0x1d2d40c, ftLastAccessTime.dwLowDateTime=0xc63f6e53, ftLastAccessTime.dwHighDateTime=0x1d2d40c, ftLastWriteTime.dwLowDateTime=0xea34d5a0, ftLastWriteTime.dwHighDateTime=0x1d2d40c, nFileSizeHigh=0x0, nFileSizeLow=0x190)) returned 1 [0207.688] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0207.688] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", lpFilePart=0x0) returned 0xcc [0207.688] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0207.688] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\40e450f7ce13419a2ccc2a5445035a0a_06f02b1f13ab4b11b8fc669bde565af1"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0207.688] GetFileType (hFile=0x444) returned 0x1 [0207.688] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0207.688] GetFileType (hFile=0x444) returned 0x1 [0207.688] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x190 [0207.688] ReadFile (in: hFile=0x444, lpBuffer=0x2217318, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x2217318*, lpNumberOfBytesRead=0x3be5c8*=0x190, lpOverlapped=0x0) returned 1 [0207.689] CloseHandle (hObject=0x444) returned 1 [0207.700] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", lpFilePart=0x0) returned 0xcc [0207.700] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0207.700] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\40e450f7ce13419a2ccc2a5445035a0a_06f02b1f13ab4b11b8fc669bde565af1"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0207.701] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3baf90) returned 1 [0207.702] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", nBufferLength=0x105, lpBuffer=0x3bbc10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", lpFilePart=0x0) returned 0xcc [0207.702] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0b0) returned 1 [0207.702] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\40e450f7ce13419a2ccc2a5445035a0a_06f02b1f13ab4b11b8fc669bde565af1"), fInfoLevelId=0x0, lpFileInformation=0x3bc190 | out: lpFileInformation=0x3bc190*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xc63f6e53, ftCreationTime.dwHighDateTime=0x1d2d40c, ftLastAccessTime.dwLowDateTime=0xc63f6e53, ftLastAccessTime.dwHighDateTime=0x1d2d40c, ftLastWriteTime.dwLowDateTime=0xea34d5a0, ftLastWriteTime.dwHighDateTime=0x1d2d40c, nFileSizeHigh=0x0, nFileSizeLow=0x190)) returned 1 [0207.702] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc070) returned 1 [0207.702] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", nBufferLength=0x105, lpBuffer=0x3bbc30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", lpFilePart=0x0) returned 0xcc [0207.702] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0b0) returned 1 [0207.702] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\40e450f7ce13419a2ccc2a5445035a0a_06f02b1f13ab4b11b8fc669bde565af1"), fInfoLevelId=0x0, lpFileInformation=0x228f6e8 | out: lpFileInformation=0x228f6e8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xc63f6e53, ftCreationTime.dwHighDateTime=0x1d2d40c, ftLastAccessTime.dwLowDateTime=0xc63f6e53, ftLastAccessTime.dwHighDateTime=0x1d2d40c, ftLastWriteTime.dwLowDateTime=0xea34d5a0, ftLastWriteTime.dwHighDateTime=0x1d2d40c, nFileSizeHigh=0x0, nFileSizeLow=0x190)) returned 1 [0207.702] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc070) returned 1 [0207.702] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", nBufferLength=0x105, lpBuffer=0x3bba90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", lpFilePart=0x0) returned 0xcc [0207.702] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf70) returned 1 [0207.702] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\40e450f7ce13419a2ccc2a5445035a0a_06f02b1f13ab4b11b8fc669bde565af1"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0207.703] GetFileType (hFile=0x444) returned 0x1 [0207.703] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbee0) returned 1 [0207.703] GetFileType (hFile=0x444) returned 0x1 [0207.703] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc108 | out: lpFileSizeHigh=0x3bc108*=0x0) returned 0x190 [0207.703] ReadFile (in: hFile=0x444, lpBuffer=0x228fe10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bc038, lpOverlapped=0x0 | out: lpBuffer=0x228fe10*, lpNumberOfBytesRead=0x3bc038*=0x190, lpOverlapped=0x0) returned 1 [0207.703] CloseHandle (hObject=0x444) returned 1 [0207.713] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", nBufferLength=0x105, lpBuffer=0x3bba90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", lpFilePart=0x0) returned 0xcc [0207.713] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf70) returned 1 [0207.713] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\40e450f7ce13419a2ccc2a5445035a0a_06f02b1f13ab4b11b8fc669bde565af1"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0207.714] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8a00) returned 1 [0207.715] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", lpFilePart=0x0) returned 0xab [0207.715] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0207.715] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\57c8edb95df3f0ad4ee2dc2b8cfd4157"), fInfoLevelId=0x0, lpFileInformation=0x2308028 | out: lpFileInformation=0x2308028*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xc648f76f, ftCreationTime.dwHighDateTime=0x1d2d40c, ftLastAccessTime.dwLowDateTime=0xc648f76f, ftLastAccessTime.dwHighDateTime=0x1d2d40c, ftLastWriteTime.dwLowDateTime=0x8bb85aba, ftLastWriteTime.dwHighDateTime=0x1d2fadb, nFileSizeHigh=0x0, nFileSizeLow=0x12e)) returned 1 [0207.715] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0207.715] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", lpFilePart=0x0) returned 0xab [0207.715] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0207.715] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\57c8edb95df3f0ad4ee2dc2b8cfd4157"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0207.715] GetFileType (hFile=0x444) returned 0x1 [0207.715] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0207.715] GetFileType (hFile=0x444) returned 0x1 [0207.716] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x12e [0207.716] ReadFile (in: hFile=0x444, lpBuffer=0x23085e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x23085e0*, lpNumberOfBytesRead=0x3be5c8*=0x12e, lpOverlapped=0x0) returned 1 [0207.722] CloseHandle (hObject=0x444) returned 1 [0207.732] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", lpFilePart=0x0) returned 0xab [0207.732] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0207.732] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\57c8edb95df3f0ad4ee2dc2b8cfd4157"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0207.733] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3baf90) returned 1 [0207.734] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", nBufferLength=0x105, lpBuffer=0x3bbc10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", lpFilePart=0x0) returned 0xab [0207.734] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0b0) returned 1 [0207.734] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\57c8edb95df3f0ad4ee2dc2b8cfd4157"), fInfoLevelId=0x0, lpFileInformation=0x3bc190 | out: lpFileInformation=0x3bc190*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xc648f76f, ftCreationTime.dwHighDateTime=0x1d2d40c, ftLastAccessTime.dwLowDateTime=0xc648f76f, ftLastAccessTime.dwHighDateTime=0x1d2d40c, ftLastWriteTime.dwLowDateTime=0x8bb85aba, ftLastWriteTime.dwHighDateTime=0x1d2fadb, nFileSizeHigh=0x0, nFileSizeLow=0x12e)) returned 1 [0207.734] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc070) returned 1 [0207.734] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", nBufferLength=0x105, lpBuffer=0x3bbc30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", lpFilePart=0x0) returned 0xab [0207.734] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0b0) returned 1 [0207.734] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\57c8edb95df3f0ad4ee2dc2b8cfd4157"), fInfoLevelId=0x0, lpFileInformation=0x2380660 | out: lpFileInformation=0x2380660*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xc648f76f, ftCreationTime.dwHighDateTime=0x1d2d40c, ftLastAccessTime.dwLowDateTime=0xc648f76f, ftLastAccessTime.dwHighDateTime=0x1d2d40c, ftLastWriteTime.dwLowDateTime=0x8bb85aba, ftLastWriteTime.dwHighDateTime=0x1d2fadb, nFileSizeHigh=0x0, nFileSizeLow=0x12e)) returned 1 [0207.734] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc070) returned 1 [0207.735] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", nBufferLength=0x105, lpBuffer=0x3bba90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", lpFilePart=0x0) returned 0xab [0207.735] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf70) returned 1 [0207.735] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\57c8edb95df3f0ad4ee2dc2b8cfd4157"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0207.735] GetFileType (hFile=0x444) returned 0x1 [0207.735] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbee0) returned 1 [0207.735] GetFileType (hFile=0x444) returned 0x1 [0207.735] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc108 | out: lpFileSizeHigh=0x3bc108*=0x0) returned 0x12e [0207.735] ReadFile (in: hFile=0x444, lpBuffer=0x2380c18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bc038, lpOverlapped=0x0 | out: lpBuffer=0x2380c18*, lpNumberOfBytesRead=0x3bc038*=0x12e, lpOverlapped=0x0) returned 1 [0207.735] CloseHandle (hObject=0x444) returned 1 [0207.775] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", nBufferLength=0x105, lpBuffer=0x3bba90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", lpFilePart=0x0) returned 0xab [0207.775] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf70) returned 1 [0207.775] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\57c8edb95df3f0ad4ee2dc2b8cfd4157"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0207.776] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8a00) returned 1 [0207.777] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506", lpFilePart=0x0) returned 0xab [0207.777] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0207.777] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\77ec63bda74bd0d0e0426dc8f8008506"), fInfoLevelId=0x0, lpFileInformation=0x21f91f8 | out: lpFileInformation=0x21f91f8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xc648f76f, ftCreationTime.dwHighDateTime=0x1d2d40c, ftLastAccessTime.dwLowDateTime=0xc648f76f, ftLastAccessTime.dwHighDateTime=0x1d2d40c, ftLastWriteTime.dwLowDateTime=0xc648f76f, ftLastWriteTime.dwHighDateTime=0x1d2d40c, nFileSizeHigh=0x0, nFileSizeLow=0x122)) returned 1 [0207.778] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0207.778] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506", lpFilePart=0x0) returned 0xab [0207.778] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0207.778] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\77ec63bda74bd0d0e0426dc8f8008506"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0207.778] GetFileType (hFile=0x444) returned 0x1 [0207.778] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0207.778] GetFileType (hFile=0x444) returned 0x1 [0207.778] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x122 [0207.778] ReadFile (in: hFile=0x444, lpBuffer=0x21f97a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x21f97a8*, lpNumberOfBytesRead=0x3be5c8*=0x122, lpOverlapped=0x0) returned 1 [0207.779] CloseHandle (hObject=0x444) returned 1 [0207.789] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506", lpFilePart=0x0) returned 0xab [0207.789] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0207.789] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\77ec63bda74bd0d0e0426dc8f8008506"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0207.791] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3baf90) returned 1 [0207.791] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506", nBufferLength=0x105, lpBuffer=0x3bbc10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506", lpFilePart=0x0) returned 0xab [0207.791] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0b0) returned 1 [0207.791] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\77ec63bda74bd0d0e0426dc8f8008506"), fInfoLevelId=0x0, lpFileInformation=0x3bc190 | out: lpFileInformation=0x3bc190*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xc648f76f, ftCreationTime.dwHighDateTime=0x1d2d40c, ftLastAccessTime.dwLowDateTime=0xc648f76f, ftLastAccessTime.dwHighDateTime=0x1d2d40c, ftLastWriteTime.dwLowDateTime=0xc648f76f, ftLastWriteTime.dwHighDateTime=0x1d2d40c, nFileSizeHigh=0x0, nFileSizeLow=0x122)) returned 1 [0207.791] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc070) returned 1 [0207.791] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506", nBufferLength=0x105, lpBuffer=0x3bbc30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506", lpFilePart=0x0) returned 0xab [0207.791] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0b0) returned 1 [0207.791] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\77ec63bda74bd0d0e0426dc8f8008506"), fInfoLevelId=0x0, lpFileInformation=0x2271830 | out: lpFileInformation=0x2271830*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xc648f76f, ftCreationTime.dwHighDateTime=0x1d2d40c, ftLastAccessTime.dwLowDateTime=0xc648f76f, ftLastAccessTime.dwHighDateTime=0x1d2d40c, ftLastWriteTime.dwLowDateTime=0xc648f76f, ftLastWriteTime.dwHighDateTime=0x1d2d40c, nFileSizeHigh=0x0, nFileSizeLow=0x122)) returned 1 [0207.791] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc070) returned 1 [0207.791] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506", nBufferLength=0x105, lpBuffer=0x3bba90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506", lpFilePart=0x0) returned 0xab [0207.791] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf70) returned 1 [0207.791] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\77ec63bda74bd0d0e0426dc8f8008506"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0207.792] GetFileType (hFile=0x444) returned 0x1 [0207.792] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbee0) returned 1 [0207.792] GetFileType (hFile=0x444) returned 0x1 [0207.792] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc108 | out: lpFileSizeHigh=0x3bc108*=0x0) returned 0x122 [0207.792] ReadFile (in: hFile=0x444, lpBuffer=0x2271de0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bc038, lpOverlapped=0x0 | out: lpBuffer=0x2271de0*, lpNumberOfBytesRead=0x3bc038*=0x122, lpOverlapped=0x0) returned 1 [0207.792] CloseHandle (hObject=0x444) returned 1 [0207.802] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506", nBufferLength=0x105, lpBuffer=0x3bba90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506", lpFilePart=0x0) returned 0xab [0207.802] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf70) returned 1 [0207.802] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\77ec63bda74bd0d0e0426dc8f8008506"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0207.803] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8a00) returned 1 [0207.804] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\8828F39C7C0CE9A14B25C7EB321181BA_8C550960E440B9C3B93A6A0AA915C9BE", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\8828F39C7C0CE9A14B25C7EB321181BA_8C550960E440B9C3B93A6A0AA915C9BE", lpFilePart=0x0) returned 0xcc [0207.804] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0207.804] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\8828F39C7C0CE9A14B25C7EB321181BA_8C550960E440B9C3B93A6A0AA915C9BE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\8828f39c7c0ce9a14b25c7eb321181ba_8c550960e440b9c3b93a6a0aa915c9be"), fInfoLevelId=0x0, lpFileInformation=0x22e9cf8 | out: lpFileInformation=0x22e9cf8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xa48ace9c, ftCreationTime.dwHighDateTime=0x1d2fadb, ftLastAccessTime.dwLowDateTime=0xa48ace9c, ftLastAccessTime.dwHighDateTime=0x1d2fadb, ftLastWriteTime.dwLowDateTime=0xafd253fd, ftLastWriteTime.dwHighDateTime=0x1d2fadb, nFileSizeHigh=0x0, nFileSizeLow=0x18c)) returned 1 [0207.804] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0207.804] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\8828F39C7C0CE9A14B25C7EB321181BA_8C550960E440B9C3B93A6A0AA915C9BE", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\8828F39C7C0CE9A14B25C7EB321181BA_8C550960E440B9C3B93A6A0AA915C9BE", lpFilePart=0x0) returned 0xcc [0207.804] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0207.804] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\8828F39C7C0CE9A14B25C7EB321181BA_8C550960E440B9C3B93A6A0AA915C9BE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\8828f39c7c0ce9a14b25c7eb321181ba_8c550960e440b9c3b93a6a0aa915c9be"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0207.804] GetFileType (hFile=0x444) returned 0x1 [0207.804] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0207.804] GetFileType (hFile=0x444) returned 0x1 [0207.804] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x18c [0207.804] ReadFile (in: hFile=0x444, lpBuffer=0x22ea420, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x22ea420*, lpNumberOfBytesRead=0x3be5c8*=0x18c, lpOverlapped=0x0) returned 1 [0207.813] CloseHandle (hObject=0x444) returned 1 [0207.822] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\8828F39C7C0CE9A14B25C7EB321181BA_8C550960E440B9C3B93A6A0AA915C9BE", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\8828F39C7C0CE9A14B25C7EB321181BA_8C550960E440B9C3B93A6A0AA915C9BE", lpFilePart=0x0) returned 0xcc [0207.822] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0207.822] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\8828F39C7C0CE9A14B25C7EB321181BA_8C550960E440B9C3B93A6A0AA915C9BE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\8828f39c7c0ce9a14b25c7eb321181ba_8c550960e440b9c3b93a6a0aa915c9be"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0207.824] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3baf90) returned 1 [0207.824] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\8828F39C7C0CE9A14B25C7EB321181BA_8C550960E440B9C3B93A6A0AA915C9BE", nBufferLength=0x105, lpBuffer=0x3bbc10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\8828F39C7C0CE9A14B25C7EB321181BA_8C550960E440B9C3B93A6A0AA915C9BE", lpFilePart=0x0) returned 0xcc [0207.824] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0b0) returned 1 [0207.824] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\8828F39C7C0CE9A14B25C7EB321181BA_8C550960E440B9C3B93A6A0AA915C9BE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\8828f39c7c0ce9a14b25c7eb321181ba_8c550960e440b9c3b93a6a0aa915c9be"), fInfoLevelId=0x0, lpFileInformation=0x3bc190 | out: lpFileInformation=0x3bc190*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xa48ace9c, ftCreationTime.dwHighDateTime=0x1d2fadb, ftLastAccessTime.dwLowDateTime=0xa48ace9c, ftLastAccessTime.dwHighDateTime=0x1d2fadb, ftLastWriteTime.dwLowDateTime=0xafd253fd, ftLastWriteTime.dwHighDateTime=0x1d2fadb, nFileSizeHigh=0x0, nFileSizeLow=0x18c)) returned 1 [0207.824] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc070) returned 1 [0207.824] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\8828F39C7C0CE9A14B25C7EB321181BA_8C550960E440B9C3B93A6A0AA915C9BE", nBufferLength=0x105, lpBuffer=0x3bbc30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\8828F39C7C0CE9A14B25C7EB321181BA_8C550960E440B9C3B93A6A0AA915C9BE", lpFilePart=0x0) returned 0xcc [0207.824] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0b0) returned 1 [0207.824] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\8828F39C7C0CE9A14B25C7EB321181BA_8C550960E440B9C3B93A6A0AA915C9BE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\8828f39c7c0ce9a14b25c7eb321181ba_8c550960e440b9c3b93a6a0aa915c9be"), fInfoLevelId=0x0, lpFileInformation=0x2362798 | out: lpFileInformation=0x2362798*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xa48ace9c, ftCreationTime.dwHighDateTime=0x1d2fadb, ftLastAccessTime.dwLowDateTime=0xa48ace9c, ftLastAccessTime.dwHighDateTime=0x1d2fadb, ftLastWriteTime.dwLowDateTime=0xafd253fd, ftLastWriteTime.dwHighDateTime=0x1d2fadb, nFileSizeHigh=0x0, nFileSizeLow=0x18c)) returned 1 [0207.824] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc070) returned 1 [0207.825] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\8828F39C7C0CE9A14B25C7EB321181BA_8C550960E440B9C3B93A6A0AA915C9BE", nBufferLength=0x105, lpBuffer=0x3bba90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\8828F39C7C0CE9A14B25C7EB321181BA_8C550960E440B9C3B93A6A0AA915C9BE", lpFilePart=0x0) returned 0xcc [0207.825] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf70) returned 1 [0207.825] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\8828F39C7C0CE9A14B25C7EB321181BA_8C550960E440B9C3B93A6A0AA915C9BE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\8828f39c7c0ce9a14b25c7eb321181ba_8c550960e440b9c3b93a6a0aa915c9be"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0207.825] GetFileType (hFile=0x444) returned 0x1 [0207.825] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbee0) returned 1 [0207.825] GetFileType (hFile=0x444) returned 0x1 [0207.825] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc108 | out: lpFileSizeHigh=0x3bc108*=0x0) returned 0x18c [0207.825] ReadFile (in: hFile=0x444, lpBuffer=0x2362ec0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bc038, lpOverlapped=0x0 | out: lpBuffer=0x2362ec0*, lpNumberOfBytesRead=0x3bc038*=0x18c, lpOverlapped=0x0) returned 1 [0207.825] CloseHandle (hObject=0x444) returned 1 [0207.868] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\8828F39C7C0CE9A14B25C7EB321181BA_8C550960E440B9C3B93A6A0AA915C9BE", nBufferLength=0x105, lpBuffer=0x3bba90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\8828F39C7C0CE9A14B25C7EB321181BA_8C550960E440B9C3B93A6A0AA915C9BE", lpFilePart=0x0) returned 0xcc [0207.869] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf70) returned 1 [0207.869] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\8828F39C7C0CE9A14B25C7EB321181BA_8C550960E440B9C3B93A6A0AA915C9BE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\8828f39c7c0ce9a14b25c7eb321181ba_8c550960e440b9c3b93a6a0aa915c9be"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0207.870] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8a00) returned 1 [0207.871] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\B912B2C6928A18B8CD7D50CF08BEA95B_230101012E1733B3199F7763353FFFED", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\B912B2C6928A18B8CD7D50CF08BEA95B_230101012E1733B3199F7763353FFFED", lpFilePart=0x0) returned 0xcc [0207.871] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0207.871] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\B912B2C6928A18B8CD7D50CF08BEA95B_230101012E1733B3199F7763353FFFED" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\b912b2c6928a18b8cd7d50cf08bea95b_230101012e1733b3199f7763353fffed"), fInfoLevelId=0x0, lpFileInformation=0x21daed0 | out: lpFileInformation=0x21daed0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xa47a1dc4, ftCreationTime.dwHighDateTime=0x1d2fadb, ftLastAccessTime.dwLowDateTime=0xa47a1dc4, ftLastAccessTime.dwHighDateTime=0x1d2fadb, ftLastWriteTime.dwLowDateTime=0xafd253fd, ftLastWriteTime.dwHighDateTime=0x1d2fadb, nFileSizeHigh=0x0, nFileSizeLow=0x1ea)) returned 1 [0207.879] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0207.879] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\B912B2C6928A18B8CD7D50CF08BEA95B_230101012E1733B3199F7763353FFFED", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\B912B2C6928A18B8CD7D50CF08BEA95B_230101012E1733B3199F7763353FFFED", lpFilePart=0x0) returned 0xcc [0207.879] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0207.879] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\B912B2C6928A18B8CD7D50CF08BEA95B_230101012E1733B3199F7763353FFFED" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\b912b2c6928a18b8cd7d50cf08bea95b_230101012e1733b3199f7763353fffed"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0207.879] GetFileType (hFile=0x444) returned 0x1 [0207.879] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0207.879] GetFileType (hFile=0x444) returned 0x1 [0207.879] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x1ea [0207.879] ReadFile (in: hFile=0x444, lpBuffer=0x21db658, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x21db658*, lpNumberOfBytesRead=0x3be5c8*=0x1ea, lpOverlapped=0x0) returned 1 [0207.880] CloseHandle (hObject=0x444) returned 1 [0207.890] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\B912B2C6928A18B8CD7D50CF08BEA95B_230101012E1733B3199F7763353FFFED", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\B912B2C6928A18B8CD7D50CF08BEA95B_230101012E1733B3199F7763353FFFED", lpFilePart=0x0) returned 0xcc [0207.891] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0207.891] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\B912B2C6928A18B8CD7D50CF08BEA95B_230101012E1733B3199F7763353FFFED" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\b912b2c6928a18b8cd7d50cf08bea95b_230101012e1733b3199f7763353fffed"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0207.893] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3baf90) returned 1 [0207.893] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\B912B2C6928A18B8CD7D50CF08BEA95B_230101012E1733B3199F7763353FFFED", nBufferLength=0x105, lpBuffer=0x3bbc10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\B912B2C6928A18B8CD7D50CF08BEA95B_230101012E1733B3199F7763353FFFED", lpFilePart=0x0) returned 0xcc [0207.893] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0b0) returned 1 [0207.893] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\B912B2C6928A18B8CD7D50CF08BEA95B_230101012E1733B3199F7763353FFFED" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\b912b2c6928a18b8cd7d50cf08bea95b_230101012e1733b3199f7763353fffed"), fInfoLevelId=0x0, lpFileInformation=0x3bc190 | out: lpFileInformation=0x3bc190*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xa47a1dc4, ftCreationTime.dwHighDateTime=0x1d2fadb, ftLastAccessTime.dwLowDateTime=0xa47a1dc4, ftLastAccessTime.dwHighDateTime=0x1d2fadb, ftLastWriteTime.dwLowDateTime=0xafd253fd, ftLastWriteTime.dwHighDateTime=0x1d2fadb, nFileSizeHigh=0x0, nFileSizeLow=0x1ea)) returned 1 [0207.893] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc070) returned 1 [0207.893] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\B912B2C6928A18B8CD7D50CF08BEA95B_230101012E1733B3199F7763353FFFED", nBufferLength=0x105, lpBuffer=0x3bbc30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\B912B2C6928A18B8CD7D50CF08BEA95B_230101012E1733B3199F7763353FFFED", lpFilePart=0x0) returned 0xcc [0207.893] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0b0) returned 1 [0207.893] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\B912B2C6928A18B8CD7D50CF08BEA95B_230101012E1733B3199F7763353FFFED" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\b912b2c6928a18b8cd7d50cf08bea95b_230101012e1733b3199f7763353fffed"), fInfoLevelId=0x0, lpFileInformation=0x2253bb0 | out: lpFileInformation=0x2253bb0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xa47a1dc4, ftCreationTime.dwHighDateTime=0x1d2fadb, ftLastAccessTime.dwLowDateTime=0xa47a1dc4, ftLastAccessTime.dwHighDateTime=0x1d2fadb, ftLastWriteTime.dwLowDateTime=0xafd253fd, ftLastWriteTime.dwHighDateTime=0x1d2fadb, nFileSizeHigh=0x0, nFileSizeLow=0x1ea)) returned 1 [0207.893] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc070) returned 1 [0207.893] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\B912B2C6928A18B8CD7D50CF08BEA95B_230101012E1733B3199F7763353FFFED", nBufferLength=0x105, lpBuffer=0x3bba90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\B912B2C6928A18B8CD7D50CF08BEA95B_230101012E1733B3199F7763353FFFED", lpFilePart=0x0) returned 0xcc [0207.894] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf70) returned 1 [0207.894] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\B912B2C6928A18B8CD7D50CF08BEA95B_230101012E1733B3199F7763353FFFED" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\b912b2c6928a18b8cd7d50cf08bea95b_230101012e1733b3199f7763353fffed"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0207.894] GetFileType (hFile=0x444) returned 0x1 [0207.894] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbee0) returned 1 [0207.894] GetFileType (hFile=0x444) returned 0x1 [0207.894] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc108 | out: lpFileSizeHigh=0x3bc108*=0x0) returned 0x1ea [0207.894] ReadFile (in: hFile=0x444, lpBuffer=0x2254338, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bc038, lpOverlapped=0x0 | out: lpBuffer=0x2254338*, lpNumberOfBytesRead=0x3bc038*=0x1ea, lpOverlapped=0x0) returned 1 [0207.894] CloseHandle (hObject=0x444) returned 1 [0207.904] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\B912B2C6928A18B8CD7D50CF08BEA95B_230101012E1733B3199F7763353FFFED", nBufferLength=0x105, lpBuffer=0x3bba90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\B912B2C6928A18B8CD7D50CF08BEA95B_230101012E1733B3199F7763353FFFED", lpFilePart=0x0) returned 0xcc [0207.904] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf70) returned 1 [0207.904] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\B912B2C6928A18B8CD7D50CF08BEA95B_230101012E1733B3199F7763353FFFED" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\b912b2c6928a18b8cd7d50cf08bea95b_230101012e1733b3199f7763353fffed"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0207.905] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8a00) returned 1 [0207.908] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749", lpFilePart=0x0) returned 0xab [0207.908] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0207.908] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\fb0d848f74f70bb2eaa93746d24d9749"), fInfoLevelId=0x0, lpFileInformation=0x22cc6d8 | out: lpFileInformation=0x22cc6d8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xc64b58c9, ftCreationTime.dwHighDateTime=0x1d2d40c, ftLastAccessTime.dwLowDateTime=0xc64b58c9, ftLastAccessTime.dwHighDateTime=0x1d2d40c, ftLastWriteTime.dwLowDateTime=0x8bb85aba, ftLastWriteTime.dwHighDateTime=0x1d2fadb, nFileSizeHigh=0x0, nFileSizeLow=0x122)) returned 1 [0207.909] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0207.909] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749", lpFilePart=0x0) returned 0xab [0207.909] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0207.909] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\fb0d848f74f70bb2eaa93746d24d9749"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0207.909] GetFileType (hFile=0x444) returned 0x1 [0207.909] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0207.909] GetFileType (hFile=0x444) returned 0x1 [0207.909] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x122 [0207.909] ReadFile (in: hFile=0x444, lpBuffer=0x22ccc88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x22ccc88*, lpNumberOfBytesRead=0x3be5c8*=0x122, lpOverlapped=0x0) returned 1 [0207.910] CloseHandle (hObject=0x444) returned 1 [0207.920] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749", lpFilePart=0x0) returned 0xab [0207.920] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0207.920] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\fb0d848f74f70bb2eaa93746d24d9749"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0207.921] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3baf90) returned 1 [0207.922] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749", nBufferLength=0x105, lpBuffer=0x3bbc10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749", lpFilePart=0x0) returned 0xab [0207.922] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0b0) returned 1 [0207.922] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\fb0d848f74f70bb2eaa93746d24d9749"), fInfoLevelId=0x0, lpFileInformation=0x3bc190 | out: lpFileInformation=0x3bc190*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xc64b58c9, ftCreationTime.dwHighDateTime=0x1d2d40c, ftLastAccessTime.dwLowDateTime=0xc64b58c9, ftLastAccessTime.dwHighDateTime=0x1d2d40c, ftLastWriteTime.dwLowDateTime=0x8bb85aba, ftLastWriteTime.dwHighDateTime=0x1d2fadb, nFileSizeHigh=0x0, nFileSizeLow=0x122)) returned 1 [0207.922] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc070) returned 1 [0207.922] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749", nBufferLength=0x105, lpBuffer=0x3bbc30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749", lpFilePart=0x0) returned 0xab [0207.922] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0b0) returned 1 [0207.922] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\fb0d848f74f70bb2eaa93746d24d9749"), fInfoLevelId=0x0, lpFileInformation=0x2344d10 | out: lpFileInformation=0x2344d10*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xc64b58c9, ftCreationTime.dwHighDateTime=0x1d2d40c, ftLastAccessTime.dwLowDateTime=0xc64b58c9, ftLastAccessTime.dwHighDateTime=0x1d2d40c, ftLastWriteTime.dwLowDateTime=0x8bb85aba, ftLastWriteTime.dwHighDateTime=0x1d2fadb, nFileSizeHigh=0x0, nFileSizeLow=0x122)) returned 1 [0207.922] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc070) returned 1 [0207.922] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749", nBufferLength=0x105, lpBuffer=0x3bba90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749", lpFilePart=0x0) returned 0xab [0207.922] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\fb0d848f74f70bb2eaa93746d24d9749"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0207.923] GetFileType (hFile=0x444) returned 0x1 [0207.923] GetFileType (hFile=0x444) returned 0x1 [0207.923] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc108 | out: lpFileSizeHigh=0x3bc108*=0x0) returned 0x122 [0207.923] ReadFile (in: hFile=0x444, lpBuffer=0x23452c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bc038, lpOverlapped=0x0 | out: lpBuffer=0x23452c0*, lpNumberOfBytesRead=0x3bc038*=0x122, lpOverlapped=0x0) returned 1 [0207.923] CloseHandle (hObject=0x444) returned 1 [0207.967] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749", nBufferLength=0x105, lpBuffer=0x3bba90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749", lpFilePart=0x0) returned 0xab [0207.967] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\fb0d848f74f70bb2eaa93746d24d9749"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0207.970] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8a00) returned 1 [0207.970] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0207.970] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\Windows", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\Windows", lpFilePart=0x0) returned 0x78 [0207.970] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\", lpFilePart=0x0) returned 0x79 [0207.970] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d8090 [0207.971] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0207.971] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0207.971] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0207.971] FindClose (in: hFindFile=0x5d8090 | out: hFindFile=0x5d8090) returned 1 [0207.971] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0207.971] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0207.971] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0207.971] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\Windows", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\Windows", lpFilePart=0x0) returned 0x78 [0207.971] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\", lpFilePart=0x0) returned 0x79 [0207.971] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d7370 [0207.971] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0207.972] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0207.972] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0207.972] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0207.972] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0207.972] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0207.972] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0207.972] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\2577507833", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\2577507833", lpFilePart=0x0) returned 0x83 [0207.972] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\2577507833\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\2577507833\\", lpFilePart=0x0) returned 0x84 [0207.972] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\2577507833\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d7eb0 [0207.972] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0207.972] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0207.972] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0207.973] FindClose (in: hFindFile=0x5d7eb0 | out: hFindFile=0x5d7eb0) returned 1 [0207.973] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0207.973] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0207.973] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0207.973] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\2577507833", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\2577507833", lpFilePart=0x0) returned 0x83 [0207.973] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\2577507833\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\2577507833\\", lpFilePart=0x0) returned 0x84 [0207.973] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\2577507833\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d81b0 [0207.973] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0207.973] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0207.973] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0207.973] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0207.973] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0207.973] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0207.973] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\2577507833\\3967450640.pri", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\2577507833\\3967450640.pri", lpFilePart=0x0) returned 0x92 [0207.973] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0207.974] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\2577507833\\3967450640.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\microsoft\\windows\\2577507833\\3967450640.pri"), fInfoLevelId=0x0, lpFileInformation=0x21c2a00 | out: lpFileInformation=0x21c2a00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc67fcce1, ftCreationTime.dwHighDateTime=0x1d2d40c, ftLastAccessTime.dwLowDateTime=0xc67fcce1, ftLastAccessTime.dwHighDateTime=0x1d2d40c, ftLastWriteTime.dwLowDateTime=0xc68956ec, ftLastWriteTime.dwHighDateTime=0x1d2d40c, nFileSizeHigh=0x0, nFileSizeLow=0xde0)) returned 1 [0207.974] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0207.974] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\2577507833\\3967450640.pri", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\2577507833\\3967450640.pri", lpFilePart=0x0) returned 0x92 [0207.974] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0207.974] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\2577507833\\3967450640.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\microsoft\\windows\\2577507833\\3967450640.pri"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0207.974] GetFileType (hFile=0x444) returned 0x1 [0207.974] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0207.974] GetFileType (hFile=0x444) returned 0x1 [0207.974] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xde0 [0207.974] ReadFile (in: hFile=0x444, lpBuffer=0x21c3bb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x21c3bb8*, lpNumberOfBytesRead=0x3be5c8*=0xde0, lpOverlapped=0x0) returned 1 [0207.975] CloseHandle (hObject=0x444) returned 1 [0207.987] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\2577507833\\3967450640.pri", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\2577507833\\3967450640.pri", lpFilePart=0x0) returned 0x92 [0207.987] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0207.987] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\2577507833\\3967450640.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\microsoft\\windows\\2577507833\\3967450640.pri"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0207.988] GetFileType (hFile=0x444) returned 0x1 [0207.989] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0207.989] GetFileType (hFile=0x444) returned 0x1 [0207.989] WriteFile (in: hFile=0x444, lpBuffer=0x223f1e0*, nNumberOfBytesToWrite=0xdf0, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x223f1e0*, lpNumberOfBytesWritten=0x3be4d8*=0xdf0, lpOverlapped=0x0) returned 1 [0207.989] CloseHandle (hObject=0x444) returned 1 [0207.989] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\2577507833\\3967450640.pri", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\2577507833\\3967450640.pri", lpFilePart=0x0) returned 0x92 [0207.989] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\2577507833\\3967450640.pri.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\2577507833\\3967450640.pri.xuy", lpFilePart=0x0) returned 0x96 [0207.989] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0207.990] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\2577507833\\3967450640.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\microsoft\\windows\\2577507833\\3967450640.pri"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc67fcce1, ftCreationTime.dwHighDateTime=0x1d2d40c, ftLastAccessTime.dwLowDateTime=0xc67fcce1, ftLastAccessTime.dwHighDateTime=0x1d2d40c, ftLastWriteTime.dwLowDateTime=0x67d21106, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xdf0)) returned 1 [0207.990] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0207.990] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\2577507833\\3967450640.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\microsoft\\windows\\2577507833\\3967450640.pri"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\2577507833\\3967450640.pri.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\microsoft\\windows\\2577507833\\3967450640.pri.xuy")) returned 1 [0207.991] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0207.991] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Temp", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Temp", lpFilePart=0x0) returned 0x6b [0207.991] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Temp\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Temp\\", lpFilePart=0x0) returned 0x6c [0207.991] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Temp\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7370 [0207.992] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0207.992] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0207.992] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0207.992] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0207.992] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0207.992] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0207.992] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Temp", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Temp", lpFilePart=0x0) returned 0x6b [0207.992] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Temp\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Temp\\", lpFilePart=0x0) returned 0x6c [0207.992] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Temp\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d78b0 [0207.992] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0207.992] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0207.993] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0207.993] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0207.993] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0207.993] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0207.993] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AppData", lpFilePart=0x0) returned 0x6b [0207.993] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AppData\\", lpFilePart=0x0) returned 0x6c [0207.993] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d78b0 [0207.993] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0207.993] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0207.993] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0207.993] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0207.993] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0207.993] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0207.993] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AppData", lpFilePart=0x0) returned 0x6b [0207.993] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AppData\\", lpFilePart=0x0) returned 0x6c [0207.994] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7e50 [0207.994] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0207.994] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0207.994] FindClose (in: hFindFile=0x5d7e50 | out: hFindFile=0x5d7e50) returned 1 [0207.994] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0207.994] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0207.994] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0207.994] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalCache", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalCache", lpFilePart=0x0) returned 0x6e [0207.994] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalCache\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalCache\\", lpFilePart=0x0) returned 0x6f [0207.994] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalCache\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7e50 [0207.994] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0207.995] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0207.995] FindClose (in: hFindFile=0x5d7e50 | out: hFindFile=0x5d7e50) returned 1 [0207.995] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0207.995] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0207.995] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0207.995] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalCache", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalCache", lpFilePart=0x0) returned 0x6e [0207.995] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalCache\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalCache\\", lpFilePart=0x0) returned 0x6f [0207.995] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalCache\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7370 [0207.995] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0207.995] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0207.995] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0207.995] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0207.995] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0207.995] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0207.995] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState", lpFilePart=0x0) returned 0x6e [0207.996] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\", lpFilePart=0x0) returned 0x6f [0207.996] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d81b0 [0207.996] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0207.996] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0207.996] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0207.996] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0207.996] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0207.997] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0207.997] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0207.997] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0207.997] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0207.997] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0207.997] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState", lpFilePart=0x0) returned 0x6e [0207.997] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\", lpFilePart=0x0) returned 0x6f [0207.997] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7e50 [0207.997] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0207.997] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0207.997] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0207.998] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0207.998] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0207.998] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0207.998] FindClose (in: hFindFile=0x5d7e50 | out: hFindFile=0x5d7e50) returned 1 [0207.998] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0207.998] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0207.998] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0207.998] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets", lpFilePart=0x0) returned 0x75 [0207.998] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\", lpFilePart=0x0) returned 0x76 [0207.998] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d79d0 [0207.999] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0207.999] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0207.999] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0207.999] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0207.999] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0207.999] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0207.999] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0208.001] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0208.001] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0208.002] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0208.002] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0208.002] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0208.002] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0208.002] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0208.002] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0208.003] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0208.003] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0208.003] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0208.003] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets", lpFilePart=0x0) returned 0x75 [0208.003] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\", lpFilePart=0x0) returned 0x76 [0208.003] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d78b0 [0208.004] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0208.004] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0208.004] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0208.004] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0208.004] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0208.005] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0208.005] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0208.005] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0208.005] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0208.005] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0208.005] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0208.005] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0208.005] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0208.006] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0208.006] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0208.006] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0208.006] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0208.007] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\001107b94f5293b397165f26d15a256e62b7d4a8a9228f3093ac37da2be5b24f", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\001107b94f5293b397165f26d15a256e62b7d4a8a9228f3093ac37da2be5b24f", lpFilePart=0x0) returned 0xb6 [0208.007] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0208.007] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\001107b94f5293b397165f26d15a256e62b7d4a8a9228f3093ac37da2be5b24f" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\assets\\001107b94f5293b397165f26d15a256e62b7d4a8a9228f3093ac37da2be5b24f"), fInfoLevelId=0x0, lpFileInformation=0x2253060 | out: lpFileInformation=0x2253060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa42dd0ab, ftCreationTime.dwHighDateTime=0x1d2fadb, ftLastAccessTime.dwLowDateTime=0xa42dd0ab, ftLastAccessTime.dwHighDateTime=0x1d2fadb, ftLastWriteTime.dwLowDateTime=0xa4f1565e, ftLastWriteTime.dwHighDateTime=0x1d2fadb, nFileSizeHigh=0x0, nFileSizeLow=0x2ec)) returned 1 [0208.007] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0208.007] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\001107b94f5293b397165f26d15a256e62b7d4a8a9228f3093ac37da2be5b24f", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\001107b94f5293b397165f26d15a256e62b7d4a8a9228f3093ac37da2be5b24f", lpFilePart=0x0) returned 0xb6 [0208.007] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0208.007] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\001107b94f5293b397165f26d15a256e62b7d4a8a9228f3093ac37da2be5b24f" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\assets\\001107b94f5293b397165f26d15a256e62b7d4a8a9228f3093ac37da2be5b24f"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0208.008] GetFileType (hFile=0x444) returned 0x1 [0208.008] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0208.008] GetFileType (hFile=0x444) returned 0x1 [0208.008] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x2ec [0208.008] ReadFile (in: hFile=0x444, lpBuffer=0x2253888, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x2253888*, lpNumberOfBytesRead=0x3be6a8*=0x2ec, lpOverlapped=0x0) returned 1 [0208.027] CloseHandle (hObject=0x444) returned 1 [0208.060] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\001107b94f5293b397165f26d15a256e62b7d4a8a9228f3093ac37da2be5b24f", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\001107b94f5293b397165f26d15a256e62b7d4a8a9228f3093ac37da2be5b24f", lpFilePart=0x0) returned 0xb6 [0208.060] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0208.060] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\001107b94f5293b397165f26d15a256e62b7d4a8a9228f3093ac37da2be5b24f" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\assets\\001107b94f5293b397165f26d15a256e62b7d4a8a9228f3093ac37da2be5b24f"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0208.062] GetFileType (hFile=0x444) returned 0x1 [0208.062] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0208.062] GetFileType (hFile=0x444) returned 0x1 [0208.062] WriteFile (in: hFile=0x444, lpBuffer=0x22cb858*, nNumberOfBytesToWrite=0x2f0, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x22cb858*, lpNumberOfBytesWritten=0x3be5b8*=0x2f0, lpOverlapped=0x0) returned 1 [0208.067] CloseHandle (hObject=0x444) returned 1 [0208.068] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\001107b94f5293b397165f26d15a256e62b7d4a8a9228f3093ac37da2be5b24f", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\001107b94f5293b397165f26d15a256e62b7d4a8a9228f3093ac37da2be5b24f", lpFilePart=0x0) returned 0xb6 [0208.068] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\001107b94f5293b397165f26d15a256e62b7d4a8a9228f3093ac37da2be5b24f.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\001107b94f5293b397165f26d15a256e62b7d4a8a9228f3093ac37da2be5b24f.xuy", lpFilePart=0x0) returned 0xba [0208.068] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0208.068] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\001107b94f5293b397165f26d15a256e62b7d4a8a9228f3093ac37da2be5b24f" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\assets\\001107b94f5293b397165f26d15a256e62b7d4a8a9228f3093ac37da2be5b24f"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa42dd0ab, ftCreationTime.dwHighDateTime=0x1d2fadb, ftLastAccessTime.dwLowDateTime=0xa42dd0ab, ftLastAccessTime.dwHighDateTime=0x1d2fadb, ftLastWriteTime.dwLowDateTime=0x67ddfb1f, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2f0)) returned 1 [0208.068] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0208.068] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\001107b94f5293b397165f26d15a256e62b7d4a8a9228f3093ac37da2be5b24f" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\assets\\001107b94f5293b397165f26d15a256e62b7d4a8a9228f3093ac37da2be5b24f"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\001107b94f5293b397165f26d15a256e62b7d4a8a9228f3093ac37da2be5b24f.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\assets\\001107b94f5293b397165f26d15a256e62b7d4a8a9228f3093ac37da2be5b24f.xuy")) returned 1 [0208.069] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\2bed4133f7a5cd078ac3c621dfa8e6362121ce0928c026612a1f1ddf4f99a370", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\2bed4133f7a5cd078ac3c621dfa8e6362121ce0928c026612a1f1ddf4f99a370", lpFilePart=0x0) returned 0xb6 [0208.069] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0208.069] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\2bed4133f7a5cd078ac3c621dfa8e6362121ce0928c026612a1f1ddf4f99a370" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\assets\\2bed4133f7a5cd078ac3c621dfa8e6362121ce0928c026612a1f1ddf4f99a370"), fInfoLevelId=0x0, lpFileInformation=0x22ccd38 | out: lpFileInformation=0x22ccd38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa42dd0ab, ftCreationTime.dwHighDateTime=0x1d2fadb, ftLastAccessTime.dwLowDateTime=0xa42dd0ab, ftLastAccessTime.dwHighDateTime=0x1d2fadb, ftLastWriteTime.dwLowDateTime=0xa49de1dc, ftLastWriteTime.dwHighDateTime=0x1d2fadb, nFileSizeHigh=0x0, nFileSizeLow=0x310a8)) returned 1 [0208.069] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0208.069] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\2bed4133f7a5cd078ac3c621dfa8e6362121ce0928c026612a1f1ddf4f99a370", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\2bed4133f7a5cd078ac3c621dfa8e6362121ce0928c026612a1f1ddf4f99a370", lpFilePart=0x0) returned 0xb6 [0208.069] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0208.070] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\2bed4133f7a5cd078ac3c621dfa8e6362121ce0928c026612a1f1ddf4f99a370" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\assets\\2bed4133f7a5cd078ac3c621dfa8e6362121ce0928c026612a1f1ddf4f99a370"), fInfoLevelId=0x0, lpFileInformation=0x22ccfc8 | out: lpFileInformation=0x22ccfc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa42dd0ab, ftCreationTime.dwHighDateTime=0x1d2fadb, ftLastAccessTime.dwLowDateTime=0xa42dd0ab, ftLastAccessTime.dwHighDateTime=0x1d2fadb, ftLastWriteTime.dwLowDateTime=0xa49de1dc, ftLastWriteTime.dwHighDateTime=0x1d2fadb, nFileSizeHigh=0x0, nFileSizeLow=0x310a8)) returned 1 [0208.070] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0208.070] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\2bed4133f7a5cd078ac3c621dfa8e6362121ce0928c026612a1f1ddf4f99a370", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\2bed4133f7a5cd078ac3c621dfa8e6362121ce0928c026612a1f1ddf4f99a370", lpFilePart=0x0) returned 0xb6 [0208.070] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0208.070] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\2bed4133f7a5cd078ac3c621dfa8e6362121ce0928c026612a1f1ddf4f99a370" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\assets\\2bed4133f7a5cd078ac3c621dfa8e6362121ce0928c026612a1f1ddf4f99a370"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0208.071] GetFileType (hFile=0x444) returned 0x1 [0208.071] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0208.071] GetFileType (hFile=0x444) returned 0x1 [0208.071] ReadFile (in: hFile=0x444, lpBuffer=0x22cf618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x22cf618*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0208.083] CloseHandle (hObject=0x444) returned 1 [0208.083] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\2bed4133f7a5cd078ac3c621dfa8e6362121ce0928c026612a1f1ddf4f99a370", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\2bed4133f7a5cd078ac3c621dfa8e6362121ce0928c026612a1f1ddf4f99a370", lpFilePart=0x0) returned 0xb6 [0208.083] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0208.083] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\2bed4133f7a5cd078ac3c621dfa8e6362121ce0928c026612a1f1ddf4f99a370" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\assets\\2bed4133f7a5cd078ac3c621dfa8e6362121ce0928c026612a1f1ddf4f99a370"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0208.083] GetFileType (hFile=0x444) returned 0x1 [0208.083] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0208.083] GetFileType (hFile=0x444) returned 0x1 [0208.083] WriteFile (in: hFile=0x444, lpBuffer=0x22cd238*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x22cd238*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0208.084] CloseHandle (hObject=0x444) returned 1 [0208.084] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\2bed4133f7a5cd078ac3c621dfa8e6362121ce0928c026612a1f1ddf4f99a370", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\2bed4133f7a5cd078ac3c621dfa8e6362121ce0928c026612a1f1ddf4f99a370", lpFilePart=0x0) returned 0xb6 [0208.084] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\2bed4133f7a5cd078ac3c621dfa8e6362121ce0928c026612a1f1ddf4f99a370.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\2bed4133f7a5cd078ac3c621dfa8e6362121ce0928c026612a1f1ddf4f99a370.xuy", lpFilePart=0x0) returned 0xba [0208.084] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0208.084] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\2bed4133f7a5cd078ac3c621dfa8e6362121ce0928c026612a1f1ddf4f99a370" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\assets\\2bed4133f7a5cd078ac3c621dfa8e6362121ce0928c026612a1f1ddf4f99a370"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa42dd0ab, ftCreationTime.dwHighDateTime=0x1d2fadb, ftLastAccessTime.dwLowDateTime=0xa42dd0ab, ftLastAccessTime.dwHighDateTime=0x1d2fadb, ftLastWriteTime.dwLowDateTime=0x67e05f32, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x310a8)) returned 1 [0208.084] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0208.084] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\2bed4133f7a5cd078ac3c621dfa8e6362121ce0928c026612a1f1ddf4f99a370" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\assets\\2bed4133f7a5cd078ac3c621dfa8e6362121ce0928c026612a1f1ddf4f99a370"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\2bed4133f7a5cd078ac3c621dfa8e6362121ce0928c026612a1f1ddf4f99a370.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\assets\\2bed4133f7a5cd078ac3c621dfa8e6362121ce0928c026612a1f1ddf4f99a370.xuy")) returned 1 [0208.085] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\2d8669052d2b7df8dd4b9607f2379c68aea752aafe0def6d5ce226264835a7ca", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\2d8669052d2b7df8dd4b9607f2379c68aea752aafe0def6d5ce226264835a7ca", lpFilePart=0x0) returned 0xb6 [0208.085] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0208.085] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\2d8669052d2b7df8dd4b9607f2379c68aea752aafe0def6d5ce226264835a7ca" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\assets\\2d8669052d2b7df8dd4b9607f2379c68aea752aafe0def6d5ce226264835a7ca"), fInfoLevelId=0x0, lpFileInformation=0x234bd70 | out: lpFileInformation=0x234bd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa43e8183, ftCreationTime.dwHighDateTime=0x1d2fadb, ftLastAccessTime.dwLowDateTime=0xa43e8183, ftLastAccessTime.dwHighDateTime=0x1d2fadb, ftLastWriteTime.dwLowDateTime=0xa5151a51, ftLastWriteTime.dwHighDateTime=0x1d2fadb, nFileSizeHigh=0x0, nFileSizeLow=0x4219)) returned 1 [0208.085] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0208.085] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\2d8669052d2b7df8dd4b9607f2379c68aea752aafe0def6d5ce226264835a7ca", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\2d8669052d2b7df8dd4b9607f2379c68aea752aafe0def6d5ce226264835a7ca", lpFilePart=0x0) returned 0xb6 [0208.085] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0208.085] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\2d8669052d2b7df8dd4b9607f2379c68aea752aafe0def6d5ce226264835a7ca" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\assets\\2d8669052d2b7df8dd4b9607f2379c68aea752aafe0def6d5ce226264835a7ca"), fInfoLevelId=0x0, lpFileInformation=0x234c000 | out: lpFileInformation=0x234c000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa43e8183, ftCreationTime.dwHighDateTime=0x1d2fadb, ftLastAccessTime.dwLowDateTime=0xa43e8183, ftLastAccessTime.dwHighDateTime=0x1d2fadb, ftLastWriteTime.dwLowDateTime=0xa5151a51, ftLastWriteTime.dwHighDateTime=0x1d2fadb, nFileSizeHigh=0x0, nFileSizeLow=0x4219)) returned 1 [0208.086] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0208.086] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\2d8669052d2b7df8dd4b9607f2379c68aea752aafe0def6d5ce226264835a7ca", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\2d8669052d2b7df8dd4b9607f2379c68aea752aafe0def6d5ce226264835a7ca", lpFilePart=0x0) returned 0xb6 [0208.086] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0208.086] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\2d8669052d2b7df8dd4b9607f2379c68aea752aafe0def6d5ce226264835a7ca" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\assets\\2d8669052d2b7df8dd4b9607f2379c68aea752aafe0def6d5ce226264835a7ca"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0208.087] GetFileType (hFile=0x444) returned 0x1 [0208.087] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0208.087] GetFileType (hFile=0x444) returned 0x1 [0208.087] ReadFile (in: hFile=0x444, lpBuffer=0x234e650, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x234e650*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0208.117] CloseHandle (hObject=0x444) returned 1 [0208.117] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\2d8669052d2b7df8dd4b9607f2379c68aea752aafe0def6d5ce226264835a7ca", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\2d8669052d2b7df8dd4b9607f2379c68aea752aafe0def6d5ce226264835a7ca", lpFilePart=0x0) returned 0xb6 [0208.117] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0208.117] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\2d8669052d2b7df8dd4b9607f2379c68aea752aafe0def6d5ce226264835a7ca" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\assets\\2d8669052d2b7df8dd4b9607f2379c68aea752aafe0def6d5ce226264835a7ca"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0208.118] GetFileType (hFile=0x444) returned 0x1 [0208.118] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0208.118] GetFileType (hFile=0x444) returned 0x1 [0208.118] WriteFile (in: hFile=0x444, lpBuffer=0x21888c8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x21888c8*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0208.118] CloseHandle (hObject=0x444) returned 1 [0208.118] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\2d8669052d2b7df8dd4b9607f2379c68aea752aafe0def6d5ce226264835a7ca", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\2d8669052d2b7df8dd4b9607f2379c68aea752aafe0def6d5ce226264835a7ca", lpFilePart=0x0) returned 0xb6 [0208.118] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\2d8669052d2b7df8dd4b9607f2379c68aea752aafe0def6d5ce226264835a7ca.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\2d8669052d2b7df8dd4b9607f2379c68aea752aafe0def6d5ce226264835a7ca.xuy", lpFilePart=0x0) returned 0xba [0208.118] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0208.118] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\2d8669052d2b7df8dd4b9607f2379c68aea752aafe0def6d5ce226264835a7ca" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\assets\\2d8669052d2b7df8dd4b9607f2379c68aea752aafe0def6d5ce226264835a7ca"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa43e8183, ftCreationTime.dwHighDateTime=0x1d2fadb, ftLastAccessTime.dwLowDateTime=0xa43e8183, ftLastAccessTime.dwHighDateTime=0x1d2fadb, ftLastWriteTime.dwLowDateTime=0x67e52376, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x4219)) returned 1 [0208.118] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0208.118] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\2d8669052d2b7df8dd4b9607f2379c68aea752aafe0def6d5ce226264835a7ca" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\assets\\2d8669052d2b7df8dd4b9607f2379c68aea752aafe0def6d5ce226264835a7ca"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\2d8669052d2b7df8dd4b9607f2379c68aea752aafe0def6d5ce226264835a7ca.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\assets\\2d8669052d2b7df8dd4b9607f2379c68aea752aafe0def6d5ce226264835a7ca.xuy")) returned 1 [0208.120] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\3a53c604f9aa7fa34010083e9e398486423e851c704b4d50043aaf2a8574d9b2", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\3a53c604f9aa7fa34010083e9e398486423e851c704b4d50043aaf2a8574d9b2", lpFilePart=0x0) returned 0xb6 [0208.120] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0208.120] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\3a53c604f9aa7fa34010083e9e398486423e851c704b4d50043aaf2a8574d9b2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\assets\\3a53c604f9aa7fa34010083e9e398486423e851c704b4d50043aaf2a8574d9b2"), fInfoLevelId=0x0, lpFileInformation=0x21cdcf0 | out: lpFileInformation=0x21cdcf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa42dd0ab, ftCreationTime.dwHighDateTime=0x1d2fadb, ftLastAccessTime.dwLowDateTime=0xa42dd0ab, ftLastAccessTime.dwHighDateTime=0x1d2fadb, ftLastWriteTime.dwLowDateTime=0xa53da345, ftLastWriteTime.dwHighDateTime=0x1d2fadb, nFileSizeHigh=0x0, nFileSizeLow=0x477)) returned 1 [0208.120] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0208.120] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\3a53c604f9aa7fa34010083e9e398486423e851c704b4d50043aaf2a8574d9b2", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\3a53c604f9aa7fa34010083e9e398486423e851c704b4d50043aaf2a8574d9b2", lpFilePart=0x0) returned 0xb6 [0208.120] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0208.120] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\3a53c604f9aa7fa34010083e9e398486423e851c704b4d50043aaf2a8574d9b2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\assets\\3a53c604f9aa7fa34010083e9e398486423e851c704b4d50043aaf2a8574d9b2"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0208.120] GetFileType (hFile=0x444) returned 0x1 [0208.120] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0208.120] GetFileType (hFile=0x444) returned 0x1 [0208.120] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x477 [0208.120] ReadFile (in: hFile=0x444, lpBuffer=0x21ce6a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x21ce6a0*, lpNumberOfBytesRead=0x3be6a8*=0x477, lpOverlapped=0x0) returned 1 [0208.133] CloseHandle (hObject=0x444) returned 1 [0208.143] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\3a53c604f9aa7fa34010083e9e398486423e851c704b4d50043aaf2a8574d9b2", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\3a53c604f9aa7fa34010083e9e398486423e851c704b4d50043aaf2a8574d9b2", lpFilePart=0x0) returned 0xb6 [0208.143] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0208.143] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\3a53c604f9aa7fa34010083e9e398486423e851c704b4d50043aaf2a8574d9b2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\assets\\3a53c604f9aa7fa34010083e9e398486423e851c704b4d50043aaf2a8574d9b2"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0208.144] GetFileType (hFile=0x444) returned 0x1 [0208.144] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0208.144] GetFileType (hFile=0x444) returned 0x1 [0208.144] WriteFile (in: hFile=0x444, lpBuffer=0x2246e48*, nNumberOfBytesToWrite=0x480, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x2246e48*, lpNumberOfBytesWritten=0x3be5b8*=0x480, lpOverlapped=0x0) returned 1 [0208.145] CloseHandle (hObject=0x444) returned 1 [0208.145] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\3a53c604f9aa7fa34010083e9e398486423e851c704b4d50043aaf2a8574d9b2", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\3a53c604f9aa7fa34010083e9e398486423e851c704b4d50043aaf2a8574d9b2", lpFilePart=0x0) returned 0xb6 [0208.145] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\3a53c604f9aa7fa34010083e9e398486423e851c704b4d50043aaf2a8574d9b2.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\3a53c604f9aa7fa34010083e9e398486423e851c704b4d50043aaf2a8574d9b2.xuy", lpFilePart=0x0) returned 0xba [0208.145] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0208.145] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\3a53c604f9aa7fa34010083e9e398486423e851c704b4d50043aaf2a8574d9b2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\assets\\3a53c604f9aa7fa34010083e9e398486423e851c704b4d50043aaf2a8574d9b2"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa42dd0ab, ftCreationTime.dwHighDateTime=0x1d2fadb, ftLastAccessTime.dwLowDateTime=0xa42dd0ab, ftLastAccessTime.dwHighDateTime=0x1d2fadb, ftLastWriteTime.dwLowDateTime=0x67e9e869, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x480)) returned 1 [0208.145] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0208.145] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\3a53c604f9aa7fa34010083e9e398486423e851c704b4d50043aaf2a8574d9b2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\assets\\3a53c604f9aa7fa34010083e9e398486423e851c704b4d50043aaf2a8574d9b2"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\3a53c604f9aa7fa34010083e9e398486423e851c704b4d50043aaf2a8574d9b2.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\assets\\3a53c604f9aa7fa34010083e9e398486423e851c704b4d50043aaf2a8574d9b2.xuy")) returned 1 [0208.147] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\3a65241e49133a96904d70724844acb053dc753d3ab27f93e89f8059cbccdb92", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\3a65241e49133a96904d70724844acb053dc753d3ab27f93e89f8059cbccdb92", lpFilePart=0x0) returned 0xb6 [0208.147] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0208.147] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\3a65241e49133a96904d70724844acb053dc753d3ab27f93e89f8059cbccdb92" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\assets\\3a65241e49133a96904d70724844acb053dc753d3ab27f93e89f8059cbccdb92"), fInfoLevelId=0x0, lpFileInformation=0x2248328 | out: lpFileInformation=0x2248328*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa43c1f1e, ftCreationTime.dwHighDateTime=0x1d2fadb, ftLastAccessTime.dwLowDateTime=0xa43c1f1e, ftLastAccessTime.dwHighDateTime=0x1d2fadb, ftLastWriteTime.dwLowDateTime=0xa5793f8c, ftLastWriteTime.dwHighDateTime=0x1d2fadb, nFileSizeHigh=0x0, nFileSizeLow=0x4bb9)) returned 1 [0208.147] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0208.147] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\3a65241e49133a96904d70724844acb053dc753d3ab27f93e89f8059cbccdb92", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\3a65241e49133a96904d70724844acb053dc753d3ab27f93e89f8059cbccdb92", lpFilePart=0x0) returned 0xb6 [0208.147] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0208.147] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\3a65241e49133a96904d70724844acb053dc753d3ab27f93e89f8059cbccdb92" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\assets\\3a65241e49133a96904d70724844acb053dc753d3ab27f93e89f8059cbccdb92"), fInfoLevelId=0x0, lpFileInformation=0x22485b8 | out: lpFileInformation=0x22485b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa43c1f1e, ftCreationTime.dwHighDateTime=0x1d2fadb, ftLastAccessTime.dwLowDateTime=0xa43c1f1e, ftLastAccessTime.dwHighDateTime=0x1d2fadb, ftLastWriteTime.dwLowDateTime=0xa5793f8c, ftLastWriteTime.dwHighDateTime=0x1d2fadb, nFileSizeHigh=0x0, nFileSizeLow=0x4bb9)) returned 1 [0208.147] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0208.147] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\3a65241e49133a96904d70724844acb053dc753d3ab27f93e89f8059cbccdb92", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\3a65241e49133a96904d70724844acb053dc753d3ab27f93e89f8059cbccdb92", lpFilePart=0x0) returned 0xb6 [0208.147] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0208.147] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\3a65241e49133a96904d70724844acb053dc753d3ab27f93e89f8059cbccdb92" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\assets\\3a65241e49133a96904d70724844acb053dc753d3ab27f93e89f8059cbccdb92"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0208.148] GetFileType (hFile=0x444) returned 0x1 [0208.148] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0208.148] GetFileType (hFile=0x444) returned 0x1 [0208.148] ReadFile (in: hFile=0x444, lpBuffer=0x224ac08, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x224ac08*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0208.176] CloseHandle (hObject=0x444) returned 1 [0208.176] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\3a65241e49133a96904d70724844acb053dc753d3ab27f93e89f8059cbccdb92", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\3a65241e49133a96904d70724844acb053dc753d3ab27f93e89f8059cbccdb92", lpFilePart=0x0) returned 0xb6 [0208.176] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0208.176] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\3a65241e49133a96904d70724844acb053dc753d3ab27f93e89f8059cbccdb92" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\assets\\3a65241e49133a96904d70724844acb053dc753d3ab27f93e89f8059cbccdb92"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0208.177] GetFileType (hFile=0x444) returned 0x1 [0208.177] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0208.177] GetFileType (hFile=0x444) returned 0x1 [0208.177] WriteFile (in: hFile=0x444, lpBuffer=0x2248828*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x2248828*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0208.177] CloseHandle (hObject=0x444) returned 1 [0208.177] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\3a65241e49133a96904d70724844acb053dc753d3ab27f93e89f8059cbccdb92", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\3a65241e49133a96904d70724844acb053dc753d3ab27f93e89f8059cbccdb92", lpFilePart=0x0) returned 0xb6 [0208.177] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\3a65241e49133a96904d70724844acb053dc753d3ab27f93e89f8059cbccdb92.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\3a65241e49133a96904d70724844acb053dc753d3ab27f93e89f8059cbccdb92.xuy", lpFilePart=0x0) returned 0xba [0208.177] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0208.177] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\3a65241e49133a96904d70724844acb053dc753d3ab27f93e89f8059cbccdb92" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\assets\\3a65241e49133a96904d70724844acb053dc753d3ab27f93e89f8059cbccdb92"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa43c1f1e, ftCreationTime.dwHighDateTime=0x1d2fadb, ftLastAccessTime.dwLowDateTime=0xa43c1f1e, ftLastAccessTime.dwHighDateTime=0x1d2fadb, ftLastWriteTime.dwLowDateTime=0x67eeacb9, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x4bb9)) returned 1 [0208.177] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0208.177] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\3a65241e49133a96904d70724844acb053dc753d3ab27f93e89f8059cbccdb92" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\assets\\3a65241e49133a96904d70724844acb053dc753d3ab27f93e89f8059cbccdb92"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\3a65241e49133a96904d70724844acb053dc753d3ab27f93e89f8059cbccdb92.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\assets\\3a65241e49133a96904d70724844acb053dc753d3ab27f93e89f8059cbccdb92.xuy")) returned 1 [0208.179] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\440989d816ce3a311a914b13a22ba992f95690849d761ffa5caab5959db0c921", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\440989d816ce3a311a914b13a22ba992f95690849d761ffa5caab5959db0c921", lpFilePart=0x0) returned 0xb6 [0208.179] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0208.179] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\440989d816ce3a311a914b13a22ba992f95690849d761ffa5caab5959db0c921" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\assets\\440989d816ce3a311a914b13a22ba992f95690849d761ffa5caab5959db0c921"), fInfoLevelId=0x0, lpFileInformation=0x22c7360 | out: lpFileInformation=0x22c7360*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa42dd0ab, ftCreationTime.dwHighDateTime=0x1d2fadb, ftLastAccessTime.dwLowDateTime=0xa42dd0ab, ftLastAccessTime.dwHighDateTime=0x1d2fadb, ftLastWriteTime.dwLowDateTime=0xa49b7f74, ftLastWriteTime.dwHighDateTime=0x1d2fadb, nFileSizeHigh=0x0, nFileSizeLow=0x477)) returned 1 [0208.179] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0208.179] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\440989d816ce3a311a914b13a22ba992f95690849d761ffa5caab5959db0c921", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\440989d816ce3a311a914b13a22ba992f95690849d761ffa5caab5959db0c921", lpFilePart=0x0) returned 0xb6 [0208.179] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0208.179] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\440989d816ce3a311a914b13a22ba992f95690849d761ffa5caab5959db0c921" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\assets\\440989d816ce3a311a914b13a22ba992f95690849d761ffa5caab5959db0c921"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0208.179] GetFileType (hFile=0x444) returned 0x1 [0208.179] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0208.179] GetFileType (hFile=0x444) returned 0x1 [0208.179] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x477 [0208.179] ReadFile (in: hFile=0x444, lpBuffer=0x22c7d10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x22c7d10*, lpNumberOfBytesRead=0x3be6a8*=0x477, lpOverlapped=0x0) returned 1 [0208.180] CloseHandle (hObject=0x444) returned 1 [0208.194] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\440989d816ce3a311a914b13a22ba992f95690849d761ffa5caab5959db0c921", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\440989d816ce3a311a914b13a22ba992f95690849d761ffa5caab5959db0c921", lpFilePart=0x0) returned 0xb6 [0208.194] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0208.194] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\440989d816ce3a311a914b13a22ba992f95690849d761ffa5caab5959db0c921" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\assets\\440989d816ce3a311a914b13a22ba992f95690849d761ffa5caab5959db0c921"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0208.195] GetFileType (hFile=0x444) returned 0x1 [0208.195] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0208.196] GetFileType (hFile=0x444) returned 0x1 [0208.196] WriteFile (in: hFile=0x444, lpBuffer=0x23404b8*, nNumberOfBytesToWrite=0x480, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x23404b8*, lpNumberOfBytesWritten=0x3be5b8*=0x480, lpOverlapped=0x0) returned 1 [0208.196] CloseHandle (hObject=0x444) returned 1 [0208.196] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\440989d816ce3a311a914b13a22ba992f95690849d761ffa5caab5959db0c921", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\440989d816ce3a311a914b13a22ba992f95690849d761ffa5caab5959db0c921", lpFilePart=0x0) returned 0xb6 [0208.196] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\440989d816ce3a311a914b13a22ba992f95690849d761ffa5caab5959db0c921.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\440989d816ce3a311a914b13a22ba992f95690849d761ffa5caab5959db0c921.xuy", lpFilePart=0x0) returned 0xba [0208.196] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0208.196] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\440989d816ce3a311a914b13a22ba992f95690849d761ffa5caab5959db0c921" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\assets\\440989d816ce3a311a914b13a22ba992f95690849d761ffa5caab5959db0c921"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa42dd0ab, ftCreationTime.dwHighDateTime=0x1d2fadb, ftLastAccessTime.dwLowDateTime=0xa42dd0ab, ftLastAccessTime.dwHighDateTime=0x1d2fadb, ftLastWriteTime.dwLowDateTime=0x67f10d9b, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x480)) returned 1 [0208.197] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0208.197] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\440989d816ce3a311a914b13a22ba992f95690849d761ffa5caab5959db0c921" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\assets\\440989d816ce3a311a914b13a22ba992f95690849d761ffa5caab5959db0c921"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\440989d816ce3a311a914b13a22ba992f95690849d761ffa5caab5959db0c921.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\assets\\440989d816ce3a311a914b13a22ba992f95690849d761ffa5caab5959db0c921.xuy")) returned 1 [0208.198] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\7053f8c6068c46e40f1016f56c5a556103340ef5fe7752801b7744069ae0f861", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\7053f8c6068c46e40f1016f56c5a556103340ef5fe7752801b7744069ae0f861", lpFilePart=0x0) returned 0xb6 [0208.198] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0208.198] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\7053f8c6068c46e40f1016f56c5a556103340ef5fe7752801b7744069ae0f861" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\assets\\7053f8c6068c46e40f1016f56c5a556103340ef5fe7752801b7744069ae0f861"), fInfoLevelId=0x0, lpFileInformation=0x2341998 | out: lpFileInformation=0x2341998*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa439bcb0, ftCreationTime.dwHighDateTime=0x1d2fadb, ftLastAccessTime.dwLowDateTime=0xa439bcb0, ftLastAccessTime.dwHighDateTime=0x1d2fadb, ftLastWriteTime.dwLowDateTime=0xa544ca84, ftLastWriteTime.dwHighDateTime=0x1d2fadb, nFileSizeHigh=0x0, nFileSizeLow=0x477)) returned 1 [0208.198] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0208.198] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\7053f8c6068c46e40f1016f56c5a556103340ef5fe7752801b7744069ae0f861", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\7053f8c6068c46e40f1016f56c5a556103340ef5fe7752801b7744069ae0f861", lpFilePart=0x0) returned 0xb6 [0208.198] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0208.198] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\7053f8c6068c46e40f1016f56c5a556103340ef5fe7752801b7744069ae0f861" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\assets\\7053f8c6068c46e40f1016f56c5a556103340ef5fe7752801b7744069ae0f861"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0208.198] GetFileType (hFile=0x444) returned 0x1 [0208.198] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0208.198] GetFileType (hFile=0x444) returned 0x1 [0208.198] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x477 [0208.198] ReadFile (in: hFile=0x444, lpBuffer=0x2342348, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x2342348*, lpNumberOfBytesRead=0x3be6a8*=0x477, lpOverlapped=0x0) returned 1 [0208.200] CloseHandle (hObject=0x444) returned 1 [0208.212] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\7053f8c6068c46e40f1016f56c5a556103340ef5fe7752801b7744069ae0f861", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\7053f8c6068c46e40f1016f56c5a556103340ef5fe7752801b7744069ae0f861", lpFilePart=0x0) returned 0xb6 [0208.212] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0208.212] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\7053f8c6068c46e40f1016f56c5a556103340ef5fe7752801b7744069ae0f861" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\assets\\7053f8c6068c46e40f1016f56c5a556103340ef5fe7752801b7744069ae0f861"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0208.214] GetFileType (hFile=0x444) returned 0x1 [0208.214] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0208.214] GetFileType (hFile=0x444) returned 0x1 [0208.214] WriteFile (in: hFile=0x444, lpBuffer=0x21b7b58*, nNumberOfBytesToWrite=0x480, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x21b7b58*, lpNumberOfBytesWritten=0x3be5b8*=0x480, lpOverlapped=0x0) returned 1 [0208.215] CloseHandle (hObject=0x444) returned 1 [0208.215] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\7053f8c6068c46e40f1016f56c5a556103340ef5fe7752801b7744069ae0f861", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\7053f8c6068c46e40f1016f56c5a556103340ef5fe7752801b7744069ae0f861", lpFilePart=0x0) returned 0xb6 [0208.215] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\7053f8c6068c46e40f1016f56c5a556103340ef5fe7752801b7744069ae0f861.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\7053f8c6068c46e40f1016f56c5a556103340ef5fe7752801b7744069ae0f861.xuy", lpFilePart=0x0) returned 0xba [0208.215] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0208.215] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\7053f8c6068c46e40f1016f56c5a556103340ef5fe7752801b7744069ae0f861" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\assets\\7053f8c6068c46e40f1016f56c5a556103340ef5fe7752801b7744069ae0f861"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa439bcb0, ftCreationTime.dwHighDateTime=0x1d2fadb, ftLastAccessTime.dwLowDateTime=0xa439bcb0, ftLastAccessTime.dwHighDateTime=0x1d2fadb, ftLastWriteTime.dwLowDateTime=0x67f370b8, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x480)) returned 1 [0208.215] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0208.216] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\7053f8c6068c46e40f1016f56c5a556103340ef5fe7752801b7744069ae0f861" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\assets\\7053f8c6068c46e40f1016f56c5a556103340ef5fe7752801b7744069ae0f861"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\7053f8c6068c46e40f1016f56c5a556103340ef5fe7752801b7744069ae0f861.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\assets\\7053f8c6068c46e40f1016f56c5a556103340ef5fe7752801b7744069ae0f861.xuy")) returned 1 [0208.217] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\8567d7efc6dd43319b076ebebb98cc2abd2520838a9ebd41597e4052b4bd2a22", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\8567d7efc6dd43319b076ebebb98cc2abd2520838a9ebd41597e4052b4bd2a22", lpFilePart=0x0) returned 0xb6 [0208.217] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0208.217] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\8567d7efc6dd43319b076ebebb98cc2abd2520838a9ebd41597e4052b4bd2a22" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\assets\\8567d7efc6dd43319b076ebebb98cc2abd2520838a9ebd41597e4052b4bd2a22"), fInfoLevelId=0x0, lpFileInformation=0x21b9038 | out: lpFileInformation=0x21b9038*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa43c1f1e, ftCreationTime.dwHighDateTime=0x1d2fadb, ftLastAccessTime.dwLowDateTime=0xa43c1f1e, ftLastAccessTime.dwHighDateTime=0x1d2fadb, ftLastWriteTime.dwLowDateTime=0xa55a403e, ftLastWriteTime.dwHighDateTime=0x1d2fadb, nFileSizeHigh=0x0, nFileSizeLow=0x475d)) returned 1 [0208.217] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0208.217] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\8567d7efc6dd43319b076ebebb98cc2abd2520838a9ebd41597e4052b4bd2a22", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\8567d7efc6dd43319b076ebebb98cc2abd2520838a9ebd41597e4052b4bd2a22", lpFilePart=0x0) returned 0xb6 [0208.217] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0208.217] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\8567d7efc6dd43319b076ebebb98cc2abd2520838a9ebd41597e4052b4bd2a22" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\assets\\8567d7efc6dd43319b076ebebb98cc2abd2520838a9ebd41597e4052b4bd2a22"), fInfoLevelId=0x0, lpFileInformation=0x21b92c8 | out: lpFileInformation=0x21b92c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa43c1f1e, ftCreationTime.dwHighDateTime=0x1d2fadb, ftLastAccessTime.dwLowDateTime=0xa43c1f1e, ftLastAccessTime.dwHighDateTime=0x1d2fadb, ftLastWriteTime.dwLowDateTime=0xa55a403e, ftLastWriteTime.dwHighDateTime=0x1d2fadb, nFileSizeHigh=0x0, nFileSizeLow=0x475d)) returned 1 [0208.217] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0208.217] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\8567d7efc6dd43319b076ebebb98cc2abd2520838a9ebd41597e4052b4bd2a22", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\8567d7efc6dd43319b076ebebb98cc2abd2520838a9ebd41597e4052b4bd2a22", lpFilePart=0x0) returned 0xb6 [0208.217] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0208.217] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\8567d7efc6dd43319b076ebebb98cc2abd2520838a9ebd41597e4052b4bd2a22" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\assets\\8567d7efc6dd43319b076ebebb98cc2abd2520838a9ebd41597e4052b4bd2a22"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0208.219] GetFileType (hFile=0x444) returned 0x1 [0208.219] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0208.219] GetFileType (hFile=0x444) returned 0x1 [0208.219] ReadFile (in: hFile=0x444, lpBuffer=0x21bb918, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x21bb918*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0208.237] CloseHandle (hObject=0x444) returned 1 [0208.237] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\8567d7efc6dd43319b076ebebb98cc2abd2520838a9ebd41597e4052b4bd2a22", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\8567d7efc6dd43319b076ebebb98cc2abd2520838a9ebd41597e4052b4bd2a22", lpFilePart=0x0) returned 0xb6 [0208.237] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0208.237] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\8567d7efc6dd43319b076ebebb98cc2abd2520838a9ebd41597e4052b4bd2a22" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\assets\\8567d7efc6dd43319b076ebebb98cc2abd2520838a9ebd41597e4052b4bd2a22"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0208.238] GetFileType (hFile=0x444) returned 0x1 [0208.238] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0208.238] GetFileType (hFile=0x444) returned 0x1 [0208.238] WriteFile (in: hFile=0x444, lpBuffer=0x21b9538*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x21b9538*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0208.238] CloseHandle (hObject=0x444) returned 1 [0208.238] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\8567d7efc6dd43319b076ebebb98cc2abd2520838a9ebd41597e4052b4bd2a22", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\8567d7efc6dd43319b076ebebb98cc2abd2520838a9ebd41597e4052b4bd2a22", lpFilePart=0x0) returned 0xb6 [0208.238] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\8567d7efc6dd43319b076ebebb98cc2abd2520838a9ebd41597e4052b4bd2a22.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\8567d7efc6dd43319b076ebebb98cc2abd2520838a9ebd41597e4052b4bd2a22.xuy", lpFilePart=0x0) returned 0xba [0208.238] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0208.238] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\8567d7efc6dd43319b076ebebb98cc2abd2520838a9ebd41597e4052b4bd2a22" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\assets\\8567d7efc6dd43319b076ebebb98cc2abd2520838a9ebd41597e4052b4bd2a22"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa43c1f1e, ftCreationTime.dwHighDateTime=0x1d2fadb, ftLastAccessTime.dwLowDateTime=0xa43c1f1e, ftLastAccessTime.dwHighDateTime=0x1d2fadb, ftLastWriteTime.dwLowDateTime=0x67f8356a, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x475d)) returned 1 [0208.238] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0208.238] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\8567d7efc6dd43319b076ebebb98cc2abd2520838a9ebd41597e4052b4bd2a22" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\assets\\8567d7efc6dd43319b076ebebb98cc2abd2520838a9ebd41597e4052b4bd2a22"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\8567d7efc6dd43319b076ebebb98cc2abd2520838a9ebd41597e4052b4bd2a22.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\assets\\8567d7efc6dd43319b076ebebb98cc2abd2520838a9ebd41597e4052b4bd2a22.xuy")) returned 1 [0208.240] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\86f03f60d39829e5fba5aa195da9eedb1ad88e99410bf7fa169d1558aaf35bdd", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\86f03f60d39829e5fba5aa195da9eedb1ad88e99410bf7fa169d1558aaf35bdd", lpFilePart=0x0) returned 0xb6 [0208.240] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0208.240] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\86f03f60d39829e5fba5aa195da9eedb1ad88e99410bf7fa169d1558aaf35bdd" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\assets\\86f03f60d39829e5fba5aa195da9eedb1ad88e99410bf7fa169d1558aaf35bdd"), fInfoLevelId=0x0, lpFileInformation=0x2238070 | out: lpFileInformation=0x2238070*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa426a964, ftCreationTime.dwHighDateTime=0x1d2fadb, ftLastAccessTime.dwLowDateTime=0xa426a964, ftLastAccessTime.dwHighDateTime=0x1d2fadb, ftLastWriteTime.dwLowDateTime=0xa4991cf6, ftLastWriteTime.dwHighDateTime=0x1d2fadb, nFileSizeHigh=0x0, nFileSizeLow=0x477)) returned 1 [0208.240] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0208.240] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\86f03f60d39829e5fba5aa195da9eedb1ad88e99410bf7fa169d1558aaf35bdd", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\86f03f60d39829e5fba5aa195da9eedb1ad88e99410bf7fa169d1558aaf35bdd", lpFilePart=0x0) returned 0xb6 [0208.240] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0208.240] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\86f03f60d39829e5fba5aa195da9eedb1ad88e99410bf7fa169d1558aaf35bdd" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\assets\\86f03f60d39829e5fba5aa195da9eedb1ad88e99410bf7fa169d1558aaf35bdd"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0208.240] GetFileType (hFile=0x444) returned 0x1 [0208.240] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0208.240] GetFileType (hFile=0x444) returned 0x1 [0208.240] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x477 [0208.240] ReadFile (in: hFile=0x444, lpBuffer=0x2238a20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x2238a20*, lpNumberOfBytesRead=0x3be6a8*=0x477, lpOverlapped=0x0) returned 1 [0208.254] CloseHandle (hObject=0x444) returned 1 [0208.265] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\86f03f60d39829e5fba5aa195da9eedb1ad88e99410bf7fa169d1558aaf35bdd", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\86f03f60d39829e5fba5aa195da9eedb1ad88e99410bf7fa169d1558aaf35bdd", lpFilePart=0x0) returned 0xb6 [0208.265] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0208.265] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\86f03f60d39829e5fba5aa195da9eedb1ad88e99410bf7fa169d1558aaf35bdd" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\assets\\86f03f60d39829e5fba5aa195da9eedb1ad88e99410bf7fa169d1558aaf35bdd"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0208.267] GetFileType (hFile=0x444) returned 0x1 [0208.267] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0208.267] GetFileType (hFile=0x444) returned 0x1 [0208.267] WriteFile (in: hFile=0x444, lpBuffer=0x22b11c8*, nNumberOfBytesToWrite=0x480, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x22b11c8*, lpNumberOfBytesWritten=0x3be5b8*=0x480, lpOverlapped=0x0) returned 1 [0208.268] CloseHandle (hObject=0x444) returned 1 [0208.268] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\86f03f60d39829e5fba5aa195da9eedb1ad88e99410bf7fa169d1558aaf35bdd", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\86f03f60d39829e5fba5aa195da9eedb1ad88e99410bf7fa169d1558aaf35bdd", lpFilePart=0x0) returned 0xb6 [0208.268] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\86f03f60d39829e5fba5aa195da9eedb1ad88e99410bf7fa169d1558aaf35bdd.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\86f03f60d39829e5fba5aa195da9eedb1ad88e99410bf7fa169d1558aaf35bdd.xuy", lpFilePart=0x0) returned 0xba [0208.268] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0208.268] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\86f03f60d39829e5fba5aa195da9eedb1ad88e99410bf7fa169d1558aaf35bdd" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\assets\\86f03f60d39829e5fba5aa195da9eedb1ad88e99410bf7fa169d1558aaf35bdd"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa426a964, ftCreationTime.dwHighDateTime=0x1d2fadb, ftLastAccessTime.dwLowDateTime=0xa426a964, ftLastAccessTime.dwHighDateTime=0x1d2fadb, ftLastWriteTime.dwLowDateTime=0x67fcfa0c, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x480)) returned 1 [0208.268] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0208.268] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\86f03f60d39829e5fba5aa195da9eedb1ad88e99410bf7fa169d1558aaf35bdd" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\assets\\86f03f60d39829e5fba5aa195da9eedb1ad88e99410bf7fa169d1558aaf35bdd"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\86f03f60d39829e5fba5aa195da9eedb1ad88e99410bf7fa169d1558aaf35bdd.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\assets\\86f03f60d39829e5fba5aa195da9eedb1ad88e99410bf7fa169d1558aaf35bdd.xuy")) returned 1 [0208.269] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\91dd86d2e068177d1504451bc4f923d177183c305ba3a521ebe87a3ca889ed90", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\91dd86d2e068177d1504451bc4f923d177183c305ba3a521ebe87a3ca889ed90", lpFilePart=0x0) returned 0xb6 [0208.270] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0208.270] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\91dd86d2e068177d1504451bc4f923d177183c305ba3a521ebe87a3ca889ed90" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\assets\\91dd86d2e068177d1504451bc4f923d177183c305ba3a521ebe87a3ca889ed90"), fInfoLevelId=0x0, lpFileInformation=0x22b26a8 | out: lpFileInformation=0x22b26a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4290bcf, ftCreationTime.dwHighDateTime=0x1d2fadb, ftLastAccessTime.dwLowDateTime=0xa4290bcf, ftLastAccessTime.dwHighDateTime=0x1d2fadb, ftLastWriteTime.dwLowDateTime=0xa50b90b7, ftLastWriteTime.dwHighDateTime=0x1d2fadb, nFileSizeHigh=0x0, nFileSizeLow=0x41b4)) returned 1 [0208.270] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0208.270] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\91dd86d2e068177d1504451bc4f923d177183c305ba3a521ebe87a3ca889ed90", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\91dd86d2e068177d1504451bc4f923d177183c305ba3a521ebe87a3ca889ed90", lpFilePart=0x0) returned 0xb6 [0208.270] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0208.270] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\91dd86d2e068177d1504451bc4f923d177183c305ba3a521ebe87a3ca889ed90" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\assets\\91dd86d2e068177d1504451bc4f923d177183c305ba3a521ebe87a3ca889ed90"), fInfoLevelId=0x0, lpFileInformation=0x22b2938 | out: lpFileInformation=0x22b2938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4290bcf, ftCreationTime.dwHighDateTime=0x1d2fadb, ftLastAccessTime.dwLowDateTime=0xa4290bcf, ftLastAccessTime.dwHighDateTime=0x1d2fadb, ftLastWriteTime.dwLowDateTime=0xa50b90b7, ftLastWriteTime.dwHighDateTime=0x1d2fadb, nFileSizeHigh=0x0, nFileSizeLow=0x41b4)) returned 1 [0208.270] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0208.270] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\91dd86d2e068177d1504451bc4f923d177183c305ba3a521ebe87a3ca889ed90", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\91dd86d2e068177d1504451bc4f923d177183c305ba3a521ebe87a3ca889ed90", lpFilePart=0x0) returned 0xb6 [0208.270] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0208.270] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\91dd86d2e068177d1504451bc4f923d177183c305ba3a521ebe87a3ca889ed90" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\assets\\91dd86d2e068177d1504451bc4f923d177183c305ba3a521ebe87a3ca889ed90"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0208.271] GetFileType (hFile=0x444) returned 0x1 [0208.271] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0208.271] GetFileType (hFile=0x444) returned 0x1 [0208.271] ReadFile (in: hFile=0x444, lpBuffer=0x22b4f88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x22b4f88*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0208.293] CloseHandle (hObject=0x444) returned 1 [0208.293] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\91dd86d2e068177d1504451bc4f923d177183c305ba3a521ebe87a3ca889ed90", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\91dd86d2e068177d1504451bc4f923d177183c305ba3a521ebe87a3ca889ed90", lpFilePart=0x0) returned 0xb6 [0208.293] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0208.293] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\91dd86d2e068177d1504451bc4f923d177183c305ba3a521ebe87a3ca889ed90" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\assets\\91dd86d2e068177d1504451bc4f923d177183c305ba3a521ebe87a3ca889ed90"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0208.293] GetFileType (hFile=0x444) returned 0x1 [0208.293] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0208.293] GetFileType (hFile=0x444) returned 0x1 [0208.293] WriteFile (in: hFile=0x444, lpBuffer=0x22b2ba8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x22b2ba8*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0208.293] CloseHandle (hObject=0x444) returned 1 [0208.294] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\91dd86d2e068177d1504451bc4f923d177183c305ba3a521ebe87a3ca889ed90", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\91dd86d2e068177d1504451bc4f923d177183c305ba3a521ebe87a3ca889ed90", lpFilePart=0x0) returned 0xb6 [0208.294] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\91dd86d2e068177d1504451bc4f923d177183c305ba3a521ebe87a3ca889ed90.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\91dd86d2e068177d1504451bc4f923d177183c305ba3a521ebe87a3ca889ed90.xuy", lpFilePart=0x0) returned 0xba [0208.294] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0208.294] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\91dd86d2e068177d1504451bc4f923d177183c305ba3a521ebe87a3ca889ed90" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\assets\\91dd86d2e068177d1504451bc4f923d177183c305ba3a521ebe87a3ca889ed90"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4290bcf, ftCreationTime.dwHighDateTime=0x1d2fadb, ftLastAccessTime.dwLowDateTime=0xa4290bcf, ftLastAccessTime.dwHighDateTime=0x1d2fadb, ftLastWriteTime.dwLowDateTime=0x67ff5c41, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x41b4)) returned 1 [0208.294] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0208.294] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\91dd86d2e068177d1504451bc4f923d177183c305ba3a521ebe87a3ca889ed90" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\assets\\91dd86d2e068177d1504451bc4f923d177183c305ba3a521ebe87a3ca889ed90"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\91dd86d2e068177d1504451bc4f923d177183c305ba3a521ebe87a3ca889ed90.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\assets\\91dd86d2e068177d1504451bc4f923d177183c305ba3a521ebe87a3ca889ed90.xuy")) returned 1 [0208.295] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\d6f3a2f0c0f5d4ad6cab70713323cac7710e91ff13667b2200b6b800881ac10f", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\d6f3a2f0c0f5d4ad6cab70713323cac7710e91ff13667b2200b6b800881ac10f", lpFilePart=0x0) returned 0xb6 [0208.295] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0208.296] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\d6f3a2f0c0f5d4ad6cab70713323cac7710e91ff13667b2200b6b800881ac10f" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\assets\\d6f3a2f0c0f5d4ad6cab70713323cac7710e91ff13667b2200b6b800881ac10f"), fInfoLevelId=0x0, lpFileInformation=0x23316e0 | out: lpFileInformation=0x23316e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa42b6e49, ftCreationTime.dwHighDateTime=0x1d2fadb, ftLastAccessTime.dwLowDateTime=0xa42b6e49, ftLastAccessTime.dwHighDateTime=0x1d2fadb, ftLastWriteTime.dwLowDateTime=0xa48f9369, ftLastWriteTime.dwHighDateTime=0x1d2fadb, nFileSizeHigh=0x0, nFileSizeLow=0x5a8c)) returned 1 [0208.296] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0208.296] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\d6f3a2f0c0f5d4ad6cab70713323cac7710e91ff13667b2200b6b800881ac10f", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\d6f3a2f0c0f5d4ad6cab70713323cac7710e91ff13667b2200b6b800881ac10f", lpFilePart=0x0) returned 0xb6 [0208.296] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0208.296] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\d6f3a2f0c0f5d4ad6cab70713323cac7710e91ff13667b2200b6b800881ac10f" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\assets\\d6f3a2f0c0f5d4ad6cab70713323cac7710e91ff13667b2200b6b800881ac10f"), fInfoLevelId=0x0, lpFileInformation=0x2331970 | out: lpFileInformation=0x2331970*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa42b6e49, ftCreationTime.dwHighDateTime=0x1d2fadb, ftLastAccessTime.dwLowDateTime=0xa42b6e49, ftLastAccessTime.dwHighDateTime=0x1d2fadb, ftLastWriteTime.dwLowDateTime=0xa48f9369, ftLastWriteTime.dwHighDateTime=0x1d2fadb, nFileSizeHigh=0x0, nFileSizeLow=0x5a8c)) returned 1 [0208.296] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0208.296] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\d6f3a2f0c0f5d4ad6cab70713323cac7710e91ff13667b2200b6b800881ac10f", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\d6f3a2f0c0f5d4ad6cab70713323cac7710e91ff13667b2200b6b800881ac10f", lpFilePart=0x0) returned 0xb6 [0208.296] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0208.296] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\d6f3a2f0c0f5d4ad6cab70713323cac7710e91ff13667b2200b6b800881ac10f" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\assets\\d6f3a2f0c0f5d4ad6cab70713323cac7710e91ff13667b2200b6b800881ac10f"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0208.319] GetFileType (hFile=0x444) returned 0x1 [0208.319] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0208.319] GetFileType (hFile=0x444) returned 0x1 [0208.319] ReadFile (in: hFile=0x444, lpBuffer=0x2333fc0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x2333fc0*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0208.333] CloseHandle (hObject=0x444) returned 1 [0208.333] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\d6f3a2f0c0f5d4ad6cab70713323cac7710e91ff13667b2200b6b800881ac10f", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\d6f3a2f0c0f5d4ad6cab70713323cac7710e91ff13667b2200b6b800881ac10f", lpFilePart=0x0) returned 0xb6 [0208.333] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0208.333] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\d6f3a2f0c0f5d4ad6cab70713323cac7710e91ff13667b2200b6b800881ac10f" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\assets\\d6f3a2f0c0f5d4ad6cab70713323cac7710e91ff13667b2200b6b800881ac10f"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0208.334] GetFileType (hFile=0x444) returned 0x1 [0208.334] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0208.334] GetFileType (hFile=0x444) returned 0x1 [0208.334] WriteFile (in: hFile=0x444, lpBuffer=0x21886b8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x21886b8*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0208.334] CloseHandle (hObject=0x444) returned 1 [0208.334] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\d6f3a2f0c0f5d4ad6cab70713323cac7710e91ff13667b2200b6b800881ac10f", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\d6f3a2f0c0f5d4ad6cab70713323cac7710e91ff13667b2200b6b800881ac10f", lpFilePart=0x0) returned 0xb6 [0208.334] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\d6f3a2f0c0f5d4ad6cab70713323cac7710e91ff13667b2200b6b800881ac10f.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\d6f3a2f0c0f5d4ad6cab70713323cac7710e91ff13667b2200b6b800881ac10f.xuy", lpFilePart=0x0) returned 0xba [0208.334] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0208.334] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\d6f3a2f0c0f5d4ad6cab70713323cac7710e91ff13667b2200b6b800881ac10f" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\assets\\d6f3a2f0c0f5d4ad6cab70713323cac7710e91ff13667b2200b6b800881ac10f"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa42b6e49, ftCreationTime.dwHighDateTime=0x1d2fadb, ftLastAccessTime.dwLowDateTime=0xa42b6e49, ftLastAccessTime.dwHighDateTime=0x1d2fadb, ftLastWriteTime.dwLowDateTime=0x6806848d, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x5a8c)) returned 1 [0208.334] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0208.334] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\d6f3a2f0c0f5d4ad6cab70713323cac7710e91ff13667b2200b6b800881ac10f" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\assets\\d6f3a2f0c0f5d4ad6cab70713323cac7710e91ff13667b2200b6b800881ac10f"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\d6f3a2f0c0f5d4ad6cab70713323cac7710e91ff13667b2200b6b800881ac10f.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\assets\\d6f3a2f0c0f5d4ad6cab70713323cac7710e91ff13667b2200b6b800881ac10f.xuy")) returned 1 [0208.344] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\f7df316937e894c20be9f8a6fc118847e60ea2dfe33cc1924f24346307e2b268", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\f7df316937e894c20be9f8a6fc118847e60ea2dfe33cc1924f24346307e2b268", lpFilePart=0x0) returned 0xb6 [0208.344] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0208.344] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\f7df316937e894c20be9f8a6fc118847e60ea2dfe33cc1924f24346307e2b268" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\assets\\f7df316937e894c20be9f8a6fc118847e60ea2dfe33cc1924f24346307e2b268"), fInfoLevelId=0x0, lpFileInformation=0x21b3468 | out: lpFileInformation=0x21b3468*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4290bcf, ftCreationTime.dwHighDateTime=0x1d2fadb, ftLastAccessTime.dwLowDateTime=0xa4290bcf, ftLastAccessTime.dwHighDateTime=0x1d2fadb, ftLastWriteTime.dwLowDateTime=0xa48f9369, ftLastWriteTime.dwHighDateTime=0x1d2fadb, nFileSizeHigh=0x0, nFileSizeLow=0x475c)) returned 1 [0208.344] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0208.344] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\f7df316937e894c20be9f8a6fc118847e60ea2dfe33cc1924f24346307e2b268", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\f7df316937e894c20be9f8a6fc118847e60ea2dfe33cc1924f24346307e2b268", lpFilePart=0x0) returned 0xb6 [0208.344] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0208.344] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\f7df316937e894c20be9f8a6fc118847e60ea2dfe33cc1924f24346307e2b268" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\assets\\f7df316937e894c20be9f8a6fc118847e60ea2dfe33cc1924f24346307e2b268"), fInfoLevelId=0x0, lpFileInformation=0x21b36f8 | out: lpFileInformation=0x21b36f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4290bcf, ftCreationTime.dwHighDateTime=0x1d2fadb, ftLastAccessTime.dwLowDateTime=0xa4290bcf, ftLastAccessTime.dwHighDateTime=0x1d2fadb, ftLastWriteTime.dwLowDateTime=0xa48f9369, ftLastWriteTime.dwHighDateTime=0x1d2fadb, nFileSizeHigh=0x0, nFileSizeLow=0x475c)) returned 1 [0208.344] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0208.344] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\f7df316937e894c20be9f8a6fc118847e60ea2dfe33cc1924f24346307e2b268", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\f7df316937e894c20be9f8a6fc118847e60ea2dfe33cc1924f24346307e2b268", lpFilePart=0x0) returned 0xb6 [0208.344] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0208.344] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\f7df316937e894c20be9f8a6fc118847e60ea2dfe33cc1924f24346307e2b268" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\assets\\f7df316937e894c20be9f8a6fc118847e60ea2dfe33cc1924f24346307e2b268"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0208.345] GetFileType (hFile=0x444) returned 0x1 [0208.345] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0208.345] GetFileType (hFile=0x444) returned 0x1 [0208.345] ReadFile (in: hFile=0x444, lpBuffer=0x21b5d48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x21b5d48*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0208.514] CloseHandle (hObject=0x444) returned 1 [0208.514] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\f7df316937e894c20be9f8a6fc118847e60ea2dfe33cc1924f24346307e2b268", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\f7df316937e894c20be9f8a6fc118847e60ea2dfe33cc1924f24346307e2b268", lpFilePart=0x0) returned 0xb6 [0208.514] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0208.514] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\f7df316937e894c20be9f8a6fc118847e60ea2dfe33cc1924f24346307e2b268" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\assets\\f7df316937e894c20be9f8a6fc118847e60ea2dfe33cc1924f24346307e2b268"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0208.515] GetFileType (hFile=0x444) returned 0x1 [0208.515] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0208.515] GetFileType (hFile=0x444) returned 0x1 [0208.515] WriteFile (in: hFile=0x444, lpBuffer=0x21b3968*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x21b3968*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0208.515] CloseHandle (hObject=0x444) returned 1 [0208.515] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\f7df316937e894c20be9f8a6fc118847e60ea2dfe33cc1924f24346307e2b268", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\f7df316937e894c20be9f8a6fc118847e60ea2dfe33cc1924f24346307e2b268", lpFilePart=0x0) returned 0xb6 [0208.516] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\f7df316937e894c20be9f8a6fc118847e60ea2dfe33cc1924f24346307e2b268.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\f7df316937e894c20be9f8a6fc118847e60ea2dfe33cc1924f24346307e2b268.xuy", lpFilePart=0x0) returned 0xba [0208.516] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0208.516] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\f7df316937e894c20be9f8a6fc118847e60ea2dfe33cc1924f24346307e2b268" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\assets\\f7df316937e894c20be9f8a6fc118847e60ea2dfe33cc1924f24346307e2b268"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4290bcf, ftCreationTime.dwHighDateTime=0x1d2fadb, ftLastAccessTime.dwLowDateTime=0xa4290bcf, ftLastAccessTime.dwHighDateTime=0x1d2fadb, ftLastWriteTime.dwLowDateTime=0x6820bef3, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x475c)) returned 1 [0208.516] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0208.516] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\f7df316937e894c20be9f8a6fc118847e60ea2dfe33cc1924f24346307e2b268" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\assets\\f7df316937e894c20be9f8a6fc118847e60ea2dfe33cc1924f24346307e2b268"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\f7df316937e894c20be9f8a6fc118847e60ea2dfe33cc1924f24346307e2b268.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\assets\\f7df316937e894c20be9f8a6fc118847e60ea2dfe33cc1924f24346307e2b268.xuy")) returned 1 [0208.518] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0208.518] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK", lpFilePart=0x0) returned 0x83 [0208.518] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\", lpFilePart=0x0) returned 0x84 [0208.518] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d81b0 [0208.518] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0208.518] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0208.518] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0208.518] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0208.518] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0208.519] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0208.519] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0208.519] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK", lpFilePart=0x0) returned 0x83 [0208.519] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\", lpFilePart=0x0) returned 0x84 [0208.519] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7d30 [0208.519] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0208.519] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0208.519] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0208.519] FindClose (in: hFindFile=0x5d7d30 | out: hFindFile=0x5d7d30) returned 1 [0208.519] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0208.519] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0208.519] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0208.519] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives", lpFilePart=0x0) returned 0x8d [0208.519] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\", lpFilePart=0x0) returned 0x8e [0208.519] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d7550 [0208.521] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0208.521] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0208.521] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0208.521] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0208.521] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0208.521] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0208.522] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0208.522] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0208.522] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0208.522] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0208.523] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0208.523] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0208.523] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0208.523] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives", lpFilePart=0x0) returned 0x8d [0208.523] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\", lpFilePart=0x0) returned 0x8e [0208.523] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d7610 [0208.524] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0208.524] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0208.524] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0208.524] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0208.524] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0208.525] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0208.525] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0208.525] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0208.525] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0208.525] FindClose (in: hFindFile=0x5d7610 | out: hFindFile=0x5d7610) returned 1 [0208.526] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0208.526] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0208.526] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0208.526] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209562", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209562", lpFilePart=0x0) returned 0x94 [0208.526] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209562\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209562\\", lpFilePart=0x0) returned 0x95 [0208.526] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209562\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d7550 [0208.527] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0208.527] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0208.527] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0208.527] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0208.527] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0208.527] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0208.527] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0208.527] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0208.527] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209562", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209562", lpFilePart=0x0) returned 0x94 [0208.527] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209562\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209562\\", lpFilePart=0x0) returned 0x95 [0208.527] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209562\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d7d90 [0208.527] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0208.528] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0208.528] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0208.528] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0208.528] FindClose (in: hFindFile=0x5d7d90 | out: hFindFile=0x5d7d90) returned 1 [0208.528] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0208.528] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0208.528] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209562\\eventbeacons.dat", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209562\\eventbeacons.dat", lpFilePart=0x0) returned 0xa5 [0208.528] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0208.528] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209562\\eventbeacons.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209562\\eventbeacons.dat"), fInfoLevelId=0x0, lpFileInformation=0x223df90 | out: lpFileInformation=0x223df90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc753fdc3, ftCreationTime.dwHighDateTime=0x1d2d40c, ftLastAccessTime.dwLowDateTime=0xc753fdc3, ftLastAccessTime.dwHighDateTime=0x1d2d40c, ftLastWriteTime.dwLowDateTime=0x53fe970b, ftLastWriteTime.dwHighDateTime=0x1d41fda, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0208.528] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0208.528] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209562\\eventbeacons.dat", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209562\\eventbeacons.dat", lpFilePart=0x0) returned 0xa5 [0208.528] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0208.528] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209562\\eventbeacons.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209562\\eventbeacons.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0208.529] GetFileType (hFile=0x444) returned 0x1 [0208.529] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0208.529] GetFileType (hFile=0x444) returned 0x1 [0208.529] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x0 [0208.529] CloseHandle (hObject=0x444) returned 1 [0208.539] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209562\\eventbeacons.dat", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209562\\eventbeacons.dat", lpFilePart=0x0) returned 0xa5 [0208.539] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0208.539] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209562\\eventbeacons.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209562\\eventbeacons.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0208.540] GetFileType (hFile=0x444) returned 0x1 [0208.540] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0208.540] GetFileType (hFile=0x444) returned 0x1 [0208.540] WriteFile (in: hFile=0x444, lpBuffer=0x22b4578*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x22b4578*, lpNumberOfBytesWritten=0x3be4d8*=0x10, lpOverlapped=0x0) returned 1 [0208.541] CloseHandle (hObject=0x444) returned 1 [0208.541] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209562\\eventbeacons.dat", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209562\\eventbeacons.dat", lpFilePart=0x0) returned 0xa5 [0208.541] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209562\\eventbeacons.dat.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209562\\eventbeacons.dat.xuy", lpFilePart=0x0) returned 0xa9 [0208.542] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0208.542] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209562\\eventbeacons.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209562\\eventbeacons.dat"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc753fdc3, ftCreationTime.dwHighDateTime=0x1d2d40c, ftLastAccessTime.dwLowDateTime=0xc753fdc3, ftLastAccessTime.dwHighDateTime=0x1d2d40c, ftLastWriteTime.dwLowDateTime=0x68258286, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0208.542] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0208.542] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209562\\eventbeacons.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209562\\eventbeacons.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209562\\eventbeacons.dat.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209562\\eventbeacons.dat.xuy")) returned 1 [0208.543] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209562\\imprbeacons.dat", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209562\\imprbeacons.dat", lpFilePart=0x0) returned 0xa4 [0208.543] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0208.543] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209562\\imprbeacons.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209562\\imprbeacons.dat"), fInfoLevelId=0x0, lpFileInformation=0x22b5a20 | out: lpFileInformation=0x22b5a20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc753fdc3, ftCreationTime.dwHighDateTime=0x1d2d40c, ftLastAccessTime.dwLowDateTime=0xc753fdc3, ftLastAccessTime.dwHighDateTime=0x1d2d40c, ftLastWriteTime.dwLowDateTime=0x53d86e2c, ftLastWriteTime.dwHighDateTime=0x1d41fda, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0208.543] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0208.543] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209562\\imprbeacons.dat", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209562\\imprbeacons.dat", lpFilePart=0x0) returned 0xa4 [0208.543] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0208.543] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209562\\imprbeacons.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209562\\imprbeacons.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0208.543] GetFileType (hFile=0x444) returned 0x1 [0208.544] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0208.544] GetFileType (hFile=0x444) returned 0x1 [0208.544] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x0 [0208.544] CloseHandle (hObject=0x444) returned 1 [0208.663] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209562\\imprbeacons.dat", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209562\\imprbeacons.dat", lpFilePart=0x0) returned 0xa4 [0208.663] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0208.663] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209562\\imprbeacons.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209562\\imprbeacons.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0208.665] GetFileType (hFile=0x444) returned 0x1 [0208.665] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0208.665] GetFileType (hFile=0x444) returned 0x1 [0208.665] WriteFile (in: hFile=0x444, lpBuffer=0x232bff0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x232bff0*, lpNumberOfBytesWritten=0x3be4d8*=0x10, lpOverlapped=0x0) returned 1 [0208.665] CloseHandle (hObject=0x444) returned 1 [0208.666] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209562\\imprbeacons.dat", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209562\\imprbeacons.dat", lpFilePart=0x0) returned 0xa4 [0208.666] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209562\\imprbeacons.dat.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209562\\imprbeacons.dat.xuy", lpFilePart=0x0) returned 0xa8 [0208.666] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0208.666] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209562\\imprbeacons.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209562\\imprbeacons.dat"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc753fdc3, ftCreationTime.dwHighDateTime=0x1d2d40c, ftLastAccessTime.dwLowDateTime=0xc753fdc3, ftLastAccessTime.dwHighDateTime=0x1d2d40c, ftLastWriteTime.dwLowDateTime=0x683894dc, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0208.666] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0208.666] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209562\\imprbeacons.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209562\\imprbeacons.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209562\\imprbeacons.dat.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209562\\imprbeacons.dat.xuy")) returned 1 [0208.667] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0208.667] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209776", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209776", lpFilePart=0x0) returned 0x94 [0208.667] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209776\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209776\\", lpFilePart=0x0) returned 0x95 [0208.667] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209776\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d7c70 [0208.667] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0208.668] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0208.668] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0208.668] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0208.668] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0208.668] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0208.668] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0208.668] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0208.668] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209776", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209776", lpFilePart=0x0) returned 0x94 [0208.668] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209776\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209776\\", lpFilePart=0x0) returned 0x95 [0208.668] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209776\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d78b0 [0208.668] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0208.668] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0208.669] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0208.669] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0208.669] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0208.669] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0208.669] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0208.669] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209776\\eventbeacons.dat", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209776\\eventbeacons.dat", lpFilePart=0x0) returned 0xa5 [0208.669] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0208.669] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209776\\eventbeacons.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209776\\eventbeacons.dat"), fInfoLevelId=0x0, lpFileInformation=0x2330dc0 | out: lpFileInformation=0x2330dc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7566172, ftCreationTime.dwHighDateTime=0x1d2d40c, ftLastAccessTime.dwLowDateTime=0xc7566172, ftLastAccessTime.dwHighDateTime=0x1d2d40c, ftLastWriteTime.dwLowDateTime=0x546c412c, ftLastWriteTime.dwHighDateTime=0x1d41fda, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0208.669] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0208.669] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209776\\eventbeacons.dat", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209776\\eventbeacons.dat", lpFilePart=0x0) returned 0xa5 [0208.669] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0208.669] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209776\\eventbeacons.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209776\\eventbeacons.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0208.669] GetFileType (hFile=0x444) returned 0x1 [0208.669] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0208.669] GetFileType (hFile=0x444) returned 0x1 [0208.669] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x0 [0208.669] CloseHandle (hObject=0x444) returned 1 [0208.683] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209776\\eventbeacons.dat", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209776\\eventbeacons.dat", lpFilePart=0x0) returned 0xa5 [0208.683] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0208.683] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209776\\eventbeacons.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209776\\eventbeacons.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0208.684] GetFileType (hFile=0x444) returned 0x1 [0208.684] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0208.684] GetFileType (hFile=0x444) returned 0x1 [0208.684] WriteFile (in: hFile=0x444, lpBuffer=0x21a3c68*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x21a3c68*, lpNumberOfBytesWritten=0x3be4d8*=0x10, lpOverlapped=0x0) returned 1 [0208.685] CloseHandle (hObject=0x444) returned 1 [0208.685] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209776\\eventbeacons.dat", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209776\\eventbeacons.dat", lpFilePart=0x0) returned 0xa5 [0208.685] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209776\\eventbeacons.dat.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209776\\eventbeacons.dat.xuy", lpFilePart=0x0) returned 0xa9 [0208.685] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0208.685] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209776\\eventbeacons.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209776\\eventbeacons.dat"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7566172, ftCreationTime.dwHighDateTime=0x1d2d40c, ftLastAccessTime.dwLowDateTime=0xc7566172, ftLastAccessTime.dwHighDateTime=0x1d2d40c, ftLastWriteTime.dwLowDateTime=0x683af713, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0208.685] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0208.685] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209776\\eventbeacons.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209776\\eventbeacons.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209776\\eventbeacons.dat.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209776\\eventbeacons.dat.xuy")) returned 1 [0208.687] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209776\\imprbeacons.dat", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209776\\imprbeacons.dat", lpFilePart=0x0) returned 0xa4 [0208.687] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0208.687] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209776\\imprbeacons.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209776\\imprbeacons.dat"), fInfoLevelId=0x0, lpFileInformation=0x21a5110 | out: lpFileInformation=0x21a5110*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7566172, ftCreationTime.dwHighDateTime=0x1d2d40c, ftLastAccessTime.dwLowDateTime=0xc7566172, ftLastAccessTime.dwHighDateTime=0x1d2d40c, ftLastWriteTime.dwLowDateTime=0x540ce673, ftLastWriteTime.dwHighDateTime=0x1d41fda, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0208.687] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0208.687] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209776\\imprbeacons.dat", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209776\\imprbeacons.dat", lpFilePart=0x0) returned 0xa4 [0208.687] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0208.687] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209776\\imprbeacons.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209776\\imprbeacons.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0208.687] GetFileType (hFile=0x444) returned 0x1 [0208.687] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0208.687] GetFileType (hFile=0x444) returned 0x1 [0208.687] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x0 [0208.687] CloseHandle (hObject=0x444) returned 1 [0208.697] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209776\\imprbeacons.dat", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209776\\imprbeacons.dat", lpFilePart=0x0) returned 0xa4 [0208.697] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0208.697] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209776\\imprbeacons.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209776\\imprbeacons.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0208.698] GetFileType (hFile=0x444) returned 0x1 [0208.698] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0208.698] GetFileType (hFile=0x444) returned 0x1 [0208.698] WriteFile (in: hFile=0x444, lpBuffer=0x221b6e0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x221b6e0*, lpNumberOfBytesWritten=0x3be4d8*=0x10, lpOverlapped=0x0) returned 1 [0208.699] CloseHandle (hObject=0x444) returned 1 [0208.699] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209776\\imprbeacons.dat", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209776\\imprbeacons.dat", lpFilePart=0x0) returned 0xa4 [0208.699] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209776\\imprbeacons.dat.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209776\\imprbeacons.dat.xuy", lpFilePart=0x0) returned 0xa8 [0208.699] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0208.699] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209776\\imprbeacons.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209776\\imprbeacons.dat"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7566172, ftCreationTime.dwHighDateTime=0x1d2d40c, ftLastAccessTime.dwLowDateTime=0xc7566172, ftLastAccessTime.dwHighDateTime=0x1d2d40c, ftLastWriteTime.dwLowDateTime=0x683d5a02, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0208.699] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0208.699] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209776\\imprbeacons.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209776\\imprbeacons.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209776\\imprbeacons.dat.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209776\\imprbeacons.dat.xuy")) returned 1 [0208.700] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0208.700] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209809", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209809", lpFilePart=0x0) returned 0x94 [0208.700] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209809\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209809\\", lpFilePart=0x0) returned 0x95 [0208.700] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209809\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d7c70 [0208.701] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0208.701] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0208.701] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0208.701] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0208.701] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0208.701] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0208.701] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0208.701] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0208.701] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209809", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209809", lpFilePart=0x0) returned 0x94 [0208.701] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209809\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209809\\", lpFilePart=0x0) returned 0x95 [0208.701] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209809\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d81b0 [0208.701] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0208.701] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0208.701] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0208.701] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0208.701] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0208.701] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0208.701] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0208.701] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209809\\eventbeacons.dat", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209809\\eventbeacons.dat", lpFilePart=0x0) returned 0xa5 [0208.701] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0208.701] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209809\\eventbeacons.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209809\\eventbeacons.dat"), fInfoLevelId=0x0, lpFileInformation=0x22204b0 | out: lpFileInformation=0x22204b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc758c278, ftCreationTime.dwHighDateTime=0x1d2d40c, ftLastAccessTime.dwLowDateTime=0xc758c278, ftLastAccessTime.dwHighDateTime=0x1d2d40c, ftLastWriteTime.dwLowDateTime=0x554c5f5e, ftLastWriteTime.dwHighDateTime=0x1d41fda, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0208.702] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0208.702] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209809\\eventbeacons.dat", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209809\\eventbeacons.dat", lpFilePart=0x0) returned 0xa5 [0208.702] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0208.702] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209809\\eventbeacons.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209809\\eventbeacons.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0208.702] GetFileType (hFile=0x444) returned 0x1 [0208.702] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0208.702] GetFileType (hFile=0x444) returned 0x1 [0208.702] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x0 [0208.702] CloseHandle (hObject=0x444) returned 1 [0208.719] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209809\\eventbeacons.dat", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209809\\eventbeacons.dat", lpFilePart=0x0) returned 0xa5 [0208.719] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0208.719] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209809\\eventbeacons.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209809\\eventbeacons.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0208.720] GetFileType (hFile=0x444) returned 0x1 [0208.720] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0208.720] GetFileType (hFile=0x444) returned 0x1 [0208.720] WriteFile (in: hFile=0x444, lpBuffer=0x2296a98*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x2296a98*, lpNumberOfBytesWritten=0x3be4d8*=0x10, lpOverlapped=0x0) returned 1 [0208.721] CloseHandle (hObject=0x444) returned 1 [0208.721] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209809\\eventbeacons.dat", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209809\\eventbeacons.dat", lpFilePart=0x0) returned 0xa5 [0208.721] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209809\\eventbeacons.dat.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209809\\eventbeacons.dat.xuy", lpFilePart=0x0) returned 0xa9 [0208.721] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0208.721] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209809\\eventbeacons.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209809\\eventbeacons.dat"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc758c278, ftCreationTime.dwHighDateTime=0x1d2d40c, ftLastAccessTime.dwLowDateTime=0xc758c278, ftLastAccessTime.dwHighDateTime=0x1d2d40c, ftLastWriteTime.dwLowDateTime=0x68421de4, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0208.721] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0208.721] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209809\\eventbeacons.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209809\\eventbeacons.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209809\\eventbeacons.dat.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209809\\eventbeacons.dat.xuy")) returned 1 [0208.722] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209809\\imprbeacons.dat", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209809\\imprbeacons.dat", lpFilePart=0x0) returned 0xa4 [0208.722] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0208.722] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209809\\imprbeacons.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209809\\imprbeacons.dat"), fInfoLevelId=0x0, lpFileInformation=0x2297f40 | out: lpFileInformation=0x2297f40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc758c278, ftCreationTime.dwHighDateTime=0x1d2d40c, ftLastAccessTime.dwLowDateTime=0xc758c278, ftLastAccessTime.dwHighDateTime=0x1d2d40c, ftLastWriteTime.dwLowDateTime=0x550e628b, ftLastWriteTime.dwHighDateTime=0x1d41fda, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0208.723] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0208.723] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209809\\imprbeacons.dat", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209809\\imprbeacons.dat", lpFilePart=0x0) returned 0xa4 [0208.723] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0208.723] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209809\\imprbeacons.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209809\\imprbeacons.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0208.723] GetFileType (hFile=0x444) returned 0x1 [0208.723] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0208.723] GetFileType (hFile=0x444) returned 0x1 [0208.723] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x0 [0208.723] CloseHandle (hObject=0x444) returned 1 [0208.733] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209809\\imprbeacons.dat", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209809\\imprbeacons.dat", lpFilePart=0x0) returned 0xa4 [0208.733] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0208.733] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209809\\imprbeacons.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209809\\imprbeacons.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0208.733] GetFileType (hFile=0x444) returned 0x1 [0208.733] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0208.733] GetFileType (hFile=0x444) returned 0x1 [0208.734] WriteFile (in: hFile=0x444, lpBuffer=0x230e510*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x230e510*, lpNumberOfBytesWritten=0x3be4d8*=0x10, lpOverlapped=0x0) returned 1 [0208.735] CloseHandle (hObject=0x444) returned 1 [0208.735] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209809\\imprbeacons.dat", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209809\\imprbeacons.dat", lpFilePart=0x0) returned 0xa4 [0208.735] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209809\\imprbeacons.dat.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209809\\imprbeacons.dat.xuy", lpFilePart=0x0) returned 0xa8 [0208.735] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0208.735] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209809\\imprbeacons.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209809\\imprbeacons.dat"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc758c278, ftCreationTime.dwHighDateTime=0x1d2d40c, ftLastAccessTime.dwLowDateTime=0xc758c278, ftLastAccessTime.dwHighDateTime=0x1d2d40c, ftLastWriteTime.dwLowDateTime=0x6844a936, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0208.735] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0208.735] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209809\\imprbeacons.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209809\\imprbeacons.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209809\\imprbeacons.dat.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209809\\imprbeacons.dat.xuy")) returned 1 [0208.739] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0208.739] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209857", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209857", lpFilePart=0x0) returned 0x94 [0208.739] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209857\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209857\\", lpFilePart=0x0) returned 0x95 [0208.739] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209857\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d79d0 [0208.748] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0208.748] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0208.748] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0208.748] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0208.748] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0208.748] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0208.750] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0208.750] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0208.750] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0208.750] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209857", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209857", lpFilePart=0x0) returned 0x94 [0208.750] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209857\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209857\\", lpFilePart=0x0) returned 0x95 [0208.750] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209857\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d7d30 [0208.750] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0208.751] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0208.751] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0208.751] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0208.751] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0208.751] FindClose (in: hFindFile=0x5d7d30 | out: hFindFile=0x5d7d30) returned 1 [0208.751] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0208.751] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0208.751] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209857\\1500601998", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209857\\1500601998", lpFilePart=0x0) returned 0x9f [0208.752] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0208.752] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209857\\1500601998" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209857\\1500601998"), fInfoLevelId=0x0, lpFileInformation=0x2313980 | out: lpFileInformation=0x2313980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1fe930bf, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x1fe930bf, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x1ff2bb42, ftLastWriteTime.dwHighDateTime=0x1d301c4, nFileSizeHigh=0x0, nFileSizeLow=0x73ea)) returned 1 [0208.753] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0208.753] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209857\\1500601998", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209857\\1500601998", lpFilePart=0x0) returned 0x9f [0208.753] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0208.753] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209857\\1500601998" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209857\\1500601998"), fInfoLevelId=0x0, lpFileInformation=0x2313b70 | out: lpFileInformation=0x2313b70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1fe930bf, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x1fe930bf, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x1ff2bb42, ftLastWriteTime.dwHighDateTime=0x1d301c4, nFileSizeHigh=0x0, nFileSizeLow=0x73ea)) returned 1 [0208.753] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0208.753] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209857\\1500601998", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209857\\1500601998", lpFilePart=0x0) returned 0x9f [0208.753] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209857\\1500601998" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209857\\1500601998"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0208.757] GetFileType (hFile=0x444) returned 0x1 [0208.757] GetFileType (hFile=0x444) returned 0x1 [0208.757] ReadFile (in: hFile=0x444, lpBuffer=0x2316080, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x2316080*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0208.774] CloseHandle (hObject=0x444) returned 1 [0208.774] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209857\\1500601998", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209857\\1500601998", lpFilePart=0x0) returned 0x9f [0208.775] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209857\\1500601998" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209857\\1500601998"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0208.775] GetFileType (hFile=0x444) returned 0x1 [0208.775] GetFileType (hFile=0x444) returned 0x1 [0208.775] WriteFile (in: hFile=0x444, lpBuffer=0x21882d8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x21882d8*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0208.775] CloseHandle (hObject=0x444) returned 1 [0208.775] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209857\\1500601998", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209857\\1500601998", lpFilePart=0x0) returned 0x9f [0208.775] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209857\\1500601998.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209857\\1500601998.xuy", lpFilePart=0x0) returned 0xa3 [0208.775] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209857\\1500601998" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209857\\1500601998"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1fe930bf, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x1fe930bf, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x684a7301, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x73ea)) returned 1 [0208.775] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209857\\1500601998" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209857\\1500601998"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209857\\1500601998.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209857\\1500601998.xuy")) returned 1 [0208.777] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209857\\eventbeacons.dat", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209857\\eventbeacons.dat", lpFilePart=0x0) returned 0xa5 [0208.777] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209857\\eventbeacons.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209857\\eventbeacons.dat"), fInfoLevelId=0x0, lpFileInformation=0x21959f0 | out: lpFileInformation=0x21959f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7dd776c8, ftCreationTime.dwHighDateTime=0x1d2d40b, ftLastAccessTime.dwLowDateTime=0x7dd776c8, ftLastAccessTime.dwHighDateTime=0x1d2d40b, ftLastWriteTime.dwLowDateTime=0x54c6d910, ftLastWriteTime.dwHighDateTime=0x1d41fda, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0208.777] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209857\\eventbeacons.dat", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209857\\eventbeacons.dat", lpFilePart=0x0) returned 0xa5 [0208.777] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209857\\eventbeacons.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209857\\eventbeacons.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0208.777] GetFileType (hFile=0x444) returned 0x1 [0208.777] GetFileType (hFile=0x444) returned 0x1 [0208.777] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x0 [0208.778] CloseHandle (hObject=0x444) returned 1 [0208.787] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209857\\eventbeacons.dat", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209857\\eventbeacons.dat", lpFilePart=0x0) returned 0xa5 [0208.788] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209857\\eventbeacons.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209857\\eventbeacons.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0208.789] GetFileType (hFile=0x444) returned 0x1 [0208.789] GetFileType (hFile=0x444) returned 0x1 [0208.789] WriteFile (in: hFile=0x444, lpBuffer=0x220bfd8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x220bfd8*, lpNumberOfBytesWritten=0x3be4d8*=0x10, lpOverlapped=0x0) returned 1 [0208.790] CloseHandle (hObject=0x444) returned 1 [0208.790] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209857\\eventbeacons.dat", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209857\\eventbeacons.dat", lpFilePart=0x0) returned 0xa5 [0208.790] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209857\\eventbeacons.dat.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209857\\eventbeacons.dat.xuy", lpFilePart=0x0) returned 0xa9 [0208.790] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209857\\eventbeacons.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209857\\eventbeacons.dat"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7dd776c8, ftCreationTime.dwHighDateTime=0x1d2d40b, ftLastAccessTime.dwLowDateTime=0x7dd776c8, ftLastAccessTime.dwHighDateTime=0x1d2d40b, ftLastWriteTime.dwLowDateTime=0x684cda58, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0208.790] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209857\\eventbeacons.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209857\\eventbeacons.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209857\\eventbeacons.dat.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209857\\eventbeacons.dat.xuy")) returned 1 [0208.791] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209857\\imprbeacons.dat", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209857\\imprbeacons.dat", lpFilePart=0x0) returned 0xa4 [0208.791] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209857\\imprbeacons.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209857\\imprbeacons.dat"), fInfoLevelId=0x0, lpFileInformation=0x220d480 | out: lpFileInformation=0x220d480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7dd776c8, ftCreationTime.dwHighDateTime=0x1d2d40b, ftLastAccessTime.dwLowDateTime=0x7dd776c8, ftLastAccessTime.dwHighDateTime=0x1d2d40b, ftLastWriteTime.dwLowDateTime=0x54baef42, ftLastWriteTime.dwHighDateTime=0x1d41fda, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0208.791] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209857\\imprbeacons.dat", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209857\\imprbeacons.dat", lpFilePart=0x0) returned 0xa4 [0208.792] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209857\\imprbeacons.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209857\\imprbeacons.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0208.792] GetFileType (hFile=0x444) returned 0x1 [0208.792] GetFileType (hFile=0x444) returned 0x1 [0208.792] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x0 [0208.792] CloseHandle (hObject=0x444) returned 1 [0208.801] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209857\\imprbeacons.dat", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209857\\imprbeacons.dat", lpFilePart=0x0) returned 0xa4 [0208.802] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209857\\imprbeacons.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209857\\imprbeacons.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0208.802] GetFileType (hFile=0x444) returned 0x1 [0208.802] GetFileType (hFile=0x444) returned 0x1 [0208.802] WriteFile (in: hFile=0x444, lpBuffer=0x2283a50*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x2283a50*, lpNumberOfBytesWritten=0x3be4d8*=0x10, lpOverlapped=0x0) returned 1 [0208.803] CloseHandle (hObject=0x444) returned 1 [0208.803] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209857\\imprbeacons.dat", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209857\\imprbeacons.dat", lpFilePart=0x0) returned 0xa4 [0208.803] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209857\\imprbeacons.dat.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209857\\imprbeacons.dat.xuy", lpFilePart=0x0) returned 0xa8 [0208.803] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209857\\imprbeacons.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209857\\imprbeacons.dat"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7dd776c8, ftCreationTime.dwHighDateTime=0x1d2d40b, ftLastAccessTime.dwLowDateTime=0x7dd776c8, ftLastAccessTime.dwHighDateTime=0x1d2d40b, ftLastWriteTime.dwLowDateTime=0x684cda58, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0208.803] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209857\\imprbeacons.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209857\\imprbeacons.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209857\\imprbeacons.dat.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209857\\imprbeacons.dat.xuy")) returned 1 [0208.810] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\210469", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\210469", lpFilePart=0x0) returned 0x94 [0208.810] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\210469\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\210469\\", lpFilePart=0x0) returned 0x95 [0208.810] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\210469\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d81b0 [0208.810] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0208.810] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0208.810] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0208.810] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0208.810] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0208.810] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\210469", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\210469", lpFilePart=0x0) returned 0x94 [0208.810] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\210469\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\210469\\", lpFilePart=0x0) returned 0x95 [0208.810] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\210469\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d75b0 [0208.810] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0208.810] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0208.810] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0208.810] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0208.810] FindClose (in: hFindFile=0x5d75b0 | out: hFindFile=0x5d75b0) returned 1 [0208.811] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\210469\\eventbeacons.dat", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\210469\\eventbeacons.dat", lpFilePart=0x0) returned 0xa5 [0208.811] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\210469\\eventbeacons.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\210469\\eventbeacons.dat"), fInfoLevelId=0x0, lpFileInformation=0x2288820 | out: lpFileInformation=0x2288820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7519b61, ftCreationTime.dwHighDateTime=0x1d2d40c, ftLastAccessTime.dwLowDateTime=0xc7519b61, ftLastAccessTime.dwHighDateTime=0x1d2d40c, ftLastWriteTime.dwLowDateTime=0x535c7489, ftLastWriteTime.dwHighDateTime=0x1d41fda, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0208.811] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\210469\\eventbeacons.dat", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\210469\\eventbeacons.dat", lpFilePart=0x0) returned 0xa5 [0208.811] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\210469\\eventbeacons.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\210469\\eventbeacons.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0208.811] GetFileType (hFile=0x444) returned 0x1 [0208.811] GetFileType (hFile=0x444) returned 0x1 [0208.811] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x0 [0208.811] CloseHandle (hObject=0x444) returned 1 [0208.821] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\210469\\eventbeacons.dat", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\210469\\eventbeacons.dat", lpFilePart=0x0) returned 0xa5 [0208.821] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\210469\\eventbeacons.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\210469\\eventbeacons.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0208.822] GetFileType (hFile=0x444) returned 0x1 [0208.822] GetFileType (hFile=0x444) returned 0x1 [0208.822] WriteFile (in: hFile=0x444, lpBuffer=0x22fee08*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x22fee08*, lpNumberOfBytesWritten=0x3be4d8*=0x10, lpOverlapped=0x0) returned 1 [0208.823] CloseHandle (hObject=0x444) returned 1 [0208.823] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\210469\\eventbeacons.dat", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\210469\\eventbeacons.dat", lpFilePart=0x0) returned 0xa5 [0208.824] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\210469\\eventbeacons.dat.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\210469\\eventbeacons.dat.xuy", lpFilePart=0x0) returned 0xa9 [0208.824] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\210469\\eventbeacons.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\210469\\eventbeacons.dat"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7519b61, ftCreationTime.dwHighDateTime=0x1d2d40c, ftLastAccessTime.dwLowDateTime=0xc7519b61, ftLastAccessTime.dwHighDateTime=0x1d2d40c, ftLastWriteTime.dwLowDateTime=0x68519e08, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0208.824] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\210469\\eventbeacons.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\210469\\eventbeacons.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\210469\\eventbeacons.dat.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\210469\\eventbeacons.dat.xuy")) returned 1 [0208.825] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\210469\\imprbeacons.dat", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\210469\\imprbeacons.dat", lpFilePart=0x0) returned 0xa4 [0208.825] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\210469\\imprbeacons.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\210469\\imprbeacons.dat"), fInfoLevelId=0x0, lpFileInformation=0x23002b0 | out: lpFileInformation=0x23002b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc74f390b, ftCreationTime.dwHighDateTime=0x1d2d40c, ftLastAccessTime.dwLowDateTime=0xc74f390b, ftLastAccessTime.dwHighDateTime=0x1d2d40c, ftLastWriteTime.dwLowDateTime=0x53554d30, ftLastWriteTime.dwHighDateTime=0x1d41fda, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0208.825] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\210469\\imprbeacons.dat", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\210469\\imprbeacons.dat", lpFilePart=0x0) returned 0xa4 [0208.825] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\210469\\imprbeacons.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\210469\\imprbeacons.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0208.825] GetFileType (hFile=0x444) returned 0x1 [0208.825] GetFileType (hFile=0x444) returned 0x1 [0208.825] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x0 [0208.825] CloseHandle (hObject=0x444) returned 1 [0208.835] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\210469\\imprbeacons.dat", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\210469\\imprbeacons.dat", lpFilePart=0x0) returned 0xa4 [0208.835] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\210469\\imprbeacons.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\210469\\imprbeacons.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0208.842] GetFileType (hFile=0x444) returned 0x1 [0208.842] GetFileType (hFile=0x444) returned 0x1 [0208.842] WriteFile (in: hFile=0x444, lpBuffer=0x2376880*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x2376880*, lpNumberOfBytesWritten=0x3be4d8*=0x10, lpOverlapped=0x0) returned 1 [0208.843] CloseHandle (hObject=0x444) returned 1 [0208.843] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\210469\\imprbeacons.dat", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\210469\\imprbeacons.dat", lpFilePart=0x0) returned 0xa4 [0208.843] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\210469\\imprbeacons.dat.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\210469\\imprbeacons.dat.xuy", lpFilePart=0x0) returned 0xa8 [0208.843] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\210469\\imprbeacons.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\210469\\imprbeacons.dat"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc74f390b, ftCreationTime.dwHighDateTime=0x1d2d40c, ftLastAccessTime.dwLowDateTime=0xc74f390b, ftLastAccessTime.dwHighDateTime=0x1d2d40c, ftLastWriteTime.dwLowDateTime=0x6854169d, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0208.843] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\210469\\imprbeacons.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\210469\\imprbeacons.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\210469\\imprbeacons.dat.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\210469\\imprbeacons.dat.xuy")) returned 1 [0208.844] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\210509", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\210509", lpFilePart=0x0) returned 0x94 [0208.844] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\210509\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\210509\\", lpFilePart=0x0) returned 0x95 [0208.844] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\210509\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d7550 [0208.845] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0208.845] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0208.845] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0208.845] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0208.845] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0208.845] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\210509", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\210509", lpFilePart=0x0) returned 0x94 [0208.845] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\210509\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\210509\\", lpFilePart=0x0) returned 0x95 [0208.845] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\210509\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d79d0 [0208.845] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0208.845] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0208.845] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0208.845] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0208.845] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0208.845] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\210509\\eventbeacons.dat", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\210509\\eventbeacons.dat", lpFilePart=0x0) returned 0xa5 [0208.845] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\210509\\eventbeacons.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\210509\\eventbeacons.dat"), fInfoLevelId=0x0, lpFileInformation=0x237b650 | out: lpFileInformation=0x237b650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7519b61, ftCreationTime.dwHighDateTime=0x1d2d40c, ftLastAccessTime.dwLowDateTime=0xc7519b61, ftLastAccessTime.dwHighDateTime=0x1d2d40c, ftLastWriteTime.dwLowDateTime=0x53829aa2, ftLastWriteTime.dwHighDateTime=0x1d41fda, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0208.845] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\210509\\eventbeacons.dat", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\210509\\eventbeacons.dat", lpFilePart=0x0) returned 0xa5 [0208.845] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\210509\\eventbeacons.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\210509\\eventbeacons.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0208.846] GetFileType (hFile=0x444) returned 0x1 [0208.846] GetFileType (hFile=0x444) returned 0x1 [0208.846] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x0 [0208.846] CloseHandle (hObject=0x444) returned 1 [0208.860] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\210509\\eventbeacons.dat", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\210509\\eventbeacons.dat", lpFilePart=0x0) returned 0xa5 [0208.860] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\210509\\eventbeacons.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\210509\\eventbeacons.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0208.861] GetFileType (hFile=0x444) returned 0x1 [0208.861] GetFileType (hFile=0x444) returned 0x1 [0208.861] WriteFile (in: hFile=0x444, lpBuffer=0x21ee900*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x21ee900*, lpNumberOfBytesWritten=0x3be4d8*=0x10, lpOverlapped=0x0) returned 1 [0208.862] CloseHandle (hObject=0x444) returned 1 [0208.862] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\210509\\eventbeacons.dat", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\210509\\eventbeacons.dat", lpFilePart=0x0) returned 0xa5 [0208.862] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\210509\\eventbeacons.dat.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\210509\\eventbeacons.dat.xuy", lpFilePart=0x0) returned 0xa9 [0208.862] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\210509\\eventbeacons.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\210509\\eventbeacons.dat"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7519b61, ftCreationTime.dwHighDateTime=0x1d2d40c, ftLastAccessTime.dwLowDateTime=0xc7519b61, ftLastAccessTime.dwHighDateTime=0x1d2d40c, ftLastWriteTime.dwLowDateTime=0x68566192, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0208.862] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\210509\\eventbeacons.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\210509\\eventbeacons.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\210509\\eventbeacons.dat.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\210509\\eventbeacons.dat.xuy")) returned 1 [0208.864] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\210509\\imprbeacons.dat", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\210509\\imprbeacons.dat", lpFilePart=0x0) returned 0xa4 [0208.864] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\210509\\imprbeacons.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\210509\\imprbeacons.dat"), fInfoLevelId=0x0, lpFileInformation=0x21efda8 | out: lpFileInformation=0x21efda8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7519b61, ftCreationTime.dwHighDateTime=0x1d2d40c, ftLastAccessTime.dwLowDateTime=0xc7519b61, ftLastAccessTime.dwHighDateTime=0x1d2d40c, ftLastWriteTime.dwLowDateTime=0x537910c7, ftLastWriteTime.dwHighDateTime=0x1d41fda, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0208.864] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\210509\\imprbeacons.dat", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\210509\\imprbeacons.dat", lpFilePart=0x0) returned 0xa4 [0208.864] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\210509\\imprbeacons.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\210509\\imprbeacons.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0208.864] GetFileType (hFile=0x444) returned 0x1 [0208.864] GetFileType (hFile=0x444) returned 0x1 [0208.864] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x0 [0208.864] CloseHandle (hObject=0x444) returned 1 [0208.876] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\210509\\imprbeacons.dat", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\210509\\imprbeacons.dat", lpFilePart=0x0) returned 0xa4 [0208.876] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\210509\\imprbeacons.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\210509\\imprbeacons.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0208.877] GetFileType (hFile=0x444) returned 0x1 [0208.877] GetFileType (hFile=0x444) returned 0x1 [0208.877] WriteFile (in: hFile=0x444, lpBuffer=0x2266378*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x2266378*, lpNumberOfBytesWritten=0x3be4d8*=0x10, lpOverlapped=0x0) returned 1 [0208.878] CloseHandle (hObject=0x444) returned 1 [0208.878] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\210509\\imprbeacons.dat", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\210509\\imprbeacons.dat", lpFilePart=0x0) returned 0xa4 [0208.878] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\210509\\imprbeacons.dat.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\210509\\imprbeacons.dat.xuy", lpFilePart=0x0) returned 0xa8 [0208.878] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\210509\\imprbeacons.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\210509\\imprbeacons.dat"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7519b61, ftCreationTime.dwHighDateTime=0x1d2d40c, ftLastAccessTime.dwLowDateTime=0xc7519b61, ftLastAccessTime.dwHighDateTime=0x1d2d40c, ftLastWriteTime.dwLowDateTime=0x6858c54f, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0208.878] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\210509\\imprbeacons.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\210509\\imprbeacons.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\210509\\imprbeacons.dat.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\210509\\imprbeacons.dat.xuy")) returned 1 [0208.879] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\214513", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\214513", lpFilePart=0x0) returned 0x94 [0208.879] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\214513\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\214513\\", lpFilePart=0x0) returned 0x95 [0208.879] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\214513\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d78b0 [0208.880] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0208.880] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0208.880] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0208.880] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0208.880] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0208.880] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\214513", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\214513", lpFilePart=0x0) returned 0x94 [0208.880] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\214513\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\214513\\", lpFilePart=0x0) returned 0x95 [0208.880] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\214513\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d7550 [0208.880] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0208.880] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0208.880] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0208.880] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0208.880] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0208.880] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\214513\\eventbeacons.dat", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\214513\\eventbeacons.dat", lpFilePart=0x0) returned 0xa5 [0208.880] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\214513\\eventbeacons.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\214513\\eventbeacons.dat"), fInfoLevelId=0x0, lpFileInformation=0x226b148 | out: lpFileInformation=0x226b148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc74cd6a3, ftCreationTime.dwHighDateTime=0x1d2d40c, ftLastAccessTime.dwLowDateTime=0xc74cd6a3, ftLastAccessTime.dwHighDateTime=0x1d2d40c, ftLastWriteTime.dwLowDateTime=0x534960bb, ftLastWriteTime.dwHighDateTime=0x1d41fda, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0208.880] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\214513\\eventbeacons.dat", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\214513\\eventbeacons.dat", lpFilePart=0x0) returned 0xa5 [0208.880] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\214513\\eventbeacons.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\214513\\eventbeacons.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0208.881] GetFileType (hFile=0x444) returned 0x1 [0208.881] GetFileType (hFile=0x444) returned 0x1 [0208.881] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x0 [0208.881] CloseHandle (hObject=0x444) returned 1 [0208.891] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\214513\\eventbeacons.dat", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\214513\\eventbeacons.dat", lpFilePart=0x0) returned 0xa5 [0208.891] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\214513\\eventbeacons.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\214513\\eventbeacons.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0208.893] GetFileType (hFile=0x444) returned 0x1 [0208.893] GetFileType (hFile=0x444) returned 0x1 [0208.893] WriteFile (in: hFile=0x444, lpBuffer=0x22e1730*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x22e1730*, lpNumberOfBytesWritten=0x3be4d8*=0x10, lpOverlapped=0x0) returned 1 [0208.894] CloseHandle (hObject=0x444) returned 1 [0208.894] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\214513\\eventbeacons.dat", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\214513\\eventbeacons.dat", lpFilePart=0x0) returned 0xa5 [0208.894] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\214513\\eventbeacons.dat.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\214513\\eventbeacons.dat.xuy", lpFilePart=0x0) returned 0xa9 [0208.894] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\214513\\eventbeacons.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\214513\\eventbeacons.dat"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc74cd6a3, ftCreationTime.dwHighDateTime=0x1d2d40c, ftLastAccessTime.dwLowDateTime=0xc74cd6a3, ftLastAccessTime.dwHighDateTime=0x1d2d40c, ftLastWriteTime.dwLowDateTime=0x685b2595, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0208.894] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\214513\\eventbeacons.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\214513\\eventbeacons.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\214513\\eventbeacons.dat.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\214513\\eventbeacons.dat.xuy")) returned 1 [0208.895] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\214513\\imprbeacons.dat", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\214513\\imprbeacons.dat", lpFilePart=0x0) returned 0xa4 [0208.895] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\214513\\imprbeacons.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\214513\\imprbeacons.dat"), fInfoLevelId=0x0, lpFileInformation=0x22e2bd8 | out: lpFileInformation=0x22e2bd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc74cd6a3, ftCreationTime.dwHighDateTime=0x1d2d40c, ftLastAccessTime.dwLowDateTime=0xc74cd6a3, ftLastAccessTime.dwHighDateTime=0x1d2d40c, ftLastWriteTime.dwLowDateTime=0x53423baa, ftLastWriteTime.dwHighDateTime=0x1d41fda, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0208.895] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\214513\\imprbeacons.dat", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\214513\\imprbeacons.dat", lpFilePart=0x0) returned 0xa4 [0208.896] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\214513\\imprbeacons.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\214513\\imprbeacons.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0208.896] GetFileType (hFile=0x444) returned 0x1 [0208.896] GetFileType (hFile=0x444) returned 0x1 [0208.896] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x0 [0208.896] CloseHandle (hObject=0x444) returned 1 [0208.915] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\214513\\imprbeacons.dat", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\214513\\imprbeacons.dat", lpFilePart=0x0) returned 0xa4 [0208.915] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\214513\\imprbeacons.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\214513\\imprbeacons.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0208.916] GetFileType (hFile=0x444) returned 0x1 [0208.916] GetFileType (hFile=0x444) returned 0x1 [0208.916] WriteFile (in: hFile=0x444, lpBuffer=0x23591a8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x23591a8*, lpNumberOfBytesWritten=0x3be4d8*=0x10, lpOverlapped=0x0) returned 1 [0208.917] CloseHandle (hObject=0x444) returned 1 [0208.917] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\214513\\imprbeacons.dat", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\214513\\imprbeacons.dat", lpFilePart=0x0) returned 0xa4 [0208.917] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\214513\\imprbeacons.dat.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\214513\\imprbeacons.dat.xuy", lpFilePart=0x0) returned 0xa8 [0208.917] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\214513\\imprbeacons.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\214513\\imprbeacons.dat"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc74cd6a3, ftCreationTime.dwHighDateTime=0x1d2d40c, ftLastAccessTime.dwLowDateTime=0xc74cd6a3, ftLastAccessTime.dwHighDateTime=0x1d2d40c, ftLastWriteTime.dwLowDateTime=0x685feafa, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0208.917] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\214513\\imprbeacons.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\214513\\imprbeacons.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\214513\\imprbeacons.dat.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\214513\\imprbeacons.dat.xuy")) returned 1 [0208.919] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\StagedAssets", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\StagedAssets", lpFilePart=0x0) returned 0x7b [0208.919] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\StagedAssets\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\StagedAssets\\", lpFilePart=0x0) returned 0x7c [0208.919] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\StagedAssets\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d81b0 [0208.919] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0208.919] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0208.919] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0208.919] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\StagedAssets", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\StagedAssets", lpFilePart=0x0) returned 0x7b [0208.919] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\StagedAssets\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\StagedAssets\\", lpFilePart=0x0) returned 0x7c [0208.919] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\StagedAssets\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7af0 [0208.919] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0208.919] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0208.919] FindClose (in: hFindFile=0x5d7af0 | out: hFindFile=0x5d7af0) returned 1 [0208.919] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Tips", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Tips", lpFilePart=0x0) returned 0x73 [0208.920] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Tips\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Tips\\", lpFilePart=0x0) returned 0x74 [0208.920] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Tips\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7f10 [0208.920] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0208.920] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0208.920] FindClose (in: hFindFile=0x5d7f10 | out: hFindFile=0x5d7f10) returned 1 [0208.920] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Tips", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Tips", lpFilePart=0x0) returned 0x73 [0208.920] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Tips\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Tips\\", lpFilePart=0x0) returned 0x74 [0208.920] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Tips\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7670 [0208.920] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0208.920] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0208.920] FindClose (in: hFindFile=0x5d7670 | out: hFindFile=0x5d7670) returned 1 [0208.920] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Microsoft.Windows.ContentDeliveryManager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Microsoft.Windows.ContentDeliveryManager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy", lpFilePart=0x0) returned 0xbb [0208.920] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Microsoft.Windows.ContentDeliveryManager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Microsoft.Windows.ContentDeliveryManager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\", lpFilePart=0x0) returned 0xbc [0208.920] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Microsoft.Windows.ContentDeliveryManager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d78b0 [0208.920] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0208.920] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0208.921] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0208.921] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0208.921] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Microsoft.Windows.ContentDeliveryManager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Microsoft.Windows.ContentDeliveryManager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy", lpFilePart=0x0) returned 0xbb [0208.921] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Microsoft.Windows.ContentDeliveryManager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Microsoft.Windows.ContentDeliveryManager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\", lpFilePart=0x0) returned 0xbc [0208.921] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Microsoft.Windows.ContentDeliveryManager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7a30 [0208.921] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0208.921] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0208.921] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0208.921] FindClose (in: hFindFile=0x5d7a30 | out: hFindFile=0x5d7a30) returned 1 [0208.921] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Microsoft.Windows.ContentDeliveryManager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Microsoft.Windows.ContentDeliveryManager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore", lpFilePart=0x0) returned 0xcb [0208.921] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Microsoft.Windows.ContentDeliveryManager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Microsoft.Windows.ContentDeliveryManager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\", lpFilePart=0x0) returned 0xcc [0208.921] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Microsoft.Windows.ContentDeliveryManager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7cd0 [0208.921] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0208.921] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0208.921] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0208.921] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0208.921] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0208.922] FindClose (in: hFindFile=0x5d7cd0 | out: hFindFile=0x5d7cd0) returned 1 [0208.922] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Microsoft.Windows.ContentDeliveryManager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Microsoft.Windows.ContentDeliveryManager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore", lpFilePart=0x0) returned 0xcb [0208.922] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Microsoft.Windows.ContentDeliveryManager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Microsoft.Windows.ContentDeliveryManager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\", lpFilePart=0x0) returned 0xcc [0208.922] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Microsoft.Windows.ContentDeliveryManager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d78b0 [0208.922] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0208.922] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0208.922] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0208.922] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0208.922] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0208.922] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0208.922] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Microsoft.Windows.ContentDeliveryManager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Microsoft.Windows.ContentDeliveryManager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xdf [0208.922] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Microsoft.Windows.ContentDeliveryManager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\microsoft.windows.contentdeliverymanager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat"), fInfoLevelId=0x0, lpFileInformation=0x2367c30 | out: lpFileInformation=0x2367c30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4d4b542, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xeeaf95dd, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0xb525c580, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x8000)) returned 1 [0208.922] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Microsoft.Windows.ContentDeliveryManager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Microsoft.Windows.ContentDeliveryManager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xdf [0208.922] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Microsoft.Windows.ContentDeliveryManager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\microsoft.windows.contentdeliverymanager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat"), fInfoLevelId=0x0, lpFileInformation=0x2367eb0 | out: lpFileInformation=0x2367eb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4d4b542, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xeeaf95dd, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0xb525c580, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x8000)) returned 1 [0208.922] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Microsoft.Windows.ContentDeliveryManager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Microsoft.Windows.ContentDeliveryManager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xdf [0208.922] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Microsoft.Windows.ContentDeliveryManager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\microsoft.windows.contentdeliverymanager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0208.924] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb100) returned 1 [0208.924] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Microsoft.Windows.ContentDeliveryManager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3bbd80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Microsoft.Windows.ContentDeliveryManager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xdf [0208.924] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc220) returned 1 [0208.924] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Microsoft.Windows.ContentDeliveryManager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\microsoft.windows.contentdeliverymanager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat"), fInfoLevelId=0x0, lpFileInformation=0x3bc300 | out: lpFileInformation=0x3bc300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4d4b542, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xeeaf95dd, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0xb525c580, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x8000)) returned 1 [0208.924] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1e0) returned 1 [0208.924] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Microsoft.Windows.ContentDeliveryManager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3bbda0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Microsoft.Windows.ContentDeliveryManager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xdf [0208.924] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc220) returned 1 [0208.924] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Microsoft.Windows.ContentDeliveryManager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\microsoft.windows.contentdeliverymanager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat"), fInfoLevelId=0x0, lpFileInformation=0x236b160 | out: lpFileInformation=0x236b160*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4d4b542, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xeeaf95dd, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0xb525c580, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x8000)) returned 1 [0208.924] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1e0) returned 1 [0208.924] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Microsoft.Windows.ContentDeliveryManager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3bbda0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Microsoft.Windows.ContentDeliveryManager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xdf [0208.925] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc220) returned 1 [0208.925] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Microsoft.Windows.ContentDeliveryManager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\microsoft.windows.contentdeliverymanager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat"), fInfoLevelId=0x0, lpFileInformation=0x236b3e0 | out: lpFileInformation=0x236b3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4d4b542, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xeeaf95dd, ftLastAccessTime.dwHighDateTime=0x1d47902, ftLastWriteTime.dwLowDateTime=0xb525c580, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x8000)) returned 1 [0208.925] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1e0) returned 1 [0208.925] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Microsoft.Windows.ContentDeliveryManager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3bbc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Microsoft.Windows.ContentDeliveryManager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xdf [0208.925] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc120) returned 1 [0208.925] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Microsoft.Windows.ContentDeliveryManager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\microsoft.windows.contentdeliverymanager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0208.926] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8bb0) returned 1 [0208.927] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Microsoft.Windows.ContentDeliveryManager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Microsoft.Windows.ContentDeliveryManager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xe4 [0208.927] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0208.927] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Microsoft.Windows.ContentDeliveryManager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\microsoft.windows.contentdeliverymanager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x236e788 | out: lpFileInformation=0x236e788*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xb4d4b542, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb4d4b542, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xb4d4b542, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x8000)) returned 1 [0208.927] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0208.927] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Microsoft.Windows.ContentDeliveryManager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Microsoft.Windows.ContentDeliveryManager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xe4 [0208.927] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0208.927] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Microsoft.Windows.ContentDeliveryManager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\microsoft.windows.contentdeliverymanager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x236ea28 | out: lpFileInformation=0x236ea28*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xb4d4b542, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb4d4b542, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xb4d4b542, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x8000)) returned 1 [0208.927] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0208.927] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Microsoft.Windows.ContentDeliveryManager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Microsoft.Windows.ContentDeliveryManager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xe4 [0208.927] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0208.927] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Microsoft.Windows.ContentDeliveryManager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\microsoft.windows.contentdeliverymanager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0208.928] GetFileType (hFile=0x444) returned 0x1 [0208.928] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0208.928] GetFileType (hFile=0x444) returned 0x1 [0208.928] ReadFile (in: hFile=0x444, lpBuffer=0x2371098, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x2371098*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0208.972] CloseHandle (hObject=0x444) returned 1 [0208.972] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Microsoft.Windows.ContentDeliveryManager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Microsoft.Windows.ContentDeliveryManager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xe4 [0208.972] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0208.972] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Microsoft.Windows.ContentDeliveryManager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\microsoft.windows.contentdeliverymanager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0208.972] GetFileType (hFile=0x444) returned 0x1 [0208.972] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0208.972] GetFileType (hFile=0x444) returned 0x1 [0208.972] WriteFile (in: hFile=0x444, lpBuffer=0x2187538*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x2187538*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0208.973] CloseHandle (hObject=0x444) returned 1 [0208.973] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Microsoft.Windows.ContentDeliveryManager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Microsoft.Windows.ContentDeliveryManager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xe4 [0208.973] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Microsoft.Windows.ContentDeliveryManager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Microsoft.Windows.ContentDeliveryManager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1.xuy", lpFilePart=0x0) returned 0xe8 [0208.973] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0208.973] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Microsoft.Windows.ContentDeliveryManager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\microsoft.windows.contentdeliverymanager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xb4d4b542, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb4d4b542, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x68671510, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x8000)) returned 1 [0208.973] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0208.973] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Microsoft.Windows.ContentDeliveryManager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\microsoft.windows.contentdeliverymanager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Microsoft.Windows.ContentDeliveryManager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\microsoft.windows.contentdeliverymanager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log1.xuy")) returned 1 [0208.974] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Microsoft.Windows.ContentDeliveryManager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Microsoft.Windows.ContentDeliveryManager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xe4 [0208.974] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0208.974] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Microsoft.Windows.ContentDeliveryManager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\microsoft.windows.contentdeliverymanager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x21efe78 | out: lpFileInformation=0x21efe78*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xb4d4b542, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb4d4b542, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xb4d4b542, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0208.975] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0208.975] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Microsoft.Windows.ContentDeliveryManager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Microsoft.Windows.ContentDeliveryManager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xe4 [0208.975] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0208.975] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Microsoft.Windows.ContentDeliveryManager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\microsoft.windows.contentdeliverymanager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0208.975] GetFileType (hFile=0x444) returned 0x1 [0208.975] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0208.975] GetFileType (hFile=0x444) returned 0x1 [0208.975] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x0 [0208.975] CloseHandle (hObject=0x444) returned 1 [0208.985] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Microsoft.Windows.ContentDeliveryManager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Microsoft.Windows.ContentDeliveryManager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xe4 [0208.985] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0208.985] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Microsoft.Windows.ContentDeliveryManager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\microsoft.windows.contentdeliverymanager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0208.987] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb070) returned 1 [0208.987] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Microsoft.Windows.ContentDeliveryManager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbcf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Microsoft.Windows.ContentDeliveryManager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xe4 [0208.987] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0208.987] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Microsoft.Windows.ContentDeliveryManager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\microsoft.windows.contentdeliverymanager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x3bc270 | out: lpFileInformation=0x3bc270*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xb4d4b542, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb4d4b542, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xb4d4b542, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0208.987] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc150) returned 1 [0208.987] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Microsoft.Windows.ContentDeliveryManager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbd10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Microsoft.Windows.ContentDeliveryManager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xe4 [0208.987] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0208.987] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Microsoft.Windows.ContentDeliveryManager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\microsoft.windows.contentdeliverymanager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x2267588 | out: lpFileInformation=0x2267588*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xb4d4b542, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb4d4b542, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xb4d4b542, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0208.987] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc150) returned 1 [0208.987] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Microsoft.Windows.ContentDeliveryManager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Microsoft.Windows.ContentDeliveryManager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xe4 [0208.987] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc050) returned 1 [0208.988] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Microsoft.Windows.ContentDeliveryManager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\microsoft.windows.contentdeliverymanager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0208.988] GetFileType (hFile=0x444) returned 0x1 [0208.988] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbfc0) returned 1 [0208.988] GetFileType (hFile=0x444) returned 0x1 [0208.988] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc1e8 | out: lpFileSizeHigh=0x3bc1e8*=0x0) returned 0x0 [0208.988] CloseHandle (hObject=0x444) returned 1 [0209.031] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Microsoft.Windows.ContentDeliveryManager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Microsoft.Windows.ContentDeliveryManager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xe4 [0209.031] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc050) returned 1 [0209.031] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Microsoft.Windows.ContentDeliveryManager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\microsoft.windows.contentdeliverymanager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0209.032] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8ae0) returned 1 [0209.033] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0209.033] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\RoamingState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\RoamingState", lpFilePart=0x0) returned 0x70 [0209.033] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\RoamingState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\RoamingState\\", lpFilePart=0x0) returned 0x71 [0209.033] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\RoamingState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7af0 [0209.033] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0209.033] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0209.033] FindClose (in: hFindFile=0x5d7af0 | out: hFindFile=0x5d7af0) returned 1 [0209.033] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0209.033] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0209.033] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0209.034] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\RoamingState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\RoamingState", lpFilePart=0x0) returned 0x70 [0209.034] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\RoamingState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\RoamingState\\", lpFilePart=0x0) returned 0x71 [0209.034] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\RoamingState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d81b0 [0209.034] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0209.034] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0209.034] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0209.034] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0209.034] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0209.034] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0209.034] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Settings", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Settings", lpFilePart=0x0) returned 0x6c [0209.034] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Settings\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Settings\\", lpFilePart=0x0) returned 0x6d [0209.034] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Settings\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d78b0 [0209.034] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0209.035] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0209.035] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0209.035] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0209.035] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0209.035] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0209.035] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0209.035] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0209.035] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0209.035] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0209.035] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Settings", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Settings", lpFilePart=0x0) returned 0x6c [0209.035] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Settings\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Settings\\", lpFilePart=0x0) returned 0x6d [0209.035] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Settings\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d78b0 [0209.036] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0209.036] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0209.036] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0209.036] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0209.036] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0209.036] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0209.036] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0209.036] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0209.036] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0209.036] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Settings\\roaming.lock", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Settings\\roaming.lock", lpFilePart=0x0) returned 0x79 [0209.036] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0209.037] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\settings\\roaming.lock"), fInfoLevelId=0x0, lpFileInformation=0x22e47a8 | out: lpFileInformation=0x22e47a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4c8c995, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb4c8c995, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xb4c8c995, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0209.037] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0209.037] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Settings\\roaming.lock", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Settings\\roaming.lock", lpFilePart=0x0) returned 0x79 [0209.037] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0209.037] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\settings\\roaming.lock"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0209.037] GetFileType (hFile=0x444) returned 0x1 [0209.037] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0209.037] GetFileType (hFile=0x444) returned 0x1 [0209.037] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0x0 [0209.037] CloseHandle (hObject=0x444) returned 1 [0209.055] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Settings\\roaming.lock", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Settings\\roaming.lock", lpFilePart=0x0) returned 0x79 [0209.055] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0209.055] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\settings\\roaming.lock"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0209.056] GetFileType (hFile=0x444) returned 0x1 [0209.056] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0209.056] GetFileType (hFile=0x444) returned 0x1 [0209.056] WriteFile (in: hFile=0x444, lpBuffer=0x235ac70*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x3be628, lpOverlapped=0x0 | out: lpBuffer=0x235ac70*, lpNumberOfBytesWritten=0x3be628*=0x10, lpOverlapped=0x0) returned 1 [0209.057] CloseHandle (hObject=0x444) returned 1 [0209.057] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Settings\\roaming.lock", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Settings\\roaming.lock", lpFilePart=0x0) returned 0x79 [0209.057] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Settings\\roaming.lock.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Settings\\roaming.lock.xuy", lpFilePart=0x0) returned 0x7d [0209.057] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0209.057] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\settings\\roaming.lock"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4c8c995, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb4c8c995, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x68756428, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0209.058] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0209.058] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\settings\\roaming.lock"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Settings\\roaming.lock.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\settings\\roaming.lock.xuy")) returned 1 [0209.059] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Settings\\settings.dat", lpFilePart=0x0) returned 0x79 [0209.059] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0209.059] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x235c010 | out: lpFileInformation=0x235c010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4c66726, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb25d04f9, ftLastAccessTime.dwHighDateTime=0x1d46683, ftLastWriteTime.dwLowDateTime=0xb25d04f9, ftLastWriteTime.dwHighDateTime=0x1d46683, nFileSizeHigh=0x0, nFileSizeLow=0x10000)) returned 1 [0209.059] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0209.059] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Settings\\settings.dat", lpFilePart=0x0) returned 0x79 [0209.059] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0209.059] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x235c1c0 | out: lpFileInformation=0x235c1c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4c66726, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb25d04f9, ftLastAccessTime.dwHighDateTime=0x1d46683, ftLastWriteTime.dwLowDateTime=0xb25d04f9, ftLastWriteTime.dwHighDateTime=0x1d46683, nFileSizeHigh=0x0, nFileSizeLow=0x10000)) returned 1 [0209.059] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0209.059] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Settings\\settings.dat", lpFilePart=0x0) returned 0x79 [0209.059] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0209.059] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\settings\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0209.060] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb170) returned 1 [0209.061] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3bbdf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Settings\\settings.dat", lpFilePart=0x0) returned 0x79 [0209.061] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc290) returned 1 [0209.061] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x3bc370 | out: lpFileInformation=0x3bc370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4c66726, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb25d04f9, ftLastAccessTime.dwHighDateTime=0x1d46683, ftLastWriteTime.dwLowDateTime=0xb25d04f9, ftLastWriteTime.dwHighDateTime=0x1d46683, nFileSizeHigh=0x0, nFileSizeLow=0x10000)) returned 1 [0209.061] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc250) returned 1 [0209.061] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3bbe10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Settings\\settings.dat", lpFilePart=0x0) returned 0x79 [0209.061] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc290) returned 1 [0209.061] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x235f278 | out: lpFileInformation=0x235f278*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4c66726, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb25d04f9, ftLastAccessTime.dwHighDateTime=0x1d46683, ftLastWriteTime.dwLowDateTime=0xb25d04f9, ftLastWriteTime.dwHighDateTime=0x1d46683, nFileSizeHigh=0x0, nFileSizeLow=0x10000)) returned 1 [0209.061] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc250) returned 1 [0209.061] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3bbe10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Settings\\settings.dat", lpFilePart=0x0) returned 0x79 [0209.061] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc290) returned 1 [0209.061] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x235f428 | out: lpFileInformation=0x235f428*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4c66726, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb25d04f9, ftLastAccessTime.dwHighDateTime=0x1d46683, ftLastWriteTime.dwLowDateTime=0xb25d04f9, ftLastWriteTime.dwHighDateTime=0x1d46683, nFileSizeHigh=0x0, nFileSizeLow=0x10000)) returned 1 [0209.061] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc250) returned 1 [0209.061] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3bbcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Settings\\settings.dat", lpFilePart=0x0) returned 0x79 [0209.061] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0209.061] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\settings\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0209.063] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8c20) returned 1 [0209.063] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", lpFilePart=0x0) returned 0x7e [0209.063] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0209.063] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\settings\\settings.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x2362440 | out: lpFileInformation=0x2362440*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc5bbba08, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xc5bbba08, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xc5bbba08, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x7000)) returned 1 [0209.064] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0209.064] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", lpFilePart=0x0) returned 0x7e [0209.064] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0209.064] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\settings\\settings.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x2362600 | out: lpFileInformation=0x2362600*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc5bbba08, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xc5bbba08, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xc5bbba08, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x7000)) returned 1 [0209.064] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0209.064] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", lpFilePart=0x0) returned 0x7e [0209.064] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0209.064] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\settings\\settings.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0209.065] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb170) returned 1 [0209.065] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3bbdf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", lpFilePart=0x0) returned 0x7e [0209.065] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc290) returned 1 [0209.065] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\settings\\settings.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x3bc370 | out: lpFileInformation=0x3bc370*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc5bbba08, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xc5bbba08, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xc5bbba08, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x7000)) returned 1 [0209.065] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc250) returned 1 [0209.066] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3bbe10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", lpFilePart=0x0) returned 0x7e [0209.066] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc290) returned 1 [0209.066] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\settings\\settings.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x23656f0 | out: lpFileInformation=0x23656f0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc5bbba08, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xc5bbba08, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xc5bbba08, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x7000)) returned 1 [0209.066] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc250) returned 1 [0209.066] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3bbe10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", lpFilePart=0x0) returned 0x7e [0209.066] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc290) returned 1 [0209.066] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\settings\\settings.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x23658b0 | out: lpFileInformation=0x23658b0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc5bbba08, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xc5bbba08, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xc5bbba08, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x7000)) returned 1 [0209.066] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc250) returned 1 [0209.066] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3bbcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", lpFilePart=0x0) returned 0x7e [0209.066] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0209.066] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\settings\\settings.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0209.067] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8c20) returned 1 [0209.068] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", lpFilePart=0x0) returned 0x7e [0209.068] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0209.068] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\settings\\settings.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x23688f8 | out: lpFileInformation=0x23688f8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc5bbba08, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xc5bbba08, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xc5bbba08, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x5000)) returned 1 [0209.068] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0209.068] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", lpFilePart=0x0) returned 0x7e [0209.068] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0209.068] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\settings\\settings.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x2368ab8 | out: lpFileInformation=0x2368ab8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc5bbba08, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xc5bbba08, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xc5bbba08, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x5000)) returned 1 [0209.068] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0209.068] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", lpFilePart=0x0) returned 0x7e [0209.068] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0209.068] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\settings\\settings.dat.log2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0209.070] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb170) returned 1 [0209.070] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbdf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", lpFilePart=0x0) returned 0x7e [0209.070] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc290) returned 1 [0209.070] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\settings\\settings.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x3bc370 | out: lpFileInformation=0x3bc370*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc5bbba08, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xc5bbba08, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xc5bbba08, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x5000)) returned 1 [0209.070] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc250) returned 1 [0209.070] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbe10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", lpFilePart=0x0) returned 0x7e [0209.070] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc290) returned 1 [0209.070] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\settings\\settings.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x236bba8 | out: lpFileInformation=0x236bba8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc5bbba08, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xc5bbba08, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xc5bbba08, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x5000)) returned 1 [0209.071] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc250) returned 1 [0209.071] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbe10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", lpFilePart=0x0) returned 0x7e [0209.071] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc290) returned 1 [0209.071] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\settings\\settings.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x236bd68 | out: lpFileInformation=0x236bd68*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc5bbba08, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xc5bbba08, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xc5bbba08, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x5000)) returned 1 [0209.071] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc250) returned 1 [0209.071] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", lpFilePart=0x0) returned 0x7e [0209.071] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0209.071] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\settings\\settings.dat.log2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0209.072] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8c20) returned 1 [0209.073] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0209.073] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\SystemAppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\SystemAppData", lpFilePart=0x0) returned 0x71 [0209.073] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\SystemAppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\SystemAppData\\", lpFilePart=0x0) returned 0x72 [0209.073] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\SystemAppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d78b0 [0209.073] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0209.073] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0209.073] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0209.073] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0209.073] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0209.073] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0209.074] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\SystemAppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\SystemAppData", lpFilePart=0x0) returned 0x71 [0209.074] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\SystemAppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\SystemAppData\\", lpFilePart=0x0) returned 0x72 [0209.074] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\SystemAppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d79d0 [0209.074] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0209.074] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0209.074] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0209.074] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0209.074] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0209.074] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0209.074] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\TempState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\TempState", lpFilePart=0x0) returned 0x6d [0209.074] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\TempState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\TempState\\", lpFilePart=0x0) returned 0x6e [0209.074] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\TempState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d81b0 [0209.074] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0209.075] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0209.075] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0209.083] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0209.083] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0209.083] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0209.083] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\TempState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\TempState", lpFilePart=0x0) returned 0x6d [0209.083] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\TempState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\TempState\\", lpFilePart=0x0) returned 0x6e [0209.083] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\TempState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7af0 [0209.083] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0209.083] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0209.083] FindClose (in: hFindFile=0x5d7af0 | out: hFindFile=0x5d7af0) returned 1 [0209.083] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0209.083] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0209.083] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0209.083] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy", lpFilePart=0x0) returned 0x54 [0209.083] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\", lpFilePart=0x0) returned 0x55 [0209.084] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d7f10 [0209.084] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0209.084] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0209.084] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0209.084] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0209.084] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0209.084] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0209.084] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0209.085] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0209.085] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0209.085] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0209.085] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0209.085] FindClose (in: hFindFile=0x5d7f10 | out: hFindFile=0x5d7f10) returned 1 [0209.085] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0209.085] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0209.085] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0209.085] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy", lpFilePart=0x0) returned 0x54 [0209.085] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\", lpFilePart=0x0) returned 0x55 [0209.085] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d7670 [0209.085] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0209.086] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0209.086] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0209.086] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0209.086] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0209.086] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0209.086] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0209.086] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0209.086] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0209.086] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0209.087] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0209.087] FindClose (in: hFindFile=0x5d7670 | out: hFindFile=0x5d7670) returned 1 [0209.087] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0209.087] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0209.087] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0209.087] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC", lpFilePart=0x0) returned 0x57 [0209.087] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\", lpFilePart=0x0) returned 0x58 [0209.087] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7c70 [0209.087] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0209.087] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0209.087] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0209.087] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0209.087] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0209.088] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0209.088] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0209.088] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0209.088] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0209.088] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0209.088] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0209.088] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0209.088] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0209.088] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC", lpFilePart=0x0) returned 0x57 [0209.088] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\", lpFilePart=0x0) returned 0x58 [0209.088] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7cd0 [0209.088] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0209.089] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0209.089] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0209.089] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0209.089] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0209.089] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0209.089] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0209.089] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0209.089] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0209.089] FindClose (in: hFindFile=0x5d7cd0 | out: hFindFile=0x5d7cd0) returned 1 [0209.089] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0209.089] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0209.089] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0209.089] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache", lpFilePart=0x0) returned 0x60 [0209.089] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\", lpFilePart=0x0) returned 0x61 [0209.090] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7fd0 [0209.090] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0209.090] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0209.090] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0209.090] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0209.090] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0209.090] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0209.090] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0209.090] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0209.090] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache", lpFilePart=0x0) returned 0x60 [0209.090] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\", lpFilePart=0x0) returned 0x61 [0209.090] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7a30 [0209.091] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0209.091] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0209.091] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0209.091] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0209.091] FindClose (in: hFindFile=0x5d7a30 | out: hFindFile=0x5d7a30) returned 1 [0209.091] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0209.091] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0209.091] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\container.dat", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\container.dat", lpFilePart=0x0) returned 0x6e [0209.091] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0209.091] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x237e950 | out: lpFileInformation=0x237e950*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xce79b56e, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xce79b56e, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xce79b56e, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0209.091] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0209.091] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\container.dat", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\container.dat", lpFilePart=0x0) returned 0x6e [0209.091] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0209.091] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0209.091] GetFileType (hFile=0x444) returned 0x1 [0209.091] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0209.092] GetFileType (hFile=0x444) returned 0x1 [0209.092] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x0 [0209.092] CloseHandle (hObject=0x444) returned 1 [0209.131] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\container.dat", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\container.dat", lpFilePart=0x0) returned 0x6e [0209.131] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0209.131] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\container.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0209.134] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb070) returned 1 [0209.134] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbcf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\container.dat", lpFilePart=0x0) returned 0x6e [0209.134] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0209.134] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x3bc270 | out: lpFileInformation=0x3bc270*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xce79b56e, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xce79b56e, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xce79b56e, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0209.134] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc150) returned 1 [0209.134] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbd10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\container.dat", lpFilePart=0x0) returned 0x6e [0209.134] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0209.134] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x21f3000 | out: lpFileInformation=0x21f3000*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xce79b56e, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xce79b56e, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xce79b56e, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0209.135] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc150) returned 1 [0209.135] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\container.dat", lpFilePart=0x0) returned 0x6e [0209.135] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc050) returned 1 [0209.135] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0209.135] GetFileType (hFile=0x444) returned 0x1 [0209.135] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbfc0) returned 1 [0209.135] GetFileType (hFile=0x444) returned 0x1 [0209.135] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc1e8 | out: lpFileSizeHigh=0x3bc1e8*=0x0) returned 0x0 [0209.135] CloseHandle (hObject=0x444) returned 1 [0209.145] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\container.dat", lpFilePart=0x0) returned 0x6e [0209.145] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc050) returned 1 [0209.145] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\container.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0209.146] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8ae0) returned 1 [0209.146] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0209.147] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7", lpFilePart=0x0) returned 0x69 [0209.147] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\", lpFilePart=0x0) returned 0x6a [0209.147] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d7af0 [0209.147] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0209.147] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0209.147] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0209.147] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0209.147] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0209.147] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0209.147] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0209.148] FindClose (in: hFindFile=0x5d7af0 | out: hFindFile=0x5d7af0) returned 1 [0209.148] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0209.148] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0209.148] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0209.148] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7", lpFilePart=0x0) returned 0x69 [0209.148] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\", lpFilePart=0x0) returned 0x6a [0209.148] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d7eb0 [0209.148] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0209.148] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0209.149] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0209.149] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0209.149] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0209.149] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0209.149] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0209.149] FindClose (in: hFindFile=0x5d7eb0 | out: hFindFile=0x5d7eb0) returned 1 [0209.149] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0209.149] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0209.149] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\container.dat", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\container.dat", lpFilePart=0x0) returned 0x77 [0209.149] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0209.149] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x226d960 | out: lpFileInformation=0x226d960*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xce79b56e, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xce79b56e, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xce79b56e, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0209.149] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0209.149] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\container.dat", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\container.dat", lpFilePart=0x0) returned 0x77 [0209.149] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0209.149] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0209.150] GetFileType (hFile=0x444) returned 0x1 [0209.150] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0209.150] GetFileType (hFile=0x444) returned 0x1 [0209.150] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be708 | out: lpFileSizeHigh=0x3be708*=0x0) returned 0x0 [0209.150] CloseHandle (hObject=0x444) returned 1 [0209.160] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\container.dat", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\container.dat", lpFilePart=0x0) returned 0x77 [0209.160] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0209.160] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\container.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0209.161] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb000) returned 1 [0209.162] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbc80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\container.dat", lpFilePart=0x0) returned 0x77 [0209.162] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc120) returned 1 [0209.162] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x3bc200 | out: lpFileInformation=0x3bc200*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xce79b56e, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xce79b56e, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xce79b56e, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0209.162] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc0e0) returned 1 [0209.162] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\container.dat", lpFilePart=0x0) returned 0x77 [0209.162] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc120) returned 1 [0209.162] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x22e4708 | out: lpFileInformation=0x22e4708*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xce79b56e, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xce79b56e, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xce79b56e, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0209.162] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc0e0) returned 1 [0209.162] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbb00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\container.dat", lpFilePart=0x0) returned 0x77 [0209.162] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbfe0) returned 1 [0209.162] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0209.162] GetFileType (hFile=0x444) returned 0x1 [0209.162] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbf50) returned 1 [0209.162] GetFileType (hFile=0x444) returned 0x1 [0209.162] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc178 | out: lpFileSizeHigh=0x3bc178*=0x0) returned 0x0 [0209.162] CloseHandle (hObject=0x444) returned 1 [0209.178] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbb00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\container.dat", lpFilePart=0x0) returned 0x77 [0209.178] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbfe0) returned 1 [0209.178] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\container.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0209.179] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8a70) returned 1 [0209.180] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0209.180] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\12", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\12", lpFilePart=0x0) returned 0x6c [0209.180] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\12\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\12\\", lpFilePart=0x0) returned 0x6d [0209.180] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\12\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d81b0 [0209.180] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0209.181] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0209.181] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0209.181] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0209.181] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0209.181] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0209.181] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0209.181] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0209.181] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0209.181] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\12", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\12", lpFilePart=0x0) returned 0x6c [0209.181] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\12\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\12\\", lpFilePart=0x0) returned 0x6d [0209.181] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\12\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d7d30 [0209.181] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0209.182] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0209.182] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0209.182] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0209.182] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0209.182] FindClose (in: hFindFile=0x5d7d30 | out: hFindFile=0x5d7d30) returned 1 [0209.182] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0209.182] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0209.182] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\12\\appcache[1].man", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\12\\appcache[1].man", lpFilePart=0x0) returned 0x7c [0209.182] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0209.182] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\12\\appcache[1].man" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\12\\appcache[1].man"), fInfoLevelId=0x0, lpFileInformation=0x235e7d8 | out: lpFileInformation=0x235e7d8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8685d06a, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x8685d06a, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x8685d06a, ftLastWriteTime.dwHighDateTime=0x1d301c4, nFileSizeHigh=0x0, nFileSizeLow=0x3c)) returned 1 [0209.182] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0209.182] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\12\\appcache[1].man", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\12\\appcache[1].man", lpFilePart=0x0) returned 0x7c [0209.182] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0209.182] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\12\\appcache[1].man" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\12\\appcache[1].man"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0209.183] GetFileType (hFile=0x444) returned 0x1 [0209.183] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0209.183] GetFileType (hFile=0x444) returned 0x1 [0209.183] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x3c [0209.183] ReadFile (in: hFile=0x444, lpBuffer=0x235eba0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x235eba0*, lpNumberOfBytesRead=0x3be5c8*=0x3c, lpOverlapped=0x0) returned 1 [0209.183] CloseHandle (hObject=0x444) returned 1 [0209.224] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\12\\appcache[1].man", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\12\\appcache[1].man", lpFilePart=0x0) returned 0x7c [0209.224] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0209.224] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\12\\appcache[1].man" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\12\\appcache[1].man"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0209.225] GetFileType (hFile=0x444) returned 0x1 [0209.225] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0209.225] GetFileType (hFile=0x444) returned 0x1 [0209.225] WriteFile (in: hFile=0x444, lpBuffer=0x21d6130*, nNumberOfBytesToWrite=0x40, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x21d6130*, lpNumberOfBytesWritten=0x3be4d8*=0x40, lpOverlapped=0x0) returned 1 [0209.226] CloseHandle (hObject=0x444) returned 1 [0209.227] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\12\\appcache[1].man", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\12\\appcache[1].man", lpFilePart=0x0) returned 0x7c [0209.227] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\12\\appcache[1].man.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\12\\appcache[1].man.xuy", lpFilePart=0x0) returned 0x80 [0209.227] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0209.227] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\12\\appcache[1].man" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\12\\appcache[1].man"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8685d06a, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x8685d06a, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x688f9a84, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x40)) returned 1 [0209.227] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0209.227] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\12\\appcache[1].man" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\12\\appcache[1].man"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\12\\appcache[1].man.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\12\\appcache[1].man.xuy")) returned 1 [0209.229] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\12\\container.dat", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\12\\container.dat", lpFilePart=0x0) returned 0x7a [0209.229] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0209.229] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\12\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\12\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x21d74e8 | out: lpFileInformation=0x21d74e8*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x8685bcd9, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x8685bcd9, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x8685bcd9, ftLastWriteTime.dwHighDateTime=0x1d301c4, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0209.229] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0209.229] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\12\\container.dat", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\12\\container.dat", lpFilePart=0x0) returned 0x7a [0209.229] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0209.229] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\12\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\12\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0209.229] GetFileType (hFile=0x444) returned 0x1 [0209.229] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0209.229] GetFileType (hFile=0x444) returned 0x1 [0209.229] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x0 [0209.229] CloseHandle (hObject=0x444) returned 1 [0209.242] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\12\\container.dat", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\12\\container.dat", lpFilePart=0x0) returned 0x7a [0209.242] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0209.243] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\12\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\12\\container.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0209.244] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3baf90) returned 1 [0209.244] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\12\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbc10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\12\\container.dat", lpFilePart=0x0) returned 0x7a [0209.244] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0b0) returned 1 [0209.244] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\12\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\12\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x3bc190 | out: lpFileInformation=0x3bc190*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x8685bcd9, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x8685bcd9, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x8685bcd9, ftLastWriteTime.dwHighDateTime=0x1d301c4, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0209.245] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc070) returned 1 [0209.245] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\12\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbc30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\12\\container.dat", lpFilePart=0x0) returned 0x7a [0209.245] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0b0) returned 1 [0209.245] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\12\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\12\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x224e2b8 | out: lpFileInformation=0x224e2b8*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x8685bcd9, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x8685bcd9, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x8685bcd9, ftLastWriteTime.dwHighDateTime=0x1d301c4, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0209.245] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc070) returned 1 [0209.245] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\12\\container.dat", nBufferLength=0x105, lpBuffer=0x3bba90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\12\\container.dat", lpFilePart=0x0) returned 0x7a [0209.245] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf70) returned 1 [0209.245] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\12\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\12\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0209.245] GetFileType (hFile=0x444) returned 0x1 [0209.245] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbee0) returned 1 [0209.245] GetFileType (hFile=0x444) returned 0x1 [0209.245] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc108 | out: lpFileSizeHigh=0x3bc108*=0x0) returned 0x0 [0209.245] CloseHandle (hObject=0x444) returned 1 [0209.282] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\12\\container.dat", nBufferLength=0x105, lpBuffer=0x3bba90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\12\\container.dat", lpFilePart=0x0) returned 0x7a [0209.282] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf70) returned 1 [0209.283] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\12\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\12\\container.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0209.284] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8a00) returned 1 [0209.285] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\12\\zinc[1].htm", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\12\\zinc[1].htm", lpFilePart=0x0) returned 0x78 [0209.285] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0209.285] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\12\\zinc[1].htm" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\12\\zinc[1].htm"), fInfoLevelId=0x0, lpFileInformation=0x22c4fa0 | out: lpFileInformation=0x22c4fa0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8693a00c, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x8693a00c, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x869acc42, ftLastWriteTime.dwHighDateTime=0x1d301c4, nFileSizeHigh=0x0, nFileSizeLow=0x1d5d0)) returned 1 [0209.285] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0209.285] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\12\\zinc[1].htm", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\12\\zinc[1].htm", lpFilePart=0x0) returned 0x78 [0209.285] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0209.285] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\12\\zinc[1].htm" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\12\\zinc[1].htm"), fInfoLevelId=0x0, lpFileInformation=0x22c5148 | out: lpFileInformation=0x22c5148*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8693a00c, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x8693a00c, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x869acc42, ftLastWriteTime.dwHighDateTime=0x1d301c4, nFileSizeHigh=0x0, nFileSizeLow=0x1d5d0)) returned 1 [0209.285] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0209.285] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\12\\zinc[1].htm", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\12\\zinc[1].htm", lpFilePart=0x0) returned 0x78 [0209.285] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0209.285] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\12\\zinc[1].htm" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\12\\zinc[1].htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0209.286] GetFileType (hFile=0x444) returned 0x1 [0209.286] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0209.286] GetFileType (hFile=0x444) returned 0x1 [0209.286] ReadFile (in: hFile=0x444, lpBuffer=0x22c75c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x22c75c8*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0209.298] CloseHandle (hObject=0x444) returned 1 [0209.354] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\12\\zinc[1].htm", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\12\\zinc[1].htm", lpFilePart=0x0) returned 0x78 [0209.354] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0209.354] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\12\\zinc[1].htm" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\12\\zinc[1].htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0209.354] GetFileType (hFile=0x444) returned 0x1 [0209.354] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0209.354] GetFileType (hFile=0x444) returned 0x1 [0209.354] WriteFile (in: hFile=0x444, lpBuffer=0x22c52d0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x22c52d0*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0209.355] CloseHandle (hObject=0x444) returned 1 [0209.355] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\12\\zinc[1].htm", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\12\\zinc[1].htm", lpFilePart=0x0) returned 0x78 [0209.355] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\12\\zinc[1].htm.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\12\\zinc[1].htm.xuy", lpFilePart=0x0) returned 0x7c [0209.355] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0209.355] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\12\\zinc[1].htm" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\12\\zinc[1].htm"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8693a00c, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x8693a00c, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x68a2ad96, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x1d5d0)) returned 1 [0209.355] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0209.355] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\12\\zinc[1].htm" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\12\\zinc[1].htm"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\12\\zinc[1].htm.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\12\\zinc[1].htm.xuy")) returned 1 [0209.356] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0209.356] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\21", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\21", lpFilePart=0x0) returned 0x6c [0209.356] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\21\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\21\\", lpFilePart=0x0) returned 0x6d [0209.356] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\21\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d75b0 [0209.357] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0209.357] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0209.357] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0209.357] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0209.357] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0209.357] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0209.357] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0209.357] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0209.357] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0209.357] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0209.358] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0209.358] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0209.358] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0209.358] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0209.358] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0209.358] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0209.358] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0209.358] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0209.358] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0209.359] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0209.359] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0209.359] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0209.359] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0209.359] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0209.359] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0209.359] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0209.359] FindClose (in: hFindFile=0x5d75b0 | out: hFindFile=0x5d75b0) returned 1 [0209.359] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0209.359] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0209.359] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0209.359] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\21", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\21", lpFilePart=0x0) returned 0x6c [0209.359] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\21\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\21\\", lpFilePart=0x0) returned 0x6d [0209.359] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\21\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d7eb0 [0209.360] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0209.360] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0209.360] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0209.360] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0209.360] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0209.360] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0209.360] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0209.360] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0209.360] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0209.360] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0209.361] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0209.361] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0209.361] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0209.361] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0209.361] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0209.361] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0209.361] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0209.361] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0209.361] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0209.361] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0209.362] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0209.362] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0209.362] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0209.362] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0209.362] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0209.362] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0209.362] FindClose (in: hFindFile=0x5d7eb0 | out: hFindFile=0x5d7eb0) returned 1 [0209.362] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0209.362] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0209.362] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0209.362] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\21\\045d3532[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\21\\045d3532[1].js"), fInfoLevelId=0x0, lpFileInformation=0x234ea08 | out: lpFileInformation=0x234ea08*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xdab3422f, ftCreationTime.dwHighDateTime=0x1d46685, ftLastAccessTime.dwLowDateTime=0xdab3422f, ftLastAccessTime.dwHighDateTime=0x1d46685, ftLastWriteTime.dwLowDateTime=0xdab3422f, ftLastWriteTime.dwHighDateTime=0x1d46685, nFileSizeHigh=0x0, nFileSizeLow=0x19b8)) returned 1 [0209.362] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0209.363] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0209.363] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\21\\045d3532[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\21\\045d3532[1].js"), fInfoLevelId=0x0, lpFileInformation=0x234ebb8 | out: lpFileInformation=0x234ebb8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xdab3422f, ftCreationTime.dwHighDateTime=0x1d46685, ftLastAccessTime.dwLowDateTime=0xdab3422f, ftLastAccessTime.dwHighDateTime=0x1d46685, ftLastWriteTime.dwLowDateTime=0xdab3422f, ftLastWriteTime.dwHighDateTime=0x1d46685, nFileSizeHigh=0x0, nFileSizeLow=0x19b8)) returned 1 [0209.363] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0209.363] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0209.365] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0209.404] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0209.405] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0209.405] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0209.405] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0209.405] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\21\\045d3532[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\21\\045d3532[1].js"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\21\\045d3532[1].js.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\21\\045d3532[1].js.xuy")) returned 1 [0209.407] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0209.407] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0209.407] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0209.408] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0209.408] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0209.408] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0209.419] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0209.419] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0209.419] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0209.419] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0209.419] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\21\\0c3a2f0b[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\21\\0c3a2f0b[1].js"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\21\\0c3a2f0b[1].js.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\21\\0c3a2f0b[1].js.xuy")) returned 1 [0209.422] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0209.422] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0209.422] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0209.422] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0209.422] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0209.422] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0209.433] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0209.433] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0209.433] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0209.433] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0209.433] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\21\\11ee0799[1].css" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\21\\11ee0799[1].css"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\21\\11ee0799[1].css.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\21\\11ee0799[1].css.xuy")) returned 1 [0209.435] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0209.435] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0209.435] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0209.435] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0209.435] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0209.435] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0209.451] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0209.451] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0209.452] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0209.452] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0209.452] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\21\\201f7711[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\21\\201f7711[1].js"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\21\\201f7711[1].js.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\21\\201f7711[1].js.xuy")) returned 1 [0209.454] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0209.454] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0209.454] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0209.454] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0209.454] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0209.454] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0209.468] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\21\\2743db28[1].css" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\21\\2743db28[1].css"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\21\\2743db28[1].css.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\21\\2743db28[1].css.xuy")) returned 1 [0209.481] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\21\\3dbfe8fb[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\21\\3dbfe8fb[1].js"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\21\\3dbfe8fb[1].js.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\21\\3dbfe8fb[1].js.xuy")) returned 1 [0209.496] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\21\\424a9e57[1].css" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\21\\424a9e57[1].css"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\21\\424a9e57[1].css.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\21\\424a9e57[1].css.xuy")) returned 1 [0209.509] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\21\\4bdff26d[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\21\\4bdff26d[1].js"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\21\\4bdff26d[1].js.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\21\\4bdff26d[1].js.xuy")) returned 1 [0209.527] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\21\\4df532ad[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\21\\4df532ad[1].js"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\21\\4df532ad[1].js.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\21\\4df532ad[1].js.xuy")) returned 1 [0209.550] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\21\\68b84d3a[1].css" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\21\\68b84d3a[1].css"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\21\\68b84d3a[1].css.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\21\\68b84d3a[1].css.xuy")) returned 1 [0209.564] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\21\\7750a67d[1].css" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\21\\7750a67d[1].css"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\21\\7750a67d[1].css.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\21\\7750a67d[1].css.xuy")) returned 1 [0209.631] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\21\\8636b4dd[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\21\\8636b4dd[1].js"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\21\\8636b4dd[1].js.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\21\\8636b4dd[1].js.xuy")) returned 1 [0209.649] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\21\\88bf6172[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\21\\88bf6172[1].js"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\21\\88bf6172[1].js.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\21\\88bf6172[1].js.xuy")) returned 1 [0209.666] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\21\\a0d3923c[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\21\\a0d3923c[1].js"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\21\\a0d3923c[1].js.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\21\\a0d3923c[1].js.xuy")) returned 1 [0209.680] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\21\\abe834c1[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\21\\abe834c1[1].js"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\21\\abe834c1[1].js.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\21\\abe834c1[1].js.xuy")) returned 1 [0209.735] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\21\\appcache[1].man" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\21\\appcache[1].man"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\21\\appcache[1].man.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\21\\appcache[1].man.xuy")) returned 1 [0209.751] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\21\\cccf4f10[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\21\\cccf4f10[1].js"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\21\\cccf4f10[1].js.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\21\\cccf4f10[1].js.xuy")) returned 1 [0209.782] ReadFile (in: hFile=0x444, lpBuffer=0x22a6350, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x22a6350*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0209.797] CloseHandle (hObject=0x444) returned 1 [0209.797] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\21\\e1ade07e[1].js", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\21\\e1ade07e[1].js", lpFilePart=0x0) returned 0x7b [0209.797] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\21\\e1ade07e[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\21\\e1ade07e[1].js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0209.798] GetFileType (hFile=0x444) returned 0x1 [0209.798] GetFileType (hFile=0x444) returned 0x1 [0209.798] WriteFile (in: hFile=0x444, lpBuffer=0x22a4050*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x22a4050*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0209.798] CloseHandle (hObject=0x444) returned 1 [0209.798] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\21\\e1ade07e[1].js", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\21\\e1ade07e[1].js", lpFilePart=0x0) returned 0x7b [0209.798] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\21\\e1ade07e[1].js.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\21\\e1ade07e[1].js.xuy", lpFilePart=0x0) returned 0x7f [0209.798] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\21\\e1ade07e[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\21\\e1ade07e[1].js"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xdad4a20d, ftCreationTime.dwHighDateTime=0x1d46685, ftLastAccessTime.dwLowDateTime=0xdad4a20d, ftLastAccessTime.dwHighDateTime=0x1d46685, ftLastWriteTime.dwLowDateTime=0x68e57172, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x97b3)) returned 1 [0209.799] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\21\\e1ade07e[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\21\\e1ade07e[1].js"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\21\\e1ade07e[1].js.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\21\\e1ade07e[1].js.xuy")) returned 1 [0209.800] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\21\\e1e405d1[1].js", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\21\\e1e405d1[1].js", lpFilePart=0x0) returned 0x7b [0209.800] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\21\\e1e405d1[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\21\\e1e405d1[1].js"), fInfoLevelId=0x0, lpFileInformation=0x2322880 | out: lpFileInformation=0x2322880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xdaa9bae9, ftCreationTime.dwHighDateTime=0x1d46685, ftLastAccessTime.dwLowDateTime=0xdaa9bae9, ftLastAccessTime.dwHighDateTime=0x1d46685, ftLastWriteTime.dwLowDateTime=0xdaa9bae9, ftLastWriteTime.dwHighDateTime=0x1d46685, nFileSizeHigh=0x0, nFileSizeLow=0x1e9ac)) returned 1 [0209.800] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\21\\e1e405d1[1].js", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\21\\e1e405d1[1].js", lpFilePart=0x0) returned 0x7b [0209.800] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\21\\e1e405d1[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\21\\e1e405d1[1].js"), fInfoLevelId=0x0, lpFileInformation=0x2322a30 | out: lpFileInformation=0x2322a30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xdaa9bae9, ftCreationTime.dwHighDateTime=0x1d46685, ftLastAccessTime.dwLowDateTime=0xdaa9bae9, ftLastAccessTime.dwHighDateTime=0x1d46685, ftLastWriteTime.dwLowDateTime=0xdaa9bae9, ftLastWriteTime.dwHighDateTime=0x1d46685, nFileSizeHigh=0x0, nFileSizeLow=0x1e9ac)) returned 1 [0209.800] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\21\\e1e405d1[1].js", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\21\\e1e405d1[1].js", lpFilePart=0x0) returned 0x7b [0209.800] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\21\\e1e405d1[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\21\\e1e405d1[1].js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0209.801] GetFileType (hFile=0x444) returned 0x1 [0209.801] GetFileType (hFile=0x444) returned 0x1 [0209.801] ReadFile (in: hFile=0x444, lpBuffer=0x2324ec0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x2324ec0*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0209.864] CloseHandle (hObject=0x444) returned 1 [0209.865] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\21\\e1e405d1[1].js", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\21\\e1e405d1[1].js", lpFilePart=0x0) returned 0x7b [0209.865] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0209.865] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\21\\e1e405d1[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\21\\e1e405d1[1].js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0209.865] GetFileType (hFile=0x444) returned 0x1 [0209.865] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0209.865] GetFileType (hFile=0x444) returned 0x1 [0209.865] WriteFile (in: hFile=0x444, lpBuffer=0x2189580*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x2189580*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0209.866] CloseHandle (hObject=0x444) returned 1 [0209.866] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\21\\e1e405d1[1].js", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\21\\e1e405d1[1].js", lpFilePart=0x0) returned 0x7b [0209.866] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\21\\e1e405d1[1].js.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\21\\e1e405d1[1].js.xuy", lpFilePart=0x0) returned 0x7f [0209.866] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0209.866] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\21\\e1e405d1[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\21\\e1e405d1[1].js"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xdaa9bae9, ftCreationTime.dwHighDateTime=0x1d46685, ftLastAccessTime.dwLowDateTime=0xdaa9bae9, ftLastAccessTime.dwHighDateTime=0x1d46685, ftLastWriteTime.dwLowDateTime=0x68f12261, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x1e9ac)) returned 1 [0209.866] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0209.866] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\21\\e1e405d1[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\21\\e1e405d1[1].js"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\21\\e1e405d1[1].js.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\21\\e1e405d1[1].js.xuy")) returned 1 [0209.895] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\21\\ed0ebfec[1].js", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\21\\ed0ebfec[1].js", lpFilePart=0x0) returned 0x7b [0209.895] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0209.895] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\21\\ed0ebfec[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\21\\ed0ebfec[1].js"), fInfoLevelId=0x0, lpFileInformation=0x21a1508 | out: lpFileInformation=0x21a1508*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xdae5536b, ftCreationTime.dwHighDateTime=0x1d46685, ftLastAccessTime.dwLowDateTime=0xdae5536b, ftLastAccessTime.dwHighDateTime=0x1d46685, ftLastWriteTime.dwLowDateTime=0xdaea170d, ftLastWriteTime.dwHighDateTime=0x1d46685, nFileSizeHigh=0x0, nFileSizeLow=0x931a5)) returned 1 [0209.895] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0209.895] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\21\\ed0ebfec[1].js", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\21\\ed0ebfec[1].js", lpFilePart=0x0) returned 0x7b [0209.895] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0209.895] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\21\\ed0ebfec[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\21\\ed0ebfec[1].js"), fInfoLevelId=0x0, lpFileInformation=0x21a16b8 | out: lpFileInformation=0x21a16b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xdae5536b, ftCreationTime.dwHighDateTime=0x1d46685, ftLastAccessTime.dwLowDateTime=0xdae5536b, ftLastAccessTime.dwHighDateTime=0x1d46685, ftLastWriteTime.dwLowDateTime=0xdaea170d, ftLastWriteTime.dwHighDateTime=0x1d46685, nFileSizeHigh=0x0, nFileSizeLow=0x931a5)) returned 1 [0209.895] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0209.895] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\21\\ed0ebfec[1].js", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\21\\ed0ebfec[1].js", lpFilePart=0x0) returned 0x7b [0209.895] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0209.895] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\21\\ed0ebfec[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\21\\ed0ebfec[1].js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0209.897] GetFileType (hFile=0x444) returned 0x1 [0209.897] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0209.897] GetFileType (hFile=0x444) returned 0x1 [0209.897] ReadFile (in: hFile=0x444, lpBuffer=0x21a3b48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x21a3b48*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0209.908] CloseHandle (hObject=0x444) returned 1 [0209.908] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\21\\ed0ebfec[1].js", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\21\\ed0ebfec[1].js", lpFilePart=0x0) returned 0x7b [0209.908] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0209.908] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\21\\ed0ebfec[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\21\\ed0ebfec[1].js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0209.909] GetFileType (hFile=0x444) returned 0x1 [0209.909] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0209.909] GetFileType (hFile=0x444) returned 0x1 [0209.909] WriteFile (in: hFile=0x444, lpBuffer=0x21a1848*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x21a1848*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0209.909] CloseHandle (hObject=0x444) returned 1 [0209.909] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\21\\ed0ebfec[1].js", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\21\\ed0ebfec[1].js", lpFilePart=0x0) returned 0x7b [0209.909] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\21\\ed0ebfec[1].js.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\21\\ed0ebfec[1].js.xuy", lpFilePart=0x0) returned 0x7f [0209.909] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0209.909] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\21\\ed0ebfec[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\21\\ed0ebfec[1].js"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xdae5536b, ftCreationTime.dwHighDateTime=0x1d46685, ftLastAccessTime.dwLowDateTime=0xdae5536b, ftLastAccessTime.dwHighDateTime=0x1d46685, ftLastWriteTime.dwLowDateTime=0x68f5e6d8, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x931a5)) returned 1 [0209.909] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0209.909] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\21\\ed0ebfec[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\21\\ed0ebfec[1].js"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\21\\ed0ebfec[1].js.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\21\\ed0ebfec[1].js.xuy")) returned 1 [0209.911] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\21\\f30ec6be[1].js", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\21\\f30ec6be[1].js", lpFilePart=0x0) returned 0x7b [0209.911] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0209.911] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\21\\f30ec6be[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\21\\f30ec6be[1].js"), fInfoLevelId=0x0, lpFileInformation=0x2220078 | out: lpFileInformation=0x2220078*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xda5fd1ae, ftCreationTime.dwHighDateTime=0x1d46685, ftLastAccessTime.dwLowDateTime=0xda5fd1ae, ftLastAccessTime.dwHighDateTime=0x1d46685, ftLastWriteTime.dwLowDateTime=0xda5fd1ae, ftLastWriteTime.dwHighDateTime=0x1d46685, nFileSizeHigh=0x0, nFileSizeLow=0x8b53)) returned 1 [0209.911] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0209.911] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\21\\f30ec6be[1].js", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\21\\f30ec6be[1].js", lpFilePart=0x0) returned 0x7b [0209.911] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0209.911] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\21\\f30ec6be[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\21\\f30ec6be[1].js"), fInfoLevelId=0x0, lpFileInformation=0x2220228 | out: lpFileInformation=0x2220228*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xda5fd1ae, ftCreationTime.dwHighDateTime=0x1d46685, ftLastAccessTime.dwLowDateTime=0xda5fd1ae, ftLastAccessTime.dwHighDateTime=0x1d46685, ftLastWriteTime.dwLowDateTime=0xda5fd1ae, ftLastWriteTime.dwHighDateTime=0x1d46685, nFileSizeHigh=0x0, nFileSizeLow=0x8b53)) returned 1 [0209.911] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0209.912] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\21\\f30ec6be[1].js", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\21\\f30ec6be[1].js", lpFilePart=0x0) returned 0x7b [0209.912] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0209.912] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\21\\f30ec6be[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\21\\f30ec6be[1].js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0209.913] GetFileType (hFile=0x444) returned 0x1 [0209.913] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0209.913] GetFileType (hFile=0x444) returned 0x1 [0209.913] ReadFile (in: hFile=0x444, lpBuffer=0x22226b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x22226b8*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0209.924] CloseHandle (hObject=0x444) returned 1 [0209.924] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\21\\f30ec6be[1].js", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\21\\f30ec6be[1].js", lpFilePart=0x0) returned 0x7b [0209.924] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0209.924] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\21\\f30ec6be[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\21\\f30ec6be[1].js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0209.924] GetFileType (hFile=0x444) returned 0x1 [0209.924] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0209.924] GetFileType (hFile=0x444) returned 0x1 [0209.924] WriteFile (in: hFile=0x444, lpBuffer=0x22203b8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x22203b8*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0209.925] CloseHandle (hObject=0x444) returned 1 [0209.925] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\21\\f30ec6be[1].js", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\21\\f30ec6be[1].js", lpFilePart=0x0) returned 0x7b [0209.925] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\21\\f30ec6be[1].js.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\21\\f30ec6be[1].js.xuy", lpFilePart=0x0) returned 0x7f [0209.925] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0209.925] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\21\\f30ec6be[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\21\\f30ec6be[1].js"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xda5fd1ae, ftCreationTime.dwHighDateTime=0x1d46685, ftLastAccessTime.dwLowDateTime=0xda5fd1ae, ftLastAccessTime.dwHighDateTime=0x1d46685, ftLastWriteTime.dwLowDateTime=0x68f8592e, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x8b53)) returned 1 [0209.925] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0209.925] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\21\\f30ec6be[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\21\\f30ec6be[1].js"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\21\\f30ec6be[1].js.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\21\\f30ec6be[1].js.xuy")) returned 1 [0209.926] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\21\\f87f4952[1].js", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\21\\f87f4952[1].js", lpFilePart=0x0) returned 0x7b [0209.926] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0209.927] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\21\\f87f4952[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\21\\f87f4952[1].js"), fInfoLevelId=0x0, lpFileInformation=0x229ebe8 | out: lpFileInformation=0x229ebe8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xdade2b87, ftCreationTime.dwHighDateTime=0x1d46685, ftLastAccessTime.dwLowDateTime=0xdade2b87, ftLastAccessTime.dwHighDateTime=0x1d46685, ftLastWriteTime.dwLowDateTime=0xdade2b87, ftLastWriteTime.dwHighDateTime=0x1d46685, nFileSizeHigh=0x0, nFileSizeLow=0xa33c)) returned 1 [0209.927] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0209.927] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\21\\f87f4952[1].js", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\21\\f87f4952[1].js", lpFilePart=0x0) returned 0x7b [0209.927] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0209.927] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\21\\f87f4952[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\21\\f87f4952[1].js"), fInfoLevelId=0x0, lpFileInformation=0x229ed98 | out: lpFileInformation=0x229ed98*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xdade2b87, ftCreationTime.dwHighDateTime=0x1d46685, ftLastAccessTime.dwLowDateTime=0xdade2b87, ftLastAccessTime.dwHighDateTime=0x1d46685, ftLastWriteTime.dwLowDateTime=0xdade2b87, ftLastWriteTime.dwHighDateTime=0x1d46685, nFileSizeHigh=0x0, nFileSizeLow=0xa33c)) returned 1 [0209.927] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0209.927] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\21\\f87f4952[1].js", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\21\\f87f4952[1].js", lpFilePart=0x0) returned 0x7b [0209.927] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0209.927] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\21\\f87f4952[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\21\\f87f4952[1].js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0209.929] GetFileType (hFile=0x444) returned 0x1 [0209.929] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0209.929] GetFileType (hFile=0x444) returned 0x1 [0209.929] ReadFile (in: hFile=0x444, lpBuffer=0x22a1228, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x22a1228*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0209.940] CloseHandle (hObject=0x444) returned 1 [0209.940] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\21\\f87f4952[1].js", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\21\\f87f4952[1].js", lpFilePart=0x0) returned 0x7b [0209.940] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0209.940] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\21\\f87f4952[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\21\\f87f4952[1].js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0209.940] GetFileType (hFile=0x444) returned 0x1 [0209.941] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0209.941] GetFileType (hFile=0x444) returned 0x1 [0209.941] WriteFile (in: hFile=0x444, lpBuffer=0x229ef28*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x229ef28*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0209.941] CloseHandle (hObject=0x444) returned 1 [0209.941] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\21\\f87f4952[1].js", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\21\\f87f4952[1].js", lpFilePart=0x0) returned 0x7b [0209.941] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\21\\f87f4952[1].js.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\21\\f87f4952[1].js.xuy", lpFilePart=0x0) returned 0x7f [0209.941] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0209.941] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\21\\f87f4952[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\21\\f87f4952[1].js"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xdade2b87, ftCreationTime.dwHighDateTime=0x1d46685, ftLastAccessTime.dwLowDateTime=0xdade2b87, ftLastAccessTime.dwHighDateTime=0x1d46685, ftLastWriteTime.dwLowDateTime=0x68fab108, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xa33c)) returned 1 [0209.941] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0209.941] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\21\\f87f4952[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\21\\f87f4952[1].js"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\21\\f87f4952[1].js.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\21\\f87f4952[1].js.xuy")) returned 1 [0209.942] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\21\\Init[1].htm", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\21\\Init[1].htm", lpFilePart=0x0) returned 0x78 [0209.943] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0209.943] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\21\\Init[1].htm" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\21\\init[1].htm"), fInfoLevelId=0x0, lpFileInformation=0x231d760 | out: lpFileInformation=0x231d760*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xda3c0cd2, ftCreationTime.dwHighDateTime=0x1d46685, ftLastAccessTime.dwLowDateTime=0xda3c0cd2, ftLastAccessTime.dwHighDateTime=0x1d46685, ftLastWriteTime.dwLowDateTime=0xda3c0cd2, ftLastWriteTime.dwHighDateTime=0x1d46685, nFileSizeHigh=0x0, nFileSizeLow=0xbe3a)) returned 1 [0209.943] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0209.943] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\21\\Init[1].htm", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\21\\Init[1].htm", lpFilePart=0x0) returned 0x78 [0209.943] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0209.943] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\21\\Init[1].htm" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\21\\init[1].htm"), fInfoLevelId=0x0, lpFileInformation=0x231d908 | out: lpFileInformation=0x231d908*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xda3c0cd2, ftCreationTime.dwHighDateTime=0x1d46685, ftLastAccessTime.dwLowDateTime=0xda3c0cd2, ftLastAccessTime.dwHighDateTime=0x1d46685, ftLastWriteTime.dwLowDateTime=0xda3c0cd2, ftLastWriteTime.dwHighDateTime=0x1d46685, nFileSizeHigh=0x0, nFileSizeLow=0xbe3a)) returned 1 [0209.943] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0209.943] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\21\\Init[1].htm", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\21\\Init[1].htm", lpFilePart=0x0) returned 0x78 [0209.943] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0209.943] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\21\\Init[1].htm" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\21\\init[1].htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0209.945] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb020) returned 1 [0209.945] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\21\\Init[1].htm", nBufferLength=0x105, lpBuffer=0x3bbca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\21\\Init[1].htm", lpFilePart=0x0) returned 0x78 [0209.945] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc140) returned 1 [0209.945] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\21\\Init[1].htm" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\21\\init[1].htm"), fInfoLevelId=0x0, lpFileInformation=0x3bc220 | out: lpFileInformation=0x3bc220*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xda3c0cd2, ftCreationTime.dwHighDateTime=0x1d46685, ftLastAccessTime.dwLowDateTime=0xda3c0cd2, ftLastAccessTime.dwHighDateTime=0x1d46685, ftLastWriteTime.dwLowDateTime=0xda3c0cd2, ftLastWriteTime.dwHighDateTime=0x1d46685, nFileSizeHigh=0x0, nFileSizeLow=0xbe3a)) returned 1 [0209.945] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc100) returned 1 [0209.945] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\21\\Init[1].htm", nBufferLength=0x105, lpBuffer=0x3bbcc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\21\\Init[1].htm", lpFilePart=0x0) returned 0x78 [0209.945] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc140) returned 1 [0209.946] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\21\\Init[1].htm" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\21\\init[1].htm"), fInfoLevelId=0x0, lpFileInformation=0x23205e0 | out: lpFileInformation=0x23205e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xda3c0cd2, ftCreationTime.dwHighDateTime=0x1d46685, ftLastAccessTime.dwLowDateTime=0xda3c0cd2, ftLastAccessTime.dwHighDateTime=0x1d46685, ftLastWriteTime.dwLowDateTime=0xda3c0cd2, ftLastWriteTime.dwHighDateTime=0x1d46685, nFileSizeHigh=0x0, nFileSizeLow=0xbe3a)) returned 1 [0209.946] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc100) returned 1 [0209.946] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\21\\Init[1].htm", nBufferLength=0x105, lpBuffer=0x3bbcc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\21\\Init[1].htm", lpFilePart=0x0) returned 0x78 [0209.946] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc140) returned 1 [0209.946] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\21\\Init[1].htm" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\21\\init[1].htm"), fInfoLevelId=0x0, lpFileInformation=0x2320788 | out: lpFileInformation=0x2320788*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xda3c0cd2, ftCreationTime.dwHighDateTime=0x1d46685, ftLastAccessTime.dwLowDateTime=0xda3c0cd2, ftLastAccessTime.dwHighDateTime=0x1d46685, ftLastWriteTime.dwLowDateTime=0xda3c0cd2, ftLastWriteTime.dwHighDateTime=0x1d46685, nFileSizeHigh=0x0, nFileSizeLow=0xbe3a)) returned 1 [0209.946] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc100) returned 1 [0209.946] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\21\\Init[1].htm", nBufferLength=0x105, lpBuffer=0x3bbb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\21\\Init[1].htm", lpFilePart=0x0) returned 0x78 [0209.946] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc040) returned 1 [0209.946] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\21\\Init[1].htm" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\21\\init[1].htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0209.947] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8ad0) returned 1 [0209.948] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0209.948] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\5", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\5", lpFilePart=0x0) returned 0x6b [0209.948] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\5\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\5\\", lpFilePart=0x0) returned 0x6c [0209.948] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\5\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d7af0 [0209.949] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0209.949] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0209.949] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0209.949] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0209.949] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0209.949] FindClose (in: hFindFile=0x5d7af0 | out: hFindFile=0x5d7af0) returned 1 [0209.949] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0209.949] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0209.949] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0209.949] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\5", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\5", lpFilePart=0x0) returned 0x6b [0209.949] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\5\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\5\\", lpFilePart=0x0) returned 0x6c [0209.949] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\5\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d81b0 [0209.950] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0209.950] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0209.950] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0209.950] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0209.950] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0209.950] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0209.950] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0209.950] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0209.950] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\5\\appcache[1].man", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\5\\appcache[1].man", lpFilePart=0x0) returned 0x7b [0209.950] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0209.951] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\5\\appcache[1].man" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\5\\appcache[1].man"), fInfoLevelId=0x0, lpFileInformation=0x2326768 | out: lpFileInformation=0x2326768*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7e5fed0b, ftCreationTime.dwHighDateTime=0x1d2d437, ftLastAccessTime.dwLowDateTime=0x7e5fed0b, ftLastAccessTime.dwHighDateTime=0x1d2d437, ftLastWriteTime.dwLowDateTime=0x7e5fed0b, ftLastWriteTime.dwHighDateTime=0x1d2d437, nFileSizeHigh=0x0, nFileSizeLow=0x3c)) returned 1 [0209.956] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0209.956] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\5\\appcache[1].man", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\5\\appcache[1].man", lpFilePart=0x0) returned 0x7b [0209.956] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0209.956] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\5\\appcache[1].man" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\5\\appcache[1].man"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0209.957] GetFileType (hFile=0x444) returned 0x1 [0209.957] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0209.957] GetFileType (hFile=0x444) returned 0x1 [0209.957] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x3c [0209.957] ReadFile (in: hFile=0x444, lpBuffer=0x2326b20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x2326b20*, lpNumberOfBytesRead=0x3be5c8*=0x3c, lpOverlapped=0x0) returned 1 [0209.958] CloseHandle (hObject=0x444) returned 1 [0209.999] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\5\\appcache[1].man", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\5\\appcache[1].man", lpFilePart=0x0) returned 0x7b [0209.999] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0209.999] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\5\\appcache[1].man" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\5\\appcache[1].man"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0210.001] GetFileType (hFile=0x444) returned 0x1 [0210.001] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0210.001] GetFileType (hFile=0x444) returned 0x1 [0210.001] WriteFile (in: hFile=0x444, lpBuffer=0x21994a8*, nNumberOfBytesToWrite=0x40, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x21994a8*, lpNumberOfBytesWritten=0x3be4d8*=0x40, lpOverlapped=0x0) returned 1 [0210.001] CloseHandle (hObject=0x444) returned 1 [0210.002] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\5\\appcache[1].man", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\5\\appcache[1].man", lpFilePart=0x0) returned 0x7b [0210.002] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\5\\appcache[1].man.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\5\\appcache[1].man.xuy", lpFilePart=0x0) returned 0x7f [0210.002] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0210.002] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\5\\appcache[1].man" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\5\\appcache[1].man"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7e5fed0b, ftCreationTime.dwHighDateTime=0x1d2d437, ftLastAccessTime.dwLowDateTime=0x7e5fed0b, ftLastAccessTime.dwHighDateTime=0x1d2d437, ftLastWriteTime.dwLowDateTime=0x690435ed, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x40)) returned 1 [0210.002] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0210.002] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\5\\appcache[1].man" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\5\\appcache[1].man"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\5\\appcache[1].man.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\5\\appcache[1].man.xuy")) returned 1 [0210.003] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\5\\container.dat", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\5\\container.dat", lpFilePart=0x0) returned 0x79 [0210.003] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0210.003] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\5\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\5\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x219a848 | out: lpFileInformation=0x219a848*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x7e5fc62a, ftCreationTime.dwHighDateTime=0x1d2d437, ftLastAccessTime.dwLowDateTime=0x7e5fc62a, ftLastAccessTime.dwHighDateTime=0x1d2d437, ftLastWriteTime.dwLowDateTime=0x7e5fc62a, ftLastWriteTime.dwHighDateTime=0x1d2d437, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0210.003] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0210.003] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\5\\container.dat", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\5\\container.dat", lpFilePart=0x0) returned 0x79 [0210.003] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0210.003] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\5\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\5\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0210.004] GetFileType (hFile=0x444) returned 0x1 [0210.004] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0210.004] GetFileType (hFile=0x444) returned 0x1 [0210.004] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x0 [0210.004] CloseHandle (hObject=0x444) returned 1 [0210.029] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\5\\container.dat", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\5\\container.dat", lpFilePart=0x0) returned 0x79 [0210.029] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0210.029] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\5\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\5\\container.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0210.030] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3baf90) returned 1 [0210.031] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\5\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbc10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\5\\container.dat", lpFilePart=0x0) returned 0x79 [0210.031] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0b0) returned 1 [0210.031] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\5\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\5\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x3bc190 | out: lpFileInformation=0x3bc190*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x7e5fc62a, ftCreationTime.dwHighDateTime=0x1d2d437, ftLastAccessTime.dwLowDateTime=0x7e5fc62a, ftLastAccessTime.dwHighDateTime=0x1d2d437, ftLastWriteTime.dwLowDateTime=0x7e5fc62a, ftLastWriteTime.dwHighDateTime=0x1d2d437, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0210.031] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc070) returned 1 [0210.031] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\5\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbc30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\5\\container.dat", lpFilePart=0x0) returned 0x79 [0210.031] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0b0) returned 1 [0210.031] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\5\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\5\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x2211618 | out: lpFileInformation=0x2211618*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x7e5fc62a, ftCreationTime.dwHighDateTime=0x1d2d437, ftLastAccessTime.dwLowDateTime=0x7e5fc62a, ftLastAccessTime.dwHighDateTime=0x1d2d437, ftLastWriteTime.dwLowDateTime=0x7e5fc62a, ftLastWriteTime.dwHighDateTime=0x1d2d437, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0210.031] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc070) returned 1 [0210.031] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\5\\container.dat", nBufferLength=0x105, lpBuffer=0x3bba90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\5\\container.dat", lpFilePart=0x0) returned 0x79 [0210.031] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf70) returned 1 [0210.031] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\5\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\5\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0210.031] GetFileType (hFile=0x444) returned 0x1 [0210.031] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbee0) returned 1 [0210.031] GetFileType (hFile=0x444) returned 0x1 [0210.031] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc108 | out: lpFileSizeHigh=0x3bc108*=0x0) returned 0x0 [0210.031] CloseHandle (hObject=0x444) returned 1 [0210.066] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\5\\container.dat", nBufferLength=0x105, lpBuffer=0x3bba90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\5\\container.dat", lpFilePart=0x0) returned 0x79 [0210.066] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf70) returned 1 [0210.066] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\5\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\5\\container.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0210.068] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8a00) returned 1 [0210.068] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\5\\zinc[1].htm", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\5\\zinc[1].htm", lpFilePart=0x0) returned 0x77 [0210.068] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0210.068] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\5\\zinc[1].htm" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\5\\zinc[1].htm"), fInfoLevelId=0x0, lpFileInformation=0x2288300 | out: lpFileInformation=0x2288300*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7e6df7ac, ftCreationTime.dwHighDateTime=0x1d2d437, ftLastAccessTime.dwLowDateTime=0x7e6df7ac, ftLastAccessTime.dwHighDateTime=0x1d2d437, ftLastWriteTime.dwLowDateTime=0x7e8f7e62, ftLastWriteTime.dwHighDateTime=0x1d2d437, nFileSizeHigh=0x0, nFileSizeLow=0x1d46a)) returned 1 [0210.069] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0210.069] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\5\\zinc[1].htm", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\5\\zinc[1].htm", lpFilePart=0x0) returned 0x77 [0210.069] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0210.069] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\5\\zinc[1].htm" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\5\\zinc[1].htm"), fInfoLevelId=0x0, lpFileInformation=0x22884a0 | out: lpFileInformation=0x22884a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7e6df7ac, ftCreationTime.dwHighDateTime=0x1d2d437, ftLastAccessTime.dwLowDateTime=0x7e6df7ac, ftLastAccessTime.dwHighDateTime=0x1d2d437, ftLastWriteTime.dwLowDateTime=0x7e8f7e62, ftLastWriteTime.dwHighDateTime=0x1d2d437, nFileSizeHigh=0x0, nFileSizeLow=0x1d46a)) returned 1 [0210.069] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0210.069] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\5\\zinc[1].htm", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\5\\zinc[1].htm", lpFilePart=0x0) returned 0x77 [0210.069] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0210.069] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\5\\zinc[1].htm" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\5\\zinc[1].htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0210.070] GetFileType (hFile=0x444) returned 0x1 [0210.070] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0210.070] GetFileType (hFile=0x444) returned 0x1 [0210.070] ReadFile (in: hFile=0x444, lpBuffer=0x228a910, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x228a910*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0210.089] CloseHandle (hObject=0x444) returned 1 [0210.089] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\5\\zinc[1].htm", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\5\\zinc[1].htm", lpFilePart=0x0) returned 0x77 [0210.089] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0210.089] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\5\\zinc[1].htm" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\5\\zinc[1].htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0210.089] GetFileType (hFile=0x444) returned 0x1 [0210.089] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0210.089] GetFileType (hFile=0x444) returned 0x1 [0210.089] WriteFile (in: hFile=0x444, lpBuffer=0x2288620*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x2288620*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0210.089] CloseHandle (hObject=0x444) returned 1 [0210.090] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\5\\zinc[1].htm", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\5\\zinc[1].htm", lpFilePart=0x0) returned 0x77 [0210.090] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\5\\zinc[1].htm.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\5\\zinc[1].htm.xuy", lpFilePart=0x0) returned 0x7b [0210.090] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0210.090] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\5\\zinc[1].htm" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\5\\zinc[1].htm"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7e6df7ac, ftCreationTime.dwHighDateTime=0x1d2d437, ftLastAccessTime.dwLowDateTime=0x7e6df7ac, ftLastAccessTime.dwHighDateTime=0x1d2d437, ftLastWriteTime.dwLowDateTime=0x691111e8, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x1d46a)) returned 1 [0210.090] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0210.090] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\5\\zinc[1].htm" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\5\\zinc[1].htm"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\5\\zinc[1].htm.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\5\\zinc[1].htm.xuy")) returned 1 [0210.092] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0210.092] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\6", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\6", lpFilePart=0x0) returned 0x6b [0210.092] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\6\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\6\\", lpFilePart=0x0) returned 0x6c [0210.092] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\6\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d7eb0 [0210.092] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0210.092] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0210.092] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0210.092] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0210.092] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0210.092] FindClose (in: hFindFile=0x5d7eb0 | out: hFindFile=0x5d7eb0) returned 1 [0210.093] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0210.093] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0210.093] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0210.093] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\6", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\6", lpFilePart=0x0) returned 0x6b [0210.093] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\6\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\6\\", lpFilePart=0x0) returned 0x6c [0210.093] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\6\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d78b0 [0210.093] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0210.093] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0210.093] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0210.093] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0210.094] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0210.094] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0210.094] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0210.094] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0210.094] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\6\\appcache[1].man", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\6\\appcache[1].man", lpFilePart=0x0) returned 0x7b [0210.094] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0210.094] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\6\\appcache[1].man" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\6\\appcache[1].man"), fInfoLevelId=0x0, lpFileInformation=0x230a1c8 | out: lpFileInformation=0x230a1c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x65a500e1, ftCreationTime.dwHighDateTime=0x1d2d438, ftLastAccessTime.dwLowDateTime=0x65a500e1, ftLastAccessTime.dwHighDateTime=0x1d2d438, ftLastWriteTime.dwLowDateTime=0x65a500e1, ftLastWriteTime.dwHighDateTime=0x1d2d438, nFileSizeHigh=0x0, nFileSizeLow=0x3c)) returned 1 [0210.094] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0210.094] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\6\\appcache[1].man", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\6\\appcache[1].man", lpFilePart=0x0) returned 0x7b [0210.094] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0210.094] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\6\\appcache[1].man" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\6\\appcache[1].man"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0210.094] GetFileType (hFile=0x444) returned 0x1 [0210.094] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0210.094] GetFileType (hFile=0x444) returned 0x1 [0210.094] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x3c [0210.094] ReadFile (in: hFile=0x444, lpBuffer=0x230a580, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x230a580*, lpNumberOfBytesRead=0x3be5c8*=0x3c, lpOverlapped=0x0) returned 1 [0210.095] CloseHandle (hObject=0x444) returned 1 [0210.107] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\6\\appcache[1].man", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\6\\appcache[1].man", lpFilePart=0x0) returned 0x7b [0210.107] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0210.107] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\6\\appcache[1].man" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\6\\appcache[1].man"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0210.108] GetFileType (hFile=0x444) returned 0x1 [0210.109] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0210.109] GetFileType (hFile=0x444) returned 0x1 [0210.109] WriteFile (in: hFile=0x444, lpBuffer=0x2381758*, nNumberOfBytesToWrite=0x40, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x2381758*, lpNumberOfBytesWritten=0x3be4d8*=0x40, lpOverlapped=0x0) returned 1 [0210.109] CloseHandle (hObject=0x444) returned 1 [0210.109] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\6\\appcache[1].man", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\6\\appcache[1].man", lpFilePart=0x0) returned 0x7b [0210.110] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\6\\appcache[1].man.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\6\\appcache[1].man.xuy", lpFilePart=0x0) returned 0x7f [0210.110] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0210.110] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\6\\appcache[1].man" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\6\\appcache[1].man"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x65a500e1, ftCreationTime.dwHighDateTime=0x1d2d438, ftLastAccessTime.dwLowDateTime=0x65a500e1, ftLastAccessTime.dwHighDateTime=0x1d2d438, ftLastWriteTime.dwLowDateTime=0x6915d556, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x40)) returned 1 [0210.110] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0210.110] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\6\\appcache[1].man" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\6\\appcache[1].man"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\6\\appcache[1].man.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\6\\appcache[1].man.xuy")) returned 1 [0210.111] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\6\\container.dat", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\6\\container.dat", lpFilePart=0x0) returned 0x79 [0210.111] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0210.111] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\6\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\6\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x2382af8 | out: lpFileInformation=0x2382af8*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x65a4ed6d, ftCreationTime.dwHighDateTime=0x1d2d438, ftLastAccessTime.dwLowDateTime=0x65a4ed6d, ftLastAccessTime.dwHighDateTime=0x1d2d438, ftLastWriteTime.dwLowDateTime=0x65a4ed6d, ftLastWriteTime.dwHighDateTime=0x1d2d438, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0210.111] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0210.111] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\6\\container.dat", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\6\\container.dat", lpFilePart=0x0) returned 0x79 [0210.111] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0210.111] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\6\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\6\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0210.112] GetFileType (hFile=0x444) returned 0x1 [0210.112] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0210.112] GetFileType (hFile=0x444) returned 0x1 [0210.112] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x0 [0210.112] CloseHandle (hObject=0x444) returned 1 [0210.152] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\6\\container.dat", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\6\\container.dat", lpFilePart=0x0) returned 0x79 [0210.152] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0210.152] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\6\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\6\\container.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0210.161] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3baf90) returned 1 [0210.161] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\6\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbc10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\6\\container.dat", lpFilePart=0x0) returned 0x79 [0210.161] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0b0) returned 1 [0210.161] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\6\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\6\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x3bc190 | out: lpFileInformation=0x3bc190*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x65a4ed6d, ftCreationTime.dwHighDateTime=0x1d2d438, ftLastAccessTime.dwLowDateTime=0x65a4ed6d, ftLastAccessTime.dwHighDateTime=0x1d2d438, ftLastWriteTime.dwLowDateTime=0x65a4ed6d, ftLastWriteTime.dwHighDateTime=0x1d2d438, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0210.161] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc070) returned 1 [0210.161] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\6\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbc30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\6\\container.dat", lpFilePart=0x0) returned 0x79 [0210.161] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0b0) returned 1 [0210.161] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\6\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\6\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x21f9878 | out: lpFileInformation=0x21f9878*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x65a4ed6d, ftCreationTime.dwHighDateTime=0x1d2d438, ftLastAccessTime.dwLowDateTime=0x65a4ed6d, ftLastAccessTime.dwHighDateTime=0x1d2d438, ftLastWriteTime.dwLowDateTime=0x65a4ed6d, ftLastWriteTime.dwHighDateTime=0x1d2d438, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0210.162] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc070) returned 1 [0210.162] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\6\\container.dat", nBufferLength=0x105, lpBuffer=0x3bba90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\6\\container.dat", lpFilePart=0x0) returned 0x79 [0210.162] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf70) returned 1 [0210.162] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\6\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\6\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0210.162] GetFileType (hFile=0x444) returned 0x1 [0210.162] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbee0) returned 1 [0210.162] GetFileType (hFile=0x444) returned 0x1 [0210.162] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc108 | out: lpFileSizeHigh=0x3bc108*=0x0) returned 0x0 [0210.162] CloseHandle (hObject=0x444) returned 1 [0210.173] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\6\\container.dat", nBufferLength=0x105, lpBuffer=0x3bba90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\6\\container.dat", lpFilePart=0x0) returned 0x79 [0210.173] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf70) returned 1 [0210.174] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\6\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\6\\container.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0210.175] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8a00) returned 1 [0210.176] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\6\\zinc[1].htm", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\6\\zinc[1].htm", lpFilePart=0x0) returned 0x77 [0210.176] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0210.176] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\6\\zinc[1].htm" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\6\\zinc[1].htm"), fInfoLevelId=0x0, lpFileInformation=0x2270560 | out: lpFileInformation=0x2270560*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x65b939ab, ftCreationTime.dwHighDateTime=0x1d2d438, ftLastAccessTime.dwLowDateTime=0x65b939ab, ftLastAccessTime.dwHighDateTime=0x1d2d438, ftLastWriteTime.dwLowDateTime=0x65ba4b12, ftLastWriteTime.dwHighDateTime=0x1d2d438, nFileSizeHigh=0x0, nFileSizeLow=0x1d46a)) returned 1 [0210.178] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0210.178] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\6\\zinc[1].htm", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\6\\zinc[1].htm", lpFilePart=0x0) returned 0x77 [0210.178] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0210.178] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\6\\zinc[1].htm" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\6\\zinc[1].htm"), fInfoLevelId=0x0, lpFileInformation=0x2270700 | out: lpFileInformation=0x2270700*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x65b939ab, ftCreationTime.dwHighDateTime=0x1d2d438, ftLastAccessTime.dwLowDateTime=0x65b939ab, ftLastAccessTime.dwHighDateTime=0x1d2d438, ftLastWriteTime.dwLowDateTime=0x65ba4b12, ftLastWriteTime.dwHighDateTime=0x1d2d438, nFileSizeHigh=0x0, nFileSizeLow=0x1d46a)) returned 1 [0210.178] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0210.178] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\6\\zinc[1].htm", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\6\\zinc[1].htm", lpFilePart=0x0) returned 0x77 [0210.178] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0210.179] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\6\\zinc[1].htm" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\6\\zinc[1].htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0210.180] GetFileType (hFile=0x444) returned 0x1 [0210.180] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0210.180] GetFileType (hFile=0x444) returned 0x1 [0210.180] ReadFile (in: hFile=0x444, lpBuffer=0x2272b70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x2272b70*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0210.196] CloseHandle (hObject=0x444) returned 1 [0210.196] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\6\\zinc[1].htm", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\6\\zinc[1].htm", lpFilePart=0x0) returned 0x77 [0210.196] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0210.196] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\6\\zinc[1].htm" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\6\\zinc[1].htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0210.197] GetFileType (hFile=0x444) returned 0x1 [0210.197] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0210.197] GetFileType (hFile=0x444) returned 0x1 [0210.197] WriteFile (in: hFile=0x444, lpBuffer=0x2270880*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x2270880*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0210.197] CloseHandle (hObject=0x444) returned 1 [0210.197] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\6\\zinc[1].htm", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\6\\zinc[1].htm", lpFilePart=0x0) returned 0x77 [0210.197] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\6\\zinc[1].htm.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\6\\zinc[1].htm.xuy", lpFilePart=0x0) returned 0x7b [0210.197] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0210.197] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\6\\zinc[1].htm" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\6\\zinc[1].htm"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x65b939ab, ftCreationTime.dwHighDateTime=0x1d2d438, ftLastAccessTime.dwLowDateTime=0x65b939ab, ftLastAccessTime.dwHighDateTime=0x1d2d438, ftLastWriteTime.dwLowDateTime=0x6921c09a, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x1d46a)) returned 1 [0210.197] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0210.197] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\6\\zinc[1].htm" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\6\\zinc[1].htm"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\6\\zinc[1].htm.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\6\\zinc[1].htm.xuy")) returned 1 [0210.199] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0210.199] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\BackgroundTransferApi", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\BackgroundTransferApi", lpFilePart=0x0) returned 0x6d [0210.199] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\BackgroundTransferApi\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\BackgroundTransferApi\\", lpFilePart=0x0) returned 0x6e [0210.199] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\BackgroundTransferApi\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d79d0 [0210.199] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0210.199] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0210.199] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0210.199] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0210.199] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0210.200] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0210.200] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\BackgroundTransferApi", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\BackgroundTransferApi", lpFilePart=0x0) returned 0x6d [0210.203] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\BackgroundTransferApi\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\BackgroundTransferApi\\", lpFilePart=0x0) returned 0x6e [0210.203] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\BackgroundTransferApi\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7fd0 [0210.203] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0210.204] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0210.204] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0210.204] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0210.204] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0210.204] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0210.204] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCache", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCache", lpFilePart=0x0) returned 0x61 [0210.204] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCache\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCache\\", lpFilePart=0x0) returned 0x62 [0210.204] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCache\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d78b0 [0210.205] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0210.205] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0210.205] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0210.205] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0210.205] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0210.206] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0210.206] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0210.206] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0210.206] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCache", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCache", lpFilePart=0x0) returned 0x61 [0210.206] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCache\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCache\\", lpFilePart=0x0) returned 0x62 [0210.206] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCache\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7f10 [0210.207] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0210.207] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0210.207] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0210.207] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0210.207] FindClose (in: hFindFile=0x5d7f10 | out: hFindFile=0x5d7f10) returned 1 [0210.208] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0210.208] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0210.208] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCache\\container.dat", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCache\\container.dat", lpFilePart=0x0) returned 0x6f [0210.208] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0210.208] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\inetcache\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x22f3da0 | out: lpFileInformation=0x22f3da0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x5776f565, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x5776f565, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x5776f565, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0210.208] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0210.208] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCache\\container.dat", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCache\\container.dat", lpFilePart=0x0) returned 0x6f [0210.208] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0210.209] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\inetcache\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0210.209] GetFileType (hFile=0x444) returned 0x1 [0210.209] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0210.209] GetFileType (hFile=0x444) returned 0x1 [0210.209] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x0 [0210.209] CloseHandle (hObject=0x444) returned 1 [0210.219] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCache\\container.dat", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCache\\container.dat", lpFilePart=0x0) returned 0x6f [0210.219] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0210.219] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\inetcache\\container.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0210.221] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb070) returned 1 [0210.221] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCache\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbcf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCache\\container.dat", lpFilePart=0x0) returned 0x6f [0210.221] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0210.221] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\inetcache\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x3bc270 | out: lpFileInformation=0x3bc270*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x5776f565, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x5776f565, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x5776f565, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0210.222] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc150) returned 1 [0210.222] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCache\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbd10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCache\\container.dat", lpFilePart=0x0) returned 0x6f [0210.222] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0210.222] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\inetcache\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x236aaf8 | out: lpFileInformation=0x236aaf8*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x5776f565, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x5776f565, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x5776f565, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0210.222] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc150) returned 1 [0210.222] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCache\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCache\\container.dat", lpFilePart=0x0) returned 0x6f [0210.222] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc050) returned 1 [0210.222] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\inetcache\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0210.222] GetFileType (hFile=0x444) returned 0x1 [0210.222] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbfc0) returned 1 [0210.222] GetFileType (hFile=0x444) returned 0x1 [0210.222] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc1e8 | out: lpFileSizeHigh=0x3bc1e8*=0x0) returned 0x0 [0210.222] CloseHandle (hObject=0x444) returned 1 [0210.263] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCache\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCache\\container.dat", lpFilePart=0x0) returned 0x6f [0210.263] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc050) returned 1 [0210.263] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\inetcache\\container.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0210.265] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8ae0) returned 1 [0210.266] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0210.266] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCache\\1N9MAX5B", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCache\\1N9MAX5B", lpFilePart=0x0) returned 0x6a [0210.266] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCache\\1N9MAX5B\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCache\\1N9MAX5B\\", lpFilePart=0x0) returned 0x6b [0210.266] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCache\\1N9MAX5B\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d7fd0 [0210.266] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0210.267] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0210.267] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0210.267] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0210.267] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0210.267] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0210.267] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCache\\1N9MAX5B", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCache\\1N9MAX5B", lpFilePart=0x0) returned 0x6a [0210.267] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCache\\1N9MAX5B\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCache\\1N9MAX5B\\", lpFilePart=0x0) returned 0x6b [0210.267] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCache\\1N9MAX5B\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d7a30 [0210.267] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0210.267] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0210.267] FindClose (in: hFindFile=0x5d7a30 | out: hFindFile=0x5d7a30) returned 1 [0210.267] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0210.267] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0210.267] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0210.267] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCookies", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCookies", lpFilePart=0x0) returned 0x63 [0210.268] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCookies\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCookies\\", lpFilePart=0x0) returned 0x64 [0210.268] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCookies\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d78b0 [0210.268] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0210.268] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0210.268] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0210.268] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0210.268] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0210.268] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0210.268] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0210.268] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0210.268] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0210.269] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCookies", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCookies", lpFilePart=0x0) returned 0x63 [0210.269] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCookies\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCookies\\", lpFilePart=0x0) returned 0x64 [0210.269] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCookies\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d81b0 [0210.269] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0210.269] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0210.269] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0210.269] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0210.269] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0210.269] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0210.269] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0210.269] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0210.270] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCookies\\7AMN5ER6.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCookies\\7AMN5ER6.txt", lpFilePart=0x0) returned 0x70 [0210.270] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0210.270] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCookies\\7AMN5ER6.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\inetcookies\\7amn5er6.txt"), fInfoLevelId=0x0, lpFileInformation=0x21e6680 | out: lpFileInformation=0x21e6680*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xdb45f4a8, ftCreationTime.dwHighDateTime=0x1d46685, ftLastAccessTime.dwLowDateTime=0xdb45f4a8, ftLastAccessTime.dwHighDateTime=0x1d46685, ftLastWriteTime.dwLowDateTime=0xdb45f4a8, ftLastWriteTime.dwHighDateTime=0x1d46685, nFileSizeHigh=0x0, nFileSizeLow=0x153)) returned 1 [0210.270] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0210.270] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCookies\\7AMN5ER6.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCookies\\7AMN5ER6.txt", lpFilePart=0x0) returned 0x70 [0210.270] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0210.270] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCookies\\7AMN5ER6.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\inetcookies\\7amn5er6.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0210.270] GetFileType (hFile=0x444) returned 0x1 [0210.270] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0210.270] GetFileType (hFile=0x444) returned 0x1 [0210.270] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x153 [0210.270] ReadFile (in: hFile=0x444, lpBuffer=0x21e6b30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x21e6b30*, lpNumberOfBytesRead=0x3be6a8*=0x153, lpOverlapped=0x0) returned 1 [0210.271] CloseHandle (hObject=0x444) returned 1 [0210.282] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCookies\\7AMN5ER6.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCookies\\7AMN5ER6.txt", lpFilePart=0x0) returned 0x70 [0210.282] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0210.282] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCookies\\7AMN5ER6.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\inetcookies\\7amn5er6.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0210.284] GetFileType (hFile=0x444) returned 0x1 [0210.284] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0210.284] GetFileType (hFile=0x444) returned 0x1 [0210.284] WriteFile (in: hFile=0x444, lpBuffer=0x225e248*, nNumberOfBytesToWrite=0x160, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x225e248*, lpNumberOfBytesWritten=0x3be5b8*=0x160, lpOverlapped=0x0) returned 1 [0210.285] CloseHandle (hObject=0x444) returned 1 [0210.285] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCookies\\7AMN5ER6.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCookies\\7AMN5ER6.txt", lpFilePart=0x0) returned 0x70 [0210.285] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCookies\\7AMN5ER6.txt.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCookies\\7AMN5ER6.txt.xuy", lpFilePart=0x0) returned 0x74 [0210.285] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0210.285] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCookies\\7AMN5ER6.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\inetcookies\\7amn5er6.txt"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xdb45f4a8, ftCreationTime.dwHighDateTime=0x1d46685, ftLastAccessTime.dwLowDateTime=0xdb45f4a8, ftLastAccessTime.dwHighDateTime=0x1d46685, ftLastWriteTime.dwLowDateTime=0x69301132, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x160)) returned 1 [0210.285] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0210.285] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCookies\\7AMN5ER6.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\inetcookies\\7amn5er6.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCookies\\7AMN5ER6.txt.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\inetcookies\\7amn5er6.txt.xuy")) returned 1 [0210.296] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCookies\\container.dat", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCookies\\container.dat", lpFilePart=0x0) returned 0x71 [0210.296] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0210.296] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCookies\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\inetcookies\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x225f5b8 | out: lpFileInformation=0x225f5b8*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xcee29d25, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xcee29d25, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xcee29d25, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0210.296] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0210.296] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCookies\\container.dat", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCookies\\container.dat", lpFilePart=0x0) returned 0x71 [0210.296] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0210.296] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCookies\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\inetcookies\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0210.296] GetFileType (hFile=0x444) returned 0x1 [0210.296] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0210.296] GetFileType (hFile=0x444) returned 0x1 [0210.296] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x0 [0210.297] CloseHandle (hObject=0x444) returned 1 [0210.335] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCookies\\container.dat", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCookies\\container.dat", lpFilePart=0x0) returned 0x71 [0210.335] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0210.335] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCookies\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\inetcookies\\container.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0210.336] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb070) returned 1 [0210.337] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCookies\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbcf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCookies\\container.dat", lpFilePart=0x0) returned 0x71 [0210.337] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0210.337] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCookies\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\inetcookies\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x3bc270 | out: lpFileInformation=0x3bc270*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xcee29d25, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xcee29d25, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xcee29d25, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0210.337] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc150) returned 1 [0210.337] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCookies\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbd10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCookies\\container.dat", lpFilePart=0x0) returned 0x71 [0210.337] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0210.337] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCookies\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\inetcookies\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x22d6338 | out: lpFileInformation=0x22d6338*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xcee29d25, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xcee29d25, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xcee29d25, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0210.337] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc150) returned 1 [0210.337] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCookies\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCookies\\container.dat", lpFilePart=0x0) returned 0x71 [0210.337] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc050) returned 1 [0210.337] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCookies\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\inetcookies\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0210.337] GetFileType (hFile=0x444) returned 0x1 [0210.337] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbfc0) returned 1 [0210.337] GetFileType (hFile=0x444) returned 0x1 [0210.337] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc1e8 | out: lpFileSizeHigh=0x3bc1e8*=0x0) returned 0x0 [0210.337] CloseHandle (hObject=0x444) returned 1 [0210.350] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCookies\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCookies\\container.dat", lpFilePart=0x0) returned 0x71 [0210.350] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc050) returned 1 [0210.350] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCookies\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\inetcookies\\container.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0210.351] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8ae0) returned 1 [0210.352] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCookies\\LVKKMMVN.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCookies\\LVKKMMVN.txt", lpFilePart=0x0) returned 0x70 [0210.352] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0210.352] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCookies\\LVKKMMVN.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\inetcookies\\lvkkmmvn.txt"), fInfoLevelId=0x0, lpFileInformation=0x234cfe0 | out: lpFileInformation=0x234cfe0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x582c287a, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x582c287a, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x582e8adf, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0xd3)) returned 1 [0210.352] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0210.352] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCookies\\LVKKMMVN.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCookies\\LVKKMMVN.txt", lpFilePart=0x0) returned 0x70 [0210.352] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0210.353] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCookies\\LVKKMMVN.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\inetcookies\\lvkkmmvn.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0210.353] GetFileType (hFile=0x444) returned 0x1 [0210.353] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0210.353] GetFileType (hFile=0x444) returned 0x1 [0210.353] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0xd3 [0210.353] ReadFile (in: hFile=0x444, lpBuffer=0x234d410, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6a8, lpOverlapped=0x0 | out: lpBuffer=0x234d410*, lpNumberOfBytesRead=0x3be6a8*=0xd3, lpOverlapped=0x0) returned 1 [0210.354] CloseHandle (hObject=0x444) returned 1 [0210.400] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCookies\\LVKKMMVN.txt", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCookies\\LVKKMMVN.txt", lpFilePart=0x0) returned 0x70 [0210.400] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0210.400] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCookies\\LVKKMMVN.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\inetcookies\\lvkkmmvn.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0210.402] GetFileType (hFile=0x444) returned 0x1 [0210.402] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0210.402] GetFileType (hFile=0x444) returned 0x1 [0210.402] WriteFile (in: hFile=0x444, lpBuffer=0x21c45e8*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x3be5b8, lpOverlapped=0x0 | out: lpBuffer=0x21c45e8*, lpNumberOfBytesWritten=0x3be5b8*=0xe0, lpOverlapped=0x0) returned 1 [0210.405] CloseHandle (hObject=0x444) returned 1 [0210.405] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCookies\\LVKKMMVN.txt", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCookies\\LVKKMMVN.txt", lpFilePart=0x0) returned 0x70 [0210.405] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCookies\\LVKKMMVN.txt.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCookies\\LVKKMMVN.txt.xuy", lpFilePart=0x0) returned 0x74 [0210.405] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0210.405] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCookies\\LVKKMMVN.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\inetcookies\\lvkkmmvn.txt"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x582c287a, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x582c287a, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x694322c3, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1 [0210.405] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0210.405] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCookies\\LVKKMMVN.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\inetcookies\\lvkkmmvn.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCookies\\LVKKMMVN.txt.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\inetcookies\\lvkkmmvn.txt.xuy")) returned 1 [0210.407] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0210.407] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetHistory", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetHistory", lpFilePart=0x0) returned 0x63 [0210.407] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetHistory\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetHistory\\", lpFilePart=0x0) returned 0x64 [0210.407] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetHistory\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d79d0 [0210.407] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0210.408] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0210.408] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0210.408] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0210.408] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0210.408] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0210.408] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0210.408] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0210.408] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetHistory", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetHistory", lpFilePart=0x0) returned 0x63 [0210.408] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetHistory\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetHistory\\", lpFilePart=0x0) returned 0x64 [0210.408] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetHistory\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7370 [0210.409] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0210.409] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0210.409] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0210.409] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0210.409] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0210.409] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0210.409] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0210.410] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0210.410] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetHistory\\BackgroundTransferApi", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetHistory\\BackgroundTransferApi", lpFilePart=0x0) returned 0x79 [0210.410] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetHistory\\BackgroundTransferApi\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetHistory\\BackgroundTransferApi\\", lpFilePart=0x0) returned 0x7a [0210.410] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetHistory\\BackgroundTransferApi\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d7370 [0210.410] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0210.410] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0210.410] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0210.410] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0210.411] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0210.411] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0210.411] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0210.411] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetHistory\\BackgroundTransferApi", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetHistory\\BackgroundTransferApi", lpFilePart=0x0) returned 0x79 [0210.411] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetHistory\\BackgroundTransferApi\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetHistory\\BackgroundTransferApi\\", lpFilePart=0x0) returned 0x7a [0210.411] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetHistory\\BackgroundTransferApi\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d78b0 [0210.411] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0210.411] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0210.411] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0210.411] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0210.412] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0210.412] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0210.412] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetHistory\\BackgroundTransferApi\\container.dat", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetHistory\\BackgroundTransferApi\\container.dat", lpFilePart=0x0) returned 0x87 [0210.412] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0210.412] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetHistory\\BackgroundTransferApi\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\inethistory\\backgroundtransferapi\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x21cb190 | out: lpFileInformation=0x21cb190*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x6813d9f7, ftCreationTime.dwHighDateTime=0x1d2d438, ftLastAccessTime.dwLowDateTime=0x6813d9f7, ftLastAccessTime.dwHighDateTime=0x1d2d438, ftLastWriteTime.dwLowDateTime=0x6813d9f7, ftLastWriteTime.dwHighDateTime=0x1d2d438, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0210.412] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0210.412] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetHistory\\BackgroundTransferApi\\container.dat", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetHistory\\BackgroundTransferApi\\container.dat", lpFilePart=0x0) returned 0x87 [0210.412] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0210.412] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetHistory\\BackgroundTransferApi\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\inethistory\\backgroundtransferapi\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0210.412] GetFileType (hFile=0x444) returned 0x1 [0210.412] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0210.412] GetFileType (hFile=0x444) returned 0x1 [0210.412] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be708 | out: lpFileSizeHigh=0x3be708*=0x0) returned 0x0 [0210.412] CloseHandle (hObject=0x444) returned 1 [0210.423] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetHistory\\BackgroundTransferApi\\container.dat", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetHistory\\BackgroundTransferApi\\container.dat", lpFilePart=0x0) returned 0x87 [0210.424] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0210.424] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetHistory\\BackgroundTransferApi\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\inethistory\\backgroundtransferapi\\container.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0210.425] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb000) returned 1 [0210.425] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetHistory\\BackgroundTransferApi\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbc80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetHistory\\BackgroundTransferApi\\container.dat", lpFilePart=0x0) returned 0x87 [0210.425] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc120) returned 1 [0210.425] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetHistory\\BackgroundTransferApi\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\inethistory\\backgroundtransferapi\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x3bc200 | out: lpFileInformation=0x3bc200*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x6813d9f7, ftCreationTime.dwHighDateTime=0x1d2d438, ftLastAccessTime.dwLowDateTime=0x6813d9f7, ftLastAccessTime.dwHighDateTime=0x1d2d438, ftLastWriteTime.dwLowDateTime=0x6813d9f7, ftLastWriteTime.dwHighDateTime=0x1d2d438, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0210.426] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc0e0) returned 1 [0210.426] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetHistory\\BackgroundTransferApi\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetHistory\\BackgroundTransferApi\\container.dat", lpFilePart=0x0) returned 0x87 [0210.426] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc120) returned 1 [0210.426] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetHistory\\BackgroundTransferApi\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\inethistory\\backgroundtransferapi\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x2241fd8 | out: lpFileInformation=0x2241fd8*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x6813d9f7, ftCreationTime.dwHighDateTime=0x1d2d438, ftLastAccessTime.dwLowDateTime=0x6813d9f7, ftLastAccessTime.dwHighDateTime=0x1d2d438, ftLastWriteTime.dwLowDateTime=0x6813d9f7, ftLastWriteTime.dwHighDateTime=0x1d2d438, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0210.426] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc0e0) returned 1 [0210.426] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetHistory\\BackgroundTransferApi\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbb00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetHistory\\BackgroundTransferApi\\container.dat", lpFilePart=0x0) returned 0x87 [0210.426] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbfe0) returned 1 [0210.426] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetHistory\\BackgroundTransferApi\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\inethistory\\backgroundtransferapi\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0210.426] GetFileType (hFile=0x444) returned 0x1 [0210.426] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbf50) returned 1 [0210.426] GetFileType (hFile=0x444) returned 0x1 [0210.426] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc178 | out: lpFileSizeHigh=0x3bc178*=0x0) returned 0x0 [0210.426] CloseHandle (hObject=0x444) returned 1 [0210.439] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetHistory\\BackgroundTransferApi\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbb00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetHistory\\BackgroundTransferApi\\container.dat", lpFilePart=0x0) returned 0x87 [0210.439] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbfe0) returned 1 [0210.439] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetHistory\\BackgroundTransferApi\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\inethistory\\backgroundtransferapi\\container.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0210.440] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8a70) returned 1 [0210.441] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0210.441] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetHistory\\BackgroundTransferApiGroup", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetHistory\\BackgroundTransferApiGroup", lpFilePart=0x0) returned 0x7e [0210.441] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetHistory\\BackgroundTransferApiGroup\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetHistory\\BackgroundTransferApiGroup\\", lpFilePart=0x0) returned 0x7f [0210.441] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetHistory\\BackgroundTransferApiGroup\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d7370 [0210.441] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0210.441] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0210.442] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0210.442] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0210.442] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0210.442] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0210.442] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0210.442] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetHistory\\BackgroundTransferApiGroup", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetHistory\\BackgroundTransferApiGroup", lpFilePart=0x0) returned 0x7e [0210.442] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetHistory\\BackgroundTransferApiGroup\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetHistory\\BackgroundTransferApiGroup\\", lpFilePart=0x0) returned 0x7f [0210.442] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetHistory\\BackgroundTransferApiGroup\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d7eb0 [0210.442] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0210.442] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0210.442] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0210.442] FindClose (in: hFindFile=0x5d7eb0 | out: hFindFile=0x5d7eb0) returned 1 [0210.443] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0210.443] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0210.443] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetHistory\\BackgroundTransferApiGroup\\container.dat", nBufferLength=0x105, lpBuffer=0x3be230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetHistory\\BackgroundTransferApiGroup\\container.dat", lpFilePart=0x0) returned 0x8c [0210.443] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0210.443] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetHistory\\BackgroundTransferApiGroup\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\inethistory\\backgroundtransferapigroup\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x22bba00 | out: lpFileInformation=0x22bba00*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x685f51a9, ftCreationTime.dwHighDateTime=0x1d2d438, ftLastAccessTime.dwLowDateTime=0x685f51a9, ftLastAccessTime.dwHighDateTime=0x1d2d438, ftLastWriteTime.dwLowDateTime=0x685f51a9, ftLastWriteTime.dwHighDateTime=0x1d2d438, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0210.443] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0210.443] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetHistory\\BackgroundTransferApiGroup\\container.dat", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetHistory\\BackgroundTransferApiGroup\\container.dat", lpFilePart=0x0) returned 0x8c [0210.443] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0210.443] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetHistory\\BackgroundTransferApiGroup\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\inethistory\\backgroundtransferapigroup\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0210.443] GetFileType (hFile=0x444) returned 0x1 [0210.443] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be4e0) returned 1 [0210.443] GetFileType (hFile=0x444) returned 0x1 [0210.443] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be708 | out: lpFileSizeHigh=0x3be708*=0x0) returned 0x0 [0210.443] CloseHandle (hObject=0x444) returned 1 [0210.456] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetHistory\\BackgroundTransferApiGroup\\container.dat", nBufferLength=0x105, lpBuffer=0x3be090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetHistory\\BackgroundTransferApiGroup\\container.dat", lpFilePart=0x0) returned 0x8c [0210.456] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be570) returned 1 [0210.456] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetHistory\\BackgroundTransferApiGroup\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\inethistory\\backgroundtransferapigroup\\container.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0210.458] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb000) returned 1 [0210.458] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetHistory\\BackgroundTransferApiGroup\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbc80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetHistory\\BackgroundTransferApiGroup\\container.dat", lpFilePart=0x0) returned 0x8c [0210.458] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc120) returned 1 [0210.458] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetHistory\\BackgroundTransferApiGroup\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\inethistory\\backgroundtransferapigroup\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x3bc200 | out: lpFileInformation=0x3bc200*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x685f51a9, ftCreationTime.dwHighDateTime=0x1d2d438, ftLastAccessTime.dwLowDateTime=0x685f51a9, ftLastAccessTime.dwHighDateTime=0x1d2d438, ftLastWriteTime.dwLowDateTime=0x685f51a9, ftLastWriteTime.dwHighDateTime=0x1d2d438, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0210.458] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc0e0) returned 1 [0210.458] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetHistory\\BackgroundTransferApiGroup\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetHistory\\BackgroundTransferApiGroup\\container.dat", lpFilePart=0x0) returned 0x8c [0210.458] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc120) returned 1 [0210.458] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetHistory\\BackgroundTransferApiGroup\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\inethistory\\backgroundtransferapigroup\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x2332898 | out: lpFileInformation=0x2332898*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x685f51a9, ftCreationTime.dwHighDateTime=0x1d2d438, ftLastAccessTime.dwLowDateTime=0x685f51a9, ftLastAccessTime.dwHighDateTime=0x1d2d438, ftLastWriteTime.dwLowDateTime=0x685f51a9, ftLastWriteTime.dwHighDateTime=0x1d2d438, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0210.458] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc0e0) returned 1 [0210.458] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetHistory\\BackgroundTransferApiGroup\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbb00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetHistory\\BackgroundTransferApiGroup\\container.dat", lpFilePart=0x0) returned 0x8c [0210.458] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbfe0) returned 1 [0210.458] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetHistory\\BackgroundTransferApiGroup\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\inethistory\\backgroundtransferapigroup\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0210.458] GetFileType (hFile=0x444) returned 0x1 [0210.458] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbf50) returned 1 [0210.459] GetFileType (hFile=0x444) returned 0x1 [0210.459] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc178 | out: lpFileSizeHigh=0x3bc178*=0x0) returned 0x0 [0210.459] CloseHandle (hObject=0x444) returned 1 [0210.505] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetHistory\\BackgroundTransferApiGroup\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbb00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetHistory\\BackgroundTransferApiGroup\\container.dat", lpFilePart=0x0) returned 0x8c [0210.505] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbfe0) returned 1 [0210.505] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetHistory\\BackgroundTransferApiGroup\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\inethistory\\backgroundtransferapigroup\\container.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0210.507] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8a70) returned 1 [0210.508] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0210.508] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft", lpFilePart=0x0) returned 0x61 [0210.508] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\", lpFilePart=0x0) returned 0x62 [0210.508] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d79d0 [0210.508] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0210.508] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0210.508] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0210.508] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0210.509] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0210.509] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0210.509] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0210.509] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0210.509] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0210.509] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft", lpFilePart=0x0) returned 0x61 [0210.509] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\", lpFilePart=0x0) returned 0x62 [0210.509] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d78b0 [0210.509] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0210.509] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0210.509] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0210.510] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0210.510] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0210.510] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0210.510] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0210.510] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0210.510] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0210.510] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache", lpFilePart=0x0) returned 0x72 [0210.510] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\", lpFilePart=0x0) returned 0x73 [0210.510] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d7610 [0210.513] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0210.513] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0210.513] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0210.513] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0210.513] FindClose (in: hFindFile=0x5d7610 | out: hFindFile=0x5d7610) returned 1 [0210.513] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0210.513] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0210.513] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0210.514] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache", lpFilePart=0x0) returned 0x72 [0210.514] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\", lpFilePart=0x0) returned 0x73 [0210.514] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d7a30 [0210.514] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0210.514] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0210.514] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0210.514] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0210.514] FindClose (in: hFindFile=0x5d7a30 | out: hFindFile=0x5d7a30) returned 1 [0210.514] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0210.514] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content", lpFilePart=0x0) returned 0x7a [0210.514] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\", lpFilePart=0x0) returned 0x7b [0210.515] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d7eb0 [0210.525] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0210.525] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0210.525] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0210.525] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0210.525] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0210.525] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0210.526] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0210.526] FindClose (in: hFindFile=0x5d7eb0 | out: hFindFile=0x5d7eb0) returned 1 [0210.526] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content", lpFilePart=0x0) returned 0x7a [0210.527] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\", lpFilePart=0x0) returned 0x7b [0210.527] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d78b0 [0210.527] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0210.528] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0210.528] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0210.528] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0210.528] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0210.529] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0210.529] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0210.529] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0210.530] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", lpFilePart=0x0) returned 0xbc [0210.530] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\40e450f7ce13419a2ccc2a5445035a0a_06f02b1f13ab4b11b8fc669bde565af1"), fInfoLevelId=0x0, lpFileInformation=0x21b43a8 | out: lpFileInformation=0x21b43a8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xcf7ff8a1, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xcf7ff8a1, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xcf7ff8a1, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0xb68)) returned 1 [0210.531] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", lpFilePart=0x0) returned 0xbc [0210.531] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\40e450f7ce13419a2ccc2a5445035a0a_06f02b1f13ab4b11b8fc669bde565af1"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0210.531] GetFileType (hFile=0x444) returned 0x1 [0210.531] GetFileType (hFile=0x444) returned 0x1 [0210.531] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xb68 [0210.531] ReadFile (in: hFile=0x444, lpBuffer=0x21b5468, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x21b5468*, lpNumberOfBytesRead=0x3be5c8*=0xb68, lpOverlapped=0x0) returned 1 [0210.534] CloseHandle (hObject=0x444) returned 1 [0210.545] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", lpFilePart=0x0) returned 0xbc [0210.545] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\40e450f7ce13419a2ccc2a5445035a0a_06f02b1f13ab4b11b8fc669bde565af1"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0210.547] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", nBufferLength=0x105, lpBuffer=0x3bbc10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", lpFilePart=0x0) returned 0xbc [0210.547] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\40e450f7ce13419a2ccc2a5445035a0a_06f02b1f13ab4b11b8fc669bde565af1"), fInfoLevelId=0x0, lpFileInformation=0x3bc190 | out: lpFileInformation=0x3bc190*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xcf7ff8a1, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xcf7ff8a1, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xcf7ff8a1, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0xb68)) returned 1 [0210.547] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", nBufferLength=0x105, lpBuffer=0x3bbc30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", lpFilePart=0x0) returned 0xbc [0210.547] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\40e450f7ce13419a2ccc2a5445035a0a_06f02b1f13ab4b11b8fc669bde565af1"), fInfoLevelId=0x0, lpFileInformation=0x22308e0 | out: lpFileInformation=0x22308e0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xcf7ff8a1, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xcf7ff8a1, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xcf7ff8a1, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0xb68)) returned 1 [0210.547] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", nBufferLength=0x105, lpBuffer=0x3bba90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", lpFilePart=0x0) returned 0xbc [0210.547] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\40e450f7ce13419a2ccc2a5445035a0a_06f02b1f13ab4b11b8fc669bde565af1"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0210.547] GetFileType (hFile=0x444) returned 0x1 [0210.547] GetFileType (hFile=0x444) returned 0x1 [0210.547] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc108 | out: lpFileSizeHigh=0x3bc108*=0x0) returned 0xb68 [0210.547] ReadFile (in: hFile=0x444, lpBuffer=0x22319a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bc038, lpOverlapped=0x0 | out: lpBuffer=0x22319a0*, lpNumberOfBytesRead=0x3bc038*=0xb68, lpOverlapped=0x0) returned 1 [0210.547] CloseHandle (hObject=0x444) returned 1 [0210.557] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", nBufferLength=0x105, lpBuffer=0x3bba90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", lpFilePart=0x0) returned 0xbc [0210.557] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\40e450f7ce13419a2ccc2a5445035a0a_06f02b1f13ab4b11b8fc669bde565af1"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0210.566] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", lpFilePart=0x0) returned 0x9b [0210.567] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\57c8edb95df3f0ad4ee2dc2b8cfd4157"), fInfoLevelId=0x0, lpFileInformation=0x22acc80 | out: lpFileInformation=0x22acc80*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xcf825b0a, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xcf825b0a, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x7c3afeda, ftLastWriteTime.dwHighDateTime=0x1d2d40b, nFileSizeHigh=0x0, nFileSizeLow=0x19a4)) returned 1 [0210.568] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", lpFilePart=0x0) returned 0x9b [0210.568] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\57c8edb95df3f0ad4ee2dc2b8cfd4157"), fInfoLevelId=0x0, lpFileInformation=0x22ace98 | out: lpFileInformation=0x22ace98*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xcf825b0a, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xcf825b0a, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x7c3afeda, ftLastWriteTime.dwHighDateTime=0x1d2d40b, nFileSizeHigh=0x0, nFileSizeLow=0x19a4)) returned 1 [0210.568] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", lpFilePart=0x0) returned 0x9b [0210.568] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\57c8edb95df3f0ad4ee2dc2b8cfd4157"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0210.569] GetFileType (hFile=0x444) returned 0x1 [0210.569] GetFileType (hFile=0x444) returned 0x1 [0210.569] ReadFile (in: hFile=0x444, lpBuffer=0x22af3f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x22af3f8*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0210.627] CloseHandle (hObject=0x444) returned 1 [0210.627] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", lpFilePart=0x0) returned 0x9b [0210.627] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\57c8edb95df3f0ad4ee2dc2b8cfd4157"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0210.628] GetFileType (hFile=0x444) returned 0x1 [0210.628] GetFileType (hFile=0x444) returned 0x1 [0210.628] WriteFile (in: hFile=0x444, lpBuffer=0x22ad090*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x22ad090*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0210.628] CloseHandle (hObject=0x444) returned 1 [0210.628] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", lpFilePart=0x0) returned 0x9b [0210.628] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157.xuy", lpFilePart=0x0) returned 0x9f [0210.628] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\57c8edb95df3f0ad4ee2dc2b8cfd4157"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xcf825b0a, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xcf825b0a, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x69648310, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0210.629] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\57c8edb95df3f0ad4ee2dc2b8cfd4157"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\57c8edb95df3f0ad4ee2dc2b8cfd4157.xuy")) returned 1 [0210.630] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506", lpFilePart=0x0) returned 0x9b [0210.630] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\77ec63bda74bd0d0e0426dc8f8008506"), fInfoLevelId=0x0, lpFileInformation=0x232ba30 | out: lpFileInformation=0x232ba30*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xcf825b0a, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xcf825b0a, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xcf825b0a, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0210.630] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506", lpFilePart=0x0) returned 0x9b [0210.630] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\77ec63bda74bd0d0e0426dc8f8008506"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0210.630] GetFileType (hFile=0x444) returned 0x1 [0210.630] GetFileType (hFile=0x444) returned 0x1 [0210.630] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x0 [0210.630] CloseHandle (hObject=0x444) returned 1 [0210.671] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506", lpFilePart=0x0) returned 0x9b [0210.671] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0210.671] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\77ec63bda74bd0d0e0426dc8f8008506"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0210.673] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3baf90) returned 1 [0210.673] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506", nBufferLength=0x105, lpBuffer=0x3bbc10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506", lpFilePart=0x0) returned 0x9b [0210.673] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0b0) returned 1 [0210.673] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\77ec63bda74bd0d0e0426dc8f8008506"), fInfoLevelId=0x0, lpFileInformation=0x3bc190 | out: lpFileInformation=0x3bc190*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xcf825b0a, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xcf825b0a, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xcf825b0a, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0210.673] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc070) returned 1 [0210.673] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506", nBufferLength=0x105, lpBuffer=0x3bbc30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506", lpFilePart=0x0) returned 0x9b [0210.673] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0b0) returned 1 [0210.673] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\77ec63bda74bd0d0e0426dc8f8008506"), fInfoLevelId=0x0, lpFileInformation=0x21a2fa8 | out: lpFileInformation=0x21a2fa8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xcf825b0a, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xcf825b0a, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xcf825b0a, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0210.674] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc070) returned 1 [0210.674] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506", nBufferLength=0x105, lpBuffer=0x3bba90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506", lpFilePart=0x0) returned 0x9b [0210.674] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf70) returned 1 [0210.674] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\77ec63bda74bd0d0e0426dc8f8008506"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0210.674] GetFileType (hFile=0x444) returned 0x1 [0210.674] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbee0) returned 1 [0210.674] GetFileType (hFile=0x444) returned 0x1 [0210.674] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc108 | out: lpFileSizeHigh=0x3bc108*=0x0) returned 0x0 [0210.674] CloseHandle (hObject=0x444) returned 1 [0210.685] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506", nBufferLength=0x105, lpBuffer=0x3bba90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506", lpFilePart=0x0) returned 0x9b [0210.686] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf70) returned 1 [0210.686] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\77ec63bda74bd0d0e0426dc8f8008506"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0210.687] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8a00) returned 1 [0210.688] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF", lpFilePart=0x0) returned 0xbc [0210.688] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0210.688] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\c46e7b0f942663a1edc8d9d6d7869173_d9b9f37ece595b0b7b6aa12451d392cf"), fInfoLevelId=0x0, lpFileInformation=0x2219de0 | out: lpFileInformation=0x2219de0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x78925db3, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x78925db3, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x9f2ffab7, ftLastWriteTime.dwHighDateTime=0x1d2fad9, nFileSizeHigh=0x0, nFileSizeLow=0x6e3)) returned 1 [0210.688] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0210.688] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF", lpFilePart=0x0) returned 0xbc [0210.688] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0210.688] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\c46e7b0f942663a1edc8d9d6d7869173_d9b9f37ece595b0b7b6aa12451d392cf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0210.688] GetFileType (hFile=0x444) returned 0x1 [0210.688] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0210.688] GetFileType (hFile=0x444) returned 0x1 [0210.688] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x6e3 [0210.688] ReadFile (in: hFile=0x444, lpBuffer=0x221aa20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x221aa20*, lpNumberOfBytesRead=0x3be5c8*=0x6e3, lpOverlapped=0x0) returned 1 [0210.706] CloseHandle (hObject=0x444) returned 1 [0210.791] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF", lpFilePart=0x0) returned 0xbc [0210.791] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0210.791] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\c46e7b0f942663a1edc8d9d6d7869173_d9b9f37ece595b0b7b6aa12451d392cf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0210.793] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3baf90) returned 1 [0210.793] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF", nBufferLength=0x105, lpBuffer=0x3bbc10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF", lpFilePart=0x0) returned 0xbc [0210.793] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0b0) returned 1 [0210.793] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\c46e7b0f942663a1edc8d9d6d7869173_d9b9f37ece595b0b7b6aa12451d392cf"), fInfoLevelId=0x0, lpFileInformation=0x3bc190 | out: lpFileInformation=0x3bc190*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x78925db3, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x78925db3, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x9f2ffab7, ftLastWriteTime.dwHighDateTime=0x1d2fad9, nFileSizeHigh=0x0, nFileSizeLow=0x6e3)) returned 1 [0210.800] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc070) returned 1 [0210.800] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF", nBufferLength=0x105, lpBuffer=0x3bbc30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF", lpFilePart=0x0) returned 0xbc [0210.800] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0b0) returned 1 [0210.800] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\c46e7b0f942663a1edc8d9d6d7869173_d9b9f37ece595b0b7b6aa12451d392cf"), fInfoLevelId=0x0, lpFileInformation=0x2294820 | out: lpFileInformation=0x2294820*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x78925db3, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x78925db3, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x9f2ffab7, ftLastWriteTime.dwHighDateTime=0x1d2fad9, nFileSizeHigh=0x0, nFileSizeLow=0x6e3)) returned 1 [0210.800] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc070) returned 1 [0210.800] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF", nBufferLength=0x105, lpBuffer=0x3bba90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF", lpFilePart=0x0) returned 0xbc [0210.800] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf70) returned 1 [0210.800] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\c46e7b0f942663a1edc8d9d6d7869173_d9b9f37ece595b0b7b6aa12451d392cf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0210.800] GetFileType (hFile=0x444) returned 0x1 [0210.800] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbee0) returned 1 [0210.800] GetFileType (hFile=0x444) returned 0x1 [0210.800] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc108 | out: lpFileSizeHigh=0x3bc108*=0x0) returned 0x6e3 [0210.800] ReadFile (in: hFile=0x444, lpBuffer=0x2295460, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bc038, lpOverlapped=0x0 | out: lpBuffer=0x2295460*, lpNumberOfBytesRead=0x3bc038*=0x6e3, lpOverlapped=0x0) returned 1 [0210.800] CloseHandle (hObject=0x444) returned 1 [0210.811] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF", nBufferLength=0x105, lpBuffer=0x3bba90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF", lpFilePart=0x0) returned 0xbc [0210.811] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf70) returned 1 [0210.811] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\c46e7b0f942663a1edc8d9d6d7869173_d9b9f37ece595b0b7b6aa12451d392cf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0210.813] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8a00) returned 1 [0210.813] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749", lpFilePart=0x0) returned 0x9b [0210.813] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0210.813] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\fb0d848f74f70bb2eaa93746d24d9749"), fInfoLevelId=0x0, lpFileInformation=0x230f0c8 | out: lpFileInformation=0x230f0c8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xcf84bd60, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xcf84bd60, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xc12227d7, ftLastWriteTime.dwHighDateTime=0x1d2fad9, nFileSizeHigh=0x0, nFileSizeLow=0x1e74)) returned 1 [0210.813] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0210.814] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749", lpFilePart=0x0) returned 0x9b [0210.814] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0210.814] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\fb0d848f74f70bb2eaa93746d24d9749"), fInfoLevelId=0x0, lpFileInformation=0x230f2e0 | out: lpFileInformation=0x230f2e0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xcf84bd60, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xcf84bd60, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xc12227d7, ftLastWriteTime.dwHighDateTime=0x1d2fad9, nFileSizeHigh=0x0, nFileSizeLow=0x1e74)) returned 1 [0210.814] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0210.814] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749", lpFilePart=0x0) returned 0x9b [0210.814] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0210.814] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\fb0d848f74f70bb2eaa93746d24d9749"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0210.815] GetFileType (hFile=0x444) returned 0x1 [0210.815] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0210.815] GetFileType (hFile=0x444) returned 0x1 [0210.815] ReadFile (in: hFile=0x444, lpBuffer=0x2311840, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x2311840*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0210.850] CloseHandle (hObject=0x444) returned 1 [0210.850] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749", lpFilePart=0x0) returned 0x9b [0210.850] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0210.850] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\fb0d848f74f70bb2eaa93746d24d9749"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0210.850] GetFileType (hFile=0x444) returned 0x1 [0210.850] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0210.850] GetFileType (hFile=0x444) returned 0x1 [0210.850] WriteFile (in: hFile=0x444, lpBuffer=0x2188358*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x2188358*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0210.850] CloseHandle (hObject=0x444) returned 1 [0210.851] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749", lpFilePart=0x0) returned 0x9b [0210.851] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749.xuy", lpFilePart=0x0) returned 0x9f [0210.851] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0210.851] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\fb0d848f74f70bb2eaa93746d24d9749"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xcf84bd60, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xcf84bd60, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x6985e4b7, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0210.851] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0210.851] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\fb0d848f74f70bb2eaa93746d24d9749"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\fb0d848f74f70bb2eaa93746d24d9749.xuy")) returned 1 [0210.852] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0210.852] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData", lpFilePart=0x0) returned 0x7b [0210.852] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\", lpFilePart=0x0) returned 0x7c [0210.852] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d7610 [0210.860] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0210.860] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0210.861] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0210.861] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0210.861] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0210.861] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0210.861] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0210.861] FindClose (in: hFindFile=0x5d7610 | out: hFindFile=0x5d7610) returned 1 [0210.862] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0210.862] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0210.862] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0210.862] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData", lpFilePart=0x0) returned 0x7b [0210.862] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\", lpFilePart=0x0) returned 0x7c [0210.862] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d7370 [0210.863] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0210.863] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0210.863] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0210.863] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0210.863] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0210.863] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0210.863] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0210.863] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0210.864] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0210.864] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0210.864] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", lpFilePart=0x0) returned 0xbd [0210.864] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0210.864] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\40e450f7ce13419a2ccc2a5445035a0a_06f02b1f13ab4b11b8fc669bde565af1"), fInfoLevelId=0x0, lpFileInformation=0x2195ff8 | out: lpFileInformation=0x2195ff8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xcf7ff8a1, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xcf7ff8a1, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xeab1c92e, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x190)) returned 1 [0210.865] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0210.865] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", lpFilePart=0x0) returned 0xbd [0210.865] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0210.865] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\40e450f7ce13419a2ccc2a5445035a0a_06f02b1f13ab4b11b8fc669bde565af1"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0210.865] GetFileType (hFile=0x444) returned 0x1 [0210.865] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0210.865] GetFileType (hFile=0x444) returned 0x1 [0210.865] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x190 [0210.865] ReadFile (in: hFile=0x444, lpBuffer=0x21966e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x21966e0*, lpNumberOfBytesRead=0x3be5c8*=0x190, lpOverlapped=0x0) returned 1 [0210.866] CloseHandle (hObject=0x444) returned 1 [0210.905] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", lpFilePart=0x0) returned 0xbd [0210.905] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0210.906] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\40e450f7ce13419a2ccc2a5445035a0a_06f02b1f13ab4b11b8fc669bde565af1"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0210.907] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3baf90) returned 1 [0210.908] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", nBufferLength=0x105, lpBuffer=0x3bbc10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", lpFilePart=0x0) returned 0xbd [0210.908] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0b0) returned 1 [0210.908] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\40e450f7ce13419a2ccc2a5445035a0a_06f02b1f13ab4b11b8fc669bde565af1"), fInfoLevelId=0x0, lpFileInformation=0x3bc190 | out: lpFileInformation=0x3bc190*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xcf7ff8a1, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xcf7ff8a1, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xeab1c92e, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x190)) returned 1 [0210.908] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc070) returned 1 [0210.908] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", nBufferLength=0x105, lpBuffer=0x3bbc30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", lpFilePart=0x0) returned 0xbd [0210.908] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0b0) returned 1 [0210.908] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\40e450f7ce13419a2ccc2a5445035a0a_06f02b1f13ab4b11b8fc669bde565af1"), fInfoLevelId=0x0, lpFileInformation=0x220ea50 | out: lpFileInformation=0x220ea50*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xcf7ff8a1, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xcf7ff8a1, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xeab1c92e, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x190)) returned 1 [0210.908] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc070) returned 1 [0210.908] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", nBufferLength=0x105, lpBuffer=0x3bba90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", lpFilePart=0x0) returned 0xbd [0210.908] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf70) returned 1 [0210.908] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\40e450f7ce13419a2ccc2a5445035a0a_06f02b1f13ab4b11b8fc669bde565af1"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0210.908] GetFileType (hFile=0x444) returned 0x1 [0210.908] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbee0) returned 1 [0210.908] GetFileType (hFile=0x444) returned 0x1 [0210.908] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc108 | out: lpFileSizeHigh=0x3bc108*=0x0) returned 0x190 [0210.908] ReadFile (in: hFile=0x444, lpBuffer=0x220f138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bc038, lpOverlapped=0x0 | out: lpBuffer=0x220f138*, lpNumberOfBytesRead=0x3bc038*=0x190, lpOverlapped=0x0) returned 1 [0210.908] CloseHandle (hObject=0x444) returned 1 [0210.919] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", nBufferLength=0x105, lpBuffer=0x3bba90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", lpFilePart=0x0) returned 0xbd [0210.919] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf70) returned 1 [0210.919] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\40e450f7ce13419a2ccc2a5445035a0a_06f02b1f13ab4b11b8fc669bde565af1"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0210.920] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8a00) returned 1 [0210.921] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", lpFilePart=0x0) returned 0x9c [0210.921] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0210.921] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\57c8edb95df3f0ad4ee2dc2b8cfd4157"), fInfoLevelId=0x0, lpFileInformation=0x2287310 | out: lpFileInformation=0x2287310*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xcf825b0a, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xcf825b0a, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x131e18dd, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0x154)) returned 1 [0210.921] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0210.921] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", lpFilePart=0x0) returned 0x9c [0210.921] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0210.921] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\57c8edb95df3f0ad4ee2dc2b8cfd4157"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0210.921] GetFileType (hFile=0x444) returned 0x1 [0210.921] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0210.922] GetFileType (hFile=0x444) returned 0x1 [0210.922] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x154 [0210.922] ReadFile (in: hFile=0x444, lpBuffer=0x22878c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x22878c0*, lpNumberOfBytesRead=0x3be5c8*=0x154, lpOverlapped=0x0) returned 1 [0210.922] CloseHandle (hObject=0x444) returned 1 [0210.932] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", lpFilePart=0x0) returned 0x9c [0210.932] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0210.932] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\57c8edb95df3f0ad4ee2dc2b8cfd4157"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0210.934] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3baf90) returned 1 [0210.934] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", nBufferLength=0x105, lpBuffer=0x3bbc10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", lpFilePart=0x0) returned 0x9c [0210.934] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0b0) returned 1 [0210.934] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\57c8edb95df3f0ad4ee2dc2b8cfd4157"), fInfoLevelId=0x0, lpFileInformation=0x3bc190 | out: lpFileInformation=0x3bc190*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xcf825b0a, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xcf825b0a, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x131e18dd, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0x154)) returned 1 [0210.934] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc070) returned 1 [0210.934] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", nBufferLength=0x105, lpBuffer=0x3bbc30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", lpFilePart=0x0) returned 0x9c [0210.934] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0b0) returned 1 [0210.935] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\57c8edb95df3f0ad4ee2dc2b8cfd4157"), fInfoLevelId=0x0, lpFileInformation=0x22ff9f0 | out: lpFileInformation=0x22ff9f0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xcf825b0a, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xcf825b0a, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x131e18dd, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0x154)) returned 1 [0210.935] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc070) returned 1 [0210.935] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", nBufferLength=0x105, lpBuffer=0x3bba90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", lpFilePart=0x0) returned 0x9c [0210.935] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf70) returned 1 [0210.935] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\57c8edb95df3f0ad4ee2dc2b8cfd4157"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0210.935] GetFileType (hFile=0x444) returned 0x1 [0210.935] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbee0) returned 1 [0210.935] GetFileType (hFile=0x444) returned 0x1 [0210.935] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc108 | out: lpFileSizeHigh=0x3bc108*=0x0) returned 0x154 [0210.935] ReadFile (in: hFile=0x444, lpBuffer=0x22fffa0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bc038, lpOverlapped=0x0 | out: lpBuffer=0x22fffa0*, lpNumberOfBytesRead=0x3bc038*=0x154, lpOverlapped=0x0) returned 1 [0210.935] CloseHandle (hObject=0x444) returned 1 [0210.945] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", nBufferLength=0x105, lpBuffer=0x3bba90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", lpFilePart=0x0) returned 0x9c [0210.945] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf70) returned 1 [0210.945] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\57c8edb95df3f0ad4ee2dc2b8cfd4157"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0210.946] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8a00) returned 1 [0210.947] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506", lpFilePart=0x0) returned 0x9c [0210.947] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0210.947] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\77ec63bda74bd0d0e0426dc8f8008506"), fInfoLevelId=0x0, lpFileInformation=0x2377f78 | out: lpFileInformation=0x2377f78*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xcf825b0a, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xcf825b0a, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x1308bd1d, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0x122)) returned 1 [0210.947] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0210.947] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506", lpFilePart=0x0) returned 0x9c [0210.947] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0210.947] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\77ec63bda74bd0d0e0426dc8f8008506"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0210.947] GetFileType (hFile=0x444) returned 0x1 [0210.948] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0210.948] GetFileType (hFile=0x444) returned 0x1 [0210.948] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x122 [0210.948] ReadFile (in: hFile=0x444, lpBuffer=0x23784f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x23784f8*, lpNumberOfBytesRead=0x3be5c8*=0x122, lpOverlapped=0x0) returned 1 [0210.955] CloseHandle (hObject=0x444) returned 1 [0210.992] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506", lpFilePart=0x0) returned 0x9c [0210.992] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0210.992] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\77ec63bda74bd0d0e0426dc8f8008506"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0210.994] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3baf90) returned 1 [0210.994] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506", nBufferLength=0x105, lpBuffer=0x3bbc10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506", lpFilePart=0x0) returned 0x9c [0210.994] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0b0) returned 1 [0210.994] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\77ec63bda74bd0d0e0426dc8f8008506"), fInfoLevelId=0x0, lpFileInformation=0x3bc190 | out: lpFileInformation=0x3bc190*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xcf825b0a, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xcf825b0a, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x1308bd1d, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0x122)) returned 1 [0210.994] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc070) returned 1 [0210.994] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506", nBufferLength=0x105, lpBuffer=0x3bbc30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506", lpFilePart=0x0) returned 0x9c [0210.994] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0b0) returned 1 [0210.994] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\77ec63bda74bd0d0e0426dc8f8008506"), fInfoLevelId=0x0, lpFileInformation=0x21ec388 | out: lpFileInformation=0x21ec388*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xcf825b0a, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xcf825b0a, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x1308bd1d, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0x122)) returned 1 [0210.994] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc070) returned 1 [0210.994] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506", nBufferLength=0x105, lpBuffer=0x3bba90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506", lpFilePart=0x0) returned 0x9c [0210.994] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf70) returned 1 [0210.994] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\77ec63bda74bd0d0e0426dc8f8008506"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0210.995] GetFileType (hFile=0x444) returned 0x1 [0210.995] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbee0) returned 1 [0210.995] GetFileType (hFile=0x444) returned 0x1 [0210.995] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc108 | out: lpFileSizeHigh=0x3bc108*=0x0) returned 0x122 [0210.995] ReadFile (in: hFile=0x444, lpBuffer=0x21ec908, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bc038, lpOverlapped=0x0 | out: lpBuffer=0x21ec908*, lpNumberOfBytesRead=0x3bc038*=0x122, lpOverlapped=0x0) returned 1 [0210.995] CloseHandle (hObject=0x444) returned 1 [0211.007] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506", nBufferLength=0x105, lpBuffer=0x3bba90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506", lpFilePart=0x0) returned 0x9c [0211.007] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf70) returned 1 [0211.007] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\77ec63bda74bd0d0e0426dc8f8008506"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0211.008] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8a00) returned 1 [0211.009] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF", lpFilePart=0x0) returned 0xbd [0211.009] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0211.009] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\c46e7b0f942663a1edc8d9d6d7869173_d9b9f37ece595b0b7b6aa12451d392cf"), fInfoLevelId=0x0, lpFileInformation=0x22647f0 | out: lpFileInformation=0x22647f0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x78925db3, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x78925db3, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0xc0c529f5, ftLastWriteTime.dwHighDateTime=0x1d2fad9, nFileSizeHigh=0x0, nFileSizeLow=0x18e)) returned 1 [0211.009] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0211.009] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF", lpFilePart=0x0) returned 0xbd [0211.010] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0211.010] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\c46e7b0f942663a1edc8d9d6d7869173_d9b9f37ece595b0b7b6aa12451d392cf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0211.010] GetFileType (hFile=0x444) returned 0x1 [0211.010] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0211.010] GetFileType (hFile=0x444) returned 0x1 [0211.010] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x18e [0211.010] ReadFile (in: hFile=0x444, lpBuffer=0x2264ed8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x2264ed8*, lpNumberOfBytesRead=0x3be5c8*=0x18e, lpOverlapped=0x0) returned 1 [0211.011] CloseHandle (hObject=0x444) returned 1 [0211.021] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF", lpFilePart=0x0) returned 0xbd [0211.021] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0211.021] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\c46e7b0f942663a1edc8d9d6d7869173_d9b9f37ece595b0b7b6aa12451d392cf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0211.022] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3baf90) returned 1 [0211.023] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF", nBufferLength=0x105, lpBuffer=0x3bbc10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF", lpFilePart=0x0) returned 0xbd [0211.023] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0b0) returned 1 [0211.023] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\c46e7b0f942663a1edc8d9d6d7869173_d9b9f37ece595b0b7b6aa12451d392cf"), fInfoLevelId=0x0, lpFileInformation=0x3bc190 | out: lpFileInformation=0x3bc190*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x78925db3, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x78925db3, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0xc0c529f5, ftLastWriteTime.dwHighDateTime=0x1d2fad9, nFileSizeHigh=0x0, nFileSizeLow=0x18e)) returned 1 [0211.023] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc070) returned 1 [0211.023] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF", nBufferLength=0x105, lpBuffer=0x3bbc30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF", lpFilePart=0x0) returned 0xbd [0211.023] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0b0) returned 1 [0211.023] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\c46e7b0f942663a1edc8d9d6d7869173_d9b9f37ece595b0b7b6aa12451d392cf"), fInfoLevelId=0x0, lpFileInformation=0x22dd1f0 | out: lpFileInformation=0x22dd1f0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x78925db3, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x78925db3, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0xc0c529f5, ftLastWriteTime.dwHighDateTime=0x1d2fad9, nFileSizeHigh=0x0, nFileSizeLow=0x18e)) returned 1 [0211.023] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc070) returned 1 [0211.023] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF", nBufferLength=0x105, lpBuffer=0x3bba90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF", lpFilePart=0x0) returned 0xbd [0211.023] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf70) returned 1 [0211.023] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\c46e7b0f942663a1edc8d9d6d7869173_d9b9f37ece595b0b7b6aa12451d392cf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0211.023] GetFileType (hFile=0x444) returned 0x1 [0211.023] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbee0) returned 1 [0211.023] GetFileType (hFile=0x444) returned 0x1 [0211.023] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc108 | out: lpFileSizeHigh=0x3bc108*=0x0) returned 0x18e [0211.023] ReadFile (in: hFile=0x444, lpBuffer=0x22dd8d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bc038, lpOverlapped=0x0 | out: lpBuffer=0x22dd8d8*, lpNumberOfBytesRead=0x3bc038*=0x18e, lpOverlapped=0x0) returned 1 [0211.024] CloseHandle (hObject=0x444) returned 1 [0211.033] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF", nBufferLength=0x105, lpBuffer=0x3bba90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF", lpFilePart=0x0) returned 0xbd [0211.033] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf70) returned 1 [0211.034] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\c46e7b0f942663a1edc8d9d6d7869173_d9b9f37ece595b0b7b6aa12451d392cf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0211.035] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8a00) returned 1 [0211.035] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749", lpFilePart=0x0) returned 0x9c [0211.036] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0211.036] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\fb0d848f74f70bb2eaa93746d24d9749"), fInfoLevelId=0x0, lpFileInformation=0x2355a58 | out: lpFileInformation=0x2355a58*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xcf84bd60, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xcf84bd60, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x1327a233, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0x14a)) returned 1 [0211.036] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0211.036] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749", lpFilePart=0x0) returned 0x9c [0211.036] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0211.036] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\fb0d848f74f70bb2eaa93746d24d9749"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0211.036] GetFileType (hFile=0x444) returned 0x1 [0211.036] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0211.036] GetFileType (hFile=0x444) returned 0x1 [0211.036] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x14a [0211.036] ReadFile (in: hFile=0x444, lpBuffer=0x2356000, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x2356000*, lpNumberOfBytesRead=0x3be5c8*=0x14a, lpOverlapped=0x0) returned 1 [0211.042] CloseHandle (hObject=0x444) returned 1 [0211.081] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749", lpFilePart=0x0) returned 0x9c [0211.081] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0211.081] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\fb0d848f74f70bb2eaa93746d24d9749"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0211.083] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3baf90) returned 1 [0211.083] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749", nBufferLength=0x105, lpBuffer=0x3bbc10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749", lpFilePart=0x0) returned 0x9c [0211.083] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0b0) returned 1 [0211.083] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\fb0d848f74f70bb2eaa93746d24d9749"), fInfoLevelId=0x0, lpFileInformation=0x3bc190 | out: lpFileInformation=0x3bc190*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xcf84bd60, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xcf84bd60, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x1327a233, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0x14a)) returned 1 [0211.084] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc070) returned 1 [0211.084] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749", nBufferLength=0x105, lpBuffer=0x3bbc30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749", lpFilePart=0x0) returned 0x9c [0211.084] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0b0) returned 1 [0211.084] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\fb0d848f74f70bb2eaa93746d24d9749"), fInfoLevelId=0x0, lpFileInformation=0x21ce0d8 | out: lpFileInformation=0x21ce0d8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xcf84bd60, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xcf84bd60, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x1327a233, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0x14a)) returned 1 [0211.084] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc070) returned 1 [0211.084] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749", nBufferLength=0x105, lpBuffer=0x3bba90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749", lpFilePart=0x0) returned 0x9c [0211.084] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf70) returned 1 [0211.084] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\fb0d848f74f70bb2eaa93746d24d9749"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0211.084] GetFileType (hFile=0x444) returned 0x1 [0211.084] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbee0) returned 1 [0211.084] GetFileType (hFile=0x444) returned 0x1 [0211.084] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc108 | out: lpFileSizeHigh=0x3bc108*=0x0) returned 0x14a [0211.084] ReadFile (in: hFile=0x444, lpBuffer=0x21ce680, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bc038, lpOverlapped=0x0 | out: lpBuffer=0x21ce680*, lpNumberOfBytesRead=0x3bc038*=0x14a, lpOverlapped=0x0) returned 1 [0211.084] CloseHandle (hObject=0x444) returned 1 [0211.096] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749", nBufferLength=0x105, lpBuffer=0x3bba90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749", lpFilePart=0x0) returned 0x9c [0211.096] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf70) returned 1 [0211.096] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\fb0d848f74f70bb2eaa93746d24d9749"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0211.098] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8a00) returned 1 [0211.099] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0211.099] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Internet Explorer", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Internet Explorer", lpFilePart=0x0) returned 0x73 [0211.099] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Internet Explorer\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Internet Explorer\\", lpFilePart=0x0) returned 0x74 [0211.099] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Internet Explorer\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d7eb0 [0211.099] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0211.099] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0211.099] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0211.099] FindClose (in: hFindFile=0x5d7eb0 | out: hFindFile=0x5d7eb0) returned 1 [0211.099] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0211.099] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0211.099] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0211.100] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Internet Explorer", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Internet Explorer", lpFilePart=0x0) returned 0x73 [0211.100] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Internet Explorer\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Internet Explorer\\", lpFilePart=0x0) returned 0x74 [0211.100] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Internet Explorer\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d78b0 [0211.100] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0211.100] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0211.100] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0211.100] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0211.100] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0211.100] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0211.100] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0211.100] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Internet Explorer\\DOMStore", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Internet Explorer\\DOMStore", lpFilePart=0x0) returned 0x7c [0211.100] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Internet Explorer\\DOMStore\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Internet Explorer\\DOMStore\\", lpFilePart=0x0) returned 0x7d [0211.100] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Internet Explorer\\DOMStore\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d7fd0 [0211.101] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0211.101] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0211.101] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0211.101] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0211.101] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0211.101] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0211.101] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0211.102] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0211.102] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0211.102] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0211.102] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0211.102] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Internet Explorer\\DOMStore", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Internet Explorer\\DOMStore", lpFilePart=0x0) returned 0x7c [0211.102] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Internet Explorer\\DOMStore\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Internet Explorer\\DOMStore\\", lpFilePart=0x0) returned 0x7d [0211.102] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Internet Explorer\\DOMStore\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d8090 [0211.102] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0211.102] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0211.102] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0211.102] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0211.102] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0211.103] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0211.103] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0211.103] FindClose (in: hFindFile=0x5d8090 | out: hFindFile=0x5d8090) returned 1 [0211.103] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0211.103] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0211.103] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Internet Explorer\\DOMStore\\container.dat", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Internet Explorer\\DOMStore\\container.dat", lpFilePart=0x0) returned 0x8a [0211.103] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0211.103] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Internet Explorer\\DOMStore\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\internet explorer\\domstore\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x224d240 | out: lpFileInformation=0x224d240*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x57b4f2bd, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x57b4f2bd, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x57b4f2bd, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0211.103] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0211.103] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Internet Explorer\\DOMStore\\container.dat", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Internet Explorer\\DOMStore\\container.dat", lpFilePart=0x0) returned 0x8a [0211.103] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0211.104] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Internet Explorer\\DOMStore\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\internet explorer\\domstore\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0211.104] GetFileType (hFile=0x444) returned 0x1 [0211.104] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0211.104] GetFileType (hFile=0x444) returned 0x1 [0211.104] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x0 [0211.104] CloseHandle (hObject=0x444) returned 1 [0211.114] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Internet Explorer\\DOMStore\\container.dat", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Internet Explorer\\DOMStore\\container.dat", lpFilePart=0x0) returned 0x8a [0211.114] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0211.114] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Internet Explorer\\DOMStore\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\internet explorer\\domstore\\container.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0211.116] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3baf90) returned 1 [0211.116] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Internet Explorer\\DOMStore\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbc10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Internet Explorer\\DOMStore\\container.dat", lpFilePart=0x0) returned 0x8a [0211.116] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0b0) returned 1 [0211.116] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Internet Explorer\\DOMStore\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\internet explorer\\domstore\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x3bc190 | out: lpFileInformation=0x3bc190*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x57b4f2bd, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x57b4f2bd, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x57b4f2bd, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0211.116] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc070) returned 1 [0211.116] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Internet Explorer\\DOMStore\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbc30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Internet Explorer\\DOMStore\\container.dat", lpFilePart=0x0) returned 0x8a [0211.116] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0b0) returned 1 [0211.116] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Internet Explorer\\DOMStore\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\internet explorer\\domstore\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x22c40b0 | out: lpFileInformation=0x22c40b0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x57b4f2bd, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x57b4f2bd, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x57b4f2bd, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0211.116] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc070) returned 1 [0211.117] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Internet Explorer\\DOMStore\\container.dat", nBufferLength=0x105, lpBuffer=0x3bba90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Internet Explorer\\DOMStore\\container.dat", lpFilePart=0x0) returned 0x8a [0211.117] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf70) returned 1 [0211.117] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Internet Explorer\\DOMStore\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\internet explorer\\domstore\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0211.117] GetFileType (hFile=0x444) returned 0x1 [0211.117] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbee0) returned 1 [0211.117] GetFileType (hFile=0x444) returned 0x1 [0211.117] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc108 | out: lpFileSizeHigh=0x3bc108*=0x0) returned 0x0 [0211.117] CloseHandle (hObject=0x444) returned 1 [0211.128] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Internet Explorer\\DOMStore\\container.dat", nBufferLength=0x105, lpBuffer=0x3bba90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Internet Explorer\\DOMStore\\container.dat", lpFilePart=0x0) returned 0x8a [0211.128] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf70) returned 1 [0211.128] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Internet Explorer\\DOMStore\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\internet explorer\\domstore\\container.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0211.129] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8a00) returned 1 [0211.130] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0211.130] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Internet Explorer\\DOMStore\\11JCBKEC", nBufferLength=0x105, lpBuffer=0x3be130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Internet Explorer\\DOMStore\\11JCBKEC", lpFilePart=0x0) returned 0x85 [0211.130] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Internet Explorer\\DOMStore\\11JCBKEC\\", nBufferLength=0x105, lpBuffer=0x3be0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Internet Explorer\\DOMStore\\11JCBKEC\\", lpFilePart=0x0) returned 0x86 [0211.130] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Internet Explorer\\DOMStore\\11JCBKEC\\*", lpFindFileData=0x3be2e0 | out: lpFindFileData=0x3be2e0) returned 0x5d78b0 [0211.136] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0211.136] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 0 [0211.136] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0211.136] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0211.136] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0211.136] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0211.137] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Internet Explorer\\DOMStore\\11JCBKEC", nBufferLength=0x105, lpBuffer=0x3be130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Internet Explorer\\DOMStore\\11JCBKEC", lpFilePart=0x0) returned 0x85 [0211.137] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Internet Explorer\\DOMStore\\11JCBKEC\\", nBufferLength=0x105, lpBuffer=0x3be0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Internet Explorer\\DOMStore\\11JCBKEC\\", lpFilePart=0x0) returned 0x86 [0211.137] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Internet Explorer\\DOMStore\\11JCBKEC\\*", lpFindFileData=0x3be2e0 | out: lpFindFileData=0x3be2e0) returned 0x5d7cd0 [0211.137] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0211.137] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 0 [0211.137] FindClose (in: hFindFile=0x5d7cd0 | out: hFindFile=0x5d7cd0) returned 1 [0211.137] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0211.137] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0211.138] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0211.138] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Internet Explorer\\DOMStore\\3YF3CW26", nBufferLength=0x105, lpBuffer=0x3be130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Internet Explorer\\DOMStore\\3YF3CW26", lpFilePart=0x0) returned 0x85 [0211.138] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Internet Explorer\\DOMStore\\3YF3CW26\\", nBufferLength=0x105, lpBuffer=0x3be0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Internet Explorer\\DOMStore\\3YF3CW26\\", lpFilePart=0x0) returned 0x86 [0211.138] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Internet Explorer\\DOMStore\\3YF3CW26\\*", lpFindFileData=0x3be2e0 | out: lpFindFileData=0x3be2e0) returned 0x5d75b0 [0211.140] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0211.140] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 0 [0211.140] FindClose (in: hFindFile=0x5d75b0 | out: hFindFile=0x5d75b0) returned 1 [0211.140] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0211.140] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0211.140] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0211.140] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Internet Explorer\\DOMStore\\3YF3CW26", nBufferLength=0x105, lpBuffer=0x3be130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Internet Explorer\\DOMStore\\3YF3CW26", lpFilePart=0x0) returned 0x85 [0211.140] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Internet Explorer\\DOMStore\\3YF3CW26\\", nBufferLength=0x105, lpBuffer=0x3be0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Internet Explorer\\DOMStore\\3YF3CW26\\", lpFilePart=0x0) returned 0x86 [0211.140] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Internet Explorer\\DOMStore\\3YF3CW26\\*", lpFindFileData=0x3be2e0 | out: lpFindFileData=0x3be2e0) returned 0x5d7c70 [0211.141] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0211.141] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 0 [0211.141] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0211.141] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0211.141] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0211.141] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0211.141] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Internet Explorer\\DOMStore\\5K7R7KLZ", nBufferLength=0x105, lpBuffer=0x3be130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Internet Explorer\\DOMStore\\5K7R7KLZ", lpFilePart=0x0) returned 0x85 [0211.141] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Internet Explorer\\DOMStore\\5K7R7KLZ\\", nBufferLength=0x105, lpBuffer=0x3be0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Internet Explorer\\DOMStore\\5K7R7KLZ\\", lpFilePart=0x0) returned 0x86 [0211.141] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Internet Explorer\\DOMStore\\5K7R7KLZ\\*", lpFindFileData=0x3be2e0 | out: lpFindFileData=0x3be2e0) returned 0x5d78b0 [0211.141] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0211.141] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 0 [0211.141] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0211.141] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0211.142] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0211.142] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0211.142] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Internet Explorer\\DOMStore\\5K7R7KLZ", nBufferLength=0x105, lpBuffer=0x3be130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Internet Explorer\\DOMStore\\5K7R7KLZ", lpFilePart=0x0) returned 0x85 [0211.142] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Internet Explorer\\DOMStore\\5K7R7KLZ\\", nBufferLength=0x105, lpBuffer=0x3be0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Internet Explorer\\DOMStore\\5K7R7KLZ\\", lpFilePart=0x0) returned 0x86 [0211.142] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Internet Explorer\\DOMStore\\5K7R7KLZ\\*", lpFindFileData=0x3be2e0 | out: lpFindFileData=0x3be2e0) returned 0x5d7550 [0211.142] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0211.142] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 0 [0211.142] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0211.142] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0211.142] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0211.142] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0211.142] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Internet Explorer\\DOMStore\\YZLQLSKF", nBufferLength=0x105, lpBuffer=0x3be130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Internet Explorer\\DOMStore\\YZLQLSKF", lpFilePart=0x0) returned 0x85 [0211.142] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Internet Explorer\\DOMStore\\YZLQLSKF\\", nBufferLength=0x105, lpBuffer=0x3be0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Internet Explorer\\DOMStore\\YZLQLSKF\\", lpFilePart=0x0) returned 0x86 [0211.142] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Internet Explorer\\DOMStore\\YZLQLSKF\\*", lpFindFileData=0x3be2e0 | out: lpFindFileData=0x3be2e0) returned 0x5d79d0 [0211.142] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0211.143] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0211.143] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 0 [0211.143] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0211.143] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0211.143] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0211.143] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0211.143] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Internet Explorer\\DOMStore\\YZLQLSKF", nBufferLength=0x105, lpBuffer=0x3be130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Internet Explorer\\DOMStore\\YZLQLSKF", lpFilePart=0x0) returned 0x85 [0211.143] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Internet Explorer\\DOMStore\\YZLQLSKF\\", nBufferLength=0x105, lpBuffer=0x3be0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Internet Explorer\\DOMStore\\YZLQLSKF\\", lpFilePart=0x0) returned 0x86 [0211.143] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Internet Explorer\\DOMStore\\YZLQLSKF\\*", lpFindFileData=0x3be2e0 | out: lpFindFileData=0x3be2e0) returned 0x5d78b0 [0211.143] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0211.143] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 1 [0211.143] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be330 | out: lpFindFileData=0x3be330) returned 0 [0211.144] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0211.144] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0211.144] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0211.144] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Internet Explorer\\DOMStore\\YZLQLSKF\\www.bing[1].xml", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Internet Explorer\\DOMStore\\YZLQLSKF\\www.bing[1].xml", lpFilePart=0x0) returned 0x95 [0211.144] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0211.144] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Internet Explorer\\DOMStore\\YZLQLSKF\\www.bing[1].xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\internet explorer\\domstore\\yzlqlskf\\www.bing[1].xml"), fInfoLevelId=0x0, lpFileInformation=0x2345228 | out: lpFileInformation=0x2345228*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x57b4f2bd, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x57b4f2bd, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0xb59d1f68, ftLastWriteTime.dwHighDateTime=0x1d46683, nFileSizeHigh=0x0, nFileSizeLow=0x17be)) returned 1 [0211.144] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0211.144] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Internet Explorer\\DOMStore\\YZLQLSKF\\www.bing[1].xml", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Internet Explorer\\DOMStore\\YZLQLSKF\\www.bing[1].xml", lpFilePart=0x0) returned 0x95 [0211.144] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5d0) returned 1 [0211.144] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Internet Explorer\\DOMStore\\YZLQLSKF\\www.bing[1].xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\internet explorer\\domstore\\yzlqlskf\\www.bing[1].xml"), fInfoLevelId=0x0, lpFileInformation=0x2345410 | out: lpFileInformation=0x2345410*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x57b4f2bd, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x57b4f2bd, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0xb59d1f68, ftLastWriteTime.dwHighDateTime=0x1d46683, nFileSizeHigh=0x0, nFileSizeLow=0x17be)) returned 1 [0211.144] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be590) returned 1 [0211.144] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Internet Explorer\\DOMStore\\YZLQLSKF\\www.bing[1].xml", nBufferLength=0x105, lpBuffer=0x3be040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Internet Explorer\\DOMStore\\YZLQLSKF\\www.bing[1].xml", lpFilePart=0x0) returned 0x95 [0211.144] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0211.144] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Internet Explorer\\DOMStore\\YZLQLSKF\\www.bing[1].xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\internet explorer\\domstore\\yzlqlskf\\www.bing[1].xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0211.146] GetFileType (hFile=0x444) returned 0x1 [0211.146] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be490) returned 1 [0211.146] GetFileType (hFile=0x444) returned 0x1 [0211.146] ReadFile (in: hFile=0x444, lpBuffer=0x2347910, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5a8, lpOverlapped=0x0 | out: lpBuffer=0x2347910*, lpNumberOfBytesRead=0x3be5a8*=0x1000, lpOverlapped=0x0) returned 1 [0211.190] CloseHandle (hObject=0x444) returned 1 [0211.191] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Internet Explorer\\DOMStore\\YZLQLSKF\\www.bing[1].xml", nBufferLength=0x105, lpBuffer=0x3be040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Internet Explorer\\DOMStore\\YZLQLSKF\\www.bing[1].xml", lpFilePart=0x0) returned 0x95 [0211.191] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be520) returned 1 [0211.191] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Internet Explorer\\DOMStore\\YZLQLSKF\\www.bing[1].xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\internet explorer\\domstore\\yzlqlskf\\www.bing[1].xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0211.191] GetFileType (hFile=0x444) returned 0x1 [0211.191] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be490) returned 1 [0211.191] GetFileType (hFile=0x444) returned 0x1 [0211.191] WriteFile (in: hFile=0x444, lpBuffer=0x21883b0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be658, lpOverlapped=0x0 | out: lpBuffer=0x21883b0*, lpNumberOfBytesWritten=0x3be658*=0x2000, lpOverlapped=0x0) returned 1 [0211.191] CloseHandle (hObject=0x444) returned 1 [0211.192] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Internet Explorer\\DOMStore\\YZLQLSKF\\www.bing[1].xml", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Internet Explorer\\DOMStore\\YZLQLSKF\\www.bing[1].xml", lpFilePart=0x0) returned 0x95 [0211.192] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Internet Explorer\\DOMStore\\YZLQLSKF\\www.bing[1].xml.xuy", nBufferLength=0x105, lpBuffer=0x3be150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Internet Explorer\\DOMStore\\YZLQLSKF\\www.bing[1].xml.xuy", lpFilePart=0x0) returned 0x99 [0211.192] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0211.192] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Internet Explorer\\DOMStore\\YZLQLSKF\\www.bing[1].xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\internet explorer\\domstore\\yzlqlskf\\www.bing[1].xml"), fInfoLevelId=0x0, lpFileInformation=0x3be670 | out: lpFileInformation=0x3be670*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x57b4f2bd, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x57b4f2bd, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x69ba5c09, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0211.192] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0211.192] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Internet Explorer\\DOMStore\\YZLQLSKF\\www.bing[1].xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\internet explorer\\domstore\\yzlqlskf\\www.bing[1].xml"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Internet Explorer\\DOMStore\\YZLQLSKF\\www.bing[1].xml.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\internet explorer\\domstore\\yzlqlskf\\www.bing[1].xml.xuy")) returned 1 [0211.194] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0211.194] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Windows", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Windows", lpFilePart=0x0) returned 0x69 [0211.194] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\", lpFilePart=0x0) returned 0x6a [0211.194] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d7370 [0211.194] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0211.194] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0211.194] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0211.195] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0211.195] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0211.195] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0211.195] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0211.195] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Windows", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Windows", lpFilePart=0x0) returned 0x69 [0211.195] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\", lpFilePart=0x0) returned 0x6a [0211.195] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d7370 [0211.195] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0211.195] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0211.195] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0211.195] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0211.195] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0211.196] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0211.196] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0211.196] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3530508098", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3530508098", lpFilePart=0x0) returned 0x74 [0211.196] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3530508098\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3530508098\\", lpFilePart=0x0) returned 0x75 [0211.196] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3530508098\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d78b0 [0211.196] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0211.196] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0211.196] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0211.196] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0211.196] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0211.196] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0211.196] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0211.197] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3530508098", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3530508098", lpFilePart=0x0) returned 0x74 [0211.197] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3530508098\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3530508098\\", lpFilePart=0x0) returned 0x75 [0211.197] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3530508098\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d7eb0 [0211.197] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0211.197] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0211.197] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0211.197] FindClose (in: hFindFile=0x5d7eb0 | out: hFindFile=0x5d7eb0) returned 1 [0211.197] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0211.197] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0211.197] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3530508098\\2495906576.pri", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3530508098\\2495906576.pri", lpFilePart=0x0) returned 0x83 [0211.197] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0211.198] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3530508098\\2495906576.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\windows\\3530508098\\2495906576.pri"), fInfoLevelId=0x0, lpFileInformation=0x21cc188 | out: lpFileInformation=0x21cc188*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd499050, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xbd499050, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xbd499050, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x13b60)) returned 1 [0211.198] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0211.198] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3530508098\\2495906576.pri", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3530508098\\2495906576.pri", lpFilePart=0x0) returned 0x83 [0211.198] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0211.198] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3530508098\\2495906576.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\windows\\3530508098\\2495906576.pri"), fInfoLevelId=0x0, lpFileInformation=0x21cc348 | out: lpFileInformation=0x21cc348*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd499050, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xbd499050, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xbd499050, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x13b60)) returned 1 [0211.198] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0211.198] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3530508098\\2495906576.pri", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3530508098\\2495906576.pri", lpFilePart=0x0) returned 0x83 [0211.198] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0211.198] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3530508098\\2495906576.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\windows\\3530508098\\2495906576.pri"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0211.199] GetFileType (hFile=0x444) returned 0x1 [0211.199] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0211.199] GetFileType (hFile=0x444) returned 0x1 [0211.199] ReadFile (in: hFile=0x444, lpBuffer=0x21ce7f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x21ce7f8*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0211.211] CloseHandle (hObject=0x444) returned 1 [0211.211] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3530508098\\2495906576.pri", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3530508098\\2495906576.pri", lpFilePart=0x0) returned 0x83 [0211.211] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0211.212] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3530508098\\2495906576.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\windows\\3530508098\\2495906576.pri"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0211.212] GetFileType (hFile=0x444) returned 0x1 [0211.212] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0211.212] GetFileType (hFile=0x444) returned 0x1 [0211.212] WriteFile (in: hFile=0x444, lpBuffer=0x21cc4e8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x21cc4e8*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0211.212] CloseHandle (hObject=0x444) returned 1 [0211.212] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3530508098\\2495906576.pri", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3530508098\\2495906576.pri", lpFilePart=0x0) returned 0x83 [0211.212] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3530508098\\2495906576.pri.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3530508098\\2495906576.pri.xuy", lpFilePart=0x0) returned 0x87 [0211.212] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0211.212] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3530508098\\2495906576.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\windows\\3530508098\\2495906576.pri"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd499050, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xbd499050, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x69bcb9d2, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x13b60)) returned 1 [0211.212] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0211.212] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3530508098\\2495906576.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\windows\\3530508098\\2495906576.pri"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3530508098\\2495906576.pri.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\windows\\3530508098\\2495906576.pri.xuy")) returned 1 [0211.214] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0211.214] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Temp", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Temp", lpFilePart=0x0) returned 0x5c [0211.214] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Temp\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Temp\\", lpFilePart=0x0) returned 0x5d [0211.214] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Temp\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7c70 [0211.214] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0211.214] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0211.214] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0211.214] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0211.214] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0211.214] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0211.215] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Temp", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Temp", lpFilePart=0x0) returned 0x5c [0211.215] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Temp\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Temp\\", lpFilePart=0x0) returned 0x5d [0211.215] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Temp\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7cd0 [0211.215] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0211.215] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0211.215] FindClose (in: hFindFile=0x5d7cd0 | out: hFindFile=0x5d7cd0) returned 1 [0211.215] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0211.215] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0211.215] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0211.215] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData", lpFilePart=0x0) returned 0x5c [0211.215] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\", lpFilePart=0x0) returned 0x5d [0211.215] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d78b0 [0211.216] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0211.216] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0211.216] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0211.216] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0211.216] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0211.216] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0211.216] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0211.216] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData", lpFilePart=0x0) returned 0x5c [0211.216] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\", lpFilePart=0x0) returned 0x5d [0211.216] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7370 [0211.216] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0211.217] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0211.217] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0211.217] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0211.217] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0211.217] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0211.217] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0211.217] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB", lpFilePart=0x0) returned 0x67 [0211.217] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\", lpFilePart=0x0) returned 0x68 [0211.217] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d78b0 [0211.218] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0211.218] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0211.218] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0211.218] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0211.218] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0211.219] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0211.219] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0211.219] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0211.219] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0211.219] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0211.219] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0211.219] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0211.219] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0211.219] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0211.219] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0211.220] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0211.220] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0211.220] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0211.220] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB", lpFilePart=0x0) returned 0x67 [0211.220] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\", lpFilePart=0x0) returned 0x68 [0211.220] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d79d0 [0211.221] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0211.221] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0211.221] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0211.222] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0211.222] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0211.222] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0211.222] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0211.222] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0211.222] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0211.222] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0211.223] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0211.223] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0211.223] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0211.223] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0211.223] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0211.224] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0211.224] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0211.224] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb.chk", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb.chk", lpFilePart=0x0) returned 0x6f [0211.224] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0211.224] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb.chk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb.chk"), fInfoLevelId=0x0, lpFileInformation=0x2255278 | out: lpFileInformation=0x2255278*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ba4977a, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x7ba4977a, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x9d12106b, ftLastWriteTime.dwHighDateTime=0x1d3b04f, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0211.225] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0211.225] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb.chk", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb.chk", lpFilePart=0x0) returned 0x6f [0211.225] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0211.225] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb.chk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb.chk"), fInfoLevelId=0x0, lpFileInformation=0x2255400 | out: lpFileInformation=0x2255400*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ba4977a, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x7ba4977a, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x9d12106b, ftLastWriteTime.dwHighDateTime=0x1d3b04f, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0211.225] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0211.225] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb.chk", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb.chk", lpFilePart=0x0) returned 0x6f [0211.225] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0211.225] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb.chk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb.chk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0211.226] GetFileType (hFile=0x444) returned 0x1 [0211.226] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0211.226] GetFileType (hFile=0x444) returned 0x1 [0211.226] ReadFile (in: hFile=0x444, lpBuffer=0x2257840, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x2257840*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0211.271] CloseHandle (hObject=0x444) returned 1 [0211.271] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb.chk", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb.chk", lpFilePart=0x0) returned 0x6f [0211.271] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0211.271] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb.chk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb.chk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0211.271] GetFileType (hFile=0x444) returned 0x1 [0211.272] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0211.272] GetFileType (hFile=0x444) returned 0x1 [0211.272] WriteFile (in: hFile=0x444, lpBuffer=0x2255568*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x2255568*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0211.272] CloseHandle (hObject=0x444) returned 1 [0211.272] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb.chk", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb.chk", lpFilePart=0x0) returned 0x6f [0211.272] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb.chk.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb.chk.xuy", lpFilePart=0x0) returned 0x73 [0211.272] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0211.272] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb.chk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb.chk"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ba4977a, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x7ba4977a, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x69c64371, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0211.272] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0211.272] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb.chk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb.chk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb.chk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb.chk.xuy")) returned 1 [0211.274] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb.log", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb.log", lpFilePart=0x0) returned 0x6f [0211.274] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0211.274] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb.log"), fInfoLevelId=0x0, lpFileInformation=0x22d3d08 | out: lpFileInformation=0x22d3d08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b9fd2e5, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0xd0bdc8aa, ftLastAccessTime.dwHighDateTime=0x1d2fc24, ftLastWriteTime.dwLowDateTime=0x9d12106b, ftLastWriteTime.dwHighDateTime=0x1d3b04f, nFileSizeHigh=0x0, nFileSizeLow=0x80000)) returned 1 [0211.274] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0211.274] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb.log", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb.log", lpFilePart=0x0) returned 0x6f [0211.274] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0211.274] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb.log"), fInfoLevelId=0x0, lpFileInformation=0x22d3e90 | out: lpFileInformation=0x22d3e90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b9fd2e5, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0xd0bdc8aa, ftLastAccessTime.dwHighDateTime=0x1d2fc24, ftLastWriteTime.dwLowDateTime=0x9d12106b, ftLastWriteTime.dwHighDateTime=0x1d3b04f, nFileSizeHigh=0x0, nFileSizeLow=0x80000)) returned 1 [0211.274] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0211.274] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb.log", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb.log", lpFilePart=0x0) returned 0x6f [0211.274] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0211.274] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0211.275] GetFileType (hFile=0x444) returned 0x1 [0211.275] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0211.275] GetFileType (hFile=0x444) returned 0x1 [0211.275] ReadFile (in: hFile=0x444, lpBuffer=0x22d62d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x22d62d0*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0211.306] CloseHandle (hObject=0x444) returned 1 [0211.306] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb.log", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb.log", lpFilePart=0x0) returned 0x6f [0211.306] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0211.306] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0211.307] GetFileType (hFile=0x444) returned 0x1 [0211.307] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0211.307] GetFileType (hFile=0x444) returned 0x1 [0211.307] WriteFile (in: hFile=0x444, lpBuffer=0x22d3ff8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x22d3ff8*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0211.307] CloseHandle (hObject=0x444) returned 1 [0211.307] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb.log", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb.log", lpFilePart=0x0) returned 0x6f [0211.307] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb.log.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb.log.xuy", lpFilePart=0x0) returned 0x73 [0211.307] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0211.307] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb.log"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b9fd2e5, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0xd0bdc8aa, ftLastAccessTime.dwHighDateTime=0x1d2fc24, ftLastWriteTime.dwLowDateTime=0x69cb084e, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x80000)) returned 1 [0211.307] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0211.307] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb.log"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb.log.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb.log.xuy")) returned 1 [0211.309] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb00037.log", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb00037.log", lpFilePart=0x0) returned 0x74 [0211.309] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0211.309] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb00037.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb00037.log"), fInfoLevelId=0x0, lpFileInformation=0x2352798 | out: lpFileInformation=0x2352798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b9fd2e5, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0xceb9cf9e, ftLastAccessTime.dwHighDateTime=0x1d2fc24, ftLastWriteTime.dwLowDateTime=0xcebe943a, ftLastWriteTime.dwHighDateTime=0x1d2fc24, nFileSizeHigh=0x0, nFileSizeLow=0x80000)) returned 1 [0211.312] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0211.312] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb00037.log", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb00037.log", lpFilePart=0x0) returned 0x74 [0211.312] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0211.312] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb00037.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb00037.log"), fInfoLevelId=0x0, lpFileInformation=0x2352940 | out: lpFileInformation=0x2352940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b9fd2e5, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0xceb9cf9e, ftLastAccessTime.dwHighDateTime=0x1d2fc24, ftLastWriteTime.dwLowDateTime=0xcebe943a, ftLastWriteTime.dwHighDateTime=0x1d2fc24, nFileSizeHigh=0x0, nFileSizeLow=0x80000)) returned 1 [0211.313] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0211.313] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb00037.log", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb00037.log", lpFilePart=0x0) returned 0x74 [0211.313] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0211.313] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb00037.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb00037.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0211.314] GetFileType (hFile=0x444) returned 0x1 [0211.314] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0211.314] GetFileType (hFile=0x444) returned 0x1 [0211.314] ReadFile (in: hFile=0x444, lpBuffer=0x2354dc0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x2354dc0*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0211.343] CloseHandle (hObject=0x444) returned 1 [0211.343] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb00037.log", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb00037.log", lpFilePart=0x0) returned 0x74 [0211.343] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0211.343] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb00037.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb00037.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0211.344] GetFileType (hFile=0x444) returned 0x1 [0211.344] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0211.344] GetFileType (hFile=0x444) returned 0x1 [0211.344] WriteFile (in: hFile=0x444, lpBuffer=0x2187b78*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x2187b78*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0211.344] CloseHandle (hObject=0x444) returned 1 [0211.344] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb00037.log", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb00037.log", lpFilePart=0x0) returned 0x74 [0211.344] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb00037.log.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb00037.log.xuy", lpFilePart=0x0) returned 0x78 [0211.344] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0211.344] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb00037.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb00037.log"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b9fd2e5, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0xceb9cf9e, ftLastAccessTime.dwHighDateTime=0x1d2fc24, ftLastWriteTime.dwLowDateTime=0x69d23094, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x80000)) returned 1 [0211.344] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0211.344] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb00037.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb00037.log"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb00037.log.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb00037.log.xuy")) returned 1 [0211.346] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb00038.log", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb00038.log", lpFilePart=0x0) returned 0x74 [0211.346] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0211.346] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb00038.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb00038.log"), fInfoLevelId=0x0, lpFileInformation=0x21d0a80 | out: lpFileInformation=0x21d0a80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b9fd2e5, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0xcbbfc9cc, ftLastAccessTime.dwHighDateTime=0x1d2fc24, ftLastWriteTime.dwLowDateTime=0xcec0f692, ftLastWriteTime.dwHighDateTime=0x1d2fc24, nFileSizeHigh=0x0, nFileSizeLow=0x80000)) returned 1 [0211.346] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0211.346] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb00038.log", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb00038.log", lpFilePart=0x0) returned 0x74 [0211.346] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0211.346] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb00038.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb00038.log"), fInfoLevelId=0x0, lpFileInformation=0x21d0c28 | out: lpFileInformation=0x21d0c28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b9fd2e5, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0xcbbfc9cc, ftLastAccessTime.dwHighDateTime=0x1d2fc24, ftLastWriteTime.dwLowDateTime=0xcec0f692, ftLastWriteTime.dwHighDateTime=0x1d2fc24, nFileSizeHigh=0x0, nFileSizeLow=0x80000)) returned 1 [0211.346] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0211.346] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb00038.log", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb00038.log", lpFilePart=0x0) returned 0x74 [0211.346] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0211.346] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb00038.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb00038.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0211.347] GetFileType (hFile=0x444) returned 0x1 [0211.347] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0211.347] GetFileType (hFile=0x444) returned 0x1 [0211.347] ReadFile (in: hFile=0x444, lpBuffer=0x21d30a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x21d30a8*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0211.370] CloseHandle (hObject=0x444) returned 1 [0211.370] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb00038.log", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb00038.log", lpFilePart=0x0) returned 0x74 [0211.370] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0211.370] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb00038.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb00038.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0211.370] GetFileType (hFile=0x444) returned 0x1 [0211.370] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0211.370] GetFileType (hFile=0x444) returned 0x1 [0211.370] WriteFile (in: hFile=0x444, lpBuffer=0x21d0db0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x21d0db0*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0211.371] CloseHandle (hObject=0x444) returned 1 [0211.371] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb00038.log", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb00038.log", lpFilePart=0x0) returned 0x74 [0211.371] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb00038.log.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb00038.log.xuy", lpFilePart=0x0) returned 0x78 [0211.371] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0211.371] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb00038.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb00038.log"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b9fd2e5, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0xcbbfc9cc, ftLastAccessTime.dwHighDateTime=0x1d2fc24, ftLastWriteTime.dwLowDateTime=0x69d4916b, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x80000)) returned 1 [0211.371] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb00038.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb00038.log"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb00038.log.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb00038.log.xuy")) returned 1 [0211.372] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb00039.log", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb00039.log", lpFilePart=0x0) returned 0x74 [0211.373] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb00039.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb00039.log"), fInfoLevelId=0x0, lpFileInformation=0x224f5c0 | out: lpFileInformation=0x224f5c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b9fd2e5, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0xcebe943a, ftLastAccessTime.dwHighDateTime=0x1d2fc24, ftLastWriteTime.dwLowDateTime=0xcec358e8, ftLastWriteTime.dwHighDateTime=0x1d2fc24, nFileSizeHigh=0x0, nFileSizeLow=0x80000)) returned 1 [0211.373] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb00039.log", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb00039.log", lpFilePart=0x0) returned 0x74 [0211.373] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb00039.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb00039.log"), fInfoLevelId=0x0, lpFileInformation=0x224f768 | out: lpFileInformation=0x224f768*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b9fd2e5, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0xcebe943a, ftLastAccessTime.dwHighDateTime=0x1d2fc24, ftLastWriteTime.dwLowDateTime=0xcec358e8, ftLastWriteTime.dwHighDateTime=0x1d2fc24, nFileSizeHigh=0x0, nFileSizeLow=0x80000)) returned 1 [0211.373] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb00039.log", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb00039.log", lpFilePart=0x0) returned 0x74 [0211.373] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb00039.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb00039.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0211.374] GetFileType (hFile=0x444) returned 0x1 [0211.374] GetFileType (hFile=0x444) returned 0x1 [0211.374] ReadFile (in: hFile=0x444, lpBuffer=0x2251be8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x2251be8*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0211.395] CloseHandle (hObject=0x444) returned 1 [0211.396] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb00039.log", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb00039.log", lpFilePart=0x0) returned 0x74 [0211.396] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb00039.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb00039.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0211.396] GetFileType (hFile=0x444) returned 0x1 [0211.396] GetFileType (hFile=0x444) returned 0x1 [0211.396] WriteFile (in: hFile=0x444, lpBuffer=0x224f8f0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x224f8f0*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0211.396] CloseHandle (hObject=0x444) returned 1 [0211.396] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb00039.log", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb00039.log", lpFilePart=0x0) returned 0x74 [0211.396] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb00039.log.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb00039.log.xuy", lpFilePart=0x0) returned 0x78 [0211.396] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb00039.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb00039.log"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b9fd2e5, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0xcebe943a, ftLastAccessTime.dwHighDateTime=0x1d2fc24, ftLastWriteTime.dwLowDateTime=0x69d95546, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x80000)) returned 1 [0211.397] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb00039.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb00039.log"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb00039.log.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb00039.log.xuy")) returned 1 [0211.398] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb0003A.log", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb0003A.log", lpFilePart=0x0) returned 0x74 [0211.398] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb0003A.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb0003a.log"), fInfoLevelId=0x0, lpFileInformation=0x22ce100 | out: lpFileInformation=0x22ce100*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b9fd2e5, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0xcec0f692, ftLastAccessTime.dwHighDateTime=0x1d2fc24, ftLastWriteTime.dwLowDateTime=0xcec5bb53, ftLastWriteTime.dwHighDateTime=0x1d2fc24, nFileSizeHigh=0x0, nFileSizeLow=0x80000)) returned 1 [0211.398] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb0003A.log", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb0003A.log", lpFilePart=0x0) returned 0x74 [0211.398] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb0003A.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb0003a.log"), fInfoLevelId=0x0, lpFileInformation=0x22ce2a8 | out: lpFileInformation=0x22ce2a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b9fd2e5, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0xcec0f692, ftLastAccessTime.dwHighDateTime=0x1d2fc24, ftLastWriteTime.dwLowDateTime=0xcec5bb53, ftLastWriteTime.dwHighDateTime=0x1d2fc24, nFileSizeHigh=0x0, nFileSizeLow=0x80000)) returned 1 [0211.398] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb0003A.log", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb0003A.log", lpFilePart=0x0) returned 0x74 [0211.398] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb0003A.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb0003a.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0211.399] GetFileType (hFile=0x444) returned 0x1 [0211.399] GetFileType (hFile=0x444) returned 0x1 [0211.399] ReadFile (in: hFile=0x444, lpBuffer=0x22d0728, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x22d0728*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0211.433] CloseHandle (hObject=0x444) returned 1 [0211.434] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb0003A.log", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb0003A.log", lpFilePart=0x0) returned 0x74 [0211.434] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb0003A.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb0003a.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0211.434] GetFileType (hFile=0x444) returned 0x1 [0211.434] GetFileType (hFile=0x444) returned 0x1 [0211.434] WriteFile (in: hFile=0x444, lpBuffer=0x22ce430*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x22ce430*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0211.434] CloseHandle (hObject=0x444) returned 1 [0211.435] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb0003A.log", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb0003A.log", lpFilePart=0x0) returned 0x74 [0211.435] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb0003A.log.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb0003A.log.xuy", lpFilePart=0x0) returned 0x78 [0211.435] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb0003A.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb0003a.log"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b9fd2e5, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0xcec0f692, ftLastAccessTime.dwHighDateTime=0x1d2fc24, ftLastWriteTime.dwLowDateTime=0x69e07d44, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x80000)) returned 1 [0211.435] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb0003A.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb0003a.log"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb0003A.log.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb0003a.log.xuy")) returned 1 [0211.436] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb0003B.log", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb0003B.log", lpFilePart=0x0) returned 0x74 [0211.436] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb0003B.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb0003b.log"), fInfoLevelId=0x0, lpFileInformation=0x234cc40 | out: lpFileInformation=0x234cc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b9fd2e5, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0xcec358e8, ftLastAccessTime.dwHighDateTime=0x1d2fc24, ftLastWriteTime.dwLowDateTime=0xd0bd5353, ftLastWriteTime.dwHighDateTime=0x1d2fc24, nFileSizeHigh=0x0, nFileSizeLow=0x80000)) returned 1 [0211.436] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb0003B.log", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb0003B.log", lpFilePart=0x0) returned 0x74 [0211.436] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb0003B.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb0003b.log"), fInfoLevelId=0x0, lpFileInformation=0x234cde8 | out: lpFileInformation=0x234cde8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b9fd2e5, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0xcec358e8, ftLastAccessTime.dwHighDateTime=0x1d2fc24, ftLastWriteTime.dwLowDateTime=0xd0bd5353, ftLastWriteTime.dwHighDateTime=0x1d2fc24, nFileSizeHigh=0x0, nFileSizeLow=0x80000)) returned 1 [0211.436] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb0003B.log", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb0003B.log", lpFilePart=0x0) returned 0x74 [0211.436] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb0003B.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb0003b.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0211.437] GetFileType (hFile=0x444) returned 0x1 [0211.437] GetFileType (hFile=0x444) returned 0x1 [0211.437] ReadFile (in: hFile=0x444, lpBuffer=0x234f268, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x234f268*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0211.481] CloseHandle (hObject=0x444) returned 1 [0211.481] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb0003B.log", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb0003B.log", lpFilePart=0x0) returned 0x74 [0211.481] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb0003B.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb0003b.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0211.482] GetFileType (hFile=0x444) returned 0x1 [0211.482] GetFileType (hFile=0x444) returned 0x1 [0211.482] WriteFile (in: hFile=0x444, lpBuffer=0x2187b78*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x2187b78*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0211.482] CloseHandle (hObject=0x444) returned 1 [0211.482] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb0003B.log", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb0003B.log", lpFilePart=0x0) returned 0x74 [0211.482] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb0003B.log.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb0003B.log.xuy", lpFilePart=0x0) returned 0x78 [0211.482] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb0003B.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb0003b.log"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b9fd2e5, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0xcec358e8, ftLastAccessTime.dwHighDateTime=0x1d2fc24, ftLastWriteTime.dwLowDateTime=0x69e7a537, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x80000)) returned 1 [0211.482] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb0003B.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb0003b.log"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb0003B.log.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb0003b.log.xuy")) returned 1 [0211.484] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb0003C.log", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb0003C.log", lpFilePart=0x0) returned 0x74 [0211.485] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb0003C.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb0003c.log"), fInfoLevelId=0x0, lpFileInformation=0x21cb760 | out: lpFileInformation=0x21cb760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b9fd2e5, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0xcec5bb53, ftLastAccessTime.dwHighDateTime=0x1d2fc24, ftLastWriteTime.dwLowDateTime=0xeb250d74, ftLastWriteTime.dwHighDateTime=0x1d2fc24, nFileSizeHigh=0x0, nFileSizeLow=0x80000)) returned 1 [0211.485] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb0003C.log", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb0003C.log", lpFilePart=0x0) returned 0x74 [0211.485] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb0003C.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb0003c.log"), fInfoLevelId=0x0, lpFileInformation=0x21cb908 | out: lpFileInformation=0x21cb908*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b9fd2e5, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0xcec5bb53, ftLastAccessTime.dwHighDateTime=0x1d2fc24, ftLastWriteTime.dwLowDateTime=0xeb250d74, ftLastWriteTime.dwHighDateTime=0x1d2fc24, nFileSizeHigh=0x0, nFileSizeLow=0x80000)) returned 1 [0211.485] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb0003C.log", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb0003C.log", lpFilePart=0x0) returned 0x74 [0211.485] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb0003C.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb0003c.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0211.487] GetFileType (hFile=0x444) returned 0x1 [0211.487] GetFileType (hFile=0x444) returned 0x1 [0211.487] ReadFile (in: hFile=0x444, lpBuffer=0x21cdd88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x21cdd88*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0211.512] CloseHandle (hObject=0x444) returned 1 [0211.512] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb0003C.log", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb0003C.log", lpFilePart=0x0) returned 0x74 [0211.512] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb0003C.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb0003c.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0211.517] GetFileType (hFile=0x444) returned 0x1 [0211.517] GetFileType (hFile=0x444) returned 0x1 [0211.517] WriteFile (in: hFile=0x444, lpBuffer=0x21cba90*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x21cba90*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0211.517] CloseHandle (hObject=0x444) returned 1 [0211.517] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb0003C.log", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb0003C.log", lpFilePart=0x0) returned 0x74 [0211.518] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb0003C.log.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb0003C.log.xuy", lpFilePart=0x0) returned 0x78 [0211.518] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb0003C.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb0003c.log"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b9fd2e5, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0xcec5bb53, ftLastAccessTime.dwHighDateTime=0x1d2fc24, ftLastWriteTime.dwLowDateTime=0x69ec698a, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x80000)) returned 1 [0211.518] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb0003C.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb0003c.log"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb0003C.log.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb0003c.log.xuy")) returned 1 [0211.519] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edbres00001.jrs", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edbres00001.jrs", lpFilePart=0x0) returned 0x77 [0211.519] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edbres00001.jrs" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edbres00001.jrs"), fInfoLevelId=0x0, lpFileInformation=0x224a2a0 | out: lpFileInformation=0x224a2a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ba23525, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x7ba23525, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x7ba23525, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x80000)) returned 1 [0211.520] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edbres00001.jrs", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edbres00001.jrs", lpFilePart=0x0) returned 0x77 [0211.520] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edbres00001.jrs" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edbres00001.jrs"), fInfoLevelId=0x0, lpFileInformation=0x224a448 | out: lpFileInformation=0x224a448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ba23525, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x7ba23525, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x7ba23525, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x80000)) returned 1 [0211.520] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edbres00001.jrs", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edbres00001.jrs", lpFilePart=0x0) returned 0x77 [0211.520] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edbres00001.jrs" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edbres00001.jrs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0211.521] GetFileType (hFile=0x444) returned 0x1 [0211.521] GetFileType (hFile=0x444) returned 0x1 [0211.521] ReadFile (in: hFile=0x444, lpBuffer=0x224c8c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x224c8c8*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0211.536] CloseHandle (hObject=0x444) returned 1 [0211.536] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edbres00001.jrs", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edbres00001.jrs", lpFilePart=0x0) returned 0x77 [0211.536] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edbres00001.jrs" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edbres00001.jrs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0211.536] GetFileType (hFile=0x444) returned 0x1 [0211.536] GetFileType (hFile=0x444) returned 0x1 [0211.536] WriteFile (in: hFile=0x444, lpBuffer=0x224a5d0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x224a5d0*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0211.536] CloseHandle (hObject=0x444) returned 1 [0211.537] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edbres00001.jrs", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edbres00001.jrs", lpFilePart=0x0) returned 0x77 [0211.537] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edbres00001.jrs.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edbres00001.jrs.xuy", lpFilePart=0x0) returned 0x7b [0211.537] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edbres00001.jrs" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edbres00001.jrs"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ba23525, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x7ba23525, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x69eecbf2, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x80000)) returned 1 [0211.537] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edbres00001.jrs" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edbres00001.jrs"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edbres00001.jrs.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edbres00001.jrs.xuy")) returned 1 [0211.538] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edbres00002.jrs", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edbres00002.jrs", lpFilePart=0x0) returned 0x77 [0211.538] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edbres00002.jrs" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edbres00002.jrs"), fInfoLevelId=0x0, lpFileInformation=0x22c8de0 | out: lpFileInformation=0x22c8de0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ba23525, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x7ba23525, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x7ba4977a, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x80000)) returned 1 [0211.539] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edbres00002.jrs", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edbres00002.jrs", lpFilePart=0x0) returned 0x77 [0211.539] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edbres00002.jrs" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edbres00002.jrs"), fInfoLevelId=0x0, lpFileInformation=0x22c8f88 | out: lpFileInformation=0x22c8f88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ba23525, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x7ba23525, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x7ba4977a, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x80000)) returned 1 [0211.539] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edbres00002.jrs", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edbres00002.jrs", lpFilePart=0x0) returned 0x77 [0211.539] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edbres00002.jrs" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edbres00002.jrs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0211.540] GetFileType (hFile=0x444) returned 0x1 [0211.540] GetFileType (hFile=0x444) returned 0x1 [0211.540] ReadFile (in: hFile=0x444, lpBuffer=0x22cb408, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x22cb408*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0211.555] CloseHandle (hObject=0x444) returned 1 [0211.555] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edbres00002.jrs", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edbres00002.jrs", lpFilePart=0x0) returned 0x77 [0211.555] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edbres00002.jrs" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edbres00002.jrs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0211.556] GetFileType (hFile=0x444) returned 0x1 [0211.556] GetFileType (hFile=0x444) returned 0x1 [0211.556] WriteFile (in: hFile=0x444, lpBuffer=0x22c9110*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x22c9110*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0211.556] CloseHandle (hObject=0x444) returned 1 [0211.556] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edbres00002.jrs", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edbres00002.jrs", lpFilePart=0x0) returned 0x77 [0211.556] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edbres00002.jrs.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edbres00002.jrs.xuy", lpFilePart=0x0) returned 0x7b [0211.556] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edbres00002.jrs" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edbres00002.jrs"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ba23525, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x7ba23525, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x69f12e47, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x80000)) returned 1 [0211.556] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edbres00002.jrs" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edbres00002.jrs"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edbres00002.jrs.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edbres00002.jrs.xuy")) returned 1 [0211.558] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edbtmp.log", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edbtmp.log", lpFilePart=0x0) returned 0x72 [0211.558] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edbtmp.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edbtmp.log"), fInfoLevelId=0x0, lpFileInformation=0x2347920 | out: lpFileInformation=0x2347920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b9fd2e5, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0xcdf3945e, ftLastAccessTime.dwHighDateTime=0x1d2fc24, ftLastWriteTime.dwLowDateTime=0xcea4235a, ftLastWriteTime.dwHighDateTime=0x1d2fc24, nFileSizeHigh=0x0, nFileSizeLow=0x80000)) returned 1 [0211.559] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edbtmp.log", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edbtmp.log", lpFilePart=0x0) returned 0x72 [0211.559] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edbtmp.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edbtmp.log"), fInfoLevelId=0x0, lpFileInformation=0x2347ab8 | out: lpFileInformation=0x2347ab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b9fd2e5, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0xcdf3945e, ftLastAccessTime.dwHighDateTime=0x1d2fc24, ftLastWriteTime.dwLowDateTime=0xcea4235a, ftLastWriteTime.dwHighDateTime=0x1d2fc24, nFileSizeHigh=0x0, nFileSizeLow=0x80000)) returned 1 [0211.559] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edbtmp.log", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edbtmp.log", lpFilePart=0x0) returned 0x72 [0211.559] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edbtmp.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edbtmp.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0211.636] GetFileType (hFile=0x444) returned 0x1 [0211.636] GetFileType (hFile=0x444) returned 0x1 [0211.636] ReadFile (in: hFile=0x444, lpBuffer=0x2349f18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x2349f18*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0211.655] CloseHandle (hObject=0x444) returned 1 [0211.656] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edbtmp.log", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edbtmp.log", lpFilePart=0x0) returned 0x72 [0211.656] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edbtmp.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edbtmp.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0211.656] GetFileType (hFile=0x444) returned 0x1 [0211.656] GetFileType (hFile=0x444) returned 0x1 [0211.656] WriteFile (in: hFile=0x444, lpBuffer=0x2187b78*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x2187b78*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0211.656] CloseHandle (hObject=0x444) returned 1 [0211.656] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edbtmp.log", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edbtmp.log", lpFilePart=0x0) returned 0x72 [0211.656] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edbtmp.log.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edbtmp.log.xuy", lpFilePart=0x0) returned 0x76 [0211.656] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edbtmp.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edbtmp.log"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b9fd2e5, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0xcdf3945e, ftLastAccessTime.dwHighDateTime=0x1d2fc24, ftLastWriteTime.dwLowDateTime=0x6a01ddcf, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x80000)) returned 1 [0211.657] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edbtmp.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edbtmp.log"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edbtmp.log.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edbtmp.log.xuy")) returned 1 [0211.658] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\IndexedDB.edb", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\IndexedDB.edb", lpFilePart=0x0) returned 0x75 [0211.658] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\IndexedDB.edb" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\indexeddb.edb"), fInfoLevelId=0x0, lpFileInformation=0x21c63e8 | out: lpFileInformation=0x21c63e8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x7ba6fa81, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x7ba6fa81, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x9d0d4a80, ftLastWriteTime.dwHighDateTime=0x1d3b04f, nFileSizeHigh=0x0, nFileSizeLow=0xd80000)) returned 1 [0211.658] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\IndexedDB.edb", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\IndexedDB.edb", lpFilePart=0x0) returned 0x75 [0211.658] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\IndexedDB.edb" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\indexeddb.edb"), fInfoLevelId=0x0, lpFileInformation=0x21c6590 | out: lpFileInformation=0x21c6590*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x7ba6fa81, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x7ba6fa81, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x9d0d4a80, ftLastWriteTime.dwHighDateTime=0x1d3b04f, nFileSizeHigh=0x0, nFileSizeLow=0xd80000)) returned 1 [0211.658] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\IndexedDB.edb", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\IndexedDB.edb", lpFilePart=0x0) returned 0x75 [0211.659] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\IndexedDB.edb" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\indexeddb.edb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0211.659] GetFileType (hFile=0x444) returned 0x1 [0211.659] GetFileType (hFile=0x444) returned 0x1 [0211.660] ReadFile (in: hFile=0x444, lpBuffer=0x21c8a10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x21c8a10*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0211.673] CloseHandle (hObject=0x444) returned 1 [0211.674] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\IndexedDB.edb", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\IndexedDB.edb", lpFilePart=0x0) returned 0x75 [0211.674] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\IndexedDB.edb" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\indexeddb.edb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0211.674] GetFileType (hFile=0x444) returned 0x1 [0211.674] GetFileType (hFile=0x444) returned 0x1 [0211.674] WriteFile (in: hFile=0x444, lpBuffer=0x21c6718*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x21c6718*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0211.674] CloseHandle (hObject=0x444) returned 1 [0211.674] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\IndexedDB.edb", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\IndexedDB.edb", lpFilePart=0x0) returned 0x75 [0211.674] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\IndexedDB.edb.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\IndexedDB.edb.xuy", lpFilePart=0x0) returned 0x79 [0211.674] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\IndexedDB.edb" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\indexeddb.edb"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x7ba6fa81, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x7ba6fa81, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x6a0440cc, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xd80000)) returned 1 [0211.675] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\IndexedDB.edb" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\indexeddb.edb"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\IndexedDB.edb.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\indexeddb.edb.xuy")) returned 1 [0211.676] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\LocalCache", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\LocalCache", lpFilePart=0x0) returned 0x5f [0211.676] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\LocalCache\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\LocalCache\\", lpFilePart=0x0) returned 0x60 [0211.676] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\LocalCache\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7550 [0211.677] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0211.677] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0211.677] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0211.677] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\LocalCache", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\LocalCache", lpFilePart=0x0) returned 0x5f [0211.677] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\LocalCache\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\LocalCache\\", lpFilePart=0x0) returned 0x60 [0211.677] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\LocalCache\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7fd0 [0211.677] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0211.677] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0211.677] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0211.677] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\LocalState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\LocalState", lpFilePart=0x0) returned 0x5f [0211.677] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\LocalState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\LocalState\\", lpFilePart=0x0) returned 0x60 [0211.678] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\LocalState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7a90 [0211.678] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0211.678] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0211.678] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0211.678] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0211.678] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0211.678] FindClose (in: hFindFile=0x5d7a90 | out: hFindFile=0x5d7a90) returned 1 [0211.678] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\LocalState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\LocalState", lpFilePart=0x0) returned 0x5f [0211.678] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\LocalState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\LocalState\\", lpFilePart=0x0) returned 0x60 [0211.678] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\LocalState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7550 [0211.679] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0211.679] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0211.679] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0211.679] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0211.679] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0211.679] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0211.679] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\LocalState\\speech_onecorereg.bin", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\LocalState\\speech_onecorereg.bin", lpFilePart=0x0) returned 0x75 [0211.679] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\LocalState\\speech_onecorereg.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\localstate\\speech_onecorereg.bin"), fInfoLevelId=0x0, lpFileInformation=0x224a0c0 | out: lpFileInformation=0x224a0c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf46c033, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0x801a501a, ftLastAccessTime.dwHighDateTime=0x1d46680, ftLastWriteTime.dwLowDateTime=0x801a501a, ftLastWriteTime.dwHighDateTime=0x1d46680, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0211.679] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\LocalState\\speech_onecorereg.bin", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\LocalState\\speech_onecorereg.bin", lpFilePart=0x0) returned 0x75 [0211.679] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\LocalState\\speech_onecorereg.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\localstate\\speech_onecorereg.bin"), fInfoLevelId=0x0, lpFileInformation=0x224a278 | out: lpFileInformation=0x224a278*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf46c033, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0x801a501a, ftLastAccessTime.dwHighDateTime=0x1d46680, ftLastWriteTime.dwLowDateTime=0x801a501a, ftLastWriteTime.dwHighDateTime=0x1d46680, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0211.679] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\LocalState\\speech_onecorereg.bin", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\LocalState\\speech_onecorereg.bin", lpFilePart=0x0) returned 0x75 [0211.679] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\LocalState\\speech_onecorereg.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\localstate\\speech_onecorereg.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0211.681] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\LocalState\\speech_onecorereg.bin", nBufferLength=0x105, lpBuffer=0x3bbdf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\LocalState\\speech_onecorereg.bin", lpFilePart=0x0) returned 0x75 [0211.681] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\LocalState\\speech_onecorereg.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\localstate\\speech_onecorereg.bin"), fInfoLevelId=0x0, lpFileInformation=0x3bc370 | out: lpFileInformation=0x3bc370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf46c033, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0x801a501a, ftLastAccessTime.dwHighDateTime=0x1d46680, ftLastWriteTime.dwLowDateTime=0x801a501a, ftLastWriteTime.dwHighDateTime=0x1d46680, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0211.681] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\LocalState\\speech_onecorereg.bin", nBufferLength=0x105, lpBuffer=0x3bbe10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\LocalState\\speech_onecorereg.bin", lpFilePart=0x0) returned 0x75 [0211.681] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\LocalState\\speech_onecorereg.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\localstate\\speech_onecorereg.bin"), fInfoLevelId=0x0, lpFileInformation=0x224cf60 | out: lpFileInformation=0x224cf60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf46c033, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0x801a501a, ftLastAccessTime.dwHighDateTime=0x1d46680, ftLastWriteTime.dwLowDateTime=0x801a501a, ftLastWriteTime.dwHighDateTime=0x1d46680, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0211.681] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\LocalState\\speech_onecorereg.bin", nBufferLength=0x105, lpBuffer=0x3bbe10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\LocalState\\speech_onecorereg.bin", lpFilePart=0x0) returned 0x75 [0211.681] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\LocalState\\speech_onecorereg.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\localstate\\speech_onecorereg.bin"), fInfoLevelId=0x0, lpFileInformation=0x224d118 | out: lpFileInformation=0x224d118*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf46c033, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0x801a501a, ftLastAccessTime.dwHighDateTime=0x1d46680, ftLastWriteTime.dwLowDateTime=0x801a501a, ftLastWriteTime.dwHighDateTime=0x1d46680, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0211.681] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\LocalState\\speech_onecorereg.bin", nBufferLength=0x105, lpBuffer=0x3bbcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\LocalState\\speech_onecorereg.bin", lpFilePart=0x0) returned 0x75 [0211.681] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\LocalState\\speech_onecorereg.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\localstate\\speech_onecorereg.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0211.683] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8c20) returned 1 [0211.683] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\LocalState\\speech_onecorereg.bin.LOG1", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\LocalState\\speech_onecorereg.bin.LOG1", lpFilePart=0x0) returned 0x7a [0211.683] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0211.684] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\LocalState\\speech_onecorereg.bin.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\localstate\\speech_onecorereg.bin.log1"), fInfoLevelId=0x0, lpFileInformation=0x224fd68 | out: lpFileInformation=0x224fd68*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xcf46c033, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xcf46c033, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xcf46c033, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0211.684] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0211.684] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\LocalState\\speech_onecorereg.bin.LOG1", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\LocalState\\speech_onecorereg.bin.LOG1", lpFilePart=0x0) returned 0x7a [0211.684] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0211.684] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\LocalState\\speech_onecorereg.bin.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\localstate\\speech_onecorereg.bin.log1"), fInfoLevelId=0x0, lpFileInformation=0x224ff30 | out: lpFileInformation=0x224ff30*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xcf46c033, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xcf46c033, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xcf46c033, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0211.684] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0211.684] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\LocalState\\speech_onecorereg.bin.LOG1", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\LocalState\\speech_onecorereg.bin.LOG1", lpFilePart=0x0) returned 0x7a [0211.684] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0211.684] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\LocalState\\speech_onecorereg.bin.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\localstate\\speech_onecorereg.bin.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0211.687] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb170) returned 1 [0211.687] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\LocalState\\speech_onecorereg.bin.LOG1", nBufferLength=0x105, lpBuffer=0x3bbdf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\LocalState\\speech_onecorereg.bin.LOG1", lpFilePart=0x0) returned 0x7a [0211.687] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc290) returned 1 [0211.687] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\LocalState\\speech_onecorereg.bin.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\localstate\\speech_onecorereg.bin.log1"), fInfoLevelId=0x0, lpFileInformation=0x3bc370 | out: lpFileInformation=0x3bc370*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xcf46c033, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xcf46c033, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xcf46c033, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0211.687] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc250) returned 1 [0211.687] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\LocalState\\speech_onecorereg.bin.LOG1", nBufferLength=0x105, lpBuffer=0x3bbe10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\LocalState\\speech_onecorereg.bin.LOG1", lpFilePart=0x0) returned 0x7a [0211.687] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc290) returned 1 [0211.687] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\LocalState\\speech_onecorereg.bin.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\localstate\\speech_onecorereg.bin.log1"), fInfoLevelId=0x0, lpFileInformation=0x2252c50 | out: lpFileInformation=0x2252c50*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xcf46c033, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xcf46c033, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xcf46c033, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0211.688] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc250) returned 1 [0211.688] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\LocalState\\speech_onecorereg.bin.LOG1", nBufferLength=0x105, lpBuffer=0x3bbe10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\LocalState\\speech_onecorereg.bin.LOG1", lpFilePart=0x0) returned 0x7a [0211.688] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc290) returned 1 [0211.688] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\LocalState\\speech_onecorereg.bin.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\localstate\\speech_onecorereg.bin.log1"), fInfoLevelId=0x0, lpFileInformation=0x2252e18 | out: lpFileInformation=0x2252e18*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xcf46c033, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xcf46c033, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xcf46c033, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0211.688] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc250) returned 1 [0211.688] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\LocalState\\speech_onecorereg.bin.LOG1", nBufferLength=0x105, lpBuffer=0x3bbcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\LocalState\\speech_onecorereg.bin.LOG1", lpFilePart=0x0) returned 0x7a [0211.688] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0211.688] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\LocalState\\speech_onecorereg.bin.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\localstate\\speech_onecorereg.bin.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0211.689] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8c20) returned 1 [0211.690] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\LocalState\\speech_onecorereg.bin.LOG2", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\LocalState\\speech_onecorereg.bin.LOG2", lpFilePart=0x0) returned 0x7a [0211.690] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0211.690] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\LocalState\\speech_onecorereg.bin.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\localstate\\speech_onecorereg.bin.log2"), fInfoLevelId=0x0, lpFileInformation=0x2255a98 | out: lpFileInformation=0x2255a98*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xcf46c033, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xcf46c033, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xcf46c033, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0211.690] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0211.690] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\LocalState\\speech_onecorereg.bin.LOG2", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\LocalState\\speech_onecorereg.bin.LOG2", lpFilePart=0x0) returned 0x7a [0211.690] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0211.690] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\LocalState\\speech_onecorereg.bin.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\localstate\\speech_onecorereg.bin.log2"), fInfoLevelId=0x0, lpFileInformation=0x2255c60 | out: lpFileInformation=0x2255c60*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xcf46c033, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xcf46c033, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xcf46c033, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0211.690] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0211.690] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\LocalState\\speech_onecorereg.bin.LOG2", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\LocalState\\speech_onecorereg.bin.LOG2", lpFilePart=0x0) returned 0x7a [0211.690] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0211.690] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\LocalState\\speech_onecorereg.bin.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\localstate\\speech_onecorereg.bin.log2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0211.692] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb170) returned 1 [0211.692] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\LocalState\\speech_onecorereg.bin.LOG2", nBufferLength=0x105, lpBuffer=0x3bbdf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\LocalState\\speech_onecorereg.bin.LOG2", lpFilePart=0x0) returned 0x7a [0211.692] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc290) returned 1 [0211.692] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\LocalState\\speech_onecorereg.bin.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\localstate\\speech_onecorereg.bin.log2"), fInfoLevelId=0x0, lpFileInformation=0x3bc370 | out: lpFileInformation=0x3bc370*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xcf46c033, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xcf46c033, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xcf46c033, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0211.692] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc250) returned 1 [0211.692] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\LocalState\\speech_onecorereg.bin.LOG2", nBufferLength=0x105, lpBuffer=0x3bbe10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\LocalState\\speech_onecorereg.bin.LOG2", lpFilePart=0x0) returned 0x7a [0211.692] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc290) returned 1 [0211.692] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\LocalState\\speech_onecorereg.bin.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\localstate\\speech_onecorereg.bin.log2"), fInfoLevelId=0x0, lpFileInformation=0x2258980 | out: lpFileInformation=0x2258980*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xcf46c033, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xcf46c033, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xcf46c033, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0211.692] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc250) returned 1 [0211.692] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\LocalState\\speech_onecorereg.bin.LOG2", nBufferLength=0x105, lpBuffer=0x3bbe10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\LocalState\\speech_onecorereg.bin.LOG2", lpFilePart=0x0) returned 0x7a [0211.692] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc290) returned 1 [0211.692] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\LocalState\\speech_onecorereg.bin.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\localstate\\speech_onecorereg.bin.log2"), fInfoLevelId=0x0, lpFileInformation=0x2258b48 | out: lpFileInformation=0x2258b48*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xcf46c033, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xcf46c033, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xcf46c033, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0211.692] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc250) returned 1 [0211.692] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\LocalState\\speech_onecorereg.bin.LOG2", nBufferLength=0x105, lpBuffer=0x3bbcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\LocalState\\speech_onecorereg.bin.LOG2", lpFilePart=0x0) returned 0x7a [0211.692] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0211.693] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\LocalState\\speech_onecorereg.bin.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\localstate\\speech_onecorereg.bin.log2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0211.694] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8c20) returned 1 [0211.694] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0211.695] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy", lpFilePart=0x0) returned 0x96 [0211.695] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\", lpFilePart=0x0) returned 0x97 [0211.695] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d81b0 [0211.695] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0211.695] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0211.695] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0211.695] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0211.695] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0211.695] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0211.695] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0211.695] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy", lpFilePart=0x0) returned 0x96 [0211.695] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\", lpFilePart=0x0) returned 0x97 [0211.696] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d79d0 [0211.696] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0211.696] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0211.696] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0211.696] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0211.696] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0211.696] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0211.696] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0211.696] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\ActivationStore", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\ActivationStore", lpFilePart=0x0) returned 0xa6 [0211.696] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\", lpFilePart=0x0) returned 0xa7 [0211.696] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d79d0 [0211.696] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0211.697] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0211.697] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0211.697] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0211.697] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0211.697] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0211.697] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0211.697] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0211.697] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0211.697] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\ActivationStore", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\ActivationStore", lpFilePart=0x0) returned 0xa6 [0211.697] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\", lpFilePart=0x0) returned 0xa7 [0211.697] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7370 [0211.697] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0211.697] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0211.698] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0211.698] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0211.698] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0211.698] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0211.698] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0211.698] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0211.698] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xba [0211.698] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0211.698] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\microsoft.windows.cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat"), fInfoLevelId=0x0, lpFileInformation=0x22630e8 | out: lpFileInformation=0x22630e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb71f38ce, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xaeb6934e, ftLastAccessTime.dwHighDateTime=0x1d46683, ftLastWriteTime.dwLowDateTime=0xb75ad3a1, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x40000)) returned 1 [0211.698] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0211.698] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xba [0211.698] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0211.698] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\microsoft.windows.cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat"), fInfoLevelId=0x0, lpFileInformation=0x2263320 | out: lpFileInformation=0x2263320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb71f38ce, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xaeb6934e, ftLastAccessTime.dwHighDateTime=0x1d46683, ftLastWriteTime.dwLowDateTime=0xb75ad3a1, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x40000)) returned 1 [0211.698] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0211.698] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xba [0211.699] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0211.699] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\microsoft.windows.cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0211.700] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb100) returned 1 [0211.701] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3bbd80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xba [0211.701] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc220) returned 1 [0211.701] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\microsoft.windows.cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat"), fInfoLevelId=0x0, lpFileInformation=0x3bc300 | out: lpFileInformation=0x3bc300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb71f38ce, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xaeb6934e, ftLastAccessTime.dwHighDateTime=0x1d46683, ftLastWriteTime.dwLowDateTime=0xb75ad3a1, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x40000)) returned 1 [0211.701] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1e0) returned 1 [0211.701] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3bbda0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xba [0211.701] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc220) returned 1 [0211.701] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\microsoft.windows.cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat"), fInfoLevelId=0x0, lpFileInformation=0x2266470 | out: lpFileInformation=0x2266470*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb71f38ce, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xaeb6934e, ftLastAccessTime.dwHighDateTime=0x1d46683, ftLastWriteTime.dwLowDateTime=0xb75ad3a1, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x40000)) returned 1 [0211.701] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1e0) returned 1 [0211.701] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3bbda0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xba [0211.701] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc220) returned 1 [0211.701] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\microsoft.windows.cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat"), fInfoLevelId=0x0, lpFileInformation=0x22666a8 | out: lpFileInformation=0x22666a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb71f38ce, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xaeb6934e, ftLastAccessTime.dwHighDateTime=0x1d46683, ftLastWriteTime.dwLowDateTime=0xb75ad3a1, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x40000)) returned 1 [0211.701] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1e0) returned 1 [0211.701] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3bbc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xba [0211.701] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc120) returned 1 [0211.701] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\microsoft.windows.cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0211.703] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8bb0) returned 1 [0211.703] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xbf [0211.703] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0211.704] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\microsoft.windows.cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x22698e8 | out: lpFileInformation=0x22698e8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xb71f38ce, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb71f38ce, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xb71f38ce, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0211.704] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0211.704] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xbf [0211.704] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0211.704] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\microsoft.windows.cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log1"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0211.704] GetFileType (hFile=0x444) returned 0x1 [0211.704] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0211.704] GetFileType (hFile=0x444) returned 0x1 [0211.704] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x0 [0211.704] CloseHandle (hObject=0x444) returned 1 [0211.742] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xbf [0211.742] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0211.742] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\microsoft.windows.cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log1"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0211.743] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb070) returned 1 [0211.744] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3bbcf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xbf [0211.744] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0211.744] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\microsoft.windows.cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x3bc270 | out: lpFileInformation=0x3bc270*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xb71f38ce, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb71f38ce, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xb71f38ce, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0211.744] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc150) returned 1 [0211.744] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3bbd10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xbf [0211.744] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0211.744] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\microsoft.windows.cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x22e0dd0 | out: lpFileInformation=0x22e0dd0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xb71f38ce, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb71f38ce, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xb71f38ce, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0211.744] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc150) returned 1 [0211.744] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3bbb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xbf [0211.744] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc050) returned 1 [0211.744] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\microsoft.windows.cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log1"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0211.744] GetFileType (hFile=0x444) returned 0x1 [0211.744] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbfc0) returned 1 [0211.744] GetFileType (hFile=0x444) returned 0x1 [0211.744] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc1e8 | out: lpFileSizeHigh=0x3bc1e8*=0x0) returned 0x0 [0211.744] CloseHandle (hObject=0x444) returned 1 [0211.755] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3bbb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xbf [0211.755] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc050) returned 1 [0211.755] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\microsoft.windows.cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log1"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0211.757] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8ae0) returned 1 [0211.757] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xbf [0211.757] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0211.757] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\microsoft.windows.cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x2358148 | out: lpFileInformation=0x2358148*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xb71f38ce, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb71f38ce, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xb71f38ce, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0211.758] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0211.758] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xbf [0211.758] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0211.758] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\microsoft.windows.cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0211.758] GetFileType (hFile=0x444) returned 0x1 [0211.758] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0211.758] GetFileType (hFile=0x444) returned 0x1 [0211.758] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x0 [0211.758] CloseHandle (hObject=0x444) returned 1 [0211.771] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xbf [0211.771] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0211.771] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\microsoft.windows.cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0211.773] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb070) returned 1 [0211.773] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbcf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xbf [0211.773] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0211.773] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\microsoft.windows.cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x3bc270 | out: lpFileInformation=0x3bc270*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xb71f38ce, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb71f38ce, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xb71f38ce, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0211.773] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc150) returned 1 [0211.773] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbd10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xbf [0211.773] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0211.773] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\microsoft.windows.cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x21cc328 | out: lpFileInformation=0x21cc328*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xb71f38ce, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb71f38ce, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xb71f38ce, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0211.773] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc150) returned 1 [0211.774] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xbf [0211.774] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc050) returned 1 [0211.774] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\microsoft.windows.cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0211.774] GetFileType (hFile=0x444) returned 0x1 [0211.774] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbfc0) returned 1 [0211.774] GetFileType (hFile=0x444) returned 0x1 [0211.774] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc1e8 | out: lpFileSizeHigh=0x3bc1e8*=0x0) returned 0x0 [0211.774] CloseHandle (hObject=0x444) returned 1 [0211.815] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xbf [0211.815] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc050) returned 1 [0211.815] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\microsoft.windows.cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0211.817] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8ae0) returned 1 [0211.817] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0211.817] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\RoamingState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\RoamingState", lpFilePart=0x0) returned 0x61 [0211.817] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\RoamingState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\RoamingState\\", lpFilePart=0x0) returned 0x62 [0211.817] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\RoamingState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d79d0 [0211.818] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0211.818] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0211.818] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0211.818] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0211.818] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0211.818] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0211.818] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\RoamingState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\RoamingState", lpFilePart=0x0) returned 0x61 [0211.818] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\RoamingState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\RoamingState\\", lpFilePart=0x0) returned 0x62 [0211.818] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\RoamingState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7d90 [0211.818] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0211.818] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0211.819] FindClose (in: hFindFile=0x5d7d90 | out: hFindFile=0x5d7d90) returned 1 [0211.819] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0211.819] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0211.819] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0211.819] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Settings", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Settings", lpFilePart=0x0) returned 0x5d [0211.819] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Settings\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Settings\\", lpFilePart=0x0) returned 0x5e [0211.819] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Settings\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7670 [0211.819] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0211.819] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0211.819] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0211.819] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0211.819] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0211.820] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0211.820] FindClose (in: hFindFile=0x5d7670 | out: hFindFile=0x5d7670) returned 1 [0211.820] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0211.820] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0211.820] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0211.820] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Settings", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Settings", lpFilePart=0x0) returned 0x5d [0211.820] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Settings\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Settings\\", lpFilePart=0x0) returned 0x5e [0211.820] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Settings\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7e50 [0211.820] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0211.820] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0211.820] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0211.821] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0211.821] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0211.821] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0211.821] FindClose (in: hFindFile=0x5d7e50 | out: hFindFile=0x5d7e50) returned 1 [0211.821] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0211.821] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0211.821] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Settings\\roaming.lock", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Settings\\roaming.lock", lpFilePart=0x0) returned 0x6a [0211.821] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0211.821] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\settings\\roaming.lock"), fInfoLevelId=0x0, lpFileInformation=0x2248b30 | out: lpFileInformation=0x2248b30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6a5a0a3, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb6a5a0a3, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xb6a5a0a3, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0211.821] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0211.821] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Settings\\roaming.lock", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Settings\\roaming.lock", lpFilePart=0x0) returned 0x6a [0211.821] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0211.821] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\settings\\roaming.lock"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0211.821] GetFileType (hFile=0x444) returned 0x1 [0211.821] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0211.822] GetFileType (hFile=0x444) returned 0x1 [0211.822] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0x0 [0211.822] CloseHandle (hObject=0x444) returned 1 [0211.833] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Settings\\roaming.lock", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Settings\\roaming.lock", lpFilePart=0x0) returned 0x6a [0211.833] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0211.833] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\settings\\roaming.lock"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0211.834] GetFileType (hFile=0x444) returned 0x1 [0211.834] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0211.834] GetFileType (hFile=0x444) returned 0x1 [0211.834] WriteFile (in: hFile=0x444, lpBuffer=0x22bef98*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x3be628, lpOverlapped=0x0 | out: lpBuffer=0x22bef98*, lpNumberOfBytesWritten=0x3be628*=0x10, lpOverlapped=0x0) returned 1 [0211.835] CloseHandle (hObject=0x444) returned 1 [0211.835] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Settings\\roaming.lock", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Settings\\roaming.lock", lpFilePart=0x0) returned 0x6a [0211.835] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Settings\\roaming.lock.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Settings\\roaming.lock.xuy", lpFilePart=0x0) returned 0x6e [0211.835] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0211.835] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\settings\\roaming.lock"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6a5a0a3, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb6a5a0a3, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x6a1c17fd, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0211.835] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0211.835] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\settings\\roaming.lock"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Settings\\roaming.lock.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\settings\\roaming.lock.xuy")) returned 1 [0211.837] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Settings\\settings.dat", lpFilePart=0x0) returned 0x6a [0211.837] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0211.837] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x22c02d8 | out: lpFileInformation=0x22c02d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6a5a0a3, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0x803227aa, ftLastAccessTime.dwHighDateTime=0x1d46680, ftLastWriteTime.dwLowDateTime=0x803227aa, ftLastWriteTime.dwHighDateTime=0x1d46680, nFileSizeHigh=0x0, nFileSizeLow=0x20000)) returned 1 [0211.837] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0211.837] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Settings\\settings.dat", lpFilePart=0x0) returned 0x6a [0211.837] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0211.837] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x22c0468 | out: lpFileInformation=0x22c0468*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6a5a0a3, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0x803227aa, ftLastAccessTime.dwHighDateTime=0x1d46680, ftLastWriteTime.dwLowDateTime=0x803227aa, ftLastWriteTime.dwHighDateTime=0x1d46680, nFileSizeHigh=0x0, nFileSizeLow=0x20000)) returned 1 [0211.837] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0211.837] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Settings\\settings.dat", lpFilePart=0x0) returned 0x6a [0211.837] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0211.837] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\settings\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0211.838] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb170) returned 1 [0211.839] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3bbdf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Settings\\settings.dat", lpFilePart=0x0) returned 0x6a [0211.839] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc290) returned 1 [0211.839] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x3bc370 | out: lpFileInformation=0x3bc370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6a5a0a3, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0x803227aa, ftLastAccessTime.dwHighDateTime=0x1d46680, ftLastWriteTime.dwLowDateTime=0x803227aa, ftLastWriteTime.dwHighDateTime=0x1d46680, nFileSizeHigh=0x0, nFileSizeLow=0x20000)) returned 1 [0211.839] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc250) returned 1 [0211.839] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3bbe10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Settings\\settings.dat", lpFilePart=0x0) returned 0x6a [0211.839] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc290) returned 1 [0211.839] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x22c34a8 | out: lpFileInformation=0x22c34a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6a5a0a3, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0x803227aa, ftLastAccessTime.dwHighDateTime=0x1d46680, ftLastWriteTime.dwLowDateTime=0x803227aa, ftLastWriteTime.dwHighDateTime=0x1d46680, nFileSizeHigh=0x0, nFileSizeLow=0x20000)) returned 1 [0211.839] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc250) returned 1 [0211.839] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3bbe10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Settings\\settings.dat", lpFilePart=0x0) returned 0x6a [0211.839] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc290) returned 1 [0211.839] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x22c3638 | out: lpFileInformation=0x22c3638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6a5a0a3, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0x803227aa, ftLastAccessTime.dwHighDateTime=0x1d46680, ftLastWriteTime.dwLowDateTime=0x803227aa, ftLastWriteTime.dwHighDateTime=0x1d46680, nFileSizeHigh=0x0, nFileSizeLow=0x20000)) returned 1 [0211.839] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc250) returned 1 [0211.839] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3bbcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Settings\\settings.dat", lpFilePart=0x0) returned 0x6a [0211.839] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0211.839] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\settings\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0211.846] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8c20) returned 1 [0211.847] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", lpFilePart=0x0) returned 0x6f [0211.847] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0211.847] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\settings\\settings.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x22c65f8 | out: lpFileInformation=0x22c65f8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc698acc4, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xc698acc4, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xc698acc4, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x6000)) returned 1 [0211.847] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0211.847] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", lpFilePart=0x0) returned 0x6f [0211.847] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0211.847] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\settings\\settings.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x22c6798 | out: lpFileInformation=0x22c6798*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc698acc4, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xc698acc4, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xc698acc4, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x6000)) returned 1 [0211.847] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0211.848] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", lpFilePart=0x0) returned 0x6f [0211.848] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0211.848] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\settings\\settings.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0211.849] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb170) returned 1 [0211.849] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3bbdf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", lpFilePart=0x0) returned 0x6f [0211.849] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc290) returned 1 [0211.849] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\settings\\settings.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x3bc370 | out: lpFileInformation=0x3bc370*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc698acc4, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xc698acc4, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xc698acc4, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x6000)) returned 1 [0211.849] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc250) returned 1 [0211.849] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3bbe10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", lpFilePart=0x0) returned 0x6f [0211.849] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc290) returned 1 [0211.849] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\settings\\settings.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x22c9808 | out: lpFileInformation=0x22c9808*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc698acc4, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xc698acc4, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xc698acc4, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x6000)) returned 1 [0211.849] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc250) returned 1 [0211.849] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3bbe10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", lpFilePart=0x0) returned 0x6f [0211.850] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc290) returned 1 [0211.850] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\settings\\settings.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x22c99a8 | out: lpFileInformation=0x22c99a8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc698acc4, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xc698acc4, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xc698acc4, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x6000)) returned 1 [0211.850] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc250) returned 1 [0211.850] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3bbcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", lpFilePart=0x0) returned 0x6f [0211.850] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0211.850] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\settings\\settings.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0211.851] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8c20) returned 1 [0211.852] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", lpFilePart=0x0) returned 0x6f [0211.852] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0211.852] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\settings\\settings.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x22cc990 | out: lpFileInformation=0x22cc990*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc698acc4, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xc698acc4, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xc698acc4, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x5000)) returned 1 [0211.852] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0211.852] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", lpFilePart=0x0) returned 0x6f [0211.852] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0211.852] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\settings\\settings.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x22ccb30 | out: lpFileInformation=0x22ccb30*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc698acc4, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xc698acc4, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xc698acc4, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x5000)) returned 1 [0211.852] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0211.852] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", lpFilePart=0x0) returned 0x6f [0211.852] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0211.852] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\settings\\settings.dat.log2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0211.853] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb170) returned 1 [0211.853] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbdf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", lpFilePart=0x0) returned 0x6f [0211.854] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc290) returned 1 [0211.854] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\settings\\settings.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x3bc370 | out: lpFileInformation=0x3bc370*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc698acc4, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xc698acc4, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xc698acc4, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x5000)) returned 1 [0211.854] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc250) returned 1 [0211.854] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbe10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", lpFilePart=0x0) returned 0x6f [0211.854] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc290) returned 1 [0211.854] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\settings\\settings.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x22cfba0 | out: lpFileInformation=0x22cfba0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc698acc4, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xc698acc4, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xc698acc4, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x5000)) returned 1 [0211.854] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc250) returned 1 [0211.854] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbe10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", lpFilePart=0x0) returned 0x6f [0211.854] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc290) returned 1 [0211.854] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\settings\\settings.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x22cfd40 | out: lpFileInformation=0x22cfd40*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc698acc4, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xc698acc4, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xc698acc4, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x5000)) returned 1 [0211.854] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc250) returned 1 [0211.854] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", lpFilePart=0x0) returned 0x6f [0211.854] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0211.854] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\settings\\settings.dat.log2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0211.855] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8c20) returned 1 [0211.856] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0211.856] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\SystemAppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\SystemAppData", lpFilePart=0x0) returned 0x62 [0211.856] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\SystemAppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\SystemAppData\\", lpFilePart=0x0) returned 0x63 [0211.856] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\SystemAppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7610 [0211.857] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0211.857] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0211.857] FindClose (in: hFindFile=0x5d7610 | out: hFindFile=0x5d7610) returned 1 [0211.857] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0211.857] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0211.857] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0211.857] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\SystemAppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\SystemAppData", lpFilePart=0x0) returned 0x62 [0211.857] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\SystemAppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\SystemAppData\\", lpFilePart=0x0) returned 0x63 [0211.857] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\SystemAppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7a30 [0211.857] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0211.857] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0211.857] FindClose (in: hFindFile=0x5d7a30 | out: hFindFile=0x5d7a30) returned 1 [0211.857] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0211.857] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0211.857] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0211.857] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\TempState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\TempState", lpFilePart=0x0) returned 0x5e [0211.857] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\TempState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\TempState\\", lpFilePart=0x0) returned 0x5f [0211.858] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\TempState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7eb0 [0211.858] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0211.858] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0211.858] FindClose (in: hFindFile=0x5d7eb0 | out: hFindFile=0x5d7eb0) returned 1 [0211.858] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0211.858] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0211.858] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0211.858] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\TempState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\TempState", lpFilePart=0x0) returned 0x5e [0211.858] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\TempState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\TempState\\", lpFilePart=0x0) returned 0x5f [0211.858] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\TempState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d78b0 [0211.858] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0211.859] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0211.859] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0211.859] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0211.859] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0211.859] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0211.859] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy", lpFilePart=0x0) returned 0x5d [0211.859] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\", lpFilePart=0x0) returned 0x5e [0211.859] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d7fd0 [0211.866] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0211.866] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0211.866] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0211.866] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0211.866] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0211.866] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0211.866] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0211.866] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0211.866] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0211.866] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0211.867] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0211.867] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0211.867] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0211.867] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0211.867] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0211.867] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy", lpFilePart=0x0) returned 0x5d [0211.867] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\", lpFilePart=0x0) returned 0x5e [0211.867] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d8090 [0211.868] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0211.868] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0211.868] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0211.868] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0211.869] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0211.869] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0211.869] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0211.869] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0211.869] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0211.869] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0211.869] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0211.869] FindClose (in: hFindFile=0x5d8090 | out: hFindFile=0x5d8090) returned 1 [0211.870] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0211.870] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0211.870] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0211.870] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\AC", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\AC", lpFilePart=0x0) returned 0x60 [0211.870] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\AC\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\AC\\", lpFilePart=0x0) returned 0x61 [0211.870] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\AC\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7a30 [0211.878] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0211.878] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0211.878] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0211.878] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0211.878] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0211.878] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0211.878] FindClose (in: hFindFile=0x5d7a30 | out: hFindFile=0x5d7a30) returned 1 [0211.879] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0211.879] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0211.879] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0211.879] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\AC", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\AC", lpFilePart=0x0) returned 0x60 [0211.879] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\AC\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\AC\\", lpFilePart=0x0) returned 0x61 [0211.879] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\AC\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d78b0 [0211.880] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0211.880] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0211.880] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0211.880] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0211.880] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0211.880] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0211.880] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0211.881] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0211.881] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0211.881] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0211.881] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\AC\\INetCache", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\AC\\INetCache", lpFilePart=0x0) returned 0x6a [0211.881] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\AC\\INetCache\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\AC\\INetCache\\", lpFilePart=0x0) returned 0x6b [0211.881] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\AC\\INetCache\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7d90 [0211.884] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0211.884] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0211.884] FindClose (in: hFindFile=0x5d7d90 | out: hFindFile=0x5d7d90) returned 1 [0211.884] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0211.884] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0211.884] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0211.884] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\AC\\INetCache", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\AC\\INetCache", lpFilePart=0x0) returned 0x6a [0211.884] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\AC\\INetCache\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\AC\\INetCache\\", lpFilePart=0x0) returned 0x6b [0211.884] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\AC\\INetCache\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d79d0 [0211.884] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0211.884] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0211.884] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0211.885] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0211.885] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0211.885] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0211.885] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\AC\\INetCookies", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\AC\\INetCookies", lpFilePart=0x0) returned 0x6c [0211.885] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\AC\\INetCookies\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\AC\\INetCookies\\", lpFilePart=0x0) returned 0x6d [0211.885] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\AC\\INetCookies\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d79d0 [0211.885] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0211.885] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0211.885] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0211.885] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0211.885] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0211.885] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0211.885] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\AC\\INetCookies", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\AC\\INetCookies", lpFilePart=0x0) returned 0x6c [0211.885] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\AC\\INetCookies\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\AC\\INetCookies\\", lpFilePart=0x0) returned 0x6d [0211.885] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\AC\\INetCookies\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7d30 [0211.885] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0211.886] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0211.886] FindClose (in: hFindFile=0x5d7d30 | out: hFindFile=0x5d7d30) returned 1 [0211.886] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0211.886] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0211.886] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0211.886] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\AC\\INetHistory", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\AC\\INetHistory", lpFilePart=0x0) returned 0x6c [0211.886] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\AC\\INetHistory\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\AC\\INetHistory\\", lpFilePart=0x0) returned 0x6d [0211.886] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\AC\\INetHistory\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7cd0 [0211.886] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0211.886] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0211.886] FindClose (in: hFindFile=0x5d7cd0 | out: hFindFile=0x5d7cd0) returned 1 [0211.886] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0211.886] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0211.886] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0211.886] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\AC\\INetHistory", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\AC\\INetHistory", lpFilePart=0x0) returned 0x6c [0211.886] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\AC\\INetHistory\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\AC\\INetHistory\\", lpFilePart=0x0) returned 0x6d [0211.886] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\AC\\INetHistory\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7d30 [0211.887] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0211.887] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0211.887] FindClose (in: hFindFile=0x5d7d30 | out: hFindFile=0x5d7d30) returned 1 [0211.887] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0211.887] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0211.887] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0211.887] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\AC\\Temp", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\AC\\Temp", lpFilePart=0x0) returned 0x65 [0211.887] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\AC\\Temp\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\AC\\Temp\\", lpFilePart=0x0) returned 0x66 [0211.887] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\AC\\Temp\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d78b0 [0211.888] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0211.888] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0211.888] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0211.888] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0211.888] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0211.888] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0211.888] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\AC\\Temp", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\AC\\Temp", lpFilePart=0x0) returned 0x65 [0211.888] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\AC\\Temp\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\AC\\Temp\\", lpFilePart=0x0) returned 0x66 [0211.888] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\AC\\Temp\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d79d0 [0211.888] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0211.888] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0211.888] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0211.888] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0211.888] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0211.888] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0211.888] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\AppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\AppData", lpFilePart=0x0) returned 0x65 [0211.889] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\AppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\AppData\\", lpFilePart=0x0) returned 0x66 [0211.889] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\AppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d81b0 [0211.889] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0211.889] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0211.889] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0211.889] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0211.889] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0211.889] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0211.889] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\AppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\AppData", lpFilePart=0x0) returned 0x65 [0211.889] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\AppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\AppData\\", lpFilePart=0x0) returned 0x66 [0211.889] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\AppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7af0 [0211.889] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0211.889] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0211.890] FindClose (in: hFindFile=0x5d7af0 | out: hFindFile=0x5d7af0) returned 1 [0211.890] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0211.890] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0211.890] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0211.890] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\LocalCache", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\LocalCache", lpFilePart=0x0) returned 0x68 [0211.890] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\LocalCache\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\LocalCache\\", lpFilePart=0x0) returned 0x69 [0211.890] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\LocalCache\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7f10 [0211.896] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0211.896] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0211.896] FindClose (in: hFindFile=0x5d7f10 | out: hFindFile=0x5d7f10) returned 1 [0211.896] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0211.896] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0211.896] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0211.896] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\LocalCache", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\LocalCache", lpFilePart=0x0) returned 0x68 [0211.896] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\LocalCache\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\LocalCache\\", lpFilePart=0x0) returned 0x69 [0211.896] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\LocalCache\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7670 [0211.896] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0211.897] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0211.897] FindClose (in: hFindFile=0x5d7670 | out: hFindFile=0x5d7670) returned 1 [0211.897] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0211.897] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0211.897] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0211.897] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\LocalState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\LocalState", lpFilePart=0x0) returned 0x68 [0211.897] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\LocalState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\LocalState\\", lpFilePart=0x0) returned 0x69 [0211.897] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\LocalState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7c70 [0211.897] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0211.897] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0211.897] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0211.897] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0211.897] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0211.897] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0211.897] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\LocalState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\LocalState", lpFilePart=0x0) returned 0x68 [0211.897] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\LocalState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\LocalState\\", lpFilePart=0x0) returned 0x69 [0211.898] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\LocalState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7cd0 [0211.898] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0211.898] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0211.898] FindClose (in: hFindFile=0x5d7cd0 | out: hFindFile=0x5d7cd0) returned 1 [0211.898] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0211.898] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0211.898] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0211.898] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Microsoft.Windows.ParentalControls_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Microsoft.Windows.ParentalControls_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy", lpFilePart=0x0) returned 0xb1 [0211.898] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Microsoft.Windows.ParentalControls_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Microsoft.Windows.ParentalControls_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\", lpFilePart=0x0) returned 0xb2 [0211.898] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Microsoft.Windows.ParentalControls_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d78b0 [0211.898] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0211.898] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0211.899] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0211.899] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0211.899] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0211.899] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0211.899] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0211.899] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Microsoft.Windows.ParentalControls_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Microsoft.Windows.ParentalControls_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy", lpFilePart=0x0) returned 0xb1 [0211.899] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Microsoft.Windows.ParentalControls_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Microsoft.Windows.ParentalControls_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\", lpFilePart=0x0) returned 0xb2 [0211.899] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Microsoft.Windows.ParentalControls_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d81b0 [0211.899] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0211.899] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0211.899] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0211.899] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0211.899] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0211.899] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0211.899] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0211.899] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Microsoft.Windows.ParentalControls_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Microsoft.Windows.ParentalControls_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore", lpFilePart=0x0) returned 0xc1 [0211.899] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Microsoft.Windows.ParentalControls_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Microsoft.Windows.ParentalControls_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\", lpFilePart=0x0) returned 0xc2 [0211.900] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Microsoft.Windows.ParentalControls_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7370 [0211.902] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0211.902] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0211.902] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0211.902] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0211.902] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0211.902] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0211.903] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0211.903] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0211.903] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0211.903] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Microsoft.Windows.ParentalControls_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Microsoft.Windows.ParentalControls_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore", lpFilePart=0x0) returned 0xc1 [0211.903] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Microsoft.Windows.ParentalControls_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Microsoft.Windows.ParentalControls_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\", lpFilePart=0x0) returned 0xc2 [0211.903] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Microsoft.Windows.ParentalControls_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7cd0 [0211.904] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0211.904] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0211.904] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0211.904] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0211.904] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0211.904] FindClose (in: hFindFile=0x5d7cd0 | out: hFindFile=0x5d7cd0) returned 1 [0211.905] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0211.905] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0211.905] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Microsoft.Windows.ParentalControls_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Microsoft.Windows.ParentalControls_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xd5 [0211.905] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0211.905] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Microsoft.Windows.ParentalControls_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.parentalcontrols_cw5n1h2txyewy\\microsoft.windows.parentalcontrols_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat"), fInfoLevelId=0x0, lpFileInformation=0x22f63c8 | out: lpFileInformation=0x22f63c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb81bf27f, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb833ca01, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xb833ca01, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x4000)) returned 1 [0211.906] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0211.906] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Microsoft.Windows.ParentalControls_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Microsoft.Windows.ParentalControls_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xd5 [0211.906] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0211.906] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Microsoft.Windows.ParentalControls_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.parentalcontrols_cw5n1h2txyewy\\microsoft.windows.parentalcontrols_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat"), fInfoLevelId=0x0, lpFileInformation=0x22f6638 | out: lpFileInformation=0x22f6638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb81bf27f, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb833ca01, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xb833ca01, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x4000)) returned 1 [0211.906] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0211.906] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Microsoft.Windows.ParentalControls_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Microsoft.Windows.ParentalControls_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xd5 [0211.906] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0211.906] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Microsoft.Windows.ParentalControls_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.parentalcontrols_cw5n1h2txyewy\\microsoft.windows.parentalcontrols_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0211.907] GetFileType (hFile=0x444) returned 0x1 [0211.907] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0211.907] GetFileType (hFile=0x444) returned 0x1 [0211.907] ReadFile (in: hFile=0x444, lpBuffer=0x22f8c48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x22f8c48*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0211.929] CloseHandle (hObject=0x444) returned 1 [0211.929] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Microsoft.Windows.ParentalControls_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Microsoft.Windows.ParentalControls_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xd5 [0211.929] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0211.929] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Microsoft.Windows.ParentalControls_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.parentalcontrols_cw5n1h2txyewy\\microsoft.windows.parentalcontrols_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0211.929] GetFileType (hFile=0x444) returned 0x1 [0211.929] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0211.929] GetFileType (hFile=0x444) returned 0x1 [0211.929] WriteFile (in: hFile=0x444, lpBuffer=0x22f6888*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x22f6888*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0211.930] CloseHandle (hObject=0x444) returned 1 [0211.930] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Microsoft.Windows.ParentalControls_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Microsoft.Windows.ParentalControls_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xd5 [0211.930] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Microsoft.Windows.ParentalControls_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Microsoft.Windows.ParentalControls_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.xuy", lpFilePart=0x0) returned 0xd9 [0211.930] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0211.930] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Microsoft.Windows.ParentalControls_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.parentalcontrols_cw5n1h2txyewy\\microsoft.windows.parentalcontrols_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb81bf27f, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb833ca01, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x6a2a6648, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x4000)) returned 1 [0211.930] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0211.930] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Microsoft.Windows.ParentalControls_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.parentalcontrols_cw5n1h2txyewy\\microsoft.windows.parentalcontrols_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Microsoft.Windows.ParentalControls_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.parentalcontrols_cw5n1h2txyewy\\microsoft.windows.parentalcontrols_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.xuy")) returned 1 [0211.932] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Microsoft.Windows.ParentalControls_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Microsoft.Windows.ParentalControls_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xda [0211.932] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0211.932] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Microsoft.Windows.ParentalControls_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.parentalcontrols_cw5n1h2txyewy\\microsoft.windows.parentalcontrols_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x2375468 | out: lpFileInformation=0x2375468*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xb81e54db, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb81e54db, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xb81e54db, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0211.935] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0211.935] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Microsoft.Windows.ParentalControls_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Microsoft.Windows.ParentalControls_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xda [0211.935] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0211.935] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Microsoft.Windows.ParentalControls_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.parentalcontrols_cw5n1h2txyewy\\microsoft.windows.parentalcontrols_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x23756f0 | out: lpFileInformation=0x23756f0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xb81e54db, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb81e54db, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xb81e54db, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0211.935] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0211.935] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Microsoft.Windows.ParentalControls_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Microsoft.Windows.ParentalControls_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xda [0211.936] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0211.936] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Microsoft.Windows.ParentalControls_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.parentalcontrols_cw5n1h2txyewy\\microsoft.windows.parentalcontrols_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0211.937] GetFileType (hFile=0x444) returned 0x1 [0211.937] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0211.937] GetFileType (hFile=0x444) returned 0x1 [0211.937] ReadFile (in: hFile=0x444, lpBuffer=0x2377d30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x2377d30*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0212.003] CloseHandle (hObject=0x444) returned 1 [0212.003] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Microsoft.Windows.ParentalControls_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Microsoft.Windows.ParentalControls_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xda [0212.003] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0212.003] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Microsoft.Windows.ParentalControls_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.parentalcontrols_cw5n1h2txyewy\\microsoft.windows.parentalcontrols_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0212.004] GetFileType (hFile=0x444) returned 0x1 [0212.004] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0212.004] GetFileType (hFile=0x444) returned 0x1 [0212.004] WriteFile (in: hFile=0x444, lpBuffer=0x2187c68*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x2187c68*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0212.004] CloseHandle (hObject=0x444) returned 1 [0212.004] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Microsoft.Windows.ParentalControls_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Microsoft.Windows.ParentalControls_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xda [0212.004] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Microsoft.Windows.ParentalControls_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Microsoft.Windows.ParentalControls_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1.xuy", lpFilePart=0x0) returned 0xde [0212.004] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0212.004] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Microsoft.Windows.ParentalControls_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.parentalcontrols_cw5n1h2txyewy\\microsoft.windows.parentalcontrols_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xb81e54db, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb81e54db, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x6a365362, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0212.005] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0212.005] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Microsoft.Windows.ParentalControls_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.parentalcontrols_cw5n1h2txyewy\\microsoft.windows.parentalcontrols_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Microsoft.Windows.ParentalControls_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.parentalcontrols_cw5n1h2txyewy\\microsoft.windows.parentalcontrols_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log1.xuy")) returned 1 [0212.006] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Microsoft.Windows.ParentalControls_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Microsoft.Windows.ParentalControls_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xda [0212.007] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0212.007] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Microsoft.Windows.ParentalControls_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.parentalcontrols_cw5n1h2txyewy\\microsoft.windows.parentalcontrols_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x21f7928 | out: lpFileInformation=0x21f7928*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xb81e54db, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb81e54db, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xb81e54db, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0212.007] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0212.007] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Microsoft.Windows.ParentalControls_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Microsoft.Windows.ParentalControls_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xda [0212.007] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0212.007] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Microsoft.Windows.ParentalControls_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.parentalcontrols_cw5n1h2txyewy\\microsoft.windows.parentalcontrols_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0212.007] GetFileType (hFile=0x444) returned 0x1 [0212.007] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0212.007] GetFileType (hFile=0x444) returned 0x1 [0212.007] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x0 [0212.007] CloseHandle (hObject=0x444) returned 1 [0212.026] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Microsoft.Windows.ParentalControls_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Microsoft.Windows.ParentalControls_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xda [0212.026] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0212.026] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Microsoft.Windows.ParentalControls_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.parentalcontrols_cw5n1h2txyewy\\microsoft.windows.parentalcontrols_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0212.028] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb070) returned 1 [0212.028] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Microsoft.Windows.ParentalControls_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbcf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Microsoft.Windows.ParentalControls_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xda [0212.028] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Microsoft.Windows.ParentalControls_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.parentalcontrols_cw5n1h2txyewy\\microsoft.windows.parentalcontrols_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x3bc270 | out: lpFileInformation=0x3bc270*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xb81e54db, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb81e54db, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xb81e54db, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0212.028] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Microsoft.Windows.ParentalControls_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbd10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Microsoft.Windows.ParentalControls_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xda [0212.028] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Microsoft.Windows.ParentalControls_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.parentalcontrols_cw5n1h2txyewy\\microsoft.windows.parentalcontrols_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x226ef98 | out: lpFileInformation=0x226ef98*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xb81e54db, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb81e54db, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xb81e54db, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0212.028] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Microsoft.Windows.ParentalControls_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Microsoft.Windows.ParentalControls_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xda [0212.029] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Microsoft.Windows.ParentalControls_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.parentalcontrols_cw5n1h2txyewy\\microsoft.windows.parentalcontrols_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0212.029] GetFileType (hFile=0x444) returned 0x1 [0212.029] GetFileType (hFile=0x444) returned 0x1 [0212.029] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc1e8 | out: lpFileSizeHigh=0x3bc1e8*=0x0) returned 0x0 [0212.029] CloseHandle (hObject=0x444) returned 1 [0212.039] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Microsoft.Windows.ParentalControls_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Microsoft.Windows.ParentalControls_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xda [0212.039] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Microsoft.Windows.ParentalControls_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.parentalcontrols_cw5n1h2txyewy\\microsoft.windows.parentalcontrols_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0212.041] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\RoamingState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\RoamingState", lpFilePart=0x0) returned 0x6a [0212.041] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\RoamingState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\RoamingState\\", lpFilePart=0x0) returned 0x6b [0212.041] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\RoamingState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d81b0 [0212.042] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0212.042] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0212.042] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0212.042] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\RoamingState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\RoamingState", lpFilePart=0x0) returned 0x6a [0212.042] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\RoamingState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\RoamingState\\", lpFilePart=0x0) returned 0x6b [0212.042] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\RoamingState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7d30 [0212.042] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0212.042] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0212.043] FindClose (in: hFindFile=0x5d7d30 | out: hFindFile=0x5d7d30) returned 1 [0212.043] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Settings", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Settings", lpFilePart=0x0) returned 0x66 [0212.043] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Settings\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Settings\\", lpFilePart=0x0) returned 0x67 [0212.043] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Settings\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7550 [0212.051] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0212.051] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0212.051] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0212.051] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0212.051] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0212.052] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0212.052] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0212.052] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Settings", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Settings", lpFilePart=0x0) returned 0x66 [0212.052] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Settings\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Settings\\", lpFilePart=0x0) returned 0x67 [0212.052] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Settings\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7610 [0212.053] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0212.053] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0212.053] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0212.054] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0212.054] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0212.054] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0212.054] FindClose (in: hFindFile=0x5d7610 | out: hFindFile=0x5d7610) returned 1 [0212.055] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Settings\\roaming.lock", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Settings\\roaming.lock", lpFilePart=0x0) returned 0x73 [0212.055] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.parentalcontrols_cw5n1h2txyewy\\settings\\roaming.lock"), fInfoLevelId=0x0, lpFileInformation=0x22ebe50 | out: lpFileInformation=0x22ebe50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7f5ccde, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb7f5ccde, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xb7f5ccde, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0212.055] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Settings\\roaming.lock", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Settings\\roaming.lock", lpFilePart=0x0) returned 0x73 [0212.055] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.parentalcontrols_cw5n1h2txyewy\\settings\\roaming.lock"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0212.056] GetFileType (hFile=0x444) returned 0x1 [0212.056] GetFileType (hFile=0x444) returned 0x1 [0212.056] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0x0 [0212.056] CloseHandle (hObject=0x444) returned 1 [0212.093] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Settings\\roaming.lock", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Settings\\roaming.lock", lpFilePart=0x0) returned 0x73 [0212.093] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.parentalcontrols_cw5n1h2txyewy\\settings\\roaming.lock"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0212.095] GetFileType (hFile=0x444) returned 0x1 [0212.095] GetFileType (hFile=0x444) returned 0x1 [0212.095] WriteFile (in: hFile=0x444, lpBuffer=0x23622e8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x3be628, lpOverlapped=0x0 | out: lpBuffer=0x23622e8*, lpNumberOfBytesWritten=0x3be628*=0x10, lpOverlapped=0x0) returned 1 [0212.095] CloseHandle (hObject=0x444) returned 1 [0212.095] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Settings\\roaming.lock", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Settings\\roaming.lock", lpFilePart=0x0) returned 0x73 [0212.096] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Settings\\roaming.lock.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Settings\\roaming.lock.xuy", lpFilePart=0x0) returned 0x77 [0212.096] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.parentalcontrols_cw5n1h2txyewy\\settings\\roaming.lock"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7f5ccde, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb7f5ccde, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x6a44a3a1, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0212.096] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.parentalcontrols_cw5n1h2txyewy\\settings\\roaming.lock"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Settings\\roaming.lock.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.parentalcontrols_cw5n1h2txyewy\\settings\\roaming.lock.xuy")) returned 1 [0212.097] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Settings\\settings.dat", lpFilePart=0x0) returned 0x73 [0212.097] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.parentalcontrols_cw5n1h2txyewy\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x2363658 | out: lpFileInformation=0x2363658*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7f5ccde, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0x71793621, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x71793621, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0212.097] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Settings\\settings.dat", lpFilePart=0x0) returned 0x73 [0212.098] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.parentalcontrols_cw5n1h2txyewy\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x23637f8 | out: lpFileInformation=0x23637f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7f5ccde, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0x71793621, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x71793621, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0212.098] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Settings\\settings.dat", lpFilePart=0x0) returned 0x73 [0212.098] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.parentalcontrols_cw5n1h2txyewy\\settings\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0212.099] GetFileType (hFile=0x444) returned 0x1 [0212.099] GetFileType (hFile=0x444) returned 0x1 [0212.099] ReadFile (in: hFile=0x444, lpBuffer=0x2365c68, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x2365c68*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0212.124] CloseHandle (hObject=0x444) returned 1 [0212.124] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Settings\\settings.dat", lpFilePart=0x0) returned 0x73 [0212.124] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0212.124] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.parentalcontrols_cw5n1h2txyewy\\settings\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0212.124] GetFileType (hFile=0x444) returned 0x1 [0212.124] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0212.124] GetFileType (hFile=0x444) returned 0x1 [0212.124] WriteFile (in: hFile=0x444, lpBuffer=0x2187348*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x2187348*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0212.125] CloseHandle (hObject=0x444) returned 1 [0212.125] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Settings\\settings.dat", lpFilePart=0x0) returned 0x73 [0212.125] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Settings\\settings.dat.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Settings\\settings.dat.xuy", lpFilePart=0x0) returned 0x77 [0212.125] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0212.125] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.parentalcontrols_cw5n1h2txyewy\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7f5ccde, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0x71793621, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x6a496682, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0212.125] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0212.125] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.parentalcontrols_cw5n1h2txyewy\\settings\\settings.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Settings\\settings.dat.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.parentalcontrols_cw5n1h2txyewy\\settings\\settings.dat.xuy")) returned 1 [0212.127] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", lpFilePart=0x0) returned 0x78 [0212.127] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0212.127] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.parentalcontrols_cw5n1h2txyewy\\settings\\settings.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x21e1810 | out: lpFileInformation=0x21e1810*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x7144c26e, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x7144c26e, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x7144c26e, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0212.129] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0212.129] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", lpFilePart=0x0) returned 0x78 [0212.129] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0212.129] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.parentalcontrols_cw5n1h2txyewy\\settings\\settings.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x21e19c8 | out: lpFileInformation=0x21e19c8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x7144c26e, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x7144c26e, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x7144c26e, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0212.129] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0212.129] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", lpFilePart=0x0) returned 0x78 [0212.129] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0212.129] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.parentalcontrols_cw5n1h2txyewy\\settings\\settings.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0212.131] GetFileType (hFile=0x444) returned 0x1 [0212.131] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0212.131] GetFileType (hFile=0x444) returned 0x1 [0212.131] ReadFile (in: hFile=0x444, lpBuffer=0x21e3e68, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x21e3e68*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0212.143] CloseHandle (hObject=0x444) returned 1 [0212.144] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", lpFilePart=0x0) returned 0x78 [0212.144] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0212.144] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.parentalcontrols_cw5n1h2txyewy\\settings\\settings.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0212.144] GetFileType (hFile=0x444) returned 0x1 [0212.144] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0212.144] GetFileType (hFile=0x444) returned 0x1 [0212.144] WriteFile (in: hFile=0x444, lpBuffer=0x21e1b60*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x21e1b60*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0212.144] CloseHandle (hObject=0x444) returned 1 [0212.145] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", lpFilePart=0x0) returned 0x78 [0212.145] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Settings\\settings.dat.LOG1.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Settings\\settings.dat.LOG1.xuy", lpFilePart=0x0) returned 0x7c [0212.145] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0212.145] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.parentalcontrols_cw5n1h2txyewy\\settings\\settings.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x7144c26e, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x7144c26e, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x6a4bc81c, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0212.145] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0212.145] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.parentalcontrols_cw5n1h2txyewy\\settings\\settings.dat.log1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Settings\\settings.dat.LOG1.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.parentalcontrols_cw5n1h2txyewy\\settings\\settings.dat.log1.xuy")) returned 1 [0212.146] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", lpFilePart=0x0) returned 0x78 [0212.146] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0212.147] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.parentalcontrols_cw5n1h2txyewy\\settings\\settings.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x22603a8 | out: lpFileInformation=0x22603a8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x7144c26e, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x7144c26e, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x7144c26e, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0212.147] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0212.147] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", lpFilePart=0x0) returned 0x78 [0212.147] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0212.147] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.parentalcontrols_cw5n1h2txyewy\\settings\\settings.dat.log2"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0212.147] GetFileType (hFile=0x444) returned 0x1 [0212.147] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0212.147] GetFileType (hFile=0x444) returned 0x1 [0212.147] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0x0 [0212.147] CloseHandle (hObject=0x444) returned 1 [0212.163] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", lpFilePart=0x0) returned 0x78 [0212.163] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0212.163] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.parentalcontrols_cw5n1h2txyewy\\settings\\settings.dat.log2"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0212.164] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb0e0) returned 1 [0212.165] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", lpFilePart=0x0) returned 0x78 [0212.165] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc200) returned 1 [0212.165] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.parentalcontrols_cw5n1h2txyewy\\settings\\settings.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x3bc2e0 | out: lpFileInformation=0x3bc2e0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x7144c26e, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x7144c26e, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x7144c26e, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0212.165] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1c0) returned 1 [0212.165] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbd80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", lpFilePart=0x0) returned 0x78 [0212.165] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc200) returned 1 [0212.165] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.parentalcontrols_cw5n1h2txyewy\\settings\\settings.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x22d74a0 | out: lpFileInformation=0x22d74a0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x7144c26e, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x7144c26e, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x7144c26e, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0212.165] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1c0) returned 1 [0212.165] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", lpFilePart=0x0) returned 0x78 [0212.165] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0c0) returned 1 [0212.165] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.parentalcontrols_cw5n1h2txyewy\\settings\\settings.dat.log2"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0212.165] GetFileType (hFile=0x444) returned 0x1 [0212.165] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc030) returned 1 [0212.165] GetFileType (hFile=0x444) returned 0x1 [0212.165] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc258 | out: lpFileSizeHigh=0x3bc258*=0x0) returned 0x0 [0212.165] CloseHandle (hObject=0x444) returned 1 [0212.222] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", lpFilePart=0x0) returned 0x78 [0212.222] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0c0) returned 1 [0212.222] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.parentalcontrols_cw5n1h2txyewy\\settings\\settings.dat.log2"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0212.223] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8b50) returned 1 [0212.224] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0212.224] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\SystemAppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\SystemAppData", lpFilePart=0x0) returned 0x6b [0212.224] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\SystemAppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\SystemAppData\\", lpFilePart=0x0) returned 0x6c [0212.224] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\SystemAppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7370 [0212.224] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0212.225] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0212.225] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0212.225] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0212.225] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0212.225] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0212.225] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\SystemAppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\SystemAppData", lpFilePart=0x0) returned 0x6b [0212.225] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\SystemAppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\SystemAppData\\", lpFilePart=0x0) returned 0x6c [0212.225] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\SystemAppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7370 [0212.225] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0212.225] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0212.226] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0212.226] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0212.226] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0212.226] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0212.226] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\TempState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\TempState", lpFilePart=0x0) returned 0x67 [0212.226] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\TempState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\TempState\\", lpFilePart=0x0) returned 0x68 [0212.226] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\TempState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7610 [0212.226] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0212.226] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0212.226] FindClose (in: hFindFile=0x5d7610 | out: hFindFile=0x5d7610) returned 1 [0212.226] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0212.226] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0212.226] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0212.226] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\TempState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\TempState", lpFilePart=0x0) returned 0x67 [0212.227] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\TempState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\TempState\\", lpFilePart=0x0) returned 0x68 [0212.227] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\TempState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d78b0 [0212.227] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0212.227] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0212.227] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0212.227] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0212.227] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0212.227] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0212.227] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe", lpFilePart=0x0) returned 0x53 [0212.227] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\", lpFilePart=0x0) returned 0x54 [0212.227] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d79d0 [0212.236] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0212.236] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0212.236] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0212.236] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0212.236] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0212.236] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0212.236] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0212.237] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0212.237] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0212.237] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0212.237] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0212.237] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0212.238] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0212.238] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0212.238] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0212.238] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe", lpFilePart=0x0) returned 0x53 [0212.238] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\", lpFilePart=0x0) returned 0x54 [0212.238] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d81b0 [0212.239] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0212.239] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0212.239] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0212.239] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0212.240] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0212.240] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0212.240] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0212.240] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0212.240] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0212.240] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0212.240] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0212.240] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0212.241] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0212.241] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0212.241] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0212.241] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\AC", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\AC", lpFilePart=0x0) returned 0x56 [0212.242] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\AC\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\AC\\", lpFilePart=0x0) returned 0x57 [0212.242] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\AC\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7a90 [0212.279] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0212.279] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0212.279] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0212.279] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0212.280] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0212.280] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0212.280] FindClose (in: hFindFile=0x5d7a90 | out: hFindFile=0x5d7a90) returned 1 [0212.281] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0212.281] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0212.281] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0212.281] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\AC", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\AC", lpFilePart=0x0) returned 0x56 [0212.281] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\AC\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\AC\\", lpFilePart=0x0) returned 0x57 [0212.281] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\AC\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d79d0 [0212.282] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0212.283] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0212.283] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0212.283] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0212.283] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0212.283] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0212.283] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0212.284] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0212.284] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0212.284] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0212.284] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\AC\\INetCache", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\AC\\INetCache", lpFilePart=0x0) returned 0x60 [0212.284] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\AC\\INetCache\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\AC\\INetCache\\", lpFilePart=0x0) returned 0x61 [0212.284] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\AC\\INetCache\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7fd0 [0212.285] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0212.285] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0212.285] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0212.285] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0212.285] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0212.285] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0212.286] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\AC\\INetCache", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\AC\\INetCache", lpFilePart=0x0) returned 0x60 [0212.286] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\AC\\INetCache\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\AC\\INetCache\\", lpFilePart=0x0) returned 0x61 [0212.286] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\AC\\INetCache\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7c70 [0212.286] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0212.286] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0212.286] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0212.286] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0212.286] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0212.286] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0212.286] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\AC\\INetCookies", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\AC\\INetCookies", lpFilePart=0x0) returned 0x62 [0212.286] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\AC\\INetCookies\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\AC\\INetCookies\\", lpFilePart=0x0) returned 0x63 [0212.286] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\AC\\INetCookies\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7d90 [0212.286] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0212.287] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0212.287] FindClose (in: hFindFile=0x5d7d90 | out: hFindFile=0x5d7d90) returned 1 [0212.287] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0212.287] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0212.287] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0212.287] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\AC\\INetCookies", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\AC\\INetCookies", lpFilePart=0x0) returned 0x62 [0212.287] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\AC\\INetCookies\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\AC\\INetCookies\\", lpFilePart=0x0) returned 0x63 [0212.287] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\AC\\INetCookies\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7eb0 [0212.287] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0212.287] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0212.287] FindClose (in: hFindFile=0x5d7eb0 | out: hFindFile=0x5d7eb0) returned 1 [0212.287] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0212.287] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0212.287] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0212.287] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\AC\\INetHistory", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\AC\\INetHistory", lpFilePart=0x0) returned 0x62 [0212.287] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\AC\\INetHistory\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\AC\\INetHistory\\", lpFilePart=0x0) returned 0x63 [0212.287] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\AC\\INetHistory\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d78b0 [0212.288] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0212.288] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0212.288] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0212.288] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0212.288] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0212.288] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0212.288] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\AC\\INetHistory", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\AC\\INetHistory", lpFilePart=0x0) returned 0x62 [0212.288] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\AC\\INetHistory\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\AC\\INetHistory\\", lpFilePart=0x0) returned 0x63 [0212.288] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\AC\\INetHistory\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7c70 [0212.288] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0212.288] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0212.288] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0212.288] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0212.289] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0212.289] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0212.289] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\AC\\Temp", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\AC\\Temp", lpFilePart=0x0) returned 0x5b [0212.289] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\AC\\Temp\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\AC\\Temp\\", lpFilePart=0x0) returned 0x5c [0212.289] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\AC\\Temp\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7550 [0212.294] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0212.294] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0212.294] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0212.294] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0212.294] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0212.294] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0212.294] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\AC\\Temp", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\AC\\Temp", lpFilePart=0x0) returned 0x5b [0212.294] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\AC\\Temp\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\AC\\Temp\\", lpFilePart=0x0) returned 0x5c [0212.294] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\AC\\Temp\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d78b0 [0212.295] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0212.295] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0212.295] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0212.295] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0212.295] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0212.295] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0212.295] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\AppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\AppData", lpFilePart=0x0) returned 0x5b [0212.295] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\AppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\AppData\\", lpFilePart=0x0) returned 0x5c [0212.295] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\AppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7550 [0212.295] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0212.295] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0212.296] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0212.296] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0212.296] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0212.296] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0212.296] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\AppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\AppData", lpFilePart=0x0) returned 0x5b [0212.296] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\AppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\AppData\\", lpFilePart=0x0) returned 0x5c [0212.296] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\AppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7a30 [0212.296] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0212.296] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0212.296] FindClose (in: hFindFile=0x5d7a30 | out: hFindFile=0x5d7a30) returned 1 [0212.296] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0212.296] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0212.296] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0212.296] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\LocalCache", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\LocalCache", lpFilePart=0x0) returned 0x5e [0212.296] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\LocalCache\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\LocalCache\\", lpFilePart=0x0) returned 0x5f [0212.296] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\LocalCache\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7eb0 [0212.297] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0212.297] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0212.297] FindClose (in: hFindFile=0x5d7eb0 | out: hFindFile=0x5d7eb0) returned 1 [0212.297] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0212.297] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0212.297] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0212.297] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\LocalCache", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\LocalCache", lpFilePart=0x0) returned 0x5e [0212.297] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\LocalCache\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\LocalCache\\", lpFilePart=0x0) returned 0x5f [0212.297] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\LocalCache\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d81b0 [0212.297] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0212.297] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0212.298] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0212.298] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0212.298] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0212.298] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0212.298] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\LocalState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\LocalState", lpFilePart=0x0) returned 0x5e [0212.298] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\LocalState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\LocalState\\", lpFilePart=0x0) returned 0x5f [0212.298] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\LocalState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7670 [0212.301] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0212.301] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0212.301] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0212.301] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0212.301] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0212.301] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0212.301] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0212.301] FindClose (in: hFindFile=0x5d7670 | out: hFindFile=0x5d7670) returned 1 [0212.302] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0212.302] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0212.302] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0212.302] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\LocalState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\LocalState", lpFilePart=0x0) returned 0x5e [0212.302] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\LocalState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\LocalState\\", lpFilePart=0x0) returned 0x5f [0212.302] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\LocalState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7fd0 [0212.303] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0212.303] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0212.304] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0212.304] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0212.304] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0212.304] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0212.304] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0212.304] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0212.305] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0212.305] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0212.305] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\LocalState\\MediaDb.v1.sqlite", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\LocalState\\MediaDb.v1.sqlite", lpFilePart=0x0) returned 0x70 [0212.305] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0212.305] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\LocalState\\MediaDb.v1.sqlite" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\localstate\\mediadb.v1.sqlite"), fInfoLevelId=0x0, lpFileInformation=0x2369e98 | out: lpFileInformation=0x2369e98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34bc48d6, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x34bc48d6, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x35c7510f, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0212.308] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0212.308] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\LocalState\\MediaDb.v1.sqlite", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\LocalState\\MediaDb.v1.sqlite", lpFilePart=0x0) returned 0x70 [0212.308] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0212.308] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\LocalState\\MediaDb.v1.sqlite" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\localstate\\mediadb.v1.sqlite"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0212.308] GetFileType (hFile=0x444) returned 0x1 [0212.308] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0212.308] GetFileType (hFile=0x444) returned 0x1 [0212.308] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0x1000 [0212.308] ReadFile (in: hFile=0x444, lpBuffer=0x236a1e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be718, lpOverlapped=0x0 | out: lpBuffer=0x236a1e8*, lpNumberOfBytesRead=0x3be718*=0x1000, lpOverlapped=0x0) returned 1 [0212.321] CloseHandle (hObject=0x444) returned 1 [0212.363] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\LocalState\\MediaDb.v1.sqlite", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\LocalState\\MediaDb.v1.sqlite", lpFilePart=0x0) returned 0x70 [0212.363] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0212.363] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\LocalState\\MediaDb.v1.sqlite" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\localstate\\mediadb.v1.sqlite"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0212.365] GetFileType (hFile=0x444) returned 0x1 [0212.365] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0212.365] GetFileType (hFile=0x444) returned 0x1 [0212.365] WriteFile (in: hFile=0x444, lpBuffer=0x21e3090*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x3be778, lpOverlapped=0x0 | out: lpBuffer=0x21e3090*, lpNumberOfBytesWritten=0x3be778*=0x1010, lpOverlapped=0x0) returned 1 [0212.366] CloseHandle (hObject=0x444) returned 1 [0212.366] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\LocalState\\MediaDb.v1.sqlite", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\LocalState\\MediaDb.v1.sqlite", lpFilePart=0x0) returned 0x70 [0212.366] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\LocalState\\MediaDb.v1.sqlite.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\LocalState\\MediaDb.v1.sqlite.xuy", lpFilePart=0x0) returned 0x74 [0212.366] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0212.366] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\LocalState\\MediaDb.v1.sqlite" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\localstate\\mediadb.v1.sqlite"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34bc48d6, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x34bc48d6, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x6a6d28a6, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x1010)) returned 1 [0212.366] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0212.366] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\LocalState\\MediaDb.v1.sqlite" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\localstate\\mediadb.v1.sqlite"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\LocalState\\MediaDb.v1.sqlite.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\localstate\\mediadb.v1.sqlite.xuy")) returned 1 [0212.367] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\LocalState\\MediaDb.v1.sqlite-shm", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\LocalState\\MediaDb.v1.sqlite-shm", lpFilePart=0x0) returned 0x74 [0212.367] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0212.367] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\LocalState\\MediaDb.v1.sqlite-shm" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\localstate\\mediadb.v1.sqlite-shm"), fInfoLevelId=0x0, lpFileInformation=0x21e45e0 | out: lpFileInformation=0x21e45e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35da6369, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x35da6369, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x51defad1, ftLastWriteTime.dwHighDateTime=0x1d41fda, nFileSizeHigh=0x0, nFileSizeLow=0x8000)) returned 1 [0212.369] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0212.369] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\LocalState\\MediaDb.v1.sqlite-shm", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\LocalState\\MediaDb.v1.sqlite-shm", lpFilePart=0x0) returned 0x74 [0212.369] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0212.369] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\LocalState\\MediaDb.v1.sqlite-shm" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\localstate\\mediadb.v1.sqlite-shm"), fInfoLevelId=0x0, lpFileInformation=0x21e4798 | out: lpFileInformation=0x21e4798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35da6369, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x35da6369, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x51defad1, ftLastWriteTime.dwHighDateTime=0x1d41fda, nFileSizeHigh=0x0, nFileSizeLow=0x8000)) returned 1 [0212.369] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0212.369] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\LocalState\\MediaDb.v1.sqlite-shm", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\LocalState\\MediaDb.v1.sqlite-shm", lpFilePart=0x0) returned 0x74 [0212.369] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0212.369] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\LocalState\\MediaDb.v1.sqlite-shm" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\localstate\\mediadb.v1.sqlite-shm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0212.371] GetFileType (hFile=0x444) returned 0x1 [0212.371] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0212.371] GetFileType (hFile=0x444) returned 0x1 [0212.371] ReadFile (in: hFile=0x444, lpBuffer=0x21e6c38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x21e6c38*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0212.394] CloseHandle (hObject=0x444) returned 1 [0212.394] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\LocalState\\MediaDb.v1.sqlite-shm", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\LocalState\\MediaDb.v1.sqlite-shm", lpFilePart=0x0) returned 0x74 [0212.394] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0212.395] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\LocalState\\MediaDb.v1.sqlite-shm" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\localstate\\mediadb.v1.sqlite-shm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0212.395] GetFileType (hFile=0x444) returned 0x1 [0212.395] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0212.395] GetFileType (hFile=0x444) returned 0x1 [0212.395] WriteFile (in: hFile=0x444, lpBuffer=0x21e4930*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x21e4930*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0212.395] CloseHandle (hObject=0x444) returned 1 [0212.395] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\LocalState\\MediaDb.v1.sqlite-shm", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\LocalState\\MediaDb.v1.sqlite-shm", lpFilePart=0x0) returned 0x74 [0212.396] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\LocalState\\MediaDb.v1.sqlite-shm.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\LocalState\\MediaDb.v1.sqlite-shm.xuy", lpFilePart=0x0) returned 0x78 [0212.396] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0212.396] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\LocalState\\MediaDb.v1.sqlite-shm" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\localstate\\mediadb.v1.sqlite-shm"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35da6369, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x35da6369, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x6a71ec44, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x8000)) returned 1 [0212.396] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0212.396] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\LocalState\\MediaDb.v1.sqlite-shm" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\localstate\\mediadb.v1.sqlite-shm"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\LocalState\\MediaDb.v1.sqlite-shm.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\localstate\\mediadb.v1.sqlite-shm.xuy")) returned 1 [0212.397] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\LocalState\\MediaDb.v1.sqlite-wal", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\LocalState\\MediaDb.v1.sqlite-wal", lpFilePart=0x0) returned 0x74 [0212.397] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0212.397] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\LocalState\\MediaDb.v1.sqlite-wal" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\localstate\\mediadb.v1.sqlite-wal"), fInfoLevelId=0x0, lpFileInformation=0x2263168 | out: lpFileInformation=0x2263168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35da6369, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x35da6369, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x58ebd0c5, ftLastWriteTime.dwHighDateTime=0x1d41fda, nFileSizeHigh=0x0, nFileSizeLow=0x65998)) returned 1 [0212.398] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0212.398] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\LocalState\\MediaDb.v1.sqlite-wal", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\LocalState\\MediaDb.v1.sqlite-wal", lpFilePart=0x0) returned 0x74 [0212.398] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0212.398] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\LocalState\\MediaDb.v1.sqlite-wal" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\localstate\\mediadb.v1.sqlite-wal"), fInfoLevelId=0x0, lpFileInformation=0x2263320 | out: lpFileInformation=0x2263320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35da6369, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x35da6369, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x58ebd0c5, ftLastWriteTime.dwHighDateTime=0x1d41fda, nFileSizeHigh=0x0, nFileSizeLow=0x65998)) returned 1 [0212.398] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0212.398] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\LocalState\\MediaDb.v1.sqlite-wal", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\LocalState\\MediaDb.v1.sqlite-wal", lpFilePart=0x0) returned 0x74 [0212.398] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0212.398] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\LocalState\\MediaDb.v1.sqlite-wal" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\localstate\\mediadb.v1.sqlite-wal"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0212.399] GetFileType (hFile=0x444) returned 0x1 [0212.399] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0212.399] GetFileType (hFile=0x444) returned 0x1 [0212.399] ReadFile (in: hFile=0x444, lpBuffer=0x22657c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x22657c0*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0212.411] CloseHandle (hObject=0x444) returned 1 [0212.414] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\LocalState\\MediaDb.v1.sqlite-wal", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\LocalState\\MediaDb.v1.sqlite-wal", lpFilePart=0x0) returned 0x74 [0212.414] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0212.414] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\LocalState\\MediaDb.v1.sqlite-wal" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\localstate\\mediadb.v1.sqlite-wal"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0212.414] GetFileType (hFile=0x444) returned 0x1 [0212.414] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0212.414] GetFileType (hFile=0x444) returned 0x1 [0212.414] WriteFile (in: hFile=0x444, lpBuffer=0x22634b8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x22634b8*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0212.414] CloseHandle (hObject=0x444) returned 1 [0212.414] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\LocalState\\MediaDb.v1.sqlite-wal", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\LocalState\\MediaDb.v1.sqlite-wal", lpFilePart=0x0) returned 0x74 [0212.414] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\LocalState\\MediaDb.v1.sqlite-wal.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\LocalState\\MediaDb.v1.sqlite-wal.xuy", lpFilePart=0x0) returned 0x78 [0212.414] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0212.414] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\LocalState\\MediaDb.v1.sqlite-wal" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\localstate\\mediadb.v1.sqlite-wal"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35da6369, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x35da6369, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x6a7451b1, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x65998)) returned 1 [0212.415] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0212.415] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\LocalState\\MediaDb.v1.sqlite-wal" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\localstate\\mediadb.v1.sqlite-wal"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\LocalState\\MediaDb.v1.sqlite-wal.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\localstate\\mediadb.v1.sqlite-wal.xuy")) returned 1 [0212.416] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\LocalState\\PhotosAppTracing_BGTask.etl", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\LocalState\\PhotosAppTracing_BGTask.etl", lpFilePart=0x0) returned 0x7a [0212.416] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0212.416] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\LocalState\\PhotosAppTracing_BGTask.etl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\localstate\\photosapptracing_bgtask.etl"), fInfoLevelId=0x0, lpFileInformation=0x22e1ce8 | out: lpFileInformation=0x22e1ce8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1a3ad7db, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x1a3ad7db, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x58dd820d, ftLastWriteTime.dwHighDateTime=0x1d41fda, nFileSizeHigh=0x0, nFileSizeLow=0x10000)) returned 1 [0212.416] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0212.416] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\LocalState\\PhotosAppTracing_BGTask.etl", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\LocalState\\PhotosAppTracing_BGTask.etl", lpFilePart=0x0) returned 0x7a [0212.416] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0212.416] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\LocalState\\PhotosAppTracing_BGTask.etl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\localstate\\photosapptracing_bgtask.etl"), fInfoLevelId=0x0, lpFileInformation=0x22e1eb0 | out: lpFileInformation=0x22e1eb0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1a3ad7db, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x1a3ad7db, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x58dd820d, ftLastWriteTime.dwHighDateTime=0x1d41fda, nFileSizeHigh=0x0, nFileSizeLow=0x10000)) returned 1 [0212.416] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0212.416] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\LocalState\\PhotosAppTracing_BGTask.etl", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\LocalState\\PhotosAppTracing_BGTask.etl", lpFilePart=0x0) returned 0x7a [0212.416] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0212.416] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\LocalState\\PhotosAppTracing_BGTask.etl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\localstate\\photosapptracing_bgtask.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0212.417] GetFileType (hFile=0x444) returned 0x1 [0212.417] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0212.417] GetFileType (hFile=0x444) returned 0x1 [0212.418] ReadFile (in: hFile=0x444, lpBuffer=0x22e4370, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x22e4370*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0212.442] CloseHandle (hObject=0x444) returned 1 [0212.442] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\LocalState\\PhotosAppTracing_BGTask.etl", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\LocalState\\PhotosAppTracing_BGTask.etl", lpFilePart=0x0) returned 0x7a [0212.442] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0212.442] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\LocalState\\PhotosAppTracing_BGTask.etl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\localstate\\photosapptracing_bgtask.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0212.442] GetFileType (hFile=0x444) returned 0x1 [0212.443] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0212.443] GetFileType (hFile=0x444) returned 0x1 [0212.443] WriteFile (in: hFile=0x444, lpBuffer=0x22e2058*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x22e2058*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0212.443] CloseHandle (hObject=0x444) returned 1 [0212.443] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\LocalState\\PhotosAppTracing_BGTask.etl", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\LocalState\\PhotosAppTracing_BGTask.etl", lpFilePart=0x0) returned 0x7a [0212.443] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\LocalState\\PhotosAppTracing_BGTask.etl.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\LocalState\\PhotosAppTracing_BGTask.etl.xuy", lpFilePart=0x0) returned 0x7e [0212.443] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0212.443] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\LocalState\\PhotosAppTracing_BGTask.etl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\localstate\\photosapptracing_bgtask.etl"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1a3ad7db, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x1a3ad7db, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x6a7913c4, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x10000)) returned 1 [0212.443] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0212.443] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\LocalState\\PhotosAppTracing_BGTask.etl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\localstate\\photosapptracing_bgtask.etl"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\LocalState\\PhotosAppTracing_BGTask.etl.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\localstate\\photosapptracing_bgtask.etl.xuy")) returned 1 [0212.444] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\LocalState\\PhotosAppTracing_BGTask.last.etl", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\LocalState\\PhotosAppTracing_BGTask.last.etl", lpFilePart=0x0) returned 0x7f [0212.444] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0212.445] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\LocalState\\PhotosAppTracing_BGTask.last.etl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\localstate\\photosapptracing_bgtask.last.etl"), fInfoLevelId=0x0, lpFileInformation=0x23608c0 | out: lpFileInformation=0x23608c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf536f66b, ftCreationTime.dwHighDateTime=0x1d2d40c, ftLastAccessTime.dwLowDateTime=0xf536f66b, ftLastAccessTime.dwHighDateTime=0x1d2d40c, ftLastWriteTime.dwLowDateTime=0xaec698ab, ftLastWriteTime.dwHighDateTime=0x1d33719, nFileSizeHigh=0x0, nFileSizeLow=0x10000)) returned 1 [0212.445] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0212.445] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\LocalState\\PhotosAppTracing_BGTask.last.etl", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\LocalState\\PhotosAppTracing_BGTask.last.etl", lpFilePart=0x0) returned 0x7f [0212.445] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0212.445] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\LocalState\\PhotosAppTracing_BGTask.last.etl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\localstate\\photosapptracing_bgtask.last.etl"), fInfoLevelId=0x0, lpFileInformation=0x2360aa0 | out: lpFileInformation=0x2360aa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf536f66b, ftCreationTime.dwHighDateTime=0x1d2d40c, ftLastAccessTime.dwLowDateTime=0xf536f66b, ftLastAccessTime.dwHighDateTime=0x1d2d40c, ftLastWriteTime.dwLowDateTime=0xaec698ab, ftLastWriteTime.dwHighDateTime=0x1d33719, nFileSizeHigh=0x0, nFileSizeLow=0x10000)) returned 1 [0212.445] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0212.445] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\LocalState\\PhotosAppTracing_BGTask.last.etl", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\LocalState\\PhotosAppTracing_BGTask.last.etl", lpFilePart=0x0) returned 0x7f [0212.445] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0212.445] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\LocalState\\PhotosAppTracing_BGTask.last.etl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\localstate\\photosapptracing_bgtask.last.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0212.446] GetFileType (hFile=0x444) returned 0x1 [0212.446] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0212.446] GetFileType (hFile=0x444) returned 0x1 [0212.446] ReadFile (in: hFile=0x444, lpBuffer=0x2362f90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x2362f90*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0212.486] CloseHandle (hObject=0x444) returned 1 [0212.486] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\LocalState\\PhotosAppTracing_BGTask.last.etl", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\LocalState\\PhotosAppTracing_BGTask.last.etl", lpFilePart=0x0) returned 0x7f [0212.486] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0212.486] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\LocalState\\PhotosAppTracing_BGTask.last.etl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\localstate\\photosapptracing_bgtask.last.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0212.486] GetFileType (hFile=0x444) returned 0x1 [0212.486] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0212.486] GetFileType (hFile=0x444) returned 0x1 [0212.486] WriteFile (in: hFile=0x444, lpBuffer=0x2187318*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x2187318*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0212.487] CloseHandle (hObject=0x444) returned 1 [0212.487] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\LocalState\\PhotosAppTracing_BGTask.last.etl", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\LocalState\\PhotosAppTracing_BGTask.last.etl", lpFilePart=0x0) returned 0x7f [0212.487] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\LocalState\\PhotosAppTracing_BGTask.last.etl.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\LocalState\\PhotosAppTracing_BGTask.last.etl.xuy", lpFilePart=0x0) returned 0x83 [0212.487] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0212.487] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\LocalState\\PhotosAppTracing_BGTask.last.etl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\localstate\\photosapptracing_bgtask.last.etl"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf536f66b, ftCreationTime.dwHighDateTime=0x1d2d40c, ftLastAccessTime.dwLowDateTime=0xf536f66b, ftLastAccessTime.dwHighDateTime=0x1d2d40c, ftLastWriteTime.dwLowDateTime=0x6a803ac6, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x10000)) returned 1 [0212.487] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0212.487] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\LocalState\\PhotosAppTracing_BGTask.last.etl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\localstate\\photosapptracing_bgtask.last.etl"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\LocalState\\PhotosAppTracing_BGTask.last.etl.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\localstate\\photosapptracing_bgtask.last.etl.xuy")) returned 1 [0212.488] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0212.488] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Microsoft.Windows.Photos_15.618.18170.0_x64__8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Microsoft.Windows.Photos_15.618.18170.0_x64__8wekyb3d8bbwe", lpFilePart=0x0) returned 0x8e [0212.488] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Microsoft.Windows.Photos_15.618.18170.0_x64__8wekyb3d8bbwe\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Microsoft.Windows.Photos_15.618.18170.0_x64__8wekyb3d8bbwe\\", lpFilePart=0x0) returned 0x8f [0212.489] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Microsoft.Windows.Photos_15.618.18170.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d78b0 [0212.489] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0212.489] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0212.489] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0212.489] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0212.489] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0212.489] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0212.489] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0212.489] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Microsoft.Windows.Photos_15.618.18170.0_x64__8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Microsoft.Windows.Photos_15.618.18170.0_x64__8wekyb3d8bbwe", lpFilePart=0x0) returned 0x8e [0212.489] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Microsoft.Windows.Photos_15.618.18170.0_x64__8wekyb3d8bbwe\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Microsoft.Windows.Photos_15.618.18170.0_x64__8wekyb3d8bbwe\\", lpFilePart=0x0) returned 0x8f [0212.489] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Microsoft.Windows.Photos_15.618.18170.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7eb0 [0212.490] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0212.490] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0212.490] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0212.490] FindClose (in: hFindFile=0x5d7eb0 | out: hFindFile=0x5d7eb0) returned 1 [0212.490] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0212.490] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0212.490] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0212.490] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Microsoft.Windows.Photos_15.618.18170.0_x64__8wekyb3d8bbwe\\ActivationStore", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Microsoft.Windows.Photos_15.618.18170.0_x64__8wekyb3d8bbwe\\ActivationStore", lpFilePart=0x0) returned 0x9e [0212.490] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Microsoft.Windows.Photos_15.618.18170.0_x64__8wekyb3d8bbwe\\ActivationStore\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Microsoft.Windows.Photos_15.618.18170.0_x64__8wekyb3d8bbwe\\ActivationStore\\", lpFilePart=0x0) returned 0x9f [0212.490] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Microsoft.Windows.Photos_15.618.18170.0_x64__8wekyb3d8bbwe\\ActivationStore\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7cd0 [0212.513] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0212.513] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0212.513] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0212.514] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0212.514] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0212.514] FindClose (in: hFindFile=0x5d7cd0 | out: hFindFile=0x5d7cd0) returned 1 [0212.515] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0212.515] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0212.515] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0212.515] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Microsoft.Windows.Photos_15.618.18170.0_x64__8wekyb3d8bbwe\\ActivationStore", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Microsoft.Windows.Photos_15.618.18170.0_x64__8wekyb3d8bbwe\\ActivationStore", lpFilePart=0x0) returned 0x9e [0212.515] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Microsoft.Windows.Photos_15.618.18170.0_x64__8wekyb3d8bbwe\\ActivationStore\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Microsoft.Windows.Photos_15.618.18170.0_x64__8wekyb3d8bbwe\\ActivationStore\\", lpFilePart=0x0) returned 0x9f [0212.515] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Microsoft.Windows.Photos_15.618.18170.0_x64__8wekyb3d8bbwe\\ActivationStore\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7fd0 [0212.516] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0212.516] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0212.516] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0212.517] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0212.517] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0212.517] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0212.518] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0212.518] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0212.518] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Microsoft.Windows.Photos_15.618.18170.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Microsoft.Windows.Photos_15.618.18170.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xb2 [0212.518] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0212.518] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Microsoft.Windows.Photos_15.618.18170.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\microsoft.windows.photos_15.618.18170.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), fInfoLevelId=0x0, lpFileInformation=0x21e8968 | out: lpFileInformation=0x21e8968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10ae472b, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x58dd820d, ftLastAccessTime.dwHighDateTime=0x1d41fda, ftLastWriteTime.dwLowDateTime=0x10e058d0, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x40000)) returned 1 [0212.519] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0212.519] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Microsoft.Windows.Photos_15.618.18170.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Microsoft.Windows.Photos_15.618.18170.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xb2 [0212.519] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0212.519] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Microsoft.Windows.Photos_15.618.18170.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\microsoft.windows.photos_15.618.18170.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), fInfoLevelId=0x0, lpFileInformation=0x21e8b90 | out: lpFileInformation=0x21e8b90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10ae472b, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x58dd820d, ftLastAccessTime.dwHighDateTime=0x1d41fda, ftLastWriteTime.dwLowDateTime=0x10e058d0, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x40000)) returned 1 [0212.519] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0212.519] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Microsoft.Windows.Photos_15.618.18170.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Microsoft.Windows.Photos_15.618.18170.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xb2 [0212.519] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0212.519] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Microsoft.Windows.Photos_15.618.18170.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\microsoft.windows.photos_15.618.18170.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0212.521] GetFileType (hFile=0x444) returned 0x1 [0212.521] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0212.521] GetFileType (hFile=0x444) returned 0x1 [0212.521] ReadFile (in: hFile=0x444, lpBuffer=0x21eb110, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x21eb110*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0212.535] CloseHandle (hObject=0x444) returned 1 [0212.535] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Microsoft.Windows.Photos_15.618.18170.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Microsoft.Windows.Photos_15.618.18170.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xb2 [0212.535] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0212.535] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Microsoft.Windows.Photos_15.618.18170.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\microsoft.windows.photos_15.618.18170.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0212.535] GetFileType (hFile=0x444) returned 0x1 [0212.535] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0212.535] GetFileType (hFile=0x444) returned 0x1 [0212.535] WriteFile (in: hFile=0x444, lpBuffer=0x21e8d98*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x21e8d98*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0212.536] CloseHandle (hObject=0x444) returned 1 [0212.536] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Microsoft.Windows.Photos_15.618.18170.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Microsoft.Windows.Photos_15.618.18170.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xb2 [0212.536] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Microsoft.Windows.Photos_15.618.18170.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Microsoft.Windows.Photos_15.618.18170.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.xuy", lpFilePart=0x0) returned 0xb6 [0212.536] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0212.536] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Microsoft.Windows.Photos_15.618.18170.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\microsoft.windows.photos_15.618.18170.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10ae472b, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x58dd820d, ftLastAccessTime.dwHighDateTime=0x1d41fda, ftLastWriteTime.dwLowDateTime=0x6a876140, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x40000)) returned 1 [0212.536] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0212.536] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Microsoft.Windows.Photos_15.618.18170.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\microsoft.windows.photos_15.618.18170.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Microsoft.Windows.Photos_15.618.18170.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\microsoft.windows.photos_15.618.18170.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.xuy")) returned 1 [0212.537] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Microsoft.Windows.Photos_15.618.18170.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Microsoft.Windows.Photos_15.618.18170.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xb7 [0212.537] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0212.537] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Microsoft.Windows.Photos_15.618.18170.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\microsoft.windows.photos_15.618.18170.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x2267810 | out: lpFileInformation=0x2267810*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x10ba32f4, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x10ba32f4, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x10ba32f4, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0212.539] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0212.539] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Microsoft.Windows.Photos_15.618.18170.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Microsoft.Windows.Photos_15.618.18170.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xb7 [0212.539] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0212.539] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Microsoft.Windows.Photos_15.618.18170.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\microsoft.windows.photos_15.618.18170.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0212.539] GetFileType (hFile=0x444) returned 0x1 [0212.539] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0212.539] GetFileType (hFile=0x444) returned 0x1 [0212.539] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x0 [0212.539] CloseHandle (hObject=0x444) returned 1 [0212.550] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Microsoft.Windows.Photos_15.618.18170.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Microsoft.Windows.Photos_15.618.18170.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xb7 [0212.551] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0212.551] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Microsoft.Windows.Photos_15.618.18170.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\microsoft.windows.photos_15.618.18170.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0212.552] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb070) returned 1 [0212.552] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Microsoft.Windows.Photos_15.618.18170.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3bbcf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Microsoft.Windows.Photos_15.618.18170.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xb7 [0212.552] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0212.552] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Microsoft.Windows.Photos_15.618.18170.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\microsoft.windows.photos_15.618.18170.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x3bc270 | out: lpFileInformation=0x3bc270*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x10ba32f4, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x10ba32f4, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x10ba32f4, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0212.553] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc150) returned 1 [0212.553] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Microsoft.Windows.Photos_15.618.18170.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3bbd10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Microsoft.Windows.Photos_15.618.18170.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xb7 [0212.553] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0212.553] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Microsoft.Windows.Photos_15.618.18170.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\microsoft.windows.photos_15.618.18170.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x22de880 | out: lpFileInformation=0x22de880*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x10ba32f4, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x10ba32f4, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x10ba32f4, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0212.553] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc150) returned 1 [0212.553] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Microsoft.Windows.Photos_15.618.18170.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3bbb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Microsoft.Windows.Photos_15.618.18170.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xb7 [0212.553] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc050) returned 1 [0212.553] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Microsoft.Windows.Photos_15.618.18170.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\microsoft.windows.photos_15.618.18170.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0212.553] GetFileType (hFile=0x444) returned 0x1 [0212.553] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbfc0) returned 1 [0212.553] GetFileType (hFile=0x444) returned 0x1 [0212.553] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc1e8 | out: lpFileSizeHigh=0x3bc1e8*=0x0) returned 0x0 [0212.553] CloseHandle (hObject=0x444) returned 1 [0212.647] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Microsoft.Windows.Photos_15.618.18170.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3bbb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Microsoft.Windows.Photos_15.618.18170.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xb7 [0212.648] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc050) returned 1 [0212.648] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Microsoft.Windows.Photos_15.618.18170.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\microsoft.windows.photos_15.618.18170.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0212.649] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8ae0) returned 1 [0212.650] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Microsoft.Windows.Photos_15.618.18170.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Microsoft.Windows.Photos_15.618.18170.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xb7 [0212.650] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0212.650] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Microsoft.Windows.Photos_15.618.18170.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\microsoft.windows.photos_15.618.18170.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x2355790 | out: lpFileInformation=0x2355790*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x10bc9550, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x10bc9550, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x10bc9550, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0212.650] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0212.650] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Microsoft.Windows.Photos_15.618.18170.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Microsoft.Windows.Photos_15.618.18170.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xb7 [0212.651] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0212.651] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Microsoft.Windows.Photos_15.618.18170.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\microsoft.windows.photos_15.618.18170.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0212.651] GetFileType (hFile=0x444) returned 0x1 [0212.651] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0212.651] GetFileType (hFile=0x444) returned 0x1 [0212.651] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x0 [0212.651] CloseHandle (hObject=0x444) returned 1 [0212.696] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Microsoft.Windows.Photos_15.618.18170.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Microsoft.Windows.Photos_15.618.18170.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xb7 [0212.696] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0212.696] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Microsoft.Windows.Photos_15.618.18170.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\microsoft.windows.photos_15.618.18170.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0212.697] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb070) returned 1 [0212.698] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Microsoft.Windows.Photos_15.618.18170.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbcf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Microsoft.Windows.Photos_15.618.18170.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xb7 [0212.698] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0212.698] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Microsoft.Windows.Photos_15.618.18170.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\microsoft.windows.photos_15.618.18170.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x3bc270 | out: lpFileInformation=0x3bc270*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x10bc9550, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x10bc9550, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x10bc9550, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0212.698] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc150) returned 1 [0212.698] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Microsoft.Windows.Photos_15.618.18170.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbd10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Microsoft.Windows.Photos_15.618.18170.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xb7 [0212.698] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0212.698] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Microsoft.Windows.Photos_15.618.18170.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\microsoft.windows.photos_15.618.18170.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x21c97f8 | out: lpFileInformation=0x21c97f8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x10bc9550, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x10bc9550, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x10bc9550, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0212.698] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc150) returned 1 [0212.698] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Microsoft.Windows.Photos_15.618.18170.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Microsoft.Windows.Photos_15.618.18170.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xb7 [0212.698] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc050) returned 1 [0212.698] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Microsoft.Windows.Photos_15.618.18170.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\microsoft.windows.photos_15.618.18170.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0212.698] GetFileType (hFile=0x444) returned 0x1 [0212.698] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbfc0) returned 1 [0212.699] GetFileType (hFile=0x444) returned 0x1 [0212.699] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc1e8 | out: lpFileSizeHigh=0x3bc1e8*=0x0) returned 0x0 [0212.699] CloseHandle (hObject=0x444) returned 1 [0212.710] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Microsoft.Windows.Photos_15.618.18170.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Microsoft.Windows.Photos_15.618.18170.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xb7 [0212.710] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc050) returned 1 [0212.710] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Microsoft.Windows.Photos_15.618.18170.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\microsoft.windows.photos_15.618.18170.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0212.711] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8ae0) returned 1 [0212.712] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0212.712] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\RoamingState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\RoamingState", lpFilePart=0x0) returned 0x60 [0212.712] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\RoamingState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\RoamingState\\", lpFilePart=0x0) returned 0x61 [0212.712] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\RoamingState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7fd0 [0212.712] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0212.713] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0212.713] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0212.713] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0212.713] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0212.713] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0212.713] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\RoamingState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\RoamingState", lpFilePart=0x0) returned 0x60 [0212.713] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\RoamingState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\RoamingState\\", lpFilePart=0x0) returned 0x61 [0212.713] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\RoamingState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7c70 [0212.713] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0212.713] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0212.713] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0212.713] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0212.713] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0212.713] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0212.713] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Settings", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Settings", lpFilePart=0x0) returned 0x5c [0212.713] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Settings\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Settings\\", lpFilePart=0x0) returned 0x5d [0212.714] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Settings\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7d90 [0212.716] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0212.716] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0212.716] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0212.717] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0212.717] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0212.717] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0212.717] FindClose (in: hFindFile=0x5d7d90 | out: hFindFile=0x5d7d90) returned 1 [0212.717] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0212.717] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0212.717] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0212.717] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Settings", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Settings", lpFilePart=0x0) returned 0x5c [0212.718] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Settings\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Settings\\", lpFilePart=0x0) returned 0x5d [0212.718] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Settings\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7eb0 [0212.718] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0212.718] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0212.718] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0212.719] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0212.719] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0212.719] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0212.719] FindClose (in: hFindFile=0x5d7eb0 | out: hFindFile=0x5d7eb0) returned 1 [0212.719] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0212.720] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0212.720] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Settings\\roaming.lock", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Settings\\roaming.lock", lpFilePart=0x0) returned 0x69 [0212.720] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0212.720] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\settings\\roaming.lock"), fInfoLevelId=0x0, lpFileInformation=0x2245b58 | out: lpFileInformation=0x2245b58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x103e386d, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x103e386d, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x103e386d, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0212.720] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0212.720] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Settings\\roaming.lock", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Settings\\roaming.lock", lpFilePart=0x0) returned 0x69 [0212.720] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0212.720] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\settings\\roaming.lock"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0212.721] GetFileType (hFile=0x444) returned 0x1 [0212.721] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0212.721] GetFileType (hFile=0x444) returned 0x1 [0212.721] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0x0 [0212.721] CloseHandle (hObject=0x444) returned 1 [0212.731] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0212.731] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\settings\\roaming.lock"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0212.733] GetFileType (hFile=0x444) returned 0x1 [0212.733] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0212.733] GetFileType (hFile=0x444) returned 0x1 [0212.733] WriteFile (in: hFile=0x444, lpBuffer=0x22bbfc0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x3be628, lpOverlapped=0x0 | out: lpBuffer=0x22bbfc0*, lpNumberOfBytesWritten=0x3be628*=0x10, lpOverlapped=0x0) returned 1 [0212.734] CloseHandle (hObject=0x444) returned 1 [0212.734] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0212.734] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\settings\\roaming.lock"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x103e386d, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x103e386d, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x6aa66003, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0212.734] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0212.734] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\settings\\roaming.lock"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Settings\\roaming.lock.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\settings\\roaming.lock.xuy")) returned 1 [0212.735] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0212.735] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x22bd300 | out: lpFileInformation=0x22bd300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x103bd623, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x5908729e, ftLastAccessTime.dwHighDateTime=0x1d41fda, ftLastWriteTime.dwLowDateTime=0x5908729e, ftLastWriteTime.dwHighDateTime=0x1d41fda, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0212.737] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0212.737] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0212.737] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x22bd490 | out: lpFileInformation=0x22bd490*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x103bd623, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x5908729e, ftLastAccessTime.dwHighDateTime=0x1d41fda, ftLastWriteTime.dwLowDateTime=0x5908729e, ftLastWriteTime.dwHighDateTime=0x1d41fda, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0212.738] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0212.738] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0212.738] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\settings\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0212.738] GetFileType (hFile=0x444) returned 0x1 [0212.738] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0212.738] GetFileType (hFile=0x444) returned 0x1 [0212.751] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0212.752] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\settings\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0212.752] GetFileType (hFile=0x444) returned 0x1 [0212.752] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0212.752] GetFileType (hFile=0x444) returned 0x1 [0212.753] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0212.753] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x103bd623, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x5908729e, ftLastAccessTime.dwHighDateTime=0x1d41fda, ftLastWriteTime.dwLowDateTime=0x6aa8c55f, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0212.753] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0212.753] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\settings\\settings.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Settings\\settings.dat.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\settings\\settings.dat.xuy")) returned 1 [0212.754] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0212.754] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\settings\\settings.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x233bd98 | out: lpFileInformation=0x233bd98*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1bf187e3, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x1bf187e3, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x1bf187e3, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0212.760] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0212.760] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0212.760] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\settings\\settings.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x233bf38 | out: lpFileInformation=0x233bf38*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1bf187e3, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x1bf187e3, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x1bf187e3, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0212.760] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0212.760] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0212.760] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\settings\\settings.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0212.761] GetFileType (hFile=0x444) returned 0x1 [0212.761] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0212.761] GetFileType (hFile=0x444) returned 0x1 [0212.761] ReadFile (in: hFile=0x444, lpBuffer=0x233e3a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x233e3a8*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0212.805] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0212.806] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\settings\\settings.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0212.806] GetFileType (hFile=0x444) returned 0x1 [0212.806] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0212.806] GetFileType (hFile=0x444) returned 0x1 [0212.806] WriteFile (in: hFile=0x444, lpBuffer=0x2187440*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x2187440*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0212.806] CloseHandle (hObject=0x444) returned 1 [0212.806] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0212.806] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\settings\\settings.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1bf187e3, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x1bf187e3, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x6aafe9fc, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0212.807] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0212.807] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\settings\\settings.dat.log1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Settings\\settings.dat.LOG1.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\settings\\settings.dat.log1.xuy")) returned 1 [0212.808] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0212.808] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\settings\\settings.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x21bd990 | out: lpFileInformation=0x21bd990*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1bf187e3, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x1bf187e3, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x1bf187e3, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0212.808] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0212.808] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0212.808] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\settings\\settings.dat.log2"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0212.809] GetFileType (hFile=0x444) returned 0x1 [0212.809] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0212.809] GetFileType (hFile=0x444) returned 0x1 [0212.809] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0x0 [0212.809] CloseHandle (hObject=0x444) returned 1 [0212.819] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0212.819] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\settings\\settings.dat.log2"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0212.821] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb0e0) returned 1 [0212.821] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Settings\\settings.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Settings\\settings.dat.LOG2", lpFilePart=0x0) returned 0x6e [0212.821] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc200) returned 1 [0212.821] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\settings\\settings.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x3bc2e0 | out: lpFileInformation=0x3bc2e0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1bf187e3, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x1bf187e3, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x1bf187e3, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0212.822] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1c0) returned 1 [0212.822] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Settings\\settings.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbd80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Settings\\settings.dat.LOG2", lpFilePart=0x0) returned 0x6e [0212.822] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc200) returned 1 [0212.822] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\settings\\settings.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x2234700 | out: lpFileInformation=0x2234700*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1bf187e3, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x1bf187e3, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x1bf187e3, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0212.822] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1c0) returned 1 [0212.822] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Settings\\settings.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Settings\\settings.dat.LOG2", lpFilePart=0x0) returned 0x6e [0212.822] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0c0) returned 1 [0212.822] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\settings\\settings.dat.log2"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0212.822] GetFileType (hFile=0x444) returned 0x1 [0212.822] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc030) returned 1 [0212.822] GetFileType (hFile=0x444) returned 0x1 [0212.822] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc258 | out: lpFileSizeHigh=0x3bc258*=0x0) returned 0x0 [0212.822] CloseHandle (hObject=0x444) returned 1 [0212.833] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Settings\\settings.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Settings\\settings.dat.LOG2", lpFilePart=0x0) returned 0x6e [0212.833] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0c0) returned 1 [0212.833] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\settings\\settings.dat.log2"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0212.834] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8b50) returned 1 [0212.835] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0212.835] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\SystemAppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\SystemAppData", lpFilePart=0x0) returned 0x61 [0212.835] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\SystemAppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\SystemAppData\\", lpFilePart=0x0) returned 0x62 [0212.835] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\SystemAppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d81b0 [0212.836] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0212.836] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0212.836] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0212.836] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0212.836] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0212.836] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\SystemAppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\SystemAppData", lpFilePart=0x0) returned 0x61 [0212.836] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\SystemAppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\SystemAppData\\", lpFilePart=0x0) returned 0x62 [0212.836] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\SystemAppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d81b0 [0212.836] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0212.836] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0212.836] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0212.837] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\TempState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\TempState", lpFilePart=0x0) returned 0x5d [0212.837] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\TempState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\TempState\\", lpFilePart=0x0) returned 0x5e [0212.837] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\TempState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d79d0 [0212.837] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0212.837] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0212.837] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0212.837] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\TempState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\TempState", lpFilePart=0x0) returned 0x5d [0212.837] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\TempState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\TempState\\", lpFilePart=0x0) returned 0x5e [0212.837] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\TempState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7a90 [0212.837] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0212.838] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0212.838] FindClose (in: hFindFile=0x5d7a90 | out: hFindFile=0x5d7a90) returned 1 [0212.838] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy", lpFilePart=0x0) returned 0x60 [0212.838] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\", lpFilePart=0x0) returned 0x61 [0212.838] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d7c70 [0212.838] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0212.838] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0212.838] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0212.838] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0212.839] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0212.839] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0212.839] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0212.839] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0212.839] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0212.839] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0212.839] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0212.840] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0212.840] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy", lpFilePart=0x0) returned 0x60 [0212.840] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\", lpFilePart=0x0) returned 0x61 [0212.840] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d7370 [0212.840] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0212.840] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0212.852] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0212.852] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0212.852] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0212.852] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0212.852] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0212.852] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0212.852] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0212.852] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0212.853] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0212.853] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0212.853] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC", lpFilePart=0x0) returned 0x63 [0212.853] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\", lpFilePart=0x0) returned 0x64 [0212.853] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d8090 [0212.853] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0212.853] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0212.853] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0212.854] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0212.854] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0212.854] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0212.854] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0212.854] FindClose (in: hFindFile=0x5d8090 | out: hFindFile=0x5d8090) returned 1 [0212.854] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC", lpFilePart=0x0) returned 0x63 [0212.854] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\", lpFilePart=0x0) returned 0x64 [0212.854] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7370 [0212.854] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0212.855] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0212.855] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0212.855] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0212.855] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0212.855] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0212.855] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0212.855] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0212.855] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\INetCache", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\INetCache", lpFilePart=0x0) returned 0x6d [0212.855] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\INetCache\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\INetCache\\", lpFilePart=0x0) returned 0x6e [0212.855] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\INetCache\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7eb0 [0212.857] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0212.857] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0212.858] FindClose (in: hFindFile=0x5d7eb0 | out: hFindFile=0x5d7eb0) returned 1 [0212.858] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\INetCache", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\INetCache", lpFilePart=0x0) returned 0x6d [0212.858] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\INetCache\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\INetCache\\", lpFilePart=0x0) returned 0x6e [0212.858] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\INetCache\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d81b0 [0212.858] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0212.858] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0212.858] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0212.858] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\INetCookies", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\INetCookies", lpFilePart=0x0) returned 0x6f [0212.858] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\INetCookies\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\INetCookies\\", lpFilePart=0x0) returned 0x70 [0212.858] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\INetCookies\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d79d0 [0212.859] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0212.859] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0212.859] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0212.859] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\INetCookies", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\INetCookies", lpFilePart=0x0) returned 0x6f [0212.859] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\INetCookies\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\INetCookies\\", lpFilePart=0x0) returned 0x70 [0212.859] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\INetCookies\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7370 [0212.859] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0212.859] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0212.859] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0212.859] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\INetHistory", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\INetHistory", lpFilePart=0x0) returned 0x6f [0212.859] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\INetHistory\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\INetHistory\\", lpFilePart=0x0) returned 0x70 [0212.859] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\INetHistory\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7370 [0212.860] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0212.860] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0212.860] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0212.860] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\INetHistory", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\INetHistory", lpFilePart=0x0) returned 0x6f [0212.860] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\INetHistory\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\INetHistory\\", lpFilePart=0x0) returned 0x70 [0212.860] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\INetHistory\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d78b0 [0212.860] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0212.860] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0212.860] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0212.860] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft", lpFilePart=0x0) returned 0x6d [0212.860] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\", lpFilePart=0x0) returned 0x6e [0212.861] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7eb0 [0212.861] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0212.861] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0212.861] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0212.861] FindClose (in: hFindFile=0x5d7eb0 | out: hFindFile=0x5d7eb0) returned 1 [0212.861] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft", lpFilePart=0x0) returned 0x6d [0212.861] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\", lpFilePart=0x0) returned 0x6e [0212.861] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d78b0 [0212.861] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0212.862] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0212.862] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0212.862] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0212.862] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows", lpFilePart=0x0) returned 0x75 [0212.862] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\", lpFilePart=0x0) returned 0x76 [0212.862] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d7df0 [0212.862] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0212.862] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0212.862] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0212.862] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0212.863] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0212.863] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0212.863] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0212.863] FindClose (in: hFindFile=0x5d7df0 | out: hFindFile=0x5d7df0) returned 1 [0212.863] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows", lpFilePart=0x0) returned 0x75 [0212.863] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\", lpFilePart=0x0) returned 0x76 [0212.863] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d79d0 [0212.863] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0212.863] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0212.863] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0212.864] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0212.864] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0212.864] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0212.864] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0212.864] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0212.864] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\1605653898", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\1605653898", lpFilePart=0x0) returned 0x80 [0212.864] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\1605653898\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\1605653898\\", lpFilePart=0x0) returned 0x81 [0212.864] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\1605653898\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d7e50 [0212.864] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0212.864] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0212.865] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0212.865] FindClose (in: hFindFile=0x5d7e50 | out: hFindFile=0x5d7e50) returned 1 [0212.865] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\1605653898", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\1605653898", lpFilePart=0x0) returned 0x80 [0212.865] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\1605653898\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\1605653898\\", lpFilePart=0x0) returned 0x81 [0212.865] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\1605653898\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d7e50 [0212.865] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0212.865] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0212.865] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0212.865] FindClose (in: hFindFile=0x5d7e50 | out: hFindFile=0x5d7e50) returned 1 [0212.865] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\1605653898\\4275773285.pri", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\1605653898\\4275773285.pri", lpFilePart=0x0) returned 0x8f [0212.865] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\1605653898\\4275773285.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\windows\\1605653898\\4275773285.pri"), fInfoLevelId=0x0, lpFileInformation=0x22c7ea0 | out: lpFileInformation=0x22c7ea0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd0627861, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xd0627861, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xd0627861, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x16dc8)) returned 1 [0212.866] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\1605653898\\4275773285.pri", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\1605653898\\4275773285.pri", lpFilePart=0x0) returned 0x8f [0212.866] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\1605653898\\4275773285.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\windows\\1605653898\\4275773285.pri"), fInfoLevelId=0x0, lpFileInformation=0x22c8078 | out: lpFileInformation=0x22c8078*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd0627861, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xd0627861, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xd0627861, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x16dc8)) returned 1 [0212.866] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\1605653898\\4275773285.pri", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\1605653898\\4275773285.pri", lpFilePart=0x0) returned 0x8f [0212.866] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\1605653898\\4275773285.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\windows\\1605653898\\4275773285.pri"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0212.867] GetFileType (hFile=0x444) returned 0x1 [0212.867] GetFileType (hFile=0x444) returned 0x1 [0212.867] ReadFile (in: hFile=0x444, lpBuffer=0x22ca558, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x22ca558*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0212.892] CloseHandle (hObject=0x444) returned 1 [0212.893] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\1605653898\\4275773285.pri", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\1605653898\\4275773285.pri", lpFilePart=0x0) returned 0x8f [0212.893] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\1605653898\\4275773285.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\windows\\1605653898\\4275773285.pri"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0212.893] GetFileType (hFile=0x444) returned 0x1 [0212.893] GetFileType (hFile=0x444) returned 0x1 [0212.893] WriteFile (in: hFile=0x444, lpBuffer=0x22c8230*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x22c8230*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0212.893] CloseHandle (hObject=0x444) returned 1 [0212.893] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\1605653898\\4275773285.pri", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\1605653898\\4275773285.pri", lpFilePart=0x0) returned 0x8f [0212.893] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\1605653898\\4275773285.pri.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\1605653898\\4275773285.pri.xuy", lpFilePart=0x0) returned 0x93 [0212.894] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\1605653898\\4275773285.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\windows\\1605653898\\4275773285.pri"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd0627861, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xd0627861, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x6abe3745, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x16dc8)) returned 1 [0212.894] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\1605653898\\4275773285.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\windows\\1605653898\\4275773285.pri"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\1605653898\\4275773285.pri.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\windows\\1605653898\\4275773285.pri.xuy")) returned 1 [0212.895] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\2646675675", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\2646675675", lpFilePart=0x0) returned 0x80 [0212.895] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\2646675675\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\2646675675\\", lpFilePart=0x0) returned 0x81 [0212.895] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\2646675675\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d7550 [0212.896] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0212.896] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0212.896] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0212.896] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0212.896] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\2646675675", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\2646675675", lpFilePart=0x0) returned 0x80 [0212.896] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\2646675675\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\2646675675\\", lpFilePart=0x0) returned 0x81 [0212.896] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\2646675675\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d81b0 [0212.896] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0212.897] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0212.897] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0212.897] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0212.897] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\2646675675\\806068533.pri", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\2646675675\\806068533.pri", lpFilePart=0x0) returned 0x8e [0212.897] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\2646675675\\806068533.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\windows\\2646675675\\806068533.pri"), fInfoLevelId=0x0, lpFileInformation=0x2349850 | out: lpFileInformation=0x2349850*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd0a9ff29, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xd0a9ff29, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xd0a9ff29, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0xfd8)) returned 1 [0212.897] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\2646675675\\806068533.pri", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\2646675675\\806068533.pri", lpFilePart=0x0) returned 0x8e [0212.897] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\2646675675\\806068533.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\windows\\2646675675\\806068533.pri"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0212.897] GetFileType (hFile=0x444) returned 0x1 [0212.897] GetFileType (hFile=0x444) returned 0x1 [0212.897] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xfd8 [0212.897] ReadFile (in: hFile=0x444, lpBuffer=0x234abf0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x234abf0*, lpNumberOfBytesRead=0x3be5c8*=0xfd8, lpOverlapped=0x0) returned 1 [0212.899] CloseHandle (hObject=0x444) returned 1 [0212.942] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\2646675675\\806068533.pri", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\2646675675\\806068533.pri", lpFilePart=0x0) returned 0x8e [0212.942] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\2646675675\\806068533.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\windows\\2646675675\\806068533.pri"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0212.944] GetFileType (hFile=0x444) returned 0x1 [0212.944] GetFileType (hFile=0x444) returned 0x1 [0212.944] WriteFile (in: hFile=0x444, lpBuffer=0x21c53f8*, nNumberOfBytesToWrite=0xfe0, lpNumberOfBytesWritten=0x3be4d8, lpOverlapped=0x0 | out: lpBuffer=0x21c53f8*, lpNumberOfBytesWritten=0x3be4d8*=0xfe0, lpOverlapped=0x0) returned 1 [0212.945] CloseHandle (hObject=0x444) returned 1 [0212.945] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\2646675675\\806068533.pri", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\2646675675\\806068533.pri", lpFilePart=0x0) returned 0x8e [0212.945] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\2646675675\\806068533.pri.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\2646675675\\806068533.pri.xuy", lpFilePart=0x0) returned 0x92 [0212.945] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\2646675675\\806068533.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\windows\\2646675675\\806068533.pri"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd0a9ff29, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xd0a9ff29, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x6ac55f5d, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xfe0)) returned 1 [0212.945] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\2646675675\\806068533.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\windows\\2646675675\\806068533.pri"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\2646675675\\806068533.pri.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\windows\\2646675675\\806068533.pri.xuy")) returned 1 [0212.946] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3295484897", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3295484897", lpFilePart=0x0) returned 0x80 [0212.946] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3295484897\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3295484897\\", lpFilePart=0x0) returned 0x81 [0212.946] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3295484897\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d78b0 [0212.946] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0212.947] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0212.947] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0212.947] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0212.947] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3295484897", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3295484897", lpFilePart=0x0) returned 0x80 [0212.947] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3295484897\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3295484897\\", lpFilePart=0x0) returned 0x81 [0212.947] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3295484897\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d7f10 [0212.947] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0212.947] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0212.947] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0212.947] FindClose (in: hFindFile=0x5d7f10 | out: hFindFile=0x5d7f10) returned 1 [0212.947] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3295484897\\2504515037.pri", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3295484897\\2504515037.pri", lpFilePart=0x0) returned 0x8f [0212.948] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3295484897\\2504515037.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\windows\\3295484897\\2504515037.pri"), fInfoLevelId=0x0, lpFileInformation=0x21c9530 | out: lpFileInformation=0x21c9530*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc6158b0a, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xc6158b0a, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xc6158b0a, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0xb068)) returned 1 [0212.948] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3295484897\\2504515037.pri", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3295484897\\2504515037.pri", lpFilePart=0x0) returned 0x8f [0212.948] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3295484897\\2504515037.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\windows\\3295484897\\2504515037.pri"), fInfoLevelId=0x0, lpFileInformation=0x21c9708 | out: lpFileInformation=0x21c9708*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc6158b0a, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xc6158b0a, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xc6158b0a, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0xb068)) returned 1 [0212.948] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3295484897\\2504515037.pri", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3295484897\\2504515037.pri", lpFilePart=0x0) returned 0x8f [0212.948] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3295484897\\2504515037.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\windows\\3295484897\\2504515037.pri"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0212.949] GetFileType (hFile=0x444) returned 0x1 [0212.949] GetFileType (hFile=0x444) returned 0x1 [0212.949] ReadFile (in: hFile=0x444, lpBuffer=0x21cbbe8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x21cbbe8*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0212.962] CloseHandle (hObject=0x444) returned 1 [0212.962] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3295484897\\2504515037.pri", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3295484897\\2504515037.pri", lpFilePart=0x0) returned 0x8f [0212.962] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3295484897\\2504515037.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\windows\\3295484897\\2504515037.pri"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0212.963] GetFileType (hFile=0x444) returned 0x1 [0212.963] GetFileType (hFile=0x444) returned 0x1 [0212.963] WriteFile (in: hFile=0x444, lpBuffer=0x21c98c0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x21c98c0*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0212.963] CloseHandle (hObject=0x444) returned 1 [0212.963] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3295484897\\2504515037.pri", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3295484897\\2504515037.pri", lpFilePart=0x0) returned 0x8f [0212.963] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3295484897\\2504515037.pri.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3295484897\\2504515037.pri.xuy", lpFilePart=0x0) returned 0x93 [0212.963] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3295484897\\2504515037.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\windows\\3295484897\\2504515037.pri"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc6158b0a, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xc6158b0a, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x6ac7c70b, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xb068)) returned 1 [0212.963] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3295484897\\2504515037.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\windows\\3295484897\\2504515037.pri"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3295484897\\2504515037.pri.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\windows\\3295484897\\2504515037.pri.xuy")) returned 1 [0212.964] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3375042201", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3375042201", lpFilePart=0x0) returned 0x80 [0212.964] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3375042201\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3375042201\\", lpFilePart=0x0) returned 0x81 [0212.965] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3375042201\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d7df0 [0212.965] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0212.965] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0212.965] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0212.965] FindClose (in: hFindFile=0x5d7df0 | out: hFindFile=0x5d7df0) returned 1 [0212.965] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3375042201", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3375042201", lpFilePart=0x0) returned 0x80 [0212.966] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3375042201\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3375042201\\", lpFilePart=0x0) returned 0x81 [0212.966] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3375042201\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d8090 [0212.966] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0212.966] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0212.966] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0212.966] FindClose (in: hFindFile=0x5d8090 | out: hFindFile=0x5d8090) returned 1 [0212.966] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3375042201\\1858609885.pri", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3375042201\\1858609885.pri", lpFilePart=0x0) returned 0x8f [0212.966] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3375042201\\1858609885.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\windows\\3375042201\\1858609885.pri"), fInfoLevelId=0x0, lpFileInformation=0x224aee0 | out: lpFileInformation=0x224aee0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd0a79cc4, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xd0a79cc4, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xd0a79cc4, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x7ee0)) returned 1 [0212.966] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3375042201\\1858609885.pri", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3375042201\\1858609885.pri", lpFilePart=0x0) returned 0x8f [0212.966] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3375042201\\1858609885.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\windows\\3375042201\\1858609885.pri"), fInfoLevelId=0x0, lpFileInformation=0x224b0b8 | out: lpFileInformation=0x224b0b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd0a79cc4, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xd0a79cc4, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xd0a79cc4, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x7ee0)) returned 1 [0212.966] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3375042201\\1858609885.pri", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3375042201\\1858609885.pri", lpFilePart=0x0) returned 0x8f [0212.966] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3375042201\\1858609885.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\windows\\3375042201\\1858609885.pri"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0212.968] GetFileType (hFile=0x444) returned 0x1 [0212.968] GetFileType (hFile=0x444) returned 0x1 [0212.968] ReadFile (in: hFile=0x444, lpBuffer=0x224d598, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x224d598*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0213.086] CloseHandle (hObject=0x444) returned 1 [0213.086] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3375042201\\1858609885.pri", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3375042201\\1858609885.pri", lpFilePart=0x0) returned 0x8f [0213.086] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3375042201\\1858609885.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\windows\\3375042201\\1858609885.pri"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0213.087] GetFileType (hFile=0x444) returned 0x1 [0213.087] GetFileType (hFile=0x444) returned 0x1 [0213.087] WriteFile (in: hFile=0x444, lpBuffer=0x224b270*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x224b270*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0213.087] CloseHandle (hObject=0x444) returned 1 [0213.087] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3375042201\\1858609885.pri", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3375042201\\1858609885.pri", lpFilePart=0x0) returned 0x8f [0213.087] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3375042201\\1858609885.pri.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3375042201\\1858609885.pri.xuy", lpFilePart=0x0) returned 0x93 [0213.087] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3375042201\\1858609885.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\windows\\3375042201\\1858609885.pri"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd0a79cc4, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xd0a79cc4, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x6adad2ec, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x7ee0)) returned 1 [0213.087] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3375042201\\1858609885.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\windows\\3375042201\\1858609885.pri"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3375042201\\1858609885.pri.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\windows\\3375042201\\1858609885.pri.xuy")) returned 1 [0213.089] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3530508098", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3530508098", lpFilePart=0x0) returned 0x80 [0213.089] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3530508098\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3530508098\\", lpFilePart=0x0) returned 0x81 [0213.089] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3530508098\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d75b0 [0213.089] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0213.089] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0213.089] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0213.089] FindClose (in: hFindFile=0x5d75b0 | out: hFindFile=0x5d75b0) returned 1 [0213.089] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3530508098", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3530508098", lpFilePart=0x0) returned 0x80 [0213.089] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3530508098\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3530508098\\", lpFilePart=0x0) returned 0x81 [0213.089] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3530508098\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d79d0 [0213.089] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0213.089] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0213.089] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0213.089] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0213.089] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3530508098\\2495906576.pri", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3530508098\\2495906576.pri", lpFilePart=0x0) returned 0x8f [0213.090] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3530508098\\2495906576.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\windows\\3530508098\\2495906576.pri"), fInfoLevelId=0x0, lpFileInformation=0x22cc890 | out: lpFileInformation=0x22cc890*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd064dabd, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xd064dabd, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xd064dabd, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x13b60)) returned 1 [0213.090] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3530508098\\2495906576.pri", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3530508098\\2495906576.pri", lpFilePart=0x0) returned 0x8f [0213.090] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3530508098\\2495906576.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\windows\\3530508098\\2495906576.pri"), fInfoLevelId=0x0, lpFileInformation=0x22cca68 | out: lpFileInformation=0x22cca68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd064dabd, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xd064dabd, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xd064dabd, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x13b60)) returned 1 [0213.090] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3530508098\\2495906576.pri", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3530508098\\2495906576.pri", lpFilePart=0x0) returned 0x8f [0213.090] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3530508098\\2495906576.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\windows\\3530508098\\2495906576.pri"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0213.091] GetFileType (hFile=0x444) returned 0x1 [0213.091] GetFileType (hFile=0x444) returned 0x1 [0213.091] ReadFile (in: hFile=0x444, lpBuffer=0x22cef48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x22cef48*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0213.128] CloseHandle (hObject=0x444) returned 1 [0213.128] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3530508098\\2495906576.pri", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3530508098\\2495906576.pri", lpFilePart=0x0) returned 0x8f [0213.128] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3530508098\\2495906576.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\windows\\3530508098\\2495906576.pri"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0213.128] GetFileType (hFile=0x444) returned 0x1 [0213.128] GetFileType (hFile=0x444) returned 0x1 [0213.128] WriteFile (in: hFile=0x444, lpBuffer=0x22ccc20*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x22ccc20*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0213.128] CloseHandle (hObject=0x444) returned 1 [0213.129] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3530508098\\2495906576.pri", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3530508098\\2495906576.pri", lpFilePart=0x0) returned 0x8f [0213.129] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3530508098\\2495906576.pri.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3530508098\\2495906576.pri.xuy", lpFilePart=0x0) returned 0x93 [0213.129] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3530508098\\2495906576.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\windows\\3530508098\\2495906576.pri"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd064dabd, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xd064dabd, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x6ae1f9cf, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x13b60)) returned 1 [0213.129] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3530508098\\2495906576.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\windows\\3530508098\\2495906576.pri"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3530508098\\2495906576.pri.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\windows\\3530508098\\2495906576.pri.xuy")) returned 1 [0213.130] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Temp", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Temp", lpFilePart=0x0) returned 0x68 [0213.130] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Temp\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Temp\\", lpFilePart=0x0) returned 0x69 [0213.130] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Temp\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7f10 [0213.130] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0213.130] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0213.130] FindClose (in: hFindFile=0x5d7f10 | out: hFindFile=0x5d7f10) returned 1 [0213.131] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Temp", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Temp", lpFilePart=0x0) returned 0x68 [0213.131] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Temp\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Temp\\", lpFilePart=0x0) returned 0x69 [0213.131] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Temp\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7370 [0213.131] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0213.131] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0213.131] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0213.131] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AppData", lpFilePart=0x0) returned 0x68 [0213.131] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AppData\\", lpFilePart=0x0) returned 0x69 [0213.131] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7370 [0213.131] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0213.131] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0213.131] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0213.131] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AppData", lpFilePart=0x0) returned 0x68 [0213.131] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AppData\\", lpFilePart=0x0) returned 0x69 [0213.131] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d78b0 [0213.131] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0213.132] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0213.132] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0213.132] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\LocalCache", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\LocalCache", lpFilePart=0x0) returned 0x6b [0213.132] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\LocalCache\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\LocalCache\\", lpFilePart=0x0) returned 0x6c [0213.132] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\LocalCache\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d78b0 [0213.132] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0213.132] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0213.132] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0213.132] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\LocalCache", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\LocalCache", lpFilePart=0x0) returned 0x6b [0213.132] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\LocalCache\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\LocalCache\\", lpFilePart=0x0) returned 0x6c [0213.132] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\LocalCache\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7e50 [0213.132] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0213.132] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0213.132] FindClose (in: hFindFile=0x5d7e50 | out: hFindFile=0x5d7e50) returned 1 [0213.132] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\LocalState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\LocalState", lpFilePart=0x0) returned 0x6b [0213.132] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\LocalState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\LocalState\\", lpFilePart=0x0) returned 0x6c [0213.132] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\LocalState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7e50 [0213.133] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0213.133] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0213.133] FindClose (in: hFindFile=0x5d7e50 | out: hFindFile=0x5d7e50) returned 1 [0213.133] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\LocalState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\LocalState", lpFilePart=0x0) returned 0x6b [0213.133] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\LocalState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\LocalState\\", lpFilePart=0x0) returned 0x6c [0213.133] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\LocalState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7370 [0213.133] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0213.133] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0213.133] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0213.133] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.ShellExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.ShellExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy", lpFilePart=0x0) returned 0xb5 [0213.133] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.ShellExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.ShellExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\", lpFilePart=0x0) returned 0xb6 [0213.133] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.ShellExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7c70 [0213.133] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0213.133] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0213.133] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0213.134] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0213.134] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.ShellExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.ShellExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy", lpFilePart=0x0) returned 0xb5 [0213.134] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.ShellExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.ShellExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\", lpFilePart=0x0) returned 0xb6 [0213.134] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.ShellExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7550 [0213.134] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0213.134] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0213.134] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0213.134] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0213.134] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.ShellExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.ShellExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore", lpFilePart=0x0) returned 0xc5 [0213.134] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.ShellExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.ShellExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\", lpFilePart=0x0) returned 0xc6 [0213.134] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.ShellExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7370 [0213.134] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0213.134] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0213.134] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0213.134] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0213.134] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0213.134] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0213.135] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.ShellExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.ShellExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore", lpFilePart=0x0) returned 0xc5 [0213.135] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.ShellExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.ShellExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\", lpFilePart=0x0) returned 0xc6 [0213.135] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.ShellExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d73d0 [0213.135] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0213.135] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0213.135] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0213.135] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0213.135] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0213.135] FindClose (in: hFindFile=0x5d73d0 | out: hFindFile=0x5d73d0) returned 1 [0213.135] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.ShellExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.ShellExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xd9 [0213.135] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.ShellExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\microsoft.windows.shellexperiencehost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat"), fInfoLevelId=0x0, lpFileInformation=0x235c580 | out: lpFileInformation=0x235c580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad8e729, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0x7f710999, ftLastAccessTime.dwHighDateTime=0x1d46680, ftLastWriteTime.dwLowDateTime=0xbb443129, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x10000)) returned 1 [0213.135] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.ShellExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.ShellExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xd9 [0213.135] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.ShellExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\microsoft.windows.shellexperiencehost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat"), fInfoLevelId=0x0, lpFileInformation=0x235c7f8 | out: lpFileInformation=0x235c7f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad8e729, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0x7f710999, ftLastAccessTime.dwHighDateTime=0x1d46680, ftLastWriteTime.dwLowDateTime=0xbb443129, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x10000)) returned 1 [0213.135] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.ShellExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.ShellExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xd9 [0213.135] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.ShellExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\microsoft.windows.shellexperiencehost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0213.137] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb100) returned 1 [0213.157] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.ShellExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3bbd80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.ShellExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xd9 [0213.157] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc220) returned 1 [0213.157] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.ShellExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\microsoft.windows.shellexperiencehost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat"), fInfoLevelId=0x0, lpFileInformation=0x3bc300 | out: lpFileInformation=0x3bc300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad8e729, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0x7f710999, ftLastAccessTime.dwHighDateTime=0x1d46680, ftLastWriteTime.dwLowDateTime=0xbb443129, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x10000)) returned 1 [0213.157] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1e0) returned 1 [0213.157] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.ShellExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3bbda0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.ShellExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xd9 [0213.157] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc220) returned 1 [0213.157] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.ShellExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\microsoft.windows.shellexperiencehost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat"), fInfoLevelId=0x0, lpFileInformation=0x235fa68 | out: lpFileInformation=0x235fa68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad8e729, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0x7f710999, ftLastAccessTime.dwHighDateTime=0x1d46680, ftLastWriteTime.dwLowDateTime=0xbb443129, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x10000)) returned 1 [0213.157] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1e0) returned 1 [0213.157] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.ShellExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3bbda0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.ShellExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xd9 [0213.157] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc220) returned 1 [0213.157] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.ShellExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\microsoft.windows.shellexperiencehost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat"), fInfoLevelId=0x0, lpFileInformation=0x235fce0 | out: lpFileInformation=0x235fce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad8e729, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0x7f710999, ftLastAccessTime.dwHighDateTime=0x1d46680, ftLastWriteTime.dwLowDateTime=0xbb443129, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x10000)) returned 1 [0213.157] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1e0) returned 1 [0213.158] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.ShellExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3bbc40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.ShellExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xd9 [0213.158] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc120) returned 1 [0213.158] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.ShellExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\microsoft.windows.shellexperiencehost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0213.159] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8bb0) returned 1 [0213.160] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.ShellExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.ShellExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xde [0213.160] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0213.160] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.ShellExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\microsoft.windows.shellexperiencehost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x2363050 | out: lpFileInformation=0x2363050*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xbad8e729, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xbad8e729, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xbad8e729, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0xa000)) returned 1 [0213.160] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0213.160] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.ShellExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.ShellExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xde [0213.160] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0213.160] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.ShellExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\microsoft.windows.shellexperiencehost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x23632e0 | out: lpFileInformation=0x23632e0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xbad8e729, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xbad8e729, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xbad8e729, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0xa000)) returned 1 [0213.160] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0213.160] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.ShellExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.ShellExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xde [0213.160] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0213.160] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.ShellExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\microsoft.windows.shellexperiencehost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0213.161] GetFileType (hFile=0x444) returned 0x1 [0213.161] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0213.161] GetFileType (hFile=0x444) returned 0x1 [0213.161] ReadFile (in: hFile=0x444, lpBuffer=0x2365930, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x2365930*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0213.213] CloseHandle (hObject=0x444) returned 1 [0213.213] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.ShellExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.ShellExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xde [0213.213] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0213.213] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.ShellExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\microsoft.windows.shellexperiencehost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0213.214] GetFileType (hFile=0x444) returned 0x1 [0213.214] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0213.214] GetFileType (hFile=0x444) returned 0x1 [0213.214] WriteFile (in: hFile=0x444, lpBuffer=0x21874c8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x21874c8*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0213.214] CloseHandle (hObject=0x444) returned 1 [0213.214] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.ShellExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.ShellExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xde [0213.214] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.ShellExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.ShellExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1.xuy", lpFilePart=0x0) returned 0xe2 [0213.214] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0213.215] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.ShellExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\microsoft.windows.shellexperiencehost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xbad8e729, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xbad8e729, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x6aede833, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xa000)) returned 1 [0213.215] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0213.215] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.ShellExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\microsoft.windows.shellexperiencehost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.ShellExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\microsoft.windows.shellexperiencehost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log1.xuy")) returned 1 [0213.217] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.ShellExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.ShellExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xde [0213.217] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0213.217] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.ShellExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\microsoft.windows.shellexperiencehost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x21e39c8 | out: lpFileInformation=0x21e39c8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xbadb496c, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xbadb496c, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xbadb496c, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0213.219] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0213.219] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.ShellExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.ShellExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xde [0213.219] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0213.219] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.ShellExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\microsoft.windows.shellexperiencehost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0213.219] GetFileType (hFile=0x444) returned 0x1 [0213.219] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0213.219] GetFileType (hFile=0x444) returned 0x1 [0213.219] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x0 [0213.219] CloseHandle (hObject=0x444) returned 1 [0213.229] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.ShellExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.ShellExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xde [0213.229] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0213.229] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.ShellExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\microsoft.windows.shellexperiencehost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0213.231] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb070) returned 1 [0213.232] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.ShellExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbcf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.ShellExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xde [0213.232] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0213.232] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.ShellExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\microsoft.windows.shellexperiencehost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x3bc270 | out: lpFileInformation=0x3bc270*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xbadb496c, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xbadb496c, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xbadb496c, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0213.232] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc150) returned 1 [0213.232] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.ShellExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbd10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.ShellExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xde [0213.232] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0213.232] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.ShellExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\microsoft.windows.shellexperiencehost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x225b070 | out: lpFileInformation=0x225b070*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xbadb496c, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xbadb496c, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xbadb496c, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0213.232] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc150) returned 1 [0213.232] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.ShellExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.ShellExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xde [0213.232] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc050) returned 1 [0213.232] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.ShellExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\microsoft.windows.shellexperiencehost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0213.232] GetFileType (hFile=0x444) returned 0x1 [0213.232] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbfc0) returned 1 [0213.232] GetFileType (hFile=0x444) returned 0x1 [0213.232] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc1e8 | out: lpFileSizeHigh=0x3bc1e8*=0x0) returned 0x0 [0213.232] CloseHandle (hObject=0x444) returned 1 [0213.242] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.ShellExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.ShellExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xde [0213.243] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc050) returned 1 [0213.243] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.ShellExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\microsoft.windows.shellexperiencehost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0213.244] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8ae0) returned 1 [0213.245] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0213.245] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\RoamingState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\RoamingState", lpFilePart=0x0) returned 0x6d [0213.245] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\RoamingState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\RoamingState\\", lpFilePart=0x0) returned 0x6e [0213.245] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\RoamingState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7550 [0213.245] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0213.245] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0213.245] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0213.245] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0213.245] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0213.245] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0213.245] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\RoamingState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\RoamingState", lpFilePart=0x0) returned 0x6d [0213.245] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\RoamingState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\RoamingState\\", lpFilePart=0x0) returned 0x6e [0213.246] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\RoamingState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d81b0 [0213.246] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0213.246] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0213.246] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0213.246] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0213.246] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0213.246] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0213.246] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Settings", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Settings", lpFilePart=0x0) returned 0x69 [0213.246] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Settings\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Settings\\", lpFilePart=0x0) returned 0x6a [0213.246] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Settings\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d81b0 [0213.246] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0213.252] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0213.252] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0213.252] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0213.252] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0213.252] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0213.252] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0213.252] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0213.252] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0213.252] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0213.252] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Settings", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Settings", lpFilePart=0x0) returned 0x69 [0213.252] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Settings\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Settings\\", lpFilePart=0x0) returned 0x6a [0213.252] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Settings\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d79d0 [0213.253] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0213.253] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0213.253] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0213.253] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0213.253] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0213.253] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0213.253] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0213.253] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0213.253] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0213.254] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Settings\\roaming.lock", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Settings\\roaming.lock", lpFilePart=0x0) returned 0x76 [0213.254] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0213.254] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\settings\\roaming.lock"), fInfoLevelId=0x0, lpFileInformation=0x22d8058 | out: lpFileInformation=0x22d8058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba772689, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xba772689, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xba772689, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0213.254] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0213.254] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Settings\\roaming.lock", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Settings\\roaming.lock", lpFilePart=0x0) returned 0x76 [0213.254] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0213.254] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\settings\\roaming.lock"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0213.254] GetFileType (hFile=0x444) returned 0x1 [0213.254] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0213.254] GetFileType (hFile=0x444) returned 0x1 [0213.254] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0x0 [0213.254] CloseHandle (hObject=0x444) returned 1 [0213.265] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Settings\\roaming.lock", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Settings\\roaming.lock", lpFilePart=0x0) returned 0x76 [0213.265] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0213.265] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\settings\\roaming.lock"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0213.266] GetFileType (hFile=0x444) returned 0x1 [0213.266] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0213.266] GetFileType (hFile=0x444) returned 0x1 [0213.266] WriteFile (in: hFile=0x444, lpBuffer=0x234e508*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x3be628, lpOverlapped=0x0 | out: lpBuffer=0x234e508*, lpNumberOfBytesWritten=0x3be628*=0x10, lpOverlapped=0x0) returned 1 [0213.267] CloseHandle (hObject=0x444) returned 1 [0213.267] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Settings\\roaming.lock", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Settings\\roaming.lock", lpFilePart=0x0) returned 0x76 [0213.267] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Settings\\roaming.lock.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Settings\\roaming.lock.xuy", lpFilePart=0x0) returned 0x7a [0213.267] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0213.267] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\settings\\roaming.lock"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba772689, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xba772689, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x6af7755e, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0213.267] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0213.267] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\settings\\roaming.lock"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Settings\\roaming.lock.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\settings\\roaming.lock.xuy")) returned 1 [0213.269] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Settings\\settings.dat", lpFilePart=0x0) returned 0x76 [0213.269] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0213.269] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x234f890 | out: lpFileInformation=0x234f890*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba74c42d, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0x7f868001, ftLastAccessTime.dwHighDateTime=0x1d46680, ftLastWriteTime.dwLowDateTime=0x7f868001, ftLastWriteTime.dwHighDateTime=0x1d46680, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0213.269] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0213.269] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Settings\\settings.dat", lpFilePart=0x0) returned 0x76 [0213.269] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0213.269] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x234fa38 | out: lpFileInformation=0x234fa38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba74c42d, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0x7f868001, ftLastAccessTime.dwHighDateTime=0x1d46680, ftLastWriteTime.dwLowDateTime=0x7f868001, ftLastWriteTime.dwHighDateTime=0x1d46680, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0213.269] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0213.269] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Settings\\settings.dat", lpFilePart=0x0) returned 0x76 [0213.269] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0213.269] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\settings\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0213.271] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb170) returned 1 [0213.271] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3bbdf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Settings\\settings.dat", lpFilePart=0x0) returned 0x76 [0213.271] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc290) returned 1 [0213.271] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x3bc370 | out: lpFileInformation=0x3bc370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba74c42d, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0x7f868001, ftLastAccessTime.dwHighDateTime=0x1d46680, ftLastWriteTime.dwLowDateTime=0x7f868001, ftLastWriteTime.dwHighDateTime=0x1d46680, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0213.271] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc250) returned 1 [0213.271] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3bbe10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Settings\\settings.dat", lpFilePart=0x0) returned 0x76 [0213.271] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc290) returned 1 [0213.271] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x2352ad8 | out: lpFileInformation=0x2352ad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba74c42d, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0x7f868001, ftLastAccessTime.dwHighDateTime=0x1d46680, ftLastWriteTime.dwLowDateTime=0x7f868001, ftLastWriteTime.dwHighDateTime=0x1d46680, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0213.271] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc250) returned 1 [0213.271] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3bbe10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Settings\\settings.dat", lpFilePart=0x0) returned 0x76 [0213.271] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc290) returned 1 [0213.271] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x2352c80 | out: lpFileInformation=0x2352c80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba74c42d, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0x7f868001, ftLastAccessTime.dwHighDateTime=0x1d46680, ftLastWriteTime.dwLowDateTime=0x7f868001, ftLastWriteTime.dwHighDateTime=0x1d46680, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0213.271] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc250) returned 1 [0213.272] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3bbcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Settings\\settings.dat", lpFilePart=0x0) returned 0x76 [0213.272] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0213.272] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\settings\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0213.273] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8c20) returned 1 [0213.274] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", lpFilePart=0x0) returned 0x7b [0213.274] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0213.274] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\settings\\settings.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x2355c88 | out: lpFileInformation=0x2355c88*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc69fd3a3, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xc69fd3a3, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xc69fd3a3, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0213.274] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0213.274] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", lpFilePart=0x0) returned 0x7b [0213.274] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0213.274] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\settings\\settings.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x2355e40 | out: lpFileInformation=0x2355e40*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc69fd3a3, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xc69fd3a3, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xc69fd3a3, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0213.274] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0213.274] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", lpFilePart=0x0) returned 0x7b [0213.274] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0213.274] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\settings\\settings.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0213.275] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb170) returned 1 [0213.276] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3bbdf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", lpFilePart=0x0) returned 0x7b [0213.276] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc290) returned 1 [0213.276] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\settings\\settings.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x3bc370 | out: lpFileInformation=0x3bc370*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc69fd3a3, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xc69fd3a3, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xc69fd3a3, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0213.276] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc250) returned 1 [0213.276] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3bbe10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", lpFilePart=0x0) returned 0x7b [0213.276] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc290) returned 1 [0213.276] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\settings\\settings.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x2358f10 | out: lpFileInformation=0x2358f10*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc69fd3a3, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xc69fd3a3, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xc69fd3a3, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0213.276] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc250) returned 1 [0213.276] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3bbe10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", lpFilePart=0x0) returned 0x7b [0213.276] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc290) returned 1 [0213.276] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\settings\\settings.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x23590c8 | out: lpFileInformation=0x23590c8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc69fd3a3, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xc69fd3a3, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xc69fd3a3, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0213.276] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc250) returned 1 [0213.276] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3bbcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", lpFilePart=0x0) returned 0x7b [0213.276] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0213.276] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\settings\\settings.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0213.278] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8c20) returned 1 [0213.279] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", lpFilePart=0x0) returned 0x7b [0213.279] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0213.279] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\settings\\settings.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x235c0f8 | out: lpFileInformation=0x235c0f8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc69fd3a3, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xc69fd3a3, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xc69fd3a3, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0213.279] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0213.279] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", lpFilePart=0x0) returned 0x7b [0213.279] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0213.279] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\settings\\settings.dat.log2"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0213.280] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb0e0) returned 1 [0213.281] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", lpFilePart=0x0) returned 0x7b [0213.281] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc200) returned 1 [0213.281] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\settings\\settings.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x3bc2e0 | out: lpFileInformation=0x3bc2e0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc69fd3a3, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xc69fd3a3, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xc69fd3a3, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0213.281] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1c0) returned 1 [0213.281] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbd80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", lpFilePart=0x0) returned 0x7b [0213.281] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc200) returned 1 [0213.281] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\settings\\settings.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x235d1b0 | out: lpFileInformation=0x235d1b0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc69fd3a3, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xc69fd3a3, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xc69fd3a3, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0213.281] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1c0) returned 1 [0213.281] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", lpFilePart=0x0) returned 0x7b [0213.281] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0c0) returned 1 [0213.281] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\settings\\settings.dat.log2"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0213.283] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8b50) returned 1 [0213.283] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0213.283] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\SystemAppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\SystemAppData", lpFilePart=0x0) returned 0x6e [0213.283] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\SystemAppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\SystemAppData\\", lpFilePart=0x0) returned 0x6f [0213.284] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\SystemAppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d78b0 [0213.284] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0213.284] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0213.284] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0213.284] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0213.284] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0213.284] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0213.284] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\SystemAppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\SystemAppData", lpFilePart=0x0) returned 0x6e [0213.284] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\SystemAppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\SystemAppData\\", lpFilePart=0x0) returned 0x6f [0213.284] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\SystemAppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d81b0 [0213.284] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0213.285] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0213.285] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0213.285] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0213.285] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0213.285] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0213.285] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\TempState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\TempState", lpFilePart=0x0) returned 0x6a [0213.285] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\TempState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\TempState\\", lpFilePart=0x0) returned 0x6b [0213.285] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\TempState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7670 [0213.285] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0213.285] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0213.285] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0213.286] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0213.286] FindClose (in: hFindFile=0x5d7670 | out: hFindFile=0x5d7670) returned 1 [0213.286] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0213.286] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0213.286] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0213.286] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\TempState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\TempState", lpFilePart=0x0) returned 0x6a [0213.286] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\TempState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\TempState\\", lpFilePart=0x0) returned 0x6b [0213.286] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\TempState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7610 [0213.286] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0213.286] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0213.286] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0213.286] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0213.286] FindClose (in: hFindFile=0x5d7610 | out: hFindFile=0x5d7610) returned 1 [0213.287] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0213.287] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0213.287] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\TempState\\TileCache_100_0_Data.bin", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\TempState\\TileCache_100_0_Data.bin", lpFilePart=0x0) returned 0x83 [0213.287] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0213.287] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\TempState\\TileCache_100_0_Data.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\tempstate\\tilecache_100_0_data.bin"), fInfoLevelId=0x0, lpFileInformation=0x2363360 | out: lpFileInformation=0x2363360*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x58dc96b8, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x58dc96b8, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x58dc96b8, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x100000)) returned 1 [0213.287] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0213.287] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\TempState\\TileCache_100_0_Data.bin", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\TempState\\TileCache_100_0_Data.bin", lpFilePart=0x0) returned 0x83 [0213.287] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0213.287] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\TempState\\TileCache_100_0_Data.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\tempstate\\tilecache_100_0_data.bin"), fInfoLevelId=0x0, lpFileInformation=0x2363538 | out: lpFileInformation=0x2363538*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x58dc96b8, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x58dc96b8, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x58dc96b8, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x100000)) returned 1 [0213.287] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0213.287] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\TempState\\TileCache_100_0_Data.bin", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\TempState\\TileCache_100_0_Data.bin", lpFilePart=0x0) returned 0x83 [0213.287] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0213.287] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\TempState\\TileCache_100_0_Data.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\tempstate\\tilecache_100_0_data.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0213.289] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb170) returned 1 [0213.289] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\TempState\\TileCache_100_0_Data.bin", nBufferLength=0x105, lpBuffer=0x3bbdf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\TempState\\TileCache_100_0_Data.bin", lpFilePart=0x0) returned 0x83 [0213.289] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc290) returned 1 [0213.289] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\TempState\\TileCache_100_0_Data.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\tempstate\\tilecache_100_0_data.bin"), fInfoLevelId=0x0, lpFileInformation=0x3bc370 | out: lpFileInformation=0x3bc370*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x58dc96b8, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x58dc96b8, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x58dc96b8, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x100000)) returned 1 [0213.289] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc250) returned 1 [0213.289] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\TempState\\TileCache_100_0_Data.bin", nBufferLength=0x105, lpBuffer=0x3bbe10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\TempState\\TileCache_100_0_Data.bin", lpFilePart=0x0) returned 0x83 [0213.289] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc290) returned 1 [0213.289] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\TempState\\TileCache_100_0_Data.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\tempstate\\tilecache_100_0_data.bin"), fInfoLevelId=0x0, lpFileInformation=0x2366668 | out: lpFileInformation=0x2366668*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x58dc96b8, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x58dc96b8, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x58dc96b8, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x100000)) returned 1 [0213.289] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc250) returned 1 [0213.289] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\TempState\\TileCache_100_0_Data.bin", nBufferLength=0x105, lpBuffer=0x3bbe10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\TempState\\TileCache_100_0_Data.bin", lpFilePart=0x0) returned 0x83 [0213.289] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc290) returned 1 [0213.289] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\TempState\\TileCache_100_0_Data.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\tempstate\\tilecache_100_0_data.bin"), fInfoLevelId=0x0, lpFileInformation=0x2366840 | out: lpFileInformation=0x2366840*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x58dc96b8, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x58dc96b8, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x58dc96b8, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x100000)) returned 1 [0213.289] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc250) returned 1 [0213.289] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\TempState\\TileCache_100_0_Data.bin", nBufferLength=0x105, lpBuffer=0x3bbcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\TempState\\TileCache_100_0_Data.bin", lpFilePart=0x0) returned 0x83 [0213.289] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0213.290] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\TempState\\TileCache_100_0_Data.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\tempstate\\tilecache_100_0_data.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0213.291] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8c20) returned 1 [0213.292] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\TempState\\TileCache_100_0_Header.bin", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\TempState\\TileCache_100_0_Header.bin", lpFilePart=0x0) returned 0x85 [0213.292] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0213.292] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\TempState\\TileCache_100_0_Header.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\tempstate\\tilecache_100_0_header.bin"), fInfoLevelId=0x0, lpFileInformation=0x23698c0 | out: lpFileInformation=0x23698c0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x58dc96b8, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x58dc96b8, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x58dc96b8, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x25a8)) returned 1 [0213.292] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0213.292] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\TempState\\TileCache_100_0_Header.bin", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\TempState\\TileCache_100_0_Header.bin", lpFilePart=0x0) returned 0x85 [0213.292] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0213.292] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\TempState\\TileCache_100_0_Header.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\tempstate\\tilecache_100_0_header.bin"), fInfoLevelId=0x0, lpFileInformation=0x2369aa0 | out: lpFileInformation=0x2369aa0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x58dc96b8, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x58dc96b8, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x58dc96b8, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x25a8)) returned 1 [0213.292] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0213.292] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\TempState\\TileCache_100_0_Header.bin", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\TempState\\TileCache_100_0_Header.bin", lpFilePart=0x0) returned 0x85 [0213.292] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0213.292] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\TempState\\TileCache_100_0_Header.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\tempstate\\tilecache_100_0_header.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0213.298] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb170) returned 1 [0213.299] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\TempState\\TileCache_100_0_Header.bin", nBufferLength=0x105, lpBuffer=0x3bbdf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\TempState\\TileCache_100_0_Header.bin", lpFilePart=0x0) returned 0x85 [0213.299] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc290) returned 1 [0213.299] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\TempState\\TileCache_100_0_Header.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\tempstate\\tilecache_100_0_header.bin"), fInfoLevelId=0x0, lpFileInformation=0x3bc370 | out: lpFileInformation=0x3bc370*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x58dc96b8, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x58dc96b8, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x58dc96b8, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x25a8)) returned 1 [0213.299] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc250) returned 1 [0213.299] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\TempState\\TileCache_100_0_Header.bin", nBufferLength=0x105, lpBuffer=0x3bbe10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\TempState\\TileCache_100_0_Header.bin", lpFilePart=0x0) returned 0x85 [0213.299] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc290) returned 1 [0213.299] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\TempState\\TileCache_100_0_Header.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\tempstate\\tilecache_100_0_header.bin"), fInfoLevelId=0x0, lpFileInformation=0x236cbe8 | out: lpFileInformation=0x236cbe8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x58dc96b8, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x58dc96b8, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x58dc96b8, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x25a8)) returned 1 [0213.299] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc250) returned 1 [0213.299] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\TempState\\TileCache_100_0_Header.bin", nBufferLength=0x105, lpBuffer=0x3bbe10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\TempState\\TileCache_100_0_Header.bin", lpFilePart=0x0) returned 0x85 [0213.299] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc290) returned 1 [0213.299] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\TempState\\TileCache_100_0_Header.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\tempstate\\tilecache_100_0_header.bin"), fInfoLevelId=0x0, lpFileInformation=0x236cdc8 | out: lpFileInformation=0x236cdc8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x58dc96b8, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x58dc96b8, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x58dc96b8, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x25a8)) returned 1 [0213.299] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc250) returned 1 [0213.299] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\TempState\\TileCache_100_0_Header.bin", nBufferLength=0x105, lpBuffer=0x3bbcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\TempState\\TileCache_100_0_Header.bin", lpFilePart=0x0) returned 0x85 [0213.299] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0213.299] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\TempState\\TileCache_100_0_Header.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\tempstate\\tilecache_100_0_header.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0213.301] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8c20) returned 1 [0213.301] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0213.301] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe", lpFilePart=0x0) returned 0x52 [0213.301] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\", lpFilePart=0x0) returned 0x53 [0213.301] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d73d0 [0213.353] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0213.354] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0213.354] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0213.354] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0213.354] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0213.354] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0213.354] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0213.354] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0213.354] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0213.354] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0213.354] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0213.355] FindClose (in: hFindFile=0x5d73d0 | out: hFindFile=0x5d73d0) returned 1 [0213.355] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0213.355] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0213.355] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0213.355] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe", lpFilePart=0x0) returned 0x52 [0213.355] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\", lpFilePart=0x0) returned 0x53 [0213.355] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d79d0 [0213.357] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0213.357] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0213.357] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0213.357] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0213.357] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0213.357] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0213.357] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0213.357] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0213.357] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0213.358] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0213.358] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0213.358] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0213.358] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0213.358] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0213.358] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0213.358] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\AC", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\AC", lpFilePart=0x0) returned 0x55 [0213.358] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\AC\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\AC\\", lpFilePart=0x0) returned 0x56 [0213.359] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\AC\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7550 [0213.379] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0213.379] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0213.379] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0213.379] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0213.379] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0213.379] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0213.379] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0213.380] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0213.380] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0213.380] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0213.380] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\AC", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\AC", lpFilePart=0x0) returned 0x55 [0213.380] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\AC\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\AC\\", lpFilePart=0x0) returned 0x56 [0213.380] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\AC\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d81b0 [0213.381] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0213.381] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0213.381] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0213.381] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0213.382] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0213.382] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0213.382] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0213.382] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0213.382] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0213.382] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0213.383] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\AC\\INetCache", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\AC\\INetCache", lpFilePart=0x0) returned 0x5f [0213.383] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\AC\\INetCache\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\AC\\INetCache\\", lpFilePart=0x0) returned 0x60 [0213.383] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\AC\\INetCache\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7d30 [0213.385] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0213.385] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0213.385] FindClose (in: hFindFile=0x5d7d30 | out: hFindFile=0x5d7d30) returned 1 [0213.385] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0213.385] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0213.386] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0213.386] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\AC\\INetCache", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\AC\\INetCache", lpFilePart=0x0) returned 0x5f [0213.386] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\AC\\INetCache\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\AC\\INetCache\\", lpFilePart=0x0) returned 0x60 [0213.386] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\AC\\INetCache\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7550 [0213.386] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0213.386] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0213.386] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0213.386] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0213.386] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0213.386] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0213.386] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\AC\\INetCookies", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\AC\\INetCookies", lpFilePart=0x0) returned 0x61 [0213.386] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\AC\\INetCookies\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\AC\\INetCookies\\", lpFilePart=0x0) returned 0x62 [0213.386] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\AC\\INetCookies\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7610 [0213.386] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0213.387] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0213.387] FindClose (in: hFindFile=0x5d7610 | out: hFindFile=0x5d7610) returned 1 [0213.387] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0213.387] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0213.387] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0213.387] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\AC\\INetCookies", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\AC\\INetCookies", lpFilePart=0x0) returned 0x61 [0213.387] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\AC\\INetCookies\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\AC\\INetCookies\\", lpFilePart=0x0) returned 0x62 [0213.387] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\AC\\INetCookies\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7550 [0213.387] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0213.387] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0213.388] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0213.388] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0213.388] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0213.388] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0213.388] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\AC\\INetHistory", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\AC\\INetHistory", lpFilePart=0x0) returned 0x61 [0213.388] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\AC\\INetHistory\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\AC\\INetHistory\\", lpFilePart=0x0) returned 0x62 [0213.388] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\AC\\INetHistory\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7d90 [0213.388] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0213.388] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0213.388] FindClose (in: hFindFile=0x5d7d90 | out: hFindFile=0x5d7d90) returned 1 [0213.388] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0213.388] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0213.388] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0213.388] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\AC\\INetHistory", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\AC\\INetHistory", lpFilePart=0x0) returned 0x61 [0213.388] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\AC\\INetHistory\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\AC\\INetHistory\\", lpFilePart=0x0) returned 0x62 [0213.388] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\AC\\INetHistory\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7cd0 [0213.389] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0213.389] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0213.389] FindClose (in: hFindFile=0x5d7cd0 | out: hFindFile=0x5d7cd0) returned 1 [0213.389] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0213.389] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0213.389] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0213.389] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\AC\\Temp", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\AC\\Temp", lpFilePart=0x0) returned 0x5a [0213.389] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\AC\\Temp\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\AC\\Temp\\", lpFilePart=0x0) returned 0x5b [0213.389] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\AC\\Temp\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7610 [0213.389] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0213.389] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0213.389] FindClose (in: hFindFile=0x5d7610 | out: hFindFile=0x5d7610) returned 1 [0213.389] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0213.389] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0213.389] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0213.389] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\AC\\Temp", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\AC\\Temp", lpFilePart=0x0) returned 0x5a [0213.390] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\AC\\Temp\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\AC\\Temp\\", lpFilePart=0x0) returned 0x5b [0213.390] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\AC\\Temp\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d81b0 [0213.390] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0213.390] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0213.390] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0213.390] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0213.390] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0213.390] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0213.390] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\AppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\AppData", lpFilePart=0x0) returned 0x5a [0213.390] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\AppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\AppData\\", lpFilePart=0x0) returned 0x5b [0213.390] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\AppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d81b0 [0213.396] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0213.396] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0213.396] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0213.396] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0213.396] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0213.396] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0213.396] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\AppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\AppData", lpFilePart=0x0) returned 0x5a [0213.397] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\AppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\AppData\\", lpFilePart=0x0) returned 0x5b [0213.397] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\AppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d81b0 [0213.397] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0213.397] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0213.397] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0213.397] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0213.397] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0213.397] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0213.397] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\LocalCache", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\LocalCache", lpFilePart=0x0) returned 0x5d [0213.397] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\LocalCache\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\LocalCache\\", lpFilePart=0x0) returned 0x5e [0213.397] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\LocalCache\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d75b0 [0213.397] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0213.398] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0213.398] FindClose (in: hFindFile=0x5d75b0 | out: hFindFile=0x5d75b0) returned 1 [0213.398] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0213.398] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0213.398] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0213.398] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\LocalCache", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\LocalCache", lpFilePart=0x0) returned 0x5d [0213.398] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\LocalCache\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\LocalCache\\", lpFilePart=0x0) returned 0x5e [0213.398] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\LocalCache\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d79d0 [0213.398] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0213.398] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0213.398] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0213.398] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0213.398] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0213.398] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0213.398] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\LocalState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\LocalState", lpFilePart=0x0) returned 0x5d [0213.398] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\LocalState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\LocalState\\", lpFilePart=0x0) returned 0x5e [0213.399] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\LocalState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7c70 [0213.399] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0213.399] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0213.399] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0213.399] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0213.399] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0213.399] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0213.399] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\LocalState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\LocalState", lpFilePart=0x0) returned 0x5d [0213.399] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\LocalState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\LocalState\\", lpFilePart=0x0) returned 0x5e [0213.399] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\LocalState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d79d0 [0213.399] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0213.399] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0213.400] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0213.400] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0213.400] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0213.400] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0213.400] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\Microsoft.WindowsAlarms_10.1506.19010.0_x64__8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\Microsoft.WindowsAlarms_10.1506.19010.0_x64__8wekyb3d8bbwe", lpFilePart=0x0) returned 0x8d [0213.400] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\Microsoft.WindowsAlarms_10.1506.19010.0_x64__8wekyb3d8bbwe\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\Microsoft.WindowsAlarms_10.1506.19010.0_x64__8wekyb3d8bbwe\\", lpFilePart=0x0) returned 0x8e [0213.400] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\Microsoft.WindowsAlarms_10.1506.19010.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7d90 [0213.402] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0213.403] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0213.403] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0213.403] FindClose (in: hFindFile=0x5d7d90 | out: hFindFile=0x5d7d90) returned 1 [0213.403] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0213.403] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0213.403] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0213.403] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\Microsoft.WindowsAlarms_10.1506.19010.0_x64__8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\Microsoft.WindowsAlarms_10.1506.19010.0_x64__8wekyb3d8bbwe", lpFilePart=0x0) returned 0x8d [0213.403] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\Microsoft.WindowsAlarms_10.1506.19010.0_x64__8wekyb3d8bbwe\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\Microsoft.WindowsAlarms_10.1506.19010.0_x64__8wekyb3d8bbwe\\", lpFilePart=0x0) returned 0x8e [0213.403] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\Microsoft.WindowsAlarms_10.1506.19010.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7670 [0213.403] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0213.404] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0213.404] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0213.404] FindClose (in: hFindFile=0x5d7670 | out: hFindFile=0x5d7670) returned 1 [0213.404] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0213.404] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0213.404] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0213.404] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\Microsoft.WindowsAlarms_10.1506.19010.0_x64__8wekyb3d8bbwe\\ActivationStore", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\Microsoft.WindowsAlarms_10.1506.19010.0_x64__8wekyb3d8bbwe\\ActivationStore", lpFilePart=0x0) returned 0x9d [0213.404] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\Microsoft.WindowsAlarms_10.1506.19010.0_x64__8wekyb3d8bbwe\\ActivationStore\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\Microsoft.WindowsAlarms_10.1506.19010.0_x64__8wekyb3d8bbwe\\ActivationStore\\", lpFilePart=0x0) returned 0x9e [0213.404] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\Microsoft.WindowsAlarms_10.1506.19010.0_x64__8wekyb3d8bbwe\\ActivationStore\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7f10 [0213.418] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0213.418] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0213.418] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0213.418] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0213.418] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0213.418] FindClose (in: hFindFile=0x5d7f10 | out: hFindFile=0x5d7f10) returned 1 [0213.419] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0213.420] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0213.420] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0213.420] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\Microsoft.WindowsAlarms_10.1506.19010.0_x64__8wekyb3d8bbwe\\ActivationStore", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\Microsoft.WindowsAlarms_10.1506.19010.0_x64__8wekyb3d8bbwe\\ActivationStore", lpFilePart=0x0) returned 0x9d [0213.420] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\Microsoft.WindowsAlarms_10.1506.19010.0_x64__8wekyb3d8bbwe\\ActivationStore\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\Microsoft.WindowsAlarms_10.1506.19010.0_x64__8wekyb3d8bbwe\\ActivationStore\\", lpFilePart=0x0) returned 0x9e [0213.427] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\Microsoft.WindowsAlarms_10.1506.19010.0_x64__8wekyb3d8bbwe\\ActivationStore\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7370 [0213.428] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0213.428] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0213.428] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0213.428] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0213.428] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0213.428] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0213.429] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0213.429] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0213.429] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\Microsoft.WindowsAlarms_10.1506.19010.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\Microsoft.WindowsAlarms_10.1506.19010.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xb1 [0213.429] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0213.429] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\Microsoft.WindowsAlarms_10.1506.19010.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsalarms_8wekyb3d8bbwe\\microsoft.windowsalarms_10.1506.19010.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), fInfoLevelId=0x0, lpFileInformation=0x216c768 | out: lpFileInformation=0x216c768*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdae8d621, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xe110cb69, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0xdb64d25c, ftLastWriteTime.dwHighDateTime=0x1d2d028, nFileSizeHigh=0x0, nFileSizeLow=0x8000)) returned 1 [0213.432] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0213.432] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\Microsoft.WindowsAlarms_10.1506.19010.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\Microsoft.WindowsAlarms_10.1506.19010.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xb1 [0213.432] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0213.432] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\Microsoft.WindowsAlarms_10.1506.19010.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsalarms_8wekyb3d8bbwe\\microsoft.windowsalarms_10.1506.19010.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), fInfoLevelId=0x0, lpFileInformation=0x216c990 | out: lpFileInformation=0x216c990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdae8d621, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xe110cb69, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0xdb64d25c, ftLastWriteTime.dwHighDateTime=0x1d2d028, nFileSizeHigh=0x0, nFileSizeLow=0x8000)) returned 1 [0213.433] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0213.433] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\Microsoft.WindowsAlarms_10.1506.19010.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\Microsoft.WindowsAlarms_10.1506.19010.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xb1 [0213.433] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0213.433] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\Microsoft.WindowsAlarms_10.1506.19010.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsalarms_8wekyb3d8bbwe\\microsoft.windowsalarms_10.1506.19010.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0213.434] GetFileType (hFile=0x444) returned 0x1 [0213.434] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0213.434] GetFileType (hFile=0x444) returned 0x1 [0213.434] ReadFile (in: hFile=0x444, lpBuffer=0x216ef10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x216ef10*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0213.478] CloseHandle (hObject=0x444) returned 1 [0213.478] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\Microsoft.WindowsAlarms_10.1506.19010.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\Microsoft.WindowsAlarms_10.1506.19010.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xb1 [0213.478] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0213.478] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\Microsoft.WindowsAlarms_10.1506.19010.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsalarms_8wekyb3d8bbwe\\microsoft.windowsalarms_10.1506.19010.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0213.479] GetFileType (hFile=0x444) returned 0x1 [0213.479] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0213.479] GetFileType (hFile=0x444) returned 0x1 [0213.479] WriteFile (in: hFile=0x444, lpBuffer=0x216cb98*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x216cb98*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0213.479] CloseHandle (hObject=0x444) returned 1 [0213.479] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\Microsoft.WindowsAlarms_10.1506.19010.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\Microsoft.WindowsAlarms_10.1506.19010.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xb1 [0213.479] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\Microsoft.WindowsAlarms_10.1506.19010.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\Microsoft.WindowsAlarms_10.1506.19010.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.xuy", lpFilePart=0x0) returned 0xb5 [0213.479] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0213.479] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\Microsoft.WindowsAlarms_10.1506.19010.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsalarms_8wekyb3d8bbwe\\microsoft.windowsalarms_10.1506.19010.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdae8d621, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xe110cb69, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x6b167206, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x8000)) returned 1 [0213.479] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0213.479] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\Microsoft.WindowsAlarms_10.1506.19010.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsalarms_8wekyb3d8bbwe\\microsoft.windowsalarms_10.1506.19010.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\Microsoft.WindowsAlarms_10.1506.19010.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsalarms_8wekyb3d8bbwe\\microsoft.windowsalarms_10.1506.19010.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.xuy")) returned 1 [0213.481] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\Microsoft.WindowsAlarms_10.1506.19010.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\Microsoft.WindowsAlarms_10.1506.19010.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xb6 [0213.481] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0213.481] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\Microsoft.WindowsAlarms_10.1506.19010.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsalarms_8wekyb3d8bbwe\\microsoft.windowsalarms_10.1506.19010.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x21eb610 | out: lpFileInformation=0x21eb610*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xdaed9ad6, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xdaed9ad6, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0xdaed9ad6, ftLastWriteTime.dwHighDateTime=0x1d2d028, nFileSizeHigh=0x0, nFileSizeLow=0x5000)) returned 1 [0213.482] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0213.482] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\Microsoft.WindowsAlarms_10.1506.19010.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\Microsoft.WindowsAlarms_10.1506.19010.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xb6 [0213.482] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0213.482] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\Microsoft.WindowsAlarms_10.1506.19010.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsalarms_8wekyb3d8bbwe\\microsoft.windowsalarms_10.1506.19010.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x21eb850 | out: lpFileInformation=0x21eb850*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xdaed9ad6, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xdaed9ad6, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0xdaed9ad6, ftLastWriteTime.dwHighDateTime=0x1d2d028, nFileSizeHigh=0x0, nFileSizeLow=0x5000)) returned 1 [0213.482] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0213.482] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\Microsoft.WindowsAlarms_10.1506.19010.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\Microsoft.WindowsAlarms_10.1506.19010.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xb6 [0213.482] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0213.482] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\Microsoft.WindowsAlarms_10.1506.19010.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsalarms_8wekyb3d8bbwe\\microsoft.windowsalarms_10.1506.19010.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0213.483] GetFileType (hFile=0x444) returned 0x1 [0213.483] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0213.483] GetFileType (hFile=0x444) returned 0x1 [0213.483] ReadFile (in: hFile=0x444, lpBuffer=0x21ede00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x21ede00*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0213.514] CloseHandle (hObject=0x444) returned 1 [0213.515] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\Microsoft.WindowsAlarms_10.1506.19010.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\Microsoft.WindowsAlarms_10.1506.19010.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xb6 [0213.515] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0213.515] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\Microsoft.WindowsAlarms_10.1506.19010.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsalarms_8wekyb3d8bbwe\\microsoft.windowsalarms_10.1506.19010.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0213.515] GetFileType (hFile=0x444) returned 0x1 [0213.515] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0213.515] GetFileType (hFile=0x444) returned 0x1 [0213.515] WriteFile (in: hFile=0x444, lpBuffer=0x21eba70*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x21eba70*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0213.515] CloseHandle (hObject=0x444) returned 1 [0213.515] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\Microsoft.WindowsAlarms_10.1506.19010.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\Microsoft.WindowsAlarms_10.1506.19010.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xb6 [0213.516] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\Microsoft.WindowsAlarms_10.1506.19010.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\Microsoft.WindowsAlarms_10.1506.19010.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1.xuy", lpFilePart=0x0) returned 0xba [0213.516] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0213.516] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\Microsoft.WindowsAlarms_10.1506.19010.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsalarms_8wekyb3d8bbwe\\microsoft.windowsalarms_10.1506.19010.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xdaed9ad6, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xdaed9ad6, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x6b1d974b, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x5000)) returned 1 [0213.516] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0213.516] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\Microsoft.WindowsAlarms_10.1506.19010.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsalarms_8wekyb3d8bbwe\\microsoft.windowsalarms_10.1506.19010.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\Microsoft.WindowsAlarms_10.1506.19010.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsalarms_8wekyb3d8bbwe\\microsoft.windowsalarms_10.1506.19010.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1.xuy")) returned 1 [0213.517] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\Microsoft.WindowsAlarms_10.1506.19010.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\Microsoft.WindowsAlarms_10.1506.19010.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xb6 [0213.517] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0213.517] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\Microsoft.WindowsAlarms_10.1506.19010.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsalarms_8wekyb3d8bbwe\\microsoft.windowsalarms_10.1506.19010.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x226a530 | out: lpFileInformation=0x226a530*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xdaed9ad6, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xdaed9ad6, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0xdaed9ad6, ftLastWriteTime.dwHighDateTime=0x1d2d028, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0213.517] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0213.517] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\Microsoft.WindowsAlarms_10.1506.19010.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\Microsoft.WindowsAlarms_10.1506.19010.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xb6 [0213.517] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0213.518] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\Microsoft.WindowsAlarms_10.1506.19010.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsalarms_8wekyb3d8bbwe\\microsoft.windowsalarms_10.1506.19010.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0213.518] GetFileType (hFile=0x444) returned 0x1 [0213.518] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0213.518] GetFileType (hFile=0x444) returned 0x1 [0213.518] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x0 [0213.518] CloseHandle (hObject=0x444) returned 1 [0213.529] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\Microsoft.WindowsAlarms_10.1506.19010.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\Microsoft.WindowsAlarms_10.1506.19010.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xb6 [0213.529] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0213.529] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\Microsoft.WindowsAlarms_10.1506.19010.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsalarms_8wekyb3d8bbwe\\microsoft.windowsalarms_10.1506.19010.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0213.530] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb070) returned 1 [0213.531] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\Microsoft.WindowsAlarms_10.1506.19010.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbcf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\Microsoft.WindowsAlarms_10.1506.19010.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xb6 [0213.531] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0213.531] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\Microsoft.WindowsAlarms_10.1506.19010.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsalarms_8wekyb3d8bbwe\\microsoft.windowsalarms_10.1506.19010.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x3bc270 | out: lpFileInformation=0x3bc270*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xdaed9ad6, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xdaed9ad6, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0xdaed9ad6, ftLastWriteTime.dwHighDateTime=0x1d2d028, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0213.531] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc150) returned 1 [0213.531] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\Microsoft.WindowsAlarms_10.1506.19010.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbd10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\Microsoft.WindowsAlarms_10.1506.19010.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xb6 [0213.531] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0213.531] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\Microsoft.WindowsAlarms_10.1506.19010.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsalarms_8wekyb3d8bbwe\\microsoft.windowsalarms_10.1506.19010.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x22e19a8 | out: lpFileInformation=0x22e19a8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xdaed9ad6, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xdaed9ad6, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0xdaed9ad6, ftLastWriteTime.dwHighDateTime=0x1d2d028, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0213.531] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc150) returned 1 [0213.531] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\Microsoft.WindowsAlarms_10.1506.19010.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\Microsoft.WindowsAlarms_10.1506.19010.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xb6 [0213.531] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc050) returned 1 [0213.531] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\Microsoft.WindowsAlarms_10.1506.19010.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsalarms_8wekyb3d8bbwe\\microsoft.windowsalarms_10.1506.19010.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0213.531] GetFileType (hFile=0x444) returned 0x1 [0213.531] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbfc0) returned 1 [0213.531] GetFileType (hFile=0x444) returned 0x1 [0213.531] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc1e8 | out: lpFileSizeHigh=0x3bc1e8*=0x0) returned 0x0 [0213.531] CloseHandle (hObject=0x444) returned 1 [0213.541] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc050) returned 1 [0213.542] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\Microsoft.WindowsAlarms_10.1506.19010.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsalarms_8wekyb3d8bbwe\\microsoft.windowsalarms_10.1506.19010.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0213.543] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8ae0) returned 1 [0213.544] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0213.546] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0213.546] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0213.546] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0213.546] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0213.546] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0213.546] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0213.547] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0213.547] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0213.547] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0213.547] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0213.547] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0213.547] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0213.547] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0213.548] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0213.548] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0213.548] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0213.548] FindClose (in: hFindFile=0x5d7e50 | out: hFindFile=0x5d7e50) returned 1 [0213.548] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0213.548] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0213.548] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0213.548] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0213.548] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0213.548] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0213.548] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0213.549] FindClose (in: hFindFile=0x5d7e50 | out: hFindFile=0x5d7e50) returned 1 [0213.549] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0213.549] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0213.549] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0213.549] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsalarms_8wekyb3d8bbwe\\settings\\roaming.lock"), fInfoLevelId=0x0, lpFileInformation=0x235d5a0 | out: lpFileInformation=0x235d5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4adced3, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xd4adced3, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0xd4adced3, ftLastWriteTime.dwHighDateTime=0x1d2d028, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0213.549] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0213.549] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0213.549] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsalarms_8wekyb3d8bbwe\\settings\\roaming.lock"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0213.549] GetFileType (hFile=0x444) returned 0x1 [0213.549] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0213.549] GetFileType (hFile=0x444) returned 0x1 [0213.549] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0x0 [0213.549] CloseHandle (hObject=0x444) returned 1 [0213.639] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\Settings\\roaming.lock", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\Settings\\roaming.lock", lpFilePart=0x0) returned 0x68 [0213.639] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0213.639] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsalarms_8wekyb3d8bbwe\\settings\\roaming.lock"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0213.640] GetFileType (hFile=0x444) returned 0x1 [0213.640] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0213.640] GetFileType (hFile=0x444) returned 0x1 [0213.640] WriteFile (in: hFile=0x444, lpBuffer=0x21d2b70*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x3be628, lpOverlapped=0x0 | out: lpBuffer=0x21d2b70*, lpNumberOfBytesWritten=0x3be628*=0x10, lpOverlapped=0x0) returned 1 [0213.641] CloseHandle (hObject=0x444) returned 1 [0213.641] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\Settings\\roaming.lock", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\Settings\\roaming.lock", lpFilePart=0x0) returned 0x68 [0213.641] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\Settings\\roaming.lock.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\Settings\\roaming.lock.xuy", lpFilePart=0x0) returned 0x6c [0213.641] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsalarms_8wekyb3d8bbwe\\settings\\roaming.lock"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4adced3, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xd4adced3, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x6b30aaeb, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0213.642] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsalarms_8wekyb3d8bbwe\\settings\\roaming.lock"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\Settings\\roaming.lock.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsalarms_8wekyb3d8bbwe\\settings\\roaming.lock.xuy")) returned 1 [0213.643] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\Settings\\settings.dat", lpFilePart=0x0) returned 0x68 [0213.643] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsalarms_8wekyb3d8bbwe\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x21d3eb0 | out: lpFileInformation=0x21d3eb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd110bbca, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xd110bbca, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x8d6f5917, ftLastWriteTime.dwHighDateTime=0x1d0baff, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0213.643] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\Settings\\settings.dat", lpFilePart=0x0) returned 0x68 [0213.643] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsalarms_8wekyb3d8bbwe\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x21d4040 | out: lpFileInformation=0x21d4040*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd110bbca, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xd110bbca, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x8d6f5917, ftLastWriteTime.dwHighDateTime=0x1d0baff, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0213.643] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\Settings\\settings.dat", lpFilePart=0x0) returned 0x68 [0213.643] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsalarms_8wekyb3d8bbwe\\settings\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0213.644] GetFileType (hFile=0x444) returned 0x1 [0213.644] GetFileType (hFile=0x444) returned 0x1 [0213.644] ReadFile (in: hFile=0x444, lpBuffer=0x21d6490, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x21d6490*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0213.656] CloseHandle (hObject=0x444) returned 1 [0213.656] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\Settings\\settings.dat", lpFilePart=0x0) returned 0x68 [0213.656] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsalarms_8wekyb3d8bbwe\\settings\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0213.657] GetFileType (hFile=0x444) returned 0x1 [0213.657] GetFileType (hFile=0x444) returned 0x1 [0213.657] WriteFile (in: hFile=0x444, lpBuffer=0x21d41b0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x21d41b0*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0213.657] CloseHandle (hObject=0x444) returned 1 [0213.657] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\Settings\\settings.dat", lpFilePart=0x0) returned 0x68 [0213.657] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\Settings\\settings.dat.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\Settings\\settings.dat.xuy", lpFilePart=0x0) returned 0x6c [0213.657] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsalarms_8wekyb3d8bbwe\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd110bbca, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xd110bbca, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x6b330ca1, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0213.657] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsalarms_8wekyb3d8bbwe\\settings\\settings.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\Settings\\settings.dat.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsalarms_8wekyb3d8bbwe\\settings\\settings.dat.xuy")) returned 1 [0213.659] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\SystemAppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\SystemAppData", lpFilePart=0x0) returned 0x60 [0213.659] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\SystemAppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\SystemAppData\\", lpFilePart=0x0) returned 0x61 [0213.659] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\SystemAppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7670 [0213.659] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0213.659] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0213.659] FindClose (in: hFindFile=0x5d7670 | out: hFindFile=0x5d7670) returned 1 [0213.659] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\SystemAppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\SystemAppData", lpFilePart=0x0) returned 0x60 [0213.659] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\SystemAppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\SystemAppData\\", lpFilePart=0x0) returned 0x61 [0213.659] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\SystemAppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7c70 [0213.659] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0213.660] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0213.660] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0213.660] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\TempState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\TempState", lpFilePart=0x0) returned 0x5c [0213.660] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\TempState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\TempState\\", lpFilePart=0x0) returned 0x5d [0213.660] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\TempState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7c70 [0213.660] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0213.660] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0213.660] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0213.660] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\TempState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\TempState", lpFilePart=0x0) returned 0x5c [0213.660] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\TempState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\TempState\\", lpFilePart=0x0) returned 0x5d [0213.660] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\TempState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7550 [0213.661] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0213.661] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0213.661] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0213.661] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe", lpFilePart=0x0) returned 0x56 [0213.661] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\", lpFilePart=0x0) returned 0x57 [0213.661] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d7fd0 [0213.686] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0213.686] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0213.686] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0213.686] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0213.687] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0213.687] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0213.687] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0213.687] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0213.687] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0213.687] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0213.688] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0213.688] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0213.688] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe", lpFilePart=0x0) returned 0x56 [0213.688] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\", lpFilePart=0x0) returned 0x57 [0213.688] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d7a90 [0213.689] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0213.689] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0213.689] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0213.690] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0213.690] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0213.690] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0213.690] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0213.690] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0213.690] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0213.690] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0213.690] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0213.691] FindClose (in: hFindFile=0x5d7a90 | out: hFindFile=0x5d7a90) returned 1 [0213.691] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\AC", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\AC", lpFilePart=0x0) returned 0x59 [0213.691] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\AC\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\AC\\", lpFilePart=0x0) returned 0x5a [0213.691] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\AC\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7550 [0213.698] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0213.699] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0213.699] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0213.699] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0213.699] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0213.699] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0213.699] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0213.700] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\AC", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\AC", lpFilePart=0x0) returned 0x59 [0213.700] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\AC\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\AC\\", lpFilePart=0x0) returned 0x5a [0213.700] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\AC\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7fd0 [0213.701] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0213.701] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0213.702] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0213.702] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0213.702] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0213.702] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0213.702] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0213.703] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\AC\\INetCache", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\AC\\INetCache", lpFilePart=0x0) returned 0x63 [0213.703] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\AC\\INetCache\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\AC\\INetCache\\", lpFilePart=0x0) returned 0x64 [0213.703] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\AC\\INetCache\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7a30 [0213.705] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0213.705] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0213.705] FindClose (in: hFindFile=0x5d7a30 | out: hFindFile=0x5d7a30) returned 1 [0213.705] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\AC\\INetCache", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\AC\\INetCache", lpFilePart=0x0) returned 0x63 [0213.705] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\AC\\INetCache\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\AC\\INetCache\\", lpFilePart=0x0) returned 0x64 [0213.705] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\AC\\INetCache\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d78b0 [0213.706] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0213.706] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0213.706] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0213.706] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\AC\\INetCookies", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\AC\\INetCookies", lpFilePart=0x0) returned 0x65 [0213.706] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\AC\\INetCookies\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\AC\\INetCookies\\", lpFilePart=0x0) returned 0x66 [0213.706] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\AC\\INetCookies\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d81b0 [0213.711] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0213.711] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0213.711] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0213.712] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\AC\\INetCookies", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\AC\\INetCookies", lpFilePart=0x0) returned 0x65 [0213.712] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\AC\\INetCookies\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\AC\\INetCookies\\", lpFilePart=0x0) returned 0x66 [0213.712] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\AC\\INetCookies\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7c70 [0213.712] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0213.712] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0213.712] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0213.712] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\AC\\INetHistory", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\AC\\INetHistory", lpFilePart=0x0) returned 0x65 [0213.712] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\AC\\INetHistory\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\AC\\INetHistory\\", lpFilePart=0x0) returned 0x66 [0213.712] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\AC\\INetHistory\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7670 [0213.712] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0213.713] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0213.713] FindClose (in: hFindFile=0x5d7670 | out: hFindFile=0x5d7670) returned 1 [0213.713] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\AC\\INetHistory", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\AC\\INetHistory", lpFilePart=0x0) returned 0x65 [0213.713] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\AC\\INetHistory\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\AC\\INetHistory\\", lpFilePart=0x0) returned 0x66 [0213.713] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\AC\\INetHistory\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7eb0 [0213.713] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0213.713] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0213.713] FindClose (in: hFindFile=0x5d7eb0 | out: hFindFile=0x5d7eb0) returned 1 [0213.713] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\AC\\Temp", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\AC\\Temp", lpFilePart=0x0) returned 0x5e [0213.713] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\AC\\Temp\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\AC\\Temp\\", lpFilePart=0x0) returned 0x5f [0213.713] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\AC\\Temp\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7550 [0213.714] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0213.714] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0213.714] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0213.714] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\AC\\Temp", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\AC\\Temp", lpFilePart=0x0) returned 0x5e [0213.714] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\AC\\Temp\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\AC\\Temp\\", lpFilePart=0x0) returned 0x5f [0213.714] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\AC\\Temp\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d79d0 [0213.714] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0213.714] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0213.714] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0213.714] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\AppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\AppData", lpFilePart=0x0) returned 0x5e [0213.715] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\AppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\AppData\\", lpFilePart=0x0) returned 0x5f [0213.715] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\AppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7550 [0213.715] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0213.715] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0213.715] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0213.715] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\AppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\AppData", lpFilePart=0x0) returned 0x5e [0213.715] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\AppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\AppData\\", lpFilePart=0x0) returned 0x5f [0213.716] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\AppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d81b0 [0213.716] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0213.716] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0213.716] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0213.716] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\LocalCache", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\LocalCache", lpFilePart=0x0) returned 0x61 [0213.716] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\LocalCache\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\LocalCache\\", lpFilePart=0x0) returned 0x62 [0213.716] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\LocalCache\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d79d0 [0213.718] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0213.718] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0213.719] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0213.719] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\LocalCache", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\LocalCache", lpFilePart=0x0) returned 0x61 [0213.719] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\LocalCache\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\LocalCache\\", lpFilePart=0x0) returned 0x62 [0213.719] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\LocalCache\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7fd0 [0213.719] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0213.719] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0213.719] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0213.719] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\LocalState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\LocalState", lpFilePart=0x0) returned 0x61 [0213.719] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\LocalState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\LocalState\\", lpFilePart=0x0) returned 0x62 [0213.719] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\LocalState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d78b0 [0213.719] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0213.720] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0213.720] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0213.720] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\LocalState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\LocalState", lpFilePart=0x0) returned 0x61 [0213.720] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\LocalState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\LocalState\\", lpFilePart=0x0) returned 0x62 [0213.720] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\LocalState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7c70 [0213.720] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0213.720] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0213.720] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0213.720] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Microsoft.WindowsCalculator_10.1506.19010.0_x64__8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Microsoft.WindowsCalculator_10.1506.19010.0_x64__8wekyb3d8bbwe", lpFilePart=0x0) returned 0x95 [0213.720] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Microsoft.WindowsCalculator_10.1506.19010.0_x64__8wekyb3d8bbwe\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Microsoft.WindowsCalculator_10.1506.19010.0_x64__8wekyb3d8bbwe\\", lpFilePart=0x0) returned 0x96 [0213.720] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Microsoft.WindowsCalculator_10.1506.19010.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7c70 [0213.731] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0213.732] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0213.732] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0213.732] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0213.733] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Microsoft.WindowsCalculator_10.1506.19010.0_x64__8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Microsoft.WindowsCalculator_10.1506.19010.0_x64__8wekyb3d8bbwe", lpFilePart=0x0) returned 0x95 [0213.733] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Microsoft.WindowsCalculator_10.1506.19010.0_x64__8wekyb3d8bbwe\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Microsoft.WindowsCalculator_10.1506.19010.0_x64__8wekyb3d8bbwe\\", lpFilePart=0x0) returned 0x96 [0213.733] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Microsoft.WindowsCalculator_10.1506.19010.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7370 [0213.733] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0213.733] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0213.733] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0213.733] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0213.734] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Microsoft.WindowsCalculator_10.1506.19010.0_x64__8wekyb3d8bbwe\\ActivationStore", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Microsoft.WindowsCalculator_10.1506.19010.0_x64__8wekyb3d8bbwe\\ActivationStore", lpFilePart=0x0) returned 0xa5 [0213.734] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Microsoft.WindowsCalculator_10.1506.19010.0_x64__8wekyb3d8bbwe\\ActivationStore\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Microsoft.WindowsCalculator_10.1506.19010.0_x64__8wekyb3d8bbwe\\ActivationStore\\", lpFilePart=0x0) returned 0xa6 [0213.734] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Microsoft.WindowsCalculator_10.1506.19010.0_x64__8wekyb3d8bbwe\\ActivationStore\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7c70 [0213.754] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0213.754] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0213.754] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0213.754] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0213.754] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0213.754] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0213.755] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Microsoft.WindowsCalculator_10.1506.19010.0_x64__8wekyb3d8bbwe\\ActivationStore", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Microsoft.WindowsCalculator_10.1506.19010.0_x64__8wekyb3d8bbwe\\ActivationStore", lpFilePart=0x0) returned 0xa5 [0213.755] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Microsoft.WindowsCalculator_10.1506.19010.0_x64__8wekyb3d8bbwe\\ActivationStore\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Microsoft.WindowsCalculator_10.1506.19010.0_x64__8wekyb3d8bbwe\\ActivationStore\\", lpFilePart=0x0) returned 0xa6 [0213.755] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Microsoft.WindowsCalculator_10.1506.19010.0_x64__8wekyb3d8bbwe\\ActivationStore\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d8090 [0213.756] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0213.756] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0213.756] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0213.756] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0213.756] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0213.756] FindClose (in: hFindFile=0x5d8090 | out: hFindFile=0x5d8090) returned 1 [0213.757] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Microsoft.WindowsCalculator_10.1506.19010.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Microsoft.WindowsCalculator_10.1506.19010.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xb9 [0213.757] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Microsoft.WindowsCalculator_10.1506.19010.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscalculator_8wekyb3d8bbwe\\microsoft.windowscalculator_10.1506.19010.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), fInfoLevelId=0x0, lpFileInformation=0x2273f68 | out: lpFileInformation=0x2273f68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb30a7fc, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0xca07b29, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0xca07b29, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0213.758] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Microsoft.WindowsCalculator_10.1506.19010.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Microsoft.WindowsCalculator_10.1506.19010.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xb9 [0213.758] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Microsoft.WindowsCalculator_10.1506.19010.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscalculator_8wekyb3d8bbwe\\microsoft.windowscalculator_10.1506.19010.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), fInfoLevelId=0x0, lpFileInformation=0x22741a0 | out: lpFileInformation=0x22741a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb30a7fc, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0xca07b29, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0xca07b29, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0213.758] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Microsoft.WindowsCalculator_10.1506.19010.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Microsoft.WindowsCalculator_10.1506.19010.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xb9 [0213.758] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Microsoft.WindowsCalculator_10.1506.19010.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscalculator_8wekyb3d8bbwe\\microsoft.windowscalculator_10.1506.19010.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0213.759] GetFileType (hFile=0x444) returned 0x1 [0213.759] GetFileType (hFile=0x444) returned 0x1 [0213.759] ReadFile (in: hFile=0x444, lpBuffer=0x2276740, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x2276740*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0213.775] CloseHandle (hObject=0x444) returned 1 [0213.775] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Microsoft.WindowsCalculator_10.1506.19010.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Microsoft.WindowsCalculator_10.1506.19010.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xb9 [0213.775] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Microsoft.WindowsCalculator_10.1506.19010.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscalculator_8wekyb3d8bbwe\\microsoft.windowscalculator_10.1506.19010.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0213.776] GetFileType (hFile=0x444) returned 0x1 [0213.776] GetFileType (hFile=0x444) returned 0x1 [0213.776] WriteFile (in: hFile=0x444, lpBuffer=0x22743b8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x22743b8*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0213.776] CloseHandle (hObject=0x444) returned 1 [0213.776] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Microsoft.WindowsCalculator_10.1506.19010.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Microsoft.WindowsCalculator_10.1506.19010.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xb9 [0213.776] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Microsoft.WindowsCalculator_10.1506.19010.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Microsoft.WindowsCalculator_10.1506.19010.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.xuy", lpFilePart=0x0) returned 0xbd [0213.776] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Microsoft.WindowsCalculator_10.1506.19010.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscalculator_8wekyb3d8bbwe\\microsoft.windowscalculator_10.1506.19010.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb30a7fc, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0xca07b29, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x6b43baa5, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0213.776] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Microsoft.WindowsCalculator_10.1506.19010.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscalculator_8wekyb3d8bbwe\\microsoft.windowscalculator_10.1506.19010.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Microsoft.WindowsCalculator_10.1506.19010.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscalculator_8wekyb3d8bbwe\\microsoft.windowscalculator_10.1506.19010.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.xuy")) returned 1 [0213.778] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Microsoft.WindowsCalculator_10.1506.19010.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Microsoft.WindowsCalculator_10.1506.19010.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xbe [0213.778] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Microsoft.WindowsCalculator_10.1506.19010.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscalculator_8wekyb3d8bbwe\\microsoft.windowscalculator_10.1506.19010.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x22f2e80 | out: lpFileInformation=0x22f2e80*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xb356dd9, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0xb356dd9, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0xb356dd9, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0213.804] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Microsoft.WindowsCalculator_10.1506.19010.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Microsoft.WindowsCalculator_10.1506.19010.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xbe [0213.804] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Microsoft.WindowsCalculator_10.1506.19010.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscalculator_8wekyb3d8bbwe\\microsoft.windowscalculator_10.1506.19010.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x22f30d0 | out: lpFileInformation=0x22f30d0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xb356dd9, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0xb356dd9, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0xb356dd9, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0213.804] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Microsoft.WindowsCalculator_10.1506.19010.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Microsoft.WindowsCalculator_10.1506.19010.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xbe [0213.804] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Microsoft.WindowsCalculator_10.1506.19010.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscalculator_8wekyb3d8bbwe\\microsoft.windowscalculator_10.1506.19010.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0213.805] GetFileType (hFile=0x444) returned 0x1 [0213.805] GetFileType (hFile=0x444) returned 0x1 [0213.805] ReadFile (in: hFile=0x444, lpBuffer=0x22f56a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x22f56a0*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0213.819] CloseHandle (hObject=0x444) returned 1 [0213.819] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Microsoft.WindowsCalculator_10.1506.19010.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Microsoft.WindowsCalculator_10.1506.19010.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xbe [0213.820] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Microsoft.WindowsCalculator_10.1506.19010.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscalculator_8wekyb3d8bbwe\\microsoft.windowscalculator_10.1506.19010.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0213.820] GetFileType (hFile=0x444) returned 0x1 [0213.820] GetFileType (hFile=0x444) returned 0x1 [0213.820] WriteFile (in: hFile=0x444, lpBuffer=0x216aec0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x216aec0*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0213.820] CloseHandle (hObject=0x444) returned 1 [0213.820] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Microsoft.WindowsCalculator_10.1506.19010.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Microsoft.WindowsCalculator_10.1506.19010.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xbe [0213.820] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Microsoft.WindowsCalculator_10.1506.19010.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Microsoft.WindowsCalculator_10.1506.19010.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1.xuy", lpFilePart=0x0) returned 0xc2 [0213.820] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Microsoft.WindowsCalculator_10.1506.19010.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscalculator_8wekyb3d8bbwe\\microsoft.windowscalculator_10.1506.19010.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xb356dd9, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0xb356dd9, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x6b4ac49b, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0213.820] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Microsoft.WindowsCalculator_10.1506.19010.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscalculator_8wekyb3d8bbwe\\microsoft.windowscalculator_10.1506.19010.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Microsoft.WindowsCalculator_10.1506.19010.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscalculator_8wekyb3d8bbwe\\microsoft.windowscalculator_10.1506.19010.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1.xuy")) returned 1 [0213.822] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Microsoft.WindowsCalculator_10.1506.19010.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Microsoft.WindowsCalculator_10.1506.19010.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xbe [0213.822] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Microsoft.WindowsCalculator_10.1506.19010.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscalculator_8wekyb3d8bbwe\\microsoft.windowscalculator_10.1506.19010.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x2176640 | out: lpFileInformation=0x2176640*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xb356dd9, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0xb356dd9, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0xb356dd9, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0213.822] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Microsoft.WindowsCalculator_10.1506.19010.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Microsoft.WindowsCalculator_10.1506.19010.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xbe [0213.822] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Microsoft.WindowsCalculator_10.1506.19010.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscalculator_8wekyb3d8bbwe\\microsoft.windowscalculator_10.1506.19010.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0213.823] GetFileType (hFile=0x444) returned 0x1 [0213.823] GetFileType (hFile=0x444) returned 0x1 [0213.823] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x0 [0213.823] CloseHandle (hObject=0x444) returned 1 [0213.833] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Microsoft.WindowsCalculator_10.1506.19010.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Microsoft.WindowsCalculator_10.1506.19010.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xbe [0213.833] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Microsoft.WindowsCalculator_10.1506.19010.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscalculator_8wekyb3d8bbwe\\microsoft.windowscalculator_10.1506.19010.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0213.834] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb070) returned 1 [0213.835] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Microsoft.WindowsCalculator_10.1506.19010.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbcf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Microsoft.WindowsCalculator_10.1506.19010.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xbe [0213.835] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0213.835] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Microsoft.WindowsCalculator_10.1506.19010.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscalculator_8wekyb3d8bbwe\\microsoft.windowscalculator_10.1506.19010.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x3bc270 | out: lpFileInformation=0x3bc270*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xb356dd9, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0xb356dd9, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0xb356dd9, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0213.835] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc150) returned 1 [0213.835] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Microsoft.WindowsCalculator_10.1506.19010.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbd10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Microsoft.WindowsCalculator_10.1506.19010.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xbe [0213.835] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0213.835] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Microsoft.WindowsCalculator_10.1506.19010.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscalculator_8wekyb3d8bbwe\\microsoft.windowscalculator_10.1506.19010.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x21edb28 | out: lpFileInformation=0x21edb28*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xb356dd9, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0xb356dd9, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0xb356dd9, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0213.835] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc150) returned 1 [0213.835] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Microsoft.WindowsCalculator_10.1506.19010.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Microsoft.WindowsCalculator_10.1506.19010.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xbe [0213.835] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc050) returned 1 [0213.835] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Microsoft.WindowsCalculator_10.1506.19010.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscalculator_8wekyb3d8bbwe\\microsoft.windowscalculator_10.1506.19010.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0213.836] GetFileType (hFile=0x444) returned 0x1 [0213.836] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbfc0) returned 1 [0213.836] GetFileType (hFile=0x444) returned 0x1 [0213.836] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc1e8 | out: lpFileSizeHigh=0x3bc1e8*=0x0) returned 0x0 [0213.836] CloseHandle (hObject=0x444) returned 1 [0213.880] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Microsoft.WindowsCalculator_10.1506.19010.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Microsoft.WindowsCalculator_10.1506.19010.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xbe [0213.880] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc050) returned 1 [0213.881] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Microsoft.WindowsCalculator_10.1506.19010.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscalculator_8wekyb3d8bbwe\\microsoft.windowscalculator_10.1506.19010.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0213.882] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8ae0) returned 1 [0213.883] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0213.883] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\RoamingState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\RoamingState", lpFilePart=0x0) returned 0x63 [0213.883] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\RoamingState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\RoamingState\\", lpFilePart=0x0) returned 0x64 [0213.883] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\RoamingState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7cd0 [0213.883] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0213.884] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0213.884] FindClose (in: hFindFile=0x5d7cd0 | out: hFindFile=0x5d7cd0) returned 1 [0213.884] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0213.884] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0213.884] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0213.884] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\RoamingState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\RoamingState", lpFilePart=0x0) returned 0x63 [0213.884] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\RoamingState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\RoamingState\\", lpFilePart=0x0) returned 0x64 [0213.884] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\RoamingState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d81b0 [0213.884] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0213.884] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0213.884] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0213.884] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0213.884] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0213.884] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0213.885] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Settings", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Settings", lpFilePart=0x0) returned 0x5f [0213.885] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Settings\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Settings\\", lpFilePart=0x0) returned 0x60 [0213.885] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Settings\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7610 [0213.885] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0213.885] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0213.885] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0213.885] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0213.885] FindClose (in: hFindFile=0x5d7610 | out: hFindFile=0x5d7610) returned 1 [0213.885] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0213.885] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0213.885] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0213.885] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Settings", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Settings", lpFilePart=0x0) returned 0x5f [0213.886] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Settings\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Settings\\", lpFilePart=0x0) returned 0x60 [0213.886] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Settings\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d78b0 [0213.886] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0213.886] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0213.886] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0213.886] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0213.886] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0213.888] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0213.888] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0213.888] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Settings\\roaming.lock", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Settings\\roaming.lock", lpFilePart=0x0) returned 0x6c [0213.888] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0213.888] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscalculator_8wekyb3d8bbwe\\settings\\roaming.lock"), fInfoLevelId=0x0, lpFileInformation=0x2269960 | out: lpFileInformation=0x2269960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc80580, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0xc80580, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0xc80580, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0213.888] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0213.888] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Settings\\roaming.lock", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Settings\\roaming.lock", lpFilePart=0x0) returned 0x6c [0213.888] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0213.888] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscalculator_8wekyb3d8bbwe\\settings\\roaming.lock"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0213.888] GetFileType (hFile=0x444) returned 0x1 [0213.888] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0213.888] GetFileType (hFile=0x444) returned 0x1 [0213.888] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0x0 [0213.889] CloseHandle (hObject=0x444) returned 1 [0213.898] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Settings\\roaming.lock", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Settings\\roaming.lock", lpFilePart=0x0) returned 0x6c [0213.899] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0213.899] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscalculator_8wekyb3d8bbwe\\settings\\roaming.lock"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0213.900] GetFileType (hFile=0x444) returned 0x1 [0213.900] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0213.900] GetFileType (hFile=0x444) returned 0x1 [0213.900] WriteFile (in: hFile=0x444, lpBuffer=0x22dfde0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x3be628, lpOverlapped=0x0 | out: lpBuffer=0x22dfde0*, lpNumberOfBytesWritten=0x3be628*=0x10, lpOverlapped=0x0) returned 1 [0213.901] CloseHandle (hObject=0x444) returned 1 [0213.901] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Settings\\roaming.lock", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Settings\\roaming.lock", lpFilePart=0x0) returned 0x6c [0213.901] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Settings\\roaming.lock.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Settings\\roaming.lock.xuy", lpFilePart=0x0) returned 0x70 [0213.901] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0213.901] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscalculator_8wekyb3d8bbwe\\settings\\roaming.lock"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc80580, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0xc80580, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x6b56b066, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0213.901] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0213.901] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscalculator_8wekyb3d8bbwe\\settings\\roaming.lock"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Settings\\roaming.lock.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscalculator_8wekyb3d8bbwe\\settings\\roaming.lock.xuy")) returned 1 [0213.903] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Settings\\settings.dat", lpFilePart=0x0) returned 0x6c [0213.903] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0213.903] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscalculator_8wekyb3d8bbwe\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x22e1138 | out: lpFileInformation=0x22e1138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc1880, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0xbc1880, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x8d6f5917, ftLastWriteTime.dwHighDateTime=0x1d0baff, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0213.903] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0213.903] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Settings\\settings.dat", lpFilePart=0x0) returned 0x6c [0213.904] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0213.904] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscalculator_8wekyb3d8bbwe\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x22e12d0 | out: lpFileInformation=0x22e12d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc1880, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0xbc1880, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x8d6f5917, ftLastWriteTime.dwHighDateTime=0x1d0baff, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0213.904] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0213.904] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Settings\\settings.dat", lpFilePart=0x0) returned 0x6c [0213.904] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0213.904] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscalculator_8wekyb3d8bbwe\\settings\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0213.905] GetFileType (hFile=0x444) returned 0x1 [0213.905] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0213.905] GetFileType (hFile=0x444) returned 0x1 [0213.905] ReadFile (in: hFile=0x444, lpBuffer=0x22e3730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x22e3730*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0213.917] CloseHandle (hObject=0x444) returned 1 [0213.918] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Settings\\settings.dat", lpFilePart=0x0) returned 0x6c [0213.918] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0213.918] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscalculator_8wekyb3d8bbwe\\settings\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0213.919] GetFileType (hFile=0x444) returned 0x1 [0213.919] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0213.919] GetFileType (hFile=0x444) returned 0x1 [0213.919] WriteFile (in: hFile=0x444, lpBuffer=0x22e1448*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x22e1448*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0213.919] CloseHandle (hObject=0x444) returned 1 [0213.919] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Settings\\settings.dat", lpFilePart=0x0) returned 0x6c [0213.919] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Settings\\settings.dat.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Settings\\settings.dat.xuy", lpFilePart=0x0) returned 0x70 [0213.919] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0213.919] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscalculator_8wekyb3d8bbwe\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc1880, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0xbc1880, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x6b5b76a2, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0213.919] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0213.919] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscalculator_8wekyb3d8bbwe\\settings\\settings.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Settings\\settings.dat.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscalculator_8wekyb3d8bbwe\\settings\\settings.dat.xuy")) returned 1 [0213.921] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0213.921] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\SystemAppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\SystemAppData", lpFilePart=0x0) returned 0x64 [0213.921] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\SystemAppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\SystemAppData\\", lpFilePart=0x0) returned 0x65 [0213.921] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\SystemAppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7f10 [0213.921] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0213.921] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0213.922] FindClose (in: hFindFile=0x5d7f10 | out: hFindFile=0x5d7f10) returned 1 [0213.922] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0213.922] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0213.922] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0213.922] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\SystemAppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\SystemAppData", lpFilePart=0x0) returned 0x64 [0213.922] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\SystemAppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\SystemAppData\\", lpFilePart=0x0) returned 0x65 [0213.922] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\SystemAppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d78b0 [0213.922] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0213.922] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0213.922] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0213.922] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0213.922] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0213.922] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0213.922] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\TempState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\TempState", lpFilePart=0x0) returned 0x60 [0213.922] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\TempState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\TempState\\", lpFilePart=0x0) returned 0x61 [0213.923] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\TempState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d78b0 [0213.923] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0213.923] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0213.923] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0213.923] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0213.923] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0213.923] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0213.923] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\TempState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\TempState", lpFilePart=0x0) returned 0x60 [0213.923] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\TempState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\TempState\\", lpFilePart=0x0) returned 0x61 [0213.923] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\TempState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d81b0 [0213.923] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0213.924] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0213.924] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0213.924] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0213.924] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0213.924] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0213.924] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe", lpFilePart=0x0) returned 0x52 [0213.924] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\", lpFilePart=0x0) returned 0x53 [0213.924] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d7af0 [0213.930] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0213.931] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0213.931] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0213.931] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0213.931] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0213.931] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0213.931] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0213.931] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0213.932] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0213.932] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0213.932] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0213.932] FindClose (in: hFindFile=0x5d7af0 | out: hFindFile=0x5d7af0) returned 1 [0213.933] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0213.933] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0213.933] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0213.933] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe", lpFilePart=0x0) returned 0x52 [0213.933] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\", lpFilePart=0x0) returned 0x53 [0213.933] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d79d0 [0213.934] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0213.934] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0213.934] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0213.934] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0213.934] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0213.934] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0213.935] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0213.935] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0213.935] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0213.935] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0213.935] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0213.935] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0213.936] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0213.936] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0213.936] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0213.936] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\AC", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\AC", lpFilePart=0x0) returned 0x55 [0213.936] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\AC\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\AC\\", lpFilePart=0x0) returned 0x56 [0213.936] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\AC\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7a90 [0213.945] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0213.946] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0213.946] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0213.946] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0213.946] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0213.946] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0213.946] FindClose (in: hFindFile=0x5d7a90 | out: hFindFile=0x5d7a90) returned 1 [0213.947] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0213.947] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0213.947] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0213.947] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\AC", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\AC", lpFilePart=0x0) returned 0x55 [0213.947] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\AC\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\AC\\", lpFilePart=0x0) returned 0x56 [0213.947] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\AC\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7df0 [0213.948] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0213.948] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0213.948] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0213.948] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0213.948] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0213.949] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0213.949] FindClose (in: hFindFile=0x5d7df0 | out: hFindFile=0x5d7df0) returned 1 [0213.950] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0213.950] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0213.950] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0213.950] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\AC\\INetCache", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\AC\\INetCache", lpFilePart=0x0) returned 0x5f [0213.950] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\AC\\INetCache\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\AC\\INetCache\\", lpFilePart=0x0) returned 0x60 [0213.950] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\AC\\INetCache\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7c70 [0213.953] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0213.953] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0213.953] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0213.953] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0213.954] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0213.954] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0213.954] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\AC\\INetCache", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\AC\\INetCache", lpFilePart=0x0) returned 0x5f [0213.954] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\AC\\INetCache\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\AC\\INetCache\\", lpFilePart=0x0) returned 0x60 [0213.954] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\AC\\INetCache\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d81b0 [0213.954] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0213.954] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0213.954] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0213.955] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0213.955] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0213.955] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0213.955] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\AC\\INetCookies", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\AC\\INetCookies", lpFilePart=0x0) returned 0x61 [0213.955] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\AC\\INetCookies\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\AC\\INetCookies\\", lpFilePart=0x0) returned 0x62 [0213.955] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\AC\\INetCookies\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d8090 [0213.955] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0213.955] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0213.955] FindClose (in: hFindFile=0x5d8090 | out: hFindFile=0x5d8090) returned 1 [0213.955] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0213.955] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0213.958] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0213.958] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\AC\\INetCookies", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\AC\\INetCookies", lpFilePart=0x0) returned 0x61 [0213.958] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\AC\\INetCookies\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\AC\\INetCookies\\", lpFilePart=0x0) returned 0x62 [0213.958] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\AC\\INetCookies\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7550 [0213.958] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0213.958] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0213.958] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0213.958] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0213.958] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0213.959] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0213.959] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\AC\\INetHistory", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\AC\\INetHistory", lpFilePart=0x0) returned 0x61 [0213.959] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\AC\\INetHistory\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\AC\\INetHistory\\", lpFilePart=0x0) returned 0x62 [0213.959] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\AC\\INetHistory\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7c70 [0213.959] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0213.959] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0213.959] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0213.959] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0213.959] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0213.959] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0213.959] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\AC\\INetHistory", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\AC\\INetHistory", lpFilePart=0x0) returned 0x61 [0213.959] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\AC\\INetHistory\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\AC\\INetHistory\\", lpFilePart=0x0) returned 0x62 [0213.959] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\AC\\INetHistory\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d78b0 [0213.959] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0213.960] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0213.960] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0213.960] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0213.960] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0213.960] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0213.960] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\AC\\Temp", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\AC\\Temp", lpFilePart=0x0) returned 0x5a [0213.960] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\AC\\Temp\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\AC\\Temp\\", lpFilePart=0x0) returned 0x5b [0213.960] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\AC\\Temp\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d81b0 [0213.960] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0213.960] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0213.960] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0213.960] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0213.960] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0213.960] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0213.961] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\AC\\Temp", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\AC\\Temp", lpFilePart=0x0) returned 0x5a [0213.961] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\AC\\Temp\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\AC\\Temp\\", lpFilePart=0x0) returned 0x5b [0213.961] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\AC\\Temp\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7670 [0213.961] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0213.961] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0213.961] FindClose (in: hFindFile=0x5d7670 | out: hFindFile=0x5d7670) returned 1 [0213.961] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0213.961] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0213.961] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0213.961] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\AppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\AppData", lpFilePart=0x0) returned 0x5a [0213.961] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\AppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\AppData\\", lpFilePart=0x0) returned 0x5b [0213.961] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\AppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7610 [0213.961] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0213.961] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0213.962] FindClose (in: hFindFile=0x5d7610 | out: hFindFile=0x5d7610) returned 1 [0213.962] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0213.962] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0213.962] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0213.962] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\AppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\AppData", lpFilePart=0x0) returned 0x5a [0213.962] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\AppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\AppData\\", lpFilePart=0x0) returned 0x5b [0213.962] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\AppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7550 [0213.962] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0213.962] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0213.962] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0213.962] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0213.962] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0213.962] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0213.962] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\LocalCache", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\LocalCache", lpFilePart=0x0) returned 0x5d [0213.962] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\LocalCache\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\LocalCache\\", lpFilePart=0x0) returned 0x5e [0213.962] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\LocalCache\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7670 [0213.971] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0213.972] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0213.972] FindClose (in: hFindFile=0x5d7670 | out: hFindFile=0x5d7670) returned 1 [0213.972] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0213.972] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0213.972] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0213.972] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\LocalCache", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\LocalCache", lpFilePart=0x0) returned 0x5d [0213.972] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\LocalCache\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\LocalCache\\", lpFilePart=0x0) returned 0x5e [0213.972] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\LocalCache\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7c70 [0213.972] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0213.972] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0213.972] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0213.972] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0213.972] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0213.972] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0213.973] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\LocalState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\LocalState", lpFilePart=0x0) returned 0x5d [0213.973] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\LocalState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\LocalState\\", lpFilePart=0x0) returned 0x5e [0213.973] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\LocalState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7cd0 [0213.973] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0213.973] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0213.973] FindClose (in: hFindFile=0x5d7cd0 | out: hFindFile=0x5d7cd0) returned 1 [0213.973] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0213.973] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0213.973] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0213.973] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\LocalState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\LocalState", lpFilePart=0x0) returned 0x5d [0213.973] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\LocalState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\LocalState\\", lpFilePart=0x0) returned 0x5e [0213.973] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\LocalState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d78b0 [0213.973] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0213.974] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0213.974] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0213.974] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0213.974] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0213.974] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0213.974] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\Microsoft.WindowsCamera_5.38.3003.0_x64__8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\Microsoft.WindowsCamera_5.38.3003.0_x64__8wekyb3d8bbwe", lpFilePart=0x0) returned 0x89 [0213.974] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\Microsoft.WindowsCamera_5.38.3003.0_x64__8wekyb3d8bbwe\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\Microsoft.WindowsCamera_5.38.3003.0_x64__8wekyb3d8bbwe\\", lpFilePart=0x0) returned 0x8a [0213.974] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\Microsoft.WindowsCamera_5.38.3003.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7370 [0213.974] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0213.974] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0213.974] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0213.975] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0213.975] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0213.975] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0213.975] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0213.975] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\Microsoft.WindowsCamera_5.38.3003.0_x64__8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\Microsoft.WindowsCamera_5.38.3003.0_x64__8wekyb3d8bbwe", lpFilePart=0x0) returned 0x89 [0213.975] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\Microsoft.WindowsCamera_5.38.3003.0_x64__8wekyb3d8bbwe\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\Microsoft.WindowsCamera_5.38.3003.0_x64__8wekyb3d8bbwe\\", lpFilePart=0x0) returned 0x8a [0213.975] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\Microsoft.WindowsCamera_5.38.3003.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d78b0 [0213.975] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0213.975] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0213.975] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0213.975] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0213.975] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0213.975] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0213.975] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0213.975] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\Microsoft.WindowsCamera_5.38.3003.0_x64__8wekyb3d8bbwe\\ActivationStore", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\Microsoft.WindowsCamera_5.38.3003.0_x64__8wekyb3d8bbwe\\ActivationStore", lpFilePart=0x0) returned 0x99 [0213.975] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\Microsoft.WindowsCamera_5.38.3003.0_x64__8wekyb3d8bbwe\\ActivationStore\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\Microsoft.WindowsCamera_5.38.3003.0_x64__8wekyb3d8bbwe\\ActivationStore\\", lpFilePart=0x0) returned 0x9a [0213.976] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\Microsoft.WindowsCamera_5.38.3003.0_x64__8wekyb3d8bbwe\\ActivationStore\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7550 [0213.995] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0213.995] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0213.995] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0213.995] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0213.995] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0213.995] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0213.996] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0213.996] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0213.996] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0213.997] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\Microsoft.WindowsCamera_5.38.3003.0_x64__8wekyb3d8bbwe\\ActivationStore", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\Microsoft.WindowsCamera_5.38.3003.0_x64__8wekyb3d8bbwe\\ActivationStore", lpFilePart=0x0) returned 0x99 [0213.997] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\Microsoft.WindowsCamera_5.38.3003.0_x64__8wekyb3d8bbwe\\ActivationStore\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\Microsoft.WindowsCamera_5.38.3003.0_x64__8wekyb3d8bbwe\\ActivationStore\\", lpFilePart=0x0) returned 0x9a [0213.997] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\Microsoft.WindowsCamera_5.38.3003.0_x64__8wekyb3d8bbwe\\ActivationStore\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7a30 [0213.998] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0213.998] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0213.998] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0213.998] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0213.998] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0213.998] FindClose (in: hFindFile=0x5d7a30 | out: hFindFile=0x5d7a30) returned 1 [0213.999] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0213.999] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0213.999] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\Microsoft.WindowsCamera_5.38.3003.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\Microsoft.WindowsCamera_5.38.3003.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xad [0213.999] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0213.999] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\Microsoft.WindowsCamera_5.38.3003.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscamera_8wekyb3d8bbwe\\microsoft.windowscamera_5.38.3003.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), fInfoLevelId=0x0, lpFileInformation=0x2183268 | out: lpFileInformation=0x2183268*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe3f8e4b, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xfe9a2866, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0xfe9a2866, ftLastWriteTime.dwHighDateTime=0x1d2d028, nFileSizeHigh=0x0, nFileSizeLow=0x4000)) returned 1 [0214.000] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0214.000] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\Microsoft.WindowsCamera_5.38.3003.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\Microsoft.WindowsCamera_5.38.3003.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xad [0214.000] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0214.000] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\Microsoft.WindowsCamera_5.38.3003.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscamera_8wekyb3d8bbwe\\microsoft.windowscamera_5.38.3003.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), fInfoLevelId=0x0, lpFileInformation=0x2183488 | out: lpFileInformation=0x2183488*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe3f8e4b, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xfe9a2866, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0xfe9a2866, ftLastWriteTime.dwHighDateTime=0x1d2d028, nFileSizeHigh=0x0, nFileSizeLow=0x4000)) returned 1 [0214.000] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0214.000] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\Microsoft.WindowsCamera_5.38.3003.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\Microsoft.WindowsCamera_5.38.3003.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xad [0214.000] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0214.000] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\Microsoft.WindowsCamera_5.38.3003.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscamera_8wekyb3d8bbwe\\microsoft.windowscamera_5.38.3003.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0214.001] GetFileType (hFile=0x444) returned 0x1 [0214.001] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0214.001] GetFileType (hFile=0x444) returned 0x1 [0214.002] ReadFile (in: hFile=0x444, lpBuffer=0x21859f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x21859f8*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0214.050] CloseHandle (hObject=0x444) returned 1 [0214.050] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\Microsoft.WindowsCamera_5.38.3003.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\Microsoft.WindowsCamera_5.38.3003.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xad [0214.050] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0214.050] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\Microsoft.WindowsCamera_5.38.3003.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscamera_8wekyb3d8bbwe\\microsoft.windowscamera_5.38.3003.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0214.051] GetFileType (hFile=0x444) returned 0x1 [0214.051] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0214.051] GetFileType (hFile=0x444) returned 0x1 [0214.051] WriteFile (in: hFile=0x444, lpBuffer=0x2183688*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x2183688*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0214.051] CloseHandle (hObject=0x444) returned 1 [0214.051] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\Microsoft.WindowsCamera_5.38.3003.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\Microsoft.WindowsCamera_5.38.3003.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xad [0214.051] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\Microsoft.WindowsCamera_5.38.3003.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\Microsoft.WindowsCamera_5.38.3003.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.xuy", lpFilePart=0x0) returned 0xb1 [0214.051] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0214.051] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\Microsoft.WindowsCamera_5.38.3003.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscamera_8wekyb3d8bbwe\\microsoft.windowscamera_5.38.3003.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe3f8e4b, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xfe9a2866, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x6b6e8b46, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x4000)) returned 1 [0214.051] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0214.051] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\Microsoft.WindowsCamera_5.38.3003.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscamera_8wekyb3d8bbwe\\microsoft.windowscamera_5.38.3003.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\Microsoft.WindowsCamera_5.38.3003.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscamera_8wekyb3d8bbwe\\microsoft.windowscamera_5.38.3003.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.xuy")) returned 1 [0214.053] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\Microsoft.WindowsCamera_5.38.3003.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\Microsoft.WindowsCamera_5.38.3003.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xb2 [0214.053] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0214.053] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\Microsoft.WindowsCamera_5.38.3003.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscamera_8wekyb3d8bbwe\\microsoft.windowscamera_5.38.3003.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x22020d8 | out: lpFileInformation=0x22020d8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xfe44530c, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xfe44530c, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0xfe44530c, ftLastWriteTime.dwHighDateTime=0x1d2d028, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0214.053] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0214.053] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\Microsoft.WindowsCamera_5.38.3003.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\Microsoft.WindowsCamera_5.38.3003.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xb2 [0214.053] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0214.053] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\Microsoft.WindowsCamera_5.38.3003.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscamera_8wekyb3d8bbwe\\microsoft.windowscamera_5.38.3003.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x2202310 | out: lpFileInformation=0x2202310*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xfe44530c, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xfe44530c, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0xfe44530c, ftLastWriteTime.dwHighDateTime=0x1d2d028, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0214.053] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0214.053] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\Microsoft.WindowsCamera_5.38.3003.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\Microsoft.WindowsCamera_5.38.3003.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xb2 [0214.053] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0214.053] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\Microsoft.WindowsCamera_5.38.3003.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscamera_8wekyb3d8bbwe\\microsoft.windowscamera_5.38.3003.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0214.054] GetFileType (hFile=0x444) returned 0x1 [0214.054] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0214.054] GetFileType (hFile=0x444) returned 0x1 [0214.055] ReadFile (in: hFile=0x444, lpBuffer=0x22048b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x22048b0*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0214.068] CloseHandle (hObject=0x444) returned 1 [0214.068] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\Microsoft.WindowsCamera_5.38.3003.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\Microsoft.WindowsCamera_5.38.3003.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xb2 [0214.068] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0214.069] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\Microsoft.WindowsCamera_5.38.3003.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscamera_8wekyb3d8bbwe\\microsoft.windowscamera_5.38.3003.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0214.069] GetFileType (hFile=0x444) returned 0x1 [0214.069] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0214.069] GetFileType (hFile=0x444) returned 0x1 [0214.069] WriteFile (in: hFile=0x444, lpBuffer=0x2202528*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x2202528*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0214.072] CloseHandle (hObject=0x444) returned 1 [0214.072] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\Microsoft.WindowsCamera_5.38.3003.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\Microsoft.WindowsCamera_5.38.3003.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xb2 [0214.073] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\Microsoft.WindowsCamera_5.38.3003.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\Microsoft.WindowsCamera_5.38.3003.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1.xuy", lpFilePart=0x0) returned 0xb6 [0214.073] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0214.073] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\Microsoft.WindowsCamera_5.38.3003.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscamera_8wekyb3d8bbwe\\microsoft.windowscamera_5.38.3003.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xfe44530c, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xfe44530c, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x6b70e9c0, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0214.073] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0214.073] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\Microsoft.WindowsCamera_5.38.3003.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscamera_8wekyb3d8bbwe\\microsoft.windowscamera_5.38.3003.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\Microsoft.WindowsCamera_5.38.3003.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscamera_8wekyb3d8bbwe\\microsoft.windowscamera_5.38.3003.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1.xuy")) returned 1 [0214.074] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\Microsoft.WindowsCamera_5.38.3003.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\Microsoft.WindowsCamera_5.38.3003.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xb2 [0214.074] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0214.074] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\Microsoft.WindowsCamera_5.38.3003.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscamera_8wekyb3d8bbwe\\microsoft.windowscamera_5.38.3003.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x2280fc0 | out: lpFileInformation=0x2280fc0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xfe44530c, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xfe44530c, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0xfe44530c, ftLastWriteTime.dwHighDateTime=0x1d2d028, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0214.075] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0214.075] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\Microsoft.WindowsCamera_5.38.3003.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\Microsoft.WindowsCamera_5.38.3003.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xb2 [0214.075] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0214.075] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\Microsoft.WindowsCamera_5.38.3003.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscamera_8wekyb3d8bbwe\\microsoft.windowscamera_5.38.3003.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0214.075] GetFileType (hFile=0x444) returned 0x1 [0214.075] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0214.075] GetFileType (hFile=0x444) returned 0x1 [0214.075] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x0 [0214.075] CloseHandle (hObject=0x444) returned 1 [0214.085] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\Microsoft.WindowsCamera_5.38.3003.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\Microsoft.WindowsCamera_5.38.3003.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xb2 [0214.085] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0214.085] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\Microsoft.WindowsCamera_5.38.3003.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscamera_8wekyb3d8bbwe\\microsoft.windowscamera_5.38.3003.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0214.086] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb070) returned 1 [0214.087] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\Microsoft.WindowsCamera_5.38.3003.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbcf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\Microsoft.WindowsCamera_5.38.3003.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xb2 [0214.087] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0214.087] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\Microsoft.WindowsCamera_5.38.3003.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscamera_8wekyb3d8bbwe\\microsoft.windowscamera_5.38.3003.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x3bc270 | out: lpFileInformation=0x3bc270*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xfe44530c, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xfe44530c, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0xfe44530c, ftLastWriteTime.dwHighDateTime=0x1d2d028, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0214.087] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc150) returned 1 [0214.087] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\Microsoft.WindowsCamera_5.38.3003.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbd10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\Microsoft.WindowsCamera_5.38.3003.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xb2 [0214.087] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0214.087] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\Microsoft.WindowsCamera_5.38.3003.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscamera_8wekyb3d8bbwe\\microsoft.windowscamera_5.38.3003.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x22f8400 | out: lpFileInformation=0x22f8400*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xfe44530c, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xfe44530c, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0xfe44530c, ftLastWriteTime.dwHighDateTime=0x1d2d028, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0214.087] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc150) returned 1 [0214.087] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\Microsoft.WindowsCamera_5.38.3003.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\Microsoft.WindowsCamera_5.38.3003.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xb2 [0214.087] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc050) returned 1 [0214.087] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\Microsoft.WindowsCamera_5.38.3003.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscamera_8wekyb3d8bbwe\\microsoft.windowscamera_5.38.3003.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0214.087] GetFileType (hFile=0x444) returned 0x1 [0214.087] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbfc0) returned 1 [0214.087] GetFileType (hFile=0x444) returned 0x1 [0214.087] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc1e8 | out: lpFileSizeHigh=0x3bc1e8*=0x0) returned 0x0 [0214.087] CloseHandle (hObject=0x444) returned 1 [0214.102] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\Microsoft.WindowsCamera_5.38.3003.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\Microsoft.WindowsCamera_5.38.3003.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xb2 [0214.102] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc050) returned 1 [0214.102] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\Microsoft.WindowsCamera_5.38.3003.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscamera_8wekyb3d8bbwe\\microsoft.windowscamera_5.38.3003.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0214.103] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8ae0) returned 1 [0214.104] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0214.104] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\RoamingState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\RoamingState", lpFilePart=0x0) returned 0x5f [0214.104] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\RoamingState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\RoamingState\\", lpFilePart=0x0) returned 0x60 [0214.104] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\RoamingState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7a30 [0214.104] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0214.104] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0214.104] FindClose (in: hFindFile=0x5d7a30 | out: hFindFile=0x5d7a30) returned 1 [0214.104] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0214.104] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0214.104] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0214.105] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\RoamingState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\RoamingState", lpFilePart=0x0) returned 0x5f [0214.105] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\RoamingState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\RoamingState\\", lpFilePart=0x0) returned 0x60 [0214.105] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\RoamingState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7c70 [0214.105] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0214.113] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0214.113] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0214.113] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0214.113] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0214.113] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0214.113] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\Settings", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\Settings", lpFilePart=0x0) returned 0x5b [0214.113] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\Settings\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\Settings\\", lpFilePart=0x0) returned 0x5c [0214.114] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\Settings\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d78b0 [0214.114] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0214.114] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0214.114] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0214.114] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0214.114] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0214.114] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0214.114] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0214.114] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0214.114] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\Settings", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\Settings", lpFilePart=0x0) returned 0x5b [0214.114] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\Settings\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\Settings\\", lpFilePart=0x0) returned 0x5c [0214.114] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\Settings\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7f10 [0214.115] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0214.115] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0214.115] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0214.115] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0214.115] FindClose (in: hFindFile=0x5d7f10 | out: hFindFile=0x5d7f10) returned 1 [0214.115] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0214.115] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0214.115] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\Settings\\roaming.lock", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\Settings\\roaming.lock", lpFilePart=0x0) returned 0x68 [0214.115] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0214.115] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscamera_8wekyb3d8bbwe\\settings\\roaming.lock"), fInfoLevelId=0x0, lpFileInformation=0x2174690 | out: lpFileInformation=0x2174690*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe1bc962, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xfe1bc962, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0xfe1bc962, ftLastWriteTime.dwHighDateTime=0x1d2d028, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0214.115] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0214.116] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\Settings\\roaming.lock", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\Settings\\roaming.lock", lpFilePart=0x0) returned 0x68 [0214.116] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0214.116] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscamera_8wekyb3d8bbwe\\settings\\roaming.lock"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0214.116] GetFileType (hFile=0x444) returned 0x1 [0214.116] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0214.116] GetFileType (hFile=0x444) returned 0x1 [0214.116] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0x0 [0214.116] CloseHandle (hObject=0x444) returned 1 [0214.151] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\Settings\\roaming.lock", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\Settings\\roaming.lock", lpFilePart=0x0) returned 0x68 [0214.152] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0214.152] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscamera_8wekyb3d8bbwe\\settings\\roaming.lock"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0214.155] GetFileType (hFile=0x444) returned 0x1 [0214.155] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0214.155] GetFileType (hFile=0x444) returned 0x1 [0214.155] WriteFile (in: hFile=0x444, lpBuffer=0x21eaaf8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x3be628, lpOverlapped=0x0 | out: lpBuffer=0x21eaaf8*, lpNumberOfBytesWritten=0x3be628*=0x10, lpOverlapped=0x0) returned 1 [0214.155] CloseHandle (hObject=0x444) returned 1 [0214.156] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\Settings\\roaming.lock", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\Settings\\roaming.lock", lpFilePart=0x0) returned 0x68 [0214.156] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\Settings\\roaming.lock.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\Settings\\roaming.lock.xuy", lpFilePart=0x0) returned 0x6c [0214.156] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0214.156] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscamera_8wekyb3d8bbwe\\settings\\roaming.lock"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe1bc962, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xfe1bc962, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x6b7f3852, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0214.156] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0214.156] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscamera_8wekyb3d8bbwe\\settings\\roaming.lock"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\Settings\\roaming.lock.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscamera_8wekyb3d8bbwe\\settings\\roaming.lock.xuy")) returned 1 [0214.158] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\Settings\\settings.dat", lpFilePart=0x0) returned 0x68 [0214.158] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0214.158] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscamera_8wekyb3d8bbwe\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x21ebe38 | out: lpFileInformation=0x21ebe38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe196700, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xfe196700, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x8d6f5917, ftLastWriteTime.dwHighDateTime=0x1d0baff, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0214.158] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0214.158] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\Settings\\settings.dat", lpFilePart=0x0) returned 0x68 [0214.158] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0214.158] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscamera_8wekyb3d8bbwe\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x21ebfc8 | out: lpFileInformation=0x21ebfc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe196700, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xfe196700, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x8d6f5917, ftLastWriteTime.dwHighDateTime=0x1d0baff, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0214.158] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0214.158] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\Settings\\settings.dat", lpFilePart=0x0) returned 0x68 [0214.158] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0214.158] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscamera_8wekyb3d8bbwe\\settings\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0214.159] GetFileType (hFile=0x444) returned 0x1 [0214.159] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0214.159] GetFileType (hFile=0x444) returned 0x1 [0214.159] ReadFile (in: hFile=0x444, lpBuffer=0x21ee418, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x21ee418*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0214.171] CloseHandle (hObject=0x444) returned 1 [0214.171] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\Settings\\settings.dat", lpFilePart=0x0) returned 0x68 [0214.171] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0214.171] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscamera_8wekyb3d8bbwe\\settings\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0214.172] GetFileType (hFile=0x444) returned 0x1 [0214.172] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0214.172] GetFileType (hFile=0x444) returned 0x1 [0214.172] WriteFile (in: hFile=0x444, lpBuffer=0x21ec138*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x21ec138*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0214.172] CloseHandle (hObject=0x444) returned 1 [0214.172] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\Settings\\settings.dat", lpFilePart=0x0) returned 0x68 [0214.172] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\Settings\\settings.dat.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\Settings\\settings.dat.xuy", lpFilePart=0x0) returned 0x6c [0214.172] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0214.172] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscamera_8wekyb3d8bbwe\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe196700, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xfe196700, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x6b81a009, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0214.172] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0214.172] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscamera_8wekyb3d8bbwe\\settings\\settings.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\Settings\\settings.dat.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscamera_8wekyb3d8bbwe\\settings\\settings.dat.xuy")) returned 1 [0214.174] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0214.174] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\SystemAppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\SystemAppData", lpFilePart=0x0) returned 0x60 [0214.174] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\SystemAppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\SystemAppData\\", lpFilePart=0x0) returned 0x61 [0214.174] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\SystemAppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7c70 [0214.174] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0214.174] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0214.174] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0214.174] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0214.174] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0214.174] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0214.174] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\SystemAppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\SystemAppData", lpFilePart=0x0) returned 0x60 [0214.174] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\SystemAppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\SystemAppData\\", lpFilePart=0x0) returned 0x61 [0214.174] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\SystemAppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7370 [0214.175] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0214.175] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0214.175] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0214.175] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0214.175] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0214.175] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0214.175] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\TempState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\TempState", lpFilePart=0x0) returned 0x5c [0214.175] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\TempState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\TempState\\", lpFilePart=0x0) returned 0x5d [0214.175] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\TempState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d8090 [0214.175] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0214.175] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0214.176] FindClose (in: hFindFile=0x5d8090 | out: hFindFile=0x5d8090) returned 1 [0214.176] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0214.176] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0214.176] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0214.176] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\TempState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\TempState", lpFilePart=0x0) returned 0x5c [0214.176] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\TempState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\TempState\\", lpFilePart=0x0) returned 0x5d [0214.176] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\TempState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7370 [0214.176] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0214.176] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0214.176] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0214.176] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0214.176] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0214.176] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0214.176] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe", lpFilePart=0x0) returned 0x5e [0214.176] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\", lpFilePart=0x0) returned 0x5f [0214.176] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d7eb0 [0214.178] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0214.178] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0214.178] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0214.178] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0214.179] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0214.179] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0214.179] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0214.179] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0214.179] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0214.179] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0214.179] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0214.179] FindClose (in: hFindFile=0x5d7eb0 | out: hFindFile=0x5d7eb0) returned 1 [0214.180] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0214.180] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0214.180] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0214.180] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe", lpFilePart=0x0) returned 0x5e [0214.180] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\", lpFilePart=0x0) returned 0x5f [0214.180] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d81b0 [0214.181] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0214.181] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0214.181] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0214.181] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0214.182] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0214.182] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0214.182] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0214.182] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0214.182] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0214.182] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0214.182] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0214.182] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0214.183] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0214.183] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0214.183] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0214.183] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\AC", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\AC", lpFilePart=0x0) returned 0x61 [0214.183] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\AC\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\AC\\", lpFilePart=0x0) returned 0x62 [0214.183] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\AC\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d79d0 [0214.185] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0214.186] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0214.186] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0214.186] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0214.186] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0214.186] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0214.186] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0214.187] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0214.187] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0214.187] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0214.187] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\AC", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\AC", lpFilePart=0x0) returned 0x61 [0214.187] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\AC\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\AC\\", lpFilePart=0x0) returned 0x62 [0214.187] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\AC\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7370 [0214.188] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0214.188] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0214.188] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0214.188] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0214.188] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0214.188] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0214.188] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0214.189] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0214.189] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0214.189] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0214.189] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\AC\\INetCache", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\AC\\INetCache", lpFilePart=0x0) returned 0x6b [0214.189] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\AC\\INetCache\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\AC\\INetCache\\", lpFilePart=0x0) returned 0x6c [0214.189] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\AC\\INetCache\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7370 [0214.190] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0214.190] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0214.190] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0214.190] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0214.190] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0214.190] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0214.190] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\AC\\INetCache", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\AC\\INetCache", lpFilePart=0x0) returned 0x6b [0214.190] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\AC\\INetCache\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\AC\\INetCache\\", lpFilePart=0x0) returned 0x6c [0214.190] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\AC\\INetCache\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d78b0 [0214.191] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0214.191] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0214.191] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0214.191] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0214.191] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0214.191] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0214.191] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\AC\\INetCookies", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\AC\\INetCookies", lpFilePart=0x0) returned 0x6d [0214.191] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\AC\\INetCookies\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\AC\\INetCookies\\", lpFilePart=0x0) returned 0x6e [0214.191] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\AC\\INetCookies\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7eb0 [0214.191] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0214.191] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0214.192] FindClose (in: hFindFile=0x5d7eb0 | out: hFindFile=0x5d7eb0) returned 1 [0214.192] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0214.192] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0214.192] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0214.192] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\AC\\INetCookies", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\AC\\INetCookies", lpFilePart=0x0) returned 0x6d [0214.192] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\AC\\INetCookies\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\AC\\INetCookies\\", lpFilePart=0x0) returned 0x6e [0214.192] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\AC\\INetCookies\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d78b0 [0214.192] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0214.192] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0214.192] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0214.192] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0214.192] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0214.192] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0214.192] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\AC\\INetHistory", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\AC\\INetHistory", lpFilePart=0x0) returned 0x6d [0214.192] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\AC\\INetHistory\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\AC\\INetHistory\\", lpFilePart=0x0) returned 0x6e [0214.192] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\AC\\INetHistory\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7df0 [0214.193] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0214.193] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0214.193] FindClose (in: hFindFile=0x5d7df0 | out: hFindFile=0x5d7df0) returned 1 [0214.193] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0214.193] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0214.193] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0214.193] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\AC\\INetHistory", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\AC\\INetHistory", lpFilePart=0x0) returned 0x6d [0214.193] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\AC\\INetHistory\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\AC\\INetHistory\\", lpFilePart=0x0) returned 0x6e [0214.193] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\AC\\INetHistory\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d79d0 [0214.193] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0214.193] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0214.194] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0214.194] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0214.194] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0214.194] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0214.194] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\AC\\Temp", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\AC\\Temp", lpFilePart=0x0) returned 0x66 [0214.194] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\AC\\Temp\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\AC\\Temp\\", lpFilePart=0x0) returned 0x67 [0214.194] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\AC\\Temp\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7e50 [0214.194] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0214.194] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0214.194] FindClose (in: hFindFile=0x5d7e50 | out: hFindFile=0x5d7e50) returned 1 [0214.194] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0214.194] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0214.194] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0214.194] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\AC\\Temp", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\AC\\Temp", lpFilePart=0x0) returned 0x66 [0214.194] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\AC\\Temp\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\AC\\Temp\\", lpFilePart=0x0) returned 0x67 [0214.195] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\AC\\Temp\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7e50 [0214.195] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0214.195] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0214.195] FindClose (in: hFindFile=0x5d7e50 | out: hFindFile=0x5d7e50) returned 1 [0214.195] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0214.195] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0214.195] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0214.195] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\AppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\AppData", lpFilePart=0x0) returned 0x66 [0214.195] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\AppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\AppData\\", lpFilePart=0x0) returned 0x67 [0214.195] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\AppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d78b0 [0214.204] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0214.205] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0214.205] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0214.205] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0214.205] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0214.205] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0214.205] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\AppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\AppData", lpFilePart=0x0) returned 0x66 [0214.205] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\AppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\AppData\\", lpFilePart=0x0) returned 0x67 [0214.205] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\AppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7f10 [0214.205] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0214.205] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0214.205] FindClose (in: hFindFile=0x5d7f10 | out: hFindFile=0x5d7f10) returned 1 [0214.205] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0214.205] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0214.205] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0214.206] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\LocalCache", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\LocalCache", lpFilePart=0x0) returned 0x69 [0214.206] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\LocalCache\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\LocalCache\\", lpFilePart=0x0) returned 0x6a [0214.206] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\LocalCache\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7670 [0214.206] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0214.206] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0214.206] FindClose (in: hFindFile=0x5d7670 | out: hFindFile=0x5d7670) returned 1 [0214.206] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0214.206] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0214.206] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0214.206] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\LocalCache", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\LocalCache", lpFilePart=0x0) returned 0x69 [0214.206] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\LocalCache\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\LocalCache\\", lpFilePart=0x0) returned 0x6a [0214.206] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\LocalCache\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d78b0 [0214.206] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0214.207] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0214.207] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0214.207] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0214.207] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0214.207] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0214.207] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\LocalState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\LocalState", lpFilePart=0x0) returned 0x69 [0214.207] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\LocalState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\LocalState\\", lpFilePart=0x0) returned 0x6a [0214.207] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\LocalState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7610 [0214.207] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0214.207] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0214.207] FindClose (in: hFindFile=0x5d7610 | out: hFindFile=0x5d7610) returned 1 [0214.207] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0214.207] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0214.207] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0214.208] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\LocalState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\LocalState", lpFilePart=0x0) returned 0x69 [0214.208] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\LocalState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\LocalState\\", lpFilePart=0x0) returned 0x6a [0214.208] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\LocalState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7370 [0214.208] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0214.208] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0214.208] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0214.208] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0214.208] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0214.208] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0214.208] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowscommunicationsapps_17.6002.42251.0_x64__8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowscommunicationsapps_17.6002.42251.0_x64__8wekyb3d8bbwe", lpFilePart=0x0) returned 0xa5 [0214.208] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowscommunicationsapps_17.6002.42251.0_x64__8wekyb3d8bbwe\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowscommunicationsapps_17.6002.42251.0_x64__8wekyb3d8bbwe\\", lpFilePart=0x0) returned 0xa6 [0214.208] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowscommunicationsapps_17.6002.42251.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d78b0 [0214.208] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0214.209] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0214.209] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0214.209] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0214.209] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0214.209] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowscommunicationsapps_17.6002.42251.0_x64__8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowscommunicationsapps_17.6002.42251.0_x64__8wekyb3d8bbwe", lpFilePart=0x0) returned 0xa5 [0214.209] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowscommunicationsapps_17.6002.42251.0_x64__8wekyb3d8bbwe\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowscommunicationsapps_17.6002.42251.0_x64__8wekyb3d8bbwe\\", lpFilePart=0x0) returned 0xa6 [0214.209] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowscommunicationsapps_17.6002.42251.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7a90 [0214.209] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0214.209] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0214.209] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0214.209] FindClose (in: hFindFile=0x5d7a90 | out: hFindFile=0x5d7a90) returned 1 [0214.210] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowscommunicationsapps_17.6002.42251.0_x64__8wekyb3d8bbwe\\ActivationStore", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowscommunicationsapps_17.6002.42251.0_x64__8wekyb3d8bbwe\\ActivationStore", lpFilePart=0x0) returned 0xb5 [0214.210] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowscommunicationsapps_17.6002.42251.0_x64__8wekyb3d8bbwe\\ActivationStore\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowscommunicationsapps_17.6002.42251.0_x64__8wekyb3d8bbwe\\ActivationStore\\", lpFilePart=0x0) returned 0xb6 [0214.210] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowscommunicationsapps_17.6002.42251.0_x64__8wekyb3d8bbwe\\ActivationStore\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d81b0 [0214.221] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0214.221] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0214.222] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0214.222] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0214.222] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0214.222] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0214.223] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowscommunicationsapps_17.6002.42251.0_x64__8wekyb3d8bbwe\\ActivationStore", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowscommunicationsapps_17.6002.42251.0_x64__8wekyb3d8bbwe\\ActivationStore", lpFilePart=0x0) returned 0xb5 [0214.223] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowscommunicationsapps_17.6002.42251.0_x64__8wekyb3d8bbwe\\ActivationStore\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowscommunicationsapps_17.6002.42251.0_x64__8wekyb3d8bbwe\\ActivationStore\\", lpFilePart=0x0) returned 0xb6 [0214.223] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowscommunicationsapps_17.6002.42251.0_x64__8wekyb3d8bbwe\\ActivationStore\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7550 [0214.224] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0214.224] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0214.224] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0214.224] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0214.224] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0214.224] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0214.225] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowscommunicationsapps_17.6002.42251.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowscommunicationsapps_17.6002.42251.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xc9 [0214.226] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowscommunicationsapps_17.6002.42251.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowscommunicationsapps_17.6002.42251.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), fInfoLevelId=0x0, lpFileInformation=0x228d9b0 | out: lpFileInformation=0x228d9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ee8f44d, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x7f2af44e, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x7f2af44e, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x80000)) returned 1 [0214.227] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowscommunicationsapps_17.6002.42251.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowscommunicationsapps_17.6002.42251.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xc9 [0214.227] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowscommunicationsapps_17.6002.42251.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowscommunicationsapps_17.6002.42251.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), fInfoLevelId=0x0, lpFileInformation=0x228dc08 | out: lpFileInformation=0x228dc08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ee8f44d, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x7f2af44e, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x7f2af44e, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x80000)) returned 1 [0214.227] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowscommunicationsapps_17.6002.42251.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowscommunicationsapps_17.6002.42251.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xc9 [0214.227] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowscommunicationsapps_17.6002.42251.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowscommunicationsapps_17.6002.42251.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0214.229] GetFileType (hFile=0x444) returned 0x1 [0214.229] GetFileType (hFile=0x444) returned 0x1 [0214.229] ReadFile (in: hFile=0x444, lpBuffer=0x22901e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x22901e8*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0214.252] CloseHandle (hObject=0x444) returned 1 [0214.252] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowscommunicationsapps_17.6002.42251.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowscommunicationsapps_17.6002.42251.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xc9 [0214.252] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowscommunicationsapps_17.6002.42251.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowscommunicationsapps_17.6002.42251.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0214.253] GetFileType (hFile=0x444) returned 0x1 [0214.253] GetFileType (hFile=0x444) returned 0x1 [0214.253] WriteFile (in: hFile=0x444, lpBuffer=0x228de40*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x228de40*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0214.253] CloseHandle (hObject=0x444) returned 1 [0214.253] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowscommunicationsapps_17.6002.42251.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowscommunicationsapps_17.6002.42251.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xc9 [0214.253] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowscommunicationsapps_17.6002.42251.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowscommunicationsapps_17.6002.42251.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.xuy", lpFilePart=0x0) returned 0xcd [0214.253] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowscommunicationsapps_17.6002.42251.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowscommunicationsapps_17.6002.42251.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ee8f44d, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x7f2af44e, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x6b8d8754, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x80000)) returned 1 [0214.253] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowscommunicationsapps_17.6002.42251.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowscommunicationsapps_17.6002.42251.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowscommunicationsapps_17.6002.42251.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowscommunicationsapps_17.6002.42251.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.xuy")) returned 1 [0214.255] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowscommunicationsapps_17.6002.42251.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowscommunicationsapps_17.6002.42251.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xce [0214.255] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowscommunicationsapps_17.6002.42251.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowscommunicationsapps_17.6002.42251.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x230c9a8 | out: lpFileInformation=0x230c9a8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x7eebda84, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x7eebda84, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x7eebda84, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0214.255] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowscommunicationsapps_17.6002.42251.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowscommunicationsapps_17.6002.42251.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xce [0214.255] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowscommunicationsapps_17.6002.42251.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowscommunicationsapps_17.6002.42251.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0214.255] GetFileType (hFile=0x444) returned 0x1 [0214.255] GetFileType (hFile=0x444) returned 0x1 [0214.255] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x0 [0214.256] CloseHandle (hObject=0x444) returned 1 [0214.276] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb070) returned 1 [0214.277] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0214.277] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowscommunicationsapps_17.6002.42251.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowscommunicationsapps_17.6002.42251.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x3bc270 | out: lpFileInformation=0x3bc270*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x7eebda84, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x7eebda84, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x7eebda84, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0214.277] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc150) returned 1 [0214.277] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0214.277] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowscommunicationsapps_17.6002.42251.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowscommunicationsapps_17.6002.42251.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x2185688 | out: lpFileInformation=0x2185688*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x7eebda84, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x7eebda84, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x7eebda84, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0214.277] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc150) returned 1 [0214.277] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc050) returned 1 [0214.277] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowscommunicationsapps_17.6002.42251.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowscommunicationsapps_17.6002.42251.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0214.277] GetFileType (hFile=0x444) returned 0x1 [0214.277] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbfc0) returned 1 [0214.277] GetFileType (hFile=0x444) returned 0x1 [0214.277] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc1e8 | out: lpFileSizeHigh=0x3bc1e8*=0x0) returned 0x0 [0214.278] CloseHandle (hObject=0x444) returned 1 [0214.413] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc050) returned 1 [0214.413] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowscommunicationsapps_17.6002.42251.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowscommunicationsapps_17.6002.42251.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0214.415] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8ae0) returned 1 [0214.416] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0214.416] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowscommunicationsapps_17.6002.42251.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowscommunicationsapps_17.6002.42251.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x21fcac0 | out: lpFileInformation=0x21fcac0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x7eebda84, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x7eebda84, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x7eebda84, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0214.416] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0214.416] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0214.416] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowscommunicationsapps_17.6002.42251.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowscommunicationsapps_17.6002.42251.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0214.416] GetFileType (hFile=0x444) returned 0x1 [0214.416] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0214.416] GetFileType (hFile=0x444) returned 0x1 [0214.416] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x0 [0214.416] CloseHandle (hObject=0x444) returned 1 [0214.427] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0214.427] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowscommunicationsapps_17.6002.42251.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowscommunicationsapps_17.6002.42251.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0214.429] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb070) returned 1 [0214.429] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0214.429] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowscommunicationsapps_17.6002.42251.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowscommunicationsapps_17.6002.42251.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x3bc270 | out: lpFileInformation=0x3bc270*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x7eebda84, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x7eebda84, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x7eebda84, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0214.429] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc150) returned 1 [0214.429] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0214.429] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowscommunicationsapps_17.6002.42251.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowscommunicationsapps_17.6002.42251.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x2274088 | out: lpFileInformation=0x2274088*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x7eebda84, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x7eebda84, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x7eebda84, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0214.429] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc150) returned 1 [0214.429] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc050) returned 1 [0214.430] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowscommunicationsapps_17.6002.42251.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowscommunicationsapps_17.6002.42251.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0214.430] GetFileType (hFile=0x444) returned 0x1 [0214.430] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbfc0) returned 1 [0214.430] GetFileType (hFile=0x444) returned 0x1 [0214.430] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc1e8 | out: lpFileSizeHigh=0x3bc1e8*=0x0) returned 0x0 [0214.430] CloseHandle (hObject=0x444) returned 1 [0214.442] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc050) returned 1 [0214.442] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowscommunicationsapps_17.6002.42251.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowscommunicationsapps_17.6002.42251.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0214.443] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8ae0) returned 1 [0214.444] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0214.445] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0214.445] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0214.445] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0214.445] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0214.445] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0214.445] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0214.446] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0214.446] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0214.446] FindClose (in: hFindFile=0x5d7a90 | out: hFindFile=0x5d7a90) returned 1 [0214.446] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0214.446] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0214.446] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0214.447] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0214.447] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0214.447] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0214.447] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0214.447] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0214.447] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0214.447] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0214.447] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0214.447] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0214.447] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0214.448] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0214.448] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0214.448] FindClose (in: hFindFile=0x5d75b0 | out: hFindFile=0x5d75b0) returned 1 [0214.448] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0214.448] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0214.448] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0214.448] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\settings\\roaming.lock"), fInfoLevelId=0x0, lpFileInformation=0x22f0340 | out: lpFileInformation=0x22f0340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e6bfa00, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x7e6bfa00, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x7e6bfa00, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0214.448] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0214.448] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0214.448] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\settings\\roaming.lock"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0214.448] GetFileType (hFile=0x444) returned 0x1 [0214.448] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0214.448] GetFileType (hFile=0x444) returned 0x1 [0214.448] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0x0 [0214.448] CloseHandle (hObject=0x444) returned 1 [0214.463] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0214.463] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\settings\\roaming.lock"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0214.466] GetFileType (hFile=0x444) returned 0x1 [0214.466] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0214.466] GetFileType (hFile=0x444) returned 0x1 [0214.466] WriteFile (in: hFile=0x444, lpBuffer=0x23667f0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x3be628, lpOverlapped=0x0 | out: lpBuffer=0x23667f0*, lpNumberOfBytesWritten=0x3be628*=0x10, lpOverlapped=0x0) returned 1 [0214.466] CloseHandle (hObject=0x444) returned 1 [0214.467] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0214.467] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\settings\\roaming.lock"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e6bfa00, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x7e6bfa00, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x6baeec1a, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0214.467] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0214.467] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\settings\\roaming.lock"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\Settings\\roaming.lock.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\settings\\roaming.lock.xuy")) returned 1 [0214.468] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0214.468] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x2367b78 | out: lpFileInformation=0x2367b78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e6babf6, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x7e6babf6, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x8d6f5917, ftLastWriteTime.dwHighDateTime=0x1d0baff, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0214.468] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0214.468] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0214.468] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x2367d20 | out: lpFileInformation=0x2367d20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e6babf6, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x7e6babf6, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x8d6f5917, ftLastWriteTime.dwHighDateTime=0x1d0baff, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0214.468] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0214.468] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0214.469] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\settings\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0214.469] GetFileType (hFile=0x444) returned 0x1 [0214.469] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0214.469] GetFileType (hFile=0x444) returned 0x1 [0214.469] ReadFile (in: hFile=0x444, lpBuffer=0x236a1a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x236a1a0*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0214.515] CloseHandle (hObject=0x444) returned 1 [0214.515] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\Settings\\settings.dat", lpFilePart=0x0) returned 0x74 [0214.515] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0214.515] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\settings\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0214.515] GetFileType (hFile=0x444) returned 0x1 [0214.515] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0214.515] GetFileType (hFile=0x444) returned 0x1 [0214.515] WriteFile (in: hFile=0x444, lpBuffer=0x2173a78*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x2173a78*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0214.516] CloseHandle (hObject=0x444) returned 1 [0214.516] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\Settings\\settings.dat", lpFilePart=0x0) returned 0x74 [0214.516] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\Settings\\settings.dat.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\Settings\\settings.dat.xuy", lpFilePart=0x0) returned 0x78 [0214.516] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0214.516] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e6babf6, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x7e6babf6, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x6bb61297, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0214.516] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0214.516] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\settings\\settings.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\Settings\\settings.dat.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\settings\\settings.dat.xuy")) returned 1 [0214.517] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0214.517] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\SystemAppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\SystemAppData", lpFilePart=0x0) returned 0x6c [0214.517] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\SystemAppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\SystemAppData\\", lpFilePart=0x0) returned 0x6d [0214.518] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\SystemAppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d79d0 [0214.518] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0214.518] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0214.518] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0214.518] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0214.518] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0214.518] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0214.518] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\SystemAppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\SystemAppData", lpFilePart=0x0) returned 0x6c [0214.518] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\SystemAppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\SystemAppData\\", lpFilePart=0x0) returned 0x6d [0214.518] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\SystemAppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7d90 [0214.518] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0214.519] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0214.519] FindClose (in: hFindFile=0x5d7d90 | out: hFindFile=0x5d7d90) returned 1 [0214.519] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0214.519] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0214.519] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0214.519] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\TempState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\TempState", lpFilePart=0x0) returned 0x68 [0214.519] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\TempState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\TempState\\", lpFilePart=0x0) returned 0x69 [0214.519] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\TempState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7670 [0214.519] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0214.519] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0214.519] FindClose (in: hFindFile=0x5d7670 | out: hFindFile=0x5d7670) returned 1 [0214.520] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0214.520] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0214.520] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0214.520] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\TempState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\TempState", lpFilePart=0x0) returned 0x68 [0214.520] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\TempState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\TempState\\", lpFilePart=0x0) returned 0x69 [0214.520] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\TempState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7e50 [0214.520] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0214.520] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0214.520] FindClose (in: hFindFile=0x5d7e50 | out: hFindFile=0x5d7e50) returned 1 [0214.520] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0214.520] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0214.520] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0214.520] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy", lpFilePart=0x0) returned 0x54 [0214.520] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\", lpFilePart=0x0) returned 0x55 [0214.520] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d78b0 [0214.544] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0214.544] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0214.544] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0214.544] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0214.544] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0214.544] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0214.544] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0214.545] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0214.545] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0214.545] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0214.545] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0214.545] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0214.546] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0214.546] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0214.546] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0214.546] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy", lpFilePart=0x0) returned 0x54 [0214.546] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\", lpFilePart=0x0) returned 0x55 [0214.546] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d7a30 [0214.547] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0214.547] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0214.547] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0214.547] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0214.547] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0214.547] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0214.547] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0214.547] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0214.547] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0214.548] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0214.548] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0214.548] FindClose (in: hFindFile=0x5d7a30 | out: hFindFile=0x5d7a30) returned 1 [0214.548] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0214.548] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0214.548] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0214.548] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\AC", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\AC", lpFilePart=0x0) returned 0x57 [0214.549] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\AC\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\AC\\", lpFilePart=0x0) returned 0x58 [0214.549] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\AC\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7cd0 [0214.566] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0214.567] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0214.567] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0214.567] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0214.567] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0214.567] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0214.567] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0214.567] FindClose (in: hFindFile=0x5d7cd0 | out: hFindFile=0x5d7cd0) returned 1 [0214.568] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0214.568] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0214.568] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0214.568] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\AC", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\AC", lpFilePart=0x0) returned 0x57 [0214.568] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\AC\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\AC\\", lpFilePart=0x0) returned 0x58 [0214.568] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\AC\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d81b0 [0214.569] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0214.569] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0214.569] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0214.569] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0214.569] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0214.569] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0214.570] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0214.570] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0214.570] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0214.570] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0214.570] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0214.570] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\AC\\INetCache", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\AC\\INetCache", lpFilePart=0x0) returned 0x61 [0214.570] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\AC\\INetCache\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\AC\\INetCache\\", lpFilePart=0x0) returned 0x62 [0214.570] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\AC\\INetCache\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7370 [0214.621] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0214.621] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0214.622] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0214.622] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0214.622] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0214.622] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0214.622] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\AC\\INetCache", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\AC\\INetCache", lpFilePart=0x0) returned 0x61 [0214.622] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\AC\\INetCache\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\AC\\INetCache\\", lpFilePart=0x0) returned 0x62 [0214.622] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\AC\\INetCache\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7cd0 [0214.622] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0214.622] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0214.622] FindClose (in: hFindFile=0x5d7cd0 | out: hFindFile=0x5d7cd0) returned 1 [0214.622] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0214.622] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0214.622] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0214.622] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\AC\\INetCookies", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\AC\\INetCookies", lpFilePart=0x0) returned 0x63 [0214.622] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\AC\\INetCookies\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\AC\\INetCookies\\", lpFilePart=0x0) returned 0x64 [0214.623] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\AC\\INetCookies\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d81b0 [0214.623] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0214.623] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0214.623] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0214.623] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0214.623] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0214.623] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0214.623] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\AC\\INetCookies", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\AC\\INetCookies", lpFilePart=0x0) returned 0x63 [0214.623] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\AC\\INetCookies\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\AC\\INetCookies\\", lpFilePart=0x0) returned 0x64 [0214.623] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\AC\\INetCookies\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7610 [0214.623] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0214.623] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0214.624] FindClose (in: hFindFile=0x5d7610 | out: hFindFile=0x5d7610) returned 1 [0214.624] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0214.624] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0214.624] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0214.624] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\AC\\INetHistory", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\AC\\INetHistory", lpFilePart=0x0) returned 0x63 [0214.624] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\AC\\INetHistory\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\AC\\INetHistory\\", lpFilePart=0x0) returned 0x64 [0214.624] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\AC\\INetHistory\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d78b0 [0214.624] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0214.624] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0214.624] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0214.624] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0214.624] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0214.624] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0214.624] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\AC\\INetHistory", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\AC\\INetHistory", lpFilePart=0x0) returned 0x63 [0214.624] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\AC\\INetHistory\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\AC\\INetHistory\\", lpFilePart=0x0) returned 0x64 [0214.624] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\AC\\INetHistory\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7670 [0214.625] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0214.625] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0214.625] FindClose (in: hFindFile=0x5d7670 | out: hFindFile=0x5d7670) returned 1 [0214.625] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0214.625] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0214.625] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0214.625] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\AC\\Microsoft", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\AC\\Microsoft", lpFilePart=0x0) returned 0x61 [0214.625] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\AC\\Microsoft\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\AC\\Microsoft\\", lpFilePart=0x0) returned 0x62 [0214.625] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\AC\\Microsoft\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7af0 [0214.632] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0214.632] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0214.632] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0214.632] FindClose (in: hFindFile=0x5d7af0 | out: hFindFile=0x5d7af0) returned 1 [0214.633] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0214.633] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0214.633] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0214.633] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\AC\\Microsoft", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\AC\\Microsoft", lpFilePart=0x0) returned 0x61 [0214.633] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\AC\\Microsoft\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\AC\\Microsoft\\", lpFilePart=0x0) returned 0x62 [0214.633] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\AC\\Microsoft\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d81b0 [0214.633] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0214.633] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0214.633] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0214.633] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0214.633] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0214.633] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0214.633] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0214.633] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\AC\\Microsoft\\Windows", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\AC\\Microsoft\\Windows", lpFilePart=0x0) returned 0x69 [0214.633] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\", lpFilePart=0x0) returned 0x6a [0214.633] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d78b0 [0214.634] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0214.634] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0214.634] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0214.634] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0214.634] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0214.634] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0214.634] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0214.634] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\AC\\Microsoft\\Windows", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\AC\\Microsoft\\Windows", lpFilePart=0x0) returned 0x69 [0214.634] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\", lpFilePart=0x0) returned 0x6a [0214.634] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d78b0 [0214.634] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0214.634] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0214.634] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0214.635] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0214.635] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0214.635] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0214.635] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0214.635] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3375042201", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3375042201", lpFilePart=0x0) returned 0x74 [0214.635] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3375042201\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3375042201\\", lpFilePart=0x0) returned 0x75 [0214.635] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3375042201\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d7370 [0214.635] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0214.635] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0214.635] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0214.635] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0214.635] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0214.635] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0214.635] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0214.635] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3375042201", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3375042201", lpFilePart=0x0) returned 0x74 [0214.635] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3375042201\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3375042201\\", lpFilePart=0x0) returned 0x75 [0214.635] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3375042201\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d7550 [0214.636] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0214.636] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0214.636] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0214.636] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0214.636] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0214.636] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0214.636] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3375042201\\1858609885.pri", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3375042201\\1858609885.pri", lpFilePart=0x0) returned 0x83 [0214.636] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0214.636] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3375042201\\1858609885.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsfeedback_cw5n1h2txyewy\\ac\\microsoft\\windows\\3375042201\\1858609885.pri"), fInfoLevelId=0x0, lpFileInformation=0x2204190 | out: lpFileInformation=0x2204190*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe438fa4e, ftCreationTime.dwHighDateTime=0x1d2d439, ftLastAccessTime.dwLowDateTime=0xe438fa4e, ftLastAccessTime.dwHighDateTime=0x1d2d439, ftLastWriteTime.dwLowDateTime=0xe4392209, ftLastWriteTime.dwHighDateTime=0x1d2d439, nFileSizeHigh=0x0, nFileSizeLow=0x7ee0)) returned 1 [0214.636] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0214.636] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3375042201\\1858609885.pri", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3375042201\\1858609885.pri", lpFilePart=0x0) returned 0x83 [0214.636] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0214.637] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3375042201\\1858609885.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsfeedback_cw5n1h2txyewy\\ac\\microsoft\\windows\\3375042201\\1858609885.pri"), fInfoLevelId=0x0, lpFileInformation=0x2204350 | out: lpFileInformation=0x2204350*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe438fa4e, ftCreationTime.dwHighDateTime=0x1d2d439, ftLastAccessTime.dwLowDateTime=0xe438fa4e, ftLastAccessTime.dwHighDateTime=0x1d2d439, ftLastWriteTime.dwLowDateTime=0xe4392209, ftLastWriteTime.dwHighDateTime=0x1d2d439, nFileSizeHigh=0x0, nFileSizeLow=0x7ee0)) returned 1 [0214.637] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0214.637] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3375042201\\1858609885.pri", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3375042201\\1858609885.pri", lpFilePart=0x0) returned 0x83 [0214.637] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0214.637] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3375042201\\1858609885.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsfeedback_cw5n1h2txyewy\\ac\\microsoft\\windows\\3375042201\\1858609885.pri"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0214.638] GetFileType (hFile=0x444) returned 0x1 [0214.638] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0214.638] GetFileType (hFile=0x444) returned 0x1 [0214.638] ReadFile (in: hFile=0x444, lpBuffer=0x2206800, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be618, lpOverlapped=0x0 | out: lpBuffer=0x2206800*, lpNumberOfBytesRead=0x3be618*=0x1000, lpOverlapped=0x0) returned 1 [0214.663] CloseHandle (hObject=0x444) returned 1 [0214.663] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3375042201\\1858609885.pri", nBufferLength=0x105, lpBuffer=0x3be0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3375042201\\1858609885.pri", lpFilePart=0x0) returned 0x83 [0214.663] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be590) returned 1 [0214.663] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3375042201\\1858609885.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsfeedback_cw5n1h2txyewy\\ac\\microsoft\\windows\\3375042201\\1858609885.pri"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0214.664] GetFileType (hFile=0x444) returned 0x1 [0214.664] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be500) returned 1 [0214.664] GetFileType (hFile=0x444) returned 0x1 [0214.664] WriteFile (in: hFile=0x444, lpBuffer=0x22044f0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be6c8, lpOverlapped=0x0 | out: lpBuffer=0x22044f0*, lpNumberOfBytesWritten=0x3be6c8*=0x2000, lpOverlapped=0x0) returned 1 [0214.664] CloseHandle (hObject=0x444) returned 1 [0214.664] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3375042201\\1858609885.pri", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3375042201\\1858609885.pri", lpFilePart=0x0) returned 0x83 [0214.664] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3375042201\\1858609885.pri.xuy", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3375042201\\1858609885.pri.xuy", lpFilePart=0x0) returned 0x87 [0214.664] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0214.664] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3375042201\\1858609885.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsfeedback_cw5n1h2txyewy\\ac\\microsoft\\windows\\3375042201\\1858609885.pri"), fInfoLevelId=0x0, lpFileInformation=0x3be6e0 | out: lpFileInformation=0x3be6e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe438fa4e, ftCreationTime.dwHighDateTime=0x1d2d439, ftLastAccessTime.dwLowDateTime=0xe438fa4e, ftLastAccessTime.dwHighDateTime=0x1d2d439, ftLastWriteTime.dwLowDateTime=0x6bcb8403, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x7ee0)) returned 1 [0214.664] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0214.664] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3375042201\\1858609885.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsfeedback_cw5n1h2txyewy\\ac\\microsoft\\windows\\3375042201\\1858609885.pri"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3375042201\\1858609885.pri.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsfeedback_cw5n1h2txyewy\\ac\\microsoft\\windows\\3375042201\\1858609885.pri.xuy")) returned 1 [0214.666] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0214.666] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\AC\\Temp", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\AC\\Temp", lpFilePart=0x0) returned 0x5c [0214.666] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\AC\\Temp\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\AC\\Temp\\", lpFilePart=0x0) returned 0x5d [0214.666] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\AC\\Temp\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d81b0 [0214.667] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0214.667] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0214.667] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0214.667] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0214.667] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0214.667] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0214.667] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\AC\\Temp", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\AC\\Temp", lpFilePart=0x0) returned 0x5c [0214.667] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\AC\\Temp\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\AC\\Temp\\", lpFilePart=0x0) returned 0x5d [0214.667] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\AC\\Temp\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d81b0 [0214.667] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0214.667] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0214.667] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0214.667] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0214.667] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0214.668] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0214.668] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\AppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\AppData", lpFilePart=0x0) returned 0x5c [0214.668] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\AppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\AppData\\", lpFilePart=0x0) returned 0x5d [0214.668] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\AppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d81b0 [0214.668] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0214.668] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0214.668] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0214.668] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0214.668] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0214.668] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0214.668] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\AppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\AppData", lpFilePart=0x0) returned 0x5c [0214.668] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\AppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\AppData\\", lpFilePart=0x0) returned 0x5d [0214.668] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\AppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d75b0 [0214.669] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0214.669] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0214.669] FindClose (in: hFindFile=0x5d75b0 | out: hFindFile=0x5d75b0) returned 1 [0214.669] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0214.669] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0214.669] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0214.669] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\LocalCache", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\LocalCache", lpFilePart=0x0) returned 0x5f [0214.669] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\LocalCache\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\LocalCache\\", lpFilePart=0x0) returned 0x60 [0214.669] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\LocalCache\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d79d0 [0214.672] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0214.672] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0214.673] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0214.673] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0214.673] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0214.673] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0214.673] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\LocalCache", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\LocalCache", lpFilePart=0x0) returned 0x5f [0214.673] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\LocalCache\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\LocalCache\\", lpFilePart=0x0) returned 0x60 [0214.673] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\LocalCache\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7c70 [0214.673] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0214.673] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0214.673] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0214.673] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0214.673] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0214.673] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0214.673] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\LocalState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\LocalState", lpFilePart=0x0) returned 0x5f [0214.674] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\LocalState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\LocalState\\", lpFilePart=0x0) returned 0x60 [0214.674] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\LocalState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d79d0 [0214.674] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0214.674] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0214.674] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0214.674] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0214.674] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0214.674] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0214.674] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0214.674] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\LocalState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\LocalState", lpFilePart=0x0) returned 0x5f [0214.674] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\LocalState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\LocalState\\", lpFilePart=0x0) returned 0x60 [0214.674] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\LocalState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7d90 [0214.674] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0214.674] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0214.674] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0214.674] FindClose (in: hFindFile=0x5d7d90 | out: hFindFile=0x5d7d90) returned 1 [0214.674] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0214.674] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0214.675] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\LocalState\\_sessionState.xml", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\LocalState\\_sessionState.xml", lpFilePart=0x0) returned 0x71 [0214.675] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0214.675] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\LocalState\\_sessionState.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsfeedback_cw5n1h2txyewy\\localstate\\_sessionstate.xml"), fInfoLevelId=0x0, lpFileInformation=0x228b0e0 | out: lpFileInformation=0x228b0e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe863d465, ftCreationTime.dwHighDateTime=0x1d2d439, ftLastAccessTime.dwLowDateTime=0xe863d465, ftLastAccessTime.dwHighDateTime=0x1d2d439, ftLastWriteTime.dwLowDateTime=0xe86fbec2, ftLastWriteTime.dwHighDateTime=0x1d2d439, nFileSizeHigh=0x0, nFileSizeLow=0x1cb)) returned 1 [0214.675] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0214.675] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\LocalState\\_sessionState.xml", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\LocalState\\_sessionState.xml", lpFilePart=0x0) returned 0x71 [0214.675] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0214.675] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\LocalState\\_sessionState.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsfeedback_cw5n1h2txyewy\\localstate\\_sessionstate.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0214.675] GetFileType (hFile=0x444) returned 0x1 [0214.675] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0214.675] GetFileType (hFile=0x444) returned 0x1 [0214.675] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0x1cb [0214.675] ReadFile (in: hFile=0x444, lpBuffer=0x228b618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be718, lpOverlapped=0x0 | out: lpBuffer=0x228b618*, lpNumberOfBytesRead=0x3be718*=0x1cb, lpOverlapped=0x0) returned 1 [0214.676] CloseHandle (hObject=0x444) returned 1 [0214.686] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\LocalState\\_sessionState.xml", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\LocalState\\_sessionState.xml", lpFilePart=0x0) returned 0x71 [0214.686] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0214.686] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\LocalState\\_sessionState.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsfeedback_cw5n1h2txyewy\\localstate\\_sessionstate.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0214.688] GetFileType (hFile=0x444) returned 0x1 [0214.688] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0214.688] GetFileType (hFile=0x444) returned 0x1 [0214.688] WriteFile (in: hFile=0x444, lpBuffer=0x2302f60*, nNumberOfBytesToWrite=0x1d0, lpNumberOfBytesWritten=0x3be628, lpOverlapped=0x0 | out: lpBuffer=0x2302f60*, lpNumberOfBytesWritten=0x3be628*=0x1d0, lpOverlapped=0x0) returned 1 [0214.716] CloseHandle (hObject=0x444) returned 1 [0214.716] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\LocalState\\_sessionState.xml", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\LocalState\\_sessionState.xml", lpFilePart=0x0) returned 0x71 [0214.716] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\LocalState\\_sessionState.xml.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\LocalState\\_sessionState.xml.xuy", lpFilePart=0x0) returned 0x75 [0214.716] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0214.716] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\LocalState\\_sessionState.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsfeedback_cw5n1h2txyewy\\localstate\\_sessionstate.xml"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe863d465, ftCreationTime.dwHighDateTime=0x1d2d439, ftLastAccessTime.dwLowDateTime=0xe863d465, ftLastAccessTime.dwHighDateTime=0x1d2d439, ftLastWriteTime.dwLowDateTime=0x6bd50d8c, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x1d0)) returned 1 [0214.716] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0214.716] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\LocalState\\_sessionState.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsfeedback_cw5n1h2txyewy\\localstate\\_sessionstate.xml"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\LocalState\\_sessionState.xml.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsfeedback_cw5n1h2txyewy\\localstate\\_sessionstate.xml.xuy")) returned 1 [0214.718] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0214.718] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Microsoft.WindowsFeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Microsoft.WindowsFeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy", lpFilePart=0x0) returned 0x9d [0214.718] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Microsoft.WindowsFeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Microsoft.WindowsFeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\", lpFilePart=0x0) returned 0x9e [0214.718] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Microsoft.WindowsFeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d81b0 [0214.718] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0214.718] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0214.718] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0214.718] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0214.718] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0214.718] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0214.718] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0214.718] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Microsoft.WindowsFeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Microsoft.WindowsFeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy", lpFilePart=0x0) returned 0x9d [0214.718] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Microsoft.WindowsFeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Microsoft.WindowsFeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\", lpFilePart=0x0) returned 0x9e [0214.718] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Microsoft.WindowsFeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7a90 [0214.718] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0214.719] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0214.719] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0214.719] FindClose (in: hFindFile=0x5d7a90 | out: hFindFile=0x5d7a90) returned 1 [0214.719] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0214.719] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0214.719] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0214.719] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Microsoft.WindowsFeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Microsoft.WindowsFeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore", lpFilePart=0x0) returned 0xad [0214.719] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Microsoft.WindowsFeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Microsoft.WindowsFeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\", lpFilePart=0x0) returned 0xae [0214.719] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Microsoft.WindowsFeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d78b0 [0214.751] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0214.751] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0214.751] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0214.751] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0214.751] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0214.751] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0214.751] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0214.751] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0214.751] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0214.751] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Microsoft.WindowsFeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Microsoft.WindowsFeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore", lpFilePart=0x0) returned 0xad [0214.752] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Microsoft.WindowsFeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Microsoft.WindowsFeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\", lpFilePart=0x0) returned 0xae [0214.752] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Microsoft.WindowsFeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7610 [0214.752] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0214.752] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0214.752] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0214.752] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0214.752] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0214.752] FindClose (in: hFindFile=0x5d7610 | out: hFindFile=0x5d7610) returned 1 [0214.753] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0214.753] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0214.753] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Microsoft.WindowsFeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Microsoft.WindowsFeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xc1 [0214.753] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0214.753] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Microsoft.WindowsFeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsfeedback_cw5n1h2txyewy\\microsoft.windowsfeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat"), fInfoLevelId=0x0, lpFileInformation=0x230bf50 | out: lpFileInformation=0x230bf50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc8f9880, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xe8748565, ftLastAccessTime.dwHighDateTime=0x1d2d439, ftLastWriteTime.dwLowDateTime=0xbcac34d6, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x4000)) returned 1 [0214.754] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0214.754] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Microsoft.WindowsFeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Microsoft.WindowsFeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xc1 [0214.754] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0214.754] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Microsoft.WindowsFeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsfeedback_cw5n1h2txyewy\\microsoft.windowsfeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat"), fInfoLevelId=0x0, lpFileInformation=0x230c198 | out: lpFileInformation=0x230c198*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc8f9880, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xe8748565, ftLastAccessTime.dwHighDateTime=0x1d2d439, ftLastWriteTime.dwLowDateTime=0xbcac34d6, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x4000)) returned 1 [0214.754] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0214.754] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Microsoft.WindowsFeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Microsoft.WindowsFeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xc1 [0214.754] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0214.754] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Microsoft.WindowsFeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsfeedback_cw5n1h2txyewy\\microsoft.windowsfeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0214.760] GetFileType (hFile=0x444) returned 0x1 [0214.760] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0214.760] GetFileType (hFile=0x444) returned 0x1 [0214.761] ReadFile (in: hFile=0x444, lpBuffer=0x230e758, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x230e758*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0214.865] CloseHandle (hObject=0x444) returned 1 [0214.865] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Microsoft.WindowsFeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Microsoft.WindowsFeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xc1 [0214.865] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0214.865] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Microsoft.WindowsFeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsfeedback_cw5n1h2txyewy\\microsoft.windowsfeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0214.866] GetFileType (hFile=0x444) returned 0x1 [0214.866] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0214.866] GetFileType (hFile=0x444) returned 0x1 [0214.866] WriteFile (in: hFile=0x444, lpBuffer=0x217a1d8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x217a1d8*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0214.866] CloseHandle (hObject=0x444) returned 1 [0214.866] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Microsoft.WindowsFeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Microsoft.WindowsFeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xc1 [0214.866] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Microsoft.WindowsFeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Microsoft.WindowsFeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.xuy", lpFilePart=0x0) returned 0xc5 [0214.866] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0214.866] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Microsoft.WindowsFeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsfeedback_cw5n1h2txyewy\\microsoft.windowsfeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc8f9880, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xe8748565, ftLastAccessTime.dwHighDateTime=0x1d2d439, ftLastWriteTime.dwLowDateTime=0x6bea83a0, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x4000)) returned 1 [0214.866] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0214.866] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Microsoft.WindowsFeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsfeedback_cw5n1h2txyewy\\microsoft.windowsfeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Microsoft.WindowsFeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsfeedback_cw5n1h2txyewy\\microsoft.windowsfeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.xuy")) returned 1 [0214.868] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Microsoft.WindowsFeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Microsoft.WindowsFeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xc6 [0214.868] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0214.868] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Microsoft.WindowsFeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsfeedback_cw5n1h2txyewy\\microsoft.windowsfeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x2191648 | out: lpFileInformation=0x2191648*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xbc8f9880, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xbc8f9880, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xbc8f9880, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x4000)) returned 1 [0214.868] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0214.868] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Microsoft.WindowsFeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Microsoft.WindowsFeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xc6 [0214.868] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0214.868] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Microsoft.WindowsFeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsfeedback_cw5n1h2txyewy\\microsoft.windowsfeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x21918a8 | out: lpFileInformation=0x21918a8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xbc8f9880, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xbc8f9880, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xbc8f9880, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x4000)) returned 1 [0214.868] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0214.868] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Microsoft.WindowsFeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Microsoft.WindowsFeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xc6 [0214.868] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0214.868] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Microsoft.WindowsFeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsfeedback_cw5n1h2txyewy\\microsoft.windowsfeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0214.869] GetFileType (hFile=0x444) returned 0x1 [0214.869] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0214.869] GetFileType (hFile=0x444) returned 0x1 [0214.869] ReadFile (in: hFile=0x444, lpBuffer=0x2193e98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x2193e98*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0214.881] CloseHandle (hObject=0x444) returned 1 [0214.881] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Microsoft.WindowsFeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Microsoft.WindowsFeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xc6 [0214.881] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0214.881] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Microsoft.WindowsFeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsfeedback_cw5n1h2txyewy\\microsoft.windowsfeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0214.881] GetFileType (hFile=0x444) returned 0x1 [0214.881] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0214.881] GetFileType (hFile=0x444) returned 0x1 [0214.881] WriteFile (in: hFile=0x444, lpBuffer=0x2191ae8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x2191ae8*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0214.881] CloseHandle (hObject=0x444) returned 1 [0214.881] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Microsoft.WindowsFeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Microsoft.WindowsFeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xc6 [0214.882] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Microsoft.WindowsFeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Microsoft.WindowsFeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1.xuy", lpFilePart=0x0) returned 0xca [0214.882] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0214.882] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Microsoft.WindowsFeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsfeedback_cw5n1h2txyewy\\microsoft.windowsfeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xbc8f9880, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xbc8f9880, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x6bece585, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x4000)) returned 1 [0214.882] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0214.882] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Microsoft.WindowsFeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsfeedback_cw5n1h2txyewy\\microsoft.windowsfeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Microsoft.WindowsFeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsfeedback_cw5n1h2txyewy\\microsoft.windowsfeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log1.xuy")) returned 1 [0214.883] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Microsoft.WindowsFeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Microsoft.WindowsFeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xc6 [0214.883] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0214.883] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Microsoft.WindowsFeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsfeedback_cw5n1h2txyewy\\microsoft.windowsfeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x2210648 | out: lpFileInformation=0x2210648*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xbc8f9880, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xbc8f9880, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xbc8f9880, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0214.883] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0214.883] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Microsoft.WindowsFeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Microsoft.WindowsFeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xc6 [0214.883] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0214.883] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Microsoft.WindowsFeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsfeedback_cw5n1h2txyewy\\microsoft.windowsfeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0214.883] GetFileType (hFile=0x444) returned 0x1 [0214.884] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0214.884] GetFileType (hFile=0x444) returned 0x1 [0214.884] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x0 [0214.884] CloseHandle (hObject=0x444) returned 1 [0214.894] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Microsoft.WindowsFeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Microsoft.WindowsFeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xc6 [0214.894] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0214.894] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Microsoft.WindowsFeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsfeedback_cw5n1h2txyewy\\microsoft.windowsfeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0214.895] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb070) returned 1 [0214.896] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Microsoft.WindowsFeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbcf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Microsoft.WindowsFeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xc6 [0214.896] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0214.896] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Microsoft.WindowsFeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsfeedback_cw5n1h2txyewy\\microsoft.windowsfeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x3bc270 | out: lpFileInformation=0x3bc270*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xbc8f9880, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xbc8f9880, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xbc8f9880, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0214.896] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc150) returned 1 [0214.896] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Microsoft.WindowsFeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbd10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Microsoft.WindowsFeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xc6 [0214.896] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0214.896] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Microsoft.WindowsFeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsfeedback_cw5n1h2txyewy\\microsoft.windowsfeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x2287ba0 | out: lpFileInformation=0x2287ba0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xbc8f9880, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xbc8f9880, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xbc8f9880, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0214.896] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc150) returned 1 [0214.896] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Microsoft.WindowsFeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Microsoft.WindowsFeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xc6 [0214.896] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc050) returned 1 [0214.896] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Microsoft.WindowsFeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsfeedback_cw5n1h2txyewy\\microsoft.windowsfeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0214.896] GetFileType (hFile=0x444) returned 0x1 [0214.896] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbfc0) returned 1 [0214.896] GetFileType (hFile=0x444) returned 0x1 [0214.896] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc1e8 | out: lpFileSizeHigh=0x3bc1e8*=0x0) returned 0x0 [0214.897] CloseHandle (hObject=0x444) returned 1 [0214.934] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Microsoft.WindowsFeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Microsoft.WindowsFeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xc6 [0214.934] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc050) returned 1 [0214.934] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Microsoft.WindowsFeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsfeedback_cw5n1h2txyewy\\microsoft.windowsfeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0214.936] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8ae0) returned 1 [0214.937] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0214.937] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\RoamingState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\RoamingState", lpFilePart=0x0) returned 0x61 [0214.937] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\RoamingState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\RoamingState\\", lpFilePart=0x0) returned 0x62 [0214.937] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\RoamingState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d79d0 [0214.937] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0214.937] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0214.937] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0214.937] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0214.937] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0214.937] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0214.937] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\RoamingState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\RoamingState", lpFilePart=0x0) returned 0x61 [0214.937] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\RoamingState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\RoamingState\\", lpFilePart=0x0) returned 0x62 [0214.937] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\RoamingState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d78b0 [0214.938] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0214.938] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0214.938] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0214.938] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0214.938] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0214.938] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0214.938] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Settings", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Settings", lpFilePart=0x0) returned 0x5d [0214.938] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Settings\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Settings\\", lpFilePart=0x0) returned 0x5e [0214.938] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Settings\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7370 [0214.962] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0214.963] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0214.963] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0214.963] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0214.963] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0214.963] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0214.963] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0214.964] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0214.964] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0214.964] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0214.964] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Settings", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Settings", lpFilePart=0x0) returned 0x5d [0214.964] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Settings\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Settings\\", lpFilePart=0x0) returned 0x5e [0214.964] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Settings\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d78b0 [0214.965] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0214.965] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0214.966] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0214.966] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0214.966] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0214.966] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0214.966] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0214.967] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0214.967] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0214.967] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Settings\\roaming.lock", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Settings\\roaming.lock", lpFilePart=0x0) returned 0x6a [0214.967] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0214.967] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsfeedback_cw5n1h2txyewy\\settings\\roaming.lock"), fInfoLevelId=0x0, lpFileInformation=0x2304408 | out: lpFileInformation=0x2304408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc566002, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xbc566002, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xbc566002, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0214.968] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0214.968] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Settings\\roaming.lock", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Settings\\roaming.lock", lpFilePart=0x0) returned 0x6a [0214.968] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0214.968] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsfeedback_cw5n1h2txyewy\\settings\\roaming.lock"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0214.968] GetFileType (hFile=0x444) returned 0x1 [0214.968] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0214.968] GetFileType (hFile=0x444) returned 0x1 [0214.968] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0x0 [0214.968] CloseHandle (hObject=0x444) returned 1 [0214.978] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Settings\\roaming.lock", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Settings\\roaming.lock", lpFilePart=0x0) returned 0x6a [0214.979] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0214.979] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsfeedback_cw5n1h2txyewy\\settings\\roaming.lock"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0214.980] GetFileType (hFile=0x444) returned 0x1 [0214.980] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0214.980] GetFileType (hFile=0x444) returned 0x1 [0214.980] WriteFile (in: hFile=0x444, lpBuffer=0x237a870*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x3be628, lpOverlapped=0x0 | out: lpBuffer=0x237a870*, lpNumberOfBytesWritten=0x3be628*=0x10, lpOverlapped=0x0) returned 1 [0214.981] CloseHandle (hObject=0x444) returned 1 [0214.981] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Settings\\roaming.lock", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Settings\\roaming.lock", lpFilePart=0x0) returned 0x6a [0214.981] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Settings\\roaming.lock.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Settings\\roaming.lock.xuy", lpFilePart=0x0) returned 0x6e [0214.981] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0214.982] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsfeedback_cw5n1h2txyewy\\settings\\roaming.lock"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc566002, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xbc566002, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x6bfd9d5a, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0214.982] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0214.982] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsfeedback_cw5n1h2txyewy\\settings\\roaming.lock"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Settings\\roaming.lock.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsfeedback_cw5n1h2txyewy\\settings\\roaming.lock.xuy")) returned 1 [0214.983] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Settings\\settings.dat", lpFilePart=0x0) returned 0x6a [0214.983] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0214.983] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsfeedback_cw5n1h2txyewy\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x237bbb0 | out: lpFileInformation=0x237bbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc566002, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xe88070d4, ftLastAccessTime.dwHighDateTime=0x1d2d439, ftLastWriteTime.dwLowDateTime=0xe88070d4, ftLastWriteTime.dwHighDateTime=0x1d2d439, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0214.983] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0214.983] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Settings\\settings.dat", lpFilePart=0x0) returned 0x6a [0214.983] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0214.983] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsfeedback_cw5n1h2txyewy\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x237bd40 | out: lpFileInformation=0x237bd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc566002, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xe88070d4, ftLastAccessTime.dwHighDateTime=0x1d2d439, ftLastWriteTime.dwLowDateTime=0xe88070d4, ftLastWriteTime.dwHighDateTime=0x1d2d439, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0214.983] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0214.984] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Settings\\settings.dat", lpFilePart=0x0) returned 0x6a [0214.984] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0214.984] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsfeedback_cw5n1h2txyewy\\settings\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0214.985] GetFileType (hFile=0x444) returned 0x1 [0214.985] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0214.985] GetFileType (hFile=0x444) returned 0x1 [0214.987] ReadFile (in: hFile=0x444, lpBuffer=0x2182180, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x2182180*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0215.045] CloseHandle (hObject=0x444) returned 1 [0215.046] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Settings\\settings.dat", lpFilePart=0x0) returned 0x6a [0215.046] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0215.046] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsfeedback_cw5n1h2txyewy\\settings\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0215.046] GetFileType (hFile=0x444) returned 0x1 [0215.046] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0215.046] GetFileType (hFile=0x444) returned 0x1 [0215.046] WriteFile (in: hFile=0x444, lpBuffer=0x217ff98*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x217ff98*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0215.046] CloseHandle (hObject=0x444) returned 1 [0215.046] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Settings\\settings.dat", lpFilePart=0x0) returned 0x6a [0215.046] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Settings\\settings.dat.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Settings\\settings.dat.xuy", lpFilePart=0x0) returned 0x6e [0215.047] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0215.047] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsfeedback_cw5n1h2txyewy\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc566002, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xe88070d4, ftLastAccessTime.dwHighDateTime=0x1d2d439, ftLastWriteTime.dwLowDateTime=0x6c0720a5, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0215.047] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0215.047] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsfeedback_cw5n1h2txyewy\\settings\\settings.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Settings\\settings.dat.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsfeedback_cw5n1h2txyewy\\settings\\settings.dat.xuy")) returned 1 [0215.048] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", lpFilePart=0x0) returned 0x6f [0215.048] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0215.048] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsfeedback_cw5n1h2txyewy\\settings\\settings.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x21fe638 | out: lpFileInformation=0x21fe638*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x78519925, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x78519925, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x78519925, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0215.048] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0215.048] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", lpFilePart=0x0) returned 0x6f [0215.048] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0215.048] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsfeedback_cw5n1h2txyewy\\settings\\settings.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x21fe7d8 | out: lpFileInformation=0x21fe7d8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x78519925, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x78519925, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x78519925, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0215.048] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0215.049] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", lpFilePart=0x0) returned 0x6f [0215.049] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0215.049] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsfeedback_cw5n1h2txyewy\\settings\\settings.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0215.050] GetFileType (hFile=0x444) returned 0x1 [0215.050] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0215.050] GetFileType (hFile=0x444) returned 0x1 [0215.050] ReadFile (in: hFile=0x444, lpBuffer=0x2200c48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x2200c48*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0215.068] CloseHandle (hObject=0x444) returned 1 [0215.068] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", lpFilePart=0x0) returned 0x6f [0215.069] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0215.069] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsfeedback_cw5n1h2txyewy\\settings\\settings.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0215.069] GetFileType (hFile=0x444) returned 0x1 [0215.069] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0215.069] GetFileType (hFile=0x444) returned 0x1 [0215.069] WriteFile (in: hFile=0x444, lpBuffer=0x21fe958*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x21fe958*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0215.069] CloseHandle (hObject=0x444) returned 1 [0215.069] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", lpFilePart=0x0) returned 0x6f [0215.069] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Settings\\settings.dat.LOG1.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Settings\\settings.dat.LOG1.xuy", lpFilePart=0x0) returned 0x73 [0215.069] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0215.069] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsfeedback_cw5n1h2txyewy\\settings\\settings.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x78519925, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x78519925, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x6c098125, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0215.069] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0215.070] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsfeedback_cw5n1h2txyewy\\settings\\settings.dat.log1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Settings\\settings.dat.LOG1.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsfeedback_cw5n1h2txyewy\\settings\\settings.dat.log1.xuy")) returned 1 [0215.071] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", lpFilePart=0x0) returned 0x6f [0215.071] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0215.071] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsfeedback_cw5n1h2txyewy\\settings\\settings.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x227d128 | out: lpFileInformation=0x227d128*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x78519925, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x78519925, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x78519925, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0215.071] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0215.071] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", lpFilePart=0x0) returned 0x6f [0215.071] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0215.071] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsfeedback_cw5n1h2txyewy\\settings\\settings.dat.log2"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0215.071] GetFileType (hFile=0x444) returned 0x1 [0215.071] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0215.071] GetFileType (hFile=0x444) returned 0x1 [0215.071] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0x0 [0215.072] CloseHandle (hObject=0x444) returned 1 [0215.082] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", lpFilePart=0x0) returned 0x6f [0215.082] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0215.082] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsfeedback_cw5n1h2txyewy\\settings\\settings.dat.log2"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0215.083] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb0e0) returned 1 [0215.084] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", lpFilePart=0x0) returned 0x6f [0215.084] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc200) returned 1 [0215.084] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsfeedback_cw5n1h2txyewy\\settings\\settings.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x3bc2e0 | out: lpFileInformation=0x3bc2e0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x78519925, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x78519925, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x78519925, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0215.084] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1c0) returned 1 [0215.084] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbd80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", lpFilePart=0x0) returned 0x6f [0215.084] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsfeedback_cw5n1h2txyewy\\settings\\settings.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x22f4180 | out: lpFileInformation=0x22f4180*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x78519925, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x78519925, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x78519925, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0215.084] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", lpFilePart=0x0) returned 0x6f [0215.084] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsfeedback_cw5n1h2txyewy\\settings\\settings.dat.log2"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0215.084] GetFileType (hFile=0x444) returned 0x1 [0215.084] GetFileType (hFile=0x444) returned 0x1 [0215.084] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc258 | out: lpFileSizeHigh=0x3bc258*=0x0) returned 0x0 [0215.084] CloseHandle (hObject=0x444) returned 1 [0215.095] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", lpFilePart=0x0) returned 0x6f [0215.095] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsfeedback_cw5n1h2txyewy\\settings\\settings.dat.log2"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0215.097] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\SystemAppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\SystemAppData", lpFilePart=0x0) returned 0x62 [0215.097] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\SystemAppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\SystemAppData\\", lpFilePart=0x0) returned 0x63 [0215.097] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\SystemAppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d75b0 [0215.097] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0215.097] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0215.097] FindClose (in: hFindFile=0x5d75b0 | out: hFindFile=0x5d75b0) returned 1 [0215.097] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\SystemAppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\SystemAppData", lpFilePart=0x0) returned 0x62 [0215.097] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\SystemAppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\SystemAppData\\", lpFilePart=0x0) returned 0x63 [0215.097] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\SystemAppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d79d0 [0215.097] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0215.098] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0215.098] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0215.098] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\TempState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\TempState", lpFilePart=0x0) returned 0x5e [0215.098] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\TempState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\TempState\\", lpFilePart=0x0) returned 0x5f [0215.098] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\TempState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7c70 [0215.098] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0215.098] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0215.098] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0215.098] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\TempState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\TempState", lpFilePart=0x0) returned 0x5e [0215.099] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\TempState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\TempState\\", lpFilePart=0x0) returned 0x5f [0215.099] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\TempState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d79d0 [0215.099] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0215.099] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0215.099] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0215.099] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe", lpFilePart=0x0) returned 0x50 [0215.099] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\", lpFilePart=0x0) returned 0x51 [0215.099] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d7d90 [0215.117] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0215.117] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0215.118] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0215.118] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0215.118] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0215.118] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0215.118] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0215.118] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0215.118] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0215.118] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0215.119] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0215.119] FindClose (in: hFindFile=0x5d7d90 | out: hFindFile=0x5d7d90) returned 1 [0215.119] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe", lpFilePart=0x0) returned 0x50 [0215.119] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\", lpFilePart=0x0) returned 0x51 [0215.119] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d7670 [0215.120] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0215.120] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0215.120] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0215.121] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0215.121] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0215.121] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0215.121] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0215.121] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0215.121] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0215.122] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0215.122] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0215.122] FindClose (in: hFindFile=0x5d7670 | out: hFindFile=0x5d7670) returned 1 [0215.122] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\AC", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\AC", lpFilePart=0x0) returned 0x53 [0215.122] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\AC\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\AC\\", lpFilePart=0x0) returned 0x54 [0215.123] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\AC\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7e50 [0215.131] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0215.131] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0215.131] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0215.131] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0215.131] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0215.131] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0215.131] FindClose (in: hFindFile=0x5d7e50 | out: hFindFile=0x5d7e50) returned 1 [0215.132] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\AC", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\AC", lpFilePart=0x0) returned 0x53 [0215.132] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\AC\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\AC\\", lpFilePart=0x0) returned 0x54 [0215.132] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\AC\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d78b0 [0215.133] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0215.133] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0215.133] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0215.133] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0215.133] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0215.133] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0215.133] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0215.134] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\AC\\INetCache", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\AC\\INetCache", lpFilePart=0x0) returned 0x5d [0215.134] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\AC\\INetCache\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\AC\\INetCache\\", lpFilePart=0x0) returned 0x5e [0215.134] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\AC\\INetCache\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d78b0 [0215.140] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0215.140] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0215.140] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0215.141] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\AC\\INetCache", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\AC\\INetCache", lpFilePart=0x0) returned 0x5d [0215.141] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\AC\\INetCache\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\AC\\INetCache\\", lpFilePart=0x0) returned 0x5e [0215.141] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\AC\\INetCache\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7550 [0215.141] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0215.141] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0215.141] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0215.141] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\AC\\INetCookies", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\AC\\INetCookies", lpFilePart=0x0) returned 0x5f [0215.141] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\AC\\INetCookies\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\AC\\INetCookies\\", lpFilePart=0x0) returned 0x60 [0215.141] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\AC\\INetCookies\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d81b0 [0215.141] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0215.142] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0215.142] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0215.142] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\AC\\INetCookies", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\AC\\INetCookies", lpFilePart=0x0) returned 0x5f [0215.142] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\AC\\INetCookies\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\AC\\INetCookies\\", lpFilePart=0x0) returned 0x60 [0215.142] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\AC\\INetCookies\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7e50 [0215.142] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0215.142] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0215.142] FindClose (in: hFindFile=0x5d7e50 | out: hFindFile=0x5d7e50) returned 1 [0215.142] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\AC\\INetHistory", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\AC\\INetHistory", lpFilePart=0x0) returned 0x5f [0215.142] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\AC\\INetHistory\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\AC\\INetHistory\\", lpFilePart=0x0) returned 0x60 [0215.142] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\AC\\INetHistory\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7e50 [0215.143] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0215.143] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0215.143] FindClose (in: hFindFile=0x5d7e50 | out: hFindFile=0x5d7e50) returned 1 [0215.143] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\AC\\INetHistory", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\AC\\INetHistory", lpFilePart=0x0) returned 0x5f [0215.143] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\AC\\INetHistory\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\AC\\INetHistory\\", lpFilePart=0x0) returned 0x60 [0215.143] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\AC\\INetHistory\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d78b0 [0215.143] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0215.143] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0215.144] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0215.144] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\AC\\Temp", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\AC\\Temp", lpFilePart=0x0) returned 0x58 [0215.144] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\AC\\Temp\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\AC\\Temp\\", lpFilePart=0x0) returned 0x59 [0215.144] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\AC\\Temp\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7c70 [0215.144] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0215.144] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0215.144] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0215.144] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\AC\\Temp", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\AC\\Temp", lpFilePart=0x0) returned 0x58 [0215.144] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\AC\\Temp\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\AC\\Temp\\", lpFilePart=0x0) returned 0x59 [0215.144] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\AC\\Temp\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7c70 [0215.144] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0215.145] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0215.145] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0215.145] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\AppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\AppData", lpFilePart=0x0) returned 0x58 [0215.145] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\AppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\AppData\\", lpFilePart=0x0) returned 0x59 [0215.145] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\AppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d78b0 [0215.145] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0215.145] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0215.145] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0215.145] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\AppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\AppData", lpFilePart=0x0) returned 0x58 [0215.145] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\AppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\AppData\\", lpFilePart=0x0) returned 0x59 [0215.145] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\AppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7a30 [0215.146] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0215.146] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0215.146] FindClose (in: hFindFile=0x5d7a30 | out: hFindFile=0x5d7a30) returned 1 [0215.146] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\LocalCache", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\LocalCache", lpFilePart=0x0) returned 0x5b [0215.146] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\LocalCache\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\LocalCache\\", lpFilePart=0x0) returned 0x5c [0215.146] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\LocalCache\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d79d0 [0215.146] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0215.146] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0215.147] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0215.147] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\LocalCache", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\LocalCache", lpFilePart=0x0) returned 0x5b [0215.147] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\LocalCache\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\LocalCache\\", lpFilePart=0x0) returned 0x5c [0215.147] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\LocalCache\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d8090 [0215.147] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0215.147] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0215.147] FindClose (in: hFindFile=0x5d8090 | out: hFindFile=0x5d8090) returned 1 [0215.150] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0215.150] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\LocalState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\LocalState", lpFilePart=0x0) returned 0x5b [0215.150] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\LocalState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\LocalState\\", lpFilePart=0x0) returned 0x5c [0215.150] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\LocalState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7370 [0215.150] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0215.150] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0215.150] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0215.150] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0215.150] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0215.150] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0215.150] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\LocalState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\LocalState", lpFilePart=0x0) returned 0x5b [0215.150] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\LocalState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\LocalState\\", lpFilePart=0x0) returned 0x5c [0215.151] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\LocalState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7550 [0215.151] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0215.151] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0215.151] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0215.151] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0215.151] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0215.151] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0215.151] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\Microsoft.WindowsMaps_4.1505.50619.0_x64__8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\Microsoft.WindowsMaps_4.1505.50619.0_x64__8wekyb3d8bbwe", lpFilePart=0x0) returned 0x88 [0215.151] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\Microsoft.WindowsMaps_4.1505.50619.0_x64__8wekyb3d8bbwe\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\Microsoft.WindowsMaps_4.1505.50619.0_x64__8wekyb3d8bbwe\\", lpFilePart=0x0) returned 0x89 [0215.151] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\Microsoft.WindowsMaps_4.1505.50619.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7550 [0215.153] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0215.153] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0215.154] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0215.154] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0215.154] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0215.154] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0215.154] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0215.154] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\Microsoft.WindowsMaps_4.1505.50619.0_x64__8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\Microsoft.WindowsMaps_4.1505.50619.0_x64__8wekyb3d8bbwe", lpFilePart=0x0) returned 0x88 [0215.154] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\Microsoft.WindowsMaps_4.1505.50619.0_x64__8wekyb3d8bbwe\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\Microsoft.WindowsMaps_4.1505.50619.0_x64__8wekyb3d8bbwe\\", lpFilePart=0x0) returned 0x89 [0215.154] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\Microsoft.WindowsMaps_4.1505.50619.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7af0 [0215.154] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0215.154] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0215.154] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0215.155] FindClose (in: hFindFile=0x5d7af0 | out: hFindFile=0x5d7af0) returned 1 [0215.155] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0215.155] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0215.155] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0215.155] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\Microsoft.WindowsMaps_4.1505.50619.0_x64__8wekyb3d8bbwe\\ActivationStore", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\Microsoft.WindowsMaps_4.1505.50619.0_x64__8wekyb3d8bbwe\\ActivationStore", lpFilePart=0x0) returned 0x98 [0215.155] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\Microsoft.WindowsMaps_4.1505.50619.0_x64__8wekyb3d8bbwe\\ActivationStore\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\Microsoft.WindowsMaps_4.1505.50619.0_x64__8wekyb3d8bbwe\\ActivationStore\\", lpFilePart=0x0) returned 0x99 [0215.155] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\Microsoft.WindowsMaps_4.1505.50619.0_x64__8wekyb3d8bbwe\\ActivationStore\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7550 [0215.163] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0215.163] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0215.163] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0215.163] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0215.163] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0215.164] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0215.164] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0215.164] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0215.164] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0215.164] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\Microsoft.WindowsMaps_4.1505.50619.0_x64__8wekyb3d8bbwe\\ActivationStore", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\Microsoft.WindowsMaps_4.1505.50619.0_x64__8wekyb3d8bbwe\\ActivationStore", lpFilePart=0x0) returned 0x98 [0215.164] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\Microsoft.WindowsMaps_4.1505.50619.0_x64__8wekyb3d8bbwe\\ActivationStore\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\Microsoft.WindowsMaps_4.1505.50619.0_x64__8wekyb3d8bbwe\\ActivationStore\\", lpFilePart=0x0) returned 0x99 [0215.164] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\Microsoft.WindowsMaps_4.1505.50619.0_x64__8wekyb3d8bbwe\\ActivationStore\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7550 [0215.165] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0215.165] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0215.165] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0215.165] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0215.166] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0215.166] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0215.166] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0215.166] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0215.166] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\Microsoft.WindowsMaps_4.1505.50619.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\Microsoft.WindowsMaps_4.1505.50619.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xac [0215.166] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0215.166] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\Microsoft.WindowsMaps_4.1505.50619.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsmaps_8wekyb3d8bbwe\\microsoft.windowsmaps_4.1505.50619.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), fInfoLevelId=0x0, lpFileInformation=0x218bf60 | out: lpFileInformation=0x218bf60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb6f86c1, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xfbb4ab17, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0xfbb4ab17, ftLastWriteTime.dwHighDateTime=0x1d2d028, nFileSizeHigh=0x0, nFileSizeLow=0x10000)) returned 1 [0215.167] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0215.167] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\Microsoft.WindowsMaps_4.1505.50619.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\Microsoft.WindowsMaps_4.1505.50619.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xac [0215.167] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0215.167] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\Microsoft.WindowsMaps_4.1505.50619.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsmaps_8wekyb3d8bbwe\\microsoft.windowsmaps_4.1505.50619.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), fInfoLevelId=0x0, lpFileInformation=0x218c180 | out: lpFileInformation=0x218c180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb6f86c1, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xfbb4ab17, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0xfbb4ab17, ftLastWriteTime.dwHighDateTime=0x1d2d028, nFileSizeHigh=0x0, nFileSizeLow=0x10000)) returned 1 [0215.167] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0215.167] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\Microsoft.WindowsMaps_4.1505.50619.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\Microsoft.WindowsMaps_4.1505.50619.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xac [0215.167] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0215.168] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\Microsoft.WindowsMaps_4.1505.50619.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsmaps_8wekyb3d8bbwe\\microsoft.windowsmaps_4.1505.50619.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0215.169] GetFileType (hFile=0x444) returned 0x1 [0215.169] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0215.169] GetFileType (hFile=0x444) returned 0x1 [0215.169] ReadFile (in: hFile=0x444, lpBuffer=0x218e6f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x218e6f0*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0215.218] CloseHandle (hObject=0x444) returned 1 [0215.219] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\Microsoft.WindowsMaps_4.1505.50619.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\Microsoft.WindowsMaps_4.1505.50619.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xac [0215.219] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0215.219] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\Microsoft.WindowsMaps_4.1505.50619.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsmaps_8wekyb3d8bbwe\\microsoft.windowsmaps_4.1505.50619.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0215.219] GetFileType (hFile=0x444) returned 0x1 [0215.219] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0215.219] GetFileType (hFile=0x444) returned 0x1 [0215.219] WriteFile (in: hFile=0x444, lpBuffer=0x218c380*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x218c380*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0215.219] CloseHandle (hObject=0x444) returned 1 [0215.219] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\Microsoft.WindowsMaps_4.1505.50619.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\Microsoft.WindowsMaps_4.1505.50619.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xac [0215.219] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\Microsoft.WindowsMaps_4.1505.50619.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\Microsoft.WindowsMaps_4.1505.50619.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.xuy", lpFilePart=0x0) returned 0xb0 [0215.219] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0215.220] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\Microsoft.WindowsMaps_4.1505.50619.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsmaps_8wekyb3d8bbwe\\microsoft.windowsmaps_4.1505.50619.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb6f86c1, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xfbb4ab17, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x6c215cb1, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x10000)) returned 1 [0215.220] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0215.220] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\Microsoft.WindowsMaps_4.1505.50619.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsmaps_8wekyb3d8bbwe\\microsoft.windowsmaps_4.1505.50619.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\Microsoft.WindowsMaps_4.1505.50619.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsmaps_8wekyb3d8bbwe\\microsoft.windowsmaps_4.1505.50619.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.xuy")) returned 1 [0215.221] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\Microsoft.WindowsMaps_4.1505.50619.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\Microsoft.WindowsMaps_4.1505.50619.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xb1 [0215.221] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0215.221] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\Microsoft.WindowsMaps_4.1505.50619.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsmaps_8wekyb3d8bbwe\\microsoft.windowsmaps_4.1505.50619.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x220add0 | out: lpFileInformation=0x220add0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xfb71e8f8, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xfb71e8f8, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0xfb71e8f8, ftLastWriteTime.dwHighDateTime=0x1d2d028, nFileSizeHigh=0x0, nFileSizeLow=0xc000)) returned 1 [0215.221] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0215.221] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\Microsoft.WindowsMaps_4.1505.50619.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\Microsoft.WindowsMaps_4.1505.50619.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xb1 [0215.221] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0215.221] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\Microsoft.WindowsMaps_4.1505.50619.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsmaps_8wekyb3d8bbwe\\microsoft.windowsmaps_4.1505.50619.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x220b008 | out: lpFileInformation=0x220b008*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xfb71e8f8, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xfb71e8f8, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0xfb71e8f8, ftLastWriteTime.dwHighDateTime=0x1d2d028, nFileSizeHigh=0x0, nFileSizeLow=0xc000)) returned 1 [0215.221] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0215.221] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\Microsoft.WindowsMaps_4.1505.50619.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\Microsoft.WindowsMaps_4.1505.50619.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xb1 [0215.221] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0215.222] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\Microsoft.WindowsMaps_4.1505.50619.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsmaps_8wekyb3d8bbwe\\microsoft.windowsmaps_4.1505.50619.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0215.223] GetFileType (hFile=0x444) returned 0x1 [0215.223] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0215.223] GetFileType (hFile=0x444) returned 0x1 [0215.223] ReadFile (in: hFile=0x444, lpBuffer=0x220d5a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x220d5a8*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0215.236] CloseHandle (hObject=0x444) returned 1 [0215.236] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\Microsoft.WindowsMaps_4.1505.50619.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\Microsoft.WindowsMaps_4.1505.50619.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xb1 [0215.236] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0215.236] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\Microsoft.WindowsMaps_4.1505.50619.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsmaps_8wekyb3d8bbwe\\microsoft.windowsmaps_4.1505.50619.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0215.236] GetFileType (hFile=0x444) returned 0x1 [0215.237] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0215.237] GetFileType (hFile=0x444) returned 0x1 [0215.237] WriteFile (in: hFile=0x444, lpBuffer=0x220b220*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x220b220*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0215.237] CloseHandle (hObject=0x444) returned 1 [0215.237] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\Microsoft.WindowsMaps_4.1505.50619.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\Microsoft.WindowsMaps_4.1505.50619.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xb1 [0215.237] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\Microsoft.WindowsMaps_4.1505.50619.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\Microsoft.WindowsMaps_4.1505.50619.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1.xuy", lpFilePart=0x0) returned 0xb5 [0215.237] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0215.237] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\Microsoft.WindowsMaps_4.1505.50619.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsmaps_8wekyb3d8bbwe\\microsoft.windowsmaps_4.1505.50619.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xfb71e8f8, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xfb71e8f8, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x6c23bb95, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0xc000)) returned 1 [0215.237] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0215.237] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\Microsoft.WindowsMaps_4.1505.50619.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsmaps_8wekyb3d8bbwe\\microsoft.windowsmaps_4.1505.50619.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\Microsoft.WindowsMaps_4.1505.50619.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsmaps_8wekyb3d8bbwe\\microsoft.windowsmaps_4.1505.50619.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1.xuy")) returned 1 [0215.239] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\Microsoft.WindowsMaps_4.1505.50619.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\Microsoft.WindowsMaps_4.1505.50619.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xb1 [0215.239] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0215.239] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\Microsoft.WindowsMaps_4.1505.50619.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsmaps_8wekyb3d8bbwe\\microsoft.windowsmaps_4.1505.50619.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x2289cb8 | out: lpFileInformation=0x2289cb8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xfb71e8f8, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xfb71e8f8, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0xfb71e8f8, ftLastWriteTime.dwHighDateTime=0x1d2d028, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0215.239] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0215.239] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\Microsoft.WindowsMaps_4.1505.50619.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\Microsoft.WindowsMaps_4.1505.50619.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xb1 [0215.239] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0215.239] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\Microsoft.WindowsMaps_4.1505.50619.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsmaps_8wekyb3d8bbwe\\microsoft.windowsmaps_4.1505.50619.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0215.239] GetFileType (hFile=0x444) returned 0x1 [0215.239] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0215.239] GetFileType (hFile=0x444) returned 0x1 [0215.239] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x0 [0215.239] CloseHandle (hObject=0x444) returned 1 [0215.250] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\Microsoft.WindowsMaps_4.1505.50619.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\Microsoft.WindowsMaps_4.1505.50619.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xb1 [0215.250] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0215.250] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\Microsoft.WindowsMaps_4.1505.50619.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsmaps_8wekyb3d8bbwe\\microsoft.windowsmaps_4.1505.50619.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0215.251] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb070) returned 1 [0215.251] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\Microsoft.WindowsMaps_4.1505.50619.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbcf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\Microsoft.WindowsMaps_4.1505.50619.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xb1 [0215.251] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0215.251] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\Microsoft.WindowsMaps_4.1505.50619.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsmaps_8wekyb3d8bbwe\\microsoft.windowsmaps_4.1505.50619.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x3bc270 | out: lpFileInformation=0x3bc270*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xfb71e8f8, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xfb71e8f8, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0xfb71e8f8, ftLastWriteTime.dwHighDateTime=0x1d2d028, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0215.252] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc150) returned 1 [0215.252] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\Microsoft.WindowsMaps_4.1505.50619.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbd10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\Microsoft.WindowsMaps_4.1505.50619.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xb1 [0215.252] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0215.252] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\Microsoft.WindowsMaps_4.1505.50619.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsmaps_8wekyb3d8bbwe\\microsoft.windowsmaps_4.1505.50619.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x2300d00 | out: lpFileInformation=0x2300d00*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xfb71e8f8, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xfb71e8f8, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0xfb71e8f8, ftLastWriteTime.dwHighDateTime=0x1d2d028, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0215.252] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc150) returned 1 [0215.252] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\Microsoft.WindowsMaps_4.1505.50619.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\Microsoft.WindowsMaps_4.1505.50619.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xb1 [0215.252] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc050) returned 1 [0215.252] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\Microsoft.WindowsMaps_4.1505.50619.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsmaps_8wekyb3d8bbwe\\microsoft.windowsmaps_4.1505.50619.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0215.252] GetFileType (hFile=0x444) returned 0x1 [0215.252] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbfc0) returned 1 [0215.252] GetFileType (hFile=0x444) returned 0x1 [0215.252] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc1e8 | out: lpFileSizeHigh=0x3bc1e8*=0x0) returned 0x0 [0215.252] CloseHandle (hObject=0x444) returned 1 [0215.268] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\Microsoft.WindowsMaps_4.1505.50619.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\Microsoft.WindowsMaps_4.1505.50619.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xb1 [0215.268] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc050) returned 1 [0215.268] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\Microsoft.WindowsMaps_4.1505.50619.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsmaps_8wekyb3d8bbwe\\microsoft.windowsmaps_4.1505.50619.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0215.270] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8ae0) returned 1 [0215.270] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0215.271] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\RoamingState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\RoamingState", lpFilePart=0x0) returned 0x5d [0215.271] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\RoamingState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\RoamingState\\", lpFilePart=0x0) returned 0x5e [0215.271] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\RoamingState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7d30 [0215.271] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0215.271] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0215.271] FindClose (in: hFindFile=0x5d7d30 | out: hFindFile=0x5d7d30) returned 1 [0215.271] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0215.271] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0215.271] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0215.271] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\RoamingState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\RoamingState", lpFilePart=0x0) returned 0x5d [0215.271] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\RoamingState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\RoamingState\\", lpFilePart=0x0) returned 0x5e [0215.271] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\RoamingState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7a30 [0215.272] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0215.272] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0215.272] FindClose (in: hFindFile=0x5d7a30 | out: hFindFile=0x5d7a30) returned 1 [0215.272] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0215.272] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0215.272] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0215.272] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\Settings", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\Settings", lpFilePart=0x0) returned 0x59 [0215.272] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\Settings\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\Settings\\", lpFilePart=0x0) returned 0x5a [0215.272] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\Settings\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7550 [0215.272] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0215.273] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0215.273] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0215.273] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0215.273] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0215.273] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0215.273] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0215.273] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0215.273] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\Settings", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\Settings", lpFilePart=0x0) returned 0x59 [0215.273] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\Settings\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\Settings\\", lpFilePart=0x0) returned 0x5a [0215.273] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\Settings\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d73d0 [0215.273] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0215.273] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0215.273] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0215.273] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0215.273] FindClose (in: hFindFile=0x5d73d0 | out: hFindFile=0x5d73d0) returned 1 [0215.274] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0215.274] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0215.274] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\Settings\\roaming.lock", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\Settings\\roaming.lock", lpFilePart=0x0) returned 0x66 [0215.274] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0215.274] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsmaps_8wekyb3d8bbwe\\settings\\roaming.lock"), fInfoLevelId=0x0, lpFileInformation=0x237c370 | out: lpFileInformation=0x237c370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfacd6696, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xfacd6696, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0xfacd6696, ftLastWriteTime.dwHighDateTime=0x1d2d028, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0215.274] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0215.274] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\Settings\\roaming.lock", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\Settings\\roaming.lock", lpFilePart=0x0) returned 0x66 [0215.274] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0215.274] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsmaps_8wekyb3d8bbwe\\settings\\roaming.lock"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0215.274] GetFileType (hFile=0x444) returned 0x1 [0215.274] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0215.274] GetFileType (hFile=0x444) returned 0x1 [0215.274] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0x0 [0215.274] CloseHandle (hObject=0x444) returned 1 [0215.311] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\Settings\\roaming.lock", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\Settings\\roaming.lock", lpFilePart=0x0) returned 0x66 [0215.311] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0215.311] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsmaps_8wekyb3d8bbwe\\settings\\roaming.lock"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0215.312] GetFileType (hFile=0x444) returned 0x1 [0215.312] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0215.312] GetFileType (hFile=0x444) returned 0x1 [0215.312] WriteFile (in: hFile=0x444, lpBuffer=0x21f3210*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x3be628, lpOverlapped=0x0 | out: lpBuffer=0x21f3210*, lpNumberOfBytesWritten=0x3be628*=0x10, lpOverlapped=0x0) returned 1 [0215.313] CloseHandle (hObject=0x444) returned 1 [0215.313] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\Settings\\roaming.lock", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\Settings\\roaming.lock", lpFilePart=0x0) returned 0x66 [0215.313] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\Settings\\roaming.lock.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\Settings\\roaming.lock.xuy", lpFilePart=0x0) returned 0x6a [0215.313] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0215.313] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsmaps_8wekyb3d8bbwe\\settings\\roaming.lock"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfacd6696, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xfacd6696, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x6c2fa6ee, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0215.313] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0215.313] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsmaps_8wekyb3d8bbwe\\settings\\roaming.lock"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\Settings\\roaming.lock.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsmaps_8wekyb3d8bbwe\\settings\\roaming.lock.xuy")) returned 1 [0215.314] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\Settings\\settings.dat", lpFilePart=0x0) returned 0x66 [0215.314] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0215.315] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsmaps_8wekyb3d8bbwe\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x21f4538 | out: lpFileInformation=0x21f4538*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfab7f004, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xfab7f004, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x8d6f5917, ftLastWriteTime.dwHighDateTime=0x1d0baff, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0215.315] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0215.315] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\Settings\\settings.dat", lpFilePart=0x0) returned 0x66 [0215.315] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0215.315] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsmaps_8wekyb3d8bbwe\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x21f46c0 | out: lpFileInformation=0x21f46c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfab7f004, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xfab7f004, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x8d6f5917, ftLastWriteTime.dwHighDateTime=0x1d0baff, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0215.315] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0215.315] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\Settings\\settings.dat", lpFilePart=0x0) returned 0x66 [0215.315] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0215.315] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsmaps_8wekyb3d8bbwe\\settings\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0215.316] GetFileType (hFile=0x444) returned 0x1 [0215.316] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0215.316] GetFileType (hFile=0x444) returned 0x1 [0215.316] ReadFile (in: hFile=0x444, lpBuffer=0x21f6b00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x21f6b00*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0215.343] CloseHandle (hObject=0x444) returned 1 [0215.343] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\Settings\\settings.dat", lpFilePart=0x0) returned 0x66 [0215.344] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0215.344] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsmaps_8wekyb3d8bbwe\\settings\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0215.344] GetFileType (hFile=0x444) returned 0x1 [0215.344] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0215.344] GetFileType (hFile=0x444) returned 0x1 [0215.344] WriteFile (in: hFile=0x444, lpBuffer=0x21f4828*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x21f4828*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0215.344] CloseHandle (hObject=0x444) returned 1 [0215.344] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\Settings\\settings.dat", lpFilePart=0x0) returned 0x66 [0215.344] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\Settings\\settings.dat.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\Settings\\settings.dat.xuy", lpFilePart=0x0) returned 0x6a [0215.344] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0215.344] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsmaps_8wekyb3d8bbwe\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfab7f004, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xfab7f004, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x6c346b8b, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0215.344] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0215.344] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsmaps_8wekyb3d8bbwe\\settings\\settings.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\Settings\\settings.dat.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsmaps_8wekyb3d8bbwe\\settings\\settings.dat.xuy")) returned 1 [0215.346] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0215.346] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\SystemAppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\SystemAppData", lpFilePart=0x0) returned 0x5e [0215.346] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\SystemAppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\SystemAppData\\", lpFilePart=0x0) returned 0x5f [0215.346] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\SystemAppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7550 [0215.346] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0215.346] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0215.346] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0215.346] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0215.346] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0215.346] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0215.346] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\SystemAppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\SystemAppData", lpFilePart=0x0) returned 0x5e [0215.346] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\SystemAppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\SystemAppData\\", lpFilePart=0x0) returned 0x5f [0215.346] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\SystemAppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d78b0 [0215.347] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0215.347] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0215.347] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0215.347] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0215.347] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0215.347] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0215.347] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\TempState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\TempState", lpFilePart=0x0) returned 0x5a [0215.347] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\TempState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\TempState\\", lpFilePart=0x0) returned 0x5b [0215.347] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\TempState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d75b0 [0215.347] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0215.347] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0215.347] FindClose (in: hFindFile=0x5d75b0 | out: hFindFile=0x5d75b0) returned 1 [0215.347] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0215.347] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0215.347] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0215.347] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\TempState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\TempState", lpFilePart=0x0) returned 0x5a [0215.347] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\TempState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\TempState\\", lpFilePart=0x0) returned 0x5b [0215.347] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\TempState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d81b0 [0215.348] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0215.348] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0215.348] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0215.348] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0215.348] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0215.348] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0215.348] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe", lpFilePart=0x0) returned 0x51 [0215.348] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\", lpFilePart=0x0) returned 0x52 [0215.348] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d7a30 [0215.362] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0215.362] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0215.362] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0215.362] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0215.362] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0215.362] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0215.362] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0215.362] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0215.362] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0215.362] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0215.362] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0215.362] FindClose (in: hFindFile=0x5d7a30 | out: hFindFile=0x5d7a30) returned 1 [0215.363] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0215.363] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0215.363] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0215.363] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe", lpFilePart=0x0) returned 0x51 [0215.363] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\", lpFilePart=0x0) returned 0x52 [0215.363] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d7c70 [0215.364] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0215.364] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0215.364] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0215.364] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0215.364] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0215.364] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0215.364] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0215.364] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0215.364] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0215.364] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0215.364] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0215.364] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0215.365] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0215.365] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0215.365] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0215.365] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\AC", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\AC", lpFilePart=0x0) returned 0x54 [0215.365] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\AC\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\AC\\", lpFilePart=0x0) returned 0x55 [0215.365] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\AC\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d78b0 [0215.368] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0215.368] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0215.368] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0215.368] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0215.368] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0215.368] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0215.368] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0215.369] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0215.369] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0215.369] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0215.369] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\AC", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\AC", lpFilePart=0x0) returned 0x54 [0215.369] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\AC\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\AC\\", lpFilePart=0x0) returned 0x55 [0215.369] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\AC\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7f10 [0215.370] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0215.370] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0215.370] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0215.370] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0215.370] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0215.370] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0215.370] FindClose (in: hFindFile=0x5d7f10 | out: hFindFile=0x5d7f10) returned 1 [0215.370] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0215.370] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0215.370] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0215.371] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\AC\\INetCache", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\AC\\INetCache", lpFilePart=0x0) returned 0x5e [0215.371] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\AC\\INetCache\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\AC\\INetCache\\", lpFilePart=0x0) returned 0x5f [0215.371] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\AC\\INetCache\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d78b0 [0215.372] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0215.372] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0215.372] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0215.372] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0215.372] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0215.372] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0215.372] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\AC\\INetCache", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\AC\\INetCache", lpFilePart=0x0) returned 0x5e [0215.372] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\AC\\INetCache\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\AC\\INetCache\\", lpFilePart=0x0) returned 0x5f [0215.372] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\AC\\INetCache\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d78b0 [0215.372] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0215.372] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0215.372] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0215.372] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0215.372] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0215.372] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0215.372] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\AC\\INetCookies", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\AC\\INetCookies", lpFilePart=0x0) returned 0x60 [0215.372] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\AC\\INetCookies\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\AC\\INetCookies\\", lpFilePart=0x0) returned 0x61 [0215.372] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\AC\\INetCookies\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d81b0 [0215.373] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0215.373] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0215.373] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0215.373] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0215.373] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0215.373] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0215.373] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\AC\\INetCookies", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\AC\\INetCookies", lpFilePart=0x0) returned 0x60 [0215.373] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\AC\\INetCookies\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\AC\\INetCookies\\", lpFilePart=0x0) returned 0x61 [0215.373] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\AC\\INetCookies\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7af0 [0215.373] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0215.373] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0215.373] FindClose (in: hFindFile=0x5d7af0 | out: hFindFile=0x5d7af0) returned 1 [0215.373] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0215.373] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0215.373] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0215.373] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\AC\\INetHistory", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\AC\\INetHistory", lpFilePart=0x0) returned 0x60 [0215.373] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\AC\\INetHistory\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\AC\\INetHistory\\", lpFilePart=0x0) returned 0x61 [0215.373] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\AC\\INetHistory\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d79d0 [0215.374] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0215.374] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0215.374] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0215.374] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0215.374] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0215.374] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0215.374] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\AC\\INetHistory", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\AC\\INetHistory", lpFilePart=0x0) returned 0x60 [0215.374] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\AC\\INetHistory\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\AC\\INetHistory\\", lpFilePart=0x0) returned 0x61 [0215.374] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\AC\\INetHistory\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7a90 [0215.374] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0215.374] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0215.374] FindClose (in: hFindFile=0x5d7a90 | out: hFindFile=0x5d7a90) returned 1 [0215.374] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0215.374] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0215.374] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0215.374] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\AC\\Temp", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\AC\\Temp", lpFilePart=0x0) returned 0x59 [0215.374] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\AC\\Temp\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\AC\\Temp\\", lpFilePart=0x0) returned 0x5a [0215.374] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\AC\\Temp\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7df0 [0215.379] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0215.380] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0215.380] FindClose (in: hFindFile=0x5d7df0 | out: hFindFile=0x5d7df0) returned 1 [0215.380] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0215.380] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0215.380] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0215.381] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0215.381] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0215.381] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0215.382] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0215.382] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0215.382] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0215.382] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0215.382] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0215.382] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0215.383] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0215.383] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0215.383] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0215.383] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0215.383] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0215.383] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0215.383] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0215.383] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0215.383] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0215.383] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0215.383] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0215.383] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0215.383] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0215.383] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0215.383] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0215.383] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0215.384] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0215.384] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0215.399] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0215.399] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0215.399] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0215.401] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0215.401] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0215.401] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0215.402] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0215.402] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0215.402] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0215.402] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0215.404] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0215.416] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0215.416] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0215.417] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0215.417] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0215.417] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\Microsoft.WindowsPhone_10.1506.20010.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsphone_8wekyb3d8bbwe\\microsoft.windowsphone_10.1506.20010.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\Microsoft.WindowsPhone_10.1506.20010.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsphone_8wekyb3d8bbwe\\microsoft.windowsphone_10.1506.20010.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.xuy")) returned 1 [0215.420] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0215.420] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0215.420] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0215.420] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0215.420] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0215.420] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0215.436] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0215.436] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0215.437] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0215.437] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0215.437] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\Microsoft.WindowsPhone_10.1506.20010.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsphone_8wekyb3d8bbwe\\microsoft.windowsphone_10.1506.20010.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\Microsoft.WindowsPhone_10.1506.20010.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsphone_8wekyb3d8bbwe\\microsoft.windowsphone_10.1506.20010.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1.xuy")) returned 1 [0215.439] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0215.439] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0215.439] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0215.439] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0215.450] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0215.452] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb070) returned 1 [0215.452] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0215.452] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc150) returned 1 [0215.452] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0215.452] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc150) returned 1 [0215.452] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc050) returned 1 [0215.453] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbfc0) returned 1 [0215.469] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc050) returned 1 [0215.470] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8ae0) returned 1 [0215.471] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0215.471] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0215.471] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0215.472] FindClose (in: hFindFile=0x5d7eb0 | out: hFindFile=0x5d7eb0) returned 1 [0215.472] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0215.472] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0215.472] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0215.472] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0215.472] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0215.472] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0215.472] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0215.472] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0215.472] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0215.472] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0215.473] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0215.473] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0215.473] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0215.473] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0215.473] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0215.473] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0215.473] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0215.473] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0215.473] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0215.473] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0215.474] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0215.474] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0215.474] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0215.474] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0215.474] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0215.474] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0215.474] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0215.474] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0215.559] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0215.559] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0215.560] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0215.560] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0215.560] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsphone_8wekyb3d8bbwe\\settings\\roaming.lock"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\Settings\\roaming.lock.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsphone_8wekyb3d8bbwe\\settings\\roaming.lock.xuy")) returned 1 [0215.562] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0215.563] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0215.563] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0215.563] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0215.563] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0215.563] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0215.640] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0215.641] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0215.641] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0215.641] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0215.641] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsphone_8wekyb3d8bbwe\\settings\\settings.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\Settings\\settings.dat.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsphone_8wekyb3d8bbwe\\settings\\settings.dat.xuy")) returned 1 [0215.643] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0215.643] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0215.644] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0215.644] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0215.644] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0215.644] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0215.644] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0215.644] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0215.644] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0215.644] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0215.644] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0215.644] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0215.644] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0215.644] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0215.645] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0215.645] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0215.645] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0215.645] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0215.645] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0215.645] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0215.645] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0215.645] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0215.645] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0215.645] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0215.645] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0215.661] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0215.661] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0215.661] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0215.662] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0215.662] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0215.662] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0215.662] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0215.662] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0215.662] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0215.663] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0215.663] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0215.663] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0215.664] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0215.664] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0215.664] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0215.664] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0215.664] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0215.665] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0215.665] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0215.665] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0215.665] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0215.665] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0215.665] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0215.665] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0215.665] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0215.666] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0215.666] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0215.666] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0215.666] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0215.666] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0215.676] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0215.676] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0215.676] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0215.679] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0215.679] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0215.679] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0215.679] FindClose (in: hFindFile=0x5d7a90 | out: hFindFile=0x5d7a90) returned 1 [0215.680] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0215.680] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0215.680] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0215.680] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\AC", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\AC", lpFilePart=0x0) returned 0x5c [0215.680] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\AC\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\AC\\", lpFilePart=0x0) returned 0x5d [0215.680] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\AC\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7c70 [0215.681] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0215.681] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0215.681] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0215.681] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0215.681] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0215.681] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0215.681] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0215.682] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0215.682] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0215.682] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0215.682] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\AC\\INetCache", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\AC\\INetCache", lpFilePart=0x0) returned 0x66 [0215.682] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\AC\\INetCache\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\AC\\INetCache\\", lpFilePart=0x0) returned 0x67 [0215.682] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\AC\\INetCache\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7370 [0215.688] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0215.688] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0215.688] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0215.688] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\AC\\INetCache", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\AC\\INetCache", lpFilePart=0x0) returned 0x66 [0215.689] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\AC\\INetCache\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\AC\\INetCache\\", lpFilePart=0x0) returned 0x67 [0215.689] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\AC\\INetCache\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d8090 [0215.689] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0215.689] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0215.689] FindClose (in: hFindFile=0x5d8090 | out: hFindFile=0x5d8090) returned 1 [0215.689] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\AC\\INetCookies", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\AC\\INetCookies", lpFilePart=0x0) returned 0x68 [0215.689] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\AC\\INetCookies\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\AC\\INetCookies\\", lpFilePart=0x0) returned 0x69 [0215.689] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\AC\\INetCookies\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7370 [0215.689] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0215.690] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0215.690] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0215.690] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\AC\\INetCookies", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\AC\\INetCookies", lpFilePart=0x0) returned 0x68 [0215.690] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\AC\\INetCookies\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\AC\\INetCookies\\", lpFilePart=0x0) returned 0x69 [0215.690] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\AC\\INetCookies\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7d90 [0215.690] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0215.690] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0215.690] FindClose (in: hFindFile=0x5d7d90 | out: hFindFile=0x5d7d90) returned 1 [0215.690] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\AC\\INetHistory", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\AC\\INetHistory", lpFilePart=0x0) returned 0x68 [0215.691] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\AC\\INetHistory\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\AC\\INetHistory\\", lpFilePart=0x0) returned 0x69 [0215.691] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\AC\\INetHistory\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7e50 [0215.691] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0215.691] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0215.691] FindClose (in: hFindFile=0x5d7e50 | out: hFindFile=0x5d7e50) returned 1 [0215.691] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\AC\\INetHistory", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\AC\\INetHistory", lpFilePart=0x0) returned 0x68 [0215.691] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\AC\\INetHistory\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\AC\\INetHistory\\", lpFilePart=0x0) returned 0x69 [0215.691] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\AC\\INetHistory\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7eb0 [0215.691] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0215.692] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0215.692] FindClose (in: hFindFile=0x5d7eb0 | out: hFindFile=0x5d7eb0) returned 1 [0215.692] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\AC\\Temp", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\AC\\Temp", lpFilePart=0x0) returned 0x61 [0215.692] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\AC\\Temp\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\AC\\Temp\\", lpFilePart=0x0) returned 0x62 [0215.692] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\AC\\Temp\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7550 [0215.692] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0215.692] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0215.692] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0215.692] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\AC\\Temp", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\AC\\Temp", lpFilePart=0x0) returned 0x61 [0215.693] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\AC\\Temp\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\AC\\Temp\\", lpFilePart=0x0) returned 0x62 [0215.693] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\AC\\Temp\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7550 [0215.693] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0215.693] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0215.693] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0215.693] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\AppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\AppData", lpFilePart=0x0) returned 0x61 [0215.693] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\AppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\AppData\\", lpFilePart=0x0) returned 0x62 [0215.693] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\AppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7c70 [0215.695] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0215.695] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0215.695] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0215.695] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\AppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\AppData", lpFilePart=0x0) returned 0x61 [0215.695] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\AppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\AppData\\", lpFilePart=0x0) returned 0x62 [0215.696] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\AppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7670 [0215.696] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0215.696] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0215.696] FindClose (in: hFindFile=0x5d7670 | out: hFindFile=0x5d7670) returned 1 [0215.696] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\LocalCache", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\LocalCache", lpFilePart=0x0) returned 0x64 [0215.696] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\LocalCache\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\LocalCache\\", lpFilePart=0x0) returned 0x65 [0215.696] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\LocalCache\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7fd0 [0215.696] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0215.696] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0215.697] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0215.697] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\LocalCache", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\LocalCache", lpFilePart=0x0) returned 0x64 [0215.697] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\LocalCache\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\LocalCache\\", lpFilePart=0x0) returned 0x65 [0215.697] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\LocalCache\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d81b0 [0215.697] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0215.697] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0215.697] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0215.697] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\LocalState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\LocalState", lpFilePart=0x0) returned 0x64 [0215.697] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\LocalState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\LocalState\\", lpFilePart=0x0) returned 0x65 [0215.697] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\LocalState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7df0 [0215.698] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0215.698] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0215.698] FindClose (in: hFindFile=0x5d7df0 | out: hFindFile=0x5d7df0) returned 1 [0215.698] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\LocalState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\LocalState", lpFilePart=0x0) returned 0x64 [0215.698] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\LocalState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\LocalState\\", lpFilePart=0x0) returned 0x65 [0215.698] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\LocalState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7e50 [0215.698] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0215.699] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0215.699] FindClose (in: hFindFile=0x5d7e50 | out: hFindFile=0x5d7e50) returned 1 [0215.699] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\Microsoft.WindowsSoundRecorder_10.1506.15100.0_x64__8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\Microsoft.WindowsSoundRecorder_10.1506.15100.0_x64__8wekyb3d8bbwe", lpFilePart=0x0) returned 0x9b [0215.699] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\Microsoft.WindowsSoundRecorder_10.1506.15100.0_x64__8wekyb3d8bbwe\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\Microsoft.WindowsSoundRecorder_10.1506.15100.0_x64__8wekyb3d8bbwe\\", lpFilePart=0x0) returned 0x9c [0215.700] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\Microsoft.WindowsSoundRecorder_10.1506.15100.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d81b0 [0215.700] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0215.700] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0215.700] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0215.701] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0215.701] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\Microsoft.WindowsSoundRecorder_10.1506.15100.0_x64__8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\Microsoft.WindowsSoundRecorder_10.1506.15100.0_x64__8wekyb3d8bbwe", lpFilePart=0x0) returned 0x9b [0215.701] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\Microsoft.WindowsSoundRecorder_10.1506.15100.0_x64__8wekyb3d8bbwe\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\Microsoft.WindowsSoundRecorder_10.1506.15100.0_x64__8wekyb3d8bbwe\\", lpFilePart=0x0) returned 0x9c [0215.701] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\Microsoft.WindowsSoundRecorder_10.1506.15100.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7610 [0215.701] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0215.701] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0215.701] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0215.701] FindClose (in: hFindFile=0x5d7610 | out: hFindFile=0x5d7610) returned 1 [0215.701] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\Microsoft.WindowsSoundRecorder_10.1506.15100.0_x64__8wekyb3d8bbwe\\ActivationStore", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\Microsoft.WindowsSoundRecorder_10.1506.15100.0_x64__8wekyb3d8bbwe\\ActivationStore", lpFilePart=0x0) returned 0xab [0215.702] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\Microsoft.WindowsSoundRecorder_10.1506.15100.0_x64__8wekyb3d8bbwe\\ActivationStore\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\Microsoft.WindowsSoundRecorder_10.1506.15100.0_x64__8wekyb3d8bbwe\\ActivationStore\\", lpFilePart=0x0) returned 0xac [0215.702] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\Microsoft.WindowsSoundRecorder_10.1506.15100.0_x64__8wekyb3d8bbwe\\ActivationStore\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d78b0 [0215.718] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0215.718] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0215.718] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0215.718] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0215.718] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0215.718] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0215.719] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\Microsoft.WindowsSoundRecorder_10.1506.15100.0_x64__8wekyb3d8bbwe\\ActivationStore", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\Microsoft.WindowsSoundRecorder_10.1506.15100.0_x64__8wekyb3d8bbwe\\ActivationStore", lpFilePart=0x0) returned 0xab [0215.719] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\Microsoft.WindowsSoundRecorder_10.1506.15100.0_x64__8wekyb3d8bbwe\\ActivationStore\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\Microsoft.WindowsSoundRecorder_10.1506.15100.0_x64__8wekyb3d8bbwe\\ActivationStore\\", lpFilePart=0x0) returned 0xac [0215.719] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\Microsoft.WindowsSoundRecorder_10.1506.15100.0_x64__8wekyb3d8bbwe\\ActivationStore\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7d90 [0215.720] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0215.720] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0215.721] FindClose (in: hFindFile=0x5d7d90 | out: hFindFile=0x5d7d90) returned 1 [0215.722] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\Microsoft.WindowsSoundRecorder_10.1506.15100.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\Microsoft.WindowsSoundRecorder_10.1506.15100.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xbf [0215.722] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\Microsoft.WindowsSoundRecorder_10.1506.15100.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowssoundrecorder_8wekyb3d8bbwe\\microsoft.windowssoundrecorder_10.1506.15100.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), fInfoLevelId=0x0, lpFileInformation=0x21a3158 | out: lpFileInformation=0x21a3158*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5114ca1, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xf5435f06, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0xf5435f06, ftLastWriteTime.dwHighDateTime=0x1d2d028, nFileSizeHigh=0x0, nFileSizeLow=0x8000)) returned 1 [0215.723] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\Microsoft.WindowsSoundRecorder_10.1506.15100.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\Microsoft.WindowsSoundRecorder_10.1506.15100.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xbf [0215.723] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\Microsoft.WindowsSoundRecorder_10.1506.15100.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowssoundrecorder_8wekyb3d8bbwe\\microsoft.windowssoundrecorder_10.1506.15100.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), fInfoLevelId=0x0, lpFileInformation=0x21a3398 | out: lpFileInformation=0x21a3398*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5114ca1, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xf5435f06, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0xf5435f06, ftLastWriteTime.dwHighDateTime=0x1d2d028, nFileSizeHigh=0x0, nFileSizeLow=0x8000)) returned 1 [0215.723] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\Microsoft.WindowsSoundRecorder_10.1506.15100.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\Microsoft.WindowsSoundRecorder_10.1506.15100.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xbf [0215.723] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\Microsoft.WindowsSoundRecorder_10.1506.15100.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowssoundrecorder_8wekyb3d8bbwe\\microsoft.windowssoundrecorder_10.1506.15100.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0215.724] GetFileType (hFile=0x444) returned 0x1 [0215.724] GetFileType (hFile=0x444) returned 0x1 [0215.724] ReadFile (in: hFile=0x444, lpBuffer=0x21a5948, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x21a5948*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0215.770] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\Microsoft.WindowsSoundRecorder_10.1506.15100.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowssoundrecorder_8wekyb3d8bbwe\\microsoft.windowssoundrecorder_10.1506.15100.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\Microsoft.WindowsSoundRecorder_10.1506.15100.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowssoundrecorder_8wekyb3d8bbwe\\microsoft.windowssoundrecorder_10.1506.15100.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.xuy")) returned 1 [0215.771] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\Microsoft.WindowsSoundRecorder_10.1506.15100.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\Microsoft.WindowsSoundRecorder_10.1506.15100.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xc4 [0215.785] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\Microsoft.WindowsSoundRecorder_10.1506.15100.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowssoundrecorder_8wekyb3d8bbwe\\microsoft.windowssoundrecorder_10.1506.15100.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\Microsoft.WindowsSoundRecorder_10.1506.15100.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowssoundrecorder_8wekyb3d8bbwe\\microsoft.windowssoundrecorder_10.1506.15100.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1.xuy")) returned 1 [0215.787] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\Microsoft.WindowsSoundRecorder_10.1506.15100.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\Microsoft.WindowsSoundRecorder_10.1506.15100.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xc4 [0215.801] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\Microsoft.WindowsSoundRecorder_10.1506.15100.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbcf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\Microsoft.WindowsSoundRecorder_10.1506.15100.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xc4 [0215.837] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\Microsoft.WindowsSoundRecorder_10.1506.15100.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\Microsoft.WindowsSoundRecorder_10.1506.15100.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xc4 [0215.837] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc050) returned 1 [0215.837] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\Microsoft.WindowsSoundRecorder_10.1506.15100.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowssoundrecorder_8wekyb3d8bbwe\\microsoft.windowssoundrecorder_10.1506.15100.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0215.839] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8ae0) returned 1 [0215.845] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0215.845] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\RoamingState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\RoamingState", lpFilePart=0x0) returned 0x66 [0215.845] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\RoamingState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\RoamingState\\", lpFilePart=0x0) returned 0x67 [0215.846] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\RoamingState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d81b0 [0215.846] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0215.846] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0215.846] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0215.846] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0215.846] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0215.846] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0215.846] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\RoamingState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\RoamingState", lpFilePart=0x0) returned 0x66 [0215.846] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\RoamingState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\RoamingState\\", lpFilePart=0x0) returned 0x67 [0215.846] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\RoamingState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d78b0 [0215.847] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0215.847] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0215.847] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0215.847] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0215.847] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0215.847] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0215.847] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\Settings", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\Settings", lpFilePart=0x0) returned 0x62 [0215.847] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\Settings\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\Settings\\", lpFilePart=0x0) returned 0x63 [0215.847] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\Settings\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7fd0 [0215.848] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0215.848] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0215.848] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0215.848] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0215.848] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0215.848] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0215.848] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0215.848] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0215.848] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\Settings", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\Settings", lpFilePart=0x0) returned 0x62 [0215.848] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\Settings\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\Settings\\", lpFilePart=0x0) returned 0x63 [0215.849] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\Settings\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d81b0 [0215.849] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0215.849] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0215.849] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0215.849] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0215.849] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0215.849] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0215.849] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0215.849] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\Settings\\roaming.lock", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\Settings\\roaming.lock", lpFilePart=0x0) returned 0x6f [0215.849] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0215.849] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowssoundrecorder_8wekyb3d8bbwe\\settings\\roaming.lock"), fInfoLevelId=0x0, lpFileInformation=0x21948e8 | out: lpFileInformation=0x21948e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4823f5f, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xf4823f5f, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0xf4823f5f, ftLastWriteTime.dwHighDateTime=0x1d2d028, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0215.850] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0215.850] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\Settings\\roaming.lock", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\Settings\\roaming.lock", lpFilePart=0x0) returned 0x6f [0215.850] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0215.850] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowssoundrecorder_8wekyb3d8bbwe\\settings\\roaming.lock"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0215.850] GetFileType (hFile=0x444) returned 0x1 [0215.850] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0215.850] GetFileType (hFile=0x444) returned 0x1 [0215.850] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0x0 [0215.850] CloseHandle (hObject=0x444) returned 1 [0215.887] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\Settings\\roaming.lock", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\Settings\\roaming.lock", lpFilePart=0x0) returned 0x6f [0215.888] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0215.888] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowssoundrecorder_8wekyb3d8bbwe\\settings\\roaming.lock"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0215.889] GetFileType (hFile=0x444) returned 0x1 [0215.889] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0215.889] GetFileType (hFile=0x444) returned 0x1 [0215.889] WriteFile (in: hFile=0x444, lpBuffer=0x220ad68*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x3be628, lpOverlapped=0x0 | out: lpBuffer=0x220ad68*, lpNumberOfBytesWritten=0x3be628*=0x10, lpOverlapped=0x0) returned 1 [0215.890] CloseHandle (hObject=0x444) returned 1 [0215.890] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\Settings\\roaming.lock", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\Settings\\roaming.lock", lpFilePart=0x0) returned 0x6f [0215.890] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\Settings\\roaming.lock.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\Settings\\roaming.lock.xuy", lpFilePart=0x0) returned 0x73 [0215.890] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0215.890] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowssoundrecorder_8wekyb3d8bbwe\\settings\\roaming.lock"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4823f5f, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xf4823f5f, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x6c87febe, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0215.890] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0215.890] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowssoundrecorder_8wekyb3d8bbwe\\settings\\roaming.lock"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\Settings\\roaming.lock.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowssoundrecorder_8wekyb3d8bbwe\\settings\\roaming.lock.xuy")) returned 1 [0215.891] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\Settings\\settings.dat", lpFilePart=0x0) returned 0x6f [0215.891] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0215.891] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowssoundrecorder_8wekyb3d8bbwe\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x220c0c0 | out: lpFileInformation=0x220c0c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf473f0fc, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xf473f0fc, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x8d6f5917, ftLastWriteTime.dwHighDateTime=0x1d0baff, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0215.891] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0215.891] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\Settings\\settings.dat", lpFilePart=0x0) returned 0x6f [0215.891] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0215.891] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowssoundrecorder_8wekyb3d8bbwe\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x220c258 | out: lpFileInformation=0x220c258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf473f0fc, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xf473f0fc, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x8d6f5917, ftLastWriteTime.dwHighDateTime=0x1d0baff, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0215.892] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0215.892] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\Settings\\settings.dat", lpFilePart=0x0) returned 0x6f [0215.892] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0215.892] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowssoundrecorder_8wekyb3d8bbwe\\settings\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0215.892] GetFileType (hFile=0x444) returned 0x1 [0215.892] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0215.892] GetFileType (hFile=0x444) returned 0x1 [0215.892] ReadFile (in: hFile=0x444, lpBuffer=0x220e6b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x220e6b8*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0215.910] CloseHandle (hObject=0x444) returned 1 [0215.910] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\Settings\\settings.dat", lpFilePart=0x0) returned 0x6f [0215.910] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0215.910] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowssoundrecorder_8wekyb3d8bbwe\\settings\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0215.910] GetFileType (hFile=0x444) returned 0x1 [0215.910] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0215.910] GetFileType (hFile=0x444) returned 0x1 [0215.911] WriteFile (in: hFile=0x444, lpBuffer=0x220c3d0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x220c3d0*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0215.911] CloseHandle (hObject=0x444) returned 1 [0215.911] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\Settings\\settings.dat", lpFilePart=0x0) returned 0x6f [0215.911] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\Settings\\settings.dat.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\Settings\\settings.dat.xuy", lpFilePart=0x0) returned 0x73 [0215.911] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0215.911] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowssoundrecorder_8wekyb3d8bbwe\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf473f0fc, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xf473f0fc, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x6c8a4016, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0215.911] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0215.911] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowssoundrecorder_8wekyb3d8bbwe\\settings\\settings.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\Settings\\settings.dat.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowssoundrecorder_8wekyb3d8bbwe\\settings\\settings.dat.xuy")) returned 1 [0215.912] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0215.912] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\SystemAppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\SystemAppData", lpFilePart=0x0) returned 0x67 [0215.912] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\SystemAppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\SystemAppData\\", lpFilePart=0x0) returned 0x68 [0215.913] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\SystemAppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7af0 [0215.913] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0215.913] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0215.913] FindClose (in: hFindFile=0x5d7af0 | out: hFindFile=0x5d7af0) returned 1 [0215.913] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0215.913] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0215.913] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0215.913] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\SystemAppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\SystemAppData", lpFilePart=0x0) returned 0x67 [0215.913] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\SystemAppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\SystemAppData\\", lpFilePart=0x0) returned 0x68 [0215.913] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\SystemAppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d81b0 [0215.913] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0215.913] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0215.914] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0215.914] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0215.914] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0215.914] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0215.914] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\TempState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\TempState", lpFilePart=0x0) returned 0x63 [0215.914] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\TempState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\TempState\\", lpFilePart=0x0) returned 0x64 [0215.914] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\TempState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7370 [0215.914] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0215.914] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0215.914] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0215.914] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0215.914] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0215.914] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0215.914] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\TempState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\TempState", lpFilePart=0x0) returned 0x63 [0215.914] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\TempState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\TempState\\", lpFilePart=0x0) returned 0x64 [0215.914] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\TempState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7370 [0215.915] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0215.915] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0215.915] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0215.915] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0215.915] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0215.915] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0215.915] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe", lpFilePart=0x0) returned 0x51 [0215.915] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\", lpFilePart=0x0) returned 0x52 [0215.915] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d7610 [0215.915] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0215.915] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0215.916] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0215.916] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0215.916] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0215.916] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0215.916] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0215.916] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0215.916] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0215.916] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0215.917] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0215.917] FindClose (in: hFindFile=0x5d7610 | out: hFindFile=0x5d7610) returned 1 [0215.917] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0215.917] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0215.917] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0215.917] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe", lpFilePart=0x0) returned 0x51 [0215.917] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\", lpFilePart=0x0) returned 0x52 [0215.917] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d78b0 [0215.917] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0215.917] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0215.917] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0215.917] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0215.917] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0215.918] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0215.918] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0215.918] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0215.918] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0215.918] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0215.919] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0215.919] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0215.919] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0215.919] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0215.919] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0215.919] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC", lpFilePart=0x0) returned 0x54 [0215.919] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\", lpFilePart=0x0) returned 0x55 [0215.919] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d79d0 [0215.920] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0215.920] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0215.920] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0215.920] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0215.920] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0215.920] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0215.920] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0215.920] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0215.921] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0215.921] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0215.921] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0215.921] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC", lpFilePart=0x0) returned 0x54 [0215.921] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\", lpFilePart=0x0) returned 0x55 [0215.921] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d81b0 [0215.922] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0215.922] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0215.922] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0215.922] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0215.922] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0215.922] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0215.922] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0215.922] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0215.923] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0215.923] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0215.923] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0215.923] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\INetCache", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\INetCache", lpFilePart=0x0) returned 0x5e [0215.923] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\INetCache\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\INetCache\\", lpFilePart=0x0) returned 0x5f [0215.923] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\INetCache\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7a90 [0215.924] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0215.924] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0215.924] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0215.924] FindClose (in: hFindFile=0x5d7a90 | out: hFindFile=0x5d7a90) returned 1 [0215.925] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0215.925] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0215.925] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0215.925] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\INetCache", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\INetCache", lpFilePart=0x0) returned 0x5e [0215.925] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\INetCache\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\INetCache\\", lpFilePart=0x0) returned 0x5f [0215.925] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\INetCache\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d79d0 [0215.925] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0215.925] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0215.925] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0215.925] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0215.925] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0215.925] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0215.925] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\INetCache\\container.dat", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\INetCache\\container.dat", lpFilePart=0x0) returned 0x6c [0215.925] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0215.925] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\INetCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\ac\\inetcache\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x2299160 | out: lpFileInformation=0x2299160*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x32bbad17, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x32bbad17, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x32bbad17, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0215.926] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0215.926] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\INetCache\\container.dat", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\INetCache\\container.dat", lpFilePart=0x0) returned 0x6c [0215.926] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0215.926] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\INetCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\ac\\inetcache\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0215.926] GetFileType (hFile=0x444) returned 0x1 [0215.926] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0215.926] GetFileType (hFile=0x444) returned 0x1 [0215.926] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x0 [0215.926] CloseHandle (hObject=0x444) returned 1 [0215.939] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\INetCache\\container.dat", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\INetCache\\container.dat", lpFilePart=0x0) returned 0x6c [0215.939] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0215.939] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\INetCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\ac\\inetcache\\container.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0215.940] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb070) returned 1 [0215.940] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\INetCache\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbcf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\INetCache\\container.dat", lpFilePart=0x0) returned 0x6c [0215.940] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0215.940] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\INetCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\ac\\inetcache\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x3bc270 | out: lpFileInformation=0x3bc270*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x32bbad17, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x32bbad17, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x32bbad17, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0215.941] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc150) returned 1 [0215.941] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\INetCache\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbd10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\INetCache\\container.dat", lpFilePart=0x0) returned 0x6c [0215.941] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0215.941] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\INetCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\ac\\inetcache\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x230feb8 | out: lpFileInformation=0x230feb8*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x32bbad17, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x32bbad17, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x32bbad17, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0215.941] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc150) returned 1 [0215.941] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\INetCache\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\INetCache\\container.dat", lpFilePart=0x0) returned 0x6c [0215.941] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc050) returned 1 [0215.941] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\INetCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\ac\\inetcache\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0215.941] GetFileType (hFile=0x444) returned 0x1 [0215.941] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbfc0) returned 1 [0215.941] GetFileType (hFile=0x444) returned 0x1 [0215.941] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc1e8 | out: lpFileSizeHigh=0x3bc1e8*=0x0) returned 0x0 [0215.941] CloseHandle (hObject=0x444) returned 1 [0215.953] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\INetCache\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\INetCache\\container.dat", lpFilePart=0x0) returned 0x6c [0215.953] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc050) returned 1 [0215.953] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\INetCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\ac\\inetcache\\container.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0215.954] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8ae0) returned 1 [0215.955] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0215.955] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\INetCookies", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\INetCookies", lpFilePart=0x0) returned 0x60 [0215.955] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\INetCookies\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\INetCookies\\", lpFilePart=0x0) returned 0x61 [0215.955] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\INetCookies\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7c70 [0215.955] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0215.955] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0215.955] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0215.955] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0215.955] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0215.955] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0215.955] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0215.955] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\INetCookies", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\INetCookies", lpFilePart=0x0) returned 0x60 [0215.955] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\INetCookies\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\INetCookies\\", lpFilePart=0x0) returned 0x61 [0215.955] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\INetCookies\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7cd0 [0215.956] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0215.956] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0215.956] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0215.956] FindClose (in: hFindFile=0x5d7cd0 | out: hFindFile=0x5d7cd0) returned 1 [0215.956] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0215.956] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0215.956] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\INetCookies\\container.dat", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\INetCookies\\container.dat", lpFilePart=0x0) returned 0x6e [0215.956] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0215.956] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\INetCookies\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\ac\\inetcookies\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x23890e0 | out: lpFileInformation=0x23890e0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x32be0f7c, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x32be0f7c, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x32be0f7c, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0215.956] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0215.956] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\INetCookies\\container.dat", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\INetCookies\\container.dat", lpFilePart=0x0) returned 0x6e [0215.956] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0215.956] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\INetCookies\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\ac\\inetcookies\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0215.956] GetFileType (hFile=0x444) returned 0x1 [0215.956] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0215.956] GetFileType (hFile=0x444) returned 0x1 [0215.957] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x0 [0215.957] CloseHandle (hObject=0x444) returned 1 [0216.002] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\INetCookies\\container.dat", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\INetCookies\\container.dat", lpFilePart=0x0) returned 0x6e [0216.002] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0216.002] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\INetCookies\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\ac\\inetcookies\\container.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0216.004] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb070) returned 1 [0216.004] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\INetCookies\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbcf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\INetCookies\\container.dat", lpFilePart=0x0) returned 0x6e [0216.004] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0216.004] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\INetCookies\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\ac\\inetcookies\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x3bc270 | out: lpFileInformation=0x3bc270*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x32be0f7c, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x32be0f7c, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x32be0f7c, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0216.004] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc150) returned 1 [0216.004] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\INetCookies\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbd10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\INetCookies\\container.dat", lpFilePart=0x0) returned 0x6e [0216.004] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0216.004] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\INetCookies\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\ac\\inetcookies\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x21ffcd8 | out: lpFileInformation=0x21ffcd8*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x32be0f7c, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x32be0f7c, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x32be0f7c, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0216.004] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc150) returned 1 [0216.004] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\INetCookies\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\INetCookies\\container.dat", lpFilePart=0x0) returned 0x6e [0216.004] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc050) returned 1 [0216.004] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\INetCookies\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\ac\\inetcookies\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0216.005] GetFileType (hFile=0x444) returned 0x1 [0216.005] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbfc0) returned 1 [0216.005] GetFileType (hFile=0x444) returned 0x1 [0216.005] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc1e8 | out: lpFileSizeHigh=0x3bc1e8*=0x0) returned 0x0 [0216.005] CloseHandle (hObject=0x444) returned 1 [0216.015] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\INetCookies\\container.dat", nBufferLength=0x105, lpBuffer=0x3bbb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\INetCookies\\container.dat", lpFilePart=0x0) returned 0x6e [0216.015] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc050) returned 1 [0216.015] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\INetCookies\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\ac\\inetcookies\\container.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0216.018] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8ae0) returned 1 [0216.018] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0216.018] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\INetHistory", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\INetHistory", lpFilePart=0x0) returned 0x60 [0216.018] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\INetHistory\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\INetHistory\\", lpFilePart=0x0) returned 0x61 [0216.018] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\INetHistory\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7550 [0216.019] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0216.019] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0216.019] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0216.019] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0216.019] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0216.019] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0216.019] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\INetHistory", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\INetHistory", lpFilePart=0x0) returned 0x60 [0216.019] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\INetHistory\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\INetHistory\\", lpFilePart=0x0) returned 0x61 [0216.019] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\INetHistory\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7c70 [0216.020] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0216.020] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0216.020] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0216.020] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0216.020] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0216.020] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0216.020] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft", lpFilePart=0x0) returned 0x5e [0216.020] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\", lpFilePart=0x0) returned 0x5f [0216.020] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d8090 [0216.023] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0216.023] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0216.023] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0216.023] FindClose (in: hFindFile=0x5d8090 | out: hFindFile=0x5d8090) returned 1 [0216.023] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0216.023] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0216.023] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0216.023] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft", lpFilePart=0x0) returned 0x5e [0216.023] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\", lpFilePart=0x0) returned 0x5f [0216.023] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7370 [0216.023] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0216.024] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0216.024] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0216.024] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0216.024] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0216.024] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0216.024] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0216.024] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache", lpFilePart=0x0) returned 0x6f [0216.024] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\", lpFilePart=0x0) returned 0x70 [0216.024] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d7550 [0216.031] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0216.031] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0216.031] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0216.031] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0216.031] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0216.031] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0216.031] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0216.031] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0216.031] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache", nBufferLength=0x105, lpBuffer=0x3be210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache", lpFilePart=0x0) returned 0x6f [0216.032] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\", nBufferLength=0x105, lpBuffer=0x3be1b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\", lpFilePart=0x0) returned 0x70 [0216.032] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\*", lpFindFileData=0x3be3c0 | out: lpFindFileData=0x3be3c0) returned 0x5d7370 [0216.032] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0216.032] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0216.032] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 1 [0216.032] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be410 | out: lpFindFileData=0x3be410) returned 0 [0216.032] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0216.032] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0216.032] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0216.032] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0216.032] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content", lpFilePart=0x0) returned 0x77 [0216.032] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\", lpFilePart=0x0) returned 0x78 [0216.032] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d7370 [0216.035] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0216.035] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0216.035] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0216.035] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0216.035] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0216.035] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0216.035] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0216.035] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0216.036] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0216.036] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0216.036] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0216.036] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content", lpFilePart=0x0) returned 0x77 [0216.036] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\", lpFilePart=0x0) returned 0x78 [0216.036] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d79d0 [0216.037] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0216.038] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0216.038] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0216.038] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0216.038] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0216.038] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0216.038] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0216.039] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0216.039] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0216.039] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0216.039] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", lpFilePart=0x0) returned 0xb9 [0216.039] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0216.039] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\content\\40e450f7ce13419a2ccc2a5445035a0a_06f02b1f13ab4b11b8fc669bde565af1"), fInfoLevelId=0x0, lpFileInformation=0x2282778 | out: lpFileInformation=0x2282778*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x32e1d430, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x32e1d430, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x32eb5d75, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0xb68)) returned 1 [0216.046] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0216.046] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", lpFilePart=0x0) returned 0xb9 [0216.046] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0216.046] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\content\\40e450f7ce13419a2ccc2a5445035a0a_06f02b1f13ab4b11b8fc669bde565af1"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0216.046] GetFileType (hFile=0x444) returned 0x1 [0216.046] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0216.046] GetFileType (hFile=0x444) returned 0x1 [0216.046] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0xb68 [0216.046] ReadFile (in: hFile=0x444, lpBuffer=0x2283828, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x2283828*, lpNumberOfBytesRead=0x3be5c8*=0xb68, lpOverlapped=0x0) returned 1 [0216.061] CloseHandle (hObject=0x444) returned 1 [0216.071] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", lpFilePart=0x0) returned 0xb9 [0216.071] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0216.071] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\content\\40e450f7ce13419a2ccc2a5445035a0a_06f02b1f13ab4b11b8fc669bde565af1"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0216.073] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3baf90) returned 1 [0216.073] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", nBufferLength=0x105, lpBuffer=0x3bbc10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", lpFilePart=0x0) returned 0xb9 [0216.073] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0b0) returned 1 [0216.073] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\content\\40e450f7ce13419a2ccc2a5445035a0a_06f02b1f13ab4b11b8fc669bde565af1"), fInfoLevelId=0x0, lpFileInformation=0x3bc190 | out: lpFileInformation=0x3bc190*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x32e1d430, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x32e1d430, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x32eb5d75, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0xb68)) returned 1 [0216.073] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc070) returned 1 [0216.073] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", nBufferLength=0x105, lpBuffer=0x3bbc30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", lpFilePart=0x0) returned 0xb9 [0216.073] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0b0) returned 1 [0216.073] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\content\\40e450f7ce13419a2ccc2a5445035a0a_06f02b1f13ab4b11b8fc669bde565af1"), fInfoLevelId=0x0, lpFileInformation=0x22fec88 | out: lpFileInformation=0x22fec88*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x32e1d430, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x32e1d430, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x32eb5d75, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0xb68)) returned 1 [0216.073] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc070) returned 1 [0216.074] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", nBufferLength=0x105, lpBuffer=0x3bba90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", lpFilePart=0x0) returned 0xb9 [0216.074] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf70) returned 1 [0216.074] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\content\\40e450f7ce13419a2ccc2a5445035a0a_06f02b1f13ab4b11b8fc669bde565af1"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0216.074] GetFileType (hFile=0x444) returned 0x1 [0216.074] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbee0) returned 1 [0216.074] GetFileType (hFile=0x444) returned 0x1 [0216.074] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc108 | out: lpFileSizeHigh=0x3bc108*=0x0) returned 0xb68 [0216.074] ReadFile (in: hFile=0x444, lpBuffer=0x22ffd38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bc038, lpOverlapped=0x0 | out: lpBuffer=0x22ffd38*, lpNumberOfBytesRead=0x3bc038*=0xb68, lpOverlapped=0x0) returned 1 [0216.074] CloseHandle (hObject=0x444) returned 1 [0216.084] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", nBufferLength=0x105, lpBuffer=0x3bba90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", lpFilePart=0x0) returned 0xb9 [0216.084] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf70) returned 1 [0216.084] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\content\\40e450f7ce13419a2ccc2a5445035a0a_06f02b1f13ab4b11b8fc669bde565af1"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0216.086] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8a00) returned 1 [0216.086] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", lpFilePart=0x0) returned 0x98 [0216.086] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0216.087] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\content\\57c8edb95df3f0ad4ee2dc2b8cfd4157"), fInfoLevelId=0x0, lpFileInformation=0x237b008 | out: lpFileInformation=0x237b008*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x33059644, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x33059644, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x33059644, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0216.106] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0216.106] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", lpFilePart=0x0) returned 0x98 [0216.106] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0216.106] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\content\\57c8edb95df3f0ad4ee2dc2b8cfd4157"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0216.106] GetFileType (hFile=0x444) returned 0x1 [0216.106] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0216.106] GetFileType (hFile=0x444) returned 0x1 [0216.107] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x0 [0216.107] CloseHandle (hObject=0x444) returned 1 [0216.208] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", lpFilePart=0x0) returned 0x98 [0216.208] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0216.208] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\content\\57c8edb95df3f0ad4ee2dc2b8cfd4157"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0216.210] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3baf90) returned 1 [0216.210] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", nBufferLength=0x105, lpBuffer=0x3bbc10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", lpFilePart=0x0) returned 0x98 [0216.210] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0b0) returned 1 [0216.210] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\content\\57c8edb95df3f0ad4ee2dc2b8cfd4157"), fInfoLevelId=0x0, lpFileInformation=0x3bc190 | out: lpFileInformation=0x3bc190*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x33059644, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x33059644, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x33059644, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0216.211] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc070) returned 1 [0216.211] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", nBufferLength=0x105, lpBuffer=0x3bbc30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", lpFilePart=0x0) returned 0x98 [0216.211] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0b0) returned 1 [0216.212] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\content\\57c8edb95df3f0ad4ee2dc2b8cfd4157"), fInfoLevelId=0x0, lpFileInformation=0x21f27c8 | out: lpFileInformation=0x21f27c8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x33059644, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x33059644, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x33059644, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0216.212] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc070) returned 1 [0216.212] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", nBufferLength=0x105, lpBuffer=0x3bba90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", lpFilePart=0x0) returned 0x98 [0216.212] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf70) returned 1 [0216.212] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\content\\57c8edb95df3f0ad4ee2dc2b8cfd4157"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0216.212] GetFileType (hFile=0x444) returned 0x1 [0216.212] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbee0) returned 1 [0216.212] GetFileType (hFile=0x444) returned 0x1 [0216.212] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc108 | out: lpFileSizeHigh=0x3bc108*=0x0) returned 0x0 [0216.212] CloseHandle (hObject=0x444) returned 1 [0216.231] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", nBufferLength=0x105, lpBuffer=0x3bba90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", lpFilePart=0x0) returned 0x98 [0216.231] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf70) returned 1 [0216.231] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\content\\57c8edb95df3f0ad4ee2dc2b8cfd4157"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0216.232] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8a00) returned 1 [0216.233] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506", lpFilePart=0x0) returned 0x98 [0216.233] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0216.233] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\content\\77ec63bda74bd0d0e0426dc8f8008506"), fInfoLevelId=0x0, lpFileInformation=0x2269600 | out: lpFileInformation=0x2269600*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x33059644, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x33059644, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x33059644, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0216.236] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0216.237] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506", lpFilePart=0x0) returned 0x98 [0216.237] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0216.237] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\content\\77ec63bda74bd0d0e0426dc8f8008506"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0216.237] GetFileType (hFile=0x444) returned 0x1 [0216.237] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0216.237] GetFileType (hFile=0x444) returned 0x1 [0216.237] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x0 [0216.237] CloseHandle (hObject=0x444) returned 1 [0216.248] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506", lpFilePart=0x0) returned 0x98 [0216.248] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0216.248] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\content\\77ec63bda74bd0d0e0426dc8f8008506"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0216.249] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3baf90) returned 1 [0216.250] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506", nBufferLength=0x105, lpBuffer=0x3bbc10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506", lpFilePart=0x0) returned 0x98 [0216.250] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0b0) returned 1 [0216.250] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\content\\77ec63bda74bd0d0e0426dc8f8008506"), fInfoLevelId=0x0, lpFileInformation=0x3bc190 | out: lpFileInformation=0x3bc190*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x33059644, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x33059644, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x33059644, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0216.250] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc070) returned 1 [0216.250] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506", nBufferLength=0x105, lpBuffer=0x3bbc30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506", lpFilePart=0x0) returned 0x98 [0216.250] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0b0) returned 1 [0216.250] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\content\\77ec63bda74bd0d0e0426dc8f8008506"), fInfoLevelId=0x0, lpFileInformation=0x22e0588 | out: lpFileInformation=0x22e0588*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x33059644, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x33059644, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x33059644, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0216.250] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc070) returned 1 [0216.250] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506", nBufferLength=0x105, lpBuffer=0x3bba90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506", lpFilePart=0x0) returned 0x98 [0216.250] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf70) returned 1 [0216.250] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\content\\77ec63bda74bd0d0e0426dc8f8008506"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0216.250] GetFileType (hFile=0x444) returned 0x1 [0216.250] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbee0) returned 1 [0216.251] GetFileType (hFile=0x444) returned 0x1 [0216.251] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc108 | out: lpFileSizeHigh=0x3bc108*=0x0) returned 0x0 [0216.251] CloseHandle (hObject=0x444) returned 1 [0216.271] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506", nBufferLength=0x105, lpBuffer=0x3bba90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506", lpFilePart=0x0) returned 0x98 [0216.271] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf70) returned 1 [0216.271] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\content\\77ec63bda74bd0d0e0426dc8f8008506"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0216.273] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8a00) returned 1 [0216.273] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\B912B2C6928A18B8CD7D50CF08BEA95B_2C7DBF3EF27E31A183ADD6317A482BD1", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\B912B2C6928A18B8CD7D50CF08BEA95B_2C7DBF3EF27E31A183ADD6317A482BD1", lpFilePart=0x0) returned 0xb9 [0216.273] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0216.273] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\B912B2C6928A18B8CD7D50CF08BEA95B_2C7DBF3EF27E31A183ADD6317A482BD1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\content\\b912b2c6928a18b8cd7d50cf08bea95b_2c7dbf3ef27e31a183add6317a482bd1"), fInfoLevelId=0x0, lpFileInformation=0x23573c0 | out: lpFileInformation=0x23573c0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x32f9ab4c, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x32f9ab4c, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x33033535, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x71c)) returned 1 [0216.273] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0216.273] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\B912B2C6928A18B8CD7D50CF08BEA95B_2C7DBF3EF27E31A183ADD6317A482BD1", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\B912B2C6928A18B8CD7D50CF08BEA95B_2C7DBF3EF27E31A183ADD6317A482BD1", lpFilePart=0x0) returned 0xb9 [0216.273] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0216.273] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\B912B2C6928A18B8CD7D50CF08BEA95B_2C7DBF3EF27E31A183ADD6317A482BD1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\content\\b912b2c6928a18b8cd7d50cf08bea95b_2c7dbf3ef27e31a183add6317a482bd1"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0216.274] GetFileType (hFile=0x444) returned 0x1 [0216.274] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0216.274] GetFileType (hFile=0x444) returned 0x1 [0216.274] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x71c [0216.274] ReadFile (in: hFile=0x444, lpBuffer=0x2358028, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x2358028*, lpNumberOfBytesRead=0x3be5c8*=0x71c, lpOverlapped=0x0) returned 1 [0216.277] CloseHandle (hObject=0x444) returned 1 [0216.314] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\B912B2C6928A18B8CD7D50CF08BEA95B_2C7DBF3EF27E31A183ADD6317A482BD1", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\B912B2C6928A18B8CD7D50CF08BEA95B_2C7DBF3EF27E31A183ADD6317A482BD1", lpFilePart=0x0) returned 0xb9 [0216.314] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0216.314] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\B912B2C6928A18B8CD7D50CF08BEA95B_2C7DBF3EF27E31A183ADD6317A482BD1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\content\\b912b2c6928a18b8cd7d50cf08bea95b_2c7dbf3ef27e31a183add6317a482bd1"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0216.316] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3baf90) returned 1 [0216.316] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\B912B2C6928A18B8CD7D50CF08BEA95B_2C7DBF3EF27E31A183ADD6317A482BD1", nBufferLength=0x105, lpBuffer=0x3bbc10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\B912B2C6928A18B8CD7D50CF08BEA95B_2C7DBF3EF27E31A183ADD6317A482BD1", lpFilePart=0x0) returned 0xb9 [0216.316] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0b0) returned 1 [0216.316] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\B912B2C6928A18B8CD7D50CF08BEA95B_2C7DBF3EF27E31A183ADD6317A482BD1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\content\\b912b2c6928a18b8cd7d50cf08bea95b_2c7dbf3ef27e31a183add6317a482bd1"), fInfoLevelId=0x0, lpFileInformation=0x3bc190 | out: lpFileInformation=0x3bc190*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x32f9ab4c, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x32f9ab4c, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x33033535, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x71c)) returned 1 [0216.316] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc070) returned 1 [0216.316] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\B912B2C6928A18B8CD7D50CF08BEA95B_2C7DBF3EF27E31A183ADD6317A482BD1", nBufferLength=0x105, lpBuffer=0x3bbc30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\B912B2C6928A18B8CD7D50CF08BEA95B_2C7DBF3EF27E31A183ADD6317A482BD1", lpFilePart=0x0) returned 0xb9 [0216.316] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0b0) returned 1 [0216.316] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\B912B2C6928A18B8CD7D50CF08BEA95B_2C7DBF3EF27E31A183ADD6317A482BD1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\content\\b912b2c6928a18b8cd7d50cf08bea95b_2c7dbf3ef27e31a183add6317a482bd1"), fInfoLevelId=0x0, lpFileInformation=0x21d24f0 | out: lpFileInformation=0x21d24f0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x32f9ab4c, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x32f9ab4c, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x33033535, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x71c)) returned 1 [0216.316] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc070) returned 1 [0216.316] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\B912B2C6928A18B8CD7D50CF08BEA95B_2C7DBF3EF27E31A183ADD6317A482BD1", nBufferLength=0x105, lpBuffer=0x3bba90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\B912B2C6928A18B8CD7D50CF08BEA95B_2C7DBF3EF27E31A183ADD6317A482BD1", lpFilePart=0x0) returned 0xb9 [0216.316] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf70) returned 1 [0216.316] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\B912B2C6928A18B8CD7D50CF08BEA95B_2C7DBF3EF27E31A183ADD6317A482BD1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\content\\b912b2c6928a18b8cd7d50cf08bea95b_2c7dbf3ef27e31a183add6317a482bd1"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0216.317] GetFileType (hFile=0x444) returned 0x1 [0216.317] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbee0) returned 1 [0216.317] GetFileType (hFile=0x444) returned 0x1 [0216.317] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc108 | out: lpFileSizeHigh=0x3bc108*=0x0) returned 0x71c [0216.317] ReadFile (in: hFile=0x444, lpBuffer=0x21d3158, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bc038, lpOverlapped=0x0 | out: lpBuffer=0x21d3158*, lpNumberOfBytesRead=0x3bc038*=0x71c, lpOverlapped=0x0) returned 1 [0216.317] CloseHandle (hObject=0x444) returned 1 [0216.327] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\B912B2C6928A18B8CD7D50CF08BEA95B_2C7DBF3EF27E31A183ADD6317A482BD1", nBufferLength=0x105, lpBuffer=0x3bba90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\B912B2C6928A18B8CD7D50CF08BEA95B_2C7DBF3EF27E31A183ADD6317A482BD1", lpFilePart=0x0) returned 0xb9 [0216.327] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf70) returned 1 [0216.327] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\B912B2C6928A18B8CD7D50CF08BEA95B_2C7DBF3EF27E31A183ADD6317A482BD1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\content\\b912b2c6928a18b8cd7d50cf08bea95b_2c7dbf3ef27e31a183add6317a482bd1"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0216.328] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8a00) returned 1 [0216.329] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749", lpFilePart=0x0) returned 0x98 [0216.329] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0216.329] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\content\\fb0d848f74f70bb2eaa93746d24d9749"), fInfoLevelId=0x0, lpFileInformation=0x224ce98 | out: lpFileInformation=0x224ce98*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x33059644, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x33059644, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x33059644, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0216.329] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0216.329] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749", lpFilePart=0x0) returned 0x98 [0216.329] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0216.330] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\content\\fb0d848f74f70bb2eaa93746d24d9749"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0216.330] GetFileType (hFile=0x444) returned 0x1 [0216.330] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0216.330] GetFileType (hFile=0x444) returned 0x1 [0216.330] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x0 [0216.330] CloseHandle (hObject=0x444) returned 1 [0216.340] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749", lpFilePart=0x0) returned 0x98 [0216.340] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0216.340] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\content\\fb0d848f74f70bb2eaa93746d24d9749"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0216.342] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3baf90) returned 1 [0216.342] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749", nBufferLength=0x105, lpBuffer=0x3bbc10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749", lpFilePart=0x0) returned 0x98 [0216.342] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0b0) returned 1 [0216.342] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\content\\fb0d848f74f70bb2eaa93746d24d9749"), fInfoLevelId=0x0, lpFileInformation=0x3bc190 | out: lpFileInformation=0x3bc190*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x33059644, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x33059644, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x33059644, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0216.342] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc070) returned 1 [0216.342] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749", nBufferLength=0x105, lpBuffer=0x3bbc30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749", lpFilePart=0x0) returned 0x98 [0216.342] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0b0) returned 1 [0216.342] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\content\\fb0d848f74f70bb2eaa93746d24d9749"), fInfoLevelId=0x0, lpFileInformation=0x22c3e20 | out: lpFileInformation=0x22c3e20*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x33059644, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x33059644, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x33059644, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0216.343] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc070) returned 1 [0216.343] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749", nBufferLength=0x105, lpBuffer=0x3bba90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749", lpFilePart=0x0) returned 0x98 [0216.343] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf70) returned 1 [0216.343] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\content\\fb0d848f74f70bb2eaa93746d24d9749"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0216.343] GetFileType (hFile=0x444) returned 0x1 [0216.343] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbee0) returned 1 [0216.343] GetFileType (hFile=0x444) returned 0x1 [0216.343] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc108 | out: lpFileSizeHigh=0x3bc108*=0x0) returned 0x0 [0216.343] CloseHandle (hObject=0x444) returned 1 [0216.353] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749", nBufferLength=0x105, lpBuffer=0x3bba90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749", lpFilePart=0x0) returned 0x98 [0216.353] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf70) returned 1 [0216.353] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\content\\fb0d848f74f70bb2eaa93746d24d9749"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0216.354] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8a00) returned 1 [0216.355] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0216.355] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData", lpFilePart=0x0) returned 0x78 [0216.355] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\", lpFilePart=0x0) returned 0x79 [0216.355] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d7a30 [0216.362] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0216.362] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0216.362] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0216.362] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0216.363] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0216.363] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0216.363] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0216.363] FindClose (in: hFindFile=0x5d7a30 | out: hFindFile=0x5d7a30) returned 1 [0216.363] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0216.363] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0216.363] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0216.363] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData", nBufferLength=0x105, lpBuffer=0x3be1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData", lpFilePart=0x0) returned 0x78 [0216.364] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\", nBufferLength=0x105, lpBuffer=0x3be140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\", lpFilePart=0x0) returned 0x79 [0216.364] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\*", lpFindFileData=0x3be350 | out: lpFindFileData=0x3be350) returned 0x5d79d0 [0216.364] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0216.364] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0216.365] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0216.365] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0216.365] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0216.365] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 1 [0216.365] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be3a0 | out: lpFindFileData=0x3be3a0) returned 0 [0216.365] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0216.366] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0216.366] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0216.366] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", lpFilePart=0x0) returned 0xba [0216.366] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0216.366] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\metadata\\40e450f7ce13419a2ccc2a5445035a0a_06f02b1f13ab4b11b8fc669bde565af1"), fInfoLevelId=0x0, lpFileInformation=0x233f810 | out: lpFileInformation=0x233f810*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x32e1d430, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x32e1d430, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x57094da6, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x190)) returned 1 [0216.367] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0216.367] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", lpFilePart=0x0) returned 0xba [0216.367] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0216.367] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\metadata\\40e450f7ce13419a2ccc2a5445035a0a_06f02b1f13ab4b11b8fc669bde565af1"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0216.367] GetFileType (hFile=0x444) returned 0x1 [0216.367] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0216.367] GetFileType (hFile=0x444) returned 0x1 [0216.367] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x190 [0216.367] ReadFile (in: hFile=0x444, lpBuffer=0x233fee8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x233fee8*, lpNumberOfBytesRead=0x3be5c8*=0x190, lpOverlapped=0x0) returned 1 [0216.368] CloseHandle (hObject=0x444) returned 1 [0216.413] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", lpFilePart=0x0) returned 0xba [0216.413] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0216.413] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\metadata\\40e450f7ce13419a2ccc2a5445035a0a_06f02b1f13ab4b11b8fc669bde565af1"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0216.415] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3baf90) returned 1 [0216.415] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", nBufferLength=0x105, lpBuffer=0x3bbc10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", lpFilePart=0x0) returned 0xba [0216.415] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0b0) returned 1 [0216.415] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\metadata\\40e450f7ce13419a2ccc2a5445035a0a_06f02b1f13ab4b11b8fc669bde565af1"), fInfoLevelId=0x0, lpFileInformation=0x3bc190 | out: lpFileInformation=0x3bc190*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x32e1d430, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x32e1d430, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x57094da6, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x190)) returned 1 [0216.415] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc070) returned 1 [0216.415] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", nBufferLength=0x105, lpBuffer=0x3bbc30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", lpFilePart=0x0) returned 0xba [0216.415] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0b0) returned 1 [0216.415] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\metadata\\40e450f7ce13419a2ccc2a5445035a0a_06f02b1f13ab4b11b8fc669bde565af1"), fInfoLevelId=0x0, lpFileInformation=0x21b7fa0 | out: lpFileInformation=0x21b7fa0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x32e1d430, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x32e1d430, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x57094da6, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x190)) returned 1 [0216.415] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc070) returned 1 [0216.415] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", nBufferLength=0x105, lpBuffer=0x3bba90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", lpFilePart=0x0) returned 0xba [0216.415] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf70) returned 1 [0216.415] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\metadata\\40e450f7ce13419a2ccc2a5445035a0a_06f02b1f13ab4b11b8fc669bde565af1"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0216.416] GetFileType (hFile=0x444) returned 0x1 [0216.416] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbee0) returned 1 [0216.416] GetFileType (hFile=0x444) returned 0x1 [0216.416] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc108 | out: lpFileSizeHigh=0x3bc108*=0x0) returned 0x190 [0216.416] ReadFile (in: hFile=0x444, lpBuffer=0x21b8678, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bc038, lpOverlapped=0x0 | out: lpBuffer=0x21b8678*, lpNumberOfBytesRead=0x3bc038*=0x190, lpOverlapped=0x0) returned 1 [0216.416] CloseHandle (hObject=0x444) returned 1 [0216.426] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", nBufferLength=0x105, lpBuffer=0x3bba90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", lpFilePart=0x0) returned 0xba [0216.426] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf70) returned 1 [0216.427] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\metadata\\40e450f7ce13419a2ccc2a5445035a0a_06f02b1f13ab4b11b8fc669bde565af1"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0216.428] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8a00) returned 1 [0216.429] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", lpFilePart=0x0) returned 0x99 [0216.429] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0216.429] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\metadata\\57c8edb95df3f0ad4ee2dc2b8cfd4157"), fInfoLevelId=0x0, lpFileInformation=0x2230840 | out: lpFileInformation=0x2230840*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x33059644, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x33059644, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x33059644, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x12e)) returned 1 [0216.429] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0216.429] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", lpFilePart=0x0) returned 0x99 [0216.429] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0216.429] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\metadata\\57c8edb95df3f0ad4ee2dc2b8cfd4157"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0216.429] GetFileType (hFile=0x444) returned 0x1 [0216.429] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0216.429] GetFileType (hFile=0x444) returned 0x1 [0216.429] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x12e [0216.429] ReadFile (in: hFile=0x444, lpBuffer=0x2230db8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x2230db8*, lpNumberOfBytesRead=0x3be5c8*=0x12e, lpOverlapped=0x0) returned 1 [0216.430] CloseHandle (hObject=0x444) returned 1 [0216.440] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", lpFilePart=0x0) returned 0x99 [0216.440] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0216.440] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\metadata\\57c8edb95df3f0ad4ee2dc2b8cfd4157"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0216.441] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3baf90) returned 1 [0216.442] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", nBufferLength=0x105, lpBuffer=0x3bbc10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", lpFilePart=0x0) returned 0x99 [0216.442] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0b0) returned 1 [0216.442] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\metadata\\57c8edb95df3f0ad4ee2dc2b8cfd4157"), fInfoLevelId=0x0, lpFileInformation=0x3bc190 | out: lpFileInformation=0x3bc190*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x33059644, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x33059644, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x33059644, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x12e)) returned 1 [0216.442] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc070) returned 1 [0216.442] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", nBufferLength=0x105, lpBuffer=0x3bbc30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", lpFilePart=0x0) returned 0x99 [0216.442] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0b0) returned 1 [0216.442] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\metadata\\57c8edb95df3f0ad4ee2dc2b8cfd4157"), fInfoLevelId=0x0, lpFileInformation=0x22a8dd8 | out: lpFileInformation=0x22a8dd8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x33059644, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x33059644, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x33059644, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x12e)) returned 1 [0216.442] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc070) returned 1 [0216.442] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", nBufferLength=0x105, lpBuffer=0x3bba90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", lpFilePart=0x0) returned 0x99 [0216.442] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf70) returned 1 [0216.442] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\metadata\\57c8edb95df3f0ad4ee2dc2b8cfd4157"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0216.442] GetFileType (hFile=0x444) returned 0x1 [0216.442] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbee0) returned 1 [0216.442] GetFileType (hFile=0x444) returned 0x1 [0216.442] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc108 | out: lpFileSizeHigh=0x3bc108*=0x0) returned 0x12e [0216.442] ReadFile (in: hFile=0x444, lpBuffer=0x22a9350, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bc038, lpOverlapped=0x0 | out: lpBuffer=0x22a9350*, lpNumberOfBytesRead=0x3bc038*=0x12e, lpOverlapped=0x0) returned 1 [0216.443] CloseHandle (hObject=0x444) returned 1 [0216.454] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", nBufferLength=0x105, lpBuffer=0x3bba90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", lpFilePart=0x0) returned 0x99 [0216.454] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf70) returned 1 [0216.454] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\metadata\\57c8edb95df3f0ad4ee2dc2b8cfd4157"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0216.456] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8a00) returned 1 [0216.457] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506", lpFilePart=0x0) returned 0x99 [0216.457] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0216.457] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\metadata\\77ec63bda74bd0d0e0426dc8f8008506"), fInfoLevelId=0x0, lpFileInformation=0x2321220 | out: lpFileInformation=0x2321220*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x33033535, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x33033535, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x33059644, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x122)) returned 1 [0216.457] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0216.457] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506", lpFilePart=0x0) returned 0x99 [0216.457] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0216.457] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\metadata\\77ec63bda74bd0d0e0426dc8f8008506"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0216.457] GetFileType (hFile=0x444) returned 0x1 [0216.457] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0216.457] GetFileType (hFile=0x444) returned 0x1 [0216.457] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x122 [0216.457] ReadFile (in: hFile=0x444, lpBuffer=0x2321790, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x2321790*, lpNumberOfBytesRead=0x3be5c8*=0x122, lpOverlapped=0x0) returned 1 [0216.458] CloseHandle (hObject=0x444) returned 1 [0216.501] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506", lpFilePart=0x0) returned 0x99 [0216.501] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0216.501] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\metadata\\77ec63bda74bd0d0e0426dc8f8008506"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0216.502] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3baf90) returned 1 [0216.503] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506", nBufferLength=0x105, lpBuffer=0x3bbc10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506", lpFilePart=0x0) returned 0x99 [0216.503] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0b0) returned 1 [0216.503] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\metadata\\77ec63bda74bd0d0e0426dc8f8008506"), fInfoLevelId=0x0, lpFileInformation=0x3bc190 | out: lpFileInformation=0x3bc190*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x33033535, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x33033535, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x33059644, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x122)) returned 1 [0216.503] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc070) returned 1 [0216.503] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506", nBufferLength=0x105, lpBuffer=0x3bbc30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506", lpFilePart=0x0) returned 0x99 [0216.503] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0b0) returned 1 [0216.503] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\metadata\\77ec63bda74bd0d0e0426dc8f8008506"), fInfoLevelId=0x0, lpFileInformation=0x2199458 | out: lpFileInformation=0x2199458*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x33033535, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x33033535, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x33059644, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x122)) returned 1 [0216.503] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc070) returned 1 [0216.503] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506", nBufferLength=0x105, lpBuffer=0x3bba90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506", lpFilePart=0x0) returned 0x99 [0216.503] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf70) returned 1 [0216.503] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\metadata\\77ec63bda74bd0d0e0426dc8f8008506"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0216.503] GetFileType (hFile=0x444) returned 0x1 [0216.503] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbee0) returned 1 [0216.503] GetFileType (hFile=0x444) returned 0x1 [0216.503] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc108 | out: lpFileSizeHigh=0x3bc108*=0x0) returned 0x122 [0216.503] ReadFile (in: hFile=0x444, lpBuffer=0x21999c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bc038, lpOverlapped=0x0 | out: lpBuffer=0x21999c8*, lpNumberOfBytesRead=0x3bc038*=0x122, lpOverlapped=0x0) returned 1 [0216.503] CloseHandle (hObject=0x444) returned 1 [0216.514] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506", nBufferLength=0x105, lpBuffer=0x3bba90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506", lpFilePart=0x0) returned 0x99 [0216.514] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf70) returned 1 [0216.514] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\metadata\\77ec63bda74bd0d0e0426dc8f8008506"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0216.515] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8a00) returned 1 [0216.516] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\B912B2C6928A18B8CD7D50CF08BEA95B_2C7DBF3EF27E31A183ADD6317A482BD1", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\B912B2C6928A18B8CD7D50CF08BEA95B_2C7DBF3EF27E31A183ADD6317A482BD1", lpFilePart=0x0) returned 0xba [0216.516] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0216.516] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\B912B2C6928A18B8CD7D50CF08BEA95B_2C7DBF3EF27E31A183ADD6317A482BD1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\metadata\\b912b2c6928a18b8cd7d50cf08bea95b_2c7dbf3ef27e31a183add6317a482bd1"), fInfoLevelId=0x0, lpFileInformation=0x22118a0 | out: lpFileInformation=0x22118a0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x32f9ab4c, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x32f9ab4c, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x57094da6, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x1ea)) returned 1 [0216.516] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0216.516] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\B912B2C6928A18B8CD7D50CF08BEA95B_2C7DBF3EF27E31A183ADD6317A482BD1", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\B912B2C6928A18B8CD7D50CF08BEA95B_2C7DBF3EF27E31A183ADD6317A482BD1", lpFilePart=0x0) returned 0xba [0216.516] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0216.516] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\B912B2C6928A18B8CD7D50CF08BEA95B_2C7DBF3EF27E31A183ADD6317A482BD1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\metadata\\b912b2c6928a18b8cd7d50cf08bea95b_2c7dbf3ef27e31a183add6317a482bd1"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0216.516] GetFileType (hFile=0x444) returned 0x1 [0216.516] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0216.516] GetFileType (hFile=0x444) returned 0x1 [0216.516] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x1ea [0216.516] ReadFile (in: hFile=0x444, lpBuffer=0x2211fd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x2211fd8*, lpNumberOfBytesRead=0x3be5c8*=0x1ea, lpOverlapped=0x0) returned 1 [0216.517] CloseHandle (hObject=0x444) returned 1 [0216.527] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\B912B2C6928A18B8CD7D50CF08BEA95B_2C7DBF3EF27E31A183ADD6317A482BD1", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\B912B2C6928A18B8CD7D50CF08BEA95B_2C7DBF3EF27E31A183ADD6317A482BD1", lpFilePart=0x0) returned 0xba [0216.527] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0216.527] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\B912B2C6928A18B8CD7D50CF08BEA95B_2C7DBF3EF27E31A183ADD6317A482BD1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\metadata\\b912b2c6928a18b8cd7d50cf08bea95b_2c7dbf3ef27e31a183add6317a482bd1"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0216.529] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3baf90) returned 1 [0216.529] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\B912B2C6928A18B8CD7D50CF08BEA95B_2C7DBF3EF27E31A183ADD6317A482BD1", nBufferLength=0x105, lpBuffer=0x3bbc10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\B912B2C6928A18B8CD7D50CF08BEA95B_2C7DBF3EF27E31A183ADD6317A482BD1", lpFilePart=0x0) returned 0xba [0216.529] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0b0) returned 1 [0216.529] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\B912B2C6928A18B8CD7D50CF08BEA95B_2C7DBF3EF27E31A183ADD6317A482BD1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\metadata\\b912b2c6928a18b8cd7d50cf08bea95b_2c7dbf3ef27e31a183add6317a482bd1"), fInfoLevelId=0x0, lpFileInformation=0x3bc190 | out: lpFileInformation=0x3bc190*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x32f9ab4c, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x32f9ab4c, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x57094da6, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x1ea)) returned 1 [0216.529] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc070) returned 1 [0216.529] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\B912B2C6928A18B8CD7D50CF08BEA95B_2C7DBF3EF27E31A183ADD6317A482BD1", nBufferLength=0x105, lpBuffer=0x3bbc30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\B912B2C6928A18B8CD7D50CF08BEA95B_2C7DBF3EF27E31A183ADD6317A482BD1", lpFilePart=0x0) returned 0xba [0216.529] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0b0) returned 1 [0216.529] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\B912B2C6928A18B8CD7D50CF08BEA95B_2C7DBF3EF27E31A183ADD6317A482BD1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\metadata\\b912b2c6928a18b8cd7d50cf08bea95b_2c7dbf3ef27e31a183add6317a482bd1"), fInfoLevelId=0x0, lpFileInformation=0x228a4b8 | out: lpFileInformation=0x228a4b8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x32f9ab4c, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x32f9ab4c, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x57094da6, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x1ea)) returned 1 [0216.530] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc070) returned 1 [0216.530] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\B912B2C6928A18B8CD7D50CF08BEA95B_2C7DBF3EF27E31A183ADD6317A482BD1", nBufferLength=0x105, lpBuffer=0x3bba90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\B912B2C6928A18B8CD7D50CF08BEA95B_2C7DBF3EF27E31A183ADD6317A482BD1", lpFilePart=0x0) returned 0xba [0216.530] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf70) returned 1 [0216.530] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\B912B2C6928A18B8CD7D50CF08BEA95B_2C7DBF3EF27E31A183ADD6317A482BD1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\metadata\\b912b2c6928a18b8cd7d50cf08bea95b_2c7dbf3ef27e31a183add6317a482bd1"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0216.530] GetFileType (hFile=0x444) returned 0x1 [0216.530] GetFileType (hFile=0x444) returned 0x1 [0216.530] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc108 | out: lpFileSizeHigh=0x3bc108*=0x0) returned 0x1ea [0216.530] ReadFile (in: hFile=0x444, lpBuffer=0x228abf0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bc038, lpOverlapped=0x0 | out: lpBuffer=0x228abf0*, lpNumberOfBytesRead=0x3bc038*=0x1ea, lpOverlapped=0x0) returned 1 [0216.530] CloseHandle (hObject=0x444) returned 1 [0216.540] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\B912B2C6928A18B8CD7D50CF08BEA95B_2C7DBF3EF27E31A183ADD6317A482BD1", nBufferLength=0x105, lpBuffer=0x3bba90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\B912B2C6928A18B8CD7D50CF08BEA95B_2C7DBF3EF27E31A183ADD6317A482BD1", lpFilePart=0x0) returned 0xba [0216.540] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\B912B2C6928A18B8CD7D50CF08BEA95B_2C7DBF3EF27E31A183ADD6317A482BD1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\metadata\\b912b2c6928a18b8cd7d50cf08bea95b_2c7dbf3ef27e31a183add6317a482bd1"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0216.542] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749", nBufferLength=0x105, lpBuffer=0x3be1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749", lpFilePart=0x0) returned 0x99 [0216.543] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\metadata\\fb0d848f74f70bb2eaa93746d24d9749"), fInfoLevelId=0x0, lpFileInformation=0x2302f40 | out: lpFileInformation=0x2302f40*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x33059644, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x33059644, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x33059644, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x122)) returned 1 [0216.545] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749", lpFilePart=0x0) returned 0x99 [0216.545] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\metadata\\fb0d848f74f70bb2eaa93746d24d9749"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0216.545] GetFileType (hFile=0x444) returned 0x1 [0216.545] GetFileType (hFile=0x444) returned 0x1 [0216.545] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be698 | out: lpFileSizeHigh=0x3be698*=0x0) returned 0x122 [0216.545] ReadFile (in: hFile=0x444, lpBuffer=0x23034b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be5c8, lpOverlapped=0x0 | out: lpBuffer=0x23034b0*, lpNumberOfBytesRead=0x3be5c8*=0x122, lpOverlapped=0x0) returned 1 [0216.546] CloseHandle (hObject=0x444) returned 1 [0216.556] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749", nBufferLength=0x105, lpBuffer=0x3be020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749", lpFilePart=0x0) returned 0x99 [0216.556] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\metadata\\fb0d848f74f70bb2eaa93746d24d9749"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0216.558] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749", nBufferLength=0x105, lpBuffer=0x3bbc10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749", lpFilePart=0x0) returned 0x99 [0216.558] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\metadata\\fb0d848f74f70bb2eaa93746d24d9749"), fInfoLevelId=0x0, lpFileInformation=0x3bc190 | out: lpFileInformation=0x3bc190*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x33059644, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x33059644, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x33059644, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x122)) returned 1 [0216.559] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749", nBufferLength=0x105, lpBuffer=0x3bbc30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749", lpFilePart=0x0) returned 0x99 [0216.559] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\metadata\\fb0d848f74f70bb2eaa93746d24d9749"), fInfoLevelId=0x0, lpFileInformation=0x237b4d8 | out: lpFileInformation=0x237b4d8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x33059644, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x33059644, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x33059644, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x122)) returned 1 [0216.559] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749", nBufferLength=0x105, lpBuffer=0x3bba90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749", lpFilePart=0x0) returned 0x99 [0216.559] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\metadata\\fb0d848f74f70bb2eaa93746d24d9749"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0216.559] GetFileType (hFile=0x444) returned 0x1 [0216.559] GetFileType (hFile=0x444) returned 0x1 [0216.559] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc108 | out: lpFileSizeHigh=0x3bc108*=0x0) returned 0x122 [0216.559] ReadFile (in: hFile=0x444, lpBuffer=0x237ba48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3bc038, lpOverlapped=0x0 | out: lpBuffer=0x237ba48*, lpNumberOfBytesRead=0x3bc038*=0x122, lpOverlapped=0x0) returned 1 [0216.559] CloseHandle (hObject=0x444) returned 1 [0216.642] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749", nBufferLength=0x105, lpBuffer=0x3bba90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749", lpFilePart=0x0) returned 0x99 [0216.643] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bbf70) returned 1 [0216.643] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\metadata\\fb0d848f74f70bb2eaa93746d24d9749"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0216.644] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8a00) returned 1 [0216.645] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0216.645] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Temp", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Temp", lpFilePart=0x0) returned 0x59 [0216.645] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Temp\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Temp\\", lpFilePart=0x0) returned 0x5a [0216.645] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Temp\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7f10 [0216.645] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0216.645] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0216.645] FindClose (in: hFindFile=0x5d7f10 | out: hFindFile=0x5d7f10) returned 1 [0216.645] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0216.645] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0216.645] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0216.645] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Temp", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Temp", lpFilePart=0x0) returned 0x59 [0216.646] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Temp\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Temp\\", lpFilePart=0x0) returned 0x5a [0216.646] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Temp\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d78b0 [0216.646] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0216.646] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0216.646] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0216.646] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0216.646] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0216.646] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0216.646] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AppData", lpFilePart=0x0) returned 0x59 [0216.646] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AppData\\", lpFilePart=0x0) returned 0x5a [0216.646] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d78b0 [0216.646] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0216.647] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0216.647] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0216.647] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0216.647] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0216.647] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0216.647] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AppData", lpFilePart=0x0) returned 0x59 [0216.647] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AppData\\", lpFilePart=0x0) returned 0x5a [0216.647] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d81b0 [0216.647] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0216.647] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0216.647] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0216.647] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0216.647] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0216.647] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0216.648] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\LocalCache", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\LocalCache", lpFilePart=0x0) returned 0x5c [0216.648] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\LocalCache\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\LocalCache\\", lpFilePart=0x0) returned 0x5d [0216.648] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\LocalCache\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7af0 [0216.650] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0216.650] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0216.650] FindClose (in: hFindFile=0x5d7af0 | out: hFindFile=0x5d7af0) returned 1 [0216.650] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0216.650] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0216.650] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0216.650] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\LocalCache", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\LocalCache", lpFilePart=0x0) returned 0x5c [0216.650] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\LocalCache\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\LocalCache\\", lpFilePart=0x0) returned 0x5d [0216.650] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\LocalCache\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d79d0 [0216.650] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0216.651] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0216.651] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0216.651] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0216.651] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0216.651] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0216.651] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\LocalState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\LocalState", lpFilePart=0x0) returned 0x5c [0216.651] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\LocalState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\LocalState\\", lpFilePart=0x0) returned 0x5d [0216.651] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\LocalState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7a90 [0216.651] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0216.651] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0216.651] FindClose (in: hFindFile=0x5d7a90 | out: hFindFile=0x5d7a90) returned 1 [0216.651] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0216.651] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0216.651] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0216.651] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\LocalState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\LocalState", lpFilePart=0x0) returned 0x5c [0216.651] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\LocalState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\LocalState\\", lpFilePart=0x0) returned 0x5d [0216.651] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\LocalState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7df0 [0216.652] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0216.652] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0216.652] FindClose (in: hFindFile=0x5d7df0 | out: hFindFile=0x5d7df0) returned 1 [0216.652] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0216.652] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0216.652] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0216.652] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Microsoft.WindowsStore_2015.7.1.0_x64__8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Microsoft.WindowsStore_2015.7.1.0_x64__8wekyb3d8bbwe", lpFilePart=0x0) returned 0x86 [0216.652] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Microsoft.WindowsStore_2015.7.1.0_x64__8wekyb3d8bbwe\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Microsoft.WindowsStore_2015.7.1.0_x64__8wekyb3d8bbwe\\", lpFilePart=0x0) returned 0x87 [0216.652] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Microsoft.WindowsStore_2015.7.1.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7c70 [0216.653] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0216.653] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0216.653] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0216.653] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0216.653] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0216.653] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0216.653] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0216.653] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Microsoft.WindowsStore_2015.7.1.0_x64__8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Microsoft.WindowsStore_2015.7.1.0_x64__8wekyb3d8bbwe", lpFilePart=0x0) returned 0x86 [0216.653] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Microsoft.WindowsStore_2015.7.1.0_x64__8wekyb3d8bbwe\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Microsoft.WindowsStore_2015.7.1.0_x64__8wekyb3d8bbwe\\", lpFilePart=0x0) returned 0x87 [0216.653] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Microsoft.WindowsStore_2015.7.1.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d81b0 [0216.653] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0216.653] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0216.654] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0216.654] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0216.654] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0216.654] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0216.654] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0216.654] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Microsoft.WindowsStore_2015.7.1.0_x64__8wekyb3d8bbwe\\ActivationStore", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Microsoft.WindowsStore_2015.7.1.0_x64__8wekyb3d8bbwe\\ActivationStore", lpFilePart=0x0) returned 0x96 [0216.654] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Microsoft.WindowsStore_2015.7.1.0_x64__8wekyb3d8bbwe\\ActivationStore\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Microsoft.WindowsStore_2015.7.1.0_x64__8wekyb3d8bbwe\\ActivationStore\\", lpFilePart=0x0) returned 0x97 [0216.654] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Microsoft.WindowsStore_2015.7.1.0_x64__8wekyb3d8bbwe\\ActivationStore\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7550 [0216.675] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0216.675] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0216.675] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0216.676] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0216.676] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0216.676] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0216.676] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0216.676] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0216.677] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0216.677] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Microsoft.WindowsStore_2015.7.1.0_x64__8wekyb3d8bbwe\\ActivationStore", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Microsoft.WindowsStore_2015.7.1.0_x64__8wekyb3d8bbwe\\ActivationStore", lpFilePart=0x0) returned 0x96 [0216.677] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Microsoft.WindowsStore_2015.7.1.0_x64__8wekyb3d8bbwe\\ActivationStore\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Microsoft.WindowsStore_2015.7.1.0_x64__8wekyb3d8bbwe\\ActivationStore\\", lpFilePart=0x0) returned 0x97 [0216.677] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Microsoft.WindowsStore_2015.7.1.0_x64__8wekyb3d8bbwe\\ActivationStore\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7550 [0216.677] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0216.678] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0216.678] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0216.678] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0216.678] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0216.678] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0216.679] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0216.679] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0216.679] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Microsoft.WindowsStore_2015.7.1.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Microsoft.WindowsStore_2015.7.1.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xaa [0216.679] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0216.679] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Microsoft.WindowsStore_2015.7.1.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\microsoft.windowsstore_2015.7.1.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), fInfoLevelId=0x0, lpFileInformation=0x2202870 | out: lpFileInformation=0x2202870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf281a60e, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x3b8fe691, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0xf2bd40a7, ftLastWriteTime.dwHighDateTime=0x1d2d028, nFileSizeHigh=0x0, nFileSizeLow=0x20000)) returned 1 [0216.680] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0216.680] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Microsoft.WindowsStore_2015.7.1.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Microsoft.WindowsStore_2015.7.1.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xaa [0216.680] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0216.680] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Microsoft.WindowsStore_2015.7.1.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\microsoft.windowsstore_2015.7.1.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), fInfoLevelId=0x0, lpFileInformation=0x2202a88 | out: lpFileInformation=0x2202a88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf281a60e, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x3b8fe691, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0xf2bd40a7, ftLastWriteTime.dwHighDateTime=0x1d2d028, nFileSizeHigh=0x0, nFileSizeLow=0x20000)) returned 1 [0216.680] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0216.680] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Microsoft.WindowsStore_2015.7.1.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Microsoft.WindowsStore_2015.7.1.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xaa [0216.680] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0216.680] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Microsoft.WindowsStore_2015.7.1.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\microsoft.windowsstore_2015.7.1.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0216.681] GetFileType (hFile=0x444) returned 0x1 [0216.681] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0216.681] GetFileType (hFile=0x444) returned 0x1 [0216.681] ReadFile (in: hFile=0x444, lpBuffer=0x2204fe8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x2204fe8*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0216.703] CloseHandle (hObject=0x444) returned 1 [0216.703] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Microsoft.WindowsStore_2015.7.1.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Microsoft.WindowsStore_2015.7.1.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xaa [0216.703] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0216.703] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Microsoft.WindowsStore_2015.7.1.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\microsoft.windowsstore_2015.7.1.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0216.703] GetFileType (hFile=0x444) returned 0x1 [0216.703] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0216.703] GetFileType (hFile=0x444) returned 0x1 [0216.703] WriteFile (in: hFile=0x444, lpBuffer=0x2202c80*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x2202c80*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0216.725] CloseHandle (hObject=0x444) returned 1 [0216.726] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Microsoft.WindowsStore_2015.7.1.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Microsoft.WindowsStore_2015.7.1.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xaa [0216.726] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Microsoft.WindowsStore_2015.7.1.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Microsoft.WindowsStore_2015.7.1.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.xuy", lpFilePart=0x0) returned 0xae [0216.726] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0216.726] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Microsoft.WindowsStore_2015.7.1.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\microsoft.windowsstore_2015.7.1.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf281a60e, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x3b8fe691, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x6d063ac7, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x20000)) returned 1 [0216.726] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0216.726] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Microsoft.WindowsStore_2015.7.1.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\microsoft.windowsstore_2015.7.1.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Microsoft.WindowsStore_2015.7.1.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\microsoft.windowsstore_2015.7.1.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.xuy")) returned 1 [0216.727] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Microsoft.WindowsStore_2015.7.1.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Microsoft.WindowsStore_2015.7.1.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xaf [0216.727] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0216.727] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Microsoft.WindowsStore_2015.7.1.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\microsoft.windowsstore_2015.7.1.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x22816a8 | out: lpFileInformation=0x22816a8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xf2866964, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xf2866964, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0xf2866964, ftLastWriteTime.dwHighDateTime=0x1d2d028, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0216.727] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0216.728] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Microsoft.WindowsStore_2015.7.1.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Microsoft.WindowsStore_2015.7.1.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xaf [0216.728] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0216.728] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Microsoft.WindowsStore_2015.7.1.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\microsoft.windowsstore_2015.7.1.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0216.728] GetFileType (hFile=0x444) returned 0x1 [0216.728] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0216.728] GetFileType (hFile=0x444) returned 0x1 [0216.728] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x0 [0216.728] CloseHandle (hObject=0x444) returned 1 [0216.738] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Microsoft.WindowsStore_2015.7.1.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Microsoft.WindowsStore_2015.7.1.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xaf [0216.738] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0216.738] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Microsoft.WindowsStore_2015.7.1.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\microsoft.windowsstore_2015.7.1.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0216.740] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb070) returned 1 [0216.740] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Microsoft.WindowsStore_2015.7.1.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3bbcf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Microsoft.WindowsStore_2015.7.1.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xaf [0216.740] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0216.740] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Microsoft.WindowsStore_2015.7.1.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\microsoft.windowsstore_2015.7.1.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x3bc270 | out: lpFileInformation=0x3bc270*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xf2866964, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xf2866964, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0xf2866964, ftLastWriteTime.dwHighDateTime=0x1d2d028, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0216.740] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc150) returned 1 [0216.740] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Microsoft.WindowsStore_2015.7.1.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3bbd10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Microsoft.WindowsStore_2015.7.1.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xaf [0216.740] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0216.740] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Microsoft.WindowsStore_2015.7.1.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\microsoft.windowsstore_2015.7.1.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x22f86c8 | out: lpFileInformation=0x22f86c8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xf2866964, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xf2866964, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0xf2866964, ftLastWriteTime.dwHighDateTime=0x1d2d028, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0216.740] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc150) returned 1 [0216.740] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Microsoft.WindowsStore_2015.7.1.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3bbb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Microsoft.WindowsStore_2015.7.1.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xaf [0216.740] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc050) returned 1 [0216.740] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Microsoft.WindowsStore_2015.7.1.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\microsoft.windowsstore_2015.7.1.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0216.740] GetFileType (hFile=0x444) returned 0x1 [0216.741] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbfc0) returned 1 [0216.741] GetFileType (hFile=0x444) returned 0x1 [0216.741] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc1e8 | out: lpFileSizeHigh=0x3bc1e8*=0x0) returned 0x0 [0216.741] CloseHandle (hObject=0x444) returned 1 [0216.757] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Microsoft.WindowsStore_2015.7.1.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3bbb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Microsoft.WindowsStore_2015.7.1.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xaf [0216.757] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc050) returned 1 [0216.757] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Microsoft.WindowsStore_2015.7.1.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\microsoft.windowsstore_2015.7.1.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0216.759] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8ae0) returned 1 [0216.759] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Microsoft.WindowsStore_2015.7.1.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Microsoft.WindowsStore_2015.7.1.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xaf [0216.759] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0216.759] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Microsoft.WindowsStore_2015.7.1.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\microsoft.windowsstore_2015.7.1.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x236f598 | out: lpFileInformation=0x236f598*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xf2866964, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xf2866964, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0xf2866964, ftLastWriteTime.dwHighDateTime=0x1d2d028, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0216.759] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0216.759] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Microsoft.WindowsStore_2015.7.1.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Microsoft.WindowsStore_2015.7.1.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xaf [0216.759] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0216.759] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Microsoft.WindowsStore_2015.7.1.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\microsoft.windowsstore_2015.7.1.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0216.760] GetFileType (hFile=0x444) returned 0x1 [0216.760] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0216.760] GetFileType (hFile=0x444) returned 0x1 [0216.760] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x0 [0216.760] CloseHandle (hObject=0x444) returned 1 [0216.800] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Microsoft.WindowsStore_2015.7.1.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Microsoft.WindowsStore_2015.7.1.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xaf [0216.800] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0216.801] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Microsoft.WindowsStore_2015.7.1.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\microsoft.windowsstore_2015.7.1.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0216.802] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb070) returned 1 [0216.802] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Microsoft.WindowsStore_2015.7.1.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbcf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Microsoft.WindowsStore_2015.7.1.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xaf [0216.802] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0216.802] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Microsoft.WindowsStore_2015.7.1.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\microsoft.windowsstore_2015.7.1.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x3bc270 | out: lpFileInformation=0x3bc270*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xf2866964, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xf2866964, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0xf2866964, ftLastWriteTime.dwHighDateTime=0x1d2d028, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0216.802] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc150) returned 1 [0216.802] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Microsoft.WindowsStore_2015.7.1.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbd10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Microsoft.WindowsStore_2015.7.1.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xaf [0216.803] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0216.803] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Microsoft.WindowsStore_2015.7.1.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\microsoft.windowsstore_2015.7.1.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x21e57c8 | out: lpFileInformation=0x21e57c8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xf2866964, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xf2866964, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0xf2866964, ftLastWriteTime.dwHighDateTime=0x1d2d028, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0216.803] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc150) returned 1 [0216.803] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Microsoft.WindowsStore_2015.7.1.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Microsoft.WindowsStore_2015.7.1.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xaf [0216.803] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc050) returned 1 [0216.803] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Microsoft.WindowsStore_2015.7.1.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\microsoft.windowsstore_2015.7.1.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0216.803] GetFileType (hFile=0x444) returned 0x1 [0216.803] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbfc0) returned 1 [0216.803] GetFileType (hFile=0x444) returned 0x1 [0216.803] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc1e8 | out: lpFileSizeHigh=0x3bc1e8*=0x0) returned 0x0 [0216.803] CloseHandle (hObject=0x444) returned 1 [0216.814] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Microsoft.WindowsStore_2015.7.1.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Microsoft.WindowsStore_2015.7.1.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xaf [0216.814] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc050) returned 1 [0216.814] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Microsoft.WindowsStore_2015.7.1.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\microsoft.windowsstore_2015.7.1.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0216.816] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8ae0) returned 1 [0216.816] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0216.816] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\RoamingState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\RoamingState", lpFilePart=0x0) returned 0x5e [0216.816] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\RoamingState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\RoamingState\\", lpFilePart=0x0) returned 0x5f [0216.817] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\RoamingState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d78b0 [0216.817] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0216.817] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0216.817] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0216.817] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0216.817] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0216.817] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0216.817] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\RoamingState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\RoamingState", lpFilePart=0x0) returned 0x5e [0216.817] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\RoamingState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\RoamingState\\", lpFilePart=0x0) returned 0x5f [0216.817] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\RoamingState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7a30 [0216.818] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0216.818] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0216.818] FindClose (in: hFindFile=0x5d7a30 | out: hFindFile=0x5d7a30) returned 1 [0216.818] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0216.818] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0216.818] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0216.818] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Settings", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Settings", lpFilePart=0x0) returned 0x5a [0216.818] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Settings\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Settings\\", lpFilePart=0x0) returned 0x5b [0216.818] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Settings\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7c70 [0216.824] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0216.825] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0216.825] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0216.825] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0216.825] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0216.825] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0216.825] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0216.826] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0216.826] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0216.826] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0216.826] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Settings", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Settings", lpFilePart=0x0) returned 0x5a [0216.826] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Settings\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Settings\\", lpFilePart=0x0) returned 0x5b [0216.826] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Settings\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d73d0 [0216.827] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0216.827] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0216.827] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0216.827] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0216.827] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0216.827] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0216.827] FindClose (in: hFindFile=0x5d73d0 | out: hFindFile=0x5d73d0) returned 1 [0216.828] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0216.828] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0216.828] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Settings\\roaming.lock", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Settings\\roaming.lock", lpFilePart=0x0) returned 0x67 [0216.828] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0216.828] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\settings\\roaming.lock"), fInfoLevelId=0x0, lpFileInformation=0x2261a28 | out: lpFileInformation=0x2261a28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf24ace27, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xf24ace27, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0xf24ace27, ftLastWriteTime.dwHighDateTime=0x1d2d028, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0216.829] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0216.829] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Settings\\roaming.lock", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Settings\\roaming.lock", lpFilePart=0x0) returned 0x67 [0216.829] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0216.829] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\settings\\roaming.lock"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0216.829] GetFileType (hFile=0x444) returned 0x1 [0216.829] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0216.829] GetFileType (hFile=0x444) returned 0x1 [0216.829] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0x0 [0216.829] CloseHandle (hObject=0x444) returned 1 [0216.839] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Settings\\roaming.lock", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Settings\\roaming.lock", lpFilePart=0x0) returned 0x67 [0216.839] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0216.839] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\settings\\roaming.lock"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0216.847] GetFileType (hFile=0x444) returned 0x1 [0216.847] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0216.847] GetFileType (hFile=0x444) returned 0x1 [0216.847] WriteFile (in: hFile=0x444, lpBuffer=0x22d7e78*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x3be628, lpOverlapped=0x0 | out: lpBuffer=0x22d7e78*, lpNumberOfBytesWritten=0x3be628*=0x10, lpOverlapped=0x0) returned 1 [0216.848] CloseHandle (hObject=0x444) returned 1 [0216.848] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Settings\\roaming.lock", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Settings\\roaming.lock", lpFilePart=0x0) returned 0x67 [0216.848] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Settings\\roaming.lock.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Settings\\roaming.lock.xuy", lpFilePart=0x0) returned 0x6b [0216.848] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0216.848] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\settings\\roaming.lock"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf24ace27, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xf24ace27, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x6d196da1, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0216.848] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0216.849] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\settings\\roaming.lock"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Settings\\roaming.lock.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\settings\\roaming.lock.xuy")) returned 1 [0216.850] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Settings\\settings.dat", lpFilePart=0x0) returned 0x67 [0216.850] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0216.850] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x22d91a0 | out: lpFileInformation=0x22d91a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf24ace27, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x3c261c50, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x3c261c50, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0216.850] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0216.850] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Settings\\settings.dat", lpFilePart=0x0) returned 0x67 [0216.850] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0216.850] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x22d9328 | out: lpFileInformation=0x22d9328*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf24ace27, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x3c261c50, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x3c261c50, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0216.850] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0216.850] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Settings\\settings.dat", lpFilePart=0x0) returned 0x67 [0216.850] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0216.850] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\settings\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0216.851] GetFileType (hFile=0x444) returned 0x1 [0216.851] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0216.851] GetFileType (hFile=0x444) returned 0x1 [0216.852] ReadFile (in: hFile=0x444, lpBuffer=0x22db768, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x22db768*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0216.875] CloseHandle (hObject=0x444) returned 1 [0216.875] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Settings\\settings.dat", lpFilePart=0x0) returned 0x67 [0216.875] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0216.875] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\settings\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0216.875] GetFileType (hFile=0x444) returned 0x1 [0216.875] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0216.875] GetFileType (hFile=0x444) returned 0x1 [0216.875] WriteFile (in: hFile=0x444, lpBuffer=0x22d9490*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x22d9490*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0216.875] CloseHandle (hObject=0x444) returned 1 [0216.876] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Settings\\settings.dat", lpFilePart=0x0) returned 0x67 [0216.876] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Settings\\settings.dat.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Settings\\settings.dat.xuy", lpFilePart=0x0) returned 0x6b [0216.876] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0216.876] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf24ace27, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x3c261c50, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x6d1e1339, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0216.876] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0216.876] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\settings\\settings.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Settings\\settings.dat.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\settings\\settings.dat.xuy")) returned 1 [0216.877] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Settings\\settings.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Settings\\settings.dat.LOG1", lpFilePart=0x0) returned 0x6c [0216.877] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0216.877] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\settings\\settings.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x2357c00 | out: lpFileInformation=0x2357c00*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1de3d4ad, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x1de3d4ad, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x1de3d4ad, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0216.877] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0216.877] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Settings\\settings.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Settings\\settings.dat.LOG1", lpFilePart=0x0) returned 0x6c [0216.877] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0216.877] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\settings\\settings.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x2357da0 | out: lpFileInformation=0x2357da0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1de3d4ad, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x1de3d4ad, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x1de3d4ad, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0216.878] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0216.878] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Settings\\settings.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Settings\\settings.dat.LOG1", lpFilePart=0x0) returned 0x6c [0216.878] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0216.878] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\settings\\settings.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0216.879] GetFileType (hFile=0x444) returned 0x1 [0216.879] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0216.879] GetFileType (hFile=0x444) returned 0x1 [0216.879] ReadFile (in: hFile=0x444, lpBuffer=0x235a210, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x235a210*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0216.922] CloseHandle (hObject=0x444) returned 1 [0216.922] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Settings\\settings.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Settings\\settings.dat.LOG1", lpFilePart=0x0) returned 0x6c [0216.922] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0216.922] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\settings\\settings.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0216.922] GetFileType (hFile=0x444) returned 0x1 [0216.922] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0216.922] GetFileType (hFile=0x444) returned 0x1 [0216.922] WriteFile (in: hFile=0x444, lpBuffer=0x218b148*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x218b148*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0216.923] CloseHandle (hObject=0x444) returned 1 [0216.923] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Settings\\settings.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Settings\\settings.dat.LOG1", lpFilePart=0x0) returned 0x6c [0216.923] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Settings\\settings.dat.LOG1.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Settings\\settings.dat.LOG1.xuy", lpFilePart=0x0) returned 0x70 [0216.923] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0216.923] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\settings\\settings.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1de3d4ad, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x1de3d4ad, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x6d253ab1, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0216.923] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0216.923] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\settings\\settings.dat.log1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Settings\\settings.dat.LOG1.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\settings\\settings.dat.log1.xuy")) returned 1 [0216.925] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Settings\\settings.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Settings\\settings.dat.LOG2", lpFilePart=0x0) returned 0x6c [0216.925] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0216.925] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\settings\\settings.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x21d9658 | out: lpFileInformation=0x21d9658*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1de3d4ad, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x1de3d4ad, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x1de3d4ad, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0216.927] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0216.927] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Settings\\settings.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Settings\\settings.dat.LOG2", lpFilePart=0x0) returned 0x6c [0216.927] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0216.927] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\settings\\settings.dat.log2"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0216.927] GetFileType (hFile=0x444) returned 0x1 [0216.927] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0216.927] GetFileType (hFile=0x444) returned 0x1 [0216.927] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0x0 [0216.927] CloseHandle (hObject=0x444) returned 1 [0216.937] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Settings\\settings.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Settings\\settings.dat.LOG2", lpFilePart=0x0) returned 0x6c [0216.938] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0216.938] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\settings\\settings.dat.log2"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0216.939] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb0e0) returned 1 [0216.939] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Settings\\settings.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Settings\\settings.dat.LOG2", lpFilePart=0x0) returned 0x6c [0216.939] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc200) returned 1 [0216.939] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\settings\\settings.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x3bc2e0 | out: lpFileInformation=0x3bc2e0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1de3d4ad, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x1de3d4ad, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x1de3d4ad, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0216.939] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1c0) returned 1 [0216.939] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Settings\\settings.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbd80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Settings\\settings.dat.LOG2", lpFilePart=0x0) returned 0x6c [0216.940] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc200) returned 1 [0216.940] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\settings\\settings.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x22503c8 | out: lpFileInformation=0x22503c8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1de3d4ad, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x1de3d4ad, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x1de3d4ad, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0216.940] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1c0) returned 1 [0216.940] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Settings\\settings.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Settings\\settings.dat.LOG2", lpFilePart=0x0) returned 0x6c [0216.940] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0c0) returned 1 [0216.940] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\settings\\settings.dat.log2"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0216.940] GetFileType (hFile=0x444) returned 0x1 [0216.940] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc030) returned 1 [0216.940] GetFileType (hFile=0x444) returned 0x1 [0216.940] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc258 | out: lpFileSizeHigh=0x3bc258*=0x0) returned 0x0 [0216.940] CloseHandle (hObject=0x444) returned 1 [0216.958] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Settings\\settings.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Settings\\settings.dat.LOG2", lpFilePart=0x0) returned 0x6c [0216.958] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0c0) returned 1 [0216.958] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\settings\\settings.dat.log2"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0216.959] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8b50) returned 1 [0216.960] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0216.960] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\SystemAppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\SystemAppData", lpFilePart=0x0) returned 0x5f [0216.960] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\SystemAppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\SystemAppData\\", lpFilePart=0x0) returned 0x60 [0216.960] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\SystemAppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7550 [0216.960] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0216.960] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0216.960] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0216.960] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0216.960] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0216.960] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0216.961] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\SystemAppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\SystemAppData", lpFilePart=0x0) returned 0x5f [0216.961] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\SystemAppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\SystemAppData\\", lpFilePart=0x0) returned 0x60 [0216.961] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\SystemAppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d78b0 [0216.961] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0216.961] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0216.961] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0216.961] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0216.961] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0216.961] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0216.961] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\TempState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\TempState", lpFilePart=0x0) returned 0x5b [0216.961] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\TempState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\TempState\\", lpFilePart=0x0) returned 0x5c [0216.961] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\TempState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7550 [0216.962] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0216.962] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0216.962] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0216.962] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0216.962] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0216.962] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0216.962] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\TempState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\TempState", lpFilePart=0x0) returned 0x5b [0216.962] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\TempState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\TempState\\", lpFilePart=0x0) returned 0x5c [0216.962] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\TempState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7a30 [0216.962] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0216.962] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0216.962] FindClose (in: hFindFile=0x5d7a30 | out: hFindFile=0x5d7a30) returned 1 [0216.962] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0216.963] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0216.963] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0216.963] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe", lpFilePart=0x0) returned 0x4c [0216.963] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\", lpFilePart=0x0) returned 0x4d [0216.963] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d7eb0 [0216.963] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0216.963] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0216.963] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0216.963] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0216.963] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0216.964] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0216.964] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0216.964] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0216.964] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0216.964] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0216.964] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0216.964] FindClose (in: hFindFile=0x5d7eb0 | out: hFindFile=0x5d7eb0) returned 1 [0216.964] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0216.964] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0216.964] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0216.964] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe", lpFilePart=0x0) returned 0x4c [0216.966] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\", lpFilePart=0x0) returned 0x4d [0216.966] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d81b0 [0216.966] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0216.966] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0216.966] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0216.966] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0216.966] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0216.966] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0216.966] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0216.967] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0216.967] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0216.967] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0216.967] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0216.967] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0216.967] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0216.967] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0216.967] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0216.967] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\AC", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\AC", lpFilePart=0x0) returned 0x4f [0216.967] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\AC\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\AC\\", lpFilePart=0x0) returned 0x50 [0216.967] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\AC\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7670 [0216.975] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0216.976] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0216.976] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0216.976] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0216.976] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0216.976] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0216.976] FindClose (in: hFindFile=0x5d7670 | out: hFindFile=0x5d7670) returned 1 [0216.977] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0216.977] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0216.977] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0216.977] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\AC", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\AC", lpFilePart=0x0) returned 0x4f [0216.977] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\AC\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\AC\\", lpFilePart=0x0) returned 0x50 [0216.977] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\AC\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7fd0 [0216.978] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0216.978] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0216.978] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0216.978] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0216.978] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0216.978] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0216.979] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0216.979] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0216.979] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0216.979] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0216.979] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\AC\\INetCache", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\AC\\INetCache", lpFilePart=0x0) returned 0x59 [0216.979] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\AC\\INetCache\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\AC\\INetCache\\", lpFilePart=0x0) returned 0x5a [0216.979] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\AC\\INetCache\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7a90 [0216.982] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0216.982] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0216.982] FindClose (in: hFindFile=0x5d7a90 | out: hFindFile=0x5d7a90) returned 1 [0216.982] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0216.982] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0216.982] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0216.982] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\AC\\INetCache", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\AC\\INetCache", lpFilePart=0x0) returned 0x59 [0216.982] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\AC\\INetCache\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\AC\\INetCache\\", lpFilePart=0x0) returned 0x5a [0216.982] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\AC\\INetCache\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7550 [0216.983] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0216.983] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0216.983] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0216.983] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0216.983] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0216.983] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0216.983] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\AC\\INetCookies", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\AC\\INetCookies", lpFilePart=0x0) returned 0x5b [0216.983] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\AC\\INetCookies\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\AC\\INetCookies\\", lpFilePart=0x0) returned 0x5c [0216.983] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\AC\\INetCookies\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d75b0 [0216.983] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0216.983] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0216.984] FindClose (in: hFindFile=0x5d75b0 | out: hFindFile=0x5d75b0) returned 1 [0216.984] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0216.984] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0216.984] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0216.984] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\AC\\INetCookies", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\AC\\INetCookies", lpFilePart=0x0) returned 0x5b [0216.984] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\AC\\INetCookies\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\AC\\INetCookies\\", lpFilePart=0x0) returned 0x5c [0216.984] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\AC\\INetCookies\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7eb0 [0216.984] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0216.984] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0216.984] FindClose (in: hFindFile=0x5d7eb0 | out: hFindFile=0x5d7eb0) returned 1 [0216.984] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0216.984] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0216.984] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0216.984] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\AC\\INetHistory", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\AC\\INetHistory", lpFilePart=0x0) returned 0x5b [0216.984] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\AC\\INetHistory\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\AC\\INetHistory\\", lpFilePart=0x0) returned 0x5c [0216.984] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\AC\\INetHistory\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d78b0 [0216.985] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0216.985] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0216.985] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0216.985] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0216.985] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0216.985] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0216.985] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\AC\\INetHistory", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\AC\\INetHistory", lpFilePart=0x0) returned 0x5b [0216.985] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\AC\\INetHistory\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\AC\\INetHistory\\", lpFilePart=0x0) returned 0x5c [0216.985] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\AC\\INetHistory\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7c70 [0216.985] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0216.985] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0216.986] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0216.986] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0216.986] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0216.986] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0216.986] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\AC\\Temp", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\AC\\Temp", lpFilePart=0x0) returned 0x54 [0216.986] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\AC\\Temp\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\AC\\Temp\\", lpFilePart=0x0) returned 0x55 [0216.986] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\AC\\Temp\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d8090 [0216.986] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0216.986] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0216.986] FindClose (in: hFindFile=0x5d8090 | out: hFindFile=0x5d8090) returned 1 [0216.986] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0216.986] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0216.987] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0216.987] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\AC\\Temp", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\AC\\Temp", lpFilePart=0x0) returned 0x54 [0216.987] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\AC\\Temp\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\AC\\Temp\\", lpFilePart=0x0) returned 0x55 [0216.987] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\AC\\Temp\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7550 [0216.987] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0216.987] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0216.987] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0216.987] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0216.987] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0216.987] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0216.987] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\AppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\AppData", lpFilePart=0x0) returned 0x54 [0216.987] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\AppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\AppData\\", lpFilePart=0x0) returned 0x55 [0216.987] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\AppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7670 [0216.988] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0216.988] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0216.988] FindClose (in: hFindFile=0x5d7670 | out: hFindFile=0x5d7670) returned 1 [0216.988] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0216.988] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0216.988] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0216.988] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\AppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\AppData", lpFilePart=0x0) returned 0x54 [0216.988] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\AppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\AppData\\", lpFilePart=0x0) returned 0x55 [0216.988] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\AppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d79d0 [0216.988] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0216.988] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0216.988] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0216.988] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0216.988] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0216.988] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0216.989] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\LocalCache", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\LocalCache", lpFilePart=0x0) returned 0x57 [0216.989] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\LocalCache\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\LocalCache\\", lpFilePart=0x0) returned 0x58 [0216.989] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\LocalCache\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d78b0 [0216.989] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0216.989] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0216.989] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0216.989] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0216.989] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0216.989] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0216.989] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\LocalCache", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\LocalCache", lpFilePart=0x0) returned 0x57 [0216.989] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\LocalCache\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\LocalCache\\", lpFilePart=0x0) returned 0x58 [0216.989] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\LocalCache\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7fd0 [0216.989] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0216.990] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0216.990] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0216.990] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0216.990] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0216.990] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0216.990] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\LocalState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\LocalState", lpFilePart=0x0) returned 0x57 [0216.990] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\LocalState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\LocalState\\", lpFilePart=0x0) returned 0x58 [0216.990] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\LocalState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7a90 [0216.990] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0216.990] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0216.990] FindClose (in: hFindFile=0x5d7a90 | out: hFindFile=0x5d7a90) returned 1 [0216.990] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0216.990] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0216.990] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0216.990] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\LocalState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\LocalState", lpFilePart=0x0) returned 0x57 [0216.990] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\LocalState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\LocalState\\", lpFilePart=0x0) returned 0x58 [0216.991] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\LocalState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7c70 [0216.991] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0216.991] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0216.991] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0216.991] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0216.991] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0216.991] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0216.991] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\Microsoft.XboxApp_5.6.17000.0_x64__8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\Microsoft.XboxApp_5.6.17000.0_x64__8wekyb3d8bbwe", lpFilePart=0x0) returned 0x7d [0216.991] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\Microsoft.XboxApp_5.6.17000.0_x64__8wekyb3d8bbwe\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\Microsoft.XboxApp_5.6.17000.0_x64__8wekyb3d8bbwe\\", lpFilePart=0x0) returned 0x7e [0216.991] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\Microsoft.XboxApp_5.6.17000.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7e50 [0216.991] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0216.992] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0216.992] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0216.992] FindClose (in: hFindFile=0x5d7e50 | out: hFindFile=0x5d7e50) returned 1 [0216.992] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0216.992] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0216.992] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0216.992] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\Microsoft.XboxApp_5.6.17000.0_x64__8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\Microsoft.XboxApp_5.6.17000.0_x64__8wekyb3d8bbwe", lpFilePart=0x0) returned 0x7d [0216.992] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\Microsoft.XboxApp_5.6.17000.0_x64__8wekyb3d8bbwe\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\Microsoft.XboxApp_5.6.17000.0_x64__8wekyb3d8bbwe\\", lpFilePart=0x0) returned 0x7e [0216.992] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\Microsoft.XboxApp_5.6.17000.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d78b0 [0216.992] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0216.992] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0216.992] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0216.992] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0216.992] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0216.993] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0216.993] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0216.993] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\Microsoft.XboxApp_5.6.17000.0_x64__8wekyb3d8bbwe\\ActivationStore", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\Microsoft.XboxApp_5.6.17000.0_x64__8wekyb3d8bbwe\\ActivationStore", lpFilePart=0x0) returned 0x8d [0216.993] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\Microsoft.XboxApp_5.6.17000.0_x64__8wekyb3d8bbwe\\ActivationStore\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\Microsoft.XboxApp_5.6.17000.0_x64__8wekyb3d8bbwe\\ActivationStore\\", lpFilePart=0x0) returned 0x8e [0216.993] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\Microsoft.XboxApp_5.6.17000.0_x64__8wekyb3d8bbwe\\ActivationStore\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d79d0 [0216.999] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0217.000] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0217.000] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0217.000] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0217.000] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0217.000] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0217.001] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0217.001] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0217.001] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0217.001] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\Microsoft.XboxApp_5.6.17000.0_x64__8wekyb3d8bbwe\\ActivationStore", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\Microsoft.XboxApp_5.6.17000.0_x64__8wekyb3d8bbwe\\ActivationStore", lpFilePart=0x0) returned 0x8d [0217.001] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\Microsoft.XboxApp_5.6.17000.0_x64__8wekyb3d8bbwe\\ActivationStore\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\Microsoft.XboxApp_5.6.17000.0_x64__8wekyb3d8bbwe\\ActivationStore\\", lpFilePart=0x0) returned 0x8e [0217.001] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\Microsoft.XboxApp_5.6.17000.0_x64__8wekyb3d8bbwe\\ActivationStore\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7550 [0217.001] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0217.002] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0217.002] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0217.002] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0217.002] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0217.002] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0217.003] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0217.003] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0217.003] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\Microsoft.XboxApp_5.6.17000.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\Microsoft.XboxApp_5.6.17000.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xa1 [0217.003] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0217.003] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\Microsoft.XboxApp_5.6.17000.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxapp_8wekyb3d8bbwe\\microsoft.xboxapp_5.6.17000.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), fInfoLevelId=0x0, lpFileInformation=0x22e6298 | out: lpFileInformation=0x22e6298*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf11c9768, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xf12ae5a0, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0xf12ae5a0, ftLastWriteTime.dwHighDateTime=0x1d2d028, nFileSizeHigh=0x0, nFileSizeLow=0x10000)) returned 1 [0217.004] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0217.004] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\Microsoft.XboxApp_5.6.17000.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\Microsoft.XboxApp_5.6.17000.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xa1 [0217.004] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0217.004] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\Microsoft.XboxApp_5.6.17000.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxapp_8wekyb3d8bbwe\\microsoft.xboxapp_5.6.17000.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), fInfoLevelId=0x0, lpFileInformation=0x22e64a0 | out: lpFileInformation=0x22e64a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf11c9768, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xf12ae5a0, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0xf12ae5a0, ftLastWriteTime.dwHighDateTime=0x1d2d028, nFileSizeHigh=0x0, nFileSizeLow=0x10000)) returned 1 [0217.004] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0217.004] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\Microsoft.XboxApp_5.6.17000.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\Microsoft.XboxApp_5.6.17000.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xa1 [0217.004] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0217.004] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\Microsoft.XboxApp_5.6.17000.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxapp_8wekyb3d8bbwe\\microsoft.xboxapp_5.6.17000.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0217.005] GetFileType (hFile=0x444) returned 0x1 [0217.005] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0217.005] GetFileType (hFile=0x444) returned 0x1 [0217.005] ReadFile (in: hFile=0x444, lpBuffer=0x22e89e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x22e89e0*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0217.019] CloseHandle (hObject=0x444) returned 1 [0217.019] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\Microsoft.XboxApp_5.6.17000.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\Microsoft.XboxApp_5.6.17000.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xa1 [0217.020] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0217.020] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\Microsoft.XboxApp_5.6.17000.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxapp_8wekyb3d8bbwe\\microsoft.xboxapp_5.6.17000.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0217.020] GetFileType (hFile=0x444) returned 0x1 [0217.020] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0217.020] GetFileType (hFile=0x444) returned 0x1 [0217.020] WriteFile (in: hFile=0x444, lpBuffer=0x22e6688*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x22e6688*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0217.020] CloseHandle (hObject=0x444) returned 1 [0217.020] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\Microsoft.XboxApp_5.6.17000.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\Microsoft.XboxApp_5.6.17000.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xa1 [0217.020] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\Microsoft.XboxApp_5.6.17000.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\Microsoft.XboxApp_5.6.17000.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.xuy", lpFilePart=0x0) returned 0xa5 [0217.020] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0217.020] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\Microsoft.XboxApp_5.6.17000.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxapp_8wekyb3d8bbwe\\microsoft.xboxapp_5.6.17000.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf11c9768, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xf12ae5a0, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x6d33869e, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x10000)) returned 1 [0217.020] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0217.021] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\Microsoft.XboxApp_5.6.17000.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxapp_8wekyb3d8bbwe\\microsoft.xboxapp_5.6.17000.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\Microsoft.XboxApp_5.6.17000.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxapp_8wekyb3d8bbwe\\microsoft.xboxapp_5.6.17000.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.xuy")) returned 1 [0217.022] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\Microsoft.XboxApp_5.6.17000.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\Microsoft.XboxApp_5.6.17000.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xa6 [0217.022] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0217.022] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\Microsoft.XboxApp_5.6.17000.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxapp_8wekyb3d8bbwe\\microsoft.xboxapp_5.6.17000.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x2365060 | out: lpFileInformation=0x2365060*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xf11ef9ca, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xf11ef9ca, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0xf11ef9ca, ftLastWriteTime.dwHighDateTime=0x1d2d028, nFileSizeHigh=0x0, nFileSizeLow=0x9000)) returned 1 [0217.024] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0217.024] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\Microsoft.XboxApp_5.6.17000.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\Microsoft.XboxApp_5.6.17000.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xa6 [0217.024] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0217.024] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\Microsoft.XboxApp_5.6.17000.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxapp_8wekyb3d8bbwe\\microsoft.xboxapp_5.6.17000.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x2365280 | out: lpFileInformation=0x2365280*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xf11ef9ca, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xf11ef9ca, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0xf11ef9ca, ftLastWriteTime.dwHighDateTime=0x1d2d028, nFileSizeHigh=0x0, nFileSizeLow=0x9000)) returned 1 [0217.024] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0217.024] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\Microsoft.XboxApp_5.6.17000.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\Microsoft.XboxApp_5.6.17000.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xa6 [0217.024] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0217.024] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\Microsoft.XboxApp_5.6.17000.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxapp_8wekyb3d8bbwe\\microsoft.xboxapp_5.6.17000.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0217.025] GetFileType (hFile=0x444) returned 0x1 [0217.025] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0217.025] GetFileType (hFile=0x444) returned 0x1 [0217.025] ReadFile (in: hFile=0x444, lpBuffer=0x23677f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x23677f0*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0217.090] CloseHandle (hObject=0x444) returned 1 [0217.090] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\Microsoft.XboxApp_5.6.17000.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\Microsoft.XboxApp_5.6.17000.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xa6 [0217.090] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0217.090] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\Microsoft.XboxApp_5.6.17000.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxapp_8wekyb3d8bbwe\\microsoft.xboxapp_5.6.17000.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0217.091] GetFileType (hFile=0x444) returned 0x1 [0217.091] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0217.091] GetFileType (hFile=0x444) returned 0x1 [0217.091] WriteFile (in: hFile=0x444, lpBuffer=0x218b220*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x218b220*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0217.091] CloseHandle (hObject=0x444) returned 1 [0217.091] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\Microsoft.XboxApp_5.6.17000.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\Microsoft.XboxApp_5.6.17000.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xa6 [0217.091] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\Microsoft.XboxApp_5.6.17000.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\Microsoft.XboxApp_5.6.17000.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1.xuy", lpFilePart=0x0) returned 0xaa [0217.091] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0217.091] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\Microsoft.XboxApp_5.6.17000.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxapp_8wekyb3d8bbwe\\microsoft.xboxapp_5.6.17000.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xf11ef9ca, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xf11ef9ca, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x6d3f738e, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x9000)) returned 1 [0217.091] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0217.091] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\Microsoft.XboxApp_5.6.17000.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxapp_8wekyb3d8bbwe\\microsoft.xboxapp_5.6.17000.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\Microsoft.XboxApp_5.6.17000.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxapp_8wekyb3d8bbwe\\microsoft.xboxapp_5.6.17000.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1.xuy")) returned 1 [0217.092] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\Microsoft.XboxApp_5.6.17000.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\Microsoft.XboxApp_5.6.17000.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xa6 [0217.092] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0217.093] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\Microsoft.XboxApp_5.6.17000.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxapp_8wekyb3d8bbwe\\microsoft.xboxapp_5.6.17000.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x21e3f60 | out: lpFileInformation=0x21e3f60*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xf11ef9ca, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xf11ef9ca, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0xf11ef9ca, ftLastWriteTime.dwHighDateTime=0x1d2d028, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0217.093] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0217.093] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\Microsoft.XboxApp_5.6.17000.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\Microsoft.XboxApp_5.6.17000.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xa6 [0217.093] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0217.093] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\Microsoft.XboxApp_5.6.17000.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxapp_8wekyb3d8bbwe\\microsoft.xboxapp_5.6.17000.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0217.093] GetFileType (hFile=0x444) returned 0x1 [0217.093] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0217.093] GetFileType (hFile=0x444) returned 0x1 [0217.093] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x0 [0217.093] CloseHandle (hObject=0x444) returned 1 [0217.103] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\Microsoft.XboxApp_5.6.17000.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\Microsoft.XboxApp_5.6.17000.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xa6 [0217.103] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0217.103] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\Microsoft.XboxApp_5.6.17000.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxapp_8wekyb3d8bbwe\\microsoft.xboxapp_5.6.17000.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0217.104] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb070) returned 1 [0217.104] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\Microsoft.XboxApp_5.6.17000.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbcf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\Microsoft.XboxApp_5.6.17000.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xa6 [0217.104] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0217.105] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\Microsoft.XboxApp_5.6.17000.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxapp_8wekyb3d8bbwe\\microsoft.xboxapp_5.6.17000.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x3bc270 | out: lpFileInformation=0x3bc270*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xf11ef9ca, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xf11ef9ca, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0xf11ef9ca, ftLastWriteTime.dwHighDateTime=0x1d2d028, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0217.105] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc150) returned 1 [0217.105] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\Microsoft.XboxApp_5.6.17000.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbd10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\Microsoft.XboxApp_5.6.17000.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xa6 [0217.105] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0217.105] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\Microsoft.XboxApp_5.6.17000.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxapp_8wekyb3d8bbwe\\microsoft.xboxapp_5.6.17000.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x225af30 | out: lpFileInformation=0x225af30*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xf11ef9ca, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xf11ef9ca, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0xf11ef9ca, ftLastWriteTime.dwHighDateTime=0x1d2d028, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0217.105] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc150) returned 1 [0217.105] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\Microsoft.XboxApp_5.6.17000.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\Microsoft.XboxApp_5.6.17000.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xa6 [0217.105] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc050) returned 1 [0217.105] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\Microsoft.XboxApp_5.6.17000.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxapp_8wekyb3d8bbwe\\microsoft.xboxapp_5.6.17000.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0217.107] GetFileType (hFile=0x444) returned 0x1 [0217.107] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbfc0) returned 1 [0217.107] GetFileType (hFile=0x444) returned 0x1 [0217.107] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc1e8 | out: lpFileSizeHigh=0x3bc1e8*=0x0) returned 0x0 [0217.108] CloseHandle (hObject=0x444) returned 1 [0217.118] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\Microsoft.XboxApp_5.6.17000.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\Microsoft.XboxApp_5.6.17000.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xa6 [0217.118] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc050) returned 1 [0217.118] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\Microsoft.XboxApp_5.6.17000.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxapp_8wekyb3d8bbwe\\microsoft.xboxapp_5.6.17000.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0217.119] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8ae0) returned 1 [0217.120] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0217.120] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\RoamingState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\RoamingState", lpFilePart=0x0) returned 0x59 [0217.120] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\RoamingState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\RoamingState\\", lpFilePart=0x0) returned 0x5a [0217.120] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\RoamingState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7fd0 [0217.120] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0217.120] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0217.120] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0217.120] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0217.120] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0217.120] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0217.121] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\RoamingState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\RoamingState", lpFilePart=0x0) returned 0x59 [0217.121] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\RoamingState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\RoamingState\\", lpFilePart=0x0) returned 0x5a [0217.121] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\RoamingState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7af0 [0217.121] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0217.121] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0217.121] FindClose (in: hFindFile=0x5d7af0 | out: hFindFile=0x5d7af0) returned 1 [0217.121] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0217.121] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0217.121] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0217.121] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\Settings", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\Settings", lpFilePart=0x0) returned 0x55 [0217.121] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\Settings\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\Settings\\", lpFilePart=0x0) returned 0x56 [0217.122] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\Settings\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7eb0 [0217.122] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0217.122] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0217.122] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0217.122] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0217.122] FindClose (in: hFindFile=0x5d7eb0 | out: hFindFile=0x5d7eb0) returned 1 [0217.122] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\Settings", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\Settings", lpFilePart=0x0) returned 0x55 [0217.122] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\Settings\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\Settings\\", lpFilePart=0x0) returned 0x56 [0217.122] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\Settings\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d79d0 [0217.123] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0217.123] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0217.123] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0217.123] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0217.123] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0217.123] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\Settings\\roaming.lock", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\Settings\\roaming.lock", lpFilePart=0x0) returned 0x62 [0217.123] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxapp_8wekyb3d8bbwe\\settings\\roaming.lock"), fInfoLevelId=0x0, lpFileInformation=0x22d6360 | out: lpFileInformation=0x22d6360*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0fb3580, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xf0fb3580, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0xf0fb3580, ftLastWriteTime.dwHighDateTime=0x1d2d028, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0217.123] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\Settings\\roaming.lock", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\Settings\\roaming.lock", lpFilePart=0x0) returned 0x62 [0217.123] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxapp_8wekyb3d8bbwe\\settings\\roaming.lock"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0217.124] GetFileType (hFile=0x444) returned 0x1 [0217.124] GetFileType (hFile=0x444) returned 0x1 [0217.124] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0x0 [0217.124] CloseHandle (hObject=0x444) returned 1 [0217.134] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\Settings\\roaming.lock", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\Settings\\roaming.lock", lpFilePart=0x0) returned 0x62 [0217.134] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxapp_8wekyb3d8bbwe\\settings\\roaming.lock"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0217.135] GetFileType (hFile=0x444) returned 0x1 [0217.135] GetFileType (hFile=0x444) returned 0x1 [0217.135] WriteFile (in: hFile=0x444, lpBuffer=0x234c798*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x3be628, lpOverlapped=0x0 | out: lpBuffer=0x234c798*, lpNumberOfBytesWritten=0x3be628*=0x10, lpOverlapped=0x0) returned 1 [0217.136] CloseHandle (hObject=0x444) returned 1 [0217.140] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\Settings\\roaming.lock", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\Settings\\roaming.lock", lpFilePart=0x0) returned 0x62 [0217.140] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\Settings\\roaming.lock.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\Settings\\roaming.lock.xuy", lpFilePart=0x0) returned 0x66 [0217.140] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxapp_8wekyb3d8bbwe\\settings\\roaming.lock"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0fb3580, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xf0fb3580, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x6d4437b7, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0217.140] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxapp_8wekyb3d8bbwe\\settings\\roaming.lock"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\Settings\\roaming.lock.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxapp_8wekyb3d8bbwe\\settings\\roaming.lock.xuy")) returned 1 [0217.141] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\Settings\\settings.dat", lpFilePart=0x0) returned 0x62 [0217.141] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxapp_8wekyb3d8bbwe\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x234daa8 | out: lpFileInformation=0x234daa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0fb3580, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xf0fb3580, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x8d6f5917, ftLastWriteTime.dwHighDateTime=0x1d0baff, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0217.141] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\Settings\\settings.dat", lpFilePart=0x0) returned 0x62 [0217.141] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxapp_8wekyb3d8bbwe\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x234dc28 | out: lpFileInformation=0x234dc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0fb3580, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xf0fb3580, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x8d6f5917, ftLastWriteTime.dwHighDateTime=0x1d0baff, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0217.141] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\Settings\\settings.dat", lpFilePart=0x0) returned 0x62 [0217.141] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxapp_8wekyb3d8bbwe\\settings\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0217.142] GetFileType (hFile=0x444) returned 0x1 [0217.142] GetFileType (hFile=0x444) returned 0x1 [0217.142] ReadFile (in: hFile=0x444, lpBuffer=0x2350058, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x2350058*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0217.189] CloseHandle (hObject=0x444) returned 1 [0217.190] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\Settings\\settings.dat", lpFilePart=0x0) returned 0x62 [0217.190] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxapp_8wekyb3d8bbwe\\settings\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0217.190] GetFileType (hFile=0x444) returned 0x1 [0217.190] GetFileType (hFile=0x444) returned 0x1 [0217.190] WriteFile (in: hFile=0x444, lpBuffer=0x218aea8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x218aea8*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0217.190] CloseHandle (hObject=0x444) returned 1 [0217.190] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\Settings\\settings.dat", lpFilePart=0x0) returned 0x62 [0217.190] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\Settings\\settings.dat.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\Settings\\settings.dat.xuy", lpFilePart=0x0) returned 0x66 [0217.191] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxapp_8wekyb3d8bbwe\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0fb3580, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xf0fb3580, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x6d4dc25a, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0217.191] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxapp_8wekyb3d8bbwe\\settings\\settings.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\Settings\\settings.dat.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxapp_8wekyb3d8bbwe\\settings\\settings.dat.xuy")) returned 1 [0217.192] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\SystemAppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\SystemAppData", lpFilePart=0x0) returned 0x5a [0217.192] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\SystemAppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\SystemAppData\\", lpFilePart=0x0) returned 0x5b [0217.192] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\SystemAppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7c70 [0217.192] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0217.192] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0217.193] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0217.193] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\SystemAppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\SystemAppData", lpFilePart=0x0) returned 0x5a [0217.193] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\SystemAppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\SystemAppData\\", lpFilePart=0x0) returned 0x5b [0217.193] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\SystemAppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d78b0 [0217.193] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0217.193] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0217.193] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0217.193] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\TempState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\TempState", lpFilePart=0x0) returned 0x56 [0217.193] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\TempState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\TempState\\", lpFilePart=0x0) returned 0x57 [0217.193] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\TempState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d78b0 [0217.193] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0217.194] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0217.194] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0217.194] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\TempState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\TempState", lpFilePart=0x0) returned 0x56 [0217.194] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\TempState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\TempState\\", lpFilePart=0x0) returned 0x57 [0217.194] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\TempState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d78b0 [0217.194] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0217.194] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0217.194] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0217.194] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy", lpFilePart=0x0) returned 0x57 [0217.194] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\", lpFilePart=0x0) returned 0x58 [0217.194] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d79d0 [0217.200] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0217.200] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0217.200] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0217.200] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0217.200] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0217.200] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0217.200] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0217.200] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0217.200] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0217.200] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0217.200] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0217.201] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0217.201] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy", lpFilePart=0x0) returned 0x57 [0217.201] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\", lpFilePart=0x0) returned 0x58 [0217.201] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d79d0 [0217.202] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0217.202] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0217.202] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0217.202] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0217.202] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0217.203] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0217.203] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0217.203] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0217.203] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0217.203] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0217.203] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0217.203] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0217.204] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\AC", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\AC", lpFilePart=0x0) returned 0x5a [0217.204] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\AC\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\AC\\", lpFilePart=0x0) returned 0x5b [0217.204] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\AC\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7d30 [0217.216] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0217.216] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0217.216] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0217.216] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0217.216] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0217.217] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0217.217] FindClose (in: hFindFile=0x5d7d30 | out: hFindFile=0x5d7d30) returned 1 [0217.217] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\AC", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\AC", lpFilePart=0x0) returned 0x5a [0217.217] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\AC\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\AC\\", lpFilePart=0x0) returned 0x5b [0217.217] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\AC\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7cd0 [0217.218] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0217.218] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0217.218] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0217.218] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0217.219] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0217.219] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0217.219] FindClose (in: hFindFile=0x5d7cd0 | out: hFindFile=0x5d7cd0) returned 1 [0217.219] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\AC\\INetCache", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\AC\\INetCache", lpFilePart=0x0) returned 0x64 [0217.219] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\AC\\INetCache\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\AC\\INetCache\\", lpFilePart=0x0) returned 0x65 [0217.219] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\AC\\INetCache\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7d30 [0217.222] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0217.222] FindNextFileW (in: hFindFile=0x5d7d30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0217.222] FindClose (in: hFindFile=0x5d7d30 | out: hFindFile=0x5d7d30) returned 1 [0217.222] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\AC\\INetCache", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\AC\\INetCache", lpFilePart=0x0) returned 0x64 [0217.222] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\AC\\INetCache\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\AC\\INetCache\\", lpFilePart=0x0) returned 0x65 [0217.222] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\AC\\INetCache\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7c70 [0217.222] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0217.222] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0217.222] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0217.222] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\AC\\INetCookies", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\AC\\INetCookies", lpFilePart=0x0) returned 0x66 [0217.222] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\AC\\INetCookies\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\AC\\INetCookies\\", lpFilePart=0x0) returned 0x67 [0217.222] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\AC\\INetCookies\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d8090 [0217.223] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0217.223] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0217.223] FindClose (in: hFindFile=0x5d8090 | out: hFindFile=0x5d8090) returned 1 [0217.223] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\AC\\INetCookies", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\AC\\INetCookies", lpFilePart=0x0) returned 0x66 [0217.223] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\AC\\INetCookies\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\AC\\INetCookies\\", lpFilePart=0x0) returned 0x67 [0217.223] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\AC\\INetCookies\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d78b0 [0217.223] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0217.223] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0217.223] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0217.224] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\AC\\INetHistory", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\AC\\INetHistory", lpFilePart=0x0) returned 0x66 [0217.224] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\AC\\INetHistory\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\AC\\INetHistory\\", lpFilePart=0x0) returned 0x67 [0217.224] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\AC\\INetHistory\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d79d0 [0217.224] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0217.224] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0217.224] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0217.224] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\AC\\INetHistory", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\AC\\INetHistory", lpFilePart=0x0) returned 0x66 [0217.224] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\AC\\INetHistory\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\AC\\INetHistory\\", lpFilePart=0x0) returned 0x67 [0217.224] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\AC\\INetHistory\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7cd0 [0217.224] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0217.224] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0217.225] FindClose (in: hFindFile=0x5d7cd0 | out: hFindFile=0x5d7cd0) returned 1 [0217.225] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\AC\\Temp", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\AC\\Temp", lpFilePart=0x0) returned 0x5f [0217.225] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\AC\\Temp\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\AC\\Temp\\", lpFilePart=0x0) returned 0x60 [0217.225] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\AC\\Temp\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d78b0 [0217.225] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0217.225] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0217.225] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0217.225] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\AC\\Temp", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\AC\\Temp", lpFilePart=0x0) returned 0x5f [0217.225] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\AC\\Temp\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\AC\\Temp\\", lpFilePart=0x0) returned 0x60 [0217.225] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\AC\\Temp\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d79d0 [0217.225] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0217.226] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0217.226] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0217.226] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\AppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\AppData", lpFilePart=0x0) returned 0x5f [0217.226] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\AppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\AppData\\", lpFilePart=0x0) returned 0x60 [0217.226] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\AppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7eb0 [0217.226] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0217.226] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0217.226] FindClose (in: hFindFile=0x5d7eb0 | out: hFindFile=0x5d7eb0) returned 1 [0217.226] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\AppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\AppData", lpFilePart=0x0) returned 0x5f [0217.226] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\AppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\AppData\\", lpFilePart=0x0) returned 0x60 [0217.226] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\AppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d78b0 [0217.227] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0217.227] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0217.227] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0217.227] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\LocalCache", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\LocalCache", lpFilePart=0x0) returned 0x62 [0217.227] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\LocalCache\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\LocalCache\\", lpFilePart=0x0) returned 0x63 [0217.227] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\LocalCache\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d81b0 [0217.233] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0217.233] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0217.233] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0217.233] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\LocalCache", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\LocalCache", lpFilePart=0x0) returned 0x62 [0217.234] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\LocalCache\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\LocalCache\\", lpFilePart=0x0) returned 0x63 [0217.234] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\LocalCache\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7370 [0217.234] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0217.234] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0217.234] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0217.234] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\LocalState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\LocalState", lpFilePart=0x0) returned 0x62 [0217.234] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\LocalState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\LocalState\\", lpFilePart=0x0) returned 0x63 [0217.234] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\LocalState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d8090 [0217.234] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0217.234] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0217.235] FindClose (in: hFindFile=0x5d8090 | out: hFindFile=0x5d8090) returned 1 [0217.235] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\LocalState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\LocalState", lpFilePart=0x0) returned 0x62 [0217.235] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\LocalState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\LocalState\\", lpFilePart=0x0) returned 0x63 [0217.235] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\LocalState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7610 [0217.235] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0217.235] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0217.235] FindClose (in: hFindFile=0x5d7610 | out: hFindFile=0x5d7610) returned 1 [0217.235] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Microsoft.XboxGameCallableUI_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Microsoft.XboxGameCallableUI_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy", lpFilePart=0x0) returned 0xa5 [0217.235] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Microsoft.XboxGameCallableUI_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Microsoft.XboxGameCallableUI_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\", lpFilePart=0x0) returned 0xa6 [0217.235] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Microsoft.XboxGameCallableUI_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d78b0 [0217.236] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0217.236] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0217.236] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0217.236] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0217.236] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Microsoft.XboxGameCallableUI_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Microsoft.XboxGameCallableUI_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy", lpFilePart=0x0) returned 0xa5 [0217.236] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Microsoft.XboxGameCallableUI_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Microsoft.XboxGameCallableUI_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\", lpFilePart=0x0) returned 0xa6 [0217.236] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Microsoft.XboxGameCallableUI_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7d90 [0217.236] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0217.236] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0217.236] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0217.236] FindClose (in: hFindFile=0x5d7d90 | out: hFindFile=0x5d7d90) returned 1 [0217.237] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Microsoft.XboxGameCallableUI_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Microsoft.XboxGameCallableUI_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore", lpFilePart=0x0) returned 0xb5 [0217.237] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Microsoft.XboxGameCallableUI_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Microsoft.XboxGameCallableUI_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\", lpFilePart=0x0) returned 0xb6 [0217.237] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Microsoft.XboxGameCallableUI_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7550 [0217.253] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0217.253] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0217.253] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0217.254] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0217.254] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0217.254] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0217.254] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Microsoft.XboxGameCallableUI_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Microsoft.XboxGameCallableUI_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore", lpFilePart=0x0) returned 0xb5 [0217.255] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Microsoft.XboxGameCallableUI_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Microsoft.XboxGameCallableUI_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\", lpFilePart=0x0) returned 0xb6 [0217.255] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Microsoft.XboxGameCallableUI_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d8090 [0217.255] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0217.255] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0217.256] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0217.256] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0217.256] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0217.256] FindClose (in: hFindFile=0x5d8090 | out: hFindFile=0x5d8090) returned 1 [0217.256] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Microsoft.XboxGameCallableUI_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Microsoft.XboxGameCallableUI_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xc9 [0217.256] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Microsoft.XboxGameCallableUI_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\microsoft.xboxgamecallableui_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat"), fInfoLevelId=0x0, lpFileInformation=0x21ee1a0 | out: lpFileInformation=0x21ee1a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbf49f6c, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xbbfbc677, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xbbfbc677, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x4000)) returned 1 [0217.257] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Microsoft.XboxGameCallableUI_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Microsoft.XboxGameCallableUI_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xc9 [0217.257] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Microsoft.XboxGameCallableUI_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\microsoft.xboxgamecallableui_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat"), fInfoLevelId=0x0, lpFileInformation=0x21ee3f8 | out: lpFileInformation=0x21ee3f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbf49f6c, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xbbfbc677, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xbbfbc677, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x4000)) returned 1 [0217.257] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Microsoft.XboxGameCallableUI_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Microsoft.XboxGameCallableUI_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xc9 [0217.257] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Microsoft.XboxGameCallableUI_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\microsoft.xboxgamecallableui_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0217.258] GetFileType (hFile=0x444) returned 0x1 [0217.259] GetFileType (hFile=0x444) returned 0x1 [0217.259] ReadFile (in: hFile=0x444, lpBuffer=0x21f09d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x21f09d8*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0217.446] CloseHandle (hObject=0x444) returned 1 [0217.446] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Microsoft.XboxGameCallableUI_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Microsoft.XboxGameCallableUI_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xc9 [0217.446] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Microsoft.XboxGameCallableUI_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\microsoft.xboxgamecallableui_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0217.446] GetFileType (hFile=0x444) returned 0x1 [0217.447] GetFileType (hFile=0x444) returned 0x1 [0217.447] WriteFile (in: hFile=0x444, lpBuffer=0x21ee630*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x21ee630*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0217.447] CloseHandle (hObject=0x444) returned 1 [0217.447] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Microsoft.XboxGameCallableUI_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Microsoft.XboxGameCallableUI_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xc9 [0217.447] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Microsoft.XboxGameCallableUI_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Microsoft.XboxGameCallableUI_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.xuy", lpFilePart=0x0) returned 0xcd [0217.447] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Microsoft.XboxGameCallableUI_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\microsoft.xboxgamecallableui_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbf49f6c, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xbbfbc677, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x6d73e548, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x4000)) returned 1 [0217.447] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Microsoft.XboxGameCallableUI_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\microsoft.xboxgamecallableui_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Microsoft.XboxGameCallableUI_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\microsoft.xboxgamecallableui_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.xuy")) returned 1 [0217.449] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Microsoft.XboxGameCallableUI_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Microsoft.XboxGameCallableUI_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xce [0217.449] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Microsoft.XboxGameCallableUI_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\microsoft.xboxgamecallableui_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x226d198 | out: lpFileInformation=0x226d198*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xbbf49f6c, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xbbf49f6c, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xbbf49f6c, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x4000)) returned 1 [0217.449] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Microsoft.XboxGameCallableUI_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Microsoft.XboxGameCallableUI_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xce [0217.449] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Microsoft.XboxGameCallableUI_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\microsoft.xboxgamecallableui_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x226d408 | out: lpFileInformation=0x226d408*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xbbf49f6c, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xbbf49f6c, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xbbf49f6c, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x4000)) returned 1 [0217.449] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Microsoft.XboxGameCallableUI_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Microsoft.XboxGameCallableUI_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xce [0217.449] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Microsoft.XboxGameCallableUI_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\microsoft.xboxgamecallableui_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0217.450] GetFileType (hFile=0x444) returned 0x1 [0217.450] GetFileType (hFile=0x444) returned 0x1 [0217.450] ReadFile (in: hFile=0x444, lpBuffer=0x226fa18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x226fa18*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0217.630] CloseHandle (hObject=0x444) returned 1 [0217.630] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Microsoft.XboxGameCallableUI_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Microsoft.XboxGameCallableUI_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xce [0217.630] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Microsoft.XboxGameCallableUI_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\microsoft.xboxgamecallableui_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0217.631] GetFileType (hFile=0x444) returned 0x1 [0217.631] GetFileType (hFile=0x444) returned 0x1 [0217.631] WriteFile (in: hFile=0x444, lpBuffer=0x226d658*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x226d658*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0217.631] CloseHandle (hObject=0x444) returned 1 [0217.631] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Microsoft.XboxGameCallableUI_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Microsoft.XboxGameCallableUI_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xce [0217.631] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Microsoft.XboxGameCallableUI_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Microsoft.XboxGameCallableUI_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1.xuy", lpFilePart=0x0) returned 0xd2 [0217.631] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Microsoft.XboxGameCallableUI_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\microsoft.xboxgamecallableui_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xbbf49f6c, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xbbf49f6c, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x6d9082dc, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x4000)) returned 1 [0217.631] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Microsoft.XboxGameCallableUI_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\microsoft.xboxgamecallableui_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Microsoft.XboxGameCallableUI_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\microsoft.xboxgamecallableui_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log1.xuy")) returned 1 [0217.633] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Microsoft.XboxGameCallableUI_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Microsoft.XboxGameCallableUI_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xce [0217.633] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Microsoft.XboxGameCallableUI_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\microsoft.xboxgamecallableui_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x22ec208 | out: lpFileInformation=0x22ec208*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xbbf49f6c, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xbbf49f6c, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xbbf49f6c, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0217.633] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Microsoft.XboxGameCallableUI_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Microsoft.XboxGameCallableUI_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xce [0217.634] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Microsoft.XboxGameCallableUI_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\microsoft.xboxgamecallableui_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0217.634] GetFileType (hFile=0x444) returned 0x1 [0217.634] GetFileType (hFile=0x444) returned 0x1 [0217.634] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x0 [0217.634] CloseHandle (hObject=0x444) returned 1 [0217.647] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Microsoft.XboxGameCallableUI_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Microsoft.XboxGameCallableUI_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xce [0217.647] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Microsoft.XboxGameCallableUI_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\microsoft.xboxgamecallableui_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0217.649] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb070) returned 1 [0217.649] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Microsoft.XboxGameCallableUI_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbcf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Microsoft.XboxGameCallableUI_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xce [0217.649] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0217.649] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Microsoft.XboxGameCallableUI_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\microsoft.xboxgamecallableui_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x3bc270 | out: lpFileInformation=0x3bc270*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xbbf49f6c, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xbbf49f6c, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xbbf49f6c, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0217.649] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc150) returned 1 [0217.649] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Microsoft.XboxGameCallableUI_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbd10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Microsoft.XboxGameCallableUI_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xce [0217.649] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0217.650] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Microsoft.XboxGameCallableUI_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\microsoft.xboxgamecallableui_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x2363368 | out: lpFileInformation=0x2363368*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xbbf49f6c, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xbbf49f6c, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xbbf49f6c, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0217.650] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc150) returned 1 [0217.650] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Microsoft.XboxGameCallableUI_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Microsoft.XboxGameCallableUI_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xce [0217.650] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc050) returned 1 [0217.650] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Microsoft.XboxGameCallableUI_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\microsoft.xboxgamecallableui_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0217.650] GetFileType (hFile=0x444) returned 0x1 [0217.650] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbfc0) returned 1 [0217.650] GetFileType (hFile=0x444) returned 0x1 [0217.650] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc1e8 | out: lpFileSizeHigh=0x3bc1e8*=0x0) returned 0x0 [0217.650] CloseHandle (hObject=0x444) returned 1 [0217.698] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Microsoft.XboxGameCallableUI_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Microsoft.XboxGameCallableUI_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xce [0217.698] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc050) returned 1 [0217.698] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Microsoft.XboxGameCallableUI_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\microsoft.xboxgamecallableui_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0217.708] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8ae0) returned 1 [0217.709] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0217.709] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\RoamingState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\RoamingState", lpFilePart=0x0) returned 0x64 [0217.709] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\RoamingState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\RoamingState\\", lpFilePart=0x0) returned 0x65 [0217.709] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\RoamingState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d81b0 [0217.709] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0217.709] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0217.709] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0217.710] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0217.710] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0217.710] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0217.710] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\RoamingState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\RoamingState", lpFilePart=0x0) returned 0x64 [0217.710] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\RoamingState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\RoamingState\\", lpFilePart=0x0) returned 0x65 [0217.710] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\RoamingState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d78b0 [0217.710] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0217.710] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0217.710] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0217.710] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0217.710] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0217.710] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0217.710] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Settings", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Settings", lpFilePart=0x0) returned 0x60 [0217.710] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Settings\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Settings\\", lpFilePart=0x0) returned 0x61 [0217.710] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Settings\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d78b0 [0217.713] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0217.713] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0217.713] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0217.713] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0217.713] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0217.713] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0217.713] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0217.714] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0217.714] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0217.714] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0217.714] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Settings", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Settings", lpFilePart=0x0) returned 0x60 [0217.714] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Settings\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Settings\\", lpFilePart=0x0) returned 0x61 [0217.714] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Settings\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d81b0 [0217.715] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0217.715] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0217.716] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0217.716] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0217.716] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0217.716] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0217.716] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0217.717] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0217.717] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0217.717] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Settings\\roaming.lock", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Settings\\roaming.lock", lpFilePart=0x0) returned 0x6d [0217.717] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0217.717] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\settings\\roaming.lock"), fInfoLevelId=0x0, lpFileInformation=0x21dcfc8 | out: lpFileInformation=0x21dcfc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbe18c8f, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xbbe18c8f, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xbbe18c8f, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0217.719] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0217.719] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Settings\\roaming.lock", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Settings\\roaming.lock", lpFilePart=0x0) returned 0x6d [0217.719] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0217.719] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\settings\\roaming.lock"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0217.719] GetFileType (hFile=0x444) returned 0x1 [0217.719] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0217.719] GetFileType (hFile=0x444) returned 0x1 [0217.719] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0x0 [0217.719] CloseHandle (hObject=0x444) returned 1 [0217.731] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Settings\\roaming.lock", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Settings\\roaming.lock", lpFilePart=0x0) returned 0x6d [0217.731] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0217.731] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\settings\\roaming.lock"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0217.732] GetFileType (hFile=0x444) returned 0x1 [0217.732] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0217.732] GetFileType (hFile=0x444) returned 0x1 [0217.732] WriteFile (in: hFile=0x444, lpBuffer=0x2253448*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x3be628, lpOverlapped=0x0 | out: lpBuffer=0x2253448*, lpNumberOfBytesWritten=0x3be628*=0x10, lpOverlapped=0x0) returned 1 [0217.733] CloseHandle (hObject=0x444) returned 1 [0217.733] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Settings\\roaming.lock", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Settings\\roaming.lock", lpFilePart=0x0) returned 0x6d [0217.733] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Settings\\roaming.lock.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Settings\\roaming.lock.xuy", lpFilePart=0x0) returned 0x71 [0217.733] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0217.733] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\settings\\roaming.lock"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbe18c8f, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xbbe18c8f, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x6da13608, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0217.733] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0217.733] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\settings\\roaming.lock"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Settings\\roaming.lock.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\settings\\roaming.lock.xuy")) returned 1 [0217.735] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Settings\\settings.dat", lpFilePart=0x0) returned 0x6d [0217.735] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0217.735] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x22547a0 | out: lpFileInformation=0x22547a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbe18c8f, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0x78860cef, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x78860cef, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0217.735] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0217.735] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Settings\\settings.dat", lpFilePart=0x0) returned 0x6d [0217.735] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0217.735] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x2254938 | out: lpFileInformation=0x2254938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbe18c8f, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0x78860cef, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x78860cef, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0217.735] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0217.735] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Settings\\settings.dat", lpFilePart=0x0) returned 0x6d [0217.735] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0217.735] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\settings\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0217.736] GetFileType (hFile=0x444) returned 0x1 [0217.736] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0217.736] GetFileType (hFile=0x444) returned 0x1 [0217.736] ReadFile (in: hFile=0x444, lpBuffer=0x2256d98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x2256d98*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0217.802] CloseHandle (hObject=0x444) returned 1 [0217.802] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Settings\\settings.dat", lpFilePart=0x0) returned 0x6d [0217.802] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0217.802] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\settings\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0217.803] GetFileType (hFile=0x444) returned 0x1 [0217.803] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0217.803] GetFileType (hFile=0x444) returned 0x1 [0217.803] WriteFile (in: hFile=0x444, lpBuffer=0x2254ab0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x2254ab0*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0217.803] CloseHandle (hObject=0x444) returned 1 [0217.803] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Settings\\settings.dat", lpFilePart=0x0) returned 0x6d [0217.803] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Settings\\settings.dat.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Settings\\settings.dat.xuy", lpFilePart=0x0) returned 0x71 [0217.803] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0217.803] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbe18c8f, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0x78860cef, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x6daabbf9, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0217.803] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0217.803] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\settings\\settings.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Settings\\settings.dat.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\settings\\settings.dat.xuy")) returned 1 [0217.806] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", lpFilePart=0x0) returned 0x72 [0217.806] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0217.806] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\settings\\settings.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x22d3270 | out: lpFileInformation=0x22d3270*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x787a2105, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x787a2105, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x787a2105, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0217.806] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0217.806] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", lpFilePart=0x0) returned 0x72 [0217.806] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0217.806] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\settings\\settings.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x22d3418 | out: lpFileInformation=0x22d3418*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x787a2105, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x787a2105, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x787a2105, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0217.806] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0217.806] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", lpFilePart=0x0) returned 0x72 [0217.806] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0217.806] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\settings\\settings.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0217.808] GetFileType (hFile=0x444) returned 0x1 [0217.809] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0217.809] GetFileType (hFile=0x444) returned 0x1 [0217.809] ReadFile (in: hFile=0x444, lpBuffer=0x22d5898, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x22d5898*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0217.827] CloseHandle (hObject=0x444) returned 1 [0217.827] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", lpFilePart=0x0) returned 0x72 [0217.827] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0217.827] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\settings\\settings.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0217.827] GetFileType (hFile=0x444) returned 0x1 [0217.827] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0217.827] GetFileType (hFile=0x444) returned 0x1 [0217.827] WriteFile (in: hFile=0x444, lpBuffer=0x22d35a0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x22d35a0*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0217.827] CloseHandle (hObject=0x444) returned 1 [0218.021] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", lpFilePart=0x0) returned 0x72 [0218.022] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Settings\\settings.dat.LOG1.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Settings\\settings.dat.LOG1.xuy", lpFilePart=0x0) returned 0x76 [0218.022] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0218.022] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\settings\\settings.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x787a2105, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x787a2105, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x6daf8190, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0218.022] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0218.022] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\settings\\settings.dat.log1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Settings\\settings.dat.LOG1.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\settings\\settings.dat.log1.xuy")) returned 1 [0218.023] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", lpFilePart=0x0) returned 0x72 [0218.023] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0218.023] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\settings\\settings.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x2351d98 | out: lpFileInformation=0x2351d98*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x787a2105, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x787a2105, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x787a2105, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0218.024] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0218.024] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", lpFilePart=0x0) returned 0x72 [0218.024] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0218.024] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\settings\\settings.dat.log2"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0218.024] GetFileType (hFile=0x444) returned 0x1 [0218.024] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0218.024] GetFileType (hFile=0x444) returned 0x1 [0218.024] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0x0 [0218.024] CloseHandle (hObject=0x444) returned 1 [0218.037] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", lpFilePart=0x0) returned 0x72 [0218.037] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0218.037] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\settings\\settings.dat.log2"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0218.039] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb0e0) returned 1 [0218.039] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", lpFilePart=0x0) returned 0x72 [0218.039] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc200) returned 1 [0218.039] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\settings\\settings.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x3bc2e0 | out: lpFileInformation=0x3bc2e0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x787a2105, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x787a2105, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x787a2105, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0218.039] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1c0) returned 1 [0218.039] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbd80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", lpFilePart=0x0) returned 0x72 [0218.039] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc200) returned 1 [0218.039] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\settings\\settings.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x21c8658 | out: lpFileInformation=0x21c8658*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x787a2105, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x787a2105, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x787a2105, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0218.039] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1c0) returned 1 [0218.040] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", lpFilePart=0x0) returned 0x72 [0218.040] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0c0) returned 1 [0218.040] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\settings\\settings.dat.log2"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0218.040] GetFileType (hFile=0x444) returned 0x1 [0218.040] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc030) returned 1 [0218.040] GetFileType (hFile=0x444) returned 0x1 [0218.040] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc258 | out: lpFileSizeHigh=0x3bc258*=0x0) returned 0x0 [0218.040] CloseHandle (hObject=0x444) returned 1 [0218.075] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", lpFilePart=0x0) returned 0x72 [0218.075] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0c0) returned 1 [0218.076] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\settings\\settings.dat.log2"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0218.077] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8b50) returned 1 [0218.078] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0218.078] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\SystemAppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\SystemAppData", lpFilePart=0x0) returned 0x65 [0218.078] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\SystemAppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\SystemAppData\\", lpFilePart=0x0) returned 0x66 [0218.078] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\SystemAppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d79d0 [0218.078] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0218.078] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0218.078] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0218.078] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0218.078] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0218.078] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0218.078] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\SystemAppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\SystemAppData", lpFilePart=0x0) returned 0x65 [0218.079] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\SystemAppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\SystemAppData\\", lpFilePart=0x0) returned 0x66 [0218.079] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\SystemAppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d78b0 [0218.079] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0218.079] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0218.079] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0218.079] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0218.079] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0218.079] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0218.079] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\TempState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\TempState", lpFilePart=0x0) returned 0x61 [0218.079] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\TempState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\TempState\\", lpFilePart=0x0) returned 0x62 [0218.079] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\TempState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7a30 [0218.079] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0218.080] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0218.080] FindClose (in: hFindFile=0x5d7a30 | out: hFindFile=0x5d7a30) returned 1 [0218.080] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0218.080] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0218.080] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0218.080] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\TempState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\TempState", lpFilePart=0x0) returned 0x61 [0218.080] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\TempState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\TempState\\", lpFilePart=0x0) returned 0x62 [0218.080] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\TempState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d79d0 [0218.080] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0218.080] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0218.080] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0218.080] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0218.080] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0218.080] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0218.081] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy", lpFilePart=0x0) returned 0x59 [0218.081] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\", lpFilePart=0x0) returned 0x5a [0218.081] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d7550 [0218.081] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0218.081] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0218.081] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0218.081] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0218.081] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0218.081] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0218.082] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0218.082] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0218.082] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0218.082] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0218.082] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0218.082] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0218.082] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0218.082] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0218.082] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0218.082] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy", lpFilePart=0x0) returned 0x59 [0218.082] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\", lpFilePart=0x0) returned 0x5a [0218.083] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d7e50 [0218.083] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0218.083] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0218.083] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0218.083] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0218.083] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0218.083] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0218.083] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0218.083] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0218.084] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0218.084] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0218.084] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0218.084] FindClose (in: hFindFile=0x5d7e50 | out: hFindFile=0x5d7e50) returned 1 [0218.084] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0218.084] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0218.084] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0218.084] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\AC", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\AC", lpFilePart=0x0) returned 0x5c [0218.084] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\AC\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\AC\\", lpFilePart=0x0) returned 0x5d [0218.084] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\AC\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7370 [0218.085] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0218.085] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0218.085] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0218.085] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0218.085] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0218.085] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0218.086] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0218.086] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0218.086] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0218.086] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0218.086] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\AC", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\AC", lpFilePart=0x0) returned 0x5c [0218.086] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\AC\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\AC\\", lpFilePart=0x0) returned 0x5d [0218.086] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\AC\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7550 [0218.087] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0218.087] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0218.087] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0218.087] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0218.088] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0218.088] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0218.088] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0218.088] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0218.088] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0218.088] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0218.088] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\AC\\INetCache", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\AC\\INetCache", lpFilePart=0x0) returned 0x66 [0218.088] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\AC\\INetCache\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\AC\\INetCache\\", lpFilePart=0x0) returned 0x67 [0218.089] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\AC\\INetCache\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7c70 [0218.095] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0218.095] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0218.095] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0218.095] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0218.095] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0218.095] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0218.095] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\AC\\INetCache", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\AC\\INetCache", lpFilePart=0x0) returned 0x66 [0218.095] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\AC\\INetCache\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\AC\\INetCache\\", lpFilePart=0x0) returned 0x67 [0218.095] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\AC\\INetCache\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d79d0 [0218.096] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0218.096] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0218.096] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0218.096] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0218.096] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0218.096] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0218.096] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\AC\\INetCookies", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\AC\\INetCookies", lpFilePart=0x0) returned 0x68 [0218.096] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\AC\\INetCookies\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\AC\\INetCookies\\", lpFilePart=0x0) returned 0x69 [0218.096] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\AC\\INetCookies\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d8090 [0218.096] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0218.096] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0218.096] FindClose (in: hFindFile=0x5d8090 | out: hFindFile=0x5d8090) returned 1 [0218.097] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0218.097] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0218.097] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0218.097] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\AC\\INetCookies", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\AC\\INetCookies", lpFilePart=0x0) returned 0x68 [0218.097] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\AC\\INetCookies\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\AC\\INetCookies\\", lpFilePart=0x0) returned 0x69 [0218.097] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\AC\\INetCookies\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7fd0 [0218.097] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0218.097] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0218.097] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0218.097] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0218.097] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0218.097] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0218.097] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\AC\\INetHistory", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\AC\\INetHistory", lpFilePart=0x0) returned 0x68 [0218.097] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\AC\\INetHistory\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\AC\\INetHistory\\", lpFilePart=0x0) returned 0x69 [0218.097] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\AC\\INetHistory\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7af0 [0218.098] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0218.098] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0218.098] FindClose (in: hFindFile=0x5d7af0 | out: hFindFile=0x5d7af0) returned 1 [0218.098] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0218.098] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0218.098] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0218.098] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\AC\\INetHistory", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\AC\\INetHistory", lpFilePart=0x0) returned 0x68 [0218.098] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\AC\\INetHistory\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\AC\\INetHistory\\", lpFilePart=0x0) returned 0x69 [0218.098] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\AC\\INetHistory\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7eb0 [0218.098] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0218.098] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0218.098] FindClose (in: hFindFile=0x5d7eb0 | out: hFindFile=0x5d7eb0) returned 1 [0218.099] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0218.099] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0218.099] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0218.099] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\AC\\Temp", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\AC\\Temp", lpFilePart=0x0) returned 0x61 [0218.099] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\AC\\Temp\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\AC\\Temp\\", lpFilePart=0x0) returned 0x62 [0218.099] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\AC\\Temp\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d79d0 [0218.099] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0218.099] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0218.100] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0218.100] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0218.100] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0218.100] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0218.100] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\AC\\Temp", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\AC\\Temp", lpFilePart=0x0) returned 0x61 [0218.100] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\AC\\Temp\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\AC\\Temp\\", lpFilePart=0x0) returned 0x62 [0218.100] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\AC\\Temp\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d78b0 [0218.100] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0218.100] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0218.100] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0218.100] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0218.100] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0218.100] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0218.100] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\AppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\AppData", lpFilePart=0x0) returned 0x61 [0218.100] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\AppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\AppData\\", lpFilePart=0x0) returned 0x62 [0218.100] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\AppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7370 [0218.103] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0218.103] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0218.103] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0218.103] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0218.103] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0218.103] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0218.103] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\AppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\AppData", lpFilePart=0x0) returned 0x61 [0218.103] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\AppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\AppData\\", lpFilePart=0x0) returned 0x62 [0218.103] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\AppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d78b0 [0218.103] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0218.104] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0218.104] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0218.104] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0218.104] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0218.104] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0218.104] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\LocalCache", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\LocalCache", lpFilePart=0x0) returned 0x64 [0218.104] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\LocalCache\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\LocalCache\\", lpFilePart=0x0) returned 0x65 [0218.104] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\LocalCache\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d81b0 [0218.104] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0218.104] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0218.104] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0218.104] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0218.104] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0218.104] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0218.104] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\LocalCache", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\LocalCache", lpFilePart=0x0) returned 0x64 [0218.104] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\LocalCache\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\LocalCache\\", lpFilePart=0x0) returned 0x65 [0218.105] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\LocalCache\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d78b0 [0218.105] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0218.105] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0218.105] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0218.105] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0218.105] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0218.105] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0218.105] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\LocalState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\LocalState", lpFilePart=0x0) returned 0x64 [0218.105] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\LocalState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\LocalState\\", lpFilePart=0x0) returned 0x65 [0218.105] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\LocalState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7550 [0218.106] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0218.106] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0218.106] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0218.106] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0218.106] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0218.106] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0218.106] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\LocalState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\LocalState", lpFilePart=0x0) returned 0x64 [0218.106] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\LocalState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\LocalState\\", lpFilePart=0x0) returned 0x65 [0218.106] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\LocalState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7f10 [0218.106] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0218.106] FindNextFileW (in: hFindFile=0x5d7f10, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0218.106] FindClose (in: hFindFile=0x5d7f10 | out: hFindFile=0x5d7f10) returned 1 [0218.107] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0218.107] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0218.107] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0218.107] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Microsoft.XboxIdentityProvider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Microsoft.XboxIdentityProvider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy", lpFilePart=0x0) returned 0xa9 [0218.107] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Microsoft.XboxIdentityProvider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Microsoft.XboxIdentityProvider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\", lpFilePart=0x0) returned 0xaa [0218.107] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Microsoft.XboxIdentityProvider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d78b0 [0218.107] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0218.107] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0218.107] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0218.107] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0218.107] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0218.107] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0218.107] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0218.107] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Microsoft.XboxIdentityProvider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Microsoft.XboxIdentityProvider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy", lpFilePart=0x0) returned 0xa9 [0218.108] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Microsoft.XboxIdentityProvider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Microsoft.XboxIdentityProvider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\", lpFilePart=0x0) returned 0xaa [0218.108] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Microsoft.XboxIdentityProvider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7a90 [0218.108] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0218.108] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0218.108] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0218.108] FindClose (in: hFindFile=0x5d7a90 | out: hFindFile=0x5d7a90) returned 1 [0218.108] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0218.108] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0218.108] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0218.108] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Microsoft.XboxIdentityProvider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Microsoft.XboxIdentityProvider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore", lpFilePart=0x0) returned 0xb9 [0218.108] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Microsoft.XboxIdentityProvider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Microsoft.XboxIdentityProvider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\", lpFilePart=0x0) returned 0xba [0218.108] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Microsoft.XboxIdentityProvider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7c70 [0218.124] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0218.124] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0218.124] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0218.124] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0218.124] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0218.125] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0218.125] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0218.125] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0218.125] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0218.125] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Microsoft.XboxIdentityProvider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Microsoft.XboxIdentityProvider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore", lpFilePart=0x0) returned 0xb9 [0218.125] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Microsoft.XboxIdentityProvider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Microsoft.XboxIdentityProvider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\", lpFilePart=0x0) returned 0xba [0218.125] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Microsoft.XboxIdentityProvider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7af0 [0218.126] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0218.126] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0218.126] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0218.126] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0218.127] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0218.127] FindClose (in: hFindFile=0x5d7af0 | out: hFindFile=0x5d7af0) returned 1 [0218.127] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0218.127] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0218.127] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Microsoft.XboxIdentityProvider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Microsoft.XboxIdentityProvider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xcd [0218.127] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0218.127] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Microsoft.XboxIdentityProvider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\microsoft.xboxidentityprovider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat"), fInfoLevelId=0x0, lpFileInformation=0x2261d18 | out: lpFileInformation=0x2261d18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd177ec1, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xbd21082d, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xbd21082d, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x4000)) returned 1 [0218.129] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0218.129] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Microsoft.XboxIdentityProvider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Microsoft.XboxIdentityProvider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xcd [0218.129] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0218.129] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Microsoft.XboxIdentityProvider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\microsoft.xboxidentityprovider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat"), fInfoLevelId=0x0, lpFileInformation=0x2261f78 | out: lpFileInformation=0x2261f78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd177ec1, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xbd21082d, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xbd21082d, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x4000)) returned 1 [0218.129] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0218.130] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Microsoft.XboxIdentityProvider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Microsoft.XboxIdentityProvider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xcd [0218.130] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0218.130] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Microsoft.XboxIdentityProvider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\microsoft.xboxidentityprovider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0218.131] GetFileType (hFile=0x444) returned 0x1 [0218.131] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0218.131] GetFileType (hFile=0x444) returned 0x1 [0218.131] ReadFile (in: hFile=0x444, lpBuffer=0x2264568, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x2264568*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0218.143] CloseHandle (hObject=0x444) returned 1 [0218.143] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Microsoft.XboxIdentityProvider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Microsoft.XboxIdentityProvider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xcd [0218.143] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0218.143] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Microsoft.XboxIdentityProvider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\microsoft.xboxidentityprovider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0218.144] GetFileType (hFile=0x444) returned 0x1 [0218.144] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0218.144] GetFileType (hFile=0x444) returned 0x1 [0218.144] WriteFile (in: hFile=0x444, lpBuffer=0x22621b8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x22621b8*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0218.144] CloseHandle (hObject=0x444) returned 1 [0218.144] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Microsoft.XboxIdentityProvider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Microsoft.XboxIdentityProvider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xcd [0218.144] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Microsoft.XboxIdentityProvider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Microsoft.XboxIdentityProvider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.xuy", lpFilePart=0x0) returned 0xd1 [0218.144] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0218.144] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Microsoft.XboxIdentityProvider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\microsoft.xboxidentityprovider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd177ec1, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xbd21082d, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x6ddf32b5, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x4000)) returned 1 [0218.144] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0218.144] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Microsoft.XboxIdentityProvider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\microsoft.xboxidentityprovider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Microsoft.XboxIdentityProvider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\microsoft.xboxidentityprovider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.xuy")) returned 1 [0218.146] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Microsoft.XboxIdentityProvider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Microsoft.XboxIdentityProvider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xd2 [0218.146] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0218.146] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Microsoft.XboxIdentityProvider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\microsoft.xboxidentityprovider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x22e0d48 | out: lpFileInformation=0x22e0d48*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xbd177ec1, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xbd177ec1, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xbd177ec1, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x4000)) returned 1 [0218.146] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0218.146] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Microsoft.XboxIdentityProvider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Microsoft.XboxIdentityProvider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xd2 [0218.146] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0218.146] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Microsoft.XboxIdentityProvider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\microsoft.xboxidentityprovider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x22e0fc0 | out: lpFileInformation=0x22e0fc0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xbd177ec1, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xbd177ec1, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xbd177ec1, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x4000)) returned 1 [0218.146] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0218.146] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Microsoft.XboxIdentityProvider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Microsoft.XboxIdentityProvider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xd2 [0218.146] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0218.146] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Microsoft.XboxIdentityProvider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\microsoft.xboxidentityprovider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0218.147] GetFileType (hFile=0x444) returned 0x1 [0218.147] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0218.147] GetFileType (hFile=0x444) returned 0x1 [0218.147] ReadFile (in: hFile=0x444, lpBuffer=0x22e35e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x22e35e0*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0218.165] CloseHandle (hObject=0x444) returned 1 [0218.165] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Microsoft.XboxIdentityProvider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Microsoft.XboxIdentityProvider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xd2 [0218.165] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0218.165] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Microsoft.XboxIdentityProvider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\microsoft.xboxidentityprovider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0218.165] GetFileType (hFile=0x444) returned 0x1 [0218.165] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0218.165] GetFileType (hFile=0x444) returned 0x1 [0218.165] WriteFile (in: hFile=0x444, lpBuffer=0x22e1218*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x22e1218*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0218.165] CloseHandle (hObject=0x444) returned 1 [0218.165] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Microsoft.XboxIdentityProvider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Microsoft.XboxIdentityProvider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xd2 [0218.166] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Microsoft.XboxIdentityProvider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Microsoft.XboxIdentityProvider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1.xuy", lpFilePart=0x0) returned 0xd6 [0218.166] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0218.166] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Microsoft.XboxIdentityProvider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\microsoft.xboxidentityprovider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xbd177ec1, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xbd177ec1, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x6de19348, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x4000)) returned 1 [0218.166] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0218.166] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Microsoft.XboxIdentityProvider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\microsoft.xboxidentityprovider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Microsoft.XboxIdentityProvider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\microsoft.xboxidentityprovider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log1.xuy")) returned 1 [0218.167] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Microsoft.XboxIdentityProvider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Microsoft.XboxIdentityProvider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xd2 [0218.167] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0218.167] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Microsoft.XboxIdentityProvider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\microsoft.xboxidentityprovider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x235fdf0 | out: lpFileInformation=0x235fdf0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xbd177ec1, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xbd177ec1, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xbd177ec1, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0218.167] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0218.167] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Microsoft.XboxIdentityProvider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Microsoft.XboxIdentityProvider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xd2 [0218.167] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0218.167] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Microsoft.XboxIdentityProvider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\microsoft.xboxidentityprovider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0218.168] GetFileType (hFile=0x444) returned 0x1 [0218.168] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0218.168] GetFileType (hFile=0x444) returned 0x1 [0218.168] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x0 [0218.168] CloseHandle (hObject=0x444) returned 1 [0218.208] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Microsoft.XboxIdentityProvider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Microsoft.XboxIdentityProvider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xd2 [0218.208] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0218.208] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Microsoft.XboxIdentityProvider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\microsoft.xboxidentityprovider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0218.209] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb070) returned 1 [0218.210] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Microsoft.XboxIdentityProvider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbcf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Microsoft.XboxIdentityProvider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xd2 [0218.210] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0218.210] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Microsoft.XboxIdentityProvider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\microsoft.xboxidentityprovider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x3bc270 | out: lpFileInformation=0x3bc270*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xbd177ec1, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xbd177ec1, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xbd177ec1, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0218.210] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc150) returned 1 [0218.210] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Microsoft.XboxIdentityProvider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbd10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Microsoft.XboxIdentityProvider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xd2 [0218.210] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0218.210] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Microsoft.XboxIdentityProvider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\microsoft.xboxidentityprovider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x21d7248 | out: lpFileInformation=0x21d7248*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xbd177ec1, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xbd177ec1, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xbd177ec1, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0218.210] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc150) returned 1 [0218.210] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Microsoft.XboxIdentityProvider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Microsoft.XboxIdentityProvider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xd2 [0218.210] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc050) returned 1 [0218.210] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Microsoft.XboxIdentityProvider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\microsoft.xboxidentityprovider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0218.210] GetFileType (hFile=0x444) returned 0x1 [0218.210] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbfc0) returned 1 [0218.210] GetFileType (hFile=0x444) returned 0x1 [0218.210] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc1e8 | out: lpFileSizeHigh=0x3bc1e8*=0x0) returned 0x0 [0218.210] CloseHandle (hObject=0x444) returned 1 [0218.221] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Microsoft.XboxIdentityProvider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Microsoft.XboxIdentityProvider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xd2 [0218.221] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc050) returned 1 [0218.221] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Microsoft.XboxIdentityProvider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\microsoft.xboxidentityprovider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0218.222] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8ae0) returned 1 [0218.223] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0218.223] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\RoamingState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\RoamingState", lpFilePart=0x0) returned 0x66 [0218.223] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\RoamingState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\RoamingState\\", lpFilePart=0x0) returned 0x67 [0218.223] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\RoamingState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d75b0 [0218.223] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0218.223] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0218.223] FindClose (in: hFindFile=0x5d75b0 | out: hFindFile=0x5d75b0) returned 1 [0218.223] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0218.223] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0218.224] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0218.224] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\RoamingState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\RoamingState", lpFilePart=0x0) returned 0x66 [0218.224] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\RoamingState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\RoamingState\\", lpFilePart=0x0) returned 0x67 [0218.224] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\RoamingState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7c70 [0218.224] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0218.224] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0218.224] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0218.224] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0218.224] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0218.224] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0218.224] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Settings", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Settings", lpFilePart=0x0) returned 0x62 [0218.224] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Settings\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Settings\\", lpFilePart=0x0) returned 0x63 [0218.224] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Settings\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d78b0 [0218.232] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0218.232] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0218.233] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0218.233] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0218.233] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0218.233] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0218.233] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0218.234] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0218.234] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0218.234] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0218.234] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Settings", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Settings", lpFilePart=0x0) returned 0x62 [0218.234] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Settings\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Settings\\", lpFilePart=0x0) returned 0x63 [0218.234] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Settings\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7550 [0218.235] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0218.235] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0218.235] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0218.235] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0218.235] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0218.235] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0218.235] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0218.236] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0218.236] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0218.236] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Settings\\roaming.lock", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Settings\\roaming.lock", lpFilePart=0x0) returned 0x6f [0218.236] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0218.236] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\settings\\roaming.lock"), fInfoLevelId=0x0, lpFileInformation=0x2253a08 | out: lpFileInformation=0x2253a08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd06ce4f, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xbd06ce4f, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xbd06ce4f, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0218.237] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0218.237] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Settings\\roaming.lock", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Settings\\roaming.lock", lpFilePart=0x0) returned 0x6f [0218.237] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0218.237] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\settings\\roaming.lock"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0218.237] GetFileType (hFile=0x444) returned 0x1 [0218.237] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0218.237] GetFileType (hFile=0x444) returned 0x1 [0218.237] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0x0 [0218.237] CloseHandle (hObject=0x444) returned 1 [0218.249] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Settings\\roaming.lock", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Settings\\roaming.lock", lpFilePart=0x0) returned 0x6f [0218.249] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0218.249] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\settings\\roaming.lock"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0218.251] GetFileType (hFile=0x444) returned 0x1 [0218.251] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0218.251] GetFileType (hFile=0x444) returned 0x1 [0218.251] WriteFile (in: hFile=0x444, lpBuffer=0x22c9e88*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x3be628, lpOverlapped=0x0 | out: lpBuffer=0x22c9e88*, lpNumberOfBytesWritten=0x3be628*=0x10, lpOverlapped=0x0) returned 1 [0218.252] CloseHandle (hObject=0x444) returned 1 [0218.252] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Settings\\roaming.lock", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Settings\\roaming.lock", lpFilePart=0x0) returned 0x6f [0218.252] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Settings\\roaming.lock.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Settings\\roaming.lock.xuy", lpFilePart=0x0) returned 0x73 [0218.252] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0218.252] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\settings\\roaming.lock"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd06ce4f, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xbd06ce4f, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x6defe6da, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0218.252] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0218.252] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\settings\\roaming.lock"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Settings\\roaming.lock.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\settings\\roaming.lock.xuy")) returned 1 [0218.253] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Settings\\settings.dat", lpFilePart=0x0) returned 0x6f [0218.253] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0218.253] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x22cb1e0 | out: lpFileInformation=0x22cb1e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd06ce4f, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0x7896bd4f, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x7896bd4f, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0218.253] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0218.253] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Settings\\settings.dat", lpFilePart=0x0) returned 0x6f [0218.254] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0218.254] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x22cb378 | out: lpFileInformation=0x22cb378*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd06ce4f, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0x7896bd4f, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x7896bd4f, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0218.254] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0218.254] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Settings\\settings.dat", lpFilePart=0x0) returned 0x6f [0218.254] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0218.254] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\settings\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0218.255] GetFileType (hFile=0x444) returned 0x1 [0218.255] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0218.255] GetFileType (hFile=0x444) returned 0x1 [0218.255] ReadFile (in: hFile=0x444, lpBuffer=0x22cd7d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x22cd7d8*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0218.292] CloseHandle (hObject=0x444) returned 1 [0218.292] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Settings\\settings.dat", lpFilePart=0x0) returned 0x6f [0218.292] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0218.292] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\settings\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0218.297] GetFileType (hFile=0x444) returned 0x1 [0218.297] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0218.297] GetFileType (hFile=0x444) returned 0x1 [0218.297] WriteFile (in: hFile=0x444, lpBuffer=0x22cb4f0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x22cb4f0*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0218.298] CloseHandle (hObject=0x444) returned 1 [0218.298] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Settings\\settings.dat", lpFilePart=0x0) returned 0x6f [0218.298] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Settings\\settings.dat.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Settings\\settings.dat.xuy", lpFilePart=0x0) returned 0x73 [0218.298] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0218.298] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd06ce4f, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0x7896bd4f, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x6df70881, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0218.298] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0218.298] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\settings\\settings.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Settings\\settings.dat.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\settings\\settings.dat.xuy")) returned 1 [0218.299] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", lpFilePart=0x0) returned 0x74 [0218.299] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0218.299] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\settings\\settings.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x2349cb0 | out: lpFileInformation=0x2349cb0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x788d33ed, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x788d33ed, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x788d33ed, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0218.301] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0218.301] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", lpFilePart=0x0) returned 0x74 [0218.302] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0218.302] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\settings\\settings.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x2349e60 | out: lpFileInformation=0x2349e60*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x788d33ed, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x788d33ed, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x788d33ed, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0218.302] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0218.302] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", lpFilePart=0x0) returned 0x74 [0218.302] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0218.302] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\settings\\settings.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0218.303] GetFileType (hFile=0x444) returned 0x1 [0218.303] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0218.303] GetFileType (hFile=0x444) returned 0x1 [0218.303] ReadFile (in: hFile=0x444, lpBuffer=0x234c2f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x234c2f0*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0218.327] CloseHandle (hObject=0x444) returned 1 [0218.327] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", lpFilePart=0x0) returned 0x74 [0218.327] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0218.327] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\settings\\settings.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0218.328] GetFileType (hFile=0x444) returned 0x1 [0218.328] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0218.328] GetFileType (hFile=0x444) returned 0x1 [0218.328] WriteFile (in: hFile=0x444, lpBuffer=0x218b298*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x218b298*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0218.328] CloseHandle (hObject=0x444) returned 1 [0218.328] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", lpFilePart=0x0) returned 0x74 [0218.328] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Settings\\settings.dat.LOG1.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Settings\\settings.dat.LOG1.xuy", lpFilePart=0x0) returned 0x78 [0218.328] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0218.328] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\settings\\settings.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x788d33ed, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x788d33ed, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x6dfbcea2, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0218.328] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0218.329] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\settings\\settings.dat.log1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Settings\\settings.dat.LOG1.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\settings\\settings.dat.log1.xuy")) returned 1 [0218.330] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", lpFilePart=0x0) returned 0x74 [0218.330] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0218.330] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\settings\\settings.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x21cb788 | out: lpFileInformation=0x21cb788*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x788d33ed, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x788d33ed, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x788d33ed, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0218.330] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0218.330] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", lpFilePart=0x0) returned 0x74 [0218.330] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0218.330] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\settings\\settings.dat.log2"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0218.330] GetFileType (hFile=0x444) returned 0x1 [0218.330] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0218.330] GetFileType (hFile=0x444) returned 0x1 [0218.330] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0x0 [0218.330] CloseHandle (hObject=0x444) returned 1 [0218.341] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", lpFilePart=0x0) returned 0x74 [0218.341] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0218.341] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\settings\\settings.dat.log2"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0218.342] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb0e0) returned 1 [0218.342] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", lpFilePart=0x0) returned 0x74 [0218.342] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc200) returned 1 [0218.343] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\settings\\settings.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x3bc2e0 | out: lpFileInformation=0x3bc2e0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x788d33ed, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x788d33ed, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x788d33ed, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0218.343] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1c0) returned 1 [0218.343] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbd80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", lpFilePart=0x0) returned 0x74 [0218.343] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc200) returned 1 [0218.343] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\settings\\settings.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x2242548 | out: lpFileInformation=0x2242548*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x788d33ed, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x788d33ed, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x788d33ed, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0218.343] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1c0) returned 1 [0218.343] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", lpFilePart=0x0) returned 0x74 [0218.343] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0c0) returned 1 [0218.343] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\settings\\settings.dat.log2"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0218.343] GetFileType (hFile=0x444) returned 0x1 [0218.343] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc030) returned 1 [0218.343] GetFileType (hFile=0x444) returned 0x1 [0218.343] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc258 | out: lpFileSizeHigh=0x3bc258*=0x0) returned 0x0 [0218.343] CloseHandle (hObject=0x444) returned 1 [0218.353] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", lpFilePart=0x0) returned 0x74 [0218.353] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0c0) returned 1 [0218.353] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\settings\\settings.dat.log2"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0218.354] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8b50) returned 1 [0218.355] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0218.355] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\SystemAppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\SystemAppData", lpFilePart=0x0) returned 0x67 [0218.355] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\SystemAppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\SystemAppData\\", lpFilePart=0x0) returned 0x68 [0218.371] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\SystemAppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d78b0 [0218.371] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0218.371] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0218.372] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0218.372] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0218.372] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0218.372] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0218.372] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\SystemAppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\SystemAppData", lpFilePart=0x0) returned 0x67 [0218.372] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\SystemAppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\SystemAppData\\", lpFilePart=0x0) returned 0x68 [0218.372] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\SystemAppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d79d0 [0218.372] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0218.372] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0218.372] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0218.372] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0218.372] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0218.372] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0218.372] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\TempState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\TempState", lpFilePart=0x0) returned 0x63 [0218.372] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\TempState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\TempState\\", lpFilePart=0x0) returned 0x64 [0218.372] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\TempState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7550 [0218.373] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0218.373] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0218.373] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0218.373] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0218.373] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0218.373] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0218.373] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\TempState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\TempState", lpFilePart=0x0) returned 0x63 [0218.373] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\TempState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\TempState\\", lpFilePart=0x0) returned 0x64 [0218.373] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\TempState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7370 [0218.373] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0218.373] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0218.373] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0218.374] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0218.374] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0218.374] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0218.374] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe", lpFilePart=0x0) returned 0x4e [0218.374] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\", lpFilePart=0x0) returned 0x4f [0218.374] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d73d0 [0218.385] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0218.386] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0218.386] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0218.386] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0218.386] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0218.386] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0218.386] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0218.386] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0218.387] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0218.387] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0218.387] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0218.387] FindClose (in: hFindFile=0x5d73d0 | out: hFindFile=0x5d73d0) returned 1 [0218.387] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0218.388] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0218.388] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0218.388] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe", lpFilePart=0x0) returned 0x4e [0218.388] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\", lpFilePart=0x0) returned 0x4f [0218.388] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d79d0 [0218.389] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0218.389] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0218.389] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0218.389] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0218.389] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0218.389] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0218.389] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0218.389] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0218.389] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0218.389] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0218.390] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0218.390] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0218.390] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0218.390] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0218.390] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0218.390] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\AC", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\AC", lpFilePart=0x0) returned 0x51 [0218.390] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\AC\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\AC\\", lpFilePart=0x0) returned 0x52 [0218.390] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\AC\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7550 [0218.406] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0218.407] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0218.407] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0218.407] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0218.407] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0218.407] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0218.407] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0218.408] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0218.408] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\AC", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\AC", lpFilePart=0x0) returned 0x51 [0218.408] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\AC\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\AC\\", lpFilePart=0x0) returned 0x52 [0218.408] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\AC\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7e50 [0218.409] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0218.409] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0218.409] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0218.409] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0218.409] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0218.409] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0218.409] FindClose (in: hFindFile=0x5d7e50 | out: hFindFile=0x5d7e50) returned 1 [0218.410] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\AC\\INetCache", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\AC\\INetCache", lpFilePart=0x0) returned 0x5b [0218.410] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\AC\\INetCache\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\AC\\INetCache\\", lpFilePart=0x0) returned 0x5c [0218.410] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\AC\\INetCache\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7370 [0218.412] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0218.412] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0218.412] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0218.413] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\AC\\INetCache", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\AC\\INetCache", lpFilePart=0x0) returned 0x5b [0218.413] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\AC\\INetCache\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\AC\\INetCache\\", lpFilePart=0x0) returned 0x5c [0218.413] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\AC\\INetCache\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7550 [0218.413] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0218.413] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0218.413] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0218.413] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\AC\\INetCookies", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\AC\\INetCookies", lpFilePart=0x0) returned 0x5d [0218.413] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\AC\\INetCookies\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\AC\\INetCookies\\", lpFilePart=0x0) returned 0x5e [0218.413] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\AC\\INetCookies\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d81b0 [0218.413] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0218.413] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0218.413] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0218.414] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\AC\\INetCookies", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\AC\\INetCookies", lpFilePart=0x0) returned 0x5d [0218.414] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\AC\\INetCookies\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\AC\\INetCookies\\", lpFilePart=0x0) returned 0x5e [0218.414] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\AC\\INetCookies\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7a30 [0218.414] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0218.414] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0218.414] FindClose (in: hFindFile=0x5d7a30 | out: hFindFile=0x5d7a30) returned 1 [0218.414] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\AC\\INetHistory", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\AC\\INetHistory", lpFilePart=0x0) returned 0x5d [0218.414] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\AC\\INetHistory\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\AC\\INetHistory\\", lpFilePart=0x0) returned 0x5e [0218.414] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\AC\\INetHistory\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d79d0 [0218.414] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0218.414] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0218.415] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0218.415] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\AC\\INetHistory", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\AC\\INetHistory", lpFilePart=0x0) returned 0x5d [0218.415] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\AC\\INetHistory\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\AC\\INetHistory\\", lpFilePart=0x0) returned 0x5e [0218.415] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\AC\\INetHistory\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7550 [0218.415] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0218.415] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0218.415] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0218.415] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\AC\\Temp", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\AC\\Temp", lpFilePart=0x0) returned 0x56 [0218.415] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\AC\\Temp\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\AC\\Temp\\", lpFilePart=0x0) returned 0x57 [0218.415] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\AC\\Temp\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d79d0 [0218.415] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0218.415] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0218.416] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0218.416] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\AC\\Temp", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\AC\\Temp", lpFilePart=0x0) returned 0x56 [0218.416] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\AC\\Temp\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\AC\\Temp\\", lpFilePart=0x0) returned 0x57 [0218.416] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\AC\\Temp\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d81b0 [0218.416] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0218.416] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0218.416] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0218.416] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\AppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\AppData", lpFilePart=0x0) returned 0x56 [0218.416] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\AppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\AppData\\", lpFilePart=0x0) returned 0x57 [0218.416] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\AppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d81b0 [0218.416] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0218.417] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0218.417] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0218.417] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\AppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\AppData", lpFilePart=0x0) returned 0x56 [0218.417] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\AppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\AppData\\", lpFilePart=0x0) returned 0x57 [0218.417] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\AppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d81b0 [0218.417] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0218.417] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0218.417] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0218.417] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\LocalCache", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\LocalCache", lpFilePart=0x0) returned 0x59 [0218.417] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\LocalCache\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\LocalCache\\", lpFilePart=0x0) returned 0x5a [0218.417] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\LocalCache\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d75b0 [0218.423] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0218.423] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0218.423] FindClose (in: hFindFile=0x5d75b0 | out: hFindFile=0x5d75b0) returned 1 [0218.424] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\LocalCache", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\LocalCache", lpFilePart=0x0) returned 0x59 [0218.424] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\LocalCache\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\LocalCache\\", lpFilePart=0x0) returned 0x5a [0218.424] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\LocalCache\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d79d0 [0218.424] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0218.424] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0218.424] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0218.424] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\LocalState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\LocalState", lpFilePart=0x0) returned 0x59 [0218.424] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\LocalState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\LocalState\\", lpFilePart=0x0) returned 0x5a [0218.424] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\LocalState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7fd0 [0218.424] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0218.424] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0218.425] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0218.425] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\LocalState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\LocalState", lpFilePart=0x0) returned 0x59 [0218.425] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\LocalState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\LocalState\\", lpFilePart=0x0) returned 0x5a [0218.425] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\LocalState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d78b0 [0218.425] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0218.425] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0218.425] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0218.425] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Microsoft.ZuneMusic_3.6.10841.0_x64__8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Microsoft.ZuneMusic_3.6.10841.0_x64__8wekyb3d8bbwe", lpFilePart=0x0) returned 0x81 [0218.425] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Microsoft.ZuneMusic_3.6.10841.0_x64__8wekyb3d8bbwe\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Microsoft.ZuneMusic_3.6.10841.0_x64__8wekyb3d8bbwe\\", lpFilePart=0x0) returned 0x82 [0218.425] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Microsoft.ZuneMusic_3.6.10841.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7a30 [0218.425] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0218.425] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0218.426] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0218.426] FindClose (in: hFindFile=0x5d7a30 | out: hFindFile=0x5d7a30) returned 1 [0218.426] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Microsoft.ZuneMusic_3.6.10841.0_x64__8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Microsoft.ZuneMusic_3.6.10841.0_x64__8wekyb3d8bbwe", lpFilePart=0x0) returned 0x81 [0218.426] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Microsoft.ZuneMusic_3.6.10841.0_x64__8wekyb3d8bbwe\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Microsoft.ZuneMusic_3.6.10841.0_x64__8wekyb3d8bbwe\\", lpFilePart=0x0) returned 0x82 [0218.426] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Microsoft.ZuneMusic_3.6.10841.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7c70 [0218.426] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0218.426] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0218.426] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0218.426] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0218.426] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Microsoft.ZuneMusic_3.6.10841.0_x64__8wekyb3d8bbwe\\ActivationStore", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Microsoft.ZuneMusic_3.6.10841.0_x64__8wekyb3d8bbwe\\ActivationStore", lpFilePart=0x0) returned 0x91 [0218.426] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Microsoft.ZuneMusic_3.6.10841.0_x64__8wekyb3d8bbwe\\ActivationStore\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Microsoft.ZuneMusic_3.6.10841.0_x64__8wekyb3d8bbwe\\ActivationStore\\", lpFilePart=0x0) returned 0x92 [0218.426] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Microsoft.ZuneMusic_3.6.10841.0_x64__8wekyb3d8bbwe\\ActivationStore\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d73d0 [0218.428] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0218.429] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0218.429] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0218.429] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0218.429] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0218.429] FindClose (in: hFindFile=0x5d73d0 | out: hFindFile=0x5d73d0) returned 1 [0218.430] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Microsoft.ZuneMusic_3.6.10841.0_x64__8wekyb3d8bbwe\\ActivationStore", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Microsoft.ZuneMusic_3.6.10841.0_x64__8wekyb3d8bbwe\\ActivationStore", lpFilePart=0x0) returned 0x91 [0218.430] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Microsoft.ZuneMusic_3.6.10841.0_x64__8wekyb3d8bbwe\\ActivationStore\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Microsoft.ZuneMusic_3.6.10841.0_x64__8wekyb3d8bbwe\\ActivationStore\\", lpFilePart=0x0) returned 0x92 [0218.430] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Microsoft.ZuneMusic_3.6.10841.0_x64__8wekyb3d8bbwe\\ActivationStore\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d78b0 [0218.430] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0218.430] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0218.431] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0218.431] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0218.431] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0218.431] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0218.431] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Microsoft.ZuneMusic_3.6.10841.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Microsoft.ZuneMusic_3.6.10841.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xa5 [0218.431] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Microsoft.ZuneMusic_3.6.10841.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunemusic_8wekyb3d8bbwe\\microsoft.zunemusic_3.6.10841.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), fInfoLevelId=0x0, lpFileInformation=0x22d8e38 | out: lpFileInformation=0x22d8e38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xebdc15d5, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xee9b57e9, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0xee9b57e9, ftLastWriteTime.dwHighDateTime=0x1d2d028, nFileSizeHigh=0x0, nFileSizeLow=0x10000)) returned 1 [0218.432] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Microsoft.ZuneMusic_3.6.10841.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Microsoft.ZuneMusic_3.6.10841.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xa5 [0218.432] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Microsoft.ZuneMusic_3.6.10841.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunemusic_8wekyb3d8bbwe\\microsoft.zunemusic_3.6.10841.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), fInfoLevelId=0x0, lpFileInformation=0x22d9048 | out: lpFileInformation=0x22d9048*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xebdc15d5, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xee9b57e9, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0xee9b57e9, ftLastWriteTime.dwHighDateTime=0x1d2d028, nFileSizeHigh=0x0, nFileSizeLow=0x10000)) returned 1 [0218.432] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Microsoft.ZuneMusic_3.6.10841.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Microsoft.ZuneMusic_3.6.10841.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xa5 [0218.432] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Microsoft.ZuneMusic_3.6.10841.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunemusic_8wekyb3d8bbwe\\microsoft.zunemusic_3.6.10841.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0218.434] GetFileType (hFile=0x444) returned 0x1 [0218.434] GetFileType (hFile=0x444) returned 0x1 [0218.434] ReadFile (in: hFile=0x444, lpBuffer=0x22db598, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x22db598*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0218.473] CloseHandle (hObject=0x444) returned 1 [0218.473] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Microsoft.ZuneMusic_3.6.10841.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Microsoft.ZuneMusic_3.6.10841.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xa5 [0218.473] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Microsoft.ZuneMusic_3.6.10841.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunemusic_8wekyb3d8bbwe\\microsoft.zunemusic_3.6.10841.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0218.473] GetFileType (hFile=0x444) returned 0x1 [0218.473] GetFileType (hFile=0x444) returned 0x1 [0218.474] WriteFile (in: hFile=0x444, lpBuffer=0x22d9238*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x22d9238*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0218.474] CloseHandle (hObject=0x444) returned 1 [0218.474] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Microsoft.ZuneMusic_3.6.10841.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Microsoft.ZuneMusic_3.6.10841.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xa5 [0218.474] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Microsoft.ZuneMusic_3.6.10841.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Microsoft.ZuneMusic_3.6.10841.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.xuy", lpFilePart=0x0) returned 0xa9 [0218.474] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Microsoft.ZuneMusic_3.6.10841.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunemusic_8wekyb3d8bbwe\\microsoft.zunemusic_3.6.10841.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xebdc15d5, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xee9b57e9, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x6e114273, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x10000)) returned 1 [0218.474] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Microsoft.ZuneMusic_3.6.10841.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunemusic_8wekyb3d8bbwe\\microsoft.zunemusic_3.6.10841.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Microsoft.ZuneMusic_3.6.10841.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunemusic_8wekyb3d8bbwe\\microsoft.zunemusic_3.6.10841.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.xuy")) returned 1 [0218.475] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Microsoft.ZuneMusic_3.6.10841.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Microsoft.ZuneMusic_3.6.10841.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xaa [0218.475] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Microsoft.ZuneMusic_3.6.10841.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunemusic_8wekyb3d8bbwe\\microsoft.zunemusic_3.6.10841.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x2357c38 | out: lpFileInformation=0x2357c38*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xebe0da96, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xebe0da96, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0xebe0da96, ftLastWriteTime.dwHighDateTime=0x1d2d028, nFileSizeHigh=0x0, nFileSizeLow=0x10000)) returned 1 [0218.477] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Microsoft.ZuneMusic_3.6.10841.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Microsoft.ZuneMusic_3.6.10841.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xaa [0218.477] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Microsoft.ZuneMusic_3.6.10841.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunemusic_8wekyb3d8bbwe\\microsoft.zunemusic_3.6.10841.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x2357e60 | out: lpFileInformation=0x2357e60*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xebe0da96, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xebe0da96, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0xebe0da96, ftLastWriteTime.dwHighDateTime=0x1d2d028, nFileSizeHigh=0x0, nFileSizeLow=0x10000)) returned 1 [0218.477] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Microsoft.ZuneMusic_3.6.10841.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Microsoft.ZuneMusic_3.6.10841.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xaa [0218.477] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Microsoft.ZuneMusic_3.6.10841.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunemusic_8wekyb3d8bbwe\\microsoft.zunemusic_3.6.10841.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0218.478] GetFileType (hFile=0x444) returned 0x1 [0218.478] GetFileType (hFile=0x444) returned 0x1 [0218.478] ReadFile (in: hFile=0x444, lpBuffer=0x235a3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x235a3e0*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0218.495] CloseHandle (hObject=0x444) returned 1 [0218.495] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Microsoft.ZuneMusic_3.6.10841.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Microsoft.ZuneMusic_3.6.10841.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xaa [0218.495] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Microsoft.ZuneMusic_3.6.10841.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunemusic_8wekyb3d8bbwe\\microsoft.zunemusic_3.6.10841.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0218.495] GetFileType (hFile=0x444) returned 0x1 [0218.495] GetFileType (hFile=0x444) returned 0x1 [0218.495] WriteFile (in: hFile=0x444, lpBuffer=0x218b280*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x218b280*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0218.496] CloseHandle (hObject=0x444) returned 1 [0218.496] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Microsoft.ZuneMusic_3.6.10841.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Microsoft.ZuneMusic_3.6.10841.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xaa [0218.496] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Microsoft.ZuneMusic_3.6.10841.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Microsoft.ZuneMusic_3.6.10841.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1.xuy", lpFilePart=0x0) returned 0xae [0218.496] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Microsoft.ZuneMusic_3.6.10841.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunemusic_8wekyb3d8bbwe\\microsoft.zunemusic_3.6.10841.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xebe0da96, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xebe0da96, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x6e13a6a5, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x10000)) returned 1 [0218.496] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Microsoft.ZuneMusic_3.6.10841.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunemusic_8wekyb3d8bbwe\\microsoft.zunemusic_3.6.10841.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Microsoft.ZuneMusic_3.6.10841.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunemusic_8wekyb3d8bbwe\\microsoft.zunemusic_3.6.10841.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1.xuy")) returned 1 [0218.497] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Microsoft.ZuneMusic_3.6.10841.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Microsoft.ZuneMusic_3.6.10841.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xaa [0218.498] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Microsoft.ZuneMusic_3.6.10841.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunemusic_8wekyb3d8bbwe\\microsoft.zunemusic_3.6.10841.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x21d6aa0 | out: lpFileInformation=0x21d6aa0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xebe0da96, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xebe0da96, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0xebe0da96, ftLastWriteTime.dwHighDateTime=0x1d2d028, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0218.498] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Microsoft.ZuneMusic_3.6.10841.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Microsoft.ZuneMusic_3.6.10841.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xaa [0218.498] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Microsoft.ZuneMusic_3.6.10841.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunemusic_8wekyb3d8bbwe\\microsoft.zunemusic_3.6.10841.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0218.498] GetFileType (hFile=0x444) returned 0x1 [0218.498] GetFileType (hFile=0x444) returned 0x1 [0218.498] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x0 [0218.498] CloseHandle (hObject=0x444) returned 1 [0218.508] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Microsoft.ZuneMusic_3.6.10841.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Microsoft.ZuneMusic_3.6.10841.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xaa [0218.508] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Microsoft.ZuneMusic_3.6.10841.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunemusic_8wekyb3d8bbwe\\microsoft.zunemusic_3.6.10841.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0218.509] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb070) returned 1 [0218.510] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Microsoft.ZuneMusic_3.6.10841.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbcf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Microsoft.ZuneMusic_3.6.10841.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xaa [0218.510] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0218.510] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Microsoft.ZuneMusic_3.6.10841.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunemusic_8wekyb3d8bbwe\\microsoft.zunemusic_3.6.10841.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x3bc270 | out: lpFileInformation=0x3bc270*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xebe0da96, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xebe0da96, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0xebe0da96, ftLastWriteTime.dwHighDateTime=0x1d2d028, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0218.510] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc150) returned 1 [0218.510] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Microsoft.ZuneMusic_3.6.10841.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbd10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Microsoft.ZuneMusic_3.6.10841.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xaa [0218.510] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0218.510] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Microsoft.ZuneMusic_3.6.10841.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunemusic_8wekyb3d8bbwe\\microsoft.zunemusic_3.6.10841.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x224da98 | out: lpFileInformation=0x224da98*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xebe0da96, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xebe0da96, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0xebe0da96, ftLastWriteTime.dwHighDateTime=0x1d2d028, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0218.510] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc150) returned 1 [0218.510] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Microsoft.ZuneMusic_3.6.10841.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Microsoft.ZuneMusic_3.6.10841.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xaa [0218.510] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc050) returned 1 [0218.510] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Microsoft.ZuneMusic_3.6.10841.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunemusic_8wekyb3d8bbwe\\microsoft.zunemusic_3.6.10841.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0218.510] GetFileType (hFile=0x444) returned 0x1 [0218.510] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbfc0) returned 1 [0218.510] GetFileType (hFile=0x444) returned 0x1 [0218.510] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc1e8 | out: lpFileSizeHigh=0x3bc1e8*=0x0) returned 0x0 [0218.510] CloseHandle (hObject=0x444) returned 1 [0218.552] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Microsoft.ZuneMusic_3.6.10841.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Microsoft.ZuneMusic_3.6.10841.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xaa [0218.552] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc050) returned 1 [0218.552] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Microsoft.ZuneMusic_3.6.10841.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunemusic_8wekyb3d8bbwe\\microsoft.zunemusic_3.6.10841.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0218.554] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8ae0) returned 1 [0218.554] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0218.554] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\RoamingState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\RoamingState", lpFilePart=0x0) returned 0x5b [0218.555] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\RoamingState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\RoamingState\\", lpFilePart=0x0) returned 0x5c [0218.555] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\RoamingState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d78b0 [0218.555] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0218.555] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0218.555] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0218.555] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0218.555] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0218.555] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0218.555] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\RoamingState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\RoamingState", lpFilePart=0x0) returned 0x5b [0218.555] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\RoamingState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\RoamingState\\", lpFilePart=0x0) returned 0x5c [0218.555] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\RoamingState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d78b0 [0218.556] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0218.556] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0218.556] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0218.556] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0218.556] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0218.556] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0218.556] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Settings", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Settings", lpFilePart=0x0) returned 0x57 [0218.556] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Settings\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Settings\\", lpFilePart=0x0) returned 0x58 [0218.556] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Settings\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7670 [0218.556] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0218.556] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0218.557] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0218.557] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0218.557] FindClose (in: hFindFile=0x5d7670 | out: hFindFile=0x5d7670) returned 1 [0218.557] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0218.557] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0218.557] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0218.557] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Settings", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Settings", lpFilePart=0x0) returned 0x57 [0218.557] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Settings\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Settings\\", lpFilePart=0x0) returned 0x58 [0218.557] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Settings\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7370 [0218.557] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0218.557] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0218.558] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0218.558] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0218.558] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0218.558] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0218.558] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0218.558] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Settings\\roaming.lock", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Settings\\roaming.lock", lpFilePart=0x0) returned 0x64 [0218.558] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0218.558] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunemusic_8wekyb3d8bbwe\\settings\\roaming.lock"), fInfoLevelId=0x0, lpFileInformation=0x22c9048 | out: lpFileInformation=0x22c9048*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb627dc0, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xeb627dc0, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0xeb627dc0, ftLastWriteTime.dwHighDateTime=0x1d2d028, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0218.558] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0218.558] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Settings\\roaming.lock", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Settings\\roaming.lock", lpFilePart=0x0) returned 0x64 [0218.558] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0218.558] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunemusic_8wekyb3d8bbwe\\settings\\roaming.lock"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0218.559] GetFileType (hFile=0x444) returned 0x1 [0218.559] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0218.559] GetFileType (hFile=0x444) returned 0x1 [0218.559] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0x0 [0218.559] CloseHandle (hObject=0x444) returned 1 [0218.570] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Settings\\roaming.lock", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Settings\\roaming.lock", lpFilePart=0x0) returned 0x64 [0218.570] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0218.570] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunemusic_8wekyb3d8bbwe\\settings\\roaming.lock"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0218.571] GetFileType (hFile=0x444) returned 0x1 [0218.571] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0218.571] GetFileType (hFile=0x444) returned 0x1 [0218.571] WriteFile (in: hFile=0x444, lpBuffer=0x233f498*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x3be628, lpOverlapped=0x0 | out: lpBuffer=0x233f498*, lpNumberOfBytesWritten=0x3be628*=0x10, lpOverlapped=0x0) returned 1 [0218.572] CloseHandle (hObject=0x444) returned 1 [0218.572] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Settings\\roaming.lock", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Settings\\roaming.lock", lpFilePart=0x0) returned 0x64 [0218.572] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Settings\\roaming.lock.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Settings\\roaming.lock.xuy", lpFilePart=0x0) returned 0x68 [0218.572] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0218.572] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunemusic_8wekyb3d8bbwe\\settings\\roaming.lock"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb627dc0, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xeb627dc0, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x6e1f912a, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0218.572] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0218.572] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunemusic_8wekyb3d8bbwe\\settings\\roaming.lock"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Settings\\roaming.lock.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunemusic_8wekyb3d8bbwe\\settings\\roaming.lock.xuy")) returned 1 [0218.621] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Settings\\settings.dat", lpFilePart=0x0) returned 0x64 [0218.621] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0218.621] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunemusic_8wekyb3d8bbwe\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x23407c0 | out: lpFileInformation=0x23407c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb58f443, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xeb58f443, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x8d6f5917, ftLastWriteTime.dwHighDateTime=0x1d0baff, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0218.621] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0218.621] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Settings\\settings.dat", lpFilePart=0x0) returned 0x64 [0218.621] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0218.621] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunemusic_8wekyb3d8bbwe\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x2340948 | out: lpFileInformation=0x2340948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb58f443, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xeb58f443, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x8d6f5917, ftLastWriteTime.dwHighDateTime=0x1d0baff, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0218.621] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0218.621] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Settings\\settings.dat", lpFilePart=0x0) returned 0x64 [0218.621] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0218.621] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunemusic_8wekyb3d8bbwe\\settings\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0218.623] GetFileType (hFile=0x444) returned 0x1 [0218.623] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0218.623] GetFileType (hFile=0x444) returned 0x1 [0218.623] ReadFile (in: hFile=0x444, lpBuffer=0x2342d88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x2342d88*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0218.662] CloseHandle (hObject=0x444) returned 1 [0218.662] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Settings\\settings.dat", lpFilePart=0x0) returned 0x64 [0218.663] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0218.663] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunemusic_8wekyb3d8bbwe\\settings\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0218.663] GetFileType (hFile=0x444) returned 0x1 [0218.663] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0218.663] GetFileType (hFile=0x444) returned 0x1 [0218.663] WriteFile (in: hFile=0x444, lpBuffer=0x218aef0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x218aef0*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0218.663] CloseHandle (hObject=0x444) returned 1 [0218.663] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Settings\\settings.dat", lpFilePart=0x0) returned 0x64 [0218.663] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Settings\\settings.dat.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Settings\\settings.dat.xuy", lpFilePart=0x0) returned 0x68 [0218.663] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0218.663] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunemusic_8wekyb3d8bbwe\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb58f443, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xeb58f443, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x6e2ddf8c, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0218.663] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0218.663] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunemusic_8wekyb3d8bbwe\\settings\\settings.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Settings\\settings.dat.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunemusic_8wekyb3d8bbwe\\settings\\settings.dat.xuy")) returned 1 [0218.665] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0218.665] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\SystemAppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\SystemAppData", lpFilePart=0x0) returned 0x5c [0218.665] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\SystemAppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\SystemAppData\\", lpFilePart=0x0) returned 0x5d [0218.665] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\SystemAppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7550 [0218.665] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0218.665] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0218.665] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0218.665] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0218.665] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0218.665] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0218.665] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\SystemAppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\SystemAppData", lpFilePart=0x0) returned 0x5c [0218.665] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\SystemAppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\SystemAppData\\", lpFilePart=0x0) returned 0x5d [0218.666] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\SystemAppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7c70 [0218.666] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0218.666] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0218.666] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0218.666] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0218.666] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0218.666] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0218.666] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\TempState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\TempState", lpFilePart=0x0) returned 0x58 [0218.666] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\TempState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\TempState\\", lpFilePart=0x0) returned 0x59 [0218.666] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\TempState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d8090 [0218.666] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0218.666] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0218.667] FindClose (in: hFindFile=0x5d8090 | out: hFindFile=0x5d8090) returned 1 [0218.667] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0218.667] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0218.667] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0218.667] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\TempState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\TempState", lpFilePart=0x0) returned 0x58 [0218.667] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\TempState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\TempState\\", lpFilePart=0x0) returned 0x59 [0218.667] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\TempState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7370 [0218.667] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0218.667] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0218.667] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0218.667] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0218.667] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0218.667] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0218.667] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe", lpFilePart=0x0) returned 0x4e [0218.667] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\", lpFilePart=0x0) returned 0x4f [0218.667] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d7550 [0218.690] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0218.690] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0218.690] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0218.690] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0218.691] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0218.691] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0218.691] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0218.691] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0218.691] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0218.691] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0218.691] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0218.692] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0218.692] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0218.692] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0218.692] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0218.692] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe", lpFilePart=0x0) returned 0x4e [0218.692] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\", lpFilePart=0x0) returned 0x4f [0218.692] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d7370 [0218.693] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0218.693] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0218.693] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0218.694] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0218.694] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0218.694] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0218.694] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0218.694] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0218.694] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0218.694] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0218.694] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0218.694] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0218.695] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0218.695] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0218.695] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0218.695] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\AC", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\AC", lpFilePart=0x0) returned 0x51 [0218.695] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\AC\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\AC\\", lpFilePart=0x0) returned 0x52 [0218.695] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\AC\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7370 [0218.702] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0218.702] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0218.702] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0218.702] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0218.703] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0218.703] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0218.703] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0218.703] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0218.704] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0218.704] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0218.704] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\AC", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\AC", lpFilePart=0x0) returned 0x51 [0218.704] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\AC\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\AC\\", lpFilePart=0x0) returned 0x52 [0218.704] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\AC\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d79d0 [0218.704] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0218.705] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0218.705] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0218.705] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0218.705] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0218.705] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0218.705] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0218.706] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0218.706] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0218.706] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0218.706] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\AC\\INetCache", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\AC\\INetCache", lpFilePart=0x0) returned 0x5b [0218.706] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\AC\\INetCache\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\AC\\INetCache\\", lpFilePart=0x0) returned 0x5c [0218.706] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\AC\\INetCache\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7fd0 [0218.708] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0218.708] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0218.709] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0218.709] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0218.709] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0218.709] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0218.709] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\AC\\INetCache", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\AC\\INetCache", lpFilePart=0x0) returned 0x5b [0218.709] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\AC\\INetCache\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\AC\\INetCache\\", lpFilePart=0x0) returned 0x5c [0218.709] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\AC\\INetCache\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7370 [0218.709] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0218.709] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0218.709] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0218.709] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0218.709] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0218.709] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0218.709] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\AC\\INetCookies", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\AC\\INetCookies", lpFilePart=0x0) returned 0x5d [0218.709] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\AC\\INetCookies\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\AC\\INetCookies\\", lpFilePart=0x0) returned 0x5e [0218.709] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\AC\\INetCookies\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d81b0 [0218.710] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0218.710] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0218.710] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0218.710] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0218.710] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0218.710] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0218.710] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\AC\\INetCookies", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\AC\\INetCookies", lpFilePart=0x0) returned 0x5d [0218.710] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\AC\\INetCookies\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\AC\\INetCookies\\", lpFilePart=0x0) returned 0x5e [0218.710] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\AC\\INetCookies\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7c70 [0218.710] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0218.710] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0218.711] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0218.711] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0218.711] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0218.711] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0218.711] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\AC\\INetHistory", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\AC\\INetHistory", lpFilePart=0x0) returned 0x5d [0218.711] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\AC\\INetHistory\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\AC\\INetHistory\\", lpFilePart=0x0) returned 0x5e [0218.711] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\AC\\INetHistory\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7670 [0218.711] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0218.711] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0218.711] FindClose (in: hFindFile=0x5d7670 | out: hFindFile=0x5d7670) returned 1 [0218.711] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0218.711] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0218.711] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0218.711] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\AC\\INetHistory", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\AC\\INetHistory", lpFilePart=0x0) returned 0x5d [0218.711] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\AC\\INetHistory\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\AC\\INetHistory\\", lpFilePart=0x0) returned 0x5e [0218.711] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\AC\\INetHistory\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7eb0 [0218.712] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0218.712] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0218.712] FindClose (in: hFindFile=0x5d7eb0 | out: hFindFile=0x5d7eb0) returned 1 [0218.712] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0218.712] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0218.712] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0218.712] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\AC\\Temp", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\AC\\Temp", lpFilePart=0x0) returned 0x56 [0218.712] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\AC\\Temp\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\AC\\Temp\\", lpFilePart=0x0) returned 0x57 [0218.712] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\AC\\Temp\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7550 [0218.712] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0218.712] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0218.713] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0218.713] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0218.713] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0218.713] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0218.713] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\AC\\Temp", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\AC\\Temp", lpFilePart=0x0) returned 0x56 [0218.713] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\AC\\Temp\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\AC\\Temp\\", lpFilePart=0x0) returned 0x57 [0218.713] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\AC\\Temp\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d79d0 [0218.713] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0218.713] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0218.713] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0218.713] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0218.713] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0218.713] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0218.713] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\AppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\AppData", lpFilePart=0x0) returned 0x56 [0218.713] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\AppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\AppData\\", lpFilePart=0x0) returned 0x57 [0218.713] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\AppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7550 [0218.714] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0218.714] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0218.714] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0218.714] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0218.714] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0218.714] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0218.714] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\AppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\AppData", lpFilePart=0x0) returned 0x56 [0218.714] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\AppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\AppData\\", lpFilePart=0x0) returned 0x57 [0218.714] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\AppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d81b0 [0218.714] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0218.714] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0218.714] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0218.714] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0218.714] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0218.714] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0218.714] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\LocalCache", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\LocalCache", lpFilePart=0x0) returned 0x59 [0218.715] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\LocalCache\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\LocalCache\\", lpFilePart=0x0) returned 0x5a [0218.715] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\LocalCache\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d79d0 [0218.723] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0218.723] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0218.723] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0218.724] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0218.724] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0218.724] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0218.724] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\LocalCache", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\LocalCache", lpFilePart=0x0) returned 0x59 [0218.724] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\LocalCache\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\LocalCache\\", lpFilePart=0x0) returned 0x5a [0218.724] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\LocalCache\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7fd0 [0218.724] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0218.724] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0218.724] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0218.724] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0218.724] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0218.724] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0218.724] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\LocalState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\LocalState", lpFilePart=0x0) returned 0x59 [0218.724] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\LocalState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\LocalState\\", lpFilePart=0x0) returned 0x5a [0218.724] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\LocalState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d78b0 [0218.725] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0218.725] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0218.725] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0218.725] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0218.725] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0218.725] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0218.725] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\LocalState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\LocalState", lpFilePart=0x0) returned 0x59 [0218.725] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\LocalState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\LocalState\\", lpFilePart=0x0) returned 0x5a [0218.725] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\LocalState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7c70 [0218.725] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0218.725] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0218.725] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0218.725] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0218.725] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0218.725] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0218.725] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Microsoft.ZuneVideo_3.6.10811.0_x64__8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Microsoft.ZuneVideo_3.6.10811.0_x64__8wekyb3d8bbwe", lpFilePart=0x0) returned 0x81 [0218.725] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Microsoft.ZuneVideo_3.6.10811.0_x64__8wekyb3d8bbwe\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Microsoft.ZuneVideo_3.6.10811.0_x64__8wekyb3d8bbwe\\", lpFilePart=0x0) returned 0x82 [0218.726] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Microsoft.ZuneVideo_3.6.10811.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7c70 [0218.726] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0218.726] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0218.726] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0218.726] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0218.726] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0218.726] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0218.726] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0218.726] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Microsoft.ZuneVideo_3.6.10811.0_x64__8wekyb3d8bbwe", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Microsoft.ZuneVideo_3.6.10811.0_x64__8wekyb3d8bbwe", lpFilePart=0x0) returned 0x81 [0218.726] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Microsoft.ZuneVideo_3.6.10811.0_x64__8wekyb3d8bbwe\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Microsoft.ZuneVideo_3.6.10811.0_x64__8wekyb3d8bbwe\\", lpFilePart=0x0) returned 0x82 [0218.726] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Microsoft.ZuneVideo_3.6.10811.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7370 [0218.727] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0218.727] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0218.727] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0218.727] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0218.727] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0218.727] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0218.727] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0218.727] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Microsoft.ZuneVideo_3.6.10811.0_x64__8wekyb3d8bbwe\\ActivationStore", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Microsoft.ZuneVideo_3.6.10811.0_x64__8wekyb3d8bbwe\\ActivationStore", lpFilePart=0x0) returned 0x91 [0218.727] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Microsoft.ZuneVideo_3.6.10811.0_x64__8wekyb3d8bbwe\\ActivationStore\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Microsoft.ZuneVideo_3.6.10811.0_x64__8wekyb3d8bbwe\\ActivationStore\\", lpFilePart=0x0) returned 0x92 [0218.727] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Microsoft.ZuneVideo_3.6.10811.0_x64__8wekyb3d8bbwe\\ActivationStore\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7eb0 [0218.740] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0218.740] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0218.740] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0218.740] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0218.740] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0218.740] FindClose (in: hFindFile=0x5d7eb0 | out: hFindFile=0x5d7eb0) returned 1 [0218.741] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0218.741] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0218.741] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0218.741] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Microsoft.ZuneVideo_3.6.10811.0_x64__8wekyb3d8bbwe\\ActivationStore", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Microsoft.ZuneVideo_3.6.10811.0_x64__8wekyb3d8bbwe\\ActivationStore", lpFilePart=0x0) returned 0x91 [0218.741] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Microsoft.ZuneVideo_3.6.10811.0_x64__8wekyb3d8bbwe\\ActivationStore\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Microsoft.ZuneVideo_3.6.10811.0_x64__8wekyb3d8bbwe\\ActivationStore\\", lpFilePart=0x0) returned 0x92 [0218.741] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Microsoft.ZuneVideo_3.6.10811.0_x64__8wekyb3d8bbwe\\ActivationStore\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d78b0 [0218.742] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0218.742] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0218.742] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0218.742] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0218.742] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0218.742] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0218.743] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0218.743] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0218.743] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Microsoft.ZuneVideo_3.6.10811.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Microsoft.ZuneVideo_3.6.10811.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xa5 [0218.743] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0218.743] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Microsoft.ZuneVideo_3.6.10811.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunevideo_8wekyb3d8bbwe\\microsoft.zunevideo_3.6.10811.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), fInfoLevelId=0x0, lpFileInformation=0x21de5e8 | out: lpFileInformation=0x21de5e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8ed0ff0, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xe93496a2, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0xe93496a2, ftLastWriteTime.dwHighDateTime=0x1d2d028, nFileSizeHigh=0x0, nFileSizeLow=0x10000)) returned 1 [0218.744] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0218.744] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Microsoft.ZuneVideo_3.6.10811.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Microsoft.ZuneVideo_3.6.10811.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xa5 [0218.744] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0218.744] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Microsoft.ZuneVideo_3.6.10811.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunevideo_8wekyb3d8bbwe\\microsoft.zunevideo_3.6.10811.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), fInfoLevelId=0x0, lpFileInformation=0x21de7f8 | out: lpFileInformation=0x21de7f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8ed0ff0, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xe93496a2, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0xe93496a2, ftLastWriteTime.dwHighDateTime=0x1d2d028, nFileSizeHigh=0x0, nFileSizeLow=0x10000)) returned 1 [0218.744] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0218.744] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Microsoft.ZuneVideo_3.6.10811.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Microsoft.ZuneVideo_3.6.10811.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xa5 [0218.744] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0218.744] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Microsoft.ZuneVideo_3.6.10811.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunevideo_8wekyb3d8bbwe\\microsoft.zunevideo_3.6.10811.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0218.745] GetFileType (hFile=0x444) returned 0x1 [0218.745] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0218.745] GetFileType (hFile=0x444) returned 0x1 [0218.745] ReadFile (in: hFile=0x444, lpBuffer=0x21e0d48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x21e0d48*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0218.761] CloseHandle (hObject=0x444) returned 1 [0218.761] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Microsoft.ZuneVideo_3.6.10811.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Microsoft.ZuneVideo_3.6.10811.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xa5 [0218.761] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0218.761] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Microsoft.ZuneVideo_3.6.10811.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunevideo_8wekyb3d8bbwe\\microsoft.zunevideo_3.6.10811.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0218.762] GetFileType (hFile=0x444) returned 0x1 [0218.762] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0218.762] GetFileType (hFile=0x444) returned 0x1 [0218.762] WriteFile (in: hFile=0x444, lpBuffer=0x21de9e8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x21de9e8*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0218.762] CloseHandle (hObject=0x444) returned 1 [0218.762] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Microsoft.ZuneVideo_3.6.10811.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Microsoft.ZuneVideo_3.6.10811.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xa5 [0218.762] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Microsoft.ZuneVideo_3.6.10811.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Microsoft.ZuneVideo_3.6.10811.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.xuy", lpFilePart=0x0) returned 0xa9 [0218.762] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0218.762] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Microsoft.ZuneVideo_3.6.10811.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunevideo_8wekyb3d8bbwe\\microsoft.zunevideo_3.6.10811.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8ed0ff0, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xe93496a2, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x6e3e8f7f, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x10000)) returned 1 [0218.762] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0218.762] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Microsoft.ZuneVideo_3.6.10811.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunevideo_8wekyb3d8bbwe\\microsoft.zunevideo_3.6.10811.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Microsoft.ZuneVideo_3.6.10811.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunevideo_8wekyb3d8bbwe\\microsoft.zunevideo_3.6.10811.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.xuy")) returned 1 [0218.764] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Microsoft.ZuneVideo_3.6.10811.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Microsoft.ZuneVideo_3.6.10811.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xaa [0218.764] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0218.764] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Microsoft.ZuneVideo_3.6.10811.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunevideo_8wekyb3d8bbwe\\microsoft.zunevideo_3.6.10811.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x225d3e8 | out: lpFileInformation=0x225d3e8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xe8ef7262, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xe8ef7262, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0xe8ef7262, ftLastWriteTime.dwHighDateTime=0x1d2d028, nFileSizeHigh=0x0, nFileSizeLow=0x9000)) returned 1 [0218.769] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0218.769] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Microsoft.ZuneVideo_3.6.10811.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Microsoft.ZuneVideo_3.6.10811.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xaa [0218.769] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0218.769] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Microsoft.ZuneVideo_3.6.10811.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunevideo_8wekyb3d8bbwe\\microsoft.zunevideo_3.6.10811.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x225d610 | out: lpFileInformation=0x225d610*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xe8ef7262, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xe8ef7262, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0xe8ef7262, ftLastWriteTime.dwHighDateTime=0x1d2d028, nFileSizeHigh=0x0, nFileSizeLow=0x9000)) returned 1 [0218.769] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0218.769] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Microsoft.ZuneVideo_3.6.10811.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Microsoft.ZuneVideo_3.6.10811.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xaa [0218.769] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0218.769] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Microsoft.ZuneVideo_3.6.10811.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunevideo_8wekyb3d8bbwe\\microsoft.zunevideo_3.6.10811.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0218.770] GetFileType (hFile=0x444) returned 0x1 [0218.770] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0218.770] GetFileType (hFile=0x444) returned 0x1 [0218.770] ReadFile (in: hFile=0x444, lpBuffer=0x225fb90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x225fb90*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0218.789] CloseHandle (hObject=0x444) returned 1 [0218.789] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Microsoft.ZuneVideo_3.6.10811.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Microsoft.ZuneVideo_3.6.10811.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xaa [0218.789] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0218.789] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Microsoft.ZuneVideo_3.6.10811.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunevideo_8wekyb3d8bbwe\\microsoft.zunevideo_3.6.10811.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0218.790] GetFileType (hFile=0x444) returned 0x1 [0218.790] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0218.790] GetFileType (hFile=0x444) returned 0x1 [0218.790] WriteFile (in: hFile=0x444, lpBuffer=0x225d818*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x225d818*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0218.790] CloseHandle (hObject=0x444) returned 1 [0218.790] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Microsoft.ZuneVideo_3.6.10811.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Microsoft.ZuneVideo_3.6.10811.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xaa [0218.790] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Microsoft.ZuneVideo_3.6.10811.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Microsoft.ZuneVideo_3.6.10811.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1.xuy", lpFilePart=0x0) returned 0xae [0218.790] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0218.790] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Microsoft.ZuneVideo_3.6.10811.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunevideo_8wekyb3d8bbwe\\microsoft.zunevideo_3.6.10811.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xe8ef7262, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xe8ef7262, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x6e40f0cf, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x9000)) returned 1 [0218.790] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0218.790] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Microsoft.ZuneVideo_3.6.10811.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunevideo_8wekyb3d8bbwe\\microsoft.zunevideo_3.6.10811.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Microsoft.ZuneVideo_3.6.10811.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunevideo_8wekyb3d8bbwe\\microsoft.zunevideo_3.6.10811.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1.xuy")) returned 1 [0218.792] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Microsoft.ZuneVideo_3.6.10811.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Microsoft.ZuneVideo_3.6.10811.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xaa [0218.792] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0218.792] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Microsoft.ZuneVideo_3.6.10811.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunevideo_8wekyb3d8bbwe\\microsoft.zunevideo_3.6.10811.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x22dc260 | out: lpFileInformation=0x22dc260*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xe8ef7262, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xe8ef7262, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0xe8ef7262, ftLastWriteTime.dwHighDateTime=0x1d2d028, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0218.792] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0218.792] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Microsoft.ZuneVideo_3.6.10811.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Microsoft.ZuneVideo_3.6.10811.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xaa [0218.792] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0218.792] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Microsoft.ZuneVideo_3.6.10811.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunevideo_8wekyb3d8bbwe\\microsoft.zunevideo_3.6.10811.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0218.792] GetFileType (hFile=0x444) returned 0x1 [0218.792] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0218.792] GetFileType (hFile=0x444) returned 0x1 [0218.792] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x0 [0218.792] CloseHandle (hObject=0x444) returned 1 [0218.831] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Microsoft.ZuneVideo_3.6.10811.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Microsoft.ZuneVideo_3.6.10811.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xaa [0218.831] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0218.831] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Microsoft.ZuneVideo_3.6.10811.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunevideo_8wekyb3d8bbwe\\microsoft.zunevideo_3.6.10811.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0218.832] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb070) returned 1 [0218.832] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Microsoft.ZuneVideo_3.6.10811.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbcf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Microsoft.ZuneVideo_3.6.10811.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xaa [0218.833] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0218.833] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Microsoft.ZuneVideo_3.6.10811.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunevideo_8wekyb3d8bbwe\\microsoft.zunevideo_3.6.10811.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x3bc270 | out: lpFileInformation=0x3bc270*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xe8ef7262, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xe8ef7262, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0xe8ef7262, ftLastWriteTime.dwHighDateTime=0x1d2d028, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0218.833] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc150) returned 1 [0218.833] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Microsoft.ZuneVideo_3.6.10811.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbd10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Microsoft.ZuneVideo_3.6.10811.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xaa [0218.833] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0218.833] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Microsoft.ZuneVideo_3.6.10811.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunevideo_8wekyb3d8bbwe\\microsoft.zunevideo_3.6.10811.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x2353258 | out: lpFileInformation=0x2353258*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xe8ef7262, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xe8ef7262, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0xe8ef7262, ftLastWriteTime.dwHighDateTime=0x1d2d028, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0218.833] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc150) returned 1 [0218.833] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Microsoft.ZuneVideo_3.6.10811.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Microsoft.ZuneVideo_3.6.10811.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xaa [0218.833] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc050) returned 1 [0218.833] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Microsoft.ZuneVideo_3.6.10811.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunevideo_8wekyb3d8bbwe\\microsoft.zunevideo_3.6.10811.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0218.833] GetFileType (hFile=0x444) returned 0x1 [0218.833] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbfc0) returned 1 [0218.834] GetFileType (hFile=0x444) returned 0x1 [0218.834] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc1e8 | out: lpFileSizeHigh=0x3bc1e8*=0x0) returned 0x0 [0218.834] CloseHandle (hObject=0x444) returned 1 [0218.877] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Microsoft.ZuneVideo_3.6.10811.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Microsoft.ZuneVideo_3.6.10811.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xaa [0218.877] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc050) returned 1 [0218.877] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Microsoft.ZuneVideo_3.6.10811.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunevideo_8wekyb3d8bbwe\\microsoft.zunevideo_3.6.10811.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0218.878] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8ae0) returned 1 [0218.879] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0218.879] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\RoamingState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\RoamingState", lpFilePart=0x0) returned 0x5b [0218.879] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\RoamingState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\RoamingState\\", lpFilePart=0x0) returned 0x5c [0218.879] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\RoamingState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7e50 [0218.879] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0218.879] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0218.879] FindClose (in: hFindFile=0x5d7e50 | out: hFindFile=0x5d7e50) returned 1 [0218.879] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0218.880] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0218.880] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0218.880] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\RoamingState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\RoamingState", lpFilePart=0x0) returned 0x5b [0218.880] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\RoamingState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\RoamingState\\", lpFilePart=0x0) returned 0x5c [0218.880] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\RoamingState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7e50 [0218.880] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0218.880] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0218.880] FindClose (in: hFindFile=0x5d7e50 | out: hFindFile=0x5d7e50) returned 1 [0218.880] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0218.880] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0218.880] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0218.880] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Settings", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Settings", lpFilePart=0x0) returned 0x57 [0218.880] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Settings\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Settings\\", lpFilePart=0x0) returned 0x58 [0218.880] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Settings\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d78b0 [0218.881] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0218.881] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0218.881] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0218.881] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0218.881] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0218.881] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0218.881] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0218.881] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0218.881] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Settings", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Settings", lpFilePart=0x0) returned 0x57 [0218.881] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Settings\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Settings\\", lpFilePart=0x0) returned 0x58 [0218.881] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Settings\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d79d0 [0218.882] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0218.882] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0218.882] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0218.882] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0218.882] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0218.882] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0218.882] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0218.882] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Settings\\roaming.lock", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Settings\\roaming.lock", lpFilePart=0x0) returned 0x64 [0218.882] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0218.882] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunevideo_8wekyb3d8bbwe\\settings\\roaming.lock"), fInfoLevelId=0x0, lpFileInformation=0x21cbb88 | out: lpFileInformation=0x21cbb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7d87e92, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xe7d87e92, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0xe7d87e92, ftLastWriteTime.dwHighDateTime=0x1d2d028, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0218.882] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0218.883] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Settings\\roaming.lock", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Settings\\roaming.lock", lpFilePart=0x0) returned 0x64 [0218.883] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0218.883] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunevideo_8wekyb3d8bbwe\\settings\\roaming.lock"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0218.883] GetFileType (hFile=0x444) returned 0x1 [0218.883] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0218.883] GetFileType (hFile=0x444) returned 0x1 [0218.883] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0x0 [0218.883] CloseHandle (hObject=0x444) returned 1 [0218.893] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Settings\\roaming.lock", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Settings\\roaming.lock", lpFilePart=0x0) returned 0x64 [0218.893] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0218.893] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunevideo_8wekyb3d8bbwe\\settings\\roaming.lock"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0218.894] GetFileType (hFile=0x444) returned 0x1 [0218.894] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0218.894] GetFileType (hFile=0x444) returned 0x1 [0218.894] WriteFile (in: hFile=0x444, lpBuffer=0x2241fd8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x3be628, lpOverlapped=0x0 | out: lpBuffer=0x2241fd8*, lpNumberOfBytesWritten=0x3be628*=0x10, lpOverlapped=0x0) returned 1 [0218.895] CloseHandle (hObject=0x444) returned 1 [0218.895] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Settings\\roaming.lock", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Settings\\roaming.lock", lpFilePart=0x0) returned 0x64 [0218.895] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Settings\\roaming.lock.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Settings\\roaming.lock.xuy", lpFilePart=0x0) returned 0x68 [0218.895] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0218.895] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunevideo_8wekyb3d8bbwe\\settings\\roaming.lock"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7d87e92, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xe7d87e92, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x6e50b9c5, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0218.895] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0218.895] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunevideo_8wekyb3d8bbwe\\settings\\roaming.lock"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Settings\\roaming.lock.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunevideo_8wekyb3d8bbwe\\settings\\roaming.lock.xuy")) returned 1 [0218.896] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Settings\\settings.dat", lpFilePart=0x0) returned 0x64 [0218.896] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0218.896] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunevideo_8wekyb3d8bbwe\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x2243300 | out: lpFileInformation=0x2243300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7cef538, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xe7cef538, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x8d6f5917, ftLastWriteTime.dwHighDateTime=0x1d0baff, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0218.897] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0218.897] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Settings\\settings.dat", lpFilePart=0x0) returned 0x64 [0218.897] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0218.897] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunevideo_8wekyb3d8bbwe\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x2243488 | out: lpFileInformation=0x2243488*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7cef538, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xe7cef538, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x8d6f5917, ftLastWriteTime.dwHighDateTime=0x1d0baff, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0218.897] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0218.897] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Settings\\settings.dat", lpFilePart=0x0) returned 0x64 [0218.897] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0218.897] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunevideo_8wekyb3d8bbwe\\settings\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0218.898] GetFileType (hFile=0x444) returned 0x1 [0218.898] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0218.898] GetFileType (hFile=0x444) returned 0x1 [0218.898] ReadFile (in: hFile=0x444, lpBuffer=0x22458c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x22458c8*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0218.909] CloseHandle (hObject=0x444) returned 1 [0218.909] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Settings\\settings.dat", lpFilePart=0x0) returned 0x64 [0218.909] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0218.909] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunevideo_8wekyb3d8bbwe\\settings\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0218.910] GetFileType (hFile=0x444) returned 0x1 [0218.910] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0218.910] GetFileType (hFile=0x444) returned 0x1 [0218.910] WriteFile (in: hFile=0x444, lpBuffer=0x22435f0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x22435f0*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0218.910] CloseHandle (hObject=0x444) returned 1 [0218.925] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Settings\\settings.dat", lpFilePart=0x0) returned 0x64 [0218.925] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Settings\\settings.dat.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Settings\\settings.dat.xuy", lpFilePart=0x0) returned 0x68 [0218.925] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0218.925] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunevideo_8wekyb3d8bbwe\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7cef538, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xe7cef538, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x6e532149, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0218.925] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0218.925] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunevideo_8wekyb3d8bbwe\\settings\\settings.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Settings\\settings.dat.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunevideo_8wekyb3d8bbwe\\settings\\settings.dat.xuy")) returned 1 [0218.927] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0218.927] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\SystemAppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\SystemAppData", lpFilePart=0x0) returned 0x5c [0218.927] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\SystemAppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\SystemAppData\\", lpFilePart=0x0) returned 0x5d [0218.927] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\SystemAppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d81b0 [0218.927] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0218.927] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0218.927] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0218.928] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0218.928] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0218.928] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0218.928] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\SystemAppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\SystemAppData", lpFilePart=0x0) returned 0x5c [0218.928] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\SystemAppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\SystemAppData\\", lpFilePart=0x0) returned 0x5d [0218.928] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\SystemAppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7670 [0218.928] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0218.928] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0218.928] FindClose (in: hFindFile=0x5d7670 | out: hFindFile=0x5d7670) returned 1 [0218.928] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0218.928] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0218.928] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0218.928] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\TempState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\TempState", lpFilePart=0x0) returned 0x58 [0218.928] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\TempState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\TempState\\", lpFilePart=0x0) returned 0x59 [0218.928] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\TempState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7fd0 [0218.929] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0218.929] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0218.929] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0218.929] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0218.929] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0218.929] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0218.929] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\TempState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\TempState", lpFilePart=0x0) returned 0x58 [0218.929] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\TempState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\TempState\\", lpFilePart=0x0) returned 0x59 [0218.929] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\TempState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7a90 [0218.929] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0218.929] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0218.929] FindClose (in: hFindFile=0x5d7a90 | out: hFindFile=0x5d7a90) returned 1 [0218.930] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0218.930] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0218.930] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0218.930] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy", lpFilePart=0x0) returned 0x51 [0218.930] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\", lpFilePart=0x0) returned 0x52 [0218.930] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d7550 [0218.954] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0218.954] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0218.954] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0218.954] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0218.954] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0218.954] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0218.955] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0218.955] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0218.955] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0218.955] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0218.955] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0218.955] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0218.956] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0218.956] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0218.956] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0218.956] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy", lpFilePart=0x0) returned 0x51 [0218.956] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\", lpFilePart=0x0) returned 0x52 [0218.956] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d75b0 [0218.957] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0218.957] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0218.957] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0218.957] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0218.957] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0218.957] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0218.957] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0218.957] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0218.957] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0218.957] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0218.958] FindNextFileW (in: hFindFile=0x5d75b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0218.958] FindClose (in: hFindFile=0x5d75b0 | out: hFindFile=0x5d75b0) returned 1 [0218.958] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0218.958] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0218.958] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0218.958] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\AC", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\AC", lpFilePart=0x0) returned 0x54 [0218.958] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\AC\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\AC\\", lpFilePart=0x0) returned 0x55 [0218.958] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\AC\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7eb0 [0218.967] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0218.967] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0218.967] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0218.967] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0218.967] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0218.967] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0218.967] FindClose (in: hFindFile=0x5d7eb0 | out: hFindFile=0x5d7eb0) returned 1 [0218.968] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0218.968] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0218.968] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0218.968] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\AC", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\AC", lpFilePart=0x0) returned 0x54 [0218.968] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\AC\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\AC\\", lpFilePart=0x0) returned 0x55 [0218.968] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\AC\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d78b0 [0218.969] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0218.969] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0218.969] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0218.969] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0218.969] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0218.969] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0218.969] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0218.970] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0218.970] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0218.970] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0218.970] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\AC\\INetCache", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\AC\\INetCache", lpFilePart=0x0) returned 0x5e [0218.970] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\AC\\INetCache\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\AC\\INetCache\\", lpFilePart=0x0) returned 0x5f [0218.970] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\AC\\INetCache\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7c70 [0218.971] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0218.971] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0218.971] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0218.971] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0218.971] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0218.971] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0218.971] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\AC\\INetCache", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\AC\\INetCache", lpFilePart=0x0) returned 0x5e [0218.971] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\AC\\INetCache\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\AC\\INetCache\\", lpFilePart=0x0) returned 0x5f [0218.971] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\AC\\INetCache\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d8090 [0218.971] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0218.972] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0218.972] FindClose (in: hFindFile=0x5d8090 | out: hFindFile=0x5d8090) returned 1 [0218.972] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0218.972] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0218.972] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0218.972] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\AC\\INetCookies", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\AC\\INetCookies", lpFilePart=0x0) returned 0x60 [0218.972] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\AC\\INetCookies\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\AC\\INetCookies\\", lpFilePart=0x0) returned 0x61 [0218.972] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\AC\\INetCookies\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7550 [0218.972] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0218.972] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0218.972] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0218.972] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0218.972] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0218.972] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0218.972] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\AC\\INetCookies", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\AC\\INetCookies", lpFilePart=0x0) returned 0x60 [0218.972] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\AC\\INetCookies\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\AC\\INetCookies\\", lpFilePart=0x0) returned 0x61 [0218.973] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\AC\\INetCookies\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7670 [0218.973] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0218.973] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0218.973] FindClose (in: hFindFile=0x5d7670 | out: hFindFile=0x5d7670) returned 1 [0218.973] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0218.973] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0218.973] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0218.973] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\AC\\INetHistory", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\AC\\INetHistory", lpFilePart=0x0) returned 0x60 [0218.973] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\AC\\INetHistory\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\AC\\INetHistory\\", lpFilePart=0x0) returned 0x61 [0218.973] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\AC\\INetHistory\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d79d0 [0218.973] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0218.973] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0218.973] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0218.974] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0218.974] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0218.974] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0218.974] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\AC\\INetHistory", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\AC\\INetHistory", lpFilePart=0x0) returned 0x60 [0218.974] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\AC\\INetHistory\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\AC\\INetHistory\\", lpFilePart=0x0) returned 0x61 [0218.974] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\AC\\INetHistory\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d78b0 [0218.974] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0218.974] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0218.974] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0218.974] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0218.974] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0218.975] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0218.975] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\AC\\Temp", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\AC\\Temp", lpFilePart=0x0) returned 0x59 [0218.975] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\AC\\Temp\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\AC\\Temp\\", lpFilePart=0x0) returned 0x5a [0218.975] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\AC\\Temp\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7fd0 [0218.978] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0218.978] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0218.978] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0218.978] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0218.978] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0218.978] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0218.978] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\AC\\Temp", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\AC\\Temp", lpFilePart=0x0) returned 0x59 [0218.978] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\AC\\Temp\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\AC\\Temp\\", lpFilePart=0x0) returned 0x5a [0218.978] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\AC\\Temp\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7a90 [0218.978] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0218.978] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0218.978] FindClose (in: hFindFile=0x5d7a90 | out: hFindFile=0x5d7a90) returned 1 [0218.979] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0218.979] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0218.979] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0218.979] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\AppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\AppData", lpFilePart=0x0) returned 0x59 [0218.979] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\AppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\AppData\\", lpFilePart=0x0) returned 0x5a [0218.979] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\AppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7c70 [0218.979] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0218.979] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0218.979] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0218.979] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0218.979] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0218.979] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0218.979] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\AppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\AppData", lpFilePart=0x0) returned 0x59 [0218.979] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\AppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\AppData\\", lpFilePart=0x0) returned 0x5a [0218.979] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\AppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7e50 [0218.979] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0218.980] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0218.980] FindClose (in: hFindFile=0x5d7e50 | out: hFindFile=0x5d7e50) returned 1 [0218.980] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0218.980] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0218.980] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0218.980] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\LocalCache", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\LocalCache", lpFilePart=0x0) returned 0x5c [0218.980] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\LocalCache\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\LocalCache\\", lpFilePart=0x0) returned 0x5d [0218.980] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\LocalCache\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d78b0 [0218.980] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0218.980] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0218.980] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0218.980] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0218.980] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0218.980] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0218.980] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\LocalCache", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\LocalCache", lpFilePart=0x0) returned 0x5c [0218.980] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\LocalCache\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\LocalCache\\", lpFilePart=0x0) returned 0x5d [0218.980] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\LocalCache\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d79d0 [0218.981] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0218.981] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0218.981] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0218.981] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0218.981] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0218.981] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0218.981] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\LocalState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\LocalState", lpFilePart=0x0) returned 0x5c [0218.981] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\LocalState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\LocalState\\", lpFilePart=0x0) returned 0x5d [0218.981] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\LocalState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7550 [0218.981] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0218.981] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0218.981] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0218.981] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0218.981] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0218.981] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0218.982] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\LocalState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\LocalState", lpFilePart=0x0) returned 0x5c [0218.982] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\LocalState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\LocalState\\", lpFilePart=0x0) returned 0x5d [0218.982] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\LocalState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7370 [0218.982] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0218.982] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0218.982] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0218.982] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0218.982] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0218.982] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0218.982] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\RoamingState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\RoamingState", lpFilePart=0x0) returned 0x5e [0218.982] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\RoamingState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\RoamingState\\", lpFilePart=0x0) returned 0x5f [0218.982] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\RoamingState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d73d0 [0218.982] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0218.982] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0218.982] FindClose (in: hFindFile=0x5d73d0 | out: hFindFile=0x5d73d0) returned 1 [0218.983] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0218.983] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\RoamingState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\RoamingState", lpFilePart=0x0) returned 0x5e [0218.983] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\RoamingState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\RoamingState\\", lpFilePart=0x0) returned 0x5f [0218.983] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\RoamingState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d79d0 [0218.983] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0218.983] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0218.983] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0218.983] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Settings", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Settings", lpFilePart=0x0) returned 0x5a [0218.983] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Settings\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Settings\\", lpFilePart=0x0) returned 0x5b [0218.983] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Settings\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7550 [0218.988] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0218.988] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0218.988] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0218.988] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0218.989] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0218.989] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0218.989] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0218.989] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Settings", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Settings", lpFilePart=0x0) returned 0x5a [0218.989] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Settings\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Settings\\", lpFilePart=0x0) returned 0x5b [0218.989] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Settings\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7e50 [0218.991] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0218.991] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0218.991] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0218.991] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0218.991] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0218.991] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0218.991] FindClose (in: hFindFile=0x5d7e50 | out: hFindFile=0x5d7e50) returned 1 [0218.992] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Settings\\roaming.lock", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Settings\\roaming.lock", lpFilePart=0x0) returned 0x67 [0218.992] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.contactsupport_cw5n1h2txyewy\\settings\\roaming.lock"), fInfoLevelId=0x0, lpFileInformation=0x22e02b0 | out: lpFileInformation=0x22e02b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd9d02ae, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xbd9d02ae, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xbd9d02ae, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0218.992] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Settings\\roaming.lock", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Settings\\roaming.lock", lpFilePart=0x0) returned 0x67 [0218.992] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.contactsupport_cw5n1h2txyewy\\settings\\roaming.lock"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0218.992] GetFileType (hFile=0x444) returned 0x1 [0218.992] GetFileType (hFile=0x444) returned 0x1 [0218.992] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0x0 [0218.993] CloseHandle (hObject=0x444) returned 1 [0219.002] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Settings\\roaming.lock", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Settings\\roaming.lock", lpFilePart=0x0) returned 0x67 [0219.002] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.contactsupport_cw5n1h2txyewy\\settings\\roaming.lock"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0219.004] GetFileType (hFile=0x444) returned 0x1 [0219.004] GetFileType (hFile=0x444) returned 0x1 [0219.004] WriteFile (in: hFile=0x444, lpBuffer=0x2356700*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x3be628, lpOverlapped=0x0 | out: lpBuffer=0x2356700*, lpNumberOfBytesWritten=0x3be628*=0x10, lpOverlapped=0x0) returned 1 [0219.004] CloseHandle (hObject=0x444) returned 1 [0219.004] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Settings\\roaming.lock", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Settings\\roaming.lock", lpFilePart=0x0) returned 0x67 [0219.005] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Settings\\roaming.lock.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Settings\\roaming.lock.xuy", lpFilePart=0x0) returned 0x6b [0219.005] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.contactsupport_cw5n1h2txyewy\\settings\\roaming.lock"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd9d02ae, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xbd9d02ae, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x6e616a0a, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0219.005] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.contactsupport_cw5n1h2txyewy\\settings\\roaming.lock"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Settings\\roaming.lock.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.contactsupport_cw5n1h2txyewy\\settings\\roaming.lock.xuy")) returned 1 [0219.006] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Settings\\settings.dat", lpFilePart=0x0) returned 0x67 [0219.006] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.contactsupport_cw5n1h2txyewy\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x2357a28 | out: lpFileInformation=0x2357a28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd9d02ae, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0x78b0f724, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x78b0f724, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0219.006] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Settings\\settings.dat", lpFilePart=0x0) returned 0x67 [0219.006] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.contactsupport_cw5n1h2txyewy\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x2357bb0 | out: lpFileInformation=0x2357bb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd9d02ae, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0x78b0f724, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x78b0f724, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0219.006] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Settings\\settings.dat", lpFilePart=0x0) returned 0x67 [0219.006] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.contactsupport_cw5n1h2txyewy\\settings\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0219.007] GetFileType (hFile=0x444) returned 0x1 [0219.007] GetFileType (hFile=0x444) returned 0x1 [0219.007] ReadFile (in: hFile=0x444, lpBuffer=0x2359ff0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x2359ff0*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0219.047] CloseHandle (hObject=0x444) returned 1 [0219.047] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Settings\\settings.dat", lpFilePart=0x0) returned 0x67 [0219.047] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.contactsupport_cw5n1h2txyewy\\settings\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0219.048] GetFileType (hFile=0x444) returned 0x1 [0219.048] GetFileType (hFile=0x444) returned 0x1 [0219.048] WriteFile (in: hFile=0x444, lpBuffer=0x218b0d8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x218b0d8*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0219.048] CloseHandle (hObject=0x444) returned 1 [0219.048] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Settings\\settings.dat", lpFilePart=0x0) returned 0x67 [0219.048] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Settings\\settings.dat.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Settings\\settings.dat.xuy", lpFilePart=0x0) returned 0x6b [0219.048] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.contactsupport_cw5n1h2txyewy\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd9d02ae, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0x78b0f724, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x6e689311, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0219.048] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.contactsupport_cw5n1h2txyewy\\settings\\settings.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Settings\\settings.dat.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.contactsupport_cw5n1h2txyewy\\settings\\settings.dat.xuy")) returned 1 [0219.050] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", lpFilePart=0x0) returned 0x6c [0219.050] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.contactsupport_cw5n1h2txyewy\\settings\\settings.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x21d92a0 | out: lpFileInformation=0x21d92a0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x78a76dc2, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x78a76dc2, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x78a76dc2, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0219.050] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", lpFilePart=0x0) returned 0x6c [0219.050] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.contactsupport_cw5n1h2txyewy\\settings\\settings.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x21d9440 | out: lpFileInformation=0x21d9440*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x78a76dc2, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x78a76dc2, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x78a76dc2, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0219.050] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", lpFilePart=0x0) returned 0x6c [0219.050] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.contactsupport_cw5n1h2txyewy\\settings\\settings.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0219.051] GetFileType (hFile=0x444) returned 0x1 [0219.051] GetFileType (hFile=0x444) returned 0x1 [0219.051] ReadFile (in: hFile=0x444, lpBuffer=0x21db8b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x21db8b0*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0219.106] CloseHandle (hObject=0x444) returned 1 [0219.106] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", lpFilePart=0x0) returned 0x6c [0219.106] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.contactsupport_cw5n1h2txyewy\\settings\\settings.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0219.106] GetFileType (hFile=0x444) returned 0x1 [0219.106] GetFileType (hFile=0x444) returned 0x1 [0219.106] WriteFile (in: hFile=0x444, lpBuffer=0x21d95c0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x21d95c0*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0219.107] CloseHandle (hObject=0x444) returned 1 [0219.107] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", lpFilePart=0x0) returned 0x6c [0219.107] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Settings\\settings.dat.LOG1.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Settings\\settings.dat.LOG1.xuy", lpFilePart=0x0) returned 0x70 [0219.107] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.contactsupport_cw5n1h2txyewy\\settings\\settings.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x78a76dc2, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x78a76dc2, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x6e721d61, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0219.107] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.contactsupport_cw5n1h2txyewy\\settings\\settings.dat.log1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Settings\\settings.dat.LOG1.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.contactsupport_cw5n1h2txyewy\\settings\\settings.dat.log1.xuy")) returned 1 [0219.108] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", lpFilePart=0x0) returned 0x6c [0219.108] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.contactsupport_cw5n1h2txyewy\\settings\\settings.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x2257d90 | out: lpFileInformation=0x2257d90*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x78a76dc2, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x78a76dc2, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x78a76dc2, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0219.110] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", lpFilePart=0x0) returned 0x6c [0219.110] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.contactsupport_cw5n1h2txyewy\\settings\\settings.dat.log2"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0219.110] GetFileType (hFile=0x444) returned 0x1 [0219.111] GetFileType (hFile=0x444) returned 0x1 [0219.111] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0x0 [0219.111] CloseHandle (hObject=0x444) returned 1 [0219.121] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", lpFilePart=0x0) returned 0x6c [0219.121] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.contactsupport_cw5n1h2txyewy\\settings\\settings.dat.log2"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0219.122] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb0e0) returned 1 [0219.123] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", lpFilePart=0x0) returned 0x6c [0219.123] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc200) returned 1 [0219.123] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.contactsupport_cw5n1h2txyewy\\settings\\settings.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x3bc2e0 | out: lpFileInformation=0x3bc2e0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x78a76dc2, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x78a76dc2, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x78a76dc2, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0219.123] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1c0) returned 1 [0219.123] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbd80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", lpFilePart=0x0) returned 0x6c [0219.123] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc200) returned 1 [0219.123] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.contactsupport_cw5n1h2txyewy\\settings\\settings.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x22ceb00 | out: lpFileInformation=0x22ceb00*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x78a76dc2, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x78a76dc2, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x78a76dc2, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0219.123] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1c0) returned 1 [0219.123] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", lpFilePart=0x0) returned 0x6c [0219.123] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0c0) returned 1 [0219.123] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.contactsupport_cw5n1h2txyewy\\settings\\settings.dat.log2"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0219.124] GetFileType (hFile=0x444) returned 0x1 [0219.124] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc030) returned 1 [0219.124] GetFileType (hFile=0x444) returned 0x1 [0219.124] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc258 | out: lpFileSizeHigh=0x3bc258*=0x0) returned 0x0 [0219.124] CloseHandle (hObject=0x444) returned 1 [0219.143] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", lpFilePart=0x0) returned 0x6c [0219.143] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0c0) returned 1 [0219.143] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.contactsupport_cw5n1h2txyewy\\settings\\settings.dat.log2"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0219.145] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8b50) returned 1 [0219.146] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0219.146] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\SystemAppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\SystemAppData", lpFilePart=0x0) returned 0x5f [0219.146] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\SystemAppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\SystemAppData\\", lpFilePart=0x0) returned 0x60 [0219.146] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\SystemAppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7550 [0219.146] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0219.147] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0219.147] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0219.147] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0219.147] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0219.147] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0219.147] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\SystemAppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\SystemAppData", lpFilePart=0x0) returned 0x5f [0219.147] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\SystemAppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\SystemAppData\\", lpFilePart=0x0) returned 0x60 [0219.147] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\SystemAppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7af0 [0219.147] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0219.147] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0219.147] FindClose (in: hFindFile=0x5d7af0 | out: hFindFile=0x5d7af0) returned 1 [0219.147] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0219.148] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0219.148] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0219.148] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\TempState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\TempState", lpFilePart=0x0) returned 0x5b [0219.148] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\TempState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\TempState\\", lpFilePart=0x0) returned 0x5c [0219.148] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\TempState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d81b0 [0219.148] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0219.148] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0219.148] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0219.148] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0219.148] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0219.148] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0219.148] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\TempState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\TempState", lpFilePart=0x0) returned 0x5b [0219.148] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\TempState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\TempState\\", lpFilePart=0x0) returned 0x5c [0219.148] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\TempState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7370 [0219.149] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0219.149] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0219.149] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0219.149] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0219.149] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0219.149] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0219.149] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Windows.ContactSupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Windows.ContactSupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy", lpFilePart=0x0) returned 0x97 [0219.149] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Windows.ContactSupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Windows.ContactSupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\", lpFilePart=0x0) returned 0x98 [0219.149] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Windows.ContactSupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d78b0 [0219.149] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0219.150] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0219.150] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0219.150] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0219.150] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0219.150] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0219.150] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0219.150] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Windows.ContactSupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Windows.ContactSupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy", lpFilePart=0x0) returned 0x97 [0219.150] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Windows.ContactSupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Windows.ContactSupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\", lpFilePart=0x0) returned 0x98 [0219.150] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Windows.ContactSupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7550 [0219.150] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0219.150] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0219.151] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0219.151] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0219.151] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0219.151] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0219.151] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0219.151] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Windows.ContactSupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Windows.ContactSupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore", lpFilePart=0x0) returned 0xa7 [0219.151] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Windows.ContactSupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Windows.ContactSupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\", lpFilePart=0x0) returned 0xa8 [0219.151] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Windows.ContactSupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7610 [0219.154] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0219.154] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0219.154] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0219.154] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0219.154] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0219.154] FindClose (in: hFindFile=0x5d7610 | out: hFindFile=0x5d7610) returned 1 [0219.155] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0219.155] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0219.155] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0219.155] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Windows.ContactSupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Windows.ContactSupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore", lpFilePart=0x0) returned 0xa7 [0219.155] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Windows.ContactSupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Windows.ContactSupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\", lpFilePart=0x0) returned 0xa8 [0219.155] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Windows.ContactSupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d79d0 [0219.156] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0219.156] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0219.156] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0219.156] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0219.156] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0219.157] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0219.157] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0219.157] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0219.157] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Windows.ContactSupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Windows.ContactSupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xbb [0219.157] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0219.157] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Windows.ContactSupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.contactsupport_cw5n1h2txyewy\\windows.contactsupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat"), fInfoLevelId=0x0, lpFileInformation=0x2350fd0 | out: lpFileInformation=0x2350fd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbdb99efe, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xbdbe63d2, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xbdbe63d2, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x4000)) returned 1 [0219.158] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0219.158] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Windows.ContactSupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Windows.ContactSupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xbb [0219.158] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0219.158] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Windows.ContactSupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.contactsupport_cw5n1h2txyewy\\windows.contactsupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat"), fInfoLevelId=0x0, lpFileInformation=0x2351208 | out: lpFileInformation=0x2351208*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbdb99efe, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xbdbe63d2, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xbdbe63d2, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x4000)) returned 1 [0219.158] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0219.158] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Windows.ContactSupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Windows.ContactSupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xbb [0219.158] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0219.158] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Windows.ContactSupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.contactsupport_cw5n1h2txyewy\\windows.contactsupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0219.160] GetFileType (hFile=0x444) returned 0x1 [0219.160] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0219.160] GetFileType (hFile=0x444) returned 0x1 [0219.160] ReadFile (in: hFile=0x444, lpBuffer=0x23537a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x23537a8*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0219.205] CloseHandle (hObject=0x444) returned 1 [0219.205] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Windows.ContactSupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Windows.ContactSupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xbb [0219.205] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0219.205] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Windows.ContactSupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.contactsupport_cw5n1h2txyewy\\windows.contactsupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0219.205] GetFileType (hFile=0x444) returned 0x1 [0219.205] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0219.206] GetFileType (hFile=0x444) returned 0x1 [0219.206] WriteFile (in: hFile=0x444, lpBuffer=0x218b378*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x218b378*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0219.206] CloseHandle (hObject=0x444) returned 1 [0219.206] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Windows.ContactSupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Windows.ContactSupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xbb [0219.206] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Windows.ContactSupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Windows.ContactSupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.xuy", lpFilePart=0x0) returned 0xbf [0219.206] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0219.206] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Windows.ContactSupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.contactsupport_cw5n1h2txyewy\\windows.contactsupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbdb99efe, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xbdbe63d2, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x6e806ac3, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x4000)) returned 1 [0219.206] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0219.206] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Windows.ContactSupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.contactsupport_cw5n1h2txyewy\\windows.contactsupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Windows.ContactSupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.contactsupport_cw5n1h2txyewy\\windows.contactsupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.xuy")) returned 1 [0219.207] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Windows.ContactSupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Windows.ContactSupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xc0 [0219.208] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0219.208] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Windows.ContactSupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.contactsupport_cw5n1h2txyewy\\windows.contactsupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x21d0168 | out: lpFileInformation=0x21d0168*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xbdb99efe, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xbdb99efe, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xbdb99efe, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0219.210] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0219.210] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Windows.ContactSupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Windows.ContactSupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xc0 [0219.210] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0219.210] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Windows.ContactSupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.contactsupport_cw5n1h2txyewy\\windows.contactsupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x21d03c0 | out: lpFileInformation=0x21d03c0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xbdb99efe, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xbdb99efe, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xbdb99efe, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0219.210] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0219.210] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Windows.ContactSupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Windows.ContactSupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xc0 [0219.210] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0219.210] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Windows.ContactSupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.contactsupport_cw5n1h2txyewy\\windows.contactsupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0219.212] GetFileType (hFile=0x444) returned 0x1 [0219.212] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0219.212] GetFileType (hFile=0x444) returned 0x1 [0219.212] ReadFile (in: hFile=0x444, lpBuffer=0x21d29a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x21d29a0*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0219.223] CloseHandle (hObject=0x444) returned 1 [0219.223] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Windows.ContactSupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Windows.ContactSupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xc0 [0219.223] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0219.223] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Windows.ContactSupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.contactsupport_cw5n1h2txyewy\\windows.contactsupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0219.223] GetFileType (hFile=0x444) returned 0x1 [0219.223] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0219.223] GetFileType (hFile=0x444) returned 0x1 [0219.223] WriteFile (in: hFile=0x444, lpBuffer=0x21d05f8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x21d05f8*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0219.224] CloseHandle (hObject=0x444) returned 1 [0219.224] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Windows.ContactSupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Windows.ContactSupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xc0 [0219.224] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Windows.ContactSupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Windows.ContactSupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1.xuy", lpFilePart=0x0) returned 0xc4 [0219.224] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0219.224] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Windows.ContactSupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.contactsupport_cw5n1h2txyewy\\windows.contactsupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xbdb99efe, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xbdb99efe, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x6e82cb92, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0219.224] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0219.224] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Windows.ContactSupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.contactsupport_cw5n1h2txyewy\\windows.contactsupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Windows.ContactSupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.contactsupport_cw5n1h2txyewy\\windows.contactsupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log1.xuy")) returned 1 [0219.231] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Windows.ContactSupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Windows.ContactSupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xc0 [0219.231] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0219.231] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Windows.ContactSupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.contactsupport_cw5n1h2txyewy\\windows.contactsupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x224f130 | out: lpFileInformation=0x224f130*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xbdb99efe, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xbdb99efe, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xbdb99efe, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0219.231] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0219.231] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Windows.ContactSupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Windows.ContactSupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xc0 [0219.231] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0219.231] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Windows.ContactSupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.contactsupport_cw5n1h2txyewy\\windows.contactsupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0219.231] GetFileType (hFile=0x444) returned 0x1 [0219.231] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0219.231] GetFileType (hFile=0x444) returned 0x1 [0219.231] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x0 [0219.231] CloseHandle (hObject=0x444) returned 1 [0219.241] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Windows.ContactSupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Windows.ContactSupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xc0 [0219.242] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0219.242] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Windows.ContactSupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.contactsupport_cw5n1h2txyewy\\windows.contactsupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0219.243] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb070) returned 1 [0219.243] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Windows.ContactSupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbcf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Windows.ContactSupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xc0 [0219.243] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0219.243] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Windows.ContactSupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.contactsupport_cw5n1h2txyewy\\windows.contactsupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x3bc270 | out: lpFileInformation=0x3bc270*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xbdb99efe, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xbdb99efe, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xbdb99efe, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0219.243] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc150) returned 1 [0219.243] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Windows.ContactSupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbd10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Windows.ContactSupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xc0 [0219.244] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0219.244] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Windows.ContactSupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.contactsupport_cw5n1h2txyewy\\windows.contactsupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x22c6218 | out: lpFileInformation=0x22c6218*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xbdb99efe, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xbdb99efe, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xbdb99efe, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0219.244] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc150) returned 1 [0219.244] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Windows.ContactSupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Windows.ContactSupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xc0 [0219.244] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc050) returned 1 [0219.244] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Windows.ContactSupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.contactsupport_cw5n1h2txyewy\\windows.contactsupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0219.244] GetFileType (hFile=0x444) returned 0x1 [0219.244] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbfc0) returned 1 [0219.244] GetFileType (hFile=0x444) returned 0x1 [0219.244] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc1e8 | out: lpFileSizeHigh=0x3bc1e8*=0x0) returned 0x0 [0219.244] CloseHandle (hObject=0x444) returned 1 [0219.254] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Windows.ContactSupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Windows.ContactSupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xc0 [0219.254] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc050) returned 1 [0219.254] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Windows.ContactSupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.contactsupport_cw5n1h2txyewy\\windows.contactsupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0219.257] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8ae0) returned 1 [0219.258] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0219.258] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy", lpFilePart=0x0) returned 0x4e [0219.258] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\", lpFilePart=0x0) returned 0x4f [0219.258] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d7fd0 [0219.260] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0219.260] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0219.261] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0219.261] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0219.261] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0219.261] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0219.261] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0219.261] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0219.261] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0219.261] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0219.261] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0219.262] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0219.262] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0219.262] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0219.262] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy", lpFilePart=0x0) returned 0x4e [0219.262] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\", lpFilePart=0x0) returned 0x4f [0219.262] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d81b0 [0219.263] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0219.263] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0219.263] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0219.263] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0219.263] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0219.264] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0219.264] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0219.264] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0219.264] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0219.264] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0219.264] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0219.265] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0219.265] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0219.265] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0219.265] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\AC", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\AC", lpFilePart=0x0) returned 0x51 [0219.265] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\AC\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\AC\\", lpFilePart=0x0) returned 0x52 [0219.265] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\AC\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7df0 [0219.275] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0219.275] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0219.275] FindClose (in: hFindFile=0x5d7df0 | out: hFindFile=0x5d7df0) returned 1 [0219.275] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0219.275] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0219.275] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0219.276] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\AC", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\AC", lpFilePart=0x0) returned 0x51 [0219.276] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\AC\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\AC\\", lpFilePart=0x0) returned 0x52 [0219.276] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\AC\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7e50 [0219.276] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0219.276] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0219.276] FindClose (in: hFindFile=0x5d7e50 | out: hFindFile=0x5d7e50) returned 1 [0219.276] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0219.276] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0219.276] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0219.276] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\AppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\AppData", lpFilePart=0x0) returned 0x56 [0219.276] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\AppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\AppData\\", lpFilePart=0x0) returned 0x57 [0219.276] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\AppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7e50 [0219.276] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0219.277] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0219.277] FindClose (in: hFindFile=0x5d7e50 | out: hFindFile=0x5d7e50) returned 1 [0219.277] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0219.277] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0219.277] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0219.277] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\AppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\AppData", lpFilePart=0x0) returned 0x56 [0219.277] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\AppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\AppData\\", lpFilePart=0x0) returned 0x57 [0219.277] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\AppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d78b0 [0219.277] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0219.277] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0219.277] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0219.277] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0219.277] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0219.278] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0219.278] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\LocalCache", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\LocalCache", lpFilePart=0x0) returned 0x59 [0219.278] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\LocalCache\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\LocalCache\\", lpFilePart=0x0) returned 0x5a [0219.278] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\LocalCache\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d79d0 [0219.278] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0219.278] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0219.278] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0219.278] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0219.278] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0219.278] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0219.278] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\LocalCache", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\LocalCache", lpFilePart=0x0) returned 0x59 [0219.278] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\LocalCache\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\LocalCache\\", lpFilePart=0x0) returned 0x5a [0219.278] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\LocalCache\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d8090 [0219.279] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0219.279] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0219.279] FindClose (in: hFindFile=0x5d8090 | out: hFindFile=0x5d8090) returned 1 [0219.279] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0219.279] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0219.279] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0219.279] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\LocalState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\LocalState", lpFilePart=0x0) returned 0x59 [0219.279] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\LocalState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\LocalState\\", lpFilePart=0x0) returned 0x5a [0219.279] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\LocalState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7550 [0219.279] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0219.279] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0219.279] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0219.279] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0219.279] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0219.279] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0219.280] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\LocalState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\LocalState", lpFilePart=0x0) returned 0x59 [0219.280] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\LocalState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\LocalState\\", lpFilePart=0x0) returned 0x5a [0219.280] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\LocalState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7af0 [0219.280] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0219.280] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0219.280] FindClose (in: hFindFile=0x5d7af0 | out: hFindFile=0x5d7af0) returned 1 [0219.280] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0219.280] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0219.280] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0219.280] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\RoamingState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\RoamingState", lpFilePart=0x0) returned 0x5b [0219.280] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\RoamingState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\RoamingState\\", lpFilePart=0x0) returned 0x5c [0219.280] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\RoamingState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d78b0 [0219.280] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0219.280] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0219.281] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0219.281] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0219.281] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0219.281] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0219.281] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\RoamingState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\RoamingState", lpFilePart=0x0) returned 0x5b [0219.281] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\RoamingState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\RoamingState\\", lpFilePart=0x0) returned 0x5c [0219.281] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\RoamingState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7eb0 [0219.281] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0219.281] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0219.281] FindClose (in: hFindFile=0x5d7eb0 | out: hFindFile=0x5d7eb0) returned 1 [0219.281] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0219.281] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0219.281] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0219.281] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\Settings", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\Settings", lpFilePart=0x0) returned 0x57 [0219.281] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\Settings\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\Settings\\", lpFilePart=0x0) returned 0x58 [0219.281] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\Settings\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7fd0 [0219.282] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0219.282] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0219.282] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0219.282] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0219.282] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0219.282] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0219.282] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0219.282] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0219.282] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\Settings", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\Settings", lpFilePart=0x0) returned 0x57 [0219.282] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\Settings\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\Settings\\", lpFilePart=0x0) returned 0x58 [0219.282] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\Settings\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d79d0 [0219.282] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0219.282] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0219.283] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0219.283] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0219.283] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0219.283] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0219.283] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0219.283] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\Settings\\roaming.lock", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\Settings\\roaming.lock", lpFilePart=0x0) returned 0x64 [0219.283] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0219.283] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.devicesflow_cw5n1h2txyewy\\settings\\roaming.lock"), fInfoLevelId=0x0, lpFileInformation=0x234d078 | out: lpFileInformation=0x234d078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x715efc49, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x715efc49, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x715efc49, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0219.283] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0219.283] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\Settings\\roaming.lock", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\Settings\\roaming.lock", lpFilePart=0x0) returned 0x64 [0219.283] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0219.283] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.devicesflow_cw5n1h2txyewy\\settings\\roaming.lock"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0219.283] GetFileType (hFile=0x444) returned 0x1 [0219.283] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0219.283] GetFileType (hFile=0x444) returned 0x1 [0219.283] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0x0 [0219.283] CloseHandle (hObject=0x444) returned 1 [0219.325] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\Settings\\roaming.lock", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\Settings\\roaming.lock", lpFilePart=0x0) returned 0x64 [0219.325] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0219.325] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.devicesflow_cw5n1h2txyewy\\settings\\roaming.lock"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0219.326] GetFileType (hFile=0x444) returned 0x1 [0219.326] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0219.326] GetFileType (hFile=0x444) returned 0x1 [0219.326] WriteFile (in: hFile=0x444, lpBuffer=0x21bfd70*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x3be628, lpOverlapped=0x0 | out: lpBuffer=0x21bfd70*, lpNumberOfBytesWritten=0x3be628*=0x10, lpOverlapped=0x0) returned 1 [0219.327] CloseHandle (hObject=0x444) returned 1 [0219.327] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\Settings\\roaming.lock", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\Settings\\roaming.lock", lpFilePart=0x0) returned 0x64 [0219.327] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\Settings\\roaming.lock.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\Settings\\roaming.lock.xuy", lpFilePart=0x0) returned 0x68 [0219.327] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0219.327] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.devicesflow_cw5n1h2txyewy\\settings\\roaming.lock"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x715efc49, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x715efc49, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x6e938073, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0219.327] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0219.327] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.devicesflow_cw5n1h2txyewy\\settings\\roaming.lock"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\Settings\\roaming.lock.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.devicesflow_cw5n1h2txyewy\\settings\\roaming.lock.xuy")) returned 1 [0219.328] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\Settings\\settings.dat", lpFilePart=0x0) returned 0x64 [0219.328] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0219.328] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.devicesflow_cw5n1h2txyewy\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x21c1098 | out: lpFileInformation=0x21c1098*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x715572e3, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x715572e3, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x8d6f5917, ftLastWriteTime.dwHighDateTime=0x1d0baff, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0219.328] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0219.329] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\Settings\\settings.dat", lpFilePart=0x0) returned 0x64 [0219.329] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0219.329] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.devicesflow_cw5n1h2txyewy\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x21c1220 | out: lpFileInformation=0x21c1220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x715572e3, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x715572e3, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x8d6f5917, ftLastWriteTime.dwHighDateTime=0x1d0baff, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0219.329] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0219.329] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\Settings\\settings.dat", lpFilePart=0x0) returned 0x64 [0219.329] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0219.329] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.devicesflow_cw5n1h2txyewy\\settings\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0219.330] GetFileType (hFile=0x444) returned 0x1 [0219.330] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0219.330] GetFileType (hFile=0x444) returned 0x1 [0219.330] ReadFile (in: hFile=0x444, lpBuffer=0x21c3660, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x21c3660*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0219.357] CloseHandle (hObject=0x444) returned 1 [0219.357] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\Settings\\settings.dat", lpFilePart=0x0) returned 0x64 [0219.357] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0219.357] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.devicesflow_cw5n1h2txyewy\\settings\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0219.357] GetFileType (hFile=0x444) returned 0x1 [0219.357] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0219.357] GetFileType (hFile=0x444) returned 0x1 [0219.357] WriteFile (in: hFile=0x444, lpBuffer=0x21c1388*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x21c1388*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0219.357] CloseHandle (hObject=0x444) returned 1 [0219.358] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\Settings\\settings.dat", lpFilePart=0x0) returned 0x64 [0219.358] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\Settings\\settings.dat.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\Settings\\settings.dat.xuy", lpFilePart=0x0) returned 0x68 [0219.358] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0219.358] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.devicesflow_cw5n1h2txyewy\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x715572e3, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x715572e3, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x6e98411e, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0219.358] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0219.358] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.devicesflow_cw5n1h2txyewy\\settings\\settings.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\Settings\\settings.dat.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.devicesflow_cw5n1h2txyewy\\settings\\settings.dat.xuy")) returned 1 [0219.359] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0219.359] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\SystemAppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\SystemAppData", lpFilePart=0x0) returned 0x5c [0219.359] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\SystemAppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\SystemAppData\\", lpFilePart=0x0) returned 0x5d [0219.359] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\SystemAppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d78b0 [0219.359] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0219.360] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0219.360] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0219.360] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0219.360] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0219.360] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0219.360] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\SystemAppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\SystemAppData", lpFilePart=0x0) returned 0x5c [0219.360] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\SystemAppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\SystemAppData\\", lpFilePart=0x0) returned 0x5d [0219.360] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\SystemAppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7c70 [0219.360] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0219.360] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0219.360] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0219.360] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0219.360] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0219.360] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0219.360] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\TempState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\TempState", lpFilePart=0x0) returned 0x58 [0219.360] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\TempState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\TempState\\", lpFilePart=0x0) returned 0x59 [0219.361] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\TempState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d8090 [0219.361] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0219.361] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0219.361] FindClose (in: hFindFile=0x5d8090 | out: hFindFile=0x5d8090) returned 1 [0219.361] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0219.361] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0219.361] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0219.361] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\TempState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\TempState", lpFilePart=0x0) returned 0x58 [0219.361] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\TempState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\TempState\\", lpFilePart=0x0) returned 0x59 [0219.361] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\TempState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7550 [0219.361] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0219.361] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0219.362] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0219.362] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0219.362] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0219.362] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0219.362] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy", lpFilePart=0x0) returned 0x58 [0219.362] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\", lpFilePart=0x0) returned 0x59 [0219.362] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d7670 [0219.362] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0219.362] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0219.362] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0219.362] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0219.362] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0219.363] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0219.363] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0219.363] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0219.363] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0219.363] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0219.363] FindClose (in: hFindFile=0x5d7670 | out: hFindFile=0x5d7670) returned 1 [0219.363] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0219.363] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0219.363] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0219.363] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy", lpFilePart=0x0) returned 0x58 [0219.363] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\", lpFilePart=0x0) returned 0x59 [0219.363] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d79d0 [0219.364] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0219.364] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0219.364] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0219.364] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0219.364] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0219.364] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0219.364] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0219.364] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0219.364] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0219.364] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0219.365] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0219.365] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0219.365] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0219.365] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0219.365] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\AC", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\AC", lpFilePart=0x0) returned 0x5b [0219.365] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\AC\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\AC\\", lpFilePart=0x0) returned 0x5c [0219.365] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\AC\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d78b0 [0219.366] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0219.366] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0219.366] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0219.367] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0219.368] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0219.368] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0219.368] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\AC", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\AC", lpFilePart=0x0) returned 0x5b [0219.368] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\AC\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\AC\\", lpFilePart=0x0) returned 0x5c [0219.368] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\AC\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7fd0 [0219.368] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0219.368] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0219.368] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0219.368] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0219.368] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0219.368] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0219.368] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\AppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\AppData", lpFilePart=0x0) returned 0x60 [0219.368] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\AppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\AppData\\", lpFilePart=0x0) returned 0x61 [0219.368] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\AppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7a90 [0219.369] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0219.369] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0219.369] FindClose (in: hFindFile=0x5d7a90 | out: hFindFile=0x5d7a90) returned 1 [0219.369] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0219.369] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0219.369] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0219.369] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\AppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\AppData", lpFilePart=0x0) returned 0x60 [0219.369] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\AppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\AppData\\", lpFilePart=0x0) returned 0x61 [0219.369] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\AppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7c70 [0219.369] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0219.369] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0219.369] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0219.370] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0219.370] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0219.370] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0219.370] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalCache", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalCache", lpFilePart=0x0) returned 0x63 [0219.370] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalCache\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalCache\\", lpFilePart=0x0) returned 0x64 [0219.370] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalCache\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7e50 [0219.370] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0219.370] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0219.371] FindClose (in: hFindFile=0x5d7e50 | out: hFindFile=0x5d7e50) returned 1 [0219.371] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0219.371] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0219.371] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0219.371] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalCache", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalCache", lpFilePart=0x0) returned 0x63 [0219.372] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0219.372] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0219.372] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0219.372] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0219.372] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0219.372] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0219.373] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0219.373] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0219.373] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0219.373] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0219.373] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0219.373] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0219.373] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0219.373] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0219.373] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0219.374] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0219.374] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0219.374] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0219.374] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0219.374] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0219.374] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0219.374] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0219.374] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0219.374] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0219.374] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0219.375] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0219.375] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0219.375] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0219.375] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0219.375] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0219.375] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0219.375] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be670) returned 1 [0219.375] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be630) returned 1 [0219.375] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0219.696] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0219.696] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0219.696] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6b0) returned 1 [0219.702] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0219.702] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0219.702] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0219.703] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0219.703] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0219.704] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0219.720] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0219.721] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0219.722] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0219.722] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0219.722] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\aaa_Classic_{241d7c96-f8bf-4f85-b01f-e2b043341a4b}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_classic_{241d7c96-f8bf-4f85-b01f-e2b043341a4b}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\aaa_Classic_{241d7c96-f8bf-4f85-b01f-e2b043341a4b}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_classic_{241d7c96-f8bf-4f85-b01f-e2b043341a4b}.settingcontent-ms.xuy")) returned 1 [0219.725] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0219.725] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0219.725] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0219.725] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0219.772] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0219.773] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0219.773] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0219.773] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0219.774] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\aaa_Classic_{33C56305-BA7B-48E0-9784-2D05E3F5D27E}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_classic_{33c56305-ba7b-48e0-9784-2d05e3f5d27e}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\aaa_Classic_{33C56305-BA7B-48E0-9784-2D05E3F5D27E}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_classic_{33c56305-ba7b-48e0-9784-2d05e3f5d27e}.settingcontent-ms.xuy")) returned 1 [0219.776] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0219.776] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0219.776] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0219.776] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0219.800] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0219.801] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0219.802] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0219.802] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0219.802] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\aaa_Classic_{728047C0-00D2-4FDB-A069-06338B92E93B}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_classic_{728047c0-00d2-4fdb-a069-06338b92e93b}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\aaa_Classic_{728047C0-00D2-4FDB-A069-06338B92E93B}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_classic_{728047c0-00d2-4fdb-a069-06338b92e93b}.settingcontent-ms.xuy")) returned 1 [0219.804] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0219.804] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0219.804] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0219.804] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0219.828] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0219.829] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0219.829] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0219.829] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0219.829] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\aaa_Classic_{7940ACF8-60BA-4213-A7C3-F3B400EE266D}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_classic_{7940acf8-60ba-4213-a7c3-f3b400ee266d}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\aaa_Classic_{7940ACF8-60BA-4213-A7C3-F3B400EE266D}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_classic_{7940acf8-60ba-4213-a7c3-f3b400ee266d}.settingcontent-ms.xuy")) returned 1 [0219.832] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0219.832] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0219.832] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0219.832] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0219.856] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0219.857] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0219.858] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0219.858] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0219.858] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\aaa_Classic_{A88F43D0-B9C8-42F2-B9F3-90902FC0B22B}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_classic_{a88f43d0-b9c8-42f2-b9f3-90902fc0b22b}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\aaa_Classic_{A88F43D0-B9C8-42F2-B9F3-90902FC0B22B}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_classic_{a88f43d0-b9c8-42f2-b9f3-90902fc0b22b}.settingcontent-ms.xuy")) returned 1 [0219.861] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0219.861] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0219.861] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0219.861] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0219.885] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0219.886] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0219.887] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0219.887] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0219.887] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\aaa_Classic_{E2E2F6CF-9D1A-4004-8999-8AB81010B5AC}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_classic_{e2e2f6cf-9d1a-4004-8999-8ab81010b5ac}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\aaa_Classic_{E2E2F6CF-9D1A-4004-8999-8AB81010B5AC}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_classic_{e2e2f6cf-9d1a-4004-8999-8ab81010b5ac}.settingcontent-ms.xuy")) returned 1 [0219.890] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0219.890] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0219.890] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0219.890] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0219.910] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0219.911] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0219.912] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be600) returned 1 [0219.912] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0219.912] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_Proxy_Automatic_Config_Group.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_proxy_automatic_config_group.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_Proxy_Automatic_Config_Group.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_proxy_automatic_config_group.settingcontent-ms.xuy")) returned 1 [0219.914] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be640) returned 1 [0219.914] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be600) returned 1 [0219.914] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0219.914] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0219.934] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be500) returned 1 [0219.935] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be470) returned 1 [0219.936] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsChangeAccountPicture.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingschangeaccountpicture.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsChangeAccountPicture.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingschangeaccountpicture.settingcontent-ms.xuy")) returned 1 [0219.973] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupAppSizesList.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgroupappsizeslist.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupAppSizesList.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgroupappsizeslist.settingcontent-ms.xuy")) returned 1 [0219.995] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupAutoplayDefaults.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgroupautoplaydefaults.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupAutoplayDefaults.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgroupautoplaydefaults.settingcontent-ms.xuy")) returned 1 [0220.012] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupDataSenseMainPageOverview.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgroupdatasensemainpageoverview.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupDataSenseMainPageOverview.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgroupdatasensemainpageoverview.settingcontent-ms.xuy")) returned 1 [0220.027] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupDataSenseMainPageSettings.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgroupdatasensemainpagesettings.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupDataSenseMainPageSettings.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgroupdatasensemainpagesettings.settingcontent-ms.xuy")) returned 1 [0220.043] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupEaseOfAccessFilterKeys.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgroupeaseofaccessfilterkeys.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupEaseOfAccessFilterKeys.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgroupeaseofaccessfilterkeys.settingcontent-ms.xuy")) returned 1 [0220.065] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupEaseOfAccessNarrator.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgroupeaseofaccessnarrator.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupEaseOfAccessNarrator.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgroupeaseofaccessnarrator.settingcontent-ms.xuy")) returned 1 [0220.081] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupEaseOfAccessOSK.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgroupeaseofaccessosk.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupEaseOfAccessOSK.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgroupeaseofaccessosk.settingcontent-ms.xuy")) returned 1 [0220.098] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupEaseOfAccessOther.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgroupeaseofaccessother.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupEaseOfAccessOther.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgroupeaseofaccessother.settingcontent-ms.xuy")) returned 1 [0220.118] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupEaseOfAccessStickyKeys.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgroupeaseofaccessstickykeys.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupEaseOfAccessStickyKeys.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgroupeaseofaccessstickykeys.settingcontent-ms.xuy")) returned 1 [0220.137] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupEaseOfAccessToggleKeys.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgroupeaseofaccesstogglekeys.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupEaseOfAccessToggleKeys.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgroupeaseofaccesstogglekeys.settingcontent-ms.xuy")) returned 1 [0220.153] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupFamilyUsers.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgroupfamilyusers.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupFamilyUsers.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgroupfamilyusers.settingcontent-ms.xuy")) returned 1 [0220.180] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupInputMouse.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgroupinputmouse.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupInputMouse.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgroupinputmouse.settingcontent-ms.xuy")) returned 1 [0220.197] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupLockScreenPreview.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgrouplockscreenpreview.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupLockScreenPreview.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgrouplockscreenpreview.settingcontent-ms.xuy")) returned 1 [0220.217] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupMapsUpdates.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgroupmapsupdates.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupMapsUpdates.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgroupmapsupdates.settingcontent-ms.xuy")) returned 1 [0220.336] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupNotificationsAppList.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgroupnotificationsapplist.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupNotificationsAppList.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgroupnotificationsapplist.settingcontent-ms.xuy")) returned 1 [0220.355] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupPCSystemDeviceEncryption.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgrouppcsystemdeviceencryption.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupPCSystemDeviceEncryption.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgrouppcsystemdeviceencryption.settingcontent-ms.xuy")) returned 1 [0220.374] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupPCSystemSupportInfo.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgrouppcsystemsupportinfo.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupPCSystemSupportInfo.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgrouppcsystemsupportinfo.settingcontent-ms.xuy")) returned 1 [0220.397] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupPCSystemWindowsInfo.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgrouppcsystemwindowsinfo.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupPCSystemWindowsInfo.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgrouppcsystemwindowsinfo.settingcontent-ms.xuy")) returned 1 [0220.415] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupPen.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgrouppen.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupPen.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgrouppen.settingcontent-ms.xuy")) returned 1 [0220.432] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupPersonalizeColorChoose.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgrouppersonalizecolorchoose.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupPersonalizeColorChoose.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgrouppersonalizecolorchoose.settingcontent-ms.xuy")) returned 1 [0220.453] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupPicturePassword.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgrouppicturepassword.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupPicturePassword.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgrouppicturepassword.settingcontent-ms.xuy")) returned 1 [0220.468] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupPowerAndSleepDisplayOff.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgrouppowerandsleepdisplayoff.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupPowerAndSleepDisplayOff.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgrouppowerandsleepdisplayoff.settingcontent-ms.xuy")) returned 1 [0220.506] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupPowerAndSleepDisplayOffAoAc.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgrouppowerandsleepdisplayoffaoac.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupPowerAndSleepDisplayOffAoAc.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgrouppowerandsleepdisplayoffaoac.settingcontent-ms.xuy")) returned 1 [0220.521] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupPowerAndSleepSleep.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgrouppowerandsleepsleep.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupPowerAndSleepSleep.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgrouppowerandsleepsleep.settingcontent-ms.xuy")) returned 1 [0220.535] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupPrivacyLocationHistory.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgroupprivacylocationhistory.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupPrivacyLocationHistory.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgroupprivacylocationhistory.settingcontent-ms.xuy")) returned 1 [0220.551] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupRegionDateTimeFormats.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgroupregiondatetimeformats.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupRegionDateTimeFormats.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgroupregiondatetimeformats.settingcontent-ms.xuy")) returned 1 [0220.568] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupSpeechMicrophone.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgroupspeechmicrophone.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupSpeechMicrophone.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgroupspeechmicrophone.settingcontent-ms.xuy")) returned 1 [0220.588] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupVirtualDesktops.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgroupvirtualdesktops.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupVirtualDesktops.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgroupvirtualdesktops.settingcontent-ms.xuy")) returned 1 [0220.655] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupYourAccount.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgroupyouraccount.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupYourAccount.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgroupyouraccount.settingcontent-ms.xuy")) returned 1 [0220.672] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageAccountsManage.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageaccountsmanage.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageAccountsManage.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageaccountsmanage.settingcontent-ms.xuy")) returned 1 [0220.689] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageAccountsPicture.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageaccountspicture.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageAccountsPicture.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageaccountspicture.settingcontent-ms.xuy")) returned 1 [0220.704] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageAccountsSync.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageaccountssync.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageAccountsSync.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageaccountssync.settingcontent-ms.xuy")) returned 1 [0220.723] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageAccountsUsers.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageaccountsusers.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageAccountsUsers.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageaccountsusers.settingcontent-ms.xuy")) returned 1 [0220.737] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageActivate.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageactivate.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageActivate.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageactivate.settingcontent-ms.xuy")) returned 1 [0220.766] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageAppsDefaults.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageappsdefaults.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageAppsDefaults.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageappsdefaults.settingcontent-ms.xuy")) returned 1 [0220.786] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageAppsDefaultsFileExtensionView.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageappsdefaultsfileextensionview.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageAppsDefaultsFileExtensionView.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageappsdefaultsfileextensionview.settingcontent-ms.xuy")) returned 1 [0220.811] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageAppsDefaultsProtocolView.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageappsdefaultsprotocolview.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageAppsDefaultsProtocolView.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageappsdefaultsprotocolview.settingcontent-ms.xuy")) returned 1 [0220.830] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageAppsNotifications.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageappsnotifications.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageAppsNotifications.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageappsnotifications.settingcontent-ms.xuy")) returned 1 [0220.850] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageBackground.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagebackground.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageBackground.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagebackground.settingcontent-ms.xuy")) returned 1 [0220.880] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageBatterySaver.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagebatterysaver.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageBatterySaver.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagebatterysaver.settingcontent-ms.xuy")) returned 1 [0220.895] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageColors.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagecolors.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageColors.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagecolors.settingcontent-ms.xuy")) returned 1 [0220.913] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageDataSenseOverview.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagedatasenseoverview.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageDataSenseOverview.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagedatasenseoverview.settingcontent-ms.xuy")) returned 1 [0220.938] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageDevicesPen.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagedevicespen.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageDevicesPen.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagedevicespen.settingcontent-ms.xuy")) returned 1 [0220.954] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageDevicesPrinters.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagedevicesprinters.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageDevicesPrinters.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagedevicesprinters.settingcontent-ms.xuy")) returned 1 [0220.970] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageEaseOfAccessClosedCaptioning.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageeaseofaccessclosedcaptioning.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageEaseOfAccessClosedCaptioning.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageeaseofaccessclosedcaptioning.settingcontent-ms.xuy")) returned 1 [0220.985] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageEaseOfAccessHighContrast.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageeaseofaccesshighcontrast.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageEaseOfAccessHighContrast.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageeaseofaccesshighcontrast.settingcontent-ms.xuy")) returned 1 [0221.011] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageEaseOfAccessKeyboard.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageeaseofaccesskeyboard.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageEaseOfAccessKeyboard.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageeaseofaccesskeyboard.settingcontent-ms.xuy")) returned 1 [0221.031] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageEaseOfAccessMagnifier.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageeaseofaccessmagnifier.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageEaseOfAccessMagnifier.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageeaseofaccessmagnifier.settingcontent-ms.xuy")) returned 1 [0221.046] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageEaseOfAccessMoreOptions.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageeaseofaccessmoreoptions.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageEaseOfAccessMoreOptions.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageeaseofaccessmoreoptions.settingcontent-ms.xuy")) returned 1 [0221.062] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageEaseOfAccessMouse.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageeaseofaccessmouse.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageEaseOfAccessMouse.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageeaseofaccessmouse.settingcontent-ms.xuy")) returned 1 [0221.078] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageEaseOfAccessNarrator.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageeaseofaccessnarrator.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageEaseOfAccessNarrator.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageeaseofaccessnarrator.settingcontent-ms.xuy")) returned 1 [0221.094] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageLockScreen-2.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagelockscreen-2.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageLockScreen-2.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagelockscreen-2.settingcontent-ms.xuy")) returned 1 [0221.116] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageLockScreen.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagelockscreen.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageLockScreen.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagelockscreen.settingcontent-ms.xuy")) returned 1 [0221.130] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageMaps.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagemaps.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageMaps.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagemaps.settingcontent-ms.xuy")) returned 1 [0221.149] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageMultiTasking.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagemultitasking.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageMultiTasking.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagemultitasking.settingcontent-ms.xuy")) returned 1 [0221.168] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageNetworkAirplaneMode.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagenetworkairplanemode.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageNetworkAirplaneMode.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagenetworkairplanemode.settingcontent-ms.xuy")) returned 1 [0221.183] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageNetworkDialup.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagenetworkdialup.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageNetworkDialup.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagenetworkdialup.settingcontent-ms.xuy")) returned 1 [0221.198] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageNetworkDirectAccess.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagenetworkdirectaccess.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageNetworkDirectAccess.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagenetworkdirectaccess.settingcontent-ms.xuy")) returned 1 [0221.231] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageNetworkEthernet.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagenetworkethernet.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageNetworkEthernet.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagenetworkethernet.settingcontent-ms.xuy")) returned 1 [0221.246] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageNetworkMobileBroadband.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagenetworkmobilebroadband.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageNetworkMobileBroadband.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagenetworkmobilebroadband.settingcontent-ms.xuy")) returned 1 [0221.286] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageNetworkMobileHotspot.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagenetworkmobilehotspot.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageNetworkMobileHotspot.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagenetworkmobilehotspot.settingcontent-ms.xuy")) returned 1 [0221.317] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageNetworkProxy.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagenetworkproxy.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageNetworkProxy.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagenetworkproxy.settingcontent-ms.xuy")) returned 1 [0221.337] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageNetworkVPN.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagenetworkvpn.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageNetworkVPN.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagenetworkvpn.settingcontent-ms.xuy")) returned 1 [0221.352] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageNetworkWiFi.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagenetworkwifi.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageNetworkWiFi.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagenetworkwifi.settingcontent-ms.xuy")) returned 1 [0221.369] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageNetworkWorkplace.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagenetworkworkplace.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageNetworkWorkplace.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagenetworkworkplace.settingcontent-ms.xuy")) returned 1 [0221.385] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePCSystemAutoPlay.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagepcsystemautoplay.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePCSystemAutoPlay.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagepcsystemautoplay.settingcontent-ms.xuy")) returned 1 [0221.400] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePCSystemBluetooth.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagepcsystembluetooth.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePCSystemBluetooth.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagepcsystembluetooth.settingcontent-ms.xuy")) returned 1 [0221.419] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePCSystemDevices.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagepcsystemdevices.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePCSystemDevices.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagepcsystemdevices.settingcontent-ms.xuy")) returned 1 [0221.436] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePCSystemDeviceSettings.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagepcsystemdevicesettings.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePCSystemDeviceSettings.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagepcsystemdevicesettings.settingcontent-ms.xuy")) returned 1 [0221.454] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePCSystemDisplay.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagepcsystemdisplay.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePCSystemDisplay.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagepcsystemdisplay.settingcontent-ms.xuy")) returned 1 [0221.472] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePCSystemInfo.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagepcsysteminfo.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePCSystemInfo.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagepcsysteminfo.settingcontent-ms.xuy")) returned 1 [0221.487] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePCSystemShellMode.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagepcsystemshellmode.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePCSystemShellMode.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagepcsystemshellmode.settingcontent-ms.xuy")) returned 1 [0221.528] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePrivacyAccountInfo.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageprivacyaccountinfo.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePrivacyAccountInfo.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageprivacyaccountinfo.settingcontent-ms.xuy")) returned 1 [0221.543] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePrivacyCalendar.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageprivacycalendar.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePrivacyCalendar.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageprivacycalendar.settingcontent-ms.xuy")) returned 1 [0221.559] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePrivacyContacts.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageprivacycontacts.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePrivacyContacts.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageprivacycontacts.settingcontent-ms.xuy")) returned 1 [0221.579] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePrivacyCustomPeripherals.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageprivacycustomperipherals.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePrivacyCustomPeripherals.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageprivacycustomperipherals.settingcontent-ms.xuy")) returned 1 [0221.626] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePrivacyGeneral.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageprivacygeneral.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePrivacyGeneral.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageprivacygeneral.settingcontent-ms.xuy")) returned 1 [0221.642] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePrivacyLocation.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageprivacylocation.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePrivacyLocation.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageprivacylocation.settingcontent-ms.xuy")) returned 1 [0221.658] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePrivacyMessaging.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageprivacymessaging.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePrivacyMessaging.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageprivacymessaging.settingcontent-ms.xuy")) returned 1 [0221.683] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePrivacyMicrophone.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageprivacymicrophone.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePrivacyMicrophone.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageprivacymicrophone.settingcontent-ms.xuy")) returned 1 [0221.698] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePrivacyMotionData.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageprivacymotiondata.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePrivacyMotionData.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageprivacymotiondata.settingcontent-ms.xuy")) returned 1 [0221.714] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePrivacyPersonalization.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageprivacypersonalization.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePrivacyPersonalization.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageprivacypersonalization.settingcontent-ms.xuy")) returned 1 [0221.744] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePrivacyRadios.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageprivacyradios.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePrivacyRadios.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageprivacyradios.settingcontent-ms.xuy")) returned 1 [0221.759] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePrivacySIUFSettings.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageprivacysiufsettings.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePrivacySIUFSettings.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageprivacysiufsettings.settingcontent-ms.xuy")) returned 1 [0221.774] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePrivacyWebcam.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageprivacywebcam.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePrivacyWebcam.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageprivacywebcam.settingcontent-ms.xuy")) returned 1 [0221.792] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageRestoreDeveloperOptions.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagerestoredeveloperoptions.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageRestoreDeveloperOptions.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagerestoredeveloperoptions.settingcontent-ms.xuy")) returned 1 [0221.807] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageRestoreMusUpdate.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagerestoremusupdate.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageRestoreMusUpdate.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagerestoremusupdate.settingcontent-ms.xuy")) returned 1 [0221.821] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageRestoreOneBackup.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagerestoreonebackup.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageRestoreOneBackup.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagerestoreonebackup.settingcontent-ms.xuy")) returned 1 [0221.837] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageRestoreRestore.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagerestorerestore.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageRestoreRestore.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagerestorerestore.settingcontent-ms.xuy")) returned 1 [0221.859] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageScreenPowerAndSleep.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagescreenpowerandsleep.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageScreenPowerAndSleep.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagescreenpowerandsleep.settingcontent-ms.xuy")) returned 1 [0221.880] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageSpeech.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagespeech.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageSpeech.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagespeech.settingcontent-ms.xuy")) returned 1 [0221.895] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageStart.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagestart.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageStart.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagestart.settingcontent-ms.xuy")) returned 1 [0221.918] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageStorageSenseSaveLocations.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagestoragesensesavelocations.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageStorageSenseSaveLocations.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagestoragesensesavelocations.settingcontent-ms.xuy")) returned 1 [0221.940] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageStorageSenseStorageOverview.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagestoragesensestorageoverview.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageStorageSenseStorageOverview.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagestoragesensestorageoverview.settingcontent-ms.xuy")) returned 1 [0221.955] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageThemes.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagethemes.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageThemes.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagethemes.settingcontent-ms.xuy")) returned 1 [0221.971] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageTimeRegionDateTime.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagetimeregiondatetime.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageTimeRegionDateTime.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagetimeregiondatetime.settingcontent-ms.xuy")) returned 1 [0221.989] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageTimeRegionLanguage.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagetimeregionlanguage.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageTimeRegionLanguage.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagetimeregionlanguage.settingcontent-ms.xuy")) returned 1 [0222.005] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageTimeRegionSpelling.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagetimeregionspelling.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageTimeRegionSpelling.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagetimeregionspelling.settingcontent-ms.xuy")) returned 1 [0222.024] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageWindowsDefender.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagewindowsdefender.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageWindowsDefender.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagewindowsdefender.settingcontent-ms.xuy")) returned 1 [0222.038] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageWindowsServerDefender.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagewindowsserverdefender.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageWindowsServerDefender.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagewindowsserverdefender.settingcontent-ms.xuy")) returned 1 [0222.053] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_Settings_DeveloperModeGroup.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settings_developermodegroup.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_Settings_DeveloperModeGroup.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settings_developermodegroup.settingcontent-ms.xuy")) returned 1 [0222.070] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_Settings_DeviceDiscoveryGroup.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settings_devicediscoverygroup.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_Settings_DeviceDiscoveryGroup.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settings_devicediscoverygroup.settingcontent-ms.xuy")) returned 1 [0222.086] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_CursorThickness.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_cursorthickness.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_CursorThickness.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_cursorthickness.settingcontent-ms.xuy")) returned 1 [0222.108] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_IsAnimationsEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_isanimationsenabled.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_IsAnimationsEnabled.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_isanimationsenabled.settingcontent-ms.xuy")) returned 1 [0222.123] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_IsMouseKeysEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_ismousekeysenabled.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_IsMouseKeysEnabled.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_ismousekeysenabled.settingcontent-ms.xuy")) returned 1 [0222.138] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_IsOverlappedContentEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_isoverlappedcontentenabled.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_IsOverlappedContentEnabled.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_isoverlappedcontentenabled.settingcontent-ms.xuy")) returned 1 [0222.156] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Magnifier_IsAutoStartEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_magnifier_isautostartenabled.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Magnifier_IsAutoStartEnabled.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_magnifier_isautostartenabled.settingcontent-ms.xuy")) returned 1 [0222.176] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Magnifier_IsEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_magnifier_isenabled.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Magnifier_IsEnabled.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_magnifier_isenabled.settingcontent-ms.xuy")) returned 1 [0222.192] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Magnifier_IsFollowInsertPointEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_magnifier_isfollowinsertpointenabled.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Magnifier_IsFollowInsertPointEnabled.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_magnifier_isfollowinsertpointenabled.settingcontent-ms.xuy")) returned 1 [0222.207] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Magnifier_IsFollowKeyFocusEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_magnifier_isfollowkeyfocusenabled.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Magnifier_IsFollowKeyFocusEnabled.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_magnifier_isfollowkeyfocusenabled.settingcontent-ms.xuy")) returned 1 [0222.229] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Magnifier_IsInversionColorEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_magnifier_isinversioncolorenabled.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Magnifier_IsInversionColorEnabled.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_magnifier_isinversioncolorenabled.settingcontent-ms.xuy")) returned 1 [0222.244] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_MouseCursorColor.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_mousecursorcolor.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_MouseCursorColor.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_mousecursorcolor.settingcontent-ms.xuy")) returned 1 [0222.267] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_MouseCursorSize.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_mousecursorsize.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_MouseCursorSize.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_mousecursorsize.settingcontent-ms.xuy")) returned 1 [0222.282] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsAutoStartEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_narrator_isautostartenabled.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsAutoStartEnabled.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_narrator_isautostartenabled.settingcontent-ms.xuy")) returned 1 [0222.299] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsDuckAudioEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_narrator_isduckaudioenabled.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsDuckAudioEnabled.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_narrator_isduckaudioenabled.settingcontent-ms.xuy")) returned 1 [0222.318] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsEchoCharacterEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_narrator_isechocharacterenabled.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsEchoCharacterEnabled.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_narrator_isechocharacterenabled.settingcontent-ms.xuy")) returned 1 [0222.333] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsEchoWordEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_narrator_isechowordenabled.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsEchoWordEnabled.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_narrator_isechowordenabled.settingcontent-ms.xuy")) returned 1 [0222.350] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_narrator_isenabled.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsEnabled.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_narrator_isenabled.settingcontent-ms.xuy")) returned 1 [0222.370] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsFastKeyEntryEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_narrator_isfastkeyentryenabled.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsFastKeyEntryEnabled.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_narrator_isfastkeyentryenabled.settingcontent-ms.xuy")) returned 1 [0222.395] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsFollowInsertionEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_narrator_isfollowinsertionenabled.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsFollowInsertionEnabled.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_narrator_isfollowinsertionenabled.settingcontent-ms.xuy")) returned 1 [0222.412] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsHighlightCursorEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_narrator_ishighlightcursorenabled.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsHighlightCursorEnabled.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_narrator_ishighlightcursorenabled.settingcontent-ms.xuy")) returned 1 [0222.427] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsPlayAudioCuesEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_narrator_isplayaudiocuesenabled.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsPlayAudioCuesEnabled.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_narrator_isplayaudiocuesenabled.settingcontent-ms.xuy")) returned 1 [0222.457] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsReadHintsEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_narrator_isreadhintsenabled.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsReadHintsEnabled.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_narrator_isreadhintsenabled.settingcontent-ms.xuy")) returned 1 [0222.471] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_SpeechPitch.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_narrator_speechpitch.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_SpeechPitch.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_narrator_speechpitch.settingcontent-ms.xuy")) returned 1 [0222.491] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_SpeechSpeed.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_narrator_speechspeed.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_SpeechSpeed.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_narrator_speechspeed.settingcontent-ms.xuy")) returned 1 [0222.509] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_SpeechVoices.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_narrator_speechvoices.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_SpeechVoices.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_narrator_speechvoices.settingcontent-ms.xuy")) returned 1 [0222.526] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_NotificationDuration.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_notificationduration.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_NotificationDuration.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_notificationduration.settingcontent-ms.xuy")) returned 1 [0222.540] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Autoplay_IsEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_autoplay_isenabled.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Autoplay_IsEnabled.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_autoplay_isenabled.settingcontent-ms.xuy")) returned 1 [0222.579] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_BatterySaver_LandingPage_OverrideControl.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_batterysaver_landingpage_overridecontrol.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_BatterySaver_LandingPage_OverrideControl.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_batterysaver_landingpage_overridecontrol.settingcontent-ms.xuy")) returned 1 [0222.626] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_BatterySaver_LandingPage_SettingsLink-2.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_batterysaver_landingpage_settingslink-2.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_BatterySaver_LandingPage_SettingsLink-2.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_batterysaver_landingpage_settingslink-2.settingcontent-ms.xuy")) returned 1 [0222.647] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_BatterySaver_LandingPage_SettingsLink.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_batterysaver_landingpage_settingslink.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_BatterySaver_LandingPage_SettingsLink.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_batterysaver_landingpage_settingslink.settingcontent-ms.xuy")) returned 1 [0222.665] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_BatterySaver_LandingPage_UsageDetailsLink-2.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_batterysaver_landingpage_usagedetailslink-2.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_BatterySaver_LandingPage_UsageDetailsLink-2.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_batterysaver_landingpage_usagedetailslink-2.settingcontent-ms.xuy")) returned 1 [0222.683] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_BatterySaver_LandingPage_UsageDetailsLink.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_batterysaver_landingpage_usagedetailslink.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_BatterySaver_LandingPage_UsageDetailsLink.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_batterysaver_landingpage_usagedetailslink.settingcontent-ms.xuy")) returned 1 [0222.700] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_DataSense_ConfigureSetLimitButton.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_datasense_configuresetlimitbutton.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_DataSense_ConfigureSetLimitButton.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_datasense_configuresetlimitbutton.settingcontent-ms.xuy")) returned 1 [0222.731] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_DateTime_CountryRegion.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_datetime_countryregion.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_DateTime_CountryRegion.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_datetime_countryregion.settingcontent-ms.xuy")) returned 1 [0222.754] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_DateTime_IsAutomaticDSTAdjustEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_datetime_isautomaticdstadjustenabled.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_DateTime_IsAutomaticDSTAdjustEnabled.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_datetime_isautomaticdstadjustenabled.settingcontent-ms.xuy")) returned 1 [0222.769] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_DateTime_IsTimeSetAutomaticallyEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_datetime_istimesetautomaticallyenabled.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_DateTime_IsTimeSetAutomaticallyEnabled.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_datetime_istimesetautomaticallyenabled.settingcontent-ms.xuy")) returned 1 [0222.786] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_DateTime_Set.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_datetime_set.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_DateTime_Set.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_datetime_set.settingcontent-ms.xuy")) returned 1 [0222.809] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_DateTime_SetFormats.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_datetime_setformats.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_DateTime_SetFormats.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_datetime_setformats.settingcontent-ms.xuy")) returned 1 [0222.830] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_DateTime_TimezoneInfo.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_datetime_timezoneinfo.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_DateTime_TimezoneInfo.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_datetime_timezoneinfo.settingcontent-ms.xuy")) returned 1 [0222.851] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_DefaultApps_Audio.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_defaultapps_audio.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_DefaultApps_Audio.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_defaultapps_audio.settingcontent-ms.xuy")) returned 1 [0222.870] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_DefaultApps_Browser.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_defaultapps_browser.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_DefaultApps_Browser.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_defaultapps_browser.settingcontent-ms.xuy")) returned 1 [0222.890] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_DefaultApps_Calendar.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_defaultapps_calendar.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_DefaultApps_Calendar.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_defaultapps_calendar.settingcontent-ms.xuy")) returned 1 [0222.907] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_DefaultApps_Email.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_defaultapps_email.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_DefaultApps_Email.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_defaultapps_email.settingcontent-ms.xuy")) returned 1 [0222.937] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_DefaultApps_Map.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_defaultapps_map.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_DefaultApps_Map.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_defaultapps_map.settingcontent-ms.xuy")) returned 1 [0222.971] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_DefaultApps_Photos.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_defaultapps_photos.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_DefaultApps_Photos.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_defaultapps_photos.settingcontent-ms.xuy")) returned 1 [0222.992] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_DefaultApps_Video.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_defaultapps_video.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_DefaultApps_Video.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_defaultapps_video.settingcontent-ms.xuy")) returned 1 [0223.012] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Devices_Pen_EnablePixie.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_devices_pen_enablepixie.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Devices_Pen_EnablePixie.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_devices_pen_enablepixie.settingcontent-ms.xuy")) returned 1 [0223.027] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Devices_Pen_EnableRipple.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_devices_pen_enableripple.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Devices_Pen_EnableRipple.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_devices_pen_enableripple.settingcontent-ms.xuy")) returned 1 [0223.065] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Devices_Pen_SetHandedness.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_devices_pen_sethandedness.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Devices_Pen_SetHandedness.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_devices_pen_sethandedness.settingcontent-ms.xuy")) returned 1 [0223.080] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Device_Add.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_device_add.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Device_Add.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_device_add.settingcontent-ms.xuy")) returned 1 [0223.116] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Display_AdvancedSettings.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_display_advancedsettings.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Display_AdvancedSettings.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_display_advancedsettings.settingcontent-ms.xuy")) returned 1 [0223.147] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Display_DPI_Override.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_display_dpi_override.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Display_DPI_Override.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_display_dpi_override.settingcontent-ms.xuy")) returned 1 [0223.162] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Display_Duplicate.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_display_duplicate.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Display_Duplicate.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_display_duplicate.settingcontent-ms.xuy")) returned 1 [0223.180] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Display_IdentifyDetectWireless.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_display_identifydetectwireless.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Display_IdentifyDetectWireless.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_display_identifydetectwireless.settingcontent-ms.xuy")) returned 1 [0223.196] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Display_IsAutoBrightnessEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_display_isautobrightnessenabled.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Display_IsAutoBrightnessEnabled.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_display_isautobrightnessenabled.settingcontent-ms.xuy")) returned 1 [0223.223] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Display_IsRotationLocked.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_display_isrotationlocked.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Display_IsRotationLocked.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_display_isrotationlocked.settingcontent-ms.xuy")) returned 1 [0223.239] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Display_MainMonitor.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_display_mainmonitor.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Display_MainMonitor.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_display_mainmonitor.settingcontent-ms.xuy")) returned 1 [0223.255] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Display_Monitors.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_display_monitors.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Display_Monitors.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_display_monitors.settingcontent-ms.xuy")) returned 1 [0223.269] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Display_Orientation.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_display_orientation.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Display_Orientation.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_display_orientation.settingcontent-ms.xuy")) returned 1 [0223.285] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Input_Mouse_SetButtonConfiguration.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_input_mouse_setbuttonconfiguration.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Input_Mouse_SetButtonConfiguration.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_input_mouse_setbuttonconfiguration.settingcontent-ms.xuy")) returned 1 [0223.305] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Input_Mouse_SetScrollPage.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_input_mouse_setscrollpage.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Input_Mouse_SetScrollPage.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_input_mouse_setscrollpage.settingcontent-ms.xuy")) returned 1 [0223.319] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Input_Touch_CursorSpeed.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_input_touch_cursorspeed.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Input_Touch_CursorSpeed.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_input_touch_cursorspeed.settingcontent-ms.xuy")) returned 1 [0223.334] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Input_Touch_EnableEdgeGesture.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_input_touch_enableedgegesture.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Input_Touch_EnableEdgeGesture.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_input_touch_enableedgegesture.settingcontent-ms.xuy")) returned 1 [0223.365] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Input_Touch_EnableTouchPad.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_input_touch_enabletouchpad.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Input_Touch_EnableTouchPad.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_input_touch_enabletouchpad.settingcontent-ms.xuy")) returned 1 [0223.380] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Input_Touch_EnableVisualFeedback.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_input_touch_enablevisualfeedback.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Input_Touch_EnableVisualFeedback.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_input_touch_enablevisualfeedback.settingcontent-ms.xuy")) returned 1 [0223.396] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Input_Touch_EnableVisualFeedbackPM.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_input_touch_enablevisualfeedbackpm.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Input_Touch_EnableVisualFeedbackPM.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_input_touch_enablevisualfeedbackpm.settingcontent-ms.xuy")) returned 1 [0223.409] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Input_Touch_FourFingerTapEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_input_touch_fourfingertapenabled.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Input_Touch_FourFingerTapEnabled.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_input_touch_fourfingertapenabled.settingcontent-ms.xuy")) returned 1 [0223.427] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Input_Touch_LeaveOnWithMouse.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_input_touch_leaveonwithmouse.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Input_Touch_LeaveOnWithMouse.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_input_touch_leaveonwithmouse.settingcontent-ms.xuy")) returned 1 [0223.448] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Input_Touch_PanEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_input_touch_panenabled.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Input_Touch_PanEnabled.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_input_touch_panenabled.settingcontent-ms.xuy")) returned 1 [0223.463] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Input_Touch_RightClickZoneEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_input_touch_rightclickzoneenabled.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Input_Touch_RightClickZoneEnabled.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_input_touch_rightclickzoneenabled.settingcontent-ms.xuy")) returned 1 [0223.478] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Input_Touch_SetActivationTimeout.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_input_touch_setactivationtimeout.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Input_Touch_SetActivationTimeout.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_input_touch_setactivationtimeout.settingcontent-ms.xuy")) returned 1 [0223.564] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Input_Touch_SetScrollDirection.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_input_touch_setscrolldirection.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Input_Touch_SetScrollDirection.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_input_touch_setscrolldirection.settingcontent-ms.xuy")) returned 1 [0223.580] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Input_Touch_TapAndDrag.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_input_touch_tapanddrag.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Input_Touch_TapAndDrag.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_input_touch_tapanddrag.settingcontent-ms.xuy")) returned 1 [0223.638] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Input_Touch_TapsEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_input_touch_tapsenabled.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Input_Touch_TapsEnabled.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_input_touch_tapsenabled.settingcontent-ms.xuy")) returned 1 [0223.668] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Input_Touch_ThreeFingerSlideEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_input_touch_threefingerslideenabled.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Input_Touch_ThreeFingerSlideEnabled.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_input_touch_threefingerslideenabled.settingcontent-ms.xuy")) returned 1 [0223.703] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Input_Touch_ThreeFingerTapEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_input_touch_threefingertapenabled.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Input_Touch_ThreeFingerTapEnabled.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_input_touch_threefingertapenabled.settingcontent-ms.xuy")) returned 1 [0223.726] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Input_Touch_TwoFingerTapEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_input_touch_twofingertapenabled.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Input_Touch_TwoFingerTapEnabled.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_input_touch_twofingertapenabled.settingcontent-ms.xuy")) returned 1 [0223.743] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Input_Touch_ZoomEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_input_touch_zoomenabled.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Input_Touch_ZoomEnabled.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_input_touch_zoomenabled.settingcontent-ms.xuy")) returned 1 [0223.761] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Keyboard_IsAutoCorrectionEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_keyboard_isautocorrectionenabled.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Keyboard_IsAutoCorrectionEnabled.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_keyboard_isautocorrectionenabled.settingcontent-ms.xuy")) returned 1 [0223.776] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Keyboard_IsAutoShiftEngageEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_keyboard_isautoshiftengageenabled.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Keyboard_IsAutoShiftEngageEnabled.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_keyboard_isautoshiftengageenabled.settingcontent-ms.xuy")) returned 1 [0223.803] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Keyboard_IsCompatibilityKeyboardEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_keyboard_iscompatibilitykeyboardenabled.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Keyboard_IsCompatibilityKeyboardEnabled.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_keyboard_iscompatibilitykeyboardenabled.settingcontent-ms.xuy")) returned 1 [0223.825] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Keyboard_IsDoubleTapSpaceEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_keyboard_isdoubletapspaceenabled.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Keyboard_IsDoubleTapSpaceEnabled.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_keyboard_isdoubletapspaceenabled.settingcontent-ms.xuy")) returned 1 [0223.847] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Keyboard_IsKeyAudioFeedbackEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_keyboard_iskeyaudiofeedbackenabled.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Keyboard_IsKeyAudioFeedbackEnabled.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_keyboard_iskeyaudiofeedbackenabled.settingcontent-ms.xuy")) returned 1 [0223.863] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Keyboard_IsPredictionSpaceInsertionEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_keyboard_ispredictionspaceinsertionenabled.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Keyboard_IsPredictionSpaceInsertionEnabled.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_keyboard_ispredictionspaceinsertionenabled.settingcontent-ms.xuy")) returned 1 [0223.895] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Keyboard_IsShiftLockEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_keyboard_isshiftlockenabled.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Keyboard_IsShiftLockEnabled.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_keyboard_isshiftlockenabled.settingcontent-ms.xuy")) returned 1 [0223.922] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Keyboard_IsSpellcheckingEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_keyboard_isspellcheckingenabled.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Keyboard_IsSpellcheckingEnabled.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_keyboard_isspellcheckingenabled.settingcontent-ms.xuy")) returned 1 [0223.938] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Keyboard_IsTextPredictionEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_keyboard_istextpredictionenabled.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Keyboard_IsTextPredictionEnabled.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_keyboard_istextpredictionenabled.settingcontent-ms.xuy")) returned 1 [0223.954] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Language_Add_Profile.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_language_add_profile.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Language_Add_Profile.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_language_add_profile.settingcontent-ms.xuy")) returned 1 [0223.970] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Language_Installed_Profiles_Collection.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_language_installed_profiles_collection.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Language_Installed_Profiles_Collection.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_language_installed_profiles_collection.settingcontent-ms.xuy")) returned 1 [0223.990] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Language_Personal_Data_Control.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_language_personal_data_control.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Language_Personal_Data_Control.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_language_personal_data_control.settingcontent-ms.xuy")) returned 1 [0224.005] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Language_Web_Content_Control.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_language_web_content_control.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Language_Web_Content_Control.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_language_web_content_control.settingcontent-ms.xuy")) returned 1 [0224.031] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Maps_DeleteAll.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_maps_deleteall.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Maps_DeleteAll.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_maps_deleteall.settingcontent-ms.xuy")) returned 1 [0224.047] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Maps_Download_Add_Package.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_maps_download_add_package.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Maps_Download_Add_Package.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_maps_download_add_package.settingcontent-ms.xuy")) returned 1 [0224.062] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Misc_ResetYourPC.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_misc_resetyourpc.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Misc_ResetYourPC.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_misc_resetyourpc.settingcontent-ms.xuy")) returned 1 [0224.097] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Misc_RollbackYourPC_PreviewBuild.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_misc_rollbackyourpc_previewbuild.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Misc_RollbackYourPC_PreviewBuild.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_misc_rollbackyourpc_previewbuild.settingcontent-ms.xuy")) returned 1 [0224.112] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Misc_RollbackYourPC_Windows7.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_misc_rollbackyourpc_windows7.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Misc_RollbackYourPC_Windows7.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_misc_rollbackyourpc_windows7.settingcontent-ms.xuy")) returned 1 [0224.130] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Misc_RollbackYourPC_Windows8.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_misc_rollbackyourpc_windows8.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Misc_RollbackYourPC_Windows8.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_misc_rollbackyourpc_windows8.settingcontent-ms.xuy")) returned 1 [0224.162] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Misc_RollbackYourPC_Windows8_1.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_misc_rollbackyourpc_windows8_1.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Misc_RollbackYourPC_Windows8_1.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_misc_rollbackyourpc_windows8_1.settingcontent-ms.xuy")) returned 1 [0224.177] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_MultiTasking_AeroSnapEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_multitasking_aerosnapenabled.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_MultiTasking_AeroSnapEnabled.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_multitasking_aerosnapenabled.settingcontent-ms.xuy")) returned 1 [0224.213] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_MultiTasking_SnapAssistEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_multitasking_snapassistenabled.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_MultiTasking_SnapAssistEnabled.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_multitasking_snapassistenabled.settingcontent-ms.xuy")) returned 1 [0224.229] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_MultiTasking_SnapFillEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_multitasking_snapfillenabled.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_MultiTasking_SnapFillEnabled.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_multitasking_snapfillenabled.settingcontent-ms.xuy")) returned 1 [0224.263] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_MusUpdate_AdvancedSettingsLink.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_musupdate_advancedsettingslink.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_MusUpdate_AdvancedSettingsLink.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_musupdate_advancedsettingslink.settingcontent-ms.xuy")) returned 1 [0224.279] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_MusUpdate_UpdateActionButton.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_musupdate_updateactionbutton.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_MusUpdate_UpdateActionButton.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_musupdate_updateactionbutton.settingcontent-ms.xuy")) returned 1 [0224.296] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Notifications_PinnedQuickActions.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_notifications_pinnedquickactions.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Notifications_PinnedQuickActions.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_notifications_pinnedquickactions.settingcontent-ms.xuy")) returned 1 [0224.319] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Notifications_SelectIconsToAppearOnTaskbar.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_notifications_selecticonstoappearontaskbar.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Notifications_SelectIconsToAppearOnTaskbar.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_notifications_selecticonstoappearontaskbar.settingcontent-ms.xuy")) returned 1 [0224.336] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Notifications_ShowAppNotifications.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_notifications_showappnotifications.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Notifications_ShowAppNotifications.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_notifications_showappnotifications.settingcontent-ms.xuy")) returned 1 [0224.355] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Notifications_SoftLandingEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_notifications_softlandingenabled.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Notifications_SoftLandingEnabled.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_notifications_softlandingenabled.settingcontent-ms.xuy")) returned 1 [0224.371] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Notifications_SystemIcons.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_notifications_systemicons.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Notifications_SystemIcons.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_notifications_systemicons.settingcontent-ms.xuy")) returned 1 [0224.385] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_PCSystem_ActivateWindowsLicense.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_pcsystem_activatewindowslicense.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_PCSystem_ActivateWindowsLicense.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_pcsystem_activatewindowslicense.settingcontent-ms.xuy")) returned 1 [0224.404] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_PCSystem_GetPCName.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_pcsystem_getpcname.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_PCSystem_GetPCName.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_pcsystem_getpcname.settingcontent-ms.xuy")) returned 1 [0224.426] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_PCSystem_InstalledRamStatus.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_pcsystem_installedramstatus.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_PCSystem_InstalledRamStatus.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_pcsystem_installedramstatus.settingcontent-ms.xuy")) returned 1 [0224.444] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_PCSystem_JoinCloudDomain.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_pcsystem_joinclouddomain.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_PCSystem_JoinCloudDomain.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_pcsystem_joinclouddomain.settingcontent-ms.xuy")) returned 1 [0224.460] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_PCSystem_JoinDomain.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_pcsystem_joindomain.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_PCSystem_JoinDomain.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_pcsystem_joindomain.settingcontent-ms.xuy")) returned 1 [0224.480] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_PCSystem_LeaveOrganization.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_pcsystem_leaveorganization.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_PCSystem_LeaveOrganization.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_pcsystem_leaveorganization.settingcontent-ms.xuy")) returned 1 [0224.495] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_PCSystem_PenAndTouchStatus.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_pcsystem_penandtouchstatus.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_PCSystem_PenAndTouchStatus.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_pcsystem_penandtouchstatus.settingcontent-ms.xuy")) returned 1 [0224.510] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_PCSystem_ProcessorStatus.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_pcsystem_processorstatus.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_PCSystem_ProcessorStatus.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_pcsystem_processorstatus.settingcontent-ms.xuy")) returned 1 [0224.528] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_PCSystem_ProductIdStatus.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_pcsystem_productidstatus.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_PCSystem_ProductIdStatus.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_pcsystem_productidstatus.settingcontent-ms.xuy")) returned 1 [0224.547] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_PCSystem_RenamePC.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_pcsystem_renamepc.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_PCSystem_RenamePC.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_pcsystem_renamepc.settingcontent-ms.xuy")) returned 1 [0224.570] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_PCSystem_SystemTypeStatus.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_pcsystem_systemtypestatus.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_PCSystem_SystemTypeStatus.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_pcsystem_systemtypestatus.settingcontent-ms.xuy")) returned 1 [0224.585] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Personalize_Background_ChooseBackground.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_personalize_background_choosebackground.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Personalize_Background_ChooseBackground.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_personalize_background_choosebackground.settingcontent-ms.xuy")) returned 1 [0224.648] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Personalize_Background_ChooseFit.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_personalize_background_choosefit.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Personalize_Background_ChooseFit.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_personalize_background_choosefit.settingcontent-ms.xuy")) returned 1 [0224.664] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Personalize_Color_ColorPrevalence.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_personalize_color_colorprevalence.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Personalize_Color_ColorPrevalence.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_personalize_color_colorprevalence.settingcontent-ms.xuy")) returned 1 [0224.680] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Personalize_Color_EnableTransparency.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_personalize_color_enabletransparency.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Personalize_Color_EnableTransparency.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_personalize_color_enabletransparency.settingcontent-ms.xuy")) returned 1 [0224.697] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Personalize_LockScreenAppsBadge.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_personalize_lockscreenappsbadge.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Personalize_LockScreenAppsBadge.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_personalize_lockscreenappsbadge.settingcontent-ms.xuy")) returned 1 [0224.718] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Personalize_LockScreenAppsTile.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_personalize_lockscreenappstile.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Personalize_LockScreenAppsTile.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_personalize_lockscreenappstile.settingcontent-ms.xuy")) returned 1 [0224.737] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Personalize_LockScreenBackground.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_personalize_lockscreenbackground.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Personalize_LockScreenBackground.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_personalize_lockscreenbackground.settingcontent-ms.xuy")) returned 1 [0224.753] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Personalize_LockScreenChooseBackgroundType.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_personalize_lockscreenchoosebackgroundtype.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Personalize_LockScreenChooseBackgroundType.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_personalize_lockscreenchoosebackgroundtype.settingcontent-ms.xuy")) returned 1 [0224.772] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Personalize_LockScreenSlideshowSource_CloudBrandName.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_personalize_lockscreenslideshowsource_cloudbrandname.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Personalize_LockScreenSlideshowSource_CloudBrandName.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_personalize_lockscreenslideshowsource_cloudbrandname.settingcontent-ms.xuy")) returned 1 [0224.801] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_PowerAndSleep_DisplayOffTimeoutAC.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_powerandsleep_displayofftimeoutac.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_PowerAndSleep_DisplayOffTimeoutAC.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_powerandsleep_displayofftimeoutac.settingcontent-ms.xuy")) returned 1 [0224.832] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_PowerAndSleep_DisplayOffTimeoutAC_AoAc.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_powerandsleep_displayofftimeoutac_aoac.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_PowerAndSleep_DisplayOffTimeoutAC_AoAc.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_powerandsleep_displayofftimeoutac_aoac.settingcontent-ms.xuy")) returned 1 [0224.866] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_PowerAndSleep_DisplayOffTimeoutDC.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_powerandsleep_displayofftimeoutdc.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_PowerAndSleep_DisplayOffTimeoutDC.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_powerandsleep_displayofftimeoutdc.settingcontent-ms.xuy")) returned 1 [0224.881] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_PowerAndSleep_DisplayOffTimeoutDC_AoAc.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_powerandsleep_displayofftimeoutdc_aoac.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_PowerAndSleep_DisplayOffTimeoutDC_AoAc.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_powerandsleep_displayofftimeoutdc_aoac.settingcontent-ms.xuy")) returned 1 [0224.898] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_PowerAndSleep_SleepTimeoutAC.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_powerandsleep_sleeptimeoutac.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_PowerAndSleep_SleepTimeoutAC.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_powerandsleep_sleeptimeoutac.settingcontent-ms.xuy")) returned 1 [0224.915] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_PowerAndSleep_SleepTimeoutDC.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_powerandsleep_sleeptimeoutdc.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_PowerAndSleep_SleepTimeoutDC.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_powerandsleep_sleeptimeoutdc.settingcontent-ms.xuy")) returned 1 [0224.933] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Privacy_AdvertisingIdEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_privacy_advertisingidenabled.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Privacy_AdvertisingIdEnabled.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_privacy_advertisingidenabled.settingcontent-ms.xuy")) returned 1 [0224.954] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Privacy_EnableCollectionOfUrlsAppsUse.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_privacy_enablecollectionofurlsappsuse.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Privacy_EnableCollectionOfUrlsAppsUse.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_privacy_enablecollectionofurlsappsuse.settingcontent-ms.xuy")) returned 1 [0224.971] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Privacy_OpenPrivacyStatementLink.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_privacy_openprivacystatementlink.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Privacy_OpenPrivacyStatementLink.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_privacy_openprivacystatementlink.settingcontent-ms.xuy")) returned 1 [0225.081] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Proxy_AutomaticConfigScript.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_proxy_automaticconfigscript.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Proxy_AutomaticConfigScript.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_proxy_automaticconfigscript.settingcontent-ms.xuy")) returned 1 [0225.118] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Proxy_AutomaticDetection.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_proxy_automaticdetection.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Proxy_AutomaticDetection.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_proxy_automaticdetection.settingcontent-ms.xuy")) returned 1 [0225.135] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Proxy_ManualProxyAddress.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_proxy_manualproxyaddress.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Proxy_ManualProxyAddress.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_proxy_manualproxyaddress.settingcontent-ms.xuy")) returned 1 [0225.150] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Radio_DeviceList.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_radio_devicelist.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Radio_DeviceList.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_radio_devicelist.settingcontent-ms.xuy")) returned 1 [0225.166] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Radio_IsAirplaneModeEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_radio_isairplanemodeenabled.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Radio_IsAirplaneModeEnabled.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_radio_isairplanemodeenabled.settingcontent-ms.xuy")) returned 1 [0225.184] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_ShellMode_ModeChangeConfig.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_shellmode_modechangeconfig.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_ShellMode_ModeChangeConfig.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_shellmode_modechangeconfig.settingcontent-ms.xuy")) returned 1 [0225.199] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_ShellMode_Preference.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_shellmode_preference.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_ShellMode_Preference.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_shellmode_preference.settingcontent-ms.xuy")) returned 1 [0225.220] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_ShellMode_TaskbarAppsVisibility.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_shellmode_taskbarappsvisibility.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_ShellMode_TaskbarAppsVisibility.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_shellmode_taskbarappsvisibility.settingcontent-ms.xuy")) returned 1 [0225.235] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_ShellMode_Toggle.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_shellmode_toggle.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_ShellMode_Toggle.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_shellmode_toggle.settingcontent-ms.xuy")) returned 1 [0225.250] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Startup_AdvancedStartup.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_startup_advancedstartup.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Startup_AdvancedStartup.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_startup_advancedstartup.settingcontent-ms.xuy")) returned 1 [0225.268] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Start_LinkToPlacesPage.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_start_linktoplacespage.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Start_LinkToPlacesPage.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_start_linktoplacespage.settingcontent-ms.xuy")) returned 1 [0225.283] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Start_ShowRecentlyAddedAppsGroup.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_start_showrecentlyaddedappsgroup.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Start_ShowRecentlyAddedAppsGroup.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_start_showrecentlyaddedappsgroup.settingcontent-ms.xuy")) returned 1 [0225.302] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Start_ShowSuggestedAppsGroup.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_start_showsuggestedappsgroup.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Start_ShowSuggestedAppsGroup.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_start_showsuggestedappsgroup.settingcontent-ms.xuy")) returned 1 [0225.317] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Start_Size.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_start_size.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Start_Size.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_start_size.settingcontent-ms.xuy")) returned 1 [0225.333] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Start_StoreMFUApps.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_start_storemfuapps.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Start_StoreMFUApps.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_start_storemfuapps.settingcontent-ms.xuy")) returned 1 [0225.354] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Start_StoreRecentlyOpenedItems.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_start_storerecentlyopeneditems.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Start_StoreRecentlyOpenedItems.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_start_storerecentlyopeneditems.settingcontent-ms.xuy")) returned 1 [0225.372] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_StorageSense_AppSizesOptionalComponentsLink-2.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_storagesense_appsizesoptionalcomponentslink-2.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_StorageSense_AppSizesOptionalComponentsLink-2.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_storagesense_appsizesoptionalcomponentslink-2.settingcontent-ms.xuy")) returned 1 [0225.388] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_StorageSense_AppSizesOptionalComponentsLink-3.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_storagesense_appsizesoptionalcomponentslink-3.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_StorageSense_AppSizesOptionalComponentsLink-3.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_storagesense_appsizesoptionalcomponentslink-3.settingcontent-ms.xuy")) returned 1 [0225.420] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_StorageSense_AppSizesOptionalComponentsLink.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_storagesense_appsizesoptionalcomponentslink.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_StorageSense_AppSizesOptionalComponentsLink.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_storagesense_appsizesoptionalcomponentslink.settingcontent-ms.xuy")) returned 1 [0225.461] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_SyncSettings_SyncAccessibility_Toggle.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_syncsettings_syncaccessibility_toggle.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_SyncSettings_SyncAccessibility_Toggle.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_syncsettings_syncaccessibility_toggle.settingcontent-ms.xuy")) returned 1 [0225.477] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_SyncSettings_SyncBrowserSettings_Toggle.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_syncsettings_syncbrowsersettings_toggle.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_SyncSettings_SyncBrowserSettings_Toggle.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_syncsettings_syncbrowsersettings_toggle.settingcontent-ms.xuy")) returned 1 [0225.491] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_SyncSettings_SyncCredentials_Toggle.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_syncsettings_synccredentials_toggle.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_SyncSettings_SyncCredentials_Toggle.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_syncsettings_synccredentials_toggle.settingcontent-ms.xuy")) returned 1 [0225.509] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_SyncSettings_SyncLanguage_Toggle.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_syncsettings_synclanguage_toggle.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_SyncSettings_SyncLanguage_Toggle.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_syncsettings_synclanguage_toggle.settingcontent-ms.xuy")) returned 1 [0225.524] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_SyncSettings_SyncMaster_Toggle.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_syncsettings_syncmaster_toggle.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_SyncSettings_SyncMaster_Toggle.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_syncsettings_syncmaster_toggle.settingcontent-ms.xuy")) returned 1 [0225.540] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_SyncSettings_SyncPersonalization_Toggle.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_syncsettings_syncpersonalization_toggle.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_SyncSettings_SyncPersonalization_Toggle.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_syncsettings_syncpersonalization_toggle.settingcontent-ms.xuy")) returned 1 [0225.561] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_SyncSettings_Windows_Toggle.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_syncsettings_windows_toggle.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_SyncSettings_Windows_Toggle.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_syncsettings_windows_toggle.settingcontent-ms.xuy")) returned 1 [0225.585] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Users_AssignedAccess.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_users_assignedaccess.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Users_AssignedAccess.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_users_assignedaccess.settingcontent-ms.xuy")) returned 1 [0225.649] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Users_ChangePassword.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_users_changepassword.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Users_ChangePassword.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_users_changepassword.settingcontent-ms.xuy")) returned 1 [0225.679] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Users_DelayLock.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_users_delaylock.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Users_DelayLock.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_users_delaylock.settingcontent-ms.xuy")) returned 1 [0225.695] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Users_EnrollmentFace.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_users_enrollmentface.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Users_EnrollmentFace.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_users_enrollmentface.settingcontent-ms.xuy")) returned 1 [0225.728] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Users_EnrollmentFingerprint.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_users_enrollmentfingerprint.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Users_EnrollmentFingerprint.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_users_enrollmentfingerprint.settingcontent-ms.xuy")) returned 1 [0225.743] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Users_EnrollmentIris.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_users_enrollmentiris.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Users_EnrollmentIris.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_users_enrollmentiris.settingcontent-ms.xuy")) returned 1 [0225.757] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Users_PicturePassword.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_users_picturepassword.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Users_PicturePassword.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_users_picturepassword.settingcontent-ms.xuy")) returned 1 [0225.780] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Users_PINPassword.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_users_pinpassword.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Users_PINPassword.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_users_pinpassword.settingcontent-ms.xuy")) returned 1 [0225.794] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Users_SingleSignOnAccountList.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_users_singlesignonaccountlist.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Users_SingleSignOnAccountList.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_users_singlesignonaccountlist.settingcontent-ms.xuy")) returned 1 [0225.821] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_VirtualDesktops_AltTabFilter.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_virtualdesktops_alttabfilter.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_VirtualDesktops_AltTabFilter.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_virtualdesktops_alttabfilter.settingcontent-ms.xuy")) returned 1 [0225.846] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_VirtualDesktops_TaskbarFilter.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_virtualdesktops_taskbarfilter.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_VirtualDesktops_TaskbarFilter.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_virtualdesktops_taskbarfilter.settingcontent-ms.xuy")) returned 1 [0225.862] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Workplace_CorpDeviceManagement.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_workplace_corpdevicemanagement.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Workplace_CorpDeviceManagement.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_workplace_corpdevicemanagement.settingcontent-ms.xuy")) returned 1 [0225.878] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Workplace_RelatedSettings.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_workplace_relatedsettings.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Workplace_RelatedSettings.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_workplace_relatedsettings.settingcontent-ms.xuy")) returned 1 [0225.894] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AddOrRemovePrograms.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\addorremoveprograms.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AddOrRemovePrograms.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\addorremoveprograms.settingcontent-ms.xuy")) returned 1 [0225.909] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{0042AE00-17CC-42EC-B5AD-B8F08A025D71}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{0042ae00-17cc-42ec-b5ad-b8f08a025d71}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{0042AE00-17CC-42EC-B5AD-B8F08A025D71}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{0042ae00-17cc-42ec-b5ad-b8f08a025d71}.settingcontent-ms.xuy")) returned 1 [0225.929] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{01ACC6BC-9A3D-49c5-AC7D-0FB9E026C424}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{01acc6bc-9a3d-49c5-ac7d-0fb9e026c424}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{01ACC6BC-9A3D-49c5-AC7D-0FB9E026C424}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{01acc6bc-9a3d-49c5-ac7d-0fb9e026c424}.settingcontent-ms.xuy")) returned 1 [0225.944] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{028DE9F5-65F3-4A06-A048-421056F3E421}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{028de9f5-65f3-4a06-a048-421056f3e421}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{028DE9F5-65F3-4A06-A048-421056F3E421}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{028de9f5-65f3-4a06-a048-421056f3e421}.settingcontent-ms.xuy")) returned 1 [0225.973] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{030C20F0-E20B-417A-B7AD-CEC6EE955CD3}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{030c20f0-e20b-417a-b7ad-cec6ee955cd3}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{030C20F0-E20B-417A-B7AD-CEC6EE955CD3}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{030c20f0-e20b-417a-b7ad-cec6ee955cd3}.settingcontent-ms.xuy")) returned 1 [0225.989] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{059ECE57-19D1-4112-B05C-86F8ED5DA6B0}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{059ece57-19d1-4112-b05c-86f8ed5da6b0}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{059ECE57-19D1-4112-B05C-86F8ED5DA6B0}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{059ece57-19d1-4112-b05c-86f8ed5da6b0}.settingcontent-ms.xuy")) returned 1 [0226.004] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{06628900-13DD-4fc3-A18B-0E9CE7B663ED}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{06628900-13dd-4fc3-a18b-0e9ce7b663ed}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{06628900-13DD-4fc3-A18B-0E9CE7B663ED}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{06628900-13dd-4fc3-a18b-0e9ce7b663ed}.settingcontent-ms.xuy")) returned 1 [0226.031] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{06D12455-F35D-44D6-8E00-3F6A360CC030}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{06d12455-f35d-44d6-8e00-3f6a360cc030}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{06D12455-F35D-44D6-8E00-3F6A360CC030}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{06d12455-f35d-44d6-8e00-3f6a360cc030}.settingcontent-ms.xuy")) returned 1 [0226.048] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{06FF5AE9-8F7C-41AD-B71B-62137DE26715}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{06ff5ae9-8f7c-41ad-b71b-62137de26715}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{06FF5AE9-8F7C-41AD-B71B-62137DE26715}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{06ff5ae9-8f7c-41ad-b71b-62137de26715}.settingcontent-ms.xuy")) returned 1 [0226.085] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{082594D9-8481-43F0-AE8F-62EA920A4220}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{082594d9-8481-43f0-ae8f-62ea920a4220}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{082594D9-8481-43F0-AE8F-62EA920A4220}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{082594d9-8481-43f0-ae8f-62ea920a4220}.settingcontent-ms.xuy")) returned 1 [0226.101] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{083D5202-600A-4f38-981B-2D138FBDC4D1}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{083d5202-600a-4f38-981b-2d138fbdc4d1}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{083D5202-600A-4f38-981B-2D138FBDC4D1}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{083d5202-600a-4f38-981b-2d138fbdc4d1}.settingcontent-ms.xuy")) returned 1 [0226.119] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{08D48377-1C06-416D-B382-61E8D5F6CD18}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{08d48377-1c06-416d-b382-61e8d5f6cd18}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{08D48377-1C06-416D-B382-61E8D5F6CD18}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{08d48377-1c06-416d-b382-61e8d5f6cd18}.settingcontent-ms.xuy")) returned 1 [0226.138] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{08EB53B7-3384-473A-8D2C-6C0E71F3BF34}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{08eb53b7-3384-473a-8d2c-6c0e71f3bf34}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{08EB53B7-3384-473A-8D2C-6C0E71F3BF34}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{08eb53b7-3384-473a-8d2c-6c0e71f3bf34}.settingcontent-ms.xuy")) returned 1 [0226.153] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\classic_{09bf6a57-7bf7-4389-8d6f-2bcf6a26bb4e}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{09bf6a57-7bf7-4389-8d6f-2bcf6a26bb4e}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\classic_{09bf6a57-7bf7-4389-8d6f-2bcf6a26bb4e}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{09bf6a57-7bf7-4389-8d6f-2bcf6a26bb4e}.settingcontent-ms.xuy")) returned 1 [0226.274] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{0CDC534D-A9FF-450D-91D8-96C341ED44AA}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{0cdc534d-a9ff-450d-91d8-96c341ed44aa}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{0CDC534D-A9FF-450D-91D8-96C341ED44AA}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{0cdc534d-a9ff-450d-91d8-96c341ed44aa}.settingcontent-ms.xuy")) returned 1 [0226.311] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{0df44eaa-ff21-4412-828e-260a8728e7f1}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{0df44eaa-ff21-4412-828e-260a8728e7f1}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{0df44eaa-ff21-4412-828e-260a8728e7f1}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{0df44eaa-ff21-4412-828e-260a8728e7f1}.settingcontent-ms.xuy")) returned 1 [0226.326] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{0DF721FA-F921-4416-A491-1924F212C705}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{0df721fa-f921-4416-a491-1924f212c705}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{0DF721FA-F921-4416-A491-1924F212C705}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{0df721fa-f921-4416-a491-1924f212c705}.settingcontent-ms.xuy")) returned 1 [0226.345] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{0e1d43a6-f261-491c-84ea-8bfcc6a4b70b}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{0e1d43a6-f261-491c-84ea-8bfcc6a4b70b}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{0e1d43a6-f261-491c-84ea-8bfcc6a4b70b}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{0e1d43a6-f261-491c-84ea-8bfcc6a4b70b}.settingcontent-ms.xuy")) returned 1 [0226.359] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{0F1B68F6-B72D-4229-BC9C-A87F0B16B17B}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{0f1b68f6-b72d-4229-bc9c-a87f0b16b17b}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{0F1B68F6-B72D-4229-BC9C-A87F0B16B17B}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{0f1b68f6-b72d-4229-bc9c-a87f0b16b17b}.settingcontent-ms.xuy")) returned 1 [0226.375] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{1011988D-12F9-446b-85FF-A1579CCD1678}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{1011988d-12f9-446b-85ff-a1579ccd1678}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{1011988D-12F9-446b-85FF-A1579CCD1678}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{1011988d-12f9-446b-85ff-a1579ccd1678}.settingcontent-ms.xuy")) returned 1 [0226.399] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{10cbe5dd-9921-4090-b412-361339a230ad}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{10cbe5dd-9921-4090-b412-361339a230ad}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{10cbe5dd-9921-4090-b412-361339a230ad}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{10cbe5dd-9921-4090-b412-361339a230ad}.settingcontent-ms.xuy")) returned 1 [0226.417] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{11135AE0-7372-4f85-8D1B-93D6EFBE5A99}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{11135ae0-7372-4f85-8d1b-93d6efbe5a99}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{11135AE0-7372-4f85-8D1B-93D6EFBE5A99}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{11135ae0-7372-4f85-8d1b-93d6efbe5a99}.settingcontent-ms.xuy")) returned 1 [0226.432] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{11E71674-7556-4E27-8D59-03B2FA846204}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{11e71674-7556-4e27-8d59-03b2fa846204}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{11E71674-7556-4E27-8D59-03B2FA846204}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{11e71674-7556-4e27-8d59-03b2fa846204}.settingcontent-ms.xuy")) returned 1 [0226.449] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{1206f5f1-0569-412c-8fec-3204630dfb70}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{1206f5f1-0569-412c-8fec-3204630dfb70}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{1206f5f1-0569-412c-8fec-3204630dfb70}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{1206f5f1-0569-412c-8fec-3204630dfb70}.settingcontent-ms.xuy")) returned 1 [0226.464] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{12BBBD91-8E16-4C3F-9715-16E5C8299244}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{12bbbd91-8e16-4c3f-9715-16e5c8299244}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{12BBBD91-8E16-4C3F-9715-16E5C8299244}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{12bbbd91-8e16-4c3f-9715-16e5c8299244}.settingcontent-ms.xuy")) returned 1 [0226.488] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{141D98AD-3E07-4C44-A578-4DCA078286A4}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{141d98ad-3e07-4c44-a578-4dca078286a4}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{141D98AD-3E07-4C44-A578-4DCA078286A4}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{141d98ad-3e07-4c44-a578-4dca078286a4}.settingcontent-ms.xuy")) returned 1 [0226.519] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{14DEC75C-D6CE-44A9-8349-AD0F46EF96BE}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{14dec75c-d6ce-44a9-8349-ad0f46ef96be}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{14DEC75C-D6CE-44A9-8349-AD0F46EF96BE}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{14dec75c-d6ce-44a9-8349-ad0f46ef96be}.settingcontent-ms.xuy")) returned 1 [0226.535] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{1515BA81-68EB-4143-A29F-51A40A65DAE6}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{1515ba81-68eb-4143-a29f-51a40a65dae6}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{1515BA81-68EB-4143-A29F-51A40A65DAE6}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{1515ba81-68eb-4143-a29f-51a40a65dae6}.settingcontent-ms.xuy")) returned 1 [0226.552] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{16C327FA-D8A8-41C0-B022-64AC67715327}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{16c327fa-d8a8-41c0-b022-64ac67715327}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{16C327FA-D8A8-41C0-B022-64AC67715327}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{16c327fa-d8a8-41c0-b022-64ac67715327}.settingcontent-ms.xuy")) returned 1 [0226.569] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{17468BC4-3ACB-4D2A-98C2-B0B7B4EF29E6}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{17468bc4-3acb-4d2a-98c2-b0b7b4ef29e6}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{17468BC4-3ACB-4D2A-98C2-B0B7B4EF29E6}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{17468bc4-3acb-4d2a-98c2-b0b7b4ef29e6}.settingcontent-ms.xuy")) returned 1 [0226.588] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{17cd9488-1228-4b2f-88ce-4298e93e0966}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{17cd9488-1228-4b2f-88ce-4298e93e0966}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{17cd9488-1228-4b2f-88ce-4298e93e0966}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{17cd9488-1228-4b2f-88ce-4298e93e0966}.settingcontent-ms.xuy")) returned 1 [0226.653] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{1845AA13-3644-4FBC-B766-EEEF29683256}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{1845aa13-3644-4fbc-b766-eeef29683256}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{1845AA13-3644-4FBC-B766-EEEF29683256}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{1845aa13-3644-4fbc-b766-eeef29683256}.settingcontent-ms.xuy")) returned 1 [0226.668] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{1928DA28-C5A7-4F13-AF81-8238D57A793F}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{1928da28-c5a7-4f13-af81-8238d57a793f}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{1928DA28-C5A7-4F13-AF81-8238D57A793F}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{1928da28-c5a7-4f13-af81-8238d57a793f}.settingcontent-ms.xuy")) returned 1 [0226.691] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{1a4635ec-181d-45ae-b691-bc75bec02756}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{1a4635ec-181d-45ae-b691-bc75bec02756}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{1a4635ec-181d-45ae-b691-bc75bec02756}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{1a4635ec-181d-45ae-b691-bc75bec02756}.settingcontent-ms.xuy")) returned 1 [0226.706] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{1A5712E4-AAD7-4717-B22A-CF0B8438E2E6}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{1a5712e4-aad7-4717-b22a-cf0b8438e2e6}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{1A5712E4-AAD7-4717-B22A-CF0B8438E2E6}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{1a5712e4-aad7-4717-b22a-cf0b8438e2e6}.settingcontent-ms.xuy")) returned 1 [0226.723] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{1BDB99DF-3832-49D6-9AE0-52105DB568DA}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{1bdb99df-3832-49d6-9ae0-52105db568da}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{1BDB99DF-3832-49D6-9AE0-52105DB568DA}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{1bdb99df-3832-49d6-9ae0-52105db568da}.settingcontent-ms.xuy")) returned 1 [0226.753] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{1DD03EE3-FC46-456A-8632-B0717A9D497D}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{1dd03ee3-fc46-456a-8632-b0717a9d497d}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{1DD03EE3-FC46-456A-8632-B0717A9D497D}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{1dd03ee3-fc46-456a-8632-b0717a9d497d}.settingcontent-ms.xuy")) returned 1 [0226.769] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{201CEF4B-7444-4B2F-B885-5E8F0AA1D614}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{201cef4b-7444-4b2f-b885-5e8f0aa1d614}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{201CEF4B-7444-4B2F-B885-5E8F0AA1D614}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{201cef4b-7444-4b2f-b885-5e8f0aa1d614}.settingcontent-ms.xuy")) returned 1 [0226.786] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{207D6BD2-A09B-406f-8A72-BC90C49FC152}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{207d6bd2-a09b-406f-8a72-bc90c49fc152}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{207D6BD2-A09B-406f-8A72-BC90C49FC152}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{207d6bd2-a09b-406f-8a72-bc90c49fc152}.settingcontent-ms.xuy")) returned 1 [0226.803] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{21A5437E-D266-4F56-A146-06744A8BC071}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{21a5437e-d266-4f56-a146-06744a8bc071}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{21A5437E-D266-4F56-A146-06744A8BC071}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{21a5437e-d266-4f56-a146-06744a8bc071}.settingcontent-ms.xuy")) returned 1 [0226.818] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{232A1851-808C-4B44-A92A-38E862989CE5}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{232a1851-808c-4b44-a92a-38e862989ce5}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{232A1851-808C-4B44-A92A-38E862989CE5}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{232a1851-808c-4b44-a92a-38e862989ce5}.settingcontent-ms.xuy")) returned 1 [0226.837] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{29B87534-19A8-4A39-AA81-2148E7DE5894}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{29b87534-19a8-4a39-aa81-2148e7de5894}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{29B87534-19A8-4A39-AA81-2148E7DE5894}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{29b87534-19a8-4a39-aa81-2148e7de5894}.settingcontent-ms.xuy")) returned 1 [0226.869] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{2B6FE85A-C7AA-440F-B9A3-3F5EDCA3F6C2}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{2b6fe85a-c7aa-440f-b9a3-3f5edca3f6c2}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{2B6FE85A-C7AA-440F-B9A3-3F5EDCA3F6C2}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{2b6fe85a-c7aa-440f-b9a3-3f5edca3f6c2}.settingcontent-ms.xuy")) returned 1 [0226.884] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{2D06D17B-2A5F-4835-AF30-6D2D58A4A66C}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{2d06d17b-2a5f-4835-af30-6d2d58a4a66c}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{2D06D17B-2A5F-4835-AF30-6D2D58A4A66C}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{2d06d17b-2a5f-4835-af30-6d2d58a4a66c}.settingcontent-ms.xuy")) returned 1 [0226.902] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{30137454-0E1F-43bb-9CB8-AEF452964B0B}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{30137454-0e1f-43bb-9cb8-aef452964b0b}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{30137454-0E1F-43bb-9CB8-AEF452964B0B}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{30137454-0e1f-43bb-9cb8-aef452964b0b}.settingcontent-ms.xuy")) returned 1 [0226.917] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{31DD3DA1-ED44-4BA8-A67B-6EA93DEA77E7}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{31dd3da1-ed44-4ba8-a67b-6ea93dea77e7}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{31DD3DA1-ED44-4BA8-A67B-6EA93DEA77E7}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{31dd3da1-ed44-4ba8-a67b-6ea93dea77e7}.settingcontent-ms.xuy")) returned 1 [0226.935] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{33843DB0-24E7-4682-A019-5393D7F2BFFA}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{33843db0-24e7-4682-a019-5393d7f2bffa}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{33843DB0-24E7-4682-A019-5393D7F2BFFA}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{33843db0-24e7-4682-a019-5393d7f2bffa}.settingcontent-ms.xuy")) returned 1 [0226.957] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{33F1F9B5-BD94-4D77-96AE-62F10E4A010A}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{33f1f9b5-bd94-4d77-96ae-62f10e4a010a}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{33F1F9B5-BD94-4D77-96AE-62F10E4A010A}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{33f1f9b5-bd94-4d77-96ae-62f10e4a010a}.settingcontent-ms.xuy")) returned 1 [0226.978] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{36C8B34B-83F9-4704-B817-9AB1A723705A}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{36c8b34b-83f9-4704-b817-9ab1a723705a}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{36C8B34B-83F9-4704-B817-9AB1A723705A}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{36c8b34b-83f9-4704-b817-9ab1a723705a}.settingcontent-ms.xuy")) returned 1 [0226.993] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{36fb1658-3a23-4d62-9bfd-37f4b18a85e9}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{36fb1658-3a23-4d62-9bfd-37f4b18a85e9}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{36fb1658-3a23-4d62-9bfd-37f4b18a85e9}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{36fb1658-3a23-4d62-9bfd-37f4b18a85e9}.settingcontent-ms.xuy")) returned 1 [0227.012] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{37092408-D49C-451D-B56D-78B243DC475C}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{37092408-d49c-451d-b56d-78b243dc475c}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{37092408-D49C-451D-B56D-78B243DC475C}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{37092408-d49c-451d-b56d-78b243dc475c}.settingcontent-ms.xuy")) returned 1 [0227.027] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{37C361D8-51CD-40fa-A797-8FC1EA28F9F4}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{37c361d8-51cd-40fa-a797-8fc1ea28f9f4}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{37C361D8-51CD-40fa-A797-8FC1EA28F9F4}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{37c361d8-51cd-40fa-a797-8fc1ea28f9f4}.settingcontent-ms.xuy")) returned 1 [0227.042] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{37E2F32E-C821-4094-B429-2B4E8EA810AA}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{37e2f32e-c821-4094-b429-2b4e8ea810aa}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{37E2F32E-C821-4094-B429-2B4E8EA810AA}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{37e2f32e-c821-4094-b429-2b4e8ea810aa}.settingcontent-ms.xuy")) returned 1 [0227.057] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{38bd6d6e-bf78-4c31-b05a-7447ee37669f}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{38bd6d6e-bf78-4c31-b05a-7447ee37669f}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{38bd6d6e-bf78-4c31-b05a-7447ee37669f}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{38bd6d6e-bf78-4c31-b05a-7447ee37669f}.settingcontent-ms.xuy")) returned 1 [0227.074] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{3911D4F8-AD61-4911-A151-5682C26A7427}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{3911d4f8-ad61-4911-a151-5682c26a7427}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{3911D4F8-AD61-4911-A151-5682C26A7427}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{3911d4f8-ad61-4911-a151-5682c26a7427}.settingcontent-ms.xuy")) returned 1 [0227.089] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{3A100872-EC27-46A5-BBCC-92C90635AE3B}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{3a100872-ec27-46a5-bbcc-92c90635ae3b}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{3A100872-EC27-46A5-BBCC-92C90635AE3B}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{3a100872-ec27-46a5-bbcc-92c90635ae3b}.settingcontent-ms.xuy")) returned 1 [0227.118] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{3A4140C8-50D3-44E9-BF50-C878204DE0F5}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{3a4140c8-50d3-44e9-bf50-c878204de0f5}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{3A4140C8-50D3-44E9-BF50-C878204DE0F5}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{3a4140c8-50d3-44e9-bf50-c878204de0f5}.settingcontent-ms.xuy")) returned 1 [0227.133] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{3F0AD6DB-3246-48E4-ACD7-696FF62AE68D}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{3f0ad6db-3246-48e4-acd7-696ff62ae68d}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{3F0AD6DB-3246-48E4-ACD7-696FF62AE68D}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{3f0ad6db-3246-48e4-acd7-696ff62ae68d}.settingcontent-ms.xuy")) returned 1 [0227.153] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{4026492f-2f69-46b8-b9bf-5654fc07e423}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{4026492f-2f69-46b8-b9bf-5654fc07e423}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{4026492f-2f69-46b8-b9bf-5654fc07e423}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{4026492f-2f69-46b8-b9bf-5654fc07e423}.settingcontent-ms.xuy")) returned 1 [0227.170] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{40419485-c444-4567-851a-2dd7bfa1684d}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{40419485-c444-4567-851a-2dd7bfa1684d}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{40419485-c444-4567-851a-2dd7bfa1684d}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{40419485-c444-4567-851a-2dd7bfa1684d}.settingcontent-ms.xuy")) returned 1 [0227.194] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{420C524A-2A76-43F7-B1B2-C3CF736557C7}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{420c524a-2a76-43f7-b1b2-c3cf736557c7}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{420C524A-2A76-43F7-B1B2-C3CF736557C7}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{420c524a-2a76-43f7-b1b2-c3cf736557c7}.settingcontent-ms.xuy")) returned 1 [0227.229] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{4228F99D-227F-4058-9EA3-BB2B616D7444}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{4228f99d-227f-4058-9ea3-bb2b616d7444}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{4228F99D-227F-4058-9EA3-BB2B616D7444}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{4228f99d-227f-4058-9ea3-bb2b616d7444}.settingcontent-ms.xuy")) returned 1 [0227.265] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{45FDB5DF-1457-4A41-A824-7AD9C75767BC}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{45fdb5df-1457-4a41-a824-7ad9c75767bc}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{45FDB5DF-1457-4A41-A824-7AD9C75767BC}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{45fdb5df-1457-4a41-a824-7ad9c75767bc}.settingcontent-ms.xuy")) returned 1 [0227.286] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{46E84184-51CC-4A7B-A40A-6D3E86D402DE}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{46e84184-51cc-4a7b-a40a-6d3e86d402de}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{46E84184-51CC-4A7B-A40A-6D3E86D402DE}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{46e84184-51cc-4a7b-a40a-6d3e86d402de}.settingcontent-ms.xuy")) returned 1 [0227.302] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{4A2F952E-0618-467F-ADC5-FEBB66AEB82F}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{4a2f952e-0618-467f-adc5-febb66aeb82f}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{4A2F952E-0618-467F-ADC5-FEBB66AEB82F}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{4a2f952e-0618-467f-adc5-febb66aeb82f}.settingcontent-ms.xuy")) returned 1 [0227.318] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{4BCD16D0-BA72-4F0D-88F9-50D912BFA2B2}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{4bcd16d0-ba72-4f0d-88f9-50d912bfa2b2}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{4BCD16D0-BA72-4F0D-88F9-50D912BFA2B2}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{4bcd16d0-ba72-4f0d-88f9-50d912bfa2b2}.settingcontent-ms.xuy")) returned 1 [0227.332] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{4F9B0706-0A8F-45B0-BFA6-C66CD45246D7}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{4f9b0706-0a8f-45b0-bfa6-c66cd45246d7}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{4F9B0706-0A8F-45B0-BFA6-C66CD45246D7}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{4f9b0706-0a8f-45b0-bfa6-c66cd45246d7}.settingcontent-ms.xuy")) returned 1 [0227.349] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{50DF4F13-4188-49C3-B2FB-A76404DC0ACF}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{50df4f13-4188-49c3-b2fb-a76404dc0acf}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{50DF4F13-4188-49C3-B2FB-A76404DC0ACF}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{50df4f13-4188-49c3-b2fb-a76404dc0acf}.settingcontent-ms.xuy")) returned 1 [0227.379] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{5163E94E-4C07-420B-B173-320232B8AFB7}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{5163e94e-4c07-420b-b173-320232b8afb7}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{5163E94E-4C07-420B-B173-320232B8AFB7}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{5163e94e-4c07-420b-b173-320232b8afb7}.settingcontent-ms.xuy")) returned 1 [0227.394] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{53440D79-CD2D-4013-B192-D478AE882E53}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{53440d79-cd2d-4013-b192-d478ae882e53}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{53440D79-CD2D-4013-B192-D478AE882E53}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{53440d79-cd2d-4013-b192-d478ae882e53}.settingcontent-ms.xuy")) returned 1 [0227.410] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{54692DB7-FC98-4D5E-AC15-CC5095FA5669}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{54692db7-fc98-4d5e-ac15-cc5095fa5669}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{54692DB7-FC98-4D5E-AC15-CC5095FA5669}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{54692db7-fc98-4d5e-ac15-cc5095fa5669}.settingcontent-ms.xuy")) returned 1 [0227.427] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{54D8069E-E75A-4437-B45B-8EB3B8C97434}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{54d8069e-e75a-4437-b45b-8eb3b8c97434}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{54D8069E-E75A-4437-B45B-8EB3B8C97434}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{54d8069e-e75a-4437-b45b-8eb3b8c97434}.settingcontent-ms.xuy")) returned 1 [0227.442] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{5530E8CC-1B9E-4798-A880-BA719ADFBBBD}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{5530e8cc-1b9e-4798-a880-ba719adfbbbd}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{5530E8CC-1B9E-4798-A880-BA719ADFBBBD}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{5530e8cc-1b9e-4798-a880-ba719adfbbbd}.settingcontent-ms.xuy")) returned 1 [0227.521] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{55E51B6E-7D17-4C80-859E-3007A1F2B6AA}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{55e51b6e-7d17-4c80-859e-3007a1f2b6aa}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{55E51B6E-7D17-4C80-859E-3007A1F2B6AA}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{55e51b6e-7d17-4c80-859e-3007a1f2b6aa}.settingcontent-ms.xuy")) returned 1 [0227.544] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{58e3c745-d971-4081-9034-86e34b30836a}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{58e3c745-d971-4081-9034-86e34b30836a}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{58e3c745-d971-4081-9034-86e34b30836a}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{58e3c745-d971-4081-9034-86e34b30836a}.settingcontent-ms.xuy")) returned 1 [0227.564] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{5902614C-D9C7-4902-9F7F-BAF85454D0B2}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{5902614c-d9c7-4902-9f7f-baf85454d0b2}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{5902614C-D9C7-4902-9F7F-BAF85454D0B2}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{5902614c-d9c7-4902-9f7f-baf85454d0b2}.settingcontent-ms.xuy")) returned 1 [0227.579] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{5A2C0E5E-5974-4E44-B4C6-AD4C2B6BAF53}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{5a2c0e5e-5974-4e44-b4c6-ad4c2b6baf53}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{5A2C0E5E-5974-4E44-B4C6-AD4C2B6BAF53}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{5a2c0e5e-5974-4e44-b4c6-ad4c2b6baf53}.settingcontent-ms.xuy")) returned 1 [0227.641] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{5BB16858-F647-465E-BCFD-010EE9DD41B7}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{5bb16858-f647-465e-bcfd-010ee9dd41b7}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{5BB16858-F647-465E-BCFD-010EE9DD41B7}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{5bb16858-f647-465e-bcfd-010ee9dd41b7}.settingcontent-ms.xuy")) returned 1 [0227.657] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{5D461B44-2753-4DD7-B2C0-BAB71B1F4C1A}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{5d461b44-2753-4dd7-b2c0-bab71b1f4c1a}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{5D461B44-2753-4DD7-B2C0-BAB71B1F4C1A}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{5d461b44-2753-4dd7-b2c0-bab71b1f4c1a}.settingcontent-ms.xuy")) returned 1 [0227.700] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{5D611F64-7985-459B-BDFF-AEC069CB2625}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{5d611f64-7985-459b-bdff-aec069cb2625}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{5D611F64-7985-459B-BDFF-AEC069CB2625}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{5d611f64-7985-459b-bdff-aec069cb2625}.settingcontent-ms.xuy")) returned 1 [0227.718] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{5DD91132-02E8-43F6-88BD-E50B7BE2EF29}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{5dd91132-02e8-43f6-88bd-e50b7be2ef29}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{5DD91132-02E8-43F6-88BD-E50B7BE2EF29}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{5dd91132-02e8-43f6-88bd-e50b7be2ef29}.settingcontent-ms.xuy")) returned 1 [0227.740] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{5DE5B491-2CEA-4AD9-824A-982A22C0B64E}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{5de5b491-2cea-4ad9-824a-982a22c0b64e}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{5DE5B491-2CEA-4AD9-824A-982A22C0B64E}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{5de5b491-2cea-4ad9-824a-982a22c0b64e}.settingcontent-ms.xuy")) returned 1 [0227.758] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{5ea4f148-308c-46d7-98a9-49041b1dd468}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{5ea4f148-308c-46d7-98a9-49041b1dd468}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{5ea4f148-308c-46d7-98a9-49041b1dd468}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{5ea4f148-308c-46d7-98a9-49041b1dd468}.settingcontent-ms.xuy")) returned 1 [0227.777] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{5FFAA809-0961-40CF-90A4-58037867FA50}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{5ffaa809-0961-40cf-90a4-58037867fa50}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{5FFAA809-0961-40CF-90A4-58037867FA50}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{5ffaa809-0961-40cf-90a4-58037867fa50}.settingcontent-ms.xuy")) returned 1 [0227.814] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{60AC7FA0-A928-4D45-B4DD-AC70A6175E67}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{60ac7fa0-a928-4d45-b4dd-ac70a6175e67}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{60AC7FA0-A928-4D45-B4DD-AC70A6175E67}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{60ac7fa0-a928-4d45-b4dd-ac70a6175e67}.settingcontent-ms.xuy")) returned 1 [0227.849] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{60C811E8-C857-404E-98BB-EE5D83C1DF5A}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{60c811e8-c857-404e-98bb-ee5d83c1df5a}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{60C811E8-C857-404E-98BB-EE5D83C1DF5A}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{60c811e8-c857-404e-98bb-ee5d83c1df5a}.settingcontent-ms.xuy")) returned 1 [0227.866] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{62d8ed13-c9d0-4ce8-a914-47dd628fb1b0}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{62d8ed13-c9d0-4ce8-a914-47dd628fb1b0}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{62d8ed13-c9d0-4ce8-a914-47dd628fb1b0}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{62d8ed13-c9d0-4ce8-a914-47dd628fb1b0}.settingcontent-ms.xuy")) returned 1 [0227.881] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{638f8e21-e157-40d7-97e0-a0c8e4c4e2b5}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{638f8e21-e157-40d7-97e0-a0c8e4c4e2b5}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{638f8e21-e157-40d7-97e0-a0c8e4c4e2b5}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{638f8e21-e157-40d7-97e0-a0c8e4c4e2b5}.settingcontent-ms.xuy")) returned 1 [0227.917] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{63929D0B-AAAC-4DCA-AE8A-222EC37F7A88}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{63929d0b-aaac-4dca-ae8a-222ec37f7a88}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{63929D0B-AAAC-4DCA-AE8A-222EC37F7A88}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{63929d0b-aaac-4dca-ae8a-222ec37f7a88}.settingcontent-ms.xuy")) returned 1 [0227.945] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{641102EF-6463-46E9-842D-176013D7ACC8}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{641102ef-6463-46e9-842d-176013d7acc8}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{641102EF-6463-46E9-842D-176013D7ACC8}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{641102ef-6463-46e9-842d-176013d7acc8}.settingcontent-ms.xuy")) returned 1 [0227.963] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{6775CCA4-CC42-44F7-800C-4E94FF1EA8C0}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{6775cca4-cc42-44f7-800c-4e94ff1ea8c0}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{6775CCA4-CC42-44F7-800C-4E94FF1EA8C0}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{6775cca4-cc42-44f7-800c-4e94ff1ea8c0}.settingcontent-ms.xuy")) returned 1 [0227.978] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{67ca7650-96e6-4fdd-bb43-a8e774f73a57}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{67ca7650-96e6-4fdd-bb43-a8e774f73a57}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{67ca7650-96e6-4fdd-bb43-a8e774f73a57}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{67ca7650-96e6-4fdd-bb43-a8e774f73a57}.settingcontent-ms.xuy")) returned 1 [0227.997] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\classic_{685e7dc2-db57-4ed0-8b6d-5fe44d78d4f0}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{685e7dc2-db57-4ed0-8b6d-5fe44d78d4f0}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\classic_{685e7dc2-db57-4ed0-8b6d-5fe44d78d4f0}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{685e7dc2-db57-4ed0-8b6d-5fe44d78d4f0}.settingcontent-ms.xuy")) returned 1 [0228.012] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{68F4F33C-658C-4278-94C1-22B8E653F3E8}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{68f4f33c-658c-4278-94c1-22b8e653f3e8}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{68F4F33C-658C-4278-94C1-22B8E653F3E8}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{68f4f33c-658c-4278-94c1-22b8e653f3e8}.settingcontent-ms.xuy")) returned 1 [0228.027] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{693E4EF4-9060-469B-AB2E-948B6B68A883}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{693e4ef4-9060-469b-ab2e-948b6b68a883}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{693E4EF4-9060-469B-AB2E-948B6B68A883}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{693e4ef4-9060-469b-ab2e-948b6b68a883}.settingcontent-ms.xuy")) returned 1 [0228.049] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{693E4EF5-9060-469B-AB2E-948B6B68A883}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{693e4ef5-9060-469b-ab2e-948b6b68a883}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{693E4EF5-9060-469B-AB2E-948B6B68A883}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{693e4ef5-9060-469b-ab2e-948b6b68a883}.settingcontent-ms.xuy")) returned 1 [0228.072] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{6A10BC7B-2586-4B57-A5AA-C14BDE743DC4}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{6a10bc7b-2586-4b57-a5aa-c14bde743dc4}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{6A10BC7B-2586-4B57-A5AA-C14BDE743DC4}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{6a10bc7b-2586-4b57-a5aa-c14bde743dc4}.settingcontent-ms.xuy")) returned 1 [0228.093] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{6AE88B06-50B2-46B0-93EA-4B5C73D3A0B5}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{6ae88b06-50b2-46b0-93ea-4b5c73d3a0b5}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{6AE88B06-50B2-46B0-93EA-4B5C73D3A0B5}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{6ae88b06-50b2-46b0-93ea-4b5c73d3a0b5}.settingcontent-ms.xuy")) returned 1 [0228.122] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{6CA1F1CE-1FED-4D96-A82E-08CEDB139AA3}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{6ca1f1ce-1fed-4d96-a82e-08cedb139aa3}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{6CA1F1CE-1FED-4D96-A82E-08CEDB139AA3}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{6ca1f1ce-1fed-4d96-a82e-08cedb139aa3}.settingcontent-ms.xuy")) returned 1 [0228.140] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{6CBA2898-2EFE-4604-9933-F1F64DAE2A32}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{6cba2898-2efe-4604-9933-f1f64dae2a32}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{6CBA2898-2EFE-4604-9933-F1F64DAE2A32}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{6cba2898-2efe-4604-9933-f1f64dae2a32}.settingcontent-ms.xuy")) returned 1 [0228.162] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{6dfd7c5c-2451-11d3-a299-00c04f8ef6af}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{6dfd7c5c-2451-11d3-a299-00c04f8ef6af}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{6dfd7c5c-2451-11d3-a299-00c04f8ef6af}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{6dfd7c5c-2451-11d3-a299-00c04f8ef6af}.settingcontent-ms.xuy")) returned 1 [0228.191] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{71D0780F-10D2-459C-983B-94A642161220}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{71d0780f-10d2-459c-983b-94a642161220}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{71D0780F-10D2-459C-983B-94A642161220}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{71d0780f-10d2-459c-983b-94a642161220}.settingcontent-ms.xuy")) returned 1 [0228.207] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{725be8f7-668e-4c7b-8f90-46bdb0936430}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{725be8f7-668e-4c7b-8f90-46bdb0936430}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{725be8f7-668e-4c7b-8f90-46bdb0936430}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{725be8f7-668e-4c7b-8f90-46bdb0936430}.settingcontent-ms.xuy")) returned 1 [0228.222] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{73C9C58C-2E01-4F68-B1B9-7A4DD2EF71F7}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{73c9c58c-2e01-4f68-b1b9-7a4dd2ef71f7}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{73C9C58C-2E01-4F68-B1B9-7A4DD2EF71F7}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{73c9c58c-2e01-4f68-b1b9-7a4dd2ef71f7}.settingcontent-ms.xuy")) returned 1 [0228.238] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{7429F4F9-AE58-401a-82AD-723F3C6BDDD6}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{7429f4f9-ae58-401a-82ad-723f3c6bddd6}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{7429F4F9-AE58-401a-82AD-723F3C6BDDD6}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{7429f4f9-ae58-401a-82ad-723f3c6bddd6}.settingcontent-ms.xuy")) returned 1 [0228.257] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{75AC9145-7EC9-4883-82A7-AD3429020AA0}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{75ac9145-7ec9-4883-82a7-ad3429020aa0}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{75AC9145-7EC9-4883-82A7-AD3429020AA0}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{75ac9145-7ec9-4883-82a7-ad3429020aa0}.settingcontent-ms.xuy")) returned 1 [0228.272] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{76F31A78-3FDA-4F80-B015-95CFD81463AD}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{76f31a78-3fda-4f80-b015-95cfd81463ad}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{76F31A78-3FDA-4F80-B015-95CFD81463AD}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{76f31a78-3fda-4f80-b015-95cfd81463ad}.settingcontent-ms.xuy")) returned 1 [0228.301] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{7a4d0c5d-51ad-443e-87c7-66b757586c56}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{7a4d0c5d-51ad-443e-87c7-66b757586c56}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{7a4d0c5d-51ad-443e-87c7-66b757586c56}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{7a4d0c5d-51ad-443e-87c7-66b757586c56}.settingcontent-ms.xuy")) returned 1 [0228.319] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{7ABBE8E6-757F-419A-B2E0-07D5694F8E0F}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{7abbe8e6-757f-419a-b2e0-07d5694f8e0f}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{7ABBE8E6-757F-419A-B2E0-07D5694F8E0F}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{7abbe8e6-757f-419a-b2e0-07d5694f8e0f}.settingcontent-ms.xuy")) returned 1 [0228.339] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{7B086E4E-366C-454A-85CC-B8B533482B10}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{7b086e4e-366c-454a-85cc-b8b533482b10}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{7B086E4E-366C-454A-85CC-B8B533482B10}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{7b086e4e-366c-454a-85cc-b8b533482b10}.settingcontent-ms.xuy")) returned 1 [0228.376] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{7C3E0552-96E2-4069-AC1C-208C146683CA}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{7c3e0552-96e2-4069-ac1c-208c146683ca}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{7C3E0552-96E2-4069-AC1C-208C146683CA}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{7c3e0552-96e2-4069-ac1c-208c146683ca}.settingcontent-ms.xuy")) returned 1 [0228.397] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{7D13A5DB-6081-48BD-8EA3-A9D7FE67A335}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{7d13a5db-6081-48bd-8ea3-a9d7fe67a335}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{7D13A5DB-6081-48BD-8EA3-A9D7FE67A335}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{7d13a5db-6081-48bd-8ea3-a9d7fe67a335}.settingcontent-ms.xuy")) returned 1 [0228.413] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{7DE6CF7C-B699-421B-A808-139E798E6C64}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{7de6cf7c-b699-421b-a808-139e798e6c64}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{7DE6CF7C-B699-421B-A808-139E798E6C64}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{7de6cf7c-b699-421b-a808-139e798e6c64}.settingcontent-ms.xuy")) returned 1 [0228.435] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{7E5BC096-F558-419A-9326-BC6414D592C3}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{7e5bc096-f558-419a-9326-bc6414d592c3}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{7E5BC096-F558-419A-9326-BC6414D592C3}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{7e5bc096-f558-419a-9326-bc6414d592c3}.settingcontent-ms.xuy")) returned 1 [0228.453] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{7F8B6C83-2A89-47A0-B334-AA58D042CDEC}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{7f8b6c83-2a89-47a0-b334-aa58d042cdec}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{7F8B6C83-2A89-47A0-B334-AA58D042CDEC}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{7f8b6c83-2a89-47a0-b334-aa58d042cdec}.settingcontent-ms.xuy")) returned 1 [0228.477] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{8050502B-9B94-408C-BF49-D2D8887C1BCF}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{8050502b-9b94-408c-bf49-d2d8887c1bcf}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{8050502B-9B94-408C-BF49-D2D8887C1BCF}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{8050502b-9b94-408c-bf49-d2d8887c1bcf}.settingcontent-ms.xuy")) returned 1 [0228.492] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{80f3f1d5-feca-45f3-bc32-752c152e456e}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{80f3f1d5-feca-45f3-bc32-752c152e456e}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{80f3f1d5-feca-45f3-bc32-752c152e456e}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{80f3f1d5-feca-45f3-bc32-752c152e456e}.settingcontent-ms.xuy")) returned 1 [0228.511] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{821FB666-D307-4865-86BB-68725A30999C}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{821fb666-d307-4865-86bb-68725a30999c}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{821FB666-D307-4865-86BB-68725A30999C}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{821fb666-d307-4865-86bb-68725a30999c}.settingcontent-ms.xuy")) returned 1 [0228.526] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{84C9670E-825D-4128-B173-2963886C5A3E}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{84c9670e-825d-4128-b173-2963886c5a3e}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{84C9670E-825D-4128-B173-2963886C5A3E}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{84c9670e-825d-4128-b173-2963886c5a3e}.settingcontent-ms.xuy")) returned 1 [0228.541] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{8562B9B8-812D-420C-9189-DC216D788A49}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{8562b9b8-812d-420c-9189-dc216d788a49}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{8562B9B8-812D-420C-9189-DC216D788A49}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{8562b9b8-812d-420c-9189-dc216d788a49}.settingcontent-ms.xuy")) returned 1 [0228.564] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{875FE7D6-5BDF-496F-B349-91E5E3625B86}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{875fe7d6-5bdf-496f-b349-91e5e3625b86}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{875FE7D6-5BDF-496F-B349-91E5E3625B86}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{875fe7d6-5bdf-496f-b349-91e5e3625b86}.settingcontent-ms.xuy")) returned 1 [0228.581] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{8774b87d-a2b4-49a0-8237-bfefd00646c2}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{8774b87d-a2b4-49a0-8237-bfefd00646c2}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{8774b87d-a2b4-49a0-8237-bfefd00646c2}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{8774b87d-a2b4-49a0-8237-bfefd00646c2}.settingcontent-ms.xuy")) returned 1 [0228.629] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{87842A7E-D784-458d-BEF4-CFDC632DCF3E}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{87842a7e-d784-458d-bef4-cfdc632dcf3e}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{87842A7E-D784-458d-BEF4-CFDC632DCF3E}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{87842a7e-d784-458d-bef4-cfdc632dcf3e}.settingcontent-ms.xuy")) returned 1 [0228.644] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{87d66a43-7b11-4a28-9811-c86ee395acf7}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{87d66a43-7b11-4a28-9811-c86ee395acf7}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{87d66a43-7b11-4a28-9811-c86ee395acf7}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{87d66a43-7b11-4a28-9811-c86ee395acf7}.settingcontent-ms.xuy")) returned 1 [0228.674] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{886EDAFC-1051-483F-8AE2-904087A7E580}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{886edafc-1051-483f-8ae2-904087a7e580}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{886EDAFC-1051-483F-8AE2-904087A7E580}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{886edafc-1051-483f-8ae2-904087a7e580}.settingcontent-ms.xuy")) returned 1 [0228.691] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{88C9D04D-39DD-41EE-A63B-23218D69717F}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{88c9d04d-39dd-41ee-a63b-23218d69717f}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{88C9D04D-39DD-41EE-A63B-23218D69717F}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{88c9d04d-39dd-41ee-a63b-23218d69717f}.settingcontent-ms.xuy")) returned 1 [0228.724] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{8902C92D-5AB7-433B-9065-3F55F8334E29}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{8902c92d-5ab7-433b-9065-3f55f8334e29}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{8902C92D-5AB7-433B-9065-3F55F8334E29}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{8902c92d-5ab7-433b-9065-3f55f8334e29}.settingcontent-ms.xuy")) returned 1 [0228.739] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{895607E0-D0F9-48bd-B19E-96FBE9BBDCF9}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{895607e0-d0f9-48bd-b19e-96fbe9bbdcf9}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{895607E0-D0F9-48bd-B19E-96FBE9BBDCF9}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{895607e0-d0f9-48bd-b19e-96fbe9bbdcf9}.settingcontent-ms.xuy")) returned 1 [0228.761] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{89A2270D-DF2E-4172-8BA5-159D6AD00C15}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{89a2270d-df2e-4172-8ba5-159d6ad00c15}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{89A2270D-DF2E-4172-8BA5-159D6AD00C15}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{89a2270d-df2e-4172-8ba5-159d6ad00c15}.settingcontent-ms.xuy")) returned 1 [0228.776] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{8bb27ec5-5cb3-4781-baee-3439df4806e4}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{8bb27ec5-5cb3-4781-baee-3439df4806e4}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{8bb27ec5-5cb3-4781-baee-3439df4806e4}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{8bb27ec5-5cb3-4781-baee-3439df4806e4}.settingcontent-ms.xuy")) returned 1 [0228.793] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{8D58F804-9520-4208-A527-7C2B6CB77B33}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{8d58f804-9520-4208-a527-7c2b6cb77b33}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{8D58F804-9520-4208-A527-7C2B6CB77B33}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{8d58f804-9520-4208-a527-7c2b6cb77b33}.settingcontent-ms.xuy")) returned 1 [0228.812] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{8E0C279D-0BD1-43C3-9EBD-31C3DC5B8A77}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{8e0c279d-0bd1-43c3-9ebd-31c3dc5b8a77}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{8E0C279D-0BD1-43C3-9EBD-31C3DC5B8A77}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{8e0c279d-0bd1-43c3-9ebd-31c3dc5b8a77}.settingcontent-ms.xuy")) returned 1 [0228.833] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{8E21794E-9303-44C5-A493-C3DC53C0E463}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{8e21794e-9303-44c5-a493-c3dc53c0e463}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{8E21794E-9303-44C5-A493-C3DC53C0E463}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{8e21794e-9303-44c5-a493-c3dc53c0e463}.settingcontent-ms.xuy")) returned 1 [0228.862] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{8e908fc9-becc-40f6-915b-f4ca0e70d03d}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{8e908fc9-becc-40f6-915b-f4ca0e70d03d}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{8e908fc9-becc-40f6-915b-f4ca0e70d03d}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{8e908fc9-becc-40f6-915b-f4ca0e70d03d}.settingcontent-ms.xuy")) returned 1 [0228.879] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{906435EC-336D-4B77-BCD6-397DE8318852}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{906435ec-336d-4b77-bcd6-397de8318852}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{906435EC-336D-4B77-BCD6-397DE8318852}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{906435ec-336d-4b77-bcd6-397de8318852}.settingcontent-ms.xuy")) returned 1 [0228.899] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{907F262A-012A-4F6A-94C9-F479F3E6EE16}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{907f262a-012a-4f6a-94c9-f479f3e6ee16}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{907F262A-012A-4F6A-94C9-F479F3E6EE16}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{907f262a-012a-4f6a-94c9-f479f3e6ee16}.settingcontent-ms.xuy")) returned 1 [0228.915] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{90ab71ce-bab6-4ca2-84fe-629338405756}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{90ab71ce-bab6-4ca2-84fe-629338405756}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{90ab71ce-bab6-4ca2-84fe-629338405756}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{90ab71ce-bab6-4ca2-84fe-629338405756}.settingcontent-ms.xuy")) returned 1 [0228.938] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{91BA8E01-F854-4418-A108-E63323DDAE60}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{91ba8e01-f854-4418-a108-e63323ddae60}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{91BA8E01-F854-4418-A108-E63323DDAE60}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{91ba8e01-f854-4418-a108-e63323ddae60}.settingcontent-ms.xuy")) returned 1 [0228.954] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{9389633E-8BCB-4448-93CD-EBFFA0759257}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{9389633e-8bcb-4448-93cd-ebffa0759257}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{9389633E-8BCB-4448-93CD-EBFFA0759257}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{9389633e-8bcb-4448-93cd-ebffa0759257}.settingcontent-ms.xuy")) returned 1 [0228.970] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{9430DB91-B966-4971-A955-E3DBA1F889E7}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{9430db91-b966-4971-a955-e3dba1f889e7}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{9430DB91-B966-4971-A955-E3DBA1F889E7}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{9430db91-b966-4971-a955-e3dba1f889e7}.settingcontent-ms.xuy")) returned 1 [0228.988] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{944A41B9-C0FD-41AE-A6DF-5AC4FE5A59B4}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{944a41b9-c0fd-41ae-a6df-5ac4fe5a59b4}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{944A41B9-C0FD-41AE-A6DF-5AC4FE5A59B4}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{944a41b9-c0fd-41ae-a6df-5ac4fe5a59b4}.settingcontent-ms.xuy")) returned 1 [0229.003] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{950fd00b-c4a9-4465-852a-b1eb51e2e7f6}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{950fd00b-c4a9-4465-852a-b1eb51e2e7f6}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{950fd00b-c4a9-4465-852a-b1eb51e2e7f6}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{950fd00b-c4a9-4465-852a-b1eb51e2e7f6}.settingcontent-ms.xuy")) returned 1 [0229.032] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{955E7FFD-4DD9-4124-96FC-86C3C653DD33}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{955e7ffd-4dd9-4124-96fc-86c3c653dd33}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{955E7FFD-4DD9-4124-96FC-86C3C653DD33}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{955e7ffd-4dd9-4124-96fc-86c3c653dd33}.settingcontent-ms.xuy")) returned 1 [0229.047] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{96BC4455-FDA3-4DE2-8B71-9D1953F0B32D}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{96bc4455-fda3-4de2-8b71-9d1953f0b32d}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{96BC4455-FDA3-4DE2-8B71-9D1953F0B32D}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{96bc4455-fda3-4de2-8b71-9d1953f0b32d}.settingcontent-ms.xuy")) returned 1 [0229.063] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{96DF8B78-8299-4BC1-B56B-6C375FBEC228}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{96df8b78-8299-4bc1-b56b-6c375fbec228}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{96DF8B78-8299-4BC1-B56B-6C375FBEC228}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{96df8b78-8299-4bc1-b56b-6c375fbec228}.settingcontent-ms.xuy")) returned 1 [0229.081] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{9891D47B-7E37-4265-BAD2-1FA991543B90}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{9891d47b-7e37-4265-bad2-1fa991543b90}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{9891D47B-7E37-4265-BAD2-1FA991543B90}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{9891d47b-7e37-4265-bad2-1fa991543b90}.settingcontent-ms.xuy")) returned 1 [0229.097] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{98CCA0B9-CF6C-4FFD-98E1-87BFEDDD4D21}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{98cca0b9-cf6c-4ffd-98e1-87bfeddd4d21}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{98CCA0B9-CF6C-4FFD-98E1-87BFEDDD4D21}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{98cca0b9-cf6c-4ffd-98e1-87bfeddd4d21}.settingcontent-ms.xuy")) returned 1 [0229.113] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{9B802EF5-59B7-4974-9022-06DC2A9B1677}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{9b802ef5-59b7-4974-9022-06dc2a9b1677}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{9B802EF5-59B7-4974-9022-06DC2A9B1677}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{9b802ef5-59b7-4974-9022-06dc2a9b1677}.settingcontent-ms.xuy")) returned 1 [0229.134] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{9BA8A9A5-F1C1-4F09-AE9A-EFEAA5961BE3}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{9ba8a9a5-f1c1-4f09-ae9a-efeaa5961be3}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{9BA8A9A5-F1C1-4F09-AE9A-EFEAA5961BE3}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{9ba8a9a5-f1c1-4f09-ae9a-efeaa5961be3}.settingcontent-ms.xuy")) returned 1 [0229.158] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{9C39057F-5CE5-4BAB-BE61-2957A12EEC52}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{9c39057f-5ce5-4bab-be61-2957a12eec52}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{9C39057F-5CE5-4BAB-BE61-2957A12EEC52}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{9c39057f-5ce5-4bab-be61-2957a12eec52}.settingcontent-ms.xuy")) returned 1 [0229.195] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{9c60de1e-e5fc-40f4-a487-460851a8d915}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{9c60de1e-e5fc-40f4-a487-460851a8d915}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{9c60de1e-e5fc-40f4-a487-460851a8d915}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{9c60de1e-e5fc-40f4-a487-460851a8d915}.settingcontent-ms.xuy")) returned 1 [0229.212] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{9c73f5e5-7ae7-4e32-a8e8-8d23b85255bf}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{9c73f5e5-7ae7-4e32-a8e8-8d23b85255bf}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{9c73f5e5-7ae7-4e32-a8e8-8d23b85255bf}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{9c73f5e5-7ae7-4e32-a8e8-8d23b85255bf}.settingcontent-ms.xuy")) returned 1 [0229.236] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{9EF86966-2F35-49BE-A9F6-398E0B844411}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{9ef86966-2f35-49be-a9f6-398e0b844411}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{9EF86966-2F35-49BE-A9F6-398E0B844411}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{9ef86966-2f35-49be-a9f6-398e0b844411}.settingcontent-ms.xuy")) returned 1 [0229.256] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{9fe63afd-59cf-4419-9775-abcc3849f861}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{9fe63afd-59cf-4419-9775-abcc3849f861}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{9fe63afd-59cf-4419-9775-abcc3849f861}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{9fe63afd-59cf-4419-9775-abcc3849f861}.settingcontent-ms.xuy")) returned 1 [0229.271] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{a0275511-0e86-4eca-97c2-ecd8f1221d08}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{a0275511-0e86-4eca-97c2-ecd8f1221d08}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{a0275511-0e86-4eca-97c2-ecd8f1221d08}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{a0275511-0e86-4eca-97c2-ecd8f1221d08}.settingcontent-ms.xuy")) returned 1 [0229.297] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{A10DFF38-B2D2-44AC-952B-A2B5DC5D0C9F}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{a10dff38-b2d2-44ac-952b-a2b5dc5d0c9f}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{A10DFF38-B2D2-44AC-952B-A2B5DC5D0C9F}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{a10dff38-b2d2-44ac-952b-a2b5dc5d0c9f}.settingcontent-ms.xuy")) returned 1 [0229.313] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{a3dd4f92-658a-410f-84fd-6fbbbef2fffe}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{a3dd4f92-658a-410f-84fd-6fbbbef2fffe}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{a3dd4f92-658a-410f-84fd-6fbbbef2fffe}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{a3dd4f92-658a-410f-84fd-6fbbbef2fffe}.settingcontent-ms.xuy")) returned 1 [0229.330] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{A42E8D99-83E6-4D12-B403-F46059D02CF0}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{a42e8d99-83e6-4d12-b403-f46059d02cf0}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{A42E8D99-83E6-4D12-B403-F46059D02CF0}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{a42e8d99-83e6-4d12-b403-f46059d02cf0}.settingcontent-ms.xuy")) returned 1 [0229.346] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{A7160DE5-E591-4D98-9BB0-0CAC99D5F2D5}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{a7160de5-e591-4d98-9bb0-0cac99d5f2d5}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{A7160DE5-E591-4D98-9BB0-0CAC99D5F2D5}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{a7160de5-e591-4d98-9bb0-0cac99d5f2d5}.settingcontent-ms.xuy")) returned 1 [0229.369] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{A73DCDB5-E233-4FC2-8083-6E431939002A}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{a73dcdb5-e233-4fc2-8083-6e431939002a}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{A73DCDB5-E233-4FC2-8083-6E431939002A}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{a73dcdb5-e233-4fc2-8083-6e431939002a}.settingcontent-ms.xuy")) returned 1 [0229.385] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{a8a91a66-3a7d-4424-8d24-04e180695c7a}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{a8a91a66-3a7d-4424-8d24-04e180695c7a}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{a8a91a66-3a7d-4424-8d24-04e180695c7a}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{a8a91a66-3a7d-4424-8d24-04e180695c7a}.settingcontent-ms.xuy")) returned 1 [0229.402] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{AA9D2032-E8FB-4f8c-99C9-09F539AEBD59}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{aa9d2032-e8fb-4f8c-99c9-09f539aebd59}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{AA9D2032-E8FB-4f8c-99C9-09F539AEBD59}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{aa9d2032-e8fb-4f8c-99c9-09f539aebd59}.settingcontent-ms.xuy")) returned 1 [0229.424] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{AACA901F-E74F-4894-B074-F55059532853}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{aaca901f-e74f-4894-b074-f55059532853}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{AACA901F-E74F-4894-B074-F55059532853}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{aaca901f-e74f-4894-b074-f55059532853}.settingcontent-ms.xuy")) returned 1 [0229.444] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{AAF384A9-978C-41B6-B394-0C40C2EAAA4B}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{aaf384a9-978c-41b6-b394-0c40c2eaaa4b}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{AAF384A9-978C-41B6-B394-0C40C2EAAA4B}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{aaf384a9-978c-41b6-b394-0c40c2eaaa4b}.settingcontent-ms.xuy")) returned 1 [0229.465] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{ABB4509D-9043-4EF2-8796-E4646ECF951D}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{abb4509d-9043-4ef2-8796-e4646ecf951d}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{ABB4509D-9043-4EF2-8796-E4646ECF951D}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{abb4509d-9043-4ef2-8796-e4646ecf951d}.settingcontent-ms.xuy")) returned 1 [0229.494] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{AF3BA0EC-B240-401E-B4EE-3E89F275205B}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{af3ba0ec-b240-401e-b4ee-3e89f275205b}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{AF3BA0EC-B240-401E-B4EE-3E89F275205B}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{af3ba0ec-b240-401e-b4ee-3e89f275205b}.settingcontent-ms.xuy")) returned 1 [0229.510] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{B0B4886C-4B31-4824-ADCD-0DAF5C8BAFF6}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{b0b4886c-4b31-4824-adcd-0daf5c8baff6}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{B0B4886C-4B31-4824-ADCD-0DAF5C8BAFF6}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{b0b4886c-4b31-4824-adcd-0daf5c8baff6}.settingcontent-ms.xuy")) returned 1 [0229.531] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{B1207959-FFBF-4417-A6B1-4BF0EDA51F5A}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{b1207959-ffbf-4417-a6b1-4bf0eda51f5a}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{B1207959-FFBF-4417-A6B1-4BF0EDA51F5A}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{b1207959-ffbf-4417-a6b1-4bf0eda51f5a}.settingcontent-ms.xuy")) returned 1 [0229.548] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{B123B0AB-2E4E-4325-804A-32F99784DA0B}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{b123b0ab-2e4e-4325-804a-32f99784da0b}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{B123B0AB-2E4E-4325-804A-32F99784DA0B}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{b123b0ab-2e4e-4325-804a-32f99784da0b}.settingcontent-ms.xuy")) returned 1 [0229.564] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{B1FE5142-DEDD-409B-BCC8-547EC08DE84E}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{b1fe5142-dedd-409b-bcc8-547ec08de84e}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{B1FE5142-DEDD-409B-BCC8-547EC08DE84E}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{b1fe5142-dedd-409b-bcc8-547ec08de84e}.settingcontent-ms.xuy")) returned 1 [0229.642] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{b2c761c6-29bc-4f19-9251-e6195265baf1}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{b2c761c6-29bc-4f19-9251-e6195265baf1}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{b2c761c6-29bc-4f19-9251-e6195265baf1}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{b2c761c6-29bc-4f19-9251-e6195265baf1}.settingcontent-ms.xuy")) returned 1 [0229.657] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{B3C577FA-7C51-4259-A1C4-088BD0B0932E}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{b3c577fa-7c51-4259-a1c4-088bd0b0932e}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{B3C577FA-7C51-4259-A1C4-088BD0B0932E}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{b3c577fa-7c51-4259-a1c4-088bd0b0932e}.settingcontent-ms.xuy")) returned 1 [0229.674] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{B6B2793F-F4B9-49FD-B578-212C3C020892}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{b6b2793f-f4b9-49fd-b578-212c3c020892}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{B6B2793F-F4B9-49FD-B578-212C3C020892}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{b6b2793f-f4b9-49fd-b578-212c3c020892}.settingcontent-ms.xuy")) returned 1 [0229.695] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{B7622F10-9A47-4BF2-B6EF-2C20B4510254}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{b7622f10-9a47-4bf2-b6ef-2c20b4510254}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{B7622F10-9A47-4BF2-B6EF-2C20B4510254}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{b7622f10-9a47-4bf2-b6ef-2c20b4510254}.settingcontent-ms.xuy")) returned 1 [0229.710] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{B896819B-CF73-4da0-8F59-6E744A6BCD5F}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{b896819b-cf73-4da0-8f59-6e744a6bcd5f}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{B896819B-CF73-4da0-8F59-6E744A6BCD5F}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{b896819b-cf73-4da0-8f59-6e744a6bcd5f}.settingcontent-ms.xuy")) returned 1 [0229.805] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{B935C3B6-969C-4FC2-B96C-7F06794471AF}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{b935c3b6-969c-4fc2-b96c-7f06794471af}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{B935C3B6-969C-4FC2-B96C-7F06794471AF}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{b935c3b6-969c-4fc2-b96c-7f06794471af}.settingcontent-ms.xuy")) returned 1 [0229.823] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{B98AD935-426A-482B-9383-ED7D8BB99A6F}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{b98ad935-426a-482b-9383-ed7d8bb99a6f}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{B98AD935-426A-482B-9383-ED7D8BB99A6F}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{b98ad935-426a-482b-9383-ed7d8bb99a6f}.settingcontent-ms.xuy")) returned 1 [0229.839] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{BABB24A6-0242-4AE5-BD83-C5816526F63D}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{babb24a6-0242-4ae5-bd83-c5816526f63d}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{BABB24A6-0242-4AE5-BD83-C5816526F63D}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{babb24a6-0242-4ae5-bd83-c5816526f63d}.settingcontent-ms.xuy")) returned 1 [0229.865] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{bb06c0e4-d293-4f75-8a90-cb05b6477eee}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{bb06c0e4-d293-4f75-8a90-cb05b6477eee}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{bb06c0e4-d293-4f75-8a90-cb05b6477eee}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{bb06c0e4-d293-4f75-8a90-cb05b6477eee}.settingcontent-ms.xuy")) returned 1 [0229.886] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{bb64f8a7-bee7-4e1a-ab8d-7d8273f7fdb6}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{bb64f8a7-bee7-4e1a-ab8d-7d8273f7fdb6}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{bb64f8a7-bee7-4e1a-ab8d-7d8273f7fdb6}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{bb64f8a7-bee7-4e1a-ab8d-7d8273f7fdb6}.settingcontent-ms.xuy")) returned 1 [0229.907] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{BD256B65-94BE-4194-84BF-41D50D0EF26E}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{bd256b65-94be-4194-84bf-41d50d0ef26e}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{BD256B65-94BE-4194-84BF-41D50D0EF26E}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{bd256b65-94be-4194-84bf-41d50d0ef26e}.settingcontent-ms.xuy")) returned 1 [0229.931] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{bd84b380-8ca2-1069-ab1d-08000948f534}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{bd84b380-8ca2-1069-ab1d-08000948f534}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{bd84b380-8ca2-1069-ab1d-08000948f534}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{bd84b380-8ca2-1069-ab1d-08000948f534}.settingcontent-ms.xuy")) returned 1 [0229.948] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{be122a0e-4503-11da-8bde-f66bad1e3f3a}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{be122a0e-4503-11da-8bde-f66bad1e3f3a}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{be122a0e-4503-11da-8bde-f66bad1e3f3a}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{be122a0e-4503-11da-8bde-f66bad1e3f3a}.settingcontent-ms.xuy")) returned 1 [0229.965] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{BEC9E135-14C1-4e00-B5C8-899F26833A5A}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{bec9e135-14c1-4e00-b5c8-899f26833a5a}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{BEC9E135-14C1-4e00-B5C8-899F26833A5A}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{bec9e135-14c1-4e00-b5c8-899f26833a5a}.settingcontent-ms.xuy")) returned 1 [0229.982] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{bf782cc9-5a52-4a17-806c-2a894ffeeac5}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{bf782cc9-5a52-4a17-806c-2a894ffeeac5}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{bf782cc9-5a52-4a17-806c-2a894ffeeac5}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{bf782cc9-5a52-4a17-806c-2a894ffeeac5}.settingcontent-ms.xuy")) returned 1 [0230.003] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{C16A18A2-DC4F-4B7D-92F1-14C430AD17DC}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{c16a18a2-dc4f-4b7d-92f1-14c430ad17dc}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{C16A18A2-DC4F-4B7D-92F1-14C430AD17DC}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{c16a18a2-dc4f-4b7d-92f1-14c430ad17dc}.settingcontent-ms.xuy")) returned 1 [0230.018] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{C3915CF9-A3D9-4EFD-B209-62C05793EE0F}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{c3915cf9-a3d9-4efd-b209-62c05793ee0f}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{C3915CF9-A3D9-4EFD-B209-62C05793EE0F}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{c3915cf9-a3d9-4efd-b209-62c05793ee0f}.settingcontent-ms.xuy")) returned 1 [0230.033] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{C3F521C1-249F-48FD-9D9D-731EA4568776}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{c3f521c1-249f-48fd-9d9d-731ea4568776}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{C3F521C1-249F-48FD-9D9D-731EA4568776}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{c3f521c1-249f-48fd-9d9d-731ea4568776}.settingcontent-ms.xuy")) returned 1 [0230.051] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{C5361E07-6AA3-4453-81BC-93E8F85EABED}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{c5361e07-6aa3-4453-81bc-93e8f85eabed}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{C5361E07-6AA3-4453-81BC-93E8F85EABED}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{c5361e07-6aa3-4453-81bc-93e8f85eabed}.settingcontent-ms.xuy")) returned 1 [0230.067] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{c555438b-3c23-4769-a71f-b6d3d9b6053a}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{c555438b-3c23-4769-a71f-b6d3d9b6053a}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{c555438b-3c23-4769-a71f-b6d3d9b6053a}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{c555438b-3c23-4769-a71f-b6d3d9b6053a}.settingcontent-ms.xuy")) returned 1 [0230.082] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{c58c4893-3be0-4b45-abb5-a63e4b8c8651}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{c58c4893-3be0-4b45-abb5-a63e4b8c8651}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{c58c4893-3be0-4b45-abb5-a63e4b8c8651}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{c58c4893-3be0-4b45-abb5-a63e4b8c8651}.settingcontent-ms.xuy")) returned 1 [0230.109] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{C5AE651D-D027-4D11-8125-595B9933C78B}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{c5ae651d-d027-4d11-8125-595b9933c78b}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{C5AE651D-D027-4D11-8125-595B9933C78B}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{c5ae651d-d027-4d11-8125-595b9933c78b}.settingcontent-ms.xuy")) returned 1 [0230.125] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{C7C81DAD-835C-45B0-9632-60F3EB5D55AC}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{c7c81dad-835c-45b0-9632-60f3eb5d55ac}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{C7C81DAD-835C-45B0-9632-60F3EB5D55AC}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{c7c81dad-835c-45b0-9632-60f3eb5d55ac}.settingcontent-ms.xuy")) returned 1 [0230.145] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{C86B1923-8E1F-414B-83DB-94B09BA73E15}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{c86b1923-8e1f-414b-83db-94b09ba73e15}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{C86B1923-8E1F-414B-83DB-94B09BA73E15}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{c86b1923-8e1f-414b-83db-94b09ba73e15}.settingcontent-ms.xuy")) returned 1 [0230.161] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{CD2A5953-36A2-427D-B762-3610F37A5D89}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{cd2a5953-36a2-427d-b762-3610f37a5d89}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{CD2A5953-36A2-427D-B762-3610F37A5D89}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{cd2a5953-36a2-427d-b762-3610f37a5d89}.settingcontent-ms.xuy")) returned 1 [0230.185] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{CD95D0E3-6B3A-495B-9FDA-57FAD586304D}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{cd95d0e3-6b3a-495b-9fda-57fad586304d}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{CD95D0E3-6B3A-495B-9FDA-57FAD586304D}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{cd95d0e3-6b3a-495b-9fda-57fad586304d}.settingcontent-ms.xuy")) returned 1 [0230.200] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{CE4F7091-EEC0-400E-A019-38503D525293}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{ce4f7091-eec0-400e-a019-38503d525293}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{CE4F7091-EEC0-400E-A019-38503D525293}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{ce4f7091-eec0-400e-a019-38503d525293}.settingcontent-ms.xuy")) returned 1 [0230.218] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{CF081448-68EC-4969-9F8B-BB23B329B712}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{cf081448-68ec-4969-9f8b-bb23b329b712}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{CF081448-68EC-4969-9F8B-BB23B329B712}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{cf081448-68ec-4969-9f8b-bb23b329b712}.settingcontent-ms.xuy")) returned 1 [0230.234] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{d17d1d6d-cc3f-4815-8fe3-607e7d5d10b3}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{d17d1d6d-cc3f-4815-8fe3-607e7d5d10b3}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{d17d1d6d-cc3f-4815-8fe3-607e7d5d10b3}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{d17d1d6d-cc3f-4815-8fe3-607e7d5d10b3}.settingcontent-ms.xuy")) returned 1 [0230.255] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{D1AF7F5F-18C1-4143-81E5-EDAF02255883}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{d1af7f5f-18c1-4143-81e5-edaf02255883}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{D1AF7F5F-18C1-4143-81E5-EDAF02255883}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{d1af7f5f-18c1-4143-81e5-edaf02255883}.settingcontent-ms.xuy")) returned 1 [0230.274] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{d20ea4e1-3957-11d2-a40b-0c5020524153}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{d20ea4e1-3957-11d2-a40b-0c5020524153}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{d20ea4e1-3957-11d2-a40b-0c5020524153}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{d20ea4e1-3957-11d2-a40b-0c5020524153}.settingcontent-ms.xuy")) returned 1 [0230.293] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{D4690CFE-6A59-4BAB-BFF7-9ED0D083E798}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{d4690cfe-6a59-4bab-bff7-9ed0d083e798}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{D4690CFE-6A59-4BAB-BFF7-9ED0D083E798}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{d4690cfe-6a59-4bab-bff7-9ed0d083e798}.settingcontent-ms.xuy")) returned 1 [0230.308] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{d555645e-d4f8-4c29-a827-d93c859c4f2a}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{d555645e-d4f8-4c29-a827-d93c859c4f2a}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{d555645e-d4f8-4c29-a827-d93c859c4f2a}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{d555645e-d4f8-4c29-a827-d93c859c4f2a}.settingcontent-ms.xuy")) returned 1 [0230.323] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{D5BAC999-E706-4311-9DB0-86E117B1FD25}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{d5bac999-e706-4311-9db0-86e117b1fd25}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{D5BAC999-E706-4311-9DB0-86E117B1FD25}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{d5bac999-e706-4311-9db0-86e117b1fd25}.settingcontent-ms.xuy")) returned 1 [0230.348] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{D5D5B38A-0FD8-43B6-8C7D-372D84BD357D}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{d5d5b38a-0fd8-43b6-8c7d-372d84bd357d}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{D5D5B38A-0FD8-43B6-8C7D-372D84BD357D}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{d5d5b38a-0fd8-43b6-8c7d-372d84bd357d}.settingcontent-ms.xuy")) returned 1 [0230.368] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{D652F9E4-08FD-4A24-8EAC-05715188233E}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{d652f9e4-08fd-4a24-8eac-05715188233e}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{D652F9E4-08FD-4A24-8EAC-05715188233E}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{d652f9e4-08fd-4a24-8eac-05715188233e}.settingcontent-ms.xuy")) returned 1 [0230.391] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{D679D992-D843-4D3C-BFEA-5EDF4D37EE9F}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{d679d992-d843-4d3c-bfea-5edf4d37ee9f}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{D679D992-D843-4D3C-BFEA-5EDF4D37EE9F}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{d679d992-d843-4d3c-bfea-5edf4d37ee9f}.settingcontent-ms.xuy")) returned 1 [0230.407] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{D825FEC7-DA3D-456A-BEF2-20F07BA0449E}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{d825fec7-da3d-456a-bef2-20f07ba0449e}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{D825FEC7-DA3D-456A-BEF2-20F07BA0449E}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{d825fec7-da3d-456a-bef2-20f07ba0449e}.settingcontent-ms.xuy")) returned 1 [0230.423] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{D995F7E9-727D-4AD6-83F3-A4A753965A8F}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{d995f7e9-727d-4ad6-83f3-a4a753965a8f}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{D995F7E9-727D-4AD6-83F3-A4A753965A8F}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{d995f7e9-727d-4ad6-83f3-a4a753965a8f}.settingcontent-ms.xuy")) returned 1 [0230.441] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{d9ef8727-cac2-4e60-809e-86f80a666c91}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{d9ef8727-cac2-4e60-809e-86f80a666c91}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{d9ef8727-cac2-4e60-809e-86f80a666c91}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{d9ef8727-cac2-4e60-809e-86f80a666c91}.settingcontent-ms.xuy")) returned 1 [0230.461] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{da9f1e02-aa94-40bf-b3cd-030231a10acc}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{da9f1e02-aa94-40bf-b3cd-030231a10acc}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{da9f1e02-aa94-40bf-b3cd-030231a10acc}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{da9f1e02-aa94-40bf-b3cd-030231a10acc}.settingcontent-ms.xuy")) returned 1 [0230.483] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{DAF32862-EF3D-4D61-AB92-47AEB51DDC80}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{daf32862-ef3d-4d61-ab92-47aeb51ddc80}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{DAF32862-EF3D-4D61-AB92-47AEB51DDC80}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{daf32862-ef3d-4d61-ab92-47aeb51ddc80}.settingcontent-ms.xuy")) returned 1 [0230.500] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{DD338333-7000-45CC-A84D-64680D6E683D}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{dd338333-7000-45cc-a84d-64680d6e683d}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{DD338333-7000-45CC-A84D-64680D6E683D}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{dd338333-7000-45cc-a84d-64680d6e683d}.settingcontent-ms.xuy")) returned 1 [0230.526] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{DDF23EF5-6677-42C1-92CB-29BDCB7375B8}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{ddf23ef5-6677-42c1-92cb-29bdcb7375b8}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{DDF23EF5-6677-42C1-92CB-29BDCB7375B8}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{ddf23ef5-6677-42c1-92cb-29bdcb7375b8}.settingcontent-ms.xuy")) returned 1 [0230.542] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{DF7B19EF-DEA5-47D7-BBA5-9FCBE400A59D}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{df7b19ef-dea5-47d7-bba5-9fcbe400a59d}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{DF7B19EF-DEA5-47D7-BBA5-9FCBE400A59D}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{df7b19ef-dea5-47d7-bba5-9fcbe400a59d}.settingcontent-ms.xuy")) returned 1 [0230.578] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{E00117F3-53BA-4E06-B9BF-B8E22A1469E6}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{e00117f3-53ba-4e06-b9bf-b8e22a1469e6}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{E00117F3-53BA-4E06-B9BF-B8E22A1469E6}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{e00117f3-53ba-4e06-b9bf-b8e22a1469e6}.settingcontent-ms.xuy")) returned 1 [0230.594] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{E07F215A-6022-40E0-A109-17078992E5F9}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{e07f215a-6022-40e0-a109-17078992e5f9}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{E07F215A-6022-40E0-A109-17078992E5F9}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{e07f215a-6022-40e0-a109-17078992e5f9}.settingcontent-ms.xuy")) returned 1 [0230.611] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{E2394C16-F45A-496F-83CC-49E163281662}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{e2394c16-f45a-496f-83cc-49e163281662}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{E2394C16-F45A-496F-83CC-49E163281662}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{e2394c16-f45a-496f-83cc-49e163281662}.settingcontent-ms.xuy")) returned 1 [0230.628] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{e2e7934b-dce5-43c4-9576-7fe4f75e7480}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{e2e7934b-dce5-43c4-9576-7fe4f75e7480}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{e2e7934b-dce5-43c4-9576-7fe4f75e7480}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{e2e7934b-dce5-43c4-9576-7fe4f75e7480}.settingcontent-ms.xuy")) returned 1 [0230.652] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{E4B554C8-B067-4540-A478-0565BB1F76B9}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{e4b554c8-b067-4540-a478-0565bb1f76b9}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{E4B554C8-B067-4540-A478-0565BB1F76B9}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{e4b554c8-b067-4540-a478-0565bb1f76b9}.settingcontent-ms.xuy")) returned 1 [0230.719] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{E6243488-3449-4D4D-98AA-FFC14E3FF0F8}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{e6243488-3449-4d4d-98aa-ffc14e3ff0f8}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{E6243488-3449-4D4D-98AA-FFC14E3FF0F8}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{e6243488-3449-4d4d-98aa-ffc14e3ff0f8}.settingcontent-ms.xuy")) returned 1 [0230.738] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{E79BCB1B-EEB7-4180-98FD-BD47F6DCFF79}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{e79bcb1b-eeb7-4180-98fd-bd47f6dcff79}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{E79BCB1B-EEB7-4180-98FD-BD47F6DCFF79}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{e79bcb1b-eeb7-4180-98fd-bd47f6dcff79}.settingcontent-ms.xuy")) returned 1 [0230.764] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{e9950154-c418-419e-a90a-20c5287ae24b}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{e9950154-c418-419e-a90a-20c5287ae24b}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{e9950154-c418-419e-a90a-20c5287ae24b}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{e9950154-c418-419e-a90a-20c5287ae24b}.settingcontent-ms.xuy")) returned 1 [0230.790] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{E9C71548-B580-43B2-ACDB-1BA924002754}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{e9c71548-b580-43b2-acdb-1ba924002754}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{E9C71548-B580-43B2-ACDB-1BA924002754}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{e9c71548-b580-43b2-acdb-1ba924002754}.settingcontent-ms.xuy")) returned 1 [0230.806] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{EBEC2956-F512-474D-8631-9E753CC40653}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{ebec2956-f512-474d-8631-9e753cc40653}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{EBEC2956-F512-474D-8631-9E753CC40653}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{ebec2956-f512-474d-8631-9e753cc40653}.settingcontent-ms.xuy")) returned 1 [0230.824] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{ecdb0924-4208-451e-8ee0-373c0956de16}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{ecdb0924-4208-451e-8ee0-373c0956de16}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{ecdb0924-4208-451e-8ee0-373c0956de16}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{ecdb0924-4208-451e-8ee0-373c0956de16}.settingcontent-ms.xuy")) returned 1 [0230.842] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{ED0FF627-BFD1-4F68-9A74-974E73F41A3A}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{ed0ff627-bfd1-4f68-9a74-974e73f41a3a}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{ED0FF627-BFD1-4F68-9A74-974E73F41A3A}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{ed0ff627-bfd1-4f68-9a74-974e73f41a3a}.settingcontent-ms.xuy")) returned 1 [0230.876] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{ed834ed6-4b5a-4bfe-8f11-a626dcb6a921}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{ed834ed6-4b5a-4bfe-8f11-a626dcb6a921}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{ed834ed6-4b5a-4bfe-8f11-a626dcb6a921}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{ed834ed6-4b5a-4bfe-8f11-a626dcb6a921}.settingcontent-ms.xuy")) returned 1 [0230.892] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{EE423D17-7ED8-4B33-9555-C23DEEAFB4B6}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{ee423d17-7ed8-4b33-9555-c23deeafb4b6}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{EE423D17-7ED8-4B33-9555-C23DEEAFB4B6}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{ee423d17-7ed8-4b33-9555-c23deeafb4b6}.settingcontent-ms.xuy")) returned 1 [0230.910] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{EE439E7E-CE1E-4ABE-9EA8-50F12ED01FE0}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{ee439e7e-ce1e-4abe-9ea8-50f12ed01fe0}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{EE439E7E-CE1E-4ABE-9EA8-50F12ED01FE0}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{ee439e7e-ce1e-4abe-9ea8-50f12ed01fe0}.settingcontent-ms.xuy")) returned 1 [0231.005] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{EF462183-352B-4DCF-811C-07FA7CFCD5AC}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{ef462183-352b-4dcf-811c-07fa7cfcd5ac}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{EF462183-352B-4DCF-811C-07FA7CFCD5AC}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{ef462183-352b-4dcf-811c-07fa7cfcd5ac}.settingcontent-ms.xuy")) returned 1 [0231.027] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{EF8F379B-747B-4C8E-B3D1-4A29E6CF45AE}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{ef8f379b-747b-4c8e-b3d1-4a29e6cf45ae}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{EF8F379B-747B-4C8E-B3D1-4A29E6CF45AE}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{ef8f379b-747b-4c8e-b3d1-4a29e6cf45ae}.settingcontent-ms.xuy")) returned 1 [0231.053] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{EFACECBA-BCCD-468B-BAB3-7CA40A898982}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{efacecba-bccd-468b-bab3-7ca40a898982}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{EFACECBA-BCCD-468B-BAB3-7CA40A898982}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{efacecba-bccd-468b-bab3-7ca40a898982}.settingcontent-ms.xuy")) returned 1 [0231.079] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{F025B6FD-D1CA-4a32-9BEB-DBEF1D2F6926}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{f025b6fd-d1ca-4a32-9beb-dbef1d2f6926}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{F025B6FD-D1CA-4a32-9BEB-DBEF1D2F6926}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{f025b6fd-d1ca-4a32-9beb-dbef1d2f6926}.settingcontent-ms.xuy")) returned 1 [0231.118] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{F0E02D62-6C1D-4eb3-AC47-F8401425C6BC}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{f0e02d62-6c1d-4eb3-ac47-f8401425c6bc}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{F0E02D62-6C1D-4eb3-AC47-F8401425C6BC}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{f0e02d62-6c1d-4eb3-ac47-f8401425c6bc}.settingcontent-ms.xuy")) returned 1 [0231.136] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{F120B10E-C882-4613-955F-B4DF13C6E803}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{f120b10e-c882-4613-955f-b4df13c6e803}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{F120B10E-C882-4613-955F-B4DF13C6E803}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{f120b10e-c882-4613-955f-b4df13c6e803}.settingcontent-ms.xuy")) returned 1 [0231.153] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{f2ddfc82-8f12-4cdd-b7dc-d4fe1425aa4d}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{f2ddfc82-8f12-4cdd-b7dc-d4fe1425aa4d}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{f2ddfc82-8f12-4cdd-b7dc-d4fe1425aa4d}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{f2ddfc82-8f12-4cdd-b7dc-d4fe1425aa4d}.settingcontent-ms.xuy")) returned 1 [0231.169] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{F2E71049-6F88-4A3B-9475-5A2B40B36092}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{f2e71049-6f88-4a3b-9475-5a2b40b36092}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{F2E71049-6F88-4A3B-9475-5A2B40B36092}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{f2e71049-6f88-4a3b-9475-5a2b40b36092}.settingcontent-ms.xuy")) returned 1 [0231.189] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{F3FD1F8E-B34A-49AE-95B9-5DBEAB5BFB49}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{f3fd1f8e-b34a-49ae-95b9-5dbeab5bfb49}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{F3FD1F8E-B34A-49AE-95B9-5DBEAB5BFB49}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{f3fd1f8e-b34a-49ae-95b9-5dbeab5bfb49}.settingcontent-ms.xuy")) returned 1 [0231.207] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{f56fbb39-e6d9-4b6d-9c29-ae82cff2925f}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{f56fbb39-e6d9-4b6d-9c29-ae82cff2925f}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{f56fbb39-e6d9-4b6d-9c29-ae82cff2925f}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{f56fbb39-e6d9-4b6d-9c29-ae82cff2925f}.settingcontent-ms.xuy")) returned 1 [0231.223] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{f6b6e965-e9b2-444b-9286-10c9152edbc5}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{f6b6e965-e9b2-444b-9286-10c9152edbc5}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{f6b6e965-e9b2-444b-9286-10c9152edbc5}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{f6b6e965-e9b2-444b-9286-10c9152edbc5}.settingcontent-ms.xuy")) returned 1 [0231.238] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{f82df8f7-8b9f-442e-a48c-818ea735ff9b}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{f82df8f7-8b9f-442e-a48c-818ea735ff9b}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{f82df8f7-8b9f-442e-a48c-818ea735ff9b}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{f82df8f7-8b9f-442e-a48c-818ea735ff9b}.settingcontent-ms.xuy")) returned 1 [0231.258] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{F96E2F30-2018-4F0E-BBEE-7CCBEE8CE714}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{f96e2f30-2018-4f0e-bbee-7ccbee8ce714}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{F96E2F30-2018-4F0E-BBEE-7CCBEE8CE714}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{f96e2f30-2018-4f0e-bbee-7ccbee8ce714}.settingcontent-ms.xuy")) returned 1 [0231.283] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{FADA4BFB-4853-4547-B70F-1B565E7D907B}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{fada4bfb-4853-4547-b70f-1b565e7d907b}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{FADA4BFB-4853-4547-B70F-1B565E7D907B}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{fada4bfb-4853-4547-b70f-1b565e7d907b}.settingcontent-ms.xuy")) returned 1 [0231.302] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{FD4FB8FA-F752-4E78-933B-8969E18BC9B5}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{fd4fb8fa-f752-4e78-933b-8969e18bc9b5}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{FD4FB8FA-F752-4E78-933B-8969E18BC9B5}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{fd4fb8fa-f752-4e78-933b-8969e18bc9b5}.settingcontent-ms.xuy")) returned 1 [0231.322] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{FE777427-D33C-485B-A414-3BD5A2943162}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{fe777427-d33c-485b-a414-3bd5a2943162}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{FE777427-D33C-485B-A414-3BD5A2943162}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{fe777427-d33c-485b-a414-3bd5a2943162}.settingcontent-ms.xuy")) returned 1 [0231.349] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{FEBB9292-6110-4B9E-8565-91C4076E0A43}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{febb9292-6110-4b9e-8565-91c4076e0a43}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{FEBB9292-6110-4B9E-8565-91C4076E0A43}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{febb9292-6110-4b9e-8565-91c4076e0a43}.settingcontent-ms.xuy")) returned 1 [0231.371] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{FEFF8F5D-EB40-485d-AC2A-EB7942DDF624}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{feff8f5d-eb40-485d-ac2a-eb7942ddf624}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{FEFF8F5D-EB40-485d-AC2A-EB7942DDF624}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{feff8f5d-eb40-485d-ac2a-eb7942ddf624}.settingcontent-ms.xuy")) returned 1 [0231.386] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{FFA33B6C-DC4D-438C-893F-EBF44A09BFC0}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{ffa33b6c-dc4d-438c-893f-ebf44a09bfc0}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{FFA33B6C-DC4D-438C-893F-EBF44A09BFC0}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{ffa33b6c-dc4d-438c-893f-ebf44a09bfc0}.settingcontent-ms.xuy")) returned 1 [0231.403] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\ControlPanel.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\controlpanel.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\ControlPanel.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\controlpanel.settingcontent-ms.xuy")) returned 1 [0231.419] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\CortanaSettings.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\cortanasettings.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\CortanaSettings.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\cortanasettings.settingcontent-ms.xuy")) returned 1 [0231.443] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\NameSpace_Classic_0_FlashPlayerCPLApp.cpl.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\namespace_classic_0_flashplayercplapp.cpl.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\NameSpace_Classic_0_FlashPlayerCPLApp.cpl.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\namespace_classic_0_flashplayercplapp.cpl.settingcontent-ms.xuy")) returned 1 [0231.458] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\NameSpace_Classic_{025A5937-A6BE-4686-A844-36FE4BEC8B6D}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\namespace_classic_{025a5937-a6be-4686-a844-36fe4bec8b6d}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\NameSpace_Classic_{025A5937-A6BE-4686-A844-36FE4BEC8B6D}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\namespace_classic_{025a5937-a6be-4686-a844-36fe4bec8b6d}.settingcontent-ms.xuy")) returned 1 [0231.489] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\NameSpace_Classic_{60632754-c523-4b62-b45c-4172da012619}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\namespace_classic_{60632754-c523-4b62-b45c-4172da012619}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\NameSpace_Classic_{60632754-c523-4b62-b45c-4172da012619}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\namespace_classic_{60632754-c523-4b62-b45c-4172da012619}.settingcontent-ms.xuy")) returned 1 [0231.511] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\NameSpace_Classic_{6C8EEC18-8D75-41B2-A177-8831D59D2D50}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\namespace_classic_{6c8eec18-8d75-41b2-a177-8831d59d2d50}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\NameSpace_Classic_{6C8EEC18-8D75-41B2-A177-8831D59D2D50}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\namespace_classic_{6c8eec18-8d75-41b2-a177-8831d59d2d50}.settingcontent-ms.xuy")) returned 1 [0231.529] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\NameSpace_Classic_{7b81be6a-ce2b-4676-a29e-eb907a5126c5}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\namespace_classic_{7b81be6a-ce2b-4676-a29e-eb907a5126c5}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\NameSpace_Classic_{7b81be6a-ce2b-4676-a29e-eb907a5126c5}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\namespace_classic_{7b81be6a-ce2b-4676-a29e-eb907a5126c5}.settingcontent-ms.xuy")) returned 1 [0231.556] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\NameSpace_Classic_{96AE8D84-A250-4520-95A5-A47A7E3C548B}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\namespace_classic_{96ae8d84-a250-4520-95a5-a47a7e3c548b}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\NameSpace_Classic_{96AE8D84-A250-4520-95A5-A47A7E3C548B}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\namespace_classic_{96ae8d84-a250-4520-95a5-a47a7e3c548b}.settingcontent-ms.xuy")) returned 1 [0231.572] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\NameSpace_Classic_{B98A2BEA-7D42-4558-8BD1-832F41BAC6FD}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\namespace_classic_{b98a2bea-7d42-4558-8bd1-832f41bac6fd}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\NameSpace_Classic_{B98A2BEA-7D42-4558-8BD1-832F41BAC6FD}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\namespace_classic_{b98a2bea-7d42-4558-8bd1-832f41bac6fd}.settingcontent-ms.xuy")) returned 1 [0231.586] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\NameSpace_Classic_{D8559EB9-20C0-410E-BEDA-7ED416AECC2A}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\namespace_classic_{d8559eb9-20c0-410e-beda-7ed416aecc2a}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\NameSpace_Classic_{D8559EB9-20C0-410E-BEDA-7ED416AECC2A}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\namespace_classic_{d8559eb9-20c0-410e-beda-7ed416aecc2a}.settingcontent-ms.xuy")) returned 1 [0231.602] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\NameSpace_Classic_{F942C606-0914-47AB-BE56-1321B8035096}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\namespace_classic_{f942c606-0914-47ab-be56-1321b8035096}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\NameSpace_Classic_{F942C606-0914-47AB-BE56-1321B8035096}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\namespace_classic_{f942c606-0914-47ab-be56-1321b8035096}.settingcontent-ms.xuy")) returned 1 [0231.633] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\SettingsPane_{4B719A8A-CE18-4033-BE59-1083B40F25B7}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\settingspane_{4b719a8a-ce18-4033-be59-1083b40f25b7}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\SettingsPane_{4B719A8A-CE18-4033-BE59-1083B40F25B7}.settingcontent-ms.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\settingspane_{4b719a8a-ce18-4033-be59-1083b40f25b7}.settingcontent-ms.xuy")) returned 1 [0231.652] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\settings\\roaming.lock"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\Settings\\roaming.lock.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\settings\\roaming.lock.xuy")) returned 1 [0231.667] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\settings\\settings.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\Settings\\settings.dat.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\settings\\settings.dat.xuy")) returned 1 [0231.714] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\settings\\settings.dat.log1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\Settings\\settings.dat.LOG1.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\settings\\settings.dat.log1.xuy")) returned 1 [0231.736] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\settings\\settings.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x3bc2e0 | out: lpFileInformation=0x3bc2e0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x78c1a7b9, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x78c1a7b9, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x78c1a7b9, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0231.736] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\settings\\settings.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x222b800 | out: lpFileInformation=0x222b800*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x78c1a7b9, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x78c1a7b9, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x78c1a7b9, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0231.737] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\settings\\settings.dat.log2"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0231.737] GetFileType (hFile=0x444) returned 0x1 [0231.737] GetFileType (hFile=0x444) returned 0x1 [0231.737] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc258 | out: lpFileSizeHigh=0x3bc258*=0x0) returned 0x0 [0231.737] CloseHandle (hObject=0x444) returned 1 [0231.771] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", lpFilePart=0x0) returned 0x73 [0231.771] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\settings\\settings.dat.log2"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0231.773] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8b50) returned 1 [0231.773] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0231.773] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\SystemAppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\SystemAppData", lpFilePart=0x0) returned 0x66 [0231.773] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\SystemAppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\SystemAppData\\", lpFilePart=0x0) returned 0x67 [0231.773] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\SystemAppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7fd0 [0231.774] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0231.774] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0231.774] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0231.774] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0231.774] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0231.774] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0231.774] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\SystemAppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\SystemAppData", lpFilePart=0x0) returned 0x66 [0231.774] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\SystemAppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\SystemAppData\\", lpFilePart=0x0) returned 0x67 [0231.774] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\SystemAppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7a90 [0231.774] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0231.774] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0231.774] FindClose (in: hFindFile=0x5d7a90 | out: hFindFile=0x5d7a90) returned 1 [0231.774] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0231.775] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0231.775] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0231.775] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\TempState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\TempState", lpFilePart=0x0) returned 0x62 [0231.775] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\TempState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\TempState\\", lpFilePart=0x0) returned 0x63 [0231.775] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\TempState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7c70 [0231.775] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0231.775] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0231.775] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0231.775] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0231.775] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0231.775] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0231.775] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\TempState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\TempState", lpFilePart=0x0) returned 0x62 [0231.775] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\TempState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\TempState\\", lpFilePart=0x0) returned 0x63 [0231.776] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\TempState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7e50 [0231.776] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0231.776] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0231.776] FindClose (in: hFindFile=0x5d7e50 | out: hFindFile=0x5d7e50) returned 1 [0231.776] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0231.776] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0231.776] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0231.776] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy", lpFilePart=0x0) returned 0x4f [0231.776] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\", lpFilePart=0x0) returned 0x50 [0231.776] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d78b0 [0231.784] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0231.784] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0231.785] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0231.785] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0231.785] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0231.785] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0231.785] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0231.785] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0231.785] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0231.786] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0231.786] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0231.786] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0231.786] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0231.786] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0231.786] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy", lpFilePart=0x0) returned 0x4f [0231.787] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\", lpFilePart=0x0) returned 0x50 [0231.787] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d79d0 [0231.787] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0231.787] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0231.788] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0231.788] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0231.788] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0231.788] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0231.788] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0231.788] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0231.788] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0231.788] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0231.788] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0231.789] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0231.789] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0231.789] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0231.789] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\AC", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\AC", lpFilePart=0x0) returned 0x52 [0231.789] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\AC\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\AC\\", lpFilePart=0x0) returned 0x53 [0231.789] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\AC\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7550 [0231.795] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0231.795] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0231.795] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0231.795] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0231.795] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0231.795] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0231.795] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\AC", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\AC", lpFilePart=0x0) returned 0x52 [0231.795] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\AC\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\AC\\", lpFilePart=0x0) returned 0x53 [0231.796] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\AC\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7370 [0231.796] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0231.796] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0231.796] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0231.796] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0231.796] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0231.796] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0231.796] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\AppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\AppData", lpFilePart=0x0) returned 0x57 [0231.796] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\AppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\AppData\\", lpFilePart=0x0) returned 0x58 [0231.796] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\AppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d73d0 [0231.799] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0231.799] FindNextFileW (in: hFindFile=0x5d73d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0231.799] FindClose (in: hFindFile=0x5d73d0 | out: hFindFile=0x5d73d0) returned 1 [0231.799] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0231.799] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0231.799] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0231.799] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\AppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\AppData", lpFilePart=0x0) returned 0x57 [0231.799] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\AppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\AppData\\", lpFilePart=0x0) returned 0x58 [0231.799] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\AppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d79d0 [0231.800] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0231.800] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0231.800] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0231.800] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0231.800] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0231.800] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0231.800] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\LocalCache", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\LocalCache", lpFilePart=0x0) returned 0x5a [0231.800] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\LocalCache\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\LocalCache\\", lpFilePart=0x0) returned 0x5b [0231.800] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\LocalCache\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7550 [0231.801] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0231.801] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0231.801] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0231.801] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0231.801] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0231.801] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0231.801] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\LocalCache", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\LocalCache", lpFilePart=0x0) returned 0x5a [0231.801] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\LocalCache\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\LocalCache\\", lpFilePart=0x0) returned 0x5b [0231.801] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\LocalCache\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7e50 [0231.801] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0231.802] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0231.802] FindClose (in: hFindFile=0x5d7e50 | out: hFindFile=0x5d7e50) returned 1 [0231.802] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0231.802] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0231.802] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0231.802] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\LocalState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\LocalState", lpFilePart=0x0) returned 0x5a [0231.802] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\LocalState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\LocalState\\", lpFilePart=0x0) returned 0x5b [0231.802] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\LocalState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7370 [0231.802] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0231.803] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0231.803] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0231.803] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0231.803] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0231.803] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0231.803] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\LocalState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\LocalState", lpFilePart=0x0) returned 0x5a [0231.803] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\LocalState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\LocalState\\", lpFilePart=0x0) returned 0x5b [0231.803] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\LocalState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7370 [0231.803] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0231.803] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0231.804] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0231.804] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0231.804] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0231.804] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0231.804] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\RoamingState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\RoamingState", lpFilePart=0x0) returned 0x5c [0231.804] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\RoamingState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\RoamingState\\", lpFilePart=0x0) returned 0x5d [0231.804] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\RoamingState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d8090 [0231.804] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0231.805] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0231.805] FindClose (in: hFindFile=0x5d8090 | out: hFindFile=0x5d8090) returned 1 [0231.805] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0231.805] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0231.805] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0231.805] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\RoamingState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\RoamingState", lpFilePart=0x0) returned 0x5c [0231.805] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\RoamingState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\RoamingState\\", lpFilePart=0x0) returned 0x5d [0231.805] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\RoamingState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d79d0 [0231.805] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0231.805] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0231.806] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0231.806] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0231.806] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0231.806] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0231.806] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\Settings", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\Settings", lpFilePart=0x0) returned 0x58 [0231.806] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\Settings\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\Settings\\", lpFilePart=0x0) returned 0x59 [0231.806] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\Settings\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d78b0 [0231.815] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0231.815] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0231.815] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0231.815] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0231.815] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0231.816] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0231.816] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0231.816] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0231.816] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0231.816] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0231.816] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\Settings", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\Settings", lpFilePart=0x0) returned 0x58 [0231.816] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\Settings\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\Settings\\", lpFilePart=0x0) returned 0x59 [0231.816] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\Settings\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d78b0 [0231.817] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0231.817] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0231.818] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0231.818] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0231.818] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0231.818] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0231.818] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0231.819] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0231.819] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0231.819] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\Settings\\roaming.lock", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\Settings\\roaming.lock", lpFilePart=0x0) returned 0x65 [0231.819] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0231.819] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.miracastview_cw5n1h2txyewy\\settings\\roaming.lock"), fInfoLevelId=0x0, lpFileInformation=0x22b7240 | out: lpFileInformation=0x22b7240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe549815, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xbe549815, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xbe549815, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0231.820] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0231.820] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\Settings\\roaming.lock", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\Settings\\roaming.lock", lpFilePart=0x0) returned 0x65 [0231.820] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0231.820] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.miracastview_cw5n1h2txyewy\\settings\\roaming.lock"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0231.820] GetFileType (hFile=0x444) returned 0x1 [0231.820] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0231.820] GetFileType (hFile=0x444) returned 0x1 [0231.820] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0x0 [0231.820] CloseHandle (hObject=0x444) returned 1 [0231.835] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\Settings\\roaming.lock", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\Settings\\roaming.lock", lpFilePart=0x0) returned 0x65 [0231.835] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0231.835] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.miracastview_cw5n1h2txyewy\\settings\\roaming.lock"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0231.836] GetFileType (hFile=0x444) returned 0x1 [0231.836] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0231.836] GetFileType (hFile=0x444) returned 0x1 [0231.836] WriteFile (in: hFile=0x444, lpBuffer=0x232d690*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x3be628, lpOverlapped=0x0 | out: lpBuffer=0x232d690*, lpNumberOfBytesWritten=0x3be628*=0x10, lpOverlapped=0x0) returned 1 [0231.837] CloseHandle (hObject=0x444) returned 1 [0231.837] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\Settings\\roaming.lock", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\Settings\\roaming.lock", lpFilePart=0x0) returned 0x65 [0231.837] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\Settings\\roaming.lock.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\Settings\\roaming.lock.xuy", lpFilePart=0x0) returned 0x69 [0231.837] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0231.837] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.miracastview_cw5n1h2txyewy\\settings\\roaming.lock"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe549815, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xbe549815, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x7607fc67, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0231.838] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0231.838] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.miracastview_cw5n1h2txyewy\\settings\\roaming.lock"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\Settings\\roaming.lock.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.miracastview_cw5n1h2txyewy\\settings\\roaming.lock.xuy")) returned 1 [0231.839] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\Settings\\settings.dat", lpFilePart=0x0) returned 0x65 [0231.839] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0231.839] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.miracastview_cw5n1h2txyewy\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x232e9b8 | out: lpFileInformation=0x232e9b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe549815, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0x78e0a646, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x78e0a646, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0231.839] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0231.839] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\Settings\\settings.dat", lpFilePart=0x0) returned 0x65 [0231.839] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0231.839] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.miracastview_cw5n1h2txyewy\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x232eb40 | out: lpFileInformation=0x232eb40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe549815, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0x78e0a646, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x78e0a646, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0231.839] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0231.840] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\Settings\\settings.dat", lpFilePart=0x0) returned 0x65 [0231.840] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0231.840] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.miracastview_cw5n1h2txyewy\\settings\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0231.840] GetFileType (hFile=0x444) returned 0x1 [0231.840] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0231.840] GetFileType (hFile=0x444) returned 0x1 [0231.840] ReadFile (in: hFile=0x444, lpBuffer=0x2330f80, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x2330f80*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0231.853] CloseHandle (hObject=0x444) returned 1 [0231.853] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\Settings\\settings.dat", lpFilePart=0x0) returned 0x65 [0231.853] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0231.853] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.miracastview_cw5n1h2txyewy\\settings\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0231.854] GetFileType (hFile=0x444) returned 0x1 [0231.854] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0231.854] GetFileType (hFile=0x444) returned 0x1 [0231.854] WriteFile (in: hFile=0x444, lpBuffer=0x232eca8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x232eca8*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0231.854] CloseHandle (hObject=0x444) returned 1 [0231.854] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\Settings\\settings.dat", lpFilePart=0x0) returned 0x65 [0231.854] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\Settings\\settings.dat.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\Settings\\settings.dat.xuy", lpFilePart=0x0) returned 0x69 [0231.854] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0231.854] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.miracastview_cw5n1h2txyewy\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe549815, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0x78e0a646, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x760a5d22, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0231.854] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0231.854] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.miracastview_cw5n1h2txyewy\\settings\\settings.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\Settings\\settings.dat.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.miracastview_cw5n1h2txyewy\\settings\\settings.dat.xuy")) returned 1 [0231.856] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", lpFilePart=0x0) returned 0x6a [0231.856] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0231.856] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.miracastview_cw5n1h2txyewy\\settings\\settings.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x23ad418 | out: lpFileInformation=0x23ad418*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x78d4ba7b, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x78d4ba7b, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x78d4ba7b, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0231.856] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0231.856] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", lpFilePart=0x0) returned 0x6a [0231.856] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0231.856] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.miracastview_cw5n1h2txyewy\\settings\\settings.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x23ad5b0 | out: lpFileInformation=0x23ad5b0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x78d4ba7b, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x78d4ba7b, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x78d4ba7b, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0231.856] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0231.856] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", lpFilePart=0x0) returned 0x6a [0231.856] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0231.856] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.miracastview_cw5n1h2txyewy\\settings\\settings.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0231.865] GetFileType (hFile=0x444) returned 0x1 [0231.865] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0231.865] GetFileType (hFile=0x444) returned 0x1 [0231.865] ReadFile (in: hFile=0x444, lpBuffer=0x23afa10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x23afa10*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0231.929] CloseHandle (hObject=0x444) returned 1 [0231.929] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", lpFilePart=0x0) returned 0x6a [0231.929] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0231.929] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.miracastview_cw5n1h2txyewy\\settings\\settings.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0231.930] GetFileType (hFile=0x444) returned 0x1 [0231.930] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0231.930] GetFileType (hFile=0x444) returned 0x1 [0231.930] WriteFile (in: hFile=0x444, lpBuffer=0x21c2628*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x21c2628*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0231.930] CloseHandle (hObject=0x444) returned 1 [0231.930] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", lpFilePart=0x0) returned 0x6a [0231.930] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\Settings\\settings.dat.LOG1.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\Settings\\settings.dat.LOG1.xuy", lpFilePart=0x0) returned 0x6e [0231.930] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0231.930] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.miracastview_cw5n1h2txyewy\\settings\\settings.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x78d4ba7b, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x78d4ba7b, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x7616496e, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0231.930] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0231.930] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.miracastview_cw5n1h2txyewy\\settings\\settings.dat.log1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\Settings\\settings.dat.LOG1.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.miracastview_cw5n1h2txyewy\\settings\\settings.dat.log1.xuy")) returned 1 [0231.932] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", lpFilePart=0x0) returned 0x6a [0231.932] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0231.932] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.miracastview_cw5n1h2txyewy\\settings\\settings.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x222f968 | out: lpFileInformation=0x222f968*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x78d4ba7b, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x78d4ba7b, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x78d4ba7b, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0231.935] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0231.935] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", lpFilePart=0x0) returned 0x6a [0231.935] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0231.935] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.miracastview_cw5n1h2txyewy\\settings\\settings.dat.log2"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0231.936] GetFileType (hFile=0x444) returned 0x1 [0231.936] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0231.936] GetFileType (hFile=0x444) returned 0x1 [0231.936] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0x0 [0231.936] CloseHandle (hObject=0x444) returned 1 [0231.946] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", lpFilePart=0x0) returned 0x6a [0231.946] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0231.946] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.miracastview_cw5n1h2txyewy\\settings\\settings.dat.log2"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0231.947] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb0e0) returned 1 [0231.948] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", lpFilePart=0x0) returned 0x6a [0231.948] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc200) returned 1 [0231.948] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.miracastview_cw5n1h2txyewy\\settings\\settings.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x3bc2e0 | out: lpFileInformation=0x3bc2e0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x78d4ba7b, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x78d4ba7b, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x78d4ba7b, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0231.948] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1c0) returned 1 [0231.948] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbd80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", lpFilePart=0x0) returned 0x6a [0231.948] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc200) returned 1 [0231.948] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.miracastview_cw5n1h2txyewy\\settings\\settings.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x22a66b0 | out: lpFileInformation=0x22a66b0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x78d4ba7b, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x78d4ba7b, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x78d4ba7b, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0231.948] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1c0) returned 1 [0231.948] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", lpFilePart=0x0) returned 0x6a [0231.948] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0c0) returned 1 [0231.948] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.miracastview_cw5n1h2txyewy\\settings\\settings.dat.log2"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0231.948] GetFileType (hFile=0x444) returned 0x1 [0231.948] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc030) returned 1 [0231.948] GetFileType (hFile=0x444) returned 0x1 [0231.948] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc258 | out: lpFileSizeHigh=0x3bc258*=0x0) returned 0x0 [0231.948] CloseHandle (hObject=0x444) returned 1 [0231.965] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", lpFilePart=0x0) returned 0x6a [0231.965] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0c0) returned 1 [0231.965] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.miracastview_cw5n1h2txyewy\\settings\\settings.dat.log2"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0231.967] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8b50) returned 1 [0231.968] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0231.968] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\SystemAppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\SystemAppData", lpFilePart=0x0) returned 0x5d [0231.968] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\SystemAppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\SystemAppData\\", lpFilePart=0x0) returned 0x5e [0231.968] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\SystemAppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d79d0 [0231.968] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0231.968] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0231.969] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0231.969] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0231.969] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0231.969] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0231.969] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\SystemAppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\SystemAppData", lpFilePart=0x0) returned 0x5d [0231.969] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\SystemAppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\SystemAppData\\", lpFilePart=0x0) returned 0x5e [0231.969] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\SystemAppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d79d0 [0231.969] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0231.969] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0231.969] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0231.969] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0231.969] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0231.969] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0231.969] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\TempState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\TempState", lpFilePart=0x0) returned 0x59 [0231.969] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\TempState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\TempState\\", lpFilePart=0x0) returned 0x5a [0231.969] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\TempState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d81b0 [0231.970] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0231.970] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0231.970] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0231.970] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0231.970] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0231.970] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0231.970] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\TempState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\TempState", lpFilePart=0x0) returned 0x59 [0231.970] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\TempState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\TempState\\", lpFilePart=0x0) returned 0x5a [0231.970] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\TempState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7a90 [0231.970] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0231.970] FindNextFileW (in: hFindFile=0x5d7a90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0231.970] FindClose (in: hFindFile=0x5d7a90 | out: hFindFile=0x5d7a90) returned 1 [0231.970] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0231.971] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0231.971] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0231.971] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy", lpFilePart=0x0) returned 0x4e [0231.971] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\", lpFilePart=0x0) returned 0x4f [0231.971] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d79d0 [0231.999] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0231.999] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0231.999] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0231.999] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0231.999] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0231.999] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0231.999] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0232.000] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0232.000] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0232.000] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0232.000] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0232.001] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0232.001] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0232.001] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0232.001] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy", lpFilePart=0x0) returned 0x4e [0232.001] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\", lpFilePart=0x0) returned 0x4f [0232.001] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d7fd0 [0232.002] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0232.002] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0232.002] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0232.002] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0232.002] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0232.002] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0232.002] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0232.003] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0232.003] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0232.003] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0232.003] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0232.003] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0232.004] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0232.004] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0232.004] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\AC", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\AC", lpFilePart=0x0) returned 0x51 [0232.004] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\AC\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\AC\\", lpFilePart=0x0) returned 0x52 [0232.004] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\AC\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7c70 [0232.006] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0232.007] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0232.007] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0232.007] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0232.007] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0232.007] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0232.007] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\AC", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\AC", lpFilePart=0x0) returned 0x51 [0232.007] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\AC\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\AC\\", lpFilePart=0x0) returned 0x52 [0232.007] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\AC\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7d90 [0232.007] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0232.007] FindNextFileW (in: hFindFile=0x5d7d90, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0232.008] FindClose (in: hFindFile=0x5d7d90 | out: hFindFile=0x5d7d90) returned 1 [0232.008] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0232.008] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0232.008] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0232.008] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\AppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\AppData", lpFilePart=0x0) returned 0x56 [0232.008] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\AppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\AppData\\", lpFilePart=0x0) returned 0x57 [0232.008] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\AppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7eb0 [0232.015] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0232.015] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0232.015] FindClose (in: hFindFile=0x5d7eb0 | out: hFindFile=0x5d7eb0) returned 1 [0232.015] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0232.015] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0232.015] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0232.015] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\AppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\AppData", lpFilePart=0x0) returned 0x56 [0232.015] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\AppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\AppData\\", lpFilePart=0x0) returned 0x57 [0232.015] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\AppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d78b0 [0232.016] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0232.016] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0232.016] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0232.016] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0232.016] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0232.016] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0232.016] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\LocalCache", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\LocalCache", lpFilePart=0x0) returned 0x59 [0232.016] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\LocalCache\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\LocalCache\\", lpFilePart=0x0) returned 0x5a [0232.016] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\LocalCache\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7c70 [0232.016] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0232.016] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0232.017] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0232.017] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0232.017] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0232.017] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0232.017] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\LocalCache", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\LocalCache", lpFilePart=0x0) returned 0x59 [0232.017] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\LocalCache\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\LocalCache\\", lpFilePart=0x0) returned 0x5a [0232.017] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\LocalCache\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7550 [0232.017] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0232.017] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0232.017] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0232.017] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0232.017] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0232.017] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0232.017] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\LocalState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\LocalState", lpFilePart=0x0) returned 0x59 [0232.017] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\LocalState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\LocalState\\", lpFilePart=0x0) returned 0x5a [0232.017] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\LocalState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d78b0 [0232.018] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0232.018] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0232.018] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0232.018] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0232.018] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0232.018] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0232.018] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\LocalState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\LocalState", lpFilePart=0x0) returned 0x59 [0232.018] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\LocalState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\LocalState\\", lpFilePart=0x0) returned 0x5a [0232.018] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\LocalState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7550 [0232.018] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0232.018] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0232.018] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0232.018] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0232.019] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0232.019] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0232.019] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\RoamingState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\RoamingState", lpFilePart=0x0) returned 0x5b [0232.019] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\RoamingState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\RoamingState\\", lpFilePart=0x0) returned 0x5c [0232.019] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\RoamingState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7a30 [0232.019] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0232.019] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0232.019] FindClose (in: hFindFile=0x5d7a30 | out: hFindFile=0x5d7a30) returned 1 [0232.019] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0232.019] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0232.019] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0232.019] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\RoamingState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\RoamingState", lpFilePart=0x0) returned 0x5b [0232.019] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\RoamingState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\RoamingState\\", lpFilePart=0x0) returned 0x5c [0232.019] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\RoamingState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7eb0 [0232.019] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0232.020] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0232.020] FindClose (in: hFindFile=0x5d7eb0 | out: hFindFile=0x5d7eb0) returned 1 [0232.020] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0232.020] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0232.020] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0232.020] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\Settings", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\Settings", lpFilePart=0x0) returned 0x57 [0232.020] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\Settings\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\Settings\\", lpFilePart=0x0) returned 0x58 [0232.020] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\Settings\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d81b0 [0232.033] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0232.033] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0232.033] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0232.033] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0232.033] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0232.034] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0232.034] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0232.034] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0232.034] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0232.034] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0232.034] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\Settings", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\Settings", lpFilePart=0x0) returned 0x57 [0232.034] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\Settings\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\Settings\\", lpFilePart=0x0) returned 0x58 [0232.034] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\Settings\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7cd0 [0232.035] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0232.035] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0232.035] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0232.036] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0232.036] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0232.036] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0232.036] FindClose (in: hFindFile=0x5d7cd0 | out: hFindFile=0x5d7cd0) returned 1 [0232.037] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0232.037] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0232.037] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\Settings\\roaming.lock", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\Settings\\roaming.lock", lpFilePart=0x0) returned 0x64 [0232.037] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0232.037] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.printdialog_cw5n1h2txyewy\\settings\\roaming.lock"), fInfoLevelId=0x0, lpFileInformation=0x2331a80 | out: lpFileInformation=0x2331a80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe9c1ed4, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xbe9c1ed4, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xbe9c1ed4, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0232.037] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0232.037] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\Settings\\roaming.lock", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\Settings\\roaming.lock", lpFilePart=0x0) returned 0x64 [0232.037] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0232.037] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.printdialog_cw5n1h2txyewy\\settings\\roaming.lock"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0232.038] GetFileType (hFile=0x444) returned 0x1 [0232.038] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0232.038] GetFileType (hFile=0x444) returned 0x1 [0232.038] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0x0 [0232.038] CloseHandle (hObject=0x444) returned 1 [0232.049] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\Settings\\roaming.lock", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\Settings\\roaming.lock", lpFilePart=0x0) returned 0x64 [0232.049] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0232.049] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.printdialog_cw5n1h2txyewy\\settings\\roaming.lock"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0232.051] GetFileType (hFile=0x444) returned 0x1 [0232.051] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0232.051] GetFileType (hFile=0x444) returned 0x1 [0232.051] WriteFile (in: hFile=0x444, lpBuffer=0x23a7ed0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x3be628, lpOverlapped=0x0 | out: lpBuffer=0x23a7ed0*, lpNumberOfBytesWritten=0x3be628*=0x10, lpOverlapped=0x0) returned 1 [0232.052] CloseHandle (hObject=0x444) returned 1 [0232.052] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\Settings\\roaming.lock", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\Settings\\roaming.lock", lpFilePart=0x0) returned 0x64 [0232.052] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\Settings\\roaming.lock.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\Settings\\roaming.lock.xuy", lpFilePart=0x0) returned 0x68 [0232.052] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0232.052] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.printdialog_cw5n1h2txyewy\\settings\\roaming.lock"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe9c1ed4, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xbe9c1ed4, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x76295ed1, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0232.052] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0232.052] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.printdialog_cw5n1h2txyewy\\settings\\roaming.lock"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\Settings\\roaming.lock.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.printdialog_cw5n1h2txyewy\\settings\\roaming.lock.xuy")) returned 1 [0232.054] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\Settings\\settings.dat", lpFilePart=0x0) returned 0x64 [0232.054] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0232.054] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.printdialog_cw5n1h2txyewy\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x23a91f8 | out: lpFileInformation=0x23a91f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe9c1ed4, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0x78f156c2, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x78f156c2, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0232.054] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0232.054] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\Settings\\settings.dat", lpFilePart=0x0) returned 0x64 [0232.054] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0232.054] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.printdialog_cw5n1h2txyewy\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x23a9380 | out: lpFileInformation=0x23a9380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe9c1ed4, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0x78f156c2, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x78f156c2, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0232.054] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0232.054] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\Settings\\settings.dat", lpFilePart=0x0) returned 0x64 [0232.054] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0232.054] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.printdialog_cw5n1h2txyewy\\settings\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0232.055] GetFileType (hFile=0x444) returned 0x1 [0232.055] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0232.055] GetFileType (hFile=0x444) returned 0x1 [0232.055] ReadFile (in: hFile=0x444, lpBuffer=0x23ab7c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x23ab7c0*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0232.101] CloseHandle (hObject=0x444) returned 1 [0232.101] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\Settings\\settings.dat", lpFilePart=0x0) returned 0x64 [0232.101] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0232.101] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.printdialog_cw5n1h2txyewy\\settings\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0232.102] GetFileType (hFile=0x444) returned 0x1 [0232.102] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0232.102] GetFileType (hFile=0x444) returned 0x1 [0232.102] WriteFile (in: hFile=0x444, lpBuffer=0x21c2608*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x21c2608*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0232.102] CloseHandle (hObject=0x444) returned 1 [0232.102] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\Settings\\settings.dat", lpFilePart=0x0) returned 0x64 [0232.102] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\Settings\\settings.dat.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\Settings\\settings.dat.xuy", lpFilePart=0x0) returned 0x68 [0232.102] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0232.102] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.printdialog_cw5n1h2txyewy\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe9c1ed4, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0x78f156c2, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x7630826a, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0232.102] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0232.102] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.printdialog_cw5n1h2txyewy\\settings\\settings.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\Settings\\settings.dat.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.printdialog_cw5n1h2txyewy\\settings\\settings.dat.xuy")) returned 1 [0232.104] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", lpFilePart=0x0) returned 0x69 [0232.104] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0232.104] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.printdialog_cw5n1h2txyewy\\settings\\settings.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x2227c20 | out: lpFileInformation=0x2227c20*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x78e7cd4d, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x78e7cd4d, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x78e7cd4d, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0232.104] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0232.104] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", lpFilePart=0x0) returned 0x69 [0232.104] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0232.104] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.printdialog_cw5n1h2txyewy\\settings\\settings.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x2227db8 | out: lpFileInformation=0x2227db8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x78e7cd4d, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x78e7cd4d, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x78e7cd4d, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0232.104] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0232.104] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", lpFilePart=0x0) returned 0x69 [0232.104] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0232.104] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.printdialog_cw5n1h2txyewy\\settings\\settings.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0232.105] GetFileType (hFile=0x444) returned 0x1 [0232.105] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0232.105] GetFileType (hFile=0x444) returned 0x1 [0232.105] ReadFile (in: hFile=0x444, lpBuffer=0x222a218, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x222a218*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0232.200] CloseHandle (hObject=0x444) returned 1 [0232.200] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", lpFilePart=0x0) returned 0x69 [0232.200] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0232.200] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.printdialog_cw5n1h2txyewy\\settings\\settings.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0232.200] GetFileType (hFile=0x444) returned 0x1 [0232.200] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be650) returned 1 [0232.200] GetFileType (hFile=0x444) returned 0x1 [0232.200] WriteFile (in: hFile=0x444, lpBuffer=0x2227f30*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x2227f30*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0232.201] CloseHandle (hObject=0x444) returned 1 [0232.201] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", lpFilePart=0x0) returned 0x69 [0232.201] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\Settings\\settings.dat.LOG1.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\Settings\\settings.dat.LOG1.xuy", lpFilePart=0x0) returned 0x6d [0232.201] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0232.201] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.printdialog_cw5n1h2txyewy\\settings\\settings.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x78e7cd4d, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x78e7cd4d, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x7641326d, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0232.201] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0232.201] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.printdialog_cw5n1h2txyewy\\settings\\settings.dat.log1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\Settings\\settings.dat.LOG1.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.printdialog_cw5n1h2txyewy\\settings\\settings.dat.log1.xuy")) returned 1 [0232.203] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", lpFilePart=0x0) returned 0x69 [0232.203] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0232.203] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.printdialog_cw5n1h2txyewy\\settings\\settings.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x22a66d8 | out: lpFileInformation=0x22a66d8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x78e7cd4d, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x78e7cd4d, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x78e7cd4d, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0232.203] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0232.203] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", lpFilePart=0x0) returned 0x69 [0232.203] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0232.203] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.printdialog_cw5n1h2txyewy\\settings\\settings.dat.log2"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0232.203] GetFileType (hFile=0x444) returned 0x1 [0232.203] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5c0) returned 1 [0232.203] GetFileType (hFile=0x444) returned 0x1 [0232.203] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0x0 [0232.203] CloseHandle (hObject=0x444) returned 1 [0232.213] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", lpFilePart=0x0) returned 0x69 [0232.213] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be650) returned 1 [0232.213] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.printdialog_cw5n1h2txyewy\\settings\\settings.dat.log2"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0232.214] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb0e0) returned 1 [0232.215] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", lpFilePart=0x0) returned 0x69 [0232.215] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc200) returned 1 [0232.215] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.printdialog_cw5n1h2txyewy\\settings\\settings.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x3bc2e0 | out: lpFileInformation=0x3bc2e0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x78e7cd4d, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x78e7cd4d, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x78e7cd4d, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0232.215] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1c0) returned 1 [0232.215] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbd80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", lpFilePart=0x0) returned 0x69 [0232.215] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc200) returned 1 [0232.215] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.printdialog_cw5n1h2txyewy\\settings\\settings.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x231d420 | out: lpFileInformation=0x231d420*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x78e7cd4d, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x78e7cd4d, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x78e7cd4d, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0232.215] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1c0) returned 1 [0232.215] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", lpFilePart=0x0) returned 0x69 [0232.215] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0c0) returned 1 [0232.215] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.printdialog_cw5n1h2txyewy\\settings\\settings.dat.log2"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0232.215] GetFileType (hFile=0x444) returned 0x1 [0232.215] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc030) returned 1 [0232.216] GetFileType (hFile=0x444) returned 0x1 [0232.216] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc258 | out: lpFileSizeHigh=0x3bc258*=0x0) returned 0x0 [0232.216] CloseHandle (hObject=0x444) returned 1 [0232.226] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", lpFilePart=0x0) returned 0x69 [0232.226] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0c0) returned 1 [0232.226] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.printdialog_cw5n1h2txyewy\\settings\\settings.dat.log2"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0232.227] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8b50) returned 1 [0232.228] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0232.228] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\SystemAppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\SystemAppData", lpFilePart=0x0) returned 0x5c [0232.228] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\SystemAppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\SystemAppData\\", lpFilePart=0x0) returned 0x5d [0232.228] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\SystemAppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7e50 [0232.228] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0232.228] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0232.228] FindClose (in: hFindFile=0x5d7e50 | out: hFindFile=0x5d7e50) returned 1 [0232.229] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0232.229] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0232.229] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0232.229] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\SystemAppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\SystemAppData", lpFilePart=0x0) returned 0x5c [0232.229] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\SystemAppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\SystemAppData\\", lpFilePart=0x0) returned 0x5d [0232.229] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\SystemAppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7eb0 [0232.229] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0232.229] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0232.229] FindClose (in: hFindFile=0x5d7eb0 | out: hFindFile=0x5d7eb0) returned 1 [0232.229] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0232.229] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0232.229] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0232.229] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\TempState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\TempState", lpFilePart=0x0) returned 0x58 [0232.229] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\TempState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\TempState\\", lpFilePart=0x0) returned 0x59 [0232.229] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\TempState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7550 [0232.230] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0232.230] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0232.230] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0232.230] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0232.230] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0232.230] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0232.230] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\TempState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\TempState", lpFilePart=0x0) returned 0x58 [0232.230] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\TempState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\TempState\\", lpFilePart=0x0) returned 0x59 [0232.230] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\TempState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7550 [0232.230] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0232.230] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0232.230] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0232.230] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0232.231] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0232.231] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0232.231] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy", lpFilePart=0x0) returned 0x51 [0232.231] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\", lpFilePart=0x0) returned 0x52 [0232.231] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d7c70 [0232.249] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0232.249] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0232.250] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0232.250] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0232.250] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0232.250] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0232.250] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0232.250] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0232.250] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0232.250] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0232.251] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0232.251] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0232.251] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0232.251] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0232.251] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0232.251] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy", lpFilePart=0x0) returned 0x51 [0232.251] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\", lpFilePart=0x0) returned 0x52 [0232.252] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d7670 [0232.252] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0232.252] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0232.252] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0232.253] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0232.253] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0232.253] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0232.253] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0232.253] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0232.253] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0232.253] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0232.253] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0232.253] FindClose (in: hFindFile=0x5d7670 | out: hFindFile=0x5d7670) returned 1 [0232.254] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0232.254] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0232.254] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0232.254] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\AC", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\AC", lpFilePart=0x0) returned 0x54 [0232.254] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\AC\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\AC\\", lpFilePart=0x0) returned 0x55 [0232.254] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\AC\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7fd0 [0232.262] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0232.262] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0232.263] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0232.263] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0232.263] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0232.263] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0232.263] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0232.264] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0232.264] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0232.264] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0232.264] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\AC", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\AC", lpFilePart=0x0) returned 0x54 [0232.264] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\AC\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\AC\\", lpFilePart=0x0) returned 0x55 [0232.264] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\AC\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d81b0 [0232.265] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0232.265] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0232.265] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0232.265] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0232.265] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0232.265] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0232.265] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0232.266] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0232.266] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0232.266] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0232.266] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\AC\\INetCache", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\AC\\INetCache", lpFilePart=0x0) returned 0x5e [0232.266] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\AC\\INetCache\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\AC\\INetCache\\", lpFilePart=0x0) returned 0x5f [0232.266] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\AC\\INetCache\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7df0 [0232.273] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0232.273] FindNextFileW (in: hFindFile=0x5d7df0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0232.273] FindClose (in: hFindFile=0x5d7df0 | out: hFindFile=0x5d7df0) returned 1 [0232.273] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0232.273] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0232.273] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0232.273] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\AC\\INetCache", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\AC\\INetCache", lpFilePart=0x0) returned 0x5e [0232.273] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\AC\\INetCache\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\AC\\INetCache\\", lpFilePart=0x0) returned 0x5f [0232.273] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\AC\\INetCache\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7e50 [0232.273] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0232.274] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0232.274] FindClose (in: hFindFile=0x5d7e50 | out: hFindFile=0x5d7e50) returned 1 [0232.274] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0232.274] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0232.274] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0232.274] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\AC\\INetCookies", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\AC\\INetCookies", lpFilePart=0x0) returned 0x60 [0232.274] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\AC\\INetCookies\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\AC\\INetCookies\\", lpFilePart=0x0) returned 0x61 [0232.274] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\AC\\INetCookies\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7e50 [0232.274] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0232.274] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0232.274] FindClose (in: hFindFile=0x5d7e50 | out: hFindFile=0x5d7e50) returned 1 [0232.274] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0232.274] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0232.274] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0232.274] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\AC\\INetCookies", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\AC\\INetCookies", lpFilePart=0x0) returned 0x60 [0232.275] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\AC\\INetCookies\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\AC\\INetCookies\\", lpFilePart=0x0) returned 0x61 [0232.275] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\AC\\INetCookies\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d78b0 [0232.275] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0232.275] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0232.275] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0232.275] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0232.275] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0232.275] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0232.275] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\AC\\INetHistory", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\AC\\INetHistory", lpFilePart=0x0) returned 0x60 [0232.275] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\AC\\INetHistory\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\AC\\INetHistory\\", lpFilePart=0x0) returned 0x61 [0232.275] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\AC\\INetHistory\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d79d0 [0232.275] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0232.275] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0232.276] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0232.276] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0232.276] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0232.276] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0232.276] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\AC\\INetHistory", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\AC\\INetHistory", lpFilePart=0x0) returned 0x60 [0232.276] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\AC\\INetHistory\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\AC\\INetHistory\\", lpFilePart=0x0) returned 0x61 [0232.276] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\AC\\INetHistory\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d8090 [0232.276] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0232.276] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0232.276] FindClose (in: hFindFile=0x5d8090 | out: hFindFile=0x5d8090) returned 1 [0232.276] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0232.276] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0232.276] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0232.276] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\AC\\Temp", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\AC\\Temp", lpFilePart=0x0) returned 0x59 [0232.277] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\AC\\Temp\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\AC\\Temp\\", lpFilePart=0x0) returned 0x5a [0232.277] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\AC\\Temp\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7550 [0232.277] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0232.277] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0232.277] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0232.277] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0232.277] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0232.277] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0232.277] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\AC\\Temp", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\AC\\Temp", lpFilePart=0x0) returned 0x59 [0232.277] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\AC\\Temp\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\AC\\Temp\\", lpFilePart=0x0) returned 0x5a [0232.277] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\AC\\Temp\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7af0 [0232.277] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0232.277] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0232.278] FindClose (in: hFindFile=0x5d7af0 | out: hFindFile=0x5d7af0) returned 1 [0232.278] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0232.278] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0232.278] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0232.278] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\AppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\AppData", lpFilePart=0x0) returned 0x59 [0232.278] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\AppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\AppData\\", lpFilePart=0x0) returned 0x5a [0232.278] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\AppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d78b0 [0232.278] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0232.278] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0232.278] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0232.278] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0232.278] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0232.278] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0232.278] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\AppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\AppData", lpFilePart=0x0) returned 0x59 [0232.278] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\AppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\AppData\\", lpFilePart=0x0) returned 0x5a [0232.278] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\AppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7eb0 [0232.279] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0232.279] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0232.279] FindClose (in: hFindFile=0x5d7eb0 | out: hFindFile=0x5d7eb0) returned 1 [0232.279] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0232.279] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0232.279] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0232.279] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\LocalCache", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\LocalCache", lpFilePart=0x0) returned 0x5c [0232.279] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\LocalCache\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\LocalCache\\", lpFilePart=0x0) returned 0x5d [0232.279] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\LocalCache\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7fd0 [0232.281] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0232.281] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0232.281] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0232.281] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0232.281] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\LocalCache", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\LocalCache", lpFilePart=0x0) returned 0x5c [0232.281] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\LocalCache\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\LocalCache\\", lpFilePart=0x0) returned 0x5d [0232.281] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\LocalCache\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d79d0 [0232.282] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0232.282] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0232.282] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0232.282] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\LocalState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\LocalState", lpFilePart=0x0) returned 0x5c [0232.282] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\LocalState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\LocalState\\", lpFilePart=0x0) returned 0x5d [0232.282] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\LocalState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d8090 [0232.282] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0232.282] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0232.282] FindClose (in: hFindFile=0x5d8090 | out: hFindFile=0x5d8090) returned 1 [0232.282] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\LocalState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\LocalState", lpFilePart=0x0) returned 0x5c [0232.282] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\LocalState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\LocalState\\", lpFilePart=0x0) returned 0x5d [0232.282] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\LocalState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d8090 [0232.283] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0232.283] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0232.283] FindClose (in: hFindFile=0x5d8090 | out: hFindFile=0x5d8090) returned 1 [0232.283] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\RoamingState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\RoamingState", lpFilePart=0x0) returned 0x5e [0232.283] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\RoamingState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\RoamingState\\", lpFilePart=0x0) returned 0x5f [0232.283] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\RoamingState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7370 [0232.283] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0232.283] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0232.283] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0232.283] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\RoamingState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\RoamingState", lpFilePart=0x0) returned 0x5e [0232.283] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\RoamingState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\RoamingState\\", lpFilePart=0x0) returned 0x5f [0232.283] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\RoamingState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7550 [0232.284] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0232.284] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0232.284] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0232.284] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Settings", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Settings", lpFilePart=0x0) returned 0x5a [0232.284] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Settings\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Settings\\", lpFilePart=0x0) returned 0x5b [0232.284] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Settings\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7550 [0232.295] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0232.295] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0232.295] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0232.295] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0232.295] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0232.295] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0232.296] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0232.296] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Settings", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Settings", lpFilePart=0x0) returned 0x5a [0232.296] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Settings\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Settings\\", lpFilePart=0x0) returned 0x5b [0232.296] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Settings\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7af0 [0232.297] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0232.297] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0232.297] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0232.297] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0232.297] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0232.297] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0232.298] FindClose (in: hFindFile=0x5d7af0 | out: hFindFile=0x5d7af0) returned 1 [0232.298] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Settings\\roaming.lock", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Settings\\roaming.lock", lpFilePart=0x0) returned 0x67 [0232.298] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.purchasedialog_cw5n1h2txyewy\\settings\\roaming.lock"), fInfoLevelId=0x0, lpFileInformation=0x23b2580 | out: lpFileInformation=0x23b2580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbedc7e72, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xbedc7e72, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xbedc7e72, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0232.299] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Settings\\roaming.lock", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Settings\\roaming.lock", lpFilePart=0x0) returned 0x67 [0232.299] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.purchasedialog_cw5n1h2txyewy\\settings\\roaming.lock"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0232.299] GetFileType (hFile=0x444) returned 0x1 [0232.299] GetFileType (hFile=0x444) returned 0x1 [0232.299] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0x0 [0232.299] CloseHandle (hObject=0x444) returned 1 [0232.336] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Settings\\roaming.lock", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Settings\\roaming.lock", lpFilePart=0x0) returned 0x67 [0232.336] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.purchasedialog_cw5n1h2txyewy\\settings\\roaming.lock"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0232.338] GetFileType (hFile=0x444) returned 0x1 [0232.338] GetFileType (hFile=0x444) returned 0x1 [0232.338] WriteFile (in: hFile=0x444, lpBuffer=0x2225988*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x3be628, lpOverlapped=0x0 | out: lpBuffer=0x2225988*, lpNumberOfBytesWritten=0x3be628*=0x10, lpOverlapped=0x0) returned 1 [0232.340] CloseHandle (hObject=0x444) returned 1 [0232.340] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Settings\\roaming.lock", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Settings\\roaming.lock", lpFilePart=0x0) returned 0x67 [0232.340] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Settings\\roaming.lock.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Settings\\roaming.lock.xuy", lpFilePart=0x0) returned 0x6b [0232.340] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.purchasedialog_cw5n1h2txyewy\\settings\\roaming.lock"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbedc7e72, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xbedc7e72, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x765445ef, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0232.340] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.purchasedialog_cw5n1h2txyewy\\settings\\roaming.lock"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Settings\\roaming.lock.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.purchasedialog_cw5n1h2txyewy\\settings\\roaming.lock.xuy")) returned 1 [0232.342] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Settings\\settings.dat", lpFilePart=0x0) returned 0x67 [0232.342] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.purchasedialog_cw5n1h2txyewy\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x2226cb0 | out: lpFileInformation=0x2226cb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbedc7e72, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0x7904698a, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x7904698a, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0232.342] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Settings\\settings.dat", lpFilePart=0x0) returned 0x67 [0232.342] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.purchasedialog_cw5n1h2txyewy\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x2226e38 | out: lpFileInformation=0x2226e38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbedc7e72, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0x7904698a, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x7904698a, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0232.342] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Settings\\settings.dat", lpFilePart=0x0) returned 0x67 [0232.342] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.purchasedialog_cw5n1h2txyewy\\settings\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0232.343] GetFileType (hFile=0x444) returned 0x1 [0232.343] GetFileType (hFile=0x444) returned 0x1 [0232.343] ReadFile (in: hFile=0x444, lpBuffer=0x2229278, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x2229278*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0232.370] CloseHandle (hObject=0x444) returned 1 [0232.370] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Settings\\settings.dat", lpFilePart=0x0) returned 0x67 [0232.370] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.purchasedialog_cw5n1h2txyewy\\settings\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0232.370] GetFileType (hFile=0x444) returned 0x1 [0232.370] GetFileType (hFile=0x444) returned 0x1 [0232.370] WriteFile (in: hFile=0x444, lpBuffer=0x2226fa0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x2226fa0*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0232.371] CloseHandle (hObject=0x444) returned 1 [0232.371] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Settings\\settings.dat", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Settings\\settings.dat", lpFilePart=0x0) returned 0x67 [0232.371] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Settings\\settings.dat.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Settings\\settings.dat.xuy", lpFilePart=0x0) returned 0x6b [0232.371] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.purchasedialog_cw5n1h2txyewy\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbedc7e72, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0x7904698a, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x76590abf, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0232.371] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.purchasedialog_cw5n1h2txyewy\\settings\\settings.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Settings\\settings.dat.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.purchasedialog_cw5n1h2txyewy\\settings\\settings.dat.xuy")) returned 1 [0232.372] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", lpFilePart=0x0) returned 0x6c [0232.372] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.purchasedialog_cw5n1h2txyewy\\settings\\settings.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x22a5710 | out: lpFileInformation=0x22a5710*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x78fae02e, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x78fae02e, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x78fae02e, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0232.377] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", lpFilePart=0x0) returned 0x6c [0232.377] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.purchasedialog_cw5n1h2txyewy\\settings\\settings.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x22a58b0 | out: lpFileInformation=0x22a58b0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x78fae02e, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x78fae02e, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x78fae02e, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0232.377] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", lpFilePart=0x0) returned 0x6c [0232.377] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.purchasedialog_cw5n1h2txyewy\\settings\\settings.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0232.378] GetFileType (hFile=0x444) returned 0x1 [0232.378] GetFileType (hFile=0x444) returned 0x1 [0232.379] ReadFile (in: hFile=0x444, lpBuffer=0x22a7d20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be768, lpOverlapped=0x0 | out: lpBuffer=0x22a7d20*, lpNumberOfBytesRead=0x3be768*=0x1000, lpOverlapped=0x0) returned 1 [0232.390] CloseHandle (hObject=0x444) returned 1 [0232.390] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", lpFilePart=0x0) returned 0x6c [0232.390] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.purchasedialog_cw5n1h2txyewy\\settings\\settings.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0232.391] GetFileType (hFile=0x444) returned 0x1 [0232.391] GetFileType (hFile=0x444) returned 0x1 [0232.391] WriteFile (in: hFile=0x444, lpBuffer=0x22a5a30*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be818, lpOverlapped=0x0 | out: lpBuffer=0x22a5a30*, lpNumberOfBytesWritten=0x3be818*=0x2000, lpOverlapped=0x0) returned 1 [0232.391] CloseHandle (hObject=0x444) returned 1 [0232.391] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Settings\\settings.dat.LOG1", lpFilePart=0x0) returned 0x6c [0232.391] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Settings\\settings.dat.LOG1.xuy", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Settings\\settings.dat.LOG1.xuy", lpFilePart=0x0) returned 0x70 [0232.391] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.purchasedialog_cw5n1h2txyewy\\settings\\settings.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x3be830 | out: lpFileInformation=0x3be830*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x78fae02e, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x78fae02e, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x765dcf3d, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0232.391] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.purchasedialog_cw5n1h2txyewy\\settings\\settings.dat.log1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Settings\\settings.dat.LOG1.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.purchasedialog_cw5n1h2txyewy\\settings\\settings.dat.log1.xuy")) returned 1 [0232.393] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", lpFilePart=0x0) returned 0x6c [0232.393] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.purchasedialog_cw5n1h2txyewy\\settings\\settings.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x2324200 | out: lpFileInformation=0x2324200*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x78fae02e, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x78fae02e, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x78fae02e, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0232.393] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", lpFilePart=0x0) returned 0x6c [0232.393] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.purchasedialog_cw5n1h2txyewy\\settings\\settings.dat.log2"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0232.393] GetFileType (hFile=0x444) returned 0x1 [0232.393] GetFileType (hFile=0x444) returned 0x1 [0232.393] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be7e8 | out: lpFileSizeHigh=0x3be7e8*=0x0) returned 0x0 [0232.393] CloseHandle (hObject=0x444) returned 1 [0232.403] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", lpFilePart=0x0) returned 0x6c [0232.403] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.purchasedialog_cw5n1h2txyewy\\settings\\settings.dat.log2"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0232.404] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb0e0) returned 1 [0232.405] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", lpFilePart=0x0) returned 0x6c [0232.405] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc200) returned 1 [0232.405] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.purchasedialog_cw5n1h2txyewy\\settings\\settings.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x3bc2e0 | out: lpFileInformation=0x3bc2e0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x78fae02e, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x78fae02e, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x78fae02e, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0232.405] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1c0) returned 1 [0232.405] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbd80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", lpFilePart=0x0) returned 0x6c [0232.405] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc200) returned 1 [0232.405] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.purchasedialog_cw5n1h2txyewy\\settings\\settings.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x239af70 | out: lpFileInformation=0x239af70*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x78fae02e, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x78fae02e, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x78fae02e, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0232.405] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc1c0) returned 1 [0232.405] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", lpFilePart=0x0) returned 0x6c [0232.405] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0c0) returned 1 [0232.405] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.purchasedialog_cw5n1h2txyewy\\settings\\settings.dat.log2"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0232.405] GetFileType (hFile=0x444) returned 0x1 [0232.405] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc030) returned 1 [0232.405] GetFileType (hFile=0x444) returned 0x1 [0232.405] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc258 | out: lpFileSizeHigh=0x3bc258*=0x0) returned 0x0 [0232.405] CloseHandle (hObject=0x444) returned 1 [0232.443] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Settings\\settings.dat.LOG2", lpFilePart=0x0) returned 0x6c [0232.443] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc0c0) returned 1 [0232.443] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.purchasedialog_cw5n1h2txyewy\\settings\\settings.dat.log2"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0232.445] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8b50) returned 1 [0232.446] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0232.446] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\SystemAppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\SystemAppData", lpFilePart=0x0) returned 0x5f [0232.446] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\SystemAppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\SystemAppData\\", lpFilePart=0x0) returned 0x60 [0232.446] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\SystemAppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d79d0 [0232.446] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0232.446] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0232.447] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0232.447] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0232.447] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0232.447] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0232.447] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\SystemAppData", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\SystemAppData", lpFilePart=0x0) returned 0x5f [0232.447] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\SystemAppData\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\SystemAppData\\", lpFilePart=0x0) returned 0x60 [0232.447] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\SystemAppData\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7e50 [0232.447] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0232.447] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0232.447] FindClose (in: hFindFile=0x5d7e50 | out: hFindFile=0x5d7e50) returned 1 [0232.447] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0232.447] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0232.447] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0232.448] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\TempState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\TempState", lpFilePart=0x0) returned 0x5b [0232.448] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\TempState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\TempState\\", lpFilePart=0x0) returned 0x5c [0232.448] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\TempState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7c70 [0232.448] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0232.448] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0232.448] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0232.448] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0232.448] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0232.448] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0232.448] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\TempState", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\TempState", lpFilePart=0x0) returned 0x5b [0232.448] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\TempState\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\TempState\\", lpFilePart=0x0) returned 0x5c [0232.448] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\TempState\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7cd0 [0232.449] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0232.449] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0232.449] FindClose (in: hFindFile=0x5d7cd0 | out: hFindFile=0x5d7cd0) returned 1 [0232.449] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0232.449] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0232.449] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0232.449] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy", lpFilePart=0x0) returned 0x8e [0232.449] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\", lpFilePart=0x0) returned 0x8f [0232.449] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d78b0 [0232.449] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0232.449] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0232.450] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0232.450] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0232.450] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0232.450] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0232.450] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0232.450] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy", lpFilePart=0x0) returned 0x8e [0232.450] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\", lpFilePart=0x0) returned 0x8f [0232.450] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7370 [0232.450] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0232.450] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0232.450] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0232.451] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0232.451] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0232.451] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0232.451] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0232.451] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore", lpFilePart=0x0) returned 0x9e [0232.451] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\", lpFilePart=0x0) returned 0x9f [0232.451] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d79d0 [0232.461] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0232.461] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0232.461] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0232.461] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0232.461] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0232.461] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0232.462] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0232.462] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0232.462] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0232.462] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore", lpFilePart=0x0) returned 0x9e [0232.462] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\", lpFilePart=0x0) returned 0x9f [0232.462] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7610 [0232.463] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0232.463] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0232.463] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0232.463] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0232.463] FindNextFileW (in: hFindFile=0x5d7610, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0232.463] FindClose (in: hFindFile=0x5d7610 | out: hFindFile=0x5d7610) returned 1 [0232.464] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0232.464] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0232.464] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xb2 [0232.464] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0232.464] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.purchasedialog_cw5n1h2txyewy\\windows.purchasedialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat"), fInfoLevelId=0x0, lpFileInformation=0x221d0e8 | out: lpFileInformation=0x221d0e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbef1f37c, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xbef91a8d, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xbef91a8d, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x4000)) returned 1 [0232.465] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0232.465] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xb2 [0232.465] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0232.465] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.purchasedialog_cw5n1h2txyewy\\windows.purchasedialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat"), fInfoLevelId=0x0, lpFileInformation=0x221d310 | out: lpFileInformation=0x221d310*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbef1f37c, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xbef91a8d, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xbef91a8d, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x4000)) returned 1 [0232.465] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0232.465] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xb2 [0232.465] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0232.465] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.purchasedialog_cw5n1h2txyewy\\windows.purchasedialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0232.472] GetFileType (hFile=0x444) returned 0x1 [0232.472] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0232.472] GetFileType (hFile=0x444) returned 0x1 [0232.472] ReadFile (in: hFile=0x444, lpBuffer=0x221f890, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x221f890*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0232.509] CloseHandle (hObject=0x444) returned 1 [0232.509] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xb2 [0232.509] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0232.509] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.purchasedialog_cw5n1h2txyewy\\windows.purchasedialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0232.509] GetFileType (hFile=0x444) returned 0x1 [0232.509] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0232.509] GetFileType (hFile=0x444) returned 0x1 [0232.509] WriteFile (in: hFile=0x444, lpBuffer=0x221d518*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x221d518*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0232.509] CloseHandle (hObject=0x444) returned 1 [0232.509] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xb2 [0232.509] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.xuy", lpFilePart=0x0) returned 0xb6 [0232.510] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0232.510] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.purchasedialog_cw5n1h2txyewy\\windows.purchasedialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbef1f37c, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xbef91a8d, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x766e7fb0, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x4000)) returned 1 [0232.510] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0232.510] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.purchasedialog_cw5n1h2txyewy\\windows.purchasedialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.purchasedialog_cw5n1h2txyewy\\windows.purchasedialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.xuy")) returned 1 [0232.511] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xb7 [0232.511] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0232.511] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.purchasedialog_cw5n1h2txyewy\\windows.purchasedialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x229bf90 | out: lpFileInformation=0x229bf90*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xbef1f37c, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xbef1f37c, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xbef1f37c, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0232.512] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0232.512] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xb7 [0232.512] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0232.512] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.purchasedialog_cw5n1h2txyewy\\windows.purchasedialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x229c1d0 | out: lpFileInformation=0x229c1d0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xbef1f37c, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xbef1f37c, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xbef1f37c, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0232.512] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0232.512] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xb7 [0232.512] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0232.512] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.purchasedialog_cw5n1h2txyewy\\windows.purchasedialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0232.528] GetFileType (hFile=0x444) returned 0x1 [0232.528] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0232.528] GetFileType (hFile=0x444) returned 0x1 [0232.529] ReadFile (in: hFile=0x444, lpBuffer=0x229e780, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be6f8, lpOverlapped=0x0 | out: lpBuffer=0x229e780*, lpNumberOfBytesRead=0x3be6f8*=0x1000, lpOverlapped=0x0) returned 1 [0232.566] CloseHandle (hObject=0x444) returned 1 [0232.566] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be190, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xb7 [0232.567] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be670) returned 1 [0232.567] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.purchasedialog_cw5n1h2txyewy\\windows.purchasedialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0232.567] GetFileType (hFile=0x444) returned 0x1 [0232.567] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0232.567] GetFileType (hFile=0x444) returned 0x1 [0232.567] WriteFile (in: hFile=0x444, lpBuffer=0x229c3f0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be7a8, lpOverlapped=0x0 | out: lpBuffer=0x229c3f0*, lpNumberOfBytesWritten=0x3be7a8*=0x2000, lpOverlapped=0x0) returned 1 [0232.567] CloseHandle (hObject=0x444) returned 1 [0232.567] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xb7 [0232.567] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1.xuy", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1.xuy", lpFilePart=0x0) returned 0xbb [0232.567] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be6e0) returned 1 [0232.567] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.purchasedialog_cw5n1h2txyewy\\windows.purchasedialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x3be7c0 | out: lpFileInformation=0x3be7c0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xbef1f37c, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xbef1f37c, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x7678083b, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0232.568] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0232.568] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.purchasedialog_cw5n1h2txyewy\\windows.purchasedialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.purchasedialog_cw5n1h2txyewy\\windows.purchasedialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log1.xuy")) returned 1 [0232.569] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xb7 [0232.570] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be720) returned 1 [0232.570] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.purchasedialog_cw5n1h2txyewy\\windows.purchasedialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x231aeb0 | out: lpFileInformation=0x231aeb0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xbef1f37c, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xbef1f37c, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xbef1f37c, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0232.570] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0232.570] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xb7 [0232.570] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0232.570] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.purchasedialog_cw5n1h2txyewy\\windows.purchasedialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0232.570] GetFileType (hFile=0x444) returned 0x1 [0232.570] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be550) returned 1 [0232.570] GetFileType (hFile=0x444) returned 0x1 [0232.570] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3be778 | out: lpFileSizeHigh=0x3be778*=0x0) returned 0x0 [0232.570] CloseHandle (hObject=0x444) returned 1 [0232.580] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3be100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xb7 [0232.581] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be5e0) returned 1 [0232.581] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.purchasedialog_cw5n1h2txyewy\\windows.purchasedialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0232.582] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb070) returned 1 [0232.582] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbcf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xb7 [0232.582] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0232.582] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.purchasedialog_cw5n1h2txyewy\\windows.purchasedialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x3bc270 | out: lpFileInformation=0x3bc270*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xbef1f37c, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xbef1f37c, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xbef1f37c, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0232.582] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc150) returned 1 [0232.582] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbd10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xb7 [0232.583] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc190) returned 1 [0232.583] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.purchasedialog_cw5n1h2txyewy\\windows.purchasedialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x2391f20 | out: lpFileInformation=0x2391f20*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xbef1f37c, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xbef1f37c, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xbef1f37c, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0232.583] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc150) returned 1 [0232.583] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xb7 [0232.583] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc050) returned 1 [0232.583] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.purchasedialog_cw5n1h2txyewy\\windows.purchasedialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0232.583] GetFileType (hFile=0x444) returned 0x1 [0232.583] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bbfc0) returned 1 [0232.583] GetFileType (hFile=0x444) returned 0x1 [0232.583] GetFileSize (in: hFile=0x444, lpFileSizeHigh=0x3bc1e8 | out: lpFileSizeHigh=0x3bc1e8*=0x0) returned 0x0 [0232.583] CloseHandle (hObject=0x444) returned 1 [0232.619] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x3bbb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xb7 [0232.619] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc050) returned 1 [0232.619] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.purchasedialog_cw5n1h2txyewy\\windows.purchasedialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0232.621] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8ae0) returned 1 [0232.621] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0232.621] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows_ie_ac_001", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows_ie_ac_001", lpFilePart=0x0) returned 0x3e [0232.621] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows_ie_ac_001\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows_ie_ac_001\\", lpFilePart=0x0) returned 0x3f [0232.621] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows_ie_ac_001\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d81b0 [0232.634] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0232.634] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0232.634] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0232.634] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0232.634] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0232.634] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0232.634] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0232.634] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows_ie_ac_001", nBufferLength=0x105, lpBuffer=0x3be360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows_ie_ac_001", lpFilePart=0x0) returned 0x3e [0232.634] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows_ie_ac_001\\", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows_ie_ac_001\\", lpFilePart=0x0) returned 0x3f [0232.634] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows_ie_ac_001\\*", lpFindFileData=0x3be510 | out: lpFindFileData=0x3be510) returned 0x5d7a30 [0232.635] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0232.635] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0232.635] FindNextFileW (in: hFindFile=0x5d7a30, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0232.635] FindClose (in: hFindFile=0x5d7a30 | out: hFindFile=0x5d7a30) returned 1 [0232.635] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0232.635] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0232.635] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0232.635] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows_ie_ac_001\\AC", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows_ie_ac_001\\AC", lpFilePart=0x0) returned 0x41 [0232.635] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows_ie_ac_001\\AC\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows_ie_ac_001\\AC\\", lpFilePart=0x0) returned 0x42 [0232.635] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows_ie_ac_001\\AC\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d7c70 [0232.637] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0232.637] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0232.637] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0232.637] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0232.638] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0232.638] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0232.638] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0232.639] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0232.639] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0232.639] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0232.639] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows_ie_ac_001\\AC", nBufferLength=0x105, lpBuffer=0x3be2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows_ie_ac_001\\AC", lpFilePart=0x0) returned 0x41 [0232.639] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows_ie_ac_001\\AC\\", nBufferLength=0x105, lpBuffer=0x3be290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows_ie_ac_001\\AC\\", lpFilePart=0x0) returned 0x42 [0232.639] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows_ie_ac_001\\AC\\*", lpFindFileData=0x3be4a0 | out: lpFindFileData=0x3be4a0) returned 0x5d78b0 [0232.640] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0232.640] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0232.640] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0232.640] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0232.640] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0232.640] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0232.640] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0232.641] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0232.641] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0232.641] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0232.641] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows_ie_ac_001\\AC\\INetCache", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows_ie_ac_001\\AC\\INetCache", lpFilePart=0x0) returned 0x4b [0232.641] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows_ie_ac_001\\AC\\INetCache\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows_ie_ac_001\\AC\\INetCache\\", lpFilePart=0x0) returned 0x4c [0232.641] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows_ie_ac_001\\AC\\INetCache\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d78b0 [0232.642] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0232.642] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0232.642] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0232.642] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0232.642] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0232.642] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0232.642] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows_ie_ac_001\\AC\\INetCache", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows_ie_ac_001\\AC\\INetCache", lpFilePart=0x0) returned 0x4b [0232.642] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows_ie_ac_001\\AC\\INetCache\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows_ie_ac_001\\AC\\INetCache\\", lpFilePart=0x0) returned 0x4c [0232.642] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows_ie_ac_001\\AC\\INetCache\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d79d0 [0232.643] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0232.643] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0232.643] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0232.643] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0232.643] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0232.643] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0232.643] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows_ie_ac_001\\AC\\INetCookies", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows_ie_ac_001\\AC\\INetCookies", lpFilePart=0x0) returned 0x4d [0232.643] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows_ie_ac_001\\AC\\INetCookies\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows_ie_ac_001\\AC\\INetCookies\\", lpFilePart=0x0) returned 0x4e [0232.643] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows_ie_ac_001\\AC\\INetCookies\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d7e50 [0232.643] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0232.643] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0232.643] FindClose (in: hFindFile=0x5d7e50 | out: hFindFile=0x5d7e50) returned 1 [0232.643] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0232.643] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0232.644] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0232.644] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows_ie_ac_001\\AC\\INetCookies", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows_ie_ac_001\\AC\\INetCookies", lpFilePart=0x0) returned 0x4d [0232.644] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows_ie_ac_001\\AC\\INetCookies\\", nBufferLength=0x105, lpBuffer=0x3be220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows_ie_ac_001\\AC\\INetCookies\\", lpFilePart=0x0) returned 0x4e [0232.644] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows_ie_ac_001\\AC\\INetCookies\\*", lpFindFileData=0x3be430 | out: lpFindFileData=0x3be430) returned 0x5d81b0 [0232.644] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0232.644] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0232.644] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0232.644] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0232.644] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0232.644] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0232.644] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows_ie_ac_001\\AC\\INetHistory", nBufferLength=0x105, lpBuffer=0x3be280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows_ie_ac_001\\AC\\INetHistory", lpFilePart=0x0) returned 0x4d [0232.646] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0232.646] FindNextFileW (in: hFindFile=0x5d7af0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0232.646] FindClose (in: hFindFile=0x5d7af0 | out: hFindFile=0x5d7af0) returned 1 [0232.646] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0232.646] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0232.646] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0232.647] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0232.647] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0232.647] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0232.647] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0232.647] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0232.647] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0232.647] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0232.647] FindNextFileW (in: hFindFile=0x5d7fd0, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0232.647] FindClose (in: hFindFile=0x5d7fd0 | out: hFindFile=0x5d7fd0) returned 1 [0232.647] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0232.647] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0232.647] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be790) returned 1 [0232.648] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 1 [0232.648] FindNextFileW (in: hFindFile=0x5d7370, lpFindFileData=0x3be480 | out: lpFindFileData=0x3be480) returned 0 [0232.648] FindClose (in: hFindFile=0x5d7370 | out: hFindFile=0x5d7370) returned 1 [0232.648] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6e0) returned 1 [0232.648] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6a0) returned 1 [0232.648] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0232.648] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0232.648] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 0 [0232.648] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0232.648] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0232.649] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7f0) returned 1 [0232.649] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0232.649] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0232.649] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 0 [0232.649] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0232.649] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0232.649] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7f0) returned 1 [0232.649] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0232.649] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0232.649] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0232.649] FindNextFileW (in: hFindFile=0x5d8090, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 0 [0232.650] FindClose (in: hFindFile=0x5d8090 | out: hFindFile=0x5d8090) returned 1 [0232.650] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0232.650] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7f0) returned 1 [0232.650] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0232.650] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0232.650] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0232.650] FindNextFileW (in: hFindFile=0x5d7550, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 0 [0232.650] FindClose (in: hFindFile=0x5d7550 | out: hFindFile=0x5d7550) returned 1 [0232.650] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0232.650] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7f0) returned 1 [0232.650] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0232.650] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0232.651] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0232.651] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0232.651] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0232.651] FindClose (in: hFindFile=0x5d7c70 | out: hFindFile=0x5d7c70) returned 1 [0232.651] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0232.651] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0232.651] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0232.651] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0232.651] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0232.651] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 1 [0232.651] FindNextFileW (in: hFindFile=0x5d78b0, lpFindFileData=0x3be560 | out: lpFindFileData=0x3be560) returned 0 [0232.652] FindClose (in: hFindFile=0x5d78b0 | out: hFindFile=0x5d78b0) returned 1 [0232.652] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0232.652] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0232.652] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0232.652] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0232.652] FindNextFileW (in: hFindFile=0x5d81b0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0232.652] FindClose (in: hFindFile=0x5d81b0 | out: hFindFile=0x5d81b0) returned 1 [0232.652] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0232.652] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0232.652] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0232.652] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0232.652] FindNextFileW (in: hFindFile=0x5d7670, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0232.652] FindClose (in: hFindFile=0x5d7670 | out: hFindFile=0x5d7670) returned 1 [0232.653] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0232.653] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0232.653] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0232.653] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0232.653] FindNextFileW (in: hFindFile=0x5d7eb0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0232.653] FindClose (in: hFindFile=0x5d7eb0 | out: hFindFile=0x5d7eb0) returned 1 [0232.653] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0232.653] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0232.653] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0232.653] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 1 [0232.653] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be4f0 | out: lpFindFileData=0x3be4f0) returned 0 [0232.653] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0232.653] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0232.654] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be710) returned 1 [0232.654] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0232.654] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0232.654] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0232.654] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0232.654] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0232.654] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0232.654] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0232.655] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0232.655] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0232.655] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0232.655] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0232.655] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0232.655] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0232.655] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0232.655] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0232.655] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0232.655] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0232.655] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0232.656] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0232.656] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0232.656] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0232.656] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0232.656] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0232.656] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0232.656] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0232.656] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0232.656] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0232.656] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0232.657] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0232.657] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0232.657] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0232.657] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0232.657] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0232.657] FindNextFileW (in: hFindFile=0x5d7e50, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 0 [0232.657] FindClose (in: hFindFile=0x5d7e50 | out: hFindFile=0x5d7e50) returned 1 [0232.657] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0232.657] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7f0) returned 1 [0232.657] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0232.657] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0232.658] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0232.658] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0232.658] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0232.658] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0232.658] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0232.658] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0232.658] FindNextFileW (in: hFindFile=0x5d7c70, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0232.659] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0232.659] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7f0) returned 1 [0232.659] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0232.659] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0232.659] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0232.659] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0232.659] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0232.660] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be730) returned 1 [0232.672] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0232.672] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be730) returned 1 [0232.673] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0232.673] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7f0) returned 1 [0232.673] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\-k5NiWt0BngZg_9EWhE.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\-k5niwt0bngzg_9ewhe.m4a"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\-k5NiWt0BngZg_9EWhE.m4a.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\-k5niwt0bngzg_9ewhe.m4a.xuy")) returned 1 [0232.675] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0232.675] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0232.675] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0232.675] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0232.675] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0232.675] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be730) returned 1 [0232.686] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0232.686] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be730) returned 1 [0232.687] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0232.687] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7f0) returned 1 [0232.687] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\-zP0CUyuVrqH3wJg.docx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\-zp0cuyuvrqh3wjg.docx"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\-zP0CUyuVrqH3wJg.docx.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\-zp0cuyuvrqh3wjg.docx.xuy")) returned 1 [0232.689] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0232.689] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0232.689] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0232.689] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0232.689] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0232.689] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be730) returned 1 [0232.699] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0232.700] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be730) returned 1 [0232.700] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0232.700] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7f0) returned 1 [0232.700] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\1Uln.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\1uln.wav"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\1Uln.wav.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\1uln.wav.xuy")) returned 1 [0232.702] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0232.702] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0232.702] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0232.702] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0232.702] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0232.702] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be730) returned 1 [0232.781] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0232.781] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be730) returned 1 [0232.781] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0232.781] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7f0) returned 1 [0232.782] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\2jHneEzxtZ-UnfN.mkv" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\2jhneezxtz-unfn.mkv"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\2jHneEzxtZ-UnfN.mkv.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\2jhneezxtz-unfn.mkv.xuy")) returned 1 [0232.784] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0232.784] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0232.784] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0232.784] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0232.784] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0232.784] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be730) returned 1 [0232.795] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0232.795] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be730) returned 1 [0232.795] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0232.795] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7f0) returned 1 [0232.795] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\8OyxydJk9aF8UC__G.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\8oyxydjk9af8uc__g.jpg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\8OyxydJk9aF8UC__G.jpg.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\8oyxydjk9af8uc__g.jpg.xuy")) returned 1 [0232.797] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0232.797] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0232.797] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0232.797] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0232.797] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0232.797] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be730) returned 1 [0232.808] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0232.808] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be730) returned 1 [0232.808] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0232.808] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7f0) returned 1 [0232.808] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\ANEKRmuOErikowESi0X.flv" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\anekrmuoerikowesi0x.flv"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\ANEKRmuOErikowESi0X.flv.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\anekrmuoerikowesi0x.flv.xuy")) returned 1 [0232.810] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0232.810] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0232.810] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0232.810] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0232.810] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0232.811] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be730) returned 1 [0232.821] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0232.821] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be730) returned 1 [0232.824] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0232.824] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7f0) returned 1 [0232.824] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\bg860w.odp" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\bg860w.odp"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\bg860w.odp.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\bg860w.odp.xuy")) returned 1 [0232.826] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0232.826] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0232.826] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0232.826] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0232.826] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0232.827] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be730) returned 1 [0232.840] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0232.840] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be730) returned 1 [0232.840] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0232.840] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7f0) returned 1 [0232.840] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\dKl36B1eKK2vMCB.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\dkl36b1ekk2vmcb.mp3"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\dKl36B1eKK2vMCB.mp3.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\dkl36b1ekk2vmcb.mp3.xuy")) returned 1 [0232.843] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0232.843] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0232.843] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0232.844] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0232.844] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0232.844] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be730) returned 1 [0232.854] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0232.855] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be730) returned 1 [0232.855] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0232.855] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7f0) returned 1 [0232.855] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\dYPQK5o0fQlt7o4Xv.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\dypqk5o0fqlt7o4xv.bmp"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\dYPQK5o0fQlt7o4Xv.bmp.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\dypqk5o0fqlt7o4xv.bmp.xuy")) returned 1 [0232.864] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0232.864] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0232.864] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0232.864] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0232.865] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0232.865] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be730) returned 1 [0232.877] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0232.877] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be730) returned 1 [0232.877] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0232.877] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7f0) returned 1 [0232.877] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\Es0l5TRa.flv" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\es0l5tra.flv"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\Es0l5TRa.flv.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\es0l5tra.flv.xuy")) returned 1 [0232.880] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0232.880] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0232.880] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be870) returned 1 [0232.880] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0232.880] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0232.880] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be730) returned 1 [0232.893] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0232.893] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be730) returned 1 [0232.893] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be830) returned 1 [0232.893] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7f0) returned 1 [0232.893] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\FHNzR WcOHadXVKQ.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\fhnzr wcohadxvkq.jpg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\FHNzR WcOHadXVKQ.jpg.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\fhnzr wcohadxvkq.jpg.xuy")) returned 1 [0232.910] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\fj4JkluvB5-7-b.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\fj4jkluvb5-7-b.png"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\fj4JkluvB5-7-b.png.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\fj4jkluvb5-7-b.png.xuy")) returned 1 [0232.923] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\Hhiy.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\hhiy.jpg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\Hhiy.jpg.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\hhiy.jpg.xuy")) returned 1 [0232.936] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\j3ollr.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\j3ollr.gif"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\j3ollr.gif.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\j3ollr.gif.xuy")) returned 1 [0232.948] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\kYbJff8z_.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\kybjff8z_.m4a"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\kYbJff8z_.m4a.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\kybjff8z_.m4a.xuy")) returned 1 [0232.964] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\LUc1ng.mkv" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\luc1ng.mkv"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\LUc1ng.mkv.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\luc1ng.mkv.xuy")) returned 1 [0232.978] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\MggfUW rI7GlkB4m.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\mggfuw ri7glkb4m.wav"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\MggfUW rI7GlkB4m.wav.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\mggfuw ri7glkb4m.wav.xuy")) returned 1 [0232.990] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\ngoXQD8PvI23u.mp4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\ngoxqd8pvi23u.mp4"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\ngoXQD8PvI23u.mp4.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\ngoxqd8pvi23u.mp4.xuy")) returned 1 [0233.006] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\nz_Abp.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\nz_abp.m4a"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\nz_Abp.m4a.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\nz_abp.m4a.xuy")) returned 1 [0233.021] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\PdH0iXm2n3Va Xvav.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\pdh0ixm2n3va xvav.png"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\PdH0iXm2n3Va Xvav.png.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\pdh0ixm2n3va xvav.png.xuy")) returned 1 [0233.034] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\qG 3Zsy.xlsx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\qg 3zsy.xlsx"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\qG 3Zsy.xlsx.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\qg 3zsy.xlsx.xuy")) returned 1 [0233.056] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\RGW22Ypn1iDxET--WKhY.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\rgw22ypn1idxet--wkhy.bmp"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\RGW22Ypn1iDxET--WKhY.bmp.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\rgw22ypn1idxet--wkhy.bmp.xuy")) returned 1 [0233.072] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\rmAd.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\rmad.bmp"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\rmAd.bmp.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\rmad.bmp.xuy")) returned 1 [0233.089] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\RzN0VRKD6ybbqPU.swf" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\rzn0vrkd6ybbqpu.swf"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\RzN0VRKD6ybbqPU.swf.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\rzn0vrkd6ybbqpu.swf.xuy")) returned 1 [0233.107] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\sYrlkpv.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\syrlkpv.gif"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\sYrlkpv.gif.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\syrlkpv.gif.xuy")) returned 1 [0233.121] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\v CW-fM2Zqv79.odt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\v cw-fm2zqv79.odt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\v CW-fM2Zqv79.odt.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\v cw-fm2zqv79.odt.xuy")) returned 1 [0233.135] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\vqAwXUmlRJ.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\vqawxumlrj.gif"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\vqAwXUmlRJ.gif.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\vqawxumlrj.gif.xuy")) returned 1 [0233.151] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\w-vKamLaC98d.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\w-vkamlac98d.gif"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\w-vKamLaC98d.gif.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\w-vkamlac98d.gif.xuy")) returned 1 [0233.167] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\XS1zwuFQFF-1Q.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\xs1zwufqff-1q.bmp"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\XS1zwuFQFF-1Q.bmp.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\xs1zwufqff-1q.bmp.xuy")) returned 1 [0233.182] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\yShRal0azl9oj G.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\yshral0azl9oj g.mp3"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\yShRal0azl9oj G.mp3.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\yshral0azl9oj g.mp3.xuy")) returned 1 [0233.198] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\Z3OFs0 2BPBWMP.swf" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\z3ofs0 2bpbwmp.swf"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\Z3OFs0 2BPBWMP.swf.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\z3ofs0 2bpbwmp.swf.xuy")) returned 1 [0233.217] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\EDB.chk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\tiledatalayer\\database\\edb.chk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\EDB.chk.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\tiledatalayer\\database\\edb.chk.xuy")) returned 1 [0233.222] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\EDB00005.log", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\EDB00005.log", lpFilePart=0x0) returned 0x47 [0233.222] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\EDB00005.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\tiledatalayer\\database\\edb00005.log"), fInfoLevelId=0x0, lpFileInformation=0x21ffb98 | out: lpFileInformation=0x21ffb98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xace55e12, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xacea230e, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x3d68eca2, ftLastWriteTime.dwHighDateTime=0x1d41fda, nFileSizeHigh=0x0, nFileSizeLow=0x200000)) returned 1 [0233.222] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\EDB00005.log", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\EDB00005.log", lpFilePart=0x0) returned 0x47 [0233.222] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\EDB00005.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\tiledatalayer\\database\\edb00005.log"), fInfoLevelId=0x0, lpFileInformation=0x21ffce0 | out: lpFileInformation=0x21ffce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xace55e12, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xacea230e, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x3d68eca2, ftLastWriteTime.dwHighDateTime=0x1d41fda, nFileSizeHigh=0x0, nFileSizeLow=0x200000)) returned 1 [0233.222] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\EDB00005.log", nBufferLength=0x105, lpBuffer=0x3be270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\EDB00005.log", lpFilePart=0x0) returned 0x47 [0233.223] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\EDB00005.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\tiledatalayer\\database\\edb00005.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0233.223] GetFileType (hFile=0x444) returned 0x1 [0233.223] GetFileType (hFile=0x444) returned 0x1 [0233.223] ReadFile (in: hFile=0x444, lpBuffer=0x22020a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be7d8, lpOverlapped=0x0 | out: lpBuffer=0x22020a0*, lpNumberOfBytesRead=0x3be7d8*=0x1000, lpOverlapped=0x0) returned 1 [0233.273] CloseHandle (hObject=0x444) returned 1 [0233.273] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\EDB00005.log", nBufferLength=0x105, lpBuffer=0x3be270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\EDB00005.log", lpFilePart=0x0) returned 0x47 [0233.273] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\EDB00005.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\tiledatalayer\\database\\edb00005.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0233.274] GetFileType (hFile=0x444) returned 0x1 [0233.274] GetFileType (hFile=0x444) returned 0x1 [0233.274] WriteFile (in: hFile=0x444, lpBuffer=0x21ffe08*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be888, lpOverlapped=0x0 | out: lpBuffer=0x21ffe08*, lpNumberOfBytesWritten=0x3be888*=0x2000, lpOverlapped=0x0) returned 1 [0233.274] CloseHandle (hObject=0x444) returned 1 [0233.274] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\EDB00005.log", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\EDB00005.log", lpFilePart=0x0) returned 0x47 [0233.274] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\EDB00005.log.xuy", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\EDB00005.log.xuy", lpFilePart=0x0) returned 0x4b [0233.274] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\EDB00005.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\tiledatalayer\\database\\edb00005.log"), fInfoLevelId=0x0, lpFileInformation=0x3be8a0 | out: lpFileInformation=0x3be8a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xace55e12, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xacea230e, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x76e353f5, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x200000)) returned 1 [0233.274] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\EDB00005.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\tiledatalayer\\database\\edb00005.log"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\EDB00005.log.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\tiledatalayer\\database\\edb00005.log.xuy")) returned 1 [0233.276] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\EDBres00001.jrs", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\EDBres00001.jrs", lpFilePart=0x0) returned 0x4a [0233.276] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\EDBres00001.jrs" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\tiledatalayer\\database\\edbres00001.jrs"), fInfoLevelId=0x0, lpFileInformation=0x227e438 | out: lpFileInformation=0x227e438*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xacea230e, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xacea230e, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xacea230e, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x200000)) returned 1 [0233.276] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\EDBres00001.jrs", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\EDBres00001.jrs", lpFilePart=0x0) returned 0x4a [0233.276] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\EDBres00001.jrs" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\tiledatalayer\\database\\edbres00001.jrs"), fInfoLevelId=0x0, lpFileInformation=0x227e588 | out: lpFileInformation=0x227e588*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xacea230e, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xacea230e, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xacea230e, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x200000)) returned 1 [0233.276] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\EDBres00001.jrs", nBufferLength=0x105, lpBuffer=0x3be270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\EDBres00001.jrs", lpFilePart=0x0) returned 0x4a [0233.276] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\EDBres00001.jrs" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\tiledatalayer\\database\\edbres00001.jrs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0233.277] GetFileType (hFile=0x444) returned 0x1 [0233.277] GetFileType (hFile=0x444) returned 0x1 [0233.277] ReadFile (in: hFile=0x444, lpBuffer=0x2280958, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be7d8, lpOverlapped=0x0 | out: lpBuffer=0x2280958*, lpNumberOfBytesRead=0x3be7d8*=0x1000, lpOverlapped=0x0) returned 1 [0233.292] CloseHandle (hObject=0x444) returned 1 [0233.292] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\EDBres00001.jrs", nBufferLength=0x105, lpBuffer=0x3be270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\EDBres00001.jrs", lpFilePart=0x0) returned 0x4a [0233.292] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\EDBres00001.jrs" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\tiledatalayer\\database\\edbres00001.jrs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0233.292] GetFileType (hFile=0x444) returned 0x1 [0233.292] GetFileType (hFile=0x444) returned 0x1 [0233.292] WriteFile (in: hFile=0x444, lpBuffer=0x227e6b8*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be888, lpOverlapped=0x0 | out: lpBuffer=0x227e6b8*, lpNumberOfBytesWritten=0x3be888*=0x2000, lpOverlapped=0x0) returned 1 [0233.292] CloseHandle (hObject=0x444) returned 1 [0233.293] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\EDBres00001.jrs", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\EDBres00001.jrs", lpFilePart=0x0) returned 0x4a [0233.293] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\EDBres00001.jrs.xuy", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\EDBres00001.jrs.xuy", lpFilePart=0x0) returned 0x4e [0233.293] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\EDBres00001.jrs" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\tiledatalayer\\database\\edbres00001.jrs"), fInfoLevelId=0x0, lpFileInformation=0x3be8a0 | out: lpFileInformation=0x3be8a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xacea230e, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xacea230e, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x76e5b576, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x200000)) returned 1 [0233.293] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\EDBres00001.jrs" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\tiledatalayer\\database\\edbres00001.jrs"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\EDBres00001.jrs.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\tiledatalayer\\database\\edbres00001.jrs.xuy")) returned 1 [0233.294] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\EDBres00002.jrs", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\EDBres00002.jrs", lpFilePart=0x0) returned 0x4a [0233.295] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\EDBres00002.jrs" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\tiledatalayer\\database\\edbres00002.jrs"), fInfoLevelId=0x0, lpFileInformation=0x22fcd10 | out: lpFileInformation=0x22fcd10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xacea230e, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xacea230e, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xacea230e, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x200000)) returned 1 [0233.295] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\EDBres00002.jrs", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\EDBres00002.jrs", lpFilePart=0x0) returned 0x4a [0233.295] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\EDBres00002.jrs" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\tiledatalayer\\database\\edbres00002.jrs"), fInfoLevelId=0x0, lpFileInformation=0x22fce60 | out: lpFileInformation=0x22fce60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xacea230e, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xacea230e, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xacea230e, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x200000)) returned 1 [0233.295] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\EDBres00002.jrs", nBufferLength=0x105, lpBuffer=0x3be270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\EDBres00002.jrs", lpFilePart=0x0) returned 0x4a [0233.295] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\EDBres00002.jrs" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\tiledatalayer\\database\\edbres00002.jrs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0233.296] GetFileType (hFile=0x444) returned 0x1 [0233.296] GetFileType (hFile=0x444) returned 0x1 [0233.296] ReadFile (in: hFile=0x444, lpBuffer=0x22ff230, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be7d8, lpOverlapped=0x0 | out: lpBuffer=0x22ff230*, lpNumberOfBytesRead=0x3be7d8*=0x1000, lpOverlapped=0x0) returned 1 [0233.308] CloseHandle (hObject=0x444) returned 1 [0233.308] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\EDBres00002.jrs", nBufferLength=0x105, lpBuffer=0x3be270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\EDBres00002.jrs", lpFilePart=0x0) returned 0x4a [0233.308] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\EDBres00002.jrs" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\tiledatalayer\\database\\edbres00002.jrs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0233.308] GetFileType (hFile=0x444) returned 0x1 [0233.308] GetFileType (hFile=0x444) returned 0x1 [0233.308] WriteFile (in: hFile=0x444, lpBuffer=0x22fcf90*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be888, lpOverlapped=0x0 | out: lpBuffer=0x22fcf90*, lpNumberOfBytesWritten=0x3be888*=0x2000, lpOverlapped=0x0) returned 1 [0233.308] CloseHandle (hObject=0x444) returned 1 [0233.308] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\EDBres00002.jrs", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\EDBres00002.jrs", lpFilePart=0x0) returned 0x4a [0233.308] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\EDBres00002.jrs.xuy", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\EDBres00002.jrs.xuy", lpFilePart=0x0) returned 0x4e [0233.308] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\EDBres00002.jrs" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\tiledatalayer\\database\\edbres00002.jrs"), fInfoLevelId=0x0, lpFileInformation=0x3be8a0 | out: lpFileInformation=0x3be8a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xacea230e, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xacea230e, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x76e81807, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x200000)) returned 1 [0233.309] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\EDBres00002.jrs" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\tiledatalayer\\database\\edbres00002.jrs"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\EDBres00002.jrs.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\tiledatalayer\\database\\edbres00002.jrs.xuy")) returned 1 [0233.310] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\EDBtmp.log", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\EDBtmp.log", lpFilePart=0x0) returned 0x45 [0233.310] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\EDBtmp.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\tiledatalayer\\database\\edbtmp.log"), fInfoLevelId=0x0, lpFileInformation=0x237b5e8 | out: lpFileInformation=0x237b5e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xace55e12, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xace55e12, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x6127d1e0, ftLastWriteTime.dwHighDateTime=0x1d301c5, nFileSizeHigh=0x0, nFileSizeLow=0x200000)) returned 1 [0233.310] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\EDBtmp.log", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\EDBtmp.log", lpFilePart=0x0) returned 0x45 [0233.310] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\EDBtmp.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\tiledatalayer\\database\\edbtmp.log"), fInfoLevelId=0x0, lpFileInformation=0x237b728 | out: lpFileInformation=0x237b728*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xace55e12, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xace55e12, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x6127d1e0, ftLastWriteTime.dwHighDateTime=0x1d301c5, nFileSizeHigh=0x0, nFileSizeLow=0x200000)) returned 1 [0233.310] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\EDBtmp.log", nBufferLength=0x105, lpBuffer=0x3be270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\EDBtmp.log", lpFilePart=0x0) returned 0x45 [0233.310] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\EDBtmp.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\tiledatalayer\\database\\edbtmp.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0233.311] GetFileType (hFile=0x444) returned 0x1 [0233.311] GetFileType (hFile=0x444) returned 0x1 [0233.311] ReadFile (in: hFile=0x444, lpBuffer=0x237dad8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3be7d8, lpOverlapped=0x0 | out: lpBuffer=0x237dad8*, lpNumberOfBytesRead=0x3be7d8*=0x1000, lpOverlapped=0x0) returned 1 [0233.326] CloseHandle (hObject=0x444) returned 1 [0233.327] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\EDBtmp.log", nBufferLength=0x105, lpBuffer=0x3be270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\EDBtmp.log", lpFilePart=0x0) returned 0x45 [0233.327] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0233.327] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\EDBtmp.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\tiledatalayer\\database\\edbtmp.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x444 [0233.328] GetFileType (hFile=0x444) returned 0x1 [0233.328] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be6c0) returned 1 [0233.328] GetFileType (hFile=0x444) returned 0x1 [0233.328] WriteFile (in: hFile=0x444, lpBuffer=0x21c1fe0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x3be888, lpOverlapped=0x0 | out: lpBuffer=0x21c1fe0*, lpNumberOfBytesWritten=0x3be888*=0x2000, lpOverlapped=0x0) returned 1 [0233.328] CloseHandle (hObject=0x444) returned 1 [0233.328] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\EDBtmp.log", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\EDBtmp.log", lpFilePart=0x0) returned 0x45 [0233.328] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\EDBtmp.log.xuy", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\EDBtmp.log.xuy", lpFilePart=0x0) returned 0x49 [0233.328] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7c0) returned 1 [0233.328] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\EDBtmp.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\tiledatalayer\\database\\edbtmp.log"), fInfoLevelId=0x0, lpFileInformation=0x3be8a0 | out: lpFileInformation=0x3be8a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xace55e12, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xace55e12, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x76ecdcf9, ftLastWriteTime.dwHighDateTime=0x1d47903, nFileSizeHigh=0x0, nFileSizeLow=0x200000)) returned 1 [0233.328] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be780) returned 1 [0233.328] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\EDBtmp.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\tiledatalayer\\database\\edbtmp.log"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\EDBtmp.log.xuy" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\tiledatalayer\\database\\edbtmp.log.xuy")) returned 1 [0233.330] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\vedatamodel.edb", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\vedatamodel.edb", lpFilePart=0x0) returned 0x4a [0233.330] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0233.330] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\vedatamodel.edb" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\tiledatalayer\\database\\vedatamodel.edb"), fInfoLevelId=0x0, lpFileInformation=0x21f9f60 | out: lpFileInformation=0x21f9f60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xacf3acc3, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xacf3acc3, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xae86e4c8, ftLastWriteTime.dwHighDateTime=0x1d46683, nFileSizeHigh=0x0, nFileSizeLow=0x100000)) returned 1 [0233.330] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0233.330] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\vedatamodel.edb", nBufferLength=0x105, lpBuffer=0x3be380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\vedatamodel.edb", lpFilePart=0x0) returned 0x4a [0233.330] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be800) returned 1 [0233.330] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\vedatamodel.edb" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\tiledatalayer\\database\\vedatamodel.edb"), fInfoLevelId=0x0, lpFileInformation=0x21fa0b0 | out: lpFileInformation=0x21fa0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xacf3acc3, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xacf3acc3, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xae86e4c8, ftLastWriteTime.dwHighDateTime=0x1d46683, nFileSizeHigh=0x0, nFileSizeLow=0x100000)) returned 1 [0233.330] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7c0) returned 1 [0233.330] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\vedatamodel.edb", nBufferLength=0x105, lpBuffer=0x3be270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\vedatamodel.edb", lpFilePart=0x0) returned 0x4a [0233.330] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be750) returned 1 [0233.330] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\vedatamodel.edb" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\tiledatalayer\\database\\vedatamodel.edb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0233.331] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bb1e0) returned 1 [0233.332] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\vedatamodel.edb", nBufferLength=0x105, lpBuffer=0x3bbe60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\vedatamodel.edb", lpFilePart=0x0) returned 0x4a [0233.332] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc300) returned 1 [0233.332] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\vedatamodel.edb" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\tiledatalayer\\database\\vedatamodel.edb"), fInfoLevelId=0x0, lpFileInformation=0x3bc3e0 | out: lpFileInformation=0x3bc3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xacf3acc3, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xacf3acc3, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xae86e4c8, ftLastWriteTime.dwHighDateTime=0x1d46683, nFileSizeHigh=0x0, nFileSizeLow=0x100000)) returned 1 [0233.332] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc2c0) returned 1 [0233.332] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\vedatamodel.edb", nBufferLength=0x105, lpBuffer=0x3bbe80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\vedatamodel.edb", lpFilePart=0x0) returned 0x4a [0233.332] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc300) returned 1 [0233.332] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\vedatamodel.edb" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\tiledatalayer\\database\\vedatamodel.edb"), fInfoLevelId=0x0, lpFileInformation=0x21fcc20 | out: lpFileInformation=0x21fcc20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xacf3acc3, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xacf3acc3, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xae86e4c8, ftLastWriteTime.dwHighDateTime=0x1d46683, nFileSizeHigh=0x0, nFileSizeLow=0x100000)) returned 1 [0233.332] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc2c0) returned 1 [0233.332] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\vedatamodel.edb", nBufferLength=0x105, lpBuffer=0x3bbe80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\vedatamodel.edb", lpFilePart=0x0) returned 0x4a [0233.332] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc300) returned 1 [0233.332] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\vedatamodel.edb" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\tiledatalayer\\database\\vedatamodel.edb"), fInfoLevelId=0x0, lpFileInformation=0x21fcd70 | out: lpFileInformation=0x21fcd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xacf3acc3, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xacf3acc3, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xae86e4c8, ftLastWriteTime.dwHighDateTime=0x1d46683, nFileSizeHigh=0x0, nFileSizeLow=0x100000)) returned 1 [0233.332] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3bc2c0) returned 1 [0233.332] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\vedatamodel.edb", nBufferLength=0x105, lpBuffer=0x3bbd20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\vedatamodel.edb", lpFilePart=0x0) returned 0x4a [0233.332] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3bc200) returned 1 [0233.332] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\vedatamodel.edb" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\tiledatalayer\\database\\vedatamodel.edb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0233.334] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3b8c90) returned 1 [0233.334] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0233.334] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\VirtualStore", nBufferLength=0x105, lpBuffer=0x3be3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\VirtualStore", lpFilePart=0x0) returned 0x30 [0233.334] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\VirtualStore\\", nBufferLength=0x105, lpBuffer=0x3be370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\VirtualStore\\", lpFilePart=0x0) returned 0x31 [0233.335] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\VirtualStore\\*", lpFindFileData=0x3be580 | out: lpFindFileData=0x3be580) returned 0x5d7cd0 [0233.335] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0233.335] FindNextFileW (in: hFindFile=0x5d7cd0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 0 [0233.335] FindClose (in: hFindFile=0x5d7cd0 | out: hFindFile=0x5d7cd0) returned 1 [0233.335] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0233.335] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7f0) returned 1 [0233.335] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be8e0) returned 1 [0233.335] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\VirtualStore", nBufferLength=0x105, lpBuffer=0x3be3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\VirtualStore", lpFilePart=0x0) returned 0x30 [0233.335] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\VirtualStore\\", nBufferLength=0x105, lpBuffer=0x3be370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\VirtualStore\\", lpFilePart=0x0) returned 0x31 [0233.335] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\VirtualStore\\*", lpFindFileData=0x3be580 | out: lpFindFileData=0x3be580) returned 0x5d79d0 [0233.335] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 1 [0233.336] FindNextFileW (in: hFindFile=0x5d79d0, lpFindFileData=0x3be5d0 | out: lpFindFileData=0x3be5d0) returned 0 [0233.336] FindClose (in: hFindFile=0x5d79d0 | out: hFindFile=0x5d79d0) returned 1 [0233.336] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be830) returned 1 [0233.336] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be7f0) returned 1 [0233.336] CoTaskMemAlloc (cb=0x210) returned 0x5a6ad0 [0233.336] GetEnvironmentVariableW (in: lpName="ProgramData", lpBuffer=0x5a6ad0, nSize=0x106 | out: lpBuffer="C:\\ProgramData") returned 0xe [0233.336] CoTaskMemFree (pv=0x5a6ad0) [0233.349] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\xyu", nBufferLength=0x105, lpBuffer=0x3be300, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\xyu", lpFilePart=0x0) returned 0x12 [0233.349] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be7e0) returned 1 [0233.349] CreateFileW (lpFileName="C:\\ProgramData\\xyu" (normalized: "c:\\programdata\\xyu"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x444 [0233.350] GetFileType (hFile=0x444) returned 0x1 [0233.350] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be750) returned 1 [0233.350] GetFileType (hFile=0x444) returned 0x1 [0233.351] WriteFile (in: hFile=0x444, lpBuffer=0x2202cf0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x3be828, lpOverlapped=0x0 | out: lpBuffer=0x2202cf0*, lpNumberOfBytesWritten=0x3be828*=0x8, lpOverlapped=0x0) returned 1 [0233.351] CloseHandle (hObject=0x444) returned 1 [0233.368] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.Net\\assembly\\GAC_MSIL\\System.Windows.Forms\\v4.0_4.0.0.0__b77a5c561934e089\\System.Windows.Forms.dll", nBufferLength=0x105, lpBuffer=0x3be3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.Net\\assembly\\GAC_MSIL\\System.Windows.Forms\\v4.0_4.0.0.0__b77a5c561934e089\\System.Windows.Forms.dll", lpFilePart=0x0) returned 0x77 [0233.416] IsAppThemed () returned 0x1 [0233.419] CoTaskMemAlloc (cb=0xf0) returned 0x5b9100 [0233.419] CreateActCtxA (pActCtx=0x3be990) returned 0x5a4498 [0233.504] CoTaskMemFree (pv=0x5b9100) [0233.518] RegisterClipboardFormatW (lpszFormat="WM_GETCONTROLNAME") returned 0xc168 [0233.518] RegisterClipboardFormatW (lpszFormat="WM_GETCONTROLTYPE") returned 0xc169 [0233.551] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x0 [0233.883] LoadLibraryW (lpLibFileName="comctl32.dll") returned 0x7ff8d1870000 [0233.897] AdjustWindowRectEx (in: lpRect=0x3bea30, dwStyle=0x56cf0000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x3bea30) returned 1 [0233.899] GetCurrentProcess () returned 0xffffffffffffffff [0233.899] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xfffffffffffffffe, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x3be840, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x3be840*=0x444) returned 1 [0233.913] GetCurrentActCtx (in: lphActCtx=0x3be730 | out: lphActCtx=0x3be730*=0x0) returned 1 [0233.913] ActivateActCtx (in: hActCtx=0x5a4498, lpCookie=0x3be770 | out: hActCtx=0x5a4498, lpCookie=0x3be770) returned 1 [0233.913] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x0 [0233.917] LoadLibraryW (lpLibFileName="comctl32.dll") returned 0x7ff8e57b0000 [0233.925] GetModuleHandleW (lpModuleName="user32.dll") returned 0x7ff8ebdc0000 [0233.925] GetProcAddress (hModule=0x7ff8ebdc0000, lpProcName="DefWindowProcW") returned 0x7ff8ee413240 [0233.926] GetStockObject (i=5) returned 0x1900015 [0233.929] GetModuleHandleW (lpModuleName=0x0) returned 0x270000 [0233.930] CoTaskMemAlloc (cb=0x5c) returned 0x5f8500 [0233.930] RegisterClassW (lpWndClass=0x3be410) returned 0xc0e2 [0233.930] CoTaskMemFree (pv=0x5f8500) [0233.931] GetModuleHandleW (lpModuleName=0x0) returned 0x270000 [0233.931] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r10_ad1", lpWindowName=0x0, dwStyle=0x2010000, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0xfffffffffffffffd, hMenu=0x0, hInstance=0x270000, lpParam=0x0) returned 0x40124 [0233.957] SetWindowLongPtrW (hWnd=0x40124, nIndex=-4, dwNewLong=0x7ff8ee413240) returned 0x1b1108ac [0233.960] GetWindowLongPtrW (hWnd=0x40124, nIndex=-4) returned 0x7ff8ee413240 [0233.965] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\.NETFramework", ulOptions=0x0, samDesired=0x20019, phkResult=0x3bd7d8 | out: phkResult=0x3bd7d8*=0x1ec) returned 0x0 [0233.967] RegQueryValueExW (in: hKey=0x1ec, lpValueName="DbgJITDebugLaunchSetting", lpReserved=0x0, lpType=0x3bd828, lpData=0x0, lpcbData=0x3bd820*=0x0 | out: lpType=0x3bd828*=0x0, lpData=0x0, lpcbData=0x3bd820*=0x0) returned 0x2 [0233.967] RegQueryValueExW (in: hKey=0x1ec, lpValueName="DbgManagedDebugger", lpReserved=0x0, lpType=0x3bd828, lpData=0x0, lpcbData=0x3bd820*=0x0 | out: lpType=0x3bd828*=0x0, lpData=0x0, lpcbData=0x3bd820*=0x0) returned 0x2 [0233.967] RegCloseKey (hKey=0x1ec) returned 0x0 [0233.968] SetWindowLongPtrW (hWnd=0x40124, nIndex=-4, dwNewLong=0x1b1108fc) returned 0x7ff8ee413240 [0233.968] GetWindowLongPtrW (hWnd=0x40124, nIndex=-4) returned 0x1b1108fc [0233.969] GetWindowLongPtrW (hWnd=0x40124, nIndex=-16) returned 0x6c10000 [0233.971] RegisterClipboardFormatW (lpszFormat="WinFormsMouseEnter") returned 0xc167 [0233.972] RegisterClipboardFormatW (lpszFormat="WinFormsUnSubclass") returned 0xc165 [0233.972] CallWindowProcW (lpPrevWndFunc=0x7ff8ee413240, hWnd=0x40124, Msg=0x81, wParam=0x0, lParam=0x3bdda0) returned 0x1 [0233.972] CallWindowProcW (lpPrevWndFunc=0x7ff8ee413240, hWnd=0x40124, Msg=0x83, wParam=0x0, lParam=0x3bde50) returned 0x0 [0233.976] CallWindowProcW (lpPrevWndFunc=0x7ff8ee413240, hWnd=0x40124, Msg=0x1, wParam=0x0, lParam=0x3bdda0) returned 0x0 [0233.976] GetClientRect (in: hWnd=0x40124, lpRect=0x3bd830 | out: lpRect=0x3bd830) returned 1 [0233.976] GetWindowRect (in: hWnd=0x40124, lpRect=0x3bd830 | out: lpRect=0x3bd830) returned 1 [0233.978] GetParent (hWnd=0x40124) returned 0x0 [0233.978] DeactivateActCtx (dwFlags=0x0, ulCookie=0x1001c2af00000001) returned 1 [0234.220] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ff8d1870000 [0234.220] AdjustWindowRectEx (in: lpRect=0x3bea50, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x3bea50) returned 1 [0234.234] GetSystemDefaultLCID () returned 0x409 [0234.235] GetStockObject (i=17) returned 0x10a0047 [0234.245] GetObjectW (in: h=0x10a0047, c=92, pv=0x3be590 | out: pv=0x3be590) returned 92 [0234.246] GetDC (hWnd=0x0) returned 0x10105c2 [0234.266] GdiplusStartup (in: token=0x7ff875b06e60, input=0x3bc828, output=0x3bc8d8 | out: token=0x7ff875b06e60, output=0x3bc8d8) returned 0x0 [0234.270] CoTaskMemAlloc (cb=0x5c) returned 0x5f8c00 [0234.282] GdipCreateFontFromLogfontW (hdc=0x10105c2, logfont=0x5f8c00, font=0x3be6d0) returned 0x0 [0234.541] CoTaskMemFree (pv=0x5f8c00) [0234.542] CoTaskMemAlloc (cb=0x5c) returned 0x5f8b90 [0234.543] CoTaskMemFree (pv=0x5f8b90) [0234.544] CoTaskMemAlloc (cb=0x5c) returned 0x5f8e30 [0234.544] CoTaskMemFree (pv=0x5f8e30) [0234.553] GdipGetFontUnit (font=0x1ae034f0, unit=0x3be640) returned 0x0 [0234.553] GdipGetFontSize (font=0x1ae034f0, size=0x3be64c) returned 0x0 [0234.553] GdipGetFontStyle (font=0x1ae034f0, style=0x3be638) returned 0x0 [0234.555] GdipGetFamily (font=0x1ae034f0, family=0x3be630) returned 0x0 [0234.556] GdipGetFontSize (font=0x1ae034f0, size=0x220a8b0) returned 0x0 [0234.557] ReleaseDC (hWnd=0x0, hDC=0x10105c2) returned 1 [0234.566] GetDC (hWnd=0x0) returned 0x3c010711 [0234.566] GdipCreateFromHDC (hdc=0x3c010711, graphics=0x3be648) returned 0x0 [0234.575] GdipGetDpiY (graphics=0x1c321520, dpi=0x220aa88) returned 0x0 [0234.576] GdipGetFontHeight (font=0x1ae034f0, graphics=0x1c321520, height=0x3be644) returned 0x0 [0234.577] GdipGetEmHeight (family=0x1c319be0, style=0, EmHeight=0x3be648) returned 0x0 [0234.579] GdipGetLineSpacing (family=0x1c319be0, style=0, LineSpacing=0x3be648) returned 0x0 [0234.579] GdipDeleteGraphics (graphics=0x1c321520) returned 0x0 [0234.586] ReleaseDC (hWnd=0x0, hDC=0x3c010711) returned 1 [0234.590] GdipCreateFont (fontFamily=0x1c319be0, emSize=0x7ff8d2e2cd25, style=0, unit=0x3, font=0x220aa18) returned 0x0 [0234.590] GdipGetFontSize (font=0x1ae0ebe0, size=0x220aa20) returned 0x0 [0234.592] GdipDeleteFont (font=0x1ae034f0) returned 0x0 [0234.594] GetDC (hWnd=0x0) returned 0x3c010711 [0234.594] GdipCreateFromHDC (hdc=0x3c010711, graphics=0x3be7a8) returned 0x0 [0234.595] GdipGetFontHeight (font=0x1ae0ebe0, graphics=0x1c321520, height=0x3be7a4) returned 0x0 [0234.599] GdipDeleteGraphics (graphics=0x1c321520) returned 0x0 [0234.599] ReleaseDC (hWnd=0x0, hDC=0x3c010711) returned 1 [0234.600] GetSystemMetrics (nIndex=5) returned 1 [0234.600] GetSystemMetrics (nIndex=6) returned 1 [0234.600] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ff8d1870000 [0234.601] AdjustWindowRectEx (in: lpRect=0x3bea50, dwStyle=0x560101c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x3bea50) returned 1 [0234.601] GetDC (hWnd=0x0) returned 0x3c010711 [0234.601] GdipCreateFromHDC (hdc=0x3c010711, graphics=0x3be7a8) returned 0x0 [0234.601] GdipGetFontHeight (font=0x1ae0ebe0, graphics=0x1c321520, height=0x3be7a4) returned 0x0 [0234.601] GdipDeleteGraphics (graphics=0x1c321520) returned 0x0 [0234.601] ReleaseDC (hWnd=0x0, hDC=0x3c010711) returned 1 [0234.601] GetSystemMetrics (nIndex=5) returned 1 [0234.601] GetSystemMetrics (nIndex=6) returned 1 [0234.601] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ff8d1870000 [0234.601] AdjustWindowRectEx (in: lpRect=0x3bea50, dwStyle=0x560101c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x3bea50) returned 1 [0234.615] GdipCreateFontFamilyFromName (name="Nirmala UI", fontCollection=0x0, fontFamily=0x3bea00) returned 0x0 [0234.615] GdipCreateFont (fontFamily=0x1c31ac50, emSize=0x7ff8d2e2cd25, style=0, unit=0x3, font=0x220b060) returned 0x0 [0234.635] GdipGetFontSize (font=0x1ae034f0, size=0x220b068) returned 0x0 [0234.647] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ff8d1870000 [0234.647] AdjustWindowRectEx (in: lpRect=0x3be8e8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x3be8e8) returned 1 [0234.654] GetUserObjectInformationA (in: hObj=0xc8, nIndex=1, pvInfo=0x220bac0, nLength=0xc, lpnLengthNeeded=0x3be560 | out: pvInfo=0x220bac0, lpnLengthNeeded=0x3be560) returned 1 [0234.660] SetConsoleCtrlHandler (HandlerRoutine=0x1b11094c, Add=1) returned 1 [0234.661] GetModuleHandleW (lpModuleName=0x0) returned 0x270000 [0234.661] GetModuleHandleW (lpModuleName=0x0) returned 0x270000 [0234.662] GetClassInfoW (in: hInstance=0x270000, lpClassName=".NET-BroadcastEventWindow.4.0.0.0.141b42a.0", lpWndClass=0x220bb80 | out: lpWndClass=0x220bb80) returned 0 [0234.662] CoTaskMemAlloc (cb=0x58) returned 0x5d7a90 [0234.662] RegisterClassW (lpWndClass=0x3be370) returned 0xc164 [0234.662] CoTaskMemFree (pv=0x5d7a90) [0234.663] CreateWindowExW (dwExStyle=0x0, lpClassName=".NET-BroadcastEventWindow.4.0.0.0.141b42a.0", lpWindowName=".NET-BroadcastEventWindow.4.0.0.0.141b42a.0", dwStyle=0x80000000, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x270000, lpParam=0x0) returned 0x301f6 [0234.705] NtdllDefWindowProc_W (hWnd=0x301f6, Msg=0x83, wParam=0x0, lParam=0x3bdd40) returned 0x0 [0234.706] NtdllDefWindowProc_W (hWnd=0x301f6, Msg=0x1, wParam=0x0, lParam=0x3bdc30) returned 0x0 [0234.706] NtdllDefWindowProc_W (hWnd=0x301f6, Msg=0x5, wParam=0x0, lParam=0x0) returned 0x0 [0234.706] NtdllDefWindowProc_W (hWnd=0x301f6, Msg=0x3, wParam=0x0, lParam=0x0) returned 0x0 [0234.709] GetSysColor (nIndex=10) returned 0xb4b4b4 [0234.709] GetSysColor (nIndex=2) returned 0xd1b499 [0234.709] GetSysColor (nIndex=9) returned 0x0 [0234.709] GetSysColor (nIndex=12) returned 0xababab [0234.709] GetSysColor (nIndex=15) returned 0xf0f0f0 [0234.709] GetSysColor (nIndex=20) returned 0xffffff [0234.709] GetSysColor (nIndex=16) returned 0xa0a0a0 [0234.709] GetSysColor (nIndex=15) returned 0xf0f0f0 [0234.709] GetSysColor (nIndex=16) returned 0xa0a0a0 [0234.709] GetSysColor (nIndex=21) returned 0x696969 [0234.709] GetSysColor (nIndex=22) returned 0xe3e3e3 [0234.709] GetSysColor (nIndex=20) returned 0xffffff [0234.709] GetSysColor (nIndex=18) returned 0x0 [0234.710] GetSysColor (nIndex=1) returned 0x0 [0234.710] GetSysColor (nIndex=27) returned 0xead1b9 [0234.710] GetSysColor (nIndex=28) returned 0xf2e4d7 [0234.710] GetSysColor (nIndex=17) returned 0x6d6d6d [0234.710] GetSysColor (nIndex=13) returned 0xff9933 [0234.710] GetSysColor (nIndex=14) returned 0xffffff [0234.710] GetSysColor (nIndex=26) returned 0xcc6600 [0234.710] GetSysColor (nIndex=11) returned 0xfcf7f4 [0234.710] GetSysColor (nIndex=3) returned 0xdbcdbf [0234.710] GetSysColor (nIndex=19) returned 0x0 [0234.710] GetSysColor (nIndex=24) returned 0xe1ffff [0234.710] GetSysColor (nIndex=23) returned 0x0 [0234.710] GetSysColor (nIndex=4) returned 0xf0f0f0 [0234.710] GetSysColor (nIndex=30) returned 0xf0f0f0 [0234.710] GetSysColor (nIndex=29) returned 0xff9933 [0234.710] GetSysColor (nIndex=7) returned 0x0 [0234.710] GetSysColor (nIndex=0) returned 0xc8c8c8 [0234.710] GetSysColor (nIndex=5) returned 0xffffff [0234.710] GetSysColor (nIndex=6) returned 0x646464 [0234.710] GetSysColor (nIndex=8) returned 0x0 [0234.712] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ff8d1870000 [0234.712] AdjustWindowRectEx (in: lpRect=0x3be8e8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x3be8e8) returned 1 [0234.722] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XyuEncrypt.exe.config", nBufferLength=0x105, lpBuffer=0x3be160, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XyuEncrypt.exe.config", lpFilePart=0x0) returned 0x33 [0234.722] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3be620) returned 1 [0234.722] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XyuEncrypt.exe.config" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\xyuencrypt.exe.config"), fInfoLevelId=0x0, lpFileInformation=0x3be700 | out: lpFileInformation=0x3be700*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0234.723] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3be5e0) returned 1 [0234.958] GetSystemMetrics (nIndex=5) returned 1 [0234.958] GetSystemMetrics (nIndex=6) returned 1 [0234.960] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ff8d1870000 [0234.961] AdjustWindowRectEx (in: lpRect=0x3be958, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x3be958) returned 1 [0234.961] GetSystemMetrics (nIndex=5) returned 1 [0234.961] GetSystemMetrics (nIndex=6) returned 1 [0234.961] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ff8d1870000 [0234.961] AdjustWindowRectEx (in: lpRect=0x3be958, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x3be958) returned 1 [0234.961] GetSystemMetrics (nIndex=5) returned 1 [0234.961] GetSystemMetrics (nIndex=6) returned 1 [0234.961] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ff8d1870000 [0234.961] AdjustWindowRectEx (in: lpRect=0x3be958, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x3be958) returned 1 [0234.961] GetSystemMetrics (nIndex=5) returned 1 [0234.961] GetSystemMetrics (nIndex=6) returned 1 [0234.962] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ff8d1870000 [0234.962] AdjustWindowRectEx (in: lpRect=0x3be958, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x3be958) returned 1 [0234.966] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ff8d1870000 [0234.966] AdjustWindowRectEx (in: lpRect=0x3be9b8, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x3be9b8) returned 1 [0234.966] GetSystemMetrics (nIndex=59) returned 1456 [0234.966] GetSystemMetrics (nIndex=60) returned 916 [0234.966] GetSystemMetrics (nIndex=34) returned 136 [0234.966] GetSystemMetrics (nIndex=35) returned 39 [0234.966] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ff8d1870000 [0234.966] AdjustWindowRectEx (in: lpRect=0x3be778, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x3be778) returned 1 [0234.968] GetCurrentThreadId () returned 0xe0c [0234.968] GetCurrentThreadId () returned 0xe0c [0234.971] GetCurrentThreadId () returned 0xe0c [0234.971] GetCurrentThreadId () returned 0xe0c [0234.971] GetCurrentThreadId () returned 0xe0c [0234.971] GetCurrentThreadId () returned 0xe0c [0235.060] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ff8d1870000 [0235.061] AdjustWindowRectEx (in: lpRect=0x3be6c8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x3be6c8) returned 1 [0235.078] GdipGetFamilyName (in: family=0x1c31ac50, name=0x3be410, language=0x409 | out: name="Nirmala UI") returned 0x0 [0235.080] CreateCompatibleDC (hdc=0x0) returned 0xffffffffb5010782 [0235.081] GetCurrentObject (hdc=0xffffffffb5010782, type=0x1) returned 0x1b00017 [0235.081] GetCurrentObject (hdc=0xffffffffb5010782, type=0x2) returned 0x1900010 [0235.081] GetCurrentObject (hdc=0xffffffffb5010782, type=0x7) returned 0x185000f [0235.081] GetCurrentObject (hdc=0xffffffffb5010782, type=0x6) returned 0x18a0048 [0235.090] SaveDC (hdc=0xffffffffb5010782) returned 1 [0235.091] GetDeviceCaps (hdc=0xffffffffb5010782, index=90) returned 96 [0235.092] CoTaskMemAlloc (cb=0x5c) returned 0x5f8d50 [0235.093] CreateFontIndirectW (lplf=0x5f8d50) returned 0xffffffffbe0a0668 [0235.093] CoTaskMemFree (pv=0x5f8d50) [0235.093] GetObjectW (in: h=0xffffffffbe0a0668, c=92, pv=0x3be420 | out: pv=0x3be420) returned 92 [0235.097] GetCurrentObject (hdc=0xffffffffb5010782, type=0x6) returned 0x18a0048 [0235.097] GetObjectW (in: h=0x18a0048, c=92, pv=0x3be220 | out: pv=0x3be220) returned 92 [0235.099] SelectObject (hdc=0xffffffffb5010782, h=0xffffffffbe0a0668) returned 0x18a0048 [0235.100] GetMapMode (hdc=0xffffffffb5010782) returned 1 [0235.100] GetTextMetricsW (in: hdc=0xffffffffb5010782, lptm=0x3be430 | out: lptm=0x3be430) returned 1 [0235.164] DrawTextExW (in: hdc=0xffffffffb5010782, lpchText="YOUR PC XUY BALLS xD \r\n\"Works for XUY\"\r\nYour personal files were encrypted.\r\nYou have 12 hours to decrypt the files.\r\nFor the interpretation of it came bitcoins for 400€ at this address: 12ZhVHBfxdwsstomsT6mzz18jTKN7uTc2r \r\nSend evidence photos to the address luxenburg@cock.lu \r\nThen we will send you the recovery tool via email!\r\nIf there is no payment, all data will be merged into The Internet.\r\nAny attempt to destroy this program will destroy All your decryptions.\r\nAny attempt to decrypt files will damage your files.\r\nNOTICE. Even if you fix the MBR, your PC is dead.\r\nThe whole registry is fucked and your files are infected.", cchText=634, lprc=0x3be638, format=0x2400, lpdtp=0x2210460 | out: lpchText="YOUR PC XUY BALLS xD \r\n\"Works for XUY\"\r\nYour personal files were encrypted.\r\nYou have 12 hours to decrypt the files.\r\nFor the interpretation of it came bitcoins for 400€ at this address: 12ZhVHBfxdwsstomsT6mzz18jTKN7uTc2r \r\nSend evidence photos to the address luxenburg@cock.lu \r\nThen we will send you the recovery tool via email!\r\nIf there is no payment, all data will be merged into The Internet.\r\nAny attempt to destroy this program will destroy All your decryptions.\r\nAny attempt to decrypt files will damage your files.\r\nNOTICE. Even if you fix the MBR, your PC is dead.\r\nThe whole registry is fucked and your files are infected.", lprc=0x3be638) returned 444 [0235.335] OleInitialize (pvReserved=0x0) returned 0x0 [0235.337] CreateCompatibleDC (hdc=0x0) returned 0xffffffff94010792 [0235.338] GetDC (hWnd=0x0) returned 0x3c010711 [0235.339] GdipCreateFromHDC (hdc=0x3c010711, graphics=0x3be608) returned 0x0 [0235.339] CoTaskMemAlloc (cb=0x5c) returned 0x5f8d50 [0235.339] GdipGetLogFontW (font=0x1ae0ebe0, graphics=0x1c3267f0, logfontW=0x5f8d50) returned 0x0 [0235.344] CoTaskMemFree (pv=0x5f8d50) [0235.344] CoTaskMemAlloc (cb=0x5c) returned 0x5f8d50 [0235.344] CoTaskMemFree (pv=0x5f8d50) [0235.345] CoTaskMemAlloc (cb=0x5c) returned 0x5f8d50 [0235.345] CoTaskMemFree (pv=0x5f8d50) [0235.345] GdipDeleteGraphics (graphics=0x1c3267f0) returned 0x0 [0235.345] ReleaseDC (hWnd=0x0, hDC=0x3c010711) returned 1 [0235.347] CoTaskMemAlloc (cb=0x5c) returned 0x5f8d50 [0235.347] CreateFontIndirectW (lplf=0x5f8d50) returned 0xffffffff9b0a0674 [0235.347] CoTaskMemFree (pv=0x5f8d50) [0235.347] SelectObject (hdc=0xffffffff94010792, h=0xffffffff9b0a0674) returned 0x18a0048 [0235.348] GetTextMetricsW (in: hdc=0xffffffff94010792, lptm=0x3be888 | out: lptm=0x3be888) returned 1 [0235.348] GetTextExtentPoint32W (in: hdc=0xffffffff94010792, lpString="abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ", c=52, psizl=0x2210de0 | out: psizl=0x2210de0) returned 1 [0235.350] SelectObject (hdc=0xffffffff94010792, h=0x18a0048) returned 0xffffffff9b0a0674 [0235.356] DeleteDC (hdc=0xffffffff94010792) returned 1 [0235.356] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ff8d1870000 [0235.356] AdjustWindowRectEx (in: lpRect=0x3be4f0, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x3be4f0) returned 1 [0235.356] AdjustWindowRectEx (in: lpRect=0x3be770, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x3be770) returned 1 [0235.357] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ff8d1870000 [0235.357] AdjustWindowRectEx (in: lpRect=0x3be3e0, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x3be3e0) returned 1 [0235.357] AdjustWindowRectEx (in: lpRect=0x3be560, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x3be560) returned 1 [0235.357] GetSystemMetrics (nIndex=34) returned 136 [0235.357] GetSystemMetrics (nIndex=35) returned 39 [0235.357] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ff8d1870000 [0235.357] AdjustWindowRectEx (in: lpRect=0x3be780, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x3be780) returned 1 [0235.357] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ff8d1870000 [0235.357] AdjustWindowRectEx (in: lpRect=0x3be5d0, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x3be5d0) returned 1 [0235.357] GetSystemMetrics (nIndex=5) returned 1 [0235.357] GetSystemMetrics (nIndex=6) returned 1 [0235.357] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ff8d1870000 [0235.358] AdjustWindowRectEx (in: lpRect=0x3be780, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x3be780) returned 1 [0235.358] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ff8d1870000 [0235.358] AdjustWindowRectEx (in: lpRect=0x3be5d0, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x3be5d0) returned 1 [0235.358] GetSystemMetrics (nIndex=5) returned 1 [0235.358] GetSystemMetrics (nIndex=6) returned 1 [0235.358] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ff8d1870000 [0235.358] AdjustWindowRectEx (in: lpRect=0x3be780, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x3be780) returned 1 [0235.358] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ff8d1870000 [0235.358] AdjustWindowRectEx (in: lpRect=0x3be5d0, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x3be5d0) returned 1 [0235.358] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ff8d1870000 [0235.358] AdjustWindowRectEx (in: lpRect=0x3be378, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x3be378) returned 1 [0235.361] GetCurrentActCtx (in: lphActCtx=0x3bea80 | out: lphActCtx=0x3bea80*=0x0) returned 1 [0235.361] ActivateActCtx (in: hActCtx=0x5a4498, lpCookie=0x3beac0 | out: hActCtx=0x5a4498, lpCookie=0x3beac0) returned 1 [0235.364] GetCurrentActCtx (in: lphActCtx=0x3be710 | out: lphActCtx=0x3be710*=0x5a4498) returned 1 [0235.364] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ff8e57b0000 [0235.364] AdjustWindowRectEx (in: lpRect=0x3be630, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x3be630) returned 1 [0235.364] GetModuleHandleW (lpModuleName=0x0) returned 0x270000 [0235.364] CreateWindowExW (dwExStyle=0x50000, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r10_ad1", lpWindowName="XUYENCRYPT", dwStyle=0x2cf0000, X=-2147483648, Y=-2147483648, nWidth=1341, nHeight=562, hWndParent=0x0, hMenu=0x0, hInstance=0x270000, lpParam=0x0) returned 0x1401f4 [0235.364] SetWindowLongPtrW (hWnd=0x1401f4, nIndex=-4, dwNewLong=0x7ff8ee413240) returned 0x1b1108ac [0235.364] GetWindowLongPtrW (hWnd=0x1401f4, nIndex=-4) returned 0x7ff8ee413240 [0235.365] SetWindowLongPtrW (hWnd=0x1401f4, nIndex=-4, dwNewLong=0x1b1109ec) returned 0x7ff8ee413240 [0235.365] GetWindowLongPtrW (hWnd=0x1401f4, nIndex=-4) returned 0x1b1109ec [0235.365] GetWindowLongPtrW (hWnd=0x1401f4, nIndex=-16) returned 0x6cf0000 [0235.370] CallWindowProcW (lpPrevWndFunc=0x7ff8ee413240, hWnd=0x1401f4, Msg=0x81, wParam=0x0, lParam=0x3bdd80) returned 0x1 [0235.371] CallWindowProcW (lpPrevWndFunc=0x7ff8ee413240, hWnd=0x1401f4, Msg=0x83, wParam=0x0, lParam=0x3bde30) returned 0x0 [0235.372] CallWindowProcW (lpPrevWndFunc=0x7ff8ee413240, hWnd=0x1401f4, Msg=0x1, wParam=0x0, lParam=0x3bdd50) returned 0x0 [0235.372] GetClientRect (in: hWnd=0x1401f4, lpRect=0x3bd7a0 | out: lpRect=0x3bd7a0) returned 1 [0235.372] GetWindowRect (in: hWnd=0x1401f4, lpRect=0x3bd7a0 | out: lpRect=0x3bd7a0) returned 1 [0235.372] SetWindowTextW (hWnd=0x1401f4, lpString="XUYENCRYPT") returned 1 [0235.372] CallWindowProcW (lpPrevWndFunc=0x7ff8ee413240, hWnd=0x1401f4, Msg=0xc, wParam=0x0, lParam=0x220976c) returned 0x1 [0235.374] GetStartupInfoW (in: lpStartupInfo=0x22112f0 | out: lpStartupInfo=0x22112f0*(cb=0x68, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XyuEncrypt.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x401, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x10001, hStdError=0x0)) [0235.390] GetParent (hWnd=0x1401f4) returned 0x0 [0235.390] SetWindowLongPtrW (hWnd=0x1401f4, nIndex=-8, dwNewLong=0x0) returned 0x0 [0235.404] GetSystemMetrics (nIndex=11) returned 32 [0235.404] GetSystemMetrics (nIndex=12) returned 32 [0235.404] GetDC (hWnd=0x0) returned 0x3c010711 [0235.404] GetDeviceCaps (hdc=0x3c010711, index=12) returned 32 [0235.404] GetDeviceCaps (hdc=0x3c010711, index=14) returned 1 [0235.404] ReleaseDC (hWnd=0x0, hDC=0x3c010711) returned 1 [0235.405] CreateIconFromResourceEx (presbits=0x2213ef0, dwResSize=0x10a8, fIcon=1, dwVer=0x30000, cxDesired=0, cyDesired=0, Flags=0x0) returned 0x400ef [0235.406] GetSystemMetrics (nIndex=49) returned 16 [0235.406] GetSystemMetrics (nIndex=50) returned 16 [0235.408] CreateIconFromResourceEx (presbits=0x2214ff8, dwResSize=0x468, fIcon=1, dwVer=0x30000, cxDesired=0, cyDesired=0, Flags=0x0) returned 0x500c1 [0235.410] SendMessageW (hWnd=0x1401f4, Msg=0x80, wParam=0x0, lParam=0x500c1) returned 0x0 [0235.410] CallWindowProcW (lpPrevWndFunc=0x7ff8ee413240, hWnd=0x1401f4, Msg=0x80, wParam=0x0, lParam=0x500c1) returned 0x0 [0235.411] SendMessageW (hWnd=0x1401f4, Msg=0x80, wParam=0x1, lParam=0x400ef) returned 0x0 [0235.411] CallWindowProcW (lpPrevWndFunc=0x7ff8ee413240, hWnd=0x1401f4, Msg=0x80, wParam=0x1, lParam=0x400ef) returned 0x0 [0235.411] GetSystemMenu (hWnd=0x1401f4, bRevert=0) returned 0x800df [0235.413] GetWindowPlacement (in: hWnd=0x1401f4, lpwndpl=0x3be718 | out: lpwndpl=0x3be718) returned 1 [0235.414] EnableMenuItem (hMenu=0x800df, uIDEnableItem=0xf020, uEnable=0x0) returned 0 [0235.414] EnableMenuItem (hMenu=0x800df, uIDEnableItem=0xf030, uEnable=0x0) returned 0 [0235.414] EnableMenuItem (hMenu=0x800df, uIDEnableItem=0xf060, uEnable=0x0) returned 0 [0235.414] EnableMenuItem (hMenu=0x800df, uIDEnableItem=0xf120, uEnable=0x1) returned 0 [0235.414] EnableMenuItem (hMenu=0x800df, uIDEnableItem=0xf000, uEnable=0x0) returned 0 [0235.414] GetClientRect (in: hWnd=0x1401f4, lpRect=0x3be7e0 | out: lpRect=0x3be7e0) returned 1 [0235.414] GetClientRect (in: hWnd=0x1401f4, lpRect=0x3be710 | out: lpRect=0x3be710) returned 1 [0235.414] GetWindowRect (in: hWnd=0x1401f4, lpRect=0x3be710 | out: lpRect=0x3be710) returned 1 [0235.414] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ff8e57b0000 [0235.415] GetWindowLongPtrW (hWnd=0x1401f4, nIndex=-16) returned 0x6cf0000 [0235.415] GetWindowTextLengthW (hWnd=0x1401f4) returned 10 [0235.415] CallWindowProcW (lpPrevWndFunc=0x7ff8ee413240, hWnd=0x1401f4, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa [0235.415] GetSystemMetrics (nIndex=42) returned 0 [0235.415] GetWindowTextW (in: hWnd=0x1401f4, lpString=0x3be510, nMaxCount=11 | out: lpString="XUYENCRYPT") returned 10 [0235.415] CallWindowProcW (lpPrevWndFunc=0x7ff8ee413240, hWnd=0x1401f4, Msg=0xd, wParam=0xb, lParam=0x3be510) returned 0xa [0235.416] GetWindowTextLengthW (hWnd=0x1401f4) returned 10 [0235.416] CallWindowProcW (lpPrevWndFunc=0x7ff8ee413240, hWnd=0x1401f4, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa [0235.416] GetSystemMetrics (nIndex=42) returned 0 [0235.416] GetWindowTextW (in: hWnd=0x1401f4, lpString=0x3be510, nMaxCount=11 | out: lpString="XUYENCRYPT") returned 10 [0235.416] CallWindowProcW (lpPrevWndFunc=0x7ff8ee413240, hWnd=0x1401f4, Msg=0xd, wParam=0xb, lParam=0x3be510) returned 0xa [0235.416] GetWindowLongPtrW (hWnd=0x1401f4, nIndex=-16) returned 0x6cf0000 [0235.416] GetWindowLongPtrW (hWnd=0x1401f4, nIndex=-20) returned 0x50100 [0235.416] SetWindowLongPtrW (hWnd=0x1401f4, nIndex=-16, dwNewLong=0x2cf0000) returned 0x6cf0000 [0235.416] CallWindowProcW (lpPrevWndFunc=0x7ff8ee413240, hWnd=0x1401f4, Msg=0x7c, wParam=0xfffffffffffffff0, lParam=0x3be5e0) returned 0x0 [0235.417] CallWindowProcW (lpPrevWndFunc=0x7ff8ee413240, hWnd=0x1401f4, Msg=0x7d, wParam=0xfffffffffffffff0, lParam=0x3be5e0) returned 0x0 [0235.418] CallWindowProcW (lpPrevWndFunc=0x7ff8ee413240, hWnd=0x1401f4, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x500c1 [0235.419] SetWindowLongPtrW (hWnd=0x1401f4, nIndex=-20, dwNewLong=0x50000) returned 0x50100 [0235.419] CallWindowProcW (lpPrevWndFunc=0x7ff8ee413240, hWnd=0x1401f4, Msg=0x7c, wParam=0xffffffffffffffec, lParam=0x3be5e0) returned 0x0 [0235.419] CallWindowProcW (lpPrevWndFunc=0x7ff8ee413240, hWnd=0x1401f4, Msg=0x7d, wParam=0xffffffffffffffec, lParam=0x3be5e0) returned 0x0 [0235.420] SetWindowPos (hWnd=0x1401f4, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x37) returned 1 [0235.420] CallWindowProcW (lpPrevWndFunc=0x7ff8ee413240, hWnd=0x1401f4, Msg=0x46, wParam=0x0, lParam=0x3be640) returned 0x0 [0235.420] CallWindowProcW (lpPrevWndFunc=0x7ff8ee413240, hWnd=0x1401f4, Msg=0x83, wParam=0x1, lParam=0x3be610) returned 0x0 [0235.422] GetWindowPlacement (in: hWnd=0x1401f4, lpwndpl=0x3be1e8 | out: lpwndpl=0x3be1e8) returned 1 [0235.422] CallWindowProcW (lpPrevWndFunc=0x7ff8ee413240, hWnd=0x1401f4, Msg=0x47, wParam=0x0, lParam=0x3be640) returned 0x0 [0235.422] GetClientRect (in: hWnd=0x1401f4, lpRect=0x3be080 | out: lpRect=0x3be080) returned 1 [0235.422] GetWindowRect (in: hWnd=0x1401f4, lpRect=0x3be080 | out: lpRect=0x3be080) returned 1 [0235.424] RedrawWindow (hWnd=0x1401f4, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0235.425] GetSystemMenu (hWnd=0x1401f4, bRevert=0) returned 0x800df [0235.425] GetWindowPlacement (in: hWnd=0x1401f4, lpwndpl=0x3be6b8 | out: lpwndpl=0x3be6b8) returned 1 [0235.425] EnableMenuItem (hMenu=0x800df, uIDEnableItem=0xf020, uEnable=0x0) returned 0 [0235.425] EnableMenuItem (hMenu=0x800df, uIDEnableItem=0xf030, uEnable=0x0) returned 0 [0235.425] EnableMenuItem (hMenu=0x800df, uIDEnableItem=0xf060, uEnable=0x0) returned 0 [0235.425] EnableMenuItem (hMenu=0x800df, uIDEnableItem=0xf120, uEnable=0x1) returned 1 [0235.425] EnableMenuItem (hMenu=0x800df, uIDEnableItem=0xf000, uEnable=0x0) returned 0 [0235.425] ShowWindow (hWnd=0x1401f4, nCmdShow=5) returned 0 [0235.425] CallWindowProcW (lpPrevWndFunc=0x7ff8ee413240, hWnd=0x1401f4, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0235.426] GetCurrentActCtx (in: lphActCtx=0x3be090 | out: lphActCtx=0x3be090*=0x5a4498) returned 1 [0235.426] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ff8e57b0000 [0235.427] GetClassInfoW (in: hInstance=0x0, lpClassName="EDIT", lpWndClass=0x2215790 | out: lpWndClass=0x2215790) returned 1 [0235.429] GetModuleHandleW (lpModuleName=0x0) returned 0x270000 [0235.429] CoTaskMemAlloc (cb=0x54) returned 0x5d8090 [0235.429] RegisterClassW (lpWndClass=0x3bdd70) returned 0xc163 [0235.429] CoTaskMemFree (pv=0x5d8090) [0235.429] GetModuleHandleW (lpModuleName=0x0) returned 0x270000 [0235.429] CreateWindowExW (dwExStyle=0x200, lpClassName="WindowsForms10.EDIT.app.0.141b42a_r10_ad1", lpWindowName="luxenburg@cock.lu", dwStyle=0x560100c0, X=19, Y=493, nWidth=1279, nHeight=20, hWndParent=0x1401f4, hMenu=0x0, hInstance=0x270000, lpParam=0x0) returned 0x70032 [0235.429] SetWindowLongPtrW (hWnd=0x70032, nIndex=-4, dwNewLong=0x7ff8e580bef0) returned 0x1b110a3c [0235.429] GetWindowLongPtrW (hWnd=0x70032, nIndex=-4) returned 0x7ff8e580bef0 [0235.429] SetWindowLongPtrW (hWnd=0x70032, nIndex=-4, dwNewLong=0x1b110a8c) returned 0x7ff8e580bef0 [0235.430] GetWindowLongPtrW (hWnd=0x70032, nIndex=-4) returned 0x1b110a8c [0235.430] GetWindowLongPtrW (hWnd=0x70032, nIndex=-16) returned 0x460100c0 [0235.430] GetWindowLongPtrW (hWnd=0x70032, nIndex=-12) returned 0x0 [0235.430] SetWindowLongPtrW (hWnd=0x70032, nIndex=-12, dwNewLong=0x70032) returned 0x0 [0235.430] CallWindowProcW (lpPrevWndFunc=0x7ff8e580bef0, hWnd=0x70032, Msg=0x81, wParam=0x0, lParam=0x3bd700) returned 0x1 [0235.431] CallWindowProcW (lpPrevWndFunc=0x7ff8e580bef0, hWnd=0x70032, Msg=0x83, wParam=0x0, lParam=0x3bd7b0) returned 0x0 [0235.432] CallWindowProcW (lpPrevWndFunc=0x7ff8e580bef0, hWnd=0x70032, Msg=0x1, wParam=0x0, lParam=0x3bd6d0) returned 0x1 [0235.434] SendMessageW (hWnd=0x70032, Msg=0x2111, wParam=0x4000032, lParam=0x70032) returned 0x0 [0235.434] SendMessageW (hWnd=0x70032, Msg=0x2111, wParam=0x3000032, lParam=0x70032) returned 0x0 [0235.435] SendMessageW (hWnd=0x70032, Msg=0x2055, wParam=0x70032, lParam=0x3) returned 0x2 [0235.435] CallWindowProcW (lpPrevWndFunc=0x7ff8ee413240, hWnd=0x1401f4, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x0 [0235.436] GetWindow (hWnd=0x70032, uCmd=0x3) returned 0x0 [0235.436] GetClientRect (in: hWnd=0x70032, lpRect=0x3bd110 | out: lpRect=0x3bd110) returned 1 [0235.436] GetWindowRect (in: hWnd=0x70032, lpRect=0x3bd110 | out: lpRect=0x3bd110) returned 1 [0235.436] GetParent (hWnd=0x70032) returned 0x1401f4 [0235.436] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1401f4, lpPoints=0x3bd110, cPoints=0x2 | out: lpPoints=0x3bd110) returned -10485867 [0235.437] SendMessageW (hWnd=0x70032, Msg=0x30, wParam=0xffffffff9b0a0674, lParam=0x0) returned 0x1 [0235.437] CallWindowProcW (lpPrevWndFunc=0x7ff8e580bef0, hWnd=0x70032, Msg=0x30, wParam=0xffffffff9b0a0674, lParam=0x0) returned 0x1 [0235.437] SendMessageW (hWnd=0x70032, Msg=0xd3, wParam=0x3, lParam=0x0) returned 0x0 [0235.437] CallWindowProcW (lpPrevWndFunc=0x7ff8e580bef0, hWnd=0x70032, Msg=0xd3, wParam=0x3, lParam=0x0) returned 0x0 [0235.438] SetWindowTextW (hWnd=0x70032, lpString="luxenburg@cock.lu") returned 1 [0235.438] CallWindowProcW (lpPrevWndFunc=0x7ff8e580bef0, hWnd=0x70032, Msg=0xc, wParam=0x0, lParam=0x22096fc) returned 0x1 [0235.438] SendMessageW (hWnd=0x70032, Msg=0x2111, wParam=0x4000032, lParam=0x70032) returned 0x0 [0235.438] SendMessageW (hWnd=0x70032, Msg=0x2111, wParam=0x3000032, lParam=0x70032) returned 0x0 [0235.438] GetSystemMetrics (nIndex=5) returned 1 [0235.438] GetSystemMetrics (nIndex=6) returned 1 [0235.438] SendMessageW (hWnd=0x70032, Msg=0xc5, wParam=0x7fff, lParam=0x0) returned 0x1 [0235.438] CallWindowProcW (lpPrevWndFunc=0x7ff8e580bef0, hWnd=0x70032, Msg=0xc5, wParam=0x7fff, lParam=0x0) returned 0x1 [0235.439] SendMessageW (hWnd=0x70032, Msg=0xd2, wParam=0x0, lParam=0x0) returned 0x0 [0235.439] CallWindowProcW (lpPrevWndFunc=0x7ff8e580bef0, hWnd=0x70032, Msg=0xd2, wParam=0x0, lParam=0x0) returned 0x0 [0235.439] CallWindowProcW (lpPrevWndFunc=0x7ff8e580bef0, hWnd=0x70032, Msg=0x5, wParam=0x0, lParam=0x1004fb) returned 0x0 [0235.439] CallWindowProcW (lpPrevWndFunc=0x7ff8e580bef0, hWnd=0x70032, Msg=0x3, wParam=0x0, lParam=0x1ef0015) returned 0x0 [0235.439] GetClientRect (in: hWnd=0x70032, lpRect=0x3bd250 | out: lpRect=0x3bd250) returned 1 [0235.439] GetWindowRect (in: hWnd=0x70032, lpRect=0x3bd250 | out: lpRect=0x3bd250) returned 1 [0235.439] GetParent (hWnd=0x70032) returned 0x1401f4 [0235.439] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1401f4, lpPoints=0x3bd250, cPoints=0x2 | out: lpPoints=0x3bd250) returned -10485867 [0235.439] SendMessageW (hWnd=0x70032, Msg=0x2210, wParam=0x320001, lParam=0x70032) returned 0x0 [0235.439] CallWindowProcW (lpPrevWndFunc=0x7ff8e580bef0, hWnd=0x70032, Msg=0x2210, wParam=0x320001, lParam=0x70032) returned 0x0 [0235.439] CallWindowProcW (lpPrevWndFunc=0x7ff8e580bef0, hWnd=0x70032, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0235.440] GetParent (hWnd=0x70032) returned 0x1401f4 [0235.440] GetCurrentActCtx (in: lphActCtx=0x3be090 | out: lphActCtx=0x3be090*=0x5a4498) returned 1 [0235.440] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ff8e57b0000 [0235.440] GetModuleHandleW (lpModuleName=0x0) returned 0x270000 [0235.440] CreateWindowExW (dwExStyle=0x200, lpClassName="WindowsForms10.EDIT.app.0.141b42a_r10_ad1", lpWindowName="12ZhVHBfxdwsstomsT6mzz18jTKN7uTc2r", dwStyle=0x560100c0, X=20, Y=467, nWidth=1278, nHeight=20, hWndParent=0x1401f4, hMenu=0x0, hInstance=0x270000, lpParam=0x0) returned 0x30138 [0235.440] SetWindowLongPtrW (hWnd=0x30138, nIndex=-4, dwNewLong=0x7ff8e580bef0) returned 0x1b110a3c [0235.441] GetWindowLongPtrW (hWnd=0x30138, nIndex=-4) returned 0x7ff8e580bef0 [0235.441] SetWindowLongPtrW (hWnd=0x30138, nIndex=-4, dwNewLong=0x1b110adc) returned 0x7ff8e580bef0 [0235.441] GetWindowLongPtrW (hWnd=0x30138, nIndex=-4) returned 0x1b110adc [0235.441] GetWindowLongPtrW (hWnd=0x30138, nIndex=-16) returned 0x460100c0 [0235.441] GetWindowLongPtrW (hWnd=0x30138, nIndex=-12) returned 0x0 [0235.441] SetWindowLongPtrW (hWnd=0x30138, nIndex=-12, dwNewLong=0x30138) returned 0x0 [0235.441] CallWindowProcW (lpPrevWndFunc=0x7ff8e580bef0, hWnd=0x30138, Msg=0x81, wParam=0x0, lParam=0x3bd700) returned 0x1 [0235.442] CallWindowProcW (lpPrevWndFunc=0x7ff8e580bef0, hWnd=0x30138, Msg=0x83, wParam=0x0, lParam=0x3bd7b0) returned 0x0 [0235.442] CallWindowProcW (lpPrevWndFunc=0x7ff8e580bef0, hWnd=0x30138, Msg=0x1, wParam=0x0, lParam=0x3bd6b0) returned 0x1 [0235.442] SendMessageW (hWnd=0x30138, Msg=0x2111, wParam=0x4000138, lParam=0x30138) returned 0x0 [0235.442] SendMessageW (hWnd=0x30138, Msg=0x2111, wParam=0x3000138, lParam=0x30138) returned 0x0 [0235.443] SendMessageW (hWnd=0x30138, Msg=0x2055, wParam=0x30138, lParam=0x3) returned 0x2 [0235.443] CallWindowProcW (lpPrevWndFunc=0x7ff8ee413240, hWnd=0x1401f4, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x0 [0235.443] GetWindow (hWnd=0x30138, uCmd=0x3) returned 0x70032 [0235.443] GetClientRect (in: hWnd=0x30138, lpRect=0x3bd0f0 | out: lpRect=0x3bd0f0) returned 1 [0235.443] GetWindowRect (in: hWnd=0x30138, lpRect=0x3bd0f0 | out: lpRect=0x3bd0f0) returned 1 [0235.443] GetParent (hWnd=0x30138) returned 0x1401f4 [0235.443] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1401f4, lpPoints=0x3bd0f0, cPoints=0x2 | out: lpPoints=0x3bd0f0) returned -10485867 [0235.443] SendMessageW (hWnd=0x30138, Msg=0x30, wParam=0xffffffff9b0a0674, lParam=0x0) returned 0x1 [0235.443] CallWindowProcW (lpPrevWndFunc=0x7ff8e580bef0, hWnd=0x30138, Msg=0x30, wParam=0xffffffff9b0a0674, lParam=0x0) returned 0x1 [0235.443] SendMessageW (hWnd=0x30138, Msg=0xd3, wParam=0x3, lParam=0x0) returned 0x0 [0235.443] CallWindowProcW (lpPrevWndFunc=0x7ff8e580bef0, hWnd=0x30138, Msg=0xd3, wParam=0x3, lParam=0x0) returned 0x0 [0235.444] SetWindowTextW (hWnd=0x30138, lpString="12ZhVHBfxdwsstomsT6mzz18jTKN7uTc2r") returned 1 [0235.444] CallWindowProcW (lpPrevWndFunc=0x7ff8e580bef0, hWnd=0x30138, Msg=0xc, wParam=0x0, lParam=0x220966c) returned 0x1 [0235.444] SendMessageW (hWnd=0x30138, Msg=0x2111, wParam=0x4000138, lParam=0x30138) returned 0x0 [0235.444] SendMessageW (hWnd=0x30138, Msg=0x2111, wParam=0x3000138, lParam=0x30138) returned 0x0 [0235.444] GetSystemMetrics (nIndex=5) returned 1 [0235.444] GetSystemMetrics (nIndex=6) returned 1 [0235.444] SendMessageW (hWnd=0x30138, Msg=0xc5, wParam=0x7fff, lParam=0x0) returned 0x1 [0235.444] CallWindowProcW (lpPrevWndFunc=0x7ff8e580bef0, hWnd=0x30138, Msg=0xc5, wParam=0x7fff, lParam=0x0) returned 0x1 [0235.444] SendMessageW (hWnd=0x30138, Msg=0xd2, wParam=0x0, lParam=0x0) returned 0x0 [0235.444] CallWindowProcW (lpPrevWndFunc=0x7ff8e580bef0, hWnd=0x30138, Msg=0xd2, wParam=0x0, lParam=0x0) returned 0x0 [0235.445] CallWindowProcW (lpPrevWndFunc=0x7ff8e580bef0, hWnd=0x30138, Msg=0x5, wParam=0x0, lParam=0x1004fa) returned 0x0 [0235.445] CallWindowProcW (lpPrevWndFunc=0x7ff8e580bef0, hWnd=0x30138, Msg=0x3, wParam=0x0, lParam=0x1d50016) returned 0x0 [0235.445] GetClientRect (in: hWnd=0x30138, lpRect=0x3bd250 | out: lpRect=0x3bd250) returned 1 [0235.445] GetWindowRect (in: hWnd=0x30138, lpRect=0x3bd250 | out: lpRect=0x3bd250) returned 1 [0235.445] GetParent (hWnd=0x30138) returned 0x1401f4 [0235.445] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1401f4, lpPoints=0x3bd250, cPoints=0x2 | out: lpPoints=0x3bd250) returned -10485867 [0235.445] SendMessageW (hWnd=0x30138, Msg=0x2210, wParam=0x1380001, lParam=0x30138) returned 0x0 [0235.445] CallWindowProcW (lpPrevWndFunc=0x7ff8e580bef0, hWnd=0x30138, Msg=0x2210, wParam=0x1380001, lParam=0x30138) returned 0x0 [0235.445] CallWindowProcW (lpPrevWndFunc=0x7ff8e580bef0, hWnd=0x30138, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0235.445] GetParent (hWnd=0x30138) returned 0x1401f4 [0235.445] GetCurrentActCtx (in: lphActCtx=0x3be0d0 | out: lphActCtx=0x3be0d0*=0x5a4498) returned 1 [0235.445] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ff8e57b0000 [0235.446] GetClassInfoW (in: hInstance=0x0, lpClassName="STATIC", lpWndClass=0x2215e18 | out: lpWndClass=0x2215e18) returned 1 [0235.446] GetModuleHandleW (lpModuleName=0x0) returned 0x270000 [0235.446] CoTaskMemAlloc (cb=0x58) returned 0x5d7610 [0235.446] RegisterClassW (lpWndClass=0x3bddb0) returned 0xc161 [0235.446] CoTaskMemFree (pv=0x5d7610) [0235.447] GetModuleHandleW (lpModuleName=0x0) returned 0x270000 [0235.447] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r10_ad1", lpWindowName="YOUR PC XUY BALLS xD \r\n\"Works for XUY\"\r\nYour personal files were encrypted.\r\nYou have 12 hours to decrypt the files.\r\nFor the interpretation of it came bitcoins for 400€ at this address: 12ZhVHBfxdwsstomsT6mzz18jTKN7uTc2r \r\nSend evidence photos to the address luxenburg@cock.lu \r\nThen we will send you the recovery tool via email!\r\nIf there is no payment, all data will be merged into The Internet.\r\nAny attempt to destroy this program will destroy All your decryptions.\r\nAny attempt to decrypt files will damage your files.\r\nNOTICE. Even if you fix the MBR, your PC is dead.\r\nThe whole registry is fucked and your files are infected.", dwStyle=0x5600000d, X=12, Y=9, nWidth=1286, nHeight=444, hWndParent=0x1401f4, hMenu=0x0, hInstance=0x270000, lpParam=0x0) returned 0x301ca [0235.447] SetWindowLongPtrW (hWnd=0x301ca, nIndex=-4, dwNewLong=0x7ff8e57d60c0) returned 0x1b110b2c [0235.447] GetWindowLongPtrW (hWnd=0x301ca, nIndex=-4) returned 0x7ff8e57d60c0 [0235.447] SetWindowLongPtrW (hWnd=0x301ca, nIndex=-4, dwNewLong=0x1b110b7c) returned 0x7ff8e57d60c0 [0235.447] GetWindowLongPtrW (hWnd=0x301ca, nIndex=-4) returned 0x1b110b7c [0235.447] GetWindowLongPtrW (hWnd=0x301ca, nIndex=-16) returned 0x4600000d [0235.447] GetWindowLongPtrW (hWnd=0x301ca, nIndex=-12) returned 0x0 [0235.447] SetWindowLongPtrW (hWnd=0x301ca, nIndex=-12, dwNewLong=0x301ca) returned 0x0 [0235.447] CallWindowProcW (lpPrevWndFunc=0x7ff8e57d60c0, hWnd=0x301ca, Msg=0x81, wParam=0x0, lParam=0x3bd740) returned 0x1 [0235.448] CallWindowProcW (lpPrevWndFunc=0x7ff8e57d60c0, hWnd=0x301ca, Msg=0x83, wParam=0x0, lParam=0x3bd7f0) returned 0x0 [0235.448] CallWindowProcW (lpPrevWndFunc=0x7ff8e57d60c0, hWnd=0x301ca, Msg=0x1, wParam=0x0, lParam=0x3bd240) returned 0x0 [0235.449] GetWindow (hWnd=0x301ca, uCmd=0x3) returned 0x30138 [0235.449] GetClientRect (in: hWnd=0x301ca, lpRect=0x3bcc50 | out: lpRect=0x3bcc50) returned 1 [0235.449] GetWindowRect (in: hWnd=0x301ca, lpRect=0x3bcc50 | out: lpRect=0x3bcc50) returned 1 [0235.449] GetParent (hWnd=0x301ca) returned 0x1401f4 [0235.449] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1401f4, lpPoints=0x3bcc50, cPoints=0x2 | out: lpPoints=0x3bcc50) returned -10485867 [0235.449] SetWindowTextW (hWnd=0x301ca, lpString="YOUR PC XUY BALLS xD \r\n\"Works for XUY\"\r\nYour personal files were encrypted.\r\nYou have 12 hours to decrypt the files.\r\nFor the interpretation of it came bitcoins for 400€ at this address: 12ZhVHBfxdwsstomsT6mzz18jTKN7uTc2r \r\nSend evidence photos to the address luxenburg@cock.lu \r\nThen we will send you the recovery tool via email!\r\nIf there is no payment, all data will be merged into The Internet.\r\nAny attempt to destroy this program will destroy All your decryptions.\r\nAny attempt to decrypt files will damage your files.\r\nNOTICE. Even if you fix the MBR, your PC is dead.\r\nThe whole registry is fucked and your files are infected.") returned 1 [0235.449] CallWindowProcW (lpPrevWndFunc=0x7ff8e57d60c0, hWnd=0x301ca, Msg=0xc, wParam=0x0, lParam=0x220f25c) returned 0x1 [0235.449] CallWindowProcW (lpPrevWndFunc=0x7ff8e57d60c0, hWnd=0x301ca, Msg=0x5, wParam=0x0, lParam=0x1bc0506) returned 0x0 [0235.450] CallWindowProcW (lpPrevWndFunc=0x7ff8e57d60c0, hWnd=0x301ca, Msg=0x3, wParam=0x0, lParam=0x9000c) returned 0x0 [0235.450] GetClientRect (in: hWnd=0x301ca, lpRect=0x3bd260 | out: lpRect=0x3bd260) returned 1 [0235.450] GetWindowRect (in: hWnd=0x301ca, lpRect=0x3bd260 | out: lpRect=0x3bd260) returned 1 [0235.450] GetParent (hWnd=0x301ca) returned 0x1401f4 [0235.450] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1401f4, lpPoints=0x3bd260, cPoints=0x2 | out: lpPoints=0x3bd260) returned -10485867 [0235.450] SendMessageW (hWnd=0x301ca, Msg=0x2210, wParam=0x1ca0001, lParam=0x301ca) returned 0x0 [0235.450] CallWindowProcW (lpPrevWndFunc=0x7ff8e57d60c0, hWnd=0x301ca, Msg=0x2210, wParam=0x1ca0001, lParam=0x301ca) returned 0x0 [0235.450] CallWindowProcW (lpPrevWndFunc=0x7ff8e57d60c0, hWnd=0x301ca, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0235.450] GetParent (hWnd=0x301ca) returned 0x1401f4 [0235.450] GetWindowTextLengthW (hWnd=0x1401f4) returned 10 [0235.450] CallWindowProcW (lpPrevWndFunc=0x7ff8ee413240, hWnd=0x1401f4, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa [0235.450] GetSystemMetrics (nIndex=42) returned 0 [0235.450] GetWindowTextW (in: hWnd=0x1401f4, lpString=0x3be040, nMaxCount=11 | out: lpString="XUYENCRYPT") returned 10 [0235.451] CallWindowProcW (lpPrevWndFunc=0x7ff8ee413240, hWnd=0x1401f4, Msg=0xd, wParam=0xb, lParam=0x3be040) returned 0xa [0235.461] InvalidateRect (hWnd=0x70032, lpRect=0x0, bErase=1) returned 1 [0235.461] InvalidateRect (hWnd=0x30138, lpRect=0x0, bErase=1) returned 1 [0235.461] InvalidateRect (hWnd=0x301ca, lpRect=0x0, bErase=1) returned 1 [0235.462] GetWindowThreadProcessId (in: hWnd=0x1401f4, lpdwProcessId=0x3be110 | out: lpdwProcessId=0x3be110) returned 0xe0c [0235.462] GetCurrentThreadId () returned 0xe0c [0235.463] RegisterClipboardFormatW (lpszFormat="WindowsForms12_ThreadCallbackMessage") returned 0xc160 [0235.463] PostMessageW (hWnd=0x1401f4, Msg=0xc160, wParam=0x0, lParam=0x0) returned 1 [0235.463] GetWindowTextLengthW (hWnd=0x1401f4) returned 10 [0235.463] CallWindowProcW (lpPrevWndFunc=0x7ff8ee413240, hWnd=0x1401f4, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa [0235.464] GetSystemMetrics (nIndex=42) returned 0 [0235.464] GetWindowTextW (in: hWnd=0x1401f4, lpString=0x3be010, nMaxCount=11 | out: lpString="XUYENCRYPT") returned 10 [0235.464] CallWindowProcW (lpPrevWndFunc=0x7ff8ee413240, hWnd=0x1401f4, Msg=0xd, wParam=0xb, lParam=0x3be010) returned 0xa [0235.464] CallWindowProcW (lpPrevWndFunc=0x7ff8ee413240, hWnd=0x1401f4, Msg=0x46, wParam=0x0, lParam=0x3be850) returned 0x0 [0235.509] CallWindowProcW (lpPrevWndFunc=0x7ff8ee413240, hWnd=0x1401f4, Msg=0x46, wParam=0x0, lParam=0x3be850) returned 0x0 [0235.509] CallWindowProcW (lpPrevWndFunc=0x7ff8ee413240, hWnd=0x1401f4, Msg=0x1c, wParam=0x1, lParam=0x0) returned 0x0 [0235.509] NtdllDefWindowProc_W (hWnd=0x301f6, Msg=0x1c, wParam=0x1, lParam=0x0) returned 0x0 [0235.510] CallWindowProcW (lpPrevWndFunc=0x7ff8ee413240, hWnd=0x1401f4, Msg=0x86, wParam=0x0, lParam=0x0) returned 0x1 [0235.512] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x3be408 | out: lplpMessageFilter=0x3be408*=0x0) returned 0x0 [0235.520] GetFocus () returned 0x0 [0235.520] SetFocus (hWnd=0x30138) returned 0x0 [0235.524] CallWindowProcW (lpPrevWndFunc=0x7ff8e580bef0, hWnd=0x30138, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0 [0235.529] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0235.529] CallWindowProcW (lpPrevWndFunc=0x7ff8e580bef0, hWnd=0x30138, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0 [0235.529] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0235.530] GetParent (hWnd=0x1401f4) returned 0x0 [0235.531] CallWindowProcW (lpPrevWndFunc=0x7ff8e580bef0, hWnd=0x30138, Msg=0x7, wParam=0x0, lParam=0x0) returned 0x1 [0235.531] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0235.532] CallWindowProcW (lpPrevWndFunc=0x7ff8e580bef0, hWnd=0x30138, Msg=0x282, wParam=0xa, lParam=0x0) returned 0x0 [0235.532] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0235.532] CallWindowProcW (lpPrevWndFunc=0x7ff8e580bef0, hWnd=0x30138, Msg=0x282, wParam=0xf, lParam=0x120067) returned 0x0 [0235.532] SetTextColor (hdc=0x3c010711, color=0x0) returned 0x0 [0235.532] SetBkColor (hdc=0x3c010711, color=0xffffff) returned 0xffffff [0235.722] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0235.723] CallWindowProcW (lpPrevWndFunc=0x7ff8e580bef0, hWnd=0x30138, Msg=0x282, wParam=0xb, lParam=0x0) returned 0x0 [0235.723] SendMessageW (hWnd=0x30138, Msg=0x2111, wParam=0x1000138, lParam=0x30138) returned 0x0 [0235.756] SendMessageW (hWnd=0x30138, Msg=0xb0, wParam=0x3bdcc0, lParam=0x3bdc60) returned 0x0 [0235.756] CallWindowProcW (lpPrevWndFunc=0x7ff8e580bef0, hWnd=0x30138, Msg=0xb0, wParam=0x3bdcc0, lParam=0x3bdc60) returned 0x0 [0235.756] GetKeyState (nVirtKey=2) returned 0 [0235.756] GetKeyState (nVirtKey=4) returned 0 [0235.756] GetKeyState (nVirtKey=5) returned 0 [0235.756] GetKeyState (nVirtKey=6) returned 0 [0235.757] GetWindowTextLengthW (hWnd=0x30138) returned 34 [0235.757] CallWindowProcW (lpPrevWndFunc=0x7ff8e580bef0, hWnd=0x30138, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x22 [0235.757] SendMessageW (hWnd=0x30138, Msg=0xb1, wParam=0x0, lParam=0x22) returned 0x1 [0235.757] CallWindowProcW (lpPrevWndFunc=0x7ff8e580bef0, hWnd=0x30138, Msg=0xb1, wParam=0x0, lParam=0x22) returned 0x1 [0235.757] SetTextColor (hdc=0x3c010711, color=0x0) returned 0x0 [0235.757] SetBkColor (hdc=0x3c010711, color=0xffffff) returned 0xffffff [0235.758] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0235.758] CallWindowProcW (lpPrevWndFunc=0x7ff8e580bef0, hWnd=0x30138, Msg=0x282, wParam=0xb, lParam=0x0) returned 0x0 [0235.758] CallWindowProcW (lpPrevWndFunc=0x7ff8ee413240, hWnd=0x1401f4, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0235.759] GetWindowPlacement (in: hWnd=0x1401f4, lpwndpl=0x3be418 | out: lpwndpl=0x3be418) returned 1 [0235.759] GetClientRect (in: hWnd=0x1401f4, lpRect=0x3be330 | out: lpRect=0x3be330) returned 1 [0235.759] GetWindowTextLengthW (hWnd=0x1401f4) returned 10 [0235.759] CallWindowProcW (lpPrevWndFunc=0x7ff8ee413240, hWnd=0x1401f4, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa [0235.759] GetSystemMetrics (nIndex=42) returned 0 [0235.759] GetWindowTextW (in: hWnd=0x1401f4, lpString=0x3be090, nMaxCount=11 | out: lpString="XUYENCRYPT") returned 10 [0235.759] CallWindowProcW (lpPrevWndFunc=0x7ff8ee413240, hWnd=0x1401f4, Msg=0xd, wParam=0xb, lParam=0x3be090) returned 0xa [0235.759] GetClientRect (in: hWnd=0x1401f4, lpRect=0x3be118 | out: lpRect=0x3be118) returned 1 [0235.772] GetSystemMetrics (nIndex=80) returned 1 [0235.774] EnumDisplayMonitors (hdc=0x0, lprcClip=0x0, lpfnEnum=0x1b110bcc, dwData=0x0) returned 1 [0235.774] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x3bd910 | out: lpmi=0x3bd910) returned 1 [0235.775] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0x2c01077b [0235.775] GetDeviceCaps (hdc=0x2c01077b, index=12) returned 32 [0235.775] GetDeviceCaps (hdc=0x2c01077b, index=14) returned 1 [0235.775] DeleteDC (hdc=0x2c01077b) returned 1 [0235.775] GetCurrentObject (hdc=0xa0100d0, type=0x1) returned 0x1b00017 [0235.775] GetCurrentObject (hdc=0xa0100d0, type=0x2) returned 0x1900010 [0235.775] GetCurrentObject (hdc=0xa0100d0, type=0x7) returned 0x1705054c [0235.775] GetCurrentObject (hdc=0xa0100d0, type=0x6) returned 0x18a0048 [0235.775] SaveDC (hdc=0xa0100d0) returned 1 [0235.785] GetNearestColor (hdc=0xa0100d0, color=0xf0f0f0) returned 0xf0f0f0 [0235.794] CreateSolidBrush (color=0xf0f0f0) returned 0x6f10069b [0235.794] FillRect (hDC=0xa0100d0, lprc=0x3bde08, hbr=0x6f10069b) returned 1 [0235.795] DeleteObject (ho=0x6f10069b) returned 1 [0235.796] RestoreDC (hdc=0xa0100d0, nSavedDC=-1) returned 1 [0235.799] CallWindowProcW (lpPrevWndFunc=0x7ff8e580bef0, hWnd=0x70032, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x1 [0235.799] SetTextColor (hdc=0x10105c2, color=0x0) returned 0x0 [0235.799] SetBkColor (hdc=0x10105c2, color=0xffffff) returned 0xffffff [0235.799] GetSysColorBrush (nIndex=5) returned 0x110007b [0235.806] GetWindowPlacement (in: hWnd=0x1401f4, lpwndpl=0x3bda18 | out: lpwndpl=0x3bda18) returned 1 [0235.806] GetClientRect (in: hWnd=0x1401f4, lpRect=0x3bd930 | out: lpRect=0x3bd930) returned 1 [0235.806] GetWindowTextLengthW (hWnd=0x1401f4) returned 10 [0235.806] CallWindowProcW (lpPrevWndFunc=0x7ff8ee413240, hWnd=0x1401f4, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa [0235.806] GetSystemMetrics (nIndex=42) returned 0 [0235.806] GetWindowTextW (in: hWnd=0x1401f4, lpString=0x3bd690, nMaxCount=11 | out: lpString="XUYENCRYPT") returned 10 [0235.806] CallWindowProcW (lpPrevWndFunc=0x7ff8ee413240, hWnd=0x1401f4, Msg=0xd, wParam=0xb, lParam=0x3bd690) returned 0xa [0235.806] GetClientRect (in: hWnd=0x1401f4, lpRect=0x3bd718 | out: lpRect=0x3bd718) returned 1 [0235.806] GetCurrentObject (hdc=0x3001077b, type=0x1) returned 0x1b00017 [0235.806] GetCurrentObject (hdc=0x3001077b, type=0x2) returned 0x1900010 [0235.807] GetCurrentObject (hdc=0x3001077b, type=0x7) returned 0x2d050749 [0235.807] GetCurrentObject (hdc=0x3001077b, type=0x6) returned 0x18a0048 [0235.807] SaveDC (hdc=0x3001077b) returned 1 [0235.807] GetNearestColor (hdc=0x3001077b, color=0xf0f0f0) returned 0xf0f0f0 [0235.807] CreateSolidBrush (color=0xf0f0f0) returned 0x7010069b [0235.816] FillRect (hDC=0x3001077b, lprc=0x3bd408, hbr=0x7010069b) returned 1 [0235.816] DeleteObject (ho=0x7010069b) returned 1 [0235.816] RestoreDC (hdc=0x3001077b, nSavedDC=-1) returned 1 [0235.817] GetWindowTextLengthW (hWnd=0x1401f4) returned 10 [0235.817] CallWindowProcW (lpPrevWndFunc=0x7ff8ee413240, hWnd=0x1401f4, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa [0235.817] GetSystemMetrics (nIndex=42) returned 0 [0235.817] GetWindowTextW (in: hWnd=0x1401f4, lpString=0x3bd5c0, nMaxCount=11 | out: lpString="XUYENCRYPT") returned 10 [0235.817] CallWindowProcW (lpPrevWndFunc=0x7ff8ee413240, hWnd=0x1401f4, Msg=0xd, wParam=0xb, lParam=0x3bd5c0) returned 0xa [0235.817] GetClientRect (in: hWnd=0x1401f4, lpRect=0x3bd648 | out: lpRect=0x3bd648) returned 1 [0235.817] GetCurrentObject (hdc=0x3001077b, type=0x1) returned 0x1b00017 [0235.817] GetCurrentObject (hdc=0x3001077b, type=0x2) returned 0x1900010 [0235.817] GetCurrentObject (hdc=0x3001077b, type=0x7) returned 0x2d050749 [0235.817] GetCurrentObject (hdc=0x3001077b, type=0x6) returned 0x18a0048 [0235.817] SaveDC (hdc=0x3001077b) returned 1 [0235.817] GetNearestColor (hdc=0x3001077b, color=0xf0f0f0) returned 0xf0f0f0 [0235.817] CreateSolidBrush (color=0xf0f0f0) returned 0x7110069b [0235.817] FillRect (hDC=0x3001077b, lprc=0x3bd338, hbr=0x7110069b) returned 1 [0235.817] DeleteObject (ho=0x7110069b) returned 1 [0235.817] RestoreDC (hdc=0x3001077b, nSavedDC=-1) returned 1 [0235.817] GetWindowTextLengthW (hWnd=0x1401f4) returned 10 [0235.817] CallWindowProcW (lpPrevWndFunc=0x7ff8ee413240, hWnd=0x1401f4, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa [0235.817] GetSystemMetrics (nIndex=42) returned 0 [0235.817] GetWindowTextW (in: hWnd=0x1401f4, lpString=0x3bd5c0, nMaxCount=11 | out: lpString="XUYENCRYPT") returned 10 [0235.817] CallWindowProcW (lpPrevWndFunc=0x7ff8ee413240, hWnd=0x1401f4, Msg=0xd, wParam=0xb, lParam=0x3bd5c0) returned 0xa [0235.818] CallWindowProcW (lpPrevWndFunc=0x7ff8e580bef0, hWnd=0x70032, Msg=0x14, wParam=0x10105c2, lParam=0x0) returned 0x1 [0235.818] CallWindowProcW (lpPrevWndFunc=0x7ff8e580bef0, hWnd=0x30138, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x1 [0235.818] SetTextColor (hdc=0xa0100d0, color=0x0) returned 0x0 [0235.818] SetBkColor (hdc=0xa0100d0, color=0xffffff) returned 0xffffff [0235.819] GetWindowPlacement (in: hWnd=0x1401f4, lpwndpl=0x3bda18 | out: lpwndpl=0x3bda18) returned 1 [0235.819] GetClientRect (in: hWnd=0x1401f4, lpRect=0x3bd930 | out: lpRect=0x3bd930) returned 1 [0235.819] GetWindowTextLengthW (hWnd=0x1401f4) returned 10 [0235.819] CallWindowProcW (lpPrevWndFunc=0x7ff8ee413240, hWnd=0x1401f4, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa [0235.819] GetSystemMetrics (nIndex=42) returned 0 [0235.819] GetWindowTextW (in: hWnd=0x1401f4, lpString=0x3bd690, nMaxCount=11 | out: lpString="XUYENCRYPT") returned 10 [0235.819] CallWindowProcW (lpPrevWndFunc=0x7ff8ee413240, hWnd=0x1401f4, Msg=0xd, wParam=0xb, lParam=0x3bd690) returned 0xa [0235.819] GetClientRect (in: hWnd=0x1401f4, lpRect=0x3bd718 | out: lpRect=0x3bd718) returned 1 [0235.819] GetCurrentObject (hdc=0x3101077b, type=0x1) returned 0x1b00017 [0235.819] GetCurrentObject (hdc=0x3101077b, type=0x2) returned 0x1900010 [0235.819] GetCurrentObject (hdc=0x3101077b, type=0x7) returned 0x2d050749 [0235.819] GetCurrentObject (hdc=0x3101077b, type=0x6) returned 0x18a0048 [0235.819] SaveDC (hdc=0x3101077b) returned 1 [0235.819] GetNearestColor (hdc=0x3101077b, color=0xf0f0f0) returned 0xf0f0f0 [0235.819] CreateSolidBrush (color=0xf0f0f0) returned 0x7210069b [0235.819] FillRect (hDC=0x3101077b, lprc=0x3bd408, hbr=0x7210069b) returned 1 [0235.819] DeleteObject (ho=0x7210069b) returned 1 [0235.819] RestoreDC (hdc=0x3101077b, nSavedDC=-1) returned 1 [0235.819] GetWindowTextLengthW (hWnd=0x1401f4) returned 10 [0235.819] CallWindowProcW (lpPrevWndFunc=0x7ff8ee413240, hWnd=0x1401f4, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa [0235.820] GetSystemMetrics (nIndex=42) returned 0 [0235.820] GetWindowTextW (in: hWnd=0x1401f4, lpString=0x3bd5c0, nMaxCount=11 | out: lpString="XUYENCRYPT") returned 10 [0235.820] CallWindowProcW (lpPrevWndFunc=0x7ff8ee413240, hWnd=0x1401f4, Msg=0xd, wParam=0xb, lParam=0x3bd5c0) returned 0xa [0235.820] GetClientRect (in: hWnd=0x1401f4, lpRect=0x3bd648 | out: lpRect=0x3bd648) returned 1 [0235.820] GetCurrentObject (hdc=0x3101077b, type=0x1) returned 0x1b00017 [0235.820] GetCurrentObject (hdc=0x3101077b, type=0x2) returned 0x1900010 [0235.820] GetCurrentObject (hdc=0x3101077b, type=0x7) returned 0x2d050749 [0235.820] GetCurrentObject (hdc=0x3101077b, type=0x6) returned 0x18a0048 [0235.820] SaveDC (hdc=0x3101077b) returned 1 [0235.820] GetNearestColor (hdc=0x3101077b, color=0xf0f0f0) returned 0xf0f0f0 [0235.820] CreateSolidBrush (color=0xf0f0f0) returned 0x7310069b [0235.820] FillRect (hDC=0x3101077b, lprc=0x3bd338, hbr=0x7310069b) returned 1 [0235.820] DeleteObject (ho=0x7310069b) returned 1 [0235.820] RestoreDC (hdc=0x3101077b, nSavedDC=-1) returned 1 [0235.820] GetWindowTextLengthW (hWnd=0x1401f4) returned 10 [0235.820] CallWindowProcW (lpPrevWndFunc=0x7ff8ee413240, hWnd=0x1401f4, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa [0235.820] GetSystemMetrics (nIndex=42) returned 0 [0235.820] GetWindowTextW (in: hWnd=0x1401f4, lpString=0x3bd5c0, nMaxCount=11 | out: lpString="XUYENCRYPT") returned 10 [0235.820] CallWindowProcW (lpPrevWndFunc=0x7ff8ee413240, hWnd=0x1401f4, Msg=0xd, wParam=0xb, lParam=0x3bd5c0) returned 0xa [0235.821] CallWindowProcW (lpPrevWndFunc=0x7ff8e580bef0, hWnd=0x30138, Msg=0x14, wParam=0xa0100d0, lParam=0x0) returned 0x1 [0235.821] CallWindowProcW (lpPrevWndFunc=0x7ff8e57d60c0, hWnd=0x301ca, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0235.821] GetWindowPlacement (in: hWnd=0x1401f4, lpwndpl=0x3be3f8 | out: lpwndpl=0x3be3f8) returned 1 [0235.821] CallWindowProcW (lpPrevWndFunc=0x7ff8ee413240, hWnd=0x1401f4, Msg=0x47, wParam=0x0, lParam=0x3be850) returned 0x0 [0235.821] GetClientRect (in: hWnd=0x1401f4, lpRect=0x3be290 | out: lpRect=0x3be290) returned 1 [0235.821] GetWindowRect (in: hWnd=0x1401f4, lpRect=0x3be290 | out: lpRect=0x3be290) returned 1 [0235.822] CallWindowProcW (lpPrevWndFunc=0x7ff8ee413240, hWnd=0x1401f4, Msg=0x5, wParam=0x0, lParam=0x20b052d) returned 0x0 [0235.822] CallWindowProcW (lpPrevWndFunc=0x7ff8ee413240, hWnd=0x1401f4, Msg=0x3, wParam=0x0, lParam=0xa1006b) returned 0x0 [0235.822] GetClientRect (in: hWnd=0x1401f4, lpRect=0x3be320 | out: lpRect=0x3be320) returned 1 [0235.822] GetWindowRect (in: hWnd=0x1401f4, lpRect=0x3be320 | out: lpRect=0x3be320) returned 1 [0235.831] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 1 [0235.831] CallWindowProcW (lpPrevWndFunc=0x7ff8ee413240, hWnd=0x1401f4, Msg=0x7f, wParam=0x1, lParam=0x60) returned 0x400ef [0235.834] IsWindowUnicode (hWnd=0x1401f4) returned 1 [0235.834] GetMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x3be9d0) returned 1 [0235.835] TranslateMessage (lpMsg=0x3be9d0) returned 0 [0235.835] DispatchMessageW (lpMsg=0x3be9d0) returned 0x0 [0235.835] CallWindowProcW (lpPrevWndFunc=0x7ff8ee413240, hWnd=0x1401f4, Msg=0x31f, wParam=0x1, lParam=0x0) returned 0x0 [0235.835] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 1 [0235.836] IsWindowUnicode (hWnd=0x1401f4) returned 1 [0235.836] GetMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x3be9d0) returned 1 [0235.836] TranslateMessage (lpMsg=0x3be9d0) returned 0 [0235.836] DispatchMessageW (lpMsg=0x3be9d0) returned 0x0 [0235.837] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 1 [0235.839] MapWindowPoints (in: hWndFrom=0x301ca, hWndTo=0x0, lpPoints=0x3be3d0, cPoints=0x2 | out: lpPoints=0x3be3d0) returned 11141239 [0235.851] IsWindowUnicode (hWnd=0x301ca) returned 1 [0235.851] GetMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x3be9d0) returned 1 [0235.851] MapWindowPoints (in: hWndFrom=0x301ca, hWndTo=0x0, lpPoints=0x3be3e0, cPoints=0x2 | out: lpPoints=0x3be3e0) returned 11141239 [0235.851] LoadCursorW (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003 [0235.853] SetCursor (hCursor=0x10003) returned 0x10007 [0235.853] TranslateMessage (lpMsg=0x3be9d0) returned 0 [0235.853] DispatchMessageW (lpMsg=0x3be9d0) returned 0x0 [0235.881] _TrackMouseEvent (in: lpEventTrack=0x2218bd8 | out: lpEventTrack=0x2218bd8) returned 1 [0235.882] SendMessageW (hWnd=0x301ca, Msg=0xc167, wParam=0x0, lParam=0x0) returned 0x0 [0235.882] CallWindowProcW (lpPrevWndFunc=0x7ff8e57d60c0, hWnd=0x301ca, Msg=0xc167, wParam=0x0, lParam=0x0) returned 0x0 [0235.897] CallWindowProcW (lpPrevWndFunc=0x7ff8e57d60c0, hWnd=0x301ca, Msg=0x200, wParam=0x0, lParam=0xa50323) returned 0x0 [0235.897] GetKeyState (nVirtKey=1) returned 0 [0235.897] GetKeyState (nVirtKey=2) returned 0 [0235.897] GetKeyState (nVirtKey=4) returned 0 [0235.897] GetKeyState (nVirtKey=5) returned 0 [0235.897] GetKeyState (nVirtKey=6) returned 0 [0235.897] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 1 [0235.897] IsWindowUnicode (hWnd=0x1401f4) returned 1 [0235.897] GetMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x3be9d0) returned 1 [0235.897] TranslateMessage (lpMsg=0x3be9d0) returned 0 [0235.897] DispatchMessageW (lpMsg=0x3be9d0) returned 0x0 [0235.898] BeginPaint (in: hWnd=0x1401f4, lpPaint=0x3be0d8 | out: lpPaint=0x3be0d8) returned 0x10105c2 [0235.899] GdipCreateHalftonePalette () returned 0x1e080762 [0235.899] SelectPalette (hdc=0x10105c2, hPal=0x1e080762, bForceBkgd=1) returned 0x188000b [0235.899] GetWindowTextLengthW (hWnd=0x1401f4) returned 10 [0235.899] CallWindowProcW (lpPrevWndFunc=0x7ff8ee413240, hWnd=0x1401f4, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa [0235.899] GetSystemMetrics (nIndex=42) returned 0 [0235.899] GetWindowTextW (in: hWnd=0x1401f4, lpString=0x3bdf70, nMaxCount=11 | out: lpString="XUYENCRYPT") returned 10 [0235.899] CallWindowProcW (lpPrevWndFunc=0x7ff8ee413240, hWnd=0x1401f4, Msg=0xd, wParam=0xb, lParam=0x3bdf70) returned 0xa [0235.899] SelectPalette (hdc=0x10105c2, hPal=0x188000b, bForceBkgd=0) returned 0x1e080762 [0235.899] EndPaint (hWnd=0x1401f4, lpPaint=0x3be078) returned 1 [0235.899] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 1 [0235.899] IsWindowUnicode (hWnd=0x70032) returned 1 [0235.900] GetMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x3be9d0) returned 1 [0235.900] TranslateMessage (lpMsg=0x3be9d0) returned 0 [0235.900] DispatchMessageW (lpMsg=0x3be9d0) returned 0x1 [0235.900] CallWindowProcW (lpPrevWndFunc=0x7ff8e580bef0, hWnd=0x70032, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x1 [0235.900] SetTextColor (hdc=0x3201077b, color=0x0) returned 0x0 [0235.900] SetBkColor (hdc=0x3201077b, color=0xffffff) returned 0xffffff [0235.903] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 1 [0235.903] IsWindowUnicode (hWnd=0x30138) returned 1 [0235.903] GetMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x3be9d0) returned 1 [0235.903] TranslateMessage (lpMsg=0x3be9d0) returned 0 [0235.903] DispatchMessageW (lpMsg=0x3be9d0) returned 0x1 [0235.903] CallWindowProcW (lpPrevWndFunc=0x7ff8e580bef0, hWnd=0x30138, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x1 [0235.903] SetTextColor (hdc=0x3301077b, color=0x0) returned 0x0 [0235.903] SetBkColor (hdc=0x3301077b, color=0xffffff) returned 0xffffff [0235.904] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 1 [0235.904] IsWindowUnicode (hWnd=0x301ca) returned 1 [0235.904] GetMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x3be9d0) returned 1 [0235.904] TranslateMessage (lpMsg=0x3be9d0) returned 0 [0235.904] DispatchMessageW (lpMsg=0x3be9d0) returned 0x0 [0235.904] BeginPaint (in: hWnd=0x301ca, lpPaint=0x3be098 | out: lpPaint=0x3be098) returned 0xa0100d0 [0235.904] SelectPalette (hdc=0xa0100d0, hPal=0x1e080762, bForceBkgd=1) returned 0x188000b [0235.905] CreateCompatibleDC (hdc=0xa0100d0) returned 0xffffffff9b01075d [0235.905] GetObjectType (h=0xa0100d0) returned 0x3 [0235.905] CreateCompatibleBitmap (hdc=0xa0100d0, cx=1, cy=1) returned 0x28050779 [0235.906] GetDIBits (in: hdc=0xa0100d0, hbm=0x28050779, start=0x0, cLines=0x0, lpvBits=0x0, lpbmi=0x3bd9a8, usage=0x0 | out: lpvBits=0x0, lpbmi=0x3bd9a8) returned 1 [0235.906] GetDIBits (in: hdc=0xa0100d0, hbm=0x28050779, start=0x0, cLines=0x1, lpvBits=0x0, lpbmi=0x3bd9a8, usage=0x0 | out: lpvBits=0x0, lpbmi=0x3bd9a8) returned 1 [0235.906] DeleteObject (ho=0x28050779) returned 1 [0235.906] CreateDIBSection (in: hdc=0xa0100d0, lpbmi=0x3bda58, usage=0x0, ppvBits=0x3be018, hSection=0x0, offset=0x0 | out: ppvBits=0x3be018) returned 0x16050788 [0235.906] SelectObject (hdc=0xffffffff9b01075d, h=0x16050788) returned 0x185000f [0235.906] GdipCreateFromHDC (hdc=0xffffffff9b01075d, graphics=0x3bdf98) returned 0x0 [0235.913] GdipTranslateWorldTransform (graphics=0x1c3267f0, dx=0x7ff8d2e2df12, dy=0x1841457f29c8, order=0x0) returned 0x0 [0235.914] GdipSetClipRectI (graphics=0x1c3267f0, x=0, y=0, width=1286, height=444, combineMode=0x0) returned 0x0 [0235.916] GdipCreateMatrix (matrix=0x3be040) returned 0x0 [0235.916] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1ae0ec20) returned 0x0 [0235.917] GdipIsMatrixIdentity (matrix=0x1ae0ec20, result=0x3be0a8) returned 0x0 [0235.917] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x619bd0 [0235.918] GdipGetMatrixElements (matrix=0x1ae0ec20, matrixOut=0x619bd0) returned 0x0 [0235.918] LocalFree (hMem=0x619bd0) returned 0x0 [0235.918] GdipDeleteMatrix (matrix=0x1ae0ec20) returned 0x0 [0235.920] GdipCreateRegion (region=0x3be040) returned 0x0 [0235.929] GdipGetClip (graphics=0x1c3267f0, region=0x1c321730) returned 0x0 [0235.938] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x3be0a0) returned 0x0 [0235.939] GdipSaveGraphics (graphics=0x1c3267f0, state=0x3be140) returned 0x0 [0235.939] GetWindowTextLengthW (hWnd=0x301ca) returned 634 [0235.939] CallWindowProcW (lpPrevWndFunc=0x7ff8e57d60c0, hWnd=0x301ca, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x27a [0235.939] GetSystemMetrics (nIndex=42) returned 0 [0235.939] CoTaskMemAlloc (cb=0x4fa) returned 0x1b045fb0 [0235.939] GetWindowTextW (in: hWnd=0x301ca, lpString=0x1b045fb0, nMaxCount=635 | out: lpString="YOUR PC XUY BALLS xD \r\n\"Works for XUY\"\r\nYour personal files were encrypted.\r\nYou have 12 hours to decrypt the files.\r\nFor the interpretation of it came bitcoins for 400€ at this address: 12ZhVHBfxdwsstomsT6mzz18jTKN7uTc2r \r\nSend evidence photos to the address luxenburg@cock.lu \r\nThen we will send you the recovery tool via email!\r\nIf there is no payment, all data will be merged into The Internet.\r\nAny attempt to destroy this program will destroy All your decryptions.\r\nAny attempt to decrypt files will damage your files.\r\nNOTICE. Even if you fix the MBR, your PC is dead.\r\nThe whole registry is fucked and your files are infected.") returned 634 [0235.939] CallWindowProcW (lpPrevWndFunc=0x7ff8e57d60c0, hWnd=0x301ca, Msg=0xd, wParam=0x27b, lParam=0x1b045fb0) returned 0x27a [0235.940] CoTaskMemFree (pv=0x1b045fb0) [0235.940] GetClientRect (in: hWnd=0x301ca, lpRect=0x3be0e8 | out: lpRect=0x3be0e8) returned 1 [0235.940] GdipCreateRegion (region=0x3bdcd0) returned 0x0 [0235.940] GdipGetClip (graphics=0x1c3267f0, region=0x1c3217f0) returned 0x0 [0235.940] GdipCreateMatrix (matrix=0x3bdcd0) returned 0x0 [0235.940] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c3218b0) returned 0x0 [0235.941] GdipIsMatrixIdentity (matrix=0x1c3218b0, result=0x3bdd38) returned 0x0 [0235.941] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x619bd0 [0235.941] GdipGetMatrixElements (matrix=0x1c3218b0, matrixOut=0x619bd0) returned 0x0 [0235.941] LocalFree (hMem=0x619bd0) returned 0x0 [0235.941] GdipCombineRegionRegion (region=0x1c3217f0, region2=0x1c321730, combineMode=0x1) returned 0x0 [0235.941] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x619bd0 [0235.941] GdipGetMatrixElements (matrix=0x1c3218b0, matrixOut=0x619bd0) returned 0x0 [0235.942] LocalFree (hMem=0x619bd0) returned 0x0 [0235.942] GdipDeleteMatrix (matrix=0x1c3218b0) returned 0x0 [0235.942] GdipIsInfiniteRegion (region=0x1c3217f0, graphics=0x1c3267f0, result=0x3bdda0) returned 0x0 [0235.942] GdipIsInfiniteRegion (region=0x1c3217f0, graphics=0x1c3267f0, result=0x3bdd60) returned 0x0 [0235.942] GdipGetRegionHRgn (region=0x1c3217f0, graphics=0x1c3267f0, hRgn=0x3bdd60) returned 0x0 [0235.944] GdipDeleteRegion (region=0x1c3217f0) returned 0x0 [0235.950] GdipGetDC (graphics=0x1c3267f0, hdc=0x3bdda8) returned 0x0 [0235.950] GetCurrentObject (hdc=0xffffffff9b01075d, type=0x1) returned 0x1b00017 [0235.950] GetCurrentObject (hdc=0xffffffff9b01075d, type=0x2) returned 0x1900010 [0235.950] GetCurrentObject (hdc=0xffffffff9b01075d, type=0x7) returned 0x16050788 [0235.950] GetCurrentObject (hdc=0xffffffff9b01075d, type=0x6) returned 0x18a0048 [0235.950] SaveDC (hdc=0xffffffff9b01075d) returned 1 [0235.952] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x23040784 [0235.952] GetClipRgn (hdc=0xffffffff9b01075d, hrgn=0x23040784) returned 0 [0235.952] SelectClipRgn (hdc=0xffffffff9b01075d, hrgn=0x21040787) returned 2 [0235.952] DeleteObject (ho=0x23040784) returned 1 [0235.953] DeleteObject (ho=0x21040787) returned 1 [0235.953] OffsetViewportOrgEx (in: hdc=0xffffffff9b01075d, x=0, y=0, lppt=0x221b738 | out: lppt=0x221b738) returned 1 [0235.953] GetNearestColor (hdc=0xffffffff9b01075d, color=0xf0f0f0) returned 0xf0f0f0 [0235.953] CreateSolidBrush (color=0xf0f0f0) returned 0x7410069b [0235.953] FillRect (hDC=0xffffffff9b01075d, lprc=0x3bddd8, hbr=0x7410069b) returned 1 [0235.984] DeleteObject (ho=0x7410069b) returned 1 [0235.984] RestoreDC (hdc=0xffffffff9b01075d, nSavedDC=-1) returned 1 [0235.985] GdipReleaseDC (graphics=0x1c3267f0, hdc=0xffffffff9b01075d) returned 0x0 [0235.986] GdipRestoreGraphics (graphics=0x1c3267f0, state=0xfffffffffdb60dbd) returned 0x0 [0235.986] GdipDeleteRegion (region=0x1c321730) returned 0x0 [0235.986] GetWindowTextLengthW (hWnd=0x301ca) returned 634 [0235.986] CallWindowProcW (lpPrevWndFunc=0x7ff8e57d60c0, hWnd=0x301ca, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x27a [0235.986] GetSystemMetrics (nIndex=42) returned 0 [0235.986] CoTaskMemAlloc (cb=0x4fa) returned 0x1b045fb0 [0235.986] GetWindowTextW (in: hWnd=0x301ca, lpString=0x1b045fb0, nMaxCount=635 | out: lpString="YOUR PC XUY BALLS xD \r\n\"Works for XUY\"\r\nYour personal files were encrypted.\r\nYou have 12 hours to decrypt the files.\r\nFor the interpretation of it came bitcoins for 400€ at this address: 12ZhVHBfxdwsstomsT6mzz18jTKN7uTc2r \r\nSend evidence photos to the address luxenburg@cock.lu \r\nThen we will send you the recovery tool via email!\r\nIf there is no payment, all data will be merged into The Internet.\r\nAny attempt to destroy this program will destroy All your decryptions.\r\nAny attempt to decrypt files will damage your files.\r\nNOTICE. Even if you fix the MBR, your PC is dead.\r\nThe whole registry is fucked and your files are infected.") returned 634 [0235.986] CallWindowProcW (lpPrevWndFunc=0x7ff8e57d60c0, hWnd=0x301ca, Msg=0xd, wParam=0x27b, lParam=0x1b045fb0) returned 0x27a [0235.987] CoTaskMemFree (pv=0x1b045fb0) [0235.987] GdipGetDC (graphics=0x1c3267f0, hdc=0x3bdf38) returned 0x0 [0235.987] GetCurrentObject (hdc=0xffffffff9b01075d, type=0x1) returned 0x1b00017 [0235.987] GetCurrentObject (hdc=0xffffffff9b01075d, type=0x2) returned 0x1900010 [0235.987] GetCurrentObject (hdc=0xffffffff9b01075d, type=0x7) returned 0x16050788 [0235.987] GetCurrentObject (hdc=0xffffffff9b01075d, type=0x6) returned 0x18a0048 [0235.987] SaveDC (hdc=0xffffffff9b01075d) returned 1 [0235.987] GetNearestColor (hdc=0xffffffff9b01075d, color=0x0) returned 0x0 [0235.987] RestoreDC (hdc=0xffffffff9b01075d, nSavedDC=-1) returned 1 [0235.987] GdipReleaseDC (graphics=0x1c3267f0, hdc=0xffffffff9b01075d) returned 0x0 [0235.988] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ff8e57b0000 [0235.988] AdjustWindowRectEx (in: lpRect=0x3bdde8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x3bdde8) returned 1 [0235.988] SystemParametersInfoW (in: uiAction=0x100a, uiParam=0x0, pvParam=0x3bde38, fWinIni=0x0 | out: pvParam=0x3bde38) returned 1 [0235.988] SendMessageW (hWnd=0x1401f4, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0 [0235.988] CallWindowProcW (lpPrevWndFunc=0x7ff8ee413240, hWnd=0x1401f4, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0 [0235.988] CallWindowProcW (lpPrevWndFunc=0x7ff8ee413240, hWnd=0x1401f4, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0235.988] CallWindowProcW (lpPrevWndFunc=0x7ff8e580bef0, hWnd=0x70032, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0235.988] RedrawWindow (hWnd=0x70032, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0235.988] CallWindowProcW (lpPrevWndFunc=0x7ff8e580bef0, hWnd=0x30138, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0235.988] RedrawWindow (hWnd=0x30138, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0235.988] CallWindowProcW (lpPrevWndFunc=0x7ff8e57d60c0, hWnd=0x301ca, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0235.989] RedrawWindow (hWnd=0x301ca, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0235.989] RedrawWindow (hWnd=0x1401f4, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0235.990] GdipGetTextRenderingHint (graphics=0x1c3267f0, mode=0x3bde48) returned 0x0 [0235.995] GdipGetDC (graphics=0x1c3267f0, hdc=0x3bde28) returned 0x0 [0235.995] GetCurrentObject (hdc=0xffffffff9b01075d, type=0x1) returned 0x1b00017 [0235.995] GetCurrentObject (hdc=0xffffffff9b01075d, type=0x2) returned 0x1900010 [0235.995] GetCurrentObject (hdc=0xffffffff9b01075d, type=0x7) returned 0x16050788 [0235.995] GetCurrentObject (hdc=0xffffffff9b01075d, type=0x6) returned 0x18a0048 [0235.996] SaveDC (hdc=0xffffffff9b01075d) returned 1 [0235.998] GetTextAlign (hdc=0xffffffff9b01075d) returned 0x0 [0235.999] GetTextColor (hdc=0xffffffff9b01075d) returned 0x0 [0235.999] GetCurrentObject (hdc=0xffffffff9b01075d, type=0x6) returned 0x18a0048 [0235.999] GetObjectW (in: h=0x18a0048, c=92, pv=0x3bd960 | out: pv=0x3bd960) returned 92 [0235.999] SelectObject (hdc=0xffffffff9b01075d, h=0xffffffffbe0a0668) returned 0x18a0048 [0236.000] GetBkMode (hdc=0xffffffff9b01075d) returned 2 [0236.001] SetBkMode (hdc=0xffffffff9b01075d, mode=1) returned 2 [0236.001] DrawTextExW (in: hdc=0xffffffff9b01075d, lpchText="YOUR PC XUY BALLS xD \r\n\"Works for XUY\"\r\nYour personal files were encrypted.\r\nYou have 12 hours to decrypt the files.\r\nFor the interpretation of it came bitcoins for 400€ at this address: 12ZhVHBfxdwsstomsT6mzz18jTKN7uTc2r \r\nSend evidence photos to the address luxenburg@cock.lu \r\nThen we will send you the recovery tool via email!\r\nIf there is no payment, all data will be merged into The Internet.\r\nAny attempt to destroy this program will destroy All your decryptions.\r\nAny attempt to decrypt files will damage your files.\r\nNOTICE. Even if you fix the MBR, your PC is dead.\r\nThe whole registry is fucked and your files are infected.", cchText=634, lprc=0x3bddb8, format=0x100000, lpdtp=0x221cfd0 | out: lpchText="YOUR PC XUY BALLS xD \r\n\"Works for XUY\"\r\nYour personal files were encrypted.\r\nYou have 12 hours to decrypt the files.\r\nFor the interpretation of it came bitcoins for 400€ at this address: 12ZhVHBfxdwsstomsT6mzz18jTKN7uTc2r \r\nSend evidence photos to the address luxenburg@cock.lu \r\nThen we will send you the recovery tool via email!\r\nIf there is no payment, all data will be merged into The Internet.\r\nAny attempt to destroy this program will destroy All your decryptions.\r\nAny attempt to decrypt files will damage your files.\r\nNOTICE. Even if you fix the MBR, your PC is dead.\r\nThe whole registry is fucked and your files are infected.", lprc=0x3bddb8) returned 444 [0236.008] RestoreDC (hdc=0xffffffff9b01075d, nSavedDC=-1) returned 1 [0236.008] GdipReleaseDC (graphics=0x1c3267f0, hdc=0xffffffff9b01075d) returned 0x0 [0236.009] GdipGetDC (graphics=0x1c3267f0, hdc=0x3be058) returned 0x0 [0236.009] BitBlt (hdc=0xa0100d0, x=0, y=0, cx=1286, cy=444, hdcSrc=0xffffffff9b01075d, x1=0, y1=0, rop=0xcc0020) returned 1 [0236.009] GdipReleaseDC (graphics=0x1c3267f0, hdc=0xffffffff9b01075d) returned 0x0 [0236.010] SelectPalette (hdc=0xa0100d0, hPal=0x188000b, bForceBkgd=0) returned 0x1e080762 [0236.010] SelectObject (hdc=0xffffffff9b01075d, h=0x185000f) returned 0x16050788 [0236.010] DeleteDC (hdc=0xffffffff9b01075d) returned 1 [0236.013] GdipDeleteGraphics (graphics=0x1c3267f0) returned 0x0 [0236.013] DeleteObject (ho=0x16050788) returned 1 [0236.022] EndPaint (hWnd=0x301ca, lpPaint=0x3be038) returned 1 [0236.022] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 1 [0236.022] IsWindowUnicode (hWnd=0x1401f4) returned 1 [0236.022] GetMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x3be9d0) returned 1 [0236.022] TranslateMessage (lpMsg=0x3be9d0) returned 0 [0236.022] DispatchMessageW (lpMsg=0x3be9d0) returned 0x0 [0236.022] BeginPaint (in: hWnd=0x1401f4, lpPaint=0x3be0d8 | out: lpPaint=0x3be0d8) returned 0x3c010711 [0236.022] GetWindowPlacement (in: hWnd=0x1401f4, lpwndpl=0x3bdbc8 | out: lpwndpl=0x3bdbc8) returned 1 [0236.022] GetClientRect (in: hWnd=0x1401f4, lpRect=0x3bdae0 | out: lpRect=0x3bdae0) returned 1 [0236.022] GetWindowTextLengthW (hWnd=0x1401f4) returned 10 [0236.022] CallWindowProcW (lpPrevWndFunc=0x7ff8ee413240, hWnd=0x1401f4, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa [0236.022] GetSystemMetrics (nIndex=42) returned 0 [0236.022] GetWindowTextW (in: hWnd=0x1401f4, lpString=0x3bd840, nMaxCount=11 | out: lpString="XUYENCRYPT") returned 10 [0236.022] CallWindowProcW (lpPrevWndFunc=0x7ff8ee413240, hWnd=0x1401f4, Msg=0xd, wParam=0xb, lParam=0x3bd840) returned 0xa [0236.022] GetClientRect (in: hWnd=0x1401f4, lpRect=0x3bd8c8 | out: lpRect=0x3bd8c8) returned 1 [0236.022] GetCurrentObject (hdc=0x3c010711, type=0x1) returned 0x1b00017 [0236.023] GetCurrentObject (hdc=0x3c010711, type=0x2) returned 0x1900010 [0236.023] GetCurrentObject (hdc=0x3c010711, type=0x7) returned 0x1705054c [0236.023] GetCurrentObject (hdc=0x3c010711, type=0x6) returned 0x18a0048 [0236.023] SaveDC (hdc=0x3c010711) returned 1 [0236.023] GetNearestColor (hdc=0x3c010711, color=0xf0f0f0) returned 0xf0f0f0 [0236.023] CreateSolidBrush (color=0xf0f0f0) returned 0x7510069b [0236.023] FillRect (hDC=0x3c010711, lprc=0x3bd5b8, hbr=0x7510069b) returned 1 [0236.023] DeleteObject (ho=0x7510069b) returned 1 [0236.023] RestoreDC (hdc=0x3c010711, nSavedDC=-1) returned 1 [0236.023] SelectPalette (hdc=0x3c010711, hPal=0x1e080762, bForceBkgd=1) returned 0x188000b [0236.023] GetWindowTextLengthW (hWnd=0x1401f4) returned 10 [0236.023] CallWindowProcW (lpPrevWndFunc=0x7ff8ee413240, hWnd=0x1401f4, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa [0236.023] GetSystemMetrics (nIndex=42) returned 0 [0236.023] GetWindowTextW (in: hWnd=0x1401f4, lpString=0x3bdf70, nMaxCount=11 | out: lpString="XUYENCRYPT") returned 10 [0236.023] CallWindowProcW (lpPrevWndFunc=0x7ff8ee413240, hWnd=0x1401f4, Msg=0xd, wParam=0xb, lParam=0x3bdf70) returned 0xa [0236.023] SelectPalette (hdc=0x3c010711, hPal=0x188000b, bForceBkgd=0) returned 0x1e080762 [0236.023] EndPaint (hWnd=0x1401f4, lpPaint=0x3be078) returned 1 [0236.023] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 1 [0236.023] IsWindowUnicode (hWnd=0x70032) returned 1 [0236.024] GetMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x3be9d0) returned 1 [0236.024] TranslateMessage (lpMsg=0x3be9d0) returned 0 [0236.024] DispatchMessageW (lpMsg=0x3be9d0) returned 0x1 [0236.024] CallWindowProcW (lpPrevWndFunc=0x7ff8e580bef0, hWnd=0x70032, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x1 [0236.024] CallWindowProcW (lpPrevWndFunc=0x7ff8e580bef0, hWnd=0x70032, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x1 [0236.024] SetTextColor (hdc=0x10105c2, color=0x0) returned 0x0 [0236.024] SetBkColor (hdc=0x10105c2, color=0xffffff) returned 0xffffff [0236.024] GetWindowPlacement (in: hWnd=0x1401f4, lpwndpl=0x3bd058 | out: lpwndpl=0x3bd058) returned 1 [0236.024] GetClientRect (in: hWnd=0x1401f4, lpRect=0x3bcf70 | out: lpRect=0x3bcf70) returned 1 [0236.024] GetWindowTextLengthW (hWnd=0x1401f4) returned 10 [0236.024] CallWindowProcW (lpPrevWndFunc=0x7ff8ee413240, hWnd=0x1401f4, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa [0236.024] GetSystemMetrics (nIndex=42) returned 0 [0236.024] GetWindowTextW (in: hWnd=0x1401f4, lpString=0x3bccd0, nMaxCount=11 | out: lpString="XUYENCRYPT") returned 10 [0236.024] CallWindowProcW (lpPrevWndFunc=0x7ff8ee413240, hWnd=0x1401f4, Msg=0xd, wParam=0xb, lParam=0x3bccd0) returned 0xa [0236.024] GetClientRect (in: hWnd=0x1401f4, lpRect=0x3bcd58 | out: lpRect=0x3bcd58) returned 1 [0236.025] GetCurrentObject (hdc=0x3401077b, type=0x1) returned 0x1b00017 [0236.025] GetCurrentObject (hdc=0x3401077b, type=0x2) returned 0x1900010 [0236.025] GetCurrentObject (hdc=0x3401077b, type=0x7) returned 0x2d050749 [0236.025] GetCurrentObject (hdc=0x3401077b, type=0x6) returned 0x18a0048 [0236.025] SaveDC (hdc=0x3401077b) returned 1 [0236.025] GetNearestColor (hdc=0x3401077b, color=0xf0f0f0) returned 0xf0f0f0 [0236.025] CreateSolidBrush (color=0xf0f0f0) returned 0x7610069b [0236.025] FillRect (hDC=0x3401077b, lprc=0x3bca48, hbr=0x7610069b) returned 1 [0236.025] DeleteObject (ho=0x7610069b) returned 1 [0236.025] RestoreDC (hdc=0x3401077b, nSavedDC=-1) returned 1 [0236.025] GetWindowTextLengthW (hWnd=0x1401f4) returned 10 [0236.025] CallWindowProcW (lpPrevWndFunc=0x7ff8ee413240, hWnd=0x1401f4, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa [0236.025] GetSystemMetrics (nIndex=42) returned 0 [0236.025] GetWindowTextW (in: hWnd=0x1401f4, lpString=0x3bcc00, nMaxCount=11 | out: lpString="XUYENCRYPT") returned 10 [0236.025] CallWindowProcW (lpPrevWndFunc=0x7ff8ee413240, hWnd=0x1401f4, Msg=0xd, wParam=0xb, lParam=0x3bcc00) returned 0xa [0236.025] GetClientRect (in: hWnd=0x1401f4, lpRect=0x3bcc88 | out: lpRect=0x3bcc88) returned 1 [0236.025] GetCurrentObject (hdc=0x3401077b, type=0x1) returned 0x1b00017 [0236.025] GetCurrentObject (hdc=0x3401077b, type=0x2) returned 0x1900010 [0236.025] GetCurrentObject (hdc=0x3401077b, type=0x7) returned 0x2d050749 [0236.025] GetCurrentObject (hdc=0x3401077b, type=0x6) returned 0x18a0048 [0236.025] SaveDC (hdc=0x3401077b) returned 1 [0236.025] GetNearestColor (hdc=0x3401077b, color=0xf0f0f0) returned 0xf0f0f0 [0236.025] CreateSolidBrush (color=0xf0f0f0) returned 0x7710069b [0236.026] FillRect (hDC=0x3401077b, lprc=0x3bc978, hbr=0x7710069b) returned 1 [0236.026] DeleteObject (ho=0x7710069b) returned 1 [0236.026] RestoreDC (hdc=0x3401077b, nSavedDC=-1) returned 1 [0236.026] GetWindowTextLengthW (hWnd=0x1401f4) returned 10 [0236.026] CallWindowProcW (lpPrevWndFunc=0x7ff8ee413240, hWnd=0x1401f4, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa [0236.026] GetSystemMetrics (nIndex=42) returned 0 [0236.026] GetWindowTextW (in: hWnd=0x1401f4, lpString=0x3bcc00, nMaxCount=11 | out: lpString="XUYENCRYPT") returned 10 [0236.026] CallWindowProcW (lpPrevWndFunc=0x7ff8ee413240, hWnd=0x1401f4, Msg=0xd, wParam=0xb, lParam=0x3bcc00) returned 0xa [0236.026] CallWindowProcW (lpPrevWndFunc=0x7ff8e580bef0, hWnd=0x70032, Msg=0x14, wParam=0x10105c2, lParam=0x0) returned 0x1 [0236.027] SetTextColor (hdc=0x3501077b, color=0x0) returned 0x0 [0236.027] SetBkColor (hdc=0x3501077b, color=0xffffff) returned 0xffffff [0236.027] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 1 [0236.027] IsWindowUnicode (hWnd=0x30138) returned 1 [0236.027] GetMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x3be9d0) returned 1 [0236.027] TranslateMessage (lpMsg=0x3be9d0) returned 0 [0236.027] DispatchMessageW (lpMsg=0x3be9d0) returned 0x1 [0236.027] CallWindowProcW (lpPrevWndFunc=0x7ff8e580bef0, hWnd=0x30138, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x1 [0236.027] CallWindowProcW (lpPrevWndFunc=0x7ff8e580bef0, hWnd=0x30138, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x1 [0236.027] SetTextColor (hdc=0x3c010711, color=0x0) returned 0x0 [0236.028] SetBkColor (hdc=0x3c010711, color=0xffffff) returned 0xffffff [0236.028] GetWindowPlacement (in: hWnd=0x1401f4, lpwndpl=0x3bd058 | out: lpwndpl=0x3bd058) returned 1 [0236.028] GetClientRect (in: hWnd=0x1401f4, lpRect=0x3bcf70 | out: lpRect=0x3bcf70) returned 1 [0236.028] GetWindowTextLengthW (hWnd=0x1401f4) returned 10 [0236.028] CallWindowProcW (lpPrevWndFunc=0x7ff8ee413240, hWnd=0x1401f4, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa [0236.028] GetSystemMetrics (nIndex=42) returned 0 [0236.028] GetWindowTextW (in: hWnd=0x1401f4, lpString=0x3bccd0, nMaxCount=11 | out: lpString="XUYENCRYPT") returned 10 [0236.028] CallWindowProcW (lpPrevWndFunc=0x7ff8ee413240, hWnd=0x1401f4, Msg=0xd, wParam=0xb, lParam=0x3bccd0) returned 0xa [0236.028] GetClientRect (in: hWnd=0x1401f4, lpRect=0x3bcd58 | out: lpRect=0x3bcd58) returned 1 [0236.028] GetCurrentObject (hdc=0x3601077b, type=0x1) returned 0x1b00017 [0236.028] GetCurrentObject (hdc=0x3601077b, type=0x2) returned 0x1900010 [0236.028] GetCurrentObject (hdc=0x3601077b, type=0x7) returned 0x2d050749 [0236.028] GetCurrentObject (hdc=0x3601077b, type=0x6) returned 0x18a0048 [0236.028] SaveDC (hdc=0x3601077b) returned 1 [0236.028] GetNearestColor (hdc=0x3601077b, color=0xf0f0f0) returned 0xf0f0f0 [0236.028] CreateSolidBrush (color=0xf0f0f0) returned 0x7810069b [0236.029] FillRect (hDC=0x3601077b, lprc=0x3bca48, hbr=0x7810069b) returned 1 [0236.029] DeleteObject (ho=0x7810069b) returned 1 [0236.029] RestoreDC (hdc=0x3601077b, nSavedDC=-1) returned 1 [0236.029] GetWindowTextLengthW (hWnd=0x1401f4) returned 10 [0236.029] CallWindowProcW (lpPrevWndFunc=0x7ff8ee413240, hWnd=0x1401f4, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa [0236.029] GetSystemMetrics (nIndex=42) returned 0 [0236.029] GetWindowTextW (in: hWnd=0x1401f4, lpString=0x3bcc00, nMaxCount=11 | out: lpString="XUYENCRYPT") returned 10 [0236.029] CallWindowProcW (lpPrevWndFunc=0x7ff8ee413240, hWnd=0x1401f4, Msg=0xd, wParam=0xb, lParam=0x3bcc00) returned 0xa [0236.029] GetClientRect (in: hWnd=0x1401f4, lpRect=0x3bcc88 | out: lpRect=0x3bcc88) returned 1 [0236.029] GetCurrentObject (hdc=0x3601077b, type=0x1) returned 0x1b00017 [0236.029] GetCurrentObject (hdc=0x3601077b, type=0x2) returned 0x1900010 [0236.029] GetCurrentObject (hdc=0x3601077b, type=0x7) returned 0x2d050749 [0236.029] GetCurrentObject (hdc=0x3601077b, type=0x6) returned 0x18a0048 [0236.029] SaveDC (hdc=0x3601077b) returned 1 [0236.029] GetNearestColor (hdc=0x3601077b, color=0xf0f0f0) returned 0xf0f0f0 [0236.029] CreateSolidBrush (color=0xf0f0f0) returned 0x7910069b [0236.029] FillRect (hDC=0x3601077b, lprc=0x3bc978, hbr=0x7910069b) returned 1 [0236.029] DeleteObject (ho=0x7910069b) returned 1 [0236.029] RestoreDC (hdc=0x3601077b, nSavedDC=-1) returned 1 [0236.029] GetWindowTextLengthW (hWnd=0x1401f4) returned 10 [0236.029] CallWindowProcW (lpPrevWndFunc=0x7ff8ee413240, hWnd=0x1401f4, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa [0236.029] GetSystemMetrics (nIndex=42) returned 0 [0236.029] GetWindowTextW (in: hWnd=0x1401f4, lpString=0x3bcc00, nMaxCount=11 | out: lpString="XUYENCRYPT") returned 10 [0236.029] CallWindowProcW (lpPrevWndFunc=0x7ff8ee413240, hWnd=0x1401f4, Msg=0xd, wParam=0xb, lParam=0x3bcc00) returned 0xa [0236.030] CallWindowProcW (lpPrevWndFunc=0x7ff8e580bef0, hWnd=0x30138, Msg=0x14, wParam=0x3c010711, lParam=0x0) returned 0x1 [0236.030] SetTextColor (hdc=0x3701077b, color=0x0) returned 0x0 [0236.030] SetBkColor (hdc=0x3701077b, color=0xffffff) returned 0xffffff [0236.031] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 1 [0236.031] IsWindowUnicode (hWnd=0x301ca) returned 1 [0236.031] GetMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x3be9d0) returned 1 [0236.031] TranslateMessage (lpMsg=0x3be9d0) returned 0 [0236.031] DispatchMessageW (lpMsg=0x3be9d0) returned 0x0 [0236.031] BeginPaint (in: hWnd=0x301ca, lpPaint=0x3be098 | out: lpPaint=0x3be098) returned 0xa0100d0 [0236.031] CallWindowProcW (lpPrevWndFunc=0x7ff8e57d60c0, hWnd=0x301ca, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0236.031] SelectPalette (hdc=0xa0100d0, hPal=0x1e080762, bForceBkgd=1) returned 0x188000b [0236.031] CreateCompatibleDC (hdc=0xa0100d0) returned 0xffffffffa201075d [0236.031] GetObjectType (h=0xa0100d0) returned 0x3 [0236.031] CreateCompatibleBitmap (hdc=0xa0100d0, cx=1, cy=1) returned 0x32050779 [0236.031] GetDIBits (in: hdc=0xa0100d0, hbm=0x32050779, start=0x0, cLines=0x0, lpvBits=0x0, lpbmi=0x3bd9a8, usage=0x0 | out: lpvBits=0x0, lpbmi=0x3bd9a8) returned 1 [0236.032] GetDIBits (in: hdc=0xa0100d0, hbm=0x32050779, start=0x0, cLines=0x1, lpvBits=0x0, lpbmi=0x3bd9a8, usage=0x0 | out: lpvBits=0x0, lpbmi=0x3bd9a8) returned 1 [0236.032] DeleteObject (ho=0x32050779) returned 1 [0236.032] CreateDIBSection (in: hdc=0xa0100d0, lpbmi=0x3bda58, usage=0x0, ppvBits=0x3be018, hSection=0x0, offset=0x0 | out: ppvBits=0x3be018) returned 0x22050788 [0236.032] SelectObject (hdc=0xffffffffa201075d, h=0x22050788) returned 0x185000f [0236.032] GdipCreateFromHDC (hdc=0xffffffffa201075d, graphics=0x3bdf98) returned 0x0 [0236.032] GdipTranslateWorldTransform (graphics=0x1c3267f0, dx=0x7ff8d2e2df12, dy=0x1841457f29c8, order=0x0) returned 0x0 [0236.032] GdipSetClipRectI (graphics=0x1c3267f0, x=0, y=0, width=1286, height=444, combineMode=0x0) returned 0x0 [0236.032] GdipCreateMatrix (matrix=0x3be040) returned 0x0 [0236.032] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1ae0ec20) returned 0x0 [0236.032] GdipIsMatrixIdentity (matrix=0x1ae0ec20, result=0x3be0a8) returned 0x0 [0236.032] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x619bd0 [0236.032] GdipGetMatrixElements (matrix=0x1ae0ec20, matrixOut=0x619bd0) returned 0x0 [0236.033] LocalFree (hMem=0x619bd0) returned 0x0 [0236.033] GdipDeleteMatrix (matrix=0x1ae0ec20) returned 0x0 [0236.033] GdipCreateRegion (region=0x3be040) returned 0x0 [0236.033] GdipGetClip (graphics=0x1c3267f0, region=0x1c321730) returned 0x0 [0236.033] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x3be0a0) returned 0x0 [0236.033] GdipSaveGraphics (graphics=0x1c3267f0, state=0x3be140) returned 0x0 [0236.033] GetWindowTextLengthW (hWnd=0x301ca) returned 634 [0236.033] CallWindowProcW (lpPrevWndFunc=0x7ff8e57d60c0, hWnd=0x301ca, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x27a [0236.033] GetSystemMetrics (nIndex=42) returned 0 [0236.033] CoTaskMemAlloc (cb=0x4fa) returned 0x1b045fb0 [0236.033] GetWindowTextW (in: hWnd=0x301ca, lpString=0x1b045fb0, nMaxCount=635 | out: lpString="YOUR PC XUY BALLS xD \r\n\"Works for XUY\"\r\nYour personal files were encrypted.\r\nYou have 12 hours to decrypt the files.\r\nFor the interpretation of it came bitcoins for 400€ at this address: 12ZhVHBfxdwsstomsT6mzz18jTKN7uTc2r \r\nSend evidence photos to the address luxenburg@cock.lu \r\nThen we will send you the recovery tool via email!\r\nIf there is no payment, all data will be merged into The Internet.\r\nAny attempt to destroy this program will destroy All your decryptions.\r\nAny attempt to decrypt files will damage your files.\r\nNOTICE. Even if you fix the MBR, your PC is dead.\r\nThe whole registry is fucked and your files are infected.") returned 634 [0236.033] CallWindowProcW (lpPrevWndFunc=0x7ff8e57d60c0, hWnd=0x301ca, Msg=0xd, wParam=0x27b, lParam=0x1b045fb0) returned 0x27a [0236.033] CoTaskMemFree (pv=0x1b045fb0) [0236.033] GetClientRect (in: hWnd=0x301ca, lpRect=0x3be0e8 | out: lpRect=0x3be0e8) returned 1 [0236.033] GdipCreateRegion (region=0x3bdcd0) returned 0x0 [0236.033] GdipGetClip (graphics=0x1c3267f0, region=0x1c3217f0) returned 0x0 [0236.033] GdipCreateMatrix (matrix=0x3bdcd0) returned 0x0 [0236.033] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c3218b0) returned 0x0 [0236.033] GdipIsMatrixIdentity (matrix=0x1c3218b0, result=0x3bdd38) returned 0x0 [0236.033] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x619bd0 [0236.033] GdipGetMatrixElements (matrix=0x1c3218b0, matrixOut=0x619bd0) returned 0x0 [0236.033] LocalFree (hMem=0x619bd0) returned 0x0 [0236.034] GdipCombineRegionRegion (region=0x1c3217f0, region2=0x1c321730, combineMode=0x1) returned 0x0 [0236.034] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x619bd0 [0236.034] GdipGetMatrixElements (matrix=0x1c3218b0, matrixOut=0x619bd0) returned 0x0 [0236.034] LocalFree (hMem=0x619bd0) returned 0x0 [0236.034] GdipDeleteMatrix (matrix=0x1c3218b0) returned 0x0 [0236.034] GdipIsInfiniteRegion (region=0x1c3217f0, graphics=0x1c3267f0, result=0x3bdda0) returned 0x0 [0236.034] GdipIsInfiniteRegion (region=0x1c3217f0, graphics=0x1c3267f0, result=0x3bdd60) returned 0x0 [0236.034] GdipGetRegionHRgn (region=0x1c3217f0, graphics=0x1c3267f0, hRgn=0x3bdd60) returned 0x0 [0236.034] GdipDeleteRegion (region=0x1c3217f0) returned 0x0 [0236.034] GdipGetDC (graphics=0x1c3267f0, hdc=0x3bdda8) returned 0x0 [0236.034] GetCurrentObject (hdc=0xffffffffa201075d, type=0x1) returned 0x1b00017 [0236.034] GetCurrentObject (hdc=0xffffffffa201075d, type=0x2) returned 0x1900010 [0236.034] GetCurrentObject (hdc=0xffffffffa201075d, type=0x7) returned 0x22050788 [0236.034] GetCurrentObject (hdc=0xffffffffa201075d, type=0x6) returned 0x18a0048 [0236.034] SaveDC (hdc=0xffffffffa201075d) returned 1 [0236.034] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x26040787 [0236.034] GetClipRgn (hdc=0xffffffffa201075d, hrgn=0x26040787) returned 0 [0236.034] SelectClipRgn (hdc=0xffffffffa201075d, hrgn=0x2b040784) returned 2 [0236.034] DeleteObject (ho=0x26040787) returned 1 [0236.034] DeleteObject (ho=0x2b040784) returned 1 [0236.034] OffsetViewportOrgEx (in: hdc=0xffffffffa201075d, x=0, y=0, lppt=0x2220db8 | out: lppt=0x2220db8) returned 1 [0236.035] GetNearestColor (hdc=0xffffffffa201075d, color=0xf0f0f0) returned 0xf0f0f0 [0236.035] CreateSolidBrush (color=0xf0f0f0) returned 0x7a10069b [0236.035] FillRect (hDC=0xffffffffa201075d, lprc=0x3bddd8, hbr=0x7a10069b) returned 1 [0236.071] DeleteObject (ho=0x7a10069b) returned 1 [0236.071] RestoreDC (hdc=0xffffffffa201075d, nSavedDC=-1) returned 1 [0236.071] GdipReleaseDC (graphics=0x1c3267f0, hdc=0xffffffffa201075d) returned 0x0 [0236.072] GdipRestoreGraphics (graphics=0x1c3267f0, state=0xfffffffffdb40dbd) returned 0x0 [0236.072] GdipDeleteRegion (region=0x1c321730) returned 0x0 [0236.072] GetWindowTextLengthW (hWnd=0x301ca) returned 634 [0236.072] CallWindowProcW (lpPrevWndFunc=0x7ff8e57d60c0, hWnd=0x301ca, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x27a [0236.072] GetSystemMetrics (nIndex=42) returned 0 [0236.072] CoTaskMemAlloc (cb=0x4fa) returned 0x1b045fb0 [0236.072] GetWindowTextW (in: hWnd=0x301ca, lpString=0x1b045fb0, nMaxCount=635 | out: lpString="YOUR PC XUY BALLS xD \r\n\"Works for XUY\"\r\nYour personal files were encrypted.\r\nYou have 12 hours to decrypt the files.\r\nFor the interpretation of it came bitcoins for 400€ at this address: 12ZhVHBfxdwsstomsT6mzz18jTKN7uTc2r \r\nSend evidence photos to the address luxenburg@cock.lu \r\nThen we will send you the recovery tool via email!\r\nIf there is no payment, all data will be merged into The Internet.\r\nAny attempt to destroy this program will destroy All your decryptions.\r\nAny attempt to decrypt files will damage your files.\r\nNOTICE. Even if you fix the MBR, your PC is dead.\r\nThe whole registry is fucked and your files are infected.") returned 634 [0236.072] CallWindowProcW (lpPrevWndFunc=0x7ff8e57d60c0, hWnd=0x301ca, Msg=0xd, wParam=0x27b, lParam=0x1b045fb0) returned 0x27a [0236.072] CoTaskMemFree (pv=0x1b045fb0) [0236.072] GdipGetDC (graphics=0x1c3267f0, hdc=0x3bdf38) returned 0x0 [0236.072] GetCurrentObject (hdc=0xffffffffa201075d, type=0x1) returned 0x1b00017 [0236.072] GetCurrentObject (hdc=0xffffffffa201075d, type=0x2) returned 0x1900010 [0236.072] GetCurrentObject (hdc=0xffffffffa201075d, type=0x7) returned 0x22050788 [0236.072] GetCurrentObject (hdc=0xffffffffa201075d, type=0x6) returned 0x18a0048 [0236.072] SaveDC (hdc=0xffffffffa201075d) returned 1 [0236.072] GetNearestColor (hdc=0xffffffffa201075d, color=0x0) returned 0x0 [0236.072] RestoreDC (hdc=0xffffffffa201075d, nSavedDC=-1) returned 1 [0236.072] GdipReleaseDC (graphics=0x1c3267f0, hdc=0xffffffffa201075d) returned 0x0 [0236.072] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ff8e57b0000 [0236.074] AdjustWindowRectEx (in: lpRect=0x3bdde8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x3bdde8) returned 1 [0236.074] GdipGetTextRenderingHint (graphics=0x1c3267f0, mode=0x3bde48) returned 0x0 [0236.074] GdipGetDC (graphics=0x1c3267f0, hdc=0x3bde28) returned 0x0 [0236.074] GetCurrentObject (hdc=0xffffffffa201075d, type=0x1) returned 0x1b00017 [0236.074] GetCurrentObject (hdc=0xffffffffa201075d, type=0x2) returned 0x1900010 [0236.074] GetCurrentObject (hdc=0xffffffffa201075d, type=0x7) returned 0x22050788 [0236.074] GetCurrentObject (hdc=0xffffffffa201075d, type=0x6) returned 0x18a0048 [0236.074] SaveDC (hdc=0xffffffffa201075d) returned 1 [0236.074] GetTextAlign (hdc=0xffffffffa201075d) returned 0x0 [0236.074] GetTextColor (hdc=0xffffffffa201075d) returned 0x0 [0236.074] GetCurrentObject (hdc=0xffffffffa201075d, type=0x6) returned 0x18a0048 [0236.074] GetObjectW (in: h=0x18a0048, c=92, pv=0x3bd960 | out: pv=0x3bd960) returned 92 [0236.075] SelectObject (hdc=0xffffffffa201075d, h=0xffffffffbe0a0668) returned 0x18a0048 [0236.075] GetBkMode (hdc=0xffffffffa201075d) returned 2 [0236.075] SetBkMode (hdc=0xffffffffa201075d, mode=1) returned 2 [0236.075] DrawTextExW (in: hdc=0xffffffffa201075d, lpchText="YOUR PC XUY BALLS xD \r\n\"Works for XUY\"\r\nYour personal files were encrypted.\r\nYou have 12 hours to decrypt the files.\r\nFor the interpretation of it came bitcoins for 400€ at this address: 12ZhVHBfxdwsstomsT6mzz18jTKN7uTc2r \r\nSend evidence photos to the address luxenburg@cock.lu \r\nThen we will send you the recovery tool via email!\r\nIf there is no payment, all data will be merged into The Internet.\r\nAny attempt to destroy this program will destroy All your decryptions.\r\nAny attempt to decrypt files will damage your files.\r\nNOTICE. Even if you fix the MBR, your PC is dead.\r\nThe whole registry is fucked and your files are infected.", cchText=634, lprc=0x3bddb8, format=0x100000, lpdtp=0x2222530 | out: lpchText="YOUR PC XUY BALLS xD \r\n\"Works for XUY\"\r\nYour personal files were encrypted.\r\nYou have 12 hours to decrypt the files.\r\nFor the interpretation of it came bitcoins for 400€ at this address: 12ZhVHBfxdwsstomsT6mzz18jTKN7uTc2r \r\nSend evidence photos to the address luxenburg@cock.lu \r\nThen we will send you the recovery tool via email!\r\nIf there is no payment, all data will be merged into The Internet.\r\nAny attempt to destroy this program will destroy All your decryptions.\r\nAny attempt to decrypt files will damage your files.\r\nNOTICE. Even if you fix the MBR, your PC is dead.\r\nThe whole registry is fucked and your files are infected.", lprc=0x3bddb8) returned 444 [0236.078] RestoreDC (hdc=0xffffffffa201075d, nSavedDC=-1) returned 1 [0236.079] GdipReleaseDC (graphics=0x1c3267f0, hdc=0xffffffffa201075d) returned 0x0 [0236.079] GdipGetDC (graphics=0x1c3267f0, hdc=0x3be058) returned 0x0 [0236.079] BitBlt (hdc=0xa0100d0, x=0, y=0, cx=1286, cy=444, hdcSrc=0xffffffffa201075d, x1=0, y1=0, rop=0xcc0020) returned 1 [0236.079] GdipReleaseDC (graphics=0x1c3267f0, hdc=0xffffffffa201075d) returned 0x0 [0236.079] SelectPalette (hdc=0xa0100d0, hPal=0x188000b, bForceBkgd=0) returned 0x1e080762 [0236.079] SelectObject (hdc=0xffffffffa201075d, h=0x185000f) returned 0x22050788 [0236.079] DeleteDC (hdc=0xffffffffa201075d) returned 1 [0236.079] GdipDeleteGraphics (graphics=0x1c3267f0) returned 0x0 [0236.079] DeleteObject (ho=0x22050788) returned 1 [0236.088] EndPaint (hWnd=0x301ca, lpPaint=0x3be038) returned 1 [0236.088] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 1 [0236.088] IsWindowUnicode (hWnd=0x301cc) returned 1 [0236.088] GetMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x3be9d0) returned 1 [0236.088] TranslateMessage (lpMsg=0x3be9d0) returned 0 [0236.088] DispatchMessageW (lpMsg=0x3be9d0) returned 0x0 [0236.088] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 1 [0236.088] IsWindowUnicode (hWnd=0x301ca) returned 1 [0236.088] GetMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x3be9d0) returned 1 [0236.089] TranslateMessage (lpMsg=0x3be9d0) returned 0 [0236.089] DispatchMessageW (lpMsg=0x3be9d0) returned 0x0 [0236.089] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 1 [0236.089] IsWindowUnicode (hWnd=0x301ca) returned 1 [0236.089] GetMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x3be9d0) returned 1 [0236.089] TranslateMessage (lpMsg=0x3be9d0) returned 0 [0236.089] DispatchMessageW (lpMsg=0x3be9d0) returned 0x0 [0236.089] CallWindowProcW (lpPrevWndFunc=0x7ff8e57d60c0, hWnd=0x301ca, Msg=0x2a1, wParam=0x0, lParam=0xa50323) returned 0x0 [0236.089] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 0 [0236.089] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 0 [0236.089] WaitMessage () returned 1 [0236.557] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 1 [0236.557] IsWindowUnicode (hWnd=0x30138) returned 1 [0236.557] GetMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x3be9d0) returned 1 [0236.557] TranslateMessage (lpMsg=0x3be9d0) returned 0 [0236.557] DispatchMessageW (lpMsg=0x3be9d0) returned 0x0 [0236.557] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 0 [0236.557] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 0 [0236.557] WaitMessage () returned 1 [0236.807] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 1 [0236.807] GetMessageA (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x3be9d0) returned 1 [0236.808] TranslateMessage (lpMsg=0x3be9d0) returned 0 [0236.808] DispatchMessageA (lpMsg=0x3be9d0) returned 0x7f80 [0236.808] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 0 [0236.808] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 0 [0236.808] WaitMessage () returned 1 [0237.088] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 1 [0237.088] IsWindowUnicode (hWnd=0x30138) returned 1 [0237.088] GetMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x3be9d0) returned 1 [0237.088] TranslateMessage (lpMsg=0x3be9d0) returned 0 [0237.088] DispatchMessageW (lpMsg=0x3be9d0) returned 0x0 [0237.089] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 0 [0237.089] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 0 [0237.089] WaitMessage () returned 1 [0237.620] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 1 [0237.620] IsWindowUnicode (hWnd=0x30138) returned 1 [0237.620] GetMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x3be9d0) returned 1 [0237.620] TranslateMessage (lpMsg=0x3be9d0) returned 0 [0237.620] DispatchMessageW (lpMsg=0x3be9d0) returned 0x0 [0237.620] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 0 [0237.620] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 0 [0237.620] WaitMessage () returned 1 [0237.808] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 1 [0237.808] GetMessageA (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x3be9d0) returned 1 [0237.808] TranslateMessage (lpMsg=0x3be9d0) returned 0 [0237.808] DispatchMessageA (lpMsg=0x3be9d0) returned 0x1 [0237.808] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 0 [0237.808] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 0 [0237.808] WaitMessage () returned 1 [0238.200] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 1 [0238.200] IsWindowUnicode (hWnd=0x30138) returned 1 [0238.200] GetMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x3be9d0) returned 1 [0238.200] TranslateMessage (lpMsg=0x3be9d0) returned 0 [0238.200] DispatchMessageW (lpMsg=0x3be9d0) returned 0x0 [0238.200] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 0 [0238.200] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 0 [0238.200] WaitMessage () returned 1 [0238.713] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 1 [0238.713] IsWindowUnicode (hWnd=0x30138) returned 1 [0238.713] GetMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x3be9d0) returned 1 [0238.713] TranslateMessage (lpMsg=0x3be9d0) returned 0 [0238.713] DispatchMessageW (lpMsg=0x3be9d0) returned 0x0 [0238.714] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 0 [0238.714] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 0 [0238.714] WaitMessage () returned 1 [0239.275] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 1 [0239.275] IsWindowUnicode (hWnd=0x30138) returned 1 [0239.275] GetMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x3be9d0) returned 1 [0239.275] TranslateMessage (lpMsg=0x3be9d0) returned 0 [0239.275] DispatchMessageW (lpMsg=0x3be9d0) returned 0x0 [0239.275] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 0 [0239.276] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 0 [0239.276] WaitMessage () returned 1 [0239.788] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 1 [0239.788] IsWindowUnicode (hWnd=0x30138) returned 1 [0239.788] GetMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x3be9d0) returned 1 [0239.788] TranslateMessage (lpMsg=0x3be9d0) returned 0 [0239.788] DispatchMessageW (lpMsg=0x3be9d0) returned 0x0 [0239.788] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 0 [0239.788] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 0 [0239.788] WaitMessage () returned 1 [0240.320] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 1 [0240.320] IsWindowUnicode (hWnd=0x30138) returned 1 [0240.320] GetMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x3be9d0) returned 1 [0240.320] TranslateMessage (lpMsg=0x3be9d0) returned 0 [0240.320] DispatchMessageW (lpMsg=0x3be9d0) returned 0x0 [0240.320] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 0 [0240.320] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 0 [0240.320] WaitMessage () returned 1 [0240.857] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 1 [0240.857] IsWindowUnicode (hWnd=0x30138) returned 1 [0240.857] GetMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x3be9d0) returned 1 [0240.857] TranslateMessage (lpMsg=0x3be9d0) returned 0 [0240.857] DispatchMessageW (lpMsg=0x3be9d0) returned 0x0 [0240.857] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 0 [0240.857] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 0 [0240.857] WaitMessage () returned 1 [0241.388] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 1 [0241.388] IsWindowUnicode (hWnd=0x30138) returned 1 [0241.388] GetMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x3be9d0) returned 1 [0241.388] TranslateMessage (lpMsg=0x3be9d0) returned 0 [0241.388] DispatchMessageW (lpMsg=0x3be9d0) returned 0x0 [0241.388] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 0 [0241.388] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 0 [0241.388] WaitMessage () returned 1 [0241.921] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 1 [0241.921] IsWindowUnicode (hWnd=0x30138) returned 1 [0241.921] GetMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x3be9d0) returned 1 [0241.921] TranslateMessage (lpMsg=0x3be9d0) returned 0 [0241.921] DispatchMessageW (lpMsg=0x3be9d0) returned 0x0 [0241.921] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 0 [0241.921] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 0 [0241.921] WaitMessage () returned 1 [0242.452] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 1 [0242.452] IsWindowUnicode (hWnd=0x30138) returned 1 [0242.452] GetMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x3be9d0) returned 1 [0242.452] TranslateMessage (lpMsg=0x3be9d0) returned 0 [0242.452] DispatchMessageW (lpMsg=0x3be9d0) returned 0x0 [0242.452] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 0 [0242.452] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 0 [0242.452] WaitMessage () returned 1 [0242.984] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 1 [0242.984] IsWindowUnicode (hWnd=0x30138) returned 1 [0242.984] GetMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x3be9d0) returned 1 [0242.984] TranslateMessage (lpMsg=0x3be9d0) returned 0 [0242.984] DispatchMessageW (lpMsg=0x3be9d0) returned 0x0 [0242.984] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 0 [0242.984] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 0 [0242.984] WaitMessage () returned 1 [0243.515] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 1 [0243.515] IsWindowUnicode (hWnd=0x30138) returned 1 [0243.515] GetMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x3be9d0) returned 1 [0243.515] TranslateMessage (lpMsg=0x3be9d0) returned 0 [0243.515] DispatchMessageW (lpMsg=0x3be9d0) returned 0x0 [0243.515] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 0 [0243.515] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 0 [0243.515] WaitMessage () returned 1 [0244.089] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 1 [0244.089] IsWindowUnicode (hWnd=0x30138) returned 1 [0244.089] GetMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x3be9d0) returned 1 [0244.089] TranslateMessage (lpMsg=0x3be9d0) returned 0 [0244.089] DispatchMessageW (lpMsg=0x3be9d0) returned 0x0 [0244.089] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 0 [0244.089] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 0 [0244.089] WaitMessage () returned 1 [0244.097] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 1 [0244.098] MapWindowPoints (in: hWndFrom=0x301ca, hWndTo=0x0, lpPoints=0x3be3d0, cPoints=0x2 | out: lpPoints=0x3be3d0) returned 11141239 [0244.098] IsWindowUnicode (hWnd=0x301ca) returned 1 [0244.098] GetMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x3be9d0) returned 1 [0244.098] MapWindowPoints (in: hWndFrom=0x301ca, hWndTo=0x0, lpPoints=0x3be3e0, cPoints=0x2 | out: lpPoints=0x3be3e0) returned 11141239 [0244.098] SetCursor (hCursor=0x10003) returned 0x10003 [0244.098] TranslateMessage (lpMsg=0x3be9d0) returned 0 [0244.098] DispatchMessageW (lpMsg=0x3be9d0) returned 0x0 [0244.098] CallWindowProcW (lpPrevWndFunc=0x7ff8e57d60c0, hWnd=0x301ca, Msg=0x200, wParam=0x0, lParam=0x700409) returned 0x0 [0244.098] GetKeyState (nVirtKey=1) returned 0 [0244.098] GetKeyState (nVirtKey=2) returned 0 [0244.098] GetKeyState (nVirtKey=4) returned 0 [0244.098] GetKeyState (nVirtKey=5) returned 0 [0244.098] GetKeyState (nVirtKey=6) returned 0 [0244.098] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 0 [0244.098] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 0 [0244.098] WaitMessage () returned 1 [0244.576] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 1 [0244.576] IsWindowUnicode (hWnd=0x30138) returned 1 [0244.576] GetMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x3be9d0) returned 1 [0244.577] TranslateMessage (lpMsg=0x3be9d0) returned 0 [0244.577] DispatchMessageW (lpMsg=0x3be9d0) returned 0x0 [0244.577] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 0 [0244.577] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 0 [0244.577] WaitMessage () returned 1 [0245.108] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 1 [0245.108] IsWindowUnicode (hWnd=0x30138) returned 1 [0245.108] GetMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x3be9d0) returned 1 [0245.108] TranslateMessage (lpMsg=0x3be9d0) returned 0 [0245.108] DispatchMessageW (lpMsg=0x3be9d0) returned 0x0 [0245.108] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 0 [0245.108] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 0 [0245.108] WaitMessage () returned 1 [0245.639] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 1 [0245.639] IsWindowUnicode (hWnd=0x30138) returned 1 [0245.639] GetMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x3be9d0) returned 1 [0245.639] TranslateMessage (lpMsg=0x3be9d0) returned 0 [0245.639] DispatchMessageW (lpMsg=0x3be9d0) returned 0x0 [0245.639] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 0 [0245.639] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 0 [0245.639] WaitMessage () returned 1 [0246.198] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 1 [0246.198] IsWindowUnicode (hWnd=0x30138) returned 1 [0246.198] GetMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x3be9d0) returned 1 [0246.198] TranslateMessage (lpMsg=0x3be9d0) returned 0 [0246.198] DispatchMessageW (lpMsg=0x3be9d0) returned 0x0 [0246.198] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 0 [0246.198] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 0 [0246.198] WaitMessage () returned 1 [0246.717] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 1 [0246.717] IsWindowUnicode (hWnd=0x30138) returned 1 [0246.717] GetMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x3be9d0) returned 1 [0246.717] TranslateMessage (lpMsg=0x3be9d0) returned 0 [0246.717] DispatchMessageW (lpMsg=0x3be9d0) returned 0x0 [0246.718] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 0 [0246.718] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 0 [0246.718] WaitMessage () returned 1 [0247.248] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 1 [0247.248] IsWindowUnicode (hWnd=0x30138) returned 1 [0247.248] GetMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x3be9d0) returned 1 [0247.248] TranslateMessage (lpMsg=0x3be9d0) returned 0 [0247.248] DispatchMessageW (lpMsg=0x3be9d0) returned 0x0 [0247.249] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 0 [0247.249] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 0 [0247.249] WaitMessage () returned 1 [0247.780] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 1 [0247.780] IsWindowUnicode (hWnd=0x30138) returned 1 [0247.780] GetMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x3be9d0) returned 1 [0247.780] TranslateMessage (lpMsg=0x3be9d0) returned 0 [0247.780] DispatchMessageW (lpMsg=0x3be9d0) returned 0x0 [0247.780] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 0 [0247.780] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 0 [0247.780] WaitMessage () returned 1 [0248.311] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 1 [0248.311] IsWindowUnicode (hWnd=0x30138) returned 1 [0248.311] GetMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x3be9d0) returned 1 [0248.311] TranslateMessage (lpMsg=0x3be9d0) returned 0 [0248.311] DispatchMessageW (lpMsg=0x3be9d0) returned 0x0 [0248.311] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 0 [0248.311] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 0 [0248.311] WaitMessage () returned 1 [0248.842] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 1 [0248.842] IsWindowUnicode (hWnd=0x30138) returned 1 [0248.842] GetMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x3be9d0) returned 1 [0248.842] TranslateMessage (lpMsg=0x3be9d0) returned 0 [0248.842] DispatchMessageW (lpMsg=0x3be9d0) returned 0x0 [0248.842] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 0 [0248.842] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 0 [0248.842] WaitMessage () returned 1 [0249.373] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 1 [0249.373] IsWindowUnicode (hWnd=0x30138) returned 1 [0249.373] GetMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x3be9d0) returned 1 [0249.373] TranslateMessage (lpMsg=0x3be9d0) returned 0 [0249.373] DispatchMessageW (lpMsg=0x3be9d0) returned 0x0 [0249.373] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 0 [0249.373] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 0 [0249.373] WaitMessage () returned 1 [0249.904] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 1 [0249.904] IsWindowUnicode (hWnd=0x30138) returned 1 [0249.904] GetMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x3be9d0) returned 1 [0249.904] TranslateMessage (lpMsg=0x3be9d0) returned 0 [0249.904] DispatchMessageW (lpMsg=0x3be9d0) returned 0x0 [0249.904] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 0 [0249.904] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 0 [0249.904] WaitMessage () returned 1 [0250.435] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 1 [0250.435] IsWindowUnicode (hWnd=0x30138) returned 1 [0250.435] GetMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x3be9d0) returned 1 [0250.435] TranslateMessage (lpMsg=0x3be9d0) returned 0 [0250.435] DispatchMessageW (lpMsg=0x3be9d0) returned 0x0 [0250.435] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 0 [0250.435] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 0 [0250.435] WaitMessage () returned 1 [0250.966] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 1 [0250.966] IsWindowUnicode (hWnd=0x30138) returned 1 [0250.966] GetMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x3be9d0) returned 1 [0250.966] TranslateMessage (lpMsg=0x3be9d0) returned 0 [0250.966] DispatchMessageW (lpMsg=0x3be9d0) returned 0x0 [0250.966] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 0 [0250.966] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 0 [0250.967] WaitMessage () returned 1 [0251.497] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 1 [0251.498] IsWindowUnicode (hWnd=0x30138) returned 1 [0251.498] GetMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x3be9d0) returned 1 [0251.498] TranslateMessage (lpMsg=0x3be9d0) returned 0 [0251.498] DispatchMessageW (lpMsg=0x3be9d0) returned 0x0 [0251.498] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 0 [0251.498] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 0 [0251.498] WaitMessage () returned 1 [0252.029] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 1 [0252.029] IsWindowUnicode (hWnd=0x30138) returned 1 [0252.029] GetMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x3be9d0) returned 1 [0252.029] TranslateMessage (lpMsg=0x3be9d0) returned 0 [0252.029] DispatchMessageW (lpMsg=0x3be9d0) returned 0x0 [0252.029] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 0 [0252.029] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 0 [0252.029] WaitMessage () returned 1 [0252.560] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 1 [0252.560] IsWindowUnicode (hWnd=0x30138) returned 1 [0252.560] GetMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x3be9d0) returned 1 [0252.560] TranslateMessage (lpMsg=0x3be9d0) returned 0 [0252.560] DispatchMessageW (lpMsg=0x3be9d0) returned 0x0 [0252.560] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 0 [0252.560] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 0 [0252.560] WaitMessage () returned 1 [0253.091] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 1 [0253.091] IsWindowUnicode (hWnd=0x30138) returned 1 [0253.091] GetMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x3be9d0) returned 1 [0253.091] TranslateMessage (lpMsg=0x3be9d0) returned 0 [0253.091] DispatchMessageW (lpMsg=0x3be9d0) returned 0x0 [0253.091] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 0 [0253.091] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 0 [0253.092] WaitMessage () returned 1 [0253.622] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 1 [0253.622] IsWindowUnicode (hWnd=0x30138) returned 1 [0253.622] GetMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x3be9d0) returned 1 [0253.622] TranslateMessage (lpMsg=0x3be9d0) returned 0 [0253.622] DispatchMessageW (lpMsg=0x3be9d0) returned 0x0 [0253.623] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 0 [0253.623] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 0 [0253.623] WaitMessage () returned 1 [0254.054] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 0 [0254.054] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 1 [0254.054] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 1 [0254.054] IsWindowUnicode (hWnd=0x301ca) returned 1 [0254.054] GetMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x3be9d0) returned 1 [0254.054] TranslateMessage (lpMsg=0x3be9d0) returned 0 [0254.054] DispatchMessageW (lpMsg=0x3be9d0) returned 0x0 [0254.086] CallWindowProcW (lpPrevWndFunc=0x7ff8e57d60c0, hWnd=0x301ca, Msg=0x2a3, wParam=0x0, lParam=0x0) returned 0x0 [0254.087] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 0 [0254.087] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 0 [0254.087] WaitMessage () returned 1 [0254.161] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 1 [0254.161] IsWindowUnicode (hWnd=0x30138) returned 1 [0254.161] GetMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x3be9d0) returned 1 [0254.161] TranslateMessage (lpMsg=0x3be9d0) returned 0 [0254.161] DispatchMessageW (lpMsg=0x3be9d0) returned 0x0 [0254.161] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 0 [0254.161] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 0 [0254.161] WaitMessage () returned 1 [0254.686] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 1 [0254.686] IsWindowUnicode (hWnd=0x30138) returned 1 [0254.686] GetMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x3be9d0) returned 1 [0254.687] TranslateMessage (lpMsg=0x3be9d0) returned 0 [0254.687] DispatchMessageW (lpMsg=0x3be9d0) returned 0x0 [0254.687] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 0 [0254.687] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 0 [0254.687] WaitMessage () returned 1 [0255.217] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 1 [0255.217] IsWindowUnicode (hWnd=0x30138) returned 1 [0255.217] GetMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x3be9d0) returned 1 [0255.217] TranslateMessage (lpMsg=0x3be9d0) returned 0 [0255.217] DispatchMessageW (lpMsg=0x3be9d0) returned 0x0 [0255.218] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 0 [0255.218] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 0 [0255.218] WaitMessage () returned 1 [0255.749] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 1 [0255.749] IsWindowUnicode (hWnd=0x30138) returned 1 [0255.749] GetMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x3be9d0) returned 1 [0255.749] TranslateMessage (lpMsg=0x3be9d0) returned 0 [0255.749] DispatchMessageW (lpMsg=0x3be9d0) returned 0x0 [0255.749] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 0 [0255.749] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 0 [0255.749] WaitMessage () returned 1 [0256.280] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 1 [0256.280] IsWindowUnicode (hWnd=0x30138) returned 1 [0256.280] GetMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x3be9d0) returned 1 [0256.280] TranslateMessage (lpMsg=0x3be9d0) returned 0 [0256.280] DispatchMessageW (lpMsg=0x3be9d0) returned 0x0 [0256.280] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 0 [0256.280] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 0 [0256.280] WaitMessage () returned 1 [0256.811] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 1 [0256.811] IsWindowUnicode (hWnd=0x30138) returned 1 [0256.811] GetMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x3be9d0) returned 1 [0256.812] TranslateMessage (lpMsg=0x3be9d0) returned 0 [0256.812] DispatchMessageW (lpMsg=0x3be9d0) returned 0x0 [0256.812] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 0 [0256.812] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 0 [0256.812] WaitMessage () returned 1 [0257.342] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 1 [0257.342] IsWindowUnicode (hWnd=0x30138) returned 1 [0257.342] GetMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x3be9d0) returned 1 [0257.343] TranslateMessage (lpMsg=0x3be9d0) returned 0 [0257.343] DispatchMessageW (lpMsg=0x3be9d0) returned 0x0 [0257.343] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 0 [0257.343] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 0 [0257.343] WaitMessage () returned 1 [0257.874] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 1 [0257.874] IsWindowUnicode (hWnd=0x30138) returned 1 [0257.874] GetMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x3be9d0) returned 1 [0257.874] TranslateMessage (lpMsg=0x3be9d0) returned 0 [0257.874] DispatchMessageW (lpMsg=0x3be9d0) returned 0x0 [0257.874] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 0 [0257.874] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 0 [0257.874] WaitMessage () returned 1 [0258.405] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 1 [0258.405] IsWindowUnicode (hWnd=0x30138) returned 1 [0258.405] GetMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x3be9d0) returned 1 [0258.405] TranslateMessage (lpMsg=0x3be9d0) returned 0 [0258.405] DispatchMessageW (lpMsg=0x3be9d0) returned 0x0 [0258.405] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 0 [0258.405] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 0 [0258.405] WaitMessage () returned 1 [0258.936] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 1 [0258.936] IsWindowUnicode (hWnd=0x30138) returned 1 [0258.936] GetMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x3be9d0) returned 1 [0258.936] TranslateMessage (lpMsg=0x3be9d0) returned 0 [0258.936] DispatchMessageW (lpMsg=0x3be9d0) returned 0x0 [0258.936] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 0 [0258.937] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 0 [0258.937] WaitMessage () returned 1 [0259.475] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 1 [0259.475] IsWindowUnicode (hWnd=0x30138) returned 1 [0259.475] GetMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x3be9d0) returned 1 [0259.475] TranslateMessage (lpMsg=0x3be9d0) returned 0 [0259.475] DispatchMessageW (lpMsg=0x3be9d0) returned 0x0 [0259.476] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 0 [0259.476] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 0 [0259.476] WaitMessage () returned 1 [0260.006] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 1 [0260.007] IsWindowUnicode (hWnd=0x30138) returned 1 [0260.007] GetMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x3be9d0) returned 1 [0260.007] TranslateMessage (lpMsg=0x3be9d0) returned 0 [0260.007] DispatchMessageW (lpMsg=0x3be9d0) returned 0x0 [0260.007] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 0 [0260.007] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 0 [0260.007] WaitMessage () returned 1 [0260.528] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 1 [0260.528] IsWindowUnicode (hWnd=0x30138) returned 1 [0260.528] GetMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x3be9d0) returned 1 [0260.528] TranslateMessage (lpMsg=0x3be9d0) returned 0 [0260.528] DispatchMessageW (lpMsg=0x3be9d0) returned 0x0 [0260.528] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 0 [0260.528] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 0 [0260.528] WaitMessage () returned 1 [0261.059] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 1 [0261.059] IsWindowUnicode (hWnd=0x30138) returned 1 [0261.059] GetMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x3be9d0) returned 1 [0261.059] TranslateMessage (lpMsg=0x3be9d0) returned 0 [0261.059] DispatchMessageW (lpMsg=0x3be9d0) returned 0x0 [0261.059] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 0 [0261.059] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 0 [0261.059] WaitMessage () returned 1 [0261.591] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 1 [0261.591] IsWindowUnicode (hWnd=0x30138) returned 1 [0261.591] GetMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x3be9d0) returned 1 [0261.591] TranslateMessage (lpMsg=0x3be9d0) returned 0 [0261.591] DispatchMessageW (lpMsg=0x3be9d0) returned 0x0 [0261.591] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 0 [0261.592] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 0 [0261.592] WaitMessage () returned 1 [0262.121] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 1 [0262.121] IsWindowUnicode (hWnd=0x30138) returned 1 [0262.121] GetMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x3be9d0) returned 1 [0262.122] TranslateMessage (lpMsg=0x3be9d0) returned 0 [0262.122] DispatchMessageW (lpMsg=0x3be9d0) returned 0x0 [0262.122] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 0 [0262.122] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 0 [0262.122] WaitMessage () returned 1 [0262.653] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 1 [0262.653] IsWindowUnicode (hWnd=0x30138) returned 1 [0262.653] GetMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x3be9d0) returned 1 [0262.653] TranslateMessage (lpMsg=0x3be9d0) returned 0 [0262.653] DispatchMessageW (lpMsg=0x3be9d0) returned 0x0 [0262.653] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 0 [0262.653] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 0 [0262.653] WaitMessage () returned 1 [0263.196] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 1 [0263.196] IsWindowUnicode (hWnd=0x30138) returned 1 [0263.196] GetMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x3be9d0) returned 1 [0263.196] TranslateMessage (lpMsg=0x3be9d0) returned 0 [0263.196] DispatchMessageW (lpMsg=0x3be9d0) returned 0x0 [0263.196] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 0 [0263.196] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 0 [0263.196] WaitMessage () returned 1 [0263.715] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 1 [0263.715] IsWindowUnicode (hWnd=0x30138) returned 1 [0263.715] GetMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x3be9d0) returned 1 [0263.715] TranslateMessage (lpMsg=0x3be9d0) returned 0 [0263.715] DispatchMessageW (lpMsg=0x3be9d0) returned 0x0 [0263.716] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 0 [0263.716] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 0 [0263.716] WaitMessage () returned 1 [0264.116] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 1 [0264.116] MapWindowPoints (in: hWndFrom=0x301ca, hWndTo=0x0, lpPoints=0x3be3d0, cPoints=0x2 | out: lpPoints=0x3be3d0) returned 11141239 [0264.116] IsWindowUnicode (hWnd=0x301ca) returned 1 [0264.116] GetMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x3be9d0) returned 1 [0264.116] MapWindowPoints (in: hWndFrom=0x301ca, hWndTo=0x0, lpPoints=0x3be3e0, cPoints=0x2 | out: lpPoints=0x3be3e0) returned 11141239 [0264.116] SetCursor (hCursor=0x10003) returned 0x10003 [0264.116] TranslateMessage (lpMsg=0x3be9d0) returned 0 [0264.116] DispatchMessageW (lpMsg=0x3be9d0) returned 0x0 [0264.116] _TrackMouseEvent (in: lpEventTrack=0x2218bd8 | out: lpEventTrack=0x2218bd8) returned 1 [0264.117] SendMessageW (hWnd=0x301ca, Msg=0xc167, wParam=0x0, lParam=0x0) returned 0x0 [0264.117] CallWindowProcW (lpPrevWndFunc=0x7ff8e57d60c0, hWnd=0x301ca, Msg=0xc167, wParam=0x0, lParam=0x0) returned 0x0 [0264.117] CallWindowProcW (lpPrevWndFunc=0x7ff8e57d60c0, hWnd=0x301ca, Msg=0x200, wParam=0x0, lParam=0x15f0136) returned 0x0 [0264.117] GetKeyState (nVirtKey=1) returned 0 [0264.117] GetKeyState (nVirtKey=2) returned 0 [0264.117] GetKeyState (nVirtKey=4) returned 0 [0264.117] GetKeyState (nVirtKey=5) returned 0 [0264.117] GetKeyState (nVirtKey=6) returned 0 [0264.117] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 0 [0264.117] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 0 [0264.117] WaitMessage () returned 1 [0264.219] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 1 [0264.219] IsWindowUnicode (hWnd=0x301ca) returned 1 [0264.219] GetMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x3be9d0) returned 1 [0264.219] TranslateMessage (lpMsg=0x3be9d0) returned 0 [0264.219] DispatchMessageW (lpMsg=0x3be9d0) returned 0x0 [0264.220] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 1 [0264.220] IsWindowUnicode (hWnd=0x301ca) returned 1 [0264.220] GetMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x3be9d0) returned 1 [0264.220] TranslateMessage (lpMsg=0x3be9d0) returned 0 [0264.220] DispatchMessageW (lpMsg=0x3be9d0) returned 0x0 [0264.220] CallWindowProcW (lpPrevWndFunc=0x7ff8e57d60c0, hWnd=0x301ca, Msg=0x2a1, wParam=0x0, lParam=0x15f0136) returned 0x0 [0264.220] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 0 [0264.220] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 0 [0264.220] WaitMessage () returned 1 [0264.249] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 1 [0264.249] IsWindowUnicode (hWnd=0x30138) returned 1 [0264.249] GetMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x3be9d0) returned 1 [0264.249] TranslateMessage (lpMsg=0x3be9d0) returned 0 [0264.249] DispatchMessageW (lpMsg=0x3be9d0) returned 0x0 [0264.249] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 0 [0264.249] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 0 [0264.249] WaitMessage () returned 1 [0264.782] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 1 [0264.782] IsWindowUnicode (hWnd=0x30138) returned 1 [0264.782] GetMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x3be9d0) returned 1 [0264.782] TranslateMessage (lpMsg=0x3be9d0) returned 0 [0264.782] DispatchMessageW (lpMsg=0x3be9d0) returned 0x0 [0264.782] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 0 [0264.782] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 0 [0264.782] WaitMessage () returned 1 [0265.310] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 1 [0265.310] IsWindowUnicode (hWnd=0x30138) returned 1 [0265.310] GetMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x3be9d0) returned 1 [0265.310] TranslateMessage (lpMsg=0x3be9d0) returned 0 [0265.310] DispatchMessageW (lpMsg=0x3be9d0) returned 0x0 [0265.310] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 0 [0265.310] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 0 [0265.310] WaitMessage () returned 1 [0265.841] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 1 [0265.841] IsWindowUnicode (hWnd=0x30138) returned 1 [0265.841] GetMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x3be9d0) returned 1 [0265.842] TranslateMessage (lpMsg=0x3be9d0) returned 0 [0265.842] DispatchMessageW (lpMsg=0x3be9d0) returned 0x0 [0265.842] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 0 [0265.842] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 0 [0265.842] WaitMessage () returned 1 [0266.373] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 1 [0266.373] IsWindowUnicode (hWnd=0x30138) returned 1 [0266.373] GetMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x3be9d0) returned 1 [0266.373] TranslateMessage (lpMsg=0x3be9d0) returned 0 [0266.373] DispatchMessageW (lpMsg=0x3be9d0) returned 0x0 [0266.373] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 0 [0266.373] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 0 [0266.373] WaitMessage () returned 1 [0266.904] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 1 [0266.904] IsWindowUnicode (hWnd=0x30138) returned 1 [0266.904] GetMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x3be9d0) returned 1 [0266.904] TranslateMessage (lpMsg=0x3be9d0) returned 0 [0266.904] DispatchMessageW (lpMsg=0x3be9d0) returned 0x0 [0266.904] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 0 [0266.904] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 0 [0266.904] WaitMessage () returned 1 [0267.435] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 1 [0267.435] IsWindowUnicode (hWnd=0x30138) returned 1 [0267.435] GetMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x3be9d0) returned 1 [0267.435] TranslateMessage (lpMsg=0x3be9d0) returned 0 [0267.435] DispatchMessageW (lpMsg=0x3be9d0) returned 0x0 [0267.435] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 0 [0267.435] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 0 [0267.435] WaitMessage () returned 1 [0267.975] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 1 [0267.976] IsWindowUnicode (hWnd=0x30138) returned 1 [0267.976] GetMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x3be9d0) returned 1 [0267.976] TranslateMessage (lpMsg=0x3be9d0) returned 0 [0267.976] DispatchMessageW (lpMsg=0x3be9d0) returned 0x0 [0267.976] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 0 [0267.976] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 0 [0267.976] WaitMessage () returned 1 [0268.498] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 1 [0268.498] IsWindowUnicode (hWnd=0x30138) returned 1 [0268.498] GetMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x3be9d0) returned 1 [0268.498] TranslateMessage (lpMsg=0x3be9d0) returned 0 [0268.498] DispatchMessageW (lpMsg=0x3be9d0) returned 0x0 [0268.498] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 0 [0268.498] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 0 [0268.498] WaitMessage () returned 1 [0269.029] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 1 [0269.029] IsWindowUnicode (hWnd=0x30138) returned 1 [0269.029] GetMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x3be9d0) returned 1 [0269.029] TranslateMessage (lpMsg=0x3be9d0) returned 0 [0269.029] DispatchMessageW (lpMsg=0x3be9d0) returned 0x0 [0269.029] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 0 [0269.029] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 0 [0269.029] WaitMessage () returned 1 [0269.559] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 1 [0269.560] IsWindowUnicode (hWnd=0x30138) returned 1 [0269.560] GetMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x3be9d0) returned 1 [0269.560] TranslateMessage (lpMsg=0x3be9d0) returned 0 [0269.560] DispatchMessageW (lpMsg=0x3be9d0) returned 0x0 [0269.560] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 0 [0269.560] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 0 [0269.560] WaitMessage () returned 1 [0270.089] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 1 [0270.089] IsWindowUnicode (hWnd=0x30138) returned 1 [0270.089] GetMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x3be9d0) returned 1 [0270.090] TranslateMessage (lpMsg=0x3be9d0) returned 0 [0270.090] DispatchMessageW (lpMsg=0x3be9d0) returned 0x0 [0270.090] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 0 [0270.090] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 0 [0270.090] WaitMessage () returned 1 [0270.622] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 1 [0270.622] IsWindowUnicode (hWnd=0x30138) returned 1 [0270.622] GetMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x3be9d0) returned 1 [0270.622] TranslateMessage (lpMsg=0x3be9d0) returned 0 [0270.622] DispatchMessageW (lpMsg=0x3be9d0) returned 0x0 [0270.622] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 0 [0270.622] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 0 [0270.622] WaitMessage () returned 1 [0271.180] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 1 [0271.180] IsWindowUnicode (hWnd=0x30138) returned 1 [0271.180] GetMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x3be9d0) returned 1 [0271.180] TranslateMessage (lpMsg=0x3be9d0) returned 0 [0271.180] DispatchMessageW (lpMsg=0x3be9d0) returned 0x0 [0271.181] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 0 [0271.181] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 0 [0271.181] WaitMessage () returned 1 [0271.700] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 1 [0271.700] IsWindowUnicode (hWnd=0x30138) returned 1 [0271.700] GetMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x3be9d0) returned 1 [0271.700] TranslateMessage (lpMsg=0x3be9d0) returned 0 [0271.700] DispatchMessageW (lpMsg=0x3be9d0) returned 0x0 [0271.700] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 0 [0271.700] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 0 [0271.700] WaitMessage () returned 1 [0272.231] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 1 [0272.231] IsWindowUnicode (hWnd=0x30138) returned 1 [0272.231] GetMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x3be9d0) returned 1 [0272.231] TranslateMessage (lpMsg=0x3be9d0) returned 0 [0272.231] DispatchMessageW (lpMsg=0x3be9d0) returned 0x0 [0272.232] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 0 [0272.232] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 0 [0272.232] WaitMessage () returned 1 [0273.212] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 1 [0273.212] IsWindowUnicode (hWnd=0x30138) returned 1 [0273.212] GetMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x3be9d0) returned 1 [0273.212] TranslateMessage (lpMsg=0x3be9d0) returned 0 [0273.212] DispatchMessageW (lpMsg=0x3be9d0) returned 0x0 [0273.214] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 0 [0273.214] PeekMessageW (in: lpMsg=0x3be9d0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3be9d0) returned 0 [0273.215] WaitMessage () Thread: id = 2 os_tid = 0xe10 Thread: id = 3 os_tid = 0xe1c Thread: id = 4 os_tid = 0xe20 [0038.918] CoGetContextToken (in: pToken=0x1a69f6d0 | out: pToken=0x1a69f6d0) returned 0x800401f0 [0038.919] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0038.919] RoInitialize () returned 0x1 [0038.919] RoUninitialize () returned 0x0 [0046.117] CloseHandle (hObject=0x434) returned 1 Thread: id = 5 os_tid = 0xe54 Thread: id = 6 os_tid = 0xe58 Thread: id = 7 os_tid = 0xe5c Thread: id = 8 os_tid = 0xe60 Thread: id = 9 os_tid = 0xe64 Thread: id = 510 os_tid = 0x9ac Thread: id = 511 os_tid = 0xddc Process: id = "2" image_name = "schtasks.exe" filename = "c:\\windows\\system32\\schtasks.exe" page_root = "0x60581000" os_pid = "0xe68" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0xe08" cmd_line = "\"C:\\Windows\\System32\\schtasks.exe\" /create /tn \\Windows\\Startup /tr C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XyuEncrypt.exe /st 00:00 /du 9999:59 /sc daily /ri 3 /f" cur_dir = "C:\\Users\\CIiHmnxMn6Ps\\Desktop\\" os_username = "LHNIWSJ\\CIiHmnxMn6Ps" os_groups = "LHNIWSJ\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:00014ee5" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 261 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 262 start_va = 0x132b60000 end_va = 0x132b7ffff entry_point = 0x0 region_type = private name = "private_0x0000000132b60000" filename = "" Region: id = 263 start_va = 0x132b80000 end_va = 0x132b93fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000132b80000" filename = "" Region: id = 264 start_va = 0x132ba0000 end_va = 0x132c1ffff entry_point = 0x0 region_type = private name = "private_0x0000000132ba0000" filename = "" Region: id = 265 start_va = 0x132c20000 end_va = 0x132c23fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000132c20000" filename = "" Region: id = 266 start_va = 0x132c30000 end_va = 0x132c30fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000132c30000" filename = "" Region: id = 267 start_va = 0x132c40000 end_va = 0x132c41fff entry_point = 0x0 region_type = private name = "private_0x0000000132c40000" filename = "" Region: id = 268 start_va = 0x7df5ff8e0000 end_va = 0x7ff5ff8dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007df5ff8e0000" filename = "" Region: id = 269 start_va = 0x7ff6aac90000 end_va = 0x7ff6aacb2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007ff6aac90000" filename = "" Region: id = 270 start_va = 0x7ff6aacbd000 end_va = 0x7ff6aacbefff entry_point = 0x0 region_type = private name = "private_0x00007ff6aacbd000" filename = "" Region: id = 271 start_va = 0x7ff6aacbf000 end_va = 0x7ff6aacbffff entry_point = 0x0 region_type = private name = "private_0x00007ff6aacbf000" filename = "" Region: id = 272 start_va = 0x7ff6ab8c0000 end_va = 0x7ff6ab8fcfff entry_point = 0x7ff6ab8c0000 region_type = mapped_file name = "schtasks.exe" filename = "\\Windows\\System32\\schtasks.exe" (normalized: "c:\\windows\\system32\\schtasks.exe") Region: id = 273 start_va = 0x7ff8ee380000 end_va = 0x7ff8ee541fff entry_point = 0x7ff8ee380000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 274 start_va = 0x132e30000 end_va = 0x132f2ffff entry_point = 0x0 region_type = private name = "private_0x0000000132e30000" filename = "" Region: id = 275 start_va = 0x7ff8eb870000 end_va = 0x7ff8eba4cfff entry_point = 0x7ff8eb870000 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 276 start_va = 0x7ff8ee2d0000 end_va = 0x7ff8ee37cfff entry_point = 0x7ff8ee2d0000 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 345 start_va = 0x132b60000 end_va = 0x132b6ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000132b60000" filename = "" Region: id = 346 start_va = 0x132b70000 end_va = 0x132b76fff entry_point = 0x0 region_type = private name = "private_0x0000000132b70000" filename = "" Region: id = 347 start_va = 0x132c50000 end_va = 0x132d0dfff entry_point = 0x132c50000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 348 start_va = 0x132d10000 end_va = 0x132d8ffff entry_point = 0x0 region_type = private name = "private_0x0000000132d10000" filename = "" Region: id = 349 start_va = 0x132fd0000 end_va = 0x132fdffff entry_point = 0x0 region_type = private name = "private_0x0000000132fd0000" filename = "" Region: id = 350 start_va = 0x7ff6aab90000 end_va = 0x7ff6aac8ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007ff6aab90000" filename = "" Region: id = 351 start_va = 0x7ff6aacbb000 end_va = 0x7ff6aacbcfff entry_point = 0x0 region_type = private name = "private_0x00007ff6aacbb000" filename = "" Region: id = 352 start_va = 0x7ff8ebb30000 end_va = 0x7ff8ebbedfff entry_point = 0x7ff8ebb30000 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll") Region: id = 353 start_va = 0x7ff8ec450000 end_va = 0x7ff8ec575fff entry_point = 0x7ff8ec450000 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 354 start_va = 0x7ff8edd60000 end_va = 0x7ff8edfdbfff entry_point = 0x7ff8edd60000 region_type = mapped_file name = "combase.dll" filename = "\\Windows\\System32\\combase.dll" (normalized: "c:\\windows\\system32\\combase.dll") Region: id = 355 start_va = 0x7ff8ee0b0000 end_va = 0x7ff8ee14cfff entry_point = 0x7ff8ee0b0000 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 356 start_va = 0x132d90000 end_va = 0x132d96fff entry_point = 0x0 region_type = private name = "private_0x0000000132d90000" filename = "" Region: id = 357 start_va = 0x132da0000 end_va = 0x132db2fff entry_point = 0x132da0000 region_type = mapped_file name = "schtasks.exe.mui" filename = "\\Windows\\System32\\en-US\\schtasks.exe.mui" (normalized: "c:\\windows\\system32\\en-us\\schtasks.exe.mui") Region: id = 358 start_va = 0x132fe0000 end_va = 0x133316fff entry_point = 0x132fe0000 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 359 start_va = 0x133320000 end_va = 0x1333f5fff entry_point = 0x133320000 region_type = mapped_file name = "rpcss.dll" filename = "\\Windows\\System32\\rpcss.dll" (normalized: "c:\\windows\\system32\\rpcss.dll") Region: id = 360 start_va = 0x7ff8eae20000 end_va = 0x7ff8eae2efff entry_point = 0x7ff8eae20000 region_type = mapped_file name = "kernel.appcore.dll" filename = "\\Windows\\System32\\kernel.appcore.dll" (normalized: "c:\\windows\\system32\\kernel.appcore.dll") Region: id = 361 start_va = 0x7ff8eac00000 end_va = 0x7ff8eac6afff entry_point = 0x7ff8eac00000 region_type = mapped_file name = "bcryptprimitives.dll" filename = "\\Windows\\System32\\bcryptprimitives.dll" (normalized: "c:\\windows\\system32\\bcryptprimitives.dll") Region: id = 362 start_va = 0x7ff8ec240000 end_va = 0x7ff8ec29afff entry_point = 0x7ff8ec240000 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 363 start_va = 0x132dc0000 end_va = 0x132dc0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000132dc0000" filename = "" Region: id = 364 start_va = 0x7ff8edb10000 end_va = 0x7ff8edbb4fff entry_point = 0x7ff8edb10000 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\System32\\clbcatq.dll" (normalized: "c:\\windows\\system32\\clbcatq.dll") Region: id = 365 start_va = 0x132dd0000 end_va = 0x132dd0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000132dd0000" filename = "" Region: id = 366 start_va = 0x7ff8e7f80000 end_va = 0x7ff8e803ffff entry_point = 0x7ff8e7f80000 region_type = mapped_file name = "taskschd.dll" filename = "\\Windows\\System32\\taskschd.dll" (normalized: "c:\\windows\\system32\\taskschd.dll") Region: id = 367 start_va = 0x7ff8ea9d0000 end_va = 0x7ff8ea9fbfff entry_point = 0x7ff8ea9d0000 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\System32\\sspicli.dll" (normalized: "c:\\windows\\system32\\sspicli.dll") Region: id = 368 start_va = 0x7ff8e6330000 end_va = 0x7ff8e6365fff entry_point = 0x7ff8e6330000 region_type = mapped_file name = "xmllite.dll" filename = "\\Windows\\System32\\xmllite.dll" (normalized: "c:\\windows\\system32\\xmllite.dll") Thread: id = 10 os_tid = 0xe6c [0044.817] GetModuleHandleW (lpModuleName=0x0) returned 0x7ff6ab8c0000 [0044.817] __set_app_type (_Type=0x1) [0044.817] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x7ff6ab8e48d0) returned 0x0 [0044.817] __wgetmainargs (in: _Argc=0x7ff6ab8f7ff8, _Argv=0x7ff6ab8f8000, _Env=0x7ff6ab8f8008, _DoWildCard=0, _StartInfo=0x7ff6ab8f8014 | out: _Argc=0x7ff6ab8f7ff8, _Argv=0x7ff6ab8f8000, _Env=0x7ff6ab8f8008) returned 0 [0044.817] _onexit (_Func=0x7ff6ab8e7ec0) returned 0x7ff6ab8e7ec0 [0044.818] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0044.818] CsrIdentifyAlertableThread () returned 0x0 [0044.818] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.818] VerSetConditionMask (ConditionMask=0x0, TypeMask=0x2, Condition=0x3) returned 0x8000000000000018 [0044.818] VerSetConditionMask (ConditionMask=0x8000000000000018, TypeMask=0x1, Condition=0x3) returned 0x800000000000001b [0044.818] VerSetConditionMask (ConditionMask=0x800000000000001b, TypeMask=0x20, Condition=0x3) returned 0x800000000001801b [0044.818] RtlVerifyVersionInfo (VersionInfo=0x132c1f5e0, TypeMask=0x3, ConditionMask=0x800000000001801b) returned 0x0 [0044.818] lstrlenW (lpString="") returned 0 [0044.819] SetThreadUILanguage (LangId=0x0) returned 0x409 [0044.824] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.824] _memicmp (_Buf1=0x132e339b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.824] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x132e39600, nSize=0x104 | out: lpFilename="C:\\Windows\\System32\\schtasks.exe" (normalized: "c:\\windows\\system32\\schtasks.exe")) returned 0x20 [0044.824] GetFileVersionInfoSizeExW (in: dwFlags=0x1, lpwstrFilename="C:\\Windows\\System32\\schtasks.exe", lpdwHandle=0x132c1f738 | out: lpdwHandle=0x132c1f738) returned 0x76c [0044.832] GetFileVersionInfoExW (in: dwFlags=0x3, lpwstrFilename="C:\\Windows\\System32\\schtasks.exe", dwHandle=0x0, dwLen=0x776, lpData=0x132e3ab40 | out: lpData=0x132e3ab40) returned 1 [0044.832] VerQueryValueW (in: pBlock=0x132e3ab40, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x132c1f6d0, puLen=0x132c1f730 | out: lplpBuffer=0x132c1f6d0*=0x132e3aef0, puLen=0x132c1f730) returned 1 [0044.834] _memicmp (_Buf1=0x132e339b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.834] _vsnwprintf (in: _Buffer=0x132e39600, _BufferCount=0x3f, _Format="\\StringFileInfo\\%04x%04x\\InternalName", _ArgList=0x132c1f6a8 | out: _Buffer="\\StringFileInfo\\040904b0\\InternalName") returned 37 [0044.834] VerQueryValueW (in: pBlock=0x132e3ab40, lpSubBlock="\\StringFileInfo\\040904b0\\InternalName", lplpBuffer=0x132c1f6c0, puLen=0x132c1f728 | out: lplpBuffer=0x132c1f6c0*=0x132e3ad18, puLen=0x132c1f728) returned 1 [0044.834] lstrlenW (lpString="schtasks.exe") returned 12 [0044.834] lstrlenW (lpString="schtasks.exe") returned 12 [0044.834] lstrlenW (lpString=".EXE") returned 4 [0044.834] StrStrIW (lpFirst="schtasks.exe", lpSrch=".EXE") returned=".exe" [0044.834] lstrlenW (lpString="schtasks.exe") returned 12 [0044.834] lstrlenW (lpString=".EXE") returned 4 [0044.834] _memicmp (_Buf1=0x132e339b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.834] lstrlenW (lpString="schtasks") returned 8 [0044.835] _memicmp (_Buf1=0x132e34790, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.835] _memicmp (_Buf1=0x132e34370, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.835] LoadStringW (in: hInstance=0x0, uID=0x15ed, lpBuffer=0x132e3be10, cchBufferMax=256 | out: lpBuffer="Type \"%s /?\" for usage.") returned 0x17 [0044.835] lstrlenW (lpString="Type \"%s /?\" for usage.") returned 23 [0044.835] _vsnwprintf (in: _Buffer=0x132e342c0, _BufferCount=0x4f, _Format="Type \"%s /?\" for usage.", _ArgList=0x132c1f6a8 | out: _Buffer="Type \"SCHTASKS /?\" for usage.") returned 29 [0044.835] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.835] GetThreadLocale () returned 0x409 [0044.835] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0044.835] lstrlenW (lpString="?") returned 1 [0044.835] GetThreadLocale () returned 0x409 [0044.835] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0044.835] lstrlenW (lpString="create") returned 6 [0044.835] GetThreadLocale () returned 0x409 [0044.835] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0044.835] lstrlenW (lpString="delete") returned 6 [0044.836] GetThreadLocale () returned 0x409 [0044.836] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0044.836] lstrlenW (lpString="query") returned 5 [0044.836] GetThreadLocale () returned 0x409 [0044.836] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0044.836] lstrlenW (lpString="change") returned 6 [0044.836] GetThreadLocale () returned 0x409 [0044.836] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0044.836] lstrlenW (lpString="run") returned 3 [0044.836] GetThreadLocale () returned 0x409 [0044.836] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0044.836] lstrlenW (lpString="end") returned 3 [0044.836] GetThreadLocale () returned 0x409 [0044.836] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0044.836] lstrlenW (lpString="showsid") returned 7 [0044.836] GetThreadLocale () returned 0x409 [0044.836] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0044.836] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.836] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.836] lstrlenW (lpString="/create") returned 7 [0044.836] lstrlenW (lpString="-/") returned 2 [0044.836] StrChrIW (lpStart="-/", wMatch=0x2f) returned="/" [0044.836] lstrlenW (lpString="?") returned 1 [0044.836] lstrlenW (lpString="?") returned 1 [0044.836] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.836] lstrlenW (lpString="create") returned 6 [0044.836] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.836] _vsnwprintf (in: _Buffer=0x132e307d0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x132c1f6b8 | out: _Buffer="|?|") returned 3 [0044.836] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x9, _Format="|%s|", _ArgList=0x132c1f6b8 | out: _Buffer="|create|") returned 8 [0044.836] lstrlenW (lpString="|?|") returned 3 [0044.836] lstrlenW (lpString="|create|") returned 8 [0044.836] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.836] lstrlenW (lpString="create") returned 6 [0044.836] lstrlenW (lpString="create") returned 6 [0044.836] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.836] lstrlenW (lpString="create") returned 6 [0044.836] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.837] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0x9, _Format="|%s|", _ArgList=0x132c1f6b8 | out: _Buffer="|create|") returned 8 [0044.837] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x9, _Format="|%s|", _ArgList=0x132c1f6b8 | out: _Buffer="|create|") returned 8 [0044.837] lstrlenW (lpString="|create|") returned 8 [0044.837] lstrlenW (lpString="|create|") returned 8 [0044.837] StrStrIW (lpFirst="|create|", lpSrch="|create|") returned="|create|" [0044.837] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.837] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.837] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.837] lstrlenW (lpString="/tn") returned 3 [0044.837] lstrlenW (lpString="-/") returned 2 [0044.837] StrChrIW (lpStart="-/", wMatch=0x2f) returned="/" [0044.837] lstrlenW (lpString="?") returned 1 [0044.837] lstrlenW (lpString="?") returned 1 [0044.837] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.837] lstrlenW (lpString="tn") returned 2 [0044.837] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.837] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x132c1f6b8 | out: _Buffer="|?|") returned 3 [0044.837] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1f6b8 | out: _Buffer="|tn|") returned 4 [0044.837] lstrlenW (lpString="|?|") returned 3 [0044.837] lstrlenW (lpString="|tn|") returned 4 [0044.837] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.837] lstrlenW (lpString="create") returned 6 [0044.837] lstrlenW (lpString="create") returned 6 [0044.837] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.837] lstrlenW (lpString="tn") returned 2 [0044.837] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.837] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0x9, _Format="|%s|", _ArgList=0x132c1f6b8 | out: _Buffer="|create|") returned 8 [0044.837] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1f6b8 | out: _Buffer="|tn|") returned 4 [0044.837] lstrlenW (lpString="|create|") returned 8 [0044.837] lstrlenW (lpString="|tn|") returned 4 [0044.837] StrStrIW (lpFirst="|create|", lpSrch="|tn|") returned 0x0 [0044.837] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.837] lstrlenW (lpString="delete") returned 6 [0044.837] lstrlenW (lpString="delete") returned 6 [0044.837] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.837] lstrlenW (lpString="tn") returned 2 [0044.837] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.837] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0x9, _Format="|%s|", _ArgList=0x132c1f6b8 | out: _Buffer="|delete|") returned 8 [0044.837] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1f6b8 | out: _Buffer="|tn|") returned 4 [0044.837] lstrlenW (lpString="|delete|") returned 8 [0044.837] lstrlenW (lpString="|tn|") returned 4 [0044.837] StrStrIW (lpFirst="|delete|", lpSrch="|tn|") returned 0x0 [0044.837] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.837] lstrlenW (lpString="query") returned 5 [0044.837] lstrlenW (lpString="query") returned 5 [0044.837] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.838] lstrlenW (lpString="tn") returned 2 [0044.838] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.838] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0x8, _Format="|%s|", _ArgList=0x132c1f6b8 | out: _Buffer="|query|") returned 7 [0044.838] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1f6b8 | out: _Buffer="|tn|") returned 4 [0044.838] lstrlenW (lpString="|query|") returned 7 [0044.838] lstrlenW (lpString="|tn|") returned 4 [0044.838] StrStrIW (lpFirst="|query|", lpSrch="|tn|") returned 0x0 [0044.838] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.838] lstrlenW (lpString="change") returned 6 [0044.838] lstrlenW (lpString="change") returned 6 [0044.838] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.838] lstrlenW (lpString="tn") returned 2 [0044.838] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.838] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0x9, _Format="|%s|", _ArgList=0x132c1f6b8 | out: _Buffer="|change|") returned 8 [0044.838] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1f6b8 | out: _Buffer="|tn|") returned 4 [0044.838] lstrlenW (lpString="|change|") returned 8 [0044.838] lstrlenW (lpString="|tn|") returned 4 [0044.838] StrStrIW (lpFirst="|change|", lpSrch="|tn|") returned 0x0 [0044.838] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.838] lstrlenW (lpString="run") returned 3 [0044.838] lstrlenW (lpString="run") returned 3 [0044.838] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.838] lstrlenW (lpString="tn") returned 2 [0044.838] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.838] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0x6, _Format="|%s|", _ArgList=0x132c1f6b8 | out: _Buffer="|run|") returned 5 [0044.838] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1f6b8 | out: _Buffer="|tn|") returned 4 [0044.838] lstrlenW (lpString="|run|") returned 5 [0044.838] lstrlenW (lpString="|tn|") returned 4 [0044.838] StrStrIW (lpFirst="|run|", lpSrch="|tn|") returned 0x0 [0044.838] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.838] lstrlenW (lpString="end") returned 3 [0044.838] lstrlenW (lpString="end") returned 3 [0044.838] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.838] lstrlenW (lpString="tn") returned 2 [0044.838] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.838] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0x6, _Format="|%s|", _ArgList=0x132c1f6b8 | out: _Buffer="|end|") returned 5 [0044.838] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1f6b8 | out: _Buffer="|tn|") returned 4 [0044.838] lstrlenW (lpString="|end|") returned 5 [0044.838] lstrlenW (lpString="|tn|") returned 4 [0044.838] StrStrIW (lpFirst="|end|", lpSrch="|tn|") returned 0x0 [0044.838] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.838] lstrlenW (lpString="showsid") returned 7 [0044.838] lstrlenW (lpString="showsid") returned 7 [0044.838] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.839] lstrlenW (lpString="tn") returned 2 [0044.839] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.839] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0xa, _Format="|%s|", _ArgList=0x132c1f6b8 | out: _Buffer="|showsid|") returned 9 [0044.839] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1f6b8 | out: _Buffer="|tn|") returned 4 [0044.839] lstrlenW (lpString="|showsid|") returned 9 [0044.839] lstrlenW (lpString="|tn|") returned 4 [0044.839] StrStrIW (lpFirst="|showsid|", lpSrch="|tn|") returned 0x0 [0044.839] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.839] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.839] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.839] lstrlenW (lpString="/tn") returned 3 [0044.839] StrChrIW (lpStart="/tn", wMatch=0x3a) returned 0x0 [0044.839] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.839] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.839] lstrlenW (lpString="/tn") returned 3 [0044.839] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.839] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.839] lstrlenW (lpString="\\Windows\\Startup") returned 16 [0044.839] lstrlenW (lpString="-/") returned 2 [0044.839] StrChrIW (lpStart="-/", wMatch=0x5c) returned 0x0 [0044.839] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.839] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.839] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.839] lstrlenW (lpString="\\Windows\\Startup") returned 16 [0044.839] StrChrIW (lpStart="\\Windows\\Startup", wMatch=0x3a) returned 0x0 [0044.839] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.839] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.839] lstrlenW (lpString="\\Windows\\Startup") returned 16 [0044.839] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.839] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.839] lstrlenW (lpString="/tr") returned 3 [0044.839] lstrlenW (lpString="-/") returned 2 [0044.839] StrChrIW (lpStart="-/", wMatch=0x2f) returned="/" [0044.839] lstrlenW (lpString="?") returned 1 [0044.839] lstrlenW (lpString="?") returned 1 [0044.839] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.839] lstrlenW (lpString="tr") returned 2 [0044.839] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.839] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x132c1f6b8 | out: _Buffer="|?|") returned 3 [0044.839] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1f6b8 | out: _Buffer="|tr|") returned 4 [0044.839] lstrlenW (lpString="|?|") returned 3 [0044.840] lstrlenW (lpString="|tr|") returned 4 [0044.840] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.840] lstrlenW (lpString="create") returned 6 [0044.840] lstrlenW (lpString="create") returned 6 [0044.840] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.840] lstrlenW (lpString="tr") returned 2 [0044.840] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.840] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0x9, _Format="|%s|", _ArgList=0x132c1f6b8 | out: _Buffer="|create|") returned 8 [0044.840] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1f6b8 | out: _Buffer="|tr|") returned 4 [0044.840] lstrlenW (lpString="|create|") returned 8 [0044.840] lstrlenW (lpString="|tr|") returned 4 [0044.840] StrStrIW (lpFirst="|create|", lpSrch="|tr|") returned 0x0 [0044.840] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.840] lstrlenW (lpString="delete") returned 6 [0044.840] lstrlenW (lpString="delete") returned 6 [0044.840] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.840] lstrlenW (lpString="tr") returned 2 [0044.840] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.840] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0x9, _Format="|%s|", _ArgList=0x132c1f6b8 | out: _Buffer="|delete|") returned 8 [0044.840] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1f6b8 | out: _Buffer="|tr|") returned 4 [0044.840] lstrlenW (lpString="|delete|") returned 8 [0044.840] lstrlenW (lpString="|tr|") returned 4 [0044.840] StrStrIW (lpFirst="|delete|", lpSrch="|tr|") returned 0x0 [0044.840] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.840] lstrlenW (lpString="query") returned 5 [0044.840] lstrlenW (lpString="query") returned 5 [0044.840] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.840] lstrlenW (lpString="tr") returned 2 [0044.840] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.840] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0x8, _Format="|%s|", _ArgList=0x132c1f6b8 | out: _Buffer="|query|") returned 7 [0044.840] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1f6b8 | out: _Buffer="|tr|") returned 4 [0044.840] lstrlenW (lpString="|query|") returned 7 [0044.840] lstrlenW (lpString="|tr|") returned 4 [0044.840] StrStrIW (lpFirst="|query|", lpSrch="|tr|") returned 0x0 [0044.840] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.840] lstrlenW (lpString="change") returned 6 [0044.840] lstrlenW (lpString="change") returned 6 [0044.840] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.840] lstrlenW (lpString="tr") returned 2 [0044.840] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.840] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0x9, _Format="|%s|", _ArgList=0x132c1f6b8 | out: _Buffer="|change|") returned 8 [0044.840] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1f6b8 | out: _Buffer="|tr|") returned 4 [0044.840] lstrlenW (lpString="|change|") returned 8 [0044.841] lstrlenW (lpString="|tr|") returned 4 [0044.841] StrStrIW (lpFirst="|change|", lpSrch="|tr|") returned 0x0 [0044.841] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.841] lstrlenW (lpString="run") returned 3 [0044.841] lstrlenW (lpString="run") returned 3 [0044.841] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.841] lstrlenW (lpString="tr") returned 2 [0044.841] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.841] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0x6, _Format="|%s|", _ArgList=0x132c1f6b8 | out: _Buffer="|run|") returned 5 [0044.841] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1f6b8 | out: _Buffer="|tr|") returned 4 [0044.841] lstrlenW (lpString="|run|") returned 5 [0044.841] lstrlenW (lpString="|tr|") returned 4 [0044.841] StrStrIW (lpFirst="|run|", lpSrch="|tr|") returned 0x0 [0044.841] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.841] lstrlenW (lpString="end") returned 3 [0044.841] lstrlenW (lpString="end") returned 3 [0044.841] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.841] lstrlenW (lpString="tr") returned 2 [0044.841] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.841] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0x6, _Format="|%s|", _ArgList=0x132c1f6b8 | out: _Buffer="|end|") returned 5 [0044.841] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1f6b8 | out: _Buffer="|tr|") returned 4 [0044.841] lstrlenW (lpString="|end|") returned 5 [0044.841] lstrlenW (lpString="|tr|") returned 4 [0044.841] StrStrIW (lpFirst="|end|", lpSrch="|tr|") returned 0x0 [0044.841] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.841] lstrlenW (lpString="showsid") returned 7 [0044.841] lstrlenW (lpString="showsid") returned 7 [0044.841] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.841] lstrlenW (lpString="tr") returned 2 [0044.841] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.841] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0xa, _Format="|%s|", _ArgList=0x132c1f6b8 | out: _Buffer="|showsid|") returned 9 [0044.841] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1f6b8 | out: _Buffer="|tr|") returned 4 [0044.841] lstrlenW (lpString="|showsid|") returned 9 [0044.841] lstrlenW (lpString="|tr|") returned 4 [0044.841] StrStrIW (lpFirst="|showsid|", lpSrch="|tr|") returned 0x0 [0044.841] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.841] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.841] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.841] lstrlenW (lpString="/tr") returned 3 [0044.841] StrChrIW (lpStart="/tr", wMatch=0x3a) returned 0x0 [0044.841] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.841] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.841] lstrlenW (lpString="/tr") returned 3 [0044.842] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.842] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.842] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XyuEncrypt.exe") returned 44 [0044.842] lstrlenW (lpString="-/") returned 2 [0044.842] StrChrIW (lpStart="-/", wMatch=0x43) returned 0x0 [0044.842] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.842] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.842] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.842] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XyuEncrypt.exe") returned 44 [0044.842] StrChrIW (lpStart="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XyuEncrypt.exe", wMatch=0x3a) returned=":\\Users\\CIiHmnxMn6Ps\\Desktop\\XyuEncrypt.exe" [0044.842] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XyuEncrypt.exe") returned 44 [0044.842] _memicmp (_Buf1=0x132e33bf0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.842] _memicmp (_Buf1=0x132e33c30, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.842] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.842] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.842] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.842] lstrlenW (lpString="C") returned 1 [0044.842] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.842] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.842] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XyuEncrypt.exe") returned 44 [0044.842] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.842] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.842] lstrlenW (lpString="/st") returned 3 [0044.842] lstrlenW (lpString="-/") returned 2 [0044.842] StrChrIW (lpStart="-/", wMatch=0x2f) returned="/" [0044.842] lstrlenW (lpString="?") returned 1 [0044.842] lstrlenW (lpString="?") returned 1 [0044.842] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.842] lstrlenW (lpString="st") returned 2 [0044.842] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.842] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x132c1f6b8 | out: _Buffer="|?|") returned 3 [0044.842] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1f6b8 | out: _Buffer="|st|") returned 4 [0044.842] lstrlenW (lpString="|?|") returned 3 [0044.842] lstrlenW (lpString="|st|") returned 4 [0044.842] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.842] lstrlenW (lpString="create") returned 6 [0044.842] lstrlenW (lpString="create") returned 6 [0044.842] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.843] lstrlenW (lpString="st") returned 2 [0044.843] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.843] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0x9, _Format="|%s|", _ArgList=0x132c1f6b8 | out: _Buffer="|create|") returned 8 [0044.843] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1f6b8 | out: _Buffer="|st|") returned 4 [0044.843] lstrlenW (lpString="|create|") returned 8 [0044.843] lstrlenW (lpString="|st|") returned 4 [0044.843] StrStrIW (lpFirst="|create|", lpSrch="|st|") returned 0x0 [0044.843] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.843] lstrlenW (lpString="delete") returned 6 [0044.843] lstrlenW (lpString="delete") returned 6 [0044.843] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.843] lstrlenW (lpString="st") returned 2 [0044.843] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.843] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0x9, _Format="|%s|", _ArgList=0x132c1f6b8 | out: _Buffer="|delete|") returned 8 [0044.843] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1f6b8 | out: _Buffer="|st|") returned 4 [0044.843] lstrlenW (lpString="|delete|") returned 8 [0044.843] lstrlenW (lpString="|st|") returned 4 [0044.843] StrStrIW (lpFirst="|delete|", lpSrch="|st|") returned 0x0 [0044.843] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.843] lstrlenW (lpString="query") returned 5 [0044.843] lstrlenW (lpString="query") returned 5 [0044.843] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.843] lstrlenW (lpString="st") returned 2 [0044.843] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.843] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0x8, _Format="|%s|", _ArgList=0x132c1f6b8 | out: _Buffer="|query|") returned 7 [0044.843] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1f6b8 | out: _Buffer="|st|") returned 4 [0044.843] lstrlenW (lpString="|query|") returned 7 [0044.843] lstrlenW (lpString="|st|") returned 4 [0044.843] StrStrIW (lpFirst="|query|", lpSrch="|st|") returned 0x0 [0044.843] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.843] lstrlenW (lpString="change") returned 6 [0044.843] lstrlenW (lpString="change") returned 6 [0044.843] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.843] lstrlenW (lpString="st") returned 2 [0044.843] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.843] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0x9, _Format="|%s|", _ArgList=0x132c1f6b8 | out: _Buffer="|change|") returned 8 [0044.843] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1f6b8 | out: _Buffer="|st|") returned 4 [0044.843] lstrlenW (lpString="|change|") returned 8 [0044.843] lstrlenW (lpString="|st|") returned 4 [0044.843] StrStrIW (lpFirst="|change|", lpSrch="|st|") returned 0x0 [0044.843] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.843] lstrlenW (lpString="run") returned 3 [0044.844] lstrlenW (lpString="run") returned 3 [0044.844] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.844] lstrlenW (lpString="st") returned 2 [0044.844] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.844] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0x6, _Format="|%s|", _ArgList=0x132c1f6b8 | out: _Buffer="|run|") returned 5 [0044.844] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1f6b8 | out: _Buffer="|st|") returned 4 [0044.844] lstrlenW (lpString="|run|") returned 5 [0044.844] lstrlenW (lpString="|st|") returned 4 [0044.844] StrStrIW (lpFirst="|run|", lpSrch="|st|") returned 0x0 [0044.844] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.844] lstrlenW (lpString="end") returned 3 [0044.844] lstrlenW (lpString="end") returned 3 [0044.844] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.844] lstrlenW (lpString="st") returned 2 [0044.844] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.844] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0x6, _Format="|%s|", _ArgList=0x132c1f6b8 | out: _Buffer="|end|") returned 5 [0044.844] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1f6b8 | out: _Buffer="|st|") returned 4 [0044.844] lstrlenW (lpString="|end|") returned 5 [0044.844] lstrlenW (lpString="|st|") returned 4 [0044.844] StrStrIW (lpFirst="|end|", lpSrch="|st|") returned 0x0 [0044.844] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.844] lstrlenW (lpString="showsid") returned 7 [0044.844] lstrlenW (lpString="showsid") returned 7 [0044.844] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.844] lstrlenW (lpString="st") returned 2 [0044.844] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.844] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0xa, _Format="|%s|", _ArgList=0x132c1f6b8 | out: _Buffer="|showsid|") returned 9 [0044.844] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1f6b8 | out: _Buffer="|st|") returned 4 [0044.844] lstrlenW (lpString="|showsid|") returned 9 [0044.844] lstrlenW (lpString="|st|") returned 4 [0044.844] StrStrIW (lpFirst="|showsid|", lpSrch="|st|") returned 0x0 [0044.844] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.844] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.844] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.844] lstrlenW (lpString="/st") returned 3 [0044.844] StrChrIW (lpStart="/st", wMatch=0x3a) returned 0x0 [0044.844] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.844] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.844] lstrlenW (lpString="/st") returned 3 [0044.844] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.844] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.845] lstrlenW (lpString="00:00") returned 5 [0044.845] lstrlenW (lpString="-/") returned 2 [0044.845] StrChrIW (lpStart="-/", wMatch=0x30) returned 0x0 [0044.845] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.845] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.845] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.845] lstrlenW (lpString="00:00") returned 5 [0044.845] StrChrIW (lpStart="00:00", wMatch=0x3a) returned=":00" [0044.845] lstrlenW (lpString="00:00") returned 5 [0044.845] _memicmp (_Buf1=0x132e33bf0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.845] _memicmp (_Buf1=0x132e33c30, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.845] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.845] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.845] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.845] lstrlenW (lpString="00") returned 2 [0044.845] lstrlenW (lpString="-/") returned 2 [0044.845] StrChrIW (lpStart="-/", wMatch=0x30) returned 0x0 [0044.845] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.845] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.845] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.845] lstrlenW (lpString="00:00") returned 5 [0044.845] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.845] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.845] lstrlenW (lpString="/du") returned 3 [0044.845] lstrlenW (lpString="-/") returned 2 [0044.845] StrChrIW (lpStart="-/", wMatch=0x2f) returned="/" [0044.845] lstrlenW (lpString="?") returned 1 [0044.845] lstrlenW (lpString="?") returned 1 [0044.845] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.845] lstrlenW (lpString="du") returned 2 [0044.845] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.845] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x132c1f6b8 | out: _Buffer="|?|") returned 3 [0044.846] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1f6b8 | out: _Buffer="|du|") returned 4 [0044.846] lstrlenW (lpString="|?|") returned 3 [0044.846] lstrlenW (lpString="|du|") returned 4 [0044.846] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.846] lstrlenW (lpString="create") returned 6 [0044.846] lstrlenW (lpString="create") returned 6 [0044.846] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.846] lstrlenW (lpString="du") returned 2 [0044.846] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.846] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0x9, _Format="|%s|", _ArgList=0x132c1f6b8 | out: _Buffer="|create|") returned 8 [0044.846] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1f6b8 | out: _Buffer="|du|") returned 4 [0044.846] lstrlenW (lpString="|create|") returned 8 [0044.846] lstrlenW (lpString="|du|") returned 4 [0044.846] StrStrIW (lpFirst="|create|", lpSrch="|du|") returned 0x0 [0044.846] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.846] lstrlenW (lpString="delete") returned 6 [0044.846] lstrlenW (lpString="delete") returned 6 [0044.846] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.846] lstrlenW (lpString="du") returned 2 [0044.846] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.846] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0x9, _Format="|%s|", _ArgList=0x132c1f6b8 | out: _Buffer="|delete|") returned 8 [0044.846] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1f6b8 | out: _Buffer="|du|") returned 4 [0044.846] lstrlenW (lpString="|delete|") returned 8 [0044.846] lstrlenW (lpString="|du|") returned 4 [0044.846] StrStrIW (lpFirst="|delete|", lpSrch="|du|") returned 0x0 [0044.846] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.846] lstrlenW (lpString="query") returned 5 [0044.846] lstrlenW (lpString="query") returned 5 [0044.846] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.846] lstrlenW (lpString="du") returned 2 [0044.846] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.846] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0x8, _Format="|%s|", _ArgList=0x132c1f6b8 | out: _Buffer="|query|") returned 7 [0044.846] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1f6b8 | out: _Buffer="|du|") returned 4 [0044.846] lstrlenW (lpString="|query|") returned 7 [0044.846] lstrlenW (lpString="|du|") returned 4 [0044.846] StrStrIW (lpFirst="|query|", lpSrch="|du|") returned 0x0 [0044.846] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.846] lstrlenW (lpString="change") returned 6 [0044.846] lstrlenW (lpString="change") returned 6 [0044.846] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.846] lstrlenW (lpString="du") returned 2 [0044.846] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.846] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0x9, _Format="|%s|", _ArgList=0x132c1f6b8 | out: _Buffer="|change|") returned 8 [0044.847] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1f6b8 | out: _Buffer="|du|") returned 4 [0044.847] lstrlenW (lpString="|change|") returned 8 [0044.847] lstrlenW (lpString="|du|") returned 4 [0044.847] StrStrIW (lpFirst="|change|", lpSrch="|du|") returned 0x0 [0044.847] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.847] lstrlenW (lpString="run") returned 3 [0044.847] lstrlenW (lpString="run") returned 3 [0044.847] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.847] lstrlenW (lpString="du") returned 2 [0044.847] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.847] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0x6, _Format="|%s|", _ArgList=0x132c1f6b8 | out: _Buffer="|run|") returned 5 [0044.847] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1f6b8 | out: _Buffer="|du|") returned 4 [0044.847] lstrlenW (lpString="|run|") returned 5 [0044.847] lstrlenW (lpString="|du|") returned 4 [0044.847] StrStrIW (lpFirst="|run|", lpSrch="|du|") returned 0x0 [0044.847] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.847] lstrlenW (lpString="end") returned 3 [0044.847] lstrlenW (lpString="end") returned 3 [0044.847] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.847] lstrlenW (lpString="du") returned 2 [0044.847] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.847] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0x6, _Format="|%s|", _ArgList=0x132c1f6b8 | out: _Buffer="|end|") returned 5 [0044.847] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1f6b8 | out: _Buffer="|du|") returned 4 [0044.847] lstrlenW (lpString="|end|") returned 5 [0044.847] lstrlenW (lpString="|du|") returned 4 [0044.847] StrStrIW (lpFirst="|end|", lpSrch="|du|") returned 0x0 [0044.847] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.847] lstrlenW (lpString="showsid") returned 7 [0044.847] lstrlenW (lpString="showsid") returned 7 [0044.847] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.847] lstrlenW (lpString="du") returned 2 [0044.847] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.847] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0xa, _Format="|%s|", _ArgList=0x132c1f6b8 | out: _Buffer="|showsid|") returned 9 [0044.847] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1f6b8 | out: _Buffer="|du|") returned 4 [0044.847] lstrlenW (lpString="|showsid|") returned 9 [0044.847] lstrlenW (lpString="|du|") returned 4 [0044.847] StrStrIW (lpFirst="|showsid|", lpSrch="|du|") returned 0x0 [0044.847] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.847] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.847] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.847] lstrlenW (lpString="/du") returned 3 [0044.847] StrChrIW (lpStart="/du", wMatch=0x3a) returned 0x0 [0044.847] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.847] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.847] lstrlenW (lpString="/du") returned 3 [0044.848] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.848] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.848] lstrlenW (lpString="9999:59") returned 7 [0044.848] lstrlenW (lpString="-/") returned 2 [0044.848] StrChrIW (lpStart="-/", wMatch=0x39) returned 0x0 [0044.848] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.848] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.848] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.848] lstrlenW (lpString="9999:59") returned 7 [0044.848] StrChrIW (lpStart="9999:59", wMatch=0x3a) returned=":59" [0044.848] lstrlenW (lpString="9999:59") returned 7 [0044.848] _memicmp (_Buf1=0x132e33bf0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.848] _memicmp (_Buf1=0x132e33c30, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.848] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.848] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.848] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.848] lstrlenW (lpString="9999") returned 4 [0044.848] lstrlenW (lpString="-/") returned 2 [0044.848] StrChrIW (lpStart="-/", wMatch=0x39) returned 0x0 [0044.848] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.848] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.848] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.848] lstrlenW (lpString="9999:59") returned 7 [0044.848] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.848] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.848] lstrlenW (lpString="/sc") returned 3 [0044.848] lstrlenW (lpString="-/") returned 2 [0044.848] StrChrIW (lpStart="-/", wMatch=0x2f) returned="/" [0044.848] lstrlenW (lpString="?") returned 1 [0044.848] lstrlenW (lpString="?") returned 1 [0044.848] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.848] lstrlenW (lpString="sc") returned 2 [0044.848] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.848] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x132c1f6b8 | out: _Buffer="|?|") returned 3 [0044.848] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1f6b8 | out: _Buffer="|sc|") returned 4 [0044.848] lstrlenW (lpString="|?|") returned 3 [0044.848] lstrlenW (lpString="|sc|") returned 4 [0044.848] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.848] lstrlenW (lpString="create") returned 6 [0044.848] lstrlenW (lpString="create") returned 6 [0044.848] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.849] lstrlenW (lpString="sc") returned 2 [0044.849] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.849] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0x9, _Format="|%s|", _ArgList=0x132c1f6b8 | out: _Buffer="|create|") returned 8 [0044.849] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1f6b8 | out: _Buffer="|sc|") returned 4 [0044.849] lstrlenW (lpString="|create|") returned 8 [0044.849] lstrlenW (lpString="|sc|") returned 4 [0044.849] StrStrIW (lpFirst="|create|", lpSrch="|sc|") returned 0x0 [0044.849] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.849] lstrlenW (lpString="delete") returned 6 [0044.849] lstrlenW (lpString="delete") returned 6 [0044.849] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.849] lstrlenW (lpString="sc") returned 2 [0044.849] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.849] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0x9, _Format="|%s|", _ArgList=0x132c1f6b8 | out: _Buffer="|delete|") returned 8 [0044.849] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1f6b8 | out: _Buffer="|sc|") returned 4 [0044.849] lstrlenW (lpString="|delete|") returned 8 [0044.849] lstrlenW (lpString="|sc|") returned 4 [0044.849] StrStrIW (lpFirst="|delete|", lpSrch="|sc|") returned 0x0 [0044.849] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.849] lstrlenW (lpString="query") returned 5 [0044.849] lstrlenW (lpString="query") returned 5 [0044.849] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.849] lstrlenW (lpString="sc") returned 2 [0044.849] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.849] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0x8, _Format="|%s|", _ArgList=0x132c1f6b8 | out: _Buffer="|query|") returned 7 [0044.849] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1f6b8 | out: _Buffer="|sc|") returned 4 [0044.849] lstrlenW (lpString="|query|") returned 7 [0044.849] lstrlenW (lpString="|sc|") returned 4 [0044.849] StrStrIW (lpFirst="|query|", lpSrch="|sc|") returned 0x0 [0044.849] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.849] lstrlenW (lpString="change") returned 6 [0044.849] lstrlenW (lpString="change") returned 6 [0044.849] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.849] lstrlenW (lpString="sc") returned 2 [0044.849] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.849] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0x9, _Format="|%s|", _ArgList=0x132c1f6b8 | out: _Buffer="|change|") returned 8 [0044.849] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1f6b8 | out: _Buffer="|sc|") returned 4 [0044.849] lstrlenW (lpString="|change|") returned 8 [0044.849] lstrlenW (lpString="|sc|") returned 4 [0044.849] StrStrIW (lpFirst="|change|", lpSrch="|sc|") returned 0x0 [0044.849] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.849] lstrlenW (lpString="run") returned 3 [0044.849] lstrlenW (lpString="run") returned 3 [0044.850] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.850] lstrlenW (lpString="sc") returned 2 [0044.850] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.850] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0x6, _Format="|%s|", _ArgList=0x132c1f6b8 | out: _Buffer="|run|") returned 5 [0044.850] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1f6b8 | out: _Buffer="|sc|") returned 4 [0044.850] lstrlenW (lpString="|run|") returned 5 [0044.850] lstrlenW (lpString="|sc|") returned 4 [0044.850] StrStrIW (lpFirst="|run|", lpSrch="|sc|") returned 0x0 [0044.850] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.850] lstrlenW (lpString="end") returned 3 [0044.850] lstrlenW (lpString="end") returned 3 [0044.850] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.850] lstrlenW (lpString="sc") returned 2 [0044.850] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.850] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0x6, _Format="|%s|", _ArgList=0x132c1f6b8 | out: _Buffer="|end|") returned 5 [0044.850] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1f6b8 | out: _Buffer="|sc|") returned 4 [0044.850] lstrlenW (lpString="|end|") returned 5 [0044.850] lstrlenW (lpString="|sc|") returned 4 [0044.850] StrStrIW (lpFirst="|end|", lpSrch="|sc|") returned 0x0 [0044.850] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.850] lstrlenW (lpString="showsid") returned 7 [0044.850] lstrlenW (lpString="showsid") returned 7 [0044.850] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.850] lstrlenW (lpString="sc") returned 2 [0044.850] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.850] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0xa, _Format="|%s|", _ArgList=0x132c1f6b8 | out: _Buffer="|showsid|") returned 9 [0044.850] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1f6b8 | out: _Buffer="|sc|") returned 4 [0044.850] lstrlenW (lpString="|showsid|") returned 9 [0044.850] lstrlenW (lpString="|sc|") returned 4 [0044.850] StrStrIW (lpFirst="|showsid|", lpSrch="|sc|") returned 0x0 [0044.850] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.850] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.850] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.850] lstrlenW (lpString="/sc") returned 3 [0044.850] StrChrIW (lpStart="/sc", wMatch=0x3a) returned 0x0 [0044.850] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.850] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.850] lstrlenW (lpString="/sc") returned 3 [0044.850] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.850] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.850] lstrlenW (lpString="daily") returned 5 [0044.850] lstrlenW (lpString="-/") returned 2 [0044.850] StrChrIW (lpStart="-/", wMatch=0x64) returned 0x0 [0044.851] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.851] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.851] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.851] lstrlenW (lpString="daily") returned 5 [0044.851] StrChrIW (lpStart="daily", wMatch=0x3a) returned 0x0 [0044.851] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.851] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.851] lstrlenW (lpString="daily") returned 5 [0044.851] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.851] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.851] lstrlenW (lpString="/ri") returned 3 [0044.851] lstrlenW (lpString="-/") returned 2 [0044.851] StrChrIW (lpStart="-/", wMatch=0x2f) returned="/" [0044.851] lstrlenW (lpString="?") returned 1 [0044.851] lstrlenW (lpString="?") returned 1 [0044.851] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.851] lstrlenW (lpString="ri") returned 2 [0044.851] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.851] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x132c1f6b8 | out: _Buffer="|?|") returned 3 [0044.851] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1f6b8 | out: _Buffer="|ri|") returned 4 [0044.851] lstrlenW (lpString="|?|") returned 3 [0044.851] lstrlenW (lpString="|ri|") returned 4 [0044.851] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.851] lstrlenW (lpString="create") returned 6 [0044.851] lstrlenW (lpString="create") returned 6 [0044.851] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.851] lstrlenW (lpString="ri") returned 2 [0044.851] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.851] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0x9, _Format="|%s|", _ArgList=0x132c1f6b8 | out: _Buffer="|create|") returned 8 [0044.851] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1f6b8 | out: _Buffer="|ri|") returned 4 [0044.851] lstrlenW (lpString="|create|") returned 8 [0044.851] lstrlenW (lpString="|ri|") returned 4 [0044.851] StrStrIW (lpFirst="|create|", lpSrch="|ri|") returned 0x0 [0044.851] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.851] lstrlenW (lpString="delete") returned 6 [0044.851] lstrlenW (lpString="delete") returned 6 [0044.851] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.851] lstrlenW (lpString="ri") returned 2 [0044.851] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.851] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0x9, _Format="|%s|", _ArgList=0x132c1f6b8 | out: _Buffer="|delete|") returned 8 [0044.851] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1f6b8 | out: _Buffer="|ri|") returned 4 [0044.851] lstrlenW (lpString="|delete|") returned 8 [0044.851] lstrlenW (lpString="|ri|") returned 4 [0044.852] StrStrIW (lpFirst="|delete|", lpSrch="|ri|") returned 0x0 [0044.852] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.852] lstrlenW (lpString="query") returned 5 [0044.852] lstrlenW (lpString="query") returned 5 [0044.852] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.852] lstrlenW (lpString="ri") returned 2 [0044.852] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.852] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0x8, _Format="|%s|", _ArgList=0x132c1f6b8 | out: _Buffer="|query|") returned 7 [0044.852] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1f6b8 | out: _Buffer="|ri|") returned 4 [0044.852] lstrlenW (lpString="|query|") returned 7 [0044.852] lstrlenW (lpString="|ri|") returned 4 [0044.852] StrStrIW (lpFirst="|query|", lpSrch="|ri|") returned 0x0 [0044.852] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.852] lstrlenW (lpString="change") returned 6 [0044.852] lstrlenW (lpString="change") returned 6 [0044.852] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.852] lstrlenW (lpString="ri") returned 2 [0044.852] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.852] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0x9, _Format="|%s|", _ArgList=0x132c1f6b8 | out: _Buffer="|change|") returned 8 [0044.852] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1f6b8 | out: _Buffer="|ri|") returned 4 [0044.852] lstrlenW (lpString="|change|") returned 8 [0044.852] lstrlenW (lpString="|ri|") returned 4 [0044.852] StrStrIW (lpFirst="|change|", lpSrch="|ri|") returned 0x0 [0044.852] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.852] lstrlenW (lpString="run") returned 3 [0044.852] lstrlenW (lpString="run") returned 3 [0044.852] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.852] lstrlenW (lpString="ri") returned 2 [0044.852] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.852] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0x6, _Format="|%s|", _ArgList=0x132c1f6b8 | out: _Buffer="|run|") returned 5 [0044.852] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1f6b8 | out: _Buffer="|ri|") returned 4 [0044.852] lstrlenW (lpString="|run|") returned 5 [0044.852] lstrlenW (lpString="|ri|") returned 4 [0044.852] StrStrIW (lpFirst="|run|", lpSrch="|ri|") returned 0x0 [0044.852] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.852] lstrlenW (lpString="end") returned 3 [0044.852] lstrlenW (lpString="end") returned 3 [0044.852] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.852] lstrlenW (lpString="ri") returned 2 [0044.852] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.852] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0x6, _Format="|%s|", _ArgList=0x132c1f6b8 | out: _Buffer="|end|") returned 5 [0044.852] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1f6b8 | out: _Buffer="|ri|") returned 4 [0044.852] lstrlenW (lpString="|end|") returned 5 [0044.852] lstrlenW (lpString="|ri|") returned 4 [0044.853] StrStrIW (lpFirst="|end|", lpSrch="|ri|") returned 0x0 [0044.853] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.853] lstrlenW (lpString="showsid") returned 7 [0044.853] lstrlenW (lpString="showsid") returned 7 [0044.853] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.853] lstrlenW (lpString="ri") returned 2 [0044.853] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.853] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0xa, _Format="|%s|", _ArgList=0x132c1f6b8 | out: _Buffer="|showsid|") returned 9 [0044.853] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1f6b8 | out: _Buffer="|ri|") returned 4 [0044.853] lstrlenW (lpString="|showsid|") returned 9 [0044.853] lstrlenW (lpString="|ri|") returned 4 [0044.853] StrStrIW (lpFirst="|showsid|", lpSrch="|ri|") returned 0x0 [0044.853] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.853] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.853] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.853] lstrlenW (lpString="/ri") returned 3 [0044.853] StrChrIW (lpStart="/ri", wMatch=0x3a) returned 0x0 [0044.853] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.853] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.853] lstrlenW (lpString="/ri") returned 3 [0044.853] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.853] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.853] lstrlenW (lpString="3") returned 1 [0044.853] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.853] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.853] lstrlenW (lpString="3") returned 1 [0044.853] StrChrIW (lpStart="3", wMatch=0x3a) returned 0x0 [0044.853] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.853] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.853] lstrlenW (lpString="3") returned 1 [0044.853] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.853] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.853] lstrlenW (lpString="/f") returned 2 [0044.853] lstrlenW (lpString="-/") returned 2 [0044.853] StrChrIW (lpStart="-/", wMatch=0x2f) returned="/" [0044.853] lstrlenW (lpString="?") returned 1 [0044.853] lstrlenW (lpString="?") returned 1 [0044.853] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.853] lstrlenW (lpString="f") returned 1 [0044.854] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.854] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x132c1f6b8 | out: _Buffer="|?|") returned 3 [0044.854] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x4, _Format="|%s|", _ArgList=0x132c1f6b8 | out: _Buffer="|f|") returned 3 [0044.854] lstrlenW (lpString="|?|") returned 3 [0044.854] lstrlenW (lpString="|f|") returned 3 [0044.854] StrStrIW (lpFirst="|?|", lpSrch="|f|") returned 0x0 [0044.854] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.854] lstrlenW (lpString="create") returned 6 [0044.854] lstrlenW (lpString="create") returned 6 [0044.854] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.854] lstrlenW (lpString="f") returned 1 [0044.854] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.854] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0x9, _Format="|%s|", _ArgList=0x132c1f6b8 | out: _Buffer="|create|") returned 8 [0044.854] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x4, _Format="|%s|", _ArgList=0x132c1f6b8 | out: _Buffer="|f|") returned 3 [0044.854] lstrlenW (lpString="|create|") returned 8 [0044.854] lstrlenW (lpString="|f|") returned 3 [0044.854] StrStrIW (lpFirst="|create|", lpSrch="|f|") returned 0x0 [0044.854] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.854] lstrlenW (lpString="delete") returned 6 [0044.854] lstrlenW (lpString="delete") returned 6 [0044.854] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.854] lstrlenW (lpString="f") returned 1 [0044.854] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.854] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0x9, _Format="|%s|", _ArgList=0x132c1f6b8 | out: _Buffer="|delete|") returned 8 [0044.854] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x4, _Format="|%s|", _ArgList=0x132c1f6b8 | out: _Buffer="|f|") returned 3 [0044.854] lstrlenW (lpString="|delete|") returned 8 [0044.854] lstrlenW (lpString="|f|") returned 3 [0044.854] StrStrIW (lpFirst="|delete|", lpSrch="|f|") returned 0x0 [0044.854] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.854] lstrlenW (lpString="query") returned 5 [0044.854] lstrlenW (lpString="query") returned 5 [0044.854] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.854] lstrlenW (lpString="f") returned 1 [0044.854] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.854] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0x8, _Format="|%s|", _ArgList=0x132c1f6b8 | out: _Buffer="|query|") returned 7 [0044.854] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x4, _Format="|%s|", _ArgList=0x132c1f6b8 | out: _Buffer="|f|") returned 3 [0044.854] lstrlenW (lpString="|query|") returned 7 [0044.854] lstrlenW (lpString="|f|") returned 3 [0044.854] StrStrIW (lpFirst="|query|", lpSrch="|f|") returned 0x0 [0044.854] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.854] lstrlenW (lpString="change") returned 6 [0044.854] lstrlenW (lpString="change") returned 6 [0044.854] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.855] lstrlenW (lpString="f") returned 1 [0044.855] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.855] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0x9, _Format="|%s|", _ArgList=0x132c1f6b8 | out: _Buffer="|change|") returned 8 [0044.855] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x4, _Format="|%s|", _ArgList=0x132c1f6b8 | out: _Buffer="|f|") returned 3 [0044.855] lstrlenW (lpString="|change|") returned 8 [0044.855] lstrlenW (lpString="|f|") returned 3 [0044.855] StrStrIW (lpFirst="|change|", lpSrch="|f|") returned 0x0 [0044.855] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.855] lstrlenW (lpString="run") returned 3 [0044.855] lstrlenW (lpString="run") returned 3 [0044.855] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.855] lstrlenW (lpString="f") returned 1 [0044.855] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.855] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0x6, _Format="|%s|", _ArgList=0x132c1f6b8 | out: _Buffer="|run|") returned 5 [0044.855] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x4, _Format="|%s|", _ArgList=0x132c1f6b8 | out: _Buffer="|f|") returned 3 [0044.855] lstrlenW (lpString="|run|") returned 5 [0044.855] lstrlenW (lpString="|f|") returned 3 [0044.855] StrStrIW (lpFirst="|run|", lpSrch="|f|") returned 0x0 [0044.855] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.855] lstrlenW (lpString="end") returned 3 [0044.855] lstrlenW (lpString="end") returned 3 [0044.855] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.855] lstrlenW (lpString="f") returned 1 [0044.855] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.855] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0x6, _Format="|%s|", _ArgList=0x132c1f6b8 | out: _Buffer="|end|") returned 5 [0044.855] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x4, _Format="|%s|", _ArgList=0x132c1f6b8 | out: _Buffer="|f|") returned 3 [0044.855] lstrlenW (lpString="|end|") returned 5 [0044.855] lstrlenW (lpString="|f|") returned 3 [0044.855] StrStrIW (lpFirst="|end|", lpSrch="|f|") returned 0x0 [0044.855] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.855] lstrlenW (lpString="showsid") returned 7 [0044.855] lstrlenW (lpString="showsid") returned 7 [0044.855] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.855] lstrlenW (lpString="f") returned 1 [0044.855] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.855] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0xa, _Format="|%s|", _ArgList=0x132c1f6b8 | out: _Buffer="|showsid|") returned 9 [0044.855] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x4, _Format="|%s|", _ArgList=0x132c1f6b8 | out: _Buffer="|f|") returned 3 [0044.855] lstrlenW (lpString="|showsid|") returned 9 [0044.855] lstrlenW (lpString="|f|") returned 3 [0044.855] StrStrIW (lpFirst="|showsid|", lpSrch="|f|") returned 0x0 [0044.855] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.855] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.855] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.855] lstrlenW (lpString="/f") returned 2 [0044.855] StrChrIW (lpStart="/f", wMatch=0x3a) returned 0x0 [0044.856] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.856] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.856] lstrlenW (lpString="/f") returned 2 [0044.856] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.859] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.859] VerSetConditionMask (ConditionMask=0x0, TypeMask=0x2, Condition=0x3) returned 0x8000000000000018 [0044.859] VerSetConditionMask (ConditionMask=0x8000000000000018, TypeMask=0x1, Condition=0x3) returned 0x800000000000001b [0044.859] VerSetConditionMask (ConditionMask=0x800000000000001b, TypeMask=0x20, Condition=0x3) returned 0x800000000001801b [0044.859] RtlVerifyVersionInfo (VersionInfo=0x132c1c650, TypeMask=0x3, ConditionMask=0x800000000001801b) returned 0x0 [0044.859] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.859] lstrlenW (lpString="create") returned 6 [0044.859] StrChrIW (lpStart="create", wMatch=0x7c) returned 0x0 [0044.859] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.859] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.859] lstrlenW (lpString="create") returned 6 [0044.859] _memicmp (_Buf1=0x132e3adc0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.859] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.859] _memicmp (_Buf1=0x132e339b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.859] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x132e39600, nSize=0x104 | out: lpFilename="C:\\Windows\\System32\\schtasks.exe" (normalized: "c:\\windows\\system32\\schtasks.exe")) returned 0x20 [0044.859] GetFileVersionInfoSizeExW (in: dwFlags=0x1, lpwstrFilename="C:\\Windows\\System32\\schtasks.exe", lpdwHandle=0x132c1c7a8 | out: lpdwHandle=0x132c1c7a8) returned 0x76c [0044.860] GetFileVersionInfoExW (in: dwFlags=0x3, lpwstrFilename="C:\\Windows\\System32\\schtasks.exe", dwHandle=0x0, dwLen=0x776, lpData=0x132e3c020 | out: lpData=0x132e3c020) returned 1 [0044.860] VerQueryValueW (in: pBlock=0x132e3c020, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x132c1c740, puLen=0x132c1c7a0 | out: lplpBuffer=0x132c1c740*=0x132e3c3d0, puLen=0x132c1c7a0) returned 1 [0044.860] _memicmp (_Buf1=0x132e339b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.860] _vsnwprintf (in: _Buffer=0x132e39600, _BufferCount=0x3f, _Format="\\StringFileInfo\\%04x%04x\\InternalName", _ArgList=0x132c1c718 | out: _Buffer="\\StringFileInfo\\040904b0\\InternalName") returned 37 [0044.860] VerQueryValueW (in: pBlock=0x132e3c020, lpSubBlock="\\StringFileInfo\\040904b0\\InternalName", lplpBuffer=0x132c1c730, puLen=0x132c1c798 | out: lplpBuffer=0x132c1c730*=0x132e3c1f8, puLen=0x132c1c798) returned 1 [0044.860] lstrlenW (lpString="schtasks.exe") returned 12 [0044.860] lstrlenW (lpString="schtasks.exe") returned 12 [0044.860] lstrlenW (lpString=".EXE") returned 4 [0044.860] StrStrIW (lpFirst="schtasks.exe", lpSrch=".EXE") returned=".exe" [0044.860] lstrlenW (lpString="schtasks.exe") returned 12 [0044.860] lstrlenW (lpString=".EXE") returned 4 [0044.860] lstrlenW (lpString="schtasks") returned 8 [0044.860] lstrlenW (lpString="/create") returned 7 [0044.860] _memicmp (_Buf1=0x132e339b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.860] _vsnwprintf (in: _Buffer=0x132e39600, _BufferCount=0x19, _Format="%s %s", _ArgList=0x132c1c718 | out: _Buffer="schtasks /create") returned 16 [0044.860] _memicmp (_Buf1=0x132e34790, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.860] _memicmp (_Buf1=0x132e34370, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.860] LoadStringW (in: hInstance=0x0, uID=0x15ed, lpBuffer=0x132e3be10, cchBufferMax=256 | out: lpBuffer="Type \"%s /?\" for usage.") returned 0x17 [0044.860] lstrlenW (lpString="Type \"%s /?\" for usage.") returned 23 [0044.860] _vsnwprintf (in: _Buffer=0x132e342c0, _BufferCount=0x4f, _Format="Type \"%s /?\" for usage.", _ArgList=0x132c1c718 | out: _Buffer="Type \"SCHTASKS /CREATE /?\" for usage.") returned 37 [0044.861] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.861] GetThreadLocale () returned 0x409 [0044.861] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0044.861] lstrlenW (lpString="create") returned 6 [0044.861] GetThreadLocale () returned 0x409 [0044.861] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0044.861] lstrlenW (lpString="?") returned 1 [0044.861] GetThreadLocale () returned 0x409 [0044.861] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0044.861] lstrlenW (lpString="s") returned 1 [0044.861] GetThreadLocale () returned 0x409 [0044.861] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0044.861] lstrlenW (lpString="u") returned 1 [0044.861] GetThreadLocale () returned 0x409 [0044.861] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0044.861] lstrlenW (lpString="p") returned 1 [0044.861] GetThreadLocale () returned 0x409 [0044.861] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0044.861] lstrlenW (lpString="ru") returned 2 [0044.861] GetThreadLocale () returned 0x409 [0044.861] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0044.861] lstrlenW (lpString="rp") returned 2 [0044.861] GetThreadLocale () returned 0x409 [0044.861] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0044.861] lstrlenW (lpString="sc") returned 2 [0044.861] GetThreadLocale () returned 0x409 [0044.861] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0044.861] lstrlenW (lpString="mo") returned 2 [0044.861] GetThreadLocale () returned 0x409 [0044.861] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0044.861] lstrlenW (lpString="d") returned 1 [0044.861] GetThreadLocale () returned 0x409 [0044.861] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0044.861] lstrlenW (lpString="m") returned 1 [0044.861] GetThreadLocale () returned 0x409 [0044.861] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0044.861] lstrlenW (lpString="i") returned 1 [0044.861] GetThreadLocale () returned 0x409 [0044.861] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0044.861] lstrlenW (lpString="tn") returned 2 [0044.861] GetThreadLocale () returned 0x409 [0044.861] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0044.861] lstrlenW (lpString="tr") returned 2 [0044.861] GetThreadLocale () returned 0x409 [0044.861] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0044.861] lstrlenW (lpString="st") returned 2 [0044.861] GetThreadLocale () returned 0x409 [0044.862] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0044.862] lstrlenW (lpString="sd") returned 2 [0044.862] GetThreadLocale () returned 0x409 [0044.862] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0044.862] lstrlenW (lpString="ed") returned 2 [0044.862] GetThreadLocale () returned 0x409 [0044.862] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0044.862] lstrlenW (lpString="it") returned 2 [0044.862] GetThreadLocale () returned 0x409 [0044.862] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0044.862] lstrlenW (lpString="et") returned 2 [0044.862] GetThreadLocale () returned 0x409 [0044.862] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0044.862] lstrlenW (lpString="k") returned 1 [0044.862] GetThreadLocale () returned 0x409 [0044.862] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0044.862] lstrlenW (lpString="du") returned 2 [0044.862] GetThreadLocale () returned 0x409 [0044.862] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0044.862] lstrlenW (lpString="ri") returned 2 [0044.862] GetThreadLocale () returned 0x409 [0044.862] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0044.862] lstrlenW (lpString="z") returned 1 [0044.862] GetThreadLocale () returned 0x409 [0044.862] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0044.862] lstrlenW (lpString="f") returned 1 [0044.862] GetThreadLocale () returned 0x409 [0044.862] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0044.862] lstrlenW (lpString="v1") returned 2 [0044.862] GetThreadLocale () returned 0x409 [0044.862] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0044.862] lstrlenW (lpString="xml") returned 3 [0044.862] GetThreadLocale () returned 0x409 [0044.862] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0044.862] lstrlenW (lpString="ec") returned 2 [0044.862] GetThreadLocale () returned 0x409 [0044.862] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0044.862] lstrlenW (lpString="rl") returned 2 [0044.862] GetThreadLocale () returned 0x409 [0044.862] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0044.862] lstrlenW (lpString="delay") returned 5 [0044.862] GetThreadLocale () returned 0x409 [0044.862] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0044.862] lstrlenW (lpString="np") returned 2 [0044.862] GetThreadLocale () returned 0x409 [0044.862] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0044.862] lstrlenW (lpString="hresult") returned 7 [0044.862] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.862] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.863] lstrlenW (lpString="/create") returned 7 [0044.863] lstrlenW (lpString="-/") returned 2 [0044.863] StrChrIW (lpStart="-/", wMatch=0x2f) returned="/" [0044.863] lstrlenW (lpString="create") returned 6 [0044.863] lstrlenW (lpString="create") returned 6 [0044.863] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.863] lstrlenW (lpString="create") returned 6 [0044.863] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.863] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0x9, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|create|") returned 8 [0044.863] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x9, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|create|") returned 8 [0044.863] lstrlenW (lpString="|create|") returned 8 [0044.863] lstrlenW (lpString="|create|") returned 8 [0044.863] StrStrIW (lpFirst="|create|", lpSrch="|create|") returned="|create|" [0044.863] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.863] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.863] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.863] lstrlenW (lpString="/tn") returned 3 [0044.863] lstrlenW (lpString="-/") returned 2 [0044.863] StrChrIW (lpStart="-/", wMatch=0x2f) returned="/" [0044.863] lstrlenW (lpString="create") returned 6 [0044.863] lstrlenW (lpString="create") returned 6 [0044.863] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.863] lstrlenW (lpString="tn") returned 2 [0044.863] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.863] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0x9, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|create|") returned 8 [0044.863] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|tn|") returned 4 [0044.863] lstrlenW (lpString="|create|") returned 8 [0044.863] lstrlenW (lpString="|tn|") returned 4 [0044.863] StrStrIW (lpFirst="|create|", lpSrch="|tn|") returned 0x0 [0044.863] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.863] lstrlenW (lpString="?") returned 1 [0044.863] lstrlenW (lpString="?") returned 1 [0044.863] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.863] lstrlenW (lpString="tn") returned 2 [0044.863] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.863] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|?|") returned 3 [0044.863] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|tn|") returned 4 [0044.863] lstrlenW (lpString="|?|") returned 3 [0044.863] lstrlenW (lpString="|tn|") returned 4 [0044.863] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.863] lstrlenW (lpString="s") returned 1 [0044.863] lstrlenW (lpString="s") returned 1 [0044.863] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.863] lstrlenW (lpString="tn") returned 2 [0044.863] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.864] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|s|") returned 3 [0044.864] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|tn|") returned 4 [0044.864] lstrlenW (lpString="|s|") returned 3 [0044.864] lstrlenW (lpString="|tn|") returned 4 [0044.864] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.864] lstrlenW (lpString="u") returned 1 [0044.864] lstrlenW (lpString="u") returned 1 [0044.864] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.864] lstrlenW (lpString="tn") returned 2 [0044.864] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.864] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|u|") returned 3 [0044.864] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|tn|") returned 4 [0044.864] lstrlenW (lpString="|u|") returned 3 [0044.864] lstrlenW (lpString="|tn|") returned 4 [0044.864] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.864] lstrlenW (lpString="p") returned 1 [0044.864] lstrlenW (lpString="p") returned 1 [0044.864] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.864] lstrlenW (lpString="tn") returned 2 [0044.864] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.864] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|p|") returned 3 [0044.864] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|tn|") returned 4 [0044.864] lstrlenW (lpString="|p|") returned 3 [0044.864] lstrlenW (lpString="|tn|") returned 4 [0044.864] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.864] lstrlenW (lpString="ru") returned 2 [0044.864] lstrlenW (lpString="ru") returned 2 [0044.864] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.864] lstrlenW (lpString="tn") returned 2 [0044.864] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.864] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|ru|") returned 4 [0044.864] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|tn|") returned 4 [0044.864] lstrlenW (lpString="|ru|") returned 4 [0044.864] lstrlenW (lpString="|tn|") returned 4 [0044.864] StrStrIW (lpFirst="|ru|", lpSrch="|tn|") returned 0x0 [0044.864] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.864] lstrlenW (lpString="rp") returned 2 [0044.864] lstrlenW (lpString="rp") returned 2 [0044.864] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.864] lstrlenW (lpString="tn") returned 2 [0044.864] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.864] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|rp|") returned 4 [0044.864] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|tn|") returned 4 [0044.864] lstrlenW (lpString="|rp|") returned 4 [0044.865] lstrlenW (lpString="|tn|") returned 4 [0044.865] StrStrIW (lpFirst="|rp|", lpSrch="|tn|") returned 0x0 [0044.865] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.865] lstrlenW (lpString="sc") returned 2 [0044.865] lstrlenW (lpString="sc") returned 2 [0044.865] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.865] lstrlenW (lpString="tn") returned 2 [0044.865] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.865] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|sc|") returned 4 [0044.865] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|tn|") returned 4 [0044.865] lstrlenW (lpString="|sc|") returned 4 [0044.865] lstrlenW (lpString="|tn|") returned 4 [0044.865] StrStrIW (lpFirst="|sc|", lpSrch="|tn|") returned 0x0 [0044.865] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.865] lstrlenW (lpString="mo") returned 2 [0044.865] lstrlenW (lpString="mo") returned 2 [0044.865] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.865] lstrlenW (lpString="tn") returned 2 [0044.865] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.865] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|mo|") returned 4 [0044.865] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|tn|") returned 4 [0044.865] lstrlenW (lpString="|mo|") returned 4 [0044.865] lstrlenW (lpString="|tn|") returned 4 [0044.865] StrStrIW (lpFirst="|mo|", lpSrch="|tn|") returned 0x0 [0044.865] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.865] lstrlenW (lpString="d") returned 1 [0044.865] lstrlenW (lpString="d") returned 1 [0044.865] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.865] lstrlenW (lpString="tn") returned 2 [0044.865] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.865] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|d|") returned 3 [0044.865] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|tn|") returned 4 [0044.865] lstrlenW (lpString="|d|") returned 3 [0044.865] lstrlenW (lpString="|tn|") returned 4 [0044.865] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.865] lstrlenW (lpString="m") returned 1 [0044.865] lstrlenW (lpString="m") returned 1 [0044.865] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.865] lstrlenW (lpString="tn") returned 2 [0044.865] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.865] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|m|") returned 3 [0044.865] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|tn|") returned 4 [0044.865] lstrlenW (lpString="|m|") returned 3 [0044.865] lstrlenW (lpString="|tn|") returned 4 [0044.865] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.865] lstrlenW (lpString="i") returned 1 [0044.866] lstrlenW (lpString="i") returned 1 [0044.866] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.866] lstrlenW (lpString="tn") returned 2 [0044.866] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.866] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|i|") returned 3 [0044.866] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|tn|") returned 4 [0044.866] lstrlenW (lpString="|i|") returned 3 [0044.866] lstrlenW (lpString="|tn|") returned 4 [0044.866] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.866] lstrlenW (lpString="tn") returned 2 [0044.866] lstrlenW (lpString="tn") returned 2 [0044.866] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.866] lstrlenW (lpString="tn") returned 2 [0044.866] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.866] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|tn|") returned 4 [0044.866] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|tn|") returned 4 [0044.866] lstrlenW (lpString="|tn|") returned 4 [0044.866] lstrlenW (lpString="|tn|") returned 4 [0044.866] StrStrIW (lpFirst="|tn|", lpSrch="|tn|") returned="|tn|" [0044.866] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.866] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.866] lstrlenW (lpString="\\Windows\\Startup") returned 16 [0044.866] lstrlenW (lpString="-/") returned 2 [0044.866] StrChrIW (lpStart="-/", wMatch=0x5c) returned 0x0 [0044.866] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.866] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.866] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.866] lstrlenW (lpString="\\Windows\\Startup") returned 16 [0044.866] StrChrIW (lpStart="\\Windows\\Startup", wMatch=0x3a) returned 0x0 [0044.866] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.866] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.866] lstrlenW (lpString="\\Windows\\Startup") returned 16 [0044.866] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.866] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.866] lstrlenW (lpString="/tr") returned 3 [0044.866] lstrlenW (lpString="-/") returned 2 [0044.866] StrChrIW (lpStart="-/", wMatch=0x2f) returned="/" [0044.866] lstrlenW (lpString="create") returned 6 [0044.866] lstrlenW (lpString="create") returned 6 [0044.866] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.866] lstrlenW (lpString="tr") returned 2 [0044.866] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.866] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0x9, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|create|") returned 8 [0044.866] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|tr|") returned 4 [0044.866] lstrlenW (lpString="|create|") returned 8 [0044.866] lstrlenW (lpString="|tr|") returned 4 [0044.867] StrStrIW (lpFirst="|create|", lpSrch="|tr|") returned 0x0 [0044.867] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.867] lstrlenW (lpString="?") returned 1 [0044.867] lstrlenW (lpString="?") returned 1 [0044.867] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.867] lstrlenW (lpString="tr") returned 2 [0044.867] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.867] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|?|") returned 3 [0044.867] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|tr|") returned 4 [0044.867] lstrlenW (lpString="|?|") returned 3 [0044.867] lstrlenW (lpString="|tr|") returned 4 [0044.867] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.867] lstrlenW (lpString="s") returned 1 [0044.867] lstrlenW (lpString="s") returned 1 [0044.867] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.867] lstrlenW (lpString="tr") returned 2 [0044.867] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.867] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|s|") returned 3 [0044.867] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|tr|") returned 4 [0044.867] lstrlenW (lpString="|s|") returned 3 [0044.867] lstrlenW (lpString="|tr|") returned 4 [0044.867] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.867] lstrlenW (lpString="u") returned 1 [0044.867] lstrlenW (lpString="u") returned 1 [0044.867] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.867] lstrlenW (lpString="tr") returned 2 [0044.867] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.867] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|u|") returned 3 [0044.867] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|tr|") returned 4 [0044.867] lstrlenW (lpString="|u|") returned 3 [0044.867] lstrlenW (lpString="|tr|") returned 4 [0044.867] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.867] lstrlenW (lpString="p") returned 1 [0044.867] lstrlenW (lpString="p") returned 1 [0044.867] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.867] lstrlenW (lpString="tr") returned 2 [0044.867] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.867] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|p|") returned 3 [0044.867] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|tr|") returned 4 [0044.867] lstrlenW (lpString="|p|") returned 3 [0044.867] lstrlenW (lpString="|tr|") returned 4 [0044.867] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.867] lstrlenW (lpString="ru") returned 2 [0044.867] lstrlenW (lpString="ru") returned 2 [0044.867] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.868] lstrlenW (lpString="tr") returned 2 [0044.868] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.868] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|ru|") returned 4 [0044.868] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|tr|") returned 4 [0044.868] lstrlenW (lpString="|ru|") returned 4 [0044.868] lstrlenW (lpString="|tr|") returned 4 [0044.868] StrStrIW (lpFirst="|ru|", lpSrch="|tr|") returned 0x0 [0044.868] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.868] lstrlenW (lpString="rp") returned 2 [0044.868] lstrlenW (lpString="rp") returned 2 [0044.868] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.868] lstrlenW (lpString="tr") returned 2 [0044.868] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.868] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|rp|") returned 4 [0044.868] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|tr|") returned 4 [0044.868] lstrlenW (lpString="|rp|") returned 4 [0044.868] lstrlenW (lpString="|tr|") returned 4 [0044.868] StrStrIW (lpFirst="|rp|", lpSrch="|tr|") returned 0x0 [0044.868] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.868] lstrlenW (lpString="sc") returned 2 [0044.868] lstrlenW (lpString="sc") returned 2 [0044.868] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.868] lstrlenW (lpString="tr") returned 2 [0044.868] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.868] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|sc|") returned 4 [0044.868] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|tr|") returned 4 [0044.868] lstrlenW (lpString="|sc|") returned 4 [0044.868] lstrlenW (lpString="|tr|") returned 4 [0044.868] StrStrIW (lpFirst="|sc|", lpSrch="|tr|") returned 0x0 [0044.868] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.868] lstrlenW (lpString="mo") returned 2 [0044.868] lstrlenW (lpString="mo") returned 2 [0044.868] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.868] lstrlenW (lpString="tr") returned 2 [0044.868] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.868] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|mo|") returned 4 [0044.868] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|tr|") returned 4 [0044.868] lstrlenW (lpString="|mo|") returned 4 [0044.868] lstrlenW (lpString="|tr|") returned 4 [0044.868] StrStrIW (lpFirst="|mo|", lpSrch="|tr|") returned 0x0 [0044.868] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.868] lstrlenW (lpString="d") returned 1 [0044.868] lstrlenW (lpString="d") returned 1 [0044.868] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.869] lstrlenW (lpString="tr") returned 2 [0044.869] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.869] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|d|") returned 3 [0044.869] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|tr|") returned 4 [0044.869] lstrlenW (lpString="|d|") returned 3 [0044.869] lstrlenW (lpString="|tr|") returned 4 [0044.869] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.869] lstrlenW (lpString="m") returned 1 [0044.869] lstrlenW (lpString="m") returned 1 [0044.869] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.869] lstrlenW (lpString="tr") returned 2 [0044.869] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.869] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|m|") returned 3 [0044.869] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|tr|") returned 4 [0044.869] lstrlenW (lpString="|m|") returned 3 [0044.869] lstrlenW (lpString="|tr|") returned 4 [0044.869] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.869] lstrlenW (lpString="i") returned 1 [0044.869] lstrlenW (lpString="i") returned 1 [0044.869] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.869] lstrlenW (lpString="tr") returned 2 [0044.869] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.869] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|i|") returned 3 [0044.869] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|tr|") returned 4 [0044.869] lstrlenW (lpString="|i|") returned 3 [0044.869] lstrlenW (lpString="|tr|") returned 4 [0044.869] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.869] lstrlenW (lpString="tn") returned 2 [0044.869] lstrlenW (lpString="tn") returned 2 [0044.869] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.869] lstrlenW (lpString="tr") returned 2 [0044.869] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.869] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|tn|") returned 4 [0044.869] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|tr|") returned 4 [0044.869] lstrlenW (lpString="|tn|") returned 4 [0044.869] lstrlenW (lpString="|tr|") returned 4 [0044.869] StrStrIW (lpFirst="|tn|", lpSrch="|tr|") returned 0x0 [0044.869] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.869] lstrlenW (lpString="tr") returned 2 [0044.869] lstrlenW (lpString="tr") returned 2 [0044.869] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.870] lstrlenW (lpString="tr") returned 2 [0044.870] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.870] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|tr|") returned 4 [0044.870] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|tr|") returned 4 [0044.870] lstrlenW (lpString="|tr|") returned 4 [0044.870] lstrlenW (lpString="|tr|") returned 4 [0044.870] StrStrIW (lpFirst="|tr|", lpSrch="|tr|") returned="|tr|" [0044.870] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.870] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.870] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XyuEncrypt.exe") returned 44 [0044.870] lstrlenW (lpString="-/") returned 2 [0044.870] StrChrIW (lpStart="-/", wMatch=0x43) returned 0x0 [0044.870] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.870] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.870] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.870] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XyuEncrypt.exe") returned 44 [0044.870] StrChrIW (lpStart="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XyuEncrypt.exe", wMatch=0x3a) returned=":\\Users\\CIiHmnxMn6Ps\\Desktop\\XyuEncrypt.exe" [0044.870] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XyuEncrypt.exe") returned 44 [0044.870] _memicmp (_Buf1=0x132e33bf0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.870] _memicmp (_Buf1=0x132e33c30, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.870] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.870] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.870] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.870] lstrlenW (lpString="C") returned 1 [0044.870] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.870] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.870] _memicmp (_Buf1=0x132e3ad20, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.870] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XyuEncrypt.exe") returned 44 [0044.870] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XyuEncrypt.exe") returned 44 [0044.870] lstrlenW (lpString=" \x09") returned 2 [0044.870] StrChrW (lpStart=" \x09", wMatch=0x43) returned 0x0 [0044.870] StrChrW (lpStart=" \x09", wMatch=0x43) returned 0x0 [0044.870] StrChrW (lpStart=" \x09", wMatch=0x3a) returned 0x0 [0044.870] StrChrW (lpStart=" \x09", wMatch=0x5c) returned 0x0 [0044.870] StrChrW (lpStart=" \x09", wMatch=0x55) returned 0x0 [0044.870] StrChrW (lpStart=" \x09", wMatch=0x73) returned 0x0 [0044.870] StrChrW (lpStart=" \x09", wMatch=0x65) returned 0x0 [0044.870] StrChrW (lpStart=" \x09", wMatch=0x72) returned 0x0 [0044.870] StrChrW (lpStart=" \x09", wMatch=0x73) returned 0x0 [0044.870] StrChrW (lpStart=" \x09", wMatch=0x5c) returned 0x0 [0044.870] StrChrW (lpStart=" \x09", wMatch=0x43) returned 0x0 [0044.871] StrChrW (lpStart=" \x09", wMatch=0x49) returned 0x0 [0044.871] StrChrW (lpStart=" \x09", wMatch=0x69) returned 0x0 [0044.871] StrChrW (lpStart=" \x09", wMatch=0x48) returned 0x0 [0044.871] StrChrW (lpStart=" \x09", wMatch=0x6d) returned 0x0 [0044.871] StrChrW (lpStart=" \x09", wMatch=0x6e) returned 0x0 [0044.871] StrChrW (lpStart=" \x09", wMatch=0x78) returned 0x0 [0044.871] StrChrW (lpStart=" \x09", wMatch=0x4d) returned 0x0 [0044.871] StrChrW (lpStart=" \x09", wMatch=0x6e) returned 0x0 [0044.871] StrChrW (lpStart=" \x09", wMatch=0x36) returned 0x0 [0044.871] StrChrW (lpStart=" \x09", wMatch=0x50) returned 0x0 [0044.871] StrChrW (lpStart=" \x09", wMatch=0x73) returned 0x0 [0044.871] StrChrW (lpStart=" \x09", wMatch=0x5c) returned 0x0 [0044.871] StrChrW (lpStart=" \x09", wMatch=0x44) returned 0x0 [0044.871] StrChrW (lpStart=" \x09", wMatch=0x65) returned 0x0 [0044.871] StrChrW (lpStart=" \x09", wMatch=0x73) returned 0x0 [0044.871] StrChrW (lpStart=" \x09", wMatch=0x6b) returned 0x0 [0044.871] StrChrW (lpStart=" \x09", wMatch=0x74) returned 0x0 [0044.871] StrChrW (lpStart=" \x09", wMatch=0x6f) returned 0x0 [0044.871] StrChrW (lpStart=" \x09", wMatch=0x70) returned 0x0 [0044.871] StrChrW (lpStart=" \x09", wMatch=0x5c) returned 0x0 [0044.871] StrChrW (lpStart=" \x09", wMatch=0x58) returned 0x0 [0044.871] StrChrW (lpStart=" \x09", wMatch=0x79) returned 0x0 [0044.871] StrChrW (lpStart=" \x09", wMatch=0x75) returned 0x0 [0044.871] StrChrW (lpStart=" \x09", wMatch=0x45) returned 0x0 [0044.871] StrChrW (lpStart=" \x09", wMatch=0x6e) returned 0x0 [0044.871] StrChrW (lpStart=" \x09", wMatch=0x63) returned 0x0 [0044.871] StrChrW (lpStart=" \x09", wMatch=0x72) returned 0x0 [0044.871] StrChrW (lpStart=" \x09", wMatch=0x79) returned 0x0 [0044.871] StrChrW (lpStart=" \x09", wMatch=0x70) returned 0x0 [0044.871] StrChrW (lpStart=" \x09", wMatch=0x74) returned 0x0 [0044.871] StrChrW (lpStart=" \x09", wMatch=0x2e) returned 0x0 [0044.871] StrChrW (lpStart=" \x09", wMatch=0x65) returned 0x0 [0044.871] StrChrW (lpStart=" \x09", wMatch=0x78) returned 0x0 [0044.871] StrChrW (lpStart=" \x09", wMatch=0x65) returned 0x0 [0044.871] GetLastError () returned 0x0 [0044.871] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XyuEncrypt.exe") returned 44 [0044.871] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XyuEncrypt.exe") returned 44 [0044.871] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.871] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.871] lstrlenW (lpString="/st") returned 3 [0044.871] lstrlenW (lpString="-/") returned 2 [0044.871] StrChrIW (lpStart="-/", wMatch=0x2f) returned="/" [0044.871] lstrlenW (lpString="create") returned 6 [0044.871] lstrlenW (lpString="create") returned 6 [0044.871] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.871] lstrlenW (lpString="st") returned 2 [0044.871] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.871] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0x9, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|create|") returned 8 [0044.872] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|st|") returned 4 [0044.872] lstrlenW (lpString="|create|") returned 8 [0044.872] lstrlenW (lpString="|st|") returned 4 [0044.872] StrStrIW (lpFirst="|create|", lpSrch="|st|") returned 0x0 [0044.872] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.872] lstrlenW (lpString="?") returned 1 [0044.872] lstrlenW (lpString="?") returned 1 [0044.872] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.872] lstrlenW (lpString="st") returned 2 [0044.872] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.872] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|?|") returned 3 [0044.872] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|st|") returned 4 [0044.872] lstrlenW (lpString="|?|") returned 3 [0044.872] lstrlenW (lpString="|st|") returned 4 [0044.872] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.872] lstrlenW (lpString="s") returned 1 [0044.872] lstrlenW (lpString="s") returned 1 [0044.872] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.872] lstrlenW (lpString="st") returned 2 [0044.872] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.872] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|s|") returned 3 [0044.872] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|st|") returned 4 [0044.872] lstrlenW (lpString="|s|") returned 3 [0044.872] lstrlenW (lpString="|st|") returned 4 [0044.872] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.872] lstrlenW (lpString="u") returned 1 [0044.872] lstrlenW (lpString="u") returned 1 [0044.872] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.872] lstrlenW (lpString="st") returned 2 [0044.872] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.872] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|u|") returned 3 [0044.872] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|st|") returned 4 [0044.872] lstrlenW (lpString="|u|") returned 3 [0044.872] lstrlenW (lpString="|st|") returned 4 [0044.872] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.872] lstrlenW (lpString="p") returned 1 [0044.872] lstrlenW (lpString="p") returned 1 [0044.872] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.872] lstrlenW (lpString="st") returned 2 [0044.872] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.872] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|p|") returned 3 [0044.872] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|st|") returned 4 [0044.872] lstrlenW (lpString="|p|") returned 3 [0044.872] lstrlenW (lpString="|st|") returned 4 [0044.872] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.873] lstrlenW (lpString="ru") returned 2 [0044.873] lstrlenW (lpString="ru") returned 2 [0044.873] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.873] lstrlenW (lpString="st") returned 2 [0044.873] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.873] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|ru|") returned 4 [0044.873] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|st|") returned 4 [0044.873] lstrlenW (lpString="|ru|") returned 4 [0044.873] lstrlenW (lpString="|st|") returned 4 [0044.873] StrStrIW (lpFirst="|ru|", lpSrch="|st|") returned 0x0 [0044.873] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.873] lstrlenW (lpString="rp") returned 2 [0044.873] lstrlenW (lpString="rp") returned 2 [0044.873] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.873] lstrlenW (lpString="st") returned 2 [0044.873] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.873] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|rp|") returned 4 [0044.873] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|st|") returned 4 [0044.873] lstrlenW (lpString="|rp|") returned 4 [0044.873] lstrlenW (lpString="|st|") returned 4 [0044.873] StrStrIW (lpFirst="|rp|", lpSrch="|st|") returned 0x0 [0044.873] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.873] lstrlenW (lpString="sc") returned 2 [0044.873] lstrlenW (lpString="sc") returned 2 [0044.873] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.873] lstrlenW (lpString="st") returned 2 [0044.873] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.873] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|sc|") returned 4 [0044.873] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|st|") returned 4 [0044.873] lstrlenW (lpString="|sc|") returned 4 [0044.873] lstrlenW (lpString="|st|") returned 4 [0044.873] StrStrIW (lpFirst="|sc|", lpSrch="|st|") returned 0x0 [0044.873] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.873] lstrlenW (lpString="mo") returned 2 [0044.873] lstrlenW (lpString="mo") returned 2 [0044.873] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.873] lstrlenW (lpString="st") returned 2 [0044.873] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.873] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|mo|") returned 4 [0044.873] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|st|") returned 4 [0044.873] lstrlenW (lpString="|mo|") returned 4 [0044.873] lstrlenW (lpString="|st|") returned 4 [0044.873] StrStrIW (lpFirst="|mo|", lpSrch="|st|") returned 0x0 [0044.873] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.873] lstrlenW (lpString="d") returned 1 [0044.873] lstrlenW (lpString="d") returned 1 [0044.874] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.874] lstrlenW (lpString="st") returned 2 [0044.874] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.874] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|d|") returned 3 [0044.874] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|st|") returned 4 [0044.874] lstrlenW (lpString="|d|") returned 3 [0044.874] lstrlenW (lpString="|st|") returned 4 [0044.874] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.874] lstrlenW (lpString="m") returned 1 [0044.874] lstrlenW (lpString="m") returned 1 [0044.874] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.874] lstrlenW (lpString="st") returned 2 [0044.874] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.874] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|m|") returned 3 [0044.874] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|st|") returned 4 [0044.874] lstrlenW (lpString="|m|") returned 3 [0044.874] lstrlenW (lpString="|st|") returned 4 [0044.874] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.874] lstrlenW (lpString="i") returned 1 [0044.874] lstrlenW (lpString="i") returned 1 [0044.874] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.874] lstrlenW (lpString="st") returned 2 [0044.874] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.874] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|i|") returned 3 [0044.874] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|st|") returned 4 [0044.874] lstrlenW (lpString="|i|") returned 3 [0044.874] lstrlenW (lpString="|st|") returned 4 [0044.874] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.874] lstrlenW (lpString="tn") returned 2 [0044.874] lstrlenW (lpString="tn") returned 2 [0044.874] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.874] lstrlenW (lpString="st") returned 2 [0044.874] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.874] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|tn|") returned 4 [0044.874] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|st|") returned 4 [0044.874] lstrlenW (lpString="|tn|") returned 4 [0044.874] lstrlenW (lpString="|st|") returned 4 [0044.874] StrStrIW (lpFirst="|tn|", lpSrch="|st|") returned 0x0 [0044.874] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.875] lstrlenW (lpString="tr") returned 2 [0044.875] lstrlenW (lpString="tr") returned 2 [0044.875] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.875] lstrlenW (lpString="st") returned 2 [0044.875] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.875] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|tr|") returned 4 [0044.875] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|st|") returned 4 [0044.875] lstrlenW (lpString="|tr|") returned 4 [0044.875] lstrlenW (lpString="|st|") returned 4 [0044.875] StrStrIW (lpFirst="|tr|", lpSrch="|st|") returned 0x0 [0044.875] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.875] lstrlenW (lpString="st") returned 2 [0044.875] lstrlenW (lpString="st") returned 2 [0044.875] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.875] lstrlenW (lpString="st") returned 2 [0044.875] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.875] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|st|") returned 4 [0044.875] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|st|") returned 4 [0044.875] lstrlenW (lpString="|st|") returned 4 [0044.875] lstrlenW (lpString="|st|") returned 4 [0044.875] StrStrIW (lpFirst="|st|", lpSrch="|st|") returned="|st|" [0044.875] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.875] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.875] lstrlenW (lpString="00:00") returned 5 [0044.875] lstrlenW (lpString="-/") returned 2 [0044.875] StrChrIW (lpStart="-/", wMatch=0x30) returned 0x0 [0044.875] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.875] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.875] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.875] lstrlenW (lpString="00:00") returned 5 [0044.875] StrChrIW (lpStart="00:00", wMatch=0x3a) returned=":00" [0044.875] lstrlenW (lpString="00:00") returned 5 [0044.875] _memicmp (_Buf1=0x132e33bf0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.875] _memicmp (_Buf1=0x132e33c30, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.875] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.875] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.875] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.875] lstrlenW (lpString="00") returned 2 [0044.875] lstrlenW (lpString="-/") returned 2 [0044.875] StrChrIW (lpStart="-/", wMatch=0x30) returned 0x0 [0044.875] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.875] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.875] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.876] _memicmp (_Buf1=0x132e3ad20, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.876] lstrlenW (lpString="00:00") returned 5 [0044.876] lstrlenW (lpString="00:00") returned 5 [0044.876] lstrlenW (lpString=" \x09") returned 2 [0044.876] StrChrW (lpStart=" \x09", wMatch=0x30) returned 0x0 [0044.876] StrChrW (lpStart=" \x09", wMatch=0x30) returned 0x0 [0044.876] StrChrW (lpStart=" \x09", wMatch=0x30) returned 0x0 [0044.876] StrChrW (lpStart=" \x09", wMatch=0x3a) returned 0x0 [0044.876] StrChrW (lpStart=" \x09", wMatch=0x30) returned 0x0 [0044.876] StrChrW (lpStart=" \x09", wMatch=0x30) returned 0x0 [0044.877] GetLastError () returned 0x0 [0044.877] lstrlenW (lpString="00:00") returned 5 [0044.877] lstrlenW (lpString="00:00") returned 5 [0044.877] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.877] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.877] lstrlenW (lpString="/du") returned 3 [0044.877] lstrlenW (lpString="-/") returned 2 [0044.877] StrChrIW (lpStart="-/", wMatch=0x2f) returned="/" [0044.877] lstrlenW (lpString="create") returned 6 [0044.877] lstrlenW (lpString="create") returned 6 [0044.877] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.877] lstrlenW (lpString="du") returned 2 [0044.877] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.878] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0x9, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|create|") returned 8 [0044.878] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|du|") returned 4 [0044.878] lstrlenW (lpString="|create|") returned 8 [0044.878] lstrlenW (lpString="|du|") returned 4 [0044.878] StrStrIW (lpFirst="|create|", lpSrch="|du|") returned 0x0 [0044.878] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.878] lstrlenW (lpString="?") returned 1 [0044.878] lstrlenW (lpString="?") returned 1 [0044.878] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.878] lstrlenW (lpString="du") returned 2 [0044.878] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.878] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|?|") returned 3 [0044.878] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|du|") returned 4 [0044.878] lstrlenW (lpString="|?|") returned 3 [0044.878] lstrlenW (lpString="|du|") returned 4 [0044.878] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.878] lstrlenW (lpString="s") returned 1 [0044.878] lstrlenW (lpString="s") returned 1 [0044.878] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.878] lstrlenW (lpString="du") returned 2 [0044.878] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.878] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|s|") returned 3 [0044.878] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|du|") returned 4 [0044.878] lstrlenW (lpString="|s|") returned 3 [0044.878] lstrlenW (lpString="|du|") returned 4 [0044.878] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.878] lstrlenW (lpString="u") returned 1 [0044.878] lstrlenW (lpString="u") returned 1 [0044.878] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.878] lstrlenW (lpString="du") returned 2 [0044.878] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.878] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|u|") returned 3 [0044.878] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|du|") returned 4 [0044.878] lstrlenW (lpString="|u|") returned 3 [0044.878] lstrlenW (lpString="|du|") returned 4 [0044.878] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.878] lstrlenW (lpString="p") returned 1 [0044.878] lstrlenW (lpString="p") returned 1 [0044.878] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.878] lstrlenW (lpString="du") returned 2 [0044.878] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.878] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|p|") returned 3 [0044.878] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|du|") returned 4 [0044.878] lstrlenW (lpString="|p|") returned 3 [0044.878] lstrlenW (lpString="|du|") returned 4 [0044.878] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.879] lstrlenW (lpString="ru") returned 2 [0044.879] lstrlenW (lpString="ru") returned 2 [0044.879] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.879] lstrlenW (lpString="du") returned 2 [0044.879] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.879] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|ru|") returned 4 [0044.879] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|du|") returned 4 [0044.879] lstrlenW (lpString="|ru|") returned 4 [0044.879] lstrlenW (lpString="|du|") returned 4 [0044.879] StrStrIW (lpFirst="|ru|", lpSrch="|du|") returned 0x0 [0044.879] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.879] lstrlenW (lpString="rp") returned 2 [0044.879] lstrlenW (lpString="rp") returned 2 [0044.879] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.879] lstrlenW (lpString="du") returned 2 [0044.879] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.879] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|rp|") returned 4 [0044.879] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|du|") returned 4 [0044.879] lstrlenW (lpString="|rp|") returned 4 [0044.879] lstrlenW (lpString="|du|") returned 4 [0044.879] StrStrIW (lpFirst="|rp|", lpSrch="|du|") returned 0x0 [0044.879] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.879] lstrlenW (lpString="sc") returned 2 [0044.879] lstrlenW (lpString="sc") returned 2 [0044.879] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.879] lstrlenW (lpString="du") returned 2 [0044.879] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.879] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|sc|") returned 4 [0044.879] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|du|") returned 4 [0044.879] lstrlenW (lpString="|sc|") returned 4 [0044.879] lstrlenW (lpString="|du|") returned 4 [0044.879] StrStrIW (lpFirst="|sc|", lpSrch="|du|") returned 0x0 [0044.879] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.879] lstrlenW (lpString="mo") returned 2 [0044.879] lstrlenW (lpString="mo") returned 2 [0044.879] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.879] lstrlenW (lpString="du") returned 2 [0044.879] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.879] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|mo|") returned 4 [0044.879] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|du|") returned 4 [0044.879] lstrlenW (lpString="|mo|") returned 4 [0044.879] lstrlenW (lpString="|du|") returned 4 [0044.879] StrStrIW (lpFirst="|mo|", lpSrch="|du|") returned 0x0 [0044.879] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.879] lstrlenW (lpString="d") returned 1 [0044.879] lstrlenW (lpString="d") returned 1 [0044.880] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.880] lstrlenW (lpString="du") returned 2 [0044.880] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.880] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|d|") returned 3 [0044.880] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|du|") returned 4 [0044.880] lstrlenW (lpString="|d|") returned 3 [0044.880] lstrlenW (lpString="|du|") returned 4 [0044.880] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.880] lstrlenW (lpString="m") returned 1 [0044.880] lstrlenW (lpString="m") returned 1 [0044.880] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.880] lstrlenW (lpString="du") returned 2 [0044.880] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.880] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|m|") returned 3 [0044.880] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|du|") returned 4 [0044.880] lstrlenW (lpString="|m|") returned 3 [0044.880] lstrlenW (lpString="|du|") returned 4 [0044.880] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.880] lstrlenW (lpString="i") returned 1 [0044.880] lstrlenW (lpString="i") returned 1 [0044.880] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.880] lstrlenW (lpString="du") returned 2 [0044.880] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.880] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|i|") returned 3 [0044.880] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|du|") returned 4 [0044.880] lstrlenW (lpString="|i|") returned 3 [0044.880] lstrlenW (lpString="|du|") returned 4 [0044.880] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.880] lstrlenW (lpString="tn") returned 2 [0044.880] lstrlenW (lpString="tn") returned 2 [0044.880] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.880] lstrlenW (lpString="du") returned 2 [0044.880] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.880] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|tn|") returned 4 [0044.880] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|du|") returned 4 [0044.880] lstrlenW (lpString="|tn|") returned 4 [0044.880] lstrlenW (lpString="|du|") returned 4 [0044.880] StrStrIW (lpFirst="|tn|", lpSrch="|du|") returned 0x0 [0044.880] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.880] lstrlenW (lpString="tr") returned 2 [0044.880] lstrlenW (lpString="tr") returned 2 [0044.880] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.881] lstrlenW (lpString="du") returned 2 [0044.881] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.881] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|tr|") returned 4 [0044.881] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|du|") returned 4 [0044.881] lstrlenW (lpString="|tr|") returned 4 [0044.881] lstrlenW (lpString="|du|") returned 4 [0044.881] StrStrIW (lpFirst="|tr|", lpSrch="|du|") returned 0x0 [0044.881] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.881] lstrlenW (lpString="st") returned 2 [0044.881] lstrlenW (lpString="st") returned 2 [0044.881] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.881] lstrlenW (lpString="du") returned 2 [0044.881] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.881] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|st|") returned 4 [0044.881] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|du|") returned 4 [0044.881] lstrlenW (lpString="|st|") returned 4 [0044.881] lstrlenW (lpString="|du|") returned 4 [0044.881] StrStrIW (lpFirst="|st|", lpSrch="|du|") returned 0x0 [0044.881] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.881] lstrlenW (lpString="sd") returned 2 [0044.881] lstrlenW (lpString="sd") returned 2 [0044.881] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.881] lstrlenW (lpString="du") returned 2 [0044.881] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.881] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|sd|") returned 4 [0044.881] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|du|") returned 4 [0044.881] lstrlenW (lpString="|sd|") returned 4 [0044.881] lstrlenW (lpString="|du|") returned 4 [0044.881] StrStrIW (lpFirst="|sd|", lpSrch="|du|") returned 0x0 [0044.881] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.881] lstrlenW (lpString="ed") returned 2 [0044.881] lstrlenW (lpString="ed") returned 2 [0044.881] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.881] lstrlenW (lpString="du") returned 2 [0044.881] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.881] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|ed|") returned 4 [0044.881] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|du|") returned 4 [0044.881] lstrlenW (lpString="|ed|") returned 4 [0044.881] lstrlenW (lpString="|du|") returned 4 [0044.882] StrStrIW (lpFirst="|ed|", lpSrch="|du|") returned 0x0 [0044.882] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.882] lstrlenW (lpString="it") returned 2 [0044.882] lstrlenW (lpString="it") returned 2 [0044.882] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.882] lstrlenW (lpString="du") returned 2 [0044.882] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.882] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|it|") returned 4 [0044.882] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|du|") returned 4 [0044.882] lstrlenW (lpString="|it|") returned 4 [0044.882] lstrlenW (lpString="|du|") returned 4 [0044.882] StrStrIW (lpFirst="|it|", lpSrch="|du|") returned 0x0 [0044.882] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.882] lstrlenW (lpString="et") returned 2 [0044.882] lstrlenW (lpString="et") returned 2 [0044.882] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.882] lstrlenW (lpString="du") returned 2 [0044.882] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.882] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|et|") returned 4 [0044.882] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|du|") returned 4 [0044.882] lstrlenW (lpString="|et|") returned 4 [0044.882] lstrlenW (lpString="|du|") returned 4 [0044.882] StrStrIW (lpFirst="|et|", lpSrch="|du|") returned 0x0 [0044.882] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.882] lstrlenW (lpString="k") returned 1 [0044.882] lstrlenW (lpString="k") returned 1 [0044.882] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.882] lstrlenW (lpString="du") returned 2 [0044.882] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.882] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|k|") returned 3 [0044.882] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|du|") returned 4 [0044.882] lstrlenW (lpString="|k|") returned 3 [0044.882] lstrlenW (lpString="|du|") returned 4 [0044.882] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.882] lstrlenW (lpString="du") returned 2 [0044.882] lstrlenW (lpString="du") returned 2 [0044.882] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.882] lstrlenW (lpString="du") returned 2 [0044.882] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.883] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|du|") returned 4 [0044.883] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|du|") returned 4 [0044.883] lstrlenW (lpString="|du|") returned 4 [0044.883] lstrlenW (lpString="|du|") returned 4 [0044.883] StrStrIW (lpFirst="|du|", lpSrch="|du|") returned="|du|" [0044.883] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.883] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.883] lstrlenW (lpString="9999:59") returned 7 [0044.883] lstrlenW (lpString="-/") returned 2 [0044.883] StrChrIW (lpStart="-/", wMatch=0x39) returned 0x0 [0044.883] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.883] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.883] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.883] lstrlenW (lpString="9999:59") returned 7 [0044.883] StrChrIW (lpStart="9999:59", wMatch=0x3a) returned=":59" [0044.883] lstrlenW (lpString="9999:59") returned 7 [0044.883] _memicmp (_Buf1=0x132e33bf0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.883] _memicmp (_Buf1=0x132e33c30, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.883] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.883] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.883] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.883] lstrlenW (lpString="9999") returned 4 [0044.883] lstrlenW (lpString="-/") returned 2 [0044.883] StrChrIW (lpStart="-/", wMatch=0x39) returned 0x0 [0044.883] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.883] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.883] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.883] _memicmp (_Buf1=0x132e3ad20, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.883] lstrlenW (lpString="9999:59") returned 7 [0044.883] lstrlenW (lpString="9999:59") returned 7 [0044.883] lstrlenW (lpString=" \x09") returned 2 [0044.883] StrChrW (lpStart=" \x09", wMatch=0x39) returned 0x0 [0044.883] StrChrW (lpStart=" \x09", wMatch=0x39) returned 0x0 [0044.883] StrChrW (lpStart=" \x09", wMatch=0x39) returned 0x0 [0044.883] StrChrW (lpStart=" \x09", wMatch=0x39) returned 0x0 [0044.883] StrChrW (lpStart=" \x09", wMatch=0x39) returned 0x0 [0044.883] StrChrW (lpStart=" \x09", wMatch=0x3a) returned 0x0 [0044.883] StrChrW (lpStart=" \x09", wMatch=0x35) returned 0x0 [0044.883] StrChrW (lpStart=" \x09", wMatch=0x39) returned 0x0 [0044.883] GetLastError () returned 0x0 [0044.883] lstrlenW (lpString="9999:59") returned 7 [0044.884] lstrlenW (lpString="9999:59") returned 7 [0044.884] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.884] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.884] lstrlenW (lpString="/sc") returned 3 [0044.884] lstrlenW (lpString="-/") returned 2 [0044.884] StrChrIW (lpStart="-/", wMatch=0x2f) returned="/" [0044.884] lstrlenW (lpString="create") returned 6 [0044.884] lstrlenW (lpString="create") returned 6 [0044.884] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.884] lstrlenW (lpString="sc") returned 2 [0044.884] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.884] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0x9, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|create|") returned 8 [0044.884] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|sc|") returned 4 [0044.884] lstrlenW (lpString="|create|") returned 8 [0044.884] lstrlenW (lpString="|sc|") returned 4 [0044.884] StrStrIW (lpFirst="|create|", lpSrch="|sc|") returned 0x0 [0044.884] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.884] lstrlenW (lpString="?") returned 1 [0044.884] lstrlenW (lpString="?") returned 1 [0044.884] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.884] lstrlenW (lpString="sc") returned 2 [0044.884] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.884] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|?|") returned 3 [0044.884] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|sc|") returned 4 [0044.884] lstrlenW (lpString="|?|") returned 3 [0044.884] lstrlenW (lpString="|sc|") returned 4 [0044.884] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.884] lstrlenW (lpString="s") returned 1 [0044.884] lstrlenW (lpString="s") returned 1 [0044.884] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.884] lstrlenW (lpString="sc") returned 2 [0044.884] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.884] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|s|") returned 3 [0044.884] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|sc|") returned 4 [0044.884] lstrlenW (lpString="|s|") returned 3 [0044.884] lstrlenW (lpString="|sc|") returned 4 [0044.884] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.884] lstrlenW (lpString="u") returned 1 [0044.884] lstrlenW (lpString="u") returned 1 [0044.884] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.884] lstrlenW (lpString="sc") returned 2 [0044.884] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.885] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|u|") returned 3 [0044.885] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|sc|") returned 4 [0044.885] lstrlenW (lpString="|u|") returned 3 [0044.885] lstrlenW (lpString="|sc|") returned 4 [0044.885] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.885] lstrlenW (lpString="p") returned 1 [0044.885] lstrlenW (lpString="p") returned 1 [0044.885] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.885] lstrlenW (lpString="sc") returned 2 [0044.885] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.885] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|p|") returned 3 [0044.885] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|sc|") returned 4 [0044.885] lstrlenW (lpString="|p|") returned 3 [0044.885] lstrlenW (lpString="|sc|") returned 4 [0044.885] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.885] lstrlenW (lpString="ru") returned 2 [0044.885] lstrlenW (lpString="ru") returned 2 [0044.885] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.885] lstrlenW (lpString="sc") returned 2 [0044.885] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.885] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|ru|") returned 4 [0044.885] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|sc|") returned 4 [0044.885] lstrlenW (lpString="|ru|") returned 4 [0044.885] lstrlenW (lpString="|sc|") returned 4 [0044.885] StrStrIW (lpFirst="|ru|", lpSrch="|sc|") returned 0x0 [0044.885] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.885] lstrlenW (lpString="rp") returned 2 [0044.885] lstrlenW (lpString="rp") returned 2 [0044.885] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.885] lstrlenW (lpString="sc") returned 2 [0044.885] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.885] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|rp|") returned 4 [0044.885] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|sc|") returned 4 [0044.885] lstrlenW (lpString="|rp|") returned 4 [0044.885] lstrlenW (lpString="|sc|") returned 4 [0044.885] StrStrIW (lpFirst="|rp|", lpSrch="|sc|") returned 0x0 [0044.885] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.885] lstrlenW (lpString="sc") returned 2 [0044.885] lstrlenW (lpString="sc") returned 2 [0044.885] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.885] lstrlenW (lpString="sc") returned 2 [0044.886] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.886] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|sc|") returned 4 [0044.886] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|sc|") returned 4 [0044.886] lstrlenW (lpString="|sc|") returned 4 [0044.886] lstrlenW (lpString="|sc|") returned 4 [0044.886] StrStrIW (lpFirst="|sc|", lpSrch="|sc|") returned="|sc|" [0044.886] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.886] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.886] lstrlenW (lpString="daily") returned 5 [0044.886] lstrlenW (lpString="-/") returned 2 [0044.886] StrChrIW (lpStart="-/", wMatch=0x64) returned 0x0 [0044.886] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.886] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.886] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.886] lstrlenW (lpString="daily") returned 5 [0044.886] StrChrIW (lpStart="daily", wMatch=0x3a) returned 0x0 [0044.886] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.886] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.886] _memicmp (_Buf1=0x132e3ad20, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.886] lstrlenW (lpString="daily") returned 5 [0044.886] lstrlenW (lpString="daily") returned 5 [0044.886] lstrlenW (lpString=" \x09") returned 2 [0044.886] StrChrW (lpStart=" \x09", wMatch=0x64) returned 0x0 [0044.886] StrChrW (lpStart=" \x09", wMatch=0x64) returned 0x0 [0044.886] StrChrW (lpStart=" \x09", wMatch=0x61) returned 0x0 [0044.886] StrChrW (lpStart=" \x09", wMatch=0x69) returned 0x0 [0044.886] StrChrW (lpStart=" \x09", wMatch=0x6c) returned 0x0 [0044.886] StrChrW (lpStart=" \x09", wMatch=0x79) returned 0x0 [0044.886] GetLastError () returned 0x0 [0044.886] lstrlenW (lpString="daily") returned 5 [0044.886] lstrlenW (lpString="daily") returned 5 [0044.886] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.886] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.886] lstrlenW (lpString="/ri") returned 3 [0044.886] lstrlenW (lpString="-/") returned 2 [0044.886] StrChrIW (lpStart="-/", wMatch=0x2f) returned="/" [0044.886] lstrlenW (lpString="create") returned 6 [0044.886] lstrlenW (lpString="create") returned 6 [0044.886] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.886] lstrlenW (lpString="ri") returned 2 [0044.886] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.886] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0x9, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|create|") returned 8 [0044.887] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|ri|") returned 4 [0044.887] lstrlenW (lpString="|create|") returned 8 [0044.887] lstrlenW (lpString="|ri|") returned 4 [0044.887] StrStrIW (lpFirst="|create|", lpSrch="|ri|") returned 0x0 [0044.887] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.887] lstrlenW (lpString="?") returned 1 [0044.887] lstrlenW (lpString="?") returned 1 [0044.887] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.887] lstrlenW (lpString="ri") returned 2 [0044.887] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.887] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|?|") returned 3 [0044.887] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|ri|") returned 4 [0044.887] lstrlenW (lpString="|?|") returned 3 [0044.887] lstrlenW (lpString="|ri|") returned 4 [0044.887] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.887] lstrlenW (lpString="s") returned 1 [0044.887] lstrlenW (lpString="s") returned 1 [0044.887] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.887] lstrlenW (lpString="ri") returned 2 [0044.887] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.887] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|s|") returned 3 [0044.887] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|ri|") returned 4 [0044.887] lstrlenW (lpString="|s|") returned 3 [0044.887] lstrlenW (lpString="|ri|") returned 4 [0044.887] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.887] lstrlenW (lpString="u") returned 1 [0044.887] lstrlenW (lpString="u") returned 1 [0044.887] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.887] lstrlenW (lpString="ri") returned 2 [0044.887] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.887] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|u|") returned 3 [0044.887] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|ri|") returned 4 [0044.887] lstrlenW (lpString="|u|") returned 3 [0044.887] lstrlenW (lpString="|ri|") returned 4 [0044.887] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.887] lstrlenW (lpString="p") returned 1 [0044.887] lstrlenW (lpString="p") returned 1 [0044.887] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.887] lstrlenW (lpString="ri") returned 2 [0044.887] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.887] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|p|") returned 3 [0044.888] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|ri|") returned 4 [0044.888] lstrlenW (lpString="|p|") returned 3 [0044.888] lstrlenW (lpString="|ri|") returned 4 [0044.888] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.888] lstrlenW (lpString="ru") returned 2 [0044.888] lstrlenW (lpString="ru") returned 2 [0044.888] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.888] lstrlenW (lpString="ri") returned 2 [0044.888] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.888] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|ru|") returned 4 [0044.888] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|ri|") returned 4 [0044.888] lstrlenW (lpString="|ru|") returned 4 [0044.888] lstrlenW (lpString="|ri|") returned 4 [0044.888] StrStrIW (lpFirst="|ru|", lpSrch="|ri|") returned 0x0 [0044.888] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.888] lstrlenW (lpString="rp") returned 2 [0044.888] lstrlenW (lpString="rp") returned 2 [0044.888] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.888] lstrlenW (lpString="ri") returned 2 [0044.888] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.888] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|rp|") returned 4 [0044.888] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|ri|") returned 4 [0044.888] lstrlenW (lpString="|rp|") returned 4 [0044.888] lstrlenW (lpString="|ri|") returned 4 [0044.888] StrStrIW (lpFirst="|rp|", lpSrch="|ri|") returned 0x0 [0044.888] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.888] lstrlenW (lpString="sc") returned 2 [0044.888] lstrlenW (lpString="sc") returned 2 [0044.888] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.888] lstrlenW (lpString="ri") returned 2 [0044.888] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.888] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|sc|") returned 4 [0044.888] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|ri|") returned 4 [0044.888] lstrlenW (lpString="|sc|") returned 4 [0044.888] lstrlenW (lpString="|ri|") returned 4 [0044.888] StrStrIW (lpFirst="|sc|", lpSrch="|ri|") returned 0x0 [0044.888] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.888] lstrlenW (lpString="mo") returned 2 [0044.888] lstrlenW (lpString="mo") returned 2 [0044.888] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.888] lstrlenW (lpString="ri") returned 2 [0044.889] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.889] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|mo|") returned 4 [0044.889] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|ri|") returned 4 [0044.889] lstrlenW (lpString="|mo|") returned 4 [0044.889] lstrlenW (lpString="|ri|") returned 4 [0044.889] StrStrIW (lpFirst="|mo|", lpSrch="|ri|") returned 0x0 [0044.889] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.889] lstrlenW (lpString="d") returned 1 [0044.889] lstrlenW (lpString="d") returned 1 [0044.889] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.889] lstrlenW (lpString="ri") returned 2 [0044.889] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.889] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|d|") returned 3 [0044.889] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|ri|") returned 4 [0044.889] lstrlenW (lpString="|d|") returned 3 [0044.889] lstrlenW (lpString="|ri|") returned 4 [0044.889] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.889] lstrlenW (lpString="m") returned 1 [0044.889] lstrlenW (lpString="m") returned 1 [0044.889] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.889] lstrlenW (lpString="ri") returned 2 [0044.889] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.889] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|m|") returned 3 [0044.889] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|ri|") returned 4 [0044.889] lstrlenW (lpString="|m|") returned 3 [0044.889] lstrlenW (lpString="|ri|") returned 4 [0044.889] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.889] lstrlenW (lpString="i") returned 1 [0044.889] lstrlenW (lpString="i") returned 1 [0044.889] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.889] lstrlenW (lpString="ri") returned 2 [0044.889] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.889] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|i|") returned 3 [0044.889] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|ri|") returned 4 [0044.889] lstrlenW (lpString="|i|") returned 3 [0044.889] lstrlenW (lpString="|ri|") returned 4 [0044.889] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.889] lstrlenW (lpString="tn") returned 2 [0044.889] lstrlenW (lpString="tn") returned 2 [0044.889] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.890] lstrlenW (lpString="ri") returned 2 [0044.890] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.890] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|tn|") returned 4 [0044.890] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|ri|") returned 4 [0044.890] lstrlenW (lpString="|tn|") returned 4 [0044.890] lstrlenW (lpString="|ri|") returned 4 [0044.890] StrStrIW (lpFirst="|tn|", lpSrch="|ri|") returned 0x0 [0044.890] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.890] lstrlenW (lpString="tr") returned 2 [0044.890] lstrlenW (lpString="tr") returned 2 [0044.890] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.890] lstrlenW (lpString="ri") returned 2 [0044.890] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.890] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|tr|") returned 4 [0044.890] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|ri|") returned 4 [0044.890] lstrlenW (lpString="|tr|") returned 4 [0044.890] lstrlenW (lpString="|ri|") returned 4 [0044.890] StrStrIW (lpFirst="|tr|", lpSrch="|ri|") returned 0x0 [0044.890] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.890] lstrlenW (lpString="st") returned 2 [0044.890] lstrlenW (lpString="st") returned 2 [0044.890] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.890] lstrlenW (lpString="ri") returned 2 [0044.890] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.890] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|st|") returned 4 [0044.890] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|ri|") returned 4 [0044.890] lstrlenW (lpString="|st|") returned 4 [0044.890] lstrlenW (lpString="|ri|") returned 4 [0044.890] StrStrIW (lpFirst="|st|", lpSrch="|ri|") returned 0x0 [0044.890] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.890] lstrlenW (lpString="sd") returned 2 [0044.890] lstrlenW (lpString="sd") returned 2 [0044.890] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.890] lstrlenW (lpString="ri") returned 2 [0044.890] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.890] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|sd|") returned 4 [0044.890] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|ri|") returned 4 [0044.890] lstrlenW (lpString="|sd|") returned 4 [0044.890] lstrlenW (lpString="|ri|") returned 4 [0044.890] StrStrIW (lpFirst="|sd|", lpSrch="|ri|") returned 0x0 [0044.891] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.891] lstrlenW (lpString="ed") returned 2 [0044.891] lstrlenW (lpString="ed") returned 2 [0044.891] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.891] lstrlenW (lpString="ri") returned 2 [0044.891] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.891] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|ed|") returned 4 [0044.891] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|ri|") returned 4 [0044.891] lstrlenW (lpString="|ed|") returned 4 [0044.891] lstrlenW (lpString="|ri|") returned 4 [0044.891] StrStrIW (lpFirst="|ed|", lpSrch="|ri|") returned 0x0 [0044.891] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.891] lstrlenW (lpString="it") returned 2 [0044.891] lstrlenW (lpString="it") returned 2 [0044.891] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.891] lstrlenW (lpString="ri") returned 2 [0044.891] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.891] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|it|") returned 4 [0044.891] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|ri|") returned 4 [0044.891] lstrlenW (lpString="|it|") returned 4 [0044.891] lstrlenW (lpString="|ri|") returned 4 [0044.891] StrStrIW (lpFirst="|it|", lpSrch="|ri|") returned 0x0 [0044.891] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.891] lstrlenW (lpString="et") returned 2 [0044.891] lstrlenW (lpString="et") returned 2 [0044.891] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.891] lstrlenW (lpString="ri") returned 2 [0044.891] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.891] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|et|") returned 4 [0044.891] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|ri|") returned 4 [0044.891] lstrlenW (lpString="|et|") returned 4 [0044.891] lstrlenW (lpString="|ri|") returned 4 [0044.891] StrStrIW (lpFirst="|et|", lpSrch="|ri|") returned 0x0 [0044.892] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.892] lstrlenW (lpString="k") returned 1 [0044.892] lstrlenW (lpString="k") returned 1 [0044.892] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.892] lstrlenW (lpString="ri") returned 2 [0044.892] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.892] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|k|") returned 3 [0044.892] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|ri|") returned 4 [0044.892] lstrlenW (lpString="|k|") returned 3 [0044.892] lstrlenW (lpString="|ri|") returned 4 [0044.892] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.892] lstrlenW (lpString="du") returned 2 [0044.892] lstrlenW (lpString="du") returned 2 [0044.892] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.892] lstrlenW (lpString="ri") returned 2 [0044.892] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.892] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|du|") returned 4 [0044.892] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|ri|") returned 4 [0044.892] lstrlenW (lpString="|du|") returned 4 [0044.892] lstrlenW (lpString="|ri|") returned 4 [0044.892] StrStrIW (lpFirst="|du|", lpSrch="|ri|") returned 0x0 [0044.892] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.892] lstrlenW (lpString="ri") returned 2 [0044.892] lstrlenW (lpString="ri") returned 2 [0044.892] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.892] lstrlenW (lpString="ri") returned 2 [0044.892] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.892] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|ri|") returned 4 [0044.892] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|ri|") returned 4 [0044.892] lstrlenW (lpString="|ri|") returned 4 [0044.892] lstrlenW (lpString="|ri|") returned 4 [0044.893] StrStrIW (lpFirst="|ri|", lpSrch="|ri|") returned="|ri|" [0044.893] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.893] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.893] lstrlenW (lpString="3") returned 1 [0044.893] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.893] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.893] lstrlenW (lpString="3") returned 1 [0044.893] StrChrIW (lpStart="3", wMatch=0x3a) returned 0x0 [0044.893] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.893] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.893] _memicmp (_Buf1=0x132e3ad20, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.893] lstrlenW (lpString="3") returned 1 [0044.893] lstrlenW (lpString="3") returned 1 [0044.893] lstrlenW (lpString=" \x09") returned 2 [0044.893] StrChrW (lpStart=" \x09", wMatch=0x33) returned 0x0 [0044.893] StrChrW (lpStart=" \x09", wMatch=0x33) returned 0x0 [0044.893] GetLastError () returned 0x0 [0044.893] lstrlenW (lpString="3") returned 1 [0044.893] lstrlenW (lpString="3") returned 1 [0044.893] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.893] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.893] lstrlenW (lpString="/f") returned 2 [0044.893] lstrlenW (lpString="-/") returned 2 [0044.893] StrChrIW (lpStart="-/", wMatch=0x2f) returned="/" [0044.893] lstrlenW (lpString="create") returned 6 [0044.893] lstrlenW (lpString="create") returned 6 [0044.893] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.893] lstrlenW (lpString="f") returned 1 [0044.893] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.893] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0x9, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|create|") returned 8 [0044.893] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x4, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|f|") returned 3 [0044.893] lstrlenW (lpString="|create|") returned 8 [0044.893] lstrlenW (lpString="|f|") returned 3 [0044.893] StrStrIW (lpFirst="|create|", lpSrch="|f|") returned 0x0 [0044.893] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.893] lstrlenW (lpString="?") returned 1 [0044.893] lstrlenW (lpString="?") returned 1 [0044.893] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.893] lstrlenW (lpString="f") returned 1 [0044.893] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.893] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|?|") returned 3 [0044.894] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x4, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|f|") returned 3 [0044.894] lstrlenW (lpString="|?|") returned 3 [0044.894] lstrlenW (lpString="|f|") returned 3 [0044.894] StrStrIW (lpFirst="|?|", lpSrch="|f|") returned 0x0 [0044.894] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.894] lstrlenW (lpString="s") returned 1 [0044.894] lstrlenW (lpString="s") returned 1 [0044.894] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.894] lstrlenW (lpString="f") returned 1 [0044.894] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.894] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|s|") returned 3 [0044.894] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x4, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|f|") returned 3 [0044.894] lstrlenW (lpString="|s|") returned 3 [0044.894] lstrlenW (lpString="|f|") returned 3 [0044.894] StrStrIW (lpFirst="|s|", lpSrch="|f|") returned 0x0 [0044.894] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.894] lstrlenW (lpString="u") returned 1 [0044.894] lstrlenW (lpString="u") returned 1 [0044.894] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.894] lstrlenW (lpString="f") returned 1 [0044.894] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.894] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|u|") returned 3 [0044.894] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x4, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|f|") returned 3 [0044.894] lstrlenW (lpString="|u|") returned 3 [0044.894] lstrlenW (lpString="|f|") returned 3 [0044.894] StrStrIW (lpFirst="|u|", lpSrch="|f|") returned 0x0 [0044.894] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.894] lstrlenW (lpString="p") returned 1 [0044.894] lstrlenW (lpString="p") returned 1 [0044.894] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.894] lstrlenW (lpString="f") returned 1 [0044.894] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.894] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|p|") returned 3 [0044.894] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x4, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|f|") returned 3 [0044.894] lstrlenW (lpString="|p|") returned 3 [0044.894] lstrlenW (lpString="|f|") returned 3 [0044.894] StrStrIW (lpFirst="|p|", lpSrch="|f|") returned 0x0 [0044.894] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.894] lstrlenW (lpString="ru") returned 2 [0044.894] lstrlenW (lpString="ru") returned 2 [0044.895] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.895] lstrlenW (lpString="f") returned 1 [0044.895] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.895] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|ru|") returned 4 [0044.895] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x4, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|f|") returned 3 [0044.895] lstrlenW (lpString="|ru|") returned 4 [0044.895] lstrlenW (lpString="|f|") returned 3 [0044.895] StrStrIW (lpFirst="|ru|", lpSrch="|f|") returned 0x0 [0044.895] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.895] lstrlenW (lpString="rp") returned 2 [0044.895] lstrlenW (lpString="rp") returned 2 [0044.895] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.895] lstrlenW (lpString="f") returned 1 [0044.895] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.895] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|rp|") returned 4 [0044.895] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x4, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|f|") returned 3 [0044.895] lstrlenW (lpString="|rp|") returned 4 [0044.895] lstrlenW (lpString="|f|") returned 3 [0044.895] StrStrIW (lpFirst="|rp|", lpSrch="|f|") returned 0x0 [0044.895] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.895] lstrlenW (lpString="sc") returned 2 [0044.895] lstrlenW (lpString="sc") returned 2 [0044.895] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.895] lstrlenW (lpString="f") returned 1 [0044.895] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.895] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|sc|") returned 4 [0044.895] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x4, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|f|") returned 3 [0044.895] lstrlenW (lpString="|sc|") returned 4 [0044.895] lstrlenW (lpString="|f|") returned 3 [0044.895] StrStrIW (lpFirst="|sc|", lpSrch="|f|") returned 0x0 [0044.895] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.895] lstrlenW (lpString="mo") returned 2 [0044.895] lstrlenW (lpString="mo") returned 2 [0044.895] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.895] lstrlenW (lpString="f") returned 1 [0044.895] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.895] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|mo|") returned 4 [0044.895] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x4, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|f|") returned 3 [0044.895] lstrlenW (lpString="|mo|") returned 4 [0044.895] lstrlenW (lpString="|f|") returned 3 [0044.896] StrStrIW (lpFirst="|mo|", lpSrch="|f|") returned 0x0 [0044.896] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.896] lstrlenW (lpString="d") returned 1 [0044.896] lstrlenW (lpString="d") returned 1 [0044.896] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.896] lstrlenW (lpString="f") returned 1 [0044.896] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.896] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|d|") returned 3 [0044.896] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x4, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|f|") returned 3 [0044.896] lstrlenW (lpString="|d|") returned 3 [0044.896] lstrlenW (lpString="|f|") returned 3 [0044.896] StrStrIW (lpFirst="|d|", lpSrch="|f|") returned 0x0 [0044.896] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.896] lstrlenW (lpString="m") returned 1 [0044.896] lstrlenW (lpString="m") returned 1 [0044.896] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.896] lstrlenW (lpString="f") returned 1 [0044.896] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.896] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|m|") returned 3 [0044.896] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x4, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|f|") returned 3 [0044.896] lstrlenW (lpString="|m|") returned 3 [0044.896] lstrlenW (lpString="|f|") returned 3 [0044.896] StrStrIW (lpFirst="|m|", lpSrch="|f|") returned 0x0 [0044.896] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.896] lstrlenW (lpString="i") returned 1 [0044.896] lstrlenW (lpString="i") returned 1 [0044.896] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.896] lstrlenW (lpString="f") returned 1 [0044.896] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.896] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|i|") returned 3 [0044.896] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x4, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|f|") returned 3 [0044.896] lstrlenW (lpString="|i|") returned 3 [0044.896] lstrlenW (lpString="|f|") returned 3 [0044.896] StrStrIW (lpFirst="|i|", lpSrch="|f|") returned 0x0 [0044.896] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.896] lstrlenW (lpString="tn") returned 2 [0044.896] lstrlenW (lpString="tn") returned 2 [0044.896] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.896] lstrlenW (lpString="f") returned 1 [0044.896] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.897] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|tn|") returned 4 [0044.897] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x4, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|f|") returned 3 [0044.897] lstrlenW (lpString="|tn|") returned 4 [0044.897] lstrlenW (lpString="|f|") returned 3 [0044.897] StrStrIW (lpFirst="|tn|", lpSrch="|f|") returned 0x0 [0044.897] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.897] lstrlenW (lpString="tr") returned 2 [0044.897] lstrlenW (lpString="tr") returned 2 [0044.897] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.897] lstrlenW (lpString="f") returned 1 [0044.897] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.897] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|tr|") returned 4 [0044.897] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x4, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|f|") returned 3 [0044.897] lstrlenW (lpString="|tr|") returned 4 [0044.897] lstrlenW (lpString="|f|") returned 3 [0044.897] StrStrIW (lpFirst="|tr|", lpSrch="|f|") returned 0x0 [0044.897] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.897] lstrlenW (lpString="st") returned 2 [0044.897] lstrlenW (lpString="st") returned 2 [0044.897] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.897] lstrlenW (lpString="f") returned 1 [0044.897] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.897] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|st|") returned 4 [0044.897] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x4, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|f|") returned 3 [0044.897] lstrlenW (lpString="|st|") returned 4 [0044.897] lstrlenW (lpString="|f|") returned 3 [0044.897] StrStrIW (lpFirst="|st|", lpSrch="|f|") returned 0x0 [0044.897] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.897] lstrlenW (lpString="sd") returned 2 [0044.897] lstrlenW (lpString="sd") returned 2 [0044.897] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.897] lstrlenW (lpString="f") returned 1 [0044.897] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.897] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|sd|") returned 4 [0044.897] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x4, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|f|") returned 3 [0044.897] lstrlenW (lpString="|sd|") returned 4 [0044.897] lstrlenW (lpString="|f|") returned 3 [0044.897] StrStrIW (lpFirst="|sd|", lpSrch="|f|") returned 0x0 [0044.897] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.897] lstrlenW (lpString="ed") returned 2 [0044.898] lstrlenW (lpString="ed") returned 2 [0044.898] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.898] lstrlenW (lpString="f") returned 1 [0044.898] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.898] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|ed|") returned 4 [0044.898] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x4, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|f|") returned 3 [0044.898] lstrlenW (lpString="|ed|") returned 4 [0044.898] lstrlenW (lpString="|f|") returned 3 [0044.898] StrStrIW (lpFirst="|ed|", lpSrch="|f|") returned 0x0 [0044.898] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.898] lstrlenW (lpString="it") returned 2 [0044.898] lstrlenW (lpString="it") returned 2 [0044.898] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.898] lstrlenW (lpString="f") returned 1 [0044.898] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.898] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|it|") returned 4 [0044.898] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x4, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|f|") returned 3 [0044.898] lstrlenW (lpString="|it|") returned 4 [0044.898] lstrlenW (lpString="|f|") returned 3 [0044.898] StrStrIW (lpFirst="|it|", lpSrch="|f|") returned 0x0 [0044.898] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.898] lstrlenW (lpString="et") returned 2 [0044.898] lstrlenW (lpString="et") returned 2 [0044.898] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.898] lstrlenW (lpString="f") returned 1 [0044.898] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.898] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|et|") returned 4 [0044.898] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x4, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|f|") returned 3 [0044.898] lstrlenW (lpString="|et|") returned 4 [0044.898] lstrlenW (lpString="|f|") returned 3 [0044.898] StrStrIW (lpFirst="|et|", lpSrch="|f|") returned 0x0 [0044.898] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.898] lstrlenW (lpString="k") returned 1 [0044.898] lstrlenW (lpString="k") returned 1 [0044.898] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.898] lstrlenW (lpString="f") returned 1 [0044.898] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.898] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|k|") returned 3 [0044.898] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x4, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|f|") returned 3 [0044.899] lstrlenW (lpString="|k|") returned 3 [0044.899] lstrlenW (lpString="|f|") returned 3 [0044.899] StrStrIW (lpFirst="|k|", lpSrch="|f|") returned 0x0 [0044.899] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.899] lstrlenW (lpString="du") returned 2 [0044.899] lstrlenW (lpString="du") returned 2 [0044.899] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.899] lstrlenW (lpString="f") returned 1 [0044.899] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.899] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|du|") returned 4 [0044.899] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x4, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|f|") returned 3 [0044.899] lstrlenW (lpString="|du|") returned 4 [0044.899] lstrlenW (lpString="|f|") returned 3 [0044.899] StrStrIW (lpFirst="|du|", lpSrch="|f|") returned 0x0 [0044.899] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.899] lstrlenW (lpString="ri") returned 2 [0044.899] lstrlenW (lpString="ri") returned 2 [0044.899] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.899] lstrlenW (lpString="f") returned 1 [0044.899] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.899] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|ri|") returned 4 [0044.899] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x4, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|f|") returned 3 [0044.899] lstrlenW (lpString="|ri|") returned 4 [0044.899] lstrlenW (lpString="|f|") returned 3 [0044.899] StrStrIW (lpFirst="|ri|", lpSrch="|f|") returned 0x0 [0044.899] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.899] lstrlenW (lpString="z") returned 1 [0044.899] lstrlenW (lpString="z") returned 1 [0044.899] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.899] lstrlenW (lpString="f") returned 1 [0044.899] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.899] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|z|") returned 3 [0044.899] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x4, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|f|") returned 3 [0044.899] lstrlenW (lpString="|z|") returned 3 [0044.899] lstrlenW (lpString="|f|") returned 3 [0044.899] StrStrIW (lpFirst="|z|", lpSrch="|f|") returned 0x0 [0044.899] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.899] lstrlenW (lpString="f") returned 1 [0044.899] lstrlenW (lpString="f") returned 1 [0044.899] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.900] lstrlenW (lpString="f") returned 1 [0044.900] _memicmp (_Buf1=0x132e307f0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.900] _vsnwprintf (in: _Buffer=0x132e33ba0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|f|") returned 3 [0044.900] _vsnwprintf (in: _Buffer=0x132e30810, _BufferCount=0x4, _Format="|%s|", _ArgList=0x132c1c728 | out: _Buffer="|f|") returned 3 [0044.900] lstrlenW (lpString="|f|") returned 3 [0044.900] lstrlenW (lpString="|f|") returned 3 [0044.900] StrStrIW (lpFirst="|f|", lpSrch="|f|") returned="|f|" [0044.900] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.900] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.900] _memicmp (_Buf1=0x132e34370, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.900] LoadStringW (in: hInstance=0x0, uID=0x1ae, lpBuffer=0x132e3be10, cchBufferMax=256 | out: lpBuffer="MINUTE") returned 0x6 [0044.900] lstrlenW (lpString="MINUTE") returned 6 [0044.900] GetThreadLocale () returned 0x409 [0044.900] CompareStringW (Locale=0x409, dwCmpFlags=0x1, lpString1="daily", cchCount1=-1, lpString2="MINUTE", cchCount2=-1) returned 1 [0044.900] _memicmp (_Buf1=0x132e34370, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.900] LoadStringW (in: hInstance=0x0, uID=0x1af, lpBuffer=0x132e3be10, cchBufferMax=256 | out: lpBuffer="HOURLY") returned 0x6 [0044.900] lstrlenW (lpString="HOURLY") returned 6 [0044.900] GetThreadLocale () returned 0x409 [0044.900] CompareStringW (Locale=0x409, dwCmpFlags=0x1, lpString1="daily", cchCount1=-1, lpString2="HOURLY", cchCount2=-1) returned 1 [0044.900] _memicmp (_Buf1=0x132e34370, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.900] LoadStringW (in: hInstance=0x0, uID=0x1b0, lpBuffer=0x132e3be10, cchBufferMax=256 | out: lpBuffer="DAILY") returned 0x5 [0044.900] lstrlenW (lpString="DAILY") returned 5 [0044.900] GetThreadLocale () returned 0x409 [0044.900] CompareStringW (Locale=0x409, dwCmpFlags=0x1, lpString1="daily", cchCount1=-1, lpString2="DAILY", cchCount2=-1) returned 2 [0044.900] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0044.901] _memicmp (_Buf1=0x132e34370, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.901] LoadStringW (in: hInstance=0x0, uID=0x1d7, lpBuffer=0x132e3be10, cchBufferMax=256 | out: lpBuffer="First") returned 0x5 [0044.901] lstrlenW (lpString="First") returned 5 [0044.901] _memicmp (_Buf1=0x132e34370, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.901] LoadStringW (in: hInstance=0x0, uID=0x1d8, lpBuffer=0x132e3be10, cchBufferMax=256 | out: lpBuffer="Second") returned 0x6 [0044.901] lstrlenW (lpString="Second") returned 6 [0044.901] _memicmp (_Buf1=0x132e34370, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.901] LoadStringW (in: hInstance=0x0, uID=0x1d9, lpBuffer=0x132e3be10, cchBufferMax=256 | out: lpBuffer="Third") returned 0x5 [0044.901] lstrlenW (lpString="Third") returned 5 [0044.901] _memicmp (_Buf1=0x132e34370, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.901] LoadStringW (in: hInstance=0x0, uID=0x1da, lpBuffer=0x132e3be10, cchBufferMax=256 | out: lpBuffer="Fourth") returned 0x6 [0044.901] lstrlenW (lpString="Fourth") returned 6 [0044.901] _memicmp (_Buf1=0x132e34370, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.901] LoadStringW (in: hInstance=0x0, uID=0x1db, lpBuffer=0x132e3be10, cchBufferMax=256 | out: lpBuffer="Last") returned 0x4 [0044.901] lstrlenW (lpString="Last") returned 4 [0044.901] _memicmp (_Buf1=0x132e34370, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.901] LoadStringW (in: hInstance=0x0, uID=0x1d7, lpBuffer=0x132e3be10, cchBufferMax=256 | out: lpBuffer="First") returned 0x5 [0044.901] lstrlenW (lpString="First") returned 5 [0044.901] _memicmp (_Buf1=0x132e34370, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.901] LoadStringW (in: hInstance=0x0, uID=0x1d8, lpBuffer=0x132e3be10, cchBufferMax=256 | out: lpBuffer="Second") returned 0x6 [0044.901] lstrlenW (lpString="Second") returned 6 [0044.901] _memicmp (_Buf1=0x132e34370, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.902] LoadStringW (in: hInstance=0x0, uID=0x1d9, lpBuffer=0x132e3be10, cchBufferMax=256 | out: lpBuffer="Third") returned 0x5 [0044.902] lstrlenW (lpString="Third") returned 5 [0044.902] _memicmp (_Buf1=0x132e34370, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.902] LoadStringW (in: hInstance=0x0, uID=0x1da, lpBuffer=0x132e3be10, cchBufferMax=256 | out: lpBuffer="Fourth") returned 0x6 [0044.902] lstrlenW (lpString="Fourth") returned 6 [0044.902] _memicmp (_Buf1=0x132e34370, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.902] LoadStringW (in: hInstance=0x0, uID=0x1db, lpBuffer=0x132e3be10, cchBufferMax=256 | out: lpBuffer="Last") returned 0x4 [0044.902] lstrlenW (lpString="Last") returned 4 [0044.902] GetLocaleInfoW (in: Locale=0x400, LCType=0x21, lpLCData=0x132c1c580, cchData=128 | out: lpLCData="0") returned 2 [0044.902] _memicmp (_Buf1=0x132e34370, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.902] LoadStringW (in: hInstance=0x0, uID=0x19c, lpBuffer=0x132e3be10, cchBufferMax=256 | out: lpBuffer="mm/dd/yyyy") returned 0xa [0044.902] lstrlenW (lpString="mm/dd/yyyy") returned 10 [0044.902] GetLocaleInfoW (in: Locale=0x400, LCType=0x21, lpLCData=0x132c1c5a0, cchData=128 | out: lpLCData="0") returned 2 [0044.902] _memicmp (_Buf1=0x132e34370, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0044.902] LoadStringW (in: hInstance=0x0, uID=0x19c, lpBuffer=0x132e3be10, cchBufferMax=256 | out: lpBuffer="mm/dd/yyyy") returned 0xa [0044.902] lstrlenW (lpString="mm/dd/yyyy") returned 10 [0044.902] GetLocalTime (in: lpSystemTime=0x132c1c7d8 | out: lpSystemTime=0x132c1c7d8*(wYear=0x7e2, wMonth=0xb, wDayOfWeek=0x0, wDay=0xb, wHour=0x1, wMinute=0x26, wSecond=0x14, wMilliseconds=0x14e)) [0044.903] lstrlenW (lpString="00:00") returned 5 [0044.903] _wtoi (_String="00:00") returned 0 [0044.903] _wtoi (_String="00") returned 0 [0044.903] lstrlenW (lpString="") returned 0 [0044.904] GetLocalTime (in: lpSystemTime=0x132c1d1c8 | out: lpSystemTime=0x132c1d1c8*(wYear=0x7e2, wMonth=0xb, wDayOfWeek=0x0, wDay=0xb, wHour=0x1, wMinute=0x26, wSecond=0x14, wMilliseconds=0x14e)) [0044.904] lstrlenW (lpString="") returned 0 [0044.904] lstrlenW (lpString="00:00") returned 5 [0044.904] _wtoi (_String="00:00") returned 0 [0044.904] _wtoi (_String="00") returned 0 [0044.904] lstrlenW (lpString="") returned 0 [0044.904] lstrlenW (lpString="") returned 0 [0044.904] lstrlenW (lpString="3") returned 1 [0044.904] _wtol (_String="3") returned 3 [0044.904] lstrlenW (lpString="") returned 0 [0044.904] lstrlenW (lpString="9999:59") returned 7 [0044.906] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0044.912] CoInitializeSecurity (pSecDesc=0x0, cAuthSvc=-1, asAuthSvc=0x0, pReserved1=0x0, dwAuthnLevel=0x1, dwImpLevel=0x3, pAuthList=0x0, dwCapabilities=0x0, pReserved3=0x0) returned 0x0 [0044.924] CoCreateInstance (in: rclsid=0x7ff6ab8e9e68*(Data1=0xf87369f, Data2=0xa4e5, Data3=0x4cfc, Data4=([0]=0xbd, [1]=0x3e, [2]=0x73, [3]=0xe6, [4]=0x15, [5]=0x45, [6]=0x72, [7]=0xdd)), pUnkOuter=0x0, dwClsContext=0x17, riid=0x7ff6ab8e9e78*(Data1=0x2faba4c7, Data2=0x4da9, Data3=0x4013, Data4=([0]=0x96, [1]=0x97, [2]=0x20, [3]=0xcc, [4]=0x3f, [5]=0xd4, [6]=0xf, [7]=0x85)), ppv=0x132c1cf20 | out: ppv=0x132c1cf20*=0x132fd5750) returned 0x0 [0045.061] TaskScheduler:ITaskService:Connect (This=0x132fd5750, serverName=0x132c1d010*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), user=0x132c1cfe0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), domain=0x132c1cfc0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), password=0x132c1cfa0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0)) returned 0x0 [0045.069] TaskScheduler:ITaskService:GetFolder (in: This=0x132fd5750, Path=0x0, ppFolder=0x132c1d100 | out: ppFolder=0x132c1d100*=0x132fd58d0) returned 0x0 [0045.069] TaskScheduler:ITaskService:NewTask (in: This=0x132fd5750, flags=0x0, ppDefinition=0x132c1d0d8 | out: ppDefinition=0x132c1d0d8*=0x132fd5950) returned 0x0 [0045.069] ITaskDefinition:get_Actions (in: This=0x132fd5950, ppActions=0x132c1d020 | out: ppActions=0x132c1d020*=0x132fd59e0) returned 0x0 [0045.070] IActionCollection:Create (in: This=0x132fd59e0, Type=0, ppAction=0x132c1d060 | out: ppAction=0x132c1d060*=0x132fd5df0) returned 0x0 [0045.070] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XyuEncrypt.exe") returned 44 [0045.070] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XyuEncrypt.exe") returned 44 [0045.070] lstrlenW (lpString=" ") returned 1 [0045.070] StrChrW (lpStart=" ", wMatch=0x43) returned 0x0 [0045.070] StrChrW (lpStart=" ", wMatch=0x43) returned 0x0 [0045.070] StrChrW (lpStart=" ", wMatch=0x3a) returned 0x0 [0045.070] StrChrW (lpStart=" ", wMatch=0x5c) returned 0x0 [0045.070] StrChrW (lpStart=" ", wMatch=0x55) returned 0x0 [0045.070] StrChrW (lpStart=" ", wMatch=0x73) returned 0x0 [0045.070] StrChrW (lpStart=" ", wMatch=0x65) returned 0x0 [0045.070] StrChrW (lpStart=" ", wMatch=0x72) returned 0x0 [0045.070] StrChrW (lpStart=" ", wMatch=0x73) returned 0x0 [0045.070] StrChrW (lpStart=" ", wMatch=0x5c) returned 0x0 [0045.070] StrChrW (lpStart=" ", wMatch=0x43) returned 0x0 [0045.070] StrChrW (lpStart=" ", wMatch=0x49) returned 0x0 [0045.070] StrChrW (lpStart=" ", wMatch=0x69) returned 0x0 [0045.070] StrChrW (lpStart=" ", wMatch=0x48) returned 0x0 [0045.070] StrChrW (lpStart=" ", wMatch=0x6d) returned 0x0 [0045.070] StrChrW (lpStart=" ", wMatch=0x6e) returned 0x0 [0045.070] StrChrW (lpStart=" ", wMatch=0x78) returned 0x0 [0045.070] StrChrW (lpStart=" ", wMatch=0x4d) returned 0x0 [0045.070] StrChrW (lpStart=" ", wMatch=0x6e) returned 0x0 [0045.070] StrChrW (lpStart=" ", wMatch=0x36) returned 0x0 [0045.070] StrChrW (lpStart=" ", wMatch=0x50) returned 0x0 [0045.070] StrChrW (lpStart=" ", wMatch=0x73) returned 0x0 [0045.070] StrChrW (lpStart=" ", wMatch=0x5c) returned 0x0 [0045.070] StrChrW (lpStart=" ", wMatch=0x44) returned 0x0 [0045.070] StrChrW (lpStart=" ", wMatch=0x65) returned 0x0 [0045.070] StrChrW (lpStart=" ", wMatch=0x73) returned 0x0 [0045.070] StrChrW (lpStart=" ", wMatch=0x6b) returned 0x0 [0045.070] StrChrW (lpStart=" ", wMatch=0x74) returned 0x0 [0045.070] StrChrW (lpStart=" ", wMatch=0x6f) returned 0x0 [0045.070] StrChrW (lpStart=" ", wMatch=0x70) returned 0x0 [0045.070] StrChrW (lpStart=" ", wMatch=0x5c) returned 0x0 [0045.070] StrChrW (lpStart=" ", wMatch=0x58) returned 0x0 [0045.070] StrChrW (lpStart=" ", wMatch=0x79) returned 0x0 [0045.070] StrChrW (lpStart=" ", wMatch=0x75) returned 0x0 [0045.070] StrChrW (lpStart=" ", wMatch=0x45) returned 0x0 [0045.071] StrChrW (lpStart=" ", wMatch=0x6e) returned 0x0 [0045.071] StrChrW (lpStart=" ", wMatch=0x63) returned 0x0 [0045.071] StrChrW (lpStart=" ", wMatch=0x72) returned 0x0 [0045.071] StrChrW (lpStart=" ", wMatch=0x79) returned 0x0 [0045.071] StrChrW (lpStart=" ", wMatch=0x70) returned 0x0 [0045.071] StrChrW (lpStart=" ", wMatch=0x74) returned 0x0 [0045.071] StrChrW (lpStart=" ", wMatch=0x2e) returned 0x0 [0045.071] StrChrW (lpStart=" ", wMatch=0x65) returned 0x0 [0045.071] StrChrW (lpStart=" ", wMatch=0x78) returned 0x0 [0045.071] StrChrW (lpStart=" ", wMatch=0x65) returned 0x0 [0045.071] lstrlenW (lpString="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XyuEncrypt.exe") returned 44 [0045.071] StrChrIW (lpStart="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XyuEncrypt.exe", wMatch=0x20) returned 0x0 [0045.071] RtlRestoreLastWin32Error () returned 0x7ff6aacbd000 [0045.071] IUnknown:Release (This=0x132fd5df0) returned 0x1 [0045.071] IUnknown:Release (This=0x132fd59e0) returned 0x1 [0045.071] ITaskDefinition:get_Triggers (in: This=0x132fd5950, ppTriggers=0x132c1cbd0 | out: ppTriggers=0x132c1cbd0*=0x132fd5ca0) returned 0x0 [0045.071] ITriggerCollection:Create (in: This=0x132fd5ca0, Type=2, ppTrigger=0x132c1cbb8 | out: ppTrigger=0x132c1cbb8*=0x132fd5e60) returned 0x0 [0045.071] IUnknown:QueryInterface (in: This=0x132fd5e60, riid=0x7ff6ab8e8dc8*(Data1=0x126c5cd8, Data2=0xb288, Data3=0x41d5, Data4=([0]=0x8d, [1]=0xbf, [2]=0xe4, [3]=0x91, [4]=0x44, [5]=0x6a, [6]=0xdc, [7]=0x5c)), ppvObject=0x132c1cbb0 | out: ppvObject=0x132c1cbb0*=0x132fd5e60) returned 0x0 [0045.071] lstrlenW (lpString="1") returned 1 [0045.071] _memicmp (_Buf1=0x132e343b0, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0045.071] lstrlenW (lpString="1") returned 1 [0045.071] lstrlenW (lpString="1") returned 1 [0045.071] StrChrW (lpStart=" \x09", wMatch=0x31) returned 0x0 [0045.071] StrChrW (lpStart=" \x09", wMatch=0x31) returned 0x0 [0045.071] lstrlenW (lpString="1") returned 1 [0045.071] _errno () returned 0x132fd0840 [0045.072] _errno () returned 0x132fd0840 [0045.072] lstrlenW (lpString="") returned 0 [0045.072] IDailyTrigger:put_DaysInterval (This=0x132fd5e60, DaysInterval=1) returned 0x0 [0045.072] IUnknown:Release (This=0x132fd5e60) returned 0x2 [0045.072] _vsnwprintf (in: _Buffer=0x132c1cb00, _BufferCount=0x1f, _Format="%04u-%02u-%02dT%02u:%02u:00", _ArgList=0x132c1cad8 | out: _Buffer="2018-11-11T00:00:00") returned 19 [0045.072] ITrigger:put_StartBoundary (This=0x132fd5e60, StartBoundary="2018-11-11T00:00:00") returned 0x0 [0045.072] lstrlenW (lpString="") returned 0 [0045.072] lstrlenW (lpString="") returned 0 [0045.072] lstrlenW (lpString="9999:59") returned 7 [0045.072] ITrigger:get_Repetition (in: This=0x132fd5e60, ppRepeat=0x132c1cbb0 | out: ppRepeat=0x132c1cbb0*=0x132fd5f00) returned 0x0 [0045.072] _vsnwprintf (in: _Buffer=0x132c1cb48, _BufferCount=0xf, _Format="PT%luH%luM", _ArgList=0x132c1cb28 | out: _Buffer="PT9999H59M") returned 10 [0045.072] IRepetitionPattern:put_Duration (This=0x132fd5f00, Duration="PT9999H59M") returned 0x0 [0045.072] IUnknown:Release (This=0x132fd5f00) returned 0x1 [0045.072] lstrlenW (lpString="3") returned 1 [0045.072] _wtol (_String="3") returned 3 [0045.072] ITrigger:get_Repetition (in: This=0x132fd5e60, ppRepeat=0x132c1cbb0 | out: ppRepeat=0x132c1cbb0*=0x132fd5f00) returned 0x0 [0045.072] _vsnwprintf (in: _Buffer=0x132c1cb40, _BufferCount=0xf, _Format="PT%sM", _ArgList=0x132c1cb38 | out: _Buffer="PT3M") returned 4 [0045.072] IRepetitionPattern:put_Interval (This=0x132fd5f00, Interval="PT3M") returned 0x0 [0045.072] IUnknown:Release (This=0x132fd5f00) returned 0x1 [0045.073] IUnknown:Release (This=0x132fd5e60) returned 0x1 [0045.073] IUnknown:Release (This=0x132fd5ca0) returned 0x1 [0045.073] ITaskDefinition:get_Settings (in: This=0x132fd5950, ppSettings=0x132c1d060 | out: ppSettings=0x132c1d060*=0x132fd5b20) returned 0x0 [0045.073] lstrlenW (lpString="") returned 0 [0045.073] IUnknown:Release (This=0x132fd5b20) returned 0x3 [0045.073] GetLocalTime (in: lpSystemTime=0x132c1cf18 | out: lpSystemTime=0x132c1cf18*(wYear=0x7e2, wMonth=0xb, wDayOfWeek=0x0, wDay=0xb, wHour=0x1, wMinute=0x26, wSecond=0x14, wMilliseconds=0x1fa)) [0045.073] ResolveDelayLoadedAPI () returned 0x7ff8ea9d4160 [0045.073] GetUserNameExW (in: NameFormat=0x2, lpNameBuffer=0x132c1cf30, nSize=0x132c1cf08 | out: lpNameBuffer="LHNIWSJ\\CIiHmnxMn6Ps", nSize=0x132c1cf08) returned 0x1 [0045.073] ITaskDefinition:get_RegistrationInfo (in: This=0x132fd5950, ppRegistrationInfo=0x132c1cf00 | out: ppRegistrationInfo=0x132c1cf00*=0x132fd5a60) returned 0x0 [0045.073] IRegistrationInfo:put_Author (This=0x132fd5a60, Author="LHNIWSJ\\CIiHmnxMn6Ps") returned 0x0 [0045.073] _vsnwprintf (in: _Buffer=0x132c1cf30, _BufferCount=0x7f, _Format="%d-%02d-%02dT%02d:%02d:%02d", _ArgList=0x132c1cec8 | out: _Buffer="2018-11-11T01:38:20") returned 19 [0045.074] IRegistrationInfo:put_Date (This=0x132fd5a60, Date="2018-11-11T01:38:20") returned 0x0 [0045.074] IUnknown:Release (This=0x132fd5a60) returned 0x1 [0045.074] lstrlenW (lpString="") returned 0 [0045.074] ITaskFolder:RegisterTaskDefinition (in: This=0x132fd58d0, Path="\\Windows\\Startup", pDefinition=0x132fd5950, flags=6, UserId=0x132c1d170*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), password=0x132c1d150*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), LogonType=3, sddl=0x132c1d190*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), ppTask=0x132c1d130 | out: ppTask=0x132c1d130*=0x132fd6fd0) returned 0x0 [0045.375] _memicmp (_Buf1=0x132e34370, _Buf2=0x7ff6ab8e9eb0, _Size=0x7) returned 0 [0045.375] LoadStringW (in: hInstance=0x0, uID=0x12e, lpBuffer=0x132e3be10, cchBufferMax=256 | out: lpBuffer="SUCCESS: The scheduled task \"%s\" has successfully been created.\n") returned 0x40 [0045.375] lstrlenW (lpString="SUCCESS: The scheduled task \"%s\" has successfully been created.\n") returned 64 [0045.376] _vsnwprintf (in: _Buffer=0x132c1d7e0, _BufferCount=0x1fb, _Format="SUCCESS: The scheduled task \"%s\" has successfully been created.\n", _ArgList=0x132c1d078 | out: _Buffer="SUCCESS: The scheduled task \"\\Windows\\Startup\" has successfully been created.\n") returned 78 [0045.376] __iob_func () returned 0x7ff8ee13e210 [0045.376] _fileno (_File=0x7ff8ee13e240) returned 1 [0045.376] _errno () returned 0x132fd0840 [0045.533] _get_osfhandle (_FileHandle=1) returned 0x24 [0045.533] _errno () returned 0x132fd0840 [0045.533] GetFileType (hFile=0x24) returned 0x2 [0045.533] GetStdHandle (nStdHandle=0xfffffff5) returned 0x24 [0045.533] GetFileType (hFile=0x24) returned 0x2 [0045.533] GetConsoleMode (in: hConsoleHandle=0x24, lpMode=0x132c1cff0 | out: lpMode=0x132c1cff0) returned 1 [0045.550] __iob_func () returned 0x7ff8ee13e210 [0045.550] GetStdHandle (nStdHandle=0xfffffff5) returned 0x24 [0045.550] lstrlenW (lpString="SUCCESS: The scheduled task \"\\Windows\\Startup\" has successfully been created.\n") returned 78 [0045.550] WriteConsoleW (in: hConsoleOutput=0x24, lpBuffer=0x132c1d7e0*, nNumberOfCharsToWrite=0x4e, lpNumberOfCharsWritten=0x132c1d060, lpReserved=0x0 | out: lpBuffer=0x132c1d7e0*, lpNumberOfCharsWritten=0x132c1d060*=0x4e) returned 1 [0045.551] IUnknown:Release (This=0x132fd6fd0) returned 0x0 [0045.551] TaskScheduler:IUnknown:Release (This=0x132fd5950) returned 0x0 [0045.551] TaskScheduler:IUnknown:Release (This=0x132fd58d0) returned 0x0 [0045.551] TaskScheduler:IUnknown:Release (This=0x132fd5750) returned 0x0 [0045.551] lstrlenW (lpString="") returned 0 [0045.551] lstrlenW (lpString="1") returned 1 [0045.551] WideCharToMultiByte (in: CodePage=0x1, dwFlags=0x0, lpWideCharStr="1", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 2 [0045.557] exit (_Code=0) Thread: id = 15 os_tid = 0xe84 Process: id = "3" image_name = "conhost.exe" filename = "c:\\windows\\system32\\conhost.exe" page_root = "0x2f54e000" os_pid = "0xe70" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "2" os_parent_pid = "0xe68" cmd_line = "\\??\\C:\\Windows\\system32\\conhost.exe 0xffffffff -ForceV1" cur_dir = "C:\\Windows" os_username = "LHNIWSJ\\CIiHmnxMn6Ps" os_groups = "LHNIWSJ\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:00014ee5" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 277 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 278 start_va = 0x4cc5140000 end_va = 0x4cc515ffff entry_point = 0x0 region_type = private name = "private_0x0000004cc5140000" filename = "" Region: id = 279 start_va = 0x4cc5160000 end_va = 0x4cc5173fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000004cc5160000" filename = "" Region: id = 280 start_va = 0x4cc5180000 end_va = 0x4cc51bffff entry_point = 0x0 region_type = private name = "private_0x0000004cc5180000" filename = "" Region: id = 281 start_va = 0x7df5fff10000 end_va = 0x7ff5fff0ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007df5fff10000" filename = "" Region: id = 282 start_va = 0x7ff71ed00000 end_va = 0x7ff71ed22fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007ff71ed00000" filename = "" Region: id = 283 start_va = 0x7ff71ed2b000 end_va = 0x7ff71ed2bfff entry_point = 0x0 region_type = private name = "private_0x00007ff71ed2b000" filename = "" Region: id = 284 start_va = 0x7ff71ed2e000 end_va = 0x7ff71ed2ffff entry_point = 0x0 region_type = private name = "private_0x00007ff71ed2e000" filename = "" Region: id = 285 start_va = 0x7ff71ef00000 end_va = 0x7ff71ef10fff entry_point = 0x7ff71ef00000 region_type = mapped_file name = "conhost.exe" filename = "\\Windows\\System32\\conhost.exe" (normalized: "c:\\windows\\system32\\conhost.exe") Region: id = 286 start_va = 0x7ff8ee380000 end_va = 0x7ff8ee541fff entry_point = 0x7ff8ee380000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 287 start_va = 0x4cc5240000 end_va = 0x4cc533ffff entry_point = 0x0 region_type = private name = "private_0x0000004cc5240000" filename = "" Region: id = 288 start_va = 0x7ff8eb870000 end_va = 0x7ff8eba4cfff entry_point = 0x7ff8eb870000 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 289 start_va = 0x7ff8ee2d0000 end_va = 0x7ff8ee37cfff entry_point = 0x7ff8ee2d0000 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 290 start_va = 0x4cc5140000 end_va = 0x4cc514ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000004cc5140000" filename = "" Region: id = 291 start_va = 0x4cc5150000 end_va = 0x4cc5156fff entry_point = 0x0 region_type = private name = "private_0x0000004cc5150000" filename = "" Region: id = 292 start_va = 0x4cc51c0000 end_va = 0x4cc51fffff entry_point = 0x0 region_type = private name = "private_0x0000004cc51c0000" filename = "" Region: id = 293 start_va = 0x4cc5340000 end_va = 0x4cc53fdfff entry_point = 0x4cc5340000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 294 start_va = 0x4cc5480000 end_va = 0x4cc548ffff entry_point = 0x0 region_type = private name = "private_0x0000004cc5480000" filename = "" Region: id = 295 start_va = 0x7ff71ec00000 end_va = 0x7ff71ecfffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007ff71ec00000" filename = "" Region: id = 296 start_va = 0x7ff71ed2c000 end_va = 0x7ff71ed2dfff entry_point = 0x0 region_type = private name = "private_0x00007ff71ed2c000" filename = "" Region: id = 297 start_va = 0x7ff8ee0b0000 end_va = 0x7ff8ee14cfff entry_point = 0x7ff8ee0b0000 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 298 start_va = 0x4cc5200000 end_va = 0x4cc5200fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000004cc5200000" filename = "" Region: id = 299 start_va = 0x4cc5210000 end_va = 0x4cc5216fff entry_point = 0x0 region_type = private name = "private_0x0000004cc5210000" filename = "" Region: id = 300 start_va = 0x4cc5220000 end_va = 0x4cc5220fff entry_point = 0x0 region_type = private name = "private_0x0000004cc5220000" filename = "" Region: id = 301 start_va = 0x4cc5230000 end_va = 0x4cc5230fff entry_point = 0x0 region_type = private name = "private_0x0000004cc5230000" filename = "" Region: id = 302 start_va = 0x4cc5490000 end_va = 0x4cc5617fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000004cc5490000" filename = "" Region: id = 303 start_va = 0x4cc5620000 end_va = 0x4cc57a0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000004cc5620000" filename = "" Region: id = 304 start_va = 0x4cc57b0000 end_va = 0x4cc6baffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000004cc57b0000" filename = "" Region: id = 305 start_va = 0x7ff8db5b0000 end_va = 0x7ff8db602fff entry_point = 0x7ff8db5b0000 region_type = mapped_file name = "conhostv2.dll" filename = "\\Windows\\System32\\ConhostV2.dll" (normalized: "c:\\windows\\system32\\conhostv2.dll") Region: id = 306 start_va = 0x7ff8e79b0000 end_va = 0x7ff8e7b32fff entry_point = 0x7ff8e79b0000 region_type = mapped_file name = "propsys.dll" filename = "\\Windows\\System32\\propsys.dll" (normalized: "c:\\windows\\system32\\propsys.dll") Region: id = 307 start_va = 0x7ff8ebb30000 end_va = 0x7ff8ebbedfff entry_point = 0x7ff8ebb30000 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll") Region: id = 308 start_va = 0x7ff8ebdc0000 end_va = 0x7ff8ebf0dfff entry_point = 0x7ff8ebdc0000 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 309 start_va = 0x7ff8ec0c0000 end_va = 0x7ff8ec21bfff entry_point = 0x7ff8ec0c0000 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\System32\\msctf.dll" (normalized: "c:\\windows\\system32\\msctf.dll") Region: id = 310 start_va = 0x7ff8ec240000 end_va = 0x7ff8ec29afff entry_point = 0x7ff8ec240000 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 311 start_va = 0x7ff8ec300000 end_va = 0x7ff8ec440fff entry_point = 0x7ff8ec300000 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll") Region: id = 312 start_va = 0x7ff8ec450000 end_va = 0x7ff8ec575fff entry_point = 0x7ff8ec450000 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 313 start_va = 0x7ff8edbc0000 end_va = 0x7ff8edd44fff entry_point = 0x7ff8edbc0000 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 314 start_va = 0x7ff8edd60000 end_va = 0x7ff8edfdbfff entry_point = 0x7ff8edd60000 region_type = mapped_file name = "combase.dll" filename = "\\Windows\\System32\\combase.dll" (normalized: "c:\\windows\\system32\\combase.dll") Region: id = 315 start_va = 0x7ff8ee150000 end_va = 0x7ff8ee185fff entry_point = 0x7ff8ee150000 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 316 start_va = 0x4cc5400000 end_va = 0x4cc540ffff entry_point = 0x0 region_type = private name = "private_0x0000004cc5400000" filename = "" Region: id = 317 start_va = 0x4cc5410000 end_va = 0x4cc544ffff entry_point = 0x0 region_type = private name = "private_0x0000004cc5410000" filename = "" Region: id = 318 start_va = 0x7ff71ed29000 end_va = 0x7ff71ed2afff entry_point = 0x0 region_type = private name = "private_0x00007ff71ed29000" filename = "" Region: id = 319 start_va = 0x7ff8eadd0000 end_va = 0x7ff8eae19fff entry_point = 0x7ff8eadd0000 region_type = mapped_file name = "powrprof.dll" filename = "\\Windows\\System32\\powrprof.dll" (normalized: "c:\\windows\\system32\\powrprof.dll") Region: id = 320 start_va = 0x7ff8eae20000 end_va = 0x7ff8eae2efff entry_point = 0x7ff8eae20000 region_type = mapped_file name = "kernel.appcore.dll" filename = "\\Windows\\System32\\kernel.appcore.dll" (normalized: "c:\\windows\\system32\\kernel.appcore.dll") Region: id = 321 start_va = 0x7ff8eae30000 end_va = 0x7ff8eae42fff entry_point = 0x7ff8eae30000 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\System32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll") Region: id = 322 start_va = 0x7ff8eb180000 end_va = 0x7ff8eb7a7fff entry_point = 0x7ff8eb180000 region_type = mapped_file name = "windows.storage.dll" filename = "\\Windows\\System32\\windows.storage.dll" (normalized: "c:\\windows\\system32\\windows.storage.dll") Region: id = 323 start_va = 0x7ff8eb7b0000 end_va = 0x7ff8eb862fff entry_point = 0x7ff8eb7b0000 region_type = mapped_file name = "shcore.dll" filename = "\\Windows\\System32\\SHCore.dll" (normalized: "c:\\windows\\system32\\shcore.dll") Region: id = 324 start_va = 0x7ff8ec580000 end_va = 0x7ff8edaa4fff entry_point = 0x7ff8ec580000 region_type = mapped_file name = "shell32.dll" filename = "\\Windows\\System32\\shell32.dll" (normalized: "c:\\windows\\system32\\shell32.dll") Region: id = 325 start_va = 0x7ff8edfe0000 end_va = 0x7ff8ee030fff entry_point = 0x7ff8edfe0000 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\System32\\shlwapi.dll" (normalized: "c:\\windows\\system32\\shlwapi.dll") Region: id = 326 start_va = 0x7ff8ee190000 end_va = 0x7ff8ee235fff entry_point = 0x7ff8ee190000 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 327 start_va = 0x4cc6bf0000 end_va = 0x4cc6bfffff entry_point = 0x0 region_type = private name = "private_0x0000004cc6bf0000" filename = "" Region: id = 328 start_va = 0x4cc6c00000 end_va = 0x4cc6f36fff entry_point = 0x4cc6c00000 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 329 start_va = 0x4cc6f40000 end_va = 0x4cc715afff entry_point = 0x0 region_type = private name = "private_0x0000004cc6f40000" filename = "" Region: id = 330 start_va = 0x4cc7160000 end_va = 0x4cc7370fff entry_point = 0x0 region_type = private name = "private_0x0000004cc7160000" filename = "" Region: id = 331 start_va = 0x4cc7380000 end_va = 0x4cc7488fff entry_point = 0x0 region_type = private name = "private_0x0000004cc7380000" filename = "" Region: id = 332 start_va = 0x4cc7490000 end_va = 0x4cc76aafff entry_point = 0x0 region_type = private name = "private_0x0000004cc7490000" filename = "" Region: id = 333 start_va = 0x4cc76b0000 end_va = 0x4cc77c4fff entry_point = 0x0 region_type = private name = "private_0x0000004cc76b0000" filename = "" Region: id = 334 start_va = 0x7ff8e9680000 end_va = 0x7ff8e9715fff entry_point = 0x7ff8e9680000 region_type = mapped_file name = "uxtheme.dll" filename = "\\Windows\\System32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll") Region: id = 335 start_va = 0x4cc5450000 end_va = 0x4cc5453fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000004cc5450000" filename = "" Region: id = 336 start_va = 0x4cc77d0000 end_va = 0x4cc7887fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000004cc77d0000" filename = "" Region: id = 337 start_va = 0x7ff8e8fb0000 end_va = 0x7ff8e8fd1fff entry_point = 0x7ff8e8fb0000 region_type = mapped_file name = "dwmapi.dll" filename = "\\Windows\\System32\\dwmapi.dll" (normalized: "c:\\windows\\system32\\dwmapi.dll") Region: id = 338 start_va = 0x7ff8e8ad0000 end_va = 0x7ff8e8ae2fff entry_point = 0x7ff8e8ad0000 region_type = mapped_file name = "wtsapi32.dll" filename = "\\Windows\\System32\\wtsapi32.dll" (normalized: "c:\\windows\\system32\\wtsapi32.dll") Region: id = 339 start_va = 0x7ff8ea820000 end_va = 0x7ff8ea877fff entry_point = 0x7ff8ea820000 region_type = mapped_file name = "winsta.dll" filename = "\\Windows\\System32\\winsta.dll" (normalized: "c:\\windows\\system32\\winsta.dll") Region: id = 340 start_va = 0x4cc5460000 end_va = 0x4cc5466fff entry_point = 0x0 region_type = private name = "private_0x0000004cc5460000" filename = "" Region: id = 341 start_va = 0x4cc5470000 end_va = 0x4cc5474fff entry_point = 0x4cc5470000 region_type = mapped_file name = "user32.dll.mui" filename = "\\Windows\\System32\\en-US\\user32.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\user32.dll.mui") Region: id = 342 start_va = 0x4cc6bb0000 end_va = 0x4cc6bb0fff entry_point = 0x4cc6bb0000 region_type = mapped_file name = "conhostv2.dll.mui" filename = "\\Windows\\System32\\en-US\\ConhostV2.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\conhostv2.dll.mui") Region: id = 343 start_va = 0x4cc6bc0000 end_va = 0x4cc6bc1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000004cc6bc0000" filename = "" Region: id = 344 start_va = 0x7ff8e57b0000 end_va = 0x7ff8e5a23fff entry_point = 0x7ff8e57b0000 region_type = mapped_file name = "comctl32.dll" filename = "\\Windows\\WinSxS\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43\\comctl32.dll") Thread: id = 11 os_tid = 0xe74 Thread: id = 12 os_tid = 0xe78 Thread: id = 13 os_tid = 0xe7c Thread: id = 14 os_tid = 0xe80 Process: id = "4" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x569d2000" os_pid = "0x330" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "created_scheduled_job" parent_id = "2" os_parent_pid = "0xe68" cmd_line = "C:\\Windows\\system32\\svchost.exe -k netsvcs" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\BDESVC" [0xe], "NT SERVICE\\BITS" [0xa], "NT SERVICE\\CertPropSvc" [0xa], "NT SERVICE\\DcpSvc" [0xa], "NT SERVICE\\dmwappushservice" [0xa], "NT SERVICE\\DoSvc" [0xa], "NT SERVICE\\DsmSvc" [0xa], "NT SERVICE\\EapHost" [0xa], "NT SERVICE\\IKEEXT" [0xa], "NT SERVICE\\iphlpsvc" [0xa], "NT SERVICE\\LanmanServer" [0xa], "NT SERVICE\\lfsvc" [0xa], "NT SERVICE\\MSiSCSI" [0xa], "NT SERVICE\\NcaSvc" [0xa], "NT SERVICE\\NetSetupSvc" [0xa], "NT SERVICE\\RasAuto" [0xa], "NT SERVICE\\RasMan" [0xa], "NT SERVICE\\RemoteAccess" [0xa], "NT SERVICE\\RetailDemo" [0xa], "NT SERVICE\\Schedule" [0xa], "NT SERVICE\\SCPolicySvc" [0xa], "NT SERVICE\\SENS" [0xa], "NT SERVICE\\SessionEnv" [0xa], "NT SERVICE\\SharedAccess" [0xa], "NT SERVICE\\ShellHWDetection" [0xa], "NT SERVICE\\UsoSvc" [0xa], "NT SERVICE\\wercplsupport" [0xa], "NT SERVICE\\Winmgmt" [0xa], "NT SERVICE\\wlidsvc" [0xa], "NT SERVICE\\wuauserv" [0xa], "NT SERVICE\\XboxNetApiSvc" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000b1c8" [0xc0000007], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Region: id = 369 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 370 start_va = 0xeaf3940000 end_va = 0xeaf394ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000eaf3940000" filename = "" Region: id = 371 start_va = 0xeaf3950000 end_va = 0xeaf3950fff entry_point = 0xeaf3950000 region_type = mapped_file name = "svchost.exe.mui" filename = "\\Windows\\System32\\en-US\\svchost.exe.mui" (normalized: "c:\\windows\\system32\\en-us\\svchost.exe.mui") Region: id = 372 start_va = 0xeaf3960000 end_va = 0xeaf3973fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000eaf3960000" filename = "" Region: id = 373 start_va = 0xeaf3980000 end_va = 0xeaf39fffff entry_point = 0x0 region_type = private name = "private_0x000000eaf3980000" filename = "" Region: id = 374 start_va = 0xeaf3a00000 end_va = 0xeaf3a03fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000eaf3a00000" filename = "" Region: id = 375 start_va = 0xeaf3a10000 end_va = 0xeaf3a10fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000eaf3a10000" filename = "" Region: id = 376 start_va = 0xeaf3a20000 end_va = 0xeaf3a21fff entry_point = 0x0 region_type = private name = "private_0x000000eaf3a20000" filename = "" Region: id = 377 start_va = 0xeaf3a30000 end_va = 0xeaf3aedfff entry_point = 0xeaf3a30000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 378 start_va = 0xeaf3af0000 end_va = 0xeaf3b6ffff entry_point = 0x0 region_type = private name = "private_0x000000eaf3af0000" filename = "" Region: id = 379 start_va = 0xeaf3b70000 end_va = 0xeaf3b70fff entry_point = 0x0 region_type = private name = "private_0x000000eaf3b70000" filename = "" Region: id = 380 start_va = 0xeaf3b80000 end_va = 0xeaf3b80fff entry_point = 0x0 region_type = private name = "private_0x000000eaf3b80000" filename = "" Region: id = 381 start_va = 0xeaf3b90000 end_va = 0xeaf3b90fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000eaf3b90000" filename = "" Region: id = 382 start_va = 0xeaf3ba0000 end_va = 0xeaf3ba0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000eaf3ba0000" filename = "" Region: id = 383 start_va = 0xeaf3bb0000 end_va = 0xeaf3bb0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000eaf3bb0000" filename = "" Region: id = 384 start_va = 0xeaf3bc0000 end_va = 0xeaf3bc1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000eaf3bc0000" filename = "" Region: id = 385 start_va = 0xeaf3bd0000 end_va = 0xeaf3bdcfff entry_point = 0xeaf3bd0000 region_type = mapped_file name = "iphlpsvc.dll.mui" filename = "\\Windows\\System32\\en-US\\iphlpsvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\iphlpsvc.dll.mui") Region: id = 386 start_va = 0xeaf3be0000 end_va = 0xeaf3becfff entry_point = 0xeaf3be0000 region_type = mapped_file name = "gpsvc.dll.mui" filename = "\\Windows\\System32\\en-US\\gpsvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\gpsvc.dll.mui") Region: id = 387 start_va = 0xeaf3bf0000 end_va = 0xeaf3bf3fff entry_point = 0xeaf3bf0000 region_type = mapped_file name = "cversions.2.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db") Region: id = 388 start_va = 0xeaf3c00000 end_va = 0xeaf3c03fff entry_point = 0xeaf3c00000 region_type = mapped_file name = "cversions.2.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db") Region: id = 389 start_va = 0xeaf3c10000 end_va = 0xeaf3c16fff entry_point = 0x0 region_type = private name = "private_0x000000eaf3c10000" filename = "" Region: id = 390 start_va = 0xeaf3c20000 end_va = 0xeaf3cdffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000eaf3c20000" filename = "" Region: id = 391 start_va = 0xeaf3ce0000 end_va = 0xeaf3cf0fff entry_point = 0xeaf3ce0000 region_type = mapped_file name = "propsys.dll.mui" filename = "\\Windows\\System32\\en-US\\propsys.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\propsys.dll.mui") Region: id = 392 start_va = 0xeaf3d00000 end_va = 0xeaf3dfffff entry_point = 0x0 region_type = private name = "private_0x000000eaf3d00000" filename = "" Region: id = 393 start_va = 0xeaf3e00000 end_va = 0xeaf3e7ffff entry_point = 0x0 region_type = private name = "private_0x000000eaf3e00000" filename = "" Region: id = 394 start_va = 0xeaf3e80000 end_va = 0xeaf3ec2fff entry_point = 0xeaf3e80000 region_type = mapped_file name = "{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x000000000000000f.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x000000000000000f.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x000000000000000f.db") Region: id = 395 start_va = 0xeaf3ed0000 end_va = 0xeaf3ed1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000eaf3ed0000" filename = "" Region: id = 396 start_va = 0xeaf3ee0000 end_va = 0xeaf3ee0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000eaf3ee0000" filename = "" Region: id = 397 start_va = 0xeaf3ef0000 end_va = 0xeaf3ef6fff entry_point = 0x0 region_type = private name = "private_0x000000eaf3ef0000" filename = "" Region: id = 398 start_va = 0xeaf3f00000 end_va = 0xeaf3ffffff entry_point = 0x0 region_type = private name = "private_0x000000eaf3f00000" filename = "" Region: id = 399 start_va = 0xeaf4000000 end_va = 0xeaf4187fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000eaf4000000" filename = "" Region: id = 400 start_va = 0xeaf4190000 end_va = 0xeaf4310fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000eaf4190000" filename = "" Region: id = 401 start_va = 0xeaf4320000 end_va = 0xeaf441ffff entry_point = 0x0 region_type = private name = "private_0x000000eaf4320000" filename = "" Region: id = 402 start_va = 0xeaf4420000 end_va = 0xeaf451ffff entry_point = 0x0 region_type = private name = "private_0x000000eaf4420000" filename = "" Region: id = 403 start_va = 0xeaf4520000 end_va = 0xeaf4522fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000eaf4520000" filename = "" Region: id = 404 start_va = 0xeaf4530000 end_va = 0xeaf4538fff entry_point = 0xeaf4530000 region_type = mapped_file name = "vsstrace.dll.mui" filename = "\\Windows\\System32\\en-US\\vsstrace.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\vsstrace.dll.mui") Region: id = 405 start_va = 0xeaf4540000 end_va = 0xeaf4541fff entry_point = 0xeaf4540000 region_type = mapped_file name = "activeds.dll.mui" filename = "\\Windows\\System32\\en-US\\activeds.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\activeds.dll.mui") Region: id = 406 start_va = 0xeaf4550000 end_va = 0xeaf4554fff entry_point = 0xeaf4550000 region_type = mapped_file name = "winnlsres.dll" filename = "\\Windows\\System32\\winnlsres.dll" (normalized: "c:\\windows\\system32\\winnlsres.dll") Region: id = 407 start_va = 0xeaf4560000 end_va = 0xeaf4560fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000eaf4560000" filename = "" Region: id = 408 start_va = 0xeaf4570000 end_va = 0xeaf4570fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000eaf4570000" filename = "" Region: id = 409 start_va = 0xeaf4580000 end_va = 0xeaf458ffff entry_point = 0xeaf4580000 region_type = mapped_file name = "winnlsres.dll.mui" filename = "\\Windows\\System32\\en-US\\winnlsres.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\winnlsres.dll.mui") Region: id = 410 start_va = 0xeaf4590000 end_va = 0xeaf4596fff entry_point = 0x0 region_type = private name = "private_0x000000eaf4590000" filename = "" Region: id = 411 start_va = 0xeaf45a0000 end_va = 0xeaf45b7fff entry_point = 0x0 region_type = private name = "private_0x000000eaf45a0000" filename = "" Region: id = 412 start_va = 0xeaf45c0000 end_va = 0xeaf45c0fff entry_point = 0xeaf45c0000 region_type = mapped_file name = "usocore.dll.mui" filename = "\\Windows\\System32\\en-US\\usocore.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\usocore.dll.mui") Region: id = 413 start_va = 0xeaf45d0000 end_va = 0xeaf45d1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000eaf45d0000" filename = "" Region: id = 414 start_va = 0xeaf45e0000 end_va = 0xeaf45e2fff entry_point = 0xeaf45e0000 region_type = mapped_file name = "mswsock.dll.mui" filename = "\\Windows\\System32\\en-US\\mswsock.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\mswsock.dll.mui") Region: id = 415 start_va = 0xeaf4600000 end_va = 0xeaf46fffff entry_point = 0x0 region_type = private name = "private_0x000000eaf4600000" filename = "" Region: id = 416 start_va = 0xeaf4700000 end_va = 0xeaf47fffff entry_point = 0x0 region_type = private name = "private_0x000000eaf4700000" filename = "" Region: id = 417 start_va = 0xeaf4800000 end_va = 0xeaf4b36fff entry_point = 0xeaf4800000 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 418 start_va = 0xeaf4b40000 end_va = 0xeaf4c3ffff entry_point = 0x0 region_type = private name = "private_0x000000eaf4b40000" filename = "" Region: id = 419 start_va = 0xeaf4c40000 end_va = 0xeaf4d3ffff entry_point = 0x0 region_type = private name = "private_0x000000eaf4c40000" filename = "" Region: id = 420 start_va = 0xeaf4d40000 end_va = 0xeaf4e3ffff entry_point = 0x0 region_type = private name = "private_0x000000eaf4d40000" filename = "" Region: id = 421 start_va = 0xeaf4e40000 end_va = 0xeaf4f3ffff entry_point = 0x0 region_type = private name = "private_0x000000eaf4e40000" filename = "" Region: id = 422 start_va = 0xeaf4f40000 end_va = 0xeaf503ffff entry_point = 0x0 region_type = private name = "private_0x000000eaf4f40000" filename = "" Region: id = 423 start_va = 0xeaf5070000 end_va = 0xeaf5076fff entry_point = 0x0 region_type = private name = "private_0x000000eaf5070000" filename = "" Region: id = 424 start_va = 0xeaf5080000 end_va = 0xeaf50fffff entry_point = 0x0 region_type = private name = "private_0x000000eaf5080000" filename = "" Region: id = 425 start_va = 0xeaf5100000 end_va = 0xeaf51fffff entry_point = 0x0 region_type = private name = "private_0x000000eaf5100000" filename = "" Region: id = 426 start_va = 0xeaf5200000 end_va = 0xeaf527ffff entry_point = 0x0 region_type = private name = "private_0x000000eaf5200000" filename = "" Region: id = 427 start_va = 0xeaf5280000 end_va = 0xeaf52fffff entry_point = 0x0 region_type = private name = "private_0x000000eaf5280000" filename = "" Region: id = 428 start_va = 0xeaf5300000 end_va = 0xeaf53fffff entry_point = 0x0 region_type = private name = "private_0x000000eaf5300000" filename = "" Region: id = 429 start_va = 0xeaf5400000 end_va = 0xeaf54fffff entry_point = 0x0 region_type = private name = "private_0x000000eaf5400000" filename = "" Region: id = 430 start_va = 0xeaf5500000 end_va = 0xeaf557ffff entry_point = 0x0 region_type = private name = "private_0x000000eaf5500000" filename = "" Region: id = 431 start_va = 0xeaf5580000 end_va = 0xeaf55fffff entry_point = 0x0 region_type = private name = "private_0x000000eaf5580000" filename = "" Region: id = 432 start_va = 0xeaf5600000 end_va = 0xeaf56fffff entry_point = 0x0 region_type = private name = "private_0x000000eaf5600000" filename = "" Region: id = 433 start_va = 0xeaf5700000 end_va = 0xeaf57fffff entry_point = 0x0 region_type = private name = "private_0x000000eaf5700000" filename = "" Region: id = 434 start_va = 0xeaf5800000 end_va = 0xeaf588afff entry_point = 0xeaf5800000 region_type = mapped_file name = "{ddf571f2-be98-426d-8288-1a9a39c3fda2}.2.ver0x0000000000000001.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000001.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{ddf571f2-be98-426d-8288-1a9a39c3fda2}.2.ver0x0000000000000001.db") Region: id = 435 start_va = 0xeaf5890000 end_va = 0xeaf598ffff entry_point = 0x0 region_type = private name = "private_0x000000eaf5890000" filename = "" Region: id = 436 start_va = 0xeaf5990000 end_va = 0xeaf5a8ffff entry_point = 0x0 region_type = private name = "private_0x000000eaf5990000" filename = "" Region: id = 437 start_va = 0xeaf5a90000 end_va = 0xeaf5b8ffff entry_point = 0x0 region_type = private name = "private_0x000000eaf5a90000" filename = "" Region: id = 438 start_va = 0xeaf5b90000 end_va = 0xeaf5c8ffff entry_point = 0x0 region_type = private name = "private_0x000000eaf5b90000" filename = "" Region: id = 439 start_va = 0xeaf5c90000 end_va = 0xeaf5d8ffff entry_point = 0x0 region_type = private name = "private_0x000000eaf5c90000" filename = "" Region: id = 440 start_va = 0xeaf5d90000 end_va = 0xeaf5e8ffff entry_point = 0x0 region_type = private name = "private_0x000000eaf5d90000" filename = "" Region: id = 441 start_va = 0xeaf5f00000 end_va = 0xeaf5ffffff entry_point = 0x0 region_type = private name = "private_0x000000eaf5f00000" filename = "" Region: id = 442 start_va = 0xeaf6080000 end_va = 0xeaf617ffff entry_point = 0x0 region_type = private name = "private_0x000000eaf6080000" filename = "" Region: id = 443 start_va = 0xeaf6180000 end_va = 0xeaf627ffff entry_point = 0x0 region_type = private name = "private_0x000000eaf6180000" filename = "" Region: id = 444 start_va = 0xeaf6280000 end_va = 0xeaf637ffff entry_point = 0x0 region_type = private name = "private_0x000000eaf6280000" filename = "" Region: id = 445 start_va = 0xeaf6430000 end_va = 0xeaf652ffff entry_point = 0x0 region_type = private name = "private_0x000000eaf6430000" filename = "" Region: id = 446 start_va = 0xeaf6530000 end_va = 0xeaf662ffff entry_point = 0x0 region_type = private name = "private_0x000000eaf6530000" filename = "" Region: id = 447 start_va = 0xeaf6690000 end_va = 0xeaf670ffff entry_point = 0x0 region_type = private name = "private_0x000000eaf6690000" filename = "" Region: id = 448 start_va = 0xeaf6770000 end_va = 0xeaf6776fff entry_point = 0x0 region_type = private name = "private_0x000000eaf6770000" filename = "" Region: id = 449 start_va = 0xeaf6780000 end_va = 0xeaf687ffff entry_point = 0x0 region_type = private name = "private_0x000000eaf6780000" filename = "" Region: id = 450 start_va = 0xeaf6900000 end_va = 0xeaf69fffff entry_point = 0x0 region_type = private name = "private_0x000000eaf6900000" filename = "" Region: id = 451 start_va = 0xeaf6a00000 end_va = 0xeaf6afffff entry_point = 0x0 region_type = private name = "private_0x000000eaf6a00000" filename = "" Region: id = 452 start_va = 0xeaf6b00000 end_va = 0xeaf6b7ffff entry_point = 0x0 region_type = private name = "private_0x000000eaf6b00000" filename = "" Region: id = 453 start_va = 0xeaf6b80000 end_va = 0xeaf6c5efff entry_point = 0xeaf6b80000 region_type = mapped_file name = "kernelbase.dll.mui" filename = "\\Windows\\System32\\en-US\\KernelBase.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\kernelbase.dll.mui") Region: id = 454 start_va = 0xeaf6c60000 end_va = 0xeaf6d5ffff entry_point = 0x0 region_type = private name = "private_0x000000eaf6c60000" filename = "" Region: id = 455 start_va = 0xeaf6de0000 end_va = 0xeaf6e5ffff entry_point = 0x0 region_type = private name = "private_0x000000eaf6de0000" filename = "" Region: id = 456 start_va = 0xeaf6e60000 end_va = 0xeaf6f5ffff entry_point = 0x0 region_type = private name = "private_0x000000eaf6e60000" filename = "" Region: id = 457 start_va = 0xeaf6f60000 end_va = 0xeaf705ffff entry_point = 0x0 region_type = private name = "private_0x000000eaf6f60000" filename = "" Region: id = 458 start_va = 0xeaf7060000 end_va = 0xeaf715ffff entry_point = 0x0 region_type = private name = "private_0x000000eaf7060000" filename = "" Region: id = 459 start_va = 0xeaf7160000 end_va = 0xeaf725ffff entry_point = 0x0 region_type = private name = "private_0x000000eaf7160000" filename = "" Region: id = 460 start_va = 0xeaf7260000 end_va = 0xeaf735ffff entry_point = 0x0 region_type = private name = "private_0x000000eaf7260000" filename = "" Region: id = 461 start_va = 0xeaf7360000 end_va = 0xeaf745ffff entry_point = 0x0 region_type = private name = "private_0x000000eaf7360000" filename = "" Region: id = 462 start_va = 0xeaf7460000 end_va = 0xeaf755ffff entry_point = 0x0 region_type = private name = "private_0x000000eaf7460000" filename = "" Region: id = 463 start_va = 0xeaf7560000 end_va = 0xeaf75dffff entry_point = 0x0 region_type = private name = "private_0x000000eaf7560000" filename = "" Region: id = 464 start_va = 0xeaf75e0000 end_va = 0xeaf75e6fff entry_point = 0x0 region_type = private name = "private_0x000000eaf75e0000" filename = "" Region: id = 465 start_va = 0xeaf7600000 end_va = 0xeaf76fffff entry_point = 0x0 region_type = private name = "private_0x000000eaf7600000" filename = "" Region: id = 466 start_va = 0xeaf7700000 end_va = 0xeaf77fffff entry_point = 0x0 region_type = private name = "private_0x000000eaf7700000" filename = "" Region: id = 467 start_va = 0xeaf7800000 end_va = 0xeaf78fffff entry_point = 0x0 region_type = private name = "private_0x000000eaf7800000" filename = "" Region: id = 468 start_va = 0xeaf7900000 end_va = 0xeaf79fffff entry_point = 0x0 region_type = private name = "private_0x000000eaf7900000" filename = "" Region: id = 469 start_va = 0xeaf7a00000 end_va = 0xeaf7afffff entry_point = 0x0 region_type = private name = "private_0x000000eaf7a00000" filename = "" Region: id = 470 start_va = 0xeaf7b00000 end_va = 0xeaf7bfffff entry_point = 0x0 region_type = private name = "private_0x000000eaf7b00000" filename = "" Region: id = 471 start_va = 0xeaf7c00000 end_va = 0xeaf7cfffff entry_point = 0x0 region_type = private name = "private_0x000000eaf7c00000" filename = "" Region: id = 472 start_va = 0xeaf7d00000 end_va = 0xeaf7dfffff entry_point = 0x0 region_type = private name = "private_0x000000eaf7d00000" filename = "" Region: id = 473 start_va = 0xeaf7e00000 end_va = 0xeaf7efffff entry_point = 0x0 region_type = private name = "private_0x000000eaf7e00000" filename = "" Region: id = 474 start_va = 0xeaf7f00000 end_va = 0xeaf7f7ffff entry_point = 0x0 region_type = private name = "private_0x000000eaf7f00000" filename = "" Region: id = 475 start_va = 0xeaf7f80000 end_va = 0xeaf807ffff entry_point = 0x0 region_type = private name = "private_0x000000eaf7f80000" filename = "" Region: id = 476 start_va = 0xeaf8080000 end_va = 0xeaf817ffff entry_point = 0x0 region_type = private name = "private_0x000000eaf8080000" filename = "" Region: id = 477 start_va = 0xeaf8190000 end_va = 0xeaf8196fff entry_point = 0x0 region_type = private name = "private_0x000000eaf8190000" filename = "" Region: id = 478 start_va = 0xeaf8200000 end_va = 0xeaf82fffff entry_point = 0x0 region_type = private name = "private_0x000000eaf8200000" filename = "" Region: id = 479 start_va = 0xeaf8300000 end_va = 0xeaf837ffff entry_point = 0x0 region_type = private name = "private_0x000000eaf8300000" filename = "" Region: id = 480 start_va = 0xeaf8380000 end_va = 0xeaf847ffff entry_point = 0x0 region_type = private name = "private_0x000000eaf8380000" filename = "" Region: id = 481 start_va = 0xeaf8480000 end_va = 0xeaf857ffff entry_point = 0x0 region_type = private name = "private_0x000000eaf8480000" filename = "" Region: id = 482 start_va = 0xeaf8580000 end_va = 0xeaf867ffff entry_point = 0x0 region_type = private name = "private_0x000000eaf8580000" filename = "" Region: id = 483 start_va = 0xeaf8770000 end_va = 0xeaf8776fff entry_point = 0x0 region_type = private name = "private_0x000000eaf8770000" filename = "" Region: id = 484 start_va = 0xeaf8810000 end_va = 0xeaf8816fff entry_point = 0x0 region_type = private name = "private_0x000000eaf8810000" filename = "" Region: id = 485 start_va = 0xeaf8820000 end_va = 0xeaf891ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000eaf8820000" filename = "" Region: id = 486 start_va = 0xeaf8920000 end_va = 0xeaf8a1ffff entry_point = 0x0 region_type = private name = "private_0x000000eaf8920000" filename = "" Region: id = 487 start_va = 0xeaf8a20000 end_va = 0xeaf8b1ffff entry_point = 0x0 region_type = private name = "private_0x000000eaf8a20000" filename = "" Region: id = 488 start_va = 0xeaf8b20000 end_va = 0xeaf8c1ffff entry_point = 0x0 region_type = private name = "private_0x000000eaf8b20000" filename = "" Region: id = 489 start_va = 0xeaf8d00000 end_va = 0xeaf8dfffff entry_point = 0x0 region_type = private name = "private_0x000000eaf8d00000" filename = "" Region: id = 490 start_va = 0xeaf8e00000 end_va = 0xeaf8efffff entry_point = 0x0 region_type = private name = "private_0x000000eaf8e00000" filename = "" Region: id = 491 start_va = 0xeaf8f00000 end_va = 0xeaf8ffffff entry_point = 0x0 region_type = private name = "private_0x000000eaf8f00000" filename = "" Region: id = 492 start_va = 0xeaf9000000 end_va = 0xeaf90fffff entry_point = 0x0 region_type = private name = "private_0x000000eaf9000000" filename = "" Region: id = 493 start_va = 0xeaf9100000 end_va = 0xeaf91fffff entry_point = 0x0 region_type = private name = "private_0x000000eaf9100000" filename = "" Region: id = 494 start_va = 0xeaf9200000 end_va = 0xeaf92fffff entry_point = 0x0 region_type = private name = "private_0x000000eaf9200000" filename = "" Region: id = 495 start_va = 0xeaf9300000 end_va = 0xeaf93fffff entry_point = 0x0 region_type = private name = "private_0x000000eaf9300000" filename = "" Region: id = 496 start_va = 0xeaf9400000 end_va = 0xeaf94fffff entry_point = 0x0 region_type = private name = "private_0x000000eaf9400000" filename = "" Region: id = 497 start_va = 0xeaf9500000 end_va = 0xeaf95fffff entry_point = 0x0 region_type = private name = "private_0x000000eaf9500000" filename = "" Region: id = 498 start_va = 0x7df5ff1f0000 end_va = 0x7ff5ff1effff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007df5ff1f0000" filename = "" Region: id = 499 start_va = 0x7ff672ee2000 end_va = 0x7ff672ee3fff entry_point = 0x0 region_type = private name = "private_0x00007ff672ee2000" filename = "" Region: id = 500 start_va = 0x7ff672ee4000 end_va = 0x7ff672ee5fff entry_point = 0x0 region_type = private name = "private_0x00007ff672ee4000" filename = "" Region: id = 501 start_va = 0x7ff672ee6000 end_va = 0x7ff672ee7fff entry_point = 0x0 region_type = private name = "private_0x00007ff672ee6000" filename = "" Region: id = 502 start_va = 0x7ff672ee8000 end_va = 0x7ff672ee9fff entry_point = 0x0 region_type = private name = "private_0x00007ff672ee8000" filename = "" Region: id = 503 start_va = 0x7ff672eea000 end_va = 0x7ff672eebfff entry_point = 0x0 region_type = private name = "private_0x00007ff672eea000" filename = "" Region: id = 504 start_va = 0x7ff672eec000 end_va = 0x7ff672eedfff entry_point = 0x0 region_type = private name = "private_0x00007ff672eec000" filename = "" Region: id = 505 start_va = 0x7ff672eee000 end_va = 0x7ff672eeffff entry_point = 0x0 region_type = private name = "private_0x00007ff672eee000" filename = "" Region: id = 506 start_va = 0x7ff672ef0000 end_va = 0x7ff672ef1fff entry_point = 0x0 region_type = private name = "private_0x00007ff672ef0000" filename = "" Region: id = 507 start_va = 0x7ff672ef2000 end_va = 0x7ff672ef3fff entry_point = 0x0 region_type = private name = "private_0x00007ff672ef2000" filename = "" Region: id = 508 start_va = 0x7ff672ef4000 end_va = 0x7ff672ef5fff entry_point = 0x0 region_type = private name = "private_0x00007ff672ef4000" filename = "" Region: id = 509 start_va = 0x7ff672ef6000 end_va = 0x7ff672ef7fff entry_point = 0x0 region_type = private name = "private_0x00007ff672ef6000" filename = "" Region: id = 510 start_va = 0x7ff672ef8000 end_va = 0x7ff672ef9fff entry_point = 0x0 region_type = private name = "private_0x00007ff672ef8000" filename = "" Region: id = 511 start_va = 0x7ff672efa000 end_va = 0x7ff672efbfff entry_point = 0x0 region_type = private name = "private_0x00007ff672efa000" filename = "" Region: id = 512 start_va = 0x7ff672efc000 end_va = 0x7ff672efdfff entry_point = 0x0 region_type = private name = "private_0x00007ff672efc000" filename = "" Region: id = 513 start_va = 0x7ff672efe000 end_va = 0x7ff672efffff entry_point = 0x0 region_type = private name = "private_0x00007ff672efe000" filename = "" Region: id = 514 start_va = 0x7ff672f00000 end_va = 0x7ff672f01fff entry_point = 0x0 region_type = private name = "private_0x00007ff672f00000" filename = "" Region: id = 515 start_va = 0x7ff672f02000 end_va = 0x7ff672f03fff entry_point = 0x0 region_type = private name = "private_0x00007ff672f02000" filename = "" Region: id = 516 start_va = 0x7ff672f04000 end_va = 0x7ff672f05fff entry_point = 0x0 region_type = private name = "private_0x00007ff672f04000" filename = "" Region: id = 517 start_va = 0x7ff672f06000 end_va = 0x7ff672f07fff entry_point = 0x0 region_type = private name = "private_0x00007ff672f06000" filename = "" Region: id = 518 start_va = 0x7ff672f08000 end_va = 0x7ff672f09fff entry_point = 0x0 region_type = private name = "private_0x00007ff672f08000" filename = "" Region: id = 519 start_va = 0x7ff672f0a000 end_va = 0x7ff672f0bfff entry_point = 0x0 region_type = private name = "private_0x00007ff672f0a000" filename = "" Region: id = 520 start_va = 0x7ff672f0c000 end_va = 0x7ff672f0dfff entry_point = 0x0 region_type = private name = "private_0x00007ff672f0c000" filename = "" Region: id = 521 start_va = 0x7ff672f0e000 end_va = 0x7ff672f0ffff entry_point = 0x0 region_type = private name = "private_0x00007ff672f0e000" filename = "" Region: id = 522 start_va = 0x7ff672f10000 end_va = 0x7ff672f11fff entry_point = 0x0 region_type = private name = "private_0x00007ff672f10000" filename = "" Region: id = 523 start_va = 0x7ff672f12000 end_va = 0x7ff672f13fff entry_point = 0x0 region_type = private name = "private_0x00007ff672f12000" filename = "" Region: id = 524 start_va = 0x7ff672f14000 end_va = 0x7ff672f15fff entry_point = 0x0 region_type = private name = "private_0x00007ff672f14000" filename = "" Region: id = 525 start_va = 0x7ff672f16000 end_va = 0x7ff672f17fff entry_point = 0x0 region_type = private name = "private_0x00007ff672f16000" filename = "" Region: id = 526 start_va = 0x7ff672f18000 end_va = 0x7ff672f19fff entry_point = 0x0 region_type = private name = "private_0x00007ff672f18000" filename = "" Region: id = 527 start_va = 0x7ff672f1a000 end_va = 0x7ff672f1bfff entry_point = 0x0 region_type = private name = "private_0x00007ff672f1a000" filename = "" Region: id = 528 start_va = 0x7ff672f1c000 end_va = 0x7ff672f1dfff entry_point = 0x0 region_type = private name = "private_0x00007ff672f1c000" filename = "" Region: id = 529 start_va = 0x7ff672f1e000 end_va = 0x7ff672f1ffff entry_point = 0x0 region_type = private name = "private_0x00007ff672f1e000" filename = "" Region: id = 530 start_va = 0x7ff672f20000 end_va = 0x7ff672f21fff entry_point = 0x0 region_type = private name = "private_0x00007ff672f20000" filename = "" Region: id = 531 start_va = 0x7ff672f22000 end_va = 0x7ff672f23fff entry_point = 0x0 region_type = private name = "private_0x00007ff672f22000" filename = "" Region: id = 532 start_va = 0x7ff672f24000 end_va = 0x7ff672f25fff entry_point = 0x0 region_type = private name = "private_0x00007ff672f24000" filename = "" Region: id = 533 start_va = 0x7ff672f26000 end_va = 0x7ff672f27fff entry_point = 0x0 region_type = private name = "private_0x00007ff672f26000" filename = "" Region: id = 534 start_va = 0x7ff672f28000 end_va = 0x7ff672f29fff entry_point = 0x0 region_type = private name = "private_0x00007ff672f28000" filename = "" Region: id = 535 start_va = 0x7ff672f2a000 end_va = 0x7ff672f2bfff entry_point = 0x0 region_type = private name = "private_0x00007ff672f2a000" filename = "" Region: id = 536 start_va = 0x7ff672f2c000 end_va = 0x7ff672f2dfff entry_point = 0x0 region_type = private name = "private_0x00007ff672f2c000" filename = "" Region: id = 537 start_va = 0x7ff672f2e000 end_va = 0x7ff672f2ffff entry_point = 0x0 region_type = private name = "private_0x00007ff672f2e000" filename = "" Region: id = 538 start_va = 0x7ff672f30000 end_va = 0x7ff672f31fff entry_point = 0x0 region_type = private name = "private_0x00007ff672f30000" filename = "" Region: id = 539 start_va = 0x7ff672f32000 end_va = 0x7ff672f33fff entry_point = 0x0 region_type = private name = "private_0x00007ff672f32000" filename = "" Region: id = 540 start_va = 0x7ff672f34000 end_va = 0x7ff672f35fff entry_point = 0x0 region_type = private name = "private_0x00007ff672f34000" filename = "" Region: id = 541 start_va = 0x7ff672f36000 end_va = 0x7ff672f37fff entry_point = 0x0 region_type = private name = "private_0x00007ff672f36000" filename = "" Region: id = 542 start_va = 0x7ff672f38000 end_va = 0x7ff672f39fff entry_point = 0x0 region_type = private name = "private_0x00007ff672f38000" filename = "" Region: id = 543 start_va = 0x7ff672f3a000 end_va = 0x7ff672f3bfff entry_point = 0x0 region_type = private name = "private_0x00007ff672f3a000" filename = "" Region: id = 544 start_va = 0x7ff672f3c000 end_va = 0x7ff672f3dfff entry_point = 0x0 region_type = private name = "private_0x00007ff672f3c000" filename = "" Region: id = 545 start_va = 0x7ff672f3e000 end_va = 0x7ff672f3ffff entry_point = 0x0 region_type = private name = "private_0x00007ff672f3e000" filename = "" Region: id = 546 start_va = 0x7ff672f40000 end_va = 0x7ff672f41fff entry_point = 0x0 region_type = private name = "private_0x00007ff672f40000" filename = "" Region: id = 547 start_va = 0x7ff672f42000 end_va = 0x7ff672f43fff entry_point = 0x0 region_type = private name = "private_0x00007ff672f42000" filename = "" Region: id = 548 start_va = 0x7ff672f44000 end_va = 0x7ff672f45fff entry_point = 0x0 region_type = private name = "private_0x00007ff672f44000" filename = "" Region: id = 549 start_va = 0x7ff672f46000 end_va = 0x7ff672f47fff entry_point = 0x0 region_type = private name = "private_0x00007ff672f46000" filename = "" Region: id = 550 start_va = 0x7ff672f48000 end_va = 0x7ff672f49fff entry_point = 0x0 region_type = private name = "private_0x00007ff672f48000" filename = "" Region: id = 551 start_va = 0x7ff672f4a000 end_va = 0x7ff672f4bfff entry_point = 0x0 region_type = private name = "private_0x00007ff672f4a000" filename = "" Region: id = 552 start_va = 0x7ff672f4c000 end_va = 0x7ff672f4dfff entry_point = 0x0 region_type = private name = "private_0x00007ff672f4c000" filename = "" Region: id = 553 start_va = 0x7ff672f4e000 end_va = 0x7ff672f4ffff entry_point = 0x0 region_type = private name = "private_0x00007ff672f4e000" filename = "" Region: id = 554 start_va = 0x7ff672f50000 end_va = 0x7ff672f51fff entry_point = 0x0 region_type = private name = "private_0x00007ff672f50000" filename = "" Region: id = 555 start_va = 0x7ff672f52000 end_va = 0x7ff672f53fff entry_point = 0x0 region_type = private name = "private_0x00007ff672f52000" filename = "" Region: id = 556 start_va = 0x7ff672f54000 end_va = 0x7ff672f55fff entry_point = 0x0 region_type = private name = "private_0x00007ff672f54000" filename = "" Region: id = 557 start_va = 0x7ff672f56000 end_va = 0x7ff672f57fff entry_point = 0x0 region_type = private name = "private_0x00007ff672f56000" filename = "" Region: id = 558 start_va = 0x7ff672f58000 end_va = 0x7ff672f59fff entry_point = 0x0 region_type = private name = "private_0x00007ff672f58000" filename = "" Region: id = 559 start_va = 0x7ff672f5a000 end_va = 0x7ff672f5bfff entry_point = 0x0 region_type = private name = "private_0x00007ff672f5a000" filename = "" Region: id = 560 start_va = 0x7ff672f5c000 end_va = 0x7ff672f5dfff entry_point = 0x0 region_type = private name = "private_0x00007ff672f5c000" filename = "" Region: id = 561 start_va = 0x7ff672f5e000 end_va = 0x7ff672f5ffff entry_point = 0x0 region_type = private name = "private_0x00007ff672f5e000" filename = "" Region: id = 562 start_va = 0x7ff672f60000 end_va = 0x7ff67305ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007ff672f60000" filename = "" Region: id = 563 start_va = 0x7ff673060000 end_va = 0x7ff673082fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007ff673060000" filename = "" Region: id = 564 start_va = 0x7ff673084000 end_va = 0x7ff673085fff entry_point = 0x0 region_type = private name = "private_0x00007ff673084000" filename = "" Region: id = 565 start_va = 0x7ff673086000 end_va = 0x7ff673087fff entry_point = 0x0 region_type = private name = "private_0x00007ff673086000" filename = "" Region: id = 566 start_va = 0x7ff673088000 end_va = 0x7ff673088fff entry_point = 0x0 region_type = private name = "private_0x00007ff673088000" filename = "" Region: id = 567 start_va = 0x7ff67308a000 end_va = 0x7ff67308bfff entry_point = 0x0 region_type = private name = "private_0x00007ff67308a000" filename = "" Region: id = 568 start_va = 0x7ff67308c000 end_va = 0x7ff67308dfff entry_point = 0x0 region_type = private name = "private_0x00007ff67308c000" filename = "" Region: id = 569 start_va = 0x7ff67308e000 end_va = 0x7ff67308ffff entry_point = 0x0 region_type = private name = "private_0x00007ff67308e000" filename = "" Region: id = 570 start_va = 0x7ff673b40000 end_va = 0x7ff673b4cfff entry_point = 0x7ff673b40000 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 571 start_va = 0x7ff8db390000 end_va = 0x7ff8db453fff entry_point = 0x7ff8db390000 region_type = mapped_file name = "wuapi.dll" filename = "\\Windows\\System32\\wuapi.dll" (normalized: "c:\\windows\\system32\\wuapi.dll") Region: id = 572 start_va = 0x7ff8db570000 end_va = 0x7ff8db5affff entry_point = 0x7ff8db570000 region_type = mapped_file name = "updatehandlers.dll" filename = "\\Windows\\System32\\updatehandlers.dll" (normalized: "c:\\windows\\system32\\updatehandlers.dll") Region: id = 573 start_va = 0x7ff8db8b0000 end_va = 0x7ff8db909fff entry_point = 0x7ff8db8b0000 region_type = mapped_file name = "usocore.dll" filename = "\\Windows\\System32\\usocore.dll" (normalized: "c:\\windows\\system32\\usocore.dll") Region: id = 574 start_va = 0x7ff8dca80000 end_va = 0x7ff8dca91fff entry_point = 0x7ff8dca80000 region_type = mapped_file name = "bitsproxy.dll" filename = "\\Windows\\System32\\BitsProxy.dll" (normalized: "c:\\windows\\system32\\bitsproxy.dll") Region: id = 575 start_va = 0x7ff8dcbd0000 end_va = 0x7ff8dcc4ffff entry_point = 0x7ff8dcbd0000 region_type = mapped_file name = "webio.dll" filename = "\\Windows\\System32\\webio.dll" (normalized: "c:\\windows\\system32\\webio.dll") Region: id = 576 start_va = 0x7ff8dce00000 end_va = 0x7ff8dce65fff entry_point = 0x7ff8dce00000 region_type = mapped_file name = "upnp.dll" filename = "\\Windows\\System32\\upnp.dll" (normalized: "c:\\windows\\system32\\upnp.dll") Region: id = 577 start_va = 0x7ff8dce70000 end_va = 0x7ff8dce82fff entry_point = 0x7ff8dce70000 region_type = mapped_file name = "bitsigd.dll" filename = "\\Windows\\System32\\bitsigd.dll" (normalized: "c:\\windows\\system32\\bitsigd.dll") Region: id = 578 start_va = 0x7ff8dce90000 end_va = 0x7ff8dce9afff entry_point = 0x7ff8dce90000 region_type = mapped_file name = "bitsperf.dll" filename = "\\Windows\\System32\\bitsperf.dll" (normalized: "c:\\windows\\system32\\bitsperf.dll") Region: id = 579 start_va = 0x7ff8dcea0000 end_va = 0x7ff8dcfc0fff entry_point = 0x7ff8dcea0000 region_type = mapped_file name = "qmgr.dll" filename = "\\Windows\\System32\\qmgr.dll" (normalized: "c:\\windows\\system32\\qmgr.dll") Region: id = 580 start_va = 0x7ff8df640000 end_va = 0x7ff8dfaa9fff entry_point = 0x7ff8df640000 region_type = mapped_file name = "actxprxy.dll" filename = "\\Windows\\System32\\actxprxy.dll" (normalized: "c:\\windows\\system32\\actxprxy.dll") Region: id = 581 start_va = 0x7ff8dfd20000 end_va = 0x7ff8dfd34fff entry_point = 0x7ff8dfd20000 region_type = mapped_file name = "napinsp.dll" filename = "\\Windows\\System32\\NapiNSP.dll" (normalized: "c:\\windows\\system32\\napinsp.dll") Region: id = 582 start_va = 0x7ff8dfd40000 end_va = 0x7ff8dfd59fff entry_point = 0x7ff8dfd40000 region_type = mapped_file name = "pnrpnsp.dll" filename = "\\Windows\\System32\\pnrpnsp.dll" (normalized: "c:\\windows\\system32\\pnrpnsp.dll") Region: id = 583 start_va = 0x7ff8dfd60000 end_va = 0x7ff8dfd6cfff entry_point = 0x7ff8dfd60000 region_type = mapped_file name = "winrnr.dll" filename = "\\Windows\\System32\\winrnr.dll" (normalized: "c:\\windows\\system32\\winrnr.dll") Region: id = 584 start_va = 0x7ff8dfd70000 end_va = 0x7ff8dfdf2fff entry_point = 0x7ff8dfd70000 region_type = mapped_file name = "wbemess.dll" filename = "\\Windows\\System32\\wbem\\wbemess.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemess.dll") Region: id = 585 start_va = 0x7ff8dfe00000 end_va = 0x7ff8dfe15fff entry_point = 0x7ff8dfe00000 region_type = mapped_file name = "ncobjapi.dll" filename = "\\Windows\\System32\\ncobjapi.dll" (normalized: "c:\\windows\\system32\\ncobjapi.dll") Region: id = 586 start_va = 0x7ff8dfe20000 end_va = 0x7ff8dfef7fff entry_point = 0x7ff8dfe20000 region_type = mapped_file name = "wmiprvsd.dll" filename = "\\Windows\\System32\\wbem\\WmiPrvSD.dll" (normalized: "c:\\windows\\system32\\wbem\\wmiprvsd.dll") Region: id = 587 start_va = 0x7ff8dff00000 end_va = 0x7ff8e01a6fff entry_point = 0x7ff8dff00000 region_type = mapped_file name = "wininet.dll" filename = "\\Windows\\System32\\wininet.dll" (normalized: "c:\\windows\\system32\\wininet.dll") Region: id = 588 start_va = 0x7ff8e01b0000 end_va = 0x7ff8e01c0fff entry_point = 0x7ff8e01b0000 region_type = mapped_file name = "credentialmigrationhandler.dll" filename = "\\Windows\\System32\\CredentialMigrationHandler.dll" (normalized: "c:\\windows\\system32\\credentialmigrationhandler.dll") Region: id = 589 start_va = 0x7ff8e01d0000 end_va = 0x7ff8e0232fff entry_point = 0x7ff8e01d0000 region_type = mapped_file name = "repdrvfs.dll" filename = "\\Windows\\System32\\wbem\\repdrvfs.dll" (normalized: "c:\\windows\\system32\\wbem\\repdrvfs.dll") Region: id = 590 start_va = 0x7ff8e0240000 end_va = 0x7ff8e0264fff entry_point = 0x7ff8e0240000 region_type = mapped_file name = "wmiutils.dll" filename = "\\Windows\\System32\\wbem\\wmiutils.dll" (normalized: "c:\\windows\\system32\\wbem\\wmiutils.dll") Region: id = 591 start_va = 0x7ff8e0290000 end_va = 0x7ff8e02a3fff entry_point = 0x7ff8e0290000 region_type = mapped_file name = "wbemsvc.dll" filename = "\\Windows\\System32\\wbem\\wbemsvc.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemsvc.dll") Region: id = 592 start_va = 0x7ff8e02b0000 end_va = 0x7ff8e03a7fff entry_point = 0x7ff8e02b0000 region_type = mapped_file name = "fastprox.dll" filename = "\\Windows\\System32\\wbem\\fastprox.dll" (normalized: "c:\\windows\\system32\\wbem\\fastprox.dll") Region: id = 593 start_va = 0x7ff8e03f0000 end_va = 0x7ff8e0462fff entry_point = 0x7ff8e03f0000 region_type = mapped_file name = "esscli.dll" filename = "\\Windows\\System32\\wbem\\esscli.dll" (normalized: "c:\\windows\\system32\\wbem\\esscli.dll") Region: id = 594 start_va = 0x7ff8e0470000 end_va = 0x7ff8e05a6fff entry_point = 0x7ff8e0470000 region_type = mapped_file name = "wbemcore.dll" filename = "\\Windows\\System32\\wbem\\wbemcore.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemcore.dll") Region: id = 595 start_va = 0x7ff8e05b0000 end_va = 0x7ff8e05c1fff entry_point = 0x7ff8e05b0000 region_type = mapped_file name = "cscapi.dll" filename = "\\Windows\\System32\\cscapi.dll" (normalized: "c:\\windows\\system32\\cscapi.dll") Region: id = 596 start_va = 0x7ff8e05d0000 end_va = 0x7ff8e0615fff entry_point = 0x7ff8e05d0000 region_type = mapped_file name = "adsldp.dll" filename = "\\Windows\\System32\\adsldp.dll" (normalized: "c:\\windows\\system32\\adsldp.dll") Region: id = 597 start_va = 0x7ff8e0620000 end_va = 0x7ff8e065ffff entry_point = 0x7ff8e0620000 region_type = mapped_file name = "adsldpc.dll" filename = "\\Windows\\System32\\adsldpc.dll" (normalized: "c:\\windows\\system32\\adsldpc.dll") Region: id = 598 start_va = 0x7ff8e0660000 end_va = 0x7ff8e06a7fff entry_point = 0x7ff8e0660000 region_type = mapped_file name = "activeds.dll" filename = "\\Windows\\System32\\activeds.dll" (normalized: "c:\\windows\\system32\\activeds.dll") Region: id = 599 start_va = 0x7ff8e06b0000 end_va = 0x7ff8e06c0fff entry_point = 0x7ff8e06b0000 region_type = mapped_file name = "wbemprox.dll" filename = "\\Windows\\System32\\wbem\\wbemprox.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemprox.dll") Region: id = 600 start_va = 0x7ff8e06d0000 end_va = 0x7ff8e06e0fff entry_point = 0x7ff8e06d0000 region_type = mapped_file name = "tetheringclient.dll" filename = "\\Windows\\System32\\tetheringclient.dll" (normalized: "c:\\windows\\system32\\tetheringclient.dll") Region: id = 601 start_va = 0x7ff8e06f0000 end_va = 0x7ff8e076ffff entry_point = 0x7ff8e06f0000 region_type = mapped_file name = "hnetcfg.dll" filename = "\\Windows\\System32\\hnetcfg.dll" (normalized: "c:\\windows\\system32\\hnetcfg.dll") Region: id = 602 start_va = 0x7ff8e09d0000 end_va = 0x7ff8e09e0fff entry_point = 0x7ff8e09d0000 region_type = mapped_file name = "nci.dll" filename = "\\Windows\\System32\\nci.dll" (normalized: "c:\\windows\\system32\\nci.dll") Region: id = 603 start_va = 0x7ff8e0f70000 end_va = 0x7ff8e0f7dfff entry_point = 0x7ff8e0f70000 region_type = mapped_file name = "npmproxy.dll" filename = "\\Windows\\System32\\npmproxy.dll" (normalized: "c:\\windows\\system32\\npmproxy.dll") Region: id = 604 start_va = 0x7ff8e0f80000 end_va = 0x7ff8e0f94fff entry_point = 0x7ff8e0f80000 region_type = mapped_file name = "ondemandconnroutehelper.dll" filename = "\\Windows\\System32\\OnDemandConnRouteHelper.dll" (normalized: "c:\\windows\\system32\\ondemandconnroutehelper.dll") Region: id = 605 start_va = 0x7ff8e12e0000 end_va = 0x7ff8e12f6fff entry_point = 0x7ff8e12e0000 region_type = mapped_file name = "netapi32.dll" filename = "\\Windows\\System32\\netapi32.dll" (normalized: "c:\\windows\\system32\\netapi32.dll") Region: id = 606 start_va = 0x7ff8e15f0000 end_va = 0x7ff8e164efff entry_point = 0x7ff8e15f0000 region_type = mapped_file name = "wlanapi.dll" filename = "\\Windows\\System32\\wlanapi.dll" (normalized: "c:\\windows\\system32\\wlanapi.dll") Region: id = 607 start_va = 0x7ff8e1780000 end_va = 0x7ff8e17c0fff entry_point = 0x7ff8e1780000 region_type = mapped_file name = "wdscore.dll" filename = "\\Windows\\System32\\wdscore.dll" (normalized: "c:\\windows\\system32\\wdscore.dll") Region: id = 608 start_va = 0x7ff8e17d0000 end_va = 0x7ff8e1866fff entry_point = 0x7ff8e17d0000 region_type = mapped_file name = "settingsync.dll" filename = "\\Windows\\System32\\SettingSync.dll" (normalized: "c:\\windows\\system32\\settingsync.dll") Region: id = 609 start_va = 0x7ff8e24c0000 end_va = 0x7ff8e24dcfff entry_point = 0x7ff8e24c0000 region_type = mapped_file name = "netsetupapi.dll" filename = "\\Windows\\System32\\NetSetupApi.dll" (normalized: "c:\\windows\\system32\\netsetupapi.dll") Region: id = 610 start_va = 0x7ff8e24e0000 end_va = 0x7ff8e2543fff entry_point = 0x7ff8e24e0000 region_type = mapped_file name = "netsetupshim.dll" filename = "\\Windows\\System32\\NetSetupShim.dll" (normalized: "c:\\windows\\system32\\netsetupshim.dll") Region: id = 611 start_va = 0x7ff8e2760000 end_va = 0x7ff8e279efff entry_point = 0x7ff8e2760000 region_type = mapped_file name = "netprofm.dll" filename = "\\Windows\\System32\\netprofm.dll" (normalized: "c:\\windows\\system32\\netprofm.dll") Region: id = 612 start_va = 0x7ff8e27a0000 end_va = 0x7ff8e27b7fff entry_point = 0x7ff8e27a0000 region_type = mapped_file name = "adhsvc.dll" filename = "\\Windows\\System32\\adhsvc.dll" (normalized: "c:\\windows\\system32\\adhsvc.dll") Region: id = 613 start_va = 0x7ff8e27c0000 end_va = 0x7ff8e27e2fff entry_point = 0x7ff8e27c0000 region_type = mapped_file name = "httpprxm.dll" filename = "\\Windows\\System32\\httpprxm.dll" (normalized: "c:\\windows\\system32\\httpprxm.dll") Region: id = 614 start_va = 0x7ff8e27f0000 end_va = 0x7ff8e2804fff entry_point = 0x7ff8e27f0000 region_type = mapped_file name = "ssdpapi.dll" filename = "\\Windows\\System32\\ssdpapi.dll" (normalized: "c:\\windows\\system32\\ssdpapi.dll") Region: id = 615 start_va = 0x7ff8e2810000 end_va = 0x7ff8e2854fff entry_point = 0x7ff8e2810000 region_type = mapped_file name = "sqmapi.dll" filename = "\\Windows\\System32\\sqmapi.dll" (normalized: "c:\\windows\\system32\\sqmapi.dll") Region: id = 616 start_va = 0x7ff8e2860000 end_va = 0x7ff8e2950fff entry_point = 0x7ff8e2860000 region_type = mapped_file name = "iphlpsvc.dll" filename = "\\Windows\\System32\\iphlpsvc.dll" (normalized: "c:\\windows\\system32\\iphlpsvc.dll") Region: id = 617 start_va = 0x7ff8e2a20000 end_va = 0x7ff8e2abefff entry_point = 0x7ff8e2a20000 region_type = mapped_file name = "clusapi.dll" filename = "\\Windows\\System32\\clusapi.dll" (normalized: "c:\\windows\\system32\\clusapi.dll") Region: id = 618 start_va = 0x7ff8e2ac0000 end_va = 0x7ff8e2b1afff entry_point = 0x7ff8e2ac0000 region_type = mapped_file name = "resutils.dll" filename = "\\Windows\\System32\\resutils.dll" (normalized: "c:\\windows\\system32\\resutils.dll") Region: id = 619 start_va = 0x7ff8e2e70000 end_va = 0x7ff8e2e9dfff entry_point = 0x7ff8e2e70000 region_type = mapped_file name = "wmidcom.dll" filename = "\\Windows\\System32\\wmidcom.dll" (normalized: "c:\\windows\\system32\\wmidcom.dll") Region: id = 620 start_va = 0x7ff8e2ea0000 end_va = 0x7ff8e2ea9fff entry_point = 0x7ff8e2ea0000 region_type = mapped_file name = "rasadhlp.dll" filename = "\\Windows\\System32\\rasadhlp.dll" (normalized: "c:\\windows\\system32\\rasadhlp.dll") Region: id = 621 start_va = 0x7ff8e2ec0000 end_va = 0x7ff8e2f1cfff entry_point = 0x7ff8e2ec0000 region_type = mapped_file name = "miutils.dll" filename = "\\Windows\\System32\\miutils.dll" (normalized: "c:\\windows\\system32\\miutils.dll") Region: id = 622 start_va = 0x7ff8e2f20000 end_va = 0x7ff8e2f3ffff entry_point = 0x7ff8e2f20000 region_type = mapped_file name = "mi.dll" filename = "\\Windows\\System32\\mi.dll" (normalized: "c:\\windows\\system32\\mi.dll") Region: id = 623 start_va = 0x7ff8e2f40000 end_va = 0x7ff8e2f47fff entry_point = 0x7ff8e2f40000 region_type = mapped_file name = "sscoreext.dll" filename = "\\Windows\\System32\\sscoreext.dll" (normalized: "c:\\windows\\system32\\sscoreext.dll") Region: id = 624 start_va = 0x7ff8e2f50000 end_va = 0x7ff8e2f60fff entry_point = 0x7ff8e2f50000 region_type = mapped_file name = "sscore.dll" filename = "\\Windows\\System32\\sscore.dll" (normalized: "c:\\windows\\system32\\sscore.dll") Region: id = 625 start_va = 0x7ff8e3130000 end_va = 0x7ff8e3143fff entry_point = 0x7ff8e3130000 region_type = mapped_file name = "rtutils.dll" filename = "\\Windows\\System32\\rtutils.dll" (normalized: "c:\\windows\\system32\\rtutils.dll") Region: id = 626 start_va = 0x7ff8e3150000 end_va = 0x7ff8e3168fff entry_point = 0x7ff8e3150000 region_type = mapped_file name = "usoapi.dll" filename = "\\Windows\\System32\\usoapi.dll" (normalized: "c:\\windows\\system32\\usoapi.dll") Region: id = 627 start_va = 0x7ff8e51d0000 end_va = 0x7ff8e51d7fff entry_point = 0x7ff8e51d0000 region_type = mapped_file name = "dmiso8601utils.dll" filename = "\\Windows\\System32\\dmiso8601utils.dll" (normalized: "c:\\windows\\system32\\dmiso8601utils.dll") Region: id = 628 start_va = 0x7ff8e5310000 end_va = 0x7ff8e532cfff entry_point = 0x7ff8e5310000 region_type = mapped_file name = "updatepolicy.dll" filename = "\\Windows\\System32\\updatepolicy.dll" (normalized: "c:\\windows\\system32\\updatepolicy.dll") Region: id = 629 start_va = 0x7ff8e5330000 end_va = 0x7ff8e5346fff entry_point = 0x7ff8e5330000 region_type = mapped_file name = "dmcmnutils.dll" filename = "\\Windows\\System32\\dmcmnutils.dll" (normalized: "c:\\windows\\system32\\dmcmnutils.dll") Region: id = 630 start_va = 0x7ff8e5400000 end_va = 0x7ff8e541cfff entry_point = 0x7ff8e5400000 region_type = mapped_file name = "appinfo.dll" filename = "\\Windows\\System32\\appinfo.dll" (normalized: "c:\\windows\\system32\\appinfo.dll") Region: id = 631 start_va = 0x7ff8e5480000 end_va = 0x7ff8e548bfff entry_point = 0x7ff8e5480000 region_type = mapped_file name = "secur32.dll" filename = "\\Windows\\System32\\secur32.dll" (normalized: "c:\\windows\\system32\\secur32.dll") Region: id = 632 start_va = 0x7ff8e5490000 end_va = 0x7ff8e54dbfff entry_point = 0x7ff8e5490000 region_type = mapped_file name = "srvsvc.dll" filename = "\\Windows\\System32\\srvsvc.dll" (normalized: "c:\\windows\\system32\\srvsvc.dll") Region: id = 633 start_va = 0x7ff8e54e0000 end_va = 0x7ff8e5511fff entry_point = 0x7ff8e54e0000 region_type = mapped_file name = "shacct.dll" filename = "\\Windows\\System32\\shacct.dll" (normalized: "c:\\windows\\system32\\shacct.dll") Region: id = 634 start_va = 0x7ff8e5540000 end_va = 0x7ff8e5557fff entry_point = 0x7ff8e5540000 region_type = mapped_file name = "vsstrace.dll" filename = "\\Windows\\System32\\vsstrace.dll" (normalized: "c:\\windows\\system32\\vsstrace.dll") Region: id = 635 start_va = 0x7ff8e5560000 end_va = 0x7ff8e56e2fff entry_point = 0x7ff8e5560000 region_type = mapped_file name = "vssapi.dll" filename = "\\Windows\\System32\\vssapi.dll" (normalized: "c:\\windows\\system32\\vssapi.dll") Region: id = 636 start_va = 0x7ff8e56f0000 end_va = 0x7ff8e576efff entry_point = 0x7ff8e56f0000 region_type = mapped_file name = "wbemcomn.dll" filename = "\\Windows\\System32\\wbemcomn.dll" (normalized: "c:\\windows\\system32\\wbemcomn.dll") Region: id = 637 start_va = 0x7ff8e5770000 end_va = 0x7ff8e57abfff entry_point = 0x7ff8e5770000 region_type = mapped_file name = "wmisvc.dll" filename = "\\Windows\\System32\\wbem\\WMIsvc.dll" (normalized: "c:\\windows\\system32\\wbem\\wmisvc.dll") Region: id = 638 start_va = 0x7ff8e5dd0000 end_va = 0x7ff8e5ea5fff entry_point = 0x7ff8e5dd0000 region_type = mapped_file name = "winhttp.dll" filename = "\\Windows\\System32\\winhttp.dll" (normalized: "c:\\windows\\system32\\winhttp.dll") Region: id = 639 start_va = 0x7ff8e5ff0000 end_va = 0x7ff8e6016fff entry_point = 0x7ff8e5ff0000 region_type = mapped_file name = "cabinet.dll" filename = "\\Windows\\System32\\cabinet.dll" (normalized: "c:\\windows\\system32\\cabinet.dll") Region: id = 640 start_va = 0x7ff8e60a0000 end_va = 0x7ff8e6131fff entry_point = 0x7ff8e60a0000 region_type = mapped_file name = "msvcp110_win.dll" filename = "\\Windows\\System32\\msvcp110_win.dll" (normalized: "c:\\windows\\system32\\msvcp110_win.dll") Region: id = 641 start_va = 0x7ff8e6140000 end_va = 0x7ff8e6178fff entry_point = 0x7ff8e6140000 region_type = mapped_file name = "policymanager.dll" filename = "\\Windows\\System32\\policymanager.dll" (normalized: "c:\\windows\\system32\\policymanager.dll") Region: id = 642 start_va = 0x7ff8e6180000 end_va = 0x7ff8e6188fff entry_point = 0x7ff8e6180000 region_type = mapped_file name = "httpprxc.dll" filename = "\\Windows\\System32\\httpprxc.dll" (normalized: "c:\\windows\\system32\\httpprxc.dll") Region: id = 643 start_va = 0x7ff8e6210000 end_va = 0x7ff8e6244fff entry_point = 0x7ff8e6210000 region_type = mapped_file name = "fwpolicyiomgr.dll" filename = "\\Windows\\System32\\fwpolicyiomgr.dll" (normalized: "c:\\windows\\system32\\fwpolicyiomgr.dll") Region: id = 644 start_va = 0x7ff8e6330000 end_va = 0x7ff8e6365fff entry_point = 0x7ff8e6330000 region_type = mapped_file name = "xmllite.dll" filename = "\\Windows\\System32\\xmllite.dll" (normalized: "c:\\windows\\system32\\xmllite.dll") Region: id = 645 start_va = 0x7ff8e6f30000 end_va = 0x7ff8e6f38fff entry_point = 0x7ff8e6f30000 region_type = mapped_file name = "proximitycommonpal.dll" filename = "\\Windows\\System32\\ProximityCommonPal.dll" (normalized: "c:\\windows\\system32\\proximitycommonpal.dll") Region: id = 646 start_va = 0x7ff8e6f40000 end_va = 0x7ff8e6f6cfff entry_point = 0x7ff8e6f40000 region_type = mapped_file name = "proximitycommon.dll" filename = "\\Windows\\System32\\ProximityCommon.dll" (normalized: "c:\\windows\\system32\\proximitycommon.dll") Region: id = 647 start_va = 0x7ff8e6f70000 end_va = 0x7ff8e6f7ffff entry_point = 0x7ff8e6f70000 region_type = mapped_file name = "proximityservicepal.dll" filename = "\\Windows\\System32\\ProximityServicePal.dll" (normalized: "c:\\windows\\system32\\proximityservicepal.dll") Region: id = 648 start_va = 0x7ff8e6f80000 end_va = 0x7ff8e6fd0fff entry_point = 0x7ff8e6f80000 region_type = mapped_file name = "proximityservice.dll" filename = "\\Windows\\System32\\ProximityService.dll" (normalized: "c:\\windows\\system32\\proximityservice.dll") Region: id = 649 start_va = 0x7ff8e6fe0000 end_va = 0x7ff8e6febfff entry_point = 0x7ff8e6fe0000 region_type = mapped_file name = "fvecerts.dll" filename = "\\Windows\\System32\\fvecerts.dll" (normalized: "c:\\windows\\system32\\fvecerts.dll") Region: id = 650 start_va = 0x7ff8e6ff0000 end_va = 0x7ff8e70adfff entry_point = 0x7ff8e6ff0000 region_type = mapped_file name = "fveapi.dll" filename = "\\Windows\\System32\\fveapi.dll" (normalized: "c:\\windows\\system32\\fveapi.dll") Region: id = 651 start_va = 0x7ff8e70b0000 end_va = 0x7ff8e7145fff entry_point = 0x7ff8e70b0000 region_type = mapped_file name = "shsvcs.dll" filename = "\\Windows\\System32\\shsvcs.dll" (normalized: "c:\\windows\\system32\\shsvcs.dll") Region: id = 652 start_va = 0x7ff8e7160000 end_va = 0x7ff8e71c7fff entry_point = 0x7ff8e7160000 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 653 start_va = 0x7ff8e7280000 end_va = 0x7ff8e7299fff entry_point = 0x7ff8e7280000 region_type = mapped_file name = "dhcpcsvc.dll" filename = "\\Windows\\System32\\dhcpcsvc.dll" (normalized: "c:\\windows\\system32\\dhcpcsvc.dll") Region: id = 654 start_va = 0x7ff8e72a0000 end_va = 0x7ff8e72b5fff entry_point = 0x7ff8e72a0000 region_type = mapped_file name = "dhcpcsvc6.dll" filename = "\\Windows\\System32\\dhcpcsvc6.dll" (normalized: "c:\\windows\\system32\\dhcpcsvc6.dll") Region: id = 655 start_va = 0x7ff8e7400000 end_va = 0x7ff8e741bfff entry_point = 0x7ff8e7400000 region_type = mapped_file name = "samlib.dll" filename = "\\Windows\\System32\\samlib.dll" (normalized: "c:\\windows\\system32\\samlib.dll") Region: id = 656 start_va = 0x7ff8e7430000 end_va = 0x7ff8e7560fff entry_point = 0x7ff8e7430000 region_type = mapped_file name = "wintypes.dll" filename = "\\Windows\\System32\\WinTypes.dll" (normalized: "c:\\windows\\system32\\wintypes.dll") Region: id = 657 start_va = 0x7ff8e7570000 end_va = 0x7ff8e75adfff entry_point = 0x7ff8e7570000 region_type = mapped_file name = "usermgrproxy.dll" filename = "\\Windows\\System32\\UserMgrProxy.dll" (normalized: "c:\\windows\\system32\\usermgrproxy.dll") Region: id = 658 start_va = 0x7ff8e76f0000 end_va = 0x7ff8e7707fff entry_point = 0x7ff8e76f0000 region_type = mapped_file name = "samcli.dll" filename = "\\Windows\\System32\\samcli.dll" (normalized: "c:\\windows\\system32\\samcli.dll") Region: id = 659 start_va = 0x7ff8e7710000 end_va = 0x7ff8e77c3fff entry_point = 0x7ff8e7710000 region_type = mapped_file name = "usermgr.dll" filename = "\\Windows\\System32\\usermgr.dll" (normalized: "c:\\windows\\system32\\usermgr.dll") Region: id = 660 start_va = 0x7ff8e79b0000 end_va = 0x7ff8e7b32fff entry_point = 0x7ff8e79b0000 region_type = mapped_file name = "propsys.dll" filename = "\\Windows\\System32\\propsys.dll" (normalized: "c:\\windows\\system32\\propsys.dll") Region: id = 661 start_va = 0x7ff8e7c10000 end_va = 0x7ff8e7c51fff entry_point = 0x7ff8e7c10000 region_type = mapped_file name = "mstask.dll" filename = "\\Windows\\System32\\mstask.dll" (normalized: "c:\\windows\\system32\\mstask.dll") Region: id = 662 start_va = 0x7ff8e7c60000 end_va = 0x7ff8e7c6ffff entry_point = 0x7ff8e7c60000 region_type = mapped_file name = "timebrokerclient.dll" filename = "\\Windows\\System32\\TimeBrokerClient.dll" (normalized: "c:\\windows\\system32\\timebrokerclient.dll") Region: id = 663 start_va = 0x7ff8e7c70000 end_va = 0x7ff8e7c9dfff entry_point = 0x7ff8e7c70000 region_type = mapped_file name = "wptaskscheduler.dll" filename = "\\Windows\\System32\\WPTaskScheduler.dll" (normalized: "c:\\windows\\system32\\wptaskscheduler.dll") Region: id = 664 start_va = 0x7ff8e7ca0000 end_va = 0x7ff8e7cccfff entry_point = 0x7ff8e7ca0000 region_type = mapped_file name = "netjoin.dll" filename = "\\Windows\\System32\\netjoin.dll" (normalized: "c:\\windows\\system32\\netjoin.dll") Region: id = 665 start_va = 0x7ff8e7cd0000 end_va = 0x7ff8e7ce5fff entry_point = 0x7ff8e7cd0000 region_type = mapped_file name = "wkscli.dll" filename = "\\Windows\\System32\\wkscli.dll" (normalized: "c:\\windows\\system32\\wkscli.dll") Region: id = 666 start_va = 0x7ff8e7cf0000 end_va = 0x7ff8e7d06fff entry_point = 0x7ff8e7cf0000 region_type = mapped_file name = "sens.dll" filename = "\\Windows\\System32\\Sens.dll" (normalized: "c:\\windows\\system32\\sens.dll") Region: id = 667 start_va = 0x7ff8e7d10000 end_va = 0x7ff8e7d1ffff entry_point = 0x7ff8e7d10000 region_type = mapped_file name = "usermgrcli.dll" filename = "\\Windows\\System32\\usermgrcli.dll" (normalized: "c:\\windows\\system32\\usermgrcli.dll") Region: id = 668 start_va = 0x7ff8e7d20000 end_va = 0x7ff8e7d8dfff entry_point = 0x7ff8e7d20000 region_type = mapped_file name = "taskcomp.dll" filename = "\\Windows\\System32\\taskcomp.dll" (normalized: "c:\\windows\\system32\\taskcomp.dll") Region: id = 669 start_va = 0x7ff8e7d90000 end_va = 0x7ff8e7da0fff entry_point = 0x7ff8e7d90000 region_type = mapped_file name = "wmiclnt.dll" filename = "\\Windows\\System32\\wmiclnt.dll" (normalized: "c:\\windows\\system32\\wmiclnt.dll") Region: id = 670 start_va = 0x7ff8e7db0000 end_va = 0x7ff8e7dbcfff entry_point = 0x7ff8e7db0000 region_type = mapped_file name = "csystemeventsbrokerclient.dll" filename = "\\Windows\\System32\\CSystemEventsBrokerClient.dll" (normalized: "c:\\windows\\system32\\csystemeventsbrokerclient.dll") Region: id = 671 start_va = 0x7ff8e7dc0000 end_va = 0x7ff8e7dfffff entry_point = 0x7ff8e7dc0000 region_type = mapped_file name = "ubpm.dll" filename = "\\Windows\\System32\\ubpm.dll" (normalized: "c:\\windows\\system32\\ubpm.dll") Region: id = 672 start_va = 0x7ff8e7e00000 end_va = 0x7ff8e7efbfff entry_point = 0x7ff8e7e00000 region_type = mapped_file name = "schedsvc.dll" filename = "\\Windows\\System32\\schedsvc.dll" (normalized: "c:\\windows\\system32\\schedsvc.dll") Region: id = 673 start_va = 0x7ff8e7f00000 end_va = 0x7ff8e7f79fff entry_point = 0x7ff8e7f00000 region_type = mapped_file name = "es.dll" filename = "\\Windows\\System32\\es.dll" (normalized: "c:\\windows\\system32\\es.dll") Region: id = 674 start_va = 0x7ff8e7f80000 end_va = 0x7ff8e803ffff entry_point = 0x7ff8e7f80000 region_type = mapped_file name = "taskschd.dll" filename = "\\Windows\\System32\\taskschd.dll" (normalized: "c:\\windows\\system32\\taskschd.dll") Region: id = 675 start_va = 0x7ff8e8050000 end_va = 0x7ff8e8062fff entry_point = 0x7ff8e8050000 region_type = mapped_file name = "themeservice.dll" filename = "\\Windows\\System32\\themeservice.dll" (normalized: "c:\\windows\\system32\\themeservice.dll") Region: id = 676 start_va = 0x7ff8e8070000 end_va = 0x7ff8e808dfff entry_point = 0x7ff8e8070000 region_type = mapped_file name = "atl.dll" filename = "\\Windows\\System32\\atl.dll" (normalized: "c:\\windows\\system32\\atl.dll") Region: id = 677 start_va = 0x7ff8e8090000 end_va = 0x7ff8e80b6fff entry_point = 0x7ff8e8090000 region_type = mapped_file name = "profsvcext.dll" filename = "\\Windows\\System32\\profsvcext.dll" (normalized: "c:\\windows\\system32\\profsvcext.dll") Region: id = 678 start_va = 0x7ff8e80c0000 end_va = 0x7ff8e8114fff entry_point = 0x7ff8e80c0000 region_type = mapped_file name = "profsvc.dll" filename = "\\Windows\\System32\\profsvc.dll" (normalized: "c:\\windows\\system32\\profsvc.dll") Region: id = 679 start_va = 0x7ff8e81f0000 end_va = 0x7ff8e8254fff entry_point = 0x7ff8e81f0000 region_type = mapped_file name = "wevtapi.dll" filename = "\\Windows\\System32\\wevtapi.dll" (normalized: "c:\\windows\\system32\\wevtapi.dll") Region: id = 680 start_va = 0x7ff8e8460000 end_va = 0x7ff8e846afff entry_point = 0x7ff8e8460000 region_type = mapped_file name = "winnsi.dll" filename = "\\Windows\\System32\\winnsi.dll" (normalized: "c:\\windows\\system32\\winnsi.dll") Region: id = 681 start_va = 0x7ff8e8480000 end_va = 0x7ff8e84b7fff entry_point = 0x7ff8e8480000 region_type = mapped_file name = "iphlpapi.dll" filename = "\\Windows\\System32\\IPHLPAPI.DLL" (normalized: "c:\\windows\\system32\\iphlpapi.dll") Region: id = 682 start_va = 0x7ff8e84d0000 end_va = 0x7ff8e84d9fff entry_point = 0x7ff8e84d0000 region_type = mapped_file name = "dsrole.dll" filename = "\\Windows\\System32\\dsrole.dll" (normalized: "c:\\windows\\system32\\dsrole.dll") Region: id = 683 start_va = 0x7ff8e84e0000 end_va = 0x7ff8e84f7fff entry_point = 0x7ff8e84e0000 region_type = mapped_file name = "nlaapi.dll" filename = "\\Windows\\System32\\nlaapi.dll" (normalized: "c:\\windows\\system32\\nlaapi.dll") Region: id = 684 start_va = 0x7ff8e8500000 end_va = 0x7ff8e864cfff entry_point = 0x7ff8e8500000 region_type = mapped_file name = "gpsvc.dll" filename = "\\Windows\\System32\\gpsvc.dll" (normalized: "c:\\windows\\system32\\gpsvc.dll") Region: id = 685 start_va = 0x7ff8e8ad0000 end_va = 0x7ff8e8ae2fff entry_point = 0x7ff8e8ad0000 region_type = mapped_file name = "wtsapi32.dll" filename = "\\Windows\\System32\\wtsapi32.dll" (normalized: "c:\\windows\\system32\\wtsapi32.dll") Region: id = 686 start_va = 0x7ff8e9500000 end_va = 0x7ff8e9577fff entry_point = 0x7ff8e9500000 region_type = mapped_file name = "apphelp.dll" filename = "\\Windows\\System32\\apphelp.dll" (normalized: "c:\\windows\\system32\\apphelp.dll") Region: id = 687 start_va = 0x7ff8e9720000 end_va = 0x7ff8e9746fff entry_point = 0x7ff8e9720000 region_type = mapped_file name = "devobj.dll" filename = "\\Windows\\System32\\devobj.dll" (normalized: "c:\\windows\\system32\\devobj.dll") Region: id = 688 start_va = 0x7ff8e9780000 end_va = 0x7ff8e978bfff entry_point = 0x7ff8e9780000 region_type = mapped_file name = "sysntfy.dll" filename = "\\Windows\\System32\\sysntfy.dll" (normalized: "c:\\windows\\system32\\sysntfy.dll") Region: id = 689 start_va = 0x7ff8e9ae0000 end_va = 0x7ff8e9b11fff entry_point = 0x7ff8e9ae0000 region_type = mapped_file name = "fwbase.dll" filename = "\\Windows\\System32\\fwbase.dll" (normalized: "c:\\windows\\system32\\fwbase.dll") Region: id = 690 start_va = 0x7ff8e9b20000 end_va = 0x7ff8e9ba1fff entry_point = 0x7ff8e9b20000 region_type = mapped_file name = "firewallapi.dll" filename = "\\Windows\\System32\\FirewallAPI.dll" (normalized: "c:\\windows\\system32\\firewallapi.dll") Region: id = 691 start_va = 0x7ff8e9cd0000 end_va = 0x7ff8e9cf2fff entry_point = 0x7ff8e9cd0000 region_type = mapped_file name = "gpapi.dll" filename = "\\Windows\\System32\\gpapi.dll" (normalized: "c:\\windows\\system32\\gpapi.dll") Region: id = 692 start_va = 0x7ff8e9e00000 end_va = 0x7ff8e9e0bfff entry_point = 0x7ff8e9e00000 region_type = mapped_file name = "hid.dll" filename = "\\Windows\\System32\\hid.dll" (normalized: "c:\\windows\\system32\\hid.dll") Region: id = 693 start_va = 0x7ff8e9ec0000 end_va = 0x7ff8e9f07fff entry_point = 0x7ff8e9ec0000 region_type = mapped_file name = "authz.dll" filename = "\\Windows\\System32\\authz.dll" (normalized: "c:\\windows\\system32\\authz.dll") Region: id = 694 start_va = 0x7ff8ea000000 end_va = 0x7ff8ea00bfff entry_point = 0x7ff8ea000000 region_type = mapped_file name = "netutils.dll" filename = "\\Windows\\System32\\netutils.dll" (normalized: "c:\\windows\\system32\\netutils.dll") Region: id = 695 start_va = 0x7ff8ea010000 end_va = 0x7ff8ea035fff entry_point = 0x7ff8ea010000 region_type = mapped_file name = "srvcli.dll" filename = "\\Windows\\System32\\srvcli.dll" (normalized: "c:\\windows\\system32\\srvcli.dll") Region: id = 696 start_va = 0x7ff8ea0f0000 end_va = 0x7ff8ea121fff entry_point = 0x7ff8ea0f0000 region_type = mapped_file name = "ntmarta.dll" filename = "\\Windows\\System32\\ntmarta.dll" (normalized: "c:\\windows\\system32\\ntmarta.dll") Region: id = 697 start_va = 0x7ff8ea1d0000 end_va = 0x7ff8ea1d9fff entry_point = 0x7ff8ea1d0000 region_type = mapped_file name = "dpapi.dll" filename = "\\Windows\\System32\\dpapi.dll" (normalized: "c:\\windows\\system32\\dpapi.dll") Region: id = 698 start_va = 0x7ff8ea270000 end_va = 0x7ff8ea2a2fff entry_point = 0x7ff8ea270000 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\System32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll") Region: id = 699 start_va = 0x7ff8ea360000 end_va = 0x7ff8ea37efff entry_point = 0x7ff8ea360000 region_type = mapped_file name = "userenv.dll" filename = "\\Windows\\System32\\userenv.dll" (normalized: "c:\\windows\\system32\\userenv.dll") Region: id = 700 start_va = 0x7ff8ea380000 end_va = 0x7ff8ea3bdfff entry_point = 0x7ff8ea380000 region_type = mapped_file name = "logoncli.dll" filename = "\\Windows\\System32\\logoncli.dll" (normalized: "c:\\windows\\system32\\logoncli.dll") Region: id = 701 start_va = 0x7ff8ea3c0000 end_va = 0x7ff8ea467fff entry_point = 0x7ff8ea3c0000 region_type = mapped_file name = "dnsapi.dll" filename = "\\Windows\\System32\\dnsapi.dll" (normalized: "c:\\windows\\system32\\dnsapi.dll") Region: id = 702 start_va = 0x7ff8ea5c0000 end_va = 0x7ff8ea61cfff entry_point = 0x7ff8ea5c0000 region_type = mapped_file name = "mswsock.dll" filename = "\\Windows\\System32\\mswsock.dll" (normalized: "c:\\windows\\system32\\mswsock.dll") Region: id = 703 start_va = 0x7ff8ea620000 end_va = 0x7ff8ea636fff entry_point = 0x7ff8ea620000 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\System32\\cryptsp.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll") Region: id = 704 start_va = 0x7ff8ea790000 end_va = 0x7ff8ea79afff entry_point = 0x7ff8ea790000 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\System32\\cryptbase.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll") Region: id = 705 start_va = 0x7ff8ea7d0000 end_va = 0x7ff8ea7f0fff entry_point = 0x7ff8ea7d0000 region_type = mapped_file name = "joinutil.dll" filename = "\\Windows\\System32\\joinutil.dll" (normalized: "c:\\windows\\system32\\joinutil.dll") Region: id = 706 start_va = 0x7ff8ea820000 end_va = 0x7ff8ea877fff entry_point = 0x7ff8ea820000 region_type = mapped_file name = "winsta.dll" filename = "\\Windows\\System32\\winsta.dll" (normalized: "c:\\windows\\system32\\winsta.dll") Region: id = 707 start_va = 0x7ff8ea880000 end_va = 0x7ff8ea8b5fff entry_point = 0x7ff8ea880000 region_type = mapped_file name = "ntasn1.dll" filename = "\\Windows\\System32\\ntasn1.dll" (normalized: "c:\\windows\\system32\\ntasn1.dll") Region: id = 708 start_va = 0x7ff8ea8c0000 end_va = 0x7ff8ea8e5fff entry_point = 0x7ff8ea8c0000 region_type = mapped_file name = "ncrypt.dll" filename = "\\Windows\\System32\\ncrypt.dll" (normalized: "c:\\windows\\system32\\ncrypt.dll") Region: id = 709 start_va = 0x7ff8ea9d0000 end_va = 0x7ff8ea9fbfff entry_point = 0x7ff8ea9d0000 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\System32\\sspicli.dll" (normalized: "c:\\windows\\system32\\sspicli.dll") Region: id = 710 start_va = 0x7ff8eaba0000 end_va = 0x7ff8eabb9fff entry_point = 0x7ff8eaba0000 region_type = mapped_file name = "eventaggregation.dll" filename = "\\Windows\\System32\\EventAggregation.dll" (normalized: "c:\\windows\\system32\\eventaggregation.dll") Region: id = 711 start_va = 0x7ff8eabc0000 end_va = 0x7ff8eabc7fff entry_point = 0x7ff8eabc0000 region_type = mapped_file name = "dabapi.dll" filename = "\\Windows\\System32\\dabapi.dll" (normalized: "c:\\windows\\system32\\dabapi.dll") Region: id = 712 start_va = 0x7ff8eabd0000 end_va = 0x7ff8eabf7fff entry_point = 0x7ff8eabd0000 region_type = mapped_file name = "bcrypt.dll" filename = "\\Windows\\System32\\bcrypt.dll" (normalized: "c:\\windows\\system32\\bcrypt.dll") Region: id = 713 start_va = 0x7ff8eac00000 end_va = 0x7ff8eac6afff entry_point = 0x7ff8eac00000 region_type = mapped_file name = "bcryptprimitives.dll" filename = "\\Windows\\System32\\bcryptprimitives.dll" (normalized: "c:\\windows\\system32\\bcryptprimitives.dll") Region: id = 714 start_va = 0x7ff8eac70000 end_va = 0x7ff8ead07fff entry_point = 0x7ff8eac70000 region_type = mapped_file name = "sxs.dll" filename = "\\Windows\\System32\\sxs.dll" (normalized: "c:\\windows\\system32\\sxs.dll") Region: id = 715 start_va = 0x7ff8eadb0000 end_va = 0x7ff8eadc0fff entry_point = 0x7ff8eadb0000 region_type = mapped_file name = "msasn1.dll" filename = "\\Windows\\System32\\msasn1.dll" (normalized: "c:\\windows\\system32\\msasn1.dll") Region: id = 716 start_va = 0x7ff8eadd0000 end_va = 0x7ff8eae19fff entry_point = 0x7ff8eadd0000 region_type = mapped_file name = "powrprof.dll" filename = "\\Windows\\System32\\powrprof.dll" (normalized: "c:\\windows\\system32\\powrprof.dll") Region: id = 717 start_va = 0x7ff8eae20000 end_va = 0x7ff8eae2efff entry_point = 0x7ff8eae20000 region_type = mapped_file name = "kernel.appcore.dll" filename = "\\Windows\\System32\\kernel.appcore.dll" (normalized: "c:\\windows\\system32\\kernel.appcore.dll") Region: id = 718 start_va = 0x7ff8eae30000 end_va = 0x7ff8eae42fff entry_point = 0x7ff8eae30000 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\System32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll") Region: id = 719 start_va = 0x7ff8eae50000 end_va = 0x7ff8eaea3fff entry_point = 0x7ff8eae50000 region_type = mapped_file name = "wintrust.dll" filename = "\\Windows\\System32\\wintrust.dll" (normalized: "c:\\windows\\system32\\wintrust.dll") Region: id = 720 start_va = 0x7ff8eaf60000 end_va = 0x7ff8eafa3fff entry_point = 0x7ff8eaf60000 region_type = mapped_file name = "cfgmgr32.dll" filename = "\\Windows\\System32\\cfgmgr32.dll" (normalized: "c:\\windows\\system32\\cfgmgr32.dll") Region: id = 721 start_va = 0x7ff8eafb0000 end_va = 0x7ff8eb170fff entry_point = 0x7ff8eafb0000 region_type = mapped_file name = "crypt32.dll" filename = "\\Windows\\System32\\crypt32.dll" (normalized: "c:\\windows\\system32\\crypt32.dll") Region: id = 722 start_va = 0x7ff8eb180000 end_va = 0x7ff8eb7a7fff entry_point = 0x7ff8eb180000 region_type = mapped_file name = "windows.storage.dll" filename = "\\Windows\\System32\\windows.storage.dll" (normalized: "c:\\windows\\system32\\windows.storage.dll") Region: id = 723 start_va = 0x7ff8eb7b0000 end_va = 0x7ff8eb862fff entry_point = 0x7ff8eb7b0000 region_type = mapped_file name = "shcore.dll" filename = "\\Windows\\System32\\SHCore.dll" (normalized: "c:\\windows\\system32\\shcore.dll") Region: id = 724 start_va = 0x7ff8eb870000 end_va = 0x7ff8eba4cfff entry_point = 0x7ff8eb870000 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 725 start_va = 0x7ff8ebb30000 end_va = 0x7ff8ebbedfff entry_point = 0x7ff8ebb30000 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll") Region: id = 726 start_va = 0x7ff8ebbf0000 end_va = 0x7ff8ebdb4fff entry_point = 0x7ff8ebbf0000 region_type = mapped_file name = "setupapi.dll" filename = "\\Windows\\System32\\setupapi.dll" (normalized: "c:\\windows\\system32\\setupapi.dll") Region: id = 727 start_va = 0x7ff8ebdc0000 end_va = 0x7ff8ebf0dfff entry_point = 0x7ff8ebdc0000 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 728 start_va = 0x7ff8ec240000 end_va = 0x7ff8ec29afff entry_point = 0x7ff8ec240000 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 729 start_va = 0x7ff8ec2a0000 end_va = 0x7ff8ec2fafff entry_point = 0x7ff8ec2a0000 region_type = mapped_file name = "wldap32.dll" filename = "\\Windows\\System32\\Wldap32.dll" (normalized: "c:\\windows\\system32\\wldap32.dll") Region: id = 730 start_va = 0x7ff8ec300000 end_va = 0x7ff8ec440fff entry_point = 0x7ff8ec300000 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll") Region: id = 731 start_va = 0x7ff8ec450000 end_va = 0x7ff8ec575fff entry_point = 0x7ff8ec450000 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 732 start_va = 0x7ff8ec580000 end_va = 0x7ff8edaa4fff entry_point = 0x7ff8ec580000 region_type = mapped_file name = "shell32.dll" filename = "\\Windows\\System32\\shell32.dll" (normalized: "c:\\windows\\system32\\shell32.dll") Region: id = 733 start_va = 0x7ff8edb10000 end_va = 0x7ff8edbb4fff entry_point = 0x7ff8edb10000 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\System32\\clbcatq.dll" (normalized: "c:\\windows\\system32\\clbcatq.dll") Region: id = 734 start_va = 0x7ff8edbc0000 end_va = 0x7ff8edd44fff entry_point = 0x7ff8edbc0000 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 735 start_va = 0x7ff8edd60000 end_va = 0x7ff8edfdbfff entry_point = 0x7ff8edd60000 region_type = mapped_file name = "combase.dll" filename = "\\Windows\\System32\\combase.dll" (normalized: "c:\\windows\\system32\\combase.dll") Region: id = 736 start_va = 0x7ff8edfe0000 end_va = 0x7ff8ee030fff entry_point = 0x7ff8edfe0000 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\System32\\shlwapi.dll" (normalized: "c:\\windows\\system32\\shlwapi.dll") Region: id = 737 start_va = 0x7ff8ee040000 end_va = 0x7ff8ee0a8fff entry_point = 0x7ff8ee040000 region_type = mapped_file name = "ws2_32.dll" filename = "\\Windows\\System32\\ws2_32.dll" (normalized: "c:\\windows\\system32\\ws2_32.dll") Region: id = 738 start_va = 0x7ff8ee0b0000 end_va = 0x7ff8ee14cfff entry_point = 0x7ff8ee0b0000 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 739 start_va = 0x7ff8ee190000 end_va = 0x7ff8ee235fff entry_point = 0x7ff8ee190000 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 740 start_va = 0x7ff8ee250000 end_va = 0x7ff8ee257fff entry_point = 0x7ff8ee250000 region_type = mapped_file name = "nsi.dll" filename = "\\Windows\\System32\\nsi.dll" (normalized: "c:\\windows\\system32\\nsi.dll") Region: id = 741 start_va = 0x7ff8ee2d0000 end_va = 0x7ff8ee37cfff entry_point = 0x7ff8ee2d0000 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 742 start_va = 0x7ff8ee380000 end_va = 0x7ff8ee541fff entry_point = 0x7ff8ee380000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 743 start_va = 0xeaf45f0000 end_va = 0xeaf45f1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000eaf45f0000" filename = "" Region: id = 744 start_va = 0x7ff8e9fe0000 end_va = 0x7ff8e9ffbfff entry_point = 0x7ff8e9fe0000 region_type = mapped_file name = "mpr.dll" filename = "\\Windows\\System32\\mpr.dll" (normalized: "c:\\windows\\system32\\mpr.dll") Region: id = 747 start_va = 0xeaf6000000 end_va = 0xeaf607ffff entry_point = 0x0 region_type = private name = "private_0x000000eaf6000000" filename = "" Region: id = 748 start_va = 0xeaf9700000 end_va = 0xeaf97fffff entry_point = 0x0 region_type = private name = "private_0x000000eaf9700000" filename = "" Region: id = 749 start_va = 0x7ff672edc000 end_va = 0x7ff672eddfff entry_point = 0x0 region_type = private name = "private_0x00007ff672edc000" filename = "" Region: id = 750 start_va = 0x7ff672ee0000 end_va = 0x7ff672ee1fff entry_point = 0x0 region_type = private name = "private_0x00007ff672ee0000" filename = "" Region: id = 751 start_va = 0x7ff8d17d0000 end_va = 0x7ff8d18f1fff entry_point = 0x7ff8d17d0000 region_type = mapped_file name = "dosvc.dll" filename = "\\Windows\\System32\\dosvc.dll" (normalized: "c:\\windows\\system32\\dosvc.dll") Region: id = 752 start_va = 0x7ff8d6120000 end_va = 0x7ff8d616cfff entry_point = 0x7ff8d6120000 region_type = mapped_file name = "pdh.dll" filename = "\\Windows\\System32\\pdh.dll" (normalized: "c:\\windows\\system32\\pdh.dll") Region: id = 753 start_va = 0x7ff8e3a50000 end_va = 0x7ff8e3a59fff entry_point = 0x7ff8e3a50000 region_type = mapped_file name = "version.dll" filename = "\\Windows\\System32\\version.dll" (normalized: "c:\\windows\\system32\\version.dll") Region: id = 754 start_va = 0x7ff8e8260000 end_va = 0x7ff8e826afff entry_point = 0x7ff8e8260000 region_type = mapped_file name = "ktmw32.dll" filename = "\\Windows\\System32\\ktmw32.dll" (normalized: "c:\\windows\\system32\\ktmw32.dll") Region: id = 755 start_va = 0xeaf45f0000 end_va = 0xeaf45f0fff entry_point = 0xeaf45f0000 region_type = mapped_file name = "dosvc.dll.mui" filename = "\\Windows\\System32\\en-US\\dosvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\dosvc.dll.mui") Region: id = 756 start_va = 0xeaf6380000 end_va = 0xeaf63fffff entry_point = 0x0 region_type = private name = "private_0x000000eaf6380000" filename = "" Region: id = 757 start_va = 0xeaf8f00000 end_va = 0xeaf8ffffff entry_point = 0x0 region_type = private name = "private_0x000000eaf8f00000" filename = "" Region: id = 758 start_va = 0xeaf9000000 end_va = 0xeaf90fffff entry_point = 0x0 region_type = private name = "private_0x000000eaf9000000" filename = "" Region: id = 759 start_va = 0xeaf9100000 end_va = 0xeaf91fffff entry_point = 0x0 region_type = private name = "private_0x000000eaf9100000" filename = "" Region: id = 760 start_va = 0xeaf9200000 end_va = 0xeaf92fffff entry_point = 0x0 region_type = private name = "private_0x000000eaf9200000" filename = "" Region: id = 761 start_va = 0xeaf9300000 end_va = 0xeaf93fffff entry_point = 0x0 region_type = private name = "private_0x000000eaf9300000" filename = "" Region: id = 762 start_va = 0xeaf9600000 end_va = 0xeaf96fffff entry_point = 0x0 region_type = private name = "private_0x000000eaf9600000" filename = "" Region: id = 763 start_va = 0xeaf9800000 end_va = 0xeaf98fffff entry_point = 0x0 region_type = private name = "private_0x000000eaf9800000" filename = "" Region: id = 764 start_va = 0xeaf9900000 end_va = 0xeaf99fffff entry_point = 0x0 region_type = private name = "private_0x000000eaf9900000" filename = "" Region: id = 765 start_va = 0xeaf9a00000 end_va = 0xeaf9afffff entry_point = 0x0 region_type = private name = "private_0x000000eaf9a00000" filename = "" Region: id = 766 start_va = 0xeaf9b00000 end_va = 0xeaf9bfffff entry_point = 0x0 region_type = private name = "private_0x000000eaf9b00000" filename = "" Region: id = 767 start_va = 0xeaf9c00000 end_va = 0xeaf9cfffff entry_point = 0x0 region_type = private name = "private_0x000000eaf9c00000" filename = "" Region: id = 768 start_va = 0x7ff672ed2000 end_va = 0x7ff672ed3fff entry_point = 0x0 region_type = private name = "private_0x00007ff672ed2000" filename = "" Region: id = 769 start_va = 0x7ff672ed4000 end_va = 0x7ff672ed5fff entry_point = 0x0 region_type = private name = "private_0x00007ff672ed4000" filename = "" Region: id = 770 start_va = 0x7ff672ed6000 end_va = 0x7ff672ed7fff entry_point = 0x0 region_type = private name = "private_0x00007ff672ed6000" filename = "" Region: id = 771 start_va = 0x7ff672ed8000 end_va = 0x7ff672ed9fff entry_point = 0x0 region_type = private name = "private_0x00007ff672ed8000" filename = "" Region: id = 772 start_va = 0x7ff672eda000 end_va = 0x7ff672edbfff entry_point = 0x0 region_type = private name = "private_0x00007ff672eda000" filename = "" Region: id = 773 start_va = 0x7ff672ede000 end_va = 0x7ff672edffff entry_point = 0x0 region_type = private name = "private_0x00007ff672ede000" filename = "" Region: id = 774 start_va = 0x7ff672ee6000 end_va = 0x7ff672ee7fff entry_point = 0x0 region_type = private name = "private_0x00007ff672ee6000" filename = "" Region: id = 775 start_va = 0x7ff672ee8000 end_va = 0x7ff672ee9fff entry_point = 0x0 region_type = private name = "private_0x00007ff672ee8000" filename = "" Region: id = 776 start_va = 0x7ff672eea000 end_va = 0x7ff672eebfff entry_point = 0x0 region_type = private name = "private_0x00007ff672eea000" filename = "" Region: id = 777 start_va = 0x7ff672eec000 end_va = 0x7ff672eedfff entry_point = 0x0 region_type = private name = "private_0x00007ff672eec000" filename = "" Region: id = 778 start_va = 0x7ff672eee000 end_va = 0x7ff672eeffff entry_point = 0x0 region_type = private name = "private_0x00007ff672eee000" filename = "" Region: id = 779 start_va = 0x7ff8d0ca0000 end_va = 0x7ff8d0f4ffff entry_point = 0x7ff8d0ca0000 region_type = mapped_file name = "netshell.dll" filename = "\\Windows\\System32\\netshell.dll" (normalized: "c:\\windows\\system32\\netshell.dll") Region: id = 1268 start_va = 0xeaf9d00000 end_va = 0xeaf9dfffff entry_point = 0x0 region_type = private name = "private_0x000000eaf9d00000" filename = "" Region: id = 1269 start_va = 0xeaf9e00000 end_va = 0xeaf9efffff entry_point = 0x0 region_type = private name = "private_0x000000eaf9e00000" filename = "" Region: id = 1270 start_va = 0xeaf9f00000 end_va = 0xeaf9ffffff entry_point = 0x0 region_type = private name = "private_0x000000eaf9f00000" filename = "" Region: id = 1271 start_va = 0xeafa000000 end_va = 0xeafa0fffff entry_point = 0x0 region_type = private name = "private_0x000000eafa000000" filename = "" Region: id = 1272 start_va = 0xeafa100000 end_va = 0xeafa1fffff entry_point = 0x0 region_type = private name = "private_0x000000eafa100000" filename = "" Region: id = 1273 start_va = 0xeafa200000 end_va = 0xeafa2fffff entry_point = 0x0 region_type = private name = "private_0x000000eafa200000" filename = "" Region: id = 1274 start_va = 0xeafa300000 end_va = 0xeafa3fffff entry_point = 0x0 region_type = private name = "private_0x000000eafa300000" filename = "" Region: id = 1275 start_va = 0xeafa400000 end_va = 0xeafa4fffff entry_point = 0x0 region_type = private name = "private_0x000000eafa400000" filename = "" Region: id = 1276 start_va = 0x7ff672ec4000 end_va = 0x7ff672ec5fff entry_point = 0x0 region_type = private name = "private_0x00007ff672ec4000" filename = "" Region: id = 1277 start_va = 0x7ff672ec6000 end_va = 0x7ff672ec7fff entry_point = 0x0 region_type = private name = "private_0x00007ff672ec6000" filename = "" Region: id = 1278 start_va = 0x7ff672ec8000 end_va = 0x7ff672ec9fff entry_point = 0x0 region_type = private name = "private_0x00007ff672ec8000" filename = "" Region: id = 1279 start_va = 0x7ff672eca000 end_va = 0x7ff672ecbfff entry_point = 0x0 region_type = private name = "private_0x00007ff672eca000" filename = "" Region: id = 1280 start_va = 0x7ff672ecc000 end_va = 0x7ff672ecdfff entry_point = 0x0 region_type = private name = "private_0x00007ff672ecc000" filename = "" Region: id = 1281 start_va = 0x7ff672ece000 end_va = 0x7ff672ecffff entry_point = 0x0 region_type = private name = "private_0x00007ff672ece000" filename = "" Region: id = 1282 start_va = 0x7ff672ed0000 end_va = 0x7ff672ed1fff entry_point = 0x0 region_type = private name = "private_0x00007ff672ed0000" filename = "" Region: id = 1283 start_va = 0x7ff8d08e0000 end_va = 0x7ff8d0b09fff entry_point = 0x7ff8d08e0000 region_type = mapped_file name = "wuaueng.dll" filename = "\\Windows\\System32\\wuaueng.dll" (normalized: "c:\\windows\\system32\\wuaueng.dll") Region: id = 1284 start_va = 0x7ff8db900000 end_va = 0x7ff8db908fff entry_point = 0x7ff8db900000 region_type = mapped_file name = "tschannel.dll" filename = "\\Windows\\System32\\TSChannel.dll" (normalized: "c:\\windows\\system32\\tschannel.dll") Region: id = 1285 start_va = 0x7ff8e1940000 end_va = 0x7ff8e1c21fff entry_point = 0x7ff8e1940000 region_type = mapped_file name = "esent.dll" filename = "\\Windows\\System32\\esent.dll" (normalized: "c:\\windows\\system32\\esent.dll") Region: id = 1820 start_va = 0xeaf8f00000 end_va = 0xeaf8ffffff entry_point = 0x0 region_type = private name = "private_0x000000eaf8f00000" filename = "" Region: id = 1821 start_va = 0x7ff8d61e0000 end_va = 0x7ff8d61effff entry_point = 0x7ff8d61e0000 region_type = mapped_file name = "wups.dll" filename = "\\Windows\\System32\\wups.dll" (normalized: "c:\\windows\\system32\\wups.dll") Region: id = 1822 start_va = 0xeaf45a0000 end_va = 0xeaf45a1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000eaf45a0000" filename = "" Region: id = 1823 start_va = 0xeaf45b0000 end_va = 0xeaf45b1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000eaf45b0000" filename = "" Region: id = 1824 start_va = 0x7ff8d0880000 end_va = 0x7ff8d08d7fff entry_point = 0x7ff8d0880000 region_type = mapped_file name = "newdev.dll" filename = "\\Windows\\System32\\newdev.dll" (normalized: "c:\\windows\\system32\\newdev.dll") Region: id = 1825 start_va = 0x7ff8d16d0000 end_va = 0x7ff8d1730fff entry_point = 0x7ff8d16d0000 region_type = mapped_file name = "wuuhext.dll" filename = "\\Windows\\System32\\wuuhext.dll" (normalized: "c:\\windows\\system32\\wuuhext.dll") Region: id = 1826 start_va = 0x7ff8d1920000 end_va = 0x7ff8d1932fff entry_point = 0x7ff8d1920000 region_type = mapped_file name = "devrtl.dll" filename = "\\Windows\\System32\\devrtl.dll" (normalized: "c:\\windows\\system32\\devrtl.dll") Region: id = 1827 start_va = 0x7ff8da840000 end_va = 0x7ff8da8c3fff entry_point = 0x7ff8da840000 region_type = mapped_file name = "winspool.drv" filename = "\\Windows\\System32\\winspool.drv" (normalized: "c:\\windows\\system32\\winspool.drv") Region: id = 1828 start_va = 0x7ff8e5a30000 end_va = 0x7ff8e5d6cfff entry_point = 0x7ff8e5a30000 region_type = mapped_file name = "msi.dll" filename = "\\Windows\\System32\\msi.dll" (normalized: "c:\\windows\\system32\\msi.dll") Region: id = 1829 start_va = 0x7ff8e9680000 end_va = 0x7ff8e9715fff entry_point = 0x7ff8e9680000 region_type = mapped_file name = "uxtheme.dll" filename = "\\Windows\\System32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll") Region: id = 1830 start_va = 0xea80000000 end_va = 0xea83ffffff entry_point = 0x0 region_type = private name = "private_0x000000ea80000000" filename = "" Region: id = 1831 start_va = 0xeaf45c0000 end_va = 0xeaf45c6fff entry_point = 0xeaf45c0000 region_type = mapped_file name = "newdev.dll.mui" filename = "\\Windows\\System32\\en-US\\newdev.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\newdev.dll.mui") Region: id = 1832 start_va = 0xeaf5040000 end_va = 0xeaf5040fff entry_point = 0x0 region_type = private name = "private_0x000000eaf5040000" filename = "" Region: id = 1833 start_va = 0xeaf5050000 end_va = 0xeaf5050fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000eaf5050000" filename = "" Region: id = 1834 start_va = 0xeaf5060000 end_va = 0xeaf5067fff entry_point = 0x0 region_type = private name = "private_0x000000eaf5060000" filename = "" Region: id = 1835 start_va = 0xeaf5e90000 end_va = 0xeaf5ed0fff entry_point = 0x0 region_type = private name = "private_0x000000eaf5e90000" filename = "" Region: id = 1836 start_va = 0xeaf5ee0000 end_va = 0xeaf5eeffff entry_point = 0x0 region_type = private name = "private_0x000000eaf5ee0000" filename = "" Region: id = 1837 start_va = 0xeaf5ef0000 end_va = 0xeaf5efffff entry_point = 0x0 region_type = private name = "private_0x000000eaf5ef0000" filename = "" Region: id = 1838 start_va = 0xeaf6400000 end_va = 0xeaf6400fff entry_point = 0x0 region_type = private name = "private_0x000000eaf6400000" filename = "" Region: id = 1839 start_va = 0xeaf6410000 end_va = 0xeaf6410fff entry_point = 0x0 region_type = private name = "private_0x000000eaf6410000" filename = "" Region: id = 1840 start_va = 0xeaf6420000 end_va = 0xeaf6423fff entry_point = 0x0 region_type = private name = "private_0x000000eaf6420000" filename = "" Region: id = 1841 start_va = 0xeaf6630000 end_va = 0xeaf663ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000eaf6630000" filename = "" Region: id = 1842 start_va = 0xeaf6640000 end_va = 0xeaf664ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000eaf6640000" filename = "" Region: id = 1843 start_va = 0xeaf6650000 end_va = 0xeaf665ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000eaf6650000" filename = "" Region: id = 1844 start_va = 0xeaf6660000 end_va = 0xeaf666ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000eaf6660000" filename = "" Region: id = 1845 start_va = 0xeaf6670000 end_va = 0xeaf667ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000eaf6670000" filename = "" Region: id = 1846 start_va = 0xeaf6680000 end_va = 0xeaf668ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000eaf6680000" filename = "" Region: id = 1847 start_va = 0xeaf6710000 end_va = 0xeaf675cfff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000eaf6710000" filename = "" Region: id = 1848 start_va = 0xeaf6760000 end_va = 0xeaf6761fff entry_point = 0x0 region_type = private name = "private_0x000000eaf6760000" filename = "" Region: id = 1849 start_va = 0xeaf6880000 end_va = 0xeaf68fffff entry_point = 0x0 region_type = private name = "private_0x000000eaf6880000" filename = "" Region: id = 1850 start_va = 0xeaf6d60000 end_va = 0xeaf6ddffff entry_point = 0x0 region_type = private name = "private_0x000000eaf6d60000" filename = "" Region: id = 1851 start_va = 0xeaf75f0000 end_va = 0xeaf75f0fff entry_point = 0x0 region_type = private name = "private_0x000000eaf75f0000" filename = "" Region: id = 1852 start_va = 0xeaf8180000 end_va = 0xeaf818ffff entry_point = 0x0 region_type = private name = "private_0x000000eaf8180000" filename = "" Region: id = 1853 start_va = 0xeaf81a0000 end_va = 0xeaf81ecfff entry_point = 0x0 region_type = private name = "private_0x000000eaf81a0000" filename = "" Region: id = 1854 start_va = 0xeaf81f0000 end_va = 0xeaf81f7fff entry_point = 0x0 region_type = private name = "private_0x000000eaf81f0000" filename = "" Region: id = 1855 start_va = 0xeaf8680000 end_va = 0xeaf868ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000eaf8680000" filename = "" Region: id = 1856 start_va = 0xeaf8690000 end_va = 0xeaf869ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000eaf8690000" filename = "" Region: id = 1857 start_va = 0xeaf86a0000 end_va = 0xeaf86affff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000eaf86a0000" filename = "" Region: id = 1858 start_va = 0xeaf86b0000 end_va = 0xeaf86bffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000eaf86b0000" filename = "" Region: id = 1859 start_va = 0xeaf86c0000 end_va = 0xeaf86cffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000eaf86c0000" filename = "" Region: id = 1860 start_va = 0xeaf86d0000 end_va = 0xeaf86dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000eaf86d0000" filename = "" Region: id = 1861 start_va = 0xeaf86e0000 end_va = 0xeaf870ffff entry_point = 0x0 region_type = private name = "private_0x000000eaf86e0000" filename = "" Region: id = 1862 start_va = 0xeaf8710000 end_va = 0xeaf871ffff entry_point = 0xeaf8710000 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 1863 start_va = 0xeaf8720000 end_va = 0xeaf872ffff entry_point = 0xeaf8720000 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 1864 start_va = 0xeaf8730000 end_va = 0xeaf873ffff entry_point = 0xeaf8730000 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 1865 start_va = 0xeaf8740000 end_va = 0xeaf874ffff entry_point = 0xeaf8740000 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 1866 start_va = 0xeaf8750000 end_va = 0xeaf875ffff entry_point = 0xeaf8750000 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 1867 start_va = 0xeaf8760000 end_va = 0xeaf876ffff entry_point = 0xeaf8760000 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 1868 start_va = 0xeaf8780000 end_va = 0xeaf878ffff entry_point = 0xeaf8780000 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 1869 start_va = 0xeaf8790000 end_va = 0xeaf879ffff entry_point = 0xeaf8790000 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 1870 start_va = 0xeaf87a0000 end_va = 0xeaf87affff entry_point = 0xeaf87a0000 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 1871 start_va = 0xeaf87b0000 end_va = 0xeaf87bffff entry_point = 0xeaf87b0000 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 1872 start_va = 0xeaf87c0000 end_va = 0xeaf87cffff entry_point = 0xeaf87c0000 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 1873 start_va = 0xeaf87d0000 end_va = 0xeaf87dffff entry_point = 0xeaf87d0000 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 1874 start_va = 0xeaf87e0000 end_va = 0xeaf87effff entry_point = 0xeaf87e0000 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 1875 start_va = 0xeaf87f0000 end_va = 0xeaf87fffff entry_point = 0xeaf87f0000 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 1876 start_va = 0xeaf8800000 end_va = 0xeaf880ffff entry_point = 0xeaf8800000 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 1877 start_va = 0xeaf8c20000 end_va = 0xeaf8c2ffff entry_point = 0xeaf8c20000 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 1878 start_va = 0xeaf8c30000 end_va = 0xeaf8caffff entry_point = 0x0 region_type = private name = "private_0x000000eaf8c30000" filename = "" Region: id = 1879 start_va = 0xeaf8cb0000 end_va = 0xeaf8cbffff entry_point = 0x0 region_type = private name = "private_0x000000eaf8cb0000" filename = "" Region: id = 1880 start_va = 0xeaf8cc0000 end_va = 0xeaf8ccffff entry_point = 0x0 region_type = private name = "private_0x000000eaf8cc0000" filename = "" Region: id = 1881 start_va = 0xeaf8cd0000 end_va = 0xeaf8cdffff entry_point = 0x0 region_type = private name = "private_0x000000eaf8cd0000" filename = "" Region: id = 1882 start_va = 0xeaf8ce0000 end_va = 0xeaf8ceffff entry_point = 0x0 region_type = private name = "private_0x000000eaf8ce0000" filename = "" Region: id = 1883 start_va = 0xeaf8cf0000 end_va = 0xeaf8cfffff entry_point = 0x0 region_type = private name = "private_0x000000eaf8cf0000" filename = "" Region: id = 1884 start_va = 0xeaf9000000 end_va = 0xeaf90fffff entry_point = 0x0 region_type = private name = "private_0x000000eaf9000000" filename = "" Region: id = 1885 start_va = 0xeaf9100000 end_va = 0xeaf9107fff entry_point = 0x0 region_type = private name = "private_0x000000eaf9100000" filename = "" Region: id = 1886 start_va = 0xeaf9110000 end_va = 0xeaf911ffff entry_point = 0x0 region_type = private name = "private_0x000000eaf9110000" filename = "" Region: id = 1887 start_va = 0xeaf9160000 end_va = 0xeaf9166fff entry_point = 0x0 region_type = private name = "private_0x000000eaf9160000" filename = "" Region: id = 1888 start_va = 0xeaf9200000 end_va = 0xeaf92fffff entry_point = 0x0 region_type = private name = "private_0x000000eaf9200000" filename = "" Region: id = 1889 start_va = 0xeaf9300000 end_va = 0xeaf93fffff entry_point = 0x0 region_type = private name = "private_0x000000eaf9300000" filename = "" Region: id = 1890 start_va = 0xeaf9600000 end_va = 0xeaf96fffff entry_point = 0x0 region_type = private name = "private_0x000000eaf9600000" filename = "" Region: id = 1891 start_va = 0xeaf9800000 end_va = 0xeaf98fffff entry_point = 0x0 region_type = private name = "private_0x000000eaf9800000" filename = "" Region: id = 1892 start_va = 0xeafa500000 end_va = 0xeafb4fffff entry_point = 0x0 region_type = private name = "private_0x000000eafa500000" filename = "" Region: id = 1893 start_va = 0xeafb500000 end_va = 0xeaff4fffff entry_point = 0x0 region_type = private name = "private_0x000000eafb500000" filename = "" Region: id = 1894 start_va = 0xeaff500000 end_va = 0xeaff5fffff entry_point = 0x0 region_type = private name = "private_0x000000eaff500000" filename = "" Region: id = 1895 start_va = 0x7ff672ee8000 end_va = 0x7ff672ee9fff entry_point = 0x0 region_type = private name = "private_0x00007ff672ee8000" filename = "" Region: id = 1896 start_va = 0x7ff672eea000 end_va = 0x7ff672eebfff entry_point = 0x0 region_type = private name = "private_0x00007ff672eea000" filename = "" Region: id = 1897 start_va = 0x7ff672eec000 end_va = 0x7ff672eedfff entry_point = 0x0 region_type = private name = "private_0x00007ff672eec000" filename = "" Region: id = 1898 start_va = 0x7ff8e1c70000 end_va = 0x7ff8e1ee6fff entry_point = 0x7ff8e1c70000 region_type = mapped_file name = "msxml6.dll" filename = "\\Windows\\System32\\msxml6.dll" (normalized: "c:\\windows\\system32\\msxml6.dll") Region: id = 3137 start_va = 0xeaf45f0000 end_va = 0xeaf45fffff entry_point = 0xeaf45f0000 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 3138 start_va = 0xeaf5890000 end_va = 0xeaf589ffff entry_point = 0xeaf5890000 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 3139 start_va = 0xeaf58a0000 end_va = 0xeaf58affff entry_point = 0xeaf58a0000 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 3140 start_va = 0xeaf58b0000 end_va = 0xeaf58bffff entry_point = 0xeaf58b0000 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 3141 start_va = 0xeaf58c0000 end_va = 0xeaf58cffff entry_point = 0xeaf58c0000 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 3142 start_va = 0xeaf58d0000 end_va = 0xeaf58dffff entry_point = 0xeaf58d0000 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 3143 start_va = 0xeaf58e0000 end_va = 0xeaf58effff entry_point = 0xeaf58e0000 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 3144 start_va = 0xeaf58f0000 end_va = 0xeaf58fffff entry_point = 0xeaf58f0000 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 3145 start_va = 0xeaf5900000 end_va = 0xeaf590ffff entry_point = 0xeaf5900000 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 3146 start_va = 0xeaf5910000 end_va = 0xeaf591ffff entry_point = 0xeaf5910000 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 3147 start_va = 0xeaf5920000 end_va = 0xeaf592ffff entry_point = 0xeaf5920000 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 3148 start_va = 0xeaf5930000 end_va = 0xeaf593ffff entry_point = 0xeaf5930000 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 3149 start_va = 0xeaf5940000 end_va = 0xeaf594ffff entry_point = 0xeaf5940000 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 3150 start_va = 0xeaf5950000 end_va = 0xeaf595ffff entry_point = 0xeaf5950000 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 3151 start_va = 0xeaf5960000 end_va = 0xeaf596ffff entry_point = 0xeaf5960000 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 3152 start_va = 0xeaf5970000 end_va = 0xeaf597ffff entry_point = 0xeaf5970000 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 3153 start_va = 0xeaf5980000 end_va = 0xeaf598ffff entry_point = 0xeaf5980000 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 3154 start_va = 0xeaf5d90000 end_va = 0xeaf5d9ffff entry_point = 0xeaf5d90000 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 3155 start_va = 0xeaf5da0000 end_va = 0xeaf5daffff entry_point = 0xeaf5da0000 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 3156 start_va = 0xeaf5db0000 end_va = 0xeaf5dbffff entry_point = 0xeaf5db0000 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 3157 start_va = 0xeaf5dc0000 end_va = 0xeaf5dcffff entry_point = 0xeaf5dc0000 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 3158 start_va = 0xeaf5dd0000 end_va = 0xeaf5ddffff entry_point = 0xeaf5dd0000 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 3159 start_va = 0xeaf5de0000 end_va = 0xeaf5deffff entry_point = 0xeaf5de0000 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 3160 start_va = 0xeaf5df0000 end_va = 0xeaf5dfffff entry_point = 0xeaf5df0000 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 3161 start_va = 0xeaf5e00000 end_va = 0xeaf5e0ffff entry_point = 0xeaf5e00000 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 3162 start_va = 0xeaf5e10000 end_va = 0xeaf5e1ffff entry_point = 0xeaf5e10000 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 3163 start_va = 0xeaf5e20000 end_va = 0xeaf5e2ffff entry_point = 0xeaf5e20000 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 3164 start_va = 0xeaf5e30000 end_va = 0xeaf5e3ffff entry_point = 0xeaf5e30000 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 3165 start_va = 0xeaf5e40000 end_va = 0xeaf5e4ffff entry_point = 0xeaf5e40000 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 3166 start_va = 0xeaf5e50000 end_va = 0xeaf5e5ffff entry_point = 0xeaf5e50000 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 3167 start_va = 0xeaf5e60000 end_va = 0xeaf5e6ffff entry_point = 0xeaf5e60000 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 3168 start_va = 0xeaf5e70000 end_va = 0xeaf5e7ffff entry_point = 0xeaf5e70000 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 3169 start_va = 0xeaf5e80000 end_va = 0xeaf5e8ffff entry_point = 0xeaf5e80000 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 3170 start_va = 0xeaf6280000 end_va = 0xeaf628ffff entry_point = 0xeaf6280000 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 3171 start_va = 0xeaf6290000 end_va = 0xeaf629ffff entry_point = 0xeaf6290000 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 3172 start_va = 0xeaf62a0000 end_va = 0xeaf62affff entry_point = 0xeaf62a0000 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 3173 start_va = 0xeaf62b0000 end_va = 0xeaf62bffff entry_point = 0xeaf62b0000 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 3174 start_va = 0xeaf62c0000 end_va = 0xeaf62cffff entry_point = 0xeaf62c0000 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 3175 start_va = 0xeaf6f00000 end_va = 0xeaf6ffffff entry_point = 0x0 region_type = private name = "private_0x000000eaf6f00000" filename = "" Region: id = 3176 start_va = 0xeaf9120000 end_va = 0xeaf9120fff entry_point = 0xeaf9120000 region_type = mapped_file name = "msxml6r.dll" filename = "\\Windows\\System32\\msxml6r.dll" (normalized: "c:\\windows\\system32\\msxml6r.dll") Region: id = 3177 start_va = 0xeaf9130000 end_va = 0xeaf9133fff entry_point = 0xeaf9130000 region_type = mapped_file name = "wuaueng.dll.mui" filename = "\\Windows\\System32\\en-US\\wuaueng.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\wuaueng.dll.mui") Region: id = 3178 start_va = 0xeaff600000 end_va = 0xeaff6fffff entry_point = 0x0 region_type = private name = "private_0x000000eaff600000" filename = "" Region: id = 3179 start_va = 0xeaff7a0000 end_va = 0xeaff7a6fff entry_point = 0x0 region_type = private name = "private_0x000000eaff7a0000" filename = "" Region: id = 3180 start_va = 0xeaff800000 end_va = 0xeaff8fffff entry_point = 0x0 region_type = private name = "private_0x000000eaff800000" filename = "" Region: id = 3181 start_va = 0x7ff672ee6000 end_va = 0x7ff672ee7fff entry_point = 0x0 region_type = private name = "private_0x00007ff672ee6000" filename = "" Region: id = 3182 start_va = 0x7ff8e52c0000 end_va = 0x7ff8e52e7fff entry_point = 0x7ff8e52c0000 region_type = mapped_file name = "dssenh.dll" filename = "\\Windows\\System32\\dssenh.dll" (normalized: "c:\\windows\\system32\\dssenh.dll") Thread: id = 16 os_tid = 0xe50 Thread: id = 17 os_tid = 0xe4c Thread: id = 18 os_tid = 0xe48 Thread: id = 19 os_tid = 0xe44 Thread: id = 20 os_tid = 0xe40 Thread: id = 21 os_tid = 0xe3c Thread: id = 22 os_tid = 0xe38 Thread: id = 23 os_tid = 0xe34 Thread: id = 24 os_tid = 0xe30 Thread: id = 25 os_tid = 0xe2c Thread: id = 26 os_tid = 0xe28 Thread: id = 27 os_tid = 0xc0c Thread: id = 28 os_tid = 0xc08 Thread: id = 29 os_tid = 0x3a8 Thread: id = 30 os_tid = 0x968 Thread: id = 31 os_tid = 0x714 Thread: id = 32 os_tid = 0xa04 Thread: id = 33 os_tid = 0xa80 Thread: id = 34 os_tid = 0xa74 Thread: id = 35 os_tid = 0xa54 Thread: id = 36 os_tid = 0x14c Thread: id = 37 os_tid = 0x760 Thread: id = 38 os_tid = 0x89c Thread: id = 39 os_tid = 0x874 Thread: id = 40 os_tid = 0x870 Thread: id = 41 os_tid = 0x7e0 Thread: id = 42 os_tid = 0x7bc Thread: id = 43 os_tid = 0x788 Thread: id = 44 os_tid = 0x764 Thread: id = 45 os_tid = 0x75c Thread: id = 46 os_tid = 0x74c Thread: id = 47 os_tid = 0x6f8 Thread: id = 48 os_tid = 0x6f0 Thread: id = 49 os_tid = 0x6e0 Thread: id = 50 os_tid = 0x6d8 Thread: id = 51 os_tid = 0x6d0 Thread: id = 52 os_tid = 0x6c0 Thread: id = 53 os_tid = 0x684 Thread: id = 54 os_tid = 0x678 Thread: id = 55 os_tid = 0x66c Thread: id = 56 os_tid = 0x660 Thread: id = 57 os_tid = 0x64c Thread: id = 58 os_tid = 0x648 Thread: id = 59 os_tid = 0x60c Thread: id = 60 os_tid = 0x5f4 Thread: id = 61 os_tid = 0x5c4 Thread: id = 62 os_tid = 0x598 Thread: id = 63 os_tid = 0x528 Thread: id = 64 os_tid = 0x510 Thread: id = 65 os_tid = 0x280 Thread: id = 66 os_tid = 0x498 Thread: id = 67 os_tid = 0x494 Thread: id = 68 os_tid = 0x100 Thread: id = 69 os_tid = 0x138 Thread: id = 70 os_tid = 0x1e4 Thread: id = 71 os_tid = 0x168 Thread: id = 72 os_tid = 0x12c Thread: id = 73 os_tid = 0x130 Thread: id = 74 os_tid = 0x124 Thread: id = 75 os_tid = 0xfc Thread: id = 76 os_tid = 0xf8 Thread: id = 77 os_tid = 0x3f0 Thread: id = 78 os_tid = 0x3d8 Thread: id = 79 os_tid = 0x3d4 Thread: id = 80 os_tid = 0x3cc Thread: id = 81 os_tid = 0x3c0 Thread: id = 82 os_tid = 0x39c Thread: id = 83 os_tid = 0x334 Thread: id = 84 os_tid = 0xe88 Thread: id = 85 os_tid = 0xe8c Thread: id = 86 os_tid = 0xe98 Thread: id = 87 os_tid = 0xf34 Thread: id = 88 os_tid = 0xf38 Thread: id = 89 os_tid = 0xef0 Thread: id = 90 os_tid = 0xf4c Thread: id = 91 os_tid = 0xf50 Thread: id = 92 os_tid = 0xf54 Thread: id = 93 os_tid = 0xf58 Thread: id = 94 os_tid = 0xf5c Thread: id = 95 os_tid = 0xf6c Thread: id = 96 os_tid = 0xf70 Thread: id = 97 os_tid = 0xf74 Thread: id = 98 os_tid = 0xf84 Thread: id = 99 os_tid = 0xf98 Thread: id = 100 os_tid = 0xf9c Thread: id = 110 os_tid = 0xc3c Thread: id = 111 os_tid = 0xc2c Thread: id = 112 os_tid = 0xc28 Thread: id = 113 os_tid = 0x8e0 Thread: id = 114 os_tid = 0x4d4 Thread: id = 115 os_tid = 0x7dc Thread: id = 116 os_tid = 0x718 Thread: id = 117 os_tid = 0x6b4 Thread: id = 118 os_tid = 0xa2c Thread: id = 119 os_tid = 0x610 Thread: id = 120 os_tid = 0xa48 Thread: id = 121 os_tid = 0x84 Thread: id = 122 os_tid = 0x2ec Thread: id = 123 os_tid = 0xb84 Thread: id = 126 os_tid = 0x594 Thread: id = 453 os_tid = 0x820 Thread: id = 454 os_tid = 0xa40 Thread: id = 456 os_tid = 0xae8 Thread: id = 457 os_tid = 0xb0 Thread: id = 458 os_tid = 0xcec Thread: id = 460 os_tid = 0xc70 Thread: id = 487 os_tid = 0x5fc Thread: id = 488 os_tid = 0x854 Thread: id = 489 os_tid = 0x834 Thread: id = 490 os_tid = 0xd1c Thread: id = 491 os_tid = 0xd30 Thread: id = 492 os_tid = 0xd6c Thread: id = 504 os_tid = 0xd40 Thread: id = 513 os_tid = 0xbec Thread: id = 514 os_tid = 0x8dc Thread: id = 515 os_tid = 0x4f4 Thread: id = 525 os_tid = 0xd88 Thread: id = 526 os_tid = 0xdac Thread: id = 527 os_tid = 0xde8 Thread: id = 528 os_tid = 0xdf0 Thread: id = 529 os_tid = 0xdf4 Process: id = "5" image_name = "taskeng.exe" filename = "c:\\windows\\system32\\taskeng.exe" page_root = "0x2a8fd000" os_pid = "0xff8" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "4" os_parent_pid = "0x330" cmd_line = "taskeng.exe {44452118-3584-4255-B3D4-11A946D6E1BB} S-1-5-21-1462094071-1423818996-289466292-1000:LHNIWSJ\\CIiHmnxMn6Ps:Interactive:LUA[1]" cur_dir = "C:\\Windows\\system32\\" os_username = "LHNIWSJ\\CIiHmnxMn6Ps" os_groups = "LHNIWSJ\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x10], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:00014ee5" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 780 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 781 start_va = 0xea43d90000 end_va = 0xea43daffff entry_point = 0x0 region_type = private name = "private_0x000000ea43d90000" filename = "" Region: id = 782 start_va = 0xea43db0000 end_va = 0xea43dc3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000ea43db0000" filename = "" Region: id = 783 start_va = 0xea43dd0000 end_va = 0xea43e4ffff entry_point = 0x0 region_type = private name = "private_0x000000ea43dd0000" filename = "" Region: id = 784 start_va = 0xea43e50000 end_va = 0xea43e53fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000ea43e50000" filename = "" Region: id = 785 start_va = 0xea43e60000 end_va = 0xea43e60fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000ea43e60000" filename = "" Region: id = 786 start_va = 0xea43e70000 end_va = 0xea43e71fff entry_point = 0x0 region_type = private name = "private_0x000000ea43e70000" filename = "" Region: id = 787 start_va = 0x7df5ff720000 end_va = 0x7ff5ff71ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007df5ff720000" filename = "" Region: id = 788 start_va = 0x7ff7276f0000 end_va = 0x7ff727712fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007ff7276f0000" filename = "" Region: id = 789 start_va = 0x7ff72771c000 end_va = 0x7ff72771cfff entry_point = 0x0 region_type = private name = "private_0x00007ff72771c000" filename = "" Region: id = 790 start_va = 0x7ff72771e000 end_va = 0x7ff72771ffff entry_point = 0x0 region_type = private name = "private_0x00007ff72771e000" filename = "" Region: id = 791 start_va = 0x7ff727b80000 end_va = 0x7ff727bccfff entry_point = 0x7ff727b80000 region_type = mapped_file name = "taskeng.exe" filename = "\\Windows\\System32\\taskeng.exe" (normalized: "c:\\windows\\system32\\taskeng.exe") Region: id = 792 start_va = 0x7ff8ee380000 end_va = 0x7ff8ee541fff entry_point = 0x7ff8ee380000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 793 start_va = 0xea43d90000 end_va = 0xea43d9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000ea43d90000" filename = "" Region: id = 794 start_va = 0xea43e80000 end_va = 0xea43f3dfff entry_point = 0xea43e80000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 795 start_va = 0xea44020000 end_va = 0xea4411ffff entry_point = 0x0 region_type = private name = "private_0x000000ea44020000" filename = "" Region: id = 796 start_va = 0x7ff7275f0000 end_va = 0x7ff7276effff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007ff7275f0000" filename = "" Region: id = 797 start_va = 0x7ff8eb870000 end_va = 0x7ff8eba4cfff entry_point = 0x7ff8eb870000 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 798 start_va = 0x7ff8ee2d0000 end_va = 0x7ff8ee37cfff entry_point = 0x7ff8ee2d0000 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 799 start_va = 0xea43da0000 end_va = 0xea43da6fff entry_point = 0x0 region_type = private name = "private_0x000000ea43da0000" filename = "" Region: id = 800 start_va = 0xea43f40000 end_va = 0xea43fbffff entry_point = 0x0 region_type = private name = "private_0x000000ea43f40000" filename = "" Region: id = 801 start_va = 0xea43fc0000 end_va = 0xea43fc6fff entry_point = 0x0 region_type = private name = "private_0x000000ea43fc0000" filename = "" Region: id = 802 start_va = 0xea43fd0000 end_va = 0xea43fd0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000ea43fd0000" filename = "" Region: id = 803 start_va = 0xea43fe0000 end_va = 0xea43feffff entry_point = 0x0 region_type = private name = "private_0x000000ea43fe0000" filename = "" Region: id = 804 start_va = 0xea44120000 end_va = 0xea4419ffff entry_point = 0x0 region_type = private name = "private_0x000000ea44120000" filename = "" Region: id = 805 start_va = 0xea441a0000 end_va = 0xea4421ffff entry_point = 0x0 region_type = private name = "private_0x000000ea441a0000" filename = "" Region: id = 806 start_va = 0xea44250000 end_va = 0xea4425ffff entry_point = 0x0 region_type = private name = "private_0x000000ea44250000" filename = "" Region: id = 807 start_va = 0xea44260000 end_va = 0xea4435ffff entry_point = 0x0 region_type = private name = "private_0x000000ea44260000" filename = "" Region: id = 808 start_va = 0xea44360000 end_va = 0xea44696fff entry_point = 0xea44360000 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 809 start_va = 0xea446a0000 end_va = 0xea4471ffff entry_point = 0x0 region_type = private name = "private_0x000000ea446a0000" filename = "" Region: id = 810 start_va = 0xea44720000 end_va = 0xea4479ffff entry_point = 0x0 region_type = private name = "private_0x000000ea44720000" filename = "" Region: id = 811 start_va = 0x7ff7275ee000 end_va = 0x7ff7275effff entry_point = 0x0 region_type = private name = "private_0x00007ff7275ee000" filename = "" Region: id = 812 start_va = 0x7ff727714000 end_va = 0x7ff727715fff entry_point = 0x0 region_type = private name = "private_0x00007ff727714000" filename = "" Region: id = 813 start_va = 0x7ff727716000 end_va = 0x7ff727717fff entry_point = 0x0 region_type = private name = "private_0x00007ff727716000" filename = "" Region: id = 814 start_va = 0x7ff727718000 end_va = 0x7ff727719fff entry_point = 0x0 region_type = private name = "private_0x00007ff727718000" filename = "" Region: id = 815 start_va = 0x7ff72771a000 end_va = 0x7ff72771bfff entry_point = 0x0 region_type = private name = "private_0x00007ff72771a000" filename = "" Region: id = 816 start_va = 0x7ff8db900000 end_va = 0x7ff8db908fff entry_point = 0x7ff8db900000 region_type = mapped_file name = "tschannel.dll" filename = "\\Windows\\System32\\TSChannel.dll" (normalized: "c:\\windows\\system32\\tschannel.dll") Region: id = 817 start_va = 0x7ff8ea270000 end_va = 0x7ff8ea2a2fff entry_point = 0x7ff8ea270000 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\System32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll") Region: id = 818 start_va = 0x7ff8ea620000 end_va = 0x7ff8ea636fff entry_point = 0x7ff8ea620000 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\System32\\cryptsp.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll") Region: id = 819 start_va = 0x7ff8ea790000 end_va = 0x7ff8ea79afff entry_point = 0x7ff8ea790000 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\System32\\cryptbase.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll") Region: id = 820 start_va = 0x7ff8ea9d0000 end_va = 0x7ff8ea9fbfff entry_point = 0x7ff8ea9d0000 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\System32\\sspicli.dll" (normalized: "c:\\windows\\system32\\sspicli.dll") Region: id = 821 start_va = 0x7ff8eabd0000 end_va = 0x7ff8eabf7fff entry_point = 0x7ff8eabd0000 region_type = mapped_file name = "bcrypt.dll" filename = "\\Windows\\System32\\bcrypt.dll" (normalized: "c:\\windows\\system32\\bcrypt.dll") Region: id = 822 start_va = 0x7ff8eac00000 end_va = 0x7ff8eac6afff entry_point = 0x7ff8eac00000 region_type = mapped_file name = "bcryptprimitives.dll" filename = "\\Windows\\System32\\bcryptprimitives.dll" (normalized: "c:\\windows\\system32\\bcryptprimitives.dll") Region: id = 823 start_va = 0x7ff8eae20000 end_va = 0x7ff8eae2efff entry_point = 0x7ff8eae20000 region_type = mapped_file name = "kernel.appcore.dll" filename = "\\Windows\\System32\\kernel.appcore.dll" (normalized: "c:\\windows\\system32\\kernel.appcore.dll") Region: id = 824 start_va = 0x7ff8ebb30000 end_va = 0x7ff8ebbedfff entry_point = 0x7ff8ebb30000 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll") Region: id = 825 start_va = 0x7ff8ec240000 end_va = 0x7ff8ec29afff entry_point = 0x7ff8ec240000 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 826 start_va = 0x7ff8ec450000 end_va = 0x7ff8ec575fff entry_point = 0x7ff8ec450000 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 827 start_va = 0x7ff8edb10000 end_va = 0x7ff8edbb4fff entry_point = 0x7ff8edb10000 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\System32\\clbcatq.dll" (normalized: "c:\\windows\\system32\\clbcatq.dll") Region: id = 828 start_va = 0x7ff8edd60000 end_va = 0x7ff8edfdbfff entry_point = 0x7ff8edd60000 region_type = mapped_file name = "combase.dll" filename = "\\Windows\\System32\\combase.dll" (normalized: "c:\\windows\\system32\\combase.dll") Region: id = 829 start_va = 0x7ff8ee0b0000 end_va = 0x7ff8ee14cfff entry_point = 0x7ff8ee0b0000 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 830 start_va = 0x7ff8ee190000 end_va = 0x7ff8ee235fff entry_point = 0x7ff8ee190000 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 831 start_va = 0xea43ff0000 end_va = 0xea43ff0fff entry_point = 0xea43ff0000 region_type = mapped_file name = "taskeng.exe.mui" filename = "\\Windows\\System32\\en-US\\TaskEng.exe.mui" (normalized: "c:\\windows\\system32\\en-us\\taskeng.exe.mui") Region: id = 832 start_va = 0xea44000000 end_va = 0xea44000fff entry_point = 0x0 region_type = private name = "private_0x000000ea44000000" filename = "" Region: id = 833 start_va = 0xea44010000 end_va = 0xea44010fff entry_point = 0x0 region_type = private name = "private_0x000000ea44010000" filename = "" Region: id = 834 start_va = 0xea447a0000 end_va = 0xea44927fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000ea447a0000" filename = "" Region: id = 835 start_va = 0xea44930000 end_va = 0xea44ab0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000ea44930000" filename = "" Region: id = 836 start_va = 0xea44ac0000 end_va = 0xea45ebffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000ea44ac0000" filename = "" Region: id = 837 start_va = 0x7ff8ebdc0000 end_va = 0x7ff8ebf0dfff entry_point = 0x7ff8ebdc0000 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 838 start_va = 0x7ff8ec0c0000 end_va = 0x7ff8ec21bfff entry_point = 0x7ff8ec0c0000 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\System32\\msctf.dll" (normalized: "c:\\windows\\system32\\msctf.dll") Region: id = 839 start_va = 0x7ff8edbc0000 end_va = 0x7ff8edd44fff entry_point = 0x7ff8edbc0000 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 840 start_va = 0x7ff8ee150000 end_va = 0x7ff8ee185fff entry_point = 0x7ff8ee150000 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 841 start_va = 0xea44220000 end_va = 0xea4422ffff entry_point = 0x0 region_type = private name = "private_0x000000ea44220000" filename = "" Region: id = 842 start_va = 0xea44230000 end_va = 0xea44236fff entry_point = 0x0 region_type = private name = "private_0x000000ea44230000" filename = "" Region: id = 843 start_va = 0x7ff8e6330000 end_va = 0x7ff8e6365fff entry_point = 0x7ff8e6330000 region_type = mapped_file name = "xmllite.dll" filename = "\\Windows\\System32\\xmllite.dll" (normalized: "c:\\windows\\system32\\xmllite.dll") Region: id = 844 start_va = 0x7ff8e9680000 end_va = 0x7ff8e9715fff entry_point = 0x7ff8e9680000 region_type = mapped_file name = "uxtheme.dll" filename = "\\Windows\\System32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll") Thread: id = 101 os_tid = 0xffc Thread: id = 102 os_tid = 0x374 Thread: id = 103 os_tid = 0x570 Thread: id = 104 os_tid = 0x88c Thread: id = 105 os_tid = 0x8c4 Thread: id = 106 os_tid = 0xc10 Thread: id = 107 os_tid = 0xc38 Thread: id = 530 os_tid = 0xe04 Thread: id = 531 os_tid = 0xdec Thread: id = 532 os_tid = 0xde4 Process: id = "6" image_name = "xyuencrypt.exe" filename = "c:\\users\\ciihmnxmn6ps\\desktop\\xyuencrypt.exe" page_root = "0x6e5f5000" os_pid = "0xc04" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "5" os_parent_pid = "0xff8" cmd_line = "C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XyuEncrypt.exe" cur_dir = "C:\\Windows\\system32\\" os_username = "LHNIWSJ\\CIiHmnxMn6Ps" os_groups = "LHNIWSJ\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x10], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:00014ee5" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 845 start_va = 0xf0000 end_va = 0xf9fff entry_point = 0xf0000 region_type = mapped_file name = "xyuencrypt.exe" filename = "\\Users\\CIiHmnxMn6Ps\\Desktop\\XyuEncrypt.exe" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\xyuencrypt.exe") Region: id = 846 start_va = 0x100000 end_va = 0x11ffff entry_point = 0x0 region_type = private name = "private_0x0000000000100000" filename = "" Region: id = 847 start_va = 0x120000 end_va = 0x133fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 848 start_va = 0x140000 end_va = 0x23ffff entry_point = 0x0 region_type = private name = "private_0x0000000000140000" filename = "" Region: id = 849 start_va = 0x240000 end_va = 0x243fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000240000" filename = "" Region: id = 850 start_va = 0x250000 end_va = 0x250fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000250000" filename = "" Region: id = 851 start_va = 0x260000 end_va = 0x261fff entry_point = 0x0 region_type = private name = "private_0x0000000000260000" filename = "" Region: id = 852 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 853 start_va = 0x7ff5ff0a0000 end_va = 0x7ff5ff0c2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007ff5ff0a0000" filename = "" Region: id = 854 start_va = 0x7ff5ff0c3000 end_va = 0x7ff5ff0c3fff entry_point = 0x0 region_type = private name = "private_0x00007ff5ff0c3000" filename = "" Region: id = 855 start_va = 0x7ff5ff0ce000 end_va = 0x7ff5ff0cffff entry_point = 0x0 region_type = private name = "private_0x00007ff5ff0ce000" filename = "" Region: id = 856 start_va = 0x7ff8ee380000 end_va = 0x7ff8ee541fff entry_point = 0x7ff8ee380000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 857 start_va = 0x100000 end_va = 0x10ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000100000" filename = "" Region: id = 858 start_va = 0x2b0000 end_va = 0x3affff entry_point = 0x0 region_type = private name = "private_0x00000000002b0000" filename = "" Region: id = 859 start_va = 0x3b0000 end_va = 0x46dfff entry_point = 0x3b0000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 860 start_va = 0x7ff5fefa0000 end_va = 0x7ff5ff09ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007ff5fefa0000" filename = "" Region: id = 861 start_va = 0x7ff8d5fe0000 end_va = 0x7ff8d6047fff entry_point = 0x7ff8d5fe0000 region_type = mapped_file name = "mscoree.dll" filename = "\\Windows\\System32\\mscoree.dll" (normalized: "c:\\windows\\system32\\mscoree.dll") Region: id = 862 start_va = 0x7ff8eb870000 end_va = 0x7ff8eba4cfff entry_point = 0x7ff8eb870000 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 863 start_va = 0x7ff8ee2d0000 end_va = 0x7ff8ee37cfff entry_point = 0x7ff8ee2d0000 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 864 start_va = 0x110000 end_va = 0x116fff entry_point = 0x0 region_type = private name = "private_0x0000000000110000" filename = "" Region: id = 865 start_va = 0x270000 end_va = 0x276fff entry_point = 0x0 region_type = private name = "private_0x0000000000270000" filename = "" Region: id = 866 start_va = 0x470000 end_va = 0x56ffff entry_point = 0x0 region_type = private name = "private_0x0000000000470000" filename = "" Region: id = 867 start_va = 0x5b0000 end_va = 0x5bffff entry_point = 0x0 region_type = private name = "private_0x00000000005b0000" filename = "" Region: id = 868 start_va = 0x790000 end_va = 0x79ffff entry_point = 0x0 region_type = private name = "private_0x0000000000790000" filename = "" Region: id = 869 start_va = 0x7ff5ff0cc000 end_va = 0x7ff5ff0cdfff entry_point = 0x0 region_type = private name = "private_0x00007ff5ff0cc000" filename = "" Region: id = 870 start_va = 0x7ff8ec240000 end_va = 0x7ff8ec29afff entry_point = 0x7ff8ec240000 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 871 start_va = 0x7ff8ec450000 end_va = 0x7ff8ec575fff entry_point = 0x7ff8ec450000 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 872 start_va = 0x7ff8ee0b0000 end_va = 0x7ff8ee14cfff entry_point = 0x7ff8ee0b0000 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 873 start_va = 0x7ff8ee190000 end_va = 0x7ff8ee235fff entry_point = 0x7ff8ee190000 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 874 start_va = 0x7ff8d5f40000 end_va = 0x7ff8d5fd6fff entry_point = 0x7ff8d5f40000 region_type = mapped_file name = "mscoreei.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\mscoreei.dll") Region: id = 875 start_va = 0x280000 end_va = 0x286fff entry_point = 0x0 region_type = private name = "private_0x0000000000280000" filename = "" Region: id = 876 start_va = 0x7ff8ebdc0000 end_va = 0x7ff8ebf0dfff entry_point = 0x7ff8ebdc0000 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 877 start_va = 0x7ff8edbc0000 end_va = 0x7ff8edd44fff entry_point = 0x7ff8edbc0000 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 878 start_va = 0x7ff8edd60000 end_va = 0x7ff8edfdbfff entry_point = 0x7ff8edd60000 region_type = mapped_file name = "combase.dll" filename = "\\Windows\\System32\\combase.dll" (normalized: "c:\\windows\\system32\\combase.dll") Region: id = 879 start_va = 0x7ff8edfe0000 end_va = 0x7ff8ee030fff entry_point = 0x7ff8edfe0000 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\System32\\shlwapi.dll" (normalized: "c:\\windows\\system32\\shlwapi.dll") Region: id = 880 start_va = 0x290000 end_va = 0x290fff entry_point = 0x0 region_type = private name = "private_0x0000000000290000" filename = "" Region: id = 881 start_va = 0x2a0000 end_va = 0x2a0fff entry_point = 0x0 region_type = private name = "private_0x00000000002a0000" filename = "" Region: id = 882 start_va = 0x5c0000 end_va = 0x747fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005c0000" filename = "" Region: id = 883 start_va = 0x7a0000 end_va = 0x920fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000007a0000" filename = "" Region: id = 884 start_va = 0x930000 end_va = 0x1d2ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000930000" filename = "" Region: id = 885 start_va = 0x7ff8eae20000 end_va = 0x7ff8eae2efff entry_point = 0x7ff8eae20000 region_type = mapped_file name = "kernel.appcore.dll" filename = "\\Windows\\System32\\kernel.appcore.dll" (normalized: "c:\\windows\\system32\\kernel.appcore.dll") Region: id = 886 start_va = 0x7ff8ec0c0000 end_va = 0x7ff8ec21bfff entry_point = 0x7ff8ec0c0000 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\System32\\msctf.dll" (normalized: "c:\\windows\\system32\\msctf.dll") Region: id = 887 start_va = 0x7ff8ee150000 end_va = 0x7ff8ee185fff entry_point = 0x7ff8ee150000 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 888 start_va = 0x7ff8e3a50000 end_va = 0x7ff8e3a59fff entry_point = 0x7ff8e3a50000 region_type = mapped_file name = "version.dll" filename = "\\Windows\\System32\\version.dll" (normalized: "c:\\windows\\system32\\version.dll") Region: id = 889 start_va = 0x7ff8d5180000 end_va = 0x7ff8d5276fff entry_point = 0x7ff8d5180000 region_type = mapped_file name = "msvcr120_clr0400.dll" filename = "\\Windows\\System32\\msvcr120_clr0400.dll" (normalized: "c:\\windows\\system32\\msvcr120_clr0400.dll") Region: id = 890 start_va = 0x7ff8d5280000 end_va = 0x7ff8d5bd1fff entry_point = 0x7ff8d5280000 region_type = mapped_file name = "clr.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\clr.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\clr.dll") Region: id = 891 start_va = 0x570000 end_va = 0x570fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000570000" filename = "" Region: id = 892 start_va = 0x580000 end_va = 0x58ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000580000" filename = "" Region: id = 893 start_va = 0x590000 end_va = 0x59ffff entry_point = 0x0 region_type = private name = "private_0x0000000000590000" filename = "" Region: id = 894 start_va = 0x5a0000 end_va = 0x5a0fff entry_point = 0x0 region_type = private name = "private_0x00000000005a0000" filename = "" Region: id = 895 start_va = 0x750000 end_va = 0x750fff entry_point = 0x0 region_type = private name = "private_0x0000000000750000" filename = "" Region: id = 896 start_va = 0x1d30000 end_va = 0x1e2ffff entry_point = 0x0 region_type = private name = "private_0x0000000001d30000" filename = "" Region: id = 897 start_va = 0x1e30000 end_va = 0x1e3ffff entry_point = 0x0 region_type = private name = "private_0x0000000001e30000" filename = "" Region: id = 898 start_va = 0x1e80000 end_va = 0x1e8ffff entry_point = 0x0 region_type = private name = "private_0x0000000001e80000" filename = "" Region: id = 899 start_va = 0x1e90000 end_va = 0x19e8ffff entry_point = 0x0 region_type = private name = "private_0x0000000001e90000" filename = "" Region: id = 900 start_va = 0x19e90000 end_va = 0x1a1fffff entry_point = 0x0 region_type = private name = "private_0x0000000019e90000" filename = "" Region: id = 901 start_va = 0x1a200000 end_va = 0x1a30afff entry_point = 0x0 region_type = private name = "private_0x000000001a200000" filename = "" Region: id = 902 start_va = 0x1a310000 end_va = 0x1a40ffff entry_point = 0x0 region_type = private name = "private_0x000000001a310000" filename = "" Region: id = 903 start_va = 0x1a410000 end_va = 0x1a746fff entry_point = 0x1a410000 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 904 start_va = 0x7ff5ff0c8000 end_va = 0x7ff5ff0c9fff entry_point = 0x0 region_type = private name = "private_0x00007ff5ff0c8000" filename = "" Region: id = 905 start_va = 0x7ff5ff0ca000 end_va = 0x7ff5ff0cbfff entry_point = 0x0 region_type = private name = "private_0x00007ff5ff0ca000" filename = "" Region: id = 906 start_va = 0x7ff875ae0000 end_va = 0x7ff875aeffff entry_point = 0x0 region_type = private name = "private_0x00007ff875ae0000" filename = "" Region: id = 907 start_va = 0x7ff875af0000 end_va = 0x7ff875afffff entry_point = 0x0 region_type = private name = "private_0x00007ff875af0000" filename = "" Region: id = 908 start_va = 0x7ff875b00000 end_va = 0x7ff875b8ffff entry_point = 0x0 region_type = private name = "private_0x00007ff875b00000" filename = "" Region: id = 909 start_va = 0x7ff875b90000 end_va = 0x7ff875bfffff entry_point = 0x0 region_type = private name = "private_0x00007ff875b90000" filename = "" Region: id = 910 start_va = 0x7ff8d3ce0000 end_va = 0x7ff8d517afff entry_point = 0x7ff8d3ce0000 region_type = mapped_file name = "mscorlib.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_64\\mscorlib\\612274c1d31adcb16957bc45650141c8\\mscorlib.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_64\\mscorlib\\612274c1d31adcb16957bc45650141c8\\mscorlib.ni.dll") Region: id = 911 start_va = 0x7ff8ec300000 end_va = 0x7ff8ec440fff entry_point = 0x7ff8ec300000 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll") Region: id = 912 start_va = 0x1a750000 end_va = 0x1a825fff entry_point = 0x1a750000 region_type = mapped_file name = "rpcss.dll" filename = "\\Windows\\System32\\rpcss.dll" (normalized: "c:\\windows\\system32\\rpcss.dll") Region: id = 913 start_va = 0x7ff8eac00000 end_va = 0x7ff8eac6afff entry_point = 0x7ff8eac00000 region_type = mapped_file name = "bcryptprimitives.dll" filename = "\\Windows\\System32\\bcryptprimitives.dll" (normalized: "c:\\windows\\system32\\bcryptprimitives.dll") Region: id = 914 start_va = 0x7ff8e9680000 end_va = 0x7ff8e9715fff entry_point = 0x7ff8e9680000 region_type = mapped_file name = "uxtheme.dll" filename = "\\Windows\\System32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll") Region: id = 915 start_va = 0x1a750000 end_va = 0x1a91ffff entry_point = 0x0 region_type = private name = "private_0x000000001a750000" filename = "" Region: id = 916 start_va = 0x7ff5feef0000 end_va = 0x7ff5feefffff entry_point = 0x0 region_type = private name = "private_0x00007ff5feef0000" filename = "" Region: id = 917 start_va = 0x7ff5fef00000 end_va = 0x7ff5fef9ffff entry_point = 0x0 region_type = private name = "private_0x00007ff5fef00000" filename = "" Region: id = 918 start_va = 0x7ff875c00000 end_va = 0x7ff875c3ffff entry_point = 0x0 region_type = private name = "private_0x00007ff875c00000" filename = "" Region: id = 919 start_va = 0x7ff875c40000 end_va = 0x7ff875c4ffff entry_point = 0x0 region_type = private name = "private_0x00007ff875c40000" filename = "" Region: id = 920 start_va = 0x7ff8d3bd0000 end_va = 0x7ff8d3cd0fff entry_point = 0x7ff8d3bd0000 region_type = mapped_file name = "clrjit.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\clrjit.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\clrjit.dll") Region: id = 921 start_va = 0x7ff8ebb30000 end_va = 0x7ff8ebbedfff entry_point = 0x7ff8ebb30000 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll") Region: id = 922 start_va = 0x760000 end_va = 0x76ffff entry_point = 0x0 region_type = private name = "private_0x0000000000760000" filename = "" Region: id = 923 start_va = 0x7ff8d1ee0000 end_va = 0x7ff8d2dbffff entry_point = 0x7ff8d1ee0000 region_type = mapped_file name = "system.windows.forms.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Windows.Forms\\f1ee4f985931fcaa247c6966911a210c\\System.Windows.Forms.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_64\\system.windows.forms\\f1ee4f985931fcaa247c6966911a210c\\system.windows.forms.ni.dll") Region: id = 924 start_va = 0x7ff8d2dc0000 end_va = 0x7ff8d2fa9fff entry_point = 0x7ff8d2dc0000 region_type = mapped_file name = "system.drawing.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Drawing\\8afb2a58aea8b12a8c4d565b1600ef05\\System.Drawing.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_64\\system.drawing\\8afb2a58aea8b12a8c4d565b1600ef05\\system.drawing.ni.dll") Region: id = 925 start_va = 0x7ff8d2fb0000 end_va = 0x7ff8d3bc3fff entry_point = 0x7ff8d2fb0000 region_type = mapped_file name = "system.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System\\5d38433b42c8020426ab2fef33289985\\System.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_64\\system\\5d38433b42c8020426ab2fef33289985\\system.ni.dll") Thread: id = 108 os_tid = 0xc44 [0107.275] CoInitializeEx (pvReserved=0x0, dwCoInit=0x2) returned 0x0 [0107.333] RoInitialize () returned 0x1 [0107.333] RoUninitialize () returned 0x0 [0108.407] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XyuEncrypt.exe", nBufferLength=0x105, lpBuffer=0x23e770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XyuEncrypt.exe", lpFilePart=0x0) returned 0x2c [0108.438] LookupPrivilegeValueW (in: lpSystemName=0x0, lpName="SeDebugPrivilege", lpLuid=0x23dce0 | out: lpLuid=0x23dce0*(LowPart=0x14, HighPart=0)) returned 1 [0108.439] GetCurrentProcess () returned 0xffffffffffffffff [0108.439] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x20, TokenHandle=0x23dcd8 | out: TokenHandle=0x23dcd8*=0x234) returned 1 [0108.439] AdjustTokenPrivileges (in: TokenHandle=0x234, DisableAllPrivileges=0, NewState=0x1e94e70*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x14, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x0, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0108.440] CloseHandle (hObject=0x234) returned 1 [0108.449] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x11ea1930, Length=0x20000, ResultLength=0x23edc0 | out: SystemInformation=0x11ea1930, ResultLength=0x23edc0*=0x14930) returned 0x0 [0108.468] GetCurrentProcessId () returned 0xc04 [0108.471] OpenProcess (dwDesiredAccess=0x1, bInheritHandle=0, dwProcessId=0xc04) returned 0x234 [0109.652] TerminateProcess (hProcess=0x234, uExitCode=0xffffffff) Thread: id = 109 os_tid = 0xc50 Thread: id = 124 os_tid = 0x318 Thread: id = 125 os_tid = 0x53c [0107.333] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0107.333] RoInitialize () returned 0x1 [0107.333] RoUninitialize () returned 0x0 Process: id = "7" image_name = "sc.exe" filename = "c:\\windows\\system32\\sc.exe" page_root = "0x64d9000" os_pid = "0x7a8" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "child_process" parent_id = "4" os_parent_pid = "0x330" cmd_line = "C:\\Windows\\system32\\sc.exe start wuauserv" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\BDESVC" [0xe], "NT SERVICE\\BITS" [0xe], "NT SERVICE\\CertPropSvc" [0xa], "NT SERVICE\\DcpSvc" [0xa], "NT SERVICE\\dmwappushservice" [0xa], "NT SERVICE\\DoSvc" [0xa], "NT SERVICE\\DsmSvc" [0xa], "NT SERVICE\\EapHost" [0xa], "NT SERVICE\\IKEEXT" [0xa], "NT SERVICE\\iphlpsvc" [0xe], "NT SERVICE\\LanmanServer" [0xe], "NT SERVICE\\lfsvc" [0xa], "NT SERVICE\\MSiSCSI" [0xa], "NT SERVICE\\NcaSvc" [0xa], "NT SERVICE\\NetSetupSvc" [0xa], "NT SERVICE\\RasAuto" [0xa], "NT SERVICE\\RasMan" [0xa], "NT SERVICE\\RemoteAccess" [0xa], "NT SERVICE\\RetailDemo" [0xa], "NT SERVICE\\Schedule" [0xe], "NT SERVICE\\SCPolicySvc" [0xa], "NT SERVICE\\SENS" [0xe], "NT SERVICE\\SessionEnv" [0xa], "NT SERVICE\\SharedAccess" [0xa], "NT SERVICE\\ShellHWDetection" [0xe], "NT SERVICE\\UsoSvc" [0xa], "NT SERVICE\\wercplsupport" [0xa], "NT SERVICE\\Winmgmt" [0xe], "NT SERVICE\\wlidsvc" [0xa], "NT SERVICE\\wuauserv" [0xa], "NT SERVICE\\XboxNetApiSvc" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000b1c8" [0xc0000007], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Region: id = 926 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 927 start_va = 0x1e5b0b0000 end_va = 0x1e5b0cffff entry_point = 0x0 region_type = private name = "private_0x0000001e5b0b0000" filename = "" Region: id = 928 start_va = 0x1e5b0d0000 end_va = 0x1e5b0e3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000001e5b0d0000" filename = "" Region: id = 929 start_va = 0x1e5b0f0000 end_va = 0x1e5b16ffff entry_point = 0x0 region_type = private name = "private_0x0000001e5b0f0000" filename = "" Region: id = 930 start_va = 0x1e5b170000 end_va = 0x1e5b173fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000001e5b170000" filename = "" Region: id = 931 start_va = 0x1e5b180000 end_va = 0x1e5b180fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000001e5b180000" filename = "" Region: id = 932 start_va = 0x1e5b190000 end_va = 0x1e5b191fff entry_point = 0x0 region_type = private name = "private_0x0000001e5b190000" filename = "" Region: id = 933 start_va = 0x7df5ff1c0000 end_va = 0x7ff5ff1bffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007df5ff1c0000" filename = "" Region: id = 934 start_va = 0x7ff7f7590000 end_va = 0x7ff7f75b2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007ff7f7590000" filename = "" Region: id = 935 start_va = 0x7ff7f75b3000 end_va = 0x7ff7f75b3fff entry_point = 0x0 region_type = private name = "private_0x00007ff7f75b3000" filename = "" Region: id = 936 start_va = 0x7ff7f75be000 end_va = 0x7ff7f75bffff entry_point = 0x0 region_type = private name = "private_0x00007ff7f75be000" filename = "" Region: id = 937 start_va = 0x7ff7f7e40000 end_va = 0x7ff7f7e55fff entry_point = 0x7ff7f7e40000 region_type = mapped_file name = "sc.exe" filename = "\\Windows\\System32\\sc.exe" (normalized: "c:\\windows\\system32\\sc.exe") Region: id = 938 start_va = 0x7ff8ee380000 end_va = 0x7ff8ee541fff entry_point = 0x7ff8ee380000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 939 start_va = 0x1e5b1f0000 end_va = 0x1e5b2effff entry_point = 0x0 region_type = private name = "private_0x0000001e5b1f0000" filename = "" Region: id = 940 start_va = 0x7ff8eb870000 end_va = 0x7ff8eba4cfff entry_point = 0x7ff8eb870000 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 941 start_va = 0x7ff8ee2d0000 end_va = 0x7ff8ee37cfff entry_point = 0x7ff8ee2d0000 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 978 start_va = 0x1e5b0b0000 end_va = 0x1e5b0bffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000001e5b0b0000" filename = "" Region: id = 979 start_va = 0x1e5b0c0000 end_va = 0x1e5b0c6fff entry_point = 0x0 region_type = private name = "private_0x0000001e5b0c0000" filename = "" Region: id = 980 start_va = 0x1e5b2f0000 end_va = 0x1e5b3adfff entry_point = 0x1e5b2f0000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 981 start_va = 0x1e5b3b0000 end_va = 0x1e5b42ffff entry_point = 0x0 region_type = private name = "private_0x0000001e5b3b0000" filename = "" Region: id = 982 start_va = 0x1e5b4c0000 end_va = 0x1e5b4cffff entry_point = 0x0 region_type = private name = "private_0x0000001e5b4c0000" filename = "" Region: id = 983 start_va = 0x7ff7f7490000 end_va = 0x7ff7f758ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007ff7f7490000" filename = "" Region: id = 984 start_va = 0x7ff7f75bc000 end_va = 0x7ff7f75bdfff entry_point = 0x0 region_type = private name = "private_0x00007ff7f75bc000" filename = "" Region: id = 985 start_va = 0x7ff8ec450000 end_va = 0x7ff8ec575fff entry_point = 0x7ff8ec450000 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 986 start_va = 0x7ff8ee0b0000 end_va = 0x7ff8ee14cfff entry_point = 0x7ff8ee0b0000 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 987 start_va = 0x7ff8ec240000 end_va = 0x7ff8ec29afff entry_point = 0x7ff8ec240000 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 988 start_va = 0x1e5b1a0000 end_va = 0x1e5b1a6fff entry_point = 0x0 region_type = private name = "private_0x0000001e5b1a0000" filename = "" Region: id = 1267 start_va = 0x1e5b1b0000 end_va = 0x1e5b1c1fff entry_point = 0x1e5b1b0000 region_type = mapped_file name = "sc.exe.mui" filename = "\\Windows\\System32\\en-US\\sc.exe.mui" (normalized: "c:\\windows\\system32\\en-us\\sc.exe.mui") Thread: id = 127 os_tid = 0x884 [0110.768] GetModuleHandleW (lpModuleName=0x0) returned 0x7ff7f7e40000 [0110.768] __set_app_type (_Type=0x1) [0110.768] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x7ff7f7e41f00) returned 0x0 [0110.769] __wgetmainargs (in: _Argc=0x7ff7f7e51028, _Argv=0x7ff7f7e51030, _Env=0x7ff7f7e51038, _DoWildCard=0, _StartInfo=0x7ff7f7e51044 | out: _Argc=0x7ff7f7e51028, _Argv=0x7ff7f7e51030, _Env=0x7ff7f7e51038) returned 0 [0110.769] SetThreadUILanguage (LangId=0x0) returned 0x409 [0110.773] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0110.773] GetStdHandle (nStdHandle=0xfffffff5) returned 0x24 [0110.774] wcsncmp (_String1="st", _String2="\\\\", _MaxCount=0x2) returned 23 [0110.774] _wcsicmp (_String1="start", _String2="query") returned 2 [0110.774] _wcsicmp (_String1="start", _String2="queryex") returned 2 [0110.774] _wcsicmp (_String1="start", _String2="start") returned 0 [0110.774] ResolveDelayLoadedAPI () returned 0x7ff8ec254740 [0110.776] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x1) returned 0x1e5b1f85f0 [0110.814] OpenServiceW (hSCManager=0x1e5b1f85f0, lpServiceName="wuauserv", dwDesiredAccess=0x14) returned 0x1e5b1f84a0 [0110.815] StartServiceW (hService=0x1e5b1f84a0, dwNumServiceArgs=0x0, lpServiceArgVectors=0x0) returned 1 [0110.908] ResolveDelayLoadedAPI () returned 0x7ff8ec253f00 [0110.908] QueryServiceStatusEx (in: hService=0x1e5b1f84a0, InfoLevel=0x0, lpBuffer=0x1e5b16fe58, cbBufSize=0x24, pcbBytesNeeded=0x1e5b16fe34 | out: lpBuffer=0x1e5b16fe58, pcbBytesNeeded=0x1e5b16fe34) returned 1 [0110.908] _ultow (in: _Dest=0x20, _Radix=1528233160 | out: _Dest=0x20) returned="20" [0110.908] _ultow (in: _Dest=0x2, _Radix=1528233280 | out: _Dest=0x2) returned="2" [0110.908] _ultow (in: _Dest=0x0, _Radix=1528233208 | out: _Dest=0x0) returned="0" [0110.908] _ultow (in: _Dest=0x0, _Radix=1528233088 | out: _Dest=0x0) returned="0" [0110.908] _ultow (in: _Dest=0x0, _Radix=1528233256 | out: _Dest=0x0) returned="0" [0110.908] _ultow (in: _Dest=0x0, _Radix=1528233112 | out: _Dest=0x0) returned="0" [0110.908] _ultow (in: _Dest=0x0, _Radix=1528233136 | out: _Dest=0x0) returned="0" [0110.908] _ultow (in: _Dest=0x7d0, _Radix=1528233184 | out: _Dest=0x7d0) returned="7d0" [0110.908] _ultow (in: _Dest=0x330, _Radix=1528233232 | out: _Dest=0x330) returned="816" [0110.908] FormatMessageW (in: dwFlags=0x2900, lpSource=0x0, dwMessageId=0x31, dwLanguageId=0x0, lpBuffer=0x1e5b16fbd8, nSize=0x2, Arguments=0x1e5b16fbf0 | out: lpBuffer="\xd440\x5b1f\x1e") returned 0x1a9 [0111.373] GetFileType (hFile=0x24) returned 0x2 [0111.373] GetConsoleMode (in: hConsoleHandle=0x24, lpMode=0x1e5b16fbe0 | out: lpMode=0x1e5b16fbe0) returned 1 [0113.133] WriteConsoleW (in: hConsoleOutput=0x24, lpBuffer=0x1e5b1fd440*, nNumberOfCharsToWrite=0x1a9, lpNumberOfCharsWritten=0x1e5b16fbd0, lpReserved=0x0 | out: lpBuffer=0x1e5b1fd440*, lpNumberOfCharsWritten=0x1e5b16fbd0*=0x1a9) returned 1 [0113.558] LocalFree (hMem=0x1e5b1fd440) returned 0x0 [0113.558] LocalFree (hMem=0x0) returned 0x0 [0113.558] CloseServiceHandle (hSCObject=0x1e5b1f84a0) returned 1 [0113.558] CloseServiceHandle (hSCObject=0x1e5b1f85f0) returned 1 [0113.558] LocalFree (hMem=0x0) returned 0x0 [0113.558] exit (_Code=0) Thread: id = 459 os_tid = 0xaec Process: id = "8" image_name = "conhost.exe" filename = "c:\\windows\\system32\\conhost.exe" page_root = "0x7ff9000" os_pid = "0x738" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "child_process" parent_id = "7" os_parent_pid = "0x7a8" cmd_line = "\\??\\C:\\Windows\\system32\\conhost.exe 0xffffffff -ForceV1" cur_dir = "C:\\Windows" os_username = "NT AUTHORITY\\SYSTEM" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\BDESVC" [0xe], "NT SERVICE\\BITS" [0xe], "NT SERVICE\\CertPropSvc" [0xa], "NT SERVICE\\DcpSvc" [0xa], "NT SERVICE\\dmwappushservice" [0xa], "NT SERVICE\\DoSvc" [0xa], "NT SERVICE\\DsmSvc" [0xa], "NT SERVICE\\EapHost" [0xa], "NT SERVICE\\IKEEXT" [0xa], "NT SERVICE\\iphlpsvc" [0xe], "NT SERVICE\\LanmanServer" [0xe], "NT SERVICE\\lfsvc" [0xa], "NT SERVICE\\MSiSCSI" [0xa], "NT SERVICE\\NcaSvc" [0xa], "NT SERVICE\\NetSetupSvc" [0xa], "NT SERVICE\\RasAuto" [0xa], "NT SERVICE\\RasMan" [0xa], "NT SERVICE\\RemoteAccess" [0xa], "NT SERVICE\\RetailDemo" [0xa], "NT SERVICE\\Schedule" [0xe], "NT SERVICE\\SCPolicySvc" [0xa], "NT SERVICE\\SENS" [0xe], "NT SERVICE\\SessionEnv" [0xa], "NT SERVICE\\SharedAccess" [0xa], "NT SERVICE\\ShellHWDetection" [0xe], "NT SERVICE\\UsoSvc" [0xa], "NT SERVICE\\wercplsupport" [0xa], "NT SERVICE\\Winmgmt" [0xe], "NT SERVICE\\wlidsvc" [0xa], "NT SERVICE\\wuauserv" [0xa], "NT SERVICE\\XboxNetApiSvc" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000b1c8" [0xc0000007], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Region: id = 942 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 943 start_va = 0xa4ef250000 end_va = 0xa4ef26ffff entry_point = 0x0 region_type = private name = "private_0x000000a4ef250000" filename = "" Region: id = 944 start_va = 0xa4ef270000 end_va = 0xa4ef283fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000a4ef270000" filename = "" Region: id = 945 start_va = 0xa4ef290000 end_va = 0xa4ef2cffff entry_point = 0x0 region_type = private name = "private_0x000000a4ef290000" filename = "" Region: id = 946 start_va = 0x7df5ff030000 end_va = 0x7ff5ff02ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007df5ff030000" filename = "" Region: id = 947 start_va = 0x7ff71e680000 end_va = 0x7ff71e6a2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007ff71e680000" filename = "" Region: id = 948 start_va = 0x7ff71e6a5000 end_va = 0x7ff71e6a5fff entry_point = 0x0 region_type = private name = "private_0x00007ff71e6a5000" filename = "" Region: id = 949 start_va = 0x7ff71e6ae000 end_va = 0x7ff71e6affff entry_point = 0x0 region_type = private name = "private_0x00007ff71e6ae000" filename = "" Region: id = 950 start_va = 0x7ff71ef00000 end_va = 0x7ff71ef10fff entry_point = 0x7ff71ef00000 region_type = mapped_file name = "conhost.exe" filename = "\\Windows\\System32\\conhost.exe" (normalized: "c:\\windows\\system32\\conhost.exe") Region: id = 951 start_va = 0x7ff8ee380000 end_va = 0x7ff8ee541fff entry_point = 0x7ff8ee380000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 952 start_va = 0xa4ef400000 end_va = 0xa4ef4fffff entry_point = 0x0 region_type = private name = "private_0x000000a4ef400000" filename = "" Region: id = 953 start_va = 0x7ff8eb870000 end_va = 0x7ff8eba4cfff entry_point = 0x7ff8eb870000 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 954 start_va = 0x7ff8ee2d0000 end_va = 0x7ff8ee37cfff entry_point = 0x7ff8ee2d0000 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 955 start_va = 0xa4ef250000 end_va = 0xa4ef25ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000a4ef250000" filename = "" Region: id = 956 start_va = 0xa4ef260000 end_va = 0xa4ef266fff entry_point = 0x0 region_type = private name = "private_0x000000a4ef260000" filename = "" Region: id = 957 start_va = 0xa4ef2d0000 end_va = 0xa4ef38dfff entry_point = 0xa4ef2d0000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 958 start_va = 0xa4ef390000 end_va = 0xa4ef3cffff entry_point = 0x0 region_type = private name = "private_0x000000a4ef390000" filename = "" Region: id = 959 start_va = 0xa4ef3d0000 end_va = 0xa4ef3d0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000a4ef3d0000" filename = "" Region: id = 960 start_va = 0xa4ef3e0000 end_va = 0xa4ef3e6fff entry_point = 0x0 region_type = private name = "private_0x000000a4ef3e0000" filename = "" Region: id = 961 start_va = 0xa4ef3f0000 end_va = 0xa4ef3f0fff entry_point = 0x0 region_type = private name = "private_0x000000a4ef3f0000" filename = "" Region: id = 962 start_va = 0xa4ef500000 end_va = 0xa4ef5bffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000a4ef500000" filename = "" Region: id = 963 start_va = 0xa4ef5c0000 end_va = 0xa4ef5c0fff entry_point = 0x0 region_type = private name = "private_0x000000a4ef5c0000" filename = "" Region: id = 964 start_va = 0xa4ef5e0000 end_va = 0xa4ef5effff entry_point = 0x0 region_type = private name = "private_0x000000a4ef5e0000" filename = "" Region: id = 965 start_va = 0xa4ef5f0000 end_va = 0xa4ef777fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000a4ef5f0000" filename = "" Region: id = 966 start_va = 0xa4ef780000 end_va = 0xa4ef900fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000a4ef780000" filename = "" Region: id = 967 start_va = 0x7ff71e580000 end_va = 0x7ff71e67ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007ff71e580000" filename = "" Region: id = 968 start_va = 0x7ff71e6ac000 end_va = 0x7ff71e6adfff entry_point = 0x0 region_type = private name = "private_0x00007ff71e6ac000" filename = "" Region: id = 969 start_va = 0x7ff8d1740000 end_va = 0x7ff8d179ffff entry_point = 0x7ff8d1740000 region_type = mapped_file name = "conhostv1.dll" filename = "\\Windows\\System32\\ConhostV1.dll" (normalized: "c:\\windows\\system32\\conhostv1.dll") Region: id = 970 start_va = 0x7ff8ebb30000 end_va = 0x7ff8ebbedfff entry_point = 0x7ff8ebb30000 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll") Region: id = 971 start_va = 0x7ff8ebdc0000 end_va = 0x7ff8ebf0dfff entry_point = 0x7ff8ebdc0000 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 972 start_va = 0x7ff8ec0c0000 end_va = 0x7ff8ec21bfff entry_point = 0x7ff8ec0c0000 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\System32\\msctf.dll" (normalized: "c:\\windows\\system32\\msctf.dll") Region: id = 973 start_va = 0x7ff8ec450000 end_va = 0x7ff8ec575fff entry_point = 0x7ff8ec450000 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 974 start_va = 0x7ff8edbc0000 end_va = 0x7ff8edd44fff entry_point = 0x7ff8edbc0000 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 975 start_va = 0x7ff8edd60000 end_va = 0x7ff8edfdbfff entry_point = 0x7ff8edd60000 region_type = mapped_file name = "combase.dll" filename = "\\Windows\\System32\\combase.dll" (normalized: "c:\\windows\\system32\\combase.dll") Region: id = 976 start_va = 0x7ff8ee0b0000 end_va = 0x7ff8ee14cfff entry_point = 0x7ff8ee0b0000 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 977 start_va = 0x7ff8ee150000 end_va = 0x7ff8ee185fff entry_point = 0x7ff8ee150000 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Thread: id = 128 os_tid = 0xa3c Thread: id = 129 os_tid = 0xc7c Thread: id = 130 os_tid = 0xb50 Thread: id = 131 os_tid = 0x5f0 Process: id = "9" image_name = "System" filename = "" page_root = "0x1aa000" os_pid = "0x4" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "created_daemon" parent_id = "7" os_parent_pid = "0x7a8" cmd_line = "" cur_dir = "" os_username = "NT AUTHORITY\\SYSTEM" os_groups = "BUILTIN\\Administrators" [0xe], "Everyone" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7] Region: id = 1286 start_va = 0x77ca0000 end_va = 0x77e18fff entry_point = 0x77ca0000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll") Region: id = 1287 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 1288 start_va = 0x6180000000 end_va = 0x6180000fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000006180000000" filename = "" Region: id = 1289 start_va = 0x6180010000 end_va = 0x6180010fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000006180010000" filename = "" Region: id = 1290 start_va = 0x6180020000 end_va = 0x6180020fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000006180020000" filename = "" Region: id = 1291 start_va = 0x7ff8ee380000 end_va = 0x7ff8ee541fff entry_point = 0x7ff8ee380000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Thread: id = 132 os_tid = 0xf48 Thread: id = 133 os_tid = 0x1c Thread: id = 134 os_tid = 0x13c Thread: id = 135 os_tid = 0xb4 Thread: id = 136 os_tid = 0x18 Thread: id = 137 os_tid = 0xcfc Thread: id = 138 os_tid = 0xcf0 Thread: id = 139 os_tid = 0x884 Thread: id = 140 os_tid = 0xd0 Thread: id = 141 os_tid = 0x7a8 Thread: id = 142 os_tid = 0x768 Thread: id = 143 os_tid = 0x570 Thread: id = 144 os_tid = 0x80 Thread: id = 145 os_tid = 0xcc Thread: id = 146 os_tid = 0x8c8 Thread: id = 147 os_tid = 0x2f8 Thread: id = 148 os_tid = 0x30 Thread: id = 149 os_tid = 0x640 Thread: id = 150 os_tid = 0x190 Thread: id = 151 os_tid = 0x564 Thread: id = 152 os_tid = 0x318 Thread: id = 153 os_tid = 0x87c Thread: id = 154 os_tid = 0x888 Thread: id = 155 os_tid = 0x0 Thread: id = 156 os_tid = 0xbfc Thread: id = 157 os_tid = 0xbf0 Thread: id = 158 os_tid = 0xbec Thread: id = 159 os_tid = 0xbe8 Thread: id = 160 os_tid = 0xb78 Thread: id = 161 os_tid = 0xb6c Thread: id = 162 os_tid = 0x38 Thread: id = 163 os_tid = 0x99c Thread: id = 164 os_tid = 0x990 Thread: id = 165 os_tid = 0x10 Thread: id = 166 os_tid = 0x900 Thread: id = 167 os_tid = 0x8e0 Thread: id = 168 os_tid = 0x8b8 Thread: id = 169 os_tid = 0x8b0 Thread: id = 170 os_tid = 0x6b4 Thread: id = 171 os_tid = 0x5fc Thread: id = 172 os_tid = 0x6c Thread: id = 173 os_tid = 0xe8 Thread: id = 174 os_tid = 0xc8 Thread: id = 175 os_tid = 0x664 Thread: id = 176 os_tid = 0x63c Thread: id = 177 os_tid = 0x638 Thread: id = 178 os_tid = 0x624 Thread: id = 179 os_tid = 0x5ec Thread: id = 180 os_tid = 0x59c Thread: id = 181 os_tid = 0x58c Thread: id = 182 os_tid = 0x584 Thread: id = 183 os_tid = 0x48 Thread: id = 184 os_tid = 0x178 Thread: id = 185 os_tid = 0x17c Thread: id = 186 os_tid = 0x4dc Thread: id = 187 os_tid = 0x4c0 Thread: id = 188 os_tid = 0xb0 Thread: id = 189 os_tid = 0x480 Thread: id = 190 os_tid = 0x474 Thread: id = 191 os_tid = 0x8c Thread: id = 192 os_tid = 0x144 Thread: id = 193 os_tid = 0x74 Thread: id = 194 os_tid = 0x148 Thread: id = 195 os_tid = 0x358 Thread: id = 196 os_tid = 0x3c Thread: id = 197 os_tid = 0x2c4 Thread: id = 198 os_tid = 0x84 Thread: id = 199 os_tid = 0x70 Thread: id = 200 os_tid = 0x14c Thread: id = 201 os_tid = 0x44 Thread: id = 202 os_tid = 0x14 Thread: id = 203 os_tid = 0x64 Thread: id = 204 os_tid = 0x78 Thread: id = 205 os_tid = 0x1b4 Thread: id = 206 os_tid = 0x108 Thread: id = 207 os_tid = 0x180 Thread: id = 208 os_tid = 0x174 Thread: id = 209 os_tid = 0x170 Thread: id = 210 os_tid = 0x168 Thread: id = 211 os_tid = 0x20 Thread: id = 212 os_tid = 0x144 Thread: id = 213 os_tid = 0x12c Thread: id = 214 os_tid = 0x7c Thread: id = 215 os_tid = 0xf4 Thread: id = 216 os_tid = 0x34 Thread: id = 217 os_tid = 0xa8 Thread: id = 218 os_tid = 0x128 Thread: id = 219 os_tid = 0x124 Thread: id = 220 os_tid = 0xc4 Thread: id = 221 os_tid = 0xa4 Thread: id = 222 os_tid = 0xbc Thread: id = 223 os_tid = 0x60 Thread: id = 224 os_tid = 0x114 Thread: id = 225 os_tid = 0xb8 Thread: id = 226 os_tid = 0x88 Thread: id = 227 os_tid = 0xc0 Thread: id = 228 os_tid = 0xf0 Thread: id = 229 os_tid = 0x8 Thread: id = 455 os_tid = 0xae0 Thread: id = 466 os_tid = 0x4f0 Thread: id = 467 os_tid = 0xbe8 Thread: id = 471 os_tid = 0x2c Thread: id = 472 os_tid = 0x994 Thread: id = 473 os_tid = 0x28 Thread: id = 509 os_tid = 0x5c Thread: id = 519 os_tid = 0xe14 Thread: id = 520 os_tid = 0xdb8 Process: id = "10" image_name = "services.exe" filename = "c:\\windows\\system32\\services.exe" page_root = "0x4aa48000" os_pid = "0x1e8" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "created_daemon" parent_id = "7" os_parent_pid = "0x7a8" cmd_line = "C:\\Windows\\system32\\services.exe" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" os_groups = "BUILTIN\\Administrators" [0xe], "Everyone" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7] Region: id = 989 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 990 start_va = 0x5df6210000 end_va = 0x5df621ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000005df6210000" filename = "" Region: id = 991 start_va = 0x5df6220000 end_va = 0x5df6224fff entry_point = 0x5df6220000 region_type = mapped_file name = "services.exe.mui" filename = "\\Windows\\System32\\en-US\\services.exe.mui" (normalized: "c:\\windows\\system32\\en-us\\services.exe.mui") Region: id = 992 start_va = 0x5df6230000 end_va = 0x5df6243fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000005df6230000" filename = "" Region: id = 993 start_va = 0x5df62d0000 end_va = 0x5df62d3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000005df62d0000" filename = "" Region: id = 994 start_va = 0x5df62e0000 end_va = 0x5df62e0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000005df62e0000" filename = "" Region: id = 995 start_va = 0x5df62f0000 end_va = 0x5df63adfff entry_point = 0x5df62f0000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 996 start_va = 0x5df6430000 end_va = 0x5df6430fff entry_point = 0x0 region_type = private name = "private_0x0000005df6430000" filename = "" Region: id = 997 start_va = 0x5df6460000 end_va = 0x5df6466fff entry_point = 0x0 region_type = private name = "private_0x0000005df6460000" filename = "" Region: id = 998 start_va = 0x5df6470000 end_va = 0x5df64effff entry_point = 0x0 region_type = private name = "private_0x0000005df6470000" filename = "" Region: id = 999 start_va = 0x5df6500000 end_va = 0x5df65fffff entry_point = 0x0 region_type = private name = "private_0x0000005df6500000" filename = "" Region: id = 1000 start_va = 0x5df66e0000 end_va = 0x5df66e6fff entry_point = 0x0 region_type = private name = "private_0x0000005df66e0000" filename = "" Region: id = 1001 start_va = 0x5df6700000 end_va = 0x5df67fffff entry_point = 0x0 region_type = private name = "private_0x0000005df6700000" filename = "" Region: id = 1002 start_va = 0x5df6800000 end_va = 0x5df687ffff entry_point = 0x0 region_type = private name = "private_0x0000005df6800000" filename = "" Region: id = 1003 start_va = 0x5df6880000 end_va = 0x5df68fffff entry_point = 0x0 region_type = private name = "private_0x0000005df6880000" filename = "" Region: id = 1004 start_va = 0x5df6900000 end_va = 0x5df697ffff entry_point = 0x0 region_type = private name = "private_0x0000005df6900000" filename = "" Region: id = 1005 start_va = 0x5df6b00000 end_va = 0x5df6b7ffff entry_point = 0x0 region_type = private name = "private_0x0000005df6b00000" filename = "" Region: id = 1006 start_va = 0x5df6c00000 end_va = 0x5df6cfffff entry_point = 0x0 region_type = private name = "private_0x0000005df6c00000" filename = "" Region: id = 1007 start_va = 0x7df5ff8d0000 end_va = 0x7ff5ff8cffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007df5ff8d0000" filename = "" Region: id = 1008 start_va = 0x7ff79a786000 end_va = 0x7ff79a787fff entry_point = 0x0 region_type = private name = "private_0x00007ff79a786000" filename = "" Region: id = 1009 start_va = 0x7ff79a78e000 end_va = 0x7ff79a78ffff entry_point = 0x0 region_type = private name = "private_0x00007ff79a78e000" filename = "" Region: id = 1010 start_va = 0x7ff79a790000 end_va = 0x7ff79a88ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007ff79a790000" filename = "" Region: id = 1011 start_va = 0x7ff79a890000 end_va = 0x7ff79a8b2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007ff79a890000" filename = "" Region: id = 1012 start_va = 0x7ff79a8b3000 end_va = 0x7ff79a8b4fff entry_point = 0x0 region_type = private name = "private_0x00007ff79a8b3000" filename = "" Region: id = 1013 start_va = 0x7ff79a8b5000 end_va = 0x7ff79a8b6fff entry_point = 0x0 region_type = private name = "private_0x00007ff79a8b5000" filename = "" Region: id = 1014 start_va = 0x7ff79a8b7000 end_va = 0x7ff79a8b7fff entry_point = 0x0 region_type = private name = "private_0x00007ff79a8b7000" filename = "" Region: id = 1015 start_va = 0x7ff79a8ba000 end_va = 0x7ff79a8bbfff entry_point = 0x0 region_type = private name = "private_0x00007ff79a8ba000" filename = "" Region: id = 1016 start_va = 0x7ff79a960000 end_va = 0x7ff79a9cffff entry_point = 0x7ff79a960000 region_type = mapped_file name = "services.exe" filename = "\\Windows\\System32\\services.exe" (normalized: "c:\\windows\\system32\\services.exe") Region: id = 1017 start_va = 0x7ff8e7d10000 end_va = 0x7ff8e7d1ffff entry_point = 0x7ff8e7d10000 region_type = mapped_file name = "usermgrcli.dll" filename = "\\Windows\\System32\\usermgrcli.dll" (normalized: "c:\\windows\\system32\\usermgrcli.dll") Region: id = 1018 start_va = 0x7ff8e9ec0000 end_va = 0x7ff8e9f07fff entry_point = 0x7ff8e9ec0000 region_type = mapped_file name = "authz.dll" filename = "\\Windows\\System32\\authz.dll" (normalized: "c:\\windows\\system32\\authz.dll") Region: id = 1019 start_va = 0x7ff8e9f10000 end_va = 0x7ff8e9f9dfff entry_point = 0x7ff8e9f10000 region_type = mapped_file name = "scesrv.dll" filename = "\\Windows\\System32\\scesrv.dll" (normalized: "c:\\windows\\system32\\scesrv.dll") Region: id = 1020 start_va = 0x7ff8ea010000 end_va = 0x7ff8ea035fff entry_point = 0x7ff8ea010000 region_type = mapped_file name = "srvcli.dll" filename = "\\Windows\\System32\\srvcli.dll" (normalized: "c:\\windows\\system32\\srvcli.dll") Region: id = 1021 start_va = 0x7ff8ea5c0000 end_va = 0x7ff8ea61cfff entry_point = 0x7ff8ea5c0000 region_type = mapped_file name = "mswsock.dll" filename = "\\Windows\\System32\\mswsock.dll" (normalized: "c:\\windows\\system32\\mswsock.dll") Region: id = 1022 start_va = 0x7ff8ea9d0000 end_va = 0x7ff8ea9fbfff entry_point = 0x7ff8ea9d0000 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\System32\\sspicli.dll" (normalized: "c:\\windows\\system32\\sspicli.dll") Region: id = 1023 start_va = 0x7ff8eab80000 end_va = 0x7ff8eab9afff entry_point = 0x7ff8eab80000 region_type = mapped_file name = "spinf.dll" filename = "\\Windows\\System32\\SPInf.dll" (normalized: "c:\\windows\\system32\\spinf.dll") Region: id = 1024 start_va = 0x7ff8eaba0000 end_va = 0x7ff8eabb9fff entry_point = 0x7ff8eaba0000 region_type = mapped_file name = "eventaggregation.dll" filename = "\\Windows\\System32\\EventAggregation.dll" (normalized: "c:\\windows\\system32\\eventaggregation.dll") Region: id = 1025 start_va = 0x7ff8eabc0000 end_va = 0x7ff8eabc7fff entry_point = 0x7ff8eabc0000 region_type = mapped_file name = "dabapi.dll" filename = "\\Windows\\System32\\dabapi.dll" (normalized: "c:\\windows\\system32\\dabapi.dll") Region: id = 1026 start_va = 0x7ff8eac00000 end_va = 0x7ff8eac6afff entry_point = 0x7ff8eac00000 region_type = mapped_file name = "bcryptprimitives.dll" filename = "\\Windows\\System32\\bcryptprimitives.dll" (normalized: "c:\\windows\\system32\\bcryptprimitives.dll") Region: id = 1027 start_va = 0x7ff8eae30000 end_va = 0x7ff8eae42fff entry_point = 0x7ff8eae30000 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\System32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll") Region: id = 1028 start_va = 0x7ff8eb870000 end_va = 0x7ff8eba4cfff entry_point = 0x7ff8eb870000 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 1029 start_va = 0x7ff8ec240000 end_va = 0x7ff8ec29afff entry_point = 0x7ff8ec240000 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 1030 start_va = 0x7ff8ec450000 end_va = 0x7ff8ec575fff entry_point = 0x7ff8ec450000 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 1031 start_va = 0x7ff8ee040000 end_va = 0x7ff8ee0a8fff entry_point = 0x7ff8ee040000 region_type = mapped_file name = "ws2_32.dll" filename = "\\Windows\\System32\\ws2_32.dll" (normalized: "c:\\windows\\system32\\ws2_32.dll") Region: id = 1032 start_va = 0x7ff8ee0b0000 end_va = 0x7ff8ee14cfff entry_point = 0x7ff8ee0b0000 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 1033 start_va = 0x7ff8ee250000 end_va = 0x7ff8ee257fff entry_point = 0x7ff8ee250000 region_type = mapped_file name = "nsi.dll" filename = "\\Windows\\System32\\nsi.dll" (normalized: "c:\\windows\\system32\\nsi.dll") Region: id = 1034 start_va = 0x7ff8ee2d0000 end_va = 0x7ff8ee37cfff entry_point = 0x7ff8ee2d0000 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 1035 start_va = 0x7ff8ee380000 end_va = 0x7ff8ee541fff entry_point = 0x7ff8ee380000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Thread: id = 230 os_tid = 0x354 Thread: id = 231 os_tid = 0x324 Thread: id = 232 os_tid = 0x294 Thread: id = 233 os_tid = 0x260 Thread: id = 234 os_tid = 0x238 Thread: id = 464 os_tid = 0x630 Thread: id = 507 os_tid = 0x898 Process: id = "11" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x4a1df000" os_pid = "0x248" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "child_process" parent_id = "10" os_parent_pid = "0x1e8" cmd_line = "C:\\Windows\\system32\\svchost.exe -k DcomLaunch" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\BrokerInfrastructure" [0xa], "NT SERVICE\\DcomLaunch" [0xa], "NT SERVICE\\DeviceInstall" [0xa], "NT SERVICE\\LSM" [0xa], "NT SERVICE\\PlugPlay" [0xe], "NT SERVICE\\Power" [0xa], "NT SERVICE\\SystemEventsBroker" [0xa], "NT AUTHORITY\\Logon Session 00000000:00005f6e" [0xc000000f], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Region: id = 1117 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 1118 start_va = 0x82264c0000 end_va = 0x82264cffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000082264c0000" filename = "" Region: id = 1119 start_va = 0x82264d0000 end_va = 0x82264d4fff entry_point = 0x0 region_type = private name = "private_0x00000082264d0000" filename = "" Region: id = 1120 start_va = 0x82264e0000 end_va = 0x82264f3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000082264e0000" filename = "" Region: id = 1121 start_va = 0x8226500000 end_va = 0x822657ffff entry_point = 0x0 region_type = private name = "private_0x0000008226500000" filename = "" Region: id = 1122 start_va = 0x8226580000 end_va = 0x8226583fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000008226580000" filename = "" Region: id = 1123 start_va = 0x8226590000 end_va = 0x8226590fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000008226590000" filename = "" Region: id = 1124 start_va = 0x82265a0000 end_va = 0x82265a1fff entry_point = 0x0 region_type = private name = "private_0x00000082265a0000" filename = "" Region: id = 1125 start_va = 0x82265b0000 end_va = 0x822662ffff entry_point = 0x0 region_type = private name = "private_0x00000082265b0000" filename = "" Region: id = 1126 start_va = 0x8226630000 end_va = 0x8226630fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000008226630000" filename = "" Region: id = 1127 start_va = 0x8226640000 end_va = 0x8226640fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000008226640000" filename = "" Region: id = 1128 start_va = 0x8226650000 end_va = 0x8226650fff entry_point = 0x0 region_type = private name = "private_0x0000008226650000" filename = "" Region: id = 1129 start_va = 0x8226660000 end_va = 0x8226666fff entry_point = 0x0 region_type = private name = "private_0x0000008226660000" filename = "" Region: id = 1130 start_va = 0x8226670000 end_va = 0x82266effff entry_point = 0x0 region_type = private name = "private_0x0000008226670000" filename = "" Region: id = 1131 start_va = 0x82266f0000 end_va = 0x82266f0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000082266f0000" filename = "" Region: id = 1132 start_va = 0x8226700000 end_va = 0x82267fffff entry_point = 0x0 region_type = private name = "private_0x0000008226700000" filename = "" Region: id = 1133 start_va = 0x8226800000 end_va = 0x82268bdfff entry_point = 0x8226800000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 1134 start_va = 0x82268c0000 end_va = 0x82269bffff entry_point = 0x0 region_type = private name = "private_0x00000082268c0000" filename = "" Region: id = 1135 start_va = 0x82269c0000 end_va = 0x8226a3ffff entry_point = 0x0 region_type = private name = "private_0x00000082269c0000" filename = "" Region: id = 1136 start_va = 0x8226a40000 end_va = 0x8226abffff entry_point = 0x0 region_type = private name = "private_0x0000008226a40000" filename = "" Region: id = 1137 start_va = 0x8226ac0000 end_va = 0x8226ac0fff entry_point = 0x0 region_type = private name = "private_0x0000008226ac0000" filename = "" Region: id = 1138 start_va = 0x8226ad0000 end_va = 0x8226ad0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000008226ad0000" filename = "" Region: id = 1139 start_va = 0x8226ae0000 end_va = 0x8226ae0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000008226ae0000" filename = "" Region: id = 1140 start_va = 0x8226af0000 end_va = 0x8226af6fff entry_point = 0x0 region_type = private name = "private_0x0000008226af0000" filename = "" Region: id = 1141 start_va = 0x8226b00000 end_va = 0x8226bfffff entry_point = 0x0 region_type = private name = "private_0x0000008226b00000" filename = "" Region: id = 1142 start_va = 0x8226c00000 end_va = 0x8226c7ffff entry_point = 0x0 region_type = private name = "private_0x0000008226c00000" filename = "" Region: id = 1143 start_va = 0x8226c80000 end_va = 0x8226cfffff entry_point = 0x0 region_type = private name = "private_0x0000008226c80000" filename = "" Region: id = 1144 start_va = 0x8226d00000 end_va = 0x8226d02fff entry_point = 0x8226d00000 region_type = mapped_file name = "lsm.dll.mui" filename = "\\Windows\\System32\\en-US\\lsm.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\lsm.dll.mui") Region: id = 1145 start_va = 0x8226d10000 end_va = 0x8226d10fff entry_point = 0x8226d10000 region_type = mapped_file name = "svchost.exe.mui" filename = "\\Windows\\System32\\en-US\\svchost.exe.mui" (normalized: "c:\\windows\\system32\\en-us\\svchost.exe.mui") Region: id = 1146 start_va = 0x8226d20000 end_va = 0x8226d20fff entry_point = 0x0 region_type = private name = "private_0x0000008226d20000" filename = "" Region: id = 1147 start_va = 0x8226d30000 end_va = 0x8226d30fff entry_point = 0x0 region_type = private name = "private_0x0000008226d30000" filename = "" Region: id = 1148 start_va = 0x8226d40000 end_va = 0x8226d40fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000008226d40000" filename = "" Region: id = 1149 start_va = 0x8226d50000 end_va = 0x8226d50fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000008226d50000" filename = "" Region: id = 1150 start_va = 0x8226d70000 end_va = 0x8226d76fff entry_point = 0x0 region_type = private name = "private_0x0000008226d70000" filename = "" Region: id = 1151 start_va = 0x8226d80000 end_va = 0x8226dfffff entry_point = 0x0 region_type = private name = "private_0x0000008226d80000" filename = "" Region: id = 1152 start_va = 0x8226e00000 end_va = 0x8226efffff entry_point = 0x0 region_type = private name = "private_0x0000008226e00000" filename = "" Region: id = 1153 start_va = 0x8226f00000 end_va = 0x8226ffffff entry_point = 0x0 region_type = private name = "private_0x0000008226f00000" filename = "" Region: id = 1154 start_va = 0x8227000000 end_va = 0x82270fffff entry_point = 0x0 region_type = private name = "private_0x0000008227000000" filename = "" Region: id = 1155 start_va = 0x8227100000 end_va = 0x82271fffff entry_point = 0x0 region_type = private name = "private_0x0000008227100000" filename = "" Region: id = 1156 start_va = 0x8227200000 end_va = 0x82272fffff entry_point = 0x0 region_type = private name = "private_0x0000008227200000" filename = "" Region: id = 1157 start_va = 0x8227300000 end_va = 0x82273fffff entry_point = 0x0 region_type = private name = "private_0x0000008227300000" filename = "" Region: id = 1158 start_va = 0x8227400000 end_va = 0x82274fffff entry_point = 0x0 region_type = private name = "private_0x0000008227400000" filename = "" Region: id = 1159 start_va = 0x8227520000 end_va = 0x8227526fff entry_point = 0x0 region_type = private name = "private_0x0000008227520000" filename = "" Region: id = 1160 start_va = 0x8227530000 end_va = 0x82275effff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000008227530000" filename = "" Region: id = 1161 start_va = 0x8227600000 end_va = 0x82276fffff entry_point = 0x0 region_type = private name = "private_0x0000008227600000" filename = "" Region: id = 1162 start_va = 0x8227700000 end_va = 0x8227a36fff entry_point = 0x8227700000 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 1163 start_va = 0x8227a40000 end_va = 0x8227b3ffff entry_point = 0x0 region_type = private name = "private_0x0000008227a40000" filename = "" Region: id = 1164 start_va = 0x8227b40000 end_va = 0x8227bbffff entry_point = 0x0 region_type = private name = "private_0x0000008227b40000" filename = "" Region: id = 1165 start_va = 0x8227bc0000 end_va = 0x8227be9fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000008227bc0000" filename = "" Region: id = 1166 start_va = 0x8227c00000 end_va = 0x8227cfffff entry_point = 0x0 region_type = private name = "private_0x0000008227c00000" filename = "" Region: id = 1167 start_va = 0x8227d00000 end_va = 0x8227e87fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000008227d00000" filename = "" Region: id = 1168 start_va = 0x8227e90000 end_va = 0x8228010fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000008227e90000" filename = "" Region: id = 1169 start_va = 0x8228020000 end_va = 0x822811ffff entry_point = 0x0 region_type = private name = "private_0x0000008228020000" filename = "" Region: id = 1170 start_va = 0x8228120000 end_va = 0x822821ffff entry_point = 0x0 region_type = private name = "private_0x0000008228120000" filename = "" Region: id = 1171 start_va = 0x8228220000 end_va = 0x822831ffff entry_point = 0x0 region_type = private name = "private_0x0000008228220000" filename = "" Region: id = 1172 start_va = 0x8228320000 end_va = 0x822839ffff entry_point = 0x0 region_type = private name = "private_0x0000008228320000" filename = "" Region: id = 1173 start_va = 0x82283a0000 end_va = 0x822841ffff entry_point = 0x0 region_type = private name = "private_0x00000082283a0000" filename = "" Region: id = 1174 start_va = 0x8228420000 end_va = 0x822849ffff entry_point = 0x0 region_type = private name = "private_0x0000008228420000" filename = "" Region: id = 1175 start_va = 0x82284a0000 end_va = 0x822851ffff entry_point = 0x0 region_type = private name = "private_0x00000082284a0000" filename = "" Region: id = 1176 start_va = 0x7df5ffe00000 end_va = 0x7ff5ffdfffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007df5ffe00000" filename = "" Region: id = 1177 start_va = 0x7ff67319e000 end_va = 0x7ff67319ffff entry_point = 0x0 region_type = private name = "private_0x00007ff67319e000" filename = "" Region: id = 1178 start_va = 0x7ff6731a0000 end_va = 0x7ff6731a1fff entry_point = 0x0 region_type = private name = "private_0x00007ff6731a0000" filename = "" Region: id = 1179 start_va = 0x7ff6731a2000 end_va = 0x7ff6731a3fff entry_point = 0x0 region_type = private name = "private_0x00007ff6731a2000" filename = "" Region: id = 1180 start_va = 0x7ff6731a4000 end_va = 0x7ff6731a5fff entry_point = 0x0 region_type = private name = "private_0x00007ff6731a4000" filename = "" Region: id = 1181 start_va = 0x7ff6731a6000 end_va = 0x7ff6731a7fff entry_point = 0x0 region_type = private name = "private_0x00007ff6731a6000" filename = "" Region: id = 1182 start_va = 0x7ff6731a8000 end_va = 0x7ff6731a9fff entry_point = 0x0 region_type = private name = "private_0x00007ff6731a8000" filename = "" Region: id = 1183 start_va = 0x7ff6731aa000 end_va = 0x7ff6731abfff entry_point = 0x0 region_type = private name = "private_0x00007ff6731aa000" filename = "" Region: id = 1184 start_va = 0x7ff6731ac000 end_va = 0x7ff6731adfff entry_point = 0x0 region_type = private name = "private_0x00007ff6731ac000" filename = "" Region: id = 1185 start_va = 0x7ff6731ae000 end_va = 0x7ff6731affff entry_point = 0x0 region_type = private name = "private_0x00007ff6731ae000" filename = "" Region: id = 1186 start_va = 0x7ff6731b0000 end_va = 0x7ff6731b1fff entry_point = 0x0 region_type = private name = "private_0x00007ff6731b0000" filename = "" Region: id = 1187 start_va = 0x7ff6731b2000 end_va = 0x7ff6731b3fff entry_point = 0x0 region_type = private name = "private_0x00007ff6731b2000" filename = "" Region: id = 1188 start_va = 0x7ff6731b4000 end_va = 0x7ff6731b5fff entry_point = 0x0 region_type = private name = "private_0x00007ff6731b4000" filename = "" Region: id = 1189 start_va = 0x7ff6731b6000 end_va = 0x7ff6731b7fff entry_point = 0x0 region_type = private name = "private_0x00007ff6731b6000" filename = "" Region: id = 1190 start_va = 0x7ff6731b8000 end_va = 0x7ff6731b9fff entry_point = 0x0 region_type = private name = "private_0x00007ff6731b8000" filename = "" Region: id = 1191 start_va = 0x7ff6731ba000 end_va = 0x7ff6731bbfff entry_point = 0x0 region_type = private name = "private_0x00007ff6731ba000" filename = "" Region: id = 1192 start_va = 0x7ff6731bc000 end_va = 0x7ff6731bdfff entry_point = 0x0 region_type = private name = "private_0x00007ff6731bc000" filename = "" Region: id = 1193 start_va = 0x7ff6731be000 end_va = 0x7ff6731bffff entry_point = 0x0 region_type = private name = "private_0x00007ff6731be000" filename = "" Region: id = 1194 start_va = 0x7ff6731c0000 end_va = 0x7ff6732bffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007ff6731c0000" filename = "" Region: id = 1195 start_va = 0x7ff6732c0000 end_va = 0x7ff6732e2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007ff6732c0000" filename = "" Region: id = 1196 start_va = 0x7ff6732e3000 end_va = 0x7ff6732e4fff entry_point = 0x0 region_type = private name = "private_0x00007ff6732e3000" filename = "" Region: id = 1197 start_va = 0x7ff6732e5000 end_va = 0x7ff6732e5fff entry_point = 0x0 region_type = private name = "private_0x00007ff6732e5000" filename = "" Region: id = 1198 start_va = 0x7ff6732e6000 end_va = 0x7ff6732e7fff entry_point = 0x0 region_type = private name = "private_0x00007ff6732e6000" filename = "" Region: id = 1199 start_va = 0x7ff6732e8000 end_va = 0x7ff6732e9fff entry_point = 0x0 region_type = private name = "private_0x00007ff6732e8000" filename = "" Region: id = 1200 start_va = 0x7ff6732ea000 end_va = 0x7ff6732ebfff entry_point = 0x0 region_type = private name = "private_0x00007ff6732ea000" filename = "" Region: id = 1201 start_va = 0x7ff6732ec000 end_va = 0x7ff6732edfff entry_point = 0x0 region_type = private name = "private_0x00007ff6732ec000" filename = "" Region: id = 1202 start_va = 0x7ff6732ee000 end_va = 0x7ff6732effff entry_point = 0x0 region_type = private name = "private_0x00007ff6732ee000" filename = "" Region: id = 1203 start_va = 0x7ff673b40000 end_va = 0x7ff673b4cfff entry_point = 0x7ff673b40000 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 1204 start_va = 0x7ff8dee80000 end_va = 0x7ff8dee95fff entry_point = 0x7ff8dee80000 region_type = mapped_file name = "capauthz.dll" filename = "\\Windows\\System32\\capauthz.dll" (normalized: "c:\\windows\\system32\\capauthz.dll") Region: id = 1205 start_va = 0x7ff8deea0000 end_va = 0x7ff8deeabfff entry_point = 0x7ff8deea0000 region_type = mapped_file name = "licensemanagerapi.dll" filename = "\\Windows\\System32\\LicenseManagerApi.dll" (normalized: "c:\\windows\\system32\\licensemanagerapi.dll") Region: id = 1206 start_va = 0x7ff8df190000 end_va = 0x7ff8df1a4fff entry_point = 0x7ff8df190000 region_type = mapped_file name = "execmodelproxy.dll" filename = "\\Windows\\System32\\execmodelproxy.dll" (normalized: "c:\\windows\\system32\\execmodelproxy.dll") Region: id = 1207 start_va = 0x7ff8df1b0000 end_va = 0x7ff8df1bdfff entry_point = 0x7ff8df1b0000 region_type = mapped_file name = "sebbackgroundmanagerpolicy.dll" filename = "\\Windows\\System32\\SebBackgroundManagerPolicy.dll" (normalized: "c:\\windows\\system32\\sebbackgroundmanagerpolicy.dll") Region: id = 1208 start_va = 0x7ff8df1c0000 end_va = 0x7ff8df1d7fff entry_point = 0x7ff8df1c0000 region_type = mapped_file name = "windows.networking.backgroundtransfer.backgroundmanagerpolicy.dll" filename = "\\Windows\\System32\\Windows.Networking.BackgroundTransfer.BackgroundManagerPolicy.dll" (normalized: "c:\\windows\\system32\\windows.networking.backgroundtransfer.backgroundmanagerpolicy.dll") Region: id = 1209 start_va = 0x7ff8df1e0000 end_va = 0x7ff8df1f6fff entry_point = 0x7ff8df1e0000 region_type = mapped_file name = "acpbackgroundmanagerpolicy.dll" filename = "\\Windows\\System32\\ACPBackgroundManagerPolicy.dll" (normalized: "c:\\windows\\system32\\acpbackgroundmanagerpolicy.dll") Region: id = 1210 start_va = 0x7ff8df200000 end_va = 0x7ff8df20bfff entry_point = 0x7ff8df200000 region_type = mapped_file name = "cbtbackgroundmanagerpolicy.dll" filename = "\\Windows\\System32\\CbtBackgroundManagerPolicy.dll" (normalized: "c:\\windows\\system32\\cbtbackgroundmanagerpolicy.dll") Region: id = 1211 start_va = 0x7ff8df210000 end_va = 0x7ff8df21ffff entry_point = 0x7ff8df210000 region_type = mapped_file name = "backgroundmediapolicy.dll" filename = "\\Windows\\System32\\BackgroundMediaPolicy.dll" (normalized: "c:\\windows\\system32\\backgroundmediapolicy.dll") Region: id = 1212 start_va = 0x7ff8df3b0000 end_va = 0x7ff8df3f2fff entry_point = 0x7ff8df3b0000 region_type = mapped_file name = "execmodelclient.dll" filename = "\\Windows\\System32\\ExecModelClient.dll" (normalized: "c:\\windows\\system32\\execmodelclient.dll") Region: id = 1213 start_va = 0x7ff8df640000 end_va = 0x7ff8dfaa9fff entry_point = 0x7ff8df640000 region_type = mapped_file name = "actxprxy.dll" filename = "\\Windows\\System32\\actxprxy.dll" (normalized: "c:\\windows\\system32\\actxprxy.dll") Region: id = 1214 start_va = 0x7ff8e60a0000 end_va = 0x7ff8e6131fff entry_point = 0x7ff8e60a0000 region_type = mapped_file name = "msvcp110_win.dll" filename = "\\Windows\\System32\\msvcp110_win.dll" (normalized: "c:\\windows\\system32\\msvcp110_win.dll") Region: id = 1215 start_va = 0x7ff8e79b0000 end_va = 0x7ff8e7b32fff entry_point = 0x7ff8e79b0000 region_type = mapped_file name = "propsys.dll" filename = "\\Windows\\System32\\propsys.dll" (normalized: "c:\\windows\\system32\\propsys.dll") Region: id = 1216 start_va = 0x7ff8e7b40000 end_va = 0x7ff8e7bb1fff entry_point = 0x7ff8e7b40000 region_type = mapped_file name = "mmdevapi.dll" filename = "\\Windows\\System32\\MMDevAPI.dll" (normalized: "c:\\windows\\system32\\mmdevapi.dll") Region: id = 1217 start_va = 0x7ff8e7d10000 end_va = 0x7ff8e7d1ffff entry_point = 0x7ff8e7d10000 region_type = mapped_file name = "usermgrcli.dll" filename = "\\Windows\\System32\\usermgrcli.dll" (normalized: "c:\\windows\\system32\\usermgrcli.dll") Region: id = 1218 start_va = 0x7ff8e8040000 end_va = 0x7ff8e804bfff entry_point = 0x7ff8e8040000 region_type = mapped_file name = "bi.dll" filename = "\\Windows\\System32\\bi.dll" (normalized: "c:\\windows\\system32\\bi.dll") Region: id = 1219 start_va = 0x7ff8e8ad0000 end_va = 0x7ff8e8ae2fff entry_point = 0x7ff8e8ad0000 region_type = mapped_file name = "wtsapi32.dll" filename = "\\Windows\\System32\\wtsapi32.dll" (normalized: "c:\\windows\\system32\\wtsapi32.dll") Region: id = 1220 start_va = 0x7ff8e9060000 end_va = 0x7ff8e9127fff entry_point = 0x7ff8e9060000 region_type = mapped_file name = "coremessaging.dll" filename = "\\Windows\\System32\\CoreMessaging.dll" (normalized: "c:\\windows\\system32\\coremessaging.dll") Region: id = 1221 start_va = 0x7ff8e9580000 end_va = 0x7ff8e95a0fff entry_point = 0x7ff8e9580000 region_type = mapped_file name = "dab.dll" filename = "\\Windows\\System32\\dab.dll" (normalized: "c:\\windows\\system32\\dab.dll") Region: id = 1222 start_va = 0x7ff8e95b0000 end_va = 0x7ff8e95eefff entry_point = 0x7ff8e95b0000 region_type = mapped_file name = "brokerlib.dll" filename = "\\Windows\\System32\\BrokerLib.dll" (normalized: "c:\\windows\\system32\\brokerlib.dll") Region: id = 1223 start_va = 0x7ff8e95f0000 end_va = 0x7ff8e9651fff entry_point = 0x7ff8e95f0000 region_type = mapped_file name = "systemeventsbrokerserver.dll" filename = "\\Windows\\System32\\SystemEventsBrokerServer.dll" (normalized: "c:\\windows\\system32\\systemeventsbrokerserver.dll") Region: id = 1224 start_va = 0x7ff8e9720000 end_va = 0x7ff8e9746fff entry_point = 0x7ff8e9720000 region_type = mapped_file name = "devobj.dll" filename = "\\Windows\\System32\\devobj.dll" (normalized: "c:\\windows\\system32\\devobj.dll") Region: id = 1225 start_va = 0x7ff8e9770000 end_va = 0x7ff8e9778fff entry_point = 0x7ff8e9770000 region_type = mapped_file name = "wmsgapi.dll" filename = "\\Windows\\System32\\wmsgapi.dll" (normalized: "c:\\windows\\system32\\wmsgapi.dll") Region: id = 1226 start_va = 0x7ff8e9780000 end_va = 0x7ff8e978bfff entry_point = 0x7ff8e9780000 region_type = mapped_file name = "sysntfy.dll" filename = "\\Windows\\System32\\sysntfy.dll" (normalized: "c:\\windows\\system32\\sysntfy.dll") Region: id = 1227 start_va = 0x7ff8e9790000 end_va = 0x7ff8e9850fff entry_point = 0x7ff8e9790000 region_type = mapped_file name = "lsm.dll" filename = "\\Windows\\System32\\lsm.dll" (normalized: "c:\\windows\\system32\\lsm.dll") Region: id = 1228 start_va = 0x7ff8e9860000 end_va = 0x7ff8e994dfff entry_point = 0x7ff8e9860000 region_type = mapped_file name = "twinapi.appcore.dll" filename = "\\Windows\\System32\\twinapi.appcore.dll" (normalized: "c:\\windows\\system32\\twinapi.appcore.dll") Region: id = 1229 start_va = 0x7ff8e9950000 end_va = 0x7ff8e99d3fff entry_point = 0x7ff8e9950000 region_type = mapped_file name = "psmserviceexthost.dll" filename = "\\Windows\\System32\\PsmServiceExtHost.dll" (normalized: "c:\\windows\\system32\\psmserviceexthost.dll") Region: id = 1230 start_va = 0x7ff8e99e0000 end_va = 0x7ff8e9a07fff entry_point = 0x7ff8e99e0000 region_type = mapped_file name = "rmclient.dll" filename = "\\Windows\\System32\\rmclient.dll" (normalized: "c:\\windows\\system32\\rmclient.dll") Region: id = 1231 start_va = 0x7ff8e9a10000 end_va = 0x7ff8e9a41fff entry_point = 0x7ff8e9a10000 region_type = mapped_file name = "psmsrv.dll" filename = "\\Windows\\System32\\psmsrv.dll" (normalized: "c:\\windows\\system32\\psmsrv.dll") Region: id = 1232 start_va = 0x7ff8e9a50000 end_va = 0x7ff8e9ad5fff entry_point = 0x7ff8e9a50000 region_type = mapped_file name = "bisrv.dll" filename = "\\Windows\\System32\\bisrv.dll" (normalized: "c:\\windows\\system32\\bisrv.dll") Region: id = 1233 start_va = 0x7ff8e9bf0000 end_va = 0x7ff8e9ccafff entry_point = 0x7ff8e9bf0000 region_type = mapped_file name = "rpcss.dll" filename = "\\Windows\\System32\\rpcss.dll" (normalized: "c:\\windows\\system32\\rpcss.dll") Region: id = 1234 start_va = 0x7ff8e9cd0000 end_va = 0x7ff8e9cf2fff entry_point = 0x7ff8e9cd0000 region_type = mapped_file name = "gpapi.dll" filename = "\\Windows\\System32\\gpapi.dll" (normalized: "c:\\windows\\system32\\gpapi.dll") Region: id = 1235 start_va = 0x7ff8e9d00000 end_va = 0x7ff8e9df7fff entry_point = 0x7ff8e9d00000 region_type = mapped_file name = "tdh.dll" filename = "\\Windows\\System32\\tdh.dll" (normalized: "c:\\windows\\system32\\tdh.dll") Region: id = 1236 start_va = 0x7ff8e9e00000 end_va = 0x7ff8e9e0bfff entry_point = 0x7ff8e9e00000 region_type = mapped_file name = "hid.dll" filename = "\\Windows\\System32\\hid.dll" (normalized: "c:\\windows\\system32\\hid.dll") Region: id = 1237 start_va = 0x7ff8e9e10000 end_va = 0x7ff8e9e25fff entry_point = 0x7ff8e9e10000 region_type = mapped_file name = "umpoext.dll" filename = "\\Windows\\System32\\umpoext.dll" (normalized: "c:\\windows\\system32\\umpoext.dll") Region: id = 1238 start_va = 0x7ff8e9e30000 end_va = 0x7ff8e9e4afff entry_point = 0x7ff8e9e30000 region_type = mapped_file name = "umpo.dll" filename = "\\Windows\\System32\\umpo.dll" (normalized: "c:\\windows\\system32\\umpo.dll") Region: id = 1239 start_va = 0x7ff8e9e50000 end_va = 0x7ff8e9e6ffff entry_point = 0x7ff8e9e50000 region_type = mapped_file name = "umpnpmgr.dll" filename = "\\Windows\\System32\\umpnpmgr.dll" (normalized: "c:\\windows\\system32\\umpnpmgr.dll") Region: id = 1240 start_va = 0x7ff8ea270000 end_va = 0x7ff8ea2a2fff entry_point = 0x7ff8ea270000 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\System32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll") Region: id = 1241 start_va = 0x7ff8ea360000 end_va = 0x7ff8ea37efff entry_point = 0x7ff8ea360000 region_type = mapped_file name = "userenv.dll" filename = "\\Windows\\System32\\userenv.dll" (normalized: "c:\\windows\\system32\\userenv.dll") Region: id = 1242 start_va = 0x7ff8ea620000 end_va = 0x7ff8ea636fff entry_point = 0x7ff8ea620000 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\System32\\cryptsp.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll") Region: id = 1243 start_va = 0x7ff8ea790000 end_va = 0x7ff8ea79afff entry_point = 0x7ff8ea790000 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\System32\\cryptbase.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll") Region: id = 1244 start_va = 0x7ff8ea820000 end_va = 0x7ff8ea877fff entry_point = 0x7ff8ea820000 region_type = mapped_file name = "winsta.dll" filename = "\\Windows\\System32\\winsta.dll" (normalized: "c:\\windows\\system32\\winsta.dll") Region: id = 1245 start_va = 0x7ff8ea9d0000 end_va = 0x7ff8ea9fbfff entry_point = 0x7ff8ea9d0000 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\System32\\sspicli.dll" (normalized: "c:\\windows\\system32\\sspicli.dll") Region: id = 1246 start_va = 0x7ff8eaba0000 end_va = 0x7ff8eabb9fff entry_point = 0x7ff8eaba0000 region_type = mapped_file name = "eventaggregation.dll" filename = "\\Windows\\System32\\EventAggregation.dll" (normalized: "c:\\windows\\system32\\eventaggregation.dll") Region: id = 1247 start_va = 0x7ff8eabd0000 end_va = 0x7ff8eabf7fff entry_point = 0x7ff8eabd0000 region_type = mapped_file name = "bcrypt.dll" filename = "\\Windows\\System32\\bcrypt.dll" (normalized: "c:\\windows\\system32\\bcrypt.dll") Region: id = 1248 start_va = 0x7ff8eac00000 end_va = 0x7ff8eac6afff entry_point = 0x7ff8eac00000 region_type = mapped_file name = "bcryptprimitives.dll" filename = "\\Windows\\System32\\bcryptprimitives.dll" (normalized: "c:\\windows\\system32\\bcryptprimitives.dll") Region: id = 1249 start_va = 0x7ff8eadd0000 end_va = 0x7ff8eae19fff entry_point = 0x7ff8eadd0000 region_type = mapped_file name = "powrprof.dll" filename = "\\Windows\\System32\\powrprof.dll" (normalized: "c:\\windows\\system32\\powrprof.dll") Region: id = 1250 start_va = 0x7ff8eae20000 end_va = 0x7ff8eae2efff entry_point = 0x7ff8eae20000 region_type = mapped_file name = "kernel.appcore.dll" filename = "\\Windows\\System32\\kernel.appcore.dll" (normalized: "c:\\windows\\system32\\kernel.appcore.dll") Region: id = 1251 start_va = 0x7ff8eae30000 end_va = 0x7ff8eae42fff entry_point = 0x7ff8eae30000 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\System32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll") Region: id = 1252 start_va = 0x7ff8eaf60000 end_va = 0x7ff8eafa3fff entry_point = 0x7ff8eaf60000 region_type = mapped_file name = "cfgmgr32.dll" filename = "\\Windows\\System32\\cfgmgr32.dll" (normalized: "c:\\windows\\system32\\cfgmgr32.dll") Region: id = 1253 start_va = 0x7ff8eb870000 end_va = 0x7ff8eba4cfff entry_point = 0x7ff8eb870000 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 1254 start_va = 0x7ff8ebb30000 end_va = 0x7ff8ebbedfff entry_point = 0x7ff8ebb30000 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll") Region: id = 1255 start_va = 0x7ff8ebdc0000 end_va = 0x7ff8ebf0dfff entry_point = 0x7ff8ebdc0000 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 1256 start_va = 0x7ff8ec240000 end_va = 0x7ff8ec29afff entry_point = 0x7ff8ec240000 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 1257 start_va = 0x7ff8ec300000 end_va = 0x7ff8ec440fff entry_point = 0x7ff8ec300000 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll") Region: id = 1258 start_va = 0x7ff8ec450000 end_va = 0x7ff8ec575fff entry_point = 0x7ff8ec450000 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 1259 start_va = 0x7ff8edb10000 end_va = 0x7ff8edbb4fff entry_point = 0x7ff8edb10000 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\System32\\clbcatq.dll" (normalized: "c:\\windows\\system32\\clbcatq.dll") Region: id = 1260 start_va = 0x7ff8edbc0000 end_va = 0x7ff8edd44fff entry_point = 0x7ff8edbc0000 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 1261 start_va = 0x7ff8edd60000 end_va = 0x7ff8edfdbfff entry_point = 0x7ff8edd60000 region_type = mapped_file name = "combase.dll" filename = "\\Windows\\System32\\combase.dll" (normalized: "c:\\windows\\system32\\combase.dll") Region: id = 1262 start_va = 0x7ff8ee0b0000 end_va = 0x7ff8ee14cfff entry_point = 0x7ff8ee0b0000 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 1263 start_va = 0x7ff8ee190000 end_va = 0x7ff8ee235fff entry_point = 0x7ff8ee190000 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 1264 start_va = 0x7ff8ee260000 end_va = 0x7ff8ee2cefff entry_point = 0x7ff8ee260000 region_type = mapped_file name = "coml2.dll" filename = "\\Windows\\System32\\coml2.dll" (normalized: "c:\\windows\\system32\\coml2.dll") Region: id = 1265 start_va = 0x7ff8ee2d0000 end_va = 0x7ff8ee37cfff entry_point = 0x7ff8ee2d0000 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 1266 start_va = 0x7ff8ee380000 end_va = 0x7ff8ee541fff entry_point = 0x7ff8ee380000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Thread: id = 235 os_tid = 0xfa0 Thread: id = 236 os_tid = 0x6b8 Thread: id = 237 os_tid = 0xa58 Thread: id = 238 os_tid = 0xa5c Thread: id = 239 os_tid = 0xbd8 Thread: id = 240 os_tid = 0x8a0 Thread: id = 241 os_tid = 0x5d0 Thread: id = 242 os_tid = 0x484 Thread: id = 243 os_tid = 0x404 Thread: id = 244 os_tid = 0x424 Thread: id = 245 os_tid = 0x244 Thread: id = 246 os_tid = 0x578 Thread: id = 247 os_tid = 0x3dc Thread: id = 248 os_tid = 0x328 Thread: id = 249 os_tid = 0x320 Thread: id = 250 os_tid = 0x2d4 Thread: id = 251 os_tid = 0x2d0 Thread: id = 252 os_tid = 0x2ac Thread: id = 253 os_tid = 0x2a8 Thread: id = 254 os_tid = 0x288 Thread: id = 255 os_tid = 0x270 Thread: id = 256 os_tid = 0x25c Thread: id = 257 os_tid = 0x24c Thread: id = 465 os_tid = 0xaf0 Thread: id = 505 os_tid = 0xe00 Thread: id = 508 os_tid = 0xd0c Process: id = "12" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x49a64000" os_pid = "0x268" os_integrity_level = "0x4000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "10" os_parent_pid = "0x1e8" cmd_line = "C:\\Windows\\system32\\svchost.exe -k RPCSS" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\Network Service" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\RpcEptMapper" [0xe], "NT SERVICE\\RpcSs" [0xa], "NT AUTHORITY\\Logon Session 00000000:00008f38" [0xc000000f], "LOCAL" [0x7] Region: id = 1036 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 1037 start_va = 0x7976fb0000 end_va = 0x7976fbffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000007976fb0000" filename = "" Region: id = 1038 start_va = 0x7976fc0000 end_va = 0x7976fc2fff entry_point = 0x7976fc0000 region_type = mapped_file name = "mswsock.dll.mui" filename = "\\Windows\\System32\\en-US\\mswsock.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\mswsock.dll.mui") Region: id = 1039 start_va = 0x7976fd0000 end_va = 0x7976fe3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000007976fd0000" filename = "" Region: id = 1040 start_va = 0x7976ff0000 end_va = 0x797706ffff entry_point = 0x0 region_type = private name = "private_0x0000007976ff0000" filename = "" Region: id = 1041 start_va = 0x7977070000 end_va = 0x7977073fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000007977070000" filename = "" Region: id = 1042 start_va = 0x7977080000 end_va = 0x7977080fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000007977080000" filename = "" Region: id = 1043 start_va = 0x7977090000 end_va = 0x7977091fff entry_point = 0x0 region_type = private name = "private_0x0000007977090000" filename = "" Region: id = 1044 start_va = 0x79770a0000 end_va = 0x797715dfff entry_point = 0x79770a0000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 1045 start_va = 0x7977160000 end_va = 0x7977160fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000007977160000" filename = "" Region: id = 1046 start_va = 0x7977170000 end_va = 0x7977176fff entry_point = 0x0 region_type = private name = "private_0x0000007977170000" filename = "" Region: id = 1047 start_va = 0x7977180000 end_va = 0x7977180fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000007977180000" filename = "" Region: id = 1048 start_va = 0x79771a0000 end_va = 0x79771a6fff entry_point = 0x0 region_type = private name = "private_0x00000079771a0000" filename = "" Region: id = 1049 start_va = 0x7977200000 end_va = 0x79772fffff entry_point = 0x0 region_type = private name = "private_0x0000007977200000" filename = "" Region: id = 1050 start_va = 0x7977380000 end_va = 0x79773fffff entry_point = 0x0 region_type = private name = "private_0x0000007977380000" filename = "" Region: id = 1051 start_va = 0x7977480000 end_va = 0x797757ffff entry_point = 0x0 region_type = private name = "private_0x0000007977480000" filename = "" Region: id = 1052 start_va = 0x7977600000 end_va = 0x79776fffff entry_point = 0x0 region_type = private name = "private_0x0000007977600000" filename = "" Region: id = 1053 start_va = 0x7977700000 end_va = 0x7977a36fff entry_point = 0x7977700000 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 1054 start_va = 0x7977a40000 end_va = 0x7977b3ffff entry_point = 0x0 region_type = private name = "private_0x0000007977a40000" filename = "" Region: id = 1055 start_va = 0x7977b40000 end_va = 0x7977c3ffff entry_point = 0x0 region_type = private name = "private_0x0000007977b40000" filename = "" Region: id = 1056 start_va = 0x7977c40000 end_va = 0x7977d3ffff entry_point = 0x0 region_type = private name = "private_0x0000007977c40000" filename = "" Region: id = 1057 start_va = 0x7977d40000 end_va = 0x7977e3ffff entry_point = 0x0 region_type = private name = "private_0x0000007977d40000" filename = "" Region: id = 1058 start_va = 0x7977e40000 end_va = 0x7977f3ffff entry_point = 0x0 region_type = private name = "private_0x0000007977e40000" filename = "" Region: id = 1059 start_va = 0x7977f40000 end_va = 0x797803ffff entry_point = 0x0 region_type = private name = "private_0x0000007977f40000" filename = "" Region: id = 1060 start_va = 0x7978040000 end_va = 0x797813ffff entry_point = 0x0 region_type = private name = "private_0x0000007978040000" filename = "" Region: id = 1061 start_va = 0x7978200000 end_va = 0x79782fffff entry_point = 0x0 region_type = private name = "private_0x0000007978200000" filename = "" Region: id = 1062 start_va = 0x7978300000 end_va = 0x79783fffff entry_point = 0x0 region_type = private name = "private_0x0000007978300000" filename = "" Region: id = 1063 start_va = 0x7978400000 end_va = 0x79784fffff entry_point = 0x0 region_type = private name = "private_0x0000007978400000" filename = "" Region: id = 1064 start_va = 0x7978500000 end_va = 0x79785fffff entry_point = 0x0 region_type = private name = "private_0x0000007978500000" filename = "" Region: id = 1065 start_va = 0x7978600000 end_va = 0x79786fffff entry_point = 0x0 region_type = private name = "private_0x0000007978600000" filename = "" Region: id = 1066 start_va = 0x7978700000 end_va = 0x79787fffff entry_point = 0x0 region_type = private name = "private_0x0000007978700000" filename = "" Region: id = 1067 start_va = 0x7df5ff270000 end_va = 0x7ff5ff26ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007df5ff270000" filename = "" Region: id = 1068 start_va = 0x7ff672d0c000 end_va = 0x7ff672d0dfff entry_point = 0x0 region_type = private name = "private_0x00007ff672d0c000" filename = "" Region: id = 1069 start_va = 0x7ff672d0e000 end_va = 0x7ff672d0ffff entry_point = 0x0 region_type = private name = "private_0x00007ff672d0e000" filename = "" Region: id = 1070 start_va = 0x7ff672d10000 end_va = 0x7ff672d11fff entry_point = 0x0 region_type = private name = "private_0x00007ff672d10000" filename = "" Region: id = 1071 start_va = 0x7ff672d12000 end_va = 0x7ff672d13fff entry_point = 0x0 region_type = private name = "private_0x00007ff672d12000" filename = "" Region: id = 1072 start_va = 0x7ff672d14000 end_va = 0x7ff672d15fff entry_point = 0x0 region_type = private name = "private_0x00007ff672d14000" filename = "" Region: id = 1073 start_va = 0x7ff672d16000 end_va = 0x7ff672d17fff entry_point = 0x0 region_type = private name = "private_0x00007ff672d16000" filename = "" Region: id = 1074 start_va = 0x7ff672d18000 end_va = 0x7ff672d19fff entry_point = 0x0 region_type = private name = "private_0x00007ff672d18000" filename = "" Region: id = 1075 start_va = 0x7ff672d1a000 end_va = 0x7ff672d1bfff entry_point = 0x0 region_type = private name = "private_0x00007ff672d1a000" filename = "" Region: id = 1076 start_va = 0x7ff672d1c000 end_va = 0x7ff672d1dfff entry_point = 0x0 region_type = private name = "private_0x00007ff672d1c000" filename = "" Region: id = 1077 start_va = 0x7ff672d1e000 end_va = 0x7ff672d1ffff entry_point = 0x0 region_type = private name = "private_0x00007ff672d1e000" filename = "" Region: id = 1078 start_va = 0x7ff672d20000 end_va = 0x7ff672e1ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007ff672d20000" filename = "" Region: id = 1079 start_va = 0x7ff672e20000 end_va = 0x7ff672e42fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007ff672e20000" filename = "" Region: id = 1080 start_va = 0x7ff672e44000 end_va = 0x7ff672e45fff entry_point = 0x0 region_type = private name = "private_0x00007ff672e44000" filename = "" Region: id = 1081 start_va = 0x7ff672e46000 end_va = 0x7ff672e47fff entry_point = 0x0 region_type = private name = "private_0x00007ff672e46000" filename = "" Region: id = 1082 start_va = 0x7ff672e48000 end_va = 0x7ff672e49fff entry_point = 0x0 region_type = private name = "private_0x00007ff672e48000" filename = "" Region: id = 1083 start_va = 0x7ff672e4a000 end_va = 0x7ff672e4afff entry_point = 0x0 region_type = private name = "private_0x00007ff672e4a000" filename = "" Region: id = 1084 start_va = 0x7ff672e4c000 end_va = 0x7ff672e4dfff entry_point = 0x0 region_type = private name = "private_0x00007ff672e4c000" filename = "" Region: id = 1085 start_va = 0x7ff672e4e000 end_va = 0x7ff672e4ffff entry_point = 0x0 region_type = private name = "private_0x00007ff672e4e000" filename = "" Region: id = 1086 start_va = 0x7ff673b40000 end_va = 0x7ff673b4cfff entry_point = 0x7ff673b40000 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 1087 start_va = 0x7ff8dee80000 end_va = 0x7ff8dee95fff entry_point = 0x7ff8dee80000 region_type = mapped_file name = "capauthz.dll" filename = "\\Windows\\System32\\capauthz.dll" (normalized: "c:\\windows\\system32\\capauthz.dll") Region: id = 1088 start_va = 0x7ff8e7160000 end_va = 0x7ff8e71c7fff entry_point = 0x7ff8e7160000 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 1089 start_va = 0x7ff8e7d10000 end_va = 0x7ff8e7d1ffff entry_point = 0x7ff8e7d10000 region_type = mapped_file name = "usermgrcli.dll" filename = "\\Windows\\System32\\usermgrcli.dll" (normalized: "c:\\windows\\system32\\usermgrcli.dll") Region: id = 1090 start_va = 0x7ff8e8ad0000 end_va = 0x7ff8e8ae2fff entry_point = 0x7ff8e8ad0000 region_type = mapped_file name = "wtsapi32.dll" filename = "\\Windows\\System32\\wtsapi32.dll" (normalized: "c:\\windows\\system32\\wtsapi32.dll") Region: id = 1091 start_va = 0x7ff8e9ae0000 end_va = 0x7ff8e9b11fff entry_point = 0x7ff8e9ae0000 region_type = mapped_file name = "fwbase.dll" filename = "\\Windows\\System32\\fwbase.dll" (normalized: "c:\\windows\\system32\\fwbase.dll") Region: id = 1092 start_va = 0x7ff8e9b20000 end_va = 0x7ff8e9ba1fff entry_point = 0x7ff8e9b20000 region_type = mapped_file name = "firewallapi.dll" filename = "\\Windows\\System32\\FirewallAPI.dll" (normalized: "c:\\windows\\system32\\firewallapi.dll") Region: id = 1093 start_va = 0x7ff8e9bb0000 end_va = 0x7ff8e9bc2fff entry_point = 0x7ff8e9bb0000 region_type = mapped_file name = "rpcrtremote.dll" filename = "\\Windows\\System32\\RpcRtRemote.dll" (normalized: "c:\\windows\\system32\\rpcrtremote.dll") Region: id = 1094 start_va = 0x7ff8e9bd0000 end_va = 0x7ff8e9be6fff entry_point = 0x7ff8e9bd0000 region_type = mapped_file name = "rpcepmap.dll" filename = "\\Windows\\System32\\RpcEpMap.dll" (normalized: "c:\\windows\\system32\\rpcepmap.dll") Region: id = 1095 start_va = 0x7ff8e9bf0000 end_va = 0x7ff8e9ccafff entry_point = 0x7ff8e9bf0000 region_type = mapped_file name = "rpcss.dll" filename = "\\Windows\\System32\\rpcss.dll" (normalized: "c:\\windows\\system32\\rpcss.dll") Region: id = 1096 start_va = 0x7ff8ea270000 end_va = 0x7ff8ea2a2fff entry_point = 0x7ff8ea270000 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\System32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll") Region: id = 1097 start_va = 0x7ff8ea5c0000 end_va = 0x7ff8ea61cfff entry_point = 0x7ff8ea5c0000 region_type = mapped_file name = "mswsock.dll" filename = "\\Windows\\System32\\mswsock.dll" (normalized: "c:\\windows\\system32\\mswsock.dll") Region: id = 1098 start_va = 0x7ff8ea620000 end_va = 0x7ff8ea636fff entry_point = 0x7ff8ea620000 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\System32\\cryptsp.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll") Region: id = 1099 start_va = 0x7ff8ea790000 end_va = 0x7ff8ea79afff entry_point = 0x7ff8ea790000 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\System32\\cryptbase.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll") Region: id = 1100 start_va = 0x7ff8ea820000 end_va = 0x7ff8ea877fff entry_point = 0x7ff8ea820000 region_type = mapped_file name = "winsta.dll" filename = "\\Windows\\System32\\winsta.dll" (normalized: "c:\\windows\\system32\\winsta.dll") Region: id = 1101 start_va = 0x7ff8ea9d0000 end_va = 0x7ff8ea9fbfff entry_point = 0x7ff8ea9d0000 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\System32\\sspicli.dll" (normalized: "c:\\windows\\system32\\sspicli.dll") Region: id = 1102 start_va = 0x7ff8eabd0000 end_va = 0x7ff8eabf7fff entry_point = 0x7ff8eabd0000 region_type = mapped_file name = "bcrypt.dll" filename = "\\Windows\\System32\\bcrypt.dll" (normalized: "c:\\windows\\system32\\bcrypt.dll") Region: id = 1103 start_va = 0x7ff8eac00000 end_va = 0x7ff8eac6afff entry_point = 0x7ff8eac00000 region_type = mapped_file name = "bcryptprimitives.dll" filename = "\\Windows\\System32\\bcryptprimitives.dll" (normalized: "c:\\windows\\system32\\bcryptprimitives.dll") Region: id = 1104 start_va = 0x7ff8eadd0000 end_va = 0x7ff8eae19fff entry_point = 0x7ff8eadd0000 region_type = mapped_file name = "powrprof.dll" filename = "\\Windows\\System32\\powrprof.dll" (normalized: "c:\\windows\\system32\\powrprof.dll") Region: id = 1105 start_va = 0x7ff8eae20000 end_va = 0x7ff8eae2efff entry_point = 0x7ff8eae20000 region_type = mapped_file name = "kernel.appcore.dll" filename = "\\Windows\\System32\\kernel.appcore.dll" (normalized: "c:\\windows\\system32\\kernel.appcore.dll") Region: id = 1106 start_va = 0x7ff8eb870000 end_va = 0x7ff8eba4cfff entry_point = 0x7ff8eb870000 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 1107 start_va = 0x7ff8ec240000 end_va = 0x7ff8ec29afff entry_point = 0x7ff8ec240000 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 1108 start_va = 0x7ff8ec450000 end_va = 0x7ff8ec575fff entry_point = 0x7ff8ec450000 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 1109 start_va = 0x7ff8edb10000 end_va = 0x7ff8edbb4fff entry_point = 0x7ff8edb10000 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\System32\\clbcatq.dll" (normalized: "c:\\windows\\system32\\clbcatq.dll") Region: id = 1110 start_va = 0x7ff8edd60000 end_va = 0x7ff8edfdbfff entry_point = 0x7ff8edd60000 region_type = mapped_file name = "combase.dll" filename = "\\Windows\\System32\\combase.dll" (normalized: "c:\\windows\\system32\\combase.dll") Region: id = 1111 start_va = 0x7ff8ee040000 end_va = 0x7ff8ee0a8fff entry_point = 0x7ff8ee040000 region_type = mapped_file name = "ws2_32.dll" filename = "\\Windows\\System32\\ws2_32.dll" (normalized: "c:\\windows\\system32\\ws2_32.dll") Region: id = 1112 start_va = 0x7ff8ee0b0000 end_va = 0x7ff8ee14cfff entry_point = 0x7ff8ee0b0000 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 1113 start_va = 0x7ff8ee190000 end_va = 0x7ff8ee235fff entry_point = 0x7ff8ee190000 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 1114 start_va = 0x7ff8ee250000 end_va = 0x7ff8ee257fff entry_point = 0x7ff8ee250000 region_type = mapped_file name = "nsi.dll" filename = "\\Windows\\System32\\nsi.dll" (normalized: "c:\\windows\\system32\\nsi.dll") Region: id = 1115 start_va = 0x7ff8ee2d0000 end_va = 0x7ff8ee37cfff entry_point = 0x7ff8ee2d0000 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 1116 start_va = 0x7ff8ee380000 end_va = 0x7ff8ee541fff entry_point = 0x7ff8ee380000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Thread: id = 258 os_tid = 0x278 Thread: id = 259 os_tid = 0xb10 Thread: id = 260 os_tid = 0xb68 Thread: id = 261 os_tid = 0x934 Thread: id = 262 os_tid = 0x8ac Thread: id = 263 os_tid = 0x694 Thread: id = 264 os_tid = 0x3e0 Thread: id = 265 os_tid = 0x31c Thread: id = 266 os_tid = 0x310 Thread: id = 267 os_tid = 0x2a4 Thread: id = 268 os_tid = 0x29c Thread: id = 269 os_tid = 0x290 Thread: id = 270 os_tid = 0x28c Thread: id = 271 os_tid = 0x284 Thread: id = 272 os_tid = 0x26c Thread: id = 495 os_tid = 0xd44 Process: id = "13" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x567db000" os_pid = "0x338" os_integrity_level = "0x4000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "10" os_parent_pid = "0x1e8" cmd_line = "C:\\Windows\\System32\\svchost.exe -k LocalServiceNetworkRestricted" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\Local Service" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\AppIDSvc" [0xa], "NT SERVICE\\Audiosrv" [0xa], "NT SERVICE\\Dhcp" [0xa], "NT SERVICE\\eventlog" [0xa], "NT SERVICE\\HomeGroupProvider" [0xa], "NT SERVICE\\icssvc" [0xa], "NT SERVICE\\lmhosts" [0xe], "NT SERVICE\\NgcCtnrSvc" [0xa], "NT SERVICE\\vmictimesync" [0xa], "NT SERVICE\\Wcmsvc" [0xa], "NT SERVICE\\wscsvc" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000d8b4" [0xc000000f], "LOCAL" [0x7] Region: id = 1648 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 1649 start_va = 0x8b3b4c0000 end_va = 0x8b3b4cffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000008b3b4c0000" filename = "" Region: id = 1650 start_va = 0x8b3b4d0000 end_va = 0x8b3b4d0fff entry_point = 0x8b3b4d0000 region_type = mapped_file name = "svchost.exe.mui" filename = "\\Windows\\System32\\en-US\\svchost.exe.mui" (normalized: "c:\\windows\\system32\\en-us\\svchost.exe.mui") Region: id = 1651 start_va = 0x8b3b4e0000 end_va = 0x8b3b4f3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000008b3b4e0000" filename = "" Region: id = 1652 start_va = 0x8b3b500000 end_va = 0x8b3b57ffff entry_point = 0x0 region_type = private name = "private_0x0000008b3b500000" filename = "" Region: id = 1653 start_va = 0x8b3b580000 end_va = 0x8b3b583fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000008b3b580000" filename = "" Region: id = 1654 start_va = 0x8b3b590000 end_va = 0x8b3b590fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000008b3b590000" filename = "" Region: id = 1655 start_va = 0x8b3b5a0000 end_va = 0x8b3b5a1fff entry_point = 0x0 region_type = private name = "private_0x0000008b3b5a0000" filename = "" Region: id = 1656 start_va = 0x8b3b5b0000 end_va = 0x8b3b66dfff entry_point = 0x8b3b5b0000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 1657 start_va = 0x8b3b670000 end_va = 0x8b3b670fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000008b3b670000" filename = "" Region: id = 1658 start_va = 0x8b3b680000 end_va = 0x8b3b680fff entry_point = 0x0 region_type = private name = "private_0x0000008b3b680000" filename = "" Region: id = 1659 start_va = 0x8b3b6f0000 end_va = 0x8b3b6f6fff entry_point = 0x0 region_type = private name = "private_0x0000008b3b6f0000" filename = "" Region: id = 1660 start_va = 0x8b3b700000 end_va = 0x8b3b7fffff entry_point = 0x0 region_type = private name = "private_0x0000008b3b700000" filename = "" Region: id = 1661 start_va = 0x8b3b800000 end_va = 0x8b3b800fff entry_point = 0x0 region_type = private name = "private_0x0000008b3b800000" filename = "" Region: id = 1662 start_va = 0x8b3b810000 end_va = 0x8b3b810fff entry_point = 0x0 region_type = private name = "private_0x0000008b3b810000" filename = "" Region: id = 1663 start_va = 0x8b3b820000 end_va = 0x8b3b884fff entry_point = 0x8b3b820000 region_type = mapped_file name = "wevtapi.dll" filename = "\\Windows\\System32\\wevtapi.dll" (normalized: "c:\\windows\\system32\\wevtapi.dll") Region: id = 1664 start_va = 0x8b3b890000 end_va = 0x8b3b896fff entry_point = 0x0 region_type = private name = "private_0x0000008b3b890000" filename = "" Region: id = 1665 start_va = 0x8b3b8a0000 end_va = 0x8b3b8bffff entry_point = 0x0 region_type = private name = "private_0x0000008b3b8a0000" filename = "" Region: id = 1666 start_va = 0x8b3b8c0000 end_va = 0x8b3b8dffff entry_point = 0x0 region_type = private name = "private_0x0000008b3b8c0000" filename = "" Region: id = 1667 start_va = 0x8b3b8e0000 end_va = 0x8b3b8fffff entry_point = 0x0 region_type = private name = "private_0x0000008b3b8e0000" filename = "" Region: id = 1668 start_va = 0x8b3b900000 end_va = 0x8b3b9fffff entry_point = 0x0 region_type = private name = "private_0x0000008b3b900000" filename = "" Region: id = 1669 start_va = 0x8b3ba00000 end_va = 0x8b3bb87fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000008b3ba00000" filename = "" Region: id = 1670 start_va = 0x8b3bb90000 end_va = 0x8b3bd10fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000008b3bb90000" filename = "" Region: id = 1671 start_va = 0x8b3bd20000 end_va = 0x8b3bddffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000008b3bd20000" filename = "" Region: id = 1672 start_va = 0x8b3bde0000 end_va = 0x8b3bedffff entry_point = 0x0 region_type = private name = "private_0x0000008b3bde0000" filename = "" Region: id = 1673 start_va = 0x8b3bee0000 end_va = 0x8b3bf5ffff entry_point = 0x0 region_type = private name = "private_0x0000008b3bee0000" filename = "" Region: id = 1674 start_va = 0x8b3bf60000 end_va = 0x8b3bfdffff entry_point = 0x0 region_type = private name = "private_0x0000008b3bf60000" filename = "" Region: id = 1675 start_va = 0x8b3bfe0000 end_va = 0x8b3c0dffff entry_point = 0x0 region_type = private name = "private_0x0000008b3bfe0000" filename = "" Region: id = 1676 start_va = 0x8b3c0e0000 end_va = 0x8b3c1dffff entry_point = 0x0 region_type = private name = "private_0x0000008b3c0e0000" filename = "" Region: id = 1677 start_va = 0x8b3c1e0000 end_va = 0x8b3c1e0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000008b3c1e0000" filename = "" Region: id = 1678 start_va = 0x8b3c1f0000 end_va = 0x8b3c1f0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000008b3c1f0000" filename = "" Region: id = 1679 start_va = 0x8b3c200000 end_va = 0x8b3c200fff entry_point = 0x0 region_type = private name = "private_0x0000008b3c200000" filename = "" Region: id = 1680 start_va = 0x8b3c210000 end_va = 0x8b3c216fff entry_point = 0x0 region_type = private name = "private_0x0000008b3c210000" filename = "" Region: id = 1681 start_va = 0x8b3c220000 end_va = 0x8b3c29ffff entry_point = 0x0 region_type = private name = "private_0x0000008b3c220000" filename = "" Region: id = 1682 start_va = 0x8b3c2a0000 end_va = 0x8b3c2a0fff entry_point = 0x0 region_type = private name = "private_0x0000008b3c2a0000" filename = "" Region: id = 1683 start_va = 0x8b3c2b0000 end_va = 0x8b3c2b0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000008b3c2b0000" filename = "" Region: id = 1684 start_va = 0x8b3c2c0000 end_va = 0x8b3c2c4fff entry_point = 0x8b3c2c0000 region_type = mapped_file name = "pcaevts.dll" filename = "\\Windows\\System32\\pcaevts.dll" (normalized: "c:\\windows\\system32\\pcaevts.dll") Region: id = 1685 start_va = 0x8b3c300000 end_va = 0x8b3c3fffff entry_point = 0x0 region_type = private name = "private_0x0000008b3c300000" filename = "" Region: id = 1686 start_va = 0x8b3c400000 end_va = 0x8b3c47ffff entry_point = 0x0 region_type = private name = "private_0x0000008b3c400000" filename = "" Region: id = 1687 start_va = 0x8b3c480000 end_va = 0x8b3c4fffff entry_point = 0x0 region_type = private name = "private_0x0000008b3c480000" filename = "" Region: id = 1688 start_va = 0x8b3c500000 end_va = 0x8b3c57ffff entry_point = 0x0 region_type = private name = "private_0x0000008b3c500000" filename = "" Region: id = 1689 start_va = 0x8b3c580000 end_va = 0x8b3c5fffff entry_point = 0x0 region_type = private name = "private_0x0000008b3c580000" filename = "" Region: id = 1690 start_va = 0x8b3c600000 end_va = 0x8b3c6fffff entry_point = 0x0 region_type = private name = "private_0x0000008b3c600000" filename = "" Region: id = 1691 start_va = 0x8b3c700000 end_va = 0x8b3c7fffff entry_point = 0x0 region_type = private name = "private_0x0000008b3c700000" filename = "" Region: id = 1692 start_va = 0x8b3c800000 end_va = 0x8b3c8fffff entry_point = 0x0 region_type = private name = "private_0x0000008b3c800000" filename = "" Region: id = 1693 start_va = 0x8b3c900000 end_va = 0x8b3c9fffff entry_point = 0x0 region_type = private name = "private_0x0000008b3c900000" filename = "" Region: id = 1694 start_va = 0x8b3ca00000 end_va = 0x8b3cd36fff entry_point = 0x8b3ca00000 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 1695 start_va = 0x8b3cd40000 end_va = 0x8b3ce3ffff entry_point = 0x0 region_type = private name = "private_0x0000008b3cd40000" filename = "" Region: id = 1696 start_va = 0x8b3ce40000 end_va = 0x8b3cebffff entry_point = 0x0 region_type = private name = "private_0x0000008b3ce40000" filename = "" Region: id = 1697 start_va = 0x8b3cf00000 end_va = 0x8b3cffffff entry_point = 0x0 region_type = private name = "private_0x0000008b3cf00000" filename = "" Region: id = 1698 start_va = 0x8b3d000000 end_va = 0x8b3d0fffff entry_point = 0x0 region_type = private name = "private_0x0000008b3d000000" filename = "" Region: id = 1699 start_va = 0x8b3d100000 end_va = 0x8b3d1fffff entry_point = 0x0 region_type = private name = "private_0x0000008b3d100000" filename = "" Region: id = 1700 start_va = 0x8b3d200000 end_va = 0x8b3d2fffff entry_point = 0x0 region_type = private name = "private_0x0000008b3d200000" filename = "" Region: id = 1701 start_va = 0x8b3d400000 end_va = 0x8b3d4fffff entry_point = 0x0 region_type = private name = "private_0x0000008b3d400000" filename = "" Region: id = 1702 start_va = 0x8b3d500000 end_va = 0x8b3d5fffff entry_point = 0x0 region_type = private name = "private_0x0000008b3d500000" filename = "" Region: id = 1703 start_va = 0x8b3d600000 end_va = 0x8b3d692fff entry_point = 0x8b3d600000 region_type = mapped_file name = "winlogon.exe" filename = "\\Windows\\System32\\winlogon.exe" (normalized: "c:\\windows\\system32\\winlogon.exe") Region: id = 1704 start_va = 0x8b3d700000 end_va = 0x8b3d7fffff entry_point = 0x0 region_type = private name = "private_0x0000008b3d700000" filename = "" Region: id = 1705 start_va = 0x8b3d800000 end_va = 0x8b3d86ffff entry_point = 0x8b3d800000 region_type = mapped_file name = "services.exe" filename = "\\Windows\\System32\\services.exe" (normalized: "c:\\windows\\system32\\services.exe") Region: id = 1706 start_va = 0x8b3d870000 end_va = 0x8b3d8effff entry_point = 0x0 region_type = private name = "private_0x0000008b3d870000" filename = "" Region: id = 1707 start_va = 0x8b3d900000 end_va = 0x8b3d9fffff entry_point = 0x0 region_type = private name = "private_0x0000008b3d900000" filename = "" Region: id = 1708 start_va = 0x8b3da00000 end_va = 0x8b3dafffff entry_point = 0x0 region_type = private name = "private_0x0000008b3da00000" filename = "" Region: id = 1709 start_va = 0x8b3db00000 end_va = 0x8b3dbfffff entry_point = 0x0 region_type = private name = "private_0x0000008b3db00000" filename = "" Region: id = 1710 start_va = 0x8b3dc00000 end_va = 0x8b3dcfffff entry_point = 0x0 region_type = private name = "private_0x0000008b3dc00000" filename = "" Region: id = 1711 start_va = 0x8b3dd00000 end_va = 0x8b3ddfffff entry_point = 0x0 region_type = private name = "private_0x0000008b3dd00000" filename = "" Region: id = 1712 start_va = 0x8b3de00000 end_va = 0x8b3defffff entry_point = 0x0 region_type = private name = "private_0x0000008b3de00000" filename = "" Region: id = 1713 start_va = 0x8b3df00000 end_va = 0x8b3dffffff entry_point = 0x0 region_type = private name = "private_0x0000008b3df00000" filename = "" Region: id = 1714 start_va = 0x8b3e000000 end_va = 0x8b3e0fffff entry_point = 0x0 region_type = private name = "private_0x0000008b3e000000" filename = "" Region: id = 1715 start_va = 0x8b3e100000 end_va = 0x8b3e1fffff entry_point = 0x0 region_type = private name = "private_0x0000008b3e100000" filename = "" Region: id = 1716 start_va = 0x8b3e200000 end_va = 0x8b3e2fffff entry_point = 0x0 region_type = private name = "private_0x0000008b3e200000" filename = "" Region: id = 1717 start_va = 0x8b3e300000 end_va = 0x8b3e3fffff entry_point = 0x0 region_type = private name = "private_0x0000008b3e300000" filename = "" Region: id = 1718 start_va = 0x8b3e400000 end_va = 0x8b3e4fffff entry_point = 0x0 region_type = private name = "private_0x0000008b3e400000" filename = "" Region: id = 1719 start_va = 0x8b3e500000 end_va = 0x8b3e5fffff entry_point = 0x0 region_type = private name = "private_0x0000008b3e500000" filename = "" Region: id = 1720 start_va = 0x8b3e600000 end_va = 0x8b3e6fffff entry_point = 0x0 region_type = private name = "private_0x0000008b3e600000" filename = "" Region: id = 1721 start_va = 0x7df5ff480000 end_va = 0x7ff5ff47ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007df5ff480000" filename = "" Region: id = 1722 start_va = 0x7ff673486000 end_va = 0x7ff673487fff entry_point = 0x0 region_type = private name = "private_0x00007ff673486000" filename = "" Region: id = 1723 start_va = 0x7ff673488000 end_va = 0x7ff673489fff entry_point = 0x0 region_type = private name = "private_0x00007ff673488000" filename = "" Region: id = 1724 start_va = 0x7ff67348a000 end_va = 0x7ff67348bfff entry_point = 0x0 region_type = private name = "private_0x00007ff67348a000" filename = "" Region: id = 1725 start_va = 0x7ff67348c000 end_va = 0x7ff67348dfff entry_point = 0x0 region_type = private name = "private_0x00007ff67348c000" filename = "" Region: id = 1726 start_va = 0x7ff67348e000 end_va = 0x7ff67348ffff entry_point = 0x0 region_type = private name = "private_0x00007ff67348e000" filename = "" Region: id = 1727 start_va = 0x7ff673490000 end_va = 0x7ff673491fff entry_point = 0x0 region_type = private name = "private_0x00007ff673490000" filename = "" Region: id = 1728 start_va = 0x7ff673492000 end_va = 0x7ff673493fff entry_point = 0x0 region_type = private name = "private_0x00007ff673492000" filename = "" Region: id = 1729 start_va = 0x7ff673494000 end_va = 0x7ff673495fff entry_point = 0x0 region_type = private name = "private_0x00007ff673494000" filename = "" Region: id = 1730 start_va = 0x7ff673496000 end_va = 0x7ff673497fff entry_point = 0x0 region_type = private name = "private_0x00007ff673496000" filename = "" Region: id = 1731 start_va = 0x7ff673498000 end_va = 0x7ff673499fff entry_point = 0x0 region_type = private name = "private_0x00007ff673498000" filename = "" Region: id = 1732 start_va = 0x7ff67349a000 end_va = 0x7ff67349bfff entry_point = 0x0 region_type = private name = "private_0x00007ff67349a000" filename = "" Region: id = 1733 start_va = 0x7ff67349e000 end_va = 0x7ff67349ffff entry_point = 0x0 region_type = private name = "private_0x00007ff67349e000" filename = "" Region: id = 1734 start_va = 0x7ff6734a0000 end_va = 0x7ff6734a1fff entry_point = 0x0 region_type = private name = "private_0x00007ff6734a0000" filename = "" Region: id = 1735 start_va = 0x7ff6734a2000 end_va = 0x7ff6734a3fff entry_point = 0x0 region_type = private name = "private_0x00007ff6734a2000" filename = "" Region: id = 1736 start_va = 0x7ff6734a4000 end_va = 0x7ff6734a5fff entry_point = 0x0 region_type = private name = "private_0x00007ff6734a4000" filename = "" Region: id = 1737 start_va = 0x7ff6734a6000 end_va = 0x7ff6734a7fff entry_point = 0x0 region_type = private name = "private_0x00007ff6734a6000" filename = "" Region: id = 1738 start_va = 0x7ff6734a8000 end_va = 0x7ff6734a9fff entry_point = 0x0 region_type = private name = "private_0x00007ff6734a8000" filename = "" Region: id = 1739 start_va = 0x7ff6734aa000 end_va = 0x7ff6734abfff entry_point = 0x0 region_type = private name = "private_0x00007ff6734aa000" filename = "" Region: id = 1740 start_va = 0x7ff6734ac000 end_va = 0x7ff6734adfff entry_point = 0x0 region_type = private name = "private_0x00007ff6734ac000" filename = "" Region: id = 1741 start_va = 0x7ff6734ae000 end_va = 0x7ff6734affff entry_point = 0x0 region_type = private name = "private_0x00007ff6734ae000" filename = "" Region: id = 1742 start_va = 0x7ff6734b0000 end_va = 0x7ff6735affff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007ff6734b0000" filename = "" Region: id = 1743 start_va = 0x7ff6735b0000 end_va = 0x7ff6735d2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007ff6735b0000" filename = "" Region: id = 1744 start_va = 0x7ff6735d3000 end_va = 0x7ff6735d4fff entry_point = 0x0 region_type = private name = "private_0x00007ff6735d3000" filename = "" Region: id = 1745 start_va = 0x7ff6735d5000 end_va = 0x7ff6735d6fff entry_point = 0x0 region_type = private name = "private_0x00007ff6735d5000" filename = "" Region: id = 1746 start_va = 0x7ff6735d7000 end_va = 0x7ff6735d7fff entry_point = 0x0 region_type = private name = "private_0x00007ff6735d7000" filename = "" Region: id = 1747 start_va = 0x7ff6735d8000 end_va = 0x7ff6735d9fff entry_point = 0x0 region_type = private name = "private_0x00007ff6735d8000" filename = "" Region: id = 1748 start_va = 0x7ff6735da000 end_va = 0x7ff6735dbfff entry_point = 0x0 region_type = private name = "private_0x00007ff6735da000" filename = "" Region: id = 1749 start_va = 0x7ff6735dc000 end_va = 0x7ff6735ddfff entry_point = 0x0 region_type = private name = "private_0x00007ff6735dc000" filename = "" Region: id = 1750 start_va = 0x7ff6735de000 end_va = 0x7ff6735dffff entry_point = 0x0 region_type = private name = "private_0x00007ff6735de000" filename = "" Region: id = 1751 start_va = 0x7ff673b40000 end_va = 0x7ff673b4cfff entry_point = 0x7ff673b40000 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 1752 start_va = 0x7ff8d0b10000 end_va = 0x7ff8d0c99fff entry_point = 0x7ff8d0b10000 region_type = mapped_file name = "dbghelp.dll" filename = "\\Windows\\System32\\dbghelp.dll" (normalized: "c:\\windows\\system32\\dbghelp.dll") Region: id = 1753 start_va = 0x7ff8d98e0000 end_va = 0x7ff8d9964fff entry_point = 0x7ff8d98e0000 region_type = mapped_file name = "audioses.dll" filename = "\\Windows\\System32\\AudioSes.dll" (normalized: "c:\\windows\\system32\\audioses.dll") Region: id = 1754 start_va = 0x7ff8db340000 end_va = 0x7ff8db382fff entry_point = 0x7ff8db340000 region_type = mapped_file name = "deviceaccess.dll" filename = "\\Windows\\System32\\deviceaccess.dll" (normalized: "c:\\windows\\system32\\deviceaccess.dll") Region: id = 1755 start_va = 0x7ff8db8d0000 end_va = 0x7ff8db8fffff entry_point = 0x7ff8db8d0000 region_type = mapped_file name = "wscsvc.dll" filename = "\\Windows\\System32\\wscsvc.dll" (normalized: "c:\\windows\\system32\\wscsvc.dll") Region: id = 1756 start_va = 0x7ff8e0290000 end_va = 0x7ff8e02a3fff entry_point = 0x7ff8e0290000 region_type = mapped_file name = "wbemsvc.dll" filename = "\\Windows\\System32\\wbem\\wbemsvc.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemsvc.dll") Region: id = 1757 start_va = 0x7ff8e02b0000 end_va = 0x7ff8e03a7fff entry_point = 0x7ff8e02b0000 region_type = mapped_file name = "fastprox.dll" filename = "\\Windows\\System32\\wbem\\fastprox.dll" (normalized: "c:\\windows\\system32\\wbem\\fastprox.dll") Region: id = 1758 start_va = 0x7ff8e06b0000 end_va = 0x7ff8e06c0fff entry_point = 0x7ff8e06b0000 region_type = mapped_file name = "wbemprox.dll" filename = "\\Windows\\System32\\wbem\\wbemprox.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemprox.dll") Region: id = 1759 start_va = 0x7ff8e56f0000 end_va = 0x7ff8e576efff entry_point = 0x7ff8e56f0000 region_type = mapped_file name = "wbemcomn.dll" filename = "\\Windows\\System32\\wbemcomn.dll" (normalized: "c:\\windows\\system32\\wbemcomn.dll") Region: id = 1760 start_va = 0x7ff8e5dd0000 end_va = 0x7ff8e5ea5fff entry_point = 0x7ff8e5dd0000 region_type = mapped_file name = "winhttp.dll" filename = "\\Windows\\System32\\winhttp.dll" (normalized: "c:\\windows\\system32\\winhttp.dll") Region: id = 1761 start_va = 0x7ff8e7220000 end_va = 0x7ff8e7267fff entry_point = 0x7ff8e7220000 region_type = mapped_file name = "dhcpcore6.dll" filename = "\\Windows\\System32\\dhcpcore6.dll" (normalized: "c:\\windows\\system32\\dhcpcore6.dll") Region: id = 1762 start_va = 0x7ff8e7270000 end_va = 0x7ff8e727dfff entry_point = 0x7ff8e7270000 region_type = mapped_file name = "cmintegrator.dll" filename = "\\Windows\\System32\\cmintegrator.dll" (normalized: "c:\\windows\\system32\\cmintegrator.dll") Region: id = 1763 start_va = 0x7ff8e7280000 end_va = 0x7ff8e7299fff entry_point = 0x7ff8e7280000 region_type = mapped_file name = "dhcpcsvc.dll" filename = "\\Windows\\System32\\dhcpcsvc.dll" (normalized: "c:\\windows\\system32\\dhcpcsvc.dll") Region: id = 1764 start_va = 0x7ff8e72a0000 end_va = 0x7ff8e72b5fff entry_point = 0x7ff8e72a0000 region_type = mapped_file name = "dhcpcsvc6.dll" filename = "\\Windows\\System32\\dhcpcsvc6.dll" (normalized: "c:\\windows\\system32\\dhcpcsvc6.dll") Region: id = 1765 start_va = 0x7ff8e72c0000 end_va = 0x7ff8e72f5fff entry_point = 0x7ff8e72c0000 region_type = mapped_file name = "wcmcsp.dll" filename = "\\Windows\\System32\\wcmcsp.dll" (normalized: "c:\\windows\\system32\\wcmcsp.dll") Region: id = 1766 start_va = 0x7ff8e7300000 end_va = 0x7ff8e7397fff entry_point = 0x7ff8e7300000 region_type = mapped_file name = "wcmsvc.dll" filename = "\\Windows\\System32\\wcmsvc.dll" (normalized: "c:\\windows\\system32\\wcmsvc.dll") Region: id = 1767 start_va = 0x7ff8e73a0000 end_va = 0x7ff8e73fcfff entry_point = 0x7ff8e73a0000 region_type = mapped_file name = "dhcpcore.dll" filename = "\\Windows\\System32\\dhcpcore.dll" (normalized: "c:\\windows\\system32\\dhcpcore.dll") Region: id = 1768 start_va = 0x7ff8e7430000 end_va = 0x7ff8e7560fff entry_point = 0x7ff8e7430000 region_type = mapped_file name = "wintypes.dll" filename = "\\Windows\\System32\\WinTypes.dll" (normalized: "c:\\windows\\system32\\wintypes.dll") Region: id = 1769 start_va = 0x7ff8e75b0000 end_va = 0x7ff8e75bafff entry_point = 0x7ff8e75b0000 region_type = mapped_file name = "avrt.dll" filename = "\\Windows\\System32\\avrt.dll" (normalized: "c:\\windows\\system32\\avrt.dll") Region: id = 1770 start_va = 0x7ff8e75c0000 end_va = 0x7ff8e75c7fff entry_point = 0x7ff8e75c0000 region_type = mapped_file name = "ksuser.dll" filename = "\\Windows\\System32\\ksuser.dll" (normalized: "c:\\windows\\system32\\ksuser.dll") Region: id = 1771 start_va = 0x7ff8e75d0000 end_va = 0x7ff8e76e0fff entry_point = 0x7ff8e75d0000 region_type = mapped_file name = "audiosrv.dll" filename = "\\Windows\\System32\\audiosrv.dll" (normalized: "c:\\windows\\system32\\audiosrv.dll") Region: id = 1772 start_va = 0x7ff8e79b0000 end_va = 0x7ff8e7b32fff entry_point = 0x7ff8e79b0000 region_type = mapped_file name = "propsys.dll" filename = "\\Windows\\System32\\propsys.dll" (normalized: "c:\\windows\\system32\\propsys.dll") Region: id = 1773 start_va = 0x7ff8e7b40000 end_va = 0x7ff8e7bb1fff entry_point = 0x7ff8e7b40000 region_type = mapped_file name = "mmdevapi.dll" filename = "\\Windows\\System32\\MMDevAPI.dll" (normalized: "c:\\windows\\system32\\mmdevapi.dll") Region: id = 1774 start_va = 0x7ff8e7d90000 end_va = 0x7ff8e7da0fff entry_point = 0x7ff8e7d90000 region_type = mapped_file name = "wmiclnt.dll" filename = "\\Windows\\System32\\wmiclnt.dll" (normalized: "c:\\windows\\system32\\wmiclnt.dll") Region: id = 1775 start_va = 0x7ff8e82b0000 end_va = 0x7ff8e845afff entry_point = 0x7ff8e82b0000 region_type = mapped_file name = "wevtsvc.dll" filename = "\\Windows\\System32\\wevtsvc.dll" (normalized: "c:\\windows\\system32\\wevtsvc.dll") Region: id = 1776 start_va = 0x7ff8e8460000 end_va = 0x7ff8e846afff entry_point = 0x7ff8e8460000 region_type = mapped_file name = "winnsi.dll" filename = "\\Windows\\System32\\winnsi.dll" (normalized: "c:\\windows\\system32\\winnsi.dll") Region: id = 1777 start_va = 0x7ff8e8470000 end_va = 0x7ff8e8478fff entry_point = 0x7ff8e8470000 region_type = mapped_file name = "nrpsrv.dll" filename = "\\Windows\\System32\\nrpsrv.dll" (normalized: "c:\\windows\\system32\\nrpsrv.dll") Region: id = 1778 start_va = 0x7ff8e8480000 end_va = 0x7ff8e84b7fff entry_point = 0x7ff8e8480000 region_type = mapped_file name = "iphlpapi.dll" filename = "\\Windows\\System32\\IPHLPAPI.DLL" (normalized: "c:\\windows\\system32\\iphlpapi.dll") Region: id = 1779 start_va = 0x7ff8e84c0000 end_va = 0x7ff8e84c9fff entry_point = 0x7ff8e84c0000 region_type = mapped_file name = "lmhsvc.dll" filename = "\\Windows\\System32\\lmhsvc.dll" (normalized: "c:\\windows\\system32\\lmhsvc.dll") Region: id = 1780 start_va = 0x7ff8e84e0000 end_va = 0x7ff8e84f7fff entry_point = 0x7ff8e84e0000 region_type = mapped_file name = "nlaapi.dll" filename = "\\Windows\\System32\\nlaapi.dll" (normalized: "c:\\windows\\system32\\nlaapi.dll") Region: id = 1781 start_va = 0x7ff8e8ad0000 end_va = 0x7ff8e8ae2fff entry_point = 0x7ff8e8ad0000 region_type = mapped_file name = "wtsapi32.dll" filename = "\\Windows\\System32\\wtsapi32.dll" (normalized: "c:\\windows\\system32\\wtsapi32.dll") Region: id = 1782 start_va = 0x7ff8e9720000 end_va = 0x7ff8e9746fff entry_point = 0x7ff8e9720000 region_type = mapped_file name = "devobj.dll" filename = "\\Windows\\System32\\devobj.dll" (normalized: "c:\\windows\\system32\\devobj.dll") Region: id = 1783 start_va = 0x7ff8e9ae0000 end_va = 0x7ff8e9b11fff entry_point = 0x7ff8e9ae0000 region_type = mapped_file name = "fwbase.dll" filename = "\\Windows\\System32\\fwbase.dll" (normalized: "c:\\windows\\system32\\fwbase.dll") Region: id = 1784 start_va = 0x7ff8e9b20000 end_va = 0x7ff8e9ba1fff entry_point = 0x7ff8e9b20000 region_type = mapped_file name = "firewallapi.dll" filename = "\\Windows\\System32\\FirewallAPI.dll" (normalized: "c:\\windows\\system32\\firewallapi.dll") Region: id = 1785 start_va = 0x7ff8e9cd0000 end_va = 0x7ff8e9cf2fff entry_point = 0x7ff8e9cd0000 region_type = mapped_file name = "gpapi.dll" filename = "\\Windows\\System32\\gpapi.dll" (normalized: "c:\\windows\\system32\\gpapi.dll") Region: id = 1786 start_va = 0x7ff8e9e00000 end_va = 0x7ff8e9e0bfff entry_point = 0x7ff8e9e00000 region_type = mapped_file name = "hid.dll" filename = "\\Windows\\System32\\hid.dll" (normalized: "c:\\windows\\system32\\hid.dll") Region: id = 1787 start_va = 0x7ff8ea000000 end_va = 0x7ff8ea00bfff entry_point = 0x7ff8ea000000 region_type = mapped_file name = "netutils.dll" filename = "\\Windows\\System32\\netutils.dll" (normalized: "c:\\windows\\system32\\netutils.dll") Region: id = 1788 start_va = 0x7ff8ea270000 end_va = 0x7ff8ea2a2fff entry_point = 0x7ff8ea270000 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\System32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll") Region: id = 1789 start_va = 0x7ff8ea360000 end_va = 0x7ff8ea37efff entry_point = 0x7ff8ea360000 region_type = mapped_file name = "userenv.dll" filename = "\\Windows\\System32\\userenv.dll" (normalized: "c:\\windows\\system32\\userenv.dll") Region: id = 1790 start_va = 0x7ff8ea3c0000 end_va = 0x7ff8ea467fff entry_point = 0x7ff8ea3c0000 region_type = mapped_file name = "dnsapi.dll" filename = "\\Windows\\System32\\dnsapi.dll" (normalized: "c:\\windows\\system32\\dnsapi.dll") Region: id = 1791 start_va = 0x7ff8ea5c0000 end_va = 0x7ff8ea61cfff entry_point = 0x7ff8ea5c0000 region_type = mapped_file name = "mswsock.dll" filename = "\\Windows\\System32\\mswsock.dll" (normalized: "c:\\windows\\system32\\mswsock.dll") Region: id = 1792 start_va = 0x7ff8ea620000 end_va = 0x7ff8ea636fff entry_point = 0x7ff8ea620000 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\System32\\cryptsp.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll") Region: id = 1793 start_va = 0x7ff8ea790000 end_va = 0x7ff8ea79afff entry_point = 0x7ff8ea790000 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\System32\\cryptbase.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll") Region: id = 1794 start_va = 0x7ff8ea820000 end_va = 0x7ff8ea877fff entry_point = 0x7ff8ea820000 region_type = mapped_file name = "winsta.dll" filename = "\\Windows\\System32\\winsta.dll" (normalized: "c:\\windows\\system32\\winsta.dll") Region: id = 1795 start_va = 0x7ff8ea9d0000 end_va = 0x7ff8ea9fbfff entry_point = 0x7ff8ea9d0000 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\System32\\sspicli.dll" (normalized: "c:\\windows\\system32\\sspicli.dll") Region: id = 1796 start_va = 0x7ff8eabd0000 end_va = 0x7ff8eabf7fff entry_point = 0x7ff8eabd0000 region_type = mapped_file name = "bcrypt.dll" filename = "\\Windows\\System32\\bcrypt.dll" (normalized: "c:\\windows\\system32\\bcrypt.dll") Region: id = 1797 start_va = 0x7ff8eac00000 end_va = 0x7ff8eac6afff entry_point = 0x7ff8eac00000 region_type = mapped_file name = "bcryptprimitives.dll" filename = "\\Windows\\System32\\bcryptprimitives.dll" (normalized: "c:\\windows\\system32\\bcryptprimitives.dll") Region: id = 1798 start_va = 0x7ff8eadb0000 end_va = 0x7ff8eadc0fff entry_point = 0x7ff8eadb0000 region_type = mapped_file name = "msasn1.dll" filename = "\\Windows\\System32\\msasn1.dll" (normalized: "c:\\windows\\system32\\msasn1.dll") Region: id = 1799 start_va = 0x7ff8eadd0000 end_va = 0x7ff8eae19fff entry_point = 0x7ff8eadd0000 region_type = mapped_file name = "powrprof.dll" filename = "\\Windows\\System32\\powrprof.dll" (normalized: "c:\\windows\\system32\\powrprof.dll") Region: id = 1800 start_va = 0x7ff8eae20000 end_va = 0x7ff8eae2efff entry_point = 0x7ff8eae20000 region_type = mapped_file name = "kernel.appcore.dll" filename = "\\Windows\\System32\\kernel.appcore.dll" (normalized: "c:\\windows\\system32\\kernel.appcore.dll") Region: id = 1801 start_va = 0x7ff8eae30000 end_va = 0x7ff8eae42fff entry_point = 0x7ff8eae30000 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\System32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll") Region: id = 1802 start_va = 0x7ff8eae50000 end_va = 0x7ff8eaea3fff entry_point = 0x7ff8eae50000 region_type = mapped_file name = "wintrust.dll" filename = "\\Windows\\System32\\wintrust.dll" (normalized: "c:\\windows\\system32\\wintrust.dll") Region: id = 1803 start_va = 0x7ff8eaf60000 end_va = 0x7ff8eafa3fff entry_point = 0x7ff8eaf60000 region_type = mapped_file name = "cfgmgr32.dll" filename = "\\Windows\\System32\\cfgmgr32.dll" (normalized: "c:\\windows\\system32\\cfgmgr32.dll") Region: id = 1804 start_va = 0x7ff8eafb0000 end_va = 0x7ff8eb170fff entry_point = 0x7ff8eafb0000 region_type = mapped_file name = "crypt32.dll" filename = "\\Windows\\System32\\crypt32.dll" (normalized: "c:\\windows\\system32\\crypt32.dll") Region: id = 1805 start_va = 0x7ff8eb870000 end_va = 0x7ff8eba4cfff entry_point = 0x7ff8eb870000 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 1806 start_va = 0x7ff8ebb30000 end_va = 0x7ff8ebbedfff entry_point = 0x7ff8ebb30000 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll") Region: id = 1807 start_va = 0x7ff8ebdc0000 end_va = 0x7ff8ebf0dfff entry_point = 0x7ff8ebdc0000 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 1808 start_va = 0x7ff8ec240000 end_va = 0x7ff8ec29afff entry_point = 0x7ff8ec240000 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 1809 start_va = 0x7ff8ec300000 end_va = 0x7ff8ec440fff entry_point = 0x7ff8ec300000 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll") Region: id = 1810 start_va = 0x7ff8ec450000 end_va = 0x7ff8ec575fff entry_point = 0x7ff8ec450000 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 1811 start_va = 0x7ff8edb10000 end_va = 0x7ff8edbb4fff entry_point = 0x7ff8edb10000 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\System32\\clbcatq.dll" (normalized: "c:\\windows\\system32\\clbcatq.dll") Region: id = 1812 start_va = 0x7ff8edbc0000 end_va = 0x7ff8edd44fff entry_point = 0x7ff8edbc0000 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 1813 start_va = 0x7ff8edd60000 end_va = 0x7ff8edfdbfff entry_point = 0x7ff8edd60000 region_type = mapped_file name = "combase.dll" filename = "\\Windows\\System32\\combase.dll" (normalized: "c:\\windows\\system32\\combase.dll") Region: id = 1814 start_va = 0x7ff8ee040000 end_va = 0x7ff8ee0a8fff entry_point = 0x7ff8ee040000 region_type = mapped_file name = "ws2_32.dll" filename = "\\Windows\\System32\\ws2_32.dll" (normalized: "c:\\windows\\system32\\ws2_32.dll") Region: id = 1815 start_va = 0x7ff8ee0b0000 end_va = 0x7ff8ee14cfff entry_point = 0x7ff8ee0b0000 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 1816 start_va = 0x7ff8ee190000 end_va = 0x7ff8ee235fff entry_point = 0x7ff8ee190000 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 1817 start_va = 0x7ff8ee250000 end_va = 0x7ff8ee257fff entry_point = 0x7ff8ee250000 region_type = mapped_file name = "nsi.dll" filename = "\\Windows\\System32\\nsi.dll" (normalized: "c:\\windows\\system32\\nsi.dll") Region: id = 1818 start_va = 0x7ff8ee2d0000 end_va = 0x7ff8ee37cfff entry_point = 0x7ff8ee2d0000 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 1819 start_va = 0x7ff8ee380000 end_va = 0x7ff8ee541fff entry_point = 0x7ff8ee380000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Thread: id = 273 os_tid = 0x300 Thread: id = 274 os_tid = 0xc18 Thread: id = 275 os_tid = 0x8e8 Thread: id = 276 os_tid = 0xc1c Thread: id = 277 os_tid = 0xda8 Thread: id = 278 os_tid = 0xc90 Thread: id = 279 os_tid = 0xc84 Thread: id = 280 os_tid = 0xb44 Thread: id = 281 os_tid = 0x6fc Thread: id = 282 os_tid = 0xb1c Thread: id = 283 os_tid = 0x6a8 Thread: id = 284 os_tid = 0x490 Thread: id = 285 os_tid = 0x37c Thread: id = 286 os_tid = 0x148 Thread: id = 287 os_tid = 0x8 Thread: id = 288 os_tid = 0x298 Thread: id = 289 os_tid = 0x258 Thread: id = 290 os_tid = 0x254 Thread: id = 291 os_tid = 0x11c Thread: id = 292 os_tid = 0x3e4 Thread: id = 293 os_tid = 0x3bc Thread: id = 294 os_tid = 0x3b8 Thread: id = 295 os_tid = 0x3b4 Thread: id = 296 os_tid = 0x398 Thread: id = 297 os_tid = 0x394 Thread: id = 298 os_tid = 0x33c Process: id = "14" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x45816000" os_pid = "0x360" os_integrity_level = "0x4000" os_privileges = "0x40800000" monitor_reason = "child_process" parent_id = "10" os_parent_pid = "0x1e8" cmd_line = "C:\\Windows\\system32\\svchost.exe -k LocalServiceAndNoImpersonation" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\Local Service" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\BthHFSrv" [0xa], "NT SERVICE\\FDResPub" [0xa], "NT SERVICE\\QWAVE" [0xa], "NT SERVICE\\SCardSvr" [0xa], "NT SERVICE\\SensrSvc" [0xa], "NT SERVICE\\SSDPSRV" [0xa], "NT SERVICE\\TimeBroker" [0xe], "NT SERVICE\\upnphost" [0xa], "NT SERVICE\\wcncsvc" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000df81" [0xc000000f], "LOCAL" [0x7] Region: id = 3047 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 3048 start_va = 0xcb8990000 end_va = 0xcb899ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000cb8990000" filename = "" Region: id = 3049 start_va = 0xcb89a0000 end_va = 0xcb89a0fff entry_point = 0xcb89a0000 region_type = mapped_file name = "svchost.exe.mui" filename = "\\Windows\\System32\\en-US\\svchost.exe.mui" (normalized: "c:\\windows\\system32\\en-us\\svchost.exe.mui") Region: id = 3050 start_va = 0xcb89b0000 end_va = 0xcb89c3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000cb89b0000" filename = "" Region: id = 3051 start_va = 0xcb89d0000 end_va = 0xcb8a4ffff entry_point = 0x0 region_type = private name = "private_0x0000000cb89d0000" filename = "" Region: id = 3052 start_va = 0xcb8a50000 end_va = 0xcb8a53fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000cb8a50000" filename = "" Region: id = 3053 start_va = 0xcb8a60000 end_va = 0xcb8a60fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000cb8a60000" filename = "" Region: id = 3054 start_va = 0xcb8a70000 end_va = 0xcb8a71fff entry_point = 0x0 region_type = private name = "private_0x0000000cb8a70000" filename = "" Region: id = 3055 start_va = 0xcb8a80000 end_va = 0xcb8b3dfff entry_point = 0xcb8a80000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 3056 start_va = 0xcb8b40000 end_va = 0xcb8b40fff entry_point = 0x0 region_type = private name = "private_0x0000000cb8b40000" filename = "" Region: id = 3057 start_va = 0xcb8b50000 end_va = 0xcb8b50fff entry_point = 0x0 region_type = private name = "private_0x0000000cb8b50000" filename = "" Region: id = 3058 start_va = 0xcb8b60000 end_va = 0xcb8b60fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000cb8b60000" filename = "" Region: id = 3059 start_va = 0xcb8b70000 end_va = 0xcb8b70fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000cb8b70000" filename = "" Region: id = 3060 start_va = 0xcb8ba0000 end_va = 0xcb8ba6fff entry_point = 0x0 region_type = private name = "private_0x0000000cb8ba0000" filename = "" Region: id = 3061 start_va = 0xcb8c00000 end_va = 0xcb8cfffff entry_point = 0x0 region_type = private name = "private_0x0000000cb8c00000" filename = "" Region: id = 3062 start_va = 0xcb8d80000 end_va = 0xcb8e3ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000cb8d80000" filename = "" Region: id = 3063 start_va = 0xcb8e70000 end_va = 0xcb8e76fff entry_point = 0x0 region_type = private name = "private_0x0000000cb8e70000" filename = "" Region: id = 3064 start_va = 0xcb8e80000 end_va = 0xcb8efffff entry_point = 0x0 region_type = private name = "private_0x0000000cb8e80000" filename = "" Region: id = 3065 start_va = 0xcb8f00000 end_va = 0xcb8ffffff entry_point = 0x0 region_type = private name = "private_0x0000000cb8f00000" filename = "" Region: id = 3066 start_va = 0xcb9000000 end_va = 0xcb9187fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000cb9000000" filename = "" Region: id = 3067 start_va = 0xcb9190000 end_va = 0xcb9310fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000cb9190000" filename = "" Region: id = 3068 start_va = 0xcb9320000 end_va = 0xcb941ffff entry_point = 0x0 region_type = private name = "private_0x0000000cb9320000" filename = "" Region: id = 3069 start_va = 0xcb9420000 end_va = 0xcb951ffff entry_point = 0x0 region_type = private name = "private_0x0000000cb9420000" filename = "" Region: id = 3070 start_va = 0xcb9520000 end_va = 0xcb961ffff entry_point = 0x0 region_type = private name = "private_0x0000000cb9520000" filename = "" Region: id = 3071 start_va = 0xcb9620000 end_va = 0xcb9956fff entry_point = 0xcb9620000 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 3072 start_va = 0xcb9960000 end_va = 0xcb9a5ffff entry_point = 0x0 region_type = private name = "private_0x0000000cb9960000" filename = "" Region: id = 3073 start_va = 0xcb9a60000 end_va = 0xcb9b5ffff entry_point = 0x0 region_type = private name = "private_0x0000000cb9a60000" filename = "" Region: id = 3074 start_va = 0xcb9c60000 end_va = 0xcb9d5ffff entry_point = 0x0 region_type = private name = "private_0x0000000cb9c60000" filename = "" Region: id = 3075 start_va = 0xcb9d60000 end_va = 0xcb9e5ffff entry_point = 0x0 region_type = private name = "private_0x0000000cb9d60000" filename = "" Region: id = 3076 start_va = 0xcb9e60000 end_va = 0xcb9f5ffff entry_point = 0x0 region_type = private name = "private_0x0000000cb9e60000" filename = "" Region: id = 3077 start_va = 0x7df5ffaa0000 end_va = 0x7ff5ffa9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007df5ffaa0000" filename = "" Region: id = 3078 start_va = 0x7ff673964000 end_va = 0x7ff673965fff entry_point = 0x0 region_type = private name = "private_0x00007ff673964000" filename = "" Region: id = 3079 start_va = 0x7ff673966000 end_va = 0x7ff673967fff entry_point = 0x0 region_type = private name = "private_0x00007ff673966000" filename = "" Region: id = 3080 start_va = 0x7ff673968000 end_va = 0x7ff673969fff entry_point = 0x0 region_type = private name = "private_0x00007ff673968000" filename = "" Region: id = 3081 start_va = 0x7ff67396c000 end_va = 0x7ff67396dfff entry_point = 0x0 region_type = private name = "private_0x00007ff67396c000" filename = "" Region: id = 3082 start_va = 0x7ff67396e000 end_va = 0x7ff67396ffff entry_point = 0x0 region_type = private name = "private_0x00007ff67396e000" filename = "" Region: id = 3083 start_va = 0x7ff673970000 end_va = 0x7ff673a6ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007ff673970000" filename = "" Region: id = 3084 start_va = 0x7ff673a70000 end_va = 0x7ff673a92fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007ff673a70000" filename = "" Region: id = 3085 start_va = 0x7ff673a93000 end_va = 0x7ff673a94fff entry_point = 0x0 region_type = private name = "private_0x00007ff673a93000" filename = "" Region: id = 3086 start_va = 0x7ff673a95000 end_va = 0x7ff673a95fff entry_point = 0x0 region_type = private name = "private_0x00007ff673a95000" filename = "" Region: id = 3087 start_va = 0x7ff673a96000 end_va = 0x7ff673a97fff entry_point = 0x0 region_type = private name = "private_0x00007ff673a96000" filename = "" Region: id = 3088 start_va = 0x7ff673a98000 end_va = 0x7ff673a99fff entry_point = 0x0 region_type = private name = "private_0x00007ff673a98000" filename = "" Region: id = 3089 start_va = 0x7ff673a9a000 end_va = 0x7ff673a9bfff entry_point = 0x0 region_type = private name = "private_0x00007ff673a9a000" filename = "" Region: id = 3090 start_va = 0x7ff673a9e000 end_va = 0x7ff673a9ffff entry_point = 0x0 region_type = private name = "private_0x00007ff673a9e000" filename = "" Region: id = 3091 start_va = 0x7ff673b40000 end_va = 0x7ff673b4cfff entry_point = 0x7ff673b40000 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 3092 start_va = 0x7ff8dcdb0000 end_va = 0x7ff8dcdf0fff entry_point = 0x7ff8dcdb0000 region_type = mapped_file name = "ssdpsrv.dll" filename = "\\Windows\\System32\\ssdpsrv.dll" (normalized: "c:\\windows\\system32\\ssdpsrv.dll") Region: id = 3093 start_va = 0x7ff8df3b0000 end_va = 0x7ff8df3f2fff entry_point = 0x7ff8df3b0000 region_type = mapped_file name = "execmodelclient.dll" filename = "\\Windows\\System32\\ExecModelClient.dll" (normalized: "c:\\windows\\system32\\execmodelclient.dll") Region: id = 3094 start_va = 0x7ff8e5d70000 end_va = 0x7ff8e5d77fff entry_point = 0x7ff8e5d70000 region_type = mapped_file name = "wship6.dll" filename = "\\Windows\\System32\\wship6.dll" (normalized: "c:\\windows\\system32\\wship6.dll") Region: id = 3095 start_va = 0x7ff8e5d80000 end_va = 0x7ff8e5d87fff entry_point = 0x7ff8e5d80000 region_type = mapped_file name = "wshtcpip.dll" filename = "\\Windows\\System32\\WSHTCPIP.DLL" (normalized: "c:\\windows\\system32\\wshtcpip.dll") Region: id = 3096 start_va = 0x7ff8e5d90000 end_va = 0x7ff8e5d99fff entry_point = 0x7ff8e5d90000 region_type = mapped_file name = "wshqos.dll" filename = "\\Windows\\System32\\wshqos.dll" (normalized: "c:\\windows\\system32\\wshqos.dll") Region: id = 3097 start_va = 0x7ff8e7280000 end_va = 0x7ff8e7299fff entry_point = 0x7ff8e7280000 region_type = mapped_file name = "dhcpcsvc.dll" filename = "\\Windows\\System32\\dhcpcsvc.dll" (normalized: "c:\\windows\\system32\\dhcpcsvc.dll") Region: id = 3098 start_va = 0x7ff8e72a0000 end_va = 0x7ff8e72b5fff entry_point = 0x7ff8e72a0000 region_type = mapped_file name = "dhcpcsvc6.dll" filename = "\\Windows\\System32\\dhcpcsvc6.dll" (normalized: "c:\\windows\\system32\\dhcpcsvc6.dll") Region: id = 3099 start_va = 0x7ff8e79b0000 end_va = 0x7ff8e7b32fff entry_point = 0x7ff8e79b0000 region_type = mapped_file name = "propsys.dll" filename = "\\Windows\\System32\\propsys.dll" (normalized: "c:\\windows\\system32\\propsys.dll") Region: id = 3100 start_va = 0x7ff8e7b40000 end_va = 0x7ff8e7bb1fff entry_point = 0x7ff8e7b40000 region_type = mapped_file name = "mmdevapi.dll" filename = "\\Windows\\System32\\MMDevAPI.dll" (normalized: "c:\\windows\\system32\\mmdevapi.dll") Region: id = 3101 start_va = 0x7ff8e8040000 end_va = 0x7ff8e804bfff entry_point = 0x7ff8e8040000 region_type = mapped_file name = "bi.dll" filename = "\\Windows\\System32\\bi.dll" (normalized: "c:\\windows\\system32\\bi.dll") Region: id = 3102 start_va = 0x7ff8e8280000 end_va = 0x7ff8e82acfff entry_point = 0x7ff8e8280000 region_type = mapped_file name = "timebrokerserver.dll" filename = "\\Windows\\System32\\TimeBrokerServer.dll" (normalized: "c:\\windows\\system32\\timebrokerserver.dll") Region: id = 3103 start_va = 0x7ff8e8460000 end_va = 0x7ff8e846afff entry_point = 0x7ff8e8460000 region_type = mapped_file name = "winnsi.dll" filename = "\\Windows\\System32\\winnsi.dll" (normalized: "c:\\windows\\system32\\winnsi.dll") Region: id = 3104 start_va = 0x7ff8e8480000 end_va = 0x7ff8e84b7fff entry_point = 0x7ff8e8480000 region_type = mapped_file name = "iphlpapi.dll" filename = "\\Windows\\System32\\IPHLPAPI.DLL" (normalized: "c:\\windows\\system32\\iphlpapi.dll") Region: id = 3105 start_va = 0x7ff8e9060000 end_va = 0x7ff8e9127fff entry_point = 0x7ff8e9060000 region_type = mapped_file name = "coremessaging.dll" filename = "\\Windows\\System32\\CoreMessaging.dll" (normalized: "c:\\windows\\system32\\coremessaging.dll") Region: id = 3106 start_va = 0x7ff8e95b0000 end_va = 0x7ff8e95eefff entry_point = 0x7ff8e95b0000 region_type = mapped_file name = "brokerlib.dll" filename = "\\Windows\\System32\\BrokerLib.dll" (normalized: "c:\\windows\\system32\\brokerlib.dll") Region: id = 3107 start_va = 0x7ff8e9720000 end_va = 0x7ff8e9746fff entry_point = 0x7ff8e9720000 region_type = mapped_file name = "devobj.dll" filename = "\\Windows\\System32\\devobj.dll" (normalized: "c:\\windows\\system32\\devobj.dll") Region: id = 3108 start_va = 0x7ff8e9860000 end_va = 0x7ff8e994dfff entry_point = 0x7ff8e9860000 region_type = mapped_file name = "twinapi.appcore.dll" filename = "\\Windows\\System32\\twinapi.appcore.dll" (normalized: "c:\\windows\\system32\\twinapi.appcore.dll") Region: id = 3109 start_va = 0x7ff8e9ae0000 end_va = 0x7ff8e9b11fff entry_point = 0x7ff8e9ae0000 region_type = mapped_file name = "fwbase.dll" filename = "\\Windows\\System32\\fwbase.dll" (normalized: "c:\\windows\\system32\\fwbase.dll") Region: id = 3110 start_va = 0x7ff8e9b20000 end_va = 0x7ff8e9ba1fff entry_point = 0x7ff8e9b20000 region_type = mapped_file name = "firewallapi.dll" filename = "\\Windows\\System32\\FirewallAPI.dll" (normalized: "c:\\windows\\system32\\firewallapi.dll") Region: id = 3111 start_va = 0x7ff8ea270000 end_va = 0x7ff8ea2a2fff entry_point = 0x7ff8ea270000 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\System32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll") Region: id = 3112 start_va = 0x7ff8ea360000 end_va = 0x7ff8ea37efff entry_point = 0x7ff8ea360000 region_type = mapped_file name = "userenv.dll" filename = "\\Windows\\System32\\userenv.dll" (normalized: "c:\\windows\\system32\\userenv.dll") Region: id = 3113 start_va = 0x7ff8ea5c0000 end_va = 0x7ff8ea61cfff entry_point = 0x7ff8ea5c0000 region_type = mapped_file name = "mswsock.dll" filename = "\\Windows\\System32\\mswsock.dll" (normalized: "c:\\windows\\system32\\mswsock.dll") Region: id = 3114 start_va = 0x7ff8ea620000 end_va = 0x7ff8ea636fff entry_point = 0x7ff8ea620000 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\System32\\cryptsp.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll") Region: id = 3115 start_va = 0x7ff8ea790000 end_va = 0x7ff8ea79afff entry_point = 0x7ff8ea790000 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\System32\\cryptbase.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll") Region: id = 3116 start_va = 0x7ff8ea9d0000 end_va = 0x7ff8ea9fbfff entry_point = 0x7ff8ea9d0000 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\System32\\sspicli.dll" (normalized: "c:\\windows\\system32\\sspicli.dll") Region: id = 3117 start_va = 0x7ff8eabd0000 end_va = 0x7ff8eabf7fff entry_point = 0x7ff8eabd0000 region_type = mapped_file name = "bcrypt.dll" filename = "\\Windows\\System32\\bcrypt.dll" (normalized: "c:\\windows\\system32\\bcrypt.dll") Region: id = 3118 start_va = 0x7ff8eac00000 end_va = 0x7ff8eac6afff entry_point = 0x7ff8eac00000 region_type = mapped_file name = "bcryptprimitives.dll" filename = "\\Windows\\System32\\bcryptprimitives.dll" (normalized: "c:\\windows\\system32\\bcryptprimitives.dll") Region: id = 3119 start_va = 0x7ff8eadd0000 end_va = 0x7ff8eae19fff entry_point = 0x7ff8eadd0000 region_type = mapped_file name = "powrprof.dll" filename = "\\Windows\\System32\\powrprof.dll" (normalized: "c:\\windows\\system32\\powrprof.dll") Region: id = 3120 start_va = 0x7ff8eae20000 end_va = 0x7ff8eae2efff entry_point = 0x7ff8eae20000 region_type = mapped_file name = "kernel.appcore.dll" filename = "\\Windows\\System32\\kernel.appcore.dll" (normalized: "c:\\windows\\system32\\kernel.appcore.dll") Region: id = 3121 start_va = 0x7ff8eae30000 end_va = 0x7ff8eae42fff entry_point = 0x7ff8eae30000 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\System32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll") Region: id = 3122 start_va = 0x7ff8eaf60000 end_va = 0x7ff8eafa3fff entry_point = 0x7ff8eaf60000 region_type = mapped_file name = "cfgmgr32.dll" filename = "\\Windows\\System32\\cfgmgr32.dll" (normalized: "c:\\windows\\system32\\cfgmgr32.dll") Region: id = 3123 start_va = 0x7ff8eb7b0000 end_va = 0x7ff8eb862fff entry_point = 0x7ff8eb7b0000 region_type = mapped_file name = "shcore.dll" filename = "\\Windows\\System32\\SHCore.dll" (normalized: "c:\\windows\\system32\\shcore.dll") Region: id = 3124 start_va = 0x7ff8eb870000 end_va = 0x7ff8eba4cfff entry_point = 0x7ff8eb870000 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 3125 start_va = 0x7ff8ebb30000 end_va = 0x7ff8ebbedfff entry_point = 0x7ff8ebb30000 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll") Region: id = 3126 start_va = 0x7ff8ebdc0000 end_va = 0x7ff8ebf0dfff entry_point = 0x7ff8ebdc0000 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 3127 start_va = 0x7ff8ec240000 end_va = 0x7ff8ec29afff entry_point = 0x7ff8ec240000 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 3128 start_va = 0x7ff8ec450000 end_va = 0x7ff8ec575fff entry_point = 0x7ff8ec450000 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 3129 start_va = 0x7ff8edb10000 end_va = 0x7ff8edbb4fff entry_point = 0x7ff8edb10000 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\System32\\clbcatq.dll" (normalized: "c:\\windows\\system32\\clbcatq.dll") Region: id = 3130 start_va = 0x7ff8edbc0000 end_va = 0x7ff8edd44fff entry_point = 0x7ff8edbc0000 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 3131 start_va = 0x7ff8edd60000 end_va = 0x7ff8edfdbfff entry_point = 0x7ff8edd60000 region_type = mapped_file name = "combase.dll" filename = "\\Windows\\System32\\combase.dll" (normalized: "c:\\windows\\system32\\combase.dll") Region: id = 3132 start_va = 0x7ff8ee040000 end_va = 0x7ff8ee0a8fff entry_point = 0x7ff8ee040000 region_type = mapped_file name = "ws2_32.dll" filename = "\\Windows\\System32\\ws2_32.dll" (normalized: "c:\\windows\\system32\\ws2_32.dll") Region: id = 3133 start_va = 0x7ff8ee0b0000 end_va = 0x7ff8ee14cfff entry_point = 0x7ff8ee0b0000 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 3134 start_va = 0x7ff8ee250000 end_va = 0x7ff8ee257fff entry_point = 0x7ff8ee250000 region_type = mapped_file name = "nsi.dll" filename = "\\Windows\\System32\\nsi.dll" (normalized: "c:\\windows\\system32\\nsi.dll") Region: id = 3135 start_va = 0x7ff8ee2d0000 end_va = 0x7ff8ee37cfff entry_point = 0x7ff8ee2d0000 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 3136 start_va = 0x7ff8ee380000 end_va = 0x7ff8ee541fff entry_point = 0x7ff8ee380000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Thread: id = 299 os_tid = 0x984 Thread: id = 300 os_tid = 0x954 Thread: id = 301 os_tid = 0x924 Thread: id = 302 os_tid = 0x914 Thread: id = 303 os_tid = 0x8cc Thread: id = 304 os_tid = 0x8bc Thread: id = 305 os_tid = 0x890 Thread: id = 306 os_tid = 0x3b0 Thread: id = 307 os_tid = 0x3ac Thread: id = 308 os_tid = 0x364 Process: id = "15" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x42420000" os_pid = "0x368" os_integrity_level = "0x4000" os_privileges = "0x60b16080" monitor_reason = "child_process" parent_id = "10" os_parent_pid = "0x1e8" cmd_line = "C:\\Windows\\system32\\svchost.exe -k LocalSystemNetworkRestricted" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\AudioEndpointBuilder" [0xa], "NT SERVICE\\CscService" [0xa], "NT SERVICE\\DeviceAssociationService" [0xa], "NT SERVICE\\DevQueryBroker" [0xa], "NT SERVICE\\dot3svc" [0xa], "NT SERVICE\\DsSvc" [0xa], "NT SERVICE\\fhsvc" [0xa], "NT SERVICE\\hidserv" [0xa], "NT SERVICE\\HomeGroupListener" [0xa], "NT SERVICE\\NcbService" [0xa], "NT SERVICE\\Netman" [0xa], "NT SERVICE\\PcaSvc" [0xa], "NT SERVICE\\ScDeviceEnum" [0xa], "NT SERVICE\\SensorService" [0xa], "NT SERVICE\\SmsRouter" [0xa], "NT SERVICE\\StorSvc" [0xa], "NT SERVICE\\svsvc" [0xa], "NT SERVICE\\TabletInputService" [0xa], "NT SERVICE\\TrkWks" [0xa], "NT SERVICE\\UmRdpService" [0xa], "NT SERVICE\\vmicguestinterface" [0xa], "NT SERVICE\\vmickvpexchange" [0xa], "NT SERVICE\\vmicshutdown" [0xa], "NT SERVICE\\vmicvmsession" [0xa], "NT SERVICE\\vmicvss" [0xa], "NT SERVICE\\WdiSystemHost" [0xa], "NT SERVICE\\WiaRpc" [0xa], "NT SERVICE\\Wlansvc" [0xa], "NT SERVICE\\WPDBusEnum" [0xe], "NT SERVICE\\wudfsvc" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000dfec" [0xc0000007], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Region: id = 1292 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 1293 start_va = 0x862d330000 end_va = 0x862d33ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000862d330000" filename = "" Region: id = 1294 start_va = 0x862d340000 end_va = 0x862d340fff entry_point = 0x862d340000 region_type = mapped_file name = "svchost.exe.mui" filename = "\\Windows\\System32\\en-US\\svchost.exe.mui" (normalized: "c:\\windows\\system32\\en-us\\svchost.exe.mui") Region: id = 1295 start_va = 0x862d350000 end_va = 0x862d363fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000862d350000" filename = "" Region: id = 1296 start_va = 0x862d370000 end_va = 0x862d3effff entry_point = 0x0 region_type = private name = "private_0x000000862d370000" filename = "" Region: id = 1297 start_va = 0x862d3f0000 end_va = 0x862d3f3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000862d3f0000" filename = "" Region: id = 1298 start_va = 0x862d400000 end_va = 0x862d400fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000862d400000" filename = "" Region: id = 1299 start_va = 0x862d410000 end_va = 0x862d411fff entry_point = 0x0 region_type = private name = "private_0x000000862d410000" filename = "" Region: id = 1300 start_va = 0x862d420000 end_va = 0x862d4ddfff entry_point = 0x862d420000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 1301 start_va = 0x862d4e0000 end_va = 0x862d4e0fff entry_point = 0x0 region_type = private name = "private_0x000000862d4e0000" filename = "" Region: id = 1302 start_va = 0x862d4f0000 end_va = 0x862d4f0fff entry_point = 0x0 region_type = private name = "private_0x000000862d4f0000" filename = "" Region: id = 1303 start_va = 0x862d500000 end_va = 0x862d500fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000862d500000" filename = "" Region: id = 1304 start_va = 0x862d510000 end_va = 0x862d510fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000862d510000" filename = "" Region: id = 1305 start_va = 0x862d520000 end_va = 0x862d520fff entry_point = 0x0 region_type = private name = "private_0x000000862d520000" filename = "" Region: id = 1306 start_va = 0x862d530000 end_va = 0x862d536fff entry_point = 0x0 region_type = private name = "private_0x000000862d530000" filename = "" Region: id = 1307 start_va = 0x862d5c0000 end_va = 0x862d5c0fff entry_point = 0x0 region_type = private name = "private_0x000000862d5c0000" filename = "" Region: id = 1308 start_va = 0x862d5d0000 end_va = 0x862d5d0fff entry_point = 0x862d5d0000 region_type = mapped_file name = "mmdevapi.dll.mui" filename = "\\Windows\\System32\\en-US\\MMDevAPI.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\mmdevapi.dll.mui") Region: id = 1309 start_va = 0x862d5e0000 end_va = 0x862d5e0fff entry_point = 0x862d5e0000 region_type = mapped_file name = "audioendpointbuilder.dll.mui" filename = "\\Windows\\System32\\en-US\\AudioEndpointBuilder.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\audioendpointbuilder.dll.mui") Region: id = 1310 start_va = 0x862d5f0000 end_va = 0x862d5f0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000862d5f0000" filename = "" Region: id = 1311 start_va = 0x862d600000 end_va = 0x862d6fffff entry_point = 0x0 region_type = private name = "private_0x000000862d600000" filename = "" Region: id = 1312 start_va = 0x862d700000 end_va = 0x862d7bffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000862d700000" filename = "" Region: id = 1313 start_va = 0x862d7c0000 end_va = 0x862d7c5fff entry_point = 0x862d7c0000 region_type = mapped_file name = "sysmain.dll.mui" filename = "\\Windows\\System32\\en-US\\sysmain.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\sysmain.dll.mui") Region: id = 1314 start_va = 0x862d7e0000 end_va = 0x862d7e6fff entry_point = 0x0 region_type = private name = "private_0x000000862d7e0000" filename = "" Region: id = 1315 start_va = 0x862d800000 end_va = 0x862d8fffff entry_point = 0x0 region_type = private name = "private_0x000000862d800000" filename = "" Region: id = 1316 start_va = 0x862d900000 end_va = 0x862da87fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000862d900000" filename = "" Region: id = 1317 start_va = 0x862da90000 end_va = 0x862dc10fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000862da90000" filename = "" Region: id = 1318 start_va = 0x862dc20000 end_va = 0x862dc9ffff entry_point = 0x0 region_type = private name = "private_0x000000862dc20000" filename = "" Region: id = 1319 start_va = 0x862dca0000 end_va = 0x862dce3fff entry_point = 0x0 region_type = private name = "private_0x000000862dca0000" filename = "" Region: id = 1320 start_va = 0x862dd20000 end_va = 0x862de1ffff entry_point = 0x0 region_type = private name = "private_0x000000862dd20000" filename = "" Region: id = 1321 start_va = 0x862de20000 end_va = 0x862df1ffff entry_point = 0x0 region_type = private name = "private_0x000000862de20000" filename = "" Region: id = 1322 start_va = 0x862df20000 end_va = 0x862e01ffff entry_point = 0x0 region_type = private name = "private_0x000000862df20000" filename = "" Region: id = 1323 start_va = 0x862e0a0000 end_va = 0x862e11ffff entry_point = 0x0 region_type = private name = "private_0x000000862e0a0000" filename = "" Region: id = 1324 start_va = 0x862e120000 end_va = 0x862e21ffff entry_point = 0x0 region_type = private name = "private_0x000000862e120000" filename = "" Region: id = 1325 start_va = 0x862e220000 end_va = 0x862e556fff entry_point = 0x862e220000 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 1326 start_va = 0x862e560000 end_va = 0x862e65ffff entry_point = 0x0 region_type = private name = "private_0x000000862e560000" filename = "" Region: id = 1327 start_va = 0x862e660000 end_va = 0x862e75ffff entry_point = 0x0 region_type = private name = "private_0x000000862e660000" filename = "" Region: id = 1328 start_va = 0x862e760000 end_va = 0x862e85ffff entry_point = 0x0 region_type = private name = "private_0x000000862e760000" filename = "" Region: id = 1329 start_va = 0x862e860000 end_va = 0x862e890fff entry_point = 0x862e860000 region_type = mapped_file name = "pfpre_871cf952.mkd" filename = "\\Windows\\Prefetch\\PfPre_871cf952.mkd" (normalized: "c:\\windows\\prefetch\\pfpre_871cf952.mkd") Region: id = 1330 start_va = 0x862e8a0000 end_va = 0x862e8a6fff entry_point = 0x0 region_type = private name = "private_0x000000862e8a0000" filename = "" Region: id = 1331 start_va = 0x862e960000 end_va = 0x862ea5ffff entry_point = 0x0 region_type = private name = "private_0x000000862e960000" filename = "" Region: id = 1332 start_va = 0x862ea60000 end_va = 0x862eb5ffff entry_point = 0x0 region_type = private name = "private_0x000000862ea60000" filename = "" Region: id = 1333 start_va = 0x862ebd0000 end_va = 0x862ebd6fff entry_point = 0x0 region_type = private name = "private_0x000000862ebd0000" filename = "" Region: id = 1334 start_va = 0x862ec00000 end_va = 0x862ecfffff entry_point = 0x0 region_type = private name = "private_0x000000862ec00000" filename = "" Region: id = 1335 start_va = 0x862ed00000 end_va = 0x872ecfffff entry_point = 0x0 region_type = private name = "private_0x000000862ed00000" filename = "" Region: id = 1336 start_va = 0x872ed00000 end_va = 0x872edfffff entry_point = 0x0 region_type = private name = "private_0x000000872ed00000" filename = "" Region: id = 1337 start_va = 0x872ee00000 end_va = 0x872eefffff entry_point = 0x0 region_type = private name = "private_0x000000872ee00000" filename = "" Region: id = 1338 start_va = 0x872ef00000 end_va = 0x872effffff entry_point = 0x0 region_type = private name = "private_0x000000872ef00000" filename = "" Region: id = 1339 start_va = 0x872f000000 end_va = 0x872f3fffff entry_point = 0x0 region_type = private name = "private_0x000000872f000000" filename = "" Region: id = 1340 start_va = 0x872f400000 end_va = 0x872f503fff entry_point = 0x0 region_type = private name = "private_0x000000872f400000" filename = "" Region: id = 1341 start_va = 0x872f510000 end_va = 0x872f60ffff entry_point = 0x0 region_type = private name = "private_0x000000872f510000" filename = "" Region: id = 1342 start_va = 0x872f700000 end_va = 0x872f7fffff entry_point = 0x0 region_type = private name = "private_0x000000872f700000" filename = "" Region: id = 1343 start_va = 0x872f980000 end_va = 0x872f986fff entry_point = 0x0 region_type = private name = "private_0x000000872f980000" filename = "" Region: id = 1344 start_va = 0x872f9b0000 end_va = 0x872faaffff entry_point = 0x0 region_type = private name = "private_0x000000872f9b0000" filename = "" Region: id = 1345 start_va = 0x872fd00000 end_va = 0x872fdfffff entry_point = 0x0 region_type = private name = "private_0x000000872fd00000" filename = "" Region: id = 1346 start_va = 0x872fe00000 end_va = 0x872ffcafff entry_point = 0x0 region_type = private name = "private_0x000000872fe00000" filename = "" Region: id = 1347 start_va = 0x8730000000 end_va = 0x87300fffff entry_point = 0x0 region_type = private name = "private_0x0000008730000000" filename = "" Region: id = 1348 start_va = 0x8730100000 end_va = 0x87301fffff entry_point = 0x0 region_type = private name = "private_0x0000008730100000" filename = "" Region: id = 1349 start_va = 0x8730200000 end_va = 0x87302fffff entry_point = 0x0 region_type = private name = "private_0x0000008730200000" filename = "" Region: id = 1350 start_va = 0x8730300000 end_va = 0x87303fffff entry_point = 0x0 region_type = private name = "private_0x0000008730300000" filename = "" Region: id = 1351 start_va = 0x8730400000 end_va = 0x87304fffff entry_point = 0x0 region_type = private name = "private_0x0000008730400000" filename = "" Region: id = 1352 start_va = 0x8730500000 end_va = 0x87305fffff entry_point = 0x0 region_type = private name = "private_0x0000008730500000" filename = "" Region: id = 1353 start_va = 0x8730600000 end_va = 0x87306fffff entry_point = 0x0 region_type = private name = "private_0x0000008730600000" filename = "" Region: id = 1354 start_va = 0x8730700000 end_va = 0x87307fffff entry_point = 0x0 region_type = private name = "private_0x0000008730700000" filename = "" Region: id = 1355 start_va = 0x8730800000 end_va = 0x87308fffff entry_point = 0x0 region_type = private name = "private_0x0000008730800000" filename = "" Region: id = 1356 start_va = 0x8730a50000 end_va = 0x8730b4ffff entry_point = 0x0 region_type = private name = "private_0x0000008730a50000" filename = "" Region: id = 1357 start_va = 0x8730d00000 end_va = 0x8730dfffff entry_point = 0x0 region_type = private name = "private_0x0000008730d00000" filename = "" Region: id = 1358 start_va = 0x8730e00000 end_va = 0x8730efffff entry_point = 0x0 region_type = private name = "private_0x0000008730e00000" filename = "" Region: id = 1359 start_va = 0x8730f00000 end_va = 0x8730ffffff entry_point = 0x0 region_type = private name = "private_0x0000008730f00000" filename = "" Region: id = 1360 start_va = 0x8731000000 end_va = 0x87310fffff entry_point = 0x0 region_type = private name = "private_0x0000008731000000" filename = "" Region: id = 1361 start_va = 0x8731100000 end_va = 0x87311fffff entry_point = 0x0 region_type = private name = "private_0x0000008731100000" filename = "" Region: id = 1362 start_va = 0x8731200000 end_va = 0x87312fffff entry_point = 0x0 region_type = private name = "private_0x0000008731200000" filename = "" Region: id = 1363 start_va = 0x8731300000 end_va = 0x87313fffff entry_point = 0x0 region_type = private name = "private_0x0000008731300000" filename = "" Region: id = 1364 start_va = 0x8731400000 end_va = 0x87314fffff entry_point = 0x0 region_type = private name = "private_0x0000008731400000" filename = "" Region: id = 1365 start_va = 0x8731500000 end_va = 0x87315fffff entry_point = 0x0 region_type = private name = "private_0x0000008731500000" filename = "" Region: id = 1366 start_va = 0x8731600000 end_va = 0x87316fffff entry_point = 0x0 region_type = private name = "private_0x0000008731600000" filename = "" Region: id = 1367 start_va = 0x7df5ffac0000 end_va = 0x7ff5ffabffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007df5ffac0000" filename = "" Region: id = 1368 start_va = 0x7ff6737d6000 end_va = 0x7ff6737d7fff entry_point = 0x0 region_type = private name = "private_0x00007ff6737d6000" filename = "" Region: id = 1369 start_va = 0x7ff6737d8000 end_va = 0x7ff6737d9fff entry_point = 0x0 region_type = private name = "private_0x00007ff6737d8000" filename = "" Region: id = 1370 start_va = 0x7ff6737da000 end_va = 0x7ff6737dbfff entry_point = 0x0 region_type = private name = "private_0x00007ff6737da000" filename = "" Region: id = 1371 start_va = 0x7ff6737dc000 end_va = 0x7ff6737ddfff entry_point = 0x0 region_type = private name = "private_0x00007ff6737dc000" filename = "" Region: id = 1372 start_va = 0x7ff6737de000 end_va = 0x7ff6737dffff entry_point = 0x0 region_type = private name = "private_0x00007ff6737de000" filename = "" Region: id = 1373 start_va = 0x7ff6737e0000 end_va = 0x7ff6737e1fff entry_point = 0x0 region_type = private name = "private_0x00007ff6737e0000" filename = "" Region: id = 1374 start_va = 0x7ff6737e2000 end_va = 0x7ff6737e3fff entry_point = 0x0 region_type = private name = "private_0x00007ff6737e2000" filename = "" Region: id = 1375 start_va = 0x7ff6737e4000 end_va = 0x7ff6737e5fff entry_point = 0x0 region_type = private name = "private_0x00007ff6737e4000" filename = "" Region: id = 1376 start_va = 0x7ff6737e8000 end_va = 0x7ff6737e9fff entry_point = 0x0 region_type = private name = "private_0x00007ff6737e8000" filename = "" Region: id = 1377 start_va = 0x7ff6737ea000 end_va = 0x7ff6737ebfff entry_point = 0x0 region_type = private name = "private_0x00007ff6737ea000" filename = "" Region: id = 1378 start_va = 0x7ff6737ee000 end_va = 0x7ff6737effff entry_point = 0x0 region_type = private name = "private_0x00007ff6737ee000" filename = "" Region: id = 1379 start_va = 0x7ff6737f0000 end_va = 0x7ff6738effff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007ff6737f0000" filename = "" Region: id = 1380 start_va = 0x7ff6738f0000 end_va = 0x7ff673912fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007ff6738f0000" filename = "" Region: id = 1381 start_va = 0x7ff673914000 end_va = 0x7ff673914fff entry_point = 0x0 region_type = private name = "private_0x00007ff673914000" filename = "" Region: id = 1382 start_va = 0x7ff673918000 end_va = 0x7ff673919fff entry_point = 0x0 region_type = private name = "private_0x00007ff673918000" filename = "" Region: id = 1383 start_va = 0x7ff67391a000 end_va = 0x7ff67391bfff entry_point = 0x0 region_type = private name = "private_0x00007ff67391a000" filename = "" Region: id = 1384 start_va = 0x7ff67391c000 end_va = 0x7ff67391dfff entry_point = 0x0 region_type = private name = "private_0x00007ff67391c000" filename = "" Region: id = 1385 start_va = 0x7ff67391e000 end_va = 0x7ff67391ffff entry_point = 0x0 region_type = private name = "private_0x00007ff67391e000" filename = "" Region: id = 1386 start_va = 0x7ff673b40000 end_va = 0x7ff673b4cfff entry_point = 0x7ff673b40000 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 1387 start_va = 0x7ff8d5ea0000 end_va = 0x7ff8d5f3dfff entry_point = 0x7ff8d5ea0000 region_type = mapped_file name = "wer.dll" filename = "\\Windows\\System32\\wer.dll" (normalized: "c:\\windows\\system32\\wer.dll") Region: id = 1388 start_va = 0x7ff8dcaa0000 end_va = 0x7ff8dcaf7fff entry_point = 0x7ff8dcaa0000 region_type = mapped_file name = "ncbservice.dll" filename = "\\Windows\\System32\\ncbservice.dll" (normalized: "c:\\windows\\system32\\ncbservice.dll") Region: id = 1389 start_va = 0x7ff8df3b0000 end_va = 0x7ff8df3f2fff entry_point = 0x7ff8df3b0000 region_type = mapped_file name = "execmodelclient.dll" filename = "\\Windows\\System32\\ExecModelClient.dll" (normalized: "c:\\windows\\system32\\execmodelclient.dll") Region: id = 1390 start_va = 0x7ff8df640000 end_va = 0x7ff8dfaa9fff entry_point = 0x7ff8df640000 region_type = mapped_file name = "actxprxy.dll" filename = "\\Windows\\System32\\actxprxy.dll" (normalized: "c:\\windows\\system32\\actxprxy.dll") Region: id = 1391 start_va = 0x7ff8e0f70000 end_va = 0x7ff8e0f7dfff entry_point = 0x7ff8e0f70000 region_type = mapped_file name = "npmproxy.dll" filename = "\\Windows\\System32\\npmproxy.dll" (normalized: "c:\\windows\\system32\\npmproxy.dll") Region: id = 1392 start_va = 0x7ff8e2370000 end_va = 0x7ff8e2391fff entry_point = 0x7ff8e2370000 region_type = mapped_file name = "trkwks.dll" filename = "\\Windows\\System32\\trkwks.dll" (normalized: "c:\\windows\\system32\\trkwks.dll") Region: id = 1393 start_va = 0x7ff8e23a0000 end_va = 0x7ff8e24b2fff entry_point = 0x7ff8e23a0000 region_type = mapped_file name = "sysmain.dll" filename = "\\Windows\\System32\\sysmain.dll" (normalized: "c:\\windows\\system32\\sysmain.dll") Region: id = 1394 start_va = 0x7ff8e2550000 end_va = 0x7ff8e25cffff entry_point = 0x7ff8e2550000 region_type = mapped_file name = "pcasvc.dll" filename = "\\Windows\\System32\\pcasvc.dll" (normalized: "c:\\windows\\system32\\pcasvc.dll") Region: id = 1395 start_va = 0x7ff8e2760000 end_va = 0x7ff8e279efff entry_point = 0x7ff8e2760000 region_type = mapped_file name = "netprofm.dll" filename = "\\Windows\\System32\\netprofm.dll" (normalized: "c:\\windows\\system32\\netprofm.dll") Region: id = 1396 start_va = 0x7ff8e5360000 end_va = 0x7ff8e536efff entry_point = 0x7ff8e5360000 region_type = mapped_file name = "pcacli.dll" filename = "\\Windows\\System32\\pcacli.dll" (normalized: "c:\\windows\\system32\\pcacli.dll") Region: id = 1397 start_va = 0x7ff8e5420000 end_va = 0x7ff8e542afff entry_point = 0x7ff8e5420000 region_type = mapped_file name = "systemeventsbrokerclient.dll" filename = "\\Windows\\System32\\SystemEventsBrokerClient.dll" (normalized: "c:\\windows\\system32\\systemeventsbrokerclient.dll") Region: id = 1398 start_va = 0x7ff8e5520000 end_va = 0x7ff8e553cfff entry_point = 0x7ff8e5520000 region_type = mapped_file name = "wdi.dll" filename = "\\Windows\\System32\\wdi.dll" (normalized: "c:\\windows\\system32\\wdi.dll") Region: id = 1399 start_va = 0x7ff8e6180000 end_va = 0x7ff8e6188fff entry_point = 0x7ff8e6180000 region_type = mapped_file name = "httpprxc.dll" filename = "\\Windows\\System32\\httpprxc.dll" (normalized: "c:\\windows\\system32\\httpprxc.dll") Region: id = 1400 start_va = 0x7ff8e6330000 end_va = 0x7ff8e6365fff entry_point = 0x7ff8e6330000 region_type = mapped_file name = "xmllite.dll" filename = "\\Windows\\System32\\xmllite.dll" (normalized: "c:\\windows\\system32\\xmllite.dll") Region: id = 1401 start_va = 0x7ff8e6ed0000 end_va = 0x7ff8e6f02fff entry_point = 0x7ff8e6ed0000 region_type = mapped_file name = "wudfplatform.dll" filename = "\\Windows\\System32\\WUDFPlatform.dll" (normalized: "c:\\windows\\system32\\wudfplatform.dll") Region: id = 1402 start_va = 0x7ff8e6f10000 end_va = 0x7ff8e6f2afff entry_point = 0x7ff8e6f10000 region_type = mapped_file name = "wudfsvc.dll" filename = "\\Windows\\System32\\WUDFSvc.dll" (normalized: "c:\\windows\\system32\\wudfsvc.dll") Region: id = 1403 start_va = 0x7ff8e79b0000 end_va = 0x7ff8e7b32fff entry_point = 0x7ff8e79b0000 region_type = mapped_file name = "propsys.dll" filename = "\\Windows\\System32\\propsys.dll" (normalized: "c:\\windows\\system32\\propsys.dll") Region: id = 1404 start_va = 0x7ff8e7b40000 end_va = 0x7ff8e7bb1fff entry_point = 0x7ff8e7b40000 region_type = mapped_file name = "mmdevapi.dll" filename = "\\Windows\\System32\\MMDevAPI.dll" (normalized: "c:\\windows\\system32\\mmdevapi.dll") Region: id = 1405 start_va = 0x7ff8e7bc0000 end_va = 0x7ff8e7c09fff entry_point = 0x7ff8e7bc0000 region_type = mapped_file name = "audioendpointbuilder.dll" filename = "\\Windows\\System32\\AudioEndpointBuilder.dll" (normalized: "c:\\windows\\system32\\audioendpointbuilder.dll") Region: id = 1406 start_va = 0x7ff8e7f80000 end_va = 0x7ff8e803ffff entry_point = 0x7ff8e7f80000 region_type = mapped_file name = "taskschd.dll" filename = "\\Windows\\System32\\taskschd.dll" (normalized: "c:\\windows\\system32\\taskschd.dll") Region: id = 1407 start_va = 0x7ff8e8040000 end_va = 0x7ff8e804bfff entry_point = 0x7ff8e8040000 region_type = mapped_file name = "bi.dll" filename = "\\Windows\\System32\\bi.dll" (normalized: "c:\\windows\\system32\\bi.dll") Region: id = 1408 start_va = 0x7ff8e8120000 end_va = 0x7ff8e8136fff entry_point = 0x7ff8e8120000 region_type = mapped_file name = "portabledeviceconnectapi.dll" filename = "\\Windows\\System32\\PortableDeviceConnectApi.dll" (normalized: "c:\\windows\\system32\\portabledeviceconnectapi.dll") Region: id = 1409 start_va = 0x7ff8e8140000 end_va = 0x7ff8e81e0fff entry_point = 0x7ff8e8140000 region_type = mapped_file name = "portabledeviceapi.dll" filename = "\\Windows\\System32\\PortableDeviceApi.dll" (normalized: "c:\\windows\\system32\\portabledeviceapi.dll") Region: id = 1410 start_va = 0x7ff8e8270000 end_va = 0x7ff8e827ffff entry_point = 0x7ff8e8270000 region_type = mapped_file name = "pcadm.dll" filename = "\\Windows\\System32\\pcadm.dll" (normalized: "c:\\windows\\system32\\pcadm.dll") Region: id = 1411 start_va = 0x7ff8e8460000 end_va = 0x7ff8e846afff entry_point = 0x7ff8e8460000 region_type = mapped_file name = "winnsi.dll" filename = "\\Windows\\System32\\winnsi.dll" (normalized: "c:\\windows\\system32\\winnsi.dll") Region: id = 1412 start_va = 0x7ff8e8480000 end_va = 0x7ff8e84b7fff entry_point = 0x7ff8e8480000 region_type = mapped_file name = "iphlpapi.dll" filename = "\\Windows\\System32\\IPHLPAPI.DLL" (normalized: "c:\\windows\\system32\\iphlpapi.dll") Region: id = 1413 start_va = 0x7ff8e8ad0000 end_va = 0x7ff8e8ae2fff entry_point = 0x7ff8e8ad0000 region_type = mapped_file name = "wtsapi32.dll" filename = "\\Windows\\System32\\wtsapi32.dll" (normalized: "c:\\windows\\system32\\wtsapi32.dll") Region: id = 1414 start_va = 0x7ff8e9060000 end_va = 0x7ff8e9127fff entry_point = 0x7ff8e9060000 region_type = mapped_file name = "coremessaging.dll" filename = "\\Windows\\System32\\CoreMessaging.dll" (normalized: "c:\\windows\\system32\\coremessaging.dll") Region: id = 1415 start_va = 0x7ff8e9500000 end_va = 0x7ff8e9577fff entry_point = 0x7ff8e9500000 region_type = mapped_file name = "apphelp.dll" filename = "\\Windows\\System32\\apphelp.dll" (normalized: "c:\\windows\\system32\\apphelp.dll") Region: id = 1416 start_va = 0x7ff8e95b0000 end_va = 0x7ff8e95eefff entry_point = 0x7ff8e95b0000 region_type = mapped_file name = "brokerlib.dll" filename = "\\Windows\\System32\\BrokerLib.dll" (normalized: "c:\\windows\\system32\\brokerlib.dll") Region: id = 1417 start_va = 0x7ff8e9720000 end_va = 0x7ff8e9746fff entry_point = 0x7ff8e9720000 region_type = mapped_file name = "devobj.dll" filename = "\\Windows\\System32\\devobj.dll" (normalized: "c:\\windows\\system32\\devobj.dll") Region: id = 1418 start_va = 0x7ff8e9fe0000 end_va = 0x7ff8e9ffbfff entry_point = 0x7ff8e9fe0000 region_type = mapped_file name = "mpr.dll" filename = "\\Windows\\System32\\mpr.dll" (normalized: "c:\\windows\\system32\\mpr.dll") Region: id = 1419 start_va = 0x7ff8ea0f0000 end_va = 0x7ff8ea121fff entry_point = 0x7ff8ea0f0000 region_type = mapped_file name = "ntmarta.dll" filename = "\\Windows\\System32\\ntmarta.dll" (normalized: "c:\\windows\\system32\\ntmarta.dll") Region: id = 1420 start_va = 0x7ff8ea270000 end_va = 0x7ff8ea2a2fff entry_point = 0x7ff8ea270000 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\System32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll") Region: id = 1421 start_va = 0x7ff8ea360000 end_va = 0x7ff8ea37efff entry_point = 0x7ff8ea360000 region_type = mapped_file name = "userenv.dll" filename = "\\Windows\\System32\\userenv.dll" (normalized: "c:\\windows\\system32\\userenv.dll") Region: id = 1422 start_va = 0x7ff8ea5c0000 end_va = 0x7ff8ea61cfff entry_point = 0x7ff8ea5c0000 region_type = mapped_file name = "mswsock.dll" filename = "\\Windows\\System32\\mswsock.dll" (normalized: "c:\\windows\\system32\\mswsock.dll") Region: id = 1423 start_va = 0x7ff8ea620000 end_va = 0x7ff8ea636fff entry_point = 0x7ff8ea620000 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\System32\\cryptsp.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll") Region: id = 1424 start_va = 0x7ff8ea790000 end_va = 0x7ff8ea79afff entry_point = 0x7ff8ea790000 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\System32\\cryptbase.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll") Region: id = 1425 start_va = 0x7ff8ea820000 end_va = 0x7ff8ea877fff entry_point = 0x7ff8ea820000 region_type = mapped_file name = "winsta.dll" filename = "\\Windows\\System32\\winsta.dll" (normalized: "c:\\windows\\system32\\winsta.dll") Region: id = 1426 start_va = 0x7ff8ea9d0000 end_va = 0x7ff8ea9fbfff entry_point = 0x7ff8ea9d0000 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\System32\\sspicli.dll" (normalized: "c:\\windows\\system32\\sspicli.dll") Region: id = 1427 start_va = 0x7ff8eabd0000 end_va = 0x7ff8eabf7fff entry_point = 0x7ff8eabd0000 region_type = mapped_file name = "bcrypt.dll" filename = "\\Windows\\System32\\bcrypt.dll" (normalized: "c:\\windows\\system32\\bcrypt.dll") Region: id = 1428 start_va = 0x7ff8eac00000 end_va = 0x7ff8eac6afff entry_point = 0x7ff8eac00000 region_type = mapped_file name = "bcryptprimitives.dll" filename = "\\Windows\\System32\\bcryptprimitives.dll" (normalized: "c:\\windows\\system32\\bcryptprimitives.dll") Region: id = 1429 start_va = 0x7ff8eadb0000 end_va = 0x7ff8eadc0fff entry_point = 0x7ff8eadb0000 region_type = mapped_file name = "msasn1.dll" filename = "\\Windows\\System32\\msasn1.dll" (normalized: "c:\\windows\\system32\\msasn1.dll") Region: id = 1430 start_va = 0x7ff8eadd0000 end_va = 0x7ff8eae19fff entry_point = 0x7ff8eadd0000 region_type = mapped_file name = "powrprof.dll" filename = "\\Windows\\System32\\powrprof.dll" (normalized: "c:\\windows\\system32\\powrprof.dll") Region: id = 1431 start_va = 0x7ff8eae20000 end_va = 0x7ff8eae2efff entry_point = 0x7ff8eae20000 region_type = mapped_file name = "kernel.appcore.dll" filename = "\\Windows\\System32\\kernel.appcore.dll" (normalized: "c:\\windows\\system32\\kernel.appcore.dll") Region: id = 1432 start_va = 0x7ff8eae30000 end_va = 0x7ff8eae42fff entry_point = 0x7ff8eae30000 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\System32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll") Region: id = 1433 start_va = 0x7ff8eae50000 end_va = 0x7ff8eaea3fff entry_point = 0x7ff8eae50000 region_type = mapped_file name = "wintrust.dll" filename = "\\Windows\\System32\\wintrust.dll" (normalized: "c:\\windows\\system32\\wintrust.dll") Region: id = 1434 start_va = 0x7ff8eaf60000 end_va = 0x7ff8eafa3fff entry_point = 0x7ff8eaf60000 region_type = mapped_file name = "cfgmgr32.dll" filename = "\\Windows\\System32\\cfgmgr32.dll" (normalized: "c:\\windows\\system32\\cfgmgr32.dll") Region: id = 1435 start_va = 0x7ff8eafb0000 end_va = 0x7ff8eb170fff entry_point = 0x7ff8eafb0000 region_type = mapped_file name = "crypt32.dll" filename = "\\Windows\\System32\\crypt32.dll" (normalized: "c:\\windows\\system32\\crypt32.dll") Region: id = 1436 start_va = 0x7ff8eb7b0000 end_va = 0x7ff8eb862fff entry_point = 0x7ff8eb7b0000 region_type = mapped_file name = "shcore.dll" filename = "\\Windows\\System32\\SHCore.dll" (normalized: "c:\\windows\\system32\\shcore.dll") Region: id = 1437 start_va = 0x7ff8eb870000 end_va = 0x7ff8eba4cfff entry_point = 0x7ff8eb870000 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 1438 start_va = 0x7ff8ebb30000 end_va = 0x7ff8ebbedfff entry_point = 0x7ff8ebb30000 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll") Region: id = 1439 start_va = 0x7ff8ebbf0000 end_va = 0x7ff8ebdb4fff entry_point = 0x7ff8ebbf0000 region_type = mapped_file name = "setupapi.dll" filename = "\\Windows\\System32\\setupapi.dll" (normalized: "c:\\windows\\system32\\setupapi.dll") Region: id = 1440 start_va = 0x7ff8ebdc0000 end_va = 0x7ff8ebf0dfff entry_point = 0x7ff8ebdc0000 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 1441 start_va = 0x7ff8ec240000 end_va = 0x7ff8ec29afff entry_point = 0x7ff8ec240000 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 1442 start_va = 0x7ff8ec300000 end_va = 0x7ff8ec440fff entry_point = 0x7ff8ec300000 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll") Region: id = 1443 start_va = 0x7ff8ec450000 end_va = 0x7ff8ec575fff entry_point = 0x7ff8ec450000 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 1444 start_va = 0x7ff8edb10000 end_va = 0x7ff8edbb4fff entry_point = 0x7ff8edb10000 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\System32\\clbcatq.dll" (normalized: "c:\\windows\\system32\\clbcatq.dll") Region: id = 1445 start_va = 0x7ff8edbc0000 end_va = 0x7ff8edd44fff entry_point = 0x7ff8edbc0000 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 1446 start_va = 0x7ff8edd60000 end_va = 0x7ff8edfdbfff entry_point = 0x7ff8edd60000 region_type = mapped_file name = "combase.dll" filename = "\\Windows\\System32\\combase.dll" (normalized: "c:\\windows\\system32\\combase.dll") Region: id = 1447 start_va = 0x7ff8edfe0000 end_va = 0x7ff8ee030fff entry_point = 0x7ff8edfe0000 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\System32\\shlwapi.dll" (normalized: "c:\\windows\\system32\\shlwapi.dll") Region: id = 1448 start_va = 0x7ff8ee040000 end_va = 0x7ff8ee0a8fff entry_point = 0x7ff8ee040000 region_type = mapped_file name = "ws2_32.dll" filename = "\\Windows\\System32\\ws2_32.dll" (normalized: "c:\\windows\\system32\\ws2_32.dll") Region: id = 1449 start_va = 0x7ff8ee0b0000 end_va = 0x7ff8ee14cfff entry_point = 0x7ff8ee0b0000 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 1450 start_va = 0x7ff8ee190000 end_va = 0x7ff8ee235fff entry_point = 0x7ff8ee190000 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 1451 start_va = 0x7ff8ee250000 end_va = 0x7ff8ee257fff entry_point = 0x7ff8ee250000 region_type = mapped_file name = "nsi.dll" filename = "\\Windows\\System32\\nsi.dll" (normalized: "c:\\windows\\system32\\nsi.dll") Region: id = 1452 start_va = 0x7ff8ee260000 end_va = 0x7ff8ee2cefff entry_point = 0x7ff8ee260000 region_type = mapped_file name = "coml2.dll" filename = "\\Windows\\System32\\coml2.dll" (normalized: "c:\\windows\\system32\\coml2.dll") Region: id = 1453 start_va = 0x7ff8ee2d0000 end_va = 0x7ff8ee37cfff entry_point = 0x7ff8ee2d0000 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 1454 start_va = 0x7ff8ee380000 end_va = 0x7ff8ee541fff entry_point = 0x7ff8ee380000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Thread: id = 309 os_tid = 0xf2c Thread: id = 310 os_tid = 0x910 Thread: id = 311 os_tid = 0xadc Thread: id = 312 os_tid = 0x944 Thread: id = 313 os_tid = 0x93c Thread: id = 314 os_tid = 0x774 Thread: id = 315 os_tid = 0x620 Thread: id = 316 os_tid = 0x61c Thread: id = 317 os_tid = 0x5f8 Thread: id = 318 os_tid = 0x418 Thread: id = 319 os_tid = 0x234 Thread: id = 320 os_tid = 0x194 Thread: id = 321 os_tid = 0x3d0 Thread: id = 322 os_tid = 0x3c4 Thread: id = 323 os_tid = 0x36c Thread: id = 524 os_tid = 0xdf8 Thread: id = 540 os_tid = 0xd10 Process: id = "16" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x56940000" os_pid = "0x3a0" os_integrity_level = "0x4000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "10" os_parent_pid = "0x1e8" cmd_line = "C:\\Windows\\system32\\svchost.exe -k LocalService" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\Local Service" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\AJRouter" [0xa], "NT SERVICE\\bthserv" [0xa], "NT SERVICE\\CDPSvc" [0xa], "NT SERVICE\\EventSystem" [0xe], "NT SERVICE\\fdPHost" [0xa], "NT SERVICE\\FontCache" [0xa], "NT SERVICE\\LicenseManager" [0xa], "NT SERVICE\\lltdsvc" [0xa], "NT SERVICE\\netprofm" [0xa], "NT SERVICE\\nsi" [0xa], "NT SERVICE\\RemoteRegistry" [0xa], "NT SERVICE\\SstpSvc" [0xa], "NT SERVICE\\W32Time" [0xa], "NT SERVICE\\WdiServiceHost" [0xa], "NT SERVICE\\WebClient" [0xa], "NT SERVICE\\WinHttpAutoProxySvc" [0xa], "NT SERVICE\\workfolderssvc" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000e377" [0xc000000f], "LOCAL" [0x7] Region: id = 2476 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 2477 start_va = 0x86e6be0000 end_va = 0x86e6beffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000086e6be0000" filename = "" Region: id = 2478 start_va = 0x86e6bf0000 end_va = 0x86e6bf0fff entry_point = 0x86e6bf0000 region_type = mapped_file name = "svchost.exe.mui" filename = "\\Windows\\System32\\en-US\\svchost.exe.mui" (normalized: "c:\\windows\\system32\\en-us\\svchost.exe.mui") Region: id = 2479 start_va = 0x86e6c00000 end_va = 0x86e6c13fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000086e6c00000" filename = "" Region: id = 2480 start_va = 0x86e6c20000 end_va = 0x86e6c9ffff entry_point = 0x0 region_type = private name = "private_0x00000086e6c20000" filename = "" Region: id = 2481 start_va = 0x86e6ca0000 end_va = 0x86e6ca3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000086e6ca0000" filename = "" Region: id = 2482 start_va = 0x86e6cb0000 end_va = 0x86e6cb0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000086e6cb0000" filename = "" Region: id = 2483 start_va = 0x86e6cc0000 end_va = 0x86e6cc1fff entry_point = 0x0 region_type = private name = "private_0x00000086e6cc0000" filename = "" Region: id = 2484 start_va = 0x86e6cd0000 end_va = 0x86e6d8dfff entry_point = 0x86e6cd0000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 2485 start_va = 0x86e6d90000 end_va = 0x86e6d90fff entry_point = 0x0 region_type = private name = "private_0x00000086e6d90000" filename = "" Region: id = 2486 start_va = 0x86e6da0000 end_va = 0x86e6da0fff entry_point = 0x0 region_type = private name = "private_0x00000086e6da0000" filename = "" Region: id = 2487 start_va = 0x86e6db0000 end_va = 0x86e6db0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000086e6db0000" filename = "" Region: id = 2488 start_va = 0x86e6dc0000 end_va = 0x86e6dd1fff entry_point = 0x86e6dc0000 region_type = mapped_file name = "es.dll" filename = "\\Windows\\System32\\es.dll" (normalized: "c:\\windows\\system32\\es.dll") Region: id = 2489 start_va = 0x86e6de0000 end_va = 0x86e6de6fff entry_point = 0x0 region_type = private name = "private_0x00000086e6de0000" filename = "" Region: id = 2490 start_va = 0x86e6df0000 end_va = 0x86e6df4fff entry_point = 0x86e6df0000 region_type = mapped_file name = "stdole2.tlb" filename = "\\Windows\\System32\\stdole2.tlb" (normalized: "c:\\windows\\system32\\stdole2.tlb") Region: id = 2491 start_va = 0x86e6e00000 end_va = 0x86e6efffff entry_point = 0x0 region_type = private name = "private_0x00000086e6e00000" filename = "" Region: id = 2492 start_va = 0x86e6f80000 end_va = 0x86e703ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000086e6f80000" filename = "" Region: id = 2493 start_va = 0x86e7040000 end_va = 0x86e7041fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000086e7040000" filename = "" Region: id = 2494 start_va = 0x86e7050000 end_va = 0x86e7056fff entry_point = 0x0 region_type = private name = "private_0x00000086e7050000" filename = "" Region: id = 2495 start_va = 0x86e7060000 end_va = 0x86e70dffff entry_point = 0x0 region_type = private name = "private_0x00000086e7060000" filename = "" Region: id = 2496 start_va = 0x86e70e0000 end_va = 0x86e70e1fff entry_point = 0x86e70e0000 region_type = mapped_file name = "netprofmsvc.dll.mui" filename = "\\Windows\\System32\\en-US\\netprofmsvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\netprofmsvc.dll.mui") Region: id = 2497 start_va = 0x86e70f0000 end_va = 0x86e70f0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000086e70f0000" filename = "" Region: id = 2498 start_va = 0x86e7100000 end_va = 0x86e71fffff entry_point = 0x0 region_type = private name = "private_0x00000086e7100000" filename = "" Region: id = 2499 start_va = 0x86e7200000 end_va = 0x86e7387fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000086e7200000" filename = "" Region: id = 2500 start_va = 0x86e7390000 end_va = 0x86e7510fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000086e7390000" filename = "" Region: id = 2501 start_va = 0x86e7520000 end_va = 0x86e761ffff entry_point = 0x0 region_type = private name = "private_0x00000086e7520000" filename = "" Region: id = 2502 start_va = 0x86e7620000 end_va = 0x86e7956fff entry_point = 0x86e7620000 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 2503 start_va = 0x86e7960000 end_va = 0x86e7a5ffff entry_point = 0x0 region_type = private name = "private_0x00000086e7960000" filename = "" Region: id = 2504 start_va = 0x86e7a60000 end_va = 0x86e7b5ffff entry_point = 0x0 region_type = private name = "private_0x00000086e7a60000" filename = "" Region: id = 2505 start_va = 0x86e7b60000 end_va = 0x86e7c5ffff entry_point = 0x0 region_type = private name = "private_0x00000086e7b60000" filename = "" Region: id = 2506 start_va = 0x86e7c60000 end_va = 0x86e7d5ffff entry_point = 0x0 region_type = private name = "private_0x00000086e7c60000" filename = "" Region: id = 2507 start_va = 0x86e7d60000 end_va = 0x86e7e5ffff entry_point = 0x0 region_type = private name = "private_0x00000086e7d60000" filename = "" Region: id = 2508 start_va = 0x86e7e60000 end_va = 0x86e7f5ffff entry_point = 0x0 region_type = private name = "private_0x00000086e7e60000" filename = "" Region: id = 2509 start_va = 0x86e7f60000 end_va = 0x86e805ffff entry_point = 0x0 region_type = private name = "private_0x00000086e7f60000" filename = "" Region: id = 2510 start_va = 0x86e8060000 end_va = 0x86e905ffff entry_point = 0x86e8060000 region_type = mapped_file name = "~fontcache-fontface.dat" filename = "\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\FontCache\\~FontCache-FontFace.dat" (normalized: "c:\\windows\\serviceprofiles\\localservice\\appdata\\local\\fontcache\\~fontcache-fontface.dat") Region: id = 2511 start_va = 0x86e9060000 end_va = 0x86e90d5fff entry_point = 0x86e9060000 region_type = mapped_file name = "~fontcache-system.dat" filename = "\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\FontCache\\~FontCache-System.dat" (normalized: "c:\\windows\\serviceprofiles\\localservice\\appdata\\local\\fontcache\\~fontcache-system.dat") Region: id = 2512 start_va = 0x86e90e0000 end_va = 0x86e91dffff entry_point = 0x0 region_type = private name = "private_0x00000086e90e0000" filename = "" Region: id = 2513 start_va = 0x86e91e0000 end_va = 0x86e92dffff entry_point = 0x0 region_type = private name = "private_0x00000086e91e0000" filename = "" Region: id = 2514 start_va = 0x86e93e0000 end_va = 0x86e94dffff entry_point = 0x0 region_type = private name = "private_0x00000086e93e0000" filename = "" Region: id = 2515 start_va = 0x86e9500000 end_va = 0x86e95fffff entry_point = 0x0 region_type = private name = "private_0x00000086e9500000" filename = "" Region: id = 2516 start_va = 0x86e9e00000 end_va = 0x86e9efffff entry_point = 0x0 region_type = private name = "private_0x00000086e9e00000" filename = "" Region: id = 2517 start_va = 0x86e9f00000 end_va = 0x86e9ffffff entry_point = 0x0 region_type = private name = "private_0x00000086e9f00000" filename = "" Region: id = 2518 start_va = 0x86ea000000 end_va = 0x86ea0fffff entry_point = 0x0 region_type = private name = "private_0x00000086ea000000" filename = "" Region: id = 2519 start_va = 0x86ea100000 end_va = 0x86ea1fffff entry_point = 0x0 region_type = private name = "private_0x00000086ea100000" filename = "" Region: id = 2520 start_va = 0x86ea200000 end_va = 0x86ea2fffff entry_point = 0x0 region_type = private name = "private_0x00000086ea200000" filename = "" Region: id = 2521 start_va = 0x86ea300000 end_va = 0x86ea3fffff entry_point = 0x0 region_type = private name = "private_0x00000086ea300000" filename = "" Region: id = 2522 start_va = 0x86ea400000 end_va = 0x86ea4fffff entry_point = 0x0 region_type = private name = "private_0x00000086ea400000" filename = "" Region: id = 2523 start_va = 0x86ea500000 end_va = 0x86ea5defff entry_point = 0x86ea500000 region_type = mapped_file name = "kernelbase.dll.mui" filename = "\\Windows\\System32\\en-US\\KernelBase.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\kernelbase.dll.mui") Region: id = 2524 start_va = 0x86ea5e0000 end_va = 0x86ea6dffff entry_point = 0x0 region_type = private name = "private_0x00000086ea5e0000" filename = "" Region: id = 2525 start_va = 0x86ea6e0000 end_va = 0x86ea7dffff entry_point = 0x0 region_type = private name = "private_0x00000086ea6e0000" filename = "" Region: id = 2526 start_va = 0x86ea7e0000 end_va = 0x86ea8dffff entry_point = 0x0 region_type = private name = "private_0x00000086ea7e0000" filename = "" Region: id = 2527 start_va = 0x86ea900000 end_va = 0x86ea9fffff entry_point = 0x0 region_type = private name = "private_0x00000086ea900000" filename = "" Region: id = 2528 start_va = 0x86eaa00000 end_va = 0x86eaafffff entry_point = 0x0 region_type = private name = "private_0x00000086eaa00000" filename = "" Region: id = 2529 start_va = 0x86eab00000 end_va = 0x86eabfffff entry_point = 0x0 region_type = private name = "private_0x00000086eab00000" filename = "" Region: id = 2530 start_va = 0x86eac00000 end_va = 0x86eb3fffff entry_point = 0x86eac00000 region_type = mapped_file name = "~fontcache-s-1-5-21-1462094071-1423818996-289466292-1000.dat" filename = "\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\FontCache\\~FontCache-S-1-5-21-1462094071-1423818996-289466292-1000.dat" (normalized: "c:\\windows\\serviceprofiles\\localservice\\appdata\\local\\fontcache\\~fontcache-s-1-5-21-1462094071-1423818996-289466292-1000.dat") Region: id = 2531 start_va = 0x7df5ff5e0000 end_va = 0x7ff5ff5dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007df5ff5e0000" filename = "" Region: id = 2532 start_va = 0x7ff673338000 end_va = 0x7ff673339fff entry_point = 0x0 region_type = private name = "private_0x00007ff673338000" filename = "" Region: id = 2533 start_va = 0x7ff67333a000 end_va = 0x7ff67333bfff entry_point = 0x0 region_type = private name = "private_0x00007ff67333a000" filename = "" Region: id = 2534 start_va = 0x7ff67333c000 end_va = 0x7ff67333dfff entry_point = 0x0 region_type = private name = "private_0x00007ff67333c000" filename = "" Region: id = 2535 start_va = 0x7ff67333e000 end_va = 0x7ff67333ffff entry_point = 0x0 region_type = private name = "private_0x00007ff67333e000" filename = "" Region: id = 2536 start_va = 0x7ff673340000 end_va = 0x7ff673341fff entry_point = 0x0 region_type = private name = "private_0x00007ff673340000" filename = "" Region: id = 2537 start_va = 0x7ff673342000 end_va = 0x7ff673343fff entry_point = 0x0 region_type = private name = "private_0x00007ff673342000" filename = "" Region: id = 2538 start_va = 0x7ff673344000 end_va = 0x7ff673345fff entry_point = 0x0 region_type = private name = "private_0x00007ff673344000" filename = "" Region: id = 2539 start_va = 0x7ff673346000 end_va = 0x7ff673347fff entry_point = 0x0 region_type = private name = "private_0x00007ff673346000" filename = "" Region: id = 2540 start_va = 0x7ff673348000 end_va = 0x7ff673349fff entry_point = 0x0 region_type = private name = "private_0x00007ff673348000" filename = "" Region: id = 2541 start_va = 0x7ff67334a000 end_va = 0x7ff67334bfff entry_point = 0x0 region_type = private name = "private_0x00007ff67334a000" filename = "" Region: id = 2542 start_va = 0x7ff67334c000 end_va = 0x7ff67334dfff entry_point = 0x0 region_type = private name = "private_0x00007ff67334c000" filename = "" Region: id = 2543 start_va = 0x7ff67334e000 end_va = 0x7ff67334ffff entry_point = 0x0 region_type = private name = "private_0x00007ff67334e000" filename = "" Region: id = 2544 start_va = 0x7ff673350000 end_va = 0x7ff673351fff entry_point = 0x0 region_type = private name = "private_0x00007ff673350000" filename = "" Region: id = 2545 start_va = 0x7ff673354000 end_va = 0x7ff673355fff entry_point = 0x0 region_type = private name = "private_0x00007ff673354000" filename = "" Region: id = 2546 start_va = 0x7ff673356000 end_va = 0x7ff673357fff entry_point = 0x0 region_type = private name = "private_0x00007ff673356000" filename = "" Region: id = 2547 start_va = 0x7ff673358000 end_va = 0x7ff673359fff entry_point = 0x0 region_type = private name = "private_0x00007ff673358000" filename = "" Region: id = 2548 start_va = 0x7ff67335a000 end_va = 0x7ff67335bfff entry_point = 0x0 region_type = private name = "private_0x00007ff67335a000" filename = "" Region: id = 2549 start_va = 0x7ff67335c000 end_va = 0x7ff67335dfff entry_point = 0x0 region_type = private name = "private_0x00007ff67335c000" filename = "" Region: id = 2550 start_va = 0x7ff67335e000 end_va = 0x7ff67335ffff entry_point = 0x0 region_type = private name = "private_0x00007ff67335e000" filename = "" Region: id = 2551 start_va = 0x7ff673360000 end_va = 0x7ff67345ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007ff673360000" filename = "" Region: id = 2552 start_va = 0x7ff673460000 end_va = 0x7ff673482fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007ff673460000" filename = "" Region: id = 2553 start_va = 0x7ff673483000 end_va = 0x7ff673484fff entry_point = 0x0 region_type = private name = "private_0x00007ff673483000" filename = "" Region: id = 2554 start_va = 0x7ff673485000 end_va = 0x7ff673486fff entry_point = 0x0 region_type = private name = "private_0x00007ff673485000" filename = "" Region: id = 2555 start_va = 0x7ff673487000 end_va = 0x7ff673488fff entry_point = 0x0 region_type = private name = "private_0x00007ff673487000" filename = "" Region: id = 2556 start_va = 0x7ff673489000 end_va = 0x7ff67348afff entry_point = 0x0 region_type = private name = "private_0x00007ff673489000" filename = "" Region: id = 2557 start_va = 0x7ff67348b000 end_va = 0x7ff67348bfff entry_point = 0x0 region_type = private name = "private_0x00007ff67348b000" filename = "" Region: id = 2558 start_va = 0x7ff67348e000 end_va = 0x7ff67348ffff entry_point = 0x0 region_type = private name = "private_0x00007ff67348e000" filename = "" Region: id = 2559 start_va = 0x7ff673b40000 end_va = 0x7ff673b4cfff entry_point = 0x7ff673b40000 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 2560 start_va = 0x7ff8dca80000 end_va = 0x7ff8dca91fff entry_point = 0x7ff8dca80000 region_type = mapped_file name = "bitsproxy.dll" filename = "\\Windows\\System32\\BitsProxy.dll" (normalized: "c:\\windows\\system32\\bitsproxy.dll") Region: id = 2561 start_va = 0x7ff8e09f0000 end_va = 0x7ff8e0a0dfff entry_point = 0x7ff8e09f0000 region_type = mapped_file name = "bluetoothapis.dll" filename = "\\Windows\\System32\\BluetoothApis.dll" (normalized: "c:\\windows\\system32\\bluetoothapis.dll") Region: id = 2562 start_va = 0x7ff8e0a10000 end_va = 0x7ff8e0a1cfff entry_point = 0x7ff8e0a10000 region_type = mapped_file name = "bthtelemetry.dll" filename = "\\Windows\\System32\\BthTelemetry.dll" (normalized: "c:\\windows\\system32\\bthtelemetry.dll") Region: id = 2563 start_va = 0x7ff8e0a20000 end_va = 0x7ff8e0a37fff entry_point = 0x7ff8e0a20000 region_type = mapped_file name = "bthradiomedia.dll" filename = "\\Windows\\System32\\BthRadioMedia.dll" (normalized: "c:\\windows\\system32\\bthradiomedia.dll") Region: id = 2564 start_va = 0x7ff8e0a40000 end_va = 0x7ff8e0a53fff entry_point = 0x7ff8e0a40000 region_type = mapped_file name = "wlanradiomanager.dll" filename = "\\Windows\\System32\\WlanRadioManager.dll" (normalized: "c:\\windows\\system32\\wlanradiomanager.dll") Region: id = 2565 start_va = 0x7ff8e0f70000 end_va = 0x7ff8e0f7dfff entry_point = 0x7ff8e0f70000 region_type = mapped_file name = "npmproxy.dll" filename = "\\Windows\\System32\\npmproxy.dll" (normalized: "c:\\windows\\system32\\npmproxy.dll") Region: id = 2566 start_va = 0x7ff8e15f0000 end_va = 0x7ff8e164efff entry_point = 0x7ff8e15f0000 region_type = mapped_file name = "wlanapi.dll" filename = "\\Windows\\System32\\wlanapi.dll" (normalized: "c:\\windows\\system32\\wlanapi.dll") Region: id = 2567 start_va = 0x7ff8e1870000 end_va = 0x7ff8e18fcfff entry_point = 0x7ff8e1870000 region_type = mapped_file name = "netprofmsvc.dll" filename = "\\Windows\\System32\\netprofmsvc.dll" (normalized: "c:\\windows\\system32\\netprofmsvc.dll") Region: id = 2568 start_va = 0x7ff8e25d0000 end_va = 0x7ff8e25e7fff entry_point = 0x7ff8e25d0000 region_type = mapped_file name = "perftrack.dll" filename = "\\Windows\\System32\\perftrack.dll" (normalized: "c:\\windows\\system32\\perftrack.dll") Region: id = 2569 start_va = 0x7ff8e2ea0000 end_va = 0x7ff8e2ea9fff entry_point = 0x7ff8e2ea0000 region_type = mapped_file name = "rasadhlp.dll" filename = "\\Windows\\System32\\rasadhlp.dll" (normalized: "c:\\windows\\system32\\rasadhlp.dll") Region: id = 2570 start_va = 0x7ff8e5520000 end_va = 0x7ff8e553cfff entry_point = 0x7ff8e5520000 region_type = mapped_file name = "wdi.dll" filename = "\\Windows\\System32\\wdi.dll" (normalized: "c:\\windows\\system32\\wdi.dll") Region: id = 2571 start_va = 0x7ff8e5dd0000 end_va = 0x7ff8e5ea5fff entry_point = 0x7ff8e5dd0000 region_type = mapped_file name = "winhttp.dll" filename = "\\Windows\\System32\\winhttp.dll" (normalized: "c:\\windows\\system32\\winhttp.dll") Region: id = 2572 start_va = 0x7ff8e6330000 end_va = 0x7ff8e6365fff entry_point = 0x7ff8e6330000 region_type = mapped_file name = "xmllite.dll" filename = "\\Windows\\System32\\xmllite.dll" (normalized: "c:\\windows\\system32\\xmllite.dll") Region: id = 2573 start_va = 0x7ff8e7280000 end_va = 0x7ff8e7299fff entry_point = 0x7ff8e7280000 region_type = mapped_file name = "dhcpcsvc.dll" filename = "\\Windows\\System32\\dhcpcsvc.dll" (normalized: "c:\\windows\\system32\\dhcpcsvc.dll") Region: id = 2574 start_va = 0x7ff8e72a0000 end_va = 0x7ff8e72b5fff entry_point = 0x7ff8e72a0000 region_type = mapped_file name = "dhcpcsvc6.dll" filename = "\\Windows\\System32\\dhcpcsvc6.dll" (normalized: "c:\\windows\\system32\\dhcpcsvc6.dll") Region: id = 2575 start_va = 0x7ff8e7420000 end_va = 0x7ff8e742bfff entry_point = 0x7ff8e7420000 region_type = mapped_file name = "nsisvc.dll" filename = "\\Windows\\System32\\nsisvc.dll" (normalized: "c:\\windows\\system32\\nsisvc.dll") Region: id = 2576 start_va = 0x7ff8e77d0000 end_va = 0x7ff8e77f8fff entry_point = 0x7ff8e77d0000 region_type = mapped_file name = "fontprovider.dll" filename = "\\Windows\\System32\\FontProvider.dll" (normalized: "c:\\windows\\system32\\fontprovider.dll") Region: id = 2577 start_va = 0x7ff8e7800000 end_va = 0x7ff8e79a3fff entry_point = 0x7ff8e7800000 region_type = mapped_file name = "fntcache.dll" filename = "\\Windows\\System32\\FntCache.dll" (normalized: "c:\\windows\\system32\\fntcache.dll") Region: id = 2578 start_va = 0x7ff8e7f00000 end_va = 0x7ff8e7f79fff entry_point = 0x7ff8e7f00000 region_type = mapped_file name = "es.dll" filename = "\\Windows\\System32\\es.dll" (normalized: "c:\\windows\\system32\\es.dll") Region: id = 2579 start_va = 0x7ff8e8460000 end_va = 0x7ff8e846afff entry_point = 0x7ff8e8460000 region_type = mapped_file name = "winnsi.dll" filename = "\\Windows\\System32\\winnsi.dll" (normalized: "c:\\windows\\system32\\winnsi.dll") Region: id = 2580 start_va = 0x7ff8e8480000 end_va = 0x7ff8e84b7fff entry_point = 0x7ff8e8480000 region_type = mapped_file name = "iphlpapi.dll" filename = "\\Windows\\System32\\IPHLPAPI.DLL" (normalized: "c:\\windows\\system32\\iphlpapi.dll") Region: id = 2581 start_va = 0x7ff8e84e0000 end_va = 0x7ff8e84f7fff entry_point = 0x7ff8e84e0000 region_type = mapped_file name = "nlaapi.dll" filename = "\\Windows\\System32\\nlaapi.dll" (normalized: "c:\\windows\\system32\\nlaapi.dll") Region: id = 2582 start_va = 0x7ff8e9720000 end_va = 0x7ff8e9746fff entry_point = 0x7ff8e9720000 region_type = mapped_file name = "devobj.dll" filename = "\\Windows\\System32\\devobj.dll" (normalized: "c:\\windows\\system32\\devobj.dll") Region: id = 2583 start_va = 0x7ff8e9cd0000 end_va = 0x7ff8e9cf2fff entry_point = 0x7ff8e9cd0000 region_type = mapped_file name = "gpapi.dll" filename = "\\Windows\\System32\\gpapi.dll" (normalized: "c:\\windows\\system32\\gpapi.dll") Region: id = 2584 start_va = 0x7ff8ea270000 end_va = 0x7ff8ea2a2fff entry_point = 0x7ff8ea270000 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\System32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll") Region: id = 2585 start_va = 0x7ff8ea3c0000 end_va = 0x7ff8ea467fff entry_point = 0x7ff8ea3c0000 region_type = mapped_file name = "dnsapi.dll" filename = "\\Windows\\System32\\dnsapi.dll" (normalized: "c:\\windows\\system32\\dnsapi.dll") Region: id = 2586 start_va = 0x7ff8ea5c0000 end_va = 0x7ff8ea61cfff entry_point = 0x7ff8ea5c0000 region_type = mapped_file name = "mswsock.dll" filename = "\\Windows\\System32\\mswsock.dll" (normalized: "c:\\windows\\system32\\mswsock.dll") Region: id = 2587 start_va = 0x7ff8ea620000 end_va = 0x7ff8ea636fff entry_point = 0x7ff8ea620000 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\System32\\cryptsp.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll") Region: id = 2588 start_va = 0x7ff8ea790000 end_va = 0x7ff8ea79afff entry_point = 0x7ff8ea790000 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\System32\\cryptbase.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll") Region: id = 2589 start_va = 0x7ff8eabd0000 end_va = 0x7ff8eabf7fff entry_point = 0x7ff8eabd0000 region_type = mapped_file name = "bcrypt.dll" filename = "\\Windows\\System32\\bcrypt.dll" (normalized: "c:\\windows\\system32\\bcrypt.dll") Region: id = 2590 start_va = 0x7ff8eac00000 end_va = 0x7ff8eac6afff entry_point = 0x7ff8eac00000 region_type = mapped_file name = "bcryptprimitives.dll" filename = "\\Windows\\System32\\bcryptprimitives.dll" (normalized: "c:\\windows\\system32\\bcryptprimitives.dll") Region: id = 2591 start_va = 0x7ff8eac70000 end_va = 0x7ff8ead07fff entry_point = 0x7ff8eac70000 region_type = mapped_file name = "sxs.dll" filename = "\\Windows\\System32\\sxs.dll" (normalized: "c:\\windows\\system32\\sxs.dll") Region: id = 2592 start_va = 0x7ff8eadd0000 end_va = 0x7ff8eae19fff entry_point = 0x7ff8eadd0000 region_type = mapped_file name = "powrprof.dll" filename = "\\Windows\\System32\\powrprof.dll" (normalized: "c:\\windows\\system32\\powrprof.dll") Region: id = 2593 start_va = 0x7ff8eae20000 end_va = 0x7ff8eae2efff entry_point = 0x7ff8eae20000 region_type = mapped_file name = "kernel.appcore.dll" filename = "\\Windows\\System32\\kernel.appcore.dll" (normalized: "c:\\windows\\system32\\kernel.appcore.dll") Region: id = 2594 start_va = 0x7ff8eae30000 end_va = 0x7ff8eae42fff entry_point = 0x7ff8eae30000 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\System32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll") Region: id = 2595 start_va = 0x7ff8eaf60000 end_va = 0x7ff8eafa3fff entry_point = 0x7ff8eaf60000 region_type = mapped_file name = "cfgmgr32.dll" filename = "\\Windows\\System32\\cfgmgr32.dll" (normalized: "c:\\windows\\system32\\cfgmgr32.dll") Region: id = 2596 start_va = 0x7ff8eb870000 end_va = 0x7ff8eba4cfff entry_point = 0x7ff8eb870000 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 2597 start_va = 0x7ff8ebb30000 end_va = 0x7ff8ebbedfff entry_point = 0x7ff8ebb30000 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll") Region: id = 2598 start_va = 0x7ff8ebdc0000 end_va = 0x7ff8ebf0dfff entry_point = 0x7ff8ebdc0000 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 2599 start_va = 0x7ff8ec240000 end_va = 0x7ff8ec29afff entry_point = 0x7ff8ec240000 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 2600 start_va = 0x7ff8ec300000 end_va = 0x7ff8ec440fff entry_point = 0x7ff8ec300000 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll") Region: id = 2601 start_va = 0x7ff8ec450000 end_va = 0x7ff8ec575fff entry_point = 0x7ff8ec450000 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 2602 start_va = 0x7ff8edb10000 end_va = 0x7ff8edbb4fff entry_point = 0x7ff8edb10000 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\System32\\clbcatq.dll" (normalized: "c:\\windows\\system32\\clbcatq.dll") Region: id = 2603 start_va = 0x7ff8edbc0000 end_va = 0x7ff8edd44fff entry_point = 0x7ff8edbc0000 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 2604 start_va = 0x7ff8edd60000 end_va = 0x7ff8edfdbfff entry_point = 0x7ff8edd60000 region_type = mapped_file name = "combase.dll" filename = "\\Windows\\System32\\combase.dll" (normalized: "c:\\windows\\system32\\combase.dll") Region: id = 2605 start_va = 0x7ff8ee040000 end_va = 0x7ff8ee0a8fff entry_point = 0x7ff8ee040000 region_type = mapped_file name = "ws2_32.dll" filename = "\\Windows\\System32\\ws2_32.dll" (normalized: "c:\\windows\\system32\\ws2_32.dll") Region: id = 2606 start_va = 0x7ff8ee0b0000 end_va = 0x7ff8ee14cfff entry_point = 0x7ff8ee0b0000 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 2607 start_va = 0x7ff8ee190000 end_va = 0x7ff8ee235fff entry_point = 0x7ff8ee190000 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 2608 start_va = 0x7ff8ee250000 end_va = 0x7ff8ee257fff entry_point = 0x7ff8ee250000 region_type = mapped_file name = "nsi.dll" filename = "\\Windows\\System32\\nsi.dll" (normalized: "c:\\windows\\system32\\nsi.dll") Region: id = 2609 start_va = 0x7ff8ee2d0000 end_va = 0x7ff8ee37cfff entry_point = 0x7ff8ee2d0000 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 2610 start_va = 0x7ff8ee380000 end_va = 0x7ff8ee541fff entry_point = 0x7ff8ee380000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Thread: id = 324 os_tid = 0x790 Thread: id = 325 os_tid = 0x770 Thread: id = 326 os_tid = 0x710 Thread: id = 327 os_tid = 0x6f4 Thread: id = 328 os_tid = 0x6ec Thread: id = 329 os_tid = 0x6d4 Thread: id = 330 os_tid = 0x6a4 Thread: id = 331 os_tid = 0x6a0 Thread: id = 332 os_tid = 0x69c Thread: id = 333 os_tid = 0x698 Thread: id = 334 os_tid = 0x690 Thread: id = 335 os_tid = 0x670 Thread: id = 336 os_tid = 0x5b8 Thread: id = 337 os_tid = 0x560 Thread: id = 338 os_tid = 0x54c Thread: id = 339 os_tid = 0x454 Thread: id = 340 os_tid = 0x1a4 Thread: id = 341 os_tid = 0x150 Thread: id = 342 os_tid = 0x154 Thread: id = 343 os_tid = 0x120 Thread: id = 344 os_tid = 0x3fc Thread: id = 345 os_tid = 0x3f8 Thread: id = 346 os_tid = 0x3f4 Thread: id = 347 os_tid = 0x3a4 Process: id = "17" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x5625a000" os_pid = "0x2a0" os_integrity_level = "0x4000" os_privileges = "0x60a00000" monitor_reason = "child_process" parent_id = "10" os_parent_pid = "0x1e8" cmd_line = "C:\\Windows\\system32\\svchost.exe -k NetworkService" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\Network Service" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\CryptSvc" [0xa], "NT SERVICE\\Dnscache" [0xe], "NT SERVICE\\LanmanWorkstation" [0xa], "NT SERVICE\\NlaSvc" [0xa], "NT SERVICE\\TapiSrv" [0xa], "NT SERVICE\\TermService" [0xa], "NT SERVICE\\Wecsvc" [0xa], "NT SERVICE\\WinRM" [0xa], "NT AUTHORITY\\Logon Session 00000000:00010097" [0xc000000f], "LOCAL" [0x7] Region: id = 2189 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 2190 start_va = 0x5400000000 end_va = 0x540fffffff entry_point = 0x0 region_type = private name = "private_0x0000005400000000" filename = "" Region: id = 2191 start_va = 0x5410000000 end_va = 0x541fffffff entry_point = 0x0 region_type = private name = "private_0x0000005410000000" filename = "" Region: id = 2192 start_va = 0x5458fb0000 end_va = 0x5458fbffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000005458fb0000" filename = "" Region: id = 2193 start_va = 0x5458fc0000 end_va = 0x5458fc0fff entry_point = 0x5458fc0000 region_type = mapped_file name = "svchost.exe.mui" filename = "\\Windows\\System32\\en-US\\svchost.exe.mui" (normalized: "c:\\windows\\system32\\en-us\\svchost.exe.mui") Region: id = 2194 start_va = 0x5458fd0000 end_va = 0x5458fe3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000005458fd0000" filename = "" Region: id = 2195 start_va = 0x5458ff0000 end_va = 0x545906ffff entry_point = 0x0 region_type = private name = "private_0x0000005458ff0000" filename = "" Region: id = 2196 start_va = 0x5459070000 end_va = 0x5459073fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000005459070000" filename = "" Region: id = 2197 start_va = 0x5459080000 end_va = 0x5459080fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000005459080000" filename = "" Region: id = 2198 start_va = 0x5459090000 end_va = 0x5459091fff entry_point = 0x0 region_type = private name = "private_0x0000005459090000" filename = "" Region: id = 2199 start_va = 0x54590a0000 end_va = 0x545915dfff entry_point = 0x54590a0000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 2200 start_va = 0x5459160000 end_va = 0x5459160fff entry_point = 0x0 region_type = private name = "private_0x0000005459160000" filename = "" Region: id = 2201 start_va = 0x5459170000 end_va = 0x5459170fff entry_point = 0x0 region_type = private name = "private_0x0000005459170000" filename = "" Region: id = 2202 start_va = 0x5459180000 end_va = 0x5459180fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000005459180000" filename = "" Region: id = 2203 start_va = 0x5459190000 end_va = 0x5459190fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000005459190000" filename = "" Region: id = 2204 start_va = 0x54591a0000 end_va = 0x54591a6fff entry_point = 0x0 region_type = private name = "private_0x00000054591a0000" filename = "" Region: id = 2205 start_va = 0x54591b0000 end_va = 0x54591b8fff entry_point = 0x54591b0000 region_type = mapped_file name = "vsstrace.dll.mui" filename = "\\Windows\\System32\\en-US\\vsstrace.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\vsstrace.dll.mui") Region: id = 2206 start_va = 0x54591c0000 end_va = 0x54591c0fff entry_point = 0x0 region_type = private name = "private_0x00000054591c0000" filename = "" Region: id = 2207 start_va = 0x54591d0000 end_va = 0x54591d0fff entry_point = 0x0 region_type = private name = "private_0x00000054591d0000" filename = "" Region: id = 2208 start_va = 0x54591e0000 end_va = 0x54591e0fff entry_point = 0x0 region_type = private name = "private_0x00000054591e0000" filename = "" Region: id = 2209 start_va = 0x54591f0000 end_va = 0x54591f0fff entry_point = 0x0 region_type = private name = "private_0x00000054591f0000" filename = "" Region: id = 2210 start_va = 0x5459200000 end_va = 0x54592fffff entry_point = 0x0 region_type = private name = "private_0x0000005459200000" filename = "" Region: id = 2211 start_va = 0x5459380000 end_va = 0x545943ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000005459380000" filename = "" Region: id = 2212 start_va = 0x5459440000 end_va = 0x5459440fff entry_point = 0x0 region_type = private name = "private_0x0000005459440000" filename = "" Region: id = 2213 start_va = 0x5459450000 end_va = 0x5459450fff entry_point = 0x0 region_type = private name = "private_0x0000005459450000" filename = "" Region: id = 2214 start_va = 0x5459460000 end_va = 0x5459466fff entry_point = 0x0 region_type = private name = "private_0x0000005459460000" filename = "" Region: id = 2215 start_va = 0x5459470000 end_va = 0x54594effff entry_point = 0x0 region_type = private name = "private_0x0000005459470000" filename = "" Region: id = 2216 start_va = 0x54594f0000 end_va = 0x54594f3fff entry_point = 0x0 region_type = private name = "private_0x00000054594f0000" filename = "" Region: id = 2217 start_va = 0x5459500000 end_va = 0x54595fffff entry_point = 0x0 region_type = private name = "private_0x0000005459500000" filename = "" Region: id = 2218 start_va = 0x5459600000 end_va = 0x5459787fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000005459600000" filename = "" Region: id = 2219 start_va = 0x5459790000 end_va = 0x5459910fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000005459790000" filename = "" Region: id = 2220 start_va = 0x5459920000 end_va = 0x5459a1ffff entry_point = 0x0 region_type = private name = "private_0x0000005459920000" filename = "" Region: id = 2221 start_va = 0x5459a20000 end_va = 0x5459b1ffff entry_point = 0x0 region_type = private name = "private_0x0000005459a20000" filename = "" Region: id = 2222 start_va = 0x5459b20000 end_va = 0x5459c1ffff entry_point = 0x0 region_type = private name = "private_0x0000005459b20000" filename = "" Region: id = 2223 start_va = 0x5459c20000 end_va = 0x5459c2ffff entry_point = 0x5459c20000 region_type = mapped_file name = "catdb" filename = "\\Windows\\System32\\catroot2\\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\\catdb" (normalized: "c:\\windows\\system32\\catroot2\\{f750e6c3-38ee-11d1-85e5-00c04fc295ee}\\catdb") Region: id = 2224 start_va = 0x5459c30000 end_va = 0x5459c3ffff entry_point = 0x5459c30000 region_type = mapped_file name = "catdb" filename = "\\Windows\\System32\\catroot2\\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\\catdb" (normalized: "c:\\windows\\system32\\catroot2\\{f750e6c3-38ee-11d1-85e5-00c04fc295ee}\\catdb") Region: id = 2225 start_va = 0x5459c40000 end_va = 0x5459c4ffff entry_point = 0x5459c40000 region_type = mapped_file name = "catdb" filename = "\\Windows\\System32\\catroot2\\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\\catdb" (normalized: "c:\\windows\\system32\\catroot2\\{f750e6c3-38ee-11d1-85e5-00c04fc295ee}\\catdb") Region: id = 2226 start_va = 0x5459c50000 end_va = 0x5459c5ffff entry_point = 0x5459c50000 region_type = mapped_file name = "catdb" filename = "\\Windows\\System32\\catroot2\\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\\catdb" (normalized: "c:\\windows\\system32\\catroot2\\{f750e6c3-38ee-11d1-85e5-00c04fc295ee}\\catdb") Region: id = 2227 start_va = 0x5459c60000 end_va = 0x5459c6ffff entry_point = 0x5459c60000 region_type = mapped_file name = "catdb" filename = "\\Windows\\System32\\catroot2\\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\\catdb" (normalized: "c:\\windows\\system32\\catroot2\\{f750e6c3-38ee-11d1-85e5-00c04fc295ee}\\catdb") Region: id = 2228 start_va = 0x5459c70000 end_va = 0x5459c7ffff entry_point = 0x5459c70000 region_type = mapped_file name = "catdb" filename = "\\Windows\\System32\\catroot2\\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\\catdb" (normalized: "c:\\windows\\system32\\catroot2\\{f750e6c3-38ee-11d1-85e5-00c04fc295ee}\\catdb") Region: id = 2229 start_va = 0x5459d20000 end_va = 0x5459e1ffff entry_point = 0x0 region_type = private name = "private_0x0000005459d20000" filename = "" Region: id = 2230 start_va = 0x5459e20000 end_va = 0x5459f1ffff entry_point = 0x0 region_type = private name = "private_0x0000005459e20000" filename = "" Region: id = 2231 start_va = 0x5459f20000 end_va = 0x545a01ffff entry_point = 0x0 region_type = private name = "private_0x0000005459f20000" filename = "" Region: id = 2232 start_va = 0x545a020000 end_va = 0x545a11ffff entry_point = 0x0 region_type = private name = "private_0x000000545a020000" filename = "" Region: id = 2233 start_va = 0x545a120000 end_va = 0x545a21ffff entry_point = 0x0 region_type = private name = "private_0x000000545a120000" filename = "" Region: id = 2234 start_va = 0x545a220000 end_va = 0x545a31ffff entry_point = 0x0 region_type = private name = "private_0x000000545a220000" filename = "" Region: id = 2235 start_va = 0x545a320000 end_va = 0x545a41ffff entry_point = 0x0 region_type = private name = "private_0x000000545a320000" filename = "" Region: id = 2236 start_va = 0x545a420000 end_va = 0x545a51ffff entry_point = 0x0 region_type = private name = "private_0x000000545a420000" filename = "" Region: id = 2237 start_va = 0x545a520000 end_va = 0x545a856fff entry_point = 0x545a520000 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 2238 start_va = 0x545a860000 end_va = 0x545a95ffff entry_point = 0x0 region_type = private name = "private_0x000000545a860000" filename = "" Region: id = 2239 start_va = 0x545a960000 end_va = 0x545aa5ffff entry_point = 0x0 region_type = private name = "private_0x000000545a960000" filename = "" Region: id = 2240 start_va = 0x545aa60000 end_va = 0x545aadffff entry_point = 0x0 region_type = private name = "private_0x000000545aa60000" filename = "" Region: id = 2241 start_va = 0x545aae0000 end_va = 0x545aae1fff entry_point = 0x0 region_type = private name = "private_0x000000545aae0000" filename = "" Region: id = 2242 start_va = 0x545aaf0000 end_va = 0x545aaf0fff entry_point = 0x0 region_type = private name = "private_0x000000545aaf0000" filename = "" Region: id = 2243 start_va = 0x545ab00000 end_va = 0x545ab00fff entry_point = 0x0 region_type = private name = "private_0x000000545ab00000" filename = "" Region: id = 2244 start_va = 0x545ab10000 end_va = 0x545ab16fff entry_point = 0x0 region_type = private name = "private_0x000000545ab10000" filename = "" Region: id = 2245 start_va = 0x545ab20000 end_va = 0x545abe1fff entry_point = 0x0 region_type = private name = "private_0x000000545ab20000" filename = "" Region: id = 2246 start_va = 0x545abf0000 end_va = 0x545abfffff entry_point = 0x545abf0000 region_type = mapped_file name = "catdb" filename = "\\Windows\\System32\\catroot2\\{127D0A1D-4EF2-11D1-8608-00C04FC295EE}\\catdb" (normalized: "c:\\windows\\system32\\catroot2\\{127d0a1d-4ef2-11d1-8608-00c04fc295ee}\\catdb") Region: id = 2247 start_va = 0x545ac00000 end_va = 0x545acfffff entry_point = 0x0 region_type = private name = "private_0x000000545ac00000" filename = "" Region: id = 2248 start_va = 0x545ad00000 end_va = 0x545adfffff entry_point = 0x0 region_type = private name = "private_0x000000545ad00000" filename = "" Region: id = 2249 start_va = 0x545ae00000 end_va = 0x545ae0ffff entry_point = 0x545ae00000 region_type = mapped_file name = "catdb" filename = "\\Windows\\System32\\catroot2\\{127D0A1D-4EF2-11D1-8608-00C04FC295EE}\\catdb" (normalized: "c:\\windows\\system32\\catroot2\\{127d0a1d-4ef2-11d1-8608-00c04fc295ee}\\catdb") Region: id = 2250 start_va = 0x545ae10000 end_va = 0x545ae1ffff entry_point = 0x545ae10000 region_type = mapped_file name = "catdb" filename = "\\Windows\\System32\\catroot2\\{127D0A1D-4EF2-11D1-8608-00C04FC295EE}\\catdb" (normalized: "c:\\windows\\system32\\catroot2\\{127d0a1d-4ef2-11d1-8608-00c04fc295ee}\\catdb") Region: id = 2251 start_va = 0x545ae20000 end_va = 0x545ae2ffff entry_point = 0x545ae20000 region_type = mapped_file name = "catdb" filename = "\\Windows\\System32\\catroot2\\{127D0A1D-4EF2-11D1-8608-00C04FC295EE}\\catdb" (normalized: "c:\\windows\\system32\\catroot2\\{127d0a1d-4ef2-11d1-8608-00c04fc295ee}\\catdb") Region: id = 2252 start_va = 0x545ae30000 end_va = 0x545ae3ffff entry_point = 0x545ae30000 region_type = mapped_file name = "catdb" filename = "\\Windows\\System32\\catroot2\\{127D0A1D-4EF2-11D1-8608-00C04FC295EE}\\catdb" (normalized: "c:\\windows\\system32\\catroot2\\{127d0a1d-4ef2-11d1-8608-00c04fc295ee}\\catdb") Region: id = 2253 start_va = 0x545ae40000 end_va = 0x545ae46fff entry_point = 0x0 region_type = private name = "private_0x000000545ae40000" filename = "" Region: id = 2254 start_va = 0x545ae50000 end_va = 0x545ae5ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000545ae50000" filename = "" Region: id = 2255 start_va = 0x545ae60000 end_va = 0x545ae6ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000545ae60000" filename = "" Region: id = 2256 start_va = 0x545ae70000 end_va = 0x545ae7ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000545ae70000" filename = "" Region: id = 2257 start_va = 0x545ae80000 end_va = 0x545ae8ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000545ae80000" filename = "" Region: id = 2258 start_va = 0x545ae90000 end_va = 0x545ae9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000545ae90000" filename = "" Region: id = 2259 start_va = 0x545aea0000 end_va = 0x545aeaffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000545aea0000" filename = "" Region: id = 2260 start_va = 0x545aeb0000 end_va = 0x545aebffff entry_point = 0x545aeb0000 region_type = mapped_file name = "catdb" filename = "\\Windows\\System32\\catroot2\\{127D0A1D-4EF2-11D1-8608-00C04FC295EE}\\catdb" (normalized: "c:\\windows\\system32\\catroot2\\{127d0a1d-4ef2-11d1-8608-00c04fc295ee}\\catdb") Region: id = 2261 start_va = 0x545aec0000 end_va = 0x545aecffff entry_point = 0x545aec0000 region_type = mapped_file name = "catdb" filename = "\\Windows\\System32\\catroot2\\{127D0A1D-4EF2-11D1-8608-00C04FC295EE}\\catdb" (normalized: "c:\\windows\\system32\\catroot2\\{127d0a1d-4ef2-11d1-8608-00c04fc295ee}\\catdb") Region: id = 2262 start_va = 0x545aed0000 end_va = 0x545aedffff entry_point = 0x545aed0000 region_type = mapped_file name = "catdb" filename = "\\Windows\\System32\\catroot2\\{127D0A1D-4EF2-11D1-8608-00C04FC295EE}\\catdb" (normalized: "c:\\windows\\system32\\catroot2\\{127d0a1d-4ef2-11d1-8608-00c04fc295ee}\\catdb") Region: id = 2263 start_va = 0x545aee0000 end_va = 0x545aeeffff entry_point = 0x545aee0000 region_type = mapped_file name = "catdb" filename = "\\Windows\\System32\\catroot2\\{127D0A1D-4EF2-11D1-8608-00C04FC295EE}\\catdb" (normalized: "c:\\windows\\system32\\catroot2\\{127d0a1d-4ef2-11d1-8608-00c04fc295ee}\\catdb") Region: id = 2264 start_va = 0x545aef0000 end_va = 0x545aefffff entry_point = 0x545aef0000 region_type = mapped_file name = "catdb" filename = "\\Windows\\System32\\catroot2\\{127D0A1D-4EF2-11D1-8608-00C04FC295EE}\\catdb" (normalized: "c:\\windows\\system32\\catroot2\\{127d0a1d-4ef2-11d1-8608-00c04fc295ee}\\catdb") Region: id = 2265 start_va = 0x545af00000 end_va = 0x545affffff entry_point = 0x0 region_type = private name = "private_0x000000545af00000" filename = "" Region: id = 2266 start_va = 0x545b000000 end_va = 0x545b0fffff entry_point = 0x0 region_type = private name = "private_0x000000545b000000" filename = "" Region: id = 2267 start_va = 0x545b100000 end_va = 0x545b10ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000545b100000" filename = "" Region: id = 2268 start_va = 0x545b110000 end_va = 0x545b11ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000545b110000" filename = "" Region: id = 2269 start_va = 0x545b120000 end_va = 0x545b12ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000545b120000" filename = "" Region: id = 2270 start_va = 0x545b130000 end_va = 0x545b13ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000545b130000" filename = "" Region: id = 2271 start_va = 0x545b140000 end_va = 0x545b14ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000545b140000" filename = "" Region: id = 2272 start_va = 0x545b150000 end_va = 0x545b15ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000545b150000" filename = "" Region: id = 2273 start_va = 0x545b160000 end_va = 0x545b16ffff entry_point = 0x545b160000 region_type = mapped_file name = "catdb" filename = "\\Windows\\System32\\catroot2\\{127D0A1D-4EF2-11D1-8608-00C04FC295EE}\\catdb" (normalized: "c:\\windows\\system32\\catroot2\\{127d0a1d-4ef2-11d1-8608-00c04fc295ee}\\catdb") Region: id = 2274 start_va = 0x545b170000 end_va = 0x545b17ffff entry_point = 0x545b170000 region_type = mapped_file name = "catdb" filename = "\\Windows\\System32\\catroot2\\{127D0A1D-4EF2-11D1-8608-00C04FC295EE}\\catdb" (normalized: "c:\\windows\\system32\\catroot2\\{127d0a1d-4ef2-11d1-8608-00c04fc295ee}\\catdb") Region: id = 2275 start_va = 0x545b180000 end_va = 0x545b18ffff entry_point = 0x545b180000 region_type = mapped_file name = "catdb" filename = "\\Windows\\System32\\catroot2\\{127D0A1D-4EF2-11D1-8608-00C04FC295EE}\\catdb" (normalized: "c:\\windows\\system32\\catroot2\\{127d0a1d-4ef2-11d1-8608-00c04fc295ee}\\catdb") Region: id = 2276 start_va = 0x545b190000 end_va = 0x545b19ffff entry_point = 0x545b190000 region_type = mapped_file name = "catdb" filename = "\\Windows\\System32\\catroot2\\{127D0A1D-4EF2-11D1-8608-00C04FC295EE}\\catdb" (normalized: "c:\\windows\\system32\\catroot2\\{127d0a1d-4ef2-11d1-8608-00c04fc295ee}\\catdb") Region: id = 2277 start_va = 0x545b1a0000 end_va = 0x545b1affff entry_point = 0x545b1a0000 region_type = mapped_file name = "catdb" filename = "\\Windows\\System32\\catroot2\\{127D0A1D-4EF2-11D1-8608-00C04FC295EE}\\catdb" (normalized: "c:\\windows\\system32\\catroot2\\{127d0a1d-4ef2-11d1-8608-00c04fc295ee}\\catdb") Region: id = 2278 start_va = 0x545b1b0000 end_va = 0x545b1bffff entry_point = 0x545b1b0000 region_type = mapped_file name = "catdb" filename = "\\Windows\\System32\\catroot2\\{127D0A1D-4EF2-11D1-8608-00C04FC295EE}\\catdb" (normalized: "c:\\windows\\system32\\catroot2\\{127d0a1d-4ef2-11d1-8608-00c04fc295ee}\\catdb") Region: id = 2279 start_va = 0x545b1c0000 end_va = 0x545b1c0fff entry_point = 0x0 region_type = private name = "private_0x000000545b1c0000" filename = "" Region: id = 2280 start_va = 0x545b1d0000 end_va = 0x545b1d6fff entry_point = 0x0 region_type = private name = "private_0x000000545b1d0000" filename = "" Region: id = 2281 start_va = 0x545b1e0000 end_va = 0x545b1effff entry_point = 0x545b1e0000 region_type = mapped_file name = "catdb" filename = "\\Windows\\System32\\catroot2\\{127D0A1D-4EF2-11D1-8608-00C04FC295EE}\\catdb" (normalized: "c:\\windows\\system32\\catroot2\\{127d0a1d-4ef2-11d1-8608-00c04fc295ee}\\catdb") Region: id = 2282 start_va = 0x545b1f0000 end_va = 0x545b1fffff entry_point = 0x545b1f0000 region_type = mapped_file name = "catdb" filename = "\\Windows\\System32\\catroot2\\{127D0A1D-4EF2-11D1-8608-00C04FC295EE}\\catdb" (normalized: "c:\\windows\\system32\\catroot2\\{127d0a1d-4ef2-11d1-8608-00c04fc295ee}\\catdb") Region: id = 2283 start_va = 0x545b200000 end_va = 0x545b2fffff entry_point = 0x0 region_type = private name = "private_0x000000545b200000" filename = "" Region: id = 2284 start_va = 0x545b300000 end_va = 0x545b3fffff entry_point = 0x0 region_type = private name = "private_0x000000545b300000" filename = "" Region: id = 2285 start_va = 0x545b400000 end_va = 0x545b4fffff entry_point = 0x0 region_type = private name = "private_0x000000545b400000" filename = "" Region: id = 2286 start_va = 0x545b500000 end_va = 0x545b5fffff entry_point = 0x0 region_type = private name = "private_0x000000545b500000" filename = "" Region: id = 2287 start_va = 0x545b600000 end_va = 0x545b6fffff entry_point = 0x0 region_type = private name = "private_0x000000545b600000" filename = "" Region: id = 2288 start_va = 0x545b700000 end_va = 0x545b7fffff entry_point = 0x0 region_type = private name = "private_0x000000545b700000" filename = "" Region: id = 2289 start_va = 0x545b800000 end_va = 0x545b8fffff entry_point = 0x0 region_type = private name = "private_0x000000545b800000" filename = "" Region: id = 2290 start_va = 0x545b900000 end_va = 0x545b9fffff entry_point = 0x0 region_type = private name = "private_0x000000545b900000" filename = "" Region: id = 2291 start_va = 0x545ba00000 end_va = 0x545ba0ffff entry_point = 0x545ba00000 region_type = mapped_file name = "catdb" filename = "\\Windows\\System32\\catroot2\\{127D0A1D-4EF2-11D1-8608-00C04FC295EE}\\catdb" (normalized: "c:\\windows\\system32\\catroot2\\{127d0a1d-4ef2-11d1-8608-00c04fc295ee}\\catdb") Region: id = 2292 start_va = 0x545ba10000 end_va = 0x545ba10fff entry_point = 0x0 region_type = private name = "private_0x000000545ba10000" filename = "" Region: id = 2293 start_va = 0x545ba20000 end_va = 0x545ba2ffff entry_point = 0x545ba20000 region_type = mapped_file name = "catdb" filename = "\\Windows\\System32\\catroot2\\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\\catdb" (normalized: "c:\\windows\\system32\\catroot2\\{f750e6c3-38ee-11d1-85e5-00c04fc295ee}\\catdb") Region: id = 2294 start_va = 0x545ba30000 end_va = 0x545ba3ffff entry_point = 0x545ba30000 region_type = mapped_file name = "catdb" filename = "\\Windows\\System32\\catroot2\\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\\catdb" (normalized: "c:\\windows\\system32\\catroot2\\{f750e6c3-38ee-11d1-85e5-00c04fc295ee}\\catdb") Region: id = 2295 start_va = 0x545ba40000 end_va = 0x545ba4ffff entry_point = 0x545ba40000 region_type = mapped_file name = "catdb" filename = "\\Windows\\System32\\catroot2\\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\\catdb" (normalized: "c:\\windows\\system32\\catroot2\\{f750e6c3-38ee-11d1-85e5-00c04fc295ee}\\catdb") Region: id = 2296 start_va = 0x545ba50000 end_va = 0x545ba5ffff entry_point = 0x545ba50000 region_type = mapped_file name = "catdb" filename = "\\Windows\\System32\\catroot2\\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\\catdb" (normalized: "c:\\windows\\system32\\catroot2\\{f750e6c3-38ee-11d1-85e5-00c04fc295ee}\\catdb") Region: id = 2297 start_va = 0x545ba60000 end_va = 0x545ba66fff entry_point = 0x0 region_type = private name = "private_0x000000545ba60000" filename = "" Region: id = 2298 start_va = 0x545ba70000 end_va = 0x545baeffff entry_point = 0x0 region_type = private name = "private_0x000000545ba70000" filename = "" Region: id = 2299 start_va = 0x545baf0000 end_va = 0x545bafffff entry_point = 0x545baf0000 region_type = mapped_file name = "catdb" filename = "\\Windows\\System32\\catroot2\\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\\catdb" (normalized: "c:\\windows\\system32\\catroot2\\{f750e6c3-38ee-11d1-85e5-00c04fc295ee}\\catdb") Region: id = 2300 start_va = 0x545bb00000 end_va = 0x545bbfffff entry_point = 0x0 region_type = private name = "private_0x000000545bb00000" filename = "" Region: id = 2301 start_va = 0x545bc00000 end_va = 0x545bcfffff entry_point = 0x0 region_type = private name = "private_0x000000545bc00000" filename = "" Region: id = 2302 start_va = 0x545bd00000 end_va = 0x545bdfffff entry_point = 0x0 region_type = private name = "private_0x000000545bd00000" filename = "" Region: id = 2303 start_va = 0x545be00000 end_va = 0x545cdfffff entry_point = 0x0 region_type = private name = "private_0x000000545be00000" filename = "" Region: id = 2304 start_va = 0x545ce00000 end_va = 0x545d00ffff entry_point = 0x0 region_type = private name = "private_0x000000545ce00000" filename = "" Region: id = 2305 start_va = 0x545d010000 end_va = 0x546d00ffff entry_point = 0x0 region_type = private name = "private_0x000000545d010000" filename = "" Region: id = 2306 start_va = 0x546d010000 end_va = 0x547d00ffff entry_point = 0x0 region_type = private name = "private_0x000000546d010000" filename = "" Region: id = 2307 start_va = 0x547d010000 end_va = 0x547d01ffff entry_point = 0x547d010000 region_type = mapped_file name = "catdb" filename = "\\Windows\\System32\\catroot2\\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\\catdb" (normalized: "c:\\windows\\system32\\catroot2\\{f750e6c3-38ee-11d1-85e5-00c04fc295ee}\\catdb") Region: id = 2308 start_va = 0x547d020000 end_va = 0x547d02ffff entry_point = 0x547d020000 region_type = mapped_file name = "catdb" filename = "\\Windows\\System32\\catroot2\\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\\catdb" (normalized: "c:\\windows\\system32\\catroot2\\{f750e6c3-38ee-11d1-85e5-00c04fc295ee}\\catdb") Region: id = 2309 start_va = 0x547d030000 end_va = 0x547d03ffff entry_point = 0x547d030000 region_type = mapped_file name = "catdb" filename = "\\Windows\\System32\\catroot2\\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\\catdb" (normalized: "c:\\windows\\system32\\catroot2\\{f750e6c3-38ee-11d1-85e5-00c04fc295ee}\\catdb") Region: id = 2310 start_va = 0x547d040000 end_va = 0x547d04ffff entry_point = 0x547d040000 region_type = mapped_file name = "catdb" filename = "\\Windows\\System32\\catroot2\\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\\catdb" (normalized: "c:\\windows\\system32\\catroot2\\{f750e6c3-38ee-11d1-85e5-00c04fc295ee}\\catdb") Region: id = 2311 start_va = 0x547d050000 end_va = 0x547d05ffff entry_point = 0x547d050000 region_type = mapped_file name = "catdb" filename = "\\Windows\\System32\\catroot2\\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\\catdb" (normalized: "c:\\windows\\system32\\catroot2\\{f750e6c3-38ee-11d1-85e5-00c04fc295ee}\\catdb") Region: id = 2312 start_va = 0x547d060000 end_va = 0x547d06ffff entry_point = 0x547d060000 region_type = mapped_file name = "catdb" filename = "\\Windows\\System32\\catroot2\\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\\catdb" (normalized: "c:\\windows\\system32\\catroot2\\{f750e6c3-38ee-11d1-85e5-00c04fc295ee}\\catdb") Region: id = 2313 start_va = 0x547d070000 end_va = 0x547d07ffff entry_point = 0x547d070000 region_type = mapped_file name = "catdb" filename = "\\Windows\\System32\\catroot2\\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\\catdb" (normalized: "c:\\windows\\system32\\catroot2\\{f750e6c3-38ee-11d1-85e5-00c04fc295ee}\\catdb") Region: id = 2314 start_va = 0x547d080000 end_va = 0x547d08ffff entry_point = 0x547d080000 region_type = mapped_file name = "catdb" filename = "\\Windows\\System32\\catroot2\\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\\catdb" (normalized: "c:\\windows\\system32\\catroot2\\{f750e6c3-38ee-11d1-85e5-00c04fc295ee}\\catdb") Region: id = 2315 start_va = 0x547d090000 end_va = 0x547d09ffff entry_point = 0x547d090000 region_type = mapped_file name = "catdb" filename = "\\Windows\\System32\\catroot2\\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\\catdb" (normalized: "c:\\windows\\system32\\catroot2\\{f750e6c3-38ee-11d1-85e5-00c04fc295ee}\\catdb") Region: id = 2316 start_va = 0x547d0a0000 end_va = 0x547d0affff entry_point = 0x547d0a0000 region_type = mapped_file name = "catdb" filename = "\\Windows\\System32\\catroot2\\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\\catdb" (normalized: "c:\\windows\\system32\\catroot2\\{f750e6c3-38ee-11d1-85e5-00c04fc295ee}\\catdb") Region: id = 2317 start_va = 0x547d0b0000 end_va = 0x547d0bffff entry_point = 0x547d0b0000 region_type = mapped_file name = "catdb" filename = "\\Windows\\System32\\catroot2\\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\\catdb" (normalized: "c:\\windows\\system32\\catroot2\\{f750e6c3-38ee-11d1-85e5-00c04fc295ee}\\catdb") Region: id = 2318 start_va = 0x547d0c0000 end_va = 0x547d0cffff entry_point = 0x547d0c0000 region_type = mapped_file name = "catdb" filename = "\\Windows\\System32\\catroot2\\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\\catdb" (normalized: "c:\\windows\\system32\\catroot2\\{f750e6c3-38ee-11d1-85e5-00c04fc295ee}\\catdb") Region: id = 2319 start_va = 0x547d0d0000 end_va = 0x547d0dffff entry_point = 0x547d0d0000 region_type = mapped_file name = "catdb" filename = "\\Windows\\System32\\catroot2\\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\\catdb" (normalized: "c:\\windows\\system32\\catroot2\\{f750e6c3-38ee-11d1-85e5-00c04fc295ee}\\catdb") Region: id = 2320 start_va = 0x547d0e0000 end_va = 0x547d0effff entry_point = 0x547d0e0000 region_type = mapped_file name = "catdb" filename = "\\Windows\\System32\\catroot2\\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\\catdb" (normalized: "c:\\windows\\system32\\catroot2\\{f750e6c3-38ee-11d1-85e5-00c04fc295ee}\\catdb") Region: id = 2321 start_va = 0x547d0f0000 end_va = 0x547d0fffff entry_point = 0x547d0f0000 region_type = mapped_file name = "catdb" filename = "\\Windows\\System32\\catroot2\\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\\catdb" (normalized: "c:\\windows\\system32\\catroot2\\{f750e6c3-38ee-11d1-85e5-00c04fc295ee}\\catdb") Region: id = 2322 start_va = 0x547d100000 end_va = 0x547d10ffff entry_point = 0x547d100000 region_type = mapped_file name = "catdb" filename = "\\Windows\\System32\\catroot2\\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\\catdb" (normalized: "c:\\windows\\system32\\catroot2\\{f750e6c3-38ee-11d1-85e5-00c04fc295ee}\\catdb") Region: id = 2323 start_va = 0x547d110000 end_va = 0x547d11ffff entry_point = 0x547d110000 region_type = mapped_file name = "catdb" filename = "\\Windows\\System32\\catroot2\\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\\catdb" (normalized: "c:\\windows\\system32\\catroot2\\{f750e6c3-38ee-11d1-85e5-00c04fc295ee}\\catdb") Region: id = 2324 start_va = 0x547d120000 end_va = 0x547d21ffff entry_point = 0x0 region_type = private name = "private_0x000000547d120000" filename = "" Region: id = 2325 start_va = 0x7df5ff980000 end_va = 0x7ff5ff97ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007df5ff980000" filename = "" Region: id = 2326 start_va = 0x7ff6733ba000 end_va = 0x7ff6733bbfff entry_point = 0x0 region_type = private name = "private_0x00007ff6733ba000" filename = "" Region: id = 2327 start_va = 0x7ff6733bc000 end_va = 0x7ff6733bdfff entry_point = 0x0 region_type = private name = "private_0x00007ff6733bc000" filename = "" Region: id = 2328 start_va = 0x7ff6733be000 end_va = 0x7ff6733bffff entry_point = 0x0 region_type = private name = "private_0x00007ff6733be000" filename = "" Region: id = 2329 start_va = 0x7ff6733c0000 end_va = 0x7ff6733c1fff entry_point = 0x0 region_type = private name = "private_0x00007ff6733c0000" filename = "" Region: id = 2330 start_va = 0x7ff6733c2000 end_va = 0x7ff6733c3fff entry_point = 0x0 region_type = private name = "private_0x00007ff6733c2000" filename = "" Region: id = 2331 start_va = 0x7ff6733c4000 end_va = 0x7ff6733c5fff entry_point = 0x0 region_type = private name = "private_0x00007ff6733c4000" filename = "" Region: id = 2332 start_va = 0x7ff6733c6000 end_va = 0x7ff6733c7fff entry_point = 0x0 region_type = private name = "private_0x00007ff6733c6000" filename = "" Region: id = 2333 start_va = 0x7ff6733c8000 end_va = 0x7ff6733c9fff entry_point = 0x0 region_type = private name = "private_0x00007ff6733c8000" filename = "" Region: id = 2334 start_va = 0x7ff6733ca000 end_va = 0x7ff6733cbfff entry_point = 0x0 region_type = private name = "private_0x00007ff6733ca000" filename = "" Region: id = 2335 start_va = 0x7ff6733cc000 end_va = 0x7ff6733cdfff entry_point = 0x0 region_type = private name = "private_0x00007ff6733cc000" filename = "" Region: id = 2336 start_va = 0x7ff6733ce000 end_va = 0x7ff6733cffff entry_point = 0x0 region_type = private name = "private_0x00007ff6733ce000" filename = "" Region: id = 2337 start_va = 0x7ff6733d0000 end_va = 0x7ff6733d1fff entry_point = 0x0 region_type = private name = "private_0x00007ff6733d0000" filename = "" Region: id = 2338 start_va = 0x7ff6733d2000 end_va = 0x7ff6733d3fff entry_point = 0x0 region_type = private name = "private_0x00007ff6733d2000" filename = "" Region: id = 2339 start_va = 0x7ff6733d6000 end_va = 0x7ff6733d7fff entry_point = 0x0 region_type = private name = "private_0x00007ff6733d6000" filename = "" Region: id = 2340 start_va = 0x7ff6733d8000 end_va = 0x7ff6733d9fff entry_point = 0x0 region_type = private name = "private_0x00007ff6733d8000" filename = "" Region: id = 2341 start_va = 0x7ff6733da000 end_va = 0x7ff6733dbfff entry_point = 0x0 region_type = private name = "private_0x00007ff6733da000" filename = "" Region: id = 2342 start_va = 0x7ff6733dc000 end_va = 0x7ff6733ddfff entry_point = 0x0 region_type = private name = "private_0x00007ff6733dc000" filename = "" Region: id = 2343 start_va = 0x7ff6733de000 end_va = 0x7ff6733dffff entry_point = 0x0 region_type = private name = "private_0x00007ff6733de000" filename = "" Region: id = 2344 start_va = 0x7ff6733e0000 end_va = 0x7ff6734dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007ff6733e0000" filename = "" Region: id = 2345 start_va = 0x7ff6734e0000 end_va = 0x7ff673502fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007ff6734e0000" filename = "" Region: id = 2346 start_va = 0x7ff673503000 end_va = 0x7ff673504fff entry_point = 0x0 region_type = private name = "private_0x00007ff673503000" filename = "" Region: id = 2347 start_va = 0x7ff673505000 end_va = 0x7ff673506fff entry_point = 0x0 region_type = private name = "private_0x00007ff673505000" filename = "" Region: id = 2348 start_va = 0x7ff673507000 end_va = 0x7ff673508fff entry_point = 0x0 region_type = private name = "private_0x00007ff673507000" filename = "" Region: id = 2349 start_va = 0x7ff673509000 end_va = 0x7ff67350afff entry_point = 0x0 region_type = private name = "private_0x00007ff673509000" filename = "" Region: id = 2350 start_va = 0x7ff67350b000 end_va = 0x7ff67350cfff entry_point = 0x0 region_type = private name = "private_0x00007ff67350b000" filename = "" Region: id = 2351 start_va = 0x7ff67350d000 end_va = 0x7ff67350efff entry_point = 0x0 region_type = private name = "private_0x00007ff67350d000" filename = "" Region: id = 2352 start_va = 0x7ff67350f000 end_va = 0x7ff67350ffff entry_point = 0x0 region_type = private name = "private_0x00007ff67350f000" filename = "" Region: id = 2353 start_va = 0x7ff673b40000 end_va = 0x7ff673b4cfff entry_point = 0x7ff673b40000 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 2354 start_va = 0x7ff8e0f80000 end_va = 0x7ff8e0f94fff entry_point = 0x7ff8e0f80000 region_type = mapped_file name = "ondemandconnroutehelper.dll" filename = "\\Windows\\System32\\OnDemandConnRouteHelper.dll" (normalized: "c:\\windows\\system32\\ondemandconnroutehelper.dll") Region: id = 2355 start_va = 0x7ff8e15f0000 end_va = 0x7ff8e164efff entry_point = 0x7ff8e15f0000 region_type = mapped_file name = "wlanapi.dll" filename = "\\Windows\\System32\\wlanapi.dll" (normalized: "c:\\windows\\system32\\wlanapi.dll") Region: id = 2356 start_va = 0x7ff8e1940000 end_va = 0x7ff8e1c21fff entry_point = 0x7ff8e1940000 region_type = mapped_file name = "esent.dll" filename = "\\Windows\\System32\\esent.dll" (normalized: "c:\\windows\\system32\\esent.dll") Region: id = 2357 start_va = 0x7ff8e27f0000 end_va = 0x7ff8e2804fff entry_point = 0x7ff8e27f0000 region_type = mapped_file name = "ssdpapi.dll" filename = "\\Windows\\System32\\ssdpapi.dll" (normalized: "c:\\windows\\system32\\ssdpapi.dll") Region: id = 2358 start_va = 0x7ff8e2960000 end_va = 0x7ff8e29befff entry_point = 0x7ff8e2960000 region_type = mapped_file name = "ncsi.dll" filename = "\\Windows\\System32\\ncsi.dll" (normalized: "c:\\windows\\system32\\ncsi.dll") Region: id = 2359 start_va = 0x7ff8e29c0000 end_va = 0x7ff8e2a1ffff entry_point = 0x7ff8e29c0000 region_type = mapped_file name = "nlasvc.dll" filename = "\\Windows\\System32\\nlasvc.dll" (normalized: "c:\\windows\\system32\\nlasvc.dll") Region: id = 2360 start_va = 0x7ff8e5540000 end_va = 0x7ff8e5557fff entry_point = 0x7ff8e5540000 region_type = mapped_file name = "vsstrace.dll" filename = "\\Windows\\System32\\vsstrace.dll" (normalized: "c:\\windows\\system32\\vsstrace.dll") Region: id = 2361 start_va = 0x7ff8e5560000 end_va = 0x7ff8e56e2fff entry_point = 0x7ff8e5560000 region_type = mapped_file name = "vssapi.dll" filename = "\\Windows\\System32\\vssapi.dll" (normalized: "c:\\windows\\system32\\vssapi.dll") Region: id = 2362 start_va = 0x7ff8e5dd0000 end_va = 0x7ff8e5ea5fff entry_point = 0x7ff8e5dd0000 region_type = mapped_file name = "winhttp.dll" filename = "\\Windows\\System32\\winhttp.dll" (normalized: "c:\\windows\\system32\\winhttp.dll") Region: id = 2363 start_va = 0x7ff8e6020000 end_va = 0x7ff8e6043fff entry_point = 0x7ff8e6020000 region_type = mapped_file name = "cryptcatsvc.dll" filename = "\\Windows\\System32\\cryptcatsvc.dll" (normalized: "c:\\windows\\system32\\cryptcatsvc.dll") Region: id = 2364 start_va = 0x7ff8e6050000 end_va = 0x7ff8e6062fff entry_point = 0x7ff8e6050000 region_type = mapped_file name = "crypttpmeksvc.dll" filename = "\\Windows\\System32\\crypttpmeksvc.dll" (normalized: "c:\\windows\\system32\\crypttpmeksvc.dll") Region: id = 2365 start_va = 0x7ff8e6070000 end_va = 0x7ff8e6086fff entry_point = 0x7ff8e6070000 region_type = mapped_file name = "cryptsvc.dll" filename = "\\Windows\\System32\\cryptsvc.dll" (normalized: "c:\\windows\\system32\\cryptsvc.dll") Region: id = 2366 start_va = 0x7ff8e6bd0000 end_va = 0x7ff8e6c18fff entry_point = 0x7ff8e6bd0000 region_type = mapped_file name = "wkssvc.dll" filename = "\\Windows\\System32\\wkssvc.dll" (normalized: "c:\\windows\\system32\\wkssvc.dll") Region: id = 2367 start_va = 0x7ff8e7150000 end_va = 0x7ff8e7159fff entry_point = 0x7ff8e7150000 region_type = mapped_file name = "dnsext.dll" filename = "\\Windows\\System32\\dnsext.dll" (normalized: "c:\\windows\\system32\\dnsext.dll") Region: id = 2368 start_va = 0x7ff8e7160000 end_va = 0x7ff8e71c7fff entry_point = 0x7ff8e7160000 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 2369 start_va = 0x7ff8e71d0000 end_va = 0x7ff8e7218fff entry_point = 0x7ff8e71d0000 region_type = mapped_file name = "dnsrslvr.dll" filename = "\\Windows\\System32\\dnsrslvr.dll" (normalized: "c:\\windows\\system32\\dnsrslvr.dll") Region: id = 2370 start_va = 0x7ff8e7280000 end_va = 0x7ff8e7299fff entry_point = 0x7ff8e7280000 region_type = mapped_file name = "dhcpcsvc.dll" filename = "\\Windows\\System32\\dhcpcsvc.dll" (normalized: "c:\\windows\\system32\\dhcpcsvc.dll") Region: id = 2371 start_va = 0x7ff8e72a0000 end_va = 0x7ff8e72b5fff entry_point = 0x7ff8e72a0000 region_type = mapped_file name = "dhcpcsvc6.dll" filename = "\\Windows\\System32\\dhcpcsvc6.dll" (normalized: "c:\\windows\\system32\\dhcpcsvc6.dll") Region: id = 2372 start_va = 0x7ff8e7400000 end_va = 0x7ff8e741bfff entry_point = 0x7ff8e7400000 region_type = mapped_file name = "samlib.dll" filename = "\\Windows\\System32\\samlib.dll" (normalized: "c:\\windows\\system32\\samlib.dll") Region: id = 2373 start_va = 0x7ff8e76f0000 end_va = 0x7ff8e7707fff entry_point = 0x7ff8e76f0000 region_type = mapped_file name = "samcli.dll" filename = "\\Windows\\System32\\samcli.dll" (normalized: "c:\\windows\\system32\\samcli.dll") Region: id = 2374 start_va = 0x7ff8e79b0000 end_va = 0x7ff8e7b32fff entry_point = 0x7ff8e79b0000 region_type = mapped_file name = "propsys.dll" filename = "\\Windows\\System32\\propsys.dll" (normalized: "c:\\windows\\system32\\propsys.dll") Region: id = 2375 start_va = 0x7ff8e7ca0000 end_va = 0x7ff8e7cccfff entry_point = 0x7ff8e7ca0000 region_type = mapped_file name = "netjoin.dll" filename = "\\Windows\\System32\\netjoin.dll" (normalized: "c:\\windows\\system32\\netjoin.dll") Region: id = 2376 start_va = 0x7ff8e7cd0000 end_va = 0x7ff8e7ce5fff entry_point = 0x7ff8e7cd0000 region_type = mapped_file name = "wkscli.dll" filename = "\\Windows\\System32\\wkscli.dll" (normalized: "c:\\windows\\system32\\wkscli.dll") Region: id = 2377 start_va = 0x7ff8e7d90000 end_va = 0x7ff8e7da0fff entry_point = 0x7ff8e7d90000 region_type = mapped_file name = "wmiclnt.dll" filename = "\\Windows\\System32\\wmiclnt.dll" (normalized: "c:\\windows\\system32\\wmiclnt.dll") Region: id = 2378 start_va = 0x7ff8e7f00000 end_va = 0x7ff8e7f79fff entry_point = 0x7ff8e7f00000 region_type = mapped_file name = "es.dll" filename = "\\Windows\\System32\\es.dll" (normalized: "c:\\windows\\system32\\es.dll") Region: id = 2379 start_va = 0x7ff8e7f80000 end_va = 0x7ff8e803ffff entry_point = 0x7ff8e7f80000 region_type = mapped_file name = "taskschd.dll" filename = "\\Windows\\System32\\taskschd.dll" (normalized: "c:\\windows\\system32\\taskschd.dll") Region: id = 2380 start_va = 0x7ff8e81f0000 end_va = 0x7ff8e8254fff entry_point = 0x7ff8e81f0000 region_type = mapped_file name = "wevtapi.dll" filename = "\\Windows\\System32\\wevtapi.dll" (normalized: "c:\\windows\\system32\\wevtapi.dll") Region: id = 2381 start_va = 0x7ff8e8460000 end_va = 0x7ff8e846afff entry_point = 0x7ff8e8460000 region_type = mapped_file name = "winnsi.dll" filename = "\\Windows\\System32\\winnsi.dll" (normalized: "c:\\windows\\system32\\winnsi.dll") Region: id = 2382 start_va = 0x7ff8e8480000 end_va = 0x7ff8e84b7fff entry_point = 0x7ff8e8480000 region_type = mapped_file name = "iphlpapi.dll" filename = "\\Windows\\System32\\IPHLPAPI.DLL" (normalized: "c:\\windows\\system32\\iphlpapi.dll") Region: id = 2383 start_va = 0x7ff8e8ad0000 end_va = 0x7ff8e8ae2fff entry_point = 0x7ff8e8ad0000 region_type = mapped_file name = "wtsapi32.dll" filename = "\\Windows\\System32\\wtsapi32.dll" (normalized: "c:\\windows\\system32\\wtsapi32.dll") Region: id = 2384 start_va = 0x7ff8e9cd0000 end_va = 0x7ff8e9cf2fff entry_point = 0x7ff8e9cd0000 region_type = mapped_file name = "gpapi.dll" filename = "\\Windows\\System32\\gpapi.dll" (normalized: "c:\\windows\\system32\\gpapi.dll") Region: id = 2385 start_va = 0x7ff8ea000000 end_va = 0x7ff8ea00bfff entry_point = 0x7ff8ea000000 region_type = mapped_file name = "netutils.dll" filename = "\\Windows\\System32\\netutils.dll" (normalized: "c:\\windows\\system32\\netutils.dll") Region: id = 2386 start_va = 0x7ff8ea270000 end_va = 0x7ff8ea2a2fff entry_point = 0x7ff8ea270000 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\System32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll") Region: id = 2387 start_va = 0x7ff8ea360000 end_va = 0x7ff8ea37efff entry_point = 0x7ff8ea360000 region_type = mapped_file name = "userenv.dll" filename = "\\Windows\\System32\\userenv.dll" (normalized: "c:\\windows\\system32\\userenv.dll") Region: id = 2388 start_va = 0x7ff8ea3c0000 end_va = 0x7ff8ea467fff entry_point = 0x7ff8ea3c0000 region_type = mapped_file name = "dnsapi.dll" filename = "\\Windows\\System32\\dnsapi.dll" (normalized: "c:\\windows\\system32\\dnsapi.dll") Region: id = 2389 start_va = 0x7ff8ea5c0000 end_va = 0x7ff8ea61cfff entry_point = 0x7ff8ea5c0000 region_type = mapped_file name = "mswsock.dll" filename = "\\Windows\\System32\\mswsock.dll" (normalized: "c:\\windows\\system32\\mswsock.dll") Region: id = 2390 start_va = 0x7ff8ea620000 end_va = 0x7ff8ea636fff entry_point = 0x7ff8ea620000 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\System32\\cryptsp.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll") Region: id = 2391 start_va = 0x7ff8ea790000 end_va = 0x7ff8ea79afff entry_point = 0x7ff8ea790000 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\System32\\cryptbase.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll") Region: id = 2392 start_va = 0x7ff8ea7d0000 end_va = 0x7ff8ea7f0fff entry_point = 0x7ff8ea7d0000 region_type = mapped_file name = "joinutil.dll" filename = "\\Windows\\System32\\joinutil.dll" (normalized: "c:\\windows\\system32\\joinutil.dll") Region: id = 2393 start_va = 0x7ff8ea820000 end_va = 0x7ff8ea877fff entry_point = 0x7ff8ea820000 region_type = mapped_file name = "winsta.dll" filename = "\\Windows\\System32\\winsta.dll" (normalized: "c:\\windows\\system32\\winsta.dll") Region: id = 2394 start_va = 0x7ff8ea880000 end_va = 0x7ff8ea8b5fff entry_point = 0x7ff8ea880000 region_type = mapped_file name = "ntasn1.dll" filename = "\\Windows\\System32\\ntasn1.dll" (normalized: "c:\\windows\\system32\\ntasn1.dll") Region: id = 2395 start_va = 0x7ff8ea8c0000 end_va = 0x7ff8ea8e5fff entry_point = 0x7ff8ea8c0000 region_type = mapped_file name = "ncrypt.dll" filename = "\\Windows\\System32\\ncrypt.dll" (normalized: "c:\\windows\\system32\\ncrypt.dll") Region: id = 2396 start_va = 0x7ff8ea9d0000 end_va = 0x7ff8ea9fbfff entry_point = 0x7ff8ea9d0000 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\System32\\sspicli.dll" (normalized: "c:\\windows\\system32\\sspicli.dll") Region: id = 2397 start_va = 0x7ff8eabd0000 end_va = 0x7ff8eabf7fff entry_point = 0x7ff8eabd0000 region_type = mapped_file name = "bcrypt.dll" filename = "\\Windows\\System32\\bcrypt.dll" (normalized: "c:\\windows\\system32\\bcrypt.dll") Region: id = 2398 start_va = 0x7ff8eac00000 end_va = 0x7ff8eac6afff entry_point = 0x7ff8eac00000 region_type = mapped_file name = "bcryptprimitives.dll" filename = "\\Windows\\System32\\bcryptprimitives.dll" (normalized: "c:\\windows\\system32\\bcryptprimitives.dll") Region: id = 2399 start_va = 0x7ff8eadb0000 end_va = 0x7ff8eadc0fff entry_point = 0x7ff8eadb0000 region_type = mapped_file name = "msasn1.dll" filename = "\\Windows\\System32\\msasn1.dll" (normalized: "c:\\windows\\system32\\msasn1.dll") Region: id = 2400 start_va = 0x7ff8eadd0000 end_va = 0x7ff8eae19fff entry_point = 0x7ff8eadd0000 region_type = mapped_file name = "powrprof.dll" filename = "\\Windows\\System32\\powrprof.dll" (normalized: "c:\\windows\\system32\\powrprof.dll") Region: id = 2401 start_va = 0x7ff8eae20000 end_va = 0x7ff8eae2efff entry_point = 0x7ff8eae20000 region_type = mapped_file name = "kernel.appcore.dll" filename = "\\Windows\\System32\\kernel.appcore.dll" (normalized: "c:\\windows\\system32\\kernel.appcore.dll") Region: id = 2402 start_va = 0x7ff8eae30000 end_va = 0x7ff8eae42fff entry_point = 0x7ff8eae30000 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\System32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll") Region: id = 2403 start_va = 0x7ff8eaf60000 end_va = 0x7ff8eafa3fff entry_point = 0x7ff8eaf60000 region_type = mapped_file name = "cfgmgr32.dll" filename = "\\Windows\\System32\\cfgmgr32.dll" (normalized: "c:\\windows\\system32\\cfgmgr32.dll") Region: id = 2404 start_va = 0x7ff8eafb0000 end_va = 0x7ff8eb170fff entry_point = 0x7ff8eafb0000 region_type = mapped_file name = "crypt32.dll" filename = "\\Windows\\System32\\crypt32.dll" (normalized: "c:\\windows\\system32\\crypt32.dll") Region: id = 2405 start_va = 0x7ff8eb870000 end_va = 0x7ff8eba4cfff entry_point = 0x7ff8eb870000 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 2406 start_va = 0x7ff8ebb30000 end_va = 0x7ff8ebbedfff entry_point = 0x7ff8ebb30000 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll") Region: id = 2407 start_va = 0x7ff8ebdc0000 end_va = 0x7ff8ebf0dfff entry_point = 0x7ff8ebdc0000 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 2408 start_va = 0x7ff8ec240000 end_va = 0x7ff8ec29afff entry_point = 0x7ff8ec240000 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 2409 start_va = 0x7ff8ec450000 end_va = 0x7ff8ec575fff entry_point = 0x7ff8ec450000 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 2410 start_va = 0x7ff8edb10000 end_va = 0x7ff8edbb4fff entry_point = 0x7ff8edb10000 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\System32\\clbcatq.dll" (normalized: "c:\\windows\\system32\\clbcatq.dll") Region: id = 2411 start_va = 0x7ff8edbc0000 end_va = 0x7ff8edd44fff entry_point = 0x7ff8edbc0000 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 2412 start_va = 0x7ff8edd60000 end_va = 0x7ff8edfdbfff entry_point = 0x7ff8edd60000 region_type = mapped_file name = "combase.dll" filename = "\\Windows\\System32\\combase.dll" (normalized: "c:\\windows\\system32\\combase.dll") Region: id = 2413 start_va = 0x7ff8ee040000 end_va = 0x7ff8ee0a8fff entry_point = 0x7ff8ee040000 region_type = mapped_file name = "ws2_32.dll" filename = "\\Windows\\System32\\ws2_32.dll" (normalized: "c:\\windows\\system32\\ws2_32.dll") Region: id = 2414 start_va = 0x7ff8ee0b0000 end_va = 0x7ff8ee14cfff entry_point = 0x7ff8ee0b0000 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 2415 start_va = 0x7ff8ee190000 end_va = 0x7ff8ee235fff entry_point = 0x7ff8ee190000 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 2416 start_va = 0x7ff8ee250000 end_va = 0x7ff8ee257fff entry_point = 0x7ff8ee250000 region_type = mapped_file name = "nsi.dll" filename = "\\Windows\\System32\\nsi.dll" (normalized: "c:\\windows\\system32\\nsi.dll") Region: id = 2417 start_va = 0x7ff8ee2d0000 end_va = 0x7ff8ee37cfff entry_point = 0x7ff8ee2d0000 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 2418 start_va = 0x7ff8ee380000 end_va = 0x7ff8ee541fff entry_point = 0x7ff8ee380000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Thread: id = 348 os_tid = 0xf94 Thread: id = 349 os_tid = 0xf8c Thread: id = 350 os_tid = 0xf88 Thread: id = 351 os_tid = 0xd54 Thread: id = 352 os_tid = 0x980 Thread: id = 353 os_tid = 0x918 Thread: id = 354 os_tid = 0x68c Thread: id = 355 os_tid = 0x688 Thread: id = 356 os_tid = 0x680 Thread: id = 357 os_tid = 0x674 Thread: id = 358 os_tid = 0x668 Thread: id = 359 os_tid = 0x614 Thread: id = 360 os_tid = 0x5e0 Thread: id = 361 os_tid = 0x590 Thread: id = 362 os_tid = 0x530 Thread: id = 363 os_tid = 0x488 Thread: id = 364 os_tid = 0x470 Thread: id = 365 os_tid = 0x468 Thread: id = 366 os_tid = 0x464 Thread: id = 367 os_tid = 0x460 Thread: id = 368 os_tid = 0x458 Thread: id = 369 os_tid = 0x3ec Thread: id = 370 os_tid = 0x38c Thread: id = 371 os_tid = 0x2c4 Process: id = "18" image_name = "spoolsv.exe" filename = "c:\\windows\\system32\\spoolsv.exe" page_root = "0x55865000" os_pid = "0x230" os_integrity_level = "0x4000" os_privileges = "0x20a00080" monitor_reason = "child_process" parent_id = "10" os_parent_pid = "0x1e8" cmd_line = "C:\\Windows\\System32\\spoolsv.exe" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\Spooler" [0xe], "NT AUTHORITY\\Logon Session 00000000:0001068d" [0xc000000f], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Region: id = 2677 start_va = 0x8b0000 end_va = 0x8bffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000008b0000" filename = "" Region: id = 2678 start_va = 0x8c0000 end_va = 0x8c6fff entry_point = 0x0 region_type = private name = "private_0x00000000008c0000" filename = "" Region: id = 2679 start_va = 0x8d0000 end_va = 0x8e3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000008d0000" filename = "" Region: id = 2680 start_va = 0x8f0000 end_va = 0x92ffff entry_point = 0x0 region_type = private name = "private_0x00000000008f0000" filename = "" Region: id = 2681 start_va = 0x930000 end_va = 0x933fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000930000" filename = "" Region: id = 2682 start_va = 0x940000 end_va = 0x940fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000940000" filename = "" Region: id = 2683 start_va = 0x950000 end_va = 0x951fff entry_point = 0x0 region_type = private name = "private_0x0000000000950000" filename = "" Region: id = 2684 start_va = 0x960000 end_va = 0x99ffff entry_point = 0x0 region_type = private name = "private_0x0000000000960000" filename = "" Region: id = 2685 start_va = 0x9a0000 end_va = 0x9a0fff entry_point = 0x9a0000 region_type = mapped_file name = "spoolsv.exe.mui" filename = "\\Windows\\System32\\en-US\\spoolsv.exe.mui" (normalized: "c:\\windows\\system32\\en-us\\spoolsv.exe.mui") Region: id = 2686 start_va = 0x9b0000 end_va = 0x9b0fff entry_point = 0x0 region_type = private name = "private_0x00000000009b0000" filename = "" Region: id = 2687 start_va = 0x9c0000 end_va = 0x9c0fff entry_point = 0x0 region_type = private name = "private_0x00000000009c0000" filename = "" Region: id = 2688 start_va = 0x9d0000 end_va = 0x9d6fff entry_point = 0x0 region_type = private name = "private_0x00000000009d0000" filename = "" Region: id = 2689 start_va = 0x9e0000 end_va = 0x9e0fff entry_point = 0x0 region_type = private name = "private_0x00000000009e0000" filename = "" Region: id = 2690 start_va = 0x9f0000 end_va = 0xaeffff entry_point = 0x0 region_type = private name = "private_0x00000000009f0000" filename = "" Region: id = 2691 start_va = 0xaf0000 end_va = 0xbadfff entry_point = 0xaf0000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 2692 start_va = 0xbb0000 end_va = 0xd37fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000bb0000" filename = "" Region: id = 2693 start_va = 0xd40000 end_va = 0xec0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000d40000" filename = "" Region: id = 2694 start_va = 0xed0000 end_va = 0xf8ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000ed0000" filename = "" Region: id = 2695 start_va = 0xf90000 end_va = 0xfcffff entry_point = 0x0 region_type = private name = "private_0x0000000000f90000" filename = "" Region: id = 2696 start_va = 0xfd0000 end_va = 0x100ffff entry_point = 0x0 region_type = private name = "private_0x0000000000fd0000" filename = "" Region: id = 2697 start_va = 0x1010000 end_va = 0x104ffff entry_point = 0x0 region_type = private name = "private_0x0000000001010000" filename = "" Region: id = 2698 start_va = 0x1050000 end_va = 0x1056fff entry_point = 0x0 region_type = private name = "private_0x0000000001050000" filename = "" Region: id = 2699 start_va = 0x1060000 end_va = 0x1073fff entry_point = 0x1060000 region_type = mapped_file name = "localspl.dll.mui" filename = "\\Windows\\System32\\en-US\\localspl.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\localspl.dll.mui") Region: id = 2700 start_va = 0x1080000 end_va = 0x108ffff entry_point = 0x0 region_type = private name = "private_0x0000000001080000" filename = "" Region: id = 2701 start_va = 0x10d0000 end_va = 0x110ffff entry_point = 0x0 region_type = private name = "private_0x00000000010d0000" filename = "" Region: id = 2702 start_va = 0x1110000 end_va = 0x1110fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001110000" filename = "" Region: id = 2703 start_va = 0x1120000 end_va = 0x1120fff entry_point = 0x1120000 region_type = mapped_file name = "wsdmon.dll.mui" filename = "\\Windows\\System32\\en-US\\WSDMon.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\wsdmon.dll.mui") Region: id = 2704 start_va = 0x1130000 end_va = 0x1130fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001130000" filename = "" Region: id = 2705 start_va = 0x1140000 end_va = 0x1140fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001140000" filename = "" Region: id = 2706 start_va = 0x1150000 end_va = 0x115ffff entry_point = 0x0 region_type = private name = "private_0x0000000001150000" filename = "" Region: id = 2707 start_va = 0x1160000 end_va = 0x1496fff entry_point = 0x1160000 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 2708 start_va = 0x14a0000 end_va = 0x159ffff entry_point = 0x0 region_type = private name = "private_0x00000000014a0000" filename = "" Region: id = 2709 start_va = 0x15a0000 end_va = 0x15a0fff entry_point = 0x15a0000 region_type = mapped_file name = "msxml6r.dll" filename = "\\Windows\\System32\\msxml6r.dll" (normalized: "c:\\windows\\system32\\msxml6r.dll") Region: id = 2710 start_va = 0x15b0000 end_va = 0x15b6fff entry_point = 0x0 region_type = private name = "private_0x00000000015b0000" filename = "" Region: id = 2711 start_va = 0x15c0000 end_va = 0x15fffff entry_point = 0x0 region_type = private name = "private_0x00000000015c0000" filename = "" Region: id = 2712 start_va = 0x1600000 end_va = 0x160ffff entry_point = 0x0 region_type = private name = "private_0x0000000001600000" filename = "" Region: id = 2713 start_va = 0x1610000 end_va = 0x170ffff entry_point = 0x0 region_type = private name = "private_0x0000000001610000" filename = "" Region: id = 2714 start_va = 0x1710000 end_va = 0x17eefff entry_point = 0x1710000 region_type = mapped_file name = "kernelbase.dll.mui" filename = "\\Windows\\System32\\en-US\\KernelBase.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\kernelbase.dll.mui") Region: id = 2715 start_va = 0x17f0000 end_va = 0x18effff entry_point = 0x0 region_type = private name = "private_0x00000000017f0000" filename = "" Region: id = 2716 start_va = 0x18f0000 end_va = 0x1aeffff entry_point = 0x0 region_type = private name = "private_0x00000000018f0000" filename = "" Region: id = 2717 start_va = 0x1af0000 end_va = 0x1b2ffff entry_point = 0x0 region_type = private name = "private_0x0000000001af0000" filename = "" Region: id = 2718 start_va = 0x1b30000 end_va = 0x1b6ffff entry_point = 0x0 region_type = private name = "private_0x0000000001b30000" filename = "" Region: id = 2719 start_va = 0x1b70000 end_va = 0x1baffff entry_point = 0x0 region_type = private name = "private_0x0000000001b70000" filename = "" Region: id = 2720 start_va = 0x1bb0000 end_va = 0x1beffff entry_point = 0x0 region_type = private name = "private_0x0000000001bb0000" filename = "" Region: id = 2721 start_va = 0x1c30000 end_va = 0x1c6ffff entry_point = 0x0 region_type = private name = "private_0x0000000001c30000" filename = "" Region: id = 2722 start_va = 0x1c70000 end_va = 0x1c70fff entry_point = 0x1c70000 region_type = mapped_file name = "win32spl.dll.mui" filename = "\\Windows\\System32\\en-US\\win32spl.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\win32spl.dll.mui") Region: id = 2723 start_va = 0x1c80000 end_va = 0x1c80fff entry_point = 0x1c80000 region_type = mapped_file name = "inetpp.dll.mui" filename = "\\Windows\\System32\\en-US\\inetpp.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\inetpp.dll.mui") Region: id = 2724 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 2725 start_va = 0x7df5ffcb0000 end_va = 0x7ff5ffcaffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007df5ffcb0000" filename = "" Region: id = 2726 start_va = 0x7ff6fc80e000 end_va = 0x7ff6fc80ffff entry_point = 0x0 region_type = private name = "private_0x00007ff6fc80e000" filename = "" Region: id = 2727 start_va = 0x7ff6fc812000 end_va = 0x7ff6fc813fff entry_point = 0x0 region_type = private name = "private_0x00007ff6fc812000" filename = "" Region: id = 2728 start_va = 0x7ff6fc814000 end_va = 0x7ff6fc815fff entry_point = 0x0 region_type = private name = "private_0x00007ff6fc814000" filename = "" Region: id = 2729 start_va = 0x7ff6fc816000 end_va = 0x7ff6fc817fff entry_point = 0x0 region_type = private name = "private_0x00007ff6fc816000" filename = "" Region: id = 2730 start_va = 0x7ff6fc818000 end_va = 0x7ff6fc819fff entry_point = 0x0 region_type = private name = "private_0x00007ff6fc818000" filename = "" Region: id = 2731 start_va = 0x7ff6fc81a000 end_va = 0x7ff6fc81bfff entry_point = 0x0 region_type = private name = "private_0x00007ff6fc81a000" filename = "" Region: id = 2732 start_va = 0x7ff6fc81c000 end_va = 0x7ff6fc81dfff entry_point = 0x0 region_type = private name = "private_0x00007ff6fc81c000" filename = "" Region: id = 2733 start_va = 0x7ff6fc820000 end_va = 0x7ff6fc91ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007ff6fc820000" filename = "" Region: id = 2734 start_va = 0x7ff6fc920000 end_va = 0x7ff6fc942fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007ff6fc920000" filename = "" Region: id = 2735 start_va = 0x7ff6fc944000 end_va = 0x7ff6fc944fff entry_point = 0x0 region_type = private name = "private_0x00007ff6fc944000" filename = "" Region: id = 2736 start_va = 0x7ff6fc946000 end_va = 0x7ff6fc947fff entry_point = 0x0 region_type = private name = "private_0x00007ff6fc946000" filename = "" Region: id = 2737 start_va = 0x7ff6fc948000 end_va = 0x7ff6fc949fff entry_point = 0x0 region_type = private name = "private_0x00007ff6fc948000" filename = "" Region: id = 2738 start_va = 0x7ff6fc94a000 end_va = 0x7ff6fc94bfff entry_point = 0x0 region_type = private name = "private_0x00007ff6fc94a000" filename = "" Region: id = 2739 start_va = 0x7ff6fc94c000 end_va = 0x7ff6fc94dfff entry_point = 0x0 region_type = private name = "private_0x00007ff6fc94c000" filename = "" Region: id = 2740 start_va = 0x7ff6fc94e000 end_va = 0x7ff6fc94ffff entry_point = 0x0 region_type = private name = "private_0x00007ff6fc94e000" filename = "" Region: id = 2741 start_va = 0x7ff6fd6e0000 end_va = 0x7ff6fd7a4fff entry_point = 0x7ff6fd6e0000 region_type = mapped_file name = "spoolsv.exe" filename = "\\Windows\\System32\\spoolsv.exe" (normalized: "c:\\windows\\system32\\spoolsv.exe") Region: id = 2742 start_va = 0x7ff8d1a80000 end_va = 0x7ff8d1b51fff entry_point = 0x7ff8d1a80000 region_type = mapped_file name = "win32spl.dll" filename = "\\Windows\\System32\\win32spl.dll" (normalized: "c:\\windows\\system32\\win32spl.dll") Region: id = 2743 start_va = 0x7ff8d1b60000 end_va = 0x7ff8d1c32fff entry_point = 0x7ff8d1b60000 region_type = mapped_file name = "drvstore.dll" filename = "\\Windows\\System32\\drvstore.dll" (normalized: "c:\\windows\\system32\\drvstore.dll") Region: id = 2744 start_va = 0x7ff8d1c40000 end_va = 0x7ff8d1dbafff entry_point = 0x7ff8d1c40000 region_type = mapped_file name = "webservices.dll" filename = "\\Windows\\System32\\webservices.dll" (normalized: "c:\\windows\\system32\\webservices.dll") Region: id = 2745 start_va = 0x7ff8d1dc0000 end_va = 0x7ff8d1ed5fff entry_point = 0x7ff8d1dc0000 region_type = mapped_file name = "localspl.dll" filename = "\\Windows\\System32\\localspl.dll" (normalized: "c:\\windows\\system32\\localspl.dll") Region: id = 2746 start_va = 0x7ff8d5c30000 end_va = 0x7ff8d5cd6fff entry_point = 0x7ff8d5c30000 region_type = mapped_file name = "wsdapi.dll" filename = "\\Windows\\System32\\WSDApi.dll" (normalized: "c:\\windows\\system32\\wsdapi.dll") Region: id = 2747 start_va = 0x7ff8d6210000 end_va = 0x7ff8d623dfff entry_point = 0x7ff8d6210000 region_type = mapped_file name = "inetpp.dll" filename = "\\Windows\\System32\\inetpp.dll" (normalized: "c:\\windows\\system32\\inetpp.dll") Region: id = 2748 start_va = 0x7ff8d6240000 end_va = 0x7ff8d62d3fff entry_point = 0x7ff8d6240000 region_type = mapped_file name = "wsdmon.dll" filename = "\\Windows\\System32\\WSDMon.dll" (normalized: "c:\\windows\\system32\\wsdmon.dll") Region: id = 2749 start_va = 0x7ff8d7620000 end_va = 0x7ff8d7649fff entry_point = 0x7ff8d7620000 region_type = mapped_file name = "fundisc.dll" filename = "\\Windows\\System32\\fundisc.dll" (normalized: "c:\\windows\\system32\\fundisc.dll") Region: id = 2750 start_va = 0x7ff8d7650000 end_va = 0x7ff8d769efff entry_point = 0x7ff8d7650000 region_type = mapped_file name = "usbmon.dll" filename = "\\Windows\\System32\\usbmon.dll" (normalized: "c:\\windows\\system32\\usbmon.dll") Region: id = 2751 start_va = 0x7ff8da840000 end_va = 0x7ff8da8c3fff entry_point = 0x7ff8da840000 region_type = mapped_file name = "winspool.drv" filename = "\\Windows\\System32\\winspool.drv" (normalized: "c:\\windows\\system32\\winspool.drv") Region: id = 2752 start_va = 0x7ff8db5d0000 end_va = 0x7ff8db609fff entry_point = 0x7ff8db5d0000 region_type = mapped_file name = "tcpmon.dll" filename = "\\Windows\\System32\\tcpmon.dll" (normalized: "c:\\windows\\system32\\tcpmon.dll") Region: id = 2753 start_va = 0x7ff8e05b0000 end_va = 0x7ff8e05c1fff entry_point = 0x7ff8e05b0000 region_type = mapped_file name = "cscapi.dll" filename = "\\Windows\\System32\\cscapi.dll" (normalized: "c:\\windows\\system32\\cscapi.dll") Region: id = 2754 start_va = 0x7ff8e1c70000 end_va = 0x7ff8e1ee6fff entry_point = 0x7ff8e1c70000 region_type = mapped_file name = "msxml6.dll" filename = "\\Windows\\System32\\msxml6.dll" (normalized: "c:\\windows\\system32\\msxml6.dll") Region: id = 2755 start_va = 0x7ff8e2ea0000 end_va = 0x7ff8e2ea9fff entry_point = 0x7ff8e2ea0000 region_type = mapped_file name = "rasadhlp.dll" filename = "\\Windows\\System32\\rasadhlp.dll" (normalized: "c:\\windows\\system32\\rasadhlp.dll") Region: id = 2756 start_va = 0x7ff8e2fe0000 end_va = 0x7ff8e2feffff entry_point = 0x7ff8e2fe0000 region_type = mapped_file name = "winprint.dll" filename = "\\Windows\\System32\\spool\\prtprocs\\x64\\winprint.dll" (normalized: "c:\\windows\\system32\\spool\\prtprocs\\x64\\winprint.dll") Region: id = 2757 start_va = 0x7ff8e3010000 end_va = 0x7ff8e3022fff entry_point = 0x7ff8e3010000 region_type = mapped_file name = "fdpnp.dll" filename = "\\Windows\\System32\\fdPnp.dll" (normalized: "c:\\windows\\system32\\fdpnp.dll") Region: id = 2758 start_va = 0x7ff8e3030000 end_va = 0x7ff8e303ffff entry_point = 0x7ff8e3030000 region_type = mapped_file name = "deviceassociation.dll" filename = "\\Windows\\System32\\deviceassociation.dll" (normalized: "c:\\windows\\system32\\deviceassociation.dll") Region: id = 2759 start_va = 0x7ff8e3100000 end_va = 0x7ff8e3113fff entry_point = 0x7ff8e3100000 region_type = mapped_file name = "wsnmp32.dll" filename = "\\Windows\\System32\\wsnmp32.dll" (normalized: "c:\\windows\\system32\\wsnmp32.dll") Region: id = 2760 start_va = 0x7ff8e3120000 end_va = 0x7ff8e312bfff entry_point = 0x7ff8e3120000 region_type = mapped_file name = "snmpapi.dll" filename = "\\Windows\\System32\\snmpapi.dll" (normalized: "c:\\windows\\system32\\snmpapi.dll") Region: id = 2761 start_va = 0x7ff8e5370000 end_va = 0x7ff8e5380fff entry_point = 0x7ff8e5370000 region_type = mapped_file name = "fxsmon.dll" filename = "\\Windows\\System32\\FXSMON.dll" (normalized: "c:\\windows\\system32\\fxsmon.dll") Region: id = 2762 start_va = 0x7ff8e5390000 end_va = 0x7ff8e53a3fff entry_point = 0x7ff8e5390000 region_type = mapped_file name = "printisolationproxy.dll" filename = "\\Windows\\System32\\PrintIsolationProxy.dll" (normalized: "c:\\windows\\system32\\printisolationproxy.dll") Region: id = 2763 start_va = 0x7ff8e53c0000 end_va = 0x7ff8e53d0fff entry_point = 0x7ff8e53c0000 region_type = mapped_file name = "sfc_os.dll" filename = "\\Windows\\System32\\sfc_os.dll" (normalized: "c:\\windows\\system32\\sfc_os.dll") Region: id = 2764 start_va = 0x7ff8e53e0000 end_va = 0x7ff8e53fbfff entry_point = 0x7ff8e53e0000 region_type = mapped_file name = "spoolss.dll" filename = "\\Windows\\System32\\spoolss.dll" (normalized: "c:\\windows\\system32\\spoolss.dll") Region: id = 2765 start_va = 0x7ff8e5480000 end_va = 0x7ff8e548bfff entry_point = 0x7ff8e5480000 region_type = mapped_file name = "secur32.dll" filename = "\\Windows\\System32\\secur32.dll" (normalized: "c:\\windows\\system32\\secur32.dll") Region: id = 2766 start_va = 0x7ff8e5dd0000 end_va = 0x7ff8e5ea5fff entry_point = 0x7ff8e5dd0000 region_type = mapped_file name = "winhttp.dll" filename = "\\Windows\\System32\\winhttp.dll" (normalized: "c:\\windows\\system32\\winhttp.dll") Region: id = 2767 start_va = 0x7ff8e6330000 end_va = 0x7ff8e6365fff entry_point = 0x7ff8e6330000 region_type = mapped_file name = "xmllite.dll" filename = "\\Windows\\System32\\xmllite.dll" (normalized: "c:\\windows\\system32\\xmllite.dll") Region: id = 2768 start_va = 0x7ff8e7160000 end_va = 0x7ff8e71c7fff entry_point = 0x7ff8e7160000 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 2769 start_va = 0x7ff8e8070000 end_va = 0x7ff8e808dfff entry_point = 0x7ff8e8070000 region_type = mapped_file name = "atl.dll" filename = "\\Windows\\System32\\atl.dll" (normalized: "c:\\windows\\system32\\atl.dll") Region: id = 2770 start_va = 0x7ff8e8460000 end_va = 0x7ff8e846afff entry_point = 0x7ff8e8460000 region_type = mapped_file name = "winnsi.dll" filename = "\\Windows\\System32\\winnsi.dll" (normalized: "c:\\windows\\system32\\winnsi.dll") Region: id = 2771 start_va = 0x7ff8e8480000 end_va = 0x7ff8e84b7fff entry_point = 0x7ff8e8480000 region_type = mapped_file name = "iphlpapi.dll" filename = "\\Windows\\System32\\IPHLPAPI.DLL" (normalized: "c:\\windows\\system32\\iphlpapi.dll") Region: id = 2772 start_va = 0x7ff8e84d0000 end_va = 0x7ff8e84d9fff entry_point = 0x7ff8e84d0000 region_type = mapped_file name = "dsrole.dll" filename = "\\Windows\\System32\\dsrole.dll" (normalized: "c:\\windows\\system32\\dsrole.dll") Region: id = 2773 start_va = 0x7ff8e8ad0000 end_va = 0x7ff8e8ae2fff entry_point = 0x7ff8e8ad0000 region_type = mapped_file name = "wtsapi32.dll" filename = "\\Windows\\System32\\wtsapi32.dll" (normalized: "c:\\windows\\system32\\wtsapi32.dll") Region: id = 2774 start_va = 0x7ff8e9720000 end_va = 0x7ff8e9746fff entry_point = 0x7ff8e9720000 region_type = mapped_file name = "devobj.dll" filename = "\\Windows\\System32\\devobj.dll" (normalized: "c:\\windows\\system32\\devobj.dll") Region: id = 2775 start_va = 0x7ff8e9ae0000 end_va = 0x7ff8e9b11fff entry_point = 0x7ff8e9ae0000 region_type = mapped_file name = "fwbase.dll" filename = "\\Windows\\System32\\fwbase.dll" (normalized: "c:\\windows\\system32\\fwbase.dll") Region: id = 2776 start_va = 0x7ff8e9b20000 end_va = 0x7ff8e9ba1fff entry_point = 0x7ff8e9b20000 region_type = mapped_file name = "firewallapi.dll" filename = "\\Windows\\System32\\FirewallAPI.dll" (normalized: "c:\\windows\\system32\\firewallapi.dll") Region: id = 2777 start_va = 0x7ff8e9cd0000 end_va = 0x7ff8e9cf2fff entry_point = 0x7ff8e9cd0000 region_type = mapped_file name = "gpapi.dll" filename = "\\Windows\\System32\\gpapi.dll" (normalized: "c:\\windows\\system32\\gpapi.dll") Region: id = 2778 start_va = 0x7ff8ea000000 end_va = 0x7ff8ea00bfff entry_point = 0x7ff8ea000000 region_type = mapped_file name = "netutils.dll" filename = "\\Windows\\System32\\netutils.dll" (normalized: "c:\\windows\\system32\\netutils.dll") Region: id = 2779 start_va = 0x7ff8ea010000 end_va = 0x7ff8ea035fff entry_point = 0x7ff8ea010000 region_type = mapped_file name = "srvcli.dll" filename = "\\Windows\\System32\\srvcli.dll" (normalized: "c:\\windows\\system32\\srvcli.dll") Region: id = 2780 start_va = 0x7ff8ea270000 end_va = 0x7ff8ea2a2fff entry_point = 0x7ff8ea270000 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\System32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll") Region: id = 2781 start_va = 0x7ff8ea360000 end_va = 0x7ff8ea37efff entry_point = 0x7ff8ea360000 region_type = mapped_file name = "userenv.dll" filename = "\\Windows\\System32\\userenv.dll" (normalized: "c:\\windows\\system32\\userenv.dll") Region: id = 2782 start_va = 0x7ff8ea3c0000 end_va = 0x7ff8ea467fff entry_point = 0x7ff8ea3c0000 region_type = mapped_file name = "dnsapi.dll" filename = "\\Windows\\System32\\dnsapi.dll" (normalized: "c:\\windows\\system32\\dnsapi.dll") Region: id = 2783 start_va = 0x7ff8ea5c0000 end_va = 0x7ff8ea61cfff entry_point = 0x7ff8ea5c0000 region_type = mapped_file name = "mswsock.dll" filename = "\\Windows\\System32\\mswsock.dll" (normalized: "c:\\windows\\system32\\mswsock.dll") Region: id = 2784 start_va = 0x7ff8ea620000 end_va = 0x7ff8ea636fff entry_point = 0x7ff8ea620000 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\System32\\cryptsp.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll") Region: id = 2785 start_va = 0x7ff8ea790000 end_va = 0x7ff8ea79afff entry_point = 0x7ff8ea790000 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\System32\\cryptbase.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll") Region: id = 2786 start_va = 0x7ff8ea820000 end_va = 0x7ff8ea877fff entry_point = 0x7ff8ea820000 region_type = mapped_file name = "winsta.dll" filename = "\\Windows\\System32\\winsta.dll" (normalized: "c:\\windows\\system32\\winsta.dll") Region: id = 2787 start_va = 0x7ff8ea9d0000 end_va = 0x7ff8ea9fbfff entry_point = 0x7ff8ea9d0000 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\System32\\sspicli.dll" (normalized: "c:\\windows\\system32\\sspicli.dll") Region: id = 2788 start_va = 0x7ff8eabd0000 end_va = 0x7ff8eabf7fff entry_point = 0x7ff8eabd0000 region_type = mapped_file name = "bcrypt.dll" filename = "\\Windows\\System32\\bcrypt.dll" (normalized: "c:\\windows\\system32\\bcrypt.dll") Region: id = 2789 start_va = 0x7ff8eac00000 end_va = 0x7ff8eac6afff entry_point = 0x7ff8eac00000 region_type = mapped_file name = "bcryptprimitives.dll" filename = "\\Windows\\System32\\bcryptprimitives.dll" (normalized: "c:\\windows\\system32\\bcryptprimitives.dll") Region: id = 2790 start_va = 0x7ff8eadb0000 end_va = 0x7ff8eadc0fff entry_point = 0x7ff8eadb0000 region_type = mapped_file name = "msasn1.dll" filename = "\\Windows\\System32\\msasn1.dll" (normalized: "c:\\windows\\system32\\msasn1.dll") Region: id = 2791 start_va = 0x7ff8eadd0000 end_va = 0x7ff8eae19fff entry_point = 0x7ff8eadd0000 region_type = mapped_file name = "powrprof.dll" filename = "\\Windows\\System32\\powrprof.dll" (normalized: "c:\\windows\\system32\\powrprof.dll") Region: id = 2792 start_va = 0x7ff8eae20000 end_va = 0x7ff8eae2efff entry_point = 0x7ff8eae20000 region_type = mapped_file name = "kernel.appcore.dll" filename = "\\Windows\\System32\\kernel.appcore.dll" (normalized: "c:\\windows\\system32\\kernel.appcore.dll") Region: id = 2793 start_va = 0x7ff8eae30000 end_va = 0x7ff8eae42fff entry_point = 0x7ff8eae30000 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\System32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll") Region: id = 2794 start_va = 0x7ff8eae50000 end_va = 0x7ff8eaea3fff entry_point = 0x7ff8eae50000 region_type = mapped_file name = "wintrust.dll" filename = "\\Windows\\System32\\wintrust.dll" (normalized: "c:\\windows\\system32\\wintrust.dll") Region: id = 2795 start_va = 0x7ff8eaf60000 end_va = 0x7ff8eafa3fff entry_point = 0x7ff8eaf60000 region_type = mapped_file name = "cfgmgr32.dll" filename = "\\Windows\\System32\\cfgmgr32.dll" (normalized: "c:\\windows\\system32\\cfgmgr32.dll") Region: id = 2796 start_va = 0x7ff8eafb0000 end_va = 0x7ff8eb170fff entry_point = 0x7ff8eafb0000 region_type = mapped_file name = "crypt32.dll" filename = "\\Windows\\System32\\crypt32.dll" (normalized: "c:\\windows\\system32\\crypt32.dll") Region: id = 2797 start_va = 0x7ff8eb870000 end_va = 0x7ff8eba4cfff entry_point = 0x7ff8eb870000 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 2798 start_va = 0x7ff8ebb30000 end_va = 0x7ff8ebbedfff entry_point = 0x7ff8ebb30000 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll") Region: id = 2799 start_va = 0x7ff8ebbf0000 end_va = 0x7ff8ebdb4fff entry_point = 0x7ff8ebbf0000 region_type = mapped_file name = "setupapi.dll" filename = "\\Windows\\System32\\setupapi.dll" (normalized: "c:\\windows\\system32\\setupapi.dll") Region: id = 2800 start_va = 0x7ff8ebdc0000 end_va = 0x7ff8ebf0dfff entry_point = 0x7ff8ebdc0000 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 2801 start_va = 0x7ff8ec240000 end_va = 0x7ff8ec29afff entry_point = 0x7ff8ec240000 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 2802 start_va = 0x7ff8ec300000 end_va = 0x7ff8ec440fff entry_point = 0x7ff8ec300000 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll") Region: id = 2803 start_va = 0x7ff8ec450000 end_va = 0x7ff8ec575fff entry_point = 0x7ff8ec450000 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 2804 start_va = 0x7ff8edb10000 end_va = 0x7ff8edbb4fff entry_point = 0x7ff8edb10000 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\System32\\clbcatq.dll" (normalized: "c:\\windows\\system32\\clbcatq.dll") Region: id = 2805 start_va = 0x7ff8edbc0000 end_va = 0x7ff8edd44fff entry_point = 0x7ff8edbc0000 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 2806 start_va = 0x7ff8edd60000 end_va = 0x7ff8edfdbfff entry_point = 0x7ff8edd60000 region_type = mapped_file name = "combase.dll" filename = "\\Windows\\System32\\combase.dll" (normalized: "c:\\windows\\system32\\combase.dll") Region: id = 2807 start_va = 0x7ff8edfe0000 end_va = 0x7ff8ee030fff entry_point = 0x7ff8edfe0000 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\System32\\shlwapi.dll" (normalized: "c:\\windows\\system32\\shlwapi.dll") Region: id = 2808 start_va = 0x7ff8ee040000 end_va = 0x7ff8ee0a8fff entry_point = 0x7ff8ee040000 region_type = mapped_file name = "ws2_32.dll" filename = "\\Windows\\System32\\ws2_32.dll" (normalized: "c:\\windows\\system32\\ws2_32.dll") Region: id = 2809 start_va = 0x7ff8ee0b0000 end_va = 0x7ff8ee14cfff entry_point = 0x7ff8ee0b0000 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 2810 start_va = 0x7ff8ee190000 end_va = 0x7ff8ee235fff entry_point = 0x7ff8ee190000 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 2811 start_va = 0x7ff8ee250000 end_va = 0x7ff8ee257fff entry_point = 0x7ff8ee250000 region_type = mapped_file name = "nsi.dll" filename = "\\Windows\\System32\\nsi.dll" (normalized: "c:\\windows\\system32\\nsi.dll") Region: id = 2812 start_va = 0x7ff8ee2d0000 end_va = 0x7ff8ee37cfff entry_point = 0x7ff8ee2d0000 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 2813 start_va = 0x7ff8ee380000 end_va = 0x7ff8ee541fff entry_point = 0x7ff8ee380000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Thread: id = 372 os_tid = 0x474 Thread: id = 373 os_tid = 0xecc Thread: id = 374 os_tid = 0xec8 Thread: id = 375 os_tid = 0xebc Thread: id = 376 os_tid = 0xeb4 Thread: id = 377 os_tid = 0xeb0 Thread: id = 378 os_tid = 0xea8 Thread: id = 379 os_tid = 0xea4 Thread: id = 380 os_tid = 0x894 Thread: id = 381 os_tid = 0x47c Thread: id = 382 os_tid = 0x414 Thread: id = 383 os_tid = 0x40c Thread: id = 384 os_tid = 0x2f0 Process: id = "19" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x55b6d000" os_pid = "0x428" os_integrity_level = "0x4000" os_privileges = "0x20b00080" monitor_reason = "child_process" parent_id = "10" os_parent_pid = "0x1e8" cmd_line = "C:\\Windows\\system32\\svchost.exe -k WbioSvcGroup" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" os_groups = "BUILTIN\\Administrators" [0xe], "Everyone" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7] Region: id = 2611 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 2612 start_va = 0x50714f0000 end_va = 0x50714fffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000050714f0000" filename = "" Region: id = 2613 start_va = 0x5071500000 end_va = 0x5071505fff entry_point = 0x5071500000 region_type = mapped_file name = "wbiosrvc.dll.mui" filename = "\\Windows\\System32\\en-US\\wbiosrvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\wbiosrvc.dll.mui") Region: id = 2614 start_va = 0x5071510000 end_va = 0x5071523fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000005071510000" filename = "" Region: id = 2615 start_va = 0x5071530000 end_va = 0x50715affff entry_point = 0x0 region_type = private name = "private_0x0000005071530000" filename = "" Region: id = 2616 start_va = 0x50715b0000 end_va = 0x50715b3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000050715b0000" filename = "" Region: id = 2617 start_va = 0x50715c0000 end_va = 0x50715c0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000050715c0000" filename = "" Region: id = 2618 start_va = 0x50715d0000 end_va = 0x50715d1fff entry_point = 0x0 region_type = private name = "private_0x00000050715d0000" filename = "" Region: id = 2619 start_va = 0x50715e0000 end_va = 0x507169dfff entry_point = 0x50715e0000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 2620 start_va = 0x50716a0000 end_va = 0x50716a0fff entry_point = 0x50716a0000 region_type = mapped_file name = "winbiostorageadapter.dll.mui" filename = "\\Windows\\System32\\WinBioPlugIns\\en-US\\winbioStorageadapter.dll.mui" (normalized: "c:\\windows\\system32\\winbioplugins\\en-us\\winbiostorageadapter.dll.mui") Region: id = 2621 start_va = 0x50716b0000 end_va = 0x50716b6fff entry_point = 0x0 region_type = private name = "private_0x00000050716b0000" filename = "" Region: id = 2622 start_va = 0x50716c0000 end_va = 0x50716c0fff entry_point = 0x50716c0000 region_type = mapped_file name = "svchost.exe.mui" filename = "\\Windows\\System32\\en-US\\svchost.exe.mui" (normalized: "c:\\windows\\system32\\en-us\\svchost.exe.mui") Region: id = 2623 start_va = 0x50716d0000 end_va = 0x50716d0fff entry_point = 0x0 region_type = private name = "private_0x00000050716d0000" filename = "" Region: id = 2624 start_va = 0x50716e0000 end_va = 0x50716e0fff entry_point = 0x0 region_type = private name = "private_0x00000050716e0000" filename = "" Region: id = 2625 start_va = 0x5071700000 end_va = 0x50717fffff entry_point = 0x0 region_type = private name = "private_0x0000005071700000" filename = "" Region: id = 2626 start_va = 0x5071880000 end_va = 0x507197ffff entry_point = 0x0 region_type = private name = "private_0x0000005071880000" filename = "" Region: id = 2627 start_va = 0x5071980000 end_va = 0x5071a7ffff entry_point = 0x0 region_type = private name = "private_0x0000005071980000" filename = "" Region: id = 2628 start_va = 0x5071a80000 end_va = 0x5071b7ffff entry_point = 0x0 region_type = private name = "private_0x0000005071a80000" filename = "" Region: id = 2629 start_va = 0x5071b80000 end_va = 0x5071c3ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000005071b80000" filename = "" Region: id = 2630 start_va = 0x5071c60000 end_va = 0x5071c66fff entry_point = 0x0 region_type = private name = "private_0x0000005071c60000" filename = "" Region: id = 2631 start_va = 0x5071d00000 end_va = 0x5071dfffff entry_point = 0x0 region_type = private name = "private_0x0000005071d00000" filename = "" Region: id = 2632 start_va = 0x5071e00000 end_va = 0x5071f87fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000005071e00000" filename = "" Region: id = 2633 start_va = 0x5071f90000 end_va = 0x5072110fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000005071f90000" filename = "" Region: id = 2634 start_va = 0x5072220000 end_va = 0x507231ffff entry_point = 0x0 region_type = private name = "private_0x0000005072220000" filename = "" Region: id = 2635 start_va = 0x7df5ff220000 end_va = 0x7ff5ff21ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007df5ff220000" filename = "" Region: id = 2636 start_va = 0x7ff67355c000 end_va = 0x7ff67355dfff entry_point = 0x0 region_type = private name = "private_0x00007ff67355c000" filename = "" Region: id = 2637 start_va = 0x7ff673560000 end_va = 0x7ff67365ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007ff673560000" filename = "" Region: id = 2638 start_va = 0x7ff673660000 end_va = 0x7ff673682fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007ff673660000" filename = "" Region: id = 2639 start_va = 0x7ff673684000 end_va = 0x7ff673685fff entry_point = 0x0 region_type = private name = "private_0x00007ff673684000" filename = "" Region: id = 2640 start_va = 0x7ff673686000 end_va = 0x7ff673687fff entry_point = 0x0 region_type = private name = "private_0x00007ff673686000" filename = "" Region: id = 2641 start_va = 0x7ff673688000 end_va = 0x7ff673689fff entry_point = 0x0 region_type = private name = "private_0x00007ff673688000" filename = "" Region: id = 2642 start_va = 0x7ff67368c000 end_va = 0x7ff67368dfff entry_point = 0x0 region_type = private name = "private_0x00007ff67368c000" filename = "" Region: id = 2643 start_va = 0x7ff67368e000 end_va = 0x7ff67368efff entry_point = 0x0 region_type = private name = "private_0x00007ff67368e000" filename = "" Region: id = 2644 start_va = 0x7ff673b40000 end_va = 0x7ff673b4cfff entry_point = 0x7ff673b40000 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 2645 start_va = 0x7ff8e6440000 end_va = 0x7ff8e646ffff entry_point = 0x7ff8e6440000 region_type = mapped_file name = "rtworkq.dll" filename = "\\Windows\\System32\\RTWorkQ.dll" (normalized: "c:\\windows\\system32\\rtworkq.dll") Region: id = 2646 start_va = 0x7ff8e6470000 end_va = 0x7ff8e657bfff entry_point = 0x7ff8e6470000 region_type = mapped_file name = "mfplat.dll" filename = "\\Windows\\System32\\mfplat.dll" (normalized: "c:\\windows\\system32\\mfplat.dll") Region: id = 2647 start_va = 0x7ff8e6580000 end_va = 0x7ff8e65eafff entry_point = 0x7ff8e6580000 region_type = mapped_file name = "nuivoicewbsadapters.dll" filename = "\\Windows\\System32\\WinBioPlugIns\\NUIVoiceWBSAdapters.dll" (normalized: "c:\\windows\\system32\\winbioplugins\\nuivoicewbsadapters.dll") Region: id = 2648 start_va = 0x7ff8e65f0000 end_va = 0x7ff8e65fafff entry_point = 0x7ff8e65f0000 region_type = mapped_file name = "winbiostorageadapter.dll" filename = "\\Windows\\System32\\WinBioPlugIns\\winbiostorageadapter.dll" (normalized: "c:\\windows\\system32\\winbioplugins\\winbiostorageadapter.dll") Region: id = 2649 start_va = 0x7ff8e6600000 end_va = 0x7ff8e6635fff entry_point = 0x7ff8e6600000 region_type = mapped_file name = "facerecognitionengineadapter.dll" filename = "\\Windows\\System32\\WinBioPlugIns\\FaceRecognitionEngineAdapter.dll" (normalized: "c:\\windows\\system32\\winbioplugins\\facerecognitionengineadapter.dll") Region: id = 2650 start_va = 0x7ff8e6640000 end_va = 0x7ff8e6b84fff entry_point = 0x7ff8e6640000 region_type = mapped_file name = "d2d1.dll" filename = "\\Windows\\System32\\d2d1.dll" (normalized: "c:\\windows\\system32\\d2d1.dll") Region: id = 2651 start_va = 0x7ff8e6b90000 end_va = 0x7ff8e6bc0fff entry_point = 0x7ff8e6b90000 region_type = mapped_file name = "facerecognitionsensoradapter.dll" filename = "\\Windows\\System32\\WinBioPlugIns\\FaceRecognitionSensorAdapter.dll" (normalized: "c:\\windows\\system32\\winbioplugins\\facerecognitionsensoradapter.dll") Region: id = 2652 start_va = 0x7ff8e6c20000 end_va = 0x7ff8e6c27fff entry_point = 0x7ff8e6c20000 region_type = mapped_file name = "winbioext.dll" filename = "\\Windows\\System32\\winbioext.dll" (normalized: "c:\\windows\\system32\\winbioext.dll") Region: id = 2653 start_va = 0x7ff8e6c30000 end_va = 0x7ff8e6d21fff entry_point = 0x7ff8e6c30000 region_type = mapped_file name = "ucrtbase.dll" filename = "\\Windows\\System32\\ucrtbase.dll" (normalized: "c:\\windows\\system32\\ucrtbase.dll") Region: id = 2654 start_va = 0x7ff8e6d30000 end_va = 0x7ff8e6dcafff entry_point = 0x7ff8e6d30000 region_type = mapped_file name = "msvcp_win.dll" filename = "\\Windows\\System32\\msvcp_win.dll" (normalized: "c:\\windows\\system32\\msvcp_win.dll") Region: id = 2655 start_va = 0x7ff8e6dd0000 end_va = 0x7ff8e6e69fff entry_point = 0x7ff8e6dd0000 region_type = mapped_file name = "wbiosrvc.dll" filename = "\\Windows\\System32\\wbiosrvc.dll" (normalized: "c:\\windows\\system32\\wbiosrvc.dll") Region: id = 2656 start_va = 0x7ff8e75b0000 end_va = 0x7ff8e75bafff entry_point = 0x7ff8e75b0000 region_type = mapped_file name = "avrt.dll" filename = "\\Windows\\System32\\avrt.dll" (normalized: "c:\\windows\\system32\\avrt.dll") Region: id = 2657 start_va = 0x7ff8e9720000 end_va = 0x7ff8e9746fff entry_point = 0x7ff8e9720000 region_type = mapped_file name = "devobj.dll" filename = "\\Windows\\System32\\devobj.dll" (normalized: "c:\\windows\\system32\\devobj.dll") Region: id = 2658 start_va = 0x7ff8ea1d0000 end_va = 0x7ff8ea1d9fff entry_point = 0x7ff8ea1d0000 region_type = mapped_file name = "dpapi.dll" filename = "\\Windows\\System32\\dpapi.dll" (normalized: "c:\\windows\\system32\\dpapi.dll") Region: id = 2659 start_va = 0x7ff8ea790000 end_va = 0x7ff8ea79afff entry_point = 0x7ff8ea790000 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\System32\\cryptbase.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll") Region: id = 2660 start_va = 0x7ff8eabd0000 end_va = 0x7ff8eabf7fff entry_point = 0x7ff8eabd0000 region_type = mapped_file name = "bcrypt.dll" filename = "\\Windows\\System32\\bcrypt.dll" (normalized: "c:\\windows\\system32\\bcrypt.dll") Region: id = 2661 start_va = 0x7ff8eac00000 end_va = 0x7ff8eac6afff entry_point = 0x7ff8eac00000 region_type = mapped_file name = "bcryptprimitives.dll" filename = "\\Windows\\System32\\bcryptprimitives.dll" (normalized: "c:\\windows\\system32\\bcryptprimitives.dll") Region: id = 2662 start_va = 0x7ff8eadb0000 end_va = 0x7ff8eadc0fff entry_point = 0x7ff8eadb0000 region_type = mapped_file name = "msasn1.dll" filename = "\\Windows\\System32\\msasn1.dll" (normalized: "c:\\windows\\system32\\msasn1.dll") Region: id = 2663 start_va = 0x7ff8eae20000 end_va = 0x7ff8eae2efff entry_point = 0x7ff8eae20000 region_type = mapped_file name = "kernel.appcore.dll" filename = "\\Windows\\System32\\kernel.appcore.dll" (normalized: "c:\\windows\\system32\\kernel.appcore.dll") Region: id = 2664 start_va = 0x7ff8eaf60000 end_va = 0x7ff8eafa3fff entry_point = 0x7ff8eaf60000 region_type = mapped_file name = "cfgmgr32.dll" filename = "\\Windows\\System32\\cfgmgr32.dll" (normalized: "c:\\windows\\system32\\cfgmgr32.dll") Region: id = 2665 start_va = 0x7ff8eafb0000 end_va = 0x7ff8eb170fff entry_point = 0x7ff8eafb0000 region_type = mapped_file name = "crypt32.dll" filename = "\\Windows\\System32\\crypt32.dll" (normalized: "c:\\windows\\system32\\crypt32.dll") Region: id = 2666 start_va = 0x7ff8eb7b0000 end_va = 0x7ff8eb862fff entry_point = 0x7ff8eb7b0000 region_type = mapped_file name = "shcore.dll" filename = "\\Windows\\System32\\SHCore.dll" (normalized: "c:\\windows\\system32\\shcore.dll") Region: id = 2667 start_va = 0x7ff8eb870000 end_va = 0x7ff8eba4cfff entry_point = 0x7ff8eb870000 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 2668 start_va = 0x7ff8ebdc0000 end_va = 0x7ff8ebf0dfff entry_point = 0x7ff8ebdc0000 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 2669 start_va = 0x7ff8ec240000 end_va = 0x7ff8ec29afff entry_point = 0x7ff8ec240000 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 2670 start_va = 0x7ff8ec450000 end_va = 0x7ff8ec575fff entry_point = 0x7ff8ec450000 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 2671 start_va = 0x7ff8edbc0000 end_va = 0x7ff8edd44fff entry_point = 0x7ff8edbc0000 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 2672 start_va = 0x7ff8edd60000 end_va = 0x7ff8edfdbfff entry_point = 0x7ff8edd60000 region_type = mapped_file name = "combase.dll" filename = "\\Windows\\System32\\combase.dll" (normalized: "c:\\windows\\system32\\combase.dll") Region: id = 2673 start_va = 0x7ff8ee0b0000 end_va = 0x7ff8ee14cfff entry_point = 0x7ff8ee0b0000 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 2674 start_va = 0x7ff8ee190000 end_va = 0x7ff8ee235fff entry_point = 0x7ff8ee190000 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 2675 start_va = 0x7ff8ee2d0000 end_va = 0x7ff8ee37cfff entry_point = 0x7ff8ee2d0000 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 2676 start_va = 0x7ff8ee380000 end_va = 0x7ff8ee541fff entry_point = 0x7ff8ee380000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Thread: id = 385 os_tid = 0xbfc Thread: id = 386 os_tid = 0x440 Thread: id = 387 os_tid = 0x438 Thread: id = 388 os_tid = 0x434 Thread: id = 389 os_tid = 0x42c Thread: id = 462 os_tid = 0x4e0 Thread: id = 463 os_tid = 0x56c Process: id = "20" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x55f7d000" os_pid = "0x444" os_integrity_level = "0x4000" os_privileges = "0x60a00000" monitor_reason = "child_process" parent_id = "10" os_parent_pid = "0x1e8" cmd_line = "C:\\Windows\\system32\\svchost.exe -k LocalServiceNoNetwork" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\Local Service" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\BFE" [0xe], "NT SERVICE\\CoreMessagingRegistrar" [0xa], "NT SERVICE\\DPS" [0xa], "NT SERVICE\\MpsSvc" [0xa], "NT SERVICE\\NcdAutoSetup" [0xa], "NT SERVICE\\pla" [0xa], "NT SERVICE\\WwanSvc" [0xa], "NT AUTHORITY\\Logon Session 00000000:00010d4f" [0xc000000f], "LOCAL" [0x7], "NT AUTHORITY\\WRITE RESTRICTED" [0x7] Region: id = 1899 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 1900 start_va = 0xb175140000 end_va = 0xb17514ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000b175140000" filename = "" Region: id = 1901 start_va = 0xb175150000 end_va = 0xb175150fff entry_point = 0xb175150000 region_type = mapped_file name = "svchost.exe.mui" filename = "\\Windows\\System32\\en-US\\svchost.exe.mui" (normalized: "c:\\windows\\system32\\en-us\\svchost.exe.mui") Region: id = 1902 start_va = 0xb175160000 end_va = 0xb175173fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000b175160000" filename = "" Region: id = 1903 start_va = 0xb175180000 end_va = 0xb1751fffff entry_point = 0x0 region_type = private name = "private_0x000000b175180000" filename = "" Region: id = 1904 start_va = 0xb175200000 end_va = 0xb175203fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000b175200000" filename = "" Region: id = 1905 start_va = 0xb175210000 end_va = 0xb175210fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000b175210000" filename = "" Region: id = 1906 start_va = 0xb175220000 end_va = 0xb175221fff entry_point = 0x0 region_type = private name = "private_0x000000b175220000" filename = "" Region: id = 1907 start_va = 0xb175230000 end_va = 0xb175230fff entry_point = 0x0 region_type = private name = "private_0x000000b175230000" filename = "" Region: id = 1908 start_va = 0xb175240000 end_va = 0xb175240fff entry_point = 0x0 region_type = private name = "private_0x000000b175240000" filename = "" Region: id = 1909 start_va = 0xb175250000 end_va = 0xb175256fff entry_point = 0xb175250000 region_type = mapped_file name = "bfe.dll.mui" filename = "\\Windows\\System32\\en-US\\bfe.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\bfe.dll.mui") Region: id = 1910 start_va = 0xb175260000 end_va = 0xb175266fff entry_point = 0x0 region_type = private name = "private_0x000000b175260000" filename = "" Region: id = 1911 start_va = 0xb175270000 end_va = 0xb17527ffff entry_point = 0x0 region_type = private name = "private_0x000000b175270000" filename = "" Region: id = 1912 start_va = 0xb175280000 end_va = 0xb175286fff entry_point = 0x0 region_type = private name = "private_0x000000b175280000" filename = "" Region: id = 1913 start_va = 0xb175290000 end_va = 0xb1752b3fff entry_point = 0xb175290000 region_type = mapped_file name = "firewallapi.dll.mui" filename = "\\Windows\\System32\\en-US\\FirewallAPI.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\firewallapi.dll.mui") Region: id = 1914 start_va = 0xb1752c0000 end_va = 0xb1752c0fff entry_point = 0x0 region_type = private name = "private_0x000000b1752c0000" filename = "" Region: id = 1915 start_va = 0xb1752d0000 end_va = 0xb1752d0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000b1752d0000" filename = "" Region: id = 1916 start_va = 0xb1752e0000 end_va = 0xb1752e0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000b1752e0000" filename = "" Region: id = 1917 start_va = 0xb1752f0000 end_va = 0xb1752f7fff entry_point = 0x0 region_type = private name = "private_0x000000b1752f0000" filename = "" Region: id = 1918 start_va = 0xb175300000 end_va = 0xb1753fffff entry_point = 0x0 region_type = private name = "private_0x000000b175300000" filename = "" Region: id = 1919 start_va = 0xb175400000 end_va = 0xb1754bdfff entry_point = 0xb175400000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 1920 start_va = 0xb1754c0000 end_va = 0xb1754c1fff entry_point = 0x0 region_type = private name = "private_0x000000b1754c0000" filename = "" Region: id = 1921 start_va = 0xb175540000 end_va = 0xb1755fffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000b175540000" filename = "" Region: id = 1922 start_va = 0xb175600000 end_va = 0xb1756fffff entry_point = 0x0 region_type = private name = "private_0x000000b175600000" filename = "" Region: id = 1923 start_va = 0xb175700000 end_va = 0xb175887fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000b175700000" filename = "" Region: id = 1924 start_va = 0xb175890000 end_va = 0xb175a10fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000b175890000" filename = "" Region: id = 1925 start_va = 0xb175a20000 end_va = 0xb175b1ffff entry_point = 0x0 region_type = private name = "private_0x000000b175a20000" filename = "" Region: id = 1926 start_va = 0xb175b20000 end_va = 0xb175b9cfff entry_point = 0xb175b20000 region_type = mapped_file name = "firewallapi.dll" filename = "\\Windows\\System32\\FirewallAPI.dll" (normalized: "c:\\windows\\system32\\firewallapi.dll") Region: id = 1927 start_va = 0xb175ba0000 end_va = 0xb175ba1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000b175ba0000" filename = "" Region: id = 1928 start_va = 0xb175bb0000 end_va = 0xb175bb0fff entry_point = 0x0 region_type = private name = "private_0x000000b175bb0000" filename = "" Region: id = 1929 start_va = 0xb175bc0000 end_va = 0xb175bc6fff entry_point = 0x0 region_type = private name = "private_0x000000b175bc0000" filename = "" Region: id = 1930 start_va = 0xb175c00000 end_va = 0xb175cfffff entry_point = 0x0 region_type = private name = "private_0x000000b175c00000" filename = "" Region: id = 1931 start_va = 0xb175d00000 end_va = 0xb175dfffff entry_point = 0x0 region_type = private name = "private_0x000000b175d00000" filename = "" Region: id = 1932 start_va = 0xb175e00000 end_va = 0xb175efffff entry_point = 0x0 region_type = private name = "private_0x000000b175e00000" filename = "" Region: id = 1933 start_va = 0xb175f00000 end_va = 0xb175ffffff entry_point = 0x0 region_type = private name = "private_0x000000b175f00000" filename = "" Region: id = 1934 start_va = 0xb176000000 end_va = 0xb1760fffff entry_point = 0x0 region_type = private name = "private_0x000000b176000000" filename = "" Region: id = 1935 start_va = 0xb176100000 end_va = 0xb1761fffff entry_point = 0x0 region_type = private name = "private_0x000000b176100000" filename = "" Region: id = 1936 start_va = 0xb176200000 end_va = 0xb1762fffff entry_point = 0x0 region_type = private name = "private_0x000000b176200000" filename = "" Region: id = 1937 start_va = 0xb176300000 end_va = 0xb176373fff entry_point = 0x0 region_type = private name = "private_0x000000b176300000" filename = "" Region: id = 1938 start_va = 0xb176400000 end_va = 0xb1764fffff entry_point = 0x0 region_type = private name = "private_0x000000b176400000" filename = "" Region: id = 1939 start_va = 0xb176500000 end_va = 0xb1765fffff entry_point = 0x0 region_type = private name = "private_0x000000b176500000" filename = "" Region: id = 1940 start_va = 0xb176600000 end_va = 0xb17667ffff entry_point = 0x0 region_type = private name = "private_0x000000b176600000" filename = "" Region: id = 1941 start_va = 0xb176680000 end_va = 0xb17677ffff entry_point = 0x0 region_type = private name = "private_0x000000b176680000" filename = "" Region: id = 1942 start_va = 0xb176780000 end_va = 0xb17687ffff entry_point = 0x0 region_type = private name = "private_0x000000b176780000" filename = "" Region: id = 1943 start_va = 0xb176880000 end_va = 0xb17697ffff entry_point = 0x0 region_type = private name = "private_0x000000b176880000" filename = "" Region: id = 1944 start_va = 0xb176980000 end_va = 0xb176a7ffff entry_point = 0x0 region_type = private name = "private_0x000000b176980000" filename = "" Region: id = 1945 start_va = 0xb176a80000 end_va = 0xb17727ffff entry_point = 0x0 region_type = private name = "private_0x000000b176a80000" filename = "" Region: id = 1946 start_va = 0xb177280000 end_va = 0xb17737ffff entry_point = 0x0 region_type = private name = "private_0x000000b177280000" filename = "" Region: id = 1947 start_va = 0xb177380000 end_va = 0xb17747ffff entry_point = 0x0 region_type = private name = "private_0x000000b177380000" filename = "" Region: id = 1948 start_va = 0xb177500000 end_va = 0xb1775fffff entry_point = 0x0 region_type = private name = "private_0x000000b177500000" filename = "" Region: id = 1949 start_va = 0xb177600000 end_va = 0xb1776fffff entry_point = 0x0 region_type = private name = "private_0x000000b177600000" filename = "" Region: id = 1950 start_va = 0xb177700000 end_va = 0xb1777fffff entry_point = 0x0 region_type = private name = "private_0x000000b177700000" filename = "" Region: id = 1951 start_va = 0xb177800000 end_va = 0xb177b36fff entry_point = 0xb177800000 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 1952 start_va = 0xb177c00000 end_va = 0xb177cfffff entry_point = 0x0 region_type = private name = "private_0x000000b177c00000" filename = "" Region: id = 1953 start_va = 0xb177d00000 end_va = 0xb177dfffff entry_point = 0x0 region_type = private name = "private_0x000000b177d00000" filename = "" Region: id = 1954 start_va = 0xb177e00000 end_va = 0xb177efffff entry_point = 0x0 region_type = private name = "private_0x000000b177e00000" filename = "" Region: id = 1955 start_va = 0xb177f00000 end_va = 0xb177ffffff entry_point = 0x0 region_type = private name = "private_0x000000b177f00000" filename = "" Region: id = 1956 start_va = 0xb178000000 end_va = 0xb1780fffff entry_point = 0x0 region_type = private name = "private_0x000000b178000000" filename = "" Region: id = 1957 start_va = 0xb178100000 end_va = 0xb1781fffff entry_point = 0x0 region_type = private name = "private_0x000000b178100000" filename = "" Region: id = 1958 start_va = 0xb179200000 end_va = 0xb1792fffff entry_point = 0x0 region_type = private name = "private_0x000000b179200000" filename = "" Region: id = 1959 start_va = 0xb179420000 end_va = 0xb17951ffff entry_point = 0x0 region_type = private name = "private_0x000000b179420000" filename = "" Region: id = 1960 start_va = 0xb179520000 end_va = 0xb17961ffff entry_point = 0x0 region_type = private name = "private_0x000000b179520000" filename = "" Region: id = 1961 start_va = 0xb179620000 end_va = 0xb17971ffff entry_point = 0x0 region_type = private name = "private_0x000000b179620000" filename = "" Region: id = 1962 start_va = 0xb179720000 end_va = 0xb17981ffff entry_point = 0x0 region_type = private name = "private_0x000000b179720000" filename = "" Region: id = 1963 start_va = 0xb179820000 end_va = 0xb17991ffff entry_point = 0x0 region_type = private name = "private_0x000000b179820000" filename = "" Region: id = 1964 start_va = 0xb179920000 end_va = 0xb179926fff entry_point = 0x0 region_type = private name = "private_0x000000b179920000" filename = "" Region: id = 1965 start_va = 0xb1799a0000 end_va = 0xb1799a6fff entry_point = 0x0 region_type = private name = "private_0x000000b1799a0000" filename = "" Region: id = 1966 start_va = 0xb179a00000 end_va = 0xb179afffff entry_point = 0x0 region_type = private name = "private_0x000000b179a00000" filename = "" Region: id = 1967 start_va = 0xb179b00000 end_va = 0xb179bfffff entry_point = 0x0 region_type = private name = "private_0x000000b179b00000" filename = "" Region: id = 1968 start_va = 0xb179c00000 end_va = 0xb179cfffff entry_point = 0x0 region_type = private name = "private_0x000000b179c00000" filename = "" Region: id = 1969 start_va = 0xb179d00000 end_va = 0xb179f00fff entry_point = 0x0 region_type = private name = "private_0x000000b179d00000" filename = "" Region: id = 1970 start_va = 0xb179f10000 end_va = 0xb17a00ffff entry_point = 0x0 region_type = private name = "private_0x000000b179f10000" filename = "" Region: id = 1971 start_va = 0xb17a100000 end_va = 0xb17a1fffff entry_point = 0x0 region_type = private name = "private_0x000000b17a100000" filename = "" Region: id = 1972 start_va = 0xb17a200000 end_va = 0xb17a2fffff entry_point = 0x0 region_type = private name = "private_0x000000b17a200000" filename = "" Region: id = 1973 start_va = 0xb17a300000 end_va = 0xb17a400fff entry_point = 0x0 region_type = private name = "private_0x000000b17a300000" filename = "" Region: id = 1974 start_va = 0xb17a410000 end_va = 0xb17a510fff entry_point = 0x0 region_type = private name = "private_0x000000b17a410000" filename = "" Region: id = 1975 start_va = 0xb17a600000 end_va = 0xb17a6fffff entry_point = 0x0 region_type = private name = "private_0x000000b17a600000" filename = "" Region: id = 1976 start_va = 0xb17a700000 end_va = 0xb17a7fffff entry_point = 0x0 region_type = private name = "private_0x000000b17a700000" filename = "" Region: id = 1977 start_va = 0xb17a800000 end_va = 0xb17a8fffff entry_point = 0x0 region_type = private name = "private_0x000000b17a800000" filename = "" Region: id = 1978 start_va = 0x7df5ff620000 end_va = 0x7ff5ff61ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007df5ff620000" filename = "" Region: id = 1979 start_va = 0x7ff67378e000 end_va = 0x7ff67378ffff entry_point = 0x0 region_type = private name = "private_0x00007ff67378e000" filename = "" Region: id = 1980 start_va = 0x7ff673790000 end_va = 0x7ff673791fff entry_point = 0x0 region_type = private name = "private_0x00007ff673790000" filename = "" Region: id = 1981 start_va = 0x7ff673792000 end_va = 0x7ff673793fff entry_point = 0x0 region_type = private name = "private_0x00007ff673792000" filename = "" Region: id = 1982 start_va = 0x7ff673794000 end_va = 0x7ff673795fff entry_point = 0x0 region_type = private name = "private_0x00007ff673794000" filename = "" Region: id = 1983 start_va = 0x7ff673796000 end_va = 0x7ff673797fff entry_point = 0x0 region_type = private name = "private_0x00007ff673796000" filename = "" Region: id = 1984 start_va = 0x7ff67379a000 end_va = 0x7ff67379bfff entry_point = 0x0 region_type = private name = "private_0x00007ff67379a000" filename = "" Region: id = 1985 start_va = 0x7ff67379c000 end_va = 0x7ff67379dfff entry_point = 0x0 region_type = private name = "private_0x00007ff67379c000" filename = "" Region: id = 1986 start_va = 0x7ff67379e000 end_va = 0x7ff67379ffff entry_point = 0x0 region_type = private name = "private_0x00007ff67379e000" filename = "" Region: id = 1987 start_va = 0x7ff6737a0000 end_va = 0x7ff6737a1fff entry_point = 0x0 region_type = private name = "private_0x00007ff6737a0000" filename = "" Region: id = 1988 start_va = 0x7ff6737a2000 end_va = 0x7ff6737a3fff entry_point = 0x0 region_type = private name = "private_0x00007ff6737a2000" filename = "" Region: id = 1989 start_va = 0x7ff6737a4000 end_va = 0x7ff6737a5fff entry_point = 0x0 region_type = private name = "private_0x00007ff6737a4000" filename = "" Region: id = 1990 start_va = 0x7ff6737a6000 end_va = 0x7ff6737a7fff entry_point = 0x0 region_type = private name = "private_0x00007ff6737a6000" filename = "" Region: id = 1991 start_va = 0x7ff6737a8000 end_va = 0x7ff6737a9fff entry_point = 0x0 region_type = private name = "private_0x00007ff6737a8000" filename = "" Region: id = 1992 start_va = 0x7ff6737aa000 end_va = 0x7ff6737abfff entry_point = 0x0 region_type = private name = "private_0x00007ff6737aa000" filename = "" Region: id = 1993 start_va = 0x7ff6737ac000 end_va = 0x7ff6737adfff entry_point = 0x0 region_type = private name = "private_0x00007ff6737ac000" filename = "" Region: id = 1994 start_va = 0x7ff6737ae000 end_va = 0x7ff6737affff entry_point = 0x0 region_type = private name = "private_0x00007ff6737ae000" filename = "" Region: id = 1995 start_va = 0x7ff6737b0000 end_va = 0x7ff6737b1fff entry_point = 0x0 region_type = private name = "private_0x00007ff6737b0000" filename = "" Region: id = 1996 start_va = 0x7ff6737b2000 end_va = 0x7ff6737b3fff entry_point = 0x0 region_type = private name = "private_0x00007ff6737b2000" filename = "" Region: id = 1997 start_va = 0x7ff6737b4000 end_va = 0x7ff6737b5fff entry_point = 0x0 region_type = private name = "private_0x00007ff6737b4000" filename = "" Region: id = 1998 start_va = 0x7ff6737b8000 end_va = 0x7ff6737b9fff entry_point = 0x0 region_type = private name = "private_0x00007ff6737b8000" filename = "" Region: id = 1999 start_va = 0x7ff6737ba000 end_va = 0x7ff6737bbfff entry_point = 0x0 region_type = private name = "private_0x00007ff6737ba000" filename = "" Region: id = 2000 start_va = 0x7ff6737bc000 end_va = 0x7ff6737bdfff entry_point = 0x0 region_type = private name = "private_0x00007ff6737bc000" filename = "" Region: id = 2001 start_va = 0x7ff6737be000 end_va = 0x7ff6737bffff entry_point = 0x0 region_type = private name = "private_0x00007ff6737be000" filename = "" Region: id = 2002 start_va = 0x7ff6737c0000 end_va = 0x7ff6738bffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007ff6737c0000" filename = "" Region: id = 2003 start_va = 0x7ff6738c0000 end_va = 0x7ff6738e2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007ff6738c0000" filename = "" Region: id = 2004 start_va = 0x7ff6738e4000 end_va = 0x7ff6738e5fff entry_point = 0x0 region_type = private name = "private_0x00007ff6738e4000" filename = "" Region: id = 2005 start_va = 0x7ff6738e6000 end_va = 0x7ff6738e7fff entry_point = 0x0 region_type = private name = "private_0x00007ff6738e6000" filename = "" Region: id = 2006 start_va = 0x7ff6738e8000 end_va = 0x7ff6738e8fff entry_point = 0x0 region_type = private name = "private_0x00007ff6738e8000" filename = "" Region: id = 2007 start_va = 0x7ff6738ea000 end_va = 0x7ff6738ebfff entry_point = 0x0 region_type = private name = "private_0x00007ff6738ea000" filename = "" Region: id = 2008 start_va = 0x7ff6738ee000 end_va = 0x7ff6738effff entry_point = 0x0 region_type = private name = "private_0x00007ff6738ee000" filename = "" Region: id = 2009 start_va = 0x7ff673b40000 end_va = 0x7ff673b4cfff entry_point = 0x7ff673b40000 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 2010 start_va = 0x7ff8df640000 end_va = 0x7ff8dfaa9fff entry_point = 0x7ff8df640000 region_type = mapped_file name = "actxprxy.dll" filename = "\\Windows\\System32\\actxprxy.dll" (normalized: "c:\\windows\\system32\\actxprxy.dll") Region: id = 2011 start_va = 0x7ff8e0270000 end_va = 0x7ff8e028cfff entry_point = 0x7ff8e0270000 region_type = mapped_file name = "radardt.dll" filename = "\\Windows\\System32\\radardt.dll" (normalized: "c:\\windows\\system32\\radardt.dll") Region: id = 2012 start_va = 0x7ff8e03b0000 end_va = 0x7ff8e03c2fff entry_point = 0x7ff8e03b0000 region_type = mapped_file name = "srumapi.dll" filename = "\\Windows\\System32\\srumapi.dll" (normalized: "c:\\windows\\system32\\srumapi.dll") Region: id = 2013 start_va = 0x7ff8e03d0000 end_va = 0x7ff8e03e2fff entry_point = 0x7ff8e03d0000 region_type = mapped_file name = "energyprov.dll" filename = "\\Windows\\System32\\energyprov.dll" (normalized: "c:\\windows\\system32\\energyprov.dll") Region: id = 2014 start_va = 0x7ff8e0950000 end_va = 0x7ff8e095cfff entry_point = 0x7ff8e0950000 region_type = mapped_file name = "ncuprov.dll" filename = "\\Windows\\System32\\ncuprov.dll" (normalized: "c:\\windows\\system32\\ncuprov.dll") Region: id = 2015 start_va = 0x7ff8e0960000 end_va = 0x7ff8e096dfff entry_point = 0x7ff8e0960000 region_type = mapped_file name = "wpnsruprov.dll" filename = "\\Windows\\System32\\wpnsruprov.dll" (normalized: "c:\\windows\\system32\\wpnsruprov.dll") Region: id = 2016 start_va = 0x7ff8e0970000 end_va = 0x7ff8e0986fff entry_point = 0x7ff8e0970000 region_type = mapped_file name = "appsruprov.dll" filename = "\\Windows\\System32\\appsruprov.dll" (normalized: "c:\\windows\\system32\\appsruprov.dll") Region: id = 2017 start_va = 0x7ff8e0990000 end_va = 0x7ff8e09aafff entry_point = 0x7ff8e0990000 region_type = mapped_file name = "eeprov.dll" filename = "\\Windows\\System32\\eeprov.dll" (normalized: "c:\\windows\\system32\\eeprov.dll") Region: id = 2018 start_va = 0x7ff8e09b0000 end_va = 0x7ff8e09c4fff entry_point = 0x7ff8e09b0000 region_type = mapped_file name = "nduprov.dll" filename = "\\Windows\\System32\\nduprov.dll" (normalized: "c:\\windows\\system32\\nduprov.dll") Region: id = 2019 start_va = 0x7ff8e0f70000 end_va = 0x7ff8e0f7dfff entry_point = 0x7ff8e0f70000 region_type = mapped_file name = "npmproxy.dll" filename = "\\Windows\\System32\\npmproxy.dll" (normalized: "c:\\windows\\system32\\npmproxy.dll") Region: id = 2020 start_va = 0x7ff8e15f0000 end_va = 0x7ff8e164efff entry_point = 0x7ff8e15f0000 region_type = mapped_file name = "wlanapi.dll" filename = "\\Windows\\System32\\wlanapi.dll" (normalized: "c:\\windows\\system32\\wlanapi.dll") Region: id = 2021 start_va = 0x7ff8e1940000 end_va = 0x7ff8e1c21fff entry_point = 0x7ff8e1940000 region_type = mapped_file name = "esent.dll" filename = "\\Windows\\System32\\esent.dll" (normalized: "c:\\windows\\system32\\esent.dll") Region: id = 2022 start_va = 0x7ff8e1c30000 end_va = 0x7ff8e1c67fff entry_point = 0x7ff8e1c30000 region_type = mapped_file name = "srumsvc.dll" filename = "\\Windows\\System32\\srumsvc.dll" (normalized: "c:\\windows\\system32\\srumsvc.dll") Region: id = 2023 start_va = 0x7ff8e25f0000 end_va = 0x7ff8e2755fff entry_point = 0x7ff8e25f0000 region_type = mapped_file name = "diagperf.dll" filename = "\\Windows\\System32\\diagperf.dll" (normalized: "c:\\windows\\system32\\diagperf.dll") Region: id = 2024 start_va = 0x7ff8e2760000 end_va = 0x7ff8e279efff entry_point = 0x7ff8e2760000 region_type = mapped_file name = "netprofm.dll" filename = "\\Windows\\System32\\netprofm.dll" (normalized: "c:\\windows\\system32\\netprofm.dll") Region: id = 2025 start_va = 0x7ff8e2eb0000 end_va = 0x7ff8e2eb8fff entry_point = 0x7ff8e2eb0000 region_type = mapped_file name = "pnpts.dll" filename = "\\Windows\\System32\\pnpts.dll" (normalized: "c:\\windows\\system32\\pnpts.dll") Region: id = 2026 start_va = 0x7ff8e3a50000 end_va = 0x7ff8e3a59fff entry_point = 0x7ff8e3a50000 region_type = mapped_file name = "version.dll" filename = "\\Windows\\System32\\version.dll" (normalized: "c:\\windows\\system32\\version.dll") Region: id = 2027 start_va = 0x7ff8e3a60000 end_va = 0x7ff8e3a6bfff entry_point = 0x7ff8e3a60000 region_type = mapped_file name = "wfapigp.dll" filename = "\\Windows\\System32\\wfapigp.dll" (normalized: "c:\\windows\\system32\\wfapigp.dll") Region: id = 2028 start_va = 0x7ff8e3c30000 end_va = 0x7ff8e3fa5fff entry_point = 0x7ff8e3c30000 region_type = mapped_file name = "iertutil.dll" filename = "\\Windows\\System32\\iertutil.dll" (normalized: "c:\\windows\\system32\\iertutil.dll") Region: id = 2029 start_va = 0x7ff8e5050000 end_va = 0x7ff8e515efff entry_point = 0x7ff8e5050000 region_type = mapped_file name = "mrmcorer.dll" filename = "\\Windows\\System32\\MrmCoreR.dll" (normalized: "c:\\windows\\system32\\mrmcorer.dll") Region: id = 2030 start_va = 0x7ff8e5520000 end_va = 0x7ff8e553cfff entry_point = 0x7ff8e5520000 region_type = mapped_file name = "wdi.dll" filename = "\\Windows\\System32\\wdi.dll" (normalized: "c:\\windows\\system32\\wdi.dll") Region: id = 2031 start_va = 0x7ff8e5d70000 end_va = 0x7ff8e5d77fff entry_point = 0x7ff8e5d70000 region_type = mapped_file name = "wship6.dll" filename = "\\Windows\\System32\\wship6.dll" (normalized: "c:\\windows\\system32\\wship6.dll") Region: id = 2032 start_va = 0x7ff8e5d80000 end_va = 0x7ff8e5d87fff entry_point = 0x7ff8e5d80000 region_type = mapped_file name = "wshtcpip.dll" filename = "\\Windows\\System32\\WSHTCPIP.DLL" (normalized: "c:\\windows\\system32\\wshtcpip.dll") Region: id = 2033 start_va = 0x7ff8e5d90000 end_va = 0x7ff8e5d99fff entry_point = 0x7ff8e5d90000 region_type = mapped_file name = "wshqos.dll" filename = "\\Windows\\System32\\wshqos.dll" (normalized: "c:\\windows\\system32\\wshqos.dll") Region: id = 2034 start_va = 0x7ff8e5da0000 end_va = 0x7ff8e5dcefff entry_point = 0x7ff8e5da0000 region_type = mapped_file name = "dps.dll" filename = "\\Windows\\System32\\dps.dll" (normalized: "c:\\windows\\system32\\dps.dll") Region: id = 2035 start_va = 0x7ff8e6090000 end_va = 0x7ff8e6099fff entry_point = 0x7ff8e6090000 region_type = mapped_file name = "adhapi.dll" filename = "\\Windows\\System32\\adhapi.dll" (normalized: "c:\\windows\\system32\\adhapi.dll") Region: id = 2036 start_va = 0x7ff8e60a0000 end_va = 0x7ff8e6131fff entry_point = 0x7ff8e60a0000 region_type = mapped_file name = "msvcp110_win.dll" filename = "\\Windows\\System32\\msvcp110_win.dll" (normalized: "c:\\windows\\system32\\msvcp110_win.dll") Region: id = 2037 start_va = 0x7ff8e6140000 end_va = 0x7ff8e6178fff entry_point = 0x7ff8e6140000 region_type = mapped_file name = "policymanager.dll" filename = "\\Windows\\System32\\policymanager.dll" (normalized: "c:\\windows\\system32\\policymanager.dll") Region: id = 2038 start_va = 0x7ff8e6180000 end_va = 0x7ff8e6188fff entry_point = 0x7ff8e6180000 region_type = mapped_file name = "httpprxc.dll" filename = "\\Windows\\System32\\httpprxc.dll" (normalized: "c:\\windows\\system32\\httpprxc.dll") Region: id = 2039 start_va = 0x7ff8e6210000 end_va = 0x7ff8e6244fff entry_point = 0x7ff8e6210000 region_type = mapped_file name = "fwpolicyiomgr.dll" filename = "\\Windows\\System32\\fwpolicyiomgr.dll" (normalized: "c:\\windows\\system32\\fwpolicyiomgr.dll") Region: id = 2040 start_va = 0x7ff8e6250000 end_va = 0x7ff8e6329fff entry_point = 0x7ff8e6250000 region_type = mapped_file name = "mpssvc.dll" filename = "\\Windows\\System32\\MPSSVC.dll" (normalized: "c:\\windows\\system32\\mpssvc.dll") Region: id = 2041 start_va = 0x7ff8e6330000 end_va = 0x7ff8e6365fff entry_point = 0x7ff8e6330000 region_type = mapped_file name = "xmllite.dll" filename = "\\Windows\\System32\\xmllite.dll" (normalized: "c:\\windows\\system32\\xmllite.dll") Region: id = 2042 start_va = 0x7ff8e6370000 end_va = 0x7ff8e6439fff entry_point = 0x7ff8e6370000 region_type = mapped_file name = "bfe.dll" filename = "\\Windows\\System32\\BFE.DLL" (normalized: "c:\\windows\\system32\\bfe.dll") Region: id = 2043 start_va = 0x7ff8e6c30000 end_va = 0x7ff8e6d21fff entry_point = 0x7ff8e6c30000 region_type = mapped_file name = "ucrtbase.dll" filename = "\\Windows\\System32\\ucrtbase.dll" (normalized: "c:\\windows\\system32\\ucrtbase.dll") Region: id = 2044 start_va = 0x7ff8e6d30000 end_va = 0x7ff8e6dcafff entry_point = 0x7ff8e6d30000 region_type = mapped_file name = "msvcp_win.dll" filename = "\\Windows\\System32\\msvcp_win.dll" (normalized: "c:\\windows\\system32\\msvcp_win.dll") Region: id = 2045 start_va = 0x7ff8e7160000 end_va = 0x7ff8e71c7fff entry_point = 0x7ff8e7160000 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 2046 start_va = 0x7ff8e7280000 end_va = 0x7ff8e7299fff entry_point = 0x7ff8e7280000 region_type = mapped_file name = "dhcpcsvc.dll" filename = "\\Windows\\System32\\dhcpcsvc.dll" (normalized: "c:\\windows\\system32\\dhcpcsvc.dll") Region: id = 2047 start_va = 0x7ff8e72a0000 end_va = 0x7ff8e72b5fff entry_point = 0x7ff8e72a0000 region_type = mapped_file name = "dhcpcsvc6.dll" filename = "\\Windows\\System32\\dhcpcsvc6.dll" (normalized: "c:\\windows\\system32\\dhcpcsvc6.dll") Region: id = 2048 start_va = 0x7ff8e7cd0000 end_va = 0x7ff8e7ce5fff entry_point = 0x7ff8e7cd0000 region_type = mapped_file name = "wkscli.dll" filename = "\\Windows\\System32\\wkscli.dll" (normalized: "c:\\windows\\system32\\wkscli.dll") Region: id = 2049 start_va = 0x7ff8e7f80000 end_va = 0x7ff8e803ffff entry_point = 0x7ff8e7f80000 region_type = mapped_file name = "taskschd.dll" filename = "\\Windows\\System32\\taskschd.dll" (normalized: "c:\\windows\\system32\\taskschd.dll") Region: id = 2050 start_va = 0x7ff8e81f0000 end_va = 0x7ff8e8254fff entry_point = 0x7ff8e81f0000 region_type = mapped_file name = "wevtapi.dll" filename = "\\Windows\\System32\\wevtapi.dll" (normalized: "c:\\windows\\system32\\wevtapi.dll") Region: id = 2051 start_va = 0x7ff8e8460000 end_va = 0x7ff8e846afff entry_point = 0x7ff8e8460000 region_type = mapped_file name = "winnsi.dll" filename = "\\Windows\\System32\\winnsi.dll" (normalized: "c:\\windows\\system32\\winnsi.dll") Region: id = 2052 start_va = 0x7ff8e8480000 end_va = 0x7ff8e84b7fff entry_point = 0x7ff8e8480000 region_type = mapped_file name = "iphlpapi.dll" filename = "\\Windows\\System32\\IPHLPAPI.DLL" (normalized: "c:\\windows\\system32\\iphlpapi.dll") Region: id = 2053 start_va = 0x7ff8e8ad0000 end_va = 0x7ff8e8ae2fff entry_point = 0x7ff8e8ad0000 region_type = mapped_file name = "wtsapi32.dll" filename = "\\Windows\\System32\\wtsapi32.dll" (normalized: "c:\\windows\\system32\\wtsapi32.dll") Region: id = 2054 start_va = 0x7ff8e9060000 end_va = 0x7ff8e9127fff entry_point = 0x7ff8e9060000 region_type = mapped_file name = "coremessaging.dll" filename = "\\Windows\\System32\\CoreMessaging.dll" (normalized: "c:\\windows\\system32\\coremessaging.dll") Region: id = 2055 start_va = 0x7ff8e9720000 end_va = 0x7ff8e9746fff entry_point = 0x7ff8e9720000 region_type = mapped_file name = "devobj.dll" filename = "\\Windows\\System32\\devobj.dll" (normalized: "c:\\windows\\system32\\devobj.dll") Region: id = 2056 start_va = 0x7ff8e9ae0000 end_va = 0x7ff8e9b11fff entry_point = 0x7ff8e9ae0000 region_type = mapped_file name = "fwbase.dll" filename = "\\Windows\\System32\\fwbase.dll" (normalized: "c:\\windows\\system32\\fwbase.dll") Region: id = 2057 start_va = 0x7ff8e9cd0000 end_va = 0x7ff8e9cf2fff entry_point = 0x7ff8e9cd0000 region_type = mapped_file name = "gpapi.dll" filename = "\\Windows\\System32\\gpapi.dll" (normalized: "c:\\windows\\system32\\gpapi.dll") Region: id = 2058 start_va = 0x7ff8e9ec0000 end_va = 0x7ff8e9f07fff entry_point = 0x7ff8e9ec0000 region_type = mapped_file name = "authz.dll" filename = "\\Windows\\System32\\authz.dll" (normalized: "c:\\windows\\system32\\authz.dll") Region: id = 2059 start_va = 0x7ff8ea000000 end_va = 0x7ff8ea00bfff entry_point = 0x7ff8ea000000 region_type = mapped_file name = "netutils.dll" filename = "\\Windows\\System32\\netutils.dll" (normalized: "c:\\windows\\system32\\netutils.dll") Region: id = 2060 start_va = 0x7ff8ea0f0000 end_va = 0x7ff8ea121fff entry_point = 0x7ff8ea0f0000 region_type = mapped_file name = "ntmarta.dll" filename = "\\Windows\\System32\\ntmarta.dll" (normalized: "c:\\windows\\system32\\ntmarta.dll") Region: id = 2061 start_va = 0x7ff8ea270000 end_va = 0x7ff8ea2a2fff entry_point = 0x7ff8ea270000 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\System32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll") Region: id = 2062 start_va = 0x7ff8ea3c0000 end_va = 0x7ff8ea467fff entry_point = 0x7ff8ea3c0000 region_type = mapped_file name = "dnsapi.dll" filename = "\\Windows\\System32\\dnsapi.dll" (normalized: "c:\\windows\\system32\\dnsapi.dll") Region: id = 2063 start_va = 0x7ff8ea5c0000 end_va = 0x7ff8ea61cfff entry_point = 0x7ff8ea5c0000 region_type = mapped_file name = "mswsock.dll" filename = "\\Windows\\System32\\mswsock.dll" (normalized: "c:\\windows\\system32\\mswsock.dll") Region: id = 2064 start_va = 0x7ff8ea620000 end_va = 0x7ff8ea636fff entry_point = 0x7ff8ea620000 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\System32\\cryptsp.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll") Region: id = 2065 start_va = 0x7ff8ea790000 end_va = 0x7ff8ea79afff entry_point = 0x7ff8ea790000 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\System32\\cryptbase.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll") Region: id = 2066 start_va = 0x7ff8ea9d0000 end_va = 0x7ff8ea9fbfff entry_point = 0x7ff8ea9d0000 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\System32\\sspicli.dll" (normalized: "c:\\windows\\system32\\sspicli.dll") Region: id = 2067 start_va = 0x7ff8eabd0000 end_va = 0x7ff8eabf7fff entry_point = 0x7ff8eabd0000 region_type = mapped_file name = "bcrypt.dll" filename = "\\Windows\\System32\\bcrypt.dll" (normalized: "c:\\windows\\system32\\bcrypt.dll") Region: id = 2068 start_va = 0x7ff8eac00000 end_va = 0x7ff8eac6afff entry_point = 0x7ff8eac00000 region_type = mapped_file name = "bcryptprimitives.dll" filename = "\\Windows\\System32\\bcryptprimitives.dll" (normalized: "c:\\windows\\system32\\bcryptprimitives.dll") Region: id = 2069 start_va = 0x7ff8eadd0000 end_va = 0x7ff8eae19fff entry_point = 0x7ff8eadd0000 region_type = mapped_file name = "powrprof.dll" filename = "\\Windows\\System32\\powrprof.dll" (normalized: "c:\\windows\\system32\\powrprof.dll") Region: id = 2070 start_va = 0x7ff8eae20000 end_va = 0x7ff8eae2efff entry_point = 0x7ff8eae20000 region_type = mapped_file name = "kernel.appcore.dll" filename = "\\Windows\\System32\\kernel.appcore.dll" (normalized: "c:\\windows\\system32\\kernel.appcore.dll") Region: id = 2071 start_va = 0x7ff8eaf60000 end_va = 0x7ff8eafa3fff entry_point = 0x7ff8eaf60000 region_type = mapped_file name = "cfgmgr32.dll" filename = "\\Windows\\System32\\cfgmgr32.dll" (normalized: "c:\\windows\\system32\\cfgmgr32.dll") Region: id = 2072 start_va = 0x7ff8eb7b0000 end_va = 0x7ff8eb862fff entry_point = 0x7ff8eb7b0000 region_type = mapped_file name = "shcore.dll" filename = "\\Windows\\System32\\SHCore.dll" (normalized: "c:\\windows\\system32\\shcore.dll") Region: id = 2073 start_va = 0x7ff8eb870000 end_va = 0x7ff8eba4cfff entry_point = 0x7ff8eb870000 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 2074 start_va = 0x7ff8ebb30000 end_va = 0x7ff8ebbedfff entry_point = 0x7ff8ebb30000 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll") Region: id = 2075 start_va = 0x7ff8ebdc0000 end_va = 0x7ff8ebf0dfff entry_point = 0x7ff8ebdc0000 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 2076 start_va = 0x7ff8ec240000 end_va = 0x7ff8ec29afff entry_point = 0x7ff8ec240000 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 2077 start_va = 0x7ff8ec300000 end_va = 0x7ff8ec440fff entry_point = 0x7ff8ec300000 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll") Region: id = 2078 start_va = 0x7ff8ec450000 end_va = 0x7ff8ec575fff entry_point = 0x7ff8ec450000 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 2079 start_va = 0x7ff8edb10000 end_va = 0x7ff8edbb4fff entry_point = 0x7ff8edb10000 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\System32\\clbcatq.dll" (normalized: "c:\\windows\\system32\\clbcatq.dll") Region: id = 2080 start_va = 0x7ff8edbc0000 end_va = 0x7ff8edd44fff entry_point = 0x7ff8edbc0000 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 2081 start_va = 0x7ff8edd60000 end_va = 0x7ff8edfdbfff entry_point = 0x7ff8edd60000 region_type = mapped_file name = "combase.dll" filename = "\\Windows\\System32\\combase.dll" (normalized: "c:\\windows\\system32\\combase.dll") Region: id = 2082 start_va = 0x7ff8ee040000 end_va = 0x7ff8ee0a8fff entry_point = 0x7ff8ee040000 region_type = mapped_file name = "ws2_32.dll" filename = "\\Windows\\System32\\ws2_32.dll" (normalized: "c:\\windows\\system32\\ws2_32.dll") Region: id = 2083 start_va = 0x7ff8ee0b0000 end_va = 0x7ff8ee14cfff entry_point = 0x7ff8ee0b0000 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 2084 start_va = 0x7ff8ee190000 end_va = 0x7ff8ee235fff entry_point = 0x7ff8ee190000 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 2085 start_va = 0x7ff8ee250000 end_va = 0x7ff8ee257fff entry_point = 0x7ff8ee250000 region_type = mapped_file name = "nsi.dll" filename = "\\Windows\\System32\\nsi.dll" (normalized: "c:\\windows\\system32\\nsi.dll") Region: id = 2086 start_va = 0x7ff8ee2d0000 end_va = 0x7ff8ee37cfff entry_point = 0x7ff8ee2d0000 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 2087 start_va = 0x7ff8ee380000 end_va = 0x7ff8ee541fff entry_point = 0x7ff8ee380000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Thread: id = 390 os_tid = 0x748 Thread: id = 391 os_tid = 0x730 Thread: id = 392 os_tid = 0x70c Thread: id = 393 os_tid = 0x6e8 Thread: id = 394 os_tid = 0x6e4 Thread: id = 395 os_tid = 0x6bc Thread: id = 396 os_tid = 0x6b0 Thread: id = 397 os_tid = 0x650 Thread: id = 398 os_tid = 0x554 Thread: id = 399 os_tid = 0x550 Thread: id = 400 os_tid = 0x52c Thread: id = 401 os_tid = 0x518 Thread: id = 402 os_tid = 0x514 Thread: id = 403 os_tid = 0x50c Thread: id = 404 os_tid = 0x500 Thread: id = 405 os_tid = 0x4e4 Thread: id = 406 os_tid = 0x4c8 Thread: id = 407 os_tid = 0x4c4 Thread: id = 408 os_tid = 0x4bc Thread: id = 409 os_tid = 0x4b8 Thread: id = 410 os_tid = 0x4b0 Thread: id = 411 os_tid = 0x4a8 Thread: id = 412 os_tid = 0x4a4 Thread: id = 413 os_tid = 0x4a0 Thread: id = 414 os_tid = 0x49c Thread: id = 415 os_tid = 0x48c Thread: id = 416 os_tid = 0x448 Process: id = "21" image_name = "officeclicktorun.exe" filename = "c:\\program files\\common files\\microsoft shared\\clicktorun\\officeclicktorun.exe" page_root = "0x4269a000" os_pid = "0x4e8" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "child_process" parent_id = "10" os_parent_pid = "0x1e8" cmd_line = "\"C:\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\OfficeClickToRun.exe\" /service" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" os_groups = "BUILTIN\\Administrators" [0xe], "Everyone" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7] Region: id = 1455 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 1456 start_va = 0xd109c10000 end_va = 0xd109c1ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000d109c10000" filename = "" Region: id = 1457 start_va = 0xd109c20000 end_va = 0xd109c26fff entry_point = 0x0 region_type = private name = "private_0x000000d109c20000" filename = "" Region: id = 1458 start_va = 0xd109c30000 end_va = 0xd109c43fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000d109c30000" filename = "" Region: id = 1459 start_va = 0xd109c50000 end_va = 0xd109d4ffff entry_point = 0x0 region_type = private name = "private_0x000000d109c50000" filename = "" Region: id = 1460 start_va = 0xd109d50000 end_va = 0xd109d53fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000d109d50000" filename = "" Region: id = 1461 start_va = 0xd109d60000 end_va = 0xd109d62fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000d109d60000" filename = "" Region: id = 1462 start_va = 0xd109d70000 end_va = 0xd109d71fff entry_point = 0x0 region_type = private name = "private_0x000000d109d70000" filename = "" Region: id = 1463 start_va = 0xd109d80000 end_va = 0xd109e3dfff entry_point = 0xd109d80000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 1464 start_va = 0xd109e40000 end_va = 0xd109e46fff entry_point = 0x0 region_type = private name = "private_0x000000d109e40000" filename = "" Region: id = 1465 start_va = 0xd109e50000 end_va = 0xd109e50fff entry_point = 0x0 region_type = private name = "private_0x000000d109e50000" filename = "" Region: id = 1466 start_va = 0xd109e60000 end_va = 0xd109e60fff entry_point = 0x0 region_type = private name = "private_0x000000d109e60000" filename = "" Region: id = 1467 start_va = 0xd109e70000 end_va = 0xd109e70fff entry_point = 0x0 region_type = private name = "private_0x000000d109e70000" filename = "" Region: id = 1468 start_va = 0xd109e80000 end_va = 0xd109f7ffff entry_point = 0x0 region_type = private name = "private_0x000000d109e80000" filename = "" Region: id = 1469 start_va = 0xd109f80000 end_va = 0xd10a07ffff entry_point = 0x0 region_type = private name = "private_0x000000d109f80000" filename = "" Region: id = 1470 start_va = 0xd10a080000 end_va = 0xd10a13ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000d10a080000" filename = "" Region: id = 1471 start_va = 0xd10a140000 end_va = 0xd10a140fff entry_point = 0x0 region_type = private name = "private_0x000000d10a140000" filename = "" Region: id = 1472 start_va = 0xd10a150000 end_va = 0xd10a151fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000d10a150000" filename = "" Region: id = 1473 start_va = 0xd10a160000 end_va = 0xd10a160fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000d10a160000" filename = "" Region: id = 1474 start_va = 0xd10a170000 end_va = 0xd10a171fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000d10a170000" filename = "" Region: id = 1475 start_va = 0xd10a180000 end_va = 0xd10a184fff entry_point = 0x0 region_type = private name = "private_0x000000d10a180000" filename = "" Region: id = 1476 start_va = 0xd10a190000 end_va = 0xd10a190fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000d10a190000" filename = "" Region: id = 1477 start_va = 0xd10a1a0000 end_va = 0xd10a1affff entry_point = 0x0 region_type = private name = "private_0x000000d10a1a0000" filename = "" Region: id = 1478 start_va = 0xd10a1b0000 end_va = 0xd10a337fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000d10a1b0000" filename = "" Region: id = 1479 start_va = 0xd10a340000 end_va = 0xd10a4c0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000d10a340000" filename = "" Region: id = 1480 start_va = 0xd10a4d0000 end_va = 0xd10a806fff entry_point = 0xd10a4d0000 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 1481 start_va = 0xd10a810000 end_va = 0xd10a90ffff entry_point = 0x0 region_type = private name = "private_0x000000d10a810000" filename = "" Region: id = 1482 start_va = 0xd10a910000 end_va = 0xd10aa0ffff entry_point = 0x0 region_type = private name = "private_0x000000d10a910000" filename = "" Region: id = 1483 start_va = 0xd10aa10000 end_va = 0xd10ab0ffff entry_point = 0x0 region_type = private name = "private_0x000000d10aa10000" filename = "" Region: id = 1484 start_va = 0xd10ab10000 end_va = 0xd10ac0ffff entry_point = 0x0 region_type = private name = "private_0x000000d10ab10000" filename = "" Region: id = 1485 start_va = 0xd10ac10000 end_va = 0xd10ae0ffff entry_point = 0x0 region_type = private name = "private_0x000000d10ac10000" filename = "" Region: id = 1486 start_va = 0xd10ae10000 end_va = 0xd10af0ffff entry_point = 0x0 region_type = private name = "private_0x000000d10ae10000" filename = "" Region: id = 1487 start_va = 0xd10af10000 end_va = 0xd10b00ffff entry_point = 0x0 region_type = private name = "private_0x000000d10af10000" filename = "" Region: id = 1488 start_va = 0xd10b010000 end_va = 0xd10b10ffff entry_point = 0x0 region_type = private name = "private_0x000000d10b010000" filename = "" Region: id = 1489 start_va = 0xd10b110000 end_va = 0xd10b216fff entry_point = 0x0 region_type = private name = "private_0x000000d10b110000" filename = "" Region: id = 1490 start_va = 0xd10b220000 end_va = 0xd10b423fff entry_point = 0x0 region_type = private name = "private_0x000000d10b220000" filename = "" Region: id = 1491 start_va = 0xd10b430000 end_va = 0xd10b52ffff entry_point = 0x0 region_type = private name = "private_0x000000d10b430000" filename = "" Region: id = 1492 start_va = 0xd10b530000 end_va = 0xd10b54afff entry_point = 0xd10b530000 region_type = mapped_file name = "tdh.dll.mui" filename = "\\Windows\\System32\\en-US\\tdh.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\tdh.dll.mui") Region: id = 1493 start_va = 0xd10b550000 end_va = 0xd10b550fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000d10b550000" filename = "" Region: id = 1494 start_va = 0xd10b560000 end_va = 0xd10b63efff entry_point = 0xd10b560000 region_type = mapped_file name = "kernelbase.dll.mui" filename = "\\Windows\\System32\\en-US\\KernelBase.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\kernelbase.dll.mui") Region: id = 1495 start_va = 0xd10b640000 end_va = 0xd10b640fff entry_point = 0xd10b640000 region_type = mapped_file name = "msxml6r.dll" filename = "\\Windows\\System32\\msxml6r.dll" (normalized: "c:\\windows\\system32\\msxml6r.dll") Region: id = 1496 start_va = 0xd10b650000 end_va = 0xd10b656fff entry_point = 0x0 region_type = private name = "private_0x000000d10b650000" filename = "" Region: id = 1497 start_va = 0xd10b660000 end_va = 0xd10b660fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000d10b660000" filename = "" Region: id = 1498 start_va = 0xd10b670000 end_va = 0xd10b670fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000d10b670000" filename = "" Region: id = 1499 start_va = 0xd10b680000 end_va = 0xd10b680fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000d10b680000" filename = "" Region: id = 1500 start_va = 0xd10b690000 end_va = 0xd10b690fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000d10b690000" filename = "" Region: id = 1501 start_va = 0xd10b6a0000 end_va = 0xd10b6a0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000d10b6a0000" filename = "" Region: id = 1502 start_va = 0xd10b6b0000 end_va = 0xd10b6b0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000d10b6b0000" filename = "" Region: id = 1503 start_va = 0xd10b6c0000 end_va = 0xd10b6c0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000d10b6c0000" filename = "" Region: id = 1504 start_va = 0xd10b6d0000 end_va = 0xd10b6d0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000d10b6d0000" filename = "" Region: id = 1505 start_va = 0xd10b6e0000 end_va = 0xd10b6e0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000d10b6e0000" filename = "" Region: id = 1506 start_va = 0xd10b6f0000 end_va = 0xd10b6f0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000d10b6f0000" filename = "" Region: id = 1507 start_va = 0xd10b700000 end_va = 0xd10b700fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000d10b700000" filename = "" Region: id = 1508 start_va = 0xd10b710000 end_va = 0xd10b710fff entry_point = 0xd10b710000 region_type = mapped_file name = "counters.dat" filename = "\\Windows\\System32\\config\\systemprofile\\AppData\\Local\\Microsoft\\Windows\\INetCache\\counters.dat" (normalized: "c:\\windows\\system32\\config\\systemprofile\\appdata\\local\\microsoft\\windows\\inetcache\\counters.dat") Region: id = 1509 start_va = 0xd10b720000 end_va = 0xd10b72ffff entry_point = 0x0 region_type = private name = "private_0x000000d10b720000" filename = "" Region: id = 1510 start_va = 0xd10b730000 end_va = 0xd10b82ffff entry_point = 0x0 region_type = private name = "private_0x000000d10b730000" filename = "" Region: id = 1511 start_va = 0xd10b830000 end_va = 0xd10ba2ffff entry_point = 0x0 region_type = private name = "private_0x000000d10b830000" filename = "" Region: id = 1512 start_va = 0xd10ba30000 end_va = 0xd10be2ffff entry_point = 0x0 region_type = private name = "private_0x000000d10ba30000" filename = "" Region: id = 1513 start_va = 0xd10be30000 end_va = 0xd10bf2ffff entry_point = 0x0 region_type = private name = "private_0x000000d10be30000" filename = "" Region: id = 1514 start_va = 0xd10bf30000 end_va = 0xd10c02ffff entry_point = 0x0 region_type = private name = "private_0x000000d10bf30000" filename = "" Region: id = 1515 start_va = 0xd10c030000 end_va = 0xd10c034fff entry_point = 0xd10c030000 region_type = mapped_file name = "winnlsres.dll" filename = "\\Windows\\System32\\winnlsres.dll" (normalized: "c:\\windows\\system32\\winnlsres.dll") Region: id = 1516 start_va = 0xd10c040000 end_va = 0xd10c04ffff entry_point = 0xd10c040000 region_type = mapped_file name = "winnlsres.dll.mui" filename = "\\Windows\\System32\\en-US\\winnlsres.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\winnlsres.dll.mui") Region: id = 1517 start_va = 0xd10c050000 end_va = 0xd10c052fff entry_point = 0xd10c050000 region_type = mapped_file name = "mswsock.dll.mui" filename = "\\Windows\\System32\\en-US\\mswsock.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\mswsock.dll.mui") Region: id = 1518 start_va = 0xd10c060000 end_va = 0xd10c061fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000d10c060000" filename = "" Region: id = 1519 start_va = 0xd10c070000 end_va = 0xd10c079fff entry_point = 0xd10c070000 region_type = mapped_file name = "crypt32.dll.mui" filename = "\\Windows\\System32\\en-US\\crypt32.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\crypt32.dll.mui") Region: id = 1520 start_va = 0xd10c130000 end_va = 0xd10c22ffff entry_point = 0x0 region_type = private name = "private_0x000000d10c130000" filename = "" Region: id = 1521 start_va = 0xd10c230000 end_va = 0xd10c32ffff entry_point = 0x0 region_type = private name = "private_0x000000d10c230000" filename = "" Region: id = 1522 start_va = 0xd10c330000 end_va = 0xd10c42ffff entry_point = 0x0 region_type = private name = "private_0x000000d10c330000" filename = "" Region: id = 1523 start_va = 0xd10c430000 end_va = 0xd10c52ffff entry_point = 0x0 region_type = private name = "private_0x000000d10c430000" filename = "" Region: id = 1524 start_va = 0xd10c530000 end_va = 0xd10c62ffff entry_point = 0x0 region_type = private name = "private_0x000000d10c530000" filename = "" Region: id = 1525 start_va = 0xd10c630000 end_va = 0xd10c72ffff entry_point = 0x0 region_type = private name = "private_0x000000d10c630000" filename = "" Region: id = 1526 start_va = 0xd10c730000 end_va = 0xd10cb2ffff entry_point = 0x0 region_type = private name = "private_0x000000d10c730000" filename = "" Region: id = 1527 start_va = 0xd10cb30000 end_va = 0xd10d32ffff entry_point = 0x0 region_type = private name = "private_0x000000d10cb30000" filename = "" Region: id = 1528 start_va = 0xd10d330000 end_va = 0xd10e2fffff entry_point = 0x0 region_type = private name = "private_0x000000d10d330000" filename = "" Region: id = 1529 start_va = 0xd10e300000 end_va = 0xd10e3fffff entry_point = 0x0 region_type = private name = "private_0x000000d10e300000" filename = "" Region: id = 1530 start_va = 0xd10ea30000 end_va = 0xd10f9fffff entry_point = 0x0 region_type = private name = "private_0x000000d10ea30000" filename = "" Region: id = 1531 start_va = 0xd110210000 end_va = 0xd1111dffff entry_point = 0x0 region_type = private name = "private_0x000000d110210000" filename = "" Region: id = 1532 start_va = 0x7df5ff1c0000 end_va = 0x7ff5ff1bffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007df5ff1c0000" filename = "" Region: id = 1533 start_va = 0x7ff649a4c000 end_va = 0x7ff649a4dfff entry_point = 0x0 region_type = private name = "private_0x00007ff649a4c000" filename = "" Region: id = 1534 start_va = 0x7ff649a4e000 end_va = 0x7ff649a4ffff entry_point = 0x0 region_type = private name = "private_0x00007ff649a4e000" filename = "" Region: id = 1535 start_va = 0x7ff649a50000 end_va = 0x7ff649a51fff entry_point = 0x0 region_type = private name = "private_0x00007ff649a50000" filename = "" Region: id = 1536 start_va = 0x7ff649a52000 end_va = 0x7ff649a53fff entry_point = 0x0 region_type = private name = "private_0x00007ff649a52000" filename = "" Region: id = 1537 start_va = 0x7ff649a54000 end_va = 0x7ff649a55fff entry_point = 0x0 region_type = private name = "private_0x00007ff649a54000" filename = "" Region: id = 1538 start_va = 0x7ff649a56000 end_va = 0x7ff649a57fff entry_point = 0x0 region_type = private name = "private_0x00007ff649a56000" filename = "" Region: id = 1539 start_va = 0x7ff649a58000 end_va = 0x7ff649a59fff entry_point = 0x0 region_type = private name = "private_0x00007ff649a58000" filename = "" Region: id = 1540 start_va = 0x7ff649a5a000 end_va = 0x7ff649a5bfff entry_point = 0x0 region_type = private name = "private_0x00007ff649a5a000" filename = "" Region: id = 1541 start_va = 0x7ff649a5c000 end_va = 0x7ff649a5dfff entry_point = 0x0 region_type = private name = "private_0x00007ff649a5c000" filename = "" Region: id = 1542 start_va = 0x7ff649a5e000 end_va = 0x7ff649a5ffff entry_point = 0x0 region_type = private name = "private_0x00007ff649a5e000" filename = "" Region: id = 1543 start_va = 0x7ff649a60000 end_va = 0x7ff649b5ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007ff649a60000" filename = "" Region: id = 1544 start_va = 0x7ff649b60000 end_va = 0x7ff649b82fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007ff649b60000" filename = "" Region: id = 1545 start_va = 0x7ff649b83000 end_va = 0x7ff649b84fff entry_point = 0x0 region_type = private name = "private_0x00007ff649b83000" filename = "" Region: id = 1546 start_va = 0x7ff649b85000 end_va = 0x7ff649b86fff entry_point = 0x0 region_type = private name = "private_0x00007ff649b85000" filename = "" Region: id = 1547 start_va = 0x7ff649b87000 end_va = 0x7ff649b87fff entry_point = 0x0 region_type = private name = "private_0x00007ff649b87000" filename = "" Region: id = 1548 start_va = 0x7ff649b88000 end_va = 0x7ff649b89fff entry_point = 0x0 region_type = private name = "private_0x00007ff649b88000" filename = "" Region: id = 1549 start_va = 0x7ff649b8a000 end_va = 0x7ff649b8bfff entry_point = 0x0 region_type = private name = "private_0x00007ff649b8a000" filename = "" Region: id = 1550 start_va = 0x7ff649b8c000 end_va = 0x7ff649b8dfff entry_point = 0x0 region_type = private name = "private_0x00007ff649b8c000" filename = "" Region: id = 1551 start_va = 0x7ff649b8e000 end_va = 0x7ff649b8ffff entry_point = 0x0 region_type = private name = "private_0x00007ff649b8e000" filename = "" Region: id = 1552 start_va = 0x7ff64a820000 end_va = 0x7ff64b07bfff entry_point = 0x7ff64a820000 region_type = mapped_file name = "officeclicktorun.exe" filename = "\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeClickToRun.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officeclicktorun.exe") Region: id = 1553 start_va = 0x7ff8dcbd0000 end_va = 0x7ff8dcc4ffff entry_point = 0x7ff8dcbd0000 region_type = mapped_file name = "webio.dll" filename = "\\Windows\\System32\\webio.dll" (normalized: "c:\\windows\\system32\\webio.dll") Region: id = 1554 start_va = 0x7ff8dff00000 end_va = 0x7ff8e01a6fff entry_point = 0x7ff8dff00000 region_type = mapped_file name = "wininet.dll" filename = "\\Windows\\System32\\wininet.dll" (normalized: "c:\\windows\\system32\\wininet.dll") Region: id = 1555 start_va = 0x7ff8e0770000 end_va = 0x7ff8e07bcfff entry_point = 0x7ff8e0770000 region_type = mapped_file name = "appvfilesystemmetadata.dll" filename = "\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVFileSystemMetadata.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvfilesystemmetadata.dll") Region: id = 1556 start_va = 0x7ff8e07c0000 end_va = 0x7ff8e0945fff entry_point = 0x7ff8e07c0000 region_type = mapped_file name = "appvisvsubsystemcontroller.dll" filename = "\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvSubsystemController.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvsubsystemcontroller.dll") Region: id = 1557 start_va = 0x7ff8e0a60000 end_va = 0x7ff8e0bf6fff entry_point = 0x7ff8e0a60000 region_type = mapped_file name = "urlmon.dll" filename = "\\Windows\\System32\\urlmon.dll" (normalized: "c:\\windows\\system32\\urlmon.dll") Region: id = 1558 start_va = 0x7ff8e0c90000 end_va = 0x7ff8e0ec0fff entry_point = 0x7ff8e0c90000 region_type = mapped_file name = "appvintegration.dll" filename = "\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIntegration.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvintegration.dll") Region: id = 1559 start_va = 0x7ff8e0ed0000 end_va = 0x7ff8e0f67fff entry_point = 0x7ff8e0ed0000 region_type = mapped_file name = "appvisvvirtualization.dll" filename = "\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvVirtualization.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvvirtualization.dll") Region: id = 1560 start_va = 0x7ff8e0f70000 end_va = 0x7ff8e0f7dfff entry_point = 0x7ff8e0f70000 region_type = mapped_file name = "npmproxy.dll" filename = "\\Windows\\System32\\npmproxy.dll" (normalized: "c:\\windows\\system32\\npmproxy.dll") Region: id = 1561 start_va = 0x7ff8e0f80000 end_va = 0x7ff8e0f94fff entry_point = 0x7ff8e0f80000 region_type = mapped_file name = "ondemandconnroutehelper.dll" filename = "\\Windows\\System32\\OnDemandConnRouteHelper.dll" (normalized: "c:\\windows\\system32\\ondemandconnroutehelper.dll") Region: id = 1562 start_va = 0x7ff8e0fa0000 end_va = 0x7ff8e1049fff entry_point = 0x7ff8e0fa0000 region_type = mapped_file name = "appvcatalog.dll" filename = "\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVCatalog.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvcatalog.dll") Region: id = 1563 start_va = 0x7ff8e1070000 end_va = 0x7ff8e11a1fff entry_point = 0x7ff8e1070000 region_type = mapped_file name = "appvmanifest.dll" filename = "\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVManifest.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvmanifest.dll") Region: id = 1564 start_va = 0x7ff8e11b0000 end_va = 0x7ff8e11e6fff entry_point = 0x7ff8e11b0000 region_type = mapped_file name = "appvisvstreamingmanager.dll" filename = "\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvStreamingManager.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstreamingmanager.dll") Region: id = 1565 start_va = 0x7ff8e11f0000 end_va = 0x7ff8e12dffff entry_point = 0x7ff8e11f0000 region_type = mapped_file name = "appvorchestration.dll" filename = "\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVOrchestration.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvorchestration.dll") Region: id = 1566 start_va = 0x7ff8e12e0000 end_va = 0x7ff8e12f6fff entry_point = 0x7ff8e12e0000 region_type = mapped_file name = "netapi32.dll" filename = "\\Windows\\System32\\netapi32.dll" (normalized: "c:\\windows\\system32\\netapi32.dll") Region: id = 1567 start_va = 0x7ff8e1300000 end_va = 0x7ff8e13eefff entry_point = 0x7ff8e1300000 region_type = mapped_file name = "msvcr120.dll" filename = "\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcr120.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\msvcr120.dll") Region: id = 1568 start_va = 0x7ff8e13f0000 end_va = 0x7ff8e1495fff entry_point = 0x7ff8e13f0000 region_type = mapped_file name = "msvcp120.dll" filename = "\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcp120.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\msvcp120.dll") Region: id = 1569 start_va = 0x7ff8e14a0000 end_va = 0x7ff8e15e0fff entry_point = 0x7ff8e14a0000 region_type = mapped_file name = "appvpolicy.dll" filename = "\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVPolicy.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvpolicy.dll") Region: id = 1570 start_va = 0x7ff8e1700000 end_va = 0x7ff8e177bfff entry_point = 0x7ff8e1700000 region_type = mapped_file name = "appvisvapi.dll" filename = "\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvApi.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvapi.dll") Region: id = 1571 start_va = 0x7ff8e1c70000 end_va = 0x7ff8e1ee6fff entry_point = 0x7ff8e1c70000 region_type = mapped_file name = "msxml6.dll" filename = "\\Windows\\System32\\msxml6.dll" (normalized: "c:\\windows\\system32\\msxml6.dll") Region: id = 1572 start_va = 0x7ff8e1ef0000 end_va = 0x7ff8e1f71fff entry_point = 0x7ff8e1ef0000 region_type = mapped_file name = "msdelta.dll" filename = "\\Windows\\System32\\msdelta.dll" (normalized: "c:\\windows\\system32\\msdelta.dll") Region: id = 1573 start_va = 0x7ff8e1f80000 end_va = 0x7ff8e2367fff entry_point = 0x7ff8e1f80000 region_type = mapped_file name = "streamserver.dll" filename = "\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\StreamServer.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\streamserver.dll") Region: id = 1574 start_va = 0x7ff8e2760000 end_va = 0x7ff8e279efff entry_point = 0x7ff8e2760000 region_type = mapped_file name = "netprofm.dll" filename = "\\Windows\\System32\\netprofm.dll" (normalized: "c:\\windows\\system32\\netprofm.dll") Region: id = 1575 start_va = 0x7ff8e2ea0000 end_va = 0x7ff8e2ea9fff entry_point = 0x7ff8e2ea0000 region_type = mapped_file name = "rasadhlp.dll" filename = "\\Windows\\System32\\rasadhlp.dll" (normalized: "c:\\windows\\system32\\rasadhlp.dll") Region: id = 1576 start_va = 0x7ff8e3170000 end_va = 0x7ff8e3183fff entry_point = 0x7ff8e3170000 region_type = mapped_file name = "mskeyprotect.dll" filename = "\\Windows\\System32\\mskeyprotect.dll" (normalized: "c:\\windows\\system32\\mskeyprotect.dll") Region: id = 1577 start_va = 0x7ff8e3a50000 end_va = 0x7ff8e3a59fff entry_point = 0x7ff8e3a50000 region_type = mapped_file name = "version.dll" filename = "\\Windows\\System32\\version.dll" (normalized: "c:\\windows\\system32\\version.dll") Region: id = 1578 start_va = 0x7ff8e3c30000 end_va = 0x7ff8e3fa5fff entry_point = 0x7ff8e3c30000 region_type = mapped_file name = "iertutil.dll" filename = "\\Windows\\System32\\iertutil.dll" (normalized: "c:\\windows\\system32\\iertutil.dll") Region: id = 1579 start_va = 0x7ff8e52f0000 end_va = 0x7ff8e530efff entry_point = 0x7ff8e52f0000 region_type = mapped_file name = "ncryptsslp.dll" filename = "\\Windows\\System32\\ncryptsslp.dll" (normalized: "c:\\windows\\system32\\ncryptsslp.dll") Region: id = 1580 start_va = 0x7ff8e5480000 end_va = 0x7ff8e548bfff entry_point = 0x7ff8e5480000 region_type = mapped_file name = "secur32.dll" filename = "\\Windows\\System32\\secur32.dll" (normalized: "c:\\windows\\system32\\secur32.dll") Region: id = 1581 start_va = 0x7ff8e57b0000 end_va = 0x7ff8e5a23fff entry_point = 0x7ff8e57b0000 region_type = mapped_file name = "comctl32.dll" filename = "\\Windows\\WinSxS\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43\\comctl32.dll") Region: id = 1582 start_va = 0x7ff8e5a30000 end_va = 0x7ff8e5d6cfff entry_point = 0x7ff8e5a30000 region_type = mapped_file name = "msi.dll" filename = "\\Windows\\System32\\msi.dll" (normalized: "c:\\windows\\system32\\msi.dll") Region: id = 1583 start_va = 0x7ff8e5dd0000 end_va = 0x7ff8e5ea5fff entry_point = 0x7ff8e5dd0000 region_type = mapped_file name = "winhttp.dll" filename = "\\Windows\\System32\\winhttp.dll" (normalized: "c:\\windows\\system32\\winhttp.dll") Region: id = 1584 start_va = 0x7ff8e5eb0000 end_va = 0x7ff8e5ee9fff entry_point = 0x7ff8e5eb0000 region_type = mapped_file name = "apiclient.dll" filename = "\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ApiClient.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\apiclient.dll") Region: id = 1585 start_va = 0x7ff8e5ef0000 end_va = 0x7ff8e5f21fff entry_point = 0x7ff8e5ef0000 region_type = mapped_file name = "rstrtmgr.dll" filename = "\\Windows\\System32\\RstrtMgr.dll" (normalized: "c:\\windows\\system32\\rstrtmgr.dll") Region: id = 1586 start_va = 0x7ff8e5f30000 end_va = 0x7ff8e5fcefff entry_point = 0x7ff8e5f30000 region_type = mapped_file name = "msvcp140.dll" filename = "\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcp140.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\msvcp140.dll") Region: id = 1587 start_va = 0x7ff8e5fd0000 end_va = 0x7ff8e5fe5fff entry_point = 0x7ff8e5fd0000 region_type = mapped_file name = "vcruntime140.dll" filename = "\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vcruntime140.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\vcruntime140.dll") Region: id = 1588 start_va = 0x7ff8e5ff0000 end_va = 0x7ff8e6016fff entry_point = 0x7ff8e5ff0000 region_type = mapped_file name = "cabinet.dll" filename = "\\Windows\\System32\\cabinet.dll" (normalized: "c:\\windows\\system32\\cabinet.dll") Region: id = 1589 start_va = 0x7ff8e6330000 end_va = 0x7ff8e6365fff entry_point = 0x7ff8e6330000 region_type = mapped_file name = "xmllite.dll" filename = "\\Windows\\System32\\xmllite.dll" (normalized: "c:\\windows\\system32\\xmllite.dll") Region: id = 1590 start_va = 0x7ff8e6c30000 end_va = 0x7ff8e6d21fff entry_point = 0x7ff8e6c30000 region_type = mapped_file name = "ucrtbase.dll" filename = "\\Windows\\System32\\ucrtbase.dll" (normalized: "c:\\windows\\system32\\ucrtbase.dll") Region: id = 1591 start_va = 0x7ff8e7160000 end_va = 0x7ff8e71c7fff entry_point = 0x7ff8e7160000 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 1592 start_va = 0x7ff8e7280000 end_va = 0x7ff8e7299fff entry_point = 0x7ff8e7280000 region_type = mapped_file name = "dhcpcsvc.dll" filename = "\\Windows\\System32\\dhcpcsvc.dll" (normalized: "c:\\windows\\system32\\dhcpcsvc.dll") Region: id = 1593 start_va = 0x7ff8e72a0000 end_va = 0x7ff8e72b5fff entry_point = 0x7ff8e72a0000 region_type = mapped_file name = "dhcpcsvc6.dll" filename = "\\Windows\\System32\\dhcpcsvc6.dll" (normalized: "c:\\windows\\system32\\dhcpcsvc6.dll") Region: id = 1594 start_va = 0x7ff8e76f0000 end_va = 0x7ff8e7707fff entry_point = 0x7ff8e76f0000 region_type = mapped_file name = "samcli.dll" filename = "\\Windows\\System32\\samcli.dll" (normalized: "c:\\windows\\system32\\samcli.dll") Region: id = 1595 start_va = 0x7ff8e7cd0000 end_va = 0x7ff8e7ce5fff entry_point = 0x7ff8e7cd0000 region_type = mapped_file name = "wkscli.dll" filename = "\\Windows\\System32\\wkscli.dll" (normalized: "c:\\windows\\system32\\wkscli.dll") Region: id = 1596 start_va = 0x7ff8e8460000 end_va = 0x7ff8e846afff entry_point = 0x7ff8e8460000 region_type = mapped_file name = "winnsi.dll" filename = "\\Windows\\System32\\winnsi.dll" (normalized: "c:\\windows\\system32\\winnsi.dll") Region: id = 1597 start_va = 0x7ff8e8480000 end_va = 0x7ff8e84b7fff entry_point = 0x7ff8e8480000 region_type = mapped_file name = "iphlpapi.dll" filename = "\\Windows\\System32\\IPHLPAPI.DLL" (normalized: "c:\\windows\\system32\\iphlpapi.dll") Region: id = 1598 start_va = 0x7ff8e8ad0000 end_va = 0x7ff8e8ae2fff entry_point = 0x7ff8e8ad0000 region_type = mapped_file name = "wtsapi32.dll" filename = "\\Windows\\System32\\wtsapi32.dll" (normalized: "c:\\windows\\system32\\wtsapi32.dll") Region: id = 1599 start_va = 0x7ff8e9cd0000 end_va = 0x7ff8e9cf2fff entry_point = 0x7ff8e9cd0000 region_type = mapped_file name = "gpapi.dll" filename = "\\Windows\\System32\\gpapi.dll" (normalized: "c:\\windows\\system32\\gpapi.dll") Region: id = 1600 start_va = 0x7ff8e9d00000 end_va = 0x7ff8e9df7fff entry_point = 0x7ff8e9d00000 region_type = mapped_file name = "tdh.dll" filename = "\\Windows\\System32\\tdh.dll" (normalized: "c:\\windows\\system32\\tdh.dll") Region: id = 1601 start_va = 0x7ff8ea000000 end_va = 0x7ff8ea00bfff entry_point = 0x7ff8ea000000 region_type = mapped_file name = "netutils.dll" filename = "\\Windows\\System32\\netutils.dll" (normalized: "c:\\windows\\system32\\netutils.dll") Region: id = 1602 start_va = 0x7ff8ea010000 end_va = 0x7ff8ea035fff entry_point = 0x7ff8ea010000 region_type = mapped_file name = "srvcli.dll" filename = "\\Windows\\System32\\srvcli.dll" (normalized: "c:\\windows\\system32\\srvcli.dll") Region: id = 1603 start_va = 0x7ff8ea150000 end_va = 0x7ff8ea1c3fff entry_point = 0x7ff8ea150000 region_type = mapped_file name = "schannel.dll" filename = "\\Windows\\System32\\schannel.dll" (normalized: "c:\\windows\\system32\\schannel.dll") Region: id = 1604 start_va = 0x7ff8ea1d0000 end_va = 0x7ff8ea1d9fff entry_point = 0x7ff8ea1d0000 region_type = mapped_file name = "dpapi.dll" filename = "\\Windows\\System32\\dpapi.dll" (normalized: "c:\\windows\\system32\\dpapi.dll") Region: id = 1605 start_va = 0x7ff8ea270000 end_va = 0x7ff8ea2a2fff entry_point = 0x7ff8ea270000 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\System32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll") Region: id = 1606 start_va = 0x7ff8ea360000 end_va = 0x7ff8ea37efff entry_point = 0x7ff8ea360000 region_type = mapped_file name = "userenv.dll" filename = "\\Windows\\System32\\userenv.dll" (normalized: "c:\\windows\\system32\\userenv.dll") Region: id = 1607 start_va = 0x7ff8ea3c0000 end_va = 0x7ff8ea467fff entry_point = 0x7ff8ea3c0000 region_type = mapped_file name = "dnsapi.dll" filename = "\\Windows\\System32\\dnsapi.dll" (normalized: "c:\\windows\\system32\\dnsapi.dll") Region: id = 1608 start_va = 0x7ff8ea5c0000 end_va = 0x7ff8ea61cfff entry_point = 0x7ff8ea5c0000 region_type = mapped_file name = "mswsock.dll" filename = "\\Windows\\System32\\mswsock.dll" (normalized: "c:\\windows\\system32\\mswsock.dll") Region: id = 1609 start_va = 0x7ff8ea620000 end_va = 0x7ff8ea636fff entry_point = 0x7ff8ea620000 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\System32\\cryptsp.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll") Region: id = 1610 start_va = 0x7ff8ea790000 end_va = 0x7ff8ea79afff entry_point = 0x7ff8ea790000 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\System32\\cryptbase.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll") Region: id = 1611 start_va = 0x7ff8ea820000 end_va = 0x7ff8ea877fff entry_point = 0x7ff8ea820000 region_type = mapped_file name = "winsta.dll" filename = "\\Windows\\System32\\winsta.dll" (normalized: "c:\\windows\\system32\\winsta.dll") Region: id = 1612 start_va = 0x7ff8ea880000 end_va = 0x7ff8ea8b5fff entry_point = 0x7ff8ea880000 region_type = mapped_file name = "ntasn1.dll" filename = "\\Windows\\System32\\ntasn1.dll" (normalized: "c:\\windows\\system32\\ntasn1.dll") Region: id = 1613 start_va = 0x7ff8ea8c0000 end_va = 0x7ff8ea8e5fff entry_point = 0x7ff8ea8c0000 region_type = mapped_file name = "ncrypt.dll" filename = "\\Windows\\System32\\ncrypt.dll" (normalized: "c:\\windows\\system32\\ncrypt.dll") Region: id = 1614 start_va = 0x7ff8ea9d0000 end_va = 0x7ff8ea9fbfff entry_point = 0x7ff8ea9d0000 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\System32\\sspicli.dll" (normalized: "c:\\windows\\system32\\sspicli.dll") Region: id = 1615 start_va = 0x7ff8eabd0000 end_va = 0x7ff8eabf7fff entry_point = 0x7ff8eabd0000 region_type = mapped_file name = "bcrypt.dll" filename = "\\Windows\\System32\\bcrypt.dll" (normalized: "c:\\windows\\system32\\bcrypt.dll") Region: id = 1616 start_va = 0x7ff8eac00000 end_va = 0x7ff8eac6afff entry_point = 0x7ff8eac00000 region_type = mapped_file name = "bcryptprimitives.dll" filename = "\\Windows\\System32\\bcryptprimitives.dll" (normalized: "c:\\windows\\system32\\bcryptprimitives.dll") Region: id = 1617 start_va = 0x7ff8eadb0000 end_va = 0x7ff8eadc0fff entry_point = 0x7ff8eadb0000 region_type = mapped_file name = "msasn1.dll" filename = "\\Windows\\System32\\msasn1.dll" (normalized: "c:\\windows\\system32\\msasn1.dll") Region: id = 1618 start_va = 0x7ff8eadd0000 end_va = 0x7ff8eae19fff entry_point = 0x7ff8eadd0000 region_type = mapped_file name = "powrprof.dll" filename = "\\Windows\\System32\\powrprof.dll" (normalized: "c:\\windows\\system32\\powrprof.dll") Region: id = 1619 start_va = 0x7ff8eae20000 end_va = 0x7ff8eae2efff entry_point = 0x7ff8eae20000 region_type = mapped_file name = "kernel.appcore.dll" filename = "\\Windows\\System32\\kernel.appcore.dll" (normalized: "c:\\windows\\system32\\kernel.appcore.dll") Region: id = 1620 start_va = 0x7ff8eae30000 end_va = 0x7ff8eae42fff entry_point = 0x7ff8eae30000 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\System32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll") Region: id = 1621 start_va = 0x7ff8eae50000 end_va = 0x7ff8eaea3fff entry_point = 0x7ff8eae50000 region_type = mapped_file name = "wintrust.dll" filename = "\\Windows\\System32\\wintrust.dll" (normalized: "c:\\windows\\system32\\wintrust.dll") Region: id = 1622 start_va = 0x7ff8eaf60000 end_va = 0x7ff8eafa3fff entry_point = 0x7ff8eaf60000 region_type = mapped_file name = "cfgmgr32.dll" filename = "\\Windows\\System32\\cfgmgr32.dll" (normalized: "c:\\windows\\system32\\cfgmgr32.dll") Region: id = 1623 start_va = 0x7ff8eafb0000 end_va = 0x7ff8eb170fff entry_point = 0x7ff8eafb0000 region_type = mapped_file name = "crypt32.dll" filename = "\\Windows\\System32\\crypt32.dll" (normalized: "c:\\windows\\system32\\crypt32.dll") Region: id = 1624 start_va = 0x7ff8eb180000 end_va = 0x7ff8eb7a7fff entry_point = 0x7ff8eb180000 region_type = mapped_file name = "windows.storage.dll" filename = "\\Windows\\System32\\windows.storage.dll" (normalized: "c:\\windows\\system32\\windows.storage.dll") Region: id = 1625 start_va = 0x7ff8eb7b0000 end_va = 0x7ff8eb862fff entry_point = 0x7ff8eb7b0000 region_type = mapped_file name = "shcore.dll" filename = "\\Windows\\System32\\SHCore.dll" (normalized: "c:\\windows\\system32\\shcore.dll") Region: id = 1626 start_va = 0x7ff8eb870000 end_va = 0x7ff8eba4cfff entry_point = 0x7ff8eb870000 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 1627 start_va = 0x7ff8ebb30000 end_va = 0x7ff8ebbedfff entry_point = 0x7ff8ebb30000 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll") Region: id = 1628 start_va = 0x7ff8ebbf0000 end_va = 0x7ff8ebdb4fff entry_point = 0x7ff8ebbf0000 region_type = mapped_file name = "setupapi.dll" filename = "\\Windows\\System32\\setupapi.dll" (normalized: "c:\\windows\\system32\\setupapi.dll") Region: id = 1629 start_va = 0x7ff8ebdc0000 end_va = 0x7ff8ebf0dfff entry_point = 0x7ff8ebdc0000 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 1630 start_va = 0x7ff8ec0c0000 end_va = 0x7ff8ec21bfff entry_point = 0x7ff8ec0c0000 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\System32\\msctf.dll" (normalized: "c:\\windows\\system32\\msctf.dll") Region: id = 1631 start_va = 0x7ff8ec240000 end_va = 0x7ff8ec29afff entry_point = 0x7ff8ec240000 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 1632 start_va = 0x7ff8ec300000 end_va = 0x7ff8ec440fff entry_point = 0x7ff8ec300000 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll") Region: id = 1633 start_va = 0x7ff8ec450000 end_va = 0x7ff8ec575fff entry_point = 0x7ff8ec450000 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 1634 start_va = 0x7ff8ec580000 end_va = 0x7ff8edaa4fff entry_point = 0x7ff8ec580000 region_type = mapped_file name = "shell32.dll" filename = "\\Windows\\System32\\shell32.dll" (normalized: "c:\\windows\\system32\\shell32.dll") Region: id = 1635 start_va = 0x7ff8edb10000 end_va = 0x7ff8edbb4fff entry_point = 0x7ff8edb10000 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\System32\\clbcatq.dll" (normalized: "c:\\windows\\system32\\clbcatq.dll") Region: id = 1636 start_va = 0x7ff8edbc0000 end_va = 0x7ff8edd44fff entry_point = 0x7ff8edbc0000 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 1637 start_va = 0x7ff8edd50000 end_va = 0x7ff8edd56fff entry_point = 0x7ff8edd50000 region_type = mapped_file name = "normaliz.dll" filename = "\\Windows\\System32\\normaliz.dll" (normalized: "c:\\windows\\system32\\normaliz.dll") Region: id = 1638 start_va = 0x7ff8edd60000 end_va = 0x7ff8edfdbfff entry_point = 0x7ff8edd60000 region_type = mapped_file name = "combase.dll" filename = "\\Windows\\System32\\combase.dll" (normalized: "c:\\windows\\system32\\combase.dll") Region: id = 1639 start_va = 0x7ff8edfe0000 end_va = 0x7ff8ee030fff entry_point = 0x7ff8edfe0000 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\System32\\shlwapi.dll" (normalized: "c:\\windows\\system32\\shlwapi.dll") Region: id = 1640 start_va = 0x7ff8ee040000 end_va = 0x7ff8ee0a8fff entry_point = 0x7ff8ee040000 region_type = mapped_file name = "ws2_32.dll" filename = "\\Windows\\System32\\ws2_32.dll" (normalized: "c:\\windows\\system32\\ws2_32.dll") Region: id = 1641 start_va = 0x7ff8ee0b0000 end_va = 0x7ff8ee14cfff entry_point = 0x7ff8ee0b0000 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 1642 start_va = 0x7ff8ee150000 end_va = 0x7ff8ee185fff entry_point = 0x7ff8ee150000 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 1643 start_va = 0x7ff8ee190000 end_va = 0x7ff8ee235fff entry_point = 0x7ff8ee190000 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 1644 start_va = 0x7ff8ee240000 end_va = 0x7ff8ee247fff entry_point = 0x7ff8ee240000 region_type = mapped_file name = "psapi.dll" filename = "\\Windows\\System32\\psapi.dll" (normalized: "c:\\windows\\system32\\psapi.dll") Region: id = 1645 start_va = 0x7ff8ee250000 end_va = 0x7ff8ee257fff entry_point = 0x7ff8ee250000 region_type = mapped_file name = "nsi.dll" filename = "\\Windows\\System32\\nsi.dll" (normalized: "c:\\windows\\system32\\nsi.dll") Region: id = 1646 start_va = 0x7ff8ee2d0000 end_va = 0x7ff8ee37cfff entry_point = 0x7ff8ee2d0000 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 1647 start_va = 0x7ff8ee380000 end_va = 0x7ff8ee541fff entry_point = 0x7ff8ee380000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Thread: id = 417 os_tid = 0xc74 Thread: id = 418 os_tid = 0xb90 Thread: id = 419 os_tid = 0xc24 Thread: id = 420 os_tid = 0xaf8 Thread: id = 421 os_tid = 0xb60 Thread: id = 422 os_tid = 0x740 Thread: id = 423 os_tid = 0x72c Thread: id = 424 os_tid = 0x728 Thread: id = 425 os_tid = 0x71c Thread: id = 426 os_tid = 0x634 Thread: id = 427 os_tid = 0x5e4 Thread: id = 428 os_tid = 0x5d4 Thread: id = 429 os_tid = 0x544 Thread: id = 430 os_tid = 0x540 Thread: id = 431 os_tid = 0x538 Thread: id = 432 os_tid = 0x4ec Process: id = "22" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x426b5000" os_pid = "0x600" os_integrity_level = "0x4000" os_privileges = "0x260814080" monitor_reason = "child_process" parent_id = "10" os_parent_pid = "0x1e8" cmd_line = "C:\\Windows\\system32\\svchost.exe -k appmodel" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\EntAppSvc" [0xa], "NT SERVICE\\StateRepository" [0xa], "NT SERVICE\\tiledatamodelsvc" [0xe], "NT SERVICE\\WalletService" [0xa], "NT AUTHORITY\\Logon Session 00000000:00015b86" [0xc000000f], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Region: id = 2852 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 2853 start_va = 0x5120a40000 end_va = 0x5120a4ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000005120a40000" filename = "" Region: id = 2854 start_va = 0x5120a50000 end_va = 0x5120a50fff entry_point = 0x5120a50000 region_type = mapped_file name = "svchost.exe.mui" filename = "\\Windows\\System32\\en-US\\svchost.exe.mui" (normalized: "c:\\windows\\system32\\en-us\\svchost.exe.mui") Region: id = 2855 start_va = 0x5120a60000 end_va = 0x5120a73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000005120a60000" filename = "" Region: id = 2856 start_va = 0x5120a80000 end_va = 0x5120afffff entry_point = 0x0 region_type = private name = "private_0x0000005120a80000" filename = "" Region: id = 2857 start_va = 0x5120b00000 end_va = 0x5120b03fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000005120b00000" filename = "" Region: id = 2858 start_va = 0x5120b10000 end_va = 0x5120b10fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000005120b10000" filename = "" Region: id = 2859 start_va = 0x5120b20000 end_va = 0x5120b21fff entry_point = 0x0 region_type = private name = "private_0x0000005120b20000" filename = "" Region: id = 2860 start_va = 0x5120b30000 end_va = 0x5120b30fff entry_point = 0x0 region_type = private name = "private_0x0000005120b30000" filename = "" Region: id = 2861 start_va = 0x5120b40000 end_va = 0x5120b46fff entry_point = 0x0 region_type = private name = "private_0x0000005120b40000" filename = "" Region: id = 2862 start_va = 0x5120b50000 end_va = 0x5120b5ffff entry_point = 0x5120b50000 region_type = mapped_file name = "vedatamodel.edb" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\vedatamodel.edb" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\tiledatalayer\\database\\vedatamodel.edb") Region: id = 2863 start_va = 0x5120b60000 end_va = 0x5120b6ffff entry_point = 0x5120b60000 region_type = mapped_file name = "vedatamodel.edb" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\vedatamodel.edb" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\tiledatalayer\\database\\vedatamodel.edb") Region: id = 2864 start_va = 0x5120b70000 end_va = 0x5120b7ffff entry_point = 0x5120b70000 region_type = mapped_file name = "vedatamodel.edb" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\vedatamodel.edb" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\tiledatalayer\\database\\vedatamodel.edb") Region: id = 2865 start_va = 0x5120b80000 end_va = 0x5120b8ffff entry_point = 0x5120b80000 region_type = mapped_file name = "vedatamodel.edb" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\vedatamodel.edb" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\tiledatalayer\\database\\vedatamodel.edb") Region: id = 2866 start_va = 0x5120b90000 end_va = 0x5120b9ffff entry_point = 0x5120b90000 region_type = mapped_file name = "vedatamodel.edb" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\vedatamodel.edb" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\tiledatalayer\\database\\vedatamodel.edb") Region: id = 2867 start_va = 0x5120ba0000 end_va = 0x5120baffff entry_point = 0x5120ba0000 region_type = mapped_file name = "vedatamodel.edb" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\vedatamodel.edb" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\tiledatalayer\\database\\vedatamodel.edb") Region: id = 2868 start_va = 0x5120bb0000 end_va = 0x5120bbffff entry_point = 0x5120bb0000 region_type = mapped_file name = "vedatamodel.edb" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\vedatamodel.edb" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\tiledatalayer\\database\\vedatamodel.edb") Region: id = 2869 start_va = 0x5120bc0000 end_va = 0x5120bcffff entry_point = 0x5120bc0000 region_type = mapped_file name = "vedatamodel.edb" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\vedatamodel.edb" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\tiledatalayer\\database\\vedatamodel.edb") Region: id = 2870 start_va = 0x5120bd0000 end_va = 0x5120bd0fff entry_point = 0x0 region_type = private name = "private_0x0000005120bd0000" filename = "" Region: id = 2871 start_va = 0x5120be0000 end_va = 0x5120be0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000005120be0000" filename = "" Region: id = 2872 start_va = 0x5120bf0000 end_va = 0x5120bfffff entry_point = 0x5120bf0000 region_type = mapped_file name = "vedatamodel.edb" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\vedatamodel.edb" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\tiledatalayer\\database\\vedatamodel.edb") Region: id = 2873 start_va = 0x5120c00000 end_va = 0x5120cfffff entry_point = 0x0 region_type = private name = "private_0x0000005120c00000" filename = "" Region: id = 2874 start_va = 0x5120d00000 end_va = 0x5120dbdfff entry_point = 0x5120d00000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 2875 start_va = 0x5120dc0000 end_va = 0x5120e7ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000005120dc0000" filename = "" Region: id = 2876 start_va = 0x5120e80000 end_va = 0x5120e87fff entry_point = 0x5120e80000 region_type = mapped_file name = "staterepository-machine.srd-shm" filename = "\\ProgramData\\Microsoft\\Windows\\AppRepository\\StateRepository-Machine.srd-shm" (normalized: "c:\\programdata\\microsoft\\windows\\apprepository\\staterepository-machine.srd-shm") Region: id = 2877 start_va = 0x5120e90000 end_va = 0x5120e90fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000005120e90000" filename = "" Region: id = 2878 start_va = 0x5120ea0000 end_va = 0x5120ea0fff entry_point = 0x0 region_type = private name = "private_0x0000005120ea0000" filename = "" Region: id = 2879 start_va = 0x5120eb0000 end_va = 0x5120eb0fff entry_point = 0x0 region_type = private name = "private_0x0000005120eb0000" filename = "" Region: id = 2880 start_va = 0x5120ec0000 end_va = 0x5120ecffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000005120ec0000" filename = "" Region: id = 2881 start_va = 0x5120ed0000 end_va = 0x5120edffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000005120ed0000" filename = "" Region: id = 2882 start_va = 0x5120ee0000 end_va = 0x5120eeffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000005120ee0000" filename = "" Region: id = 2883 start_va = 0x5120ef0000 end_va = 0x5120efffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000005120ef0000" filename = "" Region: id = 2884 start_va = 0x5120f00000 end_va = 0x5120f00fff entry_point = 0x0 region_type = private name = "private_0x0000005120f00000" filename = "" Region: id = 2885 start_va = 0x5120f10000 end_va = 0x5120f10fff entry_point = 0x0 region_type = private name = "private_0x0000005120f10000" filename = "" Region: id = 2886 start_va = 0x5120f20000 end_va = 0x5120f20fff entry_point = 0x0 region_type = private name = "private_0x0000005120f20000" filename = "" Region: id = 2887 start_va = 0x5120f30000 end_va = 0x5120f36fff entry_point = 0x0 region_type = private name = "private_0x0000005120f30000" filename = "" Region: id = 2888 start_va = 0x5120f40000 end_va = 0x5120f4ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000005120f40000" filename = "" Region: id = 2889 start_va = 0x5120f50000 end_va = 0x5120f5ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000005120f50000" filename = "" Region: id = 2890 start_va = 0x5120f60000 end_va = 0x5120f6ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000005120f60000" filename = "" Region: id = 2891 start_va = 0x5120f70000 end_va = 0x5120f7ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000005120f70000" filename = "" Region: id = 2892 start_va = 0x5120f80000 end_va = 0x5120f83fff entry_point = 0x0 region_type = private name = "private_0x0000005120f80000" filename = "" Region: id = 2893 start_va = 0x5120f90000 end_va = 0x5120f91fff entry_point = 0x0 region_type = private name = "private_0x0000005120f90000" filename = "" Region: id = 2894 start_va = 0x5120fa0000 end_va = 0x5120fa0fff entry_point = 0x0 region_type = private name = "private_0x0000005120fa0000" filename = "" Region: id = 2895 start_va = 0x5120fb0000 end_va = 0x5120fb0fff entry_point = 0x0 region_type = private name = "private_0x0000005120fb0000" filename = "" Region: id = 2896 start_va = 0x5120fc0000 end_va = 0x5120fdffff entry_point = 0x0 region_type = private name = "private_0x0000005120fc0000" filename = "" Region: id = 2897 start_va = 0x5120fe0000 end_va = 0x5120feffff entry_point = 0x5120fe0000 region_type = mapped_file name = "vedatamodel.edb" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\vedatamodel.edb" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\tiledatalayer\\database\\vedatamodel.edb") Region: id = 2898 start_va = 0x5120ff0000 end_va = 0x5120ffffff entry_point = 0x5120ff0000 region_type = mapped_file name = "vedatamodel.edb" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\vedatamodel.edb" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\tiledatalayer\\database\\vedatamodel.edb") Region: id = 2899 start_va = 0x5121000000 end_va = 0x51210fffff entry_point = 0x0 region_type = private name = "private_0x0000005121000000" filename = "" Region: id = 2900 start_va = 0x5121100000 end_va = 0x5121287fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000005121100000" filename = "" Region: id = 2901 start_va = 0x5121290000 end_va = 0x5121410fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000005121290000" filename = "" Region: id = 2902 start_va = 0x5121420000 end_va = 0x512151ffff entry_point = 0x0 region_type = private name = "private_0x0000005121420000" filename = "" Region: id = 2903 start_va = 0x5121520000 end_va = 0x512161ffff entry_point = 0x0 region_type = private name = "private_0x0000005121520000" filename = "" Region: id = 2904 start_va = 0x5121620000 end_va = 0x5121956fff entry_point = 0x5121620000 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 2905 start_va = 0x5121960000 end_va = 0x5121a5ffff entry_point = 0x0 region_type = private name = "private_0x0000005121960000" filename = "" Region: id = 2906 start_va = 0x5121a60000 end_va = 0x5121b5ffff entry_point = 0x0 region_type = private name = "private_0x0000005121a60000" filename = "" Region: id = 2907 start_va = 0x5121b60000 end_va = 0x5121c5ffff entry_point = 0x0 region_type = private name = "private_0x0000005121b60000" filename = "" Region: id = 2908 start_va = 0x5121c60000 end_va = 0x5121d5ffff entry_point = 0x0 region_type = private name = "private_0x0000005121c60000" filename = "" Region: id = 2909 start_va = 0x5121d60000 end_va = 0x5122d5ffff entry_point = 0x0 region_type = private name = "private_0x0000005121d60000" filename = "" Region: id = 2910 start_va = 0x5122d60000 end_va = 0x5132d5ffff entry_point = 0x0 region_type = private name = "private_0x0000005122d60000" filename = "" Region: id = 2911 start_va = 0x5132d60000 end_va = 0x5142d5ffff entry_point = 0x0 region_type = private name = "private_0x0000005132d60000" filename = "" Region: id = 2912 start_va = 0x5142d60000 end_va = 0x5142d6ffff entry_point = 0x5142d60000 region_type = mapped_file name = "vedatamodel.edb" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\vedatamodel.edb" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\tiledatalayer\\database\\vedatamodel.edb") Region: id = 2913 start_va = 0x5142d70000 end_va = 0x5142d7ffff entry_point = 0x5142d70000 region_type = mapped_file name = "vedatamodel.edb" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\vedatamodel.edb" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\tiledatalayer\\database\\vedatamodel.edb") Region: id = 2914 start_va = 0x5142d80000 end_va = 0x5142d8ffff entry_point = 0x5142d80000 region_type = mapped_file name = "vedatamodel.edb" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\vedatamodel.edb" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\tiledatalayer\\database\\vedatamodel.edb") Region: id = 2915 start_va = 0x5142d90000 end_va = 0x5142d9ffff entry_point = 0x5142d90000 region_type = mapped_file name = "vedatamodel.edb" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\vedatamodel.edb" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\tiledatalayer\\database\\vedatamodel.edb") Region: id = 2916 start_va = 0x5142da0000 end_va = 0x5142daffff entry_point = 0x5142da0000 region_type = mapped_file name = "vedatamodel.edb" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\vedatamodel.edb" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\tiledatalayer\\database\\vedatamodel.edb") Region: id = 2917 start_va = 0x5142db0000 end_va = 0x5142dbffff entry_point = 0x5142db0000 region_type = mapped_file name = "vedatamodel.edb" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\vedatamodel.edb" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\tiledatalayer\\database\\vedatamodel.edb") Region: id = 2918 start_va = 0x5142dc0000 end_va = 0x5142dcffff entry_point = 0x5142dc0000 region_type = mapped_file name = "vedatamodel.edb" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\vedatamodel.edb" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\tiledatalayer\\database\\vedatamodel.edb") Region: id = 2919 start_va = 0x5142dd0000 end_va = 0x5142ddffff entry_point = 0x5142dd0000 region_type = mapped_file name = "vedatamodel.edb" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\vedatamodel.edb" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\tiledatalayer\\database\\vedatamodel.edb") Region: id = 2920 start_va = 0x5142de0000 end_va = 0x5142deffff entry_point = 0x5142de0000 region_type = mapped_file name = "vedatamodel.edb" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\vedatamodel.edb" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\tiledatalayer\\database\\vedatamodel.edb") Region: id = 2921 start_va = 0x5142e30000 end_va = 0x5142eaffff entry_point = 0x0 region_type = private name = "private_0x0000005142e30000" filename = "" Region: id = 2922 start_va = 0x5142ec0000 end_va = 0x5142ec0fff entry_point = 0x0 region_type = private name = "private_0x0000005142ec0000" filename = "" Region: id = 2923 start_va = 0x5142ed0000 end_va = 0x5142edffff entry_point = 0x5142ed0000 region_type = mapped_file name = "vedatamodel.edb" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\vedatamodel.edb" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\tiledatalayer\\database\\vedatamodel.edb") Region: id = 2924 start_va = 0x5142ee0000 end_va = 0x5142eeffff entry_point = 0x5142ee0000 region_type = mapped_file name = "vedatamodel.edb" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\vedatamodel.edb" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\tiledatalayer\\database\\vedatamodel.edb") Region: id = 2925 start_va = 0x5142ef0000 end_va = 0x5142efffff entry_point = 0x5142ef0000 region_type = mapped_file name = "vedatamodel.edb" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\vedatamodel.edb" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\tiledatalayer\\database\\vedatamodel.edb") Region: id = 2926 start_va = 0x5142f00000 end_va = 0x5142f0ffff entry_point = 0x5142f00000 region_type = mapped_file name = "vedatamodel.edb" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\vedatamodel.edb" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\tiledatalayer\\database\\vedatamodel.edb") Region: id = 2927 start_va = 0x5142f10000 end_va = 0x5142f1ffff entry_point = 0x5142f10000 region_type = mapped_file name = "vedatamodel.edb" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\vedatamodel.edb" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\tiledatalayer\\database\\vedatamodel.edb") Region: id = 2928 start_va = 0x5142f20000 end_va = 0x5142f2ffff entry_point = 0x5142f20000 region_type = mapped_file name = "vedatamodel.edb" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\vedatamodel.edb" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\tiledatalayer\\database\\vedatamodel.edb") Region: id = 2929 start_va = 0x5142f30000 end_va = 0x5142f3ffff entry_point = 0x5142f30000 region_type = mapped_file name = "vedatamodel.edb" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\vedatamodel.edb" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\tiledatalayer\\database\\vedatamodel.edb") Region: id = 2930 start_va = 0x5142f40000 end_va = 0x5142f4ffff entry_point = 0x5142f40000 region_type = mapped_file name = "vedatamodel.edb" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\vedatamodel.edb" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\tiledatalayer\\database\\vedatamodel.edb") Region: id = 2931 start_va = 0x5142f50000 end_va = 0x5142f5ffff entry_point = 0x5142f50000 region_type = mapped_file name = "vedatamodel.edb" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\vedatamodel.edb" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\tiledatalayer\\database\\vedatamodel.edb") Region: id = 2932 start_va = 0x5142f60000 end_va = 0x5142f6ffff entry_point = 0x5142f60000 region_type = mapped_file name = "vedatamodel.edb" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\vedatamodel.edb" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\tiledatalayer\\database\\vedatamodel.edb") Region: id = 2933 start_va = 0x5142f70000 end_va = 0x5142f7ffff entry_point = 0x5142f70000 region_type = mapped_file name = "vedatamodel.edb" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\vedatamodel.edb" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\tiledatalayer\\database\\vedatamodel.edb") Region: id = 2934 start_va = 0x5142f80000 end_va = 0x5142f8ffff entry_point = 0x5142f80000 region_type = mapped_file name = "vedatamodel.edb" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\vedatamodel.edb" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\tiledatalayer\\database\\vedatamodel.edb") Region: id = 2935 start_va = 0x5142f90000 end_va = 0x5142f9ffff entry_point = 0x5142f90000 region_type = mapped_file name = "vedatamodel.edb" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\vedatamodel.edb" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\tiledatalayer\\database\\vedatamodel.edb") Region: id = 2936 start_va = 0x5142fa0000 end_va = 0x5142faffff entry_point = 0x5142fa0000 region_type = mapped_file name = "vedatamodel.edb" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\vedatamodel.edb" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\tiledatalayer\\database\\vedatamodel.edb") Region: id = 2937 start_va = 0x5142fb0000 end_va = 0x5142fbffff entry_point = 0x5142fb0000 region_type = mapped_file name = "vedatamodel.edb" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\vedatamodel.edb" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\tiledatalayer\\database\\vedatamodel.edb") Region: id = 2938 start_va = 0x5142fc0000 end_va = 0x5142fcffff entry_point = 0x5142fc0000 region_type = mapped_file name = "vedatamodel.edb" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\vedatamodel.edb" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\tiledatalayer\\database\\vedatamodel.edb") Region: id = 2939 start_va = 0x5142fd0000 end_va = 0x5142fdffff entry_point = 0x5142fd0000 region_type = mapped_file name = "vedatamodel.edb" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\vedatamodel.edb" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\tiledatalayer\\database\\vedatamodel.edb") Region: id = 2940 start_va = 0x5142fe0000 end_va = 0x5142feffff entry_point = 0x5142fe0000 region_type = mapped_file name = "vedatamodel.edb" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\vedatamodel.edb" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\tiledatalayer\\database\\vedatamodel.edb") Region: id = 2941 start_va = 0x5142ff0000 end_va = 0x5142ffffff entry_point = 0x5142ff0000 region_type = mapped_file name = "vedatamodel.edb" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\vedatamodel.edb" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\tiledatalayer\\database\\vedatamodel.edb") Region: id = 2942 start_va = 0x5143000000 end_va = 0x514300ffff entry_point = 0x5143000000 region_type = mapped_file name = "vedatamodel.edb" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\vedatamodel.edb" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\tiledatalayer\\database\\vedatamodel.edb") Region: id = 2943 start_va = 0x5143010000 end_va = 0x514301ffff entry_point = 0x5143010000 region_type = mapped_file name = "vedatamodel.edb" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\vedatamodel.edb" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\tiledatalayer\\database\\vedatamodel.edb") Region: id = 2944 start_va = 0x5143020000 end_va = 0x514302ffff entry_point = 0x5143020000 region_type = mapped_file name = "vedatamodel.edb" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\vedatamodel.edb" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\tiledatalayer\\database\\vedatamodel.edb") Region: id = 2945 start_va = 0x5143030000 end_va = 0x514303ffff entry_point = 0x5143030000 region_type = mapped_file name = "vedatamodel.edb" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\vedatamodel.edb" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\tiledatalayer\\database\\vedatamodel.edb") Region: id = 2946 start_va = 0x5143040000 end_va = 0x514304ffff entry_point = 0x5143040000 region_type = mapped_file name = "vedatamodel.edb" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\vedatamodel.edb" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\tiledatalayer\\database\\vedatamodel.edb") Region: id = 2947 start_va = 0x5143050000 end_va = 0x514305ffff entry_point = 0x5143050000 region_type = mapped_file name = "vedatamodel.edb" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\vedatamodel.edb" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\tiledatalayer\\database\\vedatamodel.edb") Region: id = 2948 start_va = 0x5143060000 end_va = 0x514306ffff entry_point = 0x5143060000 region_type = mapped_file name = "vedatamodel.edb" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\vedatamodel.edb" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\tiledatalayer\\database\\vedatamodel.edb") Region: id = 2949 start_va = 0x5143070000 end_va = 0x514307ffff entry_point = 0x5143070000 region_type = mapped_file name = "vedatamodel.edb" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\vedatamodel.edb" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\tiledatalayer\\database\\vedatamodel.edb") Region: id = 2950 start_va = 0x5143080000 end_va = 0x51430a9fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000005143080000" filename = "" Region: id = 2951 start_va = 0x51430b0000 end_va = 0x51430bffff entry_point = 0x51430b0000 region_type = mapped_file name = "vedatamodel.edb" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\vedatamodel.edb" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\tiledatalayer\\database\\vedatamodel.edb") Region: id = 2952 start_va = 0x51430c0000 end_va = 0x51430cffff entry_point = 0x51430c0000 region_type = mapped_file name = "vedatamodel.edb" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\vedatamodel.edb" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\tiledatalayer\\database\\vedatamodel.edb") Region: id = 2953 start_va = 0x51430d0000 end_va = 0x51430dffff entry_point = 0x51430d0000 region_type = mapped_file name = "vedatamodel.edb" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\vedatamodel.edb" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\tiledatalayer\\database\\vedatamodel.edb") Region: id = 2954 start_va = 0x51430e0000 end_va = 0x51430effff entry_point = 0x51430e0000 region_type = mapped_file name = "vedatamodel.edb" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\vedatamodel.edb" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\tiledatalayer\\database\\vedatamodel.edb") Region: id = 2955 start_va = 0x51430f0000 end_va = 0x51430fffff entry_point = 0x51430f0000 region_type = mapped_file name = "vedatamodel.edb" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\vedatamodel.edb" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\tiledatalayer\\database\\vedatamodel.edb") Region: id = 2956 start_va = 0x5143100000 end_va = 0x514310ffff entry_point = 0x5143100000 region_type = mapped_file name = "vedatamodel.edb" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\vedatamodel.edb" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\tiledatalayer\\database\\vedatamodel.edb") Region: id = 2957 start_va = 0x5143110000 end_va = 0x514320ffff entry_point = 0x0 region_type = private name = "private_0x0000005143110000" filename = "" Region: id = 2958 start_va = 0x5143210000 end_va = 0x514321ffff entry_point = 0x5143210000 region_type = mapped_file name = "vedatamodel.edb" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\vedatamodel.edb" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\tiledatalayer\\database\\vedatamodel.edb") Region: id = 2959 start_va = 0x5143220000 end_va = 0x514322ffff entry_point = 0x5143220000 region_type = mapped_file name = "vedatamodel.edb" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\vedatamodel.edb" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\tiledatalayer\\database\\vedatamodel.edb") Region: id = 2960 start_va = 0x5143230000 end_va = 0x514323ffff entry_point = 0x5143230000 region_type = mapped_file name = "vedatamodel.edb" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\vedatamodel.edb" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\tiledatalayer\\database\\vedatamodel.edb") Region: id = 2961 start_va = 0x5143240000 end_va = 0x514324ffff entry_point = 0x5143240000 region_type = mapped_file name = "vedatamodel.edb" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\vedatamodel.edb" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\tiledatalayer\\database\\vedatamodel.edb") Region: id = 2962 start_va = 0x5143250000 end_va = 0x514325ffff entry_point = 0x5143250000 region_type = mapped_file name = "vedatamodel.edb" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\vedatamodel.edb" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\tiledatalayer\\database\\vedatamodel.edb") Region: id = 2963 start_va = 0x5143260000 end_va = 0x514326ffff entry_point = 0x5143260000 region_type = mapped_file name = "vedatamodel.edb" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\vedatamodel.edb" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\tiledatalayer\\database\\vedatamodel.edb") Region: id = 2964 start_va = 0x5143270000 end_va = 0x514327ffff entry_point = 0x5143270000 region_type = mapped_file name = "vedatamodel.edb" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\vedatamodel.edb" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\tiledatalayer\\database\\vedatamodel.edb") Region: id = 2965 start_va = 0x5143280000 end_va = 0x514328ffff entry_point = 0x5143280000 region_type = mapped_file name = "vedatamodel.edb" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\vedatamodel.edb" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\tiledatalayer\\database\\vedatamodel.edb") Region: id = 2966 start_va = 0x5143290000 end_va = 0x514329ffff entry_point = 0x5143290000 region_type = mapped_file name = "vedatamodel.edb" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\vedatamodel.edb" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\tiledatalayer\\database\\vedatamodel.edb") Region: id = 2967 start_va = 0x51432a0000 end_va = 0x51432affff entry_point = 0x51432a0000 region_type = mapped_file name = "vedatamodel.edb" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\vedatamodel.edb" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\tiledatalayer\\database\\vedatamodel.edb") Region: id = 2968 start_va = 0x51432b0000 end_va = 0x51432bffff entry_point = 0x51432b0000 region_type = mapped_file name = "vedatamodel.edb" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\vedatamodel.edb" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\tiledatalayer\\database\\vedatamodel.edb") Region: id = 2969 start_va = 0x51432c0000 end_va = 0x51432cffff entry_point = 0x51432c0000 region_type = mapped_file name = "vedatamodel.edb" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\vedatamodel.edb" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\tiledatalayer\\database\\vedatamodel.edb") Region: id = 2970 start_va = 0x51432d0000 end_va = 0x51432dffff entry_point = 0x51432d0000 region_type = mapped_file name = "vedatamodel.edb" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\vedatamodel.edb" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\tiledatalayer\\database\\vedatamodel.edb") Region: id = 2971 start_va = 0x51432e0000 end_va = 0x51432effff entry_point = 0x51432e0000 region_type = mapped_file name = "vedatamodel.edb" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\vedatamodel.edb" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\tiledatalayer\\database\\vedatamodel.edb") Region: id = 2972 start_va = 0x51432f0000 end_va = 0x51432f0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000051432f0000" filename = "" Region: id = 2973 start_va = 0x5143300000 end_va = 0x51433fffff entry_point = 0x0 region_type = private name = "private_0x0000005143300000" filename = "" Region: id = 2974 start_va = 0x5143400000 end_va = 0x514340ffff entry_point = 0x5143400000 region_type = mapped_file name = "vedatamodel.edb" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\vedatamodel.edb" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\tiledatalayer\\database\\vedatamodel.edb") Region: id = 2975 start_va = 0x5143410000 end_va = 0x514341ffff entry_point = 0x5143410000 region_type = mapped_file name = "vedatamodel.edb" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\vedatamodel.edb" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\tiledatalayer\\database\\vedatamodel.edb") Region: id = 2976 start_va = 0x5143420000 end_va = 0x514342ffff entry_point = 0x5143420000 region_type = mapped_file name = "vedatamodel.edb" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\vedatamodel.edb" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\tiledatalayer\\database\\vedatamodel.edb") Region: id = 2977 start_va = 0x5143430000 end_va = 0x514352ffff entry_point = 0x0 region_type = private name = "private_0x0000005143430000" filename = "" Region: id = 2978 start_va = 0x5143530000 end_va = 0x514353ffff entry_point = 0x5143530000 region_type = mapped_file name = "vedatamodel.edb" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\vedatamodel.edb" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\tiledatalayer\\database\\vedatamodel.edb") Region: id = 2979 start_va = 0x5143540000 end_va = 0x514354ffff entry_point = 0x5143540000 region_type = mapped_file name = "vedatamodel.edb" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\vedatamodel.edb" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\tiledatalayer\\database\\vedatamodel.edb") Region: id = 2980 start_va = 0x5143550000 end_va = 0x514355ffff entry_point = 0x5143550000 region_type = mapped_file name = "vedatamodel.edb" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\vedatamodel.edb" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\tiledatalayer\\database\\vedatamodel.edb") Region: id = 2981 start_va = 0x5143560000 end_va = 0x514356ffff entry_point = 0x5143560000 region_type = mapped_file name = "vedatamodel.edb" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\vedatamodel.edb" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\tiledatalayer\\database\\vedatamodel.edb") Region: id = 2982 start_va = 0x5143570000 end_va = 0x514357ffff entry_point = 0x5143570000 region_type = mapped_file name = "vedatamodel.edb" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\vedatamodel.edb" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\tiledatalayer\\database\\vedatamodel.edb") Region: id = 2983 start_va = 0x5143580000 end_va = 0x514358ffff entry_point = 0x5143580000 region_type = mapped_file name = "vedatamodel.edb" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\vedatamodel.edb" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\tiledatalayer\\database\\vedatamodel.edb") Region: id = 2984 start_va = 0x5143590000 end_va = 0x514359ffff entry_point = 0x5143590000 region_type = mapped_file name = "vedatamodel.edb" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\vedatamodel.edb" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\tiledatalayer\\database\\vedatamodel.edb") Region: id = 2985 start_va = 0x51435a0000 end_va = 0x51435affff entry_point = 0x51435a0000 region_type = mapped_file name = "vedatamodel.edb" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\vedatamodel.edb" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\tiledatalayer\\database\\vedatamodel.edb") Region: id = 2986 start_va = 0x51435b0000 end_va = 0x51435bffff entry_point = 0x51435b0000 region_type = mapped_file name = "vedatamodel.edb" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\vedatamodel.edb" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\tiledatalayer\\database\\vedatamodel.edb") Region: id = 2987 start_va = 0x51435c0000 end_va = 0x51435cffff entry_point = 0x51435c0000 region_type = mapped_file name = "vedatamodel.edb" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\vedatamodel.edb" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\tiledatalayer\\database\\vedatamodel.edb") Region: id = 2988 start_va = 0x51435d0000 end_va = 0x51435dffff entry_point = 0x51435d0000 region_type = mapped_file name = "vedatamodel.edb" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\vedatamodel.edb" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\tiledatalayer\\database\\vedatamodel.edb") Region: id = 2989 start_va = 0x51435e0000 end_va = 0x51435effff entry_point = 0x51435e0000 region_type = mapped_file name = "vedatamodel.edb" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\vedatamodel.edb" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\tiledatalayer\\database\\vedatamodel.edb") Region: id = 2990 start_va = 0x51435f0000 end_va = 0x51435fffff entry_point = 0x51435f0000 region_type = mapped_file name = "vedatamodel.edb" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\vedatamodel.edb" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\tiledatalayer\\database\\vedatamodel.edb") Region: id = 2991 start_va = 0x5143600000 end_va = 0x5143600fff entry_point = 0x0 region_type = private name = "private_0x0000005143600000" filename = "" Region: id = 2992 start_va = 0x5143610000 end_va = 0x514361ffff entry_point = 0x5143610000 region_type = mapped_file name = "vedatamodel.edb" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\vedatamodel.edb" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\tiledatalayer\\database\\vedatamodel.edb") Region: id = 2993 start_va = 0x5143620000 end_va = 0x514362ffff entry_point = 0x5143620000 region_type = mapped_file name = "vedatamodel.edb" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\vedatamodel.edb" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\tiledatalayer\\database\\vedatamodel.edb") Region: id = 2994 start_va = 0x5143650000 end_va = 0x514365ffff entry_point = 0x5143650000 region_type = mapped_file name = "vedatamodel.edb" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\vedatamodel.edb" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\tiledatalayer\\database\\vedatamodel.edb") Region: id = 2995 start_va = 0x5143660000 end_va = 0x514366ffff entry_point = 0x5143660000 region_type = mapped_file name = "vedatamodel.edb" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\vedatamodel.edb" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\tiledatalayer\\database\\vedatamodel.edb") Region: id = 2996 start_va = 0x5143700000 end_va = 0x51437fffff entry_point = 0x0 region_type = private name = "private_0x0000005143700000" filename = "" Region: id = 2997 start_va = 0x7df5ff480000 end_va = 0x7ff5ff47ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007df5ff480000" filename = "" Region: id = 2998 start_va = 0x7ff6733d8000 end_va = 0x7ff6733d9fff entry_point = 0x0 region_type = private name = "private_0x00007ff6733d8000" filename = "" Region: id = 2999 start_va = 0x7ff6733da000 end_va = 0x7ff6733dbfff entry_point = 0x0 region_type = private name = "private_0x00007ff6733da000" filename = "" Region: id = 3000 start_va = 0x7ff6733dc000 end_va = 0x7ff6733ddfff entry_point = 0x0 region_type = private name = "private_0x00007ff6733dc000" filename = "" Region: id = 3001 start_va = 0x7ff6733de000 end_va = 0x7ff6733dffff entry_point = 0x0 region_type = private name = "private_0x00007ff6733de000" filename = "" Region: id = 3002 start_va = 0x7ff6733e0000 end_va = 0x7ff6734dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007ff6733e0000" filename = "" Region: id = 3003 start_va = 0x7ff6734e0000 end_va = 0x7ff673502fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007ff6734e0000" filename = "" Region: id = 3004 start_va = 0x7ff673503000 end_va = 0x7ff673504fff entry_point = 0x0 region_type = private name = "private_0x00007ff673503000" filename = "" Region: id = 3005 start_va = 0x7ff673505000 end_va = 0x7ff673506fff entry_point = 0x0 region_type = private name = "private_0x00007ff673505000" filename = "" Region: id = 3006 start_va = 0x7ff673507000 end_va = 0x7ff673508fff entry_point = 0x0 region_type = private name = "private_0x00007ff673507000" filename = "" Region: id = 3007 start_va = 0x7ff673509000 end_va = 0x7ff67350afff entry_point = 0x0 region_type = private name = "private_0x00007ff673509000" filename = "" Region: id = 3008 start_va = 0x7ff67350b000 end_va = 0x7ff67350bfff entry_point = 0x0 region_type = private name = "private_0x00007ff67350b000" filename = "" Region: id = 3009 start_va = 0x7ff67350e000 end_va = 0x7ff67350ffff entry_point = 0x0 region_type = private name = "private_0x00007ff67350e000" filename = "" Region: id = 3010 start_va = 0x7ff673b40000 end_va = 0x7ff673b4cfff entry_point = 0x7ff673b40000 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 3011 start_va = 0x7ff8dc6e0000 end_va = 0x7ff8dc778fff entry_point = 0x7ff8dc6e0000 region_type = mapped_file name = "staterepository.core.dll" filename = "\\Windows\\System32\\StateRepository.Core.dll" (normalized: "c:\\windows\\system32\\staterepository.core.dll") Region: id = 3012 start_va = 0x7ff8dc780000 end_va = 0x7ff8dca11fff entry_point = 0x7ff8dc780000 region_type = mapped_file name = "windows.staterepository.dll" filename = "\\Windows\\System32\\Windows.StateRepository.dll" (normalized: "c:\\windows\\system32\\windows.staterepository.dll") Region: id = 3013 start_va = 0x7ff8df640000 end_va = 0x7ff8dfaa9fff entry_point = 0x7ff8df640000 region_type = mapped_file name = "actxprxy.dll" filename = "\\Windows\\System32\\actxprxy.dll" (normalized: "c:\\windows\\system32\\actxprxy.dll") Region: id = 3014 start_va = 0x7ff8e0a60000 end_va = 0x7ff8e0bf6fff entry_point = 0x7ff8e0a60000 region_type = mapped_file name = "urlmon.dll" filename = "\\Windows\\System32\\urlmon.dll" (normalized: "c:\\windows\\system32\\urlmon.dll") Region: id = 3015 start_va = 0x7ff8e0c00000 end_va = 0x7ff8e0c80fff entry_point = 0x7ff8e0c00000 region_type = mapped_file name = "tileobjserver.dll" filename = "\\Windows\\System32\\tileobjserver.dll" (normalized: "c:\\windows\\system32\\tileobjserver.dll") Region: id = 3016 start_va = 0x7ff8e1940000 end_va = 0x7ff8e1c21fff entry_point = 0x7ff8e1940000 region_type = mapped_file name = "esent.dll" filename = "\\Windows\\System32\\esent.dll" (normalized: "c:\\windows\\system32\\esent.dll") Region: id = 3017 start_va = 0x7ff8e3c30000 end_va = 0x7ff8e3fa5fff entry_point = 0x7ff8e3c30000 region_type = mapped_file name = "iertutil.dll" filename = "\\Windows\\System32\\iertutil.dll" (normalized: "c:\\windows\\system32\\iertutil.dll") Region: id = 3018 start_va = 0x7ff8e5050000 end_va = 0x7ff8e515efff entry_point = 0x7ff8e5050000 region_type = mapped_file name = "mrmcorer.dll" filename = "\\Windows\\System32\\MrmCoreR.dll" (normalized: "c:\\windows\\system32\\mrmcorer.dll") Region: id = 3019 start_va = 0x7ff8e8ad0000 end_va = 0x7ff8e8ae2fff entry_point = 0x7ff8e8ad0000 region_type = mapped_file name = "wtsapi32.dll" filename = "\\Windows\\System32\\wtsapi32.dll" (normalized: "c:\\windows\\system32\\wtsapi32.dll") Region: id = 3020 start_va = 0x7ff8e8af0000 end_va = 0x7ff8e8b55fff entry_point = 0x7ff8e8af0000 region_type = mapped_file name = "bcp47langs.dll" filename = "\\Windows\\System32\\BCP47Langs.dll" (normalized: "c:\\windows\\system32\\bcp47langs.dll") Region: id = 3021 start_va = 0x7ff8ea270000 end_va = 0x7ff8ea2a2fff entry_point = 0x7ff8ea270000 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\System32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll") Region: id = 3022 start_va = 0x7ff8ea360000 end_va = 0x7ff8ea37efff entry_point = 0x7ff8ea360000 region_type = mapped_file name = "userenv.dll" filename = "\\Windows\\System32\\userenv.dll" (normalized: "c:\\windows\\system32\\userenv.dll") Region: id = 3023 start_va = 0x7ff8ea620000 end_va = 0x7ff8ea636fff entry_point = 0x7ff8ea620000 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\System32\\cryptsp.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll") Region: id = 3024 start_va = 0x7ff8ea790000 end_va = 0x7ff8ea79afff entry_point = 0x7ff8ea790000 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\System32\\cryptbase.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll") Region: id = 3025 start_va = 0x7ff8ea820000 end_va = 0x7ff8ea877fff entry_point = 0x7ff8ea820000 region_type = mapped_file name = "winsta.dll" filename = "\\Windows\\System32\\winsta.dll" (normalized: "c:\\windows\\system32\\winsta.dll") Region: id = 3026 start_va = 0x7ff8ea9d0000 end_va = 0x7ff8ea9fbfff entry_point = 0x7ff8ea9d0000 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\System32\\sspicli.dll" (normalized: "c:\\windows\\system32\\sspicli.dll") Region: id = 3027 start_va = 0x7ff8eabd0000 end_va = 0x7ff8eabf7fff entry_point = 0x7ff8eabd0000 region_type = mapped_file name = "bcrypt.dll" filename = "\\Windows\\System32\\bcrypt.dll" (normalized: "c:\\windows\\system32\\bcrypt.dll") Region: id = 3028 start_va = 0x7ff8eac00000 end_va = 0x7ff8eac6afff entry_point = 0x7ff8eac00000 region_type = mapped_file name = "bcryptprimitives.dll" filename = "\\Windows\\System32\\bcryptprimitives.dll" (normalized: "c:\\windows\\system32\\bcryptprimitives.dll") Region: id = 3029 start_va = 0x7ff8eadd0000 end_va = 0x7ff8eae19fff entry_point = 0x7ff8eadd0000 region_type = mapped_file name = "powrprof.dll" filename = "\\Windows\\System32\\powrprof.dll" (normalized: "c:\\windows\\system32\\powrprof.dll") Region: id = 3030 start_va = 0x7ff8eae20000 end_va = 0x7ff8eae2efff entry_point = 0x7ff8eae20000 region_type = mapped_file name = "kernel.appcore.dll" filename = "\\Windows\\System32\\kernel.appcore.dll" (normalized: "c:\\windows\\system32\\kernel.appcore.dll") Region: id = 3031 start_va = 0x7ff8eae30000 end_va = 0x7ff8eae42fff entry_point = 0x7ff8eae30000 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\System32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll") Region: id = 3032 start_va = 0x7ff8eb180000 end_va = 0x7ff8eb7a7fff entry_point = 0x7ff8eb180000 region_type = mapped_file name = "windows.storage.dll" filename = "\\Windows\\System32\\windows.storage.dll" (normalized: "c:\\windows\\system32\\windows.storage.dll") Region: id = 3033 start_va = 0x7ff8eb7b0000 end_va = 0x7ff8eb862fff entry_point = 0x7ff8eb7b0000 region_type = mapped_file name = "shcore.dll" filename = "\\Windows\\System32\\SHCore.dll" (normalized: "c:\\windows\\system32\\shcore.dll") Region: id = 3034 start_va = 0x7ff8eb870000 end_va = 0x7ff8eba4cfff entry_point = 0x7ff8eb870000 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 3035 start_va = 0x7ff8ebb30000 end_va = 0x7ff8ebbedfff entry_point = 0x7ff8ebb30000 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll") Region: id = 3036 start_va = 0x7ff8ebdc0000 end_va = 0x7ff8ebf0dfff entry_point = 0x7ff8ebdc0000 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 3037 start_va = 0x7ff8ec240000 end_va = 0x7ff8ec29afff entry_point = 0x7ff8ec240000 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 3038 start_va = 0x7ff8ec450000 end_va = 0x7ff8ec575fff entry_point = 0x7ff8ec450000 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 3039 start_va = 0x7ff8edb10000 end_va = 0x7ff8edbb4fff entry_point = 0x7ff8edb10000 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\System32\\clbcatq.dll" (normalized: "c:\\windows\\system32\\clbcatq.dll") Region: id = 3040 start_va = 0x7ff8edbc0000 end_va = 0x7ff8edd44fff entry_point = 0x7ff8edbc0000 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 3041 start_va = 0x7ff8edd60000 end_va = 0x7ff8edfdbfff entry_point = 0x7ff8edd60000 region_type = mapped_file name = "combase.dll" filename = "\\Windows\\System32\\combase.dll" (normalized: "c:\\windows\\system32\\combase.dll") Region: id = 3042 start_va = 0x7ff8edfe0000 end_va = 0x7ff8ee030fff entry_point = 0x7ff8edfe0000 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\System32\\shlwapi.dll" (normalized: "c:\\windows\\system32\\shlwapi.dll") Region: id = 3043 start_va = 0x7ff8ee0b0000 end_va = 0x7ff8ee14cfff entry_point = 0x7ff8ee0b0000 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 3044 start_va = 0x7ff8ee190000 end_va = 0x7ff8ee235fff entry_point = 0x7ff8ee190000 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 3045 start_va = 0x7ff8ee2d0000 end_va = 0x7ff8ee37cfff entry_point = 0x7ff8ee2d0000 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 3046 start_va = 0x7ff8ee380000 end_va = 0x7ff8ee541fff entry_point = 0x7ff8ee380000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Thread: id = 433 os_tid = 0xac0 Thread: id = 434 os_tid = 0xa34 Thread: id = 435 os_tid = 0x9f8 Thread: id = 436 os_tid = 0x97c Thread: id = 437 os_tid = 0x978 Thread: id = 438 os_tid = 0x6cc Thread: id = 439 os_tid = 0x6c8 Thread: id = 440 os_tid = 0x6c4 Thread: id = 441 os_tid = 0x604 Thread: id = 533 os_tid = 0xd90 Thread: id = 534 os_tid = 0xd84 Process: id = "23" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x7b38b000" os_pid = "0xf0c" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "10" os_parent_pid = "0x1e8" cmd_line = "C:\\Windows\\system32\\svchost.exe -k UnistackSvcGroup" cur_dir = "C:\\Windows\\system32\\" os_username = "LHNIWSJ\\CIiHmnxMn6Ps" os_groups = "LHNIWSJ\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x10], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:00014ee5" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 2088 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 2089 start_va = 0x402e2c0000 end_va = 0x402e2cffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000402e2c0000" filename = "" Region: id = 2090 start_va = 0x402e2d0000 end_va = 0x402e2d0fff entry_point = 0x402e2d0000 region_type = mapped_file name = "svchost.exe.mui" filename = "\\Windows\\System32\\en-US\\svchost.exe.mui" (normalized: "c:\\windows\\system32\\en-us\\svchost.exe.mui") Region: id = 2091 start_va = 0x402e2e0000 end_va = 0x402e2f3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000402e2e0000" filename = "" Region: id = 2092 start_va = 0x402e300000 end_va = 0x402e37ffff entry_point = 0x0 region_type = private name = "private_0x000000402e300000" filename = "" Region: id = 2093 start_va = 0x402e380000 end_va = 0x402e383fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000402e380000" filename = "" Region: id = 2094 start_va = 0x402e390000 end_va = 0x402e390fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000402e390000" filename = "" Region: id = 2095 start_va = 0x402e3a0000 end_va = 0x402e3a1fff entry_point = 0x0 region_type = private name = "private_0x000000402e3a0000" filename = "" Region: id = 2096 start_va = 0x402e3b0000 end_va = 0x402e46dfff entry_point = 0x402e3b0000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 2097 start_va = 0x402e470000 end_va = 0x402e4effff entry_point = 0x0 region_type = private name = "private_0x000000402e470000" filename = "" Region: id = 2098 start_va = 0x402e4f0000 end_va = 0x402e4f0fff entry_point = 0x0 region_type = private name = "private_0x000000402e4f0000" filename = "" Region: id = 2099 start_va = 0x402e500000 end_va = 0x402e506fff entry_point = 0x0 region_type = private name = "private_0x000000402e500000" filename = "" Region: id = 2100 start_va = 0x402e510000 end_va = 0x402e510fff entry_point = 0x0 region_type = private name = "private_0x000000402e510000" filename = "" Region: id = 2101 start_va = 0x402e520000 end_va = 0x402e520fff entry_point = 0x402e520000 region_type = mapped_file name = "phoneutilres.dll" filename = "\\Windows\\System32\\PhoneutilRes.dll" (normalized: "c:\\windows\\system32\\phoneutilres.dll") Region: id = 2102 start_va = 0x402e540000 end_va = 0x402e540fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000402e540000" filename = "" Region: id = 2103 start_va = 0x402e550000 end_va = 0x402e550fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000402e550000" filename = "" Region: id = 2104 start_va = 0x402e560000 end_va = 0x402e560fff entry_point = 0x402e560000 region_type = mapped_file name = "syncres.dll" filename = "\\Windows\\System32\\SyncRes.dll" (normalized: "c:\\windows\\system32\\syncres.dll") Region: id = 2105 start_va = 0x402e570000 end_va = 0x402e599fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000402e570000" filename = "" Region: id = 2106 start_va = 0x402e5a0000 end_va = 0x402e5a6fff entry_point = 0x0 region_type = private name = "private_0x000000402e5a0000" filename = "" Region: id = 2107 start_va = 0x402e600000 end_va = 0x402e6fffff entry_point = 0x0 region_type = private name = "private_0x000000402e600000" filename = "" Region: id = 2108 start_va = 0x402e700000 end_va = 0x402e7fffff entry_point = 0x0 region_type = private name = "private_0x000000402e700000" filename = "" Region: id = 2109 start_va = 0x402e800000 end_va = 0x402e987fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000402e800000" filename = "" Region: id = 2110 start_va = 0x402e990000 end_va = 0x402eb10fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000402e990000" filename = "" Region: id = 2111 start_va = 0x402eb20000 end_va = 0x402ff1ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000402eb20000" filename = "" Region: id = 2112 start_va = 0x402ff20000 end_va = 0x403001ffff entry_point = 0x0 region_type = private name = "private_0x000000402ff20000" filename = "" Region: id = 2113 start_va = 0x4030020000 end_va = 0x403011ffff entry_point = 0x0 region_type = private name = "private_0x0000004030020000" filename = "" Region: id = 2114 start_va = 0x4030120000 end_va = 0x403019ffff entry_point = 0x0 region_type = private name = "private_0x0000004030120000" filename = "" Region: id = 2115 start_va = 0x40301a0000 end_va = 0x403029ffff entry_point = 0x0 region_type = private name = "private_0x00000040301a0000" filename = "" Region: id = 2116 start_va = 0x40302a0000 end_va = 0x403039ffff entry_point = 0x0 region_type = private name = "private_0x00000040302a0000" filename = "" Region: id = 2117 start_va = 0x40303a0000 end_va = 0x40306d6fff entry_point = 0x40303a0000 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 2118 start_va = 0x40306e0000 end_va = 0x40307dffff entry_point = 0x0 region_type = private name = "private_0x00000040306e0000" filename = "" Region: id = 2119 start_va = 0x7df5ff9b0000 end_va = 0x7ff5ff9affff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007df5ff9b0000" filename = "" Region: id = 2120 start_va = 0x7ff6734fe000 end_va = 0x7ff6734fffff entry_point = 0x0 region_type = private name = "private_0x00007ff6734fe000" filename = "" Region: id = 2121 start_va = 0x7ff673500000 end_va = 0x7ff6735fffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007ff673500000" filename = "" Region: id = 2122 start_va = 0x7ff673600000 end_va = 0x7ff673622fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007ff673600000" filename = "" Region: id = 2123 start_va = 0x7ff673623000 end_va = 0x7ff673624fff entry_point = 0x0 region_type = private name = "private_0x00007ff673623000" filename = "" Region: id = 2124 start_va = 0x7ff673625000 end_va = 0x7ff673626fff entry_point = 0x0 region_type = private name = "private_0x00007ff673625000" filename = "" Region: id = 2125 start_va = 0x7ff673627000 end_va = 0x7ff673628fff entry_point = 0x0 region_type = private name = "private_0x00007ff673627000" filename = "" Region: id = 2126 start_va = 0x7ff673629000 end_va = 0x7ff67362afff entry_point = 0x0 region_type = private name = "private_0x00007ff673629000" filename = "" Region: id = 2127 start_va = 0x7ff67362b000 end_va = 0x7ff67362cfff entry_point = 0x0 region_type = private name = "private_0x00007ff67362b000" filename = "" Region: id = 2128 start_va = 0x7ff67362d000 end_va = 0x7ff67362efff entry_point = 0x0 region_type = private name = "private_0x00007ff67362d000" filename = "" Region: id = 2129 start_va = 0x7ff67362f000 end_va = 0x7ff67362ffff entry_point = 0x0 region_type = private name = "private_0x00007ff67362f000" filename = "" Region: id = 2130 start_va = 0x7ff673b40000 end_va = 0x7ff673b4cfff entry_point = 0x7ff673b40000 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 2131 start_va = 0x7ff8d14b0000 end_va = 0x7ff8d14f0fff entry_point = 0x7ff8d14b0000 region_type = mapped_file name = "phoneutil.dll" filename = "\\Windows\\System32\\Phoneutil.dll" (normalized: "c:\\windows\\system32\\phoneutil.dll") Region: id = 2132 start_va = 0x7ff8d1500000 end_va = 0x7ff8d1670fff entry_point = 0x7ff8d1500000 region_type = mapped_file name = "pimstore.dll" filename = "\\Windows\\System32\\Pimstore.dll" (normalized: "c:\\windows\\system32\\pimstore.dll") Region: id = 2133 start_va = 0x7ff8d1680000 end_va = 0x7ff8d16c6fff entry_point = 0x7ff8d1680000 region_type = mapped_file name = "syncutil.dll" filename = "\\Windows\\System32\\syncutil.dll" (normalized: "c:\\windows\\system32\\syncutil.dll") Region: id = 2134 start_va = 0x7ff8d1940000 end_va = 0x7ff8d1960fff entry_point = 0x7ff8d1940000 region_type = mapped_file name = "userdatatimeutil.dll" filename = "\\Windows\\System32\\UserDataTimeUtil.dll" (normalized: "c:\\windows\\system32\\userdatatimeutil.dll") Region: id = 2135 start_va = 0x7ff8d1970000 end_va = 0x7ff8d1980fff entry_point = 0x7ff8d1970000 region_type = mapped_file name = "userdatalanguageutil.dll" filename = "\\Windows\\System32\\UserDataLanguageUtil.dll" (normalized: "c:\\windows\\system32\\userdatalanguageutil.dll") Region: id = 2136 start_va = 0x7ff8d1990000 end_va = 0x7ff8d19c5fff entry_point = 0x7ff8d1990000 region_type = mapped_file name = "accountaccessor.dll" filename = "\\Windows\\System32\\accountaccessor.dll" (normalized: "c:\\windows\\system32\\accountaccessor.dll") Region: id = 2137 start_va = 0x7ff8d19d0000 end_va = 0x7ff8d1a0ffff entry_point = 0x7ff8d19d0000 region_type = mapped_file name = "cemapi.dll" filename = "\\Windows\\System32\\cemapi.dll" (normalized: "c:\\windows\\system32\\cemapi.dll") Region: id = 2138 start_va = 0x7ff8d1a10000 end_va = 0x7ff8d1a7bfff entry_point = 0x7ff8d1a10000 region_type = mapped_file name = "synccontroller.dll" filename = "\\Windows\\System32\\SyncController.dll" (normalized: "c:\\windows\\system32\\synccontroller.dll") Region: id = 2139 start_va = 0x7ff8d5be0000 end_va = 0x7ff8d5c2dfff entry_point = 0x7ff8d5be0000 region_type = mapped_file name = "aphostservice.dll" filename = "\\Windows\\System32\\APHostService.dll" (normalized: "c:\\windows\\system32\\aphostservice.dll") Region: id = 2140 start_va = 0x7ff8d61f0000 end_va = 0x7ff8d6205fff entry_point = 0x7ff8d61f0000 region_type = mapped_file name = "userdataplatformhelperutil.dll" filename = "\\Windows\\System32\\UserDataPlatformHelperUtil.dll" (normalized: "c:\\windows\\system32\\userdataplatformhelperutil.dll") Region: id = 2141 start_va = 0x7ff8d73d0000 end_va = 0x7ff8d73dffff entry_point = 0x7ff8d73d0000 region_type = mapped_file name = "aphostclient.dll" filename = "\\Windows\\System32\\APHostClient.dll" (normalized: "c:\\windows\\system32\\aphostclient.dll") Region: id = 2142 start_va = 0x7ff8db330000 end_va = 0x7ff8db33cfff entry_point = 0x7ff8db330000 region_type = mapped_file name = "inproclogger.dll" filename = "\\Windows\\System32\\InprocLogger.dll" (normalized: "c:\\windows\\system32\\inproclogger.dll") Region: id = 2143 start_va = 0x7ff8db5b0000 end_va = 0x7ff8db5c6fff entry_point = 0x7ff8db5b0000 region_type = mapped_file name = "networkhelper.dll" filename = "\\Windows\\System32\\networkhelper.dll" (normalized: "c:\\windows\\system32\\networkhelper.dll") Region: id = 2144 start_va = 0x7ff8dcd60000 end_va = 0x7ff8dcda7fff entry_point = 0x7ff8dcd60000 region_type = mapped_file name = "vaultcli.dll" filename = "\\Windows\\System32\\vaultcli.dll" (normalized: "c:\\windows\\system32\\vaultcli.dll") Region: id = 2145 start_va = 0x7ff8deca0000 end_va = 0x7ff8ded65fff entry_point = 0x7ff8deca0000 region_type = mapped_file name = "tokenbroker.dll" filename = "\\Windows\\System32\\TokenBroker.dll" (normalized: "c:\\windows\\system32\\tokenbroker.dll") Region: id = 2146 start_va = 0x7ff8df180000 end_va = 0x7ff8df18afff entry_point = 0x7ff8df180000 region_type = mapped_file name = "mccspal.dll" filename = "\\Windows\\System32\\MCCSPal.dll" (normalized: "c:\\windows\\system32\\mccspal.dll") Region: id = 2147 start_va = 0x7ff8df640000 end_va = 0x7ff8dfaa9fff entry_point = 0x7ff8df640000 region_type = mapped_file name = "actxprxy.dll" filename = "\\Windows\\System32\\actxprxy.dll" (normalized: "c:\\windows\\system32\\actxprxy.dll") Region: id = 2148 start_va = 0x7ff8e1050000 end_va = 0x7ff8e1060fff entry_point = 0x7ff8e1050000 region_type = mapped_file name = "userdatatypehelperutil.dll" filename = "\\Windows\\System32\\UserDataTypeHelperUtil.dll" (normalized: "c:\\windows\\system32\\userdatatypehelperutil.dll") Region: id = 2149 start_va = 0x7ff8e1650000 end_va = 0x7ff8e165bfff entry_point = 0x7ff8e1650000 region_type = mapped_file name = "dsclient.dll" filename = "\\Windows\\System32\\dsclient.dll" (normalized: "c:\\windows\\system32\\dsclient.dll") Region: id = 2150 start_va = 0x7ff8e1940000 end_va = 0x7ff8e1c21fff entry_point = 0x7ff8e1940000 region_type = mapped_file name = "esent.dll" filename = "\\Windows\\System32\\esent.dll" (normalized: "c:\\windows\\system32\\esent.dll") Region: id = 2151 start_va = 0x7ff8e3040000 end_va = 0x7ff8e3066fff entry_point = 0x7ff8e3040000 region_type = mapped_file name = "idstore.dll" filename = "\\Windows\\System32\\IDStore.dll" (normalized: "c:\\windows\\system32\\idstore.dll") Region: id = 2152 start_va = 0x7ff8e3c30000 end_va = 0x7ff8e3fa5fff entry_point = 0x7ff8e3c30000 region_type = mapped_file name = "iertutil.dll" filename = "\\Windows\\System32\\iertutil.dll" (normalized: "c:\\windows\\system32\\iertutil.dll") Region: id = 2153 start_va = 0x7ff8e5dd0000 end_va = 0x7ff8e5ea5fff entry_point = 0x7ff8e5dd0000 region_type = mapped_file name = "winhttp.dll" filename = "\\Windows\\System32\\winhttp.dll" (normalized: "c:\\windows\\system32\\winhttp.dll") Region: id = 2154 start_va = 0x7ff8e7400000 end_va = 0x7ff8e741bfff entry_point = 0x7ff8e7400000 region_type = mapped_file name = "samlib.dll" filename = "\\Windows\\System32\\samlib.dll" (normalized: "c:\\windows\\system32\\samlib.dll") Region: id = 2155 start_va = 0x7ff8e7430000 end_va = 0x7ff8e7560fff entry_point = 0x7ff8e7430000 region_type = mapped_file name = "wintypes.dll" filename = "\\Windows\\System32\\WinTypes.dll" (normalized: "c:\\windows\\system32\\wintypes.dll") Region: id = 2156 start_va = 0x7ff8e84e0000 end_va = 0x7ff8e84f7fff entry_point = 0x7ff8e84e0000 region_type = mapped_file name = "nlaapi.dll" filename = "\\Windows\\System32\\nlaapi.dll" (normalized: "c:\\windows\\system32\\nlaapi.dll") Region: id = 2157 start_va = 0x7ff8e8ad0000 end_va = 0x7ff8e8ae2fff entry_point = 0x7ff8e8ad0000 region_type = mapped_file name = "wtsapi32.dll" filename = "\\Windows\\System32\\wtsapi32.dll" (normalized: "c:\\windows\\system32\\wtsapi32.dll") Region: id = 2158 start_va = 0x7ff8ea0f0000 end_va = 0x7ff8ea121fff entry_point = 0x7ff8ea0f0000 region_type = mapped_file name = "ntmarta.dll" filename = "\\Windows\\System32\\ntmarta.dll" (normalized: "c:\\windows\\system32\\ntmarta.dll") Region: id = 2159 start_va = 0x7ff8ea270000 end_va = 0x7ff8ea2a2fff entry_point = 0x7ff8ea270000 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\System32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll") Region: id = 2160 start_va = 0x7ff8ea360000 end_va = 0x7ff8ea37efff entry_point = 0x7ff8ea360000 region_type = mapped_file name = "userenv.dll" filename = "\\Windows\\System32\\userenv.dll" (normalized: "c:\\windows\\system32\\userenv.dll") Region: id = 2161 start_va = 0x7ff8ea550000 end_va = 0x7ff8ea55afff entry_point = 0x7ff8ea550000 region_type = mapped_file name = "ntlmshared.dll" filename = "\\Windows\\System32\\NtlmShared.dll" (normalized: "c:\\windows\\system32\\ntlmshared.dll") Region: id = 2162 start_va = 0x7ff8ea560000 end_va = 0x7ff8ea5befff entry_point = 0x7ff8ea560000 region_type = mapped_file name = "msv1_0.dll" filename = "\\Windows\\System32\\msv1_0.dll" (normalized: "c:\\windows\\system32\\msv1_0.dll") Region: id = 2163 start_va = 0x7ff8ea620000 end_va = 0x7ff8ea636fff entry_point = 0x7ff8ea620000 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\System32\\cryptsp.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll") Region: id = 2164 start_va = 0x7ff8ea770000 end_va = 0x7ff8ea783fff entry_point = 0x7ff8ea770000 region_type = mapped_file name = "cryptdll.dll" filename = "\\Windows\\System32\\cryptdll.dll" (normalized: "c:\\windows\\system32\\cryptdll.dll") Region: id = 2165 start_va = 0x7ff8ea790000 end_va = 0x7ff8ea79afff entry_point = 0x7ff8ea790000 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\System32\\cryptbase.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll") Region: id = 2166 start_va = 0x7ff8ea9d0000 end_va = 0x7ff8ea9fbfff entry_point = 0x7ff8ea9d0000 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\System32\\sspicli.dll" (normalized: "c:\\windows\\system32\\sspicli.dll") Region: id = 2167 start_va = 0x7ff8eabd0000 end_va = 0x7ff8eabf7fff entry_point = 0x7ff8eabd0000 region_type = mapped_file name = "bcrypt.dll" filename = "\\Windows\\System32\\bcrypt.dll" (normalized: "c:\\windows\\system32\\bcrypt.dll") Region: id = 2168 start_va = 0x7ff8eac00000 end_va = 0x7ff8eac6afff entry_point = 0x7ff8eac00000 region_type = mapped_file name = "bcryptprimitives.dll" filename = "\\Windows\\System32\\bcryptprimitives.dll" (normalized: "c:\\windows\\system32\\bcryptprimitives.dll") Region: id = 2169 start_va = 0x7ff8eadb0000 end_va = 0x7ff8eadc0fff entry_point = 0x7ff8eadb0000 region_type = mapped_file name = "msasn1.dll" filename = "\\Windows\\System32\\msasn1.dll" (normalized: "c:\\windows\\system32\\msasn1.dll") Region: id = 2170 start_va = 0x7ff8eadd0000 end_va = 0x7ff8eae19fff entry_point = 0x7ff8eadd0000 region_type = mapped_file name = "powrprof.dll" filename = "\\Windows\\System32\\powrprof.dll" (normalized: "c:\\windows\\system32\\powrprof.dll") Region: id = 2171 start_va = 0x7ff8eae20000 end_va = 0x7ff8eae2efff entry_point = 0x7ff8eae20000 region_type = mapped_file name = "kernel.appcore.dll" filename = "\\Windows\\System32\\kernel.appcore.dll" (normalized: "c:\\windows\\system32\\kernel.appcore.dll") Region: id = 2172 start_va = 0x7ff8eae30000 end_va = 0x7ff8eae42fff entry_point = 0x7ff8eae30000 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\System32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll") Region: id = 2173 start_va = 0x7ff8eafb0000 end_va = 0x7ff8eb170fff entry_point = 0x7ff8eafb0000 region_type = mapped_file name = "crypt32.dll" filename = "\\Windows\\System32\\crypt32.dll" (normalized: "c:\\windows\\system32\\crypt32.dll") Region: id = 2174 start_va = 0x7ff8eb7b0000 end_va = 0x7ff8eb862fff entry_point = 0x7ff8eb7b0000 region_type = mapped_file name = "shcore.dll" filename = "\\Windows\\System32\\SHCore.dll" (normalized: "c:\\windows\\system32\\shcore.dll") Region: id = 2175 start_va = 0x7ff8eb870000 end_va = 0x7ff8eba4cfff entry_point = 0x7ff8eb870000 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 2176 start_va = 0x7ff8ebb30000 end_va = 0x7ff8ebbedfff entry_point = 0x7ff8ebb30000 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll") Region: id = 2177 start_va = 0x7ff8ebdc0000 end_va = 0x7ff8ebf0dfff entry_point = 0x7ff8ebdc0000 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 2178 start_va = 0x7ff8ec0c0000 end_va = 0x7ff8ec21bfff entry_point = 0x7ff8ec0c0000 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\System32\\msctf.dll" (normalized: "c:\\windows\\system32\\msctf.dll") Region: id = 2179 start_va = 0x7ff8ec240000 end_va = 0x7ff8ec29afff entry_point = 0x7ff8ec240000 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 2180 start_va = 0x7ff8ec450000 end_va = 0x7ff8ec575fff entry_point = 0x7ff8ec450000 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 2181 start_va = 0x7ff8edb10000 end_va = 0x7ff8edbb4fff entry_point = 0x7ff8edb10000 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\System32\\clbcatq.dll" (normalized: "c:\\windows\\system32\\clbcatq.dll") Region: id = 2182 start_va = 0x7ff8edbc0000 end_va = 0x7ff8edd44fff entry_point = 0x7ff8edbc0000 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 2183 start_va = 0x7ff8edd60000 end_va = 0x7ff8edfdbfff entry_point = 0x7ff8edd60000 region_type = mapped_file name = "combase.dll" filename = "\\Windows\\System32\\combase.dll" (normalized: "c:\\windows\\system32\\combase.dll") Region: id = 2184 start_va = 0x7ff8ee0b0000 end_va = 0x7ff8ee14cfff entry_point = 0x7ff8ee0b0000 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 2185 start_va = 0x7ff8ee150000 end_va = 0x7ff8ee185fff entry_point = 0x7ff8ee150000 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 2186 start_va = 0x7ff8ee190000 end_va = 0x7ff8ee235fff entry_point = 0x7ff8ee190000 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 2187 start_va = 0x7ff8ee2d0000 end_va = 0x7ff8ee37cfff entry_point = 0x7ff8ee2d0000 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 2188 start_va = 0x7ff8ee380000 end_va = 0x7ff8ee541fff entry_point = 0x7ff8ee380000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Thread: id = 442 os_tid = 0xfbc Thread: id = 443 os_tid = 0xfb8 Thread: id = 444 os_tid = 0xfb4 Thread: id = 445 os_tid = 0xfb0 Thread: id = 446 os_tid = 0xfac Thread: id = 447 os_tid = 0xf18 Thread: id = 448 os_tid = 0xf10 Process: id = "24" image_name = "sppsvc.exe" filename = "c:\\windows\\system32\\sppsvc.exe" page_root = "0x2a433000" os_pid = "0x768" os_integrity_level = "0x4000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "10" os_parent_pid = "0x1e8" cmd_line = "C:\\Windows\\system32\\sppsvc.exe" cur_dir = "C:\\Windows" os_username = "NT AUTHORITY\\Network Service" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\sppsvc" [0xe], "NT AUTHORITY\\Logon Session 00000000:00097235" [0xc000000f], "LOCAL" [0x7] Region: id = 2419 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 2420 start_va = 0x6278e90000 end_va = 0x6278e96fff entry_point = 0x0 region_type = private name = "private_0x0000006278e90000" filename = "" Region: id = 2421 start_va = 0x6278ea0000 end_va = 0x6278eaffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000006278ea0000" filename = "" Region: id = 2422 start_va = 0x6278eb0000 end_va = 0x6278ec3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000006278eb0000" filename = "" Region: id = 2423 start_va = 0x6278ed0000 end_va = 0x6278f4ffff entry_point = 0x0 region_type = private name = "private_0x0000006278ed0000" filename = "" Region: id = 2424 start_va = 0x6278f50000 end_va = 0x627900dfff entry_point = 0x6278f50000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 2425 start_va = 0x6279010000 end_va = 0x627908ffff entry_point = 0x0 region_type = private name = "private_0x0000006279010000" filename = "" Region: id = 2426 start_va = 0x6279090000 end_va = 0x6279096fff entry_point = 0x0 region_type = private name = "private_0x0000006279090000" filename = "" Region: id = 2427 start_va = 0x62790a0000 end_va = 0x62790a5fff entry_point = 0x62790a0000 region_type = mapped_file name = "sppsvc.exe.mui" filename = "\\Windows\\System32\\en-US\\sppsvc.exe.mui" (normalized: "c:\\windows\\system32\\en-us\\sppsvc.exe.mui") Region: id = 2428 start_va = 0x62790b0000 end_va = 0x62790b0fff entry_point = 0x0 region_type = private name = "private_0x00000062790b0000" filename = "" Region: id = 2429 start_va = 0x62790c0000 end_va = 0x62790c0fff entry_point = 0x0 region_type = private name = "private_0x00000062790c0000" filename = "" Region: id = 2430 start_va = 0x62790d0000 end_va = 0x62790dffff entry_point = 0x0 region_type = private name = "private_0x00000062790d0000" filename = "" Region: id = 2431 start_va = 0x62790e0000 end_va = 0x62790effff entry_point = 0x0 region_type = private name = "private_0x00000062790e0000" filename = "" Region: id = 2432 start_va = 0x6279100000 end_va = 0x627910ffff entry_point = 0x0 region_type = private name = "private_0x0000006279100000" filename = "" Region: id = 2433 start_va = 0x6279140000 end_va = 0x627923ffff entry_point = 0x0 region_type = private name = "private_0x0000006279140000" filename = "" Region: id = 2434 start_va = 0x6279240000 end_va = 0x62793c7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000006279240000" filename = "" Region: id = 2435 start_va = 0x62793d0000 end_va = 0x6279550fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000062793d0000" filename = "" Region: id = 2436 start_va = 0x6279560000 end_va = 0x627961ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000006279560000" filename = "" Region: id = 2437 start_va = 0x6279620000 end_va = 0x627969ffff entry_point = 0x0 region_type = private name = "private_0x0000006279620000" filename = "" Region: id = 2438 start_va = 0x62796a0000 end_va = 0x627979ffff entry_point = 0x0 region_type = private name = "private_0x00000062796a0000" filename = "" Region: id = 2439 start_va = 0x62797a0000 end_va = 0x627981ffff entry_point = 0x0 region_type = private name = "private_0x00000062797a0000" filename = "" Region: id = 2440 start_va = 0x6279820000 end_va = 0x6279b56fff entry_point = 0x6279820000 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 2441 start_va = 0x7df5ff860000 end_va = 0x7ff5ff85ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007df5ff860000" filename = "" Region: id = 2442 start_va = 0x7ff781500000 end_va = 0x7ff7815fffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007ff781500000" filename = "" Region: id = 2443 start_va = 0x7ff781600000 end_va = 0x7ff781622fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007ff781600000" filename = "" Region: id = 2444 start_va = 0x7ff781625000 end_va = 0x7ff781625fff entry_point = 0x0 region_type = private name = "private_0x00007ff781625000" filename = "" Region: id = 2445 start_va = 0x7ff781628000 end_va = 0x7ff781629fff entry_point = 0x0 region_type = private name = "private_0x00007ff781628000" filename = "" Region: id = 2446 start_va = 0x7ff78162a000 end_va = 0x7ff78162bfff entry_point = 0x0 region_type = private name = "private_0x00007ff78162a000" filename = "" Region: id = 2447 start_va = 0x7ff78162c000 end_va = 0x7ff78162dfff entry_point = 0x0 region_type = private name = "private_0x00007ff78162c000" filename = "" Region: id = 2448 start_va = 0x7ff78162e000 end_va = 0x7ff78162ffff entry_point = 0x0 region_type = private name = "private_0x00007ff78162e000" filename = "" Region: id = 2449 start_va = 0x7ff7819d0000 end_va = 0x7ff781ffdfff entry_point = 0x7ff7819d0000 region_type = mapped_file name = "sppsvc.exe" filename = "\\Windows\\System32\\sppsvc.exe" (normalized: "c:\\windows\\system32\\sppsvc.exe") Region: id = 2450 start_va = 0x7ff8d17a0000 end_va = 0x7ff8d17c1fff entry_point = 0x7ff8d17a0000 region_type = mapped_file name = "cryptxml.dll" filename = "\\Windows\\System32\\cryptxml.dll" (normalized: "c:\\windows\\system32\\cryptxml.dll") Region: id = 2451 start_va = 0x7ff8d1c40000 end_va = 0x7ff8d1dbafff entry_point = 0x7ff8d1c40000 region_type = mapped_file name = "webservices.dll" filename = "\\Windows\\System32\\webservices.dll" (normalized: "c:\\windows\\system32\\webservices.dll") Region: id = 2452 start_va = 0x7ff8db8b0000 end_va = 0x7ff8db8c5fff entry_point = 0x7ff8db8b0000 region_type = mapped_file name = "clipc.dll" filename = "\\Windows\\System32\\Clipc.dll" (normalized: "c:\\windows\\system32\\clipc.dll") Region: id = 2453 start_va = 0x7ff8e6330000 end_va = 0x7ff8e6365fff entry_point = 0x7ff8e6330000 region_type = mapped_file name = "xmllite.dll" filename = "\\Windows\\System32\\xmllite.dll" (normalized: "c:\\windows\\system32\\xmllite.dll") Region: id = 2454 start_va = 0x7ff8ea270000 end_va = 0x7ff8ea2a2fff entry_point = 0x7ff8ea270000 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\System32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll") Region: id = 2455 start_va = 0x7ff8ea620000 end_va = 0x7ff8ea636fff entry_point = 0x7ff8ea620000 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\System32\\cryptsp.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll") Region: id = 2456 start_va = 0x7ff8ea790000 end_va = 0x7ff8ea79afff entry_point = 0x7ff8ea790000 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\System32\\cryptbase.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll") Region: id = 2457 start_va = 0x7ff8eabd0000 end_va = 0x7ff8eabf7fff entry_point = 0x7ff8eabd0000 region_type = mapped_file name = "bcrypt.dll" filename = "\\Windows\\System32\\bcrypt.dll" (normalized: "c:\\windows\\system32\\bcrypt.dll") Region: id = 2458 start_va = 0x7ff8eac00000 end_va = 0x7ff8eac6afff entry_point = 0x7ff8eac00000 region_type = mapped_file name = "bcryptprimitives.dll" filename = "\\Windows\\System32\\bcryptprimitives.dll" (normalized: "c:\\windows\\system32\\bcryptprimitives.dll") Region: id = 2459 start_va = 0x7ff8eadb0000 end_va = 0x7ff8eadc0fff entry_point = 0x7ff8eadb0000 region_type = mapped_file name = "msasn1.dll" filename = "\\Windows\\System32\\msasn1.dll" (normalized: "c:\\windows\\system32\\msasn1.dll") Region: id = 2460 start_va = 0x7ff8eae20000 end_va = 0x7ff8eae2efff entry_point = 0x7ff8eae20000 region_type = mapped_file name = "kernel.appcore.dll" filename = "\\Windows\\System32\\kernel.appcore.dll" (normalized: "c:\\windows\\system32\\kernel.appcore.dll") Region: id = 2461 start_va = 0x7ff8eafb0000 end_va = 0x7ff8eb170fff entry_point = 0x7ff8eafb0000 region_type = mapped_file name = "crypt32.dll" filename = "\\Windows\\System32\\crypt32.dll" (normalized: "c:\\windows\\system32\\crypt32.dll") Region: id = 2462 start_va = 0x7ff8eb870000 end_va = 0x7ff8eba4cfff entry_point = 0x7ff8eb870000 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 2463 start_va = 0x7ff8ebb30000 end_va = 0x7ff8ebbedfff entry_point = 0x7ff8ebb30000 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll") Region: id = 2464 start_va = 0x7ff8ebdc0000 end_va = 0x7ff8ebf0dfff entry_point = 0x7ff8ebdc0000 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 2465 start_va = 0x7ff8ec240000 end_va = 0x7ff8ec29afff entry_point = 0x7ff8ec240000 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 2466 start_va = 0x7ff8ec300000 end_va = 0x7ff8ec440fff entry_point = 0x7ff8ec300000 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll") Region: id = 2467 start_va = 0x7ff8ec450000 end_va = 0x7ff8ec575fff entry_point = 0x7ff8ec450000 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 2468 start_va = 0x7ff8edbc0000 end_va = 0x7ff8edd44fff entry_point = 0x7ff8edbc0000 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 2469 start_va = 0x7ff8edd60000 end_va = 0x7ff8edfdbfff entry_point = 0x7ff8edd60000 region_type = mapped_file name = "combase.dll" filename = "\\Windows\\System32\\combase.dll" (normalized: "c:\\windows\\system32\\combase.dll") Region: id = 2470 start_va = 0x7ff8ee0b0000 end_va = 0x7ff8ee14cfff entry_point = 0x7ff8ee0b0000 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 2471 start_va = 0x7ff8ee190000 end_va = 0x7ff8ee235fff entry_point = 0x7ff8ee190000 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 2472 start_va = 0x7ff8ee2d0000 end_va = 0x7ff8ee37cfff entry_point = 0x7ff8ee2d0000 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 2473 start_va = 0x7ff8ee380000 end_va = 0x7ff8ee541fff entry_point = 0x7ff8ee380000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 2474 start_va = 0x6279b60000 end_va = 0x6279bdffff entry_point = 0x0 region_type = private name = "private_0x0000006279b60000" filename = "" Region: id = 2475 start_va = 0x7ff781626000 end_va = 0x7ff781627fff entry_point = 0x0 region_type = private name = "private_0x00007ff781626000" filename = "" Region: id = 3457 start_va = 0x6279010000 end_va = 0x627908ffff entry_point = 0x0 region_type = private name = "private_0x0000006279010000" filename = "" Region: id = 3458 start_va = 0x7ff78162c000 end_va = 0x7ff78162dfff entry_point = 0x0 region_type = private name = "private_0x00007ff78162c000" filename = "" Region: id = 3459 start_va = 0x7ff8daa50000 end_va = 0x7ff8daae9fff entry_point = 0x7ff8daa50000 region_type = mapped_file name = "sppwinob.dll" filename = "\\Windows\\System32\\sppwinob.dll" (normalized: "c:\\windows\\system32\\sppwinob.dll") Region: id = 3460 start_va = 0x7ff8e84d0000 end_va = 0x7ff8e84d9fff entry_point = 0x7ff8e84d0000 region_type = mapped_file name = "dsrole.dll" filename = "\\Windows\\System32\\dsrole.dll" (normalized: "c:\\windows\\system32\\dsrole.dll") Region: id = 3461 start_va = 0x62790f0000 end_va = 0x62790fffff entry_point = 0x0 region_type = private name = "private_0x00000062790f0000" filename = "" Region: id = 3462 start_va = 0x6279be0000 end_va = 0x6279cdffff entry_point = 0x0 region_type = private name = "private_0x0000006279be0000" filename = "" Region: id = 3463 start_va = 0x7ff8d74a0000 end_va = 0x7ff8d7617fff entry_point = 0x7ff8d74a0000 region_type = mapped_file name = "sppobjs.dll" filename = "\\Windows\\System32\\sppobjs.dll" (normalized: "c:\\windows\\system32\\sppobjs.dll") Region: id = 3464 start_va = 0x7ff8e12e0000 end_va = 0x7ff8e12f6fff entry_point = 0x7ff8e12e0000 region_type = mapped_file name = "netapi32.dll" filename = "\\Windows\\System32\\netapi32.dll" (normalized: "c:\\windows\\system32\\netapi32.dll") Region: id = 3465 start_va = 0x7ff8e7cd0000 end_va = 0x7ff8e7ce5fff entry_point = 0x7ff8e7cd0000 region_type = mapped_file name = "wkscli.dll" filename = "\\Windows\\System32\\wkscli.dll" (normalized: "c:\\windows\\system32\\wkscli.dll") Region: id = 3466 start_va = 0x7ff8ea000000 end_va = 0x7ff8ea00bfff entry_point = 0x7ff8ea000000 region_type = mapped_file name = "netutils.dll" filename = "\\Windows\\System32\\netutils.dll" (normalized: "c:\\windows\\system32\\netutils.dll") Region: id = 3467 start_va = 0x7ff8ea010000 end_va = 0x7ff8ea035fff entry_point = 0x7ff8ea010000 region_type = mapped_file name = "srvcli.dll" filename = "\\Windows\\System32\\srvcli.dll" (normalized: "c:\\windows\\system32\\srvcli.dll") Region: id = 3468 start_va = 0x6279110000 end_va = 0x627911ffff entry_point = 0x0 region_type = private name = "private_0x0000006279110000" filename = "" Region: id = 3470 start_va = 0x6279ce0000 end_va = 0x6279d5ffff entry_point = 0x0 region_type = private name = "private_0x0000006279ce0000" filename = "" Region: id = 3471 start_va = 0x6279d60000 end_va = 0x6279e5ffff entry_point = 0x0 region_type = private name = "private_0x0000006279d60000" filename = "" Region: id = 3472 start_va = 0x6279e60000 end_va = 0x6279f6efff entry_point = 0x0 region_type = private name = "private_0x0000006279e60000" filename = "" Region: id = 3473 start_va = 0x6279f70000 end_va = 0x627a07efff entry_point = 0x0 region_type = private name = "private_0x0000006279f70000" filename = "" Region: id = 3474 start_va = 0x7ff781623000 end_va = 0x7ff781624fff entry_point = 0x0 region_type = private name = "private_0x00007ff781623000" filename = "" Region: id = 3475 start_va = 0x7ff8dcc70000 end_va = 0x7ff8dcc85fff entry_point = 0x7ff8dcc70000 region_type = mapped_file name = "wwapi.dll" filename = "\\Windows\\System32\\wwapi.dll" (normalized: "c:\\windows\\system32\\wwapi.dll") Thread: id = 449 os_tid = 0xc34 Thread: id = 450 os_tid = 0xc48 [0138.143] GetFileAttributesW (lpFileName="C:\\Windows\\System32\\spp\\store\\2.0\\data.dat.bak" (normalized: "c:\\windows\\system32\\spp\\store\\2.0\\data.dat.bak")) returned 0xffffffff [0138.143] GetLastError () returned 0x2 [0138.143] GetFileAttributesW (lpFileName="C:\\Windows\\System32\\spp\\store\\2.0\\data.dat.tmp" (normalized: "c:\\windows\\system32\\spp\\store\\2.0\\data.dat.tmp")) returned 0xffffffff [0138.144] GetLastError () returned 0x2 [0138.146] GetFileAttributesW (lpFileName="C:\\Windows\\System32\\spp\\store\\2.0\\data.dat.bak" (normalized: "c:\\windows\\system32\\spp\\store\\2.0\\data.dat.bak")) returned 0xffffffff [0138.147] GetLastError () returned 0x2 [0138.147] GetFileAttributesW (lpFileName="C:\\Windows\\System32\\spp\\store\\2.0\\data.dat.tmp" (normalized: "c:\\windows\\system32\\spp\\store\\2.0\\data.dat.tmp")) returned 0xffffffff [0138.147] GetLastError () returned 0x2 [0138.147] CreateFileW (lpFileName="C:\\Windows\\System32\\spp\\store\\2.0\\data.dat" (normalized: "c:\\windows\\system32\\spp\\store\\2.0\\data.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80000002, hTemplateFile=0x0) returned 0x128 [0138.149] GetFileSize (in: hFile=0x128, lpFileSizeHigh=0x627981e5ec | out: lpFileSizeHigh=0x627981e5ec*=0x0) returned 0x7a80 [0138.154] GetFileAttributesW (lpFileName="C:\\Windows\\System32\\spp\\store\\2.0\\data.dat.bak" (normalized: "c:\\windows\\system32\\spp\\store\\2.0\\data.dat.bak")) returned 0xffffffff [0138.154] GetLastError () returned 0x2 [0138.154] GetFileAttributesW (lpFileName="C:\\Windows\\System32\\spp\\store\\2.0\\data.dat.tmp" (normalized: "c:\\windows\\system32\\spp\\store\\2.0\\data.dat.tmp")) returned 0xffffffff [0138.154] GetLastError () returned 0x2 [0138.154] CreateFileW (lpFileName="C:\\Windows\\System32\\spp\\store\\2.0\\data.dat" (normalized: "c:\\windows\\system32\\spp\\store\\2.0\\data.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80000002, hTemplateFile=0x0) returned 0x128 [0138.155] GetFileSize (in: hFile=0x128, lpFileSizeHigh=0x627981e5ec | out: lpFileSizeHigh=0x627981e5ec*=0x0) returned 0x7a80 [0138.156] ReadFile (in: hFile=0x128, lpBuffer=0x627917dd20, nNumberOfBytesToRead=0x7a80, lpNumberOfBytesRead=0x627981e6f8, lpOverlapped=0x0 | out: lpBuffer=0x627917dd20*, lpNumberOfBytesRead=0x627981e6f8*=0x7a80, lpOverlapped=0x0) returned 1 [0160.323] _wcsicmp (_String1="__##USERSEP##\\$$_RESERVED_$$\\NAMESPACE__", _String2="__##USERSEP##\\$$_RESERVED_$$\\NAMESPACE__") returned 0 [0160.324] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x627981eb70 | out: lpSystemTimeAsFileTime=0x627981eb70*(dwLowDateTime=0x4b675f38, dwHighDateTime=0x1d47903)) [0172.145] CreateTimerQueueTimer (in: phNewTimer=0x627916faf8, TimerQueue=0x0, Callback=0x7ff781b69380, Parameter=0x627916f9f0, DueTime=0x36ee80, Period=0x36ee80, Flags=0x0 | out: phNewTimer=0x627916faf8*=0x6279176c50) returned 1 [0172.166] GetModuleHandleExW (in: dwFlags=0x1, lpModuleName="ntdll.dll", phModule=0x627981ef60 | out: phModule=0x627981ef60*=0x7ff8ee380000) returned 1 [0172.166] GetProcAddress (hModule=0x7ff8ee380000, lpProcName="NtQuerySystemInformation") returned 0x7ff8ee4138a0 [0172.166] NtQuerySystemInformation (in: SystemInformationClass=0x86, SystemInformation=0x627981eff8, Length=0x20, ResultLength=0x0 | out: SystemInformation=0x627981eff8, ResultLength=0x0) returned 0x0 [0172.171] GetModuleHandleExW (in: dwFlags=0x1, lpModuleName="ntdll.dll", phModule=0x627981ef60 | out: phModule=0x627981ef60*=0x7ff8ee380000) returned 1 [0172.171] GetProcAddress (hModule=0x7ff8ee380000, lpProcName="NtQuerySystemInformation") returned 0x7ff8ee4138a0 [0172.171] NtQuerySystemInformation (in: SystemInformationClass=0x86, SystemInformation=0x627981eff8, Length=0x20, ResultLength=0x0 | out: SystemInformation=0x627981eff8, ResultLength=0x0) returned 0x0 [0186.862] _wcsicmp (_String1="SPPSVC\\55c92734-d682-4d71-983e-d6ec3f16059f", _String2="__##USERSEP##\\$$_RESERVED_$$\\NAMESPACE__") returned 20 [0186.872] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x627981eab0 | out: lpSystemTimeAsFileTime=0x627981eab0*(dwLowDateTime=0x5b3aea1a, dwHighDateTime=0x1d47903)) [0226.220] GetModuleHandleExW (in: dwFlags=0x1, lpModuleName="ntdll.dll", phModule=0x627981dad0 | out: phModule=0x627981dad0*=0x7ff8ee380000) returned 1 [0226.220] GetProcAddress (hModule=0x7ff8ee380000, lpProcName="NtQuerySystemInformation") returned 0x7ff8ee4138a0 [0226.220] NtQuerySystemInformation (in: SystemInformationClass=0x86, SystemInformation=0x627981db68, Length=0x20, ResultLength=0x0 | out: SystemInformation=0x627981db68, ResultLength=0x0) returned 0x0 [0226.236] LocalAlloc (uFlags=0x0, uBytes=0x118) returned 0x6279194820 [0232.131] LoadLibraryExW (lpLibFileName="C:\\Windows\\system32\\wwapi.dll", hFile=0x0, dwFlags=0x0) returned 0x7ff8dcc70000 [0238.089] GetProcAddress (hModule=0x7ff8dcc70000, lpProcName="WwanOpenHandle") returned 0x7ff8dcc71010 [0238.089] GetProcAddress (hModule=0x7ff8dcc70000, lpProcName="WwanCloseHandle") returned 0x7ff8dcc74f40 [0238.090] GetProcAddress (hModule=0x7ff8dcc70000, lpProcName="WwanEnumerateInterfaces") returned 0x7ff8dcc75bb0 [0238.090] GetProcAddress (hModule=0x7ff8dcc70000, lpProcName="WwanQueryInterface") returned 0x7ff8dcc77150 [0238.090] GetProcAddress (hModule=0x7ff8dcc70000, lpProcName="WwanFreeMemory") returned 0x7ff8dcc75d60 [0238.090] WwanOpenHandle () returned 0x426 [0238.108] GetCurrentHwProfileW (in: lpHwProfileInfo=0x627981d930 | out: lpHwProfileInfo=0x627981d930) returned 1 [0238.115] memchr (_Buf=0x6279d80e50, _Val=0, _MaxCount=0x2b1) returned 0x6279d80e6a [0238.115] memchr (_Buf=0x6279d80e6b, _Val=0, _MaxCount=0x296) returned 0x6279d80e72 [0238.115] memchr (_Buf=0x6279d80e73, _Val=0, _MaxCount=0x28e) returned 0x6279d80e7f [0238.116] memchr (_Buf=0x6279d80e9c, _Val=0, _MaxCount=0x265) returned 0x6279d80ea1 [0238.116] memchr (_Buf=0x6279d80ea2, _Val=0, _MaxCount=0x25f) returned 0x6279d80eac [0238.116] memchr (_Buf=0x6279d80ead, _Val=0, _MaxCount=0x254) returned 0x6279d80eb2 [0238.116] memchr (_Buf=0x6279d80eb3, _Val=0, _MaxCount=0x24e) returned 0x6279d80ebd [0238.116] memchr (_Buf=0x6279d80ebe, _Val=0, _MaxCount=0x243) returned 0x6279d80ed6 [0238.116] memchr (_Buf=0x6279d80ed7, _Val=0, _MaxCount=0x22a) returned 0x6279d80eef [0238.116] memchr (_Buf=0x6279d80f00, _Val=0, _MaxCount=0x201) returned 0x6279d80f05 [0238.117] memchr (_Buf=0x6279d80f06, _Val=0, _MaxCount=0x1fb) returned 0x6279d80f10 [0238.117] memchr (_Buf=0x6279d80f11, _Val=0, _MaxCount=0x1f0) returned 0x6279d80f16 [0238.117] memchr (_Buf=0x6279d80f17, _Val=0, _MaxCount=0x1ea) returned 0x6279d80f21 [0238.117] memchr (_Buf=0x6279d80f22, _Val=0, _MaxCount=0x1df) returned 0x6279d80f3a [0238.117] memchr (_Buf=0x6279d80f3b, _Val=0, _MaxCount=0x1c6) returned 0x6279d80f53 [0238.117] memchr (_Buf=0x6279d80f6a, _Val=0, _MaxCount=0x197) returned 0x6279d80f6f [0238.117] memchr (_Buf=0x6279d80f70, _Val=0, _MaxCount=0x191) returned 0x6279d80f88 [0238.117] memchr (_Buf=0x6279d80f89, _Val=0, _MaxCount=0x178) returned 0x6279d80fa1 [0238.117] memchr (_Buf=0x6279d80fa2, _Val=0, _MaxCount=0x15f) returned 0x6279d80fba [0238.117] memchr (_Buf=0x6279d80fbb, _Val=0, _MaxCount=0x146) returned 0x6279d80fd3 [0238.118] memchr (_Buf=0x6279d80fff, _Val=0, _MaxCount=0x102) returned 0x6279d81001 [0238.118] memchr (_Buf=0x6279d81002, _Val=0, _MaxCount=0xff) returned 0x6279d81010 [0238.118] memchr (_Buf=0x6279d81011, _Val=0, _MaxCount=0xf0) returned 0x6279d8103c [0238.118] memchr (_Buf=0x6279d81055, _Val=0, _MaxCount=0xac) returned 0x6279d81055 [0238.119] memchr (_Buf=0x6279d8107f, _Val=0, _MaxCount=0x82) returned 0x6279d81085 [0238.119] memchr (_Buf=0x6279d81086, _Val=0, _MaxCount=0x7b) returned 0x6279d81098 [0238.119] memchr (_Buf=0x6279d81099, _Val=0, _MaxCount=0x68) returned 0x6279d810a5 [0238.119] memchr (_Buf=0x6279d810a6, _Val=0, _MaxCount=0x5b) returned 0x6279d810b7 [0238.119] memchr (_Buf=0x6279d810b8, _Val=0, _MaxCount=0x49) returned 0x6279d810cc [0238.191] memchr (_Buf=0x6279d810ed, _Val=0, _MaxCount=0x14) returned 0x6279d810ed [0238.191] memchr (_Buf=0x6279d810fa, _Val=0, _MaxCount=0x7) returned 0x6279d810fa [0238.192] memchr (_Buf=0x6279d81100, _Val=0, _MaxCount=0x1) returned 0x6279d81100 [0238.196] memchr (_Buf=0x6279d80e50, _Val=0, _MaxCount=0x2b1) returned 0x6279d80e6a [0238.196] memchr (_Buf=0x6279d80e6b, _Val=0, _MaxCount=0x296) returned 0x6279d80e72 [0238.196] memchr (_Buf=0x6279d80e73, _Val=0, _MaxCount=0x28e) returned 0x6279d80e7f [0238.196] memchr (_Buf=0x6279d80e9c, _Val=0, _MaxCount=0x265) returned 0x6279d80ea1 [0238.197] memchr (_Buf=0x6279d80ea2, _Val=0, _MaxCount=0x25f) returned 0x6279d80eac [0238.197] memchr (_Buf=0x6279d80ead, _Val=0, _MaxCount=0x254) returned 0x6279d80eb2 [0238.197] memchr (_Buf=0x6279d80eb3, _Val=0, _MaxCount=0x24e) returned 0x6279d80ebd [0238.197] memchr (_Buf=0x6279d80ebe, _Val=0, _MaxCount=0x243) returned 0x6279d80ed6 [0238.197] memchr (_Buf=0x6279d80ed7, _Val=0, _MaxCount=0x22a) returned 0x6279d80eef [0244.061] memchr (_Buf=0x6279d80f00, _Val=0, _MaxCount=0x201) returned 0x6279d80f05 [0244.061] memchr (_Buf=0x6279d80f06, _Val=0, _MaxCount=0x1fb) returned 0x6279d80f10 [0244.061] memchr (_Buf=0x6279d80f11, _Val=0, _MaxCount=0x1f0) returned 0x6279d80f16 [0244.061] memchr (_Buf=0x6279d80f17, _Val=0, _MaxCount=0x1ea) returned 0x6279d80f21 [0244.061] memchr (_Buf=0x6279d80f22, _Val=0, _MaxCount=0x1df) returned 0x6279d80f3a [0244.061] memchr (_Buf=0x6279d80f3b, _Val=0, _MaxCount=0x1c6) returned 0x6279d80f53 [0244.080] LocalAlloc (uFlags=0x0, uBytes=0x58) returned 0x62791c4d20 [0244.088] LocalAlloc (uFlags=0x0, uBytes=0x80) returned 0x6279dde730 [0244.374] GetTickCount () returned 0x4f539 [0249.947] RegFlushKey (hKey=0x324) returned 0x0 [0249.999] NtLockProductActivationKeys (pPrivateVer=0x0, pSafeMode=0x0) returned 0x0 [0250.210] GetFileAttributesW (lpFileName="C:\\Windows\\System32\\spp\\store\\2.0\\data.dat.bak" (normalized: "c:\\windows\\system32\\spp\\store\\2.0\\data.dat.bak")) returned 0xffffffff [0250.210] GetLastError () returned 0x2 [0250.210] GetFileAttributesW (lpFileName="C:\\Windows\\System32\\spp\\store\\2.0\\data.dat.tmp" (normalized: "c:\\windows\\system32\\spp\\store\\2.0\\data.dat.tmp")) returned 0xffffffff [0250.210] GetLastError () returned 0x2 [0250.211] CreateFileW (lpFileName="C:\\Windows\\System32\\spp\\store\\2.0\\data.dat.tmp" (normalized: "c:\\windows\\system32\\spp\\store\\2.0\\data.dat.tmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80000002, hTemplateFile=0x0) returned 0x128 [0250.213] WriteFile (in: hFile=0x128, lpBuffer=0x62791d88d0*, nNumberOfBytesToWrite=0x7a80, lpNumberOfBytesWritten=0x627981d578, lpOverlapped=0x0 | out: lpBuffer=0x62791d88d0*, lpNumberOfBytesWritten=0x627981d578*=0x7a80, lpOverlapped=0x0) returned 1 [0250.275] MoveFileExW (lpExistingFileName="C:\\Windows\\System32\\spp\\store\\2.0\\data.dat.tmp" (normalized: "c:\\windows\\system32\\spp\\store\\2.0\\data.dat.tmp"), lpNewFileName="C:\\Windows\\System32\\spp\\store\\2.0\\data.dat.bak" (normalized: "c:\\windows\\system32\\spp\\store\\2.0\\data.dat.bak"), dwFlags=0x9) returned 1 [0250.277] MoveFileExW (lpExistingFileName="C:\\Windows\\System32\\spp\\store\\2.0\\data.dat.bak" (normalized: "c:\\windows\\system32\\spp\\store\\2.0\\data.dat.bak"), lpNewFileName="C:\\Windows\\System32\\spp\\store\\2.0\\data.dat" (normalized: "c:\\windows\\system32\\spp\\store\\2.0\\data.dat"), dwFlags=0x9) returned 1 [0250.292] _wcsicmp (_String1="SPPSVC\\55c92734-d682-4d71-983e-d6ec3f16059f", _String2="__##USERSEP##\\$$_RESERVED_$$\\NAMESPACE__") returned 20 [0250.303] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x627981d980 | out: lpSystemTimeAsFileTime=0x627981d980*(dwLowDateTime=0x81092efa, dwHighDateTime=0x1d47903)) [0250.306] GetTickCount () returned 0x50c6b [0250.377] GetTickCount () returned 0x50ca9 [0265.368] GetFileAttributesW (lpFileName="C:\\Windows\\System32\\spp\\store\\2.0\\data.dat.bak" (normalized: "c:\\windows\\system32\\spp\\store\\2.0\\data.dat.bak")) returned 0xffffffff [0265.369] GetLastError () returned 0x2 [0265.369] GetFileAttributesW (lpFileName="C:\\Windows\\System32\\spp\\store\\2.0\\data.dat.tmp" (normalized: "c:\\windows\\system32\\spp\\store\\2.0\\data.dat.tmp")) returned 0xffffffff [0265.369] GetLastError () returned 0x2 [0265.369] CreateFileW (lpFileName="C:\\Windows\\System32\\spp\\store\\2.0\\data.dat.tmp" (normalized: "c:\\windows\\system32\\spp\\store\\2.0\\data.dat.tmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80000002, hTemplateFile=0x0) returned 0x128 [0265.370] WriteFile (in: hFile=0x128, lpBuffer=0x62791dc480*, nNumberOfBytesToWrite=0x7ba0, lpNumberOfBytesWritten=0x627981d438, lpOverlapped=0x0 | out: lpBuffer=0x62791dc480*, lpNumberOfBytesWritten=0x627981d438*=0x7ba0, lpOverlapped=0x0) returned 1 [0265.421] MoveFileExW (lpExistingFileName="C:\\Windows\\System32\\spp\\store\\2.0\\data.dat.tmp" (normalized: "c:\\windows\\system32\\spp\\store\\2.0\\data.dat.tmp"), lpNewFileName="C:\\Windows\\System32\\spp\\store\\2.0\\data.dat.bak" (normalized: "c:\\windows\\system32\\spp\\store\\2.0\\data.dat.bak"), dwFlags=0x9) returned 1 [0265.423] MoveFileExW (lpExistingFileName="C:\\Windows\\System32\\spp\\store\\2.0\\data.dat.bak" (normalized: "c:\\windows\\system32\\spp\\store\\2.0\\data.dat.bak"), lpNewFileName="C:\\Windows\\System32\\spp\\store\\2.0\\data.dat" (normalized: "c:\\windows\\system32\\spp\\store\\2.0\\data.dat"), dwFlags=0x9) returned 1 [0265.427] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x627981d950 | out: lpSystemTimeAsFileTime=0x627981d950*(dwLowDateTime=0x8a0df923, dwHighDateTime=0x1d47903)) [0265.436] _wcsicmp (_String1="SPPSVC\\55c92734-d682-4d71-983e-d6ec3f16059f", _String2="__##USERSEP##\\$$_RESERVED_$$\\NAMESPACE__") returned 20 [0265.446] GetTickCount () returned 0x54780 [0265.582] GetFileAttributesW (lpFileName="C:\\Windows\\System32\\spp\\store\\2.0\\data.dat.bak" (normalized: "c:\\windows\\system32\\spp\\store\\2.0\\data.dat.bak")) returned 0xffffffff [0265.582] GetLastError () returned 0x2 [0265.582] GetFileAttributesW (lpFileName="C:\\Windows\\System32\\spp\\store\\2.0\\data.dat.tmp" (normalized: "c:\\windows\\system32\\spp\\store\\2.0\\data.dat.tmp")) returned 0xffffffff [0265.582] GetLastError () returned 0x2 [0265.582] CreateFileW (lpFileName="C:\\Windows\\System32\\spp\\store\\2.0\\data.dat.tmp" (normalized: "c:\\windows\\system32\\spp\\store\\2.0\\data.dat.tmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80000002, hTemplateFile=0x0) returned 0x128 [0265.583] WriteFile (in: hFile=0x128, lpBuffer=0x62791dc4a0*, nNumberOfBytesToWrite=0x7bc0, lpNumberOfBytesWritten=0x627981d748, lpOverlapped=0x0 | out: lpBuffer=0x62791dc4a0*, lpNumberOfBytesWritten=0x627981d748*=0x7bc0, lpOverlapped=0x0) returned 1 [0265.641] MoveFileExW (lpExistingFileName="C:\\Windows\\System32\\spp\\store\\2.0\\data.dat.tmp" (normalized: "c:\\windows\\system32\\spp\\store\\2.0\\data.dat.tmp"), lpNewFileName="C:\\Windows\\System32\\spp\\store\\2.0\\data.dat.bak" (normalized: "c:\\windows\\system32\\spp\\store\\2.0\\data.dat.bak"), dwFlags=0x9) returned 1 [0265.642] MoveFileExW (lpExistingFileName="C:\\Windows\\System32\\spp\\store\\2.0\\data.dat.bak" (normalized: "c:\\windows\\system32\\spp\\store\\2.0\\data.dat.bak"), lpNewFileName="C:\\Windows\\System32\\spp\\store\\2.0\\data.dat" (normalized: "c:\\windows\\system32\\spp\\store\\2.0\\data.dat"), dwFlags=0x9) returned 1 Thread: id = 451 os_tid = 0xc4c Thread: id = 452 os_tid = 0x128 Thread: id = 461 os_tid = 0xc5c Thread: id = 503 os_tid = 0xd48 Thread: id = 506 os_tid = 0xd08 Process: id = "25" image_name = "backgroundtaskhost.exe" filename = "c:\\windows\\system32\\backgroundtaskhost.exe" page_root = "0x42f03000" os_pid = "0x8d4" os_integrity_level = "0x1000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "11" os_parent_pid = "0x248" cmd_line = "\"C:\\Windows\\system32\\backgroundTaskHost.exe\" -ServerName:CortanaUI.AppXy7vb4pc2dr3kc93kfc509b1d0arkfb2x.mca" cur_dir = "C:\\Windows\\SystemApps\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\" os_username = "LHNIWSJ\\CIiHmnxMn6Ps" os_groups = "LHNIWSJ\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x10], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:00014ee5" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 2814 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 2815 start_va = 0x3c30660000 end_va = 0x3c3067ffff entry_point = 0x0 region_type = private name = "private_0x0000003c30660000" filename = "" Region: id = 2816 start_va = 0x3c30680000 end_va = 0x3c30693fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000003c30680000" filename = "" Region: id = 2817 start_va = 0x3c306a0000 end_va = 0x3c3071ffff entry_point = 0x0 region_type = private name = "private_0x0000003c306a0000" filename = "" Region: id = 2818 start_va = 0x3c30720000 end_va = 0x3c30723fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000003c30720000" filename = "" Region: id = 2819 start_va = 0x3c30730000 end_va = 0x3c30731fff entry_point = 0x0 region_type = private name = "private_0x0000003c30730000" filename = "" Region: id = 2820 start_va = 0x3c30740000 end_va = 0x3c30740fff entry_point = 0x3c30740000 region_type = mapped_file name = "s-1-5-21-1462094071-1423818996-289466292-1000.pckgdep" filename = "\\ProgramData\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\S-1-5-21-1462094071-1423818996-289466292-1000.pckgdep" (normalized: "c:\\programdata\\microsoft\\windows\\apprepository\\packages\\microsoft.windows.cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\s-1-5-21-1462094071-1423818996-289466292-1000.pckgdep") Region: id = 2821 start_va = 0x7df5ff710000 end_va = 0x7ff5ff70ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007df5ff710000" filename = "" Region: id = 2822 start_va = 0x7ff655880000 end_va = 0x7ff6558a2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007ff655880000" filename = "" Region: id = 2823 start_va = 0x7ff6558a7000 end_va = 0x7ff6558a7fff entry_point = 0x0 region_type = private name = "private_0x00007ff6558a7000" filename = "" Region: id = 2824 start_va = 0x7ff6558ae000 end_va = 0x7ff6558affff entry_point = 0x0 region_type = private name = "private_0x00007ff6558ae000" filename = "" Region: id = 2825 start_va = 0x7ff6560e0000 end_va = 0x7ff6560e6fff entry_point = 0x7ff6560e0000 region_type = mapped_file name = "backgroundtaskhost.exe" filename = "\\Windows\\System32\\backgroundTaskHost.exe" (normalized: "c:\\windows\\system32\\backgroundtaskhost.exe") Region: id = 2826 start_va = 0x7ff8ee380000 end_va = 0x7ff8ee541fff entry_point = 0x7ff8ee380000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 2827 start_va = 0x3c30660000 end_va = 0x3c3066ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000003c30660000" filename = "" Region: id = 2828 start_va = 0x3c30790000 end_va = 0x3c30796fff entry_point = 0x0 region_type = private name = "private_0x0000003c30790000" filename = "" Region: id = 2829 start_va = 0x3c30800000 end_va = 0x3c308fffff entry_point = 0x0 region_type = private name = "private_0x0000003c30800000" filename = "" Region: id = 2830 start_va = 0x3c30900000 end_va = 0x3c309bdfff entry_point = 0x3c30900000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 2831 start_va = 0x3c309c0000 end_va = 0x3c30a3ffff entry_point = 0x0 region_type = private name = "private_0x0000003c309c0000" filename = "" Region: id = 2832 start_va = 0x3c30c30000 end_va = 0x3c30c36fff entry_point = 0x0 region_type = private name = "private_0x0000003c30c30000" filename = "" Region: id = 2833 start_va = 0x3c30d00000 end_va = 0x3c30dfffff entry_point = 0x0 region_type = private name = "private_0x0000003c30d00000" filename = "" Region: id = 2834 start_va = 0x7ff655780000 end_va = 0x7ff65587ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007ff655780000" filename = "" Region: id = 2835 start_va = 0x7ff6558ac000 end_va = 0x7ff6558adfff entry_point = 0x0 region_type = private name = "private_0x00007ff6558ac000" filename = "" Region: id = 2836 start_va = 0x7ff8eae20000 end_va = 0x7ff8eae2efff entry_point = 0x7ff8eae20000 region_type = mapped_file name = "kernel.appcore.dll" filename = "\\Windows\\System32\\kernel.appcore.dll" (normalized: "c:\\windows\\system32\\kernel.appcore.dll") Region: id = 2837 start_va = 0x7ff8eb870000 end_va = 0x7ff8eba4cfff entry_point = 0x7ff8eb870000 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 2838 start_va = 0x7ff8ec450000 end_va = 0x7ff8ec575fff entry_point = 0x7ff8ec450000 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 2839 start_va = 0x7ff8edd60000 end_va = 0x7ff8edfdbfff entry_point = 0x7ff8edd60000 region_type = mapped_file name = "combase.dll" filename = "\\Windows\\System32\\combase.dll" (normalized: "c:\\windows\\system32\\combase.dll") Region: id = 2840 start_va = 0x7ff8ee0b0000 end_va = 0x7ff8ee14cfff entry_point = 0x7ff8ee0b0000 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 2841 start_va = 0x7ff8ee2d0000 end_va = 0x7ff8ee37cfff entry_point = 0x7ff8ee2d0000 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 2842 start_va = 0x3c30670000 end_va = 0x3c30670fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000003c30670000" filename = "" Region: id = 2843 start_va = 0x3c30740000 end_va = 0x3c30769fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000003c30740000" filename = "" Region: id = 2844 start_va = 0x3c30a40000 end_va = 0x3c30abffff entry_point = 0x0 region_type = private name = "private_0x0000003c30a40000" filename = "" Region: id = 2845 start_va = 0x7ff6558aa000 end_va = 0x7ff6558abfff entry_point = 0x0 region_type = private name = "private_0x00007ff6558aa000" filename = "" Region: id = 2846 start_va = 0x7ff8e9860000 end_va = 0x7ff8e994dfff entry_point = 0x7ff8e9860000 region_type = mapped_file name = "twinapi.appcore.dll" filename = "\\Windows\\System32\\twinapi.appcore.dll" (normalized: "c:\\windows\\system32\\twinapi.appcore.dll") Region: id = 2847 start_va = 0x7ff8ea360000 end_va = 0x7ff8ea37efff entry_point = 0x7ff8ea360000 region_type = mapped_file name = "userenv.dll" filename = "\\Windows\\System32\\userenv.dll" (normalized: "c:\\windows\\system32\\userenv.dll") Region: id = 2848 start_va = 0x7ff8eabd0000 end_va = 0x7ff8eabf7fff entry_point = 0x7ff8eabd0000 region_type = mapped_file name = "bcrypt.dll" filename = "\\Windows\\System32\\bcrypt.dll" (normalized: "c:\\windows\\system32\\bcrypt.dll") Region: id = 2849 start_va = 0x7ff8eac00000 end_va = 0x7ff8eac6afff entry_point = 0x7ff8eac00000 region_type = mapped_file name = "bcryptprimitives.dll" filename = "\\Windows\\System32\\bcryptprimitives.dll" (normalized: "c:\\windows\\system32\\bcryptprimitives.dll") Region: id = 2850 start_va = 0x7ff8eae30000 end_va = 0x7ff8eae42fff entry_point = 0x7ff8eae30000 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\System32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll") Region: id = 2851 start_va = 0x7ff8ec240000 end_va = 0x7ff8ec29afff entry_point = 0x7ff8ec240000 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Thread: id = 468 os_tid = 0x160 Thread: id = 469 os_tid = 0x208 Thread: id = 470 os_tid = 0x34c Process: id = "26" image_name = "mpcmdrun.exe" filename = "c:\\program files\\windows defender\\mpcmdrun.exe" page_root = "0x2263c000" os_pid = "0x784" os_integrity_level = "0x4000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "13" os_parent_pid = "0x338" cmd_line = "\"C:\\Program Files\\Windows Defender\\mpcmdrun.exe\" -wdenable" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\Local Service" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\AppIDSvc" [0xa], "NT SERVICE\\Audiosrv" [0xe], "NT SERVICE\\Dhcp" [0xe], "NT SERVICE\\eventlog" [0xe], "NT SERVICE\\HomeGroupProvider" [0xa], "NT SERVICE\\icssvc" [0xa], "NT SERVICE\\lmhosts" [0xe], "NT SERVICE\\NgcCtnrSvc" [0xa], "NT SERVICE\\vmictimesync" [0xa], "NT SERVICE\\Wcmsvc" [0xe], "NT SERVICE\\wscsvc" [0xe], "NT AUTHORITY\\Logon Session 00000000:0000d8b4" [0xc000000f], "LOCAL" [0x7] Region: id = 3183 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 3184 start_va = 0x32d91e0000 end_va = 0x32d91fffff entry_point = 0x0 region_type = private name = "private_0x00000032d91e0000" filename = "" Region: id = 3185 start_va = 0x32d9200000 end_va = 0x32d9213fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000032d9200000" filename = "" Region: id = 3186 start_va = 0x32d9220000 end_va = 0x32d929ffff entry_point = 0x0 region_type = private name = "private_0x00000032d9220000" filename = "" Region: id = 3187 start_va = 0x32d92a0000 end_va = 0x32d92a3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000032d92a0000" filename = "" Region: id = 3188 start_va = 0x32d92b0000 end_va = 0x32d92b0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000032d92b0000" filename = "" Region: id = 3189 start_va = 0x32d92c0000 end_va = 0x32d92c1fff entry_point = 0x0 region_type = private name = "private_0x00000032d92c0000" filename = "" Region: id = 3190 start_va = 0x7df5ff200000 end_va = 0x7ff5ff1fffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007df5ff200000" filename = "" Region: id = 3191 start_va = 0x7ff6a8a70000 end_va = 0x7ff6a8a92fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007ff6a8a70000" filename = "" Region: id = 3192 start_va = 0x7ff6a8a9b000 end_va = 0x7ff6a8a9bfff entry_point = 0x0 region_type = private name = "private_0x00007ff6a8a9b000" filename = "" Region: id = 3193 start_va = 0x7ff6a8a9e000 end_va = 0x7ff6a8a9ffff entry_point = 0x0 region_type = private name = "private_0x00007ff6a8a9e000" filename = "" Region: id = 3194 start_va = 0x7ff6a9270000 end_va = 0x7ff6a92c6fff entry_point = 0x7ff6a9270000 region_type = mapped_file name = "mpcmdrun.exe" filename = "\\Program Files\\Windows Defender\\MpCmdRun.exe" (normalized: "c:\\program files\\windows defender\\mpcmdrun.exe") Region: id = 3195 start_va = 0x7ff8ee380000 end_va = 0x7ff8ee541fff entry_point = 0x7ff8ee380000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 3196 start_va = 0x32d93d0000 end_va = 0x32d94cffff entry_point = 0x0 region_type = private name = "private_0x00000032d93d0000" filename = "" Region: id = 3197 start_va = 0x7ff8eb870000 end_va = 0x7ff8eba4cfff entry_point = 0x7ff8eb870000 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 3198 start_va = 0x7ff8ee2d0000 end_va = 0x7ff8ee37cfff entry_point = 0x7ff8ee2d0000 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 3255 start_va = 0x32d91e0000 end_va = 0x32d91effff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000032d91e0000" filename = "" Region: id = 3256 start_va = 0x32d91f0000 end_va = 0x32d91f6fff entry_point = 0x0 region_type = private name = "private_0x00000032d91f0000" filename = "" Region: id = 3257 start_va = 0x32d92d0000 end_va = 0x32d938dfff entry_point = 0x32d92d0000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 3258 start_va = 0x32d9390000 end_va = 0x32d9396fff entry_point = 0x0 region_type = private name = "private_0x00000032d9390000" filename = "" Region: id = 3259 start_va = 0x32d93a0000 end_va = 0x32d93a0fff entry_point = 0x0 region_type = private name = "private_0x00000032d93a0000" filename = "" Region: id = 3260 start_va = 0x32d93b0000 end_va = 0x32d93b0fff entry_point = 0x0 region_type = private name = "private_0x00000032d93b0000" filename = "" Region: id = 3261 start_va = 0x32d94d0000 end_va = 0x32d954ffff entry_point = 0x0 region_type = private name = "private_0x00000032d94d0000" filename = "" Region: id = 3262 start_va = 0x32d9550000 end_va = 0x32d960ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000032d9550000" filename = "" Region: id = 3263 start_va = 0x32d9620000 end_va = 0x32d962ffff entry_point = 0x0 region_type = private name = "private_0x00000032d9620000" filename = "" Region: id = 3264 start_va = 0x32d9630000 end_va = 0x32d97b7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000032d9630000" filename = "" Region: id = 3265 start_va = 0x32d97c0000 end_va = 0x32d9940fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000032d97c0000" filename = "" Region: id = 3266 start_va = 0x7ff6a8970000 end_va = 0x7ff6a8a6ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007ff6a8970000" filename = "" Region: id = 3267 start_va = 0x7ff6a8a9c000 end_va = 0x7ff6a8a9dfff entry_point = 0x0 region_type = private name = "private_0x00007ff6a8a9c000" filename = "" Region: id = 3268 start_va = 0x7ff8d7540000 end_va = 0x7ff8d7619fff entry_point = 0x7ff8d7540000 region_type = mapped_file name = "mpclient.dll" filename = "\\Program Files\\Windows Defender\\MpClient.dll" (normalized: "c:\\program files\\windows defender\\mpclient.dll") Region: id = 3269 start_va = 0x7ff8e3a50000 end_va = 0x7ff8e3a59fff entry_point = 0x7ff8e3a50000 region_type = mapped_file name = "version.dll" filename = "\\Windows\\System32\\version.dll" (normalized: "c:\\windows\\system32\\version.dll") Region: id = 3270 start_va = 0x7ff8e5480000 end_va = 0x7ff8e548bfff entry_point = 0x7ff8e5480000 region_type = mapped_file name = "secur32.dll" filename = "\\Windows\\System32\\secur32.dll" (normalized: "c:\\windows\\system32\\secur32.dll") Region: id = 3271 start_va = 0x7ff8e5ff0000 end_va = 0x7ff8e6016fff entry_point = 0x7ff8e5ff0000 region_type = mapped_file name = "cabinet.dll" filename = "\\Windows\\System32\\cabinet.dll" (normalized: "c:\\windows\\system32\\cabinet.dll") Region: id = 3272 start_va = 0x7ff8ea360000 end_va = 0x7ff8ea37efff entry_point = 0x7ff8ea360000 region_type = mapped_file name = "userenv.dll" filename = "\\Windows\\System32\\userenv.dll" (normalized: "c:\\windows\\system32\\userenv.dll") Region: id = 3273 start_va = 0x7ff8ea9d0000 end_va = 0x7ff8ea9fbfff entry_point = 0x7ff8ea9d0000 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\System32\\sspicli.dll" (normalized: "c:\\windows\\system32\\sspicli.dll") Region: id = 3274 start_va = 0x7ff8eadb0000 end_va = 0x7ff8eadc0fff entry_point = 0x7ff8eadb0000 region_type = mapped_file name = "msasn1.dll" filename = "\\Windows\\System32\\msasn1.dll" (normalized: "c:\\windows\\system32\\msasn1.dll") Region: id = 3275 start_va = 0x7ff8eae30000 end_va = 0x7ff8eae42fff entry_point = 0x7ff8eae30000 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\System32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll") Region: id = 3276 start_va = 0x7ff8eae50000 end_va = 0x7ff8eaea3fff entry_point = 0x7ff8eae50000 region_type = mapped_file name = "wintrust.dll" filename = "\\Windows\\System32\\wintrust.dll" (normalized: "c:\\windows\\system32\\wintrust.dll") Region: id = 3277 start_va = 0x7ff8eafb0000 end_va = 0x7ff8eb170fff entry_point = 0x7ff8eafb0000 region_type = mapped_file name = "crypt32.dll" filename = "\\Windows\\System32\\crypt32.dll" (normalized: "c:\\windows\\system32\\crypt32.dll") Region: id = 3278 start_va = 0x7ff8ebb30000 end_va = 0x7ff8ebbedfff entry_point = 0x7ff8ebb30000 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll") Region: id = 3279 start_va = 0x7ff8ebdc0000 end_va = 0x7ff8ebf0dfff entry_point = 0x7ff8ebdc0000 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 3280 start_va = 0x7ff8ec240000 end_va = 0x7ff8ec29afff entry_point = 0x7ff8ec240000 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 3281 start_va = 0x7ff8ec300000 end_va = 0x7ff8ec440fff entry_point = 0x7ff8ec300000 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll") Region: id = 3282 start_va = 0x7ff8ec450000 end_va = 0x7ff8ec575fff entry_point = 0x7ff8ec450000 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 3283 start_va = 0x7ff8edbc0000 end_va = 0x7ff8edd44fff entry_point = 0x7ff8edbc0000 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 3284 start_va = 0x7ff8edd60000 end_va = 0x7ff8edfdbfff entry_point = 0x7ff8edd60000 region_type = mapped_file name = "combase.dll" filename = "\\Windows\\System32\\combase.dll" (normalized: "c:\\windows\\system32\\combase.dll") Region: id = 3285 start_va = 0x7ff8ee0b0000 end_va = 0x7ff8ee14cfff entry_point = 0x7ff8ee0b0000 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 3286 start_va = 0x7ff8ee190000 end_va = 0x7ff8ee235fff entry_point = 0x7ff8ee190000 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 3287 start_va = 0x32d9950000 end_va = 0x32d9a4ffff entry_point = 0x0 region_type = private name = "private_0x00000032d9950000" filename = "" Region: id = 3288 start_va = 0x32d9a50000 end_va = 0x32d9acffff entry_point = 0x0 region_type = private name = "private_0x00000032d9a50000" filename = "" Region: id = 3289 start_va = 0x7ff6a8a99000 end_va = 0x7ff6a8a9afff entry_point = 0x0 region_type = private name = "private_0x00007ff6a8a99000" filename = "" Region: id = 3290 start_va = 0x7ff8e9cd0000 end_va = 0x7ff8e9cf2fff entry_point = 0x7ff8e9cd0000 region_type = mapped_file name = "gpapi.dll" filename = "\\Windows\\System32\\gpapi.dll" (normalized: "c:\\windows\\system32\\gpapi.dll") Thread: id = 474 os_tid = 0x420 Thread: id = 479 os_tid = 0x9d8 Thread: id = 480 os_tid = 0x390 Process: id = "27" image_name = "conhost.exe" filename = "c:\\windows\\system32\\conhost.exe" page_root = "0x74e4d000" os_pid = "0x654" os_integrity_level = "0x4000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "26" os_parent_pid = "0x784" cmd_line = "\\??\\C:\\Windows\\system32\\conhost.exe 0xffffffff -ForceV1" cur_dir = "C:\\Windows" os_username = "NT AUTHORITY\\Local Service" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\AppIDSvc" [0xa], "NT SERVICE\\Audiosrv" [0xe], "NT SERVICE\\Dhcp" [0xe], "NT SERVICE\\eventlog" [0xe], "NT SERVICE\\HomeGroupProvider" [0xa], "NT SERVICE\\icssvc" [0xa], "NT SERVICE\\lmhosts" [0xe], "NT SERVICE\\NgcCtnrSvc" [0xa], "NT SERVICE\\vmictimesync" [0xa], "NT SERVICE\\Wcmsvc" [0xe], "NT SERVICE\\wscsvc" [0xe], "NT AUTHORITY\\Logon Session 00000000:0000d8b4" [0xc000000f], "LOCAL" [0x7] Region: id = 3199 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 3200 start_va = 0x1348a50000 end_va = 0x1348a6ffff entry_point = 0x0 region_type = private name = "private_0x0000001348a50000" filename = "" Region: id = 3201 start_va = 0x1348a70000 end_va = 0x1348a83fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000001348a70000" filename = "" Region: id = 3202 start_va = 0x1348a90000 end_va = 0x1348acffff entry_point = 0x0 region_type = private name = "private_0x0000001348a90000" filename = "" Region: id = 3203 start_va = 0x7df5ff7e0000 end_va = 0x7ff5ff7dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007df5ff7e0000" filename = "" Region: id = 3204 start_va = 0x7ff71e950000 end_va = 0x7ff71e972fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007ff71e950000" filename = "" Region: id = 3205 start_va = 0x7ff71e97d000 end_va = 0x7ff71e97dfff entry_point = 0x0 region_type = private name = "private_0x00007ff71e97d000" filename = "" Region: id = 3206 start_va = 0x7ff71e97e000 end_va = 0x7ff71e97ffff entry_point = 0x0 region_type = private name = "private_0x00007ff71e97e000" filename = "" Region: id = 3207 start_va = 0x7ff71ef00000 end_va = 0x7ff71ef10fff entry_point = 0x7ff71ef00000 region_type = mapped_file name = "conhost.exe" filename = "\\Windows\\System32\\conhost.exe" (normalized: "c:\\windows\\system32\\conhost.exe") Region: id = 3208 start_va = 0x7ff8ee380000 end_va = 0x7ff8ee541fff entry_point = 0x7ff8ee380000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 3209 start_va = 0x1348c80000 end_va = 0x1348d7ffff entry_point = 0x0 region_type = private name = "private_0x0000001348c80000" filename = "" Region: id = 3210 start_va = 0x7ff8eb870000 end_va = 0x7ff8eba4cfff entry_point = 0x7ff8eb870000 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 3211 start_va = 0x7ff8ee2d0000 end_va = 0x7ff8ee37cfff entry_point = 0x7ff8ee2d0000 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 3212 start_va = 0x1348a50000 end_va = 0x1348a5ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000001348a50000" filename = "" Region: id = 3213 start_va = 0x1348a60000 end_va = 0x1348a66fff entry_point = 0x0 region_type = private name = "private_0x0000001348a60000" filename = "" Region: id = 3214 start_va = 0x1348ad0000 end_va = 0x1348b8dfff entry_point = 0x1348ad0000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 3215 start_va = 0x1348b90000 end_va = 0x1348bcffff entry_point = 0x0 region_type = private name = "private_0x0000001348b90000" filename = "" Region: id = 3216 start_va = 0x1348bd0000 end_va = 0x1348bd0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000001348bd0000" filename = "" Region: id = 3217 start_va = 0x1348be0000 end_va = 0x1348be6fff entry_point = 0x0 region_type = private name = "private_0x0000001348be0000" filename = "" Region: id = 3218 start_va = 0x1348bf0000 end_va = 0x1348bf0fff entry_point = 0x0 region_type = private name = "private_0x0000001348bf0000" filename = "" Region: id = 3219 start_va = 0x1348c00000 end_va = 0x1348c00fff entry_point = 0x0 region_type = private name = "private_0x0000001348c00000" filename = "" Region: id = 3220 start_va = 0x1348d80000 end_va = 0x1348f07fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000001348d80000" filename = "" Region: id = 3221 start_va = 0x1348f20000 end_va = 0x1348f2ffff entry_point = 0x0 region_type = private name = "private_0x0000001348f20000" filename = "" Region: id = 3222 start_va = 0x1348f30000 end_va = 0x13490b0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000001348f30000" filename = "" Region: id = 3223 start_va = 0x13490c0000 end_va = 0x134917ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000013490c0000" filename = "" Region: id = 3224 start_va = 0x7ff71e850000 end_va = 0x7ff71e94ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007ff71e850000" filename = "" Region: id = 3225 start_va = 0x7ff71e97b000 end_va = 0x7ff71e97cfff entry_point = 0x0 region_type = private name = "private_0x00007ff71e97b000" filename = "" Region: id = 3226 start_va = 0x7ff8e6e10000 end_va = 0x7ff8e6e62fff entry_point = 0x7ff8e6e10000 region_type = mapped_file name = "conhostv2.dll" filename = "\\Windows\\System32\\ConhostV2.dll" (normalized: "c:\\windows\\system32\\conhostv2.dll") Region: id = 3227 start_va = 0x7ff8e79b0000 end_va = 0x7ff8e7b32fff entry_point = 0x7ff8e79b0000 region_type = mapped_file name = "propsys.dll" filename = "\\Windows\\System32\\propsys.dll" (normalized: "c:\\windows\\system32\\propsys.dll") Region: id = 3228 start_va = 0x7ff8ebb30000 end_va = 0x7ff8ebbedfff entry_point = 0x7ff8ebb30000 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll") Region: id = 3229 start_va = 0x7ff8ebdc0000 end_va = 0x7ff8ebf0dfff entry_point = 0x7ff8ebdc0000 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 3230 start_va = 0x7ff8ec0c0000 end_va = 0x7ff8ec21bfff entry_point = 0x7ff8ec0c0000 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\System32\\msctf.dll" (normalized: "c:\\windows\\system32\\msctf.dll") Region: id = 3231 start_va = 0x7ff8ec240000 end_va = 0x7ff8ec29afff entry_point = 0x7ff8ec240000 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 3232 start_va = 0x7ff8ec300000 end_va = 0x7ff8ec440fff entry_point = 0x7ff8ec300000 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll") Region: id = 3233 start_va = 0x7ff8ec450000 end_va = 0x7ff8ec575fff entry_point = 0x7ff8ec450000 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 3234 start_va = 0x7ff8edbc0000 end_va = 0x7ff8edd44fff entry_point = 0x7ff8edbc0000 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 3235 start_va = 0x7ff8edd60000 end_va = 0x7ff8edfdbfff entry_point = 0x7ff8edd60000 region_type = mapped_file name = "combase.dll" filename = "\\Windows\\System32\\combase.dll" (normalized: "c:\\windows\\system32\\combase.dll") Region: id = 3236 start_va = 0x7ff8ee0b0000 end_va = 0x7ff8ee14cfff entry_point = 0x7ff8ee0b0000 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 3237 start_va = 0x7ff8ee150000 end_va = 0x7ff8ee185fff entry_point = 0x7ff8ee150000 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 3238 start_va = 0x1348c10000 end_va = 0x1348c4ffff entry_point = 0x0 region_type = private name = "private_0x0000001348c10000" filename = "" Region: id = 3239 start_va = 0x1349200000 end_va = 0x134920ffff entry_point = 0x0 region_type = private name = "private_0x0000001349200000" filename = "" Region: id = 3240 start_va = 0x7ff71e979000 end_va = 0x7ff71e97afff entry_point = 0x0 region_type = private name = "private_0x00007ff71e979000" filename = "" Region: id = 3241 start_va = 0x7ff8eadd0000 end_va = 0x7ff8eae19fff entry_point = 0x7ff8eadd0000 region_type = mapped_file name = "powrprof.dll" filename = "\\Windows\\System32\\powrprof.dll" (normalized: "c:\\windows\\system32\\powrprof.dll") Region: id = 3242 start_va = 0x7ff8eae20000 end_va = 0x7ff8eae2efff entry_point = 0x7ff8eae20000 region_type = mapped_file name = "kernel.appcore.dll" filename = "\\Windows\\System32\\kernel.appcore.dll" (normalized: "c:\\windows\\system32\\kernel.appcore.dll") Region: id = 3243 start_va = 0x7ff8eae30000 end_va = 0x7ff8eae42fff entry_point = 0x7ff8eae30000 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\System32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll") Region: id = 3244 start_va = 0x7ff8eb180000 end_va = 0x7ff8eb7a7fff entry_point = 0x7ff8eb180000 region_type = mapped_file name = "windows.storage.dll" filename = "\\Windows\\System32\\windows.storage.dll" (normalized: "c:\\windows\\system32\\windows.storage.dll") Region: id = 3245 start_va = 0x7ff8eb7b0000 end_va = 0x7ff8eb862fff entry_point = 0x7ff8eb7b0000 region_type = mapped_file name = "shcore.dll" filename = "\\Windows\\System32\\SHCore.dll" (normalized: "c:\\windows\\system32\\shcore.dll") Region: id = 3246 start_va = 0x7ff8ec580000 end_va = 0x7ff8edaa4fff entry_point = 0x7ff8ec580000 region_type = mapped_file name = "shell32.dll" filename = "\\Windows\\System32\\shell32.dll" (normalized: "c:\\windows\\system32\\shell32.dll") Region: id = 3247 start_va = 0x7ff8edfe0000 end_va = 0x7ff8ee030fff entry_point = 0x7ff8edfe0000 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\System32\\shlwapi.dll" (normalized: "c:\\windows\\system32\\shlwapi.dll") Region: id = 3248 start_va = 0x7ff8ee190000 end_va = 0x7ff8ee235fff entry_point = 0x7ff8ee190000 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 3249 start_va = 0x1349210000 end_va = 0x1349425fff entry_point = 0x0 region_type = private name = "private_0x0000001349210000" filename = "" Region: id = 3250 start_va = 0x1349430000 end_va = 0x134964cfff entry_point = 0x0 region_type = private name = "private_0x0000001349430000" filename = "" Region: id = 3251 start_va = 0x1349650000 end_va = 0x134975ffff entry_point = 0x0 region_type = private name = "private_0x0000001349650000" filename = "" Region: id = 3252 start_va = 0x1349760000 end_va = 0x1349970fff entry_point = 0x0 region_type = private name = "private_0x0000001349760000" filename = "" Region: id = 3253 start_va = 0x1349980000 end_va = 0x1349a96fff entry_point = 0x0 region_type = private name = "private_0x0000001349980000" filename = "" Region: id = 3254 start_va = 0x7ff8e8ad0000 end_va = 0x7ff8e8ae2fff entry_point = 0x7ff8e8ad0000 region_type = mapped_file name = "wtsapi32.dll" filename = "\\Windows\\System32\\wtsapi32.dll" (normalized: "c:\\windows\\system32\\wtsapi32.dll") Thread: id = 475 os_tid = 0xb4c Thread: id = 476 os_tid = 0x7c0 Thread: id = 477 os_tid = 0xb54 Thread: id = 478 os_tid = 0x91c Process: id = "28" image_name = "wmiadap.exe" filename = "c:\\windows\\system32\\wbem\\wmiadap.exe" page_root = "0x370bd000" os_pid = "0x4d8" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "child_process" parent_id = "4" os_parent_pid = "0x330" cmd_line = "wmiadap.exe /F /T /R" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\BDESVC" [0xe], "NT SERVICE\\BITS" [0xe], "NT SERVICE\\CertPropSvc" [0xa], "NT SERVICE\\DcpSvc" [0xa], "NT SERVICE\\dmwappushservice" [0xa], "NT SERVICE\\DoSvc" [0xa], "NT SERVICE\\DsmSvc" [0xa], "NT SERVICE\\EapHost" [0xa], "NT SERVICE\\IKEEXT" [0xa], "NT SERVICE\\iphlpsvc" [0xe], "NT SERVICE\\LanmanServer" [0xe], "NT SERVICE\\lfsvc" [0xa], "NT SERVICE\\MSiSCSI" [0xa], "NT SERVICE\\NcaSvc" [0xa], "NT SERVICE\\NetSetupSvc" [0xa], "NT SERVICE\\RasAuto" [0xa], "NT SERVICE\\RasMan" [0xa], "NT SERVICE\\RemoteAccess" [0xa], "NT SERVICE\\RetailDemo" [0xa], "NT SERVICE\\Schedule" [0xe], "NT SERVICE\\SCPolicySvc" [0xa], "NT SERVICE\\SENS" [0xe], "NT SERVICE\\SessionEnv" [0xa], "NT SERVICE\\SharedAccess" [0xa], "NT SERVICE\\ShellHWDetection" [0xe], "NT SERVICE\\UsoSvc" [0xa], "NT SERVICE\\wercplsupport" [0xa], "NT SERVICE\\Winmgmt" [0xe], "NT SERVICE\\wlidsvc" [0xa], "NT SERVICE\\wuauserv" [0xe], "NT SERVICE\\XboxNetApiSvc" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000b1c8" [0xc0000007], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Region: id = 3291 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 3292 start_va = 0xcb80000000 end_va = 0xcb8001ffff entry_point = 0x0 region_type = private name = "private_0x000000cb80000000" filename = "" Region: id = 3293 start_va = 0xcb80020000 end_va = 0xcb80033fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000cb80020000" filename = "" Region: id = 3294 start_va = 0xcb80040000 end_va = 0xcb800bffff entry_point = 0x0 region_type = private name = "private_0x000000cb80040000" filename = "" Region: id = 3295 start_va = 0xcb800c0000 end_va = 0xcb800c0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000cb800c0000" filename = "" Region: id = 3296 start_va = 0xcb800d0000 end_va = 0xcb800d1fff entry_point = 0x0 region_type = private name = "private_0x000000cb800d0000" filename = "" Region: id = 3297 start_va = 0xcbffff0000 end_va = 0xcbffff3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000cbffff0000" filename = "" Region: id = 3298 start_va = 0x7df5ff530000 end_va = 0x7ff5ff52ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007df5ff530000" filename = "" Region: id = 3299 start_va = 0x7ff655e00000 end_va = 0x7ff655e22fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007ff655e00000" filename = "" Region: id = 3300 start_va = 0x7ff655e2c000 end_va = 0x7ff655e2cfff entry_point = 0x0 region_type = private name = "private_0x00007ff655e2c000" filename = "" Region: id = 3301 start_va = 0x7ff655e2e000 end_va = 0x7ff655e2ffff entry_point = 0x0 region_type = private name = "private_0x00007ff655e2e000" filename = "" Region: id = 3302 start_va = 0x7ff656840000 end_va = 0x7ff65686efff entry_point = 0x7ff656840000 region_type = mapped_file name = "wmiadap.exe" filename = "\\Windows\\System32\\wbem\\WMIADAP.exe" (normalized: "c:\\windows\\system32\\wbem\\wmiadap.exe") Region: id = 3303 start_va = 0x7ff8ee380000 end_va = 0x7ff8ee541fff entry_point = 0x7ff8ee380000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 3304 start_va = 0xcb80210000 end_va = 0xcb8030ffff entry_point = 0x0 region_type = private name = "private_0x000000cb80210000" filename = "" Region: id = 3305 start_va = 0x7ff8eb870000 end_va = 0x7ff8eba4cfff entry_point = 0x7ff8eb870000 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 3306 start_va = 0x7ff8ee2d0000 end_va = 0x7ff8ee37cfff entry_point = 0x7ff8ee2d0000 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 3307 start_va = 0xcb80000000 end_va = 0xcb8000ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000cb80000000" filename = "" Region: id = 3308 start_va = 0xcb80010000 end_va = 0xcb80016fff entry_point = 0x0 region_type = private name = "private_0x000000cb80010000" filename = "" Region: id = 3309 start_va = 0xcb800e0000 end_va = 0xcb8019dfff entry_point = 0xcb800e0000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 3310 start_va = 0xcb801a0000 end_va = 0xcb801a6fff entry_point = 0x0 region_type = private name = "private_0x000000cb801a0000" filename = "" Region: id = 3311 start_va = 0xcb801c0000 end_va = 0xcb801cffff entry_point = 0x0 region_type = private name = "private_0x000000cb801c0000" filename = "" Region: id = 3312 start_va = 0xcb80310000 end_va = 0xcb8038ffff entry_point = 0x0 region_type = private name = "private_0x000000cb80310000" filename = "" Region: id = 3313 start_va = 0x7ff655d00000 end_va = 0x7ff655dfffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007ff655d00000" filename = "" Region: id = 3314 start_va = 0x7ff655e2a000 end_va = 0x7ff655e2bfff entry_point = 0x0 region_type = private name = "private_0x00007ff655e2a000" filename = "" Region: id = 3315 start_va = 0x7ff8e56f0000 end_va = 0x7ff8e576efff entry_point = 0x7ff8e56f0000 region_type = mapped_file name = "wbemcomn.dll" filename = "\\Windows\\System32\\wbemcomn.dll" (normalized: "c:\\windows\\system32\\wbemcomn.dll") Region: id = 3316 start_va = 0x7ff8e6e40000 end_va = 0x7ff8e6e64fff entry_point = 0x7ff8e6e40000 region_type = mapped_file name = "loadperf.dll" filename = "\\Windows\\System32\\loadperf.dll" (normalized: "c:\\windows\\system32\\loadperf.dll") Region: id = 3317 start_va = 0x7ff8eabd0000 end_va = 0x7ff8eabf7fff entry_point = 0x7ff8eabd0000 region_type = mapped_file name = "bcrypt.dll" filename = "\\Windows\\System32\\bcrypt.dll" (normalized: "c:\\windows\\system32\\bcrypt.dll") Region: id = 3318 start_va = 0x7ff8ec240000 end_va = 0x7ff8ec29afff entry_point = 0x7ff8ec240000 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 3319 start_va = 0x7ff8ec450000 end_va = 0x7ff8ec575fff entry_point = 0x7ff8ec450000 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 3320 start_va = 0x7ff8edd60000 end_va = 0x7ff8edfdbfff entry_point = 0x7ff8edd60000 region_type = mapped_file name = "combase.dll" filename = "\\Windows\\System32\\combase.dll" (normalized: "c:\\windows\\system32\\combase.dll") Region: id = 3321 start_va = 0x7ff8ee040000 end_va = 0x7ff8ee0a8fff entry_point = 0x7ff8ee040000 region_type = mapped_file name = "ws2_32.dll" filename = "\\Windows\\System32\\ws2_32.dll" (normalized: "c:\\windows\\system32\\ws2_32.dll") Region: id = 3322 start_va = 0x7ff8ee0b0000 end_va = 0x7ff8ee14cfff entry_point = 0x7ff8ee0b0000 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 3323 start_va = 0x7ff8ee250000 end_va = 0x7ff8ee257fff entry_point = 0x7ff8ee250000 region_type = mapped_file name = "nsi.dll" filename = "\\Windows\\System32\\nsi.dll" (normalized: "c:\\windows\\system32\\nsi.dll") Region: id = 3324 start_va = 0xcb801b0000 end_va = 0xcb801b0fff entry_point = 0x0 region_type = private name = "private_0x000000cb801b0000" filename = "" Region: id = 3325 start_va = 0xcb801d0000 end_va = 0xcb801d0fff entry_point = 0x0 region_type = private name = "private_0x000000cb801d0000" filename = "" Region: id = 3326 start_va = 0xcb801e0000 end_va = 0xcb801e0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000cb801e0000" filename = "" Region: id = 3327 start_va = 0xcb801f0000 end_va = 0xcb801f0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000cb801f0000" filename = "" Region: id = 3328 start_va = 0xcb80390000 end_va = 0xcb8040ffff entry_point = 0x0 region_type = private name = "private_0x000000cb80390000" filename = "" Region: id = 3329 start_va = 0xcb80410000 end_va = 0xcb80597fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000cb80410000" filename = "" Region: id = 3330 start_va = 0xcb805a0000 end_va = 0xcb80720fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000cb805a0000" filename = "" Region: id = 3331 start_va = 0xcb80730000 end_va = 0xcb807effff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000cb80730000" filename = "" Region: id = 3332 start_va = 0x7ff655e28000 end_va = 0x7ff655e29fff entry_point = 0x0 region_type = private name = "private_0x00007ff655e28000" filename = "" Region: id = 3333 start_va = 0x7ff8e06b0000 end_va = 0x7ff8e06c0fff entry_point = 0x7ff8e06b0000 region_type = mapped_file name = "wbemprox.dll" filename = "\\Windows\\System32\\wbem\\wbemprox.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemprox.dll") Region: id = 3334 start_va = 0x7ff8eac00000 end_va = 0x7ff8eac6afff entry_point = 0x7ff8eac00000 region_type = mapped_file name = "bcryptprimitives.dll" filename = "\\Windows\\System32\\bcryptprimitives.dll" (normalized: "c:\\windows\\system32\\bcryptprimitives.dll") Region: id = 3335 start_va = 0x7ff8eae20000 end_va = 0x7ff8eae2efff entry_point = 0x7ff8eae20000 region_type = mapped_file name = "kernel.appcore.dll" filename = "\\Windows\\System32\\kernel.appcore.dll" (normalized: "c:\\windows\\system32\\kernel.appcore.dll") Region: id = 3336 start_va = 0x7ff8ebdc0000 end_va = 0x7ff8ebf0dfff entry_point = 0x7ff8ebdc0000 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 3337 start_va = 0x7ff8edb10000 end_va = 0x7ff8edbb4fff entry_point = 0x7ff8edb10000 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\System32\\clbcatq.dll" (normalized: "c:\\windows\\system32\\clbcatq.dll") Region: id = 3338 start_va = 0x7ff8edbc0000 end_va = 0x7ff8edd44fff entry_point = 0x7ff8edbc0000 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 3350 start_va = 0xcb807f0000 end_va = 0xcb80b26fff entry_point = 0xcb807f0000 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 3351 start_va = 0xcb80b30000 end_va = 0xcb80baffff entry_point = 0x0 region_type = private name = "private_0x000000cb80b30000" filename = "" Region: id = 3352 start_va = 0xcb80bb0000 end_va = 0xcb80c2ffff entry_point = 0x0 region_type = private name = "private_0x000000cb80bb0000" filename = "" Region: id = 3353 start_va = 0xcb80c30000 end_va = 0xcb80caffff entry_point = 0x0 region_type = private name = "private_0x000000cb80c30000" filename = "" Region: id = 3354 start_va = 0x7ff655cfe000 end_va = 0x7ff655cfffff entry_point = 0x0 region_type = private name = "private_0x00007ff655cfe000" filename = "" Region: id = 3355 start_va = 0x7ff655e24000 end_va = 0x7ff655e25fff entry_point = 0x0 region_type = private name = "private_0x00007ff655e24000" filename = "" Region: id = 3356 start_va = 0x7ff655e26000 end_va = 0x7ff655e27fff entry_point = 0x0 region_type = private name = "private_0x00007ff655e26000" filename = "" Region: id = 3357 start_va = 0x7ff8e0290000 end_va = 0x7ff8e02a3fff entry_point = 0x7ff8e0290000 region_type = mapped_file name = "wbemsvc.dll" filename = "\\Windows\\System32\\wbem\\wbemsvc.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemsvc.dll") Region: id = 3358 start_va = 0x7ff8e02b0000 end_va = 0x7ff8e03a7fff entry_point = 0x7ff8e02b0000 region_type = mapped_file name = "fastprox.dll" filename = "\\Windows\\System32\\wbem\\fastprox.dll" (normalized: "c:\\windows\\system32\\wbem\\fastprox.dll") Region: id = 3359 start_va = 0x7ff8ea270000 end_va = 0x7ff8ea2a2fff entry_point = 0x7ff8ea270000 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\System32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll") Region: id = 3360 start_va = 0x7ff8ea620000 end_va = 0x7ff8ea636fff entry_point = 0x7ff8ea620000 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\System32\\cryptsp.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll") Region: id = 3361 start_va = 0x7ff8ea790000 end_va = 0x7ff8ea79afff entry_point = 0x7ff8ea790000 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\System32\\cryptbase.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll") Region: id = 3362 start_va = 0x7ff8ebb30000 end_va = 0x7ff8ebbedfff entry_point = 0x7ff8ebb30000 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll") Region: id = 3363 start_va = 0x7ff8ee240000 end_va = 0x7ff8ee247fff entry_point = 0x7ff8ee240000 region_type = mapped_file name = "psapi.dll" filename = "\\Windows\\System32\\psapi.dll" (normalized: "c:\\windows\\system32\\psapi.dll") Thread: id = 481 os_tid = 0x2d8 Thread: id = 482 os_tid = 0x838 Thread: id = 483 os_tid = 0x57c Thread: id = 484 os_tid = 0x574 Thread: id = 485 os_tid = 0xce8 Thread: id = 486 os_tid = 0x2fc Process: id = "29" image_name = "wmiprvse.exe" filename = "c:\\windows\\system32\\wbem\\wmiprvse.exe" page_root = "0x34f35000" os_pid = "0xd74" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "child_process" parent_id = "11" os_parent_pid = "0x248" cmd_line = "C:\\Windows\\system32\\wbem\\wmiprvse.exe -Embedding" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\BDESVC" [0xe], "NT SERVICE\\BITS" [0xe], "NT SERVICE\\CertPropSvc" [0xa], "NT SERVICE\\DcpSvc" [0xa], "NT SERVICE\\dmwappushservice" [0xa], "NT SERVICE\\DoSvc" [0xa], "NT SERVICE\\DsmSvc" [0xa], "NT SERVICE\\EapHost" [0xa], "NT SERVICE\\IKEEXT" [0xa], "NT SERVICE\\iphlpsvc" [0xe], "NT SERVICE\\LanmanServer" [0xe], "NT SERVICE\\lfsvc" [0xa], "NT SERVICE\\MSiSCSI" [0xa], "NT SERVICE\\NcaSvc" [0xa], "NT SERVICE\\NetSetupSvc" [0xa], "NT SERVICE\\RasAuto" [0xa], "NT SERVICE\\RasMan" [0xa], "NT SERVICE\\RemoteAccess" [0xa], "NT SERVICE\\RetailDemo" [0xa], "NT SERVICE\\Schedule" [0xe], "NT SERVICE\\SCPolicySvc" [0xa], "NT SERVICE\\SENS" [0xe], "NT SERVICE\\SessionEnv" [0xa], "NT SERVICE\\SharedAccess" [0xa], "NT SERVICE\\ShellHWDetection" [0xe], "NT SERVICE\\UsoSvc" [0xa], "NT SERVICE\\wercplsupport" [0xa], "NT SERVICE\\Winmgmt" [0xe], "NT SERVICE\\wlidsvc" [0xa], "NT SERVICE\\wuauserv" [0xe], "NT SERVICE\\XboxNetApiSvc" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000b1c8" [0xc0000007], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Region: id = 3364 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 3365 start_va = 0x5640c0000 end_va = 0x5640dffff entry_point = 0x0 region_type = private name = "private_0x00000005640c0000" filename = "" Region: id = 3366 start_va = 0x5640e0000 end_va = 0x5640f3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000005640e0000" filename = "" Region: id = 3367 start_va = 0x564100000 end_va = 0x56417ffff entry_point = 0x0 region_type = private name = "private_0x0000000564100000" filename = "" Region: id = 3368 start_va = 0x564180000 end_va = 0x564183fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000564180000" filename = "" Region: id = 3369 start_va = 0x564190000 end_va = 0x564190fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000564190000" filename = "" Region: id = 3370 start_va = 0x5641a0000 end_va = 0x5641a1fff entry_point = 0x0 region_type = private name = "private_0x00000005641a0000" filename = "" Region: id = 3371 start_va = 0x7df5ff920000 end_va = 0x7ff5ff91ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007df5ff920000" filename = "" Region: id = 3372 start_va = 0x7ff696ab0000 end_va = 0x7ff696ad2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007ff696ab0000" filename = "" Region: id = 3373 start_va = 0x7ff696add000 end_va = 0x7ff696adefff entry_point = 0x0 region_type = private name = "private_0x00007ff696add000" filename = "" Region: id = 3374 start_va = 0x7ff696adf000 end_va = 0x7ff696adffff entry_point = 0x0 region_type = private name = "private_0x00007ff696adf000" filename = "" Region: id = 3375 start_va = 0x7ff6971b0000 end_va = 0x7ff69722efff entry_point = 0x7ff6971b0000 region_type = mapped_file name = "wmiprvse.exe" filename = "\\Windows\\System32\\wbem\\WmiPrvSE.exe" (normalized: "c:\\windows\\system32\\wbem\\wmiprvse.exe") Region: id = 3376 start_va = 0x7ff8ee380000 end_va = 0x7ff8ee541fff entry_point = 0x7ff8ee380000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 3377 start_va = 0x564290000 end_va = 0x56438ffff entry_point = 0x0 region_type = private name = "private_0x0000000564290000" filename = "" Region: id = 3378 start_va = 0x7ff8eb870000 end_va = 0x7ff8eba4cfff entry_point = 0x7ff8eb870000 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 3379 start_va = 0x7ff8ee2d0000 end_va = 0x7ff8ee37cfff entry_point = 0x7ff8ee2d0000 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 3380 start_va = 0x5640c0000 end_va = 0x5640cffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000005640c0000" filename = "" Region: id = 3381 start_va = 0x5640d0000 end_va = 0x5640d6fff entry_point = 0x0 region_type = private name = "private_0x00000005640d0000" filename = "" Region: id = 3382 start_va = 0x5641b0000 end_va = 0x56426dfff entry_point = 0x5641b0000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 3383 start_va = 0x564270000 end_va = 0x564276fff entry_point = 0x0 region_type = private name = "private_0x0000000564270000" filename = "" Region: id = 3384 start_va = 0x564280000 end_va = 0x564280fff entry_point = 0x0 region_type = private name = "private_0x0000000564280000" filename = "" Region: id = 3385 start_va = 0x564390000 end_va = 0x56440ffff entry_point = 0x0 region_type = private name = "private_0x0000000564390000" filename = "" Region: id = 3386 start_va = 0x564410000 end_va = 0x564410fff entry_point = 0x0 region_type = private name = "private_0x0000000564410000" filename = "" Region: id = 3387 start_va = 0x564420000 end_va = 0x564424fff entry_point = 0x564420000 region_type = mapped_file name = "user32.dll.mui" filename = "\\Windows\\System32\\en-US\\user32.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\user32.dll.mui") Region: id = 3388 start_va = 0x564430000 end_va = 0x564430fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000564430000" filename = "" Region: id = 3389 start_va = 0x564460000 end_va = 0x56446ffff entry_point = 0x0 region_type = private name = "private_0x0000000564460000" filename = "" Region: id = 3390 start_va = 0x564470000 end_va = 0x5647a6fff entry_point = 0x564470000 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 3391 start_va = 0x5647b0000 end_va = 0x564937fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000005647b0000" filename = "" Region: id = 3392 start_va = 0x564940000 end_va = 0x564ac0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000564940000" filename = "" Region: id = 3393 start_va = 0x564ad0000 end_va = 0x564b8ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000564ad0000" filename = "" Region: id = 3394 start_va = 0x7ff6969b0000 end_va = 0x7ff696aaffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007ff6969b0000" filename = "" Region: id = 3395 start_va = 0x7ff696adb000 end_va = 0x7ff696adcfff entry_point = 0x0 region_type = private name = "private_0x00007ff696adb000" filename = "" Region: id = 3396 start_va = 0x7ff8dfe00000 end_va = 0x7ff8dfe15fff entry_point = 0x7ff8dfe00000 region_type = mapped_file name = "ncobjapi.dll" filename = "\\Windows\\System32\\ncobjapi.dll" (normalized: "c:\\windows\\system32\\ncobjapi.dll") Region: id = 3397 start_va = 0x7ff8e02b0000 end_va = 0x7ff8e03a7fff entry_point = 0x7ff8e02b0000 region_type = mapped_file name = "fastprox.dll" filename = "\\Windows\\System32\\wbem\\fastprox.dll" (normalized: "c:\\windows\\system32\\wbem\\fastprox.dll") Region: id = 3398 start_va = 0x7ff8e56f0000 end_va = 0x7ff8e576efff entry_point = 0x7ff8e56f0000 region_type = mapped_file name = "wbemcomn.dll" filename = "\\Windows\\System32\\wbemcomn.dll" (normalized: "c:\\windows\\system32\\wbemcomn.dll") Region: id = 3399 start_va = 0x7ff8eabd0000 end_va = 0x7ff8eabf7fff entry_point = 0x7ff8eabd0000 region_type = mapped_file name = "bcrypt.dll" filename = "\\Windows\\System32\\bcrypt.dll" (normalized: "c:\\windows\\system32\\bcrypt.dll") Region: id = 3400 start_va = 0x7ff8eac00000 end_va = 0x7ff8eac6afff entry_point = 0x7ff8eac00000 region_type = mapped_file name = "bcryptprimitives.dll" filename = "\\Windows\\System32\\bcryptprimitives.dll" (normalized: "c:\\windows\\system32\\bcryptprimitives.dll") Region: id = 3401 start_va = 0x7ff8eae20000 end_va = 0x7ff8eae2efff entry_point = 0x7ff8eae20000 region_type = mapped_file name = "kernel.appcore.dll" filename = "\\Windows\\System32\\kernel.appcore.dll" (normalized: "c:\\windows\\system32\\kernel.appcore.dll") Region: id = 3402 start_va = 0x7ff8ebdc0000 end_va = 0x7ff8ebf0dfff entry_point = 0x7ff8ebdc0000 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 3403 start_va = 0x7ff8ec240000 end_va = 0x7ff8ec29afff entry_point = 0x7ff8ec240000 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 3404 start_va = 0x7ff8ec450000 end_va = 0x7ff8ec575fff entry_point = 0x7ff8ec450000 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 3405 start_va = 0x7ff8edbc0000 end_va = 0x7ff8edd44fff entry_point = 0x7ff8edbc0000 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 3406 start_va = 0x7ff8edd60000 end_va = 0x7ff8edfdbfff entry_point = 0x7ff8edd60000 region_type = mapped_file name = "combase.dll" filename = "\\Windows\\System32\\combase.dll" (normalized: "c:\\windows\\system32\\combase.dll") Region: id = 3407 start_va = 0x7ff8ee040000 end_va = 0x7ff8ee0a8fff entry_point = 0x7ff8ee040000 region_type = mapped_file name = "ws2_32.dll" filename = "\\Windows\\System32\\ws2_32.dll" (normalized: "c:\\windows\\system32\\ws2_32.dll") Region: id = 3408 start_va = 0x7ff8ee0b0000 end_va = 0x7ff8ee14cfff entry_point = 0x7ff8ee0b0000 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 3409 start_va = 0x7ff8ee190000 end_va = 0x7ff8ee235fff entry_point = 0x7ff8ee190000 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 3410 start_va = 0x7ff8ee250000 end_va = 0x7ff8ee257fff entry_point = 0x7ff8ee250000 region_type = mapped_file name = "nsi.dll" filename = "\\Windows\\System32\\nsi.dll" (normalized: "c:\\windows\\system32\\nsi.dll") Region: id = 3411 start_va = 0x564440000 end_va = 0x564440fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000564440000" filename = "" Region: id = 3412 start_va = 0x564450000 end_va = 0x564450fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000564450000" filename = "" Region: id = 3413 start_va = 0x564b90000 end_va = 0x564c0ffff entry_point = 0x0 region_type = private name = "private_0x0000000564b90000" filename = "" Region: id = 3414 start_va = 0x564c10000 end_va = 0x564d0ffff entry_point = 0x0 region_type = private name = "private_0x0000000564c10000" filename = "" Region: id = 3415 start_va = 0x564d10000 end_va = 0x564d8ffff entry_point = 0x0 region_type = private name = "private_0x0000000564d10000" filename = "" Region: id = 3416 start_va = 0x564d90000 end_va = 0x564e0ffff entry_point = 0x0 region_type = private name = "private_0x0000000564d90000" filename = "" Region: id = 3417 start_va = 0x564e10000 end_va = 0x564e8ffff entry_point = 0x0 region_type = private name = "private_0x0000000564e10000" filename = "" Region: id = 3418 start_va = 0x564e90000 end_va = 0x564f0ffff entry_point = 0x0 region_type = private name = "private_0x0000000564e90000" filename = "" Region: id = 3419 start_va = 0x564f10000 end_va = 0x564f8ffff entry_point = 0x0 region_type = private name = "private_0x0000000564f10000" filename = "" Region: id = 3420 start_va = 0x564f90000 end_va = 0x56500ffff entry_point = 0x0 region_type = private name = "private_0x0000000564f90000" filename = "" Region: id = 3421 start_va = 0x7ff6969aa000 end_va = 0x7ff6969abfff entry_point = 0x0 region_type = private name = "private_0x00007ff6969aa000" filename = "" Region: id = 3422 start_va = 0x7ff6969ac000 end_va = 0x7ff6969adfff entry_point = 0x0 region_type = private name = "private_0x00007ff6969ac000" filename = "" Region: id = 3423 start_va = 0x7ff6969ae000 end_va = 0x7ff6969affff entry_point = 0x0 region_type = private name = "private_0x00007ff6969ae000" filename = "" Region: id = 3424 start_va = 0x7ff696ad3000 end_va = 0x7ff696ad4fff entry_point = 0x0 region_type = private name = "private_0x00007ff696ad3000" filename = "" Region: id = 3425 start_va = 0x7ff696ad5000 end_va = 0x7ff696ad6fff entry_point = 0x0 region_type = private name = "private_0x00007ff696ad5000" filename = "" Region: id = 3426 start_va = 0x7ff696ad7000 end_va = 0x7ff696ad8fff entry_point = 0x0 region_type = private name = "private_0x00007ff696ad7000" filename = "" Region: id = 3427 start_va = 0x7ff696ad9000 end_va = 0x7ff696adafff entry_point = 0x0 region_type = private name = "private_0x00007ff696ad9000" filename = "" Region: id = 3428 start_va = 0x7ff8e0240000 end_va = 0x7ff8e0264fff entry_point = 0x7ff8e0240000 region_type = mapped_file name = "wmiutils.dll" filename = "\\Windows\\System32\\wbem\\wmiutils.dll" (normalized: "c:\\windows\\system32\\wbem\\wmiutils.dll") Region: id = 3429 start_va = 0x7ff8e0290000 end_va = 0x7ff8e02a3fff entry_point = 0x7ff8e0290000 region_type = mapped_file name = "wbemsvc.dll" filename = "\\Windows\\System32\\wbem\\wbemsvc.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemsvc.dll") Region: id = 3430 start_va = 0x7ff8e06b0000 end_va = 0x7ff8e06c0fff entry_point = 0x7ff8e06b0000 region_type = mapped_file name = "wbemprox.dll" filename = "\\Windows\\System32\\wbem\\wbemprox.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemprox.dll") Region: id = 3431 start_va = 0x7ff8ea270000 end_va = 0x7ff8ea2a2fff entry_point = 0x7ff8ea270000 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\System32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll") Region: id = 3432 start_va = 0x7ff8ea620000 end_va = 0x7ff8ea636fff entry_point = 0x7ff8ea620000 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\System32\\cryptsp.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll") Region: id = 3433 start_va = 0x7ff8ea790000 end_va = 0x7ff8ea79afff entry_point = 0x7ff8ea790000 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\System32\\cryptbase.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll") Region: id = 3434 start_va = 0x7ff8ebb30000 end_va = 0x7ff8ebbedfff entry_point = 0x7ff8ebb30000 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll") Region: id = 3435 start_va = 0x7ff8edb10000 end_va = 0x7ff8edbb4fff entry_point = 0x7ff8edb10000 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\System32\\clbcatq.dll" (normalized: "c:\\windows\\system32\\clbcatq.dll") Region: id = 3436 start_va = 0x7ff8e6e00000 end_va = 0x7ff8e6e3cfff entry_point = 0x7ff8e6e00000 region_type = mapped_file name = "wmiprov.dll" filename = "\\Windows\\System32\\wbem\\wmiprov.dll" (normalized: "c:\\windows\\system32\\wbem\\wmiprov.dll") Region: id = 3437 start_va = 0x7ff8ea0f0000 end_va = 0x7ff8ea121fff entry_point = 0x7ff8ea0f0000 region_type = mapped_file name = "ntmarta.dll" filename = "\\Windows\\System32\\ntmarta.dll" (normalized: "c:\\windows\\system32\\ntmarta.dll") Region: id = 3438 start_va = 0x565010000 end_va = 0x565057fff entry_point = 0x565010000 region_type = mapped_file name = "advapi32.dll.mui" filename = "\\Windows\\System32\\en-US\\advapi32.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\advapi32.dll.mui") Region: id = 3439 start_va = 0x7ff8e65f0000 end_va = 0x7ff8e6630fff entry_point = 0x7ff8e65f0000 region_type = mapped_file name = "mofd.dll" filename = "\\Windows\\System32\\wbem\\mofd.dll" (normalized: "c:\\windows\\system32\\wbem\\mofd.dll") Region: id = 3440 start_va = 0x7ff8e7d90000 end_va = 0x7ff8e7da0fff entry_point = 0x7ff8e7d90000 region_type = mapped_file name = "wmiclnt.dll" filename = "\\Windows\\System32\\wmiclnt.dll" (normalized: "c:\\windows\\system32\\wmiclnt.dll") Thread: id = 493 os_tid = 0xdcc Thread: id = 494 os_tid = 0xd70 Thread: id = 496 os_tid = 0xd58 Thread: id = 497 os_tid = 0xd60 Thread: id = 498 os_tid = 0xd5c Thread: id = 499 os_tid = 0xd4c Thread: id = 500 os_tid = 0xd64 Thread: id = 501 os_tid = 0xd78 Thread: id = 502 os_tid = 0xd68 Process: id = "30" image_name = "taskeng.exe" filename = "c:\\windows\\system32\\taskeng.exe" page_root = "0x58325000" os_pid = "0x534" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "child_process" parent_id = "4" os_parent_pid = "0x330" cmd_line = "taskeng.exe {3E326D51-B595-4E5F-B4B9-918A4AEB178E} S-1-5-18:NT AUTHORITY\\System:Service:" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\BDESVC" [0xe], "NT SERVICE\\BITS" [0xe], "NT SERVICE\\CertPropSvc" [0xa], "NT SERVICE\\DcpSvc" [0xa], "NT SERVICE\\dmwappushservice" [0xa], "NT SERVICE\\DoSvc" [0xa], "NT SERVICE\\DsmSvc" [0xa], "NT SERVICE\\EapHost" [0xa], "NT SERVICE\\IKEEXT" [0xa], "NT SERVICE\\iphlpsvc" [0xe], "NT SERVICE\\LanmanServer" [0xe], "NT SERVICE\\lfsvc" [0xa], "NT SERVICE\\MSiSCSI" [0xa], "NT SERVICE\\NcaSvc" [0xa], "NT SERVICE\\NetSetupSvc" [0xa], "NT SERVICE\\RasAuto" [0xa], "NT SERVICE\\RasMan" [0xa], "NT SERVICE\\RemoteAccess" [0xa], "NT SERVICE\\RetailDemo" [0xa], "NT SERVICE\\Schedule" [0xe], "NT SERVICE\\SCPolicySvc" [0xa], "NT SERVICE\\SENS" [0xe], "NT SERVICE\\SessionEnv" [0xa], "NT SERVICE\\SharedAccess" [0xa], "NT SERVICE\\ShellHWDetection" [0xe], "NT SERVICE\\UsoSvc" [0xa], "NT SERVICE\\wercplsupport" [0xa], "NT SERVICE\\Winmgmt" [0xe], "NT SERVICE\\wlidsvc" [0xa], "NT SERVICE\\wuauserv" [0xe], "NT SERVICE\\XboxNetApiSvc" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000b1c8" [0xc0000007], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Region: id = 3514 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 3515 start_va = 0x1fe1bb0000 end_va = 0x1fe1bcffff entry_point = 0x0 region_type = private name = "private_0x0000001fe1bb0000" filename = "" Region: id = 3516 start_va = 0x1fe1bd0000 end_va = 0x1fe1be3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000001fe1bd0000" filename = "" Region: id = 3517 start_va = 0x1fe1bf0000 end_va = 0x1fe1c6ffff entry_point = 0x0 region_type = private name = "private_0x0000001fe1bf0000" filename = "" Region: id = 3518 start_va = 0x1fe1c70000 end_va = 0x1fe1c73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000001fe1c70000" filename = "" Region: id = 3519 start_va = 0x1fe1c80000 end_va = 0x1fe1c80fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000001fe1c80000" filename = "" Region: id = 3520 start_va = 0x1fe1c90000 end_va = 0x1fe1c91fff entry_point = 0x0 region_type = private name = "private_0x0000001fe1c90000" filename = "" Region: id = 3521 start_va = 0x7df5ff3c0000 end_va = 0x7ff5ff3bffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007df5ff3c0000" filename = "" Region: id = 3522 start_va = 0x7ff7271d0000 end_va = 0x7ff7271f2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007ff7271d0000" filename = "" Region: id = 3523 start_va = 0x7ff7271fd000 end_va = 0x7ff7271fefff entry_point = 0x0 region_type = private name = "private_0x00007ff7271fd000" filename = "" Region: id = 3524 start_va = 0x7ff7271ff000 end_va = 0x7ff7271fffff entry_point = 0x0 region_type = private name = "private_0x00007ff7271ff000" filename = "" Region: id = 3525 start_va = 0x7ff727b80000 end_va = 0x7ff727bccfff entry_point = 0x7ff727b80000 region_type = mapped_file name = "taskeng.exe" filename = "\\Windows\\System32\\taskeng.exe" (normalized: "c:\\windows\\system32\\taskeng.exe") Region: id = 3526 start_va = 0x7ff8ee380000 end_va = 0x7ff8ee541fff entry_point = 0x7ff8ee380000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 3527 start_va = 0x1fe1df0000 end_va = 0x1fe1eeffff entry_point = 0x0 region_type = private name = "private_0x0000001fe1df0000" filename = "" Region: id = 3528 start_va = 0x7ff8eb870000 end_va = 0x7ff8eba4cfff entry_point = 0x7ff8eb870000 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 3529 start_va = 0x7ff8ee2d0000 end_va = 0x7ff8ee37cfff entry_point = 0x7ff8ee2d0000 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 3530 start_va = 0x1fe1bb0000 end_va = 0x1fe1bbffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000001fe1bb0000" filename = "" Region: id = 3531 start_va = 0x1fe1bc0000 end_va = 0x1fe1bc6fff entry_point = 0x0 region_type = private name = "private_0x0000001fe1bc0000" filename = "" Region: id = 3532 start_va = 0x1fe1ca0000 end_va = 0x1fe1d5dfff entry_point = 0x1fe1ca0000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 3533 start_va = 0x1fe1d60000 end_va = 0x1fe1ddffff entry_point = 0x0 region_type = private name = "private_0x0000001fe1d60000" filename = "" Region: id = 3534 start_va = 0x1fe1de0000 end_va = 0x1fe1de6fff entry_point = 0x0 region_type = private name = "private_0x0000001fe1de0000" filename = "" Region: id = 3535 start_va = 0x1fe1ef0000 end_va = 0x1fe1ef0fff entry_point = 0x1fe1ef0000 region_type = mapped_file name = "taskeng.exe.mui" filename = "\\Windows\\System32\\en-US\\TaskEng.exe.mui" (normalized: "c:\\windows\\system32\\en-us\\taskeng.exe.mui") Region: id = 3536 start_va = 0x1fe1f00000 end_va = 0x1fe1f00fff entry_point = 0x0 region_type = private name = "private_0x0000001fe1f00000" filename = "" Region: id = 3537 start_va = 0x1fe1f10000 end_va = 0x1fe1f10fff entry_point = 0x0 region_type = private name = "private_0x0000001fe1f10000" filename = "" Region: id = 3538 start_va = 0x1fe1f20000 end_va = 0x1fe1f20fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000001fe1f20000" filename = "" Region: id = 3539 start_va = 0x1fe1f30000 end_va = 0x1fe1f36fff entry_point = 0x0 region_type = private name = "private_0x0000001fe1f30000" filename = "" Region: id = 3540 start_va = 0x1fe1f80000 end_va = 0x1fe1f8ffff entry_point = 0x0 region_type = private name = "private_0x0000001fe1f80000" filename = "" Region: id = 3541 start_va = 0x1fe1f90000 end_va = 0x1fe204ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000001fe1f90000" filename = "" Region: id = 3542 start_va = 0x1fe2050000 end_va = 0x1fe20cffff entry_point = 0x0 region_type = private name = "private_0x0000001fe2050000" filename = "" Region: id = 3543 start_va = 0x1fe2100000 end_va = 0x1fe210ffff entry_point = 0x0 region_type = private name = "private_0x0000001fe2100000" filename = "" Region: id = 3544 start_va = 0x1fe2110000 end_va = 0x1fe2297fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000001fe2110000" filename = "" Region: id = 3545 start_va = 0x1fe22a0000 end_va = 0x1fe2420fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000001fe22a0000" filename = "" Region: id = 3546 start_va = 0x1fe2430000 end_va = 0x1fe252ffff entry_point = 0x0 region_type = private name = "private_0x0000001fe2430000" filename = "" Region: id = 3547 start_va = 0x1fe2530000 end_va = 0x1fe2866fff entry_point = 0x1fe2530000 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 3548 start_va = 0x1fe2870000 end_va = 0x1fe28effff entry_point = 0x0 region_type = private name = "private_0x0000001fe2870000" filename = "" Region: id = 3549 start_va = 0x1fe28f0000 end_va = 0x1fe296ffff entry_point = 0x0 region_type = private name = "private_0x0000001fe28f0000" filename = "" Region: id = 3550 start_va = 0x1fe2970000 end_va = 0x1fe29effff entry_point = 0x0 region_type = private name = "private_0x0000001fe2970000" filename = "" Region: id = 3551 start_va = 0x7ff7270d0000 end_va = 0x7ff7271cffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007ff7270d0000" filename = "" Region: id = 3552 start_va = 0x7ff7271f3000 end_va = 0x7ff7271f4fff entry_point = 0x0 region_type = private name = "private_0x00007ff7271f3000" filename = "" Region: id = 3553 start_va = 0x7ff7271f5000 end_va = 0x7ff7271f6fff entry_point = 0x0 region_type = private name = "private_0x00007ff7271f5000" filename = "" Region: id = 3554 start_va = 0x7ff7271f7000 end_va = 0x7ff7271f8fff entry_point = 0x0 region_type = private name = "private_0x00007ff7271f7000" filename = "" Region: id = 3555 start_va = 0x7ff7271f9000 end_va = 0x7ff7271fafff entry_point = 0x0 region_type = private name = "private_0x00007ff7271f9000" filename = "" Region: id = 3556 start_va = 0x7ff7271fb000 end_va = 0x7ff7271fcfff entry_point = 0x0 region_type = private name = "private_0x00007ff7271fb000" filename = "" Region: id = 3557 start_va = 0x7ff8db900000 end_va = 0x7ff8db908fff entry_point = 0x7ff8db900000 region_type = mapped_file name = "tschannel.dll" filename = "\\Windows\\System32\\TSChannel.dll" (normalized: "c:\\windows\\system32\\tschannel.dll") Region: id = 3558 start_va = 0x7ff8e6330000 end_va = 0x7ff8e6365fff entry_point = 0x7ff8e6330000 region_type = mapped_file name = "xmllite.dll" filename = "\\Windows\\System32\\xmllite.dll" (normalized: "c:\\windows\\system32\\xmllite.dll") Region: id = 3559 start_va = 0x7ff8ea270000 end_va = 0x7ff8ea2a2fff entry_point = 0x7ff8ea270000 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\System32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll") Region: id = 3560 start_va = 0x7ff8ea620000 end_va = 0x7ff8ea636fff entry_point = 0x7ff8ea620000 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\System32\\cryptsp.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll") Region: id = 3561 start_va = 0x7ff8ea790000 end_va = 0x7ff8ea79afff entry_point = 0x7ff8ea790000 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\System32\\cryptbase.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll") Region: id = 3562 start_va = 0x7ff8ea9d0000 end_va = 0x7ff8ea9fbfff entry_point = 0x7ff8ea9d0000 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\System32\\sspicli.dll" (normalized: "c:\\windows\\system32\\sspicli.dll") Region: id = 3563 start_va = 0x7ff8eabd0000 end_va = 0x7ff8eabf7fff entry_point = 0x7ff8eabd0000 region_type = mapped_file name = "bcrypt.dll" filename = "\\Windows\\System32\\bcrypt.dll" (normalized: "c:\\windows\\system32\\bcrypt.dll") Region: id = 3564 start_va = 0x7ff8eac00000 end_va = 0x7ff8eac6afff entry_point = 0x7ff8eac00000 region_type = mapped_file name = "bcryptprimitives.dll" filename = "\\Windows\\System32\\bcryptprimitives.dll" (normalized: "c:\\windows\\system32\\bcryptprimitives.dll") Region: id = 3565 start_va = 0x7ff8eae20000 end_va = 0x7ff8eae2efff entry_point = 0x7ff8eae20000 region_type = mapped_file name = "kernel.appcore.dll" filename = "\\Windows\\System32\\kernel.appcore.dll" (normalized: "c:\\windows\\system32\\kernel.appcore.dll") Region: id = 3566 start_va = 0x7ff8ebb30000 end_va = 0x7ff8ebbedfff entry_point = 0x7ff8ebb30000 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll") Region: id = 3567 start_va = 0x7ff8ebdc0000 end_va = 0x7ff8ebf0dfff entry_point = 0x7ff8ebdc0000 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 3568 start_va = 0x7ff8ec240000 end_va = 0x7ff8ec29afff entry_point = 0x7ff8ec240000 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 3569 start_va = 0x7ff8ec450000 end_va = 0x7ff8ec575fff entry_point = 0x7ff8ec450000 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 3570 start_va = 0x7ff8edb10000 end_va = 0x7ff8edbb4fff entry_point = 0x7ff8edb10000 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\System32\\clbcatq.dll" (normalized: "c:\\windows\\system32\\clbcatq.dll") Region: id = 3571 start_va = 0x7ff8edbc0000 end_va = 0x7ff8edd44fff entry_point = 0x7ff8edbc0000 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 3572 start_va = 0x7ff8edd60000 end_va = 0x7ff8edfdbfff entry_point = 0x7ff8edd60000 region_type = mapped_file name = "combase.dll" filename = "\\Windows\\System32\\combase.dll" (normalized: "c:\\windows\\system32\\combase.dll") Region: id = 3573 start_va = 0x7ff8ee0b0000 end_va = 0x7ff8ee14cfff entry_point = 0x7ff8ee0b0000 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 3574 start_va = 0x7ff8ee190000 end_va = 0x7ff8ee235fff entry_point = 0x7ff8ee190000 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Thread: id = 512 os_tid = 0xa28 Thread: id = 516 os_tid = 0xf0 Thread: id = 517 os_tid = 0x67c Thread: id = 518 os_tid = 0x5c0 Thread: id = 521 os_tid = 0xe18 Thread: id = 522 os_tid = 0x41c Thread: id = 523 os_tid = 0xe24 Process: id = "31" image_name = "backgroundtaskhost.exe" filename = "c:\\windows\\system32\\backgroundtaskhost.exe" page_root = "0x257e6000" os_pid = "0xdfc" os_integrity_level = "0x1000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "11" os_parent_pid = "0x248" cmd_line = "\"C:\\Windows\\system32\\backgroundTaskHost.exe\" -ServerName:CortanaUI.AppXy7vb4pc2dr3kc93kfc509b1d0arkfb2x.mca" cur_dir = "C:\\Windows\\SystemApps\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\" os_username = "LHNIWSJ\\CIiHmnxMn6Ps" os_groups = "LHNIWSJ\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x10], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:00014ee5" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Process: id = "32" image_name = "xyuencrypt.exe" filename = "c:\\users\\ciihmnxmn6ps\\desktop\\xyuencrypt.exe" page_root = "0x57713000" os_pid = "0xdb0" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "5" os_parent_pid = "0xff8" cmd_line = "C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XyuEncrypt.exe" cur_dir = "C:\\Windows\\system32\\" os_username = "LHNIWSJ\\CIiHmnxMn6Ps" os_groups = "LHNIWSJ\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x10], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:00014ee5" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 3575 start_va = 0xd20000 end_va = 0xd29fff entry_point = 0xd20000 region_type = mapped_file name = "xyuencrypt.exe" filename = "\\Users\\CIiHmnxMn6Ps\\Desktop\\XyuEncrypt.exe" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\xyuencrypt.exe") Region: id = 3576 start_va = 0xd30000 end_va = 0xd4ffff entry_point = 0x0 region_type = private name = "private_0x0000000000d30000" filename = "" Region: id = 3577 start_va = 0xd50000 end_va = 0xd63fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000d50000" filename = "" Region: id = 3578 start_va = 0xd70000 end_va = 0xe6ffff entry_point = 0x0 region_type = private name = "private_0x0000000000d70000" filename = "" Region: id = 3579 start_va = 0xe70000 end_va = 0xe73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000e70000" filename = "" Region: id = 3580 start_va = 0xe80000 end_va = 0xe80fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000e80000" filename = "" Region: id = 3581 start_va = 0xe90000 end_va = 0xe91fff entry_point = 0x0 region_type = private name = "private_0x0000000000e90000" filename = "" Region: id = 3582 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 3583 start_va = 0x7ff5ffa70000 end_va = 0x7ff5ffa92fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007ff5ffa70000" filename = "" Region: id = 3584 start_va = 0x7ff5ffa9b000 end_va = 0x7ff5ffa9bfff entry_point = 0x0 region_type = private name = "private_0x00007ff5ffa9b000" filename = "" Region: id = 3585 start_va = 0x7ff5ffa9e000 end_va = 0x7ff5ffa9ffff entry_point = 0x0 region_type = private name = "private_0x00007ff5ffa9e000" filename = "" Region: id = 3586 start_va = 0x7ff8ee380000 end_va = 0x7ff8ee541fff entry_point = 0x7ff8ee380000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 3587 start_va = 0xd30000 end_va = 0xd3ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000d30000" filename = "" Region: id = 3588 start_va = 0xea0000 end_va = 0xf5dfff entry_point = 0xea0000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 3589 start_va = 0x1090000 end_va = 0x118ffff entry_point = 0x0 region_type = private name = "private_0x0000000001090000" filename = "" Region: id = 3590 start_va = 0x7ff5ff970000 end_va = 0x7ff5ffa6ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007ff5ff970000" filename = "" Region: id = 3591 start_va = 0x7ff8d5fe0000 end_va = 0x7ff8d6047fff entry_point = 0x7ff8d5fe0000 region_type = mapped_file name = "mscoree.dll" filename = "\\Windows\\System32\\mscoree.dll" (normalized: "c:\\windows\\system32\\mscoree.dll") Region: id = 3592 start_va = 0x7ff8eb870000 end_va = 0x7ff8eba4cfff entry_point = 0x7ff8eb870000 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 3593 start_va = 0x7ff8ee2d0000 end_va = 0x7ff8ee37cfff entry_point = 0x7ff8ee2d0000 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 3594 start_va = 0xd40000 end_va = 0xd46fff entry_point = 0x0 region_type = private name = "private_0x0000000000d40000" filename = "" Region: id = 3595 start_va = 0xf60000 end_va = 0x105ffff entry_point = 0x0 region_type = private name = "private_0x0000000000f60000" filename = "" Region: id = 3596 start_va = 0x1060000 end_va = 0x1066fff entry_point = 0x0 region_type = private name = "private_0x0000000001060000" filename = "" Region: id = 3597 start_va = 0x12d0000 end_va = 0x12dffff entry_point = 0x0 region_type = private name = "private_0x00000000012d0000" filename = "" Region: id = 3598 start_va = 0x1300000 end_va = 0x130ffff entry_point = 0x0 region_type = private name = "private_0x0000000001300000" filename = "" Region: id = 3599 start_va = 0x7ff5ffa9c000 end_va = 0x7ff5ffa9dfff entry_point = 0x0 region_type = private name = "private_0x00007ff5ffa9c000" filename = "" Region: id = 3600 start_va = 0x7ff8ec240000 end_va = 0x7ff8ec29afff entry_point = 0x7ff8ec240000 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 3601 start_va = 0x7ff8ec450000 end_va = 0x7ff8ec575fff entry_point = 0x7ff8ec450000 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 3602 start_va = 0x7ff8ee0b0000 end_va = 0x7ff8ee14cfff entry_point = 0x7ff8ee0b0000 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 3603 start_va = 0x7ff8ee190000 end_va = 0x7ff8ee235fff entry_point = 0x7ff8ee190000 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 3604 start_va = 0x7ff8d5f40000 end_va = 0x7ff8d5fd6fff entry_point = 0x7ff8d5f40000 region_type = mapped_file name = "mscoreei.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\mscoreei.dll") Region: id = 3605 start_va = 0x1070000 end_va = 0x1076fff entry_point = 0x0 region_type = private name = "private_0x0000000001070000" filename = "" Region: id = 3606 start_va = 0x1080000 end_va = 0x1080fff entry_point = 0x0 region_type = private name = "private_0x0000000001080000" filename = "" Region: id = 3607 start_va = 0x1190000 end_va = 0x1190fff entry_point = 0x0 region_type = private name = "private_0x0000000001190000" filename = "" Region: id = 3608 start_va = 0x1310000 end_va = 0x1497fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001310000" filename = "" Region: id = 3609 start_va = 0x14a0000 end_va = 0x1620fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000014a0000" filename = "" Region: id = 3610 start_va = 0x1630000 end_va = 0x2a2ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001630000" filename = "" Region: id = 3611 start_va = 0x7ff8ebdc0000 end_va = 0x7ff8ebf0dfff entry_point = 0x7ff8ebdc0000 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 3612 start_va = 0x7ff8ec0c0000 end_va = 0x7ff8ec21bfff entry_point = 0x7ff8ec0c0000 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\System32\\msctf.dll" (normalized: "c:\\windows\\system32\\msctf.dll") Region: id = 3613 start_va = 0x7ff8edbc0000 end_va = 0x7ff8edd44fff entry_point = 0x7ff8edbc0000 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 3614 start_va = 0x7ff8edd60000 end_va = 0x7ff8edfdbfff entry_point = 0x7ff8edd60000 region_type = mapped_file name = "combase.dll" filename = "\\Windows\\System32\\combase.dll" (normalized: "c:\\windows\\system32\\combase.dll") Region: id = 3615 start_va = 0x7ff8edfe0000 end_va = 0x7ff8ee030fff entry_point = 0x7ff8edfe0000 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\System32\\shlwapi.dll" (normalized: "c:\\windows\\system32\\shlwapi.dll") Region: id = 3616 start_va = 0x7ff8ee150000 end_va = 0x7ff8ee185fff entry_point = 0x7ff8ee150000 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 3617 start_va = 0x7ff8eae20000 end_va = 0x7ff8eae2efff entry_point = 0x7ff8eae20000 region_type = mapped_file name = "kernel.appcore.dll" filename = "\\Windows\\System32\\kernel.appcore.dll" (normalized: "c:\\windows\\system32\\kernel.appcore.dll") Region: id = 3618 start_va = 0x7ff8e3a50000 end_va = 0x7ff8e3a59fff entry_point = 0x7ff8e3a50000 region_type = mapped_file name = "version.dll" filename = "\\Windows\\System32\\version.dll" (normalized: "c:\\windows\\system32\\version.dll") Region: id = 3619 start_va = 0x7ff8d5180000 end_va = 0x7ff8d5276fff entry_point = 0x7ff8d5180000 region_type = mapped_file name = "msvcr120_clr0400.dll" filename = "\\Windows\\System32\\msvcr120_clr0400.dll" (normalized: "c:\\windows\\system32\\msvcr120_clr0400.dll") Region: id = 3620 start_va = 0x7ff8d5280000 end_va = 0x7ff8d5bd1fff entry_point = 0x7ff8d5280000 region_type = mapped_file name = "clr.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\clr.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\clr.dll") Thread: id = 535 os_tid = 0xdd0 Thread: id = 536 os_tid = 0xd2c Thread: id = 537 os_tid = 0xd20 Thread: id = 539 os_tid = 0xd18 Process: id = "33" image_name = "officec2rclient.exe" filename = "c:\\program files\\common files\\microsoft shared\\clicktorun\\officec2rclient.exe" page_root = "0x52b25000" os_pid = "0xd24" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "child_process" parent_id = "30" os_parent_pid = "0x534" cmd_line = "\"C:\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\OfficeC2RClient.exe\" /frequentupdate SCHEDULEDTASK displaylevel=False" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\BDESVC" [0xe], "NT SERVICE\\BITS" [0xe], "NT SERVICE\\CertPropSvc" [0xa], "NT SERVICE\\DcpSvc" [0xa], "NT SERVICE\\dmwappushservice" [0xa], "NT SERVICE\\DoSvc" [0xa], "NT SERVICE\\DsmSvc" [0xa], "NT SERVICE\\EapHost" [0xa], "NT SERVICE\\IKEEXT" [0xa], "NT SERVICE\\iphlpsvc" [0xe], "NT SERVICE\\LanmanServer" [0xe], "NT SERVICE\\lfsvc" [0xa], "NT SERVICE\\MSiSCSI" [0xa], "NT SERVICE\\NcaSvc" [0xa], "NT SERVICE\\NetSetupSvc" [0xa], "NT SERVICE\\RasAuto" [0xa], "NT SERVICE\\RasMan" [0xa], "NT SERVICE\\RemoteAccess" [0xa], "NT SERVICE\\RetailDemo" [0xa], "NT SERVICE\\Schedule" [0xe], "NT SERVICE\\SCPolicySvc" [0xa], "NT SERVICE\\SENS" [0xe], "NT SERVICE\\SessionEnv" [0xa], "NT SERVICE\\SharedAccess" [0xa], "NT SERVICE\\ShellHWDetection" [0xe], "NT SERVICE\\UsoSvc" [0xa], "NT SERVICE\\wercplsupport" [0xa], "NT SERVICE\\Winmgmt" [0xe], "NT SERVICE\\wlidsvc" [0xa], "NT SERVICE\\wuauserv" [0xe], "NT SERVICE\\XboxNetApiSvc" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000b1c8" [0xc0000007], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Region: id = 3621 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 3622 start_va = 0x9d23310000 end_va = 0x9d2332ffff entry_point = 0x0 region_type = private name = "private_0x0000009d23310000" filename = "" Region: id = 3623 start_va = 0x9d23330000 end_va = 0x9d23343fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000009d23330000" filename = "" Region: id = 3624 start_va = 0x9d23350000 end_va = 0x9d2344ffff entry_point = 0x0 region_type = private name = "private_0x0000009d23350000" filename = "" Region: id = 3625 start_va = 0x7df5ff8f0000 end_va = 0x7ff5ff8effff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007df5ff8f0000" filename = "" Region: id = 3626 start_va = 0x7ff7fa670000 end_va = 0x7ff7fa692fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007ff7fa670000" filename = "" Region: id = 3627 start_va = 0x7ff7fa69a000 end_va = 0x7ff7fa69afff entry_point = 0x0 region_type = private name = "private_0x00007ff7fa69a000" filename = "" Region: id = 3628 start_va = 0x7ff7fa69e000 end_va = 0x7ff7fa69ffff entry_point = 0x0 region_type = private name = "private_0x00007ff7fa69e000" filename = "" Region: id = 3629 start_va = 0x7ff7facb0000 end_va = 0x7ff7fc3d3fff entry_point = 0x7ff7facb0000 region_type = mapped_file name = "officec2rclient.exe" filename = "\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RClient.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officec2rclient.exe") Region: id = 3630 start_va = 0x7ff8ee380000 end_va = 0x7ff8ee541fff entry_point = 0x7ff8ee380000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Thread: id = 538 os_tid = 0xd34